xref: /freebsd/sys/fs/pseudofs/pseudofs_vnops.c (revision 6ef6ba9950260f42b47499d17874d00ca9290955)
1 /*-
2  * Copyright (c) 2001 Dag-Erling Coïdan Smørgrav
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer
10  *    in this position and unchanged.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  * 3. The name of the author may not be used to endorse or promote products
15  *    derived from this software without specific prior written permission.
16  *
17  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
18  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
19  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
21  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
22  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27  */
28 
29 #include <sys/cdefs.h>
30 __FBSDID("$FreeBSD$");
31 
32 #include "opt_pseudofs.h"
33 
34 #include <sys/param.h>
35 #include <sys/kernel.h>
36 #include <sys/systm.h>
37 #include <sys/ctype.h>
38 #include <sys/dirent.h>
39 #include <sys/fcntl.h>
40 #include <sys/limits.h>
41 #include <sys/lock.h>
42 #include <sys/malloc.h>
43 #include <sys/mount.h>
44 #include <sys/mutex.h>
45 #include <sys/namei.h>
46 #include <sys/proc.h>
47 #include <sys/sbuf.h>
48 #include <sys/sx.h>
49 #include <sys/sysctl.h>
50 #include <sys/vnode.h>
51 
52 #include <fs/pseudofs/pseudofs.h>
53 #include <fs/pseudofs/pseudofs_internal.h>
54 
55 #define KASSERT_PN_IS_DIR(pn)						\
56 	KASSERT((pn)->pn_type == pfstype_root ||			\
57 	    (pn)->pn_type == pfstype_dir ||				\
58 	    (pn)->pn_type == pfstype_procdir,				\
59 	    ("%s(): VDIR vnode refers to non-directory pfs_node", __func__))
60 
61 #define KASSERT_PN_IS_FILE(pn)						\
62 	KASSERT((pn)->pn_type == pfstype_file,				\
63 	    ("%s(): VREG vnode refers to non-file pfs_node", __func__))
64 
65 #define KASSERT_PN_IS_LINK(pn)						\
66 	KASSERT((pn)->pn_type == pfstype_symlink,			\
67 	    ("%s(): VLNK vnode refers to non-link pfs_node", __func__))
68 
69 /*
70  * Returns the fileno, adjusted for target pid
71  */
72 static uint32_t
73 pn_fileno(struct pfs_node *pn, pid_t pid)
74 {
75 
76 	KASSERT(pn->pn_fileno > 0,
77 	    ("%s(): no fileno allocated", __func__));
78 	if (pid != NO_PID)
79 		return (pn->pn_fileno * NO_PID + pid);
80 	return (pn->pn_fileno);
81 }
82 
83 /*
84  * Returns non-zero if given file is visible to given thread.
85  */
86 static int
87 pfs_visible_proc(struct thread *td, struct pfs_node *pn, struct proc *proc)
88 {
89 	int visible;
90 
91 	if (proc == NULL)
92 		return (0);
93 
94 	PROC_LOCK_ASSERT(proc, MA_OWNED);
95 
96 	visible = ((proc->p_flag & P_WEXIT) == 0);
97 	if (visible)
98 		visible = (p_cansee(td, proc) == 0);
99 	if (visible && pn->pn_vis != NULL)
100 		visible = pn_vis(td, proc, pn);
101 	if (!visible)
102 		return (0);
103 	return (1);
104 }
105 
106 static int
107 pfs_visible(struct thread *td, struct pfs_node *pn, pid_t pid, struct proc **p)
108 {
109 	struct proc *proc;
110 
111 	PFS_TRACE(("%s (pid: %d, req: %d)",
112 	    pn->pn_name, pid, td->td_proc->p_pid));
113 
114 	if (p)
115 		*p = NULL;
116 	if (pid == NO_PID)
117 		PFS_RETURN (1);
118 	if ((proc = pfind(pid)) == NULL)
119 		PFS_RETURN (0);
120 	if (pfs_visible_proc(td, pn, proc)) {
121 		if (p)
122 			*p = proc;
123 		else
124 			PROC_UNLOCK(proc);
125 		PFS_RETURN (1);
126 	}
127 	PROC_UNLOCK(proc);
128 	PFS_RETURN (0);
129 }
130 
131 /*
132  * Verify permissions
133  */
134 static int
135 pfs_access(struct vop_access_args *va)
136 {
137 	struct vnode *vn = va->a_vp;
138 	struct pfs_vdata *pvd = vn->v_data;
139 	struct vattr vattr;
140 	int error;
141 
142 	PFS_TRACE(("%s", pvd->pvd_pn->pn_name));
143 	(void)pvd;
144 
145 	error = VOP_GETATTR(vn, &vattr, va->a_cred);
146 	if (error)
147 		PFS_RETURN (error);
148 	error = vaccess(vn->v_type, vattr.va_mode, vattr.va_uid,
149 	    vattr.va_gid, va->a_accmode, va->a_cred, NULL);
150 	PFS_RETURN (error);
151 }
152 
153 /*
154  * Close a file or directory
155  */
156 static int
157 pfs_close(struct vop_close_args *va)
158 {
159 	struct vnode *vn = va->a_vp;
160 	struct pfs_vdata *pvd = vn->v_data;
161 	struct pfs_node *pn = pvd->pvd_pn;
162 	struct proc *proc;
163 	int error;
164 
165 	PFS_TRACE(("%s", pn->pn_name));
166 	pfs_assert_not_owned(pn);
167 
168 	/*
169 	 * Do nothing unless this is the last close and the node has a
170 	 * last-close handler.
171 	 */
172 	if (vrefcnt(vn) > 1 || pn->pn_close == NULL)
173 		PFS_RETURN (0);
174 
175 	if (pvd->pvd_pid != NO_PID) {
176 		proc = pfind(pvd->pvd_pid);
177 	} else {
178 		proc = NULL;
179 	}
180 
181 	error = pn_close(va->a_td, proc, pn);
182 
183 	if (proc != NULL)
184 		PROC_UNLOCK(proc);
185 
186 	PFS_RETURN (error);
187 }
188 
189 /*
190  * Get file attributes
191  */
192 static int
193 pfs_getattr(struct vop_getattr_args *va)
194 {
195 	struct vnode *vn = va->a_vp;
196 	struct pfs_vdata *pvd = vn->v_data;
197 	struct pfs_node *pn = pvd->pvd_pn;
198 	struct vattr *vap = va->a_vap;
199 	struct proc *proc;
200 	int error = 0;
201 
202 	PFS_TRACE(("%s", pn->pn_name));
203 	pfs_assert_not_owned(pn);
204 
205 	if (!pfs_visible(curthread, pn, pvd->pvd_pid, &proc))
206 		PFS_RETURN (ENOENT);
207 
208 	vap->va_type = vn->v_type;
209 	vap->va_fileid = pn_fileno(pn, pvd->pvd_pid);
210 	vap->va_flags = 0;
211 	vap->va_blocksize = PAGE_SIZE;
212 	vap->va_bytes = vap->va_size = 0;
213 	vap->va_filerev = 0;
214 	vap->va_fsid = vn->v_mount->mnt_stat.f_fsid.val[0];
215 	vap->va_nlink = 1;
216 	nanotime(&vap->va_ctime);
217 	vap->va_atime = vap->va_mtime = vap->va_ctime;
218 
219 	switch (pn->pn_type) {
220 	case pfstype_procdir:
221 	case pfstype_root:
222 	case pfstype_dir:
223 #if 0
224 		pfs_lock(pn);
225 		/* compute link count */
226 		pfs_unlock(pn);
227 #endif
228 		vap->va_mode = 0555;
229 		break;
230 	case pfstype_file:
231 	case pfstype_symlink:
232 		vap->va_mode = 0444;
233 		break;
234 	default:
235 		printf("shouldn't be here!\n");
236 		vap->va_mode = 0;
237 		break;
238 	}
239 
240 	if (proc != NULL) {
241 		vap->va_uid = proc->p_ucred->cr_ruid;
242 		vap->va_gid = proc->p_ucred->cr_rgid;
243 	} else {
244 		vap->va_uid = 0;
245 		vap->va_gid = 0;
246 	}
247 
248 	if (pn->pn_attr != NULL)
249 		error = pn_attr(curthread, proc, pn, vap);
250 
251 	if(proc != NULL)
252 		PROC_UNLOCK(proc);
253 
254 	PFS_RETURN (error);
255 }
256 
257 /*
258  * Perform an ioctl
259  */
260 static int
261 pfs_ioctl(struct vop_ioctl_args *va)
262 {
263 	struct vnode *vn;
264 	struct pfs_vdata *pvd;
265 	struct pfs_node *pn;
266 	struct proc *proc;
267 	int error;
268 
269 	vn = va->a_vp;
270 	vn_lock(vn, LK_SHARED | LK_RETRY);
271 	if (vn->v_iflag & VI_DOOMED) {
272 		VOP_UNLOCK(vn, 0);
273 		return (EBADF);
274 	}
275 	pvd = vn->v_data;
276 	pn = pvd->pvd_pn;
277 
278 	PFS_TRACE(("%s: %lx", pn->pn_name, va->a_command));
279 	pfs_assert_not_owned(pn);
280 
281 	if (vn->v_type != VREG) {
282 		VOP_UNLOCK(vn, 0);
283 		PFS_RETURN (EINVAL);
284 	}
285 	KASSERT_PN_IS_FILE(pn);
286 
287 	if (pn->pn_ioctl == NULL) {
288 		VOP_UNLOCK(vn, 0);
289 		PFS_RETURN (ENOTTY);
290 	}
291 
292 	/*
293 	 * This is necessary because process' privileges may
294 	 * have changed since the open() call.
295 	 */
296 	if (!pfs_visible(curthread, pn, pvd->pvd_pid, &proc)) {
297 		VOP_UNLOCK(vn, 0);
298 		PFS_RETURN (EIO);
299 	}
300 
301 	error = pn_ioctl(curthread, proc, pn, va->a_command, va->a_data);
302 
303 	if (proc != NULL)
304 		PROC_UNLOCK(proc);
305 
306 	VOP_UNLOCK(vn, 0);
307 	PFS_RETURN (error);
308 }
309 
310 /*
311  * Perform getextattr
312  */
313 static int
314 pfs_getextattr(struct vop_getextattr_args *va)
315 {
316 	struct vnode *vn = va->a_vp;
317 	struct pfs_vdata *pvd = vn->v_data;
318 	struct pfs_node *pn = pvd->pvd_pn;
319 	struct proc *proc;
320 	int error;
321 
322 	PFS_TRACE(("%s", pn->pn_name));
323 	pfs_assert_not_owned(pn);
324 
325 	/*
326 	 * This is necessary because either process' privileges may
327 	 * have changed since the open() call.
328 	 */
329 	if (!pfs_visible(curthread, pn, pvd->pvd_pid, &proc))
330 		PFS_RETURN (EIO);
331 
332 	if (pn->pn_getextattr == NULL)
333 		error = EOPNOTSUPP;
334 	else
335 		error = pn_getextattr(curthread, proc, pn,
336 		    va->a_attrnamespace, va->a_name, va->a_uio,
337 		    va->a_size, va->a_cred);
338 
339 	if (proc != NULL)
340 		PROC_UNLOCK(proc);
341 
342 	PFS_RETURN (error);
343 }
344 
345 /*
346  * Convert a vnode to its component name
347  */
348 static int
349 pfs_vptocnp(struct vop_vptocnp_args *ap)
350 {
351 	struct vnode *vp = ap->a_vp;
352 	struct vnode **dvp = ap->a_vpp;
353 	struct pfs_vdata *pvd = vp->v_data;
354 	struct pfs_node *pd = pvd->pvd_pn;
355 	struct pfs_node *pn;
356 	struct mount *mp;
357 	char *buf = ap->a_buf;
358 	int *buflen = ap->a_buflen;
359 	char pidbuf[PFS_NAMELEN];
360 	pid_t pid = pvd->pvd_pid;
361 	int len, i, error, locked;
362 
363 	i = *buflen;
364 	error = 0;
365 
366 	pfs_lock(pd);
367 
368 	if (vp->v_type == VDIR && pd->pn_type == pfstype_root) {
369 		*dvp = vp;
370 		vhold(*dvp);
371 		pfs_unlock(pd);
372 		PFS_RETURN (0);
373 	} else if (vp->v_type == VDIR && pd->pn_type == pfstype_procdir) {
374 		len = snprintf(pidbuf, sizeof(pidbuf), "%d", pid);
375 		i -= len;
376 		if (i < 0) {
377 			error = ENOMEM;
378 			goto failed;
379 		}
380 		bcopy(pidbuf, buf + i, len);
381 	} else {
382 		len = strlen(pd->pn_name);
383 		i -= len;
384 		if (i < 0) {
385 			error = ENOMEM;
386 			goto failed;
387 		}
388 		bcopy(pd->pn_name, buf + i, len);
389 	}
390 
391 	pn = pd->pn_parent;
392 	pfs_unlock(pd);
393 
394 	mp = vp->v_mount;
395 	error = vfs_busy(mp, 0);
396 	if (error)
397 		return (error);
398 
399 	/*
400 	 * vp is held by caller.
401 	 */
402 	locked = VOP_ISLOCKED(vp);
403 	VOP_UNLOCK(vp, 0);
404 
405 	error = pfs_vncache_alloc(mp, dvp, pn, pid);
406 	if (error) {
407 		vn_lock(vp, locked | LK_RETRY);
408 		vfs_unbusy(mp);
409 		PFS_RETURN(error);
410 	}
411 
412 	*buflen = i;
413 	VOP_UNLOCK(*dvp, 0);
414 	vn_lock(vp, locked | LK_RETRY);
415 	vfs_unbusy(mp);
416 
417 	PFS_RETURN (0);
418 failed:
419 	pfs_unlock(pd);
420 	PFS_RETURN(error);
421 }
422 
423 /*
424  * Look up a file or directory
425  */
426 static int
427 pfs_lookup(struct vop_cachedlookup_args *va)
428 {
429 	struct vnode *vn = va->a_dvp;
430 	struct vnode **vpp = va->a_vpp;
431 	struct componentname *cnp = va->a_cnp;
432 	struct pfs_vdata *pvd = vn->v_data;
433 	struct pfs_node *pd = pvd->pvd_pn;
434 	struct pfs_node *pn, *pdn = NULL;
435 	struct mount *mp;
436 	pid_t pid = pvd->pvd_pid;
437 	char *pname;
438 	int error, i, namelen, visible;
439 
440 	PFS_TRACE(("%.*s", (int)cnp->cn_namelen, cnp->cn_nameptr));
441 	pfs_assert_not_owned(pd);
442 
443 	if (vn->v_type != VDIR)
444 		PFS_RETURN (ENOTDIR);
445 	KASSERT_PN_IS_DIR(pd);
446 
447 	error = VOP_ACCESS(vn, VEXEC, cnp->cn_cred, cnp->cn_thread);
448 	if (error)
449 		PFS_RETURN (error);
450 
451 	/*
452 	 * Don't support DELETE or RENAME.  CREATE is supported so
453 	 * that O_CREAT will work, but the lookup will still fail if
454 	 * the file does not exist.
455 	 */
456 	if ((cnp->cn_flags & ISLASTCN) &&
457 	    (cnp->cn_nameiop == DELETE || cnp->cn_nameiop == RENAME))
458 		PFS_RETURN (EOPNOTSUPP);
459 
460 	/* shortcut: check if the name is too long */
461 	if (cnp->cn_namelen >= PFS_NAMELEN)
462 		PFS_RETURN (ENOENT);
463 
464 	/* check that parent directory is visible... */
465 	if (!pfs_visible(curthread, pd, pvd->pvd_pid, NULL))
466 		PFS_RETURN (ENOENT);
467 
468 	/* self */
469 	namelen = cnp->cn_namelen;
470 	pname = cnp->cn_nameptr;
471 	if (namelen == 1 && pname[0] == '.') {
472 		pn = pd;
473 		*vpp = vn;
474 		VREF(vn);
475 		PFS_RETURN (0);
476 	}
477 
478 	mp = vn->v_mount;
479 
480 	/* parent */
481 	if (cnp->cn_flags & ISDOTDOT) {
482 		if (pd->pn_type == pfstype_root)
483 			PFS_RETURN (EIO);
484 		error = vfs_busy(mp, MBF_NOWAIT);
485 		if (error != 0) {
486 			vfs_ref(mp);
487 			VOP_UNLOCK(vn, 0);
488 			error = vfs_busy(mp, 0);
489 			vn_lock(vn, LK_EXCLUSIVE | LK_RETRY);
490 			vfs_rel(mp);
491 			if (error != 0)
492 				PFS_RETURN(ENOENT);
493 			if (vn->v_iflag & VI_DOOMED) {
494 				vfs_unbusy(mp);
495 				PFS_RETURN(ENOENT);
496 			}
497 		}
498 		VOP_UNLOCK(vn, 0);
499 		KASSERT(pd->pn_parent != NULL,
500 		    ("%s(): non-root directory has no parent", __func__));
501 		/*
502 		 * This one is tricky.  Descendents of procdir nodes
503 		 * inherit their parent's process affinity, but
504 		 * there's no easy reverse mapping.  For simplicity,
505 		 * we assume that if this node is a procdir, its
506 		 * parent isn't (which is correct as long as
507 		 * descendents of procdir nodes are never procdir
508 		 * nodes themselves)
509 		 */
510 		if (pd->pn_type == pfstype_procdir)
511 			pid = NO_PID;
512 		pfs_lock(pd);
513 		pn = pd->pn_parent;
514 		pfs_unlock(pd);
515 		goto got_pnode;
516 	}
517 
518 	pfs_lock(pd);
519 
520 	/* named node */
521 	for (pn = pd->pn_nodes; pn != NULL; pn = pn->pn_next)
522 		if (pn->pn_type == pfstype_procdir)
523 			pdn = pn;
524 		else if (pn->pn_name[namelen] == '\0' &&
525 		    bcmp(pname, pn->pn_name, namelen) == 0) {
526 			pfs_unlock(pd);
527 			goto got_pnode;
528 		}
529 
530 	/* process dependent node */
531 	if ((pn = pdn) != NULL) {
532 		pid = 0;
533 		for (pid = 0, i = 0; i < namelen && isdigit(pname[i]); ++i)
534 			if ((pid = pid * 10 + pname[i] - '0') > PID_MAX)
535 				break;
536 		if (i == cnp->cn_namelen) {
537 			pfs_unlock(pd);
538 			goto got_pnode;
539 		}
540 	}
541 
542 	pfs_unlock(pd);
543 
544 	PFS_RETURN (ENOENT);
545 
546  got_pnode:
547 	pfs_assert_not_owned(pd);
548 	pfs_assert_not_owned(pn);
549 	visible = pfs_visible(curthread, pn, pid, NULL);
550 	if (!visible) {
551 		error = ENOENT;
552 		goto failed;
553 	}
554 
555 	error = pfs_vncache_alloc(mp, vpp, pn, pid);
556 	if (error)
557 		goto failed;
558 
559 	if (cnp->cn_flags & ISDOTDOT) {
560 		vfs_unbusy(mp);
561 		vn_lock(vn, LK_EXCLUSIVE | LK_RETRY);
562 		if (vn->v_iflag & VI_DOOMED) {
563 			vput(*vpp);
564 			*vpp = NULL;
565 			PFS_RETURN(ENOENT);
566 		}
567 	}
568 	if (cnp->cn_flags & MAKEENTRY && !(vn->v_iflag & VI_DOOMED))
569 		cache_enter(vn, *vpp, cnp);
570 	PFS_RETURN (0);
571  failed:
572 	if (cnp->cn_flags & ISDOTDOT) {
573 		vfs_unbusy(mp);
574 		vn_lock(vn, LK_EXCLUSIVE | LK_RETRY);
575 		*vpp = NULL;
576 	}
577 	PFS_RETURN(error);
578 }
579 
580 /*
581  * Open a file or directory.
582  */
583 static int
584 pfs_open(struct vop_open_args *va)
585 {
586 	struct vnode *vn = va->a_vp;
587 	struct pfs_vdata *pvd = vn->v_data;
588 	struct pfs_node *pn = pvd->pvd_pn;
589 	int mode = va->a_mode;
590 
591 	PFS_TRACE(("%s (mode 0x%x)", pn->pn_name, mode));
592 	pfs_assert_not_owned(pn);
593 
594 	/* check if the requested mode is permitted */
595 	if (((mode & FREAD) && !(mode & PFS_RD)) ||
596 	    ((mode & FWRITE) && !(mode & PFS_WR)))
597 		PFS_RETURN (EPERM);
598 
599 	/* we don't support locking */
600 	if ((mode & O_SHLOCK) || (mode & O_EXLOCK))
601 		PFS_RETURN (EOPNOTSUPP);
602 
603 	PFS_RETURN (0);
604 }
605 
606 /*
607  * Read from a file
608  */
609 static int
610 pfs_read(struct vop_read_args *va)
611 {
612 	struct vnode *vn = va->a_vp;
613 	struct pfs_vdata *pvd = vn->v_data;
614 	struct pfs_node *pn = pvd->pvd_pn;
615 	struct uio *uio = va->a_uio;
616 	struct proc *proc;
617 	struct sbuf *sb = NULL;
618 	int error, locked;
619 	off_t offset;
620 	ssize_t buflen, resid;
621 
622 	PFS_TRACE(("%s", pn->pn_name));
623 	pfs_assert_not_owned(pn);
624 
625 	if (vn->v_type != VREG)
626 		PFS_RETURN (EINVAL);
627 	KASSERT_PN_IS_FILE(pn);
628 
629 	if (!(pn->pn_flags & PFS_RD))
630 		PFS_RETURN (EBADF);
631 
632 	if (pn->pn_fill == NULL)
633 		PFS_RETURN (EIO);
634 
635 	/*
636 	 * This is necessary because either process' privileges may
637 	 * have changed since the open() call.
638 	 */
639 	if (!pfs_visible(curthread, pn, pvd->pvd_pid, &proc))
640 		PFS_RETURN (EIO);
641 	if (proc != NULL) {
642 		_PHOLD(proc);
643 		PROC_UNLOCK(proc);
644 	}
645 
646 	vhold(vn);
647 	locked = VOP_ISLOCKED(vn);
648 	VOP_UNLOCK(vn, 0);
649 
650 	if (pn->pn_flags & PFS_RAWRD) {
651 		PFS_TRACE(("%zd resid", uio->uio_resid));
652 		error = pn_fill(curthread, proc, pn, NULL, uio);
653 		PFS_TRACE(("%zd resid", uio->uio_resid));
654 		goto ret;
655 	}
656 
657 	resid = uio->uio_resid;
658 	offset = uio->uio_offset;
659 	buflen = offset + resid;
660 
661 	/* beaucoup sanity checks so we don't ask for bogus allocation */
662 	if (resid < 0 || buflen < offset || buflen < resid ||
663 	    buflen >= INT_MAX) {
664 		error = EINVAL;
665 		goto ret;
666 	}
667 	if (buflen > MAXPHYS)
668 		buflen = MAXPHYS;
669 
670 	sb = sbuf_new(sb, NULL, buflen + 1, 0);
671 	if (sb == NULL) {
672 		error = EIO;
673 		goto ret;
674 	}
675 
676 	error = pn_fill(curthread, proc, pn, sb, uio);
677 
678 	if (error) {
679 		sbuf_delete(sb);
680 		goto ret;
681 	}
682 
683 	/*
684 	 * XXX: If the buffer overflowed, sbuf_len() will not return
685 	 * the data length. Then just use the full length because an
686 	 * overflowed sbuf must be full.
687 	 */
688 	if (sbuf_finish(sb) == 0)
689 		buflen = sbuf_len(sb);
690 	error = uiomove_frombuf(sbuf_data(sb), buflen, uio);
691 	sbuf_delete(sb);
692 ret:
693 	vn_lock(vn, locked | LK_RETRY);
694 	vdrop(vn);
695 	if (proc != NULL)
696 		PRELE(proc);
697 	PFS_RETURN (error);
698 }
699 
700 /*
701  * Iterate through directory entries
702  */
703 static int
704 pfs_iterate(struct thread *td, struct proc *proc, struct pfs_node *pd,
705 	    struct pfs_node **pn, struct proc **p)
706 {
707 	int visible;
708 
709 	sx_assert(&allproc_lock, SX_SLOCKED);
710 	pfs_assert_owned(pd);
711  again:
712 	if (*pn == NULL) {
713 		/* first node */
714 		*pn = pd->pn_nodes;
715 	} else if ((*pn)->pn_type != pfstype_procdir) {
716 		/* next node */
717 		*pn = (*pn)->pn_next;
718 	}
719 	if (*pn != NULL && (*pn)->pn_type == pfstype_procdir) {
720 		/* next process */
721 		if (*p == NULL)
722 			*p = LIST_FIRST(&allproc);
723 		else
724 			*p = LIST_NEXT(*p, p_list);
725 		/* out of processes: next node */
726 		if (*p == NULL)
727 			*pn = (*pn)->pn_next;
728 		else
729 			PROC_LOCK(*p);
730 	}
731 
732 	if ((*pn) == NULL)
733 		return (-1);
734 
735 	if (*p != NULL) {
736 		visible = pfs_visible_proc(td, *pn, *p);
737 		PROC_UNLOCK(*p);
738 	} else if (proc != NULL) {
739 		visible = pfs_visible_proc(td, *pn, proc);
740 	} else {
741 		visible = 1;
742 	}
743 	if (!visible)
744 		goto again;
745 
746 	return (0);
747 }
748 
749 /* Directory entry list */
750 struct pfsentry {
751 	STAILQ_ENTRY(pfsentry)	link;
752 	struct dirent		entry;
753 };
754 STAILQ_HEAD(pfsdirentlist, pfsentry);
755 
756 /*
757  * Return directory entries.
758  */
759 static int
760 pfs_readdir(struct vop_readdir_args *va)
761 {
762 	struct vnode *vn = va->a_vp;
763 	struct pfs_vdata *pvd = vn->v_data;
764 	struct pfs_node *pd = pvd->pvd_pn;
765 	pid_t pid = pvd->pvd_pid;
766 	struct proc *p, *proc;
767 	struct pfs_node *pn;
768 	struct uio *uio;
769 	struct pfsentry *pfsent, *pfsent2;
770 	struct pfsdirentlist lst;
771 	off_t offset;
772 	int error, i, resid;
773 
774 	STAILQ_INIT(&lst);
775 	error = 0;
776 	KASSERT(pd->pn_info == vn->v_mount->mnt_data,
777 	    ("%s(): pn_info does not match mountpoint", __func__));
778 	PFS_TRACE(("%s pid %lu", pd->pn_name, (unsigned long)pid));
779 	pfs_assert_not_owned(pd);
780 
781 	if (vn->v_type != VDIR)
782 		PFS_RETURN (ENOTDIR);
783 	KASSERT_PN_IS_DIR(pd);
784 	uio = va->a_uio;
785 
786 	/* only allow reading entire entries */
787 	offset = uio->uio_offset;
788 	resid = uio->uio_resid;
789 	if (offset < 0 || offset % PFS_DELEN != 0 ||
790 	    (resid && resid < PFS_DELEN))
791 		PFS_RETURN (EINVAL);
792 	if (resid == 0)
793 		PFS_RETURN (0);
794 
795 	sx_slock(&allproc_lock);
796 	pfs_lock(pd);
797 
798         /* check if the directory is visible to the caller */
799         if (!pfs_visible(curthread, pd, pid, &proc)) {
800 		sx_sunlock(&allproc_lock);
801 		pfs_unlock(pd);
802                 PFS_RETURN (ENOENT);
803 	}
804 	KASSERT(pid == NO_PID || proc != NULL,
805 	    ("%s(): no process for pid %lu", __func__, (unsigned long)pid));
806 
807 	/* skip unwanted entries */
808 	for (pn = NULL, p = NULL; offset > 0; offset -= PFS_DELEN) {
809 		if (pfs_iterate(curthread, proc, pd, &pn, &p) == -1) {
810 			/* nothing left... */
811 			if (proc != NULL)
812 				PROC_UNLOCK(proc);
813 			pfs_unlock(pd);
814 			sx_sunlock(&allproc_lock);
815 			PFS_RETURN (0);
816 		}
817 	}
818 
819 	/* fill in entries */
820 	while (pfs_iterate(curthread, proc, pd, &pn, &p) != -1 &&
821 	    resid >= PFS_DELEN) {
822 		if ((pfsent = malloc(sizeof(struct pfsentry), M_IOV,
823 		    M_NOWAIT | M_ZERO)) == NULL) {
824 			error = ENOMEM;
825 			break;
826 		}
827 		pfsent->entry.d_reclen = PFS_DELEN;
828 		pfsent->entry.d_fileno = pn_fileno(pn, pid);
829 		/* PFS_DELEN was picked to fit PFS_NAMLEN */
830 		for (i = 0; i < PFS_NAMELEN - 1 && pn->pn_name[i] != '\0'; ++i)
831 			pfsent->entry.d_name[i] = pn->pn_name[i];
832 		pfsent->entry.d_name[i] = 0;
833 		pfsent->entry.d_namlen = i;
834 		switch (pn->pn_type) {
835 		case pfstype_procdir:
836 			KASSERT(p != NULL,
837 			    ("reached procdir node with p == NULL"));
838 			pfsent->entry.d_namlen = snprintf(pfsent->entry.d_name,
839 			    PFS_NAMELEN, "%d", p->p_pid);
840 			/* fall through */
841 		case pfstype_root:
842 		case pfstype_dir:
843 		case pfstype_this:
844 		case pfstype_parent:
845 			pfsent->entry.d_type = DT_DIR;
846 			break;
847 		case pfstype_file:
848 			pfsent->entry.d_type = DT_REG;
849 			break;
850 		case pfstype_symlink:
851 			pfsent->entry.d_type = DT_LNK;
852 			break;
853 		default:
854 			panic("%s has unexpected node type: %d", pn->pn_name, pn->pn_type);
855 		}
856 		PFS_TRACE(("%s", pfsent->entry.d_name));
857 		STAILQ_INSERT_TAIL(&lst, pfsent, link);
858 		offset += PFS_DELEN;
859 		resid -= PFS_DELEN;
860 	}
861 	if (proc != NULL)
862 		PROC_UNLOCK(proc);
863 	pfs_unlock(pd);
864 	sx_sunlock(&allproc_lock);
865 	i = 0;
866 	STAILQ_FOREACH_SAFE(pfsent, &lst, link, pfsent2) {
867 		if (error == 0)
868 			error = uiomove(&pfsent->entry, PFS_DELEN, uio);
869 		free(pfsent, M_IOV);
870 		i++;
871 	}
872 	PFS_TRACE(("%d bytes", i * PFS_DELEN));
873 	PFS_RETURN (error);
874 }
875 
876 /*
877  * Read a symbolic link
878  */
879 static int
880 pfs_readlink(struct vop_readlink_args *va)
881 {
882 	struct vnode *vn = va->a_vp;
883 	struct pfs_vdata *pvd = vn->v_data;
884 	struct pfs_node *pn = pvd->pvd_pn;
885 	struct uio *uio = va->a_uio;
886 	struct proc *proc = NULL;
887 	char buf[PATH_MAX];
888 	struct sbuf sb;
889 	int error, locked;
890 
891 	PFS_TRACE(("%s", pn->pn_name));
892 	pfs_assert_not_owned(pn);
893 
894 	if (vn->v_type != VLNK)
895 		PFS_RETURN (EINVAL);
896 	KASSERT_PN_IS_LINK(pn);
897 
898 	if (pn->pn_fill == NULL)
899 		PFS_RETURN (EIO);
900 
901 	if (pvd->pvd_pid != NO_PID) {
902 		if ((proc = pfind(pvd->pvd_pid)) == NULL)
903 			PFS_RETURN (EIO);
904 		if (proc->p_flag & P_WEXIT) {
905 			PROC_UNLOCK(proc);
906 			PFS_RETURN (EIO);
907 		}
908 		_PHOLD(proc);
909 		PROC_UNLOCK(proc);
910 	}
911 	vhold(vn);
912 	locked = VOP_ISLOCKED(vn);
913 	VOP_UNLOCK(vn, 0);
914 
915 	/* sbuf_new() can't fail with a static buffer */
916 	sbuf_new(&sb, buf, sizeof buf, 0);
917 
918 	error = pn_fill(curthread, proc, pn, &sb, NULL);
919 
920 	if (proc != NULL)
921 		PRELE(proc);
922 	vn_lock(vn, locked | LK_RETRY);
923 	vdrop(vn);
924 
925 	if (error) {
926 		sbuf_delete(&sb);
927 		PFS_RETURN (error);
928 	}
929 
930 	if (sbuf_finish(&sb) != 0) {
931 		sbuf_delete(&sb);
932 		PFS_RETURN (ENAMETOOLONG);
933 	}
934 
935 	error = uiomove_frombuf(sbuf_data(&sb), sbuf_len(&sb), uio);
936 	sbuf_delete(&sb);
937 	PFS_RETURN (error);
938 }
939 
940 /*
941  * Reclaim a vnode
942  */
943 static int
944 pfs_reclaim(struct vop_reclaim_args *va)
945 {
946 	struct vnode *vn = va->a_vp;
947 	struct pfs_vdata *pvd = vn->v_data;
948 	struct pfs_node *pn = pvd->pvd_pn;
949 
950 	PFS_TRACE(("%s", pn->pn_name));
951 	pfs_assert_not_owned(pn);
952 
953 	return (pfs_vncache_free(va->a_vp));
954 }
955 
956 /*
957  * Set attributes
958  */
959 static int
960 pfs_setattr(struct vop_setattr_args *va)
961 {
962 	struct vnode *vn = va->a_vp;
963 	struct pfs_vdata *pvd = vn->v_data;
964 	struct pfs_node *pn = pvd->pvd_pn;
965 
966 	PFS_TRACE(("%s", pn->pn_name));
967 	pfs_assert_not_owned(pn);
968 
969 	PFS_RETURN (EOPNOTSUPP);
970 }
971 
972 /*
973  * Write to a file
974  */
975 static int
976 pfs_write(struct vop_write_args *va)
977 {
978 	struct vnode *vn = va->a_vp;
979 	struct pfs_vdata *pvd = vn->v_data;
980 	struct pfs_node *pn = pvd->pvd_pn;
981 	struct uio *uio = va->a_uio;
982 	struct proc *proc;
983 	struct sbuf sb;
984 	int error;
985 
986 	PFS_TRACE(("%s", pn->pn_name));
987 	pfs_assert_not_owned(pn);
988 
989 	if (vn->v_type != VREG)
990 		PFS_RETURN (EINVAL);
991 	KASSERT_PN_IS_FILE(pn);
992 
993 	if (!(pn->pn_flags & PFS_WR))
994 		PFS_RETURN (EBADF);
995 
996 	if (pn->pn_fill == NULL)
997 		PFS_RETURN (EIO);
998 
999 	/*
1000 	 * This is necessary because either process' privileges may
1001 	 * have changed since the open() call.
1002 	 */
1003 	if (!pfs_visible(curthread, pn, pvd->pvd_pid, &proc))
1004 		PFS_RETURN (EIO);
1005 	if (proc != NULL) {
1006 		_PHOLD(proc);
1007 		PROC_UNLOCK(proc);
1008 	}
1009 
1010 	if (pn->pn_flags & PFS_RAWWR) {
1011 		error = pn_fill(curthread, proc, pn, NULL, uio);
1012 		if (proc != NULL)
1013 			PRELE(proc);
1014 		PFS_RETURN (error);
1015 	}
1016 
1017 	sbuf_uionew(&sb, uio, &error);
1018 	if (error) {
1019 		if (proc != NULL)
1020 			PRELE(proc);
1021 		PFS_RETURN (error);
1022 	}
1023 
1024 	error = pn_fill(curthread, proc, pn, &sb, uio);
1025 
1026 	sbuf_delete(&sb);
1027 	if (proc != NULL)
1028 		PRELE(proc);
1029 	PFS_RETURN (error);
1030 }
1031 
1032 /*
1033  * Vnode operations
1034  */
1035 struct vop_vector pfs_vnodeops = {
1036 	.vop_default =		&default_vnodeops,
1037 
1038 	.vop_access =		pfs_access,
1039 	.vop_cachedlookup =	pfs_lookup,
1040 	.vop_close =		pfs_close,
1041 	.vop_create =		VOP_EOPNOTSUPP,
1042 	.vop_getattr =		pfs_getattr,
1043 	.vop_getextattr =	pfs_getextattr,
1044 	.vop_ioctl =		pfs_ioctl,
1045 	.vop_link =		VOP_EOPNOTSUPP,
1046 	.vop_lookup =		vfs_cache_lookup,
1047 	.vop_mkdir =		VOP_EOPNOTSUPP,
1048 	.vop_mknod =		VOP_EOPNOTSUPP,
1049 	.vop_open =		pfs_open,
1050 	.vop_read =		pfs_read,
1051 	.vop_readdir =		pfs_readdir,
1052 	.vop_readlink =		pfs_readlink,
1053 	.vop_reclaim =		pfs_reclaim,
1054 	.vop_remove =		VOP_EOPNOTSUPP,
1055 	.vop_rename =		VOP_EOPNOTSUPP,
1056 	.vop_rmdir =		VOP_EOPNOTSUPP,
1057 	.vop_setattr =		pfs_setattr,
1058 	.vop_symlink =		VOP_EOPNOTSUPP,
1059 	.vop_vptocnp =		pfs_vptocnp,
1060 	.vop_write =		pfs_write,
1061 	/* XXX I've probably forgotten a few that need VOP_EOPNOTSUPP */
1062 };
1063