1 /* 2 * Server-side XDR for NFSv4 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 */ 35 36 #include <linux/file.h> 37 #include <linux/slab.h> 38 #include <linux/namei.h> 39 #include <linux/statfs.h> 40 #include <linux/utsname.h> 41 #include <linux/pagemap.h> 42 #include <linux/sunrpc/svcauth_gss.h> 43 44 #include "idmap.h" 45 #include "acl.h" 46 #include "xdr4.h" 47 #include "vfs.h" 48 #include "state.h" 49 #include "cache.h" 50 #include "netns.h" 51 #include "pnfs.h" 52 53 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 54 #include <linux/security.h> 55 #endif 56 57 58 #define NFSDDBG_FACILITY NFSDDBG_XDR 59 60 const u32 nfsd_suppattrs[3][3] = { 61 {NFSD4_SUPPORTED_ATTRS_WORD0, 62 NFSD4_SUPPORTED_ATTRS_WORD1, 63 NFSD4_SUPPORTED_ATTRS_WORD2}, 64 65 {NFSD4_1_SUPPORTED_ATTRS_WORD0, 66 NFSD4_1_SUPPORTED_ATTRS_WORD1, 67 NFSD4_1_SUPPORTED_ATTRS_WORD2}, 68 69 {NFSD4_1_SUPPORTED_ATTRS_WORD0, 70 NFSD4_1_SUPPORTED_ATTRS_WORD1, 71 NFSD4_2_SUPPORTED_ATTRS_WORD2}, 72 }; 73 74 /* 75 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing 76 * directory in order to indicate to the client that a filesystem boundary is present 77 * We use a fixed fsid for a referral 78 */ 79 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL 80 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL 81 82 static __be32 83 check_filename(char *str, int len) 84 { 85 int i; 86 87 if (len == 0) 88 return nfserr_inval; 89 if (isdotent(str, len)) 90 return nfserr_badname; 91 for (i = 0; i < len; i++) 92 if (str[i] == '/') 93 return nfserr_badname; 94 return 0; 95 } 96 97 #define DECODE_HEAD \ 98 __be32 *p; \ 99 __be32 status 100 #define DECODE_TAIL \ 101 status = 0; \ 102 out: \ 103 return status; \ 104 xdr_error: \ 105 dprintk("NFSD: xdr error (%s:%d)\n", \ 106 __FILE__, __LINE__); \ 107 status = nfserr_bad_xdr; \ 108 goto out 109 110 #define READMEM(x,nbytes) do { \ 111 x = (char *)p; \ 112 p += XDR_QUADLEN(nbytes); \ 113 } while (0) 114 #define SAVEMEM(x,nbytes) do { \ 115 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \ 116 savemem(argp, p, nbytes) : \ 117 (char *)p)) { \ 118 dprintk("NFSD: xdr error (%s:%d)\n", \ 119 __FILE__, __LINE__); \ 120 goto xdr_error; \ 121 } \ 122 p += XDR_QUADLEN(nbytes); \ 123 } while (0) 124 #define COPYMEM(x,nbytes) do { \ 125 memcpy((x), p, nbytes); \ 126 p += XDR_QUADLEN(nbytes); \ 127 } while (0) 128 129 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */ 130 #define READ_BUF(nbytes) do { \ 131 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \ 132 p = argp->p; \ 133 argp->p += XDR_QUADLEN(nbytes); \ 134 } else if (!(p = read_buf(argp, nbytes))) { \ 135 dprintk("NFSD: xdr error (%s:%d)\n", \ 136 __FILE__, __LINE__); \ 137 goto xdr_error; \ 138 } \ 139 } while (0) 140 141 static void next_decode_page(struct nfsd4_compoundargs *argp) 142 { 143 argp->p = page_address(argp->pagelist[0]); 144 argp->pagelist++; 145 if (argp->pagelen < PAGE_SIZE) { 146 argp->end = argp->p + XDR_QUADLEN(argp->pagelen); 147 argp->pagelen = 0; 148 } else { 149 argp->end = argp->p + (PAGE_SIZE>>2); 150 argp->pagelen -= PAGE_SIZE; 151 } 152 } 153 154 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes) 155 { 156 /* We want more bytes than seem to be available. 157 * Maybe we need a new page, maybe we have just run out 158 */ 159 unsigned int avail = (char *)argp->end - (char *)argp->p; 160 __be32 *p; 161 162 if (argp->pagelen == 0) { 163 struct kvec *vec = &argp->rqstp->rq_arg.tail[0]; 164 165 if (!argp->tail) { 166 argp->tail = true; 167 avail = vec->iov_len; 168 argp->p = vec->iov_base; 169 argp->end = vec->iov_base + avail; 170 } 171 172 if (avail < nbytes) 173 return NULL; 174 175 p = argp->p; 176 argp->p += XDR_QUADLEN(nbytes); 177 return p; 178 } 179 180 if (avail + argp->pagelen < nbytes) 181 return NULL; 182 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */ 183 return NULL; 184 /* ok, we can do it with the current plus the next page */ 185 if (nbytes <= sizeof(argp->tmp)) 186 p = argp->tmp; 187 else { 188 kfree(argp->tmpp); 189 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL); 190 if (!p) 191 return NULL; 192 193 } 194 /* 195 * The following memcpy is safe because read_buf is always 196 * called with nbytes > avail, and the two cases above both 197 * guarantee p points to at least nbytes bytes. 198 */ 199 memcpy(p, argp->p, avail); 200 next_decode_page(argp); 201 memcpy(((char*)p)+avail, argp->p, (nbytes - avail)); 202 argp->p += XDR_QUADLEN(nbytes - avail); 203 return p; 204 } 205 206 static int zero_clientid(clientid_t *clid) 207 { 208 return (clid->cl_boot == 0) && (clid->cl_id == 0); 209 } 210 211 /** 212 * svcxdr_tmpalloc - allocate memory to be freed after compound processing 213 * @argp: NFSv4 compound argument structure 214 * @p: pointer to be freed (with kfree()) 215 * 216 * Marks @p to be freed when processing the compound operation 217 * described in @argp finishes. 218 */ 219 static void * 220 svcxdr_tmpalloc(struct nfsd4_compoundargs *argp, u32 len) 221 { 222 struct svcxdr_tmpbuf *tb; 223 224 tb = kmalloc(sizeof(*tb) + len, GFP_KERNEL); 225 if (!tb) 226 return NULL; 227 tb->next = argp->to_free; 228 argp->to_free = tb; 229 return tb->buf; 230 } 231 232 /* 233 * For xdr strings that need to be passed to other kernel api's 234 * as null-terminated strings. 235 * 236 * Note null-terminating in place usually isn't safe since the 237 * buffer might end on a page boundary. 238 */ 239 static char * 240 svcxdr_dupstr(struct nfsd4_compoundargs *argp, void *buf, u32 len) 241 { 242 char *p = svcxdr_tmpalloc(argp, len + 1); 243 244 if (!p) 245 return NULL; 246 memcpy(p, buf, len); 247 p[len] = '\0'; 248 return p; 249 } 250 251 /** 252 * savemem - duplicate a chunk of memory for later processing 253 * @argp: NFSv4 compound argument structure to be freed with 254 * @p: pointer to be duplicated 255 * @nbytes: length to be duplicated 256 * 257 * Returns a pointer to a copy of @nbytes bytes of memory at @p 258 * that are preserved until processing of the NFSv4 compound 259 * operation described by @argp finishes. 260 */ 261 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes) 262 { 263 void *ret; 264 265 ret = svcxdr_tmpalloc(argp, nbytes); 266 if (!ret) 267 return NULL; 268 memcpy(ret, p, nbytes); 269 return ret; 270 } 271 272 /* 273 * We require the high 32 bits of 'seconds' to be 0, and 274 * we ignore all 32 bits of 'nseconds'. 275 */ 276 static __be32 277 nfsd4_decode_time(struct nfsd4_compoundargs *argp, struct timespec *tv) 278 { 279 DECODE_HEAD; 280 u64 sec; 281 282 READ_BUF(12); 283 p = xdr_decode_hyper(p, &sec); 284 tv->tv_sec = sec; 285 tv->tv_nsec = be32_to_cpup(p++); 286 if (tv->tv_nsec >= (u32)1000000000) 287 return nfserr_inval; 288 289 DECODE_TAIL; 290 } 291 292 static __be32 293 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval) 294 { 295 u32 bmlen; 296 DECODE_HEAD; 297 298 bmval[0] = 0; 299 bmval[1] = 0; 300 bmval[2] = 0; 301 302 READ_BUF(4); 303 bmlen = be32_to_cpup(p++); 304 if (bmlen > 1000) 305 goto xdr_error; 306 307 READ_BUF(bmlen << 2); 308 if (bmlen > 0) 309 bmval[0] = be32_to_cpup(p++); 310 if (bmlen > 1) 311 bmval[1] = be32_to_cpup(p++); 312 if (bmlen > 2) 313 bmval[2] = be32_to_cpup(p++); 314 315 DECODE_TAIL; 316 } 317 318 static __be32 319 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval, 320 struct iattr *iattr, struct nfs4_acl **acl, 321 struct xdr_netobj *label, int *umask) 322 { 323 struct timespec ts; 324 int expected_len, len = 0; 325 u32 dummy32; 326 char *buf; 327 328 DECODE_HEAD; 329 iattr->ia_valid = 0; 330 if ((status = nfsd4_decode_bitmap(argp, bmval))) 331 return status; 332 333 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0 334 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1 335 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) { 336 if (nfsd_attrs_supported(argp->minorversion, bmval)) 337 return nfserr_inval; 338 return nfserr_attrnotsupp; 339 } 340 341 READ_BUF(4); 342 expected_len = be32_to_cpup(p++); 343 344 if (bmval[0] & FATTR4_WORD0_SIZE) { 345 READ_BUF(8); 346 len += 8; 347 p = xdr_decode_hyper(p, &iattr->ia_size); 348 iattr->ia_valid |= ATTR_SIZE; 349 } 350 if (bmval[0] & FATTR4_WORD0_ACL) { 351 u32 nace; 352 struct nfs4_ace *ace; 353 354 READ_BUF(4); len += 4; 355 nace = be32_to_cpup(p++); 356 357 if (nace > NFS4_ACL_MAX) 358 return nfserr_fbig; 359 360 *acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(nace)); 361 if (*acl == NULL) 362 return nfserr_jukebox; 363 364 (*acl)->naces = nace; 365 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) { 366 READ_BUF(16); len += 16; 367 ace->type = be32_to_cpup(p++); 368 ace->flag = be32_to_cpup(p++); 369 ace->access_mask = be32_to_cpup(p++); 370 dummy32 = be32_to_cpup(p++); 371 READ_BUF(dummy32); 372 len += XDR_QUADLEN(dummy32) << 2; 373 READMEM(buf, dummy32); 374 ace->whotype = nfs4_acl_get_whotype(buf, dummy32); 375 status = nfs_ok; 376 if (ace->whotype != NFS4_ACL_WHO_NAMED) 377 ; 378 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 379 status = nfsd_map_name_to_gid(argp->rqstp, 380 buf, dummy32, &ace->who_gid); 381 else 382 status = nfsd_map_name_to_uid(argp->rqstp, 383 buf, dummy32, &ace->who_uid); 384 if (status) 385 return status; 386 } 387 } else 388 *acl = NULL; 389 if (bmval[1] & FATTR4_WORD1_MODE) { 390 READ_BUF(4); 391 len += 4; 392 iattr->ia_mode = be32_to_cpup(p++); 393 iattr->ia_mode &= (S_IFMT | S_IALLUGO); 394 iattr->ia_valid |= ATTR_MODE; 395 } 396 if (bmval[1] & FATTR4_WORD1_OWNER) { 397 READ_BUF(4); 398 len += 4; 399 dummy32 = be32_to_cpup(p++); 400 READ_BUF(dummy32); 401 len += (XDR_QUADLEN(dummy32) << 2); 402 READMEM(buf, dummy32); 403 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid))) 404 return status; 405 iattr->ia_valid |= ATTR_UID; 406 } 407 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) { 408 READ_BUF(4); 409 len += 4; 410 dummy32 = be32_to_cpup(p++); 411 READ_BUF(dummy32); 412 len += (XDR_QUADLEN(dummy32) << 2); 413 READMEM(buf, dummy32); 414 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid))) 415 return status; 416 iattr->ia_valid |= ATTR_GID; 417 } 418 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) { 419 READ_BUF(4); 420 len += 4; 421 dummy32 = be32_to_cpup(p++); 422 switch (dummy32) { 423 case NFS4_SET_TO_CLIENT_TIME: 424 len += 12; 425 status = nfsd4_decode_time(argp, &ts); 426 iattr->ia_atime = timespec_to_timespec64(ts); 427 if (status) 428 return status; 429 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET); 430 break; 431 case NFS4_SET_TO_SERVER_TIME: 432 iattr->ia_valid |= ATTR_ATIME; 433 break; 434 default: 435 goto xdr_error; 436 } 437 } 438 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) { 439 READ_BUF(4); 440 len += 4; 441 dummy32 = be32_to_cpup(p++); 442 switch (dummy32) { 443 case NFS4_SET_TO_CLIENT_TIME: 444 len += 12; 445 status = nfsd4_decode_time(argp, &ts); 446 iattr->ia_mtime = timespec_to_timespec64(ts); 447 if (status) 448 return status; 449 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET); 450 break; 451 case NFS4_SET_TO_SERVER_TIME: 452 iattr->ia_valid |= ATTR_MTIME; 453 break; 454 default: 455 goto xdr_error; 456 } 457 } 458 459 label->len = 0; 460 if (IS_ENABLED(CONFIG_NFSD_V4_SECURITY_LABEL) && 461 bmval[2] & FATTR4_WORD2_SECURITY_LABEL) { 462 READ_BUF(4); 463 len += 4; 464 dummy32 = be32_to_cpup(p++); /* lfs: we don't use it */ 465 READ_BUF(4); 466 len += 4; 467 dummy32 = be32_to_cpup(p++); /* pi: we don't use it either */ 468 READ_BUF(4); 469 len += 4; 470 dummy32 = be32_to_cpup(p++); 471 READ_BUF(dummy32); 472 if (dummy32 > NFS4_MAXLABELLEN) 473 return nfserr_badlabel; 474 len += (XDR_QUADLEN(dummy32) << 2); 475 READMEM(buf, dummy32); 476 label->len = dummy32; 477 label->data = svcxdr_dupstr(argp, buf, dummy32); 478 if (!label->data) 479 return nfserr_jukebox; 480 } 481 if (bmval[2] & FATTR4_WORD2_MODE_UMASK) { 482 if (!umask) 483 goto xdr_error; 484 READ_BUF(8); 485 len += 8; 486 dummy32 = be32_to_cpup(p++); 487 iattr->ia_mode = dummy32 & (S_IFMT | S_IALLUGO); 488 dummy32 = be32_to_cpup(p++); 489 *umask = dummy32 & S_IRWXUGO; 490 iattr->ia_valid |= ATTR_MODE; 491 } 492 if (len != expected_len) 493 goto xdr_error; 494 495 DECODE_TAIL; 496 } 497 498 static __be32 499 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid) 500 { 501 DECODE_HEAD; 502 503 READ_BUF(sizeof(stateid_t)); 504 sid->si_generation = be32_to_cpup(p++); 505 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 506 507 DECODE_TAIL; 508 } 509 510 static __be32 511 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access) 512 { 513 DECODE_HEAD; 514 515 READ_BUF(4); 516 access->ac_req_access = be32_to_cpup(p++); 517 518 DECODE_TAIL; 519 } 520 521 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs) 522 { 523 DECODE_HEAD; 524 u32 dummy, uid, gid; 525 char *machine_name; 526 int i; 527 int nr_secflavs; 528 529 /* callback_sec_params4 */ 530 READ_BUF(4); 531 nr_secflavs = be32_to_cpup(p++); 532 if (nr_secflavs) 533 cbs->flavor = (u32)(-1); 534 else 535 /* Is this legal? Be generous, take it to mean AUTH_NONE: */ 536 cbs->flavor = 0; 537 for (i = 0; i < nr_secflavs; ++i) { 538 READ_BUF(4); 539 dummy = be32_to_cpup(p++); 540 switch (dummy) { 541 case RPC_AUTH_NULL: 542 /* Nothing to read */ 543 if (cbs->flavor == (u32)(-1)) 544 cbs->flavor = RPC_AUTH_NULL; 545 break; 546 case RPC_AUTH_UNIX: 547 READ_BUF(8); 548 /* stamp */ 549 dummy = be32_to_cpup(p++); 550 551 /* machine name */ 552 dummy = be32_to_cpup(p++); 553 READ_BUF(dummy); 554 SAVEMEM(machine_name, dummy); 555 556 /* uid, gid */ 557 READ_BUF(8); 558 uid = be32_to_cpup(p++); 559 gid = be32_to_cpup(p++); 560 561 /* more gids */ 562 READ_BUF(4); 563 dummy = be32_to_cpup(p++); 564 READ_BUF(dummy * 4); 565 if (cbs->flavor == (u32)(-1)) { 566 kuid_t kuid = make_kuid(&init_user_ns, uid); 567 kgid_t kgid = make_kgid(&init_user_ns, gid); 568 if (uid_valid(kuid) && gid_valid(kgid)) { 569 cbs->uid = kuid; 570 cbs->gid = kgid; 571 cbs->flavor = RPC_AUTH_UNIX; 572 } else { 573 dprintk("RPC_AUTH_UNIX with invalid" 574 "uid or gid ignoring!\n"); 575 } 576 } 577 break; 578 case RPC_AUTH_GSS: 579 dprintk("RPC_AUTH_GSS callback secflavor " 580 "not supported!\n"); 581 READ_BUF(8); 582 /* gcbp_service */ 583 dummy = be32_to_cpup(p++); 584 /* gcbp_handle_from_server */ 585 dummy = be32_to_cpup(p++); 586 READ_BUF(dummy); 587 p += XDR_QUADLEN(dummy); 588 /* gcbp_handle_from_client */ 589 READ_BUF(4); 590 dummy = be32_to_cpup(p++); 591 READ_BUF(dummy); 592 break; 593 default: 594 dprintk("Illegal callback secflavor\n"); 595 return nfserr_inval; 596 } 597 } 598 DECODE_TAIL; 599 } 600 601 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc) 602 { 603 DECODE_HEAD; 604 605 READ_BUF(4); 606 bc->bc_cb_program = be32_to_cpup(p++); 607 nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec); 608 609 DECODE_TAIL; 610 } 611 612 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts) 613 { 614 DECODE_HEAD; 615 616 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8); 617 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 618 bcts->dir = be32_to_cpup(p++); 619 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker 620 * could help us figure out we should be using it. */ 621 DECODE_TAIL; 622 } 623 624 static __be32 625 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close) 626 { 627 DECODE_HEAD; 628 629 READ_BUF(4); 630 close->cl_seqid = be32_to_cpup(p++); 631 return nfsd4_decode_stateid(argp, &close->cl_stateid); 632 633 DECODE_TAIL; 634 } 635 636 637 static __be32 638 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit) 639 { 640 DECODE_HEAD; 641 642 READ_BUF(12); 643 p = xdr_decode_hyper(p, &commit->co_offset); 644 commit->co_count = be32_to_cpup(p++); 645 646 DECODE_TAIL; 647 } 648 649 static __be32 650 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create) 651 { 652 DECODE_HEAD; 653 654 READ_BUF(4); 655 create->cr_type = be32_to_cpup(p++); 656 switch (create->cr_type) { 657 case NF4LNK: 658 READ_BUF(4); 659 create->cr_datalen = be32_to_cpup(p++); 660 READ_BUF(create->cr_datalen); 661 create->cr_data = svcxdr_dupstr(argp, p, create->cr_datalen); 662 if (!create->cr_data) 663 return nfserr_jukebox; 664 break; 665 case NF4BLK: 666 case NF4CHR: 667 READ_BUF(8); 668 create->cr_specdata1 = be32_to_cpup(p++); 669 create->cr_specdata2 = be32_to_cpup(p++); 670 break; 671 case NF4SOCK: 672 case NF4FIFO: 673 case NF4DIR: 674 default: 675 break; 676 } 677 678 READ_BUF(4); 679 create->cr_namelen = be32_to_cpup(p++); 680 READ_BUF(create->cr_namelen); 681 SAVEMEM(create->cr_name, create->cr_namelen); 682 if ((status = check_filename(create->cr_name, create->cr_namelen))) 683 return status; 684 685 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr, 686 &create->cr_acl, &create->cr_label, 687 &create->cr_umask); 688 if (status) 689 goto out; 690 691 DECODE_TAIL; 692 } 693 694 static inline __be32 695 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr) 696 { 697 return nfsd4_decode_stateid(argp, &dr->dr_stateid); 698 } 699 700 static inline __be32 701 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr) 702 { 703 return nfsd4_decode_bitmap(argp, getattr->ga_bmval); 704 } 705 706 static __be32 707 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link) 708 { 709 DECODE_HEAD; 710 711 READ_BUF(4); 712 link->li_namelen = be32_to_cpup(p++); 713 READ_BUF(link->li_namelen); 714 SAVEMEM(link->li_name, link->li_namelen); 715 if ((status = check_filename(link->li_name, link->li_namelen))) 716 return status; 717 718 DECODE_TAIL; 719 } 720 721 static __be32 722 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock) 723 { 724 DECODE_HEAD; 725 726 /* 727 * type, reclaim(boolean), offset, length, new_lock_owner(boolean) 728 */ 729 READ_BUF(28); 730 lock->lk_type = be32_to_cpup(p++); 731 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT)) 732 goto xdr_error; 733 lock->lk_reclaim = be32_to_cpup(p++); 734 p = xdr_decode_hyper(p, &lock->lk_offset); 735 p = xdr_decode_hyper(p, &lock->lk_length); 736 lock->lk_is_new = be32_to_cpup(p++); 737 738 if (lock->lk_is_new) { 739 READ_BUF(4); 740 lock->lk_new_open_seqid = be32_to_cpup(p++); 741 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid); 742 if (status) 743 return status; 744 READ_BUF(8 + sizeof(clientid_t)); 745 lock->lk_new_lock_seqid = be32_to_cpup(p++); 746 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t)); 747 lock->lk_new_owner.len = be32_to_cpup(p++); 748 READ_BUF(lock->lk_new_owner.len); 749 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len); 750 } else { 751 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid); 752 if (status) 753 return status; 754 READ_BUF(4); 755 lock->lk_old_lock_seqid = be32_to_cpup(p++); 756 } 757 758 DECODE_TAIL; 759 } 760 761 static __be32 762 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt) 763 { 764 DECODE_HEAD; 765 766 READ_BUF(32); 767 lockt->lt_type = be32_to_cpup(p++); 768 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT)) 769 goto xdr_error; 770 p = xdr_decode_hyper(p, &lockt->lt_offset); 771 p = xdr_decode_hyper(p, &lockt->lt_length); 772 COPYMEM(&lockt->lt_clientid, 8); 773 lockt->lt_owner.len = be32_to_cpup(p++); 774 READ_BUF(lockt->lt_owner.len); 775 READMEM(lockt->lt_owner.data, lockt->lt_owner.len); 776 777 DECODE_TAIL; 778 } 779 780 static __be32 781 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku) 782 { 783 DECODE_HEAD; 784 785 READ_BUF(8); 786 locku->lu_type = be32_to_cpup(p++); 787 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT)) 788 goto xdr_error; 789 locku->lu_seqid = be32_to_cpup(p++); 790 status = nfsd4_decode_stateid(argp, &locku->lu_stateid); 791 if (status) 792 return status; 793 READ_BUF(16); 794 p = xdr_decode_hyper(p, &locku->lu_offset); 795 p = xdr_decode_hyper(p, &locku->lu_length); 796 797 DECODE_TAIL; 798 } 799 800 static __be32 801 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup) 802 { 803 DECODE_HEAD; 804 805 READ_BUF(4); 806 lookup->lo_len = be32_to_cpup(p++); 807 READ_BUF(lookup->lo_len); 808 SAVEMEM(lookup->lo_name, lookup->lo_len); 809 if ((status = check_filename(lookup->lo_name, lookup->lo_len))) 810 return status; 811 812 DECODE_TAIL; 813 } 814 815 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when) 816 { 817 __be32 *p; 818 u32 w; 819 820 READ_BUF(4); 821 w = be32_to_cpup(p++); 822 *share_access = w & NFS4_SHARE_ACCESS_MASK; 823 *deleg_want = w & NFS4_SHARE_WANT_MASK; 824 if (deleg_when) 825 *deleg_when = w & NFS4_SHARE_WHEN_MASK; 826 827 switch (w & NFS4_SHARE_ACCESS_MASK) { 828 case NFS4_SHARE_ACCESS_READ: 829 case NFS4_SHARE_ACCESS_WRITE: 830 case NFS4_SHARE_ACCESS_BOTH: 831 break; 832 default: 833 return nfserr_bad_xdr; 834 } 835 w &= ~NFS4_SHARE_ACCESS_MASK; 836 if (!w) 837 return nfs_ok; 838 if (!argp->minorversion) 839 return nfserr_bad_xdr; 840 switch (w & NFS4_SHARE_WANT_MASK) { 841 case NFS4_SHARE_WANT_NO_PREFERENCE: 842 case NFS4_SHARE_WANT_READ_DELEG: 843 case NFS4_SHARE_WANT_WRITE_DELEG: 844 case NFS4_SHARE_WANT_ANY_DELEG: 845 case NFS4_SHARE_WANT_NO_DELEG: 846 case NFS4_SHARE_WANT_CANCEL: 847 break; 848 default: 849 return nfserr_bad_xdr; 850 } 851 w &= ~NFS4_SHARE_WANT_MASK; 852 if (!w) 853 return nfs_ok; 854 855 if (!deleg_when) /* open_downgrade */ 856 return nfserr_inval; 857 switch (w) { 858 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL: 859 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED: 860 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL | 861 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED): 862 return nfs_ok; 863 } 864 xdr_error: 865 return nfserr_bad_xdr; 866 } 867 868 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x) 869 { 870 __be32 *p; 871 872 READ_BUF(4); 873 *x = be32_to_cpup(p++); 874 /* Note: unlinke access bits, deny bits may be zero. */ 875 if (*x & ~NFS4_SHARE_DENY_BOTH) 876 return nfserr_bad_xdr; 877 return nfs_ok; 878 xdr_error: 879 return nfserr_bad_xdr; 880 } 881 882 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o) 883 { 884 __be32 *p; 885 886 READ_BUF(4); 887 o->len = be32_to_cpup(p++); 888 889 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT) 890 return nfserr_bad_xdr; 891 892 READ_BUF(o->len); 893 SAVEMEM(o->data, o->len); 894 return nfs_ok; 895 xdr_error: 896 return nfserr_bad_xdr; 897 } 898 899 static __be32 900 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open) 901 { 902 DECODE_HEAD; 903 u32 dummy; 904 905 memset(open->op_bmval, 0, sizeof(open->op_bmval)); 906 open->op_iattr.ia_valid = 0; 907 open->op_openowner = NULL; 908 909 open->op_xdr_error = 0; 910 /* seqid, share_access, share_deny, clientid, ownerlen */ 911 READ_BUF(4); 912 open->op_seqid = be32_to_cpup(p++); 913 /* decode, yet ignore deleg_when until supported */ 914 status = nfsd4_decode_share_access(argp, &open->op_share_access, 915 &open->op_deleg_want, &dummy); 916 if (status) 917 goto xdr_error; 918 status = nfsd4_decode_share_deny(argp, &open->op_share_deny); 919 if (status) 920 goto xdr_error; 921 READ_BUF(sizeof(clientid_t)); 922 COPYMEM(&open->op_clientid, sizeof(clientid_t)); 923 status = nfsd4_decode_opaque(argp, &open->op_owner); 924 if (status) 925 goto xdr_error; 926 READ_BUF(4); 927 open->op_create = be32_to_cpup(p++); 928 switch (open->op_create) { 929 case NFS4_OPEN_NOCREATE: 930 break; 931 case NFS4_OPEN_CREATE: 932 READ_BUF(4); 933 open->op_createmode = be32_to_cpup(p++); 934 switch (open->op_createmode) { 935 case NFS4_CREATE_UNCHECKED: 936 case NFS4_CREATE_GUARDED: 937 status = nfsd4_decode_fattr(argp, open->op_bmval, 938 &open->op_iattr, &open->op_acl, &open->op_label, 939 &open->op_umask); 940 if (status) 941 goto out; 942 break; 943 case NFS4_CREATE_EXCLUSIVE: 944 READ_BUF(NFS4_VERIFIER_SIZE); 945 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE); 946 break; 947 case NFS4_CREATE_EXCLUSIVE4_1: 948 if (argp->minorversion < 1) 949 goto xdr_error; 950 READ_BUF(NFS4_VERIFIER_SIZE); 951 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE); 952 status = nfsd4_decode_fattr(argp, open->op_bmval, 953 &open->op_iattr, &open->op_acl, &open->op_label, 954 &open->op_umask); 955 if (status) 956 goto out; 957 break; 958 default: 959 goto xdr_error; 960 } 961 break; 962 default: 963 goto xdr_error; 964 } 965 966 /* open_claim */ 967 READ_BUF(4); 968 open->op_claim_type = be32_to_cpup(p++); 969 switch (open->op_claim_type) { 970 case NFS4_OPEN_CLAIM_NULL: 971 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 972 READ_BUF(4); 973 open->op_fname.len = be32_to_cpup(p++); 974 READ_BUF(open->op_fname.len); 975 SAVEMEM(open->op_fname.data, open->op_fname.len); 976 if ((status = check_filename(open->op_fname.data, open->op_fname.len))) 977 return status; 978 break; 979 case NFS4_OPEN_CLAIM_PREVIOUS: 980 READ_BUF(4); 981 open->op_delegate_type = be32_to_cpup(p++); 982 break; 983 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 984 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 985 if (status) 986 return status; 987 READ_BUF(4); 988 open->op_fname.len = be32_to_cpup(p++); 989 READ_BUF(open->op_fname.len); 990 SAVEMEM(open->op_fname.data, open->op_fname.len); 991 if ((status = check_filename(open->op_fname.data, open->op_fname.len))) 992 return status; 993 break; 994 case NFS4_OPEN_CLAIM_FH: 995 case NFS4_OPEN_CLAIM_DELEG_PREV_FH: 996 if (argp->minorversion < 1) 997 goto xdr_error; 998 /* void */ 999 break; 1000 case NFS4_OPEN_CLAIM_DELEG_CUR_FH: 1001 if (argp->minorversion < 1) 1002 goto xdr_error; 1003 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 1004 if (status) 1005 return status; 1006 break; 1007 default: 1008 goto xdr_error; 1009 } 1010 1011 DECODE_TAIL; 1012 } 1013 1014 static __be32 1015 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf) 1016 { 1017 DECODE_HEAD; 1018 1019 if (argp->minorversion >= 1) 1020 return nfserr_notsupp; 1021 1022 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid); 1023 if (status) 1024 return status; 1025 READ_BUF(4); 1026 open_conf->oc_seqid = be32_to_cpup(p++); 1027 1028 DECODE_TAIL; 1029 } 1030 1031 static __be32 1032 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down) 1033 { 1034 DECODE_HEAD; 1035 1036 status = nfsd4_decode_stateid(argp, &open_down->od_stateid); 1037 if (status) 1038 return status; 1039 READ_BUF(4); 1040 open_down->od_seqid = be32_to_cpup(p++); 1041 status = nfsd4_decode_share_access(argp, &open_down->od_share_access, 1042 &open_down->od_deleg_want, NULL); 1043 if (status) 1044 return status; 1045 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny); 1046 if (status) 1047 return status; 1048 DECODE_TAIL; 1049 } 1050 1051 static __be32 1052 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh) 1053 { 1054 DECODE_HEAD; 1055 1056 READ_BUF(4); 1057 putfh->pf_fhlen = be32_to_cpup(p++); 1058 if (putfh->pf_fhlen > NFS4_FHSIZE) 1059 goto xdr_error; 1060 READ_BUF(putfh->pf_fhlen); 1061 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen); 1062 1063 DECODE_TAIL; 1064 } 1065 1066 static __be32 1067 nfsd4_decode_putpubfh(struct nfsd4_compoundargs *argp, void *p) 1068 { 1069 if (argp->minorversion == 0) 1070 return nfs_ok; 1071 return nfserr_notsupp; 1072 } 1073 1074 static __be32 1075 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) 1076 { 1077 DECODE_HEAD; 1078 1079 status = nfsd4_decode_stateid(argp, &read->rd_stateid); 1080 if (status) 1081 return status; 1082 READ_BUF(12); 1083 p = xdr_decode_hyper(p, &read->rd_offset); 1084 read->rd_length = be32_to_cpup(p++); 1085 1086 DECODE_TAIL; 1087 } 1088 1089 static __be32 1090 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) 1091 { 1092 DECODE_HEAD; 1093 1094 READ_BUF(24); 1095 p = xdr_decode_hyper(p, &readdir->rd_cookie); 1096 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); 1097 readdir->rd_dircount = be32_to_cpup(p++); 1098 readdir->rd_maxcount = be32_to_cpup(p++); 1099 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval))) 1100 goto out; 1101 1102 DECODE_TAIL; 1103 } 1104 1105 static __be32 1106 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove) 1107 { 1108 DECODE_HEAD; 1109 1110 READ_BUF(4); 1111 remove->rm_namelen = be32_to_cpup(p++); 1112 READ_BUF(remove->rm_namelen); 1113 SAVEMEM(remove->rm_name, remove->rm_namelen); 1114 if ((status = check_filename(remove->rm_name, remove->rm_namelen))) 1115 return status; 1116 1117 DECODE_TAIL; 1118 } 1119 1120 static __be32 1121 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename) 1122 { 1123 DECODE_HEAD; 1124 1125 READ_BUF(4); 1126 rename->rn_snamelen = be32_to_cpup(p++); 1127 READ_BUF(rename->rn_snamelen); 1128 SAVEMEM(rename->rn_sname, rename->rn_snamelen); 1129 READ_BUF(4); 1130 rename->rn_tnamelen = be32_to_cpup(p++); 1131 READ_BUF(rename->rn_tnamelen); 1132 SAVEMEM(rename->rn_tname, rename->rn_tnamelen); 1133 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen))) 1134 return status; 1135 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen))) 1136 return status; 1137 1138 DECODE_TAIL; 1139 } 1140 1141 static __be32 1142 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid) 1143 { 1144 DECODE_HEAD; 1145 1146 if (argp->minorversion >= 1) 1147 return nfserr_notsupp; 1148 1149 READ_BUF(sizeof(clientid_t)); 1150 COPYMEM(clientid, sizeof(clientid_t)); 1151 1152 DECODE_TAIL; 1153 } 1154 1155 static __be32 1156 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp, 1157 struct nfsd4_secinfo *secinfo) 1158 { 1159 DECODE_HEAD; 1160 1161 READ_BUF(4); 1162 secinfo->si_namelen = be32_to_cpup(p++); 1163 READ_BUF(secinfo->si_namelen); 1164 SAVEMEM(secinfo->si_name, secinfo->si_namelen); 1165 status = check_filename(secinfo->si_name, secinfo->si_namelen); 1166 if (status) 1167 return status; 1168 DECODE_TAIL; 1169 } 1170 1171 static __be32 1172 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp, 1173 struct nfsd4_secinfo_no_name *sin) 1174 { 1175 DECODE_HEAD; 1176 1177 READ_BUF(4); 1178 sin->sin_style = be32_to_cpup(p++); 1179 DECODE_TAIL; 1180 } 1181 1182 static __be32 1183 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr) 1184 { 1185 __be32 status; 1186 1187 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid); 1188 if (status) 1189 return status; 1190 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr, 1191 &setattr->sa_acl, &setattr->sa_label, NULL); 1192 } 1193 1194 static __be32 1195 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid) 1196 { 1197 DECODE_HEAD; 1198 1199 if (argp->minorversion >= 1) 1200 return nfserr_notsupp; 1201 1202 READ_BUF(NFS4_VERIFIER_SIZE); 1203 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE); 1204 1205 status = nfsd4_decode_opaque(argp, &setclientid->se_name); 1206 if (status) 1207 return nfserr_bad_xdr; 1208 READ_BUF(8); 1209 setclientid->se_callback_prog = be32_to_cpup(p++); 1210 setclientid->se_callback_netid_len = be32_to_cpup(p++); 1211 READ_BUF(setclientid->se_callback_netid_len); 1212 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len); 1213 READ_BUF(4); 1214 setclientid->se_callback_addr_len = be32_to_cpup(p++); 1215 1216 READ_BUF(setclientid->se_callback_addr_len); 1217 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len); 1218 READ_BUF(4); 1219 setclientid->se_callback_ident = be32_to_cpup(p++); 1220 1221 DECODE_TAIL; 1222 } 1223 1224 static __be32 1225 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c) 1226 { 1227 DECODE_HEAD; 1228 1229 if (argp->minorversion >= 1) 1230 return nfserr_notsupp; 1231 1232 READ_BUF(8 + NFS4_VERIFIER_SIZE); 1233 COPYMEM(&scd_c->sc_clientid, 8); 1234 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE); 1235 1236 DECODE_TAIL; 1237 } 1238 1239 /* Also used for NVERIFY */ 1240 static __be32 1241 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify) 1242 { 1243 DECODE_HEAD; 1244 1245 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval))) 1246 goto out; 1247 1248 /* For convenience's sake, we compare raw xdr'd attributes in 1249 * nfsd4_proc_verify */ 1250 1251 READ_BUF(4); 1252 verify->ve_attrlen = be32_to_cpup(p++); 1253 READ_BUF(verify->ve_attrlen); 1254 SAVEMEM(verify->ve_attrval, verify->ve_attrlen); 1255 1256 DECODE_TAIL; 1257 } 1258 1259 static __be32 1260 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write) 1261 { 1262 int avail; 1263 int len; 1264 DECODE_HEAD; 1265 1266 status = nfsd4_decode_stateid(argp, &write->wr_stateid); 1267 if (status) 1268 return status; 1269 READ_BUF(16); 1270 p = xdr_decode_hyper(p, &write->wr_offset); 1271 write->wr_stable_how = be32_to_cpup(p++); 1272 if (write->wr_stable_how > NFS_FILE_SYNC) 1273 goto xdr_error; 1274 write->wr_buflen = be32_to_cpup(p++); 1275 1276 /* Sorry .. no magic macros for this.. * 1277 * READ_BUF(write->wr_buflen); 1278 * SAVEMEM(write->wr_buf, write->wr_buflen); 1279 */ 1280 avail = (char*)argp->end - (char*)argp->p; 1281 if (avail + argp->pagelen < write->wr_buflen) { 1282 dprintk("NFSD: xdr error (%s:%d)\n", 1283 __FILE__, __LINE__); 1284 goto xdr_error; 1285 } 1286 write->wr_head.iov_base = p; 1287 write->wr_head.iov_len = avail; 1288 write->wr_pagelist = argp->pagelist; 1289 1290 len = XDR_QUADLEN(write->wr_buflen) << 2; 1291 if (len >= avail) { 1292 int pages; 1293 1294 len -= avail; 1295 1296 pages = len >> PAGE_SHIFT; 1297 argp->pagelist += pages; 1298 argp->pagelen -= pages * PAGE_SIZE; 1299 len -= pages * PAGE_SIZE; 1300 1301 next_decode_page(argp); 1302 } 1303 argp->p += XDR_QUADLEN(len); 1304 1305 DECODE_TAIL; 1306 } 1307 1308 static __be32 1309 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner) 1310 { 1311 DECODE_HEAD; 1312 1313 if (argp->minorversion >= 1) 1314 return nfserr_notsupp; 1315 1316 READ_BUF(12); 1317 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t)); 1318 rlockowner->rl_owner.len = be32_to_cpup(p++); 1319 READ_BUF(rlockowner->rl_owner.len); 1320 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len); 1321 1322 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid)) 1323 return nfserr_inval; 1324 DECODE_TAIL; 1325 } 1326 1327 static __be32 1328 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp, 1329 struct nfsd4_exchange_id *exid) 1330 { 1331 int dummy, tmp; 1332 DECODE_HEAD; 1333 1334 READ_BUF(NFS4_VERIFIER_SIZE); 1335 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE); 1336 1337 status = nfsd4_decode_opaque(argp, &exid->clname); 1338 if (status) 1339 return nfserr_bad_xdr; 1340 1341 READ_BUF(4); 1342 exid->flags = be32_to_cpup(p++); 1343 1344 /* Ignore state_protect4_a */ 1345 READ_BUF(4); 1346 exid->spa_how = be32_to_cpup(p++); 1347 switch (exid->spa_how) { 1348 case SP4_NONE: 1349 break; 1350 case SP4_MACH_CRED: 1351 /* spo_must_enforce */ 1352 status = nfsd4_decode_bitmap(argp, 1353 exid->spo_must_enforce); 1354 if (status) 1355 goto out; 1356 /* spo_must_allow */ 1357 status = nfsd4_decode_bitmap(argp, exid->spo_must_allow); 1358 if (status) 1359 goto out; 1360 break; 1361 case SP4_SSV: 1362 /* ssp_ops */ 1363 READ_BUF(4); 1364 dummy = be32_to_cpup(p++); 1365 READ_BUF(dummy * 4); 1366 p += dummy; 1367 1368 READ_BUF(4); 1369 dummy = be32_to_cpup(p++); 1370 READ_BUF(dummy * 4); 1371 p += dummy; 1372 1373 /* ssp_hash_algs<> */ 1374 READ_BUF(4); 1375 tmp = be32_to_cpup(p++); 1376 while (tmp--) { 1377 READ_BUF(4); 1378 dummy = be32_to_cpup(p++); 1379 READ_BUF(dummy); 1380 p += XDR_QUADLEN(dummy); 1381 } 1382 1383 /* ssp_encr_algs<> */ 1384 READ_BUF(4); 1385 tmp = be32_to_cpup(p++); 1386 while (tmp--) { 1387 READ_BUF(4); 1388 dummy = be32_to_cpup(p++); 1389 READ_BUF(dummy); 1390 p += XDR_QUADLEN(dummy); 1391 } 1392 1393 /* ignore ssp_window and ssp_num_gss_handles: */ 1394 READ_BUF(8); 1395 break; 1396 default: 1397 goto xdr_error; 1398 } 1399 1400 /* Ignore Implementation ID */ 1401 READ_BUF(4); /* nfs_impl_id4 array length */ 1402 dummy = be32_to_cpup(p++); 1403 1404 if (dummy > 1) 1405 goto xdr_error; 1406 1407 if (dummy == 1) { 1408 /* nii_domain */ 1409 READ_BUF(4); 1410 dummy = be32_to_cpup(p++); 1411 READ_BUF(dummy); 1412 p += XDR_QUADLEN(dummy); 1413 1414 /* nii_name */ 1415 READ_BUF(4); 1416 dummy = be32_to_cpup(p++); 1417 READ_BUF(dummy); 1418 p += XDR_QUADLEN(dummy); 1419 1420 /* nii_date */ 1421 READ_BUF(12); 1422 p += 3; 1423 } 1424 DECODE_TAIL; 1425 } 1426 1427 static __be32 1428 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp, 1429 struct nfsd4_create_session *sess) 1430 { 1431 DECODE_HEAD; 1432 u32 dummy; 1433 1434 READ_BUF(16); 1435 COPYMEM(&sess->clientid, 8); 1436 sess->seqid = be32_to_cpup(p++); 1437 sess->flags = be32_to_cpup(p++); 1438 1439 /* Fore channel attrs */ 1440 READ_BUF(28); 1441 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */ 1442 sess->fore_channel.maxreq_sz = be32_to_cpup(p++); 1443 sess->fore_channel.maxresp_sz = be32_to_cpup(p++); 1444 sess->fore_channel.maxresp_cached = be32_to_cpup(p++); 1445 sess->fore_channel.maxops = be32_to_cpup(p++); 1446 sess->fore_channel.maxreqs = be32_to_cpup(p++); 1447 sess->fore_channel.nr_rdma_attrs = be32_to_cpup(p++); 1448 if (sess->fore_channel.nr_rdma_attrs == 1) { 1449 READ_BUF(4); 1450 sess->fore_channel.rdma_attrs = be32_to_cpup(p++); 1451 } else if (sess->fore_channel.nr_rdma_attrs > 1) { 1452 dprintk("Too many fore channel attr bitmaps!\n"); 1453 goto xdr_error; 1454 } 1455 1456 /* Back channel attrs */ 1457 READ_BUF(28); 1458 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */ 1459 sess->back_channel.maxreq_sz = be32_to_cpup(p++); 1460 sess->back_channel.maxresp_sz = be32_to_cpup(p++); 1461 sess->back_channel.maxresp_cached = be32_to_cpup(p++); 1462 sess->back_channel.maxops = be32_to_cpup(p++); 1463 sess->back_channel.maxreqs = be32_to_cpup(p++); 1464 sess->back_channel.nr_rdma_attrs = be32_to_cpup(p++); 1465 if (sess->back_channel.nr_rdma_attrs == 1) { 1466 READ_BUF(4); 1467 sess->back_channel.rdma_attrs = be32_to_cpup(p++); 1468 } else if (sess->back_channel.nr_rdma_attrs > 1) { 1469 dprintk("Too many back channel attr bitmaps!\n"); 1470 goto xdr_error; 1471 } 1472 1473 READ_BUF(4); 1474 sess->callback_prog = be32_to_cpup(p++); 1475 nfsd4_decode_cb_sec(argp, &sess->cb_sec); 1476 DECODE_TAIL; 1477 } 1478 1479 static __be32 1480 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp, 1481 struct nfsd4_destroy_session *destroy_session) 1482 { 1483 DECODE_HEAD; 1484 READ_BUF(NFS4_MAX_SESSIONID_LEN); 1485 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1486 1487 DECODE_TAIL; 1488 } 1489 1490 static __be32 1491 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp, 1492 struct nfsd4_free_stateid *free_stateid) 1493 { 1494 DECODE_HEAD; 1495 1496 READ_BUF(sizeof(stateid_t)); 1497 free_stateid->fr_stateid.si_generation = be32_to_cpup(p++); 1498 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t)); 1499 1500 DECODE_TAIL; 1501 } 1502 1503 static __be32 1504 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp, 1505 struct nfsd4_sequence *seq) 1506 { 1507 DECODE_HEAD; 1508 1509 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16); 1510 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1511 seq->seqid = be32_to_cpup(p++); 1512 seq->slotid = be32_to_cpup(p++); 1513 seq->maxslots = be32_to_cpup(p++); 1514 seq->cachethis = be32_to_cpup(p++); 1515 1516 DECODE_TAIL; 1517 } 1518 1519 static __be32 1520 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid) 1521 { 1522 int i; 1523 __be32 *p, status; 1524 struct nfsd4_test_stateid_id *stateid; 1525 1526 READ_BUF(4); 1527 test_stateid->ts_num_ids = ntohl(*p++); 1528 1529 INIT_LIST_HEAD(&test_stateid->ts_stateid_list); 1530 1531 for (i = 0; i < test_stateid->ts_num_ids; i++) { 1532 stateid = svcxdr_tmpalloc(argp, sizeof(*stateid)); 1533 if (!stateid) { 1534 status = nfserrno(-ENOMEM); 1535 goto out; 1536 } 1537 1538 INIT_LIST_HEAD(&stateid->ts_id_list); 1539 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list); 1540 1541 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid); 1542 if (status) 1543 goto out; 1544 } 1545 1546 status = 0; 1547 out: 1548 return status; 1549 xdr_error: 1550 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__); 1551 status = nfserr_bad_xdr; 1552 goto out; 1553 } 1554 1555 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc) 1556 { 1557 DECODE_HEAD; 1558 1559 READ_BUF(8); 1560 COPYMEM(&dc->clientid, 8); 1561 1562 DECODE_TAIL; 1563 } 1564 1565 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc) 1566 { 1567 DECODE_HEAD; 1568 1569 READ_BUF(4); 1570 rc->rca_one_fs = be32_to_cpup(p++); 1571 1572 DECODE_TAIL; 1573 } 1574 1575 #ifdef CONFIG_NFSD_PNFS 1576 static __be32 1577 nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs *argp, 1578 struct nfsd4_getdeviceinfo *gdev) 1579 { 1580 DECODE_HEAD; 1581 u32 num, i; 1582 1583 READ_BUF(sizeof(struct nfsd4_deviceid) + 3 * 4); 1584 COPYMEM(&gdev->gd_devid, sizeof(struct nfsd4_deviceid)); 1585 gdev->gd_layout_type = be32_to_cpup(p++); 1586 gdev->gd_maxcount = be32_to_cpup(p++); 1587 num = be32_to_cpup(p++); 1588 if (num) { 1589 if (num > 1000) 1590 goto xdr_error; 1591 READ_BUF(4 * num); 1592 gdev->gd_notify_types = be32_to_cpup(p++); 1593 for (i = 1; i < num; i++) { 1594 if (be32_to_cpup(p++)) { 1595 status = nfserr_inval; 1596 goto out; 1597 } 1598 } 1599 } 1600 DECODE_TAIL; 1601 } 1602 1603 static __be32 1604 nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp, 1605 struct nfsd4_layoutget *lgp) 1606 { 1607 DECODE_HEAD; 1608 1609 READ_BUF(36); 1610 lgp->lg_signal = be32_to_cpup(p++); 1611 lgp->lg_layout_type = be32_to_cpup(p++); 1612 lgp->lg_seg.iomode = be32_to_cpup(p++); 1613 p = xdr_decode_hyper(p, &lgp->lg_seg.offset); 1614 p = xdr_decode_hyper(p, &lgp->lg_seg.length); 1615 p = xdr_decode_hyper(p, &lgp->lg_minlength); 1616 1617 status = nfsd4_decode_stateid(argp, &lgp->lg_sid); 1618 if (status) 1619 return status; 1620 1621 READ_BUF(4); 1622 lgp->lg_maxcount = be32_to_cpup(p++); 1623 1624 DECODE_TAIL; 1625 } 1626 1627 static __be32 1628 nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp, 1629 struct nfsd4_layoutcommit *lcp) 1630 { 1631 DECODE_HEAD; 1632 u32 timechange; 1633 1634 READ_BUF(20); 1635 p = xdr_decode_hyper(p, &lcp->lc_seg.offset); 1636 p = xdr_decode_hyper(p, &lcp->lc_seg.length); 1637 lcp->lc_reclaim = be32_to_cpup(p++); 1638 1639 status = nfsd4_decode_stateid(argp, &lcp->lc_sid); 1640 if (status) 1641 return status; 1642 1643 READ_BUF(4); 1644 lcp->lc_newoffset = be32_to_cpup(p++); 1645 if (lcp->lc_newoffset) { 1646 READ_BUF(8); 1647 p = xdr_decode_hyper(p, &lcp->lc_last_wr); 1648 } else 1649 lcp->lc_last_wr = 0; 1650 READ_BUF(4); 1651 timechange = be32_to_cpup(p++); 1652 if (timechange) { 1653 status = nfsd4_decode_time(argp, &lcp->lc_mtime); 1654 if (status) 1655 return status; 1656 } else { 1657 lcp->lc_mtime.tv_nsec = UTIME_NOW; 1658 } 1659 READ_BUF(8); 1660 lcp->lc_layout_type = be32_to_cpup(p++); 1661 1662 /* 1663 * Save the layout update in XDR format and let the layout driver deal 1664 * with it later. 1665 */ 1666 lcp->lc_up_len = be32_to_cpup(p++); 1667 if (lcp->lc_up_len > 0) { 1668 READ_BUF(lcp->lc_up_len); 1669 READMEM(lcp->lc_up_layout, lcp->lc_up_len); 1670 } 1671 1672 DECODE_TAIL; 1673 } 1674 1675 static __be32 1676 nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp, 1677 struct nfsd4_layoutreturn *lrp) 1678 { 1679 DECODE_HEAD; 1680 1681 READ_BUF(16); 1682 lrp->lr_reclaim = be32_to_cpup(p++); 1683 lrp->lr_layout_type = be32_to_cpup(p++); 1684 lrp->lr_seg.iomode = be32_to_cpup(p++); 1685 lrp->lr_return_type = be32_to_cpup(p++); 1686 if (lrp->lr_return_type == RETURN_FILE) { 1687 READ_BUF(16); 1688 p = xdr_decode_hyper(p, &lrp->lr_seg.offset); 1689 p = xdr_decode_hyper(p, &lrp->lr_seg.length); 1690 1691 status = nfsd4_decode_stateid(argp, &lrp->lr_sid); 1692 if (status) 1693 return status; 1694 1695 READ_BUF(4); 1696 lrp->lrf_body_len = be32_to_cpup(p++); 1697 if (lrp->lrf_body_len > 0) { 1698 READ_BUF(lrp->lrf_body_len); 1699 READMEM(lrp->lrf_body, lrp->lrf_body_len); 1700 } 1701 } else { 1702 lrp->lr_seg.offset = 0; 1703 lrp->lr_seg.length = NFS4_MAX_UINT64; 1704 } 1705 1706 DECODE_TAIL; 1707 } 1708 #endif /* CONFIG_NFSD_PNFS */ 1709 1710 static __be32 1711 nfsd4_decode_fallocate(struct nfsd4_compoundargs *argp, 1712 struct nfsd4_fallocate *fallocate) 1713 { 1714 DECODE_HEAD; 1715 1716 status = nfsd4_decode_stateid(argp, &fallocate->falloc_stateid); 1717 if (status) 1718 return status; 1719 1720 READ_BUF(16); 1721 p = xdr_decode_hyper(p, &fallocate->falloc_offset); 1722 xdr_decode_hyper(p, &fallocate->falloc_length); 1723 1724 DECODE_TAIL; 1725 } 1726 1727 static __be32 1728 nfsd4_decode_clone(struct nfsd4_compoundargs *argp, struct nfsd4_clone *clone) 1729 { 1730 DECODE_HEAD; 1731 1732 status = nfsd4_decode_stateid(argp, &clone->cl_src_stateid); 1733 if (status) 1734 return status; 1735 status = nfsd4_decode_stateid(argp, &clone->cl_dst_stateid); 1736 if (status) 1737 return status; 1738 1739 READ_BUF(8 + 8 + 8); 1740 p = xdr_decode_hyper(p, &clone->cl_src_pos); 1741 p = xdr_decode_hyper(p, &clone->cl_dst_pos); 1742 p = xdr_decode_hyper(p, &clone->cl_count); 1743 DECODE_TAIL; 1744 } 1745 1746 static __be32 1747 nfsd4_decode_copy(struct nfsd4_compoundargs *argp, struct nfsd4_copy *copy) 1748 { 1749 DECODE_HEAD; 1750 unsigned int tmp; 1751 1752 status = nfsd4_decode_stateid(argp, ©->cp_src_stateid); 1753 if (status) 1754 return status; 1755 status = nfsd4_decode_stateid(argp, ©->cp_dst_stateid); 1756 if (status) 1757 return status; 1758 1759 READ_BUF(8 + 8 + 8 + 4 + 4 + 4); 1760 p = xdr_decode_hyper(p, ©->cp_src_pos); 1761 p = xdr_decode_hyper(p, ©->cp_dst_pos); 1762 p = xdr_decode_hyper(p, ©->cp_count); 1763 p++; /* ca_consecutive: we always do consecutive copies */ 1764 copy->cp_synchronous = be32_to_cpup(p++); 1765 tmp = be32_to_cpup(p); /* Source server list not supported */ 1766 1767 DECODE_TAIL; 1768 } 1769 1770 static __be32 1771 nfsd4_decode_offload_status(struct nfsd4_compoundargs *argp, 1772 struct nfsd4_offload_status *os) 1773 { 1774 return nfsd4_decode_stateid(argp, &os->stateid); 1775 } 1776 1777 static __be32 1778 nfsd4_decode_seek(struct nfsd4_compoundargs *argp, struct nfsd4_seek *seek) 1779 { 1780 DECODE_HEAD; 1781 1782 status = nfsd4_decode_stateid(argp, &seek->seek_stateid); 1783 if (status) 1784 return status; 1785 1786 READ_BUF(8 + 4); 1787 p = xdr_decode_hyper(p, &seek->seek_offset); 1788 seek->seek_whence = be32_to_cpup(p); 1789 1790 DECODE_TAIL; 1791 } 1792 1793 static __be32 1794 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p) 1795 { 1796 return nfs_ok; 1797 } 1798 1799 static __be32 1800 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p) 1801 { 1802 return nfserr_notsupp; 1803 } 1804 1805 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *); 1806 1807 static const nfsd4_dec nfsd4_dec_ops[] = { 1808 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1809 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1810 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1811 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1812 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1813 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1814 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1815 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1816 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1817 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1818 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1819 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1820 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1821 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1822 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1823 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1824 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1825 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm, 1826 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1827 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1828 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_putpubfh, 1829 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1830 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1831 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1832 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1833 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1834 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1835 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew, 1836 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1837 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1838 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1839 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1840 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid, 1841 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm, 1842 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1843 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1844 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner, 1845 1846 /* new operations for NFSv4.1 */ 1847 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl, 1848 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session, 1849 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id, 1850 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session, 1851 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session, 1852 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid, 1853 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1854 #ifdef CONFIG_NFSD_PNFS 1855 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_getdeviceinfo, 1856 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1857 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_layoutcommit, 1858 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_layoutget, 1859 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_layoutreturn, 1860 #else 1861 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp, 1862 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1863 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp, 1864 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp, 1865 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp, 1866 #endif 1867 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name, 1868 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence, 1869 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp, 1870 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid, 1871 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1872 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid, 1873 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete, 1874 1875 /* new operations for NFSv4.2 */ 1876 [OP_ALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate, 1877 [OP_COPY] = (nfsd4_dec)nfsd4_decode_copy, 1878 [OP_COPY_NOTIFY] = (nfsd4_dec)nfsd4_decode_notsupp, 1879 [OP_DEALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate, 1880 [OP_IO_ADVISE] = (nfsd4_dec)nfsd4_decode_notsupp, 1881 [OP_LAYOUTERROR] = (nfsd4_dec)nfsd4_decode_notsupp, 1882 [OP_LAYOUTSTATS] = (nfsd4_dec)nfsd4_decode_notsupp, 1883 [OP_OFFLOAD_CANCEL] = (nfsd4_dec)nfsd4_decode_offload_status, 1884 [OP_OFFLOAD_STATUS] = (nfsd4_dec)nfsd4_decode_offload_status, 1885 [OP_READ_PLUS] = (nfsd4_dec)nfsd4_decode_notsupp, 1886 [OP_SEEK] = (nfsd4_dec)nfsd4_decode_seek, 1887 [OP_WRITE_SAME] = (nfsd4_dec)nfsd4_decode_notsupp, 1888 [OP_CLONE] = (nfsd4_dec)nfsd4_decode_clone, 1889 }; 1890 1891 static inline bool 1892 nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op) 1893 { 1894 if (op->opnum < FIRST_NFS4_OP) 1895 return false; 1896 else if (argp->minorversion == 0 && op->opnum > LAST_NFS40_OP) 1897 return false; 1898 else if (argp->minorversion == 1 && op->opnum > LAST_NFS41_OP) 1899 return false; 1900 else if (argp->minorversion == 2 && op->opnum > LAST_NFS42_OP) 1901 return false; 1902 return true; 1903 } 1904 1905 static __be32 1906 nfsd4_decode_compound(struct nfsd4_compoundargs *argp) 1907 { 1908 DECODE_HEAD; 1909 struct nfsd4_op *op; 1910 bool cachethis = false; 1911 int auth_slack= argp->rqstp->rq_auth_slack; 1912 int max_reply = auth_slack + 8; /* opcnt, status */ 1913 int readcount = 0; 1914 int readbytes = 0; 1915 int i; 1916 1917 READ_BUF(4); 1918 argp->taglen = be32_to_cpup(p++); 1919 READ_BUF(argp->taglen); 1920 SAVEMEM(argp->tag, argp->taglen); 1921 READ_BUF(8); 1922 argp->minorversion = be32_to_cpup(p++); 1923 argp->opcnt = be32_to_cpup(p++); 1924 max_reply += 4 + (XDR_QUADLEN(argp->taglen) << 2); 1925 1926 if (argp->taglen > NFSD4_MAX_TAGLEN) 1927 goto xdr_error; 1928 /* 1929 * NFS4ERR_RESOURCE is a more helpful error than GARBAGE_ARGS 1930 * here, so we return success at the xdr level so that 1931 * nfsd4_proc can handle this is an NFS-level error. 1932 */ 1933 if (argp->opcnt > NFSD_MAX_OPS_PER_COMPOUND) 1934 return 0; 1935 1936 if (argp->opcnt > ARRAY_SIZE(argp->iops)) { 1937 argp->ops = kzalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL); 1938 if (!argp->ops) { 1939 argp->ops = argp->iops; 1940 dprintk("nfsd: couldn't allocate room for COMPOUND\n"); 1941 goto xdr_error; 1942 } 1943 } 1944 1945 if (argp->minorversion > NFSD_SUPPORTED_MINOR_VERSION) 1946 argp->opcnt = 0; 1947 1948 for (i = 0; i < argp->opcnt; i++) { 1949 op = &argp->ops[i]; 1950 op->replay = NULL; 1951 1952 READ_BUF(4); 1953 op->opnum = be32_to_cpup(p++); 1954 1955 if (nfsd4_opnum_in_range(argp, op)) 1956 op->status = nfsd4_dec_ops[op->opnum](argp, &op->u); 1957 else { 1958 op->opnum = OP_ILLEGAL; 1959 op->status = nfserr_op_illegal; 1960 } 1961 op->opdesc = OPDESC(op); 1962 /* 1963 * We'll try to cache the result in the DRC if any one 1964 * op in the compound wants to be cached: 1965 */ 1966 cachethis |= nfsd4_cache_this_op(op); 1967 1968 if (op->opnum == OP_READ) { 1969 readcount++; 1970 readbytes += nfsd4_max_reply(argp->rqstp, op); 1971 } else 1972 max_reply += nfsd4_max_reply(argp->rqstp, op); 1973 /* 1974 * OP_LOCK and OP_LOCKT may return a conflicting lock. 1975 * (Special case because it will just skip encoding this 1976 * if it runs out of xdr buffer space, and it is the only 1977 * operation that behaves this way.) 1978 */ 1979 if (op->opnum == OP_LOCK || op->opnum == OP_LOCKT) 1980 max_reply += NFS4_OPAQUE_LIMIT; 1981 1982 if (op->status) { 1983 argp->opcnt = i+1; 1984 break; 1985 } 1986 } 1987 /* Sessions make the DRC unnecessary: */ 1988 if (argp->minorversion) 1989 cachethis = false; 1990 svc_reserve(argp->rqstp, max_reply + readbytes); 1991 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE; 1992 1993 if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack) 1994 clear_bit(RQ_SPLICE_OK, &argp->rqstp->rq_flags); 1995 1996 DECODE_TAIL; 1997 } 1998 1999 static __be32 *encode_change(__be32 *p, struct kstat *stat, struct inode *inode, 2000 struct svc_export *exp) 2001 { 2002 if (exp->ex_flags & NFSEXP_V4ROOT) { 2003 *p++ = cpu_to_be32(convert_to_wallclock(exp->cd->flush_time)); 2004 *p++ = 0; 2005 } else if (IS_I_VERSION(inode)) { 2006 p = xdr_encode_hyper(p, nfsd4_change_attribute(stat, inode)); 2007 } else { 2008 *p++ = cpu_to_be32(stat->ctime.tv_sec); 2009 *p++ = cpu_to_be32(stat->ctime.tv_nsec); 2010 } 2011 return p; 2012 } 2013 2014 /* 2015 * ctime (in NFSv4, time_metadata) is not writeable, and the client 2016 * doesn't really care what resolution could theoretically be stored by 2017 * the filesystem. 2018 * 2019 * The client cares how close together changes can be while still 2020 * guaranteeing ctime changes. For most filesystems (which have 2021 * timestamps with nanosecond fields) that is limited by the resolution 2022 * of the time returned from current_time() (which I'm assuming to be 2023 * 1/HZ). 2024 */ 2025 static __be32 *encode_time_delta(__be32 *p, struct inode *inode) 2026 { 2027 struct timespec ts; 2028 u32 ns; 2029 2030 ns = max_t(u32, NSEC_PER_SEC/HZ, inode->i_sb->s_time_gran); 2031 ts = ns_to_timespec(ns); 2032 2033 p = xdr_encode_hyper(p, ts.tv_sec); 2034 *p++ = cpu_to_be32(ts.tv_nsec); 2035 2036 return p; 2037 } 2038 2039 static __be32 *encode_cinfo(__be32 *p, struct nfsd4_change_info *c) 2040 { 2041 *p++ = cpu_to_be32(c->atomic); 2042 if (c->change_supported) { 2043 p = xdr_encode_hyper(p, c->before_change); 2044 p = xdr_encode_hyper(p, c->after_change); 2045 } else { 2046 *p++ = cpu_to_be32(c->before_ctime_sec); 2047 *p++ = cpu_to_be32(c->before_ctime_nsec); 2048 *p++ = cpu_to_be32(c->after_ctime_sec); 2049 *p++ = cpu_to_be32(c->after_ctime_nsec); 2050 } 2051 return p; 2052 } 2053 2054 /* Encode as an array of strings the string given with components 2055 * separated @sep, escaped with esc_enter and esc_exit. 2056 */ 2057 static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep, 2058 char *components, char esc_enter, 2059 char esc_exit) 2060 { 2061 __be32 *p; 2062 __be32 pathlen; 2063 int pathlen_offset; 2064 int strlen, count=0; 2065 char *str, *end, *next; 2066 2067 dprintk("nfsd4_encode_components(%s)\n", components); 2068 2069 pathlen_offset = xdr->buf->len; 2070 p = xdr_reserve_space(xdr, 4); 2071 if (!p) 2072 return nfserr_resource; 2073 p++; /* We will fill this in with @count later */ 2074 2075 end = str = components; 2076 while (*end) { 2077 bool found_esc = false; 2078 2079 /* try to parse as esc_start, ..., esc_end, sep */ 2080 if (*str == esc_enter) { 2081 for (; *end && (*end != esc_exit); end++) 2082 /* find esc_exit or end of string */; 2083 next = end + 1; 2084 if (*end && (!*next || *next == sep)) { 2085 str++; 2086 found_esc = true; 2087 } 2088 } 2089 2090 if (!found_esc) 2091 for (; *end && (*end != sep); end++) 2092 /* find sep or end of string */; 2093 2094 strlen = end - str; 2095 if (strlen) { 2096 p = xdr_reserve_space(xdr, strlen + 4); 2097 if (!p) 2098 return nfserr_resource; 2099 p = xdr_encode_opaque(p, str, strlen); 2100 count++; 2101 } 2102 else 2103 end++; 2104 if (found_esc) 2105 end = next; 2106 2107 str = end; 2108 } 2109 pathlen = htonl(count); 2110 write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4); 2111 return 0; 2112 } 2113 2114 /* Encode as an array of strings the string given with components 2115 * separated @sep. 2116 */ 2117 static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep, 2118 char *components) 2119 { 2120 return nfsd4_encode_components_esc(xdr, sep, components, 0, 0); 2121 } 2122 2123 /* 2124 * encode a location element of a fs_locations structure 2125 */ 2126 static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr, 2127 struct nfsd4_fs_location *location) 2128 { 2129 __be32 status; 2130 2131 status = nfsd4_encode_components_esc(xdr, ':', location->hosts, 2132 '[', ']'); 2133 if (status) 2134 return status; 2135 status = nfsd4_encode_components(xdr, '/', location->path); 2136 if (status) 2137 return status; 2138 return 0; 2139 } 2140 2141 /* 2142 * Encode a path in RFC3530 'pathname4' format 2143 */ 2144 static __be32 nfsd4_encode_path(struct xdr_stream *xdr, 2145 const struct path *root, 2146 const struct path *path) 2147 { 2148 struct path cur = *path; 2149 __be32 *p; 2150 struct dentry **components = NULL; 2151 unsigned int ncomponents = 0; 2152 __be32 err = nfserr_jukebox; 2153 2154 dprintk("nfsd4_encode_components("); 2155 2156 path_get(&cur); 2157 /* First walk the path up to the nfsd root, and store the 2158 * dentries/path components in an array. 2159 */ 2160 for (;;) { 2161 if (path_equal(&cur, root)) 2162 break; 2163 if (cur.dentry == cur.mnt->mnt_root) { 2164 if (follow_up(&cur)) 2165 continue; 2166 goto out_free; 2167 } 2168 if ((ncomponents & 15) == 0) { 2169 struct dentry **new; 2170 new = krealloc(components, 2171 sizeof(*new) * (ncomponents + 16), 2172 GFP_KERNEL); 2173 if (!new) 2174 goto out_free; 2175 components = new; 2176 } 2177 components[ncomponents++] = cur.dentry; 2178 cur.dentry = dget_parent(cur.dentry); 2179 } 2180 err = nfserr_resource; 2181 p = xdr_reserve_space(xdr, 4); 2182 if (!p) 2183 goto out_free; 2184 *p++ = cpu_to_be32(ncomponents); 2185 2186 while (ncomponents) { 2187 struct dentry *dentry = components[ncomponents - 1]; 2188 unsigned int len; 2189 2190 spin_lock(&dentry->d_lock); 2191 len = dentry->d_name.len; 2192 p = xdr_reserve_space(xdr, len + 4); 2193 if (!p) { 2194 spin_unlock(&dentry->d_lock); 2195 goto out_free; 2196 } 2197 p = xdr_encode_opaque(p, dentry->d_name.name, len); 2198 dprintk("/%pd", dentry); 2199 spin_unlock(&dentry->d_lock); 2200 dput(dentry); 2201 ncomponents--; 2202 } 2203 2204 err = 0; 2205 out_free: 2206 dprintk(")\n"); 2207 while (ncomponents) 2208 dput(components[--ncomponents]); 2209 kfree(components); 2210 path_put(&cur); 2211 return err; 2212 } 2213 2214 static __be32 nfsd4_encode_fsloc_fsroot(struct xdr_stream *xdr, 2215 struct svc_rqst *rqstp, const struct path *path) 2216 { 2217 struct svc_export *exp_ps; 2218 __be32 res; 2219 2220 exp_ps = rqst_find_fsidzero_export(rqstp); 2221 if (IS_ERR(exp_ps)) 2222 return nfserrno(PTR_ERR(exp_ps)); 2223 res = nfsd4_encode_path(xdr, &exp_ps->ex_path, path); 2224 exp_put(exp_ps); 2225 return res; 2226 } 2227 2228 /* 2229 * encode a fs_locations structure 2230 */ 2231 static __be32 nfsd4_encode_fs_locations(struct xdr_stream *xdr, 2232 struct svc_rqst *rqstp, struct svc_export *exp) 2233 { 2234 __be32 status; 2235 int i; 2236 __be32 *p; 2237 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs; 2238 2239 status = nfsd4_encode_fsloc_fsroot(xdr, rqstp, &exp->ex_path); 2240 if (status) 2241 return status; 2242 p = xdr_reserve_space(xdr, 4); 2243 if (!p) 2244 return nfserr_resource; 2245 *p++ = cpu_to_be32(fslocs->locations_count); 2246 for (i=0; i<fslocs->locations_count; i++) { 2247 status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]); 2248 if (status) 2249 return status; 2250 } 2251 return 0; 2252 } 2253 2254 static u32 nfs4_file_type(umode_t mode) 2255 { 2256 switch (mode & S_IFMT) { 2257 case S_IFIFO: return NF4FIFO; 2258 case S_IFCHR: return NF4CHR; 2259 case S_IFDIR: return NF4DIR; 2260 case S_IFBLK: return NF4BLK; 2261 case S_IFLNK: return NF4LNK; 2262 case S_IFREG: return NF4REG; 2263 case S_IFSOCK: return NF4SOCK; 2264 default: return NF4BAD; 2265 }; 2266 } 2267 2268 static inline __be32 2269 nfsd4_encode_aclname(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2270 struct nfs4_ace *ace) 2271 { 2272 if (ace->whotype != NFS4_ACL_WHO_NAMED) 2273 return nfs4_acl_write_who(xdr, ace->whotype); 2274 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 2275 return nfsd4_encode_group(xdr, rqstp, ace->who_gid); 2276 else 2277 return nfsd4_encode_user(xdr, rqstp, ace->who_uid); 2278 } 2279 2280 static inline __be32 2281 nfsd4_encode_layout_types(struct xdr_stream *xdr, u32 layout_types) 2282 { 2283 __be32 *p; 2284 unsigned long i = hweight_long(layout_types); 2285 2286 p = xdr_reserve_space(xdr, 4 + 4 * i); 2287 if (!p) 2288 return nfserr_resource; 2289 2290 *p++ = cpu_to_be32(i); 2291 2292 for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i) 2293 if (layout_types & (1 << i)) 2294 *p++ = cpu_to_be32(i); 2295 2296 return 0; 2297 } 2298 2299 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \ 2300 FATTR4_WORD0_RDATTR_ERROR) 2301 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID 2302 #define WORD2_ABSENT_FS_ATTRS 0 2303 2304 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2305 static inline __be32 2306 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2307 void *context, int len) 2308 { 2309 __be32 *p; 2310 2311 p = xdr_reserve_space(xdr, len + 4 + 4 + 4); 2312 if (!p) 2313 return nfserr_resource; 2314 2315 /* 2316 * For now we use a 0 here to indicate the null translation; in 2317 * the future we may place a call to translation code here. 2318 */ 2319 *p++ = cpu_to_be32(0); /* lfs */ 2320 *p++ = cpu_to_be32(0); /* pi */ 2321 p = xdr_encode_opaque(p, context, len); 2322 return 0; 2323 } 2324 #else 2325 static inline __be32 2326 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2327 void *context, int len) 2328 { return 0; } 2329 #endif 2330 2331 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *bmval2, u32 *rdattr_err) 2332 { 2333 /* As per referral draft: */ 2334 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS || 2335 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) { 2336 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR || 2337 *bmval0 & FATTR4_WORD0_FS_LOCATIONS) 2338 *rdattr_err = NFSERR_MOVED; 2339 else 2340 return nfserr_moved; 2341 } 2342 *bmval0 &= WORD0_ABSENT_FS_ATTRS; 2343 *bmval1 &= WORD1_ABSENT_FS_ATTRS; 2344 *bmval2 &= WORD2_ABSENT_FS_ATTRS; 2345 return 0; 2346 } 2347 2348 2349 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat) 2350 { 2351 struct path path = exp->ex_path; 2352 int err; 2353 2354 path_get(&path); 2355 while (follow_up(&path)) { 2356 if (path.dentry != path.mnt->mnt_root) 2357 break; 2358 } 2359 err = vfs_getattr(&path, stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT); 2360 path_put(&path); 2361 return err; 2362 } 2363 2364 static __be32 2365 nfsd4_encode_bitmap(struct xdr_stream *xdr, u32 bmval0, u32 bmval1, u32 bmval2) 2366 { 2367 __be32 *p; 2368 2369 if (bmval2) { 2370 p = xdr_reserve_space(xdr, 16); 2371 if (!p) 2372 goto out_resource; 2373 *p++ = cpu_to_be32(3); 2374 *p++ = cpu_to_be32(bmval0); 2375 *p++ = cpu_to_be32(bmval1); 2376 *p++ = cpu_to_be32(bmval2); 2377 } else if (bmval1) { 2378 p = xdr_reserve_space(xdr, 12); 2379 if (!p) 2380 goto out_resource; 2381 *p++ = cpu_to_be32(2); 2382 *p++ = cpu_to_be32(bmval0); 2383 *p++ = cpu_to_be32(bmval1); 2384 } else { 2385 p = xdr_reserve_space(xdr, 8); 2386 if (!p) 2387 goto out_resource; 2388 *p++ = cpu_to_be32(1); 2389 *p++ = cpu_to_be32(bmval0); 2390 } 2391 2392 return 0; 2393 out_resource: 2394 return nfserr_resource; 2395 } 2396 2397 /* 2398 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle 2399 * ourselves. 2400 */ 2401 static __be32 2402 nfsd4_encode_fattr(struct xdr_stream *xdr, struct svc_fh *fhp, 2403 struct svc_export *exp, 2404 struct dentry *dentry, u32 *bmval, 2405 struct svc_rqst *rqstp, int ignore_crossmnt) 2406 { 2407 u32 bmval0 = bmval[0]; 2408 u32 bmval1 = bmval[1]; 2409 u32 bmval2 = bmval[2]; 2410 struct kstat stat; 2411 struct svc_fh *tempfh = NULL; 2412 struct kstatfs statfs; 2413 __be32 *p; 2414 int starting_len = xdr->buf->len; 2415 int attrlen_offset; 2416 __be32 attrlen; 2417 u32 dummy; 2418 u64 dummy64; 2419 u32 rdattr_err = 0; 2420 __be32 status; 2421 int err; 2422 struct nfs4_acl *acl = NULL; 2423 void *context = NULL; 2424 int contextlen; 2425 bool contextsupport = false; 2426 struct nfsd4_compoundres *resp = rqstp->rq_resp; 2427 u32 minorversion = resp->cstate.minorversion; 2428 struct path path = { 2429 .mnt = exp->ex_path.mnt, 2430 .dentry = dentry, 2431 }; 2432 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 2433 2434 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1); 2435 BUG_ON(!nfsd_attrs_supported(minorversion, bmval)); 2436 2437 if (exp->ex_fslocs.migrated) { 2438 status = fattr_handle_absent_fs(&bmval0, &bmval1, &bmval2, &rdattr_err); 2439 if (status) 2440 goto out; 2441 } 2442 2443 err = vfs_getattr(&path, &stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT); 2444 if (err) 2445 goto out_nfserr; 2446 if ((bmval0 & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE | 2447 FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) || 2448 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE | 2449 FATTR4_WORD1_SPACE_TOTAL))) { 2450 err = vfs_statfs(&path, &statfs); 2451 if (err) 2452 goto out_nfserr; 2453 } 2454 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) { 2455 tempfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL); 2456 status = nfserr_jukebox; 2457 if (!tempfh) 2458 goto out; 2459 fh_init(tempfh, NFS4_FHSIZE); 2460 status = fh_compose(tempfh, exp, dentry, NULL); 2461 if (status) 2462 goto out; 2463 fhp = tempfh; 2464 } 2465 if (bmval0 & FATTR4_WORD0_ACL) { 2466 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl); 2467 if (err == -EOPNOTSUPP) 2468 bmval0 &= ~FATTR4_WORD0_ACL; 2469 else if (err == -EINVAL) { 2470 status = nfserr_attrnotsupp; 2471 goto out; 2472 } else if (err != 0) 2473 goto out_nfserr; 2474 } 2475 2476 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2477 if ((bmval2 & FATTR4_WORD2_SECURITY_LABEL) || 2478 bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 2479 if (exp->ex_flags & NFSEXP_SECURITY_LABEL) 2480 err = security_inode_getsecctx(d_inode(dentry), 2481 &context, &contextlen); 2482 else 2483 err = -EOPNOTSUPP; 2484 contextsupport = (err == 0); 2485 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) { 2486 if (err == -EOPNOTSUPP) 2487 bmval2 &= ~FATTR4_WORD2_SECURITY_LABEL; 2488 else if (err) 2489 goto out_nfserr; 2490 } 2491 } 2492 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */ 2493 2494 status = nfsd4_encode_bitmap(xdr, bmval0, bmval1, bmval2); 2495 if (status) 2496 goto out; 2497 2498 attrlen_offset = xdr->buf->len; 2499 p = xdr_reserve_space(xdr, 4); 2500 if (!p) 2501 goto out_resource; 2502 p++; /* to be backfilled later */ 2503 2504 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 2505 u32 supp[3]; 2506 2507 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp)); 2508 2509 if (!IS_POSIXACL(dentry->d_inode)) 2510 supp[0] &= ~FATTR4_WORD0_ACL; 2511 if (!contextsupport) 2512 supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL; 2513 if (!supp[2]) { 2514 p = xdr_reserve_space(xdr, 12); 2515 if (!p) 2516 goto out_resource; 2517 *p++ = cpu_to_be32(2); 2518 *p++ = cpu_to_be32(supp[0]); 2519 *p++ = cpu_to_be32(supp[1]); 2520 } else { 2521 p = xdr_reserve_space(xdr, 16); 2522 if (!p) 2523 goto out_resource; 2524 *p++ = cpu_to_be32(3); 2525 *p++ = cpu_to_be32(supp[0]); 2526 *p++ = cpu_to_be32(supp[1]); 2527 *p++ = cpu_to_be32(supp[2]); 2528 } 2529 } 2530 if (bmval0 & FATTR4_WORD0_TYPE) { 2531 p = xdr_reserve_space(xdr, 4); 2532 if (!p) 2533 goto out_resource; 2534 dummy = nfs4_file_type(stat.mode); 2535 if (dummy == NF4BAD) { 2536 status = nfserr_serverfault; 2537 goto out; 2538 } 2539 *p++ = cpu_to_be32(dummy); 2540 } 2541 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) { 2542 p = xdr_reserve_space(xdr, 4); 2543 if (!p) 2544 goto out_resource; 2545 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK) 2546 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT); 2547 else 2548 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT| 2549 NFS4_FH_VOL_RENAME); 2550 } 2551 if (bmval0 & FATTR4_WORD0_CHANGE) { 2552 p = xdr_reserve_space(xdr, 8); 2553 if (!p) 2554 goto out_resource; 2555 p = encode_change(p, &stat, d_inode(dentry), exp); 2556 } 2557 if (bmval0 & FATTR4_WORD0_SIZE) { 2558 p = xdr_reserve_space(xdr, 8); 2559 if (!p) 2560 goto out_resource; 2561 p = xdr_encode_hyper(p, stat.size); 2562 } 2563 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) { 2564 p = xdr_reserve_space(xdr, 4); 2565 if (!p) 2566 goto out_resource; 2567 *p++ = cpu_to_be32(1); 2568 } 2569 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) { 2570 p = xdr_reserve_space(xdr, 4); 2571 if (!p) 2572 goto out_resource; 2573 *p++ = cpu_to_be32(1); 2574 } 2575 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) { 2576 p = xdr_reserve_space(xdr, 4); 2577 if (!p) 2578 goto out_resource; 2579 *p++ = cpu_to_be32(0); 2580 } 2581 if (bmval0 & FATTR4_WORD0_FSID) { 2582 p = xdr_reserve_space(xdr, 16); 2583 if (!p) 2584 goto out_resource; 2585 if (exp->ex_fslocs.migrated) { 2586 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR); 2587 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR); 2588 } else switch(fsid_source(fhp)) { 2589 case FSIDSOURCE_FSID: 2590 p = xdr_encode_hyper(p, (u64)exp->ex_fsid); 2591 p = xdr_encode_hyper(p, (u64)0); 2592 break; 2593 case FSIDSOURCE_DEV: 2594 *p++ = cpu_to_be32(0); 2595 *p++ = cpu_to_be32(MAJOR(stat.dev)); 2596 *p++ = cpu_to_be32(0); 2597 *p++ = cpu_to_be32(MINOR(stat.dev)); 2598 break; 2599 case FSIDSOURCE_UUID: 2600 p = xdr_encode_opaque_fixed(p, exp->ex_uuid, 2601 EX_UUID_LEN); 2602 break; 2603 } 2604 } 2605 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) { 2606 p = xdr_reserve_space(xdr, 4); 2607 if (!p) 2608 goto out_resource; 2609 *p++ = cpu_to_be32(0); 2610 } 2611 if (bmval0 & FATTR4_WORD0_LEASE_TIME) { 2612 p = xdr_reserve_space(xdr, 4); 2613 if (!p) 2614 goto out_resource; 2615 *p++ = cpu_to_be32(nn->nfsd4_lease); 2616 } 2617 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) { 2618 p = xdr_reserve_space(xdr, 4); 2619 if (!p) 2620 goto out_resource; 2621 *p++ = cpu_to_be32(rdattr_err); 2622 } 2623 if (bmval0 & FATTR4_WORD0_ACL) { 2624 struct nfs4_ace *ace; 2625 2626 if (acl == NULL) { 2627 p = xdr_reserve_space(xdr, 4); 2628 if (!p) 2629 goto out_resource; 2630 2631 *p++ = cpu_to_be32(0); 2632 goto out_acl; 2633 } 2634 p = xdr_reserve_space(xdr, 4); 2635 if (!p) 2636 goto out_resource; 2637 *p++ = cpu_to_be32(acl->naces); 2638 2639 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) { 2640 p = xdr_reserve_space(xdr, 4*3); 2641 if (!p) 2642 goto out_resource; 2643 *p++ = cpu_to_be32(ace->type); 2644 *p++ = cpu_to_be32(ace->flag); 2645 *p++ = cpu_to_be32(ace->access_mask & 2646 NFS4_ACE_MASK_ALL); 2647 status = nfsd4_encode_aclname(xdr, rqstp, ace); 2648 if (status) 2649 goto out; 2650 } 2651 } 2652 out_acl: 2653 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) { 2654 p = xdr_reserve_space(xdr, 4); 2655 if (!p) 2656 goto out_resource; 2657 *p++ = cpu_to_be32(IS_POSIXACL(dentry->d_inode) ? 2658 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0); 2659 } 2660 if (bmval0 & FATTR4_WORD0_CANSETTIME) { 2661 p = xdr_reserve_space(xdr, 4); 2662 if (!p) 2663 goto out_resource; 2664 *p++ = cpu_to_be32(1); 2665 } 2666 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) { 2667 p = xdr_reserve_space(xdr, 4); 2668 if (!p) 2669 goto out_resource; 2670 *p++ = cpu_to_be32(0); 2671 } 2672 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) { 2673 p = xdr_reserve_space(xdr, 4); 2674 if (!p) 2675 goto out_resource; 2676 *p++ = cpu_to_be32(1); 2677 } 2678 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) { 2679 p = xdr_reserve_space(xdr, 4); 2680 if (!p) 2681 goto out_resource; 2682 *p++ = cpu_to_be32(1); 2683 } 2684 if (bmval0 & FATTR4_WORD0_FILEHANDLE) { 2685 p = xdr_reserve_space(xdr, fhp->fh_handle.fh_size + 4); 2686 if (!p) 2687 goto out_resource; 2688 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, 2689 fhp->fh_handle.fh_size); 2690 } 2691 if (bmval0 & FATTR4_WORD0_FILEID) { 2692 p = xdr_reserve_space(xdr, 8); 2693 if (!p) 2694 goto out_resource; 2695 p = xdr_encode_hyper(p, stat.ino); 2696 } 2697 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) { 2698 p = xdr_reserve_space(xdr, 8); 2699 if (!p) 2700 goto out_resource; 2701 p = xdr_encode_hyper(p, (u64) statfs.f_ffree); 2702 } 2703 if (bmval0 & FATTR4_WORD0_FILES_FREE) { 2704 p = xdr_reserve_space(xdr, 8); 2705 if (!p) 2706 goto out_resource; 2707 p = xdr_encode_hyper(p, (u64) statfs.f_ffree); 2708 } 2709 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) { 2710 p = xdr_reserve_space(xdr, 8); 2711 if (!p) 2712 goto out_resource; 2713 p = xdr_encode_hyper(p, (u64) statfs.f_files); 2714 } 2715 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) { 2716 status = nfsd4_encode_fs_locations(xdr, rqstp, exp); 2717 if (status) 2718 goto out; 2719 } 2720 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) { 2721 p = xdr_reserve_space(xdr, 4); 2722 if (!p) 2723 goto out_resource; 2724 *p++ = cpu_to_be32(1); 2725 } 2726 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) { 2727 p = xdr_reserve_space(xdr, 8); 2728 if (!p) 2729 goto out_resource; 2730 p = xdr_encode_hyper(p, exp->ex_path.mnt->mnt_sb->s_maxbytes); 2731 } 2732 if (bmval0 & FATTR4_WORD0_MAXLINK) { 2733 p = xdr_reserve_space(xdr, 4); 2734 if (!p) 2735 goto out_resource; 2736 *p++ = cpu_to_be32(255); 2737 } 2738 if (bmval0 & FATTR4_WORD0_MAXNAME) { 2739 p = xdr_reserve_space(xdr, 4); 2740 if (!p) 2741 goto out_resource; 2742 *p++ = cpu_to_be32(statfs.f_namelen); 2743 } 2744 if (bmval0 & FATTR4_WORD0_MAXREAD) { 2745 p = xdr_reserve_space(xdr, 8); 2746 if (!p) 2747 goto out_resource; 2748 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp)); 2749 } 2750 if (bmval0 & FATTR4_WORD0_MAXWRITE) { 2751 p = xdr_reserve_space(xdr, 8); 2752 if (!p) 2753 goto out_resource; 2754 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp)); 2755 } 2756 if (bmval1 & FATTR4_WORD1_MODE) { 2757 p = xdr_reserve_space(xdr, 4); 2758 if (!p) 2759 goto out_resource; 2760 *p++ = cpu_to_be32(stat.mode & S_IALLUGO); 2761 } 2762 if (bmval1 & FATTR4_WORD1_NO_TRUNC) { 2763 p = xdr_reserve_space(xdr, 4); 2764 if (!p) 2765 goto out_resource; 2766 *p++ = cpu_to_be32(1); 2767 } 2768 if (bmval1 & FATTR4_WORD1_NUMLINKS) { 2769 p = xdr_reserve_space(xdr, 4); 2770 if (!p) 2771 goto out_resource; 2772 *p++ = cpu_to_be32(stat.nlink); 2773 } 2774 if (bmval1 & FATTR4_WORD1_OWNER) { 2775 status = nfsd4_encode_user(xdr, rqstp, stat.uid); 2776 if (status) 2777 goto out; 2778 } 2779 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) { 2780 status = nfsd4_encode_group(xdr, rqstp, stat.gid); 2781 if (status) 2782 goto out; 2783 } 2784 if (bmval1 & FATTR4_WORD1_RAWDEV) { 2785 p = xdr_reserve_space(xdr, 8); 2786 if (!p) 2787 goto out_resource; 2788 *p++ = cpu_to_be32((u32) MAJOR(stat.rdev)); 2789 *p++ = cpu_to_be32((u32) MINOR(stat.rdev)); 2790 } 2791 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) { 2792 p = xdr_reserve_space(xdr, 8); 2793 if (!p) 2794 goto out_resource; 2795 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize; 2796 p = xdr_encode_hyper(p, dummy64); 2797 } 2798 if (bmval1 & FATTR4_WORD1_SPACE_FREE) { 2799 p = xdr_reserve_space(xdr, 8); 2800 if (!p) 2801 goto out_resource; 2802 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize; 2803 p = xdr_encode_hyper(p, dummy64); 2804 } 2805 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) { 2806 p = xdr_reserve_space(xdr, 8); 2807 if (!p) 2808 goto out_resource; 2809 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize; 2810 p = xdr_encode_hyper(p, dummy64); 2811 } 2812 if (bmval1 & FATTR4_WORD1_SPACE_USED) { 2813 p = xdr_reserve_space(xdr, 8); 2814 if (!p) 2815 goto out_resource; 2816 dummy64 = (u64)stat.blocks << 9; 2817 p = xdr_encode_hyper(p, dummy64); 2818 } 2819 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) { 2820 p = xdr_reserve_space(xdr, 12); 2821 if (!p) 2822 goto out_resource; 2823 p = xdr_encode_hyper(p, (s64)stat.atime.tv_sec); 2824 *p++ = cpu_to_be32(stat.atime.tv_nsec); 2825 } 2826 if (bmval1 & FATTR4_WORD1_TIME_DELTA) { 2827 p = xdr_reserve_space(xdr, 12); 2828 if (!p) 2829 goto out_resource; 2830 p = encode_time_delta(p, d_inode(dentry)); 2831 } 2832 if (bmval1 & FATTR4_WORD1_TIME_METADATA) { 2833 p = xdr_reserve_space(xdr, 12); 2834 if (!p) 2835 goto out_resource; 2836 p = xdr_encode_hyper(p, (s64)stat.ctime.tv_sec); 2837 *p++ = cpu_to_be32(stat.ctime.tv_nsec); 2838 } 2839 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) { 2840 p = xdr_reserve_space(xdr, 12); 2841 if (!p) 2842 goto out_resource; 2843 p = xdr_encode_hyper(p, (s64)stat.mtime.tv_sec); 2844 *p++ = cpu_to_be32(stat.mtime.tv_nsec); 2845 } 2846 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) { 2847 struct kstat parent_stat; 2848 u64 ino = stat.ino; 2849 2850 p = xdr_reserve_space(xdr, 8); 2851 if (!p) 2852 goto out_resource; 2853 /* 2854 * Get parent's attributes if not ignoring crossmount 2855 * and this is the root of a cross-mounted filesystem. 2856 */ 2857 if (ignore_crossmnt == 0 && 2858 dentry == exp->ex_path.mnt->mnt_root) { 2859 err = get_parent_attributes(exp, &parent_stat); 2860 if (err) 2861 goto out_nfserr; 2862 ino = parent_stat.ino; 2863 } 2864 p = xdr_encode_hyper(p, ino); 2865 } 2866 #ifdef CONFIG_NFSD_PNFS 2867 if (bmval1 & FATTR4_WORD1_FS_LAYOUT_TYPES) { 2868 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types); 2869 if (status) 2870 goto out; 2871 } 2872 2873 if (bmval2 & FATTR4_WORD2_LAYOUT_TYPES) { 2874 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types); 2875 if (status) 2876 goto out; 2877 } 2878 2879 if (bmval2 & FATTR4_WORD2_LAYOUT_BLKSIZE) { 2880 p = xdr_reserve_space(xdr, 4); 2881 if (!p) 2882 goto out_resource; 2883 *p++ = cpu_to_be32(stat.blksize); 2884 } 2885 #endif /* CONFIG_NFSD_PNFS */ 2886 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) { 2887 u32 supp[3]; 2888 2889 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp)); 2890 supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0; 2891 supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1; 2892 supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2; 2893 2894 status = nfsd4_encode_bitmap(xdr, supp[0], supp[1], supp[2]); 2895 if (status) 2896 goto out; 2897 } 2898 2899 if (bmval2 & FATTR4_WORD2_CHANGE_ATTR_TYPE) { 2900 p = xdr_reserve_space(xdr, 4); 2901 if (!p) 2902 goto out_resource; 2903 if (IS_I_VERSION(d_inode(dentry))) 2904 *p++ = cpu_to_be32(NFS4_CHANGE_TYPE_IS_MONOTONIC_INCR); 2905 else 2906 *p++ = cpu_to_be32(NFS4_CHANGE_TYPE_IS_TIME_METADATA); 2907 } 2908 2909 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) { 2910 status = nfsd4_encode_security_label(xdr, rqstp, context, 2911 contextlen); 2912 if (status) 2913 goto out; 2914 } 2915 2916 attrlen = htonl(xdr->buf->len - attrlen_offset - 4); 2917 write_bytes_to_xdr_buf(xdr->buf, attrlen_offset, &attrlen, 4); 2918 status = nfs_ok; 2919 2920 out: 2921 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2922 if (context) 2923 security_release_secctx(context, contextlen); 2924 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */ 2925 kfree(acl); 2926 if (tempfh) { 2927 fh_put(tempfh); 2928 kfree(tempfh); 2929 } 2930 if (status) 2931 xdr_truncate_encode(xdr, starting_len); 2932 return status; 2933 out_nfserr: 2934 status = nfserrno(err); 2935 goto out; 2936 out_resource: 2937 status = nfserr_resource; 2938 goto out; 2939 } 2940 2941 static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr, 2942 struct xdr_buf *buf, __be32 *p, int bytes) 2943 { 2944 xdr->scratch.iov_len = 0; 2945 memset(buf, 0, sizeof(struct xdr_buf)); 2946 buf->head[0].iov_base = p; 2947 buf->head[0].iov_len = 0; 2948 buf->len = 0; 2949 xdr->buf = buf; 2950 xdr->iov = buf->head; 2951 xdr->p = p; 2952 xdr->end = (void *)p + bytes; 2953 buf->buflen = bytes; 2954 } 2955 2956 __be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words, 2957 struct svc_fh *fhp, struct svc_export *exp, 2958 struct dentry *dentry, u32 *bmval, 2959 struct svc_rqst *rqstp, int ignore_crossmnt) 2960 { 2961 struct xdr_buf dummy; 2962 struct xdr_stream xdr; 2963 __be32 ret; 2964 2965 svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2); 2966 ret = nfsd4_encode_fattr(&xdr, fhp, exp, dentry, bmval, rqstp, 2967 ignore_crossmnt); 2968 *p = xdr.p; 2969 return ret; 2970 } 2971 2972 static inline int attributes_need_mount(u32 *bmval) 2973 { 2974 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME)) 2975 return 1; 2976 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID) 2977 return 1; 2978 return 0; 2979 } 2980 2981 static __be32 2982 nfsd4_encode_dirent_fattr(struct xdr_stream *xdr, struct nfsd4_readdir *cd, 2983 const char *name, int namlen) 2984 { 2985 struct svc_export *exp = cd->rd_fhp->fh_export; 2986 struct dentry *dentry; 2987 __be32 nfserr; 2988 int ignore_crossmnt = 0; 2989 2990 dentry = lookup_one_len_unlocked(name, cd->rd_fhp->fh_dentry, namlen); 2991 if (IS_ERR(dentry)) 2992 return nfserrno(PTR_ERR(dentry)); 2993 if (d_really_is_negative(dentry)) { 2994 /* 2995 * we're not holding the i_mutex here, so there's 2996 * a window where this directory entry could have gone 2997 * away. 2998 */ 2999 dput(dentry); 3000 return nfserr_noent; 3001 } 3002 3003 exp_get(exp); 3004 /* 3005 * In the case of a mountpoint, the client may be asking for 3006 * attributes that are only properties of the underlying filesystem 3007 * as opposed to the cross-mounted file system. In such a case, 3008 * we will not follow the cross mount and will fill the attribtutes 3009 * directly from the mountpoint dentry. 3010 */ 3011 if (nfsd_mountpoint(dentry, exp)) { 3012 int err; 3013 3014 if (!(exp->ex_flags & NFSEXP_V4ROOT) 3015 && !attributes_need_mount(cd->rd_bmval)) { 3016 ignore_crossmnt = 1; 3017 goto out_encode; 3018 } 3019 /* 3020 * Why the heck aren't we just using nfsd_lookup?? 3021 * Different "."/".." handling? Something else? 3022 * At least, add a comment here to explain.... 3023 */ 3024 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp); 3025 if (err) { 3026 nfserr = nfserrno(err); 3027 goto out_put; 3028 } 3029 nfserr = check_nfsd_access(exp, cd->rd_rqstp); 3030 if (nfserr) 3031 goto out_put; 3032 3033 } 3034 out_encode: 3035 nfserr = nfsd4_encode_fattr(xdr, NULL, exp, dentry, cd->rd_bmval, 3036 cd->rd_rqstp, ignore_crossmnt); 3037 out_put: 3038 dput(dentry); 3039 exp_put(exp); 3040 return nfserr; 3041 } 3042 3043 static __be32 * 3044 nfsd4_encode_rdattr_error(struct xdr_stream *xdr, __be32 nfserr) 3045 { 3046 __be32 *p; 3047 3048 p = xdr_reserve_space(xdr, 20); 3049 if (!p) 3050 return NULL; 3051 *p++ = htonl(2); 3052 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */ 3053 *p++ = htonl(0); /* bmval1 */ 3054 3055 *p++ = htonl(4); /* attribute length */ 3056 *p++ = nfserr; /* no htonl */ 3057 return p; 3058 } 3059 3060 static int 3061 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen, 3062 loff_t offset, u64 ino, unsigned int d_type) 3063 { 3064 struct readdir_cd *ccd = ccdv; 3065 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common); 3066 struct xdr_stream *xdr = cd->xdr; 3067 int start_offset = xdr->buf->len; 3068 int cookie_offset; 3069 u32 name_and_cookie; 3070 int entry_bytes; 3071 __be32 nfserr = nfserr_toosmall; 3072 __be64 wire_offset; 3073 __be32 *p; 3074 3075 /* In nfsv4, "." and ".." never make it onto the wire.. */ 3076 if (name && isdotent(name, namlen)) { 3077 cd->common.err = nfs_ok; 3078 return 0; 3079 } 3080 3081 if (cd->cookie_offset) { 3082 wire_offset = cpu_to_be64(offset); 3083 write_bytes_to_xdr_buf(xdr->buf, cd->cookie_offset, 3084 &wire_offset, 8); 3085 } 3086 3087 p = xdr_reserve_space(xdr, 4); 3088 if (!p) 3089 goto fail; 3090 *p++ = xdr_one; /* mark entry present */ 3091 cookie_offset = xdr->buf->len; 3092 p = xdr_reserve_space(xdr, 3*4 + namlen); 3093 if (!p) 3094 goto fail; 3095 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */ 3096 p = xdr_encode_array(p, name, namlen); /* name length & name */ 3097 3098 nfserr = nfsd4_encode_dirent_fattr(xdr, cd, name, namlen); 3099 switch (nfserr) { 3100 case nfs_ok: 3101 break; 3102 case nfserr_resource: 3103 nfserr = nfserr_toosmall; 3104 goto fail; 3105 case nfserr_noent: 3106 xdr_truncate_encode(xdr, start_offset); 3107 goto skip_entry; 3108 default: 3109 /* 3110 * If the client requested the RDATTR_ERROR attribute, 3111 * we stuff the error code into this attribute 3112 * and continue. If this attribute was not requested, 3113 * then in accordance with the spec, we fail the 3114 * entire READDIR operation(!) 3115 */ 3116 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)) 3117 goto fail; 3118 p = nfsd4_encode_rdattr_error(xdr, nfserr); 3119 if (p == NULL) { 3120 nfserr = nfserr_toosmall; 3121 goto fail; 3122 } 3123 } 3124 nfserr = nfserr_toosmall; 3125 entry_bytes = xdr->buf->len - start_offset; 3126 if (entry_bytes > cd->rd_maxcount) 3127 goto fail; 3128 cd->rd_maxcount -= entry_bytes; 3129 /* 3130 * RFC 3530 14.2.24 describes rd_dircount as only a "hint", so 3131 * let's always let through the first entry, at least: 3132 */ 3133 if (!cd->rd_dircount) 3134 goto fail; 3135 name_and_cookie = 4 + 4 * XDR_QUADLEN(namlen) + 8; 3136 if (name_and_cookie > cd->rd_dircount && cd->cookie_offset) 3137 goto fail; 3138 cd->rd_dircount -= min(cd->rd_dircount, name_and_cookie); 3139 3140 cd->cookie_offset = cookie_offset; 3141 skip_entry: 3142 cd->common.err = nfs_ok; 3143 return 0; 3144 fail: 3145 xdr_truncate_encode(xdr, start_offset); 3146 cd->common.err = nfserr; 3147 return -EINVAL; 3148 } 3149 3150 static __be32 3151 nfsd4_encode_stateid(struct xdr_stream *xdr, stateid_t *sid) 3152 { 3153 __be32 *p; 3154 3155 p = xdr_reserve_space(xdr, sizeof(stateid_t)); 3156 if (!p) 3157 return nfserr_resource; 3158 *p++ = cpu_to_be32(sid->si_generation); 3159 p = xdr_encode_opaque_fixed(p, &sid->si_opaque, 3160 sizeof(stateid_opaque_t)); 3161 return 0; 3162 } 3163 3164 static __be32 3165 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access) 3166 { 3167 struct xdr_stream *xdr = &resp->xdr; 3168 __be32 *p; 3169 3170 p = xdr_reserve_space(xdr, 8); 3171 if (!p) 3172 return nfserr_resource; 3173 *p++ = cpu_to_be32(access->ac_supported); 3174 *p++ = cpu_to_be32(access->ac_resp_access); 3175 return 0; 3176 } 3177 3178 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts) 3179 { 3180 struct xdr_stream *xdr = &resp->xdr; 3181 __be32 *p; 3182 3183 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 8); 3184 if (!p) 3185 return nfserr_resource; 3186 p = xdr_encode_opaque_fixed(p, bcts->sessionid.data, 3187 NFS4_MAX_SESSIONID_LEN); 3188 *p++ = cpu_to_be32(bcts->dir); 3189 /* Upshifting from TCP to RDMA is not supported */ 3190 *p++ = cpu_to_be32(0); 3191 return 0; 3192 } 3193 3194 static __be32 3195 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close) 3196 { 3197 struct xdr_stream *xdr = &resp->xdr; 3198 3199 return nfsd4_encode_stateid(xdr, &close->cl_stateid); 3200 } 3201 3202 3203 static __be32 3204 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit) 3205 { 3206 struct xdr_stream *xdr = &resp->xdr; 3207 __be32 *p; 3208 3209 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE); 3210 if (!p) 3211 return nfserr_resource; 3212 p = xdr_encode_opaque_fixed(p, commit->co_verf.data, 3213 NFS4_VERIFIER_SIZE); 3214 return 0; 3215 } 3216 3217 static __be32 3218 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create) 3219 { 3220 struct xdr_stream *xdr = &resp->xdr; 3221 __be32 *p; 3222 3223 p = xdr_reserve_space(xdr, 20); 3224 if (!p) 3225 return nfserr_resource; 3226 encode_cinfo(p, &create->cr_cinfo); 3227 nfserr = nfsd4_encode_bitmap(xdr, create->cr_bmval[0], 3228 create->cr_bmval[1], create->cr_bmval[2]); 3229 return 0; 3230 } 3231 3232 static __be32 3233 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr) 3234 { 3235 struct svc_fh *fhp = getattr->ga_fhp; 3236 struct xdr_stream *xdr = &resp->xdr; 3237 3238 return nfsd4_encode_fattr(xdr, fhp, fhp->fh_export, fhp->fh_dentry, 3239 getattr->ga_bmval, resp->rqstp, 0); 3240 } 3241 3242 static __be32 3243 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp) 3244 { 3245 struct xdr_stream *xdr = &resp->xdr; 3246 struct svc_fh *fhp = *fhpp; 3247 unsigned int len; 3248 __be32 *p; 3249 3250 len = fhp->fh_handle.fh_size; 3251 p = xdr_reserve_space(xdr, len + 4); 3252 if (!p) 3253 return nfserr_resource; 3254 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, len); 3255 return 0; 3256 } 3257 3258 /* 3259 * Including all fields other than the name, a LOCK4denied structure requires 3260 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes. 3261 */ 3262 static __be32 3263 nfsd4_encode_lock_denied(struct xdr_stream *xdr, struct nfsd4_lock_denied *ld) 3264 { 3265 struct xdr_netobj *conf = &ld->ld_owner; 3266 __be32 *p; 3267 3268 again: 3269 p = xdr_reserve_space(xdr, 32 + XDR_LEN(conf->len)); 3270 if (!p) { 3271 /* 3272 * Don't fail to return the result just because we can't 3273 * return the conflicting open: 3274 */ 3275 if (conf->len) { 3276 kfree(conf->data); 3277 conf->len = 0; 3278 conf->data = NULL; 3279 goto again; 3280 } 3281 return nfserr_resource; 3282 } 3283 p = xdr_encode_hyper(p, ld->ld_start); 3284 p = xdr_encode_hyper(p, ld->ld_length); 3285 *p++ = cpu_to_be32(ld->ld_type); 3286 if (conf->len) { 3287 p = xdr_encode_opaque_fixed(p, &ld->ld_clientid, 8); 3288 p = xdr_encode_opaque(p, conf->data, conf->len); 3289 kfree(conf->data); 3290 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */ 3291 p = xdr_encode_hyper(p, (u64)0); /* clientid */ 3292 *p++ = cpu_to_be32(0); /* length of owner name */ 3293 } 3294 return nfserr_denied; 3295 } 3296 3297 static __be32 3298 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock) 3299 { 3300 struct xdr_stream *xdr = &resp->xdr; 3301 3302 if (!nfserr) 3303 nfserr = nfsd4_encode_stateid(xdr, &lock->lk_resp_stateid); 3304 else if (nfserr == nfserr_denied) 3305 nfserr = nfsd4_encode_lock_denied(xdr, &lock->lk_denied); 3306 3307 return nfserr; 3308 } 3309 3310 static __be32 3311 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt) 3312 { 3313 struct xdr_stream *xdr = &resp->xdr; 3314 3315 if (nfserr == nfserr_denied) 3316 nfsd4_encode_lock_denied(xdr, &lockt->lt_denied); 3317 return nfserr; 3318 } 3319 3320 static __be32 3321 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku) 3322 { 3323 struct xdr_stream *xdr = &resp->xdr; 3324 3325 return nfsd4_encode_stateid(xdr, &locku->lu_stateid); 3326 } 3327 3328 3329 static __be32 3330 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link) 3331 { 3332 struct xdr_stream *xdr = &resp->xdr; 3333 __be32 *p; 3334 3335 p = xdr_reserve_space(xdr, 20); 3336 if (!p) 3337 return nfserr_resource; 3338 p = encode_cinfo(p, &link->li_cinfo); 3339 return 0; 3340 } 3341 3342 3343 static __be32 3344 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open) 3345 { 3346 struct xdr_stream *xdr = &resp->xdr; 3347 __be32 *p; 3348 3349 nfserr = nfsd4_encode_stateid(xdr, &open->op_stateid); 3350 if (nfserr) 3351 return nfserr; 3352 p = xdr_reserve_space(xdr, 24); 3353 if (!p) 3354 return nfserr_resource; 3355 p = encode_cinfo(p, &open->op_cinfo); 3356 *p++ = cpu_to_be32(open->op_rflags); 3357 3358 nfserr = nfsd4_encode_bitmap(xdr, open->op_bmval[0], open->op_bmval[1], 3359 open->op_bmval[2]); 3360 if (nfserr) 3361 return nfserr; 3362 3363 p = xdr_reserve_space(xdr, 4); 3364 if (!p) 3365 return nfserr_resource; 3366 3367 *p++ = cpu_to_be32(open->op_delegate_type); 3368 switch (open->op_delegate_type) { 3369 case NFS4_OPEN_DELEGATE_NONE: 3370 break; 3371 case NFS4_OPEN_DELEGATE_READ: 3372 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid); 3373 if (nfserr) 3374 return nfserr; 3375 p = xdr_reserve_space(xdr, 20); 3376 if (!p) 3377 return nfserr_resource; 3378 *p++ = cpu_to_be32(open->op_recall); 3379 3380 /* 3381 * TODO: ACE's in delegations 3382 */ 3383 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 3384 *p++ = cpu_to_be32(0); 3385 *p++ = cpu_to_be32(0); 3386 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */ 3387 break; 3388 case NFS4_OPEN_DELEGATE_WRITE: 3389 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid); 3390 if (nfserr) 3391 return nfserr; 3392 p = xdr_reserve_space(xdr, 32); 3393 if (!p) 3394 return nfserr_resource; 3395 *p++ = cpu_to_be32(0); 3396 3397 /* 3398 * TODO: space_limit's in delegations 3399 */ 3400 *p++ = cpu_to_be32(NFS4_LIMIT_SIZE); 3401 *p++ = cpu_to_be32(~(u32)0); 3402 *p++ = cpu_to_be32(~(u32)0); 3403 3404 /* 3405 * TODO: ACE's in delegations 3406 */ 3407 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 3408 *p++ = cpu_to_be32(0); 3409 *p++ = cpu_to_be32(0); 3410 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */ 3411 break; 3412 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */ 3413 switch (open->op_why_no_deleg) { 3414 case WND4_CONTENTION: 3415 case WND4_RESOURCE: 3416 p = xdr_reserve_space(xdr, 8); 3417 if (!p) 3418 return nfserr_resource; 3419 *p++ = cpu_to_be32(open->op_why_no_deleg); 3420 /* deleg signaling not supported yet: */ 3421 *p++ = cpu_to_be32(0); 3422 break; 3423 default: 3424 p = xdr_reserve_space(xdr, 4); 3425 if (!p) 3426 return nfserr_resource; 3427 *p++ = cpu_to_be32(open->op_why_no_deleg); 3428 } 3429 break; 3430 default: 3431 BUG(); 3432 } 3433 /* XXX save filehandle here */ 3434 return 0; 3435 } 3436 3437 static __be32 3438 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc) 3439 { 3440 struct xdr_stream *xdr = &resp->xdr; 3441 3442 return nfsd4_encode_stateid(xdr, &oc->oc_resp_stateid); 3443 } 3444 3445 static __be32 3446 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od) 3447 { 3448 struct xdr_stream *xdr = &resp->xdr; 3449 3450 return nfsd4_encode_stateid(xdr, &od->od_stateid); 3451 } 3452 3453 static __be32 nfsd4_encode_splice_read( 3454 struct nfsd4_compoundres *resp, 3455 struct nfsd4_read *read, 3456 struct file *file, unsigned long maxcount) 3457 { 3458 struct xdr_stream *xdr = &resp->xdr; 3459 struct xdr_buf *buf = xdr->buf; 3460 u32 eof; 3461 long len; 3462 int space_left; 3463 __be32 nfserr; 3464 __be32 *p = xdr->p - 2; 3465 3466 /* Make sure there will be room for padding if needed */ 3467 if (xdr->end - xdr->p < 1) 3468 return nfserr_resource; 3469 3470 len = maxcount; 3471 nfserr = nfsd_splice_read(read->rd_rqstp, read->rd_fhp, 3472 file, read->rd_offset, &maxcount); 3473 read->rd_length = maxcount; 3474 if (nfserr) { 3475 /* 3476 * nfsd_splice_actor may have already messed with the 3477 * page length; reset it so as not to confuse 3478 * xdr_truncate_encode: 3479 */ 3480 buf->page_len = 0; 3481 return nfserr; 3482 } 3483 3484 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset, 3485 d_inode(read->rd_fhp->fh_dentry)->i_size); 3486 3487 *(p++) = htonl(eof); 3488 *(p++) = htonl(maxcount); 3489 3490 buf->page_len = maxcount; 3491 buf->len += maxcount; 3492 xdr->page_ptr += (buf->page_base + maxcount + PAGE_SIZE - 1) 3493 / PAGE_SIZE; 3494 3495 /* Use rest of head for padding and remaining ops: */ 3496 buf->tail[0].iov_base = xdr->p; 3497 buf->tail[0].iov_len = 0; 3498 xdr->iov = buf->tail; 3499 if (maxcount&3) { 3500 int pad = 4 - (maxcount&3); 3501 3502 *(xdr->p++) = 0; 3503 3504 buf->tail[0].iov_base += maxcount&3; 3505 buf->tail[0].iov_len = pad; 3506 buf->len += pad; 3507 } 3508 3509 space_left = min_t(int, (void *)xdr->end - (void *)xdr->p, 3510 buf->buflen - buf->len); 3511 buf->buflen = buf->len + space_left; 3512 xdr->end = (__be32 *)((void *)xdr->end + space_left); 3513 3514 return 0; 3515 } 3516 3517 static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp, 3518 struct nfsd4_read *read, 3519 struct file *file, unsigned long maxcount) 3520 { 3521 struct xdr_stream *xdr = &resp->xdr; 3522 u32 eof; 3523 int v; 3524 int starting_len = xdr->buf->len - 8; 3525 long len; 3526 int thislen; 3527 __be32 nfserr; 3528 __be32 tmp; 3529 __be32 *p; 3530 u32 zzz = 0; 3531 int pad; 3532 3533 len = maxcount; 3534 v = 0; 3535 3536 thislen = min_t(long, len, ((void *)xdr->end - (void *)xdr->p)); 3537 p = xdr_reserve_space(xdr, (thislen+3)&~3); 3538 WARN_ON_ONCE(!p); 3539 resp->rqstp->rq_vec[v].iov_base = p; 3540 resp->rqstp->rq_vec[v].iov_len = thislen; 3541 v++; 3542 len -= thislen; 3543 3544 while (len) { 3545 thislen = min_t(long, len, PAGE_SIZE); 3546 p = xdr_reserve_space(xdr, (thislen+3)&~3); 3547 WARN_ON_ONCE(!p); 3548 resp->rqstp->rq_vec[v].iov_base = p; 3549 resp->rqstp->rq_vec[v].iov_len = thislen; 3550 v++; 3551 len -= thislen; 3552 } 3553 read->rd_vlen = v; 3554 3555 len = maxcount; 3556 nfserr = nfsd_readv(resp->rqstp, read->rd_fhp, file, read->rd_offset, 3557 resp->rqstp->rq_vec, read->rd_vlen, &maxcount); 3558 read->rd_length = maxcount; 3559 if (nfserr) 3560 return nfserr; 3561 xdr_truncate_encode(xdr, starting_len + 8 + ((maxcount+3)&~3)); 3562 3563 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset, 3564 d_inode(read->rd_fhp->fh_dentry)->i_size); 3565 3566 tmp = htonl(eof); 3567 write_bytes_to_xdr_buf(xdr->buf, starting_len , &tmp, 4); 3568 tmp = htonl(maxcount); 3569 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4); 3570 3571 pad = (maxcount&3) ? 4 - (maxcount&3) : 0; 3572 write_bytes_to_xdr_buf(xdr->buf, starting_len + 8 + maxcount, 3573 &zzz, pad); 3574 return 0; 3575 3576 } 3577 3578 static __be32 3579 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr, 3580 struct nfsd4_read *read) 3581 { 3582 unsigned long maxcount; 3583 struct xdr_stream *xdr = &resp->xdr; 3584 struct file *file = read->rd_filp; 3585 int starting_len = xdr->buf->len; 3586 struct raparms *ra = NULL; 3587 __be32 *p; 3588 3589 p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */ 3590 if (!p) { 3591 WARN_ON_ONCE(test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)); 3592 return nfserr_resource; 3593 } 3594 if (resp->xdr.buf->page_len && 3595 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) { 3596 WARN_ON_ONCE(1); 3597 return nfserr_resource; 3598 } 3599 xdr_commit_encode(xdr); 3600 3601 maxcount = svc_max_payload(resp->rqstp); 3602 maxcount = min_t(unsigned long, maxcount, 3603 (xdr->buf->buflen - xdr->buf->len)); 3604 maxcount = min_t(unsigned long, maxcount, read->rd_length); 3605 3606 if (read->rd_tmp_file) 3607 ra = nfsd_init_raparms(file); 3608 3609 if (file->f_op->splice_read && 3610 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) 3611 nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount); 3612 else 3613 nfserr = nfsd4_encode_readv(resp, read, file, maxcount); 3614 3615 if (ra) 3616 nfsd_put_raparams(file, ra); 3617 3618 if (nfserr) 3619 xdr_truncate_encode(xdr, starting_len); 3620 3621 return nfserr; 3622 } 3623 3624 static __be32 3625 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink) 3626 { 3627 int maxcount; 3628 __be32 wire_count; 3629 int zero = 0; 3630 struct xdr_stream *xdr = &resp->xdr; 3631 int length_offset = xdr->buf->len; 3632 __be32 *p; 3633 3634 p = xdr_reserve_space(xdr, 4); 3635 if (!p) 3636 return nfserr_resource; 3637 maxcount = PAGE_SIZE; 3638 3639 p = xdr_reserve_space(xdr, maxcount); 3640 if (!p) 3641 return nfserr_resource; 3642 /* 3643 * XXX: By default, vfs_readlink() will truncate symlinks if they 3644 * would overflow the buffer. Is this kosher in NFSv4? If not, one 3645 * easy fix is: if vfs_readlink() precisely fills the buffer, assume 3646 * that truncation occurred, and return NFS4ERR_RESOURCE. 3647 */ 3648 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, 3649 (char *)p, &maxcount); 3650 if (nfserr == nfserr_isdir) 3651 nfserr = nfserr_inval; 3652 if (nfserr) { 3653 xdr_truncate_encode(xdr, length_offset); 3654 return nfserr; 3655 } 3656 3657 wire_count = htonl(maxcount); 3658 write_bytes_to_xdr_buf(xdr->buf, length_offset, &wire_count, 4); 3659 xdr_truncate_encode(xdr, length_offset + 4 + ALIGN(maxcount, 4)); 3660 if (maxcount & 3) 3661 write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount, 3662 &zero, 4 - (maxcount&3)); 3663 return 0; 3664 } 3665 3666 static __be32 3667 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir) 3668 { 3669 int maxcount; 3670 int bytes_left; 3671 loff_t offset; 3672 __be64 wire_offset; 3673 struct xdr_stream *xdr = &resp->xdr; 3674 int starting_len = xdr->buf->len; 3675 __be32 *p; 3676 3677 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE); 3678 if (!p) 3679 return nfserr_resource; 3680 3681 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */ 3682 *p++ = cpu_to_be32(0); 3683 *p++ = cpu_to_be32(0); 3684 resp->xdr.buf->head[0].iov_len = ((char *)resp->xdr.p) 3685 - (char *)resp->xdr.buf->head[0].iov_base; 3686 3687 /* 3688 * Number of bytes left for directory entries allowing for the 3689 * final 8 bytes of the readdir and a following failed op: 3690 */ 3691 bytes_left = xdr->buf->buflen - xdr->buf->len 3692 - COMPOUND_ERR_SLACK_SPACE - 8; 3693 if (bytes_left < 0) { 3694 nfserr = nfserr_resource; 3695 goto err_no_verf; 3696 } 3697 maxcount = svc_max_payload(resp->rqstp); 3698 maxcount = min_t(u32, readdir->rd_maxcount, maxcount); 3699 /* 3700 * Note the rfc defines rd_maxcount as the size of the 3701 * READDIR4resok structure, which includes the verifier above 3702 * and the 8 bytes encoded at the end of this function: 3703 */ 3704 if (maxcount < 16) { 3705 nfserr = nfserr_toosmall; 3706 goto err_no_verf; 3707 } 3708 maxcount = min_t(int, maxcount-16, bytes_left); 3709 3710 /* RFC 3530 14.2.24 allows us to ignore dircount when it's 0: */ 3711 if (!readdir->rd_dircount) 3712 readdir->rd_dircount = svc_max_payload(resp->rqstp); 3713 3714 readdir->xdr = xdr; 3715 readdir->rd_maxcount = maxcount; 3716 readdir->common.err = 0; 3717 readdir->cookie_offset = 0; 3718 3719 offset = readdir->rd_cookie; 3720 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, 3721 &offset, 3722 &readdir->common, nfsd4_encode_dirent); 3723 if (nfserr == nfs_ok && 3724 readdir->common.err == nfserr_toosmall && 3725 xdr->buf->len == starting_len + 8) { 3726 /* nothing encoded; which limit did we hit?: */ 3727 if (maxcount - 16 < bytes_left) 3728 /* It was the fault of rd_maxcount: */ 3729 nfserr = nfserr_toosmall; 3730 else 3731 /* We ran out of buffer space: */ 3732 nfserr = nfserr_resource; 3733 } 3734 if (nfserr) 3735 goto err_no_verf; 3736 3737 if (readdir->cookie_offset) { 3738 wire_offset = cpu_to_be64(offset); 3739 write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset, 3740 &wire_offset, 8); 3741 } 3742 3743 p = xdr_reserve_space(xdr, 8); 3744 if (!p) { 3745 WARN_ON_ONCE(1); 3746 goto err_no_verf; 3747 } 3748 *p++ = 0; /* no more entries */ 3749 *p++ = htonl(readdir->common.err == nfserr_eof); 3750 3751 return 0; 3752 err_no_verf: 3753 xdr_truncate_encode(xdr, starting_len); 3754 return nfserr; 3755 } 3756 3757 static __be32 3758 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove) 3759 { 3760 struct xdr_stream *xdr = &resp->xdr; 3761 __be32 *p; 3762 3763 p = xdr_reserve_space(xdr, 20); 3764 if (!p) 3765 return nfserr_resource; 3766 p = encode_cinfo(p, &remove->rm_cinfo); 3767 return 0; 3768 } 3769 3770 static __be32 3771 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename) 3772 { 3773 struct xdr_stream *xdr = &resp->xdr; 3774 __be32 *p; 3775 3776 p = xdr_reserve_space(xdr, 40); 3777 if (!p) 3778 return nfserr_resource; 3779 p = encode_cinfo(p, &rename->rn_sinfo); 3780 p = encode_cinfo(p, &rename->rn_tinfo); 3781 return 0; 3782 } 3783 3784 static __be32 3785 nfsd4_do_encode_secinfo(struct xdr_stream *xdr, struct svc_export *exp) 3786 { 3787 u32 i, nflavs, supported; 3788 struct exp_flavor_info *flavs; 3789 struct exp_flavor_info def_flavs[2]; 3790 __be32 *p, *flavorsp; 3791 static bool report = true; 3792 3793 if (exp->ex_nflavors) { 3794 flavs = exp->ex_flavors; 3795 nflavs = exp->ex_nflavors; 3796 } else { /* Handling of some defaults in absence of real secinfo: */ 3797 flavs = def_flavs; 3798 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) { 3799 nflavs = 2; 3800 flavs[0].pseudoflavor = RPC_AUTH_UNIX; 3801 flavs[1].pseudoflavor = RPC_AUTH_NULL; 3802 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) { 3803 nflavs = 1; 3804 flavs[0].pseudoflavor 3805 = svcauth_gss_flavor(exp->ex_client); 3806 } else { 3807 nflavs = 1; 3808 flavs[0].pseudoflavor 3809 = exp->ex_client->flavour->flavour; 3810 } 3811 } 3812 3813 supported = 0; 3814 p = xdr_reserve_space(xdr, 4); 3815 if (!p) 3816 return nfserr_resource; 3817 flavorsp = p++; /* to be backfilled later */ 3818 3819 for (i = 0; i < nflavs; i++) { 3820 rpc_authflavor_t pf = flavs[i].pseudoflavor; 3821 struct rpcsec_gss_info info; 3822 3823 if (rpcauth_get_gssinfo(pf, &info) == 0) { 3824 supported++; 3825 p = xdr_reserve_space(xdr, 4 + 4 + 3826 XDR_LEN(info.oid.len) + 4 + 4); 3827 if (!p) 3828 return nfserr_resource; 3829 *p++ = cpu_to_be32(RPC_AUTH_GSS); 3830 p = xdr_encode_opaque(p, info.oid.data, info.oid.len); 3831 *p++ = cpu_to_be32(info.qop); 3832 *p++ = cpu_to_be32(info.service); 3833 } else if (pf < RPC_AUTH_MAXFLAVOR) { 3834 supported++; 3835 p = xdr_reserve_space(xdr, 4); 3836 if (!p) 3837 return nfserr_resource; 3838 *p++ = cpu_to_be32(pf); 3839 } else { 3840 if (report) 3841 pr_warn("NFS: SECINFO: security flavor %u " 3842 "is not supported\n", pf); 3843 } 3844 } 3845 3846 if (nflavs != supported) 3847 report = false; 3848 *flavorsp = htonl(supported); 3849 return 0; 3850 } 3851 3852 static __be32 3853 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 3854 struct nfsd4_secinfo *secinfo) 3855 { 3856 struct xdr_stream *xdr = &resp->xdr; 3857 3858 return nfsd4_do_encode_secinfo(xdr, secinfo->si_exp); 3859 } 3860 3861 static __be32 3862 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr, 3863 struct nfsd4_secinfo_no_name *secinfo) 3864 { 3865 struct xdr_stream *xdr = &resp->xdr; 3866 3867 return nfsd4_do_encode_secinfo(xdr, secinfo->sin_exp); 3868 } 3869 3870 /* 3871 * The SETATTR encode routine is special -- it always encodes a bitmap, 3872 * regardless of the error status. 3873 */ 3874 static __be32 3875 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr) 3876 { 3877 struct xdr_stream *xdr = &resp->xdr; 3878 __be32 *p; 3879 3880 p = xdr_reserve_space(xdr, 16); 3881 if (!p) 3882 return nfserr_resource; 3883 if (nfserr) { 3884 *p++ = cpu_to_be32(3); 3885 *p++ = cpu_to_be32(0); 3886 *p++ = cpu_to_be32(0); 3887 *p++ = cpu_to_be32(0); 3888 } 3889 else { 3890 *p++ = cpu_to_be32(3); 3891 *p++ = cpu_to_be32(setattr->sa_bmval[0]); 3892 *p++ = cpu_to_be32(setattr->sa_bmval[1]); 3893 *p++ = cpu_to_be32(setattr->sa_bmval[2]); 3894 } 3895 return nfserr; 3896 } 3897 3898 static __be32 3899 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd) 3900 { 3901 struct xdr_stream *xdr = &resp->xdr; 3902 __be32 *p; 3903 3904 if (!nfserr) { 3905 p = xdr_reserve_space(xdr, 8 + NFS4_VERIFIER_SIZE); 3906 if (!p) 3907 return nfserr_resource; 3908 p = xdr_encode_opaque_fixed(p, &scd->se_clientid, 8); 3909 p = xdr_encode_opaque_fixed(p, &scd->se_confirm, 3910 NFS4_VERIFIER_SIZE); 3911 } 3912 else if (nfserr == nfserr_clid_inuse) { 3913 p = xdr_reserve_space(xdr, 8); 3914 if (!p) 3915 return nfserr_resource; 3916 *p++ = cpu_to_be32(0); 3917 *p++ = cpu_to_be32(0); 3918 } 3919 return nfserr; 3920 } 3921 3922 static __be32 3923 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write) 3924 { 3925 struct xdr_stream *xdr = &resp->xdr; 3926 __be32 *p; 3927 3928 p = xdr_reserve_space(xdr, 16); 3929 if (!p) 3930 return nfserr_resource; 3931 *p++ = cpu_to_be32(write->wr_bytes_written); 3932 *p++ = cpu_to_be32(write->wr_how_written); 3933 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data, 3934 NFS4_VERIFIER_SIZE); 3935 return 0; 3936 } 3937 3938 static __be32 3939 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr, 3940 struct nfsd4_exchange_id *exid) 3941 { 3942 struct xdr_stream *xdr = &resp->xdr; 3943 __be32 *p; 3944 char *major_id; 3945 char *server_scope; 3946 int major_id_sz; 3947 int server_scope_sz; 3948 uint64_t minor_id = 0; 3949 3950 major_id = utsname()->nodename; 3951 major_id_sz = strlen(major_id); 3952 server_scope = utsname()->nodename; 3953 server_scope_sz = strlen(server_scope); 3954 3955 p = xdr_reserve_space(xdr, 3956 8 /* eir_clientid */ + 3957 4 /* eir_sequenceid */ + 3958 4 /* eir_flags */ + 3959 4 /* spr_how */); 3960 if (!p) 3961 return nfserr_resource; 3962 3963 p = xdr_encode_opaque_fixed(p, &exid->clientid, 8); 3964 *p++ = cpu_to_be32(exid->seqid); 3965 *p++ = cpu_to_be32(exid->flags); 3966 3967 *p++ = cpu_to_be32(exid->spa_how); 3968 3969 switch (exid->spa_how) { 3970 case SP4_NONE: 3971 break; 3972 case SP4_MACH_CRED: 3973 /* spo_must_enforce bitmap: */ 3974 nfserr = nfsd4_encode_bitmap(xdr, 3975 exid->spo_must_enforce[0], 3976 exid->spo_must_enforce[1], 3977 exid->spo_must_enforce[2]); 3978 if (nfserr) 3979 return nfserr; 3980 /* spo_must_allow bitmap: */ 3981 nfserr = nfsd4_encode_bitmap(xdr, 3982 exid->spo_must_allow[0], 3983 exid->spo_must_allow[1], 3984 exid->spo_must_allow[2]); 3985 if (nfserr) 3986 return nfserr; 3987 break; 3988 default: 3989 WARN_ON_ONCE(1); 3990 } 3991 3992 p = xdr_reserve_space(xdr, 3993 8 /* so_minor_id */ + 3994 4 /* so_major_id.len */ + 3995 (XDR_QUADLEN(major_id_sz) * 4) + 3996 4 /* eir_server_scope.len */ + 3997 (XDR_QUADLEN(server_scope_sz) * 4) + 3998 4 /* eir_server_impl_id.count (0) */); 3999 if (!p) 4000 return nfserr_resource; 4001 4002 /* The server_owner struct */ 4003 p = xdr_encode_hyper(p, minor_id); /* Minor id */ 4004 /* major id */ 4005 p = xdr_encode_opaque(p, major_id, major_id_sz); 4006 4007 /* Server scope */ 4008 p = xdr_encode_opaque(p, server_scope, server_scope_sz); 4009 4010 /* Implementation id */ 4011 *p++ = cpu_to_be32(0); /* zero length nfs_impl_id4 array */ 4012 return 0; 4013 } 4014 4015 static __be32 4016 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr, 4017 struct nfsd4_create_session *sess) 4018 { 4019 struct xdr_stream *xdr = &resp->xdr; 4020 __be32 *p; 4021 4022 p = xdr_reserve_space(xdr, 24); 4023 if (!p) 4024 return nfserr_resource; 4025 p = xdr_encode_opaque_fixed(p, sess->sessionid.data, 4026 NFS4_MAX_SESSIONID_LEN); 4027 *p++ = cpu_to_be32(sess->seqid); 4028 *p++ = cpu_to_be32(sess->flags); 4029 4030 p = xdr_reserve_space(xdr, 28); 4031 if (!p) 4032 return nfserr_resource; 4033 *p++ = cpu_to_be32(0); /* headerpadsz */ 4034 *p++ = cpu_to_be32(sess->fore_channel.maxreq_sz); 4035 *p++ = cpu_to_be32(sess->fore_channel.maxresp_sz); 4036 *p++ = cpu_to_be32(sess->fore_channel.maxresp_cached); 4037 *p++ = cpu_to_be32(sess->fore_channel.maxops); 4038 *p++ = cpu_to_be32(sess->fore_channel.maxreqs); 4039 *p++ = cpu_to_be32(sess->fore_channel.nr_rdma_attrs); 4040 4041 if (sess->fore_channel.nr_rdma_attrs) { 4042 p = xdr_reserve_space(xdr, 4); 4043 if (!p) 4044 return nfserr_resource; 4045 *p++ = cpu_to_be32(sess->fore_channel.rdma_attrs); 4046 } 4047 4048 p = xdr_reserve_space(xdr, 28); 4049 if (!p) 4050 return nfserr_resource; 4051 *p++ = cpu_to_be32(0); /* headerpadsz */ 4052 *p++ = cpu_to_be32(sess->back_channel.maxreq_sz); 4053 *p++ = cpu_to_be32(sess->back_channel.maxresp_sz); 4054 *p++ = cpu_to_be32(sess->back_channel.maxresp_cached); 4055 *p++ = cpu_to_be32(sess->back_channel.maxops); 4056 *p++ = cpu_to_be32(sess->back_channel.maxreqs); 4057 *p++ = cpu_to_be32(sess->back_channel.nr_rdma_attrs); 4058 4059 if (sess->back_channel.nr_rdma_attrs) { 4060 p = xdr_reserve_space(xdr, 4); 4061 if (!p) 4062 return nfserr_resource; 4063 *p++ = cpu_to_be32(sess->back_channel.rdma_attrs); 4064 } 4065 return 0; 4066 } 4067 4068 static __be32 4069 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr, 4070 struct nfsd4_sequence *seq) 4071 { 4072 struct xdr_stream *xdr = &resp->xdr; 4073 __be32 *p; 4074 4075 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 20); 4076 if (!p) 4077 return nfserr_resource; 4078 p = xdr_encode_opaque_fixed(p, seq->sessionid.data, 4079 NFS4_MAX_SESSIONID_LEN); 4080 *p++ = cpu_to_be32(seq->seqid); 4081 *p++ = cpu_to_be32(seq->slotid); 4082 /* Note slotid's are numbered from zero: */ 4083 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_highest_slotid */ 4084 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_target_highest_slotid */ 4085 *p++ = cpu_to_be32(seq->status_flags); 4086 4087 resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */ 4088 return 0; 4089 } 4090 4091 static __be32 4092 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr, 4093 struct nfsd4_test_stateid *test_stateid) 4094 { 4095 struct xdr_stream *xdr = &resp->xdr; 4096 struct nfsd4_test_stateid_id *stateid, *next; 4097 __be32 *p; 4098 4099 p = xdr_reserve_space(xdr, 4 + (4 * test_stateid->ts_num_ids)); 4100 if (!p) 4101 return nfserr_resource; 4102 *p++ = htonl(test_stateid->ts_num_ids); 4103 4104 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) { 4105 *p++ = stateid->ts_id_status; 4106 } 4107 4108 return 0; 4109 } 4110 4111 #ifdef CONFIG_NFSD_PNFS 4112 static __be32 4113 nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 4114 struct nfsd4_getdeviceinfo *gdev) 4115 { 4116 struct xdr_stream *xdr = &resp->xdr; 4117 const struct nfsd4_layout_ops *ops; 4118 u32 starting_len = xdr->buf->len, needed_len; 4119 __be32 *p; 4120 4121 p = xdr_reserve_space(xdr, 4); 4122 if (!p) 4123 return nfserr_resource; 4124 4125 *p++ = cpu_to_be32(gdev->gd_layout_type); 4126 4127 /* If maxcount is 0 then just update notifications */ 4128 if (gdev->gd_maxcount != 0) { 4129 ops = nfsd4_layout_ops[gdev->gd_layout_type]; 4130 nfserr = ops->encode_getdeviceinfo(xdr, gdev); 4131 if (nfserr) { 4132 /* 4133 * We don't bother to burden the layout drivers with 4134 * enforcing gd_maxcount, just tell the client to 4135 * come back with a bigger buffer if it's not enough. 4136 */ 4137 if (xdr->buf->len + 4 > gdev->gd_maxcount) 4138 goto toosmall; 4139 return nfserr; 4140 } 4141 } 4142 4143 if (gdev->gd_notify_types) { 4144 p = xdr_reserve_space(xdr, 4 + 4); 4145 if (!p) 4146 return nfserr_resource; 4147 *p++ = cpu_to_be32(1); /* bitmap length */ 4148 *p++ = cpu_to_be32(gdev->gd_notify_types); 4149 } else { 4150 p = xdr_reserve_space(xdr, 4); 4151 if (!p) 4152 return nfserr_resource; 4153 *p++ = 0; 4154 } 4155 4156 return 0; 4157 toosmall: 4158 dprintk("%s: maxcount too small\n", __func__); 4159 needed_len = xdr->buf->len + 4 /* notifications */; 4160 xdr_truncate_encode(xdr, starting_len); 4161 p = xdr_reserve_space(xdr, 4); 4162 if (!p) 4163 return nfserr_resource; 4164 *p++ = cpu_to_be32(needed_len); 4165 return nfserr_toosmall; 4166 } 4167 4168 static __be32 4169 nfsd4_encode_layoutget(struct nfsd4_compoundres *resp, __be32 nfserr, 4170 struct nfsd4_layoutget *lgp) 4171 { 4172 struct xdr_stream *xdr = &resp->xdr; 4173 const struct nfsd4_layout_ops *ops; 4174 __be32 *p; 4175 4176 p = xdr_reserve_space(xdr, 36 + sizeof(stateid_opaque_t)); 4177 if (!p) 4178 return nfserr_resource; 4179 4180 *p++ = cpu_to_be32(1); /* we always set return-on-close */ 4181 *p++ = cpu_to_be32(lgp->lg_sid.si_generation); 4182 p = xdr_encode_opaque_fixed(p, &lgp->lg_sid.si_opaque, 4183 sizeof(stateid_opaque_t)); 4184 4185 *p++ = cpu_to_be32(1); /* we always return a single layout */ 4186 p = xdr_encode_hyper(p, lgp->lg_seg.offset); 4187 p = xdr_encode_hyper(p, lgp->lg_seg.length); 4188 *p++ = cpu_to_be32(lgp->lg_seg.iomode); 4189 *p++ = cpu_to_be32(lgp->lg_layout_type); 4190 4191 ops = nfsd4_layout_ops[lgp->lg_layout_type]; 4192 return ops->encode_layoutget(xdr, lgp); 4193 } 4194 4195 static __be32 4196 nfsd4_encode_layoutcommit(struct nfsd4_compoundres *resp, __be32 nfserr, 4197 struct nfsd4_layoutcommit *lcp) 4198 { 4199 struct xdr_stream *xdr = &resp->xdr; 4200 __be32 *p; 4201 4202 p = xdr_reserve_space(xdr, 4); 4203 if (!p) 4204 return nfserr_resource; 4205 *p++ = cpu_to_be32(lcp->lc_size_chg); 4206 if (lcp->lc_size_chg) { 4207 p = xdr_reserve_space(xdr, 8); 4208 if (!p) 4209 return nfserr_resource; 4210 p = xdr_encode_hyper(p, lcp->lc_newsize); 4211 } 4212 4213 return 0; 4214 } 4215 4216 static __be32 4217 nfsd4_encode_layoutreturn(struct nfsd4_compoundres *resp, __be32 nfserr, 4218 struct nfsd4_layoutreturn *lrp) 4219 { 4220 struct xdr_stream *xdr = &resp->xdr; 4221 __be32 *p; 4222 4223 p = xdr_reserve_space(xdr, 4); 4224 if (!p) 4225 return nfserr_resource; 4226 *p++ = cpu_to_be32(lrp->lrs_present); 4227 if (lrp->lrs_present) 4228 return nfsd4_encode_stateid(xdr, &lrp->lr_sid); 4229 return 0; 4230 } 4231 #endif /* CONFIG_NFSD_PNFS */ 4232 4233 static __be32 4234 nfsd42_encode_write_res(struct nfsd4_compoundres *resp, 4235 struct nfsd42_write_res *write, bool sync) 4236 { 4237 __be32 *p; 4238 p = xdr_reserve_space(&resp->xdr, 4); 4239 if (!p) 4240 return nfserr_resource; 4241 4242 if (sync) 4243 *p++ = cpu_to_be32(0); 4244 else { 4245 __be32 nfserr; 4246 *p++ = cpu_to_be32(1); 4247 nfserr = nfsd4_encode_stateid(&resp->xdr, &write->cb_stateid); 4248 if (nfserr) 4249 return nfserr; 4250 } 4251 p = xdr_reserve_space(&resp->xdr, 8 + 4 + NFS4_VERIFIER_SIZE); 4252 if (!p) 4253 return nfserr_resource; 4254 4255 p = xdr_encode_hyper(p, write->wr_bytes_written); 4256 *p++ = cpu_to_be32(write->wr_stable_how); 4257 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data, 4258 NFS4_VERIFIER_SIZE); 4259 return nfs_ok; 4260 } 4261 4262 static __be32 4263 nfsd4_encode_copy(struct nfsd4_compoundres *resp, __be32 nfserr, 4264 struct nfsd4_copy *copy) 4265 { 4266 __be32 *p; 4267 4268 nfserr = nfsd42_encode_write_res(resp, ©->cp_res, 4269 copy->cp_synchronous); 4270 if (nfserr) 4271 return nfserr; 4272 4273 p = xdr_reserve_space(&resp->xdr, 4 + 4); 4274 *p++ = xdr_one; /* cr_consecutive */ 4275 *p++ = cpu_to_be32(copy->cp_synchronous); 4276 return 0; 4277 } 4278 4279 static __be32 4280 nfsd4_encode_offload_status(struct nfsd4_compoundres *resp, __be32 nfserr, 4281 struct nfsd4_offload_status *os) 4282 { 4283 struct xdr_stream *xdr = &resp->xdr; 4284 __be32 *p; 4285 4286 p = xdr_reserve_space(xdr, 8 + 4); 4287 if (!p) 4288 return nfserr_resource; 4289 p = xdr_encode_hyper(p, os->count); 4290 *p++ = cpu_to_be32(0); 4291 4292 return nfserr; 4293 } 4294 4295 static __be32 4296 nfsd4_encode_seek(struct nfsd4_compoundres *resp, __be32 nfserr, 4297 struct nfsd4_seek *seek) 4298 { 4299 __be32 *p; 4300 4301 p = xdr_reserve_space(&resp->xdr, 4 + 8); 4302 *p++ = cpu_to_be32(seek->seek_eof); 4303 p = xdr_encode_hyper(p, seek->seek_pos); 4304 4305 return 0; 4306 } 4307 4308 static __be32 4309 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p) 4310 { 4311 return nfserr; 4312 } 4313 4314 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *); 4315 4316 /* 4317 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1 4318 * since we don't need to filter out obsolete ops as this is 4319 * done in the decoding phase. 4320 */ 4321 static const nfsd4_enc nfsd4_enc_ops[] = { 4322 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access, 4323 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close, 4324 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit, 4325 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create, 4326 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop, 4327 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop, 4328 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr, 4329 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh, 4330 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link, 4331 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock, 4332 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt, 4333 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku, 4334 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop, 4335 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop, 4336 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop, 4337 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open, 4338 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop, 4339 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm, 4340 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade, 4341 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop, 4342 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop, 4343 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop, 4344 [OP_READ] = (nfsd4_enc)nfsd4_encode_read, 4345 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir, 4346 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink, 4347 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove, 4348 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename, 4349 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop, 4350 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop, 4351 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop, 4352 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo, 4353 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr, 4354 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid, 4355 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop, 4356 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop, 4357 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write, 4358 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop, 4359 4360 /* NFSv4.1 operations */ 4361 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop, 4362 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session, 4363 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id, 4364 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session, 4365 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_noop, 4366 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_noop, 4367 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 4368 #ifdef CONFIG_NFSD_PNFS 4369 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_getdeviceinfo, 4370 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 4371 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_layoutcommit, 4372 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_layoutget, 4373 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_layoutreturn, 4374 #else 4375 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop, 4376 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 4377 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop, 4378 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop, 4379 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop, 4380 #endif 4381 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name, 4382 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence, 4383 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop, 4384 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid, 4385 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 4386 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop, 4387 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop, 4388 4389 /* NFSv4.2 operations */ 4390 [OP_ALLOCATE] = (nfsd4_enc)nfsd4_encode_noop, 4391 [OP_COPY] = (nfsd4_enc)nfsd4_encode_copy, 4392 [OP_COPY_NOTIFY] = (nfsd4_enc)nfsd4_encode_noop, 4393 [OP_DEALLOCATE] = (nfsd4_enc)nfsd4_encode_noop, 4394 [OP_IO_ADVISE] = (nfsd4_enc)nfsd4_encode_noop, 4395 [OP_LAYOUTERROR] = (nfsd4_enc)nfsd4_encode_noop, 4396 [OP_LAYOUTSTATS] = (nfsd4_enc)nfsd4_encode_noop, 4397 [OP_OFFLOAD_CANCEL] = (nfsd4_enc)nfsd4_encode_noop, 4398 [OP_OFFLOAD_STATUS] = (nfsd4_enc)nfsd4_encode_offload_status, 4399 [OP_READ_PLUS] = (nfsd4_enc)nfsd4_encode_noop, 4400 [OP_SEEK] = (nfsd4_enc)nfsd4_encode_seek, 4401 [OP_WRITE_SAME] = (nfsd4_enc)nfsd4_encode_noop, 4402 [OP_CLONE] = (nfsd4_enc)nfsd4_encode_noop, 4403 }; 4404 4405 /* 4406 * Calculate whether we still have space to encode repsize bytes. 4407 * There are two considerations: 4408 * - For NFS versions >=4.1, the size of the reply must stay within 4409 * session limits 4410 * - For all NFS versions, we must stay within limited preallocated 4411 * buffer space. 4412 * 4413 * This is called before the operation is processed, so can only provide 4414 * an upper estimate. For some nonidempotent operations (such as 4415 * getattr), it's not necessarily a problem if that estimate is wrong, 4416 * as we can fail it after processing without significant side effects. 4417 */ 4418 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize) 4419 { 4420 struct xdr_buf *buf = &resp->rqstp->rq_res; 4421 struct nfsd4_slot *slot = resp->cstate.slot; 4422 4423 if (buf->len + respsize <= buf->buflen) 4424 return nfs_ok; 4425 if (!nfsd4_has_session(&resp->cstate)) 4426 return nfserr_resource; 4427 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) { 4428 WARN_ON_ONCE(1); 4429 return nfserr_rep_too_big_to_cache; 4430 } 4431 return nfserr_rep_too_big; 4432 } 4433 4434 void 4435 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 4436 { 4437 struct xdr_stream *xdr = &resp->xdr; 4438 struct nfs4_stateowner *so = resp->cstate.replay_owner; 4439 struct svc_rqst *rqstp = resp->rqstp; 4440 const struct nfsd4_operation *opdesc = op->opdesc; 4441 int post_err_offset; 4442 nfsd4_enc encoder; 4443 __be32 *p; 4444 4445 p = xdr_reserve_space(xdr, 8); 4446 if (!p) { 4447 WARN_ON_ONCE(1); 4448 return; 4449 } 4450 *p++ = cpu_to_be32(op->opnum); 4451 post_err_offset = xdr->buf->len; 4452 4453 if (op->opnum == OP_ILLEGAL) 4454 goto status; 4455 if (op->status && opdesc && 4456 !(opdesc->op_flags & OP_NONTRIVIAL_ERROR_ENCODE)) 4457 goto status; 4458 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) || 4459 !nfsd4_enc_ops[op->opnum]); 4460 encoder = nfsd4_enc_ops[op->opnum]; 4461 op->status = encoder(resp, op->status, &op->u); 4462 if (opdesc && opdesc->op_release) 4463 opdesc->op_release(&op->u); 4464 xdr_commit_encode(xdr); 4465 4466 /* nfsd4_check_resp_size guarantees enough room for error status */ 4467 if (!op->status) { 4468 int space_needed = 0; 4469 if (!nfsd4_last_compound_op(rqstp)) 4470 space_needed = COMPOUND_ERR_SLACK_SPACE; 4471 op->status = nfsd4_check_resp_size(resp, space_needed); 4472 } 4473 if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) { 4474 struct nfsd4_slot *slot = resp->cstate.slot; 4475 4476 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) 4477 op->status = nfserr_rep_too_big_to_cache; 4478 else 4479 op->status = nfserr_rep_too_big; 4480 } 4481 if (op->status == nfserr_resource || 4482 op->status == nfserr_rep_too_big || 4483 op->status == nfserr_rep_too_big_to_cache) { 4484 /* 4485 * The operation may have already been encoded or 4486 * partially encoded. No op returns anything additional 4487 * in the case of one of these three errors, so we can 4488 * just truncate back to after the status. But it's a 4489 * bug if we had to do this on a non-idempotent op: 4490 */ 4491 warn_on_nonidempotent_op(op); 4492 xdr_truncate_encode(xdr, post_err_offset); 4493 } 4494 if (so) { 4495 int len = xdr->buf->len - post_err_offset; 4496 4497 so->so_replay.rp_status = op->status; 4498 so->so_replay.rp_buflen = len; 4499 read_bytes_from_xdr_buf(xdr->buf, post_err_offset, 4500 so->so_replay.rp_buf, len); 4501 } 4502 status: 4503 /* Note that op->status is already in network byte order: */ 4504 write_bytes_to_xdr_buf(xdr->buf, post_err_offset - 4, &op->status, 4); 4505 } 4506 4507 /* 4508 * Encode the reply stored in the stateowner reply cache 4509 * 4510 * XDR note: do not encode rp->rp_buflen: the buffer contains the 4511 * previously sent already encoded operation. 4512 */ 4513 void 4514 nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op) 4515 { 4516 __be32 *p; 4517 struct nfs4_replay *rp = op->replay; 4518 4519 BUG_ON(!rp); 4520 4521 p = xdr_reserve_space(xdr, 8 + rp->rp_buflen); 4522 if (!p) { 4523 WARN_ON_ONCE(1); 4524 return; 4525 } 4526 *p++ = cpu_to_be32(op->opnum); 4527 *p++ = rp->rp_status; /* already xdr'ed */ 4528 4529 p = xdr_encode_opaque_fixed(p, rp->rp_buf, rp->rp_buflen); 4530 } 4531 4532 int 4533 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p) 4534 { 4535 return xdr_ressize_check(rqstp, p); 4536 } 4537 4538 void nfsd4_release_compoundargs(struct svc_rqst *rqstp) 4539 { 4540 struct nfsd4_compoundargs *args = rqstp->rq_argp; 4541 4542 if (args->ops != args->iops) { 4543 kfree(args->ops); 4544 args->ops = args->iops; 4545 } 4546 kfree(args->tmpp); 4547 args->tmpp = NULL; 4548 while (args->to_free) { 4549 struct svcxdr_tmpbuf *tb = args->to_free; 4550 args->to_free = tb->next; 4551 kfree(tb); 4552 } 4553 } 4554 4555 int 4556 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p) 4557 { 4558 struct nfsd4_compoundargs *args = rqstp->rq_argp; 4559 4560 if (rqstp->rq_arg.head[0].iov_len % 4) { 4561 /* client is nuts */ 4562 dprintk("%s: compound not properly padded! (peeraddr=%pISc xid=0x%x)", 4563 __func__, svc_addr(rqstp), be32_to_cpu(rqstp->rq_xid)); 4564 return 0; 4565 } 4566 args->p = p; 4567 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len; 4568 args->pagelist = rqstp->rq_arg.pages; 4569 args->pagelen = rqstp->rq_arg.page_len; 4570 args->tail = false; 4571 args->tmpp = NULL; 4572 args->to_free = NULL; 4573 args->ops = args->iops; 4574 args->rqstp = rqstp; 4575 4576 return !nfsd4_decode_compound(args); 4577 } 4578 4579 int 4580 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p) 4581 { 4582 /* 4583 * All that remains is to write the tag and operation count... 4584 */ 4585 struct nfsd4_compoundres *resp = rqstp->rq_resp; 4586 struct xdr_buf *buf = resp->xdr.buf; 4587 4588 WARN_ON_ONCE(buf->len != buf->head[0].iov_len + buf->page_len + 4589 buf->tail[0].iov_len); 4590 4591 rqstp->rq_next_page = resp->xdr.page_ptr + 1; 4592 4593 p = resp->tagp; 4594 *p++ = htonl(resp->taglen); 4595 memcpy(p, resp->tag, resp->taglen); 4596 p += XDR_QUADLEN(resp->taglen); 4597 *p++ = htonl(resp->opcnt); 4598 4599 nfsd4_sequence_done(resp); 4600 return 1; 4601 } 4602 4603 /* 4604 * Local variables: 4605 * c-basic-offset: 8 4606 * End: 4607 */ 4608