1 /* 2 * Server-side procedures for NFSv4. 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 */ 35 #include <linux/fs_struct.h> 36 #include <linux/file.h> 37 #include <linux/falloc.h> 38 #include <linux/slab.h> 39 #include <linux/kthread.h> 40 41 #include "idmap.h" 42 #include "cache.h" 43 #include "xdr4.h" 44 #include "vfs.h" 45 #include "current_stateid.h" 46 #include "netns.h" 47 #include "acl.h" 48 #include "pnfs.h" 49 #include "trace.h" 50 51 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 52 #include <linux/security.h> 53 54 static inline void 55 nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval) 56 { 57 struct inode *inode = d_inode(resfh->fh_dentry); 58 int status; 59 60 inode_lock(inode); 61 status = security_inode_setsecctx(resfh->fh_dentry, 62 label->data, label->len); 63 inode_unlock(inode); 64 65 if (status) 66 /* 67 * XXX: We should really fail the whole open, but we may 68 * already have created a new file, so it may be too 69 * late. For now this seems the least of evils: 70 */ 71 bmval[2] &= ~FATTR4_WORD2_SECURITY_LABEL; 72 73 return; 74 } 75 #else 76 static inline void 77 nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval) 78 { } 79 #endif 80 81 #define NFSDDBG_FACILITY NFSDDBG_PROC 82 83 static u32 nfsd_attrmask[] = { 84 NFSD_WRITEABLE_ATTRS_WORD0, 85 NFSD_WRITEABLE_ATTRS_WORD1, 86 NFSD_WRITEABLE_ATTRS_WORD2 87 }; 88 89 static u32 nfsd41_ex_attrmask[] = { 90 NFSD_SUPPATTR_EXCLCREAT_WORD0, 91 NFSD_SUPPATTR_EXCLCREAT_WORD1, 92 NFSD_SUPPATTR_EXCLCREAT_WORD2 93 }; 94 95 static __be32 96 check_attr_support(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 97 u32 *bmval, u32 *writable) 98 { 99 struct dentry *dentry = cstate->current_fh.fh_dentry; 100 struct svc_export *exp = cstate->current_fh.fh_export; 101 102 if (!nfsd_attrs_supported(cstate->minorversion, bmval)) 103 return nfserr_attrnotsupp; 104 if ((bmval[0] & FATTR4_WORD0_ACL) && !IS_POSIXACL(d_inode(dentry))) 105 return nfserr_attrnotsupp; 106 if ((bmval[2] & FATTR4_WORD2_SECURITY_LABEL) && 107 !(exp->ex_flags & NFSEXP_SECURITY_LABEL)) 108 return nfserr_attrnotsupp; 109 if (writable && !bmval_is_subset(bmval, writable)) 110 return nfserr_inval; 111 if (writable && (bmval[2] & FATTR4_WORD2_MODE_UMASK) && 112 (bmval[1] & FATTR4_WORD1_MODE)) 113 return nfserr_inval; 114 return nfs_ok; 115 } 116 117 static __be32 118 nfsd4_check_open_attributes(struct svc_rqst *rqstp, 119 struct nfsd4_compound_state *cstate, struct nfsd4_open *open) 120 { 121 __be32 status = nfs_ok; 122 123 if (open->op_create == NFS4_OPEN_CREATE) { 124 if (open->op_createmode == NFS4_CREATE_UNCHECKED 125 || open->op_createmode == NFS4_CREATE_GUARDED) 126 status = check_attr_support(rqstp, cstate, 127 open->op_bmval, nfsd_attrmask); 128 else if (open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1) 129 status = check_attr_support(rqstp, cstate, 130 open->op_bmval, nfsd41_ex_attrmask); 131 } 132 133 return status; 134 } 135 136 static int 137 is_create_with_attrs(struct nfsd4_open *open) 138 { 139 return open->op_create == NFS4_OPEN_CREATE 140 && (open->op_createmode == NFS4_CREATE_UNCHECKED 141 || open->op_createmode == NFS4_CREATE_GUARDED 142 || open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1); 143 } 144 145 /* 146 * if error occurs when setting the acl, just clear the acl bit 147 * in the returned attr bitmap. 148 */ 149 static void 150 do_set_nfs4_acl(struct svc_rqst *rqstp, struct svc_fh *fhp, 151 struct nfs4_acl *acl, u32 *bmval) 152 { 153 __be32 status; 154 155 status = nfsd4_set_nfs4_acl(rqstp, fhp, acl); 156 if (status) 157 /* 158 * We should probably fail the whole open at this point, 159 * but we've already created the file, so it's too late; 160 * So this seems the least of evils: 161 */ 162 bmval[0] &= ~FATTR4_WORD0_ACL; 163 } 164 165 static inline void 166 fh_dup2(struct svc_fh *dst, struct svc_fh *src) 167 { 168 fh_put(dst); 169 dget(src->fh_dentry); 170 if (src->fh_export) 171 exp_get(src->fh_export); 172 *dst = *src; 173 } 174 175 static __be32 176 do_open_permission(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open, int accmode) 177 { 178 __be32 status; 179 180 if (open->op_truncate && 181 !(open->op_share_access & NFS4_SHARE_ACCESS_WRITE)) 182 return nfserr_inval; 183 184 accmode |= NFSD_MAY_READ_IF_EXEC; 185 186 if (open->op_share_access & NFS4_SHARE_ACCESS_READ) 187 accmode |= NFSD_MAY_READ; 188 if (open->op_share_access & NFS4_SHARE_ACCESS_WRITE) 189 accmode |= (NFSD_MAY_WRITE | NFSD_MAY_TRUNC); 190 if (open->op_share_deny & NFS4_SHARE_DENY_READ) 191 accmode |= NFSD_MAY_WRITE; 192 193 status = fh_verify(rqstp, current_fh, S_IFREG, accmode); 194 195 return status; 196 } 197 198 static __be32 nfsd_check_obj_isreg(struct svc_fh *fh) 199 { 200 umode_t mode = d_inode(fh->fh_dentry)->i_mode; 201 202 if (S_ISREG(mode)) 203 return nfs_ok; 204 if (S_ISDIR(mode)) 205 return nfserr_isdir; 206 /* 207 * Using err_symlink as our catch-all case may look odd; but 208 * there's no other obvious error for this case in 4.0, and we 209 * happen to know that it will cause the linux v4 client to do 210 * the right thing on attempts to open something other than a 211 * regular file. 212 */ 213 return nfserr_symlink; 214 } 215 216 static void nfsd4_set_open_owner_reply_cache(struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh *resfh) 217 { 218 if (nfsd4_has_session(cstate)) 219 return; 220 fh_copy_shallow(&open->op_openowner->oo_owner.so_replay.rp_openfh, 221 &resfh->fh_handle); 222 } 223 224 static __be32 225 do_open_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh **resfh) 226 { 227 struct svc_fh *current_fh = &cstate->current_fh; 228 int accmode; 229 __be32 status; 230 231 *resfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL); 232 if (!*resfh) 233 return nfserr_jukebox; 234 fh_init(*resfh, NFS4_FHSIZE); 235 open->op_truncate = 0; 236 237 if (open->op_create) { 238 /* FIXME: check session persistence and pnfs flags. 239 * The nfsv4.1 spec requires the following semantics: 240 * 241 * Persistent | pNFS | Server REQUIRED | Client Allowed 242 * Reply Cache | server | | 243 * -------------+--------+-----------------+-------------------- 244 * no | no | EXCLUSIVE4_1 | EXCLUSIVE4_1 245 * | | | (SHOULD) 246 * | | and EXCLUSIVE4 | or EXCLUSIVE4 247 * | | | (SHOULD NOT) 248 * no | yes | EXCLUSIVE4_1 | EXCLUSIVE4_1 249 * yes | no | GUARDED4 | GUARDED4 250 * yes | yes | GUARDED4 | GUARDED4 251 */ 252 253 /* 254 * Note: create modes (UNCHECKED,GUARDED...) are the same 255 * in NFSv4 as in v3 except EXCLUSIVE4_1. 256 */ 257 current->fs->umask = open->op_umask; 258 status = do_nfsd_create(rqstp, current_fh, open->op_fname.data, 259 open->op_fname.len, &open->op_iattr, 260 *resfh, open->op_createmode, 261 (u32 *)open->op_verf.data, 262 &open->op_truncate, &open->op_created); 263 current->fs->umask = 0; 264 265 if (!status && open->op_label.len) 266 nfsd4_security_inode_setsecctx(*resfh, &open->op_label, open->op_bmval); 267 268 /* 269 * Following rfc 3530 14.2.16, and rfc 5661 18.16.4 270 * use the returned bitmask to indicate which attributes 271 * we used to store the verifier: 272 */ 273 if (nfsd_create_is_exclusive(open->op_createmode) && status == 0) 274 open->op_bmval[1] |= (FATTR4_WORD1_TIME_ACCESS | 275 FATTR4_WORD1_TIME_MODIFY); 276 } else 277 /* 278 * Note this may exit with the parent still locked. 279 * We will hold the lock until nfsd4_open's final 280 * lookup, to prevent renames or unlinks until we've had 281 * a chance to an acquire a delegation if appropriate. 282 */ 283 status = nfsd_lookup(rqstp, current_fh, 284 open->op_fname.data, open->op_fname.len, *resfh); 285 if (status) 286 goto out; 287 status = nfsd_check_obj_isreg(*resfh); 288 if (status) 289 goto out; 290 291 if (is_create_with_attrs(open) && open->op_acl != NULL) 292 do_set_nfs4_acl(rqstp, *resfh, open->op_acl, open->op_bmval); 293 294 nfsd4_set_open_owner_reply_cache(cstate, open, *resfh); 295 accmode = NFSD_MAY_NOP; 296 if (open->op_created || 297 open->op_claim_type == NFS4_OPEN_CLAIM_DELEGATE_CUR) 298 accmode |= NFSD_MAY_OWNER_OVERRIDE; 299 status = do_open_permission(rqstp, *resfh, open, accmode); 300 set_change_info(&open->op_cinfo, current_fh); 301 out: 302 return status; 303 } 304 305 static __be32 306 do_open_fhandle(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open) 307 { 308 struct svc_fh *current_fh = &cstate->current_fh; 309 __be32 status; 310 int accmode = 0; 311 312 /* We don't know the target directory, and therefore can not 313 * set the change info 314 */ 315 316 memset(&open->op_cinfo, 0, sizeof(struct nfsd4_change_info)); 317 318 nfsd4_set_open_owner_reply_cache(cstate, open, current_fh); 319 320 open->op_truncate = (open->op_iattr.ia_valid & ATTR_SIZE) && 321 (open->op_iattr.ia_size == 0); 322 /* 323 * In the delegation case, the client is telling us about an 324 * open that it *already* performed locally, some time ago. We 325 * should let it succeed now if possible. 326 * 327 * In the case of a CLAIM_FH open, on the other hand, the client 328 * may be counting on us to enforce permissions (the Linux 4.1 329 * client uses this for normal opens, for example). 330 */ 331 if (open->op_claim_type == NFS4_OPEN_CLAIM_DELEG_CUR_FH) 332 accmode = NFSD_MAY_OWNER_OVERRIDE; 333 334 status = do_open_permission(rqstp, current_fh, open, accmode); 335 336 return status; 337 } 338 339 static void 340 copy_clientid(clientid_t *clid, struct nfsd4_session *session) 341 { 342 struct nfsd4_sessionid *sid = 343 (struct nfsd4_sessionid *)session->se_sessionid.data; 344 345 clid->cl_boot = sid->clientid.cl_boot; 346 clid->cl_id = sid->clientid.cl_id; 347 } 348 349 static __be32 350 nfsd4_open(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 351 union nfsd4_op_u *u) 352 { 353 struct nfsd4_open *open = &u->open; 354 __be32 status; 355 struct svc_fh *resfh = NULL; 356 struct net *net = SVC_NET(rqstp); 357 struct nfsd_net *nn = net_generic(net, nfsd_net_id); 358 bool reclaim = false; 359 360 dprintk("NFSD: nfsd4_open filename %.*s op_openowner %p\n", 361 (int)open->op_fname.len, open->op_fname.data, 362 open->op_openowner); 363 364 /* This check required by spec. */ 365 if (open->op_create && open->op_claim_type != NFS4_OPEN_CLAIM_NULL) 366 return nfserr_inval; 367 368 open->op_created = 0; 369 /* 370 * RFC5661 18.51.3 371 * Before RECLAIM_COMPLETE done, server should deny new lock 372 */ 373 if (nfsd4_has_session(cstate) && 374 !test_bit(NFSD4_CLIENT_RECLAIM_COMPLETE, 375 &cstate->session->se_client->cl_flags) && 376 open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS) 377 return nfserr_grace; 378 379 if (nfsd4_has_session(cstate)) 380 copy_clientid(&open->op_clientid, cstate->session); 381 382 /* check seqid for replay. set nfs4_owner */ 383 status = nfsd4_process_open1(cstate, open, nn); 384 if (status == nfserr_replay_me) { 385 struct nfs4_replay *rp = &open->op_openowner->oo_owner.so_replay; 386 fh_put(&cstate->current_fh); 387 fh_copy_shallow(&cstate->current_fh.fh_handle, 388 &rp->rp_openfh); 389 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 390 if (status) 391 dprintk("nfsd4_open: replay failed" 392 " restoring previous filehandle\n"); 393 else 394 status = nfserr_replay_me; 395 } 396 if (status) 397 goto out; 398 if (open->op_xdr_error) { 399 status = open->op_xdr_error; 400 goto out; 401 } 402 403 status = nfsd4_check_open_attributes(rqstp, cstate, open); 404 if (status) 405 goto out; 406 407 /* Openowner is now set, so sequence id will get bumped. Now we need 408 * these checks before we do any creates: */ 409 status = nfserr_grace; 410 if (opens_in_grace(net) && open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS) 411 goto out; 412 status = nfserr_no_grace; 413 if (!opens_in_grace(net) && open->op_claim_type == NFS4_OPEN_CLAIM_PREVIOUS) 414 goto out; 415 416 switch (open->op_claim_type) { 417 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 418 case NFS4_OPEN_CLAIM_NULL: 419 status = do_open_lookup(rqstp, cstate, open, &resfh); 420 if (status) 421 goto out; 422 break; 423 case NFS4_OPEN_CLAIM_PREVIOUS: 424 status = nfs4_check_open_reclaim(&open->op_clientid, 425 cstate, nn); 426 if (status) 427 goto out; 428 open->op_openowner->oo_flags |= NFS4_OO_CONFIRMED; 429 reclaim = true; 430 /* fall through */ 431 case NFS4_OPEN_CLAIM_FH: 432 case NFS4_OPEN_CLAIM_DELEG_CUR_FH: 433 status = do_open_fhandle(rqstp, cstate, open); 434 if (status) 435 goto out; 436 resfh = &cstate->current_fh; 437 break; 438 case NFS4_OPEN_CLAIM_DELEG_PREV_FH: 439 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 440 dprintk("NFSD: unsupported OPEN claim type %d\n", 441 open->op_claim_type); 442 status = nfserr_notsupp; 443 goto out; 444 default: 445 dprintk("NFSD: Invalid OPEN claim type %d\n", 446 open->op_claim_type); 447 status = nfserr_inval; 448 goto out; 449 } 450 /* 451 * nfsd4_process_open2() does the actual opening of the file. If 452 * successful, it (1) truncates the file if open->op_truncate was 453 * set, (2) sets open->op_stateid, (3) sets open->op_delegation. 454 */ 455 status = nfsd4_process_open2(rqstp, resfh, open); 456 WARN(status && open->op_created, 457 "nfsd4_process_open2 failed to open newly-created file! status=%u\n", 458 be32_to_cpu(status)); 459 if (reclaim && !status) 460 nn->somebody_reclaimed = true; 461 out: 462 if (resfh && resfh != &cstate->current_fh) { 463 fh_dup2(&cstate->current_fh, resfh); 464 fh_put(resfh); 465 kfree(resfh); 466 } 467 nfsd4_cleanup_open_state(cstate, open); 468 nfsd4_bump_seqid(cstate, status); 469 return status; 470 } 471 472 /* 473 * OPEN is the only seqid-mutating operation whose decoding can fail 474 * with a seqid-mutating error (specifically, decoding of user names in 475 * the attributes). Therefore we have to do some processing to look up 476 * the stateowner so that we can bump the seqid. 477 */ 478 static __be32 nfsd4_open_omfg(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_op *op) 479 { 480 struct nfsd4_open *open = &op->u.open; 481 482 if (!seqid_mutating_err(ntohl(op->status))) 483 return op->status; 484 if (nfsd4_has_session(cstate)) 485 return op->status; 486 open->op_xdr_error = op->status; 487 return nfsd4_open(rqstp, cstate, &op->u); 488 } 489 490 /* 491 * filehandle-manipulating ops. 492 */ 493 static __be32 494 nfsd4_getfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 495 union nfsd4_op_u *u) 496 { 497 u->getfh = &cstate->current_fh; 498 return nfs_ok; 499 } 500 501 static __be32 502 nfsd4_putfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 503 union nfsd4_op_u *u) 504 { 505 struct nfsd4_putfh *putfh = &u->putfh; 506 507 fh_put(&cstate->current_fh); 508 cstate->current_fh.fh_handle.fh_size = putfh->pf_fhlen; 509 memcpy(&cstate->current_fh.fh_handle.fh_base, putfh->pf_fhval, 510 putfh->pf_fhlen); 511 return fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_BYPASS_GSS); 512 } 513 514 static __be32 515 nfsd4_putrootfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 516 union nfsd4_op_u *u) 517 { 518 __be32 status; 519 520 fh_put(&cstate->current_fh); 521 status = exp_pseudoroot(rqstp, &cstate->current_fh); 522 return status; 523 } 524 525 static __be32 526 nfsd4_restorefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 527 union nfsd4_op_u *u) 528 { 529 if (!cstate->save_fh.fh_dentry) 530 return nfserr_restorefh; 531 532 fh_dup2(&cstate->current_fh, &cstate->save_fh); 533 if (HAS_STATE_ID(cstate, SAVED_STATE_ID_FLAG)) { 534 memcpy(&cstate->current_stateid, &cstate->save_stateid, sizeof(stateid_t)); 535 SET_STATE_ID(cstate, CURRENT_STATE_ID_FLAG); 536 } 537 return nfs_ok; 538 } 539 540 static __be32 541 nfsd4_savefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 542 union nfsd4_op_u *u) 543 { 544 fh_dup2(&cstate->save_fh, &cstate->current_fh); 545 if (HAS_STATE_ID(cstate, CURRENT_STATE_ID_FLAG)) { 546 memcpy(&cstate->save_stateid, &cstate->current_stateid, sizeof(stateid_t)); 547 SET_STATE_ID(cstate, SAVED_STATE_ID_FLAG); 548 } 549 return nfs_ok; 550 } 551 552 /* 553 * misc nfsv4 ops 554 */ 555 static __be32 556 nfsd4_access(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 557 union nfsd4_op_u *u) 558 { 559 struct nfsd4_access *access = &u->access; 560 561 if (access->ac_req_access & ~NFS3_ACCESS_FULL) 562 return nfserr_inval; 563 564 access->ac_resp_access = access->ac_req_access; 565 return nfsd_access(rqstp, &cstate->current_fh, &access->ac_resp_access, 566 &access->ac_supported); 567 } 568 569 static void gen_boot_verifier(nfs4_verifier *verifier, struct net *net) 570 { 571 __be32 *verf = (__be32 *)verifier->data; 572 573 BUILD_BUG_ON(2*sizeof(*verf) != sizeof(verifier->data)); 574 575 nfsd_copy_boot_verifier(verf, net_generic(net, nfsd_net_id)); 576 } 577 578 static __be32 579 nfsd4_commit(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 580 union nfsd4_op_u *u) 581 { 582 struct nfsd4_commit *commit = &u->commit; 583 584 gen_boot_verifier(&commit->co_verf, SVC_NET(rqstp)); 585 return nfsd_commit(rqstp, &cstate->current_fh, commit->co_offset, 586 commit->co_count); 587 } 588 589 static __be32 590 nfsd4_create(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 591 union nfsd4_op_u *u) 592 { 593 struct nfsd4_create *create = &u->create; 594 struct svc_fh resfh; 595 __be32 status; 596 dev_t rdev; 597 598 fh_init(&resfh, NFS4_FHSIZE); 599 600 status = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_NOP); 601 if (status) 602 return status; 603 604 status = check_attr_support(rqstp, cstate, create->cr_bmval, 605 nfsd_attrmask); 606 if (status) 607 return status; 608 609 current->fs->umask = create->cr_umask; 610 switch (create->cr_type) { 611 case NF4LNK: 612 status = nfsd_symlink(rqstp, &cstate->current_fh, 613 create->cr_name, create->cr_namelen, 614 create->cr_data, &resfh); 615 break; 616 617 case NF4BLK: 618 status = nfserr_inval; 619 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2); 620 if (MAJOR(rdev) != create->cr_specdata1 || 621 MINOR(rdev) != create->cr_specdata2) 622 goto out_umask; 623 status = nfsd_create(rqstp, &cstate->current_fh, 624 create->cr_name, create->cr_namelen, 625 &create->cr_iattr, S_IFBLK, rdev, &resfh); 626 break; 627 628 case NF4CHR: 629 status = nfserr_inval; 630 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2); 631 if (MAJOR(rdev) != create->cr_specdata1 || 632 MINOR(rdev) != create->cr_specdata2) 633 goto out_umask; 634 status = nfsd_create(rqstp, &cstate->current_fh, 635 create->cr_name, create->cr_namelen, 636 &create->cr_iattr,S_IFCHR, rdev, &resfh); 637 break; 638 639 case NF4SOCK: 640 status = nfsd_create(rqstp, &cstate->current_fh, 641 create->cr_name, create->cr_namelen, 642 &create->cr_iattr, S_IFSOCK, 0, &resfh); 643 break; 644 645 case NF4FIFO: 646 status = nfsd_create(rqstp, &cstate->current_fh, 647 create->cr_name, create->cr_namelen, 648 &create->cr_iattr, S_IFIFO, 0, &resfh); 649 break; 650 651 case NF4DIR: 652 create->cr_iattr.ia_valid &= ~ATTR_SIZE; 653 status = nfsd_create(rqstp, &cstate->current_fh, 654 create->cr_name, create->cr_namelen, 655 &create->cr_iattr, S_IFDIR, 0, &resfh); 656 break; 657 658 default: 659 status = nfserr_badtype; 660 } 661 662 if (status) 663 goto out; 664 665 if (create->cr_label.len) 666 nfsd4_security_inode_setsecctx(&resfh, &create->cr_label, create->cr_bmval); 667 668 if (create->cr_acl != NULL) 669 do_set_nfs4_acl(rqstp, &resfh, create->cr_acl, 670 create->cr_bmval); 671 672 fh_unlock(&cstate->current_fh); 673 set_change_info(&create->cr_cinfo, &cstate->current_fh); 674 fh_dup2(&cstate->current_fh, &resfh); 675 out: 676 fh_put(&resfh); 677 out_umask: 678 current->fs->umask = 0; 679 return status; 680 } 681 682 static __be32 683 nfsd4_getattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 684 union nfsd4_op_u *u) 685 { 686 struct nfsd4_getattr *getattr = &u->getattr; 687 __be32 status; 688 689 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 690 if (status) 691 return status; 692 693 if (getattr->ga_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1) 694 return nfserr_inval; 695 696 getattr->ga_bmval[0] &= nfsd_suppattrs[cstate->minorversion][0]; 697 getattr->ga_bmval[1] &= nfsd_suppattrs[cstate->minorversion][1]; 698 getattr->ga_bmval[2] &= nfsd_suppattrs[cstate->minorversion][2]; 699 700 getattr->ga_fhp = &cstate->current_fh; 701 return nfs_ok; 702 } 703 704 static __be32 705 nfsd4_link(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 706 union nfsd4_op_u *u) 707 { 708 struct nfsd4_link *link = &u->link; 709 __be32 status; 710 711 status = nfsd_link(rqstp, &cstate->current_fh, 712 link->li_name, link->li_namelen, &cstate->save_fh); 713 if (!status) 714 set_change_info(&link->li_cinfo, &cstate->current_fh); 715 return status; 716 } 717 718 static __be32 nfsd4_do_lookupp(struct svc_rqst *rqstp, struct svc_fh *fh) 719 { 720 struct svc_fh tmp_fh; 721 __be32 ret; 722 723 fh_init(&tmp_fh, NFS4_FHSIZE); 724 ret = exp_pseudoroot(rqstp, &tmp_fh); 725 if (ret) 726 return ret; 727 if (tmp_fh.fh_dentry == fh->fh_dentry) { 728 fh_put(&tmp_fh); 729 return nfserr_noent; 730 } 731 fh_put(&tmp_fh); 732 return nfsd_lookup(rqstp, fh, "..", 2, fh); 733 } 734 735 static __be32 736 nfsd4_lookupp(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 737 union nfsd4_op_u *u) 738 { 739 return nfsd4_do_lookupp(rqstp, &cstate->current_fh); 740 } 741 742 static __be32 743 nfsd4_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 744 union nfsd4_op_u *u) 745 { 746 return nfsd_lookup(rqstp, &cstate->current_fh, 747 u->lookup.lo_name, u->lookup.lo_len, 748 &cstate->current_fh); 749 } 750 751 static __be32 752 nfsd4_read(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 753 union nfsd4_op_u *u) 754 { 755 struct nfsd4_read *read = &u->read; 756 __be32 status; 757 758 read->rd_nf = NULL; 759 if (read->rd_offset >= OFFSET_MAX) 760 return nfserr_inval; 761 762 trace_nfsd_read_start(rqstp, &cstate->current_fh, 763 read->rd_offset, read->rd_length); 764 765 /* 766 * If we do a zero copy read, then a client will see read data 767 * that reflects the state of the file *after* performing the 768 * following compound. 769 * 770 * To ensure proper ordering, we therefore turn off zero copy if 771 * the client wants us to do more in this compound: 772 */ 773 if (!nfsd4_last_compound_op(rqstp)) 774 clear_bit(RQ_SPLICE_OK, &rqstp->rq_flags); 775 776 /* check stateid */ 777 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 778 &read->rd_stateid, RD_STATE, 779 &read->rd_nf); 780 if (status) { 781 dprintk("NFSD: nfsd4_read: couldn't process stateid!\n"); 782 goto out; 783 } 784 status = nfs_ok; 785 out: 786 read->rd_rqstp = rqstp; 787 read->rd_fhp = &cstate->current_fh; 788 return status; 789 } 790 791 792 static void 793 nfsd4_read_release(union nfsd4_op_u *u) 794 { 795 if (u->read.rd_nf) 796 nfsd_file_put(u->read.rd_nf); 797 trace_nfsd_read_done(u->read.rd_rqstp, u->read.rd_fhp, 798 u->read.rd_offset, u->read.rd_length); 799 } 800 801 static __be32 802 nfsd4_readdir(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 803 union nfsd4_op_u *u) 804 { 805 struct nfsd4_readdir *readdir = &u->readdir; 806 u64 cookie = readdir->rd_cookie; 807 static const nfs4_verifier zeroverf; 808 809 /* no need to check permission - this will be done in nfsd_readdir() */ 810 811 if (readdir->rd_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1) 812 return nfserr_inval; 813 814 readdir->rd_bmval[0] &= nfsd_suppattrs[cstate->minorversion][0]; 815 readdir->rd_bmval[1] &= nfsd_suppattrs[cstate->minorversion][1]; 816 readdir->rd_bmval[2] &= nfsd_suppattrs[cstate->minorversion][2]; 817 818 if ((cookie == 1) || (cookie == 2) || 819 (cookie == 0 && memcmp(readdir->rd_verf.data, zeroverf.data, NFS4_VERIFIER_SIZE))) 820 return nfserr_bad_cookie; 821 822 readdir->rd_rqstp = rqstp; 823 readdir->rd_fhp = &cstate->current_fh; 824 return nfs_ok; 825 } 826 827 static __be32 828 nfsd4_readlink(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 829 union nfsd4_op_u *u) 830 { 831 u->readlink.rl_rqstp = rqstp; 832 u->readlink.rl_fhp = &cstate->current_fh; 833 return nfs_ok; 834 } 835 836 static __be32 837 nfsd4_remove(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 838 union nfsd4_op_u *u) 839 { 840 struct nfsd4_remove *remove = &u->remove; 841 __be32 status; 842 843 if (opens_in_grace(SVC_NET(rqstp))) 844 return nfserr_grace; 845 status = nfsd_unlink(rqstp, &cstate->current_fh, 0, 846 remove->rm_name, remove->rm_namelen); 847 if (!status) { 848 fh_unlock(&cstate->current_fh); 849 set_change_info(&remove->rm_cinfo, &cstate->current_fh); 850 } 851 return status; 852 } 853 854 static __be32 855 nfsd4_rename(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 856 union nfsd4_op_u *u) 857 { 858 struct nfsd4_rename *rename = &u->rename; 859 __be32 status; 860 861 if (opens_in_grace(SVC_NET(rqstp))) 862 return nfserr_grace; 863 status = nfsd_rename(rqstp, &cstate->save_fh, rename->rn_sname, 864 rename->rn_snamelen, &cstate->current_fh, 865 rename->rn_tname, rename->rn_tnamelen); 866 if (status) 867 return status; 868 set_change_info(&rename->rn_sinfo, &cstate->current_fh); 869 set_change_info(&rename->rn_tinfo, &cstate->save_fh); 870 return nfs_ok; 871 } 872 873 static __be32 874 nfsd4_secinfo(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 875 union nfsd4_op_u *u) 876 { 877 struct nfsd4_secinfo *secinfo = &u->secinfo; 878 struct svc_export *exp; 879 struct dentry *dentry; 880 __be32 err; 881 882 err = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_EXEC); 883 if (err) 884 return err; 885 err = nfsd_lookup_dentry(rqstp, &cstate->current_fh, 886 secinfo->si_name, secinfo->si_namelen, 887 &exp, &dentry); 888 if (err) 889 return err; 890 fh_unlock(&cstate->current_fh); 891 if (d_really_is_negative(dentry)) { 892 exp_put(exp); 893 err = nfserr_noent; 894 } else 895 secinfo->si_exp = exp; 896 dput(dentry); 897 if (cstate->minorversion) 898 /* See rfc 5661 section 2.6.3.1.1.8 */ 899 fh_put(&cstate->current_fh); 900 return err; 901 } 902 903 static __be32 904 nfsd4_secinfo_no_name(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 905 union nfsd4_op_u *u) 906 { 907 __be32 err; 908 909 switch (u->secinfo_no_name.sin_style) { 910 case NFS4_SECINFO_STYLE4_CURRENT_FH: 911 break; 912 case NFS4_SECINFO_STYLE4_PARENT: 913 err = nfsd4_do_lookupp(rqstp, &cstate->current_fh); 914 if (err) 915 return err; 916 break; 917 default: 918 return nfserr_inval; 919 } 920 921 u->secinfo_no_name.sin_exp = exp_get(cstate->current_fh.fh_export); 922 fh_put(&cstate->current_fh); 923 return nfs_ok; 924 } 925 926 static void 927 nfsd4_secinfo_release(union nfsd4_op_u *u) 928 { 929 if (u->secinfo.si_exp) 930 exp_put(u->secinfo.si_exp); 931 } 932 933 static void 934 nfsd4_secinfo_no_name_release(union nfsd4_op_u *u) 935 { 936 if (u->secinfo_no_name.sin_exp) 937 exp_put(u->secinfo_no_name.sin_exp); 938 } 939 940 static __be32 941 nfsd4_setattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 942 union nfsd4_op_u *u) 943 { 944 struct nfsd4_setattr *setattr = &u->setattr; 945 __be32 status = nfs_ok; 946 int err; 947 948 if (setattr->sa_iattr.ia_valid & ATTR_SIZE) { 949 status = nfs4_preprocess_stateid_op(rqstp, cstate, 950 &cstate->current_fh, &setattr->sa_stateid, 951 WR_STATE, NULL); 952 if (status) { 953 dprintk("NFSD: nfsd4_setattr: couldn't process stateid!\n"); 954 return status; 955 } 956 } 957 err = fh_want_write(&cstate->current_fh); 958 if (err) 959 return nfserrno(err); 960 status = nfs_ok; 961 962 status = check_attr_support(rqstp, cstate, setattr->sa_bmval, 963 nfsd_attrmask); 964 if (status) 965 goto out; 966 967 if (setattr->sa_acl != NULL) 968 status = nfsd4_set_nfs4_acl(rqstp, &cstate->current_fh, 969 setattr->sa_acl); 970 if (status) 971 goto out; 972 if (setattr->sa_label.len) 973 status = nfsd4_set_nfs4_label(rqstp, &cstate->current_fh, 974 &setattr->sa_label); 975 if (status) 976 goto out; 977 status = nfsd_setattr(rqstp, &cstate->current_fh, &setattr->sa_iattr, 978 0, (time_t)0); 979 out: 980 fh_drop_write(&cstate->current_fh); 981 return status; 982 } 983 984 static __be32 985 nfsd4_write(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 986 union nfsd4_op_u *u) 987 { 988 struct nfsd4_write *write = &u->write; 989 stateid_t *stateid = &write->wr_stateid; 990 struct nfsd_file *nf = NULL; 991 __be32 status = nfs_ok; 992 unsigned long cnt; 993 int nvecs; 994 995 if (write->wr_offset >= OFFSET_MAX) 996 return nfserr_inval; 997 998 cnt = write->wr_buflen; 999 trace_nfsd_write_start(rqstp, &cstate->current_fh, 1000 write->wr_offset, cnt); 1001 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 1002 stateid, WR_STATE, &nf); 1003 if (status) { 1004 dprintk("NFSD: nfsd4_write: couldn't process stateid!\n"); 1005 return status; 1006 } 1007 1008 write->wr_how_written = write->wr_stable_how; 1009 gen_boot_verifier(&write->wr_verifier, SVC_NET(rqstp)); 1010 1011 nvecs = svc_fill_write_vector(rqstp, write->wr_pagelist, 1012 &write->wr_head, write->wr_buflen); 1013 WARN_ON_ONCE(nvecs > ARRAY_SIZE(rqstp->rq_vec)); 1014 1015 status = nfsd_vfs_write(rqstp, &cstate->current_fh, nf->nf_file, 1016 write->wr_offset, rqstp->rq_vec, nvecs, &cnt, 1017 write->wr_how_written); 1018 nfsd_file_put(nf); 1019 1020 write->wr_bytes_written = cnt; 1021 trace_nfsd_write_done(rqstp, &cstate->current_fh, 1022 write->wr_offset, cnt); 1023 return status; 1024 } 1025 1026 static __be32 1027 nfsd4_verify_copy(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1028 stateid_t *src_stateid, struct nfsd_file **src, 1029 stateid_t *dst_stateid, struct nfsd_file **dst) 1030 { 1031 __be32 status; 1032 1033 if (!cstate->save_fh.fh_dentry) 1034 return nfserr_nofilehandle; 1035 1036 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->save_fh, 1037 src_stateid, RD_STATE, src); 1038 if (status) { 1039 dprintk("NFSD: %s: couldn't process src stateid!\n", __func__); 1040 goto out; 1041 } 1042 1043 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 1044 dst_stateid, WR_STATE, dst); 1045 if (status) { 1046 dprintk("NFSD: %s: couldn't process dst stateid!\n", __func__); 1047 goto out_put_src; 1048 } 1049 1050 /* fix up for NFS-specific error code */ 1051 if (!S_ISREG(file_inode((*src)->nf_file)->i_mode) || 1052 !S_ISREG(file_inode((*dst)->nf_file)->i_mode)) { 1053 status = nfserr_wrong_type; 1054 goto out_put_dst; 1055 } 1056 1057 out: 1058 return status; 1059 out_put_dst: 1060 nfsd_file_put(*dst); 1061 out_put_src: 1062 nfsd_file_put(*src); 1063 goto out; 1064 } 1065 1066 static __be32 1067 nfsd4_clone(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1068 union nfsd4_op_u *u) 1069 { 1070 struct nfsd4_clone *clone = &u->clone; 1071 struct nfsd_file *src, *dst; 1072 __be32 status; 1073 1074 status = nfsd4_verify_copy(rqstp, cstate, &clone->cl_src_stateid, &src, 1075 &clone->cl_dst_stateid, &dst); 1076 if (status) 1077 goto out; 1078 1079 status = nfsd4_clone_file_range(src->nf_file, clone->cl_src_pos, 1080 dst->nf_file, clone->cl_dst_pos, clone->cl_count, 1081 EX_ISSYNC(cstate->current_fh.fh_export)); 1082 1083 nfsd_file_put(dst); 1084 nfsd_file_put(src); 1085 out: 1086 return status; 1087 } 1088 1089 void nfs4_put_copy(struct nfsd4_copy *copy) 1090 { 1091 if (!refcount_dec_and_test(©->refcount)) 1092 return; 1093 kfree(copy); 1094 } 1095 1096 static bool 1097 check_and_set_stop_copy(struct nfsd4_copy *copy) 1098 { 1099 bool value; 1100 1101 spin_lock(©->cp_clp->async_lock); 1102 value = copy->stopped; 1103 if (!copy->stopped) 1104 copy->stopped = true; 1105 spin_unlock(©->cp_clp->async_lock); 1106 return value; 1107 } 1108 1109 static void nfsd4_stop_copy(struct nfsd4_copy *copy) 1110 { 1111 /* only 1 thread should stop the copy */ 1112 if (!check_and_set_stop_copy(copy)) 1113 kthread_stop(copy->copy_task); 1114 nfs4_put_copy(copy); 1115 } 1116 1117 static struct nfsd4_copy *nfsd4_get_copy(struct nfs4_client *clp) 1118 { 1119 struct nfsd4_copy *copy = NULL; 1120 1121 spin_lock(&clp->async_lock); 1122 if (!list_empty(&clp->async_copies)) { 1123 copy = list_first_entry(&clp->async_copies, struct nfsd4_copy, 1124 copies); 1125 refcount_inc(©->refcount); 1126 } 1127 spin_unlock(&clp->async_lock); 1128 return copy; 1129 } 1130 1131 void nfsd4_shutdown_copy(struct nfs4_client *clp) 1132 { 1133 struct nfsd4_copy *copy; 1134 1135 while ((copy = nfsd4_get_copy(clp)) != NULL) 1136 nfsd4_stop_copy(copy); 1137 } 1138 1139 static void nfsd4_cb_offload_release(struct nfsd4_callback *cb) 1140 { 1141 struct nfsd4_copy *copy = container_of(cb, struct nfsd4_copy, cp_cb); 1142 1143 nfs4_put_copy(copy); 1144 } 1145 1146 static int nfsd4_cb_offload_done(struct nfsd4_callback *cb, 1147 struct rpc_task *task) 1148 { 1149 return 1; 1150 } 1151 1152 static const struct nfsd4_callback_ops nfsd4_cb_offload_ops = { 1153 .release = nfsd4_cb_offload_release, 1154 .done = nfsd4_cb_offload_done 1155 }; 1156 1157 static void nfsd4_init_copy_res(struct nfsd4_copy *copy, bool sync) 1158 { 1159 copy->cp_res.wr_stable_how = NFS_UNSTABLE; 1160 copy->cp_synchronous = sync; 1161 gen_boot_verifier(©->cp_res.wr_verifier, copy->cp_clp->net); 1162 } 1163 1164 static ssize_t _nfsd_copy_file_range(struct nfsd4_copy *copy) 1165 { 1166 ssize_t bytes_copied = 0; 1167 size_t bytes_total = copy->cp_count; 1168 u64 src_pos = copy->cp_src_pos; 1169 u64 dst_pos = copy->cp_dst_pos; 1170 1171 do { 1172 if (kthread_should_stop()) 1173 break; 1174 bytes_copied = nfsd_copy_file_range(copy->nf_src->nf_file, 1175 src_pos, copy->nf_dst->nf_file, dst_pos, 1176 bytes_total); 1177 if (bytes_copied <= 0) 1178 break; 1179 bytes_total -= bytes_copied; 1180 copy->cp_res.wr_bytes_written += bytes_copied; 1181 src_pos += bytes_copied; 1182 dst_pos += bytes_copied; 1183 } while (bytes_total > 0 && !copy->cp_synchronous); 1184 return bytes_copied; 1185 } 1186 1187 static __be32 nfsd4_do_copy(struct nfsd4_copy *copy, bool sync) 1188 { 1189 __be32 status; 1190 ssize_t bytes; 1191 1192 bytes = _nfsd_copy_file_range(copy); 1193 /* for async copy, we ignore the error, client can always retry 1194 * to get the error 1195 */ 1196 if (bytes < 0 && !copy->cp_res.wr_bytes_written) 1197 status = nfserrno(bytes); 1198 else { 1199 nfsd4_init_copy_res(copy, sync); 1200 status = nfs_ok; 1201 } 1202 1203 nfsd_file_put(copy->nf_src); 1204 nfsd_file_put(copy->nf_dst); 1205 return status; 1206 } 1207 1208 static void dup_copy_fields(struct nfsd4_copy *src, struct nfsd4_copy *dst) 1209 { 1210 dst->cp_src_pos = src->cp_src_pos; 1211 dst->cp_dst_pos = src->cp_dst_pos; 1212 dst->cp_count = src->cp_count; 1213 dst->cp_synchronous = src->cp_synchronous; 1214 memcpy(&dst->cp_res, &src->cp_res, sizeof(src->cp_res)); 1215 memcpy(&dst->fh, &src->fh, sizeof(src->fh)); 1216 dst->cp_clp = src->cp_clp; 1217 dst->nf_dst = nfsd_file_get(src->nf_dst); 1218 dst->nf_src = nfsd_file_get(src->nf_src); 1219 memcpy(&dst->cp_stateid, &src->cp_stateid, sizeof(src->cp_stateid)); 1220 } 1221 1222 static void cleanup_async_copy(struct nfsd4_copy *copy) 1223 { 1224 nfs4_free_cp_state(copy); 1225 nfsd_file_put(copy->nf_dst); 1226 nfsd_file_put(copy->nf_src); 1227 spin_lock(©->cp_clp->async_lock); 1228 list_del(©->copies); 1229 spin_unlock(©->cp_clp->async_lock); 1230 nfs4_put_copy(copy); 1231 } 1232 1233 static int nfsd4_do_async_copy(void *data) 1234 { 1235 struct nfsd4_copy *copy = (struct nfsd4_copy *)data; 1236 struct nfsd4_copy *cb_copy; 1237 1238 copy->nfserr = nfsd4_do_copy(copy, 0); 1239 cb_copy = kzalloc(sizeof(struct nfsd4_copy), GFP_KERNEL); 1240 if (!cb_copy) 1241 goto out; 1242 memcpy(&cb_copy->cp_res, ©->cp_res, sizeof(copy->cp_res)); 1243 cb_copy->cp_clp = copy->cp_clp; 1244 cb_copy->nfserr = copy->nfserr; 1245 memcpy(&cb_copy->fh, ©->fh, sizeof(copy->fh)); 1246 nfsd4_init_cb(&cb_copy->cp_cb, cb_copy->cp_clp, 1247 &nfsd4_cb_offload_ops, NFSPROC4_CLNT_CB_OFFLOAD); 1248 nfsd4_run_cb(&cb_copy->cp_cb); 1249 out: 1250 cleanup_async_copy(copy); 1251 return 0; 1252 } 1253 1254 static __be32 1255 nfsd4_copy(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1256 union nfsd4_op_u *u) 1257 { 1258 struct nfsd4_copy *copy = &u->copy; 1259 __be32 status; 1260 struct nfsd4_copy *async_copy = NULL; 1261 1262 status = nfsd4_verify_copy(rqstp, cstate, ©->cp_src_stateid, 1263 ©->nf_src, ©->cp_dst_stateid, 1264 ©->nf_dst); 1265 if (status) 1266 goto out; 1267 1268 copy->cp_clp = cstate->clp; 1269 memcpy(©->fh, &cstate->current_fh.fh_handle, 1270 sizeof(struct knfsd_fh)); 1271 if (!copy->cp_synchronous) { 1272 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 1273 1274 status = nfserrno(-ENOMEM); 1275 async_copy = kzalloc(sizeof(struct nfsd4_copy), GFP_KERNEL); 1276 if (!async_copy) 1277 goto out; 1278 if (!nfs4_init_cp_state(nn, copy)) { 1279 kfree(async_copy); 1280 goto out; 1281 } 1282 refcount_set(&async_copy->refcount, 1); 1283 memcpy(©->cp_res.cb_stateid, ©->cp_stateid, 1284 sizeof(copy->cp_stateid)); 1285 dup_copy_fields(copy, async_copy); 1286 async_copy->copy_task = kthread_create(nfsd4_do_async_copy, 1287 async_copy, "%s", "copy thread"); 1288 if (IS_ERR(async_copy->copy_task)) 1289 goto out_err; 1290 spin_lock(&async_copy->cp_clp->async_lock); 1291 list_add(&async_copy->copies, 1292 &async_copy->cp_clp->async_copies); 1293 spin_unlock(&async_copy->cp_clp->async_lock); 1294 wake_up_process(async_copy->copy_task); 1295 status = nfs_ok; 1296 } else 1297 status = nfsd4_do_copy(copy, 1); 1298 out: 1299 return status; 1300 out_err: 1301 if (async_copy) 1302 cleanup_async_copy(async_copy); 1303 goto out; 1304 } 1305 1306 struct nfsd4_copy * 1307 find_async_copy(struct nfs4_client *clp, stateid_t *stateid) 1308 { 1309 struct nfsd4_copy *copy; 1310 1311 spin_lock(&clp->async_lock); 1312 list_for_each_entry(copy, &clp->async_copies, copies) { 1313 if (memcmp(©->cp_stateid, stateid, NFS4_STATEID_SIZE)) 1314 continue; 1315 refcount_inc(©->refcount); 1316 spin_unlock(&clp->async_lock); 1317 return copy; 1318 } 1319 spin_unlock(&clp->async_lock); 1320 return NULL; 1321 } 1322 1323 static __be32 1324 nfsd4_offload_cancel(struct svc_rqst *rqstp, 1325 struct nfsd4_compound_state *cstate, 1326 union nfsd4_op_u *u) 1327 { 1328 struct nfsd4_offload_status *os = &u->offload_status; 1329 __be32 status = 0; 1330 struct nfsd4_copy *copy; 1331 struct nfs4_client *clp = cstate->clp; 1332 1333 copy = find_async_copy(clp, &os->stateid); 1334 if (copy) 1335 nfsd4_stop_copy(copy); 1336 else 1337 status = nfserr_bad_stateid; 1338 1339 return status; 1340 } 1341 1342 static __be32 1343 nfsd4_fallocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1344 struct nfsd4_fallocate *fallocate, int flags) 1345 { 1346 __be32 status; 1347 struct nfsd_file *nf; 1348 1349 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 1350 &fallocate->falloc_stateid, 1351 WR_STATE, &nf); 1352 if (status != nfs_ok) { 1353 dprintk("NFSD: nfsd4_fallocate: couldn't process stateid!\n"); 1354 return status; 1355 } 1356 1357 status = nfsd4_vfs_fallocate(rqstp, &cstate->current_fh, nf->nf_file, 1358 fallocate->falloc_offset, 1359 fallocate->falloc_length, 1360 flags); 1361 nfsd_file_put(nf); 1362 return status; 1363 } 1364 static __be32 1365 nfsd4_offload_status(struct svc_rqst *rqstp, 1366 struct nfsd4_compound_state *cstate, 1367 union nfsd4_op_u *u) 1368 { 1369 struct nfsd4_offload_status *os = &u->offload_status; 1370 __be32 status = 0; 1371 struct nfsd4_copy *copy; 1372 struct nfs4_client *clp = cstate->clp; 1373 1374 copy = find_async_copy(clp, &os->stateid); 1375 if (copy) { 1376 os->count = copy->cp_res.wr_bytes_written; 1377 nfs4_put_copy(copy); 1378 } else 1379 status = nfserr_bad_stateid; 1380 1381 return status; 1382 } 1383 1384 static __be32 1385 nfsd4_allocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1386 union nfsd4_op_u *u) 1387 { 1388 return nfsd4_fallocate(rqstp, cstate, &u->allocate, 0); 1389 } 1390 1391 static __be32 1392 nfsd4_deallocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1393 union nfsd4_op_u *u) 1394 { 1395 return nfsd4_fallocate(rqstp, cstate, &u->deallocate, 1396 FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE); 1397 } 1398 1399 static __be32 1400 nfsd4_seek(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1401 union nfsd4_op_u *u) 1402 { 1403 struct nfsd4_seek *seek = &u->seek; 1404 int whence; 1405 __be32 status; 1406 struct nfsd_file *nf; 1407 1408 status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh, 1409 &seek->seek_stateid, 1410 RD_STATE, &nf); 1411 if (status) { 1412 dprintk("NFSD: nfsd4_seek: couldn't process stateid!\n"); 1413 return status; 1414 } 1415 1416 switch (seek->seek_whence) { 1417 case NFS4_CONTENT_DATA: 1418 whence = SEEK_DATA; 1419 break; 1420 case NFS4_CONTENT_HOLE: 1421 whence = SEEK_HOLE; 1422 break; 1423 default: 1424 status = nfserr_union_notsupp; 1425 goto out; 1426 } 1427 1428 /* 1429 * Note: This call does change file->f_pos, but nothing in NFSD 1430 * should ever file->f_pos. 1431 */ 1432 seek->seek_pos = vfs_llseek(nf->nf_file, seek->seek_offset, whence); 1433 if (seek->seek_pos < 0) 1434 status = nfserrno(seek->seek_pos); 1435 else if (seek->seek_pos >= i_size_read(file_inode(nf->nf_file))) 1436 seek->seek_eof = true; 1437 1438 out: 1439 nfsd_file_put(nf); 1440 return status; 1441 } 1442 1443 /* This routine never returns NFS_OK! If there are no other errors, it 1444 * will return NFSERR_SAME or NFSERR_NOT_SAME depending on whether the 1445 * attributes matched. VERIFY is implemented by mapping NFSERR_SAME 1446 * to NFS_OK after the call; NVERIFY by mapping NFSERR_NOT_SAME to NFS_OK. 1447 */ 1448 static __be32 1449 _nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1450 struct nfsd4_verify *verify) 1451 { 1452 __be32 *buf, *p; 1453 int count; 1454 __be32 status; 1455 1456 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP); 1457 if (status) 1458 return status; 1459 1460 status = check_attr_support(rqstp, cstate, verify->ve_bmval, NULL); 1461 if (status) 1462 return status; 1463 1464 if ((verify->ve_bmval[0] & FATTR4_WORD0_RDATTR_ERROR) 1465 || (verify->ve_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)) 1466 return nfserr_inval; 1467 if (verify->ve_attrlen & 3) 1468 return nfserr_inval; 1469 1470 /* count in words: 1471 * bitmap_len(1) + bitmap(2) + attr_len(1) = 4 1472 */ 1473 count = 4 + (verify->ve_attrlen >> 2); 1474 buf = kmalloc(count << 2, GFP_KERNEL); 1475 if (!buf) 1476 return nfserr_jukebox; 1477 1478 p = buf; 1479 status = nfsd4_encode_fattr_to_buf(&p, count, &cstate->current_fh, 1480 cstate->current_fh.fh_export, 1481 cstate->current_fh.fh_dentry, 1482 verify->ve_bmval, 1483 rqstp, 0); 1484 /* 1485 * If nfsd4_encode_fattr() ran out of space, assume that's because 1486 * the attributes are longer (hence different) than those given: 1487 */ 1488 if (status == nfserr_resource) 1489 status = nfserr_not_same; 1490 if (status) 1491 goto out_kfree; 1492 1493 /* skip bitmap */ 1494 p = buf + 1 + ntohl(buf[0]); 1495 status = nfserr_not_same; 1496 if (ntohl(*p++) != verify->ve_attrlen) 1497 goto out_kfree; 1498 if (!memcmp(p, verify->ve_attrval, verify->ve_attrlen)) 1499 status = nfserr_same; 1500 1501 out_kfree: 1502 kfree(buf); 1503 return status; 1504 } 1505 1506 static __be32 1507 nfsd4_nverify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1508 union nfsd4_op_u *u) 1509 { 1510 __be32 status; 1511 1512 status = _nfsd4_verify(rqstp, cstate, &u->verify); 1513 return status == nfserr_not_same ? nfs_ok : status; 1514 } 1515 1516 static __be32 1517 nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, 1518 union nfsd4_op_u *u) 1519 { 1520 __be32 status; 1521 1522 status = _nfsd4_verify(rqstp, cstate, &u->nverify); 1523 return status == nfserr_same ? nfs_ok : status; 1524 } 1525 1526 #ifdef CONFIG_NFSD_PNFS 1527 static const struct nfsd4_layout_ops * 1528 nfsd4_layout_verify(struct svc_export *exp, unsigned int layout_type) 1529 { 1530 if (!exp->ex_layout_types) { 1531 dprintk("%s: export does not support pNFS\n", __func__); 1532 return NULL; 1533 } 1534 1535 if (layout_type >= LAYOUT_TYPE_MAX || 1536 !(exp->ex_layout_types & (1 << layout_type))) { 1537 dprintk("%s: layout type %d not supported\n", 1538 __func__, layout_type); 1539 return NULL; 1540 } 1541 1542 return nfsd4_layout_ops[layout_type]; 1543 } 1544 1545 static __be32 1546 nfsd4_getdeviceinfo(struct svc_rqst *rqstp, 1547 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u) 1548 { 1549 struct nfsd4_getdeviceinfo *gdp = &u->getdeviceinfo; 1550 const struct nfsd4_layout_ops *ops; 1551 struct nfsd4_deviceid_map *map; 1552 struct svc_export *exp; 1553 __be32 nfserr; 1554 1555 dprintk("%s: layout_type %u dev_id [0x%llx:0x%x] maxcnt %u\n", 1556 __func__, 1557 gdp->gd_layout_type, 1558 gdp->gd_devid.fsid_idx, gdp->gd_devid.generation, 1559 gdp->gd_maxcount); 1560 1561 map = nfsd4_find_devid_map(gdp->gd_devid.fsid_idx); 1562 if (!map) { 1563 dprintk("%s: couldn't find device ID to export mapping!\n", 1564 __func__); 1565 return nfserr_noent; 1566 } 1567 1568 exp = rqst_exp_find(rqstp, map->fsid_type, map->fsid); 1569 if (IS_ERR(exp)) { 1570 dprintk("%s: could not find device id\n", __func__); 1571 return nfserr_noent; 1572 } 1573 1574 nfserr = nfserr_layoutunavailable; 1575 ops = nfsd4_layout_verify(exp, gdp->gd_layout_type); 1576 if (!ops) 1577 goto out; 1578 1579 nfserr = nfs_ok; 1580 if (gdp->gd_maxcount != 0) { 1581 nfserr = ops->proc_getdeviceinfo(exp->ex_path.mnt->mnt_sb, 1582 rqstp, cstate->session->se_client, gdp); 1583 } 1584 1585 gdp->gd_notify_types &= ops->notify_types; 1586 out: 1587 exp_put(exp); 1588 return nfserr; 1589 } 1590 1591 static void 1592 nfsd4_getdeviceinfo_release(union nfsd4_op_u *u) 1593 { 1594 kfree(u->getdeviceinfo.gd_device); 1595 } 1596 1597 static __be32 1598 nfsd4_layoutget(struct svc_rqst *rqstp, 1599 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u) 1600 { 1601 struct nfsd4_layoutget *lgp = &u->layoutget; 1602 struct svc_fh *current_fh = &cstate->current_fh; 1603 const struct nfsd4_layout_ops *ops; 1604 struct nfs4_layout_stateid *ls; 1605 __be32 nfserr; 1606 int accmode = NFSD_MAY_READ_IF_EXEC; 1607 1608 switch (lgp->lg_seg.iomode) { 1609 case IOMODE_READ: 1610 accmode |= NFSD_MAY_READ; 1611 break; 1612 case IOMODE_RW: 1613 accmode |= NFSD_MAY_READ | NFSD_MAY_WRITE; 1614 break; 1615 default: 1616 dprintk("%s: invalid iomode %d\n", 1617 __func__, lgp->lg_seg.iomode); 1618 nfserr = nfserr_badiomode; 1619 goto out; 1620 } 1621 1622 nfserr = fh_verify(rqstp, current_fh, 0, accmode); 1623 if (nfserr) 1624 goto out; 1625 1626 nfserr = nfserr_layoutunavailable; 1627 ops = nfsd4_layout_verify(current_fh->fh_export, lgp->lg_layout_type); 1628 if (!ops) 1629 goto out; 1630 1631 /* 1632 * Verify minlength and range as per RFC5661: 1633 * o If loga_length is less than loga_minlength, 1634 * the metadata server MUST return NFS4ERR_INVAL. 1635 * o If the sum of loga_offset and loga_minlength exceeds 1636 * NFS4_UINT64_MAX, and loga_minlength is not 1637 * NFS4_UINT64_MAX, the error NFS4ERR_INVAL MUST result. 1638 * o If the sum of loga_offset and loga_length exceeds 1639 * NFS4_UINT64_MAX, and loga_length is not NFS4_UINT64_MAX, 1640 * the error NFS4ERR_INVAL MUST result. 1641 */ 1642 nfserr = nfserr_inval; 1643 if (lgp->lg_seg.length < lgp->lg_minlength || 1644 (lgp->lg_minlength != NFS4_MAX_UINT64 && 1645 lgp->lg_minlength > NFS4_MAX_UINT64 - lgp->lg_seg.offset) || 1646 (lgp->lg_seg.length != NFS4_MAX_UINT64 && 1647 lgp->lg_seg.length > NFS4_MAX_UINT64 - lgp->lg_seg.offset)) 1648 goto out; 1649 if (lgp->lg_seg.length == 0) 1650 goto out; 1651 1652 nfserr = nfsd4_preprocess_layout_stateid(rqstp, cstate, &lgp->lg_sid, 1653 true, lgp->lg_layout_type, &ls); 1654 if (nfserr) { 1655 trace_nfsd_layout_get_lookup_fail(&lgp->lg_sid); 1656 goto out; 1657 } 1658 1659 nfserr = nfserr_recallconflict; 1660 if (atomic_read(&ls->ls_stid.sc_file->fi_lo_recalls)) 1661 goto out_put_stid; 1662 1663 nfserr = ops->proc_layoutget(d_inode(current_fh->fh_dentry), 1664 current_fh, lgp); 1665 if (nfserr) 1666 goto out_put_stid; 1667 1668 nfserr = nfsd4_insert_layout(lgp, ls); 1669 1670 out_put_stid: 1671 mutex_unlock(&ls->ls_mutex); 1672 nfs4_put_stid(&ls->ls_stid); 1673 out: 1674 return nfserr; 1675 } 1676 1677 static void 1678 nfsd4_layoutget_release(union nfsd4_op_u *u) 1679 { 1680 kfree(u->layoutget.lg_content); 1681 } 1682 1683 static __be32 1684 nfsd4_layoutcommit(struct svc_rqst *rqstp, 1685 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u) 1686 { 1687 struct nfsd4_layoutcommit *lcp = &u->layoutcommit; 1688 const struct nfsd4_layout_seg *seg = &lcp->lc_seg; 1689 struct svc_fh *current_fh = &cstate->current_fh; 1690 const struct nfsd4_layout_ops *ops; 1691 loff_t new_size = lcp->lc_last_wr + 1; 1692 struct inode *inode; 1693 struct nfs4_layout_stateid *ls; 1694 __be32 nfserr; 1695 1696 nfserr = fh_verify(rqstp, current_fh, 0, NFSD_MAY_WRITE); 1697 if (nfserr) 1698 goto out; 1699 1700 nfserr = nfserr_layoutunavailable; 1701 ops = nfsd4_layout_verify(current_fh->fh_export, lcp->lc_layout_type); 1702 if (!ops) 1703 goto out; 1704 inode = d_inode(current_fh->fh_dentry); 1705 1706 nfserr = nfserr_inval; 1707 if (new_size <= seg->offset) { 1708 dprintk("pnfsd: last write before layout segment\n"); 1709 goto out; 1710 } 1711 if (new_size > seg->offset + seg->length) { 1712 dprintk("pnfsd: last write beyond layout segment\n"); 1713 goto out; 1714 } 1715 if (!lcp->lc_newoffset && new_size > i_size_read(inode)) { 1716 dprintk("pnfsd: layoutcommit beyond EOF\n"); 1717 goto out; 1718 } 1719 1720 nfserr = nfsd4_preprocess_layout_stateid(rqstp, cstate, &lcp->lc_sid, 1721 false, lcp->lc_layout_type, 1722 &ls); 1723 if (nfserr) { 1724 trace_nfsd_layout_commit_lookup_fail(&lcp->lc_sid); 1725 /* fixup error code as per RFC5661 */ 1726 if (nfserr == nfserr_bad_stateid) 1727 nfserr = nfserr_badlayout; 1728 goto out; 1729 } 1730 1731 /* LAYOUTCOMMIT does not require any serialization */ 1732 mutex_unlock(&ls->ls_mutex); 1733 1734 if (new_size > i_size_read(inode)) { 1735 lcp->lc_size_chg = 1; 1736 lcp->lc_newsize = new_size; 1737 } else { 1738 lcp->lc_size_chg = 0; 1739 } 1740 1741 nfserr = ops->proc_layoutcommit(inode, lcp); 1742 nfs4_put_stid(&ls->ls_stid); 1743 out: 1744 return nfserr; 1745 } 1746 1747 static __be32 1748 nfsd4_layoutreturn(struct svc_rqst *rqstp, 1749 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u) 1750 { 1751 struct nfsd4_layoutreturn *lrp = &u->layoutreturn; 1752 struct svc_fh *current_fh = &cstate->current_fh; 1753 __be32 nfserr; 1754 1755 nfserr = fh_verify(rqstp, current_fh, 0, NFSD_MAY_NOP); 1756 if (nfserr) 1757 goto out; 1758 1759 nfserr = nfserr_layoutunavailable; 1760 if (!nfsd4_layout_verify(current_fh->fh_export, lrp->lr_layout_type)) 1761 goto out; 1762 1763 switch (lrp->lr_seg.iomode) { 1764 case IOMODE_READ: 1765 case IOMODE_RW: 1766 case IOMODE_ANY: 1767 break; 1768 default: 1769 dprintk("%s: invalid iomode %d\n", __func__, 1770 lrp->lr_seg.iomode); 1771 nfserr = nfserr_inval; 1772 goto out; 1773 } 1774 1775 switch (lrp->lr_return_type) { 1776 case RETURN_FILE: 1777 nfserr = nfsd4_return_file_layouts(rqstp, cstate, lrp); 1778 break; 1779 case RETURN_FSID: 1780 case RETURN_ALL: 1781 nfserr = nfsd4_return_client_layouts(rqstp, cstate, lrp); 1782 break; 1783 default: 1784 dprintk("%s: invalid return_type %d\n", __func__, 1785 lrp->lr_return_type); 1786 nfserr = nfserr_inval; 1787 break; 1788 } 1789 out: 1790 return nfserr; 1791 } 1792 #endif /* CONFIG_NFSD_PNFS */ 1793 1794 /* 1795 * NULL call. 1796 */ 1797 static __be32 1798 nfsd4_proc_null(struct svc_rqst *rqstp) 1799 { 1800 return nfs_ok; 1801 } 1802 1803 static inline void nfsd4_increment_op_stats(u32 opnum) 1804 { 1805 if (opnum >= FIRST_NFS4_OP && opnum <= LAST_NFS4_OP) 1806 nfsdstats.nfs4_opcount[opnum]++; 1807 } 1808 1809 static const struct nfsd4_operation nfsd4_ops[]; 1810 1811 static const char *nfsd4_op_name(unsigned opnum); 1812 1813 /* 1814 * Enforce NFSv4.1 COMPOUND ordering rules: 1815 * 1816 * Also note, enforced elsewhere: 1817 * - SEQUENCE other than as first op results in 1818 * NFS4ERR_SEQUENCE_POS. (Enforced in nfsd4_sequence().) 1819 * - BIND_CONN_TO_SESSION must be the only op in its compound. 1820 * (Enforced in nfsd4_bind_conn_to_session().) 1821 * - DESTROY_SESSION must be the final operation in a compound, if 1822 * sessionid's in SEQUENCE and DESTROY_SESSION are the same. 1823 * (Enforced in nfsd4_destroy_session().) 1824 */ 1825 static __be32 nfs41_check_op_ordering(struct nfsd4_compoundargs *args) 1826 { 1827 struct nfsd4_op *first_op = &args->ops[0]; 1828 1829 /* These ordering requirements don't apply to NFSv4.0: */ 1830 if (args->minorversion == 0) 1831 return nfs_ok; 1832 /* This is weird, but OK, not our problem: */ 1833 if (args->opcnt == 0) 1834 return nfs_ok; 1835 if (first_op->status == nfserr_op_illegal) 1836 return nfs_ok; 1837 if (!(nfsd4_ops[first_op->opnum].op_flags & ALLOWED_AS_FIRST_OP)) 1838 return nfserr_op_not_in_session; 1839 if (first_op->opnum == OP_SEQUENCE) 1840 return nfs_ok; 1841 /* 1842 * So first_op is something allowed outside a session, like 1843 * EXCHANGE_ID; but then it has to be the only op in the 1844 * compound: 1845 */ 1846 if (args->opcnt != 1) 1847 return nfserr_not_only_op; 1848 return nfs_ok; 1849 } 1850 1851 const struct nfsd4_operation *OPDESC(struct nfsd4_op *op) 1852 { 1853 return &nfsd4_ops[op->opnum]; 1854 } 1855 1856 bool nfsd4_cache_this_op(struct nfsd4_op *op) 1857 { 1858 if (op->opnum == OP_ILLEGAL) 1859 return false; 1860 return OPDESC(op)->op_flags & OP_CACHEME; 1861 } 1862 1863 static bool need_wrongsec_check(struct svc_rqst *rqstp) 1864 { 1865 struct nfsd4_compoundres *resp = rqstp->rq_resp; 1866 struct nfsd4_compoundargs *argp = rqstp->rq_argp; 1867 struct nfsd4_op *this = &argp->ops[resp->opcnt - 1]; 1868 struct nfsd4_op *next = &argp->ops[resp->opcnt]; 1869 const struct nfsd4_operation *thisd = OPDESC(this); 1870 const struct nfsd4_operation *nextd; 1871 1872 /* 1873 * Most ops check wronsec on our own; only the putfh-like ops 1874 * have special rules. 1875 */ 1876 if (!(thisd->op_flags & OP_IS_PUTFH_LIKE)) 1877 return false; 1878 /* 1879 * rfc 5661 2.6.3.1.1.6: don't bother erroring out a 1880 * put-filehandle operation if we're not going to use the 1881 * result: 1882 */ 1883 if (argp->opcnt == resp->opcnt) 1884 return false; 1885 if (next->opnum == OP_ILLEGAL) 1886 return false; 1887 nextd = OPDESC(next); 1888 /* 1889 * Rest of 2.6.3.1.1: certain operations will return WRONGSEC 1890 * errors themselves as necessary; others should check for them 1891 * now: 1892 */ 1893 return !(nextd->op_flags & OP_HANDLES_WRONGSEC); 1894 } 1895 1896 static void svcxdr_init_encode(struct svc_rqst *rqstp, 1897 struct nfsd4_compoundres *resp) 1898 { 1899 struct xdr_stream *xdr = &resp->xdr; 1900 struct xdr_buf *buf = &rqstp->rq_res; 1901 struct kvec *head = buf->head; 1902 1903 xdr->buf = buf; 1904 xdr->iov = head; 1905 xdr->p = head->iov_base + head->iov_len; 1906 xdr->end = head->iov_base + PAGE_SIZE - rqstp->rq_auth_slack; 1907 /* Tail and page_len should be zero at this point: */ 1908 buf->len = buf->head[0].iov_len; 1909 xdr->scratch.iov_len = 0; 1910 xdr->page_ptr = buf->pages - 1; 1911 buf->buflen = PAGE_SIZE * (1 + rqstp->rq_page_end - buf->pages) 1912 - rqstp->rq_auth_slack; 1913 } 1914 1915 /* 1916 * COMPOUND call. 1917 */ 1918 static __be32 1919 nfsd4_proc_compound(struct svc_rqst *rqstp) 1920 { 1921 struct nfsd4_compoundargs *args = rqstp->rq_argp; 1922 struct nfsd4_compoundres *resp = rqstp->rq_resp; 1923 struct nfsd4_op *op; 1924 struct nfsd4_compound_state *cstate = &resp->cstate; 1925 struct svc_fh *current_fh = &cstate->current_fh; 1926 struct svc_fh *save_fh = &cstate->save_fh; 1927 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 1928 __be32 status; 1929 1930 svcxdr_init_encode(rqstp, resp); 1931 resp->tagp = resp->xdr.p; 1932 /* reserve space for: taglen, tag, and opcnt */ 1933 xdr_reserve_space(&resp->xdr, 8 + args->taglen); 1934 resp->taglen = args->taglen; 1935 resp->tag = args->tag; 1936 resp->rqstp = rqstp; 1937 cstate->minorversion = args->minorversion; 1938 fh_init(current_fh, NFS4_FHSIZE); 1939 fh_init(save_fh, NFS4_FHSIZE); 1940 /* 1941 * Don't use the deferral mechanism for NFSv4; compounds make it 1942 * too hard to avoid non-idempotency problems. 1943 */ 1944 clear_bit(RQ_USEDEFERRAL, &rqstp->rq_flags); 1945 1946 /* 1947 * According to RFC3010, this takes precedence over all other errors. 1948 */ 1949 status = nfserr_minor_vers_mismatch; 1950 if (nfsd_minorversion(nn, args->minorversion, NFSD_TEST) <= 0) 1951 goto out; 1952 status = nfserr_resource; 1953 if (args->opcnt > NFSD_MAX_OPS_PER_COMPOUND) 1954 goto out; 1955 1956 status = nfs41_check_op_ordering(args); 1957 if (status) { 1958 op = &args->ops[0]; 1959 op->status = status; 1960 resp->opcnt = 1; 1961 goto encode_op; 1962 } 1963 1964 trace_nfsd_compound(rqstp, args->opcnt); 1965 while (!status && resp->opcnt < args->opcnt) { 1966 op = &args->ops[resp->opcnt++]; 1967 1968 /* 1969 * The XDR decode routines may have pre-set op->status; 1970 * for example, if there is a miscellaneous XDR error 1971 * it will be set to nfserr_bad_xdr. 1972 */ 1973 if (op->status) { 1974 if (op->opnum == OP_OPEN) 1975 op->status = nfsd4_open_omfg(rqstp, cstate, op); 1976 goto encode_op; 1977 } 1978 1979 if (!current_fh->fh_dentry) { 1980 if (!(op->opdesc->op_flags & ALLOWED_WITHOUT_FH)) { 1981 op->status = nfserr_nofilehandle; 1982 goto encode_op; 1983 } 1984 } else if (current_fh->fh_export->ex_fslocs.migrated && 1985 !(op->opdesc->op_flags & ALLOWED_ON_ABSENT_FS)) { 1986 op->status = nfserr_moved; 1987 goto encode_op; 1988 } 1989 1990 fh_clear_wcc(current_fh); 1991 1992 /* If op is non-idempotent */ 1993 if (op->opdesc->op_flags & OP_MODIFIES_SOMETHING) { 1994 /* 1995 * Don't execute this op if we couldn't encode a 1996 * succesful reply: 1997 */ 1998 u32 plen = op->opdesc->op_rsize_bop(rqstp, op); 1999 /* 2000 * Plus if there's another operation, make sure 2001 * we'll have space to at least encode an error: 2002 */ 2003 if (resp->opcnt < args->opcnt) 2004 plen += COMPOUND_ERR_SLACK_SPACE; 2005 op->status = nfsd4_check_resp_size(resp, plen); 2006 } 2007 2008 if (op->status) 2009 goto encode_op; 2010 2011 if (op->opdesc->op_get_currentstateid) 2012 op->opdesc->op_get_currentstateid(cstate, &op->u); 2013 op->status = op->opdesc->op_func(rqstp, cstate, &op->u); 2014 2015 /* Only from SEQUENCE */ 2016 if (cstate->status == nfserr_replay_cache) { 2017 dprintk("%s NFS4.1 replay from cache\n", __func__); 2018 status = op->status; 2019 goto out; 2020 } 2021 if (!op->status) { 2022 if (op->opdesc->op_set_currentstateid) 2023 op->opdesc->op_set_currentstateid(cstate, &op->u); 2024 2025 if (op->opdesc->op_flags & OP_CLEAR_STATEID) 2026 clear_current_stateid(cstate); 2027 2028 if (need_wrongsec_check(rqstp)) 2029 op->status = check_nfsd_access(current_fh->fh_export, rqstp); 2030 } 2031 encode_op: 2032 if (op->status == nfserr_replay_me) { 2033 op->replay = &cstate->replay_owner->so_replay; 2034 nfsd4_encode_replay(&resp->xdr, op); 2035 status = op->status = op->replay->rp_status; 2036 } else { 2037 nfsd4_encode_operation(resp, op); 2038 status = op->status; 2039 } 2040 2041 trace_nfsd_compound_status(args->opcnt, resp->opcnt, status, 2042 nfsd4_op_name(op->opnum)); 2043 2044 nfsd4_cstate_clear_replay(cstate); 2045 nfsd4_increment_op_stats(op->opnum); 2046 } 2047 2048 cstate->status = status; 2049 fh_put(current_fh); 2050 fh_put(save_fh); 2051 BUG_ON(cstate->replay_owner); 2052 out: 2053 /* Reset deferral mechanism for RPC deferrals */ 2054 set_bit(RQ_USEDEFERRAL, &rqstp->rq_flags); 2055 dprintk("nfsv4 compound returned %d\n", ntohl(status)); 2056 return status; 2057 } 2058 2059 #define op_encode_hdr_size (2) 2060 #define op_encode_stateid_maxsz (XDR_QUADLEN(NFS4_STATEID_SIZE)) 2061 #define op_encode_verifier_maxsz (XDR_QUADLEN(NFS4_VERIFIER_SIZE)) 2062 #define op_encode_change_info_maxsz (5) 2063 #define nfs4_fattr_bitmap_maxsz (4) 2064 2065 /* We'll fall back on returning no lockowner if run out of space: */ 2066 #define op_encode_lockowner_maxsz (0) 2067 #define op_encode_lock_denied_maxsz (8 + op_encode_lockowner_maxsz) 2068 2069 #define nfs4_owner_maxsz (1 + XDR_QUADLEN(IDMAP_NAMESZ)) 2070 2071 #define op_encode_ace_maxsz (3 + nfs4_owner_maxsz) 2072 #define op_encode_delegation_maxsz (1 + op_encode_stateid_maxsz + 1 + \ 2073 op_encode_ace_maxsz) 2074 2075 #define op_encode_channel_attrs_maxsz (6 + 1 + 1) 2076 2077 static inline u32 nfsd4_only_status_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2078 { 2079 return (op_encode_hdr_size) * sizeof(__be32); 2080 } 2081 2082 static inline u32 nfsd4_status_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2083 { 2084 return (op_encode_hdr_size + op_encode_stateid_maxsz)* sizeof(__be32); 2085 } 2086 2087 static inline u32 nfsd4_access_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2088 { 2089 /* ac_supported, ac_resp_access */ 2090 return (op_encode_hdr_size + 2)* sizeof(__be32); 2091 } 2092 2093 static inline u32 nfsd4_commit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2094 { 2095 return (op_encode_hdr_size + op_encode_verifier_maxsz) * sizeof(__be32); 2096 } 2097 2098 static inline u32 nfsd4_create_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2099 { 2100 return (op_encode_hdr_size + op_encode_change_info_maxsz 2101 + nfs4_fattr_bitmap_maxsz) * sizeof(__be32); 2102 } 2103 2104 /* 2105 * Note since this is an idempotent operation we won't insist on failing 2106 * the op prematurely if the estimate is too large. We may turn off splice 2107 * reads unnecessarily. 2108 */ 2109 static inline u32 nfsd4_getattr_rsize(struct svc_rqst *rqstp, 2110 struct nfsd4_op *op) 2111 { 2112 u32 *bmap = op->u.getattr.ga_bmval; 2113 u32 bmap0 = bmap[0], bmap1 = bmap[1], bmap2 = bmap[2]; 2114 u32 ret = 0; 2115 2116 if (bmap0 & FATTR4_WORD0_ACL) 2117 return svc_max_payload(rqstp); 2118 if (bmap0 & FATTR4_WORD0_FS_LOCATIONS) 2119 return svc_max_payload(rqstp); 2120 2121 if (bmap1 & FATTR4_WORD1_OWNER) { 2122 ret += IDMAP_NAMESZ + 4; 2123 bmap1 &= ~FATTR4_WORD1_OWNER; 2124 } 2125 if (bmap1 & FATTR4_WORD1_OWNER_GROUP) { 2126 ret += IDMAP_NAMESZ + 4; 2127 bmap1 &= ~FATTR4_WORD1_OWNER_GROUP; 2128 } 2129 if (bmap0 & FATTR4_WORD0_FILEHANDLE) { 2130 ret += NFS4_FHSIZE + 4; 2131 bmap0 &= ~FATTR4_WORD0_FILEHANDLE; 2132 } 2133 if (bmap2 & FATTR4_WORD2_SECURITY_LABEL) { 2134 ret += NFS4_MAXLABELLEN + 12; 2135 bmap2 &= ~FATTR4_WORD2_SECURITY_LABEL; 2136 } 2137 /* 2138 * Largest of remaining attributes are 16 bytes (e.g., 2139 * supported_attributes) 2140 */ 2141 ret += 16 * (hweight32(bmap0) + hweight32(bmap1) + hweight32(bmap2)); 2142 /* bitmask, length */ 2143 ret += 20; 2144 return ret; 2145 } 2146 2147 static inline u32 nfsd4_getfh_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2148 { 2149 return (op_encode_hdr_size + 1) * sizeof(__be32) + NFS4_FHSIZE; 2150 } 2151 2152 static inline u32 nfsd4_link_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2153 { 2154 return (op_encode_hdr_size + op_encode_change_info_maxsz) 2155 * sizeof(__be32); 2156 } 2157 2158 static inline u32 nfsd4_lock_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2159 { 2160 return (op_encode_hdr_size + op_encode_lock_denied_maxsz) 2161 * sizeof(__be32); 2162 } 2163 2164 static inline u32 nfsd4_open_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2165 { 2166 return (op_encode_hdr_size + op_encode_stateid_maxsz 2167 + op_encode_change_info_maxsz + 1 2168 + nfs4_fattr_bitmap_maxsz 2169 + op_encode_delegation_maxsz) * sizeof(__be32); 2170 } 2171 2172 static inline u32 nfsd4_read_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2173 { 2174 u32 maxcount = 0, rlen = 0; 2175 2176 maxcount = svc_max_payload(rqstp); 2177 rlen = min(op->u.read.rd_length, maxcount); 2178 2179 return (op_encode_hdr_size + 2 + XDR_QUADLEN(rlen)) * sizeof(__be32); 2180 } 2181 2182 static inline u32 nfsd4_readdir_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2183 { 2184 u32 maxcount = 0, rlen = 0; 2185 2186 maxcount = svc_max_payload(rqstp); 2187 rlen = min(op->u.readdir.rd_maxcount, maxcount); 2188 2189 return (op_encode_hdr_size + op_encode_verifier_maxsz + 2190 XDR_QUADLEN(rlen)) * sizeof(__be32); 2191 } 2192 2193 static inline u32 nfsd4_readlink_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2194 { 2195 return (op_encode_hdr_size + 1) * sizeof(__be32) + PAGE_SIZE; 2196 } 2197 2198 static inline u32 nfsd4_remove_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2199 { 2200 return (op_encode_hdr_size + op_encode_change_info_maxsz) 2201 * sizeof(__be32); 2202 } 2203 2204 static inline u32 nfsd4_rename_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2205 { 2206 return (op_encode_hdr_size + op_encode_change_info_maxsz 2207 + op_encode_change_info_maxsz) * sizeof(__be32); 2208 } 2209 2210 static inline u32 nfsd4_sequence_rsize(struct svc_rqst *rqstp, 2211 struct nfsd4_op *op) 2212 { 2213 return (op_encode_hdr_size 2214 + XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + 5) * sizeof(__be32); 2215 } 2216 2217 static inline u32 nfsd4_test_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2218 { 2219 return (op_encode_hdr_size + 1 + op->u.test_stateid.ts_num_ids) 2220 * sizeof(__be32); 2221 } 2222 2223 static inline u32 nfsd4_setattr_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2224 { 2225 return (op_encode_hdr_size + nfs4_fattr_bitmap_maxsz) * sizeof(__be32); 2226 } 2227 2228 static inline u32 nfsd4_secinfo_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2229 { 2230 return (op_encode_hdr_size + RPC_AUTH_MAXFLAVOR * 2231 (4 + XDR_QUADLEN(GSS_OID_MAX_LEN))) * sizeof(__be32); 2232 } 2233 2234 static inline u32 nfsd4_setclientid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2235 { 2236 return (op_encode_hdr_size + 2 + XDR_QUADLEN(NFS4_VERIFIER_SIZE)) * 2237 sizeof(__be32); 2238 } 2239 2240 static inline u32 nfsd4_write_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2241 { 2242 return (op_encode_hdr_size + 2 + op_encode_verifier_maxsz) * sizeof(__be32); 2243 } 2244 2245 static inline u32 nfsd4_exchange_id_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2246 { 2247 return (op_encode_hdr_size + 2 + 1 + /* eir_clientid, eir_sequenceid */\ 2248 1 + 1 + /* eir_flags, spr_how */\ 2249 4 + /* spo_must_enforce & _allow with bitmap */\ 2250 2 + /*eir_server_owner.so_minor_id */\ 2251 /* eir_server_owner.so_major_id<> */\ 2252 XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\ 2253 /* eir_server_scope<> */\ 2254 XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\ 2255 1 + /* eir_server_impl_id array length */\ 2256 0 /* ignored eir_server_impl_id contents */) * sizeof(__be32); 2257 } 2258 2259 static inline u32 nfsd4_bind_conn_to_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2260 { 2261 return (op_encode_hdr_size + \ 2262 XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* bctsr_sessid */\ 2263 2 /* bctsr_dir, use_conn_in_rdma_mode */) * sizeof(__be32); 2264 } 2265 2266 static inline u32 nfsd4_create_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2267 { 2268 return (op_encode_hdr_size + \ 2269 XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* sessionid */\ 2270 2 + /* csr_sequence, csr_flags */\ 2271 op_encode_channel_attrs_maxsz + \ 2272 op_encode_channel_attrs_maxsz) * sizeof(__be32); 2273 } 2274 2275 static inline u32 nfsd4_copy_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2276 { 2277 return (op_encode_hdr_size + 2278 1 /* wr_callback */ + 2279 op_encode_stateid_maxsz /* wr_callback */ + 2280 2 /* wr_count */ + 2281 1 /* wr_committed */ + 2282 op_encode_verifier_maxsz + 2283 1 /* cr_consecutive */ + 2284 1 /* cr_synchronous */) * sizeof(__be32); 2285 } 2286 2287 static inline u32 nfsd4_offload_status_rsize(struct svc_rqst *rqstp, 2288 struct nfsd4_op *op) 2289 { 2290 return (op_encode_hdr_size + 2291 2 /* osr_count */ + 2292 1 /* osr_complete<1> optional 0 for now */) * sizeof(__be32); 2293 } 2294 2295 #ifdef CONFIG_NFSD_PNFS 2296 static inline u32 nfsd4_getdeviceinfo_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2297 { 2298 u32 maxcount = 0, rlen = 0; 2299 2300 maxcount = svc_max_payload(rqstp); 2301 rlen = min(op->u.getdeviceinfo.gd_maxcount, maxcount); 2302 2303 return (op_encode_hdr_size + 2304 1 /* gd_layout_type*/ + 2305 XDR_QUADLEN(rlen) + 2306 2 /* gd_notify_types */) * sizeof(__be32); 2307 } 2308 2309 /* 2310 * At this stage we don't really know what layout driver will handle the request, 2311 * so we need to define an arbitrary upper bound here. 2312 */ 2313 #define MAX_LAYOUT_SIZE 128 2314 static inline u32 nfsd4_layoutget_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2315 { 2316 return (op_encode_hdr_size + 2317 1 /* logr_return_on_close */ + 2318 op_encode_stateid_maxsz + 2319 1 /* nr of layouts */ + 2320 MAX_LAYOUT_SIZE) * sizeof(__be32); 2321 } 2322 2323 static inline u32 nfsd4_layoutcommit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2324 { 2325 return (op_encode_hdr_size + 2326 1 /* locr_newsize */ + 2327 2 /* ns_size */) * sizeof(__be32); 2328 } 2329 2330 static inline u32 nfsd4_layoutreturn_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2331 { 2332 return (op_encode_hdr_size + 2333 1 /* lrs_stateid */ + 2334 op_encode_stateid_maxsz) * sizeof(__be32); 2335 } 2336 #endif /* CONFIG_NFSD_PNFS */ 2337 2338 2339 static inline u32 nfsd4_seek_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op) 2340 { 2341 return (op_encode_hdr_size + 3) * sizeof(__be32); 2342 } 2343 2344 static const struct nfsd4_operation nfsd4_ops[] = { 2345 [OP_ACCESS] = { 2346 .op_func = nfsd4_access, 2347 .op_name = "OP_ACCESS", 2348 .op_rsize_bop = nfsd4_access_rsize, 2349 }, 2350 [OP_CLOSE] = { 2351 .op_func = nfsd4_close, 2352 .op_flags = OP_MODIFIES_SOMETHING, 2353 .op_name = "OP_CLOSE", 2354 .op_rsize_bop = nfsd4_status_stateid_rsize, 2355 .op_get_currentstateid = nfsd4_get_closestateid, 2356 .op_set_currentstateid = nfsd4_set_closestateid, 2357 }, 2358 [OP_COMMIT] = { 2359 .op_func = nfsd4_commit, 2360 .op_flags = OP_MODIFIES_SOMETHING, 2361 .op_name = "OP_COMMIT", 2362 .op_rsize_bop = nfsd4_commit_rsize, 2363 }, 2364 [OP_CREATE] = { 2365 .op_func = nfsd4_create, 2366 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME | OP_CLEAR_STATEID, 2367 .op_name = "OP_CREATE", 2368 .op_rsize_bop = nfsd4_create_rsize, 2369 }, 2370 [OP_DELEGRETURN] = { 2371 .op_func = nfsd4_delegreturn, 2372 .op_flags = OP_MODIFIES_SOMETHING, 2373 .op_name = "OP_DELEGRETURN", 2374 .op_rsize_bop = nfsd4_only_status_rsize, 2375 .op_get_currentstateid = nfsd4_get_delegreturnstateid, 2376 }, 2377 [OP_GETATTR] = { 2378 .op_func = nfsd4_getattr, 2379 .op_flags = ALLOWED_ON_ABSENT_FS, 2380 .op_rsize_bop = nfsd4_getattr_rsize, 2381 .op_name = "OP_GETATTR", 2382 }, 2383 [OP_GETFH] = { 2384 .op_func = nfsd4_getfh, 2385 .op_name = "OP_GETFH", 2386 .op_rsize_bop = nfsd4_getfh_rsize, 2387 }, 2388 [OP_LINK] = { 2389 .op_func = nfsd4_link, 2390 .op_flags = ALLOWED_ON_ABSENT_FS | OP_MODIFIES_SOMETHING 2391 | OP_CACHEME, 2392 .op_name = "OP_LINK", 2393 .op_rsize_bop = nfsd4_link_rsize, 2394 }, 2395 [OP_LOCK] = { 2396 .op_func = nfsd4_lock, 2397 .op_flags = OP_MODIFIES_SOMETHING | 2398 OP_NONTRIVIAL_ERROR_ENCODE, 2399 .op_name = "OP_LOCK", 2400 .op_rsize_bop = nfsd4_lock_rsize, 2401 .op_set_currentstateid = nfsd4_set_lockstateid, 2402 }, 2403 [OP_LOCKT] = { 2404 .op_func = nfsd4_lockt, 2405 .op_flags = OP_NONTRIVIAL_ERROR_ENCODE, 2406 .op_name = "OP_LOCKT", 2407 .op_rsize_bop = nfsd4_lock_rsize, 2408 }, 2409 [OP_LOCKU] = { 2410 .op_func = nfsd4_locku, 2411 .op_flags = OP_MODIFIES_SOMETHING, 2412 .op_name = "OP_LOCKU", 2413 .op_rsize_bop = nfsd4_status_stateid_rsize, 2414 .op_get_currentstateid = nfsd4_get_lockustateid, 2415 }, 2416 [OP_LOOKUP] = { 2417 .op_func = nfsd4_lookup, 2418 .op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID, 2419 .op_name = "OP_LOOKUP", 2420 .op_rsize_bop = nfsd4_only_status_rsize, 2421 }, 2422 [OP_LOOKUPP] = { 2423 .op_func = nfsd4_lookupp, 2424 .op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID, 2425 .op_name = "OP_LOOKUPP", 2426 .op_rsize_bop = nfsd4_only_status_rsize, 2427 }, 2428 [OP_NVERIFY] = { 2429 .op_func = nfsd4_nverify, 2430 .op_name = "OP_NVERIFY", 2431 .op_rsize_bop = nfsd4_only_status_rsize, 2432 }, 2433 [OP_OPEN] = { 2434 .op_func = nfsd4_open, 2435 .op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING, 2436 .op_name = "OP_OPEN", 2437 .op_rsize_bop = nfsd4_open_rsize, 2438 .op_set_currentstateid = nfsd4_set_openstateid, 2439 }, 2440 [OP_OPEN_CONFIRM] = { 2441 .op_func = nfsd4_open_confirm, 2442 .op_flags = OP_MODIFIES_SOMETHING, 2443 .op_name = "OP_OPEN_CONFIRM", 2444 .op_rsize_bop = nfsd4_status_stateid_rsize, 2445 }, 2446 [OP_OPEN_DOWNGRADE] = { 2447 .op_func = nfsd4_open_downgrade, 2448 .op_flags = OP_MODIFIES_SOMETHING, 2449 .op_name = "OP_OPEN_DOWNGRADE", 2450 .op_rsize_bop = nfsd4_status_stateid_rsize, 2451 .op_get_currentstateid = nfsd4_get_opendowngradestateid, 2452 .op_set_currentstateid = nfsd4_set_opendowngradestateid, 2453 }, 2454 [OP_PUTFH] = { 2455 .op_func = nfsd4_putfh, 2456 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2457 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID, 2458 .op_name = "OP_PUTFH", 2459 .op_rsize_bop = nfsd4_only_status_rsize, 2460 }, 2461 [OP_PUTPUBFH] = { 2462 .op_func = nfsd4_putrootfh, 2463 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2464 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID, 2465 .op_name = "OP_PUTPUBFH", 2466 .op_rsize_bop = nfsd4_only_status_rsize, 2467 }, 2468 [OP_PUTROOTFH] = { 2469 .op_func = nfsd4_putrootfh, 2470 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2471 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID, 2472 .op_name = "OP_PUTROOTFH", 2473 .op_rsize_bop = nfsd4_only_status_rsize, 2474 }, 2475 [OP_READ] = { 2476 .op_func = nfsd4_read, 2477 .op_release = nfsd4_read_release, 2478 .op_name = "OP_READ", 2479 .op_rsize_bop = nfsd4_read_rsize, 2480 .op_get_currentstateid = nfsd4_get_readstateid, 2481 }, 2482 [OP_READDIR] = { 2483 .op_func = nfsd4_readdir, 2484 .op_name = "OP_READDIR", 2485 .op_rsize_bop = nfsd4_readdir_rsize, 2486 }, 2487 [OP_READLINK] = { 2488 .op_func = nfsd4_readlink, 2489 .op_name = "OP_READLINK", 2490 .op_rsize_bop = nfsd4_readlink_rsize, 2491 }, 2492 [OP_REMOVE] = { 2493 .op_func = nfsd4_remove, 2494 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME, 2495 .op_name = "OP_REMOVE", 2496 .op_rsize_bop = nfsd4_remove_rsize, 2497 }, 2498 [OP_RENAME] = { 2499 .op_func = nfsd4_rename, 2500 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME, 2501 .op_name = "OP_RENAME", 2502 .op_rsize_bop = nfsd4_rename_rsize, 2503 }, 2504 [OP_RENEW] = { 2505 .op_func = nfsd4_renew, 2506 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2507 | OP_MODIFIES_SOMETHING, 2508 .op_name = "OP_RENEW", 2509 .op_rsize_bop = nfsd4_only_status_rsize, 2510 2511 }, 2512 [OP_RESTOREFH] = { 2513 .op_func = nfsd4_restorefh, 2514 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2515 | OP_IS_PUTFH_LIKE | OP_MODIFIES_SOMETHING, 2516 .op_name = "OP_RESTOREFH", 2517 .op_rsize_bop = nfsd4_only_status_rsize, 2518 }, 2519 [OP_SAVEFH] = { 2520 .op_func = nfsd4_savefh, 2521 .op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING, 2522 .op_name = "OP_SAVEFH", 2523 .op_rsize_bop = nfsd4_only_status_rsize, 2524 }, 2525 [OP_SECINFO] = { 2526 .op_func = nfsd4_secinfo, 2527 .op_release = nfsd4_secinfo_release, 2528 .op_flags = OP_HANDLES_WRONGSEC, 2529 .op_name = "OP_SECINFO", 2530 .op_rsize_bop = nfsd4_secinfo_rsize, 2531 }, 2532 [OP_SETATTR] = { 2533 .op_func = nfsd4_setattr, 2534 .op_name = "OP_SETATTR", 2535 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME 2536 | OP_NONTRIVIAL_ERROR_ENCODE, 2537 .op_rsize_bop = nfsd4_setattr_rsize, 2538 .op_get_currentstateid = nfsd4_get_setattrstateid, 2539 }, 2540 [OP_SETCLIENTID] = { 2541 .op_func = nfsd4_setclientid, 2542 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2543 | OP_MODIFIES_SOMETHING | OP_CACHEME 2544 | OP_NONTRIVIAL_ERROR_ENCODE, 2545 .op_name = "OP_SETCLIENTID", 2546 .op_rsize_bop = nfsd4_setclientid_rsize, 2547 }, 2548 [OP_SETCLIENTID_CONFIRM] = { 2549 .op_func = nfsd4_setclientid_confirm, 2550 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2551 | OP_MODIFIES_SOMETHING | OP_CACHEME, 2552 .op_name = "OP_SETCLIENTID_CONFIRM", 2553 .op_rsize_bop = nfsd4_only_status_rsize, 2554 }, 2555 [OP_VERIFY] = { 2556 .op_func = nfsd4_verify, 2557 .op_name = "OP_VERIFY", 2558 .op_rsize_bop = nfsd4_only_status_rsize, 2559 }, 2560 [OP_WRITE] = { 2561 .op_func = nfsd4_write, 2562 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME, 2563 .op_name = "OP_WRITE", 2564 .op_rsize_bop = nfsd4_write_rsize, 2565 .op_get_currentstateid = nfsd4_get_writestateid, 2566 }, 2567 [OP_RELEASE_LOCKOWNER] = { 2568 .op_func = nfsd4_release_lockowner, 2569 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS 2570 | OP_MODIFIES_SOMETHING, 2571 .op_name = "OP_RELEASE_LOCKOWNER", 2572 .op_rsize_bop = nfsd4_only_status_rsize, 2573 }, 2574 2575 /* NFSv4.1 operations */ 2576 [OP_EXCHANGE_ID] = { 2577 .op_func = nfsd4_exchange_id, 2578 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2579 | OP_MODIFIES_SOMETHING, 2580 .op_name = "OP_EXCHANGE_ID", 2581 .op_rsize_bop = nfsd4_exchange_id_rsize, 2582 }, 2583 [OP_BACKCHANNEL_CTL] = { 2584 .op_func = nfsd4_backchannel_ctl, 2585 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING, 2586 .op_name = "OP_BACKCHANNEL_CTL", 2587 .op_rsize_bop = nfsd4_only_status_rsize, 2588 }, 2589 [OP_BIND_CONN_TO_SESSION] = { 2590 .op_func = nfsd4_bind_conn_to_session, 2591 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2592 | OP_MODIFIES_SOMETHING, 2593 .op_name = "OP_BIND_CONN_TO_SESSION", 2594 .op_rsize_bop = nfsd4_bind_conn_to_session_rsize, 2595 }, 2596 [OP_CREATE_SESSION] = { 2597 .op_func = nfsd4_create_session, 2598 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2599 | OP_MODIFIES_SOMETHING, 2600 .op_name = "OP_CREATE_SESSION", 2601 .op_rsize_bop = nfsd4_create_session_rsize, 2602 }, 2603 [OP_DESTROY_SESSION] = { 2604 .op_func = nfsd4_destroy_session, 2605 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2606 | OP_MODIFIES_SOMETHING, 2607 .op_name = "OP_DESTROY_SESSION", 2608 .op_rsize_bop = nfsd4_only_status_rsize, 2609 }, 2610 [OP_SEQUENCE] = { 2611 .op_func = nfsd4_sequence, 2612 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP, 2613 .op_name = "OP_SEQUENCE", 2614 .op_rsize_bop = nfsd4_sequence_rsize, 2615 }, 2616 [OP_DESTROY_CLIENTID] = { 2617 .op_func = nfsd4_destroy_clientid, 2618 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP 2619 | OP_MODIFIES_SOMETHING, 2620 .op_name = "OP_DESTROY_CLIENTID", 2621 .op_rsize_bop = nfsd4_only_status_rsize, 2622 }, 2623 [OP_RECLAIM_COMPLETE] = { 2624 .op_func = nfsd4_reclaim_complete, 2625 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING, 2626 .op_name = "OP_RECLAIM_COMPLETE", 2627 .op_rsize_bop = nfsd4_only_status_rsize, 2628 }, 2629 [OP_SECINFO_NO_NAME] = { 2630 .op_func = nfsd4_secinfo_no_name, 2631 .op_release = nfsd4_secinfo_no_name_release, 2632 .op_flags = OP_HANDLES_WRONGSEC, 2633 .op_name = "OP_SECINFO_NO_NAME", 2634 .op_rsize_bop = nfsd4_secinfo_rsize, 2635 }, 2636 [OP_TEST_STATEID] = { 2637 .op_func = nfsd4_test_stateid, 2638 .op_flags = ALLOWED_WITHOUT_FH, 2639 .op_name = "OP_TEST_STATEID", 2640 .op_rsize_bop = nfsd4_test_stateid_rsize, 2641 }, 2642 [OP_FREE_STATEID] = { 2643 .op_func = nfsd4_free_stateid, 2644 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING, 2645 .op_name = "OP_FREE_STATEID", 2646 .op_get_currentstateid = nfsd4_get_freestateid, 2647 .op_rsize_bop = nfsd4_only_status_rsize, 2648 }, 2649 #ifdef CONFIG_NFSD_PNFS 2650 [OP_GETDEVICEINFO] = { 2651 .op_func = nfsd4_getdeviceinfo, 2652 .op_release = nfsd4_getdeviceinfo_release, 2653 .op_flags = ALLOWED_WITHOUT_FH, 2654 .op_name = "OP_GETDEVICEINFO", 2655 .op_rsize_bop = nfsd4_getdeviceinfo_rsize, 2656 }, 2657 [OP_LAYOUTGET] = { 2658 .op_func = nfsd4_layoutget, 2659 .op_release = nfsd4_layoutget_release, 2660 .op_flags = OP_MODIFIES_SOMETHING, 2661 .op_name = "OP_LAYOUTGET", 2662 .op_rsize_bop = nfsd4_layoutget_rsize, 2663 }, 2664 [OP_LAYOUTCOMMIT] = { 2665 .op_func = nfsd4_layoutcommit, 2666 .op_flags = OP_MODIFIES_SOMETHING, 2667 .op_name = "OP_LAYOUTCOMMIT", 2668 .op_rsize_bop = nfsd4_layoutcommit_rsize, 2669 }, 2670 [OP_LAYOUTRETURN] = { 2671 .op_func = nfsd4_layoutreturn, 2672 .op_flags = OP_MODIFIES_SOMETHING, 2673 .op_name = "OP_LAYOUTRETURN", 2674 .op_rsize_bop = nfsd4_layoutreturn_rsize, 2675 }, 2676 #endif /* CONFIG_NFSD_PNFS */ 2677 2678 /* NFSv4.2 operations */ 2679 [OP_ALLOCATE] = { 2680 .op_func = nfsd4_allocate, 2681 .op_flags = OP_MODIFIES_SOMETHING, 2682 .op_name = "OP_ALLOCATE", 2683 .op_rsize_bop = nfsd4_only_status_rsize, 2684 }, 2685 [OP_DEALLOCATE] = { 2686 .op_func = nfsd4_deallocate, 2687 .op_flags = OP_MODIFIES_SOMETHING, 2688 .op_name = "OP_DEALLOCATE", 2689 .op_rsize_bop = nfsd4_only_status_rsize, 2690 }, 2691 [OP_CLONE] = { 2692 .op_func = nfsd4_clone, 2693 .op_flags = OP_MODIFIES_SOMETHING, 2694 .op_name = "OP_CLONE", 2695 .op_rsize_bop = nfsd4_only_status_rsize, 2696 }, 2697 [OP_COPY] = { 2698 .op_func = nfsd4_copy, 2699 .op_flags = OP_MODIFIES_SOMETHING, 2700 .op_name = "OP_COPY", 2701 .op_rsize_bop = nfsd4_copy_rsize, 2702 }, 2703 [OP_SEEK] = { 2704 .op_func = nfsd4_seek, 2705 .op_name = "OP_SEEK", 2706 .op_rsize_bop = nfsd4_seek_rsize, 2707 }, 2708 [OP_OFFLOAD_STATUS] = { 2709 .op_func = nfsd4_offload_status, 2710 .op_name = "OP_OFFLOAD_STATUS", 2711 .op_rsize_bop = nfsd4_offload_status_rsize, 2712 }, 2713 [OP_OFFLOAD_CANCEL] = { 2714 .op_func = nfsd4_offload_cancel, 2715 .op_flags = OP_MODIFIES_SOMETHING, 2716 .op_name = "OP_OFFLOAD_CANCEL", 2717 .op_rsize_bop = nfsd4_only_status_rsize, 2718 }, 2719 }; 2720 2721 /** 2722 * nfsd4_spo_must_allow - Determine if the compound op contains an 2723 * operation that is allowed to be sent with machine credentials 2724 * 2725 * @rqstp: a pointer to the struct svc_rqst 2726 * 2727 * Checks to see if the compound contains a spo_must_allow op 2728 * and confirms that it was sent with the proper machine creds. 2729 */ 2730 2731 bool nfsd4_spo_must_allow(struct svc_rqst *rqstp) 2732 { 2733 struct nfsd4_compoundres *resp = rqstp->rq_resp; 2734 struct nfsd4_compoundargs *argp = rqstp->rq_argp; 2735 struct nfsd4_op *this = &argp->ops[resp->opcnt - 1]; 2736 struct nfsd4_compound_state *cstate = &resp->cstate; 2737 struct nfs4_op_map *allow = &cstate->clp->cl_spo_must_allow; 2738 u32 opiter; 2739 2740 if (!cstate->minorversion) 2741 return false; 2742 2743 if (cstate->spo_must_allowed == true) 2744 return true; 2745 2746 opiter = resp->opcnt; 2747 while (opiter < argp->opcnt) { 2748 this = &argp->ops[opiter++]; 2749 if (test_bit(this->opnum, allow->u.longs) && 2750 cstate->clp->cl_mach_cred && 2751 nfsd4_mach_creds_match(cstate->clp, rqstp)) { 2752 cstate->spo_must_allowed = true; 2753 return true; 2754 } 2755 } 2756 cstate->spo_must_allowed = false; 2757 return false; 2758 } 2759 2760 int nfsd4_max_reply(struct svc_rqst *rqstp, struct nfsd4_op *op) 2761 { 2762 if (op->opnum == OP_ILLEGAL || op->status == nfserr_notsupp) 2763 return op_encode_hdr_size * sizeof(__be32); 2764 2765 BUG_ON(OPDESC(op)->op_rsize_bop == NULL); 2766 return OPDESC(op)->op_rsize_bop(rqstp, op); 2767 } 2768 2769 void warn_on_nonidempotent_op(struct nfsd4_op *op) 2770 { 2771 if (OPDESC(op)->op_flags & OP_MODIFIES_SOMETHING) { 2772 pr_err("unable to encode reply to nonidempotent op %d (%s)\n", 2773 op->opnum, nfsd4_op_name(op->opnum)); 2774 WARN_ON_ONCE(1); 2775 } 2776 } 2777 2778 static const char *nfsd4_op_name(unsigned opnum) 2779 { 2780 if (opnum < ARRAY_SIZE(nfsd4_ops)) 2781 return nfsd4_ops[opnum].op_name; 2782 return "unknown_operation"; 2783 } 2784 2785 #define nfsd4_voidres nfsd4_voidargs 2786 struct nfsd4_voidargs { int dummy; }; 2787 2788 static const struct svc_procedure nfsd_procedures4[2] = { 2789 [NFSPROC4_NULL] = { 2790 .pc_func = nfsd4_proc_null, 2791 .pc_encode = nfs4svc_encode_voidres, 2792 .pc_argsize = sizeof(struct nfsd4_voidargs), 2793 .pc_ressize = sizeof(struct nfsd4_voidres), 2794 .pc_cachetype = RC_NOCACHE, 2795 .pc_xdrressize = 1, 2796 }, 2797 [NFSPROC4_COMPOUND] = { 2798 .pc_func = nfsd4_proc_compound, 2799 .pc_decode = nfs4svc_decode_compoundargs, 2800 .pc_encode = nfs4svc_encode_compoundres, 2801 .pc_argsize = sizeof(struct nfsd4_compoundargs), 2802 .pc_ressize = sizeof(struct nfsd4_compoundres), 2803 .pc_release = nfsd4_release_compoundargs, 2804 .pc_cachetype = RC_NOCACHE, 2805 .pc_xdrressize = NFSD_BUFSIZE/4, 2806 }, 2807 }; 2808 2809 static unsigned int nfsd_count3[ARRAY_SIZE(nfsd_procedures4)]; 2810 const struct svc_version nfsd_version4 = { 2811 .vs_vers = 4, 2812 .vs_nproc = 2, 2813 .vs_proc = nfsd_procedures4, 2814 .vs_count = nfsd_count3, 2815 .vs_dispatch = nfsd_dispatch, 2816 .vs_xdrsize = NFS4_SVC_XDRSIZE, 2817 .vs_rpcb_optnl = true, 2818 .vs_need_cong_ctrl = true, 2819 }; 2820 2821 /* 2822 * Local variables: 2823 * c-basic-offset: 8 2824 * End: 2825 */ 2826