1 /* 2 * Server-side procedures for NFSv4. 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 */ 35 #include <linux/fs_struct.h> 36 #include <linux/file.h> 37 #include <linux/falloc.h> 38 #include <linux/slab.h> 39 #include <linux/kthread.h> 40 41 #include "idmap.h" 42 #include "cache.h" 43 #include "xdr4.h" 44 #include "vfs.h" 45 #include "current_stateid.h" 46 #include "netns.h" 47 #include "acl.h" 48 #include "pnfs.h" 49 #include "trace.h" 50 51 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 52 #include <linux/security.h> 53 54 static inline void 55 nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval) 56 { 57 struct inode *inode = d_inode(resfh->fh_dentry); 58 int status; 59 60 inode_lock(inode); 61 status = security_inode_setsecctx(resfh->fh_dentry, 62 label->data, label->len); 63 inode_unlock(inode); 64 65 if (status) 66 /* 67 * XXX: We should really fail the whole open, but we may 68 * already have created a new file, so it may be too 69 * late. For now this seems the least of evils: 70 */ 71 bmval[2] &= ~FATTR4_WORD2_SECURITY_LABEL; 72 73 return; 74 } 75 #else 76 static inline void 77 nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval) 78 { } 79 #endif 80 81 #define NFSDDBG_FACILITY NFSDDBG_PROC 82 83 static u32 nfsd_attrmask[] = { 84 NFSD_WRITEABLE_ATTRS_WORD0, 85 NFSD_WRITEABLE_ATTRS_WORD1, 86 NFSD_WRITEABLE_ATTRS_WORD2 87 }; 88 89 static u32 nfsd41_ex_attrmask[] = { 90 NFSD_SUPPATTR_EXCLCREAT_WORD0, 91 NFSD_SUPPATTR_EXCLCREAT_WORD1, 92 NFSD_SUPPATTR_EXCLCREAT_WORD2 93 }; 94 95 static __be32 96 check_attr_support(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 97 u32 *bmval, u32 *writable) 98 { 99 struct dentry *dentry = cstate->current_fh.fh_dentry; 100 struct svc_export *exp = cstate->current_fh.fh_export; 101 102 if (!nfsd_attrs_supported(cstate->minorversion, bmval)) 103 return nfserr_attrnotsupp; 104 if ((bmval[0] & FATTR4_WORD0_ACL) && !IS_POSIXACL(d_inode(dentry))) 105 return nfserr_attrnotsupp; 106 if ((bmval[2] & FATTR4_WORD2_SECURITY_LABEL) && 107 !(exp->ex_flags & NFSEXP_SECURITY_LABEL)) 108 return nfserr_attrnotsupp; 109 if (writable && !bmval_is_subset(bmval, writable)) 110 return nfserr_inval; 111 if (writable && (bmval[2] & FATTR4_WORD2_MODE_UMASK) && 112 (bmval[1] & FATTR4_WORD1_MODE)) 113 return nfserr_inval; 114 return nfs_ok; 115 } 116 117 static __be32 118 nfsd4_check_open_attributes(struct svc_rqst *rqstp, 119 struct nfsd4_compound_state *cstate, struct nfsd4_open *open) 120 { 121 __be32 status = nfs_ok; 122 123 if (open->op_create == NFS4_OPEN_CREATE) { 124 if (open->op_createmode == NFS4_CREATE_UNCHECKED 125 || open->op_createmode == NFS4_CREATE_GUARDED) 126 status = check_attr_support(rqstp, cstate, 127 open->op_bmval, nfsd_attrmask); 128 else if (open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1) 129 status = check_attr_support(rqstp, cstate, 130 open->op_bmval, nfsd41_ex_attrmask); 131 } 132 133 return status; 134 } 135 136 static int 137 is_create_with_attrs(struct nfsd4_open *open) 138 { 139 return open->op_create == NFS4_OPEN_CREATE 140 && (open->op_createmode == NFS4_CREATE_UNCHECKED 141 || open->op_createmode == NFS4_CREATE_GUARDED 142 || open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1); 143 } 144 145 /* 146 * if error occurs when setting the acl, just clear the acl bit 147 * in the returned attr bitmap. 148 */ 149 static void 150 do_set_nfs4_acl(struct svc_rqst *rqstp, struct svc_fh *fhp, 151 struct nfs4_acl *acl, u32 *bmval) 152 { 153 __be32 status; 154 155 status = nfsd4_set_nfs4_acl(rqstp, fhp, acl); 156 if (status) 157 /* 158 * We should probably fail the whole open at this point, 159 * but we've already created the file, so it's too late; 160 * So this seems the least of evils: 161 */ 162 bmval[0] &= ~FATTR4_WORD0_ACL; 163 } 164 165 static inline void 166 fh_dup2(struct svc_fh *dst, struct svc_fh *src) 167 { 168 fh_put(dst); 169 dget(src->fh_dentry); 170 if (src->fh_export) 171 exp_get(src->fh_export); 172 *dst = *src; 173 } 174 175 static __be32 176 do_open_permission(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open, int accmode) 177 { 178 __be32 status; 179 180 if (open->op_truncate && 181 !(open->op_share_access & NFS4_SHARE_ACCESS_WRITE)) 182 return nfserr_inval; 183 184 accmode |= NFSD_MAY_READ_IF_EXEC; 185 186 if (open->op_share_access & NFS4_SHARE_ACCESS_READ) 187 accmode |= NFSD_MAY_READ; 188 if (open->op_share_access & NFS4_SHARE_ACCESS_WRITE) 189 accmode |= (NFSD_MAY_WRITE | NFSD_MAY_TRUNC); 190 if (open->op_share_deny & NFS4_SHARE_DENY_READ) 191 accmode |= NFSD_MAY_WRITE; 192 193 status = fh_verify(rqstp, current_fh, S_IFREG, accmode); 194 195 return status; 196 } 197 198 static __be32 nfsd_check_obj_isreg(struct svc_fh *fh) 199 { 200 umode_t mode = d_inode(fh->fh_dentry)->i_mode; 201 202 if (S_ISREG(mode)) 203 return nfs_ok; 204 if (S_ISDIR(mode)) 205 return nfserr_isdir; 206 /* 207 * Using err_symlink as our catch-all case may look odd; but 208 * there's no other obvious error for this case in 4.0, and we 209 * happen to know that it will cause the linux v4 client to do 210 * the right thing on attempts to open something other than a 211 * regular file. 212 */ 213 return nfserr_symlink; 214 } 215 216 static void nfsd4_set_open_owner_reply_cache(struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh *resfh) 217 { 218 if (nfsd4_has_session(cstate)) 219 return; 220 fh_copy_shallow(&open->op_openowner->oo_owner.so_replay.rp_openfh, 221 &resfh->fh_handle); 222 } 223 224 static __be32 225 do_open_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh **resfh) 226 { 227 struct svc_fh *current_fh = &cstate->current_fh; 228 int accmode; 229 __be32 status; 230 231 *resfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL); 232 if (!*resfh) 233 return nfserr_jukebox; 234 fh_init(*resfh, NFS4_FHSIZE); 235 open->op_truncate = 0; 236 237 if (open->op_create) { 238 /* FIXME: check session persistence and pnfs flags. 239 * The nfsv4.1 spec requires the following semantics: 240 * 241 * Persistent | pNFS | Server REQUIRED | Client Allowed 242 * Reply Cache | server | | 243 * -------------+--------+-----------------+-------------------- 244 * no | no | EXCLUSIVE4_1 | EXCLUSIVE4_1 245 * | | | (SHOULD) 246 * | | and EXCLUSIVE4 | or EXCLUSIVE4 247 * | | | (SHOULD NOT) 248 * no | yes | EXCLUSIVE4_1 | EXCLUSIVE4_1 249 * yes | no | GUARDED4 | GUARDED4 250 * yes | yes | GUARDED4 | GUARDED4 251 */ 252 253 /* 254 * Note: create modes (UNCHECKED,GUARDED...) are the same 255 * in NFSv4 as in v3 except EXCLUSIVE4_1. 256 */ 257 current->fs->umask = open->op_umask; 258 status = do_nfsd_create(rqstp, current_fh, open->op_fname.data, 259 open->op_fname.len, &open->op_iattr, 260 *resfh, open->op_createmode, 261 (u32 *)open->op_verf.data, 262 &open->op_truncate, &open->op_created); 263 current->fs->umask = 0; 264 265 if (!status && open->op_label.len) 266 nfsd4_security_inode_setsecctx(*resfh, &open->op_label, open->op_bmval); 267 268 /* 269 * Following rfc 3530 14.2.16, and rfc 5661 18.16.4 270 * use the returned bitmask to indicate which attributes 271 * we used to store the verifier: 272 */ 273 if (nfsd_create_is_exclusive(open->op_createmode) && status == 0) 274 open->op_bmval[1] |= (FATTR4_WORD1_TIME_ACCESS | 275 FATTR4_WORD1_TIME_MODIFY); 276 } else 277 /* 278 * Note this may exit with the parent still locked. 279 * We will hold the lock until nfsd4_open's final 280 * lookup, to prevent renames or unlinks until we've had 281 * a chance to an acquire a delegation if appropriate. 282 */ 283 status = nfsd_lookup(rqstp, current_fh, 284 open->op_fname.data, open->op_fname.len, *resfh); 285 if (status) 286 goto out; 287 status = nfsd_check_obj_isreg(*resfh); 288 if (status) 289 goto out; 290 291 if (is_create_with_attrs(open) && open->op_acl != NULL) 292 do_set_nfs4_acl(rqstp, *resfh, open->op_acl, open->op_bmval); 293 294 nfsd4_set_open_owner_reply_cache(cstate, open, *resfh); 295 accmode = NFSD_MAY_NOP; 296 if (open->op_created || 297 open->op_claim_type == NFS4_OPEN_CLAIM_DELEGATE_CUR) 298 accmode |= NFSD_MAY_OWNER_OVERRIDE; 299 status = do_open_permission(rqstp, *resfh, open, accmode); 300 set_change_info(&open->op_cinfo, current_fh); 301 out: 302 return status; 303 } 304 305 static __be32 306 do_open_fhandle(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open) 307 { 308 struct svc_fh *current_fh = &cstate->current_fh; 309 __be32 status; 310 int accmode = 0; 311 312 /* We don't know the target directory, and therefore can not 313 * set the change info 314 */ 315 316 memset(&open->op_cinfo, 0, sizeof(struct nfsd4_change_info)); 317 318 nfsd4_set_open_owner_reply_cache(cstate, open, current_fh); 319 320 open->op_truncate = (open->op_iattr.ia_valid & ATTR_SIZE) && 321 (open->op_iattr.ia_size == 0); 322 /* 323 * In the delegation case, the client is telling us about an 324 * open that it *already* performed locally, some time ago. We 325 * should let it succeed now if possible. 326 * 327 * In the case of a CLAIM_FH open, on the other hand, the client 328 * may be counting on us to enforce permissions (the Linux 4.1 329 * client uses this for normal opens, for example). 330 */ 331 if (open->op_claim_type == NFS4_OPEN_CLAIM_DELEG_CUR_FH) 332 accmode = NFSD_MAY_OWNER_OVERRIDE; 333 334 status = do_open_permission(rqstp, current_fh, open, accmode); 335 336 return status; 337 } 338 339 static void 340 copy_clientid(clientid_t *clid, struct nfsd4_session *session) 341 { 342 struct nfsd4_sessionid *sid = 343 (struct nfsd4_sessionid *)session->se_sessionid.data; 344 345 clid->cl_boot = sid->clientid.cl_boot; 346 clid->cl_id = sid->clientid.cl_id; 347 } 348 349 static __be32 350 nfsd4_open(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 351 union nfsd4_op_u *u) 352 { 353 struct nfsd4_open *open = &u->open; 354 __be32 status; 355 struct svc_fh *resfh = NULL; 356 struct net *net = SVC_NET(rqstp); 357 struct nfsd_net *nn = net_generic(net, nfsd_net_id); 358 bool reclaim = false; 359 360 dprintk("NFSD: nfsd4_open filename %.*s op_openowner %p\n", 361 (int)open->op_fname.len, open->op_fname.data, 362 open->op_openowner); 363 364 /* This check required by spec. */ 365 if (open->op_create && open->op_claim_type != NFS4_OPEN_CLAIM_NULL) 366 return nfserr_inval; 367 368 open->op_created = 0; 369 /* 370 * RFC5661 18.51.3 371 * Before RECLAIM_COMPLETE done, server should deny new lock 372 */ 373 if (nfsd4_has_session(cstate) && 374 !test_bit(NFSD4_CLIENT_RECLAIM_COMPLETE, 375 &cstate->session->se_client->cl_flags) && 376 open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS) 377 return nfserr_grace; 378 379 if (nfsd4_has_session(cstate)) 380 copy_clientid(&open->op_clientid, cstate->session); 381 382 /* check seqid for replay. set nfs4_owner */ 383 status = nfsd4_process_open1(cstate, open, nn); 384 if (status == nfserr_replay_me) { 385 struct nfs4_replay *rp = &open->op_openowner->oo_owner.so_replay; 386 fh_put(&cstate->current_fh); 387 fh_copy_shallow(&cstate->current_fh.fh_handle, 388 &rp->rp_openfh); 389 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 390 if (status) 391 dprintk("nfsd4_open: replay failed" 392 " restoring previous filehandle\n"); 393 else 394 status = nfserr_replay_me; 395 } 396 if (status) 397 goto out; 398 if (open->op_xdr_error) { 399 status = open->op_xdr_error; 400 goto out; 401 } 402 403 status = nfsd4_check_open_attributes(rqstp, cstate, open); 404 if (status) 405 goto out; 406 407 /* Openowner is now set, so sequence id will get bumped. Now we need 408 * these checks before we do any creates: */ 409 status = nfserr_grace; 410 if (opens_in_grace(net) && open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS) 411 goto out; 412 status = nfserr_no_grace; 413 if (!opens_in_grace(net) && open->op_claim_type == NFS4_OPEN_CLAIM_PREVIOUS) 414 goto out; 415 416 switch (open->op_claim_type) { 417 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 418 case NFS4_OPEN_CLAIM_NULL: 419 status = do_open_lookup(rqstp, cstate, open, &resfh); 420 if (status) 421 goto out; 422 break; 423 case NFS4_OPEN_CLAIM_PREVIOUS: 424 status = nfs4_check_open_reclaim(&open->op_clientid, 425 cstate, nn); 426 if (status) 427 goto out; 428 open->op_openowner->oo_flags |= NFS4_OO_CONFIRMED; 429 reclaim = true; 430 case NFS4_OPEN_CLAIM_FH: 431 case NFS4_OPEN_CLAIM_DELEG_CUR_FH: 432 status = do_open_fhandle(rqstp, cstate, open); 433 if (status) 434 goto out; 435 resfh = &cstate->current_fh; 436 break; 437 case NFS4_OPEN_CLAIM_DELEG_PREV_FH: 438 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 439 dprintk("NFSD: unsupported OPEN claim type %d\n", 440 open->op_claim_type); 441 status = nfserr_notsupp; 442 goto out; 443 default: 444 dprintk("NFSD: Invalid OPEN claim type %d\n", 445 open->op_claim_type); 446 status = nfserr_inval; 447 goto out; 448 } 449 /* 450 * nfsd4_process_open2() does the actual opening of the file. If 451 * successful, it (1) truncates the file if open->op_truncate was 452 * set, (2) sets open->op_stateid, (3) sets open->op_delegation. 453 */ 454 status = nfsd4_process_open2(rqstp, resfh, open); 455 WARN(status && open->op_created, 456 "nfsd4_process_open2 failed to open newly-created file! status=%u\n", 457 be32_to_cpu(status)); 458 if (reclaim && !status) 459 nn->somebody_reclaimed = true; 460 out: 461 if (resfh && resfh != &cstate->current_fh) { 462 fh_dup2(&cstate->current_fh, resfh); 463 fh_put(resfh); 464 kfree(resfh); 465 } 466 nfsd4_cleanup_open_state(cstate, open); 467 nfsd4_bump_seqid(cstate, status); 468 return status; 469 } 470 471 /* 472 * OPEN is the only seqid-mutating operation whose decoding can fail 473 * with a seqid-mutating error (specifically, decoding of user names in 474 * the attributes). Therefore we have to do some processing to look up 475 * the stateowner so that we can bump the seqid. 476 */ 477 static __be32 nfsd4_open_omfg(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_op *op) 478 { 479 struct nfsd4_open *open = &op->u.open; 480 481 if (!seqid_mutating_err(ntohl(op->status))) 482 return op->status; 483 if (nfsd4_has_session(cstate)) 484 return op->status; 485 open->op_xdr_error = op->status; 486 return nfsd4_open(rqstp, cstate, &op->u); 487 } 488 489 /* 490 * filehandle-manipulating ops. 491 */ 492 static __be32 493 nfsd4_getfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 494 union nfsd4_op_u *u) 495 { 496 u->getfh = &cstate->current_fh; 497 return nfs_ok; 498 } 499 500 static __be32 501 nfsd4_putfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 502 union nfsd4_op_u *u) 503 { 504 struct nfsd4_putfh *putfh = &u->putfh; 505 506 fh_put(&cstate->current_fh); 507 cstate->current_fh.fh_handle.fh_size = putfh->pf_fhlen; 508 memcpy(&cstate->current_fh.fh_handle.fh_base, putfh->pf_fhval, 509 putfh->pf_fhlen); 510 return fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_BYPASS_GSS); 511 } 512 513 static __be32 514 nfsd4_putrootfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 515 union nfsd4_op_u *u) 516 { 517 __be32 status; 518 519 fh_put(&cstate->current_fh); 520 status = exp_pseudoroot(rqstp, &cstate->current_fh); 521 return status; 522 } 523 524 static __be32 525 nfsd4_restorefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 526 union nfsd4_op_u *u) 527 { 528 if (!cstate->save_fh.fh_dentry) 529 return nfserr_restorefh; 530 531 fh_dup2(&cstate->current_fh, &cstate->save_fh); 532 if (HAS_STATE_ID(cstate, SAVED_STATE_ID_FLAG)) { 533 memcpy(&cstate->current_stateid, &cstate->save_stateid, sizeof(stateid_t)); 534 SET_STATE_ID(cstate, CURRENT_STATE_ID_FLAG); 535 } 536 return nfs_ok; 537 } 538 539 static __be32 540 nfsd4_savefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 541 union nfsd4_op_u *u) 542 { 543 fh_dup2(&cstate->save_fh, &cstate->current_fh); 544 if (HAS_STATE_ID(cstate, CURRENT_STATE_ID_FLAG)) { 545 memcpy(&cstate->save_stateid, &cstate->current_stateid, sizeof(stateid_t)); 546 SET_STATE_ID(cstate, SAVED_STATE_ID_FLAG); 547 } 548 return nfs_ok; 549 } 550 551 /* 552 * misc nfsv4 ops 553 */ 554 static __be32 555 nfsd4_access(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 556 union nfsd4_op_u *u) 557 { 558 struct nfsd4_access *access = &u->access; 559 560 if (access->ac_req_access & ~NFS3_ACCESS_FULL) 561 return nfserr_inval; 562 563 access->ac_resp_access = access->ac_req_access; 564 return nfsd_access(rqstp, &cstate->current_fh, &access->ac_resp_access, 565 &access->ac_supported); 566 } 567 568 static void gen_boot_verifier(nfs4_verifier *verifier, struct net *net) 569 { 570 __be32 verf[2]; 571 struct nfsd_net *nn = net_generic(net, nfsd_net_id); 572 573 /* 574 * This is opaque to client, so no need to byte-swap. Use 575 * __force to keep sparse happy. y2038 time_t overflow is 576 * irrelevant in this usage. 577 */ 578 verf[0] = (__force __be32)nn->nfssvc_boot.tv_sec; 579 verf[1] = (__force __be32)nn->nfssvc_boot.tv_nsec; 580 memcpy(verifier->data, verf, sizeof(verifier->data)); 581 } 582 583 static __be32 584 nfsd4_commit(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 585 union nfsd4_op_u *u) 586 { 587 struct nfsd4_commit *commit = &u->commit; 588 589 gen_boot_verifier(&commit->co_verf, SVC_NET(rqstp)); 590 return nfsd_commit(rqstp, &cstate->current_fh, commit->co_offset, 591 commit->co_count); 592 } 593 594 static __be32 595 nfsd4_create(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 596 union nfsd4_op_u *u) 597 { 598 struct nfsd4_create *create = &u->create; 599 struct svc_fh resfh; 600 __be32 status; 601 dev_t rdev; 602 603 fh_init(&resfh, NFS4_FHSIZE); 604 605 status = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_NOP); 606 if (status) 607 return status; 608 609 status = check_attr_support(rqstp, cstate, create->cr_bmval, 610 nfsd_attrmask); 611 if (status) 612 return status; 613 614 current->fs->umask = create->cr_umask; 615 switch (create->cr_type) { 616 case NF4LNK: 617 status = nfsd_symlink(rqstp, &cstate->current_fh, 618 create->cr_name, create->cr_namelen, 619 create->cr_data, &resfh); 620 break; 621 622 case NF4BLK: 623 status = nfserr_inval; 624 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2); 625 if (MAJOR(rdev) != create->cr_specdata1 || 626 MINOR(rdev) != create->cr_specdata2) 627 goto out_umask; 628 status = nfsd_create(rqstp, &cstate->current_fh, 629 create->cr_name, create->cr_namelen, 630 &create->cr_iattr, S_IFBLK, rdev, &resfh); 631 break; 632 633 case NF4CHR: 634 status = nfserr_inval; 635 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2); 636 if (MAJOR(rdev) != create->cr_specdata1 || 637 MINOR(rdev) != create->cr_specdata2) 638 goto out_umask; 639 status = nfsd_create(rqstp, &cstate->current_fh, 640 create->cr_name, create->cr_namelen, 641 &create->cr_iattr,S_IFCHR, rdev, &resfh); 642 break; 643 644 case NF4SOCK: 645 status = nfsd_create(rqstp, &cstate->current_fh, 646 create->cr_name, create->cr_namelen, 647 &create->cr_iattr, S_IFSOCK, 0, &resfh); 648 break; 649 650 case NF4FIFO: 651 status = nfsd_create(rqstp, &cstate->current_fh, 652 create->cr_name, create->cr_namelen, 653 &create->cr_iattr, S_IFIFO, 0, &resfh); 654 break; 655 656 case NF4DIR: 657 create->cr_iattr.ia_valid &= ~ATTR_SIZE; 658 status = nfsd_create(rqstp, &cstate->current_fh, 659 create->cr_name, create->cr_namelen, 660 &create->cr_iattr, S_IFDIR, 0, &resfh); 661 break; 662 663 default: 664 status = nfserr_badtype; 665 } 666 667 if (status) 668 goto out; 669 670 if (create->cr_label.len) 671 nfsd4_security_inode_setsecctx(&resfh, &create->cr_label, create->cr_bmval); 672 673 if (create->cr_acl != NULL) 674 do_set_nfs4_acl(rqstp, &resfh, create->cr_acl, 675 create->cr_bmval); 676 677 fh_unlock(&cstate->current_fh); 678 set_change_info(&create->cr_cinfo, &cstate->current_fh); 679 fh_dup2(&cstate->current_fh, &resfh); 680 out: 681 fh_put(&resfh); 682 out_umask: 683 current->fs->umask = 0; 684 return status; 685 } 686 687 static __be32 688 nfsd4_getattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 689 union nfsd4_op_u *u) 690 { 691 struct nfsd4_getattr *getattr = &u->getattr; 692 __be32 status; 693 694 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 695 if (status) 696 return status; 697 698 if (getattr->ga_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1) 699 return nfserr_inval; 700 701 getattr->ga_bmval[0] &= nfsd_suppattrs[cstate->minorversion][0]; 702 getattr->ga_bmval[1] &= nfsd_suppattrs[cstate->minorversion][1]; 703 getattr->ga_bmval[2] &= nfsd_suppattrs[cstate->minorversion][2]; 704 705 getattr->ga_fhp = &cstate->current_fh; 706 return nfs_ok; 707 } 708 709 static __be32 710 nfsd4_link(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 711 union nfsd4_op_u *u) 712 { 713 struct nfsd4_link *link = &u->link; 714 __be32 status; 715 716 status = nfsd_link(rqstp, &cstate->current_fh, 717 link->li_name, link->li_namelen, &cstate->save_fh); 718 if (!status) 719 set_change_info(&link->li_cinfo, &cstate->current_fh); 720 return status; 721 } 722 723 static __be32 nfsd4_do_lookupp(struct svc_rqst *rqstp, struct svc_fh *fh) 724 { 725 struct svc_fh tmp_fh; 726 __be32 ret; 727 728 fh_init(&tmp_fh, NFS4_FHSIZE); 729 ret = exp_pseudoroot(rqstp, &tmp_fh); 730 if (ret) 731 return ret; 732 if (tmp_fh.fh_dentry == fh->fh_dentry) { 733 fh_put(&tmp_fh); 734 return nfserr_noent; 735 } 736 fh_put(&tmp_fh); 737 return nfsd_lookup(rqstp, fh, "..", 2, fh); 738 } 739 740 static __be32 741 nfsd4_lookupp(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 742 union nfsd4_op_u *u) 743 { 744 return nfsd4_do_lookupp(rqstp, &cstate->current_fh); 745 } 746 747 static __be32 748 nfsd4_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 749 union nfsd4_op_u *u) 750 { 751 return nfsd_lookup(rqstp, &cstate->current_fh, 752 u->lookup.lo_name, u->lookup.lo_len, 753 &cstate->current_fh); 754 } 755 756 static __be32 757 nfsd4_read(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 758 union nfsd4_op_u *u) 759 { 760 struct nfsd4_read *read = &u->read; 761 __be32 status; 762 763 read->rd_filp = NULL; 764 if (read->rd_offset >= OFFSET_MAX) 765 return nfserr_inval; 766 767 trace_nfsd_read_start(rqstp, &cstate->current_fh, 768 read->rd_offset, read->rd_length); 769 770 /* 771 * If we do a zero copy read, then a client will see read data 772 * that reflects the state of the file *after* performing the 773 * following compound. 774 * 775 * To ensure proper ordering, we therefore turn off zero copy if 776 * the client wants us to do more in this compound: 777 */ 778 if (!nfsd4_last_compound_op(rqstp)) 779 clear_bit(RQ_SPLICE_OK, &rqstp->rq_flags); 780 781 /* check stateid */ 782 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 783 &read->rd_stateid, RD_STATE, 784 &read->rd_filp, &read->rd_tmp_file); 785 if (status) { 786 dprintk("NFSD: nfsd4_read: couldn't process stateid!\n"); 787 goto out; 788 } 789 status = nfs_ok; 790 out: 791 read->rd_rqstp = rqstp; 792 read->rd_fhp = &cstate->current_fh; 793 return status; 794 } 795 796 797 static void 798 nfsd4_read_release(union nfsd4_op_u *u) 799 { 800 if (u->read.rd_filp) 801 fput(u->read.rd_filp); 802 trace_nfsd_read_done(u->read.rd_rqstp, u->read.rd_fhp, 803 u->read.rd_offset, u->read.rd_length); 804 } 805 806 static __be32 807 nfsd4_readdir(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 808 union nfsd4_op_u *u) 809 { 810 struct nfsd4_readdir *readdir = &u->readdir; 811 u64 cookie = readdir->rd_cookie; 812 static const nfs4_verifier zeroverf; 813 814 /* no need to check permission - this will be done in nfsd_readdir() */ 815 816 if (readdir->rd_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1) 817 return nfserr_inval; 818 819 readdir->rd_bmval[0] &= nfsd_suppattrs[cstate->minorversion][0]; 820 readdir->rd_bmval[1] &= nfsd_suppattrs[cstate->minorversion][1]; 821 readdir->rd_bmval[2] &= nfsd_suppattrs[cstate->minorversion][2]; 822 823 if ((cookie == 1) || (cookie == 2) || 824 (cookie == 0 && memcmp(readdir->rd_verf.data, zeroverf.data, NFS4_VERIFIER_SIZE))) 825 return nfserr_bad_cookie; 826 827 readdir->rd_rqstp = rqstp; 828 readdir->rd_fhp = &cstate->current_fh; 829 return nfs_ok; 830 } 831 832 static __be32 833 nfsd4_readlink(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 834 union nfsd4_op_u *u) 835 { 836 u->readlink.rl_rqstp = rqstp; 837 u->readlink.rl_fhp = &cstate->current_fh; 838 return nfs_ok; 839 } 840 841 static __be32 842 nfsd4_remove(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 843 union nfsd4_op_u *u) 844 { 845 struct nfsd4_remove *remove = &u->remove; 846 __be32 status; 847 848 if (opens_in_grace(SVC_NET(rqstp))) 849 return nfserr_grace; 850 status = nfsd_unlink(rqstp, &cstate->current_fh, 0, 851 remove->rm_name, remove->rm_namelen); 852 if (!status) { 853 fh_unlock(&cstate->current_fh); 854 set_change_info(&remove->rm_cinfo, &cstate->current_fh); 855 } 856 return status; 857 } 858 859 static __be32 860 nfsd4_rename(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 861 union nfsd4_op_u *u) 862 { 863 struct nfsd4_rename *rename = &u->rename; 864 __be32 status; 865 866 if (opens_in_grace(SVC_NET(rqstp))) 867 return nfserr_grace; 868 status = nfsd_rename(rqstp, &cstate->save_fh, rename->rn_sname, 869 rename->rn_snamelen, &cstate->current_fh, 870 rename->rn_tname, rename->rn_tnamelen); 871 if (status) 872 return status; 873 set_change_info(&rename->rn_sinfo, &cstate->current_fh); 874 set_change_info(&rename->rn_tinfo, &cstate->save_fh); 875 return nfs_ok; 876 } 877 878 static __be32 879 nfsd4_secinfo(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 880 union nfsd4_op_u *u) 881 { 882 struct nfsd4_secinfo *secinfo = &u->secinfo; 883 struct svc_export *exp; 884 struct dentry *dentry; 885 __be32 err; 886 887 err = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_EXEC); 888 if (err) 889 return err; 890 err = nfsd_lookup_dentry(rqstp, &cstate->current_fh, 891 secinfo->si_name, secinfo->si_namelen, 892 &exp, &dentry); 893 if (err) 894 return err; 895 fh_unlock(&cstate->current_fh); 896 if (d_really_is_negative(dentry)) { 897 exp_put(exp); 898 err = nfserr_noent; 899 } else 900 secinfo->si_exp = exp; 901 dput(dentry); 902 if (cstate->minorversion) 903 /* See rfc 5661 section 2.6.3.1.1.8 */ 904 fh_put(&cstate->current_fh); 905 return err; 906 } 907 908 static __be32 909 nfsd4_secinfo_no_name(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 910 union nfsd4_op_u *u) 911 { 912 __be32 err; 913 914 switch (u->secinfo_no_name.sin_style) { 915 case NFS4_SECINFO_STYLE4_CURRENT_FH: 916 break; 917 case NFS4_SECINFO_STYLE4_PARENT: 918 err = nfsd4_do_lookupp(rqstp, &cstate->current_fh); 919 if (err) 920 return err; 921 break; 922 default: 923 return nfserr_inval; 924 } 925 926 u->secinfo_no_name.sin_exp = exp_get(cstate->current_fh.fh_export); 927 fh_put(&cstate->current_fh); 928 return nfs_ok; 929 } 930 931 static void 932 nfsd4_secinfo_release(union nfsd4_op_u *u) 933 { 934 if (u->secinfo.si_exp) 935 exp_put(u->secinfo.si_exp); 936 } 937 938 static void 939 nfsd4_secinfo_no_name_release(union nfsd4_op_u *u) 940 { 941 if (u->secinfo_no_name.sin_exp) 942 exp_put(u->secinfo_no_name.sin_exp); 943 } 944 945 static __be32 946 nfsd4_setattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 947 union nfsd4_op_u *u) 948 { 949 struct nfsd4_setattr *setattr = &u->setattr; 950 __be32 status = nfs_ok; 951 int err; 952 953 if (setattr->sa_iattr.ia_valid & ATTR_SIZE) { 954 status = nfs4_preprocess_stateid_op(rqstp, cstate, 955 &cstate->current_fh, &setattr->sa_stateid, 956 WR_STATE, NULL, NULL); 957 if (status) { 958 dprintk("NFSD: nfsd4_setattr: couldn't process stateid!\n"); 959 return status; 960 } 961 } 962 err = fh_want_write(&cstate->current_fh); 963 if (err) 964 return nfserrno(err); 965 status = nfs_ok; 966 967 status = check_attr_support(rqstp, cstate, setattr->sa_bmval, 968 nfsd_attrmask); 969 if (status) 970 goto out; 971 972 if (setattr->sa_acl != NULL) 973 status = nfsd4_set_nfs4_acl(rqstp, &cstate->current_fh, 974 setattr->sa_acl); 975 if (status) 976 goto out; 977 if (setattr->sa_label.len) 978 status = nfsd4_set_nfs4_label(rqstp, &cstate->current_fh, 979 &setattr->sa_label); 980 if (status) 981 goto out; 982 status = nfsd_setattr(rqstp, &cstate->current_fh, &setattr->sa_iattr, 983 0, (time_t)0); 984 out: 985 fh_drop_write(&cstate->current_fh); 986 return status; 987 } 988 989 static __be32 990 nfsd4_write(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 991 union nfsd4_op_u *u) 992 { 993 struct nfsd4_write *write = &u->write; 994 stateid_t *stateid = &write->wr_stateid; 995 struct file *filp = NULL; 996 __be32 status = nfs_ok; 997 unsigned long cnt; 998 int nvecs; 999 1000 if (write->wr_offset >= OFFSET_MAX) 1001 return nfserr_inval; 1002 1003 cnt = write->wr_buflen; 1004 trace_nfsd_write_start(rqstp, &cstate->current_fh, 1005 write->wr_offset, cnt); 1006 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 1007 stateid, WR_STATE, &filp, NULL); 1008 if (status) { 1009 dprintk("NFSD: nfsd4_write: couldn't process stateid!\n"); 1010 return status; 1011 } 1012 1013 write->wr_how_written = write->wr_stable_how; 1014 gen_boot_verifier(&write->wr_verifier, SVC_NET(rqstp)); 1015 1016 nvecs = svc_fill_write_vector(rqstp, write->wr_pagelist, 1017 &write->wr_head, write->wr_buflen); 1018 WARN_ON_ONCE(nvecs > ARRAY_SIZE(rqstp->rq_vec)); 1019 1020 status = nfsd_vfs_write(rqstp, &cstate->current_fh, filp, 1021 write->wr_offset, rqstp->rq_vec, nvecs, &cnt, 1022 write->wr_how_written); 1023 fput(filp); 1024 1025 write->wr_bytes_written = cnt; 1026 trace_nfsd_write_done(rqstp, &cstate->current_fh, 1027 write->wr_offset, cnt); 1028 return status; 1029 } 1030 1031 static __be32 1032 nfsd4_verify_copy(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1033 stateid_t *src_stateid, struct file **src, 1034 stateid_t *dst_stateid, struct file **dst) 1035 { 1036 __be32 status; 1037 1038 if (!cstate->save_fh.fh_dentry) 1039 return nfserr_nofilehandle; 1040 1041 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->save_fh, 1042 src_stateid, RD_STATE, src, NULL); 1043 if (status) { 1044 dprintk("NFSD: %s: couldn't process src stateid!\n", __func__); 1045 goto out; 1046 } 1047 1048 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 1049 dst_stateid, WR_STATE, dst, NULL); 1050 if (status) { 1051 dprintk("NFSD: %s: couldn't process dst stateid!\n", __func__); 1052 goto out_put_src; 1053 } 1054 1055 /* fix up for NFS-specific error code */ 1056 if (!S_ISREG(file_inode(*src)->i_mode) || 1057 !S_ISREG(file_inode(*dst)->i_mode)) { 1058 status = nfserr_wrong_type; 1059 goto out_put_dst; 1060 } 1061 1062 out: 1063 return status; 1064 out_put_dst: 1065 fput(*dst); 1066 out_put_src: 1067 fput(*src); 1068 goto out; 1069 } 1070 1071 static __be32 1072 nfsd4_clone(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1073 union nfsd4_op_u *u) 1074 { 1075 struct nfsd4_clone *clone = &u->clone; 1076 struct file *src, *dst; 1077 __be32 status; 1078 1079 status = nfsd4_verify_copy(rqstp, cstate, &clone->cl_src_stateid, &src, 1080 &clone->cl_dst_stateid, &dst); 1081 if (status) 1082 goto out; 1083 1084 status = nfsd4_clone_file_range(src, clone->cl_src_pos, 1085 dst, clone->cl_dst_pos, clone->cl_count); 1086 1087 fput(dst); 1088 fput(src); 1089 out: 1090 return status; 1091 } 1092 1093 void nfs4_put_copy(struct nfsd4_copy *copy) 1094 { 1095 if (!refcount_dec_and_test(©->refcount)) 1096 return; 1097 kfree(copy); 1098 } 1099 1100 static bool 1101 check_and_set_stop_copy(struct nfsd4_copy *copy) 1102 { 1103 bool value; 1104 1105 spin_lock(©->cp_clp->async_lock); 1106 value = copy->stopped; 1107 if (!copy->stopped) 1108 copy->stopped = true; 1109 spin_unlock(©->cp_clp->async_lock); 1110 return value; 1111 } 1112 1113 static void nfsd4_stop_copy(struct nfsd4_copy *copy) 1114 { 1115 /* only 1 thread should stop the copy */ 1116 if (!check_and_set_stop_copy(copy)) 1117 kthread_stop(copy->copy_task); 1118 nfs4_put_copy(copy); 1119 } 1120 1121 static struct nfsd4_copy *nfsd4_get_copy(struct nfs4_client *clp) 1122 { 1123 struct nfsd4_copy *copy = NULL; 1124 1125 spin_lock(&clp->async_lock); 1126 if (!list_empty(&clp->async_copies)) { 1127 copy = list_first_entry(&clp->async_copies, struct nfsd4_copy, 1128 copies); 1129 refcount_inc(©->refcount); 1130 } 1131 spin_unlock(&clp->async_lock); 1132 return copy; 1133 } 1134 1135 void nfsd4_shutdown_copy(struct nfs4_client *clp) 1136 { 1137 struct nfsd4_copy *copy; 1138 1139 while ((copy = nfsd4_get_copy(clp)) != NULL) 1140 nfsd4_stop_copy(copy); 1141 } 1142 1143 static void nfsd4_cb_offload_release(struct nfsd4_callback *cb) 1144 { 1145 struct nfsd4_copy *copy = container_of(cb, struct nfsd4_copy, cp_cb); 1146 1147 nfs4_put_copy(copy); 1148 } 1149 1150 static int nfsd4_cb_offload_done(struct nfsd4_callback *cb, 1151 struct rpc_task *task) 1152 { 1153 return 1; 1154 } 1155 1156 static const struct nfsd4_callback_ops nfsd4_cb_offload_ops = { 1157 .release = nfsd4_cb_offload_release, 1158 .done = nfsd4_cb_offload_done 1159 }; 1160 1161 static void nfsd4_init_copy_res(struct nfsd4_copy *copy, bool sync) 1162 { 1163 copy->cp_res.wr_stable_how = NFS_UNSTABLE; 1164 copy->cp_synchronous = sync; 1165 gen_boot_verifier(©->cp_res.wr_verifier, copy->cp_clp->net); 1166 } 1167 1168 static ssize_t _nfsd_copy_file_range(struct nfsd4_copy *copy) 1169 { 1170 ssize_t bytes_copied = 0; 1171 size_t bytes_total = copy->cp_count; 1172 u64 src_pos = copy->cp_src_pos; 1173 u64 dst_pos = copy->cp_dst_pos; 1174 1175 do { 1176 if (kthread_should_stop()) 1177 break; 1178 bytes_copied = nfsd_copy_file_range(copy->file_src, src_pos, 1179 copy->file_dst, dst_pos, bytes_total); 1180 if (bytes_copied <= 0) 1181 break; 1182 bytes_total -= bytes_copied; 1183 copy->cp_res.wr_bytes_written += bytes_copied; 1184 src_pos += bytes_copied; 1185 dst_pos += bytes_copied; 1186 } while (bytes_total > 0 && !copy->cp_synchronous); 1187 return bytes_copied; 1188 } 1189 1190 static __be32 nfsd4_do_copy(struct nfsd4_copy *copy, bool sync) 1191 { 1192 __be32 status; 1193 ssize_t bytes; 1194 1195 bytes = _nfsd_copy_file_range(copy); 1196 /* for async copy, we ignore the error, client can always retry 1197 * to get the error 1198 */ 1199 if (bytes < 0 && !copy->cp_res.wr_bytes_written) 1200 status = nfserrno(bytes); 1201 else { 1202 nfsd4_init_copy_res(copy, sync); 1203 status = nfs_ok; 1204 } 1205 1206 fput(copy->file_src); 1207 fput(copy->file_dst); 1208 return status; 1209 } 1210 1211 static void dup_copy_fields(struct nfsd4_copy *src, struct nfsd4_copy *dst) 1212 { 1213 dst->cp_src_pos = src->cp_src_pos; 1214 dst->cp_dst_pos = src->cp_dst_pos; 1215 dst->cp_count = src->cp_count; 1216 dst->cp_synchronous = src->cp_synchronous; 1217 memcpy(&dst->cp_res, &src->cp_res, sizeof(src->cp_res)); 1218 memcpy(&dst->fh, &src->fh, sizeof(src->fh)); 1219 dst->cp_clp = src->cp_clp; 1220 dst->file_dst = get_file(src->file_dst); 1221 dst->file_src = get_file(src->file_src); 1222 memcpy(&dst->cp_stateid, &src->cp_stateid, sizeof(src->cp_stateid)); 1223 } 1224 1225 static void cleanup_async_copy(struct nfsd4_copy *copy) 1226 { 1227 nfs4_free_cp_state(copy); 1228 fput(copy->file_dst); 1229 fput(copy->file_src); 1230 spin_lock(©->cp_clp->async_lock); 1231 list_del(©->copies); 1232 spin_unlock(©->cp_clp->async_lock); 1233 nfs4_put_copy(copy); 1234 } 1235 1236 static int nfsd4_do_async_copy(void *data) 1237 { 1238 struct nfsd4_copy *copy = (struct nfsd4_copy *)data; 1239 struct nfsd4_copy *cb_copy; 1240 1241 copy->nfserr = nfsd4_do_copy(copy, 0); 1242 cb_copy = kzalloc(sizeof(struct nfsd4_copy), GFP_KERNEL); 1243 if (!cb_copy) 1244 goto out; 1245 memcpy(&cb_copy->cp_res, ©->cp_res, sizeof(copy->cp_res)); 1246 cb_copy->cp_clp = copy->cp_clp; 1247 cb_copy->nfserr = copy->nfserr; 1248 memcpy(&cb_copy->fh, ©->fh, sizeof(copy->fh)); 1249 nfsd4_init_cb(&cb_copy->cp_cb, cb_copy->cp_clp, 1250 &nfsd4_cb_offload_ops, NFSPROC4_CLNT_CB_OFFLOAD); 1251 nfsd4_run_cb(&cb_copy->cp_cb); 1252 out: 1253 cleanup_async_copy(copy); 1254 return 0; 1255 } 1256 1257 static __be32 1258 nfsd4_copy(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1259 union nfsd4_op_u *u) 1260 { 1261 struct nfsd4_copy *copy = &u->copy; 1262 __be32 status; 1263 struct nfsd4_copy *async_copy = NULL; 1264 1265 status = nfsd4_verify_copy(rqstp, cstate, ©->cp_src_stateid, 1266 ©->file_src, ©->cp_dst_stateid, 1267 ©->file_dst); 1268 if (status) 1269 goto out; 1270 1271 copy->cp_clp = cstate->clp; 1272 memcpy(©->fh, &cstate->current_fh.fh_handle, 1273 sizeof(struct knfsd_fh)); 1274 if (!copy->cp_synchronous) { 1275 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 1276 1277 status = nfserrno(-ENOMEM); 1278 async_copy = kzalloc(sizeof(struct nfsd4_copy), GFP_KERNEL); 1279 if (!async_copy) 1280 goto out; 1281 if (!nfs4_init_cp_state(nn, copy)) { 1282 kfree(async_copy); 1283 goto out; 1284 } 1285 refcount_set(&async_copy->refcount, 1); 1286 memcpy(©->cp_res.cb_stateid, ©->cp_stateid, 1287 sizeof(copy->cp_stateid)); 1288 dup_copy_fields(copy, async_copy); 1289 async_copy->copy_task = kthread_create(nfsd4_do_async_copy, 1290 async_copy, "%s", "copy thread"); 1291 if (IS_ERR(async_copy->copy_task)) 1292 goto out_err; 1293 spin_lock(&async_copy->cp_clp->async_lock); 1294 list_add(&async_copy->copies, 1295 &async_copy->cp_clp->async_copies); 1296 spin_unlock(&async_copy->cp_clp->async_lock); 1297 wake_up_process(async_copy->copy_task); 1298 status = nfs_ok; 1299 } else 1300 status = nfsd4_do_copy(copy, 1); 1301 out: 1302 return status; 1303 out_err: 1304 cleanup_async_copy(async_copy); 1305 goto out; 1306 } 1307 1308 struct nfsd4_copy * 1309 find_async_copy(struct nfs4_client *clp, stateid_t *stateid) 1310 { 1311 struct nfsd4_copy *copy; 1312 1313 spin_lock(&clp->async_lock); 1314 list_for_each_entry(copy, &clp->async_copies, copies) { 1315 if (memcmp(©->cp_stateid, stateid, NFS4_STATEID_SIZE)) 1316 continue; 1317 refcount_inc(©->refcount); 1318 spin_unlock(&clp->async_lock); 1319 return copy; 1320 } 1321 spin_unlock(&clp->async_lock); 1322 return NULL; 1323 } 1324 1325 static __be32 1326 nfsd4_offload_cancel(struct svc_rqst *rqstp, 1327 struct nfsd4_compound_state *cstate, 1328 union nfsd4_op_u *u) 1329 { 1330 struct nfsd4_offload_status *os = &u->offload_status; 1331 __be32 status = 0; 1332 struct nfsd4_copy *copy; 1333 struct nfs4_client *clp = cstate->clp; 1334 1335 copy = find_async_copy(clp, &os->stateid); 1336 if (copy) 1337 nfsd4_stop_copy(copy); 1338 else 1339 status = nfserr_bad_stateid; 1340 1341 return status; 1342 } 1343 1344 static __be32 1345 nfsd4_fallocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1346 struct nfsd4_fallocate *fallocate, int flags) 1347 { 1348 __be32 status; 1349 struct file *file; 1350 1351 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 1352 &fallocate->falloc_stateid, 1353 WR_STATE, &file, NULL); 1354 if (status != nfs_ok) { 1355 dprintk("NFSD: nfsd4_fallocate: couldn't process stateid!\n"); 1356 return status; 1357 } 1358 1359 status = nfsd4_vfs_fallocate(rqstp, &cstate->current_fh, file, 1360 fallocate->falloc_offset, 1361 fallocate->falloc_length, 1362 flags); 1363 fput(file); 1364 return status; 1365 } 1366 static __be32 1367 nfsd4_offload_status(struct svc_rqst *rqstp, 1368 struct nfsd4_compound_state *cstate, 1369 union nfsd4_op_u *u) 1370 { 1371 struct nfsd4_offload_status *os = &u->offload_status; 1372 __be32 status = 0; 1373 struct nfsd4_copy *copy; 1374 struct nfs4_client *clp = cstate->clp; 1375 1376 copy = find_async_copy(clp, &os->stateid); 1377 if (copy) { 1378 os->count = copy->cp_res.wr_bytes_written; 1379 nfs4_put_copy(copy); 1380 } else 1381 status = nfserr_bad_stateid; 1382 1383 return status; 1384 } 1385 1386 static __be32 1387 nfsd4_allocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1388 union nfsd4_op_u *u) 1389 { 1390 return nfsd4_fallocate(rqstp, cstate, &u->allocate, 0); 1391 } 1392 1393 static __be32 1394 nfsd4_deallocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1395 union nfsd4_op_u *u) 1396 { 1397 return nfsd4_fallocate(rqstp, cstate, &u->deallocate, 1398 FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE); 1399 } 1400 1401 static __be32 1402 nfsd4_seek(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1403 union nfsd4_op_u *u) 1404 { 1405 struct nfsd4_seek *seek = &u->seek; 1406 int whence; 1407 __be32 status; 1408 struct file *file; 1409 1410 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 1411 &seek->seek_stateid, 1412 RD_STATE, &file, NULL); 1413 if (status) { 1414 dprintk("NFSD: nfsd4_seek: couldn't process stateid!\n"); 1415 return status; 1416 } 1417 1418 switch (seek->seek_whence) { 1419 case NFS4_CONTENT_DATA: 1420 whence = SEEK_DATA; 1421 break; 1422 case NFS4_CONTENT_HOLE: 1423 whence = SEEK_HOLE; 1424 break; 1425 default: 1426 status = nfserr_union_notsupp; 1427 goto out; 1428 } 1429 1430 /* 1431 * Note: This call does change file->f_pos, but nothing in NFSD 1432 * should ever file->f_pos. 1433 */ 1434 seek->seek_pos = vfs_llseek(file, seek->seek_offset, whence); 1435 if (seek->seek_pos < 0) 1436 status = nfserrno(seek->seek_pos); 1437 else if (seek->seek_pos >= i_size_read(file_inode(file))) 1438 seek->seek_eof = true; 1439 1440 out: 1441 fput(file); 1442 return status; 1443 } 1444 1445 /* This routine never returns NFS_OK! If there are no other errors, it 1446 * will return NFSERR_SAME or NFSERR_NOT_SAME depending on whether the 1447 * attributes matched. VERIFY is implemented by mapping NFSERR_SAME 1448 * to NFS_OK after the call; NVERIFY by mapping NFSERR_NOT_SAME to NFS_OK. 1449 */ 1450 static __be32 1451 _nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1452 struct nfsd4_verify *verify) 1453 { 1454 __be32 *buf, *p; 1455 int count; 1456 __be32 status; 1457 1458 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 1459 if (status) 1460 return status; 1461 1462 status = check_attr_support(rqstp, cstate, verify->ve_bmval, NULL); 1463 if (status) 1464 return status; 1465 1466 if ((verify->ve_bmval[0] & FATTR4_WORD0_RDATTR_ERROR) 1467 || (verify->ve_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)) 1468 return nfserr_inval; 1469 if (verify->ve_attrlen & 3) 1470 return nfserr_inval; 1471 1472 /* count in words: 1473 * bitmap_len(1) + bitmap(2) + attr_len(1) = 4 1474 */ 1475 count = 4 + (verify->ve_attrlen >> 2); 1476 buf = kmalloc(count << 2, GFP_KERNEL); 1477 if (!buf) 1478 return nfserr_jukebox; 1479 1480 p = buf; 1481 status = nfsd4_encode_fattr_to_buf(&p, count, &cstate->current_fh, 1482 cstate->current_fh.fh_export, 1483 cstate->current_fh.fh_dentry, 1484 verify->ve_bmval, 1485 rqstp, 0); 1486 /* 1487 * If nfsd4_encode_fattr() ran out of space, assume that's because 1488 * the attributes are longer (hence different) than those given: 1489 */ 1490 if (status == nfserr_resource) 1491 status = nfserr_not_same; 1492 if (status) 1493 goto out_kfree; 1494 1495 /* skip bitmap */ 1496 p = buf + 1 + ntohl(buf[0]); 1497 status = nfserr_not_same; 1498 if (ntohl(*p++) != verify->ve_attrlen) 1499 goto out_kfree; 1500 if (!memcmp(p, verify->ve_attrval, verify->ve_attrlen)) 1501 status = nfserr_same; 1502 1503 out_kfree: 1504 kfree(buf); 1505 return status; 1506 } 1507 1508 static __be32 1509 nfsd4_nverify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1510 union nfsd4_op_u *u) 1511 { 1512 __be32 status; 1513 1514 status = _nfsd4_verify(rqstp, cstate, &u->verify); 1515 return status == nfserr_not_same ? nfs_ok : status; 1516 } 1517 1518 static __be32 1519 nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1520 union nfsd4_op_u *u) 1521 { 1522 __be32 status; 1523 1524 status = _nfsd4_verify(rqstp, cstate, &u->nverify); 1525 return status == nfserr_same ? nfs_ok : status; 1526 } 1527 1528 #ifdef CONFIG_NFSD_PNFS 1529 static const struct nfsd4_layout_ops * 1530 nfsd4_layout_verify(struct svc_export *exp, unsigned int layout_type) 1531 { 1532 if (!exp->ex_layout_types) { 1533 dprintk("%s: export does not support pNFS\n", __func__); 1534 return NULL; 1535 } 1536 1537 if (layout_type >= LAYOUT_TYPE_MAX || 1538 !(exp->ex_layout_types & (1 << layout_type))) { 1539 dprintk("%s: layout type %d not supported\n", 1540 __func__, layout_type); 1541 return NULL; 1542 } 1543 1544 return nfsd4_layout_ops[layout_type]; 1545 } 1546 1547 static __be32 1548 nfsd4_getdeviceinfo(struct svc_rqst *rqstp, 1549 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u) 1550 { 1551 struct nfsd4_getdeviceinfo *gdp = &u->getdeviceinfo; 1552 const struct nfsd4_layout_ops *ops; 1553 struct nfsd4_deviceid_map *map; 1554 struct svc_export *exp; 1555 __be32 nfserr; 1556 1557 dprintk("%s: layout_type %u dev_id [0x%llx:0x%x] maxcnt %u\n", 1558 __func__, 1559 gdp->gd_layout_type, 1560 gdp->gd_devid.fsid_idx, gdp->gd_devid.generation, 1561 gdp->gd_maxcount); 1562 1563 map = nfsd4_find_devid_map(gdp->gd_devid.fsid_idx); 1564 if (!map) { 1565 dprintk("%s: couldn't find device ID to export mapping!\n", 1566 __func__); 1567 return nfserr_noent; 1568 } 1569 1570 exp = rqst_exp_find(rqstp, map->fsid_type, map->fsid); 1571 if (IS_ERR(exp)) { 1572 dprintk("%s: could not find device id\n", __func__); 1573 return nfserr_noent; 1574 } 1575 1576 nfserr = nfserr_layoutunavailable; 1577 ops = nfsd4_layout_verify(exp, gdp->gd_layout_type); 1578 if (!ops) 1579 goto out; 1580 1581 nfserr = nfs_ok; 1582 if (gdp->gd_maxcount != 0) { 1583 nfserr = ops->proc_getdeviceinfo(exp->ex_path.mnt->mnt_sb, 1584 rqstp, cstate->session->se_client, gdp); 1585 } 1586 1587 gdp->gd_notify_types &= ops->notify_types; 1588 out: 1589 exp_put(exp); 1590 return nfserr; 1591 } 1592 1593 static void 1594 nfsd4_getdeviceinfo_release(union nfsd4_op_u *u) 1595 { 1596 kfree(u->getdeviceinfo.gd_device); 1597 } 1598 1599 static __be32 1600 nfsd4_layoutget(struct svc_rqst *rqstp, 1601 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u) 1602 { 1603 struct nfsd4_layoutget *lgp = &u->layoutget; 1604 struct svc_fh *current_fh = &cstate->current_fh; 1605 const struct nfsd4_layout_ops *ops; 1606 struct nfs4_layout_stateid *ls; 1607 __be32 nfserr; 1608 int accmode = NFSD_MAY_READ_IF_EXEC; 1609 1610 switch (lgp->lg_seg.iomode) { 1611 case IOMODE_READ: 1612 accmode |= NFSD_MAY_READ; 1613 break; 1614 case IOMODE_RW: 1615 accmode |= NFSD_MAY_READ | NFSD_MAY_WRITE; 1616 break; 1617 default: 1618 dprintk("%s: invalid iomode %d\n", 1619 __func__, lgp->lg_seg.iomode); 1620 nfserr = nfserr_badiomode; 1621 goto out; 1622 } 1623 1624 nfserr = fh_verify(rqstp, current_fh, 0, accmode); 1625 if (nfserr) 1626 goto out; 1627 1628 nfserr = nfserr_layoutunavailable; 1629 ops = nfsd4_layout_verify(current_fh->fh_export, lgp->lg_layout_type); 1630 if (!ops) 1631 goto out; 1632 1633 /* 1634 * Verify minlength and range as per RFC5661: 1635 * o If loga_length is less than loga_minlength, 1636 * the metadata server MUST return NFS4ERR_INVAL. 1637 * o If the sum of loga_offset and loga_minlength exceeds 1638 * NFS4_UINT64_MAX, and loga_minlength is not 1639 * NFS4_UINT64_MAX, the error NFS4ERR_INVAL MUST result. 1640 * o If the sum of loga_offset and loga_length exceeds 1641 * NFS4_UINT64_MAX, and loga_length is not NFS4_UINT64_MAX, 1642 * the error NFS4ERR_INVAL MUST result. 1643 */ 1644 nfserr = nfserr_inval; 1645 if (lgp->lg_seg.length < lgp->lg_minlength || 1646 (lgp->lg_minlength != NFS4_MAX_UINT64 && 1647 lgp->lg_minlength > NFS4_MAX_UINT64 - lgp->lg_seg.offset) || 1648 (lgp->lg_seg.length != NFS4_MAX_UINT64 && 1649 lgp->lg_seg.length > NFS4_MAX_UINT64 - lgp->lg_seg.offset)) 1650 goto out; 1651 if (lgp->lg_seg.length == 0) 1652 goto out; 1653 1654 nfserr = nfsd4_preprocess_layout_stateid(rqstp, cstate, &lgp->lg_sid, 1655 true, lgp->lg_layout_type, &ls); 1656 if (nfserr) { 1657 trace_nfsd_layout_get_lookup_fail(&lgp->lg_sid); 1658 goto out; 1659 } 1660 1661 nfserr = nfserr_recallconflict; 1662 if (atomic_read(&ls->ls_stid.sc_file->fi_lo_recalls)) 1663 goto out_put_stid; 1664 1665 nfserr = ops->proc_layoutget(d_inode(current_fh->fh_dentry), 1666 current_fh, lgp); 1667 if (nfserr) 1668 goto out_put_stid; 1669 1670 nfserr = nfsd4_insert_layout(lgp, ls); 1671 1672 out_put_stid: 1673 mutex_unlock(&ls->ls_mutex); 1674 nfs4_put_stid(&ls->ls_stid); 1675 out: 1676 return nfserr; 1677 } 1678 1679 static void 1680 nfsd4_layoutget_release(union nfsd4_op_u *u) 1681 { 1682 kfree(u->layoutget.lg_content); 1683 } 1684 1685 static __be32 1686 nfsd4_layoutcommit(struct svc_rqst *rqstp, 1687 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u) 1688 { 1689 struct nfsd4_layoutcommit *lcp = &u->layoutcommit; 1690 const struct nfsd4_layout_seg *seg = &lcp->lc_seg; 1691 struct svc_fh *current_fh = &cstate->current_fh; 1692 const struct nfsd4_layout_ops *ops; 1693 loff_t new_size = lcp->lc_last_wr + 1; 1694 struct inode *inode; 1695 struct nfs4_layout_stateid *ls; 1696 __be32 nfserr; 1697 1698 nfserr = fh_verify(rqstp, current_fh, 0, NFSD_MAY_WRITE); 1699 if (nfserr) 1700 goto out; 1701 1702 nfserr = nfserr_layoutunavailable; 1703 ops = nfsd4_layout_verify(current_fh->fh_export, lcp->lc_layout_type); 1704 if (!ops) 1705 goto out; 1706 inode = d_inode(current_fh->fh_dentry); 1707 1708 nfserr = nfserr_inval; 1709 if (new_size <= seg->offset) { 1710 dprintk("pnfsd: last write before layout segment\n"); 1711 goto out; 1712 } 1713 if (new_size > seg->offset + seg->length) { 1714 dprintk("pnfsd: last write beyond layout segment\n"); 1715 goto out; 1716 } 1717 if (!lcp->lc_newoffset && new_size > i_size_read(inode)) { 1718 dprintk("pnfsd: layoutcommit beyond EOF\n"); 1719 goto out; 1720 } 1721 1722 nfserr = nfsd4_preprocess_layout_stateid(rqstp, cstate, &lcp->lc_sid, 1723 false, lcp->lc_layout_type, 1724 &ls); 1725 if (nfserr) { 1726 trace_nfsd_layout_commit_lookup_fail(&lcp->lc_sid); 1727 /* fixup error code as per RFC5661 */ 1728 if (nfserr == nfserr_bad_stateid) 1729 nfserr = nfserr_badlayout; 1730 goto out; 1731 } 1732 1733 /* LAYOUTCOMMIT does not require any serialization */ 1734 mutex_unlock(&ls->ls_mutex); 1735 1736 if (new_size > i_size_read(inode)) { 1737 lcp->lc_size_chg = 1; 1738 lcp->lc_newsize = new_size; 1739 } else { 1740 lcp->lc_size_chg = 0; 1741 } 1742 1743 nfserr = ops->proc_layoutcommit(inode, lcp); 1744 nfs4_put_stid(&ls->ls_stid); 1745 out: 1746 return nfserr; 1747 } 1748 1749 static __be32 1750 nfsd4_layoutreturn(struct svc_rqst *rqstp, 1751 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u) 1752 { 1753 struct nfsd4_layoutreturn *lrp = &u->layoutreturn; 1754 struct svc_fh *current_fh = &cstate->current_fh; 1755 __be32 nfserr; 1756 1757 nfserr = fh_verify(rqstp, current_fh, 0, NFSD_MAY_NOP); 1758 if (nfserr) 1759 goto out; 1760 1761 nfserr = nfserr_layoutunavailable; 1762 if (!nfsd4_layout_verify(current_fh->fh_export, lrp->lr_layout_type)) 1763 goto out; 1764 1765 switch (lrp->lr_seg.iomode) { 1766 case IOMODE_READ: 1767 case IOMODE_RW: 1768 case IOMODE_ANY: 1769 break; 1770 default: 1771 dprintk("%s: invalid iomode %d\n", __func__, 1772 lrp->lr_seg.iomode); 1773 nfserr = nfserr_inval; 1774 goto out; 1775 } 1776 1777 switch (lrp->lr_return_type) { 1778 case RETURN_FILE: 1779 nfserr = nfsd4_return_file_layouts(rqstp, cstate, lrp); 1780 break; 1781 case RETURN_FSID: 1782 case RETURN_ALL: 1783 nfserr = nfsd4_return_client_layouts(rqstp, cstate, lrp); 1784 break; 1785 default: 1786 dprintk("%s: invalid return_type %d\n", __func__, 1787 lrp->lr_return_type); 1788 nfserr = nfserr_inval; 1789 break; 1790 } 1791 out: 1792 return nfserr; 1793 } 1794 #endif /* CONFIG_NFSD_PNFS */ 1795 1796 /* 1797 * NULL call. 1798 */ 1799 static __be32 1800 nfsd4_proc_null(struct svc_rqst *rqstp) 1801 { 1802 return nfs_ok; 1803 } 1804 1805 static inline void nfsd4_increment_op_stats(u32 opnum) 1806 { 1807 if (opnum >= FIRST_NFS4_OP && opnum <= LAST_NFS4_OP) 1808 nfsdstats.nfs4_opcount[opnum]++; 1809 } 1810 1811 static const struct nfsd4_operation nfsd4_ops[]; 1812 1813 static const char *nfsd4_op_name(unsigned opnum); 1814 1815 /* 1816 * Enforce NFSv4.1 COMPOUND ordering rules: 1817 * 1818 * Also note, enforced elsewhere: 1819 * - SEQUENCE other than as first op results in 1820 * NFS4ERR_SEQUENCE_POS. (Enforced in nfsd4_sequence().) 1821 * - BIND_CONN_TO_SESSION must be the only op in its compound. 1822 * (Enforced in nfsd4_bind_conn_to_session().) 1823 * - DESTROY_SESSION must be the final operation in a compound, if 1824 * sessionid's in SEQUENCE and DESTROY_SESSION are the same. 1825 * (Enforced in nfsd4_destroy_session().) 1826 */ 1827 static __be32 nfs41_check_op_ordering(struct nfsd4_compoundargs *args) 1828 { 1829 struct nfsd4_op *first_op = &args->ops[0]; 1830 1831 /* These ordering requirements don't apply to NFSv4.0: */ 1832 if (args->minorversion == 0) 1833 return nfs_ok; 1834 /* This is weird, but OK, not our problem: */ 1835 if (args->opcnt == 0) 1836 return nfs_ok; 1837 if (first_op->status == nfserr_op_illegal) 1838 return nfs_ok; 1839 if (!(nfsd4_ops[first_op->opnum].op_flags & ALLOWED_AS_FIRST_OP)) 1840 return nfserr_op_not_in_session; 1841 if (first_op->opnum == OP_SEQUENCE) 1842 return nfs_ok; 1843 /* 1844 * So first_op is something allowed outside a session, like 1845 * EXCHANGE_ID; but then it has to be the only op in the 1846 * compound: 1847 */ 1848 if (args->opcnt != 1) 1849 return nfserr_not_only_op; 1850 return nfs_ok; 1851 } 1852 1853 const struct nfsd4_operation *OPDESC(struct nfsd4_op *op) 1854 { 1855 return &nfsd4_ops[op->opnum]; 1856 } 1857 1858 bool nfsd4_cache_this_op(struct nfsd4_op *op) 1859 { 1860 if (op->opnum == OP_ILLEGAL) 1861 return false; 1862 return OPDESC(op)->op_flags & OP_CACHEME; 1863 } 1864 1865 static bool need_wrongsec_check(struct svc_rqst *rqstp) 1866 { 1867 struct nfsd4_compoundres *resp = rqstp->rq_resp; 1868 struct nfsd4_compoundargs *argp = rqstp->rq_argp; 1869 struct nfsd4_op *this = &argp->ops[resp->opcnt - 1]; 1870 struct nfsd4_op *next = &argp->ops[resp->opcnt]; 1871 const struct nfsd4_operation *thisd = OPDESC(this); 1872 const struct nfsd4_operation *nextd; 1873 1874 /* 1875 * Most ops check wronsec on our own; only the putfh-like ops 1876 * have special rules. 1877 */ 1878 if (!(thisd->op_flags & OP_IS_PUTFH_LIKE)) 1879 return false; 1880 /* 1881 * rfc 5661 2.6.3.1.1.6: don't bother erroring out a 1882 * put-filehandle operation if we're not going to use the 1883 * result: 1884 */ 1885 if (argp->opcnt == resp->opcnt) 1886 return false; 1887 if (next->opnum == OP_ILLEGAL) 1888 return false; 1889 nextd = OPDESC(next); 1890 /* 1891 * Rest of 2.6.3.1.1: certain operations will return WRONGSEC 1892 * errors themselves as necessary; others should check for them 1893 * now: 1894 */ 1895 return !(nextd->op_flags & OP_HANDLES_WRONGSEC); 1896 } 1897 1898 static void svcxdr_init_encode(struct svc_rqst *rqstp, 1899 struct nfsd4_compoundres *resp) 1900 { 1901 struct xdr_stream *xdr = &resp->xdr; 1902 struct xdr_buf *buf = &rqstp->rq_res; 1903 struct kvec *head = buf->head; 1904 1905 xdr->buf = buf; 1906 xdr->iov = head; 1907 xdr->p = head->iov_base + head->iov_len; 1908 xdr->end = head->iov_base + PAGE_SIZE - rqstp->rq_auth_slack; 1909 /* Tail and page_len should be zero at this point: */ 1910 buf->len = buf->head[0].iov_len; 1911 xdr->scratch.iov_len = 0; 1912 xdr->page_ptr = buf->pages - 1; 1913 buf->buflen = PAGE_SIZE * (1 + rqstp->rq_page_end - buf->pages) 1914 - rqstp->rq_auth_slack; 1915 } 1916 1917 /* 1918 * COMPOUND call. 1919 */ 1920 static __be32 1921 nfsd4_proc_compound(struct svc_rqst *rqstp) 1922 { 1923 struct nfsd4_compoundargs *args = rqstp->rq_argp; 1924 struct nfsd4_compoundres *resp = rqstp->rq_resp; 1925 struct nfsd4_op *op; 1926 struct nfsd4_compound_state *cstate = &resp->cstate; 1927 struct svc_fh *current_fh = &cstate->current_fh; 1928 struct svc_fh *save_fh = &cstate->save_fh; 1929 __be32 status; 1930 1931 svcxdr_init_encode(rqstp, resp); 1932 resp->tagp = resp->xdr.p; 1933 /* reserve space for: taglen, tag, and opcnt */ 1934 xdr_reserve_space(&resp->xdr, 8 + args->taglen); 1935 resp->taglen = args->taglen; 1936 resp->tag = args->tag; 1937 resp->rqstp = rqstp; 1938 cstate->minorversion = args->minorversion; 1939 fh_init(current_fh, NFS4_FHSIZE); 1940 fh_init(save_fh, NFS4_FHSIZE); 1941 /* 1942 * Don't use the deferral mechanism for NFSv4; compounds make it 1943 * too hard to avoid non-idempotency problems. 1944 */ 1945 clear_bit(RQ_USEDEFERRAL, &rqstp->rq_flags); 1946 1947 /* 1948 * According to RFC3010, this takes precedence over all other errors. 1949 */ 1950 status = nfserr_minor_vers_mismatch; 1951 if (nfsd_minorversion(args->minorversion, NFSD_TEST) <= 0) 1952 goto out; 1953 status = nfserr_resource; 1954 if (args->opcnt > NFSD_MAX_OPS_PER_COMPOUND) 1955 goto out; 1956 1957 status = nfs41_check_op_ordering(args); 1958 if (status) { 1959 op = &args->ops[0]; 1960 op->status = status; 1961 resp->opcnt = 1; 1962 goto encode_op; 1963 } 1964 1965 trace_nfsd_compound(rqstp, args->opcnt); 1966 while (!status && resp->opcnt < args->opcnt) { 1967 op = &args->ops[resp->opcnt++]; 1968 1969 /* 1970 * The XDR decode routines may have pre-set op->status; 1971 * for example, if there is a miscellaneous XDR error 1972 * it will be set to nfserr_bad_xdr. 1973 */ 1974 if (op->status) { 1975 if (op->opnum == OP_OPEN) 1976 op->status = nfsd4_open_omfg(rqstp, cstate, op); 1977 goto encode_op; 1978 } 1979 1980 if (!current_fh->fh_dentry) { 1981 if (!(op->opdesc->op_flags & ALLOWED_WITHOUT_FH)) { 1982 op->status = nfserr_nofilehandle; 1983 goto encode_op; 1984 } 1985 } else if (current_fh->fh_export->ex_fslocs.migrated && 1986 !(op->opdesc->op_flags & ALLOWED_ON_ABSENT_FS)) { 1987 op->status = nfserr_moved; 1988 goto encode_op; 1989 } 1990 1991 fh_clear_wcc(current_fh); 1992 1993 /* If op is non-idempotent */ 1994 if (op->opdesc->op_flags & OP_MODIFIES_SOMETHING) { 1995 /* 1996 * Don't execute this op if we couldn't encode a 1997 * succesful reply: 1998 */ 1999 u32 plen = op->opdesc->op_rsize_bop(rqstp, op); 2000 /* 2001 * Plus if there's another operation, make sure 2002 * we'll have space to at least encode an error: 2003 */ 2004 if (resp->opcnt < args->opcnt) 2005 plen += COMPOUND_ERR_SLACK_SPACE; 2006 op->status = nfsd4_check_resp_size(resp, plen); 2007 } 2008 2009 if (op->status) 2010 goto encode_op; 2011 2012 if (op->opdesc->op_get_currentstateid) 2013 op->opdesc->op_get_currentstateid(cstate, &op->u); 2014 op->status = op->opdesc->op_func(rqstp, cstate, &op->u); 2015 2016 /* Only from SEQUENCE */ 2017 if (cstate->status == nfserr_replay_cache) { 2018 dprintk("%s NFS4.1 replay from cache\n", __func__); 2019 status = op->status; 2020 goto out; 2021 } 2022 if (!op->status) { 2023 if (op->opdesc->op_set_currentstateid) 2024 op->opdesc->op_set_currentstateid(cstate, &op->u); 2025 2026 if (op->opdesc->op_flags & OP_CLEAR_STATEID) 2027 clear_current_stateid(cstate); 2028 2029 if (need_wrongsec_check(rqstp)) 2030 op->status = check_nfsd_access(current_fh->fh_export, rqstp); 2031 } 2032 encode_op: 2033 if (op->status == nfserr_replay_me) { 2034 op->replay = &cstate->replay_owner->so_replay; 2035 nfsd4_encode_replay(&resp->xdr, op); 2036 status = op->status = op->replay->rp_status; 2037 } else { 2038 nfsd4_encode_operation(resp, op); 2039 status = op->status; 2040 } 2041 2042 trace_nfsd_compound_status(args->opcnt, resp->opcnt, status, 2043 nfsd4_op_name(op->opnum)); 2044 2045 nfsd4_cstate_clear_replay(cstate); 2046 nfsd4_increment_op_stats(op->opnum); 2047 } 2048 2049 cstate->status = status; 2050 fh_put(current_fh); 2051 fh_put(save_fh); 2052 BUG_ON(cstate->replay_owner); 2053 out: 2054 /* Reset deferral mechanism for RPC deferrals */ 2055 set_bit(RQ_USEDEFERRAL, &rqstp->rq_flags); 2056 dprintk("nfsv4 compound returned %d\n", ntohl(status)); 2057 return status; 2058 } 2059 2060 #define op_encode_hdr_size (2) 2061 #define op_encode_stateid_maxsz (XDR_QUADLEN(NFS4_STATEID_SIZE)) 2062 #define op_encode_verifier_maxsz (XDR_QUADLEN(NFS4_VERIFIER_SIZE)) 2063 #define op_encode_change_info_maxsz (5) 2064 #define nfs4_fattr_bitmap_maxsz (4) 2065 2066 /* We'll fall back on returning no lockowner if run out of space: */ 2067 #define op_encode_lockowner_maxsz (0) 2068 #define op_encode_lock_denied_maxsz (8 + op_encode_lockowner_maxsz) 2069 2070 #define nfs4_owner_maxsz (1 + XDR_QUADLEN(IDMAP_NAMESZ)) 2071 2072 #define op_encode_ace_maxsz (3 + nfs4_owner_maxsz) 2073 #define op_encode_delegation_maxsz (1 + op_encode_stateid_maxsz + 1 + \ 2074 op_encode_ace_maxsz) 2075 2076 #define op_encode_channel_attrs_maxsz (6 + 1 + 1) 2077 2078 static inline u32 nfsd4_only_status_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2079 { 2080 return (op_encode_hdr_size) * sizeof(__be32); 2081 } 2082 2083 static inline u32 nfsd4_status_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2084 { 2085 return (op_encode_hdr_size + op_encode_stateid_maxsz)* sizeof(__be32); 2086 } 2087 2088 static inline u32 nfsd4_access_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2089 { 2090 /* ac_supported, ac_resp_access */ 2091 return (op_encode_hdr_size + 2)* sizeof(__be32); 2092 } 2093 2094 static inline u32 nfsd4_commit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2095 { 2096 return (op_encode_hdr_size + op_encode_verifier_maxsz) * sizeof(__be32); 2097 } 2098 2099 static inline u32 nfsd4_create_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2100 { 2101 return (op_encode_hdr_size + op_encode_change_info_maxsz 2102 + nfs4_fattr_bitmap_maxsz) * sizeof(__be32); 2103 } 2104 2105 /* 2106 * Note since this is an idempotent operation we won't insist on failing 2107 * the op prematurely if the estimate is too large. We may turn off splice 2108 * reads unnecessarily. 2109 */ 2110 static inline u32 nfsd4_getattr_rsize(struct svc_rqst *rqstp, 2111 struct nfsd4_op *op) 2112 { 2113 u32 *bmap = op->u.getattr.ga_bmval; 2114 u32 bmap0 = bmap[0], bmap1 = bmap[1], bmap2 = bmap[2]; 2115 u32 ret = 0; 2116 2117 if (bmap0 & FATTR4_WORD0_ACL) 2118 return svc_max_payload(rqstp); 2119 if (bmap0 & FATTR4_WORD0_FS_LOCATIONS) 2120 return svc_max_payload(rqstp); 2121 2122 if (bmap1 & FATTR4_WORD1_OWNER) { 2123 ret += IDMAP_NAMESZ + 4; 2124 bmap1 &= ~FATTR4_WORD1_OWNER; 2125 } 2126 if (bmap1 & FATTR4_WORD1_OWNER_GROUP) { 2127 ret += IDMAP_NAMESZ + 4; 2128 bmap1 &= ~FATTR4_WORD1_OWNER_GROUP; 2129 } 2130 if (bmap0 & FATTR4_WORD0_FILEHANDLE) { 2131 ret += NFS4_FHSIZE + 4; 2132 bmap0 &= ~FATTR4_WORD0_FILEHANDLE; 2133 } 2134 if (bmap2 & FATTR4_WORD2_SECURITY_LABEL) { 2135 ret += NFS4_MAXLABELLEN + 12; 2136 bmap2 &= ~FATTR4_WORD2_SECURITY_LABEL; 2137 } 2138 /* 2139 * Largest of remaining attributes are 16 bytes (e.g., 2140 * supported_attributes) 2141 */ 2142 ret += 16 * (hweight32(bmap0) + hweight32(bmap1) + hweight32(bmap2)); 2143 /* bitmask, length */ 2144 ret += 20; 2145 return ret; 2146 } 2147 2148 static inline u32 nfsd4_getfh_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2149 { 2150 return (op_encode_hdr_size + 1) * sizeof(__be32) + NFS4_FHSIZE; 2151 } 2152 2153 static inline u32 nfsd4_link_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2154 { 2155 return (op_encode_hdr_size + op_encode_change_info_maxsz) 2156 * sizeof(__be32); 2157 } 2158 2159 static inline u32 nfsd4_lock_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2160 { 2161 return (op_encode_hdr_size + op_encode_lock_denied_maxsz) 2162 * sizeof(__be32); 2163 } 2164 2165 static inline u32 nfsd4_open_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2166 { 2167 return (op_encode_hdr_size + op_encode_stateid_maxsz 2168 + op_encode_change_info_maxsz + 1 2169 + nfs4_fattr_bitmap_maxsz 2170 + op_encode_delegation_maxsz) * sizeof(__be32); 2171 } 2172 2173 static inline u32 nfsd4_read_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2174 { 2175 u32 maxcount = 0, rlen = 0; 2176 2177 maxcount = svc_max_payload(rqstp); 2178 rlen = min(op->u.read.rd_length, maxcount); 2179 2180 return (op_encode_hdr_size + 2 + XDR_QUADLEN(rlen)) * sizeof(__be32); 2181 } 2182 2183 static inline u32 nfsd4_readdir_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2184 { 2185 u32 maxcount = 0, rlen = 0; 2186 2187 maxcount = svc_max_payload(rqstp); 2188 rlen = min(op->u.readdir.rd_maxcount, maxcount); 2189 2190 return (op_encode_hdr_size + op_encode_verifier_maxsz + 2191 XDR_QUADLEN(rlen)) * sizeof(__be32); 2192 } 2193 2194 static inline u32 nfsd4_readlink_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2195 { 2196 return (op_encode_hdr_size + 1) * sizeof(__be32) + PAGE_SIZE; 2197 } 2198 2199 static inline u32 nfsd4_remove_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2200 { 2201 return (op_encode_hdr_size + op_encode_change_info_maxsz) 2202 * sizeof(__be32); 2203 } 2204 2205 static inline u32 nfsd4_rename_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2206 { 2207 return (op_encode_hdr_size + op_encode_change_info_maxsz 2208 + op_encode_change_info_maxsz) * sizeof(__be32); 2209 } 2210 2211 static inline u32 nfsd4_sequence_rsize(struct svc_rqst *rqstp, 2212 struct nfsd4_op *op) 2213 { 2214 return (op_encode_hdr_size 2215 + XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + 5) * sizeof(__be32); 2216 } 2217 2218 static inline u32 nfsd4_test_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2219 { 2220 return (op_encode_hdr_size + 1 + op->u.test_stateid.ts_num_ids) 2221 * sizeof(__be32); 2222 } 2223 2224 static inline u32 nfsd4_setattr_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2225 { 2226 return (op_encode_hdr_size + nfs4_fattr_bitmap_maxsz) * sizeof(__be32); 2227 } 2228 2229 static inline u32 nfsd4_secinfo_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2230 { 2231 return (op_encode_hdr_size + RPC_AUTH_MAXFLAVOR * 2232 (4 + XDR_QUADLEN(GSS_OID_MAX_LEN))) * sizeof(__be32); 2233 } 2234 2235 static inline u32 nfsd4_setclientid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2236 { 2237 return (op_encode_hdr_size + 2 + XDR_QUADLEN(NFS4_VERIFIER_SIZE)) * 2238 sizeof(__be32); 2239 } 2240 2241 static inline u32 nfsd4_write_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2242 { 2243 return (op_encode_hdr_size + 2 + op_encode_verifier_maxsz) * sizeof(__be32); 2244 } 2245 2246 static inline u32 nfsd4_exchange_id_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2247 { 2248 return (op_encode_hdr_size + 2 + 1 + /* eir_clientid, eir_sequenceid */\ 2249 1 + 1 + /* eir_flags, spr_how */\ 2250 4 + /* spo_must_enforce & _allow with bitmap */\ 2251 2 + /*eir_server_owner.so_minor_id */\ 2252 /* eir_server_owner.so_major_id<> */\ 2253 XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\ 2254 /* eir_server_scope<> */\ 2255 XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\ 2256 1 + /* eir_server_impl_id array length */\ 2257 0 /* ignored eir_server_impl_id contents */) * sizeof(__be32); 2258 } 2259 2260 static inline u32 nfsd4_bind_conn_to_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2261 { 2262 return (op_encode_hdr_size + \ 2263 XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* bctsr_sessid */\ 2264 2 /* bctsr_dir, use_conn_in_rdma_mode */) * sizeof(__be32); 2265 } 2266 2267 static inline u32 nfsd4_create_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2268 { 2269 return (op_encode_hdr_size + \ 2270 XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* sessionid */\ 2271 2 + /* csr_sequence, csr_flags */\ 2272 op_encode_channel_attrs_maxsz + \ 2273 op_encode_channel_attrs_maxsz) * sizeof(__be32); 2274 } 2275 2276 static inline u32 nfsd4_copy_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2277 { 2278 return (op_encode_hdr_size + 2279 1 /* wr_callback */ + 2280 op_encode_stateid_maxsz /* wr_callback */ + 2281 2 /* wr_count */ + 2282 1 /* wr_committed */ + 2283 op_encode_verifier_maxsz + 2284 1 /* cr_consecutive */ + 2285 1 /* cr_synchronous */) * sizeof(__be32); 2286 } 2287 2288 static inline u32 nfsd4_offload_status_rsize(struct svc_rqst *rqstp, 2289 struct nfsd4_op *op) 2290 { 2291 return (op_encode_hdr_size + 2292 2 /* osr_count */ + 2293 1 /* osr_complete<1> optional 0 for now */) * sizeof(__be32); 2294 } 2295 2296 #ifdef CONFIG_NFSD_PNFS 2297 static inline u32 nfsd4_getdeviceinfo_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2298 { 2299 u32 maxcount = 0, rlen = 0; 2300 2301 maxcount = svc_max_payload(rqstp); 2302 rlen = min(op->u.getdeviceinfo.gd_maxcount, maxcount); 2303 2304 return (op_encode_hdr_size + 2305 1 /* gd_layout_type*/ + 2306 XDR_QUADLEN(rlen) + 2307 2 /* gd_notify_types */) * sizeof(__be32); 2308 } 2309 2310 /* 2311 * At this stage we don't really know what layout driver will handle the request, 2312 * so we need to define an arbitrary upper bound here. 2313 */ 2314 #define MAX_LAYOUT_SIZE 128 2315 static inline u32 nfsd4_layoutget_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2316 { 2317 return (op_encode_hdr_size + 2318 1 /* logr_return_on_close */ + 2319 op_encode_stateid_maxsz + 2320 1 /* nr of layouts */ + 2321 MAX_LAYOUT_SIZE) * sizeof(__be32); 2322 } 2323 2324 static inline u32 nfsd4_layoutcommit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2325 { 2326 return (op_encode_hdr_size + 2327 1 /* locr_newsize */ + 2328 2 /* ns_size */) * sizeof(__be32); 2329 } 2330 2331 static inline u32 nfsd4_layoutreturn_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2332 { 2333 return (op_encode_hdr_size + 2334 1 /* lrs_stateid */ + 2335 op_encode_stateid_maxsz) * sizeof(__be32); 2336 } 2337 #endif /* CONFIG_NFSD_PNFS */ 2338 2339 2340 static inline u32 nfsd4_seek_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2341 { 2342 return (op_encode_hdr_size + 3) * sizeof(__be32); 2343 } 2344 2345 static const struct nfsd4_operation nfsd4_ops[] = { 2346 [OP_ACCESS] = { 2347 .op_func = nfsd4_access, 2348 .op_name = "OP_ACCESS", 2349 .op_rsize_bop = nfsd4_access_rsize, 2350 }, 2351 [OP_CLOSE] = { 2352 .op_func = nfsd4_close, 2353 .op_flags = OP_MODIFIES_SOMETHING, 2354 .op_name = "OP_CLOSE", 2355 .op_rsize_bop = nfsd4_status_stateid_rsize, 2356 .op_get_currentstateid = nfsd4_get_closestateid, 2357 .op_set_currentstateid = nfsd4_set_closestateid, 2358 }, 2359 [OP_COMMIT] = { 2360 .op_func = nfsd4_commit, 2361 .op_flags = OP_MODIFIES_SOMETHING, 2362 .op_name = "OP_COMMIT", 2363 .op_rsize_bop = nfsd4_commit_rsize, 2364 }, 2365 [OP_CREATE] = { 2366 .op_func = nfsd4_create, 2367 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME | OP_CLEAR_STATEID, 2368 .op_name = "OP_CREATE", 2369 .op_rsize_bop = nfsd4_create_rsize, 2370 }, 2371 [OP_DELEGRETURN] = { 2372 .op_func = nfsd4_delegreturn, 2373 .op_flags = OP_MODIFIES_SOMETHING, 2374 .op_name = "OP_DELEGRETURN", 2375 .op_rsize_bop = nfsd4_only_status_rsize, 2376 .op_get_currentstateid = nfsd4_get_delegreturnstateid, 2377 }, 2378 [OP_GETATTR] = { 2379 .op_func = nfsd4_getattr, 2380 .op_flags = ALLOWED_ON_ABSENT_FS, 2381 .op_rsize_bop = nfsd4_getattr_rsize, 2382 .op_name = "OP_GETATTR", 2383 }, 2384 [OP_GETFH] = { 2385 .op_func = nfsd4_getfh, 2386 .op_name = "OP_GETFH", 2387 .op_rsize_bop = nfsd4_getfh_rsize, 2388 }, 2389 [OP_LINK] = { 2390 .op_func = nfsd4_link, 2391 .op_flags = ALLOWED_ON_ABSENT_FS | OP_MODIFIES_SOMETHING 2392 | OP_CACHEME, 2393 .op_name = "OP_LINK", 2394 .op_rsize_bop = nfsd4_link_rsize, 2395 }, 2396 [OP_LOCK] = { 2397 .op_func = nfsd4_lock, 2398 .op_flags = OP_MODIFIES_SOMETHING | 2399 OP_NONTRIVIAL_ERROR_ENCODE, 2400 .op_name = "OP_LOCK", 2401 .op_rsize_bop = nfsd4_lock_rsize, 2402 .op_set_currentstateid = nfsd4_set_lockstateid, 2403 }, 2404 [OP_LOCKT] = { 2405 .op_func = nfsd4_lockt, 2406 .op_flags = OP_NONTRIVIAL_ERROR_ENCODE, 2407 .op_name = "OP_LOCKT", 2408 .op_rsize_bop = nfsd4_lock_rsize, 2409 }, 2410 [OP_LOCKU] = { 2411 .op_func = nfsd4_locku, 2412 .op_flags = OP_MODIFIES_SOMETHING, 2413 .op_name = "OP_LOCKU", 2414 .op_rsize_bop = nfsd4_status_stateid_rsize, 2415 .op_get_currentstateid = nfsd4_get_lockustateid, 2416 }, 2417 [OP_LOOKUP] = { 2418 .op_func = nfsd4_lookup, 2419 .op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID, 2420 .op_name = "OP_LOOKUP", 2421 .op_rsize_bop = nfsd4_only_status_rsize, 2422 }, 2423 [OP_LOOKUPP] = { 2424 .op_func = nfsd4_lookupp, 2425 .op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID, 2426 .op_name = "OP_LOOKUPP", 2427 .op_rsize_bop = nfsd4_only_status_rsize, 2428 }, 2429 [OP_NVERIFY] = { 2430 .op_func = nfsd4_nverify, 2431 .op_name = "OP_NVERIFY", 2432 .op_rsize_bop = nfsd4_only_status_rsize, 2433 }, 2434 [OP_OPEN] = { 2435 .op_func = nfsd4_open, 2436 .op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING, 2437 .op_name = "OP_OPEN", 2438 .op_rsize_bop = nfsd4_open_rsize, 2439 .op_set_currentstateid = nfsd4_set_openstateid, 2440 }, 2441 [OP_OPEN_CONFIRM] = { 2442 .op_func = nfsd4_open_confirm, 2443 .op_flags = OP_MODIFIES_SOMETHING, 2444 .op_name = "OP_OPEN_CONFIRM", 2445 .op_rsize_bop = nfsd4_status_stateid_rsize, 2446 }, 2447 [OP_OPEN_DOWNGRADE] = { 2448 .op_func = nfsd4_open_downgrade, 2449 .op_flags = OP_MODIFIES_SOMETHING, 2450 .op_name = "OP_OPEN_DOWNGRADE", 2451 .op_rsize_bop = nfsd4_status_stateid_rsize, 2452 .op_get_currentstateid = nfsd4_get_opendowngradestateid, 2453 .op_set_currentstateid = nfsd4_set_opendowngradestateid, 2454 }, 2455 [OP_PUTFH] = { 2456 .op_func = nfsd4_putfh, 2457 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2458 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID, 2459 .op_name = "OP_PUTFH", 2460 .op_rsize_bop = nfsd4_only_status_rsize, 2461 }, 2462 [OP_PUTPUBFH] = { 2463 .op_func = nfsd4_putrootfh, 2464 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2465 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID, 2466 .op_name = "OP_PUTPUBFH", 2467 .op_rsize_bop = nfsd4_only_status_rsize, 2468 }, 2469 [OP_PUTROOTFH] = { 2470 .op_func = nfsd4_putrootfh, 2471 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2472 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID, 2473 .op_name = "OP_PUTROOTFH", 2474 .op_rsize_bop = nfsd4_only_status_rsize, 2475 }, 2476 [OP_READ] = { 2477 .op_func = nfsd4_read, 2478 .op_release = nfsd4_read_release, 2479 .op_name = "OP_READ", 2480 .op_rsize_bop = nfsd4_read_rsize, 2481 .op_get_currentstateid = nfsd4_get_readstateid, 2482 }, 2483 [OP_READDIR] = { 2484 .op_func = nfsd4_readdir, 2485 .op_name = "OP_READDIR", 2486 .op_rsize_bop = nfsd4_readdir_rsize, 2487 }, 2488 [OP_READLINK] = { 2489 .op_func = nfsd4_readlink, 2490 .op_name = "OP_READLINK", 2491 .op_rsize_bop = nfsd4_readlink_rsize, 2492 }, 2493 [OP_REMOVE] = { 2494 .op_func = nfsd4_remove, 2495 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME, 2496 .op_name = "OP_REMOVE", 2497 .op_rsize_bop = nfsd4_remove_rsize, 2498 }, 2499 [OP_RENAME] = { 2500 .op_func = nfsd4_rename, 2501 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME, 2502 .op_name = "OP_RENAME", 2503 .op_rsize_bop = nfsd4_rename_rsize, 2504 }, 2505 [OP_RENEW] = { 2506 .op_func = nfsd4_renew, 2507 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2508 | OP_MODIFIES_SOMETHING, 2509 .op_name = "OP_RENEW", 2510 .op_rsize_bop = nfsd4_only_status_rsize, 2511 2512 }, 2513 [OP_RESTOREFH] = { 2514 .op_func = nfsd4_restorefh, 2515 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2516 | OP_IS_PUTFH_LIKE | OP_MODIFIES_SOMETHING, 2517 .op_name = "OP_RESTOREFH", 2518 .op_rsize_bop = nfsd4_only_status_rsize, 2519 }, 2520 [OP_SAVEFH] = { 2521 .op_func = nfsd4_savefh, 2522 .op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING, 2523 .op_name = "OP_SAVEFH", 2524 .op_rsize_bop = nfsd4_only_status_rsize, 2525 }, 2526 [OP_SECINFO] = { 2527 .op_func = nfsd4_secinfo, 2528 .op_release = nfsd4_secinfo_release, 2529 .op_flags = OP_HANDLES_WRONGSEC, 2530 .op_name = "OP_SECINFO", 2531 .op_rsize_bop = nfsd4_secinfo_rsize, 2532 }, 2533 [OP_SETATTR] = { 2534 .op_func = nfsd4_setattr, 2535 .op_name = "OP_SETATTR", 2536 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME 2537 | OP_NONTRIVIAL_ERROR_ENCODE, 2538 .op_rsize_bop = nfsd4_setattr_rsize, 2539 .op_get_currentstateid = nfsd4_get_setattrstateid, 2540 }, 2541 [OP_SETCLIENTID] = { 2542 .op_func = nfsd4_setclientid, 2543 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2544 | OP_MODIFIES_SOMETHING | OP_CACHEME 2545 | OP_NONTRIVIAL_ERROR_ENCODE, 2546 .op_name = "OP_SETCLIENTID", 2547 .op_rsize_bop = nfsd4_setclientid_rsize, 2548 }, 2549 [OP_SETCLIENTID_CONFIRM] = { 2550 .op_func = nfsd4_setclientid_confirm, 2551 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2552 | OP_MODIFIES_SOMETHING | OP_CACHEME, 2553 .op_name = "OP_SETCLIENTID_CONFIRM", 2554 .op_rsize_bop = nfsd4_only_status_rsize, 2555 }, 2556 [OP_VERIFY] = { 2557 .op_func = nfsd4_verify, 2558 .op_name = "OP_VERIFY", 2559 .op_rsize_bop = nfsd4_only_status_rsize, 2560 }, 2561 [OP_WRITE] = { 2562 .op_func = nfsd4_write, 2563 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME, 2564 .op_name = "OP_WRITE", 2565 .op_rsize_bop = nfsd4_write_rsize, 2566 .op_get_currentstateid = nfsd4_get_writestateid, 2567 }, 2568 [OP_RELEASE_LOCKOWNER] = { 2569 .op_func = nfsd4_release_lockowner, 2570 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2571 | OP_MODIFIES_SOMETHING, 2572 .op_name = "OP_RELEASE_LOCKOWNER", 2573 .op_rsize_bop = nfsd4_only_status_rsize, 2574 }, 2575 2576 /* NFSv4.1 operations */ 2577 [OP_EXCHANGE_ID] = { 2578 .op_func = nfsd4_exchange_id, 2579 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2580 | OP_MODIFIES_SOMETHING, 2581 .op_name = "OP_EXCHANGE_ID", 2582 .op_rsize_bop = nfsd4_exchange_id_rsize, 2583 }, 2584 [OP_BACKCHANNEL_CTL] = { 2585 .op_func = nfsd4_backchannel_ctl, 2586 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING, 2587 .op_name = "OP_BACKCHANNEL_CTL", 2588 .op_rsize_bop = nfsd4_only_status_rsize, 2589 }, 2590 [OP_BIND_CONN_TO_SESSION] = { 2591 .op_func = nfsd4_bind_conn_to_session, 2592 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2593 | OP_MODIFIES_SOMETHING, 2594 .op_name = "OP_BIND_CONN_TO_SESSION", 2595 .op_rsize_bop = nfsd4_bind_conn_to_session_rsize, 2596 }, 2597 [OP_CREATE_SESSION] = { 2598 .op_func = nfsd4_create_session, 2599 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2600 | OP_MODIFIES_SOMETHING, 2601 .op_name = "OP_CREATE_SESSION", 2602 .op_rsize_bop = nfsd4_create_session_rsize, 2603 }, 2604 [OP_DESTROY_SESSION] = { 2605 .op_func = nfsd4_destroy_session, 2606 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2607 | OP_MODIFIES_SOMETHING, 2608 .op_name = "OP_DESTROY_SESSION", 2609 .op_rsize_bop = nfsd4_only_status_rsize, 2610 }, 2611 [OP_SEQUENCE] = { 2612 .op_func = nfsd4_sequence, 2613 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP, 2614 .op_name = "OP_SEQUENCE", 2615 .op_rsize_bop = nfsd4_sequence_rsize, 2616 }, 2617 [OP_DESTROY_CLIENTID] = { 2618 .op_func = nfsd4_destroy_clientid, 2619 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2620 | OP_MODIFIES_SOMETHING, 2621 .op_name = "OP_DESTROY_CLIENTID", 2622 .op_rsize_bop = nfsd4_only_status_rsize, 2623 }, 2624 [OP_RECLAIM_COMPLETE] = { 2625 .op_func = nfsd4_reclaim_complete, 2626 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING, 2627 .op_name = "OP_RECLAIM_COMPLETE", 2628 .op_rsize_bop = nfsd4_only_status_rsize, 2629 }, 2630 [OP_SECINFO_NO_NAME] = { 2631 .op_func = nfsd4_secinfo_no_name, 2632 .op_release = nfsd4_secinfo_no_name_release, 2633 .op_flags = OP_HANDLES_WRONGSEC, 2634 .op_name = "OP_SECINFO_NO_NAME", 2635 .op_rsize_bop = nfsd4_secinfo_rsize, 2636 }, 2637 [OP_TEST_STATEID] = { 2638 .op_func = nfsd4_test_stateid, 2639 .op_flags = ALLOWED_WITHOUT_FH, 2640 .op_name = "OP_TEST_STATEID", 2641 .op_rsize_bop = nfsd4_test_stateid_rsize, 2642 }, 2643 [OP_FREE_STATEID] = { 2644 .op_func = nfsd4_free_stateid, 2645 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING, 2646 .op_name = "OP_FREE_STATEID", 2647 .op_get_currentstateid = nfsd4_get_freestateid, 2648 .op_rsize_bop = nfsd4_only_status_rsize, 2649 }, 2650 #ifdef CONFIG_NFSD_PNFS 2651 [OP_GETDEVICEINFO] = { 2652 .op_func = nfsd4_getdeviceinfo, 2653 .op_release = nfsd4_getdeviceinfo_release, 2654 .op_flags = ALLOWED_WITHOUT_FH, 2655 .op_name = "OP_GETDEVICEINFO", 2656 .op_rsize_bop = nfsd4_getdeviceinfo_rsize, 2657 }, 2658 [OP_LAYOUTGET] = { 2659 .op_func = nfsd4_layoutget, 2660 .op_release = nfsd4_layoutget_release, 2661 .op_flags = OP_MODIFIES_SOMETHING, 2662 .op_name = "OP_LAYOUTGET", 2663 .op_rsize_bop = nfsd4_layoutget_rsize, 2664 }, 2665 [OP_LAYOUTCOMMIT] = { 2666 .op_func = nfsd4_layoutcommit, 2667 .op_flags = OP_MODIFIES_SOMETHING, 2668 .op_name = "OP_LAYOUTCOMMIT", 2669 .op_rsize_bop = nfsd4_layoutcommit_rsize, 2670 }, 2671 [OP_LAYOUTRETURN] = { 2672 .op_func = nfsd4_layoutreturn, 2673 .op_flags = OP_MODIFIES_SOMETHING, 2674 .op_name = "OP_LAYOUTRETURN", 2675 .op_rsize_bop = nfsd4_layoutreturn_rsize, 2676 }, 2677 #endif /* CONFIG_NFSD_PNFS */ 2678 2679 /* NFSv4.2 operations */ 2680 [OP_ALLOCATE] = { 2681 .op_func = nfsd4_allocate, 2682 .op_flags = OP_MODIFIES_SOMETHING, 2683 .op_name = "OP_ALLOCATE", 2684 .op_rsize_bop = nfsd4_only_status_rsize, 2685 }, 2686 [OP_DEALLOCATE] = { 2687 .op_func = nfsd4_deallocate, 2688 .op_flags = OP_MODIFIES_SOMETHING, 2689 .op_name = "OP_DEALLOCATE", 2690 .op_rsize_bop = nfsd4_only_status_rsize, 2691 }, 2692 [OP_CLONE] = { 2693 .op_func = nfsd4_clone, 2694 .op_flags = OP_MODIFIES_SOMETHING, 2695 .op_name = "OP_CLONE", 2696 .op_rsize_bop = nfsd4_only_status_rsize, 2697 }, 2698 [OP_COPY] = { 2699 .op_func = nfsd4_copy, 2700 .op_flags = OP_MODIFIES_SOMETHING, 2701 .op_name = "OP_COPY", 2702 .op_rsize_bop = nfsd4_copy_rsize, 2703 }, 2704 [OP_SEEK] = { 2705 .op_func = nfsd4_seek, 2706 .op_name = "OP_SEEK", 2707 .op_rsize_bop = nfsd4_seek_rsize, 2708 }, 2709 [OP_OFFLOAD_STATUS] = { 2710 .op_func = nfsd4_offload_status, 2711 .op_name = "OP_OFFLOAD_STATUS", 2712 .op_rsize_bop = nfsd4_offload_status_rsize, 2713 }, 2714 [OP_OFFLOAD_CANCEL] = { 2715 .op_func = nfsd4_offload_cancel, 2716 .op_flags = OP_MODIFIES_SOMETHING, 2717 .op_name = "OP_OFFLOAD_CANCEL", 2718 .op_rsize_bop = nfsd4_only_status_rsize, 2719 }, 2720 }; 2721 2722 /** 2723 * nfsd4_spo_must_allow - Determine if the compound op contains an 2724 * operation that is allowed to be sent with machine credentials 2725 * 2726 * @rqstp: a pointer to the struct svc_rqst 2727 * 2728 * Checks to see if the compound contains a spo_must_allow op 2729 * and confirms that it was sent with the proper machine creds. 2730 */ 2731 2732 bool nfsd4_spo_must_allow(struct svc_rqst *rqstp) 2733 { 2734 struct nfsd4_compoundres *resp = rqstp->rq_resp; 2735 struct nfsd4_compoundargs *argp = rqstp->rq_argp; 2736 struct nfsd4_op *this = &argp->ops[resp->opcnt - 1]; 2737 struct nfsd4_compound_state *cstate = &resp->cstate; 2738 struct nfs4_op_map *allow = &cstate->clp->cl_spo_must_allow; 2739 u32 opiter; 2740 2741 if (!cstate->minorversion) 2742 return false; 2743 2744 if (cstate->spo_must_allowed == true) 2745 return true; 2746 2747 opiter = resp->opcnt; 2748 while (opiter < argp->opcnt) { 2749 this = &argp->ops[opiter++]; 2750 if (test_bit(this->opnum, allow->u.longs) && 2751 cstate->clp->cl_mach_cred && 2752 nfsd4_mach_creds_match(cstate->clp, rqstp)) { 2753 cstate->spo_must_allowed = true; 2754 return true; 2755 } 2756 } 2757 cstate->spo_must_allowed = false; 2758 return false; 2759 } 2760 2761 int nfsd4_max_reply(struct svc_rqst *rqstp, struct nfsd4_op *op) 2762 { 2763 if (op->opnum == OP_ILLEGAL || op->status == nfserr_notsupp) 2764 return op_encode_hdr_size * sizeof(__be32); 2765 2766 BUG_ON(OPDESC(op)->op_rsize_bop == NULL); 2767 return OPDESC(op)->op_rsize_bop(rqstp, op); 2768 } 2769 2770 void warn_on_nonidempotent_op(struct nfsd4_op *op) 2771 { 2772 if (OPDESC(op)->op_flags & OP_MODIFIES_SOMETHING) { 2773 pr_err("unable to encode reply to nonidempotent op %d (%s)\n", 2774 op->opnum, nfsd4_op_name(op->opnum)); 2775 WARN_ON_ONCE(1); 2776 } 2777 } 2778 2779 static const char *nfsd4_op_name(unsigned opnum) 2780 { 2781 if (opnum < ARRAY_SIZE(nfsd4_ops)) 2782 return nfsd4_ops[opnum].op_name; 2783 return "unknown_operation"; 2784 } 2785 2786 #define nfsd4_voidres nfsd4_voidargs 2787 struct nfsd4_voidargs { int dummy; }; 2788 2789 static const struct svc_procedure nfsd_procedures4[2] = { 2790 [NFSPROC4_NULL] = { 2791 .pc_func = nfsd4_proc_null, 2792 .pc_encode = nfs4svc_encode_voidres, 2793 .pc_argsize = sizeof(struct nfsd4_voidargs), 2794 .pc_ressize = sizeof(struct nfsd4_voidres), 2795 .pc_cachetype = RC_NOCACHE, 2796 .pc_xdrressize = 1, 2797 }, 2798 [NFSPROC4_COMPOUND] = { 2799 .pc_func = nfsd4_proc_compound, 2800 .pc_decode = nfs4svc_decode_compoundargs, 2801 .pc_encode = nfs4svc_encode_compoundres, 2802 .pc_argsize = sizeof(struct nfsd4_compoundargs), 2803 .pc_ressize = sizeof(struct nfsd4_compoundres), 2804 .pc_release = nfsd4_release_compoundargs, 2805 .pc_cachetype = RC_NOCACHE, 2806 .pc_xdrressize = NFSD_BUFSIZE/4, 2807 }, 2808 }; 2809 2810 static unsigned int nfsd_count3[ARRAY_SIZE(nfsd_procedures4)]; 2811 const struct svc_version nfsd_version4 = { 2812 .vs_vers = 4, 2813 .vs_nproc = 2, 2814 .vs_proc = nfsd_procedures4, 2815 .vs_count = nfsd_count3, 2816 .vs_dispatch = nfsd_dispatch, 2817 .vs_xdrsize = NFS4_SVC_XDRSIZE, 2818 .vs_rpcb_optnl = true, 2819 .vs_need_cong_ctrl = true, 2820 }; 2821 2822 /* 2823 * Local variables: 2824 * c-basic-offset: 8 2825 * End: 2826 */ 2827