Loading...
Note: File does not exist in v4.17.
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org>
4 * Copyright (C) 2018 Samsung Electronics Co., Ltd.
5 */
6
7#include <linux/moduleparam.h>
8
9#include "glob.h"
10#include "oplock.h"
11
12#include "smb_common.h"
13#include "smbstatus.h"
14#include "connection.h"
15#include "mgmt/user_session.h"
16#include "mgmt/share_config.h"
17#include "mgmt/tree_connect.h"
18
19static LIST_HEAD(lease_table_list);
20static DEFINE_RWLOCK(lease_list_lock);
21
22/**
23 * alloc_opinfo() - allocate a new opinfo object for oplock info
24 * @work: smb work
25 * @id: fid of open file
26 * @Tid: tree id of connection
27 *
28 * Return: allocated opinfo object on success, otherwise NULL
29 */
30static struct oplock_info *alloc_opinfo(struct ksmbd_work *work,
31 u64 id, __u16 Tid)
32{
33 struct ksmbd_conn *conn = work->conn;
34 struct ksmbd_session *sess = work->sess;
35 struct oplock_info *opinfo;
36
37 opinfo = kzalloc(sizeof(struct oplock_info), GFP_KERNEL);
38 if (!opinfo)
39 return NULL;
40
41 opinfo->sess = sess;
42 opinfo->conn = conn;
43 opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
44 opinfo->op_state = OPLOCK_STATE_NONE;
45 opinfo->pending_break = 0;
46 opinfo->fid = id;
47 opinfo->Tid = Tid;
48 INIT_LIST_HEAD(&opinfo->op_entry);
49 INIT_LIST_HEAD(&opinfo->interim_list);
50 init_waitqueue_head(&opinfo->oplock_q);
51 init_waitqueue_head(&opinfo->oplock_brk);
52 atomic_set(&opinfo->refcount, 1);
53 atomic_set(&opinfo->breaking_cnt, 0);
54
55 return opinfo;
56}
57
58static void lease_add_list(struct oplock_info *opinfo)
59{
60 struct lease_table *lb = opinfo->o_lease->l_lb;
61
62 spin_lock(&lb->lb_lock);
63 list_add_rcu(&opinfo->lease_entry, &lb->lease_list);
64 spin_unlock(&lb->lb_lock);
65}
66
67static void lease_del_list(struct oplock_info *opinfo)
68{
69 struct lease_table *lb = opinfo->o_lease->l_lb;
70
71 if (!lb)
72 return;
73
74 spin_lock(&lb->lb_lock);
75 if (list_empty(&opinfo->lease_entry)) {
76 spin_unlock(&lb->lb_lock);
77 return;
78 }
79
80 list_del_init(&opinfo->lease_entry);
81 opinfo->o_lease->l_lb = NULL;
82 spin_unlock(&lb->lb_lock);
83}
84
85static void lb_add(struct lease_table *lb)
86{
87 write_lock(&lease_list_lock);
88 list_add(&lb->l_entry, &lease_table_list);
89 write_unlock(&lease_list_lock);
90}
91
92static int alloc_lease(struct oplock_info *opinfo, struct lease_ctx_info *lctx)
93{
94 struct lease *lease;
95
96 lease = kmalloc(sizeof(struct lease), GFP_KERNEL);
97 if (!lease)
98 return -ENOMEM;
99
100 memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE);
101 lease->state = lctx->req_state;
102 lease->new_state = 0;
103 lease->flags = lctx->flags;
104 lease->duration = lctx->duration;
105 lease->is_dir = lctx->is_dir;
106 memcpy(lease->parent_lease_key, lctx->parent_lease_key, SMB2_LEASE_KEY_SIZE);
107 lease->version = lctx->version;
108 lease->epoch = le16_to_cpu(lctx->epoch) + 1;
109 INIT_LIST_HEAD(&opinfo->lease_entry);
110 opinfo->o_lease = lease;
111
112 return 0;
113}
114
115static void free_lease(struct oplock_info *opinfo)
116{
117 struct lease *lease;
118
119 lease = opinfo->o_lease;
120 kfree(lease);
121}
122
123static void free_opinfo(struct oplock_info *opinfo)
124{
125 if (opinfo->is_lease)
126 free_lease(opinfo);
127 kfree(opinfo);
128}
129
130static inline void opinfo_free_rcu(struct rcu_head *rcu_head)
131{
132 struct oplock_info *opinfo;
133
134 opinfo = container_of(rcu_head, struct oplock_info, rcu_head);
135 free_opinfo(opinfo);
136}
137
138struct oplock_info *opinfo_get(struct ksmbd_file *fp)
139{
140 struct oplock_info *opinfo;
141
142 rcu_read_lock();
143 opinfo = rcu_dereference(fp->f_opinfo);
144 if (opinfo && !atomic_inc_not_zero(&opinfo->refcount))
145 opinfo = NULL;
146 rcu_read_unlock();
147
148 return opinfo;
149}
150
151static struct oplock_info *opinfo_get_list(struct ksmbd_inode *ci)
152{
153 struct oplock_info *opinfo;
154
155 if (list_empty(&ci->m_op_list))
156 return NULL;
157
158 rcu_read_lock();
159 opinfo = list_first_or_null_rcu(&ci->m_op_list, struct oplock_info,
160 op_entry);
161 if (opinfo) {
162 if (!atomic_inc_not_zero(&opinfo->refcount))
163 opinfo = NULL;
164 else {
165 atomic_inc(&opinfo->conn->r_count);
166 if (ksmbd_conn_releasing(opinfo->conn)) {
167 atomic_dec(&opinfo->conn->r_count);
168 atomic_dec(&opinfo->refcount);
169 opinfo = NULL;
170 }
171 }
172 }
173
174 rcu_read_unlock();
175
176 return opinfo;
177}
178
179static void opinfo_conn_put(struct oplock_info *opinfo)
180{
181 struct ksmbd_conn *conn;
182
183 if (!opinfo)
184 return;
185
186 conn = opinfo->conn;
187 /*
188 * Checking waitqueue to dropping pending requests on
189 * disconnection. waitqueue_active is safe because it
190 * uses atomic operation for condition.
191 */
192 if (!atomic_dec_return(&conn->r_count) && waitqueue_active(&conn->r_count_q))
193 wake_up(&conn->r_count_q);
194 opinfo_put(opinfo);
195}
196
197void opinfo_put(struct oplock_info *opinfo)
198{
199 if (!atomic_dec_and_test(&opinfo->refcount))
200 return;
201
202 call_rcu(&opinfo->rcu_head, opinfo_free_rcu);
203}
204
205static void opinfo_add(struct oplock_info *opinfo)
206{
207 struct ksmbd_inode *ci = opinfo->o_fp->f_ci;
208
209 write_lock(&ci->m_lock);
210 list_add_rcu(&opinfo->op_entry, &ci->m_op_list);
211 write_unlock(&ci->m_lock);
212}
213
214static void opinfo_del(struct oplock_info *opinfo)
215{
216 struct ksmbd_inode *ci = opinfo->o_fp->f_ci;
217
218 if (opinfo->is_lease) {
219 write_lock(&lease_list_lock);
220 lease_del_list(opinfo);
221 write_unlock(&lease_list_lock);
222 }
223 write_lock(&ci->m_lock);
224 list_del_rcu(&opinfo->op_entry);
225 write_unlock(&ci->m_lock);
226}
227
228static unsigned long opinfo_count(struct ksmbd_file *fp)
229{
230 if (ksmbd_stream_fd(fp))
231 return atomic_read(&fp->f_ci->sop_count);
232 else
233 return atomic_read(&fp->f_ci->op_count);
234}
235
236static void opinfo_count_inc(struct ksmbd_file *fp)
237{
238 if (ksmbd_stream_fd(fp))
239 return atomic_inc(&fp->f_ci->sop_count);
240 else
241 return atomic_inc(&fp->f_ci->op_count);
242}
243
244static void opinfo_count_dec(struct ksmbd_file *fp)
245{
246 if (ksmbd_stream_fd(fp))
247 return atomic_dec(&fp->f_ci->sop_count);
248 else
249 return atomic_dec(&fp->f_ci->op_count);
250}
251
252/**
253 * opinfo_write_to_read() - convert a write oplock to read oplock
254 * @opinfo: current oplock info
255 *
256 * Return: 0 on success, otherwise -EINVAL
257 */
258int opinfo_write_to_read(struct oplock_info *opinfo)
259{
260 struct lease *lease = opinfo->o_lease;
261
262 if (!(opinfo->level == SMB2_OPLOCK_LEVEL_BATCH ||
263 opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)) {
264 pr_err("bad oplock(0x%x)\n", opinfo->level);
265 if (opinfo->is_lease)
266 pr_err("lease state(0x%x)\n", lease->state);
267 return -EINVAL;
268 }
269 opinfo->level = SMB2_OPLOCK_LEVEL_II;
270
271 if (opinfo->is_lease)
272 lease->state = lease->new_state;
273 return 0;
274}
275
276/**
277 * opinfo_read_handle_to_read() - convert a read/handle oplock to read oplock
278 * @opinfo: current oplock info
279 *
280 * Return: 0 on success, otherwise -EINVAL
281 */
282int opinfo_read_handle_to_read(struct oplock_info *opinfo)
283{
284 struct lease *lease = opinfo->o_lease;
285
286 lease->state = lease->new_state;
287 opinfo->level = SMB2_OPLOCK_LEVEL_II;
288 return 0;
289}
290
291/**
292 * opinfo_write_to_none() - convert a write oplock to none
293 * @opinfo: current oplock info
294 *
295 * Return: 0 on success, otherwise -EINVAL
296 */
297int opinfo_write_to_none(struct oplock_info *opinfo)
298{
299 struct lease *lease = opinfo->o_lease;
300
301 if (!(opinfo->level == SMB2_OPLOCK_LEVEL_BATCH ||
302 opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)) {
303 pr_err("bad oplock(0x%x)\n", opinfo->level);
304 if (opinfo->is_lease)
305 pr_err("lease state(0x%x)\n", lease->state);
306 return -EINVAL;
307 }
308 opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
309 if (opinfo->is_lease)
310 lease->state = lease->new_state;
311 return 0;
312}
313
314/**
315 * opinfo_read_to_none() - convert a write read to none
316 * @opinfo: current oplock info
317 *
318 * Return: 0 on success, otherwise -EINVAL
319 */
320int opinfo_read_to_none(struct oplock_info *opinfo)
321{
322 struct lease *lease = opinfo->o_lease;
323
324 if (opinfo->level != SMB2_OPLOCK_LEVEL_II) {
325 pr_err("bad oplock(0x%x)\n", opinfo->level);
326 if (opinfo->is_lease)
327 pr_err("lease state(0x%x)\n", lease->state);
328 return -EINVAL;
329 }
330 opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
331 if (opinfo->is_lease)
332 lease->state = lease->new_state;
333 return 0;
334}
335
336/**
337 * lease_read_to_write() - upgrade lease state from read to write
338 * @opinfo: current lease info
339 *
340 * Return: 0 on success, otherwise -EINVAL
341 */
342int lease_read_to_write(struct oplock_info *opinfo)
343{
344 struct lease *lease = opinfo->o_lease;
345
346 if (!(lease->state & SMB2_LEASE_READ_CACHING_LE)) {
347 ksmbd_debug(OPLOCK, "bad lease state(0x%x)\n", lease->state);
348 return -EINVAL;
349 }
350
351 lease->new_state = SMB2_LEASE_NONE_LE;
352 lease->state |= SMB2_LEASE_WRITE_CACHING_LE;
353 if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE)
354 opinfo->level = SMB2_OPLOCK_LEVEL_BATCH;
355 else
356 opinfo->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE;
357 return 0;
358}
359
360/**
361 * lease_none_upgrade() - upgrade lease state from none
362 * @opinfo: current lease info
363 * @new_state: new lease state
364 *
365 * Return: 0 on success, otherwise -EINVAL
366 */
367static int lease_none_upgrade(struct oplock_info *opinfo, __le32 new_state)
368{
369 struct lease *lease = opinfo->o_lease;
370
371 if (!(lease->state == SMB2_LEASE_NONE_LE)) {
372 ksmbd_debug(OPLOCK, "bad lease state(0x%x)\n", lease->state);
373 return -EINVAL;
374 }
375
376 lease->new_state = SMB2_LEASE_NONE_LE;
377 lease->state = new_state;
378 if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE)
379 if (lease->state & SMB2_LEASE_WRITE_CACHING_LE)
380 opinfo->level = SMB2_OPLOCK_LEVEL_BATCH;
381 else
382 opinfo->level = SMB2_OPLOCK_LEVEL_II;
383 else if (lease->state & SMB2_LEASE_WRITE_CACHING_LE)
384 opinfo->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE;
385 else if (lease->state & SMB2_LEASE_READ_CACHING_LE)
386 opinfo->level = SMB2_OPLOCK_LEVEL_II;
387
388 return 0;
389}
390
391/**
392 * close_id_del_oplock() - release oplock object at file close time
393 * @fp: ksmbd file pointer
394 */
395void close_id_del_oplock(struct ksmbd_file *fp)
396{
397 struct oplock_info *opinfo;
398
399 if (fp->reserve_lease_break)
400 smb_lazy_parent_lease_break_close(fp);
401
402 opinfo = opinfo_get(fp);
403 if (!opinfo)
404 return;
405
406 opinfo_del(opinfo);
407
408 rcu_assign_pointer(fp->f_opinfo, NULL);
409 if (opinfo->op_state == OPLOCK_ACK_WAIT) {
410 opinfo->op_state = OPLOCK_CLOSING;
411 wake_up_interruptible_all(&opinfo->oplock_q);
412 if (opinfo->is_lease) {
413 atomic_set(&opinfo->breaking_cnt, 0);
414 wake_up_interruptible_all(&opinfo->oplock_brk);
415 }
416 }
417
418 opinfo_count_dec(fp);
419 atomic_dec(&opinfo->refcount);
420 opinfo_put(opinfo);
421}
422
423/**
424 * grant_write_oplock() - grant exclusive/batch oplock or write lease
425 * @opinfo_new: new oplock info object
426 * @req_oplock: request oplock
427 * @lctx: lease context information
428 *
429 * Return: 0
430 */
431static void grant_write_oplock(struct oplock_info *opinfo_new, int req_oplock,
432 struct lease_ctx_info *lctx)
433{
434 struct lease *lease = opinfo_new->o_lease;
435
436 if (req_oplock == SMB2_OPLOCK_LEVEL_BATCH)
437 opinfo_new->level = SMB2_OPLOCK_LEVEL_BATCH;
438 else
439 opinfo_new->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE;
440
441 if (lctx) {
442 lease->state = lctx->req_state;
443 memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE);
444 }
445}
446
447/**
448 * grant_read_oplock() - grant level2 oplock or read lease
449 * @opinfo_new: new oplock info object
450 * @lctx: lease context information
451 *
452 * Return: 0
453 */
454static void grant_read_oplock(struct oplock_info *opinfo_new,
455 struct lease_ctx_info *lctx)
456{
457 struct lease *lease = opinfo_new->o_lease;
458
459 opinfo_new->level = SMB2_OPLOCK_LEVEL_II;
460
461 if (lctx) {
462 lease->state = SMB2_LEASE_READ_CACHING_LE;
463 if (lctx->req_state & SMB2_LEASE_HANDLE_CACHING_LE)
464 lease->state |= SMB2_LEASE_HANDLE_CACHING_LE;
465 memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE);
466 }
467}
468
469/**
470 * grant_none_oplock() - grant none oplock or none lease
471 * @opinfo_new: new oplock info object
472 * @lctx: lease context information
473 *
474 * Return: 0
475 */
476static void grant_none_oplock(struct oplock_info *opinfo_new,
477 struct lease_ctx_info *lctx)
478{
479 struct lease *lease = opinfo_new->o_lease;
480
481 opinfo_new->level = SMB2_OPLOCK_LEVEL_NONE;
482
483 if (lctx) {
484 lease->state = 0;
485 memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE);
486 }
487}
488
489static inline int compare_guid_key(struct oplock_info *opinfo,
490 const char *guid1, const char *key1)
491{
492 const char *guid2, *key2;
493
494 guid2 = opinfo->conn->ClientGUID;
495 key2 = opinfo->o_lease->lease_key;
496 if (!memcmp(guid1, guid2, SMB2_CLIENT_GUID_SIZE) &&
497 !memcmp(key1, key2, SMB2_LEASE_KEY_SIZE))
498 return 1;
499
500 return 0;
501}
502
503/**
504 * same_client_has_lease() - check whether current lease request is
505 * from lease owner of file
506 * @ci: master file pointer
507 * @client_guid: Client GUID
508 * @lctx: lease context information
509 *
510 * Return: oplock(lease) object on success, otherwise NULL
511 */
512static struct oplock_info *same_client_has_lease(struct ksmbd_inode *ci,
513 char *client_guid,
514 struct lease_ctx_info *lctx)
515{
516 int ret;
517 struct lease *lease;
518 struct oplock_info *opinfo;
519 struct oplock_info *m_opinfo = NULL;
520
521 if (!lctx)
522 return NULL;
523
524 /*
525 * Compare lease key and client_guid to know request from same owner
526 * of same client
527 */
528 read_lock(&ci->m_lock);
529 list_for_each_entry(opinfo, &ci->m_op_list, op_entry) {
530 if (!opinfo->is_lease)
531 continue;
532 read_unlock(&ci->m_lock);
533 lease = opinfo->o_lease;
534
535 ret = compare_guid_key(opinfo, client_guid, lctx->lease_key);
536 if (ret) {
537 m_opinfo = opinfo;
538 /* skip upgrading lease about breaking lease */
539 if (atomic_read(&opinfo->breaking_cnt)) {
540 read_lock(&ci->m_lock);
541 continue;
542 }
543
544 /* upgrading lease */
545 if ((atomic_read(&ci->op_count) +
546 atomic_read(&ci->sop_count)) == 1) {
547 if (lease->state != SMB2_LEASE_NONE_LE &&
548 lease->state == (lctx->req_state & lease->state)) {
549 lease->epoch++;
550 lease->state |= lctx->req_state;
551 if (lctx->req_state &
552 SMB2_LEASE_WRITE_CACHING_LE)
553 lease_read_to_write(opinfo);
554
555 }
556 } else if ((atomic_read(&ci->op_count) +
557 atomic_read(&ci->sop_count)) > 1) {
558 if (lctx->req_state ==
559 (SMB2_LEASE_READ_CACHING_LE |
560 SMB2_LEASE_HANDLE_CACHING_LE)) {
561 lease->epoch++;
562 lease->state = lctx->req_state;
563 }
564 }
565
566 if (lctx->req_state && lease->state ==
567 SMB2_LEASE_NONE_LE) {
568 lease->epoch++;
569 lease_none_upgrade(opinfo, lctx->req_state);
570 }
571 }
572 read_lock(&ci->m_lock);
573 }
574 read_unlock(&ci->m_lock);
575
576 return m_opinfo;
577}
578
579static void wait_for_break_ack(struct oplock_info *opinfo)
580{
581 int rc = 0;
582
583 rc = wait_event_interruptible_timeout(opinfo->oplock_q,
584 opinfo->op_state == OPLOCK_STATE_NONE ||
585 opinfo->op_state == OPLOCK_CLOSING,
586 OPLOCK_WAIT_TIME);
587
588 /* is this a timeout ? */
589 if (!rc) {
590 if (opinfo->is_lease)
591 opinfo->o_lease->state = SMB2_LEASE_NONE_LE;
592 opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
593 opinfo->op_state = OPLOCK_STATE_NONE;
594 }
595}
596
597static void wake_up_oplock_break(struct oplock_info *opinfo)
598{
599 clear_bit_unlock(0, &opinfo->pending_break);
600 /* memory barrier is needed for wake_up_bit() */
601 smp_mb__after_atomic();
602 wake_up_bit(&opinfo->pending_break, 0);
603}
604
605static int oplock_break_pending(struct oplock_info *opinfo, int req_op_level)
606{
607 while (test_and_set_bit(0, &opinfo->pending_break)) {
608 wait_on_bit(&opinfo->pending_break, 0, TASK_UNINTERRUPTIBLE);
609
610 /* Not immediately break to none. */
611 opinfo->open_trunc = 0;
612
613 if (opinfo->op_state == OPLOCK_CLOSING)
614 return -ENOENT;
615 else if (!opinfo->is_lease && opinfo->level <= req_op_level)
616 return 1;
617 }
618
619 if (!opinfo->is_lease && opinfo->level <= req_op_level) {
620 wake_up_oplock_break(opinfo);
621 return 1;
622 }
623 return 0;
624}
625
626/**
627 * __smb2_oplock_break_noti() - send smb2 oplock break cmd from conn
628 * to client
629 * @wk: smb work object
630 *
631 * There are two ways this function can be called. 1- while file open we break
632 * from exclusive/batch lock to levelII oplock and 2- while file write/truncate
633 * we break from levelII oplock no oplock.
634 * work->request_buf contains oplock_info.
635 */
636static void __smb2_oplock_break_noti(struct work_struct *wk)
637{
638 struct smb2_oplock_break *rsp = NULL;
639 struct ksmbd_work *work = container_of(wk, struct ksmbd_work, work);
640 struct oplock_break_info *br_info = work->request_buf;
641 struct smb2_hdr *rsp_hdr;
642 struct ksmbd_file *fp;
643
644 fp = ksmbd_lookup_durable_fd(br_info->fid);
645 if (!fp)
646 goto out;
647
648 if (allocate_interim_rsp_buf(work)) {
649 pr_err("smb2_allocate_rsp_buf failed! ");
650 ksmbd_fd_put(work, fp);
651 goto out;
652 }
653
654 rsp_hdr = smb2_get_msg(work->response_buf);
655 memset(rsp_hdr, 0, sizeof(struct smb2_hdr) + 2);
656 rsp_hdr->ProtocolId = SMB2_PROTO_NUMBER;
657 rsp_hdr->StructureSize = SMB2_HEADER_STRUCTURE_SIZE;
658 rsp_hdr->CreditRequest = cpu_to_le16(0);
659 rsp_hdr->Command = SMB2_OPLOCK_BREAK;
660 rsp_hdr->Flags = (SMB2_FLAGS_SERVER_TO_REDIR);
661 rsp_hdr->NextCommand = 0;
662 rsp_hdr->MessageId = cpu_to_le64(-1);
663 rsp_hdr->Id.SyncId.ProcessId = 0;
664 rsp_hdr->Id.SyncId.TreeId = 0;
665 rsp_hdr->SessionId = 0;
666 memset(rsp_hdr->Signature, 0, 16);
667
668 rsp = smb2_get_msg(work->response_buf);
669
670 rsp->StructureSize = cpu_to_le16(24);
671 if (!br_info->open_trunc &&
672 (br_info->level == SMB2_OPLOCK_LEVEL_BATCH ||
673 br_info->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE))
674 rsp->OplockLevel = SMB2_OPLOCK_LEVEL_II;
675 else
676 rsp->OplockLevel = SMB2_OPLOCK_LEVEL_NONE;
677 rsp->Reserved = 0;
678 rsp->Reserved2 = 0;
679 rsp->PersistentFid = fp->persistent_id;
680 rsp->VolatileFid = fp->volatile_id;
681
682 ksmbd_fd_put(work, fp);
683 if (ksmbd_iov_pin_rsp(work, (void *)rsp,
684 sizeof(struct smb2_oplock_break)))
685 goto out;
686
687 ksmbd_debug(OPLOCK,
688 "sending oplock break v_id %llu p_id = %llu lock level = %d\n",
689 rsp->VolatileFid, rsp->PersistentFid, rsp->OplockLevel);
690
691 ksmbd_conn_write(work);
692
693out:
694 ksmbd_free_work_struct(work);
695}
696
697/**
698 * smb2_oplock_break_noti() - send smb2 exclusive/batch to level2 oplock
699 * break command from server to client
700 * @opinfo: oplock info object
701 *
702 * Return: 0 on success, otherwise error
703 */
704static int smb2_oplock_break_noti(struct oplock_info *opinfo)
705{
706 struct ksmbd_conn *conn = opinfo->conn;
707 struct oplock_break_info *br_info;
708 int ret = 0;
709 struct ksmbd_work *work = ksmbd_alloc_work_struct();
710
711 if (!work)
712 return -ENOMEM;
713
714 br_info = kmalloc(sizeof(struct oplock_break_info), GFP_KERNEL);
715 if (!br_info) {
716 ksmbd_free_work_struct(work);
717 return -ENOMEM;
718 }
719
720 br_info->level = opinfo->level;
721 br_info->fid = opinfo->fid;
722 br_info->open_trunc = opinfo->open_trunc;
723
724 work->request_buf = (char *)br_info;
725 work->conn = conn;
726 work->sess = opinfo->sess;
727
728 if (opinfo->op_state == OPLOCK_ACK_WAIT) {
729 INIT_WORK(&work->work, __smb2_oplock_break_noti);
730 ksmbd_queue_work(work);
731
732 wait_for_break_ack(opinfo);
733 } else {
734 __smb2_oplock_break_noti(&work->work);
735 if (opinfo->level == SMB2_OPLOCK_LEVEL_II)
736 opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
737 }
738 return ret;
739}
740
741/**
742 * __smb2_lease_break_noti() - send lease break command from server
743 * to client
744 * @wk: smb work object
745 */
746static void __smb2_lease_break_noti(struct work_struct *wk)
747{
748 struct smb2_lease_break *rsp = NULL;
749 struct ksmbd_work *work = container_of(wk, struct ksmbd_work, work);
750 struct lease_break_info *br_info = work->request_buf;
751 struct smb2_hdr *rsp_hdr;
752
753 if (allocate_interim_rsp_buf(work)) {
754 ksmbd_debug(OPLOCK, "smb2_allocate_rsp_buf failed! ");
755 goto out;
756 }
757
758 rsp_hdr = smb2_get_msg(work->response_buf);
759 memset(rsp_hdr, 0, sizeof(struct smb2_hdr) + 2);
760 rsp_hdr->ProtocolId = SMB2_PROTO_NUMBER;
761 rsp_hdr->StructureSize = SMB2_HEADER_STRUCTURE_SIZE;
762 rsp_hdr->CreditRequest = cpu_to_le16(0);
763 rsp_hdr->Command = SMB2_OPLOCK_BREAK;
764 rsp_hdr->Flags = (SMB2_FLAGS_SERVER_TO_REDIR);
765 rsp_hdr->NextCommand = 0;
766 rsp_hdr->MessageId = cpu_to_le64(-1);
767 rsp_hdr->Id.SyncId.ProcessId = 0;
768 rsp_hdr->Id.SyncId.TreeId = 0;
769 rsp_hdr->SessionId = 0;
770 memset(rsp_hdr->Signature, 0, 16);
771
772 rsp = smb2_get_msg(work->response_buf);
773 rsp->StructureSize = cpu_to_le16(44);
774 rsp->Epoch = br_info->epoch;
775 rsp->Flags = 0;
776
777 if (br_info->curr_state & (SMB2_LEASE_WRITE_CACHING_LE |
778 SMB2_LEASE_HANDLE_CACHING_LE))
779 rsp->Flags = SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED;
780
781 memcpy(rsp->LeaseKey, br_info->lease_key, SMB2_LEASE_KEY_SIZE);
782 rsp->CurrentLeaseState = br_info->curr_state;
783 rsp->NewLeaseState = br_info->new_state;
784 rsp->BreakReason = 0;
785 rsp->AccessMaskHint = 0;
786 rsp->ShareMaskHint = 0;
787
788 if (ksmbd_iov_pin_rsp(work, (void *)rsp,
789 sizeof(struct smb2_lease_break)))
790 goto out;
791
792 ksmbd_conn_write(work);
793
794out:
795 ksmbd_free_work_struct(work);
796}
797
798/**
799 * smb2_lease_break_noti() - break lease when a new client request
800 * write lease
801 * @opinfo: conains lease state information
802 *
803 * Return: 0 on success, otherwise error
804 */
805static int smb2_lease_break_noti(struct oplock_info *opinfo)
806{
807 struct ksmbd_conn *conn = opinfo->conn;
808 struct list_head *tmp, *t;
809 struct ksmbd_work *work;
810 struct lease_break_info *br_info;
811 struct lease *lease = opinfo->o_lease;
812
813 work = ksmbd_alloc_work_struct();
814 if (!work)
815 return -ENOMEM;
816
817 br_info = kmalloc(sizeof(struct lease_break_info), GFP_KERNEL);
818 if (!br_info) {
819 ksmbd_free_work_struct(work);
820 return -ENOMEM;
821 }
822
823 br_info->curr_state = lease->state;
824 br_info->new_state = lease->new_state;
825 if (lease->version == 2)
826 br_info->epoch = cpu_to_le16(++lease->epoch);
827 else
828 br_info->epoch = 0;
829 memcpy(br_info->lease_key, lease->lease_key, SMB2_LEASE_KEY_SIZE);
830
831 work->request_buf = (char *)br_info;
832 work->conn = conn;
833 work->sess = opinfo->sess;
834
835 if (opinfo->op_state == OPLOCK_ACK_WAIT) {
836 list_for_each_safe(tmp, t, &opinfo->interim_list) {
837 struct ksmbd_work *in_work;
838
839 in_work = list_entry(tmp, struct ksmbd_work,
840 interim_entry);
841 setup_async_work(in_work, NULL, NULL);
842 smb2_send_interim_resp(in_work, STATUS_PENDING);
843 list_del_init(&in_work->interim_entry);
844 release_async_work(in_work);
845 }
846 INIT_WORK(&work->work, __smb2_lease_break_noti);
847 ksmbd_queue_work(work);
848 wait_for_break_ack(opinfo);
849 } else {
850 __smb2_lease_break_noti(&work->work);
851 if (opinfo->o_lease->new_state == SMB2_LEASE_NONE_LE) {
852 opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
853 opinfo->o_lease->state = SMB2_LEASE_NONE_LE;
854 }
855 }
856 return 0;
857}
858
859static void wait_lease_breaking(struct oplock_info *opinfo)
860{
861 if (!opinfo->is_lease)
862 return;
863
864 wake_up_interruptible_all(&opinfo->oplock_brk);
865 if (atomic_read(&opinfo->breaking_cnt)) {
866 int ret = 0;
867
868 ret = wait_event_interruptible_timeout(opinfo->oplock_brk,
869 atomic_read(&opinfo->breaking_cnt) == 0,
870 HZ);
871 if (!ret)
872 atomic_set(&opinfo->breaking_cnt, 0);
873 }
874}
875
876static int oplock_break(struct oplock_info *brk_opinfo, int req_op_level)
877{
878 int err = 0;
879
880 /* Need to break exclusive/batch oplock, write lease or overwrite_if */
881 ksmbd_debug(OPLOCK,
882 "request to send oplock(level : 0x%x) break notification\n",
883 brk_opinfo->level);
884
885 if (brk_opinfo->is_lease) {
886 struct lease *lease = brk_opinfo->o_lease;
887
888 atomic_inc(&brk_opinfo->breaking_cnt);
889
890 err = oplock_break_pending(brk_opinfo, req_op_level);
891 if (err)
892 return err < 0 ? err : 0;
893
894 if (brk_opinfo->open_trunc) {
895 /*
896 * Create overwrite break trigger the lease break to
897 * none.
898 */
899 lease->new_state = SMB2_LEASE_NONE_LE;
900 } else {
901 if (lease->state & SMB2_LEASE_WRITE_CACHING_LE) {
902 if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE)
903 lease->new_state =
904 SMB2_LEASE_READ_CACHING_LE |
905 SMB2_LEASE_HANDLE_CACHING_LE;
906 else
907 lease->new_state =
908 SMB2_LEASE_READ_CACHING_LE;
909 } else {
910 if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE &&
911 !lease->is_dir)
912 lease->new_state =
913 SMB2_LEASE_READ_CACHING_LE;
914 else
915 lease->new_state = SMB2_LEASE_NONE_LE;
916 }
917 }
918
919 if (lease->state & (SMB2_LEASE_WRITE_CACHING_LE |
920 SMB2_LEASE_HANDLE_CACHING_LE))
921 brk_opinfo->op_state = OPLOCK_ACK_WAIT;
922 else
923 atomic_dec(&brk_opinfo->breaking_cnt);
924 } else {
925 err = oplock_break_pending(brk_opinfo, req_op_level);
926 if (err)
927 return err < 0 ? err : 0;
928
929 if (brk_opinfo->level == SMB2_OPLOCK_LEVEL_BATCH ||
930 brk_opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)
931 brk_opinfo->op_state = OPLOCK_ACK_WAIT;
932 }
933
934 if (brk_opinfo->is_lease)
935 err = smb2_lease_break_noti(brk_opinfo);
936 else
937 err = smb2_oplock_break_noti(brk_opinfo);
938
939 ksmbd_debug(OPLOCK, "oplock granted = %d\n", brk_opinfo->level);
940 if (brk_opinfo->op_state == OPLOCK_CLOSING)
941 err = -ENOENT;
942 wake_up_oplock_break(brk_opinfo);
943
944 wait_lease_breaking(brk_opinfo);
945
946 return err;
947}
948
949void destroy_lease_table(struct ksmbd_conn *conn)
950{
951 struct lease_table *lb, *lbtmp;
952 struct oplock_info *opinfo;
953
954 write_lock(&lease_list_lock);
955 if (list_empty(&lease_table_list)) {
956 write_unlock(&lease_list_lock);
957 return;
958 }
959
960 list_for_each_entry_safe(lb, lbtmp, &lease_table_list, l_entry) {
961 if (conn && memcmp(lb->client_guid, conn->ClientGUID,
962 SMB2_CLIENT_GUID_SIZE))
963 continue;
964again:
965 rcu_read_lock();
966 list_for_each_entry_rcu(opinfo, &lb->lease_list,
967 lease_entry) {
968 rcu_read_unlock();
969 lease_del_list(opinfo);
970 goto again;
971 }
972 rcu_read_unlock();
973 list_del(&lb->l_entry);
974 kfree(lb);
975 }
976 write_unlock(&lease_list_lock);
977}
978
979int find_same_lease_key(struct ksmbd_session *sess, struct ksmbd_inode *ci,
980 struct lease_ctx_info *lctx)
981{
982 struct oplock_info *opinfo;
983 int err = 0;
984 struct lease_table *lb;
985
986 if (!lctx)
987 return err;
988
989 read_lock(&lease_list_lock);
990 if (list_empty(&lease_table_list)) {
991 read_unlock(&lease_list_lock);
992 return 0;
993 }
994
995 list_for_each_entry(lb, &lease_table_list, l_entry) {
996 if (!memcmp(lb->client_guid, sess->ClientGUID,
997 SMB2_CLIENT_GUID_SIZE))
998 goto found;
999 }
1000 read_unlock(&lease_list_lock);
1001
1002 return 0;
1003
1004found:
1005 rcu_read_lock();
1006 list_for_each_entry_rcu(opinfo, &lb->lease_list, lease_entry) {
1007 if (!atomic_inc_not_zero(&opinfo->refcount))
1008 continue;
1009 rcu_read_unlock();
1010 if (opinfo->o_fp->f_ci == ci)
1011 goto op_next;
1012 err = compare_guid_key(opinfo, sess->ClientGUID,
1013 lctx->lease_key);
1014 if (err) {
1015 err = -EINVAL;
1016 ksmbd_debug(OPLOCK,
1017 "found same lease key is already used in other files\n");
1018 opinfo_put(opinfo);
1019 goto out;
1020 }
1021op_next:
1022 opinfo_put(opinfo);
1023 rcu_read_lock();
1024 }
1025 rcu_read_unlock();
1026
1027out:
1028 read_unlock(&lease_list_lock);
1029 return err;
1030}
1031
1032static void copy_lease(struct oplock_info *op1, struct oplock_info *op2)
1033{
1034 struct lease *lease1 = op1->o_lease;
1035 struct lease *lease2 = op2->o_lease;
1036
1037 op2->level = op1->level;
1038 lease2->state = lease1->state;
1039 memcpy(lease2->lease_key, lease1->lease_key,
1040 SMB2_LEASE_KEY_SIZE);
1041 lease2->duration = lease1->duration;
1042 lease2->flags = lease1->flags;
1043 lease2->epoch = lease1->epoch;
1044 lease2->version = lease1->version;
1045}
1046
1047static int add_lease_global_list(struct oplock_info *opinfo)
1048{
1049 struct lease_table *lb;
1050
1051 read_lock(&lease_list_lock);
1052 list_for_each_entry(lb, &lease_table_list, l_entry) {
1053 if (!memcmp(lb->client_guid, opinfo->conn->ClientGUID,
1054 SMB2_CLIENT_GUID_SIZE)) {
1055 opinfo->o_lease->l_lb = lb;
1056 lease_add_list(opinfo);
1057 read_unlock(&lease_list_lock);
1058 return 0;
1059 }
1060 }
1061 read_unlock(&lease_list_lock);
1062
1063 lb = kmalloc(sizeof(struct lease_table), GFP_KERNEL);
1064 if (!lb)
1065 return -ENOMEM;
1066
1067 memcpy(lb->client_guid, opinfo->conn->ClientGUID,
1068 SMB2_CLIENT_GUID_SIZE);
1069 INIT_LIST_HEAD(&lb->lease_list);
1070 spin_lock_init(&lb->lb_lock);
1071 opinfo->o_lease->l_lb = lb;
1072 lease_add_list(opinfo);
1073 lb_add(lb);
1074 return 0;
1075}
1076
1077static void set_oplock_level(struct oplock_info *opinfo, int level,
1078 struct lease_ctx_info *lctx)
1079{
1080 switch (level) {
1081 case SMB2_OPLOCK_LEVEL_BATCH:
1082 case SMB2_OPLOCK_LEVEL_EXCLUSIVE:
1083 grant_write_oplock(opinfo, level, lctx);
1084 break;
1085 case SMB2_OPLOCK_LEVEL_II:
1086 grant_read_oplock(opinfo, lctx);
1087 break;
1088 default:
1089 grant_none_oplock(opinfo, lctx);
1090 break;
1091 }
1092}
1093
1094void smb_send_parent_lease_break_noti(struct ksmbd_file *fp,
1095 struct lease_ctx_info *lctx)
1096{
1097 struct oplock_info *opinfo;
1098 struct ksmbd_inode *p_ci = NULL;
1099
1100 if (lctx->version != 2)
1101 return;
1102
1103 p_ci = ksmbd_inode_lookup_lock(fp->filp->f_path.dentry->d_parent);
1104 if (!p_ci)
1105 return;
1106
1107 read_lock(&p_ci->m_lock);
1108 list_for_each_entry(opinfo, &p_ci->m_op_list, op_entry) {
1109 if (!opinfo->is_lease)
1110 continue;
1111
1112 if (opinfo->o_lease->state != SMB2_OPLOCK_LEVEL_NONE &&
1113 (!(lctx->flags & SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE) ||
1114 !compare_guid_key(opinfo, fp->conn->ClientGUID,
1115 lctx->parent_lease_key))) {
1116 if (!atomic_inc_not_zero(&opinfo->refcount))
1117 continue;
1118
1119 atomic_inc(&opinfo->conn->r_count);
1120 if (ksmbd_conn_releasing(opinfo->conn)) {
1121 atomic_dec(&opinfo->conn->r_count);
1122 continue;
1123 }
1124
1125 read_unlock(&p_ci->m_lock);
1126 oplock_break(opinfo, SMB2_OPLOCK_LEVEL_NONE);
1127 opinfo_conn_put(opinfo);
1128 read_lock(&p_ci->m_lock);
1129 }
1130 }
1131 read_unlock(&p_ci->m_lock);
1132
1133 ksmbd_inode_put(p_ci);
1134}
1135
1136void smb_lazy_parent_lease_break_close(struct ksmbd_file *fp)
1137{
1138 struct oplock_info *opinfo;
1139 struct ksmbd_inode *p_ci = NULL;
1140
1141 rcu_read_lock();
1142 opinfo = rcu_dereference(fp->f_opinfo);
1143 rcu_read_unlock();
1144
1145 if (!opinfo->is_lease || opinfo->o_lease->version != 2)
1146 return;
1147
1148 p_ci = ksmbd_inode_lookup_lock(fp->filp->f_path.dentry->d_parent);
1149 if (!p_ci)
1150 return;
1151
1152 read_lock(&p_ci->m_lock);
1153 list_for_each_entry(opinfo, &p_ci->m_op_list, op_entry) {
1154 if (!opinfo->is_lease)
1155 continue;
1156
1157 if (opinfo->o_lease->state != SMB2_OPLOCK_LEVEL_NONE) {
1158 if (!atomic_inc_not_zero(&opinfo->refcount))
1159 continue;
1160
1161 atomic_inc(&opinfo->conn->r_count);
1162 if (ksmbd_conn_releasing(opinfo->conn)) {
1163 atomic_dec(&opinfo->conn->r_count);
1164 continue;
1165 }
1166 read_unlock(&p_ci->m_lock);
1167 oplock_break(opinfo, SMB2_OPLOCK_LEVEL_NONE);
1168 opinfo_conn_put(opinfo);
1169 read_lock(&p_ci->m_lock);
1170 }
1171 }
1172 read_unlock(&p_ci->m_lock);
1173
1174 ksmbd_inode_put(p_ci);
1175}
1176
1177/**
1178 * smb_grant_oplock() - handle oplock/lease request on file open
1179 * @work: smb work
1180 * @req_op_level: oplock level
1181 * @pid: id of open file
1182 * @fp: ksmbd file pointer
1183 * @tid: Tree id of connection
1184 * @lctx: lease context information on file open
1185 * @share_ret: share mode
1186 *
1187 * Return: 0 on success, otherwise error
1188 */
1189int smb_grant_oplock(struct ksmbd_work *work, int req_op_level, u64 pid,
1190 struct ksmbd_file *fp, __u16 tid,
1191 struct lease_ctx_info *lctx, int share_ret)
1192{
1193 struct ksmbd_session *sess = work->sess;
1194 int err = 0;
1195 struct oplock_info *opinfo = NULL, *prev_opinfo = NULL;
1196 struct ksmbd_inode *ci = fp->f_ci;
1197 bool prev_op_has_lease;
1198 __le32 prev_op_state = 0;
1199
1200 /* Only v2 leases handle the directory */
1201 if (S_ISDIR(file_inode(fp->filp)->i_mode)) {
1202 if (!lctx || lctx->version != 2)
1203 return 0;
1204 }
1205
1206 opinfo = alloc_opinfo(work, pid, tid);
1207 if (!opinfo)
1208 return -ENOMEM;
1209
1210 if (lctx) {
1211 err = alloc_lease(opinfo, lctx);
1212 if (err)
1213 goto err_out;
1214 opinfo->is_lease = 1;
1215 }
1216
1217 /* ci does not have any oplock */
1218 if (!opinfo_count(fp))
1219 goto set_lev;
1220
1221 /* grant none-oplock if second open is trunc */
1222 if (fp->attrib_only && fp->cdoption != FILE_OVERWRITE_IF_LE &&
1223 fp->cdoption != FILE_OVERWRITE_LE &&
1224 fp->cdoption != FILE_SUPERSEDE_LE) {
1225 req_op_level = SMB2_OPLOCK_LEVEL_NONE;
1226 goto set_lev;
1227 }
1228
1229 if (lctx) {
1230 struct oplock_info *m_opinfo;
1231
1232 /* is lease already granted ? */
1233 m_opinfo = same_client_has_lease(ci, sess->ClientGUID,
1234 lctx);
1235 if (m_opinfo) {
1236 copy_lease(m_opinfo, opinfo);
1237 if (atomic_read(&m_opinfo->breaking_cnt))
1238 opinfo->o_lease->flags =
1239 SMB2_LEASE_FLAG_BREAK_IN_PROGRESS_LE;
1240 goto out;
1241 }
1242 }
1243 prev_opinfo = opinfo_get_list(ci);
1244 if (!prev_opinfo ||
1245 (prev_opinfo->level == SMB2_OPLOCK_LEVEL_NONE && lctx)) {
1246 opinfo_conn_put(prev_opinfo);
1247 goto set_lev;
1248 }
1249 prev_op_has_lease = prev_opinfo->is_lease;
1250 if (prev_op_has_lease)
1251 prev_op_state = prev_opinfo->o_lease->state;
1252
1253 if (share_ret < 0 &&
1254 prev_opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
1255 err = share_ret;
1256 opinfo_conn_put(prev_opinfo);
1257 goto err_out;
1258 }
1259
1260 if (prev_opinfo->level != SMB2_OPLOCK_LEVEL_BATCH &&
1261 prev_opinfo->level != SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
1262 opinfo_conn_put(prev_opinfo);
1263 goto op_break_not_needed;
1264 }
1265
1266 list_add(&work->interim_entry, &prev_opinfo->interim_list);
1267 err = oplock_break(prev_opinfo, SMB2_OPLOCK_LEVEL_II);
1268 opinfo_conn_put(prev_opinfo);
1269 if (err == -ENOENT)
1270 goto set_lev;
1271 /* Check all oplock was freed by close */
1272 else if (err < 0)
1273 goto err_out;
1274
1275op_break_not_needed:
1276 if (share_ret < 0) {
1277 err = share_ret;
1278 goto err_out;
1279 }
1280
1281 if (req_op_level != SMB2_OPLOCK_LEVEL_NONE)
1282 req_op_level = SMB2_OPLOCK_LEVEL_II;
1283
1284 /* grant fixed oplock on stacked locking between lease and oplock */
1285 if (prev_op_has_lease && !lctx)
1286 if (prev_op_state & SMB2_LEASE_HANDLE_CACHING_LE)
1287 req_op_level = SMB2_OPLOCK_LEVEL_NONE;
1288
1289 if (!prev_op_has_lease && lctx) {
1290 req_op_level = SMB2_OPLOCK_LEVEL_II;
1291 lctx->req_state = SMB2_LEASE_READ_CACHING_LE;
1292 }
1293
1294set_lev:
1295 set_oplock_level(opinfo, req_op_level, lctx);
1296
1297out:
1298 rcu_assign_pointer(fp->f_opinfo, opinfo);
1299 opinfo->o_fp = fp;
1300
1301 opinfo_count_inc(fp);
1302 opinfo_add(opinfo);
1303 if (opinfo->is_lease) {
1304 err = add_lease_global_list(opinfo);
1305 if (err)
1306 goto err_out;
1307 }
1308
1309 return 0;
1310err_out:
1311 free_opinfo(opinfo);
1312 return err;
1313}
1314
1315/**
1316 * smb_break_all_write_oplock() - break batch/exclusive oplock to level2
1317 * @work: smb work
1318 * @fp: ksmbd file pointer
1319 * @is_trunc: truncate on open
1320 */
1321static void smb_break_all_write_oplock(struct ksmbd_work *work,
1322 struct ksmbd_file *fp, int is_trunc)
1323{
1324 struct oplock_info *brk_opinfo;
1325
1326 brk_opinfo = opinfo_get_list(fp->f_ci);
1327 if (!brk_opinfo)
1328 return;
1329 if (brk_opinfo->level != SMB2_OPLOCK_LEVEL_BATCH &&
1330 brk_opinfo->level != SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
1331 opinfo_conn_put(brk_opinfo);
1332 return;
1333 }
1334
1335 brk_opinfo->open_trunc = is_trunc;
1336 list_add(&work->interim_entry, &brk_opinfo->interim_list);
1337 oplock_break(brk_opinfo, SMB2_OPLOCK_LEVEL_II);
1338 opinfo_conn_put(brk_opinfo);
1339}
1340
1341/**
1342 * smb_break_all_levII_oplock() - send level2 oplock or read lease break command
1343 * from server to client
1344 * @work: smb work
1345 * @fp: ksmbd file pointer
1346 * @is_trunc: truncate on open
1347 */
1348void smb_break_all_levII_oplock(struct ksmbd_work *work, struct ksmbd_file *fp,
1349 int is_trunc)
1350{
1351 struct oplock_info *op, *brk_op;
1352 struct ksmbd_inode *ci;
1353 struct ksmbd_conn *conn = work->conn;
1354
1355 if (!test_share_config_flag(work->tcon->share_conf,
1356 KSMBD_SHARE_FLAG_OPLOCKS))
1357 return;
1358
1359 ci = fp->f_ci;
1360 op = opinfo_get(fp);
1361
1362 rcu_read_lock();
1363 list_for_each_entry_rcu(brk_op, &ci->m_op_list, op_entry) {
1364 if (!atomic_inc_not_zero(&brk_op->refcount))
1365 continue;
1366
1367 atomic_inc(&brk_op->conn->r_count);
1368 if (ksmbd_conn_releasing(brk_op->conn)) {
1369 atomic_dec(&brk_op->conn->r_count);
1370 continue;
1371 }
1372
1373 rcu_read_unlock();
1374 if (brk_op->is_lease && (brk_op->o_lease->state &
1375 (~(SMB2_LEASE_READ_CACHING_LE |
1376 SMB2_LEASE_HANDLE_CACHING_LE)))) {
1377 ksmbd_debug(OPLOCK, "unexpected lease state(0x%x)\n",
1378 brk_op->o_lease->state);
1379 goto next;
1380 } else if (brk_op->level !=
1381 SMB2_OPLOCK_LEVEL_II) {
1382 ksmbd_debug(OPLOCK, "unexpected oplock(0x%x)\n",
1383 brk_op->level);
1384 goto next;
1385 }
1386
1387 /* Skip oplock being break to none */
1388 if (brk_op->is_lease &&
1389 brk_op->o_lease->new_state == SMB2_LEASE_NONE_LE &&
1390 atomic_read(&brk_op->breaking_cnt))
1391 goto next;
1392
1393 if (op && op->is_lease && brk_op->is_lease &&
1394 !memcmp(conn->ClientGUID, brk_op->conn->ClientGUID,
1395 SMB2_CLIENT_GUID_SIZE) &&
1396 !memcmp(op->o_lease->lease_key, brk_op->o_lease->lease_key,
1397 SMB2_LEASE_KEY_SIZE))
1398 goto next;
1399 brk_op->open_trunc = is_trunc;
1400 oplock_break(brk_op, SMB2_OPLOCK_LEVEL_NONE);
1401next:
1402 opinfo_conn_put(brk_op);
1403 rcu_read_lock();
1404 }
1405 rcu_read_unlock();
1406
1407 if (op)
1408 opinfo_put(op);
1409}
1410
1411/**
1412 * smb_break_all_oplock() - break both batch/exclusive and level2 oplock
1413 * @work: smb work
1414 * @fp: ksmbd file pointer
1415 */
1416void smb_break_all_oplock(struct ksmbd_work *work, struct ksmbd_file *fp)
1417{
1418 if (!test_share_config_flag(work->tcon->share_conf,
1419 KSMBD_SHARE_FLAG_OPLOCKS))
1420 return;
1421
1422 smb_break_all_write_oplock(work, fp, 1);
1423 smb_break_all_levII_oplock(work, fp, 1);
1424}
1425
1426/**
1427 * smb2_map_lease_to_oplock() - map lease state to corresponding oplock type
1428 * @lease_state: lease type
1429 *
1430 * Return: 0 if no mapping, otherwise corresponding oplock type
1431 */
1432__u8 smb2_map_lease_to_oplock(__le32 lease_state)
1433{
1434 if (lease_state == (SMB2_LEASE_HANDLE_CACHING_LE |
1435 SMB2_LEASE_READ_CACHING_LE |
1436 SMB2_LEASE_WRITE_CACHING_LE)) {
1437 return SMB2_OPLOCK_LEVEL_BATCH;
1438 } else if (lease_state != SMB2_LEASE_WRITE_CACHING_LE &&
1439 lease_state & SMB2_LEASE_WRITE_CACHING_LE) {
1440 if (!(lease_state & SMB2_LEASE_HANDLE_CACHING_LE))
1441 return SMB2_OPLOCK_LEVEL_EXCLUSIVE;
1442 } else if (lease_state & SMB2_LEASE_READ_CACHING_LE) {
1443 return SMB2_OPLOCK_LEVEL_II;
1444 }
1445 return 0;
1446}
1447
1448/**
1449 * create_lease_buf() - create lease context for open cmd response
1450 * @rbuf: buffer to create lease context response
1451 * @lease: buffer to stored parsed lease state information
1452 */
1453void create_lease_buf(u8 *rbuf, struct lease *lease)
1454{
1455 if (lease->version == 2) {
1456 struct create_lease_v2 *buf = (struct create_lease_v2 *)rbuf;
1457
1458 memset(buf, 0, sizeof(struct create_lease_v2));
1459 memcpy(buf->lcontext.LeaseKey, lease->lease_key,
1460 SMB2_LEASE_KEY_SIZE);
1461 buf->lcontext.LeaseFlags = lease->flags;
1462 buf->lcontext.Epoch = cpu_to_le16(lease->epoch);
1463 buf->lcontext.LeaseState = lease->state;
1464 memcpy(buf->lcontext.ParentLeaseKey, lease->parent_lease_key,
1465 SMB2_LEASE_KEY_SIZE);
1466 buf->ccontext.DataOffset = cpu_to_le16(offsetof
1467 (struct create_lease_v2, lcontext));
1468 buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context_v2));
1469 buf->ccontext.NameOffset = cpu_to_le16(offsetof
1470 (struct create_lease_v2, Name));
1471 buf->ccontext.NameLength = cpu_to_le16(4);
1472 buf->Name[0] = 'R';
1473 buf->Name[1] = 'q';
1474 buf->Name[2] = 'L';
1475 buf->Name[3] = 's';
1476 } else {
1477 struct create_lease *buf = (struct create_lease *)rbuf;
1478
1479 memset(buf, 0, sizeof(struct create_lease));
1480 memcpy(buf->lcontext.LeaseKey, lease->lease_key, SMB2_LEASE_KEY_SIZE);
1481 buf->lcontext.LeaseFlags = lease->flags;
1482 buf->lcontext.LeaseState = lease->state;
1483 buf->ccontext.DataOffset = cpu_to_le16(offsetof
1484 (struct create_lease, lcontext));
1485 buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context));
1486 buf->ccontext.NameOffset = cpu_to_le16(offsetof
1487 (struct create_lease, Name));
1488 buf->ccontext.NameLength = cpu_to_le16(4);
1489 buf->Name[0] = 'R';
1490 buf->Name[1] = 'q';
1491 buf->Name[2] = 'L';
1492 buf->Name[3] = 's';
1493 }
1494}
1495
1496/**
1497 * parse_lease_state() - parse lease context containted in file open request
1498 * @open_req: buffer containing smb2 file open(create) request
1499 * @is_dir: whether leasing file is directory
1500 *
1501 * Return: oplock state, -ENOENT if create lease context not found
1502 */
1503struct lease_ctx_info *parse_lease_state(void *open_req, bool is_dir)
1504{
1505 struct create_context *cc;
1506 struct smb2_create_req *req = (struct smb2_create_req *)open_req;
1507 struct lease_ctx_info *lreq;
1508
1509 cc = smb2_find_context_vals(req, SMB2_CREATE_REQUEST_LEASE, 4);
1510 if (IS_ERR_OR_NULL(cc))
1511 return NULL;
1512
1513 lreq = kzalloc(sizeof(struct lease_ctx_info), GFP_KERNEL);
1514 if (!lreq)
1515 return NULL;
1516
1517 if (sizeof(struct lease_context_v2) == le32_to_cpu(cc->DataLength)) {
1518 struct create_lease_v2 *lc = (struct create_lease_v2 *)cc;
1519
1520 memcpy(lreq->lease_key, lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE);
1521 if (is_dir) {
1522 lreq->req_state = lc->lcontext.LeaseState &
1523 ~SMB2_LEASE_WRITE_CACHING_LE;
1524 lreq->is_dir = true;
1525 } else
1526 lreq->req_state = lc->lcontext.LeaseState;
1527 lreq->flags = lc->lcontext.LeaseFlags;
1528 lreq->epoch = lc->lcontext.Epoch;
1529 lreq->duration = lc->lcontext.LeaseDuration;
1530 memcpy(lreq->parent_lease_key, lc->lcontext.ParentLeaseKey,
1531 SMB2_LEASE_KEY_SIZE);
1532 lreq->version = 2;
1533 } else {
1534 struct create_lease *lc = (struct create_lease *)cc;
1535
1536 memcpy(lreq->lease_key, lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE);
1537 lreq->req_state = lc->lcontext.LeaseState;
1538 lreq->flags = lc->lcontext.LeaseFlags;
1539 lreq->duration = lc->lcontext.LeaseDuration;
1540 lreq->version = 1;
1541 }
1542 return lreq;
1543}
1544
1545/**
1546 * smb2_find_context_vals() - find a particular context info in open request
1547 * @open_req: buffer containing smb2 file open(create) request
1548 * @tag: context name to search for
1549 * @tag_len: the length of tag
1550 *
1551 * Return: pointer to requested context, NULL if @str context not found
1552 * or error pointer if name length is invalid.
1553 */
1554struct create_context *smb2_find_context_vals(void *open_req, const char *tag, int tag_len)
1555{
1556 struct create_context *cc;
1557 unsigned int next = 0;
1558 char *name;
1559 struct smb2_create_req *req = (struct smb2_create_req *)open_req;
1560 unsigned int remain_len, name_off, name_len, value_off, value_len,
1561 cc_len;
1562
1563 /*
1564 * CreateContextsOffset and CreateContextsLength are guaranteed to
1565 * be valid because of ksmbd_smb2_check_message().
1566 */
1567 cc = (struct create_context *)((char *)req +
1568 le32_to_cpu(req->CreateContextsOffset));
1569 remain_len = le32_to_cpu(req->CreateContextsLength);
1570 do {
1571 cc = (struct create_context *)((char *)cc + next);
1572 if (remain_len < offsetof(struct create_context, Buffer))
1573 return ERR_PTR(-EINVAL);
1574
1575 next = le32_to_cpu(cc->Next);
1576 name_off = le16_to_cpu(cc->NameOffset);
1577 name_len = le16_to_cpu(cc->NameLength);
1578 value_off = le16_to_cpu(cc->DataOffset);
1579 value_len = le32_to_cpu(cc->DataLength);
1580 cc_len = next ? next : remain_len;
1581
1582 if ((next & 0x7) != 0 ||
1583 next > remain_len ||
1584 name_off != offsetof(struct create_context, Buffer) ||
1585 name_len < 4 ||
1586 name_off + name_len > cc_len ||
1587 (value_off & 0x7) != 0 ||
1588 (value_len && value_off < name_off + (name_len < 8 ? 8 : name_len)) ||
1589 ((u64)value_off + value_len > cc_len))
1590 return ERR_PTR(-EINVAL);
1591
1592 name = (char *)cc + name_off;
1593 if (name_len == tag_len && !memcmp(name, tag, name_len))
1594 return cc;
1595
1596 remain_len -= next;
1597 } while (next != 0);
1598
1599 return NULL;
1600}
1601
1602/**
1603 * create_durable_rsp_buf() - create durable handle context
1604 * @cc: buffer to create durable context response
1605 */
1606void create_durable_rsp_buf(char *cc)
1607{
1608 struct create_durable_rsp *buf;
1609
1610 buf = (struct create_durable_rsp *)cc;
1611 memset(buf, 0, sizeof(struct create_durable_rsp));
1612 buf->ccontext.DataOffset = cpu_to_le16(offsetof
1613 (struct create_durable_rsp, Data));
1614 buf->ccontext.DataLength = cpu_to_le32(8);
1615 buf->ccontext.NameOffset = cpu_to_le16(offsetof
1616 (struct create_durable_rsp, Name));
1617 buf->ccontext.NameLength = cpu_to_le16(4);
1618 /* SMB2_CREATE_DURABLE_HANDLE_RESPONSE is "DHnQ" */
1619 buf->Name[0] = 'D';
1620 buf->Name[1] = 'H';
1621 buf->Name[2] = 'n';
1622 buf->Name[3] = 'Q';
1623}
1624
1625/**
1626 * create_durable_v2_rsp_buf() - create durable handle v2 context
1627 * @cc: buffer to create durable context response
1628 * @fp: ksmbd file pointer
1629 */
1630void create_durable_v2_rsp_buf(char *cc, struct ksmbd_file *fp)
1631{
1632 struct create_durable_v2_rsp *buf;
1633
1634 buf = (struct create_durable_v2_rsp *)cc;
1635 memset(buf, 0, sizeof(struct create_durable_rsp));
1636 buf->ccontext.DataOffset = cpu_to_le16(offsetof
1637 (struct create_durable_rsp, Data));
1638 buf->ccontext.DataLength = cpu_to_le32(8);
1639 buf->ccontext.NameOffset = cpu_to_le16(offsetof
1640 (struct create_durable_rsp, Name));
1641 buf->ccontext.NameLength = cpu_to_le16(4);
1642 /* SMB2_CREATE_DURABLE_HANDLE_RESPONSE_V2 is "DH2Q" */
1643 buf->Name[0] = 'D';
1644 buf->Name[1] = 'H';
1645 buf->Name[2] = '2';
1646 buf->Name[3] = 'Q';
1647
1648 buf->Timeout = cpu_to_le32(fp->durable_timeout);
1649}
1650
1651/**
1652 * create_mxac_rsp_buf() - create query maximal access context
1653 * @cc: buffer to create maximal access context response
1654 * @maximal_access: maximal access
1655 */
1656void create_mxac_rsp_buf(char *cc, int maximal_access)
1657{
1658 struct create_mxac_rsp *buf;
1659
1660 buf = (struct create_mxac_rsp *)cc;
1661 memset(buf, 0, sizeof(struct create_mxac_rsp));
1662 buf->ccontext.DataOffset = cpu_to_le16(offsetof
1663 (struct create_mxac_rsp, QueryStatus));
1664 buf->ccontext.DataLength = cpu_to_le32(8);
1665 buf->ccontext.NameOffset = cpu_to_le16(offsetof
1666 (struct create_mxac_rsp, Name));
1667 buf->ccontext.NameLength = cpu_to_le16(4);
1668 /* SMB2_CREATE_QUERY_MAXIMAL_ACCESS_RESPONSE is "MxAc" */
1669 buf->Name[0] = 'M';
1670 buf->Name[1] = 'x';
1671 buf->Name[2] = 'A';
1672 buf->Name[3] = 'c';
1673
1674 buf->QueryStatus = STATUS_SUCCESS;
1675 buf->MaximalAccess = cpu_to_le32(maximal_access);
1676}
1677
1678void create_disk_id_rsp_buf(char *cc, __u64 file_id, __u64 vol_id)
1679{
1680 struct create_disk_id_rsp *buf;
1681
1682 buf = (struct create_disk_id_rsp *)cc;
1683 memset(buf, 0, sizeof(struct create_disk_id_rsp));
1684 buf->ccontext.DataOffset = cpu_to_le16(offsetof
1685 (struct create_disk_id_rsp, DiskFileId));
1686 buf->ccontext.DataLength = cpu_to_le32(32);
1687 buf->ccontext.NameOffset = cpu_to_le16(offsetof
1688 (struct create_mxac_rsp, Name));
1689 buf->ccontext.NameLength = cpu_to_le16(4);
1690 /* SMB2_CREATE_QUERY_ON_DISK_ID_RESPONSE is "QFid" */
1691 buf->Name[0] = 'Q';
1692 buf->Name[1] = 'F';
1693 buf->Name[2] = 'i';
1694 buf->Name[3] = 'd';
1695
1696 buf->DiskFileId = cpu_to_le64(file_id);
1697 buf->VolumeId = cpu_to_le64(vol_id);
1698}
1699
1700/**
1701 * create_posix_rsp_buf() - create posix extension context
1702 * @cc: buffer to create posix on posix response
1703 * @fp: ksmbd file pointer
1704 */
1705void create_posix_rsp_buf(char *cc, struct ksmbd_file *fp)
1706{
1707 struct create_posix_rsp *buf;
1708 struct inode *inode = file_inode(fp->filp);
1709 struct mnt_idmap *idmap = file_mnt_idmap(fp->filp);
1710 vfsuid_t vfsuid = i_uid_into_vfsuid(idmap, inode);
1711 vfsgid_t vfsgid = i_gid_into_vfsgid(idmap, inode);
1712
1713 buf = (struct create_posix_rsp *)cc;
1714 memset(buf, 0, sizeof(struct create_posix_rsp));
1715 buf->ccontext.DataOffset = cpu_to_le16(offsetof
1716 (struct create_posix_rsp, nlink));
1717 /*
1718 * DataLength = nlink(4) + reparse_tag(4) + mode(4) +
1719 * domain sid(28) + unix group sid(16).
1720 */
1721 buf->ccontext.DataLength = cpu_to_le32(56);
1722 buf->ccontext.NameOffset = cpu_to_le16(offsetof
1723 (struct create_posix_rsp, Name));
1724 buf->ccontext.NameLength = cpu_to_le16(POSIX_CTXT_DATA_LEN);
1725 /* SMB2_CREATE_TAG_POSIX is "0x93AD25509CB411E7B42383DE968BCD7C" */
1726 buf->Name[0] = 0x93;
1727 buf->Name[1] = 0xAD;
1728 buf->Name[2] = 0x25;
1729 buf->Name[3] = 0x50;
1730 buf->Name[4] = 0x9C;
1731 buf->Name[5] = 0xB4;
1732 buf->Name[6] = 0x11;
1733 buf->Name[7] = 0xE7;
1734 buf->Name[8] = 0xB4;
1735 buf->Name[9] = 0x23;
1736 buf->Name[10] = 0x83;
1737 buf->Name[11] = 0xDE;
1738 buf->Name[12] = 0x96;
1739 buf->Name[13] = 0x8B;
1740 buf->Name[14] = 0xCD;
1741 buf->Name[15] = 0x7C;
1742
1743 buf->nlink = cpu_to_le32(inode->i_nlink);
1744 buf->reparse_tag = cpu_to_le32(fp->volatile_id);
1745 buf->mode = cpu_to_le32(inode->i_mode & 0777);
1746 /*
1747 * SidBuffer(44) contain two sids(Domain sid(28), UNIX group sid(16)).
1748 * Domain sid(28) = revision(1) + num_subauth(1) + authority(6) +
1749 * sub_auth(4 * 4(num_subauth)) + RID(4).
1750 * UNIX group id(16) = revision(1) + num_subauth(1) + authority(6) +
1751 * sub_auth(4 * 1(num_subauth)) + RID(4).
1752 */
1753 id_to_sid(from_kuid_munged(&init_user_ns, vfsuid_into_kuid(vfsuid)),
1754 SIDOWNER, (struct smb_sid *)&buf->SidBuffer[0]);
1755 id_to_sid(from_kgid_munged(&init_user_ns, vfsgid_into_kgid(vfsgid)),
1756 SIDUNIX_GROUP, (struct smb_sid *)&buf->SidBuffer[28]);
1757}
1758
1759/*
1760 * Find lease object(opinfo) for given lease key/fid from lease
1761 * break/file close path.
1762 */
1763/**
1764 * lookup_lease_in_table() - find a matching lease info object
1765 * @conn: connection instance
1766 * @lease_key: lease key to be searched for
1767 *
1768 * Return: opinfo if found matching opinfo, otherwise NULL
1769 */
1770struct oplock_info *lookup_lease_in_table(struct ksmbd_conn *conn,
1771 char *lease_key)
1772{
1773 struct oplock_info *opinfo = NULL, *ret_op = NULL;
1774 struct lease_table *lt;
1775 int ret;
1776
1777 read_lock(&lease_list_lock);
1778 list_for_each_entry(lt, &lease_table_list, l_entry) {
1779 if (!memcmp(lt->client_guid, conn->ClientGUID,
1780 SMB2_CLIENT_GUID_SIZE))
1781 goto found;
1782 }
1783
1784 read_unlock(&lease_list_lock);
1785 return NULL;
1786
1787found:
1788 rcu_read_lock();
1789 list_for_each_entry_rcu(opinfo, <->lease_list, lease_entry) {
1790 if (!atomic_inc_not_zero(&opinfo->refcount))
1791 continue;
1792 rcu_read_unlock();
1793 if (!opinfo->op_state || opinfo->op_state == OPLOCK_CLOSING)
1794 goto op_next;
1795 if (!(opinfo->o_lease->state &
1796 (SMB2_LEASE_HANDLE_CACHING_LE |
1797 SMB2_LEASE_WRITE_CACHING_LE)))
1798 goto op_next;
1799 ret = compare_guid_key(opinfo, conn->ClientGUID,
1800 lease_key);
1801 if (ret) {
1802 ksmbd_debug(OPLOCK, "found opinfo\n");
1803 ret_op = opinfo;
1804 goto out;
1805 }
1806op_next:
1807 opinfo_put(opinfo);
1808 rcu_read_lock();
1809 }
1810 rcu_read_unlock();
1811
1812out:
1813 read_unlock(&lease_list_lock);
1814 return ret_op;
1815}