linux-cifs.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [Bug report] Since 5.17 kernel, non existing files may be treated as remote DFS entries
@ 2023-01-16  2:53 J. Pablo González
  2023-01-16 13:02 ` Paulo Alcantara
  0 siblings, 1 reply; 6+ messages in thread
From: J. Pablo González @ 2023-01-16  2:53 UTC (permalink / raw)
  To: linux-cifs

[-- Attachment #1: Type: text/plain, Size: 3573 bytes --]

Hi,

We’re experiencing some issues when accessing some mounts in a DFS
share, which seem to happen since kernel 5.17.

After some investigation, we’ve pinpointed the origin to commit
a2809d0e16963fdf3984409e47f145
cccb0c6821
- Original BZ for that is https://bugzilla.kernel.org/show_bug.cgi?id=215440
- Patch discussion is at
https://patchwork.kernel.org/project/cifs-client/patch/YeHUxJ9zTVNrKveF@himera.home/
- Similar issues referenced in https://bugzilla.suse.com/show_bug.cgi?id=1198753

Basically, we have a DFS server (attached relevant portion of
smb.conf) , Centos 7.9 based, msdfs enabled, consisting of 3 nodes.
This server contains a share with a bunch of subfolders, each one of
them being a referral to a particular node in the cluster.
Since kernel 5.17, when we ask for a file that does not exist, the
server seems to give a STATUS_OBJECT_NAME_NOT_FOUND reply, which seems
fine, however, this gets processed by the kernel code:

[ 4382.120652] CIFS: Status code returned 0xc0000034
STATUS_OBJECT_NAME_NOT_FOUND
[ 4382.120675] CIFS: fs/cifs/misc.c: DFS ref
'\10.44.7.11\home-DFS\001\notexistingfile.txt' is found, emulate
-EREMOTE
…
[ 4382.128798] CIFS: VFS: cifs_mount failed w/return code = -40
[ 4382.128813] CIFS: fs/cifs/cifs_dfs_ref.c: cifs_dfs_do_automount:
cifs_dfs_do_mount:\10.44.7.11\home-DFS\001\notexistingfile.txt ,
mnt:ffffffffffffffd8
[ 4382.128817] CIFS: fs/cifs/cifs_dfs_ref.c: leaving cifs_dfs_do_automount
[ 4382.128818] CIFS: fs/cifs/cifs_dfs_ref.c: leaving
cifs_dfs_d_automount [automount failed]
…
[ 4382.619848] CIFS: fs/cifs/inode.c: Update attributes: \002 inode
0x0000000040d5a675 count 1 dentry: 0x000000000b08edaa d_time
4298866149 jiffies 4299049651
[ 4382.620945] CIFS: Status code returned 0xc0000257 STATUS_PATH_NOT_COVERED
[ 4382.620959] CIFS: fs/cifs/inode.c: creating fake fattr for DFS referral


Which results in either stat <file> throwing a fake attr structure of
a directory item …

root@myMachine tmp]# stat pepe/003/notexistingfile.txt
  File: pepe/003/notexistingfile.txt
  Size: 0               Blocks: 0          IO Block: 16384  directory
Device: 30h/48d Inode: 3322        Links: 2
Access: (0711/drwx--x--x)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:cifs_t:s0
Access: 2023-01-16 00:27:46.598419900 +0100
Modify: 2023-01-16 00:27:46.598419900 +0100
Change: 2023-01-16 00:27:46.598419900 +0100
 Birth: -

… or the cat command going into a loop , producing -EREMOTE or -40 -ELOOP errors
cat: pepe/003/notexistingfile.txt: Too many levels of symbolic links

(packet capture / full list of commands and dmesg debug trace attached)

Some additional findings...
- This seems to happen all the way up to the most recent 6.x kernel,
so there hasn't been a fix.
- Mounting with -o nodfs still exhibits the same problems for us.
- We haven't been able to reproduce any of the issues with e.g. a
Windows Server DFS share.
- Reverting the above-mentioned commit, by removing the call to the
cifs_dfs_query_info_nonascii_quirk function in both connect and
inode.c, seems to fix most issues for us.
- But even with the code reversion, a query to a file non-existing in
the node we're connected to, will still return that the object is
remote. The fake-stat / too-many-loops problems disappear, though.

So, we have a workaround, but still would like to figure out a
complete / permanent solution to this issue. Is there anything else we
can try, or should we submit a kernel bug in Bugzilla for this ?

[-- Attachment #2: smb.conf.txt --]
[-- Type: text/plain, Size: 1145 bytes --]

[global]

security = ads
server max protocol = SMB3
server min protocol = SMB2_02
log level = 0
panic action = 
winbind use default domain = yes
winbind enum users = no
winbind enum groups = no
load printers = no
disable spoolss = yes
printing = bsd
printcap name = /dev/null
host msdfs = yes
store dos attributes = yes
all shares read only = no
num netbios aliases = 32
kernel change notify = no
smb2 leases = yes
use sendfile = true
enable user homes = yes
idmap config * : range = 100000-199999999
idmap config * : backend = autorid
idmap config * : rangesize = 1000000
realm = xxx
netbios name = cluster
cluster nodes = node1.xxx node2.xxx node3.xxx
cluster ips = 10.44.7.7 10.44.7.9 10.44.7.11
netbios uuid = feb19d01-ac3c-437b-84a3-167a052fd979
max smbd processes = 500
cluster master = node3.xxx
server multi channel support = yes
workgroup = xxx


[home-DFS]

vfs objects = shadow_copy streams_depot acl_xattr
comment = 
path = /zroot/shares/%X
share uuid = aaa
windows_prev_version = yes

[othershare]

vfs objects = shadow_copy streams_depot acl_xattr
comment = 
path = /zroot/shares/%X/:xxx/yyy
msdfs proxy = node3
share uuid = bbb



[-- Attachment #3: cifs-fail.pcap --]
[-- Type: application/octet-stream, Size: 23016 bytes --]

[-- Attachment #4: workaround.patch --]
[-- Type: application/octet-stream, Size: 1660 bytes --]

diff --git a/fs/cifs/inode.c b/fs/cifs/inode.c
index bac08c2..644e05e 100644
--- a/fs/cifs/inode.c
+++ b/fs/cifs/inode.c
@@ -969,10 +969,10 @@ cifs_get_inode_info(struct inode **inode,
 						 full_path, tmp_data,
 						 &adjust_tz, &is_reparse_point);
 #ifdef CONFIG_CIFS_DFS_UPCALL
-		if (rc == -ENOENT && is_tcon_dfs(tcon))
+		/*if (rc == -ENOENT && is_tcon_dfs(tcon))
 			rc = cifs_dfs_query_info_nonascii_quirk(xid, tcon,
 								cifs_sb,
-								full_path);
+								full_path);*/
 #endif
 		data = tmp_data;
 	}

diff --git a/fs/cifs/connect.c b/fs/cifs/connect.c
index 317ca1b..90604cf 100644
--- a/fs/cifs/connect.c
+++ b/fs/cifs/connect.c
@@ -3535,7 +3535,7 @@ static int is_path_remote(struct mount_ctx *mnt_ctx)
 	struct smb3_fs_context *ctx = mnt_ctx->fs_ctx;
 	char *full_path;
 #ifdef CONFIG_CIFS_DFS_UPCALL
-	bool nodfs = cifs_sb->mnt_cifs_flags & CIFS_MOUNT_NO_DFS;
+	/*bool nodfs = cifs_sb->mnt_cifs_flags & CIFS_MOUNT_NO_DFS;*/
 #endif
 
 	if (!server->ops->is_path_accessible)
@@ -3554,17 +3554,17 @@ static int is_path_remote(struct mount_ctx *mnt_ctx)
 	rc = server->ops->is_path_accessible(xid, tcon, cifs_sb,
 					     full_path);
 #ifdef CONFIG_CIFS_DFS_UPCALL
-	if (nodfs) {
+	/*if (nodfs) {
 		if (rc == -EREMOTE)
 			rc = -EOPNOTSUPP;
 		goto out;
-	}
+	}*/
 
 	/* path *might* exist with non-ASCII characters in DFS root
 	 * try again with full path (only if nodfs is not set) */
-	if (rc == -ENOENT && is_tcon_dfs(tcon))
+	/*if (rc == -ENOENT && is_tcon_dfs(tcon))
 		rc = cifs_dfs_query_info_nonascii_quirk(xid, tcon, cifs_sb,
-							full_path);
+							full_path); */
 #endif
 	if (rc != 0 && rc != -EREMOTE)
 		goto out;

[-- Attachment #5: commands.txt --]
[-- Type: text/plain, Size: 4559 bytes --]

[root@myMachine tmp]# mount -t cifs -o backupuid=0,posixpaths,nomapposix,noserverino //10.44.7.7/home-DFS /tmp/pepe
[root@myMachine tmp]# ls -l /tmp/pepe
total 0
drwx--x--x. 2 root root 0 Jan 16 00:26 001   --> Folders with 711 are local to 10.44.7.7, 755 remote
drwx--x--x. 2 root root 0 Jan 16 00:26 002
drwxr-xr-x. 2 root root 0 Jan 16 00:23 003
drwx--x--x. 2 root root 0 Jan 16 00:26 004
drwxr-xr-x. 2 root root 0 May  9  2021 005
drwxr-xr-x. 2 root root 0 May  9  2021 006
drwx--x--x. 2 root root 0 Jan 16 00:26 007
drwx--x--x. 2 root root 0 Jan 16 00:26 008
drwx--x--x. 2 root root 0 Jan 16 00:26 009
drwx--x--x. 2 root root 0 Jan 16 00:26 010
drwxr-xr-x. 2 root root 0 May  9  2021 011
drwx--x--x. 2 root root 0 Jan 16 00:26 012
drwx--x--x. 2 root root 0 Jan 16 00:26 013
drwx--x--x. 2 root root 0 Jan 16 00:26 014


[root@myMachine tmp]# ls pepe/001/existingfile.txt
pepe/001/existingfile.txt
[root@myMachine tmp]# stat pepe/001/existingfile.txt
  File: pepe/001/existingfile.txt
  Size: 0               Blocks: 3          IO Block: 1048576 regular empty file
Device: 31h/49d Inode: 3318        Links: 1
Access: (0755/-rwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:cifs_t:s0
Access: 2023-01-16 00:23:52.248871100 +0100
Modify: 2023-01-16 00:23:38.437777700 +0100
Change: 2023-01-16 00:23:52.488867100 +0100
 Birth: 2023-01-16 00:23:52.248871100 +0100
 [root@beta-haiku01 tmp]# ls -l pepe/002/existingfile.txt
-rwxr-xr-x. 1 root root 0 Jan 16 00:23 pepe/002/existingfile.txt
[root@beta-haiku01 tmp]# stat pepe/002/existingfile.txt
  File: pepe/002/existingfile.txt
  Size: 0               Blocks: 3          IO Block: 1048576 regular empty file
Device: 32h/50d Inode: 3359        Links: 1
Access: (0755/-rwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:cifs_t:s0
Access: 2023-01-16 00:23:57.461784000 +0100
Modify: 2023-01-16 00:23:38.437777700 +0100
Change: 2023-01-16 00:23:57.803778300 +0100
 Birth: 2023-01-16 00:23:57.461784000 +0100
[root@beta-haiku01 tmp]# ls -l pepe/003/existingfile.txt
-rwxr-xr-x. 1 root root 0 Jan 16 00:23 pepe/003/existingfile.txt
[root@beta-haiku01 tmp]# stat pepe/003/existingfile.txt
  File: pepe/003/existingfile.txt
  Size: 0               Blocks: 3          IO Block: 1048576 regular empty file
Device: 30h/48d Inode: 3360        Links: 1
Access: (0755/-rwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:cifs_t:s0
Access: 2023-01-16 00:23:38.437777700 +0100
Modify: 2023-01-16 00:23:38.437777700 +0100
Change: 2023-01-16 00:23:44.833037300 +0100
 Birth: 2023-01-16 00:23:38.047968100 +0100

***All fine, but if we choose to work with non-existing files ...

[root@myMachine tmp]# stat pepe/001/notexistingfile.txt
  File: pepe/001/notexistingfile.txt
  Size: 0               Blocks: 0          IO Block: 16384  directory
Device: 31h/49d Inode: 3319        Links: 2
Access: (0711/drwx--x--x)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:cifs_t:s0
Access: 2023-01-16 00:27:38.185512600 +0100
Modify: 2023-01-16 00:27:38.185512600 +0100
Change: 2023-01-16 00:27:38.185512600 +0100
 Birth: -
[root@myMachine tmp]# stat pepe/002/notexistingfile.txt
  File: pepe/002/notexistingfile.txt
  Size: 0               Blocks: 0          IO Block: 16384  directory
Device: 32h/50d Inode: 3321        Links: 2
Access: (0711/drwx--x--x)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:cifs_t:s0
Access: 2023-01-16 00:27:42.403466100 +0100
Modify: 2023-01-16 00:27:42.403466100 +0100
Change: 2023-01-16 00:27:42.403466100 +0100
 Birth: -
[root@myMachine tmp]# stat pepe/003/notexistingfile.txt
  File: pepe/003/notexistingfile.txt
  Size: 0               Blocks: 0          IO Block: 16384  directory
Device: 30h/48d Inode: 3322        Links: 2
Access: (0711/drwx--x--x)  Uid: (    0/    root)   Gid: (    0/    root)
Context: system_u:object_r:cifs_t:s0
Access: 2023-01-16 00:27:46.598419900 +0100
Modify: 2023-01-16 00:27:46.598419900 +0100
Change: 2023-01-16 00:27:46.598419900 +0100
 Birth: -
 
[root@myMachine tmp]# cat pepe/001/notexistingfile.txt
cat: pepe/001/notexistingfile.txt: Too many levels of symbolic links
[root@myMachine tmp]# cat pepe/002/notexistingfile.txt
cat: pepe/002/notexistingfile.txt: Too many levels of symbolic links
[root@myMachine tmp]# cat pepe/003/notexistingfile.txt
cat: pepe/003/notexistingfile.txt: Too many levels of symbolic links


[-- Attachment #6: cifsFYItrace.txt.gz --]
[-- Type: application/gzip, Size: 33433 bytes --]

^ permalink raw reply related	[flat|nested] 6+ messages in thread

* Re: [Bug report] Since 5.17 kernel, non existing files may be treated as remote DFS entries
  2023-01-16  2:53 [Bug report] Since 5.17 kernel, non existing files may be treated as remote DFS entries J. Pablo González
@ 2023-01-16 13:02 ` Paulo Alcantara
  2023-01-17  0:14   ` J. Pablo González
  0 siblings, 1 reply; 6+ messages in thread
From: Paulo Alcantara @ 2023-01-16 13:02 UTC (permalink / raw)
  To: J. Pablo González, linux-cifs

J. Pablo González <disablez@disablez.com> writes:

> We’re experiencing some issues when accessing some mounts in a DFS
> share, which seem to happen since kernel 5.17.
>
> After some investigation, we’ve pinpointed the origin to commit
> a2809d0e16963fdf3984409e47f145
> cccb0c6821
> - Original BZ for that is https://bugzilla.kernel.org/show_bug.cgi?id=215440
> - Patch discussion is at
> https://patchwork.kernel.org/project/cifs-client/patch/YeHUxJ9zTVNrKveF@himera.home/
> - Similar issues referenced in https://bugzilla.suse.com/show_bug.cgi?id=1198753

6.2-rc4 has

        c877ce47e137 ("cifs: reduce roundtrips on create/qinfo requests")

which should fix your issue.

Could you try it?  Thanks.

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: [Bug report] Since 5.17 kernel, non existing files may be treated as remote DFS entries
  2023-01-16 13:02 ` Paulo Alcantara
@ 2023-01-17  0:14   ` J. Pablo González
  2023-01-17 17:36     ` Paulo Alcantara
  2023-01-18 22:38     ` Paulo Alcantara
  0 siblings, 2 replies; 6+ messages in thread
From: J. Pablo González @ 2023-01-17  0:14 UTC (permalink / raw)
  To: Paulo Alcantara, linux-cifs

On Mon, Jan 16, 2023 at 2:02 PM Paulo Alcantara <pc@cjr.nz> wrote:
>
> J. Pablo González <disablez@disablez.com> writes:
>
> > We’re experiencing some issues when accessing some mounts in a DFS
> > share, which seem to happen since kernel 5.17.
> >
> > After some investigation, we’ve pinpointed the origin to commit
> > a2809d0e16963fdf3984409e47f145
> > cccb0c6821
> > - Original BZ for that is https://bugzilla.kernel.org/show_bug.cgi?id=215440
> > - Patch discussion is at
> > https://patchwork.kernel.org/project/cifs-client/patch/YeHUxJ9zTVNrKveF@himera.home/
> > - Similar issues referenced in https://bugzilla.suse.com/show_bug.cgi?id=1198753
>
> 6.2-rc4 has
>
>         c877ce47e137 ("cifs: reduce roundtrips on create/qinfo requests")
>
> which should fix your issue.
>
> Could you try it?  Thanks.

I'll still need to test it more thoroughly, but for now, this patch
seems to have fixed all issues, including the "-o nodfs ones." Thank
you!
Any chance this could be formally backported to 6.1.x ? I see it's
only tagged for 6.2-rc for now.

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: [Bug report] Since 5.17 kernel, non existing files may be treated as remote DFS entries
  2023-01-17  0:14   ` J. Pablo González
@ 2023-01-17 17:36     ` Paulo Alcantara
  2023-01-18 22:38     ` Paulo Alcantara
  1 sibling, 0 replies; 6+ messages in thread
From: Paulo Alcantara @ 2023-01-17 17:36 UTC (permalink / raw)
  To: J. Pablo González, linux-cifs

J. Pablo González <disablez@disablez.com> writes:

> On Mon, Jan 16, 2023 at 2:02 PM Paulo Alcantara <pc@cjr.nz> wrote:
>>
>> J. Pablo González <disablez@disablez.com> writes:
>>
>> > We’re experiencing some issues when accessing some mounts in a DFS
>> > share, which seem to happen since kernel 5.17.
>> >
>> > After some investigation, we’ve pinpointed the origin to commit
>> > a2809d0e16963fdf3984409e47f145
>> > cccb0c6821
>> > - Original BZ for that is https://bugzilla.kernel.org/show_bug.cgi?id=215440
>> > - Patch discussion is at
>> > https://patchwork.kernel.org/project/cifs-client/patch/YeHUxJ9zTVNrKveF@himera.home/
>> > - Similar issues referenced in https://bugzilla.suse.com/show_bug.cgi?id=1198753
>>
>> 6.2-rc4 has
>>
>>         c877ce47e137 ("cifs: reduce roundtrips on create/qinfo requests")
>>
>> which should fix your issue.
>>
>> Could you try it?  Thanks.
>
> I'll still need to test it more thoroughly, but for now, this patch
> seems to have fixed all issues, including the "-o nodfs ones." Thank
> you!

OK - thanks for quickily testing it!

> Any chance this could be formally backported to 6.1.x ? I see it's
> only tagged for 6.2-rc for now.

Absolutely.  Will take care of that.

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: [Bug report] Since 5.17 kernel, non existing files may be treated as remote DFS entries
  2023-01-17  0:14   ` J. Pablo González
  2023-01-17 17:36     ` Paulo Alcantara
@ 2023-01-18 22:38     ` Paulo Alcantara
  2023-01-22 13:45       ` Greg KH
  1 sibling, 1 reply; 6+ messages in thread
From: Paulo Alcantara @ 2023-01-18 22:38 UTC (permalink / raw)
  To: J. Pablo González, linux-cifs, stable; +Cc: Steve French

[-- Attachment #1: Type: text/plain, Size: 1485 bytes --]

Stable team,

J. Pablo González <disablez@disablez.com> writes:

> On Mon, Jan 16, 2023 at 2:02 PM Paulo Alcantara <pc@cjr.nz> wrote:
>>
>> J. Pablo González <disablez@disablez.com> writes:
>>
>> > We’re experiencing some issues when accessing some mounts in a DFS
>> > share, which seem to happen since kernel 5.17.
>> >
>> > After some investigation, we’ve pinpointed the origin to commit
>> > a2809d0e16963fdf3984409e47f145
>> > cccb0c6821
>> > - Original BZ for that is https://bugzilla.kernel.org/show_bug.cgi?id=215440
>> > - Patch discussion is at
>> > https://patchwork.kernel.org/project/cifs-client/patch/YeHUxJ9zTVNrKveF@himera.home/
>> > - Similar issues referenced in https://bugzilla.suse.com/show_bug.cgi?id=1198753
>>
>> 6.2-rc4 has
>>
>>         c877ce47e137 ("cifs: reduce roundtrips on create/qinfo requests")
>>
>> which should fix your issue.
>>
>> Could you try it?  Thanks.
>
> I'll still need to test it more thoroughly, but for now, this patch
> seems to have fixed all issues, including the "-o nodfs ones." Thank
> you!
> Any chance this could be formally backported to 6.1.x ? I see it's
> only tagged for 6.2-rc for now.

Could you please queue

        c877ce47e137 ("cifs: reduce roundtrips on create/qinfo requests")

for 6.1.y as a fix for

        a2809d0e1696 ("cifs: quirk for STATUS_OBJECT_NAME_INVALID returned for non-ASCII dfs refs")

Find attached a backportable version of such commit.  Thanks.

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: cifs-reduce-roundtrips-on-create-qinfo-requests.patch --]
[-- Type: text/x-patch, Size: 9743 bytes --]

From c877ce47e1378dbafa6f1bf84c0c83a05ca8972a Mon Sep 17 00:00:00 2001
From: Paulo Alcantara <pc@cjr.nz>
Date: Mon, 12 Dec 2022 23:39:37 -0300
Subject: [PATCH] cifs: reduce roundtrips on create/qinfo requests

To work around some Window servers that return
STATUS_OBJECT_NAME_INVALID on query infos under DFS namespaces that
contain non-ASCII characters, we started checking for -ENOENT on every
file open, and if so, then send additional requests to figure out
whether it is a DFS link or not.  It means that all those requests
will be sent to every non-existing file.

So, in order to reduce the number of roundtrips, check earlier whether
status code is STATUS_OBJECT_NAME_INVALID and tcon supports dfs, and
if so, then map -ENOENT to -EREMOTE so mount or automount will take
care of chasing the DFS link -- if it isn't an DFS link, then -ENOENT
will be returned appropriately.

Before patch

  SMB2 438 Create Request File: ada.test\dfs\foo;GetInfo Request...
  SMB2 310 Create Response, Error: STATUS_OBJECT_NAME_NOT_FOUND;...
  SMB2 228 Ioctl Request FSCTL_DFS_GET_REFERRALS, File: \ada.test\dfs\foo
  SMB2 143 Ioctl Response, Error: STATUS_OBJECT_PATH_NOT_FOUND
  SMB2 438 Create Request File: ada.test\dfs\foo;GetInfo Request...
  SMB2 310 Create Response, Error: STATUS_OBJECT_NAME_NOT_FOUND;...
  SMB2 228 Ioctl Request FSCTL_DFS_GET_REFERRALS, File: \ada.test\dfs\foo
  SMB2 143 Ioctl Response, Error: STATUS_OBJECT_PATH_NOT_FOUND

After patch

  SMB2 438 Create Request File: ada.test\dfs\foo;GetInfo Request...
  SMB2 310 Create Response, Error: STATUS_OBJECT_NAME_NOT_FOUND;...
  SMB2 438 Create Request File: ada.test\dfs\foo;GetInfo Request...
  SMB2 310 Create Response, Error: STATUS_OBJECT_NAME_NOT_FOUND;...

Signed-off-by: Paulo Alcantara (SUSE) <pc@cjr.nz>
Signed-off-by: Steve French <stfrench@microsoft.com>
---
 fs/cifs/connect.c   | 16 ----------------
 fs/cifs/inode.c     |  6 ------
 fs/cifs/misc.c      | 45 ---------------------------------------------
 fs/cifs/smb2inode.c | 45 ++++++++++++++++++++++++++++++++-------------
 fs/cifs/smb2ops.c   | 28 ++++++++++++++++++++++++----
 5 files changed, 56 insertions(+), 84 deletions(-)

diff --git a/fs/cifs/connect.c b/fs/cifs/connect.c
index fde1c371605a..eab36e4ea130 100644
--- a/fs/cifs/connect.c
+++ b/fs/cifs/connect.c
@@ -3554,9 +3554,6 @@ static int is_path_remote(struct mount_ctx *mnt_ctx)
 	struct cifs_tcon *tcon = mnt_ctx->tcon;
 	struct smb3_fs_context *ctx = mnt_ctx->fs_ctx;
 	char *full_path;
-#ifdef CONFIG_CIFS_DFS_UPCALL
-	bool nodfs = cifs_sb->mnt_cifs_flags & CIFS_MOUNT_NO_DFS;
-#endif
 
 	if (!server->ops->is_path_accessible)
 		return -EOPNOTSUPP;
@@ -3573,19 +3570,6 @@ static int is_path_remote(struct mount_ctx *mnt_ctx)
 
 	rc = server->ops->is_path_accessible(xid, tcon, cifs_sb,
 					     full_path);
-#ifdef CONFIG_CIFS_DFS_UPCALL
-	if (nodfs) {
-		if (rc == -EREMOTE)
-			rc = -EOPNOTSUPP;
-		goto out;
-	}
-
-	/* path *might* exist with non-ASCII characters in DFS root
-	 * try again with full path (only if nodfs is not set) */
-	if (rc == -ENOENT && is_tcon_dfs(tcon))
-		rc = cifs_dfs_query_info_nonascii_quirk(xid, tcon, cifs_sb,
-							full_path);
-#endif
 	if (rc != 0 && rc != -EREMOTE)
 		goto out;
 
diff --git a/fs/cifs/inode.c b/fs/cifs/inode.c
index 4e2ca3c6e5c0..0c9b619e4386 100644
--- a/fs/cifs/inode.c
+++ b/fs/cifs/inode.c
@@ -991,12 +991,6 @@ int cifs_get_inode_info(struct inode **inode, const char *full_path,
 		}
 		rc = server->ops->query_path_info(xid, tcon, cifs_sb, full_path, &tmp_data,
 						  &adjust_tz, &is_reparse_point);
-#ifdef CONFIG_CIFS_DFS_UPCALL
-		if (rc == -ENOENT && is_tcon_dfs(tcon))
-			rc = cifs_dfs_query_info_nonascii_quirk(xid, tcon,
-								cifs_sb,
-								full_path);
-#endif
 		data = &tmp_data;
 	}
 
diff --git a/fs/cifs/misc.c b/fs/cifs/misc.c
index 1cbecd64d697..062175994e87 100644
--- a/fs/cifs/misc.c
+++ b/fs/cifs/misc.c
@@ -1314,49 +1314,4 @@ int cifs_update_super_prepath(struct cifs_sb_info *cifs_sb, char *prefix)
 	cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_USE_PREFIX_PATH;
 	return 0;
 }
-
-/** cifs_dfs_query_info_nonascii_quirk
- * Handle weird Windows SMB server behaviour. It responds with
- * STATUS_OBJECT_NAME_INVALID code to SMB2 QUERY_INFO request
- * for "\<server>\<dfsname>\<linkpath>" DFS reference,
- * where <dfsname> contains non-ASCII unicode symbols.
- *
- * Check such DFS reference.
- */
-int cifs_dfs_query_info_nonascii_quirk(const unsigned int xid,
-				       struct cifs_tcon *tcon,
-				       struct cifs_sb_info *cifs_sb,
-				       const char *linkpath)
-{
-	char *treename, *dfspath, sep;
-	int treenamelen, linkpathlen, rc;
-
-	treename = tcon->tree_name;
-	/* MS-DFSC: All paths in REQ_GET_DFS_REFERRAL and RESP_GET_DFS_REFERRAL
-	 * messages MUST be encoded with exactly one leading backslash, not two
-	 * leading backslashes.
-	 */
-	sep = CIFS_DIR_SEP(cifs_sb);
-	if (treename[0] == sep && treename[1] == sep)
-		treename++;
-	linkpathlen = strlen(linkpath);
-	treenamelen = strnlen(treename, MAX_TREE_SIZE + 1);
-	dfspath = kzalloc(treenamelen + linkpathlen + 1, GFP_KERNEL);
-	if (!dfspath)
-		return -ENOMEM;
-	if (treenamelen)
-		memcpy(dfspath, treename, treenamelen);
-	memcpy(dfspath + treenamelen, linkpath, linkpathlen);
-	rc = dfs_cache_find(xid, tcon->ses, cifs_sb->local_nls,
-			    cifs_remap(cifs_sb), dfspath, NULL, NULL);
-	if (rc == 0) {
-		cifs_dbg(FYI, "DFS ref '%s' is found, emulate -EREMOTE\n",
-			 dfspath);
-		rc = -EREMOTE;
-	} else {
-		cifs_dbg(FYI, "%s: dfs_cache_find returned %d\n", __func__, rc);
-	}
-	kfree(dfspath);
-	return rc;
-}
 #endif
diff --git a/fs/cifs/smb2inode.c b/fs/cifs/smb2inode.c
index 68e08c85fbb8..6c84d2983166 100644
--- a/fs/cifs/smb2inode.c
+++ b/fs/cifs/smb2inode.c
@@ -540,22 +540,41 @@ int smb2_query_path_info(const unsigned int xid, struct cifs_tcon *tcon,
 	rc = smb2_compound_op(xid, tcon, cifs_sb, full_path, FILE_READ_ATTRIBUTES, FILE_OPEN,
 			      create_options, ACL_NO_MODE, data, SMB2_OP_QUERY_INFO, cfile,
 			      err_iov, err_buftype);
-	if (rc == -EOPNOTSUPP) {
-		if (err_iov[0].iov_base && err_buftype[0] != CIFS_NO_BUFFER &&
-		    ((struct smb2_hdr *)err_iov[0].iov_base)->Command == SMB2_CREATE &&
-		    ((struct smb2_hdr *)err_iov[0].iov_base)->Status == STATUS_STOPPED_ON_SYMLINK) {
-			rc = smb2_parse_symlink_response(cifs_sb, err_iov, &data->symlink_target);
+	if (rc) {
+		struct smb2_hdr *hdr = err_iov[0].iov_base;
+
+		if (unlikely(!hdr || err_buftype[0] == CIFS_NO_BUFFER))
+			goto out;
+		if (rc == -EOPNOTSUPP && hdr->Command == SMB2_CREATE &&
+		    hdr->Status == STATUS_STOPPED_ON_SYMLINK) {
+			rc = smb2_parse_symlink_response(cifs_sb, err_iov,
+							 &data->symlink_target);
 			if (rc)
 				goto out;
+
+			*reparse = true;
+			create_options |= OPEN_REPARSE_POINT;
+
+			/* Failed on a symbolic link - query a reparse point info */
+			cifs_get_readable_path(tcon, full_path, &cfile);
+			rc = smb2_compound_op(xid, tcon, cifs_sb, full_path,
+					      FILE_READ_ATTRIBUTES, FILE_OPEN,
+					      create_options, ACL_NO_MODE, data,
+					      SMB2_OP_QUERY_INFO, cfile, NULL, NULL);
+			goto out;
+		} else if (rc != -EREMOTE && IS_ENABLED(CONFIG_CIFS_DFS_UPCALL) &&
+			   hdr->Status == STATUS_OBJECT_NAME_INVALID) {
+			/*
+			 * Handle weird Windows SMB server behaviour. It responds with
+			 * STATUS_OBJECT_NAME_INVALID code to SMB2 QUERY_INFO request
+			 * for "\<server>\<dfsname>\<linkpath>" DFS reference,
+			 * where <dfsname> contains non-ASCII unicode symbols.
+			 */
+			rc = -EREMOTE;
 		}
-		*reparse = true;
-		create_options |= OPEN_REPARSE_POINT;
-
-		/* Failed on a symbolic link - query a reparse point info */
-		cifs_get_readable_path(tcon, full_path, &cfile);
-		rc = smb2_compound_op(xid, tcon, cifs_sb, full_path, FILE_READ_ATTRIBUTES,
-				      FILE_OPEN, create_options, ACL_NO_MODE, data,
-				      SMB2_OP_QUERY_INFO, cfile, NULL, NULL);
+		if (rc == -EREMOTE && IS_ENABLED(CONFIG_CIFS_DFS_UPCALL) && cifs_sb &&
+		    (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_NO_DFS))
+			rc = -EOPNOTSUPP;
 	}
 
 out:
diff --git a/fs/cifs/smb2ops.c b/fs/cifs/smb2ops.c
index 8da98918cf86..1ff5b6b0e07a 100644
--- a/fs/cifs/smb2ops.c
+++ b/fs/cifs/smb2ops.c
@@ -797,7 +797,9 @@ smb2_is_path_accessible(const unsigned int xid, struct cifs_tcon *tcon,
 	int rc;
 	__le16 *utf16_path;
 	__u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
+	int err_buftype = CIFS_NO_BUFFER;
 	struct cifs_open_parms oparms;
+	struct kvec err_iov = {};
 	struct cifs_fid fid;
 	struct cached_fid *cfid;
 
@@ -821,14 +823,32 @@ smb2_is_path_accessible(const unsigned int xid, struct cifs_tcon *tcon,
 	oparms.fid = &fid;
 	oparms.reconnect = false;
 
-	rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL,
-		       NULL);
+	rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL,
+		       &err_iov, &err_buftype);
 	if (rc) {
-		kfree(utf16_path);
-		return rc;
+		struct smb2_hdr *hdr = err_iov.iov_base;
+
+		if (unlikely(!hdr || err_buftype == CIFS_NO_BUFFER))
+			goto out;
+		/*
+		 * Handle weird Windows SMB server behaviour. It responds with
+		 * STATUS_OBJECT_NAME_INVALID code to SMB2 QUERY_INFO request
+		 * for "\<server>\<dfsname>\<linkpath>" DFS reference,
+		 * where <dfsname> contains non-ASCII unicode symbols.
+		 */
+		if (rc != -EREMOTE && IS_ENABLED(CONFIG_CIFS_DFS_UPCALL) &&
+		    hdr->Status == STATUS_OBJECT_NAME_INVALID)
+			rc = -EREMOTE;
+		if (rc == -EREMOTE && IS_ENABLED(CONFIG_CIFS_DFS_UPCALL) && cifs_sb &&
+		    (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_NO_DFS))
+			rc = -EOPNOTSUPP;
+		goto out;
 	}
 
 	rc = SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
+
+out:
+	free_rsp_buf(err_buftype, err_iov.iov_base);
 	kfree(utf16_path);
 	return rc;
 }
-- 
2.39.0


^ permalink raw reply related	[flat|nested] 6+ messages in thread

* Re: [Bug report] Since 5.17 kernel, non existing files may be treated as remote DFS entries
  2023-01-18 22:38     ` Paulo Alcantara
@ 2023-01-22 13:45       ` Greg KH
  0 siblings, 0 replies; 6+ messages in thread
From: Greg KH @ 2023-01-22 13:45 UTC (permalink / raw)
  To: Paulo Alcantara; +Cc: J. Pablo González, linux-cifs, stable, Steve French

On Wed, Jan 18, 2023 at 07:38:58PM -0300, Paulo Alcantara wrote:
> Stable team,
> 
> J. Pablo González <disablez@disablez.com> writes:
> 
> > On Mon, Jan 16, 2023 at 2:02 PM Paulo Alcantara <pc@cjr.nz> wrote:
> >>
> >> J. Pablo González <disablez@disablez.com> writes:
> >>
> >> > We’re experiencing some issues when accessing some mounts in a DFS
> >> > share, which seem to happen since kernel 5.17.
> >> >
> >> > After some investigation, we’ve pinpointed the origin to commit
> >> > a2809d0e16963fdf3984409e47f145
> >> > cccb0c6821
> >> > - Original BZ for that is https://bugzilla.kernel.org/show_bug.cgi?id=215440
> >> > - Patch discussion is at
> >> > https://patchwork.kernel.org/project/cifs-client/patch/YeHUxJ9zTVNrKveF@himera.home/
> >> > - Similar issues referenced in https://bugzilla.suse.com/show_bug.cgi?id=1198753
> >>
> >> 6.2-rc4 has
> >>
> >>         c877ce47e137 ("cifs: reduce roundtrips on create/qinfo requests")
> >>
> >> which should fix your issue.
> >>
> >> Could you try it?  Thanks.
> >
> > I'll still need to test it more thoroughly, but for now, this patch
> > seems to have fixed all issues, including the "-o nodfs ones." Thank
> > you!
> > Any chance this could be formally backported to 6.1.x ? I see it's
> > only tagged for 6.2-rc for now.
> 
> Could you please queue
> 
>         c877ce47e137 ("cifs: reduce roundtrips on create/qinfo requests")
> 
> for 6.1.y as a fix for
> 
>         a2809d0e1696 ("cifs: quirk for STATUS_OBJECT_NAME_INVALID returned for non-ASCII dfs refs")
> 
> Find attached a backportable version of such commit.  Thanks.


Now queued up, thanks.

greg k-h

^ permalink raw reply	[flat|nested] 6+ messages in thread

end of thread, other threads:[~2023-01-22 13:45 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-01-16  2:53 [Bug report] Since 5.17 kernel, non existing files may be treated as remote DFS entries J. Pablo González
2023-01-16 13:02 ` Paulo Alcantara
2023-01-17  0:14   ` J. Pablo González
2023-01-17 17:36     ` Paulo Alcantara
2023-01-18 22:38     ` Paulo Alcantara
2023-01-22 13:45       ` Greg KH

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).