smb/client/cifssmb.c

67 /* reconnect the socket, tcon, and smb session if needed */
78 	 * tcp and smb session status done differently for those three - in the
271     /* potential retries of smb operations it turns out we can determine */
323 	/* check for parm and data offset going beyond end of smb */
333 	 * less than negotiated smb buffer
572 	ECHO_REQ *smb;
580 	rc = small_smb_init(SMB_COM_ECHO, 0, NULL, (void **)&smb);
585 		smb->hdr.Flags2 |= SMBFLG2_UNICODE;
588 	smb->hdr.Tid = 0xffff;
589 	smb->hdr.WordCount = 1;
590 	put_unaligned_le16(1, &smb->EchoCount);
591 	put_bcc(1, &smb->hdr);
592 	smb->Data[0] = 'a';
593 	inc_rfc1001_len(smb, 3);
596 	iov[0].iov_base = smb;
597 	iov[1].iov_len = get_rfc1002_length(smb);
598 	iov[1].iov_base = (char *)smb + 4;
605 	cifs_small_buf_release(smb);
655 		since server closed smb session, no sense reporting
947 		rc = -EIO;	/* bad smb */
1318 	READ_REQ *smb = NULL;
1337 	rc = small_smb_init(SMB_COM_READ_ANDX, wct, tcon, (void **)&smb);
1341 	smb->hdr.Pid = cpu_to_le16((__u16)rdata->pid);
1342 	smb->hdr.PidHigh = cpu_to_le16((__u16)(rdata->pid >> 16));
1344 	smb->AndXCommand = 0xFF;	/* none */
1345 	smb->Fid = rdata->cfile->fid.netfid;
1346 	smb->OffsetLow = cpu_to_le32(rdata->offset & 0xFFFFFFFF);
1348 		smb->OffsetHigh = cpu_to_le32(rdata->offset >> 32);
1349 	smb->Remaining = 0;
1350 	smb->MaxCount = cpu_to_le16(rdata->bytes & 0xFFFF);
1351 	smb->MaxCountHigh = cpu_to_le32(rdata->bytes >> 16);
1353 		smb->ByteCount = 0;
1357 			(struct smb_com_readx_req *)smb;
1362 	rdata->iov[0].iov_base = smb;
1364 	rdata->iov[1].iov_base = (char *)smb + 4;
1365 	rdata->iov[1].iov_len = get_rfc1002_length(smb);
1376 	cifs_small_buf_release(smb);
1569 		byte_count = bytes_sent + 5; /* bigger pad, smaller smb hdr */
1621 	WRITE_RSP *smb = (WRITE_RSP *)mid->resp_buf;
1630 		written = le16_to_cpu(smb->CountHigh);
1632 		written += le16_to_cpu(smb->Count);
1667 	WRITE_REQ *smb = NULL;
1683 	rc = small_smb_init(SMB_COM_WRITE_ANDX, wct, tcon, (void **)&smb);
1687 	smb->hdr.Pid = cpu_to_le16((__u16)wdata->pid);
1688 	smb->hdr.PidHigh = cpu_to_le16((__u16)(wdata->pid >> 16));
1690 	smb->AndXCommand = 0xFF;	/* none */
1691 	smb->Fid = wdata->cfile->fid.netfid;
1692 	smb->OffsetLow = cpu_to_le32(wdata->offset & 0xFFFFFFFF);
1694 		smb->OffsetHigh = cpu_to_le32(wdata->offset >> 32);
1695 	smb->Reserved = 0xFFFFFFFF;
1696 	smb->WriteMode = 0;
1697 	smb->Remaining = 0;
1699 	smb->DataOffset =
1704 	iov[0].iov_base = smb;
1705 	iov[1].iov_len = get_rfc1002_length(smb) + 1;
1706 	iov[1].iov_base = (char *)smb + 4;
1716 	smb->DataLengthLow = cpu_to_le16(wdata->bytes & 0xFFFF);
1717 	smb->DataLengthHigh = cpu_to_le16(wdata->bytes >> 16);
1720 		inc_rfc1001_len(&smb->hdr, wdata->bytes + 1);
1721 		put_bcc(wdata->bytes + 1, &smb->hdr);
1725 				(struct smb_com_writex_req *)smb;
1741 	cifs_small_buf_release(smb);
1804 		inc_rfc1001_len(pSMB, count + 5); /* smb data starts later */
1807 	else /* wct == 12 */ /* bigger pad, smaller smb hdr, keep offset ok */ {
2057 			rc = -EIO;      /* bad smb */
3100 			rc = -EIO;      /* bad smb */
3269 			rc = -EIO;      /* bad smb */
3296  * Initialize NT TRANSACT SMB into small smb request buffer.  This assumes that
3363 		cifs_dbg(FYI, "parms start after end of smb\n");
3366 		cifs_dbg(FYI, "parm end after end of smb\n");
3369 		cifs_dbg(FYI, "data starts after end of smb\n");
3372 		cifs_dbg(FYI, "data %p + count %d (%p) past smb end %p start %p\n",
3437 		cifs_dbg(FYI, "smb %p parm %p data %p\n",
3441 			rc = -EIO;      /* bad smb */
3659 			rc = -EIO;	/* bad smb */
3744 			rc = -EIO;	/* bad smb */
3825 			rc = -EIO;	/* bad smb */
3907 			rc = -EIO;	/* bad smb */
4295 			rc = -EIO;      /* bad smb */
4410 		rc = -EIO;      /* bad smb */
4484 			rc = -EIO;      /* bad smb */
4571 			rc = -EIO;	/* bad smb */
4659 			rc = -EIO;	/* bad smb */
4730 			rc = -EIO;	/* bad smb */
4799 			rc = -EIO;	/* bad smb */
4881 			rc = -EIO;	/* bad smb */
4944 			rc = -EIO;	/* bad smb */
5679 		rc = -EIO;	/* bad smb */
5689 	/* BB check if start of smb + data_offset > &bcc+ bcc */
5861 	we need to ensure that it fits within the smb */