1 /* 2 * Server-side XDR for NFSv4 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 * 35 * TODO: Neil Brown made the following observation: We currently 36 * initially reserve NFSD_BUFSIZE space on the transmit queue and 37 * never release any of that until the request is complete. 38 * It would be good to calculate a new maximum response size while 39 * decoding the COMPOUND, and call svc_reserve with this number 40 * at the end of nfs4svc_decode_compoundargs. 41 */ 42 43 #include <linux/slab.h> 44 #include <linux/namei.h> 45 #include <linux/statfs.h> 46 #include <linux/utsname.h> 47 #include <linux/pagemap.h> 48 #include <linux/sunrpc/svcauth_gss.h> 49 50 #include "idmap.h" 51 #include "acl.h" 52 #include "xdr4.h" 53 #include "vfs.h" 54 #include "state.h" 55 #include "cache.h" 56 57 #define NFSDDBG_FACILITY NFSDDBG_XDR 58 59 /* 60 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing 61 * directory in order to indicate to the client that a filesystem boundary is present 62 * We use a fixed fsid for a referral 63 */ 64 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL 65 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL 66 67 static __be32 68 check_filename(char *str, int len, __be32 err) 69 { 70 int i; 71 72 if (len == 0) 73 return nfserr_inval; 74 if (isdotent(str, len)) 75 return err; 76 for (i = 0; i < len; i++) 77 if (str[i] == '/') 78 return err; 79 return 0; 80 } 81 82 #define DECODE_HEAD \ 83 __be32 *p; \ 84 __be32 status 85 #define DECODE_TAIL \ 86 status = 0; \ 87 out: \ 88 return status; \ 89 xdr_error: \ 90 dprintk("NFSD: xdr error (%s:%d)\n", \ 91 __FILE__, __LINE__); \ 92 status = nfserr_bad_xdr; \ 93 goto out 94 95 #define READ32(x) (x) = ntohl(*p++) 96 #define READ64(x) do { \ 97 (x) = (u64)ntohl(*p++) << 32; \ 98 (x) |= ntohl(*p++); \ 99 } while (0) 100 #define READTIME(x) do { \ 101 p++; \ 102 (x) = ntohl(*p++); \ 103 p++; \ 104 } while (0) 105 #define READMEM(x,nbytes) do { \ 106 x = (char *)p; \ 107 p += XDR_QUADLEN(nbytes); \ 108 } while (0) 109 #define SAVEMEM(x,nbytes) do { \ 110 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \ 111 savemem(argp, p, nbytes) : \ 112 (char *)p)) { \ 113 dprintk("NFSD: xdr error (%s:%d)\n", \ 114 __FILE__, __LINE__); \ 115 goto xdr_error; \ 116 } \ 117 p += XDR_QUADLEN(nbytes); \ 118 } while (0) 119 #define COPYMEM(x,nbytes) do { \ 120 memcpy((x), p, nbytes); \ 121 p += XDR_QUADLEN(nbytes); \ 122 } while (0) 123 124 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */ 125 #define READ_BUF(nbytes) do { \ 126 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \ 127 p = argp->p; \ 128 argp->p += XDR_QUADLEN(nbytes); \ 129 } else if (!(p = read_buf(argp, nbytes))) { \ 130 dprintk("NFSD: xdr error (%s:%d)\n", \ 131 __FILE__, __LINE__); \ 132 goto xdr_error; \ 133 } \ 134 } while (0) 135 136 static void save_buf(struct nfsd4_compoundargs *argp, struct nfsd4_saved_compoundargs *savep) 137 { 138 savep->p = argp->p; 139 savep->end = argp->end; 140 savep->pagelen = argp->pagelen; 141 savep->pagelist = argp->pagelist; 142 } 143 144 static void restore_buf(struct nfsd4_compoundargs *argp, struct nfsd4_saved_compoundargs *savep) 145 { 146 argp->p = savep->p; 147 argp->end = savep->end; 148 argp->pagelen = savep->pagelen; 149 argp->pagelist = savep->pagelist; 150 } 151 152 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes) 153 { 154 /* We want more bytes than seem to be available. 155 * Maybe we need a new page, maybe we have just run out 156 */ 157 unsigned int avail = (char *)argp->end - (char *)argp->p; 158 __be32 *p; 159 if (avail + argp->pagelen < nbytes) 160 return NULL; 161 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */ 162 return NULL; 163 /* ok, we can do it with the current plus the next page */ 164 if (nbytes <= sizeof(argp->tmp)) 165 p = argp->tmp; 166 else { 167 kfree(argp->tmpp); 168 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL); 169 if (!p) 170 return NULL; 171 172 } 173 /* 174 * The following memcpy is safe because read_buf is always 175 * called with nbytes > avail, and the two cases above both 176 * guarantee p points to at least nbytes bytes. 177 */ 178 memcpy(p, argp->p, avail); 179 /* step to next page */ 180 argp->p = page_address(argp->pagelist[0]); 181 argp->pagelist++; 182 if (argp->pagelen < PAGE_SIZE) { 183 argp->end = argp->p + (argp->pagelen>>2); 184 argp->pagelen = 0; 185 } else { 186 argp->end = argp->p + (PAGE_SIZE>>2); 187 argp->pagelen -= PAGE_SIZE; 188 } 189 memcpy(((char*)p)+avail, argp->p, (nbytes - avail)); 190 argp->p += XDR_QUADLEN(nbytes - avail); 191 return p; 192 } 193 194 static int zero_clientid(clientid_t *clid) 195 { 196 return (clid->cl_boot == 0) && (clid->cl_id == 0); 197 } 198 199 static int 200 defer_free(struct nfsd4_compoundargs *argp, 201 void (*release)(const void *), void *p) 202 { 203 struct tmpbuf *tb; 204 205 tb = kmalloc(sizeof(*tb), GFP_KERNEL); 206 if (!tb) 207 return -ENOMEM; 208 tb->buf = p; 209 tb->release = release; 210 tb->next = argp->to_free; 211 argp->to_free = tb; 212 return 0; 213 } 214 215 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes) 216 { 217 if (p == argp->tmp) { 218 p = kmalloc(nbytes, GFP_KERNEL); 219 if (!p) 220 return NULL; 221 memcpy(p, argp->tmp, nbytes); 222 } else { 223 BUG_ON(p != argp->tmpp); 224 argp->tmpp = NULL; 225 } 226 if (defer_free(argp, kfree, p)) { 227 kfree(p); 228 return NULL; 229 } else 230 return (char *)p; 231 } 232 233 static __be32 234 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval) 235 { 236 u32 bmlen; 237 DECODE_HEAD; 238 239 bmval[0] = 0; 240 bmval[1] = 0; 241 bmval[2] = 0; 242 243 READ_BUF(4); 244 READ32(bmlen); 245 if (bmlen > 1000) 246 goto xdr_error; 247 248 READ_BUF(bmlen << 2); 249 if (bmlen > 0) 250 READ32(bmval[0]); 251 if (bmlen > 1) 252 READ32(bmval[1]); 253 if (bmlen > 2) 254 READ32(bmval[2]); 255 256 DECODE_TAIL; 257 } 258 259 static __be32 260 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval, 261 struct iattr *iattr, struct nfs4_acl **acl) 262 { 263 int expected_len, len = 0; 264 u32 dummy32; 265 char *buf; 266 int host_err; 267 268 DECODE_HEAD; 269 iattr->ia_valid = 0; 270 if ((status = nfsd4_decode_bitmap(argp, bmval))) 271 return status; 272 273 READ_BUF(4); 274 READ32(expected_len); 275 276 if (bmval[0] & FATTR4_WORD0_SIZE) { 277 READ_BUF(8); 278 len += 8; 279 READ64(iattr->ia_size); 280 iattr->ia_valid |= ATTR_SIZE; 281 } 282 if (bmval[0] & FATTR4_WORD0_ACL) { 283 int nace; 284 struct nfs4_ace *ace; 285 286 READ_BUF(4); len += 4; 287 READ32(nace); 288 289 if (nace > NFS4_ACL_MAX) 290 return nfserr_resource; 291 292 *acl = nfs4_acl_new(nace); 293 if (*acl == NULL) { 294 host_err = -ENOMEM; 295 goto out_nfserr; 296 } 297 defer_free(argp, kfree, *acl); 298 299 (*acl)->naces = nace; 300 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) { 301 READ_BUF(16); len += 16; 302 READ32(ace->type); 303 READ32(ace->flag); 304 READ32(ace->access_mask); 305 READ32(dummy32); 306 READ_BUF(dummy32); 307 len += XDR_QUADLEN(dummy32) << 2; 308 READMEM(buf, dummy32); 309 ace->whotype = nfs4_acl_get_whotype(buf, dummy32); 310 status = nfs_ok; 311 if (ace->whotype != NFS4_ACL_WHO_NAMED) 312 ace->who = 0; 313 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 314 status = nfsd_map_name_to_gid(argp->rqstp, 315 buf, dummy32, &ace->who); 316 else 317 status = nfsd_map_name_to_uid(argp->rqstp, 318 buf, dummy32, &ace->who); 319 if (status) 320 return status; 321 } 322 } else 323 *acl = NULL; 324 if (bmval[1] & FATTR4_WORD1_MODE) { 325 READ_BUF(4); 326 len += 4; 327 READ32(iattr->ia_mode); 328 iattr->ia_mode &= (S_IFMT | S_IALLUGO); 329 iattr->ia_valid |= ATTR_MODE; 330 } 331 if (bmval[1] & FATTR4_WORD1_OWNER) { 332 READ_BUF(4); 333 len += 4; 334 READ32(dummy32); 335 READ_BUF(dummy32); 336 len += (XDR_QUADLEN(dummy32) << 2); 337 READMEM(buf, dummy32); 338 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid))) 339 return status; 340 iattr->ia_valid |= ATTR_UID; 341 } 342 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) { 343 READ_BUF(4); 344 len += 4; 345 READ32(dummy32); 346 READ_BUF(dummy32); 347 len += (XDR_QUADLEN(dummy32) << 2); 348 READMEM(buf, dummy32); 349 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid))) 350 return status; 351 iattr->ia_valid |= ATTR_GID; 352 } 353 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) { 354 READ_BUF(4); 355 len += 4; 356 READ32(dummy32); 357 switch (dummy32) { 358 case NFS4_SET_TO_CLIENT_TIME: 359 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 360 all 32 bits of 'nseconds'. */ 361 READ_BUF(12); 362 len += 12; 363 READ32(dummy32); 364 if (dummy32) 365 return nfserr_inval; 366 READ32(iattr->ia_atime.tv_sec); 367 READ32(iattr->ia_atime.tv_nsec); 368 if (iattr->ia_atime.tv_nsec >= (u32)1000000000) 369 return nfserr_inval; 370 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET); 371 break; 372 case NFS4_SET_TO_SERVER_TIME: 373 iattr->ia_valid |= ATTR_ATIME; 374 break; 375 default: 376 goto xdr_error; 377 } 378 } 379 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) { 380 READ_BUF(4); 381 len += 4; 382 READ32(dummy32); 383 switch (dummy32) { 384 case NFS4_SET_TO_CLIENT_TIME: 385 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 386 all 32 bits of 'nseconds'. */ 387 READ_BUF(12); 388 len += 12; 389 READ32(dummy32); 390 if (dummy32) 391 return nfserr_inval; 392 READ32(iattr->ia_mtime.tv_sec); 393 READ32(iattr->ia_mtime.tv_nsec); 394 if (iattr->ia_mtime.tv_nsec >= (u32)1000000000) 395 return nfserr_inval; 396 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET); 397 break; 398 case NFS4_SET_TO_SERVER_TIME: 399 iattr->ia_valid |= ATTR_MTIME; 400 break; 401 default: 402 goto xdr_error; 403 } 404 } 405 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0 406 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1 407 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) 408 READ_BUF(expected_len - len); 409 else if (len != expected_len) 410 goto xdr_error; 411 412 DECODE_TAIL; 413 414 out_nfserr: 415 status = nfserrno(host_err); 416 goto out; 417 } 418 419 static __be32 420 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid) 421 { 422 DECODE_HEAD; 423 424 READ_BUF(sizeof(stateid_t)); 425 READ32(sid->si_generation); 426 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 427 428 DECODE_TAIL; 429 } 430 431 static __be32 432 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access) 433 { 434 DECODE_HEAD; 435 436 READ_BUF(4); 437 READ32(access->ac_req_access); 438 439 DECODE_TAIL; 440 } 441 442 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts) 443 { 444 DECODE_HEAD; 445 446 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8); 447 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 448 READ32(bcts->dir); 449 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker 450 * could help us figure out we should be using it. */ 451 DECODE_TAIL; 452 } 453 454 static __be32 455 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close) 456 { 457 DECODE_HEAD; 458 459 close->cl_stateowner = NULL; 460 READ_BUF(4); 461 READ32(close->cl_seqid); 462 return nfsd4_decode_stateid(argp, &close->cl_stateid); 463 464 DECODE_TAIL; 465 } 466 467 468 static __be32 469 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit) 470 { 471 DECODE_HEAD; 472 473 READ_BUF(12); 474 READ64(commit->co_offset); 475 READ32(commit->co_count); 476 477 DECODE_TAIL; 478 } 479 480 static __be32 481 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create) 482 { 483 DECODE_HEAD; 484 485 READ_BUF(4); 486 READ32(create->cr_type); 487 switch (create->cr_type) { 488 case NF4LNK: 489 READ_BUF(4); 490 READ32(create->cr_linklen); 491 READ_BUF(create->cr_linklen); 492 SAVEMEM(create->cr_linkname, create->cr_linklen); 493 break; 494 case NF4BLK: 495 case NF4CHR: 496 READ_BUF(8); 497 READ32(create->cr_specdata1); 498 READ32(create->cr_specdata2); 499 break; 500 case NF4SOCK: 501 case NF4FIFO: 502 case NF4DIR: 503 default: 504 break; 505 } 506 507 READ_BUF(4); 508 READ32(create->cr_namelen); 509 READ_BUF(create->cr_namelen); 510 SAVEMEM(create->cr_name, create->cr_namelen); 511 if ((status = check_filename(create->cr_name, create->cr_namelen, nfserr_inval))) 512 return status; 513 514 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr, 515 &create->cr_acl); 516 if (status) 517 goto out; 518 519 DECODE_TAIL; 520 } 521 522 static inline __be32 523 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr) 524 { 525 return nfsd4_decode_stateid(argp, &dr->dr_stateid); 526 } 527 528 static inline __be32 529 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr) 530 { 531 return nfsd4_decode_bitmap(argp, getattr->ga_bmval); 532 } 533 534 static __be32 535 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link) 536 { 537 DECODE_HEAD; 538 539 READ_BUF(4); 540 READ32(link->li_namelen); 541 READ_BUF(link->li_namelen); 542 SAVEMEM(link->li_name, link->li_namelen); 543 if ((status = check_filename(link->li_name, link->li_namelen, nfserr_inval))) 544 return status; 545 546 DECODE_TAIL; 547 } 548 549 static __be32 550 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock) 551 { 552 DECODE_HEAD; 553 554 lock->lk_replay_owner = NULL; 555 /* 556 * type, reclaim(boolean), offset, length, new_lock_owner(boolean) 557 */ 558 READ_BUF(28); 559 READ32(lock->lk_type); 560 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT)) 561 goto xdr_error; 562 READ32(lock->lk_reclaim); 563 READ64(lock->lk_offset); 564 READ64(lock->lk_length); 565 READ32(lock->lk_is_new); 566 567 if (lock->lk_is_new) { 568 READ_BUF(4); 569 READ32(lock->lk_new_open_seqid); 570 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid); 571 if (status) 572 return status; 573 READ_BUF(8 + sizeof(clientid_t)); 574 READ32(lock->lk_new_lock_seqid); 575 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t)); 576 READ32(lock->lk_new_owner.len); 577 READ_BUF(lock->lk_new_owner.len); 578 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len); 579 } else { 580 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid); 581 if (status) 582 return status; 583 READ_BUF(4); 584 READ32(lock->lk_old_lock_seqid); 585 } 586 587 DECODE_TAIL; 588 } 589 590 static __be32 591 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt) 592 { 593 DECODE_HEAD; 594 595 READ_BUF(32); 596 READ32(lockt->lt_type); 597 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT)) 598 goto xdr_error; 599 READ64(lockt->lt_offset); 600 READ64(lockt->lt_length); 601 COPYMEM(&lockt->lt_clientid, 8); 602 READ32(lockt->lt_owner.len); 603 READ_BUF(lockt->lt_owner.len); 604 READMEM(lockt->lt_owner.data, lockt->lt_owner.len); 605 606 DECODE_TAIL; 607 } 608 609 static __be32 610 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku) 611 { 612 DECODE_HEAD; 613 614 locku->lu_stateowner = NULL; 615 READ_BUF(8); 616 READ32(locku->lu_type); 617 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT)) 618 goto xdr_error; 619 READ32(locku->lu_seqid); 620 status = nfsd4_decode_stateid(argp, &locku->lu_stateid); 621 if (status) 622 return status; 623 READ_BUF(16); 624 READ64(locku->lu_offset); 625 READ64(locku->lu_length); 626 627 DECODE_TAIL; 628 } 629 630 static __be32 631 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup) 632 { 633 DECODE_HEAD; 634 635 READ_BUF(4); 636 READ32(lookup->lo_len); 637 READ_BUF(lookup->lo_len); 638 SAVEMEM(lookup->lo_name, lookup->lo_len); 639 if ((status = check_filename(lookup->lo_name, lookup->lo_len, nfserr_noent))) 640 return status; 641 642 DECODE_TAIL; 643 } 644 645 static __be32 646 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open) 647 { 648 DECODE_HEAD; 649 650 memset(open->op_bmval, 0, sizeof(open->op_bmval)); 651 open->op_iattr.ia_valid = 0; 652 open->op_stateowner = NULL; 653 654 /* seqid, share_access, share_deny, clientid, ownerlen */ 655 READ_BUF(16 + sizeof(clientid_t)); 656 READ32(open->op_seqid); 657 READ32(open->op_share_access); 658 READ32(open->op_share_deny); 659 COPYMEM(&open->op_clientid, sizeof(clientid_t)); 660 READ32(open->op_owner.len); 661 662 /* owner, open_flag */ 663 READ_BUF(open->op_owner.len + 4); 664 SAVEMEM(open->op_owner.data, open->op_owner.len); 665 READ32(open->op_create); 666 switch (open->op_create) { 667 case NFS4_OPEN_NOCREATE: 668 break; 669 case NFS4_OPEN_CREATE: 670 READ_BUF(4); 671 READ32(open->op_createmode); 672 switch (open->op_createmode) { 673 case NFS4_CREATE_UNCHECKED: 674 case NFS4_CREATE_GUARDED: 675 status = nfsd4_decode_fattr(argp, open->op_bmval, 676 &open->op_iattr, &open->op_acl); 677 if (status) 678 goto out; 679 break; 680 case NFS4_CREATE_EXCLUSIVE: 681 READ_BUF(8); 682 COPYMEM(open->op_verf.data, 8); 683 break; 684 case NFS4_CREATE_EXCLUSIVE4_1: 685 if (argp->minorversion < 1) 686 goto xdr_error; 687 READ_BUF(8); 688 COPYMEM(open->op_verf.data, 8); 689 status = nfsd4_decode_fattr(argp, open->op_bmval, 690 &open->op_iattr, &open->op_acl); 691 if (status) 692 goto out; 693 break; 694 default: 695 goto xdr_error; 696 } 697 break; 698 default: 699 goto xdr_error; 700 } 701 702 /* open_claim */ 703 READ_BUF(4); 704 READ32(open->op_claim_type); 705 switch (open->op_claim_type) { 706 case NFS4_OPEN_CLAIM_NULL: 707 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 708 READ_BUF(4); 709 READ32(open->op_fname.len); 710 READ_BUF(open->op_fname.len); 711 SAVEMEM(open->op_fname.data, open->op_fname.len); 712 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval))) 713 return status; 714 break; 715 case NFS4_OPEN_CLAIM_PREVIOUS: 716 READ_BUF(4); 717 READ32(open->op_delegate_type); 718 break; 719 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 720 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 721 if (status) 722 return status; 723 READ_BUF(4); 724 READ32(open->op_fname.len); 725 READ_BUF(open->op_fname.len); 726 SAVEMEM(open->op_fname.data, open->op_fname.len); 727 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval))) 728 return status; 729 break; 730 default: 731 goto xdr_error; 732 } 733 734 DECODE_TAIL; 735 } 736 737 static __be32 738 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf) 739 { 740 DECODE_HEAD; 741 742 open_conf->oc_stateowner = NULL; 743 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid); 744 if (status) 745 return status; 746 READ_BUF(4); 747 READ32(open_conf->oc_seqid); 748 749 DECODE_TAIL; 750 } 751 752 static __be32 753 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down) 754 { 755 DECODE_HEAD; 756 757 open_down->od_stateowner = NULL; 758 status = nfsd4_decode_stateid(argp, &open_down->od_stateid); 759 if (status) 760 return status; 761 READ_BUF(12); 762 READ32(open_down->od_seqid); 763 READ32(open_down->od_share_access); 764 READ32(open_down->od_share_deny); 765 766 DECODE_TAIL; 767 } 768 769 static __be32 770 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh) 771 { 772 DECODE_HEAD; 773 774 READ_BUF(4); 775 READ32(putfh->pf_fhlen); 776 if (putfh->pf_fhlen > NFS4_FHSIZE) 777 goto xdr_error; 778 READ_BUF(putfh->pf_fhlen); 779 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen); 780 781 DECODE_TAIL; 782 } 783 784 static __be32 785 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) 786 { 787 DECODE_HEAD; 788 789 status = nfsd4_decode_stateid(argp, &read->rd_stateid); 790 if (status) 791 return status; 792 READ_BUF(12); 793 READ64(read->rd_offset); 794 READ32(read->rd_length); 795 796 DECODE_TAIL; 797 } 798 799 static __be32 800 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) 801 { 802 DECODE_HEAD; 803 804 READ_BUF(24); 805 READ64(readdir->rd_cookie); 806 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); 807 READ32(readdir->rd_dircount); /* just in case you needed a useless field... */ 808 READ32(readdir->rd_maxcount); 809 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval))) 810 goto out; 811 812 DECODE_TAIL; 813 } 814 815 static __be32 816 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove) 817 { 818 DECODE_HEAD; 819 820 READ_BUF(4); 821 READ32(remove->rm_namelen); 822 READ_BUF(remove->rm_namelen); 823 SAVEMEM(remove->rm_name, remove->rm_namelen); 824 if ((status = check_filename(remove->rm_name, remove->rm_namelen, nfserr_noent))) 825 return status; 826 827 DECODE_TAIL; 828 } 829 830 static __be32 831 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename) 832 { 833 DECODE_HEAD; 834 835 READ_BUF(4); 836 READ32(rename->rn_snamelen); 837 READ_BUF(rename->rn_snamelen + 4); 838 SAVEMEM(rename->rn_sname, rename->rn_snamelen); 839 READ32(rename->rn_tnamelen); 840 READ_BUF(rename->rn_tnamelen); 841 SAVEMEM(rename->rn_tname, rename->rn_tnamelen); 842 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen, nfserr_noent))) 843 return status; 844 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen, nfserr_inval))) 845 return status; 846 847 DECODE_TAIL; 848 } 849 850 static __be32 851 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid) 852 { 853 DECODE_HEAD; 854 855 READ_BUF(sizeof(clientid_t)); 856 COPYMEM(clientid, sizeof(clientid_t)); 857 858 DECODE_TAIL; 859 } 860 861 static __be32 862 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp, 863 struct nfsd4_secinfo *secinfo) 864 { 865 DECODE_HEAD; 866 867 READ_BUF(4); 868 READ32(secinfo->si_namelen); 869 READ_BUF(secinfo->si_namelen); 870 SAVEMEM(secinfo->si_name, secinfo->si_namelen); 871 status = check_filename(secinfo->si_name, secinfo->si_namelen, 872 nfserr_noent); 873 if (status) 874 return status; 875 DECODE_TAIL; 876 } 877 878 static __be32 879 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp, 880 struct nfsd4_secinfo_no_name *sin) 881 { 882 DECODE_HEAD; 883 884 READ_BUF(4); 885 READ32(sin->sin_style); 886 DECODE_TAIL; 887 } 888 889 static __be32 890 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr) 891 { 892 __be32 status; 893 894 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid); 895 if (status) 896 return status; 897 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr, 898 &setattr->sa_acl); 899 } 900 901 static __be32 902 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid) 903 { 904 DECODE_HEAD; 905 906 READ_BUF(12); 907 COPYMEM(setclientid->se_verf.data, 8); 908 READ32(setclientid->se_namelen); 909 910 READ_BUF(setclientid->se_namelen + 8); 911 SAVEMEM(setclientid->se_name, setclientid->se_namelen); 912 READ32(setclientid->se_callback_prog); 913 READ32(setclientid->se_callback_netid_len); 914 915 READ_BUF(setclientid->se_callback_netid_len + 4); 916 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len); 917 READ32(setclientid->se_callback_addr_len); 918 919 READ_BUF(setclientid->se_callback_addr_len + 4); 920 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len); 921 READ32(setclientid->se_callback_ident); 922 923 DECODE_TAIL; 924 } 925 926 static __be32 927 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c) 928 { 929 DECODE_HEAD; 930 931 READ_BUF(8 + sizeof(nfs4_verifier)); 932 COPYMEM(&scd_c->sc_clientid, 8); 933 COPYMEM(&scd_c->sc_confirm, sizeof(nfs4_verifier)); 934 935 DECODE_TAIL; 936 } 937 938 /* Also used for NVERIFY */ 939 static __be32 940 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify) 941 { 942 #if 0 943 struct nfsd4_compoundargs save = { 944 .p = argp->p, 945 .end = argp->end, 946 .rqstp = argp->rqstp, 947 }; 948 u32 ve_bmval[2]; 949 struct iattr ve_iattr; /* request */ 950 struct nfs4_acl *ve_acl; /* request */ 951 #endif 952 DECODE_HEAD; 953 954 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval))) 955 goto out; 956 957 /* For convenience's sake, we compare raw xdr'd attributes in 958 * nfsd4_proc_verify; however we still decode here just to return 959 * correct error in case of bad xdr. */ 960 #if 0 961 status = nfsd4_decode_fattr(ve_bmval, &ve_iattr, &ve_acl); 962 if (status == nfserr_inval) { 963 status = nfserrno(status); 964 goto out; 965 } 966 #endif 967 READ_BUF(4); 968 READ32(verify->ve_attrlen); 969 READ_BUF(verify->ve_attrlen); 970 SAVEMEM(verify->ve_attrval, verify->ve_attrlen); 971 972 DECODE_TAIL; 973 } 974 975 static __be32 976 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write) 977 { 978 int avail; 979 int v; 980 int len; 981 DECODE_HEAD; 982 983 status = nfsd4_decode_stateid(argp, &write->wr_stateid); 984 if (status) 985 return status; 986 READ_BUF(16); 987 READ64(write->wr_offset); 988 READ32(write->wr_stable_how); 989 if (write->wr_stable_how > 2) 990 goto xdr_error; 991 READ32(write->wr_buflen); 992 993 /* Sorry .. no magic macros for this.. * 994 * READ_BUF(write->wr_buflen); 995 * SAVEMEM(write->wr_buf, write->wr_buflen); 996 */ 997 avail = (char*)argp->end - (char*)argp->p; 998 if (avail + argp->pagelen < write->wr_buflen) { 999 dprintk("NFSD: xdr error (%s:%d)\n", 1000 __FILE__, __LINE__); 1001 goto xdr_error; 1002 } 1003 argp->rqstp->rq_vec[0].iov_base = p; 1004 argp->rqstp->rq_vec[0].iov_len = avail; 1005 v = 0; 1006 len = write->wr_buflen; 1007 while (len > argp->rqstp->rq_vec[v].iov_len) { 1008 len -= argp->rqstp->rq_vec[v].iov_len; 1009 v++; 1010 argp->rqstp->rq_vec[v].iov_base = page_address(argp->pagelist[0]); 1011 argp->pagelist++; 1012 if (argp->pagelen >= PAGE_SIZE) { 1013 argp->rqstp->rq_vec[v].iov_len = PAGE_SIZE; 1014 argp->pagelen -= PAGE_SIZE; 1015 } else { 1016 argp->rqstp->rq_vec[v].iov_len = argp->pagelen; 1017 argp->pagelen -= len; 1018 } 1019 } 1020 argp->end = (__be32*) (argp->rqstp->rq_vec[v].iov_base + argp->rqstp->rq_vec[v].iov_len); 1021 argp->p = (__be32*) (argp->rqstp->rq_vec[v].iov_base + (XDR_QUADLEN(len) << 2)); 1022 argp->rqstp->rq_vec[v].iov_len = len; 1023 write->wr_vlen = v+1; 1024 1025 DECODE_TAIL; 1026 } 1027 1028 static __be32 1029 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner) 1030 { 1031 DECODE_HEAD; 1032 1033 READ_BUF(12); 1034 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t)); 1035 READ32(rlockowner->rl_owner.len); 1036 READ_BUF(rlockowner->rl_owner.len); 1037 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len); 1038 1039 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid)) 1040 return nfserr_inval; 1041 DECODE_TAIL; 1042 } 1043 1044 static __be32 1045 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp, 1046 struct nfsd4_exchange_id *exid) 1047 { 1048 int dummy, tmp; 1049 DECODE_HEAD; 1050 1051 READ_BUF(NFS4_VERIFIER_SIZE); 1052 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE); 1053 1054 READ_BUF(4); 1055 READ32(exid->clname.len); 1056 1057 READ_BUF(exid->clname.len); 1058 SAVEMEM(exid->clname.data, exid->clname.len); 1059 1060 READ_BUF(4); 1061 READ32(exid->flags); 1062 1063 /* Ignore state_protect4_a */ 1064 READ_BUF(4); 1065 READ32(exid->spa_how); 1066 switch (exid->spa_how) { 1067 case SP4_NONE: 1068 break; 1069 case SP4_MACH_CRED: 1070 /* spo_must_enforce */ 1071 READ_BUF(4); 1072 READ32(dummy); 1073 READ_BUF(dummy * 4); 1074 p += dummy; 1075 1076 /* spo_must_allow */ 1077 READ_BUF(4); 1078 READ32(dummy); 1079 READ_BUF(dummy * 4); 1080 p += dummy; 1081 break; 1082 case SP4_SSV: 1083 /* ssp_ops */ 1084 READ_BUF(4); 1085 READ32(dummy); 1086 READ_BUF(dummy * 4); 1087 p += dummy; 1088 1089 READ_BUF(4); 1090 READ32(dummy); 1091 READ_BUF(dummy * 4); 1092 p += dummy; 1093 1094 /* ssp_hash_algs<> */ 1095 READ_BUF(4); 1096 READ32(tmp); 1097 while (tmp--) { 1098 READ_BUF(4); 1099 READ32(dummy); 1100 READ_BUF(dummy); 1101 p += XDR_QUADLEN(dummy); 1102 } 1103 1104 /* ssp_encr_algs<> */ 1105 READ_BUF(4); 1106 READ32(tmp); 1107 while (tmp--) { 1108 READ_BUF(4); 1109 READ32(dummy); 1110 READ_BUF(dummy); 1111 p += XDR_QUADLEN(dummy); 1112 } 1113 1114 /* ssp_window and ssp_num_gss_handles */ 1115 READ_BUF(8); 1116 READ32(dummy); 1117 READ32(dummy); 1118 break; 1119 default: 1120 goto xdr_error; 1121 } 1122 1123 /* Ignore Implementation ID */ 1124 READ_BUF(4); /* nfs_impl_id4 array length */ 1125 READ32(dummy); 1126 1127 if (dummy > 1) 1128 goto xdr_error; 1129 1130 if (dummy == 1) { 1131 /* nii_domain */ 1132 READ_BUF(4); 1133 READ32(dummy); 1134 READ_BUF(dummy); 1135 p += XDR_QUADLEN(dummy); 1136 1137 /* nii_name */ 1138 READ_BUF(4); 1139 READ32(dummy); 1140 READ_BUF(dummy); 1141 p += XDR_QUADLEN(dummy); 1142 1143 /* nii_date */ 1144 READ_BUF(12); 1145 p += 3; 1146 } 1147 DECODE_TAIL; 1148 } 1149 1150 static __be32 1151 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp, 1152 struct nfsd4_create_session *sess) 1153 { 1154 DECODE_HEAD; 1155 1156 u32 dummy; 1157 char *machine_name; 1158 int i; 1159 int nr_secflavs; 1160 1161 READ_BUF(16); 1162 COPYMEM(&sess->clientid, 8); 1163 READ32(sess->seqid); 1164 READ32(sess->flags); 1165 1166 /* Fore channel attrs */ 1167 READ_BUF(28); 1168 READ32(dummy); /* headerpadsz is always 0 */ 1169 READ32(sess->fore_channel.maxreq_sz); 1170 READ32(sess->fore_channel.maxresp_sz); 1171 READ32(sess->fore_channel.maxresp_cached); 1172 READ32(sess->fore_channel.maxops); 1173 READ32(sess->fore_channel.maxreqs); 1174 READ32(sess->fore_channel.nr_rdma_attrs); 1175 if (sess->fore_channel.nr_rdma_attrs == 1) { 1176 READ_BUF(4); 1177 READ32(sess->fore_channel.rdma_attrs); 1178 } else if (sess->fore_channel.nr_rdma_attrs > 1) { 1179 dprintk("Too many fore channel attr bitmaps!\n"); 1180 goto xdr_error; 1181 } 1182 1183 /* Back channel attrs */ 1184 READ_BUF(28); 1185 READ32(dummy); /* headerpadsz is always 0 */ 1186 READ32(sess->back_channel.maxreq_sz); 1187 READ32(sess->back_channel.maxresp_sz); 1188 READ32(sess->back_channel.maxresp_cached); 1189 READ32(sess->back_channel.maxops); 1190 READ32(sess->back_channel.maxreqs); 1191 READ32(sess->back_channel.nr_rdma_attrs); 1192 if (sess->back_channel.nr_rdma_attrs == 1) { 1193 READ_BUF(4); 1194 READ32(sess->back_channel.rdma_attrs); 1195 } else if (sess->back_channel.nr_rdma_attrs > 1) { 1196 dprintk("Too many back channel attr bitmaps!\n"); 1197 goto xdr_error; 1198 } 1199 1200 READ_BUF(8); 1201 READ32(sess->callback_prog); 1202 1203 /* callback_sec_params4 */ 1204 READ32(nr_secflavs); 1205 for (i = 0; i < nr_secflavs; ++i) { 1206 READ_BUF(4); 1207 READ32(dummy); 1208 switch (dummy) { 1209 case RPC_AUTH_NULL: 1210 /* Nothing to read */ 1211 break; 1212 case RPC_AUTH_UNIX: 1213 READ_BUF(8); 1214 /* stamp */ 1215 READ32(dummy); 1216 1217 /* machine name */ 1218 READ32(dummy); 1219 READ_BUF(dummy); 1220 SAVEMEM(machine_name, dummy); 1221 1222 /* uid, gid */ 1223 READ_BUF(8); 1224 READ32(sess->uid); 1225 READ32(sess->gid); 1226 1227 /* more gids */ 1228 READ_BUF(4); 1229 READ32(dummy); 1230 READ_BUF(dummy * 4); 1231 break; 1232 case RPC_AUTH_GSS: 1233 dprintk("RPC_AUTH_GSS callback secflavor " 1234 "not supported!\n"); 1235 READ_BUF(8); 1236 /* gcbp_service */ 1237 READ32(dummy); 1238 /* gcbp_handle_from_server */ 1239 READ32(dummy); 1240 READ_BUF(dummy); 1241 p += XDR_QUADLEN(dummy); 1242 /* gcbp_handle_from_client */ 1243 READ_BUF(4); 1244 READ32(dummy); 1245 READ_BUF(dummy); 1246 break; 1247 default: 1248 dprintk("Illegal callback secflavor\n"); 1249 return nfserr_inval; 1250 } 1251 } 1252 DECODE_TAIL; 1253 } 1254 1255 static __be32 1256 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp, 1257 struct nfsd4_destroy_session *destroy_session) 1258 { 1259 DECODE_HEAD; 1260 READ_BUF(NFS4_MAX_SESSIONID_LEN); 1261 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1262 1263 DECODE_TAIL; 1264 } 1265 1266 static __be32 1267 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp, 1268 struct nfsd4_free_stateid *free_stateid) 1269 { 1270 DECODE_HEAD; 1271 1272 READ_BUF(sizeof(stateid_t)); 1273 READ32(free_stateid->fr_stateid.si_generation); 1274 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t)); 1275 1276 DECODE_TAIL; 1277 } 1278 1279 static __be32 1280 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp, 1281 struct nfsd4_sequence *seq) 1282 { 1283 DECODE_HEAD; 1284 1285 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16); 1286 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1287 READ32(seq->seqid); 1288 READ32(seq->slotid); 1289 READ32(seq->maxslots); 1290 READ32(seq->cachethis); 1291 1292 DECODE_TAIL; 1293 } 1294 1295 static __be32 1296 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid) 1297 { 1298 unsigned int nbytes; 1299 stateid_t si; 1300 int i; 1301 __be32 *p; 1302 __be32 status; 1303 1304 READ_BUF(4); 1305 test_stateid->ts_num_ids = ntohl(*p++); 1306 1307 nbytes = test_stateid->ts_num_ids * sizeof(stateid_t); 1308 if (nbytes > (u32)((char *)argp->end - (char *)argp->p)) 1309 goto xdr_error; 1310 1311 test_stateid->ts_saved_args = argp; 1312 save_buf(argp, &test_stateid->ts_savedp); 1313 1314 for (i = 0; i < test_stateid->ts_num_ids; i++) { 1315 status = nfsd4_decode_stateid(argp, &si); 1316 if (status) 1317 return status; 1318 } 1319 1320 status = 0; 1321 out: 1322 return status; 1323 xdr_error: 1324 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__); 1325 status = nfserr_bad_xdr; 1326 goto out; 1327 } 1328 1329 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc) 1330 { 1331 DECODE_HEAD; 1332 1333 READ_BUF(4); 1334 READ32(rc->rca_one_fs); 1335 1336 DECODE_TAIL; 1337 } 1338 1339 static __be32 1340 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p) 1341 { 1342 return nfs_ok; 1343 } 1344 1345 static __be32 1346 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p) 1347 { 1348 return nfserr_notsupp; 1349 } 1350 1351 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *); 1352 1353 static nfsd4_dec nfsd4_dec_ops[] = { 1354 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1355 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1356 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1357 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1358 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1359 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1360 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1361 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1362 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1363 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1364 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1365 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1366 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1367 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1368 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1369 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1370 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1371 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm, 1372 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1373 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1374 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_noop, 1375 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1376 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1377 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1378 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1379 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1380 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1381 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew, 1382 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1383 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1384 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1385 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1386 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid, 1387 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm, 1388 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1389 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1390 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner, 1391 }; 1392 1393 static nfsd4_dec nfsd41_dec_ops[] = { 1394 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1395 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1396 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1397 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1398 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1399 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1400 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1401 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1402 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1403 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1404 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1405 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1406 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1407 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1408 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1409 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1410 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1411 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_notsupp, 1412 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1413 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1414 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_notsupp, 1415 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1416 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1417 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1418 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1419 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1420 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1421 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_notsupp, 1422 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1423 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1424 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1425 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1426 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp, 1427 [OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp, 1428 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1429 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1430 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_notsupp, 1431 1432 /* new operations for NFSv4.1 */ 1433 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_notsupp, 1434 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session, 1435 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id, 1436 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session, 1437 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session, 1438 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid, 1439 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1440 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp, 1441 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1442 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp, 1443 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp, 1444 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp, 1445 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name, 1446 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence, 1447 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp, 1448 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid, 1449 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1450 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp, 1451 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete, 1452 }; 1453 1454 struct nfsd4_minorversion_ops { 1455 nfsd4_dec *decoders; 1456 int nops; 1457 }; 1458 1459 static struct nfsd4_minorversion_ops nfsd4_minorversion[] = { 1460 [0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) }, 1461 [1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) }, 1462 }; 1463 1464 static __be32 1465 nfsd4_decode_compound(struct nfsd4_compoundargs *argp) 1466 { 1467 DECODE_HEAD; 1468 struct nfsd4_op *op; 1469 struct nfsd4_minorversion_ops *ops; 1470 bool cachethis = false; 1471 int i; 1472 1473 /* 1474 * XXX: According to spec, we should check the tag 1475 * for UTF-8 compliance. I'm postponing this for 1476 * now because it seems that some clients do use 1477 * binary tags. 1478 */ 1479 READ_BUF(4); 1480 READ32(argp->taglen); 1481 READ_BUF(argp->taglen + 8); 1482 SAVEMEM(argp->tag, argp->taglen); 1483 READ32(argp->minorversion); 1484 READ32(argp->opcnt); 1485 1486 if (argp->taglen > NFSD4_MAX_TAGLEN) 1487 goto xdr_error; 1488 if (argp->opcnt > 100) 1489 goto xdr_error; 1490 1491 if (argp->opcnt > ARRAY_SIZE(argp->iops)) { 1492 argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL); 1493 if (!argp->ops) { 1494 argp->ops = argp->iops; 1495 dprintk("nfsd: couldn't allocate room for COMPOUND\n"); 1496 goto xdr_error; 1497 } 1498 } 1499 1500 if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion)) 1501 argp->opcnt = 0; 1502 1503 ops = &nfsd4_minorversion[argp->minorversion]; 1504 for (i = 0; i < argp->opcnt; i++) { 1505 op = &argp->ops[i]; 1506 op->replay = NULL; 1507 1508 /* 1509 * We can't use READ_BUF() here because we need to handle 1510 * a missing opcode as an OP_WRITE + 1. So we need to check 1511 * to see if we're truly at the end of our buffer or if there 1512 * is another page we need to flip to. 1513 */ 1514 1515 if (argp->p == argp->end) { 1516 if (argp->pagelen < 4) { 1517 /* There isn't an opcode still on the wire */ 1518 op->opnum = OP_WRITE + 1; 1519 op->status = nfserr_bad_xdr; 1520 argp->opcnt = i+1; 1521 break; 1522 } 1523 1524 /* 1525 * False alarm. We just hit a page boundary, but there 1526 * is still data available. Move pointer across page 1527 * boundary. *snip from READ_BUF* 1528 */ 1529 argp->p = page_address(argp->pagelist[0]); 1530 argp->pagelist++; 1531 if (argp->pagelen < PAGE_SIZE) { 1532 argp->end = argp->p + (argp->pagelen>>2); 1533 argp->pagelen = 0; 1534 } else { 1535 argp->end = argp->p + (PAGE_SIZE>>2); 1536 argp->pagelen -= PAGE_SIZE; 1537 } 1538 } 1539 op->opnum = ntohl(*argp->p++); 1540 1541 if (op->opnum >= FIRST_NFS4_OP && op->opnum <= LAST_NFS4_OP) 1542 op->status = ops->decoders[op->opnum](argp, &op->u); 1543 else { 1544 op->opnum = OP_ILLEGAL; 1545 op->status = nfserr_op_illegal; 1546 } 1547 1548 if (op->status) { 1549 argp->opcnt = i+1; 1550 break; 1551 } 1552 /* 1553 * We'll try to cache the result in the DRC if any one 1554 * op in the compound wants to be cached: 1555 */ 1556 cachethis |= nfsd4_cache_this_op(op); 1557 } 1558 /* Sessions make the DRC unnecessary: */ 1559 if (argp->minorversion) 1560 cachethis = false; 1561 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE; 1562 1563 DECODE_TAIL; 1564 } 1565 1566 #define WRITE32(n) *p++ = htonl(n) 1567 #define WRITE64(n) do { \ 1568 *p++ = htonl((u32)((n) >> 32)); \ 1569 *p++ = htonl((u32)(n)); \ 1570 } while (0) 1571 #define WRITEMEM(ptr,nbytes) do { if (nbytes > 0) { \ 1572 *(p + XDR_QUADLEN(nbytes) -1) = 0; \ 1573 memcpy(p, ptr, nbytes); \ 1574 p += XDR_QUADLEN(nbytes); \ 1575 }} while (0) 1576 1577 static void write32(__be32 **p, u32 n) 1578 { 1579 *(*p)++ = n; 1580 } 1581 1582 static void write64(__be32 **p, u64 n) 1583 { 1584 write32(p, (u32)(n >> 32)); 1585 write32(p, (u32)n); 1586 } 1587 1588 static void write_change(__be32 **p, struct kstat *stat, struct inode *inode) 1589 { 1590 if (IS_I_VERSION(inode)) { 1591 write64(p, inode->i_version); 1592 } else { 1593 write32(p, stat->ctime.tv_sec); 1594 write32(p, stat->ctime.tv_nsec); 1595 } 1596 } 1597 1598 static void write_cinfo(__be32 **p, struct nfsd4_change_info *c) 1599 { 1600 write32(p, c->atomic); 1601 if (c->change_supported) { 1602 write64(p, c->before_change); 1603 write64(p, c->after_change); 1604 } else { 1605 write32(p, c->before_ctime_sec); 1606 write32(p, c->before_ctime_nsec); 1607 write32(p, c->after_ctime_sec); 1608 write32(p, c->after_ctime_nsec); 1609 } 1610 } 1611 1612 #define RESERVE_SPACE(nbytes) do { \ 1613 p = resp->p; \ 1614 BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end); \ 1615 } while (0) 1616 #define ADJUST_ARGS() resp->p = p 1617 1618 /* 1619 * Header routine to setup seqid operation replay cache 1620 */ 1621 #define ENCODE_SEQID_OP_HEAD \ 1622 __be32 *save; \ 1623 \ 1624 save = resp->p; 1625 1626 /* 1627 * Routine for encoding the result of a "seqid-mutating" NFSv4 operation. This 1628 * is where sequence id's are incremented, and the replay cache is filled. 1629 * Note that we increment sequence id's here, at the last moment, so we're sure 1630 * we know whether the error to be returned is a sequence id mutating error. 1631 */ 1632 1633 #define ENCODE_SEQID_OP_TAIL(stateowner) do { \ 1634 if (seqid_mutating_err(nfserr) && stateowner) { \ 1635 stateowner->so_seqid++; \ 1636 stateowner->so_replay.rp_status = nfserr; \ 1637 stateowner->so_replay.rp_buflen = \ 1638 (((char *)(resp)->p - (char *)save)); \ 1639 memcpy(stateowner->so_replay.rp_buf, save, \ 1640 stateowner->so_replay.rp_buflen); \ 1641 } } while (0); 1642 1643 /* Encode as an array of strings the string given with components 1644 * separated @sep. 1645 */ 1646 static __be32 nfsd4_encode_components(char sep, char *components, 1647 __be32 **pp, int *buflen) 1648 { 1649 __be32 *p = *pp; 1650 __be32 *countp = p; 1651 int strlen, count=0; 1652 char *str, *end; 1653 1654 dprintk("nfsd4_encode_components(%s)\n", components); 1655 if ((*buflen -= 4) < 0) 1656 return nfserr_resource; 1657 WRITE32(0); /* We will fill this in with @count later */ 1658 end = str = components; 1659 while (*end) { 1660 for (; *end && (*end != sep); end++) 1661 ; /* Point to end of component */ 1662 strlen = end - str; 1663 if (strlen) { 1664 if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0) 1665 return nfserr_resource; 1666 WRITE32(strlen); 1667 WRITEMEM(str, strlen); 1668 count++; 1669 } 1670 else 1671 end++; 1672 str = end; 1673 } 1674 *pp = p; 1675 p = countp; 1676 WRITE32(count); 1677 return 0; 1678 } 1679 1680 /* 1681 * encode a location element of a fs_locations structure 1682 */ 1683 static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location, 1684 __be32 **pp, int *buflen) 1685 { 1686 __be32 status; 1687 __be32 *p = *pp; 1688 1689 status = nfsd4_encode_components(':', location->hosts, &p, buflen); 1690 if (status) 1691 return status; 1692 status = nfsd4_encode_components('/', location->path, &p, buflen); 1693 if (status) 1694 return status; 1695 *pp = p; 1696 return 0; 1697 } 1698 1699 /* 1700 * Return the path to an export point in the pseudo filesystem namespace 1701 * Returned string is safe to use as long as the caller holds a reference 1702 * to @exp. 1703 */ 1704 static char *nfsd4_path(struct svc_rqst *rqstp, struct svc_export *exp, __be32 *stat) 1705 { 1706 struct svc_fh tmp_fh; 1707 char *path = NULL, *rootpath; 1708 size_t rootlen; 1709 1710 fh_init(&tmp_fh, NFS4_FHSIZE); 1711 *stat = exp_pseudoroot(rqstp, &tmp_fh); 1712 if (*stat) 1713 return NULL; 1714 rootpath = tmp_fh.fh_export->ex_pathname; 1715 1716 path = exp->ex_pathname; 1717 1718 rootlen = strlen(rootpath); 1719 if (strncmp(path, rootpath, rootlen)) { 1720 dprintk("nfsd: fs_locations failed;" 1721 "%s is not contained in %s\n", path, rootpath); 1722 *stat = nfserr_notsupp; 1723 path = NULL; 1724 goto out; 1725 } 1726 path += rootlen; 1727 out: 1728 fh_put(&tmp_fh); 1729 return path; 1730 } 1731 1732 /* 1733 * encode a fs_locations structure 1734 */ 1735 static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp, 1736 struct svc_export *exp, 1737 __be32 **pp, int *buflen) 1738 { 1739 __be32 status; 1740 int i; 1741 __be32 *p = *pp; 1742 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs; 1743 char *root = nfsd4_path(rqstp, exp, &status); 1744 1745 if (status) 1746 return status; 1747 status = nfsd4_encode_components('/', root, &p, buflen); 1748 if (status) 1749 return status; 1750 if ((*buflen -= 4) < 0) 1751 return nfserr_resource; 1752 WRITE32(fslocs->locations_count); 1753 for (i=0; i<fslocs->locations_count; i++) { 1754 status = nfsd4_encode_fs_location4(&fslocs->locations[i], 1755 &p, buflen); 1756 if (status) 1757 return status; 1758 } 1759 *pp = p; 1760 return 0; 1761 } 1762 1763 static u32 nfs4_ftypes[16] = { 1764 NF4BAD, NF4FIFO, NF4CHR, NF4BAD, 1765 NF4DIR, NF4BAD, NF4BLK, NF4BAD, 1766 NF4REG, NF4BAD, NF4LNK, NF4BAD, 1767 NF4SOCK, NF4BAD, NF4LNK, NF4BAD, 1768 }; 1769 1770 static __be32 1771 nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, uid_t id, int group, 1772 __be32 **p, int *buflen) 1773 { 1774 int status; 1775 1776 if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4) 1777 return nfserr_resource; 1778 if (whotype != NFS4_ACL_WHO_NAMED) 1779 status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1)); 1780 else if (group) 1781 status = nfsd_map_gid_to_name(rqstp, id, (u8 *)(*p + 1)); 1782 else 1783 status = nfsd_map_uid_to_name(rqstp, id, (u8 *)(*p + 1)); 1784 if (status < 0) 1785 return nfserrno(status); 1786 *p = xdr_encode_opaque(*p, NULL, status); 1787 *buflen -= (XDR_QUADLEN(status) << 2) + 4; 1788 BUG_ON(*buflen < 0); 1789 return 0; 1790 } 1791 1792 static inline __be32 1793 nfsd4_encode_user(struct svc_rqst *rqstp, uid_t uid, __be32 **p, int *buflen) 1794 { 1795 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, uid, 0, p, buflen); 1796 } 1797 1798 static inline __be32 1799 nfsd4_encode_group(struct svc_rqst *rqstp, uid_t gid, __be32 **p, int *buflen) 1800 { 1801 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, gid, 1, p, buflen); 1802 } 1803 1804 static inline __be32 1805 nfsd4_encode_aclname(struct svc_rqst *rqstp, int whotype, uid_t id, int group, 1806 __be32 **p, int *buflen) 1807 { 1808 return nfsd4_encode_name(rqstp, whotype, id, group, p, buflen); 1809 } 1810 1811 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \ 1812 FATTR4_WORD0_RDATTR_ERROR) 1813 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID 1814 1815 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err) 1816 { 1817 /* As per referral draft: */ 1818 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS || 1819 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) { 1820 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR || 1821 *bmval0 & FATTR4_WORD0_FS_LOCATIONS) 1822 *rdattr_err = NFSERR_MOVED; 1823 else 1824 return nfserr_moved; 1825 } 1826 *bmval0 &= WORD0_ABSENT_FS_ATTRS; 1827 *bmval1 &= WORD1_ABSENT_FS_ATTRS; 1828 return 0; 1829 } 1830 1831 /* 1832 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle 1833 * ourselves. 1834 * 1835 * @countp is the buffer size in _words_; upon successful return this becomes 1836 * replaced with the number of words written. 1837 */ 1838 __be32 1839 nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp, 1840 struct dentry *dentry, __be32 *buffer, int *countp, u32 *bmval, 1841 struct svc_rqst *rqstp, int ignore_crossmnt) 1842 { 1843 u32 bmval0 = bmval[0]; 1844 u32 bmval1 = bmval[1]; 1845 u32 bmval2 = bmval[2]; 1846 struct kstat stat; 1847 struct svc_fh tempfh; 1848 struct kstatfs statfs; 1849 int buflen = *countp << 2; 1850 __be32 *attrlenp; 1851 u32 dummy; 1852 u64 dummy64; 1853 u32 rdattr_err = 0; 1854 __be32 *p = buffer; 1855 __be32 status; 1856 int err; 1857 int aclsupport = 0; 1858 struct nfs4_acl *acl = NULL; 1859 struct nfsd4_compoundres *resp = rqstp->rq_resp; 1860 u32 minorversion = resp->cstate.minorversion; 1861 struct path path = { 1862 .mnt = exp->ex_path.mnt, 1863 .dentry = dentry, 1864 }; 1865 1866 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1); 1867 BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion)); 1868 BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion)); 1869 BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion)); 1870 1871 if (exp->ex_fslocs.migrated) { 1872 BUG_ON(bmval[2]); 1873 status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err); 1874 if (status) 1875 goto out; 1876 } 1877 1878 err = vfs_getattr(exp->ex_path.mnt, dentry, &stat); 1879 if (err) 1880 goto out_nfserr; 1881 if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL | 1882 FATTR4_WORD0_MAXNAME)) || 1883 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE | 1884 FATTR4_WORD1_SPACE_TOTAL))) { 1885 err = vfs_statfs(&path, &statfs); 1886 if (err) 1887 goto out_nfserr; 1888 } 1889 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) { 1890 fh_init(&tempfh, NFS4_FHSIZE); 1891 status = fh_compose(&tempfh, exp, dentry, NULL); 1892 if (status) 1893 goto out; 1894 fhp = &tempfh; 1895 } 1896 if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT 1897 | FATTR4_WORD0_SUPPORTED_ATTRS)) { 1898 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl); 1899 aclsupport = (err == 0); 1900 if (bmval0 & FATTR4_WORD0_ACL) { 1901 if (err == -EOPNOTSUPP) 1902 bmval0 &= ~FATTR4_WORD0_ACL; 1903 else if (err == -EINVAL) { 1904 status = nfserr_attrnotsupp; 1905 goto out; 1906 } else if (err != 0) 1907 goto out_nfserr; 1908 } 1909 } 1910 1911 if (bmval2) { 1912 if ((buflen -= 16) < 0) 1913 goto out_resource; 1914 WRITE32(3); 1915 WRITE32(bmval0); 1916 WRITE32(bmval1); 1917 WRITE32(bmval2); 1918 } else if (bmval1) { 1919 if ((buflen -= 12) < 0) 1920 goto out_resource; 1921 WRITE32(2); 1922 WRITE32(bmval0); 1923 WRITE32(bmval1); 1924 } else { 1925 if ((buflen -= 8) < 0) 1926 goto out_resource; 1927 WRITE32(1); 1928 WRITE32(bmval0); 1929 } 1930 attrlenp = p++; /* to be backfilled later */ 1931 1932 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 1933 u32 word0 = nfsd_suppattrs0(minorversion); 1934 u32 word1 = nfsd_suppattrs1(minorversion); 1935 u32 word2 = nfsd_suppattrs2(minorversion); 1936 1937 if (!aclsupport) 1938 word0 &= ~FATTR4_WORD0_ACL; 1939 if (!word2) { 1940 if ((buflen -= 12) < 0) 1941 goto out_resource; 1942 WRITE32(2); 1943 WRITE32(word0); 1944 WRITE32(word1); 1945 } else { 1946 if ((buflen -= 16) < 0) 1947 goto out_resource; 1948 WRITE32(3); 1949 WRITE32(word0); 1950 WRITE32(word1); 1951 WRITE32(word2); 1952 } 1953 } 1954 if (bmval0 & FATTR4_WORD0_TYPE) { 1955 if ((buflen -= 4) < 0) 1956 goto out_resource; 1957 dummy = nfs4_ftypes[(stat.mode & S_IFMT) >> 12]; 1958 if (dummy == NF4BAD) 1959 goto out_serverfault; 1960 WRITE32(dummy); 1961 } 1962 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) { 1963 if ((buflen -= 4) < 0) 1964 goto out_resource; 1965 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK) 1966 WRITE32(NFS4_FH_PERSISTENT); 1967 else 1968 WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME); 1969 } 1970 if (bmval0 & FATTR4_WORD0_CHANGE) { 1971 if ((buflen -= 8) < 0) 1972 goto out_resource; 1973 write_change(&p, &stat, dentry->d_inode); 1974 } 1975 if (bmval0 & FATTR4_WORD0_SIZE) { 1976 if ((buflen -= 8) < 0) 1977 goto out_resource; 1978 WRITE64(stat.size); 1979 } 1980 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) { 1981 if ((buflen -= 4) < 0) 1982 goto out_resource; 1983 WRITE32(1); 1984 } 1985 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) { 1986 if ((buflen -= 4) < 0) 1987 goto out_resource; 1988 WRITE32(1); 1989 } 1990 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) { 1991 if ((buflen -= 4) < 0) 1992 goto out_resource; 1993 WRITE32(0); 1994 } 1995 if (bmval0 & FATTR4_WORD0_FSID) { 1996 if ((buflen -= 16) < 0) 1997 goto out_resource; 1998 if (exp->ex_fslocs.migrated) { 1999 WRITE64(NFS4_REFERRAL_FSID_MAJOR); 2000 WRITE64(NFS4_REFERRAL_FSID_MINOR); 2001 } else switch(fsid_source(fhp)) { 2002 case FSIDSOURCE_FSID: 2003 WRITE64((u64)exp->ex_fsid); 2004 WRITE64((u64)0); 2005 break; 2006 case FSIDSOURCE_DEV: 2007 WRITE32(0); 2008 WRITE32(MAJOR(stat.dev)); 2009 WRITE32(0); 2010 WRITE32(MINOR(stat.dev)); 2011 break; 2012 case FSIDSOURCE_UUID: 2013 WRITEMEM(exp->ex_uuid, 16); 2014 break; 2015 } 2016 } 2017 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) { 2018 if ((buflen -= 4) < 0) 2019 goto out_resource; 2020 WRITE32(0); 2021 } 2022 if (bmval0 & FATTR4_WORD0_LEASE_TIME) { 2023 if ((buflen -= 4) < 0) 2024 goto out_resource; 2025 WRITE32(nfsd4_lease); 2026 } 2027 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) { 2028 if ((buflen -= 4) < 0) 2029 goto out_resource; 2030 WRITE32(rdattr_err); 2031 } 2032 if (bmval0 & FATTR4_WORD0_ACL) { 2033 struct nfs4_ace *ace; 2034 2035 if (acl == NULL) { 2036 if ((buflen -= 4) < 0) 2037 goto out_resource; 2038 2039 WRITE32(0); 2040 goto out_acl; 2041 } 2042 if ((buflen -= 4) < 0) 2043 goto out_resource; 2044 WRITE32(acl->naces); 2045 2046 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) { 2047 if ((buflen -= 4*3) < 0) 2048 goto out_resource; 2049 WRITE32(ace->type); 2050 WRITE32(ace->flag); 2051 WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL); 2052 status = nfsd4_encode_aclname(rqstp, ace->whotype, 2053 ace->who, ace->flag & NFS4_ACE_IDENTIFIER_GROUP, 2054 &p, &buflen); 2055 if (status == nfserr_resource) 2056 goto out_resource; 2057 if (status) 2058 goto out; 2059 } 2060 } 2061 out_acl: 2062 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) { 2063 if ((buflen -= 4) < 0) 2064 goto out_resource; 2065 WRITE32(aclsupport ? 2066 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0); 2067 } 2068 if (bmval0 & FATTR4_WORD0_CANSETTIME) { 2069 if ((buflen -= 4) < 0) 2070 goto out_resource; 2071 WRITE32(1); 2072 } 2073 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) { 2074 if ((buflen -= 4) < 0) 2075 goto out_resource; 2076 WRITE32(1); 2077 } 2078 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) { 2079 if ((buflen -= 4) < 0) 2080 goto out_resource; 2081 WRITE32(1); 2082 } 2083 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) { 2084 if ((buflen -= 4) < 0) 2085 goto out_resource; 2086 WRITE32(1); 2087 } 2088 if (bmval0 & FATTR4_WORD0_FILEHANDLE) { 2089 buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4; 2090 if (buflen < 0) 2091 goto out_resource; 2092 WRITE32(fhp->fh_handle.fh_size); 2093 WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size); 2094 } 2095 if (bmval0 & FATTR4_WORD0_FILEID) { 2096 if ((buflen -= 8) < 0) 2097 goto out_resource; 2098 WRITE64(stat.ino); 2099 } 2100 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) { 2101 if ((buflen -= 8) < 0) 2102 goto out_resource; 2103 WRITE64((u64) statfs.f_ffree); 2104 } 2105 if (bmval0 & FATTR4_WORD0_FILES_FREE) { 2106 if ((buflen -= 8) < 0) 2107 goto out_resource; 2108 WRITE64((u64) statfs.f_ffree); 2109 } 2110 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) { 2111 if ((buflen -= 8) < 0) 2112 goto out_resource; 2113 WRITE64((u64) statfs.f_files); 2114 } 2115 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) { 2116 status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen); 2117 if (status == nfserr_resource) 2118 goto out_resource; 2119 if (status) 2120 goto out; 2121 } 2122 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) { 2123 if ((buflen -= 4) < 0) 2124 goto out_resource; 2125 WRITE32(1); 2126 } 2127 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) { 2128 if ((buflen -= 8) < 0) 2129 goto out_resource; 2130 WRITE64(~(u64)0); 2131 } 2132 if (bmval0 & FATTR4_WORD0_MAXLINK) { 2133 if ((buflen -= 4) < 0) 2134 goto out_resource; 2135 WRITE32(255); 2136 } 2137 if (bmval0 & FATTR4_WORD0_MAXNAME) { 2138 if ((buflen -= 4) < 0) 2139 goto out_resource; 2140 WRITE32(statfs.f_namelen); 2141 } 2142 if (bmval0 & FATTR4_WORD0_MAXREAD) { 2143 if ((buflen -= 8) < 0) 2144 goto out_resource; 2145 WRITE64((u64) svc_max_payload(rqstp)); 2146 } 2147 if (bmval0 & FATTR4_WORD0_MAXWRITE) { 2148 if ((buflen -= 8) < 0) 2149 goto out_resource; 2150 WRITE64((u64) svc_max_payload(rqstp)); 2151 } 2152 if (bmval1 & FATTR4_WORD1_MODE) { 2153 if ((buflen -= 4) < 0) 2154 goto out_resource; 2155 WRITE32(stat.mode & S_IALLUGO); 2156 } 2157 if (bmval1 & FATTR4_WORD1_NO_TRUNC) { 2158 if ((buflen -= 4) < 0) 2159 goto out_resource; 2160 WRITE32(1); 2161 } 2162 if (bmval1 & FATTR4_WORD1_NUMLINKS) { 2163 if ((buflen -= 4) < 0) 2164 goto out_resource; 2165 WRITE32(stat.nlink); 2166 } 2167 if (bmval1 & FATTR4_WORD1_OWNER) { 2168 status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen); 2169 if (status == nfserr_resource) 2170 goto out_resource; 2171 if (status) 2172 goto out; 2173 } 2174 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) { 2175 status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen); 2176 if (status == nfserr_resource) 2177 goto out_resource; 2178 if (status) 2179 goto out; 2180 } 2181 if (bmval1 & FATTR4_WORD1_RAWDEV) { 2182 if ((buflen -= 8) < 0) 2183 goto out_resource; 2184 WRITE32((u32) MAJOR(stat.rdev)); 2185 WRITE32((u32) MINOR(stat.rdev)); 2186 } 2187 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) { 2188 if ((buflen -= 8) < 0) 2189 goto out_resource; 2190 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize; 2191 WRITE64(dummy64); 2192 } 2193 if (bmval1 & FATTR4_WORD1_SPACE_FREE) { 2194 if ((buflen -= 8) < 0) 2195 goto out_resource; 2196 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize; 2197 WRITE64(dummy64); 2198 } 2199 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) { 2200 if ((buflen -= 8) < 0) 2201 goto out_resource; 2202 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize; 2203 WRITE64(dummy64); 2204 } 2205 if (bmval1 & FATTR4_WORD1_SPACE_USED) { 2206 if ((buflen -= 8) < 0) 2207 goto out_resource; 2208 dummy64 = (u64)stat.blocks << 9; 2209 WRITE64(dummy64); 2210 } 2211 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) { 2212 if ((buflen -= 12) < 0) 2213 goto out_resource; 2214 WRITE32(0); 2215 WRITE32(stat.atime.tv_sec); 2216 WRITE32(stat.atime.tv_nsec); 2217 } 2218 if (bmval1 & FATTR4_WORD1_TIME_DELTA) { 2219 if ((buflen -= 12) < 0) 2220 goto out_resource; 2221 WRITE32(0); 2222 WRITE32(1); 2223 WRITE32(0); 2224 } 2225 if (bmval1 & FATTR4_WORD1_TIME_METADATA) { 2226 if ((buflen -= 12) < 0) 2227 goto out_resource; 2228 WRITE32(0); 2229 WRITE32(stat.ctime.tv_sec); 2230 WRITE32(stat.ctime.tv_nsec); 2231 } 2232 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) { 2233 if ((buflen -= 12) < 0) 2234 goto out_resource; 2235 WRITE32(0); 2236 WRITE32(stat.mtime.tv_sec); 2237 WRITE32(stat.mtime.tv_nsec); 2238 } 2239 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) { 2240 if ((buflen -= 8) < 0) 2241 goto out_resource; 2242 /* 2243 * Get parent's attributes if not ignoring crossmount 2244 * and this is the root of a cross-mounted filesystem. 2245 */ 2246 if (ignore_crossmnt == 0 && 2247 dentry == exp->ex_path.mnt->mnt_root) { 2248 struct path path = exp->ex_path; 2249 path_get(&path); 2250 while (follow_up(&path)) { 2251 if (path.dentry != path.mnt->mnt_root) 2252 break; 2253 } 2254 err = vfs_getattr(path.mnt, path.dentry, &stat); 2255 path_put(&path); 2256 if (err) 2257 goto out_nfserr; 2258 } 2259 WRITE64(stat.ino); 2260 } 2261 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) { 2262 WRITE32(3); 2263 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0); 2264 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1); 2265 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2); 2266 } 2267 2268 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2269 *countp = p - buffer; 2270 status = nfs_ok; 2271 2272 out: 2273 kfree(acl); 2274 if (fhp == &tempfh) 2275 fh_put(&tempfh); 2276 return status; 2277 out_nfserr: 2278 status = nfserrno(err); 2279 goto out; 2280 out_resource: 2281 *countp = 0; 2282 status = nfserr_resource; 2283 goto out; 2284 out_serverfault: 2285 status = nfserr_serverfault; 2286 goto out; 2287 } 2288 2289 static inline int attributes_need_mount(u32 *bmval) 2290 { 2291 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME)) 2292 return 1; 2293 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID) 2294 return 1; 2295 return 0; 2296 } 2297 2298 static __be32 2299 nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd, 2300 const char *name, int namlen, __be32 *p, int *buflen) 2301 { 2302 struct svc_export *exp = cd->rd_fhp->fh_export; 2303 struct dentry *dentry; 2304 __be32 nfserr; 2305 int ignore_crossmnt = 0; 2306 2307 dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen); 2308 if (IS_ERR(dentry)) 2309 return nfserrno(PTR_ERR(dentry)); 2310 if (!dentry->d_inode) { 2311 /* 2312 * nfsd_buffered_readdir drops the i_mutex between 2313 * readdir and calling this callback, leaving a window 2314 * where this directory entry could have gone away. 2315 */ 2316 dput(dentry); 2317 return nfserr_noent; 2318 } 2319 2320 exp_get(exp); 2321 /* 2322 * In the case of a mountpoint, the client may be asking for 2323 * attributes that are only properties of the underlying filesystem 2324 * as opposed to the cross-mounted file system. In such a case, 2325 * we will not follow the cross mount and will fill the attribtutes 2326 * directly from the mountpoint dentry. 2327 */ 2328 if (nfsd_mountpoint(dentry, exp)) { 2329 int err; 2330 2331 if (!(exp->ex_flags & NFSEXP_V4ROOT) 2332 && !attributes_need_mount(cd->rd_bmval)) { 2333 ignore_crossmnt = 1; 2334 goto out_encode; 2335 } 2336 /* 2337 * Why the heck aren't we just using nfsd_lookup?? 2338 * Different "."/".." handling? Something else? 2339 * At least, add a comment here to explain.... 2340 */ 2341 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp); 2342 if (err) { 2343 nfserr = nfserrno(err); 2344 goto out_put; 2345 } 2346 nfserr = check_nfsd_access(exp, cd->rd_rqstp); 2347 if (nfserr) 2348 goto out_put; 2349 2350 } 2351 out_encode: 2352 nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval, 2353 cd->rd_rqstp, ignore_crossmnt); 2354 out_put: 2355 dput(dentry); 2356 exp_put(exp); 2357 return nfserr; 2358 } 2359 2360 static __be32 * 2361 nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr) 2362 { 2363 __be32 *attrlenp; 2364 2365 if (buflen < 6) 2366 return NULL; 2367 *p++ = htonl(2); 2368 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */ 2369 *p++ = htonl(0); /* bmval1 */ 2370 2371 attrlenp = p++; 2372 *p++ = nfserr; /* no htonl */ 2373 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2374 return p; 2375 } 2376 2377 static int 2378 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen, 2379 loff_t offset, u64 ino, unsigned int d_type) 2380 { 2381 struct readdir_cd *ccd = ccdv; 2382 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common); 2383 int buflen; 2384 __be32 *p = cd->buffer; 2385 __be32 *cookiep; 2386 __be32 nfserr = nfserr_toosmall; 2387 2388 /* In nfsv4, "." and ".." never make it onto the wire.. */ 2389 if (name && isdotent(name, namlen)) { 2390 cd->common.err = nfs_ok; 2391 return 0; 2392 } 2393 2394 if (cd->offset) 2395 xdr_encode_hyper(cd->offset, (u64) offset); 2396 2397 buflen = cd->buflen - 4 - XDR_QUADLEN(namlen); 2398 if (buflen < 0) 2399 goto fail; 2400 2401 *p++ = xdr_one; /* mark entry present */ 2402 cookiep = p; 2403 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */ 2404 p = xdr_encode_array(p, name, namlen); /* name length & name */ 2405 2406 nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, p, &buflen); 2407 switch (nfserr) { 2408 case nfs_ok: 2409 p += buflen; 2410 break; 2411 case nfserr_resource: 2412 nfserr = nfserr_toosmall; 2413 goto fail; 2414 case nfserr_noent: 2415 goto skip_entry; 2416 default: 2417 /* 2418 * If the client requested the RDATTR_ERROR attribute, 2419 * we stuff the error code into this attribute 2420 * and continue. If this attribute was not requested, 2421 * then in accordance with the spec, we fail the 2422 * entire READDIR operation(!) 2423 */ 2424 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)) 2425 goto fail; 2426 p = nfsd4_encode_rdattr_error(p, buflen, nfserr); 2427 if (p == NULL) { 2428 nfserr = nfserr_toosmall; 2429 goto fail; 2430 } 2431 } 2432 cd->buflen -= (p - cd->buffer); 2433 cd->buffer = p; 2434 cd->offset = cookiep; 2435 skip_entry: 2436 cd->common.err = nfs_ok; 2437 return 0; 2438 fail: 2439 cd->common.err = nfserr; 2440 return -EINVAL; 2441 } 2442 2443 static void 2444 nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid) 2445 { 2446 __be32 *p; 2447 2448 RESERVE_SPACE(sizeof(stateid_t)); 2449 WRITE32(sid->si_generation); 2450 WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 2451 ADJUST_ARGS(); 2452 } 2453 2454 static __be32 2455 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access) 2456 { 2457 __be32 *p; 2458 2459 if (!nfserr) { 2460 RESERVE_SPACE(8); 2461 WRITE32(access->ac_supported); 2462 WRITE32(access->ac_resp_access); 2463 ADJUST_ARGS(); 2464 } 2465 return nfserr; 2466 } 2467 2468 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts) 2469 { 2470 __be32 *p; 2471 2472 if (!nfserr) { 2473 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8); 2474 WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 2475 WRITE32(bcts->dir); 2476 /* XXX: ? */ 2477 WRITE32(0); 2478 ADJUST_ARGS(); 2479 } 2480 return nfserr; 2481 } 2482 2483 static __be32 2484 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close) 2485 { 2486 ENCODE_SEQID_OP_HEAD; 2487 2488 if (!nfserr) 2489 nfsd4_encode_stateid(resp, &close->cl_stateid); 2490 2491 ENCODE_SEQID_OP_TAIL(close->cl_stateowner); 2492 return nfserr; 2493 } 2494 2495 2496 static __be32 2497 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit) 2498 { 2499 __be32 *p; 2500 2501 if (!nfserr) { 2502 RESERVE_SPACE(8); 2503 WRITEMEM(commit->co_verf.data, 8); 2504 ADJUST_ARGS(); 2505 } 2506 return nfserr; 2507 } 2508 2509 static __be32 2510 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create) 2511 { 2512 __be32 *p; 2513 2514 if (!nfserr) { 2515 RESERVE_SPACE(32); 2516 write_cinfo(&p, &create->cr_cinfo); 2517 WRITE32(2); 2518 WRITE32(create->cr_bmval[0]); 2519 WRITE32(create->cr_bmval[1]); 2520 ADJUST_ARGS(); 2521 } 2522 return nfserr; 2523 } 2524 2525 static __be32 2526 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr) 2527 { 2528 struct svc_fh *fhp = getattr->ga_fhp; 2529 int buflen; 2530 2531 if (nfserr) 2532 return nfserr; 2533 2534 buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2); 2535 nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry, 2536 resp->p, &buflen, getattr->ga_bmval, 2537 resp->rqstp, 0); 2538 if (!nfserr) 2539 resp->p += buflen; 2540 return nfserr; 2541 } 2542 2543 static __be32 2544 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp) 2545 { 2546 struct svc_fh *fhp = *fhpp; 2547 unsigned int len; 2548 __be32 *p; 2549 2550 if (!nfserr) { 2551 len = fhp->fh_handle.fh_size; 2552 RESERVE_SPACE(len + 4); 2553 WRITE32(len); 2554 WRITEMEM(&fhp->fh_handle.fh_base, len); 2555 ADJUST_ARGS(); 2556 } 2557 return nfserr; 2558 } 2559 2560 /* 2561 * Including all fields other than the name, a LOCK4denied structure requires 2562 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes. 2563 */ 2564 static void 2565 nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld) 2566 { 2567 __be32 *p; 2568 2569 RESERVE_SPACE(32 + XDR_LEN(ld->ld_sop ? ld->ld_sop->so_owner.len : 0)); 2570 WRITE64(ld->ld_start); 2571 WRITE64(ld->ld_length); 2572 WRITE32(ld->ld_type); 2573 if (ld->ld_sop) { 2574 WRITEMEM(&ld->ld_clientid, 8); 2575 WRITE32(ld->ld_sop->so_owner.len); 2576 WRITEMEM(ld->ld_sop->so_owner.data, ld->ld_sop->so_owner.len); 2577 kref_put(&ld->ld_sop->so_ref, nfs4_free_stateowner); 2578 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */ 2579 WRITE64((u64)0); /* clientid */ 2580 WRITE32(0); /* length of owner name */ 2581 } 2582 ADJUST_ARGS(); 2583 } 2584 2585 static __be32 2586 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock) 2587 { 2588 ENCODE_SEQID_OP_HEAD; 2589 2590 if (!nfserr) 2591 nfsd4_encode_stateid(resp, &lock->lk_resp_stateid); 2592 else if (nfserr == nfserr_denied) 2593 nfsd4_encode_lock_denied(resp, &lock->lk_denied); 2594 2595 ENCODE_SEQID_OP_TAIL(lock->lk_replay_owner); 2596 return nfserr; 2597 } 2598 2599 static __be32 2600 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt) 2601 { 2602 if (nfserr == nfserr_denied) 2603 nfsd4_encode_lock_denied(resp, &lockt->lt_denied); 2604 return nfserr; 2605 } 2606 2607 static __be32 2608 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku) 2609 { 2610 ENCODE_SEQID_OP_HEAD; 2611 2612 if (!nfserr) 2613 nfsd4_encode_stateid(resp, &locku->lu_stateid); 2614 2615 ENCODE_SEQID_OP_TAIL(locku->lu_stateowner); 2616 return nfserr; 2617 } 2618 2619 2620 static __be32 2621 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link) 2622 { 2623 __be32 *p; 2624 2625 if (!nfserr) { 2626 RESERVE_SPACE(20); 2627 write_cinfo(&p, &link->li_cinfo); 2628 ADJUST_ARGS(); 2629 } 2630 return nfserr; 2631 } 2632 2633 2634 static __be32 2635 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open) 2636 { 2637 __be32 *p; 2638 ENCODE_SEQID_OP_HEAD; 2639 2640 if (nfserr) 2641 goto out; 2642 2643 nfsd4_encode_stateid(resp, &open->op_stateid); 2644 RESERVE_SPACE(40); 2645 write_cinfo(&p, &open->op_cinfo); 2646 WRITE32(open->op_rflags); 2647 WRITE32(2); 2648 WRITE32(open->op_bmval[0]); 2649 WRITE32(open->op_bmval[1]); 2650 WRITE32(open->op_delegate_type); 2651 ADJUST_ARGS(); 2652 2653 switch (open->op_delegate_type) { 2654 case NFS4_OPEN_DELEGATE_NONE: 2655 break; 2656 case NFS4_OPEN_DELEGATE_READ: 2657 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2658 RESERVE_SPACE(20); 2659 WRITE32(open->op_recall); 2660 2661 /* 2662 * TODO: ACE's in delegations 2663 */ 2664 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2665 WRITE32(0); 2666 WRITE32(0); 2667 WRITE32(0); /* XXX: is NULL principal ok? */ 2668 ADJUST_ARGS(); 2669 break; 2670 case NFS4_OPEN_DELEGATE_WRITE: 2671 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2672 RESERVE_SPACE(32); 2673 WRITE32(0); 2674 2675 /* 2676 * TODO: space_limit's in delegations 2677 */ 2678 WRITE32(NFS4_LIMIT_SIZE); 2679 WRITE32(~(u32)0); 2680 WRITE32(~(u32)0); 2681 2682 /* 2683 * TODO: ACE's in delegations 2684 */ 2685 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2686 WRITE32(0); 2687 WRITE32(0); 2688 WRITE32(0); /* XXX: is NULL principal ok? */ 2689 ADJUST_ARGS(); 2690 break; 2691 default: 2692 BUG(); 2693 } 2694 /* XXX save filehandle here */ 2695 out: 2696 ENCODE_SEQID_OP_TAIL(open->op_stateowner); 2697 return nfserr; 2698 } 2699 2700 static __be32 2701 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc) 2702 { 2703 ENCODE_SEQID_OP_HEAD; 2704 2705 if (!nfserr) 2706 nfsd4_encode_stateid(resp, &oc->oc_resp_stateid); 2707 2708 ENCODE_SEQID_OP_TAIL(oc->oc_stateowner); 2709 return nfserr; 2710 } 2711 2712 static __be32 2713 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od) 2714 { 2715 ENCODE_SEQID_OP_HEAD; 2716 2717 if (!nfserr) 2718 nfsd4_encode_stateid(resp, &od->od_stateid); 2719 2720 ENCODE_SEQID_OP_TAIL(od->od_stateowner); 2721 return nfserr; 2722 } 2723 2724 static __be32 2725 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr, 2726 struct nfsd4_read *read) 2727 { 2728 u32 eof; 2729 int v, pn; 2730 unsigned long maxcount; 2731 long len; 2732 __be32 *p; 2733 2734 if (nfserr) 2735 return nfserr; 2736 if (resp->xbuf->page_len) 2737 return nfserr_resource; 2738 2739 RESERVE_SPACE(8); /* eof flag and byte count */ 2740 2741 maxcount = svc_max_payload(resp->rqstp); 2742 if (maxcount > read->rd_length) 2743 maxcount = read->rd_length; 2744 2745 len = maxcount; 2746 v = 0; 2747 while (len > 0) { 2748 pn = resp->rqstp->rq_resused++; 2749 resp->rqstp->rq_vec[v].iov_base = 2750 page_address(resp->rqstp->rq_respages[pn]); 2751 resp->rqstp->rq_vec[v].iov_len = 2752 len < PAGE_SIZE ? len : PAGE_SIZE; 2753 v++; 2754 len -= PAGE_SIZE; 2755 } 2756 read->rd_vlen = v; 2757 2758 nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp, 2759 read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen, 2760 &maxcount); 2761 2762 if (nfserr == nfserr_symlink) 2763 nfserr = nfserr_inval; 2764 if (nfserr) 2765 return nfserr; 2766 eof = (read->rd_offset + maxcount >= 2767 read->rd_fhp->fh_dentry->d_inode->i_size); 2768 2769 WRITE32(eof); 2770 WRITE32(maxcount); 2771 ADJUST_ARGS(); 2772 resp->xbuf->head[0].iov_len = (char*)p 2773 - (char*)resp->xbuf->head[0].iov_base; 2774 resp->xbuf->page_len = maxcount; 2775 2776 /* Use rest of head for padding and remaining ops: */ 2777 resp->xbuf->tail[0].iov_base = p; 2778 resp->xbuf->tail[0].iov_len = 0; 2779 if (maxcount&3) { 2780 RESERVE_SPACE(4); 2781 WRITE32(0); 2782 resp->xbuf->tail[0].iov_base += maxcount&3; 2783 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 2784 ADJUST_ARGS(); 2785 } 2786 return 0; 2787 } 2788 2789 static __be32 2790 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink) 2791 { 2792 int maxcount; 2793 char *page; 2794 __be32 *p; 2795 2796 if (nfserr) 2797 return nfserr; 2798 if (resp->xbuf->page_len) 2799 return nfserr_resource; 2800 2801 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]); 2802 2803 maxcount = PAGE_SIZE; 2804 RESERVE_SPACE(4); 2805 2806 /* 2807 * XXX: By default, the ->readlink() VFS op will truncate symlinks 2808 * if they would overflow the buffer. Is this kosher in NFSv4? If 2809 * not, one easy fix is: if ->readlink() precisely fills the buffer, 2810 * assume that truncation occurred, and return NFS4ERR_RESOURCE. 2811 */ 2812 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount); 2813 if (nfserr == nfserr_isdir) 2814 return nfserr_inval; 2815 if (nfserr) 2816 return nfserr; 2817 2818 WRITE32(maxcount); 2819 ADJUST_ARGS(); 2820 resp->xbuf->head[0].iov_len = (char*)p 2821 - (char*)resp->xbuf->head[0].iov_base; 2822 resp->xbuf->page_len = maxcount; 2823 2824 /* Use rest of head for padding and remaining ops: */ 2825 resp->xbuf->tail[0].iov_base = p; 2826 resp->xbuf->tail[0].iov_len = 0; 2827 if (maxcount&3) { 2828 RESERVE_SPACE(4); 2829 WRITE32(0); 2830 resp->xbuf->tail[0].iov_base += maxcount&3; 2831 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 2832 ADJUST_ARGS(); 2833 } 2834 return 0; 2835 } 2836 2837 static __be32 2838 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir) 2839 { 2840 int maxcount; 2841 loff_t offset; 2842 __be32 *page, *savep, *tailbase; 2843 __be32 *p; 2844 2845 if (nfserr) 2846 return nfserr; 2847 if (resp->xbuf->page_len) 2848 return nfserr_resource; 2849 2850 RESERVE_SPACE(8); /* verifier */ 2851 savep = p; 2852 2853 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */ 2854 WRITE32(0); 2855 WRITE32(0); 2856 ADJUST_ARGS(); 2857 resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base; 2858 tailbase = p; 2859 2860 maxcount = PAGE_SIZE; 2861 if (maxcount > readdir->rd_maxcount) 2862 maxcount = readdir->rd_maxcount; 2863 2864 /* 2865 * Convert from bytes to words, account for the two words already 2866 * written, make sure to leave two words at the end for the next 2867 * pointer and eof field. 2868 */ 2869 maxcount = (maxcount >> 2) - 4; 2870 if (maxcount < 0) { 2871 nfserr = nfserr_toosmall; 2872 goto err_no_verf; 2873 } 2874 2875 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]); 2876 readdir->common.err = 0; 2877 readdir->buflen = maxcount; 2878 readdir->buffer = page; 2879 readdir->offset = NULL; 2880 2881 offset = readdir->rd_cookie; 2882 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, 2883 &offset, 2884 &readdir->common, nfsd4_encode_dirent); 2885 if (nfserr == nfs_ok && 2886 readdir->common.err == nfserr_toosmall && 2887 readdir->buffer == page) 2888 nfserr = nfserr_toosmall; 2889 if (nfserr == nfserr_symlink) 2890 nfserr = nfserr_notdir; 2891 if (nfserr) 2892 goto err_no_verf; 2893 2894 if (readdir->offset) 2895 xdr_encode_hyper(readdir->offset, offset); 2896 2897 p = readdir->buffer; 2898 *p++ = 0; /* no more entries */ 2899 *p++ = htonl(readdir->common.err == nfserr_eof); 2900 resp->xbuf->page_len = ((char*)p) - (char*)page_address( 2901 resp->rqstp->rq_respages[resp->rqstp->rq_resused-1]); 2902 2903 /* Use rest of head for padding and remaining ops: */ 2904 resp->xbuf->tail[0].iov_base = tailbase; 2905 resp->xbuf->tail[0].iov_len = 0; 2906 resp->p = resp->xbuf->tail[0].iov_base; 2907 resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4; 2908 2909 return 0; 2910 err_no_verf: 2911 p = savep; 2912 ADJUST_ARGS(); 2913 return nfserr; 2914 } 2915 2916 static __be32 2917 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove) 2918 { 2919 __be32 *p; 2920 2921 if (!nfserr) { 2922 RESERVE_SPACE(20); 2923 write_cinfo(&p, &remove->rm_cinfo); 2924 ADJUST_ARGS(); 2925 } 2926 return nfserr; 2927 } 2928 2929 static __be32 2930 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename) 2931 { 2932 __be32 *p; 2933 2934 if (!nfserr) { 2935 RESERVE_SPACE(40); 2936 write_cinfo(&p, &rename->rn_sinfo); 2937 write_cinfo(&p, &rename->rn_tinfo); 2938 ADJUST_ARGS(); 2939 } 2940 return nfserr; 2941 } 2942 2943 static __be32 2944 nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp, 2945 __be32 nfserr,struct svc_export *exp) 2946 { 2947 int i = 0; 2948 u32 nflavs; 2949 struct exp_flavor_info *flavs; 2950 struct exp_flavor_info def_flavs[2]; 2951 __be32 *p; 2952 2953 if (nfserr) 2954 goto out; 2955 if (exp->ex_nflavors) { 2956 flavs = exp->ex_flavors; 2957 nflavs = exp->ex_nflavors; 2958 } else { /* Handling of some defaults in absence of real secinfo: */ 2959 flavs = def_flavs; 2960 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) { 2961 nflavs = 2; 2962 flavs[0].pseudoflavor = RPC_AUTH_UNIX; 2963 flavs[1].pseudoflavor = RPC_AUTH_NULL; 2964 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) { 2965 nflavs = 1; 2966 flavs[0].pseudoflavor 2967 = svcauth_gss_flavor(exp->ex_client); 2968 } else { 2969 nflavs = 1; 2970 flavs[0].pseudoflavor 2971 = exp->ex_client->flavour->flavour; 2972 } 2973 } 2974 2975 RESERVE_SPACE(4); 2976 WRITE32(nflavs); 2977 ADJUST_ARGS(); 2978 for (i = 0; i < nflavs; i++) { 2979 u32 flav = flavs[i].pseudoflavor; 2980 struct gss_api_mech *gm = gss_mech_get_by_pseudoflavor(flav); 2981 2982 if (gm) { 2983 RESERVE_SPACE(4); 2984 WRITE32(RPC_AUTH_GSS); 2985 ADJUST_ARGS(); 2986 RESERVE_SPACE(4 + gm->gm_oid.len); 2987 WRITE32(gm->gm_oid.len); 2988 WRITEMEM(gm->gm_oid.data, gm->gm_oid.len); 2989 ADJUST_ARGS(); 2990 RESERVE_SPACE(4); 2991 WRITE32(0); /* qop */ 2992 ADJUST_ARGS(); 2993 RESERVE_SPACE(4); 2994 WRITE32(gss_pseudoflavor_to_service(gm, flav)); 2995 ADJUST_ARGS(); 2996 gss_mech_put(gm); 2997 } else { 2998 RESERVE_SPACE(4); 2999 WRITE32(flav); 3000 ADJUST_ARGS(); 3001 } 3002 } 3003 out: 3004 if (exp) 3005 exp_put(exp); 3006 return nfserr; 3007 } 3008 3009 static __be32 3010 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 3011 struct nfsd4_secinfo *secinfo) 3012 { 3013 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp); 3014 } 3015 3016 static __be32 3017 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr, 3018 struct nfsd4_secinfo_no_name *secinfo) 3019 { 3020 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp); 3021 } 3022 3023 /* 3024 * The SETATTR encode routine is special -- it always encodes a bitmap, 3025 * regardless of the error status. 3026 */ 3027 static __be32 3028 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr) 3029 { 3030 __be32 *p; 3031 3032 RESERVE_SPACE(12); 3033 if (nfserr) { 3034 WRITE32(2); 3035 WRITE32(0); 3036 WRITE32(0); 3037 } 3038 else { 3039 WRITE32(2); 3040 WRITE32(setattr->sa_bmval[0]); 3041 WRITE32(setattr->sa_bmval[1]); 3042 } 3043 ADJUST_ARGS(); 3044 return nfserr; 3045 } 3046 3047 static __be32 3048 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd) 3049 { 3050 __be32 *p; 3051 3052 if (!nfserr) { 3053 RESERVE_SPACE(8 + sizeof(nfs4_verifier)); 3054 WRITEMEM(&scd->se_clientid, 8); 3055 WRITEMEM(&scd->se_confirm, sizeof(nfs4_verifier)); 3056 ADJUST_ARGS(); 3057 } 3058 else if (nfserr == nfserr_clid_inuse) { 3059 RESERVE_SPACE(8); 3060 WRITE32(0); 3061 WRITE32(0); 3062 ADJUST_ARGS(); 3063 } 3064 return nfserr; 3065 } 3066 3067 static __be32 3068 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write) 3069 { 3070 __be32 *p; 3071 3072 if (!nfserr) { 3073 RESERVE_SPACE(16); 3074 WRITE32(write->wr_bytes_written); 3075 WRITE32(write->wr_how_written); 3076 WRITEMEM(write->wr_verifier.data, 8); 3077 ADJUST_ARGS(); 3078 } 3079 return nfserr; 3080 } 3081 3082 static __be32 3083 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, int nfserr, 3084 struct nfsd4_exchange_id *exid) 3085 { 3086 __be32 *p; 3087 char *major_id; 3088 char *server_scope; 3089 int major_id_sz; 3090 int server_scope_sz; 3091 uint64_t minor_id = 0; 3092 3093 if (nfserr) 3094 return nfserr; 3095 3096 major_id = utsname()->nodename; 3097 major_id_sz = strlen(major_id); 3098 server_scope = utsname()->nodename; 3099 server_scope_sz = strlen(server_scope); 3100 3101 RESERVE_SPACE( 3102 8 /* eir_clientid */ + 3103 4 /* eir_sequenceid */ + 3104 4 /* eir_flags */ + 3105 4 /* spr_how (SP4_NONE) */ + 3106 8 /* so_minor_id */ + 3107 4 /* so_major_id.len */ + 3108 (XDR_QUADLEN(major_id_sz) * 4) + 3109 4 /* eir_server_scope.len */ + 3110 (XDR_QUADLEN(server_scope_sz) * 4) + 3111 4 /* eir_server_impl_id.count (0) */); 3112 3113 WRITEMEM(&exid->clientid, 8); 3114 WRITE32(exid->seqid); 3115 WRITE32(exid->flags); 3116 3117 /* state_protect4_r. Currently only support SP4_NONE */ 3118 BUG_ON(exid->spa_how != SP4_NONE); 3119 WRITE32(exid->spa_how); 3120 3121 /* The server_owner struct */ 3122 WRITE64(minor_id); /* Minor id */ 3123 /* major id */ 3124 WRITE32(major_id_sz); 3125 WRITEMEM(major_id, major_id_sz); 3126 3127 /* Server scope */ 3128 WRITE32(server_scope_sz); 3129 WRITEMEM(server_scope, server_scope_sz); 3130 3131 /* Implementation id */ 3132 WRITE32(0); /* zero length nfs_impl_id4 array */ 3133 ADJUST_ARGS(); 3134 return 0; 3135 } 3136 3137 static __be32 3138 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, int nfserr, 3139 struct nfsd4_create_session *sess) 3140 { 3141 __be32 *p; 3142 3143 if (nfserr) 3144 return nfserr; 3145 3146 RESERVE_SPACE(24); 3147 WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3148 WRITE32(sess->seqid); 3149 WRITE32(sess->flags); 3150 ADJUST_ARGS(); 3151 3152 RESERVE_SPACE(28); 3153 WRITE32(0); /* headerpadsz */ 3154 WRITE32(sess->fore_channel.maxreq_sz); 3155 WRITE32(sess->fore_channel.maxresp_sz); 3156 WRITE32(sess->fore_channel.maxresp_cached); 3157 WRITE32(sess->fore_channel.maxops); 3158 WRITE32(sess->fore_channel.maxreqs); 3159 WRITE32(sess->fore_channel.nr_rdma_attrs); 3160 ADJUST_ARGS(); 3161 3162 if (sess->fore_channel.nr_rdma_attrs) { 3163 RESERVE_SPACE(4); 3164 WRITE32(sess->fore_channel.rdma_attrs); 3165 ADJUST_ARGS(); 3166 } 3167 3168 RESERVE_SPACE(28); 3169 WRITE32(0); /* headerpadsz */ 3170 WRITE32(sess->back_channel.maxreq_sz); 3171 WRITE32(sess->back_channel.maxresp_sz); 3172 WRITE32(sess->back_channel.maxresp_cached); 3173 WRITE32(sess->back_channel.maxops); 3174 WRITE32(sess->back_channel.maxreqs); 3175 WRITE32(sess->back_channel.nr_rdma_attrs); 3176 ADJUST_ARGS(); 3177 3178 if (sess->back_channel.nr_rdma_attrs) { 3179 RESERVE_SPACE(4); 3180 WRITE32(sess->back_channel.rdma_attrs); 3181 ADJUST_ARGS(); 3182 } 3183 return 0; 3184 } 3185 3186 static __be32 3187 nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, int nfserr, 3188 struct nfsd4_destroy_session *destroy_session) 3189 { 3190 return nfserr; 3191 } 3192 3193 static __be32 3194 nfsd4_encode_free_stateid(struct nfsd4_compoundres *resp, int nfserr, 3195 struct nfsd4_free_stateid *free_stateid) 3196 { 3197 __be32 *p; 3198 3199 if (nfserr) 3200 return nfserr; 3201 3202 RESERVE_SPACE(4); 3203 WRITE32(nfserr); 3204 ADJUST_ARGS(); 3205 return nfserr; 3206 } 3207 3208 static __be32 3209 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, int nfserr, 3210 struct nfsd4_sequence *seq) 3211 { 3212 __be32 *p; 3213 3214 if (nfserr) 3215 return nfserr; 3216 3217 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20); 3218 WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3219 WRITE32(seq->seqid); 3220 WRITE32(seq->slotid); 3221 WRITE32(seq->maxslots); 3222 /* For now: target_maxslots = maxslots */ 3223 WRITE32(seq->maxslots); 3224 WRITE32(seq->status_flags); 3225 3226 ADJUST_ARGS(); 3227 resp->cstate.datap = p; /* DRC cache data pointer */ 3228 return 0; 3229 } 3230 3231 __be32 3232 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, int nfserr, 3233 struct nfsd4_test_stateid *test_stateid) 3234 { 3235 struct nfsd4_compoundargs *argp; 3236 stateid_t si; 3237 __be32 *p; 3238 int i; 3239 int valid; 3240 3241 restore_buf(test_stateid->ts_saved_args, &test_stateid->ts_savedp); 3242 argp = test_stateid->ts_saved_args; 3243 3244 RESERVE_SPACE(4); 3245 *p++ = htonl(test_stateid->ts_num_ids); 3246 resp->p = p; 3247 3248 nfs4_lock_state(); 3249 for (i = 0; i < test_stateid->ts_num_ids; i++) { 3250 nfsd4_decode_stateid(argp, &si); 3251 valid = nfs4_validate_stateid(&si, test_stateid->ts_has_session); 3252 RESERVE_SPACE(4); 3253 *p++ = htonl(valid); 3254 resp->p = p; 3255 } 3256 nfs4_unlock_state(); 3257 3258 return nfserr; 3259 } 3260 3261 static __be32 3262 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p) 3263 { 3264 return nfserr; 3265 } 3266 3267 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *); 3268 3269 /* 3270 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1 3271 * since we don't need to filter out obsolete ops as this is 3272 * done in the decoding phase. 3273 */ 3274 static nfsd4_enc nfsd4_enc_ops[] = { 3275 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access, 3276 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close, 3277 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit, 3278 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create, 3279 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop, 3280 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3281 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr, 3282 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh, 3283 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link, 3284 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock, 3285 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt, 3286 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku, 3287 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop, 3288 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop, 3289 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3290 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open, 3291 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop, 3292 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm, 3293 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade, 3294 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop, 3295 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop, 3296 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop, 3297 [OP_READ] = (nfsd4_enc)nfsd4_encode_read, 3298 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir, 3299 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink, 3300 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove, 3301 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename, 3302 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop, 3303 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop, 3304 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop, 3305 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo, 3306 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr, 3307 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid, 3308 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop, 3309 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3310 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write, 3311 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop, 3312 3313 /* NFSv4.1 operations */ 3314 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop, 3315 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session, 3316 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id, 3317 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session, 3318 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_destroy_session, 3319 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_free_stateid, 3320 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3321 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop, 3322 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 3323 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop, 3324 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop, 3325 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3326 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name, 3327 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence, 3328 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop, 3329 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid, 3330 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3331 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop, 3332 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop, 3333 }; 3334 3335 /* 3336 * Calculate the total amount of memory that the compound response has taken 3337 * after encoding the current operation. 3338 * 3339 * pad: add on 8 bytes for the next operation's op_code and status so that 3340 * there is room to cache a failure on the next operation. 3341 * 3342 * Compare this length to the session se_fmaxresp_cached. 3343 * 3344 * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so 3345 * will be at least a page and will therefore hold the xdr_buf head. 3346 */ 3347 static int nfsd4_check_drc_limit(struct nfsd4_compoundres *resp) 3348 { 3349 int status = 0; 3350 struct xdr_buf *xb = &resp->rqstp->rq_res; 3351 struct nfsd4_compoundargs *args = resp->rqstp->rq_argp; 3352 struct nfsd4_session *session = NULL; 3353 struct nfsd4_slot *slot = resp->cstate.slot; 3354 u32 length, tlen = 0, pad = 8; 3355 3356 if (!nfsd4_has_session(&resp->cstate)) 3357 return status; 3358 3359 session = resp->cstate.session; 3360 if (session == NULL || slot->sl_cachethis == 0) 3361 return status; 3362 3363 if (resp->opcnt >= args->opcnt) 3364 pad = 0; /* this is the last operation */ 3365 3366 if (xb->page_len == 0) { 3367 length = (char *)resp->p - (char *)xb->head[0].iov_base + pad; 3368 } else { 3369 if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0) 3370 tlen = (char *)resp->p - (char *)xb->tail[0].iov_base; 3371 3372 length = xb->head[0].iov_len + xb->page_len + tlen + pad; 3373 } 3374 dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__, 3375 length, xb->page_len, tlen, pad); 3376 3377 if (length <= session->se_fchannel.maxresp_cached) 3378 return status; 3379 else 3380 return nfserr_rep_too_big_to_cache; 3381 } 3382 3383 void 3384 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3385 { 3386 __be32 *statp; 3387 __be32 *p; 3388 3389 RESERVE_SPACE(8); 3390 WRITE32(op->opnum); 3391 statp = p++; /* to be backfilled at the end */ 3392 ADJUST_ARGS(); 3393 3394 if (op->opnum == OP_ILLEGAL) 3395 goto status; 3396 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) || 3397 !nfsd4_enc_ops[op->opnum]); 3398 op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u); 3399 /* nfsd4_check_drc_limit guarantees enough room for error status */ 3400 if (!op->status && nfsd4_check_drc_limit(resp)) 3401 op->status = nfserr_rep_too_big_to_cache; 3402 status: 3403 /* 3404 * Note: We write the status directly, instead of using WRITE32(), 3405 * since it is already in network byte order. 3406 */ 3407 *statp = op->status; 3408 } 3409 3410 /* 3411 * Encode the reply stored in the stateowner reply cache 3412 * 3413 * XDR note: do not encode rp->rp_buflen: the buffer contains the 3414 * previously sent already encoded operation. 3415 * 3416 * called with nfs4_lock_state() held 3417 */ 3418 void 3419 nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3420 { 3421 __be32 *p; 3422 struct nfs4_replay *rp = op->replay; 3423 3424 BUG_ON(!rp); 3425 3426 RESERVE_SPACE(8); 3427 WRITE32(op->opnum); 3428 *p++ = rp->rp_status; /* already xdr'ed */ 3429 ADJUST_ARGS(); 3430 3431 RESERVE_SPACE(rp->rp_buflen); 3432 WRITEMEM(rp->rp_buf, rp->rp_buflen); 3433 ADJUST_ARGS(); 3434 } 3435 3436 int 3437 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy) 3438 { 3439 return xdr_ressize_check(rqstp, p); 3440 } 3441 3442 int nfsd4_release_compoundargs(void *rq, __be32 *p, void *resp) 3443 { 3444 struct svc_rqst *rqstp = rq; 3445 struct nfsd4_compoundargs *args = rqstp->rq_argp; 3446 3447 if (args->ops != args->iops) { 3448 kfree(args->ops); 3449 args->ops = args->iops; 3450 } 3451 kfree(args->tmpp); 3452 args->tmpp = NULL; 3453 while (args->to_free) { 3454 struct tmpbuf *tb = args->to_free; 3455 args->to_free = tb->next; 3456 tb->release(tb->buf); 3457 kfree(tb); 3458 } 3459 return 1; 3460 } 3461 3462 int 3463 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args) 3464 { 3465 args->p = p; 3466 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len; 3467 args->pagelist = rqstp->rq_arg.pages; 3468 args->pagelen = rqstp->rq_arg.page_len; 3469 args->tmpp = NULL; 3470 args->to_free = NULL; 3471 args->ops = args->iops; 3472 args->rqstp = rqstp; 3473 3474 return !nfsd4_decode_compound(args); 3475 } 3476 3477 int 3478 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp) 3479 { 3480 /* 3481 * All that remains is to write the tag and operation count... 3482 */ 3483 struct nfsd4_compound_state *cs = &resp->cstate; 3484 struct kvec *iov; 3485 p = resp->tagp; 3486 *p++ = htonl(resp->taglen); 3487 memcpy(p, resp->tag, resp->taglen); 3488 p += XDR_QUADLEN(resp->taglen); 3489 *p++ = htonl(resp->opcnt); 3490 3491 if (rqstp->rq_res.page_len) 3492 iov = &rqstp->rq_res.tail[0]; 3493 else 3494 iov = &rqstp->rq_res.head[0]; 3495 iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base; 3496 BUG_ON(iov->iov_len > PAGE_SIZE); 3497 if (nfsd4_has_session(cs)) { 3498 if (cs->status != nfserr_replay_cache) { 3499 nfsd4_store_cache_entry(resp); 3500 dprintk("%s: SET SLOT STATE TO AVAILABLE\n", __func__); 3501 cs->slot->sl_inuse = false; 3502 } 3503 /* Renew the clientid on success and on replay */ 3504 release_session_client(cs->session); 3505 nfsd4_put_session(cs->session); 3506 } 3507 return 1; 3508 } 3509 3510 /* 3511 * Local variables: 3512 * c-basic-offset: 8 3513 * End: 3514 */ 3515