1 /* 2 * Server-side XDR for NFSv4 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 */ 35 36 #include <linux/file.h> 37 #include <linux/slab.h> 38 #include <linux/namei.h> 39 #include <linux/statfs.h> 40 #include <linux/utsname.h> 41 #include <linux/pagemap.h> 42 #include <linux/sunrpc/svcauth_gss.h> 43 44 #include "idmap.h" 45 #include "acl.h" 46 #include "xdr4.h" 47 #include "vfs.h" 48 #include "state.h" 49 #include "cache.h" 50 #include "netns.h" 51 #include "pnfs.h" 52 53 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 54 #include <linux/security.h> 55 #endif 56 57 58 #define NFSDDBG_FACILITY NFSDDBG_XDR 59 60 const u32 nfsd_suppattrs[3][3] = { 61 {NFSD4_SUPPORTED_ATTRS_WORD0, 62 NFSD4_SUPPORTED_ATTRS_WORD1, 63 NFSD4_SUPPORTED_ATTRS_WORD2}, 64 65 {NFSD4_1_SUPPORTED_ATTRS_WORD0, 66 NFSD4_1_SUPPORTED_ATTRS_WORD1, 67 NFSD4_1_SUPPORTED_ATTRS_WORD2}, 68 69 {NFSD4_1_SUPPORTED_ATTRS_WORD0, 70 NFSD4_1_SUPPORTED_ATTRS_WORD1, 71 NFSD4_2_SUPPORTED_ATTRS_WORD2}, 72 }; 73 74 /* 75 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing 76 * directory in order to indicate to the client that a filesystem boundary is present 77 * We use a fixed fsid for a referral 78 */ 79 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL 80 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL 81 82 static __be32 83 check_filename(char *str, int len) 84 { 85 int i; 86 87 if (len == 0) 88 return nfserr_inval; 89 if (isdotent(str, len)) 90 return nfserr_badname; 91 for (i = 0; i < len; i++) 92 if (str[i] == '/') 93 return nfserr_badname; 94 return 0; 95 } 96 97 #define DECODE_HEAD \ 98 __be32 *p; \ 99 __be32 status 100 #define DECODE_TAIL \ 101 status = 0; \ 102 out: \ 103 return status; \ 104 xdr_error: \ 105 dprintk("NFSD: xdr error (%s:%d)\n", \ 106 __FILE__, __LINE__); \ 107 status = nfserr_bad_xdr; \ 108 goto out 109 110 #define READMEM(x,nbytes) do { \ 111 x = (char *)p; \ 112 p += XDR_QUADLEN(nbytes); \ 113 } while (0) 114 #define SAVEMEM(x,nbytes) do { \ 115 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \ 116 savemem(argp, p, nbytes) : \ 117 (char *)p)) { \ 118 dprintk("NFSD: xdr error (%s:%d)\n", \ 119 __FILE__, __LINE__); \ 120 goto xdr_error; \ 121 } \ 122 p += XDR_QUADLEN(nbytes); \ 123 } while (0) 124 #define COPYMEM(x,nbytes) do { \ 125 memcpy((x), p, nbytes); \ 126 p += XDR_QUADLEN(nbytes); \ 127 } while (0) 128 129 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */ 130 #define READ_BUF(nbytes) do { \ 131 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \ 132 p = argp->p; \ 133 argp->p += XDR_QUADLEN(nbytes); \ 134 } else if (!(p = read_buf(argp, nbytes))) { \ 135 dprintk("NFSD: xdr error (%s:%d)\n", \ 136 __FILE__, __LINE__); \ 137 goto xdr_error; \ 138 } \ 139 } while (0) 140 141 static void next_decode_page(struct nfsd4_compoundargs *argp) 142 { 143 argp->p = page_address(argp->pagelist[0]); 144 argp->pagelist++; 145 if (argp->pagelen < PAGE_SIZE) { 146 argp->end = argp->p + XDR_QUADLEN(argp->pagelen); 147 argp->pagelen = 0; 148 } else { 149 argp->end = argp->p + (PAGE_SIZE>>2); 150 argp->pagelen -= PAGE_SIZE; 151 } 152 } 153 154 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes) 155 { 156 /* We want more bytes than seem to be available. 157 * Maybe we need a new page, maybe we have just run out 158 */ 159 unsigned int avail = (char *)argp->end - (char *)argp->p; 160 __be32 *p; 161 162 if (argp->pagelen == 0) { 163 struct kvec *vec = &argp->rqstp->rq_arg.tail[0]; 164 165 if (!argp->tail) { 166 argp->tail = true; 167 avail = vec->iov_len; 168 argp->p = vec->iov_base; 169 argp->end = vec->iov_base + avail; 170 } 171 172 if (avail < nbytes) 173 return NULL; 174 175 p = argp->p; 176 argp->p += XDR_QUADLEN(nbytes); 177 return p; 178 } 179 180 if (avail + argp->pagelen < nbytes) 181 return NULL; 182 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */ 183 return NULL; 184 /* ok, we can do it with the current plus the next page */ 185 if (nbytes <= sizeof(argp->tmp)) 186 p = argp->tmp; 187 else { 188 kfree(argp->tmpp); 189 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL); 190 if (!p) 191 return NULL; 192 193 } 194 /* 195 * The following memcpy is safe because read_buf is always 196 * called with nbytes > avail, and the two cases above both 197 * guarantee p points to at least nbytes bytes. 198 */ 199 memcpy(p, argp->p, avail); 200 next_decode_page(argp); 201 memcpy(((char*)p)+avail, argp->p, (nbytes - avail)); 202 argp->p += XDR_QUADLEN(nbytes - avail); 203 return p; 204 } 205 206 static int zero_clientid(clientid_t *clid) 207 { 208 return (clid->cl_boot == 0) && (clid->cl_id == 0); 209 } 210 211 /** 212 * svcxdr_tmpalloc - allocate memory to be freed after compound processing 213 * @argp: NFSv4 compound argument structure 214 * @p: pointer to be freed (with kfree()) 215 * 216 * Marks @p to be freed when processing the compound operation 217 * described in @argp finishes. 218 */ 219 static void * 220 svcxdr_tmpalloc(struct nfsd4_compoundargs *argp, u32 len) 221 { 222 struct svcxdr_tmpbuf *tb; 223 224 tb = kmalloc(sizeof(*tb) + len, GFP_KERNEL); 225 if (!tb) 226 return NULL; 227 tb->next = argp->to_free; 228 argp->to_free = tb; 229 return tb->buf; 230 } 231 232 /* 233 * For xdr strings that need to be passed to other kernel api's 234 * as null-terminated strings. 235 * 236 * Note null-terminating in place usually isn't safe since the 237 * buffer might end on a page boundary. 238 */ 239 static char * 240 svcxdr_dupstr(struct nfsd4_compoundargs *argp, void *buf, u32 len) 241 { 242 char *p = svcxdr_tmpalloc(argp, len + 1); 243 244 if (!p) 245 return NULL; 246 memcpy(p, buf, len); 247 p[len] = '\0'; 248 return p; 249 } 250 251 /** 252 * savemem - duplicate a chunk of memory for later processing 253 * @argp: NFSv4 compound argument structure to be freed with 254 * @p: pointer to be duplicated 255 * @nbytes: length to be duplicated 256 * 257 * Returns a pointer to a copy of @nbytes bytes of memory at @p 258 * that are preserved until processing of the NFSv4 compound 259 * operation described by @argp finishes. 260 */ 261 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes) 262 { 263 void *ret; 264 265 ret = svcxdr_tmpalloc(argp, nbytes); 266 if (!ret) 267 return NULL; 268 memcpy(ret, p, nbytes); 269 return ret; 270 } 271 272 static __be32 273 nfsd4_decode_time(struct nfsd4_compoundargs *argp, struct timespec64 *tv) 274 { 275 DECODE_HEAD; 276 277 READ_BUF(12); 278 p = xdr_decode_hyper(p, &tv->tv_sec); 279 tv->tv_nsec = be32_to_cpup(p++); 280 if (tv->tv_nsec >= (u32)1000000000) 281 return nfserr_inval; 282 283 DECODE_TAIL; 284 } 285 286 static __be32 287 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval) 288 { 289 u32 bmlen; 290 DECODE_HEAD; 291 292 bmval[0] = 0; 293 bmval[1] = 0; 294 bmval[2] = 0; 295 296 READ_BUF(4); 297 bmlen = be32_to_cpup(p++); 298 if (bmlen > 1000) 299 goto xdr_error; 300 301 READ_BUF(bmlen << 2); 302 if (bmlen > 0) 303 bmval[0] = be32_to_cpup(p++); 304 if (bmlen > 1) 305 bmval[1] = be32_to_cpup(p++); 306 if (bmlen > 2) 307 bmval[2] = be32_to_cpup(p++); 308 309 DECODE_TAIL; 310 } 311 312 static __be32 313 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval, 314 struct iattr *iattr, struct nfs4_acl **acl, 315 struct xdr_netobj *label, int *umask) 316 { 317 int expected_len, len = 0; 318 u32 dummy32; 319 char *buf; 320 321 DECODE_HEAD; 322 iattr->ia_valid = 0; 323 if ((status = nfsd4_decode_bitmap(argp, bmval))) 324 return status; 325 326 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0 327 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1 328 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) { 329 if (nfsd_attrs_supported(argp->minorversion, bmval)) 330 return nfserr_inval; 331 return nfserr_attrnotsupp; 332 } 333 334 READ_BUF(4); 335 expected_len = be32_to_cpup(p++); 336 337 if (bmval[0] & FATTR4_WORD0_SIZE) { 338 READ_BUF(8); 339 len += 8; 340 p = xdr_decode_hyper(p, &iattr->ia_size); 341 iattr->ia_valid |= ATTR_SIZE; 342 } 343 if (bmval[0] & FATTR4_WORD0_ACL) { 344 u32 nace; 345 struct nfs4_ace *ace; 346 347 READ_BUF(4); len += 4; 348 nace = be32_to_cpup(p++); 349 350 if (nace > NFS4_ACL_MAX) 351 return nfserr_fbig; 352 353 *acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(nace)); 354 if (*acl == NULL) 355 return nfserr_jukebox; 356 357 (*acl)->naces = nace; 358 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) { 359 READ_BUF(16); len += 16; 360 ace->type = be32_to_cpup(p++); 361 ace->flag = be32_to_cpup(p++); 362 ace->access_mask = be32_to_cpup(p++); 363 dummy32 = be32_to_cpup(p++); 364 READ_BUF(dummy32); 365 len += XDR_QUADLEN(dummy32) << 2; 366 READMEM(buf, dummy32); 367 ace->whotype = nfs4_acl_get_whotype(buf, dummy32); 368 status = nfs_ok; 369 if (ace->whotype != NFS4_ACL_WHO_NAMED) 370 ; 371 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 372 status = nfsd_map_name_to_gid(argp->rqstp, 373 buf, dummy32, &ace->who_gid); 374 else 375 status = nfsd_map_name_to_uid(argp->rqstp, 376 buf, dummy32, &ace->who_uid); 377 if (status) 378 return status; 379 } 380 } else 381 *acl = NULL; 382 if (bmval[1] & FATTR4_WORD1_MODE) { 383 READ_BUF(4); 384 len += 4; 385 iattr->ia_mode = be32_to_cpup(p++); 386 iattr->ia_mode &= (S_IFMT | S_IALLUGO); 387 iattr->ia_valid |= ATTR_MODE; 388 } 389 if (bmval[1] & FATTR4_WORD1_OWNER) { 390 READ_BUF(4); 391 len += 4; 392 dummy32 = be32_to_cpup(p++); 393 READ_BUF(dummy32); 394 len += (XDR_QUADLEN(dummy32) << 2); 395 READMEM(buf, dummy32); 396 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid))) 397 return status; 398 iattr->ia_valid |= ATTR_UID; 399 } 400 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) { 401 READ_BUF(4); 402 len += 4; 403 dummy32 = be32_to_cpup(p++); 404 READ_BUF(dummy32); 405 len += (XDR_QUADLEN(dummy32) << 2); 406 READMEM(buf, dummy32); 407 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid))) 408 return status; 409 iattr->ia_valid |= ATTR_GID; 410 } 411 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) { 412 READ_BUF(4); 413 len += 4; 414 dummy32 = be32_to_cpup(p++); 415 switch (dummy32) { 416 case NFS4_SET_TO_CLIENT_TIME: 417 len += 12; 418 status = nfsd4_decode_time(argp, &iattr->ia_atime); 419 if (status) 420 return status; 421 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET); 422 break; 423 case NFS4_SET_TO_SERVER_TIME: 424 iattr->ia_valid |= ATTR_ATIME; 425 break; 426 default: 427 goto xdr_error; 428 } 429 } 430 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) { 431 READ_BUF(4); 432 len += 4; 433 dummy32 = be32_to_cpup(p++); 434 switch (dummy32) { 435 case NFS4_SET_TO_CLIENT_TIME: 436 len += 12; 437 status = nfsd4_decode_time(argp, &iattr->ia_mtime); 438 if (status) 439 return status; 440 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET); 441 break; 442 case NFS4_SET_TO_SERVER_TIME: 443 iattr->ia_valid |= ATTR_MTIME; 444 break; 445 default: 446 goto xdr_error; 447 } 448 } 449 450 label->len = 0; 451 if (IS_ENABLED(CONFIG_NFSD_V4_SECURITY_LABEL) && 452 bmval[2] & FATTR4_WORD2_SECURITY_LABEL) { 453 READ_BUF(4); 454 len += 4; 455 dummy32 = be32_to_cpup(p++); /* lfs: we don't use it */ 456 READ_BUF(4); 457 len += 4; 458 dummy32 = be32_to_cpup(p++); /* pi: we don't use it either */ 459 READ_BUF(4); 460 len += 4; 461 dummy32 = be32_to_cpup(p++); 462 READ_BUF(dummy32); 463 if (dummy32 > NFS4_MAXLABELLEN) 464 return nfserr_badlabel; 465 len += (XDR_QUADLEN(dummy32) << 2); 466 READMEM(buf, dummy32); 467 label->len = dummy32; 468 label->data = svcxdr_dupstr(argp, buf, dummy32); 469 if (!label->data) 470 return nfserr_jukebox; 471 } 472 if (bmval[2] & FATTR4_WORD2_MODE_UMASK) { 473 if (!umask) 474 goto xdr_error; 475 READ_BUF(8); 476 len += 8; 477 dummy32 = be32_to_cpup(p++); 478 iattr->ia_mode = dummy32 & (S_IFMT | S_IALLUGO); 479 dummy32 = be32_to_cpup(p++); 480 *umask = dummy32 & S_IRWXUGO; 481 iattr->ia_valid |= ATTR_MODE; 482 } 483 if (len != expected_len) 484 goto xdr_error; 485 486 DECODE_TAIL; 487 } 488 489 static __be32 490 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid) 491 { 492 DECODE_HEAD; 493 494 READ_BUF(sizeof(stateid_t)); 495 sid->si_generation = be32_to_cpup(p++); 496 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 497 498 DECODE_TAIL; 499 } 500 501 static __be32 502 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access) 503 { 504 DECODE_HEAD; 505 506 READ_BUF(4); 507 access->ac_req_access = be32_to_cpup(p++); 508 509 DECODE_TAIL; 510 } 511 512 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs) 513 { 514 DECODE_HEAD; 515 struct user_namespace *userns = nfsd_user_namespace(argp->rqstp); 516 u32 dummy, uid, gid; 517 char *machine_name; 518 int i; 519 int nr_secflavs; 520 521 /* callback_sec_params4 */ 522 READ_BUF(4); 523 nr_secflavs = be32_to_cpup(p++); 524 if (nr_secflavs) 525 cbs->flavor = (u32)(-1); 526 else 527 /* Is this legal? Be generous, take it to mean AUTH_NONE: */ 528 cbs->flavor = 0; 529 for (i = 0; i < nr_secflavs; ++i) { 530 READ_BUF(4); 531 dummy = be32_to_cpup(p++); 532 switch (dummy) { 533 case RPC_AUTH_NULL: 534 /* Nothing to read */ 535 if (cbs->flavor == (u32)(-1)) 536 cbs->flavor = RPC_AUTH_NULL; 537 break; 538 case RPC_AUTH_UNIX: 539 READ_BUF(8); 540 /* stamp */ 541 dummy = be32_to_cpup(p++); 542 543 /* machine name */ 544 dummy = be32_to_cpup(p++); 545 READ_BUF(dummy); 546 SAVEMEM(machine_name, dummy); 547 548 /* uid, gid */ 549 READ_BUF(8); 550 uid = be32_to_cpup(p++); 551 gid = be32_to_cpup(p++); 552 553 /* more gids */ 554 READ_BUF(4); 555 dummy = be32_to_cpup(p++); 556 READ_BUF(dummy * 4); 557 if (cbs->flavor == (u32)(-1)) { 558 kuid_t kuid = make_kuid(userns, uid); 559 kgid_t kgid = make_kgid(userns, gid); 560 if (uid_valid(kuid) && gid_valid(kgid)) { 561 cbs->uid = kuid; 562 cbs->gid = kgid; 563 cbs->flavor = RPC_AUTH_UNIX; 564 } else { 565 dprintk("RPC_AUTH_UNIX with invalid" 566 "uid or gid ignoring!\n"); 567 } 568 } 569 break; 570 case RPC_AUTH_GSS: 571 dprintk("RPC_AUTH_GSS callback secflavor " 572 "not supported!\n"); 573 READ_BUF(8); 574 /* gcbp_service */ 575 dummy = be32_to_cpup(p++); 576 /* gcbp_handle_from_server */ 577 dummy = be32_to_cpup(p++); 578 READ_BUF(dummy); 579 p += XDR_QUADLEN(dummy); 580 /* gcbp_handle_from_client */ 581 READ_BUF(4); 582 dummy = be32_to_cpup(p++); 583 READ_BUF(dummy); 584 break; 585 default: 586 dprintk("Illegal callback secflavor\n"); 587 return nfserr_inval; 588 } 589 } 590 DECODE_TAIL; 591 } 592 593 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc) 594 { 595 DECODE_HEAD; 596 597 READ_BUF(4); 598 bc->bc_cb_program = be32_to_cpup(p++); 599 nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec); 600 601 DECODE_TAIL; 602 } 603 604 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts) 605 { 606 DECODE_HEAD; 607 608 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8); 609 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 610 bcts->dir = be32_to_cpup(p++); 611 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker 612 * could help us figure out we should be using it. */ 613 DECODE_TAIL; 614 } 615 616 static __be32 617 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close) 618 { 619 DECODE_HEAD; 620 621 READ_BUF(4); 622 close->cl_seqid = be32_to_cpup(p++); 623 return nfsd4_decode_stateid(argp, &close->cl_stateid); 624 625 DECODE_TAIL; 626 } 627 628 629 static __be32 630 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit) 631 { 632 DECODE_HEAD; 633 634 READ_BUF(12); 635 p = xdr_decode_hyper(p, &commit->co_offset); 636 commit->co_count = be32_to_cpup(p++); 637 638 DECODE_TAIL; 639 } 640 641 static __be32 642 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create) 643 { 644 DECODE_HEAD; 645 646 READ_BUF(4); 647 create->cr_type = be32_to_cpup(p++); 648 switch (create->cr_type) { 649 case NF4LNK: 650 READ_BUF(4); 651 create->cr_datalen = be32_to_cpup(p++); 652 READ_BUF(create->cr_datalen); 653 create->cr_data = svcxdr_dupstr(argp, p, create->cr_datalen); 654 if (!create->cr_data) 655 return nfserr_jukebox; 656 break; 657 case NF4BLK: 658 case NF4CHR: 659 READ_BUF(8); 660 create->cr_specdata1 = be32_to_cpup(p++); 661 create->cr_specdata2 = be32_to_cpup(p++); 662 break; 663 case NF4SOCK: 664 case NF4FIFO: 665 case NF4DIR: 666 default: 667 break; 668 } 669 670 READ_BUF(4); 671 create->cr_namelen = be32_to_cpup(p++); 672 READ_BUF(create->cr_namelen); 673 SAVEMEM(create->cr_name, create->cr_namelen); 674 if ((status = check_filename(create->cr_name, create->cr_namelen))) 675 return status; 676 677 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr, 678 &create->cr_acl, &create->cr_label, 679 &create->cr_umask); 680 if (status) 681 goto out; 682 683 DECODE_TAIL; 684 } 685 686 static inline __be32 687 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr) 688 { 689 return nfsd4_decode_stateid(argp, &dr->dr_stateid); 690 } 691 692 static inline __be32 693 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr) 694 { 695 return nfsd4_decode_bitmap(argp, getattr->ga_bmval); 696 } 697 698 static __be32 699 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link) 700 { 701 DECODE_HEAD; 702 703 READ_BUF(4); 704 link->li_namelen = be32_to_cpup(p++); 705 READ_BUF(link->li_namelen); 706 SAVEMEM(link->li_name, link->li_namelen); 707 if ((status = check_filename(link->li_name, link->li_namelen))) 708 return status; 709 710 DECODE_TAIL; 711 } 712 713 static __be32 714 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock) 715 { 716 DECODE_HEAD; 717 718 /* 719 * type, reclaim(boolean), offset, length, new_lock_owner(boolean) 720 */ 721 READ_BUF(28); 722 lock->lk_type = be32_to_cpup(p++); 723 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT)) 724 goto xdr_error; 725 lock->lk_reclaim = be32_to_cpup(p++); 726 p = xdr_decode_hyper(p, &lock->lk_offset); 727 p = xdr_decode_hyper(p, &lock->lk_length); 728 lock->lk_is_new = be32_to_cpup(p++); 729 730 if (lock->lk_is_new) { 731 READ_BUF(4); 732 lock->lk_new_open_seqid = be32_to_cpup(p++); 733 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid); 734 if (status) 735 return status; 736 READ_BUF(8 + sizeof(clientid_t)); 737 lock->lk_new_lock_seqid = be32_to_cpup(p++); 738 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t)); 739 lock->lk_new_owner.len = be32_to_cpup(p++); 740 READ_BUF(lock->lk_new_owner.len); 741 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len); 742 } else { 743 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid); 744 if (status) 745 return status; 746 READ_BUF(4); 747 lock->lk_old_lock_seqid = be32_to_cpup(p++); 748 } 749 750 DECODE_TAIL; 751 } 752 753 static __be32 754 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt) 755 { 756 DECODE_HEAD; 757 758 READ_BUF(32); 759 lockt->lt_type = be32_to_cpup(p++); 760 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT)) 761 goto xdr_error; 762 p = xdr_decode_hyper(p, &lockt->lt_offset); 763 p = xdr_decode_hyper(p, &lockt->lt_length); 764 COPYMEM(&lockt->lt_clientid, 8); 765 lockt->lt_owner.len = be32_to_cpup(p++); 766 READ_BUF(lockt->lt_owner.len); 767 READMEM(lockt->lt_owner.data, lockt->lt_owner.len); 768 769 DECODE_TAIL; 770 } 771 772 static __be32 773 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku) 774 { 775 DECODE_HEAD; 776 777 READ_BUF(8); 778 locku->lu_type = be32_to_cpup(p++); 779 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT)) 780 goto xdr_error; 781 locku->lu_seqid = be32_to_cpup(p++); 782 status = nfsd4_decode_stateid(argp, &locku->lu_stateid); 783 if (status) 784 return status; 785 READ_BUF(16); 786 p = xdr_decode_hyper(p, &locku->lu_offset); 787 p = xdr_decode_hyper(p, &locku->lu_length); 788 789 DECODE_TAIL; 790 } 791 792 static __be32 793 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup) 794 { 795 DECODE_HEAD; 796 797 READ_BUF(4); 798 lookup->lo_len = be32_to_cpup(p++); 799 READ_BUF(lookup->lo_len); 800 SAVEMEM(lookup->lo_name, lookup->lo_len); 801 if ((status = check_filename(lookup->lo_name, lookup->lo_len))) 802 return status; 803 804 DECODE_TAIL; 805 } 806 807 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when) 808 { 809 __be32 *p; 810 u32 w; 811 812 READ_BUF(4); 813 w = be32_to_cpup(p++); 814 *share_access = w & NFS4_SHARE_ACCESS_MASK; 815 *deleg_want = w & NFS4_SHARE_WANT_MASK; 816 if (deleg_when) 817 *deleg_when = w & NFS4_SHARE_WHEN_MASK; 818 819 switch (w & NFS4_SHARE_ACCESS_MASK) { 820 case NFS4_SHARE_ACCESS_READ: 821 case NFS4_SHARE_ACCESS_WRITE: 822 case NFS4_SHARE_ACCESS_BOTH: 823 break; 824 default: 825 return nfserr_bad_xdr; 826 } 827 w &= ~NFS4_SHARE_ACCESS_MASK; 828 if (!w) 829 return nfs_ok; 830 if (!argp->minorversion) 831 return nfserr_bad_xdr; 832 switch (w & NFS4_SHARE_WANT_MASK) { 833 case NFS4_SHARE_WANT_NO_PREFERENCE: 834 case NFS4_SHARE_WANT_READ_DELEG: 835 case NFS4_SHARE_WANT_WRITE_DELEG: 836 case NFS4_SHARE_WANT_ANY_DELEG: 837 case NFS4_SHARE_WANT_NO_DELEG: 838 case NFS4_SHARE_WANT_CANCEL: 839 break; 840 default: 841 return nfserr_bad_xdr; 842 } 843 w &= ~NFS4_SHARE_WANT_MASK; 844 if (!w) 845 return nfs_ok; 846 847 if (!deleg_when) /* open_downgrade */ 848 return nfserr_inval; 849 switch (w) { 850 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL: 851 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED: 852 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL | 853 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED): 854 return nfs_ok; 855 } 856 xdr_error: 857 return nfserr_bad_xdr; 858 } 859 860 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x) 861 { 862 __be32 *p; 863 864 READ_BUF(4); 865 *x = be32_to_cpup(p++); 866 /* Note: unlinke access bits, deny bits may be zero. */ 867 if (*x & ~NFS4_SHARE_DENY_BOTH) 868 return nfserr_bad_xdr; 869 return nfs_ok; 870 xdr_error: 871 return nfserr_bad_xdr; 872 } 873 874 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o) 875 { 876 __be32 *p; 877 878 READ_BUF(4); 879 o->len = be32_to_cpup(p++); 880 881 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT) 882 return nfserr_bad_xdr; 883 884 READ_BUF(o->len); 885 SAVEMEM(o->data, o->len); 886 return nfs_ok; 887 xdr_error: 888 return nfserr_bad_xdr; 889 } 890 891 static __be32 892 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open) 893 { 894 DECODE_HEAD; 895 u32 dummy; 896 897 memset(open->op_bmval, 0, sizeof(open->op_bmval)); 898 open->op_iattr.ia_valid = 0; 899 open->op_openowner = NULL; 900 901 open->op_xdr_error = 0; 902 /* seqid, share_access, share_deny, clientid, ownerlen */ 903 READ_BUF(4); 904 open->op_seqid = be32_to_cpup(p++); 905 /* decode, yet ignore deleg_when until supported */ 906 status = nfsd4_decode_share_access(argp, &open->op_share_access, 907 &open->op_deleg_want, &dummy); 908 if (status) 909 goto xdr_error; 910 status = nfsd4_decode_share_deny(argp, &open->op_share_deny); 911 if (status) 912 goto xdr_error; 913 READ_BUF(sizeof(clientid_t)); 914 COPYMEM(&open->op_clientid, sizeof(clientid_t)); 915 status = nfsd4_decode_opaque(argp, &open->op_owner); 916 if (status) 917 goto xdr_error; 918 READ_BUF(4); 919 open->op_create = be32_to_cpup(p++); 920 switch (open->op_create) { 921 case NFS4_OPEN_NOCREATE: 922 break; 923 case NFS4_OPEN_CREATE: 924 READ_BUF(4); 925 open->op_createmode = be32_to_cpup(p++); 926 switch (open->op_createmode) { 927 case NFS4_CREATE_UNCHECKED: 928 case NFS4_CREATE_GUARDED: 929 status = nfsd4_decode_fattr(argp, open->op_bmval, 930 &open->op_iattr, &open->op_acl, &open->op_label, 931 &open->op_umask); 932 if (status) 933 goto out; 934 break; 935 case NFS4_CREATE_EXCLUSIVE: 936 READ_BUF(NFS4_VERIFIER_SIZE); 937 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE); 938 break; 939 case NFS4_CREATE_EXCLUSIVE4_1: 940 if (argp->minorversion < 1) 941 goto xdr_error; 942 READ_BUF(NFS4_VERIFIER_SIZE); 943 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE); 944 status = nfsd4_decode_fattr(argp, open->op_bmval, 945 &open->op_iattr, &open->op_acl, &open->op_label, 946 &open->op_umask); 947 if (status) 948 goto out; 949 break; 950 default: 951 goto xdr_error; 952 } 953 break; 954 default: 955 goto xdr_error; 956 } 957 958 /* open_claim */ 959 READ_BUF(4); 960 open->op_claim_type = be32_to_cpup(p++); 961 switch (open->op_claim_type) { 962 case NFS4_OPEN_CLAIM_NULL: 963 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 964 READ_BUF(4); 965 open->op_fname.len = be32_to_cpup(p++); 966 READ_BUF(open->op_fname.len); 967 SAVEMEM(open->op_fname.data, open->op_fname.len); 968 if ((status = check_filename(open->op_fname.data, open->op_fname.len))) 969 return status; 970 break; 971 case NFS4_OPEN_CLAIM_PREVIOUS: 972 READ_BUF(4); 973 open->op_delegate_type = be32_to_cpup(p++); 974 break; 975 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 976 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 977 if (status) 978 return status; 979 READ_BUF(4); 980 open->op_fname.len = be32_to_cpup(p++); 981 READ_BUF(open->op_fname.len); 982 SAVEMEM(open->op_fname.data, open->op_fname.len); 983 if ((status = check_filename(open->op_fname.data, open->op_fname.len))) 984 return status; 985 break; 986 case NFS4_OPEN_CLAIM_FH: 987 case NFS4_OPEN_CLAIM_DELEG_PREV_FH: 988 if (argp->minorversion < 1) 989 goto xdr_error; 990 /* void */ 991 break; 992 case NFS4_OPEN_CLAIM_DELEG_CUR_FH: 993 if (argp->minorversion < 1) 994 goto xdr_error; 995 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 996 if (status) 997 return status; 998 break; 999 default: 1000 goto xdr_error; 1001 } 1002 1003 DECODE_TAIL; 1004 } 1005 1006 static __be32 1007 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf) 1008 { 1009 DECODE_HEAD; 1010 1011 if (argp->minorversion >= 1) 1012 return nfserr_notsupp; 1013 1014 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid); 1015 if (status) 1016 return status; 1017 READ_BUF(4); 1018 open_conf->oc_seqid = be32_to_cpup(p++); 1019 1020 DECODE_TAIL; 1021 } 1022 1023 static __be32 1024 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down) 1025 { 1026 DECODE_HEAD; 1027 1028 status = nfsd4_decode_stateid(argp, &open_down->od_stateid); 1029 if (status) 1030 return status; 1031 READ_BUF(4); 1032 open_down->od_seqid = be32_to_cpup(p++); 1033 status = nfsd4_decode_share_access(argp, &open_down->od_share_access, 1034 &open_down->od_deleg_want, NULL); 1035 if (status) 1036 return status; 1037 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny); 1038 if (status) 1039 return status; 1040 DECODE_TAIL; 1041 } 1042 1043 static __be32 1044 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh) 1045 { 1046 DECODE_HEAD; 1047 1048 READ_BUF(4); 1049 putfh->pf_fhlen = be32_to_cpup(p++); 1050 if (putfh->pf_fhlen > NFS4_FHSIZE) 1051 goto xdr_error; 1052 READ_BUF(putfh->pf_fhlen); 1053 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen); 1054 1055 DECODE_TAIL; 1056 } 1057 1058 static __be32 1059 nfsd4_decode_putpubfh(struct nfsd4_compoundargs *argp, void *p) 1060 { 1061 if (argp->minorversion == 0) 1062 return nfs_ok; 1063 return nfserr_notsupp; 1064 } 1065 1066 static __be32 1067 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) 1068 { 1069 DECODE_HEAD; 1070 1071 status = nfsd4_decode_stateid(argp, &read->rd_stateid); 1072 if (status) 1073 return status; 1074 READ_BUF(12); 1075 p = xdr_decode_hyper(p, &read->rd_offset); 1076 read->rd_length = be32_to_cpup(p++); 1077 1078 DECODE_TAIL; 1079 } 1080 1081 static __be32 1082 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) 1083 { 1084 DECODE_HEAD; 1085 1086 READ_BUF(24); 1087 p = xdr_decode_hyper(p, &readdir->rd_cookie); 1088 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); 1089 readdir->rd_dircount = be32_to_cpup(p++); 1090 readdir->rd_maxcount = be32_to_cpup(p++); 1091 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval))) 1092 goto out; 1093 1094 DECODE_TAIL; 1095 } 1096 1097 static __be32 1098 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove) 1099 { 1100 DECODE_HEAD; 1101 1102 READ_BUF(4); 1103 remove->rm_namelen = be32_to_cpup(p++); 1104 READ_BUF(remove->rm_namelen); 1105 SAVEMEM(remove->rm_name, remove->rm_namelen); 1106 if ((status = check_filename(remove->rm_name, remove->rm_namelen))) 1107 return status; 1108 1109 DECODE_TAIL; 1110 } 1111 1112 static __be32 1113 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename) 1114 { 1115 DECODE_HEAD; 1116 1117 READ_BUF(4); 1118 rename->rn_snamelen = be32_to_cpup(p++); 1119 READ_BUF(rename->rn_snamelen); 1120 SAVEMEM(rename->rn_sname, rename->rn_snamelen); 1121 READ_BUF(4); 1122 rename->rn_tnamelen = be32_to_cpup(p++); 1123 READ_BUF(rename->rn_tnamelen); 1124 SAVEMEM(rename->rn_tname, rename->rn_tnamelen); 1125 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen))) 1126 return status; 1127 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen))) 1128 return status; 1129 1130 DECODE_TAIL; 1131 } 1132 1133 static __be32 1134 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid) 1135 { 1136 DECODE_HEAD; 1137 1138 if (argp->minorversion >= 1) 1139 return nfserr_notsupp; 1140 1141 READ_BUF(sizeof(clientid_t)); 1142 COPYMEM(clientid, sizeof(clientid_t)); 1143 1144 DECODE_TAIL; 1145 } 1146 1147 static __be32 1148 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp, 1149 struct nfsd4_secinfo *secinfo) 1150 { 1151 DECODE_HEAD; 1152 1153 READ_BUF(4); 1154 secinfo->si_namelen = be32_to_cpup(p++); 1155 READ_BUF(secinfo->si_namelen); 1156 SAVEMEM(secinfo->si_name, secinfo->si_namelen); 1157 status = check_filename(secinfo->si_name, secinfo->si_namelen); 1158 if (status) 1159 return status; 1160 DECODE_TAIL; 1161 } 1162 1163 static __be32 1164 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp, 1165 struct nfsd4_secinfo_no_name *sin) 1166 { 1167 DECODE_HEAD; 1168 1169 READ_BUF(4); 1170 sin->sin_style = be32_to_cpup(p++); 1171 DECODE_TAIL; 1172 } 1173 1174 static __be32 1175 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr) 1176 { 1177 __be32 status; 1178 1179 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid); 1180 if (status) 1181 return status; 1182 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr, 1183 &setattr->sa_acl, &setattr->sa_label, NULL); 1184 } 1185 1186 static __be32 1187 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid) 1188 { 1189 DECODE_HEAD; 1190 1191 if (argp->minorversion >= 1) 1192 return nfserr_notsupp; 1193 1194 READ_BUF(NFS4_VERIFIER_SIZE); 1195 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE); 1196 1197 status = nfsd4_decode_opaque(argp, &setclientid->se_name); 1198 if (status) 1199 return nfserr_bad_xdr; 1200 READ_BUF(8); 1201 setclientid->se_callback_prog = be32_to_cpup(p++); 1202 setclientid->se_callback_netid_len = be32_to_cpup(p++); 1203 READ_BUF(setclientid->se_callback_netid_len); 1204 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len); 1205 READ_BUF(4); 1206 setclientid->se_callback_addr_len = be32_to_cpup(p++); 1207 1208 READ_BUF(setclientid->se_callback_addr_len); 1209 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len); 1210 READ_BUF(4); 1211 setclientid->se_callback_ident = be32_to_cpup(p++); 1212 1213 DECODE_TAIL; 1214 } 1215 1216 static __be32 1217 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c) 1218 { 1219 DECODE_HEAD; 1220 1221 if (argp->minorversion >= 1) 1222 return nfserr_notsupp; 1223 1224 READ_BUF(8 + NFS4_VERIFIER_SIZE); 1225 COPYMEM(&scd_c->sc_clientid, 8); 1226 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE); 1227 1228 DECODE_TAIL; 1229 } 1230 1231 /* Also used for NVERIFY */ 1232 static __be32 1233 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify) 1234 { 1235 DECODE_HEAD; 1236 1237 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval))) 1238 goto out; 1239 1240 /* For convenience's sake, we compare raw xdr'd attributes in 1241 * nfsd4_proc_verify */ 1242 1243 READ_BUF(4); 1244 verify->ve_attrlen = be32_to_cpup(p++); 1245 READ_BUF(verify->ve_attrlen); 1246 SAVEMEM(verify->ve_attrval, verify->ve_attrlen); 1247 1248 DECODE_TAIL; 1249 } 1250 1251 static __be32 1252 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write) 1253 { 1254 int avail; 1255 int len; 1256 DECODE_HEAD; 1257 1258 status = nfsd4_decode_stateid(argp, &write->wr_stateid); 1259 if (status) 1260 return status; 1261 READ_BUF(16); 1262 p = xdr_decode_hyper(p, &write->wr_offset); 1263 write->wr_stable_how = be32_to_cpup(p++); 1264 if (write->wr_stable_how > NFS_FILE_SYNC) 1265 goto xdr_error; 1266 write->wr_buflen = be32_to_cpup(p++); 1267 1268 /* Sorry .. no magic macros for this.. * 1269 * READ_BUF(write->wr_buflen); 1270 * SAVEMEM(write->wr_buf, write->wr_buflen); 1271 */ 1272 avail = (char*)argp->end - (char*)argp->p; 1273 if (avail + argp->pagelen < write->wr_buflen) { 1274 dprintk("NFSD: xdr error (%s:%d)\n", 1275 __FILE__, __LINE__); 1276 goto xdr_error; 1277 } 1278 write->wr_head.iov_base = p; 1279 write->wr_head.iov_len = avail; 1280 write->wr_pagelist = argp->pagelist; 1281 1282 len = XDR_QUADLEN(write->wr_buflen) << 2; 1283 if (len >= avail) { 1284 int pages; 1285 1286 len -= avail; 1287 1288 pages = len >> PAGE_SHIFT; 1289 argp->pagelist += pages; 1290 argp->pagelen -= pages * PAGE_SIZE; 1291 len -= pages * PAGE_SIZE; 1292 1293 next_decode_page(argp); 1294 } 1295 argp->p += XDR_QUADLEN(len); 1296 1297 DECODE_TAIL; 1298 } 1299 1300 static __be32 1301 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner) 1302 { 1303 DECODE_HEAD; 1304 1305 if (argp->minorversion >= 1) 1306 return nfserr_notsupp; 1307 1308 READ_BUF(12); 1309 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t)); 1310 rlockowner->rl_owner.len = be32_to_cpup(p++); 1311 READ_BUF(rlockowner->rl_owner.len); 1312 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len); 1313 1314 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid)) 1315 return nfserr_inval; 1316 DECODE_TAIL; 1317 } 1318 1319 static __be32 1320 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp, 1321 struct nfsd4_exchange_id *exid) 1322 { 1323 int dummy, tmp; 1324 DECODE_HEAD; 1325 1326 READ_BUF(NFS4_VERIFIER_SIZE); 1327 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE); 1328 1329 status = nfsd4_decode_opaque(argp, &exid->clname); 1330 if (status) 1331 return nfserr_bad_xdr; 1332 1333 READ_BUF(4); 1334 exid->flags = be32_to_cpup(p++); 1335 1336 /* Ignore state_protect4_a */ 1337 READ_BUF(4); 1338 exid->spa_how = be32_to_cpup(p++); 1339 switch (exid->spa_how) { 1340 case SP4_NONE: 1341 break; 1342 case SP4_MACH_CRED: 1343 /* spo_must_enforce */ 1344 status = nfsd4_decode_bitmap(argp, 1345 exid->spo_must_enforce); 1346 if (status) 1347 goto out; 1348 /* spo_must_allow */ 1349 status = nfsd4_decode_bitmap(argp, exid->spo_must_allow); 1350 if (status) 1351 goto out; 1352 break; 1353 case SP4_SSV: 1354 /* ssp_ops */ 1355 READ_BUF(4); 1356 dummy = be32_to_cpup(p++); 1357 READ_BUF(dummy * 4); 1358 p += dummy; 1359 1360 READ_BUF(4); 1361 dummy = be32_to_cpup(p++); 1362 READ_BUF(dummy * 4); 1363 p += dummy; 1364 1365 /* ssp_hash_algs<> */ 1366 READ_BUF(4); 1367 tmp = be32_to_cpup(p++); 1368 while (tmp--) { 1369 READ_BUF(4); 1370 dummy = be32_to_cpup(p++); 1371 READ_BUF(dummy); 1372 p += XDR_QUADLEN(dummy); 1373 } 1374 1375 /* ssp_encr_algs<> */ 1376 READ_BUF(4); 1377 tmp = be32_to_cpup(p++); 1378 while (tmp--) { 1379 READ_BUF(4); 1380 dummy = be32_to_cpup(p++); 1381 READ_BUF(dummy); 1382 p += XDR_QUADLEN(dummy); 1383 } 1384 1385 /* ignore ssp_window and ssp_num_gss_handles: */ 1386 READ_BUF(8); 1387 break; 1388 default: 1389 goto xdr_error; 1390 } 1391 1392 READ_BUF(4); /* nfs_impl_id4 array length */ 1393 dummy = be32_to_cpup(p++); 1394 1395 if (dummy > 1) 1396 goto xdr_error; 1397 1398 if (dummy == 1) { 1399 status = nfsd4_decode_opaque(argp, &exid->nii_domain); 1400 if (status) 1401 goto xdr_error; 1402 1403 /* nii_name */ 1404 status = nfsd4_decode_opaque(argp, &exid->nii_name); 1405 if (status) 1406 goto xdr_error; 1407 1408 /* nii_date */ 1409 status = nfsd4_decode_time(argp, &exid->nii_time); 1410 if (status) 1411 goto xdr_error; 1412 } 1413 DECODE_TAIL; 1414 } 1415 1416 static __be32 1417 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp, 1418 struct nfsd4_create_session *sess) 1419 { 1420 DECODE_HEAD; 1421 u32 dummy; 1422 1423 READ_BUF(16); 1424 COPYMEM(&sess->clientid, 8); 1425 sess->seqid = be32_to_cpup(p++); 1426 sess->flags = be32_to_cpup(p++); 1427 1428 /* Fore channel attrs */ 1429 READ_BUF(28); 1430 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */ 1431 sess->fore_channel.maxreq_sz = be32_to_cpup(p++); 1432 sess->fore_channel.maxresp_sz = be32_to_cpup(p++); 1433 sess->fore_channel.maxresp_cached = be32_to_cpup(p++); 1434 sess->fore_channel.maxops = be32_to_cpup(p++); 1435 sess->fore_channel.maxreqs = be32_to_cpup(p++); 1436 sess->fore_channel.nr_rdma_attrs = be32_to_cpup(p++); 1437 if (sess->fore_channel.nr_rdma_attrs == 1) { 1438 READ_BUF(4); 1439 sess->fore_channel.rdma_attrs = be32_to_cpup(p++); 1440 } else if (sess->fore_channel.nr_rdma_attrs > 1) { 1441 dprintk("Too many fore channel attr bitmaps!\n"); 1442 goto xdr_error; 1443 } 1444 1445 /* Back channel attrs */ 1446 READ_BUF(28); 1447 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */ 1448 sess->back_channel.maxreq_sz = be32_to_cpup(p++); 1449 sess->back_channel.maxresp_sz = be32_to_cpup(p++); 1450 sess->back_channel.maxresp_cached = be32_to_cpup(p++); 1451 sess->back_channel.maxops = be32_to_cpup(p++); 1452 sess->back_channel.maxreqs = be32_to_cpup(p++); 1453 sess->back_channel.nr_rdma_attrs = be32_to_cpup(p++); 1454 if (sess->back_channel.nr_rdma_attrs == 1) { 1455 READ_BUF(4); 1456 sess->back_channel.rdma_attrs = be32_to_cpup(p++); 1457 } else if (sess->back_channel.nr_rdma_attrs > 1) { 1458 dprintk("Too many back channel attr bitmaps!\n"); 1459 goto xdr_error; 1460 } 1461 1462 READ_BUF(4); 1463 sess->callback_prog = be32_to_cpup(p++); 1464 nfsd4_decode_cb_sec(argp, &sess->cb_sec); 1465 DECODE_TAIL; 1466 } 1467 1468 static __be32 1469 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp, 1470 struct nfsd4_destroy_session *destroy_session) 1471 { 1472 DECODE_HEAD; 1473 READ_BUF(NFS4_MAX_SESSIONID_LEN); 1474 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1475 1476 DECODE_TAIL; 1477 } 1478 1479 static __be32 1480 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp, 1481 struct nfsd4_free_stateid *free_stateid) 1482 { 1483 DECODE_HEAD; 1484 1485 READ_BUF(sizeof(stateid_t)); 1486 free_stateid->fr_stateid.si_generation = be32_to_cpup(p++); 1487 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t)); 1488 1489 DECODE_TAIL; 1490 } 1491 1492 static __be32 1493 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp, 1494 struct nfsd4_sequence *seq) 1495 { 1496 DECODE_HEAD; 1497 1498 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16); 1499 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1500 seq->seqid = be32_to_cpup(p++); 1501 seq->slotid = be32_to_cpup(p++); 1502 seq->maxslots = be32_to_cpup(p++); 1503 seq->cachethis = be32_to_cpup(p++); 1504 1505 DECODE_TAIL; 1506 } 1507 1508 static __be32 1509 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid) 1510 { 1511 int i; 1512 __be32 *p, status; 1513 struct nfsd4_test_stateid_id *stateid; 1514 1515 READ_BUF(4); 1516 test_stateid->ts_num_ids = ntohl(*p++); 1517 1518 INIT_LIST_HEAD(&test_stateid->ts_stateid_list); 1519 1520 for (i = 0; i < test_stateid->ts_num_ids; i++) { 1521 stateid = svcxdr_tmpalloc(argp, sizeof(*stateid)); 1522 if (!stateid) { 1523 status = nfserrno(-ENOMEM); 1524 goto out; 1525 } 1526 1527 INIT_LIST_HEAD(&stateid->ts_id_list); 1528 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list); 1529 1530 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid); 1531 if (status) 1532 goto out; 1533 } 1534 1535 status = 0; 1536 out: 1537 return status; 1538 xdr_error: 1539 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__); 1540 status = nfserr_bad_xdr; 1541 goto out; 1542 } 1543 1544 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc) 1545 { 1546 DECODE_HEAD; 1547 1548 READ_BUF(8); 1549 COPYMEM(&dc->clientid, 8); 1550 1551 DECODE_TAIL; 1552 } 1553 1554 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc) 1555 { 1556 DECODE_HEAD; 1557 1558 READ_BUF(4); 1559 rc->rca_one_fs = be32_to_cpup(p++); 1560 1561 DECODE_TAIL; 1562 } 1563 1564 #ifdef CONFIG_NFSD_PNFS 1565 static __be32 1566 nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs *argp, 1567 struct nfsd4_getdeviceinfo *gdev) 1568 { 1569 DECODE_HEAD; 1570 u32 num, i; 1571 1572 READ_BUF(sizeof(struct nfsd4_deviceid) + 3 * 4); 1573 COPYMEM(&gdev->gd_devid, sizeof(struct nfsd4_deviceid)); 1574 gdev->gd_layout_type = be32_to_cpup(p++); 1575 gdev->gd_maxcount = be32_to_cpup(p++); 1576 num = be32_to_cpup(p++); 1577 if (num) { 1578 if (num > 1000) 1579 goto xdr_error; 1580 READ_BUF(4 * num); 1581 gdev->gd_notify_types = be32_to_cpup(p++); 1582 for (i = 1; i < num; i++) { 1583 if (be32_to_cpup(p++)) { 1584 status = nfserr_inval; 1585 goto out; 1586 } 1587 } 1588 } 1589 DECODE_TAIL; 1590 } 1591 1592 static __be32 1593 nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp, 1594 struct nfsd4_layoutget *lgp) 1595 { 1596 DECODE_HEAD; 1597 1598 READ_BUF(36); 1599 lgp->lg_signal = be32_to_cpup(p++); 1600 lgp->lg_layout_type = be32_to_cpup(p++); 1601 lgp->lg_seg.iomode = be32_to_cpup(p++); 1602 p = xdr_decode_hyper(p, &lgp->lg_seg.offset); 1603 p = xdr_decode_hyper(p, &lgp->lg_seg.length); 1604 p = xdr_decode_hyper(p, &lgp->lg_minlength); 1605 1606 status = nfsd4_decode_stateid(argp, &lgp->lg_sid); 1607 if (status) 1608 return status; 1609 1610 READ_BUF(4); 1611 lgp->lg_maxcount = be32_to_cpup(p++); 1612 1613 DECODE_TAIL; 1614 } 1615 1616 static __be32 1617 nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp, 1618 struct nfsd4_layoutcommit *lcp) 1619 { 1620 DECODE_HEAD; 1621 u32 timechange; 1622 1623 READ_BUF(20); 1624 p = xdr_decode_hyper(p, &lcp->lc_seg.offset); 1625 p = xdr_decode_hyper(p, &lcp->lc_seg.length); 1626 lcp->lc_reclaim = be32_to_cpup(p++); 1627 1628 status = nfsd4_decode_stateid(argp, &lcp->lc_sid); 1629 if (status) 1630 return status; 1631 1632 READ_BUF(4); 1633 lcp->lc_newoffset = be32_to_cpup(p++); 1634 if (lcp->lc_newoffset) { 1635 READ_BUF(8); 1636 p = xdr_decode_hyper(p, &lcp->lc_last_wr); 1637 } else 1638 lcp->lc_last_wr = 0; 1639 READ_BUF(4); 1640 timechange = be32_to_cpup(p++); 1641 if (timechange) { 1642 status = nfsd4_decode_time(argp, &lcp->lc_mtime); 1643 if (status) 1644 return status; 1645 } else { 1646 lcp->lc_mtime.tv_nsec = UTIME_NOW; 1647 } 1648 READ_BUF(8); 1649 lcp->lc_layout_type = be32_to_cpup(p++); 1650 1651 /* 1652 * Save the layout update in XDR format and let the layout driver deal 1653 * with it later. 1654 */ 1655 lcp->lc_up_len = be32_to_cpup(p++); 1656 if (lcp->lc_up_len > 0) { 1657 READ_BUF(lcp->lc_up_len); 1658 READMEM(lcp->lc_up_layout, lcp->lc_up_len); 1659 } 1660 1661 DECODE_TAIL; 1662 } 1663 1664 static __be32 1665 nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp, 1666 struct nfsd4_layoutreturn *lrp) 1667 { 1668 DECODE_HEAD; 1669 1670 READ_BUF(16); 1671 lrp->lr_reclaim = be32_to_cpup(p++); 1672 lrp->lr_layout_type = be32_to_cpup(p++); 1673 lrp->lr_seg.iomode = be32_to_cpup(p++); 1674 lrp->lr_return_type = be32_to_cpup(p++); 1675 if (lrp->lr_return_type == RETURN_FILE) { 1676 READ_BUF(16); 1677 p = xdr_decode_hyper(p, &lrp->lr_seg.offset); 1678 p = xdr_decode_hyper(p, &lrp->lr_seg.length); 1679 1680 status = nfsd4_decode_stateid(argp, &lrp->lr_sid); 1681 if (status) 1682 return status; 1683 1684 READ_BUF(4); 1685 lrp->lrf_body_len = be32_to_cpup(p++); 1686 if (lrp->lrf_body_len > 0) { 1687 READ_BUF(lrp->lrf_body_len); 1688 READMEM(lrp->lrf_body, lrp->lrf_body_len); 1689 } 1690 } else { 1691 lrp->lr_seg.offset = 0; 1692 lrp->lr_seg.length = NFS4_MAX_UINT64; 1693 } 1694 1695 DECODE_TAIL; 1696 } 1697 #endif /* CONFIG_NFSD_PNFS */ 1698 1699 static __be32 1700 nfsd4_decode_fallocate(struct nfsd4_compoundargs *argp, 1701 struct nfsd4_fallocate *fallocate) 1702 { 1703 DECODE_HEAD; 1704 1705 status = nfsd4_decode_stateid(argp, &fallocate->falloc_stateid); 1706 if (status) 1707 return status; 1708 1709 READ_BUF(16); 1710 p = xdr_decode_hyper(p, &fallocate->falloc_offset); 1711 xdr_decode_hyper(p, &fallocate->falloc_length); 1712 1713 DECODE_TAIL; 1714 } 1715 1716 static __be32 1717 nfsd4_decode_clone(struct nfsd4_compoundargs *argp, struct nfsd4_clone *clone) 1718 { 1719 DECODE_HEAD; 1720 1721 status = nfsd4_decode_stateid(argp, &clone->cl_src_stateid); 1722 if (status) 1723 return status; 1724 status = nfsd4_decode_stateid(argp, &clone->cl_dst_stateid); 1725 if (status) 1726 return status; 1727 1728 READ_BUF(8 + 8 + 8); 1729 p = xdr_decode_hyper(p, &clone->cl_src_pos); 1730 p = xdr_decode_hyper(p, &clone->cl_dst_pos); 1731 p = xdr_decode_hyper(p, &clone->cl_count); 1732 DECODE_TAIL; 1733 } 1734 1735 static __be32 1736 nfsd4_decode_copy(struct nfsd4_compoundargs *argp, struct nfsd4_copy *copy) 1737 { 1738 DECODE_HEAD; 1739 unsigned int tmp; 1740 1741 status = nfsd4_decode_stateid(argp, ©->cp_src_stateid); 1742 if (status) 1743 return status; 1744 status = nfsd4_decode_stateid(argp, ©->cp_dst_stateid); 1745 if (status) 1746 return status; 1747 1748 READ_BUF(8 + 8 + 8 + 4 + 4 + 4); 1749 p = xdr_decode_hyper(p, ©->cp_src_pos); 1750 p = xdr_decode_hyper(p, ©->cp_dst_pos); 1751 p = xdr_decode_hyper(p, ©->cp_count); 1752 p++; /* ca_consecutive: we always do consecutive copies */ 1753 copy->cp_synchronous = be32_to_cpup(p++); 1754 tmp = be32_to_cpup(p); /* Source server list not supported */ 1755 1756 DECODE_TAIL; 1757 } 1758 1759 static __be32 1760 nfsd4_decode_offload_status(struct nfsd4_compoundargs *argp, 1761 struct nfsd4_offload_status *os) 1762 { 1763 return nfsd4_decode_stateid(argp, &os->stateid); 1764 } 1765 1766 static __be32 1767 nfsd4_decode_seek(struct nfsd4_compoundargs *argp, struct nfsd4_seek *seek) 1768 { 1769 DECODE_HEAD; 1770 1771 status = nfsd4_decode_stateid(argp, &seek->seek_stateid); 1772 if (status) 1773 return status; 1774 1775 READ_BUF(8 + 4); 1776 p = xdr_decode_hyper(p, &seek->seek_offset); 1777 seek->seek_whence = be32_to_cpup(p); 1778 1779 DECODE_TAIL; 1780 } 1781 1782 static __be32 1783 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p) 1784 { 1785 return nfs_ok; 1786 } 1787 1788 static __be32 1789 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p) 1790 { 1791 return nfserr_notsupp; 1792 } 1793 1794 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *); 1795 1796 static const nfsd4_dec nfsd4_dec_ops[] = { 1797 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1798 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1799 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1800 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1801 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1802 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1803 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1804 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1805 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1806 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1807 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1808 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1809 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1810 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1811 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1812 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1813 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1814 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm, 1815 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1816 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1817 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_putpubfh, 1818 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1819 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1820 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1821 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1822 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1823 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1824 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew, 1825 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1826 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1827 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1828 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1829 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid, 1830 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm, 1831 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1832 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1833 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner, 1834 1835 /* new operations for NFSv4.1 */ 1836 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl, 1837 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session, 1838 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id, 1839 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session, 1840 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session, 1841 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid, 1842 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1843 #ifdef CONFIG_NFSD_PNFS 1844 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_getdeviceinfo, 1845 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1846 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_layoutcommit, 1847 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_layoutget, 1848 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_layoutreturn, 1849 #else 1850 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp, 1851 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1852 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp, 1853 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp, 1854 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp, 1855 #endif 1856 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name, 1857 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence, 1858 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp, 1859 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid, 1860 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1861 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid, 1862 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete, 1863 1864 /* new operations for NFSv4.2 */ 1865 [OP_ALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate, 1866 [OP_COPY] = (nfsd4_dec)nfsd4_decode_copy, 1867 [OP_COPY_NOTIFY] = (nfsd4_dec)nfsd4_decode_notsupp, 1868 [OP_DEALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate, 1869 [OP_IO_ADVISE] = (nfsd4_dec)nfsd4_decode_notsupp, 1870 [OP_LAYOUTERROR] = (nfsd4_dec)nfsd4_decode_notsupp, 1871 [OP_LAYOUTSTATS] = (nfsd4_dec)nfsd4_decode_notsupp, 1872 [OP_OFFLOAD_CANCEL] = (nfsd4_dec)nfsd4_decode_offload_status, 1873 [OP_OFFLOAD_STATUS] = (nfsd4_dec)nfsd4_decode_offload_status, 1874 [OP_READ_PLUS] = (nfsd4_dec)nfsd4_decode_notsupp, 1875 [OP_SEEK] = (nfsd4_dec)nfsd4_decode_seek, 1876 [OP_WRITE_SAME] = (nfsd4_dec)nfsd4_decode_notsupp, 1877 [OP_CLONE] = (nfsd4_dec)nfsd4_decode_clone, 1878 }; 1879 1880 static inline bool 1881 nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op) 1882 { 1883 if (op->opnum < FIRST_NFS4_OP) 1884 return false; 1885 else if (argp->minorversion == 0 && op->opnum > LAST_NFS40_OP) 1886 return false; 1887 else if (argp->minorversion == 1 && op->opnum > LAST_NFS41_OP) 1888 return false; 1889 else if (argp->minorversion == 2 && op->opnum > LAST_NFS42_OP) 1890 return false; 1891 return true; 1892 } 1893 1894 static __be32 1895 nfsd4_decode_compound(struct nfsd4_compoundargs *argp) 1896 { 1897 DECODE_HEAD; 1898 struct nfsd4_op *op; 1899 bool cachethis = false; 1900 int auth_slack= argp->rqstp->rq_auth_slack; 1901 int max_reply = auth_slack + 8; /* opcnt, status */ 1902 int readcount = 0; 1903 int readbytes = 0; 1904 int i; 1905 1906 READ_BUF(4); 1907 argp->taglen = be32_to_cpup(p++); 1908 READ_BUF(argp->taglen); 1909 SAVEMEM(argp->tag, argp->taglen); 1910 READ_BUF(8); 1911 argp->minorversion = be32_to_cpup(p++); 1912 argp->opcnt = be32_to_cpup(p++); 1913 max_reply += 4 + (XDR_QUADLEN(argp->taglen) << 2); 1914 1915 if (argp->taglen > NFSD4_MAX_TAGLEN) 1916 goto xdr_error; 1917 /* 1918 * NFS4ERR_RESOURCE is a more helpful error than GARBAGE_ARGS 1919 * here, so we return success at the xdr level so that 1920 * nfsd4_proc can handle this is an NFS-level error. 1921 */ 1922 if (argp->opcnt > NFSD_MAX_OPS_PER_COMPOUND) 1923 return 0; 1924 1925 if (argp->opcnt > ARRAY_SIZE(argp->iops)) { 1926 argp->ops = kzalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL); 1927 if (!argp->ops) { 1928 argp->ops = argp->iops; 1929 dprintk("nfsd: couldn't allocate room for COMPOUND\n"); 1930 goto xdr_error; 1931 } 1932 } 1933 1934 if (argp->minorversion > NFSD_SUPPORTED_MINOR_VERSION) 1935 argp->opcnt = 0; 1936 1937 for (i = 0; i < argp->opcnt; i++) { 1938 op = &argp->ops[i]; 1939 op->replay = NULL; 1940 1941 READ_BUF(4); 1942 op->opnum = be32_to_cpup(p++); 1943 1944 if (nfsd4_opnum_in_range(argp, op)) 1945 op->status = nfsd4_dec_ops[op->opnum](argp, &op->u); 1946 else { 1947 op->opnum = OP_ILLEGAL; 1948 op->status = nfserr_op_illegal; 1949 } 1950 op->opdesc = OPDESC(op); 1951 /* 1952 * We'll try to cache the result in the DRC if any one 1953 * op in the compound wants to be cached: 1954 */ 1955 cachethis |= nfsd4_cache_this_op(op); 1956 1957 if (op->opnum == OP_READ) { 1958 readcount++; 1959 readbytes += nfsd4_max_reply(argp->rqstp, op); 1960 } else 1961 max_reply += nfsd4_max_reply(argp->rqstp, op); 1962 /* 1963 * OP_LOCK and OP_LOCKT may return a conflicting lock. 1964 * (Special case because it will just skip encoding this 1965 * if it runs out of xdr buffer space, and it is the only 1966 * operation that behaves this way.) 1967 */ 1968 if (op->opnum == OP_LOCK || op->opnum == OP_LOCKT) 1969 max_reply += NFS4_OPAQUE_LIMIT; 1970 1971 if (op->status) { 1972 argp->opcnt = i+1; 1973 break; 1974 } 1975 } 1976 /* Sessions make the DRC unnecessary: */ 1977 if (argp->minorversion) 1978 cachethis = false; 1979 svc_reserve(argp->rqstp, max_reply + readbytes); 1980 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE; 1981 1982 if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack) 1983 clear_bit(RQ_SPLICE_OK, &argp->rqstp->rq_flags); 1984 1985 DECODE_TAIL; 1986 } 1987 1988 static __be32 *encode_change(__be32 *p, struct kstat *stat, struct inode *inode, 1989 struct svc_export *exp) 1990 { 1991 if (exp->ex_flags & NFSEXP_V4ROOT) { 1992 *p++ = cpu_to_be32(convert_to_wallclock(exp->cd->flush_time)); 1993 *p++ = 0; 1994 } else if (IS_I_VERSION(inode)) { 1995 p = xdr_encode_hyper(p, nfsd4_change_attribute(stat, inode)); 1996 } else { 1997 *p++ = cpu_to_be32(stat->ctime.tv_sec); 1998 *p++ = cpu_to_be32(stat->ctime.tv_nsec); 1999 } 2000 return p; 2001 } 2002 2003 /* 2004 * ctime (in NFSv4, time_metadata) is not writeable, and the client 2005 * doesn't really care what resolution could theoretically be stored by 2006 * the filesystem. 2007 * 2008 * The client cares how close together changes can be while still 2009 * guaranteeing ctime changes. For most filesystems (which have 2010 * timestamps with nanosecond fields) that is limited by the resolution 2011 * of the time returned from current_time() (which I'm assuming to be 2012 * 1/HZ). 2013 */ 2014 static __be32 *encode_time_delta(__be32 *p, struct inode *inode) 2015 { 2016 struct timespec ts; 2017 u32 ns; 2018 2019 ns = max_t(u32, NSEC_PER_SEC/HZ, inode->i_sb->s_time_gran); 2020 ts = ns_to_timespec(ns); 2021 2022 p = xdr_encode_hyper(p, ts.tv_sec); 2023 *p++ = cpu_to_be32(ts.tv_nsec); 2024 2025 return p; 2026 } 2027 2028 static __be32 *encode_cinfo(__be32 *p, struct nfsd4_change_info *c) 2029 { 2030 *p++ = cpu_to_be32(c->atomic); 2031 if (c->change_supported) { 2032 p = xdr_encode_hyper(p, c->before_change); 2033 p = xdr_encode_hyper(p, c->after_change); 2034 } else { 2035 *p++ = cpu_to_be32(c->before_ctime_sec); 2036 *p++ = cpu_to_be32(c->before_ctime_nsec); 2037 *p++ = cpu_to_be32(c->after_ctime_sec); 2038 *p++ = cpu_to_be32(c->after_ctime_nsec); 2039 } 2040 return p; 2041 } 2042 2043 /* Encode as an array of strings the string given with components 2044 * separated @sep, escaped with esc_enter and esc_exit. 2045 */ 2046 static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep, 2047 char *components, char esc_enter, 2048 char esc_exit) 2049 { 2050 __be32 *p; 2051 __be32 pathlen; 2052 int pathlen_offset; 2053 int strlen, count=0; 2054 char *str, *end, *next; 2055 2056 dprintk("nfsd4_encode_components(%s)\n", components); 2057 2058 pathlen_offset = xdr->buf->len; 2059 p = xdr_reserve_space(xdr, 4); 2060 if (!p) 2061 return nfserr_resource; 2062 p++; /* We will fill this in with @count later */ 2063 2064 end = str = components; 2065 while (*end) { 2066 bool found_esc = false; 2067 2068 /* try to parse as esc_start, ..., esc_end, sep */ 2069 if (*str == esc_enter) { 2070 for (; *end && (*end != esc_exit); end++) 2071 /* find esc_exit or end of string */; 2072 next = end + 1; 2073 if (*end && (!*next || *next == sep)) { 2074 str++; 2075 found_esc = true; 2076 } 2077 } 2078 2079 if (!found_esc) 2080 for (; *end && (*end != sep); end++) 2081 /* find sep or end of string */; 2082 2083 strlen = end - str; 2084 if (strlen) { 2085 p = xdr_reserve_space(xdr, strlen + 4); 2086 if (!p) 2087 return nfserr_resource; 2088 p = xdr_encode_opaque(p, str, strlen); 2089 count++; 2090 } 2091 else 2092 end++; 2093 if (found_esc) 2094 end = next; 2095 2096 str = end; 2097 } 2098 pathlen = htonl(count); 2099 write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4); 2100 return 0; 2101 } 2102 2103 /* Encode as an array of strings the string given with components 2104 * separated @sep. 2105 */ 2106 static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep, 2107 char *components) 2108 { 2109 return nfsd4_encode_components_esc(xdr, sep, components, 0, 0); 2110 } 2111 2112 /* 2113 * encode a location element of a fs_locations structure 2114 */ 2115 static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr, 2116 struct nfsd4_fs_location *location) 2117 { 2118 __be32 status; 2119 2120 status = nfsd4_encode_components_esc(xdr, ':', location->hosts, 2121 '[', ']'); 2122 if (status) 2123 return status; 2124 status = nfsd4_encode_components(xdr, '/', location->path); 2125 if (status) 2126 return status; 2127 return 0; 2128 } 2129 2130 /* 2131 * Encode a path in RFC3530 'pathname4' format 2132 */ 2133 static __be32 nfsd4_encode_path(struct xdr_stream *xdr, 2134 const struct path *root, 2135 const struct path *path) 2136 { 2137 struct path cur = *path; 2138 __be32 *p; 2139 struct dentry **components = NULL; 2140 unsigned int ncomponents = 0; 2141 __be32 err = nfserr_jukebox; 2142 2143 dprintk("nfsd4_encode_components("); 2144 2145 path_get(&cur); 2146 /* First walk the path up to the nfsd root, and store the 2147 * dentries/path components in an array. 2148 */ 2149 for (;;) { 2150 if (path_equal(&cur, root)) 2151 break; 2152 if (cur.dentry == cur.mnt->mnt_root) { 2153 if (follow_up(&cur)) 2154 continue; 2155 goto out_free; 2156 } 2157 if ((ncomponents & 15) == 0) { 2158 struct dentry **new; 2159 new = krealloc(components, 2160 sizeof(*new) * (ncomponents + 16), 2161 GFP_KERNEL); 2162 if (!new) 2163 goto out_free; 2164 components = new; 2165 } 2166 components[ncomponents++] = cur.dentry; 2167 cur.dentry = dget_parent(cur.dentry); 2168 } 2169 err = nfserr_resource; 2170 p = xdr_reserve_space(xdr, 4); 2171 if (!p) 2172 goto out_free; 2173 *p++ = cpu_to_be32(ncomponents); 2174 2175 while (ncomponents) { 2176 struct dentry *dentry = components[ncomponents - 1]; 2177 unsigned int len; 2178 2179 spin_lock(&dentry->d_lock); 2180 len = dentry->d_name.len; 2181 p = xdr_reserve_space(xdr, len + 4); 2182 if (!p) { 2183 spin_unlock(&dentry->d_lock); 2184 goto out_free; 2185 } 2186 p = xdr_encode_opaque(p, dentry->d_name.name, len); 2187 dprintk("/%pd", dentry); 2188 spin_unlock(&dentry->d_lock); 2189 dput(dentry); 2190 ncomponents--; 2191 } 2192 2193 err = 0; 2194 out_free: 2195 dprintk(")\n"); 2196 while (ncomponents) 2197 dput(components[--ncomponents]); 2198 kfree(components); 2199 path_put(&cur); 2200 return err; 2201 } 2202 2203 static __be32 nfsd4_encode_fsloc_fsroot(struct xdr_stream *xdr, 2204 struct svc_rqst *rqstp, const struct path *path) 2205 { 2206 struct svc_export *exp_ps; 2207 __be32 res; 2208 2209 exp_ps = rqst_find_fsidzero_export(rqstp); 2210 if (IS_ERR(exp_ps)) 2211 return nfserrno(PTR_ERR(exp_ps)); 2212 res = nfsd4_encode_path(xdr, &exp_ps->ex_path, path); 2213 exp_put(exp_ps); 2214 return res; 2215 } 2216 2217 /* 2218 * encode a fs_locations structure 2219 */ 2220 static __be32 nfsd4_encode_fs_locations(struct xdr_stream *xdr, 2221 struct svc_rqst *rqstp, struct svc_export *exp) 2222 { 2223 __be32 status; 2224 int i; 2225 __be32 *p; 2226 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs; 2227 2228 status = nfsd4_encode_fsloc_fsroot(xdr, rqstp, &exp->ex_path); 2229 if (status) 2230 return status; 2231 p = xdr_reserve_space(xdr, 4); 2232 if (!p) 2233 return nfserr_resource; 2234 *p++ = cpu_to_be32(fslocs->locations_count); 2235 for (i=0; i<fslocs->locations_count; i++) { 2236 status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]); 2237 if (status) 2238 return status; 2239 } 2240 return 0; 2241 } 2242 2243 static u32 nfs4_file_type(umode_t mode) 2244 { 2245 switch (mode & S_IFMT) { 2246 case S_IFIFO: return NF4FIFO; 2247 case S_IFCHR: return NF4CHR; 2248 case S_IFDIR: return NF4DIR; 2249 case S_IFBLK: return NF4BLK; 2250 case S_IFLNK: return NF4LNK; 2251 case S_IFREG: return NF4REG; 2252 case S_IFSOCK: return NF4SOCK; 2253 default: return NF4BAD; 2254 }; 2255 } 2256 2257 static inline __be32 2258 nfsd4_encode_aclname(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2259 struct nfs4_ace *ace) 2260 { 2261 if (ace->whotype != NFS4_ACL_WHO_NAMED) 2262 return nfs4_acl_write_who(xdr, ace->whotype); 2263 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 2264 return nfsd4_encode_group(xdr, rqstp, ace->who_gid); 2265 else 2266 return nfsd4_encode_user(xdr, rqstp, ace->who_uid); 2267 } 2268 2269 static inline __be32 2270 nfsd4_encode_layout_types(struct xdr_stream *xdr, u32 layout_types) 2271 { 2272 __be32 *p; 2273 unsigned long i = hweight_long(layout_types); 2274 2275 p = xdr_reserve_space(xdr, 4 + 4 * i); 2276 if (!p) 2277 return nfserr_resource; 2278 2279 *p++ = cpu_to_be32(i); 2280 2281 for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i) 2282 if (layout_types & (1 << i)) 2283 *p++ = cpu_to_be32(i); 2284 2285 return 0; 2286 } 2287 2288 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \ 2289 FATTR4_WORD0_RDATTR_ERROR) 2290 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID 2291 #define WORD2_ABSENT_FS_ATTRS 0 2292 2293 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2294 static inline __be32 2295 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2296 void *context, int len) 2297 { 2298 __be32 *p; 2299 2300 p = xdr_reserve_space(xdr, len + 4 + 4 + 4); 2301 if (!p) 2302 return nfserr_resource; 2303 2304 /* 2305 * For now we use a 0 here to indicate the null translation; in 2306 * the future we may place a call to translation code here. 2307 */ 2308 *p++ = cpu_to_be32(0); /* lfs */ 2309 *p++ = cpu_to_be32(0); /* pi */ 2310 p = xdr_encode_opaque(p, context, len); 2311 return 0; 2312 } 2313 #else 2314 static inline __be32 2315 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2316 void *context, int len) 2317 { return 0; } 2318 #endif 2319 2320 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *bmval2, u32 *rdattr_err) 2321 { 2322 /* As per referral draft: */ 2323 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS || 2324 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) { 2325 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR || 2326 *bmval0 & FATTR4_WORD0_FS_LOCATIONS) 2327 *rdattr_err = NFSERR_MOVED; 2328 else 2329 return nfserr_moved; 2330 } 2331 *bmval0 &= WORD0_ABSENT_FS_ATTRS; 2332 *bmval1 &= WORD1_ABSENT_FS_ATTRS; 2333 *bmval2 &= WORD2_ABSENT_FS_ATTRS; 2334 return 0; 2335 } 2336 2337 2338 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat) 2339 { 2340 struct path path = exp->ex_path; 2341 int err; 2342 2343 path_get(&path); 2344 while (follow_up(&path)) { 2345 if (path.dentry != path.mnt->mnt_root) 2346 break; 2347 } 2348 err = vfs_getattr(&path, stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT); 2349 path_put(&path); 2350 return err; 2351 } 2352 2353 static __be32 2354 nfsd4_encode_bitmap(struct xdr_stream *xdr, u32 bmval0, u32 bmval1, u32 bmval2) 2355 { 2356 __be32 *p; 2357 2358 if (bmval2) { 2359 p = xdr_reserve_space(xdr, 16); 2360 if (!p) 2361 goto out_resource; 2362 *p++ = cpu_to_be32(3); 2363 *p++ = cpu_to_be32(bmval0); 2364 *p++ = cpu_to_be32(bmval1); 2365 *p++ = cpu_to_be32(bmval2); 2366 } else if (bmval1) { 2367 p = xdr_reserve_space(xdr, 12); 2368 if (!p) 2369 goto out_resource; 2370 *p++ = cpu_to_be32(2); 2371 *p++ = cpu_to_be32(bmval0); 2372 *p++ = cpu_to_be32(bmval1); 2373 } else { 2374 p = xdr_reserve_space(xdr, 8); 2375 if (!p) 2376 goto out_resource; 2377 *p++ = cpu_to_be32(1); 2378 *p++ = cpu_to_be32(bmval0); 2379 } 2380 2381 return 0; 2382 out_resource: 2383 return nfserr_resource; 2384 } 2385 2386 /* 2387 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle 2388 * ourselves. 2389 */ 2390 static __be32 2391 nfsd4_encode_fattr(struct xdr_stream *xdr, struct svc_fh *fhp, 2392 struct svc_export *exp, 2393 struct dentry *dentry, u32 *bmval, 2394 struct svc_rqst *rqstp, int ignore_crossmnt) 2395 { 2396 u32 bmval0 = bmval[0]; 2397 u32 bmval1 = bmval[1]; 2398 u32 bmval2 = bmval[2]; 2399 struct kstat stat; 2400 struct svc_fh *tempfh = NULL; 2401 struct kstatfs statfs; 2402 __be32 *p; 2403 int starting_len = xdr->buf->len; 2404 int attrlen_offset; 2405 __be32 attrlen; 2406 u32 dummy; 2407 u64 dummy64; 2408 u32 rdattr_err = 0; 2409 __be32 status; 2410 int err; 2411 struct nfs4_acl *acl = NULL; 2412 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2413 void *context = NULL; 2414 int contextlen; 2415 #endif 2416 bool contextsupport = false; 2417 struct nfsd4_compoundres *resp = rqstp->rq_resp; 2418 u32 minorversion = resp->cstate.minorversion; 2419 struct path path = { 2420 .mnt = exp->ex_path.mnt, 2421 .dentry = dentry, 2422 }; 2423 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 2424 2425 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1); 2426 BUG_ON(!nfsd_attrs_supported(minorversion, bmval)); 2427 2428 if (exp->ex_fslocs.migrated) { 2429 status = fattr_handle_absent_fs(&bmval0, &bmval1, &bmval2, &rdattr_err); 2430 if (status) 2431 goto out; 2432 } 2433 2434 err = vfs_getattr(&path, &stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT); 2435 if (err) 2436 goto out_nfserr; 2437 if ((bmval0 & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE | 2438 FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) || 2439 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE | 2440 FATTR4_WORD1_SPACE_TOTAL))) { 2441 err = vfs_statfs(&path, &statfs); 2442 if (err) 2443 goto out_nfserr; 2444 } 2445 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) { 2446 tempfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL); 2447 status = nfserr_jukebox; 2448 if (!tempfh) 2449 goto out; 2450 fh_init(tempfh, NFS4_FHSIZE); 2451 status = fh_compose(tempfh, exp, dentry, NULL); 2452 if (status) 2453 goto out; 2454 fhp = tempfh; 2455 } 2456 if (bmval0 & FATTR4_WORD0_ACL) { 2457 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl); 2458 if (err == -EOPNOTSUPP) 2459 bmval0 &= ~FATTR4_WORD0_ACL; 2460 else if (err == -EINVAL) { 2461 status = nfserr_attrnotsupp; 2462 goto out; 2463 } else if (err != 0) 2464 goto out_nfserr; 2465 } 2466 2467 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2468 if ((bmval2 & FATTR4_WORD2_SECURITY_LABEL) || 2469 bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 2470 if (exp->ex_flags & NFSEXP_SECURITY_LABEL) 2471 err = security_inode_getsecctx(d_inode(dentry), 2472 &context, &contextlen); 2473 else 2474 err = -EOPNOTSUPP; 2475 contextsupport = (err == 0); 2476 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) { 2477 if (err == -EOPNOTSUPP) 2478 bmval2 &= ~FATTR4_WORD2_SECURITY_LABEL; 2479 else if (err) 2480 goto out_nfserr; 2481 } 2482 } 2483 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */ 2484 2485 status = nfsd4_encode_bitmap(xdr, bmval0, bmval1, bmval2); 2486 if (status) 2487 goto out; 2488 2489 attrlen_offset = xdr->buf->len; 2490 p = xdr_reserve_space(xdr, 4); 2491 if (!p) 2492 goto out_resource; 2493 p++; /* to be backfilled later */ 2494 2495 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 2496 u32 supp[3]; 2497 2498 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp)); 2499 2500 if (!IS_POSIXACL(dentry->d_inode)) 2501 supp[0] &= ~FATTR4_WORD0_ACL; 2502 if (!contextsupport) 2503 supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL; 2504 if (!supp[2]) { 2505 p = xdr_reserve_space(xdr, 12); 2506 if (!p) 2507 goto out_resource; 2508 *p++ = cpu_to_be32(2); 2509 *p++ = cpu_to_be32(supp[0]); 2510 *p++ = cpu_to_be32(supp[1]); 2511 } else { 2512 p = xdr_reserve_space(xdr, 16); 2513 if (!p) 2514 goto out_resource; 2515 *p++ = cpu_to_be32(3); 2516 *p++ = cpu_to_be32(supp[0]); 2517 *p++ = cpu_to_be32(supp[1]); 2518 *p++ = cpu_to_be32(supp[2]); 2519 } 2520 } 2521 if (bmval0 & FATTR4_WORD0_TYPE) { 2522 p = xdr_reserve_space(xdr, 4); 2523 if (!p) 2524 goto out_resource; 2525 dummy = nfs4_file_type(stat.mode); 2526 if (dummy == NF4BAD) { 2527 status = nfserr_serverfault; 2528 goto out; 2529 } 2530 *p++ = cpu_to_be32(dummy); 2531 } 2532 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) { 2533 p = xdr_reserve_space(xdr, 4); 2534 if (!p) 2535 goto out_resource; 2536 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK) 2537 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT); 2538 else 2539 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT| 2540 NFS4_FH_VOL_RENAME); 2541 } 2542 if (bmval0 & FATTR4_WORD0_CHANGE) { 2543 p = xdr_reserve_space(xdr, 8); 2544 if (!p) 2545 goto out_resource; 2546 p = encode_change(p, &stat, d_inode(dentry), exp); 2547 } 2548 if (bmval0 & FATTR4_WORD0_SIZE) { 2549 p = xdr_reserve_space(xdr, 8); 2550 if (!p) 2551 goto out_resource; 2552 p = xdr_encode_hyper(p, stat.size); 2553 } 2554 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) { 2555 p = xdr_reserve_space(xdr, 4); 2556 if (!p) 2557 goto out_resource; 2558 *p++ = cpu_to_be32(1); 2559 } 2560 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) { 2561 p = xdr_reserve_space(xdr, 4); 2562 if (!p) 2563 goto out_resource; 2564 *p++ = cpu_to_be32(1); 2565 } 2566 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) { 2567 p = xdr_reserve_space(xdr, 4); 2568 if (!p) 2569 goto out_resource; 2570 *p++ = cpu_to_be32(0); 2571 } 2572 if (bmval0 & FATTR4_WORD0_FSID) { 2573 p = xdr_reserve_space(xdr, 16); 2574 if (!p) 2575 goto out_resource; 2576 if (exp->ex_fslocs.migrated) { 2577 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR); 2578 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR); 2579 } else switch(fsid_source(fhp)) { 2580 case FSIDSOURCE_FSID: 2581 p = xdr_encode_hyper(p, (u64)exp->ex_fsid); 2582 p = xdr_encode_hyper(p, (u64)0); 2583 break; 2584 case FSIDSOURCE_DEV: 2585 *p++ = cpu_to_be32(0); 2586 *p++ = cpu_to_be32(MAJOR(stat.dev)); 2587 *p++ = cpu_to_be32(0); 2588 *p++ = cpu_to_be32(MINOR(stat.dev)); 2589 break; 2590 case FSIDSOURCE_UUID: 2591 p = xdr_encode_opaque_fixed(p, exp->ex_uuid, 2592 EX_UUID_LEN); 2593 break; 2594 } 2595 } 2596 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) { 2597 p = xdr_reserve_space(xdr, 4); 2598 if (!p) 2599 goto out_resource; 2600 *p++ = cpu_to_be32(0); 2601 } 2602 if (bmval0 & FATTR4_WORD0_LEASE_TIME) { 2603 p = xdr_reserve_space(xdr, 4); 2604 if (!p) 2605 goto out_resource; 2606 *p++ = cpu_to_be32(nn->nfsd4_lease); 2607 } 2608 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) { 2609 p = xdr_reserve_space(xdr, 4); 2610 if (!p) 2611 goto out_resource; 2612 *p++ = cpu_to_be32(rdattr_err); 2613 } 2614 if (bmval0 & FATTR4_WORD0_ACL) { 2615 struct nfs4_ace *ace; 2616 2617 if (acl == NULL) { 2618 p = xdr_reserve_space(xdr, 4); 2619 if (!p) 2620 goto out_resource; 2621 2622 *p++ = cpu_to_be32(0); 2623 goto out_acl; 2624 } 2625 p = xdr_reserve_space(xdr, 4); 2626 if (!p) 2627 goto out_resource; 2628 *p++ = cpu_to_be32(acl->naces); 2629 2630 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) { 2631 p = xdr_reserve_space(xdr, 4*3); 2632 if (!p) 2633 goto out_resource; 2634 *p++ = cpu_to_be32(ace->type); 2635 *p++ = cpu_to_be32(ace->flag); 2636 *p++ = cpu_to_be32(ace->access_mask & 2637 NFS4_ACE_MASK_ALL); 2638 status = nfsd4_encode_aclname(xdr, rqstp, ace); 2639 if (status) 2640 goto out; 2641 } 2642 } 2643 out_acl: 2644 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) { 2645 p = xdr_reserve_space(xdr, 4); 2646 if (!p) 2647 goto out_resource; 2648 *p++ = cpu_to_be32(IS_POSIXACL(dentry->d_inode) ? 2649 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0); 2650 } 2651 if (bmval0 & FATTR4_WORD0_CANSETTIME) { 2652 p = xdr_reserve_space(xdr, 4); 2653 if (!p) 2654 goto out_resource; 2655 *p++ = cpu_to_be32(1); 2656 } 2657 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) { 2658 p = xdr_reserve_space(xdr, 4); 2659 if (!p) 2660 goto out_resource; 2661 *p++ = cpu_to_be32(0); 2662 } 2663 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) { 2664 p = xdr_reserve_space(xdr, 4); 2665 if (!p) 2666 goto out_resource; 2667 *p++ = cpu_to_be32(1); 2668 } 2669 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) { 2670 p = xdr_reserve_space(xdr, 4); 2671 if (!p) 2672 goto out_resource; 2673 *p++ = cpu_to_be32(1); 2674 } 2675 if (bmval0 & FATTR4_WORD0_FILEHANDLE) { 2676 p = xdr_reserve_space(xdr, fhp->fh_handle.fh_size + 4); 2677 if (!p) 2678 goto out_resource; 2679 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, 2680 fhp->fh_handle.fh_size); 2681 } 2682 if (bmval0 & FATTR4_WORD0_FILEID) { 2683 p = xdr_reserve_space(xdr, 8); 2684 if (!p) 2685 goto out_resource; 2686 p = xdr_encode_hyper(p, stat.ino); 2687 } 2688 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) { 2689 p = xdr_reserve_space(xdr, 8); 2690 if (!p) 2691 goto out_resource; 2692 p = xdr_encode_hyper(p, (u64) statfs.f_ffree); 2693 } 2694 if (bmval0 & FATTR4_WORD0_FILES_FREE) { 2695 p = xdr_reserve_space(xdr, 8); 2696 if (!p) 2697 goto out_resource; 2698 p = xdr_encode_hyper(p, (u64) statfs.f_ffree); 2699 } 2700 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) { 2701 p = xdr_reserve_space(xdr, 8); 2702 if (!p) 2703 goto out_resource; 2704 p = xdr_encode_hyper(p, (u64) statfs.f_files); 2705 } 2706 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) { 2707 status = nfsd4_encode_fs_locations(xdr, rqstp, exp); 2708 if (status) 2709 goto out; 2710 } 2711 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) { 2712 p = xdr_reserve_space(xdr, 4); 2713 if (!p) 2714 goto out_resource; 2715 *p++ = cpu_to_be32(1); 2716 } 2717 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) { 2718 p = xdr_reserve_space(xdr, 8); 2719 if (!p) 2720 goto out_resource; 2721 p = xdr_encode_hyper(p, exp->ex_path.mnt->mnt_sb->s_maxbytes); 2722 } 2723 if (bmval0 & FATTR4_WORD0_MAXLINK) { 2724 p = xdr_reserve_space(xdr, 4); 2725 if (!p) 2726 goto out_resource; 2727 *p++ = cpu_to_be32(255); 2728 } 2729 if (bmval0 & FATTR4_WORD0_MAXNAME) { 2730 p = xdr_reserve_space(xdr, 4); 2731 if (!p) 2732 goto out_resource; 2733 *p++ = cpu_to_be32(statfs.f_namelen); 2734 } 2735 if (bmval0 & FATTR4_WORD0_MAXREAD) { 2736 p = xdr_reserve_space(xdr, 8); 2737 if (!p) 2738 goto out_resource; 2739 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp)); 2740 } 2741 if (bmval0 & FATTR4_WORD0_MAXWRITE) { 2742 p = xdr_reserve_space(xdr, 8); 2743 if (!p) 2744 goto out_resource; 2745 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp)); 2746 } 2747 if (bmval1 & FATTR4_WORD1_MODE) { 2748 p = xdr_reserve_space(xdr, 4); 2749 if (!p) 2750 goto out_resource; 2751 *p++ = cpu_to_be32(stat.mode & S_IALLUGO); 2752 } 2753 if (bmval1 & FATTR4_WORD1_NO_TRUNC) { 2754 p = xdr_reserve_space(xdr, 4); 2755 if (!p) 2756 goto out_resource; 2757 *p++ = cpu_to_be32(1); 2758 } 2759 if (bmval1 & FATTR4_WORD1_NUMLINKS) { 2760 p = xdr_reserve_space(xdr, 4); 2761 if (!p) 2762 goto out_resource; 2763 *p++ = cpu_to_be32(stat.nlink); 2764 } 2765 if (bmval1 & FATTR4_WORD1_OWNER) { 2766 status = nfsd4_encode_user(xdr, rqstp, stat.uid); 2767 if (status) 2768 goto out; 2769 } 2770 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) { 2771 status = nfsd4_encode_group(xdr, rqstp, stat.gid); 2772 if (status) 2773 goto out; 2774 } 2775 if (bmval1 & FATTR4_WORD1_RAWDEV) { 2776 p = xdr_reserve_space(xdr, 8); 2777 if (!p) 2778 goto out_resource; 2779 *p++ = cpu_to_be32((u32) MAJOR(stat.rdev)); 2780 *p++ = cpu_to_be32((u32) MINOR(stat.rdev)); 2781 } 2782 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) { 2783 p = xdr_reserve_space(xdr, 8); 2784 if (!p) 2785 goto out_resource; 2786 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize; 2787 p = xdr_encode_hyper(p, dummy64); 2788 } 2789 if (bmval1 & FATTR4_WORD1_SPACE_FREE) { 2790 p = xdr_reserve_space(xdr, 8); 2791 if (!p) 2792 goto out_resource; 2793 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize; 2794 p = xdr_encode_hyper(p, dummy64); 2795 } 2796 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) { 2797 p = xdr_reserve_space(xdr, 8); 2798 if (!p) 2799 goto out_resource; 2800 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize; 2801 p = xdr_encode_hyper(p, dummy64); 2802 } 2803 if (bmval1 & FATTR4_WORD1_SPACE_USED) { 2804 p = xdr_reserve_space(xdr, 8); 2805 if (!p) 2806 goto out_resource; 2807 dummy64 = (u64)stat.blocks << 9; 2808 p = xdr_encode_hyper(p, dummy64); 2809 } 2810 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) { 2811 p = xdr_reserve_space(xdr, 12); 2812 if (!p) 2813 goto out_resource; 2814 p = xdr_encode_hyper(p, (s64)stat.atime.tv_sec); 2815 *p++ = cpu_to_be32(stat.atime.tv_nsec); 2816 } 2817 if (bmval1 & FATTR4_WORD1_TIME_DELTA) { 2818 p = xdr_reserve_space(xdr, 12); 2819 if (!p) 2820 goto out_resource; 2821 p = encode_time_delta(p, d_inode(dentry)); 2822 } 2823 if (bmval1 & FATTR4_WORD1_TIME_METADATA) { 2824 p = xdr_reserve_space(xdr, 12); 2825 if (!p) 2826 goto out_resource; 2827 p = xdr_encode_hyper(p, (s64)stat.ctime.tv_sec); 2828 *p++ = cpu_to_be32(stat.ctime.tv_nsec); 2829 } 2830 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) { 2831 p = xdr_reserve_space(xdr, 12); 2832 if (!p) 2833 goto out_resource; 2834 p = xdr_encode_hyper(p, (s64)stat.mtime.tv_sec); 2835 *p++ = cpu_to_be32(stat.mtime.tv_nsec); 2836 } 2837 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) { 2838 struct kstat parent_stat; 2839 u64 ino = stat.ino; 2840 2841 p = xdr_reserve_space(xdr, 8); 2842 if (!p) 2843 goto out_resource; 2844 /* 2845 * Get parent's attributes if not ignoring crossmount 2846 * and this is the root of a cross-mounted filesystem. 2847 */ 2848 if (ignore_crossmnt == 0 && 2849 dentry == exp->ex_path.mnt->mnt_root) { 2850 err = get_parent_attributes(exp, &parent_stat); 2851 if (err) 2852 goto out_nfserr; 2853 ino = parent_stat.ino; 2854 } 2855 p = xdr_encode_hyper(p, ino); 2856 } 2857 #ifdef CONFIG_NFSD_PNFS 2858 if (bmval1 & FATTR4_WORD1_FS_LAYOUT_TYPES) { 2859 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types); 2860 if (status) 2861 goto out; 2862 } 2863 2864 if (bmval2 & FATTR4_WORD2_LAYOUT_TYPES) { 2865 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types); 2866 if (status) 2867 goto out; 2868 } 2869 2870 if (bmval2 & FATTR4_WORD2_LAYOUT_BLKSIZE) { 2871 p = xdr_reserve_space(xdr, 4); 2872 if (!p) 2873 goto out_resource; 2874 *p++ = cpu_to_be32(stat.blksize); 2875 } 2876 #endif /* CONFIG_NFSD_PNFS */ 2877 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) { 2878 u32 supp[3]; 2879 2880 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp)); 2881 supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0; 2882 supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1; 2883 supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2; 2884 2885 status = nfsd4_encode_bitmap(xdr, supp[0], supp[1], supp[2]); 2886 if (status) 2887 goto out; 2888 } 2889 2890 if (bmval2 & FATTR4_WORD2_CHANGE_ATTR_TYPE) { 2891 p = xdr_reserve_space(xdr, 4); 2892 if (!p) 2893 goto out_resource; 2894 if (IS_I_VERSION(d_inode(dentry))) 2895 *p++ = cpu_to_be32(NFS4_CHANGE_TYPE_IS_MONOTONIC_INCR); 2896 else 2897 *p++ = cpu_to_be32(NFS4_CHANGE_TYPE_IS_TIME_METADATA); 2898 } 2899 2900 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2901 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) { 2902 status = nfsd4_encode_security_label(xdr, rqstp, context, 2903 contextlen); 2904 if (status) 2905 goto out; 2906 } 2907 #endif 2908 2909 attrlen = htonl(xdr->buf->len - attrlen_offset - 4); 2910 write_bytes_to_xdr_buf(xdr->buf, attrlen_offset, &attrlen, 4); 2911 status = nfs_ok; 2912 2913 out: 2914 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2915 if (context) 2916 security_release_secctx(context, contextlen); 2917 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */ 2918 kfree(acl); 2919 if (tempfh) { 2920 fh_put(tempfh); 2921 kfree(tempfh); 2922 } 2923 if (status) 2924 xdr_truncate_encode(xdr, starting_len); 2925 return status; 2926 out_nfserr: 2927 status = nfserrno(err); 2928 goto out; 2929 out_resource: 2930 status = nfserr_resource; 2931 goto out; 2932 } 2933 2934 static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr, 2935 struct xdr_buf *buf, __be32 *p, int bytes) 2936 { 2937 xdr->scratch.iov_len = 0; 2938 memset(buf, 0, sizeof(struct xdr_buf)); 2939 buf->head[0].iov_base = p; 2940 buf->head[0].iov_len = 0; 2941 buf->len = 0; 2942 xdr->buf = buf; 2943 xdr->iov = buf->head; 2944 xdr->p = p; 2945 xdr->end = (void *)p + bytes; 2946 buf->buflen = bytes; 2947 } 2948 2949 __be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words, 2950 struct svc_fh *fhp, struct svc_export *exp, 2951 struct dentry *dentry, u32 *bmval, 2952 struct svc_rqst *rqstp, int ignore_crossmnt) 2953 { 2954 struct xdr_buf dummy; 2955 struct xdr_stream xdr; 2956 __be32 ret; 2957 2958 svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2); 2959 ret = nfsd4_encode_fattr(&xdr, fhp, exp, dentry, bmval, rqstp, 2960 ignore_crossmnt); 2961 *p = xdr.p; 2962 return ret; 2963 } 2964 2965 static inline int attributes_need_mount(u32 *bmval) 2966 { 2967 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME)) 2968 return 1; 2969 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID) 2970 return 1; 2971 return 0; 2972 } 2973 2974 static __be32 2975 nfsd4_encode_dirent_fattr(struct xdr_stream *xdr, struct nfsd4_readdir *cd, 2976 const char *name, int namlen) 2977 { 2978 struct svc_export *exp = cd->rd_fhp->fh_export; 2979 struct dentry *dentry; 2980 __be32 nfserr; 2981 int ignore_crossmnt = 0; 2982 2983 dentry = lookup_one_len_unlocked(name, cd->rd_fhp->fh_dentry, namlen); 2984 if (IS_ERR(dentry)) 2985 return nfserrno(PTR_ERR(dentry)); 2986 if (d_really_is_negative(dentry)) { 2987 /* 2988 * we're not holding the i_mutex here, so there's 2989 * a window where this directory entry could have gone 2990 * away. 2991 */ 2992 dput(dentry); 2993 return nfserr_noent; 2994 } 2995 2996 exp_get(exp); 2997 /* 2998 * In the case of a mountpoint, the client may be asking for 2999 * attributes that are only properties of the underlying filesystem 3000 * as opposed to the cross-mounted file system. In such a case, 3001 * we will not follow the cross mount and will fill the attribtutes 3002 * directly from the mountpoint dentry. 3003 */ 3004 if (nfsd_mountpoint(dentry, exp)) { 3005 int err; 3006 3007 if (!(exp->ex_flags & NFSEXP_V4ROOT) 3008 && !attributes_need_mount(cd->rd_bmval)) { 3009 ignore_crossmnt = 1; 3010 goto out_encode; 3011 } 3012 /* 3013 * Why the heck aren't we just using nfsd_lookup?? 3014 * Different "."/".." handling? Something else? 3015 * At least, add a comment here to explain.... 3016 */ 3017 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp); 3018 if (err) { 3019 nfserr = nfserrno(err); 3020 goto out_put; 3021 } 3022 nfserr = check_nfsd_access(exp, cd->rd_rqstp); 3023 if (nfserr) 3024 goto out_put; 3025 3026 } 3027 out_encode: 3028 nfserr = nfsd4_encode_fattr(xdr, NULL, exp, dentry, cd->rd_bmval, 3029 cd->rd_rqstp, ignore_crossmnt); 3030 out_put: 3031 dput(dentry); 3032 exp_put(exp); 3033 return nfserr; 3034 } 3035 3036 static __be32 * 3037 nfsd4_encode_rdattr_error(struct xdr_stream *xdr, __be32 nfserr) 3038 { 3039 __be32 *p; 3040 3041 p = xdr_reserve_space(xdr, 20); 3042 if (!p) 3043 return NULL; 3044 *p++ = htonl(2); 3045 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */ 3046 *p++ = htonl(0); /* bmval1 */ 3047 3048 *p++ = htonl(4); /* attribute length */ 3049 *p++ = nfserr; /* no htonl */ 3050 return p; 3051 } 3052 3053 static int 3054 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen, 3055 loff_t offset, u64 ino, unsigned int d_type) 3056 { 3057 struct readdir_cd *ccd = ccdv; 3058 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common); 3059 struct xdr_stream *xdr = cd->xdr; 3060 int start_offset = xdr->buf->len; 3061 int cookie_offset; 3062 u32 name_and_cookie; 3063 int entry_bytes; 3064 __be32 nfserr = nfserr_toosmall; 3065 __be64 wire_offset; 3066 __be32 *p; 3067 3068 /* In nfsv4, "." and ".." never make it onto the wire.. */ 3069 if (name && isdotent(name, namlen)) { 3070 cd->common.err = nfs_ok; 3071 return 0; 3072 } 3073 3074 if (cd->cookie_offset) { 3075 wire_offset = cpu_to_be64(offset); 3076 write_bytes_to_xdr_buf(xdr->buf, cd->cookie_offset, 3077 &wire_offset, 8); 3078 } 3079 3080 p = xdr_reserve_space(xdr, 4); 3081 if (!p) 3082 goto fail; 3083 *p++ = xdr_one; /* mark entry present */ 3084 cookie_offset = xdr->buf->len; 3085 p = xdr_reserve_space(xdr, 3*4 + namlen); 3086 if (!p) 3087 goto fail; 3088 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */ 3089 p = xdr_encode_array(p, name, namlen); /* name length & name */ 3090 3091 nfserr = nfsd4_encode_dirent_fattr(xdr, cd, name, namlen); 3092 switch (nfserr) { 3093 case nfs_ok: 3094 break; 3095 case nfserr_resource: 3096 nfserr = nfserr_toosmall; 3097 goto fail; 3098 case nfserr_noent: 3099 xdr_truncate_encode(xdr, start_offset); 3100 goto skip_entry; 3101 default: 3102 /* 3103 * If the client requested the RDATTR_ERROR attribute, 3104 * we stuff the error code into this attribute 3105 * and continue. If this attribute was not requested, 3106 * then in accordance with the spec, we fail the 3107 * entire READDIR operation(!) 3108 */ 3109 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)) 3110 goto fail; 3111 p = nfsd4_encode_rdattr_error(xdr, nfserr); 3112 if (p == NULL) { 3113 nfserr = nfserr_toosmall; 3114 goto fail; 3115 } 3116 } 3117 nfserr = nfserr_toosmall; 3118 entry_bytes = xdr->buf->len - start_offset; 3119 if (entry_bytes > cd->rd_maxcount) 3120 goto fail; 3121 cd->rd_maxcount -= entry_bytes; 3122 /* 3123 * RFC 3530 14.2.24 describes rd_dircount as only a "hint", so 3124 * let's always let through the first entry, at least: 3125 */ 3126 if (!cd->rd_dircount) 3127 goto fail; 3128 name_and_cookie = 4 + 4 * XDR_QUADLEN(namlen) + 8; 3129 if (name_and_cookie > cd->rd_dircount && cd->cookie_offset) 3130 goto fail; 3131 cd->rd_dircount -= min(cd->rd_dircount, name_and_cookie); 3132 3133 cd->cookie_offset = cookie_offset; 3134 skip_entry: 3135 cd->common.err = nfs_ok; 3136 return 0; 3137 fail: 3138 xdr_truncate_encode(xdr, start_offset); 3139 cd->common.err = nfserr; 3140 return -EINVAL; 3141 } 3142 3143 static __be32 3144 nfsd4_encode_stateid(struct xdr_stream *xdr, stateid_t *sid) 3145 { 3146 __be32 *p; 3147 3148 p = xdr_reserve_space(xdr, sizeof(stateid_t)); 3149 if (!p) 3150 return nfserr_resource; 3151 *p++ = cpu_to_be32(sid->si_generation); 3152 p = xdr_encode_opaque_fixed(p, &sid->si_opaque, 3153 sizeof(stateid_opaque_t)); 3154 return 0; 3155 } 3156 3157 static __be32 3158 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access) 3159 { 3160 struct xdr_stream *xdr = &resp->xdr; 3161 __be32 *p; 3162 3163 p = xdr_reserve_space(xdr, 8); 3164 if (!p) 3165 return nfserr_resource; 3166 *p++ = cpu_to_be32(access->ac_supported); 3167 *p++ = cpu_to_be32(access->ac_resp_access); 3168 return 0; 3169 } 3170 3171 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts) 3172 { 3173 struct xdr_stream *xdr = &resp->xdr; 3174 __be32 *p; 3175 3176 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 8); 3177 if (!p) 3178 return nfserr_resource; 3179 p = xdr_encode_opaque_fixed(p, bcts->sessionid.data, 3180 NFS4_MAX_SESSIONID_LEN); 3181 *p++ = cpu_to_be32(bcts->dir); 3182 /* Upshifting from TCP to RDMA is not supported */ 3183 *p++ = cpu_to_be32(0); 3184 return 0; 3185 } 3186 3187 static __be32 3188 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close) 3189 { 3190 struct xdr_stream *xdr = &resp->xdr; 3191 3192 return nfsd4_encode_stateid(xdr, &close->cl_stateid); 3193 } 3194 3195 3196 static __be32 3197 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit) 3198 { 3199 struct xdr_stream *xdr = &resp->xdr; 3200 __be32 *p; 3201 3202 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE); 3203 if (!p) 3204 return nfserr_resource; 3205 p = xdr_encode_opaque_fixed(p, commit->co_verf.data, 3206 NFS4_VERIFIER_SIZE); 3207 return 0; 3208 } 3209 3210 static __be32 3211 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create) 3212 { 3213 struct xdr_stream *xdr = &resp->xdr; 3214 __be32 *p; 3215 3216 p = xdr_reserve_space(xdr, 20); 3217 if (!p) 3218 return nfserr_resource; 3219 encode_cinfo(p, &create->cr_cinfo); 3220 nfserr = nfsd4_encode_bitmap(xdr, create->cr_bmval[0], 3221 create->cr_bmval[1], create->cr_bmval[2]); 3222 return 0; 3223 } 3224 3225 static __be32 3226 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr) 3227 { 3228 struct svc_fh *fhp = getattr->ga_fhp; 3229 struct xdr_stream *xdr = &resp->xdr; 3230 3231 return nfsd4_encode_fattr(xdr, fhp, fhp->fh_export, fhp->fh_dentry, 3232 getattr->ga_bmval, resp->rqstp, 0); 3233 } 3234 3235 static __be32 3236 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp) 3237 { 3238 struct xdr_stream *xdr = &resp->xdr; 3239 struct svc_fh *fhp = *fhpp; 3240 unsigned int len; 3241 __be32 *p; 3242 3243 len = fhp->fh_handle.fh_size; 3244 p = xdr_reserve_space(xdr, len + 4); 3245 if (!p) 3246 return nfserr_resource; 3247 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, len); 3248 return 0; 3249 } 3250 3251 /* 3252 * Including all fields other than the name, a LOCK4denied structure requires 3253 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes. 3254 */ 3255 static __be32 3256 nfsd4_encode_lock_denied(struct xdr_stream *xdr, struct nfsd4_lock_denied *ld) 3257 { 3258 struct xdr_netobj *conf = &ld->ld_owner; 3259 __be32 *p; 3260 3261 again: 3262 p = xdr_reserve_space(xdr, 32 + XDR_LEN(conf->len)); 3263 if (!p) { 3264 /* 3265 * Don't fail to return the result just because we can't 3266 * return the conflicting open: 3267 */ 3268 if (conf->len) { 3269 kfree(conf->data); 3270 conf->len = 0; 3271 conf->data = NULL; 3272 goto again; 3273 } 3274 return nfserr_resource; 3275 } 3276 p = xdr_encode_hyper(p, ld->ld_start); 3277 p = xdr_encode_hyper(p, ld->ld_length); 3278 *p++ = cpu_to_be32(ld->ld_type); 3279 if (conf->len) { 3280 p = xdr_encode_opaque_fixed(p, &ld->ld_clientid, 8); 3281 p = xdr_encode_opaque(p, conf->data, conf->len); 3282 kfree(conf->data); 3283 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */ 3284 p = xdr_encode_hyper(p, (u64)0); /* clientid */ 3285 *p++ = cpu_to_be32(0); /* length of owner name */ 3286 } 3287 return nfserr_denied; 3288 } 3289 3290 static __be32 3291 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock) 3292 { 3293 struct xdr_stream *xdr = &resp->xdr; 3294 3295 if (!nfserr) 3296 nfserr = nfsd4_encode_stateid(xdr, &lock->lk_resp_stateid); 3297 else if (nfserr == nfserr_denied) 3298 nfserr = nfsd4_encode_lock_denied(xdr, &lock->lk_denied); 3299 3300 return nfserr; 3301 } 3302 3303 static __be32 3304 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt) 3305 { 3306 struct xdr_stream *xdr = &resp->xdr; 3307 3308 if (nfserr == nfserr_denied) 3309 nfsd4_encode_lock_denied(xdr, &lockt->lt_denied); 3310 return nfserr; 3311 } 3312 3313 static __be32 3314 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku) 3315 { 3316 struct xdr_stream *xdr = &resp->xdr; 3317 3318 return nfsd4_encode_stateid(xdr, &locku->lu_stateid); 3319 } 3320 3321 3322 static __be32 3323 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link) 3324 { 3325 struct xdr_stream *xdr = &resp->xdr; 3326 __be32 *p; 3327 3328 p = xdr_reserve_space(xdr, 20); 3329 if (!p) 3330 return nfserr_resource; 3331 p = encode_cinfo(p, &link->li_cinfo); 3332 return 0; 3333 } 3334 3335 3336 static __be32 3337 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open) 3338 { 3339 struct xdr_stream *xdr = &resp->xdr; 3340 __be32 *p; 3341 3342 nfserr = nfsd4_encode_stateid(xdr, &open->op_stateid); 3343 if (nfserr) 3344 return nfserr; 3345 p = xdr_reserve_space(xdr, 24); 3346 if (!p) 3347 return nfserr_resource; 3348 p = encode_cinfo(p, &open->op_cinfo); 3349 *p++ = cpu_to_be32(open->op_rflags); 3350 3351 nfserr = nfsd4_encode_bitmap(xdr, open->op_bmval[0], open->op_bmval[1], 3352 open->op_bmval[2]); 3353 if (nfserr) 3354 return nfserr; 3355 3356 p = xdr_reserve_space(xdr, 4); 3357 if (!p) 3358 return nfserr_resource; 3359 3360 *p++ = cpu_to_be32(open->op_delegate_type); 3361 switch (open->op_delegate_type) { 3362 case NFS4_OPEN_DELEGATE_NONE: 3363 break; 3364 case NFS4_OPEN_DELEGATE_READ: 3365 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid); 3366 if (nfserr) 3367 return nfserr; 3368 p = xdr_reserve_space(xdr, 20); 3369 if (!p) 3370 return nfserr_resource; 3371 *p++ = cpu_to_be32(open->op_recall); 3372 3373 /* 3374 * TODO: ACE's in delegations 3375 */ 3376 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 3377 *p++ = cpu_to_be32(0); 3378 *p++ = cpu_to_be32(0); 3379 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */ 3380 break; 3381 case NFS4_OPEN_DELEGATE_WRITE: 3382 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid); 3383 if (nfserr) 3384 return nfserr; 3385 p = xdr_reserve_space(xdr, 32); 3386 if (!p) 3387 return nfserr_resource; 3388 *p++ = cpu_to_be32(0); 3389 3390 /* 3391 * TODO: space_limit's in delegations 3392 */ 3393 *p++ = cpu_to_be32(NFS4_LIMIT_SIZE); 3394 *p++ = cpu_to_be32(~(u32)0); 3395 *p++ = cpu_to_be32(~(u32)0); 3396 3397 /* 3398 * TODO: ACE's in delegations 3399 */ 3400 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 3401 *p++ = cpu_to_be32(0); 3402 *p++ = cpu_to_be32(0); 3403 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */ 3404 break; 3405 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */ 3406 switch (open->op_why_no_deleg) { 3407 case WND4_CONTENTION: 3408 case WND4_RESOURCE: 3409 p = xdr_reserve_space(xdr, 8); 3410 if (!p) 3411 return nfserr_resource; 3412 *p++ = cpu_to_be32(open->op_why_no_deleg); 3413 /* deleg signaling not supported yet: */ 3414 *p++ = cpu_to_be32(0); 3415 break; 3416 default: 3417 p = xdr_reserve_space(xdr, 4); 3418 if (!p) 3419 return nfserr_resource; 3420 *p++ = cpu_to_be32(open->op_why_no_deleg); 3421 } 3422 break; 3423 default: 3424 BUG(); 3425 } 3426 /* XXX save filehandle here */ 3427 return 0; 3428 } 3429 3430 static __be32 3431 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc) 3432 { 3433 struct xdr_stream *xdr = &resp->xdr; 3434 3435 return nfsd4_encode_stateid(xdr, &oc->oc_resp_stateid); 3436 } 3437 3438 static __be32 3439 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od) 3440 { 3441 struct xdr_stream *xdr = &resp->xdr; 3442 3443 return nfsd4_encode_stateid(xdr, &od->od_stateid); 3444 } 3445 3446 static __be32 nfsd4_encode_splice_read( 3447 struct nfsd4_compoundres *resp, 3448 struct nfsd4_read *read, 3449 struct file *file, unsigned long maxcount) 3450 { 3451 struct xdr_stream *xdr = &resp->xdr; 3452 struct xdr_buf *buf = xdr->buf; 3453 u32 eof; 3454 long len; 3455 int space_left; 3456 __be32 nfserr; 3457 __be32 *p = xdr->p - 2; 3458 3459 /* Make sure there will be room for padding if needed */ 3460 if (xdr->end - xdr->p < 1) 3461 return nfserr_resource; 3462 3463 len = maxcount; 3464 nfserr = nfsd_splice_read(read->rd_rqstp, read->rd_fhp, 3465 file, read->rd_offset, &maxcount); 3466 read->rd_length = maxcount; 3467 if (nfserr) { 3468 /* 3469 * nfsd_splice_actor may have already messed with the 3470 * page length; reset it so as not to confuse 3471 * xdr_truncate_encode: 3472 */ 3473 buf->page_len = 0; 3474 return nfserr; 3475 } 3476 3477 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset, 3478 d_inode(read->rd_fhp->fh_dentry)->i_size); 3479 3480 *(p++) = htonl(eof); 3481 *(p++) = htonl(maxcount); 3482 3483 buf->page_len = maxcount; 3484 buf->len += maxcount; 3485 xdr->page_ptr += (buf->page_base + maxcount + PAGE_SIZE - 1) 3486 / PAGE_SIZE; 3487 3488 /* Use rest of head for padding and remaining ops: */ 3489 buf->tail[0].iov_base = xdr->p; 3490 buf->tail[0].iov_len = 0; 3491 xdr->iov = buf->tail; 3492 if (maxcount&3) { 3493 int pad = 4 - (maxcount&3); 3494 3495 *(xdr->p++) = 0; 3496 3497 buf->tail[0].iov_base += maxcount&3; 3498 buf->tail[0].iov_len = pad; 3499 buf->len += pad; 3500 } 3501 3502 space_left = min_t(int, (void *)xdr->end - (void *)xdr->p, 3503 buf->buflen - buf->len); 3504 buf->buflen = buf->len + space_left; 3505 xdr->end = (__be32 *)((void *)xdr->end + space_left); 3506 3507 return 0; 3508 } 3509 3510 static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp, 3511 struct nfsd4_read *read, 3512 struct file *file, unsigned long maxcount) 3513 { 3514 struct xdr_stream *xdr = &resp->xdr; 3515 u32 eof; 3516 int v; 3517 int starting_len = xdr->buf->len - 8; 3518 long len; 3519 int thislen; 3520 __be32 nfserr; 3521 __be32 tmp; 3522 __be32 *p; 3523 u32 zzz = 0; 3524 int pad; 3525 3526 len = maxcount; 3527 v = 0; 3528 3529 thislen = min_t(long, len, ((void *)xdr->end - (void *)xdr->p)); 3530 p = xdr_reserve_space(xdr, (thislen+3)&~3); 3531 WARN_ON_ONCE(!p); 3532 resp->rqstp->rq_vec[v].iov_base = p; 3533 resp->rqstp->rq_vec[v].iov_len = thislen; 3534 v++; 3535 len -= thislen; 3536 3537 while (len) { 3538 thislen = min_t(long, len, PAGE_SIZE); 3539 p = xdr_reserve_space(xdr, (thislen+3)&~3); 3540 WARN_ON_ONCE(!p); 3541 resp->rqstp->rq_vec[v].iov_base = p; 3542 resp->rqstp->rq_vec[v].iov_len = thislen; 3543 v++; 3544 len -= thislen; 3545 } 3546 read->rd_vlen = v; 3547 3548 len = maxcount; 3549 nfserr = nfsd_readv(resp->rqstp, read->rd_fhp, file, read->rd_offset, 3550 resp->rqstp->rq_vec, read->rd_vlen, &maxcount); 3551 read->rd_length = maxcount; 3552 if (nfserr) 3553 return nfserr; 3554 xdr_truncate_encode(xdr, starting_len + 8 + ((maxcount+3)&~3)); 3555 3556 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset, 3557 d_inode(read->rd_fhp->fh_dentry)->i_size); 3558 3559 tmp = htonl(eof); 3560 write_bytes_to_xdr_buf(xdr->buf, starting_len , &tmp, 4); 3561 tmp = htonl(maxcount); 3562 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4); 3563 3564 pad = (maxcount&3) ? 4 - (maxcount&3) : 0; 3565 write_bytes_to_xdr_buf(xdr->buf, starting_len + 8 + maxcount, 3566 &zzz, pad); 3567 return 0; 3568 3569 } 3570 3571 static __be32 3572 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr, 3573 struct nfsd4_read *read) 3574 { 3575 unsigned long maxcount; 3576 struct xdr_stream *xdr = &resp->xdr; 3577 struct file *file = read->rd_filp; 3578 int starting_len = xdr->buf->len; 3579 struct raparms *ra = NULL; 3580 __be32 *p; 3581 3582 p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */ 3583 if (!p) { 3584 WARN_ON_ONCE(test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)); 3585 return nfserr_resource; 3586 } 3587 if (resp->xdr.buf->page_len && 3588 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) { 3589 WARN_ON_ONCE(1); 3590 return nfserr_resource; 3591 } 3592 xdr_commit_encode(xdr); 3593 3594 maxcount = svc_max_payload(resp->rqstp); 3595 maxcount = min_t(unsigned long, maxcount, 3596 (xdr->buf->buflen - xdr->buf->len)); 3597 maxcount = min_t(unsigned long, maxcount, read->rd_length); 3598 3599 if (read->rd_tmp_file) 3600 ra = nfsd_init_raparms(file); 3601 3602 if (file->f_op->splice_read && 3603 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) 3604 nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount); 3605 else 3606 nfserr = nfsd4_encode_readv(resp, read, file, maxcount); 3607 3608 if (ra) 3609 nfsd_put_raparams(file, ra); 3610 3611 if (nfserr) 3612 xdr_truncate_encode(xdr, starting_len); 3613 3614 return nfserr; 3615 } 3616 3617 static __be32 3618 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink) 3619 { 3620 int maxcount; 3621 __be32 wire_count; 3622 int zero = 0; 3623 struct xdr_stream *xdr = &resp->xdr; 3624 int length_offset = xdr->buf->len; 3625 __be32 *p; 3626 3627 p = xdr_reserve_space(xdr, 4); 3628 if (!p) 3629 return nfserr_resource; 3630 maxcount = PAGE_SIZE; 3631 3632 p = xdr_reserve_space(xdr, maxcount); 3633 if (!p) 3634 return nfserr_resource; 3635 /* 3636 * XXX: By default, vfs_readlink() will truncate symlinks if they 3637 * would overflow the buffer. Is this kosher in NFSv4? If not, one 3638 * easy fix is: if vfs_readlink() precisely fills the buffer, assume 3639 * that truncation occurred, and return NFS4ERR_RESOURCE. 3640 */ 3641 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, 3642 (char *)p, &maxcount); 3643 if (nfserr == nfserr_isdir) 3644 nfserr = nfserr_inval; 3645 if (nfserr) { 3646 xdr_truncate_encode(xdr, length_offset); 3647 return nfserr; 3648 } 3649 3650 wire_count = htonl(maxcount); 3651 write_bytes_to_xdr_buf(xdr->buf, length_offset, &wire_count, 4); 3652 xdr_truncate_encode(xdr, length_offset + 4 + ALIGN(maxcount, 4)); 3653 if (maxcount & 3) 3654 write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount, 3655 &zero, 4 - (maxcount&3)); 3656 return 0; 3657 } 3658 3659 static __be32 3660 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir) 3661 { 3662 int maxcount; 3663 int bytes_left; 3664 loff_t offset; 3665 __be64 wire_offset; 3666 struct xdr_stream *xdr = &resp->xdr; 3667 int starting_len = xdr->buf->len; 3668 __be32 *p; 3669 3670 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE); 3671 if (!p) 3672 return nfserr_resource; 3673 3674 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */ 3675 *p++ = cpu_to_be32(0); 3676 *p++ = cpu_to_be32(0); 3677 resp->xdr.buf->head[0].iov_len = ((char *)resp->xdr.p) 3678 - (char *)resp->xdr.buf->head[0].iov_base; 3679 3680 /* 3681 * Number of bytes left for directory entries allowing for the 3682 * final 8 bytes of the readdir and a following failed op: 3683 */ 3684 bytes_left = xdr->buf->buflen - xdr->buf->len 3685 - COMPOUND_ERR_SLACK_SPACE - 8; 3686 if (bytes_left < 0) { 3687 nfserr = nfserr_resource; 3688 goto err_no_verf; 3689 } 3690 maxcount = svc_max_payload(resp->rqstp); 3691 maxcount = min_t(u32, readdir->rd_maxcount, maxcount); 3692 /* 3693 * Note the rfc defines rd_maxcount as the size of the 3694 * READDIR4resok structure, which includes the verifier above 3695 * and the 8 bytes encoded at the end of this function: 3696 */ 3697 if (maxcount < 16) { 3698 nfserr = nfserr_toosmall; 3699 goto err_no_verf; 3700 } 3701 maxcount = min_t(int, maxcount-16, bytes_left); 3702 3703 /* RFC 3530 14.2.24 allows us to ignore dircount when it's 0: */ 3704 if (!readdir->rd_dircount) 3705 readdir->rd_dircount = svc_max_payload(resp->rqstp); 3706 3707 readdir->xdr = xdr; 3708 readdir->rd_maxcount = maxcount; 3709 readdir->common.err = 0; 3710 readdir->cookie_offset = 0; 3711 3712 offset = readdir->rd_cookie; 3713 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, 3714 &offset, 3715 &readdir->common, nfsd4_encode_dirent); 3716 if (nfserr == nfs_ok && 3717 readdir->common.err == nfserr_toosmall && 3718 xdr->buf->len == starting_len + 8) { 3719 /* nothing encoded; which limit did we hit?: */ 3720 if (maxcount - 16 < bytes_left) 3721 /* It was the fault of rd_maxcount: */ 3722 nfserr = nfserr_toosmall; 3723 else 3724 /* We ran out of buffer space: */ 3725 nfserr = nfserr_resource; 3726 } 3727 if (nfserr) 3728 goto err_no_verf; 3729 3730 if (readdir->cookie_offset) { 3731 wire_offset = cpu_to_be64(offset); 3732 write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset, 3733 &wire_offset, 8); 3734 } 3735 3736 p = xdr_reserve_space(xdr, 8); 3737 if (!p) { 3738 WARN_ON_ONCE(1); 3739 goto err_no_verf; 3740 } 3741 *p++ = 0; /* no more entries */ 3742 *p++ = htonl(readdir->common.err == nfserr_eof); 3743 3744 return 0; 3745 err_no_verf: 3746 xdr_truncate_encode(xdr, starting_len); 3747 return nfserr; 3748 } 3749 3750 static __be32 3751 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove) 3752 { 3753 struct xdr_stream *xdr = &resp->xdr; 3754 __be32 *p; 3755 3756 p = xdr_reserve_space(xdr, 20); 3757 if (!p) 3758 return nfserr_resource; 3759 p = encode_cinfo(p, &remove->rm_cinfo); 3760 return 0; 3761 } 3762 3763 static __be32 3764 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename) 3765 { 3766 struct xdr_stream *xdr = &resp->xdr; 3767 __be32 *p; 3768 3769 p = xdr_reserve_space(xdr, 40); 3770 if (!p) 3771 return nfserr_resource; 3772 p = encode_cinfo(p, &rename->rn_sinfo); 3773 p = encode_cinfo(p, &rename->rn_tinfo); 3774 return 0; 3775 } 3776 3777 static __be32 3778 nfsd4_do_encode_secinfo(struct xdr_stream *xdr, struct svc_export *exp) 3779 { 3780 u32 i, nflavs, supported; 3781 struct exp_flavor_info *flavs; 3782 struct exp_flavor_info def_flavs[2]; 3783 __be32 *p, *flavorsp; 3784 static bool report = true; 3785 3786 if (exp->ex_nflavors) { 3787 flavs = exp->ex_flavors; 3788 nflavs = exp->ex_nflavors; 3789 } else { /* Handling of some defaults in absence of real secinfo: */ 3790 flavs = def_flavs; 3791 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) { 3792 nflavs = 2; 3793 flavs[0].pseudoflavor = RPC_AUTH_UNIX; 3794 flavs[1].pseudoflavor = RPC_AUTH_NULL; 3795 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) { 3796 nflavs = 1; 3797 flavs[0].pseudoflavor 3798 = svcauth_gss_flavor(exp->ex_client); 3799 } else { 3800 nflavs = 1; 3801 flavs[0].pseudoflavor 3802 = exp->ex_client->flavour->flavour; 3803 } 3804 } 3805 3806 supported = 0; 3807 p = xdr_reserve_space(xdr, 4); 3808 if (!p) 3809 return nfserr_resource; 3810 flavorsp = p++; /* to be backfilled later */ 3811 3812 for (i = 0; i < nflavs; i++) { 3813 rpc_authflavor_t pf = flavs[i].pseudoflavor; 3814 struct rpcsec_gss_info info; 3815 3816 if (rpcauth_get_gssinfo(pf, &info) == 0) { 3817 supported++; 3818 p = xdr_reserve_space(xdr, 4 + 4 + 3819 XDR_LEN(info.oid.len) + 4 + 4); 3820 if (!p) 3821 return nfserr_resource; 3822 *p++ = cpu_to_be32(RPC_AUTH_GSS); 3823 p = xdr_encode_opaque(p, info.oid.data, info.oid.len); 3824 *p++ = cpu_to_be32(info.qop); 3825 *p++ = cpu_to_be32(info.service); 3826 } else if (pf < RPC_AUTH_MAXFLAVOR) { 3827 supported++; 3828 p = xdr_reserve_space(xdr, 4); 3829 if (!p) 3830 return nfserr_resource; 3831 *p++ = cpu_to_be32(pf); 3832 } else { 3833 if (report) 3834 pr_warn("NFS: SECINFO: security flavor %u " 3835 "is not supported\n", pf); 3836 } 3837 } 3838 3839 if (nflavs != supported) 3840 report = false; 3841 *flavorsp = htonl(supported); 3842 return 0; 3843 } 3844 3845 static __be32 3846 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 3847 struct nfsd4_secinfo *secinfo) 3848 { 3849 struct xdr_stream *xdr = &resp->xdr; 3850 3851 return nfsd4_do_encode_secinfo(xdr, secinfo->si_exp); 3852 } 3853 3854 static __be32 3855 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr, 3856 struct nfsd4_secinfo_no_name *secinfo) 3857 { 3858 struct xdr_stream *xdr = &resp->xdr; 3859 3860 return nfsd4_do_encode_secinfo(xdr, secinfo->sin_exp); 3861 } 3862 3863 /* 3864 * The SETATTR encode routine is special -- it always encodes a bitmap, 3865 * regardless of the error status. 3866 */ 3867 static __be32 3868 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr) 3869 { 3870 struct xdr_stream *xdr = &resp->xdr; 3871 __be32 *p; 3872 3873 p = xdr_reserve_space(xdr, 16); 3874 if (!p) 3875 return nfserr_resource; 3876 if (nfserr) { 3877 *p++ = cpu_to_be32(3); 3878 *p++ = cpu_to_be32(0); 3879 *p++ = cpu_to_be32(0); 3880 *p++ = cpu_to_be32(0); 3881 } 3882 else { 3883 *p++ = cpu_to_be32(3); 3884 *p++ = cpu_to_be32(setattr->sa_bmval[0]); 3885 *p++ = cpu_to_be32(setattr->sa_bmval[1]); 3886 *p++ = cpu_to_be32(setattr->sa_bmval[2]); 3887 } 3888 return nfserr; 3889 } 3890 3891 static __be32 3892 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd) 3893 { 3894 struct xdr_stream *xdr = &resp->xdr; 3895 __be32 *p; 3896 3897 if (!nfserr) { 3898 p = xdr_reserve_space(xdr, 8 + NFS4_VERIFIER_SIZE); 3899 if (!p) 3900 return nfserr_resource; 3901 p = xdr_encode_opaque_fixed(p, &scd->se_clientid, 8); 3902 p = xdr_encode_opaque_fixed(p, &scd->se_confirm, 3903 NFS4_VERIFIER_SIZE); 3904 } 3905 else if (nfserr == nfserr_clid_inuse) { 3906 p = xdr_reserve_space(xdr, 8); 3907 if (!p) 3908 return nfserr_resource; 3909 *p++ = cpu_to_be32(0); 3910 *p++ = cpu_to_be32(0); 3911 } 3912 return nfserr; 3913 } 3914 3915 static __be32 3916 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write) 3917 { 3918 struct xdr_stream *xdr = &resp->xdr; 3919 __be32 *p; 3920 3921 p = xdr_reserve_space(xdr, 16); 3922 if (!p) 3923 return nfserr_resource; 3924 *p++ = cpu_to_be32(write->wr_bytes_written); 3925 *p++ = cpu_to_be32(write->wr_how_written); 3926 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data, 3927 NFS4_VERIFIER_SIZE); 3928 return 0; 3929 } 3930 3931 static __be32 3932 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr, 3933 struct nfsd4_exchange_id *exid) 3934 { 3935 struct xdr_stream *xdr = &resp->xdr; 3936 __be32 *p; 3937 char *major_id; 3938 char *server_scope; 3939 int major_id_sz; 3940 int server_scope_sz; 3941 uint64_t minor_id = 0; 3942 3943 major_id = utsname()->nodename; 3944 major_id_sz = strlen(major_id); 3945 server_scope = utsname()->nodename; 3946 server_scope_sz = strlen(server_scope); 3947 3948 p = xdr_reserve_space(xdr, 3949 8 /* eir_clientid */ + 3950 4 /* eir_sequenceid */ + 3951 4 /* eir_flags */ + 3952 4 /* spr_how */); 3953 if (!p) 3954 return nfserr_resource; 3955 3956 p = xdr_encode_opaque_fixed(p, &exid->clientid, 8); 3957 *p++ = cpu_to_be32(exid->seqid); 3958 *p++ = cpu_to_be32(exid->flags); 3959 3960 *p++ = cpu_to_be32(exid->spa_how); 3961 3962 switch (exid->spa_how) { 3963 case SP4_NONE: 3964 break; 3965 case SP4_MACH_CRED: 3966 /* spo_must_enforce bitmap: */ 3967 nfserr = nfsd4_encode_bitmap(xdr, 3968 exid->spo_must_enforce[0], 3969 exid->spo_must_enforce[1], 3970 exid->spo_must_enforce[2]); 3971 if (nfserr) 3972 return nfserr; 3973 /* spo_must_allow bitmap: */ 3974 nfserr = nfsd4_encode_bitmap(xdr, 3975 exid->spo_must_allow[0], 3976 exid->spo_must_allow[1], 3977 exid->spo_must_allow[2]); 3978 if (nfserr) 3979 return nfserr; 3980 break; 3981 default: 3982 WARN_ON_ONCE(1); 3983 } 3984 3985 p = xdr_reserve_space(xdr, 3986 8 /* so_minor_id */ + 3987 4 /* so_major_id.len */ + 3988 (XDR_QUADLEN(major_id_sz) * 4) + 3989 4 /* eir_server_scope.len */ + 3990 (XDR_QUADLEN(server_scope_sz) * 4) + 3991 4 /* eir_server_impl_id.count (0) */); 3992 if (!p) 3993 return nfserr_resource; 3994 3995 /* The server_owner struct */ 3996 p = xdr_encode_hyper(p, minor_id); /* Minor id */ 3997 /* major id */ 3998 p = xdr_encode_opaque(p, major_id, major_id_sz); 3999 4000 /* Server scope */ 4001 p = xdr_encode_opaque(p, server_scope, server_scope_sz); 4002 4003 /* Implementation id */ 4004 *p++ = cpu_to_be32(0); /* zero length nfs_impl_id4 array */ 4005 return 0; 4006 } 4007 4008 static __be32 4009 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr, 4010 struct nfsd4_create_session *sess) 4011 { 4012 struct xdr_stream *xdr = &resp->xdr; 4013 __be32 *p; 4014 4015 p = xdr_reserve_space(xdr, 24); 4016 if (!p) 4017 return nfserr_resource; 4018 p = xdr_encode_opaque_fixed(p, sess->sessionid.data, 4019 NFS4_MAX_SESSIONID_LEN); 4020 *p++ = cpu_to_be32(sess->seqid); 4021 *p++ = cpu_to_be32(sess->flags); 4022 4023 p = xdr_reserve_space(xdr, 28); 4024 if (!p) 4025 return nfserr_resource; 4026 *p++ = cpu_to_be32(0); /* headerpadsz */ 4027 *p++ = cpu_to_be32(sess->fore_channel.maxreq_sz); 4028 *p++ = cpu_to_be32(sess->fore_channel.maxresp_sz); 4029 *p++ = cpu_to_be32(sess->fore_channel.maxresp_cached); 4030 *p++ = cpu_to_be32(sess->fore_channel.maxops); 4031 *p++ = cpu_to_be32(sess->fore_channel.maxreqs); 4032 *p++ = cpu_to_be32(sess->fore_channel.nr_rdma_attrs); 4033 4034 if (sess->fore_channel.nr_rdma_attrs) { 4035 p = xdr_reserve_space(xdr, 4); 4036 if (!p) 4037 return nfserr_resource; 4038 *p++ = cpu_to_be32(sess->fore_channel.rdma_attrs); 4039 } 4040 4041 p = xdr_reserve_space(xdr, 28); 4042 if (!p) 4043 return nfserr_resource; 4044 *p++ = cpu_to_be32(0); /* headerpadsz */ 4045 *p++ = cpu_to_be32(sess->back_channel.maxreq_sz); 4046 *p++ = cpu_to_be32(sess->back_channel.maxresp_sz); 4047 *p++ = cpu_to_be32(sess->back_channel.maxresp_cached); 4048 *p++ = cpu_to_be32(sess->back_channel.maxops); 4049 *p++ = cpu_to_be32(sess->back_channel.maxreqs); 4050 *p++ = cpu_to_be32(sess->back_channel.nr_rdma_attrs); 4051 4052 if (sess->back_channel.nr_rdma_attrs) { 4053 p = xdr_reserve_space(xdr, 4); 4054 if (!p) 4055 return nfserr_resource; 4056 *p++ = cpu_to_be32(sess->back_channel.rdma_attrs); 4057 } 4058 return 0; 4059 } 4060 4061 static __be32 4062 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr, 4063 struct nfsd4_sequence *seq) 4064 { 4065 struct xdr_stream *xdr = &resp->xdr; 4066 __be32 *p; 4067 4068 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 20); 4069 if (!p) 4070 return nfserr_resource; 4071 p = xdr_encode_opaque_fixed(p, seq->sessionid.data, 4072 NFS4_MAX_SESSIONID_LEN); 4073 *p++ = cpu_to_be32(seq->seqid); 4074 *p++ = cpu_to_be32(seq->slotid); 4075 /* Note slotid's are numbered from zero: */ 4076 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_highest_slotid */ 4077 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_target_highest_slotid */ 4078 *p++ = cpu_to_be32(seq->status_flags); 4079 4080 resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */ 4081 return 0; 4082 } 4083 4084 static __be32 4085 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr, 4086 struct nfsd4_test_stateid *test_stateid) 4087 { 4088 struct xdr_stream *xdr = &resp->xdr; 4089 struct nfsd4_test_stateid_id *stateid, *next; 4090 __be32 *p; 4091 4092 p = xdr_reserve_space(xdr, 4 + (4 * test_stateid->ts_num_ids)); 4093 if (!p) 4094 return nfserr_resource; 4095 *p++ = htonl(test_stateid->ts_num_ids); 4096 4097 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) { 4098 *p++ = stateid->ts_id_status; 4099 } 4100 4101 return 0; 4102 } 4103 4104 #ifdef CONFIG_NFSD_PNFS 4105 static __be32 4106 nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 4107 struct nfsd4_getdeviceinfo *gdev) 4108 { 4109 struct xdr_stream *xdr = &resp->xdr; 4110 const struct nfsd4_layout_ops *ops; 4111 u32 starting_len = xdr->buf->len, needed_len; 4112 __be32 *p; 4113 4114 p = xdr_reserve_space(xdr, 4); 4115 if (!p) 4116 return nfserr_resource; 4117 4118 *p++ = cpu_to_be32(gdev->gd_layout_type); 4119 4120 /* If maxcount is 0 then just update notifications */ 4121 if (gdev->gd_maxcount != 0) { 4122 ops = nfsd4_layout_ops[gdev->gd_layout_type]; 4123 nfserr = ops->encode_getdeviceinfo(xdr, gdev); 4124 if (nfserr) { 4125 /* 4126 * We don't bother to burden the layout drivers with 4127 * enforcing gd_maxcount, just tell the client to 4128 * come back with a bigger buffer if it's not enough. 4129 */ 4130 if (xdr->buf->len + 4 > gdev->gd_maxcount) 4131 goto toosmall; 4132 return nfserr; 4133 } 4134 } 4135 4136 if (gdev->gd_notify_types) { 4137 p = xdr_reserve_space(xdr, 4 + 4); 4138 if (!p) 4139 return nfserr_resource; 4140 *p++ = cpu_to_be32(1); /* bitmap length */ 4141 *p++ = cpu_to_be32(gdev->gd_notify_types); 4142 } else { 4143 p = xdr_reserve_space(xdr, 4); 4144 if (!p) 4145 return nfserr_resource; 4146 *p++ = 0; 4147 } 4148 4149 return 0; 4150 toosmall: 4151 dprintk("%s: maxcount too small\n", __func__); 4152 needed_len = xdr->buf->len + 4 /* notifications */; 4153 xdr_truncate_encode(xdr, starting_len); 4154 p = xdr_reserve_space(xdr, 4); 4155 if (!p) 4156 return nfserr_resource; 4157 *p++ = cpu_to_be32(needed_len); 4158 return nfserr_toosmall; 4159 } 4160 4161 static __be32 4162 nfsd4_encode_layoutget(struct nfsd4_compoundres *resp, __be32 nfserr, 4163 struct nfsd4_layoutget *lgp) 4164 { 4165 struct xdr_stream *xdr = &resp->xdr; 4166 const struct nfsd4_layout_ops *ops; 4167 __be32 *p; 4168 4169 p = xdr_reserve_space(xdr, 36 + sizeof(stateid_opaque_t)); 4170 if (!p) 4171 return nfserr_resource; 4172 4173 *p++ = cpu_to_be32(1); /* we always set return-on-close */ 4174 *p++ = cpu_to_be32(lgp->lg_sid.si_generation); 4175 p = xdr_encode_opaque_fixed(p, &lgp->lg_sid.si_opaque, 4176 sizeof(stateid_opaque_t)); 4177 4178 *p++ = cpu_to_be32(1); /* we always return a single layout */ 4179 p = xdr_encode_hyper(p, lgp->lg_seg.offset); 4180 p = xdr_encode_hyper(p, lgp->lg_seg.length); 4181 *p++ = cpu_to_be32(lgp->lg_seg.iomode); 4182 *p++ = cpu_to_be32(lgp->lg_layout_type); 4183 4184 ops = nfsd4_layout_ops[lgp->lg_layout_type]; 4185 return ops->encode_layoutget(xdr, lgp); 4186 } 4187 4188 static __be32 4189 nfsd4_encode_layoutcommit(struct nfsd4_compoundres *resp, __be32 nfserr, 4190 struct nfsd4_layoutcommit *lcp) 4191 { 4192 struct xdr_stream *xdr = &resp->xdr; 4193 __be32 *p; 4194 4195 p = xdr_reserve_space(xdr, 4); 4196 if (!p) 4197 return nfserr_resource; 4198 *p++ = cpu_to_be32(lcp->lc_size_chg); 4199 if (lcp->lc_size_chg) { 4200 p = xdr_reserve_space(xdr, 8); 4201 if (!p) 4202 return nfserr_resource; 4203 p = xdr_encode_hyper(p, lcp->lc_newsize); 4204 } 4205 4206 return 0; 4207 } 4208 4209 static __be32 4210 nfsd4_encode_layoutreturn(struct nfsd4_compoundres *resp, __be32 nfserr, 4211 struct nfsd4_layoutreturn *lrp) 4212 { 4213 struct xdr_stream *xdr = &resp->xdr; 4214 __be32 *p; 4215 4216 p = xdr_reserve_space(xdr, 4); 4217 if (!p) 4218 return nfserr_resource; 4219 *p++ = cpu_to_be32(lrp->lrs_present); 4220 if (lrp->lrs_present) 4221 return nfsd4_encode_stateid(xdr, &lrp->lr_sid); 4222 return 0; 4223 } 4224 #endif /* CONFIG_NFSD_PNFS */ 4225 4226 static __be32 4227 nfsd42_encode_write_res(struct nfsd4_compoundres *resp, 4228 struct nfsd42_write_res *write, bool sync) 4229 { 4230 __be32 *p; 4231 p = xdr_reserve_space(&resp->xdr, 4); 4232 if (!p) 4233 return nfserr_resource; 4234 4235 if (sync) 4236 *p++ = cpu_to_be32(0); 4237 else { 4238 __be32 nfserr; 4239 *p++ = cpu_to_be32(1); 4240 nfserr = nfsd4_encode_stateid(&resp->xdr, &write->cb_stateid); 4241 if (nfserr) 4242 return nfserr; 4243 } 4244 p = xdr_reserve_space(&resp->xdr, 8 + 4 + NFS4_VERIFIER_SIZE); 4245 if (!p) 4246 return nfserr_resource; 4247 4248 p = xdr_encode_hyper(p, write->wr_bytes_written); 4249 *p++ = cpu_to_be32(write->wr_stable_how); 4250 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data, 4251 NFS4_VERIFIER_SIZE); 4252 return nfs_ok; 4253 } 4254 4255 static __be32 4256 nfsd4_encode_copy(struct nfsd4_compoundres *resp, __be32 nfserr, 4257 struct nfsd4_copy *copy) 4258 { 4259 __be32 *p; 4260 4261 nfserr = nfsd42_encode_write_res(resp, ©->cp_res, 4262 copy->cp_synchronous); 4263 if (nfserr) 4264 return nfserr; 4265 4266 p = xdr_reserve_space(&resp->xdr, 4 + 4); 4267 *p++ = xdr_one; /* cr_consecutive */ 4268 *p++ = cpu_to_be32(copy->cp_synchronous); 4269 return 0; 4270 } 4271 4272 static __be32 4273 nfsd4_encode_offload_status(struct nfsd4_compoundres *resp, __be32 nfserr, 4274 struct nfsd4_offload_status *os) 4275 { 4276 struct xdr_stream *xdr = &resp->xdr; 4277 __be32 *p; 4278 4279 p = xdr_reserve_space(xdr, 8 + 4); 4280 if (!p) 4281 return nfserr_resource; 4282 p = xdr_encode_hyper(p, os->count); 4283 *p++ = cpu_to_be32(0); 4284 4285 return nfserr; 4286 } 4287 4288 static __be32 4289 nfsd4_encode_seek(struct nfsd4_compoundres *resp, __be32 nfserr, 4290 struct nfsd4_seek *seek) 4291 { 4292 __be32 *p; 4293 4294 p = xdr_reserve_space(&resp->xdr, 4 + 8); 4295 *p++ = cpu_to_be32(seek->seek_eof); 4296 p = xdr_encode_hyper(p, seek->seek_pos); 4297 4298 return 0; 4299 } 4300 4301 static __be32 4302 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p) 4303 { 4304 return nfserr; 4305 } 4306 4307 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *); 4308 4309 /* 4310 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1 4311 * since we don't need to filter out obsolete ops as this is 4312 * done in the decoding phase. 4313 */ 4314 static const nfsd4_enc nfsd4_enc_ops[] = { 4315 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access, 4316 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close, 4317 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit, 4318 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create, 4319 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop, 4320 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop, 4321 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr, 4322 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh, 4323 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link, 4324 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock, 4325 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt, 4326 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku, 4327 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop, 4328 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop, 4329 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop, 4330 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open, 4331 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop, 4332 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm, 4333 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade, 4334 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop, 4335 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop, 4336 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop, 4337 [OP_READ] = (nfsd4_enc)nfsd4_encode_read, 4338 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir, 4339 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink, 4340 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove, 4341 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename, 4342 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop, 4343 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop, 4344 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop, 4345 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo, 4346 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr, 4347 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid, 4348 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop, 4349 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop, 4350 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write, 4351 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop, 4352 4353 /* NFSv4.1 operations */ 4354 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop, 4355 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session, 4356 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id, 4357 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session, 4358 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_noop, 4359 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_noop, 4360 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 4361 #ifdef CONFIG_NFSD_PNFS 4362 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_getdeviceinfo, 4363 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 4364 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_layoutcommit, 4365 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_layoutget, 4366 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_layoutreturn, 4367 #else 4368 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop, 4369 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 4370 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop, 4371 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop, 4372 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop, 4373 #endif 4374 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name, 4375 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence, 4376 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop, 4377 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid, 4378 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 4379 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop, 4380 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop, 4381 4382 /* NFSv4.2 operations */ 4383 [OP_ALLOCATE] = (nfsd4_enc)nfsd4_encode_noop, 4384 [OP_COPY] = (nfsd4_enc)nfsd4_encode_copy, 4385 [OP_COPY_NOTIFY] = (nfsd4_enc)nfsd4_encode_noop, 4386 [OP_DEALLOCATE] = (nfsd4_enc)nfsd4_encode_noop, 4387 [OP_IO_ADVISE] = (nfsd4_enc)nfsd4_encode_noop, 4388 [OP_LAYOUTERROR] = (nfsd4_enc)nfsd4_encode_noop, 4389 [OP_LAYOUTSTATS] = (nfsd4_enc)nfsd4_encode_noop, 4390 [OP_OFFLOAD_CANCEL] = (nfsd4_enc)nfsd4_encode_noop, 4391 [OP_OFFLOAD_STATUS] = (nfsd4_enc)nfsd4_encode_offload_status, 4392 [OP_READ_PLUS] = (nfsd4_enc)nfsd4_encode_noop, 4393 [OP_SEEK] = (nfsd4_enc)nfsd4_encode_seek, 4394 [OP_WRITE_SAME] = (nfsd4_enc)nfsd4_encode_noop, 4395 [OP_CLONE] = (nfsd4_enc)nfsd4_encode_noop, 4396 }; 4397 4398 /* 4399 * Calculate whether we still have space to encode repsize bytes. 4400 * There are two considerations: 4401 * - For NFS versions >=4.1, the size of the reply must stay within 4402 * session limits 4403 * - For all NFS versions, we must stay within limited preallocated 4404 * buffer space. 4405 * 4406 * This is called before the operation is processed, so can only provide 4407 * an upper estimate. For some nonidempotent operations (such as 4408 * getattr), it's not necessarily a problem if that estimate is wrong, 4409 * as we can fail it after processing without significant side effects. 4410 */ 4411 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize) 4412 { 4413 struct xdr_buf *buf = &resp->rqstp->rq_res; 4414 struct nfsd4_slot *slot = resp->cstate.slot; 4415 4416 if (buf->len + respsize <= buf->buflen) 4417 return nfs_ok; 4418 if (!nfsd4_has_session(&resp->cstate)) 4419 return nfserr_resource; 4420 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) { 4421 WARN_ON_ONCE(1); 4422 return nfserr_rep_too_big_to_cache; 4423 } 4424 return nfserr_rep_too_big; 4425 } 4426 4427 void 4428 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 4429 { 4430 struct xdr_stream *xdr = &resp->xdr; 4431 struct nfs4_stateowner *so = resp->cstate.replay_owner; 4432 struct svc_rqst *rqstp = resp->rqstp; 4433 const struct nfsd4_operation *opdesc = op->opdesc; 4434 int post_err_offset; 4435 nfsd4_enc encoder; 4436 __be32 *p; 4437 4438 p = xdr_reserve_space(xdr, 8); 4439 if (!p) { 4440 WARN_ON_ONCE(1); 4441 return; 4442 } 4443 *p++ = cpu_to_be32(op->opnum); 4444 post_err_offset = xdr->buf->len; 4445 4446 if (op->opnum == OP_ILLEGAL) 4447 goto status; 4448 if (op->status && opdesc && 4449 !(opdesc->op_flags & OP_NONTRIVIAL_ERROR_ENCODE)) 4450 goto status; 4451 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) || 4452 !nfsd4_enc_ops[op->opnum]); 4453 encoder = nfsd4_enc_ops[op->opnum]; 4454 op->status = encoder(resp, op->status, &op->u); 4455 if (opdesc && opdesc->op_release) 4456 opdesc->op_release(&op->u); 4457 xdr_commit_encode(xdr); 4458 4459 /* nfsd4_check_resp_size guarantees enough room for error status */ 4460 if (!op->status) { 4461 int space_needed = 0; 4462 if (!nfsd4_last_compound_op(rqstp)) 4463 space_needed = COMPOUND_ERR_SLACK_SPACE; 4464 op->status = nfsd4_check_resp_size(resp, space_needed); 4465 } 4466 if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) { 4467 struct nfsd4_slot *slot = resp->cstate.slot; 4468 4469 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) 4470 op->status = nfserr_rep_too_big_to_cache; 4471 else 4472 op->status = nfserr_rep_too_big; 4473 } 4474 if (op->status == nfserr_resource || 4475 op->status == nfserr_rep_too_big || 4476 op->status == nfserr_rep_too_big_to_cache) { 4477 /* 4478 * The operation may have already been encoded or 4479 * partially encoded. No op returns anything additional 4480 * in the case of one of these three errors, so we can 4481 * just truncate back to after the status. But it's a 4482 * bug if we had to do this on a non-idempotent op: 4483 */ 4484 warn_on_nonidempotent_op(op); 4485 xdr_truncate_encode(xdr, post_err_offset); 4486 } 4487 if (so) { 4488 int len = xdr->buf->len - post_err_offset; 4489 4490 so->so_replay.rp_status = op->status; 4491 so->so_replay.rp_buflen = len; 4492 read_bytes_from_xdr_buf(xdr->buf, post_err_offset, 4493 so->so_replay.rp_buf, len); 4494 } 4495 status: 4496 /* Note that op->status is already in network byte order: */ 4497 write_bytes_to_xdr_buf(xdr->buf, post_err_offset - 4, &op->status, 4); 4498 } 4499 4500 /* 4501 * Encode the reply stored in the stateowner reply cache 4502 * 4503 * XDR note: do not encode rp->rp_buflen: the buffer contains the 4504 * previously sent already encoded operation. 4505 */ 4506 void 4507 nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op) 4508 { 4509 __be32 *p; 4510 struct nfs4_replay *rp = op->replay; 4511 4512 BUG_ON(!rp); 4513 4514 p = xdr_reserve_space(xdr, 8 + rp->rp_buflen); 4515 if (!p) { 4516 WARN_ON_ONCE(1); 4517 return; 4518 } 4519 *p++ = cpu_to_be32(op->opnum); 4520 *p++ = rp->rp_status; /* already xdr'ed */ 4521 4522 p = xdr_encode_opaque_fixed(p, rp->rp_buf, rp->rp_buflen); 4523 } 4524 4525 int 4526 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p) 4527 { 4528 return xdr_ressize_check(rqstp, p); 4529 } 4530 4531 void nfsd4_release_compoundargs(struct svc_rqst *rqstp) 4532 { 4533 struct nfsd4_compoundargs *args = rqstp->rq_argp; 4534 4535 if (args->ops != args->iops) { 4536 kfree(args->ops); 4537 args->ops = args->iops; 4538 } 4539 kfree(args->tmpp); 4540 args->tmpp = NULL; 4541 while (args->to_free) { 4542 struct svcxdr_tmpbuf *tb = args->to_free; 4543 args->to_free = tb->next; 4544 kfree(tb); 4545 } 4546 } 4547 4548 int 4549 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p) 4550 { 4551 struct nfsd4_compoundargs *args = rqstp->rq_argp; 4552 4553 if (rqstp->rq_arg.head[0].iov_len % 4) { 4554 /* client is nuts */ 4555 dprintk("%s: compound not properly padded! (peeraddr=%pISc xid=0x%x)", 4556 __func__, svc_addr(rqstp), be32_to_cpu(rqstp->rq_xid)); 4557 return 0; 4558 } 4559 args->p = p; 4560 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len; 4561 args->pagelist = rqstp->rq_arg.pages; 4562 args->pagelen = rqstp->rq_arg.page_len; 4563 args->tail = false; 4564 args->tmpp = NULL; 4565 args->to_free = NULL; 4566 args->ops = args->iops; 4567 args->rqstp = rqstp; 4568 4569 return !nfsd4_decode_compound(args); 4570 } 4571 4572 int 4573 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p) 4574 { 4575 /* 4576 * All that remains is to write the tag and operation count... 4577 */ 4578 struct nfsd4_compoundres *resp = rqstp->rq_resp; 4579 struct xdr_buf *buf = resp->xdr.buf; 4580 4581 WARN_ON_ONCE(buf->len != buf->head[0].iov_len + buf->page_len + 4582 buf->tail[0].iov_len); 4583 4584 rqstp->rq_next_page = resp->xdr.page_ptr + 1; 4585 4586 p = resp->tagp; 4587 *p++ = htonl(resp->taglen); 4588 memcpy(p, resp->tag, resp->taglen); 4589 p += XDR_QUADLEN(resp->taglen); 4590 *p++ = htonl(resp->opcnt); 4591 4592 nfsd4_sequence_done(resp); 4593 return 1; 4594 } 4595 4596 /* 4597 * Local variables: 4598 * c-basic-offset: 8 4599 * End: 4600 */ 4601