s3:locking: fix uninitialiazed variable in brl_get_locks_readonly_parser()
[obnox/samba/samba-obnox.git] / source3 / locking / brlock.c
index a516b6004b822c7938dc5008526f0ce272c387a6..7fd3783cb869ea4264a652a77b1fd42af2d756cc 100644 (file)
@@ -47,7 +47,7 @@ struct byte_range_lock {
        struct files_struct *fsp;
        unsigned int num_locks;
        bool modified;
-       bool have_read_oplocks;
+       uint32_t num_read_oplocks;
        struct lock_struct *lock_data;
        struct db_record *record;
 };
@@ -64,12 +64,12 @@ static void print_lock_struct(unsigned int i, const struct lock_struct *pls)
                        (unsigned int)pls->context.tid,
                        server_id_str(talloc_tos(), &pls->context.pid) ));
 
-       DEBUG(10,("start = %.0f, size = %.0f, fnum = %llu, %s %s\n",
-               (double)pls->start,
-               (double)pls->size,
-               (unsigned long long)pls->fnum,
-               lock_type_name(pls->lock_type),
-               lock_flav_name(pls->lock_flav) ));
+       DEBUG(10, ("start = %ju, size = %ju, fnum = %ju, %s %s\n",
+                  (uintmax_t)pls->start,
+                  (uintmax_t)pls->size,
+                  (uintmax_t)pls->fnum,
+                  lock_type_name(pls->lock_type),
+                  lock_flav_name(pls->lock_flav)));
 }
 
 unsigned int brl_num_locks(const struct byte_range_lock *brl)
@@ -82,18 +82,18 @@ struct files_struct *brl_fsp(struct byte_range_lock *brl)
        return brl->fsp;
 }
 
-bool brl_have_read_oplocks(const struct byte_range_lock *brl)
+uint32_t brl_num_read_oplocks(const struct byte_range_lock *brl)
 {
-       return brl->have_read_oplocks;
+       return brl->num_read_oplocks;
 }
 
-void brl_set_have_read_oplocks(struct byte_range_lock *brl,
-                              bool have_read_oplocks)
+void brl_set_num_read_oplocks(struct byte_range_lock *brl,
+                             uint32_t num_read_oplocks)
 {
-       DEBUG(10, ("Setting have_read_oplocks to %s\n",
-                  have_read_oplocks ? "true" : "false"));
+       DEBUG(10, ("Setting num_read_oplocks to %"PRIu32"\n",
+                  num_read_oplocks));
        SMB_ASSERT(brl->record != NULL); /* otherwise we're readonly */
-       brl->have_read_oplocks = have_read_oplocks;
+       brl->num_read_oplocks = num_read_oplocks;
        brl->modified = true;
 }
 
@@ -227,32 +227,65 @@ static bool brl_conflict1(const struct lock_struct *lck1,
  This is never used in the POSIX lock case.
 ****************************************************************************/
 
-static bool brl_conflict_other(const struct lock_struct *lck1, const struct lock_struct *lck2)
+static bool brl_conflict_other(const struct lock_struct *lock,
+                              const struct lock_struct *rw_probe)
 {
-       if (IS_PENDING_LOCK(lck1->lock_type) || IS_PENDING_LOCK(lck2->lock_type))
+       if (IS_PENDING_LOCK(lock->lock_type) ||
+           IS_PENDING_LOCK(rw_probe->lock_type)) {
                return False;
+       }
 
-       if (lck1->lock_type == READ_LOCK && lck2->lock_type == READ_LOCK)
+       if (lock->lock_type == READ_LOCK && rw_probe->lock_type == READ_LOCK) {
                return False;
+       }
 
-       /* POSIX flavour locks never conflict here - this is only called
-          in the read/write path. */
-
-       if (lck1->lock_flav == POSIX_LOCK && lck2->lock_flav == POSIX_LOCK)
+       if (lock->lock_flav == POSIX_LOCK &&
+           rw_probe->lock_flav == POSIX_LOCK) {
+               /*
+                * POSIX flavour locks never conflict here - this is only called
+                * in the read/write path.
+                */
                return False;
+       }
 
-       /*
-        * Incoming WRITE locks conflict with existing READ locks even
-        * if the context is the same. JRA. See LOCKTEST7 in smbtorture.
-        */
+       if (!brl_overlap(lock, rw_probe)) {
+               /*
+                * I/O can only conflict when overlapping a lock, thus let it
+                * pass
+                */
+               return false;
+       }
 
-       if (!(lck2->lock_type == WRITE_LOCK && lck1->lock_type == READ_LOCK)) {
-               if (brl_same_context(&lck1->context, &lck2->context) &&
-                                       lck1->fnum == lck2->fnum)
-                       return False;
+       if (!brl_same_context(&lock->context, &rw_probe->context)) {
+               /*
+                * Different process, conflict
+                */
+               return true;
        }
 
-       return brl_overlap(lck1, lck2);
+       if (lock->fnum != rw_probe->fnum) {
+               /*
+                * Different file handle, conflict
+                */
+               return true;
+       }
+
+       if ((lock->lock_type == READ_LOCK) &&
+           (rw_probe->lock_type == WRITE_LOCK)) {
+               /*
+                * Incoming WRITE locks conflict with existing READ locks even
+                * if the context is the same. JRA. See LOCKTEST7 in
+                * smbtorture.
+                */
+               return true;
+       }
+
+       /*
+        * I/O request compatible with existing lock, let it pass without
+        * conflict
+        */
+
+       return false;
 }
 
 /****************************************************************************
@@ -263,7 +296,7 @@ static bool brl_pending_overlap(const struct lock_struct *lock, const struct loc
 {
        if ((lock->start <= pend_lock->start) && (lock->start + lock->size > pend_lock->start))
                return True;
-       if ((lock->start >= pend_lock->start) && (lock->start <= pend_lock->start + pend_lock->size))
+       if ((lock->start >= pend_lock->start) && (lock->start < pend_lock->start + pend_lock->size))
                return True;
        return False;
 }
@@ -309,6 +342,7 @@ static NTSTATUS brl_lock_failed(files_struct *fsp,
 void brl_init(bool read_only)
 {
        int tdb_flags;
+       char *db_path;
 
        if (brlock_db) {
                return;
@@ -325,15 +359,23 @@ void brl_init(bool read_only)
                tdb_flags |= TDB_SEQNUM;
        }
 
-       brlock_db = db_open(NULL, lock_path("brlock.tdb"),
+       db_path = lock_path("brlock.tdb");
+       if (db_path == NULL) {
+               DEBUG(0, ("out of memory!\n"));
+               return;
+       }
+
+       brlock_db = db_open(NULL, db_path,
                            SMB_OPEN_DATABASE_TDB_HASH_SIZE, tdb_flags,
                            read_only?O_RDONLY:(O_RDWR|O_CREAT), 0644,
                            DBWRAP_LOCK_ORDER_2, DBWRAP_FLAG_NONE);
        if (!brlock_db) {
                DEBUG(0,("Failed to open byte range locking database %s\n",
-                       lock_path("brlock.tdb")));
+                        db_path));
+               TALLOC_FREE(db_path);
                return;
        }
+       TALLOC_FREE(db_path);
 }
 
 /****************************************************************************
@@ -385,6 +427,11 @@ NTSTATUS brl_lock_windows_default(struct byte_range_lock *br_lck,
        for (i=0; i < br_lck->num_locks; i++) {
                /* Do any Windows or POSIX locks conflict ? */
                if (brl_conflict(&locks[i], plock)) {
+                       if (!serverid_exists(&locks[i].context.pid)) {
+                               locks[i].context.pid.pid = 0;
+                               br_lck->modified = true;
+                               continue;
+                       }
                        /* Remember who blocked us. */
                        plock->context.smblctx = locks[i].context.smblctx;
                        return brl_lock_failed(fsp,plock,blocking_lock);
@@ -789,6 +836,11 @@ static NTSTATUS brl_lock_posix(struct messaging_context *msg_ctx,
                if (curr_lock->lock_flav == WINDOWS_LOCK) {
                        /* Do any Windows flavour locks conflict ? */
                        if (brl_conflict(curr_lock, plock)) {
+                               if (!serverid_exists(&curr_lock->context.pid)) {
+                                       curr_lock->context.pid.pid = 0;
+                                       br_lck->modified = true;
+                                       continue;
+                               }
                                /* No games with error messages. */
                                TALLOC_FREE(tp);
                                /* Remember who blocked us. */
@@ -803,6 +855,11 @@ static NTSTATUS brl_lock_posix(struct messaging_context *msg_ctx,
 
                        /* POSIX conflict semantics are different. */
                        if (brl_conflict_posix(curr_lock, plock)) {
+                               if (!serverid_exists(&curr_lock->context.pid)) {
+                                       curr_lock->context.pid.pid = 0;
+                                       br_lck->modified = true;
+                                       continue;
+                               }
                                /* Can't block ourselves with POSIX locks. */
                                /* No games with error messages. */
                                TALLOC_FREE(tp);
@@ -933,12 +990,11 @@ static NTSTATUS brl_lock_posix(struct messaging_context *msg_ctx,
 NTSTATUS smb_vfs_call_brl_lock_windows(struct vfs_handle_struct *handle,
                                       struct byte_range_lock *br_lck,
                                       struct lock_struct *plock,
-                                      bool blocking_lock,
-                                      struct blocking_lock_record *blr)
+                                      bool blocking_lock)
 {
        VFS_FIND(brl_lock_windows);
        return handle->fns->brl_lock_windows_fn(handle, br_lck, plock,
-                                               blocking_lock, blr);
+                                               blocking_lock);
 }
 
 /****************************************************************************
@@ -954,8 +1010,7 @@ NTSTATUS brl_lock(struct messaging_context *msg_ctx,
                enum brl_type lock_type,
                enum brl_flavour lock_flav,
                bool blocking_lock,
-               uint64_t *psmblctx,
-               struct blocking_lock_record *blr)
+               uint64_t *psmblctx)
 {
        NTSTATUS ret;
        struct lock_struct lock;
@@ -966,23 +1021,20 @@ NTSTATUS brl_lock(struct messaging_context *msg_ctx,
        }
 #endif
 
-#ifdef DEVELOPER
-       /* Quieten valgrind on test. */
-       ZERO_STRUCT(lock);
-#endif
-
-       lock.context.smblctx = smblctx;
-       lock.context.pid = pid;
-       lock.context.tid = br_lck->fsp->conn->cnum;
-       lock.start = start;
-       lock.size = size;
-       lock.fnum = br_lck->fsp->fnum;
-       lock.lock_type = lock_type;
-       lock.lock_flav = lock_flav;
+       lock = (struct lock_struct) {
+               .context.smblctx = smblctx,
+               .context.pid = pid,
+               .context.tid = br_lck->fsp->conn->cnum,
+               .start = start,
+               .size = size,
+               .fnum = br_lck->fsp->fnum,
+               .lock_type = lock_type,
+               .lock_flav = lock_flav
+       };
 
        if (lock_flav == WINDOWS_LOCK) {
                ret = SMB_VFS_BRL_LOCK_WINDOWS(br_lck->fsp->conn, br_lck,
-                   &lock, blocking_lock, blr);
+                                              &lock, blocking_lock);
        } else {
                ret = brl_lock_posix(msg_ctx, br_lck, &lock);
        }
@@ -999,6 +1051,17 @@ NTSTATUS brl_lock(struct messaging_context *msg_ctx,
        return ret;
 }
 
+static void brl_delete_lock_struct(struct lock_struct *locks,
+                                  unsigned num_locks,
+                                  unsigned del_idx)
+{
+       if (del_idx >= num_locks) {
+               return;
+       }
+       memmove(&locks[del_idx], &locks[del_idx+1],
+               sizeof(*locks) * (num_locks - del_idx - 1));
+}
+
 /****************************************************************************
  Unlock a range of bytes - Windows semantics.
 ****************************************************************************/
@@ -1066,12 +1129,7 @@ bool brl_unlock_windows_default(struct messaging_context *msg_ctx,
   unlock_continue:
 #endif
 
-       /* Actually delete the lock. */
-       if (i < br_lck->num_locks - 1) {
-               memmove(&locks[i], &locks[i+1],
-                       sizeof(*locks)*((br_lck->num_locks-1) - i));
-       }
-
+       brl_delete_lock_struct(locks, br_lck->num_locks, i);
        br_lck->num_locks -= 1;
        br_lck->modified = True;
 
@@ -1312,34 +1370,30 @@ bool brl_unlock(struct messaging_context *msg_ctx,
 ****************************************************************************/
 
 bool brl_locktest(struct byte_range_lock *br_lck,
-               uint64_t smblctx,
-               struct server_id pid,
-               br_off start,
-               br_off size,
-               enum brl_type lock_type,
-               enum brl_flavour lock_flav)
+                 const struct lock_struct *rw_probe)
 {
        bool ret = True;
        unsigned int i;
-       struct lock_struct lock;
-       const struct lock_struct *locks = br_lck->lock_data;
+       struct lock_struct *locks = br_lck->lock_data;
        files_struct *fsp = br_lck->fsp;
 
-       lock.context.smblctx = smblctx;
-       lock.context.pid = pid;
-       lock.context.tid = br_lck->fsp->conn->cnum;
-       lock.start = start;
-       lock.size = size;
-       lock.fnum = fsp->fnum;
-       lock.lock_type = lock_type;
-       lock.lock_flav = lock_flav;
-
        /* Make sure existing locks don't conflict */
        for (i=0; i < br_lck->num_locks; i++) {
                /*
                 * Our own locks don't conflict.
                 */
-               if (brl_conflict_other(&locks[i], &lock)) {
+               if (brl_conflict_other(&locks[i], rw_probe)) {
+                       if (br_lck->record == NULL) {
+                               /* readonly */
+                               return false;
+                       }
+
+                       if (!serverid_exists(&locks[i].context.pid)) {
+                               locks[i].context.pid.pid = 0;
+                               br_lck->modified = true;
+                               continue;
+                       }
+
                        return False;
                }
        }
@@ -1350,12 +1404,22 @@ bool brl_locktest(struct byte_range_lock *br_lck,
         * This only conflicts with Windows locks, not POSIX locks.
         */
 
-       if(lp_posix_locking(fsp->conn->params) && (lock_flav == WINDOWS_LOCK)) {
+       if(lp_posix_locking(fsp->conn->params) &&
+          (rw_probe->lock_flav == WINDOWS_LOCK)) {
+               /*
+                * Make copies -- is_posix_locked might modify the values
+                */
+
+               br_off start = rw_probe->start;
+               br_off size = rw_probe->size;
+               enum brl_type lock_type = rw_probe->lock_type;
+
                ret = is_posix_locked(fsp, &start, &size, &lock_type, WINDOWS_LOCK);
 
-               DEBUG(10,("brl_locktest: posix start=%.0f len=%.0f %s for %s file %s\n",
-                       (double)start, (double)size, ret ? "locked" : "unlocked",
-                       fsp_fnum_dbg(fsp), fsp_str_dbg(fsp)));
+               DEBUG(10, ("brl_locktest: posix start=%ju len=%ju %s for %s "
+                          "file %s\n", (uintmax_t)start, (uintmax_t)size,
+                          ret ? "locked" : "unlocked",
+                          fsp_fnum_dbg(fsp), fsp_str_dbg(fsp)));
 
                /* We need to return the inverse of is_posix_locked. */
                ret = !ret;
@@ -1419,9 +1483,10 @@ NTSTATUS brl_lockquery(struct byte_range_lock *br_lck,
        if(lp_posix_locking(fsp->conn->params)) {
                bool ret = is_posix_locked(fsp, pstart, psize, plock_type, POSIX_LOCK);
 
-               DEBUG(10,("brl_lockquery: posix start=%.0f len=%.0f %s for %s file %s\n",
-                       (double)*pstart, (double)*psize, ret ? "locked" : "unlocked",
-                       fsp_fnum_dbg(fsp), fsp_str_dbg(fsp)));
+               DEBUG(10, ("brl_lockquery: posix start=%ju len=%ju %s for %s "
+                          "file %s\n", (uintmax_t)*pstart,
+                          (uintmax_t)*psize, ret ? "locked" : "unlocked",
+                          fsp_fnum_dbg(fsp), fsp_str_dbg(fsp)));
 
                if (ret) {
                        /* Hmmm. No clue what to set smblctx to - use -1. */
@@ -1436,11 +1501,10 @@ NTSTATUS brl_lockquery(struct byte_range_lock *br_lck,
 
 bool smb_vfs_call_brl_cancel_windows(struct vfs_handle_struct *handle,
                                     struct byte_range_lock *br_lck,
-                                    struct lock_struct *plock,
-                                    struct blocking_lock_record *blr)
+                                    struct lock_struct *plock)
 {
        VFS_FIND(brl_cancel_windows);
-       return handle->fns->brl_cancel_windows_fn(handle, br_lck, plock, blr);
+       return handle->fns->brl_cancel_windows_fn(handle, br_lck, plock);
 }
 
 /****************************************************************************
@@ -1451,8 +1515,7 @@ bool brl_lock_cancel(struct byte_range_lock *br_lck,
                struct server_id pid,
                br_off start,
                br_off size,
-               enum brl_flavour lock_flav,
-               struct blocking_lock_record *blr)
+               enum brl_flavour lock_flav)
 {
        bool ret;
        struct lock_struct lock;
@@ -1468,7 +1531,7 @@ bool brl_lock_cancel(struct byte_range_lock *br_lck,
 
        if (lock_flav == WINDOWS_LOCK) {
                ret = SMB_VFS_BRL_CANCEL_WINDOWS(br_lck->fsp->conn, br_lck,
-                   &lock, blr);
+                                                &lock);
        } else {
                ret = brl_lock_cancel_default(br_lck, &lock);
        }
@@ -1503,12 +1566,7 @@ bool brl_lock_cancel_default(struct byte_range_lock *br_lck,
                return False;
        }
 
-       if (i < br_lck->num_locks - 1) {
-               /* Found this particular pending lock - delete it */
-               memmove(&locks[i], &locks[i+1],
-                       sizeof(*locks)*((br_lck->num_locks-1) - i));
-       }
-
+       brl_delete_lock_struct(locks, br_lck->num_locks, i);
        br_lck->num_locks -= 1;
        br_lck->modified = True;
        return True;
@@ -1563,12 +1621,18 @@ void brl_close_fnum(struct messaging_context *msg_ctx,
 bool brl_mark_disconnected(struct files_struct *fsp)
 {
        uint32_t tid = fsp->conn->cnum;
-       uint64_t smblctx = fsp->op->global->open_persistent_id;
+       uint64_t smblctx;
        uint64_t fnum = fsp->fnum;
        unsigned int i;
        struct server_id self = messaging_server_id(fsp->conn->sconn->msg_ctx);
        struct byte_range_lock *br_lck = NULL;
 
+       if (fsp->op == NULL) {
+               return false;
+       }
+
+       smblctx = fsp->op->global->open_persistent_id;
+
        if (!fsp->op->global->durable) {
                return false;
        }
@@ -1623,12 +1687,18 @@ bool brl_mark_disconnected(struct files_struct *fsp)
 bool brl_reconnect_disconnected(struct files_struct *fsp)
 {
        uint32_t tid = fsp->conn->cnum;
-       uint64_t smblctx = fsp->op->global->open_persistent_id;
+       uint64_t smblctx;
        uint64_t fnum = fsp->fnum;
        unsigned int i;
        struct server_id self = messaging_server_id(fsp->conn->sconn->msg_ctx);
        struct byte_range_lock *br_lck = NULL;
 
+       if (fsp->op == NULL) {
+               return false;
+       }
+
+       smblctx = fsp->op->global->open_persistent_id;
+
        if (!fsp->op->global->durable) {
                return false;
        }
@@ -1638,7 +1708,6 @@ bool brl_reconnect_disconnected(struct files_struct *fsp)
         * and thereby remove our own (disconnected) entries but reactivate
         * them instead.
         */
-       fsp->lockdb_clean = true;
 
        br_lck = brl_get_locks(talloc_tos(), fsp);
        if (br_lck == NULL) {
@@ -1689,106 +1758,6 @@ bool brl_reconnect_disconnected(struct files_struct *fsp)
        return true;
 }
 
-/****************************************************************************
- Ensure this set of lock entries is valid.
-****************************************************************************/
-static bool validate_lock_entries(TALLOC_CTX *mem_ctx,
-                                 unsigned int *pnum_entries, struct lock_struct **pplocks,
-                                 bool keep_disconnected)
-{
-       unsigned int i;
-       unsigned int num_valid_entries = 0;
-       struct lock_struct *locks = *pplocks;
-       TALLOC_CTX *frame;
-       struct server_id *ids;
-       bool *exists;
-
-       if (*pnum_entries == 0) {
-               return true;
-       }
-
-       frame = talloc_stackframe();
-
-       ids = talloc_array(frame, struct server_id, *pnum_entries);
-       if (ids == NULL) {
-               DEBUG(0, ("validate_lock_entries: "
-                         "talloc_array(struct server_id, %u) failed\n",
-                         *pnum_entries));
-               talloc_free(frame);
-               return false;
-       }
-
-       exists = talloc_array(frame, bool, *pnum_entries);
-       if (exists == NULL) {
-               DEBUG(0, ("validate_lock_entries: "
-                         "talloc_array(bool, %u) failed\n",
-                         *pnum_entries));
-               talloc_free(frame);
-               return false;
-       }
-
-       for (i = 0; i < *pnum_entries; i++) {
-               ids[i] = locks[i].context.pid;
-       }
-
-       if (!serverids_exist(ids, *pnum_entries, exists)) {
-               DEBUG(3, ("validate_lock_entries: serverids_exists failed\n"));
-               talloc_free(frame);
-               return false;
-       }
-
-       for (i = 0; i < *pnum_entries; i++) {
-               if (exists[i]) {
-                       num_valid_entries++;
-                       continue;
-               }
-
-               if (keep_disconnected &&
-                   server_id_is_disconnected(&ids[i]))
-               {
-                       num_valid_entries++;
-                       continue;
-               }
-
-               /* This process no longer exists - mark this
-                  entry as invalid by zeroing it. */
-               ZERO_STRUCTP(&locks[i]);
-       }
-       TALLOC_FREE(frame);
-
-       if (num_valid_entries != *pnum_entries) {
-               struct lock_struct *new_lock_data = NULL;
-
-               if (num_valid_entries) {
-                       new_lock_data = talloc_array(
-                               mem_ctx, struct lock_struct,
-                               num_valid_entries);
-                       if (!new_lock_data) {
-                               DEBUG(3, ("malloc fail\n"));
-                               return False;
-                       }
-
-                       num_valid_entries = 0;
-                       for (i = 0; i < *pnum_entries; i++) {
-                               struct lock_struct *lock_data = &locks[i];
-                               if (lock_data->context.smblctx &&
-                                               lock_data->context.tid) {
-                                       /* Valid (nonzero) entry - copy it. */
-                                       memcpy(&new_lock_data[num_valid_entries],
-                                               lock_data, sizeof(struct lock_struct));
-                                       num_valid_entries++;
-                               }
-                       }
-               }
-
-               TALLOC_FREE(*pplocks);
-               *pplocks = new_lock_data;
-               *pnum_entries = num_valid_entries;
-       }
-
-       return True;
-}
-
 struct brl_forall_cb {
        void (*fn)(struct file_id id, struct server_id pid,
                   enum brl_type lock_type,
@@ -1810,7 +1779,6 @@ static int brl_traverse_fn(struct db_record *rec, void *state)
        struct file_id *key;
        unsigned int i;
        unsigned int num_locks = 0;
-       unsigned int orig_num_locks = 0;
        TDB_DATA dbkey;
        TDB_DATA value;
 
@@ -1827,25 +1795,7 @@ static int brl_traverse_fn(struct db_record *rec, void *state)
        }
 
        key = (struct file_id *)dbkey.dptr;
-       orig_num_locks = num_locks = value.dsize/sizeof(*locks);
-
-       /* Ensure the lock db is clean of entries from invalid processes. */
-
-       if (!validate_lock_entries(talloc_tos(), &num_locks, &locks, true)) {
-               TALLOC_FREE(locks);
-               return -1; /* Terminate traversal */
-       }
-
-       if (orig_num_locks != num_locks) {
-               if (num_locks) {
-                       TDB_DATA data;
-                       data.dptr = (uint8_t *)locks;
-                       data.dsize = num_locks*sizeof(struct lock_struct);
-                       dbwrap_record_store(rec, data, TDB_REPLACE);
-               } else {
-                       dbwrap_record_delete(rec);
-               }
-       }
+       num_locks = value.dsize/sizeof(*locks);
 
        if (cb->fn) {
                for ( i=0; i<num_locks; i++) {
@@ -1900,21 +1850,30 @@ int brl_forall(void (*fn)(struct file_id id, struct server_id pid,
 
 static void byte_range_lock_flush(struct byte_range_lock *br_lck)
 {
-       size_t data_len;
+       unsigned i;
+       struct lock_struct *locks = br_lck->lock_data;
+
        if (!br_lck->modified) {
                DEBUG(10, ("br_lck not modified\n"));
                goto done;
        }
 
-       data_len = br_lck->num_locks * sizeof(struct lock_struct);
+       i = 0;
 
-       if (br_lck->have_read_oplocks) {
-               data_len += 1;
+       while (i < br_lck->num_locks) {
+               if (locks[i].context.pid.pid == 0) {
+                       /*
+                        * Autocleanup, the process conflicted and does not
+                        * exist anymore.
+                        */
+                       locks[i] = locks[br_lck->num_locks-1];
+                       br_lck->num_locks -= 1;
+               } else {
+                       i += 1;
+               }
        }
 
-       DEBUG(10, ("data_len=%d\n", (int)data_len));
-
-       if (data_len == 0) {
+       if ((br_lck->num_locks == 0) && (br_lck->num_read_oplocks == 0)) {
                /* No locks - delete this entry. */
                NTSTATUS status = dbwrap_record_delete(br_lck->record);
                if (!NT_STATUS_IS_OK(status)) {
@@ -1923,19 +1882,20 @@ static void byte_range_lock_flush(struct byte_range_lock *br_lck)
                        smb_panic("Could not delete byte range lock entry");
                }
        } else {
+               size_t lock_len, data_len;
                TDB_DATA data;
                NTSTATUS status;
 
+               lock_len = br_lck->num_locks * sizeof(struct lock_struct);
+               data_len = lock_len + sizeof(br_lck->num_read_oplocks);
+
                data.dsize = data_len;
                data.dptr = talloc_array(talloc_tos(), uint8_t, data_len);
                SMB_ASSERT(data.dptr != NULL);
 
-               memcpy(data.dptr, br_lck->lock_data,
-                      br_lck->num_locks * sizeof(struct lock_struct));
-
-               if (br_lck->have_read_oplocks) {
-                       data.dptr[data_len-1] = 1;
-               }
+               memcpy(data.dptr, br_lck->lock_data, lock_len);
+               memcpy(data.dptr + lock_len, &br_lck->num_read_oplocks,
+                      sizeof(br_lck->num_read_oplocks));
 
                status = dbwrap_record_store(br_lck->record, data, TDB_REPLACE);
                TALLOC_FREE(data.dptr);
@@ -1958,6 +1918,32 @@ static int byte_range_lock_destructor(struct byte_range_lock *br_lck)
        return 0;
 }
 
+static bool brl_parse_data(struct byte_range_lock *br_lck, TDB_DATA data)
+{
+       size_t data_len;
+
+       if (data.dsize == 0) {
+               return true;
+       }
+       if (data.dsize % sizeof(struct lock_struct) !=
+           sizeof(br_lck->num_read_oplocks)) {
+               DEBUG(1, ("Invalid data size: %u\n", (unsigned)data.dsize));
+               return false;
+       }
+
+       br_lck->num_locks = data.dsize / sizeof(struct lock_struct);
+       data_len = br_lck->num_locks * sizeof(struct lock_struct);
+
+       br_lck->lock_data = talloc_memdup(br_lck, data.dptr, data_len);
+       if (br_lck->lock_data == NULL) {
+               DEBUG(1, ("talloc_memdup failed\n"));
+               return false;
+       }
+       memcpy(&br_lck->num_read_oplocks, data.dptr + data_len,
+              sizeof(br_lck->num_read_oplocks));
+       return true;
+}
+
 /*******************************************************************
  Fetch a set of byte range lock data from the database.
  Leave the record locked.
@@ -1967,16 +1953,14 @@ static int byte_range_lock_destructor(struct byte_range_lock *br_lck)
 struct byte_range_lock *brl_get_locks(TALLOC_CTX *mem_ctx, files_struct *fsp)
 {
        TDB_DATA key, data;
-       struct byte_range_lock *br_lck = talloc(mem_ctx, struct byte_range_lock);
+       struct byte_range_lock *br_lck;
 
+       br_lck = talloc_zero(mem_ctx, struct byte_range_lock);
        if (br_lck == NULL) {
                return NULL;
        }
 
        br_lck->fsp = fsp;
-       br_lck->num_locks = 0;
-       br_lck->have_read_oplocks = false;
-       br_lck->modified = False;
 
        key.dptr = (uint8 *)&fsp->file_id;
        key.dsize = sizeof(struct file_id);
@@ -1991,61 +1975,12 @@ struct byte_range_lock *brl_get_locks(TALLOC_CTX *mem_ctx, files_struct *fsp)
 
        data = dbwrap_record_get_value(br_lck->record);
 
-       br_lck->lock_data = NULL;
-
-       talloc_set_destructor(br_lck, byte_range_lock_destructor);
-
-       br_lck->num_locks = data.dsize / sizeof(struct lock_struct);
-
-       if (br_lck->num_locks != 0) {
-               br_lck->lock_data = talloc_array(
-                       br_lck, struct lock_struct, br_lck->num_locks);
-               if (br_lck->lock_data == NULL) {
-                       DEBUG(0, ("malloc failed\n"));
-                       TALLOC_FREE(br_lck);
-                       return NULL;
-               }
-
-               memcpy(br_lck->lock_data, data.dptr,
-                      talloc_get_size(br_lck->lock_data));
-       }
-
-       DEBUG(10, ("data.dsize=%d\n", (int)data.dsize));
-
-       if ((data.dsize % sizeof(struct lock_struct)) == 1) {
-               br_lck->have_read_oplocks = (data.dptr[data.dsize-1] == 1);
+       if (!brl_parse_data(br_lck, data)) {
+               TALLOC_FREE(br_lck);
+               return NULL;
        }
 
-       if (!fsp->lockdb_clean) {
-               int orig_num_locks = br_lck->num_locks;
-
-               /*
-                * This is the first time we access the byte range lock
-                * record with this fsp. Go through and ensure all entries
-                * are valid - remove any that don't.
-                * This makes the lockdb self cleaning at low cost.
-                *
-                * Note: Disconnected entries belong to disconnected
-                * durable handles. So at this point, we have a new
-                * handle on the file and the disconnected durable has
-                * already been closed (we are not a durable reconnect).
-                * So we need to clean the disconnected brl entry.
-                */
-
-               if (!validate_lock_entries(br_lck, &br_lck->num_locks,
-                                          &br_lck->lock_data, false)) {
-                       TALLOC_FREE(br_lck);
-                       return NULL;
-               }
-
-               /* Ensure invalid locks are cleaned up in the destructor. */
-               if (orig_num_locks != br_lck->num_locks) {
-                       br_lck->modified = True;
-               }
-
-               /* Mark the lockdb as "clean" as seen from this open file. */
-               fsp->lockdb_clean = True;
-       }
+       talloc_set_destructor(br_lck, byte_range_lock_destructor);
 
        if (DEBUGLEVEL >= 10) {
                unsigned int i;
@@ -2071,32 +2006,27 @@ static void brl_get_locks_readonly_parser(TDB_DATA key, TDB_DATA data,
 {
        struct brl_get_locks_readonly_state *state =
                (struct brl_get_locks_readonly_state *)private_data;
-       struct byte_range_lock *br_lock;
+       struct byte_range_lock *br_lck;
 
-       br_lock = talloc_pooled_object(
+       br_lck = talloc_pooled_object(
                state->mem_ctx, struct byte_range_lock, 1, data.dsize);
-       if (br_lock == NULL) {
+       if (br_lck == NULL) {
                *state->br_lock = NULL;
                return;
        }
-       br_lock->lock_data = (struct lock_struct *)talloc_memdup(
-               br_lock, data.dptr, data.dsize);
-       br_lock->num_locks = data.dsize / sizeof(struct lock_struct);
-
-       if ((data.dsize % sizeof(struct lock_struct)) == 1) {
-               br_lock->have_read_oplocks = (data.dptr[data.dsize-1] == 1);
+       *br_lck = (struct byte_range_lock) {};
+       if (!brl_parse_data(br_lck, data)) {
+               *state->br_lock = NULL;
+               return;
        }
-
-       DEBUG(10, ("Got %d bytes, have_read_oplocks: %s\n", (int)data.dsize,
-                  br_lock->have_read_oplocks ? "true" : "false"));
-
-       *state->br_lock = br_lock;
+       *state->br_lock = br_lck;
 }
 
 struct byte_range_lock *brl_get_locks_readonly(files_struct *fsp)
 {
        struct byte_range_lock *br_lock = NULL;
-       struct byte_range_lock *rw = NULL;
+       struct brl_get_locks_readonly_state state;
+       NTSTATUS status;
 
        DEBUG(10, ("seqnum=%d, fsp->brlock_seqnum=%d\n",
                   dbwrap_get_seqnum(brlock_db), fsp->brlock_seqnum));
@@ -2110,58 +2040,39 @@ struct byte_range_lock *brl_get_locks_readonly(files_struct *fsp)
                return fsp->brlock_rec;
        }
 
-       if (!fsp->lockdb_clean) {
-               /*
-                * Fetch the record in R/W mode to give validate_lock_entries
-                * a chance to kick in once.
-                */
-               rw = brl_get_locks(talloc_tos(), fsp);
-               if (rw == NULL) {
-                       return NULL;
-               }
-               fsp->lockdb_clean = true;
-       }
+       /*
+        * Parse the record fresh from the database
+        */
+
+       state.mem_ctx = fsp;
+       state.br_lock = &br_lock;
 
-       if (rw != NULL) {
-               size_t lock_data_size;
+       status = dbwrap_parse_record(
+               brlock_db,
+               make_tdb_data((uint8_t *)&fsp->file_id,
+                             sizeof(fsp->file_id)),
+               brl_get_locks_readonly_parser, &state);
 
+       if (NT_STATUS_EQUAL(status,NT_STATUS_NOT_FOUND)) {
                /*
-                * Make a copy of the already retrieved and sanitized rw record
+                * No locks on this file. Return an empty br_lock.
                 */
-               lock_data_size = rw->num_locks * sizeof(struct lock_struct);
-               br_lock = talloc_pooled_object(
-                       fsp, struct byte_range_lock, 1, lock_data_size);
+               br_lock = talloc(fsp, struct byte_range_lock);
                if (br_lock == NULL) {
-                       goto fail;
+                       return NULL;
                }
-               br_lock->have_read_oplocks = rw->have_read_oplocks;
-               br_lock->num_locks = rw->num_locks;
-               br_lock->lock_data = (struct lock_struct *)talloc_memdup(
-                       br_lock, rw->lock_data, lock_data_size);
-       } else {
-               struct brl_get_locks_readonly_state state;
-               NTSTATUS status;
-
-               /*
-                * Parse the record fresh from the database
-                */
 
-               state.mem_ctx = fsp;
-               state.br_lock = &br_lock;
+               br_lock->num_read_oplocks = 0;
+               br_lock->num_locks = 0;
+               br_lock->lock_data = NULL;
 
-               status = dbwrap_parse_record(
-                       brlock_db,
-                       make_tdb_data((uint8_t *)&fsp->file_id,
-                                     sizeof(fsp->file_id)),
-                       brl_get_locks_readonly_parser, &state);
-               if (!NT_STATUS_IS_OK(status)) {
-                       DEBUG(3, ("Could not parse byte range lock record: "
-                                 "%s\n", nt_errstr(status)));
-                       goto fail;
-               }
-               if (br_lock == NULL) {
-                       goto fail;
-               }
+       } else if (!NT_STATUS_IS_OK(status)) {
+               DEBUG(3, ("Could not parse byte range lock record: "
+                         "%s\n", nt_errstr(status)));
+               return NULL;
+       }
+       if (br_lock == NULL) {
+               return NULL;
        }
 
        br_lock->fsp = fsp;
@@ -2185,8 +2096,6 @@ struct byte_range_lock *brl_get_locks_readonly(files_struct *fsp)
                fsp->brlock_seqnum = dbwrap_get_seqnum(brlock_db);
        }
 
-fail:
-       TALLOC_FREE(rw);
        return br_lock;
 }