1 /* 2 * Server-side XDR for NFSv4 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 * 35 * TODO: Neil Brown made the following observation: We currently 36 * initially reserve NFSD_BUFSIZE space on the transmit queue and 37 * never release any of that until the request is complete. 38 * It would be good to calculate a new maximum response size while 39 * decoding the COMPOUND, and call svc_reserve with this number 40 * at the end of nfs4svc_decode_compoundargs. 41 */ 42 43 #include <linux/slab.h> 44 #include <linux/namei.h> 45 #include <linux/statfs.h> 46 #include <linux/utsname.h> 47 #include <linux/pagemap.h> 48 #include <linux/sunrpc/svcauth_gss.h> 49 50 #include "idmap.h" 51 #include "acl.h" 52 #include "xdr4.h" 53 #include "vfs.h" 54 #include "state.h" 55 #include "cache.h" 56 57 #define NFSDDBG_FACILITY NFSDDBG_XDR 58 59 /* 60 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing 61 * directory in order to indicate to the client that a filesystem boundary is present 62 * We use a fixed fsid for a referral 63 */ 64 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL 65 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL 66 67 static __be32 68 check_filename(char *str, int len, __be32 err) 69 { 70 int i; 71 72 if (len == 0) 73 return nfserr_inval; 74 if (isdotent(str, len)) 75 return err; 76 for (i = 0; i < len; i++) 77 if (str[i] == '/') 78 return err; 79 return 0; 80 } 81 82 #define DECODE_HEAD \ 83 __be32 *p; \ 84 __be32 status 85 #define DECODE_TAIL \ 86 status = 0; \ 87 out: \ 88 return status; \ 89 xdr_error: \ 90 dprintk("NFSD: xdr error (%s:%d)\n", \ 91 __FILE__, __LINE__); \ 92 status = nfserr_bad_xdr; \ 93 goto out 94 95 #define READ32(x) (x) = ntohl(*p++) 96 #define READ64(x) do { \ 97 (x) = (u64)ntohl(*p++) << 32; \ 98 (x) |= ntohl(*p++); \ 99 } while (0) 100 #define READTIME(x) do { \ 101 p++; \ 102 (x) = ntohl(*p++); \ 103 p++; \ 104 } while (0) 105 #define READMEM(x,nbytes) do { \ 106 x = (char *)p; \ 107 p += XDR_QUADLEN(nbytes); \ 108 } while (0) 109 #define SAVEMEM(x,nbytes) do { \ 110 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \ 111 savemem(argp, p, nbytes) : \ 112 (char *)p)) { \ 113 dprintk("NFSD: xdr error (%s:%d)\n", \ 114 __FILE__, __LINE__); \ 115 goto xdr_error; \ 116 } \ 117 p += XDR_QUADLEN(nbytes); \ 118 } while (0) 119 #define COPYMEM(x,nbytes) do { \ 120 memcpy((x), p, nbytes); \ 121 p += XDR_QUADLEN(nbytes); \ 122 } while (0) 123 124 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */ 125 #define READ_BUF(nbytes) do { \ 126 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \ 127 p = argp->p; \ 128 argp->p += XDR_QUADLEN(nbytes); \ 129 } else if (!(p = read_buf(argp, nbytes))) { \ 130 dprintk("NFSD: xdr error (%s:%d)\n", \ 131 __FILE__, __LINE__); \ 132 goto xdr_error; \ 133 } \ 134 } while (0) 135 136 static void save_buf(struct nfsd4_compoundargs *argp, struct nfsd4_saved_compoundargs *savep) 137 { 138 savep->p = argp->p; 139 savep->end = argp->end; 140 savep->pagelen = argp->pagelen; 141 savep->pagelist = argp->pagelist; 142 } 143 144 static void restore_buf(struct nfsd4_compoundargs *argp, struct nfsd4_saved_compoundargs *savep) 145 { 146 argp->p = savep->p; 147 argp->end = savep->end; 148 argp->pagelen = savep->pagelen; 149 argp->pagelist = savep->pagelist; 150 } 151 152 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes) 153 { 154 /* We want more bytes than seem to be available. 155 * Maybe we need a new page, maybe we have just run out 156 */ 157 unsigned int avail = (char *)argp->end - (char *)argp->p; 158 __be32 *p; 159 if (avail + argp->pagelen < nbytes) 160 return NULL; 161 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */ 162 return NULL; 163 /* ok, we can do it with the current plus the next page */ 164 if (nbytes <= sizeof(argp->tmp)) 165 p = argp->tmp; 166 else { 167 kfree(argp->tmpp); 168 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL); 169 if (!p) 170 return NULL; 171 172 } 173 /* 174 * The following memcpy is safe because read_buf is always 175 * called with nbytes > avail, and the two cases above both 176 * guarantee p points to at least nbytes bytes. 177 */ 178 memcpy(p, argp->p, avail); 179 /* step to next page */ 180 argp->p = page_address(argp->pagelist[0]); 181 argp->pagelist++; 182 if (argp->pagelen < PAGE_SIZE) { 183 argp->end = argp->p + (argp->pagelen>>2); 184 argp->pagelen = 0; 185 } else { 186 argp->end = argp->p + (PAGE_SIZE>>2); 187 argp->pagelen -= PAGE_SIZE; 188 } 189 memcpy(((char*)p)+avail, argp->p, (nbytes - avail)); 190 argp->p += XDR_QUADLEN(nbytes - avail); 191 return p; 192 } 193 194 static int zero_clientid(clientid_t *clid) 195 { 196 return (clid->cl_boot == 0) && (clid->cl_id == 0); 197 } 198 199 static int 200 defer_free(struct nfsd4_compoundargs *argp, 201 void (*release)(const void *), void *p) 202 { 203 struct tmpbuf *tb; 204 205 tb = kmalloc(sizeof(*tb), GFP_KERNEL); 206 if (!tb) 207 return -ENOMEM; 208 tb->buf = p; 209 tb->release = release; 210 tb->next = argp->to_free; 211 argp->to_free = tb; 212 return 0; 213 } 214 215 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes) 216 { 217 if (p == argp->tmp) { 218 p = kmemdup(argp->tmp, nbytes, GFP_KERNEL); 219 if (!p) 220 return NULL; 221 } else { 222 BUG_ON(p != argp->tmpp); 223 argp->tmpp = NULL; 224 } 225 if (defer_free(argp, kfree, p)) { 226 kfree(p); 227 return NULL; 228 } else 229 return (char *)p; 230 } 231 232 static __be32 233 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval) 234 { 235 u32 bmlen; 236 DECODE_HEAD; 237 238 bmval[0] = 0; 239 bmval[1] = 0; 240 bmval[2] = 0; 241 242 READ_BUF(4); 243 READ32(bmlen); 244 if (bmlen > 1000) 245 goto xdr_error; 246 247 READ_BUF(bmlen << 2); 248 if (bmlen > 0) 249 READ32(bmval[0]); 250 if (bmlen > 1) 251 READ32(bmval[1]); 252 if (bmlen > 2) 253 READ32(bmval[2]); 254 255 DECODE_TAIL; 256 } 257 258 static __be32 259 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval, 260 struct iattr *iattr, struct nfs4_acl **acl) 261 { 262 int expected_len, len = 0; 263 u32 dummy32; 264 char *buf; 265 int host_err; 266 267 DECODE_HEAD; 268 iattr->ia_valid = 0; 269 if ((status = nfsd4_decode_bitmap(argp, bmval))) 270 return status; 271 272 READ_BUF(4); 273 READ32(expected_len); 274 275 if (bmval[0] & FATTR4_WORD0_SIZE) { 276 READ_BUF(8); 277 len += 8; 278 READ64(iattr->ia_size); 279 iattr->ia_valid |= ATTR_SIZE; 280 } 281 if (bmval[0] & FATTR4_WORD0_ACL) { 282 int nace; 283 struct nfs4_ace *ace; 284 285 READ_BUF(4); len += 4; 286 READ32(nace); 287 288 if (nace > NFS4_ACL_MAX) 289 return nfserr_resource; 290 291 *acl = nfs4_acl_new(nace); 292 if (*acl == NULL) { 293 host_err = -ENOMEM; 294 goto out_nfserr; 295 } 296 defer_free(argp, kfree, *acl); 297 298 (*acl)->naces = nace; 299 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) { 300 READ_BUF(16); len += 16; 301 READ32(ace->type); 302 READ32(ace->flag); 303 READ32(ace->access_mask); 304 READ32(dummy32); 305 READ_BUF(dummy32); 306 len += XDR_QUADLEN(dummy32) << 2; 307 READMEM(buf, dummy32); 308 ace->whotype = nfs4_acl_get_whotype(buf, dummy32); 309 status = nfs_ok; 310 if (ace->whotype != NFS4_ACL_WHO_NAMED) 311 ace->who = 0; 312 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 313 status = nfsd_map_name_to_gid(argp->rqstp, 314 buf, dummy32, &ace->who); 315 else 316 status = nfsd_map_name_to_uid(argp->rqstp, 317 buf, dummy32, &ace->who); 318 if (status) 319 return status; 320 } 321 } else 322 *acl = NULL; 323 if (bmval[1] & FATTR4_WORD1_MODE) { 324 READ_BUF(4); 325 len += 4; 326 READ32(iattr->ia_mode); 327 iattr->ia_mode &= (S_IFMT | S_IALLUGO); 328 iattr->ia_valid |= ATTR_MODE; 329 } 330 if (bmval[1] & FATTR4_WORD1_OWNER) { 331 READ_BUF(4); 332 len += 4; 333 READ32(dummy32); 334 READ_BUF(dummy32); 335 len += (XDR_QUADLEN(dummy32) << 2); 336 READMEM(buf, dummy32); 337 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid))) 338 return status; 339 iattr->ia_valid |= ATTR_UID; 340 } 341 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) { 342 READ_BUF(4); 343 len += 4; 344 READ32(dummy32); 345 READ_BUF(dummy32); 346 len += (XDR_QUADLEN(dummy32) << 2); 347 READMEM(buf, dummy32); 348 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid))) 349 return status; 350 iattr->ia_valid |= ATTR_GID; 351 } 352 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) { 353 READ_BUF(4); 354 len += 4; 355 READ32(dummy32); 356 switch (dummy32) { 357 case NFS4_SET_TO_CLIENT_TIME: 358 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 359 all 32 bits of 'nseconds'. */ 360 READ_BUF(12); 361 len += 12; 362 READ32(dummy32); 363 if (dummy32) 364 return nfserr_inval; 365 READ32(iattr->ia_atime.tv_sec); 366 READ32(iattr->ia_atime.tv_nsec); 367 if (iattr->ia_atime.tv_nsec >= (u32)1000000000) 368 return nfserr_inval; 369 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET); 370 break; 371 case NFS4_SET_TO_SERVER_TIME: 372 iattr->ia_valid |= ATTR_ATIME; 373 break; 374 default: 375 goto xdr_error; 376 } 377 } 378 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) { 379 READ_BUF(4); 380 len += 4; 381 READ32(dummy32); 382 switch (dummy32) { 383 case NFS4_SET_TO_CLIENT_TIME: 384 /* We require the high 32 bits of 'seconds' to be 0, and we ignore 385 all 32 bits of 'nseconds'. */ 386 READ_BUF(12); 387 len += 12; 388 READ32(dummy32); 389 if (dummy32) 390 return nfserr_inval; 391 READ32(iattr->ia_mtime.tv_sec); 392 READ32(iattr->ia_mtime.tv_nsec); 393 if (iattr->ia_mtime.tv_nsec >= (u32)1000000000) 394 return nfserr_inval; 395 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET); 396 break; 397 case NFS4_SET_TO_SERVER_TIME: 398 iattr->ia_valid |= ATTR_MTIME; 399 break; 400 default: 401 goto xdr_error; 402 } 403 } 404 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0 405 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1 406 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) 407 READ_BUF(expected_len - len); 408 else if (len != expected_len) 409 goto xdr_error; 410 411 DECODE_TAIL; 412 413 out_nfserr: 414 status = nfserrno(host_err); 415 goto out; 416 } 417 418 static __be32 419 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid) 420 { 421 DECODE_HEAD; 422 423 READ_BUF(sizeof(stateid_t)); 424 READ32(sid->si_generation); 425 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 426 427 DECODE_TAIL; 428 } 429 430 static __be32 431 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access) 432 { 433 DECODE_HEAD; 434 435 READ_BUF(4); 436 READ32(access->ac_req_access); 437 438 DECODE_TAIL; 439 } 440 441 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts) 442 { 443 DECODE_HEAD; 444 445 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8); 446 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 447 READ32(bcts->dir); 448 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker 449 * could help us figure out we should be using it. */ 450 DECODE_TAIL; 451 } 452 453 static __be32 454 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close) 455 { 456 DECODE_HEAD; 457 458 READ_BUF(4); 459 READ32(close->cl_seqid); 460 return nfsd4_decode_stateid(argp, &close->cl_stateid); 461 462 DECODE_TAIL; 463 } 464 465 466 static __be32 467 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit) 468 { 469 DECODE_HEAD; 470 471 READ_BUF(12); 472 READ64(commit->co_offset); 473 READ32(commit->co_count); 474 475 DECODE_TAIL; 476 } 477 478 static __be32 479 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create) 480 { 481 DECODE_HEAD; 482 483 READ_BUF(4); 484 READ32(create->cr_type); 485 switch (create->cr_type) { 486 case NF4LNK: 487 READ_BUF(4); 488 READ32(create->cr_linklen); 489 READ_BUF(create->cr_linklen); 490 SAVEMEM(create->cr_linkname, create->cr_linklen); 491 break; 492 case NF4BLK: 493 case NF4CHR: 494 READ_BUF(8); 495 READ32(create->cr_specdata1); 496 READ32(create->cr_specdata2); 497 break; 498 case NF4SOCK: 499 case NF4FIFO: 500 case NF4DIR: 501 default: 502 break; 503 } 504 505 READ_BUF(4); 506 READ32(create->cr_namelen); 507 READ_BUF(create->cr_namelen); 508 SAVEMEM(create->cr_name, create->cr_namelen); 509 if ((status = check_filename(create->cr_name, create->cr_namelen, nfserr_inval))) 510 return status; 511 512 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr, 513 &create->cr_acl); 514 if (status) 515 goto out; 516 517 DECODE_TAIL; 518 } 519 520 static inline __be32 521 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr) 522 { 523 return nfsd4_decode_stateid(argp, &dr->dr_stateid); 524 } 525 526 static inline __be32 527 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr) 528 { 529 return nfsd4_decode_bitmap(argp, getattr->ga_bmval); 530 } 531 532 static __be32 533 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link) 534 { 535 DECODE_HEAD; 536 537 READ_BUF(4); 538 READ32(link->li_namelen); 539 READ_BUF(link->li_namelen); 540 SAVEMEM(link->li_name, link->li_namelen); 541 if ((status = check_filename(link->li_name, link->li_namelen, nfserr_inval))) 542 return status; 543 544 DECODE_TAIL; 545 } 546 547 static __be32 548 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock) 549 { 550 DECODE_HEAD; 551 552 /* 553 * type, reclaim(boolean), offset, length, new_lock_owner(boolean) 554 */ 555 READ_BUF(28); 556 READ32(lock->lk_type); 557 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT)) 558 goto xdr_error; 559 READ32(lock->lk_reclaim); 560 READ64(lock->lk_offset); 561 READ64(lock->lk_length); 562 READ32(lock->lk_is_new); 563 564 if (lock->lk_is_new) { 565 READ_BUF(4); 566 READ32(lock->lk_new_open_seqid); 567 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid); 568 if (status) 569 return status; 570 READ_BUF(8 + sizeof(clientid_t)); 571 READ32(lock->lk_new_lock_seqid); 572 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t)); 573 READ32(lock->lk_new_owner.len); 574 READ_BUF(lock->lk_new_owner.len); 575 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len); 576 } else { 577 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid); 578 if (status) 579 return status; 580 READ_BUF(4); 581 READ32(lock->lk_old_lock_seqid); 582 } 583 584 DECODE_TAIL; 585 } 586 587 static __be32 588 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt) 589 { 590 DECODE_HEAD; 591 592 READ_BUF(32); 593 READ32(lockt->lt_type); 594 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT)) 595 goto xdr_error; 596 READ64(lockt->lt_offset); 597 READ64(lockt->lt_length); 598 COPYMEM(&lockt->lt_clientid, 8); 599 READ32(lockt->lt_owner.len); 600 READ_BUF(lockt->lt_owner.len); 601 READMEM(lockt->lt_owner.data, lockt->lt_owner.len); 602 603 DECODE_TAIL; 604 } 605 606 static __be32 607 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku) 608 { 609 DECODE_HEAD; 610 611 READ_BUF(8); 612 READ32(locku->lu_type); 613 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT)) 614 goto xdr_error; 615 READ32(locku->lu_seqid); 616 status = nfsd4_decode_stateid(argp, &locku->lu_stateid); 617 if (status) 618 return status; 619 READ_BUF(16); 620 READ64(locku->lu_offset); 621 READ64(locku->lu_length); 622 623 DECODE_TAIL; 624 } 625 626 static __be32 627 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup) 628 { 629 DECODE_HEAD; 630 631 READ_BUF(4); 632 READ32(lookup->lo_len); 633 READ_BUF(lookup->lo_len); 634 SAVEMEM(lookup->lo_name, lookup->lo_len); 635 if ((status = check_filename(lookup->lo_name, lookup->lo_len, nfserr_noent))) 636 return status; 637 638 DECODE_TAIL; 639 } 640 641 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *x) 642 { 643 __be32 *p; 644 u32 w; 645 646 READ_BUF(4); 647 READ32(w); 648 *x = w; 649 switch (w & NFS4_SHARE_ACCESS_MASK) { 650 case NFS4_SHARE_ACCESS_READ: 651 case NFS4_SHARE_ACCESS_WRITE: 652 case NFS4_SHARE_ACCESS_BOTH: 653 break; 654 default: 655 return nfserr_bad_xdr; 656 } 657 w &= ~NFS4_SHARE_ACCESS_MASK; 658 if (!w) 659 return nfs_ok; 660 if (!argp->minorversion) 661 return nfserr_bad_xdr; 662 switch (w & NFS4_SHARE_WANT_MASK) { 663 case NFS4_SHARE_WANT_NO_PREFERENCE: 664 case NFS4_SHARE_WANT_READ_DELEG: 665 case NFS4_SHARE_WANT_WRITE_DELEG: 666 case NFS4_SHARE_WANT_ANY_DELEG: 667 case NFS4_SHARE_WANT_NO_DELEG: 668 case NFS4_SHARE_WANT_CANCEL: 669 break; 670 default: 671 return nfserr_bad_xdr; 672 } 673 w &= ~NFS4_SHARE_WANT_MASK; 674 if (!w) 675 return nfs_ok; 676 switch (w) { 677 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL: 678 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED: 679 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL | 680 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED): 681 return nfs_ok; 682 } 683 xdr_error: 684 return nfserr_bad_xdr; 685 } 686 687 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x) 688 { 689 __be32 *p; 690 691 READ_BUF(4); 692 READ32(*x); 693 /* Note: unlinke access bits, deny bits may be zero. */ 694 if (*x & ~NFS4_SHARE_DENY_BOTH) 695 return nfserr_bad_xdr; 696 return nfs_ok; 697 xdr_error: 698 return nfserr_bad_xdr; 699 } 700 701 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o) 702 { 703 __be32 *p; 704 705 READ_BUF(4); 706 READ32(o->len); 707 708 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT) 709 return nfserr_bad_xdr; 710 711 READ_BUF(o->len); 712 SAVEMEM(o->data, o->len); 713 return nfs_ok; 714 xdr_error: 715 return nfserr_bad_xdr; 716 } 717 718 static __be32 719 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open) 720 { 721 DECODE_HEAD; 722 723 memset(open->op_bmval, 0, sizeof(open->op_bmval)); 724 open->op_iattr.ia_valid = 0; 725 open->op_openowner = NULL; 726 727 /* seqid, share_access, share_deny, clientid, ownerlen */ 728 READ_BUF(4); 729 READ32(open->op_seqid); 730 status = nfsd4_decode_share_access(argp, &open->op_share_access); 731 if (status) 732 goto xdr_error; 733 status = nfsd4_decode_share_deny(argp, &open->op_share_deny); 734 if (status) 735 goto xdr_error; 736 READ_BUF(sizeof(clientid_t)); 737 COPYMEM(&open->op_clientid, sizeof(clientid_t)); 738 status = nfsd4_decode_opaque(argp, &open->op_owner); 739 if (status) 740 goto xdr_error; 741 READ_BUF(4); 742 READ32(open->op_create); 743 switch (open->op_create) { 744 case NFS4_OPEN_NOCREATE: 745 break; 746 case NFS4_OPEN_CREATE: 747 READ_BUF(4); 748 READ32(open->op_createmode); 749 switch (open->op_createmode) { 750 case NFS4_CREATE_UNCHECKED: 751 case NFS4_CREATE_GUARDED: 752 status = nfsd4_decode_fattr(argp, open->op_bmval, 753 &open->op_iattr, &open->op_acl); 754 if (status) 755 goto out; 756 break; 757 case NFS4_CREATE_EXCLUSIVE: 758 READ_BUF(8); 759 COPYMEM(open->op_verf.data, 8); 760 break; 761 case NFS4_CREATE_EXCLUSIVE4_1: 762 if (argp->minorversion < 1) 763 goto xdr_error; 764 READ_BUF(8); 765 COPYMEM(open->op_verf.data, 8); 766 status = nfsd4_decode_fattr(argp, open->op_bmval, 767 &open->op_iattr, &open->op_acl); 768 if (status) 769 goto out; 770 break; 771 default: 772 goto xdr_error; 773 } 774 break; 775 default: 776 goto xdr_error; 777 } 778 779 /* open_claim */ 780 READ_BUF(4); 781 READ32(open->op_claim_type); 782 switch (open->op_claim_type) { 783 case NFS4_OPEN_CLAIM_NULL: 784 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 785 READ_BUF(4); 786 READ32(open->op_fname.len); 787 READ_BUF(open->op_fname.len); 788 SAVEMEM(open->op_fname.data, open->op_fname.len); 789 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval))) 790 return status; 791 break; 792 case NFS4_OPEN_CLAIM_PREVIOUS: 793 READ_BUF(4); 794 READ32(open->op_delegate_type); 795 break; 796 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 797 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 798 if (status) 799 return status; 800 READ_BUF(4); 801 READ32(open->op_fname.len); 802 READ_BUF(open->op_fname.len); 803 SAVEMEM(open->op_fname.data, open->op_fname.len); 804 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval))) 805 return status; 806 break; 807 case NFS4_OPEN_CLAIM_FH: 808 case NFS4_OPEN_CLAIM_DELEG_PREV_FH: 809 if (argp->minorversion < 1) 810 goto xdr_error; 811 /* void */ 812 break; 813 case NFS4_OPEN_CLAIM_DELEG_CUR_FH: 814 if (argp->minorversion < 1) 815 goto xdr_error; 816 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 817 if (status) 818 return status; 819 break; 820 default: 821 goto xdr_error; 822 } 823 824 DECODE_TAIL; 825 } 826 827 static __be32 828 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf) 829 { 830 DECODE_HEAD; 831 832 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid); 833 if (status) 834 return status; 835 READ_BUF(4); 836 READ32(open_conf->oc_seqid); 837 838 DECODE_TAIL; 839 } 840 841 static __be32 842 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down) 843 { 844 DECODE_HEAD; 845 846 status = nfsd4_decode_stateid(argp, &open_down->od_stateid); 847 if (status) 848 return status; 849 READ_BUF(4); 850 READ32(open_down->od_seqid); 851 status = nfsd4_decode_share_access(argp, &open_down->od_share_access); 852 if (status) 853 return status; 854 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny); 855 if (status) 856 return status; 857 DECODE_TAIL; 858 } 859 860 static __be32 861 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh) 862 { 863 DECODE_HEAD; 864 865 READ_BUF(4); 866 READ32(putfh->pf_fhlen); 867 if (putfh->pf_fhlen > NFS4_FHSIZE) 868 goto xdr_error; 869 READ_BUF(putfh->pf_fhlen); 870 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen); 871 872 DECODE_TAIL; 873 } 874 875 static __be32 876 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) 877 { 878 DECODE_HEAD; 879 880 status = nfsd4_decode_stateid(argp, &read->rd_stateid); 881 if (status) 882 return status; 883 READ_BUF(12); 884 READ64(read->rd_offset); 885 READ32(read->rd_length); 886 887 DECODE_TAIL; 888 } 889 890 static __be32 891 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) 892 { 893 DECODE_HEAD; 894 895 READ_BUF(24); 896 READ64(readdir->rd_cookie); 897 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); 898 READ32(readdir->rd_dircount); /* just in case you needed a useless field... */ 899 READ32(readdir->rd_maxcount); 900 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval))) 901 goto out; 902 903 DECODE_TAIL; 904 } 905 906 static __be32 907 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove) 908 { 909 DECODE_HEAD; 910 911 READ_BUF(4); 912 READ32(remove->rm_namelen); 913 READ_BUF(remove->rm_namelen); 914 SAVEMEM(remove->rm_name, remove->rm_namelen); 915 if ((status = check_filename(remove->rm_name, remove->rm_namelen, nfserr_noent))) 916 return status; 917 918 DECODE_TAIL; 919 } 920 921 static __be32 922 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename) 923 { 924 DECODE_HEAD; 925 926 READ_BUF(4); 927 READ32(rename->rn_snamelen); 928 READ_BUF(rename->rn_snamelen + 4); 929 SAVEMEM(rename->rn_sname, rename->rn_snamelen); 930 READ32(rename->rn_tnamelen); 931 READ_BUF(rename->rn_tnamelen); 932 SAVEMEM(rename->rn_tname, rename->rn_tnamelen); 933 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen, nfserr_noent))) 934 return status; 935 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen, nfserr_inval))) 936 return status; 937 938 DECODE_TAIL; 939 } 940 941 static __be32 942 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid) 943 { 944 DECODE_HEAD; 945 946 READ_BUF(sizeof(clientid_t)); 947 COPYMEM(clientid, sizeof(clientid_t)); 948 949 DECODE_TAIL; 950 } 951 952 static __be32 953 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp, 954 struct nfsd4_secinfo *secinfo) 955 { 956 DECODE_HEAD; 957 958 READ_BUF(4); 959 READ32(secinfo->si_namelen); 960 READ_BUF(secinfo->si_namelen); 961 SAVEMEM(secinfo->si_name, secinfo->si_namelen); 962 status = check_filename(secinfo->si_name, secinfo->si_namelen, 963 nfserr_noent); 964 if (status) 965 return status; 966 DECODE_TAIL; 967 } 968 969 static __be32 970 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp, 971 struct nfsd4_secinfo_no_name *sin) 972 { 973 DECODE_HEAD; 974 975 READ_BUF(4); 976 READ32(sin->sin_style); 977 DECODE_TAIL; 978 } 979 980 static __be32 981 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr) 982 { 983 __be32 status; 984 985 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid); 986 if (status) 987 return status; 988 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr, 989 &setattr->sa_acl); 990 } 991 992 static __be32 993 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid) 994 { 995 DECODE_HEAD; 996 997 READ_BUF(8); 998 COPYMEM(setclientid->se_verf.data, 8); 999 1000 status = nfsd4_decode_opaque(argp, &setclientid->se_name); 1001 if (status) 1002 return nfserr_bad_xdr; 1003 READ_BUF(8); 1004 READ32(setclientid->se_callback_prog); 1005 READ32(setclientid->se_callback_netid_len); 1006 1007 READ_BUF(setclientid->se_callback_netid_len + 4); 1008 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len); 1009 READ32(setclientid->se_callback_addr_len); 1010 1011 READ_BUF(setclientid->se_callback_addr_len + 4); 1012 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len); 1013 READ32(setclientid->se_callback_ident); 1014 1015 DECODE_TAIL; 1016 } 1017 1018 static __be32 1019 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c) 1020 { 1021 DECODE_HEAD; 1022 1023 READ_BUF(8 + sizeof(nfs4_verifier)); 1024 COPYMEM(&scd_c->sc_clientid, 8); 1025 COPYMEM(&scd_c->sc_confirm, sizeof(nfs4_verifier)); 1026 1027 DECODE_TAIL; 1028 } 1029 1030 /* Also used for NVERIFY */ 1031 static __be32 1032 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify) 1033 { 1034 #if 0 1035 struct nfsd4_compoundargs save = { 1036 .p = argp->p, 1037 .end = argp->end, 1038 .rqstp = argp->rqstp, 1039 }; 1040 u32 ve_bmval[2]; 1041 struct iattr ve_iattr; /* request */ 1042 struct nfs4_acl *ve_acl; /* request */ 1043 #endif 1044 DECODE_HEAD; 1045 1046 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval))) 1047 goto out; 1048 1049 /* For convenience's sake, we compare raw xdr'd attributes in 1050 * nfsd4_proc_verify; however we still decode here just to return 1051 * correct error in case of bad xdr. */ 1052 #if 0 1053 status = nfsd4_decode_fattr(ve_bmval, &ve_iattr, &ve_acl); 1054 if (status == nfserr_inval) { 1055 status = nfserrno(status); 1056 goto out; 1057 } 1058 #endif 1059 READ_BUF(4); 1060 READ32(verify->ve_attrlen); 1061 READ_BUF(verify->ve_attrlen); 1062 SAVEMEM(verify->ve_attrval, verify->ve_attrlen); 1063 1064 DECODE_TAIL; 1065 } 1066 1067 static __be32 1068 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write) 1069 { 1070 int avail; 1071 int v; 1072 int len; 1073 DECODE_HEAD; 1074 1075 status = nfsd4_decode_stateid(argp, &write->wr_stateid); 1076 if (status) 1077 return status; 1078 READ_BUF(16); 1079 READ64(write->wr_offset); 1080 READ32(write->wr_stable_how); 1081 if (write->wr_stable_how > 2) 1082 goto xdr_error; 1083 READ32(write->wr_buflen); 1084 1085 /* Sorry .. no magic macros for this.. * 1086 * READ_BUF(write->wr_buflen); 1087 * SAVEMEM(write->wr_buf, write->wr_buflen); 1088 */ 1089 avail = (char*)argp->end - (char*)argp->p; 1090 if (avail + argp->pagelen < write->wr_buflen) { 1091 dprintk("NFSD: xdr error (%s:%d)\n", 1092 __FILE__, __LINE__); 1093 goto xdr_error; 1094 } 1095 argp->rqstp->rq_vec[0].iov_base = p; 1096 argp->rqstp->rq_vec[0].iov_len = avail; 1097 v = 0; 1098 len = write->wr_buflen; 1099 while (len > argp->rqstp->rq_vec[v].iov_len) { 1100 len -= argp->rqstp->rq_vec[v].iov_len; 1101 v++; 1102 argp->rqstp->rq_vec[v].iov_base = page_address(argp->pagelist[0]); 1103 argp->pagelist++; 1104 if (argp->pagelen >= PAGE_SIZE) { 1105 argp->rqstp->rq_vec[v].iov_len = PAGE_SIZE; 1106 argp->pagelen -= PAGE_SIZE; 1107 } else { 1108 argp->rqstp->rq_vec[v].iov_len = argp->pagelen; 1109 argp->pagelen -= len; 1110 } 1111 } 1112 argp->end = (__be32*) (argp->rqstp->rq_vec[v].iov_base + argp->rqstp->rq_vec[v].iov_len); 1113 argp->p = (__be32*) (argp->rqstp->rq_vec[v].iov_base + (XDR_QUADLEN(len) << 2)); 1114 argp->rqstp->rq_vec[v].iov_len = len; 1115 write->wr_vlen = v+1; 1116 1117 DECODE_TAIL; 1118 } 1119 1120 static __be32 1121 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner) 1122 { 1123 DECODE_HEAD; 1124 1125 READ_BUF(12); 1126 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t)); 1127 READ32(rlockowner->rl_owner.len); 1128 READ_BUF(rlockowner->rl_owner.len); 1129 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len); 1130 1131 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid)) 1132 return nfserr_inval; 1133 DECODE_TAIL; 1134 } 1135 1136 static __be32 1137 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp, 1138 struct nfsd4_exchange_id *exid) 1139 { 1140 int dummy, tmp; 1141 DECODE_HEAD; 1142 1143 READ_BUF(NFS4_VERIFIER_SIZE); 1144 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE); 1145 1146 status = nfsd4_decode_opaque(argp, &exid->clname); 1147 if (status) 1148 return nfserr_bad_xdr; 1149 1150 READ_BUF(4); 1151 READ32(exid->flags); 1152 1153 /* Ignore state_protect4_a */ 1154 READ_BUF(4); 1155 READ32(exid->spa_how); 1156 switch (exid->spa_how) { 1157 case SP4_NONE: 1158 break; 1159 case SP4_MACH_CRED: 1160 /* spo_must_enforce */ 1161 READ_BUF(4); 1162 READ32(dummy); 1163 READ_BUF(dummy * 4); 1164 p += dummy; 1165 1166 /* spo_must_allow */ 1167 READ_BUF(4); 1168 READ32(dummy); 1169 READ_BUF(dummy * 4); 1170 p += dummy; 1171 break; 1172 case SP4_SSV: 1173 /* ssp_ops */ 1174 READ_BUF(4); 1175 READ32(dummy); 1176 READ_BUF(dummy * 4); 1177 p += dummy; 1178 1179 READ_BUF(4); 1180 READ32(dummy); 1181 READ_BUF(dummy * 4); 1182 p += dummy; 1183 1184 /* ssp_hash_algs<> */ 1185 READ_BUF(4); 1186 READ32(tmp); 1187 while (tmp--) { 1188 READ_BUF(4); 1189 READ32(dummy); 1190 READ_BUF(dummy); 1191 p += XDR_QUADLEN(dummy); 1192 } 1193 1194 /* ssp_encr_algs<> */ 1195 READ_BUF(4); 1196 READ32(tmp); 1197 while (tmp--) { 1198 READ_BUF(4); 1199 READ32(dummy); 1200 READ_BUF(dummy); 1201 p += XDR_QUADLEN(dummy); 1202 } 1203 1204 /* ssp_window and ssp_num_gss_handles */ 1205 READ_BUF(8); 1206 READ32(dummy); 1207 READ32(dummy); 1208 break; 1209 default: 1210 goto xdr_error; 1211 } 1212 1213 /* Ignore Implementation ID */ 1214 READ_BUF(4); /* nfs_impl_id4 array length */ 1215 READ32(dummy); 1216 1217 if (dummy > 1) 1218 goto xdr_error; 1219 1220 if (dummy == 1) { 1221 /* nii_domain */ 1222 READ_BUF(4); 1223 READ32(dummy); 1224 READ_BUF(dummy); 1225 p += XDR_QUADLEN(dummy); 1226 1227 /* nii_name */ 1228 READ_BUF(4); 1229 READ32(dummy); 1230 READ_BUF(dummy); 1231 p += XDR_QUADLEN(dummy); 1232 1233 /* nii_date */ 1234 READ_BUF(12); 1235 p += 3; 1236 } 1237 DECODE_TAIL; 1238 } 1239 1240 static __be32 1241 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp, 1242 struct nfsd4_create_session *sess) 1243 { 1244 DECODE_HEAD; 1245 1246 u32 dummy; 1247 char *machine_name; 1248 int i; 1249 int nr_secflavs; 1250 1251 READ_BUF(16); 1252 COPYMEM(&sess->clientid, 8); 1253 READ32(sess->seqid); 1254 READ32(sess->flags); 1255 1256 /* Fore channel attrs */ 1257 READ_BUF(28); 1258 READ32(dummy); /* headerpadsz is always 0 */ 1259 READ32(sess->fore_channel.maxreq_sz); 1260 READ32(sess->fore_channel.maxresp_sz); 1261 READ32(sess->fore_channel.maxresp_cached); 1262 READ32(sess->fore_channel.maxops); 1263 READ32(sess->fore_channel.maxreqs); 1264 READ32(sess->fore_channel.nr_rdma_attrs); 1265 if (sess->fore_channel.nr_rdma_attrs == 1) { 1266 READ_BUF(4); 1267 READ32(sess->fore_channel.rdma_attrs); 1268 } else if (sess->fore_channel.nr_rdma_attrs > 1) { 1269 dprintk("Too many fore channel attr bitmaps!\n"); 1270 goto xdr_error; 1271 } 1272 1273 /* Back channel attrs */ 1274 READ_BUF(28); 1275 READ32(dummy); /* headerpadsz is always 0 */ 1276 READ32(sess->back_channel.maxreq_sz); 1277 READ32(sess->back_channel.maxresp_sz); 1278 READ32(sess->back_channel.maxresp_cached); 1279 READ32(sess->back_channel.maxops); 1280 READ32(sess->back_channel.maxreqs); 1281 READ32(sess->back_channel.nr_rdma_attrs); 1282 if (sess->back_channel.nr_rdma_attrs == 1) { 1283 READ_BUF(4); 1284 READ32(sess->back_channel.rdma_attrs); 1285 } else if (sess->back_channel.nr_rdma_attrs > 1) { 1286 dprintk("Too many back channel attr bitmaps!\n"); 1287 goto xdr_error; 1288 } 1289 1290 READ_BUF(8); 1291 READ32(sess->callback_prog); 1292 1293 /* callback_sec_params4 */ 1294 READ32(nr_secflavs); 1295 for (i = 0; i < nr_secflavs; ++i) { 1296 READ_BUF(4); 1297 READ32(dummy); 1298 switch (dummy) { 1299 case RPC_AUTH_NULL: 1300 /* Nothing to read */ 1301 break; 1302 case RPC_AUTH_UNIX: 1303 READ_BUF(8); 1304 /* stamp */ 1305 READ32(dummy); 1306 1307 /* machine name */ 1308 READ32(dummy); 1309 READ_BUF(dummy); 1310 SAVEMEM(machine_name, dummy); 1311 1312 /* uid, gid */ 1313 READ_BUF(8); 1314 READ32(sess->uid); 1315 READ32(sess->gid); 1316 1317 /* more gids */ 1318 READ_BUF(4); 1319 READ32(dummy); 1320 READ_BUF(dummy * 4); 1321 break; 1322 case RPC_AUTH_GSS: 1323 dprintk("RPC_AUTH_GSS callback secflavor " 1324 "not supported!\n"); 1325 READ_BUF(8); 1326 /* gcbp_service */ 1327 READ32(dummy); 1328 /* gcbp_handle_from_server */ 1329 READ32(dummy); 1330 READ_BUF(dummy); 1331 p += XDR_QUADLEN(dummy); 1332 /* gcbp_handle_from_client */ 1333 READ_BUF(4); 1334 READ32(dummy); 1335 READ_BUF(dummy); 1336 break; 1337 default: 1338 dprintk("Illegal callback secflavor\n"); 1339 return nfserr_inval; 1340 } 1341 } 1342 DECODE_TAIL; 1343 } 1344 1345 static __be32 1346 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp, 1347 struct nfsd4_destroy_session *destroy_session) 1348 { 1349 DECODE_HEAD; 1350 READ_BUF(NFS4_MAX_SESSIONID_LEN); 1351 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1352 1353 DECODE_TAIL; 1354 } 1355 1356 static __be32 1357 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp, 1358 struct nfsd4_free_stateid *free_stateid) 1359 { 1360 DECODE_HEAD; 1361 1362 READ_BUF(sizeof(stateid_t)); 1363 READ32(free_stateid->fr_stateid.si_generation); 1364 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t)); 1365 1366 DECODE_TAIL; 1367 } 1368 1369 static __be32 1370 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp, 1371 struct nfsd4_sequence *seq) 1372 { 1373 DECODE_HEAD; 1374 1375 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16); 1376 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1377 READ32(seq->seqid); 1378 READ32(seq->slotid); 1379 READ32(seq->maxslots); 1380 READ32(seq->cachethis); 1381 1382 DECODE_TAIL; 1383 } 1384 1385 static __be32 1386 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid) 1387 { 1388 unsigned int nbytes; 1389 stateid_t si; 1390 int i; 1391 __be32 *p; 1392 __be32 status; 1393 1394 READ_BUF(4); 1395 test_stateid->ts_num_ids = ntohl(*p++); 1396 1397 nbytes = test_stateid->ts_num_ids * sizeof(stateid_t); 1398 if (nbytes > (u32)((char *)argp->end - (char *)argp->p)) 1399 goto xdr_error; 1400 1401 test_stateid->ts_saved_args = argp; 1402 save_buf(argp, &test_stateid->ts_savedp); 1403 1404 for (i = 0; i < test_stateid->ts_num_ids; i++) { 1405 status = nfsd4_decode_stateid(argp, &si); 1406 if (status) 1407 return status; 1408 } 1409 1410 status = 0; 1411 out: 1412 return status; 1413 xdr_error: 1414 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__); 1415 status = nfserr_bad_xdr; 1416 goto out; 1417 } 1418 1419 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc) 1420 { 1421 DECODE_HEAD; 1422 1423 READ_BUF(8); 1424 COPYMEM(&dc->clientid, 8); 1425 1426 DECODE_TAIL; 1427 } 1428 1429 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc) 1430 { 1431 DECODE_HEAD; 1432 1433 READ_BUF(4); 1434 READ32(rc->rca_one_fs); 1435 1436 DECODE_TAIL; 1437 } 1438 1439 static __be32 1440 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p) 1441 { 1442 return nfs_ok; 1443 } 1444 1445 static __be32 1446 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p) 1447 { 1448 return nfserr_notsupp; 1449 } 1450 1451 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *); 1452 1453 static nfsd4_dec nfsd4_dec_ops[] = { 1454 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1455 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1456 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1457 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1458 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1459 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1460 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1461 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1462 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1463 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1464 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1465 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1466 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1467 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1468 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1469 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1470 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1471 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm, 1472 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1473 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1474 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_noop, 1475 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1476 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1477 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1478 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1479 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1480 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1481 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew, 1482 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1483 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1484 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1485 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1486 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid, 1487 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm, 1488 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1489 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1490 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner, 1491 }; 1492 1493 static nfsd4_dec nfsd41_dec_ops[] = { 1494 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1495 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1496 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1497 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1498 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1499 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1500 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1501 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1502 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1503 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1504 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1505 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1506 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1507 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1508 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1509 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1510 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1511 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_notsupp, 1512 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1513 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1514 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_notsupp, 1515 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1516 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1517 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1518 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1519 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1520 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1521 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_notsupp, 1522 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1523 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1524 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1525 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1526 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp, 1527 [OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp, 1528 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1529 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1530 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_notsupp, 1531 1532 /* new operations for NFSv4.1 */ 1533 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_notsupp, 1534 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session, 1535 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id, 1536 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session, 1537 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session, 1538 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid, 1539 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1540 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp, 1541 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1542 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp, 1543 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp, 1544 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp, 1545 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name, 1546 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence, 1547 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp, 1548 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid, 1549 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1550 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid, 1551 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete, 1552 }; 1553 1554 struct nfsd4_minorversion_ops { 1555 nfsd4_dec *decoders; 1556 int nops; 1557 }; 1558 1559 static struct nfsd4_minorversion_ops nfsd4_minorversion[] = { 1560 [0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) }, 1561 [1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) }, 1562 }; 1563 1564 static __be32 1565 nfsd4_decode_compound(struct nfsd4_compoundargs *argp) 1566 { 1567 DECODE_HEAD; 1568 struct nfsd4_op *op; 1569 struct nfsd4_minorversion_ops *ops; 1570 bool cachethis = false; 1571 int i; 1572 1573 /* 1574 * XXX: According to spec, we should check the tag 1575 * for UTF-8 compliance. I'm postponing this for 1576 * now because it seems that some clients do use 1577 * binary tags. 1578 */ 1579 READ_BUF(4); 1580 READ32(argp->taglen); 1581 READ_BUF(argp->taglen + 8); 1582 SAVEMEM(argp->tag, argp->taglen); 1583 READ32(argp->minorversion); 1584 READ32(argp->opcnt); 1585 1586 if (argp->taglen > NFSD4_MAX_TAGLEN) 1587 goto xdr_error; 1588 if (argp->opcnt > 100) 1589 goto xdr_error; 1590 1591 if (argp->opcnt > ARRAY_SIZE(argp->iops)) { 1592 argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL); 1593 if (!argp->ops) { 1594 argp->ops = argp->iops; 1595 dprintk("nfsd: couldn't allocate room for COMPOUND\n"); 1596 goto xdr_error; 1597 } 1598 } 1599 1600 if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion)) 1601 argp->opcnt = 0; 1602 1603 ops = &nfsd4_minorversion[argp->minorversion]; 1604 for (i = 0; i < argp->opcnt; i++) { 1605 op = &argp->ops[i]; 1606 op->replay = NULL; 1607 1608 /* 1609 * We can't use READ_BUF() here because we need to handle 1610 * a missing opcode as an OP_WRITE + 1. So we need to check 1611 * to see if we're truly at the end of our buffer or if there 1612 * is another page we need to flip to. 1613 */ 1614 1615 if (argp->p == argp->end) { 1616 if (argp->pagelen < 4) { 1617 /* There isn't an opcode still on the wire */ 1618 op->opnum = OP_WRITE + 1; 1619 op->status = nfserr_bad_xdr; 1620 argp->opcnt = i+1; 1621 break; 1622 } 1623 1624 /* 1625 * False alarm. We just hit a page boundary, but there 1626 * is still data available. Move pointer across page 1627 * boundary. *snip from READ_BUF* 1628 */ 1629 argp->p = page_address(argp->pagelist[0]); 1630 argp->pagelist++; 1631 if (argp->pagelen < PAGE_SIZE) { 1632 argp->end = argp->p + (argp->pagelen>>2); 1633 argp->pagelen = 0; 1634 } else { 1635 argp->end = argp->p + (PAGE_SIZE>>2); 1636 argp->pagelen -= PAGE_SIZE; 1637 } 1638 } 1639 op->opnum = ntohl(*argp->p++); 1640 1641 if (op->opnum >= FIRST_NFS4_OP && op->opnum <= LAST_NFS4_OP) 1642 op->status = ops->decoders[op->opnum](argp, &op->u); 1643 else { 1644 op->opnum = OP_ILLEGAL; 1645 op->status = nfserr_op_illegal; 1646 } 1647 1648 if (op->status) { 1649 argp->opcnt = i+1; 1650 break; 1651 } 1652 /* 1653 * We'll try to cache the result in the DRC if any one 1654 * op in the compound wants to be cached: 1655 */ 1656 cachethis |= nfsd4_cache_this_op(op); 1657 } 1658 /* Sessions make the DRC unnecessary: */ 1659 if (argp->minorversion) 1660 cachethis = false; 1661 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE; 1662 1663 DECODE_TAIL; 1664 } 1665 1666 #define WRITE32(n) *p++ = htonl(n) 1667 #define WRITE64(n) do { \ 1668 *p++ = htonl((u32)((n) >> 32)); \ 1669 *p++ = htonl((u32)(n)); \ 1670 } while (0) 1671 #define WRITEMEM(ptr,nbytes) do { if (nbytes > 0) { \ 1672 *(p + XDR_QUADLEN(nbytes) -1) = 0; \ 1673 memcpy(p, ptr, nbytes); \ 1674 p += XDR_QUADLEN(nbytes); \ 1675 }} while (0) 1676 1677 static void write32(__be32 **p, u32 n) 1678 { 1679 *(*p)++ = n; 1680 } 1681 1682 static void write64(__be32 **p, u64 n) 1683 { 1684 write32(p, (u32)(n >> 32)); 1685 write32(p, (u32)n); 1686 } 1687 1688 static void write_change(__be32 **p, struct kstat *stat, struct inode *inode) 1689 { 1690 if (IS_I_VERSION(inode)) { 1691 write64(p, inode->i_version); 1692 } else { 1693 write32(p, stat->ctime.tv_sec); 1694 write32(p, stat->ctime.tv_nsec); 1695 } 1696 } 1697 1698 static void write_cinfo(__be32 **p, struct nfsd4_change_info *c) 1699 { 1700 write32(p, c->atomic); 1701 if (c->change_supported) { 1702 write64(p, c->before_change); 1703 write64(p, c->after_change); 1704 } else { 1705 write32(p, c->before_ctime_sec); 1706 write32(p, c->before_ctime_nsec); 1707 write32(p, c->after_ctime_sec); 1708 write32(p, c->after_ctime_nsec); 1709 } 1710 } 1711 1712 #define RESERVE_SPACE(nbytes) do { \ 1713 p = resp->p; \ 1714 BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end); \ 1715 } while (0) 1716 #define ADJUST_ARGS() resp->p = p 1717 1718 /* 1719 * Header routine to setup seqid operation replay cache 1720 */ 1721 #define ENCODE_SEQID_OP_HEAD \ 1722 __be32 *save; \ 1723 \ 1724 save = resp->p; 1725 1726 /* 1727 * Routine for encoding the result of a "seqid-mutating" NFSv4 operation. This 1728 * is where sequence id's are incremented, and the replay cache is filled. 1729 * Note that we increment sequence id's here, at the last moment, so we're sure 1730 * we know whether the error to be returned is a sequence id mutating error. 1731 */ 1732 1733 static void encode_seqid_op_tail(struct nfsd4_compoundres *resp, __be32 *save, __be32 nfserr) 1734 { 1735 struct nfs4_stateowner *stateowner = resp->cstate.replay_owner; 1736 1737 if (seqid_mutating_err(ntohl(nfserr)) && stateowner) { 1738 stateowner->so_seqid++; 1739 stateowner->so_replay.rp_status = nfserr; 1740 stateowner->so_replay.rp_buflen = 1741 (char *)resp->p - (char *)save; 1742 memcpy(stateowner->so_replay.rp_buf, save, 1743 stateowner->so_replay.rp_buflen); 1744 nfsd4_purge_closed_stateid(stateowner); 1745 } 1746 } 1747 1748 /* Encode as an array of strings the string given with components 1749 * separated @sep. 1750 */ 1751 static __be32 nfsd4_encode_components(char sep, char *components, 1752 __be32 **pp, int *buflen) 1753 { 1754 __be32 *p = *pp; 1755 __be32 *countp = p; 1756 int strlen, count=0; 1757 char *str, *end; 1758 1759 dprintk("nfsd4_encode_components(%s)\n", components); 1760 if ((*buflen -= 4) < 0) 1761 return nfserr_resource; 1762 WRITE32(0); /* We will fill this in with @count later */ 1763 end = str = components; 1764 while (*end) { 1765 for (; *end && (*end != sep); end++) 1766 ; /* Point to end of component */ 1767 strlen = end - str; 1768 if (strlen) { 1769 if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0) 1770 return nfserr_resource; 1771 WRITE32(strlen); 1772 WRITEMEM(str, strlen); 1773 count++; 1774 } 1775 else 1776 end++; 1777 str = end; 1778 } 1779 *pp = p; 1780 p = countp; 1781 WRITE32(count); 1782 return 0; 1783 } 1784 1785 /* 1786 * encode a location element of a fs_locations structure 1787 */ 1788 static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location, 1789 __be32 **pp, int *buflen) 1790 { 1791 __be32 status; 1792 __be32 *p = *pp; 1793 1794 status = nfsd4_encode_components(':', location->hosts, &p, buflen); 1795 if (status) 1796 return status; 1797 status = nfsd4_encode_components('/', location->path, &p, buflen); 1798 if (status) 1799 return status; 1800 *pp = p; 1801 return 0; 1802 } 1803 1804 /* 1805 * Encode a path in RFC3530 'pathname4' format 1806 */ 1807 static __be32 nfsd4_encode_path(const struct path *root, 1808 const struct path *path, __be32 **pp, int *buflen) 1809 { 1810 struct path cur = { 1811 .mnt = path->mnt, 1812 .dentry = path->dentry, 1813 }; 1814 __be32 *p = *pp; 1815 struct dentry **components = NULL; 1816 unsigned int ncomponents = 0; 1817 __be32 err = nfserr_jukebox; 1818 1819 dprintk("nfsd4_encode_components("); 1820 1821 path_get(&cur); 1822 /* First walk the path up to the nfsd root, and store the 1823 * dentries/path components in an array. 1824 */ 1825 for (;;) { 1826 if (cur.dentry == root->dentry && cur.mnt == root->mnt) 1827 break; 1828 if (cur.dentry == cur.mnt->mnt_root) { 1829 if (follow_up(&cur)) 1830 continue; 1831 goto out_free; 1832 } 1833 if ((ncomponents & 15) == 0) { 1834 struct dentry **new; 1835 new = krealloc(components, 1836 sizeof(*new) * (ncomponents + 16), 1837 GFP_KERNEL); 1838 if (!new) 1839 goto out_free; 1840 components = new; 1841 } 1842 components[ncomponents++] = cur.dentry; 1843 cur.dentry = dget_parent(cur.dentry); 1844 } 1845 1846 *buflen -= 4; 1847 if (*buflen < 0) 1848 goto out_free; 1849 WRITE32(ncomponents); 1850 1851 while (ncomponents) { 1852 struct dentry *dentry = components[ncomponents - 1]; 1853 unsigned int len = dentry->d_name.len; 1854 1855 *buflen -= 4 + (XDR_QUADLEN(len) << 2); 1856 if (*buflen < 0) 1857 goto out_free; 1858 WRITE32(len); 1859 WRITEMEM(dentry->d_name.name, len); 1860 dprintk("/%s", dentry->d_name.name); 1861 dput(dentry); 1862 ncomponents--; 1863 } 1864 1865 *pp = p; 1866 err = 0; 1867 out_free: 1868 dprintk(")\n"); 1869 while (ncomponents) 1870 dput(components[--ncomponents]); 1871 kfree(components); 1872 path_put(&cur); 1873 return err; 1874 } 1875 1876 static __be32 nfsd4_encode_fsloc_fsroot(struct svc_rqst *rqstp, 1877 const struct path *path, __be32 **pp, int *buflen) 1878 { 1879 struct svc_export *exp_ps; 1880 __be32 res; 1881 1882 exp_ps = rqst_find_fsidzero_export(rqstp); 1883 if (IS_ERR(exp_ps)) 1884 return nfserrno(PTR_ERR(exp_ps)); 1885 res = nfsd4_encode_path(&exp_ps->ex_path, path, pp, buflen); 1886 exp_put(exp_ps); 1887 return res; 1888 } 1889 1890 /* 1891 * encode a fs_locations structure 1892 */ 1893 static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp, 1894 struct svc_export *exp, 1895 __be32 **pp, int *buflen) 1896 { 1897 __be32 status; 1898 int i; 1899 __be32 *p = *pp; 1900 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs; 1901 1902 status = nfsd4_encode_fsloc_fsroot(rqstp, &exp->ex_path, &p, buflen); 1903 if (status) 1904 return status; 1905 if ((*buflen -= 4) < 0) 1906 return nfserr_resource; 1907 WRITE32(fslocs->locations_count); 1908 for (i=0; i<fslocs->locations_count; i++) { 1909 status = nfsd4_encode_fs_location4(&fslocs->locations[i], 1910 &p, buflen); 1911 if (status) 1912 return status; 1913 } 1914 *pp = p; 1915 return 0; 1916 } 1917 1918 static u32 nfs4_file_type(umode_t mode) 1919 { 1920 switch (mode & S_IFMT) { 1921 case S_IFIFO: return NF4FIFO; 1922 case S_IFCHR: return NF4CHR; 1923 case S_IFDIR: return NF4DIR; 1924 case S_IFBLK: return NF4BLK; 1925 case S_IFLNK: return NF4LNK; 1926 case S_IFREG: return NF4REG; 1927 case S_IFSOCK: return NF4SOCK; 1928 default: return NF4BAD; 1929 }; 1930 } 1931 1932 static __be32 1933 nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, uid_t id, int group, 1934 __be32 **p, int *buflen) 1935 { 1936 int status; 1937 1938 if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4) 1939 return nfserr_resource; 1940 if (whotype != NFS4_ACL_WHO_NAMED) 1941 status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1)); 1942 else if (group) 1943 status = nfsd_map_gid_to_name(rqstp, id, (u8 *)(*p + 1)); 1944 else 1945 status = nfsd_map_uid_to_name(rqstp, id, (u8 *)(*p + 1)); 1946 if (status < 0) 1947 return nfserrno(status); 1948 *p = xdr_encode_opaque(*p, NULL, status); 1949 *buflen -= (XDR_QUADLEN(status) << 2) + 4; 1950 BUG_ON(*buflen < 0); 1951 return 0; 1952 } 1953 1954 static inline __be32 1955 nfsd4_encode_user(struct svc_rqst *rqstp, uid_t uid, __be32 **p, int *buflen) 1956 { 1957 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, uid, 0, p, buflen); 1958 } 1959 1960 static inline __be32 1961 nfsd4_encode_group(struct svc_rqst *rqstp, uid_t gid, __be32 **p, int *buflen) 1962 { 1963 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, gid, 1, p, buflen); 1964 } 1965 1966 static inline __be32 1967 nfsd4_encode_aclname(struct svc_rqst *rqstp, int whotype, uid_t id, int group, 1968 __be32 **p, int *buflen) 1969 { 1970 return nfsd4_encode_name(rqstp, whotype, id, group, p, buflen); 1971 } 1972 1973 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \ 1974 FATTR4_WORD0_RDATTR_ERROR) 1975 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID 1976 1977 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err) 1978 { 1979 /* As per referral draft: */ 1980 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS || 1981 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) { 1982 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR || 1983 *bmval0 & FATTR4_WORD0_FS_LOCATIONS) 1984 *rdattr_err = NFSERR_MOVED; 1985 else 1986 return nfserr_moved; 1987 } 1988 *bmval0 &= WORD0_ABSENT_FS_ATTRS; 1989 *bmval1 &= WORD1_ABSENT_FS_ATTRS; 1990 return 0; 1991 } 1992 1993 /* 1994 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle 1995 * ourselves. 1996 * 1997 * @countp is the buffer size in _words_; upon successful return this becomes 1998 * replaced with the number of words written. 1999 */ 2000 __be32 2001 nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp, 2002 struct dentry *dentry, __be32 *buffer, int *countp, u32 *bmval, 2003 struct svc_rqst *rqstp, int ignore_crossmnt) 2004 { 2005 u32 bmval0 = bmval[0]; 2006 u32 bmval1 = bmval[1]; 2007 u32 bmval2 = bmval[2]; 2008 struct kstat stat; 2009 struct svc_fh tempfh; 2010 struct kstatfs statfs; 2011 int buflen = *countp << 2; 2012 __be32 *attrlenp; 2013 u32 dummy; 2014 u64 dummy64; 2015 u32 rdattr_err = 0; 2016 __be32 *p = buffer; 2017 __be32 status; 2018 int err; 2019 int aclsupport = 0; 2020 struct nfs4_acl *acl = NULL; 2021 struct nfsd4_compoundres *resp = rqstp->rq_resp; 2022 u32 minorversion = resp->cstate.minorversion; 2023 struct path path = { 2024 .mnt = exp->ex_path.mnt, 2025 .dentry = dentry, 2026 }; 2027 2028 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1); 2029 BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion)); 2030 BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion)); 2031 BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion)); 2032 2033 if (exp->ex_fslocs.migrated) { 2034 BUG_ON(bmval[2]); 2035 status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err); 2036 if (status) 2037 goto out; 2038 } 2039 2040 err = vfs_getattr(exp->ex_path.mnt, dentry, &stat); 2041 if (err) 2042 goto out_nfserr; 2043 if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL | 2044 FATTR4_WORD0_MAXNAME)) || 2045 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE | 2046 FATTR4_WORD1_SPACE_TOTAL))) { 2047 err = vfs_statfs(&path, &statfs); 2048 if (err) 2049 goto out_nfserr; 2050 } 2051 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) { 2052 fh_init(&tempfh, NFS4_FHSIZE); 2053 status = fh_compose(&tempfh, exp, dentry, NULL); 2054 if (status) 2055 goto out; 2056 fhp = &tempfh; 2057 } 2058 if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT 2059 | FATTR4_WORD0_SUPPORTED_ATTRS)) { 2060 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl); 2061 aclsupport = (err == 0); 2062 if (bmval0 & FATTR4_WORD0_ACL) { 2063 if (err == -EOPNOTSUPP) 2064 bmval0 &= ~FATTR4_WORD0_ACL; 2065 else if (err == -EINVAL) { 2066 status = nfserr_attrnotsupp; 2067 goto out; 2068 } else if (err != 0) 2069 goto out_nfserr; 2070 } 2071 } 2072 2073 if (bmval2) { 2074 if ((buflen -= 16) < 0) 2075 goto out_resource; 2076 WRITE32(3); 2077 WRITE32(bmval0); 2078 WRITE32(bmval1); 2079 WRITE32(bmval2); 2080 } else if (bmval1) { 2081 if ((buflen -= 12) < 0) 2082 goto out_resource; 2083 WRITE32(2); 2084 WRITE32(bmval0); 2085 WRITE32(bmval1); 2086 } else { 2087 if ((buflen -= 8) < 0) 2088 goto out_resource; 2089 WRITE32(1); 2090 WRITE32(bmval0); 2091 } 2092 attrlenp = p++; /* to be backfilled later */ 2093 2094 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 2095 u32 word0 = nfsd_suppattrs0(minorversion); 2096 u32 word1 = nfsd_suppattrs1(minorversion); 2097 u32 word2 = nfsd_suppattrs2(minorversion); 2098 2099 if (!aclsupport) 2100 word0 &= ~FATTR4_WORD0_ACL; 2101 if (!word2) { 2102 if ((buflen -= 12) < 0) 2103 goto out_resource; 2104 WRITE32(2); 2105 WRITE32(word0); 2106 WRITE32(word1); 2107 } else { 2108 if ((buflen -= 16) < 0) 2109 goto out_resource; 2110 WRITE32(3); 2111 WRITE32(word0); 2112 WRITE32(word1); 2113 WRITE32(word2); 2114 } 2115 } 2116 if (bmval0 & FATTR4_WORD0_TYPE) { 2117 if ((buflen -= 4) < 0) 2118 goto out_resource; 2119 dummy = nfs4_file_type(stat.mode); 2120 if (dummy == NF4BAD) 2121 goto out_serverfault; 2122 WRITE32(dummy); 2123 } 2124 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) { 2125 if ((buflen -= 4) < 0) 2126 goto out_resource; 2127 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK) 2128 WRITE32(NFS4_FH_PERSISTENT); 2129 else 2130 WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME); 2131 } 2132 if (bmval0 & FATTR4_WORD0_CHANGE) { 2133 if ((buflen -= 8) < 0) 2134 goto out_resource; 2135 write_change(&p, &stat, dentry->d_inode); 2136 } 2137 if (bmval0 & FATTR4_WORD0_SIZE) { 2138 if ((buflen -= 8) < 0) 2139 goto out_resource; 2140 WRITE64(stat.size); 2141 } 2142 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) { 2143 if ((buflen -= 4) < 0) 2144 goto out_resource; 2145 WRITE32(1); 2146 } 2147 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) { 2148 if ((buflen -= 4) < 0) 2149 goto out_resource; 2150 WRITE32(1); 2151 } 2152 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) { 2153 if ((buflen -= 4) < 0) 2154 goto out_resource; 2155 WRITE32(0); 2156 } 2157 if (bmval0 & FATTR4_WORD0_FSID) { 2158 if ((buflen -= 16) < 0) 2159 goto out_resource; 2160 if (exp->ex_fslocs.migrated) { 2161 WRITE64(NFS4_REFERRAL_FSID_MAJOR); 2162 WRITE64(NFS4_REFERRAL_FSID_MINOR); 2163 } else switch(fsid_source(fhp)) { 2164 case FSIDSOURCE_FSID: 2165 WRITE64((u64)exp->ex_fsid); 2166 WRITE64((u64)0); 2167 break; 2168 case FSIDSOURCE_DEV: 2169 WRITE32(0); 2170 WRITE32(MAJOR(stat.dev)); 2171 WRITE32(0); 2172 WRITE32(MINOR(stat.dev)); 2173 break; 2174 case FSIDSOURCE_UUID: 2175 WRITEMEM(exp->ex_uuid, 16); 2176 break; 2177 } 2178 } 2179 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) { 2180 if ((buflen -= 4) < 0) 2181 goto out_resource; 2182 WRITE32(0); 2183 } 2184 if (bmval0 & FATTR4_WORD0_LEASE_TIME) { 2185 if ((buflen -= 4) < 0) 2186 goto out_resource; 2187 WRITE32(nfsd4_lease); 2188 } 2189 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) { 2190 if ((buflen -= 4) < 0) 2191 goto out_resource; 2192 WRITE32(rdattr_err); 2193 } 2194 if (bmval0 & FATTR4_WORD0_ACL) { 2195 struct nfs4_ace *ace; 2196 2197 if (acl == NULL) { 2198 if ((buflen -= 4) < 0) 2199 goto out_resource; 2200 2201 WRITE32(0); 2202 goto out_acl; 2203 } 2204 if ((buflen -= 4) < 0) 2205 goto out_resource; 2206 WRITE32(acl->naces); 2207 2208 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) { 2209 if ((buflen -= 4*3) < 0) 2210 goto out_resource; 2211 WRITE32(ace->type); 2212 WRITE32(ace->flag); 2213 WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL); 2214 status = nfsd4_encode_aclname(rqstp, ace->whotype, 2215 ace->who, ace->flag & NFS4_ACE_IDENTIFIER_GROUP, 2216 &p, &buflen); 2217 if (status == nfserr_resource) 2218 goto out_resource; 2219 if (status) 2220 goto out; 2221 } 2222 } 2223 out_acl: 2224 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) { 2225 if ((buflen -= 4) < 0) 2226 goto out_resource; 2227 WRITE32(aclsupport ? 2228 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0); 2229 } 2230 if (bmval0 & FATTR4_WORD0_CANSETTIME) { 2231 if ((buflen -= 4) < 0) 2232 goto out_resource; 2233 WRITE32(1); 2234 } 2235 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) { 2236 if ((buflen -= 4) < 0) 2237 goto out_resource; 2238 WRITE32(1); 2239 } 2240 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) { 2241 if ((buflen -= 4) < 0) 2242 goto out_resource; 2243 WRITE32(1); 2244 } 2245 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) { 2246 if ((buflen -= 4) < 0) 2247 goto out_resource; 2248 WRITE32(1); 2249 } 2250 if (bmval0 & FATTR4_WORD0_FILEHANDLE) { 2251 buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4; 2252 if (buflen < 0) 2253 goto out_resource; 2254 WRITE32(fhp->fh_handle.fh_size); 2255 WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size); 2256 } 2257 if (bmval0 & FATTR4_WORD0_FILEID) { 2258 if ((buflen -= 8) < 0) 2259 goto out_resource; 2260 WRITE64(stat.ino); 2261 } 2262 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) { 2263 if ((buflen -= 8) < 0) 2264 goto out_resource; 2265 WRITE64((u64) statfs.f_ffree); 2266 } 2267 if (bmval0 & FATTR4_WORD0_FILES_FREE) { 2268 if ((buflen -= 8) < 0) 2269 goto out_resource; 2270 WRITE64((u64) statfs.f_ffree); 2271 } 2272 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) { 2273 if ((buflen -= 8) < 0) 2274 goto out_resource; 2275 WRITE64((u64) statfs.f_files); 2276 } 2277 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) { 2278 status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen); 2279 if (status == nfserr_resource) 2280 goto out_resource; 2281 if (status) 2282 goto out; 2283 } 2284 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) { 2285 if ((buflen -= 4) < 0) 2286 goto out_resource; 2287 WRITE32(1); 2288 } 2289 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) { 2290 if ((buflen -= 8) < 0) 2291 goto out_resource; 2292 WRITE64(~(u64)0); 2293 } 2294 if (bmval0 & FATTR4_WORD0_MAXLINK) { 2295 if ((buflen -= 4) < 0) 2296 goto out_resource; 2297 WRITE32(255); 2298 } 2299 if (bmval0 & FATTR4_WORD0_MAXNAME) { 2300 if ((buflen -= 4) < 0) 2301 goto out_resource; 2302 WRITE32(statfs.f_namelen); 2303 } 2304 if (bmval0 & FATTR4_WORD0_MAXREAD) { 2305 if ((buflen -= 8) < 0) 2306 goto out_resource; 2307 WRITE64((u64) svc_max_payload(rqstp)); 2308 } 2309 if (bmval0 & FATTR4_WORD0_MAXWRITE) { 2310 if ((buflen -= 8) < 0) 2311 goto out_resource; 2312 WRITE64((u64) svc_max_payload(rqstp)); 2313 } 2314 if (bmval1 & FATTR4_WORD1_MODE) { 2315 if ((buflen -= 4) < 0) 2316 goto out_resource; 2317 WRITE32(stat.mode & S_IALLUGO); 2318 } 2319 if (bmval1 & FATTR4_WORD1_NO_TRUNC) { 2320 if ((buflen -= 4) < 0) 2321 goto out_resource; 2322 WRITE32(1); 2323 } 2324 if (bmval1 & FATTR4_WORD1_NUMLINKS) { 2325 if ((buflen -= 4) < 0) 2326 goto out_resource; 2327 WRITE32(stat.nlink); 2328 } 2329 if (bmval1 & FATTR4_WORD1_OWNER) { 2330 status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen); 2331 if (status == nfserr_resource) 2332 goto out_resource; 2333 if (status) 2334 goto out; 2335 } 2336 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) { 2337 status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen); 2338 if (status == nfserr_resource) 2339 goto out_resource; 2340 if (status) 2341 goto out; 2342 } 2343 if (bmval1 & FATTR4_WORD1_RAWDEV) { 2344 if ((buflen -= 8) < 0) 2345 goto out_resource; 2346 WRITE32((u32) MAJOR(stat.rdev)); 2347 WRITE32((u32) MINOR(stat.rdev)); 2348 } 2349 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) { 2350 if ((buflen -= 8) < 0) 2351 goto out_resource; 2352 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize; 2353 WRITE64(dummy64); 2354 } 2355 if (bmval1 & FATTR4_WORD1_SPACE_FREE) { 2356 if ((buflen -= 8) < 0) 2357 goto out_resource; 2358 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize; 2359 WRITE64(dummy64); 2360 } 2361 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) { 2362 if ((buflen -= 8) < 0) 2363 goto out_resource; 2364 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize; 2365 WRITE64(dummy64); 2366 } 2367 if (bmval1 & FATTR4_WORD1_SPACE_USED) { 2368 if ((buflen -= 8) < 0) 2369 goto out_resource; 2370 dummy64 = (u64)stat.blocks << 9; 2371 WRITE64(dummy64); 2372 } 2373 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) { 2374 if ((buflen -= 12) < 0) 2375 goto out_resource; 2376 WRITE32(0); 2377 WRITE32(stat.atime.tv_sec); 2378 WRITE32(stat.atime.tv_nsec); 2379 } 2380 if (bmval1 & FATTR4_WORD1_TIME_DELTA) { 2381 if ((buflen -= 12) < 0) 2382 goto out_resource; 2383 WRITE32(0); 2384 WRITE32(1); 2385 WRITE32(0); 2386 } 2387 if (bmval1 & FATTR4_WORD1_TIME_METADATA) { 2388 if ((buflen -= 12) < 0) 2389 goto out_resource; 2390 WRITE32(0); 2391 WRITE32(stat.ctime.tv_sec); 2392 WRITE32(stat.ctime.tv_nsec); 2393 } 2394 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) { 2395 if ((buflen -= 12) < 0) 2396 goto out_resource; 2397 WRITE32(0); 2398 WRITE32(stat.mtime.tv_sec); 2399 WRITE32(stat.mtime.tv_nsec); 2400 } 2401 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) { 2402 if ((buflen -= 8) < 0) 2403 goto out_resource; 2404 /* 2405 * Get parent's attributes if not ignoring crossmount 2406 * and this is the root of a cross-mounted filesystem. 2407 */ 2408 if (ignore_crossmnt == 0 && 2409 dentry == exp->ex_path.mnt->mnt_root) { 2410 struct path path = exp->ex_path; 2411 path_get(&path); 2412 while (follow_up(&path)) { 2413 if (path.dentry != path.mnt->mnt_root) 2414 break; 2415 } 2416 err = vfs_getattr(path.mnt, path.dentry, &stat); 2417 path_put(&path); 2418 if (err) 2419 goto out_nfserr; 2420 } 2421 WRITE64(stat.ino); 2422 } 2423 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) { 2424 WRITE32(3); 2425 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0); 2426 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1); 2427 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2); 2428 } 2429 2430 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2431 *countp = p - buffer; 2432 status = nfs_ok; 2433 2434 out: 2435 kfree(acl); 2436 if (fhp == &tempfh) 2437 fh_put(&tempfh); 2438 return status; 2439 out_nfserr: 2440 status = nfserrno(err); 2441 goto out; 2442 out_resource: 2443 *countp = 0; 2444 status = nfserr_resource; 2445 goto out; 2446 out_serverfault: 2447 status = nfserr_serverfault; 2448 goto out; 2449 } 2450 2451 static inline int attributes_need_mount(u32 *bmval) 2452 { 2453 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME)) 2454 return 1; 2455 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID) 2456 return 1; 2457 return 0; 2458 } 2459 2460 static __be32 2461 nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd, 2462 const char *name, int namlen, __be32 *p, int *buflen) 2463 { 2464 struct svc_export *exp = cd->rd_fhp->fh_export; 2465 struct dentry *dentry; 2466 __be32 nfserr; 2467 int ignore_crossmnt = 0; 2468 2469 dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen); 2470 if (IS_ERR(dentry)) 2471 return nfserrno(PTR_ERR(dentry)); 2472 if (!dentry->d_inode) { 2473 /* 2474 * nfsd_buffered_readdir drops the i_mutex between 2475 * readdir and calling this callback, leaving a window 2476 * where this directory entry could have gone away. 2477 */ 2478 dput(dentry); 2479 return nfserr_noent; 2480 } 2481 2482 exp_get(exp); 2483 /* 2484 * In the case of a mountpoint, the client may be asking for 2485 * attributes that are only properties of the underlying filesystem 2486 * as opposed to the cross-mounted file system. In such a case, 2487 * we will not follow the cross mount and will fill the attribtutes 2488 * directly from the mountpoint dentry. 2489 */ 2490 if (nfsd_mountpoint(dentry, exp)) { 2491 int err; 2492 2493 if (!(exp->ex_flags & NFSEXP_V4ROOT) 2494 && !attributes_need_mount(cd->rd_bmval)) { 2495 ignore_crossmnt = 1; 2496 goto out_encode; 2497 } 2498 /* 2499 * Why the heck aren't we just using nfsd_lookup?? 2500 * Different "."/".." handling? Something else? 2501 * At least, add a comment here to explain.... 2502 */ 2503 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp); 2504 if (err) { 2505 nfserr = nfserrno(err); 2506 goto out_put; 2507 } 2508 nfserr = check_nfsd_access(exp, cd->rd_rqstp); 2509 if (nfserr) 2510 goto out_put; 2511 2512 } 2513 out_encode: 2514 nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval, 2515 cd->rd_rqstp, ignore_crossmnt); 2516 out_put: 2517 dput(dentry); 2518 exp_put(exp); 2519 return nfserr; 2520 } 2521 2522 static __be32 * 2523 nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr) 2524 { 2525 __be32 *attrlenp; 2526 2527 if (buflen < 6) 2528 return NULL; 2529 *p++ = htonl(2); 2530 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */ 2531 *p++ = htonl(0); /* bmval1 */ 2532 2533 attrlenp = p++; 2534 *p++ = nfserr; /* no htonl */ 2535 *attrlenp = htonl((char *)p - (char *)attrlenp - 4); 2536 return p; 2537 } 2538 2539 static int 2540 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen, 2541 loff_t offset, u64 ino, unsigned int d_type) 2542 { 2543 struct readdir_cd *ccd = ccdv; 2544 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common); 2545 int buflen; 2546 __be32 *p = cd->buffer; 2547 __be32 *cookiep; 2548 __be32 nfserr = nfserr_toosmall; 2549 2550 /* In nfsv4, "." and ".." never make it onto the wire.. */ 2551 if (name && isdotent(name, namlen)) { 2552 cd->common.err = nfs_ok; 2553 return 0; 2554 } 2555 2556 if (cd->offset) 2557 xdr_encode_hyper(cd->offset, (u64) offset); 2558 2559 buflen = cd->buflen - 4 - XDR_QUADLEN(namlen); 2560 if (buflen < 0) 2561 goto fail; 2562 2563 *p++ = xdr_one; /* mark entry present */ 2564 cookiep = p; 2565 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */ 2566 p = xdr_encode_array(p, name, namlen); /* name length & name */ 2567 2568 nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, p, &buflen); 2569 switch (nfserr) { 2570 case nfs_ok: 2571 p += buflen; 2572 break; 2573 case nfserr_resource: 2574 nfserr = nfserr_toosmall; 2575 goto fail; 2576 case nfserr_noent: 2577 goto skip_entry; 2578 default: 2579 /* 2580 * If the client requested the RDATTR_ERROR attribute, 2581 * we stuff the error code into this attribute 2582 * and continue. If this attribute was not requested, 2583 * then in accordance with the spec, we fail the 2584 * entire READDIR operation(!) 2585 */ 2586 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)) 2587 goto fail; 2588 p = nfsd4_encode_rdattr_error(p, buflen, nfserr); 2589 if (p == NULL) { 2590 nfserr = nfserr_toosmall; 2591 goto fail; 2592 } 2593 } 2594 cd->buflen -= (p - cd->buffer); 2595 cd->buffer = p; 2596 cd->offset = cookiep; 2597 skip_entry: 2598 cd->common.err = nfs_ok; 2599 return 0; 2600 fail: 2601 cd->common.err = nfserr; 2602 return -EINVAL; 2603 } 2604 2605 static void 2606 nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid) 2607 { 2608 __be32 *p; 2609 2610 RESERVE_SPACE(sizeof(stateid_t)); 2611 WRITE32(sid->si_generation); 2612 WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 2613 ADJUST_ARGS(); 2614 } 2615 2616 static __be32 2617 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access) 2618 { 2619 __be32 *p; 2620 2621 if (!nfserr) { 2622 RESERVE_SPACE(8); 2623 WRITE32(access->ac_supported); 2624 WRITE32(access->ac_resp_access); 2625 ADJUST_ARGS(); 2626 } 2627 return nfserr; 2628 } 2629 2630 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts) 2631 { 2632 __be32 *p; 2633 2634 if (!nfserr) { 2635 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8); 2636 WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 2637 WRITE32(bcts->dir); 2638 /* XXX: ? */ 2639 WRITE32(0); 2640 ADJUST_ARGS(); 2641 } 2642 return nfserr; 2643 } 2644 2645 static __be32 2646 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close) 2647 { 2648 ENCODE_SEQID_OP_HEAD; 2649 2650 if (!nfserr) 2651 nfsd4_encode_stateid(resp, &close->cl_stateid); 2652 2653 encode_seqid_op_tail(resp, save, nfserr); 2654 return nfserr; 2655 } 2656 2657 2658 static __be32 2659 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit) 2660 { 2661 __be32 *p; 2662 2663 if (!nfserr) { 2664 RESERVE_SPACE(8); 2665 WRITEMEM(commit->co_verf.data, 8); 2666 ADJUST_ARGS(); 2667 } 2668 return nfserr; 2669 } 2670 2671 static __be32 2672 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create) 2673 { 2674 __be32 *p; 2675 2676 if (!nfserr) { 2677 RESERVE_SPACE(32); 2678 write_cinfo(&p, &create->cr_cinfo); 2679 WRITE32(2); 2680 WRITE32(create->cr_bmval[0]); 2681 WRITE32(create->cr_bmval[1]); 2682 ADJUST_ARGS(); 2683 } 2684 return nfserr; 2685 } 2686 2687 static __be32 2688 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr) 2689 { 2690 struct svc_fh *fhp = getattr->ga_fhp; 2691 int buflen; 2692 2693 if (nfserr) 2694 return nfserr; 2695 2696 buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2); 2697 nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry, 2698 resp->p, &buflen, getattr->ga_bmval, 2699 resp->rqstp, 0); 2700 if (!nfserr) 2701 resp->p += buflen; 2702 return nfserr; 2703 } 2704 2705 static __be32 2706 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp) 2707 { 2708 struct svc_fh *fhp = *fhpp; 2709 unsigned int len; 2710 __be32 *p; 2711 2712 if (!nfserr) { 2713 len = fhp->fh_handle.fh_size; 2714 RESERVE_SPACE(len + 4); 2715 WRITE32(len); 2716 WRITEMEM(&fhp->fh_handle.fh_base, len); 2717 ADJUST_ARGS(); 2718 } 2719 return nfserr; 2720 } 2721 2722 /* 2723 * Including all fields other than the name, a LOCK4denied structure requires 2724 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes. 2725 */ 2726 static void 2727 nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld) 2728 { 2729 struct xdr_netobj *conf = &ld->ld_owner; 2730 __be32 *p; 2731 2732 RESERVE_SPACE(32 + XDR_LEN(conf->len)); 2733 WRITE64(ld->ld_start); 2734 WRITE64(ld->ld_length); 2735 WRITE32(ld->ld_type); 2736 if (conf->len) { 2737 WRITEMEM(&ld->ld_clientid, 8); 2738 WRITE32(conf->len); 2739 WRITEMEM(conf->data, conf->len); 2740 kfree(conf->data); 2741 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */ 2742 WRITE64((u64)0); /* clientid */ 2743 WRITE32(0); /* length of owner name */ 2744 } 2745 ADJUST_ARGS(); 2746 } 2747 2748 static __be32 2749 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock) 2750 { 2751 ENCODE_SEQID_OP_HEAD; 2752 2753 if (!nfserr) 2754 nfsd4_encode_stateid(resp, &lock->lk_resp_stateid); 2755 else if (nfserr == nfserr_denied) 2756 nfsd4_encode_lock_denied(resp, &lock->lk_denied); 2757 2758 encode_seqid_op_tail(resp, save, nfserr); 2759 return nfserr; 2760 } 2761 2762 static __be32 2763 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt) 2764 { 2765 if (nfserr == nfserr_denied) 2766 nfsd4_encode_lock_denied(resp, &lockt->lt_denied); 2767 return nfserr; 2768 } 2769 2770 static __be32 2771 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku) 2772 { 2773 ENCODE_SEQID_OP_HEAD; 2774 2775 if (!nfserr) 2776 nfsd4_encode_stateid(resp, &locku->lu_stateid); 2777 2778 encode_seqid_op_tail(resp, save, nfserr); 2779 return nfserr; 2780 } 2781 2782 2783 static __be32 2784 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link) 2785 { 2786 __be32 *p; 2787 2788 if (!nfserr) { 2789 RESERVE_SPACE(20); 2790 write_cinfo(&p, &link->li_cinfo); 2791 ADJUST_ARGS(); 2792 } 2793 return nfserr; 2794 } 2795 2796 2797 static __be32 2798 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open) 2799 { 2800 __be32 *p; 2801 ENCODE_SEQID_OP_HEAD; 2802 2803 if (nfserr) 2804 goto out; 2805 2806 nfsd4_encode_stateid(resp, &open->op_stateid); 2807 RESERVE_SPACE(40); 2808 write_cinfo(&p, &open->op_cinfo); 2809 WRITE32(open->op_rflags); 2810 WRITE32(2); 2811 WRITE32(open->op_bmval[0]); 2812 WRITE32(open->op_bmval[1]); 2813 WRITE32(open->op_delegate_type); 2814 ADJUST_ARGS(); 2815 2816 switch (open->op_delegate_type) { 2817 case NFS4_OPEN_DELEGATE_NONE: 2818 break; 2819 case NFS4_OPEN_DELEGATE_READ: 2820 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2821 RESERVE_SPACE(20); 2822 WRITE32(open->op_recall); 2823 2824 /* 2825 * TODO: ACE's in delegations 2826 */ 2827 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2828 WRITE32(0); 2829 WRITE32(0); 2830 WRITE32(0); /* XXX: is NULL principal ok? */ 2831 ADJUST_ARGS(); 2832 break; 2833 case NFS4_OPEN_DELEGATE_WRITE: 2834 nfsd4_encode_stateid(resp, &open->op_delegate_stateid); 2835 RESERVE_SPACE(32); 2836 WRITE32(0); 2837 2838 /* 2839 * TODO: space_limit's in delegations 2840 */ 2841 WRITE32(NFS4_LIMIT_SIZE); 2842 WRITE32(~(u32)0); 2843 WRITE32(~(u32)0); 2844 2845 /* 2846 * TODO: ACE's in delegations 2847 */ 2848 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 2849 WRITE32(0); 2850 WRITE32(0); 2851 WRITE32(0); /* XXX: is NULL principal ok? */ 2852 ADJUST_ARGS(); 2853 break; 2854 default: 2855 BUG(); 2856 } 2857 /* XXX save filehandle here */ 2858 out: 2859 encode_seqid_op_tail(resp, save, nfserr); 2860 return nfserr; 2861 } 2862 2863 static __be32 2864 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc) 2865 { 2866 ENCODE_SEQID_OP_HEAD; 2867 2868 if (!nfserr) 2869 nfsd4_encode_stateid(resp, &oc->oc_resp_stateid); 2870 2871 encode_seqid_op_tail(resp, save, nfserr); 2872 return nfserr; 2873 } 2874 2875 static __be32 2876 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od) 2877 { 2878 ENCODE_SEQID_OP_HEAD; 2879 2880 if (!nfserr) 2881 nfsd4_encode_stateid(resp, &od->od_stateid); 2882 2883 encode_seqid_op_tail(resp, save, nfserr); 2884 return nfserr; 2885 } 2886 2887 static __be32 2888 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr, 2889 struct nfsd4_read *read) 2890 { 2891 u32 eof; 2892 int v, pn; 2893 unsigned long maxcount; 2894 long len; 2895 __be32 *p; 2896 2897 if (nfserr) 2898 return nfserr; 2899 if (resp->xbuf->page_len) 2900 return nfserr_resource; 2901 2902 RESERVE_SPACE(8); /* eof flag and byte count */ 2903 2904 maxcount = svc_max_payload(resp->rqstp); 2905 if (maxcount > read->rd_length) 2906 maxcount = read->rd_length; 2907 2908 len = maxcount; 2909 v = 0; 2910 while (len > 0) { 2911 pn = resp->rqstp->rq_resused++; 2912 resp->rqstp->rq_vec[v].iov_base = 2913 page_address(resp->rqstp->rq_respages[pn]); 2914 resp->rqstp->rq_vec[v].iov_len = 2915 len < PAGE_SIZE ? len : PAGE_SIZE; 2916 v++; 2917 len -= PAGE_SIZE; 2918 } 2919 read->rd_vlen = v; 2920 2921 nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp, 2922 read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen, 2923 &maxcount); 2924 2925 if (nfserr) 2926 return nfserr; 2927 eof = (read->rd_offset + maxcount >= 2928 read->rd_fhp->fh_dentry->d_inode->i_size); 2929 2930 WRITE32(eof); 2931 WRITE32(maxcount); 2932 ADJUST_ARGS(); 2933 resp->xbuf->head[0].iov_len = (char*)p 2934 - (char*)resp->xbuf->head[0].iov_base; 2935 resp->xbuf->page_len = maxcount; 2936 2937 /* Use rest of head for padding and remaining ops: */ 2938 resp->xbuf->tail[0].iov_base = p; 2939 resp->xbuf->tail[0].iov_len = 0; 2940 if (maxcount&3) { 2941 RESERVE_SPACE(4); 2942 WRITE32(0); 2943 resp->xbuf->tail[0].iov_base += maxcount&3; 2944 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 2945 ADJUST_ARGS(); 2946 } 2947 return 0; 2948 } 2949 2950 static __be32 2951 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink) 2952 { 2953 int maxcount; 2954 char *page; 2955 __be32 *p; 2956 2957 if (nfserr) 2958 return nfserr; 2959 if (resp->xbuf->page_len) 2960 return nfserr_resource; 2961 2962 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]); 2963 2964 maxcount = PAGE_SIZE; 2965 RESERVE_SPACE(4); 2966 2967 /* 2968 * XXX: By default, the ->readlink() VFS op will truncate symlinks 2969 * if they would overflow the buffer. Is this kosher in NFSv4? If 2970 * not, one easy fix is: if ->readlink() precisely fills the buffer, 2971 * assume that truncation occurred, and return NFS4ERR_RESOURCE. 2972 */ 2973 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount); 2974 if (nfserr == nfserr_isdir) 2975 return nfserr_inval; 2976 if (nfserr) 2977 return nfserr; 2978 2979 WRITE32(maxcount); 2980 ADJUST_ARGS(); 2981 resp->xbuf->head[0].iov_len = (char*)p 2982 - (char*)resp->xbuf->head[0].iov_base; 2983 resp->xbuf->page_len = maxcount; 2984 2985 /* Use rest of head for padding and remaining ops: */ 2986 resp->xbuf->tail[0].iov_base = p; 2987 resp->xbuf->tail[0].iov_len = 0; 2988 if (maxcount&3) { 2989 RESERVE_SPACE(4); 2990 WRITE32(0); 2991 resp->xbuf->tail[0].iov_base += maxcount&3; 2992 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3); 2993 ADJUST_ARGS(); 2994 } 2995 return 0; 2996 } 2997 2998 static __be32 2999 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir) 3000 { 3001 int maxcount; 3002 loff_t offset; 3003 __be32 *page, *savep, *tailbase; 3004 __be32 *p; 3005 3006 if (nfserr) 3007 return nfserr; 3008 if (resp->xbuf->page_len) 3009 return nfserr_resource; 3010 3011 RESERVE_SPACE(8); /* verifier */ 3012 savep = p; 3013 3014 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */ 3015 WRITE32(0); 3016 WRITE32(0); 3017 ADJUST_ARGS(); 3018 resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base; 3019 tailbase = p; 3020 3021 maxcount = PAGE_SIZE; 3022 if (maxcount > readdir->rd_maxcount) 3023 maxcount = readdir->rd_maxcount; 3024 3025 /* 3026 * Convert from bytes to words, account for the two words already 3027 * written, make sure to leave two words at the end for the next 3028 * pointer and eof field. 3029 */ 3030 maxcount = (maxcount >> 2) - 4; 3031 if (maxcount < 0) { 3032 nfserr = nfserr_toosmall; 3033 goto err_no_verf; 3034 } 3035 3036 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]); 3037 readdir->common.err = 0; 3038 readdir->buflen = maxcount; 3039 readdir->buffer = page; 3040 readdir->offset = NULL; 3041 3042 offset = readdir->rd_cookie; 3043 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, 3044 &offset, 3045 &readdir->common, nfsd4_encode_dirent); 3046 if (nfserr == nfs_ok && 3047 readdir->common.err == nfserr_toosmall && 3048 readdir->buffer == page) 3049 nfserr = nfserr_toosmall; 3050 if (nfserr) 3051 goto err_no_verf; 3052 3053 if (readdir->offset) 3054 xdr_encode_hyper(readdir->offset, offset); 3055 3056 p = readdir->buffer; 3057 *p++ = 0; /* no more entries */ 3058 *p++ = htonl(readdir->common.err == nfserr_eof); 3059 resp->xbuf->page_len = ((char*)p) - (char*)page_address( 3060 resp->rqstp->rq_respages[resp->rqstp->rq_resused-1]); 3061 3062 /* Use rest of head for padding and remaining ops: */ 3063 resp->xbuf->tail[0].iov_base = tailbase; 3064 resp->xbuf->tail[0].iov_len = 0; 3065 resp->p = resp->xbuf->tail[0].iov_base; 3066 resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4; 3067 3068 return 0; 3069 err_no_verf: 3070 p = savep; 3071 ADJUST_ARGS(); 3072 return nfserr; 3073 } 3074 3075 static __be32 3076 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove) 3077 { 3078 __be32 *p; 3079 3080 if (!nfserr) { 3081 RESERVE_SPACE(20); 3082 write_cinfo(&p, &remove->rm_cinfo); 3083 ADJUST_ARGS(); 3084 } 3085 return nfserr; 3086 } 3087 3088 static __be32 3089 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename) 3090 { 3091 __be32 *p; 3092 3093 if (!nfserr) { 3094 RESERVE_SPACE(40); 3095 write_cinfo(&p, &rename->rn_sinfo); 3096 write_cinfo(&p, &rename->rn_tinfo); 3097 ADJUST_ARGS(); 3098 } 3099 return nfserr; 3100 } 3101 3102 static __be32 3103 nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp, 3104 __be32 nfserr,struct svc_export *exp) 3105 { 3106 int i = 0; 3107 u32 nflavs; 3108 struct exp_flavor_info *flavs; 3109 struct exp_flavor_info def_flavs[2]; 3110 __be32 *p; 3111 3112 if (nfserr) 3113 goto out; 3114 if (exp->ex_nflavors) { 3115 flavs = exp->ex_flavors; 3116 nflavs = exp->ex_nflavors; 3117 } else { /* Handling of some defaults in absence of real secinfo: */ 3118 flavs = def_flavs; 3119 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) { 3120 nflavs = 2; 3121 flavs[0].pseudoflavor = RPC_AUTH_UNIX; 3122 flavs[1].pseudoflavor = RPC_AUTH_NULL; 3123 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) { 3124 nflavs = 1; 3125 flavs[0].pseudoflavor 3126 = svcauth_gss_flavor(exp->ex_client); 3127 } else { 3128 nflavs = 1; 3129 flavs[0].pseudoflavor 3130 = exp->ex_client->flavour->flavour; 3131 } 3132 } 3133 3134 RESERVE_SPACE(4); 3135 WRITE32(nflavs); 3136 ADJUST_ARGS(); 3137 for (i = 0; i < nflavs; i++) { 3138 u32 flav = flavs[i].pseudoflavor; 3139 struct gss_api_mech *gm = gss_mech_get_by_pseudoflavor(flav); 3140 3141 if (gm) { 3142 RESERVE_SPACE(4); 3143 WRITE32(RPC_AUTH_GSS); 3144 ADJUST_ARGS(); 3145 RESERVE_SPACE(4 + gm->gm_oid.len); 3146 WRITE32(gm->gm_oid.len); 3147 WRITEMEM(gm->gm_oid.data, gm->gm_oid.len); 3148 ADJUST_ARGS(); 3149 RESERVE_SPACE(4); 3150 WRITE32(0); /* qop */ 3151 ADJUST_ARGS(); 3152 RESERVE_SPACE(4); 3153 WRITE32(gss_pseudoflavor_to_service(gm, flav)); 3154 ADJUST_ARGS(); 3155 gss_mech_put(gm); 3156 } else { 3157 RESERVE_SPACE(4); 3158 WRITE32(flav); 3159 ADJUST_ARGS(); 3160 } 3161 } 3162 out: 3163 if (exp) 3164 exp_put(exp); 3165 return nfserr; 3166 } 3167 3168 static __be32 3169 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 3170 struct nfsd4_secinfo *secinfo) 3171 { 3172 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp); 3173 } 3174 3175 static __be32 3176 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr, 3177 struct nfsd4_secinfo_no_name *secinfo) 3178 { 3179 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp); 3180 } 3181 3182 /* 3183 * The SETATTR encode routine is special -- it always encodes a bitmap, 3184 * regardless of the error status. 3185 */ 3186 static __be32 3187 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr) 3188 { 3189 __be32 *p; 3190 3191 RESERVE_SPACE(12); 3192 if (nfserr) { 3193 WRITE32(2); 3194 WRITE32(0); 3195 WRITE32(0); 3196 } 3197 else { 3198 WRITE32(2); 3199 WRITE32(setattr->sa_bmval[0]); 3200 WRITE32(setattr->sa_bmval[1]); 3201 } 3202 ADJUST_ARGS(); 3203 return nfserr; 3204 } 3205 3206 static __be32 3207 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd) 3208 { 3209 __be32 *p; 3210 3211 if (!nfserr) { 3212 RESERVE_SPACE(8 + sizeof(nfs4_verifier)); 3213 WRITEMEM(&scd->se_clientid, 8); 3214 WRITEMEM(&scd->se_confirm, sizeof(nfs4_verifier)); 3215 ADJUST_ARGS(); 3216 } 3217 else if (nfserr == nfserr_clid_inuse) { 3218 RESERVE_SPACE(8); 3219 WRITE32(0); 3220 WRITE32(0); 3221 ADJUST_ARGS(); 3222 } 3223 return nfserr; 3224 } 3225 3226 static __be32 3227 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write) 3228 { 3229 __be32 *p; 3230 3231 if (!nfserr) { 3232 RESERVE_SPACE(16); 3233 WRITE32(write->wr_bytes_written); 3234 WRITE32(write->wr_how_written); 3235 WRITEMEM(write->wr_verifier.data, 8); 3236 ADJUST_ARGS(); 3237 } 3238 return nfserr; 3239 } 3240 3241 static __be32 3242 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, int nfserr, 3243 struct nfsd4_exchange_id *exid) 3244 { 3245 __be32 *p; 3246 char *major_id; 3247 char *server_scope; 3248 int major_id_sz; 3249 int server_scope_sz; 3250 uint64_t minor_id = 0; 3251 3252 if (nfserr) 3253 return nfserr; 3254 3255 major_id = utsname()->nodename; 3256 major_id_sz = strlen(major_id); 3257 server_scope = utsname()->nodename; 3258 server_scope_sz = strlen(server_scope); 3259 3260 RESERVE_SPACE( 3261 8 /* eir_clientid */ + 3262 4 /* eir_sequenceid */ + 3263 4 /* eir_flags */ + 3264 4 /* spr_how (SP4_NONE) */ + 3265 8 /* so_minor_id */ + 3266 4 /* so_major_id.len */ + 3267 (XDR_QUADLEN(major_id_sz) * 4) + 3268 4 /* eir_server_scope.len */ + 3269 (XDR_QUADLEN(server_scope_sz) * 4) + 3270 4 /* eir_server_impl_id.count (0) */); 3271 3272 WRITEMEM(&exid->clientid, 8); 3273 WRITE32(exid->seqid); 3274 WRITE32(exid->flags); 3275 3276 /* state_protect4_r. Currently only support SP4_NONE */ 3277 BUG_ON(exid->spa_how != SP4_NONE); 3278 WRITE32(exid->spa_how); 3279 3280 /* The server_owner struct */ 3281 WRITE64(minor_id); /* Minor id */ 3282 /* major id */ 3283 WRITE32(major_id_sz); 3284 WRITEMEM(major_id, major_id_sz); 3285 3286 /* Server scope */ 3287 WRITE32(server_scope_sz); 3288 WRITEMEM(server_scope, server_scope_sz); 3289 3290 /* Implementation id */ 3291 WRITE32(0); /* zero length nfs_impl_id4 array */ 3292 ADJUST_ARGS(); 3293 return 0; 3294 } 3295 3296 static __be32 3297 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, int nfserr, 3298 struct nfsd4_create_session *sess) 3299 { 3300 __be32 *p; 3301 3302 if (nfserr) 3303 return nfserr; 3304 3305 RESERVE_SPACE(24); 3306 WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3307 WRITE32(sess->seqid); 3308 WRITE32(sess->flags); 3309 ADJUST_ARGS(); 3310 3311 RESERVE_SPACE(28); 3312 WRITE32(0); /* headerpadsz */ 3313 WRITE32(sess->fore_channel.maxreq_sz); 3314 WRITE32(sess->fore_channel.maxresp_sz); 3315 WRITE32(sess->fore_channel.maxresp_cached); 3316 WRITE32(sess->fore_channel.maxops); 3317 WRITE32(sess->fore_channel.maxreqs); 3318 WRITE32(sess->fore_channel.nr_rdma_attrs); 3319 ADJUST_ARGS(); 3320 3321 if (sess->fore_channel.nr_rdma_attrs) { 3322 RESERVE_SPACE(4); 3323 WRITE32(sess->fore_channel.rdma_attrs); 3324 ADJUST_ARGS(); 3325 } 3326 3327 RESERVE_SPACE(28); 3328 WRITE32(0); /* headerpadsz */ 3329 WRITE32(sess->back_channel.maxreq_sz); 3330 WRITE32(sess->back_channel.maxresp_sz); 3331 WRITE32(sess->back_channel.maxresp_cached); 3332 WRITE32(sess->back_channel.maxops); 3333 WRITE32(sess->back_channel.maxreqs); 3334 WRITE32(sess->back_channel.nr_rdma_attrs); 3335 ADJUST_ARGS(); 3336 3337 if (sess->back_channel.nr_rdma_attrs) { 3338 RESERVE_SPACE(4); 3339 WRITE32(sess->back_channel.rdma_attrs); 3340 ADJUST_ARGS(); 3341 } 3342 return 0; 3343 } 3344 3345 static __be32 3346 nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, int nfserr, 3347 struct nfsd4_destroy_session *destroy_session) 3348 { 3349 return nfserr; 3350 } 3351 3352 static __be32 3353 nfsd4_encode_free_stateid(struct nfsd4_compoundres *resp, int nfserr, 3354 struct nfsd4_free_stateid *free_stateid) 3355 { 3356 __be32 *p; 3357 3358 if (nfserr) 3359 return nfserr; 3360 3361 RESERVE_SPACE(4); 3362 WRITE32(nfserr); 3363 ADJUST_ARGS(); 3364 return nfserr; 3365 } 3366 3367 static __be32 3368 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, int nfserr, 3369 struct nfsd4_sequence *seq) 3370 { 3371 __be32 *p; 3372 3373 if (nfserr) 3374 return nfserr; 3375 3376 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20); 3377 WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 3378 WRITE32(seq->seqid); 3379 WRITE32(seq->slotid); 3380 /* Note slotid's are numbered from zero: */ 3381 WRITE32(seq->maxslots - 1); /* sr_highest_slotid */ 3382 WRITE32(seq->maxslots - 1); /* sr_target_highest_slotid */ 3383 WRITE32(seq->status_flags); 3384 3385 ADJUST_ARGS(); 3386 resp->cstate.datap = p; /* DRC cache data pointer */ 3387 return 0; 3388 } 3389 3390 __be32 3391 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, int nfserr, 3392 struct nfsd4_test_stateid *test_stateid) 3393 { 3394 struct nfsd4_compoundargs *argp; 3395 struct nfs4_client *cl = resp->cstate.session->se_client; 3396 stateid_t si; 3397 __be32 *p; 3398 int i; 3399 int valid; 3400 3401 restore_buf(test_stateid->ts_saved_args, &test_stateid->ts_savedp); 3402 argp = test_stateid->ts_saved_args; 3403 3404 RESERVE_SPACE(4); 3405 *p++ = htonl(test_stateid->ts_num_ids); 3406 resp->p = p; 3407 3408 nfs4_lock_state(); 3409 for (i = 0; i < test_stateid->ts_num_ids; i++) { 3410 nfsd4_decode_stateid(argp, &si); 3411 valid = nfs4_validate_stateid(cl, &si); 3412 RESERVE_SPACE(4); 3413 *p++ = htonl(valid); 3414 resp->p = p; 3415 } 3416 nfs4_unlock_state(); 3417 3418 return nfserr; 3419 } 3420 3421 static __be32 3422 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p) 3423 { 3424 return nfserr; 3425 } 3426 3427 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *); 3428 3429 /* 3430 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1 3431 * since we don't need to filter out obsolete ops as this is 3432 * done in the decoding phase. 3433 */ 3434 static nfsd4_enc nfsd4_enc_ops[] = { 3435 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access, 3436 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close, 3437 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit, 3438 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create, 3439 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop, 3440 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3441 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr, 3442 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh, 3443 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link, 3444 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock, 3445 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt, 3446 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku, 3447 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop, 3448 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop, 3449 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3450 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open, 3451 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop, 3452 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm, 3453 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade, 3454 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop, 3455 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop, 3456 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop, 3457 [OP_READ] = (nfsd4_enc)nfsd4_encode_read, 3458 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir, 3459 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink, 3460 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove, 3461 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename, 3462 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop, 3463 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop, 3464 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop, 3465 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo, 3466 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr, 3467 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid, 3468 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop, 3469 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop, 3470 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write, 3471 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop, 3472 3473 /* NFSv4.1 operations */ 3474 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop, 3475 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session, 3476 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id, 3477 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session, 3478 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_destroy_session, 3479 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_free_stateid, 3480 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3481 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop, 3482 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 3483 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop, 3484 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop, 3485 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop, 3486 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name, 3487 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence, 3488 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop, 3489 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid, 3490 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 3491 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop, 3492 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop, 3493 }; 3494 3495 /* 3496 * Calculate the total amount of memory that the compound response has taken 3497 * after encoding the current operation with pad. 3498 * 3499 * pad: if operation is non-idempotent, pad was calculate by op_rsize_bop() 3500 * which was specified at nfsd4_operation, else pad is zero. 3501 * 3502 * Compare this length to the session se_fmaxresp_sz and se_fmaxresp_cached. 3503 * 3504 * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so 3505 * will be at least a page and will therefore hold the xdr_buf head. 3506 */ 3507 int nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 pad) 3508 { 3509 struct xdr_buf *xb = &resp->rqstp->rq_res; 3510 struct nfsd4_session *session = NULL; 3511 struct nfsd4_slot *slot = resp->cstate.slot; 3512 u32 length, tlen = 0; 3513 3514 if (!nfsd4_has_session(&resp->cstate)) 3515 return 0; 3516 3517 session = resp->cstate.session; 3518 if (session == NULL) 3519 return 0; 3520 3521 if (xb->page_len == 0) { 3522 length = (char *)resp->p - (char *)xb->head[0].iov_base + pad; 3523 } else { 3524 if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0) 3525 tlen = (char *)resp->p - (char *)xb->tail[0].iov_base; 3526 3527 length = xb->head[0].iov_len + xb->page_len + tlen + pad; 3528 } 3529 dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__, 3530 length, xb->page_len, tlen, pad); 3531 3532 if (length > session->se_fchannel.maxresp_sz) 3533 return nfserr_rep_too_big; 3534 3535 if (slot->sl_cachethis == 1 && 3536 length > session->se_fchannel.maxresp_cached) 3537 return nfserr_rep_too_big_to_cache; 3538 3539 return 0; 3540 } 3541 3542 void 3543 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3544 { 3545 __be32 *statp; 3546 __be32 *p; 3547 3548 RESERVE_SPACE(8); 3549 WRITE32(op->opnum); 3550 statp = p++; /* to be backfilled at the end */ 3551 ADJUST_ARGS(); 3552 3553 if (op->opnum == OP_ILLEGAL) 3554 goto status; 3555 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) || 3556 !nfsd4_enc_ops[op->opnum]); 3557 op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u); 3558 /* nfsd4_check_drc_limit guarantees enough room for error status */ 3559 if (!op->status) 3560 op->status = nfsd4_check_resp_size(resp, 0); 3561 status: 3562 /* 3563 * Note: We write the status directly, instead of using WRITE32(), 3564 * since it is already in network byte order. 3565 */ 3566 *statp = op->status; 3567 } 3568 3569 /* 3570 * Encode the reply stored in the stateowner reply cache 3571 * 3572 * XDR note: do not encode rp->rp_buflen: the buffer contains the 3573 * previously sent already encoded operation. 3574 * 3575 * called with nfs4_lock_state() held 3576 */ 3577 void 3578 nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 3579 { 3580 __be32 *p; 3581 struct nfs4_replay *rp = op->replay; 3582 3583 BUG_ON(!rp); 3584 3585 RESERVE_SPACE(8); 3586 WRITE32(op->opnum); 3587 *p++ = rp->rp_status; /* already xdr'ed */ 3588 ADJUST_ARGS(); 3589 3590 RESERVE_SPACE(rp->rp_buflen); 3591 WRITEMEM(rp->rp_buf, rp->rp_buflen); 3592 ADJUST_ARGS(); 3593 } 3594 3595 int 3596 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy) 3597 { 3598 return xdr_ressize_check(rqstp, p); 3599 } 3600 3601 int nfsd4_release_compoundargs(void *rq, __be32 *p, void *resp) 3602 { 3603 struct svc_rqst *rqstp = rq; 3604 struct nfsd4_compoundargs *args = rqstp->rq_argp; 3605 3606 if (args->ops != args->iops) { 3607 kfree(args->ops); 3608 args->ops = args->iops; 3609 } 3610 kfree(args->tmpp); 3611 args->tmpp = NULL; 3612 while (args->to_free) { 3613 struct tmpbuf *tb = args->to_free; 3614 args->to_free = tb->next; 3615 tb->release(tb->buf); 3616 kfree(tb); 3617 } 3618 return 1; 3619 } 3620 3621 int 3622 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args) 3623 { 3624 args->p = p; 3625 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len; 3626 args->pagelist = rqstp->rq_arg.pages; 3627 args->pagelen = rqstp->rq_arg.page_len; 3628 args->tmpp = NULL; 3629 args->to_free = NULL; 3630 args->ops = args->iops; 3631 args->rqstp = rqstp; 3632 3633 return !nfsd4_decode_compound(args); 3634 } 3635 3636 int 3637 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp) 3638 { 3639 /* 3640 * All that remains is to write the tag and operation count... 3641 */ 3642 struct nfsd4_compound_state *cs = &resp->cstate; 3643 struct kvec *iov; 3644 p = resp->tagp; 3645 *p++ = htonl(resp->taglen); 3646 memcpy(p, resp->tag, resp->taglen); 3647 p += XDR_QUADLEN(resp->taglen); 3648 *p++ = htonl(resp->opcnt); 3649 3650 if (rqstp->rq_res.page_len) 3651 iov = &rqstp->rq_res.tail[0]; 3652 else 3653 iov = &rqstp->rq_res.head[0]; 3654 iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base; 3655 BUG_ON(iov->iov_len > PAGE_SIZE); 3656 if (nfsd4_has_session(cs)) { 3657 if (cs->status != nfserr_replay_cache) { 3658 nfsd4_store_cache_entry(resp); 3659 dprintk("%s: SET SLOT STATE TO AVAILABLE\n", __func__); 3660 cs->slot->sl_inuse = false; 3661 } 3662 /* Renew the clientid on success and on replay */ 3663 release_session_client(cs->session); 3664 nfsd4_put_session(cs->session); 3665 } 3666 return 1; 3667 } 3668 3669 /* 3670 * Local variables: 3671 * c-basic-offset: 8 3672 * End: 3673 */ 3674