xref: /openbmc/linux/fs/nfsd/nfs4xdr.c (revision 861e10be)
1 /*
2  *  Server-side XDR for NFSv4
3  *
4  *  Copyright (c) 2002 The Regents of the University of Michigan.
5  *  All rights reserved.
6  *
7  *  Kendrick Smith <kmsmith@umich.edu>
8  *  Andy Adamson   <andros@umich.edu>
9  *
10  *  Redistribution and use in source and binary forms, with or without
11  *  modification, are permitted provided that the following conditions
12  *  are met:
13  *
14  *  1. Redistributions of source code must retain the above copyright
15  *     notice, this list of conditions and the following disclaimer.
16  *  2. Redistributions in binary form must reproduce the above copyright
17  *     notice, this list of conditions and the following disclaimer in the
18  *     documentation and/or other materials provided with the distribution.
19  *  3. Neither the name of the University nor the names of its
20  *     contributors may be used to endorse or promote products derived
21  *     from this software without specific prior written permission.
22  *
23  *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24  *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25  *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26  *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27  *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28  *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29  *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30  *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31  *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32  *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33  *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34  *
35  * TODO: Neil Brown made the following observation:  We currently
36  * initially reserve NFSD_BUFSIZE space on the transmit queue and
37  * never release any of that until the request is complete.
38  * It would be good to calculate a new maximum response size while
39  * decoding the COMPOUND, and call svc_reserve with this number
40  * at the end of nfs4svc_decode_compoundargs.
41  */
42 
43 #include <linux/slab.h>
44 #include <linux/namei.h>
45 #include <linux/statfs.h>
46 #include <linux/utsname.h>
47 #include <linux/pagemap.h>
48 #include <linux/sunrpc/svcauth_gss.h>
49 
50 #include "idmap.h"
51 #include "acl.h"
52 #include "xdr4.h"
53 #include "vfs.h"
54 #include "state.h"
55 #include "cache.h"
56 #include "netns.h"
57 
58 #define NFSDDBG_FACILITY		NFSDDBG_XDR
59 
60 /*
61  * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
62  * directory in order to indicate to the client that a filesystem boundary is present
63  * We use a fixed fsid for a referral
64  */
65 #define NFS4_REFERRAL_FSID_MAJOR	0x8000000ULL
66 #define NFS4_REFERRAL_FSID_MINOR	0x8000000ULL
67 
68 static __be32
69 check_filename(char *str, int len)
70 {
71 	int i;
72 
73 	if (len == 0)
74 		return nfserr_inval;
75 	if (isdotent(str, len))
76 		return nfserr_badname;
77 	for (i = 0; i < len; i++)
78 		if (str[i] == '/')
79 			return nfserr_badname;
80 	return 0;
81 }
82 
83 #define DECODE_HEAD				\
84 	__be32 *p;				\
85 	__be32 status
86 #define DECODE_TAIL				\
87 	status = 0;				\
88 out:						\
89 	return status;				\
90 xdr_error:					\
91 	dprintk("NFSD: xdr error (%s:%d)\n",	\
92 			__FILE__, __LINE__);	\
93 	status = nfserr_bad_xdr;		\
94 	goto out
95 
96 #define READ32(x)         (x) = ntohl(*p++)
97 #define READ64(x)         do {			\
98 	(x) = (u64)ntohl(*p++) << 32;		\
99 	(x) |= ntohl(*p++);			\
100 } while (0)
101 #define READTIME(x)       do {			\
102 	p++;					\
103 	(x) = ntohl(*p++);			\
104 	p++;					\
105 } while (0)
106 #define READMEM(x,nbytes) do {			\
107 	x = (char *)p;				\
108 	p += XDR_QUADLEN(nbytes);		\
109 } while (0)
110 #define SAVEMEM(x,nbytes) do {			\
111 	if (!(x = (p==argp->tmp || p == argp->tmpp) ? \
112  		savemem(argp, p, nbytes) :	\
113  		(char *)p)) {			\
114 		dprintk("NFSD: xdr error (%s:%d)\n", \
115 				__FILE__, __LINE__); \
116 		goto xdr_error;			\
117 		}				\
118 	p += XDR_QUADLEN(nbytes);		\
119 } while (0)
120 #define COPYMEM(x,nbytes) do {			\
121 	memcpy((x), p, nbytes);			\
122 	p += XDR_QUADLEN(nbytes);		\
123 } while (0)
124 
125 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */
126 #define READ_BUF(nbytes)  do {			\
127 	if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) {	\
128 		p = argp->p;			\
129 		argp->p += XDR_QUADLEN(nbytes);	\
130 	} else if (!(p = read_buf(argp, nbytes))) { \
131 		dprintk("NFSD: xdr error (%s:%d)\n", \
132 				__FILE__, __LINE__); \
133 		goto xdr_error;			\
134 	}					\
135 } while (0)
136 
137 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes)
138 {
139 	/* We want more bytes than seem to be available.
140 	 * Maybe we need a new page, maybe we have just run out
141 	 */
142 	unsigned int avail = (char *)argp->end - (char *)argp->p;
143 	__be32 *p;
144 	if (avail + argp->pagelen < nbytes)
145 		return NULL;
146 	if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */
147 		return NULL;
148 	/* ok, we can do it with the current plus the next page */
149 	if (nbytes <= sizeof(argp->tmp))
150 		p = argp->tmp;
151 	else {
152 		kfree(argp->tmpp);
153 		p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL);
154 		if (!p)
155 			return NULL;
156 
157 	}
158 	/*
159 	 * The following memcpy is safe because read_buf is always
160 	 * called with nbytes > avail, and the two cases above both
161 	 * guarantee p points to at least nbytes bytes.
162 	 */
163 	memcpy(p, argp->p, avail);
164 	/* step to next page */
165 	argp->p = page_address(argp->pagelist[0]);
166 	argp->pagelist++;
167 	if (argp->pagelen < PAGE_SIZE) {
168 		argp->end = argp->p + (argp->pagelen>>2);
169 		argp->pagelen = 0;
170 	} else {
171 		argp->end = argp->p + (PAGE_SIZE>>2);
172 		argp->pagelen -= PAGE_SIZE;
173 	}
174 	memcpy(((char*)p)+avail, argp->p, (nbytes - avail));
175 	argp->p += XDR_QUADLEN(nbytes - avail);
176 	return p;
177 }
178 
179 static int zero_clientid(clientid_t *clid)
180 {
181 	return (clid->cl_boot == 0) && (clid->cl_id == 0);
182 }
183 
184 static int
185 defer_free(struct nfsd4_compoundargs *argp,
186 		void (*release)(const void *), void *p)
187 {
188 	struct tmpbuf *tb;
189 
190 	tb = kmalloc(sizeof(*tb), GFP_KERNEL);
191 	if (!tb)
192 		return -ENOMEM;
193 	tb->buf = p;
194 	tb->release = release;
195 	tb->next = argp->to_free;
196 	argp->to_free = tb;
197 	return 0;
198 }
199 
200 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes)
201 {
202 	if (p == argp->tmp) {
203 		p = kmemdup(argp->tmp, nbytes, GFP_KERNEL);
204 		if (!p)
205 			return NULL;
206 	} else {
207 		BUG_ON(p != argp->tmpp);
208 		argp->tmpp = NULL;
209 	}
210 	if (defer_free(argp, kfree, p)) {
211 		kfree(p);
212 		return NULL;
213 	} else
214 		return (char *)p;
215 }
216 
217 static __be32
218 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval)
219 {
220 	u32 bmlen;
221 	DECODE_HEAD;
222 
223 	bmval[0] = 0;
224 	bmval[1] = 0;
225 	bmval[2] = 0;
226 
227 	READ_BUF(4);
228 	READ32(bmlen);
229 	if (bmlen > 1000)
230 		goto xdr_error;
231 
232 	READ_BUF(bmlen << 2);
233 	if (bmlen > 0)
234 		READ32(bmval[0]);
235 	if (bmlen > 1)
236 		READ32(bmval[1]);
237 	if (bmlen > 2)
238 		READ32(bmval[2]);
239 
240 	DECODE_TAIL;
241 }
242 
243 static __be32
244 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
245 		   struct iattr *iattr, struct nfs4_acl **acl)
246 {
247 	int expected_len, len = 0;
248 	u32 dummy32;
249 	char *buf;
250 	int host_err;
251 
252 	DECODE_HEAD;
253 	iattr->ia_valid = 0;
254 	if ((status = nfsd4_decode_bitmap(argp, bmval)))
255 		return status;
256 
257 	READ_BUF(4);
258 	READ32(expected_len);
259 
260 	if (bmval[0] & FATTR4_WORD0_SIZE) {
261 		READ_BUF(8);
262 		len += 8;
263 		READ64(iattr->ia_size);
264 		iattr->ia_valid |= ATTR_SIZE;
265 	}
266 	if (bmval[0] & FATTR4_WORD0_ACL) {
267 		int nace;
268 		struct nfs4_ace *ace;
269 
270 		READ_BUF(4); len += 4;
271 		READ32(nace);
272 
273 		if (nace > NFS4_ACL_MAX)
274 			return nfserr_resource;
275 
276 		*acl = nfs4_acl_new(nace);
277 		if (*acl == NULL) {
278 			host_err = -ENOMEM;
279 			goto out_nfserr;
280 		}
281 		defer_free(argp, kfree, *acl);
282 
283 		(*acl)->naces = nace;
284 		for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) {
285 			READ_BUF(16); len += 16;
286 			READ32(ace->type);
287 			READ32(ace->flag);
288 			READ32(ace->access_mask);
289 			READ32(dummy32);
290 			READ_BUF(dummy32);
291 			len += XDR_QUADLEN(dummy32) << 2;
292 			READMEM(buf, dummy32);
293 			ace->whotype = nfs4_acl_get_whotype(buf, dummy32);
294 			status = nfs_ok;
295 			if (ace->whotype != NFS4_ACL_WHO_NAMED)
296 				ace->who = 0;
297 			else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
298 				status = nfsd_map_name_to_gid(argp->rqstp,
299 						buf, dummy32, &ace->who);
300 			else
301 				status = nfsd_map_name_to_uid(argp->rqstp,
302 						buf, dummy32, &ace->who);
303 			if (status)
304 				return status;
305 		}
306 	} else
307 		*acl = NULL;
308 	if (bmval[1] & FATTR4_WORD1_MODE) {
309 		READ_BUF(4);
310 		len += 4;
311 		READ32(iattr->ia_mode);
312 		iattr->ia_mode &= (S_IFMT | S_IALLUGO);
313 		iattr->ia_valid |= ATTR_MODE;
314 	}
315 	if (bmval[1] & FATTR4_WORD1_OWNER) {
316 		READ_BUF(4);
317 		len += 4;
318 		READ32(dummy32);
319 		READ_BUF(dummy32);
320 		len += (XDR_QUADLEN(dummy32) << 2);
321 		READMEM(buf, dummy32);
322 		if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid)))
323 			return status;
324 		iattr->ia_valid |= ATTR_UID;
325 	}
326 	if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
327 		READ_BUF(4);
328 		len += 4;
329 		READ32(dummy32);
330 		READ_BUF(dummy32);
331 		len += (XDR_QUADLEN(dummy32) << 2);
332 		READMEM(buf, dummy32);
333 		if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid)))
334 			return status;
335 		iattr->ia_valid |= ATTR_GID;
336 	}
337 	if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
338 		READ_BUF(4);
339 		len += 4;
340 		READ32(dummy32);
341 		switch (dummy32) {
342 		case NFS4_SET_TO_CLIENT_TIME:
343 			/* We require the high 32 bits of 'seconds' to be 0, and we ignore
344 			   all 32 bits of 'nseconds'. */
345 			READ_BUF(12);
346 			len += 12;
347 			READ32(dummy32);
348 			if (dummy32)
349 				return nfserr_inval;
350 			READ32(iattr->ia_atime.tv_sec);
351 			READ32(iattr->ia_atime.tv_nsec);
352 			if (iattr->ia_atime.tv_nsec >= (u32)1000000000)
353 				return nfserr_inval;
354 			iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
355 			break;
356 		case NFS4_SET_TO_SERVER_TIME:
357 			iattr->ia_valid |= ATTR_ATIME;
358 			break;
359 		default:
360 			goto xdr_error;
361 		}
362 	}
363 	if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
364 		READ_BUF(4);
365 		len += 4;
366 		READ32(dummy32);
367 		switch (dummy32) {
368 		case NFS4_SET_TO_CLIENT_TIME:
369 			/* We require the high 32 bits of 'seconds' to be 0, and we ignore
370 			   all 32 bits of 'nseconds'. */
371 			READ_BUF(12);
372 			len += 12;
373 			READ32(dummy32);
374 			if (dummy32)
375 				return nfserr_inval;
376 			READ32(iattr->ia_mtime.tv_sec);
377 			READ32(iattr->ia_mtime.tv_nsec);
378 			if (iattr->ia_mtime.tv_nsec >= (u32)1000000000)
379 				return nfserr_inval;
380 			iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
381 			break;
382 		case NFS4_SET_TO_SERVER_TIME:
383 			iattr->ia_valid |= ATTR_MTIME;
384 			break;
385 		default:
386 			goto xdr_error;
387 		}
388 	}
389 	if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
390 	    || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
391 	    || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2)
392 		READ_BUF(expected_len - len);
393 	else if (len != expected_len)
394 		goto xdr_error;
395 
396 	DECODE_TAIL;
397 
398 out_nfserr:
399 	status = nfserrno(host_err);
400 	goto out;
401 }
402 
403 static __be32
404 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid)
405 {
406 	DECODE_HEAD;
407 
408 	READ_BUF(sizeof(stateid_t));
409 	READ32(sid->si_generation);
410 	COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
411 
412 	DECODE_TAIL;
413 }
414 
415 static __be32
416 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access)
417 {
418 	DECODE_HEAD;
419 
420 	READ_BUF(4);
421 	READ32(access->ac_req_access);
422 
423 	DECODE_TAIL;
424 }
425 
426 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs)
427 {
428 	DECODE_HEAD;
429 	u32 dummy, uid, gid;
430 	char *machine_name;
431 	int i;
432 	int nr_secflavs;
433 
434 	/* callback_sec_params4 */
435 	READ_BUF(4);
436 	READ32(nr_secflavs);
437 	cbs->flavor = (u32)(-1);
438 	for (i = 0; i < nr_secflavs; ++i) {
439 		READ_BUF(4);
440 		READ32(dummy);
441 		switch (dummy) {
442 		case RPC_AUTH_NULL:
443 			/* Nothing to read */
444 			if (cbs->flavor == (u32)(-1))
445 				cbs->flavor = RPC_AUTH_NULL;
446 			break;
447 		case RPC_AUTH_UNIX:
448 			READ_BUF(8);
449 			/* stamp */
450 			READ32(dummy);
451 
452 			/* machine name */
453 			READ32(dummy);
454 			READ_BUF(dummy);
455 			SAVEMEM(machine_name, dummy);
456 
457 			/* uid, gid */
458 			READ_BUF(8);
459 			READ32(uid);
460 			READ32(gid);
461 
462 			/* more gids */
463 			READ_BUF(4);
464 			READ32(dummy);
465 			READ_BUF(dummy * 4);
466 			if (cbs->flavor == (u32)(-1)) {
467 				cbs->uid = uid;
468 				cbs->gid = gid;
469 				cbs->flavor = RPC_AUTH_UNIX;
470 			}
471 			break;
472 		case RPC_AUTH_GSS:
473 			dprintk("RPC_AUTH_GSS callback secflavor "
474 				"not supported!\n");
475 			READ_BUF(8);
476 			/* gcbp_service */
477 			READ32(dummy);
478 			/* gcbp_handle_from_server */
479 			READ32(dummy);
480 			READ_BUF(dummy);
481 			p += XDR_QUADLEN(dummy);
482 			/* gcbp_handle_from_client */
483 			READ_BUF(4);
484 			READ32(dummy);
485 			READ_BUF(dummy);
486 			break;
487 		default:
488 			dprintk("Illegal callback secflavor\n");
489 			return nfserr_inval;
490 		}
491 	}
492 	DECODE_TAIL;
493 }
494 
495 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc)
496 {
497 	DECODE_HEAD;
498 
499 	READ_BUF(4);
500 	READ32(bc->bc_cb_program);
501 	nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec);
502 
503 	DECODE_TAIL;
504 }
505 
506 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts)
507 {
508 	DECODE_HEAD;
509 
510 	READ_BUF(NFS4_MAX_SESSIONID_LEN + 8);
511 	COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
512 	READ32(bcts->dir);
513 	/* XXX: skipping ctsa_use_conn_in_rdma_mode.  Perhaps Tom Tucker
514 	 * could help us figure out we should be using it. */
515 	DECODE_TAIL;
516 }
517 
518 static __be32
519 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
520 {
521 	DECODE_HEAD;
522 
523 	READ_BUF(4);
524 	READ32(close->cl_seqid);
525 	return nfsd4_decode_stateid(argp, &close->cl_stateid);
526 
527 	DECODE_TAIL;
528 }
529 
530 
531 static __be32
532 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit)
533 {
534 	DECODE_HEAD;
535 
536 	READ_BUF(12);
537 	READ64(commit->co_offset);
538 	READ32(commit->co_count);
539 
540 	DECODE_TAIL;
541 }
542 
543 static __be32
544 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create)
545 {
546 	DECODE_HEAD;
547 
548 	READ_BUF(4);
549 	READ32(create->cr_type);
550 	switch (create->cr_type) {
551 	case NF4LNK:
552 		READ_BUF(4);
553 		READ32(create->cr_linklen);
554 		READ_BUF(create->cr_linklen);
555 		SAVEMEM(create->cr_linkname, create->cr_linklen);
556 		break;
557 	case NF4BLK:
558 	case NF4CHR:
559 		READ_BUF(8);
560 		READ32(create->cr_specdata1);
561 		READ32(create->cr_specdata2);
562 		break;
563 	case NF4SOCK:
564 	case NF4FIFO:
565 	case NF4DIR:
566 	default:
567 		break;
568 	}
569 
570 	READ_BUF(4);
571 	READ32(create->cr_namelen);
572 	READ_BUF(create->cr_namelen);
573 	SAVEMEM(create->cr_name, create->cr_namelen);
574 	if ((status = check_filename(create->cr_name, create->cr_namelen)))
575 		return status;
576 
577 	status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr,
578 				    &create->cr_acl);
579 	if (status)
580 		goto out;
581 
582 	DECODE_TAIL;
583 }
584 
585 static inline __be32
586 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr)
587 {
588 	return nfsd4_decode_stateid(argp, &dr->dr_stateid);
589 }
590 
591 static inline __be32
592 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr)
593 {
594 	return nfsd4_decode_bitmap(argp, getattr->ga_bmval);
595 }
596 
597 static __be32
598 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
599 {
600 	DECODE_HEAD;
601 
602 	READ_BUF(4);
603 	READ32(link->li_namelen);
604 	READ_BUF(link->li_namelen);
605 	SAVEMEM(link->li_name, link->li_namelen);
606 	if ((status = check_filename(link->li_name, link->li_namelen)))
607 		return status;
608 
609 	DECODE_TAIL;
610 }
611 
612 static __be32
613 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
614 {
615 	DECODE_HEAD;
616 
617 	/*
618 	* type, reclaim(boolean), offset, length, new_lock_owner(boolean)
619 	*/
620 	READ_BUF(28);
621 	READ32(lock->lk_type);
622 	if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
623 		goto xdr_error;
624 	READ32(lock->lk_reclaim);
625 	READ64(lock->lk_offset);
626 	READ64(lock->lk_length);
627 	READ32(lock->lk_is_new);
628 
629 	if (lock->lk_is_new) {
630 		READ_BUF(4);
631 		READ32(lock->lk_new_open_seqid);
632 		status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid);
633 		if (status)
634 			return status;
635 		READ_BUF(8 + sizeof(clientid_t));
636 		READ32(lock->lk_new_lock_seqid);
637 		COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t));
638 		READ32(lock->lk_new_owner.len);
639 		READ_BUF(lock->lk_new_owner.len);
640 		READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len);
641 	} else {
642 		status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid);
643 		if (status)
644 			return status;
645 		READ_BUF(4);
646 		READ32(lock->lk_old_lock_seqid);
647 	}
648 
649 	DECODE_TAIL;
650 }
651 
652 static __be32
653 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
654 {
655 	DECODE_HEAD;
656 
657 	READ_BUF(32);
658 	READ32(lockt->lt_type);
659 	if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
660 		goto xdr_error;
661 	READ64(lockt->lt_offset);
662 	READ64(lockt->lt_length);
663 	COPYMEM(&lockt->lt_clientid, 8);
664 	READ32(lockt->lt_owner.len);
665 	READ_BUF(lockt->lt_owner.len);
666 	READMEM(lockt->lt_owner.data, lockt->lt_owner.len);
667 
668 	DECODE_TAIL;
669 }
670 
671 static __be32
672 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
673 {
674 	DECODE_HEAD;
675 
676 	READ_BUF(8);
677 	READ32(locku->lu_type);
678 	if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
679 		goto xdr_error;
680 	READ32(locku->lu_seqid);
681 	status = nfsd4_decode_stateid(argp, &locku->lu_stateid);
682 	if (status)
683 		return status;
684 	READ_BUF(16);
685 	READ64(locku->lu_offset);
686 	READ64(locku->lu_length);
687 
688 	DECODE_TAIL;
689 }
690 
691 static __be32
692 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup)
693 {
694 	DECODE_HEAD;
695 
696 	READ_BUF(4);
697 	READ32(lookup->lo_len);
698 	READ_BUF(lookup->lo_len);
699 	SAVEMEM(lookup->lo_name, lookup->lo_len);
700 	if ((status = check_filename(lookup->lo_name, lookup->lo_len)))
701 		return status;
702 
703 	DECODE_TAIL;
704 }
705 
706 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when)
707 {
708 	__be32 *p;
709 	u32 w;
710 
711 	READ_BUF(4);
712 	READ32(w);
713 	*share_access = w & NFS4_SHARE_ACCESS_MASK;
714 	*deleg_want = w & NFS4_SHARE_WANT_MASK;
715 	if (deleg_when)
716 		*deleg_when = w & NFS4_SHARE_WHEN_MASK;
717 
718 	switch (w & NFS4_SHARE_ACCESS_MASK) {
719 	case NFS4_SHARE_ACCESS_READ:
720 	case NFS4_SHARE_ACCESS_WRITE:
721 	case NFS4_SHARE_ACCESS_BOTH:
722 		break;
723 	default:
724 		return nfserr_bad_xdr;
725 	}
726 	w &= ~NFS4_SHARE_ACCESS_MASK;
727 	if (!w)
728 		return nfs_ok;
729 	if (!argp->minorversion)
730 		return nfserr_bad_xdr;
731 	switch (w & NFS4_SHARE_WANT_MASK) {
732 	case NFS4_SHARE_WANT_NO_PREFERENCE:
733 	case NFS4_SHARE_WANT_READ_DELEG:
734 	case NFS4_SHARE_WANT_WRITE_DELEG:
735 	case NFS4_SHARE_WANT_ANY_DELEG:
736 	case NFS4_SHARE_WANT_NO_DELEG:
737 	case NFS4_SHARE_WANT_CANCEL:
738 		break;
739 	default:
740 		return nfserr_bad_xdr;
741 	}
742 	w &= ~NFS4_SHARE_WANT_MASK;
743 	if (!w)
744 		return nfs_ok;
745 
746 	if (!deleg_when)	/* open_downgrade */
747 		return nfserr_inval;
748 	switch (w) {
749 	case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL:
750 	case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED:
751 	case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL |
752 	      NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED):
753 		return nfs_ok;
754 	}
755 xdr_error:
756 	return nfserr_bad_xdr;
757 }
758 
759 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
760 {
761 	__be32 *p;
762 
763 	READ_BUF(4);
764 	READ32(*x);
765 	/* Note: unlinke access bits, deny bits may be zero. */
766 	if (*x & ~NFS4_SHARE_DENY_BOTH)
767 		return nfserr_bad_xdr;
768 	return nfs_ok;
769 xdr_error:
770 	return nfserr_bad_xdr;
771 }
772 
773 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o)
774 {
775 	__be32 *p;
776 
777 	READ_BUF(4);
778 	READ32(o->len);
779 
780 	if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT)
781 		return nfserr_bad_xdr;
782 
783 	READ_BUF(o->len);
784 	SAVEMEM(o->data, o->len);
785 	return nfs_ok;
786 xdr_error:
787 	return nfserr_bad_xdr;
788 }
789 
790 static __be32
791 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
792 {
793 	DECODE_HEAD;
794 	u32 dummy;
795 
796 	memset(open->op_bmval, 0, sizeof(open->op_bmval));
797 	open->op_iattr.ia_valid = 0;
798 	open->op_openowner = NULL;
799 
800 	/* seqid, share_access, share_deny, clientid, ownerlen */
801 	READ_BUF(4);
802 	READ32(open->op_seqid);
803 	/* decode, yet ignore deleg_when until supported */
804 	status = nfsd4_decode_share_access(argp, &open->op_share_access,
805 					   &open->op_deleg_want, &dummy);
806 	if (status)
807 		goto xdr_error;
808 	status = nfsd4_decode_share_deny(argp, &open->op_share_deny);
809 	if (status)
810 		goto xdr_error;
811 	READ_BUF(sizeof(clientid_t));
812 	COPYMEM(&open->op_clientid, sizeof(clientid_t));
813 	status = nfsd4_decode_opaque(argp, &open->op_owner);
814 	if (status)
815 		goto xdr_error;
816 	READ_BUF(4);
817 	READ32(open->op_create);
818 	switch (open->op_create) {
819 	case NFS4_OPEN_NOCREATE:
820 		break;
821 	case NFS4_OPEN_CREATE:
822 		READ_BUF(4);
823 		READ32(open->op_createmode);
824 		switch (open->op_createmode) {
825 		case NFS4_CREATE_UNCHECKED:
826 		case NFS4_CREATE_GUARDED:
827 			status = nfsd4_decode_fattr(argp, open->op_bmval,
828 				&open->op_iattr, &open->op_acl);
829 			if (status)
830 				goto out;
831 			break;
832 		case NFS4_CREATE_EXCLUSIVE:
833 			READ_BUF(NFS4_VERIFIER_SIZE);
834 			COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
835 			break;
836 		case NFS4_CREATE_EXCLUSIVE4_1:
837 			if (argp->minorversion < 1)
838 				goto xdr_error;
839 			READ_BUF(NFS4_VERIFIER_SIZE);
840 			COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
841 			status = nfsd4_decode_fattr(argp, open->op_bmval,
842 				&open->op_iattr, &open->op_acl);
843 			if (status)
844 				goto out;
845 			break;
846 		default:
847 			goto xdr_error;
848 		}
849 		break;
850 	default:
851 		goto xdr_error;
852 	}
853 
854 	/* open_claim */
855 	READ_BUF(4);
856 	READ32(open->op_claim_type);
857 	switch (open->op_claim_type) {
858 	case NFS4_OPEN_CLAIM_NULL:
859 	case NFS4_OPEN_CLAIM_DELEGATE_PREV:
860 		READ_BUF(4);
861 		READ32(open->op_fname.len);
862 		READ_BUF(open->op_fname.len);
863 		SAVEMEM(open->op_fname.data, open->op_fname.len);
864 		if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
865 			return status;
866 		break;
867 	case NFS4_OPEN_CLAIM_PREVIOUS:
868 		READ_BUF(4);
869 		READ32(open->op_delegate_type);
870 		break;
871 	case NFS4_OPEN_CLAIM_DELEGATE_CUR:
872 		status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
873 		if (status)
874 			return status;
875 		READ_BUF(4);
876 		READ32(open->op_fname.len);
877 		READ_BUF(open->op_fname.len);
878 		SAVEMEM(open->op_fname.data, open->op_fname.len);
879 		if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
880 			return status;
881 		break;
882 	case NFS4_OPEN_CLAIM_FH:
883 	case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
884 		if (argp->minorversion < 1)
885 			goto xdr_error;
886 		/* void */
887 		break;
888 	case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
889 		if (argp->minorversion < 1)
890 			goto xdr_error;
891 		status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
892 		if (status)
893 			return status;
894 		break;
895 	default:
896 		goto xdr_error;
897 	}
898 
899 	DECODE_TAIL;
900 }
901 
902 static __be32
903 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf)
904 {
905 	DECODE_HEAD;
906 
907 	status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid);
908 	if (status)
909 		return status;
910 	READ_BUF(4);
911 	READ32(open_conf->oc_seqid);
912 
913 	DECODE_TAIL;
914 }
915 
916 static __be32
917 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down)
918 {
919 	DECODE_HEAD;
920 
921 	status = nfsd4_decode_stateid(argp, &open_down->od_stateid);
922 	if (status)
923 		return status;
924 	READ_BUF(4);
925 	READ32(open_down->od_seqid);
926 	status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
927 					   &open_down->od_deleg_want, NULL);
928 	if (status)
929 		return status;
930 	status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny);
931 	if (status)
932 		return status;
933 	DECODE_TAIL;
934 }
935 
936 static __be32
937 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
938 {
939 	DECODE_HEAD;
940 
941 	READ_BUF(4);
942 	READ32(putfh->pf_fhlen);
943 	if (putfh->pf_fhlen > NFS4_FHSIZE)
944 		goto xdr_error;
945 	READ_BUF(putfh->pf_fhlen);
946 	SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen);
947 
948 	DECODE_TAIL;
949 }
950 
951 static __be32
952 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
953 {
954 	DECODE_HEAD;
955 
956 	status = nfsd4_decode_stateid(argp, &read->rd_stateid);
957 	if (status)
958 		return status;
959 	READ_BUF(12);
960 	READ64(read->rd_offset);
961 	READ32(read->rd_length);
962 
963 	DECODE_TAIL;
964 }
965 
966 static __be32
967 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir)
968 {
969 	DECODE_HEAD;
970 
971 	READ_BUF(24);
972 	READ64(readdir->rd_cookie);
973 	COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data));
974 	READ32(readdir->rd_dircount);    /* just in case you needed a useless field... */
975 	READ32(readdir->rd_maxcount);
976 	if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval)))
977 		goto out;
978 
979 	DECODE_TAIL;
980 }
981 
982 static __be32
983 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove)
984 {
985 	DECODE_HEAD;
986 
987 	READ_BUF(4);
988 	READ32(remove->rm_namelen);
989 	READ_BUF(remove->rm_namelen);
990 	SAVEMEM(remove->rm_name, remove->rm_namelen);
991 	if ((status = check_filename(remove->rm_name, remove->rm_namelen)))
992 		return status;
993 
994 	DECODE_TAIL;
995 }
996 
997 static __be32
998 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename)
999 {
1000 	DECODE_HEAD;
1001 
1002 	READ_BUF(4);
1003 	READ32(rename->rn_snamelen);
1004 	READ_BUF(rename->rn_snamelen + 4);
1005 	SAVEMEM(rename->rn_sname, rename->rn_snamelen);
1006 	READ32(rename->rn_tnamelen);
1007 	READ_BUF(rename->rn_tnamelen);
1008 	SAVEMEM(rename->rn_tname, rename->rn_tnamelen);
1009 	if ((status = check_filename(rename->rn_sname, rename->rn_snamelen)))
1010 		return status;
1011 	if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen)))
1012 		return status;
1013 
1014 	DECODE_TAIL;
1015 }
1016 
1017 static __be32
1018 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid)
1019 {
1020 	DECODE_HEAD;
1021 
1022 	READ_BUF(sizeof(clientid_t));
1023 	COPYMEM(clientid, sizeof(clientid_t));
1024 
1025 	DECODE_TAIL;
1026 }
1027 
1028 static __be32
1029 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
1030 		     struct nfsd4_secinfo *secinfo)
1031 {
1032 	DECODE_HEAD;
1033 
1034 	READ_BUF(4);
1035 	READ32(secinfo->si_namelen);
1036 	READ_BUF(secinfo->si_namelen);
1037 	SAVEMEM(secinfo->si_name, secinfo->si_namelen);
1038 	status = check_filename(secinfo->si_name, secinfo->si_namelen);
1039 	if (status)
1040 		return status;
1041 	DECODE_TAIL;
1042 }
1043 
1044 static __be32
1045 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
1046 		     struct nfsd4_secinfo_no_name *sin)
1047 {
1048 	DECODE_HEAD;
1049 
1050 	READ_BUF(4);
1051 	READ32(sin->sin_style);
1052 	DECODE_TAIL;
1053 }
1054 
1055 static __be32
1056 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr)
1057 {
1058 	__be32 status;
1059 
1060 	status = nfsd4_decode_stateid(argp, &setattr->sa_stateid);
1061 	if (status)
1062 		return status;
1063 	return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr,
1064 				  &setattr->sa_acl);
1065 }
1066 
1067 static __be32
1068 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid)
1069 {
1070 	DECODE_HEAD;
1071 
1072 	READ_BUF(NFS4_VERIFIER_SIZE);
1073 	COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE);
1074 
1075 	status = nfsd4_decode_opaque(argp, &setclientid->se_name);
1076 	if (status)
1077 		return nfserr_bad_xdr;
1078 	READ_BUF(8);
1079 	READ32(setclientid->se_callback_prog);
1080 	READ32(setclientid->se_callback_netid_len);
1081 
1082 	READ_BUF(setclientid->se_callback_netid_len + 4);
1083 	SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len);
1084 	READ32(setclientid->se_callback_addr_len);
1085 
1086 	READ_BUF(setclientid->se_callback_addr_len + 4);
1087 	SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len);
1088 	READ32(setclientid->se_callback_ident);
1089 
1090 	DECODE_TAIL;
1091 }
1092 
1093 static __be32
1094 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c)
1095 {
1096 	DECODE_HEAD;
1097 
1098 	READ_BUF(8 + NFS4_VERIFIER_SIZE);
1099 	COPYMEM(&scd_c->sc_clientid, 8);
1100 	COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE);
1101 
1102 	DECODE_TAIL;
1103 }
1104 
1105 /* Also used for NVERIFY */
1106 static __be32
1107 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify)
1108 {
1109 	DECODE_HEAD;
1110 
1111 	if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval)))
1112 		goto out;
1113 
1114 	/* For convenience's sake, we compare raw xdr'd attributes in
1115 	 * nfsd4_proc_verify */
1116 
1117 	READ_BUF(4);
1118 	READ32(verify->ve_attrlen);
1119 	READ_BUF(verify->ve_attrlen);
1120 	SAVEMEM(verify->ve_attrval, verify->ve_attrlen);
1121 
1122 	DECODE_TAIL;
1123 }
1124 
1125 static __be32
1126 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
1127 {
1128 	int avail;
1129 	int len;
1130 	DECODE_HEAD;
1131 
1132 	status = nfsd4_decode_stateid(argp, &write->wr_stateid);
1133 	if (status)
1134 		return status;
1135 	READ_BUF(16);
1136 	READ64(write->wr_offset);
1137 	READ32(write->wr_stable_how);
1138 	if (write->wr_stable_how > 2)
1139 		goto xdr_error;
1140 	READ32(write->wr_buflen);
1141 
1142 	/* Sorry .. no magic macros for this.. *
1143 	 * READ_BUF(write->wr_buflen);
1144 	 * SAVEMEM(write->wr_buf, write->wr_buflen);
1145 	 */
1146 	avail = (char*)argp->end - (char*)argp->p;
1147 	if (avail + argp->pagelen < write->wr_buflen) {
1148 		dprintk("NFSD: xdr error (%s:%d)\n",
1149 				__FILE__, __LINE__);
1150 		goto xdr_error;
1151 	}
1152 	write->wr_head.iov_base = p;
1153 	write->wr_head.iov_len = avail;
1154 	WARN_ON(avail != (XDR_QUADLEN(avail) << 2));
1155 	write->wr_pagelist = argp->pagelist;
1156 
1157 	len = XDR_QUADLEN(write->wr_buflen) << 2;
1158 	if (len >= avail) {
1159 		int pages;
1160 
1161 		len -= avail;
1162 
1163 		pages = len >> PAGE_SHIFT;
1164 		argp->pagelist += pages;
1165 		argp->pagelen -= pages * PAGE_SIZE;
1166 		len -= pages * PAGE_SIZE;
1167 
1168 		argp->p = (__be32 *)page_address(argp->pagelist[0]);
1169 		argp->end = argp->p + XDR_QUADLEN(PAGE_SIZE);
1170 	}
1171 	argp->p += XDR_QUADLEN(len);
1172 
1173 	DECODE_TAIL;
1174 }
1175 
1176 static __be32
1177 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner)
1178 {
1179 	DECODE_HEAD;
1180 
1181 	READ_BUF(12);
1182 	COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t));
1183 	READ32(rlockowner->rl_owner.len);
1184 	READ_BUF(rlockowner->rl_owner.len);
1185 	READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len);
1186 
1187 	if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1188 		return nfserr_inval;
1189 	DECODE_TAIL;
1190 }
1191 
1192 static __be32
1193 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1194 			 struct nfsd4_exchange_id *exid)
1195 {
1196 	int dummy, tmp;
1197 	DECODE_HEAD;
1198 
1199 	READ_BUF(NFS4_VERIFIER_SIZE);
1200 	COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE);
1201 
1202 	status = nfsd4_decode_opaque(argp, &exid->clname);
1203 	if (status)
1204 		return nfserr_bad_xdr;
1205 
1206 	READ_BUF(4);
1207 	READ32(exid->flags);
1208 
1209 	/* Ignore state_protect4_a */
1210 	READ_BUF(4);
1211 	READ32(exid->spa_how);
1212 	switch (exid->spa_how) {
1213 	case SP4_NONE:
1214 		break;
1215 	case SP4_MACH_CRED:
1216 		/* spo_must_enforce */
1217 		READ_BUF(4);
1218 		READ32(dummy);
1219 		READ_BUF(dummy * 4);
1220 		p += dummy;
1221 
1222 		/* spo_must_allow */
1223 		READ_BUF(4);
1224 		READ32(dummy);
1225 		READ_BUF(dummy * 4);
1226 		p += dummy;
1227 		break;
1228 	case SP4_SSV:
1229 		/* ssp_ops */
1230 		READ_BUF(4);
1231 		READ32(dummy);
1232 		READ_BUF(dummy * 4);
1233 		p += dummy;
1234 
1235 		READ_BUF(4);
1236 		READ32(dummy);
1237 		READ_BUF(dummy * 4);
1238 		p += dummy;
1239 
1240 		/* ssp_hash_algs<> */
1241 		READ_BUF(4);
1242 		READ32(tmp);
1243 		while (tmp--) {
1244 			READ_BUF(4);
1245 			READ32(dummy);
1246 			READ_BUF(dummy);
1247 			p += XDR_QUADLEN(dummy);
1248 		}
1249 
1250 		/* ssp_encr_algs<> */
1251 		READ_BUF(4);
1252 		READ32(tmp);
1253 		while (tmp--) {
1254 			READ_BUF(4);
1255 			READ32(dummy);
1256 			READ_BUF(dummy);
1257 			p += XDR_QUADLEN(dummy);
1258 		}
1259 
1260 		/* ssp_window and ssp_num_gss_handles */
1261 		READ_BUF(8);
1262 		READ32(dummy);
1263 		READ32(dummy);
1264 		break;
1265 	default:
1266 		goto xdr_error;
1267 	}
1268 
1269 	/* Ignore Implementation ID */
1270 	READ_BUF(4);    /* nfs_impl_id4 array length */
1271 	READ32(dummy);
1272 
1273 	if (dummy > 1)
1274 		goto xdr_error;
1275 
1276 	if (dummy == 1) {
1277 		/* nii_domain */
1278 		READ_BUF(4);
1279 		READ32(dummy);
1280 		READ_BUF(dummy);
1281 		p += XDR_QUADLEN(dummy);
1282 
1283 		/* nii_name */
1284 		READ_BUF(4);
1285 		READ32(dummy);
1286 		READ_BUF(dummy);
1287 		p += XDR_QUADLEN(dummy);
1288 
1289 		/* nii_date */
1290 		READ_BUF(12);
1291 		p += 3;
1292 	}
1293 	DECODE_TAIL;
1294 }
1295 
1296 static __be32
1297 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1298 			    struct nfsd4_create_session *sess)
1299 {
1300 	DECODE_HEAD;
1301 	u32 dummy;
1302 
1303 	READ_BUF(16);
1304 	COPYMEM(&sess->clientid, 8);
1305 	READ32(sess->seqid);
1306 	READ32(sess->flags);
1307 
1308 	/* Fore channel attrs */
1309 	READ_BUF(28);
1310 	READ32(dummy); /* headerpadsz is always 0 */
1311 	READ32(sess->fore_channel.maxreq_sz);
1312 	READ32(sess->fore_channel.maxresp_sz);
1313 	READ32(sess->fore_channel.maxresp_cached);
1314 	READ32(sess->fore_channel.maxops);
1315 	READ32(sess->fore_channel.maxreqs);
1316 	READ32(sess->fore_channel.nr_rdma_attrs);
1317 	if (sess->fore_channel.nr_rdma_attrs == 1) {
1318 		READ_BUF(4);
1319 		READ32(sess->fore_channel.rdma_attrs);
1320 	} else if (sess->fore_channel.nr_rdma_attrs > 1) {
1321 		dprintk("Too many fore channel attr bitmaps!\n");
1322 		goto xdr_error;
1323 	}
1324 
1325 	/* Back channel attrs */
1326 	READ_BUF(28);
1327 	READ32(dummy); /* headerpadsz is always 0 */
1328 	READ32(sess->back_channel.maxreq_sz);
1329 	READ32(sess->back_channel.maxresp_sz);
1330 	READ32(sess->back_channel.maxresp_cached);
1331 	READ32(sess->back_channel.maxops);
1332 	READ32(sess->back_channel.maxreqs);
1333 	READ32(sess->back_channel.nr_rdma_attrs);
1334 	if (sess->back_channel.nr_rdma_attrs == 1) {
1335 		READ_BUF(4);
1336 		READ32(sess->back_channel.rdma_attrs);
1337 	} else if (sess->back_channel.nr_rdma_attrs > 1) {
1338 		dprintk("Too many back channel attr bitmaps!\n");
1339 		goto xdr_error;
1340 	}
1341 
1342 	READ_BUF(4);
1343 	READ32(sess->callback_prog);
1344 	nfsd4_decode_cb_sec(argp, &sess->cb_sec);
1345 	DECODE_TAIL;
1346 }
1347 
1348 static __be32
1349 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1350 			     struct nfsd4_destroy_session *destroy_session)
1351 {
1352 	DECODE_HEAD;
1353 	READ_BUF(NFS4_MAX_SESSIONID_LEN);
1354 	COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1355 
1356 	DECODE_TAIL;
1357 }
1358 
1359 static __be32
1360 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
1361 			  struct nfsd4_free_stateid *free_stateid)
1362 {
1363 	DECODE_HEAD;
1364 
1365 	READ_BUF(sizeof(stateid_t));
1366 	READ32(free_stateid->fr_stateid.si_generation);
1367 	COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t));
1368 
1369 	DECODE_TAIL;
1370 }
1371 
1372 static __be32
1373 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1374 		      struct nfsd4_sequence *seq)
1375 {
1376 	DECODE_HEAD;
1377 
1378 	READ_BUF(NFS4_MAX_SESSIONID_LEN + 16);
1379 	COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1380 	READ32(seq->seqid);
1381 	READ32(seq->slotid);
1382 	READ32(seq->maxslots);
1383 	READ32(seq->cachethis);
1384 
1385 	DECODE_TAIL;
1386 }
1387 
1388 static __be32
1389 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid)
1390 {
1391 	int i;
1392 	__be32 *p, status;
1393 	struct nfsd4_test_stateid_id *stateid;
1394 
1395 	READ_BUF(4);
1396 	test_stateid->ts_num_ids = ntohl(*p++);
1397 
1398 	INIT_LIST_HEAD(&test_stateid->ts_stateid_list);
1399 
1400 	for (i = 0; i < test_stateid->ts_num_ids; i++) {
1401 		stateid = kmalloc(sizeof(struct nfsd4_test_stateid_id), GFP_KERNEL);
1402 		if (!stateid) {
1403 			status = nfserrno(-ENOMEM);
1404 			goto out;
1405 		}
1406 
1407 		defer_free(argp, kfree, stateid);
1408 		INIT_LIST_HEAD(&stateid->ts_id_list);
1409 		list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list);
1410 
1411 		status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid);
1412 		if (status)
1413 			goto out;
1414 	}
1415 
1416 	status = 0;
1417 out:
1418 	return status;
1419 xdr_error:
1420 	dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__);
1421 	status = nfserr_bad_xdr;
1422 	goto out;
1423 }
1424 
1425 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc)
1426 {
1427 	DECODE_HEAD;
1428 
1429 	READ_BUF(8);
1430 	COPYMEM(&dc->clientid, 8);
1431 
1432 	DECODE_TAIL;
1433 }
1434 
1435 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc)
1436 {
1437 	DECODE_HEAD;
1438 
1439 	READ_BUF(4);
1440 	READ32(rc->rca_one_fs);
1441 
1442 	DECODE_TAIL;
1443 }
1444 
1445 static __be32
1446 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p)
1447 {
1448 	return nfs_ok;
1449 }
1450 
1451 static __be32
1452 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p)
1453 {
1454 	return nfserr_notsupp;
1455 }
1456 
1457 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *);
1458 
1459 static nfsd4_dec nfsd4_dec_ops[] = {
1460 	[OP_ACCESS]		= (nfsd4_dec)nfsd4_decode_access,
1461 	[OP_CLOSE]		= (nfsd4_dec)nfsd4_decode_close,
1462 	[OP_COMMIT]		= (nfsd4_dec)nfsd4_decode_commit,
1463 	[OP_CREATE]		= (nfsd4_dec)nfsd4_decode_create,
1464 	[OP_DELEGPURGE]		= (nfsd4_dec)nfsd4_decode_notsupp,
1465 	[OP_DELEGRETURN]	= (nfsd4_dec)nfsd4_decode_delegreturn,
1466 	[OP_GETATTR]		= (nfsd4_dec)nfsd4_decode_getattr,
1467 	[OP_GETFH]		= (nfsd4_dec)nfsd4_decode_noop,
1468 	[OP_LINK]		= (nfsd4_dec)nfsd4_decode_link,
1469 	[OP_LOCK]		= (nfsd4_dec)nfsd4_decode_lock,
1470 	[OP_LOCKT]		= (nfsd4_dec)nfsd4_decode_lockt,
1471 	[OP_LOCKU]		= (nfsd4_dec)nfsd4_decode_locku,
1472 	[OP_LOOKUP]		= (nfsd4_dec)nfsd4_decode_lookup,
1473 	[OP_LOOKUPP]		= (nfsd4_dec)nfsd4_decode_noop,
1474 	[OP_NVERIFY]		= (nfsd4_dec)nfsd4_decode_verify,
1475 	[OP_OPEN]		= (nfsd4_dec)nfsd4_decode_open,
1476 	[OP_OPENATTR]		= (nfsd4_dec)nfsd4_decode_notsupp,
1477 	[OP_OPEN_CONFIRM]	= (nfsd4_dec)nfsd4_decode_open_confirm,
1478 	[OP_OPEN_DOWNGRADE]	= (nfsd4_dec)nfsd4_decode_open_downgrade,
1479 	[OP_PUTFH]		= (nfsd4_dec)nfsd4_decode_putfh,
1480 	[OP_PUTPUBFH]		= (nfsd4_dec)nfsd4_decode_noop,
1481 	[OP_PUTROOTFH]		= (nfsd4_dec)nfsd4_decode_noop,
1482 	[OP_READ]		= (nfsd4_dec)nfsd4_decode_read,
1483 	[OP_READDIR]		= (nfsd4_dec)nfsd4_decode_readdir,
1484 	[OP_READLINK]		= (nfsd4_dec)nfsd4_decode_noop,
1485 	[OP_REMOVE]		= (nfsd4_dec)nfsd4_decode_remove,
1486 	[OP_RENAME]		= (nfsd4_dec)nfsd4_decode_rename,
1487 	[OP_RENEW]		= (nfsd4_dec)nfsd4_decode_renew,
1488 	[OP_RESTOREFH]		= (nfsd4_dec)nfsd4_decode_noop,
1489 	[OP_SAVEFH]		= (nfsd4_dec)nfsd4_decode_noop,
1490 	[OP_SECINFO]		= (nfsd4_dec)nfsd4_decode_secinfo,
1491 	[OP_SETATTR]		= (nfsd4_dec)nfsd4_decode_setattr,
1492 	[OP_SETCLIENTID]	= (nfsd4_dec)nfsd4_decode_setclientid,
1493 	[OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm,
1494 	[OP_VERIFY]		= (nfsd4_dec)nfsd4_decode_verify,
1495 	[OP_WRITE]		= (nfsd4_dec)nfsd4_decode_write,
1496 	[OP_RELEASE_LOCKOWNER]	= (nfsd4_dec)nfsd4_decode_release_lockowner,
1497 };
1498 
1499 static nfsd4_dec nfsd41_dec_ops[] = {
1500 	[OP_ACCESS]		= (nfsd4_dec)nfsd4_decode_access,
1501 	[OP_CLOSE]		= (nfsd4_dec)nfsd4_decode_close,
1502 	[OP_COMMIT]		= (nfsd4_dec)nfsd4_decode_commit,
1503 	[OP_CREATE]		= (nfsd4_dec)nfsd4_decode_create,
1504 	[OP_DELEGPURGE]		= (nfsd4_dec)nfsd4_decode_notsupp,
1505 	[OP_DELEGRETURN]	= (nfsd4_dec)nfsd4_decode_delegreturn,
1506 	[OP_GETATTR]		= (nfsd4_dec)nfsd4_decode_getattr,
1507 	[OP_GETFH]		= (nfsd4_dec)nfsd4_decode_noop,
1508 	[OP_LINK]		= (nfsd4_dec)nfsd4_decode_link,
1509 	[OP_LOCK]		= (nfsd4_dec)nfsd4_decode_lock,
1510 	[OP_LOCKT]		= (nfsd4_dec)nfsd4_decode_lockt,
1511 	[OP_LOCKU]		= (nfsd4_dec)nfsd4_decode_locku,
1512 	[OP_LOOKUP]		= (nfsd4_dec)nfsd4_decode_lookup,
1513 	[OP_LOOKUPP]		= (nfsd4_dec)nfsd4_decode_noop,
1514 	[OP_NVERIFY]		= (nfsd4_dec)nfsd4_decode_verify,
1515 	[OP_OPEN]		= (nfsd4_dec)nfsd4_decode_open,
1516 	[OP_OPENATTR]		= (nfsd4_dec)nfsd4_decode_notsupp,
1517 	[OP_OPEN_CONFIRM]	= (nfsd4_dec)nfsd4_decode_notsupp,
1518 	[OP_OPEN_DOWNGRADE]	= (nfsd4_dec)nfsd4_decode_open_downgrade,
1519 	[OP_PUTFH]		= (nfsd4_dec)nfsd4_decode_putfh,
1520 	[OP_PUTPUBFH]		= (nfsd4_dec)nfsd4_decode_notsupp,
1521 	[OP_PUTROOTFH]		= (nfsd4_dec)nfsd4_decode_noop,
1522 	[OP_READ]		= (nfsd4_dec)nfsd4_decode_read,
1523 	[OP_READDIR]		= (nfsd4_dec)nfsd4_decode_readdir,
1524 	[OP_READLINK]		= (nfsd4_dec)nfsd4_decode_noop,
1525 	[OP_REMOVE]		= (nfsd4_dec)nfsd4_decode_remove,
1526 	[OP_RENAME]		= (nfsd4_dec)nfsd4_decode_rename,
1527 	[OP_RENEW]		= (nfsd4_dec)nfsd4_decode_notsupp,
1528 	[OP_RESTOREFH]		= (nfsd4_dec)nfsd4_decode_noop,
1529 	[OP_SAVEFH]		= (nfsd4_dec)nfsd4_decode_noop,
1530 	[OP_SECINFO]		= (nfsd4_dec)nfsd4_decode_secinfo,
1531 	[OP_SETATTR]		= (nfsd4_dec)nfsd4_decode_setattr,
1532 	[OP_SETCLIENTID]	= (nfsd4_dec)nfsd4_decode_notsupp,
1533 	[OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp,
1534 	[OP_VERIFY]		= (nfsd4_dec)nfsd4_decode_verify,
1535 	[OP_WRITE]		= (nfsd4_dec)nfsd4_decode_write,
1536 	[OP_RELEASE_LOCKOWNER]	= (nfsd4_dec)nfsd4_decode_notsupp,
1537 
1538 	/* new operations for NFSv4.1 */
1539 	[OP_BACKCHANNEL_CTL]	= (nfsd4_dec)nfsd4_decode_backchannel_ctl,
1540 	[OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session,
1541 	[OP_EXCHANGE_ID]	= (nfsd4_dec)nfsd4_decode_exchange_id,
1542 	[OP_CREATE_SESSION]	= (nfsd4_dec)nfsd4_decode_create_session,
1543 	[OP_DESTROY_SESSION]	= (nfsd4_dec)nfsd4_decode_destroy_session,
1544 	[OP_FREE_STATEID]	= (nfsd4_dec)nfsd4_decode_free_stateid,
1545 	[OP_GET_DIR_DELEGATION]	= (nfsd4_dec)nfsd4_decode_notsupp,
1546 	[OP_GETDEVICEINFO]	= (nfsd4_dec)nfsd4_decode_notsupp,
1547 	[OP_GETDEVICELIST]	= (nfsd4_dec)nfsd4_decode_notsupp,
1548 	[OP_LAYOUTCOMMIT]	= (nfsd4_dec)nfsd4_decode_notsupp,
1549 	[OP_LAYOUTGET]		= (nfsd4_dec)nfsd4_decode_notsupp,
1550 	[OP_LAYOUTRETURN]	= (nfsd4_dec)nfsd4_decode_notsupp,
1551 	[OP_SECINFO_NO_NAME]	= (nfsd4_dec)nfsd4_decode_secinfo_no_name,
1552 	[OP_SEQUENCE]		= (nfsd4_dec)nfsd4_decode_sequence,
1553 	[OP_SET_SSV]		= (nfsd4_dec)nfsd4_decode_notsupp,
1554 	[OP_TEST_STATEID]	= (nfsd4_dec)nfsd4_decode_test_stateid,
1555 	[OP_WANT_DELEGATION]	= (nfsd4_dec)nfsd4_decode_notsupp,
1556 	[OP_DESTROY_CLIENTID]	= (nfsd4_dec)nfsd4_decode_destroy_clientid,
1557 	[OP_RECLAIM_COMPLETE]	= (nfsd4_dec)nfsd4_decode_reclaim_complete,
1558 };
1559 
1560 struct nfsd4_minorversion_ops {
1561 	nfsd4_dec *decoders;
1562 	int nops;
1563 };
1564 
1565 static struct nfsd4_minorversion_ops nfsd4_minorversion[] = {
1566 	[0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) },
1567 	[1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) },
1568 };
1569 
1570 static __be32
1571 nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
1572 {
1573 	DECODE_HEAD;
1574 	struct nfsd4_op *op;
1575 	struct nfsd4_minorversion_ops *ops;
1576 	bool cachethis = false;
1577 	int i;
1578 
1579 	READ_BUF(4);
1580 	READ32(argp->taglen);
1581 	READ_BUF(argp->taglen + 8);
1582 	SAVEMEM(argp->tag, argp->taglen);
1583 	READ32(argp->minorversion);
1584 	READ32(argp->opcnt);
1585 
1586 	if (argp->taglen > NFSD4_MAX_TAGLEN)
1587 		goto xdr_error;
1588 	if (argp->opcnt > 100)
1589 		goto xdr_error;
1590 
1591 	if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
1592 		argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL);
1593 		if (!argp->ops) {
1594 			argp->ops = argp->iops;
1595 			dprintk("nfsd: couldn't allocate room for COMPOUND\n");
1596 			goto xdr_error;
1597 		}
1598 	}
1599 
1600 	if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion))
1601 		argp->opcnt = 0;
1602 
1603 	ops = &nfsd4_minorversion[argp->minorversion];
1604 	for (i = 0; i < argp->opcnt; i++) {
1605 		op = &argp->ops[i];
1606 		op->replay = NULL;
1607 
1608 		READ_BUF(4);
1609 		READ32(op->opnum);
1610 
1611 		if (op->opnum >= FIRST_NFS4_OP && op->opnum <= LAST_NFS4_OP)
1612 			op->status = ops->decoders[op->opnum](argp, &op->u);
1613 		else {
1614 			op->opnum = OP_ILLEGAL;
1615 			op->status = nfserr_op_illegal;
1616 		}
1617 
1618 		if (op->status) {
1619 			argp->opcnt = i+1;
1620 			break;
1621 		}
1622 		/*
1623 		 * We'll try to cache the result in the DRC if any one
1624 		 * op in the compound wants to be cached:
1625 		 */
1626 		cachethis |= nfsd4_cache_this_op(op);
1627 	}
1628 	/* Sessions make the DRC unnecessary: */
1629 	if (argp->minorversion)
1630 		cachethis = false;
1631 	argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
1632 
1633 	DECODE_TAIL;
1634 }
1635 
1636 #define WRITE32(n)               *p++ = htonl(n)
1637 #define WRITE64(n)               do {				\
1638 	*p++ = htonl((u32)((n) >> 32));				\
1639 	*p++ = htonl((u32)(n));					\
1640 } while (0)
1641 #define WRITEMEM(ptr,nbytes)     do { if (nbytes > 0) {		\
1642 	*(p + XDR_QUADLEN(nbytes) -1) = 0;                      \
1643 	memcpy(p, ptr, nbytes);					\
1644 	p += XDR_QUADLEN(nbytes);				\
1645 }} while (0)
1646 
1647 static void write32(__be32 **p, u32 n)
1648 {
1649 	*(*p)++ = htonl(n);
1650 }
1651 
1652 static void write64(__be32 **p, u64 n)
1653 {
1654 	write32(p, (n >> 32));
1655 	write32(p, (u32)n);
1656 }
1657 
1658 static void write_change(__be32 **p, struct kstat *stat, struct inode *inode)
1659 {
1660 	if (IS_I_VERSION(inode)) {
1661 		write64(p, inode->i_version);
1662 	} else {
1663 		write32(p, stat->ctime.tv_sec);
1664 		write32(p, stat->ctime.tv_nsec);
1665 	}
1666 }
1667 
1668 static void write_cinfo(__be32 **p, struct nfsd4_change_info *c)
1669 {
1670 	write32(p, c->atomic);
1671 	if (c->change_supported) {
1672 		write64(p, c->before_change);
1673 		write64(p, c->after_change);
1674 	} else {
1675 		write32(p, c->before_ctime_sec);
1676 		write32(p, c->before_ctime_nsec);
1677 		write32(p, c->after_ctime_sec);
1678 		write32(p, c->after_ctime_nsec);
1679 	}
1680 }
1681 
1682 #define RESERVE_SPACE(nbytes)	do {				\
1683 	p = resp->p;						\
1684 	BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end);		\
1685 } while (0)
1686 #define ADJUST_ARGS()		resp->p = p
1687 
1688 /*
1689  * Header routine to setup seqid operation replay cache
1690  */
1691 #define ENCODE_SEQID_OP_HEAD					\
1692 	__be32 *save;						\
1693 								\
1694 	save = resp->p;
1695 
1696 /*
1697  * Routine for encoding the result of a "seqid-mutating" NFSv4 operation.  This
1698  * is where sequence id's are incremented, and the replay cache is filled.
1699  * Note that we increment sequence id's here, at the last moment, so we're sure
1700  * we know whether the error to be returned is a sequence id mutating error.
1701  */
1702 
1703 static void encode_seqid_op_tail(struct nfsd4_compoundres *resp, __be32 *save, __be32 nfserr)
1704 {
1705 	struct nfs4_stateowner *stateowner = resp->cstate.replay_owner;
1706 
1707 	if (seqid_mutating_err(ntohl(nfserr)) && stateowner) {
1708 		stateowner->so_seqid++;
1709 		stateowner->so_replay.rp_status = nfserr;
1710 		stateowner->so_replay.rp_buflen =
1711 			  (char *)resp->p - (char *)save;
1712 		memcpy(stateowner->so_replay.rp_buf, save,
1713 			stateowner->so_replay.rp_buflen);
1714 		nfsd4_purge_closed_stateid(stateowner);
1715 	}
1716 }
1717 
1718 /* Encode as an array of strings the string given with components
1719  * separated @sep, escaped with esc_enter and esc_exit.
1720  */
1721 static __be32 nfsd4_encode_components_esc(char sep, char *components,
1722 				   __be32 **pp, int *buflen,
1723 				   char esc_enter, char esc_exit)
1724 {
1725 	__be32 *p = *pp;
1726 	__be32 *countp = p;
1727 	int strlen, count=0;
1728 	char *str, *end, *next;
1729 
1730 	dprintk("nfsd4_encode_components(%s)\n", components);
1731 	if ((*buflen -= 4) < 0)
1732 		return nfserr_resource;
1733 	WRITE32(0); /* We will fill this in with @count later */
1734 	end = str = components;
1735 	while (*end) {
1736 		bool found_esc = false;
1737 
1738 		/* try to parse as esc_start, ..., esc_end, sep */
1739 		if (*str == esc_enter) {
1740 			for (; *end && (*end != esc_exit); end++)
1741 				/* find esc_exit or end of string */;
1742 			next = end + 1;
1743 			if (*end && (!*next || *next == sep)) {
1744 				str++;
1745 				found_esc = true;
1746 			}
1747 		}
1748 
1749 		if (!found_esc)
1750 			for (; *end && (*end != sep); end++)
1751 				/* find sep or end of string */;
1752 
1753 		strlen = end - str;
1754 		if (strlen) {
1755 			if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0)
1756 				return nfserr_resource;
1757 			WRITE32(strlen);
1758 			WRITEMEM(str, strlen);
1759 			count++;
1760 		}
1761 		else
1762 			end++;
1763 		str = end;
1764 	}
1765 	*pp = p;
1766 	p = countp;
1767 	WRITE32(count);
1768 	return 0;
1769 }
1770 
1771 /* Encode as an array of strings the string given with components
1772  * separated @sep.
1773  */
1774 static __be32 nfsd4_encode_components(char sep, char *components,
1775 				   __be32 **pp, int *buflen)
1776 {
1777 	return nfsd4_encode_components_esc(sep, components, pp, buflen, 0, 0);
1778 }
1779 
1780 /*
1781  * encode a location element of a fs_locations structure
1782  */
1783 static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location,
1784 				    __be32 **pp, int *buflen)
1785 {
1786 	__be32 status;
1787 	__be32 *p = *pp;
1788 
1789 	status = nfsd4_encode_components_esc(':', location->hosts, &p, buflen,
1790 						'[', ']');
1791 	if (status)
1792 		return status;
1793 	status = nfsd4_encode_components('/', location->path, &p, buflen);
1794 	if (status)
1795 		return status;
1796 	*pp = p;
1797 	return 0;
1798 }
1799 
1800 /*
1801  * Encode a path in RFC3530 'pathname4' format
1802  */
1803 static __be32 nfsd4_encode_path(const struct path *root,
1804 		const struct path *path, __be32 **pp, int *buflen)
1805 {
1806 	struct path cur = {
1807 		.mnt = path->mnt,
1808 		.dentry = path->dentry,
1809 	};
1810 	__be32 *p = *pp;
1811 	struct dentry **components = NULL;
1812 	unsigned int ncomponents = 0;
1813 	__be32 err = nfserr_jukebox;
1814 
1815 	dprintk("nfsd4_encode_components(");
1816 
1817 	path_get(&cur);
1818 	/* First walk the path up to the nfsd root, and store the
1819 	 * dentries/path components in an array.
1820 	 */
1821 	for (;;) {
1822 		if (cur.dentry == root->dentry && cur.mnt == root->mnt)
1823 			break;
1824 		if (cur.dentry == cur.mnt->mnt_root) {
1825 			if (follow_up(&cur))
1826 				continue;
1827 			goto out_free;
1828 		}
1829 		if ((ncomponents & 15) == 0) {
1830 			struct dentry **new;
1831 			new = krealloc(components,
1832 					sizeof(*new) * (ncomponents + 16),
1833 					GFP_KERNEL);
1834 			if (!new)
1835 				goto out_free;
1836 			components = new;
1837 		}
1838 		components[ncomponents++] = cur.dentry;
1839 		cur.dentry = dget_parent(cur.dentry);
1840 	}
1841 
1842 	*buflen -= 4;
1843 	if (*buflen < 0)
1844 		goto out_free;
1845 	WRITE32(ncomponents);
1846 
1847 	while (ncomponents) {
1848 		struct dentry *dentry = components[ncomponents - 1];
1849 		unsigned int len = dentry->d_name.len;
1850 
1851 		*buflen -= 4 + (XDR_QUADLEN(len) << 2);
1852 		if (*buflen < 0)
1853 			goto out_free;
1854 		WRITE32(len);
1855 		WRITEMEM(dentry->d_name.name, len);
1856 		dprintk("/%s", dentry->d_name.name);
1857 		dput(dentry);
1858 		ncomponents--;
1859 	}
1860 
1861 	*pp = p;
1862 	err = 0;
1863 out_free:
1864 	dprintk(")\n");
1865 	while (ncomponents)
1866 		dput(components[--ncomponents]);
1867 	kfree(components);
1868 	path_put(&cur);
1869 	return err;
1870 }
1871 
1872 static __be32 nfsd4_encode_fsloc_fsroot(struct svc_rqst *rqstp,
1873 		const struct path *path, __be32 **pp, int *buflen)
1874 {
1875 	struct svc_export *exp_ps;
1876 	__be32 res;
1877 
1878 	exp_ps = rqst_find_fsidzero_export(rqstp);
1879 	if (IS_ERR(exp_ps))
1880 		return nfserrno(PTR_ERR(exp_ps));
1881 	res = nfsd4_encode_path(&exp_ps->ex_path, path, pp, buflen);
1882 	exp_put(exp_ps);
1883 	return res;
1884 }
1885 
1886 /*
1887  *  encode a fs_locations structure
1888  */
1889 static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp,
1890 				     struct svc_export *exp,
1891 				     __be32 **pp, int *buflen)
1892 {
1893 	__be32 status;
1894 	int i;
1895 	__be32 *p = *pp;
1896 	struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
1897 
1898 	status = nfsd4_encode_fsloc_fsroot(rqstp, &exp->ex_path, &p, buflen);
1899 	if (status)
1900 		return status;
1901 	if ((*buflen -= 4) < 0)
1902 		return nfserr_resource;
1903 	WRITE32(fslocs->locations_count);
1904 	for (i=0; i<fslocs->locations_count; i++) {
1905 		status = nfsd4_encode_fs_location4(&fslocs->locations[i],
1906 						   &p, buflen);
1907 		if (status)
1908 			return status;
1909 	}
1910 	*pp = p;
1911 	return 0;
1912 }
1913 
1914 static u32 nfs4_file_type(umode_t mode)
1915 {
1916 	switch (mode & S_IFMT) {
1917 	case S_IFIFO:	return NF4FIFO;
1918 	case S_IFCHR:	return NF4CHR;
1919 	case S_IFDIR:	return NF4DIR;
1920 	case S_IFBLK:	return NF4BLK;
1921 	case S_IFLNK:	return NF4LNK;
1922 	case S_IFREG:	return NF4REG;
1923 	case S_IFSOCK:	return NF4SOCK;
1924 	default:	return NF4BAD;
1925 	};
1926 }
1927 
1928 static __be32
1929 nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, uid_t id, int group,
1930 			__be32 **p, int *buflen)
1931 {
1932 	int status;
1933 
1934 	if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4)
1935 		return nfserr_resource;
1936 	if (whotype != NFS4_ACL_WHO_NAMED)
1937 		status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1));
1938 	else if (group)
1939 		status = nfsd_map_gid_to_name(rqstp, id, (u8 *)(*p + 1));
1940 	else
1941 		status = nfsd_map_uid_to_name(rqstp, id, (u8 *)(*p + 1));
1942 	if (status < 0)
1943 		return nfserrno(status);
1944 	*p = xdr_encode_opaque(*p, NULL, status);
1945 	*buflen -= (XDR_QUADLEN(status) << 2) + 4;
1946 	BUG_ON(*buflen < 0);
1947 	return 0;
1948 }
1949 
1950 static inline __be32
1951 nfsd4_encode_user(struct svc_rqst *rqstp, uid_t uid, __be32 **p, int *buflen)
1952 {
1953 	return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, uid, 0, p, buflen);
1954 }
1955 
1956 static inline __be32
1957 nfsd4_encode_group(struct svc_rqst *rqstp, uid_t gid, __be32 **p, int *buflen)
1958 {
1959 	return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, gid, 1, p, buflen);
1960 }
1961 
1962 static inline __be32
1963 nfsd4_encode_aclname(struct svc_rqst *rqstp, int whotype, uid_t id, int group,
1964 		__be32 **p, int *buflen)
1965 {
1966 	return nfsd4_encode_name(rqstp, whotype, id, group, p, buflen);
1967 }
1968 
1969 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
1970 			      FATTR4_WORD0_RDATTR_ERROR)
1971 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
1972 
1973 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err)
1974 {
1975 	/* As per referral draft:  */
1976 	if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
1977 	    *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
1978 		if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
1979 	            *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
1980 			*rdattr_err = NFSERR_MOVED;
1981 		else
1982 			return nfserr_moved;
1983 	}
1984 	*bmval0 &= WORD0_ABSENT_FS_ATTRS;
1985 	*bmval1 &= WORD1_ABSENT_FS_ATTRS;
1986 	return 0;
1987 }
1988 
1989 
1990 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat)
1991 {
1992 	struct path path = exp->ex_path;
1993 	int err;
1994 
1995 	path_get(&path);
1996 	while (follow_up(&path)) {
1997 		if (path.dentry != path.mnt->mnt_root)
1998 			break;
1999 	}
2000 	err = vfs_getattr(path.mnt, path.dentry, stat);
2001 	path_put(&path);
2002 	return err;
2003 }
2004 
2005 /*
2006  * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
2007  * ourselves.
2008  *
2009  * @countp is the buffer size in _words_; upon successful return this becomes
2010  * replaced with the number of words written.
2011  */
2012 __be32
2013 nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
2014 		struct dentry *dentry, __be32 *buffer, int *countp, u32 *bmval,
2015 		struct svc_rqst *rqstp, int ignore_crossmnt)
2016 {
2017 	u32 bmval0 = bmval[0];
2018 	u32 bmval1 = bmval[1];
2019 	u32 bmval2 = bmval[2];
2020 	struct kstat stat;
2021 	struct svc_fh tempfh;
2022 	struct kstatfs statfs;
2023 	int buflen = *countp << 2;
2024 	__be32 *attrlenp;
2025 	u32 dummy;
2026 	u64 dummy64;
2027 	u32 rdattr_err = 0;
2028 	__be32 *p = buffer;
2029 	__be32 status;
2030 	int err;
2031 	int aclsupport = 0;
2032 	struct nfs4_acl *acl = NULL;
2033 	struct nfsd4_compoundres *resp = rqstp->rq_resp;
2034 	u32 minorversion = resp->cstate.minorversion;
2035 	struct path path = {
2036 		.mnt	= exp->ex_path.mnt,
2037 		.dentry	= dentry,
2038 	};
2039 	struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
2040 
2041 	BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1);
2042 	BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion));
2043 	BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion));
2044 	BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion));
2045 
2046 	if (exp->ex_fslocs.migrated) {
2047 		BUG_ON(bmval[2]);
2048 		status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err);
2049 		if (status)
2050 			goto out;
2051 	}
2052 
2053 	err = vfs_getattr(exp->ex_path.mnt, dentry, &stat);
2054 	if (err)
2055 		goto out_nfserr;
2056 	if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL |
2057 			FATTR4_WORD0_MAXNAME)) ||
2058 	    (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
2059 		       FATTR4_WORD1_SPACE_TOTAL))) {
2060 		err = vfs_statfs(&path, &statfs);
2061 		if (err)
2062 			goto out_nfserr;
2063 	}
2064 	if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) {
2065 		fh_init(&tempfh, NFS4_FHSIZE);
2066 		status = fh_compose(&tempfh, exp, dentry, NULL);
2067 		if (status)
2068 			goto out;
2069 		fhp = &tempfh;
2070 	}
2071 	if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT
2072 			| FATTR4_WORD0_SUPPORTED_ATTRS)) {
2073 		err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl);
2074 		aclsupport = (err == 0);
2075 		if (bmval0 & FATTR4_WORD0_ACL) {
2076 			if (err == -EOPNOTSUPP)
2077 				bmval0 &= ~FATTR4_WORD0_ACL;
2078 			else if (err == -EINVAL) {
2079 				status = nfserr_attrnotsupp;
2080 				goto out;
2081 			} else if (err != 0)
2082 				goto out_nfserr;
2083 		}
2084 	}
2085 
2086 	if (bmval2) {
2087 		if ((buflen -= 16) < 0)
2088 			goto out_resource;
2089 		WRITE32(3);
2090 		WRITE32(bmval0);
2091 		WRITE32(bmval1);
2092 		WRITE32(bmval2);
2093 	} else if (bmval1) {
2094 		if ((buflen -= 12) < 0)
2095 			goto out_resource;
2096 		WRITE32(2);
2097 		WRITE32(bmval0);
2098 		WRITE32(bmval1);
2099 	} else {
2100 		if ((buflen -= 8) < 0)
2101 			goto out_resource;
2102 		WRITE32(1);
2103 		WRITE32(bmval0);
2104 	}
2105 	attrlenp = p++;                /* to be backfilled later */
2106 
2107 	if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2108 		u32 word0 = nfsd_suppattrs0(minorversion);
2109 		u32 word1 = nfsd_suppattrs1(minorversion);
2110 		u32 word2 = nfsd_suppattrs2(minorversion);
2111 
2112 		if (!aclsupport)
2113 			word0 &= ~FATTR4_WORD0_ACL;
2114 		if (!word2) {
2115 			if ((buflen -= 12) < 0)
2116 				goto out_resource;
2117 			WRITE32(2);
2118 			WRITE32(word0);
2119 			WRITE32(word1);
2120 		} else {
2121 			if ((buflen -= 16) < 0)
2122 				goto out_resource;
2123 			WRITE32(3);
2124 			WRITE32(word0);
2125 			WRITE32(word1);
2126 			WRITE32(word2);
2127 		}
2128 	}
2129 	if (bmval0 & FATTR4_WORD0_TYPE) {
2130 		if ((buflen -= 4) < 0)
2131 			goto out_resource;
2132 		dummy = nfs4_file_type(stat.mode);
2133 		if (dummy == NF4BAD)
2134 			goto out_serverfault;
2135 		WRITE32(dummy);
2136 	}
2137 	if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
2138 		if ((buflen -= 4) < 0)
2139 			goto out_resource;
2140 		if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
2141 			WRITE32(NFS4_FH_PERSISTENT);
2142 		else
2143 			WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME);
2144 	}
2145 	if (bmval0 & FATTR4_WORD0_CHANGE) {
2146 		if ((buflen -= 8) < 0)
2147 			goto out_resource;
2148 		write_change(&p, &stat, dentry->d_inode);
2149 	}
2150 	if (bmval0 & FATTR4_WORD0_SIZE) {
2151 		if ((buflen -= 8) < 0)
2152 			goto out_resource;
2153 		WRITE64(stat.size);
2154 	}
2155 	if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
2156 		if ((buflen -= 4) < 0)
2157 			goto out_resource;
2158 		WRITE32(1);
2159 	}
2160 	if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
2161 		if ((buflen -= 4) < 0)
2162 			goto out_resource;
2163 		WRITE32(1);
2164 	}
2165 	if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
2166 		if ((buflen -= 4) < 0)
2167 			goto out_resource;
2168 		WRITE32(0);
2169 	}
2170 	if (bmval0 & FATTR4_WORD0_FSID) {
2171 		if ((buflen -= 16) < 0)
2172 			goto out_resource;
2173 		if (exp->ex_fslocs.migrated) {
2174 			WRITE64(NFS4_REFERRAL_FSID_MAJOR);
2175 			WRITE64(NFS4_REFERRAL_FSID_MINOR);
2176 		} else switch(fsid_source(fhp)) {
2177 		case FSIDSOURCE_FSID:
2178 			WRITE64((u64)exp->ex_fsid);
2179 			WRITE64((u64)0);
2180 			break;
2181 		case FSIDSOURCE_DEV:
2182 			WRITE32(0);
2183 			WRITE32(MAJOR(stat.dev));
2184 			WRITE32(0);
2185 			WRITE32(MINOR(stat.dev));
2186 			break;
2187 		case FSIDSOURCE_UUID:
2188 			WRITEMEM(exp->ex_uuid, 16);
2189 			break;
2190 		}
2191 	}
2192 	if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
2193 		if ((buflen -= 4) < 0)
2194 			goto out_resource;
2195 		WRITE32(0);
2196 	}
2197 	if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
2198 		if ((buflen -= 4) < 0)
2199 			goto out_resource;
2200 		WRITE32(nn->nfsd4_lease);
2201 	}
2202 	if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
2203 		if ((buflen -= 4) < 0)
2204 			goto out_resource;
2205 		WRITE32(rdattr_err);
2206 	}
2207 	if (bmval0 & FATTR4_WORD0_ACL) {
2208 		struct nfs4_ace *ace;
2209 
2210 		if (acl == NULL) {
2211 			if ((buflen -= 4) < 0)
2212 				goto out_resource;
2213 
2214 			WRITE32(0);
2215 			goto out_acl;
2216 		}
2217 		if ((buflen -= 4) < 0)
2218 			goto out_resource;
2219 		WRITE32(acl->naces);
2220 
2221 		for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
2222 			if ((buflen -= 4*3) < 0)
2223 				goto out_resource;
2224 			WRITE32(ace->type);
2225 			WRITE32(ace->flag);
2226 			WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL);
2227 			status = nfsd4_encode_aclname(rqstp, ace->whotype,
2228 				ace->who, ace->flag & NFS4_ACE_IDENTIFIER_GROUP,
2229 				&p, &buflen);
2230 			if (status == nfserr_resource)
2231 				goto out_resource;
2232 			if (status)
2233 				goto out;
2234 		}
2235 	}
2236 out_acl:
2237 	if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
2238 		if ((buflen -= 4) < 0)
2239 			goto out_resource;
2240 		WRITE32(aclsupport ?
2241 			ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
2242 	}
2243 	if (bmval0 & FATTR4_WORD0_CANSETTIME) {
2244 		if ((buflen -= 4) < 0)
2245 			goto out_resource;
2246 		WRITE32(1);
2247 	}
2248 	if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
2249 		if ((buflen -= 4) < 0)
2250 			goto out_resource;
2251 		WRITE32(0);
2252 	}
2253 	if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
2254 		if ((buflen -= 4) < 0)
2255 			goto out_resource;
2256 		WRITE32(1);
2257 	}
2258 	if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
2259 		if ((buflen -= 4) < 0)
2260 			goto out_resource;
2261 		WRITE32(1);
2262 	}
2263 	if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
2264 		buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4;
2265 		if (buflen < 0)
2266 			goto out_resource;
2267 		WRITE32(fhp->fh_handle.fh_size);
2268 		WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size);
2269 	}
2270 	if (bmval0 & FATTR4_WORD0_FILEID) {
2271 		if ((buflen -= 8) < 0)
2272 			goto out_resource;
2273 		WRITE64(stat.ino);
2274 	}
2275 	if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
2276 		if ((buflen -= 8) < 0)
2277 			goto out_resource;
2278 		WRITE64((u64) statfs.f_ffree);
2279 	}
2280 	if (bmval0 & FATTR4_WORD0_FILES_FREE) {
2281 		if ((buflen -= 8) < 0)
2282 			goto out_resource;
2283 		WRITE64((u64) statfs.f_ffree);
2284 	}
2285 	if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
2286 		if ((buflen -= 8) < 0)
2287 			goto out_resource;
2288 		WRITE64((u64) statfs.f_files);
2289 	}
2290 	if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
2291 		status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen);
2292 		if (status == nfserr_resource)
2293 			goto out_resource;
2294 		if (status)
2295 			goto out;
2296 	}
2297 	if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
2298 		if ((buflen -= 4) < 0)
2299 			goto out_resource;
2300 		WRITE32(1);
2301 	}
2302 	if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
2303 		if ((buflen -= 8) < 0)
2304 			goto out_resource;
2305 		WRITE64(~(u64)0);
2306 	}
2307 	if (bmval0 & FATTR4_WORD0_MAXLINK) {
2308 		if ((buflen -= 4) < 0)
2309 			goto out_resource;
2310 		WRITE32(255);
2311 	}
2312 	if (bmval0 & FATTR4_WORD0_MAXNAME) {
2313 		if ((buflen -= 4) < 0)
2314 			goto out_resource;
2315 		WRITE32(statfs.f_namelen);
2316 	}
2317 	if (bmval0 & FATTR4_WORD0_MAXREAD) {
2318 		if ((buflen -= 8) < 0)
2319 			goto out_resource;
2320 		WRITE64((u64) svc_max_payload(rqstp));
2321 	}
2322 	if (bmval0 & FATTR4_WORD0_MAXWRITE) {
2323 		if ((buflen -= 8) < 0)
2324 			goto out_resource;
2325 		WRITE64((u64) svc_max_payload(rqstp));
2326 	}
2327 	if (bmval1 & FATTR4_WORD1_MODE) {
2328 		if ((buflen -= 4) < 0)
2329 			goto out_resource;
2330 		WRITE32(stat.mode & S_IALLUGO);
2331 	}
2332 	if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
2333 		if ((buflen -= 4) < 0)
2334 			goto out_resource;
2335 		WRITE32(1);
2336 	}
2337 	if (bmval1 & FATTR4_WORD1_NUMLINKS) {
2338 		if ((buflen -= 4) < 0)
2339 			goto out_resource;
2340 		WRITE32(stat.nlink);
2341 	}
2342 	if (bmval1 & FATTR4_WORD1_OWNER) {
2343 		status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen);
2344 		if (status == nfserr_resource)
2345 			goto out_resource;
2346 		if (status)
2347 			goto out;
2348 	}
2349 	if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
2350 		status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen);
2351 		if (status == nfserr_resource)
2352 			goto out_resource;
2353 		if (status)
2354 			goto out;
2355 	}
2356 	if (bmval1 & FATTR4_WORD1_RAWDEV) {
2357 		if ((buflen -= 8) < 0)
2358 			goto out_resource;
2359 		WRITE32((u32) MAJOR(stat.rdev));
2360 		WRITE32((u32) MINOR(stat.rdev));
2361 	}
2362 	if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
2363 		if ((buflen -= 8) < 0)
2364 			goto out_resource;
2365 		dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
2366 		WRITE64(dummy64);
2367 	}
2368 	if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
2369 		if ((buflen -= 8) < 0)
2370 			goto out_resource;
2371 		dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
2372 		WRITE64(dummy64);
2373 	}
2374 	if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
2375 		if ((buflen -= 8) < 0)
2376 			goto out_resource;
2377 		dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
2378 		WRITE64(dummy64);
2379 	}
2380 	if (bmval1 & FATTR4_WORD1_SPACE_USED) {
2381 		if ((buflen -= 8) < 0)
2382 			goto out_resource;
2383 		dummy64 = (u64)stat.blocks << 9;
2384 		WRITE64(dummy64);
2385 	}
2386 	if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
2387 		if ((buflen -= 12) < 0)
2388 			goto out_resource;
2389 		WRITE32(0);
2390 		WRITE32(stat.atime.tv_sec);
2391 		WRITE32(stat.atime.tv_nsec);
2392 	}
2393 	if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
2394 		if ((buflen -= 12) < 0)
2395 			goto out_resource;
2396 		WRITE32(0);
2397 		WRITE32(1);
2398 		WRITE32(0);
2399 	}
2400 	if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
2401 		if ((buflen -= 12) < 0)
2402 			goto out_resource;
2403 		WRITE32(0);
2404 		WRITE32(stat.ctime.tv_sec);
2405 		WRITE32(stat.ctime.tv_nsec);
2406 	}
2407 	if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
2408 		if ((buflen -= 12) < 0)
2409 			goto out_resource;
2410 		WRITE32(0);
2411 		WRITE32(stat.mtime.tv_sec);
2412 		WRITE32(stat.mtime.tv_nsec);
2413 	}
2414 	if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
2415 		if ((buflen -= 8) < 0)
2416                 	goto out_resource;
2417 		/*
2418 		 * Get parent's attributes if not ignoring crossmount
2419 		 * and this is the root of a cross-mounted filesystem.
2420 		 */
2421 		if (ignore_crossmnt == 0 &&
2422 		    dentry == exp->ex_path.mnt->mnt_root)
2423 			get_parent_attributes(exp, &stat);
2424 		WRITE64(stat.ino);
2425 	}
2426 	if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
2427 		WRITE32(3);
2428 		WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0);
2429 		WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1);
2430 		WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2);
2431 	}
2432 
2433 	*attrlenp = htonl((char *)p - (char *)attrlenp - 4);
2434 	*countp = p - buffer;
2435 	status = nfs_ok;
2436 
2437 out:
2438 	kfree(acl);
2439 	if (fhp == &tempfh)
2440 		fh_put(&tempfh);
2441 	return status;
2442 out_nfserr:
2443 	status = nfserrno(err);
2444 	goto out;
2445 out_resource:
2446 	*countp = 0;
2447 	status = nfserr_resource;
2448 	goto out;
2449 out_serverfault:
2450 	status = nfserr_serverfault;
2451 	goto out;
2452 }
2453 
2454 static inline int attributes_need_mount(u32 *bmval)
2455 {
2456 	if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
2457 		return 1;
2458 	if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
2459 		return 1;
2460 	return 0;
2461 }
2462 
2463 static __be32
2464 nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd,
2465 		const char *name, int namlen, __be32 *p, int *buflen)
2466 {
2467 	struct svc_export *exp = cd->rd_fhp->fh_export;
2468 	struct dentry *dentry;
2469 	__be32 nfserr;
2470 	int ignore_crossmnt = 0;
2471 
2472 	dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen);
2473 	if (IS_ERR(dentry))
2474 		return nfserrno(PTR_ERR(dentry));
2475 	if (!dentry->d_inode) {
2476 		/*
2477 		 * nfsd_buffered_readdir drops the i_mutex between
2478 		 * readdir and calling this callback, leaving a window
2479 		 * where this directory entry could have gone away.
2480 		 */
2481 		dput(dentry);
2482 		return nfserr_noent;
2483 	}
2484 
2485 	exp_get(exp);
2486 	/*
2487 	 * In the case of a mountpoint, the client may be asking for
2488 	 * attributes that are only properties of the underlying filesystem
2489 	 * as opposed to the cross-mounted file system. In such a case,
2490 	 * we will not follow the cross mount and will fill the attribtutes
2491 	 * directly from the mountpoint dentry.
2492 	 */
2493 	if (nfsd_mountpoint(dentry, exp)) {
2494 		int err;
2495 
2496 		if (!(exp->ex_flags & NFSEXP_V4ROOT)
2497 				&& !attributes_need_mount(cd->rd_bmval)) {
2498 			ignore_crossmnt = 1;
2499 			goto out_encode;
2500 		}
2501 		/*
2502 		 * Why the heck aren't we just using nfsd_lookup??
2503 		 * Different "."/".." handling?  Something else?
2504 		 * At least, add a comment here to explain....
2505 		 */
2506 		err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
2507 		if (err) {
2508 			nfserr = nfserrno(err);
2509 			goto out_put;
2510 		}
2511 		nfserr = check_nfsd_access(exp, cd->rd_rqstp);
2512 		if (nfserr)
2513 			goto out_put;
2514 
2515 	}
2516 out_encode:
2517 	nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval,
2518 					cd->rd_rqstp, ignore_crossmnt);
2519 out_put:
2520 	dput(dentry);
2521 	exp_put(exp);
2522 	return nfserr;
2523 }
2524 
2525 static __be32 *
2526 nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr)
2527 {
2528 	__be32 *attrlenp;
2529 
2530 	if (buflen < 6)
2531 		return NULL;
2532 	*p++ = htonl(2);
2533 	*p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
2534 	*p++ = htonl(0);			 /* bmval1 */
2535 
2536 	attrlenp = p++;
2537 	*p++ = nfserr;       /* no htonl */
2538 	*attrlenp = htonl((char *)p - (char *)attrlenp - 4);
2539 	return p;
2540 }
2541 
2542 static int
2543 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
2544 		    loff_t offset, u64 ino, unsigned int d_type)
2545 {
2546 	struct readdir_cd *ccd = ccdv;
2547 	struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
2548 	int buflen;
2549 	__be32 *p = cd->buffer;
2550 	__be32 *cookiep;
2551 	__be32 nfserr = nfserr_toosmall;
2552 
2553 	/* In nfsv4, "." and ".." never make it onto the wire.. */
2554 	if (name && isdotent(name, namlen)) {
2555 		cd->common.err = nfs_ok;
2556 		return 0;
2557 	}
2558 
2559 	if (cd->offset)
2560 		xdr_encode_hyper(cd->offset, (u64) offset);
2561 
2562 	buflen = cd->buflen - 4 - XDR_QUADLEN(namlen);
2563 	if (buflen < 0)
2564 		goto fail;
2565 
2566 	*p++ = xdr_one;                             /* mark entry present */
2567 	cookiep = p;
2568 	p = xdr_encode_hyper(p, NFS_OFFSET_MAX);    /* offset of next entry */
2569 	p = xdr_encode_array(p, name, namlen);      /* name length & name */
2570 
2571 	nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, p, &buflen);
2572 	switch (nfserr) {
2573 	case nfs_ok:
2574 		p += buflen;
2575 		break;
2576 	case nfserr_resource:
2577 		nfserr = nfserr_toosmall;
2578 		goto fail;
2579 	case nfserr_noent:
2580 		goto skip_entry;
2581 	default:
2582 		/*
2583 		 * If the client requested the RDATTR_ERROR attribute,
2584 		 * we stuff the error code into this attribute
2585 		 * and continue.  If this attribute was not requested,
2586 		 * then in accordance with the spec, we fail the
2587 		 * entire READDIR operation(!)
2588 		 */
2589 		if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
2590 			goto fail;
2591 		p = nfsd4_encode_rdattr_error(p, buflen, nfserr);
2592 		if (p == NULL) {
2593 			nfserr = nfserr_toosmall;
2594 			goto fail;
2595 		}
2596 	}
2597 	cd->buflen -= (p - cd->buffer);
2598 	cd->buffer = p;
2599 	cd->offset = cookiep;
2600 skip_entry:
2601 	cd->common.err = nfs_ok;
2602 	return 0;
2603 fail:
2604 	cd->common.err = nfserr;
2605 	return -EINVAL;
2606 }
2607 
2608 static void
2609 nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid)
2610 {
2611 	__be32 *p;
2612 
2613 	RESERVE_SPACE(sizeof(stateid_t));
2614 	WRITE32(sid->si_generation);
2615 	WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
2616 	ADJUST_ARGS();
2617 }
2618 
2619 static __be32
2620 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
2621 {
2622 	__be32 *p;
2623 
2624 	if (!nfserr) {
2625 		RESERVE_SPACE(8);
2626 		WRITE32(access->ac_supported);
2627 		WRITE32(access->ac_resp_access);
2628 		ADJUST_ARGS();
2629 	}
2630 	return nfserr;
2631 }
2632 
2633 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts)
2634 {
2635 	__be32 *p;
2636 
2637 	if (!nfserr) {
2638 		RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8);
2639 		WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
2640 		WRITE32(bcts->dir);
2641 		/* Sorry, we do not yet support RDMA over 4.1: */
2642 		WRITE32(0);
2643 		ADJUST_ARGS();
2644 	}
2645 	return nfserr;
2646 }
2647 
2648 static __be32
2649 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
2650 {
2651 	ENCODE_SEQID_OP_HEAD;
2652 
2653 	if (!nfserr)
2654 		nfsd4_encode_stateid(resp, &close->cl_stateid);
2655 
2656 	encode_seqid_op_tail(resp, save, nfserr);
2657 	return nfserr;
2658 }
2659 
2660 
2661 static __be32
2662 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
2663 {
2664 	__be32 *p;
2665 
2666 	if (!nfserr) {
2667 		RESERVE_SPACE(NFS4_VERIFIER_SIZE);
2668 		WRITEMEM(commit->co_verf.data, NFS4_VERIFIER_SIZE);
2669 		ADJUST_ARGS();
2670 	}
2671 	return nfserr;
2672 }
2673 
2674 static __be32
2675 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
2676 {
2677 	__be32 *p;
2678 
2679 	if (!nfserr) {
2680 		RESERVE_SPACE(32);
2681 		write_cinfo(&p, &create->cr_cinfo);
2682 		WRITE32(2);
2683 		WRITE32(create->cr_bmval[0]);
2684 		WRITE32(create->cr_bmval[1]);
2685 		ADJUST_ARGS();
2686 	}
2687 	return nfserr;
2688 }
2689 
2690 static __be32
2691 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
2692 {
2693 	struct svc_fh *fhp = getattr->ga_fhp;
2694 	int buflen;
2695 
2696 	if (nfserr)
2697 		return nfserr;
2698 
2699 	buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2);
2700 	nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry,
2701 				    resp->p, &buflen, getattr->ga_bmval,
2702 				    resp->rqstp, 0);
2703 	if (!nfserr)
2704 		resp->p += buflen;
2705 	return nfserr;
2706 }
2707 
2708 static __be32
2709 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
2710 {
2711 	struct svc_fh *fhp = *fhpp;
2712 	unsigned int len;
2713 	__be32 *p;
2714 
2715 	if (!nfserr) {
2716 		len = fhp->fh_handle.fh_size;
2717 		RESERVE_SPACE(len + 4);
2718 		WRITE32(len);
2719 		WRITEMEM(&fhp->fh_handle.fh_base, len);
2720 		ADJUST_ARGS();
2721 	}
2722 	return nfserr;
2723 }
2724 
2725 /*
2726 * Including all fields other than the name, a LOCK4denied structure requires
2727 *   8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
2728 */
2729 static void
2730 nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld)
2731 {
2732 	struct xdr_netobj *conf = &ld->ld_owner;
2733 	__be32 *p;
2734 
2735 	RESERVE_SPACE(32 + XDR_LEN(conf->len));
2736 	WRITE64(ld->ld_start);
2737 	WRITE64(ld->ld_length);
2738 	WRITE32(ld->ld_type);
2739 	if (conf->len) {
2740 		WRITEMEM(&ld->ld_clientid, 8);
2741 		WRITE32(conf->len);
2742 		WRITEMEM(conf->data, conf->len);
2743 		kfree(conf->data);
2744 	}  else {  /* non - nfsv4 lock in conflict, no clientid nor owner */
2745 		WRITE64((u64)0); /* clientid */
2746 		WRITE32(0); /* length of owner name */
2747 	}
2748 	ADJUST_ARGS();
2749 }
2750 
2751 static __be32
2752 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
2753 {
2754 	ENCODE_SEQID_OP_HEAD;
2755 
2756 	if (!nfserr)
2757 		nfsd4_encode_stateid(resp, &lock->lk_resp_stateid);
2758 	else if (nfserr == nfserr_denied)
2759 		nfsd4_encode_lock_denied(resp, &lock->lk_denied);
2760 
2761 	encode_seqid_op_tail(resp, save, nfserr);
2762 	return nfserr;
2763 }
2764 
2765 static __be32
2766 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
2767 {
2768 	if (nfserr == nfserr_denied)
2769 		nfsd4_encode_lock_denied(resp, &lockt->lt_denied);
2770 	return nfserr;
2771 }
2772 
2773 static __be32
2774 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
2775 {
2776 	ENCODE_SEQID_OP_HEAD;
2777 
2778 	if (!nfserr)
2779 		nfsd4_encode_stateid(resp, &locku->lu_stateid);
2780 
2781 	encode_seqid_op_tail(resp, save, nfserr);
2782 	return nfserr;
2783 }
2784 
2785 
2786 static __be32
2787 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
2788 {
2789 	__be32 *p;
2790 
2791 	if (!nfserr) {
2792 		RESERVE_SPACE(20);
2793 		write_cinfo(&p, &link->li_cinfo);
2794 		ADJUST_ARGS();
2795 	}
2796 	return nfserr;
2797 }
2798 
2799 
2800 static __be32
2801 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
2802 {
2803 	__be32 *p;
2804 	ENCODE_SEQID_OP_HEAD;
2805 
2806 	if (nfserr)
2807 		goto out;
2808 
2809 	nfsd4_encode_stateid(resp, &open->op_stateid);
2810 	RESERVE_SPACE(40);
2811 	write_cinfo(&p, &open->op_cinfo);
2812 	WRITE32(open->op_rflags);
2813 	WRITE32(2);
2814 	WRITE32(open->op_bmval[0]);
2815 	WRITE32(open->op_bmval[1]);
2816 	WRITE32(open->op_delegate_type);
2817 	ADJUST_ARGS();
2818 
2819 	switch (open->op_delegate_type) {
2820 	case NFS4_OPEN_DELEGATE_NONE:
2821 		break;
2822 	case NFS4_OPEN_DELEGATE_READ:
2823 		nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
2824 		RESERVE_SPACE(20);
2825 		WRITE32(open->op_recall);
2826 
2827 		/*
2828 		 * TODO: ACE's in delegations
2829 		 */
2830 		WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
2831 		WRITE32(0);
2832 		WRITE32(0);
2833 		WRITE32(0);   /* XXX: is NULL principal ok? */
2834 		ADJUST_ARGS();
2835 		break;
2836 	case NFS4_OPEN_DELEGATE_WRITE:
2837 		nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
2838 		RESERVE_SPACE(32);
2839 		WRITE32(0);
2840 
2841 		/*
2842 		 * TODO: space_limit's in delegations
2843 		 */
2844 		WRITE32(NFS4_LIMIT_SIZE);
2845 		WRITE32(~(u32)0);
2846 		WRITE32(~(u32)0);
2847 
2848 		/*
2849 		 * TODO: ACE's in delegations
2850 		 */
2851 		WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
2852 		WRITE32(0);
2853 		WRITE32(0);
2854 		WRITE32(0);   /* XXX: is NULL principal ok? */
2855 		ADJUST_ARGS();
2856 		break;
2857 	case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */
2858 		switch (open->op_why_no_deleg) {
2859 		case WND4_CONTENTION:
2860 		case WND4_RESOURCE:
2861 			RESERVE_SPACE(8);
2862 			WRITE32(open->op_why_no_deleg);
2863 			WRITE32(0);	/* deleg signaling not supported yet */
2864 			break;
2865 		default:
2866 			RESERVE_SPACE(4);
2867 			WRITE32(open->op_why_no_deleg);
2868 		}
2869 		ADJUST_ARGS();
2870 		break;
2871 	default:
2872 		BUG();
2873 	}
2874 	/* XXX save filehandle here */
2875 out:
2876 	encode_seqid_op_tail(resp, save, nfserr);
2877 	return nfserr;
2878 }
2879 
2880 static __be32
2881 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
2882 {
2883 	ENCODE_SEQID_OP_HEAD;
2884 
2885 	if (!nfserr)
2886 		nfsd4_encode_stateid(resp, &oc->oc_resp_stateid);
2887 
2888 	encode_seqid_op_tail(resp, save, nfserr);
2889 	return nfserr;
2890 }
2891 
2892 static __be32
2893 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
2894 {
2895 	ENCODE_SEQID_OP_HEAD;
2896 
2897 	if (!nfserr)
2898 		nfsd4_encode_stateid(resp, &od->od_stateid);
2899 
2900 	encode_seqid_op_tail(resp, save, nfserr);
2901 	return nfserr;
2902 }
2903 
2904 static __be32
2905 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
2906 		  struct nfsd4_read *read)
2907 {
2908 	u32 eof;
2909 	int v;
2910 	struct page *page;
2911 	unsigned long maxcount;
2912 	long len;
2913 	__be32 *p;
2914 
2915 	if (nfserr)
2916 		return nfserr;
2917 	if (resp->xbuf->page_len)
2918 		return nfserr_resource;
2919 
2920 	RESERVE_SPACE(8); /* eof flag and byte count */
2921 
2922 	maxcount = svc_max_payload(resp->rqstp);
2923 	if (maxcount > read->rd_length)
2924 		maxcount = read->rd_length;
2925 
2926 	len = maxcount;
2927 	v = 0;
2928 	while (len > 0) {
2929 		page = *(resp->rqstp->rq_next_page);
2930 		if (!page) { /* ran out of pages */
2931 			maxcount -= len;
2932 			break;
2933 		}
2934 		resp->rqstp->rq_vec[v].iov_base = page_address(page);
2935 		resp->rqstp->rq_vec[v].iov_len =
2936 			len < PAGE_SIZE ? len : PAGE_SIZE;
2937 		resp->rqstp->rq_next_page++;
2938 		v++;
2939 		len -= PAGE_SIZE;
2940 	}
2941 	read->rd_vlen = v;
2942 
2943 	nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp,
2944 			read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen,
2945 			&maxcount);
2946 
2947 	if (nfserr)
2948 		return nfserr;
2949 	eof = (read->rd_offset + maxcount >=
2950 	       read->rd_fhp->fh_dentry->d_inode->i_size);
2951 
2952 	WRITE32(eof);
2953 	WRITE32(maxcount);
2954 	ADJUST_ARGS();
2955 	resp->xbuf->head[0].iov_len = (char*)p
2956 					- (char*)resp->xbuf->head[0].iov_base;
2957 	resp->xbuf->page_len = maxcount;
2958 
2959 	/* Use rest of head for padding and remaining ops: */
2960 	resp->xbuf->tail[0].iov_base = p;
2961 	resp->xbuf->tail[0].iov_len = 0;
2962 	if (maxcount&3) {
2963 		RESERVE_SPACE(4);
2964 		WRITE32(0);
2965 		resp->xbuf->tail[0].iov_base += maxcount&3;
2966 		resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
2967 		ADJUST_ARGS();
2968 	}
2969 	return 0;
2970 }
2971 
2972 static __be32
2973 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
2974 {
2975 	int maxcount;
2976 	char *page;
2977 	__be32 *p;
2978 
2979 	if (nfserr)
2980 		return nfserr;
2981 	if (resp->xbuf->page_len)
2982 		return nfserr_resource;
2983 	if (!*resp->rqstp->rq_next_page)
2984 		return nfserr_resource;
2985 
2986 	page = page_address(*(resp->rqstp->rq_next_page++));
2987 
2988 	maxcount = PAGE_SIZE;
2989 	RESERVE_SPACE(4);
2990 
2991 	/*
2992 	 * XXX: By default, the ->readlink() VFS op will truncate symlinks
2993 	 * if they would overflow the buffer.  Is this kosher in NFSv4?  If
2994 	 * not, one easy fix is: if ->readlink() precisely fills the buffer,
2995 	 * assume that truncation occurred, and return NFS4ERR_RESOURCE.
2996 	 */
2997 	nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount);
2998 	if (nfserr == nfserr_isdir)
2999 		return nfserr_inval;
3000 	if (nfserr)
3001 		return nfserr;
3002 
3003 	WRITE32(maxcount);
3004 	ADJUST_ARGS();
3005 	resp->xbuf->head[0].iov_len = (char*)p
3006 				- (char*)resp->xbuf->head[0].iov_base;
3007 	resp->xbuf->page_len = maxcount;
3008 
3009 	/* Use rest of head for padding and remaining ops: */
3010 	resp->xbuf->tail[0].iov_base = p;
3011 	resp->xbuf->tail[0].iov_len = 0;
3012 	if (maxcount&3) {
3013 		RESERVE_SPACE(4);
3014 		WRITE32(0);
3015 		resp->xbuf->tail[0].iov_base += maxcount&3;
3016 		resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
3017 		ADJUST_ARGS();
3018 	}
3019 	return 0;
3020 }
3021 
3022 static __be32
3023 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
3024 {
3025 	int maxcount;
3026 	loff_t offset;
3027 	__be32 *page, *savep, *tailbase;
3028 	__be32 *p;
3029 
3030 	if (nfserr)
3031 		return nfserr;
3032 	if (resp->xbuf->page_len)
3033 		return nfserr_resource;
3034 	if (!*resp->rqstp->rq_next_page)
3035 		return nfserr_resource;
3036 
3037 	RESERVE_SPACE(NFS4_VERIFIER_SIZE);
3038 	savep = p;
3039 
3040 	/* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
3041 	WRITE32(0);
3042 	WRITE32(0);
3043 	ADJUST_ARGS();
3044 	resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base;
3045 	tailbase = p;
3046 
3047 	maxcount = PAGE_SIZE;
3048 	if (maxcount > readdir->rd_maxcount)
3049 		maxcount = readdir->rd_maxcount;
3050 
3051 	/*
3052 	 * Convert from bytes to words, account for the two words already
3053 	 * written, make sure to leave two words at the end for the next
3054 	 * pointer and eof field.
3055 	 */
3056 	maxcount = (maxcount >> 2) - 4;
3057 	if (maxcount < 0) {
3058 		nfserr =  nfserr_toosmall;
3059 		goto err_no_verf;
3060 	}
3061 
3062 	page = page_address(*(resp->rqstp->rq_next_page++));
3063 	readdir->common.err = 0;
3064 	readdir->buflen = maxcount;
3065 	readdir->buffer = page;
3066 	readdir->offset = NULL;
3067 
3068 	offset = readdir->rd_cookie;
3069 	nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
3070 			      &offset,
3071 			      &readdir->common, nfsd4_encode_dirent);
3072 	if (nfserr == nfs_ok &&
3073 	    readdir->common.err == nfserr_toosmall &&
3074 	    readdir->buffer == page)
3075 		nfserr = nfserr_toosmall;
3076 	if (nfserr)
3077 		goto err_no_verf;
3078 
3079 	if (readdir->offset)
3080 		xdr_encode_hyper(readdir->offset, offset);
3081 
3082 	p = readdir->buffer;
3083 	*p++ = 0;	/* no more entries */
3084 	*p++ = htonl(readdir->common.err == nfserr_eof);
3085 	resp->xbuf->page_len = ((char*)p) -
3086 		(char*)page_address(*(resp->rqstp->rq_next_page-1));
3087 
3088 	/* Use rest of head for padding and remaining ops: */
3089 	resp->xbuf->tail[0].iov_base = tailbase;
3090 	resp->xbuf->tail[0].iov_len = 0;
3091 	resp->p = resp->xbuf->tail[0].iov_base;
3092 	resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4;
3093 
3094 	return 0;
3095 err_no_verf:
3096 	p = savep;
3097 	ADJUST_ARGS();
3098 	return nfserr;
3099 }
3100 
3101 static __be32
3102 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
3103 {
3104 	__be32 *p;
3105 
3106 	if (!nfserr) {
3107 		RESERVE_SPACE(20);
3108 		write_cinfo(&p, &remove->rm_cinfo);
3109 		ADJUST_ARGS();
3110 	}
3111 	return nfserr;
3112 }
3113 
3114 static __be32
3115 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
3116 {
3117 	__be32 *p;
3118 
3119 	if (!nfserr) {
3120 		RESERVE_SPACE(40);
3121 		write_cinfo(&p, &rename->rn_sinfo);
3122 		write_cinfo(&p, &rename->rn_tinfo);
3123 		ADJUST_ARGS();
3124 	}
3125 	return nfserr;
3126 }
3127 
3128 static __be32
3129 nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp,
3130 			 __be32 nfserr,struct svc_export *exp)
3131 {
3132 	int i = 0;
3133 	u32 nflavs;
3134 	struct exp_flavor_info *flavs;
3135 	struct exp_flavor_info def_flavs[2];
3136 	__be32 *p;
3137 
3138 	if (nfserr)
3139 		goto out;
3140 	if (exp->ex_nflavors) {
3141 		flavs = exp->ex_flavors;
3142 		nflavs = exp->ex_nflavors;
3143 	} else { /* Handling of some defaults in absence of real secinfo: */
3144 		flavs = def_flavs;
3145 		if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
3146 			nflavs = 2;
3147 			flavs[0].pseudoflavor = RPC_AUTH_UNIX;
3148 			flavs[1].pseudoflavor = RPC_AUTH_NULL;
3149 		} else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
3150 			nflavs = 1;
3151 			flavs[0].pseudoflavor
3152 					= svcauth_gss_flavor(exp->ex_client);
3153 		} else {
3154 			nflavs = 1;
3155 			flavs[0].pseudoflavor
3156 					= exp->ex_client->flavour->flavour;
3157 		}
3158 	}
3159 
3160 	RESERVE_SPACE(4);
3161 	WRITE32(nflavs);
3162 	ADJUST_ARGS();
3163 	for (i = 0; i < nflavs; i++) {
3164 		u32 flav = flavs[i].pseudoflavor;
3165 		struct gss_api_mech *gm = gss_mech_get_by_pseudoflavor(flav);
3166 
3167 		if (gm) {
3168 			RESERVE_SPACE(4);
3169 			WRITE32(RPC_AUTH_GSS);
3170 			ADJUST_ARGS();
3171 			RESERVE_SPACE(4 + gm->gm_oid.len);
3172 			WRITE32(gm->gm_oid.len);
3173 			WRITEMEM(gm->gm_oid.data, gm->gm_oid.len);
3174 			ADJUST_ARGS();
3175 			RESERVE_SPACE(4);
3176 			WRITE32(0); /* qop */
3177 			ADJUST_ARGS();
3178 			RESERVE_SPACE(4);
3179 			WRITE32(gss_pseudoflavor_to_service(gm, flav));
3180 			ADJUST_ARGS();
3181 			gss_mech_put(gm);
3182 		} else {
3183 			RESERVE_SPACE(4);
3184 			WRITE32(flav);
3185 			ADJUST_ARGS();
3186 		}
3187 	}
3188 out:
3189 	if (exp)
3190 		exp_put(exp);
3191 	return nfserr;
3192 }
3193 
3194 static __be32
3195 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
3196 		     struct nfsd4_secinfo *secinfo)
3197 {
3198 	return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp);
3199 }
3200 
3201 static __be32
3202 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
3203 		     struct nfsd4_secinfo_no_name *secinfo)
3204 {
3205 	return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp);
3206 }
3207 
3208 /*
3209  * The SETATTR encode routine is special -- it always encodes a bitmap,
3210  * regardless of the error status.
3211  */
3212 static __be32
3213 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
3214 {
3215 	__be32 *p;
3216 
3217 	RESERVE_SPACE(12);
3218 	if (nfserr) {
3219 		WRITE32(2);
3220 		WRITE32(0);
3221 		WRITE32(0);
3222 	}
3223 	else {
3224 		WRITE32(2);
3225 		WRITE32(setattr->sa_bmval[0]);
3226 		WRITE32(setattr->sa_bmval[1]);
3227 	}
3228 	ADJUST_ARGS();
3229 	return nfserr;
3230 }
3231 
3232 static __be32
3233 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
3234 {
3235 	__be32 *p;
3236 
3237 	if (!nfserr) {
3238 		RESERVE_SPACE(8 + NFS4_VERIFIER_SIZE);
3239 		WRITEMEM(&scd->se_clientid, 8);
3240 		WRITEMEM(&scd->se_confirm, NFS4_VERIFIER_SIZE);
3241 		ADJUST_ARGS();
3242 	}
3243 	else if (nfserr == nfserr_clid_inuse) {
3244 		RESERVE_SPACE(8);
3245 		WRITE32(0);
3246 		WRITE32(0);
3247 		ADJUST_ARGS();
3248 	}
3249 	return nfserr;
3250 }
3251 
3252 static __be32
3253 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
3254 {
3255 	__be32 *p;
3256 
3257 	if (!nfserr) {
3258 		RESERVE_SPACE(16);
3259 		WRITE32(write->wr_bytes_written);
3260 		WRITE32(write->wr_how_written);
3261 		WRITEMEM(write->wr_verifier.data, NFS4_VERIFIER_SIZE);
3262 		ADJUST_ARGS();
3263 	}
3264 	return nfserr;
3265 }
3266 
3267 static __be32
3268 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
3269 			 struct nfsd4_exchange_id *exid)
3270 {
3271 	__be32 *p;
3272 	char *major_id;
3273 	char *server_scope;
3274 	int major_id_sz;
3275 	int server_scope_sz;
3276 	uint64_t minor_id = 0;
3277 
3278 	if (nfserr)
3279 		return nfserr;
3280 
3281 	major_id = utsname()->nodename;
3282 	major_id_sz = strlen(major_id);
3283 	server_scope = utsname()->nodename;
3284 	server_scope_sz = strlen(server_scope);
3285 
3286 	RESERVE_SPACE(
3287 		8 /* eir_clientid */ +
3288 		4 /* eir_sequenceid */ +
3289 		4 /* eir_flags */ +
3290 		4 /* spr_how (SP4_NONE) */ +
3291 		8 /* so_minor_id */ +
3292 		4 /* so_major_id.len */ +
3293 		(XDR_QUADLEN(major_id_sz) * 4) +
3294 		4 /* eir_server_scope.len */ +
3295 		(XDR_QUADLEN(server_scope_sz) * 4) +
3296 		4 /* eir_server_impl_id.count (0) */);
3297 
3298 	WRITEMEM(&exid->clientid, 8);
3299 	WRITE32(exid->seqid);
3300 	WRITE32(exid->flags);
3301 
3302 	/* state_protect4_r. Currently only support SP4_NONE */
3303 	BUG_ON(exid->spa_how != SP4_NONE);
3304 	WRITE32(exid->spa_how);
3305 
3306 	/* The server_owner struct */
3307 	WRITE64(minor_id);      /* Minor id */
3308 	/* major id */
3309 	WRITE32(major_id_sz);
3310 	WRITEMEM(major_id, major_id_sz);
3311 
3312 	/* Server scope */
3313 	WRITE32(server_scope_sz);
3314 	WRITEMEM(server_scope, server_scope_sz);
3315 
3316 	/* Implementation id */
3317 	WRITE32(0);	/* zero length nfs_impl_id4 array */
3318 	ADJUST_ARGS();
3319 	return 0;
3320 }
3321 
3322 static __be32
3323 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3324 			    struct nfsd4_create_session *sess)
3325 {
3326 	__be32 *p;
3327 
3328 	if (nfserr)
3329 		return nfserr;
3330 
3331 	RESERVE_SPACE(24);
3332 	WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN);
3333 	WRITE32(sess->seqid);
3334 	WRITE32(sess->flags);
3335 	ADJUST_ARGS();
3336 
3337 	RESERVE_SPACE(28);
3338 	WRITE32(0); /* headerpadsz */
3339 	WRITE32(sess->fore_channel.maxreq_sz);
3340 	WRITE32(sess->fore_channel.maxresp_sz);
3341 	WRITE32(sess->fore_channel.maxresp_cached);
3342 	WRITE32(sess->fore_channel.maxops);
3343 	WRITE32(sess->fore_channel.maxreqs);
3344 	WRITE32(sess->fore_channel.nr_rdma_attrs);
3345 	ADJUST_ARGS();
3346 
3347 	if (sess->fore_channel.nr_rdma_attrs) {
3348 		RESERVE_SPACE(4);
3349 		WRITE32(sess->fore_channel.rdma_attrs);
3350 		ADJUST_ARGS();
3351 	}
3352 
3353 	RESERVE_SPACE(28);
3354 	WRITE32(0); /* headerpadsz */
3355 	WRITE32(sess->back_channel.maxreq_sz);
3356 	WRITE32(sess->back_channel.maxresp_sz);
3357 	WRITE32(sess->back_channel.maxresp_cached);
3358 	WRITE32(sess->back_channel.maxops);
3359 	WRITE32(sess->back_channel.maxreqs);
3360 	WRITE32(sess->back_channel.nr_rdma_attrs);
3361 	ADJUST_ARGS();
3362 
3363 	if (sess->back_channel.nr_rdma_attrs) {
3364 		RESERVE_SPACE(4);
3365 		WRITE32(sess->back_channel.rdma_attrs);
3366 		ADJUST_ARGS();
3367 	}
3368 	return 0;
3369 }
3370 
3371 static __be32
3372 nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3373 			     struct nfsd4_destroy_session *destroy_session)
3374 {
3375 	return nfserr;
3376 }
3377 
3378 static __be32
3379 nfsd4_encode_free_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
3380 			  struct nfsd4_free_stateid *free_stateid)
3381 {
3382 	__be32 *p;
3383 
3384 	if (nfserr)
3385 		return nfserr;
3386 
3387 	RESERVE_SPACE(4);
3388 	*p++ = nfserr;
3389 	ADJUST_ARGS();
3390 	return nfserr;
3391 }
3392 
3393 static __be32
3394 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
3395 		      struct nfsd4_sequence *seq)
3396 {
3397 	__be32 *p;
3398 
3399 	if (nfserr)
3400 		return nfserr;
3401 
3402 	RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20);
3403 	WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
3404 	WRITE32(seq->seqid);
3405 	WRITE32(seq->slotid);
3406 	/* Note slotid's are numbered from zero: */
3407 	WRITE32(seq->maxslots - 1); /* sr_highest_slotid */
3408 	WRITE32(seq->maxslots - 1); /* sr_target_highest_slotid */
3409 	WRITE32(seq->status_flags);
3410 
3411 	ADJUST_ARGS();
3412 	resp->cstate.datap = p; /* DRC cache data pointer */
3413 	return 0;
3414 }
3415 
3416 static __be32
3417 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
3418 			  struct nfsd4_test_stateid *test_stateid)
3419 {
3420 	struct nfsd4_test_stateid_id *stateid, *next;
3421 	__be32 *p;
3422 
3423 	RESERVE_SPACE(4 + (4 * test_stateid->ts_num_ids));
3424 	*p++ = htonl(test_stateid->ts_num_ids);
3425 
3426 	list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) {
3427 		*p++ = stateid->ts_id_status;
3428 	}
3429 
3430 	ADJUST_ARGS();
3431 	return nfserr;
3432 }
3433 
3434 static __be32
3435 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p)
3436 {
3437 	return nfserr;
3438 }
3439 
3440 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *);
3441 
3442 /*
3443  * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
3444  * since we don't need to filter out obsolete ops as this is
3445  * done in the decoding phase.
3446  */
3447 static nfsd4_enc nfsd4_enc_ops[] = {
3448 	[OP_ACCESS]		= (nfsd4_enc)nfsd4_encode_access,
3449 	[OP_CLOSE]		= (nfsd4_enc)nfsd4_encode_close,
3450 	[OP_COMMIT]		= (nfsd4_enc)nfsd4_encode_commit,
3451 	[OP_CREATE]		= (nfsd4_enc)nfsd4_encode_create,
3452 	[OP_DELEGPURGE]		= (nfsd4_enc)nfsd4_encode_noop,
3453 	[OP_DELEGRETURN]	= (nfsd4_enc)nfsd4_encode_noop,
3454 	[OP_GETATTR]		= (nfsd4_enc)nfsd4_encode_getattr,
3455 	[OP_GETFH]		= (nfsd4_enc)nfsd4_encode_getfh,
3456 	[OP_LINK]		= (nfsd4_enc)nfsd4_encode_link,
3457 	[OP_LOCK]		= (nfsd4_enc)nfsd4_encode_lock,
3458 	[OP_LOCKT]		= (nfsd4_enc)nfsd4_encode_lockt,
3459 	[OP_LOCKU]		= (nfsd4_enc)nfsd4_encode_locku,
3460 	[OP_LOOKUP]		= (nfsd4_enc)nfsd4_encode_noop,
3461 	[OP_LOOKUPP]		= (nfsd4_enc)nfsd4_encode_noop,
3462 	[OP_NVERIFY]		= (nfsd4_enc)nfsd4_encode_noop,
3463 	[OP_OPEN]		= (nfsd4_enc)nfsd4_encode_open,
3464 	[OP_OPENATTR]		= (nfsd4_enc)nfsd4_encode_noop,
3465 	[OP_OPEN_CONFIRM]	= (nfsd4_enc)nfsd4_encode_open_confirm,
3466 	[OP_OPEN_DOWNGRADE]	= (nfsd4_enc)nfsd4_encode_open_downgrade,
3467 	[OP_PUTFH]		= (nfsd4_enc)nfsd4_encode_noop,
3468 	[OP_PUTPUBFH]		= (nfsd4_enc)nfsd4_encode_noop,
3469 	[OP_PUTROOTFH]		= (nfsd4_enc)nfsd4_encode_noop,
3470 	[OP_READ]		= (nfsd4_enc)nfsd4_encode_read,
3471 	[OP_READDIR]		= (nfsd4_enc)nfsd4_encode_readdir,
3472 	[OP_READLINK]		= (nfsd4_enc)nfsd4_encode_readlink,
3473 	[OP_REMOVE]		= (nfsd4_enc)nfsd4_encode_remove,
3474 	[OP_RENAME]		= (nfsd4_enc)nfsd4_encode_rename,
3475 	[OP_RENEW]		= (nfsd4_enc)nfsd4_encode_noop,
3476 	[OP_RESTOREFH]		= (nfsd4_enc)nfsd4_encode_noop,
3477 	[OP_SAVEFH]		= (nfsd4_enc)nfsd4_encode_noop,
3478 	[OP_SECINFO]		= (nfsd4_enc)nfsd4_encode_secinfo,
3479 	[OP_SETATTR]		= (nfsd4_enc)nfsd4_encode_setattr,
3480 	[OP_SETCLIENTID]	= (nfsd4_enc)nfsd4_encode_setclientid,
3481 	[OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop,
3482 	[OP_VERIFY]		= (nfsd4_enc)nfsd4_encode_noop,
3483 	[OP_WRITE]		= (nfsd4_enc)nfsd4_encode_write,
3484 	[OP_RELEASE_LOCKOWNER]	= (nfsd4_enc)nfsd4_encode_noop,
3485 
3486 	/* NFSv4.1 operations */
3487 	[OP_BACKCHANNEL_CTL]	= (nfsd4_enc)nfsd4_encode_noop,
3488 	[OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session,
3489 	[OP_EXCHANGE_ID]	= (nfsd4_enc)nfsd4_encode_exchange_id,
3490 	[OP_CREATE_SESSION]	= (nfsd4_enc)nfsd4_encode_create_session,
3491 	[OP_DESTROY_SESSION]	= (nfsd4_enc)nfsd4_encode_destroy_session,
3492 	[OP_FREE_STATEID]	= (nfsd4_enc)nfsd4_encode_free_stateid,
3493 	[OP_GET_DIR_DELEGATION]	= (nfsd4_enc)nfsd4_encode_noop,
3494 	[OP_GETDEVICEINFO]	= (nfsd4_enc)nfsd4_encode_noop,
3495 	[OP_GETDEVICELIST]	= (nfsd4_enc)nfsd4_encode_noop,
3496 	[OP_LAYOUTCOMMIT]	= (nfsd4_enc)nfsd4_encode_noop,
3497 	[OP_LAYOUTGET]		= (nfsd4_enc)nfsd4_encode_noop,
3498 	[OP_LAYOUTRETURN]	= (nfsd4_enc)nfsd4_encode_noop,
3499 	[OP_SECINFO_NO_NAME]	= (nfsd4_enc)nfsd4_encode_secinfo_no_name,
3500 	[OP_SEQUENCE]		= (nfsd4_enc)nfsd4_encode_sequence,
3501 	[OP_SET_SSV]		= (nfsd4_enc)nfsd4_encode_noop,
3502 	[OP_TEST_STATEID]	= (nfsd4_enc)nfsd4_encode_test_stateid,
3503 	[OP_WANT_DELEGATION]	= (nfsd4_enc)nfsd4_encode_noop,
3504 	[OP_DESTROY_CLIENTID]	= (nfsd4_enc)nfsd4_encode_noop,
3505 	[OP_RECLAIM_COMPLETE]	= (nfsd4_enc)nfsd4_encode_noop,
3506 };
3507 
3508 /*
3509  * Calculate the total amount of memory that the compound response has taken
3510  * after encoding the current operation with pad.
3511  *
3512  * pad: if operation is non-idempotent, pad was calculate by op_rsize_bop()
3513  *      which was specified at nfsd4_operation, else pad is zero.
3514  *
3515  * Compare this length to the session se_fmaxresp_sz and se_fmaxresp_cached.
3516  *
3517  * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so
3518  * will be at least a page and will therefore hold the xdr_buf head.
3519  */
3520 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 pad)
3521 {
3522 	struct xdr_buf *xb = &resp->rqstp->rq_res;
3523 	struct nfsd4_session *session = NULL;
3524 	struct nfsd4_slot *slot = resp->cstate.slot;
3525 	u32 length, tlen = 0;
3526 
3527 	if (!nfsd4_has_session(&resp->cstate))
3528 		return 0;
3529 
3530 	session = resp->cstate.session;
3531 	if (session == NULL)
3532 		return 0;
3533 
3534 	if (xb->page_len == 0) {
3535 		length = (char *)resp->p - (char *)xb->head[0].iov_base + pad;
3536 	} else {
3537 		if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0)
3538 			tlen = (char *)resp->p - (char *)xb->tail[0].iov_base;
3539 
3540 		length = xb->head[0].iov_len + xb->page_len + tlen + pad;
3541 	}
3542 	dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__,
3543 		length, xb->page_len, tlen, pad);
3544 
3545 	if (length > session->se_fchannel.maxresp_sz)
3546 		return nfserr_rep_too_big;
3547 
3548 	if ((slot->sl_flags & NFSD4_SLOT_CACHETHIS) &&
3549 	    length > session->se_fchannel.maxresp_cached)
3550 		return nfserr_rep_too_big_to_cache;
3551 
3552 	return 0;
3553 }
3554 
3555 void
3556 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
3557 {
3558 	__be32 *statp;
3559 	__be32 *p;
3560 
3561 	RESERVE_SPACE(8);
3562 	WRITE32(op->opnum);
3563 	statp = p++;	/* to be backfilled at the end */
3564 	ADJUST_ARGS();
3565 
3566 	if (op->opnum == OP_ILLEGAL)
3567 		goto status;
3568 	BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
3569 	       !nfsd4_enc_ops[op->opnum]);
3570 	op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u);
3571 	/* nfsd4_check_drc_limit guarantees enough room for error status */
3572 	if (!op->status)
3573 		op->status = nfsd4_check_resp_size(resp, 0);
3574 status:
3575 	/*
3576 	 * Note: We write the status directly, instead of using WRITE32(),
3577 	 * since it is already in network byte order.
3578 	 */
3579 	*statp = op->status;
3580 }
3581 
3582 /*
3583  * Encode the reply stored in the stateowner reply cache
3584  *
3585  * XDR note: do not encode rp->rp_buflen: the buffer contains the
3586  * previously sent already encoded operation.
3587  *
3588  * called with nfs4_lock_state() held
3589  */
3590 void
3591 nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
3592 {
3593 	__be32 *p;
3594 	struct nfs4_replay *rp = op->replay;
3595 
3596 	BUG_ON(!rp);
3597 
3598 	RESERVE_SPACE(8);
3599 	WRITE32(op->opnum);
3600 	*p++ = rp->rp_status;  /* already xdr'ed */
3601 	ADJUST_ARGS();
3602 
3603 	RESERVE_SPACE(rp->rp_buflen);
3604 	WRITEMEM(rp->rp_buf, rp->rp_buflen);
3605 	ADJUST_ARGS();
3606 }
3607 
3608 int
3609 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy)
3610 {
3611         return xdr_ressize_check(rqstp, p);
3612 }
3613 
3614 int nfsd4_release_compoundargs(void *rq, __be32 *p, void *resp)
3615 {
3616 	struct svc_rqst *rqstp = rq;
3617 	struct nfsd4_compoundargs *args = rqstp->rq_argp;
3618 
3619 	if (args->ops != args->iops) {
3620 		kfree(args->ops);
3621 		args->ops = args->iops;
3622 	}
3623 	kfree(args->tmpp);
3624 	args->tmpp = NULL;
3625 	while (args->to_free) {
3626 		struct tmpbuf *tb = args->to_free;
3627 		args->to_free = tb->next;
3628 		tb->release(tb->buf);
3629 		kfree(tb);
3630 	}
3631 	return 1;
3632 }
3633 
3634 int
3635 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args)
3636 {
3637 	args->p = p;
3638 	args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len;
3639 	args->pagelist = rqstp->rq_arg.pages;
3640 	args->pagelen = rqstp->rq_arg.page_len;
3641 	args->tmpp = NULL;
3642 	args->to_free = NULL;
3643 	args->ops = args->iops;
3644 	args->rqstp = rqstp;
3645 
3646 	return !nfsd4_decode_compound(args);
3647 }
3648 
3649 int
3650 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp)
3651 {
3652 	/*
3653 	 * All that remains is to write the tag and operation count...
3654 	 */
3655 	struct nfsd4_compound_state *cs = &resp->cstate;
3656 	struct kvec *iov;
3657 	p = resp->tagp;
3658 	*p++ = htonl(resp->taglen);
3659 	memcpy(p, resp->tag, resp->taglen);
3660 	p += XDR_QUADLEN(resp->taglen);
3661 	*p++ = htonl(resp->opcnt);
3662 
3663 	if (rqstp->rq_res.page_len)
3664 		iov = &rqstp->rq_res.tail[0];
3665 	else
3666 		iov = &rqstp->rq_res.head[0];
3667 	iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base;
3668 	BUG_ON(iov->iov_len > PAGE_SIZE);
3669 	if (nfsd4_has_session(cs)) {
3670 		if (cs->status != nfserr_replay_cache) {
3671 			nfsd4_store_cache_entry(resp);
3672 			cs->slot->sl_flags &= ~NFSD4_SLOT_INUSE;
3673 		}
3674 		/* Renew the clientid on success and on replay */
3675 		release_session_client(cs->session);
3676 		nfsd4_put_session(cs->session);
3677 	}
3678 	return 1;
3679 }
3680 
3681 /*
3682  * Local variables:
3683  *  c-basic-offset: 8
3684  * End:
3685  */
3686