xref: /openbmc/qemu/hw/9pfs/9p.c (revision 56e2cd24)
1 /*
2  * Virtio 9p backend
3  *
4  * Copyright IBM, Corp. 2010
5  *
6  * Authors:
7  *  Anthony Liguori   <aliguori@us.ibm.com>
8  *
9  * This work is licensed under the terms of the GNU GPL, version 2.  See
10  * the COPYING file in the top-level directory.
11  *
12  */
13 
14 #include "qemu/osdep.h"
15 #include <glib/gprintf.h>
16 #include "hw/virtio/virtio.h"
17 #include "qapi/error.h"
18 #include "qemu/error-report.h"
19 #include "qemu/iov.h"
20 #include "qemu/sockets.h"
21 #include "virtio-9p.h"
22 #include "fsdev/qemu-fsdev.h"
23 #include "9p-xattr.h"
24 #include "coth.h"
25 #include "trace.h"
26 #include "migration/migration.h"
27 
28 int open_fd_hw;
29 int total_open_fd;
30 static int open_fd_rc;
31 
32 enum {
33     Oread   = 0x00,
34     Owrite  = 0x01,
35     Ordwr   = 0x02,
36     Oexec   = 0x03,
37     Oexcl   = 0x04,
38     Otrunc  = 0x10,
39     Orexec  = 0x20,
40     Orclose = 0x40,
41     Oappend = 0x80,
42 };
43 
44 ssize_t pdu_marshal(V9fsPDU *pdu, size_t offset, const char *fmt, ...)
45 {
46     ssize_t ret;
47     va_list ap;
48 
49     va_start(ap, fmt);
50     ret = pdu->s->transport->pdu_vmarshal(pdu, offset, fmt, ap);
51     va_end(ap);
52 
53     return ret;
54 }
55 
56 ssize_t pdu_unmarshal(V9fsPDU *pdu, size_t offset, const char *fmt, ...)
57 {
58     ssize_t ret;
59     va_list ap;
60 
61     va_start(ap, fmt);
62     ret = pdu->s->transport->pdu_vunmarshal(pdu, offset, fmt, ap);
63     va_end(ap);
64 
65     return ret;
66 }
67 
68 static void pdu_push_and_notify(V9fsPDU *pdu)
69 {
70     pdu->s->transport->push_and_notify(pdu);
71 }
72 
73 static int omode_to_uflags(int8_t mode)
74 {
75     int ret = 0;
76 
77     switch (mode & 3) {
78     case Oread:
79         ret = O_RDONLY;
80         break;
81     case Ordwr:
82         ret = O_RDWR;
83         break;
84     case Owrite:
85         ret = O_WRONLY;
86         break;
87     case Oexec:
88         ret = O_RDONLY;
89         break;
90     }
91 
92     if (mode & Otrunc) {
93         ret |= O_TRUNC;
94     }
95 
96     if (mode & Oappend) {
97         ret |= O_APPEND;
98     }
99 
100     if (mode & Oexcl) {
101         ret |= O_EXCL;
102     }
103 
104     return ret;
105 }
106 
107 struct dotl_openflag_map {
108     int dotl_flag;
109     int open_flag;
110 };
111 
112 static int dotl_to_open_flags(int flags)
113 {
114     int i;
115     /*
116      * We have same bits for P9_DOTL_READONLY, P9_DOTL_WRONLY
117      * and P9_DOTL_NOACCESS
118      */
119     int oflags = flags & O_ACCMODE;
120 
121     struct dotl_openflag_map dotl_oflag_map[] = {
122         { P9_DOTL_CREATE, O_CREAT },
123         { P9_DOTL_EXCL, O_EXCL },
124         { P9_DOTL_NOCTTY , O_NOCTTY },
125         { P9_DOTL_TRUNC, O_TRUNC },
126         { P9_DOTL_APPEND, O_APPEND },
127         { P9_DOTL_NONBLOCK, O_NONBLOCK } ,
128         { P9_DOTL_DSYNC, O_DSYNC },
129         { P9_DOTL_FASYNC, FASYNC },
130         { P9_DOTL_DIRECT, O_DIRECT },
131         { P9_DOTL_LARGEFILE, O_LARGEFILE },
132         { P9_DOTL_DIRECTORY, O_DIRECTORY },
133         { P9_DOTL_NOFOLLOW, O_NOFOLLOW },
134         { P9_DOTL_NOATIME, O_NOATIME },
135         { P9_DOTL_SYNC, O_SYNC },
136     };
137 
138     for (i = 0; i < ARRAY_SIZE(dotl_oflag_map); i++) {
139         if (flags & dotl_oflag_map[i].dotl_flag) {
140             oflags |= dotl_oflag_map[i].open_flag;
141         }
142     }
143 
144     return oflags;
145 }
146 
147 void cred_init(FsCred *credp)
148 {
149     credp->fc_uid = -1;
150     credp->fc_gid = -1;
151     credp->fc_mode = -1;
152     credp->fc_rdev = -1;
153 }
154 
155 static int get_dotl_openflags(V9fsState *s, int oflags)
156 {
157     int flags;
158     /*
159      * Filter the client open flags
160      */
161     flags = dotl_to_open_flags(oflags);
162     flags &= ~(O_NOCTTY | O_ASYNC | O_CREAT);
163     /*
164      * Ignore direct disk access hint until the server supports it.
165      */
166     flags &= ~O_DIRECT;
167     return flags;
168 }
169 
170 void v9fs_path_init(V9fsPath *path)
171 {
172     path->data = NULL;
173     path->size = 0;
174 }
175 
176 void v9fs_path_free(V9fsPath *path)
177 {
178     g_free(path->data);
179     path->data = NULL;
180     path->size = 0;
181 }
182 
183 
184 void GCC_FMT_ATTR(2, 3)
185 v9fs_path_sprintf(V9fsPath *path, const char *fmt, ...)
186 {
187     va_list ap;
188 
189     v9fs_path_free(path);
190 
191     va_start(ap, fmt);
192     /* Bump the size for including terminating NULL */
193     path->size = g_vasprintf(&path->data, fmt, ap) + 1;
194     va_end(ap);
195 }
196 
197 void v9fs_path_copy(V9fsPath *lhs, V9fsPath *rhs)
198 {
199     v9fs_path_free(lhs);
200     lhs->data = g_malloc(rhs->size);
201     memcpy(lhs->data, rhs->data, rhs->size);
202     lhs->size = rhs->size;
203 }
204 
205 int v9fs_name_to_path(V9fsState *s, V9fsPath *dirpath,
206                       const char *name, V9fsPath *path)
207 {
208     int err;
209     err = s->ops->name_to_path(&s->ctx, dirpath, name, path);
210     if (err < 0) {
211         err = -errno;
212     }
213     return err;
214 }
215 
216 /*
217  * Return TRUE if s1 is an ancestor of s2.
218  *
219  * E.g. "a/b" is an ancestor of "a/b/c" but not of "a/bc/d".
220  * As a special case, We treat s1 as ancestor of s2 if they are same!
221  */
222 static int v9fs_path_is_ancestor(V9fsPath *s1, V9fsPath *s2)
223 {
224     if (!strncmp(s1->data, s2->data, s1->size - 1)) {
225         if (s2->data[s1->size - 1] == '\0' || s2->data[s1->size - 1] == '/') {
226             return 1;
227         }
228     }
229     return 0;
230 }
231 
232 static size_t v9fs_string_size(V9fsString *str)
233 {
234     return str->size;
235 }
236 
237 /*
238  * returns 0 if fid got re-opened, 1 if not, < 0 on error */
239 static int coroutine_fn v9fs_reopen_fid(V9fsPDU *pdu, V9fsFidState *f)
240 {
241     int err = 1;
242     if (f->fid_type == P9_FID_FILE) {
243         if (f->fs.fd == -1) {
244             do {
245                 err = v9fs_co_open(pdu, f, f->open_flags);
246             } while (err == -EINTR && !pdu->cancelled);
247         }
248     } else if (f->fid_type == P9_FID_DIR) {
249         if (f->fs.dir.stream == NULL) {
250             do {
251                 err = v9fs_co_opendir(pdu, f);
252             } while (err == -EINTR && !pdu->cancelled);
253         }
254     }
255     return err;
256 }
257 
258 static V9fsFidState *coroutine_fn get_fid(V9fsPDU *pdu, int32_t fid)
259 {
260     int err;
261     V9fsFidState *f;
262     V9fsState *s = pdu->s;
263 
264     for (f = s->fid_list; f; f = f->next) {
265         BUG_ON(f->clunked);
266         if (f->fid == fid) {
267             /*
268              * Update the fid ref upfront so that
269              * we don't get reclaimed when we yield
270              * in open later.
271              */
272             f->ref++;
273             /*
274              * check whether we need to reopen the
275              * file. We might have closed the fd
276              * while trying to free up some file
277              * descriptors.
278              */
279             err = v9fs_reopen_fid(pdu, f);
280             if (err < 0) {
281                 f->ref--;
282                 return NULL;
283             }
284             /*
285              * Mark the fid as referenced so that the LRU
286              * reclaim won't close the file descriptor
287              */
288             f->flags |= FID_REFERENCED;
289             return f;
290         }
291     }
292     return NULL;
293 }
294 
295 static V9fsFidState *alloc_fid(V9fsState *s, int32_t fid)
296 {
297     V9fsFidState *f;
298 
299     for (f = s->fid_list; f; f = f->next) {
300         /* If fid is already there return NULL */
301         BUG_ON(f->clunked);
302         if (f->fid == fid) {
303             return NULL;
304         }
305     }
306     f = g_malloc0(sizeof(V9fsFidState));
307     f->fid = fid;
308     f->fid_type = P9_FID_NONE;
309     f->ref = 1;
310     /*
311      * Mark the fid as referenced so that the LRU
312      * reclaim won't close the file descriptor
313      */
314     f->flags |= FID_REFERENCED;
315     f->next = s->fid_list;
316     s->fid_list = f;
317 
318     v9fs_readdir_init(&f->fs.dir);
319     v9fs_readdir_init(&f->fs_reclaim.dir);
320 
321     return f;
322 }
323 
324 static int coroutine_fn v9fs_xattr_fid_clunk(V9fsPDU *pdu, V9fsFidState *fidp)
325 {
326     int retval = 0;
327 
328     if (fidp->fs.xattr.xattrwalk_fid) {
329         /* getxattr/listxattr fid */
330         goto free_value;
331     }
332     /*
333      * if this is fid for setxattr. clunk should
334      * result in setxattr localcall
335      */
336     if (fidp->fs.xattr.len != fidp->fs.xattr.copied_len) {
337         /* clunk after partial write */
338         retval = -EINVAL;
339         goto free_out;
340     }
341     if (fidp->fs.xattr.len) {
342         retval = v9fs_co_lsetxattr(pdu, &fidp->path, &fidp->fs.xattr.name,
343                                    fidp->fs.xattr.value,
344                                    fidp->fs.xattr.len,
345                                    fidp->fs.xattr.flags);
346     } else {
347         retval = v9fs_co_lremovexattr(pdu, &fidp->path, &fidp->fs.xattr.name);
348     }
349 free_out:
350     v9fs_string_free(&fidp->fs.xattr.name);
351 free_value:
352     g_free(fidp->fs.xattr.value);
353     return retval;
354 }
355 
356 static int coroutine_fn free_fid(V9fsPDU *pdu, V9fsFidState *fidp)
357 {
358     int retval = 0;
359 
360     if (fidp->fid_type == P9_FID_FILE) {
361         /* If we reclaimed the fd no need to close */
362         if (fidp->fs.fd != -1) {
363             retval = v9fs_co_close(pdu, &fidp->fs);
364         }
365     } else if (fidp->fid_type == P9_FID_DIR) {
366         if (fidp->fs.dir.stream != NULL) {
367             retval = v9fs_co_closedir(pdu, &fidp->fs);
368         }
369     } else if (fidp->fid_type == P9_FID_XATTR) {
370         retval = v9fs_xattr_fid_clunk(pdu, fidp);
371     }
372     v9fs_path_free(&fidp->path);
373     g_free(fidp);
374     return retval;
375 }
376 
377 static int coroutine_fn put_fid(V9fsPDU *pdu, V9fsFidState *fidp)
378 {
379     BUG_ON(!fidp->ref);
380     fidp->ref--;
381     /*
382      * Don't free the fid if it is in reclaim list
383      */
384     if (!fidp->ref && fidp->clunked) {
385         if (fidp->fid == pdu->s->root_fid) {
386             /*
387              * if the clunked fid is root fid then we
388              * have unmounted the fs on the client side.
389              * delete the migration blocker. Ideally, this
390              * should be hooked to transport close notification
391              */
392             if (pdu->s->migration_blocker) {
393                 migrate_del_blocker(pdu->s->migration_blocker);
394                 error_free(pdu->s->migration_blocker);
395                 pdu->s->migration_blocker = NULL;
396             }
397         }
398         return free_fid(pdu, fidp);
399     }
400     return 0;
401 }
402 
403 static V9fsFidState *clunk_fid(V9fsState *s, int32_t fid)
404 {
405     V9fsFidState **fidpp, *fidp;
406 
407     for (fidpp = &s->fid_list; *fidpp; fidpp = &(*fidpp)->next) {
408         if ((*fidpp)->fid == fid) {
409             break;
410         }
411     }
412     if (*fidpp == NULL) {
413         return NULL;
414     }
415     fidp = *fidpp;
416     *fidpp = fidp->next;
417     fidp->clunked = 1;
418     return fidp;
419 }
420 
421 void coroutine_fn v9fs_reclaim_fd(V9fsPDU *pdu)
422 {
423     int reclaim_count = 0;
424     V9fsState *s = pdu->s;
425     V9fsFidState *f, *reclaim_list = NULL;
426 
427     for (f = s->fid_list; f; f = f->next) {
428         /*
429          * Unlink fids cannot be reclaimed. Check
430          * for them and skip them. Also skip fids
431          * currently being operated on.
432          */
433         if (f->ref || f->flags & FID_NON_RECLAIMABLE) {
434             continue;
435         }
436         /*
437          * if it is a recently referenced fid
438          * we leave the fid untouched and clear the
439          * reference bit. We come back to it later
440          * in the next iteration. (a simple LRU without
441          * moving list elements around)
442          */
443         if (f->flags & FID_REFERENCED) {
444             f->flags &= ~FID_REFERENCED;
445             continue;
446         }
447         /*
448          * Add fids to reclaim list.
449          */
450         if (f->fid_type == P9_FID_FILE) {
451             if (f->fs.fd != -1) {
452                 /*
453                  * Up the reference count so that
454                  * a clunk request won't free this fid
455                  */
456                 f->ref++;
457                 f->rclm_lst = reclaim_list;
458                 reclaim_list = f;
459                 f->fs_reclaim.fd = f->fs.fd;
460                 f->fs.fd = -1;
461                 reclaim_count++;
462             }
463         } else if (f->fid_type == P9_FID_DIR) {
464             if (f->fs.dir.stream != NULL) {
465                 /*
466                  * Up the reference count so that
467                  * a clunk request won't free this fid
468                  */
469                 f->ref++;
470                 f->rclm_lst = reclaim_list;
471                 reclaim_list = f;
472                 f->fs_reclaim.dir.stream = f->fs.dir.stream;
473                 f->fs.dir.stream = NULL;
474                 reclaim_count++;
475             }
476         }
477         if (reclaim_count >= open_fd_rc) {
478             break;
479         }
480     }
481     /*
482      * Now close the fid in reclaim list. Free them if they
483      * are already clunked.
484      */
485     while (reclaim_list) {
486         f = reclaim_list;
487         reclaim_list = f->rclm_lst;
488         if (f->fid_type == P9_FID_FILE) {
489             v9fs_co_close(pdu, &f->fs_reclaim);
490         } else if (f->fid_type == P9_FID_DIR) {
491             v9fs_co_closedir(pdu, &f->fs_reclaim);
492         }
493         f->rclm_lst = NULL;
494         /*
495          * Now drop the fid reference, free it
496          * if clunked.
497          */
498         put_fid(pdu, f);
499     }
500 }
501 
502 static int coroutine_fn v9fs_mark_fids_unreclaim(V9fsPDU *pdu, V9fsPath *path)
503 {
504     int err;
505     V9fsState *s = pdu->s;
506     V9fsFidState *fidp, head_fid;
507 
508     head_fid.next = s->fid_list;
509     for (fidp = s->fid_list; fidp; fidp = fidp->next) {
510         if (fidp->path.size != path->size) {
511             continue;
512         }
513         if (!memcmp(fidp->path.data, path->data, path->size)) {
514             /* Mark the fid non reclaimable. */
515             fidp->flags |= FID_NON_RECLAIMABLE;
516 
517             /* reopen the file/dir if already closed */
518             err = v9fs_reopen_fid(pdu, fidp);
519             if (err < 0) {
520                 return -1;
521             }
522             /*
523              * Go back to head of fid list because
524              * the list could have got updated when
525              * switched to the worker thread
526              */
527             if (err == 0) {
528                 fidp = &head_fid;
529             }
530         }
531     }
532     return 0;
533 }
534 
535 static void coroutine_fn virtfs_reset(V9fsPDU *pdu)
536 {
537     V9fsState *s = pdu->s;
538     V9fsFidState *fidp;
539 
540     /* Free all fids */
541     while (s->fid_list) {
542         fidp = s->fid_list;
543         s->fid_list = fidp->next;
544 
545         if (fidp->ref) {
546             fidp->clunked = 1;
547         } else {
548             free_fid(pdu, fidp);
549         }
550     }
551 }
552 
553 #define P9_QID_TYPE_DIR         0x80
554 #define P9_QID_TYPE_SYMLINK     0x02
555 
556 #define P9_STAT_MODE_DIR        0x80000000
557 #define P9_STAT_MODE_APPEND     0x40000000
558 #define P9_STAT_MODE_EXCL       0x20000000
559 #define P9_STAT_MODE_MOUNT      0x10000000
560 #define P9_STAT_MODE_AUTH       0x08000000
561 #define P9_STAT_MODE_TMP        0x04000000
562 #define P9_STAT_MODE_SYMLINK    0x02000000
563 #define P9_STAT_MODE_LINK       0x01000000
564 #define P9_STAT_MODE_DEVICE     0x00800000
565 #define P9_STAT_MODE_NAMED_PIPE 0x00200000
566 #define P9_STAT_MODE_SOCKET     0x00100000
567 #define P9_STAT_MODE_SETUID     0x00080000
568 #define P9_STAT_MODE_SETGID     0x00040000
569 #define P9_STAT_MODE_SETVTX     0x00010000
570 
571 #define P9_STAT_MODE_TYPE_BITS (P9_STAT_MODE_DIR |          \
572                                 P9_STAT_MODE_SYMLINK |      \
573                                 P9_STAT_MODE_LINK |         \
574                                 P9_STAT_MODE_DEVICE |       \
575                                 P9_STAT_MODE_NAMED_PIPE |   \
576                                 P9_STAT_MODE_SOCKET)
577 
578 /* This is the algorithm from ufs in spfs */
579 static void stat_to_qid(const struct stat *stbuf, V9fsQID *qidp)
580 {
581     size_t size;
582 
583     memset(&qidp->path, 0, sizeof(qidp->path));
584     size = MIN(sizeof(stbuf->st_ino), sizeof(qidp->path));
585     memcpy(&qidp->path, &stbuf->st_ino, size);
586     qidp->version = stbuf->st_mtime ^ (stbuf->st_size << 8);
587     qidp->type = 0;
588     if (S_ISDIR(stbuf->st_mode)) {
589         qidp->type |= P9_QID_TYPE_DIR;
590     }
591     if (S_ISLNK(stbuf->st_mode)) {
592         qidp->type |= P9_QID_TYPE_SYMLINK;
593     }
594 }
595 
596 static int coroutine_fn fid_to_qid(V9fsPDU *pdu, V9fsFidState *fidp,
597                                    V9fsQID *qidp)
598 {
599     struct stat stbuf;
600     int err;
601 
602     err = v9fs_co_lstat(pdu, &fidp->path, &stbuf);
603     if (err < 0) {
604         return err;
605     }
606     stat_to_qid(&stbuf, qidp);
607     return 0;
608 }
609 
610 V9fsPDU *pdu_alloc(V9fsState *s)
611 {
612     V9fsPDU *pdu = NULL;
613 
614     if (!QLIST_EMPTY(&s->free_list)) {
615         pdu = QLIST_FIRST(&s->free_list);
616         QLIST_REMOVE(pdu, next);
617         QLIST_INSERT_HEAD(&s->active_list, pdu, next);
618     }
619     return pdu;
620 }
621 
622 void pdu_free(V9fsPDU *pdu)
623 {
624     V9fsState *s = pdu->s;
625 
626     g_assert(!pdu->cancelled);
627     QLIST_REMOVE(pdu, next);
628     QLIST_INSERT_HEAD(&s->free_list, pdu, next);
629 }
630 
631 /*
632  * We don't do error checking for pdu_marshal/unmarshal here
633  * because we always expect to have enough space to encode
634  * error details
635  */
636 static void coroutine_fn pdu_complete(V9fsPDU *pdu, ssize_t len)
637 {
638     int8_t id = pdu->id + 1; /* Response */
639     V9fsState *s = pdu->s;
640 
641     if (len < 0) {
642         int err = -len;
643         len = 7;
644 
645         if (s->proto_version != V9FS_PROTO_2000L) {
646             V9fsString str;
647 
648             str.data = strerror(err);
649             str.size = strlen(str.data);
650 
651             len += pdu_marshal(pdu, len, "s", &str);
652             id = P9_RERROR;
653         }
654 
655         len += pdu_marshal(pdu, len, "d", err);
656 
657         if (s->proto_version == V9FS_PROTO_2000L) {
658             id = P9_RLERROR;
659         }
660         trace_v9fs_rerror(pdu->tag, pdu->id, err); /* Trace ERROR */
661     }
662 
663     /* fill out the header */
664     pdu_marshal(pdu, 0, "dbw", (int32_t)len, id, pdu->tag);
665 
666     /* keep these in sync */
667     pdu->size = len;
668     pdu->id = id;
669 
670     pdu_push_and_notify(pdu);
671 
672     /* Now wakeup anybody waiting in flush for this request */
673     if (!qemu_co_queue_next(&pdu->complete)) {
674         pdu_free(pdu);
675     }
676 }
677 
678 static mode_t v9mode_to_mode(uint32_t mode, V9fsString *extension)
679 {
680     mode_t ret;
681 
682     ret = mode & 0777;
683     if (mode & P9_STAT_MODE_DIR) {
684         ret |= S_IFDIR;
685     }
686 
687     if (mode & P9_STAT_MODE_SYMLINK) {
688         ret |= S_IFLNK;
689     }
690     if (mode & P9_STAT_MODE_SOCKET) {
691         ret |= S_IFSOCK;
692     }
693     if (mode & P9_STAT_MODE_NAMED_PIPE) {
694         ret |= S_IFIFO;
695     }
696     if (mode & P9_STAT_MODE_DEVICE) {
697         if (extension->size && extension->data[0] == 'c') {
698             ret |= S_IFCHR;
699         } else {
700             ret |= S_IFBLK;
701         }
702     }
703 
704     if (!(ret&~0777)) {
705         ret |= S_IFREG;
706     }
707 
708     if (mode & P9_STAT_MODE_SETUID) {
709         ret |= S_ISUID;
710     }
711     if (mode & P9_STAT_MODE_SETGID) {
712         ret |= S_ISGID;
713     }
714     if (mode & P9_STAT_MODE_SETVTX) {
715         ret |= S_ISVTX;
716     }
717 
718     return ret;
719 }
720 
721 static int donttouch_stat(V9fsStat *stat)
722 {
723     if (stat->type == -1 &&
724         stat->dev == -1 &&
725         stat->qid.type == -1 &&
726         stat->qid.version == -1 &&
727         stat->qid.path == -1 &&
728         stat->mode == -1 &&
729         stat->atime == -1 &&
730         stat->mtime == -1 &&
731         stat->length == -1 &&
732         !stat->name.size &&
733         !stat->uid.size &&
734         !stat->gid.size &&
735         !stat->muid.size &&
736         stat->n_uid == -1 &&
737         stat->n_gid == -1 &&
738         stat->n_muid == -1) {
739         return 1;
740     }
741 
742     return 0;
743 }
744 
745 static void v9fs_stat_init(V9fsStat *stat)
746 {
747     v9fs_string_init(&stat->name);
748     v9fs_string_init(&stat->uid);
749     v9fs_string_init(&stat->gid);
750     v9fs_string_init(&stat->muid);
751     v9fs_string_init(&stat->extension);
752 }
753 
754 static void v9fs_stat_free(V9fsStat *stat)
755 {
756     v9fs_string_free(&stat->name);
757     v9fs_string_free(&stat->uid);
758     v9fs_string_free(&stat->gid);
759     v9fs_string_free(&stat->muid);
760     v9fs_string_free(&stat->extension);
761 }
762 
763 static uint32_t stat_to_v9mode(const struct stat *stbuf)
764 {
765     uint32_t mode;
766 
767     mode = stbuf->st_mode & 0777;
768     if (S_ISDIR(stbuf->st_mode)) {
769         mode |= P9_STAT_MODE_DIR;
770     }
771 
772     if (S_ISLNK(stbuf->st_mode)) {
773         mode |= P9_STAT_MODE_SYMLINK;
774     }
775 
776     if (S_ISSOCK(stbuf->st_mode)) {
777         mode |= P9_STAT_MODE_SOCKET;
778     }
779 
780     if (S_ISFIFO(stbuf->st_mode)) {
781         mode |= P9_STAT_MODE_NAMED_PIPE;
782     }
783 
784     if (S_ISBLK(stbuf->st_mode) || S_ISCHR(stbuf->st_mode)) {
785         mode |= P9_STAT_MODE_DEVICE;
786     }
787 
788     if (stbuf->st_mode & S_ISUID) {
789         mode |= P9_STAT_MODE_SETUID;
790     }
791 
792     if (stbuf->st_mode & S_ISGID) {
793         mode |= P9_STAT_MODE_SETGID;
794     }
795 
796     if (stbuf->st_mode & S_ISVTX) {
797         mode |= P9_STAT_MODE_SETVTX;
798     }
799 
800     return mode;
801 }
802 
803 static int coroutine_fn stat_to_v9stat(V9fsPDU *pdu, V9fsPath *name,
804                                        const struct stat *stbuf,
805                                        V9fsStat *v9stat)
806 {
807     int err;
808     const char *str;
809 
810     memset(v9stat, 0, sizeof(*v9stat));
811 
812     stat_to_qid(stbuf, &v9stat->qid);
813     v9stat->mode = stat_to_v9mode(stbuf);
814     v9stat->atime = stbuf->st_atime;
815     v9stat->mtime = stbuf->st_mtime;
816     v9stat->length = stbuf->st_size;
817 
818     v9fs_string_free(&v9stat->uid);
819     v9fs_string_free(&v9stat->gid);
820     v9fs_string_free(&v9stat->muid);
821 
822     v9stat->n_uid = stbuf->st_uid;
823     v9stat->n_gid = stbuf->st_gid;
824     v9stat->n_muid = 0;
825 
826     v9fs_string_free(&v9stat->extension);
827 
828     if (v9stat->mode & P9_STAT_MODE_SYMLINK) {
829         err = v9fs_co_readlink(pdu, name, &v9stat->extension);
830         if (err < 0) {
831             return err;
832         }
833     } else if (v9stat->mode & P9_STAT_MODE_DEVICE) {
834         v9fs_string_sprintf(&v9stat->extension, "%c %u %u",
835                 S_ISCHR(stbuf->st_mode) ? 'c' : 'b',
836                 major(stbuf->st_rdev), minor(stbuf->st_rdev));
837     } else if (S_ISDIR(stbuf->st_mode) || S_ISREG(stbuf->st_mode)) {
838         v9fs_string_sprintf(&v9stat->extension, "%s %lu",
839                 "HARDLINKCOUNT", (unsigned long)stbuf->st_nlink);
840     }
841 
842     str = strrchr(name->data, '/');
843     if (str) {
844         str += 1;
845     } else {
846         str = name->data;
847     }
848 
849     v9fs_string_sprintf(&v9stat->name, "%s", str);
850 
851     v9stat->size = 61 +
852         v9fs_string_size(&v9stat->name) +
853         v9fs_string_size(&v9stat->uid) +
854         v9fs_string_size(&v9stat->gid) +
855         v9fs_string_size(&v9stat->muid) +
856         v9fs_string_size(&v9stat->extension);
857     return 0;
858 }
859 
860 #define P9_STATS_MODE          0x00000001ULL
861 #define P9_STATS_NLINK         0x00000002ULL
862 #define P9_STATS_UID           0x00000004ULL
863 #define P9_STATS_GID           0x00000008ULL
864 #define P9_STATS_RDEV          0x00000010ULL
865 #define P9_STATS_ATIME         0x00000020ULL
866 #define P9_STATS_MTIME         0x00000040ULL
867 #define P9_STATS_CTIME         0x00000080ULL
868 #define P9_STATS_INO           0x00000100ULL
869 #define P9_STATS_SIZE          0x00000200ULL
870 #define P9_STATS_BLOCKS        0x00000400ULL
871 
872 #define P9_STATS_BTIME         0x00000800ULL
873 #define P9_STATS_GEN           0x00001000ULL
874 #define P9_STATS_DATA_VERSION  0x00002000ULL
875 
876 #define P9_STATS_BASIC         0x000007ffULL /* Mask for fields up to BLOCKS */
877 #define P9_STATS_ALL           0x00003fffULL /* Mask for All fields above */
878 
879 
880 static void stat_to_v9stat_dotl(V9fsState *s, const struct stat *stbuf,
881                                 V9fsStatDotl *v9lstat)
882 {
883     memset(v9lstat, 0, sizeof(*v9lstat));
884 
885     v9lstat->st_mode = stbuf->st_mode;
886     v9lstat->st_nlink = stbuf->st_nlink;
887     v9lstat->st_uid = stbuf->st_uid;
888     v9lstat->st_gid = stbuf->st_gid;
889     v9lstat->st_rdev = stbuf->st_rdev;
890     v9lstat->st_size = stbuf->st_size;
891     v9lstat->st_blksize = stbuf->st_blksize;
892     v9lstat->st_blocks = stbuf->st_blocks;
893     v9lstat->st_atime_sec = stbuf->st_atime;
894     v9lstat->st_atime_nsec = stbuf->st_atim.tv_nsec;
895     v9lstat->st_mtime_sec = stbuf->st_mtime;
896     v9lstat->st_mtime_nsec = stbuf->st_mtim.tv_nsec;
897     v9lstat->st_ctime_sec = stbuf->st_ctime;
898     v9lstat->st_ctime_nsec = stbuf->st_ctim.tv_nsec;
899     /* Currently we only support BASIC fields in stat */
900     v9lstat->st_result_mask = P9_STATS_BASIC;
901 
902     stat_to_qid(stbuf, &v9lstat->qid);
903 }
904 
905 static void print_sg(struct iovec *sg, int cnt)
906 {
907     int i;
908 
909     printf("sg[%d]: {", cnt);
910     for (i = 0; i < cnt; i++) {
911         if (i) {
912             printf(", ");
913         }
914         printf("(%p, %zd)", sg[i].iov_base, sg[i].iov_len);
915     }
916     printf("}\n");
917 }
918 
919 /* Will call this only for path name based fid */
920 static void v9fs_fix_path(V9fsPath *dst, V9fsPath *src, int len)
921 {
922     V9fsPath str;
923     v9fs_path_init(&str);
924     v9fs_path_copy(&str, dst);
925     v9fs_path_sprintf(dst, "%s%s", src->data, str.data + len);
926     v9fs_path_free(&str);
927 }
928 
929 static inline bool is_ro_export(FsContext *ctx)
930 {
931     return ctx->export_flags & V9FS_RDONLY;
932 }
933 
934 static void coroutine_fn v9fs_version(void *opaque)
935 {
936     ssize_t err;
937     V9fsPDU *pdu = opaque;
938     V9fsState *s = pdu->s;
939     V9fsString version;
940     size_t offset = 7;
941 
942     v9fs_string_init(&version);
943     err = pdu_unmarshal(pdu, offset, "ds", &s->msize, &version);
944     if (err < 0) {
945         offset = err;
946         goto out;
947     }
948     trace_v9fs_version(pdu->tag, pdu->id, s->msize, version.data);
949 
950     virtfs_reset(pdu);
951 
952     if (!strcmp(version.data, "9P2000.u")) {
953         s->proto_version = V9FS_PROTO_2000U;
954     } else if (!strcmp(version.data, "9P2000.L")) {
955         s->proto_version = V9FS_PROTO_2000L;
956     } else {
957         v9fs_string_sprintf(&version, "unknown");
958     }
959 
960     err = pdu_marshal(pdu, offset, "ds", s->msize, &version);
961     if (err < 0) {
962         offset = err;
963         goto out;
964     }
965     offset += err;
966     trace_v9fs_version_return(pdu->tag, pdu->id, s->msize, version.data);
967 out:
968     pdu_complete(pdu, offset);
969     v9fs_string_free(&version);
970 }
971 
972 static void coroutine_fn v9fs_attach(void *opaque)
973 {
974     V9fsPDU *pdu = opaque;
975     V9fsState *s = pdu->s;
976     int32_t fid, afid, n_uname;
977     V9fsString uname, aname;
978     V9fsFidState *fidp;
979     size_t offset = 7;
980     V9fsQID qid;
981     ssize_t err;
982     Error *local_err = NULL;
983 
984     v9fs_string_init(&uname);
985     v9fs_string_init(&aname);
986     err = pdu_unmarshal(pdu, offset, "ddssd", &fid,
987                         &afid, &uname, &aname, &n_uname);
988     if (err < 0) {
989         goto out_nofid;
990     }
991     trace_v9fs_attach(pdu->tag, pdu->id, fid, afid, uname.data, aname.data);
992 
993     fidp = alloc_fid(s, fid);
994     if (fidp == NULL) {
995         err = -EINVAL;
996         goto out_nofid;
997     }
998     fidp->uid = n_uname;
999     err = v9fs_co_name_to_path(pdu, NULL, "/", &fidp->path);
1000     if (err < 0) {
1001         err = -EINVAL;
1002         clunk_fid(s, fid);
1003         goto out;
1004     }
1005     err = fid_to_qid(pdu, fidp, &qid);
1006     if (err < 0) {
1007         err = -EINVAL;
1008         clunk_fid(s, fid);
1009         goto out;
1010     }
1011 
1012     /*
1013      * disable migration if we haven't done already.
1014      * attach could get called multiple times for the same export.
1015      */
1016     if (!s->migration_blocker) {
1017         error_setg(&s->migration_blocker,
1018                    "Migration is disabled when VirtFS export path '%s' is mounted in the guest using mount_tag '%s'",
1019                    s->ctx.fs_root ? s->ctx.fs_root : "NULL", s->tag);
1020         err = migrate_add_blocker(s->migration_blocker, &local_err);
1021         if (local_err) {
1022             error_free(local_err);
1023             error_free(s->migration_blocker);
1024             s->migration_blocker = NULL;
1025             clunk_fid(s, fid);
1026             goto out;
1027         }
1028         s->root_fid = fid;
1029     }
1030 
1031     err = pdu_marshal(pdu, offset, "Q", &qid);
1032     if (err < 0) {
1033         clunk_fid(s, fid);
1034         goto out;
1035     }
1036     err += offset;
1037 
1038     memcpy(&s->root_qid, &qid, sizeof(qid));
1039     trace_v9fs_attach_return(pdu->tag, pdu->id,
1040                              qid.type, qid.version, qid.path);
1041 out:
1042     put_fid(pdu, fidp);
1043 out_nofid:
1044     pdu_complete(pdu, err);
1045     v9fs_string_free(&uname);
1046     v9fs_string_free(&aname);
1047 }
1048 
1049 static void coroutine_fn v9fs_stat(void *opaque)
1050 {
1051     int32_t fid;
1052     V9fsStat v9stat;
1053     ssize_t err = 0;
1054     size_t offset = 7;
1055     struct stat stbuf;
1056     V9fsFidState *fidp;
1057     V9fsPDU *pdu = opaque;
1058 
1059     err = pdu_unmarshal(pdu, offset, "d", &fid);
1060     if (err < 0) {
1061         goto out_nofid;
1062     }
1063     trace_v9fs_stat(pdu->tag, pdu->id, fid);
1064 
1065     fidp = get_fid(pdu, fid);
1066     if (fidp == NULL) {
1067         err = -ENOENT;
1068         goto out_nofid;
1069     }
1070     err = v9fs_co_lstat(pdu, &fidp->path, &stbuf);
1071     if (err < 0) {
1072         goto out;
1073     }
1074     err = stat_to_v9stat(pdu, &fidp->path, &stbuf, &v9stat);
1075     if (err < 0) {
1076         goto out;
1077     }
1078     err = pdu_marshal(pdu, offset, "wS", 0, &v9stat);
1079     if (err < 0) {
1080         v9fs_stat_free(&v9stat);
1081         goto out;
1082     }
1083     trace_v9fs_stat_return(pdu->tag, pdu->id, v9stat.mode,
1084                            v9stat.atime, v9stat.mtime, v9stat.length);
1085     err += offset;
1086     v9fs_stat_free(&v9stat);
1087 out:
1088     put_fid(pdu, fidp);
1089 out_nofid:
1090     pdu_complete(pdu, err);
1091 }
1092 
1093 static void coroutine_fn v9fs_getattr(void *opaque)
1094 {
1095     int32_t fid;
1096     size_t offset = 7;
1097     ssize_t retval = 0;
1098     struct stat stbuf;
1099     V9fsFidState *fidp;
1100     uint64_t request_mask;
1101     V9fsStatDotl v9stat_dotl;
1102     V9fsPDU *pdu = opaque;
1103     V9fsState *s = pdu->s;
1104 
1105     retval = pdu_unmarshal(pdu, offset, "dq", &fid, &request_mask);
1106     if (retval < 0) {
1107         goto out_nofid;
1108     }
1109     trace_v9fs_getattr(pdu->tag, pdu->id, fid, request_mask);
1110 
1111     fidp = get_fid(pdu, fid);
1112     if (fidp == NULL) {
1113         retval = -ENOENT;
1114         goto out_nofid;
1115     }
1116     /*
1117      * Currently we only support BASIC fields in stat, so there is no
1118      * need to look at request_mask.
1119      */
1120     retval = v9fs_co_lstat(pdu, &fidp->path, &stbuf);
1121     if (retval < 0) {
1122         goto out;
1123     }
1124     stat_to_v9stat_dotl(s, &stbuf, &v9stat_dotl);
1125 
1126     /*  fill st_gen if requested and supported by underlying fs */
1127     if (request_mask & P9_STATS_GEN) {
1128         retval = v9fs_co_st_gen(pdu, &fidp->path, stbuf.st_mode, &v9stat_dotl);
1129         switch (retval) {
1130         case 0:
1131             /* we have valid st_gen: update result mask */
1132             v9stat_dotl.st_result_mask |= P9_STATS_GEN;
1133             break;
1134         case -EINTR:
1135             /* request cancelled, e.g. by Tflush */
1136             goto out;
1137         default:
1138             /* failed to get st_gen: not fatal, ignore */
1139             break;
1140         }
1141     }
1142     retval = pdu_marshal(pdu, offset, "A", &v9stat_dotl);
1143     if (retval < 0) {
1144         goto out;
1145     }
1146     retval += offset;
1147     trace_v9fs_getattr_return(pdu->tag, pdu->id, v9stat_dotl.st_result_mask,
1148                               v9stat_dotl.st_mode, v9stat_dotl.st_uid,
1149                               v9stat_dotl.st_gid);
1150 out:
1151     put_fid(pdu, fidp);
1152 out_nofid:
1153     pdu_complete(pdu, retval);
1154 }
1155 
1156 /* Attribute flags */
1157 #define P9_ATTR_MODE       (1 << 0)
1158 #define P9_ATTR_UID        (1 << 1)
1159 #define P9_ATTR_GID        (1 << 2)
1160 #define P9_ATTR_SIZE       (1 << 3)
1161 #define P9_ATTR_ATIME      (1 << 4)
1162 #define P9_ATTR_MTIME      (1 << 5)
1163 #define P9_ATTR_CTIME      (1 << 6)
1164 #define P9_ATTR_ATIME_SET  (1 << 7)
1165 #define P9_ATTR_MTIME_SET  (1 << 8)
1166 
1167 #define P9_ATTR_MASK    127
1168 
1169 static void coroutine_fn v9fs_setattr(void *opaque)
1170 {
1171     int err = 0;
1172     int32_t fid;
1173     V9fsFidState *fidp;
1174     size_t offset = 7;
1175     V9fsIattr v9iattr;
1176     V9fsPDU *pdu = opaque;
1177 
1178     err = pdu_unmarshal(pdu, offset, "dI", &fid, &v9iattr);
1179     if (err < 0) {
1180         goto out_nofid;
1181     }
1182 
1183     fidp = get_fid(pdu, fid);
1184     if (fidp == NULL) {
1185         err = -EINVAL;
1186         goto out_nofid;
1187     }
1188     if (v9iattr.valid & P9_ATTR_MODE) {
1189         err = v9fs_co_chmod(pdu, &fidp->path, v9iattr.mode);
1190         if (err < 0) {
1191             goto out;
1192         }
1193     }
1194     if (v9iattr.valid & (P9_ATTR_ATIME | P9_ATTR_MTIME)) {
1195         struct timespec times[2];
1196         if (v9iattr.valid & P9_ATTR_ATIME) {
1197             if (v9iattr.valid & P9_ATTR_ATIME_SET) {
1198                 times[0].tv_sec = v9iattr.atime_sec;
1199                 times[0].tv_nsec = v9iattr.atime_nsec;
1200             } else {
1201                 times[0].tv_nsec = UTIME_NOW;
1202             }
1203         } else {
1204             times[0].tv_nsec = UTIME_OMIT;
1205         }
1206         if (v9iattr.valid & P9_ATTR_MTIME) {
1207             if (v9iattr.valid & P9_ATTR_MTIME_SET) {
1208                 times[1].tv_sec = v9iattr.mtime_sec;
1209                 times[1].tv_nsec = v9iattr.mtime_nsec;
1210             } else {
1211                 times[1].tv_nsec = UTIME_NOW;
1212             }
1213         } else {
1214             times[1].tv_nsec = UTIME_OMIT;
1215         }
1216         err = v9fs_co_utimensat(pdu, &fidp->path, times);
1217         if (err < 0) {
1218             goto out;
1219         }
1220     }
1221     /*
1222      * If the only valid entry in iattr is ctime we can call
1223      * chown(-1,-1) to update the ctime of the file
1224      */
1225     if ((v9iattr.valid & (P9_ATTR_UID | P9_ATTR_GID)) ||
1226         ((v9iattr.valid & P9_ATTR_CTIME)
1227          && !((v9iattr.valid & P9_ATTR_MASK) & ~P9_ATTR_CTIME))) {
1228         if (!(v9iattr.valid & P9_ATTR_UID)) {
1229             v9iattr.uid = -1;
1230         }
1231         if (!(v9iattr.valid & P9_ATTR_GID)) {
1232             v9iattr.gid = -1;
1233         }
1234         err = v9fs_co_chown(pdu, &fidp->path, v9iattr.uid,
1235                             v9iattr.gid);
1236         if (err < 0) {
1237             goto out;
1238         }
1239     }
1240     if (v9iattr.valid & (P9_ATTR_SIZE)) {
1241         err = v9fs_co_truncate(pdu, &fidp->path, v9iattr.size);
1242         if (err < 0) {
1243             goto out;
1244         }
1245     }
1246     err = offset;
1247 out:
1248     put_fid(pdu, fidp);
1249 out_nofid:
1250     pdu_complete(pdu, err);
1251 }
1252 
1253 static int v9fs_walk_marshal(V9fsPDU *pdu, uint16_t nwnames, V9fsQID *qids)
1254 {
1255     int i;
1256     ssize_t err;
1257     size_t offset = 7;
1258 
1259     err = pdu_marshal(pdu, offset, "w", nwnames);
1260     if (err < 0) {
1261         return err;
1262     }
1263     offset += err;
1264     for (i = 0; i < nwnames; i++) {
1265         err = pdu_marshal(pdu, offset, "Q", &qids[i]);
1266         if (err < 0) {
1267             return err;
1268         }
1269         offset += err;
1270     }
1271     return offset;
1272 }
1273 
1274 static bool name_is_illegal(const char *name)
1275 {
1276     return !*name || strchr(name, '/') != NULL;
1277 }
1278 
1279 static bool not_same_qid(const V9fsQID *qid1, const V9fsQID *qid2)
1280 {
1281     return
1282         qid1->type != qid2->type ||
1283         qid1->version != qid2->version ||
1284         qid1->path != qid2->path;
1285 }
1286 
1287 static void coroutine_fn v9fs_walk(void *opaque)
1288 {
1289     int name_idx;
1290     V9fsQID *qids = NULL;
1291     int i, err = 0;
1292     V9fsPath dpath, path;
1293     uint16_t nwnames;
1294     struct stat stbuf;
1295     size_t offset = 7;
1296     int32_t fid, newfid;
1297     V9fsString *wnames = NULL;
1298     V9fsFidState *fidp;
1299     V9fsFidState *newfidp = NULL;
1300     V9fsPDU *pdu = opaque;
1301     V9fsState *s = pdu->s;
1302     V9fsQID qid;
1303 
1304     err = pdu_unmarshal(pdu, offset, "ddw", &fid, &newfid, &nwnames);
1305     if (err < 0) {
1306         pdu_complete(pdu, err);
1307         return ;
1308     }
1309     offset += err;
1310 
1311     trace_v9fs_walk(pdu->tag, pdu->id, fid, newfid, nwnames);
1312 
1313     if (nwnames && nwnames <= P9_MAXWELEM) {
1314         wnames = g_malloc0(sizeof(wnames[0]) * nwnames);
1315         qids   = g_malloc0(sizeof(qids[0]) * nwnames);
1316         for (i = 0; i < nwnames; i++) {
1317             err = pdu_unmarshal(pdu, offset, "s", &wnames[i]);
1318             if (err < 0) {
1319                 goto out_nofid;
1320             }
1321             if (name_is_illegal(wnames[i].data)) {
1322                 err = -ENOENT;
1323                 goto out_nofid;
1324             }
1325             offset += err;
1326         }
1327     } else if (nwnames > P9_MAXWELEM) {
1328         err = -EINVAL;
1329         goto out_nofid;
1330     }
1331     fidp = get_fid(pdu, fid);
1332     if (fidp == NULL) {
1333         err = -ENOENT;
1334         goto out_nofid;
1335     }
1336 
1337     v9fs_path_init(&dpath);
1338     v9fs_path_init(&path);
1339 
1340     err = fid_to_qid(pdu, fidp, &qid);
1341     if (err < 0) {
1342         goto out;
1343     }
1344 
1345     /*
1346      * Both dpath and path initially poin to fidp.
1347      * Needed to handle request with nwnames == 0
1348      */
1349     v9fs_path_copy(&dpath, &fidp->path);
1350     v9fs_path_copy(&path, &fidp->path);
1351     for (name_idx = 0; name_idx < nwnames; name_idx++) {
1352         if (not_same_qid(&pdu->s->root_qid, &qid) ||
1353             strcmp("..", wnames[name_idx].data)) {
1354             err = v9fs_co_name_to_path(pdu, &dpath, wnames[name_idx].data,
1355                                        &path);
1356             if (err < 0) {
1357                 goto out;
1358             }
1359 
1360             err = v9fs_co_lstat(pdu, &path, &stbuf);
1361             if (err < 0) {
1362                 goto out;
1363             }
1364             stat_to_qid(&stbuf, &qid);
1365             v9fs_path_copy(&dpath, &path);
1366         }
1367         memcpy(&qids[name_idx], &qid, sizeof(qid));
1368     }
1369     if (fid == newfid) {
1370         if (fidp->fid_type != P9_FID_NONE) {
1371             err = -EINVAL;
1372             goto out;
1373         }
1374         v9fs_path_copy(&fidp->path, &path);
1375     } else {
1376         newfidp = alloc_fid(s, newfid);
1377         if (newfidp == NULL) {
1378             err = -EINVAL;
1379             goto out;
1380         }
1381         newfidp->uid = fidp->uid;
1382         v9fs_path_copy(&newfidp->path, &path);
1383     }
1384     err = v9fs_walk_marshal(pdu, nwnames, qids);
1385     trace_v9fs_walk_return(pdu->tag, pdu->id, nwnames, qids);
1386 out:
1387     put_fid(pdu, fidp);
1388     if (newfidp) {
1389         put_fid(pdu, newfidp);
1390     }
1391     v9fs_path_free(&dpath);
1392     v9fs_path_free(&path);
1393 out_nofid:
1394     pdu_complete(pdu, err);
1395     if (nwnames && nwnames <= P9_MAXWELEM) {
1396         for (name_idx = 0; name_idx < nwnames; name_idx++) {
1397             v9fs_string_free(&wnames[name_idx]);
1398         }
1399         g_free(wnames);
1400         g_free(qids);
1401     }
1402 }
1403 
1404 static int32_t coroutine_fn get_iounit(V9fsPDU *pdu, V9fsPath *path)
1405 {
1406     struct statfs stbuf;
1407     int32_t iounit = 0;
1408     V9fsState *s = pdu->s;
1409 
1410     /*
1411      * iounit should be multiples of f_bsize (host filesystem block size
1412      * and as well as less than (client msize - P9_IOHDRSZ))
1413      */
1414     if (!v9fs_co_statfs(pdu, path, &stbuf)) {
1415         iounit = stbuf.f_bsize;
1416         iounit *= (s->msize - P9_IOHDRSZ)/stbuf.f_bsize;
1417     }
1418     if (!iounit) {
1419         iounit = s->msize - P9_IOHDRSZ;
1420     }
1421     return iounit;
1422 }
1423 
1424 static void coroutine_fn v9fs_open(void *opaque)
1425 {
1426     int flags;
1427     int32_t fid;
1428     int32_t mode;
1429     V9fsQID qid;
1430     int iounit = 0;
1431     ssize_t err = 0;
1432     size_t offset = 7;
1433     struct stat stbuf;
1434     V9fsFidState *fidp;
1435     V9fsPDU *pdu = opaque;
1436     V9fsState *s = pdu->s;
1437 
1438     if (s->proto_version == V9FS_PROTO_2000L) {
1439         err = pdu_unmarshal(pdu, offset, "dd", &fid, &mode);
1440     } else {
1441         uint8_t modebyte;
1442         err = pdu_unmarshal(pdu, offset, "db", &fid, &modebyte);
1443         mode = modebyte;
1444     }
1445     if (err < 0) {
1446         goto out_nofid;
1447     }
1448     trace_v9fs_open(pdu->tag, pdu->id, fid, mode);
1449 
1450     fidp = get_fid(pdu, fid);
1451     if (fidp == NULL) {
1452         err = -ENOENT;
1453         goto out_nofid;
1454     }
1455     if (fidp->fid_type != P9_FID_NONE) {
1456         err = -EINVAL;
1457         goto out;
1458     }
1459 
1460     err = v9fs_co_lstat(pdu, &fidp->path, &stbuf);
1461     if (err < 0) {
1462         goto out;
1463     }
1464     stat_to_qid(&stbuf, &qid);
1465     if (S_ISDIR(stbuf.st_mode)) {
1466         err = v9fs_co_opendir(pdu, fidp);
1467         if (err < 0) {
1468             goto out;
1469         }
1470         fidp->fid_type = P9_FID_DIR;
1471         err = pdu_marshal(pdu, offset, "Qd", &qid, 0);
1472         if (err < 0) {
1473             goto out;
1474         }
1475         err += offset;
1476     } else {
1477         if (s->proto_version == V9FS_PROTO_2000L) {
1478             flags = get_dotl_openflags(s, mode);
1479         } else {
1480             flags = omode_to_uflags(mode);
1481         }
1482         if (is_ro_export(&s->ctx)) {
1483             if (mode & O_WRONLY || mode & O_RDWR ||
1484                 mode & O_APPEND || mode & O_TRUNC) {
1485                 err = -EROFS;
1486                 goto out;
1487             }
1488         }
1489         err = v9fs_co_open(pdu, fidp, flags);
1490         if (err < 0) {
1491             goto out;
1492         }
1493         fidp->fid_type = P9_FID_FILE;
1494         fidp->open_flags = flags;
1495         if (flags & O_EXCL) {
1496             /*
1497              * We let the host file system do O_EXCL check
1498              * We should not reclaim such fd
1499              */
1500             fidp->flags |= FID_NON_RECLAIMABLE;
1501         }
1502         iounit = get_iounit(pdu, &fidp->path);
1503         err = pdu_marshal(pdu, offset, "Qd", &qid, iounit);
1504         if (err < 0) {
1505             goto out;
1506         }
1507         err += offset;
1508     }
1509     trace_v9fs_open_return(pdu->tag, pdu->id,
1510                            qid.type, qid.version, qid.path, iounit);
1511 out:
1512     put_fid(pdu, fidp);
1513 out_nofid:
1514     pdu_complete(pdu, err);
1515 }
1516 
1517 static void coroutine_fn v9fs_lcreate(void *opaque)
1518 {
1519     int32_t dfid, flags, mode;
1520     gid_t gid;
1521     ssize_t err = 0;
1522     ssize_t offset = 7;
1523     V9fsString name;
1524     V9fsFidState *fidp;
1525     struct stat stbuf;
1526     V9fsQID qid;
1527     int32_t iounit;
1528     V9fsPDU *pdu = opaque;
1529 
1530     v9fs_string_init(&name);
1531     err = pdu_unmarshal(pdu, offset, "dsddd", &dfid,
1532                         &name, &flags, &mode, &gid);
1533     if (err < 0) {
1534         goto out_nofid;
1535     }
1536     trace_v9fs_lcreate(pdu->tag, pdu->id, dfid, flags, mode, gid);
1537 
1538     if (name_is_illegal(name.data)) {
1539         err = -ENOENT;
1540         goto out_nofid;
1541     }
1542 
1543     if (!strcmp(".", name.data) || !strcmp("..", name.data)) {
1544         err = -EEXIST;
1545         goto out_nofid;
1546     }
1547 
1548     fidp = get_fid(pdu, dfid);
1549     if (fidp == NULL) {
1550         err = -ENOENT;
1551         goto out_nofid;
1552     }
1553 
1554     flags = get_dotl_openflags(pdu->s, flags);
1555     err = v9fs_co_open2(pdu, fidp, &name, gid,
1556                         flags | O_CREAT, mode, &stbuf);
1557     if (err < 0) {
1558         goto out;
1559     }
1560     fidp->fid_type = P9_FID_FILE;
1561     fidp->open_flags = flags;
1562     if (flags & O_EXCL) {
1563         /*
1564          * We let the host file system do O_EXCL check
1565          * We should not reclaim such fd
1566          */
1567         fidp->flags |= FID_NON_RECLAIMABLE;
1568     }
1569     iounit =  get_iounit(pdu, &fidp->path);
1570     stat_to_qid(&stbuf, &qid);
1571     err = pdu_marshal(pdu, offset, "Qd", &qid, iounit);
1572     if (err < 0) {
1573         goto out;
1574     }
1575     err += offset;
1576     trace_v9fs_lcreate_return(pdu->tag, pdu->id,
1577                               qid.type, qid.version, qid.path, iounit);
1578 out:
1579     put_fid(pdu, fidp);
1580 out_nofid:
1581     pdu_complete(pdu, err);
1582     v9fs_string_free(&name);
1583 }
1584 
1585 static void coroutine_fn v9fs_fsync(void *opaque)
1586 {
1587     int err;
1588     int32_t fid;
1589     int datasync;
1590     size_t offset = 7;
1591     V9fsFidState *fidp;
1592     V9fsPDU *pdu = opaque;
1593 
1594     err = pdu_unmarshal(pdu, offset, "dd", &fid, &datasync);
1595     if (err < 0) {
1596         goto out_nofid;
1597     }
1598     trace_v9fs_fsync(pdu->tag, pdu->id, fid, datasync);
1599 
1600     fidp = get_fid(pdu, fid);
1601     if (fidp == NULL) {
1602         err = -ENOENT;
1603         goto out_nofid;
1604     }
1605     err = v9fs_co_fsync(pdu, fidp, datasync);
1606     if (!err) {
1607         err = offset;
1608     }
1609     put_fid(pdu, fidp);
1610 out_nofid:
1611     pdu_complete(pdu, err);
1612 }
1613 
1614 static void coroutine_fn v9fs_clunk(void *opaque)
1615 {
1616     int err;
1617     int32_t fid;
1618     size_t offset = 7;
1619     V9fsFidState *fidp;
1620     V9fsPDU *pdu = opaque;
1621     V9fsState *s = pdu->s;
1622 
1623     err = pdu_unmarshal(pdu, offset, "d", &fid);
1624     if (err < 0) {
1625         goto out_nofid;
1626     }
1627     trace_v9fs_clunk(pdu->tag, pdu->id, fid);
1628 
1629     fidp = clunk_fid(s, fid);
1630     if (fidp == NULL) {
1631         err = -ENOENT;
1632         goto out_nofid;
1633     }
1634     /*
1635      * Bump the ref so that put_fid will
1636      * free the fid.
1637      */
1638     fidp->ref++;
1639     err = put_fid(pdu, fidp);
1640     if (!err) {
1641         err = offset;
1642     }
1643 out_nofid:
1644     pdu_complete(pdu, err);
1645 }
1646 
1647 /*
1648  * Create a QEMUIOVector for a sub-region of PDU iovecs
1649  *
1650  * @qiov:       uninitialized QEMUIOVector
1651  * @skip:       number of bytes to skip from beginning of PDU
1652  * @size:       number of bytes to include
1653  * @is_write:   true - write, false - read
1654  *
1655  * The resulting QEMUIOVector has heap-allocated iovecs and must be cleaned up
1656  * with qemu_iovec_destroy().
1657  */
1658 static void v9fs_init_qiov_from_pdu(QEMUIOVector *qiov, V9fsPDU *pdu,
1659                                     size_t skip, size_t size,
1660                                     bool is_write)
1661 {
1662     QEMUIOVector elem;
1663     struct iovec *iov;
1664     unsigned int niov;
1665 
1666     if (is_write) {
1667         pdu->s->transport->init_out_iov_from_pdu(pdu, &iov, &niov);
1668     } else {
1669         pdu->s->transport->init_in_iov_from_pdu(pdu, &iov, &niov, size + skip);
1670     }
1671 
1672     qemu_iovec_init_external(&elem, iov, niov);
1673     qemu_iovec_init(qiov, niov);
1674     qemu_iovec_concat(qiov, &elem, skip, size);
1675 }
1676 
1677 static int v9fs_xattr_read(V9fsState *s, V9fsPDU *pdu, V9fsFidState *fidp,
1678                            uint64_t off, uint32_t max_count)
1679 {
1680     ssize_t err;
1681     size_t offset = 7;
1682     uint64_t read_count;
1683     QEMUIOVector qiov_full;
1684 
1685     if (fidp->fs.xattr.len < off) {
1686         read_count = 0;
1687     } else {
1688         read_count = fidp->fs.xattr.len - off;
1689     }
1690     if (read_count > max_count) {
1691         read_count = max_count;
1692     }
1693     err = pdu_marshal(pdu, offset, "d", read_count);
1694     if (err < 0) {
1695         return err;
1696     }
1697     offset += err;
1698 
1699     v9fs_init_qiov_from_pdu(&qiov_full, pdu, offset, read_count, false);
1700     err = v9fs_pack(qiov_full.iov, qiov_full.niov, 0,
1701                     ((char *)fidp->fs.xattr.value) + off,
1702                     read_count);
1703     qemu_iovec_destroy(&qiov_full);
1704     if (err < 0) {
1705         return err;
1706     }
1707     offset += err;
1708     return offset;
1709 }
1710 
1711 static int coroutine_fn v9fs_do_readdir_with_stat(V9fsPDU *pdu,
1712                                                   V9fsFidState *fidp,
1713                                                   uint32_t max_count)
1714 {
1715     V9fsPath path;
1716     V9fsStat v9stat;
1717     int len, err = 0;
1718     int32_t count = 0;
1719     struct stat stbuf;
1720     off_t saved_dir_pos;
1721     struct dirent *dent;
1722 
1723     /* save the directory position */
1724     saved_dir_pos = v9fs_co_telldir(pdu, fidp);
1725     if (saved_dir_pos < 0) {
1726         return saved_dir_pos;
1727     }
1728 
1729     while (1) {
1730         v9fs_path_init(&path);
1731 
1732         v9fs_readdir_lock(&fidp->fs.dir);
1733 
1734         err = v9fs_co_readdir(pdu, fidp, &dent);
1735         if (err || !dent) {
1736             break;
1737         }
1738         err = v9fs_co_name_to_path(pdu, &fidp->path, dent->d_name, &path);
1739         if (err < 0) {
1740             break;
1741         }
1742         err = v9fs_co_lstat(pdu, &path, &stbuf);
1743         if (err < 0) {
1744             break;
1745         }
1746         err = stat_to_v9stat(pdu, &path, &stbuf, &v9stat);
1747         if (err < 0) {
1748             break;
1749         }
1750         /* 11 = 7 + 4 (7 = start offset, 4 = space for storing count) */
1751         len = pdu_marshal(pdu, 11 + count, "S", &v9stat);
1752 
1753         v9fs_readdir_unlock(&fidp->fs.dir);
1754 
1755         if ((len != (v9stat.size + 2)) || ((count + len) > max_count)) {
1756             /* Ran out of buffer. Set dir back to old position and return */
1757             v9fs_co_seekdir(pdu, fidp, saved_dir_pos);
1758             v9fs_stat_free(&v9stat);
1759             v9fs_path_free(&path);
1760             return count;
1761         }
1762         count += len;
1763         v9fs_stat_free(&v9stat);
1764         v9fs_path_free(&path);
1765         saved_dir_pos = dent->d_off;
1766     }
1767 
1768     v9fs_readdir_unlock(&fidp->fs.dir);
1769 
1770     v9fs_path_free(&path);
1771     if (err < 0) {
1772         return err;
1773     }
1774     return count;
1775 }
1776 
1777 static void coroutine_fn v9fs_read(void *opaque)
1778 {
1779     int32_t fid;
1780     uint64_t off;
1781     ssize_t err = 0;
1782     int32_t count = 0;
1783     size_t offset = 7;
1784     uint32_t max_count;
1785     V9fsFidState *fidp;
1786     V9fsPDU *pdu = opaque;
1787     V9fsState *s = pdu->s;
1788 
1789     err = pdu_unmarshal(pdu, offset, "dqd", &fid, &off, &max_count);
1790     if (err < 0) {
1791         goto out_nofid;
1792     }
1793     trace_v9fs_read(pdu->tag, pdu->id, fid, off, max_count);
1794 
1795     fidp = get_fid(pdu, fid);
1796     if (fidp == NULL) {
1797         err = -EINVAL;
1798         goto out_nofid;
1799     }
1800     if (fidp->fid_type == P9_FID_DIR) {
1801 
1802         if (off == 0) {
1803             v9fs_co_rewinddir(pdu, fidp);
1804         }
1805         count = v9fs_do_readdir_with_stat(pdu, fidp, max_count);
1806         if (count < 0) {
1807             err = count;
1808             goto out;
1809         }
1810         err = pdu_marshal(pdu, offset, "d", count);
1811         if (err < 0) {
1812             goto out;
1813         }
1814         err += offset + count;
1815     } else if (fidp->fid_type == P9_FID_FILE) {
1816         QEMUIOVector qiov_full;
1817         QEMUIOVector qiov;
1818         int32_t len;
1819 
1820         v9fs_init_qiov_from_pdu(&qiov_full, pdu, offset + 4, max_count, false);
1821         qemu_iovec_init(&qiov, qiov_full.niov);
1822         do {
1823             qemu_iovec_reset(&qiov);
1824             qemu_iovec_concat(&qiov, &qiov_full, count, qiov_full.size - count);
1825             if (0) {
1826                 print_sg(qiov.iov, qiov.niov);
1827             }
1828             /* Loop in case of EINTR */
1829             do {
1830                 len = v9fs_co_preadv(pdu, fidp, qiov.iov, qiov.niov, off);
1831                 if (len >= 0) {
1832                     off   += len;
1833                     count += len;
1834                 }
1835             } while (len == -EINTR && !pdu->cancelled);
1836             if (len < 0) {
1837                 /* IO error return the error */
1838                 err = len;
1839                 goto out_free_iovec;
1840             }
1841         } while (count < max_count && len > 0);
1842         err = pdu_marshal(pdu, offset, "d", count);
1843         if (err < 0) {
1844             goto out_free_iovec;
1845         }
1846         err += offset + count;
1847 out_free_iovec:
1848         qemu_iovec_destroy(&qiov);
1849         qemu_iovec_destroy(&qiov_full);
1850     } else if (fidp->fid_type == P9_FID_XATTR) {
1851         err = v9fs_xattr_read(s, pdu, fidp, off, max_count);
1852     } else {
1853         err = -EINVAL;
1854     }
1855     trace_v9fs_read_return(pdu->tag, pdu->id, count, err);
1856 out:
1857     put_fid(pdu, fidp);
1858 out_nofid:
1859     pdu_complete(pdu, err);
1860 }
1861 
1862 static size_t v9fs_readdir_data_size(V9fsString *name)
1863 {
1864     /*
1865      * Size of each dirent on the wire: size of qid (13) + size of offset (8)
1866      * size of type (1) + size of name.size (2) + strlen(name.data)
1867      */
1868     return 24 + v9fs_string_size(name);
1869 }
1870 
1871 static int coroutine_fn v9fs_do_readdir(V9fsPDU *pdu, V9fsFidState *fidp,
1872                                         int32_t max_count)
1873 {
1874     size_t size;
1875     V9fsQID qid;
1876     V9fsString name;
1877     int len, err = 0;
1878     int32_t count = 0;
1879     off_t saved_dir_pos;
1880     struct dirent *dent;
1881 
1882     /* save the directory position */
1883     saved_dir_pos = v9fs_co_telldir(pdu, fidp);
1884     if (saved_dir_pos < 0) {
1885         return saved_dir_pos;
1886     }
1887 
1888     while (1) {
1889         v9fs_readdir_lock(&fidp->fs.dir);
1890 
1891         err = v9fs_co_readdir(pdu, fidp, &dent);
1892         if (err || !dent) {
1893             break;
1894         }
1895         v9fs_string_init(&name);
1896         v9fs_string_sprintf(&name, "%s", dent->d_name);
1897         if ((count + v9fs_readdir_data_size(&name)) > max_count) {
1898             v9fs_readdir_unlock(&fidp->fs.dir);
1899 
1900             /* Ran out of buffer. Set dir back to old position and return */
1901             v9fs_co_seekdir(pdu, fidp, saved_dir_pos);
1902             v9fs_string_free(&name);
1903             return count;
1904         }
1905         /*
1906          * Fill up just the path field of qid because the client uses
1907          * only that. To fill the entire qid structure we will have
1908          * to stat each dirent found, which is expensive
1909          */
1910         size = MIN(sizeof(dent->d_ino), sizeof(qid.path));
1911         memcpy(&qid.path, &dent->d_ino, size);
1912         /* Fill the other fields with dummy values */
1913         qid.type = 0;
1914         qid.version = 0;
1915 
1916         /* 11 = 7 + 4 (7 = start offset, 4 = space for storing count) */
1917         len = pdu_marshal(pdu, 11 + count, "Qqbs",
1918                           &qid, dent->d_off,
1919                           dent->d_type, &name);
1920 
1921         v9fs_readdir_unlock(&fidp->fs.dir);
1922 
1923         if (len < 0) {
1924             v9fs_co_seekdir(pdu, fidp, saved_dir_pos);
1925             v9fs_string_free(&name);
1926             return len;
1927         }
1928         count += len;
1929         v9fs_string_free(&name);
1930         saved_dir_pos = dent->d_off;
1931     }
1932 
1933     v9fs_readdir_unlock(&fidp->fs.dir);
1934 
1935     if (err < 0) {
1936         return err;
1937     }
1938     return count;
1939 }
1940 
1941 static void coroutine_fn v9fs_readdir(void *opaque)
1942 {
1943     int32_t fid;
1944     V9fsFidState *fidp;
1945     ssize_t retval = 0;
1946     size_t offset = 7;
1947     uint64_t initial_offset;
1948     int32_t count;
1949     uint32_t max_count;
1950     V9fsPDU *pdu = opaque;
1951 
1952     retval = pdu_unmarshal(pdu, offset, "dqd", &fid,
1953                            &initial_offset, &max_count);
1954     if (retval < 0) {
1955         goto out_nofid;
1956     }
1957     trace_v9fs_readdir(pdu->tag, pdu->id, fid, initial_offset, max_count);
1958 
1959     fidp = get_fid(pdu, fid);
1960     if (fidp == NULL) {
1961         retval = -EINVAL;
1962         goto out_nofid;
1963     }
1964     if (!fidp->fs.dir.stream) {
1965         retval = -EINVAL;
1966         goto out;
1967     }
1968     if (initial_offset == 0) {
1969         v9fs_co_rewinddir(pdu, fidp);
1970     } else {
1971         v9fs_co_seekdir(pdu, fidp, initial_offset);
1972     }
1973     count = v9fs_do_readdir(pdu, fidp, max_count);
1974     if (count < 0) {
1975         retval = count;
1976         goto out;
1977     }
1978     retval = pdu_marshal(pdu, offset, "d", count);
1979     if (retval < 0) {
1980         goto out;
1981     }
1982     retval += count + offset;
1983     trace_v9fs_readdir_return(pdu->tag, pdu->id, count, retval);
1984 out:
1985     put_fid(pdu, fidp);
1986 out_nofid:
1987     pdu_complete(pdu, retval);
1988 }
1989 
1990 static int v9fs_xattr_write(V9fsState *s, V9fsPDU *pdu, V9fsFidState *fidp,
1991                             uint64_t off, uint32_t count,
1992                             struct iovec *sg, int cnt)
1993 {
1994     int i, to_copy;
1995     ssize_t err = 0;
1996     uint64_t write_count;
1997     size_t offset = 7;
1998 
1999 
2000     if (fidp->fs.xattr.len < off) {
2001         err = -ENOSPC;
2002         goto out;
2003     }
2004     write_count = fidp->fs.xattr.len - off;
2005     if (write_count > count) {
2006         write_count = count;
2007     }
2008     err = pdu_marshal(pdu, offset, "d", write_count);
2009     if (err < 0) {
2010         return err;
2011     }
2012     err += offset;
2013     fidp->fs.xattr.copied_len += write_count;
2014     /*
2015      * Now copy the content from sg list
2016      */
2017     for (i = 0; i < cnt; i++) {
2018         if (write_count > sg[i].iov_len) {
2019             to_copy = sg[i].iov_len;
2020         } else {
2021             to_copy = write_count;
2022         }
2023         memcpy((char *)fidp->fs.xattr.value + off, sg[i].iov_base, to_copy);
2024         /* updating vs->off since we are not using below */
2025         off += to_copy;
2026         write_count -= to_copy;
2027     }
2028 out:
2029     return err;
2030 }
2031 
2032 static void coroutine_fn v9fs_write(void *opaque)
2033 {
2034     ssize_t err;
2035     int32_t fid;
2036     uint64_t off;
2037     uint32_t count;
2038     int32_t len = 0;
2039     int32_t total = 0;
2040     size_t offset = 7;
2041     V9fsFidState *fidp;
2042     V9fsPDU *pdu = opaque;
2043     V9fsState *s = pdu->s;
2044     QEMUIOVector qiov_full;
2045     QEMUIOVector qiov;
2046 
2047     err = pdu_unmarshal(pdu, offset, "dqd", &fid, &off, &count);
2048     if (err < 0) {
2049         pdu_complete(pdu, err);
2050         return;
2051     }
2052     offset += err;
2053     v9fs_init_qiov_from_pdu(&qiov_full, pdu, offset, count, true);
2054     trace_v9fs_write(pdu->tag, pdu->id, fid, off, count, qiov_full.niov);
2055 
2056     fidp = get_fid(pdu, fid);
2057     if (fidp == NULL) {
2058         err = -EINVAL;
2059         goto out_nofid;
2060     }
2061     if (fidp->fid_type == P9_FID_FILE) {
2062         if (fidp->fs.fd == -1) {
2063             err = -EINVAL;
2064             goto out;
2065         }
2066     } else if (fidp->fid_type == P9_FID_XATTR) {
2067         /*
2068          * setxattr operation
2069          */
2070         err = v9fs_xattr_write(s, pdu, fidp, off, count,
2071                                qiov_full.iov, qiov_full.niov);
2072         goto out;
2073     } else {
2074         err = -EINVAL;
2075         goto out;
2076     }
2077     qemu_iovec_init(&qiov, qiov_full.niov);
2078     do {
2079         qemu_iovec_reset(&qiov);
2080         qemu_iovec_concat(&qiov, &qiov_full, total, qiov_full.size - total);
2081         if (0) {
2082             print_sg(qiov.iov, qiov.niov);
2083         }
2084         /* Loop in case of EINTR */
2085         do {
2086             len = v9fs_co_pwritev(pdu, fidp, qiov.iov, qiov.niov, off);
2087             if (len >= 0) {
2088                 off   += len;
2089                 total += len;
2090             }
2091         } while (len == -EINTR && !pdu->cancelled);
2092         if (len < 0) {
2093             /* IO error return the error */
2094             err = len;
2095             goto out_qiov;
2096         }
2097     } while (total < count && len > 0);
2098 
2099     offset = 7;
2100     err = pdu_marshal(pdu, offset, "d", total);
2101     if (err < 0) {
2102         goto out_qiov;
2103     }
2104     err += offset;
2105     trace_v9fs_write_return(pdu->tag, pdu->id, total, err);
2106 out_qiov:
2107     qemu_iovec_destroy(&qiov);
2108 out:
2109     put_fid(pdu, fidp);
2110 out_nofid:
2111     qemu_iovec_destroy(&qiov_full);
2112     pdu_complete(pdu, err);
2113 }
2114 
2115 static void coroutine_fn v9fs_create(void *opaque)
2116 {
2117     int32_t fid;
2118     int err = 0;
2119     size_t offset = 7;
2120     V9fsFidState *fidp;
2121     V9fsQID qid;
2122     int32_t perm;
2123     int8_t mode;
2124     V9fsPath path;
2125     struct stat stbuf;
2126     V9fsString name;
2127     V9fsString extension;
2128     int iounit;
2129     V9fsPDU *pdu = opaque;
2130 
2131     v9fs_path_init(&path);
2132     v9fs_string_init(&name);
2133     v9fs_string_init(&extension);
2134     err = pdu_unmarshal(pdu, offset, "dsdbs", &fid, &name,
2135                         &perm, &mode, &extension);
2136     if (err < 0) {
2137         goto out_nofid;
2138     }
2139     trace_v9fs_create(pdu->tag, pdu->id, fid, name.data, perm, mode);
2140 
2141     if (name_is_illegal(name.data)) {
2142         err = -ENOENT;
2143         goto out_nofid;
2144     }
2145 
2146     if (!strcmp(".", name.data) || !strcmp("..", name.data)) {
2147         err = -EEXIST;
2148         goto out_nofid;
2149     }
2150 
2151     fidp = get_fid(pdu, fid);
2152     if (fidp == NULL) {
2153         err = -EINVAL;
2154         goto out_nofid;
2155     }
2156     if (perm & P9_STAT_MODE_DIR) {
2157         err = v9fs_co_mkdir(pdu, fidp, &name, perm & 0777,
2158                             fidp->uid, -1, &stbuf);
2159         if (err < 0) {
2160             goto out;
2161         }
2162         err = v9fs_co_name_to_path(pdu, &fidp->path, name.data, &path);
2163         if (err < 0) {
2164             goto out;
2165         }
2166         v9fs_path_copy(&fidp->path, &path);
2167         err = v9fs_co_opendir(pdu, fidp);
2168         if (err < 0) {
2169             goto out;
2170         }
2171         fidp->fid_type = P9_FID_DIR;
2172     } else if (perm & P9_STAT_MODE_SYMLINK) {
2173         err = v9fs_co_symlink(pdu, fidp, &name,
2174                               extension.data, -1 , &stbuf);
2175         if (err < 0) {
2176             goto out;
2177         }
2178         err = v9fs_co_name_to_path(pdu, &fidp->path, name.data, &path);
2179         if (err < 0) {
2180             goto out;
2181         }
2182         v9fs_path_copy(&fidp->path, &path);
2183     } else if (perm & P9_STAT_MODE_LINK) {
2184         int32_t ofid = atoi(extension.data);
2185         V9fsFidState *ofidp = get_fid(pdu, ofid);
2186         if (ofidp == NULL) {
2187             err = -EINVAL;
2188             goto out;
2189         }
2190         err = v9fs_co_link(pdu, ofidp, fidp, &name);
2191         put_fid(pdu, ofidp);
2192         if (err < 0) {
2193             goto out;
2194         }
2195         err = v9fs_co_name_to_path(pdu, &fidp->path, name.data, &path);
2196         if (err < 0) {
2197             fidp->fid_type = P9_FID_NONE;
2198             goto out;
2199         }
2200         v9fs_path_copy(&fidp->path, &path);
2201         err = v9fs_co_lstat(pdu, &fidp->path, &stbuf);
2202         if (err < 0) {
2203             fidp->fid_type = P9_FID_NONE;
2204             goto out;
2205         }
2206     } else if (perm & P9_STAT_MODE_DEVICE) {
2207         char ctype;
2208         uint32_t major, minor;
2209         mode_t nmode = 0;
2210 
2211         if (sscanf(extension.data, "%c %u %u", &ctype, &major, &minor) != 3) {
2212             err = -errno;
2213             goto out;
2214         }
2215 
2216         switch (ctype) {
2217         case 'c':
2218             nmode = S_IFCHR;
2219             break;
2220         case 'b':
2221             nmode = S_IFBLK;
2222             break;
2223         default:
2224             err = -EIO;
2225             goto out;
2226         }
2227 
2228         nmode |= perm & 0777;
2229         err = v9fs_co_mknod(pdu, fidp, &name, fidp->uid, -1,
2230                             makedev(major, minor), nmode, &stbuf);
2231         if (err < 0) {
2232             goto out;
2233         }
2234         err = v9fs_co_name_to_path(pdu, &fidp->path, name.data, &path);
2235         if (err < 0) {
2236             goto out;
2237         }
2238         v9fs_path_copy(&fidp->path, &path);
2239     } else if (perm & P9_STAT_MODE_NAMED_PIPE) {
2240         err = v9fs_co_mknod(pdu, fidp, &name, fidp->uid, -1,
2241                             0, S_IFIFO | (perm & 0777), &stbuf);
2242         if (err < 0) {
2243             goto out;
2244         }
2245         err = v9fs_co_name_to_path(pdu, &fidp->path, name.data, &path);
2246         if (err < 0) {
2247             goto out;
2248         }
2249         v9fs_path_copy(&fidp->path, &path);
2250     } else if (perm & P9_STAT_MODE_SOCKET) {
2251         err = v9fs_co_mknod(pdu, fidp, &name, fidp->uid, -1,
2252                             0, S_IFSOCK | (perm & 0777), &stbuf);
2253         if (err < 0) {
2254             goto out;
2255         }
2256         err = v9fs_co_name_to_path(pdu, &fidp->path, name.data, &path);
2257         if (err < 0) {
2258             goto out;
2259         }
2260         v9fs_path_copy(&fidp->path, &path);
2261     } else {
2262         err = v9fs_co_open2(pdu, fidp, &name, -1,
2263                             omode_to_uflags(mode)|O_CREAT, perm, &stbuf);
2264         if (err < 0) {
2265             goto out;
2266         }
2267         fidp->fid_type = P9_FID_FILE;
2268         fidp->open_flags = omode_to_uflags(mode);
2269         if (fidp->open_flags & O_EXCL) {
2270             /*
2271              * We let the host file system do O_EXCL check
2272              * We should not reclaim such fd
2273              */
2274             fidp->flags |= FID_NON_RECLAIMABLE;
2275         }
2276     }
2277     iounit = get_iounit(pdu, &fidp->path);
2278     stat_to_qid(&stbuf, &qid);
2279     err = pdu_marshal(pdu, offset, "Qd", &qid, iounit);
2280     if (err < 0) {
2281         goto out;
2282     }
2283     err += offset;
2284     trace_v9fs_create_return(pdu->tag, pdu->id,
2285                              qid.type, qid.version, qid.path, iounit);
2286 out:
2287     put_fid(pdu, fidp);
2288 out_nofid:
2289    pdu_complete(pdu, err);
2290    v9fs_string_free(&name);
2291    v9fs_string_free(&extension);
2292    v9fs_path_free(&path);
2293 }
2294 
2295 static void coroutine_fn v9fs_symlink(void *opaque)
2296 {
2297     V9fsPDU *pdu = opaque;
2298     V9fsString name;
2299     V9fsString symname;
2300     V9fsFidState *dfidp;
2301     V9fsQID qid;
2302     struct stat stbuf;
2303     int32_t dfid;
2304     int err = 0;
2305     gid_t gid;
2306     size_t offset = 7;
2307 
2308     v9fs_string_init(&name);
2309     v9fs_string_init(&symname);
2310     err = pdu_unmarshal(pdu, offset, "dssd", &dfid, &name, &symname, &gid);
2311     if (err < 0) {
2312         goto out_nofid;
2313     }
2314     trace_v9fs_symlink(pdu->tag, pdu->id, dfid, name.data, symname.data, gid);
2315 
2316     if (name_is_illegal(name.data)) {
2317         err = -ENOENT;
2318         goto out_nofid;
2319     }
2320 
2321     if (!strcmp(".", name.data) || !strcmp("..", name.data)) {
2322         err = -EEXIST;
2323         goto out_nofid;
2324     }
2325 
2326     dfidp = get_fid(pdu, dfid);
2327     if (dfidp == NULL) {
2328         err = -EINVAL;
2329         goto out_nofid;
2330     }
2331     err = v9fs_co_symlink(pdu, dfidp, &name, symname.data, gid, &stbuf);
2332     if (err < 0) {
2333         goto out;
2334     }
2335     stat_to_qid(&stbuf, &qid);
2336     err =  pdu_marshal(pdu, offset, "Q", &qid);
2337     if (err < 0) {
2338         goto out;
2339     }
2340     err += offset;
2341     trace_v9fs_symlink_return(pdu->tag, pdu->id,
2342                               qid.type, qid.version, qid.path);
2343 out:
2344     put_fid(pdu, dfidp);
2345 out_nofid:
2346     pdu_complete(pdu, err);
2347     v9fs_string_free(&name);
2348     v9fs_string_free(&symname);
2349 }
2350 
2351 static void coroutine_fn v9fs_flush(void *opaque)
2352 {
2353     ssize_t err;
2354     int16_t tag;
2355     size_t offset = 7;
2356     V9fsPDU *cancel_pdu = NULL;
2357     V9fsPDU *pdu = opaque;
2358     V9fsState *s = pdu->s;
2359 
2360     err = pdu_unmarshal(pdu, offset, "w", &tag);
2361     if (err < 0) {
2362         pdu_complete(pdu, err);
2363         return;
2364     }
2365     trace_v9fs_flush(pdu->tag, pdu->id, tag);
2366 
2367     if (pdu->tag == tag) {
2368         error_report("Warning: the guest sent a self-referencing 9P flush request");
2369     } else {
2370         QLIST_FOREACH(cancel_pdu, &s->active_list, next) {
2371             if (cancel_pdu->tag == tag) {
2372                 break;
2373             }
2374         }
2375     }
2376     if (cancel_pdu) {
2377         cancel_pdu->cancelled = 1;
2378         /*
2379          * Wait for pdu to complete.
2380          */
2381         qemu_co_queue_wait(&cancel_pdu->complete, NULL);
2382         cancel_pdu->cancelled = 0;
2383         pdu_free(cancel_pdu);
2384     }
2385     pdu_complete(pdu, 7);
2386 }
2387 
2388 static void coroutine_fn v9fs_link(void *opaque)
2389 {
2390     V9fsPDU *pdu = opaque;
2391     int32_t dfid, oldfid;
2392     V9fsFidState *dfidp, *oldfidp;
2393     V9fsString name;
2394     size_t offset = 7;
2395     int err = 0;
2396 
2397     v9fs_string_init(&name);
2398     err = pdu_unmarshal(pdu, offset, "dds", &dfid, &oldfid, &name);
2399     if (err < 0) {
2400         goto out_nofid;
2401     }
2402     trace_v9fs_link(pdu->tag, pdu->id, dfid, oldfid, name.data);
2403 
2404     if (name_is_illegal(name.data)) {
2405         err = -ENOENT;
2406         goto out_nofid;
2407     }
2408 
2409     if (!strcmp(".", name.data) || !strcmp("..", name.data)) {
2410         err = -EEXIST;
2411         goto out_nofid;
2412     }
2413 
2414     dfidp = get_fid(pdu, dfid);
2415     if (dfidp == NULL) {
2416         err = -ENOENT;
2417         goto out_nofid;
2418     }
2419 
2420     oldfidp = get_fid(pdu, oldfid);
2421     if (oldfidp == NULL) {
2422         err = -ENOENT;
2423         goto out;
2424     }
2425     err = v9fs_co_link(pdu, oldfidp, dfidp, &name);
2426     if (!err) {
2427         err = offset;
2428     }
2429     put_fid(pdu, oldfidp);
2430 out:
2431     put_fid(pdu, dfidp);
2432 out_nofid:
2433     v9fs_string_free(&name);
2434     pdu_complete(pdu, err);
2435 }
2436 
2437 /* Only works with path name based fid */
2438 static void coroutine_fn v9fs_remove(void *opaque)
2439 {
2440     int32_t fid;
2441     int err = 0;
2442     size_t offset = 7;
2443     V9fsFidState *fidp;
2444     V9fsPDU *pdu = opaque;
2445 
2446     err = pdu_unmarshal(pdu, offset, "d", &fid);
2447     if (err < 0) {
2448         goto out_nofid;
2449     }
2450     trace_v9fs_remove(pdu->tag, pdu->id, fid);
2451 
2452     fidp = get_fid(pdu, fid);
2453     if (fidp == NULL) {
2454         err = -EINVAL;
2455         goto out_nofid;
2456     }
2457     /* if fs driver is not path based, return EOPNOTSUPP */
2458     if (!(pdu->s->ctx.export_flags & V9FS_PATHNAME_FSCONTEXT)) {
2459         err = -EOPNOTSUPP;
2460         goto out_err;
2461     }
2462     /*
2463      * IF the file is unlinked, we cannot reopen
2464      * the file later. So don't reclaim fd
2465      */
2466     err = v9fs_mark_fids_unreclaim(pdu, &fidp->path);
2467     if (err < 0) {
2468         goto out_err;
2469     }
2470     err = v9fs_co_remove(pdu, &fidp->path);
2471     if (!err) {
2472         err = offset;
2473     }
2474 out_err:
2475     /* For TREMOVE we need to clunk the fid even on failed remove */
2476     clunk_fid(pdu->s, fidp->fid);
2477     put_fid(pdu, fidp);
2478 out_nofid:
2479     pdu_complete(pdu, err);
2480 }
2481 
2482 static void coroutine_fn v9fs_unlinkat(void *opaque)
2483 {
2484     int err = 0;
2485     V9fsString name;
2486     int32_t dfid, flags;
2487     size_t offset = 7;
2488     V9fsPath path;
2489     V9fsFidState *dfidp;
2490     V9fsPDU *pdu = opaque;
2491 
2492     v9fs_string_init(&name);
2493     err = pdu_unmarshal(pdu, offset, "dsd", &dfid, &name, &flags);
2494     if (err < 0) {
2495         goto out_nofid;
2496     }
2497 
2498     if (name_is_illegal(name.data)) {
2499         err = -ENOENT;
2500         goto out_nofid;
2501     }
2502 
2503     if (!strcmp(".", name.data)) {
2504         err = -EINVAL;
2505         goto out_nofid;
2506     }
2507 
2508     if (!strcmp("..", name.data)) {
2509         err = -ENOTEMPTY;
2510         goto out_nofid;
2511     }
2512 
2513     dfidp = get_fid(pdu, dfid);
2514     if (dfidp == NULL) {
2515         err = -EINVAL;
2516         goto out_nofid;
2517     }
2518     /*
2519      * IF the file is unlinked, we cannot reopen
2520      * the file later. So don't reclaim fd
2521      */
2522     v9fs_path_init(&path);
2523     err = v9fs_co_name_to_path(pdu, &dfidp->path, name.data, &path);
2524     if (err < 0) {
2525         goto out_err;
2526     }
2527     err = v9fs_mark_fids_unreclaim(pdu, &path);
2528     if (err < 0) {
2529         goto out_err;
2530     }
2531     err = v9fs_co_unlinkat(pdu, &dfidp->path, &name, flags);
2532     if (!err) {
2533         err = offset;
2534     }
2535 out_err:
2536     put_fid(pdu, dfidp);
2537     v9fs_path_free(&path);
2538 out_nofid:
2539     pdu_complete(pdu, err);
2540     v9fs_string_free(&name);
2541 }
2542 
2543 
2544 /* Only works with path name based fid */
2545 static int coroutine_fn v9fs_complete_rename(V9fsPDU *pdu, V9fsFidState *fidp,
2546                                              int32_t newdirfid,
2547                                              V9fsString *name)
2548 {
2549     char *end;
2550     int err = 0;
2551     V9fsPath new_path;
2552     V9fsFidState *tfidp;
2553     V9fsState *s = pdu->s;
2554     V9fsFidState *dirfidp = NULL;
2555     char *old_name, *new_name;
2556 
2557     v9fs_path_init(&new_path);
2558     if (newdirfid != -1) {
2559         dirfidp = get_fid(pdu, newdirfid);
2560         if (dirfidp == NULL) {
2561             err = -ENOENT;
2562             goto out_nofid;
2563         }
2564         if (fidp->fid_type != P9_FID_NONE) {
2565             err = -EINVAL;
2566             goto out;
2567         }
2568         v9fs_co_name_to_path(pdu, &dirfidp->path, name->data, &new_path);
2569     } else {
2570         old_name = fidp->path.data;
2571         end = strrchr(old_name, '/');
2572         if (end) {
2573             end++;
2574         } else {
2575             end = old_name;
2576         }
2577         new_name = g_malloc0(end - old_name + name->size + 1);
2578         strncat(new_name, old_name, end - old_name);
2579         strncat(new_name + (end - old_name), name->data, name->size);
2580         v9fs_co_name_to_path(pdu, NULL, new_name, &new_path);
2581         g_free(new_name);
2582     }
2583     err = v9fs_co_rename(pdu, &fidp->path, &new_path);
2584     if (err < 0) {
2585         goto out;
2586     }
2587     /*
2588      * Fixup fid's pointing to the old name to
2589      * start pointing to the new name
2590      */
2591     for (tfidp = s->fid_list; tfidp; tfidp = tfidp->next) {
2592         if (v9fs_path_is_ancestor(&fidp->path, &tfidp->path)) {
2593             /* replace the name */
2594             v9fs_fix_path(&tfidp->path, &new_path, strlen(fidp->path.data));
2595         }
2596     }
2597 out:
2598     if (dirfidp) {
2599         put_fid(pdu, dirfidp);
2600     }
2601     v9fs_path_free(&new_path);
2602 out_nofid:
2603     return err;
2604 }
2605 
2606 /* Only works with path name based fid */
2607 static void coroutine_fn v9fs_rename(void *opaque)
2608 {
2609     int32_t fid;
2610     ssize_t err = 0;
2611     size_t offset = 7;
2612     V9fsString name;
2613     int32_t newdirfid;
2614     V9fsFidState *fidp;
2615     V9fsPDU *pdu = opaque;
2616     V9fsState *s = pdu->s;
2617 
2618     v9fs_string_init(&name);
2619     err = pdu_unmarshal(pdu, offset, "dds", &fid, &newdirfid, &name);
2620     if (err < 0) {
2621         goto out_nofid;
2622     }
2623 
2624     if (name_is_illegal(name.data)) {
2625         err = -ENOENT;
2626         goto out_nofid;
2627     }
2628 
2629     if (!strcmp(".", name.data) || !strcmp("..", name.data)) {
2630         err = -EISDIR;
2631         goto out_nofid;
2632     }
2633 
2634     fidp = get_fid(pdu, fid);
2635     if (fidp == NULL) {
2636         err = -ENOENT;
2637         goto out_nofid;
2638     }
2639     if (fidp->fid_type != P9_FID_NONE) {
2640         err = -EINVAL;
2641         goto out;
2642     }
2643     /* if fs driver is not path based, return EOPNOTSUPP */
2644     if (!(pdu->s->ctx.export_flags & V9FS_PATHNAME_FSCONTEXT)) {
2645         err = -EOPNOTSUPP;
2646         goto out;
2647     }
2648     v9fs_path_write_lock(s);
2649     err = v9fs_complete_rename(pdu, fidp, newdirfid, &name);
2650     v9fs_path_unlock(s);
2651     if (!err) {
2652         err = offset;
2653     }
2654 out:
2655     put_fid(pdu, fidp);
2656 out_nofid:
2657     pdu_complete(pdu, err);
2658     v9fs_string_free(&name);
2659 }
2660 
2661 static void coroutine_fn v9fs_fix_fid_paths(V9fsPDU *pdu, V9fsPath *olddir,
2662                                             V9fsString *old_name,
2663                                             V9fsPath *newdir,
2664                                             V9fsString *new_name)
2665 {
2666     V9fsFidState *tfidp;
2667     V9fsPath oldpath, newpath;
2668     V9fsState *s = pdu->s;
2669 
2670 
2671     v9fs_path_init(&oldpath);
2672     v9fs_path_init(&newpath);
2673     v9fs_co_name_to_path(pdu, olddir, old_name->data, &oldpath);
2674     v9fs_co_name_to_path(pdu, newdir, new_name->data, &newpath);
2675 
2676     /*
2677      * Fixup fid's pointing to the old name to
2678      * start pointing to the new name
2679      */
2680     for (tfidp = s->fid_list; tfidp; tfidp = tfidp->next) {
2681         if (v9fs_path_is_ancestor(&oldpath, &tfidp->path)) {
2682             /* replace the name */
2683             v9fs_fix_path(&tfidp->path, &newpath, strlen(oldpath.data));
2684         }
2685     }
2686     v9fs_path_free(&oldpath);
2687     v9fs_path_free(&newpath);
2688 }
2689 
2690 static int coroutine_fn v9fs_complete_renameat(V9fsPDU *pdu, int32_t olddirfid,
2691                                                V9fsString *old_name,
2692                                                int32_t newdirfid,
2693                                                V9fsString *new_name)
2694 {
2695     int err = 0;
2696     V9fsState *s = pdu->s;
2697     V9fsFidState *newdirfidp = NULL, *olddirfidp = NULL;
2698 
2699     olddirfidp = get_fid(pdu, olddirfid);
2700     if (olddirfidp == NULL) {
2701         err = -ENOENT;
2702         goto out;
2703     }
2704     if (newdirfid != -1) {
2705         newdirfidp = get_fid(pdu, newdirfid);
2706         if (newdirfidp == NULL) {
2707             err = -ENOENT;
2708             goto out;
2709         }
2710     } else {
2711         newdirfidp = get_fid(pdu, olddirfid);
2712     }
2713 
2714     err = v9fs_co_renameat(pdu, &olddirfidp->path, old_name,
2715                            &newdirfidp->path, new_name);
2716     if (err < 0) {
2717         goto out;
2718     }
2719     if (s->ctx.export_flags & V9FS_PATHNAME_FSCONTEXT) {
2720         /* Only for path based fid  we need to do the below fixup */
2721         v9fs_fix_fid_paths(pdu, &olddirfidp->path, old_name,
2722                            &newdirfidp->path, new_name);
2723     }
2724 out:
2725     if (olddirfidp) {
2726         put_fid(pdu, olddirfidp);
2727     }
2728     if (newdirfidp) {
2729         put_fid(pdu, newdirfidp);
2730     }
2731     return err;
2732 }
2733 
2734 static void coroutine_fn v9fs_renameat(void *opaque)
2735 {
2736     ssize_t err = 0;
2737     size_t offset = 7;
2738     V9fsPDU *pdu = opaque;
2739     V9fsState *s = pdu->s;
2740     int32_t olddirfid, newdirfid;
2741     V9fsString old_name, new_name;
2742 
2743     v9fs_string_init(&old_name);
2744     v9fs_string_init(&new_name);
2745     err = pdu_unmarshal(pdu, offset, "dsds", &olddirfid,
2746                         &old_name, &newdirfid, &new_name);
2747     if (err < 0) {
2748         goto out_err;
2749     }
2750 
2751     if (name_is_illegal(old_name.data) || name_is_illegal(new_name.data)) {
2752         err = -ENOENT;
2753         goto out_err;
2754     }
2755 
2756     if (!strcmp(".", old_name.data) || !strcmp("..", old_name.data) ||
2757         !strcmp(".", new_name.data) || !strcmp("..", new_name.data)) {
2758         err = -EISDIR;
2759         goto out_err;
2760     }
2761 
2762     v9fs_path_write_lock(s);
2763     err = v9fs_complete_renameat(pdu, olddirfid,
2764                                  &old_name, newdirfid, &new_name);
2765     v9fs_path_unlock(s);
2766     if (!err) {
2767         err = offset;
2768     }
2769 
2770 out_err:
2771     pdu_complete(pdu, err);
2772     v9fs_string_free(&old_name);
2773     v9fs_string_free(&new_name);
2774 }
2775 
2776 static void coroutine_fn v9fs_wstat(void *opaque)
2777 {
2778     int32_t fid;
2779     int err = 0;
2780     int16_t unused;
2781     V9fsStat v9stat;
2782     size_t offset = 7;
2783     struct stat stbuf;
2784     V9fsFidState *fidp;
2785     V9fsPDU *pdu = opaque;
2786 
2787     v9fs_stat_init(&v9stat);
2788     err = pdu_unmarshal(pdu, offset, "dwS", &fid, &unused, &v9stat);
2789     if (err < 0) {
2790         goto out_nofid;
2791     }
2792     trace_v9fs_wstat(pdu->tag, pdu->id, fid,
2793                      v9stat.mode, v9stat.atime, v9stat.mtime);
2794 
2795     fidp = get_fid(pdu, fid);
2796     if (fidp == NULL) {
2797         err = -EINVAL;
2798         goto out_nofid;
2799     }
2800     /* do we need to sync the file? */
2801     if (donttouch_stat(&v9stat)) {
2802         err = v9fs_co_fsync(pdu, fidp, 0);
2803         goto out;
2804     }
2805     if (v9stat.mode != -1) {
2806         uint32_t v9_mode;
2807         err = v9fs_co_lstat(pdu, &fidp->path, &stbuf);
2808         if (err < 0) {
2809             goto out;
2810         }
2811         v9_mode = stat_to_v9mode(&stbuf);
2812         if ((v9stat.mode & P9_STAT_MODE_TYPE_BITS) !=
2813             (v9_mode & P9_STAT_MODE_TYPE_BITS)) {
2814             /* Attempting to change the type */
2815             err = -EIO;
2816             goto out;
2817         }
2818         err = v9fs_co_chmod(pdu, &fidp->path,
2819                             v9mode_to_mode(v9stat.mode,
2820                                            &v9stat.extension));
2821         if (err < 0) {
2822             goto out;
2823         }
2824     }
2825     if (v9stat.mtime != -1 || v9stat.atime != -1) {
2826         struct timespec times[2];
2827         if (v9stat.atime != -1) {
2828             times[0].tv_sec = v9stat.atime;
2829             times[0].tv_nsec = 0;
2830         } else {
2831             times[0].tv_nsec = UTIME_OMIT;
2832         }
2833         if (v9stat.mtime != -1) {
2834             times[1].tv_sec = v9stat.mtime;
2835             times[1].tv_nsec = 0;
2836         } else {
2837             times[1].tv_nsec = UTIME_OMIT;
2838         }
2839         err = v9fs_co_utimensat(pdu, &fidp->path, times);
2840         if (err < 0) {
2841             goto out;
2842         }
2843     }
2844     if (v9stat.n_gid != -1 || v9stat.n_uid != -1) {
2845         err = v9fs_co_chown(pdu, &fidp->path, v9stat.n_uid, v9stat.n_gid);
2846         if (err < 0) {
2847             goto out;
2848         }
2849     }
2850     if (v9stat.name.size != 0) {
2851         err = v9fs_complete_rename(pdu, fidp, -1, &v9stat.name);
2852         if (err < 0) {
2853             goto out;
2854         }
2855     }
2856     if (v9stat.length != -1) {
2857         err = v9fs_co_truncate(pdu, &fidp->path, v9stat.length);
2858         if (err < 0) {
2859             goto out;
2860         }
2861     }
2862     err = offset;
2863 out:
2864     put_fid(pdu, fidp);
2865 out_nofid:
2866     v9fs_stat_free(&v9stat);
2867     pdu_complete(pdu, err);
2868 }
2869 
2870 static int v9fs_fill_statfs(V9fsState *s, V9fsPDU *pdu, struct statfs *stbuf)
2871 {
2872     uint32_t f_type;
2873     uint32_t f_bsize;
2874     uint64_t f_blocks;
2875     uint64_t f_bfree;
2876     uint64_t f_bavail;
2877     uint64_t f_files;
2878     uint64_t f_ffree;
2879     uint64_t fsid_val;
2880     uint32_t f_namelen;
2881     size_t offset = 7;
2882     int32_t bsize_factor;
2883 
2884     /*
2885      * compute bsize factor based on host file system block size
2886      * and client msize
2887      */
2888     bsize_factor = (s->msize - P9_IOHDRSZ)/stbuf->f_bsize;
2889     if (!bsize_factor) {
2890         bsize_factor = 1;
2891     }
2892     f_type  = stbuf->f_type;
2893     f_bsize = stbuf->f_bsize;
2894     f_bsize *= bsize_factor;
2895     /*
2896      * f_bsize is adjusted(multiplied) by bsize factor, so we need to
2897      * adjust(divide) the number of blocks, free blocks and available
2898      * blocks by bsize factor
2899      */
2900     f_blocks = stbuf->f_blocks/bsize_factor;
2901     f_bfree  = stbuf->f_bfree/bsize_factor;
2902     f_bavail = stbuf->f_bavail/bsize_factor;
2903     f_files  = stbuf->f_files;
2904     f_ffree  = stbuf->f_ffree;
2905     fsid_val = (unsigned int) stbuf->f_fsid.__val[0] |
2906                (unsigned long long)stbuf->f_fsid.__val[1] << 32;
2907     f_namelen = stbuf->f_namelen;
2908 
2909     return pdu_marshal(pdu, offset, "ddqqqqqqd",
2910                        f_type, f_bsize, f_blocks, f_bfree,
2911                        f_bavail, f_files, f_ffree,
2912                        fsid_val, f_namelen);
2913 }
2914 
2915 static void coroutine_fn v9fs_statfs(void *opaque)
2916 {
2917     int32_t fid;
2918     ssize_t retval = 0;
2919     size_t offset = 7;
2920     V9fsFidState *fidp;
2921     struct statfs stbuf;
2922     V9fsPDU *pdu = opaque;
2923     V9fsState *s = pdu->s;
2924 
2925     retval = pdu_unmarshal(pdu, offset, "d", &fid);
2926     if (retval < 0) {
2927         goto out_nofid;
2928     }
2929     fidp = get_fid(pdu, fid);
2930     if (fidp == NULL) {
2931         retval = -ENOENT;
2932         goto out_nofid;
2933     }
2934     retval = v9fs_co_statfs(pdu, &fidp->path, &stbuf);
2935     if (retval < 0) {
2936         goto out;
2937     }
2938     retval = v9fs_fill_statfs(s, pdu, &stbuf);
2939     if (retval < 0) {
2940         goto out;
2941     }
2942     retval += offset;
2943 out:
2944     put_fid(pdu, fidp);
2945 out_nofid:
2946     pdu_complete(pdu, retval);
2947 }
2948 
2949 static void coroutine_fn v9fs_mknod(void *opaque)
2950 {
2951 
2952     int mode;
2953     gid_t gid;
2954     int32_t fid;
2955     V9fsQID qid;
2956     int err = 0;
2957     int major, minor;
2958     size_t offset = 7;
2959     V9fsString name;
2960     struct stat stbuf;
2961     V9fsFidState *fidp;
2962     V9fsPDU *pdu = opaque;
2963 
2964     v9fs_string_init(&name);
2965     err = pdu_unmarshal(pdu, offset, "dsdddd", &fid, &name, &mode,
2966                         &major, &minor, &gid);
2967     if (err < 0) {
2968         goto out_nofid;
2969     }
2970     trace_v9fs_mknod(pdu->tag, pdu->id, fid, mode, major, minor);
2971 
2972     if (name_is_illegal(name.data)) {
2973         err = -ENOENT;
2974         goto out_nofid;
2975     }
2976 
2977     if (!strcmp(".", name.data) || !strcmp("..", name.data)) {
2978         err = -EEXIST;
2979         goto out_nofid;
2980     }
2981 
2982     fidp = get_fid(pdu, fid);
2983     if (fidp == NULL) {
2984         err = -ENOENT;
2985         goto out_nofid;
2986     }
2987     err = v9fs_co_mknod(pdu, fidp, &name, fidp->uid, gid,
2988                         makedev(major, minor), mode, &stbuf);
2989     if (err < 0) {
2990         goto out;
2991     }
2992     stat_to_qid(&stbuf, &qid);
2993     err = pdu_marshal(pdu, offset, "Q", &qid);
2994     if (err < 0) {
2995         goto out;
2996     }
2997     err += offset;
2998     trace_v9fs_mknod_return(pdu->tag, pdu->id,
2999                             qid.type, qid.version, qid.path);
3000 out:
3001     put_fid(pdu, fidp);
3002 out_nofid:
3003     pdu_complete(pdu, err);
3004     v9fs_string_free(&name);
3005 }
3006 
3007 /*
3008  * Implement posix byte range locking code
3009  * Server side handling of locking code is very simple, because 9p server in
3010  * QEMU can handle only one client. And most of the lock handling
3011  * (like conflict, merging) etc is done by the VFS layer itself, so no need to
3012  * do any thing in * qemu 9p server side lock code path.
3013  * So when a TLOCK request comes, always return success
3014  */
3015 static void coroutine_fn v9fs_lock(void *opaque)
3016 {
3017     V9fsFlock flock;
3018     size_t offset = 7;
3019     struct stat stbuf;
3020     V9fsFidState *fidp;
3021     int32_t fid, err = 0;
3022     V9fsPDU *pdu = opaque;
3023 
3024     v9fs_string_init(&flock.client_id);
3025     err = pdu_unmarshal(pdu, offset, "dbdqqds", &fid, &flock.type,
3026                         &flock.flags, &flock.start, &flock.length,
3027                         &flock.proc_id, &flock.client_id);
3028     if (err < 0) {
3029         goto out_nofid;
3030     }
3031     trace_v9fs_lock(pdu->tag, pdu->id, fid,
3032                     flock.type, flock.start, flock.length);
3033 
3034 
3035     /* We support only block flag now (that too ignored currently) */
3036     if (flock.flags & ~P9_LOCK_FLAGS_BLOCK) {
3037         err = -EINVAL;
3038         goto out_nofid;
3039     }
3040     fidp = get_fid(pdu, fid);
3041     if (fidp == NULL) {
3042         err = -ENOENT;
3043         goto out_nofid;
3044     }
3045     err = v9fs_co_fstat(pdu, fidp, &stbuf);
3046     if (err < 0) {
3047         goto out;
3048     }
3049     err = pdu_marshal(pdu, offset, "b", P9_LOCK_SUCCESS);
3050     if (err < 0) {
3051         goto out;
3052     }
3053     err += offset;
3054     trace_v9fs_lock_return(pdu->tag, pdu->id, P9_LOCK_SUCCESS);
3055 out:
3056     put_fid(pdu, fidp);
3057 out_nofid:
3058     pdu_complete(pdu, err);
3059     v9fs_string_free(&flock.client_id);
3060 }
3061 
3062 /*
3063  * When a TGETLOCK request comes, always return success because all lock
3064  * handling is done by client's VFS layer.
3065  */
3066 static void coroutine_fn v9fs_getlock(void *opaque)
3067 {
3068     size_t offset = 7;
3069     struct stat stbuf;
3070     V9fsFidState *fidp;
3071     V9fsGetlock glock;
3072     int32_t fid, err = 0;
3073     V9fsPDU *pdu = opaque;
3074 
3075     v9fs_string_init(&glock.client_id);
3076     err = pdu_unmarshal(pdu, offset, "dbqqds", &fid, &glock.type,
3077                         &glock.start, &glock.length, &glock.proc_id,
3078                         &glock.client_id);
3079     if (err < 0) {
3080         goto out_nofid;
3081     }
3082     trace_v9fs_getlock(pdu->tag, pdu->id, fid,
3083                        glock.type, glock.start, glock.length);
3084 
3085     fidp = get_fid(pdu, fid);
3086     if (fidp == NULL) {
3087         err = -ENOENT;
3088         goto out_nofid;
3089     }
3090     err = v9fs_co_fstat(pdu, fidp, &stbuf);
3091     if (err < 0) {
3092         goto out;
3093     }
3094     glock.type = P9_LOCK_TYPE_UNLCK;
3095     err = pdu_marshal(pdu, offset, "bqqds", glock.type,
3096                           glock.start, glock.length, glock.proc_id,
3097                           &glock.client_id);
3098     if (err < 0) {
3099         goto out;
3100     }
3101     err += offset;
3102     trace_v9fs_getlock_return(pdu->tag, pdu->id, glock.type, glock.start,
3103                               glock.length, glock.proc_id);
3104 out:
3105     put_fid(pdu, fidp);
3106 out_nofid:
3107     pdu_complete(pdu, err);
3108     v9fs_string_free(&glock.client_id);
3109 }
3110 
3111 static void coroutine_fn v9fs_mkdir(void *opaque)
3112 {
3113     V9fsPDU *pdu = opaque;
3114     size_t offset = 7;
3115     int32_t fid;
3116     struct stat stbuf;
3117     V9fsQID qid;
3118     V9fsString name;
3119     V9fsFidState *fidp;
3120     gid_t gid;
3121     int mode;
3122     int err = 0;
3123 
3124     v9fs_string_init(&name);
3125     err = pdu_unmarshal(pdu, offset, "dsdd", &fid, &name, &mode, &gid);
3126     if (err < 0) {
3127         goto out_nofid;
3128     }
3129     trace_v9fs_mkdir(pdu->tag, pdu->id, fid, name.data, mode, gid);
3130 
3131     if (name_is_illegal(name.data)) {
3132         err = -ENOENT;
3133         goto out_nofid;
3134     }
3135 
3136     if (!strcmp(".", name.data) || !strcmp("..", name.data)) {
3137         err = -EEXIST;
3138         goto out_nofid;
3139     }
3140 
3141     fidp = get_fid(pdu, fid);
3142     if (fidp == NULL) {
3143         err = -ENOENT;
3144         goto out_nofid;
3145     }
3146     err = v9fs_co_mkdir(pdu, fidp, &name, mode, fidp->uid, gid, &stbuf);
3147     if (err < 0) {
3148         goto out;
3149     }
3150     stat_to_qid(&stbuf, &qid);
3151     err = pdu_marshal(pdu, offset, "Q", &qid);
3152     if (err < 0) {
3153         goto out;
3154     }
3155     err += offset;
3156     trace_v9fs_mkdir_return(pdu->tag, pdu->id,
3157                             qid.type, qid.version, qid.path, err);
3158 out:
3159     put_fid(pdu, fidp);
3160 out_nofid:
3161     pdu_complete(pdu, err);
3162     v9fs_string_free(&name);
3163 }
3164 
3165 static void coroutine_fn v9fs_xattrwalk(void *opaque)
3166 {
3167     int64_t size;
3168     V9fsString name;
3169     ssize_t err = 0;
3170     size_t offset = 7;
3171     int32_t fid, newfid;
3172     V9fsFidState *file_fidp;
3173     V9fsFidState *xattr_fidp = NULL;
3174     V9fsPDU *pdu = opaque;
3175     V9fsState *s = pdu->s;
3176 
3177     v9fs_string_init(&name);
3178     err = pdu_unmarshal(pdu, offset, "dds", &fid, &newfid, &name);
3179     if (err < 0) {
3180         goto out_nofid;
3181     }
3182     trace_v9fs_xattrwalk(pdu->tag, pdu->id, fid, newfid, name.data);
3183 
3184     file_fidp = get_fid(pdu, fid);
3185     if (file_fidp == NULL) {
3186         err = -ENOENT;
3187         goto out_nofid;
3188     }
3189     xattr_fidp = alloc_fid(s, newfid);
3190     if (xattr_fidp == NULL) {
3191         err = -EINVAL;
3192         goto out;
3193     }
3194     v9fs_path_copy(&xattr_fidp->path, &file_fidp->path);
3195     if (!v9fs_string_size(&name)) {
3196         /*
3197          * listxattr request. Get the size first
3198          */
3199         size = v9fs_co_llistxattr(pdu, &xattr_fidp->path, NULL, 0);
3200         if (size < 0) {
3201             err = size;
3202             clunk_fid(s, xattr_fidp->fid);
3203             goto out;
3204         }
3205         /*
3206          * Read the xattr value
3207          */
3208         xattr_fidp->fs.xattr.len = size;
3209         xattr_fidp->fid_type = P9_FID_XATTR;
3210         xattr_fidp->fs.xattr.xattrwalk_fid = true;
3211         if (size) {
3212             xattr_fidp->fs.xattr.value = g_malloc(size);
3213             err = v9fs_co_llistxattr(pdu, &xattr_fidp->path,
3214                                      xattr_fidp->fs.xattr.value,
3215                                      xattr_fidp->fs.xattr.len);
3216             if (err < 0) {
3217                 clunk_fid(s, xattr_fidp->fid);
3218                 goto out;
3219             }
3220         }
3221         err = pdu_marshal(pdu, offset, "q", size);
3222         if (err < 0) {
3223             goto out;
3224         }
3225         err += offset;
3226     } else {
3227         /*
3228          * specific xattr fid. We check for xattr
3229          * presence also collect the xattr size
3230          */
3231         size = v9fs_co_lgetxattr(pdu, &xattr_fidp->path,
3232                                  &name, NULL, 0);
3233         if (size < 0) {
3234             err = size;
3235             clunk_fid(s, xattr_fidp->fid);
3236             goto out;
3237         }
3238         /*
3239          * Read the xattr value
3240          */
3241         xattr_fidp->fs.xattr.len = size;
3242         xattr_fidp->fid_type = P9_FID_XATTR;
3243         xattr_fidp->fs.xattr.xattrwalk_fid = true;
3244         if (size) {
3245             xattr_fidp->fs.xattr.value = g_malloc(size);
3246             err = v9fs_co_lgetxattr(pdu, &xattr_fidp->path,
3247                                     &name, xattr_fidp->fs.xattr.value,
3248                                     xattr_fidp->fs.xattr.len);
3249             if (err < 0) {
3250                 clunk_fid(s, xattr_fidp->fid);
3251                 goto out;
3252             }
3253         }
3254         err = pdu_marshal(pdu, offset, "q", size);
3255         if (err < 0) {
3256             goto out;
3257         }
3258         err += offset;
3259     }
3260     trace_v9fs_xattrwalk_return(pdu->tag, pdu->id, size);
3261 out:
3262     put_fid(pdu, file_fidp);
3263     if (xattr_fidp) {
3264         put_fid(pdu, xattr_fidp);
3265     }
3266 out_nofid:
3267     pdu_complete(pdu, err);
3268     v9fs_string_free(&name);
3269 }
3270 
3271 static void coroutine_fn v9fs_xattrcreate(void *opaque)
3272 {
3273     int flags;
3274     int32_t fid;
3275     uint64_t size;
3276     ssize_t err = 0;
3277     V9fsString name;
3278     size_t offset = 7;
3279     V9fsFidState *file_fidp;
3280     V9fsFidState *xattr_fidp;
3281     V9fsPDU *pdu = opaque;
3282 
3283     v9fs_string_init(&name);
3284     err = pdu_unmarshal(pdu, offset, "dsqd", &fid, &name, &size, &flags);
3285     if (err < 0) {
3286         goto out_nofid;
3287     }
3288     trace_v9fs_xattrcreate(pdu->tag, pdu->id, fid, name.data, size, flags);
3289 
3290     if (size > XATTR_SIZE_MAX) {
3291         err = -E2BIG;
3292         goto out_nofid;
3293     }
3294 
3295     file_fidp = get_fid(pdu, fid);
3296     if (file_fidp == NULL) {
3297         err = -EINVAL;
3298         goto out_nofid;
3299     }
3300     if (file_fidp->fid_type != P9_FID_NONE) {
3301         err = -EINVAL;
3302         goto out_put_fid;
3303     }
3304 
3305     /* Make the file fid point to xattr */
3306     xattr_fidp = file_fidp;
3307     xattr_fidp->fid_type = P9_FID_XATTR;
3308     xattr_fidp->fs.xattr.copied_len = 0;
3309     xattr_fidp->fs.xattr.xattrwalk_fid = false;
3310     xattr_fidp->fs.xattr.len = size;
3311     xattr_fidp->fs.xattr.flags = flags;
3312     v9fs_string_init(&xattr_fidp->fs.xattr.name);
3313     v9fs_string_copy(&xattr_fidp->fs.xattr.name, &name);
3314     xattr_fidp->fs.xattr.value = g_malloc0(size);
3315     err = offset;
3316 out_put_fid:
3317     put_fid(pdu, file_fidp);
3318 out_nofid:
3319     pdu_complete(pdu, err);
3320     v9fs_string_free(&name);
3321 }
3322 
3323 static void coroutine_fn v9fs_readlink(void *opaque)
3324 {
3325     V9fsPDU *pdu = opaque;
3326     size_t offset = 7;
3327     V9fsString target;
3328     int32_t fid;
3329     int err = 0;
3330     V9fsFidState *fidp;
3331 
3332     err = pdu_unmarshal(pdu, offset, "d", &fid);
3333     if (err < 0) {
3334         goto out_nofid;
3335     }
3336     trace_v9fs_readlink(pdu->tag, pdu->id, fid);
3337     fidp = get_fid(pdu, fid);
3338     if (fidp == NULL) {
3339         err = -ENOENT;
3340         goto out_nofid;
3341     }
3342 
3343     v9fs_string_init(&target);
3344     err = v9fs_co_readlink(pdu, &fidp->path, &target);
3345     if (err < 0) {
3346         goto out;
3347     }
3348     err = pdu_marshal(pdu, offset, "s", &target);
3349     if (err < 0) {
3350         v9fs_string_free(&target);
3351         goto out;
3352     }
3353     err += offset;
3354     trace_v9fs_readlink_return(pdu->tag, pdu->id, target.data);
3355     v9fs_string_free(&target);
3356 out:
3357     put_fid(pdu, fidp);
3358 out_nofid:
3359     pdu_complete(pdu, err);
3360 }
3361 
3362 static CoroutineEntry *pdu_co_handlers[] = {
3363     [P9_TREADDIR] = v9fs_readdir,
3364     [P9_TSTATFS] = v9fs_statfs,
3365     [P9_TGETATTR] = v9fs_getattr,
3366     [P9_TSETATTR] = v9fs_setattr,
3367     [P9_TXATTRWALK] = v9fs_xattrwalk,
3368     [P9_TXATTRCREATE] = v9fs_xattrcreate,
3369     [P9_TMKNOD] = v9fs_mknod,
3370     [P9_TRENAME] = v9fs_rename,
3371     [P9_TLOCK] = v9fs_lock,
3372     [P9_TGETLOCK] = v9fs_getlock,
3373     [P9_TRENAMEAT] = v9fs_renameat,
3374     [P9_TREADLINK] = v9fs_readlink,
3375     [P9_TUNLINKAT] = v9fs_unlinkat,
3376     [P9_TMKDIR] = v9fs_mkdir,
3377     [P9_TVERSION] = v9fs_version,
3378     [P9_TLOPEN] = v9fs_open,
3379     [P9_TATTACH] = v9fs_attach,
3380     [P9_TSTAT] = v9fs_stat,
3381     [P9_TWALK] = v9fs_walk,
3382     [P9_TCLUNK] = v9fs_clunk,
3383     [P9_TFSYNC] = v9fs_fsync,
3384     [P9_TOPEN] = v9fs_open,
3385     [P9_TREAD] = v9fs_read,
3386 #if 0
3387     [P9_TAUTH] = v9fs_auth,
3388 #endif
3389     [P9_TFLUSH] = v9fs_flush,
3390     [P9_TLINK] = v9fs_link,
3391     [P9_TSYMLINK] = v9fs_symlink,
3392     [P9_TCREATE] = v9fs_create,
3393     [P9_TLCREATE] = v9fs_lcreate,
3394     [P9_TWRITE] = v9fs_write,
3395     [P9_TWSTAT] = v9fs_wstat,
3396     [P9_TREMOVE] = v9fs_remove,
3397 };
3398 
3399 static void coroutine_fn v9fs_op_not_supp(void *opaque)
3400 {
3401     V9fsPDU *pdu = opaque;
3402     pdu_complete(pdu, -EOPNOTSUPP);
3403 }
3404 
3405 static void coroutine_fn v9fs_fs_ro(void *opaque)
3406 {
3407     V9fsPDU *pdu = opaque;
3408     pdu_complete(pdu, -EROFS);
3409 }
3410 
3411 static inline bool is_read_only_op(V9fsPDU *pdu)
3412 {
3413     switch (pdu->id) {
3414     case P9_TREADDIR:
3415     case P9_TSTATFS:
3416     case P9_TGETATTR:
3417     case P9_TXATTRWALK:
3418     case P9_TLOCK:
3419     case P9_TGETLOCK:
3420     case P9_TREADLINK:
3421     case P9_TVERSION:
3422     case P9_TLOPEN:
3423     case P9_TATTACH:
3424     case P9_TSTAT:
3425     case P9_TWALK:
3426     case P9_TCLUNK:
3427     case P9_TFSYNC:
3428     case P9_TOPEN:
3429     case P9_TREAD:
3430     case P9_TAUTH:
3431     case P9_TFLUSH:
3432         return 1;
3433     default:
3434         return 0;
3435     }
3436 }
3437 
3438 void pdu_submit(V9fsPDU *pdu)
3439 {
3440     Coroutine *co;
3441     CoroutineEntry *handler;
3442     V9fsState *s = pdu->s;
3443 
3444     if (pdu->id >= ARRAY_SIZE(pdu_co_handlers) ||
3445         (pdu_co_handlers[pdu->id] == NULL)) {
3446         handler = v9fs_op_not_supp;
3447     } else {
3448         handler = pdu_co_handlers[pdu->id];
3449     }
3450 
3451     if (is_ro_export(&s->ctx) && !is_read_only_op(pdu)) {
3452         handler = v9fs_fs_ro;
3453     }
3454     co = qemu_coroutine_create(handler, pdu);
3455     qemu_coroutine_enter(co);
3456 }
3457 
3458 /* Returns 0 on success, 1 on failure. */
3459 int v9fs_device_realize_common(V9fsState *s, Error **errp)
3460 {
3461     int i, len;
3462     struct stat stat;
3463     FsDriverEntry *fse;
3464     V9fsPath path;
3465     int rc = 1;
3466 
3467     /* initialize pdu allocator */
3468     QLIST_INIT(&s->free_list);
3469     QLIST_INIT(&s->active_list);
3470     for (i = 0; i < MAX_REQ; i++) {
3471         QLIST_INSERT_HEAD(&s->free_list, &s->pdus[i], next);
3472         s->pdus[i].s = s;
3473         s->pdus[i].idx = i;
3474     }
3475 
3476     v9fs_path_init(&path);
3477 
3478     fse = get_fsdev_fsentry(s->fsconf.fsdev_id);
3479 
3480     if (!fse) {
3481         /* We don't have a fsdev identified by fsdev_id */
3482         error_setg(errp, "9pfs device couldn't find fsdev with the "
3483                    "id = %s",
3484                    s->fsconf.fsdev_id ? s->fsconf.fsdev_id : "NULL");
3485         goto out;
3486     }
3487 
3488     if (!s->fsconf.tag) {
3489         /* we haven't specified a mount_tag */
3490         error_setg(errp, "fsdev with id %s needs mount_tag arguments",
3491                    s->fsconf.fsdev_id);
3492         goto out;
3493     }
3494 
3495     s->ctx.export_flags = fse->export_flags;
3496     s->ctx.fs_root = g_strdup(fse->path);
3497     s->ctx.exops.get_st_gen = NULL;
3498     len = strlen(s->fsconf.tag);
3499     if (len > MAX_TAG_LEN - 1) {
3500         error_setg(errp, "mount tag '%s' (%d bytes) is longer than "
3501                    "maximum (%d bytes)", s->fsconf.tag, len, MAX_TAG_LEN - 1);
3502         goto out;
3503     }
3504 
3505     s->tag = g_strdup(s->fsconf.tag);
3506     s->ctx.uid = -1;
3507 
3508     s->ops = fse->ops;
3509 
3510     s->fid_list = NULL;
3511     qemu_co_rwlock_init(&s->rename_lock);
3512 
3513     if (s->ops->init(&s->ctx) < 0) {
3514         error_setg(errp, "9pfs Failed to initialize fs-driver with id:%s"
3515                    " and export path:%s", s->fsconf.fsdev_id, s->ctx.fs_root);
3516         goto out;
3517     }
3518 
3519     /*
3520      * Check details of export path, We need to use fs driver
3521      * call back to do that. Since we are in the init path, we don't
3522      * use co-routines here.
3523      */
3524     if (s->ops->name_to_path(&s->ctx, NULL, "/", &path) < 0) {
3525         error_setg(errp,
3526                    "error in converting name to path %s", strerror(errno));
3527         goto out;
3528     }
3529     if (s->ops->lstat(&s->ctx, &path, &stat)) {
3530         error_setg(errp, "share path %s does not exist", fse->path);
3531         goto out;
3532     } else if (!S_ISDIR(stat.st_mode)) {
3533         error_setg(errp, "share path %s is not a directory", fse->path);
3534         goto out;
3535     }
3536 
3537     s->ctx.fst = &fse->fst;
3538     fsdev_throttle_init(s->ctx.fst);
3539 
3540     v9fs_path_free(&path);
3541 
3542     rc = 0;
3543 out:
3544     if (rc) {
3545         if (s->ops && s->ops->cleanup && s->ctx.private) {
3546             s->ops->cleanup(&s->ctx);
3547         }
3548         g_free(s->tag);
3549         g_free(s->ctx.fs_root);
3550         v9fs_path_free(&path);
3551     }
3552     return rc;
3553 }
3554 
3555 void v9fs_device_unrealize_common(V9fsState *s, Error **errp)
3556 {
3557     if (s->ops->cleanup) {
3558         s->ops->cleanup(&s->ctx);
3559     }
3560     fsdev_throttle_cleanup(s->ctx.fst);
3561     g_free(s->tag);
3562     g_free(s->ctx.fs_root);
3563 }
3564 
3565 typedef struct VirtfsCoResetData {
3566     V9fsPDU pdu;
3567     bool done;
3568 } VirtfsCoResetData;
3569 
3570 static void coroutine_fn virtfs_co_reset(void *opaque)
3571 {
3572     VirtfsCoResetData *data = opaque;
3573 
3574     virtfs_reset(&data->pdu);
3575     data->done = true;
3576 }
3577 
3578 void v9fs_reset(V9fsState *s)
3579 {
3580     VirtfsCoResetData data = { .pdu = { .s = s }, .done = false };
3581     Coroutine *co;
3582 
3583     while (!QLIST_EMPTY(&s->active_list)) {
3584         aio_poll(qemu_get_aio_context(), true);
3585     }
3586 
3587     co = qemu_coroutine_create(virtfs_co_reset, &data);
3588     qemu_coroutine_enter(co);
3589 
3590     while (!data.done) {
3591         aio_poll(qemu_get_aio_context(), true);
3592     }
3593 }
3594 
3595 static void __attribute__((__constructor__)) v9fs_set_fd_limit(void)
3596 {
3597     struct rlimit rlim;
3598     if (getrlimit(RLIMIT_NOFILE, &rlim) < 0) {
3599         error_report("Failed to get the resource limit");
3600         exit(1);
3601     }
3602     open_fd_hw = rlim.rlim_cur - MIN(400, rlim.rlim_cur/3);
3603     open_fd_rc = rlim.rlim_cur/2;
3604 }
3605