- if (tcon == NULL || tcon->cfids == NULL || tcon->nohandlecache ||

- is_smb1_server(tcon->ses->server) || (dir_cache_timeout == 0))

- if (!is_smb1(server)) {

- if (iov[0].iov_len <= 4)

- return -EIO;

- i = 0;

- } else {

- if (n_vec < 2 || iov[0].iov_len != 4)

- return -EIO;

- i = 1; /* skip rfc1002 length */

- }

-bool disable_legacy_dialects; /* false by default */

-unsigned int cifs_max_pending = CIFS_MAX_REQ;

-MODULE_PARM_DESC(cifs_max_pending, "Simultaneous requests to server for "

- "CIFS/SMB1 dialect (N/A for SMB3) "

- "Default: 32767 Range: 2 to 32767.");

-module_param(disable_legacy_dialects, bool, 0644);

-MODULE_PARM_DESC(disable_legacy_dialects, "To improve security it may be "

- "helpful to restrict the ability to "

- "override the default dialects (SMB2.1, "

- "SMB3 and SMB3.02) on mount with old "

- "dialects (CIFS/SMB1 and SMB2) since "

- "vers=1.0 (CIFS/SMB1) and vers=2.0 are weaker"

- " and less secure. Default: n/N/0");

- * Some very old servers like DOS and OS/2 used 2 second granularity

- * (while all current servers use 100ns granularity - see MS-DTYP)

- * but 1 second is the maximum allowed granularity for the VFS

- * so for old servers set time granularity to 1 second while for

- * everything else (current servers) set it to 100ns.

- if ((tcon->ses->server->vals->protocol_id == SMB10_PROT_ID) &&

- ((tcon->ses->capabilities &

- tcon->ses->server->vals->cap_nt_find) == 0) &&

- !tcon->unix_ext) {

- sb->s_time_gran = 1000000000; /* 1 second is max allowed gran */

- ts = cnvrtDosUnixTm(cpu_to_le16(SMB_DATE_MIN), 0, 0);

- sb->s_time_min = ts.tv_sec;

- ts = cnvrtDosUnixTm(cpu_to_le16(SMB_DATE_MAX),

- cpu_to_le16(SMB_TIME_MAX), 0);

- sb->s_time_max = ts.tv_sec;

- } else {

- /*

- * Almost every server, including all SMB2+, uses DCE TIME

- * ie 100 nanosecond units, since 1601. See MS-DTYP and MS-FSCC

- */

- sb->s_time_gran = 100;

- ts = cifs_NTtimeToUnix(0);

- sb->s_time_min = ts.tv_sec;

- ts = cifs_NTtimeToUnix(cpu_to_le64(S64_MAX));

- sb->s_time_max = ts.tv_sec;

- }

-

- if (cifs_max_pending < 2) {

- cifs_max_pending = 2;

- cifs_dbg(FYI, "cifs_max_pending set to min of 2\n");

- } else if (cifs_max_pending > CIFS_MAX_REQ) {

- cifs_max_pending = CIFS_MAX_REQ;

- cifs_dbg(FYI, "cifs_max_pending set to max of %u\n",

- CIFS_MAX_REQ);

- }

-

-static inline bool is_smb1(struct TCP_Server_Info *server)

-{

- return HEADER_PREAMBLE_SIZE(server) != 0;

-}

-

-extern unsigned int cifs_max_pending; /* MAX requests at once to server*/

-extern bool disable_legacy_dialects; /* forbid vers=1.0 and vers=2.0 mounts */

-#define SMB1_VERSION_STRING "1.0"

-#define SMB20_VERSION_STRING "2.0"

-static inline bool is_smb1_server(struct TCP_Server_Info *server)

-{

- return strcmp(server->vals->version_string, SMB1_VERSION_STRING) == 0;

-}

-

- * For SMB1, see MS-CIFS 2.4.55 SMB_COM_TREE_CONNECT_ANDX (0x75) and MS-CIFS 3.3.4.4 DFS

- * Subsystem Notifies That a Share Is a DFS Share.

- *

- * For SMB2+, see MS-SMB2 2.2.10 SMB2 TREE_CONNECT Response and MS-SMB2 3.3.4.14 Server

- return is_smb1_server(tcon->ses->server) ? tcon->Flags & SMB_SHARE_IS_IN_DFS :

- tcon->share_flags & (SHI1005_FLAGS_DFS | SHI1005_FLAGS_DFS_ROOT);

- /*

- * Make workstation name no more than 15 chars when using insecure dialects as some legacy

- * servers do require it during NTLMSSP.

- */

- if (ses->server->dialect <= SMB20_PROT_ID)

- return min_t(size_t, sizeof(ses->workstation_name), RFC1001_NAME_LEN_WITH_NULL);

- /*

- * SMB1 does not use credits.

- */

- if (is_smb1(server))

- return 0;

-

- /*

- * SMB1 does not use credits.

- */

- if (is_smb1(server))

- return;

-

- if (is_smb1(server))

- server->total_read = length;

- else

- server->total_read = 0;

- if (ses->server->dialect >= SMB20_PROT_ID &&

- (ses->server->capabilities & SMB2_GLOBAL_CAP_DIRECTORY_LEASING))

- } else if (ses->server->vals->protocol_id == SMB10_PROT_ID)

- if (cap_unix(ses))

- cifs_dbg(FYI, "Unix Extensions requested on SMB1 mount\n");

- else {

- cifs_dbg(VFS, "SMB1 Unix Extensions not supported by server\n");

- rc = -EOPNOTSUPP;

- goto out_fail;

- { Smb_1, SMB1_VERSION_STRING },

- { Smb_20, SMB20_VERSION_STRING},

- cifs_errorf(fc, "vers=1.0 (cifs) mount not permitted when legacy dialects disabled\n");

- return 1;

- cifs_errorf(fc, "vers=2.0 mount not permitted when legacy dialects disabled\n");

- pr_warn_once("No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.\n");

- pr_warn("Bad mount helper ver=%s. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?\n",

- param->string);

- break;

- /* ClientGUID must be zero for SMB2.02 dialect */

- if (server->vals->protocol_id == SMB20_PROT_ID)

- memset(req->ClientGUID, 0, SMB2_CLIENT_GUID_SIZE);

- else {

- memcpy(req->ClientGUID, server->client_guid,

- SMB2_CLIENT_GUID_SIZE);

- if ((server->vals->protocol_id == SMB311_PROT_ID) ||

- (strcmp(server->vals->version_string,

- SMB3ANY_VERSION_STRING) == 0) ||

- (strcmp(server->vals->version_string,

- SMBDEFAULT_VERSION_STRING) == 0))

- assemble_neg_contexts(req, server, &total_len);

- }

- if (strcmp(server->vals->version_string,

- SMB3ANY_VERSION_STRING) == 0) {

- if (rsp->DialectRevision == cpu_to_le16(SMB20_PROT_ID)) {

- cifs_server_dbg(VFS,

- "SMB2 dialect returned but not requested\n");

- goto neg_exit;

- } else if (rsp->DialectRevision == cpu_to_le16(SMB21_PROT_ID)) {

- }

- } else if (strcmp(server->vals->version_string,

- SMBDEFAULT_VERSION_STRING) == 0) {

- if (rsp->DialectRevision == cpu_to_le16(SMB20_PROT_ID)) {

- cifs_server_dbg(VFS,

- "SMB2 dialect returned but not requested\n");

- } else if (rsp->DialectRevision == cpu_to_le16(SMB21_PROT_ID)) {

- } else if (le16_to_cpu(rsp->DialectRevision) !=

- server->vals->protocol_id) {

- if (rsp->DialectRevision == cpu_to_le16(SMB20_PROT_ID))

- cifs_dbg(FYI, "negotiated smb2.0 dialect\n");

- else if (rsp->DialectRevision == cpu_to_le16(SMB21_PROT_ID))

- cifs_server_dbg(VFS, "Invalid dialect returned by server 0x%x\n",

- if (!is_smb1(server) && rqst->rq_nvec >= 2 &&

- rqst->rq_iov[0].iov_len == 4) {

- struct kvec *iov;

- if (!is_smb1(server)) {

- struct kvec hiov = {

- .iov_base = &rfc1002_marker,

- .iov_len = 4

- };

- iov_iter_kvec(&smb_msg.msg_iter, ITER_SOURCE, &hiov, 1, 4);

- rc = smb_send_kvec(server, &smb_msg, &sent);

- if (rc < 0)

- goto unmask;

- total_len += sent;

- send_length += 4;

- }