1 /* 2 * Server-side XDR for NFSv4 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 * 35 * TODO: Neil Brown made the following observation: We currently 36 * initially reserve NFSD_BUFSIZE space on the transmit queue and 37 * never release any of that until the request is complete. 38 * It would be good to calculate a new maximum response size while 39 * decoding the COMPOUND, and call svc_reserve with this number 40 * at the end of nfs4svc_decode_compoundargs. 41 */ 42 43 #include <linux/slab.h> 44 #include <linux/namei.h> 45 #include <linux/statfs.h> 46 #include <linux/utsname.h> 47 #include <linux/sunrpc/svcauth_gss.h> 48 49 #include "idmap.h" 50 #include "acl.h" 51 #include "xdr4.h" 52 #include "vfs.h" 53 54 55 #define NFSDDBG_FACILITY NFSDDBG_XDR 56 57 /* 58 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing 59 * directory in order to indicate to the client that a filesystem boundary is present 60 * We use a fixed fsid for a referral 61 */ 62 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL 63 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL 64 65 static __be32 66 check_filename(char *str, int len, __be32 err) 67 { 68 int i; 69 70 if (len == 0) 71 return nfserr_inval; 72 if (isdotent(str, len)) 73 return err; 74 for (i = 0; i < len; i++) 75 if (str[i] == '/') 76 return err; 77 return 0; 78 } 79 80 #define DECODE_HEAD \ 81 __be32 *p; \ 82 __be32 status 83 #define DECODE_TAIL \ 84 status = 0; \ 85 out: \ 86 return status; \ 87 xdr_error: \ 88 dprintk("NFSD: xdr error (%s:%d)\n", \ 89 __FILE__, __LINE__); \ 90 status = nfserr_bad_xdr; \ 91 goto out 92 93 #define READ32(x) (x) = ntohl(*p++) 94 #define READ64(x) do { \ 95 (x) = (u64)ntohl(*p++) << 32; \ 96 (x) |= ntohl(*p++); \ 97 } while (0) 98 #define READTIME(x) do { \ 99 p++; \ 100 (x) = ntohl(*p++); \ 101 p++; \ 102 } while (0) 103 #define READMEM(x,nbytes) do { \ 104 x = (char *)p; \ 105 p += XDR_QUADLEN(nbytes); \ 106 } while (0) 107 #define SAVEMEM(x,nbytes) do { \ 108 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \ 109 savemem(argp, p, nbytes) : \ 110 (char *)p)) { \ 111 dprintk("NFSD: xdr error (%s:%d)\n", \ 112 __FILE__, __LINE__); \ 113 goto xdr_error; \ 114 } \ 115 p += XDR_QUADLEN(nbytes); \ 116 } while (0) 117 #define COPYMEM(x,nbytes) do { \ 118 memcpy((x), p, nbytes); \ 119 p += XDR_QUADLEN(nbytes); \ 120 } while (0) 121 122 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */ 123 #define READ_BUF(nbytes) do { \ 124 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \ 125 p = argp->p; \ 126 argp->p += XDR_QUADLEN(nbytes); \ 127 } else if (!(p = read_buf(argp, nbytes))) { \ 128 dprintk("NFSD: xdr error (%s:%d)\n", \ 129 __FILE__, __LINE__); \ 130 goto xdr_error; \ 131 } \ 132 } while (0) 133 134 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes) 135 { 136 /* We want more bytes than seem to be available. 137 * Maybe we need a new page, maybe we have just run out 138 */ 139 unsigned int avail = (char *)argp->end - (char *)argp->p; 140 __be32 *p; 141 if (avail + argp->pagelen < nbytes) 142 return NULL; 143 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */ 144 return NULL; 145 /* ok, we can do it with the current plus the next page */ 146 if (nbytes <= sizeof(argp->tmp)) 147 p = argp->tmp; 148 else { 149 kfree(argp->tmpp); 150 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL); 151 if (!p) 152 return NULL; 153 154 } 155 /* 156 * The following memcpy is safe because read_buf is always 157 * called with nbytes > avail, and the two cases above both 158 * guarantee p points to at least nbytes bytes. 159 */ 160 memcpy(p, argp->p, avail); 161 /* step to next page */ 162 argp->p = page_address(argp->pagelist[0]); 163 argp->pagelist++; 164 if (argp->pagelen < PAGE_SIZE) { 165 argp->end = argp->p + (argp->pagelen>>2); 166 argp->pagelen = 0; 167 } else { 168 argp->end = argp->p + (PAGE_SIZE>>2); 169 argp->pagelen -= PAGE_SIZE; 170 } 171 memcpy(((char*)p)+avail, argp->p, (nbytes - avail)); 172 argp->p += XDR_QUADLEN(nbytes - avail); 173 return p; 174 } 175 176 static int zero_clientid(clientid_t *clid) 177 { 178 return (clid->cl_boot == 0) && (clid->cl_id == 0); 179 } 180 181 static int 182 defer_free(struct nfsd4_compoundargs *argp, 183 void (*release)(const void *), void *p) 184 { 185 struct tmpbuf *tb; 186 187 tb = kmalloc(sizeof(*tb), GFP_KERNEL); 188 if (!tb) 189 return -ENOMEM; 190 tb->buf = p; 191 tb->release = release; 192 tb->next = argp->to_free; 193 argp->to_free = tb; 194 return 0; 195 } 196 197 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes) 198 { 199 if (p == argp->tmp) { 200 p = kmalloc(nbytes, GFP_KERNEL); 201 if (!p) 202 return NULL; 203 memcpy(p, argp->tmp, nbytes); 204 } else { 205 BUG_ON(p != argp->tmpp); 206 argp->tmpp = NULL; 207 } 208 if (defer_free(argp, kfree, p)) { 209 kfree(p); 210 return NULL; 211 } else 212 return (char *)p; 213 } 214 215 static __be32 216 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval) 217 { 218 u32 bmlen; 219 DECODE_HEAD; 220 221 bmval[0] = 0; 222 bmval[1] = 0; 223 bmval[2] = 0; 224 225 READ_BUF(4); 226 READ32(bmlen); 227 if (bmlen > 1000) 228 goto xdr_error; 229 230 READ_BUF(bmlen << 2); 231 if (bmlen > 0) 232 READ32(bmval[0]); 233 if (bmlen > 1) 234 READ32(bmval[1]); 235 if (bmlen > 2) 236 READ32(bmval[2]); 237 238 DECODE_TAIL; 239 } 240 241 static __be32 242 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval, 243 struct iattr *iattr, struct nfs4_acl **acl) 244 { 245 int expected_len, len = 0; 246 u32 dummy32; 247 char *buf; 248 int host_err; 249 250 DECODE_HEAD; 251 iattr->ia_valid = 0; 252 if ((status = nfsd4_decode_bitmap(argp, bmval))) 253 return status; 254 255 READ_BUF(4); 256 READ32(expected_len); 257 258 if (bmval[0] & FATTR4_WORD0_SIZE) { 259 READ_BUF(8); 260 len += 8; 261 READ64(iattr->ia_size); 262 iattr->ia_valid |= ATTR_SIZE; 263 } 264 if (bmval[0] & FATTR4_WORD0_ACL) { 265 int nace; 266 struct nfs4_ace *ace; 267 268 READ_BUF(4); len += 4; 269 READ32(nace); 270 271 if (nace > NFS4_ACL_MAX) 272 return nfserr_resource; 273 274 *acl = nfs4_acl_new(nace); 275 if (*acl == NULL) { 276 host_err = -ENOMEM; 277 goto out_nfserr; 278 } 279 defer_free(argp, kfree, *acl); 280 281 (*acl)->naces = nace; 282 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) { 283 READ_BUF(16); len += 16; 284 READ32(ace->type); 285 READ32(ace->flag); 286 READ32(ace->access_mask); 287 READ32(dummy32); 288 READ_BUF(dummy32); 289 len += XDR_QUADLEN(dummy32) << 2; 290 READMEM(buf, dummy32); 291 ace->whotype = nfs4_acl_get_whotype(buf, dummy32); 292 status = nfs_ok; 293 if (ace->whotype != NFS4_ACL_WHO_NAMED) 294 ace->who = 0; 295 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 296 status = nfsd_map_name_to_gid(argp->rqstp, 297 buf, dummy32, &ace->who); 298 else 299 status = nfsd_map_name_to_uid(argp->rqstp, 300 buf, dummy32, &ace->who); 301 if (status) 302 return status; 303 } 304 } else 305 *acl = NULL; 306 if (bmval[1] & FATTR4_WORD1_MODE) { 307 READ_BUF(4); 308 len += 4; 309 READ32(iattr->ia_mode); 310 iattr->ia_mode &= (S_IFMT | S_IALLUGO); 311 iattr->ia_valid |= ATTR_MODE; 312 } 313 if (bmval[1] & FATTR4_WORD1_OWNER) { 314 READ_BUF(4); 315 len += 4; 316 READ32(dummy32); 317 READ_BUF(dummy32); 318 len += (XDR_QUADLEN(dummy32) << 2); 319 READMEM(buf, dummy32); 320 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid))) 321 return status; 322 iattr->ia_valid |= ATTR_UID; 323 } 324 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) { 325 READ_BUF(4); 326 len += 4; 327 READ32(dummy32); 328 READ_BUF(dummy32); 329 len += (XDR_QUADLEN(dummy32) << 2); 330 READMEM(buf, dummy32); 331 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid))) 332 return status; 333 iattr->ia_valid |= ATTR_GID; 334 } 335 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) { 336 READ_BUF(4); 337 len += 4; 338 READ32(dummy32); 339 switch (dummy32) { 340 case NFS4_SET_TO_CLIENT_TIME: 341 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 342 all 32 bits of 'nseconds'. */ 343 READ_BUF(12); 344 len += 12; 345 READ32(dummy32); 346 if (dummy32) 347 return nfserr_inval; 348 READ32(iattr->ia_atime.tv_sec); 349 READ32(iattr->ia_atime.tv_nsec); 350 if (iattr->ia_atime.tv_nsec >= (u32)1000000000) 351 return nfserr_inval; 352 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET); 353 break; 354 case NFS4_SET_TO_SERVER_TIME: 355 iattr->ia_valid |= ATTR_ATIME; 356 break; 357 default: 358 goto xdr_error; 359 } 360 } 361 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) { 362 READ_BUF(4); 363 len += 4; 364 READ32(dummy32); 365 switch (dummy32) { 366 case NFS4_SET_TO_CLIENT_TIME: 367 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 368 all 32 bits of 'nseconds'. */ 369 READ_BUF(12); 370 len += 12; 371 READ32(dummy32); 372 if (dummy32) 373 return nfserr_inval; 374 READ32(iattr->ia_mtime.tv_sec); 375 READ32(iattr->ia_mtime.tv_nsec); 376 if (iattr->ia_mtime.tv_nsec >= (u32)1000000000) 377 return nfserr_inval; 378 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET); 379 break; 380 case NFS4_SET_TO_SERVER_TIME: 381 iattr->ia_valid |= ATTR_MTIME; 382 break; 383 default: 384 goto xdr_error; 385 } 386 } 387 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0 388 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1 389 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) 390 READ_BUF(expected_len - len); 391 else if (len != expected_len) 392 goto xdr_error; 393 394 DECODE_TAIL; 395 396 out_nfserr: 397 status = nfserrno(host_err); 398 goto out; 399 } 400 401 static __be32 402 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid) 403 { 404 DECODE_HEAD; 405 406 READ_BUF(sizeof(stateid_t)); 407 READ32(sid->si_generation); 408 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 409 410 DECODE_TAIL; 411 } 412 413 static __be32 414 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access) 415 { 416 DECODE_HEAD; 417 418 READ_BUF(4); 419 READ32(access->ac_req_access); 420 421 DECODE_TAIL; 422 } 423 424 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts) 425 { 426 DECODE_HEAD; 427 u32 dummy; 428 429 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8); 430 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 431 READ32(bcts->dir); 432 /* XXX: Perhaps Tom Tucker could help us figure out how we 433 * should be using ctsa_use_conn_in_rdma_mode: */ 434 READ32(dummy); 435 436 DECODE_TAIL; 437 } 438 439 static __be32 440 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close) 441 { 442 DECODE_HEAD; 443 444 close->cl_stateowner = NULL; 445 READ_BUF(4); 446 READ32(close->cl_seqid); 447 return nfsd4_decode_stateid(argp, &close->cl_stateid); 448 449 DECODE_TAIL; 450 } 451 452 453 static __be32 454 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit) 455 { 456 DECODE_HEAD; 457 458 READ_BUF(12); 459 READ64(commit->co_offset); 460 READ32(commit->co_count); 461 462 DECODE_TAIL; 463 } 464 465 static __be32 466 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create) 467 { 468 DECODE_HEAD; 469 470 READ_BUF(4); 471 READ32(create->cr_type); 472 switch (create->cr_type) { 473 case NF4LNK: 474 READ_BUF(4); 475 READ32(create->cr_linklen); 476 READ_BUF(create->cr_linklen); 477 SAVEMEM(create->cr_linkname, create->cr_linklen); 478 break; 479 case NF4BLK: 480 case NF4CHR: 481 READ_BUF(8); 482 READ32(create->cr_specdata1); 483 READ32(create->cr_specdata2); 484 break; 485 case NF4SOCK: 486 case NF4FIFO: 487 case NF4DIR: 488 default: 489 break; 490 } 491 492 READ_BUF(4); 493 READ32(create->cr_namelen); 494 READ_BUF(create->cr_namelen); 495 SAVEMEM(create->cr_name, create->cr_namelen); 496 if ((status = check_filename(create->cr_name, create->cr_namelen, nfserr_inval))) 497 return status; 498 499 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr, 500 &create->cr_acl); 501 if (status) 502 goto out; 503 504 DECODE_TAIL; 505 } 506 507 static inline __be32 508 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr) 509 { 510 return nfsd4_decode_stateid(argp, &dr->dr_stateid); 511 } 512 513 static inline __be32 514 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr) 515 { 516 return nfsd4_decode_bitmap(argp, getattr->ga_bmval); 517 } 518 519 static __be32 520 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link) 521 { 522 DECODE_HEAD; 523 524 READ_BUF(4); 525 READ32(link->li_namelen); 526 READ_BUF(link->li_namelen); 527 SAVEMEM(link->li_name, link->li_namelen); 528 if ((status = check_filename(link->li_name, link->li_namelen, nfserr_inval))) 529 return status; 530 531 DECODE_TAIL; 532 } 533 534 static __be32 535 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock) 536 { 537 DECODE_HEAD; 538 539 lock->lk_replay_owner = NULL; 540 /* 541 * type, reclaim(boolean), offset, length, new_lock_owner(boolean) 542 */ 543 READ_BUF(28); 544 READ32(lock->lk_type); 545 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT)) 546 goto xdr_error; 547 READ32(lock->lk_reclaim); 548 READ64(lock->lk_offset); 549 READ64(lock->lk_length); 550 READ32(lock->lk_is_new); 551 552 if (lock->lk_is_new) { 553 READ_BUF(4); 554 READ32(lock->lk_new_open_seqid); 555 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid); 556 if (status) 557 return status; 558 READ_BUF(8 + sizeof(clientid_t)); 559 READ32(lock->lk_new_lock_seqid); 560 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t)); 561 READ32(lock->lk_new_owner.len); 562 READ_BUF(lock->lk_new_owner.len); 563 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len); 564 } else { 565 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid); 566 if (status) 567 return status; 568 READ_BUF(4); 569 READ32(lock->lk_old_lock_seqid); 570 } 571 572 DECODE_TAIL; 573 } 574 575 static __be32 576 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt) 577 { 578 DECODE_HEAD; 579 580 READ_BUF(32); 581 READ32(lockt->lt_type); 582 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT)) 583 goto xdr_error; 584 READ64(lockt->lt_offset); 585 READ64(lockt->lt_length); 586 COPYMEM(&lockt->lt_clientid, 8); 587 READ32(lockt->lt_owner.len); 588 READ_BUF(lockt->lt_owner.len); 589 READMEM(lockt->lt_owner.data, lockt->lt_owner.len); 590 591 if (argp->minorversion && !zero_clientid(&lockt->lt_clientid)) 592 return nfserr_inval; 593 DECODE_TAIL; 594 } 595 596 static __be32 597 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku) 598 { 599 DECODE_HEAD; 600 601 locku->lu_stateowner = NULL; 602 READ_BUF(8); 603 READ32(locku->lu_type); 604 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT)) 605 goto xdr_error; 606 READ32(locku->lu_seqid); 607 status = nfsd4_decode_stateid(argp, &locku->lu_stateid); 608 if (status) 609 return status; 610 READ_BUF(16); 611 READ64(locku->lu_offset); 612 READ64(locku->lu_length); 613 614 DECODE_TAIL; 615 } 616 617 static __be32 618 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup) 619 { 620 DECODE_HEAD; 621 622 READ_BUF(4); 623 READ32(lookup->lo_len); 624 READ_BUF(lookup->lo_len); 625 SAVEMEM(lookup->lo_name, lookup->lo_len); 626 if ((status = check_filename(lookup->lo_name, lookup->lo_len, nfserr_noent))) 627 return status; 628 629 DECODE_TAIL; 630 } 631 632 static __be32 633 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open) 634 { 635 DECODE_HEAD; 636 637 memset(open->op_bmval, 0, sizeof(open->op_bmval)); 638 open->op_iattr.ia_valid = 0; 639 open->op_stateowner = NULL; 640 641 /* seqid, share_access, share_deny, clientid, ownerlen */ 642 READ_BUF(16 + sizeof(clientid_t)); 643 READ32(open->op_seqid); 644 READ32(open->op_share_access); 645 READ32(open->op_share_deny); 646 COPYMEM(&open->op_clientid, sizeof(clientid_t)); 647 READ32(open->op_owner.len); 648 649 /* owner, open_flag */ 650 READ_BUF(open->op_owner.len + 4); 651 SAVEMEM(open->op_owner.data, open->op_owner.len); 652 READ32(open->op_create); 653 switch (open->op_create) { 654 case NFS4_OPEN_NOCREATE: 655 break; 656 case NFS4_OPEN_CREATE: 657 READ_BUF(4); 658 READ32(open->op_createmode); 659 switch (open->op_createmode) { 660 case NFS4_CREATE_UNCHECKED: 661 case NFS4_CREATE_GUARDED: 662 status = nfsd4_decode_fattr(argp, open->op_bmval, 663 &open->op_iattr, &open->op_acl); 664 if (status) 665 goto out; 666 break; 667 case NFS4_CREATE_EXCLUSIVE: 668 READ_BUF(8); 669 COPYMEM(open->op_verf.data, 8); 670 break; 671 case NFS4_CREATE_EXCLUSIVE4_1: 672 if (argp->minorversion < 1) 673 goto xdr_error; 674 READ_BUF(8); 675 COPYMEM(open->op_verf.data, 8); 676 status = nfsd4_decode_fattr(argp, open->op_bmval, 677 &open->op_iattr, &open->op_acl); 678 if (status) 679 goto out; 680 break; 681 default: 682 goto xdr_error; 683 } 684 break; 685 default: 686 goto xdr_error; 687 } 688 689 /* open_claim */ 690 READ_BUF(4); 691 READ32(open->op_claim_type); 692 switch (open->op_claim_type) { 693 case NFS4_OPEN_CLAIM_NULL: 694 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 695 READ_BUF(4); 696 READ32(open->op_fname.len); 697 READ_BUF(open->op_fname.len); 698 SAVEMEM(open->op_fname.data, open->op_fname.len); 699 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval))) 700 return status; 701 break; 702 case NFS4_OPEN_CLAIM_PREVIOUS: 703 READ_BUF(4); 704 READ32(open->op_delegate_type); 705 break; 706 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 707 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 708 if (status) 709 return status; 710 READ_BUF(4); 711 READ32(open->op_fname.len); 712 READ_BUF(open->op_fname.len); 713 SAVEMEM(open->op_fname.data, open->op_fname.len); 714 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval))) 715 return status; 716 break; 717 default: 718 goto xdr_error; 719 } 720 721 DECODE_TAIL; 722 } 723 724 static __be32 725 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf) 726 { 727 DECODE_HEAD; 728 729 open_conf->oc_stateowner = NULL; 730 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid); 731 if (status) 732 return status; 733 READ_BUF(4); 734 READ32(open_conf->oc_seqid); 735 736 DECODE_TAIL; 737 } 738 739 static __be32 740 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down) 741 { 742 DECODE_HEAD; 743 744 open_down->od_stateowner = NULL; 745 status = nfsd4_decode_stateid(argp, &open_down->od_stateid); 746 if (status) 747 return status; 748 READ_BUF(12); 749 READ32(open_down->od_seqid); 750 READ32(open_down->od_share_access); 751 READ32(open_down->od_share_deny); 752 753 DECODE_TAIL; 754 } 755 756 static __be32 757 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh) 758 { 759 DECODE_HEAD; 760 761 READ_BUF(4); 762 READ32(putfh->pf_fhlen); 763 if (putfh->pf_fhlen > NFS4_FHSIZE) 764 goto xdr_error; 765 READ_BUF(putfh->pf_fhlen); 766 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen); 767 768 DECODE_TAIL; 769 } 770 771 static __be32 772 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) 773 { 774 DECODE_HEAD; 775 776 status = nfsd4_decode_stateid(argp, &read->rd_stateid); 777 if (status) 778 return status; 779 READ_BUF(12); 780 READ64(read->rd_offset); 781 READ32(read->rd_length); 782 783 DECODE_TAIL; 784 } 785 786 static __be32 787 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) 788 { 789 DECODE_HEAD; 790 791 READ_BUF(24); 792 READ64(readdir->rd_cookie); 793 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); 794 READ32(readdir->rd_dircount); /* just in case you needed a useless field... */ 795 READ32(readdir->rd_maxcount); 796 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval))) 797 goto out; 798 799 DECODE_TAIL; 800 } 801 802 static __be32 803 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove) 804 { 805 DECODE_HEAD; 806 807 READ_BUF(4); 808 READ32(remove->rm_namelen); 809 READ_BUF(remove->rm_namelen); 810 SAVEMEM(remove->rm_name, remove->rm_namelen); 811 if ((status = check_filename(remove->rm_name, remove->rm_namelen, nfserr_noent))) 812 return status; 813 814 DECODE_TAIL; 815 } 816 817 static __be32 818 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename) 819 { 820 DECODE_HEAD; 821 822 READ_BUF(4); 823 READ32(rename->rn_snamelen); 824 READ_BUF(rename->rn_snamelen + 4); 825 SAVEMEM(rename->rn_sname, rename->rn_snamelen); 826 READ32(rename->rn_tnamelen); 827 READ_BUF(rename->rn_tnamelen); 828 SAVEMEM(rename->rn_tname, rename->rn_tnamelen); 829 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen, nfserr_noent))) 830 return status; 831 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen, nfserr_inval))) 832 return status; 833 834 DECODE_TAIL; 835 } 836 837 static __be32 838 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid) 839 { 840 DECODE_HEAD; 841 842 READ_BUF(sizeof(clientid_t)); 843 COPYMEM(clientid, sizeof(clientid_t)); 844 845 DECODE_TAIL; 846 } 847 848 static __be32 849 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp, 850 struct nfsd4_secinfo *secinfo) 851 { 852 DECODE_HEAD; 853 854 READ_BUF(4); 855 READ32(secinfo->si_namelen); 856 READ_BUF(secinfo->si_namelen); 857 SAVEMEM(secinfo->si_name, secinfo->si_namelen); 858 status = check_filename(secinfo->si_name, secinfo->si_namelen, 859 nfserr_noent); 860 if (status) 861 return status; 862 DECODE_TAIL; 863 } 864 865 static __be32 866 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp, 867 struct nfsd4_secinfo_no_name *sin) 868 { 869 DECODE_HEAD; 870 871 READ_BUF(4); 872 READ32(sin->sin_style); 873 DECODE_TAIL; 874 } 875 876 static __be32 877 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr) 878 { 879 __be32 status; 880 881 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid); 882 if (status) 883 return status; 884 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr, 885 &setattr->sa_acl); 886 } 887 888 static __be32 889 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid) 890 { 891 DECODE_HEAD; 892 893 READ_BUF(12); 894 COPYMEM(setclientid->se_verf.data, 8); 895 READ32(setclientid->se_namelen); 896 897 READ_BUF(setclientid->se_namelen + 8); 898 SAVEMEM(setclientid->se_name, setclientid->se_namelen); 899 READ32(setclientid->se_callback_prog); 900 READ32(setclientid->se_callback_netid_len); 901 902 READ_BUF(setclientid->se_callback_netid_len + 4); 903 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len); 904 READ32(setclientid->se_callback_addr_len); 905 906 READ_BUF(setclientid->se_callback_addr_len + 4); 907 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len); 908 READ32(setclientid->se_callback_ident); 909 910 DECODE_TAIL; 911 } 912 913 static __be32 914 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c) 915 { 916 DECODE_HEAD; 917 918 READ_BUF(8 + sizeof(nfs4_verifier)); 919 COPYMEM(&scd_c->sc_clientid, 8); 920 COPYMEM(&scd_c->sc_confirm, sizeof(nfs4_verifier)); 921 922 DECODE_TAIL; 923 } 924 925 /* Also used for NVERIFY */ 926 static __be32 927 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify) 928 { 929 #if 0 930 struct nfsd4_compoundargs save = { 931 .p = argp->p, 932 .end = argp->end, 933 .rqstp = argp->rqstp, 934 }; 935 u32 ve_bmval[2]; 936 struct iattr ve_iattr; /* request */ 937 struct nfs4_acl *ve_acl; /* request */ 938 #endif 939 DECODE_HEAD; 940 941 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval))) 942 goto out; 943 944 /* For convenience's sake, we compare raw xdr'd attributes in 945 * nfsd4_proc_verify; however we still decode here just to return 946 * correct error in case of bad xdr. */ 947 #if 0 948 status = nfsd4_decode_fattr(ve_bmval, &ve_iattr, &ve_acl); 949 if (status == nfserr_inval) { 950 status = nfserrno(status); 951 goto out; 952 } 953 #endif 954 READ_BUF(4); 955 READ32(verify->ve_attrlen); 956 READ_BUF(verify->ve_attrlen); 957 SAVEMEM(verify->ve_attrval, verify->ve_attrlen); 958 959 DECODE_TAIL; 960 } 961 962 static __be32 963 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write) 964 { 965 int avail; 966 int v; 967 int len; 968 DECODE_HEAD; 969 970 status = nfsd4_decode_stateid(argp, &write->wr_stateid); 971 if (status) 972 return status; 973 READ_BUF(16); 974 READ64(write->wr_offset); 975 READ32(write->wr_stable_how); 976 if (write->wr_stable_how > 2) 977 goto xdr_error; 978 READ32(write->wr_buflen); 979 980 /* Sorry .. no magic macros for this.. * 981 * READ_BUF(write->wr_buflen); 982 * SAVEMEM(write->wr_buf, write->wr_buflen); 983 */ 984 avail = (char*)argp->end - (char*)argp->p; 985 if (avail + argp->pagelen < write->wr_buflen) { 986 dprintk("NFSD: xdr error (%s:%d)\n", 987 __FILE__, __LINE__); 988 goto xdr_error; 989 } 990 argp->rqstp->rq_vec[0].iov_base = p; 991 argp->rqstp->rq_vec[0].iov_len = avail; 992 v = 0; 993 len = write->wr_buflen; 994 while (len > argp->rqstp->rq_vec[v].iov_len) { 995 len -= argp->rqstp->rq_vec[v].iov_len; 996 v++; 997 argp->rqstp->rq_vec[v].iov_base = page_address(argp->pagelist[0]); 998 argp->pagelist++; 999 if (argp->pagelen >= PAGE_SIZE) { 1000 argp->rqstp->rq_vec[v].iov_len = PAGE_SIZE; 1001 argp->pagelen -= PAGE_SIZE; 1002 } else { 1003 argp->rqstp->rq_vec[v].iov_len = argp->pagelen; 1004 argp->pagelen -= len; 1005 } 1006 } 1007 argp->end = (__be32*) (argp->rqstp->rq_vec[v].iov_base + argp->rqstp->rq_vec[v].iov_len); 1008 argp->p = (__be32*) (argp->rqstp->rq_vec[v].iov_base + (XDR_QUADLEN(len) << 2)); 1009 argp->rqstp->rq_vec[v].iov_len = len; 1010 write->wr_vlen = v+1; 1011 1012 DECODE_TAIL; 1013 } 1014 1015 static __be32 1016 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner) 1017 { 1018 DECODE_HEAD; 1019 1020 READ_BUF(12); 1021 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t)); 1022 READ32(rlockowner->rl_owner.len); 1023 READ_BUF(rlockowner->rl_owner.len); 1024 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len); 1025 1026 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid)) 1027 return nfserr_inval; 1028 DECODE_TAIL; 1029 } 1030 1031 static __be32 1032 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp, 1033 struct nfsd4_exchange_id *exid) 1034 { 1035 int dummy, tmp; 1036 DECODE_HEAD; 1037 1038 READ_BUF(NFS4_VERIFIER_SIZE); 1039 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE); 1040 1041 READ_BUF(4); 1042 READ32(exid->clname.len); 1043 1044 READ_BUF(exid->clname.len); 1045 SAVEMEM(exid->clname.data, exid->clname.len); 1046 1047 READ_BUF(4); 1048 READ32(exid->flags); 1049 1050 /* Ignore state_protect4_a */ 1051 READ_BUF(4); 1052 READ32(exid->spa_how); 1053 switch (exid->spa_how) { 1054 case SP4_NONE: 1055 break; 1056 case SP4_MACH_CRED: 1057 /* spo_must_enforce */ 1058 READ_BUF(4); 1059 READ32(dummy); 1060 READ_BUF(dummy * 4); 1061 p += dummy; 1062 1063 /* spo_must_allow */ 1064 READ_BUF(4); 1065 READ32(dummy); 1066 READ_BUF(dummy * 4); 1067 p += dummy; 1068 break; 1069 case SP4_SSV: 1070 /* ssp_ops */ 1071 READ_BUF(4); 1072 READ32(dummy); 1073 READ_BUF(dummy * 4); 1074 p += dummy; 1075 1076 READ_BUF(4); 1077 READ32(dummy); 1078 READ_BUF(dummy * 4); 1079 p += dummy; 1080 1081 /* ssp_hash_algs<> */ 1082 READ_BUF(4); 1083 READ32(tmp); 1084 while (tmp--) { 1085 READ_BUF(4); 1086 READ32(dummy); 1087 READ_BUF(dummy); 1088 p += XDR_QUADLEN(dummy); 1089 } 1090 1091 /* ssp_encr_algs<> */ 1092 READ_BUF(4); 1093 READ32(tmp); 1094 while (tmp--) { 1095 READ_BUF(4); 1096 READ32(dummy); 1097 READ_BUF(dummy); 1098 p += XDR_QUADLEN(dummy); 1099 } 1100 1101 /* ssp_window and ssp_num_gss_handles */ 1102 READ_BUF(8); 1103 READ32(dummy); 1104 READ32(dummy); 1105 break; 1106 default: 1107 goto xdr_error; 1108 } 1109 1110 /* Ignore Implementation ID */ 1111 READ_BUF(4); /* nfs_impl_id4 array length */ 1112 READ32(dummy); 1113 1114 if (dummy > 1) 1115 goto xdr_error; 1116 1117 if (dummy == 1) { 1118 /* nii_domain */ 1119 READ_BUF(4); 1120 READ32(dummy); 1121 READ_BUF(dummy); 1122 p += XDR_QUADLEN(dummy); 1123 1124 /* nii_name */ 1125 READ_BUF(4); 1126 READ32(dummy); 1127 READ_BUF(dummy); 1128 p += XDR_QUADLEN(dummy); 1129 1130 /* nii_date */ 1131 READ_BUF(12); 1132 p += 3; 1133 } 1134 DECODE_TAIL; 1135 } 1136 1137 static __be32 1138 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp, 1139 struct nfsd4_create_session *sess) 1140 { 1141 DECODE_HEAD; 1142 1143 u32 dummy; 1144 char *machine_name; 1145 int i, j; 1146 int nr_secflavs; 1147 1148 READ_BUF(16); 1149 COPYMEM(&sess->clientid, 8); 1150 READ32(sess->seqid); 1151 READ32(sess->flags); 1152 1153 /* Fore channel attrs */ 1154 READ_BUF(28); 1155 READ32(dummy); /* headerpadsz is always 0 */ 1156 READ32(sess->fore_channel.maxreq_sz); 1157 READ32(sess->fore_channel.maxresp_sz); 1158 READ32(sess->fore_channel.maxresp_cached); 1159 READ32(sess->fore_channel.maxops); 1160 READ32(sess->fore_channel.maxreqs); 1161 READ32(sess->fore_channel.nr_rdma_attrs); 1162 if (sess->fore_channel.nr_rdma_attrs == 1) { 1163 READ_BUF(4); 1164 READ32(sess->fore_channel.rdma_attrs); 1165 } else if (sess->fore_channel.nr_rdma_attrs > 1) { 1166 dprintk("Too many fore channel attr bitmaps!\n"); 1167 goto xdr_error; 1168 } 1169 1170 /* Back channel attrs */ 1171 READ_BUF(28); 1172 READ32(dummy); /* headerpadsz is always 0 */ 1173 READ32(sess->back_channel.maxreq_sz); 1174 READ32(sess->back_channel.maxresp_sz); 1175 READ32(sess->back_channel.maxresp_cached); 1176 READ32(sess->back_channel.maxops); 1177 READ32(sess->back_channel.maxreqs); 1178 READ32(sess->back_channel.nr_rdma_attrs); 1179 if (sess->back_channel.nr_rdma_attrs == 1) { 1180 READ_BUF(4); 1181 READ32(sess->back_channel.rdma_attrs); 1182 } else if (sess->back_channel.nr_rdma_attrs > 1) { 1183 dprintk("Too many back channel attr bitmaps!\n"); 1184 goto xdr_error; 1185 } 1186 1187 READ_BUF(8); 1188 READ32(sess->callback_prog); 1189 1190 /* callback_sec_params4 */ 1191 READ32(nr_secflavs); 1192 for (i = 0; i < nr_secflavs; ++i) { 1193 READ_BUF(4); 1194 READ32(dummy); 1195 switch (dummy) { 1196 case RPC_AUTH_NULL: 1197 /* Nothing to read */ 1198 break; 1199 case RPC_AUTH_UNIX: 1200 READ_BUF(8); 1201 /* stamp */ 1202 READ32(dummy); 1203 1204 /* machine name */ 1205 READ32(dummy); 1206 READ_BUF(dummy); 1207 SAVEMEM(machine_name, dummy); 1208 1209 /* uid, gid */ 1210 READ_BUF(8); 1211 READ32(sess->uid); 1212 READ32(sess->gid); 1213 1214 /* more gids */ 1215 READ_BUF(4); 1216 READ32(dummy); 1217 READ_BUF(dummy * 4); 1218 for (j = 0; j < dummy; ++j) 1219 READ32(dummy); 1220 break; 1221 case RPC_AUTH_GSS: 1222 dprintk("RPC_AUTH_GSS callback secflavor " 1223 "not supported!\n"); 1224 READ_BUF(8); 1225 /* gcbp_service */ 1226 READ32(dummy); 1227 /* gcbp_handle_from_server */ 1228 READ32(dummy); 1229 READ_BUF(dummy); 1230 p += XDR_QUADLEN(dummy); 1231 /* gcbp_handle_from_client */ 1232 READ_BUF(4); 1233 READ32(dummy); 1234 READ_BUF(dummy); 1235 p += XDR_QUADLEN(dummy); 1236 break; 1237 default: 1238 dprintk("Illegal callback secflavor\n"); 1239 return nfserr_inval; 1240 } 1241 } 1242 DECODE_TAIL; 1243 } 1244 1245 static __be32 1246 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp, 1247 struct nfsd4_destroy_session *destroy_session) 1248 { 1249 DECODE_HEAD; 1250 READ_BUF(NFS4_MAX_SESSIONID_LEN); 1251 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1252 1253 DECODE_TAIL; 1254 } 1255 1256 static __be32 1257 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp, 1258 struct nfsd4_sequence *seq) 1259 { 1260 DECODE_HEAD; 1261 1262 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16); 1263 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1264 READ32(seq->seqid); 1265 READ32(seq->slotid); 1266 READ32(seq->maxslots); 1267 READ32(seq->cachethis); 1268 1269 DECODE_TAIL; 1270 } 1271 1272 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc) 1273 { 1274 DECODE_HEAD; 1275 1276 READ_BUF(4); 1277 READ32(rc->rca_one_fs); 1278 1279 DECODE_TAIL; 1280 } 1281 1282 static __be32 1283 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p) 1284 { 1285 return nfs_ok; 1286 } 1287 1288 static __be32 1289 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p) 1290 { 1291 return nfserr_notsupp; 1292 } 1293 1294 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *); 1295 1296 static nfsd4_dec nfsd4_dec_ops[] = { 1297 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1298 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1299 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1300 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1301 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1302 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1303 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1304 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1305 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1306 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1307 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1308 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1309 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1310 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1311 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1312 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1313 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1314 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm, 1315 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1316 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1317 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_noop, 1318 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1319 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1320 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1321 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1322 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1323 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1324 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew, 1325 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1326 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1327 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1328 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1329 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid, 1330 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm, 1331 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1332 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1333 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner, 1334 }; 1335 1336 static nfsd4_dec nfsd41_dec_ops[] = { 1337 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1338 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1339 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1340 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1341 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1342 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1343 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1344 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1345 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1346 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1347 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1348 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1349 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1350 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1351 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1352 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1353 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1354 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_notsupp, 1355 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1356 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1357 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_notsupp, 1358 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1359 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1360 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1361 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1362 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1363 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1364 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_notsupp, 1365 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1366 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1367 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1368 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1369 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp, 1370 [OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp, 1371 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1372 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1373 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_notsupp, 1374 1375 /* new operations for NFSv4.1 */ 1376 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_notsupp, 1377 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session, 1378 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id, 1379 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session, 1380 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session, 1381 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_notsupp, 1382 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1383 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp, 1384 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1385 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp, 1386 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp, 1387 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp, 1388 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name, 1389 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence, 1390 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp, 1391 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_notsupp, 1392 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1393 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp, 1394 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete, 1395 }; 1396 1397 struct nfsd4_minorversion_ops { 1398 nfsd4_dec *decoders; 1399 int nops; 1400 }; 1401 1402 static struct nfsd4_minorversion_ops nfsd4_minorversion[] = { 1403 [0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) }, 1404 [1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) }, 1405 }; 1406 1407 static __be32 1408 nfsd4_decode_compound(struct nfsd4_compoundargs *argp) 1409 { 1410 DECODE_HEAD; 1411 struct nfsd4_op *op; 1412 struct nfsd4_minorversion_ops *ops; 1413 int i; 1414 1415 /* 1416 * XXX: According to spec, we should check the tag 1417 * for UTF-8 compliance. I'm postponing this for 1418 * now because it seems that some clients do use 1419 * binary tags. 1420 */ 1421 READ_BUF(4); 1422 READ32(argp->taglen); 1423 READ_BUF(argp->taglen + 8); 1424 SAVEMEM(argp->tag, argp->taglen); 1425 READ32(argp->minorversion); 1426 READ32(argp->opcnt); 1427 1428 if (argp->taglen > NFSD4_MAX_TAGLEN) 1429 goto xdr_error; 1430 if (argp->opcnt > 100) 1431 goto xdr_error; 1432 1433 if (argp->opcnt > ARRAY_SIZE(argp->iops)) { 1434 argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL); 1435 if (!argp->ops) { 1436 argp->ops = argp->iops; 1437 dprintk("nfsd: couldn't allocate room for COMPOUND\n"); 1438 goto xdr_error; 1439 } 1440 } 1441 1442 if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion)) 1443 argp->opcnt = 0; 1444 1445 ops = &nfsd4_minorversion[argp->minorversion]; 1446 for (i = 0; i < argp->opcnt; i++) { 1447 op = &argp->ops[i]; 1448 op->replay = NULL; 1449 1450 /* 1451 * We can't use READ_BUF() here because we need to handle 1452 * a missing opcode as an OP_WRITE + 1. So we need to check 1453 * to see if we're truly at the end of our buffer or if there 1454 * is another page we need to flip to. 1455 */ 1456 1457 if (argp->p == argp->end) { 1458 if (argp->pagelen < 4) { 1459 /* There isn't an opcode still on the wire */ 1460 op->opnum = OP_WRITE + 1; 1461 op->status = nfserr_bad_xdr; 1462 argp->opcnt = i+1; 1463 break; 1464 } 1465 1466 /* 1467 * False alarm. We just hit a page boundary, but there 1468 * is still data available. Move pointer across page 1469 * boundary. *snip from READ_BUF* 1470 */ 1471 argp->p = page_address(argp->pagelist[0]); 1472 argp->pagelist++; 1473 if (argp->pagelen < PAGE_SIZE) { 1474 argp->end = argp->p + (argp->pagelen>>2); 1475 argp->pagelen = 0; 1476 } else { 1477 argp->end = argp->p + (PAGE_SIZE>>2); 1478 argp->pagelen -= PAGE_SIZE; 1479 } 1480 } 1481 op->opnum = ntohl(*argp->p++); 1482 1483 if (op->opnum >= FIRST_NFS4_OP && op->opnum <= LAST_NFS4_OP) 1484 op->status = ops->decoders[op->opnum](argp, &op->u); 1485 else { 1486 op->opnum = OP_ILLEGAL; 1487 op->status = nfserr_op_illegal; 1488 } 1489 1490 if (op->status) { 1491 argp->opcnt = i+1; 1492 break; 1493 } 1494 } 1495 1496 DECODE_TAIL; 1497 } 1498 1499 #define WRITE32(n) *p++ = htonl(n) 1500 #define WRITE64(n) do { \ 1501 *p++ = htonl((u32)((n) >> 32)); \ 1502 *p++ = htonl((u32)(n)); \ 1503 } while (0) 1504 #define WRITEMEM(ptr,nbytes) do { if (nbytes > 0) { \ 1505 *(p + XDR_QUADLEN(nbytes) -1) = 0; \ 1506 memcpy(p, ptr, nbytes); \ 1507 p += XDR_QUADLEN(nbytes); \ 1508 }} while (0) 1509 1510 static void write32(__be32 **p, u32 n) 1511 { 1512 *(*p)++ = n; 1513 } 1514 1515 static void write64(__be32 **p, u64 n) 1516 { 1517 write32(p, (u32)(n >> 32)); 1518 write32(p, (u32)n); 1519 } 1520 1521 static void write_change(__be32 **p, struct kstat *stat, struct inode *inode) 1522 { 1523 if (IS_I_VERSION(inode)) { 1524 write64(p, inode->i_version); 1525 } else { 1526 write32(p, stat->ctime.tv_sec); 1527 write32(p, stat->ctime.tv_nsec); 1528 } 1529 } 1530 1531 static void write_cinfo(__be32 **p, struct nfsd4_change_info *c) 1532 { 1533 write32(p, c->atomic); 1534 if (c->change_supported) { 1535 write64(p, c->before_change); 1536 write64(p, c->after_change); 1537 } else { 1538 write32(p, c->before_ctime_sec); 1539 write32(p, c->before_ctime_nsec); 1540 write32(p, c->after_ctime_sec); 1541 write32(p, c->after_ctime_nsec); 1542 } 1543 } 1544 1545 #define RESERVE_SPACE(nbytes) do { \ 1546 p = resp->p; \ 1547 BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end); \ 1548 } while (0) 1549 #define ADJUST_ARGS() resp->p = p 1550 1551 /* 1552 * Header routine to setup seqid operation replay cache 1553 */ 1554 #define ENCODE_SEQID_OP_HEAD \ 1555 __be32 *save; \ 1556 \ 1557 save = resp->p; 1558 1559 /* 1560 * Routine for encoding the result of a "seqid-mutating" NFSv4 operation. This 1561 * is where sequence id's are incremented, and the replay cache is filled. 1562 * Note that we increment sequence id's here, at the last moment, so we're sure 1563 * we know whether the error to be returned is a sequence id mutating error. 1564 */ 1565 1566 #define ENCODE_SEQID_OP_TAIL(stateowner) do { \ 1567 if (seqid_mutating_err(nfserr) && stateowner) { \ 1568 stateowner->so_seqid++; \ 1569 stateowner->so_replay.rp_status = nfserr; \ 1570 stateowner->so_replay.rp_buflen = \ 1571 (((char *)(resp)->p - (char *)save)); \ 1572 memcpy(stateowner->so_replay.rp_buf, save, \ 1573 stateowner->so_replay.rp_buflen); \ 1574 } } while (0); 1575 1576 /* Encode as an array of strings the string given with components 1577 * separated @sep. 1578 */ 1579 static __be32 nfsd4_encode_components(char sep, char *components, 1580 __be32 **pp, int *buflen) 1581 { 1582 __be32 *p = *pp; 1583 __be32 *countp = p; 1584 int strlen, count=0; 1585 char *str, *end; 1586 1587 dprintk("nfsd4_encode_components(%s)\n", components); 1588 if ((*buflen -= 4) < 0) 1589 return nfserr_resource; 1590 WRITE32(0); /* We will fill this in with @count later */ 1591 end = str = components; 1592 while (*end) { 1593 for (; *end && (*end != sep); end++) 1594 ; /* Point to end of component */ 1595 strlen = end - str; 1596 if (strlen) { 1597 if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0) 1598 return nfserr_resource; 1599 WRITE32(strlen); 1600 WRITEMEM(str, strlen); 1601 count++; 1602 } 1603 else 1604 end++; 1605 str = end; 1606 } 1607 *pp = p; 1608 p = countp; 1609 WRITE32(count); 1610 return 0; 1611 } 1612 1613 /* 1614 * encode a location element of a fs_locations structure 1615 */ 1616 static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location, 1617 __be32 **pp, int *buflen) 1618 { 1619 __be32 status; 1620 __be32 *p = *pp; 1621 1622 status = nfsd4_encode_components(':', location->hosts, &p, buflen); 1623 if (status) 1624 return status; 1625 status = nfsd4_encode_components('/', location->path, &p, buflen); 1626 if (status) 1627 return status; 1628 *pp = p; 1629 return 0; 1630 } 1631 1632 /* 1633 * Return the path to an export point in the pseudo filesystem namespace 1634 * Returned string is safe to use as long as the caller holds a reference 1635 * to @exp. 1636 */ 1637 static char *nfsd4_path(struct svc_rqst *rqstp, struct svc_export *exp, __be32 *stat) 1638 { 1639 struct svc_fh tmp_fh; 1640 char *path = NULL, *rootpath; 1641 size_t rootlen; 1642 1643 fh_init(&tmp_fh, NFS4_FHSIZE); 1644 *stat = exp_pseudoroot(rqstp, &tmp_fh); 1645 if (*stat) 1646 return NULL; 1647 rootpath = tmp_fh.fh_export->ex_pathname; 1648 1649 path = exp->ex_pathname; 1650 1651 rootlen = strlen(rootpath); 1652 if (strncmp(path, rootpath, rootlen)) { 1653 dprintk("nfsd: fs_locations failed;" 1654 "%s is not contained in %s\n", path, rootpath); 1655 *stat = nfserr_notsupp; 1656 path = NULL; 1657 goto out; 1658 } 1659 path += rootlen; 1660 out: 1661 fh_put(&tmp_fh); 1662 return path; 1663 } 1664 1665 /* 1666 * encode a fs_locations structure 1667 */ 1668 static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp, 1669 struct svc_export *exp, 1670 __be32 **pp, int *buflen) 1671 { 1672 __be32 status; 1673 int i; 1674 __be32 *p = *pp; 1675 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs; 1676 char *root = nfsd4_path(rqstp, exp, &status); 1677 1678 if (status) 1679 return status; 1680 status = nfsd4_encode_components('/', root, &p, buflen); 1681 if (status) 1682 return status; 1683 if ((*buflen -= 4) < 0) 1684 return nfserr_resource; 1685 WRITE32(fslocs->locations_count); 1686 for (i=0; i<fslocs->locations_count; i++) { 1687 status = nfsd4_encode_fs_location4(&fslocs->locations[i], 1688 &p, buflen); 1689 if (status) 1690 return status; 1691 } 1692 *pp = p; 1693 return 0; 1694 } 1695 1696 static u32 nfs4_ftypes[16] = { 1697 NF4BAD, NF4FIFO, NF4CHR, NF4BAD, 1698 NF4DIR, NF4BAD, NF4BLK, NF4BAD, 1699 NF4REG, NF4BAD, NF4LNK, NF4BAD, 1700 NF4SOCK, NF4BAD, NF4LNK, NF4BAD, 1701 }; 1702 1703 static __be32 1704 nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, uid_t id, int group, 1705 __be32 **p, int *buflen) 1706 { 1707 int status; 1708 1709 if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4) 1710 return nfserr_resource; 1711 if (whotype != NFS4_ACL_WHO_NAMED) 1712 status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1)); 1713 else if (group) 1714 status = nfsd_map_gid_to_name(rqstp, id, (u8 *)(*p + 1)); 1715 else 1716 status = nfsd_map_uid_to_name(rqstp, id, (u8 *)(*p + 1)); 1717 if (status < 0) 1718 return nfserrno(status); 1719 *p = xdr_encode_opaque(*p, NULL, status); 1720 *buflen -= (XDR_QUADLEN(status) << 2) + 4; 1721 BUG_ON(*buflen < 0); 1722 return 0; 1723 } 1724 1725 static inline __be32 1726 nfsd4_encode_user(struct svc_rqst *rqstp, uid_t uid, __be32 **p, int *buflen) 1727 { 1728 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, uid, 0, p, buflen); 1729 } 1730 1731 static inline __be32 1732 nfsd4_encode_group(struct svc_rqst *rqstp, uid_t gid, __be32 **p, int *buflen) 1733 { 1734 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, gid, 1, p, buflen); 1735 } 1736 1737 static inline __be32 1738 nfsd4_encode_aclname(struct svc_rqst *rqstp, int whotype, uid_t id, int group, 1739 __be32 **p, int *buflen) 1740 { 1741 return nfsd4_encode_name(rqstp, whotype, id, group, p, buflen); 1742 } 1743 1744 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \ 1745 FATTR4_WORD0_RDATTR_ERROR) 1746 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID 1747 1748 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err) 1749 { 1750 /* As per referral draft: */ 1751 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS || 1752 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) { 1753 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR || 1754 *bmval0 & FATTR4_WORD0_FS_LOCATIONS) 1755 *rdattr_err = NFSERR_MOVED; 1756 else 1757 return nfserr_moved; 1758 } 1759 *bmval0 &= WORD0_ABSENT_FS_ATTRS; 1760 *bmval1 &= WORD1_ABSENT_FS_ATTRS; 1761 return 0; 1762 } 1763 1764 /* 1765 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle 1766 * ourselves. 1767 * 1768 * @countp is the buffer size in _words_; upon successful return this becomes 1769 * replaced with the number of words written. 1770 */ 1771 __be32 1772 nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp, 1773 struct dentry *dentry, __be32 *buffer, int *countp, u32 *bmval, 1774 struct svc_rqst *rqstp, int ignore_crossmnt) 1775 { 1776 u32 bmval0 = bmval[0]; 1777 u32 bmval1 = bmval[1]; 1778 u32 bmval2 = bmval[2]; 1779 struct kstat stat; 1780 struct svc_fh tempfh; 1781 struct kstatfs statfs; 1782 int buflen = *countp << 2; 1783 __be32 *attrlenp; 1784 u32 dummy; 1785 u64 dummy64; 1786 u32 rdattr_err = 0; 1787 __be32 *p = buffer; 1788 __be32 status; 1789 int err; 1790 int aclsupport = 0; 1791 struct nfs4_acl *acl = NULL; 1792 struct nfsd4_compoundres *resp = rqstp->rq_resp; 1793 u32 minorversion = resp->cstate.minorversion; 1794 struct path path = { 1795 .mnt = exp->ex_path.mnt, 1796 .dentry = dentry, 1797 }; 1798 1799 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1); 1800 BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion)); 1801 BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion)); 1802 BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion)); 1803 1804 if (exp->ex_fslocs.migrated) { 1805 BUG_ON(bmval[2]); 1806 status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err); 1807 if (status) 1808 goto out; 1809 } 1810 1811 err = vfs_getattr(exp->ex_path.mnt, dentry, &stat); 1812 if (err) 1813 goto out_nfserr; 1814 if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL | 1815 FATTR4_WORD0_MAXNAME)) || 1816 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE | 1817 FATTR4_WORD1_SPACE_TOTAL))) { 1818 err = vfs_statfs(&path, &statfs); 1819 if (err) 1820 goto out_nfserr; 1821 } 1822 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) { 1823 fh_init(&tempfh, NFS4_FHSIZE); 1824 status = fh_compose(&tempfh, exp, dentry, NULL); 1825 if (status) 1826 goto out; 1827 fhp = &tempfh; 1828 } 1829 if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT 1830 | FATTR4_WORD0_SUPPORTED_ATTRS)) { 1831 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl); 1832 aclsupport = (err == 0); 1833 if (bmval0 & FATTR4_WORD0_ACL) { 1834 if (err == -EOPNOTSUPP) 1835 bmval0 &= ~FATTR4_WORD0_ACL; 1836 else if (err == -EINVAL) { 1837 status = nfserr_attrnotsupp; 1838 goto out; 1839 } else if (err != 0) 1840 goto out_nfserr; 1841 } 1842 } 1843 1844 if (bmval2) { 1845 if ((buflen -= 16) < 0) 1846 goto out_resource; 1847 WRITE32(3); 1848 WRITE32(bmval0); 1849 WRITE32(bmval1); 1850 WRITE32(bmval2); 1851 } else if (bmval1) { 1852 if ((buflen -= 12) < 0) 1853 goto out_resource; 1854 WRITE32(2); 1855 WRITE32(bmval0); 1856 WRITE32(bmval1); 1857 } else { 1858 if ((buflen -= 8) < 0) 1859 goto out_resource; 1860 WRITE32(1); 1861 WRITE32(bmval0); 1862 } 1863 attrlenp = p++; /* to be backfilled later */ 1864 1865 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 1866 u32 word0 = nfsd_suppattrs0(minorversion); 1867 u32 word1 = nfsd_suppattrs1(minorversion); 1868 u32 word2 = nfsd_suppattrs2(minorversion); 1869 1870 if (!aclsupport) 1871 word0 &= ~FATTR4_WORD0_ACL; 1872 if (!word2) { 1873 if ((buflen -= 12) < 0) 1874 goto out_resource; 1875 WRITE32(2); 1876 WRITE32(word0); 1877 WRITE32(word1); 1878 } else { 1879 if ((buflen -= 16) < 0) 1880 goto out_resource; 1881 WRITE32(3); 1882 WRITE32(word0); 1883 WRITE32(word1); 1884 WRITE32(word2); 1885 } 1886 } 1887 if (bmval0 & FATTR4_WORD0_TYPE) { 1888 if ((buflen -= 4) < 0) 1889 goto out_resource; 1890 dummy = nfs4_ftypes[(stat.mode & S_IFMT) >> 12]; 1891 if (dummy == NF4BAD) 1892 goto out_serverfault; 1893 WRITE32(dummy); 1894 } 1895 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) { 1896 if ((buflen -= 4) < 0) 1897 goto out_resource; 1898 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK) 1899 WRITE32(NFS4_FH_PERSISTENT); 1900 else 1901 WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME); 1902 } 1903 if (bmval0 & FATTR4_WORD0_CHANGE) { 1904 if ((buflen -= 8) < 0) 1905 goto out_resource; 1906 write_change(&p, &stat, dentry->d_inode); 1907 } 1908 if (bmval0 & FATTR4_WORD0_SIZE) { 1909 if ((buflen -= 8) < 0) 1910 goto out_resource; 1911 WRITE64(stat.size); 1912 } 1913 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) { 1914 if ((buflen -= 4) < 0) 1915 goto out_resource; 1916 WRITE32(1); 1917 } 1918 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) { 1919 if ((buflen -= 4) < 0) 1920 goto out_resource; 1921 WRITE32(1); 1922 } 1923 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) { 1924 if ((buflen -= 4) < 0) 1925 goto out_resource; 1926 WRITE32(0); 1927 } 1928 if (bmval0 & FATTR4_WORD0_FSID) { 1929 if ((buflen -= 16) < 0) 1930 goto out_resource; 1931 if (exp->ex_fslocs.migrated) { 1932 WRITE64(NFS4_REFERRAL_FSID_MAJOR); 1933 WRITE64(NFS4_REFERRAL_FSID_MINOR); 1934 } else switch(fsid_source(fhp)) { 1935 case FSIDSOURCE_FSID: 1936 WRITE64((u64)exp->ex_fsid); 1937 WRITE64((u64)0); 1938 break; 1939 case FSIDSOURCE_DEV: 1940 WRITE32(0); 1941 WRITE32(MAJOR(stat.dev)); 1942 WRITE32(0); 1943 WRITE32(MINOR(stat.dev)); 1944 break; 1945 case FSIDSOURCE_UUID: 1946 WRITEMEM(exp->ex_uuid, 16); 1947 break; 1948 } 1949 } 1950 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) { 1951 if ((buflen -= 4) < 0) 1952 goto out_resource; 1953 WRITE32(0); 1954 } 1955 if (bmval0 & FATTR4_WORD0_LEASE_TIME) { 1956 if ((buflen -= 4) < 0) 1957 goto out_resource; 1958 WRITE32(nfsd4_lease); 1959 } 1960 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) { 1961 if ((buflen -= 4) < 0) 1962 goto out_resource; 1963 WRITE32(rdattr_err); 1964 } 1965 if (bmval0 & FATTR4_WORD0_ACL) { 1966 struct nfs4_ace *ace; 1967 1968 if (acl == NULL) { 1969 if ((buflen -= 4) < 0) 1970 goto out_resource; 1971 1972 WRITE32(0); 1973 goto out_acl; 1974 } 1975 if ((buflen -= 4) < 0) 1976 goto out_resource; 1977 WRITE32(acl->naces); 1978 1979 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) { 1980 if ((buflen -= 4*3) < 0) 1981 goto out_resource; 1982 WRITE32(ace->type); 1983 WRITE32(ace->flag); 1984 WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL); 1985 status = nfsd4_encode_aclname(rqstp, ace->whotype, 1986 ace->who, ace->flag & NFS4_ACE_IDENTIFIER_GROUP, 1987 &p, &buflen); 1988 if (status == nfserr_resource) 1989 goto out_resource; 1990 if (status) 1991 goto out; 1992 } 1993 } 1994 out_acl: 1995 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) { 1996 if ((buflen -= 4) < 0) 1997 goto out_resource; 1998 WRITE32(aclsupport ? 1999 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0); 2000 } 2001 if (bmval0 & FATTR4_WORD0_CANSETTIME) { 2002 if ((buflen -= 4) < 0) 2003 goto out_resource; 2004 WRITE32(1); 2005 } 2006 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) { 2007 if ((buflen -= 4) < 0) 2008 goto out_resource; 2009 WRITE32(1); 2010 } 2011 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) { 2012 if ((buflen -= 4) < 0) 2013 goto out_resource; 2014 WRITE32(1); 2015 } 2016 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) { 2017 if ((buflen -= 4) < 0) 2018 goto out_resource; 2019 WRITE32(1); 2020 } 2021 if (bmval0 & FATTR4_WORD0_FILEHANDLE) { 2022 buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4; 2023 if (buflen < 0) 2024 goto out_resource; 2025 WRITE32(fhp->fh_handle.fh_size); 2026 WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size); 2027 } 2028 if (bmval0 & FATTR4_WORD0_FILEID) { 2029 if ((buflen -= 8) < 0) 2030 goto out_resource; 2031 WRITE64(stat.ino); 2032 } 2033 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) { 2034 if ((buflen -= 8) < 0) 2035 goto out_resource; 2036 WRITE64((u64) statfs.f_ffree); 2037 } 2038 if (bmval0 & FATTR4_WORD0_FILES_FREE) { 2039 if ((buflen -= 8) < 0) 2040 goto out_resource; 2041 WRITE64((u64) statfs.f_ffree); 2042 } 2043 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) { 2044 if ((buflen -= 8) < 0) 2045 goto out_resource; 2046 WRITE64((u64) statfs.f_files); 2047 } 2048 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) { 2049 status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen); 2050 if (status == nfserr_resource) 2051 goto out_resource; 2052 if (status) 2053 goto out; 2054 } 2055 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) { 2056 if ((buflen -= 4) < 0) 2057 goto out_resource; 2058 WRITE32(1); 2059 } 2060 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) { 2061 if ((buflen -= 8) < 0) 2062 goto out_resource; 2063 WRITE64(~(u64)0); 2064 } 2065 if (bmval0 & FATTR4_WORD0_MAXLINK) { 2066 if ((buflen -= 4) < 0) 2067 goto out_resource; 2068 WRITE32(255); 2069 } 2070 if (bmval0 & FATTR4_WORD0_MAXNAME) { 2071 if ((buflen -= 4) < 0) 2072 goto out_resource; 2073 WRITE32(statfs.f_namelen); 2074 } 2075 if (bmval0 & FATTR4_WORD0_MAXREAD) { 2076 if ((buflen -= 8) < 0) 2077 goto out_resource; 2078 WRITE64((u64) svc_max_payload(rqstp)); 2079 } 2080 if (bmval0 & FATTR4_WORD0_MAXWRITE) { 2081 if ((buflen -= 8) < 0) 2082 goto out_resource; 2083 WRITE64((u64) svc_max_payload(rqstp)); 2084 } 2085 if (bmval1 & FATTR4_WORD1_MODE) { 2086 if ((buflen -= 4) < 0) 2087 goto out_resource; 2088 WRITE32(stat.mode & S_IALLUGO); 2089 } 2090 if (bmval1 & FATTR4_WORD1_NO_TRUNC) { 2091 if ((buflen -= 4) < 0) 2092 goto out_resource; 2093 WRITE32(1); 2094 } 2095 if (bmval1 & FATTR4_WORD1_NUMLINKS) { 2096 if ((buflen -= 4) < 0) 2097 goto out_resource; 2098 WRITE32(stat.nlink); 2099 } 2100 if (bmval1 & FATTR4_WORD1_OWNER) { 2101 status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen); 2102 if (status == nfserr_resource) 2103 goto out_resource; 2104 if (status) 2105 goto out; 2106 } 2107 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) { 2108 status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen); 2109 if (status == nfserr_resource) 2110 goto out_resource; 2111 if (status) 2112 goto out; 2113 } 2114 if (bmval1 & FATTR4_WORD1_RAWDEV) { 2115 if ((buflen -= 8) < 0) 2116 goto out_resource; 2117 WRITE32((u32) MAJOR(stat.rdev)); 2118 WRITE32((u32) MINOR(stat.rdev)); 2119 } 2120 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) { 2121 if ((buflen -= 8) < 0) 2122 goto out_resource; 2123 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize; 2124 WRITE64(dummy64); 2125 } 2126 if (bmval1 & FATTR4_WORD1_SPACE_FREE) { 2127 if ((buflen -= 8) < 0) 2128 goto out_resource; 2129 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize; 2130 WRITE64(dummy64); 2131 } 2132 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) { 2133 if ((buflen -= 8) < 0) 2134 goto out_resource; 2135 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize; 2136 WRITE64(dummy64); 2137 } 2138 if (bmval1 & FATTR4_WORD1_SPACE_USED) { 2139 if ((buflen -= 8) < 0) 2140 goto out_resource; 2141 dummy64 = (u64)stat.blocks << 9; 2142 WRITE64(dummy64); 2143 } 2144 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) { 2145 if ((buflen -= 12) < 0) 2146 goto out_resource; 2147 WRITE32(0); 2148 WRITE32(stat.atime.tv_sec); 2149 WRITE32(stat.atime.tv_nsec); 2150 } 2151 if (bmval1 & FATTR4_WORD1_TIME_DELTA) { 2152 if ((buflen -= 12) < 0) 2153 goto out_resource; 2154 WRITE32(0); 2155 WRITE32(1); 2156 WRITE32(0); 2157 } 2158 if (bmval1 & FATTR4_WORD1_TIME_METADATA) { 2159 if ((buflen -= 12) < 0) 2160 goto out_resource; 2161 WRITE32(0); 2162 WRITE32(stat.ctime.tv_sec); 2163 WRITE32(stat.ctime.tv_nsec); 2164 } 2165 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) { 2166 if ((buflen -= 12) < 0) 2167 goto out_resource; 2168 WRITE32(0); 2169 WRITE32(stat.mtime.tv_sec); 2170 WRITE32(stat.mtime.tv_nsec); 2171 } 2172 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) { 2173 if ((buflen -= 8) < 0) 2174 goto out_resource; 2175 /* 2176 * Get parent's attributes if not ignoring crossmount 2177 * and this is the root of a cross-mounted filesystem. 2178 */ 2179 if (ignore_crossmnt == 0 && 2180 dentry == exp->ex_path.mnt->mnt_root) { 2181 struct path path = exp->ex_path; 2182 path_get(&path); 2183 while (follow_up(&path)) { 2184 if (path.dentry != path.mnt->mnt_root) 2185 break; 2186 } 2187 err = vfs_getattr(path.mnt, path.dentry, &stat); 2188 path_put(&path); 2189 if (err) 2190 goto out_nfserr; 2191 } 2192 WRITE64(stat.ino); 2193 } 2194 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) { 2195 WRITE32(3); 2196 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0); 2197 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1); 2198 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2); 2199 } 2200 2201 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2202 *countp = p - buffer; 2203 status = nfs_ok; 2204 2205 out: 2206 kfree(acl); 2207 if (fhp == &tempfh) 2208 fh_put(&tempfh); 2209 return status; 2210 out_nfserr: 2211 status = nfserrno(err); 2212 goto out; 2213 out_resource: 2214 *countp = 0; 2215 status = nfserr_resource; 2216 goto out; 2217 out_serverfault: 2218 status = nfserr_serverfault; 2219 goto out; 2220 } 2221 2222 static inline int attributes_need_mount(u32 *bmval) 2223 { 2224 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME)) 2225 return 1; 2226 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID) 2227 return 1; 2228 return 0; 2229 } 2230 2231 static __be32 2232 nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd, 2233 const char *name, int namlen, __be32 *p, int *buflen) 2234 { 2235 struct svc_export *exp = cd->rd_fhp->fh_export; 2236 struct dentry *dentry; 2237 __be32 nfserr; 2238 int ignore_crossmnt = 0; 2239 2240 dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen); 2241 if (IS_ERR(dentry)) 2242 return nfserrno(PTR_ERR(dentry)); 2243 if (!dentry->d_inode) { 2244 /* 2245 * nfsd_buffered_readdir drops the i_mutex between 2246 * readdir and calling this callback, leaving a window 2247 * where this directory entry could have gone away. 2248 */ 2249 dput(dentry); 2250 return nfserr_noent; 2251 } 2252 2253 exp_get(exp); 2254 /* 2255 * In the case of a mountpoint, the client may be asking for 2256 * attributes that are only properties of the underlying filesystem 2257 * as opposed to the cross-mounted file system. In such a case, 2258 * we will not follow the cross mount and will fill the attribtutes 2259 * directly from the mountpoint dentry. 2260 */ 2261 if (nfsd_mountpoint(dentry, exp)) { 2262 int err; 2263 2264 if (!(exp->ex_flags & NFSEXP_V4ROOT) 2265 && !attributes_need_mount(cd->rd_bmval)) { 2266 ignore_crossmnt = 1; 2267 goto out_encode; 2268 } 2269 /* 2270 * Why the heck aren't we just using nfsd_lookup?? 2271 * Different "."/".." handling? Something else? 2272 * At least, add a comment here to explain.... 2273 */ 2274 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp); 2275 if (err) { 2276 nfserr = nfserrno(err); 2277 goto out_put; 2278 } 2279 nfserr = check_nfsd_access(exp, cd->rd_rqstp); 2280 if (nfserr) 2281 goto out_put; 2282 2283 } 2284 out_encode: 2285 nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval, 2286 cd->rd_rqstp, ignore_crossmnt); 2287 out_put: 2288 dput(dentry); 2289 exp_put(exp); 2290 return nfserr; 2291 } 2292 2293 static __be32 * 2294 nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr) 2295 { 2296 __be32 *attrlenp; 2297 2298 if (buflen < 6) 2299 return NULL; 2300 *p++ = htonl(2); 2301 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */ 2302 *p++ = htonl(0); /* bmval1 */ 2303 2304 attrlenp = p++; 2305 *p++ = nfserr; /* no htonl */ 2306 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2307 return p; 2308 } 2309 2310 static int 2311 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen, 2312 loff_t offset, u64 ino, unsigned int d_type) 2313 { 2314 struct readdir_cd *ccd = ccdv; 2315 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common); 2316 int buflen; 2317 __be32 *p = cd->buffer; 2318 __be32 *cookiep; 2319 __be32 nfserr = nfserr_toosmall; 2320 2321 /* In nfsv4, "." and ".." never make it onto the wire.. */ 2322 if (name && isdotent(name, namlen)) { 2323 cd->common.err = nfs_ok; 2324 return 0; 2325 } 2326 2327 if (cd->offset) 2328 xdr_encode_hyper(cd->offset, (u64) offset); 2329 2330 buflen = cd->buflen - 4 - XDR_QUADLEN(namlen); 2331 if (buflen < 0) 2332 goto fail; 2333 2334 *p++ = xdr_one; /* mark entry present */ 2335 cookiep = p; 2336 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */ 2337 p = xdr_encode_array(p, name, namlen); /* name length & name */ 2338 2339 nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, p, &buflen); 2340 switch (nfserr) { 2341 case nfs_ok: 2342 p += buflen; 2343 break; 2344 case nfserr_resource: 2345 nfserr = nfserr_toosmall; 2346 goto fail; 2347 case nfserr_noent: 2348 goto skip_entry; 2349 default: 2350 /* 2351 * If the client requested the RDATTR_ERROR attribute, 2352 * we stuff the error code into this attribute 2353 * and continue. If this attribute was not requested, 2354 * then in accordance with the spec, we fail the 2355 * entire READDIR operation(!) 2356 */ 2357 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)) 2358 goto fail; 2359 p = nfsd4_encode_rdattr_error(p, buflen, nfserr); 2360 if (p == NULL) { 2361 nfserr = nfserr_toosmall; 2362 goto fail; 2363 } 2364 } 2365 cd->buflen -= (p - cd->buffer); 2366 cd->buffer = p; 2367 cd->offset = cookiep; 2368 skip_entry: 2369 cd->common.err = nfs_ok; 2370 return 0; 2371 fail: 2372 cd->common.err = nfserr; 2373 return -EINVAL; 2374 } 2375 2376 static void 2377 nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid) 2378 { 2379 __be32 *p; 2380 2381 RESERVE_SPACE(sizeof(stateid_t)); 2382 WRITE32(sid->si_generation); 2383 WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 2384 ADJUST_ARGS(); 2385 } 2386 2387 static __be32 2388 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access) 2389 { 2390 __be32 *p; 2391 2392 if (!nfserr) { 2393 RESERVE_SPACE(8); 2394 WRITE32(access->ac_supported); 2395 WRITE32(access->ac_resp_access); 2396 ADJUST_ARGS(); 2397 } 2398 return nfserr; 2399 } 2400 2401 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts) 2402 { 2403 __be32 *p; 2404 2405 if (!nfserr) { 2406 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8); 2407 WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 2408 WRITE32(bcts->dir); 2409 /* XXX: ? */ 2410 WRITE32(0); 2411 ADJUST_ARGS(); 2412 } 2413 return nfserr; 2414 } 2415 2416 static __be32 2417 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close) 2418 { 2419 ENCODE_SEQID_OP_HEAD; 2420 2421 if (!nfserr) 2422 nfsd4_encode_stateid(resp, &close->cl_stateid); 2423 2424 ENCODE_SEQID_OP_TAIL(close->cl_stateowner); 2425 return nfserr; 2426 } 2427 2428 2429 static __be32 2430 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit) 2431 { 2432 __be32 *p; 2433 2434 if (!nfserr) { 2435 RESERVE_SPACE(8); 2436 WRITEMEM(commit->co_verf.data, 8); 2437 ADJUST_ARGS(); 2438 } 2439 return nfserr; 2440 } 2441 2442 static __be32 2443 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create) 2444 { 2445 __be32 *p; 2446 2447 if (!nfserr) { 2448 RESERVE_SPACE(32); 2449 write_cinfo(&p, &create->cr_cinfo); 2450 WRITE32(2); 2451 WRITE32(create->cr_bmval[0]); 2452 WRITE32(create->cr_bmval[1]); 2453 ADJUST_ARGS(); 2454 } 2455 return nfserr; 2456 } 2457 2458 static __be32 2459 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr) 2460 { 2461 struct svc_fh *fhp = getattr->ga_fhp; 2462 int buflen; 2463 2464 if (nfserr) 2465 return nfserr; 2466 2467 buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2); 2468 nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry, 2469 resp->p, &buflen, getattr->ga_bmval, 2470 resp->rqstp, 0); 2471 if (!nfserr) 2472 resp->p += buflen; 2473 return nfserr; 2474 } 2475 2476 static __be32 2477 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp) 2478 { 2479 struct svc_fh *fhp = *fhpp; 2480 unsigned int len; 2481 __be32 *p; 2482 2483 if (!nfserr) { 2484 len = fhp->fh_handle.fh_size; 2485 RESERVE_SPACE(len + 4); 2486 WRITE32(len); 2487 WRITEMEM(&fhp->fh_handle.fh_base, len); 2488 ADJUST_ARGS(); 2489 } 2490 return nfserr; 2491 } 2492 2493 /* 2494 * Including all fields other than the name, a LOCK4denied structure requires 2495 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes. 2496 */ 2497 static void 2498 nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld) 2499 { 2500 __be32 *p; 2501 2502 RESERVE_SPACE(32 + XDR_LEN(ld->ld_sop ? ld->ld_sop->so_owner.len : 0)); 2503 WRITE64(ld->ld_start); 2504 WRITE64(ld->ld_length); 2505 WRITE32(ld->ld_type); 2506 if (ld->ld_sop) { 2507 WRITEMEM(&ld->ld_clientid, 8); 2508 WRITE32(ld->ld_sop->so_owner.len); 2509 WRITEMEM(ld->ld_sop->so_owner.data, ld->ld_sop->so_owner.len); 2510 kref_put(&ld->ld_sop->so_ref, nfs4_free_stateowner); 2511 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */ 2512 WRITE64((u64)0); /* clientid */ 2513 WRITE32(0); /* length of owner name */ 2514 } 2515 ADJUST_ARGS(); 2516 } 2517 2518 static __be32 2519 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock) 2520 { 2521 ENCODE_SEQID_OP_HEAD; 2522 2523 if (!nfserr) 2524 nfsd4_encode_stateid(resp, &lock->lk_resp_stateid); 2525 else if (nfserr == nfserr_denied) 2526 nfsd4_encode_lock_denied(resp, &lock->lk_denied); 2527 2528 ENCODE_SEQID_OP_TAIL(lock->lk_replay_owner); 2529 return nfserr; 2530 } 2531 2532 static __be32 2533 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt) 2534 { 2535 if (nfserr == nfserr_denied) 2536 nfsd4_encode_lock_denied(resp, &lockt->lt_denied); 2537 return nfserr; 2538 } 2539 2540 static __be32 2541 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku) 2542 { 2543 ENCODE_SEQID_OP_HEAD; 2544 2545 if (!nfserr) 2546 nfsd4_encode_stateid(resp, &locku->lu_stateid); 2547 2548 ENCODE_SEQID_OP_TAIL(locku->lu_stateowner); 2549 return nfserr; 2550 } 2551 2552 2553 static __be32 2554 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link) 2555 { 2556 __be32 *p; 2557 2558 if (!nfserr) { 2559 RESERVE_SPACE(20); 2560 write_cinfo(&p, &link->li_cinfo); 2561 ADJUST_ARGS(); 2562 } 2563 return nfserr; 2564 } 2565 2566 2567 static __be32 2568 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open) 2569 { 2570 __be32 *p; 2571 ENCODE_SEQID_OP_HEAD; 2572 2573 if (nfserr) 2574 goto out; 2575 2576 nfsd4_encode_stateid(resp, &open->op_stateid); 2577 RESERVE_SPACE(40); 2578 write_cinfo(&p, &open->op_cinfo); 2579 WRITE32(open->op_rflags); 2580 WRITE32(2); 2581 WRITE32(open->op_bmval[0]); 2582 WRITE32(open->op_bmval[1]); 2583 WRITE32(open->op_delegate_type); 2584 ADJUST_ARGS(); 2585 2586 switch (open->op_delegate_type) { 2587 case NFS4_OPEN_DELEGATE_NONE: 2588 break; 2589 case NFS4_OPEN_DELEGATE_READ: 2590 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2591 RESERVE_SPACE(20); 2592 WRITE32(open->op_recall); 2593 2594 /* 2595 * TODO: ACE's in delegations 2596 */ 2597 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2598 WRITE32(0); 2599 WRITE32(0); 2600 WRITE32(0); /* XXX: is NULL principal ok? */ 2601 ADJUST_ARGS(); 2602 break; 2603 case NFS4_OPEN_DELEGATE_WRITE: 2604 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2605 RESERVE_SPACE(32); 2606 WRITE32(0); 2607 2608 /* 2609 * TODO: space_limit's in delegations 2610 */ 2611 WRITE32(NFS4_LIMIT_SIZE); 2612 WRITE32(~(u32)0); 2613 WRITE32(~(u32)0); 2614 2615 /* 2616 * TODO: ACE's in delegations 2617 */ 2618 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2619 WRITE32(0); 2620 WRITE32(0); 2621 WRITE32(0); /* XXX: is NULL principal ok? */ 2622 ADJUST_ARGS(); 2623 break; 2624 default: 2625 BUG(); 2626 } 2627 /* XXX save filehandle here */ 2628 out: 2629 ENCODE_SEQID_OP_TAIL(open->op_stateowner); 2630 return nfserr; 2631 } 2632 2633 static __be32 2634 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc) 2635 { 2636 ENCODE_SEQID_OP_HEAD; 2637 2638 if (!nfserr) 2639 nfsd4_encode_stateid(resp, &oc->oc_resp_stateid); 2640 2641 ENCODE_SEQID_OP_TAIL(oc->oc_stateowner); 2642 return nfserr; 2643 } 2644 2645 static __be32 2646 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od) 2647 { 2648 ENCODE_SEQID_OP_HEAD; 2649 2650 if (!nfserr) 2651 nfsd4_encode_stateid(resp, &od->od_stateid); 2652 2653 ENCODE_SEQID_OP_TAIL(od->od_stateowner); 2654 return nfserr; 2655 } 2656 2657 static __be32 2658 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr, 2659 struct nfsd4_read *read) 2660 { 2661 u32 eof; 2662 int v, pn; 2663 unsigned long maxcount; 2664 long len; 2665 __be32 *p; 2666 2667 if (nfserr) 2668 return nfserr; 2669 if (resp->xbuf->page_len) 2670 return nfserr_resource; 2671 2672 RESERVE_SPACE(8); /* eof flag and byte count */ 2673 2674 maxcount = svc_max_payload(resp->rqstp); 2675 if (maxcount > read->rd_length) 2676 maxcount = read->rd_length; 2677 2678 len = maxcount; 2679 v = 0; 2680 while (len > 0) { 2681 pn = resp->rqstp->rq_resused++; 2682 resp->rqstp->rq_vec[v].iov_base = 2683 page_address(resp->rqstp->rq_respages[pn]); 2684 resp->rqstp->rq_vec[v].iov_len = 2685 len < PAGE_SIZE ? len : PAGE_SIZE; 2686 v++; 2687 len -= PAGE_SIZE; 2688 } 2689 read->rd_vlen = v; 2690 2691 nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp, 2692 read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen, 2693 &maxcount); 2694 2695 if (nfserr == nfserr_symlink) 2696 nfserr = nfserr_inval; 2697 if (nfserr) 2698 return nfserr; 2699 eof = (read->rd_offset + maxcount >= 2700 read->rd_fhp->fh_dentry->d_inode->i_size); 2701 2702 WRITE32(eof); 2703 WRITE32(maxcount); 2704 ADJUST_ARGS(); 2705 resp->xbuf->head[0].iov_len = (char*)p 2706 - (char*)resp->xbuf->head[0].iov_base; 2707 resp->xbuf->page_len = maxcount; 2708 2709 /* Use rest of head for padding and remaining ops: */ 2710 resp->xbuf->tail[0].iov_base = p; 2711 resp->xbuf->tail[0].iov_len = 0; 2712 if (maxcount&3) { 2713 RESERVE_SPACE(4); 2714 WRITE32(0); 2715 resp->xbuf->tail[0].iov_base += maxcount&3; 2716 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 2717 ADJUST_ARGS(); 2718 } 2719 return 0; 2720 } 2721 2722 static __be32 2723 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink) 2724 { 2725 int maxcount; 2726 char *page; 2727 __be32 *p; 2728 2729 if (nfserr) 2730 return nfserr; 2731 if (resp->xbuf->page_len) 2732 return nfserr_resource; 2733 2734 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]); 2735 2736 maxcount = PAGE_SIZE; 2737 RESERVE_SPACE(4); 2738 2739 /* 2740 * XXX: By default, the ->readlink() VFS op will truncate symlinks 2741 * if they would overflow the buffer. Is this kosher in NFSv4? If 2742 * not, one easy fix is: if ->readlink() precisely fills the buffer, 2743 * assume that truncation occurred, and return NFS4ERR_RESOURCE. 2744 */ 2745 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount); 2746 if (nfserr == nfserr_isdir) 2747 return nfserr_inval; 2748 if (nfserr) 2749 return nfserr; 2750 2751 WRITE32(maxcount); 2752 ADJUST_ARGS(); 2753 resp->xbuf->head[0].iov_len = (char*)p 2754 - (char*)resp->xbuf->head[0].iov_base; 2755 resp->xbuf->page_len = maxcount; 2756 2757 /* Use rest of head for padding and remaining ops: */ 2758 resp->xbuf->tail[0].iov_base = p; 2759 resp->xbuf->tail[0].iov_len = 0; 2760 if (maxcount&3) { 2761 RESERVE_SPACE(4); 2762 WRITE32(0); 2763 resp->xbuf->tail[0].iov_base += maxcount&3; 2764 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 2765 ADJUST_ARGS(); 2766 } 2767 return 0; 2768 } 2769 2770 static __be32 2771 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir) 2772 { 2773 int maxcount; 2774 loff_t offset; 2775 __be32 *page, *savep, *tailbase; 2776 __be32 *p; 2777 2778 if (nfserr) 2779 return nfserr; 2780 if (resp->xbuf->page_len) 2781 return nfserr_resource; 2782 2783 RESERVE_SPACE(8); /* verifier */ 2784 savep = p; 2785 2786 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */ 2787 WRITE32(0); 2788 WRITE32(0); 2789 ADJUST_ARGS(); 2790 resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base; 2791 tailbase = p; 2792 2793 maxcount = PAGE_SIZE; 2794 if (maxcount > readdir->rd_maxcount) 2795 maxcount = readdir->rd_maxcount; 2796 2797 /* 2798 * Convert from bytes to words, account for the two words already 2799 * written, make sure to leave two words at the end for the next 2800 * pointer and eof field. 2801 */ 2802 maxcount = (maxcount >> 2) - 4; 2803 if (maxcount < 0) { 2804 nfserr = nfserr_toosmall; 2805 goto err_no_verf; 2806 } 2807 2808 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]); 2809 readdir->common.err = 0; 2810 readdir->buflen = maxcount; 2811 readdir->buffer = page; 2812 readdir->offset = NULL; 2813 2814 offset = readdir->rd_cookie; 2815 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, 2816 &offset, 2817 &readdir->common, nfsd4_encode_dirent); 2818 if (nfserr == nfs_ok && 2819 readdir->common.err == nfserr_toosmall && 2820 readdir->buffer == page) 2821 nfserr = nfserr_toosmall; 2822 if (nfserr == nfserr_symlink) 2823 nfserr = nfserr_notdir; 2824 if (nfserr) 2825 goto err_no_verf; 2826 2827 if (readdir->offset) 2828 xdr_encode_hyper(readdir->offset, offset); 2829 2830 p = readdir->buffer; 2831 *p++ = 0; /* no more entries */ 2832 *p++ = htonl(readdir->common.err == nfserr_eof); 2833 resp->xbuf->page_len = ((char*)p) - (char*)page_address( 2834 resp->rqstp->rq_respages[resp->rqstp->rq_resused-1]); 2835 2836 /* Use rest of head for padding and remaining ops: */ 2837 resp->xbuf->tail[0].iov_base = tailbase; 2838 resp->xbuf->tail[0].iov_len = 0; 2839 resp->p = resp->xbuf->tail[0].iov_base; 2840 resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4; 2841 2842 return 0; 2843 err_no_verf: 2844 p = savep; 2845 ADJUST_ARGS(); 2846 return nfserr; 2847 } 2848 2849 static __be32 2850 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove) 2851 { 2852 __be32 *p; 2853 2854 if (!nfserr) { 2855 RESERVE_SPACE(20); 2856 write_cinfo(&p, &remove->rm_cinfo); 2857 ADJUST_ARGS(); 2858 } 2859 return nfserr; 2860 } 2861 2862 static __be32 2863 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename) 2864 { 2865 __be32 *p; 2866 2867 if (!nfserr) { 2868 RESERVE_SPACE(40); 2869 write_cinfo(&p, &rename->rn_sinfo); 2870 write_cinfo(&p, &rename->rn_tinfo); 2871 ADJUST_ARGS(); 2872 } 2873 return nfserr; 2874 } 2875 2876 static __be32 2877 nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp, 2878 __be32 nfserr,struct svc_export *exp) 2879 { 2880 int i = 0; 2881 u32 nflavs; 2882 struct exp_flavor_info *flavs; 2883 struct exp_flavor_info def_flavs[2]; 2884 __be32 *p; 2885 2886 if (nfserr) 2887 goto out; 2888 if (exp->ex_nflavors) { 2889 flavs = exp->ex_flavors; 2890 nflavs = exp->ex_nflavors; 2891 } else { /* Handling of some defaults in absence of real secinfo: */ 2892 flavs = def_flavs; 2893 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) { 2894 nflavs = 2; 2895 flavs[0].pseudoflavor = RPC_AUTH_UNIX; 2896 flavs[1].pseudoflavor = RPC_AUTH_NULL; 2897 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) { 2898 nflavs = 1; 2899 flavs[0].pseudoflavor 2900 = svcauth_gss_flavor(exp->ex_client); 2901 } else { 2902 nflavs = 1; 2903 flavs[0].pseudoflavor 2904 = exp->ex_client->flavour->flavour; 2905 } 2906 } 2907 2908 RESERVE_SPACE(4); 2909 WRITE32(nflavs); 2910 ADJUST_ARGS(); 2911 for (i = 0; i < nflavs; i++) { 2912 u32 flav = flavs[i].pseudoflavor; 2913 struct gss_api_mech *gm = gss_mech_get_by_pseudoflavor(flav); 2914 2915 if (gm) { 2916 RESERVE_SPACE(4); 2917 WRITE32(RPC_AUTH_GSS); 2918 ADJUST_ARGS(); 2919 RESERVE_SPACE(4 + gm->gm_oid.len); 2920 WRITE32(gm->gm_oid.len); 2921 WRITEMEM(gm->gm_oid.data, gm->gm_oid.len); 2922 ADJUST_ARGS(); 2923 RESERVE_SPACE(4); 2924 WRITE32(0); /* qop */ 2925 ADJUST_ARGS(); 2926 RESERVE_SPACE(4); 2927 WRITE32(gss_pseudoflavor_to_service(gm, flav)); 2928 ADJUST_ARGS(); 2929 gss_mech_put(gm); 2930 } else { 2931 RESERVE_SPACE(4); 2932 WRITE32(flav); 2933 ADJUST_ARGS(); 2934 } 2935 } 2936 out: 2937 if (exp) 2938 exp_put(exp); 2939 return nfserr; 2940 } 2941 2942 static __be32 2943 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 2944 struct nfsd4_secinfo *secinfo) 2945 { 2946 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp); 2947 } 2948 2949 static __be32 2950 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr, 2951 struct nfsd4_secinfo_no_name *secinfo) 2952 { 2953 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp); 2954 } 2955 2956 /* 2957 * The SETATTR encode routine is special -- it always encodes a bitmap, 2958 * regardless of the error status. 2959 */ 2960 static __be32 2961 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr) 2962 { 2963 __be32 *p; 2964 2965 RESERVE_SPACE(12); 2966 if (nfserr) { 2967 WRITE32(2); 2968 WRITE32(0); 2969 WRITE32(0); 2970 } 2971 else { 2972 WRITE32(2); 2973 WRITE32(setattr->sa_bmval[0]); 2974 WRITE32(setattr->sa_bmval[1]); 2975 } 2976 ADJUST_ARGS(); 2977 return nfserr; 2978 } 2979 2980 static __be32 2981 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd) 2982 { 2983 __be32 *p; 2984 2985 if (!nfserr) { 2986 RESERVE_SPACE(8 + sizeof(nfs4_verifier)); 2987 WRITEMEM(&scd->se_clientid, 8); 2988 WRITEMEM(&scd->se_confirm, sizeof(nfs4_verifier)); 2989 ADJUST_ARGS(); 2990 } 2991 else if (nfserr == nfserr_clid_inuse) { 2992 RESERVE_SPACE(8); 2993 WRITE32(0); 2994 WRITE32(0); 2995 ADJUST_ARGS(); 2996 } 2997 return nfserr; 2998 } 2999 3000 static __be32 3001 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write) 3002 { 3003 __be32 *p; 3004 3005 if (!nfserr) { 3006 RESERVE_SPACE(16); 3007 WRITE32(write->wr_bytes_written); 3008 WRITE32(write->wr_how_written); 3009 WRITEMEM(write->wr_verifier.data, 8); 3010 ADJUST_ARGS(); 3011 } 3012 return nfserr; 3013 } 3014 3015 static __be32 3016 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, int nfserr, 3017 struct nfsd4_exchange_id *exid) 3018 { 3019 __be32 *p; 3020 char *major_id; 3021 char *server_scope; 3022 int major_id_sz; 3023 int server_scope_sz; 3024 uint64_t minor_id = 0; 3025 3026 if (nfserr) 3027 return nfserr; 3028 3029 major_id = utsname()->nodename; 3030 major_id_sz = strlen(major_id); 3031 server_scope = utsname()->nodename; 3032 server_scope_sz = strlen(server_scope); 3033 3034 RESERVE_SPACE( 3035 8 /* eir_clientid */ + 3036 4 /* eir_sequenceid */ + 3037 4 /* eir_flags */ + 3038 4 /* spr_how (SP4_NONE) */ + 3039 8 /* so_minor_id */ + 3040 4 /* so_major_id.len */ + 3041 (XDR_QUADLEN(major_id_sz) * 4) + 3042 4 /* eir_server_scope.len */ + 3043 (XDR_QUADLEN(server_scope_sz) * 4) + 3044 4 /* eir_server_impl_id.count (0) */); 3045 3046 WRITEMEM(&exid->clientid, 8); 3047 WRITE32(exid->seqid); 3048 WRITE32(exid->flags); 3049 3050 /* state_protect4_r. Currently only support SP4_NONE */ 3051 BUG_ON(exid->spa_how != SP4_NONE); 3052 WRITE32(exid->spa_how); 3053 3054 /* The server_owner struct */ 3055 WRITE64(minor_id); /* Minor id */ 3056 /* major id */ 3057 WRITE32(major_id_sz); 3058 WRITEMEM(major_id, major_id_sz); 3059 3060 /* Server scope */ 3061 WRITE32(server_scope_sz); 3062 WRITEMEM(server_scope, server_scope_sz); 3063 3064 /* Implementation id */ 3065 WRITE32(0); /* zero length nfs_impl_id4 array */ 3066 ADJUST_ARGS(); 3067 return 0; 3068 } 3069 3070 static __be32 3071 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, int nfserr, 3072 struct nfsd4_create_session *sess) 3073 { 3074 __be32 *p; 3075 3076 if (nfserr) 3077 return nfserr; 3078 3079 RESERVE_SPACE(24); 3080 WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3081 WRITE32(sess->seqid); 3082 WRITE32(sess->flags); 3083 ADJUST_ARGS(); 3084 3085 RESERVE_SPACE(28); 3086 WRITE32(0); /* headerpadsz */ 3087 WRITE32(sess->fore_channel.maxreq_sz); 3088 WRITE32(sess->fore_channel.maxresp_sz); 3089 WRITE32(sess->fore_channel.maxresp_cached); 3090 WRITE32(sess->fore_channel.maxops); 3091 WRITE32(sess->fore_channel.maxreqs); 3092 WRITE32(sess->fore_channel.nr_rdma_attrs); 3093 ADJUST_ARGS(); 3094 3095 if (sess->fore_channel.nr_rdma_attrs) { 3096 RESERVE_SPACE(4); 3097 WRITE32(sess->fore_channel.rdma_attrs); 3098 ADJUST_ARGS(); 3099 } 3100 3101 RESERVE_SPACE(28); 3102 WRITE32(0); /* headerpadsz */ 3103 WRITE32(sess->back_channel.maxreq_sz); 3104 WRITE32(sess->back_channel.maxresp_sz); 3105 WRITE32(sess->back_channel.maxresp_cached); 3106 WRITE32(sess->back_channel.maxops); 3107 WRITE32(sess->back_channel.maxreqs); 3108 WRITE32(sess->back_channel.nr_rdma_attrs); 3109 ADJUST_ARGS(); 3110 3111 if (sess->back_channel.nr_rdma_attrs) { 3112 RESERVE_SPACE(4); 3113 WRITE32(sess->back_channel.rdma_attrs); 3114 ADJUST_ARGS(); 3115 } 3116 return 0; 3117 } 3118 3119 static __be32 3120 nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, int nfserr, 3121 struct nfsd4_destroy_session *destroy_session) 3122 { 3123 return nfserr; 3124 } 3125 3126 __be32 3127 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, int nfserr, 3128 struct nfsd4_sequence *seq) 3129 { 3130 __be32 *p; 3131 3132 if (nfserr) 3133 return nfserr; 3134 3135 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20); 3136 WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3137 WRITE32(seq->seqid); 3138 WRITE32(seq->slotid); 3139 WRITE32(seq->maxslots); 3140 /* For now: target_maxslots = maxslots */ 3141 WRITE32(seq->maxslots); 3142 WRITE32(seq->status_flags); 3143 3144 ADJUST_ARGS(); 3145 resp->cstate.datap = p; /* DRC cache data pointer */ 3146 return 0; 3147 } 3148 3149 static __be32 3150 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p) 3151 { 3152 return nfserr; 3153 } 3154 3155 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *); 3156 3157 /* 3158 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1 3159 * since we don't need to filter out obsolete ops as this is 3160 * done in the decoding phase. 3161 */ 3162 static nfsd4_enc nfsd4_enc_ops[] = { 3163 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access, 3164 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close, 3165 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit, 3166 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create, 3167 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop, 3168 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3169 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr, 3170 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh, 3171 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link, 3172 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock, 3173 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt, 3174 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku, 3175 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop, 3176 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop, 3177 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3178 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open, 3179 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop, 3180 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm, 3181 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade, 3182 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop, 3183 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop, 3184 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop, 3185 [OP_READ] = (nfsd4_enc)nfsd4_encode_read, 3186 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir, 3187 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink, 3188 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove, 3189 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename, 3190 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop, 3191 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop, 3192 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop, 3193 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo, 3194 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr, 3195 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid, 3196 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop, 3197 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3198 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write, 3199 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop, 3200 3201 /* NFSv4.1 operations */ 3202 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop, 3203 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session, 3204 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id, 3205 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session, 3206 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_destroy_session, 3207 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_noop, 3208 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3209 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop, 3210 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 3211 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop, 3212 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop, 3213 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3214 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name, 3215 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence, 3216 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop, 3217 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_noop, 3218 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3219 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop, 3220 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop, 3221 }; 3222 3223 /* 3224 * Calculate the total amount of memory that the compound response has taken 3225 * after encoding the current operation. 3226 * 3227 * pad: add on 8 bytes for the next operation's op_code and status so that 3228 * there is room to cache a failure on the next operation. 3229 * 3230 * Compare this length to the session se_fmaxresp_cached. 3231 * 3232 * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so 3233 * will be at least a page and will therefore hold the xdr_buf head. 3234 */ 3235 static int nfsd4_check_drc_limit(struct nfsd4_compoundres *resp) 3236 { 3237 int status = 0; 3238 struct xdr_buf *xb = &resp->rqstp->rq_res; 3239 struct nfsd4_compoundargs *args = resp->rqstp->rq_argp; 3240 struct nfsd4_session *session = NULL; 3241 struct nfsd4_slot *slot = resp->cstate.slot; 3242 u32 length, tlen = 0, pad = 8; 3243 3244 if (!nfsd4_has_session(&resp->cstate)) 3245 return status; 3246 3247 session = resp->cstate.session; 3248 if (session == NULL || slot->sl_cachethis == 0) 3249 return status; 3250 3251 if (resp->opcnt >= args->opcnt) 3252 pad = 0; /* this is the last operation */ 3253 3254 if (xb->page_len == 0) { 3255 length = (char *)resp->p - (char *)xb->head[0].iov_base + pad; 3256 } else { 3257 if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0) 3258 tlen = (char *)resp->p - (char *)xb->tail[0].iov_base; 3259 3260 length = xb->head[0].iov_len + xb->page_len + tlen + pad; 3261 } 3262 dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__, 3263 length, xb->page_len, tlen, pad); 3264 3265 if (length <= session->se_fchannel.maxresp_cached) 3266 return status; 3267 else 3268 return nfserr_rep_too_big_to_cache; 3269 } 3270 3271 void 3272 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3273 { 3274 __be32 *statp; 3275 __be32 *p; 3276 3277 RESERVE_SPACE(8); 3278 WRITE32(op->opnum); 3279 statp = p++; /* to be backfilled at the end */ 3280 ADJUST_ARGS(); 3281 3282 if (op->opnum == OP_ILLEGAL) 3283 goto status; 3284 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) || 3285 !nfsd4_enc_ops[op->opnum]); 3286 op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u); 3287 /* nfsd4_check_drc_limit guarantees enough room for error status */ 3288 if (!op->status && nfsd4_check_drc_limit(resp)) 3289 op->status = nfserr_rep_too_big_to_cache; 3290 status: 3291 /* 3292 * Note: We write the status directly, instead of using WRITE32(), 3293 * since it is already in network byte order. 3294 */ 3295 *statp = op->status; 3296 } 3297 3298 /* 3299 * Encode the reply stored in the stateowner reply cache 3300 * 3301 * XDR note: do not encode rp->rp_buflen: the buffer contains the 3302 * previously sent already encoded operation. 3303 * 3304 * called with nfs4_lock_state() held 3305 */ 3306 void 3307 nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3308 { 3309 __be32 *p; 3310 struct nfs4_replay *rp = op->replay; 3311 3312 BUG_ON(!rp); 3313 3314 RESERVE_SPACE(8); 3315 WRITE32(op->opnum); 3316 *p++ = rp->rp_status; /* already xdr'ed */ 3317 ADJUST_ARGS(); 3318 3319 RESERVE_SPACE(rp->rp_buflen); 3320 WRITEMEM(rp->rp_buf, rp->rp_buflen); 3321 ADJUST_ARGS(); 3322 } 3323 3324 int 3325 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy) 3326 { 3327 return xdr_ressize_check(rqstp, p); 3328 } 3329 3330 void nfsd4_release_compoundargs(struct nfsd4_compoundargs *args) 3331 { 3332 if (args->ops != args->iops) { 3333 kfree(args->ops); 3334 args->ops = args->iops; 3335 } 3336 kfree(args->tmpp); 3337 args->tmpp = NULL; 3338 while (args->to_free) { 3339 struct tmpbuf *tb = args->to_free; 3340 args->to_free = tb->next; 3341 tb->release(tb->buf); 3342 kfree(tb); 3343 } 3344 } 3345 3346 int 3347 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args) 3348 { 3349 __be32 status; 3350 3351 args->p = p; 3352 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len; 3353 args->pagelist = rqstp->rq_arg.pages; 3354 args->pagelen = rqstp->rq_arg.page_len; 3355 args->tmpp = NULL; 3356 args->to_free = NULL; 3357 args->ops = args->iops; 3358 args->rqstp = rqstp; 3359 3360 status = nfsd4_decode_compound(args); 3361 if (status) { 3362 nfsd4_release_compoundargs(args); 3363 } 3364 return !status; 3365 } 3366 3367 int 3368 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp) 3369 { 3370 /* 3371 * All that remains is to write the tag and operation count... 3372 */ 3373 struct nfsd4_compound_state *cs = &resp->cstate; 3374 struct kvec *iov; 3375 p = resp->tagp; 3376 *p++ = htonl(resp->taglen); 3377 memcpy(p, resp->tag, resp->taglen); 3378 p += XDR_QUADLEN(resp->taglen); 3379 *p++ = htonl(resp->opcnt); 3380 3381 if (rqstp->rq_res.page_len) 3382 iov = &rqstp->rq_res.tail[0]; 3383 else 3384 iov = &rqstp->rq_res.head[0]; 3385 iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base; 3386 BUG_ON(iov->iov_len > PAGE_SIZE); 3387 if (nfsd4_has_session(cs)) { 3388 if (cs->status != nfserr_replay_cache) { 3389 nfsd4_store_cache_entry(resp); 3390 dprintk("%s: SET SLOT STATE TO AVAILABLE\n", __func__); 3391 cs->slot->sl_inuse = false; 3392 } 3393 /* Renew the clientid on success and on replay */ 3394 release_session_client(cs->session); 3395 nfsd4_put_session(cs->session); 3396 } 3397 return 1; 3398 } 3399 3400 /* 3401 * Local variables: 3402 * c-basic-offset: 8 3403 * End: 3404 */ 3405