1 /* 2 * Server-side XDR for NFSv4 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 * 35 * TODO: Neil Brown made the following observation: We currently 36 * initially reserve NFSD_BUFSIZE space on the transmit queue and 37 * never release any of that until the request is complete. 38 * It would be good to calculate a new maximum response size while 39 * decoding the COMPOUND, and call svc_reserve with this number 40 * at the end of nfs4svc_decode_compoundargs. 41 */ 42 43 #include <linux/slab.h> 44 #include <linux/namei.h> 45 #include <linux/statfs.h> 46 #include <linux/utsname.h> 47 #include <linux/pagemap.h> 48 #include <linux/sunrpc/svcauth_gss.h> 49 50 #include "idmap.h" 51 #include "acl.h" 52 #include "xdr4.h" 53 #include "vfs.h" 54 #include "state.h" 55 #include "cache.h" 56 #include "netns.h" 57 58 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 59 #include <linux/security.h> 60 #endif 61 62 63 #define NFSDDBG_FACILITY NFSDDBG_XDR 64 65 /* 66 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing 67 * directory in order to indicate to the client that a filesystem boundary is present 68 * We use a fixed fsid for a referral 69 */ 70 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL 71 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL 72 73 static __be32 74 check_filename(char *str, int len) 75 { 76 int i; 77 78 if (len == 0) 79 return nfserr_inval; 80 if (isdotent(str, len)) 81 return nfserr_badname; 82 for (i = 0; i < len; i++) 83 if (str[i] == '/') 84 return nfserr_badname; 85 return 0; 86 } 87 88 #define DECODE_HEAD \ 89 __be32 *p; \ 90 __be32 status 91 #define DECODE_TAIL \ 92 status = 0; \ 93 out: \ 94 return status; \ 95 xdr_error: \ 96 dprintk("NFSD: xdr error (%s:%d)\n", \ 97 __FILE__, __LINE__); \ 98 status = nfserr_bad_xdr; \ 99 goto out 100 101 #define READ32(x) (x) = ntohl(*p++) 102 #define READ64(x) do { \ 103 (x) = (u64)ntohl(*p++) << 32; \ 104 (x) |= ntohl(*p++); \ 105 } while (0) 106 #define READTIME(x) do { \ 107 p++; \ 108 (x) = ntohl(*p++); \ 109 p++; \ 110 } while (0) 111 #define READMEM(x,nbytes) do { \ 112 x = (char *)p; \ 113 p += XDR_QUADLEN(nbytes); \ 114 } while (0) 115 #define SAVEMEM(x,nbytes) do { \ 116 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \ 117 savemem(argp, p, nbytes) : \ 118 (char *)p)) { \ 119 dprintk("NFSD: xdr error (%s:%d)\n", \ 120 __FILE__, __LINE__); \ 121 goto xdr_error; \ 122 } \ 123 p += XDR_QUADLEN(nbytes); \ 124 } while (0) 125 #define COPYMEM(x,nbytes) do { \ 126 memcpy((x), p, nbytes); \ 127 p += XDR_QUADLEN(nbytes); \ 128 } while (0) 129 130 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */ 131 #define READ_BUF(nbytes) do { \ 132 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \ 133 p = argp->p; \ 134 argp->p += XDR_QUADLEN(nbytes); \ 135 } else if (!(p = read_buf(argp, nbytes))) { \ 136 dprintk("NFSD: xdr error (%s:%d)\n", \ 137 __FILE__, __LINE__); \ 138 goto xdr_error; \ 139 } \ 140 } while (0) 141 142 static void next_decode_page(struct nfsd4_compoundargs *argp) 143 { 144 argp->pagelist++; 145 argp->p = page_address(argp->pagelist[0]); 146 if (argp->pagelen < PAGE_SIZE) { 147 argp->end = argp->p + (argp->pagelen>>2); 148 argp->pagelen = 0; 149 } else { 150 argp->end = argp->p + (PAGE_SIZE>>2); 151 argp->pagelen -= PAGE_SIZE; 152 } 153 } 154 155 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes) 156 { 157 /* We want more bytes than seem to be available. 158 * Maybe we need a new page, maybe we have just run out 159 */ 160 unsigned int avail = (char *)argp->end - (char *)argp->p; 161 __be32 *p; 162 if (avail + argp->pagelen < nbytes) 163 return NULL; 164 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */ 165 return NULL; 166 /* ok, we can do it with the current plus the next page */ 167 if (nbytes <= sizeof(argp->tmp)) 168 p = argp->tmp; 169 else { 170 kfree(argp->tmpp); 171 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL); 172 if (!p) 173 return NULL; 174 175 } 176 /* 177 * The following memcpy is safe because read_buf is always 178 * called with nbytes > avail, and the two cases above both 179 * guarantee p points to at least nbytes bytes. 180 */ 181 memcpy(p, argp->p, avail); 182 next_decode_page(argp); 183 memcpy(((char*)p)+avail, argp->p, (nbytes - avail)); 184 argp->p += XDR_QUADLEN(nbytes - avail); 185 return p; 186 } 187 188 static int zero_clientid(clientid_t *clid) 189 { 190 return (clid->cl_boot == 0) && (clid->cl_id == 0); 191 } 192 193 static int 194 defer_free(struct nfsd4_compoundargs *argp, 195 void (*release)(const void *), void *p) 196 { 197 struct tmpbuf *tb; 198 199 tb = kmalloc(sizeof(*tb), GFP_KERNEL); 200 if (!tb) 201 return -ENOMEM; 202 tb->buf = p; 203 tb->release = release; 204 tb->next = argp->to_free; 205 argp->to_free = tb; 206 return 0; 207 } 208 209 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes) 210 { 211 if (p == argp->tmp) { 212 p = kmemdup(argp->tmp, nbytes, GFP_KERNEL); 213 if (!p) 214 return NULL; 215 } else { 216 BUG_ON(p != argp->tmpp); 217 argp->tmpp = NULL; 218 } 219 if (defer_free(argp, kfree, p)) { 220 kfree(p); 221 return NULL; 222 } else 223 return (char *)p; 224 } 225 226 static __be32 227 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval) 228 { 229 u32 bmlen; 230 DECODE_HEAD; 231 232 bmval[0] = 0; 233 bmval[1] = 0; 234 bmval[2] = 0; 235 236 READ_BUF(4); 237 READ32(bmlen); 238 if (bmlen > 1000) 239 goto xdr_error; 240 241 READ_BUF(bmlen << 2); 242 if (bmlen > 0) 243 READ32(bmval[0]); 244 if (bmlen > 1) 245 READ32(bmval[1]); 246 if (bmlen > 2) 247 READ32(bmval[2]); 248 249 DECODE_TAIL; 250 } 251 252 static __be32 253 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval, 254 struct iattr *iattr, struct nfs4_acl **acl, 255 struct xdr_netobj *label) 256 { 257 int expected_len, len = 0; 258 u32 dummy32; 259 char *buf; 260 int host_err; 261 262 DECODE_HEAD; 263 iattr->ia_valid = 0; 264 if ((status = nfsd4_decode_bitmap(argp, bmval))) 265 return status; 266 267 READ_BUF(4); 268 READ32(expected_len); 269 270 if (bmval[0] & FATTR4_WORD0_SIZE) { 271 READ_BUF(8); 272 len += 8; 273 READ64(iattr->ia_size); 274 iattr->ia_valid |= ATTR_SIZE; 275 } 276 if (bmval[0] & FATTR4_WORD0_ACL) { 277 u32 nace; 278 struct nfs4_ace *ace; 279 280 READ_BUF(4); len += 4; 281 READ32(nace); 282 283 if (nace > NFS4_ACL_MAX) 284 return nfserr_resource; 285 286 *acl = nfs4_acl_new(nace); 287 if (*acl == NULL) { 288 host_err = -ENOMEM; 289 goto out_nfserr; 290 } 291 defer_free(argp, kfree, *acl); 292 293 (*acl)->naces = nace; 294 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) { 295 READ_BUF(16); len += 16; 296 READ32(ace->type); 297 READ32(ace->flag); 298 READ32(ace->access_mask); 299 READ32(dummy32); 300 READ_BUF(dummy32); 301 len += XDR_QUADLEN(dummy32) << 2; 302 READMEM(buf, dummy32); 303 ace->whotype = nfs4_acl_get_whotype(buf, dummy32); 304 status = nfs_ok; 305 if (ace->whotype != NFS4_ACL_WHO_NAMED) 306 ; 307 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 308 status = nfsd_map_name_to_gid(argp->rqstp, 309 buf, dummy32, &ace->who_gid); 310 else 311 status = nfsd_map_name_to_uid(argp->rqstp, 312 buf, dummy32, &ace->who_uid); 313 if (status) 314 return status; 315 } 316 } else 317 *acl = NULL; 318 if (bmval[1] & FATTR4_WORD1_MODE) { 319 READ_BUF(4); 320 len += 4; 321 READ32(iattr->ia_mode); 322 iattr->ia_mode &= (S_IFMT | S_IALLUGO); 323 iattr->ia_valid |= ATTR_MODE; 324 } 325 if (bmval[1] & FATTR4_WORD1_OWNER) { 326 READ_BUF(4); 327 len += 4; 328 READ32(dummy32); 329 READ_BUF(dummy32); 330 len += (XDR_QUADLEN(dummy32) << 2); 331 READMEM(buf, dummy32); 332 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid))) 333 return status; 334 iattr->ia_valid |= ATTR_UID; 335 } 336 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) { 337 READ_BUF(4); 338 len += 4; 339 READ32(dummy32); 340 READ_BUF(dummy32); 341 len += (XDR_QUADLEN(dummy32) << 2); 342 READMEM(buf, dummy32); 343 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid))) 344 return status; 345 iattr->ia_valid |= ATTR_GID; 346 } 347 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) { 348 READ_BUF(4); 349 len += 4; 350 READ32(dummy32); 351 switch (dummy32) { 352 case NFS4_SET_TO_CLIENT_TIME: 353 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 354 all 32 bits of 'nseconds'. */ 355 READ_BUF(12); 356 len += 12; 357 READ64(iattr->ia_atime.tv_sec); 358 READ32(iattr->ia_atime.tv_nsec); 359 if (iattr->ia_atime.tv_nsec >= (u32)1000000000) 360 return nfserr_inval; 361 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET); 362 break; 363 case NFS4_SET_TO_SERVER_TIME: 364 iattr->ia_valid |= ATTR_ATIME; 365 break; 366 default: 367 goto xdr_error; 368 } 369 } 370 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) { 371 READ_BUF(4); 372 len += 4; 373 READ32(dummy32); 374 switch (dummy32) { 375 case NFS4_SET_TO_CLIENT_TIME: 376 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 377 all 32 bits of 'nseconds'. */ 378 READ_BUF(12); 379 len += 12; 380 READ64(iattr->ia_mtime.tv_sec); 381 READ32(iattr->ia_mtime.tv_nsec); 382 if (iattr->ia_mtime.tv_nsec >= (u32)1000000000) 383 return nfserr_inval; 384 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET); 385 break; 386 case NFS4_SET_TO_SERVER_TIME: 387 iattr->ia_valid |= ATTR_MTIME; 388 break; 389 default: 390 goto xdr_error; 391 } 392 } 393 394 label->len = 0; 395 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 396 if (bmval[2] & FATTR4_WORD2_SECURITY_LABEL) { 397 READ_BUF(4); 398 len += 4; 399 READ32(dummy32); /* lfs: we don't use it */ 400 READ_BUF(4); 401 len += 4; 402 READ32(dummy32); /* pi: we don't use it either */ 403 READ_BUF(4); 404 len += 4; 405 READ32(dummy32); 406 READ_BUF(dummy32); 407 if (dummy32 > NFSD4_MAX_SEC_LABEL_LEN) 408 return nfserr_badlabel; 409 len += (XDR_QUADLEN(dummy32) << 2); 410 READMEM(buf, dummy32); 411 label->data = kzalloc(dummy32 + 1, GFP_KERNEL); 412 if (!label->data) 413 return nfserr_jukebox; 414 defer_free(argp, kfree, label->data); 415 memcpy(label->data, buf, dummy32); 416 } 417 #endif 418 419 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0 420 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1 421 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) 422 READ_BUF(expected_len - len); 423 else if (len != expected_len) 424 goto xdr_error; 425 426 DECODE_TAIL; 427 428 out_nfserr: 429 status = nfserrno(host_err); 430 goto out; 431 } 432 433 static __be32 434 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid) 435 { 436 DECODE_HEAD; 437 438 READ_BUF(sizeof(stateid_t)); 439 READ32(sid->si_generation); 440 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 441 442 DECODE_TAIL; 443 } 444 445 static __be32 446 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access) 447 { 448 DECODE_HEAD; 449 450 READ_BUF(4); 451 READ32(access->ac_req_access); 452 453 DECODE_TAIL; 454 } 455 456 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs) 457 { 458 DECODE_HEAD; 459 u32 dummy, uid, gid; 460 char *machine_name; 461 int i; 462 int nr_secflavs; 463 464 /* callback_sec_params4 */ 465 READ_BUF(4); 466 READ32(nr_secflavs); 467 if (nr_secflavs) 468 cbs->flavor = (u32)(-1); 469 else 470 /* Is this legal? Be generous, take it to mean AUTH_NONE: */ 471 cbs->flavor = 0; 472 for (i = 0; i < nr_secflavs; ++i) { 473 READ_BUF(4); 474 READ32(dummy); 475 switch (dummy) { 476 case RPC_AUTH_NULL: 477 /* Nothing to read */ 478 if (cbs->flavor == (u32)(-1)) 479 cbs->flavor = RPC_AUTH_NULL; 480 break; 481 case RPC_AUTH_UNIX: 482 READ_BUF(8); 483 /* stamp */ 484 READ32(dummy); 485 486 /* machine name */ 487 READ32(dummy); 488 READ_BUF(dummy); 489 SAVEMEM(machine_name, dummy); 490 491 /* uid, gid */ 492 READ_BUF(8); 493 READ32(uid); 494 READ32(gid); 495 496 /* more gids */ 497 READ_BUF(4); 498 READ32(dummy); 499 READ_BUF(dummy * 4); 500 if (cbs->flavor == (u32)(-1)) { 501 kuid_t kuid = make_kuid(&init_user_ns, uid); 502 kgid_t kgid = make_kgid(&init_user_ns, gid); 503 if (uid_valid(kuid) && gid_valid(kgid)) { 504 cbs->uid = kuid; 505 cbs->gid = kgid; 506 cbs->flavor = RPC_AUTH_UNIX; 507 } else { 508 dprintk("RPC_AUTH_UNIX with invalid" 509 "uid or gid ignoring!\n"); 510 } 511 } 512 break; 513 case RPC_AUTH_GSS: 514 dprintk("RPC_AUTH_GSS callback secflavor " 515 "not supported!\n"); 516 READ_BUF(8); 517 /* gcbp_service */ 518 READ32(dummy); 519 /* gcbp_handle_from_server */ 520 READ32(dummy); 521 READ_BUF(dummy); 522 p += XDR_QUADLEN(dummy); 523 /* gcbp_handle_from_client */ 524 READ_BUF(4); 525 READ32(dummy); 526 READ_BUF(dummy); 527 break; 528 default: 529 dprintk("Illegal callback secflavor\n"); 530 return nfserr_inval; 531 } 532 } 533 DECODE_TAIL; 534 } 535 536 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc) 537 { 538 DECODE_HEAD; 539 540 READ_BUF(4); 541 READ32(bc->bc_cb_program); 542 nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec); 543 544 DECODE_TAIL; 545 } 546 547 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts) 548 { 549 DECODE_HEAD; 550 551 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8); 552 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 553 READ32(bcts->dir); 554 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker 555 * could help us figure out we should be using it. */ 556 DECODE_TAIL; 557 } 558 559 static __be32 560 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close) 561 { 562 DECODE_HEAD; 563 564 READ_BUF(4); 565 READ32(close->cl_seqid); 566 return nfsd4_decode_stateid(argp, &close->cl_stateid); 567 568 DECODE_TAIL; 569 } 570 571 572 static __be32 573 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit) 574 { 575 DECODE_HEAD; 576 577 READ_BUF(12); 578 READ64(commit->co_offset); 579 READ32(commit->co_count); 580 581 DECODE_TAIL; 582 } 583 584 static __be32 585 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create) 586 { 587 DECODE_HEAD; 588 589 READ_BUF(4); 590 READ32(create->cr_type); 591 switch (create->cr_type) { 592 case NF4LNK: 593 READ_BUF(4); 594 READ32(create->cr_linklen); 595 READ_BUF(create->cr_linklen); 596 SAVEMEM(create->cr_linkname, create->cr_linklen); 597 break; 598 case NF4BLK: 599 case NF4CHR: 600 READ_BUF(8); 601 READ32(create->cr_specdata1); 602 READ32(create->cr_specdata2); 603 break; 604 case NF4SOCK: 605 case NF4FIFO: 606 case NF4DIR: 607 default: 608 break; 609 } 610 611 READ_BUF(4); 612 READ32(create->cr_namelen); 613 READ_BUF(create->cr_namelen); 614 SAVEMEM(create->cr_name, create->cr_namelen); 615 if ((status = check_filename(create->cr_name, create->cr_namelen))) 616 return status; 617 618 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr, 619 &create->cr_acl, &create->cr_label); 620 if (status) 621 goto out; 622 623 DECODE_TAIL; 624 } 625 626 static inline __be32 627 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr) 628 { 629 return nfsd4_decode_stateid(argp, &dr->dr_stateid); 630 } 631 632 static inline __be32 633 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr) 634 { 635 return nfsd4_decode_bitmap(argp, getattr->ga_bmval); 636 } 637 638 static __be32 639 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link) 640 { 641 DECODE_HEAD; 642 643 READ_BUF(4); 644 READ32(link->li_namelen); 645 READ_BUF(link->li_namelen); 646 SAVEMEM(link->li_name, link->li_namelen); 647 if ((status = check_filename(link->li_name, link->li_namelen))) 648 return status; 649 650 DECODE_TAIL; 651 } 652 653 static __be32 654 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock) 655 { 656 DECODE_HEAD; 657 658 /* 659 * type, reclaim(boolean), offset, length, new_lock_owner(boolean) 660 */ 661 READ_BUF(28); 662 READ32(lock->lk_type); 663 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT)) 664 goto xdr_error; 665 READ32(lock->lk_reclaim); 666 READ64(lock->lk_offset); 667 READ64(lock->lk_length); 668 READ32(lock->lk_is_new); 669 670 if (lock->lk_is_new) { 671 READ_BUF(4); 672 READ32(lock->lk_new_open_seqid); 673 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid); 674 if (status) 675 return status; 676 READ_BUF(8 + sizeof(clientid_t)); 677 READ32(lock->lk_new_lock_seqid); 678 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t)); 679 READ32(lock->lk_new_owner.len); 680 READ_BUF(lock->lk_new_owner.len); 681 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len); 682 } else { 683 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid); 684 if (status) 685 return status; 686 READ_BUF(4); 687 READ32(lock->lk_old_lock_seqid); 688 } 689 690 DECODE_TAIL; 691 } 692 693 static __be32 694 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt) 695 { 696 DECODE_HEAD; 697 698 READ_BUF(32); 699 READ32(lockt->lt_type); 700 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT)) 701 goto xdr_error; 702 READ64(lockt->lt_offset); 703 READ64(lockt->lt_length); 704 COPYMEM(&lockt->lt_clientid, 8); 705 READ32(lockt->lt_owner.len); 706 READ_BUF(lockt->lt_owner.len); 707 READMEM(lockt->lt_owner.data, lockt->lt_owner.len); 708 709 DECODE_TAIL; 710 } 711 712 static __be32 713 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku) 714 { 715 DECODE_HEAD; 716 717 READ_BUF(8); 718 READ32(locku->lu_type); 719 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT)) 720 goto xdr_error; 721 READ32(locku->lu_seqid); 722 status = nfsd4_decode_stateid(argp, &locku->lu_stateid); 723 if (status) 724 return status; 725 READ_BUF(16); 726 READ64(locku->lu_offset); 727 READ64(locku->lu_length); 728 729 DECODE_TAIL; 730 } 731 732 static __be32 733 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup) 734 { 735 DECODE_HEAD; 736 737 READ_BUF(4); 738 READ32(lookup->lo_len); 739 READ_BUF(lookup->lo_len); 740 SAVEMEM(lookup->lo_name, lookup->lo_len); 741 if ((status = check_filename(lookup->lo_name, lookup->lo_len))) 742 return status; 743 744 DECODE_TAIL; 745 } 746 747 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when) 748 { 749 __be32 *p; 750 u32 w; 751 752 READ_BUF(4); 753 READ32(w); 754 *share_access = w & NFS4_SHARE_ACCESS_MASK; 755 *deleg_want = w & NFS4_SHARE_WANT_MASK; 756 if (deleg_when) 757 *deleg_when = w & NFS4_SHARE_WHEN_MASK; 758 759 switch (w & NFS4_SHARE_ACCESS_MASK) { 760 case NFS4_SHARE_ACCESS_READ: 761 case NFS4_SHARE_ACCESS_WRITE: 762 case NFS4_SHARE_ACCESS_BOTH: 763 break; 764 default: 765 return nfserr_bad_xdr; 766 } 767 w &= ~NFS4_SHARE_ACCESS_MASK; 768 if (!w) 769 return nfs_ok; 770 if (!argp->minorversion) 771 return nfserr_bad_xdr; 772 switch (w & NFS4_SHARE_WANT_MASK) { 773 case NFS4_SHARE_WANT_NO_PREFERENCE: 774 case NFS4_SHARE_WANT_READ_DELEG: 775 case NFS4_SHARE_WANT_WRITE_DELEG: 776 case NFS4_SHARE_WANT_ANY_DELEG: 777 case NFS4_SHARE_WANT_NO_DELEG: 778 case NFS4_SHARE_WANT_CANCEL: 779 break; 780 default: 781 return nfserr_bad_xdr; 782 } 783 w &= ~NFS4_SHARE_WANT_MASK; 784 if (!w) 785 return nfs_ok; 786 787 if (!deleg_when) /* open_downgrade */ 788 return nfserr_inval; 789 switch (w) { 790 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL: 791 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED: 792 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL | 793 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED): 794 return nfs_ok; 795 } 796 xdr_error: 797 return nfserr_bad_xdr; 798 } 799 800 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x) 801 { 802 __be32 *p; 803 804 READ_BUF(4); 805 READ32(*x); 806 /* Note: unlinke access bits, deny bits may be zero. */ 807 if (*x & ~NFS4_SHARE_DENY_BOTH) 808 return nfserr_bad_xdr; 809 return nfs_ok; 810 xdr_error: 811 return nfserr_bad_xdr; 812 } 813 814 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o) 815 { 816 __be32 *p; 817 818 READ_BUF(4); 819 READ32(o->len); 820 821 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT) 822 return nfserr_bad_xdr; 823 824 READ_BUF(o->len); 825 SAVEMEM(o->data, o->len); 826 return nfs_ok; 827 xdr_error: 828 return nfserr_bad_xdr; 829 } 830 831 static __be32 832 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open) 833 { 834 DECODE_HEAD; 835 u32 dummy; 836 837 memset(open->op_bmval, 0, sizeof(open->op_bmval)); 838 open->op_iattr.ia_valid = 0; 839 open->op_openowner = NULL; 840 841 open->op_xdr_error = 0; 842 /* seqid, share_access, share_deny, clientid, ownerlen */ 843 READ_BUF(4); 844 READ32(open->op_seqid); 845 /* decode, yet ignore deleg_when until supported */ 846 status = nfsd4_decode_share_access(argp, &open->op_share_access, 847 &open->op_deleg_want, &dummy); 848 if (status) 849 goto xdr_error; 850 status = nfsd4_decode_share_deny(argp, &open->op_share_deny); 851 if (status) 852 goto xdr_error; 853 READ_BUF(sizeof(clientid_t)); 854 COPYMEM(&open->op_clientid, sizeof(clientid_t)); 855 status = nfsd4_decode_opaque(argp, &open->op_owner); 856 if (status) 857 goto xdr_error; 858 READ_BUF(4); 859 READ32(open->op_create); 860 switch (open->op_create) { 861 case NFS4_OPEN_NOCREATE: 862 break; 863 case NFS4_OPEN_CREATE: 864 READ_BUF(4); 865 READ32(open->op_createmode); 866 switch (open->op_createmode) { 867 case NFS4_CREATE_UNCHECKED: 868 case NFS4_CREATE_GUARDED: 869 status = nfsd4_decode_fattr(argp, open->op_bmval, 870 &open->op_iattr, &open->op_acl, &open->op_label); 871 if (status) 872 goto out; 873 break; 874 case NFS4_CREATE_EXCLUSIVE: 875 READ_BUF(NFS4_VERIFIER_SIZE); 876 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE); 877 break; 878 case NFS4_CREATE_EXCLUSIVE4_1: 879 if (argp->minorversion < 1) 880 goto xdr_error; 881 READ_BUF(NFS4_VERIFIER_SIZE); 882 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE); 883 status = nfsd4_decode_fattr(argp, open->op_bmval, 884 &open->op_iattr, &open->op_acl, &open->op_label); 885 if (status) 886 goto out; 887 break; 888 default: 889 goto xdr_error; 890 } 891 break; 892 default: 893 goto xdr_error; 894 } 895 896 /* open_claim */ 897 READ_BUF(4); 898 READ32(open->op_claim_type); 899 switch (open->op_claim_type) { 900 case NFS4_OPEN_CLAIM_NULL: 901 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 902 READ_BUF(4); 903 READ32(open->op_fname.len); 904 READ_BUF(open->op_fname.len); 905 SAVEMEM(open->op_fname.data, open->op_fname.len); 906 if ((status = check_filename(open->op_fname.data, open->op_fname.len))) 907 return status; 908 break; 909 case NFS4_OPEN_CLAIM_PREVIOUS: 910 READ_BUF(4); 911 READ32(open->op_delegate_type); 912 break; 913 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 914 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 915 if (status) 916 return status; 917 READ_BUF(4); 918 READ32(open->op_fname.len); 919 READ_BUF(open->op_fname.len); 920 SAVEMEM(open->op_fname.data, open->op_fname.len); 921 if ((status = check_filename(open->op_fname.data, open->op_fname.len))) 922 return status; 923 break; 924 case NFS4_OPEN_CLAIM_FH: 925 case NFS4_OPEN_CLAIM_DELEG_PREV_FH: 926 if (argp->minorversion < 1) 927 goto xdr_error; 928 /* void */ 929 break; 930 case NFS4_OPEN_CLAIM_DELEG_CUR_FH: 931 if (argp->minorversion < 1) 932 goto xdr_error; 933 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 934 if (status) 935 return status; 936 break; 937 default: 938 goto xdr_error; 939 } 940 941 DECODE_TAIL; 942 } 943 944 static __be32 945 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf) 946 { 947 DECODE_HEAD; 948 949 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid); 950 if (status) 951 return status; 952 READ_BUF(4); 953 READ32(open_conf->oc_seqid); 954 955 DECODE_TAIL; 956 } 957 958 static __be32 959 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down) 960 { 961 DECODE_HEAD; 962 963 status = nfsd4_decode_stateid(argp, &open_down->od_stateid); 964 if (status) 965 return status; 966 READ_BUF(4); 967 READ32(open_down->od_seqid); 968 status = nfsd4_decode_share_access(argp, &open_down->od_share_access, 969 &open_down->od_deleg_want, NULL); 970 if (status) 971 return status; 972 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny); 973 if (status) 974 return status; 975 DECODE_TAIL; 976 } 977 978 static __be32 979 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh) 980 { 981 DECODE_HEAD; 982 983 READ_BUF(4); 984 READ32(putfh->pf_fhlen); 985 if (putfh->pf_fhlen > NFS4_FHSIZE) 986 goto xdr_error; 987 READ_BUF(putfh->pf_fhlen); 988 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen); 989 990 DECODE_TAIL; 991 } 992 993 static __be32 994 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) 995 { 996 DECODE_HEAD; 997 998 status = nfsd4_decode_stateid(argp, &read->rd_stateid); 999 if (status) 1000 return status; 1001 READ_BUF(12); 1002 READ64(read->rd_offset); 1003 READ32(read->rd_length); 1004 1005 DECODE_TAIL; 1006 } 1007 1008 static __be32 1009 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) 1010 { 1011 DECODE_HEAD; 1012 1013 READ_BUF(24); 1014 READ64(readdir->rd_cookie); 1015 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); 1016 READ32(readdir->rd_dircount); /* just in case you needed a useless field... */ 1017 READ32(readdir->rd_maxcount); 1018 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval))) 1019 goto out; 1020 1021 DECODE_TAIL; 1022 } 1023 1024 static __be32 1025 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove) 1026 { 1027 DECODE_HEAD; 1028 1029 READ_BUF(4); 1030 READ32(remove->rm_namelen); 1031 READ_BUF(remove->rm_namelen); 1032 SAVEMEM(remove->rm_name, remove->rm_namelen); 1033 if ((status = check_filename(remove->rm_name, remove->rm_namelen))) 1034 return status; 1035 1036 DECODE_TAIL; 1037 } 1038 1039 static __be32 1040 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename) 1041 { 1042 DECODE_HEAD; 1043 1044 READ_BUF(4); 1045 READ32(rename->rn_snamelen); 1046 READ_BUF(rename->rn_snamelen + 4); 1047 SAVEMEM(rename->rn_sname, rename->rn_snamelen); 1048 READ32(rename->rn_tnamelen); 1049 READ_BUF(rename->rn_tnamelen); 1050 SAVEMEM(rename->rn_tname, rename->rn_tnamelen); 1051 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen))) 1052 return status; 1053 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen))) 1054 return status; 1055 1056 DECODE_TAIL; 1057 } 1058 1059 static __be32 1060 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid) 1061 { 1062 DECODE_HEAD; 1063 1064 READ_BUF(sizeof(clientid_t)); 1065 COPYMEM(clientid, sizeof(clientid_t)); 1066 1067 DECODE_TAIL; 1068 } 1069 1070 static __be32 1071 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp, 1072 struct nfsd4_secinfo *secinfo) 1073 { 1074 DECODE_HEAD; 1075 1076 READ_BUF(4); 1077 READ32(secinfo->si_namelen); 1078 READ_BUF(secinfo->si_namelen); 1079 SAVEMEM(secinfo->si_name, secinfo->si_namelen); 1080 status = check_filename(secinfo->si_name, secinfo->si_namelen); 1081 if (status) 1082 return status; 1083 DECODE_TAIL; 1084 } 1085 1086 static __be32 1087 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp, 1088 struct nfsd4_secinfo_no_name *sin) 1089 { 1090 DECODE_HEAD; 1091 1092 READ_BUF(4); 1093 READ32(sin->sin_style); 1094 DECODE_TAIL; 1095 } 1096 1097 static __be32 1098 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr) 1099 { 1100 __be32 status; 1101 1102 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid); 1103 if (status) 1104 return status; 1105 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr, 1106 &setattr->sa_acl, &setattr->sa_label); 1107 } 1108 1109 static __be32 1110 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid) 1111 { 1112 DECODE_HEAD; 1113 1114 READ_BUF(NFS4_VERIFIER_SIZE); 1115 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE); 1116 1117 status = nfsd4_decode_opaque(argp, &setclientid->se_name); 1118 if (status) 1119 return nfserr_bad_xdr; 1120 READ_BUF(8); 1121 READ32(setclientid->se_callback_prog); 1122 READ32(setclientid->se_callback_netid_len); 1123 1124 READ_BUF(setclientid->se_callback_netid_len + 4); 1125 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len); 1126 READ32(setclientid->se_callback_addr_len); 1127 1128 READ_BUF(setclientid->se_callback_addr_len + 4); 1129 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len); 1130 READ32(setclientid->se_callback_ident); 1131 1132 DECODE_TAIL; 1133 } 1134 1135 static __be32 1136 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c) 1137 { 1138 DECODE_HEAD; 1139 1140 READ_BUF(8 + NFS4_VERIFIER_SIZE); 1141 COPYMEM(&scd_c->sc_clientid, 8); 1142 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE); 1143 1144 DECODE_TAIL; 1145 } 1146 1147 /* Also used for NVERIFY */ 1148 static __be32 1149 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify) 1150 { 1151 DECODE_HEAD; 1152 1153 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval))) 1154 goto out; 1155 1156 /* For convenience's sake, we compare raw xdr'd attributes in 1157 * nfsd4_proc_verify */ 1158 1159 READ_BUF(4); 1160 READ32(verify->ve_attrlen); 1161 READ_BUF(verify->ve_attrlen); 1162 SAVEMEM(verify->ve_attrval, verify->ve_attrlen); 1163 1164 DECODE_TAIL; 1165 } 1166 1167 static __be32 1168 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write) 1169 { 1170 int avail; 1171 int len; 1172 DECODE_HEAD; 1173 1174 status = nfsd4_decode_stateid(argp, &write->wr_stateid); 1175 if (status) 1176 return status; 1177 READ_BUF(16); 1178 READ64(write->wr_offset); 1179 READ32(write->wr_stable_how); 1180 if (write->wr_stable_how > 2) 1181 goto xdr_error; 1182 READ32(write->wr_buflen); 1183 1184 /* Sorry .. no magic macros for this.. * 1185 * READ_BUF(write->wr_buflen); 1186 * SAVEMEM(write->wr_buf, write->wr_buflen); 1187 */ 1188 avail = (char*)argp->end - (char*)argp->p; 1189 if (avail + argp->pagelen < write->wr_buflen) { 1190 dprintk("NFSD: xdr error (%s:%d)\n", 1191 __FILE__, __LINE__); 1192 goto xdr_error; 1193 } 1194 write->wr_head.iov_base = p; 1195 write->wr_head.iov_len = avail; 1196 WARN_ON(avail != (XDR_QUADLEN(avail) << 2)); 1197 write->wr_pagelist = argp->pagelist; 1198 1199 len = XDR_QUADLEN(write->wr_buflen) << 2; 1200 if (len >= avail) { 1201 int pages; 1202 1203 len -= avail; 1204 1205 pages = len >> PAGE_SHIFT; 1206 argp->pagelist += pages; 1207 argp->pagelen -= pages * PAGE_SIZE; 1208 len -= pages * PAGE_SIZE; 1209 1210 argp->p = (__be32 *)page_address(argp->pagelist[0]); 1211 argp->end = argp->p + XDR_QUADLEN(PAGE_SIZE); 1212 } 1213 argp->p += XDR_QUADLEN(len); 1214 1215 DECODE_TAIL; 1216 } 1217 1218 static __be32 1219 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner) 1220 { 1221 DECODE_HEAD; 1222 1223 READ_BUF(12); 1224 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t)); 1225 READ32(rlockowner->rl_owner.len); 1226 READ_BUF(rlockowner->rl_owner.len); 1227 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len); 1228 1229 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid)) 1230 return nfserr_inval; 1231 DECODE_TAIL; 1232 } 1233 1234 static __be32 1235 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp, 1236 struct nfsd4_exchange_id *exid) 1237 { 1238 int dummy, tmp; 1239 DECODE_HEAD; 1240 1241 READ_BUF(NFS4_VERIFIER_SIZE); 1242 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE); 1243 1244 status = nfsd4_decode_opaque(argp, &exid->clname); 1245 if (status) 1246 return nfserr_bad_xdr; 1247 1248 READ_BUF(4); 1249 READ32(exid->flags); 1250 1251 /* Ignore state_protect4_a */ 1252 READ_BUF(4); 1253 READ32(exid->spa_how); 1254 switch (exid->spa_how) { 1255 case SP4_NONE: 1256 break; 1257 case SP4_MACH_CRED: 1258 /* spo_must_enforce */ 1259 READ_BUF(4); 1260 READ32(dummy); 1261 READ_BUF(dummy * 4); 1262 p += dummy; 1263 1264 /* spo_must_allow */ 1265 READ_BUF(4); 1266 READ32(dummy); 1267 READ_BUF(dummy * 4); 1268 p += dummy; 1269 break; 1270 case SP4_SSV: 1271 /* ssp_ops */ 1272 READ_BUF(4); 1273 READ32(dummy); 1274 READ_BUF(dummy * 4); 1275 p += dummy; 1276 1277 READ_BUF(4); 1278 READ32(dummy); 1279 READ_BUF(dummy * 4); 1280 p += dummy; 1281 1282 /* ssp_hash_algs<> */ 1283 READ_BUF(4); 1284 READ32(tmp); 1285 while (tmp--) { 1286 READ_BUF(4); 1287 READ32(dummy); 1288 READ_BUF(dummy); 1289 p += XDR_QUADLEN(dummy); 1290 } 1291 1292 /* ssp_encr_algs<> */ 1293 READ_BUF(4); 1294 READ32(tmp); 1295 while (tmp--) { 1296 READ_BUF(4); 1297 READ32(dummy); 1298 READ_BUF(dummy); 1299 p += XDR_QUADLEN(dummy); 1300 } 1301 1302 /* ssp_window and ssp_num_gss_handles */ 1303 READ_BUF(8); 1304 READ32(dummy); 1305 READ32(dummy); 1306 break; 1307 default: 1308 goto xdr_error; 1309 } 1310 1311 /* Ignore Implementation ID */ 1312 READ_BUF(4); /* nfs_impl_id4 array length */ 1313 READ32(dummy); 1314 1315 if (dummy > 1) 1316 goto xdr_error; 1317 1318 if (dummy == 1) { 1319 /* nii_domain */ 1320 READ_BUF(4); 1321 READ32(dummy); 1322 READ_BUF(dummy); 1323 p += XDR_QUADLEN(dummy); 1324 1325 /* nii_name */ 1326 READ_BUF(4); 1327 READ32(dummy); 1328 READ_BUF(dummy); 1329 p += XDR_QUADLEN(dummy); 1330 1331 /* nii_date */ 1332 READ_BUF(12); 1333 p += 3; 1334 } 1335 DECODE_TAIL; 1336 } 1337 1338 static __be32 1339 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp, 1340 struct nfsd4_create_session *sess) 1341 { 1342 DECODE_HEAD; 1343 u32 dummy; 1344 1345 READ_BUF(16); 1346 COPYMEM(&sess->clientid, 8); 1347 READ32(sess->seqid); 1348 READ32(sess->flags); 1349 1350 /* Fore channel attrs */ 1351 READ_BUF(28); 1352 READ32(dummy); /* headerpadsz is always 0 */ 1353 READ32(sess->fore_channel.maxreq_sz); 1354 READ32(sess->fore_channel.maxresp_sz); 1355 READ32(sess->fore_channel.maxresp_cached); 1356 READ32(sess->fore_channel.maxops); 1357 READ32(sess->fore_channel.maxreqs); 1358 READ32(sess->fore_channel.nr_rdma_attrs); 1359 if (sess->fore_channel.nr_rdma_attrs == 1) { 1360 READ_BUF(4); 1361 READ32(sess->fore_channel.rdma_attrs); 1362 } else if (sess->fore_channel.nr_rdma_attrs > 1) { 1363 dprintk("Too many fore channel attr bitmaps!\n"); 1364 goto xdr_error; 1365 } 1366 1367 /* Back channel attrs */ 1368 READ_BUF(28); 1369 READ32(dummy); /* headerpadsz is always 0 */ 1370 READ32(sess->back_channel.maxreq_sz); 1371 READ32(sess->back_channel.maxresp_sz); 1372 READ32(sess->back_channel.maxresp_cached); 1373 READ32(sess->back_channel.maxops); 1374 READ32(sess->back_channel.maxreqs); 1375 READ32(sess->back_channel.nr_rdma_attrs); 1376 if (sess->back_channel.nr_rdma_attrs == 1) { 1377 READ_BUF(4); 1378 READ32(sess->back_channel.rdma_attrs); 1379 } else if (sess->back_channel.nr_rdma_attrs > 1) { 1380 dprintk("Too many back channel attr bitmaps!\n"); 1381 goto xdr_error; 1382 } 1383 1384 READ_BUF(4); 1385 READ32(sess->callback_prog); 1386 nfsd4_decode_cb_sec(argp, &sess->cb_sec); 1387 DECODE_TAIL; 1388 } 1389 1390 static __be32 1391 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp, 1392 struct nfsd4_destroy_session *destroy_session) 1393 { 1394 DECODE_HEAD; 1395 READ_BUF(NFS4_MAX_SESSIONID_LEN); 1396 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1397 1398 DECODE_TAIL; 1399 } 1400 1401 static __be32 1402 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp, 1403 struct nfsd4_free_stateid *free_stateid) 1404 { 1405 DECODE_HEAD; 1406 1407 READ_BUF(sizeof(stateid_t)); 1408 READ32(free_stateid->fr_stateid.si_generation); 1409 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t)); 1410 1411 DECODE_TAIL; 1412 } 1413 1414 static __be32 1415 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp, 1416 struct nfsd4_sequence *seq) 1417 { 1418 DECODE_HEAD; 1419 1420 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16); 1421 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1422 READ32(seq->seqid); 1423 READ32(seq->slotid); 1424 READ32(seq->maxslots); 1425 READ32(seq->cachethis); 1426 1427 DECODE_TAIL; 1428 } 1429 1430 static __be32 1431 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid) 1432 { 1433 int i; 1434 __be32 *p, status; 1435 struct nfsd4_test_stateid_id *stateid; 1436 1437 READ_BUF(4); 1438 test_stateid->ts_num_ids = ntohl(*p++); 1439 1440 INIT_LIST_HEAD(&test_stateid->ts_stateid_list); 1441 1442 for (i = 0; i < test_stateid->ts_num_ids; i++) { 1443 stateid = kmalloc(sizeof(struct nfsd4_test_stateid_id), GFP_KERNEL); 1444 if (!stateid) { 1445 status = nfserrno(-ENOMEM); 1446 goto out; 1447 } 1448 1449 defer_free(argp, kfree, stateid); 1450 INIT_LIST_HEAD(&stateid->ts_id_list); 1451 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list); 1452 1453 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid); 1454 if (status) 1455 goto out; 1456 } 1457 1458 status = 0; 1459 out: 1460 return status; 1461 xdr_error: 1462 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__); 1463 status = nfserr_bad_xdr; 1464 goto out; 1465 } 1466 1467 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc) 1468 { 1469 DECODE_HEAD; 1470 1471 READ_BUF(8); 1472 COPYMEM(&dc->clientid, 8); 1473 1474 DECODE_TAIL; 1475 } 1476 1477 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc) 1478 { 1479 DECODE_HEAD; 1480 1481 READ_BUF(4); 1482 READ32(rc->rca_one_fs); 1483 1484 DECODE_TAIL; 1485 } 1486 1487 static __be32 1488 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p) 1489 { 1490 return nfs_ok; 1491 } 1492 1493 static __be32 1494 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p) 1495 { 1496 return nfserr_notsupp; 1497 } 1498 1499 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *); 1500 1501 static nfsd4_dec nfsd4_dec_ops[] = { 1502 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1503 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1504 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1505 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1506 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1507 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1508 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1509 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1510 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1511 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1512 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1513 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1514 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1515 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1516 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1517 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1518 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1519 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm, 1520 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1521 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1522 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_noop, 1523 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1524 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1525 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1526 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1527 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1528 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1529 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew, 1530 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1531 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1532 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1533 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1534 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid, 1535 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm, 1536 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1537 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1538 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner, 1539 }; 1540 1541 static nfsd4_dec nfsd41_dec_ops[] = { 1542 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1543 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1544 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1545 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1546 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1547 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1548 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1549 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1550 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1551 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1552 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1553 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1554 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1555 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1556 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1557 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1558 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1559 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_notsupp, 1560 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1561 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1562 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_notsupp, 1563 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1564 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1565 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1566 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1567 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1568 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1569 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_notsupp, 1570 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1571 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1572 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1573 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1574 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp, 1575 [OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp, 1576 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1577 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1578 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_notsupp, 1579 1580 /* new operations for NFSv4.1 */ 1581 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl, 1582 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session, 1583 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id, 1584 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session, 1585 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session, 1586 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid, 1587 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1588 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp, 1589 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1590 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp, 1591 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp, 1592 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp, 1593 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name, 1594 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence, 1595 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp, 1596 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid, 1597 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1598 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid, 1599 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete, 1600 }; 1601 1602 struct nfsd4_minorversion_ops { 1603 nfsd4_dec *decoders; 1604 int nops; 1605 }; 1606 1607 static struct nfsd4_minorversion_ops nfsd4_minorversion[] = { 1608 [0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) }, 1609 [1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) }, 1610 [2] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) }, 1611 }; 1612 1613 static __be32 1614 nfsd4_decode_compound(struct nfsd4_compoundargs *argp) 1615 { 1616 DECODE_HEAD; 1617 struct nfsd4_op *op; 1618 struct nfsd4_minorversion_ops *ops; 1619 bool cachethis = false; 1620 int i; 1621 1622 READ_BUF(4); 1623 READ32(argp->taglen); 1624 READ_BUF(argp->taglen + 8); 1625 SAVEMEM(argp->tag, argp->taglen); 1626 READ32(argp->minorversion); 1627 READ32(argp->opcnt); 1628 1629 if (argp->taglen > NFSD4_MAX_TAGLEN) 1630 goto xdr_error; 1631 if (argp->opcnt > 100) 1632 goto xdr_error; 1633 1634 if (argp->opcnt > ARRAY_SIZE(argp->iops)) { 1635 argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL); 1636 if (!argp->ops) { 1637 argp->ops = argp->iops; 1638 dprintk("nfsd: couldn't allocate room for COMPOUND\n"); 1639 goto xdr_error; 1640 } 1641 } 1642 1643 if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion)) 1644 argp->opcnt = 0; 1645 1646 ops = &nfsd4_minorversion[argp->minorversion]; 1647 for (i = 0; i < argp->opcnt; i++) { 1648 op = &argp->ops[i]; 1649 op->replay = NULL; 1650 1651 READ_BUF(4); 1652 READ32(op->opnum); 1653 1654 if (op->opnum >= FIRST_NFS4_OP && op->opnum <= LAST_NFS4_OP) 1655 op->status = ops->decoders[op->opnum](argp, &op->u); 1656 else { 1657 op->opnum = OP_ILLEGAL; 1658 op->status = nfserr_op_illegal; 1659 } 1660 1661 if (op->status) { 1662 argp->opcnt = i+1; 1663 break; 1664 } 1665 /* 1666 * We'll try to cache the result in the DRC if any one 1667 * op in the compound wants to be cached: 1668 */ 1669 cachethis |= nfsd4_cache_this_op(op); 1670 } 1671 /* Sessions make the DRC unnecessary: */ 1672 if (argp->minorversion) 1673 cachethis = false; 1674 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE; 1675 1676 DECODE_TAIL; 1677 } 1678 1679 #define WRITE32(n) *p++ = htonl(n) 1680 #define WRITE64(n) do { \ 1681 *p++ = htonl((u32)((n) >> 32)); \ 1682 *p++ = htonl((u32)(n)); \ 1683 } while (0) 1684 #define WRITEMEM(ptr,nbytes) do { if (nbytes > 0) { \ 1685 *(p + XDR_QUADLEN(nbytes) -1) = 0; \ 1686 memcpy(p, ptr, nbytes); \ 1687 p += XDR_QUADLEN(nbytes); \ 1688 }} while (0) 1689 1690 static void write32(__be32 **p, u32 n) 1691 { 1692 *(*p)++ = htonl(n); 1693 } 1694 1695 static void write64(__be32 **p, u64 n) 1696 { 1697 write32(p, (n >> 32)); 1698 write32(p, (u32)n); 1699 } 1700 1701 static void write_change(__be32 **p, struct kstat *stat, struct inode *inode) 1702 { 1703 if (IS_I_VERSION(inode)) { 1704 write64(p, inode->i_version); 1705 } else { 1706 write32(p, stat->ctime.tv_sec); 1707 write32(p, stat->ctime.tv_nsec); 1708 } 1709 } 1710 1711 static void write_cinfo(__be32 **p, struct nfsd4_change_info *c) 1712 { 1713 write32(p, c->atomic); 1714 if (c->change_supported) { 1715 write64(p, c->before_change); 1716 write64(p, c->after_change); 1717 } else { 1718 write32(p, c->before_ctime_sec); 1719 write32(p, c->before_ctime_nsec); 1720 write32(p, c->after_ctime_sec); 1721 write32(p, c->after_ctime_nsec); 1722 } 1723 } 1724 1725 #define RESERVE_SPACE(nbytes) do { \ 1726 p = resp->p; \ 1727 BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end); \ 1728 } while (0) 1729 #define ADJUST_ARGS() resp->p = p 1730 1731 /* Encode as an array of strings the string given with components 1732 * separated @sep, escaped with esc_enter and esc_exit. 1733 */ 1734 static __be32 nfsd4_encode_components_esc(char sep, char *components, 1735 __be32 **pp, int *buflen, 1736 char esc_enter, char esc_exit) 1737 { 1738 __be32 *p = *pp; 1739 __be32 *countp = p; 1740 int strlen, count=0; 1741 char *str, *end, *next; 1742 1743 dprintk("nfsd4_encode_components(%s)\n", components); 1744 if ((*buflen -= 4) < 0) 1745 return nfserr_resource; 1746 WRITE32(0); /* We will fill this in with @count later */ 1747 end = str = components; 1748 while (*end) { 1749 bool found_esc = false; 1750 1751 /* try to parse as esc_start, ..., esc_end, sep */ 1752 if (*str == esc_enter) { 1753 for (; *end && (*end != esc_exit); end++) 1754 /* find esc_exit or end of string */; 1755 next = end + 1; 1756 if (*end && (!*next || *next == sep)) { 1757 str++; 1758 found_esc = true; 1759 } 1760 } 1761 1762 if (!found_esc) 1763 for (; *end && (*end != sep); end++) 1764 /* find sep or end of string */; 1765 1766 strlen = end - str; 1767 if (strlen) { 1768 if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0) 1769 return nfserr_resource; 1770 WRITE32(strlen); 1771 WRITEMEM(str, strlen); 1772 count++; 1773 } 1774 else 1775 end++; 1776 str = end; 1777 } 1778 *pp = p; 1779 p = countp; 1780 WRITE32(count); 1781 return 0; 1782 } 1783 1784 /* Encode as an array of strings the string given with components 1785 * separated @sep. 1786 */ 1787 static __be32 nfsd4_encode_components(char sep, char *components, 1788 __be32 **pp, int *buflen) 1789 { 1790 return nfsd4_encode_components_esc(sep, components, pp, buflen, 0, 0); 1791 } 1792 1793 /* 1794 * encode a location element of a fs_locations structure 1795 */ 1796 static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location, 1797 __be32 **pp, int *buflen) 1798 { 1799 __be32 status; 1800 __be32 *p = *pp; 1801 1802 status = nfsd4_encode_components_esc(':', location->hosts, &p, buflen, 1803 '[', ']'); 1804 if (status) 1805 return status; 1806 status = nfsd4_encode_components('/', location->path, &p, buflen); 1807 if (status) 1808 return status; 1809 *pp = p; 1810 return 0; 1811 } 1812 1813 /* 1814 * Encode a path in RFC3530 'pathname4' format 1815 */ 1816 static __be32 nfsd4_encode_path(const struct path *root, 1817 const struct path *path, __be32 **pp, int *buflen) 1818 { 1819 struct path cur = *path; 1820 __be32 *p = *pp; 1821 struct dentry **components = NULL; 1822 unsigned int ncomponents = 0; 1823 __be32 err = nfserr_jukebox; 1824 1825 dprintk("nfsd4_encode_components("); 1826 1827 path_get(&cur); 1828 /* First walk the path up to the nfsd root, and store the 1829 * dentries/path components in an array. 1830 */ 1831 for (;;) { 1832 if (cur.dentry == root->dentry && cur.mnt == root->mnt) 1833 break; 1834 if (cur.dentry == cur.mnt->mnt_root) { 1835 if (follow_up(&cur)) 1836 continue; 1837 goto out_free; 1838 } 1839 if ((ncomponents & 15) == 0) { 1840 struct dentry **new; 1841 new = krealloc(components, 1842 sizeof(*new) * (ncomponents + 16), 1843 GFP_KERNEL); 1844 if (!new) 1845 goto out_free; 1846 components = new; 1847 } 1848 components[ncomponents++] = cur.dentry; 1849 cur.dentry = dget_parent(cur.dentry); 1850 } 1851 1852 *buflen -= 4; 1853 if (*buflen < 0) 1854 goto out_free; 1855 WRITE32(ncomponents); 1856 1857 while (ncomponents) { 1858 struct dentry *dentry = components[ncomponents - 1]; 1859 unsigned int len; 1860 1861 spin_lock(&dentry->d_lock); 1862 len = dentry->d_name.len; 1863 *buflen -= 4 + (XDR_QUADLEN(len) << 2); 1864 if (*buflen < 0) { 1865 spin_unlock(&dentry->d_lock); 1866 goto out_free; 1867 } 1868 WRITE32(len); 1869 WRITEMEM(dentry->d_name.name, len); 1870 dprintk("/%s", dentry->d_name.name); 1871 spin_unlock(&dentry->d_lock); 1872 dput(dentry); 1873 ncomponents--; 1874 } 1875 1876 *pp = p; 1877 err = 0; 1878 out_free: 1879 dprintk(")\n"); 1880 while (ncomponents) 1881 dput(components[--ncomponents]); 1882 kfree(components); 1883 path_put(&cur); 1884 return err; 1885 } 1886 1887 static __be32 nfsd4_encode_fsloc_fsroot(struct svc_rqst *rqstp, 1888 const struct path *path, __be32 **pp, int *buflen) 1889 { 1890 struct svc_export *exp_ps; 1891 __be32 res; 1892 1893 exp_ps = rqst_find_fsidzero_export(rqstp); 1894 if (IS_ERR(exp_ps)) 1895 return nfserrno(PTR_ERR(exp_ps)); 1896 res = nfsd4_encode_path(&exp_ps->ex_path, path, pp, buflen); 1897 exp_put(exp_ps); 1898 return res; 1899 } 1900 1901 /* 1902 * encode a fs_locations structure 1903 */ 1904 static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp, 1905 struct svc_export *exp, 1906 __be32 **pp, int *buflen) 1907 { 1908 __be32 status; 1909 int i; 1910 __be32 *p = *pp; 1911 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs; 1912 1913 status = nfsd4_encode_fsloc_fsroot(rqstp, &exp->ex_path, &p, buflen); 1914 if (status) 1915 return status; 1916 if ((*buflen -= 4) < 0) 1917 return nfserr_resource; 1918 WRITE32(fslocs->locations_count); 1919 for (i=0; i<fslocs->locations_count; i++) { 1920 status = nfsd4_encode_fs_location4(&fslocs->locations[i], 1921 &p, buflen); 1922 if (status) 1923 return status; 1924 } 1925 *pp = p; 1926 return 0; 1927 } 1928 1929 static u32 nfs4_file_type(umode_t mode) 1930 { 1931 switch (mode & S_IFMT) { 1932 case S_IFIFO: return NF4FIFO; 1933 case S_IFCHR: return NF4CHR; 1934 case S_IFDIR: return NF4DIR; 1935 case S_IFBLK: return NF4BLK; 1936 case S_IFLNK: return NF4LNK; 1937 case S_IFREG: return NF4REG; 1938 case S_IFSOCK: return NF4SOCK; 1939 default: return NF4BAD; 1940 }; 1941 } 1942 1943 static __be32 1944 nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, kuid_t uid, kgid_t gid, 1945 __be32 **p, int *buflen) 1946 { 1947 int status; 1948 1949 if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4) 1950 return nfserr_resource; 1951 if (whotype != NFS4_ACL_WHO_NAMED) 1952 status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1)); 1953 else if (gid_valid(gid)) 1954 status = nfsd_map_gid_to_name(rqstp, gid, (u8 *)(*p + 1)); 1955 else 1956 status = nfsd_map_uid_to_name(rqstp, uid, (u8 *)(*p + 1)); 1957 if (status < 0) 1958 return nfserrno(status); 1959 *p = xdr_encode_opaque(*p, NULL, status); 1960 *buflen -= (XDR_QUADLEN(status) << 2) + 4; 1961 BUG_ON(*buflen < 0); 1962 return 0; 1963 } 1964 1965 static inline __be32 1966 nfsd4_encode_user(struct svc_rqst *rqstp, kuid_t user, __be32 **p, int *buflen) 1967 { 1968 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, user, INVALID_GID, 1969 p, buflen); 1970 } 1971 1972 static inline __be32 1973 nfsd4_encode_group(struct svc_rqst *rqstp, kgid_t group, __be32 **p, int *buflen) 1974 { 1975 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, INVALID_UID, group, 1976 p, buflen); 1977 } 1978 1979 static inline __be32 1980 nfsd4_encode_aclname(struct svc_rqst *rqstp, struct nfs4_ace *ace, 1981 __be32 **p, int *buflen) 1982 { 1983 kuid_t uid = INVALID_UID; 1984 kgid_t gid = INVALID_GID; 1985 1986 if (ace->whotype == NFS4_ACL_WHO_NAMED) { 1987 if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 1988 gid = ace->who_gid; 1989 else 1990 uid = ace->who_uid; 1991 } 1992 return nfsd4_encode_name(rqstp, ace->whotype, uid, gid, p, buflen); 1993 } 1994 1995 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \ 1996 FATTR4_WORD0_RDATTR_ERROR) 1997 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID 1998 1999 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2000 static inline __be32 2001 nfsd4_encode_security_label(struct svc_rqst *rqstp, void *context, int len, __be32 **pp, int *buflen) 2002 { 2003 __be32 *p = *pp; 2004 2005 if (*buflen < ((XDR_QUADLEN(len) << 2) + 4 + 4 + 4)) 2006 return nfserr_resource; 2007 2008 /* 2009 * For now we use a 0 here to indicate the null translation; in 2010 * the future we may place a call to translation code here. 2011 */ 2012 if ((*buflen -= 8) < 0) 2013 return nfserr_resource; 2014 2015 WRITE32(0); /* lfs */ 2016 WRITE32(0); /* pi */ 2017 p = xdr_encode_opaque(p, context, len); 2018 *buflen -= (XDR_QUADLEN(len) << 2) + 4; 2019 2020 *pp = p; 2021 return 0; 2022 } 2023 #else 2024 static inline __be32 2025 nfsd4_encode_security_label(struct svc_rqst *rqstp, void *context, int len, __be32 **pp, int *buflen) 2026 { return 0; } 2027 #endif 2028 2029 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err) 2030 { 2031 /* As per referral draft: */ 2032 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS || 2033 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) { 2034 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR || 2035 *bmval0 & FATTR4_WORD0_FS_LOCATIONS) 2036 *rdattr_err = NFSERR_MOVED; 2037 else 2038 return nfserr_moved; 2039 } 2040 *bmval0 &= WORD0_ABSENT_FS_ATTRS; 2041 *bmval1 &= WORD1_ABSENT_FS_ATTRS; 2042 return 0; 2043 } 2044 2045 2046 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat) 2047 { 2048 struct path path = exp->ex_path; 2049 int err; 2050 2051 path_get(&path); 2052 while (follow_up(&path)) { 2053 if (path.dentry != path.mnt->mnt_root) 2054 break; 2055 } 2056 err = vfs_getattr(&path, stat); 2057 path_put(&path); 2058 return err; 2059 } 2060 2061 /* 2062 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle 2063 * ourselves. 2064 * 2065 * countp is the buffer size in _words_ 2066 */ 2067 __be32 2068 nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp, 2069 struct dentry *dentry, __be32 **buffer, int count, u32 *bmval, 2070 struct svc_rqst *rqstp, int ignore_crossmnt) 2071 { 2072 u32 bmval0 = bmval[0]; 2073 u32 bmval1 = bmval[1]; 2074 u32 bmval2 = bmval[2]; 2075 struct kstat stat; 2076 struct svc_fh tempfh; 2077 struct kstatfs statfs; 2078 int buflen = count << 2; 2079 __be32 *attrlenp; 2080 u32 dummy; 2081 u64 dummy64; 2082 u32 rdattr_err = 0; 2083 __be32 *p = *buffer; 2084 __be32 status; 2085 int err; 2086 int aclsupport = 0; 2087 struct nfs4_acl *acl = NULL; 2088 void *context = NULL; 2089 int contextlen; 2090 bool contextsupport = false; 2091 struct nfsd4_compoundres *resp = rqstp->rq_resp; 2092 u32 minorversion = resp->cstate.minorversion; 2093 struct path path = { 2094 .mnt = exp->ex_path.mnt, 2095 .dentry = dentry, 2096 }; 2097 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 2098 2099 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1); 2100 BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion)); 2101 BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion)); 2102 BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion)); 2103 2104 if (exp->ex_fslocs.migrated) { 2105 BUG_ON(bmval[2]); 2106 status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err); 2107 if (status) 2108 goto out; 2109 } 2110 2111 err = vfs_getattr(&path, &stat); 2112 if (err) 2113 goto out_nfserr; 2114 if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL | 2115 FATTR4_WORD0_MAXNAME)) || 2116 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE | 2117 FATTR4_WORD1_SPACE_TOTAL))) { 2118 err = vfs_statfs(&path, &statfs); 2119 if (err) 2120 goto out_nfserr; 2121 } 2122 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) { 2123 fh_init(&tempfh, NFS4_FHSIZE); 2124 status = fh_compose(&tempfh, exp, dentry, NULL); 2125 if (status) 2126 goto out; 2127 fhp = &tempfh; 2128 } 2129 if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT 2130 | FATTR4_WORD0_SUPPORTED_ATTRS)) { 2131 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl); 2132 aclsupport = (err == 0); 2133 if (bmval0 & FATTR4_WORD0_ACL) { 2134 if (err == -EOPNOTSUPP) 2135 bmval0 &= ~FATTR4_WORD0_ACL; 2136 else if (err == -EINVAL) { 2137 status = nfserr_attrnotsupp; 2138 goto out; 2139 } else if (err != 0) 2140 goto out_nfserr; 2141 } 2142 } 2143 2144 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2145 if ((bmval[2] & FATTR4_WORD2_SECURITY_LABEL) || 2146 bmval[0] & FATTR4_WORD0_SUPPORTED_ATTRS) { 2147 err = security_inode_getsecctx(dentry->d_inode, 2148 &context, &contextlen); 2149 contextsupport = (err == 0); 2150 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) { 2151 if (err == -EOPNOTSUPP) 2152 bmval2 &= ~FATTR4_WORD2_SECURITY_LABEL; 2153 else if (err) 2154 goto out_nfserr; 2155 } 2156 } 2157 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */ 2158 2159 if (bmval2) { 2160 if ((buflen -= 16) < 0) 2161 goto out_resource; 2162 WRITE32(3); 2163 WRITE32(bmval0); 2164 WRITE32(bmval1); 2165 WRITE32(bmval2); 2166 } else if (bmval1) { 2167 if ((buflen -= 12) < 0) 2168 goto out_resource; 2169 WRITE32(2); 2170 WRITE32(bmval0); 2171 WRITE32(bmval1); 2172 } else { 2173 if ((buflen -= 8) < 0) 2174 goto out_resource; 2175 WRITE32(1); 2176 WRITE32(bmval0); 2177 } 2178 attrlenp = p++; /* to be backfilled later */ 2179 2180 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 2181 u32 word0 = nfsd_suppattrs0(minorversion); 2182 u32 word1 = nfsd_suppattrs1(minorversion); 2183 u32 word2 = nfsd_suppattrs2(minorversion); 2184 2185 if (!aclsupport) 2186 word0 &= ~FATTR4_WORD0_ACL; 2187 if (!contextsupport) 2188 word2 &= ~FATTR4_WORD2_SECURITY_LABEL; 2189 if (!word2) { 2190 if ((buflen -= 12) < 0) 2191 goto out_resource; 2192 WRITE32(2); 2193 WRITE32(word0); 2194 WRITE32(word1); 2195 } else { 2196 if ((buflen -= 16) < 0) 2197 goto out_resource; 2198 WRITE32(3); 2199 WRITE32(word0); 2200 WRITE32(word1); 2201 WRITE32(word2); 2202 } 2203 } 2204 if (bmval0 & FATTR4_WORD0_TYPE) { 2205 if ((buflen -= 4) < 0) 2206 goto out_resource; 2207 dummy = nfs4_file_type(stat.mode); 2208 if (dummy == NF4BAD) 2209 goto out_serverfault; 2210 WRITE32(dummy); 2211 } 2212 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) { 2213 if ((buflen -= 4) < 0) 2214 goto out_resource; 2215 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK) 2216 WRITE32(NFS4_FH_PERSISTENT); 2217 else 2218 WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME); 2219 } 2220 if (bmval0 & FATTR4_WORD0_CHANGE) { 2221 if ((buflen -= 8) < 0) 2222 goto out_resource; 2223 write_change(&p, &stat, dentry->d_inode); 2224 } 2225 if (bmval0 & FATTR4_WORD0_SIZE) { 2226 if ((buflen -= 8) < 0) 2227 goto out_resource; 2228 WRITE64(stat.size); 2229 } 2230 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) { 2231 if ((buflen -= 4) < 0) 2232 goto out_resource; 2233 WRITE32(1); 2234 } 2235 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) { 2236 if ((buflen -= 4) < 0) 2237 goto out_resource; 2238 WRITE32(1); 2239 } 2240 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) { 2241 if ((buflen -= 4) < 0) 2242 goto out_resource; 2243 WRITE32(0); 2244 } 2245 if (bmval0 & FATTR4_WORD0_FSID) { 2246 if ((buflen -= 16) < 0) 2247 goto out_resource; 2248 if (exp->ex_fslocs.migrated) { 2249 WRITE64(NFS4_REFERRAL_FSID_MAJOR); 2250 WRITE64(NFS4_REFERRAL_FSID_MINOR); 2251 } else switch(fsid_source(fhp)) { 2252 case FSIDSOURCE_FSID: 2253 WRITE64((u64)exp->ex_fsid); 2254 WRITE64((u64)0); 2255 break; 2256 case FSIDSOURCE_DEV: 2257 WRITE32(0); 2258 WRITE32(MAJOR(stat.dev)); 2259 WRITE32(0); 2260 WRITE32(MINOR(stat.dev)); 2261 break; 2262 case FSIDSOURCE_UUID: 2263 WRITEMEM(exp->ex_uuid, 16); 2264 break; 2265 } 2266 } 2267 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) { 2268 if ((buflen -= 4) < 0) 2269 goto out_resource; 2270 WRITE32(0); 2271 } 2272 if (bmval0 & FATTR4_WORD0_LEASE_TIME) { 2273 if ((buflen -= 4) < 0) 2274 goto out_resource; 2275 WRITE32(nn->nfsd4_lease); 2276 } 2277 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) { 2278 if ((buflen -= 4) < 0) 2279 goto out_resource; 2280 WRITE32(rdattr_err); 2281 } 2282 if (bmval0 & FATTR4_WORD0_ACL) { 2283 struct nfs4_ace *ace; 2284 2285 if (acl == NULL) { 2286 if ((buflen -= 4) < 0) 2287 goto out_resource; 2288 2289 WRITE32(0); 2290 goto out_acl; 2291 } 2292 if ((buflen -= 4) < 0) 2293 goto out_resource; 2294 WRITE32(acl->naces); 2295 2296 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) { 2297 if ((buflen -= 4*3) < 0) 2298 goto out_resource; 2299 WRITE32(ace->type); 2300 WRITE32(ace->flag); 2301 WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL); 2302 status = nfsd4_encode_aclname(rqstp, ace, &p, &buflen); 2303 if (status == nfserr_resource) 2304 goto out_resource; 2305 if (status) 2306 goto out; 2307 } 2308 } 2309 out_acl: 2310 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) { 2311 if ((buflen -= 4) < 0) 2312 goto out_resource; 2313 WRITE32(aclsupport ? 2314 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0); 2315 } 2316 if (bmval0 & FATTR4_WORD0_CANSETTIME) { 2317 if ((buflen -= 4) < 0) 2318 goto out_resource; 2319 WRITE32(1); 2320 } 2321 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) { 2322 if ((buflen -= 4) < 0) 2323 goto out_resource; 2324 WRITE32(0); 2325 } 2326 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) { 2327 if ((buflen -= 4) < 0) 2328 goto out_resource; 2329 WRITE32(1); 2330 } 2331 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) { 2332 if ((buflen -= 4) < 0) 2333 goto out_resource; 2334 WRITE32(1); 2335 } 2336 if (bmval0 & FATTR4_WORD0_FILEHANDLE) { 2337 buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4; 2338 if (buflen < 0) 2339 goto out_resource; 2340 WRITE32(fhp->fh_handle.fh_size); 2341 WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size); 2342 } 2343 if (bmval0 & FATTR4_WORD0_FILEID) { 2344 if ((buflen -= 8) < 0) 2345 goto out_resource; 2346 WRITE64(stat.ino); 2347 } 2348 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) { 2349 if ((buflen -= 8) < 0) 2350 goto out_resource; 2351 WRITE64((u64) statfs.f_ffree); 2352 } 2353 if (bmval0 & FATTR4_WORD0_FILES_FREE) { 2354 if ((buflen -= 8) < 0) 2355 goto out_resource; 2356 WRITE64((u64) statfs.f_ffree); 2357 } 2358 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) { 2359 if ((buflen -= 8) < 0) 2360 goto out_resource; 2361 WRITE64((u64) statfs.f_files); 2362 } 2363 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) { 2364 status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen); 2365 if (status == nfserr_resource) 2366 goto out_resource; 2367 if (status) 2368 goto out; 2369 } 2370 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) { 2371 if ((buflen -= 4) < 0) 2372 goto out_resource; 2373 WRITE32(1); 2374 } 2375 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) { 2376 if ((buflen -= 8) < 0) 2377 goto out_resource; 2378 WRITE64(~(u64)0); 2379 } 2380 if (bmval0 & FATTR4_WORD0_MAXLINK) { 2381 if ((buflen -= 4) < 0) 2382 goto out_resource; 2383 WRITE32(255); 2384 } 2385 if (bmval0 & FATTR4_WORD0_MAXNAME) { 2386 if ((buflen -= 4) < 0) 2387 goto out_resource; 2388 WRITE32(statfs.f_namelen); 2389 } 2390 if (bmval0 & FATTR4_WORD0_MAXREAD) { 2391 if ((buflen -= 8) < 0) 2392 goto out_resource; 2393 WRITE64((u64) svc_max_payload(rqstp)); 2394 } 2395 if (bmval0 & FATTR4_WORD0_MAXWRITE) { 2396 if ((buflen -= 8) < 0) 2397 goto out_resource; 2398 WRITE64((u64) svc_max_payload(rqstp)); 2399 } 2400 if (bmval1 & FATTR4_WORD1_MODE) { 2401 if ((buflen -= 4) < 0) 2402 goto out_resource; 2403 WRITE32(stat.mode & S_IALLUGO); 2404 } 2405 if (bmval1 & FATTR4_WORD1_NO_TRUNC) { 2406 if ((buflen -= 4) < 0) 2407 goto out_resource; 2408 WRITE32(1); 2409 } 2410 if (bmval1 & FATTR4_WORD1_NUMLINKS) { 2411 if ((buflen -= 4) < 0) 2412 goto out_resource; 2413 WRITE32(stat.nlink); 2414 } 2415 if (bmval1 & FATTR4_WORD1_OWNER) { 2416 status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen); 2417 if (status == nfserr_resource) 2418 goto out_resource; 2419 if (status) 2420 goto out; 2421 } 2422 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) { 2423 status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen); 2424 if (status == nfserr_resource) 2425 goto out_resource; 2426 if (status) 2427 goto out; 2428 } 2429 if (bmval1 & FATTR4_WORD1_RAWDEV) { 2430 if ((buflen -= 8) < 0) 2431 goto out_resource; 2432 WRITE32((u32) MAJOR(stat.rdev)); 2433 WRITE32((u32) MINOR(stat.rdev)); 2434 } 2435 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) { 2436 if ((buflen -= 8) < 0) 2437 goto out_resource; 2438 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize; 2439 WRITE64(dummy64); 2440 } 2441 if (bmval1 & FATTR4_WORD1_SPACE_FREE) { 2442 if ((buflen -= 8) < 0) 2443 goto out_resource; 2444 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize; 2445 WRITE64(dummy64); 2446 } 2447 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) { 2448 if ((buflen -= 8) < 0) 2449 goto out_resource; 2450 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize; 2451 WRITE64(dummy64); 2452 } 2453 if (bmval1 & FATTR4_WORD1_SPACE_USED) { 2454 if ((buflen -= 8) < 0) 2455 goto out_resource; 2456 dummy64 = (u64)stat.blocks << 9; 2457 WRITE64(dummy64); 2458 } 2459 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) { 2460 if ((buflen -= 12) < 0) 2461 goto out_resource; 2462 WRITE64((s64)stat.atime.tv_sec); 2463 WRITE32(stat.atime.tv_nsec); 2464 } 2465 if (bmval1 & FATTR4_WORD1_TIME_DELTA) { 2466 if ((buflen -= 12) < 0) 2467 goto out_resource; 2468 WRITE32(0); 2469 WRITE32(1); 2470 WRITE32(0); 2471 } 2472 if (bmval1 & FATTR4_WORD1_TIME_METADATA) { 2473 if ((buflen -= 12) < 0) 2474 goto out_resource; 2475 WRITE64((s64)stat.ctime.tv_sec); 2476 WRITE32(stat.ctime.tv_nsec); 2477 } 2478 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) { 2479 if ((buflen -= 12) < 0) 2480 goto out_resource; 2481 WRITE64((s64)stat.mtime.tv_sec); 2482 WRITE32(stat.mtime.tv_nsec); 2483 } 2484 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) { 2485 if ((buflen -= 8) < 0) 2486 goto out_resource; 2487 /* 2488 * Get parent's attributes if not ignoring crossmount 2489 * and this is the root of a cross-mounted filesystem. 2490 */ 2491 if (ignore_crossmnt == 0 && 2492 dentry == exp->ex_path.mnt->mnt_root) 2493 get_parent_attributes(exp, &stat); 2494 WRITE64(stat.ino); 2495 } 2496 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) { 2497 status = nfsd4_encode_security_label(rqstp, context, 2498 contextlen, &p, &buflen); 2499 if (status) 2500 goto out; 2501 } 2502 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) { 2503 WRITE32(3); 2504 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0); 2505 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1); 2506 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2); 2507 } 2508 2509 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2510 *buffer = p; 2511 status = nfs_ok; 2512 2513 out: 2514 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2515 if (context) 2516 security_release_secctx(context, contextlen); 2517 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */ 2518 kfree(acl); 2519 if (fhp == &tempfh) 2520 fh_put(&tempfh); 2521 return status; 2522 out_nfserr: 2523 status = nfserrno(err); 2524 goto out; 2525 out_resource: 2526 status = nfserr_resource; 2527 goto out; 2528 out_serverfault: 2529 status = nfserr_serverfault; 2530 goto out; 2531 } 2532 2533 static inline int attributes_need_mount(u32 *bmval) 2534 { 2535 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME)) 2536 return 1; 2537 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID) 2538 return 1; 2539 return 0; 2540 } 2541 2542 static __be32 2543 nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd, 2544 const char *name, int namlen, __be32 **p, int buflen) 2545 { 2546 struct svc_export *exp = cd->rd_fhp->fh_export; 2547 struct dentry *dentry; 2548 __be32 nfserr; 2549 int ignore_crossmnt = 0; 2550 2551 dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen); 2552 if (IS_ERR(dentry)) 2553 return nfserrno(PTR_ERR(dentry)); 2554 if (!dentry->d_inode) { 2555 /* 2556 * nfsd_buffered_readdir drops the i_mutex between 2557 * readdir and calling this callback, leaving a window 2558 * where this directory entry could have gone away. 2559 */ 2560 dput(dentry); 2561 return nfserr_noent; 2562 } 2563 2564 exp_get(exp); 2565 /* 2566 * In the case of a mountpoint, the client may be asking for 2567 * attributes that are only properties of the underlying filesystem 2568 * as opposed to the cross-mounted file system. In such a case, 2569 * we will not follow the cross mount and will fill the attribtutes 2570 * directly from the mountpoint dentry. 2571 */ 2572 if (nfsd_mountpoint(dentry, exp)) { 2573 int err; 2574 2575 if (!(exp->ex_flags & NFSEXP_V4ROOT) 2576 && !attributes_need_mount(cd->rd_bmval)) { 2577 ignore_crossmnt = 1; 2578 goto out_encode; 2579 } 2580 /* 2581 * Why the heck aren't we just using nfsd_lookup?? 2582 * Different "."/".." handling? Something else? 2583 * At least, add a comment here to explain.... 2584 */ 2585 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp); 2586 if (err) { 2587 nfserr = nfserrno(err); 2588 goto out_put; 2589 } 2590 nfserr = check_nfsd_access(exp, cd->rd_rqstp); 2591 if (nfserr) 2592 goto out_put; 2593 2594 } 2595 out_encode: 2596 nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval, 2597 cd->rd_rqstp, ignore_crossmnt); 2598 out_put: 2599 dput(dentry); 2600 exp_put(exp); 2601 return nfserr; 2602 } 2603 2604 static __be32 * 2605 nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr) 2606 { 2607 __be32 *attrlenp; 2608 2609 if (buflen < 6) 2610 return NULL; 2611 *p++ = htonl(2); 2612 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */ 2613 *p++ = htonl(0); /* bmval1 */ 2614 2615 attrlenp = p++; 2616 *p++ = nfserr; /* no htonl */ 2617 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2618 return p; 2619 } 2620 2621 static int 2622 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen, 2623 loff_t offset, u64 ino, unsigned int d_type) 2624 { 2625 struct readdir_cd *ccd = ccdv; 2626 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common); 2627 int buflen; 2628 __be32 *p = cd->buffer; 2629 __be32 *cookiep; 2630 __be32 nfserr = nfserr_toosmall; 2631 2632 /* In nfsv4, "." and ".." never make it onto the wire.. */ 2633 if (name && isdotent(name, namlen)) { 2634 cd->common.err = nfs_ok; 2635 return 0; 2636 } 2637 2638 if (cd->offset) 2639 xdr_encode_hyper(cd->offset, (u64) offset); 2640 2641 buflen = cd->buflen - 4 - XDR_QUADLEN(namlen); 2642 if (buflen < 0) 2643 goto fail; 2644 2645 *p++ = xdr_one; /* mark entry present */ 2646 cookiep = p; 2647 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */ 2648 p = xdr_encode_array(p, name, namlen); /* name length & name */ 2649 2650 nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, &p, buflen); 2651 switch (nfserr) { 2652 case nfs_ok: 2653 break; 2654 case nfserr_resource: 2655 nfserr = nfserr_toosmall; 2656 goto fail; 2657 case nfserr_noent: 2658 goto skip_entry; 2659 default: 2660 /* 2661 * If the client requested the RDATTR_ERROR attribute, 2662 * we stuff the error code into this attribute 2663 * and continue. If this attribute was not requested, 2664 * then in accordance with the spec, we fail the 2665 * entire READDIR operation(!) 2666 */ 2667 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)) 2668 goto fail; 2669 p = nfsd4_encode_rdattr_error(p, buflen, nfserr); 2670 if (p == NULL) { 2671 nfserr = nfserr_toosmall; 2672 goto fail; 2673 } 2674 } 2675 cd->buflen -= (p - cd->buffer); 2676 cd->buffer = p; 2677 cd->offset = cookiep; 2678 skip_entry: 2679 cd->common.err = nfs_ok; 2680 return 0; 2681 fail: 2682 cd->common.err = nfserr; 2683 return -EINVAL; 2684 } 2685 2686 static void 2687 nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid) 2688 { 2689 __be32 *p; 2690 2691 RESERVE_SPACE(sizeof(stateid_t)); 2692 WRITE32(sid->si_generation); 2693 WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 2694 ADJUST_ARGS(); 2695 } 2696 2697 static __be32 2698 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access) 2699 { 2700 __be32 *p; 2701 2702 if (!nfserr) { 2703 RESERVE_SPACE(8); 2704 WRITE32(access->ac_supported); 2705 WRITE32(access->ac_resp_access); 2706 ADJUST_ARGS(); 2707 } 2708 return nfserr; 2709 } 2710 2711 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts) 2712 { 2713 __be32 *p; 2714 2715 if (!nfserr) { 2716 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8); 2717 WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 2718 WRITE32(bcts->dir); 2719 /* Sorry, we do not yet support RDMA over 4.1: */ 2720 WRITE32(0); 2721 ADJUST_ARGS(); 2722 } 2723 return nfserr; 2724 } 2725 2726 static __be32 2727 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close) 2728 { 2729 if (!nfserr) 2730 nfsd4_encode_stateid(resp, &close->cl_stateid); 2731 2732 return nfserr; 2733 } 2734 2735 2736 static __be32 2737 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit) 2738 { 2739 __be32 *p; 2740 2741 if (!nfserr) { 2742 RESERVE_SPACE(NFS4_VERIFIER_SIZE); 2743 WRITEMEM(commit->co_verf.data, NFS4_VERIFIER_SIZE); 2744 ADJUST_ARGS(); 2745 } 2746 return nfserr; 2747 } 2748 2749 static __be32 2750 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create) 2751 { 2752 __be32 *p; 2753 2754 if (!nfserr) { 2755 RESERVE_SPACE(32); 2756 write_cinfo(&p, &create->cr_cinfo); 2757 WRITE32(2); 2758 WRITE32(create->cr_bmval[0]); 2759 WRITE32(create->cr_bmval[1]); 2760 ADJUST_ARGS(); 2761 } 2762 return nfserr; 2763 } 2764 2765 static __be32 2766 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr) 2767 { 2768 struct svc_fh *fhp = getattr->ga_fhp; 2769 int buflen; 2770 2771 if (nfserr) 2772 return nfserr; 2773 2774 buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2); 2775 nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry, 2776 &resp->p, buflen, getattr->ga_bmval, 2777 resp->rqstp, 0); 2778 return nfserr; 2779 } 2780 2781 static __be32 2782 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp) 2783 { 2784 struct svc_fh *fhp = *fhpp; 2785 unsigned int len; 2786 __be32 *p; 2787 2788 if (!nfserr) { 2789 len = fhp->fh_handle.fh_size; 2790 RESERVE_SPACE(len + 4); 2791 WRITE32(len); 2792 WRITEMEM(&fhp->fh_handle.fh_base, len); 2793 ADJUST_ARGS(); 2794 } 2795 return nfserr; 2796 } 2797 2798 /* 2799 * Including all fields other than the name, a LOCK4denied structure requires 2800 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes. 2801 */ 2802 static void 2803 nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld) 2804 { 2805 struct xdr_netobj *conf = &ld->ld_owner; 2806 __be32 *p; 2807 2808 RESERVE_SPACE(32 + XDR_LEN(conf->len)); 2809 WRITE64(ld->ld_start); 2810 WRITE64(ld->ld_length); 2811 WRITE32(ld->ld_type); 2812 if (conf->len) { 2813 WRITEMEM(&ld->ld_clientid, 8); 2814 WRITE32(conf->len); 2815 WRITEMEM(conf->data, conf->len); 2816 kfree(conf->data); 2817 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */ 2818 WRITE64((u64)0); /* clientid */ 2819 WRITE32(0); /* length of owner name */ 2820 } 2821 ADJUST_ARGS(); 2822 } 2823 2824 static __be32 2825 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock) 2826 { 2827 if (!nfserr) 2828 nfsd4_encode_stateid(resp, &lock->lk_resp_stateid); 2829 else if (nfserr == nfserr_denied) 2830 nfsd4_encode_lock_denied(resp, &lock->lk_denied); 2831 2832 return nfserr; 2833 } 2834 2835 static __be32 2836 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt) 2837 { 2838 if (nfserr == nfserr_denied) 2839 nfsd4_encode_lock_denied(resp, &lockt->lt_denied); 2840 return nfserr; 2841 } 2842 2843 static __be32 2844 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku) 2845 { 2846 if (!nfserr) 2847 nfsd4_encode_stateid(resp, &locku->lu_stateid); 2848 2849 return nfserr; 2850 } 2851 2852 2853 static __be32 2854 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link) 2855 { 2856 __be32 *p; 2857 2858 if (!nfserr) { 2859 RESERVE_SPACE(20); 2860 write_cinfo(&p, &link->li_cinfo); 2861 ADJUST_ARGS(); 2862 } 2863 return nfserr; 2864 } 2865 2866 2867 static __be32 2868 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open) 2869 { 2870 __be32 *p; 2871 2872 if (nfserr) 2873 goto out; 2874 2875 nfsd4_encode_stateid(resp, &open->op_stateid); 2876 RESERVE_SPACE(40); 2877 write_cinfo(&p, &open->op_cinfo); 2878 WRITE32(open->op_rflags); 2879 WRITE32(2); 2880 WRITE32(open->op_bmval[0]); 2881 WRITE32(open->op_bmval[1]); 2882 WRITE32(open->op_delegate_type); 2883 ADJUST_ARGS(); 2884 2885 switch (open->op_delegate_type) { 2886 case NFS4_OPEN_DELEGATE_NONE: 2887 break; 2888 case NFS4_OPEN_DELEGATE_READ: 2889 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2890 RESERVE_SPACE(20); 2891 WRITE32(open->op_recall); 2892 2893 /* 2894 * TODO: ACE's in delegations 2895 */ 2896 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2897 WRITE32(0); 2898 WRITE32(0); 2899 WRITE32(0); /* XXX: is NULL principal ok? */ 2900 ADJUST_ARGS(); 2901 break; 2902 case NFS4_OPEN_DELEGATE_WRITE: 2903 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2904 RESERVE_SPACE(32); 2905 WRITE32(0); 2906 2907 /* 2908 * TODO: space_limit's in delegations 2909 */ 2910 WRITE32(NFS4_LIMIT_SIZE); 2911 WRITE32(~(u32)0); 2912 WRITE32(~(u32)0); 2913 2914 /* 2915 * TODO: ACE's in delegations 2916 */ 2917 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2918 WRITE32(0); 2919 WRITE32(0); 2920 WRITE32(0); /* XXX: is NULL principal ok? */ 2921 ADJUST_ARGS(); 2922 break; 2923 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */ 2924 switch (open->op_why_no_deleg) { 2925 case WND4_CONTENTION: 2926 case WND4_RESOURCE: 2927 RESERVE_SPACE(8); 2928 WRITE32(open->op_why_no_deleg); 2929 WRITE32(0); /* deleg signaling not supported yet */ 2930 break; 2931 default: 2932 RESERVE_SPACE(4); 2933 WRITE32(open->op_why_no_deleg); 2934 } 2935 ADJUST_ARGS(); 2936 break; 2937 default: 2938 BUG(); 2939 } 2940 /* XXX save filehandle here */ 2941 out: 2942 return nfserr; 2943 } 2944 2945 static __be32 2946 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc) 2947 { 2948 if (!nfserr) 2949 nfsd4_encode_stateid(resp, &oc->oc_resp_stateid); 2950 2951 return nfserr; 2952 } 2953 2954 static __be32 2955 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od) 2956 { 2957 if (!nfserr) 2958 nfsd4_encode_stateid(resp, &od->od_stateid); 2959 2960 return nfserr; 2961 } 2962 2963 static __be32 2964 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr, 2965 struct nfsd4_read *read) 2966 { 2967 u32 eof; 2968 int v; 2969 struct page *page; 2970 unsigned long maxcount; 2971 long len; 2972 __be32 *p; 2973 2974 if (nfserr) 2975 return nfserr; 2976 if (resp->xbuf->page_len) 2977 return nfserr_resource; 2978 2979 RESERVE_SPACE(8); /* eof flag and byte count */ 2980 2981 maxcount = svc_max_payload(resp->rqstp); 2982 if (maxcount > read->rd_length) 2983 maxcount = read->rd_length; 2984 2985 len = maxcount; 2986 v = 0; 2987 while (len > 0) { 2988 page = *(resp->rqstp->rq_next_page); 2989 if (!page) { /* ran out of pages */ 2990 maxcount -= len; 2991 break; 2992 } 2993 resp->rqstp->rq_vec[v].iov_base = page_address(page); 2994 resp->rqstp->rq_vec[v].iov_len = 2995 len < PAGE_SIZE ? len : PAGE_SIZE; 2996 resp->rqstp->rq_next_page++; 2997 v++; 2998 len -= PAGE_SIZE; 2999 } 3000 read->rd_vlen = v; 3001 3002 nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp, 3003 read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen, 3004 &maxcount); 3005 3006 if (nfserr) 3007 return nfserr; 3008 eof = (read->rd_offset + maxcount >= 3009 read->rd_fhp->fh_dentry->d_inode->i_size); 3010 3011 WRITE32(eof); 3012 WRITE32(maxcount); 3013 ADJUST_ARGS(); 3014 resp->xbuf->head[0].iov_len = (char*)p 3015 - (char*)resp->xbuf->head[0].iov_base; 3016 resp->xbuf->page_len = maxcount; 3017 3018 /* Use rest of head for padding and remaining ops: */ 3019 resp->xbuf->tail[0].iov_base = p; 3020 resp->xbuf->tail[0].iov_len = 0; 3021 if (maxcount&3) { 3022 RESERVE_SPACE(4); 3023 WRITE32(0); 3024 resp->xbuf->tail[0].iov_base += maxcount&3; 3025 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 3026 ADJUST_ARGS(); 3027 } 3028 return 0; 3029 } 3030 3031 static __be32 3032 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink) 3033 { 3034 int maxcount; 3035 char *page; 3036 __be32 *p; 3037 3038 if (nfserr) 3039 return nfserr; 3040 if (resp->xbuf->page_len) 3041 return nfserr_resource; 3042 if (!*resp->rqstp->rq_next_page) 3043 return nfserr_resource; 3044 3045 page = page_address(*(resp->rqstp->rq_next_page++)); 3046 3047 maxcount = PAGE_SIZE; 3048 RESERVE_SPACE(4); 3049 3050 /* 3051 * XXX: By default, the ->readlink() VFS op will truncate symlinks 3052 * if they would overflow the buffer. Is this kosher in NFSv4? If 3053 * not, one easy fix is: if ->readlink() precisely fills the buffer, 3054 * assume that truncation occurred, and return NFS4ERR_RESOURCE. 3055 */ 3056 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount); 3057 if (nfserr == nfserr_isdir) 3058 return nfserr_inval; 3059 if (nfserr) 3060 return nfserr; 3061 3062 WRITE32(maxcount); 3063 ADJUST_ARGS(); 3064 resp->xbuf->head[0].iov_len = (char*)p 3065 - (char*)resp->xbuf->head[0].iov_base; 3066 resp->xbuf->page_len = maxcount; 3067 3068 /* Use rest of head for padding and remaining ops: */ 3069 resp->xbuf->tail[0].iov_base = p; 3070 resp->xbuf->tail[0].iov_len = 0; 3071 if (maxcount&3) { 3072 RESERVE_SPACE(4); 3073 WRITE32(0); 3074 resp->xbuf->tail[0].iov_base += maxcount&3; 3075 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 3076 ADJUST_ARGS(); 3077 } 3078 return 0; 3079 } 3080 3081 static __be32 3082 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir) 3083 { 3084 int maxcount; 3085 loff_t offset; 3086 __be32 *page, *savep, *tailbase; 3087 __be32 *p; 3088 3089 if (nfserr) 3090 return nfserr; 3091 if (resp->xbuf->page_len) 3092 return nfserr_resource; 3093 if (!*resp->rqstp->rq_next_page) 3094 return nfserr_resource; 3095 3096 RESERVE_SPACE(NFS4_VERIFIER_SIZE); 3097 savep = p; 3098 3099 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */ 3100 WRITE32(0); 3101 WRITE32(0); 3102 ADJUST_ARGS(); 3103 resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base; 3104 tailbase = p; 3105 3106 maxcount = PAGE_SIZE; 3107 if (maxcount > readdir->rd_maxcount) 3108 maxcount = readdir->rd_maxcount; 3109 3110 /* 3111 * Convert from bytes to words, account for the two words already 3112 * written, make sure to leave two words at the end for the next 3113 * pointer and eof field. 3114 */ 3115 maxcount = (maxcount >> 2) - 4; 3116 if (maxcount < 0) { 3117 nfserr = nfserr_toosmall; 3118 goto err_no_verf; 3119 } 3120 3121 page = page_address(*(resp->rqstp->rq_next_page++)); 3122 readdir->common.err = 0; 3123 readdir->buflen = maxcount; 3124 readdir->buffer = page; 3125 readdir->offset = NULL; 3126 3127 offset = readdir->rd_cookie; 3128 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, 3129 &offset, 3130 &readdir->common, nfsd4_encode_dirent); 3131 if (nfserr == nfs_ok && 3132 readdir->common.err == nfserr_toosmall && 3133 readdir->buffer == page) 3134 nfserr = nfserr_toosmall; 3135 if (nfserr) 3136 goto err_no_verf; 3137 3138 if (readdir->offset) 3139 xdr_encode_hyper(readdir->offset, offset); 3140 3141 p = readdir->buffer; 3142 *p++ = 0; /* no more entries */ 3143 *p++ = htonl(readdir->common.err == nfserr_eof); 3144 resp->xbuf->page_len = ((char*)p) - 3145 (char*)page_address(*(resp->rqstp->rq_next_page-1)); 3146 3147 /* Use rest of head for padding and remaining ops: */ 3148 resp->xbuf->tail[0].iov_base = tailbase; 3149 resp->xbuf->tail[0].iov_len = 0; 3150 resp->p = resp->xbuf->tail[0].iov_base; 3151 resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4; 3152 3153 return 0; 3154 err_no_verf: 3155 p = savep; 3156 ADJUST_ARGS(); 3157 return nfserr; 3158 } 3159 3160 static __be32 3161 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove) 3162 { 3163 __be32 *p; 3164 3165 if (!nfserr) { 3166 RESERVE_SPACE(20); 3167 write_cinfo(&p, &remove->rm_cinfo); 3168 ADJUST_ARGS(); 3169 } 3170 return nfserr; 3171 } 3172 3173 static __be32 3174 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename) 3175 { 3176 __be32 *p; 3177 3178 if (!nfserr) { 3179 RESERVE_SPACE(40); 3180 write_cinfo(&p, &rename->rn_sinfo); 3181 write_cinfo(&p, &rename->rn_tinfo); 3182 ADJUST_ARGS(); 3183 } 3184 return nfserr; 3185 } 3186 3187 static __be32 3188 nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp, 3189 __be32 nfserr, struct svc_export *exp) 3190 { 3191 u32 i, nflavs, supported; 3192 struct exp_flavor_info *flavs; 3193 struct exp_flavor_info def_flavs[2]; 3194 __be32 *p, *flavorsp; 3195 static bool report = true; 3196 3197 if (nfserr) 3198 goto out; 3199 if (exp->ex_nflavors) { 3200 flavs = exp->ex_flavors; 3201 nflavs = exp->ex_nflavors; 3202 } else { /* Handling of some defaults in absence of real secinfo: */ 3203 flavs = def_flavs; 3204 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) { 3205 nflavs = 2; 3206 flavs[0].pseudoflavor = RPC_AUTH_UNIX; 3207 flavs[1].pseudoflavor = RPC_AUTH_NULL; 3208 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) { 3209 nflavs = 1; 3210 flavs[0].pseudoflavor 3211 = svcauth_gss_flavor(exp->ex_client); 3212 } else { 3213 nflavs = 1; 3214 flavs[0].pseudoflavor 3215 = exp->ex_client->flavour->flavour; 3216 } 3217 } 3218 3219 supported = 0; 3220 RESERVE_SPACE(4); 3221 flavorsp = p++; /* to be backfilled later */ 3222 ADJUST_ARGS(); 3223 3224 for (i = 0; i < nflavs; i++) { 3225 rpc_authflavor_t pf = flavs[i].pseudoflavor; 3226 struct rpcsec_gss_info info; 3227 3228 if (rpcauth_get_gssinfo(pf, &info) == 0) { 3229 supported++; 3230 RESERVE_SPACE(4 + 4 + info.oid.len + 4 + 4); 3231 WRITE32(RPC_AUTH_GSS); 3232 WRITE32(info.oid.len); 3233 WRITEMEM(info.oid.data, info.oid.len); 3234 WRITE32(info.qop); 3235 WRITE32(info.service); 3236 ADJUST_ARGS(); 3237 } else if (pf < RPC_AUTH_MAXFLAVOR) { 3238 supported++; 3239 RESERVE_SPACE(4); 3240 WRITE32(pf); 3241 ADJUST_ARGS(); 3242 } else { 3243 if (report) 3244 pr_warn("NFS: SECINFO: security flavor %u " 3245 "is not supported\n", pf); 3246 } 3247 } 3248 3249 if (nflavs != supported) 3250 report = false; 3251 *flavorsp = htonl(supported); 3252 3253 out: 3254 if (exp) 3255 exp_put(exp); 3256 return nfserr; 3257 } 3258 3259 static __be32 3260 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 3261 struct nfsd4_secinfo *secinfo) 3262 { 3263 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp); 3264 } 3265 3266 static __be32 3267 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr, 3268 struct nfsd4_secinfo_no_name *secinfo) 3269 { 3270 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp); 3271 } 3272 3273 /* 3274 * The SETATTR encode routine is special -- it always encodes a bitmap, 3275 * regardless of the error status. 3276 */ 3277 static __be32 3278 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr) 3279 { 3280 __be32 *p; 3281 3282 RESERVE_SPACE(16); 3283 if (nfserr) { 3284 WRITE32(3); 3285 WRITE32(0); 3286 WRITE32(0); 3287 WRITE32(0); 3288 } 3289 else { 3290 WRITE32(3); 3291 WRITE32(setattr->sa_bmval[0]); 3292 WRITE32(setattr->sa_bmval[1]); 3293 WRITE32(setattr->sa_bmval[2]); 3294 } 3295 ADJUST_ARGS(); 3296 return nfserr; 3297 } 3298 3299 static __be32 3300 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd) 3301 { 3302 __be32 *p; 3303 3304 if (!nfserr) { 3305 RESERVE_SPACE(8 + NFS4_VERIFIER_SIZE); 3306 WRITEMEM(&scd->se_clientid, 8); 3307 WRITEMEM(&scd->se_confirm, NFS4_VERIFIER_SIZE); 3308 ADJUST_ARGS(); 3309 } 3310 else if (nfserr == nfserr_clid_inuse) { 3311 RESERVE_SPACE(8); 3312 WRITE32(0); 3313 WRITE32(0); 3314 ADJUST_ARGS(); 3315 } 3316 return nfserr; 3317 } 3318 3319 static __be32 3320 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write) 3321 { 3322 __be32 *p; 3323 3324 if (!nfserr) { 3325 RESERVE_SPACE(16); 3326 WRITE32(write->wr_bytes_written); 3327 WRITE32(write->wr_how_written); 3328 WRITEMEM(write->wr_verifier.data, NFS4_VERIFIER_SIZE); 3329 ADJUST_ARGS(); 3330 } 3331 return nfserr; 3332 } 3333 3334 static const u32 nfs4_minimal_spo_must_enforce[2] = { 3335 [1] = 1 << (OP_BIND_CONN_TO_SESSION - 32) | 3336 1 << (OP_EXCHANGE_ID - 32) | 3337 1 << (OP_CREATE_SESSION - 32) | 3338 1 << (OP_DESTROY_SESSION - 32) | 3339 1 << (OP_DESTROY_CLIENTID - 32) 3340 }; 3341 3342 static __be32 3343 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr, 3344 struct nfsd4_exchange_id *exid) 3345 { 3346 __be32 *p; 3347 char *major_id; 3348 char *server_scope; 3349 int major_id_sz; 3350 int server_scope_sz; 3351 uint64_t minor_id = 0; 3352 3353 if (nfserr) 3354 return nfserr; 3355 3356 major_id = utsname()->nodename; 3357 major_id_sz = strlen(major_id); 3358 server_scope = utsname()->nodename; 3359 server_scope_sz = strlen(server_scope); 3360 3361 RESERVE_SPACE( 3362 8 /* eir_clientid */ + 3363 4 /* eir_sequenceid */ + 3364 4 /* eir_flags */ + 3365 4 /* spr_how */ + 3366 8 /* spo_must_enforce, spo_must_allow */ + 3367 8 /* so_minor_id */ + 3368 4 /* so_major_id.len */ + 3369 (XDR_QUADLEN(major_id_sz) * 4) + 3370 4 /* eir_server_scope.len */ + 3371 (XDR_QUADLEN(server_scope_sz) * 4) + 3372 4 /* eir_server_impl_id.count (0) */); 3373 3374 WRITEMEM(&exid->clientid, 8); 3375 WRITE32(exid->seqid); 3376 WRITE32(exid->flags); 3377 3378 WRITE32(exid->spa_how); 3379 switch (exid->spa_how) { 3380 case SP4_NONE: 3381 break; 3382 case SP4_MACH_CRED: 3383 /* spo_must_enforce bitmap: */ 3384 WRITE32(2); 3385 WRITE32(nfs4_minimal_spo_must_enforce[0]); 3386 WRITE32(nfs4_minimal_spo_must_enforce[1]); 3387 /* empty spo_must_allow bitmap: */ 3388 WRITE32(0); 3389 break; 3390 default: 3391 WARN_ON_ONCE(1); 3392 } 3393 3394 /* The server_owner struct */ 3395 WRITE64(minor_id); /* Minor id */ 3396 /* major id */ 3397 WRITE32(major_id_sz); 3398 WRITEMEM(major_id, major_id_sz); 3399 3400 /* Server scope */ 3401 WRITE32(server_scope_sz); 3402 WRITEMEM(server_scope, server_scope_sz); 3403 3404 /* Implementation id */ 3405 WRITE32(0); /* zero length nfs_impl_id4 array */ 3406 ADJUST_ARGS(); 3407 return 0; 3408 } 3409 3410 static __be32 3411 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr, 3412 struct nfsd4_create_session *sess) 3413 { 3414 __be32 *p; 3415 3416 if (nfserr) 3417 return nfserr; 3418 3419 RESERVE_SPACE(24); 3420 WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3421 WRITE32(sess->seqid); 3422 WRITE32(sess->flags); 3423 ADJUST_ARGS(); 3424 3425 RESERVE_SPACE(28); 3426 WRITE32(0); /* headerpadsz */ 3427 WRITE32(sess->fore_channel.maxreq_sz); 3428 WRITE32(sess->fore_channel.maxresp_sz); 3429 WRITE32(sess->fore_channel.maxresp_cached); 3430 WRITE32(sess->fore_channel.maxops); 3431 WRITE32(sess->fore_channel.maxreqs); 3432 WRITE32(sess->fore_channel.nr_rdma_attrs); 3433 ADJUST_ARGS(); 3434 3435 if (sess->fore_channel.nr_rdma_attrs) { 3436 RESERVE_SPACE(4); 3437 WRITE32(sess->fore_channel.rdma_attrs); 3438 ADJUST_ARGS(); 3439 } 3440 3441 RESERVE_SPACE(28); 3442 WRITE32(0); /* headerpadsz */ 3443 WRITE32(sess->back_channel.maxreq_sz); 3444 WRITE32(sess->back_channel.maxresp_sz); 3445 WRITE32(sess->back_channel.maxresp_cached); 3446 WRITE32(sess->back_channel.maxops); 3447 WRITE32(sess->back_channel.maxreqs); 3448 WRITE32(sess->back_channel.nr_rdma_attrs); 3449 ADJUST_ARGS(); 3450 3451 if (sess->back_channel.nr_rdma_attrs) { 3452 RESERVE_SPACE(4); 3453 WRITE32(sess->back_channel.rdma_attrs); 3454 ADJUST_ARGS(); 3455 } 3456 return 0; 3457 } 3458 3459 static __be32 3460 nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, __be32 nfserr, 3461 struct nfsd4_destroy_session *destroy_session) 3462 { 3463 return nfserr; 3464 } 3465 3466 static __be32 3467 nfsd4_encode_free_stateid(struct nfsd4_compoundres *resp, __be32 nfserr, 3468 struct nfsd4_free_stateid *free_stateid) 3469 { 3470 __be32 *p; 3471 3472 if (nfserr) 3473 return nfserr; 3474 3475 RESERVE_SPACE(4); 3476 *p++ = nfserr; 3477 ADJUST_ARGS(); 3478 return nfserr; 3479 } 3480 3481 static __be32 3482 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr, 3483 struct nfsd4_sequence *seq) 3484 { 3485 __be32 *p; 3486 3487 if (nfserr) 3488 return nfserr; 3489 3490 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20); 3491 WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3492 WRITE32(seq->seqid); 3493 WRITE32(seq->slotid); 3494 /* Note slotid's are numbered from zero: */ 3495 WRITE32(seq->maxslots - 1); /* sr_highest_slotid */ 3496 WRITE32(seq->maxslots - 1); /* sr_target_highest_slotid */ 3497 WRITE32(seq->status_flags); 3498 3499 ADJUST_ARGS(); 3500 resp->cstate.datap = p; /* DRC cache data pointer */ 3501 return 0; 3502 } 3503 3504 static __be32 3505 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr, 3506 struct nfsd4_test_stateid *test_stateid) 3507 { 3508 struct nfsd4_test_stateid_id *stateid, *next; 3509 __be32 *p; 3510 3511 RESERVE_SPACE(4 + (4 * test_stateid->ts_num_ids)); 3512 *p++ = htonl(test_stateid->ts_num_ids); 3513 3514 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) { 3515 *p++ = stateid->ts_id_status; 3516 } 3517 3518 ADJUST_ARGS(); 3519 return nfserr; 3520 } 3521 3522 static __be32 3523 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p) 3524 { 3525 return nfserr; 3526 } 3527 3528 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *); 3529 3530 /* 3531 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1 3532 * since we don't need to filter out obsolete ops as this is 3533 * done in the decoding phase. 3534 */ 3535 static nfsd4_enc nfsd4_enc_ops[] = { 3536 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access, 3537 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close, 3538 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit, 3539 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create, 3540 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop, 3541 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3542 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr, 3543 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh, 3544 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link, 3545 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock, 3546 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt, 3547 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku, 3548 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop, 3549 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop, 3550 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3551 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open, 3552 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop, 3553 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm, 3554 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade, 3555 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop, 3556 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop, 3557 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop, 3558 [OP_READ] = (nfsd4_enc)nfsd4_encode_read, 3559 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir, 3560 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink, 3561 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove, 3562 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename, 3563 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop, 3564 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop, 3565 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop, 3566 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo, 3567 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr, 3568 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid, 3569 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop, 3570 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3571 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write, 3572 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop, 3573 3574 /* NFSv4.1 operations */ 3575 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop, 3576 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session, 3577 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id, 3578 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session, 3579 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_destroy_session, 3580 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_free_stateid, 3581 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3582 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop, 3583 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 3584 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop, 3585 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop, 3586 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3587 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name, 3588 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence, 3589 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop, 3590 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid, 3591 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3592 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop, 3593 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop, 3594 }; 3595 3596 /* 3597 * Calculate the total amount of memory that the compound response has taken 3598 * after encoding the current operation with pad. 3599 * 3600 * pad: if operation is non-idempotent, pad was calculate by op_rsize_bop() 3601 * which was specified at nfsd4_operation, else pad is zero. 3602 * 3603 * Compare this length to the session se_fmaxresp_sz and se_fmaxresp_cached. 3604 * 3605 * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so 3606 * will be at least a page and will therefore hold the xdr_buf head. 3607 */ 3608 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 pad) 3609 { 3610 struct xdr_buf *xb = &resp->rqstp->rq_res; 3611 struct nfsd4_session *session = NULL; 3612 struct nfsd4_slot *slot = resp->cstate.slot; 3613 u32 length, tlen = 0; 3614 3615 if (!nfsd4_has_session(&resp->cstate)) 3616 return 0; 3617 3618 session = resp->cstate.session; 3619 if (session == NULL) 3620 return 0; 3621 3622 if (xb->page_len == 0) { 3623 length = (char *)resp->p - (char *)xb->head[0].iov_base + pad; 3624 } else { 3625 if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0) 3626 tlen = (char *)resp->p - (char *)xb->tail[0].iov_base; 3627 3628 length = xb->head[0].iov_len + xb->page_len + tlen + pad; 3629 } 3630 dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__, 3631 length, xb->page_len, tlen, pad); 3632 3633 if (length > session->se_fchannel.maxresp_sz) 3634 return nfserr_rep_too_big; 3635 3636 if ((slot->sl_flags & NFSD4_SLOT_CACHETHIS) && 3637 length > session->se_fchannel.maxresp_cached) 3638 return nfserr_rep_too_big_to_cache; 3639 3640 return 0; 3641 } 3642 3643 void 3644 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3645 { 3646 struct nfs4_stateowner *so = resp->cstate.replay_owner; 3647 __be32 *statp; 3648 __be32 *p; 3649 3650 RESERVE_SPACE(8); 3651 WRITE32(op->opnum); 3652 statp = p++; /* to be backfilled at the end */ 3653 ADJUST_ARGS(); 3654 3655 if (op->opnum == OP_ILLEGAL) 3656 goto status; 3657 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) || 3658 !nfsd4_enc_ops[op->opnum]); 3659 op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u); 3660 /* nfsd4_check_drc_limit guarantees enough room for error status */ 3661 if (!op->status) 3662 op->status = nfsd4_check_resp_size(resp, 0); 3663 if (so) { 3664 so->so_replay.rp_status = op->status; 3665 so->so_replay.rp_buflen = (char *)resp->p - (char *)(statp+1); 3666 memcpy(so->so_replay.rp_buf, statp+1, so->so_replay.rp_buflen); 3667 } 3668 status: 3669 /* 3670 * Note: We write the status directly, instead of using WRITE32(), 3671 * since it is already in network byte order. 3672 */ 3673 *statp = op->status; 3674 } 3675 3676 /* 3677 * Encode the reply stored in the stateowner reply cache 3678 * 3679 * XDR note: do not encode rp->rp_buflen: the buffer contains the 3680 * previously sent already encoded operation. 3681 * 3682 * called with nfs4_lock_state() held 3683 */ 3684 void 3685 nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3686 { 3687 __be32 *p; 3688 struct nfs4_replay *rp = op->replay; 3689 3690 BUG_ON(!rp); 3691 3692 RESERVE_SPACE(8); 3693 WRITE32(op->opnum); 3694 *p++ = rp->rp_status; /* already xdr'ed */ 3695 ADJUST_ARGS(); 3696 3697 RESERVE_SPACE(rp->rp_buflen); 3698 WRITEMEM(rp->rp_buf, rp->rp_buflen); 3699 ADJUST_ARGS(); 3700 } 3701 3702 int 3703 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy) 3704 { 3705 return xdr_ressize_check(rqstp, p); 3706 } 3707 3708 int nfsd4_release_compoundargs(void *rq, __be32 *p, void *resp) 3709 { 3710 struct svc_rqst *rqstp = rq; 3711 struct nfsd4_compoundargs *args = rqstp->rq_argp; 3712 3713 if (args->ops != args->iops) { 3714 kfree(args->ops); 3715 args->ops = args->iops; 3716 } 3717 kfree(args->tmpp); 3718 args->tmpp = NULL; 3719 while (args->to_free) { 3720 struct tmpbuf *tb = args->to_free; 3721 args->to_free = tb->next; 3722 tb->release(tb->buf); 3723 kfree(tb); 3724 } 3725 return 1; 3726 } 3727 3728 int 3729 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args) 3730 { 3731 args->p = p; 3732 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len; 3733 args->pagelist = rqstp->rq_arg.pages; 3734 args->pagelen = rqstp->rq_arg.page_len; 3735 args->tmpp = NULL; 3736 args->to_free = NULL; 3737 args->ops = args->iops; 3738 args->rqstp = rqstp; 3739 3740 return !nfsd4_decode_compound(args); 3741 } 3742 3743 int 3744 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp) 3745 { 3746 /* 3747 * All that remains is to write the tag and operation count... 3748 */ 3749 struct nfsd4_compound_state *cs = &resp->cstate; 3750 struct kvec *iov; 3751 p = resp->tagp; 3752 *p++ = htonl(resp->taglen); 3753 memcpy(p, resp->tag, resp->taglen); 3754 p += XDR_QUADLEN(resp->taglen); 3755 *p++ = htonl(resp->opcnt); 3756 3757 if (rqstp->rq_res.page_len) 3758 iov = &rqstp->rq_res.tail[0]; 3759 else 3760 iov = &rqstp->rq_res.head[0]; 3761 iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base; 3762 BUG_ON(iov->iov_len > PAGE_SIZE); 3763 if (nfsd4_has_session(cs)) { 3764 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 3765 struct nfs4_client *clp = cs->session->se_client; 3766 if (cs->status != nfserr_replay_cache) { 3767 nfsd4_store_cache_entry(resp); 3768 cs->slot->sl_flags &= ~NFSD4_SLOT_INUSE; 3769 } 3770 /* Renew the clientid on success and on replay */ 3771 spin_lock(&nn->client_lock); 3772 nfsd4_put_session(cs->session); 3773 spin_unlock(&nn->client_lock); 3774 put_client_renew(clp); 3775 } 3776 return 1; 3777 } 3778 3779 /* 3780 * Local variables: 3781 * c-basic-offset: 8 3782 * End: 3783 */ 3784