1/*
2 * Copyright (c) 2000-2001 Boris Popov
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 * must display the following acknowledgement:
15 * This product includes software developed by Boris Popov.
16 * 4. Neither the name of the author nor the names of any co-contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * SUCH DAMAGE.
31 *
32 * $FreeBSD: head/sys/netsmb/smb_trantcp.c 87192 2001-12-02 08:47:29Z bp $
33 */
34#include <sys/param.h>
35#include <sys/systm.h>
36#include <sys/kernel.h>
37#include <sys/malloc.h>
38#include <sys/mbuf.h>
39#include <sys/proc.h>
40#include <sys/protosw.h>
41#include <sys/socket.h>
42#include <sys/socketvar.h>
43#include <sys/poll.h>
44#include <sys/uio.h>
45#include <sys/sysctl.h>
46#include <sys/condvar.h>
47
48#include <net/if.h>
49#include <net/route.h>
50
51#include <netinet/in.h>
52#include <netinet/tcp.h>
53
54#include <sys/mchain.h>
55
56#include <netsmb/netbios.h>
57
58#include <netsmb/smb.h>
59#include <netsmb/smb_conn.h>
60#include <netsmb/smb_tran.h>
61#include <netsmb/smb_trantcp.h>
62#include <netsmb/smb_subr.h>
63
64#define M_NBDATA M_PCB
65
66static int smb_tcpsndbuf = 10 * 1024;
67static int smb_tcprcvbuf = 10 * 1024;
68
69SYSCTL_DECL(_net_smb);
70SYSCTL_INT(_net_smb, OID_AUTO, tcpsndbuf, CTLFLAG_RW, &smb_tcpsndbuf, 0, "");
71SYSCTL_INT(_net_smb, OID_AUTO, tcprcvbuf, CTLFLAG_RW, &smb_tcprcvbuf, 0, "");
72
73#define nb_sosend(so,m,flags,td) (so)->so_proto->pr_usrreqs->pru_sosend( \
74 so, NULL, 0, m, 0, flags, td)
75
76static int nbssn_recv(struct nbpcb *nbp, struct mbuf **mpp, int *lenp,
77 u_int8_t *rpcodep, struct thread *td);
78static int smb_nbst_disconnect(struct smb_vc *vcp, struct thread *td);
79
80static int
81nb_setsockopt_int(struct socket *so, int level, int name, int val)
82{
83 struct sockopt sopt;
84
85 bzero(&sopt, sizeof(sopt));
86 sopt.sopt_level = level;
87 sopt.sopt_name = name;
88 sopt.sopt_val = &val;
89 sopt.sopt_valsize = sizeof(val);
90 return sosetopt(so, &sopt);
91}
92
93static __inline int
94nb_poll(struct nbpcb *nbp, int events, struct thread *td)
95{
96 return nbp->nbp_tso->so_proto->pr_usrreqs->pru_sopoll(nbp->nbp_tso,
97 events, NULL, td);
98}
99
100static int
101nbssn_rselect(struct nbpcb *nbp, struct timeval *tv, int events,
102 struct thread *td)
103{
104 struct timeval atv, rtv, ttv;
105 struct proc *p;
106 int timo, error;
107
108 if (tv) {
109 atv = *tv;
110 if (itimerfix(&atv)) {
111 error = EINVAL;
112 goto done_noproclock;
113 }
114 getmicrouptime(&rtv);
115 timevaladd(&atv, &rtv);
116 }
117 timo = 0;
118 p = td->td_proc;
119 PROC_LOCK(p);
120 mtx_lock_spin(&sched_lock);
121 td->td_flags |= TDF_SELECT;
122 mtx_unlock_spin(&sched_lock);
123 PROC_UNLOCK(p);
124 error = nb_poll(nbp, events, td);
125 PROC_LOCK(p);
126 if (error) {
127 error = 0;
128 goto done;
129 }
130 if (tv) {
131 getmicrouptime(&rtv);
132 if (timevalcmp(&rtv, &atv, >=)) {
133 /*
134 * An event of our interest may occur during locking a process.
135 * In order to avoid missing the event that occured during locking
136 * the process, test P_SELECT and rescan file descriptors if
137 * necessary.
138 */
139 mtx_lock_spin(&sched_lock);
140 if ((td->td_flags & TDF_SELECT) == 0) {
141 td->td_flags |= TDF_SELECT;
142 mtx_unlock_spin(&sched_lock);
143 PROC_UNLOCK(p);
144 error = nb_poll(nbp, events, td);
145 PROC_LOCK(p);
146 } else
147 mtx_unlock_spin(&sched_lock);
148 goto done;
149 }
150 ttv = atv;
151 timevalsub(&ttv, &rtv);
152 timo = tvtohz(&ttv);
153 }
154 mtx_lock_spin(&sched_lock);
155 td->td_flags &= ~TDF_SELECT;
156 mtx_unlock_spin(&sched_lock);
157 if (timo > 0)
158 error = cv_timedwait(&selwait, &p->p_mtx, timo);
159 else {
160 cv_wait(&selwait, &p->p_mtx);
161 error = 0;
162 }
163
164done:
165 mtx_lock_spin(&sched_lock);
166 td->td_flags &= ~TDF_SELECT;
167 mtx_unlock_spin(&sched_lock);
168 PROC_UNLOCK(p);
169
170done_noproclock:
171 if (error == ERESTART)
172 return 0;
173 return error;
174}
175
176static int
177nb_intr(struct nbpcb *nbp, struct proc *p)
178{
179 return 0;
180}
181
182static void
183nb_upcall(struct socket *so, void *arg, int waitflag)
184{
185 struct nbpcb *nbp = arg;
186
187 if (arg == NULL || nbp->nbp_selectid == NULL)
188 return;
189 wakeup(nbp->nbp_selectid);
190}
191
192static int
193nb_sethdr(struct mbuf *m, u_int8_t type, u_int32_t len)
194{
195 u_int32_t *p = mtod(m, u_int32_t *);
196
197 *p = htonl((len & 0x1FFFF) | (type << 24));
198 return 0;
199}
200
201static int
202nb_put_name(struct mbchain *mbp, struct sockaddr_nb *snb)
203{
204 int error;
205 u_char seglen, *cp;
206
207 cp = snb->snb_name;
208 if (*cp == 0)
209 return EINVAL;
210 NBDEBUG("[%s]\n", cp);
211 for (;;) {
212 seglen = (*cp) + 1;
213 error = mb_put_mem(mbp, cp, seglen, MB_MSYSTEM);
214 if (error)
215 return error;
216 if (seglen == 1)
217 break;
218 cp += seglen;
219 }
220 return 0;
221}
222
223static int
224nb_connect_in(struct nbpcb *nbp, struct sockaddr_in *to, struct thread *td)
225{
226 struct socket *so;
227 int error, s;
228
229 error = socreate(AF_INET, &so, SOCK_STREAM, IPPROTO_TCP, td);
230 if (error)
231 return error;
232 nbp->nbp_tso = so;
233 so->so_upcallarg = (caddr_t)nbp;
234 so->so_upcall = nb_upcall;
235 so->so_rcv.sb_flags |= SB_UPCALL;
236 so->so_rcv.sb_timeo = (5 * hz);
237 so->so_snd.sb_timeo = (5 * hz);
238 error = soreserve(so, nbp->nbp_sndbuf, nbp->nbp_rcvbuf);
239 if (error)
240 goto bad;
241 nb_setsockopt_int(so, SOL_SOCKET, SO_KEEPALIVE, 1);
242 nb_setsockopt_int(so, IPPROTO_TCP, TCP_NODELAY, 1);
243 so->so_rcv.sb_flags &= ~SB_NOINTR;
244 so->so_snd.sb_flags &= ~SB_NOINTR;
245 error = soconnect(so, (struct sockaddr*)to, td);
246 if (error)
247 goto bad;
248 s = splnet();
249 while ((so->so_state & SS_ISCONNECTING) && so->so_error == 0) {
250 tsleep(&so->so_timeo, PSOCK, "nbcon", 2 * hz);
251 if ((so->so_state & SS_ISCONNECTING) && so->so_error == 0 &&
252 (error = nb_intr(nbp, td->td_proc)) != 0) {
253 so->so_state &= ~SS_ISCONNECTING;
254 splx(s);
255 goto bad;
256 }
257 }
258 if (so->so_error) {
259 error = so->so_error;
260 so->so_error = 0;
261 splx(s);
262 goto bad;
263 }
264 splx(s);
265 return 0;
266bad:
267 smb_nbst_disconnect(nbp->nbp_vc, td);
268 return error;
269}
270
271static int
272nbssn_rq_request(struct nbpcb *nbp, struct thread *td)
273{
274 struct mbchain mb, *mbp = &mb;
275 struct mdchain md, *mdp = &md;
276 struct mbuf *m0;
277 struct timeval tv;
278 struct sockaddr_in sin;
279 u_short port;
280 u_int8_t rpcode;
281 int error, rplen;
282
283 error = mb_init(mbp);
284 if (error)
285 return error;
286 mb_put_uint32le(mbp, 0);
287 nb_put_name(mbp, nbp->nbp_paddr);
288 nb_put_name(mbp, nbp->nbp_laddr);
289 nb_sethdr(mbp->mb_top, NB_SSN_REQUEST, mb_fixhdr(mbp) - 4);
290 error = nb_sosend(nbp->nbp_tso, mbp->mb_top, 0, td);
291 if (!error) {
292 nbp->nbp_state = NBST_RQSENT;
293 }
294 mb_detach(mbp);
295 mb_done(mbp);
296 if (error)
297 return error;
298 TIMESPEC_TO_TIMEVAL(&tv, &nbp->nbp_timo);
299 error = nbssn_rselect(nbp, &tv, POLLIN, td);
300 if (error == EWOULDBLOCK) { /* Timeout */
301 NBDEBUG("initial request timeout\n");
302 return ETIMEDOUT;
303 }
304 if (error) /* restart or interrupt */
305 return error;
306 error = nbssn_recv(nbp, &m0, &rplen, &rpcode, td);
307 if (error) {
308 NBDEBUG("recv() error %d\n", error);
309 return error;
310 }
311 /*
312 * Process NETBIOS reply
313 */
314 if (m0)
315 md_initm(mdp, m0);
316 error = 0;
317 do {
318 if (rpcode == NB_SSN_POSRESP) {
319 nbp->nbp_state = NBST_SESSION;
320 nbp->nbp_flags |= NBF_CONNECTED;
321 break;
322 }
323 if (rpcode != NB_SSN_RTGRESP) {
324 error = ECONNABORTED;
325 break;
326 }
327 if (rplen != 6) {
328 error = ECONNABORTED;
329 break;
330 }
331 md_get_mem(mdp, (caddr_t)&sin.sin_addr, 4, MB_MSYSTEM);
332 md_get_uint16(mdp, &port);
333 sin.sin_port = port;
334 nbp->nbp_state = NBST_RETARGET;
335 smb_nbst_disconnect(nbp->nbp_vc, td);
336 error = nb_connect_in(nbp, &sin, td);
337 if (!error)
338 error = nbssn_rq_request(nbp, td);
339 if (error) {
340 smb_nbst_disconnect(nbp->nbp_vc, td);
341 break;
342 }
343 } while(0);
344 if (m0)
345 md_done(mdp);
346 return error;
347}
348
349static int
350nbssn_recvhdr(struct nbpcb *nbp, int *lenp,
351 u_int8_t *rpcodep, int flags, struct thread *td)
352{
353 struct socket *so = nbp->nbp_tso;
354 struct uio auio;
355 struct iovec aio;
356 u_int32_t len;
357 int error;
358
359 aio.iov_base = (caddr_t)&len;
360 aio.iov_len = sizeof(len);
361 auio.uio_iov = &aio;
362 auio.uio_iovcnt = 1;
363 auio.uio_segflg = UIO_SYSSPACE;
364 auio.uio_rw = UIO_READ;
365 auio.uio_offset = 0;
366 auio.uio_resid = sizeof(len);
367 auio.uio_td = td;
368 error = so->so_proto->pr_usrreqs->pru_soreceive
369 (so, (struct sockaddr **)NULL, &auio,
370 (struct mbuf **)NULL, (struct mbuf **)NULL, &flags);
371 if (error)
372 return error;
373 if (auio.uio_resid > 0) {
374 SMBSDEBUG("short reply\n");
375 return EPIPE;
376 }
377 len = ntohl(len);
378 *rpcodep = (len >> 24) & 0xFF;
379 len &= 0x1ffff;
380 if (len > SMB_MAXPKTLEN) {
381 SMBERROR("packet too long (%d)\n", len);
382 return EFBIG;
383 }
384 *lenp = len;
385 return 0;
386}
387
388static int
389nbssn_recv(struct nbpcb *nbp, struct mbuf **mpp, int *lenp,
390 u_int8_t *rpcodep, struct thread *td)
391{
392 struct socket *so = nbp->nbp_tso;
393 struct uio auio;
394 struct mbuf *m;
395 u_int8_t rpcode;
396 int len;
397 int error, rcvflg;
398
399 if (so == NULL)
400 return ENOTCONN;
401
402 if (mpp)
403 *mpp = NULL;
404 for(;;) {
405 m = NULL;
406 error = nbssn_recvhdr(nbp, &len, &rpcode, MSG_DONTWAIT, td);
407 if (so->so_state &
408 (SS_ISDISCONNECTING | SS_ISDISCONNECTED | SS_CANTRCVMORE)) {
409 nbp->nbp_state = NBST_CLOSED;
410 NBDEBUG("session closed by peer\n");
411 return ECONNRESET;
412 }
413 if (error)
414 return error;
415 if (len == 0 && nbp->nbp_state != NBST_SESSION)
416 break;
417 if (rpcode == NB_SSN_KEEPALIVE)
418 continue;
419 bzero(&auio, sizeof(auio));
420 auio.uio_resid = len;
421 auio.uio_td = td;
422 do {
423 rcvflg = MSG_WAITALL;
424 error = so->so_proto->pr_usrreqs->pru_soreceive
425 (so, (struct sockaddr **)NULL,
426 &auio, &m, (struct mbuf **)NULL, &rcvflg);
427 } while (error == EWOULDBLOCK || error == EINTR ||
428 error == ERESTART);
429 if (error)
430 break;
431 if (auio.uio_resid > 0) {
432 SMBERROR("packet is shorter than expected\n");
433 error = EPIPE;
434 break;
435 }
436 if (nbp->nbp_state == NBST_SESSION &&
437 rpcode == NB_SSN_MESSAGE)
438 break;
439 NBDEBUG("non-session packet %x\n", rpcode);
440 if (m)
441 m_freem(m);
442 }
443 if (error) {
444 if (m)
445 m_freem(m);
446 return error;
447 }
448 if (mpp)
449 *mpp = m;
450 else
451 m_freem(m);
452 *lenp = len;
453 *rpcodep = rpcode;
454 return 0;
455}
456
457/*
458 * SMB transport interface
459 */
460static int
461smb_nbst_create(struct smb_vc *vcp, struct thread *td)
462{
463 struct nbpcb *nbp;
464
465 MALLOC(nbp, struct nbpcb *, sizeof *nbp, M_NBDATA, M_WAITOK);
466 bzero(nbp, sizeof *nbp);
467 nbp->nbp_timo.tv_sec = 15; /* XXX: sysctl ? */
468 nbp->nbp_state = NBST_CLOSED;
469 nbp->nbp_vc = vcp;
470 nbp->nbp_sndbuf = smb_tcpsndbuf;
471 nbp->nbp_rcvbuf = smb_tcprcvbuf;
472 vcp->vc_tdata = nbp;
473 return 0;
474}
475
476static int
477smb_nbst_done(struct smb_vc *vcp, struct thread *td)
478{
479 struct nbpcb *nbp = vcp->vc_tdata;
480
481 if (nbp == NULL)
482 return ENOTCONN;
483 smb_nbst_disconnect(vcp, td);
484 if (nbp->nbp_laddr)
485 free(nbp->nbp_laddr, M_SONAME);
486 if (nbp->nbp_paddr)
487 free(nbp->nbp_paddr, M_SONAME);
488 free(nbp, M_NBDATA);
489 return 0;
490}
491
492static int
493smb_nbst_bind(struct smb_vc *vcp, struct sockaddr *sap, struct thread *td)
494{
495 struct nbpcb *nbp = vcp->vc_tdata;
496 struct sockaddr_nb *snb;
497 int error, slen;
498
499 NBDEBUG("\n");
500 error = EINVAL;
501 do {
502 if (nbp->nbp_flags & NBF_LOCADDR)
503 break;
504 /*
505 * It is possible to create NETBIOS name in the kernel,
506 * but nothing prevents us to do it in the user space.
507 */
508 if (sap == NULL)
509 break;
510 slen = sap->sa_len;
511 if (slen < NB_MINSALEN)
512 break;
513 snb = (struct sockaddr_nb*)dup_sockaddr(sap, 1);
514 if (snb == NULL) {
515 error = ENOMEM;
516 break;
517 }
518 nbp->nbp_laddr = snb;
519 nbp->nbp_flags |= NBF_LOCADDR;
520 error = 0;
521 } while(0);
522 return error;
523}
524
525static int
526smb_nbst_connect(struct smb_vc *vcp, struct sockaddr *sap, struct thread *td)
527{
528 struct nbpcb *nbp = vcp->vc_tdata;
529 struct sockaddr_in sin;
530 struct sockaddr_nb *snb;
531 struct timespec ts1, ts2;
532 int error, slen;
533
534 NBDEBUG("\n");
535 if (nbp->nbp_tso != NULL)
536 return EISCONN;
537 if (nbp->nbp_laddr == NULL)
538 return EINVAL;
539 slen = sap->sa_len;
540 if (slen < NB_MINSALEN)
541 return EINVAL;
542 if (nbp->nbp_paddr) {
543 free(nbp->nbp_paddr, M_SONAME);
544 nbp->nbp_paddr = NULL;
545 }
546 snb = (struct sockaddr_nb*)dup_sockaddr(sap, 1);
547 if (snb == NULL)
548 return ENOMEM;
549 nbp->nbp_paddr = snb;
550 sin = snb->snb_addrin;
551 getnanotime(&ts1);
552 error = nb_connect_in(nbp, &sin, td);
553 if (error)
554 return error;
555 getnanotime(&ts2);
556 timespecsub(&ts2, &ts1);
557 if (ts2.tv_sec == 0 && ts2.tv_sec == 0)
558 ts2.tv_sec = 1;
559 nbp->nbp_timo = ts2;
560 timespecadd(&nbp->nbp_timo, &ts2);
561 timespecadd(&nbp->nbp_timo, &ts2);
562 timespecadd(&nbp->nbp_timo, &ts2); /* * 4 */
563 error = nbssn_rq_request(nbp, td);
564 if (error)
565 smb_nbst_disconnect(vcp, td);
566 return error;
567}
568
569static int
570smb_nbst_disconnect(struct smb_vc *vcp, struct thread *td)
571{
572 struct nbpcb *nbp = vcp->vc_tdata;
573 struct socket *so;
574
575 if (nbp == NULL || nbp->nbp_tso == NULL)
576 return ENOTCONN;
577 if ((so = nbp->nbp_tso) != NULL) {
578 nbp->nbp_flags &= ~NBF_CONNECTED;
579 nbp->nbp_tso = (struct socket *)NULL;
580 soshutdown(so, 2);
581 soclose(so);
582 }
583 if (nbp->nbp_state != NBST_RETARGET) {
584 nbp->nbp_state = NBST_CLOSED;
585 }
586 return 0;
587}
588
589static int
590smb_nbst_send(struct smb_vc *vcp, struct mbuf *m0, struct thread *td)
591{
592 struct nbpcb *nbp = vcp->vc_tdata;
593 int error;
594
595 if (nbp->nbp_state != NBST_SESSION) {
596 error = ENOTCONN;
597 goto abort;
598 }
599 M_PREPEND(m0, 4, M_WAITOK);
600 if (m0 == NULL)
601 return ENOBUFS;
602 nb_sethdr(m0, NB_SSN_MESSAGE, m_fixhdr(m0) - 4);
603 error = nb_sosend(nbp->nbp_tso, m0, 0, td);
604 return error;
605abort:
606 if (m0)
607 m_freem(m0);
608 return error;
609}
610
611
612static int
613smb_nbst_recv(struct smb_vc *vcp, struct mbuf **mpp, struct thread *td)
614{
615 struct nbpcb *nbp = vcp->vc_tdata;
616 u_int8_t rpcode;
617 int error, rplen;
618
619 nbp->nbp_flags |= NBF_RECVLOCK;
620 error = nbssn_recv(nbp, mpp, &rplen, &rpcode, td);
621 nbp->nbp_flags &= ~NBF_RECVLOCK;
622 return error;
623}
624
625static void
626smb_nbst_timo(struct smb_vc *vcp)
627{
628 return;
629}
630
631static void
632smb_nbst_intr(struct smb_vc *vcp)
633{
634 struct nbpcb *nbp = vcp->vc_tdata;
635
636 if (nbp == NULL || nbp->nbp_tso == NULL)
637 return;
638 sorwakeup(nbp->nbp_tso);
639 sowwakeup(nbp->nbp_tso);
640}
641
642static int
643smb_nbst_getparam(struct smb_vc *vcp, int param, void *data)
644{
645 struct nbpcb *nbp = vcp->vc_tdata;
646
647 switch (param) {
648 case SMBTP_SNDSZ:
649 *(int*)data = nbp->nbp_sndbuf;
650 break;
651 case SMBTP_RCVSZ:
652 *(int*)data = nbp->nbp_rcvbuf;
653 break;
654 case SMBTP_TIMEOUT:
655 *(struct timespec*)data = nbp->nbp_timo;
656 break;
657 default:
658 return EINVAL;
659 }
660 return 0;
661}
662
663static int
664smb_nbst_setparam(struct smb_vc *vcp, int param, void *data)
665{
666 struct nbpcb *nbp = vcp->vc_tdata;
667
668 switch (param) {
669 case SMBTP_SELECTID:
670 nbp->nbp_selectid = data;
671 break;
672 default:
673 return EINVAL;
674 }
675 return 0;
676}
677
678/*
679 * Check for fatal errors
680 */
681static int
682smb_nbst_fatal(struct smb_vc *vcp, int error)
683{
684 switch (error) {
685 case ENOTCONN:
686 case ENETRESET:
687 case ECONNABORTED:
688 return 1;
689 }
690 return 0;
691}
692
693
694struct smb_tran_desc smb_tran_nbtcp_desc = {
695 SMBT_NBTCP,
696 smb_nbst_create, smb_nbst_done,
697 smb_nbst_bind, smb_nbst_connect, smb_nbst_disconnect,
698 smb_nbst_send, smb_nbst_recv,
699 smb_nbst_timo, smb_nbst_intr,
700 smb_nbst_getparam, smb_nbst_setparam,
701 smb_nbst_fatal
702};
703
2 * Copyright (c) 2000-2001 Boris Popov
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 * must display the following acknowledgement:
15 * This product includes software developed by Boris Popov.
16 * 4. Neither the name of the author nor the names of any co-contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * SUCH DAMAGE.
31 *
32 * $FreeBSD: head/sys/netsmb/smb_trantcp.c 87192 2001-12-02 08:47:29Z bp $
33 */
34#include <sys/param.h>
35#include <sys/systm.h>
36#include <sys/kernel.h>
37#include <sys/malloc.h>
38#include <sys/mbuf.h>
39#include <sys/proc.h>
40#include <sys/protosw.h>
41#include <sys/socket.h>
42#include <sys/socketvar.h>
43#include <sys/poll.h>
44#include <sys/uio.h>
45#include <sys/sysctl.h>
46#include <sys/condvar.h>
47
48#include <net/if.h>
49#include <net/route.h>
50
51#include <netinet/in.h>
52#include <netinet/tcp.h>
53
54#include <sys/mchain.h>
55
56#include <netsmb/netbios.h>
57
58#include <netsmb/smb.h>
59#include <netsmb/smb_conn.h>
60#include <netsmb/smb_tran.h>
61#include <netsmb/smb_trantcp.h>
62#include <netsmb/smb_subr.h>
63
64#define M_NBDATA M_PCB
65
66static int smb_tcpsndbuf = 10 * 1024;
67static int smb_tcprcvbuf = 10 * 1024;
68
69SYSCTL_DECL(_net_smb);
70SYSCTL_INT(_net_smb, OID_AUTO, tcpsndbuf, CTLFLAG_RW, &smb_tcpsndbuf, 0, "");
71SYSCTL_INT(_net_smb, OID_AUTO, tcprcvbuf, CTLFLAG_RW, &smb_tcprcvbuf, 0, "");
72
73#define nb_sosend(so,m,flags,td) (so)->so_proto->pr_usrreqs->pru_sosend( \
74 so, NULL, 0, m, 0, flags, td)
75
76static int nbssn_recv(struct nbpcb *nbp, struct mbuf **mpp, int *lenp,
77 u_int8_t *rpcodep, struct thread *td);
78static int smb_nbst_disconnect(struct smb_vc *vcp, struct thread *td);
79
80static int
81nb_setsockopt_int(struct socket *so, int level, int name, int val)
82{
83 struct sockopt sopt;
84
85 bzero(&sopt, sizeof(sopt));
86 sopt.sopt_level = level;
87 sopt.sopt_name = name;
88 sopt.sopt_val = &val;
89 sopt.sopt_valsize = sizeof(val);
90 return sosetopt(so, &sopt);
91}
92
93static __inline int
94nb_poll(struct nbpcb *nbp, int events, struct thread *td)
95{
96 return nbp->nbp_tso->so_proto->pr_usrreqs->pru_sopoll(nbp->nbp_tso,
97 events, NULL, td);
98}
99
100static int
101nbssn_rselect(struct nbpcb *nbp, struct timeval *tv, int events,
102 struct thread *td)
103{
104 struct timeval atv, rtv, ttv;
105 struct proc *p;
106 int timo, error;
107
108 if (tv) {
109 atv = *tv;
110 if (itimerfix(&atv)) {
111 error = EINVAL;
112 goto done_noproclock;
113 }
114 getmicrouptime(&rtv);
115 timevaladd(&atv, &rtv);
116 }
117 timo = 0;
118 p = td->td_proc;
119 PROC_LOCK(p);
120 mtx_lock_spin(&sched_lock);
121 td->td_flags |= TDF_SELECT;
122 mtx_unlock_spin(&sched_lock);
123 PROC_UNLOCK(p);
124 error = nb_poll(nbp, events, td);
125 PROC_LOCK(p);
126 if (error) {
127 error = 0;
128 goto done;
129 }
130 if (tv) {
131 getmicrouptime(&rtv);
132 if (timevalcmp(&rtv, &atv, >=)) {
133 /*
134 * An event of our interest may occur during locking a process.
135 * In order to avoid missing the event that occured during locking
136 * the process, test P_SELECT and rescan file descriptors if
137 * necessary.
138 */
139 mtx_lock_spin(&sched_lock);
140 if ((td->td_flags & TDF_SELECT) == 0) {
141 td->td_flags |= TDF_SELECT;
142 mtx_unlock_spin(&sched_lock);
143 PROC_UNLOCK(p);
144 error = nb_poll(nbp, events, td);
145 PROC_LOCK(p);
146 } else
147 mtx_unlock_spin(&sched_lock);
148 goto done;
149 }
150 ttv = atv;
151 timevalsub(&ttv, &rtv);
152 timo = tvtohz(&ttv);
153 }
154 mtx_lock_spin(&sched_lock);
155 td->td_flags &= ~TDF_SELECT;
156 mtx_unlock_spin(&sched_lock);
157 if (timo > 0)
158 error = cv_timedwait(&selwait, &p->p_mtx, timo);
159 else {
160 cv_wait(&selwait, &p->p_mtx);
161 error = 0;
162 }
163
164done:
165 mtx_lock_spin(&sched_lock);
166 td->td_flags &= ~TDF_SELECT;
167 mtx_unlock_spin(&sched_lock);
168 PROC_UNLOCK(p);
169
170done_noproclock:
171 if (error == ERESTART)
172 return 0;
173 return error;
174}
175
176static int
177nb_intr(struct nbpcb *nbp, struct proc *p)
178{
179 return 0;
180}
181
182static void
183nb_upcall(struct socket *so, void *arg, int waitflag)
184{
185 struct nbpcb *nbp = arg;
186
187 if (arg == NULL || nbp->nbp_selectid == NULL)
188 return;
189 wakeup(nbp->nbp_selectid);
190}
191
192static int
193nb_sethdr(struct mbuf *m, u_int8_t type, u_int32_t len)
194{
195 u_int32_t *p = mtod(m, u_int32_t *);
196
197 *p = htonl((len & 0x1FFFF) | (type << 24));
198 return 0;
199}
200
201static int
202nb_put_name(struct mbchain *mbp, struct sockaddr_nb *snb)
203{
204 int error;
205 u_char seglen, *cp;
206
207 cp = snb->snb_name;
208 if (*cp == 0)
209 return EINVAL;
210 NBDEBUG("[%s]\n", cp);
211 for (;;) {
212 seglen = (*cp) + 1;
213 error = mb_put_mem(mbp, cp, seglen, MB_MSYSTEM);
214 if (error)
215 return error;
216 if (seglen == 1)
217 break;
218 cp += seglen;
219 }
220 return 0;
221}
222
223static int
224nb_connect_in(struct nbpcb *nbp, struct sockaddr_in *to, struct thread *td)
225{
226 struct socket *so;
227 int error, s;
228
229 error = socreate(AF_INET, &so, SOCK_STREAM, IPPROTO_TCP, td);
230 if (error)
231 return error;
232 nbp->nbp_tso = so;
233 so->so_upcallarg = (caddr_t)nbp;
234 so->so_upcall = nb_upcall;
235 so->so_rcv.sb_flags |= SB_UPCALL;
236 so->so_rcv.sb_timeo = (5 * hz);
237 so->so_snd.sb_timeo = (5 * hz);
238 error = soreserve(so, nbp->nbp_sndbuf, nbp->nbp_rcvbuf);
239 if (error)
240 goto bad;
241 nb_setsockopt_int(so, SOL_SOCKET, SO_KEEPALIVE, 1);
242 nb_setsockopt_int(so, IPPROTO_TCP, TCP_NODELAY, 1);
243 so->so_rcv.sb_flags &= ~SB_NOINTR;
244 so->so_snd.sb_flags &= ~SB_NOINTR;
245 error = soconnect(so, (struct sockaddr*)to, td);
246 if (error)
247 goto bad;
248 s = splnet();
249 while ((so->so_state & SS_ISCONNECTING) && so->so_error == 0) {
250 tsleep(&so->so_timeo, PSOCK, "nbcon", 2 * hz);
251 if ((so->so_state & SS_ISCONNECTING) && so->so_error == 0 &&
252 (error = nb_intr(nbp, td->td_proc)) != 0) {
253 so->so_state &= ~SS_ISCONNECTING;
254 splx(s);
255 goto bad;
256 }
257 }
258 if (so->so_error) {
259 error = so->so_error;
260 so->so_error = 0;
261 splx(s);
262 goto bad;
263 }
264 splx(s);
265 return 0;
266bad:
267 smb_nbst_disconnect(nbp->nbp_vc, td);
268 return error;
269}
270
271static int
272nbssn_rq_request(struct nbpcb *nbp, struct thread *td)
273{
274 struct mbchain mb, *mbp = &mb;
275 struct mdchain md, *mdp = &md;
276 struct mbuf *m0;
277 struct timeval tv;
278 struct sockaddr_in sin;
279 u_short port;
280 u_int8_t rpcode;
281 int error, rplen;
282
283 error = mb_init(mbp);
284 if (error)
285 return error;
286 mb_put_uint32le(mbp, 0);
287 nb_put_name(mbp, nbp->nbp_paddr);
288 nb_put_name(mbp, nbp->nbp_laddr);
289 nb_sethdr(mbp->mb_top, NB_SSN_REQUEST, mb_fixhdr(mbp) - 4);
290 error = nb_sosend(nbp->nbp_tso, mbp->mb_top, 0, td);
291 if (!error) {
292 nbp->nbp_state = NBST_RQSENT;
293 }
294 mb_detach(mbp);
295 mb_done(mbp);
296 if (error)
297 return error;
298 TIMESPEC_TO_TIMEVAL(&tv, &nbp->nbp_timo);
299 error = nbssn_rselect(nbp, &tv, POLLIN, td);
300 if (error == EWOULDBLOCK) { /* Timeout */
301 NBDEBUG("initial request timeout\n");
302 return ETIMEDOUT;
303 }
304 if (error) /* restart or interrupt */
305 return error;
306 error = nbssn_recv(nbp, &m0, &rplen, &rpcode, td);
307 if (error) {
308 NBDEBUG("recv() error %d\n", error);
309 return error;
310 }
311 /*
312 * Process NETBIOS reply
313 */
314 if (m0)
315 md_initm(mdp, m0);
316 error = 0;
317 do {
318 if (rpcode == NB_SSN_POSRESP) {
319 nbp->nbp_state = NBST_SESSION;
320 nbp->nbp_flags |= NBF_CONNECTED;
321 break;
322 }
323 if (rpcode != NB_SSN_RTGRESP) {
324 error = ECONNABORTED;
325 break;
326 }
327 if (rplen != 6) {
328 error = ECONNABORTED;
329 break;
330 }
331 md_get_mem(mdp, (caddr_t)&sin.sin_addr, 4, MB_MSYSTEM);
332 md_get_uint16(mdp, &port);
333 sin.sin_port = port;
334 nbp->nbp_state = NBST_RETARGET;
335 smb_nbst_disconnect(nbp->nbp_vc, td);
336 error = nb_connect_in(nbp, &sin, td);
337 if (!error)
338 error = nbssn_rq_request(nbp, td);
339 if (error) {
340 smb_nbst_disconnect(nbp->nbp_vc, td);
341 break;
342 }
343 } while(0);
344 if (m0)
345 md_done(mdp);
346 return error;
347}
348
349static int
350nbssn_recvhdr(struct nbpcb *nbp, int *lenp,
351 u_int8_t *rpcodep, int flags, struct thread *td)
352{
353 struct socket *so = nbp->nbp_tso;
354 struct uio auio;
355 struct iovec aio;
356 u_int32_t len;
357 int error;
358
359 aio.iov_base = (caddr_t)&len;
360 aio.iov_len = sizeof(len);
361 auio.uio_iov = &aio;
362 auio.uio_iovcnt = 1;
363 auio.uio_segflg = UIO_SYSSPACE;
364 auio.uio_rw = UIO_READ;
365 auio.uio_offset = 0;
366 auio.uio_resid = sizeof(len);
367 auio.uio_td = td;
368 error = so->so_proto->pr_usrreqs->pru_soreceive
369 (so, (struct sockaddr **)NULL, &auio,
370 (struct mbuf **)NULL, (struct mbuf **)NULL, &flags);
371 if (error)
372 return error;
373 if (auio.uio_resid > 0) {
374 SMBSDEBUG("short reply\n");
375 return EPIPE;
376 }
377 len = ntohl(len);
378 *rpcodep = (len >> 24) & 0xFF;
379 len &= 0x1ffff;
380 if (len > SMB_MAXPKTLEN) {
381 SMBERROR("packet too long (%d)\n", len);
382 return EFBIG;
383 }
384 *lenp = len;
385 return 0;
386}
387
388static int
389nbssn_recv(struct nbpcb *nbp, struct mbuf **mpp, int *lenp,
390 u_int8_t *rpcodep, struct thread *td)
391{
392 struct socket *so = nbp->nbp_tso;
393 struct uio auio;
394 struct mbuf *m;
395 u_int8_t rpcode;
396 int len;
397 int error, rcvflg;
398
399 if (so == NULL)
400 return ENOTCONN;
401
402 if (mpp)
403 *mpp = NULL;
404 for(;;) {
405 m = NULL;
406 error = nbssn_recvhdr(nbp, &len, &rpcode, MSG_DONTWAIT, td);
407 if (so->so_state &
408 (SS_ISDISCONNECTING | SS_ISDISCONNECTED | SS_CANTRCVMORE)) {
409 nbp->nbp_state = NBST_CLOSED;
410 NBDEBUG("session closed by peer\n");
411 return ECONNRESET;
412 }
413 if (error)
414 return error;
415 if (len == 0 && nbp->nbp_state != NBST_SESSION)
416 break;
417 if (rpcode == NB_SSN_KEEPALIVE)
418 continue;
419 bzero(&auio, sizeof(auio));
420 auio.uio_resid = len;
421 auio.uio_td = td;
422 do {
423 rcvflg = MSG_WAITALL;
424 error = so->so_proto->pr_usrreqs->pru_soreceive
425 (so, (struct sockaddr **)NULL,
426 &auio, &m, (struct mbuf **)NULL, &rcvflg);
427 } while (error == EWOULDBLOCK || error == EINTR ||
428 error == ERESTART);
429 if (error)
430 break;
431 if (auio.uio_resid > 0) {
432 SMBERROR("packet is shorter than expected\n");
433 error = EPIPE;
434 break;
435 }
436 if (nbp->nbp_state == NBST_SESSION &&
437 rpcode == NB_SSN_MESSAGE)
438 break;
439 NBDEBUG("non-session packet %x\n", rpcode);
440 if (m)
441 m_freem(m);
442 }
443 if (error) {
444 if (m)
445 m_freem(m);
446 return error;
447 }
448 if (mpp)
449 *mpp = m;
450 else
451 m_freem(m);
452 *lenp = len;
453 *rpcodep = rpcode;
454 return 0;
455}
456
457/*
458 * SMB transport interface
459 */
460static int
461smb_nbst_create(struct smb_vc *vcp, struct thread *td)
462{
463 struct nbpcb *nbp;
464
465 MALLOC(nbp, struct nbpcb *, sizeof *nbp, M_NBDATA, M_WAITOK);
466 bzero(nbp, sizeof *nbp);
467 nbp->nbp_timo.tv_sec = 15; /* XXX: sysctl ? */
468 nbp->nbp_state = NBST_CLOSED;
469 nbp->nbp_vc = vcp;
470 nbp->nbp_sndbuf = smb_tcpsndbuf;
471 nbp->nbp_rcvbuf = smb_tcprcvbuf;
472 vcp->vc_tdata = nbp;
473 return 0;
474}
475
476static int
477smb_nbst_done(struct smb_vc *vcp, struct thread *td)
478{
479 struct nbpcb *nbp = vcp->vc_tdata;
480
481 if (nbp == NULL)
482 return ENOTCONN;
483 smb_nbst_disconnect(vcp, td);
484 if (nbp->nbp_laddr)
485 free(nbp->nbp_laddr, M_SONAME);
486 if (nbp->nbp_paddr)
487 free(nbp->nbp_paddr, M_SONAME);
488 free(nbp, M_NBDATA);
489 return 0;
490}
491
492static int
493smb_nbst_bind(struct smb_vc *vcp, struct sockaddr *sap, struct thread *td)
494{
495 struct nbpcb *nbp = vcp->vc_tdata;
496 struct sockaddr_nb *snb;
497 int error, slen;
498
499 NBDEBUG("\n");
500 error = EINVAL;
501 do {
502 if (nbp->nbp_flags & NBF_LOCADDR)
503 break;
504 /*
505 * It is possible to create NETBIOS name in the kernel,
506 * but nothing prevents us to do it in the user space.
507 */
508 if (sap == NULL)
509 break;
510 slen = sap->sa_len;
511 if (slen < NB_MINSALEN)
512 break;
513 snb = (struct sockaddr_nb*)dup_sockaddr(sap, 1);
514 if (snb == NULL) {
515 error = ENOMEM;
516 break;
517 }
518 nbp->nbp_laddr = snb;
519 nbp->nbp_flags |= NBF_LOCADDR;
520 error = 0;
521 } while(0);
522 return error;
523}
524
525static int
526smb_nbst_connect(struct smb_vc *vcp, struct sockaddr *sap, struct thread *td)
527{
528 struct nbpcb *nbp = vcp->vc_tdata;
529 struct sockaddr_in sin;
530 struct sockaddr_nb *snb;
531 struct timespec ts1, ts2;
532 int error, slen;
533
534 NBDEBUG("\n");
535 if (nbp->nbp_tso != NULL)
536 return EISCONN;
537 if (nbp->nbp_laddr == NULL)
538 return EINVAL;
539 slen = sap->sa_len;
540 if (slen < NB_MINSALEN)
541 return EINVAL;
542 if (nbp->nbp_paddr) {
543 free(nbp->nbp_paddr, M_SONAME);
544 nbp->nbp_paddr = NULL;
545 }
546 snb = (struct sockaddr_nb*)dup_sockaddr(sap, 1);
547 if (snb == NULL)
548 return ENOMEM;
549 nbp->nbp_paddr = snb;
550 sin = snb->snb_addrin;
551 getnanotime(&ts1);
552 error = nb_connect_in(nbp, &sin, td);
553 if (error)
554 return error;
555 getnanotime(&ts2);
556 timespecsub(&ts2, &ts1);
557 if (ts2.tv_sec == 0 && ts2.tv_sec == 0)
558 ts2.tv_sec = 1;
559 nbp->nbp_timo = ts2;
560 timespecadd(&nbp->nbp_timo, &ts2);
561 timespecadd(&nbp->nbp_timo, &ts2);
562 timespecadd(&nbp->nbp_timo, &ts2); /* * 4 */
563 error = nbssn_rq_request(nbp, td);
564 if (error)
565 smb_nbst_disconnect(vcp, td);
566 return error;
567}
568
569static int
570smb_nbst_disconnect(struct smb_vc *vcp, struct thread *td)
571{
572 struct nbpcb *nbp = vcp->vc_tdata;
573 struct socket *so;
574
575 if (nbp == NULL || nbp->nbp_tso == NULL)
576 return ENOTCONN;
577 if ((so = nbp->nbp_tso) != NULL) {
578 nbp->nbp_flags &= ~NBF_CONNECTED;
579 nbp->nbp_tso = (struct socket *)NULL;
580 soshutdown(so, 2);
581 soclose(so);
582 }
583 if (nbp->nbp_state != NBST_RETARGET) {
584 nbp->nbp_state = NBST_CLOSED;
585 }
586 return 0;
587}
588
589static int
590smb_nbst_send(struct smb_vc *vcp, struct mbuf *m0, struct thread *td)
591{
592 struct nbpcb *nbp = vcp->vc_tdata;
593 int error;
594
595 if (nbp->nbp_state != NBST_SESSION) {
596 error = ENOTCONN;
597 goto abort;
598 }
599 M_PREPEND(m0, 4, M_WAITOK);
600 if (m0 == NULL)
601 return ENOBUFS;
602 nb_sethdr(m0, NB_SSN_MESSAGE, m_fixhdr(m0) - 4);
603 error = nb_sosend(nbp->nbp_tso, m0, 0, td);
604 return error;
605abort:
606 if (m0)
607 m_freem(m0);
608 return error;
609}
610
611
612static int
613smb_nbst_recv(struct smb_vc *vcp, struct mbuf **mpp, struct thread *td)
614{
615 struct nbpcb *nbp = vcp->vc_tdata;
616 u_int8_t rpcode;
617 int error, rplen;
618
619 nbp->nbp_flags |= NBF_RECVLOCK;
620 error = nbssn_recv(nbp, mpp, &rplen, &rpcode, td);
621 nbp->nbp_flags &= ~NBF_RECVLOCK;
622 return error;
623}
624
625static void
626smb_nbst_timo(struct smb_vc *vcp)
627{
628 return;
629}
630
631static void
632smb_nbst_intr(struct smb_vc *vcp)
633{
634 struct nbpcb *nbp = vcp->vc_tdata;
635
636 if (nbp == NULL || nbp->nbp_tso == NULL)
637 return;
638 sorwakeup(nbp->nbp_tso);
639 sowwakeup(nbp->nbp_tso);
640}
641
642static int
643smb_nbst_getparam(struct smb_vc *vcp, int param, void *data)
644{
645 struct nbpcb *nbp = vcp->vc_tdata;
646
647 switch (param) {
648 case SMBTP_SNDSZ:
649 *(int*)data = nbp->nbp_sndbuf;
650 break;
651 case SMBTP_RCVSZ:
652 *(int*)data = nbp->nbp_rcvbuf;
653 break;
654 case SMBTP_TIMEOUT:
655 *(struct timespec*)data = nbp->nbp_timo;
656 break;
657 default:
658 return EINVAL;
659 }
660 return 0;
661}
662
663static int
664smb_nbst_setparam(struct smb_vc *vcp, int param, void *data)
665{
666 struct nbpcb *nbp = vcp->vc_tdata;
667
668 switch (param) {
669 case SMBTP_SELECTID:
670 nbp->nbp_selectid = data;
671 break;
672 default:
673 return EINVAL;
674 }
675 return 0;
676}
677
678/*
679 * Check for fatal errors
680 */
681static int
682smb_nbst_fatal(struct smb_vc *vcp, int error)
683{
684 switch (error) {
685 case ENOTCONN:
686 case ENETRESET:
687 case ECONNABORTED:
688 return 1;
689 }
690 return 0;
691}
692
693
694struct smb_tran_desc smb_tran_nbtcp_desc = {
695 SMBT_NBTCP,
696 smb_nbst_create, smb_nbst_done,
697 smb_nbst_bind, smb_nbst_connect, smb_nbst_disconnect,
698 smb_nbst_send, smb_nbst_recv,
699 smb_nbst_timo, smb_nbst_intr,
700 smb_nbst_getparam, smb_nbst_setparam,
701 smb_nbst_fatal
702};
703