1/*-
2 * SPDX-License-Identifier: BSD-2-Clause
3 *
4 * Copyright (c) 2000-2001 Boris Popov
5 * All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 * 1. Redistributions of source code must retain the above copyright
11 *    notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 *    notice, this list of conditions and the following disclaimer in the
14 *    documentation and/or other materials provided with the distribution.
15 *
16 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26 * SUCH DAMAGE.
27 */
28
29/*
30 * Connection engine.
31 */
32
33#include <sys/param.h>
34#include <sys/systm.h>
35#include <sys/kernel.h>
36#include <sys/malloc.h>
37#include <sys/priv.h>
38#include <sys/proc.h>
39#include <sys/lock.h>
40#include <sys/sysctl.h>
41#include <sys/socketvar.h>
42
43#include <sys/iconv.h>
44
45#include <netsmb/smb.h>
46#include <netsmb/smb_subr.h>
47#include <netsmb/smb_conn.h>
48#include <netsmb/smb_tran.h>
49#include <netsmb/smb_trantcp.h>
50
51static struct smb_connobj smb_vclist;
52static int smb_vcnext = 1;	/* next unique id for VC */
53
54SYSCTL_NODE(_net, OID_AUTO, smb, CTLFLAG_RW | CTLFLAG_MPSAFE, NULL,
55    "SMB protocol");
56
57static MALLOC_DEFINE(M_SMBCONN, "smb_conn", "SMB connection");
58
59static void smb_co_init(struct smb_connobj *cp, int level, char *ilockname,
60    char *lockname);
61static void smb_co_done(struct smb_connobj *cp);
62static int  smb_vc_disconnect(struct smb_vc *vcp);
63static void smb_vc_free(struct smb_connobj *cp);
64static void smb_vc_gone(struct smb_connobj *cp, struct smb_cred *scred);
65static smb_co_free_t smb_share_free;
66static smb_co_gone_t smb_share_gone;
67
68static int  smb_sysctl_treedump(SYSCTL_HANDLER_ARGS);
69
70SYSCTL_PROC(_net_smb, OID_AUTO, treedump,
71    CTLFLAG_RD | CTLTYPE_OPAQUE | CTLFLAG_MPSAFE,
72    NULL, 0, smb_sysctl_treedump, "S,treedump",
73    "Requester tree");
74
75int
76smb_sm_init(void)
77{
78
79	smb_co_init(&smb_vclist, SMBL_SM, "smbsm ilock", "smbsm");
80	sx_xlock(&smb_vclist.co_interlock);
81	smb_co_unlock(&smb_vclist);
82	sx_unlock(&smb_vclist.co_interlock);
83	return 0;
84}
85
86int
87smb_sm_done(void)
88{
89
90	/* XXX: hold the mutex */
91	if (smb_vclist.co_usecount > 1) {
92		SMBERROR("%d connections still active\n", smb_vclist.co_usecount - 1);
93		return EBUSY;
94	}
95	smb_co_done(&smb_vclist);
96	return 0;
97}
98
99static int
100smb_sm_lockvclist(void)
101{
102	int error;
103
104	sx_xlock(&smb_vclist.co_interlock);
105	error = smb_co_lock(&smb_vclist);
106	sx_unlock(&smb_vclist.co_interlock);
107
108	return error;
109}
110
111static void
112smb_sm_unlockvclist(void)
113{
114
115	sx_xlock(&smb_vclist.co_interlock);
116	smb_co_unlock(&smb_vclist);
117	sx_unlock(&smb_vclist.co_interlock);
118}
119
120static int
121smb_sm_lookupint(struct smb_vcspec *vcspec, struct smb_sharespec *shspec,
122	struct smb_cred *scred,	struct smb_vc **vcpp)
123{
124	struct smb_connobj *scp;
125	struct smb_vc *vcp;
126	int exact = 1;
127	int error;
128
129	vcspec->shspec = shspec;
130	error = ENOENT;
131	vcp = NULL;
132	SMBCO_FOREACH(scp, &smb_vclist) {
133		vcp = (struct smb_vc *)scp;
134		error = smb_vc_lock(vcp);
135		if (error)
136			continue;
137
138		if ((vcp->obj.co_flags & SMBV_PRIVATE) ||
139		    !CONNADDREQ(vcp->vc_paddr, vcspec->sap) ||
140		    strcmp(vcp->vc_username, vcspec->username) != 0)
141			goto err1;
142		if (vcspec->owner != SMBM_ANY_OWNER) {
143			if (vcp->vc_uid != vcspec->owner)
144				goto err1;
145		} else
146			exact = 0;
147		if (vcspec->group != SMBM_ANY_GROUP) {
148			if (vcp->vc_grp != vcspec->group)
149				goto err1;
150		} else
151			exact = 0;
152		if (vcspec->mode & SMBM_EXACT) {
153			if (!exact || (vcspec->mode & SMBM_MASK) !=
154			    vcp->vc_mode)
155				goto err1;
156		}
157		if (smb_vc_access(vcp, scred, vcspec->mode) != 0)
158			goto err1;
159		vcspec->ssp = NULL;
160		if (shspec) {
161			error = (int)smb_vc_lookupshare(vcp, shspec, scred,
162			    &vcspec->ssp);
163			if (error)
164				goto fail;
165		}
166		error = 0;
167		break;
168	err1:
169		error = 1;
170	fail:
171		smb_vc_unlock(vcp);
172	}
173	if (vcp) {
174		smb_vc_ref(vcp);
175		*vcpp = vcp;
176	}
177	return (error);
178}
179
180int
181smb_sm_lookup(struct smb_vcspec *vcspec, struct smb_sharespec *shspec,
182	struct smb_cred *scred,	struct smb_vc **vcpp)
183{
184	struct smb_vc *vcp;
185	struct smb_share *ssp = NULL;
186	int error;
187
188	*vcpp = vcp = NULL;
189
190	error = smb_sm_lockvclist();
191	if (error)
192		return error;
193	error = smb_sm_lookupint(vcspec, shspec, scred, vcpp);
194	if (error == 0 || (vcspec->flags & SMBV_CREATE) == 0) {
195		smb_sm_unlockvclist();
196		return error;
197	}
198	error = smb_sm_lookupint(vcspec, NULL, scred, &vcp);
199	if (error) {
200		error = smb_vc_create(vcspec, scred, &vcp);
201		if (error)
202			goto out;
203		error = smb_vc_connect(vcp, scred);
204		if (error)
205			goto out;
206	}
207	if (shspec == NULL)
208		goto out;
209	error = smb_share_create(vcp, shspec, scred, &ssp);
210	if (error)
211		goto out;
212	error = smb_smb_treeconnect(ssp, scred);
213	if (error == 0)
214		vcspec->ssp = ssp;
215	else
216		smb_share_put(ssp, scred);
217out:
218	smb_sm_unlockvclist();
219	if (error == 0)
220		*vcpp = vcp;
221	else if (vcp) {
222		smb_vc_lock(vcp);
223		smb_vc_put(vcp, scred);
224	}
225	return error;
226}
227
228/*
229 * Common code for connection object
230 */
231static void
232smb_co_init(struct smb_connobj *cp, int level, char *ilockname, char *lockname)
233{
234	SLIST_INIT(&cp->co_children);
235	sx_init_flags(&cp->co_interlock, ilockname, SX_RECURSE);
236	cv_init(&cp->co_lock, "smblock");
237	cp->co_lockcnt = 0;
238	cp->co_locker = NULL;
239	cp->co_level = level;
240	cp->co_usecount = 1;
241	sx_xlock(&cp->co_interlock);
242	smb_co_lock(cp);
243	sx_unlock(&cp->co_interlock);
244}
245
246static void
247smb_co_done(struct smb_connobj *cp)
248{
249
250	sx_destroy(&cp->co_interlock);
251	cv_destroy(&cp->co_lock);
252	cp->co_locker = NULL;
253	cp->co_flags = 0;
254	cp->co_lockcnt = 0;
255}
256
257static void
258smb_co_gone(struct smb_connobj *cp, struct smb_cred *scred)
259{
260	struct smb_connobj *parent;
261
262	if (cp->co_gone)
263		cp->co_gone(cp, scred);
264	parent = cp->co_parent;
265	if (parent) {
266		sx_xlock(&parent->co_interlock);
267		smb_co_lock(parent);
268		sx_unlock(&parent->co_interlock);
269		SLIST_REMOVE(&parent->co_children, cp, smb_connobj, co_next);
270		smb_co_put(parent, scred);
271	}
272	if (cp->co_free)
273		cp->co_free(cp);
274}
275
276void
277smb_co_ref(struct smb_connobj *cp)
278{
279
280	sx_xlock(&cp->co_interlock);
281	cp->co_usecount++;
282	sx_unlock(&cp->co_interlock);
283}
284
285void
286smb_co_rele(struct smb_connobj *cp, struct smb_cred *scred)
287{
288
289	sx_xlock(&cp->co_interlock);
290	smb_co_unlock(cp);
291	if (cp->co_usecount > 1) {
292		cp->co_usecount--;
293		sx_unlock(&cp->co_interlock);
294		return;
295	}
296	if (cp->co_usecount == 0) {
297		SMBERROR("negative use_count for object %d", cp->co_level);
298		sx_unlock(&cp->co_interlock);
299		return;
300	}
301	cp->co_usecount--;
302	cp->co_flags |= SMBO_GONE;
303	sx_unlock(&cp->co_interlock);
304	smb_co_gone(cp, scred);
305}
306
307int
308smb_co_get(struct smb_connobj *cp, struct smb_cred *scred)
309{
310	int error;
311
312	MPASS(sx_xholder(&cp->co_interlock) == curthread);
313	cp->co_usecount++;
314	error = smb_co_lock(cp);
315	if (error)
316		cp->co_usecount--;
317	return error;
318}
319
320void
321smb_co_put(struct smb_connobj *cp, struct smb_cred *scred)
322{
323
324	sx_xlock(&cp->co_interlock);
325	if (cp->co_usecount > 1) {
326		cp->co_usecount--;
327	} else if (cp->co_usecount == 1) {
328		cp->co_usecount--;
329		cp->co_flags |= SMBO_GONE;
330	} else {
331		SMBERROR("negative usecount");
332	}
333	smb_co_unlock(cp);
334	sx_unlock(&cp->co_interlock);
335	if ((cp->co_flags & SMBO_GONE) == 0)
336		return;
337	smb_co_gone(cp, scred);
338}
339
340int
341smb_co_lock(struct smb_connobj *cp)
342{
343
344	MPASS(sx_xholder(&cp->co_interlock) == curthread);
345	for (;;) {
346		if (cp->co_flags & SMBO_GONE)
347			return EINVAL;
348		if (cp->co_locker == NULL) {
349			cp->co_locker = curthread;
350			return 0;
351		}
352		if (cp->co_locker == curthread) {
353			cp->co_lockcnt++;
354			return 0;
355		}
356		cv_wait(&cp->co_lock, &cp->co_interlock);
357	}
358}
359
360void
361smb_co_unlock(struct smb_connobj *cp)
362{
363
364	MPASS(sx_xholder(&cp->co_interlock) == curthread);
365	MPASS(cp->co_locker == curthread);
366	if (cp->co_lockcnt != 0) {
367		cp->co_lockcnt--;
368		return;
369	}
370	cp->co_locker = NULL;
371	cv_signal(&cp->co_lock);
372}
373
374static void
375smb_co_addchild(struct smb_connobj *parent, struct smb_connobj *child)
376{
377
378	smb_co_ref(parent);
379	SLIST_INSERT_HEAD(&parent->co_children, child, co_next);
380	child->co_parent = parent;
381}
382
383/*
384 * Session implementation
385 */
386
387int
388smb_vc_create(struct smb_vcspec *vcspec,
389	struct smb_cred *scred, struct smb_vc **vcpp)
390{
391	struct smb_vc *vcp;
392	struct ucred *cred = scred->scr_cred;
393	uid_t uid = vcspec->owner;
394	gid_t gid = vcspec->group;
395	uid_t realuid = cred->cr_uid;
396	char *domain = vcspec->domain;
397	int error, isroot;
398
399	isroot = smb_suser(cred) == 0;
400	/*
401	 * Only superuser can create VCs with different uid and gid
402	 */
403	if (uid != SMBM_ANY_OWNER && uid != realuid && !isroot)
404		return EPERM;
405	if (gid != SMBM_ANY_GROUP && !groupmember(gid, cred) && !isroot)
406		return EPERM;
407
408	vcp = smb_zmalloc(sizeof(*vcp), M_SMBCONN, M_WAITOK);
409	smb_co_init(VCTOCP(vcp), SMBL_VC, "smb_vc ilock", "smb_vc");
410	vcp->obj.co_free = smb_vc_free;
411	vcp->obj.co_gone = smb_vc_gone;
412	vcp->vc_number = smb_vcnext++;
413	vcp->vc_timo = SMB_DEFRQTIMO;
414	vcp->vc_smbuid = SMB_UID_UNKNOWN;
415	vcp->vc_mode = vcspec->rights & SMBM_MASK;
416	vcp->obj.co_flags = vcspec->flags & (SMBV_PRIVATE | SMBV_SINGLESHARE);
417	vcp->vc_tdesc = &smb_tran_nbtcp_desc;
418	vcp->vc_seqno = 0;
419	vcp->vc_mackey = NULL;
420	vcp->vc_mackeylen = 0;
421
422	if (uid == SMBM_ANY_OWNER)
423		uid = realuid;
424	if (gid == SMBM_ANY_GROUP)
425		gid = cred->cr_groups[0];
426	vcp->vc_uid = uid;
427	vcp->vc_grp = gid;
428
429	smb_sl_init(&vcp->vc_stlock, "vcstlock");
430	error = ENOMEM;
431
432	vcp->vc_paddr = sodupsockaddr(vcspec->sap, M_WAITOK);
433	if (vcp->vc_paddr == NULL)
434		goto fail;
435	vcp->vc_laddr = sodupsockaddr(vcspec->lap, M_WAITOK);
436	if (vcp->vc_laddr == NULL)
437		goto fail;
438	vcp->vc_pass = smb_strdup(vcspec->pass);
439	if (vcp->vc_pass == NULL)
440		goto fail;
441	vcp->vc_domain = smb_strdup((domain && domain[0]) ? domain :
442	    "NODOMAIN");
443	if (vcp->vc_domain == NULL)
444		goto fail;
445	vcp->vc_srvname = smb_strdup(vcspec->srvname);
446	if (vcp->vc_srvname == NULL)
447		goto fail;
448	vcp->vc_username = smb_strdup(vcspec->username);
449	if (vcp->vc_username == NULL)
450		goto fail;
451	error = (int)iconv_open("tolower", vcspec->localcs, &vcp->vc_tolower);
452	if (error)
453		goto fail;
454	error = (int)iconv_open("toupper", vcspec->localcs, &vcp->vc_toupper);
455	if (error)
456		goto fail;
457	if (vcspec->servercs[0]) {
458		error = (int)iconv_open(vcspec->servercs, vcspec->localcs,
459		    &vcp->vc_cp_toserver);
460		if (error)
461			goto fail;
462		error = (int)iconv_open(vcspec->localcs, vcspec->servercs,
463		    &vcp->vc_cp_tolocal);
464		if (error)
465			goto fail;
466		vcp->vc_toserver = vcp->vc_cp_toserver;
467		vcp->vc_tolocal = vcp->vc_cp_tolocal;
468		iconv_add(ENCODING_UNICODE, ENCODING_UNICODE, SMB_UNICODE_NAME);
469		iconv_add(ENCODING_UNICODE, SMB_UNICODE_NAME, ENCODING_UNICODE);
470		error = (int)iconv_open(SMB_UNICODE_NAME, vcspec->localcs,
471		    &vcp->vc_ucs_toserver);
472		if (!error) {
473			error = (int)iconv_open(vcspec->localcs, SMB_UNICODE_NAME,
474			    &vcp->vc_ucs_tolocal);
475		}
476		if (error) {
477			if (vcp->vc_ucs_toserver)
478				iconv_close(vcp->vc_ucs_toserver);
479			vcp->vc_ucs_toserver = NULL;
480			vcp->vc_ucs_tolocal = NULL;
481		}
482	}
483	error = (int)smb_iod_create(vcp);
484	if (error)
485		goto fail;
486	*vcpp = vcp;
487	smb_co_addchild(&smb_vclist, VCTOCP(vcp));
488	return (0);
489
490 fail:
491	smb_vc_put(vcp, scred);
492	return (error);
493}
494
495static void
496smb_vc_free(struct smb_connobj *cp)
497{
498	struct smb_vc *vcp = CPTOVC(cp);
499
500	if (vcp->vc_iod)
501		smb_iod_destroy(vcp->vc_iod);
502	SMB_STRFREE(vcp->vc_username);
503	SMB_STRFREE(vcp->vc_srvname);
504	SMB_STRFREE(vcp->vc_pass);
505	SMB_STRFREE(vcp->vc_domain);
506	if (vcp->vc_mackey)
507		free(vcp->vc_mackey, M_SMBTEMP);
508	if (vcp->vc_paddr)
509		free(vcp->vc_paddr, M_SONAME);
510	if (vcp->vc_laddr)
511		free(vcp->vc_laddr, M_SONAME);
512	if (vcp->vc_tolower)
513		iconv_close(vcp->vc_tolower);
514	if (vcp->vc_toupper)
515		iconv_close(vcp->vc_toupper);
516	if (vcp->vc_tolocal)
517		vcp->vc_tolocal = NULL;
518	if (vcp->vc_toserver)
519		vcp->vc_toserver = NULL;
520	if (vcp->vc_cp_tolocal)
521		iconv_close(vcp->vc_cp_tolocal);
522	if (vcp->vc_cp_toserver)
523		iconv_close(vcp->vc_cp_toserver);
524	if (vcp->vc_ucs_tolocal)
525		iconv_close(vcp->vc_ucs_tolocal);
526	if (vcp->vc_ucs_toserver)
527		iconv_close(vcp->vc_ucs_toserver);
528	smb_co_done(VCTOCP(vcp));
529	smb_sl_destroy(&vcp->vc_stlock);
530	free(vcp, M_SMBCONN);
531}
532
533/*
534 * Called when use count of VC dropped to zero.
535 */
536static void
537smb_vc_gone(struct smb_connobj *cp, struct smb_cred *scred)
538{
539	struct smb_vc *vcp = CPTOVC(cp);
540
541	smb_vc_disconnect(vcp);
542}
543
544void
545smb_vc_ref(struct smb_vc *vcp)
546{
547	smb_co_ref(VCTOCP(vcp));
548}
549
550void
551smb_vc_rele(struct smb_vc *vcp, struct smb_cred *scred)
552{
553	smb_co_rele(VCTOCP(vcp), scred);
554}
555
556int
557smb_vc_get(struct smb_vc *vcp, struct smb_cred *scred)
558{
559	struct smb_connobj *cp;
560	int error;
561
562	cp = VCTOCP(vcp);
563	sx_xlock(&cp->co_interlock);
564	error = smb_co_get(cp, scred);
565	sx_unlock(&cp->co_interlock);
566	return error;
567}
568
569void
570smb_vc_put(struct smb_vc *vcp, struct smb_cred *scred)
571{
572	smb_co_put(VCTOCP(vcp), scred);
573}
574
575int
576smb_vc_lock(struct smb_vc *vcp)
577{
578	struct smb_connobj *cp;
579	int error;
580
581	cp = VCTOCP(vcp);
582	sx_xlock(&cp->co_interlock);
583	error = smb_co_lock(cp);
584	sx_unlock(&cp->co_interlock);
585	return error;
586}
587
588void
589smb_vc_unlock(struct smb_vc *vcp)
590{
591
592	struct smb_connobj *cp;
593
594	cp = VCTOCP(vcp);
595	sx_xlock(&cp->co_interlock);
596	smb_co_unlock(cp);
597	sx_unlock(&cp->co_interlock);
598}
599
600int
601smb_vc_access(struct smb_vc *vcp, struct smb_cred *scred, mode_t mode)
602{
603	struct ucred *cred = scred->scr_cred;
604
605	if (smb_suser(cred) == 0 || cred->cr_uid == vcp->vc_uid)
606		return 0;
607	mode >>= 3;
608	if (!groupmember(vcp->vc_grp, cred))
609		mode >>= 3;
610	return (vcp->vc_mode & mode) == mode ? 0 : EACCES;
611}
612
613static int
614smb_vc_cmpshare(struct smb_share *ssp, struct smb_sharespec *dp)
615{
616	int exact = 1;
617
618	if (strcmp(ssp->ss_name, dp->name) != 0)
619		return 1;
620	if (dp->owner != SMBM_ANY_OWNER) {
621		if (ssp->ss_uid != dp->owner)
622			return 1;
623	} else
624		exact = 0;
625	if (dp->group != SMBM_ANY_GROUP) {
626		if (ssp->ss_grp != dp->group)
627			return 1;
628	} else
629		exact = 0;
630
631	if (dp->mode & SMBM_EXACT) {
632		if (!exact)
633			return 1;
634		return (dp->mode & SMBM_MASK) == ssp->ss_mode ? 0 : 1;
635	}
636	if (smb_share_access(ssp, dp->scred, dp->mode) != 0)
637		return 1;
638	return 0;
639}
640
641/*
642 * Lookup share in the given VC. Share referenced and locked on return.
643 * VC expected to be locked on entry and will be left locked on exit.
644 */
645int
646smb_vc_lookupshare(struct smb_vc *vcp, struct smb_sharespec *dp,
647	struct smb_cred *scred,	struct smb_share **sspp)
648{
649	struct smb_connobj *scp = NULL;
650	struct smb_share *ssp = NULL;
651	int error;
652
653	*sspp = NULL;
654	dp->scred = scred;
655	SMBCO_FOREACH(scp, VCTOCP(vcp)) {
656		ssp = (struct smb_share *)scp;
657		error = smb_share_lock(ssp);
658		if (error)
659			continue;
660		if (smb_vc_cmpshare(ssp, dp) == 0)
661			break;
662		smb_share_unlock(ssp);
663	}
664	if (ssp) {
665		smb_share_ref(ssp);
666		*sspp = ssp;
667		error = 0;
668	} else
669		error = ENOENT;
670	return error;
671}
672
673int
674smb_vc_connect(struct smb_vc *vcp, struct smb_cred *scred)
675{
676
677	return smb_iod_request(vcp->vc_iod, SMBIOD_EV_CONNECT | SMBIOD_EV_SYNC, NULL);
678}
679
680/*
681 * Destroy VC to server, invalidate shares linked with it.
682 * Transport should be locked on entry.
683 */
684int
685smb_vc_disconnect(struct smb_vc *vcp)
686{
687
688	if (vcp->vc_iod != NULL)
689		smb_iod_request(vcp->vc_iod, SMBIOD_EV_DISCONNECT |
690		    SMBIOD_EV_SYNC, NULL);
691	return 0;
692}
693
694static char smb_emptypass[] = "";
695
696const char *
697smb_vc_getpass(struct smb_vc *vcp)
698{
699	if (vcp->vc_pass)
700		return vcp->vc_pass;
701	return smb_emptypass;
702}
703
704static int
705smb_vc_getinfo(struct smb_vc *vcp, struct smb_vc_info *vip)
706{
707	bzero(vip, sizeof(struct smb_vc_info));
708	vip->itype = SMB_INFO_VC;
709	vip->usecount = vcp->obj.co_usecount;
710	vip->uid = vcp->vc_uid;
711	vip->gid = vcp->vc_grp;
712	vip->mode = vcp->vc_mode;
713	vip->flags = vcp->obj.co_flags;
714	vip->sopt = vcp->vc_sopt;
715	vip->iodstate = vcp->vc_iod->iod_state;
716	bzero(&vip->sopt.sv_skey, sizeof(vip->sopt.sv_skey));
717	snprintf(vip->srvname, sizeof(vip->srvname), "%s", vcp->vc_srvname);
718	snprintf(vip->vcname, sizeof(vip->vcname), "%s", vcp->vc_username);
719	return 0;
720}
721
722u_short
723smb_vc_nextmid(struct smb_vc *vcp)
724{
725	u_short r;
726
727	sx_xlock(&vcp->obj.co_interlock);
728	r = vcp->vc_mid++;
729	sx_unlock(&vcp->obj.co_interlock);
730	return r;
731}
732
733/*
734 * Share implementation
735 */
736/*
737 * Allocate share structure and attach it to the given VC
738 * Connection expected to be locked on entry. Share will be returned
739 * in locked state.
740 */
741int
742smb_share_create(struct smb_vc *vcp, struct smb_sharespec *shspec,
743	struct smb_cred *scred, struct smb_share **sspp)
744{
745	struct smb_share *ssp;
746	struct ucred *cred = scred->scr_cred;
747	uid_t realuid = cred->cr_uid;
748	uid_t uid = shspec->owner;
749	gid_t gid = shspec->group;
750	int error, isroot;
751
752	isroot = smb_suser(cred) == 0;
753	/*
754	 * Only superuser can create shares with different uid and gid
755	 */
756	if (uid != SMBM_ANY_OWNER && uid != realuid && !isroot)
757		return EPERM;
758	if (gid != SMBM_ANY_GROUP && !groupmember(gid, cred) && !isroot)
759		return EPERM;
760	error = smb_vc_lookupshare(vcp, shspec, scred, &ssp);
761	if (!error) {
762		smb_share_put(ssp, scred);
763		return EEXIST;
764	}
765	if (uid == SMBM_ANY_OWNER)
766		uid = realuid;
767	if (gid == SMBM_ANY_GROUP)
768		gid = cred->cr_groups[0];
769	ssp = smb_zmalloc(sizeof(*ssp), M_SMBCONN, M_WAITOK);
770	smb_co_init(SSTOCP(ssp), SMBL_SHARE, "smbss ilock", "smbss");
771	ssp->obj.co_free = smb_share_free;
772	ssp->obj.co_gone = smb_share_gone;
773	smb_sl_init(&ssp->ss_stlock, "ssstlock");
774	ssp->ss_name = smb_strdup(shspec->name);
775	if (shspec->pass && shspec->pass[0])
776		ssp->ss_pass = smb_strdup(shspec->pass);
777	ssp->ss_type = shspec->stype;
778	ssp->ss_tid = SMB_TID_UNKNOWN;
779	ssp->ss_uid = uid;
780	ssp->ss_grp = gid;
781	ssp->ss_mode = shspec->rights & SMBM_MASK;
782	smb_co_addchild(VCTOCP(vcp), SSTOCP(ssp));
783	*sspp = ssp;
784	return 0;
785}
786
787static void
788smb_share_free(struct smb_connobj *cp)
789{
790	struct smb_share *ssp = CPTOSS(cp);
791
792	SMB_STRFREE(ssp->ss_name);
793	SMB_STRFREE(ssp->ss_pass);
794	smb_sl_destroy(&ssp->ss_stlock);
795	smb_co_done(SSTOCP(ssp));
796	free(ssp, M_SMBCONN);
797}
798
799static void
800smb_share_gone(struct smb_connobj *cp, struct smb_cred *scred)
801{
802	struct smb_share *ssp = CPTOSS(cp);
803
804	smb_smb_treedisconnect(ssp, scred);
805}
806
807void
808smb_share_ref(struct smb_share *ssp)
809{
810	smb_co_ref(SSTOCP(ssp));
811}
812
813void
814smb_share_rele(struct smb_share *ssp, struct smb_cred *scred)
815{
816	smb_co_rele(SSTOCP(ssp), scred);
817}
818
819int
820smb_share_get(struct smb_share *ssp, struct smb_cred *scred)
821{
822	struct smb_connobj *cp = SSTOCP(ssp);
823	int error;
824
825	sx_xlock(&cp->co_interlock);
826	error = smb_co_get(cp, scred);
827	sx_unlock(&cp->co_interlock);
828	return error;
829}
830
831void
832smb_share_put(struct smb_share *ssp, struct smb_cred *scred)
833{
834
835	smb_co_put(SSTOCP(ssp), scred);
836}
837
838int
839smb_share_lock(struct smb_share *ssp)
840{
841	struct smb_connobj *cp;
842	int error;
843
844	cp = SSTOCP(ssp);
845	sx_xlock(&cp->co_interlock);
846	error = smb_co_lock(cp);
847	sx_unlock(&cp->co_interlock);
848	return error;
849}
850
851void
852smb_share_unlock(struct smb_share *ssp)
853{
854	struct smb_connobj *cp;
855
856	cp = SSTOCP(ssp);
857	sx_xlock(&cp->co_interlock);
858	smb_co_unlock(cp);
859	sx_unlock(&cp->co_interlock);
860}
861
862int
863smb_share_access(struct smb_share *ssp, struct smb_cred *scred, mode_t mode)
864{
865	struct ucred *cred = scred->scr_cred;
866
867	if (smb_suser(cred) == 0 || cred->cr_uid == ssp->ss_uid)
868		return 0;
869	mode >>= 3;
870	if (!groupmember(ssp->ss_grp, cred))
871		mode >>= 3;
872	return (ssp->ss_mode & mode) == mode ? 0 : EACCES;
873}
874
875void
876smb_share_invalidate(struct smb_share *ssp)
877{
878	ssp->ss_tid = SMB_TID_UNKNOWN;
879}
880
881int
882smb_share_valid(struct smb_share *ssp)
883{
884	return ssp->ss_tid != SMB_TID_UNKNOWN &&
885	    ssp->ss_vcgenid == SSTOVC(ssp)->vc_genid;
886}
887
888const char*
889smb_share_getpass(struct smb_share *ssp)
890{
891	struct smb_vc *vcp;
892
893	if (ssp->ss_pass)
894		return ssp->ss_pass;
895	vcp = SSTOVC(ssp);
896	if (vcp->vc_pass)
897		return vcp->vc_pass;
898	return smb_emptypass;
899}
900
901static int
902smb_share_getinfo(struct smb_share *ssp, struct smb_share_info *sip)
903{
904	bzero(sip, sizeof(struct smb_share_info));
905	sip->itype = SMB_INFO_SHARE;
906	sip->usecount = ssp->obj.co_usecount;
907	sip->tid  = ssp->ss_tid;
908	sip->type= ssp->ss_type;
909	sip->uid = ssp->ss_uid;
910	sip->gid = ssp->ss_grp;
911	sip->mode= ssp->ss_mode;
912	sip->flags = ssp->obj.co_flags;
913	snprintf(sip->sname, sizeof(sip->sname), "%s", ssp->ss_name);
914	return 0;
915}
916
917/*
918 * Dump an entire tree into sysctl call
919 */
920static int
921smb_sysctl_treedump(SYSCTL_HANDLER_ARGS)
922{
923	struct smb_connobj *scp1, *scp2;
924	struct smb_vc *vcp;
925	struct smb_share *ssp;
926	struct smb_vc_info vci;
927	struct smb_share_info ssi;
928	int error, itype;
929
930	error = sysctl_wire_old_buffer(req, 0);
931	if (error)
932		return (error);
933	error = smb_sm_lockvclist();
934	if (error)
935		return error;
936	SMBCO_FOREACH(scp1, &smb_vclist) {
937		vcp = (struct smb_vc *)scp1;
938		error = smb_vc_lock(vcp);
939		if (error)
940			continue;
941		smb_vc_getinfo(vcp, &vci);
942		error = SYSCTL_OUT(req, &vci, sizeof(struct smb_vc_info));
943		if (error) {
944			smb_vc_unlock(vcp);
945			break;
946		}
947		SMBCO_FOREACH(scp2, VCTOCP(vcp)) {
948			ssp = (struct smb_share *)scp2;
949			error = smb_share_lock(ssp);
950			if (error) {
951				error = 0;
952				continue;
953			}
954			smb_share_getinfo(ssp, &ssi);
955			smb_share_unlock(ssp);
956			error = SYSCTL_OUT(req, &ssi, sizeof(struct smb_share_info));
957			if (error)
958				break;
959		}
960		smb_vc_unlock(vcp);
961		if (error)
962			break;
963	}
964	if (!error) {
965		itype = SMB_INFO_NONE;
966		error = SYSCTL_OUT(req, &itype, sizeof(itype));
967	}
968	smb_sm_unlockvclist();
969	return error;
970}
971