1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License (the "License").
   6  * You may not use this file except in compliance with the License.
   7  *
   8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9  * or http://www.opensolaris.org/os/licensing.
  10  * See the License for the specific language governing permissions
  11  * and limitations under the License.
  12  *
  13  * When distributing Covered Code, include this CDDL HEADER in each
  14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15  * If applicable, add the following below this CDDL HEADER, with the
  16  * fields enclosed by brackets "[]" replaced with your own identifying
  17  * information: Portions Copyright [yyyy] [name of copyright owner]
  18  *
  19  * CDDL HEADER END
  20  */
  21 
  22 /*
  23  * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved.
  24  * Copyright 2017 Nexenta Systems, Inc. All rights reserved.
  25  */
  26 
  27 #include <mdb/mdb_modapi.h>
  28 #include <mdb/mdb_ks.h>
  29 #include <mdb/mdb_ctf.h>
  30 #include <sys/note.h>
  31 #include <sys/thread.h>
  32 #include <sys/taskq.h>
  33 #include <smbsrv/smb_vops.h>
  34 #include <smbsrv/smb.h>
  35 #include <smbsrv/smb_ktypes.h>
  36 #include <smbsrv/smb_token.h>
  37 #include <smbsrv/smb_oplock.h>
  38 
  39 #ifndef _KMDB
  40 #include "smbsrv_pcap.h"
  41 #endif
  42 
  43 #ifdef _KERNEL
  44 #define SMBSRV_OBJNAME  "smbsrv"
  45 #else
  46 #define SMBSRV_OBJNAME  "libfksmbsrv.so.1"
  47 #endif
  48 
  49 #define SMBSRV_SCOPE    SMBSRV_OBJNAME "`"
  50 
  51 #define SMB_DCMD_INDENT         2
  52 #define ACE_TYPE_TABLEN         (ACE_ALL_TYPES + 1)
  53 #define ACE_TYPE_ENTRY(_v_)     {_v_, #_v_}
  54 #define SMB_COM_ENTRY(_v_, _x_) {#_v_, _x_}
  55 
  56 #define SMB_MDB_MAX_OPTS        10
  57 
  58 #define SMB_OPT_SERVER          0x00000001
  59 #define SMB_OPT_SESSION         0x00000002
  60 #define SMB_OPT_REQUEST         0x00000004
  61 #define SMB_OPT_USER            0x00000008
  62 #define SMB_OPT_TREE            0x00000010
  63 #define SMB_OPT_OFILE           0x00000020
  64 #define SMB_OPT_ODIR            0x00000040
  65 #define SMB_OPT_WALK            0x00000100
  66 #define SMB_OPT_VERBOSE         0x00000200
  67 #define SMB_OPT_ALL_OBJ         0x000000FF
  68 
  69 /*
  70  * Use CTF to set var = OFFSETOF(typ, mem) if possible, otherwise
  71  * fall back to just OFFSETOF.  The fall back is more convenient
  72  * than trying to return an error where this is used, and also
  73  * let's us find out at compile time if we're referring to any
  74  * typedefs or member names that don't exist.  Without that
  75  * OFFSETOF fall back, we'd only find out at run time.
  76  */
  77 #define GET_OFFSET(var, typ, mem) do {                          \
  78         var = mdb_ctf_offsetof_by_name(#typ, #mem);             \
  79         if (var < 0) {                                               \
  80                 mdb_warn("cannot lookup: " #typ " ." #mem);     \
  81                 var = (int)OFFSETOF(typ, mem);                  \
  82         }                                                       \
  83 _NOTE(CONSTCOND) } while (0)
  84 
  85 /*
  86  * Structure associating an ACE type to a string.
  87  */
  88 typedef struct {
  89         uint8_t         ace_type_value;
  90         const char      *ace_type_sting;
  91 } ace_type_entry_t;
  92 
  93 /*
  94  * Structure containing strings describing an SMB command.
  95  */
  96 typedef struct {
  97         const char      *smb_com;
  98         const char      *smb_andx;
  99 } smb_com_entry_t;
 100 
 101 /*
 102  * Structure describing an object to be expanded (displayed).
 103  */
 104 typedef struct {
 105         uint_t          ex_mask;
 106         int             (*ex_offset)(void);
 107         const char      *ex_dcmd;
 108         const char      *ex_name;
 109 } smb_exp_t;
 110 
 111 /*
 112  * List of supported options. Ther order has the match the bits SMB_OPT_xxx.
 113  */
 114 typedef struct smb_mdb_opts {
 115         char            *o_name;
 116         uint32_t        o_value;
 117 } smb_mdb_opts_t;
 118 
 119 static smb_mdb_opts_t smb_opts[SMB_MDB_MAX_OPTS] =
 120 {
 121         { "-s", SMB_OPT_SERVER  },
 122         { "-e", SMB_OPT_SESSION },
 123         { "-r", SMB_OPT_REQUEST },
 124         { "-u", SMB_OPT_USER    },
 125         { "-t", SMB_OPT_TREE    },
 126         { "-f", SMB_OPT_OFILE   },
 127         { "-d", SMB_OPT_ODIR    },
 128         { "-w", SMB_OPT_WALK    },
 129         { "-v", SMB_OPT_VERBOSE }
 130 };
 131 
 132 /*
 133  * These access mask bits are generic enough they could move into the
 134  * genunix mdb module or somewhere so they could be shared.
 135  */
 136 static const mdb_bitmask_t
 137 nt_access_bits[] = {
 138         { "READ_DATA",
 139             FILE_READ_DATA,
 140             FILE_READ_DATA },
 141         { "WRITE_DATA",
 142             FILE_WRITE_DATA,
 143             FILE_WRITE_DATA },
 144         { "APPEND_DATA",
 145             FILE_APPEND_DATA,
 146             FILE_APPEND_DATA },
 147         { "READ_EA",
 148             FILE_READ_EA,
 149             FILE_READ_EA },
 150         { "WRITE_EA",
 151             FILE_WRITE_EA,
 152             FILE_WRITE_EA },
 153         { "EXECUTE",
 154             FILE_EXECUTE,
 155             FILE_EXECUTE },
 156         { "DELETE_CHILD",
 157             FILE_DELETE_CHILD,
 158             FILE_DELETE_CHILD },
 159         { "READ_ATTR",
 160             FILE_READ_ATTRIBUTES,
 161             FILE_READ_ATTRIBUTES },
 162         { "WRITE_ATTR",
 163             FILE_WRITE_ATTRIBUTES,
 164             FILE_WRITE_ATTRIBUTES },
 165         { "DELETE",
 166             DELETE,
 167             DELETE },
 168         { "READ_CTRL",
 169             READ_CONTROL,
 170             READ_CONTROL },
 171         { "WRITE_DAC",
 172             WRITE_DAC,
 173             WRITE_DAC },
 174         { "WRITE_OWNER",
 175             WRITE_OWNER,
 176             WRITE_OWNER },
 177         { "SYNCH",
 178             SYNCHRONIZE,
 179             SYNCHRONIZE },
 180         { "ACC_SEC",
 181             ACCESS_SYSTEM_SECURITY,
 182             ACCESS_SYSTEM_SECURITY },
 183         { "MAX_ALLOWED",
 184             MAXIMUM_ALLOWED,
 185             MAXIMUM_ALLOWED },
 186         { "GEN_X",
 187             GENERIC_EXECUTE,
 188             GENERIC_EXECUTE },
 189         { "GEN_W",
 190             GENERIC_WRITE,
 191             GENERIC_WRITE },
 192         { "GEN_R",
 193             GENERIC_READ,
 194             GENERIC_READ },
 195         { NULL, 0, 0 }
 196 };
 197 
 198 static smb_com_entry_t  smb_com[256] =
 199 {
 200         SMB_COM_ENTRY(SMB_COM_CREATE_DIRECTORY, "No"),
 201         SMB_COM_ENTRY(SMB_COM_DELETE_DIRECTORY, "No"),
 202         SMB_COM_ENTRY(SMB_COM_OPEN, "No"),
 203         SMB_COM_ENTRY(SMB_COM_CREATE, "No"),
 204         SMB_COM_ENTRY(SMB_COM_CLOSE, "No"),
 205         SMB_COM_ENTRY(SMB_COM_FLUSH, "No"),
 206         SMB_COM_ENTRY(SMB_COM_DELETE, "No"),
 207         SMB_COM_ENTRY(SMB_COM_RENAME, "No"),
 208         SMB_COM_ENTRY(SMB_COM_QUERY_INFORMATION, "No"),
 209         SMB_COM_ENTRY(SMB_COM_SET_INFORMATION, "No"),
 210         SMB_COM_ENTRY(SMB_COM_READ, "No"),
 211         SMB_COM_ENTRY(SMB_COM_WRITE, "No"),
 212         SMB_COM_ENTRY(SMB_COM_LOCK_BYTE_RANGE, "No"),
 213         SMB_COM_ENTRY(SMB_COM_UNLOCK_BYTE_RANGE, "No"),
 214         SMB_COM_ENTRY(SMB_COM_CREATE_TEMPORARY, "No"),
 215         SMB_COM_ENTRY(SMB_COM_CREATE_NEW, "No"),
 216         SMB_COM_ENTRY(SMB_COM_CHECK_DIRECTORY, "No"),
 217         SMB_COM_ENTRY(SMB_COM_PROCESS_EXIT, "No"),
 218         SMB_COM_ENTRY(SMB_COM_SEEK, "No"),
 219         SMB_COM_ENTRY(SMB_COM_LOCK_AND_READ, "No"),
 220         SMB_COM_ENTRY(SMB_COM_WRITE_AND_UNLOCK, "No"),
 221         SMB_COM_ENTRY(0x15, "?"),
 222         SMB_COM_ENTRY(0x16, "?"),
 223         SMB_COM_ENTRY(0x17, "?"),
 224         SMB_COM_ENTRY(0x18, "?"),
 225         SMB_COM_ENTRY(0x19, "?"),
 226         SMB_COM_ENTRY(SMB_COM_READ_RAW, "No"),
 227         SMB_COM_ENTRY(SMB_COM_READ_MPX, "No"),
 228         SMB_COM_ENTRY(SMB_COM_READ_MPX_SECONDARY, "No"),
 229         SMB_COM_ENTRY(SMB_COM_WRITE_RAW, "No"),
 230         SMB_COM_ENTRY(SMB_COM_WRITE_MPX, "No"),
 231         SMB_COM_ENTRY(SMB_COM_WRITE_MPX_SECONDARY, "No"),
 232         SMB_COM_ENTRY(SMB_COM_WRITE_COMPLETE, "No"),
 233         SMB_COM_ENTRY(SMB_COM_QUERY_SERVER, "No"),
 234         SMB_COM_ENTRY(SMB_COM_SET_INFORMATION2, "No"),
 235         SMB_COM_ENTRY(SMB_COM_QUERY_INFORMATION2, "No"),
 236         SMB_COM_ENTRY(SMB_COM_LOCKING_ANDX, "No"),
 237         SMB_COM_ENTRY(SMB_COM_TRANSACTION, "No"),
 238         SMB_COM_ENTRY(SMB_COM_TRANSACTION_SECONDARY, "No"),
 239         SMB_COM_ENTRY(SMB_COM_IOCTL, "No"),
 240         SMB_COM_ENTRY(SMB_COM_IOCTL_SECONDARY, "No"),
 241         SMB_COM_ENTRY(SMB_COM_COPY, "No"),
 242         SMB_COM_ENTRY(SMB_COM_MOVE, "No"),
 243         SMB_COM_ENTRY(SMB_COM_ECHO, "No"),
 244         SMB_COM_ENTRY(SMB_COM_WRITE_AND_CLOSE, "No"),
 245         SMB_COM_ENTRY(SMB_COM_OPEN_ANDX, "No"),
 246         SMB_COM_ENTRY(SMB_COM_READ_ANDX, "No"),
 247         SMB_COM_ENTRY(SMB_COM_WRITE_ANDX, "No"),
 248         SMB_COM_ENTRY(SMB_COM_NEW_FILE_SIZE, "No"),
 249         SMB_COM_ENTRY(SMB_COM_CLOSE_AND_TREE_DISC, "No"),
 250         SMB_COM_ENTRY(SMB_COM_TRANSACTION2, "No"),
 251         SMB_COM_ENTRY(SMB_COM_TRANSACTION2_SECONDARY, "No"),
 252         SMB_COM_ENTRY(SMB_COM_FIND_CLOSE2, "No"),
 253         SMB_COM_ENTRY(SMB_COM_FIND_NOTIFY_CLOSE, "No"),
 254         SMB_COM_ENTRY(0x36, "?"),
 255         SMB_COM_ENTRY(0x37, "?"),
 256         SMB_COM_ENTRY(0x38, "?"),
 257         SMB_COM_ENTRY(0x39, "?"),
 258         SMB_COM_ENTRY(0x3A, "?"),
 259         SMB_COM_ENTRY(0x3B, "?"),
 260         SMB_COM_ENTRY(0x3C, "?"),
 261         SMB_COM_ENTRY(0x3D, "?"),
 262         SMB_COM_ENTRY(0x3E, "?"),
 263         SMB_COM_ENTRY(0x3F, "?"),
 264         SMB_COM_ENTRY(0x40, "?"),
 265         SMB_COM_ENTRY(0x41, "?"),
 266         SMB_COM_ENTRY(0x42, "?"),
 267         SMB_COM_ENTRY(0x43, "?"),
 268         SMB_COM_ENTRY(0x44, "?"),
 269         SMB_COM_ENTRY(0x45, "?"),
 270         SMB_COM_ENTRY(0x46, "?"),
 271         SMB_COM_ENTRY(0x47, "?"),
 272         SMB_COM_ENTRY(0x48, "?"),
 273         SMB_COM_ENTRY(0x49, "?"),
 274         SMB_COM_ENTRY(0x4A, "?"),
 275         SMB_COM_ENTRY(0x4B, "?"),
 276         SMB_COM_ENTRY(0x4C, "?"),
 277         SMB_COM_ENTRY(0x4D, "?"),
 278         SMB_COM_ENTRY(0x4E, "?"),
 279         SMB_COM_ENTRY(0x4F, "?"),
 280         SMB_COM_ENTRY(0x50, "?"),
 281         SMB_COM_ENTRY(0x51, "?"),
 282         SMB_COM_ENTRY(0x52, "?"),
 283         SMB_COM_ENTRY(0x53, "?"),
 284         SMB_COM_ENTRY(0x54, "?"),
 285         SMB_COM_ENTRY(0x55, "?"),
 286         SMB_COM_ENTRY(0x56, "?"),
 287         SMB_COM_ENTRY(0x57, "?"),
 288         SMB_COM_ENTRY(0x58, "?"),
 289         SMB_COM_ENTRY(0x59, "?"),
 290         SMB_COM_ENTRY(0x5A, "?"),
 291         SMB_COM_ENTRY(0x5B, "?"),
 292         SMB_COM_ENTRY(0x5C, "?"),
 293         SMB_COM_ENTRY(0x5D, "?"),
 294         SMB_COM_ENTRY(0x5E, "?"),
 295         SMB_COM_ENTRY(0x5F, "?"),
 296         SMB_COM_ENTRY(0x60, "?"),
 297         SMB_COM_ENTRY(0x61, "?"),
 298         SMB_COM_ENTRY(0x62, "?"),
 299         SMB_COM_ENTRY(0x63, "?"),
 300         SMB_COM_ENTRY(0x64, "?"),
 301         SMB_COM_ENTRY(0x65, "?"),
 302         SMB_COM_ENTRY(0x66, "?"),
 303         SMB_COM_ENTRY(0x67, "?"),
 304         SMB_COM_ENTRY(0x68, "?"),
 305         SMB_COM_ENTRY(0x69, "?"),
 306         SMB_COM_ENTRY(0x6A, "?"),
 307         SMB_COM_ENTRY(0x6B, "?"),
 308         SMB_COM_ENTRY(0x6C, "?"),
 309         SMB_COM_ENTRY(0x6D, "?"),
 310         SMB_COM_ENTRY(0x6E, "?"),
 311         SMB_COM_ENTRY(0x6F, "?"),
 312         SMB_COM_ENTRY(SMB_COM_TREE_CONNECT, "No"),
 313         SMB_COM_ENTRY(SMB_COM_TREE_DISCONNECT, "No"),
 314         SMB_COM_ENTRY(SMB_COM_NEGOTIATE, "No"),
 315         SMB_COM_ENTRY(SMB_COM_SESSION_SETUP_ANDX, "No"),
 316         SMB_COM_ENTRY(SMB_COM_LOGOFF_ANDX, "No"),
 317         SMB_COM_ENTRY(SMB_COM_TREE_CONNECT_ANDX, "No"),
 318         SMB_COM_ENTRY(0x76, "?"),
 319         SMB_COM_ENTRY(0x77, "?"),
 320         SMB_COM_ENTRY(0x78, "?"),
 321         SMB_COM_ENTRY(0x79, "?"),
 322         SMB_COM_ENTRY(0x7A, "?"),
 323         SMB_COM_ENTRY(0x7B, "?"),
 324         SMB_COM_ENTRY(0x7C, "?"),
 325         SMB_COM_ENTRY(0x7D, "?"),
 326         SMB_COM_ENTRY(0x7E, "?"),
 327         SMB_COM_ENTRY(0x7F, "?"),
 328         SMB_COM_ENTRY(SMB_COM_QUERY_INFORMATION_DISK, "No"),
 329         SMB_COM_ENTRY(SMB_COM_SEARCH, "No"),
 330         SMB_COM_ENTRY(SMB_COM_FIND, "No"),
 331         SMB_COM_ENTRY(SMB_COM_FIND_UNIQUE, "No"),
 332         SMB_COM_ENTRY(SMB_COM_FIND_CLOSE, "No"),
 333         SMB_COM_ENTRY(0x85, "?"),
 334         SMB_COM_ENTRY(0x86, "?"),
 335         SMB_COM_ENTRY(0x87, "?"),
 336         SMB_COM_ENTRY(0x88, "?"),
 337         SMB_COM_ENTRY(0x89, "?"),
 338         SMB_COM_ENTRY(0x8A, "?"),
 339         SMB_COM_ENTRY(0x8B, "?"),
 340         SMB_COM_ENTRY(0x8C, "?"),
 341         SMB_COM_ENTRY(0x8D, "?"),
 342         SMB_COM_ENTRY(0x8E, "?"),
 343         SMB_COM_ENTRY(0x8F, "?"),
 344         SMB_COM_ENTRY(0x90, "?"),
 345         SMB_COM_ENTRY(0x91, "?"),
 346         SMB_COM_ENTRY(0x92, "?"),
 347         SMB_COM_ENTRY(0x93, "?"),
 348         SMB_COM_ENTRY(0x94, "?"),
 349         SMB_COM_ENTRY(0x95, "?"),
 350         SMB_COM_ENTRY(0x96, "?"),
 351         SMB_COM_ENTRY(0x97, "?"),
 352         SMB_COM_ENTRY(0x98, "?"),
 353         SMB_COM_ENTRY(0x99, "?"),
 354         SMB_COM_ENTRY(0x9A, "?"),
 355         SMB_COM_ENTRY(0x9B, "?"),
 356         SMB_COM_ENTRY(0x9C, "?"),
 357         SMB_COM_ENTRY(0x9D, "?"),
 358         SMB_COM_ENTRY(0x9E, "?"),
 359         SMB_COM_ENTRY(0x9F, "?"),
 360         SMB_COM_ENTRY(SMB_COM_NT_TRANSACT, "No"),
 361         SMB_COM_ENTRY(SMB_COM_NT_TRANSACT_SECONDARY, "No"),
 362         SMB_COM_ENTRY(SMB_COM_NT_CREATE_ANDX, "No"),
 363         SMB_COM_ENTRY(0xA3, "?"),
 364         SMB_COM_ENTRY(SMB_COM_NT_CANCEL, "No"),
 365         SMB_COM_ENTRY(SMB_COM_NT_RENAME, "No"),
 366         SMB_COM_ENTRY(0xA6, "?"),
 367         SMB_COM_ENTRY(0xA7, "?"),
 368         SMB_COM_ENTRY(0xA8, "?"),
 369         SMB_COM_ENTRY(0xA9, "?"),
 370         SMB_COM_ENTRY(0xAA, "?"),
 371         SMB_COM_ENTRY(0xAB, "?"),
 372         SMB_COM_ENTRY(0xAC, "?"),
 373         SMB_COM_ENTRY(0xAD, "?"),
 374         SMB_COM_ENTRY(0xAE, "?"),
 375         SMB_COM_ENTRY(0xAF, "?"),
 376         SMB_COM_ENTRY(0xB0, "?"),
 377         SMB_COM_ENTRY(0xB1, "?"),
 378         SMB_COM_ENTRY(0xB2, "?"),
 379         SMB_COM_ENTRY(0xB3, "?"),
 380         SMB_COM_ENTRY(0xB4, "?"),
 381         SMB_COM_ENTRY(0xB5, "?"),
 382         SMB_COM_ENTRY(0xB6, "?"),
 383         SMB_COM_ENTRY(0xB7, "?"),
 384         SMB_COM_ENTRY(0xB8, "?"),
 385         SMB_COM_ENTRY(0xB9, "?"),
 386         SMB_COM_ENTRY(0xBA, "?"),
 387         SMB_COM_ENTRY(0xBB, "?"),
 388         SMB_COM_ENTRY(0xBC, "?"),
 389         SMB_COM_ENTRY(0xBD, "?"),
 390         SMB_COM_ENTRY(0xBE, "?"),
 391         SMB_COM_ENTRY(0xBF, "?"),
 392         SMB_COM_ENTRY(SMB_COM_OPEN_PRINT_FILE, "No"),
 393         SMB_COM_ENTRY(SMB_COM_WRITE_PRINT_FILE, "No"),
 394         SMB_COM_ENTRY(SMB_COM_CLOSE_PRINT_FILE, "No"),
 395         SMB_COM_ENTRY(SMB_COM_GET_PRINT_QUEUE, "No"),
 396         SMB_COM_ENTRY(0xC4, "?"),
 397         SMB_COM_ENTRY(0xC5, "?"),
 398         SMB_COM_ENTRY(0xC6, "?"),
 399         SMB_COM_ENTRY(0xC7, "?"),
 400         SMB_COM_ENTRY(0xC8, "?"),
 401         SMB_COM_ENTRY(0xC9, "?"),
 402         SMB_COM_ENTRY(0xCA, "?"),
 403         SMB_COM_ENTRY(0xCB, "?"),
 404         SMB_COM_ENTRY(0xCC, "?"),
 405         SMB_COM_ENTRY(0xCD, "?"),
 406         SMB_COM_ENTRY(0xCE, "?"),
 407         SMB_COM_ENTRY(0xCF, "?"),
 408         SMB_COM_ENTRY(0xD0, "?"),
 409         SMB_COM_ENTRY(0xD1, "?"),
 410         SMB_COM_ENTRY(0xD2, "?"),
 411         SMB_COM_ENTRY(0xD3, "?"),
 412         SMB_COM_ENTRY(0xD4, "?"),
 413         SMB_COM_ENTRY(0xD5, "?"),
 414         SMB_COM_ENTRY(0xD6, "?"),
 415         SMB_COM_ENTRY(0xD7, "?"),
 416         SMB_COM_ENTRY(SMB_COM_READ_BULK, "No"),
 417         SMB_COM_ENTRY(SMB_COM_WRITE_BULK, "No"),
 418         SMB_COM_ENTRY(SMB_COM_WRITE_BULK_DATA, "No"),
 419         SMB_COM_ENTRY(0xDB, "?"),
 420         SMB_COM_ENTRY(0xDC, "?"),
 421         SMB_COM_ENTRY(0xDD, "?"),
 422         SMB_COM_ENTRY(0xDE, "?"),
 423         SMB_COM_ENTRY(0xDF, "?"),
 424         SMB_COM_ENTRY(0xE0, "?"),
 425         SMB_COM_ENTRY(0xE1, "?"),
 426         SMB_COM_ENTRY(0xE2, "?"),
 427         SMB_COM_ENTRY(0xE3, "?"),
 428         SMB_COM_ENTRY(0xE4, "?"),
 429         SMB_COM_ENTRY(0xE5, "?"),
 430         SMB_COM_ENTRY(0xE6, "?"),
 431         SMB_COM_ENTRY(0xE7, "?"),
 432         SMB_COM_ENTRY(0xE8, "?"),
 433         SMB_COM_ENTRY(0xE9, "?"),
 434         SMB_COM_ENTRY(0xEA, "?"),
 435         SMB_COM_ENTRY(0xEB, "?"),
 436         SMB_COM_ENTRY(0xEC, "?"),
 437         SMB_COM_ENTRY(0xED, "?"),
 438         SMB_COM_ENTRY(0xEE, "?"),
 439         SMB_COM_ENTRY(0xEF, "?"),
 440         SMB_COM_ENTRY(0xF0, "?"),
 441         SMB_COM_ENTRY(0xF1, "?"),
 442         SMB_COM_ENTRY(0xF2, "?"),
 443         SMB_COM_ENTRY(0xF3, "?"),
 444         SMB_COM_ENTRY(0xF4, "?"),
 445         SMB_COM_ENTRY(0xF5, "?"),
 446         SMB_COM_ENTRY(0xF6, "?"),
 447         SMB_COM_ENTRY(0xF7, "?"),
 448         SMB_COM_ENTRY(0xF8, "?"),
 449         SMB_COM_ENTRY(0xF9, "?"),
 450         SMB_COM_ENTRY(0xFA, "?"),
 451         SMB_COM_ENTRY(0xFB, "?"),
 452         SMB_COM_ENTRY(0xFC, "?"),
 453         SMB_COM_ENTRY(0xFD, "?"),
 454         SMB_COM_ENTRY(0xFE, "?"),
 455         SMB_COM_ENTRY(0xFF, "?")
 456 };
 457 
 458 static const char *smb2_cmd_names[SMB2__NCMDS] = {
 459         "smb2_negotiate",
 460         "smb2_session_setup",
 461         "smb2_logoff",
 462         "smb2_tree_connect",
 463         "smb2_tree_disconn",
 464         "smb2_create",
 465         "smb2_close",
 466         "smb2_flush",
 467         "smb2_read",
 468         "smb2_write",
 469         "smb2_lock",
 470         "smb2_ioctl",
 471         "smb2_cancel",
 472         "smb2_echo",
 473         "smb2_query_dir",
 474         "smb2_change_notify",
 475         "smb2_query_info",
 476         "smb2_set_info",
 477         "smb2_oplock_break",
 478         "smb2_invalid_cmd"
 479 };
 480 
 481 struct mdb_smb_oplock;
 482 
 483 static int smb_sid_print(uintptr_t);
 484 static int smb_dcmd_getopt(uint_t *, int, const mdb_arg_t *);
 485 static int smb_dcmd_setopt(uint_t, int, mdb_arg_t *);
 486 static int smb_obj_expand(uintptr_t, uint_t, const smb_exp_t *, ulong_t);
 487 static int smb_obj_list(const char *, uint_t, uint_t);
 488 static int smb_worker_findstack(uintptr_t);
 489 static int smb_node_get_oplock(uintptr_t, struct mdb_smb_oplock **);
 490 static int smb_node_oplock_cnt(struct mdb_smb_oplock *);
 491 static void smb_inaddr_ntop(smb_inaddr_t *, char *, size_t);
 492 static void get_enum(char *, size_t, const char *, int, const char *);
 493 
 494 typedef int (*dump_func_t)(struct mbuf_chain *, int32_t,
 495     smb_inaddr_t *, uint16_t, smb_inaddr_t *, uint16_t,
 496     hrtime_t, boolean_t);
 497 static int smb_req_dump(struct mbuf_chain *, int32_t,
 498     smb_inaddr_t *, uint16_t, smb_inaddr_t *, uint16_t,
 499     hrtime_t, boolean_t);
 500 static int smb_req_dump_m(uintptr_t, const void *, void *);
 501 
 502 /*
 503  * *****************************************************************************
 504  * ****************************** Top level DCMD *******************************
 505  * *****************************************************************************
 506  */
 507 
 508 static void
 509 smblist_help(void)
 510 {
 511         mdb_printf(
 512             "Displays the list of objects using an indented tree format.\n"
 513             "If no option is specified the entire tree is displayed\n\n");
 514         (void) mdb_dec_indent(2);
 515         mdb_printf("%<b>OPTIONS%</b>\n");
 516         (void) mdb_inc_indent(2);
 517         mdb_printf(
 518             "-v\tDisplay verbose information\n"
 519             "-s\tDisplay the list of servers\n"
 520             "-e\tDisplay the list of sessions\n"
 521             "-r\tDisplay the list of smb requests\n"
 522             "-u\tDisplay the list of users\n"
 523             "-t\tDisplay the list of trees\n"
 524             "-f\tDisplay the list of open files\n"
 525             "-d\tDisplay the list of open searches\n");
 526 }
 527 
 528 /*
 529  * ::smblist
 530  *
 531  * This function lists the objects specified on the command line. If no object
 532  * is specified the entire tree (server through ofile and odir) is displayed.
 533  *
 534  */
 535 /*ARGSUSED*/
 536 static int
 537 smblist_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
 538 {
 539         GElf_Sym        sym;
 540         uint_t          opts = 0;
 541         int             new_argc;
 542         mdb_arg_t       new_argv[SMB_MDB_MAX_OPTS];
 543         int             ll_off;
 544 
 545         if (smb_dcmd_getopt(&opts, argc, argv))
 546                 return (DCMD_USAGE);
 547 
 548         if (!(opts & ~(SMB_OPT_WALK | SMB_OPT_VERBOSE)))
 549                 opts |= SMB_OPT_ALL_OBJ;
 550 
 551         opts |= SMB_OPT_WALK;
 552 
 553         new_argc = smb_dcmd_setopt(opts, SMB_MDB_MAX_OPTS, new_argv);
 554 
 555         if (mdb_lookup_by_obj(SMBSRV_OBJNAME, "smb_servers", &sym) == -1) {
 556                 mdb_warn("failed to find symbol smb_servers");
 557                 return (DCMD_ERR);
 558         }
 559 
 560         GET_OFFSET(ll_off, smb_llist_t, ll_list);
 561         addr = (uintptr_t)sym.st_value + ll_off;
 562 
 563         if (mdb_pwalk_dcmd("list", "smbsrv", new_argc, new_argv, addr)) {
 564                 mdb_warn("cannot walk smb_server list");
 565                 return (DCMD_ERR);
 566         }
 567         return (DCMD_OK);
 568 }
 569 
 570 /*
 571  * *****************************************************************************
 572  * ***************************** smb_server_t **********************************
 573  * *****************************************************************************
 574  */
 575 
 576 typedef struct mdb_smb_server {
 577         smb_server_state_t      sv_state;
 578         zoneid_t                sv_zid;
 579         smb_hash_t              *sv_persistid_ht;
 580 } mdb_smb_server_t;
 581 
 582 static int
 583 smb_server_exp_off_sv_list(void)
 584 {
 585         int svl_off, ll_off;
 586 
 587         /* OFFSETOF(smb_server_t, sv_session_list.ll_list); */
 588         GET_OFFSET(svl_off, smb_server_t, sv_session_list);
 589         GET_OFFSET(ll_off, smb_llist_t, ll_list);
 590         return (svl_off + ll_off);
 591 }
 592 
 593 static int
 594 smb_server_exp_off_nbt_list(void)
 595 {
 596         int svd_off, lds_off, ll_off;
 597 
 598         /* OFFSETOF(smb_server_t, sv_nbt_daemon.ld_session_list.ll_list); */
 599         GET_OFFSET(svd_off, smb_server_t, sv_nbt_daemon);
 600         /*
 601          * We can't do OFFSETOF() because the member doesn't exist,
 602          * but we want backwards compatibility to old cores
 603          */
 604         lds_off = mdb_ctf_offsetof_by_name("smb_listener_daemon_t",
 605             "ld_session_list");
 606         if (lds_off < 0) {
 607                 mdb_warn("cannot lookup: "
 608                     "smb_listener_daemon_t .ld_session_list");
 609                 return (-1);
 610         }
 611         GET_OFFSET(ll_off, smb_llist_t, ll_list);
 612         return (svd_off + lds_off + ll_off);
 613 }
 614 
 615 static int
 616 smb_server_exp_off_tcp_list(void)
 617 {
 618         int svd_off, lds_off, ll_off;
 619 
 620         /* OFFSETOF(smb_server_t, sv_tcp_daemon.ld_session_list.ll_list); */
 621         GET_OFFSET(svd_off, smb_server_t, sv_tcp_daemon);
 622         /*
 623          * We can't do OFFSETOF() because the member doesn't exist,
 624          * but we want backwards compatibility to old cores
 625          */
 626         lds_off = mdb_ctf_offsetof_by_name("smb_listener_daemon_t",
 627             "ld_session_list");
 628         if (lds_off < 0) {
 629                 mdb_warn("cannot lookup: "
 630                     "smb_listener_daemon_t .ld_session_list");
 631                 return (-1);
 632         }
 633         GET_OFFSET(ll_off, smb_llist_t, ll_list);
 634         return (svd_off + lds_off + ll_off);
 635 }
 636 
 637 /*
 638  * List of objects that can be expanded under a server structure.
 639  */
 640 static const smb_exp_t smb_server_exp[] =
 641 {
 642         { SMB_OPT_ALL_OBJ,
 643             smb_server_exp_off_sv_list,
 644             "smbsess", "smb_session"},
 645         { 0, 0, NULL, NULL }
 646 };
 647 
 648 /* for backwards compatibility only */
 649 static const smb_exp_t smb_server_exp_old[] =
 650 {
 651         { SMB_OPT_ALL_OBJ,
 652             smb_server_exp_off_nbt_list,
 653             "smbsess", "smb_session"},
 654         { SMB_OPT_ALL_OBJ,
 655             smb_server_exp_off_tcp_list,
 656             "smbsess", "smb_session"},
 657         { 0, 0, NULL, NULL }
 658 };
 659 
 660 /*
 661  * ::smbsrv
 662  *
 663  * smbsrv dcmd - Print out smb_server structures.
 664  */
 665 /*ARGSUSED*/
 666 static int
 667 smbsrv_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
 668 {
 669         uint_t          opts;
 670         ulong_t         indent = 0;
 671         const smb_exp_t *sv_exp;
 672         mdb_ctf_id_t id;
 673         ulong_t off;
 674 
 675         if (smb_dcmd_getopt(&opts, argc, argv))
 676                 return (DCMD_USAGE);
 677 
 678         if (!(flags & DCMD_ADDRSPEC))
 679                 return (smb_obj_list("smb_server", opts | SMB_OPT_SERVER,
 680                     flags));
 681 
 682         if (((opts & SMB_OPT_WALK) && (opts & SMB_OPT_SERVER)) ||
 683             !(opts & SMB_OPT_WALK)) {
 684                 mdb_smb_server_t *sv;
 685                 char state[40];
 686 
 687                 sv = mdb_zalloc(sizeof (*sv), UM_SLEEP | UM_GC);
 688                 if (mdb_ctf_vread(sv, SMBSRV_SCOPE "smb_server_t",
 689                     "mdb_smb_server_t", addr, 0) < 0) {
 690                         mdb_warn("failed to read smb_server at %p", addr);
 691                         return (DCMD_ERR);
 692                 }
 693 
 694                 indent = SMB_DCMD_INDENT;
 695 
 696                 if (opts & SMB_OPT_VERBOSE) {
 697                         mdb_arg_t       argv;
 698 
 699                         argv.a_type = MDB_TYPE_STRING;
 700                         argv.a_un.a_str = "smb_server_t";
 701                         if (mdb_call_dcmd("print", addr, flags, 1, &argv))
 702                                 return (DCMD_ERR);
 703                 } else {
 704                         if (DCMD_HDRSPEC(flags))
 705                                 mdb_printf(
 706                                     "%<b>%<u>%-?s% "
 707                                     "%-4s% "
 708                                     "%-32s% "
 709                                     "%</u>%</b>\n",
 710                                     "SERVER", "ZONE", "STATE");
 711 
 712                         get_enum(state, sizeof (state),
 713                             "smb_server_state_t", sv->sv_state,
 714                             "SMB_SERVER_STATE_");
 715 
 716                         mdb_printf("%-?p %-4d %-32s \n",
 717                             addr, sv->sv_zid, state);
 718                 }
 719         }
 720 
 721         /* if we can't look up the type name, just error out */
 722         if (mdb_ctf_lookup_by_name("smb_server_t", &id) == -1)
 723                 return (DCMD_ERR);
 724 
 725         if (mdb_ctf_offsetof(id, "sv_session_list", &off) == -1)
 726                 /* sv_session_list doesn't exist; old core */
 727                 sv_exp = smb_server_exp_old;
 728         else
 729                 sv_exp = smb_server_exp;
 730 
 731         if (smb_obj_expand(addr, opts, sv_exp, indent))
 732                 return (DCMD_ERR);
 733         return (DCMD_OK);
 734 }
 735 
 736 /*
 737  * *****************************************************************************
 738  * ***************************** smb_session_t *********************************
 739  * *****************************************************************************
 740  */
 741 
 742 /*
 743  * After some changes merged from upstream, "::smblist" was failing with
 744  * "inexact match for union au_addr (au_addr)" because the CTF data for
 745  * the target vs mdb were apparently not exactly the same (unknown why).
 746  *
 747  * As described above mdb_ctf_vread(), the recommended way to read a
 748  * union is to use an mdb struct with only the union "arm" appropriate
 749  * to the given type instance.  That's difficult in this case, so we
 750  * use a local union with only the in6_addr_t union arm (otherwise
 751  * identical to smb_inaddr_t) and just cast it to an smb_inaddr_t
 752  */
 753 
 754 typedef struct mdb_smb_inaddr {
 755         union {
 756 #if 0   /* The real smb_inaddr_t has these too. */
 757                 in_addr_t au_ipv4;
 758                 in6_addr_t au_ipv6;
 759 #endif
 760                 in6_addr_t au_ip;
 761         } au_addr;
 762         int a_family;
 763 } mdb_smb_inaddr_t;
 764 
 765 typedef struct mdb_smb_session {
 766         uint64_t                s_kid;
 767         smb_session_state_t     s_state;
 768         uint32_t                s_flags;
 769         uint16_t                s_local_port;
 770         uint16_t                s_remote_port;
 771         mdb_smb_inaddr_t        ipaddr;
 772         mdb_smb_inaddr_t        local_ipaddr;
 773         int                     dialect;
 774 
 775         smb_slist_t             s_req_list;
 776         smb_llist_t             s_xa_list;
 777         smb_llist_t             s_user_list;
 778         smb_llist_t             s_tree_list;
 779 
 780         volatile uint32_t       s_tree_cnt;
 781         volatile uint32_t       s_file_cnt;
 782         volatile uint32_t       s_dir_cnt;
 783 
 784         char                    workstation[SMB_PI_MAX_HOST];
 785 } mdb_smb_session_t;
 786 
 787 static int
 788 smb_session_exp_off_req_list(void)
 789 {
 790         int rl_off, sl_off;
 791 
 792         /* OFFSETOF(smb_session_t, s_req_list.sl_list); */
 793         GET_OFFSET(rl_off, smb_session_t, s_req_list);
 794         GET_OFFSET(sl_off, smb_slist_t, sl_list);
 795         return (rl_off + sl_off);
 796 }
 797 
 798 static int
 799 smb_session_exp_off_user_list(void)
 800 {
 801         int ul_off, ll_off;
 802 
 803         /* OFFSETOF(smb_session_t, s_user_list.ll_list); */
 804         GET_OFFSET(ul_off, smb_session_t, s_user_list);
 805         GET_OFFSET(ll_off, smb_llist_t, ll_list);
 806         return (ul_off + ll_off);
 807 }
 808 
 809 static int
 810 smb_session_exp_off_tree_list(void)
 811 {
 812         int tl_off, ll_off;
 813 
 814         /* OFFSETOF(smb_session_t, s_tree_list.ll_list); */
 815         GET_OFFSET(tl_off, smb_session_t, s_tree_list);
 816         GET_OFFSET(ll_off, smb_llist_t, ll_list);
 817         return (tl_off + ll_off);
 818 }
 819 
 820 /*
 821  * List of objects that can be expanded under a session structure.
 822  */
 823 static const smb_exp_t smb_session_exp[] =
 824 {
 825         { SMB_OPT_USER,
 826             smb_session_exp_off_user_list,
 827             "smbuser", "smb_user"},
 828         { SMB_OPT_TREE | SMB_OPT_OFILE | SMB_OPT_ODIR,
 829             smb_session_exp_off_tree_list,
 830             "smbtree", "smb_tree"},
 831         { SMB_OPT_REQUEST,
 832             smb_session_exp_off_req_list,
 833             "smbreq", "smb_request"},
 834         { 0, 0, NULL, NULL}
 835 };
 836 
 837 static void
 838 smbsess_help(void)
 839 {
 840         mdb_printf(
 841             "Display the contents of smb_session_t, with optional"
 842             " filtering.\n\n");
 843         (void) mdb_dec_indent(2);
 844         mdb_printf("%<b>OPTIONS%</b>\n");
 845         (void) mdb_inc_indent(2);
 846         mdb_printf(
 847             "-v\tDisplay verbose smb_session information\n"
 848             "-r\tDisplay the list of smb requests attached\n"
 849             "-u\tDisplay the list of users attached\n");
 850 }
 851 
 852 /*
 853  * ::smbsess
 854  *
 855  * smbsess dcmd - Print out the smb_session structure.
 856  */
 857 static int
 858 smbsess_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
 859 {
 860         uint_t          opts;
 861         ulong_t         indent = 0;
 862 
 863         if (smb_dcmd_getopt(&opts, argc, argv))
 864                 return (DCMD_USAGE);
 865 
 866         if (!(flags & DCMD_ADDRSPEC)) {
 867                 opts |= SMB_OPT_SESSION;
 868                 opts &= ~SMB_OPT_SERVER;
 869                 return (smb_obj_list("smb_session", opts, flags));
 870         }
 871 
 872         if (((opts & SMB_OPT_WALK) && (opts & SMB_OPT_SESSION)) ||
 873             !(opts & SMB_OPT_WALK)) {
 874                 char    cipaddr[INET6_ADDRSTRLEN];
 875                 char    lipaddr[INET6_ADDRSTRLEN];
 876                 int     ipaddrstrlen = INET6_ADDRSTRLEN;
 877                 mdb_smb_session_t *se;
 878                 char    state[40];
 879 
 880                 indent = SMB_DCMD_INDENT;
 881 
 882                 se = mdb_zalloc(sizeof (*se), UM_SLEEP | UM_GC);
 883                 if (mdb_ctf_vread(se, SMBSRV_SCOPE "smb_session_t",
 884                     "mdb_smb_session_t", addr, 0) < 0) {
 885                         mdb_warn("failed to read smb_session at %p", addr);
 886                         return (DCMD_ERR);
 887                 }
 888 
 889                 get_enum(state, sizeof (state),
 890                     "smb_session_state_t", se->s_state,
 891                     "SMB_SESSION_STATE_");
 892 
 893                 smb_inaddr_ntop((smb_inaddr_t *)&se->ipaddr,
 894                     cipaddr, ipaddrstrlen);
 895                 smb_inaddr_ntop((smb_inaddr_t *)&se->local_ipaddr,
 896                     lipaddr, ipaddrstrlen);
 897 
 898                 if (opts & SMB_OPT_VERBOSE) {
 899                         mdb_printf("%<b>%<u>SMB session information "
 900                             "(%p): %</u>%</b>\n", addr);
 901                         mdb_printf("Client IP address: %s %d\n",
 902                             cipaddr, se->s_remote_port);
 903                         mdb_printf("Local IP Address: %s %d\n",
 904                             lipaddr, se->s_local_port);
 905                         mdb_printf("Session KID: %u\n", se->s_kid);
 906                         mdb_printf("Workstation Name: %s\n",
 907                             se->workstation);
 908                         mdb_printf("Session state: %u (%s)\n", se->s_state,
 909                             state);
 910                         mdb_printf("Session dialect: %#x\n", se->dialect);
 911                         mdb_printf("Number of Users: %u\n",
 912                             se->s_user_list.ll_count);
 913                         mdb_printf("Number of Trees: %u\n", se->s_tree_cnt);
 914                         mdb_printf("Number of Files: %u\n", se->s_file_cnt);
 915                         mdb_printf("Number of Shares: %u\n", se->s_dir_cnt);
 916                         mdb_printf("Number of active Transact.: %u\n\n",
 917                             se->s_xa_list.ll_count);
 918                 } else {
 919                         /*
 920                          * Use a reasonable mininum field width for the
 921                          * IP addr so the summary (usually) won't wrap.
 922                          */
 923                         int ipwidth = 22;
 924 
 925                         if (DCMD_HDRSPEC(flags)) {
 926                                 mdb_printf(
 927                         "%<b>%<u>%-?s %-*s %-8s %-8s %-12s%</u>%</b>\n",
 928                                     "SESSION", ipwidth, "IP_ADDR",
 929                                     "PORT", "DIALECT", "STATE");
 930                         }
 931                         mdb_printf("%-?p %-*s %-8d %-8#x %s\n",
 932                             addr, ipwidth, cipaddr,
 933                             se->s_remote_port, se->dialect, state);
 934                 }
 935         }
 936         if (smb_obj_expand(addr, opts, smb_session_exp, indent))
 937                 return (DCMD_ERR);
 938 
 939         return (DCMD_OK);
 940 }
 941 
 942 /*
 943  * *****************************************************************************
 944  * **************************** smb_request_t **********************************
 945  * *****************************************************************************
 946  */
 947 
 948 typedef struct mdb_smb_request {
 949         smb_req_state_t         sr_state;
 950         smb_session_t           *session;
 951         struct mbuf_chain       command;
 952         struct mbuf_chain       reply;
 953 
 954         unsigned char           first_smb_com;
 955         unsigned char           smb_com;
 956 
 957         uint16_t                smb_tid;
 958         uint32_t                smb_pid;
 959         uint16_t                smb_uid;
 960         uint16_t                smb_mid;
 961         uint16_t                smb_fid;
 962 
 963         uint16_t                smb2_cmd_code;
 964         uint64_t                smb2_messageid;
 965         uint64_t                smb2_ssnid;
 966 
 967         struct smb_tree         *tid_tree;
 968         struct smb_ofile        *fid_ofile;
 969         smb_user_t              *uid_user;
 970 
 971         kthread_t               *sr_worker;
 972         hrtime_t                sr_time_submitted;
 973         hrtime_t                sr_time_active;
 974         hrtime_t                sr_time_start;
 975 
 976 } mdb_smb_request_t;
 977 
 978 #define SMB_REQUEST_BANNER      \
 979         "%<b>%<u>%-?s %-14s %-?s %-16s %-16s%</u>%</b>\n"
 980 #define SMB_REQUEST_FORMAT      \
 981         "%-?p 0x%-12llx %-?p %-16s %s\n"
 982 
 983 /*
 984  * ::smbreq
 985  *
 986  * smbreq dcmd - Print out smb_request_t
 987  */
 988 static int
 989 smbreq_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
 990 {
 991         uint_t          opts;
 992 
 993         if (smb_dcmd_getopt(&opts, argc, argv))
 994                 return (DCMD_USAGE);
 995 
 996         if (!(flags & DCMD_ADDRSPEC)) {
 997                 opts |= SMB_OPT_REQUEST;
 998                 opts &= ~(SMB_OPT_SERVER | SMB_OPT_SESSION | SMB_OPT_USER);
 999                 return (smb_obj_list("smb_request", opts, flags));
1000         }
1001 
1002         if (((opts & SMB_OPT_WALK) && (opts & SMB_OPT_REQUEST)) ||
1003             !(opts & SMB_OPT_WALK)) {
1004                 mdb_smb_request_t *sr;
1005                 char            state[40];
1006                 const char      *cur_cmd_name;
1007                 uint_t          cur_cmd_code;
1008                 uint64_t        msg_id;
1009 
1010                 sr = mdb_zalloc(sizeof (*sr), UM_SLEEP | UM_GC);
1011                 if (mdb_ctf_vread(sr, SMBSRV_SCOPE "smb_request_t",
1012                     "mdb_smb_request_t", addr, 0) < 0) {
1013                         mdb_warn("failed to read smb_request at %p", addr);
1014                         return (DCMD_ERR);
1015                 }
1016 
1017                 get_enum(state, sizeof (state),
1018                     "smb_req_state_t", sr->sr_state,
1019                     "SMB_REQ_STATE_");
1020 
1021                 if (sr->smb2_cmd_code != 0) {
1022                         /* SMB2 request */
1023                         cur_cmd_code = sr->smb2_cmd_code;
1024                         if (cur_cmd_code > SMB2_INVALID_CMD)
1025                                 cur_cmd_code = SMB2_INVALID_CMD;
1026                         cur_cmd_name = smb2_cmd_names[cur_cmd_code];
1027                         msg_id = sr->smb2_messageid;
1028                 } else {
1029                         /* SMB1 request */
1030                         cur_cmd_code = sr->smb_com & 0xFF;
1031                         cur_cmd_name = smb_com[cur_cmd_code].smb_com;
1032                         msg_id = sr->smb_mid;
1033                 }
1034 
1035                 if (opts & SMB_OPT_VERBOSE) {
1036                         mdb_printf(
1037                             "%</b>%</u>SMB request information (%p):"
1038                             "%</u>%</b>\n\n", addr);
1039 
1040                         if (sr->smb2_cmd_code == 0) {
1041                                 /* SMB1 request */
1042                                 mdb_printf(
1043                                     "first SMB COM: %u (%s)\n",
1044                                     sr->first_smb_com,
1045                                     smb_com[sr->first_smb_com].smb_com);
1046                         }
1047 
1048                         mdb_printf(
1049                             "current SMB COM: %u (%s)\n",
1050                             cur_cmd_code, cur_cmd_name);
1051 
1052                         mdb_printf(
1053                             "state: %u (%s)\n",
1054                             sr->sr_state, state);
1055 
1056                         if (sr->smb2_ssnid != 0) {
1057                                 mdb_printf(
1058                                     "SSNID(user): 0x%llx (%p)\n",
1059                                     sr->smb2_ssnid, sr->uid_user);
1060                         } else {
1061                                 mdb_printf(
1062                                     "UID(user): %u (%p)\n",
1063                                     sr->smb_uid, sr->uid_user);
1064                         }
1065 
1066                         mdb_printf(
1067                             "TID(tree): %u (%p)\n",
1068                             sr->smb_tid, sr->tid_tree);
1069 
1070                         mdb_printf(
1071                             "FID(file): %u (%p)\n",
1072                             sr->smb_fid, sr->fid_ofile);
1073 
1074                         mdb_printf(
1075                             "PID: %u\n",
1076                             sr->smb_pid);
1077 
1078                         mdb_printf(
1079                             "MID: 0x%llx\n",
1080                             msg_id);
1081 
1082                         /*
1083                          * Note: mdb_gethrtime() is only available in kmdb
1084                          */
1085 #ifdef  _KERNEL
1086                         if (sr->sr_time_submitted != 0) {
1087                                 uint64_t        waiting = 0;
1088                                 uint64_t        running = 0;
1089 
1090                                 if (sr->sr_time_active != 0) {
1091                                         waiting = sr->sr_time_active -
1092                                             sr->sr_time_submitted;
1093                                         running = mdb_gethrtime() -
1094                                             sr->sr_time_active;
1095                                 } else {
1096                                         waiting = mdb_gethrtime() -
1097                                             sr->sr_time_submitted;
1098                                 }
1099                                 waiting /= NANOSEC;
1100                                 running /= NANOSEC;
1101 
1102                                 mdb_printf(
1103                                     "waiting time: %lld\n",
1104                                     waiting);
1105 
1106                                 mdb_printf(
1107                                     "running time: %lld\n",
1108                                     running);
1109                         }
1110 #endif  /* _KERNEL */
1111 
1112                         mdb_printf(
1113                             "worker thread: %p\n",
1114                             sr->sr_worker);
1115                         if (sr->sr_worker != NULL) {
1116                                 smb_worker_findstack((uintptr_t)sr->sr_worker);
1117                         }
1118                 } else {
1119                         if (DCMD_HDRSPEC(flags))
1120                                 mdb_printf(
1121                                     SMB_REQUEST_BANNER,
1122                                     "REQUEST",
1123                                     "MSG_ID",
1124                                     "WORKER",
1125                                     "STATE",
1126                                     "COMMAND");
1127 
1128                         mdb_printf(
1129                             SMB_REQUEST_FORMAT,
1130                             addr,
1131                             msg_id,
1132                             sr->sr_worker,
1133                             state,
1134                             cur_cmd_name);
1135                 }
1136         }
1137         return (DCMD_OK);
1138 }
1139 
1140 static void
1141 smbreq_dump_help(void)
1142 {
1143         mdb_printf(
1144             "Dump the network data for an smb_request_t, either"
1145             " command, reply, or (by default) both.  Optionally"
1146             " append data to a pcap file (mdb only, not kmdb).\n\n");
1147         (void) mdb_dec_indent(2);
1148         mdb_printf("%<b>OPTIONS%</b>\n");
1149         (void) mdb_inc_indent(2);
1150         mdb_printf(
1151             "-c\tDump only the SMB command message\n"
1152             "-r\tDump only the SMB reply message (if present)\n"
1153             "-o FILE\tOutput to FILE (append) in pcap format\n");
1154 }
1155 
1156 #define SMB_RDOPT_COMMAND       1
1157 #define SMB_RDOPT_REPLY         2
1158 #define SMB_RDOPT_OUTFILE       4
1159 
1160 /*
1161  * Like "smbreq" but just dump the command/reply messages.
1162  * With the output file option, append to a pcap file.
1163  */
1164 static int
1165 smbreq_dump_dcmd(uintptr_t rqaddr, uint_t flags, int argc,
1166     const mdb_arg_t *argv)
1167 {
1168         mdb_smb_session_t *ssn;
1169         mdb_smb_request_t *sr;
1170         char            *outfile = NULL;
1171         dump_func_t     dump_func;
1172         uint64_t        msgid;
1173         uintptr_t       ssnaddr;
1174         uint_t          opts = 0;
1175         int             rc = DCMD_OK;
1176 
1177         if (!(flags & DCMD_ADDRSPEC))
1178                 return (DCMD_USAGE);
1179 
1180         if (mdb_getopts(argc, argv,
1181             'c', MDB_OPT_SETBITS, SMB_RDOPT_COMMAND, &opts,
1182             'r', MDB_OPT_SETBITS, SMB_RDOPT_REPLY, &opts,
1183             'o', MDB_OPT_STR, &outfile,
1184             NULL) != argc)
1185                 return (DCMD_USAGE);
1186 #ifdef  _KMDB
1187         if (outfile != NULL) {
1188                 mdb_warn("smbreq_dump -o option not supported in kmdb\n");
1189                 return (DCMD_ERR);
1190         }
1191 #endif  /* _KMDB */
1192 
1193         /*
1194          * Default without -c or -r is to dump both.
1195          */
1196         if ((opts & (SMB_RDOPT_COMMAND | SMB_RDOPT_REPLY)) == 0)
1197                 opts |= SMB_RDOPT_COMMAND | SMB_RDOPT_REPLY;
1198 
1199         /*
1200          * Get the smb_request_t, for the cmd/reply messages.
1201          */
1202         sr = mdb_zalloc(sizeof (*sr), UM_SLEEP | UM_GC);
1203         if (mdb_ctf_vread(sr, SMBSRV_SCOPE "smb_request_t",
1204             "mdb_smb_request_t", rqaddr, 0) < 0) {
1205                 mdb_warn("failed to read smb_request at %p", rqaddr);
1206                 return (DCMD_ERR);
1207         }
1208 
1209         /*
1210          * Get the session too, for the IP addresses & ports.
1211          */
1212         ssnaddr = (uintptr_t)sr->session;
1213         ssn = mdb_zalloc(sizeof (*ssn), UM_SLEEP | UM_GC);
1214         if (mdb_ctf_vread(ssn, SMBSRV_SCOPE "smb_session_t",
1215             "mdb_smb_session_t", ssnaddr, 0) < 0) {
1216                 mdb_warn("failed to read smb_request at %p", ssnaddr);
1217                 return (DCMD_ERR);
1218         }
1219 
1220 #ifndef _KMDB
1221         if (outfile != NULL) {
1222                 rc = smbsrv_pcap_open(outfile);
1223                 if (rc != DCMD_OK)
1224                         return (rc);
1225                 dump_func = smbsrv_pcap_dump;
1226         } else
1227 #endif  /* _KMDB */
1228         {
1229                 dump_func = smb_req_dump;
1230         }
1231 
1232         if (sr->smb2_messageid != 0)
1233                 msgid = sr->smb2_messageid;
1234         else
1235                 msgid = sr->smb_mid;
1236         mdb_printf("Dumping request %-?p, Msg_ID 0x%llx\n",
1237             rqaddr, msgid);
1238 
1239         if (opts & SMB_RDOPT_COMMAND) {
1240                 /*
1241                  * Dump the command, length=max_bytes
1242                  * src=remote, dst=local
1243                  */
1244                 rc = dump_func(&sr->command, sr->command.max_bytes,
1245                     (smb_inaddr_t *)&ssn->ipaddr, ssn->s_remote_port,
1246                     (smb_inaddr_t *)&ssn->local_ipaddr, ssn->s_local_port,
1247                     sr->sr_time_submitted, B_FALSE);
1248         }
1249 
1250         if ((opts & SMB_RDOPT_REPLY) != 0 &&
1251             rc == DCMD_OK) {
1252                 /*
1253                  * Dump the reply, length=chain_offset
1254                  * src=local, dst=remote
1255                  */
1256                 rc = dump_func(&sr->reply, sr->reply.chain_offset,
1257                     (smb_inaddr_t *)&ssn->local_ipaddr, ssn->s_local_port,
1258                     (smb_inaddr_t *)&ssn->ipaddr, ssn->s_remote_port,
1259                     sr->sr_time_start, B_TRUE);
1260         }
1261 
1262 #ifndef _KMDB
1263         if (outfile != NULL) {
1264                 smbsrv_pcap_close();
1265         }
1266 #endif
1267 
1268         return (DCMD_OK);
1269 }
1270 
1271 struct req_dump_state {
1272         int32_t rem_len;
1273 };
1274 
1275 static int
1276 smb_req_dump(struct mbuf_chain *mbc, int32_t smb_len,
1277     smb_inaddr_t *src_ip, uint16_t src_port,
1278     smb_inaddr_t *dst_ip, uint16_t dst_port,
1279     hrtime_t rqtime, boolean_t is_reply)
1280 {
1281         char    src_buf[INET6_ADDRSTRLEN];
1282         char    dst_buf[INET6_ADDRSTRLEN];
1283         struct req_dump_state dump_state;
1284         _NOTE(ARGUNUSED(rqtime));
1285 
1286         if (smb_len < 4)
1287                 return (DCMD_OK);
1288         if (mbc->chain == NULL)
1289                 return (DCMD_ERR);
1290 
1291         smb_inaddr_ntop(src_ip, src_buf, sizeof (src_buf));
1292         smb_inaddr_ntop(dst_ip, dst_buf, sizeof (dst_buf));
1293 
1294         mdb_printf("%-8s SRC: %s/%u  DST: %s/%u  LEN: %u\n",
1295             (is_reply) ? "Reply:" : "Call:",
1296             src_buf, src_port, dst_buf, dst_port, smb_len);
1297 
1298         /*
1299          * Calling "smb_mbuf_dump" with a wrapper function
1300          * so we can set its length arg, and decrement
1301          * req_dump_state.rem_len as it goes.
1302          */
1303         dump_state.rem_len = smb_len;
1304         if (mdb_pwalk("smb_mbuf_walker", smb_req_dump_m,
1305             &dump_state, (uintptr_t)mbc->chain) == -1) {
1306                 mdb_warn("cannot walk smb_req mbuf_chain");
1307                 return (DCMD_ERR);
1308         }
1309         return (DCMD_OK);
1310 }
1311 
1312 static int
1313 smb_req_dump_m(uintptr_t m_addr, const void *data, void *arg)
1314 {
1315         struct req_dump_state *st = arg;
1316         const struct mbuf *m = data;
1317         mdb_arg_t       argv;
1318         int cnt;
1319 
1320         cnt = st->rem_len;
1321         if (cnt > m->m_len)
1322                 cnt = m->m_len;
1323         if (cnt <= 0)
1324                 return (WALK_DONE);
1325 
1326         argv.a_type = MDB_TYPE_IMMEDIATE;
1327         argv.a_un.a_val = cnt;
1328         if (mdb_call_dcmd("smb_mbuf_dump", m_addr, 0, 1, &argv) < 0) {
1329                 mdb_warn("%p::smb_mbuf_dump failed\n", m_addr);
1330                 return (WALK_ERR);
1331         }
1332 
1333         st->rem_len -= cnt;
1334         return (WALK_NEXT);
1335 }
1336 
1337 /*
1338  * *****************************************************************************
1339  * ****************************** smb_user_t ***********************************
1340  * *****************************************************************************
1341  */
1342 typedef struct mdb_smb_user {
1343         smb_user_state_t        u_state;
1344 
1345         struct smb_server       *u_server;
1346         smb_session_t           *u_session;
1347 
1348         uint16_t                u_name_len;
1349         char                    *u_name;
1350         uint16_t                u_domain_len;
1351         char                    *u_domain;
1352         time_t                  u_logon_time;
1353         cred_t                  *u_cred;
1354         cred_t                  *u_privcred;
1355 
1356         uint64_t                u_ssnid;
1357         uint32_t                u_refcnt;
1358         uint32_t                u_flags;
1359         uint32_t                u_privileges;
1360         uint16_t                u_uid;
1361 } mdb_smb_user_t;
1362 
1363 static const mdb_bitmask_t
1364 user_flag_bits[] = {
1365         { "ANON",
1366             SMB_USER_FLAG_ANON,
1367             SMB_USER_FLAG_ANON },
1368         { "GUEST",
1369             SMB_USER_FLAG_GUEST,
1370             SMB_USER_FLAG_GUEST },
1371         { "POWER_USER",
1372             SMB_USER_FLAG_POWER_USER,
1373             SMB_USER_FLAG_POWER_USER },
1374         { "BACKUP_OP",
1375             SMB_USER_FLAG_BACKUP_OPERATOR,
1376             SMB_USER_FLAG_BACKUP_OPERATOR },
1377         { "ADMIN",
1378             SMB_USER_FLAG_ADMIN,
1379             SMB_USER_FLAG_ADMIN },
1380         { NULL, 0, 0 }
1381 };
1382 
1383 static const mdb_bitmask_t
1384 user_priv_bits[] = {
1385         /*
1386          * Old definitions of these bits, for when we're
1387          * looking at an older core file.  These happen to
1388          * have no overlap with the current definitions.
1389          */
1390         { "TAKE_OWNER", 1, 1 },
1391         { "BACKUP",     2, 2 },
1392         { "RESTORE",    4, 4 },
1393         { "SECURITY",   8, 8 },
1394         /*
1395          * Current definitions
1396          */
1397         { "SECURITY",
1398             SMB_USER_PRIV_SECURITY,
1399             SMB_USER_PRIV_SECURITY },
1400         { "TAKE_OWNER",
1401             SMB_USER_PRIV_TAKE_OWNERSHIP,
1402             SMB_USER_PRIV_TAKE_OWNERSHIP },
1403         { "BACKUP",
1404             SMB_USER_PRIV_BACKUP,
1405             SMB_USER_PRIV_BACKUP },
1406         { "RESTORE",
1407             SMB_USER_PRIV_RESTORE,
1408             SMB_USER_PRIV_RESTORE },
1409         { "CHANGE_NOTIFY",
1410             SMB_USER_PRIV_CHANGE_NOTIFY,
1411             SMB_USER_PRIV_CHANGE_NOTIFY },
1412         { NULL, 0, 0 }
1413 };
1414 
1415 static void
1416 smbuser_help(void)
1417 {
1418         mdb_printf(
1419             "Display the contents of smb_user_t, with optional filtering.\n\n");
1420         (void) mdb_dec_indent(2);
1421         mdb_printf("%<b>OPTIONS%</b>\n");
1422         (void) mdb_inc_indent(2);
1423         mdb_printf(
1424             "-v\tDisplay verbose smb_user information\n");
1425 }
1426 
1427 static int
1428 smbuser_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
1429 {
1430         uint_t          opts;
1431 
1432         if (smb_dcmd_getopt(&opts, argc, argv))
1433                 return (DCMD_USAGE);
1434 
1435         if (!(flags & DCMD_ADDRSPEC)) {
1436                 opts |= SMB_OPT_USER;
1437                 opts &= ~(SMB_OPT_SERVER | SMB_OPT_SESSION | SMB_OPT_REQUEST);
1438                 return (smb_obj_list("smb_user", opts, flags));
1439         }
1440 
1441         if (((opts & SMB_OPT_WALK) && (opts & SMB_OPT_USER)) ||
1442             !(opts & SMB_OPT_WALK)) {
1443                 mdb_smb_user_t  *user;
1444                 char            *account;
1445 
1446                 user = mdb_zalloc(sizeof (*user), UM_SLEEP | UM_GC);
1447                 if (mdb_ctf_vread(user, SMBSRV_SCOPE "smb_user_t",
1448                     "mdb_smb_user_t", addr, 0) < 0) {
1449                         mdb_warn("failed to read smb_user at %p", addr);
1450                         return (DCMD_ERR);
1451                 }
1452                 account = mdb_zalloc(user->u_domain_len + user->u_name_len + 2,
1453                     UM_SLEEP | UM_GC);
1454 
1455                 if (user->u_domain_len)
1456                         (void) mdb_vread(account, user->u_domain_len,
1457                             (uintptr_t)user->u_domain);
1458 
1459                 strcat(account, "\\");
1460 
1461                 if (user->u_name_len)
1462                         (void) mdb_vread(account + strlen(account),
1463                             user->u_name_len, (uintptr_t)user->u_name);
1464 
1465                 if (opts & SMB_OPT_VERBOSE) {
1466                         char            state[40];
1467 
1468                         get_enum(state, sizeof (state),
1469                             "smb_user_state_t", user->u_state,
1470                             "SMB_USER_STATE_");
1471 
1472                         mdb_printf("%<b>%<u>SMB user information (%p):"
1473                             "%</u>%</b>\n", addr);
1474                         mdb_printf("UID: %u\n", user->u_uid);
1475                         mdb_printf("SSNID: %llx\n", user->u_ssnid);
1476                         mdb_printf("State: %d (%s)\n", user->u_state, state);
1477                         mdb_printf("Flags: 0x%08x <%b>\n", user->u_flags,
1478                             user->u_flags, user_flag_bits);
1479                         mdb_printf("Privileges: 0x%08x <%b>\n",
1480                             user->u_privileges,
1481                             user->u_privileges, user_priv_bits);
1482                         mdb_printf("Credential: %p\n", user->u_cred);
1483                         mdb_printf("Reference Count: %d\n", user->u_refcnt);
1484                         mdb_printf("User Account: %s\n\n", account);
1485                 } else {
1486                         if (DCMD_HDRSPEC(flags))
1487                                 mdb_printf(
1488                                     "%<b>%<u>%?-s "
1489                                     "%-5s "
1490                                     "%-16s "
1491                                     "%-32s%</u>%</b>\n",
1492                                     "USER", "UID", "SSNID", "ACCOUNT");
1493 
1494                         mdb_printf("%-?p %-5u %-16llx %-32s\n",
1495                             addr, user->u_uid, user->u_ssnid, account);
1496                 }
1497         }
1498         return (DCMD_OK);
1499 }
1500 
1501 /*
1502  * *****************************************************************************
1503  * ****************************** smb_tree_t ***********************************
1504  * *****************************************************************************
1505  */
1506 
1507 typedef struct mdb_smb_tree {
1508         smb_tree_state_t        t_state;
1509 
1510         smb_node_t              *t_snode;
1511         smb_llist_t             t_ofile_list;
1512         smb_llist_t             t_odir_list;
1513 
1514         uint32_t                t_refcnt;
1515         uint32_t                t_flags;
1516         int32_t                 t_res_type;
1517         uint16_t                t_tid;
1518         uint16_t                t_umask;
1519         char                    t_sharename[MAXNAMELEN];
1520         char                    t_resource[MAXPATHLEN];
1521         char                    t_typename[SMB_TYPENAMELEN];
1522         char                    t_volume[SMB_VOLNAMELEN];
1523 } mdb_smb_tree_t;
1524 
1525 static int
1526 smb_tree_exp_off_ofile_list(void)
1527 {
1528         int tf_off, ll_off;
1529 
1530         /* OFFSETOF(smb_tree_t, t_ofile_list.ll_list); */
1531         GET_OFFSET(tf_off, smb_tree_t, t_ofile_list);
1532         GET_OFFSET(ll_off, smb_llist_t, ll_list);
1533         return (tf_off + ll_off);
1534 }
1535 
1536 static int
1537 smb_tree_exp_off_odir_list(void)
1538 {
1539         int td_off, ll_off;
1540 
1541         /* OFFSETOF(smb_tree_t, t_odir_list.ll_list); */
1542         GET_OFFSET(td_off, smb_tree_t, t_odir_list);
1543         GET_OFFSET(ll_off, smb_llist_t, ll_list);
1544         return (td_off + ll_off);
1545 }
1546 
1547 /*
1548  * List of objects that can be expanded under a tree structure.
1549  */
1550 static const smb_exp_t smb_tree_exp[] =
1551 {
1552         { SMB_OPT_OFILE,
1553             smb_tree_exp_off_ofile_list,
1554             "smbofile", "smb_ofile"},
1555         { SMB_OPT_ODIR,
1556             smb_tree_exp_off_odir_list,
1557             "smbodir", "smb_odir"},
1558         { 0, 0, NULL, NULL}
1559 };
1560 
1561 static const mdb_bitmask_t
1562 tree_flag_bits[] = {
1563         { "RO",
1564             SMB_TREE_READONLY,
1565             SMB_TREE_READONLY },
1566         { "ACLS",
1567             SMB_TREE_SUPPORTS_ACLS,
1568             SMB_TREE_SUPPORTS_ACLS },
1569         { "STREAMS",
1570             SMB_TREE_STREAMS,
1571             SMB_TREE_STREAMS },
1572         { "CI",
1573             SMB_TREE_CASEINSENSITIVE,
1574             SMB_TREE_CASEINSENSITIVE },
1575         { "NO_CS",
1576             SMB_TREE_NO_CASESENSITIVE,
1577             SMB_TREE_NO_CASESENSITIVE },
1578         { "NO_EXPORT",
1579             SMB_TREE_NO_EXPORT,
1580             SMB_TREE_NO_EXPORT },
1581         { "OPLOCKS",
1582             SMB_TREE_OPLOCKS,
1583             SMB_TREE_OPLOCKS },
1584         { "SHORTNAMES",
1585             SMB_TREE_SHORTNAMES,
1586             SMB_TREE_SHORTNAMES },
1587         { "XVATTR",
1588             SMB_TREE_XVATTR,
1589             SMB_TREE_XVATTR },
1590         { "DIRENTFLAGS",
1591             SMB_TREE_DIRENTFLAGS,
1592             SMB_TREE_DIRENTFLAGS },
1593         { "ACL_CR",
1594             SMB_TREE_ACLONCREATE,
1595             SMB_TREE_ACLONCREATE },
1596         { "ACEMASK",
1597             SMB_TREE_ACEMASKONACCESS,
1598             SMB_TREE_ACEMASKONACCESS },
1599         { "NFS_MNT",
1600             SMB_TREE_NFS_MOUNTED,
1601             SMB_TREE_NFS_MOUNTED },
1602         { "UNICODE",
1603             SMB_TREE_UNICODE_ON_DISK,
1604             SMB_TREE_UNICODE_ON_DISK },
1605         { "CATIA",
1606             SMB_TREE_CATIA,
1607             SMB_TREE_CATIA },
1608         { "ABE",
1609             SMB_TREE_ABE,
1610             SMB_TREE_ABE },
1611         { "QUOTA",
1612             SMB_TREE_QUOTA,
1613             SMB_TREE_QUOTA },
1614         { "DFSROOT",
1615             SMB_TREE_DFSROOT,
1616             SMB_TREE_DFSROOT },
1617         { "SPARSE",
1618             SMB_TREE_SPARSE,
1619             SMB_TREE_SPARSE },
1620         { "XMOUNTS",
1621             SMB_TREE_TRAVERSE_MOUNTS,
1622             SMB_TREE_TRAVERSE_MOUNTS },
1623         { "FORCE_L2_OPLOCK",
1624             SMB_TREE_FORCE_L2_OPLOCK,
1625             SMB_TREE_FORCE_L2_OPLOCK },
1626         { "CA",
1627             SMB_TREE_CA,
1628             SMB_TREE_CA },
1629         { NULL, 0, 0 }
1630 };
1631 
1632 static void
1633 smbtree_help(void)
1634 {
1635         mdb_printf(
1636             "Display the contents of smb_tree_t, with optional filtering.\n\n");
1637         (void) mdb_dec_indent(2);
1638         mdb_printf("%<b>OPTIONS%</b>\n");
1639         (void) mdb_inc_indent(2);
1640         mdb_printf(
1641             "-v\tDisplay verbose smb_tree information\n"
1642             "-d\tDisplay the list of smb_odirs attached\n"
1643             "-f\tDisplay the list of smb_ofiles attached\n");
1644 }
1645 
1646 static int
1647 smbtree_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
1648 {
1649         uint_t          opts;
1650         ulong_t         indent = 0;
1651 
1652         if (smb_dcmd_getopt(&opts, argc, argv))
1653                 return (DCMD_USAGE);
1654 
1655         if (!(flags & DCMD_ADDRSPEC)) {
1656                 opts |= SMB_OPT_TREE;
1657                 opts &= ~(SMB_OPT_SERVER | SMB_OPT_SESSION | SMB_OPT_REQUEST |
1658                     SMB_OPT_USER);
1659                 return (smb_obj_list("smb_tree", opts, flags));
1660         }
1661 
1662         if (((opts & SMB_OPT_WALK) && (opts & SMB_OPT_TREE)) ||
1663             !(opts & SMB_OPT_WALK)) {
1664                 mdb_smb_tree_t *tree;
1665 
1666                 indent = SMB_DCMD_INDENT;
1667 
1668                 tree = mdb_zalloc(sizeof (*tree), UM_SLEEP | UM_GC);
1669                 if (mdb_ctf_vread(tree, SMBSRV_SCOPE "smb_tree_t",
1670                     "mdb_smb_tree_t", addr, 0) < 0) {
1671                         mdb_warn("failed to read smb_tree at %p", addr);
1672                         return (DCMD_ERR);
1673                 }
1674                 if (opts & SMB_OPT_VERBOSE) {
1675                         char            state[40];
1676 
1677                         get_enum(state, sizeof (state),
1678                             "smb_tree_state_t", tree->t_state,
1679                             "SMB_TREE_STATE_");
1680 
1681                         mdb_printf("%<b>%<u>SMB tree information (%p):"
1682                             "%</u>%</b>\n\n", addr);
1683                         mdb_printf("TID: %04x\n", tree->t_tid);
1684                         mdb_printf("State: %d (%s)\n", tree->t_state, state);
1685                         mdb_printf("Share: %s\n", tree->t_sharename);
1686                         mdb_printf("Resource: %s\n", tree->t_resource);
1687                         mdb_printf("Type: %s\n", tree->t_typename);
1688                         mdb_printf("Volume: %s\n", tree->t_volume);
1689                         mdb_printf("Umask: %04x\n", tree->t_umask);
1690                         mdb_printf("Flags: %08x <%b>\n", tree->t_flags,
1691                             tree->t_flags, tree_flag_bits);
1692                         mdb_printf("SMB Node: %llx\n", tree->t_snode);
1693                         mdb_printf("Reference Count: %d\n\n", tree->t_refcnt);
1694                 } else {
1695                         if (DCMD_HDRSPEC(flags))
1696                                 mdb_printf(
1697                                     "%<b>%<u>%-?s %-5s %-16s %-32s%</u>%</b>\n",
1698                                     "TREE", "TID", "SHARE NAME", "RESOURCE");
1699 
1700                         mdb_printf("%-?p %-5u %-16s %-32s\n", addr,
1701                             tree->t_tid, tree->t_sharename, tree->t_resource);
1702                 }
1703         }
1704         if (smb_obj_expand(addr, opts, smb_tree_exp, indent))
1705                 return (DCMD_ERR);
1706         return (DCMD_OK);
1707 }
1708 
1709 /*
1710  * *****************************************************************************
1711  * ****************************** smb_odir_t ***********************************
1712  * *****************************************************************************
1713  */
1714 
1715 typedef struct mdb_smb_odir {
1716         smb_odir_state_t        d_state;
1717         smb_session_t           *d_session;
1718         smb_user_t              *d_user;
1719         smb_tree_t              *d_tree;
1720         smb_node_t              *d_dnode;
1721         uint16_t                d_odid;
1722         uint32_t                d_refcnt;
1723         char                    d_pattern[MAXNAMELEN];
1724 } mdb_smb_odir_t;
1725 
1726 static int
1727 smbodir_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
1728 {
1729         uint_t          opts;
1730 
1731         if (smb_dcmd_getopt(&opts, argc, argv))
1732                 return (DCMD_USAGE);
1733 
1734         if (!(flags & DCMD_ADDRSPEC)) {
1735                 opts |= SMB_OPT_ODIR;
1736                 opts &= ~(SMB_OPT_SERVER | SMB_OPT_SESSION | SMB_OPT_REQUEST |
1737                     SMB_OPT_USER | SMB_OPT_TREE | SMB_OPT_OFILE);
1738                 return (smb_obj_list("smb_odir", opts, flags));
1739         }
1740 
1741         if (((opts & SMB_OPT_WALK) && (opts & SMB_OPT_ODIR)) ||
1742             !(opts & SMB_OPT_WALK)) {
1743                 mdb_smb_odir_t *od;
1744 
1745                 od = mdb_zalloc(sizeof (*od), UM_SLEEP | UM_GC);
1746                 if (mdb_ctf_vread(od, SMBSRV_SCOPE "smb_odir_t",
1747                     "mdb_smb_odir_t", addr, 0) < 0) {
1748                         mdb_warn("failed to read smb_odir at %p", addr);
1749                         return (DCMD_ERR);
1750                 }
1751                 if (opts & SMB_OPT_VERBOSE) {
1752                         char            state[40];
1753 
1754                         get_enum(state, sizeof (state),
1755                             "smb_odir_state_t", od->d_state,
1756                             "SMB_ODIR_STATE_");
1757 
1758                         mdb_printf(
1759                             "%<b>%<u>SMB odir information (%p):%</u>%</b>\n\n",
1760                             addr);
1761                         mdb_printf("State: %d (%s)\n", od->d_state, state);
1762                         mdb_printf("SID: %u\n", od->d_odid);
1763                         mdb_printf("User: %p\n", od->d_user);
1764                         mdb_printf("Tree: %p\n", od->d_tree);
1765                         mdb_printf("Reference Count: %d\n", od->d_refcnt);
1766                         mdb_printf("Pattern: %s\n", od->d_pattern);
1767                         mdb_printf("SMB Node: %p\n\n", od->d_dnode);
1768                 } else {
1769                         if (DCMD_HDRSPEC(flags))
1770                                 mdb_printf(
1771                                     "%<b>%<u>%-?s "
1772                                     "%-5s "
1773                                     "%-?s "
1774                                     "%-16s%</u>%</b>\n",
1775                                     "ODIR", "SID", "VNODE", "PATTERN");
1776 
1777                         mdb_printf("%?p %-5u %-16p %s\n",
1778                             addr, od->d_odid, od->d_dnode, od->d_pattern);
1779                 }
1780         }
1781         return (DCMD_OK);
1782 }
1783 
1784 /*
1785  * *****************************************************************************
1786  * ****************************** smb_ofile_t **********************************
1787  * *****************************************************************************
1788  */
1789 
1790 typedef struct mdb_smb_ofile {
1791         smb_ofile_state_t       f_state;
1792 
1793         struct smb_server       *f_server;
1794         smb_session_t           *f_session;
1795         smb_user_t              *f_user;
1796         smb_tree_t              *f_tree;
1797         smb_node_t              *f_node;
1798         smb_odir_t              *f_odir;
1799         smb_opipe_t             *f_pipe;
1800 
1801         uint32_t                f_uniqid;
1802         uint32_t                f_refcnt;
1803         uint32_t                f_flags;
1804         uint32_t                f_granted_access;
1805         uint32_t                f_share_access;
1806 
1807         uint16_t                f_fid;
1808         uint16_t                f_ftype;
1809         uint64_t                f_llf_pos;
1810         int                     f_mode;
1811         cred_t                  *f_cr;
1812         pid_t                   f_pid;
1813         uintptr_t               f_lease;
1814         smb_dh_vers_t           dh_vers;
1815 } mdb_smb_ofile_t;
1816 
1817 static const mdb_bitmask_t
1818 ofile_flag_bits[] = {
1819         { "RO", 1, 1 }, /* old SMB_OFLAGS_READONLY */
1820         { "EXEC",
1821             SMB_OFLAGS_EXECONLY,
1822             SMB_OFLAGS_EXECONLY },
1823         { "DELETE",
1824             SMB_OFLAGS_SET_DELETE_ON_CLOSE,
1825             SMB_OFLAGS_SET_DELETE_ON_CLOSE },
1826         { "POS_VALID",
1827             SMB_OFLAGS_LLF_POS_VALID,
1828             SMB_OFLAGS_LLF_POS_VALID },
1829         { NULL, 0, 0}
1830 };
1831 
1832 static const mdb_bitmask_t
1833 smb_sharemode_bits[] = {
1834         { "READ",
1835             FILE_SHARE_READ,
1836             FILE_SHARE_READ },
1837         { "WRITE",
1838             FILE_SHARE_WRITE,
1839             FILE_SHARE_WRITE },
1840         { "DELETE",
1841             FILE_SHARE_DELETE,
1842             FILE_SHARE_DELETE },
1843         { NULL, 0, 0}
1844 };
1845 
1846 static int
1847 smbofile_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
1848 {
1849         uint_t          opts;
1850 
1851         if (smb_dcmd_getopt(&opts, argc, argv))
1852                 return (DCMD_USAGE);
1853 
1854         if (!(flags & DCMD_ADDRSPEC)) {
1855                 opts |= SMB_OPT_OFILE;
1856                 opts &= ~(SMB_OPT_SERVER | SMB_OPT_SESSION | SMB_OPT_REQUEST |
1857                     SMB_OPT_USER | SMB_OPT_TREE | SMB_OPT_ODIR);
1858                 return (smb_obj_list("smb_ofile", opts, flags));
1859         }
1860 
1861         if (((opts & SMB_OPT_WALK) && (opts & SMB_OPT_OFILE)) ||
1862             !(opts & SMB_OPT_WALK)) {
1863                 mdb_smb_ofile_t *of;
1864 
1865                 of = mdb_zalloc(sizeof (*of), UM_SLEEP | UM_GC);
1866                 if (mdb_ctf_vread(of, SMBSRV_SCOPE "smb_ofile_t",
1867                     "mdb_smb_ofile_t", addr, 0) < 0) {
1868                         mdb_warn("failed to read smb_ofile at %p", addr);
1869                         return (DCMD_ERR);
1870                 }
1871                 if (opts & SMB_OPT_VERBOSE) {
1872                         char            state[40];
1873                         char            durable[40];
1874 
1875                         get_enum(state, sizeof (state),
1876                             "smb_ofile_state_t", of->f_state,
1877                             "SMB_OFILE_STATE_");
1878 
1879                         get_enum(durable, sizeof (durable),
1880                             "smb_dh_vers_t", of->dh_vers,
1881                             "SMB2_");
1882 
1883                         mdb_printf(
1884                             "%<b>%<u>SMB ofile information (%p):%</u>%</b>\n\n",
1885                             addr);
1886                         mdb_printf("FID: %u\n", of->f_fid);
1887                         mdb_printf("State: %d (%s)\n", of->f_state, state);
1888                         mdb_printf("DH Type: %d (%s)\n", of->dh_vers,
1889                             durable);
1890                         mdb_printf("Lease: %p\n", of->f_lease);
1891                         mdb_printf("SMB Node: %p\n", of->f_node);
1892                         mdb_printf("LLF Offset: 0x%llx (%s)\n",
1893                             of->f_llf_pos,
1894                             ((of->f_flags & SMB_OFLAGS_LLF_POS_VALID) ?
1895                             "Valid" : "Invalid"));
1896                         mdb_printf("Flags: 0x%08x <%b>\n", of->f_flags,
1897                             of->f_flags, ofile_flag_bits);
1898                         mdb_printf("Granted Acc.: 0x%08x <%b>\n",
1899                             of->f_granted_access,
1900                             of->f_granted_access, nt_access_bits);
1901                         mdb_printf("Share Mode: 0x%08x <%b>\n",
1902                             of->f_share_access,
1903                             of->f_share_access, smb_sharemode_bits);
1904                         mdb_printf("User: %p\n", of->f_user);
1905                         mdb_printf("Tree: %p\n", of->f_tree);
1906                         mdb_printf("Credential: %p\n\n", of->f_cr);
1907                 } else {
1908                         if (DCMD_HDRSPEC(flags))
1909                                 mdb_printf(
1910                                     "%<b>%<u>%-?s "
1911                                     "%-5s "
1912                                     "%-?s "
1913                                     "%-?s "
1914                                     "%-?s "
1915                                     "%</u>%</b>\n",
1916                                     "OFILE",
1917                                     "FID",
1918                                     "NODE",
1919                                     "CRED",
1920                                     "LEASE");
1921 
1922                         mdb_printf("%?p %-5u %-p %-p %-p\n", addr,
1923                             of->f_fid, of->f_node, of->f_cr, of->f_lease);
1924                 }
1925         }
1926         return (DCMD_OK);
1927 }
1928 
1929 static int
1930 smbdurable_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
1931 {
1932         mdb_smb_server_t *sv;
1933 
1934         if (!(flags & DCMD_ADDRSPEC)) {
1935                 mdb_printf("require address of an smb_server_t\n");
1936                 return (WALK_ERR);
1937         }
1938 
1939         sv = mdb_zalloc(sizeof (*sv), UM_SLEEP | UM_GC);
1940         if (mdb_ctf_vread(sv, SMBSRV_SCOPE "smb_server_t",
1941             "mdb_smb_server_t", addr, 0) < 0) {
1942                 mdb_warn("failed to read smb_server at %p", addr);
1943                 return (DCMD_ERR);
1944         }
1945 
1946         if (mdb_pwalk_dcmd("smb_hash_walker", "smbofile",
1947             argc, argv, (uintptr_t)sv->sv_persistid_ht) == -1) {
1948                 mdb_warn("failed to walk 'smb_ofile'");
1949                 return (DCMD_ERR);
1950         }
1951         return (DCMD_OK);
1952 }
1953 
1954 static int
1955 smb_hash_walk_init(mdb_walk_state_t *wsp)
1956 {
1957         smb_hash_t hash;
1958         int ll_off, sll_off, i;
1959         uintptr_t addr = wsp->walk_addr;
1960 
1961         if (addr == NULL) {
1962                 mdb_printf("require address of an smb_hash_t\n");
1963                 return (WALK_ERR);
1964         }
1965 
1966         GET_OFFSET(sll_off, smb_bucket_t, b_list);
1967         GET_OFFSET(ll_off, smb_llist_t, ll_list);
1968 
1969         if (mdb_vread(&hash, sizeof (hash), addr) == -1) {
1970                 mdb_warn("failed to read smb_hash_t at %p", addr);
1971                 return (WALK_ERR);
1972         }
1973 
1974         for (i = 0; i < hash.num_buckets; i++) {
1975                 wsp->walk_addr = (uintptr_t)hash.buckets +
1976                     (i * sizeof (smb_bucket_t)) + sll_off + ll_off;
1977                 if (mdb_layered_walk("list", wsp) == -1) {
1978                         mdb_warn("failed to walk 'list'");
1979                         return (WALK_ERR);
1980                 }
1981         }
1982 
1983         return (WALK_NEXT);
1984 }
1985 
1986 static int
1987 smb_hash_walk_step(mdb_walk_state_t *wsp)
1988 {
1989         return (wsp->walk_callback(wsp->walk_addr, wsp->walk_layer,
1990             wsp->walk_cbdata));
1991 }
1992 
1993 static int
1994 smbhashstat_cb(uintptr_t addr, const void *data, void *varg)
1995 {
1996         _NOTE(ARGUNUSED(varg))
1997         const smb_bucket_t *bucket = data;
1998 
1999         mdb_printf("%-?p ", addr);      /* smb_bucket_t */
2000         mdb_printf("%-6u ", bucket->b_list.ll_count);
2001         mdb_printf("%-16u", bucket->b_max_seen);
2002         mdb_printf("%-u\n", (bucket->b_list.ll_wrop +
2003             bucket->b_list.ll_count) / 2);
2004         return (WALK_NEXT);
2005 }
2006 
2007 static int
2008 smbhashstat_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
2009 {
2010         _NOTE(ARGUNUSED(argc, argv))
2011         if (!(flags & DCMD_ADDRSPEC)) {
2012                 mdb_printf("require address of an smb_hash_t\n");
2013                 return (DCMD_USAGE);
2014         }
2015 
2016         if (DCMD_HDRSPEC(flags)) {
2017                 mdb_printf(
2018                     "%<b>%<u>"
2019                     "%-?s "
2020                     "%-6s "
2021                     "%-16s"
2022                     "%-s"
2023                     "%</u>%</b>\n",
2024                     "smb_bucket_t", "count", "largest seen", "inserts");
2025         }
2026 
2027         if (mdb_pwalk("smb_hashstat_walker", smbhashstat_cb,
2028             NULL, addr) == -1) {
2029                 mdb_warn("failed to walk 'smb_ofile'");
2030                 return (DCMD_ERR);
2031         }
2032         return (DCMD_OK);
2033 }
2034 
2035 typedef struct smb_hash_wd {
2036         smb_bucket_t    *bucket;
2037         smb_bucket_t    *end;
2038 } smb_hash_wd_t;
2039 
2040 static int
2041 smb_hashstat_walk_init(mdb_walk_state_t *wsp)
2042 {
2043         int sll_off, ll_off;
2044         smb_hash_t hash;
2045         smb_bucket_t *buckets;
2046         uintptr_t addr = wsp->walk_addr;
2047         uint32_t arr_sz;
2048         smb_hash_wd_t *wd;
2049 
2050         if (addr == NULL) {
2051                 mdb_printf("require address of an smb_hash_t\n");
2052                 return (WALK_ERR);
2053         }
2054 
2055         GET_OFFSET(sll_off, smb_bucket_t, b_list);
2056         GET_OFFSET(ll_off, smb_llist_t, ll_list);
2057 
2058         if (mdb_vread(&hash, sizeof (hash), addr) == -1) {
2059                 mdb_warn("failed to read smb_hash_t at %p", addr);
2060                 return (WALK_ERR);
2061         }
2062 
2063         arr_sz = hash.num_buckets * sizeof (smb_bucket_t);
2064         buckets = mdb_alloc(arr_sz, UM_SLEEP | UM_GC);
2065         if (mdb_vread(buckets, arr_sz, (uintptr_t)hash.buckets) == -1) {
2066                 mdb_warn("failed to read smb_bucket_t array at %p",
2067                     hash.buckets);
2068                 return (WALK_ERR);
2069         }
2070 
2071         wd = mdb_alloc(sizeof (*wd), UM_SLEEP | UM_GC);
2072         wd->bucket = buckets;
2073         wd->end = buckets + hash.num_buckets;
2074 
2075         wsp->walk_addr = (uintptr_t)hash.buckets;
2076         wsp->walk_data = wd;
2077 
2078         return (WALK_NEXT);
2079 }
2080 
2081 static int
2082 smb_hashstat_walk_step(mdb_walk_state_t *wsp)
2083 {
2084         int rc;
2085         smb_hash_wd_t *wd = wsp->walk_data;
2086 
2087         if (wd->bucket >= wd->end)
2088                 return (WALK_DONE);
2089 
2090         rc = wsp->walk_callback(wsp->walk_addr, wd->bucket++,
2091             wsp->walk_cbdata);
2092 
2093         wsp->walk_addr += sizeof (smb_bucket_t);
2094         return (rc);
2095 }
2096 
2097 /*
2098  * smbsrv_leases
2099  */
2100 static int
2101 smbsrv_leases_dcmd(uintptr_t addr, uint_t flags, int argc,
2102     const mdb_arg_t *argv)
2103 {
2104         uint_t          opts;
2105         int             ht_off;
2106         uintptr_t       ht_addr;
2107 
2108         if (smb_dcmd_getopt(&opts, argc, argv))
2109                 return (DCMD_USAGE);
2110 
2111         if (!(flags & DCMD_ADDRSPEC)) {
2112                 mdb_printf("require address of an smb_server_t\n");
2113                 return (DCMD_USAGE);
2114         }
2115 
2116         ht_off = mdb_ctf_offsetof_by_name("smb_server_t", "sv_lease_ht");
2117         if (ht_off < 0) {
2118                 mdb_warn("No .sv_lease_ht in server (old kernel?)");
2119                 return (DCMD_ERR);
2120         }
2121         addr += ht_off;
2122 
2123         if (mdb_vread(&ht_addr, sizeof (ht_addr), addr) <= 0) {
2124                 mdb_warn("failed to read server .sv_lease_ht");
2125                 return (DCMD_ERR);
2126         }
2127 
2128         if (mdb_pwalk_dcmd("smb_hash_walker", "smblease",
2129             argc, argv, ht_addr) == -1) {
2130                 mdb_warn("failed to walk 'smb_lease'");
2131                 return (DCMD_ERR);
2132         }
2133         return (DCMD_OK);
2134 }
2135 
2136 typedef struct mdb_smb_lease {
2137         struct smb_node         *ls_node;
2138         uint32_t                ls_refcnt;
2139         uint16_t                ls_epoch;
2140         uint8_t                 ls_key[SMB_LEASE_KEY_SZ];
2141 } mdb_smb_lease_t;
2142 
2143 static int
2144 smblease_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
2145 {
2146         mdb_smb_lease_t *ls;
2147         uint_t opts;
2148         int i;
2149 
2150         if (smb_dcmd_getopt(&opts, argc, argv))
2151                 return (DCMD_USAGE);
2152 
2153         if (!(flags & DCMD_ADDRSPEC)) {
2154                 mdb_printf("require address of an smb_lease_t\n");
2155                 return (DCMD_USAGE);
2156         }
2157 
2158         if (((opts & SMB_OPT_WALK) && (opts & SMB_OPT_OFILE)) ||
2159             !(opts & SMB_OPT_WALK)) {
2160 
2161                 ls = mdb_zalloc(sizeof (*ls), UM_SLEEP | UM_GC);
2162                 if (mdb_ctf_vread(ls, SMBSRV_SCOPE "smb_lease_t",
2163                     "mdb_smb_lease_t", addr, 0) < 0) {
2164                         mdb_warn("failed to read smb_lease_t at %p", addr);
2165                         return (DCMD_ERR);
2166                 }
2167                 if (opts & SMB_OPT_VERBOSE) {
2168 
2169                         mdb_printf(
2170                             "%<b>%<u>SMB lease (%p):%</u>%</b>\n\n", addr);
2171 
2172                         mdb_printf("SMB Node: %p\n", ls->ls_node);
2173                         mdb_printf("Refcount: %u\n", ls->ls_refcnt);
2174                         mdb_printf("Epoch: %u\n", ls->ls_epoch);
2175 
2176                         mdb_printf("Key: [");
2177                         for (i = 0; i < SMB_LEASE_KEY_SZ; i++) {
2178                                 mdb_printf(" %02x", ls->ls_key[i] & 0xFF);
2179                                 if ((i & 3) == 3)
2180                                         mdb_printf(" ");
2181                         }
2182                         mdb_printf(" ]\n");
2183                 } else {
2184                         if (DCMD_HDRSPEC(flags))
2185                                 mdb_printf(
2186                                     "%<b>%<u>"
2187                                     "%-?s "
2188                                     "%-?s "
2189                                     "%-?s%</u>%</b>\n",
2190                                     "LEASE", "SMB NODE", "KEY");
2191 
2192                         mdb_printf("%?p %-p [", addr, ls->ls_node);
2193                         for (i = 0; i < 8; i++) {
2194                                 mdb_printf(" %02x", ls->ls_key[i] & 0xFF);
2195                         }
2196                         mdb_printf(" ...]\n");
2197                 }
2198         }
2199 
2200         return (DCMD_OK);
2201 }
2202 
2203 /*
2204  * *****************************************************************************
2205  * ******************************** smb_kshare_t *******************************
2206  * *****************************************************************************
2207  */
2208 
2209 struct smb_kshare_cb_args {
2210         uint_t          opts;
2211         char name[MAXNAMELEN];
2212         char path[MAXPATHLEN];
2213 };
2214 
2215 static int
2216 smb_kshare_cb(uintptr_t addr, const void *data, void *varg)
2217 {
2218         struct smb_kshare_cb_args *args = varg;
2219         const smb_kshare_t *shr = data;
2220 
2221         if (args->opts & SMB_OPT_VERBOSE) {
2222                 mdb_arg_t       argv;
2223 
2224                 argv.a_type = MDB_TYPE_STRING;
2225                 argv.a_un.a_str = "smb_kshare_t";
2226                 /* Don't fail the walk if this fails. */
2227                 mdb_printf("%-?p ", addr);
2228                 mdb_call_dcmd("print", addr, 0, 1, &argv);
2229                 return (WALK_NEXT);
2230         }
2231 
2232         /*
2233          * Summary line for an smb_kshare_t
2234          * Don't fail the walk if any of these fail.
2235          *
2236          * Get the shr_name and shr_path strings.
2237          */
2238         if (mdb_readstr(args->name, sizeof (args->name),
2239             (uintptr_t)shr->shr_name) <= 0)
2240                 strcpy(args->name, "?");
2241 
2242         if (mdb_readstr(args->path, sizeof (args->path),
2243             (uintptr_t)shr->shr_path) <= 0)
2244                 strcpy(args->path, "?");
2245 
2246         mdb_printf("%-?p ", addr);      /* smb_kshare_t */
2247         mdb_printf("%-16s ", args->name);
2248         mdb_printf("%-s\n", args->path);
2249 
2250         return (WALK_NEXT);
2251 }
2252 
2253 /*
2254  * ::smbshare
2255  *
2256  * smbshare dcmd - Print out smb_kshare structures.
2257  *      requires addr of an smb_server_t
2258  */
2259 /*ARGSUSED*/
2260 static int
2261 smbshare_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
2262 {
2263         struct smb_kshare_cb_args *args;
2264 
2265         args = mdb_zalloc(sizeof (*args), UM_SLEEP | UM_GC);
2266         if (mdb_getopts(argc, argv,
2267             'v', MDB_OPT_SETBITS, SMB_OPT_VERBOSE, &args->opts,
2268             NULL) != argc)
2269                 return (DCMD_USAGE);
2270 
2271         if (!(flags & DCMD_ADDRSPEC))
2272                 return (DCMD_USAGE);
2273 
2274         if (DCMD_HDRSPEC(flags)) {
2275                 if ((args->opts & SMB_OPT_VERBOSE) != 0) {
2276                         mdb_printf("%<b>%<u>SMB kshares list:%</u>%</b>\n");
2277                 } else {
2278                         mdb_printf(
2279                             "%<b>%<u>"
2280                             "%-?s "
2281                             "%-16s "
2282                             "%-s"
2283                             "%</u>%</b>\n",
2284                             "smb_kshare_t", "name", "path");
2285                 }
2286         }
2287 
2288         if (mdb_pwalk("smbshare_walker", smb_kshare_cb, args, addr) == -1) {
2289                 mdb_warn("cannot walk smb_kshare avl");
2290                 return (DCMD_ERR);
2291         }
2292 
2293         return (DCMD_OK);
2294 }
2295 
2296 /*
2297  * Initialize the smb_kshare_t walker to point to the smb_export
2298  * in the specified smb_server_t instance.  (no global walks)
2299  */
2300 static int
2301 smb_kshare_walk_init(mdb_walk_state_t *wsp)
2302 {
2303         int sv_exp_off, ex_sha_off, avl_tr_off;
2304 
2305         if (wsp->walk_addr == NULL) {
2306                 mdb_printf("require address of an smb_server_t\n");
2307                 return (WALK_ERR);
2308         }
2309 
2310         /*
2311          * Using CTF to get the equivalent of:
2312          * OFFSETOF(smb_server_t, sv_export.e_share_avl.avl_tree);
2313          */
2314         GET_OFFSET(sv_exp_off, smb_server_t, sv_export);
2315         GET_OFFSET(ex_sha_off, smb_export_t, e_share_avl);
2316         GET_OFFSET(avl_tr_off, smb_avl_t, avl_tree);
2317         wsp->walk_addr += (sv_exp_off + ex_sha_off + avl_tr_off);
2318 
2319         if (mdb_layered_walk("avl", wsp) == -1) {
2320                 mdb_warn("failed to walk list of smb_kshare_t");
2321                 return (WALK_ERR);
2322         }
2323 
2324         return (WALK_NEXT);
2325 }
2326 
2327 static int
2328 smb_kshare_walk_step(mdb_walk_state_t *wsp)
2329 {
2330         return (wsp->walk_callback(wsp->walk_addr, wsp->walk_layer,
2331             wsp->walk_cbdata));
2332 }
2333 
2334 /*
2335  * *****************************************************************************
2336  * ******************************** smb_vfs_t **********************************
2337  * *****************************************************************************
2338  */
2339 
2340 typedef struct mdb_smb_vfs {
2341         list_node_t             sv_lnd;
2342         uint32_t                sv_magic;
2343         uint32_t                sv_refcnt;
2344         vfs_t                   *sv_vfsp;
2345         vnode_t                 *sv_rootvp;
2346 } mdb_smb_vfs_t;
2347 
2348 struct smb_vfs_cb_args {
2349         uint_t          opts;
2350         vnode_t         vn;
2351         char            path[MAXPATHLEN];
2352 };
2353 
2354 /*ARGSUSED*/
2355 static int
2356 smb_vfs_cb(uintptr_t addr, const void *data, void *varg)
2357 {
2358         struct smb_vfs_cb_args *args = varg;
2359         mdb_smb_vfs_t sf;
2360 
2361         if (args->opts & SMB_OPT_VERBOSE) {
2362                 mdb_arg_t       argv;
2363 
2364                 argv.a_type = MDB_TYPE_STRING;
2365                 argv.a_un.a_str = "smb_vfs_t";
2366                 /* Don't fail the walk if this fails. */
2367                 mdb_printf("%-?p ", addr);
2368                 mdb_call_dcmd("print", addr, 0, 1, &argv);
2369                 return (WALK_NEXT);
2370         }
2371 
2372         /*
2373          * Summary line for an smb_vfs_t
2374          * Don't fail the walk if any of these fail.
2375          *
2376          * Get the vnode v_path string if we can.
2377          */
2378         if (mdb_ctf_vread(&sf, SMBSRV_SCOPE "smb_vfs_t",
2379             "mdb_smb_vfs_t", addr, 0) < 0) {
2380                 mdb_warn("failed to read struct smb_vfs at %p", addr);
2381                 return (DCMD_ERR);
2382         }
2383         strcpy(args->path, "?");
2384         if (mdb_vread(&args->vn, sizeof (args->vn),
2385             (uintptr_t)sf.sv_rootvp) == sizeof (args->vn))
2386                 (void) mdb_readstr(args->path, sizeof (args->path),
2387                     (uintptr_t)args->vn.v_path);
2388 
2389         mdb_printf("%-?p ", addr);
2390         mdb_printf("%-10d ", sf.sv_refcnt);
2391         mdb_printf("%-?p ", sf.sv_vfsp);
2392         mdb_printf("%-?p ", sf.sv_rootvp);
2393         mdb_printf("%-s\n", args->path);
2394 
2395         return (WALK_NEXT);
2396 }
2397 
2398 /*
2399  * ::smbvfs
2400  *
2401  * smbvfs dcmd - Prints out smb_vfs structures.
2402  *      requires addr of an smb_server_t
2403  */
2404 /*ARGSUSED*/
2405 static int
2406 smbvfs_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
2407 {
2408         struct smb_vfs_cb_args *args;
2409 
2410         args = mdb_zalloc(sizeof (*args), UM_SLEEP | UM_GC);
2411         if (mdb_getopts(argc, argv,
2412             'v', MDB_OPT_SETBITS, SMB_OPT_VERBOSE, &args->opts,
2413             NULL) != argc)
2414                 return (DCMD_USAGE);
2415 
2416         if (!(flags & DCMD_ADDRSPEC))
2417                 return (DCMD_USAGE);
2418 
2419         if (DCMD_HDRSPEC(flags)) {
2420                 if ((args->opts & SMB_OPT_VERBOSE) != 0) {
2421                         mdb_printf("%<b>%<u>SMB VFS list:%</u>%</b>\n");
2422                 } else {
2423                         mdb_printf(
2424                             "%<b>%<u>"
2425                             "%-?s "
2426                             "%-10s "
2427                             "%-16s "
2428                             "%-16s"
2429                             "%-s"
2430                             "%</u>%</b>\n",
2431                             "SMB_VFS", "REFCNT", "VFS", "VNODE", "ROOT");
2432                 }
2433         }
2434 
2435         if (mdb_pwalk("smbvfs_walker", smb_vfs_cb, args, addr) == -1) {
2436                 mdb_warn("cannot walk smb_vfs list");
2437                 return (DCMD_ERR);
2438         }
2439 
2440         return (DCMD_OK);
2441 }
2442 
2443 /*
2444  * Initialize the smb_vfs_t walker to point to the smb_export
2445  * in the specified smb_server_t instance.  (no global walks)
2446  */
2447 static int
2448 smb_vfs_walk_init(mdb_walk_state_t *wsp)
2449 {
2450         int sv_exp_off, ex_vfs_off, ll_off;
2451 
2452         if (wsp->walk_addr == NULL) {
2453                 mdb_printf("require address of an smb_server_t\n");
2454                 return (WALK_ERR);
2455         }
2456 
2457         /*
2458          * Using CTF to get the equivalent of:
2459          * OFFSETOF(smb_server_t, sv_export.e_vfs_list.ll_list);
2460          */
2461         GET_OFFSET(sv_exp_off, smb_server_t, sv_export);
2462         /* GET_OFFSET(ex_vfs_off, smb_export_t, e_vfs_list); */
2463         ex_vfs_off = mdb_ctf_offsetof_by_name("smb_export_t", "e_vfs_list");
2464         if (ex_vfs_off < 0) {
2465                 mdb_warn("cannot lookup: smb_export_t .e_vfs_list");
2466                 return (WALK_ERR);
2467         }
2468         GET_OFFSET(ll_off, smb_llist_t, ll_list);
2469         wsp->walk_addr += (sv_exp_off + ex_vfs_off + ll_off);
2470 
2471         if (mdb_layered_walk("list", wsp) == -1) {
2472                 mdb_warn("failed to walk list of smb_vfs_t");
2473                 return (WALK_ERR);
2474         }
2475 
2476         return (WALK_NEXT);
2477 }
2478 
2479 static int
2480 smb_vfs_walk_step(mdb_walk_state_t *wsp)
2481 {
2482         return (wsp->walk_callback(wsp->walk_addr, wsp->walk_layer,
2483             wsp->walk_cbdata));
2484 }
2485 
2486 /*
2487  * *****************************************************************************
2488  * ******************************* smb_node_t **********************************
2489  * *****************************************************************************
2490  */
2491 
2492 typedef struct mdb_smb_node {
2493         smb_node_state_t        n_state;
2494         uint32_t                n_refcnt;
2495         uint32_t                n_open_count;
2496         uint32_t                n_opening_count;
2497         smb_llist_t             n_ofile_list;
2498         smb_llist_t             n_lock_list;
2499         volatile int            flags;
2500         struct smb_node         *n_dnode;
2501         struct smb_node         *n_unode;
2502         char                    od_name[MAXNAMELEN];
2503         vnode_t                 *vp;
2504         smb_audit_buf_node_t    *n_audit_buf;
2505         /* Newer members (not in old kernels) - keep last! */
2506         smb_llist_t             n_wlock_list;
2507 } mdb_smb_node_t;
2508 typedef struct mdb_smb_node_old {
2509         /* Note: MUST be layout as above! */
2510         smb_node_state_t        n_state;
2511         uint32_t                n_refcnt;
2512         uint32_t                n_open_count;
2513         uint32_t                n_opening_count;
2514         smb_llist_t             n_ofile_list;
2515         smb_llist_t             n_lock_list;
2516         volatile int            flags;
2517         struct smb_node         *n_dnode;
2518         struct smb_node         *n_unode;
2519         char                    od_name[MAXNAMELEN];
2520         vnode_t                 *vp;
2521         smb_audit_buf_node_t    *n_audit_buf;
2522         /* Newer members omitted from _old */
2523 } mdb_smb_node_old_t;
2524 
2525 static void
2526 smbnode_help(void)
2527 {
2528         mdb_printf(
2529             "Display the contents of smb_node_t, with optional filtering.\n\n");
2530         (void) mdb_dec_indent(2);
2531         mdb_printf("%<b>OPTIONS%</b>\n");
2532         (void) mdb_inc_indent(2);
2533         mdb_printf(
2534             "-v\tDisplay verbose smb_node information\n"
2535             "-p\tDisplay the full path of the vnode associated\n"
2536             "-s\tDisplay the stack of the last 16 calls that modified the "
2537             "reference\n\tcount\n");
2538 }
2539 
2540 /*
2541  * ::smbnode
2542  *
2543  * smb_node dcmd - Print out smb_node structure.
2544  */
2545 static int
2546 smbnode_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
2547 {
2548         static smb_llist_t zero_llist = {0};
2549         mdb_smb_node_t  node;
2550         int             rc;
2551         int             verbose = FALSE;
2552         int             print_full_path = FALSE;
2553         int             stack_trace = FALSE;
2554         int             ol_cnt = 0;
2555         vnode_t         vnode;
2556         char            od_name[MAXNAMELEN];
2557         char            path_name[1024];
2558         uintptr_t       list_addr;
2559         struct mdb_smb_oplock *node_oplock;
2560 
2561         if (mdb_getopts(argc, argv,
2562             'v', MDB_OPT_SETBITS, TRUE, &verbose,
2563             'p', MDB_OPT_SETBITS, TRUE, &print_full_path,
2564             's', MDB_OPT_SETBITS, TRUE, &stack_trace,
2565             NULL) != argc)
2566                 return (DCMD_USAGE);
2567 
2568         /*
2569          * If no smb_node address was specified on the command line, we can
2570          * print out all smb nodes by invoking the smb_node walker, using
2571          * this dcmd itself as the callback.
2572          */
2573         if (!(flags & DCMD_ADDRSPEC)) {
2574                 if (mdb_walk_dcmd("smbnode_walker", "smbnode",
2575                     argc, argv) == -1) {
2576                         mdb_warn("failed to walk 'smb_node'");
2577                         return (DCMD_ERR);
2578                 }
2579                 return (DCMD_OK);
2580         }
2581 
2582         /*
2583          * For each smb_node, we just need to read the smb_node_t struct, read
2584          * and then print out the following fields.
2585          */
2586         if (mdb_ctf_vread(&node, SMBSRV_SCOPE "smb_node_t",
2587             "mdb_smb_node_t", addr, 0) < 0) {
2588                 /*
2589                  * Fall-back handling for mdb_smb_node_old_t
2590                  * Should remove after a while.
2591                  */
2592                 if (mdb_ctf_vread(&node, SMBSRV_SCOPE "smb_node_t",
2593                     "mdb_smb_node_old_t", addr, 0) < 0) {
2594                         mdb_warn("failed to read struct smb_node at %p", addr);
2595                         return (DCMD_ERR);
2596                 }
2597                 node.n_wlock_list = zero_llist;
2598         }
2599 
2600         (void) mdb_snprintf(od_name, sizeof (od_name), "%s",
2601             node.od_name);
2602         if (print_full_path) {
2603                 if (mdb_vread(&vnode, sizeof (vnode_t),
2604                     (uintptr_t)node.vp) == sizeof (vnode_t)) {
2605                         if (mdb_readstr(path_name, sizeof (path_name),
2606                             (uintptr_t)vnode.v_path) <= 0) {
2607                                 (void) mdb_snprintf(path_name,
2608                                     sizeof (path_name), "N/A");
2609                         }
2610                 }
2611         }
2612 
2613         rc = smb_node_get_oplock(addr, &node_oplock);
2614         if (rc != DCMD_OK)
2615                 return (rc);
2616         ol_cnt = smb_node_oplock_cnt(node_oplock);
2617 
2618         if (verbose) {
2619                 int nol_off, nll_off, wll_off, ll_off;
2620 
2621                 GET_OFFSET(nol_off, smb_node_t, n_ofile_list);
2622                 GET_OFFSET(nll_off, smb_node_t, n_lock_list);
2623                 GET_OFFSET(ll_off, smb_llist_t, ll_list);
2624                 /* This one is optional (for now). */
2625                 /* GET_OFFSET(wll_off, smb_node_t, n_wlock_list); */
2626                 wll_off = mdb_ctf_offsetof_by_name(
2627                     "smb_node_t", "n_wlock_list");
2628 
2629                 mdb_printf("%<b>%<u>SMB node information "
2630                     "(%p):%</u>%</b>\n", addr);
2631                 mdb_printf("VP: %p\n", node.vp);
2632                 mdb_printf("Name: %s\n", od_name);
2633                 if (print_full_path)
2634                         mdb_printf("V-node Path: %s\n", path_name);
2635                 mdb_printf("Reference Count: %u\n", node.n_refcnt);
2636                 mdb_printf("Ofiles: %u\n", node.n_ofile_list.ll_count);
2637                 if (node.n_ofile_list.ll_count != 0 && nol_off != -1) {
2638                         (void) mdb_inc_indent(SMB_DCMD_INDENT);
2639                         list_addr = addr + nol_off + ll_off;
2640                         if (mdb_pwalk_dcmd("list", "smbofile", 0,
2641                             NULL, list_addr)) {
2642                                 mdb_warn("failed to walk node's ofiles");
2643                         }
2644                         (void) mdb_dec_indent(SMB_DCMD_INDENT);
2645                 }
2646 
2647                 mdb_printf("Granted Locks: %u\n",
2648                     node.n_lock_list.ll_count);
2649                 if (node.n_lock_list.ll_count != 0) {
2650                         (void) mdb_inc_indent(SMB_DCMD_INDENT);
2651                         list_addr = addr + nll_off + ll_off;
2652                         if (mdb_pwalk_dcmd("list", "smblock", 0,
2653                             NULL, list_addr)) {
2654                                 mdb_warn("failed to walk node's granted"
2655                                     " locks");
2656                         }
2657                         (void) mdb_dec_indent(SMB_DCMD_INDENT);
2658                 }
2659                 mdb_printf("Waiting Locks: %u\n",
2660                     node.n_wlock_list.ll_count);
2661                 if (node.n_wlock_list.ll_count != 0 && wll_off != -1) {
2662                         (void) mdb_inc_indent(SMB_DCMD_INDENT);
2663                         list_addr = addr + wll_off + ll_off;
2664                         if (mdb_pwalk_dcmd("list", "smblock", 0,
2665                             NULL, list_addr)) {
2666                                 mdb_warn("failed to walk node's waiting"
2667                                     " locks");
2668                         }
2669                         (void) mdb_dec_indent(SMB_DCMD_INDENT);
2670                 }
2671                 if (ol_cnt == 0) {
2672                         mdb_printf("Opportunistic Locks: (none)\n");
2673                 } else {
2674                         mdb_printf("Opportunistic Locks:\n");
2675                         (void) mdb_inc_indent(SMB_DCMD_INDENT);
2676                         /* Takes node address */
2677                         rc = mdb_call_dcmd("smbnode_oplock", addr,
2678                             flags, argc, argv);
2679                         (void) mdb_dec_indent(SMB_DCMD_INDENT);
2680                         if (rc != DCMD_OK)
2681                                 return (rc);
2682                 }
2683         } else {
2684                 if (DCMD_HDRSPEC(flags)) {
2685                         mdb_printf(
2686                             "%<b>%<u>%-?s "
2687                             "%-?s "
2688                             "%-18s "
2689                             "%-6s "
2690                             "%-6s "
2691                             "%-8s "
2692                             "%-8s "
2693                             "%-6s%</u>%</b>\n",
2694                             "ADDR", "VP", "NODE-NAME", "OFILES", "LOCKS",
2695                             "WLOCKS", "OPLOCK", "REF");
2696                 }
2697 
2698                 mdb_printf("%-?p %-?p %-18s %-6d %-6d %-8d %-8d %-6d ",
2699                     addr, node.vp, od_name, node.n_ofile_list.ll_count,
2700                     node.n_lock_list.ll_count, node.n_wlock_list.ll_count,
2701                     ol_cnt, node.n_refcnt);
2702 
2703                 if (print_full_path)
2704                         mdb_printf("\t%s\n", path_name);
2705         }
2706         if (stack_trace && node.n_audit_buf) {
2707                 int ctr;
2708                 smb_audit_buf_node_t *anb;
2709 
2710                 anb = mdb_alloc(sizeof (smb_audit_buf_node_t),
2711                     UM_SLEEP | UM_GC);
2712 
2713                 if (mdb_vread(anb, sizeof (*anb),
2714                     (uintptr_t)node.n_audit_buf) != sizeof (*anb)) {
2715                         mdb_warn("failed to read audit buffer");
2716                         return (DCMD_ERR);
2717                 }
2718                 ctr = anb->anb_max_index + 1;
2719                 anb->anb_index--;
2720                 anb->anb_index &= anb->anb_max_index;
2721 
2722                 while (ctr) {
2723                         smb_audit_record_node_t *anr;
2724 
2725                         anr = anb->anb_records + anb->anb_index;
2726 
2727                         if (anr->anr_depth) {
2728                                 char c[MDB_SYM_NAMLEN];
2729                                 GElf_Sym sym;
2730                                 int i;
2731 
2732                                 mdb_printf("\nRefCnt: %u\t",
2733                                     anr->anr_refcnt);
2734 
2735                                 for (i = 0;
2736                                     i < anr->anr_depth;
2737                                     i++) {
2738                                         if (mdb_lookup_by_addr(
2739                                             anr->anr_stack[i],
2740                                             MDB_SYM_FUZZY,
2741                                             c, sizeof (c),
2742                                             &sym) == -1) {
2743                                                 continue;
2744                                         }
2745                                         mdb_printf("%s+0x%1x",
2746                                             c,
2747                                             anr->anr_stack[i] -
2748                                             (uintptr_t)sym.st_value);
2749                                         ++i;
2750                                         break;
2751                                 }
2752 
2753                                 while (i < anr->anr_depth) {
2754                                         if (mdb_lookup_by_addr(
2755                                             anr->anr_stack[i],
2756                                             MDB_SYM_FUZZY,
2757                                             c, sizeof (c),
2758                                             &sym) == -1) {
2759                                                 ++i;
2760                                                 continue;
2761                                         }
2762                                         mdb_printf("\n\t\t%s+0x%1x",
2763                                             c,
2764                                             anr->anr_stack[i] -
2765                                             (uintptr_t)sym.st_value);
2766                                         ++i;
2767                                 }
2768                                 mdb_printf("\n");
2769                         }
2770                         anb->anb_index--;
2771                         anb->anb_index &= anb->anb_max_index;
2772                         ctr--;
2773                 }
2774         }
2775 
2776         return (DCMD_OK);
2777 }
2778 
2779 /*
2780  * Initialize the smb_node_t walker by reading the value of smb_node_hash_table
2781  * in the kernel's symbol table. Only global walk supported.
2782  */
2783 static int
2784 smb_node_walk_init(mdb_walk_state_t *wsp)
2785 {
2786         GElf_Sym        sym;
2787         uintptr_t       node_hash_table_addr;
2788         int             ll_off;
2789         int             i;
2790 
2791         if (wsp->walk_addr == NULL) {
2792                 if (mdb_lookup_by_obj(SMBSRV_OBJNAME, "smb_node_hash_table",
2793                     &sym) == -1) {
2794                         mdb_warn("failed to find 'smb_node_hash_table'");
2795                         return (WALK_ERR);
2796                 }
2797                 node_hash_table_addr = (uintptr_t)sym.st_value;
2798         } else {
2799                 mdb_printf("smb_node walk only supports global walks\n");
2800                 return (WALK_ERR);
2801         }
2802 
2803         GET_OFFSET(ll_off, smb_llist_t, ll_list);
2804 
2805         for (i = 0; i < SMBND_HASH_MASK + 1; i++) {
2806                 wsp->walk_addr = node_hash_table_addr +
2807                     (i * sizeof (smb_llist_t)) + ll_off;
2808                 if (mdb_layered_walk("list", wsp) == -1) {
2809                         mdb_warn("failed to walk 'list'");
2810                         return (WALK_ERR);
2811                 }
2812         }
2813 
2814         return (WALK_NEXT);
2815 }
2816 
2817 static int
2818 smb_node_walk_step(mdb_walk_state_t *wsp)
2819 {
2820         return (wsp->walk_callback(wsp->walk_addr, wsp->walk_layer,
2821             wsp->walk_cbdata));
2822 }
2823 
2824 /*
2825  * *****************************************************************************
2826  * ****************************** smb_lock_t ***********************************
2827  * *****************************************************************************
2828  */
2829 
2830 typedef struct mdb_smb_lock {
2831         smb_ofile_t             *l_file;
2832         struct smb_lock         *l_blocked_by;
2833         uint64_t                l_start;
2834         uint64_t                l_length;
2835         uint32_t                l_pid;
2836         uint32_t                l_type;
2837         uint32_t                l_flags;
2838         /* Newer members (not in old kernels) - keep last! */
2839         uint32_t                l_conflicts;
2840 } mdb_smb_lock_t;
2841 typedef struct mdb_smb_lock_old {
2842         /* Note: MUST be same layout as above! */
2843         smb_ofile_t             *l_file;
2844         struct smb_lock         *l_blocked_by;
2845         uint64_t                l_start;
2846         uint64_t                l_length;
2847         uint32_t                l_pid;
2848         uint32_t                l_type;
2849         uint32_t                l_flags;
2850         /* Newer members omitted from _old */
2851 } mdb_smb_lock_old_t;
2852 
2853 static int
2854 smblock_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
2855 {
2856         mdb_smb_lock_t  lock;
2857         int             verbose = FALSE;
2858         char            *lock_type;
2859 
2860         if (mdb_getopts(argc, argv,
2861             'v', MDB_OPT_SETBITS, TRUE, &verbose,
2862             NULL) != argc)
2863                 return (DCMD_USAGE);
2864 
2865         /*
2866          * An smb_lock_t address must be specified.
2867          */
2868         if (!(flags & DCMD_ADDRSPEC))
2869                 return (DCMD_USAGE);
2870 
2871         if (mdb_ctf_vread(&lock, SMBSRV_SCOPE "smb_lock_t",
2872             "mdb_smb_lock_t", addr, 0) < 0) {
2873                 /*
2874                  * Fall-back handling for mdb_smb_lock_old_t
2875                  * Should remove after a while.
2876                  */
2877                 if (mdb_ctf_vread(&lock, SMBSRV_SCOPE "smb_lock_t",
2878                     "mdb_smb_lock_old_t", addr, 0) < 0) {
2879                         mdb_warn("failed to read struct smb_lock at %p", addr);
2880                         return (DCMD_ERR);
2881                 }
2882                 lock.l_conflicts = 0;
2883         }
2884 
2885         switch (lock.l_type) {
2886         case SMB_LOCK_TYPE_READWRITE:
2887                 lock_type = "RW";
2888                 break;
2889         case SMB_LOCK_TYPE_READONLY:
2890                 lock_type = "RO";
2891                 break;
2892         default:
2893                 lock_type = "?";
2894                 break;
2895         }
2896         if (verbose) {
2897                 mdb_printf("%<b>%<u>SMB lock information "
2898                     "(%p):%</u>%</b>\n", addr);
2899 
2900                 mdb_printf("Type             :\t%s (%u)\n",
2901                     lock_type, lock.l_type);
2902                 mdb_printf("Start            :\t%llu\n",
2903                     lock.l_start);
2904                 mdb_printf("Length           :\t%llu\n",
2905                     lock.l_length);
2906                 mdb_printf("OFile            :\t%p\n",
2907                     lock.l_file);
2908                 mdb_printf("Process ID       :\t%u\n",
2909                     lock.l_pid);
2910                 mdb_printf("Conflicts        :\t%u\n",
2911                     lock.l_conflicts);
2912                 mdb_printf("Blocked by       :\t%p\n",
2913                     lock.l_blocked_by);
2914                 mdb_printf("Flags            :\t0x%x\n",
2915                     lock.l_flags);
2916                 mdb_printf("\n");
2917         } else {
2918                 if (DCMD_HDRSPEC(flags)) {
2919                         mdb_printf("%<u>%-?s %4s %16s %8s %9s %-?s%</u>\n",
2920                             "Locks: ", "TYPE", "START", "LENGTH",
2921                             "CONFLICTS", "BLOCKED-BY");
2922                 }
2923                 mdb_printf("%?p %4s %16llx %08llx %9u %?p",
2924                     addr, lock_type, lock.l_start, lock.l_length,
2925                     lock.l_conflicts, lock.l_blocked_by);
2926         }
2927 
2928         return (DCMD_OK);
2929 }
2930 
2931 /*
2932  * *****************************************************************************
2933  * ************************** smb_oplock_grant_t *******************************
2934  * *****************************************************************************
2935  */
2936 
2937 typedef struct mdb_smb_oplock_grant {
2938         uint32_t                og_state;       /* latest sent to client */
2939         uint8_t                 onlist_II;
2940         uint8_t                 onlist_R;
2941         uint8_t                 onlist_RH;
2942         uint8_t                 onlist_RHBQ;
2943         uint8_t                 BreakingToRead;
2944 } mdb_smb_oplock_grant_t;
2945 
2946 static const mdb_bitmask_t
2947 oplock_bits[] = {
2948         {  "READ_CACHING",
2949             READ_CACHING,
2950             READ_CACHING },
2951         {  "HANDLE_CACHING",
2952             HANDLE_CACHING,
2953             HANDLE_CACHING },
2954         {  "WRITE_CACHING",
2955             WRITE_CACHING,
2956             WRITE_CACHING },
2957         {  "EXCLUSIVE",
2958             EXCLUSIVE,
2959             EXCLUSIVE },
2960         {  "MIXED_R_AND_RH",
2961             MIXED_R_AND_RH,
2962             MIXED_R_AND_RH },
2963         {  "LEVEL_TWO_OPLOCK",
2964             LEVEL_TWO_OPLOCK,
2965             LEVEL_TWO_OPLOCK },
2966         {  "LEVEL_ONE_OPLOCK",
2967             LEVEL_ONE_OPLOCK,
2968             LEVEL_ONE_OPLOCK },
2969         {  "BATCH_OPLOCK",
2970             BATCH_OPLOCK,
2971             BATCH_OPLOCK },
2972         {  "BREAK_TO_TWO",
2973             BREAK_TO_TWO,
2974             BREAK_TO_TWO },
2975         {  "BREAK_TO_NONE",
2976             BREAK_TO_NONE,
2977             BREAK_TO_NONE },
2978         {  "BREAK_TO_TWO_TO_NONE",
2979             BREAK_TO_TWO_TO_NONE,
2980             BREAK_TO_TWO_TO_NONE },
2981         {  "BREAK_TO_READ_CACHING",
2982             BREAK_TO_READ_CACHING,
2983             BREAK_TO_READ_CACHING },
2984         {  "BREAK_TO_HANDLE_CACHING",
2985             BREAK_TO_HANDLE_CACHING,
2986             BREAK_TO_HANDLE_CACHING },
2987         {  "BREAK_TO_WRITE_CACHING",
2988             BREAK_TO_WRITE_CACHING,
2989             BREAK_TO_WRITE_CACHING },
2990         {  "BREAK_TO_NO_CACHING",
2991             BREAK_TO_NO_CACHING,
2992             BREAK_TO_NO_CACHING },
2993         {  "NO_OPLOCK",
2994             NO_OPLOCK,
2995             NO_OPLOCK },
2996         {  NULL, 0, 0 }
2997 };
2998 
2999 /*
3000  * Show smb_ofile_t oplock info
3001  * address is the ofile
3002  */
3003 
3004 /*ARGSUSED*/
3005 static int
3006 smbofile_oplock_dcmd(uintptr_t addr, uint_t flags, int argc,
3007     const mdb_arg_t *argv)
3008 {
3009         mdb_smb_oplock_grant_t  og;
3010         int verbose = FALSE;
3011         static int og_off;
3012 
3013         if (mdb_getopts(argc, argv,
3014             'v', MDB_OPT_SETBITS, TRUE, &verbose,
3015             NULL) != argc)
3016                 return (DCMD_USAGE);
3017 
3018         if (!(flags & DCMD_ADDRSPEC))
3019                 return (DCMD_USAGE);
3020 
3021         if (og_off <= 0) {
3022                 og_off = mdb_ctf_offsetof_by_name(
3023                     "smb_ofile_t", "f_oplock");
3024                 if (og_off < 0) {
3025                         mdb_warn("cannot lookup: smb_ofile_t .f_oplock");
3026                         return (DCMD_ERR);
3027                 }
3028         }
3029 
3030         if (mdb_ctf_vread(&og, SMBSRV_SCOPE "smb_oplock_grant_t",
3031             "mdb_smb_oplock_grant_t", addr + og_off, 0) < 0) {
3032                 mdb_warn("failed to read oplock grant in ofile at %p", addr);
3033                 return (DCMD_ERR);
3034         }
3035 
3036         if (verbose) {
3037                 mdb_printf("%<b>%<u>SMB ofile (oplock_grant) "
3038                     "(%p):%</u>%</b>\n", addr);
3039                 mdb_printf("State: 0x%x <%b>\n",
3040                     og.og_state,
3041                     og.og_state,
3042                     oplock_bits);
3043                 mdb_printf("OnList_II: %d\n", og.onlist_II);
3044                 mdb_printf("OnList_R: %d\n", og.onlist_R);
3045                 mdb_printf("OnList_RH: %d\n", og.onlist_RH);
3046                 mdb_printf("OnList_RHBQ: %d\n", og.onlist_RHBQ);
3047                 mdb_printf("BrkToRead: %d\n", og.BreakingToRead);
3048 
3049         } else {
3050 
3051                 if (DCMD_HDRSPEC(flags)) {
3052                         mdb_printf("%<u>%-16s %-10s %-16s%</u>\n",
3053                             "OFILE", "STATE", "OnList...");
3054                 }
3055 
3056                 mdb_printf("%-16p", addr);
3057                 mdb_printf(" 0x%x", og.og_state);
3058                 if (og.onlist_II)
3059                         mdb_printf(" II");
3060                 if (og.onlist_R)
3061                         mdb_printf(" R");
3062                 if (og.onlist_RH)
3063                         mdb_printf(" RH");
3064                 if (og.onlist_RHBQ)
3065                         mdb_printf(" RHBQ");
3066                 if (og.BreakingToRead)
3067                         mdb_printf(" BrkToRd");
3068                 mdb_printf("\n");
3069         }
3070 
3071         return (DCMD_OK);
3072 }
3073 
3074 /*
3075  * *****************************************************************************
3076  * ***************************** smb_oplock_t **********************************
3077  * *****************************************************************************
3078  */
3079 
3080 typedef struct mdb_smb_oplock {
3081         struct smb_ofile        *excl_open;
3082         uint32_t                ol_state;
3083         int32_t                 cnt_II;
3084         int32_t                 cnt_R;
3085         int32_t                 cnt_RH;
3086         int32_t                 cnt_RHBQ;
3087         int32_t                 waiters;
3088 } mdb_smb_oplock_t;
3089 
3090 /*
3091  * Helpers for smbnode_dcmd and smbnode_oplock_dcmd
3092  */
3093 
3094 /*
3095  * Read the smb_oplock_t part of the node
3096  * addr is the smb_node
3097  */
3098 static int
3099 smb_node_get_oplock(uintptr_t addr, struct mdb_smb_oplock **ol_ret)
3100 {
3101         mdb_smb_oplock_t *ol;
3102         static int ol_off;
3103 
3104         if (ol_off <= 0) {
3105                 ol_off = mdb_ctf_offsetof_by_name(
3106                     "smb_node_t", "n_oplock");
3107                 if (ol_off < 0) {
3108                         mdb_warn("cannot lookup: smb_node_t .n_oplock");
3109                         return (DCMD_ERR);
3110                 }
3111         }
3112 
3113         ol = mdb_alloc(sizeof (*ol), UM_SLEEP | UM_GC);
3114 
3115         if (mdb_ctf_vread(ol, SMBSRV_SCOPE "smb_oplock_t",
3116             "mdb_smb_oplock_t", addr + ol_off, 0) < 0) {
3117                 mdb_warn("failed to read smb_oplock in node at %p", addr);
3118                 return (DCMD_ERR);
3119         }
3120 
3121         *ol_ret = ol;
3122         return (DCMD_OK);
3123 }
3124 
3125 /*
3126  * Return the oplock count
3127  */
3128 static int
3129 smb_node_oplock_cnt(struct mdb_smb_oplock *ol)
3130 {
3131         int ol_cnt = 0;
3132 
3133         /* Compute total oplock count. */
3134         if (ol->excl_open != NULL)
3135                 ol_cnt++;
3136         ol_cnt += ol->cnt_II;
3137         ol_cnt += ol->cnt_R;
3138         ol_cnt += ol->cnt_RH;
3139 
3140         return (ol_cnt);
3141 }
3142 
3143 /*
3144  * Show smb_node_t oplock info, and optionally the
3145  * list of ofiles with oplocks on this node.
3146  * Address is the smb_node_t.
3147  */
3148 
3149 /*ARGSUSED*/
3150 static int
3151 smbnode_oplock_dcmd(uintptr_t addr, uint_t flags, int argc,
3152     const mdb_arg_t *argv)
3153 {
3154         mdb_smb_oplock_t *ol;
3155         int verbose = FALSE;
3156         int ol_cnt, rc;
3157         int fl_off, ll_off;
3158 
3159         if (mdb_getopts(argc, argv,
3160             'v', MDB_OPT_SETBITS, TRUE, &verbose,
3161             NULL) != argc)
3162                 return (DCMD_USAGE);
3163 
3164         if (!(flags & DCMD_ADDRSPEC))
3165                 return (DCMD_USAGE);
3166 
3167         rc = smb_node_get_oplock(addr, &ol);
3168         if (rc != DCMD_OK)
3169                 return (rc);
3170         ol_cnt = smb_node_oplock_cnt(ol);
3171 
3172         if (verbose) {
3173                 mdb_printf("%<b>%<u>SMB node (oplock) "
3174                     "(%p):%</u>%</b>\n", addr);
3175                 mdb_printf("State: 0x%x <%b>\n",
3176                     ol->ol_state,
3177                     ol->ol_state,
3178                     oplock_bits);
3179                 mdb_printf("Exclusive Open: %p\n", ol->excl_open);
3180                 mdb_printf("cnt_II: %d\n", ol->cnt_II);
3181                 mdb_printf("cnt_R: %d\n", ol->cnt_R);
3182                 mdb_printf("cnt_RH: %d\n", ol->cnt_RH);
3183                 mdb_printf("cnt_RHBQ: %d\n", ol->cnt_RHBQ);
3184                 mdb_printf("waiters: %d\n", ol->waiters);
3185         } else {
3186                 if (DCMD_HDRSPEC(flags)) {
3187                         mdb_printf("%<u>%-16s %-10s %-16s%</u>\n",
3188                             "NODE", "STATE", "OPLOCKS");
3189                 }
3190                 mdb_printf("%-16p 0x%x %d\n",
3191                     addr, ol->ol_state, ol_cnt);
3192         }
3193 
3194         if (ol_cnt == 0)
3195                 return (DCMD_OK);
3196 
3197         GET_OFFSET(fl_off, smb_node_t, n_ofile_list);
3198         GET_OFFSET(ll_off, smb_llist_t, ll_list);
3199 
3200         (void) mdb_inc_indent(SMB_DCMD_INDENT);
3201 
3202         if (mdb_pwalk_dcmd("list", "smbofile_oplock",
3203             argc, argv, addr + fl_off + ll_off)) {
3204                 mdb_warn("failed to walk ofile oplocks");
3205         }
3206 
3207         (void) mdb_dec_indent(SMB_DCMD_INDENT);
3208 
3209         return (DCMD_OK);
3210 }
3211 
3212 /*
3213  * *******************************************************************
3214  * (smb) mbuf_t
3215  *
3216  * ::smb_mbuf_dump [max_len]
3217  * dcmd to dump the data portion of an mbuf_t
3218  * stop at max_len
3219  */
3220 static int
3221 smb_mbuf_dump_dcmd(uintptr_t addr, uint_t flags, int argc,
3222     const mdb_arg_t *argv)
3223 {
3224         struct m_hdr mh;
3225         uintptr_t mdata;
3226         int len, max_len;
3227         int dumpptr_flags;
3228 
3229         if (mdb_vread(&mh, sizeof (mh), addr) < 0) {
3230                 mdb_warn("failed to read mbuf at %p", addr);
3231                 return (DCMD_ERR);
3232         }
3233         len = mh.mh_len;
3234         mdata = (uintptr_t)mh.mh_data;
3235 
3236         if (argc > 0) {
3237                 if (argv[0].a_type == MDB_TYPE_IMMEDIATE)
3238                         max_len = argv[0].a_un.a_val;
3239                 else
3240                         max_len = mdb_strtoull(argv[0].a_un.a_str);
3241                 if (len > max_len)
3242                         len = max_len;
3243         }
3244         if (len <= 0)
3245                 return (DCMD_OK);
3246 
3247         if (DCMD_HDRSPEC(flags)) {
3248                 mdb_printf("%<u>%-16s %-16s %-12s%</u>\n",
3249                     "mbuf_t", "m_data", "m_len");
3250         }
3251         mdb_printf("%-16p %-16p %-12u\n",
3252             addr, mdata, mh.mh_len);
3253 
3254         dumpptr_flags = MDB_DUMP_RELATIVE | MDB_DUMP_ASCII | MDB_DUMP_HEADER;
3255         if (mdb_dumpptr(mdata, len, dumpptr_flags,
3256             (mdb_dumpptr_cb_t)mdb_vread, NULL) < 0)
3257                 return (DCMD_ERR);
3258 
3259         return (DCMD_OK);
3260 }
3261 
3262 static int
3263 smb_mbuf_walk_init(mdb_walk_state_t *wsp)
3264 {
3265         mbuf_t *m;
3266 
3267         if (wsp->walk_addr == NULL) {
3268                 mdb_printf("require address of an mbuf_t\n");
3269                 return (WALK_ERR);
3270         }
3271         m = mdb_alloc(sizeof (*m), UM_SLEEP | UM_GC);
3272         wsp->walk_data = m;
3273         return (WALK_NEXT);
3274 }
3275 
3276 static int
3277 smb_mbuf_walk_step(mdb_walk_state_t *wsp)
3278 {
3279         uintptr_t addr = wsp->walk_addr;
3280         mbuf_t *m = wsp->walk_data;
3281         int rc;
3282 
3283         if (wsp->walk_addr == 0)
3284                 return (WALK_DONE);
3285 
3286         if (mdb_vread(m, sizeof (*m), addr) == -1) {
3287                 mdb_warn("failed to read mbuf_t at %p", addr);
3288                 return (WALK_ERR);
3289         }
3290 
3291         rc = wsp->walk_callback(addr, m, wsp->walk_cbdata);
3292         wsp->walk_addr = (uintptr_t)m->m_next;
3293 
3294         return (rc);
3295 }
3296 
3297 /*
3298  * *****************************************************************************
3299  * ******************************** smb_ace_t **********************************
3300  * *****************************************************************************
3301  */
3302 static const ace_type_entry_t   ace_types[ACE_TYPE_TABLEN] =
3303 {
3304         ACE_TYPE_ENTRY(ACE_ACCESS_ALLOWED_ACE_TYPE),
3305         ACE_TYPE_ENTRY(ACE_ACCESS_DENIED_ACE_TYPE),
3306         ACE_TYPE_ENTRY(ACE_SYSTEM_AUDIT_ACE_TYPE),
3307         ACE_TYPE_ENTRY(ACE_SYSTEM_ALARM_ACE_TYPE),
3308         ACE_TYPE_ENTRY(ACE_ACCESS_ALLOWED_COMPOUND_ACE_TYPE),
3309         ACE_TYPE_ENTRY(ACE_ACCESS_ALLOWED_OBJECT_ACE_TYPE),
3310         ACE_TYPE_ENTRY(ACE_ACCESS_DENIED_OBJECT_ACE_TYPE),
3311         ACE_TYPE_ENTRY(ACE_SYSTEM_AUDIT_OBJECT_ACE_TYPE),
3312         ACE_TYPE_ENTRY(ACE_SYSTEM_ALARM_OBJECT_ACE_TYPE),
3313         ACE_TYPE_ENTRY(ACE_ACCESS_ALLOWED_CALLBACK_ACE_TYPE),
3314         ACE_TYPE_ENTRY(ACE_ACCESS_DENIED_CALLBACK_ACE_TYPE),
3315         ACE_TYPE_ENTRY(ACE_ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE),
3316         ACE_TYPE_ENTRY(ACE_ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE),
3317         ACE_TYPE_ENTRY(ACE_SYSTEM_AUDIT_CALLBACK_ACE_TYPE),
3318         ACE_TYPE_ENTRY(ACE_SYSTEM_ALARM_CALLBACK_ACE_TYPE),
3319         ACE_TYPE_ENTRY(ACE_SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE),
3320         ACE_TYPE_ENTRY(ACE_SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE),
3321         ACE_TYPE_ENTRY(0x11),
3322         ACE_TYPE_ENTRY(0x12),
3323         ACE_TYPE_ENTRY(0x13),
3324         ACE_TYPE_ENTRY(0x14),
3325         ACE_TYPE_ENTRY(0x15),
3326         ACE_TYPE_ENTRY(0x16),
3327         ACE_TYPE_ENTRY(0x17),
3328         ACE_TYPE_ENTRY(0x18),
3329         ACE_TYPE_ENTRY(0x19),
3330         ACE_TYPE_ENTRY(0x1A),
3331         ACE_TYPE_ENTRY(0x1B),
3332         ACE_TYPE_ENTRY(0x1C),
3333         ACE_TYPE_ENTRY(0x1D),
3334         ACE_TYPE_ENTRY(0x1E),
3335         ACE_TYPE_ENTRY(0x1F)
3336 };
3337 
3338 static const mdb_bitmask_t ace_flag_bits[] = {
3339         { "OBJECT_INHERIT_ACE", OBJECT_INHERIT_ACE, OBJECT_INHERIT_ACE },
3340         { "CONTAINER_INHERIT_ACE", CONTAINER_INHERIT_ACE,
3341             CONTAINER_INHERIT_ACE },
3342         { "NO_PROPOGATE_INHERIT_ACE", NO_PROPOGATE_INHERIT_ACE,
3343             NO_PROPOGATE_INHERIT_ACE },
3344         { "INHERIT_ONLY_ACE", INHERIT_ONLY_ACE, INHERIT_ONLY_ACE },
3345         { "INHERITED_ACE", INHERITED_ACE, INHERITED_ACE },
3346         { "SUCCESSFUL_ACCESS_ACE_FLAG", SUCCESSFUL_ACCESS_ACE_FLAG,
3347             SUCCESSFUL_ACCESS_ACE_FLAG },
3348         { "FAILED_ACCESS_ACE_FLAG", FAILED_ACCESS_ACE_FLAG,
3349             FAILED_ACCESS_ACE_FLAG },
3350         { NULL, 0, 0 }
3351 };
3352 
3353 /*
3354  * ::smbace
3355  */
3356 static int
3357 smbace_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
3358 {
3359         smb_ace_t       ace;
3360         int             verbose = FALSE;
3361         const char      *ptr;
3362         int             rc;
3363 
3364         if (mdb_getopts(argc, argv, 'v', MDB_OPT_SETBITS, TRUE, &verbose,
3365             NULL) != argc)
3366                 return (DCMD_USAGE);
3367 
3368         /*
3369          * An smb_ace address is required.
3370          */
3371         if (!(flags & DCMD_ADDRSPEC))
3372                 return (DCMD_USAGE);
3373 
3374         if (mdb_vread(&ace, sizeof (ace), addr) != sizeof (ace)) {
3375                 mdb_warn("failed to read struct smb_ace at %p", addr);
3376                 return (DCMD_ERR);
3377         }
3378 
3379         if (verbose) {
3380                 if (ace.se_hdr.se_type < ACE_TYPE_TABLEN)
3381                         ptr = ace_types[ace.se_hdr.se_type].ace_type_sting;
3382                 else
3383                         ptr = "Unknown";
3384 
3385                 mdb_printf("ACE Type: 0x%02x (%s)\n", ace.se_hdr.se_type, ptr);
3386                 mdb_printf("ACE Flags: %b\n", (int)ace.se_hdr.se_flags,
3387                     ace_flag_bits);
3388                 mdb_printf("ACE Wire Size: 0x%04x\n", ace.se_hdr.se_bsize);
3389                 mdb_printf("ACE Mask: 0x%08x\n", ace.se_mask);
3390                 mdb_printf("ACE SID: ");
3391         } else {
3392                 if (DCMD_HDRSPEC(flags))
3393                         mdb_printf(
3394                             "%<b>%<u>%?-s %-4s %-4s %-8s %s%</u>%</b>\n",
3395                             "ACE", "TYPE", "FLAGS", "MASK", "SID");
3396                 mdb_printf("%?p 0x%02x 0x%02x 0x%08x ", addr,
3397                     ace.se_hdr.se_type, ace.se_hdr.se_flags, ace.se_mask);
3398         }
3399         rc = smb_sid_print((uintptr_t)ace.se_sid);
3400         mdb_printf("\n");
3401         return (rc);
3402 }
3403 
3404 static int
3405 smb_ace_walk_init(mdb_walk_state_t *wsp)
3406 {
3407         int sal_off;
3408 
3409         if (wsp->walk_addr == 0) {
3410                 mdb_printf("smb_ace walk only supports local walks\n");
3411                 return (WALK_ERR);
3412         }
3413 
3414         GET_OFFSET(sal_off, smb_acl_t, sl_sorted);
3415         wsp->walk_addr += sal_off;
3416 
3417         if (mdb_layered_walk("list", wsp) == -1) {
3418                 mdb_warn("failed to walk list of ACEs");
3419                 return (WALK_ERR);
3420         }
3421 
3422         return (WALK_NEXT);
3423 }
3424 
3425 static int
3426 smb_ace_walk_step(mdb_walk_state_t *wsp)
3427 {
3428         return (wsp->walk_callback(wsp->walk_addr, wsp->walk_layer,
3429             wsp->walk_cbdata));
3430 }
3431 
3432 /*
3433  * *****************************************************************************
3434  * ******************************** smb_acl_t **********************************
3435  * *****************************************************************************
3436  */
3437 
3438 /*
3439  * ::smbacl
3440  */
3441 static int
3442 smbacl_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
3443 {
3444         smb_acl_t       acl;
3445 
3446         /* An smb_acl address is required. */
3447         if (!(flags & DCMD_ADDRSPEC))
3448                 return (DCMD_USAGE);
3449 
3450         if (mdb_vread(&acl, sizeof (acl), addr) != sizeof (acl)) {
3451                 mdb_warn("failed to read struct smb_acl at %p", addr);
3452                 return (DCMD_ERR);
3453         }
3454 
3455         mdb_printf("ACL Revision: %d\n", acl.sl_revision);
3456         mdb_printf("ACL Size on Wire: %d\n", acl.sl_bsize);
3457         mdb_printf("ACL Number of ACEs: %d\n", acl.sl_acecnt);
3458 
3459         (void) mdb_inc_indent(SMB_DCMD_INDENT);
3460         if (mdb_pwalk_dcmd("smbace_walker", "smbace", argc, argv, addr)) {
3461                 (void) mdb_dec_indent(SMB_DCMD_INDENT);
3462                 mdb_warn("failed to walk list of ACEs for ACL %p", addr);
3463                 return (DCMD_ERR);
3464         }
3465         (void) mdb_dec_indent(SMB_DCMD_INDENT);
3466         return (DCMD_OK);
3467 }
3468 
3469 /*
3470  * *****************************************************************************
3471  * ********************************* smb_sd_t **********************************
3472  * *****************************************************************************
3473  */
3474 
3475 /*
3476  * ::smbsd
3477  */
3478 static int
3479 smbsd_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
3480 {
3481         smb_sd_t        sd;
3482         int             rc;
3483 
3484         /*
3485          * An smb_sid address is required.
3486          */
3487         if (!(flags & DCMD_ADDRSPEC))
3488                 return (DCMD_USAGE);
3489 
3490         if (mdb_vread(&sd, sizeof (sd), addr) != sizeof (sd)) {
3491                 mdb_warn("failed to read struct smb_sd at %p", addr);
3492                 return (DCMD_ERR);
3493         }
3494 
3495         mdb_printf("SD Revision: %d\n", sd.sd_revision);
3496         mdb_printf("SD Control: %04x\n", sd.sd_control);
3497         if (sd.sd_control & SE_OWNER_DEFAULTED)
3498                 mdb_printf("\t    SE_OWNER_DEFAULTED\n");
3499         if (sd.sd_control & SE_GROUP_DEFAULTED)
3500                 mdb_printf("\t    SE_GROUP_DEFAULTED\n");
3501         if (sd.sd_control & SE_DACL_PRESENT)
3502                 mdb_printf("\t    SE_DACL_PRESENT\n");
3503         if (sd.sd_control & SE_DACL_DEFAULTED)
3504                 mdb_printf("\t    SE_DACL_DEFAULTED\n");
3505         if (sd.sd_control & SE_SACL_PRESENT)
3506                 mdb_printf("\t    SE_SACL_PRESENT\n");
3507         if (sd.sd_control & SE_SACL_DEFAULTED)
3508                 mdb_printf("\t    SE_SACL_DEFAULTED\n");
3509         if (sd.sd_control & SE_DACL_AUTO_INHERIT_REQ)
3510                 mdb_printf("\t    SE_DACL_AUTO_INHERIT_REQ\n");
3511         if (sd.sd_control & SE_SACL_AUTO_INHERIT_REQ)
3512                 mdb_printf("\t    SE_SACL_AUTO_INHERIT_REQ\n");
3513         if (sd.sd_control & SE_DACL_AUTO_INHERITED)
3514                 mdb_printf("\t    SE_DACL_AUTO_INHERITED\n");
3515         if (sd.sd_control & SE_SACL_AUTO_INHERITED)
3516                 mdb_printf("\t    SE_SACL_AUTO_INHERITED\n");
3517         if (sd.sd_control & SE_DACL_PROTECTED)
3518                 mdb_printf("\t    SE_DACL_PROTECTED\n");
3519         if (sd.sd_control & SE_SACL_PROTECTED)
3520                 mdb_printf("\t    SE_SACL_PROTECTED\n");
3521         if (sd.sd_control & SE_SELF_RELATIVE)
3522                 mdb_printf("\t    SE_SELF_RELATIVE\n");
3523 
3524         mdb_printf("SID of Owner: ");
3525         rc = smb_sid_print((uintptr_t)sd.sd_owner);
3526         if (rc != DCMD_OK)
3527                 return (rc);
3528         mdb_printf("\nSID of Group: ");
3529         rc = smb_sid_print((uintptr_t)sd.sd_group);
3530         if (rc != DCMD_OK)
3531                 return (rc);
3532         mdb_printf("\n");
3533 
3534         if (sd.sd_control & SE_SACL_PRESENT && sd.sd_sacl) {
3535                 mdb_printf("%<b>%<u>System ACL%</u>%</b>\n");
3536                 (void) mdb_inc_indent(SMB_DCMD_INDENT);
3537                 rc = mdb_call_dcmd("smbacl", (uintptr_t)sd.sd_sacl, flags,
3538                     argc, argv);
3539                 (void) mdb_dec_indent(SMB_DCMD_INDENT);
3540                 if (rc != DCMD_OK)
3541                         return (rc);
3542         }
3543         if (sd.sd_control & SE_DACL_PRESENT && sd.sd_dacl) {
3544                 mdb_printf("%<b>%<u>Discretionary ACL%</u>%</b>\n");
3545                 (void) mdb_inc_indent(SMB_DCMD_INDENT);
3546                 rc = mdb_call_dcmd("smbacl", (uintptr_t)sd.sd_dacl, flags,
3547                     argc, argv);
3548                 (void) mdb_dec_indent(SMB_DCMD_INDENT);
3549                 if (rc != DCMD_OK)
3550                         return (rc);
3551         }
3552 
3553         return (DCMD_OK);
3554 }
3555 
3556 /*
3557  * *****************************************************************************
3558  * ********************************* smb_sid_t *********************************
3559  * *****************************************************************************
3560  */
3561 
3562 /*
3563  * ::smbsid
3564  */
3565 /*ARGSUSED*/
3566 static int
3567 smbsid_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
3568 {
3569         /*
3570          * An smb_sid address is required.
3571          */
3572         if (!(flags & DCMD_ADDRSPEC))
3573                 return (DCMD_USAGE);
3574 
3575         return (smb_sid_print(addr));
3576 }
3577 
3578 /*
3579  * smb_sid_print
3580  */
3581 static int
3582 smb_sid_print(uintptr_t addr)
3583 {
3584         smb_sid_t       sid;
3585         smb_sid_t       *psid;
3586         size_t          sid_size;
3587         uint64_t        authority;
3588         int             ssa_off;
3589         int             i;
3590 
3591         GET_OFFSET(ssa_off, smb_sid_t, sid_subauth);
3592         sid_size = ssa_off;
3593 
3594         if (mdb_vread(&sid, sid_size, addr) != sid_size) {
3595                 mdb_warn("failed to read struct smb_sid at %p", addr);
3596                 return (DCMD_ERR);
3597         }
3598 
3599         sid_size += sid.sid_subauthcnt * sizeof (sid.sid_subauth[0]);
3600 
3601         psid = mdb_zalloc(sid_size, UM_SLEEP | UM_GC);
3602         if (mdb_vread(psid, sid_size, addr) != sid_size) {
3603                 mdb_warn("failed to read struct smb_sid at %p", addr);
3604                 return (DCMD_ERR);
3605         }
3606 
3607         mdb_printf("S-%d", psid->sid_revision);
3608         authority = 0;
3609         for (i = 0; i < NT_SID_AUTH_MAX; i++) {
3610                 authority += ((uint64_t)psid->sid_authority[i]) <<
3611                     (8 * (NT_SID_AUTH_MAX - 1) - i);
3612         }
3613         mdb_printf("-%ll", authority);
3614 
3615         for (i = 0; i < psid->sid_subauthcnt; i++)
3616                 mdb_printf("-%d", psid->sid_subauth[i]);
3617 
3618         return (DCMD_OK);
3619 }
3620 
3621 /*
3622  * *****************************************************************************
3623  * ********************************* smb_fssd_t ********************************
3624  * *****************************************************************************
3625  */
3626 
3627 /*
3628  * ::smbfssd
3629  */
3630 static int
3631 smbfssd_dcmd(uintptr_t addr, uint_t flags, int argc, const mdb_arg_t *argv)
3632 {
3633         smb_fssd_t      fssd;
3634         int             rc;
3635 
3636         /*
3637          * An smb_fssd address is required.
3638          */
3639         if (!(flags & DCMD_ADDRSPEC))
3640                 return (DCMD_USAGE);
3641 
3642         if (mdb_vread(&fssd, sizeof (fssd), addr) != sizeof (fssd)) {
3643                 mdb_warn("failed to read struct smb_fssd at %p", addr);
3644                 return (DCMD_ERR);
3645         }
3646 
3647         mdb_printf("FSSD secinfo: 0x%x\n", fssd.sd_secinfo);
3648         if (fssd.sd_secinfo & SMB_OWNER_SECINFO)
3649                 mdb_printf("FSSD uid: %d\n", fssd.sd_uid);
3650         if (fssd.sd_secinfo & SMB_GROUP_SECINFO)
3651                 mdb_printf("FSSD gid: %d\n", fssd.sd_gid);
3652         if (fssd.sd_secinfo & SMB_SACL_SECINFO && fssd.sd_zsacl) {
3653                 mdb_printf("%<b>%<u>System ACL%</u>%</b>\n");
3654                 (void) mdb_inc_indent(SMB_DCMD_INDENT);
3655                 rc = mdb_call_dcmd("smbacl", (uintptr_t)fssd.sd_zsacl, flags,
3656                     argc, argv);
3657                 (void) mdb_dec_indent(SMB_DCMD_INDENT);
3658                 if (rc != DCMD_OK)
3659                         return (rc);
3660         }
3661         if (fssd.sd_secinfo & SMB_DACL_SECINFO && fssd.sd_zdacl) {
3662                 mdb_printf("%<b>%<u>Discretionary ACL%</u>%</b>\n");
3663                 (void) mdb_inc_indent(SMB_DCMD_INDENT);
3664                 rc = mdb_call_dcmd("smbacl", (uintptr_t)fssd.sd_zdacl, flags,
3665                     argc, argv);
3666                 (void) mdb_dec_indent(SMB_DCMD_INDENT);
3667                 if (rc != DCMD_OK)
3668                         return (rc);
3669         }
3670 
3671         return (DCMD_OK);
3672 }
3673 
3674 /*
3675  * *****************************************************************************
3676  * **************************** Utility Funcions *******************************
3677  * *****************************************************************************
3678  */
3679 
3680 /*
3681  * smb_dcmd_getopt
3682  *
3683  * This function analyzes the arguments passed in and sets the bit corresponding
3684  * to the options found in the opts variable.
3685  *
3686  * Return Value
3687  *
3688  *      -1      An error occured during the decoding
3689  *      0       The decoding was successful
3690  */
3691 static int
3692 smb_dcmd_getopt(uint_t *opts, int argc, const mdb_arg_t *argv)
3693 {
3694         *opts = 0;
3695 
3696         if (mdb_getopts(argc, argv,
3697             's', MDB_OPT_SETBITS, SMB_OPT_SERVER, opts,
3698             'e', MDB_OPT_SETBITS, SMB_OPT_SESSION, opts,
3699             'r', MDB_OPT_SETBITS, SMB_OPT_REQUEST, opts,
3700             'u', MDB_OPT_SETBITS, SMB_OPT_USER, opts,
3701             't', MDB_OPT_SETBITS, SMB_OPT_TREE, opts,
3702             'f', MDB_OPT_SETBITS, SMB_OPT_OFILE, opts,
3703             'd', MDB_OPT_SETBITS, SMB_OPT_ODIR, opts,
3704             'w', MDB_OPT_SETBITS, SMB_OPT_WALK, opts,
3705             'v', MDB_OPT_SETBITS, SMB_OPT_VERBOSE, opts,
3706             NULL) != argc)
3707                 return (-1);
3708 
3709         return (0);
3710 }
3711 
3712 /*
3713  * smb_dcmd_setopt
3714  *
3715  * This function set the arguments corresponding to the bits set in opts.
3716  *
3717  * Return Value
3718  *
3719  *      Number of arguments set.
3720  */
3721 static int
3722 smb_dcmd_setopt(uint_t opts, int max_argc, mdb_arg_t *argv)
3723 {
3724         int     i;
3725         int     argc = 0;
3726 
3727         for (i = 0; i < SMB_MDB_MAX_OPTS; i++) {
3728                 if ((opts & smb_opts[i].o_value) && (argc < max_argc)) {
3729                         argv->a_type = MDB_TYPE_STRING;
3730                         argv->a_un.a_str = smb_opts[i].o_name;
3731                         argc++;
3732                         argv++;
3733                 }
3734         }
3735         return (argc);
3736 }
3737 
3738 /*
3739  * smb_obj_expand
3740  */
3741 static int
3742 smb_obj_expand(uintptr_t addr, uint_t opts, const smb_exp_t *x, ulong_t indent)
3743 {
3744         int             rc = 0;
3745         int             ex_off;
3746         int             argc;
3747         mdb_arg_t       argv[SMB_MDB_MAX_OPTS];
3748 
3749         argc = smb_dcmd_setopt(opts | SMB_OPT_WALK, SMB_MDB_MAX_OPTS, argv);
3750 
3751         (void) mdb_inc_indent(indent);
3752         while (x->ex_dcmd) {
3753                 if (x->ex_mask & opts) {
3754                         ex_off = (x->ex_offset)();
3755                         if (ex_off < 0) {
3756                                 mdb_warn("failed to get the list offset for %s",
3757                                     x->ex_name);
3758                                 rc = ex_off;
3759                                 break;
3760                         }
3761 
3762                         rc = mdb_pwalk_dcmd("list", x->ex_dcmd, argc, argv,
3763                             addr + ex_off);
3764 
3765                         if (rc) {
3766                                 mdb_warn("failed to walk the list of %s in %p",
3767                                     x->ex_name, addr + ex_off);
3768                                 break;
3769                         }
3770                 }
3771                 x++;
3772         }
3773         (void) mdb_dec_indent(indent);
3774         return (rc);
3775 }
3776 
3777 /*
3778  * smb_obj_list
3779  *
3780  * Function called by the DCMDs when no address is provided. It expands the
3781  * tree under the object type associated with the calling DCMD (based on the
3782  * flags passed in).
3783  *
3784  * Return Value
3785  *
3786  *      DCMD_OK
3787  *      DCMD_ERR
3788  */
3789 static int
3790 smb_obj_list(const char *name, uint_t opts, uint_t flags)
3791 {
3792         int             argc;
3793         mdb_arg_t       argv[SMB_MDB_MAX_OPTS];
3794 
3795         argc = smb_dcmd_setopt(opts, SMB_MDB_MAX_OPTS, argv);
3796 
3797         if (mdb_call_dcmd("smblist", 0, flags, argc, argv)) {
3798                 mdb_warn("failed to list %s", name);
3799                 return (DCMD_ERR);
3800         }
3801         return (DCMD_OK);
3802 }
3803 
3804 static int
3805 smb_worker_findstack(uintptr_t addr)
3806 {
3807         char            cmd[80];
3808         mdb_arg_t       cmdarg;
3809 
3810         mdb_inc_indent(2);
3811         mdb_snprintf(cmd, sizeof (cmd), "<.$c%d", 16);
3812         cmdarg.a_type = MDB_TYPE_STRING;
3813         cmdarg.a_un.a_str = cmd;
3814         (void) mdb_call_dcmd("findstack", addr, DCMD_ADDRSPEC, 1, &cmdarg);
3815         mdb_dec_indent(2);
3816         mdb_printf("\n");
3817         return (DCMD_OK);
3818 }
3819 
3820 static void
3821 smb_inaddr_ntop(smb_inaddr_t *ina, char *buf, size_t sz)
3822 {
3823 
3824         switch (ina->a_family) {
3825         case AF_INET:
3826                 (void) mdb_snprintf(buf, sz, "%I", ina->a_ipv4);
3827                 break;
3828         case AF_INET6:
3829                 (void) mdb_snprintf(buf, sz, "%N", &ina->a_ipv6);
3830                 break;
3831         default:
3832                 (void) mdb_snprintf(buf, sz, "(?)");
3833                 break;
3834         }
3835 }
3836 
3837 /*
3838  * Get the name for an enum value
3839  */
3840 static void
3841 get_enum(char *out, size_t size, const char *type_str, int val,
3842     const char *prefix)
3843 {
3844         mdb_ctf_id_t type_id;
3845         const char *cp;
3846 
3847         if (mdb_ctf_lookup_by_name(type_str, &type_id) != 0)
3848                 goto errout;
3849         if (mdb_ctf_type_resolve(type_id, &type_id) != 0)
3850                 goto errout;
3851         if ((cp = mdb_ctf_enum_name(type_id, val)) == NULL)
3852                 goto errout;
3853         if (prefix != NULL) {
3854                 size_t len = strlen(prefix);
3855                 if (strncmp(cp, prefix, len) == 0)
3856                         cp += len;
3857         }
3858         (void) strncpy(out, cp, size);
3859         return;
3860 
3861 errout:
3862         mdb_snprintf(out, size, "? (%d)", val);
3863 }
3864 
3865 /*
3866  * MDB module linkage information:
3867  *
3868  * We declare a list of structures describing our dcmds, a list of structures
3869  * describing our walkers and a function named _mdb_init to return a pointer
3870  * to our module information.
3871  */
3872 static const mdb_dcmd_t dcmds[] = {
3873         {   "smblist",
3874             "[-seutfdwv]",
3875             "print tree of SMB objects",
3876             smblist_dcmd,
3877             smblist_help },
3878         {   "smbsrv",
3879             "[-seutfdwv]",
3880             "print smb_server information",
3881             smbsrv_dcmd },
3882         {   "smbshare",
3883             ":[-v]",
3884             "print smb_kshare_t information",
3885             smbshare_dcmd },
3886         {   "smbvfs",
3887             ":[-v]",
3888             "print smb_vfs information",
3889             smbvfs_dcmd },
3890         {   "smbnode",
3891             "?[-vps]",
3892             "print smb_node_t information",
3893             smbnode_dcmd,
3894             smbnode_help },
3895         {   "smbsess",
3896             "[-utfdwv]",
3897             "print smb_session_t information",
3898             smbsess_dcmd,
3899             smbsess_help},
3900         {   "smbreq",
3901             ":[-v]",
3902             "print smb_request_t information",
3903             smbreq_dcmd },
3904         {   "smbreq_dump",
3905             ":[-cr] [-o outfile]",
3906             "dump smb_request_t packets (cmd/reply)",
3907             smbreq_dump_dcmd,
3908             smbreq_dump_help,
3909         },
3910         {   "smblock", ":[-v]",
3911             "print smb_lock_t information",
3912             smblock_dcmd },
3913         {   "smbuser",
3914             ":[-vdftq]",
3915             "print smb_user_t information",
3916             smbuser_dcmd,
3917             smbuser_help },
3918         {   "smbtree",
3919             ":[-vdf]",
3920             "print smb_tree_t information",
3921             smbtree_dcmd,
3922             smbtree_help },
3923         {   "smbodir",
3924             ":[-v]",
3925             "print smb_odir_t information",
3926             smbodir_dcmd },
3927         {   "smbofile",
3928             "[-v]",
3929             "print smb_file_t information",
3930             smbofile_dcmd },
3931         {   "smbsrv_leases",
3932             "[-v]",
3933             "print lease table for a server",
3934             smbsrv_leases_dcmd },
3935         {   "smblease",
3936             "[-v]",
3937             "print smb_lease_t information",
3938             smblease_dcmd },
3939         {   "smbnode_oplock", NULL,
3940             "print smb_node_t oplock information",
3941             smbnode_oplock_dcmd },
3942         {   "smbofile_oplock", NULL,
3943             "print smb_ofile_t oplock information",
3944             smbofile_oplock_dcmd },
3945         {   "smbace", "[-v]",
3946             "print smb_ace_t information",
3947             smbace_dcmd },
3948         {   "smbacl", "[-v]",
3949             "print smb_acl_t information",
3950             smbacl_dcmd },
3951         {   "smbsid", "[-v]",
3952             "print smb_sid_t information",
3953             smbsid_dcmd },
3954         {   "smbsd", "[-v]",
3955             "print smb_sd_t information",
3956             smbsd_dcmd },
3957         {   "smbfssd", "[-v]",
3958             "print smb_fssd_t information",
3959             smbfssd_dcmd },
3960         {   "smb_mbuf_dump", ":[max_len]",
3961             "print mbuf_t data",
3962             smb_mbuf_dump_dcmd },
3963         {   "smbdurable",
3964             "[-v]",
3965             "list ofiles on sv->sv_persistid_ht",
3966             smbdurable_dcmd },
3967         {   "smbhashstat",
3968             "[-v]",
3969             "list stats from an smb_hash_t structure",
3970             smbhashstat_dcmd },
3971 
3972         { NULL }
3973 };
3974 
3975 static const mdb_walker_t walkers[] = {
3976         {   "smbnode_walker",
3977             "walk list of smb_node_t structures",
3978             smb_node_walk_init,
3979             smb_node_walk_step,
3980             NULL,
3981             NULL },
3982         {   "smbshare_walker",
3983             "walk list of smb_kshare_t structures",
3984             smb_kshare_walk_init,
3985             smb_kshare_walk_step,
3986             NULL,
3987             NULL },
3988         {   "smbvfs_walker",
3989             "walk list of smb_vfs_t structures",
3990             smb_vfs_walk_init,
3991             smb_vfs_walk_step,
3992             NULL,
3993             NULL },
3994         {   "smbace_walker",
3995             "walk list of smb_ace_t structures",
3996             smb_ace_walk_init,
3997             smb_ace_walk_step,
3998             NULL,
3999             NULL },
4000         {   "smb_mbuf_walker",
4001             "walk list of mbuf_t structures",
4002             smb_mbuf_walk_init,
4003             smb_mbuf_walk_step,
4004             NULL,
4005             NULL },
4006         {   "smb_hash_walker",
4007             "walk an smb_hash_t structure",
4008             smb_hash_walk_init,
4009             smb_hash_walk_step,
4010             NULL,
4011             NULL },
4012         {   "smb_hashstat_walker",
4013             "walk the buckets from an smb_hash_t structure",
4014             smb_hashstat_walk_init,
4015             smb_hashstat_walk_step,
4016             NULL,
4017             NULL },
4018 
4019         { NULL }
4020 };
4021 
4022 static const mdb_modinfo_t modinfo = {
4023         MDB_API_VERSION, dcmds, walkers
4024 };
4025 
4026 const mdb_modinfo_t *
4027 _mdb_init(void)
4028 {
4029         return (&modinfo);
4030 }