1 /* 2 * Server-side XDR for NFSv4 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 * 35 * TODO: Neil Brown made the following observation: We currently 36 * initially reserve NFSD_BUFSIZE space on the transmit queue and 37 * never release any of that until the request is complete. 38 * It would be good to calculate a new maximum response size while 39 * decoding the COMPOUND, and call svc_reserve with this number 40 * at the end of nfs4svc_decode_compoundargs. 41 */ 42 43 #include <linux/slab.h> 44 #include <linux/namei.h> 45 #include <linux/statfs.h> 46 #include <linux/utsname.h> 47 #include <linux/sunrpc/svcauth_gss.h> 48 49 #include "idmap.h" 50 #include "acl.h" 51 #include "xdr4.h" 52 #include "vfs.h" 53 54 55 #define NFSDDBG_FACILITY NFSDDBG_XDR 56 57 /* 58 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing 59 * directory in order to indicate to the client that a filesystem boundary is present 60 * We use a fixed fsid for a referral 61 */ 62 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL 63 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL 64 65 static __be32 66 check_filename(char *str, int len, __be32 err) 67 { 68 int i; 69 70 if (len == 0) 71 return nfserr_inval; 72 if (isdotent(str, len)) 73 return err; 74 for (i = 0; i < len; i++) 75 if (str[i] == '/') 76 return err; 77 return 0; 78 } 79 80 #define DECODE_HEAD \ 81 __be32 *p; \ 82 __be32 status 83 #define DECODE_TAIL \ 84 status = 0; \ 85 out: \ 86 return status; \ 87 xdr_error: \ 88 dprintk("NFSD: xdr error (%s:%d)\n", \ 89 __FILE__, __LINE__); \ 90 status = nfserr_bad_xdr; \ 91 goto out 92 93 #define READ32(x) (x) = ntohl(*p++) 94 #define READ64(x) do { \ 95 (x) = (u64)ntohl(*p++) << 32; \ 96 (x) |= ntohl(*p++); \ 97 } while (0) 98 #define READTIME(x) do { \ 99 p++; \ 100 (x) = ntohl(*p++); \ 101 p++; \ 102 } while (0) 103 #define READMEM(x,nbytes) do { \ 104 x = (char *)p; \ 105 p += XDR_QUADLEN(nbytes); \ 106 } while (0) 107 #define SAVEMEM(x,nbytes) do { \ 108 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \ 109 savemem(argp, p, nbytes) : \ 110 (char *)p)) { \ 111 dprintk("NFSD: xdr error (%s:%d)\n", \ 112 __FILE__, __LINE__); \ 113 goto xdr_error; \ 114 } \ 115 p += XDR_QUADLEN(nbytes); \ 116 } while (0) 117 #define COPYMEM(x,nbytes) do { \ 118 memcpy((x), p, nbytes); \ 119 p += XDR_QUADLEN(nbytes); \ 120 } while (0) 121 122 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */ 123 #define READ_BUF(nbytes) do { \ 124 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \ 125 p = argp->p; \ 126 argp->p += XDR_QUADLEN(nbytes); \ 127 } else if (!(p = read_buf(argp, nbytes))) { \ 128 dprintk("NFSD: xdr error (%s:%d)\n", \ 129 __FILE__, __LINE__); \ 130 goto xdr_error; \ 131 } \ 132 } while (0) 133 134 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes) 135 { 136 /* We want more bytes than seem to be available. 137 * Maybe we need a new page, maybe we have just run out 138 */ 139 unsigned int avail = (char *)argp->end - (char *)argp->p; 140 __be32 *p; 141 if (avail + argp->pagelen < nbytes) 142 return NULL; 143 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */ 144 return NULL; 145 /* ok, we can do it with the current plus the next page */ 146 if (nbytes <= sizeof(argp->tmp)) 147 p = argp->tmp; 148 else { 149 kfree(argp->tmpp); 150 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL); 151 if (!p) 152 return NULL; 153 154 } 155 /* 156 * The following memcpy is safe because read_buf is always 157 * called with nbytes > avail, and the two cases above both 158 * guarantee p points to at least nbytes bytes. 159 */ 160 memcpy(p, argp->p, avail); 161 /* step to next page */ 162 argp->p = page_address(argp->pagelist[0]); 163 argp->pagelist++; 164 if (argp->pagelen < PAGE_SIZE) { 165 argp->end = argp->p + (argp->pagelen>>2); 166 argp->pagelen = 0; 167 } else { 168 argp->end = argp->p + (PAGE_SIZE>>2); 169 argp->pagelen -= PAGE_SIZE; 170 } 171 memcpy(((char*)p)+avail, argp->p, (nbytes - avail)); 172 argp->p += XDR_QUADLEN(nbytes - avail); 173 return p; 174 } 175 176 static int zero_clientid(clientid_t *clid) 177 { 178 return (clid->cl_boot == 0) && (clid->cl_id == 0); 179 } 180 181 static int 182 defer_free(struct nfsd4_compoundargs *argp, 183 void (*release)(const void *), void *p) 184 { 185 struct tmpbuf *tb; 186 187 tb = kmalloc(sizeof(*tb), GFP_KERNEL); 188 if (!tb) 189 return -ENOMEM; 190 tb->buf = p; 191 tb->release = release; 192 tb->next = argp->to_free; 193 argp->to_free = tb; 194 return 0; 195 } 196 197 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes) 198 { 199 if (p == argp->tmp) { 200 p = kmalloc(nbytes, GFP_KERNEL); 201 if (!p) 202 return NULL; 203 memcpy(p, argp->tmp, nbytes); 204 } else { 205 BUG_ON(p != argp->tmpp); 206 argp->tmpp = NULL; 207 } 208 if (defer_free(argp, kfree, p)) { 209 kfree(p); 210 return NULL; 211 } else 212 return (char *)p; 213 } 214 215 static __be32 216 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval) 217 { 218 u32 bmlen; 219 DECODE_HEAD; 220 221 bmval[0] = 0; 222 bmval[1] = 0; 223 bmval[2] = 0; 224 225 READ_BUF(4); 226 READ32(bmlen); 227 if (bmlen > 1000) 228 goto xdr_error; 229 230 READ_BUF(bmlen << 2); 231 if (bmlen > 0) 232 READ32(bmval[0]); 233 if (bmlen > 1) 234 READ32(bmval[1]); 235 if (bmlen > 2) 236 READ32(bmval[2]); 237 238 DECODE_TAIL; 239 } 240 241 static __be32 242 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval, 243 struct iattr *iattr, struct nfs4_acl **acl) 244 { 245 int expected_len, len = 0; 246 u32 dummy32; 247 char *buf; 248 int host_err; 249 250 DECODE_HEAD; 251 iattr->ia_valid = 0; 252 if ((status = nfsd4_decode_bitmap(argp, bmval))) 253 return status; 254 255 READ_BUF(4); 256 READ32(expected_len); 257 258 if (bmval[0] & FATTR4_WORD0_SIZE) { 259 READ_BUF(8); 260 len += 8; 261 READ64(iattr->ia_size); 262 iattr->ia_valid |= ATTR_SIZE; 263 } 264 if (bmval[0] & FATTR4_WORD0_ACL) { 265 int nace; 266 struct nfs4_ace *ace; 267 268 READ_BUF(4); len += 4; 269 READ32(nace); 270 271 if (nace > NFS4_ACL_MAX) 272 return nfserr_resource; 273 274 *acl = nfs4_acl_new(nace); 275 if (*acl == NULL) { 276 host_err = -ENOMEM; 277 goto out_nfserr; 278 } 279 defer_free(argp, kfree, *acl); 280 281 (*acl)->naces = nace; 282 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) { 283 READ_BUF(16); len += 16; 284 READ32(ace->type); 285 READ32(ace->flag); 286 READ32(ace->access_mask); 287 READ32(dummy32); 288 READ_BUF(dummy32); 289 len += XDR_QUADLEN(dummy32) << 2; 290 READMEM(buf, dummy32); 291 ace->whotype = nfs4_acl_get_whotype(buf, dummy32); 292 status = nfs_ok; 293 if (ace->whotype != NFS4_ACL_WHO_NAMED) 294 ace->who = 0; 295 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 296 status = nfsd_map_name_to_gid(argp->rqstp, 297 buf, dummy32, &ace->who); 298 else 299 status = nfsd_map_name_to_uid(argp->rqstp, 300 buf, dummy32, &ace->who); 301 if (status) 302 return status; 303 } 304 } else 305 *acl = NULL; 306 if (bmval[1] & FATTR4_WORD1_MODE) { 307 READ_BUF(4); 308 len += 4; 309 READ32(iattr->ia_mode); 310 iattr->ia_mode &= (S_IFMT | S_IALLUGO); 311 iattr->ia_valid |= ATTR_MODE; 312 } 313 if (bmval[1] & FATTR4_WORD1_OWNER) { 314 READ_BUF(4); 315 len += 4; 316 READ32(dummy32); 317 READ_BUF(dummy32); 318 len += (XDR_QUADLEN(dummy32) << 2); 319 READMEM(buf, dummy32); 320 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid))) 321 return status; 322 iattr->ia_valid |= ATTR_UID; 323 } 324 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) { 325 READ_BUF(4); 326 len += 4; 327 READ32(dummy32); 328 READ_BUF(dummy32); 329 len += (XDR_QUADLEN(dummy32) << 2); 330 READMEM(buf, dummy32); 331 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid))) 332 return status; 333 iattr->ia_valid |= ATTR_GID; 334 } 335 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) { 336 READ_BUF(4); 337 len += 4; 338 READ32(dummy32); 339 switch (dummy32) { 340 case NFS4_SET_TO_CLIENT_TIME: 341 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 342 all 32 bits of 'nseconds'. */ 343 READ_BUF(12); 344 len += 12; 345 READ32(dummy32); 346 if (dummy32) 347 return nfserr_inval; 348 READ32(iattr->ia_atime.tv_sec); 349 READ32(iattr->ia_atime.tv_nsec); 350 if (iattr->ia_atime.tv_nsec >= (u32)1000000000) 351 return nfserr_inval; 352 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET); 353 break; 354 case NFS4_SET_TO_SERVER_TIME: 355 iattr->ia_valid |= ATTR_ATIME; 356 break; 357 default: 358 goto xdr_error; 359 } 360 } 361 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) { 362 READ_BUF(4); 363 len += 4; 364 READ32(dummy32); 365 switch (dummy32) { 366 case NFS4_SET_TO_CLIENT_TIME: 367 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 368 all 32 bits of 'nseconds'. */ 369 READ_BUF(12); 370 len += 12; 371 READ32(dummy32); 372 if (dummy32) 373 return nfserr_inval; 374 READ32(iattr->ia_mtime.tv_sec); 375 READ32(iattr->ia_mtime.tv_nsec); 376 if (iattr->ia_mtime.tv_nsec >= (u32)1000000000) 377 return nfserr_inval; 378 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET); 379 break; 380 case NFS4_SET_TO_SERVER_TIME: 381 iattr->ia_valid |= ATTR_MTIME; 382 break; 383 default: 384 goto xdr_error; 385 } 386 } 387 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0 388 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1 389 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) 390 READ_BUF(expected_len - len); 391 else if (len != expected_len) 392 goto xdr_error; 393 394 DECODE_TAIL; 395 396 out_nfserr: 397 status = nfserrno(host_err); 398 goto out; 399 } 400 401 static __be32 402 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid) 403 { 404 DECODE_HEAD; 405 406 READ_BUF(sizeof(stateid_t)); 407 READ32(sid->si_generation); 408 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 409 410 DECODE_TAIL; 411 } 412 413 static __be32 414 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access) 415 { 416 DECODE_HEAD; 417 418 READ_BUF(4); 419 READ32(access->ac_req_access); 420 421 DECODE_TAIL; 422 } 423 424 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts) 425 { 426 DECODE_HEAD; 427 428 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8); 429 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 430 READ32(bcts->dir); 431 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker 432 * could help us figure out we should be using it. */ 433 DECODE_TAIL; 434 } 435 436 static __be32 437 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close) 438 { 439 DECODE_HEAD; 440 441 close->cl_stateowner = NULL; 442 READ_BUF(4); 443 READ32(close->cl_seqid); 444 return nfsd4_decode_stateid(argp, &close->cl_stateid); 445 446 DECODE_TAIL; 447 } 448 449 450 static __be32 451 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit) 452 { 453 DECODE_HEAD; 454 455 READ_BUF(12); 456 READ64(commit->co_offset); 457 READ32(commit->co_count); 458 459 DECODE_TAIL; 460 } 461 462 static __be32 463 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create) 464 { 465 DECODE_HEAD; 466 467 READ_BUF(4); 468 READ32(create->cr_type); 469 switch (create->cr_type) { 470 case NF4LNK: 471 READ_BUF(4); 472 READ32(create->cr_linklen); 473 READ_BUF(create->cr_linklen); 474 SAVEMEM(create->cr_linkname, create->cr_linklen); 475 break; 476 case NF4BLK: 477 case NF4CHR: 478 READ_BUF(8); 479 READ32(create->cr_specdata1); 480 READ32(create->cr_specdata2); 481 break; 482 case NF4SOCK: 483 case NF4FIFO: 484 case NF4DIR: 485 default: 486 break; 487 } 488 489 READ_BUF(4); 490 READ32(create->cr_namelen); 491 READ_BUF(create->cr_namelen); 492 SAVEMEM(create->cr_name, create->cr_namelen); 493 if ((status = check_filename(create->cr_name, create->cr_namelen, nfserr_inval))) 494 return status; 495 496 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr, 497 &create->cr_acl); 498 if (status) 499 goto out; 500 501 DECODE_TAIL; 502 } 503 504 static inline __be32 505 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr) 506 { 507 return nfsd4_decode_stateid(argp, &dr->dr_stateid); 508 } 509 510 static inline __be32 511 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr) 512 { 513 return nfsd4_decode_bitmap(argp, getattr->ga_bmval); 514 } 515 516 static __be32 517 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link) 518 { 519 DECODE_HEAD; 520 521 READ_BUF(4); 522 READ32(link->li_namelen); 523 READ_BUF(link->li_namelen); 524 SAVEMEM(link->li_name, link->li_namelen); 525 if ((status = check_filename(link->li_name, link->li_namelen, nfserr_inval))) 526 return status; 527 528 DECODE_TAIL; 529 } 530 531 static __be32 532 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock) 533 { 534 DECODE_HEAD; 535 536 lock->lk_replay_owner = NULL; 537 /* 538 * type, reclaim(boolean), offset, length, new_lock_owner(boolean) 539 */ 540 READ_BUF(28); 541 READ32(lock->lk_type); 542 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT)) 543 goto xdr_error; 544 READ32(lock->lk_reclaim); 545 READ64(lock->lk_offset); 546 READ64(lock->lk_length); 547 READ32(lock->lk_is_new); 548 549 if (lock->lk_is_new) { 550 READ_BUF(4); 551 READ32(lock->lk_new_open_seqid); 552 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid); 553 if (status) 554 return status; 555 READ_BUF(8 + sizeof(clientid_t)); 556 READ32(lock->lk_new_lock_seqid); 557 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t)); 558 READ32(lock->lk_new_owner.len); 559 READ_BUF(lock->lk_new_owner.len); 560 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len); 561 } else { 562 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid); 563 if (status) 564 return status; 565 READ_BUF(4); 566 READ32(lock->lk_old_lock_seqid); 567 } 568 569 DECODE_TAIL; 570 } 571 572 static __be32 573 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt) 574 { 575 DECODE_HEAD; 576 577 READ_BUF(32); 578 READ32(lockt->lt_type); 579 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT)) 580 goto xdr_error; 581 READ64(lockt->lt_offset); 582 READ64(lockt->lt_length); 583 COPYMEM(&lockt->lt_clientid, 8); 584 READ32(lockt->lt_owner.len); 585 READ_BUF(lockt->lt_owner.len); 586 READMEM(lockt->lt_owner.data, lockt->lt_owner.len); 587 588 DECODE_TAIL; 589 } 590 591 static __be32 592 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku) 593 { 594 DECODE_HEAD; 595 596 locku->lu_stateowner = NULL; 597 READ_BUF(8); 598 READ32(locku->lu_type); 599 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT)) 600 goto xdr_error; 601 READ32(locku->lu_seqid); 602 status = nfsd4_decode_stateid(argp, &locku->lu_stateid); 603 if (status) 604 return status; 605 READ_BUF(16); 606 READ64(locku->lu_offset); 607 READ64(locku->lu_length); 608 609 DECODE_TAIL; 610 } 611 612 static __be32 613 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup) 614 { 615 DECODE_HEAD; 616 617 READ_BUF(4); 618 READ32(lookup->lo_len); 619 READ_BUF(lookup->lo_len); 620 SAVEMEM(lookup->lo_name, lookup->lo_len); 621 if ((status = check_filename(lookup->lo_name, lookup->lo_len, nfserr_noent))) 622 return status; 623 624 DECODE_TAIL; 625 } 626 627 static __be32 628 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open) 629 { 630 DECODE_HEAD; 631 632 memset(open->op_bmval, 0, sizeof(open->op_bmval)); 633 open->op_iattr.ia_valid = 0; 634 open->op_stateowner = NULL; 635 636 /* seqid, share_access, share_deny, clientid, ownerlen */ 637 READ_BUF(16 + sizeof(clientid_t)); 638 READ32(open->op_seqid); 639 READ32(open->op_share_access); 640 READ32(open->op_share_deny); 641 COPYMEM(&open->op_clientid, sizeof(clientid_t)); 642 READ32(open->op_owner.len); 643 644 /* owner, open_flag */ 645 READ_BUF(open->op_owner.len + 4); 646 SAVEMEM(open->op_owner.data, open->op_owner.len); 647 READ32(open->op_create); 648 switch (open->op_create) { 649 case NFS4_OPEN_NOCREATE: 650 break; 651 case NFS4_OPEN_CREATE: 652 READ_BUF(4); 653 READ32(open->op_createmode); 654 switch (open->op_createmode) { 655 case NFS4_CREATE_UNCHECKED: 656 case NFS4_CREATE_GUARDED: 657 status = nfsd4_decode_fattr(argp, open->op_bmval, 658 &open->op_iattr, &open->op_acl); 659 if (status) 660 goto out; 661 break; 662 case NFS4_CREATE_EXCLUSIVE: 663 READ_BUF(8); 664 COPYMEM(open->op_verf.data, 8); 665 break; 666 case NFS4_CREATE_EXCLUSIVE4_1: 667 if (argp->minorversion < 1) 668 goto xdr_error; 669 READ_BUF(8); 670 COPYMEM(open->op_verf.data, 8); 671 status = nfsd4_decode_fattr(argp, open->op_bmval, 672 &open->op_iattr, &open->op_acl); 673 if (status) 674 goto out; 675 break; 676 default: 677 goto xdr_error; 678 } 679 break; 680 default: 681 goto xdr_error; 682 } 683 684 /* open_claim */ 685 READ_BUF(4); 686 READ32(open->op_claim_type); 687 switch (open->op_claim_type) { 688 case NFS4_OPEN_CLAIM_NULL: 689 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 690 READ_BUF(4); 691 READ32(open->op_fname.len); 692 READ_BUF(open->op_fname.len); 693 SAVEMEM(open->op_fname.data, open->op_fname.len); 694 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval))) 695 return status; 696 break; 697 case NFS4_OPEN_CLAIM_PREVIOUS: 698 READ_BUF(4); 699 READ32(open->op_delegate_type); 700 break; 701 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 702 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 703 if (status) 704 return status; 705 READ_BUF(4); 706 READ32(open->op_fname.len); 707 READ_BUF(open->op_fname.len); 708 SAVEMEM(open->op_fname.data, open->op_fname.len); 709 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval))) 710 return status; 711 break; 712 default: 713 goto xdr_error; 714 } 715 716 DECODE_TAIL; 717 } 718 719 static __be32 720 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf) 721 { 722 DECODE_HEAD; 723 724 open_conf->oc_stateowner = NULL; 725 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid); 726 if (status) 727 return status; 728 READ_BUF(4); 729 READ32(open_conf->oc_seqid); 730 731 DECODE_TAIL; 732 } 733 734 static __be32 735 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down) 736 { 737 DECODE_HEAD; 738 739 open_down->od_stateowner = NULL; 740 status = nfsd4_decode_stateid(argp, &open_down->od_stateid); 741 if (status) 742 return status; 743 READ_BUF(12); 744 READ32(open_down->od_seqid); 745 READ32(open_down->od_share_access); 746 READ32(open_down->od_share_deny); 747 748 DECODE_TAIL; 749 } 750 751 static __be32 752 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh) 753 { 754 DECODE_HEAD; 755 756 READ_BUF(4); 757 READ32(putfh->pf_fhlen); 758 if (putfh->pf_fhlen > NFS4_FHSIZE) 759 goto xdr_error; 760 READ_BUF(putfh->pf_fhlen); 761 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen); 762 763 DECODE_TAIL; 764 } 765 766 static __be32 767 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) 768 { 769 DECODE_HEAD; 770 771 status = nfsd4_decode_stateid(argp, &read->rd_stateid); 772 if (status) 773 return status; 774 READ_BUF(12); 775 READ64(read->rd_offset); 776 READ32(read->rd_length); 777 778 DECODE_TAIL; 779 } 780 781 static __be32 782 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) 783 { 784 DECODE_HEAD; 785 786 READ_BUF(24); 787 READ64(readdir->rd_cookie); 788 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); 789 READ32(readdir->rd_dircount); /* just in case you needed a useless field... */ 790 READ32(readdir->rd_maxcount); 791 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval))) 792 goto out; 793 794 DECODE_TAIL; 795 } 796 797 static __be32 798 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove) 799 { 800 DECODE_HEAD; 801 802 READ_BUF(4); 803 READ32(remove->rm_namelen); 804 READ_BUF(remove->rm_namelen); 805 SAVEMEM(remove->rm_name, remove->rm_namelen); 806 if ((status = check_filename(remove->rm_name, remove->rm_namelen, nfserr_noent))) 807 return status; 808 809 DECODE_TAIL; 810 } 811 812 static __be32 813 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename) 814 { 815 DECODE_HEAD; 816 817 READ_BUF(4); 818 READ32(rename->rn_snamelen); 819 READ_BUF(rename->rn_snamelen + 4); 820 SAVEMEM(rename->rn_sname, rename->rn_snamelen); 821 READ32(rename->rn_tnamelen); 822 READ_BUF(rename->rn_tnamelen); 823 SAVEMEM(rename->rn_tname, rename->rn_tnamelen); 824 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen, nfserr_noent))) 825 return status; 826 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen, nfserr_inval))) 827 return status; 828 829 DECODE_TAIL; 830 } 831 832 static __be32 833 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid) 834 { 835 DECODE_HEAD; 836 837 READ_BUF(sizeof(clientid_t)); 838 COPYMEM(clientid, sizeof(clientid_t)); 839 840 DECODE_TAIL; 841 } 842 843 static __be32 844 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp, 845 struct nfsd4_secinfo *secinfo) 846 { 847 DECODE_HEAD; 848 849 READ_BUF(4); 850 READ32(secinfo->si_namelen); 851 READ_BUF(secinfo->si_namelen); 852 SAVEMEM(secinfo->si_name, secinfo->si_namelen); 853 status = check_filename(secinfo->si_name, secinfo->si_namelen, 854 nfserr_noent); 855 if (status) 856 return status; 857 DECODE_TAIL; 858 } 859 860 static __be32 861 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp, 862 struct nfsd4_secinfo_no_name *sin) 863 { 864 DECODE_HEAD; 865 866 READ_BUF(4); 867 READ32(sin->sin_style); 868 DECODE_TAIL; 869 } 870 871 static __be32 872 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr) 873 { 874 __be32 status; 875 876 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid); 877 if (status) 878 return status; 879 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr, 880 &setattr->sa_acl); 881 } 882 883 static __be32 884 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid) 885 { 886 DECODE_HEAD; 887 888 READ_BUF(12); 889 COPYMEM(setclientid->se_verf.data, 8); 890 READ32(setclientid->se_namelen); 891 892 READ_BUF(setclientid->se_namelen + 8); 893 SAVEMEM(setclientid->se_name, setclientid->se_namelen); 894 READ32(setclientid->se_callback_prog); 895 READ32(setclientid->se_callback_netid_len); 896 897 READ_BUF(setclientid->se_callback_netid_len + 4); 898 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len); 899 READ32(setclientid->se_callback_addr_len); 900 901 READ_BUF(setclientid->se_callback_addr_len + 4); 902 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len); 903 READ32(setclientid->se_callback_ident); 904 905 DECODE_TAIL; 906 } 907 908 static __be32 909 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c) 910 { 911 DECODE_HEAD; 912 913 READ_BUF(8 + sizeof(nfs4_verifier)); 914 COPYMEM(&scd_c->sc_clientid, 8); 915 COPYMEM(&scd_c->sc_confirm, sizeof(nfs4_verifier)); 916 917 DECODE_TAIL; 918 } 919 920 /* Also used for NVERIFY */ 921 static __be32 922 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify) 923 { 924 #if 0 925 struct nfsd4_compoundargs save = { 926 .p = argp->p, 927 .end = argp->end, 928 .rqstp = argp->rqstp, 929 }; 930 u32 ve_bmval[2]; 931 struct iattr ve_iattr; /* request */ 932 struct nfs4_acl *ve_acl; /* request */ 933 #endif 934 DECODE_HEAD; 935 936 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval))) 937 goto out; 938 939 /* For convenience's sake, we compare raw xdr'd attributes in 940 * nfsd4_proc_verify; however we still decode here just to return 941 * correct error in case of bad xdr. */ 942 #if 0 943 status = nfsd4_decode_fattr(ve_bmval, &ve_iattr, &ve_acl); 944 if (status == nfserr_inval) { 945 status = nfserrno(status); 946 goto out; 947 } 948 #endif 949 READ_BUF(4); 950 READ32(verify->ve_attrlen); 951 READ_BUF(verify->ve_attrlen); 952 SAVEMEM(verify->ve_attrval, verify->ve_attrlen); 953 954 DECODE_TAIL; 955 } 956 957 static __be32 958 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write) 959 { 960 int avail; 961 int v; 962 int len; 963 DECODE_HEAD; 964 965 status = nfsd4_decode_stateid(argp, &write->wr_stateid); 966 if (status) 967 return status; 968 READ_BUF(16); 969 READ64(write->wr_offset); 970 READ32(write->wr_stable_how); 971 if (write->wr_stable_how > 2) 972 goto xdr_error; 973 READ32(write->wr_buflen); 974 975 /* Sorry .. no magic macros for this.. * 976 * READ_BUF(write->wr_buflen); 977 * SAVEMEM(write->wr_buf, write->wr_buflen); 978 */ 979 avail = (char*)argp->end - (char*)argp->p; 980 if (avail + argp->pagelen < write->wr_buflen) { 981 dprintk("NFSD: xdr error (%s:%d)\n", 982 __FILE__, __LINE__); 983 goto xdr_error; 984 } 985 argp->rqstp->rq_vec[0].iov_base = p; 986 argp->rqstp->rq_vec[0].iov_len = avail; 987 v = 0; 988 len = write->wr_buflen; 989 while (len > argp->rqstp->rq_vec[v].iov_len) { 990 len -= argp->rqstp->rq_vec[v].iov_len; 991 v++; 992 argp->rqstp->rq_vec[v].iov_base = page_address(argp->pagelist[0]); 993 argp->pagelist++; 994 if (argp->pagelen >= PAGE_SIZE) { 995 argp->rqstp->rq_vec[v].iov_len = PAGE_SIZE; 996 argp->pagelen -= PAGE_SIZE; 997 } else { 998 argp->rqstp->rq_vec[v].iov_len = argp->pagelen; 999 argp->pagelen -= len; 1000 } 1001 } 1002 argp->end = (__be32*) (argp->rqstp->rq_vec[v].iov_base + argp->rqstp->rq_vec[v].iov_len); 1003 argp->p = (__be32*) (argp->rqstp->rq_vec[v].iov_base + (XDR_QUADLEN(len) << 2)); 1004 argp->rqstp->rq_vec[v].iov_len = len; 1005 write->wr_vlen = v+1; 1006 1007 DECODE_TAIL; 1008 } 1009 1010 static __be32 1011 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner) 1012 { 1013 DECODE_HEAD; 1014 1015 READ_BUF(12); 1016 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t)); 1017 READ32(rlockowner->rl_owner.len); 1018 READ_BUF(rlockowner->rl_owner.len); 1019 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len); 1020 1021 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid)) 1022 return nfserr_inval; 1023 DECODE_TAIL; 1024 } 1025 1026 static __be32 1027 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp, 1028 struct nfsd4_exchange_id *exid) 1029 { 1030 int dummy, tmp; 1031 DECODE_HEAD; 1032 1033 READ_BUF(NFS4_VERIFIER_SIZE); 1034 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE); 1035 1036 READ_BUF(4); 1037 READ32(exid->clname.len); 1038 1039 READ_BUF(exid->clname.len); 1040 SAVEMEM(exid->clname.data, exid->clname.len); 1041 1042 READ_BUF(4); 1043 READ32(exid->flags); 1044 1045 /* Ignore state_protect4_a */ 1046 READ_BUF(4); 1047 READ32(exid->spa_how); 1048 switch (exid->spa_how) { 1049 case SP4_NONE: 1050 break; 1051 case SP4_MACH_CRED: 1052 /* spo_must_enforce */ 1053 READ_BUF(4); 1054 READ32(dummy); 1055 READ_BUF(dummy * 4); 1056 p += dummy; 1057 1058 /* spo_must_allow */ 1059 READ_BUF(4); 1060 READ32(dummy); 1061 READ_BUF(dummy * 4); 1062 p += dummy; 1063 break; 1064 case SP4_SSV: 1065 /* ssp_ops */ 1066 READ_BUF(4); 1067 READ32(dummy); 1068 READ_BUF(dummy * 4); 1069 p += dummy; 1070 1071 READ_BUF(4); 1072 READ32(dummy); 1073 READ_BUF(dummy * 4); 1074 p += dummy; 1075 1076 /* ssp_hash_algs<> */ 1077 READ_BUF(4); 1078 READ32(tmp); 1079 while (tmp--) { 1080 READ_BUF(4); 1081 READ32(dummy); 1082 READ_BUF(dummy); 1083 p += XDR_QUADLEN(dummy); 1084 } 1085 1086 /* ssp_encr_algs<> */ 1087 READ_BUF(4); 1088 READ32(tmp); 1089 while (tmp--) { 1090 READ_BUF(4); 1091 READ32(dummy); 1092 READ_BUF(dummy); 1093 p += XDR_QUADLEN(dummy); 1094 } 1095 1096 /* ssp_window and ssp_num_gss_handles */ 1097 READ_BUF(8); 1098 READ32(dummy); 1099 READ32(dummy); 1100 break; 1101 default: 1102 goto xdr_error; 1103 } 1104 1105 /* Ignore Implementation ID */ 1106 READ_BUF(4); /* nfs_impl_id4 array length */ 1107 READ32(dummy); 1108 1109 if (dummy > 1) 1110 goto xdr_error; 1111 1112 if (dummy == 1) { 1113 /* nii_domain */ 1114 READ_BUF(4); 1115 READ32(dummy); 1116 READ_BUF(dummy); 1117 p += XDR_QUADLEN(dummy); 1118 1119 /* nii_name */ 1120 READ_BUF(4); 1121 READ32(dummy); 1122 READ_BUF(dummy); 1123 p += XDR_QUADLEN(dummy); 1124 1125 /* nii_date */ 1126 READ_BUF(12); 1127 p += 3; 1128 } 1129 DECODE_TAIL; 1130 } 1131 1132 static __be32 1133 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp, 1134 struct nfsd4_create_session *sess) 1135 { 1136 DECODE_HEAD; 1137 1138 u32 dummy; 1139 char *machine_name; 1140 int i; 1141 int nr_secflavs; 1142 1143 READ_BUF(16); 1144 COPYMEM(&sess->clientid, 8); 1145 READ32(sess->seqid); 1146 READ32(sess->flags); 1147 1148 /* Fore channel attrs */ 1149 READ_BUF(28); 1150 READ32(dummy); /* headerpadsz is always 0 */ 1151 READ32(sess->fore_channel.maxreq_sz); 1152 READ32(sess->fore_channel.maxresp_sz); 1153 READ32(sess->fore_channel.maxresp_cached); 1154 READ32(sess->fore_channel.maxops); 1155 READ32(sess->fore_channel.maxreqs); 1156 READ32(sess->fore_channel.nr_rdma_attrs); 1157 if (sess->fore_channel.nr_rdma_attrs == 1) { 1158 READ_BUF(4); 1159 READ32(sess->fore_channel.rdma_attrs); 1160 } else if (sess->fore_channel.nr_rdma_attrs > 1) { 1161 dprintk("Too many fore channel attr bitmaps!\n"); 1162 goto xdr_error; 1163 } 1164 1165 /* Back channel attrs */ 1166 READ_BUF(28); 1167 READ32(dummy); /* headerpadsz is always 0 */ 1168 READ32(sess->back_channel.maxreq_sz); 1169 READ32(sess->back_channel.maxresp_sz); 1170 READ32(sess->back_channel.maxresp_cached); 1171 READ32(sess->back_channel.maxops); 1172 READ32(sess->back_channel.maxreqs); 1173 READ32(sess->back_channel.nr_rdma_attrs); 1174 if (sess->back_channel.nr_rdma_attrs == 1) { 1175 READ_BUF(4); 1176 READ32(sess->back_channel.rdma_attrs); 1177 } else if (sess->back_channel.nr_rdma_attrs > 1) { 1178 dprintk("Too many back channel attr bitmaps!\n"); 1179 goto xdr_error; 1180 } 1181 1182 READ_BUF(8); 1183 READ32(sess->callback_prog); 1184 1185 /* callback_sec_params4 */ 1186 READ32(nr_secflavs); 1187 for (i = 0; i < nr_secflavs; ++i) { 1188 READ_BUF(4); 1189 READ32(dummy); 1190 switch (dummy) { 1191 case RPC_AUTH_NULL: 1192 /* Nothing to read */ 1193 break; 1194 case RPC_AUTH_UNIX: 1195 READ_BUF(8); 1196 /* stamp */ 1197 READ32(dummy); 1198 1199 /* machine name */ 1200 READ32(dummy); 1201 READ_BUF(dummy); 1202 SAVEMEM(machine_name, dummy); 1203 1204 /* uid, gid */ 1205 READ_BUF(8); 1206 READ32(sess->uid); 1207 READ32(sess->gid); 1208 1209 /* more gids */ 1210 READ_BUF(4); 1211 READ32(dummy); 1212 READ_BUF(dummy * 4); 1213 break; 1214 case RPC_AUTH_GSS: 1215 dprintk("RPC_AUTH_GSS callback secflavor " 1216 "not supported!\n"); 1217 READ_BUF(8); 1218 /* gcbp_service */ 1219 READ32(dummy); 1220 /* gcbp_handle_from_server */ 1221 READ32(dummy); 1222 READ_BUF(dummy); 1223 p += XDR_QUADLEN(dummy); 1224 /* gcbp_handle_from_client */ 1225 READ_BUF(4); 1226 READ32(dummy); 1227 READ_BUF(dummy); 1228 break; 1229 default: 1230 dprintk("Illegal callback secflavor\n"); 1231 return nfserr_inval; 1232 } 1233 } 1234 DECODE_TAIL; 1235 } 1236 1237 static __be32 1238 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp, 1239 struct nfsd4_destroy_session *destroy_session) 1240 { 1241 DECODE_HEAD; 1242 READ_BUF(NFS4_MAX_SESSIONID_LEN); 1243 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1244 1245 DECODE_TAIL; 1246 } 1247 1248 static __be32 1249 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp, 1250 struct nfsd4_free_stateid *free_stateid) 1251 { 1252 DECODE_HEAD; 1253 1254 READ_BUF(sizeof(stateid_t)); 1255 READ32(free_stateid->fr_stateid.si_generation); 1256 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t)); 1257 1258 DECODE_TAIL; 1259 } 1260 1261 static __be32 1262 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp, 1263 struct nfsd4_sequence *seq) 1264 { 1265 DECODE_HEAD; 1266 1267 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16); 1268 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1269 READ32(seq->seqid); 1270 READ32(seq->slotid); 1271 READ32(seq->maxslots); 1272 READ32(seq->cachethis); 1273 1274 DECODE_TAIL; 1275 } 1276 1277 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc) 1278 { 1279 DECODE_HEAD; 1280 1281 READ_BUF(4); 1282 READ32(rc->rca_one_fs); 1283 1284 DECODE_TAIL; 1285 } 1286 1287 static __be32 1288 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p) 1289 { 1290 return nfs_ok; 1291 } 1292 1293 static __be32 1294 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p) 1295 { 1296 return nfserr_notsupp; 1297 } 1298 1299 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *); 1300 1301 static nfsd4_dec nfsd4_dec_ops[] = { 1302 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1303 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1304 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1305 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1306 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1307 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1308 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1309 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1310 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1311 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1312 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1313 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1314 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1315 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1316 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1317 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1318 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1319 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm, 1320 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1321 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1322 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_noop, 1323 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1324 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1325 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1326 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1327 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1328 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1329 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew, 1330 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1331 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1332 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1333 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1334 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid, 1335 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm, 1336 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1337 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1338 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner, 1339 }; 1340 1341 static nfsd4_dec nfsd41_dec_ops[] = { 1342 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1343 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1344 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1345 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1346 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1347 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1348 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1349 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1350 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1351 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1352 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1353 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1354 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1355 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1356 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1357 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1358 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1359 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_notsupp, 1360 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1361 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1362 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_notsupp, 1363 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1364 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1365 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1366 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1367 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1368 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1369 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_notsupp, 1370 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1371 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1372 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1373 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1374 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp, 1375 [OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp, 1376 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1377 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1378 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_notsupp, 1379 1380 /* new operations for NFSv4.1 */ 1381 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_notsupp, 1382 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session, 1383 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id, 1384 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session, 1385 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session, 1386 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid, 1387 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1388 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp, 1389 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1390 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp, 1391 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp, 1392 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp, 1393 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name, 1394 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence, 1395 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp, 1396 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_notsupp, 1397 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1398 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp, 1399 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete, 1400 }; 1401 1402 struct nfsd4_minorversion_ops { 1403 nfsd4_dec *decoders; 1404 int nops; 1405 }; 1406 1407 static struct nfsd4_minorversion_ops nfsd4_minorversion[] = { 1408 [0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) }, 1409 [1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) }, 1410 }; 1411 1412 static __be32 1413 nfsd4_decode_compound(struct nfsd4_compoundargs *argp) 1414 { 1415 DECODE_HEAD; 1416 struct nfsd4_op *op; 1417 struct nfsd4_minorversion_ops *ops; 1418 int i; 1419 1420 /* 1421 * XXX: According to spec, we should check the tag 1422 * for UTF-8 compliance. I'm postponing this for 1423 * now because it seems that some clients do use 1424 * binary tags. 1425 */ 1426 READ_BUF(4); 1427 READ32(argp->taglen); 1428 READ_BUF(argp->taglen + 8); 1429 SAVEMEM(argp->tag, argp->taglen); 1430 READ32(argp->minorversion); 1431 READ32(argp->opcnt); 1432 1433 if (argp->taglen > NFSD4_MAX_TAGLEN) 1434 goto xdr_error; 1435 if (argp->opcnt > 100) 1436 goto xdr_error; 1437 1438 if (argp->opcnt > ARRAY_SIZE(argp->iops)) { 1439 argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL); 1440 if (!argp->ops) { 1441 argp->ops = argp->iops; 1442 dprintk("nfsd: couldn't allocate room for COMPOUND\n"); 1443 goto xdr_error; 1444 } 1445 } 1446 1447 if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion)) 1448 argp->opcnt = 0; 1449 1450 ops = &nfsd4_minorversion[argp->minorversion]; 1451 for (i = 0; i < argp->opcnt; i++) { 1452 op = &argp->ops[i]; 1453 op->replay = NULL; 1454 1455 /* 1456 * We can't use READ_BUF() here because we need to handle 1457 * a missing opcode as an OP_WRITE + 1. So we need to check 1458 * to see if we're truly at the end of our buffer or if there 1459 * is another page we need to flip to. 1460 */ 1461 1462 if (argp->p == argp->end) { 1463 if (argp->pagelen < 4) { 1464 /* There isn't an opcode still on the wire */ 1465 op->opnum = OP_WRITE + 1; 1466 op->status = nfserr_bad_xdr; 1467 argp->opcnt = i+1; 1468 break; 1469 } 1470 1471 /* 1472 * False alarm. We just hit a page boundary, but there 1473 * is still data available. Move pointer across page 1474 * boundary. *snip from READ_BUF* 1475 */ 1476 argp->p = page_address(argp->pagelist[0]); 1477 argp->pagelist++; 1478 if (argp->pagelen < PAGE_SIZE) { 1479 argp->end = argp->p + (argp->pagelen>>2); 1480 argp->pagelen = 0; 1481 } else { 1482 argp->end = argp->p + (PAGE_SIZE>>2); 1483 argp->pagelen -= PAGE_SIZE; 1484 } 1485 } 1486 op->opnum = ntohl(*argp->p++); 1487 1488 if (op->opnum >= FIRST_NFS4_OP && op->opnum <= LAST_NFS4_OP) 1489 op->status = ops->decoders[op->opnum](argp, &op->u); 1490 else { 1491 op->opnum = OP_ILLEGAL; 1492 op->status = nfserr_op_illegal; 1493 } 1494 1495 if (op->status) { 1496 argp->opcnt = i+1; 1497 break; 1498 } 1499 } 1500 1501 DECODE_TAIL; 1502 } 1503 1504 #define WRITE32(n) *p++ = htonl(n) 1505 #define WRITE64(n) do { \ 1506 *p++ = htonl((u32)((n) >> 32)); \ 1507 *p++ = htonl((u32)(n)); \ 1508 } while (0) 1509 #define WRITEMEM(ptr,nbytes) do { if (nbytes > 0) { \ 1510 *(p + XDR_QUADLEN(nbytes) -1) = 0; \ 1511 memcpy(p, ptr, nbytes); \ 1512 p += XDR_QUADLEN(nbytes); \ 1513 }} while (0) 1514 1515 static void write32(__be32 **p, u32 n) 1516 { 1517 *(*p)++ = n; 1518 } 1519 1520 static void write64(__be32 **p, u64 n) 1521 { 1522 write32(p, (u32)(n >> 32)); 1523 write32(p, (u32)n); 1524 } 1525 1526 static void write_change(__be32 **p, struct kstat *stat, struct inode *inode) 1527 { 1528 if (IS_I_VERSION(inode)) { 1529 write64(p, inode->i_version); 1530 } else { 1531 write32(p, stat->ctime.tv_sec); 1532 write32(p, stat->ctime.tv_nsec); 1533 } 1534 } 1535 1536 static void write_cinfo(__be32 **p, struct nfsd4_change_info *c) 1537 { 1538 write32(p, c->atomic); 1539 if (c->change_supported) { 1540 write64(p, c->before_change); 1541 write64(p, c->after_change); 1542 } else { 1543 write32(p, c->before_ctime_sec); 1544 write32(p, c->before_ctime_nsec); 1545 write32(p, c->after_ctime_sec); 1546 write32(p, c->after_ctime_nsec); 1547 } 1548 } 1549 1550 #define RESERVE_SPACE(nbytes) do { \ 1551 p = resp->p; \ 1552 BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end); \ 1553 } while (0) 1554 #define ADJUST_ARGS() resp->p = p 1555 1556 /* 1557 * Header routine to setup seqid operation replay cache 1558 */ 1559 #define ENCODE_SEQID_OP_HEAD \ 1560 __be32 *save; \ 1561 \ 1562 save = resp->p; 1563 1564 /* 1565 * Routine for encoding the result of a "seqid-mutating" NFSv4 operation. This 1566 * is where sequence id's are incremented, and the replay cache is filled. 1567 * Note that we increment sequence id's here, at the last moment, so we're sure 1568 * we know whether the error to be returned is a sequence id mutating error. 1569 */ 1570 1571 #define ENCODE_SEQID_OP_TAIL(stateowner) do { \ 1572 if (seqid_mutating_err(nfserr) && stateowner) { \ 1573 stateowner->so_seqid++; \ 1574 stateowner->so_replay.rp_status = nfserr; \ 1575 stateowner->so_replay.rp_buflen = \ 1576 (((char *)(resp)->p - (char *)save)); \ 1577 memcpy(stateowner->so_replay.rp_buf, save, \ 1578 stateowner->so_replay.rp_buflen); \ 1579 } } while (0); 1580 1581 /* Encode as an array of strings the string given with components 1582 * separated @sep. 1583 */ 1584 static __be32 nfsd4_encode_components(char sep, char *components, 1585 __be32 **pp, int *buflen) 1586 { 1587 __be32 *p = *pp; 1588 __be32 *countp = p; 1589 int strlen, count=0; 1590 char *str, *end; 1591 1592 dprintk("nfsd4_encode_components(%s)\n", components); 1593 if ((*buflen -= 4) < 0) 1594 return nfserr_resource; 1595 WRITE32(0); /* We will fill this in with @count later */ 1596 end = str = components; 1597 while (*end) { 1598 for (; *end && (*end != sep); end++) 1599 ; /* Point to end of component */ 1600 strlen = end - str; 1601 if (strlen) { 1602 if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0) 1603 return nfserr_resource; 1604 WRITE32(strlen); 1605 WRITEMEM(str, strlen); 1606 count++; 1607 } 1608 else 1609 end++; 1610 str = end; 1611 } 1612 *pp = p; 1613 p = countp; 1614 WRITE32(count); 1615 return 0; 1616 } 1617 1618 /* 1619 * encode a location element of a fs_locations structure 1620 */ 1621 static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location, 1622 __be32 **pp, int *buflen) 1623 { 1624 __be32 status; 1625 __be32 *p = *pp; 1626 1627 status = nfsd4_encode_components(':', location->hosts, &p, buflen); 1628 if (status) 1629 return status; 1630 status = nfsd4_encode_components('/', location->path, &p, buflen); 1631 if (status) 1632 return status; 1633 *pp = p; 1634 return 0; 1635 } 1636 1637 /* 1638 * Return the path to an export point in the pseudo filesystem namespace 1639 * Returned string is safe to use as long as the caller holds a reference 1640 * to @exp. 1641 */ 1642 static char *nfsd4_path(struct svc_rqst *rqstp, struct svc_export *exp, __be32 *stat) 1643 { 1644 struct svc_fh tmp_fh; 1645 char *path = NULL, *rootpath; 1646 size_t rootlen; 1647 1648 fh_init(&tmp_fh, NFS4_FHSIZE); 1649 *stat = exp_pseudoroot(rqstp, &tmp_fh); 1650 if (*stat) 1651 return NULL; 1652 rootpath = tmp_fh.fh_export->ex_pathname; 1653 1654 path = exp->ex_pathname; 1655 1656 rootlen = strlen(rootpath); 1657 if (strncmp(path, rootpath, rootlen)) { 1658 dprintk("nfsd: fs_locations failed;" 1659 "%s is not contained in %s\n", path, rootpath); 1660 *stat = nfserr_notsupp; 1661 path = NULL; 1662 goto out; 1663 } 1664 path += rootlen; 1665 out: 1666 fh_put(&tmp_fh); 1667 return path; 1668 } 1669 1670 /* 1671 * encode a fs_locations structure 1672 */ 1673 static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp, 1674 struct svc_export *exp, 1675 __be32 **pp, int *buflen) 1676 { 1677 __be32 status; 1678 int i; 1679 __be32 *p = *pp; 1680 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs; 1681 char *root = nfsd4_path(rqstp, exp, &status); 1682 1683 if (status) 1684 return status; 1685 status = nfsd4_encode_components('/', root, &p, buflen); 1686 if (status) 1687 return status; 1688 if ((*buflen -= 4) < 0) 1689 return nfserr_resource; 1690 WRITE32(fslocs->locations_count); 1691 for (i=0; i<fslocs->locations_count; i++) { 1692 status = nfsd4_encode_fs_location4(&fslocs->locations[i], 1693 &p, buflen); 1694 if (status) 1695 return status; 1696 } 1697 *pp = p; 1698 return 0; 1699 } 1700 1701 static u32 nfs4_ftypes[16] = { 1702 NF4BAD, NF4FIFO, NF4CHR, NF4BAD, 1703 NF4DIR, NF4BAD, NF4BLK, NF4BAD, 1704 NF4REG, NF4BAD, NF4LNK, NF4BAD, 1705 NF4SOCK, NF4BAD, NF4LNK, NF4BAD, 1706 }; 1707 1708 static __be32 1709 nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, uid_t id, int group, 1710 __be32 **p, int *buflen) 1711 { 1712 int status; 1713 1714 if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4) 1715 return nfserr_resource; 1716 if (whotype != NFS4_ACL_WHO_NAMED) 1717 status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1)); 1718 else if (group) 1719 status = nfsd_map_gid_to_name(rqstp, id, (u8 *)(*p + 1)); 1720 else 1721 status = nfsd_map_uid_to_name(rqstp, id, (u8 *)(*p + 1)); 1722 if (status < 0) 1723 return nfserrno(status); 1724 *p = xdr_encode_opaque(*p, NULL, status); 1725 *buflen -= (XDR_QUADLEN(status) << 2) + 4; 1726 BUG_ON(*buflen < 0); 1727 return 0; 1728 } 1729 1730 static inline __be32 1731 nfsd4_encode_user(struct svc_rqst *rqstp, uid_t uid, __be32 **p, int *buflen) 1732 { 1733 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, uid, 0, p, buflen); 1734 } 1735 1736 static inline __be32 1737 nfsd4_encode_group(struct svc_rqst *rqstp, uid_t gid, __be32 **p, int *buflen) 1738 { 1739 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, gid, 1, p, buflen); 1740 } 1741 1742 static inline __be32 1743 nfsd4_encode_aclname(struct svc_rqst *rqstp, int whotype, uid_t id, int group, 1744 __be32 **p, int *buflen) 1745 { 1746 return nfsd4_encode_name(rqstp, whotype, id, group, p, buflen); 1747 } 1748 1749 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \ 1750 FATTR4_WORD0_RDATTR_ERROR) 1751 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID 1752 1753 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err) 1754 { 1755 /* As per referral draft: */ 1756 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS || 1757 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) { 1758 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR || 1759 *bmval0 & FATTR4_WORD0_FS_LOCATIONS) 1760 *rdattr_err = NFSERR_MOVED; 1761 else 1762 return nfserr_moved; 1763 } 1764 *bmval0 &= WORD0_ABSENT_FS_ATTRS; 1765 *bmval1 &= WORD1_ABSENT_FS_ATTRS; 1766 return 0; 1767 } 1768 1769 /* 1770 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle 1771 * ourselves. 1772 * 1773 * @countp is the buffer size in _words_; upon successful return this becomes 1774 * replaced with the number of words written. 1775 */ 1776 __be32 1777 nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp, 1778 struct dentry *dentry, __be32 *buffer, int *countp, u32 *bmval, 1779 struct svc_rqst *rqstp, int ignore_crossmnt) 1780 { 1781 u32 bmval0 = bmval[0]; 1782 u32 bmval1 = bmval[1]; 1783 u32 bmval2 = bmval[2]; 1784 struct kstat stat; 1785 struct svc_fh tempfh; 1786 struct kstatfs statfs; 1787 int buflen = *countp << 2; 1788 __be32 *attrlenp; 1789 u32 dummy; 1790 u64 dummy64; 1791 u32 rdattr_err = 0; 1792 __be32 *p = buffer; 1793 __be32 status; 1794 int err; 1795 int aclsupport = 0; 1796 struct nfs4_acl *acl = NULL; 1797 struct nfsd4_compoundres *resp = rqstp->rq_resp; 1798 u32 minorversion = resp->cstate.minorversion; 1799 struct path path = { 1800 .mnt = exp->ex_path.mnt, 1801 .dentry = dentry, 1802 }; 1803 1804 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1); 1805 BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion)); 1806 BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion)); 1807 BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion)); 1808 1809 if (exp->ex_fslocs.migrated) { 1810 BUG_ON(bmval[2]); 1811 status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err); 1812 if (status) 1813 goto out; 1814 } 1815 1816 err = vfs_getattr(exp->ex_path.mnt, dentry, &stat); 1817 if (err) 1818 goto out_nfserr; 1819 if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL | 1820 FATTR4_WORD0_MAXNAME)) || 1821 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE | 1822 FATTR4_WORD1_SPACE_TOTAL))) { 1823 err = vfs_statfs(&path, &statfs); 1824 if (err) 1825 goto out_nfserr; 1826 } 1827 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) { 1828 fh_init(&tempfh, NFS4_FHSIZE); 1829 status = fh_compose(&tempfh, exp, dentry, NULL); 1830 if (status) 1831 goto out; 1832 fhp = &tempfh; 1833 } 1834 if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT 1835 | FATTR4_WORD0_SUPPORTED_ATTRS)) { 1836 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl); 1837 aclsupport = (err == 0); 1838 if (bmval0 & FATTR4_WORD0_ACL) { 1839 if (err == -EOPNOTSUPP) 1840 bmval0 &= ~FATTR4_WORD0_ACL; 1841 else if (err == -EINVAL) { 1842 status = nfserr_attrnotsupp; 1843 goto out; 1844 } else if (err != 0) 1845 goto out_nfserr; 1846 } 1847 } 1848 1849 if (bmval2) { 1850 if ((buflen -= 16) < 0) 1851 goto out_resource; 1852 WRITE32(3); 1853 WRITE32(bmval0); 1854 WRITE32(bmval1); 1855 WRITE32(bmval2); 1856 } else if (bmval1) { 1857 if ((buflen -= 12) < 0) 1858 goto out_resource; 1859 WRITE32(2); 1860 WRITE32(bmval0); 1861 WRITE32(bmval1); 1862 } else { 1863 if ((buflen -= 8) < 0) 1864 goto out_resource; 1865 WRITE32(1); 1866 WRITE32(bmval0); 1867 } 1868 attrlenp = p++; /* to be backfilled later */ 1869 1870 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 1871 u32 word0 = nfsd_suppattrs0(minorversion); 1872 u32 word1 = nfsd_suppattrs1(minorversion); 1873 u32 word2 = nfsd_suppattrs2(minorversion); 1874 1875 if (!aclsupport) 1876 word0 &= ~FATTR4_WORD0_ACL; 1877 if (!word2) { 1878 if ((buflen -= 12) < 0) 1879 goto out_resource; 1880 WRITE32(2); 1881 WRITE32(word0); 1882 WRITE32(word1); 1883 } else { 1884 if ((buflen -= 16) < 0) 1885 goto out_resource; 1886 WRITE32(3); 1887 WRITE32(word0); 1888 WRITE32(word1); 1889 WRITE32(word2); 1890 } 1891 } 1892 if (bmval0 & FATTR4_WORD0_TYPE) { 1893 if ((buflen -= 4) < 0) 1894 goto out_resource; 1895 dummy = nfs4_ftypes[(stat.mode & S_IFMT) >> 12]; 1896 if (dummy == NF4BAD) 1897 goto out_serverfault; 1898 WRITE32(dummy); 1899 } 1900 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) { 1901 if ((buflen -= 4) < 0) 1902 goto out_resource; 1903 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK) 1904 WRITE32(NFS4_FH_PERSISTENT); 1905 else 1906 WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME); 1907 } 1908 if (bmval0 & FATTR4_WORD0_CHANGE) { 1909 if ((buflen -= 8) < 0) 1910 goto out_resource; 1911 write_change(&p, &stat, dentry->d_inode); 1912 } 1913 if (bmval0 & FATTR4_WORD0_SIZE) { 1914 if ((buflen -= 8) < 0) 1915 goto out_resource; 1916 WRITE64(stat.size); 1917 } 1918 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) { 1919 if ((buflen -= 4) < 0) 1920 goto out_resource; 1921 WRITE32(1); 1922 } 1923 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) { 1924 if ((buflen -= 4) < 0) 1925 goto out_resource; 1926 WRITE32(1); 1927 } 1928 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) { 1929 if ((buflen -= 4) < 0) 1930 goto out_resource; 1931 WRITE32(0); 1932 } 1933 if (bmval0 & FATTR4_WORD0_FSID) { 1934 if ((buflen -= 16) < 0) 1935 goto out_resource; 1936 if (exp->ex_fslocs.migrated) { 1937 WRITE64(NFS4_REFERRAL_FSID_MAJOR); 1938 WRITE64(NFS4_REFERRAL_FSID_MINOR); 1939 } else switch(fsid_source(fhp)) { 1940 case FSIDSOURCE_FSID: 1941 WRITE64((u64)exp->ex_fsid); 1942 WRITE64((u64)0); 1943 break; 1944 case FSIDSOURCE_DEV: 1945 WRITE32(0); 1946 WRITE32(MAJOR(stat.dev)); 1947 WRITE32(0); 1948 WRITE32(MINOR(stat.dev)); 1949 break; 1950 case FSIDSOURCE_UUID: 1951 WRITEMEM(exp->ex_uuid, 16); 1952 break; 1953 } 1954 } 1955 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) { 1956 if ((buflen -= 4) < 0) 1957 goto out_resource; 1958 WRITE32(0); 1959 } 1960 if (bmval0 & FATTR4_WORD0_LEASE_TIME) { 1961 if ((buflen -= 4) < 0) 1962 goto out_resource; 1963 WRITE32(nfsd4_lease); 1964 } 1965 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) { 1966 if ((buflen -= 4) < 0) 1967 goto out_resource; 1968 WRITE32(rdattr_err); 1969 } 1970 if (bmval0 & FATTR4_WORD0_ACL) { 1971 struct nfs4_ace *ace; 1972 1973 if (acl == NULL) { 1974 if ((buflen -= 4) < 0) 1975 goto out_resource; 1976 1977 WRITE32(0); 1978 goto out_acl; 1979 } 1980 if ((buflen -= 4) < 0) 1981 goto out_resource; 1982 WRITE32(acl->naces); 1983 1984 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) { 1985 if ((buflen -= 4*3) < 0) 1986 goto out_resource; 1987 WRITE32(ace->type); 1988 WRITE32(ace->flag); 1989 WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL); 1990 status = nfsd4_encode_aclname(rqstp, ace->whotype, 1991 ace->who, ace->flag & NFS4_ACE_IDENTIFIER_GROUP, 1992 &p, &buflen); 1993 if (status == nfserr_resource) 1994 goto out_resource; 1995 if (status) 1996 goto out; 1997 } 1998 } 1999 out_acl: 2000 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) { 2001 if ((buflen -= 4) < 0) 2002 goto out_resource; 2003 WRITE32(aclsupport ? 2004 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0); 2005 } 2006 if (bmval0 & FATTR4_WORD0_CANSETTIME) { 2007 if ((buflen -= 4) < 0) 2008 goto out_resource; 2009 WRITE32(1); 2010 } 2011 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) { 2012 if ((buflen -= 4) < 0) 2013 goto out_resource; 2014 WRITE32(1); 2015 } 2016 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) { 2017 if ((buflen -= 4) < 0) 2018 goto out_resource; 2019 WRITE32(1); 2020 } 2021 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) { 2022 if ((buflen -= 4) < 0) 2023 goto out_resource; 2024 WRITE32(1); 2025 } 2026 if (bmval0 & FATTR4_WORD0_FILEHANDLE) { 2027 buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4; 2028 if (buflen < 0) 2029 goto out_resource; 2030 WRITE32(fhp->fh_handle.fh_size); 2031 WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size); 2032 } 2033 if (bmval0 & FATTR4_WORD0_FILEID) { 2034 if ((buflen -= 8) < 0) 2035 goto out_resource; 2036 WRITE64(stat.ino); 2037 } 2038 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) { 2039 if ((buflen -= 8) < 0) 2040 goto out_resource; 2041 WRITE64((u64) statfs.f_ffree); 2042 } 2043 if (bmval0 & FATTR4_WORD0_FILES_FREE) { 2044 if ((buflen -= 8) < 0) 2045 goto out_resource; 2046 WRITE64((u64) statfs.f_ffree); 2047 } 2048 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) { 2049 if ((buflen -= 8) < 0) 2050 goto out_resource; 2051 WRITE64((u64) statfs.f_files); 2052 } 2053 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) { 2054 status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen); 2055 if (status == nfserr_resource) 2056 goto out_resource; 2057 if (status) 2058 goto out; 2059 } 2060 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) { 2061 if ((buflen -= 4) < 0) 2062 goto out_resource; 2063 WRITE32(1); 2064 } 2065 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) { 2066 if ((buflen -= 8) < 0) 2067 goto out_resource; 2068 WRITE64(~(u64)0); 2069 } 2070 if (bmval0 & FATTR4_WORD0_MAXLINK) { 2071 if ((buflen -= 4) < 0) 2072 goto out_resource; 2073 WRITE32(255); 2074 } 2075 if (bmval0 & FATTR4_WORD0_MAXNAME) { 2076 if ((buflen -= 4) < 0) 2077 goto out_resource; 2078 WRITE32(statfs.f_namelen); 2079 } 2080 if (bmval0 & FATTR4_WORD0_MAXREAD) { 2081 if ((buflen -= 8) < 0) 2082 goto out_resource; 2083 WRITE64((u64) svc_max_payload(rqstp)); 2084 } 2085 if (bmval0 & FATTR4_WORD0_MAXWRITE) { 2086 if ((buflen -= 8) < 0) 2087 goto out_resource; 2088 WRITE64((u64) svc_max_payload(rqstp)); 2089 } 2090 if (bmval1 & FATTR4_WORD1_MODE) { 2091 if ((buflen -= 4) < 0) 2092 goto out_resource; 2093 WRITE32(stat.mode & S_IALLUGO); 2094 } 2095 if (bmval1 & FATTR4_WORD1_NO_TRUNC) { 2096 if ((buflen -= 4) < 0) 2097 goto out_resource; 2098 WRITE32(1); 2099 } 2100 if (bmval1 & FATTR4_WORD1_NUMLINKS) { 2101 if ((buflen -= 4) < 0) 2102 goto out_resource; 2103 WRITE32(stat.nlink); 2104 } 2105 if (bmval1 & FATTR4_WORD1_OWNER) { 2106 status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen); 2107 if (status == nfserr_resource) 2108 goto out_resource; 2109 if (status) 2110 goto out; 2111 } 2112 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) { 2113 status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen); 2114 if (status == nfserr_resource) 2115 goto out_resource; 2116 if (status) 2117 goto out; 2118 } 2119 if (bmval1 & FATTR4_WORD1_RAWDEV) { 2120 if ((buflen -= 8) < 0) 2121 goto out_resource; 2122 WRITE32((u32) MAJOR(stat.rdev)); 2123 WRITE32((u32) MINOR(stat.rdev)); 2124 } 2125 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) { 2126 if ((buflen -= 8) < 0) 2127 goto out_resource; 2128 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize; 2129 WRITE64(dummy64); 2130 } 2131 if (bmval1 & FATTR4_WORD1_SPACE_FREE) { 2132 if ((buflen -= 8) < 0) 2133 goto out_resource; 2134 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize; 2135 WRITE64(dummy64); 2136 } 2137 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) { 2138 if ((buflen -= 8) < 0) 2139 goto out_resource; 2140 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize; 2141 WRITE64(dummy64); 2142 } 2143 if (bmval1 & FATTR4_WORD1_SPACE_USED) { 2144 if ((buflen -= 8) < 0) 2145 goto out_resource; 2146 dummy64 = (u64)stat.blocks << 9; 2147 WRITE64(dummy64); 2148 } 2149 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) { 2150 if ((buflen -= 12) < 0) 2151 goto out_resource; 2152 WRITE32(0); 2153 WRITE32(stat.atime.tv_sec); 2154 WRITE32(stat.atime.tv_nsec); 2155 } 2156 if (bmval1 & FATTR4_WORD1_TIME_DELTA) { 2157 if ((buflen -= 12) < 0) 2158 goto out_resource; 2159 WRITE32(0); 2160 WRITE32(1); 2161 WRITE32(0); 2162 } 2163 if (bmval1 & FATTR4_WORD1_TIME_METADATA) { 2164 if ((buflen -= 12) < 0) 2165 goto out_resource; 2166 WRITE32(0); 2167 WRITE32(stat.ctime.tv_sec); 2168 WRITE32(stat.ctime.tv_nsec); 2169 } 2170 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) { 2171 if ((buflen -= 12) < 0) 2172 goto out_resource; 2173 WRITE32(0); 2174 WRITE32(stat.mtime.tv_sec); 2175 WRITE32(stat.mtime.tv_nsec); 2176 } 2177 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) { 2178 if ((buflen -= 8) < 0) 2179 goto out_resource; 2180 /* 2181 * Get parent's attributes if not ignoring crossmount 2182 * and this is the root of a cross-mounted filesystem. 2183 */ 2184 if (ignore_crossmnt == 0 && 2185 dentry == exp->ex_path.mnt->mnt_root) { 2186 struct path path = exp->ex_path; 2187 path_get(&path); 2188 while (follow_up(&path)) { 2189 if (path.dentry != path.mnt->mnt_root) 2190 break; 2191 } 2192 err = vfs_getattr(path.mnt, path.dentry, &stat); 2193 path_put(&path); 2194 if (err) 2195 goto out_nfserr; 2196 } 2197 WRITE64(stat.ino); 2198 } 2199 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) { 2200 WRITE32(3); 2201 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0); 2202 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1); 2203 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2); 2204 } 2205 2206 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2207 *countp = p - buffer; 2208 status = nfs_ok; 2209 2210 out: 2211 kfree(acl); 2212 if (fhp == &tempfh) 2213 fh_put(&tempfh); 2214 return status; 2215 out_nfserr: 2216 status = nfserrno(err); 2217 goto out; 2218 out_resource: 2219 *countp = 0; 2220 status = nfserr_resource; 2221 goto out; 2222 out_serverfault: 2223 status = nfserr_serverfault; 2224 goto out; 2225 } 2226 2227 static inline int attributes_need_mount(u32 *bmval) 2228 { 2229 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME)) 2230 return 1; 2231 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID) 2232 return 1; 2233 return 0; 2234 } 2235 2236 static __be32 2237 nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd, 2238 const char *name, int namlen, __be32 *p, int *buflen) 2239 { 2240 struct svc_export *exp = cd->rd_fhp->fh_export; 2241 struct dentry *dentry; 2242 __be32 nfserr; 2243 int ignore_crossmnt = 0; 2244 2245 dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen); 2246 if (IS_ERR(dentry)) 2247 return nfserrno(PTR_ERR(dentry)); 2248 if (!dentry->d_inode) { 2249 /* 2250 * nfsd_buffered_readdir drops the i_mutex between 2251 * readdir and calling this callback, leaving a window 2252 * where this directory entry could have gone away. 2253 */ 2254 dput(dentry); 2255 return nfserr_noent; 2256 } 2257 2258 exp_get(exp); 2259 /* 2260 * In the case of a mountpoint, the client may be asking for 2261 * attributes that are only properties of the underlying filesystem 2262 * as opposed to the cross-mounted file system. In such a case, 2263 * we will not follow the cross mount and will fill the attribtutes 2264 * directly from the mountpoint dentry. 2265 */ 2266 if (nfsd_mountpoint(dentry, exp)) { 2267 int err; 2268 2269 if (!(exp->ex_flags & NFSEXP_V4ROOT) 2270 && !attributes_need_mount(cd->rd_bmval)) { 2271 ignore_crossmnt = 1; 2272 goto out_encode; 2273 } 2274 /* 2275 * Why the heck aren't we just using nfsd_lookup?? 2276 * Different "."/".." handling? Something else? 2277 * At least, add a comment here to explain.... 2278 */ 2279 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp); 2280 if (err) { 2281 nfserr = nfserrno(err); 2282 goto out_put; 2283 } 2284 nfserr = check_nfsd_access(exp, cd->rd_rqstp); 2285 if (nfserr) 2286 goto out_put; 2287 2288 } 2289 out_encode: 2290 nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval, 2291 cd->rd_rqstp, ignore_crossmnt); 2292 out_put: 2293 dput(dentry); 2294 exp_put(exp); 2295 return nfserr; 2296 } 2297 2298 static __be32 * 2299 nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr) 2300 { 2301 __be32 *attrlenp; 2302 2303 if (buflen < 6) 2304 return NULL; 2305 *p++ = htonl(2); 2306 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */ 2307 *p++ = htonl(0); /* bmval1 */ 2308 2309 attrlenp = p++; 2310 *p++ = nfserr; /* no htonl */ 2311 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2312 return p; 2313 } 2314 2315 static int 2316 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen, 2317 loff_t offset, u64 ino, unsigned int d_type) 2318 { 2319 struct readdir_cd *ccd = ccdv; 2320 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common); 2321 int buflen; 2322 __be32 *p = cd->buffer; 2323 __be32 *cookiep; 2324 __be32 nfserr = nfserr_toosmall; 2325 2326 /* In nfsv4, "." and ".." never make it onto the wire.. */ 2327 if (name && isdotent(name, namlen)) { 2328 cd->common.err = nfs_ok; 2329 return 0; 2330 } 2331 2332 if (cd->offset) 2333 xdr_encode_hyper(cd->offset, (u64) offset); 2334 2335 buflen = cd->buflen - 4 - XDR_QUADLEN(namlen); 2336 if (buflen < 0) 2337 goto fail; 2338 2339 *p++ = xdr_one; /* mark entry present */ 2340 cookiep = p; 2341 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */ 2342 p = xdr_encode_array(p, name, namlen); /* name length & name */ 2343 2344 nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, p, &buflen); 2345 switch (nfserr) { 2346 case nfs_ok: 2347 p += buflen; 2348 break; 2349 case nfserr_resource: 2350 nfserr = nfserr_toosmall; 2351 goto fail; 2352 case nfserr_noent: 2353 goto skip_entry; 2354 default: 2355 /* 2356 * If the client requested the RDATTR_ERROR attribute, 2357 * we stuff the error code into this attribute 2358 * and continue. If this attribute was not requested, 2359 * then in accordance with the spec, we fail the 2360 * entire READDIR operation(!) 2361 */ 2362 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)) 2363 goto fail; 2364 p = nfsd4_encode_rdattr_error(p, buflen, nfserr); 2365 if (p == NULL) { 2366 nfserr = nfserr_toosmall; 2367 goto fail; 2368 } 2369 } 2370 cd->buflen -= (p - cd->buffer); 2371 cd->buffer = p; 2372 cd->offset = cookiep; 2373 skip_entry: 2374 cd->common.err = nfs_ok; 2375 return 0; 2376 fail: 2377 cd->common.err = nfserr; 2378 return -EINVAL; 2379 } 2380 2381 static void 2382 nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid) 2383 { 2384 __be32 *p; 2385 2386 RESERVE_SPACE(sizeof(stateid_t)); 2387 WRITE32(sid->si_generation); 2388 WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 2389 ADJUST_ARGS(); 2390 } 2391 2392 static __be32 2393 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access) 2394 { 2395 __be32 *p; 2396 2397 if (!nfserr) { 2398 RESERVE_SPACE(8); 2399 WRITE32(access->ac_supported); 2400 WRITE32(access->ac_resp_access); 2401 ADJUST_ARGS(); 2402 } 2403 return nfserr; 2404 } 2405 2406 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts) 2407 { 2408 __be32 *p; 2409 2410 if (!nfserr) { 2411 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8); 2412 WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 2413 WRITE32(bcts->dir); 2414 /* XXX: ? */ 2415 WRITE32(0); 2416 ADJUST_ARGS(); 2417 } 2418 return nfserr; 2419 } 2420 2421 static __be32 2422 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close) 2423 { 2424 ENCODE_SEQID_OP_HEAD; 2425 2426 if (!nfserr) 2427 nfsd4_encode_stateid(resp, &close->cl_stateid); 2428 2429 ENCODE_SEQID_OP_TAIL(close->cl_stateowner); 2430 return nfserr; 2431 } 2432 2433 2434 static __be32 2435 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit) 2436 { 2437 __be32 *p; 2438 2439 if (!nfserr) { 2440 RESERVE_SPACE(8); 2441 WRITEMEM(commit->co_verf.data, 8); 2442 ADJUST_ARGS(); 2443 } 2444 return nfserr; 2445 } 2446 2447 static __be32 2448 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create) 2449 { 2450 __be32 *p; 2451 2452 if (!nfserr) { 2453 RESERVE_SPACE(32); 2454 write_cinfo(&p, &create->cr_cinfo); 2455 WRITE32(2); 2456 WRITE32(create->cr_bmval[0]); 2457 WRITE32(create->cr_bmval[1]); 2458 ADJUST_ARGS(); 2459 } 2460 return nfserr; 2461 } 2462 2463 static __be32 2464 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr) 2465 { 2466 struct svc_fh *fhp = getattr->ga_fhp; 2467 int buflen; 2468 2469 if (nfserr) 2470 return nfserr; 2471 2472 buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2); 2473 nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry, 2474 resp->p, &buflen, getattr->ga_bmval, 2475 resp->rqstp, 0); 2476 if (!nfserr) 2477 resp->p += buflen; 2478 return nfserr; 2479 } 2480 2481 static __be32 2482 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp) 2483 { 2484 struct svc_fh *fhp = *fhpp; 2485 unsigned int len; 2486 __be32 *p; 2487 2488 if (!nfserr) { 2489 len = fhp->fh_handle.fh_size; 2490 RESERVE_SPACE(len + 4); 2491 WRITE32(len); 2492 WRITEMEM(&fhp->fh_handle.fh_base, len); 2493 ADJUST_ARGS(); 2494 } 2495 return nfserr; 2496 } 2497 2498 /* 2499 * Including all fields other than the name, a LOCK4denied structure requires 2500 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes. 2501 */ 2502 static void 2503 nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld) 2504 { 2505 __be32 *p; 2506 2507 RESERVE_SPACE(32 + XDR_LEN(ld->ld_sop ? ld->ld_sop->so_owner.len : 0)); 2508 WRITE64(ld->ld_start); 2509 WRITE64(ld->ld_length); 2510 WRITE32(ld->ld_type); 2511 if (ld->ld_sop) { 2512 WRITEMEM(&ld->ld_clientid, 8); 2513 WRITE32(ld->ld_sop->so_owner.len); 2514 WRITEMEM(ld->ld_sop->so_owner.data, ld->ld_sop->so_owner.len); 2515 kref_put(&ld->ld_sop->so_ref, nfs4_free_stateowner); 2516 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */ 2517 WRITE64((u64)0); /* clientid */ 2518 WRITE32(0); /* length of owner name */ 2519 } 2520 ADJUST_ARGS(); 2521 } 2522 2523 static __be32 2524 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock) 2525 { 2526 ENCODE_SEQID_OP_HEAD; 2527 2528 if (!nfserr) 2529 nfsd4_encode_stateid(resp, &lock->lk_resp_stateid); 2530 else if (nfserr == nfserr_denied) 2531 nfsd4_encode_lock_denied(resp, &lock->lk_denied); 2532 2533 ENCODE_SEQID_OP_TAIL(lock->lk_replay_owner); 2534 return nfserr; 2535 } 2536 2537 static __be32 2538 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt) 2539 { 2540 if (nfserr == nfserr_denied) 2541 nfsd4_encode_lock_denied(resp, &lockt->lt_denied); 2542 return nfserr; 2543 } 2544 2545 static __be32 2546 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku) 2547 { 2548 ENCODE_SEQID_OP_HEAD; 2549 2550 if (!nfserr) 2551 nfsd4_encode_stateid(resp, &locku->lu_stateid); 2552 2553 ENCODE_SEQID_OP_TAIL(locku->lu_stateowner); 2554 return nfserr; 2555 } 2556 2557 2558 static __be32 2559 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link) 2560 { 2561 __be32 *p; 2562 2563 if (!nfserr) { 2564 RESERVE_SPACE(20); 2565 write_cinfo(&p, &link->li_cinfo); 2566 ADJUST_ARGS(); 2567 } 2568 return nfserr; 2569 } 2570 2571 2572 static __be32 2573 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open) 2574 { 2575 __be32 *p; 2576 ENCODE_SEQID_OP_HEAD; 2577 2578 if (nfserr) 2579 goto out; 2580 2581 nfsd4_encode_stateid(resp, &open->op_stateid); 2582 RESERVE_SPACE(40); 2583 write_cinfo(&p, &open->op_cinfo); 2584 WRITE32(open->op_rflags); 2585 WRITE32(2); 2586 WRITE32(open->op_bmval[0]); 2587 WRITE32(open->op_bmval[1]); 2588 WRITE32(open->op_delegate_type); 2589 ADJUST_ARGS(); 2590 2591 switch (open->op_delegate_type) { 2592 case NFS4_OPEN_DELEGATE_NONE: 2593 break; 2594 case NFS4_OPEN_DELEGATE_READ: 2595 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2596 RESERVE_SPACE(20); 2597 WRITE32(open->op_recall); 2598 2599 /* 2600 * TODO: ACE's in delegations 2601 */ 2602 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2603 WRITE32(0); 2604 WRITE32(0); 2605 WRITE32(0); /* XXX: is NULL principal ok? */ 2606 ADJUST_ARGS(); 2607 break; 2608 case NFS4_OPEN_DELEGATE_WRITE: 2609 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2610 RESERVE_SPACE(32); 2611 WRITE32(0); 2612 2613 /* 2614 * TODO: space_limit's in delegations 2615 */ 2616 WRITE32(NFS4_LIMIT_SIZE); 2617 WRITE32(~(u32)0); 2618 WRITE32(~(u32)0); 2619 2620 /* 2621 * TODO: ACE's in delegations 2622 */ 2623 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2624 WRITE32(0); 2625 WRITE32(0); 2626 WRITE32(0); /* XXX: is NULL principal ok? */ 2627 ADJUST_ARGS(); 2628 break; 2629 default: 2630 BUG(); 2631 } 2632 /* XXX save filehandle here */ 2633 out: 2634 ENCODE_SEQID_OP_TAIL(open->op_stateowner); 2635 return nfserr; 2636 } 2637 2638 static __be32 2639 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc) 2640 { 2641 ENCODE_SEQID_OP_HEAD; 2642 2643 if (!nfserr) 2644 nfsd4_encode_stateid(resp, &oc->oc_resp_stateid); 2645 2646 ENCODE_SEQID_OP_TAIL(oc->oc_stateowner); 2647 return nfserr; 2648 } 2649 2650 static __be32 2651 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od) 2652 { 2653 ENCODE_SEQID_OP_HEAD; 2654 2655 if (!nfserr) 2656 nfsd4_encode_stateid(resp, &od->od_stateid); 2657 2658 ENCODE_SEQID_OP_TAIL(od->od_stateowner); 2659 return nfserr; 2660 } 2661 2662 static __be32 2663 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr, 2664 struct nfsd4_read *read) 2665 { 2666 u32 eof; 2667 int v, pn; 2668 unsigned long maxcount; 2669 long len; 2670 __be32 *p; 2671 2672 if (nfserr) 2673 return nfserr; 2674 if (resp->xbuf->page_len) 2675 return nfserr_resource; 2676 2677 RESERVE_SPACE(8); /* eof flag and byte count */ 2678 2679 maxcount = svc_max_payload(resp->rqstp); 2680 if (maxcount > read->rd_length) 2681 maxcount = read->rd_length; 2682 2683 len = maxcount; 2684 v = 0; 2685 while (len > 0) { 2686 pn = resp->rqstp->rq_resused++; 2687 resp->rqstp->rq_vec[v].iov_base = 2688 page_address(resp->rqstp->rq_respages[pn]); 2689 resp->rqstp->rq_vec[v].iov_len = 2690 len < PAGE_SIZE ? len : PAGE_SIZE; 2691 v++; 2692 len -= PAGE_SIZE; 2693 } 2694 read->rd_vlen = v; 2695 2696 nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp, 2697 read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen, 2698 &maxcount); 2699 2700 if (nfserr == nfserr_symlink) 2701 nfserr = nfserr_inval; 2702 if (nfserr) 2703 return nfserr; 2704 eof = (read->rd_offset + maxcount >= 2705 read->rd_fhp->fh_dentry->d_inode->i_size); 2706 2707 WRITE32(eof); 2708 WRITE32(maxcount); 2709 ADJUST_ARGS(); 2710 resp->xbuf->head[0].iov_len = (char*)p 2711 - (char*)resp->xbuf->head[0].iov_base; 2712 resp->xbuf->page_len = maxcount; 2713 2714 /* Use rest of head for padding and remaining ops: */ 2715 resp->xbuf->tail[0].iov_base = p; 2716 resp->xbuf->tail[0].iov_len = 0; 2717 if (maxcount&3) { 2718 RESERVE_SPACE(4); 2719 WRITE32(0); 2720 resp->xbuf->tail[0].iov_base += maxcount&3; 2721 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 2722 ADJUST_ARGS(); 2723 } 2724 return 0; 2725 } 2726 2727 static __be32 2728 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink) 2729 { 2730 int maxcount; 2731 char *page; 2732 __be32 *p; 2733 2734 if (nfserr) 2735 return nfserr; 2736 if (resp->xbuf->page_len) 2737 return nfserr_resource; 2738 2739 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]); 2740 2741 maxcount = PAGE_SIZE; 2742 RESERVE_SPACE(4); 2743 2744 /* 2745 * XXX: By default, the ->readlink() VFS op will truncate symlinks 2746 * if they would overflow the buffer. Is this kosher in NFSv4? If 2747 * not, one easy fix is: if ->readlink() precisely fills the buffer, 2748 * assume that truncation occurred, and return NFS4ERR_RESOURCE. 2749 */ 2750 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount); 2751 if (nfserr == nfserr_isdir) 2752 return nfserr_inval; 2753 if (nfserr) 2754 return nfserr; 2755 2756 WRITE32(maxcount); 2757 ADJUST_ARGS(); 2758 resp->xbuf->head[0].iov_len = (char*)p 2759 - (char*)resp->xbuf->head[0].iov_base; 2760 resp->xbuf->page_len = maxcount; 2761 2762 /* Use rest of head for padding and remaining ops: */ 2763 resp->xbuf->tail[0].iov_base = p; 2764 resp->xbuf->tail[0].iov_len = 0; 2765 if (maxcount&3) { 2766 RESERVE_SPACE(4); 2767 WRITE32(0); 2768 resp->xbuf->tail[0].iov_base += maxcount&3; 2769 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 2770 ADJUST_ARGS(); 2771 } 2772 return 0; 2773 } 2774 2775 static __be32 2776 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir) 2777 { 2778 int maxcount; 2779 loff_t offset; 2780 __be32 *page, *savep, *tailbase; 2781 __be32 *p; 2782 2783 if (nfserr) 2784 return nfserr; 2785 if (resp->xbuf->page_len) 2786 return nfserr_resource; 2787 2788 RESERVE_SPACE(8); /* verifier */ 2789 savep = p; 2790 2791 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */ 2792 WRITE32(0); 2793 WRITE32(0); 2794 ADJUST_ARGS(); 2795 resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base; 2796 tailbase = p; 2797 2798 maxcount = PAGE_SIZE; 2799 if (maxcount > readdir->rd_maxcount) 2800 maxcount = readdir->rd_maxcount; 2801 2802 /* 2803 * Convert from bytes to words, account for the two words already 2804 * written, make sure to leave two words at the end for the next 2805 * pointer and eof field. 2806 */ 2807 maxcount = (maxcount >> 2) - 4; 2808 if (maxcount < 0) { 2809 nfserr = nfserr_toosmall; 2810 goto err_no_verf; 2811 } 2812 2813 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]); 2814 readdir->common.err = 0; 2815 readdir->buflen = maxcount; 2816 readdir->buffer = page; 2817 readdir->offset = NULL; 2818 2819 offset = readdir->rd_cookie; 2820 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, 2821 &offset, 2822 &readdir->common, nfsd4_encode_dirent); 2823 if (nfserr == nfs_ok && 2824 readdir->common.err == nfserr_toosmall && 2825 readdir->buffer == page) 2826 nfserr = nfserr_toosmall; 2827 if (nfserr == nfserr_symlink) 2828 nfserr = nfserr_notdir; 2829 if (nfserr) 2830 goto err_no_verf; 2831 2832 if (readdir->offset) 2833 xdr_encode_hyper(readdir->offset, offset); 2834 2835 p = readdir->buffer; 2836 *p++ = 0; /* no more entries */ 2837 *p++ = htonl(readdir->common.err == nfserr_eof); 2838 resp->xbuf->page_len = ((char*)p) - (char*)page_address( 2839 resp->rqstp->rq_respages[resp->rqstp->rq_resused-1]); 2840 2841 /* Use rest of head for padding and remaining ops: */ 2842 resp->xbuf->tail[0].iov_base = tailbase; 2843 resp->xbuf->tail[0].iov_len = 0; 2844 resp->p = resp->xbuf->tail[0].iov_base; 2845 resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4; 2846 2847 return 0; 2848 err_no_verf: 2849 p = savep; 2850 ADJUST_ARGS(); 2851 return nfserr; 2852 } 2853 2854 static __be32 2855 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove) 2856 { 2857 __be32 *p; 2858 2859 if (!nfserr) { 2860 RESERVE_SPACE(20); 2861 write_cinfo(&p, &remove->rm_cinfo); 2862 ADJUST_ARGS(); 2863 } 2864 return nfserr; 2865 } 2866 2867 static __be32 2868 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename) 2869 { 2870 __be32 *p; 2871 2872 if (!nfserr) { 2873 RESERVE_SPACE(40); 2874 write_cinfo(&p, &rename->rn_sinfo); 2875 write_cinfo(&p, &rename->rn_tinfo); 2876 ADJUST_ARGS(); 2877 } 2878 return nfserr; 2879 } 2880 2881 static __be32 2882 nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp, 2883 __be32 nfserr,struct svc_export *exp) 2884 { 2885 int i = 0; 2886 u32 nflavs; 2887 struct exp_flavor_info *flavs; 2888 struct exp_flavor_info def_flavs[2]; 2889 __be32 *p; 2890 2891 if (nfserr) 2892 goto out; 2893 if (exp->ex_nflavors) { 2894 flavs = exp->ex_flavors; 2895 nflavs = exp->ex_nflavors; 2896 } else { /* Handling of some defaults in absence of real secinfo: */ 2897 flavs = def_flavs; 2898 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) { 2899 nflavs = 2; 2900 flavs[0].pseudoflavor = RPC_AUTH_UNIX; 2901 flavs[1].pseudoflavor = RPC_AUTH_NULL; 2902 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) { 2903 nflavs = 1; 2904 flavs[0].pseudoflavor 2905 = svcauth_gss_flavor(exp->ex_client); 2906 } else { 2907 nflavs = 1; 2908 flavs[0].pseudoflavor 2909 = exp->ex_client->flavour->flavour; 2910 } 2911 } 2912 2913 RESERVE_SPACE(4); 2914 WRITE32(nflavs); 2915 ADJUST_ARGS(); 2916 for (i = 0; i < nflavs; i++) { 2917 u32 flav = flavs[i].pseudoflavor; 2918 struct gss_api_mech *gm = gss_mech_get_by_pseudoflavor(flav); 2919 2920 if (gm) { 2921 RESERVE_SPACE(4); 2922 WRITE32(RPC_AUTH_GSS); 2923 ADJUST_ARGS(); 2924 RESERVE_SPACE(4 + gm->gm_oid.len); 2925 WRITE32(gm->gm_oid.len); 2926 WRITEMEM(gm->gm_oid.data, gm->gm_oid.len); 2927 ADJUST_ARGS(); 2928 RESERVE_SPACE(4); 2929 WRITE32(0); /* qop */ 2930 ADJUST_ARGS(); 2931 RESERVE_SPACE(4); 2932 WRITE32(gss_pseudoflavor_to_service(gm, flav)); 2933 ADJUST_ARGS(); 2934 gss_mech_put(gm); 2935 } else { 2936 RESERVE_SPACE(4); 2937 WRITE32(flav); 2938 ADJUST_ARGS(); 2939 } 2940 } 2941 out: 2942 if (exp) 2943 exp_put(exp); 2944 return nfserr; 2945 } 2946 2947 static __be32 2948 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 2949 struct nfsd4_secinfo *secinfo) 2950 { 2951 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp); 2952 } 2953 2954 static __be32 2955 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr, 2956 struct nfsd4_secinfo_no_name *secinfo) 2957 { 2958 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp); 2959 } 2960 2961 /* 2962 * The SETATTR encode routine is special -- it always encodes a bitmap, 2963 * regardless of the error status. 2964 */ 2965 static __be32 2966 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr) 2967 { 2968 __be32 *p; 2969 2970 RESERVE_SPACE(12); 2971 if (nfserr) { 2972 WRITE32(2); 2973 WRITE32(0); 2974 WRITE32(0); 2975 } 2976 else { 2977 WRITE32(2); 2978 WRITE32(setattr->sa_bmval[0]); 2979 WRITE32(setattr->sa_bmval[1]); 2980 } 2981 ADJUST_ARGS(); 2982 return nfserr; 2983 } 2984 2985 static __be32 2986 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd) 2987 { 2988 __be32 *p; 2989 2990 if (!nfserr) { 2991 RESERVE_SPACE(8 + sizeof(nfs4_verifier)); 2992 WRITEMEM(&scd->se_clientid, 8); 2993 WRITEMEM(&scd->se_confirm, sizeof(nfs4_verifier)); 2994 ADJUST_ARGS(); 2995 } 2996 else if (nfserr == nfserr_clid_inuse) { 2997 RESERVE_SPACE(8); 2998 WRITE32(0); 2999 WRITE32(0); 3000 ADJUST_ARGS(); 3001 } 3002 return nfserr; 3003 } 3004 3005 static __be32 3006 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write) 3007 { 3008 __be32 *p; 3009 3010 if (!nfserr) { 3011 RESERVE_SPACE(16); 3012 WRITE32(write->wr_bytes_written); 3013 WRITE32(write->wr_how_written); 3014 WRITEMEM(write->wr_verifier.data, 8); 3015 ADJUST_ARGS(); 3016 } 3017 return nfserr; 3018 } 3019 3020 static __be32 3021 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, int nfserr, 3022 struct nfsd4_exchange_id *exid) 3023 { 3024 __be32 *p; 3025 char *major_id; 3026 char *server_scope; 3027 int major_id_sz; 3028 int server_scope_sz; 3029 uint64_t minor_id = 0; 3030 3031 if (nfserr) 3032 return nfserr; 3033 3034 major_id = utsname()->nodename; 3035 major_id_sz = strlen(major_id); 3036 server_scope = utsname()->nodename; 3037 server_scope_sz = strlen(server_scope); 3038 3039 RESERVE_SPACE( 3040 8 /* eir_clientid */ + 3041 4 /* eir_sequenceid */ + 3042 4 /* eir_flags */ + 3043 4 /* spr_how (SP4_NONE) */ + 3044 8 /* so_minor_id */ + 3045 4 /* so_major_id.len */ + 3046 (XDR_QUADLEN(major_id_sz) * 4) + 3047 4 /* eir_server_scope.len */ + 3048 (XDR_QUADLEN(server_scope_sz) * 4) + 3049 4 /* eir_server_impl_id.count (0) */); 3050 3051 WRITEMEM(&exid->clientid, 8); 3052 WRITE32(exid->seqid); 3053 WRITE32(exid->flags); 3054 3055 /* state_protect4_r. Currently only support SP4_NONE */ 3056 BUG_ON(exid->spa_how != SP4_NONE); 3057 WRITE32(exid->spa_how); 3058 3059 /* The server_owner struct */ 3060 WRITE64(minor_id); /* Minor id */ 3061 /* major id */ 3062 WRITE32(major_id_sz); 3063 WRITEMEM(major_id, major_id_sz); 3064 3065 /* Server scope */ 3066 WRITE32(server_scope_sz); 3067 WRITEMEM(server_scope, server_scope_sz); 3068 3069 /* Implementation id */ 3070 WRITE32(0); /* zero length nfs_impl_id4 array */ 3071 ADJUST_ARGS(); 3072 return 0; 3073 } 3074 3075 static __be32 3076 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, int nfserr, 3077 struct nfsd4_create_session *sess) 3078 { 3079 __be32 *p; 3080 3081 if (nfserr) 3082 return nfserr; 3083 3084 RESERVE_SPACE(24); 3085 WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3086 WRITE32(sess->seqid); 3087 WRITE32(sess->flags); 3088 ADJUST_ARGS(); 3089 3090 RESERVE_SPACE(28); 3091 WRITE32(0); /* headerpadsz */ 3092 WRITE32(sess->fore_channel.maxreq_sz); 3093 WRITE32(sess->fore_channel.maxresp_sz); 3094 WRITE32(sess->fore_channel.maxresp_cached); 3095 WRITE32(sess->fore_channel.maxops); 3096 WRITE32(sess->fore_channel.maxreqs); 3097 WRITE32(sess->fore_channel.nr_rdma_attrs); 3098 ADJUST_ARGS(); 3099 3100 if (sess->fore_channel.nr_rdma_attrs) { 3101 RESERVE_SPACE(4); 3102 WRITE32(sess->fore_channel.rdma_attrs); 3103 ADJUST_ARGS(); 3104 } 3105 3106 RESERVE_SPACE(28); 3107 WRITE32(0); /* headerpadsz */ 3108 WRITE32(sess->back_channel.maxreq_sz); 3109 WRITE32(sess->back_channel.maxresp_sz); 3110 WRITE32(sess->back_channel.maxresp_cached); 3111 WRITE32(sess->back_channel.maxops); 3112 WRITE32(sess->back_channel.maxreqs); 3113 WRITE32(sess->back_channel.nr_rdma_attrs); 3114 ADJUST_ARGS(); 3115 3116 if (sess->back_channel.nr_rdma_attrs) { 3117 RESERVE_SPACE(4); 3118 WRITE32(sess->back_channel.rdma_attrs); 3119 ADJUST_ARGS(); 3120 } 3121 return 0; 3122 } 3123 3124 static __be32 3125 nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, int nfserr, 3126 struct nfsd4_destroy_session *destroy_session) 3127 { 3128 return nfserr; 3129 } 3130 3131 static __be32 3132 nfsd4_encode_free_stateid(struct nfsd4_compoundres *resp, int nfserr, 3133 struct nfsd4_free_stateid *free_stateid) 3134 { 3135 __be32 *p; 3136 3137 if (nfserr) 3138 return nfserr; 3139 3140 RESERVE_SPACE(4); 3141 WRITE32(nfserr); 3142 ADJUST_ARGS(); 3143 return nfserr; 3144 } 3145 3146 static __be32 3147 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, int nfserr, 3148 struct nfsd4_sequence *seq) 3149 { 3150 __be32 *p; 3151 3152 if (nfserr) 3153 return nfserr; 3154 3155 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20); 3156 WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3157 WRITE32(seq->seqid); 3158 WRITE32(seq->slotid); 3159 WRITE32(seq->maxslots); 3160 /* For now: target_maxslots = maxslots */ 3161 WRITE32(seq->maxslots); 3162 WRITE32(seq->status_flags); 3163 3164 ADJUST_ARGS(); 3165 resp->cstate.datap = p; /* DRC cache data pointer */ 3166 return 0; 3167 } 3168 3169 static __be32 3170 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p) 3171 { 3172 return nfserr; 3173 } 3174 3175 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *); 3176 3177 /* 3178 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1 3179 * since we don't need to filter out obsolete ops as this is 3180 * done in the decoding phase. 3181 */ 3182 static nfsd4_enc nfsd4_enc_ops[] = { 3183 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access, 3184 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close, 3185 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit, 3186 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create, 3187 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop, 3188 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3189 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr, 3190 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh, 3191 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link, 3192 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock, 3193 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt, 3194 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku, 3195 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop, 3196 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop, 3197 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3198 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open, 3199 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop, 3200 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm, 3201 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade, 3202 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop, 3203 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop, 3204 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop, 3205 [OP_READ] = (nfsd4_enc)nfsd4_encode_read, 3206 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir, 3207 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink, 3208 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove, 3209 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename, 3210 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop, 3211 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop, 3212 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop, 3213 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo, 3214 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr, 3215 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid, 3216 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop, 3217 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3218 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write, 3219 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop, 3220 3221 /* NFSv4.1 operations */ 3222 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop, 3223 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session, 3224 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id, 3225 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session, 3226 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_destroy_session, 3227 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_free_stateid, 3228 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3229 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop, 3230 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 3231 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop, 3232 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop, 3233 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3234 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name, 3235 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence, 3236 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop, 3237 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_noop, 3238 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3239 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop, 3240 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop, 3241 }; 3242 3243 /* 3244 * Calculate the total amount of memory that the compound response has taken 3245 * after encoding the current operation. 3246 * 3247 * pad: add on 8 bytes for the next operation's op_code and status so that 3248 * there is room to cache a failure on the next operation. 3249 * 3250 * Compare this length to the session se_fmaxresp_cached. 3251 * 3252 * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so 3253 * will be at least a page and will therefore hold the xdr_buf head. 3254 */ 3255 static int nfsd4_check_drc_limit(struct nfsd4_compoundres *resp) 3256 { 3257 int status = 0; 3258 struct xdr_buf *xb = &resp->rqstp->rq_res; 3259 struct nfsd4_compoundargs *args = resp->rqstp->rq_argp; 3260 struct nfsd4_session *session = NULL; 3261 struct nfsd4_slot *slot = resp->cstate.slot; 3262 u32 length, tlen = 0, pad = 8; 3263 3264 if (!nfsd4_has_session(&resp->cstate)) 3265 return status; 3266 3267 session = resp->cstate.session; 3268 if (session == NULL || slot->sl_cachethis == 0) 3269 return status; 3270 3271 if (resp->opcnt >= args->opcnt) 3272 pad = 0; /* this is the last operation */ 3273 3274 if (xb->page_len == 0) { 3275 length = (char *)resp->p - (char *)xb->head[0].iov_base + pad; 3276 } else { 3277 if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0) 3278 tlen = (char *)resp->p - (char *)xb->tail[0].iov_base; 3279 3280 length = xb->head[0].iov_len + xb->page_len + tlen + pad; 3281 } 3282 dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__, 3283 length, xb->page_len, tlen, pad); 3284 3285 if (length <= session->se_fchannel.maxresp_cached) 3286 return status; 3287 else 3288 return nfserr_rep_too_big_to_cache; 3289 } 3290 3291 void 3292 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3293 { 3294 __be32 *statp; 3295 __be32 *p; 3296 3297 RESERVE_SPACE(8); 3298 WRITE32(op->opnum); 3299 statp = p++; /* to be backfilled at the end */ 3300 ADJUST_ARGS(); 3301 3302 if (op->opnum == OP_ILLEGAL) 3303 goto status; 3304 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) || 3305 !nfsd4_enc_ops[op->opnum]); 3306 op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u); 3307 /* nfsd4_check_drc_limit guarantees enough room for error status */ 3308 if (!op->status && nfsd4_check_drc_limit(resp)) 3309 op->status = nfserr_rep_too_big_to_cache; 3310 status: 3311 /* 3312 * Note: We write the status directly, instead of using WRITE32(), 3313 * since it is already in network byte order. 3314 */ 3315 *statp = op->status; 3316 } 3317 3318 /* 3319 * Encode the reply stored in the stateowner reply cache 3320 * 3321 * XDR note: do not encode rp->rp_buflen: the buffer contains the 3322 * previously sent already encoded operation. 3323 * 3324 * called with nfs4_lock_state() held 3325 */ 3326 void 3327 nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3328 { 3329 __be32 *p; 3330 struct nfs4_replay *rp = op->replay; 3331 3332 BUG_ON(!rp); 3333 3334 RESERVE_SPACE(8); 3335 WRITE32(op->opnum); 3336 *p++ = rp->rp_status; /* already xdr'ed */ 3337 ADJUST_ARGS(); 3338 3339 RESERVE_SPACE(rp->rp_buflen); 3340 WRITEMEM(rp->rp_buf, rp->rp_buflen); 3341 ADJUST_ARGS(); 3342 } 3343 3344 int 3345 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy) 3346 { 3347 return xdr_ressize_check(rqstp, p); 3348 } 3349 3350 void nfsd4_release_compoundargs(struct nfsd4_compoundargs *args) 3351 { 3352 if (args->ops != args->iops) { 3353 kfree(args->ops); 3354 args->ops = args->iops; 3355 } 3356 kfree(args->tmpp); 3357 args->tmpp = NULL; 3358 while (args->to_free) { 3359 struct tmpbuf *tb = args->to_free; 3360 args->to_free = tb->next; 3361 tb->release(tb->buf); 3362 kfree(tb); 3363 } 3364 } 3365 3366 int 3367 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args) 3368 { 3369 __be32 status; 3370 3371 args->p = p; 3372 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len; 3373 args->pagelist = rqstp->rq_arg.pages; 3374 args->pagelen = rqstp->rq_arg.page_len; 3375 args->tmpp = NULL; 3376 args->to_free = NULL; 3377 args->ops = args->iops; 3378 args->rqstp = rqstp; 3379 3380 status = nfsd4_decode_compound(args); 3381 if (status) { 3382 nfsd4_release_compoundargs(args); 3383 } 3384 return !status; 3385 } 3386 3387 int 3388 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp) 3389 { 3390 /* 3391 * All that remains is to write the tag and operation count... 3392 */ 3393 struct nfsd4_compound_state *cs = &resp->cstate; 3394 struct kvec *iov; 3395 p = resp->tagp; 3396 *p++ = htonl(resp->taglen); 3397 memcpy(p, resp->tag, resp->taglen); 3398 p += XDR_QUADLEN(resp->taglen); 3399 *p++ = htonl(resp->opcnt); 3400 3401 if (rqstp->rq_res.page_len) 3402 iov = &rqstp->rq_res.tail[0]; 3403 else 3404 iov = &rqstp->rq_res.head[0]; 3405 iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base; 3406 BUG_ON(iov->iov_len > PAGE_SIZE); 3407 if (nfsd4_has_session(cs)) { 3408 if (cs->status != nfserr_replay_cache) { 3409 nfsd4_store_cache_entry(resp); 3410 dprintk("%s: SET SLOT STATE TO AVAILABLE\n", __func__); 3411 cs->slot->sl_inuse = false; 3412 } 3413 /* Renew the clientid on success and on replay */ 3414 release_session_client(cs->session); 3415 nfsd4_put_session(cs->session); 3416 } 3417 return 1; 3418 } 3419 3420 /* 3421 * Local variables: 3422 * c-basic-offset: 8 3423 * End: 3424 */ 3425