xref: /linux/fs/nfsd/nfs4xdr.c (revision a53f48b6327c12437c9f429da2283e526eda2362)
1 /*
2  *  Server-side XDR for NFSv4
3  *
4  *  Copyright (c) 2002 The Regents of the University of Michigan.
5  *  All rights reserved.
6  *
7  *  Kendrick Smith <kmsmith@umich.edu>
8  *  Andy Adamson   <andros@umich.edu>
9  *
10  *  Redistribution and use in source and binary forms, with or without
11  *  modification, are permitted provided that the following conditions
12  *  are met:
13  *
14  *  1. Redistributions of source code must retain the above copyright
15  *     notice, this list of conditions and the following disclaimer.
16  *  2. Redistributions in binary form must reproduce the above copyright
17  *     notice, this list of conditions and the following disclaimer in the
18  *     documentation and/or other materials provided with the distribution.
19  *  3. Neither the name of the University nor the names of its
20  *     contributors may be used to endorse or promote products derived
21  *     from this software without specific prior written permission.
22  *
23  *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24  *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25  *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26  *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27  *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28  *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29  *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30  *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31  *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32  *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33  *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34  */
35 
36 #include <linux/file.h>
37 #include <linux/slab.h>
38 #include <linux/namei.h>
39 #include <linux/statfs.h>
40 #include <linux/utsname.h>
41 #include <linux/pagemap.h>
42 #include <linux/sunrpc/svcauth_gss.h>
43 #include <linux/sunrpc/addr.h>
44 #include <linux/xattr.h>
45 #include <linux/vmalloc.h>
46 
47 #include <uapi/linux/xattr.h>
48 
49 #include "idmap.h"
50 #include "acl.h"
51 #include "xdr4.h"
52 #include "vfs.h"
53 #include "state.h"
54 #include "cache.h"
55 #include "netns.h"
56 #include "pnfs.h"
57 #include "filecache.h"
58 
59 #include "trace.h"
60 
61 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
62 #include <linux/security.h>
63 #endif
64 
65 
66 #define NFSDDBG_FACILITY		NFSDDBG_XDR
67 
68 const u32 nfsd_suppattrs[3][3] = {
69 	{NFSD4_SUPPORTED_ATTRS_WORD0,
70 	 NFSD4_SUPPORTED_ATTRS_WORD1,
71 	 NFSD4_SUPPORTED_ATTRS_WORD2},
72 
73 	{NFSD4_1_SUPPORTED_ATTRS_WORD0,
74 	 NFSD4_1_SUPPORTED_ATTRS_WORD1,
75 	 NFSD4_1_SUPPORTED_ATTRS_WORD2},
76 
77 	{NFSD4_1_SUPPORTED_ATTRS_WORD0,
78 	 NFSD4_1_SUPPORTED_ATTRS_WORD1,
79 	 NFSD4_2_SUPPORTED_ATTRS_WORD2},
80 };
81 
82 /*
83  * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
84  * directory in order to indicate to the client that a filesystem boundary is present
85  * We use a fixed fsid for a referral
86  */
87 #define NFS4_REFERRAL_FSID_MAJOR	0x8000000ULL
88 #define NFS4_REFERRAL_FSID_MINOR	0x8000000ULL
89 
90 static __be32
91 check_filename(char *str, int len)
92 {
93 	int i;
94 
95 	if (len == 0)
96 		return nfserr_inval;
97 	if (len > NFS4_MAXNAMLEN)
98 		return nfserr_nametoolong;
99 	if (isdotent(str, len))
100 		return nfserr_badname;
101 	for (i = 0; i < len; i++)
102 		if (str[i] == '/')
103 			return nfserr_badname;
104 	return 0;
105 }
106 
107 static int zero_clientid(clientid_t *clid)
108 {
109 	return (clid->cl_boot == 0) && (clid->cl_id == 0);
110 }
111 
112 /**
113  * svcxdr_tmpalloc - allocate memory to be freed after compound processing
114  * @argp: NFSv4 compound argument structure
115  * @len: length of buffer to allocate
116  *
117  * Allocates a buffer of size @len to be freed when processing the compound
118  * operation described in @argp finishes.
119  */
120 static void *
121 svcxdr_tmpalloc(struct nfsd4_compoundargs *argp, size_t len)
122 {
123 	struct svcxdr_tmpbuf *tb;
124 
125 	tb = kmalloc(struct_size(tb, buf, len), GFP_KERNEL);
126 	if (!tb)
127 		return NULL;
128 	tb->next = argp->to_free;
129 	argp->to_free = tb;
130 	return tb->buf;
131 }
132 
133 /*
134  * For xdr strings that need to be passed to other kernel api's
135  * as null-terminated strings.
136  *
137  * Note null-terminating in place usually isn't safe since the
138  * buffer might end on a page boundary.
139  */
140 static char *
141 svcxdr_dupstr(struct nfsd4_compoundargs *argp, void *buf, size_t len)
142 {
143 	char *p = svcxdr_tmpalloc(argp, size_add(len, 1));
144 
145 	if (!p)
146 		return NULL;
147 	memcpy(p, buf, len);
148 	p[len] = '\0';
149 	return p;
150 }
151 
152 static void *
153 svcxdr_savemem(struct nfsd4_compoundargs *argp, __be32 *p, size_t len)
154 {
155 	__be32 *tmp;
156 
157 	/*
158 	 * The location of the decoded data item is stable,
159 	 * so @p is OK to use. This is the common case.
160 	 */
161 	if (p != argp->xdr->scratch.iov_base)
162 		return p;
163 
164 	tmp = svcxdr_tmpalloc(argp, len);
165 	if (!tmp)
166 		return NULL;
167 	memcpy(tmp, p, len);
168 	return tmp;
169 }
170 
171 /*
172  * NFSv4 basic data type decoders
173  */
174 
175 /*
176  * This helper handles variable-length opaques which belong to protocol
177  * elements that this implementation does not support.
178  */
179 static __be32
180 nfsd4_decode_ignored_string(struct nfsd4_compoundargs *argp, u32 maxlen)
181 {
182 	u32 len;
183 
184 	if (xdr_stream_decode_u32(argp->xdr, &len) < 0)
185 		return nfserr_bad_xdr;
186 	if (maxlen && len > maxlen)
187 		return nfserr_bad_xdr;
188 	if (!xdr_inline_decode(argp->xdr, len))
189 		return nfserr_bad_xdr;
190 
191 	return nfs_ok;
192 }
193 
194 static __be32
195 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o)
196 {
197 	__be32 *p;
198 	u32 len;
199 
200 	if (xdr_stream_decode_u32(argp->xdr, &len) < 0)
201 		return nfserr_bad_xdr;
202 	if (len == 0 || len > NFS4_OPAQUE_LIMIT)
203 		return nfserr_bad_xdr;
204 	p = xdr_inline_decode(argp->xdr, len);
205 	if (!p)
206 		return nfserr_bad_xdr;
207 	o->data = svcxdr_savemem(argp, p, len);
208 	if (!o->data)
209 		return nfserr_jukebox;
210 	o->len = len;
211 
212 	return nfs_ok;
213 }
214 
215 static __be32
216 nfsd4_decode_component4(struct nfsd4_compoundargs *argp, char **namp, u32 *lenp)
217 {
218 	__be32 *p, status;
219 
220 	if (xdr_stream_decode_u32(argp->xdr, lenp) < 0)
221 		return nfserr_bad_xdr;
222 	p = xdr_inline_decode(argp->xdr, *lenp);
223 	if (!p)
224 		return nfserr_bad_xdr;
225 	status = check_filename((char *)p, *lenp);
226 	if (status)
227 		return status;
228 	*namp = svcxdr_savemem(argp, p, *lenp);
229 	if (!*namp)
230 		return nfserr_jukebox;
231 
232 	return nfs_ok;
233 }
234 
235 static __be32
236 nfsd4_decode_nfstime4(struct nfsd4_compoundargs *argp, struct timespec64 *tv)
237 {
238 	__be32 *p;
239 
240 	p = xdr_inline_decode(argp->xdr, XDR_UNIT * 3);
241 	if (!p)
242 		return nfserr_bad_xdr;
243 	p = xdr_decode_hyper(p, &tv->tv_sec);
244 	tv->tv_nsec = be32_to_cpup(p++);
245 	if (tv->tv_nsec >= (u32)1000000000)
246 		return nfserr_inval;
247 	return nfs_ok;
248 }
249 
250 static __be32
251 nfsd4_decode_verifier4(struct nfsd4_compoundargs *argp, nfs4_verifier *verf)
252 {
253 	__be32 *p;
254 
255 	p = xdr_inline_decode(argp->xdr, NFS4_VERIFIER_SIZE);
256 	if (!p)
257 		return nfserr_bad_xdr;
258 	memcpy(verf->data, p, sizeof(verf->data));
259 	return nfs_ok;
260 }
261 
262 /**
263  * nfsd4_decode_bitmap4 - Decode an NFSv4 bitmap4
264  * @argp: NFSv4 compound argument structure
265  * @bmval: pointer to an array of u32's to decode into
266  * @bmlen: size of the @bmval array
267  *
268  * The server needs to return nfs_ok rather than nfserr_bad_xdr when
269  * encountering bitmaps containing bits it does not recognize. This
270  * includes bits in bitmap words past WORDn, where WORDn is the last
271  * bitmap WORD the implementation currently supports. Thus we are
272  * careful here to simply ignore bits in bitmap words that this
273  * implementation has yet to support explicitly.
274  *
275  * Return values:
276  *   %nfs_ok: @bmval populated successfully
277  *   %nfserr_bad_xdr: the encoded bitmap was invalid
278  */
279 static __be32
280 nfsd4_decode_bitmap4(struct nfsd4_compoundargs *argp, u32 *bmval, u32 bmlen)
281 {
282 	ssize_t status;
283 
284 	status = xdr_stream_decode_uint32_array(argp->xdr, bmval, bmlen);
285 	return status == -EBADMSG ? nfserr_bad_xdr : nfs_ok;
286 }
287 
288 static __be32
289 nfsd4_decode_nfsace4(struct nfsd4_compoundargs *argp, struct nfs4_ace *ace)
290 {
291 	__be32 *p, status;
292 	u32 length;
293 
294 	if (xdr_stream_decode_u32(argp->xdr, &ace->type) < 0)
295 		return nfserr_bad_xdr;
296 	if (xdr_stream_decode_u32(argp->xdr, &ace->flag) < 0)
297 		return nfserr_bad_xdr;
298 	if (xdr_stream_decode_u32(argp->xdr, &ace->access_mask) < 0)
299 		return nfserr_bad_xdr;
300 
301 	if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
302 		return nfserr_bad_xdr;
303 	p = xdr_inline_decode(argp->xdr, length);
304 	if (!p)
305 		return nfserr_bad_xdr;
306 	ace->whotype = nfs4_acl_get_whotype((char *)p, length);
307 	if (ace->whotype != NFS4_ACL_WHO_NAMED)
308 		status = nfs_ok;
309 	else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
310 		status = nfsd_map_name_to_gid(argp->rqstp,
311 				(char *)p, length, &ace->who_gid);
312 	else
313 		status = nfsd_map_name_to_uid(argp->rqstp,
314 				(char *)p, length, &ace->who_uid);
315 
316 	return status;
317 }
318 
319 /* A counted array of nfsace4's */
320 static noinline __be32
321 nfsd4_decode_acl(struct nfsd4_compoundargs *argp, struct nfs4_acl **acl)
322 {
323 	struct nfs4_ace *ace;
324 	__be32 status;
325 	u32 count;
326 
327 	if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
328 		return nfserr_bad_xdr;
329 
330 	if (count > xdr_stream_remaining(argp->xdr) / 20)
331 		/*
332 		 * Even with 4-byte names there wouldn't be
333 		 * space for that many aces; something fishy is
334 		 * going on:
335 		 */
336 		return nfserr_fbig;
337 
338 	*acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(count));
339 	if (*acl == NULL)
340 		return nfserr_jukebox;
341 
342 	(*acl)->naces = count;
343 	for (ace = (*acl)->aces; ace < (*acl)->aces + count; ace++) {
344 		status = nfsd4_decode_nfsace4(argp, ace);
345 		if (status)
346 			return status;
347 	}
348 
349 	return nfs_ok;
350 }
351 
352 static noinline __be32
353 nfsd4_decode_security_label(struct nfsd4_compoundargs *argp,
354 			    struct xdr_netobj *label)
355 {
356 	u32 lfs, pi, length;
357 	__be32 *p;
358 
359 	if (xdr_stream_decode_u32(argp->xdr, &lfs) < 0)
360 		return nfserr_bad_xdr;
361 	if (xdr_stream_decode_u32(argp->xdr, &pi) < 0)
362 		return nfserr_bad_xdr;
363 
364 	if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
365 		return nfserr_bad_xdr;
366 	if (length > NFS4_MAXLABELLEN)
367 		return nfserr_badlabel;
368 	p = xdr_inline_decode(argp->xdr, length);
369 	if (!p)
370 		return nfserr_bad_xdr;
371 	label->len = length;
372 	label->data = svcxdr_dupstr(argp, p, length);
373 	if (!label->data)
374 		return nfserr_jukebox;
375 
376 	return nfs_ok;
377 }
378 
379 static __be32
380 nfsd4_decode_fattr4(struct nfsd4_compoundargs *argp, u32 *bmval, u32 bmlen,
381 		    struct iattr *iattr, struct nfs4_acl **acl,
382 		    struct xdr_netobj *label, int *umask)
383 {
384 	unsigned int starting_pos;
385 	u32 attrlist4_count;
386 	__be32 *p, status;
387 
388 	iattr->ia_valid = 0;
389 	status = nfsd4_decode_bitmap4(argp, bmval, bmlen);
390 	if (status)
391 		return nfserr_bad_xdr;
392 
393 	if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
394 	    || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
395 	    || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) {
396 		if (nfsd_attrs_supported(argp->minorversion, bmval))
397 			return nfserr_inval;
398 		return nfserr_attrnotsupp;
399 	}
400 
401 	if (xdr_stream_decode_u32(argp->xdr, &attrlist4_count) < 0)
402 		return nfserr_bad_xdr;
403 	starting_pos = xdr_stream_pos(argp->xdr);
404 
405 	if (bmval[0] & FATTR4_WORD0_SIZE) {
406 		u64 size;
407 
408 		if (xdr_stream_decode_u64(argp->xdr, &size) < 0)
409 			return nfserr_bad_xdr;
410 		iattr->ia_size = size;
411 		iattr->ia_valid |= ATTR_SIZE;
412 	}
413 	if (bmval[0] & FATTR4_WORD0_ACL) {
414 		status = nfsd4_decode_acl(argp, acl);
415 		if (status)
416 			return status;
417 	} else
418 		*acl = NULL;
419 	if (bmval[1] & FATTR4_WORD1_MODE) {
420 		u32 mode;
421 
422 		if (xdr_stream_decode_u32(argp->xdr, &mode) < 0)
423 			return nfserr_bad_xdr;
424 		iattr->ia_mode = mode;
425 		iattr->ia_mode &= (S_IFMT | S_IALLUGO);
426 		iattr->ia_valid |= ATTR_MODE;
427 	}
428 	if (bmval[1] & FATTR4_WORD1_OWNER) {
429 		u32 length;
430 
431 		if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
432 			return nfserr_bad_xdr;
433 		p = xdr_inline_decode(argp->xdr, length);
434 		if (!p)
435 			return nfserr_bad_xdr;
436 		status = nfsd_map_name_to_uid(argp->rqstp, (char *)p, length,
437 					      &iattr->ia_uid);
438 		if (status)
439 			return status;
440 		iattr->ia_valid |= ATTR_UID;
441 	}
442 	if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
443 		u32 length;
444 
445 		if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
446 			return nfserr_bad_xdr;
447 		p = xdr_inline_decode(argp->xdr, length);
448 		if (!p)
449 			return nfserr_bad_xdr;
450 		status = nfsd_map_name_to_gid(argp->rqstp, (char *)p, length,
451 					      &iattr->ia_gid);
452 		if (status)
453 			return status;
454 		iattr->ia_valid |= ATTR_GID;
455 	}
456 	if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
457 		u32 set_it;
458 
459 		if (xdr_stream_decode_u32(argp->xdr, &set_it) < 0)
460 			return nfserr_bad_xdr;
461 		switch (set_it) {
462 		case NFS4_SET_TO_CLIENT_TIME:
463 			status = nfsd4_decode_nfstime4(argp, &iattr->ia_atime);
464 			if (status)
465 				return status;
466 			iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
467 			break;
468 		case NFS4_SET_TO_SERVER_TIME:
469 			iattr->ia_valid |= ATTR_ATIME;
470 			break;
471 		default:
472 			return nfserr_bad_xdr;
473 		}
474 	}
475 	if (bmval[1] & FATTR4_WORD1_TIME_CREATE) {
476 		struct timespec64 ts;
477 
478 		/* No Linux filesystem supports setting this attribute. */
479 		bmval[1] &= ~FATTR4_WORD1_TIME_CREATE;
480 		status = nfsd4_decode_nfstime4(argp, &ts);
481 		if (status)
482 			return status;
483 	}
484 	if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
485 		u32 set_it;
486 
487 		if (xdr_stream_decode_u32(argp->xdr, &set_it) < 0)
488 			return nfserr_bad_xdr;
489 		switch (set_it) {
490 		case NFS4_SET_TO_CLIENT_TIME:
491 			status = nfsd4_decode_nfstime4(argp, &iattr->ia_mtime);
492 			if (status)
493 				return status;
494 			iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
495 			break;
496 		case NFS4_SET_TO_SERVER_TIME:
497 			iattr->ia_valid |= ATTR_MTIME;
498 			break;
499 		default:
500 			return nfserr_bad_xdr;
501 		}
502 	}
503 	label->len = 0;
504 	if (IS_ENABLED(CONFIG_NFSD_V4_SECURITY_LABEL) &&
505 	    bmval[2] & FATTR4_WORD2_SECURITY_LABEL) {
506 		status = nfsd4_decode_security_label(argp, label);
507 		if (status)
508 			return status;
509 	}
510 	if (bmval[2] & FATTR4_WORD2_MODE_UMASK) {
511 		u32 mode, mask;
512 
513 		if (!umask)
514 			return nfserr_bad_xdr;
515 		if (xdr_stream_decode_u32(argp->xdr, &mode) < 0)
516 			return nfserr_bad_xdr;
517 		iattr->ia_mode = mode & (S_IFMT | S_IALLUGO);
518 		if (xdr_stream_decode_u32(argp->xdr, &mask) < 0)
519 			return nfserr_bad_xdr;
520 		*umask = mask & S_IRWXUGO;
521 		iattr->ia_valid |= ATTR_MODE;
522 	}
523 
524 	/* request sanity: did attrlist4 contain the expected number of words? */
525 	if (attrlist4_count != xdr_stream_pos(argp->xdr) - starting_pos)
526 		return nfserr_bad_xdr;
527 
528 	return nfs_ok;
529 }
530 
531 static __be32
532 nfsd4_decode_stateid4(struct nfsd4_compoundargs *argp, stateid_t *sid)
533 {
534 	__be32 *p;
535 
536 	p = xdr_inline_decode(argp->xdr, NFS4_STATEID_SIZE);
537 	if (!p)
538 		return nfserr_bad_xdr;
539 	sid->si_generation = be32_to_cpup(p++);
540 	memcpy(&sid->si_opaque, p, sizeof(sid->si_opaque));
541 	return nfs_ok;
542 }
543 
544 static __be32
545 nfsd4_decode_clientid4(struct nfsd4_compoundargs *argp, clientid_t *clientid)
546 {
547 	__be32 *p;
548 
549 	p = xdr_inline_decode(argp->xdr, sizeof(__be64));
550 	if (!p)
551 		return nfserr_bad_xdr;
552 	memcpy(clientid, p, sizeof(*clientid));
553 	return nfs_ok;
554 }
555 
556 static __be32
557 nfsd4_decode_state_owner4(struct nfsd4_compoundargs *argp,
558 			  clientid_t *clientid, struct xdr_netobj *owner)
559 {
560 	__be32 status;
561 
562 	status = nfsd4_decode_clientid4(argp, clientid);
563 	if (status)
564 		return status;
565 	return nfsd4_decode_opaque(argp, owner);
566 }
567 
568 #ifdef CONFIG_NFSD_PNFS
569 static __be32
570 nfsd4_decode_deviceid4(struct nfsd4_compoundargs *argp,
571 		       struct nfsd4_deviceid *devid)
572 {
573 	__be32 *p;
574 
575 	p = xdr_inline_decode(argp->xdr, NFS4_DEVICEID4_SIZE);
576 	if (!p)
577 		return nfserr_bad_xdr;
578 	memcpy(devid, p, sizeof(*devid));
579 	return nfs_ok;
580 }
581 
582 static __be32
583 nfsd4_decode_layoutupdate4(struct nfsd4_compoundargs *argp,
584 			   struct nfsd4_layoutcommit *lcp)
585 {
586 	if (xdr_stream_decode_u32(argp->xdr, &lcp->lc_layout_type) < 0)
587 		return nfserr_bad_xdr;
588 	if (lcp->lc_layout_type < LAYOUT_NFSV4_1_FILES)
589 		return nfserr_bad_xdr;
590 	if (lcp->lc_layout_type >= LAYOUT_TYPE_MAX)
591 		return nfserr_bad_xdr;
592 
593 	if (xdr_stream_decode_u32(argp->xdr, &lcp->lc_up_len) < 0)
594 		return nfserr_bad_xdr;
595 	if (lcp->lc_up_len > 0) {
596 		lcp->lc_up_layout = xdr_inline_decode(argp->xdr, lcp->lc_up_len);
597 		if (!lcp->lc_up_layout)
598 			return nfserr_bad_xdr;
599 	}
600 
601 	return nfs_ok;
602 }
603 
604 static __be32
605 nfsd4_decode_layoutreturn4(struct nfsd4_compoundargs *argp,
606 			   struct nfsd4_layoutreturn *lrp)
607 {
608 	__be32 status;
609 
610 	if (xdr_stream_decode_u32(argp->xdr, &lrp->lr_return_type) < 0)
611 		return nfserr_bad_xdr;
612 	switch (lrp->lr_return_type) {
613 	case RETURN_FILE:
614 		if (xdr_stream_decode_u64(argp->xdr, &lrp->lr_seg.offset) < 0)
615 			return nfserr_bad_xdr;
616 		if (xdr_stream_decode_u64(argp->xdr, &lrp->lr_seg.length) < 0)
617 			return nfserr_bad_xdr;
618 		status = nfsd4_decode_stateid4(argp, &lrp->lr_sid);
619 		if (status)
620 			return status;
621 		if (xdr_stream_decode_u32(argp->xdr, &lrp->lrf_body_len) < 0)
622 			return nfserr_bad_xdr;
623 		if (lrp->lrf_body_len > 0) {
624 			lrp->lrf_body = xdr_inline_decode(argp->xdr, lrp->lrf_body_len);
625 			if (!lrp->lrf_body)
626 				return nfserr_bad_xdr;
627 		}
628 		break;
629 	case RETURN_FSID:
630 	case RETURN_ALL:
631 		lrp->lr_seg.offset = 0;
632 		lrp->lr_seg.length = NFS4_MAX_UINT64;
633 		break;
634 	default:
635 		return nfserr_bad_xdr;
636 	}
637 
638 	return nfs_ok;
639 }
640 
641 #endif /* CONFIG_NFSD_PNFS */
642 
643 static __be32
644 nfsd4_decode_sessionid4(struct nfsd4_compoundargs *argp,
645 			struct nfs4_sessionid *sessionid)
646 {
647 	__be32 *p;
648 
649 	p = xdr_inline_decode(argp->xdr, NFS4_MAX_SESSIONID_LEN);
650 	if (!p)
651 		return nfserr_bad_xdr;
652 	memcpy(sessionid->data, p, sizeof(sessionid->data));
653 	return nfs_ok;
654 }
655 
656 /* Defined in Appendix A of RFC 5531 */
657 static __be32
658 nfsd4_decode_authsys_parms(struct nfsd4_compoundargs *argp,
659 			   struct nfsd4_cb_sec *cbs)
660 {
661 	u32 stamp, gidcount, uid, gid;
662 	__be32 *p, status;
663 
664 	if (xdr_stream_decode_u32(argp->xdr, &stamp) < 0)
665 		return nfserr_bad_xdr;
666 	/* machine name */
667 	status = nfsd4_decode_ignored_string(argp, 255);
668 	if (status)
669 		return status;
670 	if (xdr_stream_decode_u32(argp->xdr, &uid) < 0)
671 		return nfserr_bad_xdr;
672 	if (xdr_stream_decode_u32(argp->xdr, &gid) < 0)
673 		return nfserr_bad_xdr;
674 	if (xdr_stream_decode_u32(argp->xdr, &gidcount) < 0)
675 		return nfserr_bad_xdr;
676 	if (gidcount > 16)
677 		return nfserr_bad_xdr;
678 	p = xdr_inline_decode(argp->xdr, gidcount << 2);
679 	if (!p)
680 		return nfserr_bad_xdr;
681 	if (cbs->flavor == (u32)(-1)) {
682 		struct user_namespace *userns = nfsd_user_namespace(argp->rqstp);
683 
684 		kuid_t kuid = make_kuid(userns, uid);
685 		kgid_t kgid = make_kgid(userns, gid);
686 		if (uid_valid(kuid) && gid_valid(kgid)) {
687 			cbs->uid = kuid;
688 			cbs->gid = kgid;
689 			cbs->flavor = RPC_AUTH_UNIX;
690 		} else {
691 			dprintk("RPC_AUTH_UNIX with invalid uid or gid, ignoring!\n");
692 		}
693 	}
694 
695 	return nfs_ok;
696 }
697 
698 static __be32
699 nfsd4_decode_gss_cb_handles4(struct nfsd4_compoundargs *argp,
700 			     struct nfsd4_cb_sec *cbs)
701 {
702 	__be32 status;
703 	u32 service;
704 
705 	dprintk("RPC_AUTH_GSS callback secflavor not supported!\n");
706 
707 	if (xdr_stream_decode_u32(argp->xdr, &service) < 0)
708 		return nfserr_bad_xdr;
709 	if (service < RPC_GSS_SVC_NONE || service > RPC_GSS_SVC_PRIVACY)
710 		return nfserr_bad_xdr;
711 	/* gcbp_handle_from_server */
712 	status = nfsd4_decode_ignored_string(argp, 0);
713 	if (status)
714 		return status;
715 	/* gcbp_handle_from_client */
716 	status = nfsd4_decode_ignored_string(argp, 0);
717 	if (status)
718 		return status;
719 
720 	return nfs_ok;
721 }
722 
723 /* a counted array of callback_sec_parms4 items */
724 static __be32
725 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs)
726 {
727 	u32 i, secflavor, nr_secflavs;
728 	__be32 status;
729 
730 	/* callback_sec_params4 */
731 	if (xdr_stream_decode_u32(argp->xdr, &nr_secflavs) < 0)
732 		return nfserr_bad_xdr;
733 	if (nr_secflavs)
734 		cbs->flavor = (u32)(-1);
735 	else
736 		/* Is this legal? Be generous, take it to mean AUTH_NONE: */
737 		cbs->flavor = 0;
738 
739 	for (i = 0; i < nr_secflavs; ++i) {
740 		if (xdr_stream_decode_u32(argp->xdr, &secflavor) < 0)
741 			return nfserr_bad_xdr;
742 		switch (secflavor) {
743 		case RPC_AUTH_NULL:
744 			/* void */
745 			if (cbs->flavor == (u32)(-1))
746 				cbs->flavor = RPC_AUTH_NULL;
747 			break;
748 		case RPC_AUTH_UNIX:
749 			status = nfsd4_decode_authsys_parms(argp, cbs);
750 			if (status)
751 				return status;
752 			break;
753 		case RPC_AUTH_GSS:
754 			status = nfsd4_decode_gss_cb_handles4(argp, cbs);
755 			if (status)
756 				return status;
757 			break;
758 		default:
759 			return nfserr_inval;
760 		}
761 	}
762 
763 	return nfs_ok;
764 }
765 
766 
767 /*
768  * NFSv4 operation argument decoders
769  */
770 
771 static __be32
772 nfsd4_decode_access(struct nfsd4_compoundargs *argp,
773 		    union nfsd4_op_u *u)
774 {
775 	struct nfsd4_access *access = &u->access;
776 	if (xdr_stream_decode_u32(argp->xdr, &access->ac_req_access) < 0)
777 		return nfserr_bad_xdr;
778 	return nfs_ok;
779 }
780 
781 static __be32
782 nfsd4_decode_close(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
783 {
784 	struct nfsd4_close *close = &u->close;
785 	if (xdr_stream_decode_u32(argp->xdr, &close->cl_seqid) < 0)
786 		return nfserr_bad_xdr;
787 	return nfsd4_decode_stateid4(argp, &close->cl_stateid);
788 }
789 
790 
791 static __be32
792 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
793 {
794 	struct nfsd4_commit *commit = &u->commit;
795 	if (xdr_stream_decode_u64(argp->xdr, &commit->co_offset) < 0)
796 		return nfserr_bad_xdr;
797 	if (xdr_stream_decode_u32(argp->xdr, &commit->co_count) < 0)
798 		return nfserr_bad_xdr;
799 	memset(&commit->co_verf, 0, sizeof(commit->co_verf));
800 	return nfs_ok;
801 }
802 
803 static __be32
804 nfsd4_decode_create(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
805 {
806 	struct nfsd4_create *create = &u->create;
807 	__be32 *p, status;
808 
809 	memset(create, 0, sizeof(*create));
810 	if (xdr_stream_decode_u32(argp->xdr, &create->cr_type) < 0)
811 		return nfserr_bad_xdr;
812 	switch (create->cr_type) {
813 	case NF4LNK:
814 		if (xdr_stream_decode_u32(argp->xdr, &create->cr_datalen) < 0)
815 			return nfserr_bad_xdr;
816 		p = xdr_inline_decode(argp->xdr, create->cr_datalen);
817 		if (!p)
818 			return nfserr_bad_xdr;
819 		create->cr_data = svcxdr_dupstr(argp, p, create->cr_datalen);
820 		if (!create->cr_data)
821 			return nfserr_jukebox;
822 		break;
823 	case NF4BLK:
824 	case NF4CHR:
825 		if (xdr_stream_decode_u32(argp->xdr, &create->cr_specdata1) < 0)
826 			return nfserr_bad_xdr;
827 		if (xdr_stream_decode_u32(argp->xdr, &create->cr_specdata2) < 0)
828 			return nfserr_bad_xdr;
829 		break;
830 	case NF4SOCK:
831 	case NF4FIFO:
832 	case NF4DIR:
833 	default:
834 		break;
835 	}
836 	status = nfsd4_decode_component4(argp, &create->cr_name,
837 					 &create->cr_namelen);
838 	if (status)
839 		return status;
840 	status = nfsd4_decode_fattr4(argp, create->cr_bmval,
841 				    ARRAY_SIZE(create->cr_bmval),
842 				    &create->cr_iattr, &create->cr_acl,
843 				    &create->cr_label, &create->cr_umask);
844 	if (status)
845 		return status;
846 
847 	return nfs_ok;
848 }
849 
850 static inline __be32
851 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
852 {
853 	struct nfsd4_delegreturn *dr = &u->delegreturn;
854 	return nfsd4_decode_stateid4(argp, &dr->dr_stateid);
855 }
856 
857 static inline __be32
858 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
859 {
860 	struct nfsd4_getattr *getattr = &u->getattr;
861 	memset(getattr, 0, sizeof(*getattr));
862 	return nfsd4_decode_bitmap4(argp, getattr->ga_bmval,
863 				    ARRAY_SIZE(getattr->ga_bmval));
864 }
865 
866 static __be32
867 nfsd4_decode_link(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
868 {
869 	struct nfsd4_link *link = &u->link;
870 	memset(link, 0, sizeof(*link));
871 	return nfsd4_decode_component4(argp, &link->li_name, &link->li_namelen);
872 }
873 
874 static __be32
875 nfsd4_decode_open_to_lock_owner4(struct nfsd4_compoundargs *argp,
876 				 struct nfsd4_lock *lock)
877 {
878 	__be32 status;
879 
880 	if (xdr_stream_decode_u32(argp->xdr, &lock->lk_new_open_seqid) < 0)
881 		return nfserr_bad_xdr;
882 	status = nfsd4_decode_stateid4(argp, &lock->lk_new_open_stateid);
883 	if (status)
884 		return status;
885 	if (xdr_stream_decode_u32(argp->xdr, &lock->lk_new_lock_seqid) < 0)
886 		return nfserr_bad_xdr;
887 	return nfsd4_decode_state_owner4(argp, &lock->lk_new_clientid,
888 					 &lock->lk_new_owner);
889 }
890 
891 static __be32
892 nfsd4_decode_exist_lock_owner4(struct nfsd4_compoundargs *argp,
893 			       struct nfsd4_lock *lock)
894 {
895 	__be32 status;
896 
897 	status = nfsd4_decode_stateid4(argp, &lock->lk_old_lock_stateid);
898 	if (status)
899 		return status;
900 	if (xdr_stream_decode_u32(argp->xdr, &lock->lk_old_lock_seqid) < 0)
901 		return nfserr_bad_xdr;
902 
903 	return nfs_ok;
904 }
905 
906 static __be32
907 nfsd4_decode_locker4(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
908 {
909 	if (xdr_stream_decode_bool(argp->xdr, &lock->lk_is_new) < 0)
910 		return nfserr_bad_xdr;
911 	if (lock->lk_is_new)
912 		return nfsd4_decode_open_to_lock_owner4(argp, lock);
913 	return nfsd4_decode_exist_lock_owner4(argp, lock);
914 }
915 
916 static __be32
917 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
918 {
919 	struct nfsd4_lock *lock = &u->lock;
920 	memset(lock, 0, sizeof(*lock));
921 	if (xdr_stream_decode_u32(argp->xdr, &lock->lk_type) < 0)
922 		return nfserr_bad_xdr;
923 	if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
924 		return nfserr_bad_xdr;
925 	if (xdr_stream_decode_bool(argp->xdr, &lock->lk_reclaim) < 0)
926 		return nfserr_bad_xdr;
927 	if (xdr_stream_decode_u64(argp->xdr, &lock->lk_offset) < 0)
928 		return nfserr_bad_xdr;
929 	if (xdr_stream_decode_u64(argp->xdr, &lock->lk_length) < 0)
930 		return nfserr_bad_xdr;
931 	return nfsd4_decode_locker4(argp, lock);
932 }
933 
934 static __be32
935 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
936 {
937 	struct nfsd4_lockt *lockt = &u->lockt;
938 	memset(lockt, 0, sizeof(*lockt));
939 	if (xdr_stream_decode_u32(argp->xdr, &lockt->lt_type) < 0)
940 		return nfserr_bad_xdr;
941 	if ((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
942 		return nfserr_bad_xdr;
943 	if (xdr_stream_decode_u64(argp->xdr, &lockt->lt_offset) < 0)
944 		return nfserr_bad_xdr;
945 	if (xdr_stream_decode_u64(argp->xdr, &lockt->lt_length) < 0)
946 		return nfserr_bad_xdr;
947 	return nfsd4_decode_state_owner4(argp, &lockt->lt_clientid,
948 					 &lockt->lt_owner);
949 }
950 
951 static __be32
952 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
953 {
954 	struct nfsd4_locku *locku = &u->locku;
955 	__be32 status;
956 
957 	if (xdr_stream_decode_u32(argp->xdr, &locku->lu_type) < 0)
958 		return nfserr_bad_xdr;
959 	if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
960 		return nfserr_bad_xdr;
961 	if (xdr_stream_decode_u32(argp->xdr, &locku->lu_seqid) < 0)
962 		return nfserr_bad_xdr;
963 	status = nfsd4_decode_stateid4(argp, &locku->lu_stateid);
964 	if (status)
965 		return status;
966 	if (xdr_stream_decode_u64(argp->xdr, &locku->lu_offset) < 0)
967 		return nfserr_bad_xdr;
968 	if (xdr_stream_decode_u64(argp->xdr, &locku->lu_length) < 0)
969 		return nfserr_bad_xdr;
970 
971 	return nfs_ok;
972 }
973 
974 static __be32
975 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
976 {
977 	struct nfsd4_lookup *lookup = &u->lookup;
978 	return nfsd4_decode_component4(argp, &lookup->lo_name, &lookup->lo_len);
979 }
980 
981 static __be32
982 nfsd4_decode_createhow4(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
983 {
984 	__be32 status;
985 
986 	if (xdr_stream_decode_u32(argp->xdr, &open->op_createmode) < 0)
987 		return nfserr_bad_xdr;
988 	switch (open->op_createmode) {
989 	case NFS4_CREATE_UNCHECKED:
990 	case NFS4_CREATE_GUARDED:
991 		status = nfsd4_decode_fattr4(argp, open->op_bmval,
992 					     ARRAY_SIZE(open->op_bmval),
993 					     &open->op_iattr, &open->op_acl,
994 					     &open->op_label, &open->op_umask);
995 		if (status)
996 			return status;
997 		break;
998 	case NFS4_CREATE_EXCLUSIVE:
999 		status = nfsd4_decode_verifier4(argp, &open->op_verf);
1000 		if (status)
1001 			return status;
1002 		break;
1003 	case NFS4_CREATE_EXCLUSIVE4_1:
1004 		if (argp->minorversion < 1)
1005 			return nfserr_bad_xdr;
1006 		status = nfsd4_decode_verifier4(argp, &open->op_verf);
1007 		if (status)
1008 			return status;
1009 		status = nfsd4_decode_fattr4(argp, open->op_bmval,
1010 					     ARRAY_SIZE(open->op_bmval),
1011 					     &open->op_iattr, &open->op_acl,
1012 					     &open->op_label, &open->op_umask);
1013 		if (status)
1014 			return status;
1015 		break;
1016 	default:
1017 		return nfserr_bad_xdr;
1018 	}
1019 
1020 	return nfs_ok;
1021 }
1022 
1023 static __be32
1024 nfsd4_decode_openflag4(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
1025 {
1026 	__be32 status;
1027 
1028 	if (xdr_stream_decode_u32(argp->xdr, &open->op_create) < 0)
1029 		return nfserr_bad_xdr;
1030 	switch (open->op_create) {
1031 	case NFS4_OPEN_NOCREATE:
1032 		break;
1033 	case NFS4_OPEN_CREATE:
1034 		status = nfsd4_decode_createhow4(argp, open);
1035 		if (status)
1036 			return status;
1037 		break;
1038 	default:
1039 		return nfserr_bad_xdr;
1040 	}
1041 
1042 	return nfs_ok;
1043 }
1044 
1045 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when)
1046 {
1047 	u32 w;
1048 
1049 	if (xdr_stream_decode_u32(argp->xdr, &w) < 0)
1050 		return nfserr_bad_xdr;
1051 	*share_access = w & NFS4_SHARE_ACCESS_MASK;
1052 	*deleg_want = w & NFS4_SHARE_WANT_MASK;
1053 	if (deleg_when)
1054 		*deleg_when = w & NFS4_SHARE_WHEN_MASK;
1055 
1056 	switch (w & NFS4_SHARE_ACCESS_MASK) {
1057 	case NFS4_SHARE_ACCESS_READ:
1058 	case NFS4_SHARE_ACCESS_WRITE:
1059 	case NFS4_SHARE_ACCESS_BOTH:
1060 		break;
1061 	default:
1062 		return nfserr_bad_xdr;
1063 	}
1064 	w &= ~NFS4_SHARE_ACCESS_MASK;
1065 	if (!w)
1066 		return nfs_ok;
1067 	if (!argp->minorversion)
1068 		return nfserr_bad_xdr;
1069 	switch (w & NFS4_SHARE_WANT_MASK) {
1070 	case NFS4_SHARE_WANT_NO_PREFERENCE:
1071 	case NFS4_SHARE_WANT_READ_DELEG:
1072 	case NFS4_SHARE_WANT_WRITE_DELEG:
1073 	case NFS4_SHARE_WANT_ANY_DELEG:
1074 	case NFS4_SHARE_WANT_NO_DELEG:
1075 	case NFS4_SHARE_WANT_CANCEL:
1076 		break;
1077 	default:
1078 		return nfserr_bad_xdr;
1079 	}
1080 	w &= ~NFS4_SHARE_WANT_MASK;
1081 	if (!w)
1082 		return nfs_ok;
1083 
1084 	if (!deleg_when)	/* open_downgrade */
1085 		return nfserr_inval;
1086 	switch (w) {
1087 	case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL:
1088 	case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED:
1089 	case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL |
1090 	      NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED):
1091 		return nfs_ok;
1092 	}
1093 	return nfserr_bad_xdr;
1094 }
1095 
1096 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
1097 {
1098 	if (xdr_stream_decode_u32(argp->xdr, x) < 0)
1099 		return nfserr_bad_xdr;
1100 	/* Note: unlike access bits, deny bits may be zero. */
1101 	if (*x & ~NFS4_SHARE_DENY_BOTH)
1102 		return nfserr_bad_xdr;
1103 
1104 	return nfs_ok;
1105 }
1106 
1107 static __be32
1108 nfsd4_decode_open_claim4(struct nfsd4_compoundargs *argp,
1109 			 struct nfsd4_open *open)
1110 {
1111 	__be32 status;
1112 
1113 	if (xdr_stream_decode_u32(argp->xdr, &open->op_claim_type) < 0)
1114 		return nfserr_bad_xdr;
1115 	switch (open->op_claim_type) {
1116 	case NFS4_OPEN_CLAIM_NULL:
1117 	case NFS4_OPEN_CLAIM_DELEGATE_PREV:
1118 		status = nfsd4_decode_component4(argp, &open->op_fname,
1119 						 &open->op_fnamelen);
1120 		if (status)
1121 			return status;
1122 		break;
1123 	case NFS4_OPEN_CLAIM_PREVIOUS:
1124 		if (xdr_stream_decode_u32(argp->xdr, &open->op_delegate_type) < 0)
1125 			return nfserr_bad_xdr;
1126 		break;
1127 	case NFS4_OPEN_CLAIM_DELEGATE_CUR:
1128 		status = nfsd4_decode_stateid4(argp, &open->op_delegate_stateid);
1129 		if (status)
1130 			return status;
1131 		status = nfsd4_decode_component4(argp, &open->op_fname,
1132 						 &open->op_fnamelen);
1133 		if (status)
1134 			return status;
1135 		break;
1136 	case NFS4_OPEN_CLAIM_FH:
1137 	case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
1138 		if (argp->minorversion < 1)
1139 			return nfserr_bad_xdr;
1140 		/* void */
1141 		break;
1142 	case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
1143 		if (argp->minorversion < 1)
1144 			return nfserr_bad_xdr;
1145 		status = nfsd4_decode_stateid4(argp, &open->op_delegate_stateid);
1146 		if (status)
1147 			return status;
1148 		break;
1149 	default:
1150 		return nfserr_bad_xdr;
1151 	}
1152 
1153 	return nfs_ok;
1154 }
1155 
1156 static __be32
1157 nfsd4_decode_open(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1158 {
1159 	struct nfsd4_open *open = &u->open;
1160 	__be32 status;
1161 	u32 dummy;
1162 
1163 	memset(open, 0, sizeof(*open));
1164 
1165 	if (xdr_stream_decode_u32(argp->xdr, &open->op_seqid) < 0)
1166 		return nfserr_bad_xdr;
1167 	/* deleg_want is ignored */
1168 	status = nfsd4_decode_share_access(argp, &open->op_share_access,
1169 					   &open->op_deleg_want, &dummy);
1170 	if (status)
1171 		return status;
1172 	status = nfsd4_decode_share_deny(argp, &open->op_share_deny);
1173 	if (status)
1174 		return status;
1175 	status = nfsd4_decode_state_owner4(argp, &open->op_clientid,
1176 					   &open->op_owner);
1177 	if (status)
1178 		return status;
1179 	status = nfsd4_decode_openflag4(argp, open);
1180 	if (status)
1181 		return status;
1182 	return nfsd4_decode_open_claim4(argp, open);
1183 }
1184 
1185 static __be32
1186 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp,
1187 			  union nfsd4_op_u *u)
1188 {
1189 	struct nfsd4_open_confirm *open_conf = &u->open_confirm;
1190 	__be32 status;
1191 
1192 	if (argp->minorversion >= 1)
1193 		return nfserr_notsupp;
1194 
1195 	status = nfsd4_decode_stateid4(argp, &open_conf->oc_req_stateid);
1196 	if (status)
1197 		return status;
1198 	if (xdr_stream_decode_u32(argp->xdr, &open_conf->oc_seqid) < 0)
1199 		return nfserr_bad_xdr;
1200 
1201 	memset(&open_conf->oc_resp_stateid, 0,
1202 	       sizeof(open_conf->oc_resp_stateid));
1203 	return nfs_ok;
1204 }
1205 
1206 static __be32
1207 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp,
1208 			    union nfsd4_op_u *u)
1209 {
1210 	struct nfsd4_open_downgrade *open_down = &u->open_downgrade;
1211 	__be32 status;
1212 
1213 	memset(open_down, 0, sizeof(*open_down));
1214 	status = nfsd4_decode_stateid4(argp, &open_down->od_stateid);
1215 	if (status)
1216 		return status;
1217 	if (xdr_stream_decode_u32(argp->xdr, &open_down->od_seqid) < 0)
1218 		return nfserr_bad_xdr;
1219 	/* deleg_want is ignored */
1220 	status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
1221 					   &open_down->od_deleg_want, NULL);
1222 	if (status)
1223 		return status;
1224 	return nfsd4_decode_share_deny(argp, &open_down->od_share_deny);
1225 }
1226 
1227 static __be32
1228 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1229 {
1230 	struct nfsd4_putfh *putfh = &u->putfh;
1231 	__be32 *p;
1232 
1233 	if (xdr_stream_decode_u32(argp->xdr, &putfh->pf_fhlen) < 0)
1234 		return nfserr_bad_xdr;
1235 	if (putfh->pf_fhlen > NFS4_FHSIZE)
1236 		return nfserr_bad_xdr;
1237 	p = xdr_inline_decode(argp->xdr, putfh->pf_fhlen);
1238 	if (!p)
1239 		return nfserr_bad_xdr;
1240 	putfh->pf_fhval = svcxdr_savemem(argp, p, putfh->pf_fhlen);
1241 	if (!putfh->pf_fhval)
1242 		return nfserr_jukebox;
1243 
1244 	putfh->no_verify = false;
1245 	return nfs_ok;
1246 }
1247 
1248 static __be32
1249 nfsd4_decode_putpubfh(struct nfsd4_compoundargs *argp, union nfsd4_op_u *p)
1250 {
1251 	if (argp->minorversion == 0)
1252 		return nfs_ok;
1253 	return nfserr_notsupp;
1254 }
1255 
1256 static __be32
1257 nfsd4_decode_read(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1258 {
1259 	struct nfsd4_read *read = &u->read;
1260 	__be32 status;
1261 
1262 	memset(read, 0, sizeof(*read));
1263 	status = nfsd4_decode_stateid4(argp, &read->rd_stateid);
1264 	if (status)
1265 		return status;
1266 	if (xdr_stream_decode_u64(argp->xdr, &read->rd_offset) < 0)
1267 		return nfserr_bad_xdr;
1268 	if (xdr_stream_decode_u32(argp->xdr, &read->rd_length) < 0)
1269 		return nfserr_bad_xdr;
1270 
1271 	return nfs_ok;
1272 }
1273 
1274 static __be32
1275 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1276 {
1277 	struct nfsd4_readdir *readdir = &u->readdir;
1278 	__be32 status;
1279 
1280 	memset(readdir, 0, sizeof(*readdir));
1281 	if (xdr_stream_decode_u64(argp->xdr, &readdir->rd_cookie) < 0)
1282 		return nfserr_bad_xdr;
1283 	status = nfsd4_decode_verifier4(argp, &readdir->rd_verf);
1284 	if (status)
1285 		return status;
1286 	if (xdr_stream_decode_u32(argp->xdr, &readdir->rd_dircount) < 0)
1287 		return nfserr_bad_xdr;
1288 	if (xdr_stream_decode_u32(argp->xdr, &readdir->rd_maxcount) < 0)
1289 		return nfserr_bad_xdr;
1290 	if (xdr_stream_decode_uint32_array(argp->xdr, readdir->rd_bmval,
1291 					   ARRAY_SIZE(readdir->rd_bmval)) < 0)
1292 		return nfserr_bad_xdr;
1293 
1294 	return nfs_ok;
1295 }
1296 
1297 static __be32
1298 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1299 {
1300 	struct nfsd4_remove *remove = &u->remove;
1301 	memset(&remove->rm_cinfo, 0, sizeof(remove->rm_cinfo));
1302 	return nfsd4_decode_component4(argp, &remove->rm_name, &remove->rm_namelen);
1303 }
1304 
1305 static __be32
1306 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1307 {
1308 	struct nfsd4_rename *rename = &u->rename;
1309 	__be32 status;
1310 
1311 	memset(rename, 0, sizeof(*rename));
1312 	status = nfsd4_decode_component4(argp, &rename->rn_sname, &rename->rn_snamelen);
1313 	if (status)
1314 		return status;
1315 	return nfsd4_decode_component4(argp, &rename->rn_tname, &rename->rn_tnamelen);
1316 }
1317 
1318 static __be32
1319 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1320 {
1321 	clientid_t *clientid = &u->renew;
1322 	return nfsd4_decode_clientid4(argp, clientid);
1323 }
1324 
1325 static __be32
1326 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
1327 		     union nfsd4_op_u *u)
1328 {
1329 	struct nfsd4_secinfo *secinfo = &u->secinfo;
1330 	secinfo->si_exp = NULL;
1331 	return nfsd4_decode_component4(argp, &secinfo->si_name, &secinfo->si_namelen);
1332 }
1333 
1334 static __be32
1335 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1336 {
1337 	struct nfsd4_setattr *setattr = &u->setattr;
1338 	__be32 status;
1339 
1340 	memset(setattr, 0, sizeof(*setattr));
1341 	status = nfsd4_decode_stateid4(argp, &setattr->sa_stateid);
1342 	if (status)
1343 		return status;
1344 	return nfsd4_decode_fattr4(argp, setattr->sa_bmval,
1345 				   ARRAY_SIZE(setattr->sa_bmval),
1346 				   &setattr->sa_iattr, &setattr->sa_acl,
1347 				   &setattr->sa_label, NULL);
1348 }
1349 
1350 static __be32
1351 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1352 {
1353 	struct nfsd4_setclientid *setclientid = &u->setclientid;
1354 	__be32 *p, status;
1355 
1356 	memset(setclientid, 0, sizeof(*setclientid));
1357 
1358 	if (argp->minorversion >= 1)
1359 		return nfserr_notsupp;
1360 
1361 	status = nfsd4_decode_verifier4(argp, &setclientid->se_verf);
1362 	if (status)
1363 		return status;
1364 	status = nfsd4_decode_opaque(argp, &setclientid->se_name);
1365 	if (status)
1366 		return status;
1367 	if (xdr_stream_decode_u32(argp->xdr, &setclientid->se_callback_prog) < 0)
1368 		return nfserr_bad_xdr;
1369 	if (xdr_stream_decode_u32(argp->xdr, &setclientid->se_callback_netid_len) < 0)
1370 		return nfserr_bad_xdr;
1371 	p = xdr_inline_decode(argp->xdr, setclientid->se_callback_netid_len);
1372 	if (!p)
1373 		return nfserr_bad_xdr;
1374 	setclientid->se_callback_netid_val = svcxdr_savemem(argp, p,
1375 						setclientid->se_callback_netid_len);
1376 	if (!setclientid->se_callback_netid_val)
1377 		return nfserr_jukebox;
1378 
1379 	if (xdr_stream_decode_u32(argp->xdr, &setclientid->se_callback_addr_len) < 0)
1380 		return nfserr_bad_xdr;
1381 	p = xdr_inline_decode(argp->xdr, setclientid->se_callback_addr_len);
1382 	if (!p)
1383 		return nfserr_bad_xdr;
1384 	setclientid->se_callback_addr_val = svcxdr_savemem(argp, p,
1385 						setclientid->se_callback_addr_len);
1386 	if (!setclientid->se_callback_addr_val)
1387 		return nfserr_jukebox;
1388 	if (xdr_stream_decode_u32(argp->xdr, &setclientid->se_callback_ident) < 0)
1389 		return nfserr_bad_xdr;
1390 
1391 	return nfs_ok;
1392 }
1393 
1394 static __be32
1395 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp,
1396 				 union nfsd4_op_u *u)
1397 {
1398 	struct nfsd4_setclientid_confirm *scd_c = &u->setclientid_confirm;
1399 	__be32 status;
1400 
1401 	if (argp->minorversion >= 1)
1402 		return nfserr_notsupp;
1403 
1404 	status = nfsd4_decode_clientid4(argp, &scd_c->sc_clientid);
1405 	if (status)
1406 		return status;
1407 	return nfsd4_decode_verifier4(argp, &scd_c->sc_confirm);
1408 }
1409 
1410 /* Also used for NVERIFY */
1411 static __be32
1412 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1413 {
1414 	struct nfsd4_verify *verify = &u->verify;
1415 	__be32 *p, status;
1416 
1417 	memset(verify, 0, sizeof(*verify));
1418 
1419 	status = nfsd4_decode_bitmap4(argp, verify->ve_bmval,
1420 				      ARRAY_SIZE(verify->ve_bmval));
1421 	if (status)
1422 		return status;
1423 
1424 	/* For convenience's sake, we compare raw xdr'd attributes in
1425 	 * nfsd4_proc_verify */
1426 
1427 	if (xdr_stream_decode_u32(argp->xdr, &verify->ve_attrlen) < 0)
1428 		return nfserr_bad_xdr;
1429 	p = xdr_inline_decode(argp->xdr, verify->ve_attrlen);
1430 	if (!p)
1431 		return nfserr_bad_xdr;
1432 	verify->ve_attrval = svcxdr_savemem(argp, p, verify->ve_attrlen);
1433 	if (!verify->ve_attrval)
1434 		return nfserr_jukebox;
1435 
1436 	return nfs_ok;
1437 }
1438 
1439 static __be32
1440 nfsd4_decode_write(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
1441 {
1442 	struct nfsd4_write *write = &u->write;
1443 	__be32 status;
1444 
1445 	status = nfsd4_decode_stateid4(argp, &write->wr_stateid);
1446 	if (status)
1447 		return status;
1448 	if (xdr_stream_decode_u64(argp->xdr, &write->wr_offset) < 0)
1449 		return nfserr_bad_xdr;
1450 	if (xdr_stream_decode_u32(argp->xdr, &write->wr_stable_how) < 0)
1451 		return nfserr_bad_xdr;
1452 	if (write->wr_stable_how > NFS_FILE_SYNC)
1453 		return nfserr_bad_xdr;
1454 	if (xdr_stream_decode_u32(argp->xdr, &write->wr_buflen) < 0)
1455 		return nfserr_bad_xdr;
1456 	if (!xdr_stream_subsegment(argp->xdr, &write->wr_payload, write->wr_buflen))
1457 		return nfserr_bad_xdr;
1458 
1459 	write->wr_bytes_written = 0;
1460 	write->wr_how_written = 0;
1461 	memset(&write->wr_verifier, 0, sizeof(write->wr_verifier));
1462 	return nfs_ok;
1463 }
1464 
1465 static __be32
1466 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp,
1467 			       union nfsd4_op_u *u)
1468 {
1469 	struct nfsd4_release_lockowner *rlockowner = &u->release_lockowner;
1470 	__be32 status;
1471 
1472 	if (argp->minorversion >= 1)
1473 		return nfserr_notsupp;
1474 
1475 	status = nfsd4_decode_state_owner4(argp, &rlockowner->rl_clientid,
1476 					   &rlockowner->rl_owner);
1477 	if (status)
1478 		return status;
1479 
1480 	if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1481 		return nfserr_inval;
1482 
1483 	return nfs_ok;
1484 }
1485 
1486 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp,
1487 					   union nfsd4_op_u *u)
1488 {
1489 	struct nfsd4_backchannel_ctl *bc = &u->backchannel_ctl;
1490 	memset(bc, 0, sizeof(*bc));
1491 	if (xdr_stream_decode_u32(argp->xdr, &bc->bc_cb_program) < 0)
1492 		return nfserr_bad_xdr;
1493 	return nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec);
1494 }
1495 
1496 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp,
1497 						union nfsd4_op_u *u)
1498 {
1499 	struct nfsd4_bind_conn_to_session *bcts = &u->bind_conn_to_session;
1500 	u32 use_conn_in_rdma_mode;
1501 	__be32 status;
1502 
1503 	memset(bcts, 0, sizeof(*bcts));
1504 	status = nfsd4_decode_sessionid4(argp, &bcts->sessionid);
1505 	if (status)
1506 		return status;
1507 	if (xdr_stream_decode_u32(argp->xdr, &bcts->dir) < 0)
1508 		return nfserr_bad_xdr;
1509 	if (xdr_stream_decode_u32(argp->xdr, &use_conn_in_rdma_mode) < 0)
1510 		return nfserr_bad_xdr;
1511 
1512 	return nfs_ok;
1513 }
1514 
1515 static __be32
1516 nfsd4_decode_state_protect_ops(struct nfsd4_compoundargs *argp,
1517 			       struct nfsd4_exchange_id *exid)
1518 {
1519 	__be32 status;
1520 
1521 	status = nfsd4_decode_bitmap4(argp, exid->spo_must_enforce,
1522 				      ARRAY_SIZE(exid->spo_must_enforce));
1523 	if (status)
1524 		return nfserr_bad_xdr;
1525 	status = nfsd4_decode_bitmap4(argp, exid->spo_must_allow,
1526 				      ARRAY_SIZE(exid->spo_must_allow));
1527 	if (status)
1528 		return nfserr_bad_xdr;
1529 
1530 	return nfs_ok;
1531 }
1532 
1533 /*
1534  * This implementation currently does not support SP4_SSV.
1535  * This decoder simply skips over these arguments.
1536  */
1537 static noinline __be32
1538 nfsd4_decode_ssv_sp_parms(struct nfsd4_compoundargs *argp,
1539 			  struct nfsd4_exchange_id *exid)
1540 {
1541 	u32 count, window, num_gss_handles;
1542 	__be32 status;
1543 
1544 	/* ssp_ops */
1545 	status = nfsd4_decode_state_protect_ops(argp, exid);
1546 	if (status)
1547 		return status;
1548 
1549 	/* ssp_hash_algs<> */
1550 	if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
1551 		return nfserr_bad_xdr;
1552 	while (count--) {
1553 		status = nfsd4_decode_ignored_string(argp, 0);
1554 		if (status)
1555 			return status;
1556 	}
1557 
1558 	/* ssp_encr_algs<> */
1559 	if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
1560 		return nfserr_bad_xdr;
1561 	while (count--) {
1562 		status = nfsd4_decode_ignored_string(argp, 0);
1563 		if (status)
1564 			return status;
1565 	}
1566 
1567 	if (xdr_stream_decode_u32(argp->xdr, &window) < 0)
1568 		return nfserr_bad_xdr;
1569 	if (xdr_stream_decode_u32(argp->xdr, &num_gss_handles) < 0)
1570 		return nfserr_bad_xdr;
1571 
1572 	return nfs_ok;
1573 }
1574 
1575 static __be32
1576 nfsd4_decode_state_protect4_a(struct nfsd4_compoundargs *argp,
1577 			      struct nfsd4_exchange_id *exid)
1578 {
1579 	__be32 status;
1580 
1581 	if (xdr_stream_decode_u32(argp->xdr, &exid->spa_how) < 0)
1582 		return nfserr_bad_xdr;
1583 	switch (exid->spa_how) {
1584 	case SP4_NONE:
1585 		break;
1586 	case SP4_MACH_CRED:
1587 		status = nfsd4_decode_state_protect_ops(argp, exid);
1588 		if (status)
1589 			return status;
1590 		break;
1591 	case SP4_SSV:
1592 		status = nfsd4_decode_ssv_sp_parms(argp, exid);
1593 		if (status)
1594 			return status;
1595 		break;
1596 	default:
1597 		return nfserr_bad_xdr;
1598 	}
1599 
1600 	return nfs_ok;
1601 }
1602 
1603 static __be32
1604 nfsd4_decode_nfs_impl_id4(struct nfsd4_compoundargs *argp,
1605 			  struct nfsd4_exchange_id *exid)
1606 {
1607 	__be32 status;
1608 	u32 count;
1609 
1610 	if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
1611 		return nfserr_bad_xdr;
1612 	switch (count) {
1613 	case 0:
1614 		break;
1615 	case 1:
1616 		/* Note that RFC 8881 places no length limit on
1617 		 * nii_domain, but this implementation permits no
1618 		 * more than NFS4_OPAQUE_LIMIT bytes */
1619 		status = nfsd4_decode_opaque(argp, &exid->nii_domain);
1620 		if (status)
1621 			return status;
1622 		/* Note that RFC 8881 places no length limit on
1623 		 * nii_name, but this implementation permits no
1624 		 * more than NFS4_OPAQUE_LIMIT bytes */
1625 		status = nfsd4_decode_opaque(argp, &exid->nii_name);
1626 		if (status)
1627 			return status;
1628 		status = nfsd4_decode_nfstime4(argp, &exid->nii_time);
1629 		if (status)
1630 			return status;
1631 		break;
1632 	default:
1633 		return nfserr_bad_xdr;
1634 	}
1635 
1636 	return nfs_ok;
1637 }
1638 
1639 static __be32
1640 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1641 			 union nfsd4_op_u *u)
1642 {
1643 	struct nfsd4_exchange_id *exid = &u->exchange_id;
1644 	__be32 status;
1645 
1646 	memset(exid, 0, sizeof(*exid));
1647 	status = nfsd4_decode_verifier4(argp, &exid->verifier);
1648 	if (status)
1649 		return status;
1650 	status = nfsd4_decode_opaque(argp, &exid->clname);
1651 	if (status)
1652 		return status;
1653 	if (xdr_stream_decode_u32(argp->xdr, &exid->flags) < 0)
1654 		return nfserr_bad_xdr;
1655 	status = nfsd4_decode_state_protect4_a(argp, exid);
1656 	if (status)
1657 		return status;
1658 	return nfsd4_decode_nfs_impl_id4(argp, exid);
1659 }
1660 
1661 static __be32
1662 nfsd4_decode_channel_attrs4(struct nfsd4_compoundargs *argp,
1663 			    struct nfsd4_channel_attrs *ca)
1664 {
1665 	__be32 *p;
1666 
1667 	p = xdr_inline_decode(argp->xdr, XDR_UNIT * 7);
1668 	if (!p)
1669 		return nfserr_bad_xdr;
1670 
1671 	/* headerpadsz is ignored */
1672 	p++;
1673 	ca->maxreq_sz = be32_to_cpup(p++);
1674 	ca->maxresp_sz = be32_to_cpup(p++);
1675 	ca->maxresp_cached = be32_to_cpup(p++);
1676 	ca->maxops = be32_to_cpup(p++);
1677 	ca->maxreqs = be32_to_cpup(p++);
1678 	ca->nr_rdma_attrs = be32_to_cpup(p);
1679 	switch (ca->nr_rdma_attrs) {
1680 	case 0:
1681 		break;
1682 	case 1:
1683 		if (xdr_stream_decode_u32(argp->xdr, &ca->rdma_attrs) < 0)
1684 			return nfserr_bad_xdr;
1685 		break;
1686 	default:
1687 		return nfserr_bad_xdr;
1688 	}
1689 
1690 	return nfs_ok;
1691 }
1692 
1693 static __be32
1694 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1695 			    union nfsd4_op_u *u)
1696 {
1697 	struct nfsd4_create_session *sess = &u->create_session;
1698 	__be32 status;
1699 
1700 	memset(sess, 0, sizeof(*sess));
1701 	status = nfsd4_decode_clientid4(argp, &sess->clientid);
1702 	if (status)
1703 		return status;
1704 	if (xdr_stream_decode_u32(argp->xdr, &sess->seqid) < 0)
1705 		return nfserr_bad_xdr;
1706 	if (xdr_stream_decode_u32(argp->xdr, &sess->flags) < 0)
1707 		return nfserr_bad_xdr;
1708 	status = nfsd4_decode_channel_attrs4(argp, &sess->fore_channel);
1709 	if (status)
1710 		return status;
1711 	status = nfsd4_decode_channel_attrs4(argp, &sess->back_channel);
1712 	if (status)
1713 		return status;
1714 	if (xdr_stream_decode_u32(argp->xdr, &sess->callback_prog) < 0)
1715 		return nfserr_bad_xdr;
1716 	return nfsd4_decode_cb_sec(argp, &sess->cb_sec);
1717 }
1718 
1719 static __be32
1720 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1721 			     union nfsd4_op_u *u)
1722 {
1723 	struct nfsd4_destroy_session *destroy_session = &u->destroy_session;
1724 	return nfsd4_decode_sessionid4(argp, &destroy_session->sessionid);
1725 }
1726 
1727 static __be32
1728 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
1729 			  union nfsd4_op_u *u)
1730 {
1731 	struct nfsd4_free_stateid *free_stateid = &u->free_stateid;
1732 	return nfsd4_decode_stateid4(argp, &free_stateid->fr_stateid);
1733 }
1734 
1735 static __be32
1736 nfsd4_decode_get_dir_delegation(struct nfsd4_compoundargs *argp,
1737 		union nfsd4_op_u *u)
1738 {
1739 	struct nfsd4_get_dir_delegation *gdd = &u->get_dir_delegation;
1740 	__be32 status;
1741 
1742 	memset(gdd, 0, sizeof(*gdd));
1743 
1744 	if (xdr_stream_decode_bool(argp->xdr, &gdd->gdda_signal_deleg_avail) < 0)
1745 		return nfserr_bad_xdr;
1746 	status = nfsd4_decode_bitmap4(argp, gdd->gdda_notification_types,
1747 				      ARRAY_SIZE(gdd->gdda_notification_types));
1748 	if (status)
1749 		return status;
1750 	status = nfsd4_decode_nfstime4(argp, &gdd->gdda_child_attr_delay);
1751 	if (status)
1752 		return status;
1753 	status = nfsd4_decode_nfstime4(argp, &gdd->gdda_dir_attr_delay);
1754 	if (status)
1755 		return status;
1756 	status = nfsd4_decode_bitmap4(argp, gdd->gdda_child_attributes,
1757 					ARRAY_SIZE(gdd->gdda_child_attributes));
1758 	if (status)
1759 		return status;
1760 	return nfsd4_decode_bitmap4(argp, gdd->gdda_dir_attributes,
1761 					ARRAY_SIZE(gdd->gdda_dir_attributes));
1762 }
1763 
1764 #ifdef CONFIG_NFSD_PNFS
1765 static __be32
1766 nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs *argp,
1767 		union nfsd4_op_u *u)
1768 {
1769 	struct nfsd4_getdeviceinfo *gdev = &u->getdeviceinfo;
1770 	__be32 status;
1771 
1772 	memset(gdev, 0, sizeof(*gdev));
1773 	status = nfsd4_decode_deviceid4(argp, &gdev->gd_devid);
1774 	if (status)
1775 		return status;
1776 	if (xdr_stream_decode_u32(argp->xdr, &gdev->gd_layout_type) < 0)
1777 		return nfserr_bad_xdr;
1778 	if (xdr_stream_decode_u32(argp->xdr, &gdev->gd_maxcount) < 0)
1779 		return nfserr_bad_xdr;
1780 	if (xdr_stream_decode_uint32_array(argp->xdr,
1781 					   &gdev->gd_notify_types, 1) < 0)
1782 		return nfserr_bad_xdr;
1783 
1784 	return nfs_ok;
1785 }
1786 
1787 static __be32
1788 nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp,
1789 			  union nfsd4_op_u *u)
1790 {
1791 	struct nfsd4_layoutcommit *lcp = &u->layoutcommit;
1792 	__be32 *p, status;
1793 
1794 	memset(lcp, 0, sizeof(*lcp));
1795 	if (xdr_stream_decode_u64(argp->xdr, &lcp->lc_seg.offset) < 0)
1796 		return nfserr_bad_xdr;
1797 	if (xdr_stream_decode_u64(argp->xdr, &lcp->lc_seg.length) < 0)
1798 		return nfserr_bad_xdr;
1799 	if (xdr_stream_decode_bool(argp->xdr, &lcp->lc_reclaim) < 0)
1800 		return nfserr_bad_xdr;
1801 	status = nfsd4_decode_stateid4(argp, &lcp->lc_sid);
1802 	if (status)
1803 		return status;
1804 	if (xdr_stream_decode_u32(argp->xdr, &lcp->lc_newoffset) < 0)
1805 		return nfserr_bad_xdr;
1806 	if (lcp->lc_newoffset) {
1807 		if (xdr_stream_decode_u64(argp->xdr, &lcp->lc_last_wr) < 0)
1808 			return nfserr_bad_xdr;
1809 	} else
1810 		lcp->lc_last_wr = 0;
1811 	p = xdr_inline_decode(argp->xdr, XDR_UNIT);
1812 	if (!p)
1813 		return nfserr_bad_xdr;
1814 	if (xdr_item_is_present(p)) {
1815 		status = nfsd4_decode_nfstime4(argp, &lcp->lc_mtime);
1816 		if (status)
1817 			return status;
1818 	} else {
1819 		lcp->lc_mtime.tv_nsec = UTIME_NOW;
1820 	}
1821 	return nfsd4_decode_layoutupdate4(argp, lcp);
1822 }
1823 
1824 static __be32
1825 nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp,
1826 		union nfsd4_op_u *u)
1827 {
1828 	struct nfsd4_layoutget *lgp = &u->layoutget;
1829 	__be32 status;
1830 
1831 	memset(lgp, 0, sizeof(*lgp));
1832 	if (xdr_stream_decode_u32(argp->xdr, &lgp->lg_signal) < 0)
1833 		return nfserr_bad_xdr;
1834 	if (xdr_stream_decode_u32(argp->xdr, &lgp->lg_layout_type) < 0)
1835 		return nfserr_bad_xdr;
1836 	if (xdr_stream_decode_u32(argp->xdr, &lgp->lg_seg.iomode) < 0)
1837 		return nfserr_bad_xdr;
1838 	if (xdr_stream_decode_u64(argp->xdr, &lgp->lg_seg.offset) < 0)
1839 		return nfserr_bad_xdr;
1840 	if (xdr_stream_decode_u64(argp->xdr, &lgp->lg_seg.length) < 0)
1841 		return nfserr_bad_xdr;
1842 	if (xdr_stream_decode_u64(argp->xdr, &lgp->lg_minlength) < 0)
1843 		return nfserr_bad_xdr;
1844 	status = nfsd4_decode_stateid4(argp, &lgp->lg_sid);
1845 	if (status)
1846 		return status;
1847 	if (xdr_stream_decode_u32(argp->xdr, &lgp->lg_maxcount) < 0)
1848 		return nfserr_bad_xdr;
1849 
1850 	return nfs_ok;
1851 }
1852 
1853 static __be32
1854 nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp,
1855 		union nfsd4_op_u *u)
1856 {
1857 	struct nfsd4_layoutreturn *lrp = &u->layoutreturn;
1858 	memset(lrp, 0, sizeof(*lrp));
1859 	if (xdr_stream_decode_bool(argp->xdr, &lrp->lr_reclaim) < 0)
1860 		return nfserr_bad_xdr;
1861 	if (xdr_stream_decode_u32(argp->xdr, &lrp->lr_layout_type) < 0)
1862 		return nfserr_bad_xdr;
1863 	if (xdr_stream_decode_u32(argp->xdr, &lrp->lr_seg.iomode) < 0)
1864 		return nfserr_bad_xdr;
1865 	return nfsd4_decode_layoutreturn4(argp, lrp);
1866 }
1867 #endif /* CONFIG_NFSD_PNFS */
1868 
1869 static __be32 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
1870 					   union nfsd4_op_u *u)
1871 {
1872 	struct nfsd4_secinfo_no_name *sin = &u->secinfo_no_name;
1873 	if (xdr_stream_decode_u32(argp->xdr, &sin->sin_style) < 0)
1874 		return nfserr_bad_xdr;
1875 
1876 	sin->sin_exp = NULL;
1877 	return nfs_ok;
1878 }
1879 
1880 static __be32
1881 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1882 		      union nfsd4_op_u *u)
1883 {
1884 	struct nfsd4_sequence *seq = &u->sequence;
1885 	__be32 *p, status;
1886 
1887 	status = nfsd4_decode_sessionid4(argp, &seq->sessionid);
1888 	if (status)
1889 		return status;
1890 	p = xdr_inline_decode(argp->xdr, XDR_UNIT * 4);
1891 	if (!p)
1892 		return nfserr_bad_xdr;
1893 	seq->seqid = be32_to_cpup(p++);
1894 	seq->slotid = be32_to_cpup(p++);
1895 	seq->maxslots = be32_to_cpup(p++);
1896 	seq->cachethis = be32_to_cpup(p);
1897 
1898 	seq->status_flags = 0;
1899 	return nfs_ok;
1900 }
1901 
1902 static __be32
1903 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp,
1904 			  union nfsd4_op_u *u)
1905 {
1906 	struct nfsd4_test_stateid *test_stateid = &u->test_stateid;
1907 	struct nfsd4_test_stateid_id *stateid;
1908 	__be32 status;
1909 	u32 i;
1910 
1911 	memset(test_stateid, 0, sizeof(*test_stateid));
1912 	if (xdr_stream_decode_u32(argp->xdr, &test_stateid->ts_num_ids) < 0)
1913 		return nfserr_bad_xdr;
1914 
1915 	INIT_LIST_HEAD(&test_stateid->ts_stateid_list);
1916 	for (i = 0; i < test_stateid->ts_num_ids; i++) {
1917 		stateid = svcxdr_tmpalloc(argp, sizeof(*stateid));
1918 		if (!stateid)
1919 			return nfserr_jukebox;
1920 		INIT_LIST_HEAD(&stateid->ts_id_list);
1921 		list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list);
1922 		status = nfsd4_decode_stateid4(argp, &stateid->ts_id_stateid);
1923 		if (status)
1924 			return status;
1925 	}
1926 
1927 	return nfs_ok;
1928 }
1929 
1930 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp,
1931 					    union nfsd4_op_u *u)
1932 {
1933 	struct nfsd4_destroy_clientid *dc = &u->destroy_clientid;
1934 	return nfsd4_decode_clientid4(argp, &dc->clientid);
1935 }
1936 
1937 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp,
1938 					    union nfsd4_op_u *u)
1939 {
1940 	struct nfsd4_reclaim_complete *rc = &u->reclaim_complete;
1941 	if (xdr_stream_decode_bool(argp->xdr, &rc->rca_one_fs) < 0)
1942 		return nfserr_bad_xdr;
1943 	return nfs_ok;
1944 }
1945 
1946 static __be32
1947 nfsd4_decode_fallocate(struct nfsd4_compoundargs *argp,
1948 		       union nfsd4_op_u *u)
1949 {
1950 	struct nfsd4_fallocate *fallocate = &u->allocate;
1951 	__be32 status;
1952 
1953 	status = nfsd4_decode_stateid4(argp, &fallocate->falloc_stateid);
1954 	if (status)
1955 		return status;
1956 	if (xdr_stream_decode_u64(argp->xdr, &fallocate->falloc_offset) < 0)
1957 		return nfserr_bad_xdr;
1958 	if (xdr_stream_decode_u64(argp->xdr, &fallocate->falloc_length) < 0)
1959 		return nfserr_bad_xdr;
1960 
1961 	return nfs_ok;
1962 }
1963 
1964 static __be32 nfsd4_decode_nl4_server(struct nfsd4_compoundargs *argp,
1965 				      struct nl4_server *ns)
1966 {
1967 	struct nfs42_netaddr *naddr;
1968 	__be32 *p;
1969 
1970 	if (xdr_stream_decode_u32(argp->xdr, &ns->nl4_type) < 0)
1971 		return nfserr_bad_xdr;
1972 
1973 	/* currently support for 1 inter-server source server */
1974 	switch (ns->nl4_type) {
1975 	case NL4_NETADDR:
1976 		naddr = &ns->u.nl4_addr;
1977 
1978 		if (xdr_stream_decode_u32(argp->xdr, &naddr->netid_len) < 0)
1979 			return nfserr_bad_xdr;
1980 		if (naddr->netid_len > RPCBIND_MAXNETIDLEN)
1981 			return nfserr_bad_xdr;
1982 
1983 		p = xdr_inline_decode(argp->xdr, naddr->netid_len);
1984 		if (!p)
1985 			return nfserr_bad_xdr;
1986 		memcpy(naddr->netid, p, naddr->netid_len);
1987 
1988 		if (xdr_stream_decode_u32(argp->xdr, &naddr->addr_len) < 0)
1989 			return nfserr_bad_xdr;
1990 		if (naddr->addr_len > RPCBIND_MAXUADDRLEN)
1991 			return nfserr_bad_xdr;
1992 
1993 		p = xdr_inline_decode(argp->xdr, naddr->addr_len);
1994 		if (!p)
1995 			return nfserr_bad_xdr;
1996 		memcpy(naddr->addr, p, naddr->addr_len);
1997 		break;
1998 	default:
1999 		return nfserr_bad_xdr;
2000 	}
2001 
2002 	return nfs_ok;
2003 }
2004 
2005 static __be32
2006 nfsd4_decode_copy(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
2007 {
2008 	struct nfsd4_copy *copy = &u->copy;
2009 	u32 consecutive, i, count, sync;
2010 	struct nl4_server *ns_dummy;
2011 	__be32 status;
2012 
2013 	memset(copy, 0, sizeof(*copy));
2014 	status = nfsd4_decode_stateid4(argp, &copy->cp_src_stateid);
2015 	if (status)
2016 		return status;
2017 	status = nfsd4_decode_stateid4(argp, &copy->cp_dst_stateid);
2018 	if (status)
2019 		return status;
2020 	if (xdr_stream_decode_u64(argp->xdr, &copy->cp_src_pos) < 0)
2021 		return nfserr_bad_xdr;
2022 	if (xdr_stream_decode_u64(argp->xdr, &copy->cp_dst_pos) < 0)
2023 		return nfserr_bad_xdr;
2024 	if (xdr_stream_decode_u64(argp->xdr, &copy->cp_count) < 0)
2025 		return nfserr_bad_xdr;
2026 	/* ca_consecutive: we always do consecutive copies */
2027 	if (xdr_stream_decode_u32(argp->xdr, &consecutive) < 0)
2028 		return nfserr_bad_xdr;
2029 	if (xdr_stream_decode_bool(argp->xdr, &sync) < 0)
2030 		return nfserr_bad_xdr;
2031 	nfsd4_copy_set_sync(copy, sync);
2032 
2033 	if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
2034 		return nfserr_bad_xdr;
2035 	copy->cp_src = svcxdr_tmpalloc(argp, sizeof(*copy->cp_src));
2036 	if (copy->cp_src == NULL)
2037 		return nfserr_jukebox;
2038 	if (count == 0) { /* intra-server copy */
2039 		__set_bit(NFSD4_COPY_F_INTRA, &copy->cp_flags);
2040 		return nfs_ok;
2041 	}
2042 
2043 	/* decode all the supplied server addresses but use only the first */
2044 	status = nfsd4_decode_nl4_server(argp, copy->cp_src);
2045 	if (status)
2046 		return status;
2047 
2048 	ns_dummy = kmalloc(sizeof(struct nl4_server), GFP_KERNEL);
2049 	if (ns_dummy == NULL)
2050 		return nfserr_jukebox;
2051 	for (i = 0; i < count - 1; i++) {
2052 		status = nfsd4_decode_nl4_server(argp, ns_dummy);
2053 		if (status) {
2054 			kfree(ns_dummy);
2055 			return status;
2056 		}
2057 	}
2058 	kfree(ns_dummy);
2059 
2060 	return nfs_ok;
2061 }
2062 
2063 static __be32
2064 nfsd4_decode_copy_notify(struct nfsd4_compoundargs *argp,
2065 			 union nfsd4_op_u *u)
2066 {
2067 	struct nfsd4_copy_notify *cn = &u->copy_notify;
2068 	__be32 status;
2069 
2070 	memset(cn, 0, sizeof(*cn));
2071 	cn->cpn_src = svcxdr_tmpalloc(argp, sizeof(*cn->cpn_src));
2072 	if (cn->cpn_src == NULL)
2073 		return nfserr_jukebox;
2074 	cn->cpn_dst = svcxdr_tmpalloc(argp, sizeof(*cn->cpn_dst));
2075 	if (cn->cpn_dst == NULL)
2076 		return nfserr_jukebox;
2077 
2078 	status = nfsd4_decode_stateid4(argp, &cn->cpn_src_stateid);
2079 	if (status)
2080 		return status;
2081 	return nfsd4_decode_nl4_server(argp, cn->cpn_dst);
2082 }
2083 
2084 static __be32
2085 nfsd4_decode_offload_status(struct nfsd4_compoundargs *argp,
2086 			    union nfsd4_op_u *u)
2087 {
2088 	struct nfsd4_offload_status *os = &u->offload_status;
2089 	os->count = 0;
2090 	os->status = 0;
2091 	return nfsd4_decode_stateid4(argp, &os->stateid);
2092 }
2093 
2094 static __be32
2095 nfsd4_decode_seek(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
2096 {
2097 	struct nfsd4_seek *seek = &u->seek;
2098 	__be32 status;
2099 
2100 	status = nfsd4_decode_stateid4(argp, &seek->seek_stateid);
2101 	if (status)
2102 		return status;
2103 	if (xdr_stream_decode_u64(argp->xdr, &seek->seek_offset) < 0)
2104 		return nfserr_bad_xdr;
2105 	if (xdr_stream_decode_u32(argp->xdr, &seek->seek_whence) < 0)
2106 		return nfserr_bad_xdr;
2107 
2108 	seek->seek_eof = 0;
2109 	seek->seek_pos = 0;
2110 	return nfs_ok;
2111 }
2112 
2113 static __be32
2114 nfsd4_decode_clone(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u)
2115 {
2116 	struct nfsd4_clone *clone = &u->clone;
2117 	__be32 status;
2118 
2119 	status = nfsd4_decode_stateid4(argp, &clone->cl_src_stateid);
2120 	if (status)
2121 		return status;
2122 	status = nfsd4_decode_stateid4(argp, &clone->cl_dst_stateid);
2123 	if (status)
2124 		return status;
2125 	if (xdr_stream_decode_u64(argp->xdr, &clone->cl_src_pos) < 0)
2126 		return nfserr_bad_xdr;
2127 	if (xdr_stream_decode_u64(argp->xdr, &clone->cl_dst_pos) < 0)
2128 		return nfserr_bad_xdr;
2129 	if (xdr_stream_decode_u64(argp->xdr, &clone->cl_count) < 0)
2130 		return nfserr_bad_xdr;
2131 
2132 	return nfs_ok;
2133 }
2134 
2135 /*
2136  * XDR data that is more than PAGE_SIZE in size is normally part of a
2137  * read or write. However, the size of extended attributes is limited
2138  * by the maximum request size, and then further limited by the underlying
2139  * filesystem limits. This can exceed PAGE_SIZE (currently, XATTR_SIZE_MAX
2140  * is 64k). Since there is no kvec- or page-based interface to xattrs,
2141  * and we're not dealing with contiguous pages, we need to do some copying.
2142  */
2143 
2144 /*
2145  * Decode data into buffer.
2146  */
2147 static __be32
2148 nfsd4_vbuf_from_vector(struct nfsd4_compoundargs *argp, struct xdr_buf *xdr,
2149 		       char **bufp, size_t buflen)
2150 {
2151 	struct page **pages = xdr->pages;
2152 	struct kvec *head = xdr->head;
2153 	char *tmp, *dp;
2154 	u32 len;
2155 
2156 	if (buflen <= head->iov_len) {
2157 		/*
2158 		 * We're in luck, the head has enough space. Just return
2159 		 * the head, no need for copying.
2160 		 */
2161 		*bufp = head->iov_base;
2162 		return 0;
2163 	}
2164 
2165 	tmp = svcxdr_tmpalloc(argp, buflen);
2166 	if (tmp == NULL)
2167 		return nfserr_jukebox;
2168 
2169 	dp = tmp;
2170 	memcpy(dp, head->iov_base, head->iov_len);
2171 	buflen -= head->iov_len;
2172 	dp += head->iov_len;
2173 
2174 	while (buflen > 0) {
2175 		len = min_t(u32, buflen, PAGE_SIZE);
2176 		memcpy(dp, page_address(*pages), len);
2177 
2178 		buflen -= len;
2179 		dp += len;
2180 		pages++;
2181 	}
2182 
2183 	*bufp = tmp;
2184 	return 0;
2185 }
2186 
2187 /*
2188  * Get a user extended attribute name from the XDR buffer.
2189  * It will not have the "user." prefix, so prepend it.
2190  * Lastly, check for nul characters in the name.
2191  */
2192 static __be32
2193 nfsd4_decode_xattr_name(struct nfsd4_compoundargs *argp, char **namep)
2194 {
2195 	char *name, *sp, *dp;
2196 	u32 namelen, cnt;
2197 	__be32 *p;
2198 
2199 	if (xdr_stream_decode_u32(argp->xdr, &namelen) < 0)
2200 		return nfserr_bad_xdr;
2201 	if (namelen > (XATTR_NAME_MAX - XATTR_USER_PREFIX_LEN))
2202 		return nfserr_nametoolong;
2203 	if (namelen == 0)
2204 		return nfserr_bad_xdr;
2205 	p = xdr_inline_decode(argp->xdr, namelen);
2206 	if (!p)
2207 		return nfserr_bad_xdr;
2208 	name = svcxdr_tmpalloc(argp, namelen + XATTR_USER_PREFIX_LEN + 1);
2209 	if (!name)
2210 		return nfserr_jukebox;
2211 	memcpy(name, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN);
2212 
2213 	/*
2214 	 * Copy the extended attribute name over while checking for 0
2215 	 * characters.
2216 	 */
2217 	sp = (char *)p;
2218 	dp = name + XATTR_USER_PREFIX_LEN;
2219 	cnt = namelen;
2220 
2221 	while (cnt-- > 0) {
2222 		if (*sp == '\0')
2223 			return nfserr_bad_xdr;
2224 		*dp++ = *sp++;
2225 	}
2226 	*dp = '\0';
2227 
2228 	*namep = name;
2229 
2230 	return nfs_ok;
2231 }
2232 
2233 /*
2234  * A GETXATTR op request comes without a length specifier. We just set the
2235  * maximum length for the reply based on XATTR_SIZE_MAX and the maximum
2236  * channel reply size. nfsd_getxattr will probe the length of the xattr,
2237  * check it against getxa_len, and allocate + return the value.
2238  */
2239 static __be32
2240 nfsd4_decode_getxattr(struct nfsd4_compoundargs *argp,
2241 		      union nfsd4_op_u *u)
2242 {
2243 	struct nfsd4_getxattr *getxattr = &u->getxattr;
2244 	__be32 status;
2245 	u32 maxcount;
2246 
2247 	memset(getxattr, 0, sizeof(*getxattr));
2248 	status = nfsd4_decode_xattr_name(argp, &getxattr->getxa_name);
2249 	if (status)
2250 		return status;
2251 
2252 	maxcount = svc_max_payload(argp->rqstp);
2253 	maxcount = min_t(u32, XATTR_SIZE_MAX, maxcount);
2254 
2255 	getxattr->getxa_len = maxcount;
2256 	return nfs_ok;
2257 }
2258 
2259 static __be32
2260 nfsd4_decode_setxattr(struct nfsd4_compoundargs *argp,
2261 		      union nfsd4_op_u *u)
2262 {
2263 	struct nfsd4_setxattr *setxattr = &u->setxattr;
2264 	u32 flags, maxcount, size;
2265 	__be32 status;
2266 
2267 	memset(setxattr, 0, sizeof(*setxattr));
2268 
2269 	if (xdr_stream_decode_u32(argp->xdr, &flags) < 0)
2270 		return nfserr_bad_xdr;
2271 
2272 	if (flags > SETXATTR4_REPLACE)
2273 		return nfserr_inval;
2274 	setxattr->setxa_flags = flags;
2275 
2276 	status = nfsd4_decode_xattr_name(argp, &setxattr->setxa_name);
2277 	if (status)
2278 		return status;
2279 
2280 	maxcount = svc_max_payload(argp->rqstp);
2281 	maxcount = min_t(u32, XATTR_SIZE_MAX, maxcount);
2282 
2283 	if (xdr_stream_decode_u32(argp->xdr, &size) < 0)
2284 		return nfserr_bad_xdr;
2285 	if (size > maxcount)
2286 		return nfserr_xattr2big;
2287 
2288 	setxattr->setxa_len = size;
2289 	if (size > 0) {
2290 		struct xdr_buf payload;
2291 
2292 		if (!xdr_stream_subsegment(argp->xdr, &payload, size))
2293 			return nfserr_bad_xdr;
2294 		status = nfsd4_vbuf_from_vector(argp, &payload,
2295 						&setxattr->setxa_buf, size);
2296 	}
2297 
2298 	return nfs_ok;
2299 }
2300 
2301 static __be32
2302 nfsd4_decode_listxattrs(struct nfsd4_compoundargs *argp,
2303 			union nfsd4_op_u *u)
2304 {
2305 	struct nfsd4_listxattrs *listxattrs = &u->listxattrs;
2306 	u32 maxcount;
2307 
2308 	memset(listxattrs, 0, sizeof(*listxattrs));
2309 
2310 	if (xdr_stream_decode_u64(argp->xdr, &listxattrs->lsxa_cookie) < 0)
2311 		return nfserr_bad_xdr;
2312 
2313 	/*
2314 	 * If the cookie  is too large to have even one user.x attribute
2315 	 * plus trailing '\0' left in a maximum size buffer, it's invalid.
2316 	 */
2317 	if (listxattrs->lsxa_cookie >=
2318 	    (XATTR_LIST_MAX / (XATTR_USER_PREFIX_LEN + 2)))
2319 		return nfserr_badcookie;
2320 
2321 	if (xdr_stream_decode_u32(argp->xdr, &maxcount) < 0)
2322 		return nfserr_bad_xdr;
2323 	if (maxcount < 8)
2324 		/* Always need at least 2 words (length and one character) */
2325 		return nfserr_inval;
2326 
2327 	maxcount = min(maxcount, svc_max_payload(argp->rqstp));
2328 	listxattrs->lsxa_maxcount = maxcount;
2329 
2330 	return nfs_ok;
2331 }
2332 
2333 static __be32
2334 nfsd4_decode_removexattr(struct nfsd4_compoundargs *argp,
2335 			 union nfsd4_op_u *u)
2336 {
2337 	struct nfsd4_removexattr *removexattr = &u->removexattr;
2338 	memset(removexattr, 0, sizeof(*removexattr));
2339 	return nfsd4_decode_xattr_name(argp, &removexattr->rmxa_name);
2340 }
2341 
2342 static __be32
2343 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, union nfsd4_op_u *p)
2344 {
2345 	return nfs_ok;
2346 }
2347 
2348 static __be32
2349 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, union nfsd4_op_u *p)
2350 {
2351 	return nfserr_notsupp;
2352 }
2353 
2354 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, union nfsd4_op_u *u);
2355 
2356 static const nfsd4_dec nfsd4_dec_ops[] = {
2357 	[OP_ACCESS]		= nfsd4_decode_access,
2358 	[OP_CLOSE]		= nfsd4_decode_close,
2359 	[OP_COMMIT]		= nfsd4_decode_commit,
2360 	[OP_CREATE]		= nfsd4_decode_create,
2361 	[OP_DELEGPURGE]		= nfsd4_decode_notsupp,
2362 	[OP_DELEGRETURN]	= nfsd4_decode_delegreturn,
2363 	[OP_GETATTR]		= nfsd4_decode_getattr,
2364 	[OP_GETFH]		= nfsd4_decode_noop,
2365 	[OP_LINK]		= nfsd4_decode_link,
2366 	[OP_LOCK]		= nfsd4_decode_lock,
2367 	[OP_LOCKT]		= nfsd4_decode_lockt,
2368 	[OP_LOCKU]		= nfsd4_decode_locku,
2369 	[OP_LOOKUP]		= nfsd4_decode_lookup,
2370 	[OP_LOOKUPP]		= nfsd4_decode_noop,
2371 	[OP_NVERIFY]		= nfsd4_decode_verify,
2372 	[OP_OPEN]		= nfsd4_decode_open,
2373 	[OP_OPENATTR]		= nfsd4_decode_notsupp,
2374 	[OP_OPEN_CONFIRM]	= nfsd4_decode_open_confirm,
2375 	[OP_OPEN_DOWNGRADE]	= nfsd4_decode_open_downgrade,
2376 	[OP_PUTFH]		= nfsd4_decode_putfh,
2377 	[OP_PUTPUBFH]		= nfsd4_decode_putpubfh,
2378 	[OP_PUTROOTFH]		= nfsd4_decode_noop,
2379 	[OP_READ]		= nfsd4_decode_read,
2380 	[OP_READDIR]		= nfsd4_decode_readdir,
2381 	[OP_READLINK]		= nfsd4_decode_noop,
2382 	[OP_REMOVE]		= nfsd4_decode_remove,
2383 	[OP_RENAME]		= nfsd4_decode_rename,
2384 	[OP_RENEW]		= nfsd4_decode_renew,
2385 	[OP_RESTOREFH]		= nfsd4_decode_noop,
2386 	[OP_SAVEFH]		= nfsd4_decode_noop,
2387 	[OP_SECINFO]		= nfsd4_decode_secinfo,
2388 	[OP_SETATTR]		= nfsd4_decode_setattr,
2389 	[OP_SETCLIENTID]	= nfsd4_decode_setclientid,
2390 	[OP_SETCLIENTID_CONFIRM] = nfsd4_decode_setclientid_confirm,
2391 	[OP_VERIFY]		= nfsd4_decode_verify,
2392 	[OP_WRITE]		= nfsd4_decode_write,
2393 	[OP_RELEASE_LOCKOWNER]	= nfsd4_decode_release_lockowner,
2394 
2395 	/* new operations for NFSv4.1 */
2396 	[OP_BACKCHANNEL_CTL]	= nfsd4_decode_backchannel_ctl,
2397 	[OP_BIND_CONN_TO_SESSION] = nfsd4_decode_bind_conn_to_session,
2398 	[OP_EXCHANGE_ID]	= nfsd4_decode_exchange_id,
2399 	[OP_CREATE_SESSION]	= nfsd4_decode_create_session,
2400 	[OP_DESTROY_SESSION]	= nfsd4_decode_destroy_session,
2401 	[OP_FREE_STATEID]	= nfsd4_decode_free_stateid,
2402 	[OP_GET_DIR_DELEGATION]	= nfsd4_decode_get_dir_delegation,
2403 #ifdef CONFIG_NFSD_PNFS
2404 	[OP_GETDEVICEINFO]	= nfsd4_decode_getdeviceinfo,
2405 	[OP_GETDEVICELIST]	= nfsd4_decode_notsupp,
2406 	[OP_LAYOUTCOMMIT]	= nfsd4_decode_layoutcommit,
2407 	[OP_LAYOUTGET]		= nfsd4_decode_layoutget,
2408 	[OP_LAYOUTRETURN]	= nfsd4_decode_layoutreturn,
2409 #else
2410 	[OP_GETDEVICEINFO]	= nfsd4_decode_notsupp,
2411 	[OP_GETDEVICELIST]	= nfsd4_decode_notsupp,
2412 	[OP_LAYOUTCOMMIT]	= nfsd4_decode_notsupp,
2413 	[OP_LAYOUTGET]		= nfsd4_decode_notsupp,
2414 	[OP_LAYOUTRETURN]	= nfsd4_decode_notsupp,
2415 #endif
2416 	[OP_SECINFO_NO_NAME]	= nfsd4_decode_secinfo_no_name,
2417 	[OP_SEQUENCE]		= nfsd4_decode_sequence,
2418 	[OP_SET_SSV]		= nfsd4_decode_notsupp,
2419 	[OP_TEST_STATEID]	= nfsd4_decode_test_stateid,
2420 	[OP_WANT_DELEGATION]	= nfsd4_decode_notsupp,
2421 	[OP_DESTROY_CLIENTID]	= nfsd4_decode_destroy_clientid,
2422 	[OP_RECLAIM_COMPLETE]	= nfsd4_decode_reclaim_complete,
2423 
2424 	/* new operations for NFSv4.2 */
2425 	[OP_ALLOCATE]		= nfsd4_decode_fallocate,
2426 	[OP_COPY]		= nfsd4_decode_copy,
2427 	[OP_COPY_NOTIFY]	= nfsd4_decode_copy_notify,
2428 	[OP_DEALLOCATE]		= nfsd4_decode_fallocate,
2429 	[OP_IO_ADVISE]		= nfsd4_decode_notsupp,
2430 	[OP_LAYOUTERROR]	= nfsd4_decode_notsupp,
2431 	[OP_LAYOUTSTATS]	= nfsd4_decode_notsupp,
2432 	[OP_OFFLOAD_CANCEL]	= nfsd4_decode_offload_status,
2433 	[OP_OFFLOAD_STATUS]	= nfsd4_decode_offload_status,
2434 	[OP_READ_PLUS]		= nfsd4_decode_read,
2435 	[OP_SEEK]		= nfsd4_decode_seek,
2436 	[OP_WRITE_SAME]		= nfsd4_decode_notsupp,
2437 	[OP_CLONE]		= nfsd4_decode_clone,
2438 	/* RFC 8276 extended atributes operations */
2439 	[OP_GETXATTR]		= nfsd4_decode_getxattr,
2440 	[OP_SETXATTR]		= nfsd4_decode_setxattr,
2441 	[OP_LISTXATTRS]		= nfsd4_decode_listxattrs,
2442 	[OP_REMOVEXATTR]	= nfsd4_decode_removexattr,
2443 };
2444 
2445 static inline bool
2446 nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op)
2447 {
2448 	if (op->opnum < FIRST_NFS4_OP)
2449 		return false;
2450 	else if (argp->minorversion == 0 && op->opnum > LAST_NFS40_OP)
2451 		return false;
2452 	else if (argp->minorversion == 1 && op->opnum > LAST_NFS41_OP)
2453 		return false;
2454 	else if (argp->minorversion == 2 && op->opnum > LAST_NFS42_OP)
2455 		return false;
2456 	return true;
2457 }
2458 
2459 static bool
2460 nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
2461 {
2462 	struct nfsd4_op *op;
2463 	bool cachethis = false;
2464 	int auth_slack= argp->rqstp->rq_auth_slack;
2465 	int max_reply = auth_slack + 8; /* opcnt, status */
2466 	int readcount = 0;
2467 	int readbytes = 0;
2468 	__be32 *p;
2469 	int i;
2470 
2471 	if (xdr_stream_decode_u32(argp->xdr, &argp->taglen) < 0)
2472 		return false;
2473 	max_reply += XDR_UNIT;
2474 	argp->tag = NULL;
2475 	if (unlikely(argp->taglen)) {
2476 		if (argp->taglen > NFSD4_MAX_TAGLEN)
2477 			return false;
2478 		p = xdr_inline_decode(argp->xdr, argp->taglen);
2479 		if (!p)
2480 			return false;
2481 		argp->tag = svcxdr_savemem(argp, p, argp->taglen);
2482 		if (!argp->tag)
2483 			return false;
2484 		max_reply += xdr_align_size(argp->taglen);
2485 	}
2486 
2487 	if (xdr_stream_decode_u32(argp->xdr, &argp->minorversion) < 0)
2488 		return false;
2489 	if (xdr_stream_decode_u32(argp->xdr, &argp->client_opcnt) < 0)
2490 		return false;
2491 	argp->opcnt = min_t(u32, argp->client_opcnt,
2492 			    NFSD_MAX_OPS_PER_COMPOUND);
2493 
2494 	if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
2495 		argp->ops = vcalloc(argp->opcnt, sizeof(*argp->ops));
2496 		if (!argp->ops) {
2497 			argp->ops = argp->iops;
2498 			return false;
2499 		}
2500 	}
2501 
2502 	if (argp->minorversion > NFSD_SUPPORTED_MINOR_VERSION)
2503 		argp->opcnt = 0;
2504 
2505 	for (i = 0; i < argp->opcnt; i++) {
2506 		op = &argp->ops[i];
2507 		op->replay = NULL;
2508 		op->opdesc = NULL;
2509 
2510 		if (xdr_stream_decode_u32(argp->xdr, &op->opnum) < 0)
2511 			return false;
2512 		if (nfsd4_opnum_in_range(argp, op)) {
2513 			op->opdesc = OPDESC(op);
2514 			op->status = nfsd4_dec_ops[op->opnum](argp, &op->u);
2515 			if (op->status != nfs_ok)
2516 				trace_nfsd_compound_decode_err(argp->rqstp,
2517 							       argp->opcnt, i,
2518 							       op->opnum,
2519 							       op->status);
2520 		} else {
2521 			op->opnum = OP_ILLEGAL;
2522 			op->status = nfserr_op_illegal;
2523 		}
2524 
2525 		/*
2526 		 * We'll try to cache the result in the DRC if any one
2527 		 * op in the compound wants to be cached:
2528 		 */
2529 		cachethis |= nfsd4_cache_this_op(op);
2530 
2531 		if (op->opnum == OP_READ || op->opnum == OP_READ_PLUS) {
2532 			readcount++;
2533 			readbytes += nfsd4_max_reply(argp->rqstp, op);
2534 		} else
2535 			max_reply += nfsd4_max_reply(argp->rqstp, op);
2536 		/*
2537 		 * OP_LOCK and OP_LOCKT may return a conflicting lock.
2538 		 * (Special case because it will just skip encoding this
2539 		 * if it runs out of xdr buffer space, and it is the only
2540 		 * operation that behaves this way.)
2541 		 */
2542 		if (op->opnum == OP_LOCK || op->opnum == OP_LOCKT)
2543 			max_reply += NFS4_OPAQUE_LIMIT;
2544 
2545 		if (op->status) {
2546 			argp->opcnt = i+1;
2547 			break;
2548 		}
2549 	}
2550 	/* Sessions make the DRC unnecessary: */
2551 	if (argp->minorversion)
2552 		cachethis = false;
2553 	svc_reserve(argp->rqstp, max_reply + readbytes);
2554 	argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
2555 
2556 	argp->splice_ok = nfsd_read_splice_ok(argp->rqstp);
2557 	if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack)
2558 		argp->splice_ok = false;
2559 
2560 	return true;
2561 }
2562 
2563 static __be32 nfsd4_encode_nfs_fh4(struct xdr_stream *xdr,
2564 				   struct knfsd_fh *fh_handle)
2565 {
2566 	return nfsd4_encode_opaque(xdr, fh_handle->fh_raw, fh_handle->fh_size);
2567 }
2568 
2569 /* This is a frequently-encoded type; open-coded for speed */
2570 static __be32 nfsd4_encode_nfstime4(struct xdr_stream *xdr,
2571 				    const struct timespec64 *tv)
2572 {
2573 	__be32 *p;
2574 
2575 	p = xdr_reserve_space(xdr, XDR_UNIT * 3);
2576 	if (!p)
2577 		return nfserr_resource;
2578 	p = xdr_encode_hyper(p, tv->tv_sec);
2579 	*p = cpu_to_be32(tv->tv_nsec);
2580 	return nfs_ok;
2581 }
2582 
2583 static __be32 nfsd4_encode_specdata4(struct xdr_stream *xdr,
2584 				     unsigned int major, unsigned int minor)
2585 {
2586 	__be32 status;
2587 
2588 	status = nfsd4_encode_uint32_t(xdr, major);
2589 	if (status != nfs_ok)
2590 		return status;
2591 	return nfsd4_encode_uint32_t(xdr, minor);
2592 }
2593 
2594 static __be32
2595 nfsd4_encode_change_info4(struct xdr_stream *xdr, const struct nfsd4_change_info *c)
2596 {
2597 	__be32 status;
2598 
2599 	status = nfsd4_encode_bool(xdr, c->atomic);
2600 	if (status != nfs_ok)
2601 		return status;
2602 	status = nfsd4_encode_changeid4(xdr, c->before_change);
2603 	if (status != nfs_ok)
2604 		return status;
2605 	return nfsd4_encode_changeid4(xdr, c->after_change);
2606 }
2607 
2608 static __be32 nfsd4_encode_netaddr4(struct xdr_stream *xdr,
2609 				    const struct nfs42_netaddr *addr)
2610 {
2611 	__be32 status;
2612 
2613 	/* na_r_netid */
2614 	status = nfsd4_encode_opaque(xdr, addr->netid, addr->netid_len);
2615 	if (status != nfs_ok)
2616 		return status;
2617 	/* na_r_addr */
2618 	return nfsd4_encode_opaque(xdr, addr->addr, addr->addr_len);
2619 }
2620 
2621 /* Encode as an array of strings the string given with components
2622  * separated @sep, escaped with esc_enter and esc_exit.
2623  */
2624 static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep,
2625 					  char *components, char esc_enter,
2626 					  char esc_exit)
2627 {
2628 	__be32 *p;
2629 	__be32 pathlen;
2630 	int pathlen_offset;
2631 	int strlen, count=0;
2632 	char *str, *end, *next;
2633 
2634 	dprintk("nfsd4_encode_components(%s)\n", components);
2635 
2636 	pathlen_offset = xdr->buf->len;
2637 	p = xdr_reserve_space(xdr, 4);
2638 	if (!p)
2639 		return nfserr_resource;
2640 	p++; /* We will fill this in with @count later */
2641 
2642 	end = str = components;
2643 	while (*end) {
2644 		bool found_esc = false;
2645 
2646 		/* try to parse as esc_start, ..., esc_end, sep */
2647 		if (*str == esc_enter) {
2648 			for (; *end && (*end != esc_exit); end++)
2649 				/* find esc_exit or end of string */;
2650 			next = end + 1;
2651 			if (*end && (!*next || *next == sep)) {
2652 				str++;
2653 				found_esc = true;
2654 			}
2655 		}
2656 
2657 		if (!found_esc)
2658 			for (; *end && (*end != sep); end++)
2659 				/* find sep or end of string */;
2660 
2661 		strlen = end - str;
2662 		if (strlen) {
2663 			p = xdr_reserve_space(xdr, strlen + 4);
2664 			if (!p)
2665 				return nfserr_resource;
2666 			p = xdr_encode_opaque(p, str, strlen);
2667 			count++;
2668 		}
2669 		else
2670 			end++;
2671 		if (found_esc)
2672 			end = next;
2673 
2674 		str = end;
2675 	}
2676 	pathlen = htonl(count);
2677 	write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4);
2678 	return 0;
2679 }
2680 
2681 /* Encode as an array of strings the string given with components
2682  * separated @sep.
2683  */
2684 static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep,
2685 				      char *components)
2686 {
2687 	return nfsd4_encode_components_esc(xdr, sep, components, 0, 0);
2688 }
2689 
2690 static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr,
2691 					struct nfsd4_fs_location *location)
2692 {
2693 	__be32 status;
2694 
2695 	status = nfsd4_encode_components_esc(xdr, ':', location->hosts,
2696 						'[', ']');
2697 	if (status)
2698 		return status;
2699 	status = nfsd4_encode_components(xdr, '/', location->path);
2700 	if (status)
2701 		return status;
2702 	return nfs_ok;
2703 }
2704 
2705 static __be32 nfsd4_encode_pathname4(struct xdr_stream *xdr,
2706 				     const struct path *root,
2707 				     const struct path *path)
2708 {
2709 	struct path cur = *path;
2710 	__be32 *p;
2711 	struct dentry **components = NULL;
2712 	unsigned int ncomponents = 0;
2713 	__be32 err = nfserr_jukebox;
2714 
2715 	dprintk("nfsd4_encode_components(");
2716 
2717 	path_get(&cur);
2718 	/* First walk the path up to the nfsd root, and store the
2719 	 * dentries/path components in an array.
2720 	 */
2721 	for (;;) {
2722 		if (path_equal(&cur, root))
2723 			break;
2724 		if (cur.dentry == cur.mnt->mnt_root) {
2725 			if (follow_up(&cur))
2726 				continue;
2727 			goto out_free;
2728 		}
2729 		if ((ncomponents & 15) == 0) {
2730 			struct dentry **new;
2731 			new = krealloc(components,
2732 					sizeof(*new) * (ncomponents + 16),
2733 					GFP_KERNEL);
2734 			if (!new)
2735 				goto out_free;
2736 			components = new;
2737 		}
2738 		components[ncomponents++] = cur.dentry;
2739 		cur.dentry = dget_parent(cur.dentry);
2740 	}
2741 	err = nfserr_resource;
2742 	p = xdr_reserve_space(xdr, 4);
2743 	if (!p)
2744 		goto out_free;
2745 	*p++ = cpu_to_be32(ncomponents);
2746 
2747 	while (ncomponents) {
2748 		struct dentry *dentry = components[ncomponents - 1];
2749 		unsigned int len;
2750 
2751 		spin_lock(&dentry->d_lock);
2752 		len = dentry->d_name.len;
2753 		p = xdr_reserve_space(xdr, len + 4);
2754 		if (!p) {
2755 			spin_unlock(&dentry->d_lock);
2756 			goto out_free;
2757 		}
2758 		p = xdr_encode_opaque(p, dentry->d_name.name, len);
2759 		dprintk("/%pd", dentry);
2760 		spin_unlock(&dentry->d_lock);
2761 		dput(dentry);
2762 		ncomponents--;
2763 	}
2764 
2765 	err = 0;
2766 out_free:
2767 	dprintk(")\n");
2768 	while (ncomponents)
2769 		dput(components[--ncomponents]);
2770 	kfree(components);
2771 	path_put(&cur);
2772 	return err;
2773 }
2774 
2775 static __be32 nfsd4_encode_fs_locations4(struct xdr_stream *xdr,
2776 					 struct svc_rqst *rqstp,
2777 					 struct svc_export *exp)
2778 {
2779 	struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
2780 	struct svc_export *exp_ps;
2781 	unsigned int i;
2782 	__be32 status;
2783 
2784 	/* fs_root */
2785 	exp_ps = rqst_find_fsidzero_export(rqstp);
2786 	if (IS_ERR(exp_ps))
2787 		return nfserrno(PTR_ERR(exp_ps));
2788 	status = nfsd4_encode_pathname4(xdr, &exp_ps->ex_path, &exp->ex_path);
2789 	exp_put(exp_ps);
2790 	if (status != nfs_ok)
2791 		return status;
2792 
2793 	/* locations<> */
2794 	if (xdr_stream_encode_u32(xdr, fslocs->locations_count) != XDR_UNIT)
2795 		return nfserr_resource;
2796 	for (i = 0; i < fslocs->locations_count; i++) {
2797 		status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]);
2798 		if (status != nfs_ok)
2799 			return status;
2800 	}
2801 
2802 	return nfs_ok;
2803 }
2804 
2805 static __be32 nfsd4_encode_nfsace4(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2806 				   struct nfs4_ace *ace)
2807 {
2808 	__be32 status;
2809 
2810 	/* type */
2811 	status = nfsd4_encode_acetype4(xdr, ace->type);
2812 	if (status != nfs_ok)
2813 		return nfserr_resource;
2814 	/* flag */
2815 	status = nfsd4_encode_aceflag4(xdr, ace->flag);
2816 	if (status != nfs_ok)
2817 		return nfserr_resource;
2818 	/* access mask */
2819 	status = nfsd4_encode_acemask4(xdr, ace->access_mask & NFS4_ACE_MASK_ALL);
2820 	if (status != nfs_ok)
2821 		return nfserr_resource;
2822 	/* who */
2823 	if (ace->whotype != NFS4_ACL_WHO_NAMED)
2824 		return nfs4_acl_write_who(xdr, ace->whotype);
2825 	if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
2826 		return nfsd4_encode_group(xdr, rqstp, ace->who_gid);
2827 	return nfsd4_encode_user(xdr, rqstp, ace->who_uid);
2828 }
2829 
2830 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
2831 			      FATTR4_WORD0_RDATTR_ERROR)
2832 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
2833 #define WORD2_ABSENT_FS_ATTRS 0
2834 
2835 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2836 static inline __be32
2837 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2838 			    void *context, int len)
2839 {
2840 	__be32 *p;
2841 
2842 	p = xdr_reserve_space(xdr, len + 4 + 4 + 4);
2843 	if (!p)
2844 		return nfserr_resource;
2845 
2846 	/*
2847 	 * For now we use a 0 here to indicate the null translation; in
2848 	 * the future we may place a call to translation code here.
2849 	 */
2850 	*p++ = cpu_to_be32(0); /* lfs */
2851 	*p++ = cpu_to_be32(0); /* pi */
2852 	p = xdr_encode_opaque(p, context, len);
2853 	return 0;
2854 }
2855 #else
2856 static inline __be32
2857 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2858 			    void *context, int len)
2859 { return 0; }
2860 #endif
2861 
2862 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *bmval2, u32 *rdattr_err)
2863 {
2864 	/* As per referral draft:  */
2865 	if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
2866 	    *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
2867 		if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
2868 	            *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
2869 			*rdattr_err = NFSERR_MOVED;
2870 		else
2871 			return nfserr_moved;
2872 	}
2873 	*bmval0 &= WORD0_ABSENT_FS_ATTRS;
2874 	*bmval1 &= WORD1_ABSENT_FS_ATTRS;
2875 	*bmval2 &= WORD2_ABSENT_FS_ATTRS;
2876 	return 0;
2877 }
2878 
2879 
2880 static int nfsd4_get_mounted_on_ino(struct svc_export *exp, u64 *pino)
2881 {
2882 	struct path path = exp->ex_path;
2883 	struct kstat stat;
2884 	int err;
2885 
2886 	path_get(&path);
2887 	while (follow_up(&path)) {
2888 		if (path.dentry != path.mnt->mnt_root)
2889 			break;
2890 	}
2891 	err = vfs_getattr(&path, &stat, STATX_INO, AT_STATX_SYNC_AS_STAT);
2892 	path_put(&path);
2893 	if (!err)
2894 		*pino = stat.ino;
2895 	return err;
2896 }
2897 
2898 static __be32
2899 nfsd4_encode_bitmap4(struct xdr_stream *xdr, u32 bmval0, u32 bmval1, u32 bmval2)
2900 {
2901 	__be32 *p;
2902 
2903 	if (bmval2) {
2904 		p = xdr_reserve_space(xdr, XDR_UNIT * 4);
2905 		if (!p)
2906 			goto out_resource;
2907 		*p++ = cpu_to_be32(3);
2908 		*p++ = cpu_to_be32(bmval0);
2909 		*p++ = cpu_to_be32(bmval1);
2910 		*p++ = cpu_to_be32(bmval2);
2911 	} else if (bmval1) {
2912 		p = xdr_reserve_space(xdr, XDR_UNIT * 3);
2913 		if (!p)
2914 			goto out_resource;
2915 		*p++ = cpu_to_be32(2);
2916 		*p++ = cpu_to_be32(bmval0);
2917 		*p++ = cpu_to_be32(bmval1);
2918 	} else {
2919 		p = xdr_reserve_space(xdr, XDR_UNIT * 2);
2920 		if (!p)
2921 			goto out_resource;
2922 		*p++ = cpu_to_be32(1);
2923 		*p++ = cpu_to_be32(bmval0);
2924 	}
2925 
2926 	return nfs_ok;
2927 out_resource:
2928 	return nfserr_resource;
2929 }
2930 
2931 struct nfsd4_fattr_args {
2932 	struct svc_rqst		*rqstp;
2933 	struct svc_fh		*fhp;
2934 	struct svc_export	*exp;
2935 	struct dentry		*dentry;
2936 	struct kstat		stat;
2937 	struct kstatfs		statfs;
2938 	struct nfs4_acl		*acl;
2939 	u64			size;
2940 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2941 	void			*context;
2942 	int			contextlen;
2943 #endif
2944 	u32			rdattr_err;
2945 	bool			contextsupport;
2946 	bool			ignore_crossmnt;
2947 };
2948 
2949 typedef __be32(*nfsd4_enc_attr)(struct xdr_stream *xdr,
2950 				const struct nfsd4_fattr_args *args);
2951 
2952 static __be32 nfsd4_encode_fattr4__noop(struct xdr_stream *xdr,
2953 					const struct nfsd4_fattr_args *args)
2954 {
2955 	return nfs_ok;
2956 }
2957 
2958 static __be32 nfsd4_encode_fattr4__true(struct xdr_stream *xdr,
2959 					const struct nfsd4_fattr_args *args)
2960 {
2961 	return nfsd4_encode_bool(xdr, true);
2962 }
2963 
2964 static __be32 nfsd4_encode_fattr4__false(struct xdr_stream *xdr,
2965 					 const struct nfsd4_fattr_args *args)
2966 {
2967 	return nfsd4_encode_bool(xdr, false);
2968 }
2969 
2970 static __be32 nfsd4_encode_fattr4_supported_attrs(struct xdr_stream *xdr,
2971 						  const struct nfsd4_fattr_args *args)
2972 {
2973 	struct nfsd4_compoundres *resp = args->rqstp->rq_resp;
2974 	u32 minorversion = resp->cstate.minorversion;
2975 	u32 supp[3];
2976 
2977 	memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
2978 	if (!IS_POSIXACL(d_inode(args->dentry)))
2979 		supp[0] &= ~FATTR4_WORD0_ACL;
2980 	if (!args->contextsupport)
2981 		supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
2982 
2983 	return nfsd4_encode_bitmap4(xdr, supp[0], supp[1], supp[2]);
2984 }
2985 
2986 static __be32 nfsd4_encode_fattr4_type(struct xdr_stream *xdr,
2987 				       const struct nfsd4_fattr_args *args)
2988 {
2989 	__be32 *p;
2990 
2991 	p = xdr_reserve_space(xdr, XDR_UNIT);
2992 	if (!p)
2993 		return nfserr_resource;
2994 
2995 	switch (args->stat.mode & S_IFMT) {
2996 	case S_IFIFO:
2997 		*p = cpu_to_be32(NF4FIFO);
2998 		break;
2999 	case S_IFCHR:
3000 		*p = cpu_to_be32(NF4CHR);
3001 		break;
3002 	case S_IFDIR:
3003 		*p = cpu_to_be32(NF4DIR);
3004 		break;
3005 	case S_IFBLK:
3006 		*p = cpu_to_be32(NF4BLK);
3007 		break;
3008 	case S_IFLNK:
3009 		*p = cpu_to_be32(NF4LNK);
3010 		break;
3011 	case S_IFREG:
3012 		*p = cpu_to_be32(NF4REG);
3013 		break;
3014 	case S_IFSOCK:
3015 		*p = cpu_to_be32(NF4SOCK);
3016 		break;
3017 	default:
3018 		return nfserr_serverfault;
3019 	}
3020 
3021 	return nfs_ok;
3022 }
3023 
3024 static __be32 nfsd4_encode_fattr4_fh_expire_type(struct xdr_stream *xdr,
3025 						 const struct nfsd4_fattr_args *args)
3026 {
3027 	u32 mask;
3028 
3029 	mask = NFS4_FH_PERSISTENT;
3030 	if (!(args->exp->ex_flags & NFSEXP_NOSUBTREECHECK))
3031 		mask |= NFS4_FH_VOL_RENAME;
3032 	return nfsd4_encode_uint32_t(xdr, mask);
3033 }
3034 
3035 static __be32 nfsd4_encode_fattr4_change(struct xdr_stream *xdr,
3036 					 const struct nfsd4_fattr_args *args)
3037 {
3038 	const struct svc_export *exp = args->exp;
3039 	u64 c;
3040 
3041 	if (unlikely(exp->ex_flags & NFSEXP_V4ROOT)) {
3042 		u32 flush_time = convert_to_wallclock(exp->cd->flush_time);
3043 
3044 		if (xdr_stream_encode_u32(xdr, flush_time) != XDR_UNIT)
3045 			return nfserr_resource;
3046 		if (xdr_stream_encode_u32(xdr, 0) != XDR_UNIT)
3047 			return nfserr_resource;
3048 		return nfs_ok;
3049 	}
3050 
3051 	c = nfsd4_change_attribute(&args->stat, d_inode(args->dentry));
3052 	return nfsd4_encode_changeid4(xdr, c);
3053 }
3054 
3055 static __be32 nfsd4_encode_fattr4_size(struct xdr_stream *xdr,
3056 				       const struct nfsd4_fattr_args *args)
3057 {
3058 	return nfsd4_encode_uint64_t(xdr, args->size);
3059 }
3060 
3061 static __be32 nfsd4_encode_fattr4_fsid(struct xdr_stream *xdr,
3062 				       const struct nfsd4_fattr_args *args)
3063 {
3064 	__be32 *p;
3065 
3066 	p = xdr_reserve_space(xdr, XDR_UNIT * 2 + XDR_UNIT * 2);
3067 	if (!p)
3068 		return nfserr_resource;
3069 
3070 	if (unlikely(args->exp->ex_fslocs.migrated)) {
3071 		p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR);
3072 		xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR);
3073 		return nfs_ok;
3074 	}
3075 	switch (fsid_source(args->fhp)) {
3076 	case FSIDSOURCE_FSID:
3077 		p = xdr_encode_hyper(p, (u64)args->exp->ex_fsid);
3078 		xdr_encode_hyper(p, (u64)0);
3079 		break;
3080 	case FSIDSOURCE_DEV:
3081 		*p++ = xdr_zero;
3082 		*p++ = cpu_to_be32(MAJOR(args->stat.dev));
3083 		*p++ = xdr_zero;
3084 		*p   = cpu_to_be32(MINOR(args->stat.dev));
3085 		break;
3086 	case FSIDSOURCE_UUID:
3087 		xdr_encode_opaque_fixed(p, args->exp->ex_uuid, EX_UUID_LEN);
3088 		break;
3089 	}
3090 
3091 	return nfs_ok;
3092 }
3093 
3094 static __be32 nfsd4_encode_fattr4_lease_time(struct xdr_stream *xdr,
3095 					     const struct nfsd4_fattr_args *args)
3096 {
3097 	struct nfsd_net *nn = net_generic(SVC_NET(args->rqstp), nfsd_net_id);
3098 
3099 	return nfsd4_encode_nfs_lease4(xdr, nn->nfsd4_lease);
3100 }
3101 
3102 static __be32 nfsd4_encode_fattr4_rdattr_error(struct xdr_stream *xdr,
3103 					       const struct nfsd4_fattr_args *args)
3104 {
3105 	return nfsd4_encode_uint32_t(xdr, args->rdattr_err);
3106 }
3107 
3108 static __be32 nfsd4_encode_fattr4_aclsupport(struct xdr_stream *xdr,
3109 					     const struct nfsd4_fattr_args *args)
3110 {
3111 	u32 mask;
3112 
3113 	mask = 0;
3114 	if (IS_POSIXACL(d_inode(args->dentry)))
3115 		mask = ACL4_SUPPORT_ALLOW_ACL | ACL4_SUPPORT_DENY_ACL;
3116 	return nfsd4_encode_uint32_t(xdr, mask);
3117 }
3118 
3119 static __be32 nfsd4_encode_fattr4_acl(struct xdr_stream *xdr,
3120 				      const struct nfsd4_fattr_args *args)
3121 {
3122 	struct nfs4_acl *acl = args->acl;
3123 	struct nfs4_ace *ace;
3124 	__be32 status;
3125 
3126 	/* nfsace4<> */
3127 	if (!acl) {
3128 		if (xdr_stream_encode_u32(xdr, 0) != XDR_UNIT)
3129 			return nfserr_resource;
3130 	} else {
3131 		if (xdr_stream_encode_u32(xdr, acl->naces) != XDR_UNIT)
3132 			return nfserr_resource;
3133 		for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
3134 			status = nfsd4_encode_nfsace4(xdr, args->rqstp, ace);
3135 			if (status != nfs_ok)
3136 				return status;
3137 		}
3138 	}
3139 	return nfs_ok;
3140 }
3141 
3142 static __be32 nfsd4_encode_fattr4_filehandle(struct xdr_stream *xdr,
3143 					     const struct nfsd4_fattr_args *args)
3144 {
3145 	return nfsd4_encode_nfs_fh4(xdr, &args->fhp->fh_handle);
3146 }
3147 
3148 static __be32 nfsd4_encode_fattr4_fileid(struct xdr_stream *xdr,
3149 					 const struct nfsd4_fattr_args *args)
3150 {
3151 	return nfsd4_encode_uint64_t(xdr, args->stat.ino);
3152 }
3153 
3154 static __be32 nfsd4_encode_fattr4_files_avail(struct xdr_stream *xdr,
3155 					      const struct nfsd4_fattr_args *args)
3156 {
3157 	return nfsd4_encode_uint64_t(xdr, args->statfs.f_ffree);
3158 }
3159 
3160 static __be32 nfsd4_encode_fattr4_files_free(struct xdr_stream *xdr,
3161 					     const struct nfsd4_fattr_args *args)
3162 {
3163 	return nfsd4_encode_uint64_t(xdr, args->statfs.f_ffree);
3164 }
3165 
3166 static __be32 nfsd4_encode_fattr4_files_total(struct xdr_stream *xdr,
3167 					      const struct nfsd4_fattr_args *args)
3168 {
3169 	return nfsd4_encode_uint64_t(xdr, args->statfs.f_files);
3170 }
3171 
3172 static __be32 nfsd4_encode_fattr4_fs_locations(struct xdr_stream *xdr,
3173 					       const struct nfsd4_fattr_args *args)
3174 {
3175 	return nfsd4_encode_fs_locations4(xdr, args->rqstp, args->exp);
3176 }
3177 
3178 static __be32 nfsd4_encode_fattr4_maxfilesize(struct xdr_stream *xdr,
3179 					      const struct nfsd4_fattr_args *args)
3180 {
3181 	struct super_block *sb = args->exp->ex_path.mnt->mnt_sb;
3182 
3183 	return nfsd4_encode_uint64_t(xdr, sb->s_maxbytes);
3184 }
3185 
3186 static __be32 nfsd4_encode_fattr4_maxlink(struct xdr_stream *xdr,
3187 					  const struct nfsd4_fattr_args *args)
3188 {
3189 	return nfsd4_encode_uint32_t(xdr, 255);
3190 }
3191 
3192 static __be32 nfsd4_encode_fattr4_maxname(struct xdr_stream *xdr,
3193 					  const struct nfsd4_fattr_args *args)
3194 {
3195 	return nfsd4_encode_uint32_t(xdr, args->statfs.f_namelen);
3196 }
3197 
3198 static __be32 nfsd4_encode_fattr4_maxread(struct xdr_stream *xdr,
3199 					  const struct nfsd4_fattr_args *args)
3200 {
3201 	return nfsd4_encode_uint64_t(xdr, svc_max_payload(args->rqstp));
3202 }
3203 
3204 static __be32 nfsd4_encode_fattr4_maxwrite(struct xdr_stream *xdr,
3205 					   const struct nfsd4_fattr_args *args)
3206 {
3207 	return nfsd4_encode_uint64_t(xdr, svc_max_payload(args->rqstp));
3208 }
3209 
3210 static __be32 nfsd4_encode_fattr4_mode(struct xdr_stream *xdr,
3211 				       const struct nfsd4_fattr_args *args)
3212 {
3213 	return nfsd4_encode_mode4(xdr, args->stat.mode & S_IALLUGO);
3214 }
3215 
3216 static __be32 nfsd4_encode_fattr4_numlinks(struct xdr_stream *xdr,
3217 					   const struct nfsd4_fattr_args *args)
3218 {
3219 	return nfsd4_encode_uint32_t(xdr, args->stat.nlink);
3220 }
3221 
3222 static __be32 nfsd4_encode_fattr4_owner(struct xdr_stream *xdr,
3223 					const struct nfsd4_fattr_args *args)
3224 {
3225 	return nfsd4_encode_user(xdr, args->rqstp, args->stat.uid);
3226 }
3227 
3228 static __be32 nfsd4_encode_fattr4_owner_group(struct xdr_stream *xdr,
3229 					      const struct nfsd4_fattr_args *args)
3230 {
3231 	return nfsd4_encode_group(xdr, args->rqstp, args->stat.gid);
3232 }
3233 
3234 static __be32 nfsd4_encode_fattr4_rawdev(struct xdr_stream *xdr,
3235 					 const struct nfsd4_fattr_args *args)
3236 {
3237 	return nfsd4_encode_specdata4(xdr, MAJOR(args->stat.rdev),
3238 				      MINOR(args->stat.rdev));
3239 }
3240 
3241 static __be32 nfsd4_encode_fattr4_space_avail(struct xdr_stream *xdr,
3242 					      const struct nfsd4_fattr_args *args)
3243 {
3244 	u64 avail = (u64)args->statfs.f_bavail * (u64)args->statfs.f_bsize;
3245 
3246 	return nfsd4_encode_uint64_t(xdr, avail);
3247 }
3248 
3249 static __be32 nfsd4_encode_fattr4_space_free(struct xdr_stream *xdr,
3250 					     const struct nfsd4_fattr_args *args)
3251 {
3252 	u64 free = (u64)args->statfs.f_bfree * (u64)args->statfs.f_bsize;
3253 
3254 	return nfsd4_encode_uint64_t(xdr, free);
3255 }
3256 
3257 static __be32 nfsd4_encode_fattr4_space_total(struct xdr_stream *xdr,
3258 					      const struct nfsd4_fattr_args *args)
3259 {
3260 	u64 total = (u64)args->statfs.f_blocks * (u64)args->statfs.f_bsize;
3261 
3262 	return nfsd4_encode_uint64_t(xdr, total);
3263 }
3264 
3265 static __be32 nfsd4_encode_fattr4_space_used(struct xdr_stream *xdr,
3266 					     const struct nfsd4_fattr_args *args)
3267 {
3268 	return nfsd4_encode_uint64_t(xdr, (u64)args->stat.blocks << 9);
3269 }
3270 
3271 static __be32 nfsd4_encode_fattr4_time_access(struct xdr_stream *xdr,
3272 					      const struct nfsd4_fattr_args *args)
3273 {
3274 	return nfsd4_encode_nfstime4(xdr, &args->stat.atime);
3275 }
3276 
3277 static __be32 nfsd4_encode_fattr4_time_create(struct xdr_stream *xdr,
3278 					      const struct nfsd4_fattr_args *args)
3279 {
3280 	return nfsd4_encode_nfstime4(xdr, &args->stat.btime);
3281 }
3282 
3283 /*
3284  * ctime (in NFSv4, time_metadata) is not writeable, and the client
3285  * doesn't really care what resolution could theoretically be stored by
3286  * the filesystem.
3287  *
3288  * The client cares how close together changes can be while still
3289  * guaranteeing ctime changes.  For most filesystems (which have
3290  * timestamps with nanosecond fields) that is limited by the resolution
3291  * of the time returned from current_time() (which I'm assuming to be
3292  * 1/HZ).
3293  */
3294 static __be32 nfsd4_encode_fattr4_time_delta(struct xdr_stream *xdr,
3295 					     const struct nfsd4_fattr_args *args)
3296 {
3297 	const struct inode *inode = d_inode(args->dentry);
3298 	u32 ns = max_t(u32, NSEC_PER_SEC/HZ, inode->i_sb->s_time_gran);
3299 	struct timespec64 ts = ns_to_timespec64(ns);
3300 
3301 	return nfsd4_encode_nfstime4(xdr, &ts);
3302 }
3303 
3304 static __be32 nfsd4_encode_fattr4_time_metadata(struct xdr_stream *xdr,
3305 						const struct nfsd4_fattr_args *args)
3306 {
3307 	return nfsd4_encode_nfstime4(xdr, &args->stat.ctime);
3308 }
3309 
3310 static __be32 nfsd4_encode_fattr4_time_modify(struct xdr_stream *xdr,
3311 					      const struct nfsd4_fattr_args *args)
3312 {
3313 	return nfsd4_encode_nfstime4(xdr, &args->stat.mtime);
3314 }
3315 
3316 static __be32 nfsd4_encode_fattr4_mounted_on_fileid(struct xdr_stream *xdr,
3317 						    const struct nfsd4_fattr_args *args)
3318 {
3319 	u64 ino;
3320 	int err;
3321 
3322 	if (!args->ignore_crossmnt &&
3323 	    args->dentry == args->exp->ex_path.mnt->mnt_root) {
3324 		err = nfsd4_get_mounted_on_ino(args->exp, &ino);
3325 		if (err)
3326 			return nfserrno(err);
3327 	} else
3328 		ino = args->stat.ino;
3329 
3330 	return nfsd4_encode_uint64_t(xdr, ino);
3331 }
3332 
3333 #ifdef CONFIG_NFSD_PNFS
3334 
3335 static __be32 nfsd4_encode_fattr4_fs_layout_types(struct xdr_stream *xdr,
3336 						  const struct nfsd4_fattr_args *args)
3337 {
3338 	unsigned long mask = args->exp->ex_layout_types;
3339 	int i;
3340 
3341 	/* Hamming weight of @mask is the number of layout types to return */
3342 	if (xdr_stream_encode_u32(xdr, hweight_long(mask)) != XDR_UNIT)
3343 		return nfserr_resource;
3344 	for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i)
3345 		if (mask & BIT(i)) {
3346 			/* layouttype4 */
3347 			if (xdr_stream_encode_u32(xdr, i) != XDR_UNIT)
3348 				return nfserr_resource;
3349 		}
3350 	return nfs_ok;
3351 }
3352 
3353 static __be32 nfsd4_encode_fattr4_layout_types(struct xdr_stream *xdr,
3354 					       const struct nfsd4_fattr_args *args)
3355 {
3356 	unsigned long mask = args->exp->ex_layout_types;
3357 	int i;
3358 
3359 	/* Hamming weight of @mask is the number of layout types to return */
3360 	if (xdr_stream_encode_u32(xdr, hweight_long(mask)) != XDR_UNIT)
3361 		return nfserr_resource;
3362 	for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i)
3363 		if (mask & BIT(i)) {
3364 			/* layouttype4 */
3365 			if (xdr_stream_encode_u32(xdr, i) != XDR_UNIT)
3366 				return nfserr_resource;
3367 		}
3368 	return nfs_ok;
3369 }
3370 
3371 static __be32 nfsd4_encode_fattr4_layout_blksize(struct xdr_stream *xdr,
3372 						 const struct nfsd4_fattr_args *args)
3373 {
3374 	return nfsd4_encode_uint32_t(xdr, args->stat.blksize);
3375 }
3376 
3377 #endif
3378 
3379 static __be32 nfsd4_encode_fattr4_suppattr_exclcreat(struct xdr_stream *xdr,
3380 						     const struct nfsd4_fattr_args *args)
3381 {
3382 	struct nfsd4_compoundres *resp = args->rqstp->rq_resp;
3383 	u32 supp[3];
3384 
3385 	memcpy(supp, nfsd_suppattrs[resp->cstate.minorversion], sizeof(supp));
3386 	supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0;
3387 	supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1;
3388 	supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2;
3389 
3390 	return nfsd4_encode_bitmap4(xdr, supp[0], supp[1], supp[2]);
3391 }
3392 
3393 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
3394 static __be32 nfsd4_encode_fattr4_sec_label(struct xdr_stream *xdr,
3395 					    const struct nfsd4_fattr_args *args)
3396 {
3397 	return nfsd4_encode_security_label(xdr, args->rqstp,
3398 					   args->context, args->contextlen);
3399 }
3400 #endif
3401 
3402 static __be32 nfsd4_encode_fattr4_xattr_support(struct xdr_stream *xdr,
3403 						const struct nfsd4_fattr_args *args)
3404 {
3405 	int err = xattr_supports_user_prefix(d_inode(args->dentry));
3406 
3407 	return nfsd4_encode_bool(xdr, err == 0);
3408 }
3409 
3410 static const nfsd4_enc_attr nfsd4_enc_fattr4_encode_ops[] = {
3411 	[FATTR4_SUPPORTED_ATTRS]	= nfsd4_encode_fattr4_supported_attrs,
3412 	[FATTR4_TYPE]			= nfsd4_encode_fattr4_type,
3413 	[FATTR4_FH_EXPIRE_TYPE]		= nfsd4_encode_fattr4_fh_expire_type,
3414 	[FATTR4_CHANGE]			= nfsd4_encode_fattr4_change,
3415 	[FATTR4_SIZE]			= nfsd4_encode_fattr4_size,
3416 	[FATTR4_LINK_SUPPORT]		= nfsd4_encode_fattr4__true,
3417 	[FATTR4_SYMLINK_SUPPORT]	= nfsd4_encode_fattr4__true,
3418 	[FATTR4_NAMED_ATTR]		= nfsd4_encode_fattr4__false,
3419 	[FATTR4_FSID]			= nfsd4_encode_fattr4_fsid,
3420 	[FATTR4_UNIQUE_HANDLES]		= nfsd4_encode_fattr4__true,
3421 	[FATTR4_LEASE_TIME]		= nfsd4_encode_fattr4_lease_time,
3422 	[FATTR4_RDATTR_ERROR]		= nfsd4_encode_fattr4_rdattr_error,
3423 	[FATTR4_ACL]			= nfsd4_encode_fattr4_acl,
3424 	[FATTR4_ACLSUPPORT]		= nfsd4_encode_fattr4_aclsupport,
3425 	[FATTR4_ARCHIVE]		= nfsd4_encode_fattr4__noop,
3426 	[FATTR4_CANSETTIME]		= nfsd4_encode_fattr4__true,
3427 	[FATTR4_CASE_INSENSITIVE]	= nfsd4_encode_fattr4__false,
3428 	[FATTR4_CASE_PRESERVING]	= nfsd4_encode_fattr4__true,
3429 	[FATTR4_CHOWN_RESTRICTED]	= nfsd4_encode_fattr4__true,
3430 	[FATTR4_FILEHANDLE]		= nfsd4_encode_fattr4_filehandle,
3431 	[FATTR4_FILEID]			= nfsd4_encode_fattr4_fileid,
3432 	[FATTR4_FILES_AVAIL]		= nfsd4_encode_fattr4_files_avail,
3433 	[FATTR4_FILES_FREE]		= nfsd4_encode_fattr4_files_free,
3434 	[FATTR4_FILES_TOTAL]		= nfsd4_encode_fattr4_files_total,
3435 	[FATTR4_FS_LOCATIONS]		= nfsd4_encode_fattr4_fs_locations,
3436 	[FATTR4_HIDDEN]			= nfsd4_encode_fattr4__noop,
3437 	[FATTR4_HOMOGENEOUS]		= nfsd4_encode_fattr4__true,
3438 	[FATTR4_MAXFILESIZE]		= nfsd4_encode_fattr4_maxfilesize,
3439 	[FATTR4_MAXLINK]		= nfsd4_encode_fattr4_maxlink,
3440 	[FATTR4_MAXNAME]		= nfsd4_encode_fattr4_maxname,
3441 	[FATTR4_MAXREAD]		= nfsd4_encode_fattr4_maxread,
3442 	[FATTR4_MAXWRITE]		= nfsd4_encode_fattr4_maxwrite,
3443 	[FATTR4_MIMETYPE]		= nfsd4_encode_fattr4__noop,
3444 	[FATTR4_MODE]			= nfsd4_encode_fattr4_mode,
3445 	[FATTR4_NO_TRUNC]		= nfsd4_encode_fattr4__true,
3446 	[FATTR4_NUMLINKS]		= nfsd4_encode_fattr4_numlinks,
3447 	[FATTR4_OWNER]			= nfsd4_encode_fattr4_owner,
3448 	[FATTR4_OWNER_GROUP]		= nfsd4_encode_fattr4_owner_group,
3449 	[FATTR4_QUOTA_AVAIL_HARD]	= nfsd4_encode_fattr4__noop,
3450 	[FATTR4_QUOTA_AVAIL_SOFT]	= nfsd4_encode_fattr4__noop,
3451 	[FATTR4_QUOTA_USED]		= nfsd4_encode_fattr4__noop,
3452 	[FATTR4_RAWDEV]			= nfsd4_encode_fattr4_rawdev,
3453 	[FATTR4_SPACE_AVAIL]		= nfsd4_encode_fattr4_space_avail,
3454 	[FATTR4_SPACE_FREE]		= nfsd4_encode_fattr4_space_free,
3455 	[FATTR4_SPACE_TOTAL]		= nfsd4_encode_fattr4_space_total,
3456 	[FATTR4_SPACE_USED]		= nfsd4_encode_fattr4_space_used,
3457 	[FATTR4_SYSTEM]			= nfsd4_encode_fattr4__noop,
3458 	[FATTR4_TIME_ACCESS]		= nfsd4_encode_fattr4_time_access,
3459 	[FATTR4_TIME_ACCESS_SET]	= nfsd4_encode_fattr4__noop,
3460 	[FATTR4_TIME_BACKUP]		= nfsd4_encode_fattr4__noop,
3461 	[FATTR4_TIME_CREATE]		= nfsd4_encode_fattr4_time_create,
3462 	[FATTR4_TIME_DELTA]		= nfsd4_encode_fattr4_time_delta,
3463 	[FATTR4_TIME_METADATA]		= nfsd4_encode_fattr4_time_metadata,
3464 	[FATTR4_TIME_MODIFY]		= nfsd4_encode_fattr4_time_modify,
3465 	[FATTR4_TIME_MODIFY_SET]	= nfsd4_encode_fattr4__noop,
3466 	[FATTR4_MOUNTED_ON_FILEID]	= nfsd4_encode_fattr4_mounted_on_fileid,
3467 	[FATTR4_DIR_NOTIF_DELAY]	= nfsd4_encode_fattr4__noop,
3468 	[FATTR4_DIRENT_NOTIF_DELAY]	= nfsd4_encode_fattr4__noop,
3469 	[FATTR4_DACL]			= nfsd4_encode_fattr4__noop,
3470 	[FATTR4_SACL]			= nfsd4_encode_fattr4__noop,
3471 	[FATTR4_CHANGE_POLICY]		= nfsd4_encode_fattr4__noop,
3472 	[FATTR4_FS_STATUS]		= nfsd4_encode_fattr4__noop,
3473 
3474 #ifdef CONFIG_NFSD_PNFS
3475 	[FATTR4_FS_LAYOUT_TYPES]	= nfsd4_encode_fattr4_fs_layout_types,
3476 	[FATTR4_LAYOUT_HINT]		= nfsd4_encode_fattr4__noop,
3477 	[FATTR4_LAYOUT_TYPES]		= nfsd4_encode_fattr4_layout_types,
3478 	[FATTR4_LAYOUT_BLKSIZE]		= nfsd4_encode_fattr4_layout_blksize,
3479 	[FATTR4_LAYOUT_ALIGNMENT]	= nfsd4_encode_fattr4__noop,
3480 #else
3481 	[FATTR4_FS_LAYOUT_TYPES]	= nfsd4_encode_fattr4__noop,
3482 	[FATTR4_LAYOUT_HINT]		= nfsd4_encode_fattr4__noop,
3483 	[FATTR4_LAYOUT_TYPES]		= nfsd4_encode_fattr4__noop,
3484 	[FATTR4_LAYOUT_BLKSIZE]		= nfsd4_encode_fattr4__noop,
3485 	[FATTR4_LAYOUT_ALIGNMENT]	= nfsd4_encode_fattr4__noop,
3486 #endif
3487 
3488 	[FATTR4_FS_LOCATIONS_INFO]	= nfsd4_encode_fattr4__noop,
3489 	[FATTR4_MDSTHRESHOLD]		= nfsd4_encode_fattr4__noop,
3490 	[FATTR4_RETENTION_GET]		= nfsd4_encode_fattr4__noop,
3491 	[FATTR4_RETENTION_SET]		= nfsd4_encode_fattr4__noop,
3492 	[FATTR4_RETENTEVT_GET]		= nfsd4_encode_fattr4__noop,
3493 	[FATTR4_RETENTEVT_SET]		= nfsd4_encode_fattr4__noop,
3494 	[FATTR4_RETENTION_HOLD]		= nfsd4_encode_fattr4__noop,
3495 	[FATTR4_MODE_SET_MASKED]	= nfsd4_encode_fattr4__noop,
3496 	[FATTR4_SUPPATTR_EXCLCREAT]	= nfsd4_encode_fattr4_suppattr_exclcreat,
3497 	[FATTR4_FS_CHARSET_CAP]		= nfsd4_encode_fattr4__noop,
3498 	[FATTR4_CLONE_BLKSIZE]		= nfsd4_encode_fattr4__noop,
3499 	[FATTR4_SPACE_FREED]		= nfsd4_encode_fattr4__noop,
3500 	[FATTR4_CHANGE_ATTR_TYPE]	= nfsd4_encode_fattr4__noop,
3501 
3502 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
3503 	[FATTR4_SEC_LABEL]		= nfsd4_encode_fattr4_sec_label,
3504 #else
3505 	[FATTR4_SEC_LABEL]		= nfsd4_encode_fattr4__noop,
3506 #endif
3507 
3508 	[FATTR4_MODE_UMASK]		= nfsd4_encode_fattr4__noop,
3509 	[FATTR4_XATTR_SUPPORT]		= nfsd4_encode_fattr4_xattr_support,
3510 };
3511 
3512 /*
3513  * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
3514  * ourselves.
3515  */
3516 static __be32
3517 nfsd4_encode_fattr4(struct svc_rqst *rqstp, struct xdr_stream *xdr,
3518 		    struct svc_fh *fhp, struct svc_export *exp,
3519 		    struct dentry *dentry, const u32 *bmval,
3520 		    int ignore_crossmnt)
3521 {
3522 	DECLARE_BITMAP(attr_bitmap, ARRAY_SIZE(nfsd4_enc_fattr4_encode_ops));
3523 	struct nfsd4_fattr_args args;
3524 	struct svc_fh *tempfh = NULL;
3525 	int starting_len = xdr->buf->len;
3526 	__be32 *attrlen_p, status;
3527 	int attrlen_offset;
3528 	u32 attrmask[3];
3529 	int err;
3530 	struct nfsd4_compoundres *resp = rqstp->rq_resp;
3531 	u32 minorversion = resp->cstate.minorversion;
3532 	struct path path = {
3533 		.mnt	= exp->ex_path.mnt,
3534 		.dentry	= dentry,
3535 	};
3536 	unsigned long bit;
3537 	bool file_modified = false;
3538 	u64 size = 0;
3539 
3540 	WARN_ON_ONCE(bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1);
3541 	WARN_ON_ONCE(!nfsd_attrs_supported(minorversion, bmval));
3542 
3543 	args.rqstp = rqstp;
3544 	args.exp = exp;
3545 	args.dentry = dentry;
3546 	args.ignore_crossmnt = (ignore_crossmnt != 0);
3547 	args.acl = NULL;
3548 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
3549 	args.context = NULL;
3550 #endif
3551 
3552 	/*
3553 	 * Make a local copy of the attribute bitmap that can be modified.
3554 	 */
3555 	attrmask[0] = bmval[0];
3556 	attrmask[1] = bmval[1];
3557 	attrmask[2] = bmval[2];
3558 
3559 	args.rdattr_err = 0;
3560 	if (exp->ex_fslocs.migrated) {
3561 		status = fattr_handle_absent_fs(&attrmask[0], &attrmask[1],
3562 						&attrmask[2], &args.rdattr_err);
3563 		if (status)
3564 			goto out;
3565 	}
3566 	args.size = 0;
3567 	if (attrmask[0] & (FATTR4_WORD0_CHANGE | FATTR4_WORD0_SIZE)) {
3568 		status = nfsd4_deleg_getattr_conflict(rqstp, dentry,
3569 					&file_modified, &size);
3570 		if (status)
3571 			goto out;
3572 	}
3573 
3574 	err = vfs_getattr(&path, &args.stat,
3575 			  STATX_BASIC_STATS | STATX_BTIME | STATX_CHANGE_COOKIE,
3576 			  AT_STATX_SYNC_AS_STAT);
3577 	if (err)
3578 		goto out_nfserr;
3579 	if (file_modified)
3580 		args.size = size;
3581 	else
3582 		args.size = args.stat.size;
3583 
3584 	if (!(args.stat.result_mask & STATX_BTIME))
3585 		/* underlying FS does not offer btime so we can't share it */
3586 		attrmask[1] &= ~FATTR4_WORD1_TIME_CREATE;
3587 	if ((attrmask[0] & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE |
3588 			FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) ||
3589 	    (attrmask[1] & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
3590 		       FATTR4_WORD1_SPACE_TOTAL))) {
3591 		err = vfs_statfs(&path, &args.statfs);
3592 		if (err)
3593 			goto out_nfserr;
3594 	}
3595 	if ((attrmask[0] & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) &&
3596 	    !fhp) {
3597 		tempfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL);
3598 		status = nfserr_jukebox;
3599 		if (!tempfh)
3600 			goto out;
3601 		fh_init(tempfh, NFS4_FHSIZE);
3602 		status = fh_compose(tempfh, exp, dentry, NULL);
3603 		if (status)
3604 			goto out;
3605 		args.fhp = tempfh;
3606 	} else
3607 		args.fhp = fhp;
3608 
3609 	if (attrmask[0] & FATTR4_WORD0_ACL) {
3610 		err = nfsd4_get_nfs4_acl(rqstp, dentry, &args.acl);
3611 		if (err == -EOPNOTSUPP)
3612 			attrmask[0] &= ~FATTR4_WORD0_ACL;
3613 		else if (err == -EINVAL) {
3614 			status = nfserr_attrnotsupp;
3615 			goto out;
3616 		} else if (err != 0)
3617 			goto out_nfserr;
3618 	}
3619 
3620 	args.contextsupport = false;
3621 
3622 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
3623 	if ((attrmask[2] & FATTR4_WORD2_SECURITY_LABEL) ||
3624 	     attrmask[0] & FATTR4_WORD0_SUPPORTED_ATTRS) {
3625 		if (exp->ex_flags & NFSEXP_SECURITY_LABEL)
3626 			err = security_inode_getsecctx(d_inode(dentry),
3627 						&args.context, &args.contextlen);
3628 		else
3629 			err = -EOPNOTSUPP;
3630 		args.contextsupport = (err == 0);
3631 		if (attrmask[2] & FATTR4_WORD2_SECURITY_LABEL) {
3632 			if (err == -EOPNOTSUPP)
3633 				attrmask[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
3634 			else if (err)
3635 				goto out_nfserr;
3636 		}
3637 	}
3638 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
3639 
3640 	/* attrmask */
3641 	status = nfsd4_encode_bitmap4(xdr, attrmask[0], attrmask[1],
3642 				      attrmask[2]);
3643 	if (status)
3644 		goto out;
3645 
3646 	/* attr_vals */
3647 	attrlen_offset = xdr->buf->len;
3648 	attrlen_p = xdr_reserve_space(xdr, XDR_UNIT);
3649 	if (!attrlen_p)
3650 		goto out_resource;
3651 	bitmap_from_arr32(attr_bitmap, attrmask,
3652 			  ARRAY_SIZE(nfsd4_enc_fattr4_encode_ops));
3653 	for_each_set_bit(bit, attr_bitmap,
3654 			 ARRAY_SIZE(nfsd4_enc_fattr4_encode_ops)) {
3655 		status = nfsd4_enc_fattr4_encode_ops[bit](xdr, &args);
3656 		if (status != nfs_ok)
3657 			goto out;
3658 	}
3659 	*attrlen_p = cpu_to_be32(xdr->buf->len - attrlen_offset - XDR_UNIT);
3660 	status = nfs_ok;
3661 
3662 out:
3663 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
3664 	if (args.context)
3665 		security_release_secctx(args.context, args.contextlen);
3666 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
3667 	kfree(args.acl);
3668 	if (tempfh) {
3669 		fh_put(tempfh);
3670 		kfree(tempfh);
3671 	}
3672 	if (status)
3673 		xdr_truncate_encode(xdr, starting_len);
3674 	return status;
3675 out_nfserr:
3676 	status = nfserrno(err);
3677 	goto out;
3678 out_resource:
3679 	status = nfserr_resource;
3680 	goto out;
3681 }
3682 
3683 static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr,
3684 				struct xdr_buf *buf, __be32 *p, int bytes)
3685 {
3686 	xdr->scratch.iov_len = 0;
3687 	memset(buf, 0, sizeof(struct xdr_buf));
3688 	buf->head[0].iov_base = p;
3689 	buf->head[0].iov_len = 0;
3690 	buf->len = 0;
3691 	xdr->buf = buf;
3692 	xdr->iov = buf->head;
3693 	xdr->p = p;
3694 	xdr->end = (void *)p + bytes;
3695 	buf->buflen = bytes;
3696 }
3697 
3698 __be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words,
3699 			struct svc_fh *fhp, struct svc_export *exp,
3700 			struct dentry *dentry, u32 *bmval,
3701 			struct svc_rqst *rqstp, int ignore_crossmnt)
3702 {
3703 	struct xdr_buf dummy;
3704 	struct xdr_stream xdr;
3705 	__be32 ret;
3706 
3707 	svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2);
3708 	ret = nfsd4_encode_fattr4(rqstp, &xdr, fhp, exp, dentry, bmval,
3709 				  ignore_crossmnt);
3710 	*p = xdr.p;
3711 	return ret;
3712 }
3713 
3714 /*
3715  * The buffer space for this field was reserved during a previous
3716  * call to nfsd4_encode_entry4().
3717  */
3718 static void nfsd4_encode_entry4_nfs_cookie4(const struct nfsd4_readdir *readdir,
3719 					    u64 offset)
3720 {
3721 	__be64 cookie = cpu_to_be64(offset);
3722 	struct xdr_stream *xdr = readdir->xdr;
3723 
3724 	if (!readdir->cookie_offset)
3725 		return;
3726 	write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset, &cookie,
3727 			       sizeof(cookie));
3728 }
3729 
3730 static inline int attributes_need_mount(u32 *bmval)
3731 {
3732 	if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
3733 		return 1;
3734 	if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
3735 		return 1;
3736 	return 0;
3737 }
3738 
3739 static __be32
3740 nfsd4_encode_entry4_fattr(struct nfsd4_readdir *cd, const char *name,
3741 			  int namlen)
3742 {
3743 	struct svc_export *exp = cd->rd_fhp->fh_export;
3744 	struct dentry *dentry;
3745 	__be32 nfserr;
3746 	int ignore_crossmnt = 0;
3747 
3748 	dentry = lookup_positive_unlocked(name, cd->rd_fhp->fh_dentry, namlen);
3749 	if (IS_ERR(dentry))
3750 		return nfserrno(PTR_ERR(dentry));
3751 
3752 	exp_get(exp);
3753 	/*
3754 	 * In the case of a mountpoint, the client may be asking for
3755 	 * attributes that are only properties of the underlying filesystem
3756 	 * as opposed to the cross-mounted file system. In such a case,
3757 	 * we will not follow the cross mount and will fill the attribtutes
3758 	 * directly from the mountpoint dentry.
3759 	 */
3760 	if (nfsd_mountpoint(dentry, exp)) {
3761 		int err;
3762 
3763 		if (!(exp->ex_flags & NFSEXP_V4ROOT)
3764 				&& !attributes_need_mount(cd->rd_bmval)) {
3765 			ignore_crossmnt = 1;
3766 			goto out_encode;
3767 		}
3768 		/*
3769 		 * Why the heck aren't we just using nfsd_lookup??
3770 		 * Different "."/".." handling?  Something else?
3771 		 * At least, add a comment here to explain....
3772 		 */
3773 		err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
3774 		if (err) {
3775 			nfserr = nfserrno(err);
3776 			goto out_put;
3777 		}
3778 		nfserr = check_nfsd_access(exp, cd->rd_rqstp);
3779 		if (nfserr)
3780 			goto out_put;
3781 
3782 	}
3783 out_encode:
3784 	nfserr = nfsd4_encode_fattr4(cd->rd_rqstp, cd->xdr, NULL, exp, dentry,
3785 				     cd->rd_bmval, ignore_crossmnt);
3786 out_put:
3787 	dput(dentry);
3788 	exp_put(exp);
3789 	return nfserr;
3790 }
3791 
3792 static __be32
3793 nfsd4_encode_entry4_rdattr_error(struct xdr_stream *xdr, __be32 nfserr)
3794 {
3795 	__be32 status;
3796 
3797 	/* attrmask */
3798 	status = nfsd4_encode_bitmap4(xdr, FATTR4_WORD0_RDATTR_ERROR, 0, 0);
3799 	if (status != nfs_ok)
3800 		return status;
3801 	/* attr_vals */
3802 	if (xdr_stream_encode_u32(xdr, XDR_UNIT) != XDR_UNIT)
3803 		return nfserr_resource;
3804 	/* rdattr_error */
3805 	if (xdr_stream_encode_be32(xdr, nfserr) != XDR_UNIT)
3806 		return nfserr_resource;
3807 	return nfs_ok;
3808 }
3809 
3810 static int
3811 nfsd4_encode_entry4(void *ccdv, const char *name, int namlen,
3812 		    loff_t offset, u64 ino, unsigned int d_type)
3813 {
3814 	struct readdir_cd *ccd = ccdv;
3815 	struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
3816 	struct xdr_stream *xdr = cd->xdr;
3817 	int start_offset = xdr->buf->len;
3818 	int cookie_offset;
3819 	u32 name_and_cookie;
3820 	int entry_bytes;
3821 	__be32 nfserr = nfserr_toosmall;
3822 
3823 	/* In nfsv4, "." and ".." never make it onto the wire.. */
3824 	if (name && isdotent(name, namlen)) {
3825 		cd->common.err = nfs_ok;
3826 		return 0;
3827 	}
3828 
3829 	/* Encode the previous entry's cookie value */
3830 	nfsd4_encode_entry4_nfs_cookie4(cd, offset);
3831 
3832 	if (xdr_stream_encode_item_present(xdr) != XDR_UNIT)
3833 		goto fail;
3834 
3835 	/* Reserve send buffer space for this entry's cookie value. */
3836 	cookie_offset = xdr->buf->len;
3837 	if (nfsd4_encode_nfs_cookie4(xdr, OFFSET_MAX) != nfs_ok)
3838 		goto fail;
3839 	if (nfsd4_encode_component4(xdr, name, namlen) != nfs_ok)
3840 		goto fail;
3841 	nfserr = nfsd4_encode_entry4_fattr(cd, name, namlen);
3842 	switch (nfserr) {
3843 	case nfs_ok:
3844 		break;
3845 	case nfserr_resource:
3846 		nfserr = nfserr_toosmall;
3847 		goto fail;
3848 	case nfserr_noent:
3849 		xdr_truncate_encode(xdr, start_offset);
3850 		goto skip_entry;
3851 	case nfserr_jukebox:
3852 		/*
3853 		 * The pseudoroot should only display dentries that lead to
3854 		 * exports. If we get EJUKEBOX here, then we can't tell whether
3855 		 * this entry should be included. Just fail the whole READDIR
3856 		 * with NFS4ERR_DELAY in that case, and hope that the situation
3857 		 * will resolve itself by the client's next attempt.
3858 		 */
3859 		if (cd->rd_fhp->fh_export->ex_flags & NFSEXP_V4ROOT)
3860 			goto fail;
3861 		fallthrough;
3862 	default:
3863 		/*
3864 		 * If the client requested the RDATTR_ERROR attribute,
3865 		 * we stuff the error code into this attribute
3866 		 * and continue.  If this attribute was not requested,
3867 		 * then in accordance with the spec, we fail the
3868 		 * entire READDIR operation(!)
3869 		 */
3870 		if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
3871 			goto fail;
3872 		if (nfsd4_encode_entry4_rdattr_error(xdr, nfserr)) {
3873 			nfserr = nfserr_toosmall;
3874 			goto fail;
3875 		}
3876 	}
3877 	nfserr = nfserr_toosmall;
3878 	entry_bytes = xdr->buf->len - start_offset;
3879 	if (entry_bytes > cd->rd_maxcount)
3880 		goto fail;
3881 	cd->rd_maxcount -= entry_bytes;
3882 	/*
3883 	 * RFC 3530 14.2.24 describes rd_dircount as only a "hint", and
3884 	 * notes that it could be zero. If it is zero, then the server
3885 	 * should enforce only the rd_maxcount value.
3886 	 */
3887 	if (cd->rd_dircount) {
3888 		name_and_cookie = 4 + 4 * XDR_QUADLEN(namlen) + 8;
3889 		if (name_and_cookie > cd->rd_dircount && cd->cookie_offset)
3890 			goto fail;
3891 		cd->rd_dircount -= min(cd->rd_dircount, name_and_cookie);
3892 		if (!cd->rd_dircount)
3893 			cd->rd_maxcount = 0;
3894 	}
3895 
3896 	cd->cookie_offset = cookie_offset;
3897 skip_entry:
3898 	cd->common.err = nfs_ok;
3899 	return 0;
3900 fail:
3901 	xdr_truncate_encode(xdr, start_offset);
3902 	cd->common.err = nfserr;
3903 	return -EINVAL;
3904 }
3905 
3906 static __be32
3907 nfsd4_encode_verifier4(struct xdr_stream *xdr, const nfs4_verifier *verf)
3908 {
3909 	__be32 *p;
3910 
3911 	p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
3912 	if (!p)
3913 		return nfserr_resource;
3914 	memcpy(p, verf->data, sizeof(verf->data));
3915 	return nfs_ok;
3916 }
3917 
3918 static __be32
3919 nfsd4_encode_clientid4(struct xdr_stream *xdr, const clientid_t *clientid)
3920 {
3921 	__be32 *p;
3922 
3923 	p = xdr_reserve_space(xdr, sizeof(__be64));
3924 	if (!p)
3925 		return nfserr_resource;
3926 	memcpy(p, clientid, sizeof(*clientid));
3927 	return nfs_ok;
3928 }
3929 
3930 /* This is a frequently-encoded item; open-coded for speed */
3931 static __be32
3932 nfsd4_encode_stateid4(struct xdr_stream *xdr, const stateid_t *sid)
3933 {
3934 	__be32 *p;
3935 
3936 	p = xdr_reserve_space(xdr, NFS4_STATEID_SIZE);
3937 	if (!p)
3938 		return nfserr_resource;
3939 	*p++ = cpu_to_be32(sid->si_generation);
3940 	memcpy(p, &sid->si_opaque, sizeof(sid->si_opaque));
3941 	return nfs_ok;
3942 }
3943 
3944 static __be32
3945 nfsd4_encode_sessionid4(struct xdr_stream *xdr,
3946 			const struct nfs4_sessionid *sessionid)
3947 {
3948 	return nfsd4_encode_opaque_fixed(xdr, sessionid->data,
3949 					 NFS4_MAX_SESSIONID_LEN);
3950 }
3951 
3952 static __be32
3953 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr,
3954 		    union nfsd4_op_u *u)
3955 {
3956 	struct nfsd4_access *access = &u->access;
3957 	struct xdr_stream *xdr = resp->xdr;
3958 	__be32 status;
3959 
3960 	/* supported */
3961 	status = nfsd4_encode_uint32_t(xdr, access->ac_supported);
3962 	if (status != nfs_ok)
3963 		return status;
3964 	/* access */
3965 	return nfsd4_encode_uint32_t(xdr, access->ac_resp_access);
3966 }
3967 
3968 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3969 						union nfsd4_op_u *u)
3970 {
3971 	struct nfsd4_bind_conn_to_session *bcts = &u->bind_conn_to_session;
3972 	struct xdr_stream *xdr = resp->xdr;
3973 
3974 	/* bctsr_sessid */
3975 	nfserr = nfsd4_encode_sessionid4(xdr, &bcts->sessionid);
3976 	if (nfserr != nfs_ok)
3977 		return nfserr;
3978 	/* bctsr_dir */
3979 	if (xdr_stream_encode_u32(xdr, bcts->dir) != XDR_UNIT)
3980 		return nfserr_resource;
3981 	/* bctsr_use_conn_in_rdma_mode */
3982 	return nfsd4_encode_bool(xdr, false);
3983 }
3984 
3985 static __be32
3986 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr,
3987 		   union nfsd4_op_u *u)
3988 {
3989 	struct nfsd4_close *close = &u->close;
3990 	struct xdr_stream *xdr = resp->xdr;
3991 
3992 	/* open_stateid */
3993 	return nfsd4_encode_stateid4(xdr, &close->cl_stateid);
3994 }
3995 
3996 
3997 static __be32
3998 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr,
3999 		    union nfsd4_op_u *u)
4000 {
4001 	struct nfsd4_commit *commit = &u->commit;
4002 
4003 	return nfsd4_encode_verifier4(resp->xdr, &commit->co_verf);
4004 }
4005 
4006 static __be32
4007 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr,
4008 		    union nfsd4_op_u *u)
4009 {
4010 	struct nfsd4_create *create = &u->create;
4011 	struct xdr_stream *xdr = resp->xdr;
4012 
4013 	/* cinfo */
4014 	nfserr = nfsd4_encode_change_info4(xdr, &create->cr_cinfo);
4015 	if (nfserr)
4016 		return nfserr;
4017 	/* attrset */
4018 	return nfsd4_encode_bitmap4(xdr, create->cr_bmval[0],
4019 				    create->cr_bmval[1], create->cr_bmval[2]);
4020 }
4021 
4022 static __be32
4023 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr,
4024 		     union nfsd4_op_u *u)
4025 {
4026 	struct nfsd4_getattr *getattr = &u->getattr;
4027 	struct svc_fh *fhp = getattr->ga_fhp;
4028 	struct xdr_stream *xdr = resp->xdr;
4029 
4030 	/* obj_attributes */
4031 	return nfsd4_encode_fattr4(resp->rqstp, xdr, fhp, fhp->fh_export,
4032 				   fhp->fh_dentry, getattr->ga_bmval, 0);
4033 }
4034 
4035 static __be32
4036 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr,
4037 		   union nfsd4_op_u *u)
4038 {
4039 	struct xdr_stream *xdr = resp->xdr;
4040 	struct svc_fh *fhp = u->getfh;
4041 
4042 	/* object */
4043 	return nfsd4_encode_nfs_fh4(xdr, &fhp->fh_handle);
4044 }
4045 
4046 static __be32
4047 nfsd4_encode_lock_owner4(struct xdr_stream *xdr, const clientid_t *clientid,
4048 			 const struct xdr_netobj *owner)
4049 {
4050 	__be32 status;
4051 
4052 	/* clientid */
4053 	status = nfsd4_encode_clientid4(xdr, clientid);
4054 	if (status != nfs_ok)
4055 		return status;
4056 	/* owner */
4057 	return nfsd4_encode_opaque(xdr, owner->data, owner->len);
4058 }
4059 
4060 static __be32
4061 nfsd4_encode_lock4denied(struct xdr_stream *xdr,
4062 			 const struct nfsd4_lock_denied *ld)
4063 {
4064 	__be32 status;
4065 
4066 	/* offset */
4067 	status = nfsd4_encode_offset4(xdr, ld->ld_start);
4068 	if (status != nfs_ok)
4069 		return status;
4070 	/* length */
4071 	status = nfsd4_encode_length4(xdr, ld->ld_length);
4072 	if (status != nfs_ok)
4073 		return status;
4074 	/* locktype */
4075 	if (xdr_stream_encode_u32(xdr, ld->ld_type) != XDR_UNIT)
4076 		return nfserr_resource;
4077 	/* owner */
4078 	return nfsd4_encode_lock_owner4(xdr, &ld->ld_clientid,
4079 					&ld->ld_owner);
4080 }
4081 
4082 static __be32
4083 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr,
4084 		  union nfsd4_op_u *u)
4085 {
4086 	struct nfsd4_lock *lock = &u->lock;
4087 	struct xdr_stream *xdr = resp->xdr;
4088 	__be32 status;
4089 
4090 	switch (nfserr) {
4091 	case nfs_ok:
4092 		/* resok4 */
4093 		status = nfsd4_encode_stateid4(xdr, &lock->lk_resp_stateid);
4094 		break;
4095 	case nfserr_denied:
4096 		/* denied */
4097 		status = nfsd4_encode_lock4denied(xdr, &lock->lk_denied);
4098 		break;
4099 	default:
4100 		return nfserr;
4101 	}
4102 	return status != nfs_ok ? status : nfserr;
4103 }
4104 
4105 static __be32
4106 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr,
4107 		   union nfsd4_op_u *u)
4108 {
4109 	struct nfsd4_lockt *lockt = &u->lockt;
4110 	struct xdr_stream *xdr = resp->xdr;
4111 	__be32 status;
4112 
4113 	if (nfserr == nfserr_denied) {
4114 		/* denied */
4115 		status = nfsd4_encode_lock4denied(xdr, &lockt->lt_denied);
4116 		if (status != nfs_ok)
4117 			return status;
4118 	}
4119 	return nfserr;
4120 }
4121 
4122 static __be32
4123 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr,
4124 		   union nfsd4_op_u *u)
4125 {
4126 	struct nfsd4_locku *locku = &u->locku;
4127 	struct xdr_stream *xdr = resp->xdr;
4128 
4129 	/* lock_stateid */
4130 	return nfsd4_encode_stateid4(xdr, &locku->lu_stateid);
4131 }
4132 
4133 
4134 static __be32
4135 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr,
4136 		  union nfsd4_op_u *u)
4137 {
4138 	struct nfsd4_link *link = &u->link;
4139 	struct xdr_stream *xdr = resp->xdr;
4140 
4141 	return nfsd4_encode_change_info4(xdr, &link->li_cinfo);
4142 }
4143 
4144 /*
4145  * This implementation does not yet support returning an ACE in an
4146  * OPEN that offers a delegation.
4147  */
4148 static __be32
4149 nfsd4_encode_open_nfsace4(struct xdr_stream *xdr)
4150 {
4151 	__be32 status;
4152 
4153 	/* type */
4154 	status = nfsd4_encode_acetype4(xdr, NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
4155 	if (status != nfs_ok)
4156 		return nfserr_resource;
4157 	/* flag */
4158 	status = nfsd4_encode_aceflag4(xdr, 0);
4159 	if (status != nfs_ok)
4160 		return nfserr_resource;
4161 	/* access mask */
4162 	status = nfsd4_encode_acemask4(xdr, 0);
4163 	if (status != nfs_ok)
4164 		return nfserr_resource;
4165 	/* who - empty for now */
4166 	if (xdr_stream_encode_u32(xdr, 0) != XDR_UNIT)
4167 		return nfserr_resource;
4168 	return nfs_ok;
4169 }
4170 
4171 static __be32
4172 nfsd4_encode_open_read_delegation4(struct xdr_stream *xdr, struct nfsd4_open *open)
4173 {
4174 	__be32 status;
4175 
4176 	/* stateid */
4177 	status = nfsd4_encode_stateid4(xdr, &open->op_delegate_stateid);
4178 	if (status != nfs_ok)
4179 		return status;
4180 	/* recall */
4181 	status = nfsd4_encode_bool(xdr, open->op_recall);
4182 	if (status != nfs_ok)
4183 		return status;
4184 	/* permissions */
4185 	return nfsd4_encode_open_nfsace4(xdr);
4186 }
4187 
4188 static __be32
4189 nfsd4_encode_nfs_space_limit4(struct xdr_stream *xdr, u64 filesize)
4190 {
4191 	/* limitby */
4192 	if (xdr_stream_encode_u32(xdr, NFS4_LIMIT_SIZE) != XDR_UNIT)
4193 		return nfserr_resource;
4194 	/* filesize */
4195 	return nfsd4_encode_uint64_t(xdr, filesize);
4196 }
4197 
4198 static __be32
4199 nfsd4_encode_open_write_delegation4(struct xdr_stream *xdr,
4200 				    struct nfsd4_open *open)
4201 {
4202 	__be32 status;
4203 
4204 	/* stateid */
4205 	status = nfsd4_encode_stateid4(xdr, &open->op_delegate_stateid);
4206 	if (status != nfs_ok)
4207 		return status;
4208 	/* recall */
4209 	status = nfsd4_encode_bool(xdr, open->op_recall);
4210 	if (status != nfs_ok)
4211 		return status;
4212 	/* space_limit */
4213 	status = nfsd4_encode_nfs_space_limit4(xdr, 0);
4214 	if (status != nfs_ok)
4215 		return status;
4216 	return nfsd4_encode_open_nfsace4(xdr);
4217 }
4218 
4219 static __be32
4220 nfsd4_encode_open_none_delegation4(struct xdr_stream *xdr,
4221 				   struct nfsd4_open *open)
4222 {
4223 	__be32 status = nfs_ok;
4224 
4225 	/* ond_why */
4226 	if (xdr_stream_encode_u32(xdr, open->op_why_no_deleg) != XDR_UNIT)
4227 		return nfserr_resource;
4228 	switch (open->op_why_no_deleg) {
4229 	case WND4_CONTENTION:
4230 		/* ond_server_will_push_deleg */
4231 		status = nfsd4_encode_bool(xdr, false);
4232 		break;
4233 	case WND4_RESOURCE:
4234 		/* ond_server_will_signal_avail */
4235 		status = nfsd4_encode_bool(xdr, false);
4236 	}
4237 	return status;
4238 }
4239 
4240 static __be32
4241 nfsd4_encode_open_delegation4(struct xdr_stream *xdr, struct nfsd4_open *open)
4242 {
4243 	__be32 status;
4244 
4245 	/* delegation_type */
4246 	if (xdr_stream_encode_u32(xdr, open->op_delegate_type) != XDR_UNIT)
4247 		return nfserr_resource;
4248 	switch (open->op_delegate_type) {
4249 	case NFS4_OPEN_DELEGATE_NONE:
4250 		status = nfs_ok;
4251 		break;
4252 	case NFS4_OPEN_DELEGATE_READ:
4253 		/* read */
4254 		status = nfsd4_encode_open_read_delegation4(xdr, open);
4255 		break;
4256 	case NFS4_OPEN_DELEGATE_WRITE:
4257 		/* write */
4258 		status = nfsd4_encode_open_write_delegation4(xdr, open);
4259 		break;
4260 	case NFS4_OPEN_DELEGATE_NONE_EXT:
4261 		/* od_whynone */
4262 		status = nfsd4_encode_open_none_delegation4(xdr, open);
4263 		break;
4264 	default:
4265 		status = nfserr_serverfault;
4266 	}
4267 
4268 	return status;
4269 }
4270 
4271 static __be32
4272 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr,
4273 		  union nfsd4_op_u *u)
4274 {
4275 	struct nfsd4_open *open = &u->open;
4276 	struct xdr_stream *xdr = resp->xdr;
4277 
4278 	/* stateid */
4279 	nfserr = nfsd4_encode_stateid4(xdr, &open->op_stateid);
4280 	if (nfserr != nfs_ok)
4281 		return nfserr;
4282 	/* cinfo */
4283 	nfserr = nfsd4_encode_change_info4(xdr, &open->op_cinfo);
4284 	if (nfserr != nfs_ok)
4285 		return nfserr;
4286 	/* rflags */
4287 	nfserr = nfsd4_encode_uint32_t(xdr, open->op_rflags);
4288 	if (nfserr != nfs_ok)
4289 		return nfserr;
4290 	/* attrset */
4291 	nfserr = nfsd4_encode_bitmap4(xdr, open->op_bmval[0],
4292 				      open->op_bmval[1], open->op_bmval[2]);
4293 	if (nfserr != nfs_ok)
4294 		return nfserr;
4295 	/* delegation */
4296 	return nfsd4_encode_open_delegation4(xdr, open);
4297 }
4298 
4299 static __be32
4300 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr,
4301 			  union nfsd4_op_u *u)
4302 {
4303 	struct nfsd4_open_confirm *oc = &u->open_confirm;
4304 	struct xdr_stream *xdr = resp->xdr;
4305 
4306 	/* open_stateid */
4307 	return nfsd4_encode_stateid4(xdr, &oc->oc_resp_stateid);
4308 }
4309 
4310 static __be32
4311 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr,
4312 			    union nfsd4_op_u *u)
4313 {
4314 	struct nfsd4_open_downgrade *od = &u->open_downgrade;
4315 	struct xdr_stream *xdr = resp->xdr;
4316 
4317 	/* open_stateid */
4318 	return nfsd4_encode_stateid4(xdr, &od->od_stateid);
4319 }
4320 
4321 /*
4322  * The operation of this function assumes that this is the only
4323  * READ operation in the COMPOUND. If there are multiple READs,
4324  * we use nfsd4_encode_readv().
4325  */
4326 static __be32 nfsd4_encode_splice_read(
4327 				struct nfsd4_compoundres *resp,
4328 				struct nfsd4_read *read,
4329 				struct file *file, unsigned long maxcount)
4330 {
4331 	struct xdr_stream *xdr = resp->xdr;
4332 	struct xdr_buf *buf = xdr->buf;
4333 	int status, space_left;
4334 	__be32 nfserr;
4335 
4336 	/*
4337 	 * Make sure there is room at the end of buf->head for
4338 	 * svcxdr_encode_opaque_pages() to create a tail buffer
4339 	 * to XDR-pad the payload.
4340 	 */
4341 	if (xdr->iov != xdr->buf->head || xdr->end - xdr->p < 1)
4342 		return nfserr_resource;
4343 
4344 	nfserr = nfsd_splice_read(read->rd_rqstp, read->rd_fhp,
4345 				  file, read->rd_offset, &maxcount,
4346 				  &read->rd_eof);
4347 	read->rd_length = maxcount;
4348 	if (nfserr)
4349 		goto out_err;
4350 	svcxdr_encode_opaque_pages(read->rd_rqstp, xdr, buf->pages,
4351 				   buf->page_base, maxcount);
4352 	status = svc_encode_result_payload(read->rd_rqstp,
4353 					   buf->head[0].iov_len, maxcount);
4354 	if (status) {
4355 		nfserr = nfserrno(status);
4356 		goto out_err;
4357 	}
4358 
4359 	/*
4360 	 * Prepare to encode subsequent operations.
4361 	 *
4362 	 * xdr_truncate_encode() is not safe to use after a successful
4363 	 * splice read has been done, so the following stream
4364 	 * manipulations are open-coded.
4365 	 */
4366 	space_left = min_t(int, (void *)xdr->end - (void *)xdr->p,
4367 				buf->buflen - buf->len);
4368 	buf->buflen = buf->len + space_left;
4369 	xdr->end = (__be32 *)((void *)xdr->end + space_left);
4370 
4371 	return nfs_ok;
4372 
4373 out_err:
4374 	/*
4375 	 * nfsd_splice_actor may have already messed with the
4376 	 * page length; reset it so as not to confuse
4377 	 * xdr_truncate_encode in our caller.
4378 	 */
4379 	buf->page_len = 0;
4380 	return nfserr;
4381 }
4382 
4383 static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp,
4384 				 struct nfsd4_read *read,
4385 				 struct file *file, unsigned long maxcount)
4386 {
4387 	struct xdr_stream *xdr = resp->xdr;
4388 	unsigned int base = xdr->buf->page_len & ~PAGE_MASK;
4389 	unsigned int starting_len = xdr->buf->len;
4390 	__be32 zero = xdr_zero;
4391 	__be32 nfserr;
4392 
4393 	if (xdr_reserve_space_vec(xdr, maxcount) < 0)
4394 		return nfserr_resource;
4395 
4396 	nfserr = nfsd_iter_read(resp->rqstp, read->rd_fhp, file,
4397 				read->rd_offset, &maxcount, base,
4398 				&read->rd_eof);
4399 	read->rd_length = maxcount;
4400 	if (nfserr)
4401 		return nfserr;
4402 	if (svc_encode_result_payload(resp->rqstp, starting_len, maxcount))
4403 		return nfserr_io;
4404 	xdr_truncate_encode(xdr, starting_len + xdr_align_size(maxcount));
4405 
4406 	write_bytes_to_xdr_buf(xdr->buf, starting_len + maxcount, &zero,
4407 			       xdr_pad_size(maxcount));
4408 	return nfs_ok;
4409 }
4410 
4411 static __be32
4412 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
4413 		  union nfsd4_op_u *u)
4414 {
4415 	struct nfsd4_compoundargs *argp = resp->rqstp->rq_argp;
4416 	struct nfsd4_read *read = &u->read;
4417 	struct xdr_stream *xdr = resp->xdr;
4418 	int starting_len = xdr->buf->len;
4419 	bool splice_ok = argp->splice_ok;
4420 	unsigned long maxcount;
4421 	struct file *file;
4422 	__be32 *p;
4423 
4424 	if (nfserr)
4425 		return nfserr;
4426 	file = read->rd_nf->nf_file;
4427 
4428 	p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */
4429 	if (!p) {
4430 		WARN_ON_ONCE(splice_ok);
4431 		return nfserr_resource;
4432 	}
4433 	if (resp->xdr->buf->page_len && splice_ok) {
4434 		WARN_ON_ONCE(1);
4435 		return nfserr_serverfault;
4436 	}
4437 	xdr_commit_encode(xdr);
4438 
4439 	maxcount = min_t(unsigned long, read->rd_length,
4440 			 (xdr->buf->buflen - xdr->buf->len));
4441 
4442 	if (file->f_op->splice_read && splice_ok)
4443 		nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount);
4444 	else
4445 		nfserr = nfsd4_encode_readv(resp, read, file, maxcount);
4446 	if (nfserr) {
4447 		xdr_truncate_encode(xdr, starting_len);
4448 		return nfserr;
4449 	}
4450 
4451 	p = xdr_encode_bool(p, read->rd_eof);
4452 	*p = cpu_to_be32(read->rd_length);
4453 	return nfs_ok;
4454 }
4455 
4456 static __be32
4457 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr,
4458 		      union nfsd4_op_u *u)
4459 {
4460 	struct nfsd4_readlink *readlink = &u->readlink;
4461 	__be32 *p, *maxcount_p, zero = xdr_zero;
4462 	struct xdr_stream *xdr = resp->xdr;
4463 	int length_offset = xdr->buf->len;
4464 	int maxcount, status;
4465 
4466 	maxcount_p = xdr_reserve_space(xdr, XDR_UNIT);
4467 	if (!maxcount_p)
4468 		return nfserr_resource;
4469 	maxcount = PAGE_SIZE;
4470 
4471 	p = xdr_reserve_space(xdr, maxcount);
4472 	if (!p)
4473 		return nfserr_resource;
4474 	/*
4475 	 * XXX: By default, vfs_readlink() will truncate symlinks if they
4476 	 * would overflow the buffer.  Is this kosher in NFSv4?  If not, one
4477 	 * easy fix is: if vfs_readlink() precisely fills the buffer, assume
4478 	 * that truncation occurred, and return NFS4ERR_RESOURCE.
4479 	 */
4480 	nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp,
4481 						(char *)p, &maxcount);
4482 	if (nfserr == nfserr_isdir)
4483 		nfserr = nfserr_inval;
4484 	if (nfserr)
4485 		goto out_err;
4486 	status = svc_encode_result_payload(readlink->rl_rqstp, length_offset,
4487 					   maxcount);
4488 	if (status) {
4489 		nfserr = nfserrno(status);
4490 		goto out_err;
4491 	}
4492 	*maxcount_p = cpu_to_be32(maxcount);
4493 	xdr_truncate_encode(xdr, length_offset + 4 + xdr_align_size(maxcount));
4494 	write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount, &zero,
4495 			       xdr_pad_size(maxcount));
4496 	return nfs_ok;
4497 
4498 out_err:
4499 	xdr_truncate_encode(xdr, length_offset);
4500 	return nfserr;
4501 }
4502 
4503 static __be32 nfsd4_encode_dirlist4(struct xdr_stream *xdr,
4504 				    struct nfsd4_readdir *readdir,
4505 				    u32 max_payload)
4506 {
4507 	int bytes_left, maxcount, starting_len = xdr->buf->len;
4508 	loff_t offset;
4509 	__be32 status;
4510 
4511 	/*
4512 	 * Number of bytes left for directory entries allowing for the
4513 	 * final 8 bytes of the readdir and a following failed op.
4514 	 */
4515 	bytes_left = xdr->buf->buflen - xdr->buf->len -
4516 		COMPOUND_ERR_SLACK_SPACE - XDR_UNIT * 2;
4517 	if (bytes_left < 0)
4518 		return nfserr_resource;
4519 	maxcount = min_t(u32, readdir->rd_maxcount, max_payload);
4520 
4521 	/*
4522 	 * The RFC defines rd_maxcount as the size of the
4523 	 * READDIR4resok structure, which includes the verifier
4524 	 * and the 8 bytes encoded at the end of this function.
4525 	 */
4526 	if (maxcount < XDR_UNIT * 4)
4527 		return nfserr_toosmall;
4528 	maxcount = min_t(int, maxcount - XDR_UNIT * 4, bytes_left);
4529 
4530 	/* RFC 3530 14.2.24 allows us to ignore dircount when it's 0 */
4531 	if (!readdir->rd_dircount)
4532 		readdir->rd_dircount = max_payload;
4533 
4534 	/* *entries */
4535 	readdir->xdr = xdr;
4536 	readdir->rd_maxcount = maxcount;
4537 	readdir->common.err = 0;
4538 	readdir->cookie_offset = 0;
4539 	offset = readdir->rd_cookie;
4540 	status = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, &offset,
4541 			      &readdir->common, nfsd4_encode_entry4);
4542 	if (status)
4543 		return status;
4544 	if (readdir->common.err == nfserr_toosmall &&
4545 	    xdr->buf->len == starting_len) {
4546 		/* No entries were encoded. Which limit did we hit? */
4547 		if (maxcount - XDR_UNIT * 4 < bytes_left)
4548 			/* It was the fault of rd_maxcount */
4549 			return nfserr_toosmall;
4550 		/* We ran out of buffer space */
4551 		return nfserr_resource;
4552 	}
4553 	/* Encode the final entry's cookie value */
4554 	nfsd4_encode_entry4_nfs_cookie4(readdir, offset);
4555 	/* No entries follow */
4556 	if (xdr_stream_encode_item_absent(xdr) != XDR_UNIT)
4557 		return nfserr_resource;
4558 
4559 	/* eof */
4560 	return nfsd4_encode_bool(xdr, readdir->common.err == nfserr_eof);
4561 }
4562 
4563 static __be32
4564 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr,
4565 		     union nfsd4_op_u *u)
4566 {
4567 	struct nfsd4_readdir *readdir = &u->readdir;
4568 	struct xdr_stream *xdr = resp->xdr;
4569 	int starting_len = xdr->buf->len;
4570 
4571 	/* cookieverf */
4572 	nfserr = nfsd4_encode_verifier4(xdr, &readdir->rd_verf);
4573 	if (nfserr != nfs_ok)
4574 		return nfserr;
4575 
4576 	/* reply */
4577 	nfserr = nfsd4_encode_dirlist4(xdr, readdir, svc_max_payload(resp->rqstp));
4578 	if (nfserr != nfs_ok)
4579 		xdr_truncate_encode(xdr, starting_len);
4580 	return nfserr;
4581 }
4582 
4583 static __be32
4584 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr,
4585 		    union nfsd4_op_u *u)
4586 {
4587 	struct nfsd4_remove *remove = &u->remove;
4588 	struct xdr_stream *xdr = resp->xdr;
4589 
4590 	return nfsd4_encode_change_info4(xdr, &remove->rm_cinfo);
4591 }
4592 
4593 static __be32
4594 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr,
4595 		    union nfsd4_op_u *u)
4596 {
4597 	struct nfsd4_rename *rename = &u->rename;
4598 	struct xdr_stream *xdr = resp->xdr;
4599 
4600 	nfserr = nfsd4_encode_change_info4(xdr, &rename->rn_sinfo);
4601 	if (nfserr)
4602 		return nfserr;
4603 	return nfsd4_encode_change_info4(xdr, &rename->rn_tinfo);
4604 }
4605 
4606 static __be32
4607 nfsd4_encode_rpcsec_gss_info(struct xdr_stream *xdr,
4608 			     struct rpcsec_gss_info *info)
4609 {
4610 	__be32 status;
4611 
4612 	/* oid */
4613 	if (xdr_stream_encode_opaque(xdr, info->oid.data, info->oid.len) < 0)
4614 		return nfserr_resource;
4615 	/* qop */
4616 	status = nfsd4_encode_qop4(xdr, info->qop);
4617 	if (status != nfs_ok)
4618 		return status;
4619 	/* service */
4620 	if (xdr_stream_encode_u32(xdr, info->service) != XDR_UNIT)
4621 		return nfserr_resource;
4622 
4623 	return nfs_ok;
4624 }
4625 
4626 static __be32
4627 nfsd4_do_encode_secinfo(struct xdr_stream *xdr, struct svc_export *exp)
4628 {
4629 	u32 i, nflavs, supported;
4630 	struct exp_flavor_info *flavs;
4631 	struct exp_flavor_info def_flavs[2];
4632 	static bool report = true;
4633 	__be32 *flavorsp;
4634 	__be32 status;
4635 
4636 	if (exp->ex_nflavors) {
4637 		flavs = exp->ex_flavors;
4638 		nflavs = exp->ex_nflavors;
4639 	} else { /* Handling of some defaults in absence of real secinfo: */
4640 		flavs = def_flavs;
4641 		if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
4642 			nflavs = 2;
4643 			flavs[0].pseudoflavor = RPC_AUTH_UNIX;
4644 			flavs[1].pseudoflavor = RPC_AUTH_NULL;
4645 		} else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
4646 			nflavs = 1;
4647 			flavs[0].pseudoflavor
4648 					= svcauth_gss_flavor(exp->ex_client);
4649 		} else {
4650 			nflavs = 1;
4651 			flavs[0].pseudoflavor
4652 					= exp->ex_client->flavour->flavour;
4653 		}
4654 	}
4655 
4656 	supported = 0;
4657 	flavorsp = xdr_reserve_space(xdr, XDR_UNIT);
4658 	if (!flavorsp)
4659 		return nfserr_resource;
4660 
4661 	for (i = 0; i < nflavs; i++) {
4662 		rpc_authflavor_t pf = flavs[i].pseudoflavor;
4663 		struct rpcsec_gss_info info;
4664 
4665 		if (rpcauth_get_gssinfo(pf, &info) == 0) {
4666 			supported++;
4667 
4668 			/* flavor */
4669 			status = nfsd4_encode_uint32_t(xdr, RPC_AUTH_GSS);
4670 			if (status != nfs_ok)
4671 				return status;
4672 			/* flavor_info */
4673 			status = nfsd4_encode_rpcsec_gss_info(xdr, &info);
4674 			if (status != nfs_ok)
4675 				return status;
4676 		} else if (pf < RPC_AUTH_MAXFLAVOR) {
4677 			supported++;
4678 
4679 			/* flavor */
4680 			status = nfsd4_encode_uint32_t(xdr, pf);
4681 			if (status != nfs_ok)
4682 				return status;
4683 		} else {
4684 			if (report)
4685 				pr_warn("NFS: SECINFO: security flavor %u "
4686 					"is not supported\n", pf);
4687 		}
4688 	}
4689 
4690 	if (nflavs != supported)
4691 		report = false;
4692 	*flavorsp = cpu_to_be32(supported);
4693 	return 0;
4694 }
4695 
4696 static __be32
4697 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
4698 		     union nfsd4_op_u *u)
4699 {
4700 	struct nfsd4_secinfo *secinfo = &u->secinfo;
4701 	struct xdr_stream *xdr = resp->xdr;
4702 
4703 	return nfsd4_do_encode_secinfo(xdr, secinfo->si_exp);
4704 }
4705 
4706 static __be32
4707 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
4708 		     union nfsd4_op_u *u)
4709 {
4710 	struct nfsd4_secinfo_no_name *secinfo = &u->secinfo_no_name;
4711 	struct xdr_stream *xdr = resp->xdr;
4712 
4713 	return nfsd4_do_encode_secinfo(xdr, secinfo->sin_exp);
4714 }
4715 
4716 static __be32
4717 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr,
4718 		     union nfsd4_op_u *u)
4719 {
4720 	struct nfsd4_setattr *setattr = &u->setattr;
4721 	__be32 status;
4722 
4723 	switch (nfserr) {
4724 	case nfs_ok:
4725 		/* attrsset */
4726 		status = nfsd4_encode_bitmap4(resp->xdr, setattr->sa_bmval[0],
4727 					      setattr->sa_bmval[1],
4728 					      setattr->sa_bmval[2]);
4729 		break;
4730 	default:
4731 		/* attrsset */
4732 		status = nfsd4_encode_bitmap4(resp->xdr, 0, 0, 0);
4733 	}
4734 	return status != nfs_ok ? status : nfserr;
4735 }
4736 
4737 static __be32
4738 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr,
4739 			 union nfsd4_op_u *u)
4740 {
4741 	struct nfsd4_setclientid *scd = &u->setclientid;
4742 	struct xdr_stream *xdr = resp->xdr;
4743 
4744 	if (!nfserr) {
4745 		nfserr = nfsd4_encode_clientid4(xdr, &scd->se_clientid);
4746 		if (nfserr != nfs_ok)
4747 			goto out;
4748 		nfserr = nfsd4_encode_verifier4(xdr, &scd->se_confirm);
4749 	} else if (nfserr == nfserr_clid_inuse) {
4750 		/* empty network id */
4751 		if (xdr_stream_encode_u32(xdr, 0) < 0) {
4752 			nfserr = nfserr_resource;
4753 			goto out;
4754 		}
4755 		/* empty universal address */
4756 		if (xdr_stream_encode_u32(xdr, 0) < 0) {
4757 			nfserr = nfserr_resource;
4758 			goto out;
4759 		}
4760 	}
4761 out:
4762 	return nfserr;
4763 }
4764 
4765 static __be32
4766 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr,
4767 		   union nfsd4_op_u *u)
4768 {
4769 	struct nfsd4_write *write = &u->write;
4770 	struct xdr_stream *xdr = resp->xdr;
4771 
4772 	/* count */
4773 	nfserr = nfsd4_encode_count4(xdr, write->wr_bytes_written);
4774 	if (nfserr)
4775 		return nfserr;
4776 	/* committed */
4777 	if (xdr_stream_encode_u32(xdr, write->wr_how_written) != XDR_UNIT)
4778 		return nfserr_resource;
4779 	/* writeverf */
4780 	return nfsd4_encode_verifier4(xdr, &write->wr_verifier);
4781 }
4782 
4783 static __be32
4784 nfsd4_encode_state_protect_ops4(struct xdr_stream *xdr,
4785 				struct nfsd4_exchange_id *exid)
4786 {
4787 	__be32 status;
4788 
4789 	/* spo_must_enforce */
4790 	status = nfsd4_encode_bitmap4(xdr, exid->spo_must_enforce[0],
4791 				      exid->spo_must_enforce[1],
4792 				      exid->spo_must_enforce[2]);
4793 	if (status != nfs_ok)
4794 		return status;
4795 	/* spo_must_allow */
4796 	return nfsd4_encode_bitmap4(xdr, exid->spo_must_allow[0],
4797 				    exid->spo_must_allow[1],
4798 				    exid->spo_must_allow[2]);
4799 }
4800 
4801 static __be32
4802 nfsd4_encode_state_protect4_r(struct xdr_stream *xdr, struct nfsd4_exchange_id *exid)
4803 {
4804 	__be32 status;
4805 
4806 	if (xdr_stream_encode_u32(xdr, exid->spa_how) != XDR_UNIT)
4807 		return nfserr_resource;
4808 	switch (exid->spa_how) {
4809 	case SP4_NONE:
4810 		status = nfs_ok;
4811 		break;
4812 	case SP4_MACH_CRED:
4813 		/* spr_mach_ops */
4814 		status = nfsd4_encode_state_protect_ops4(xdr, exid);
4815 		break;
4816 	default:
4817 		status = nfserr_serverfault;
4818 	}
4819 	return status;
4820 }
4821 
4822 static __be32
4823 nfsd4_encode_server_owner4(struct xdr_stream *xdr, struct svc_rqst *rqstp)
4824 {
4825 	struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
4826 	__be32 status;
4827 
4828 	/* so_minor_id */
4829 	status = nfsd4_encode_uint64_t(xdr, 0);
4830 	if (status != nfs_ok)
4831 		return status;
4832 	/* so_major_id */
4833 	return nfsd4_encode_opaque(xdr, nn->nfsd_name, strlen(nn->nfsd_name));
4834 }
4835 
4836 static __be32
4837 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
4838 			 union nfsd4_op_u *u)
4839 {
4840 	struct nfsd_net *nn = net_generic(SVC_NET(resp->rqstp), nfsd_net_id);
4841 	struct nfsd4_exchange_id *exid = &u->exchange_id;
4842 	struct xdr_stream *xdr = resp->xdr;
4843 
4844 	/* eir_clientid */
4845 	nfserr = nfsd4_encode_clientid4(xdr, &exid->clientid);
4846 	if (nfserr != nfs_ok)
4847 		return nfserr;
4848 	/* eir_sequenceid */
4849 	nfserr = nfsd4_encode_sequenceid4(xdr, exid->seqid);
4850 	if (nfserr != nfs_ok)
4851 		return nfserr;
4852 	/* eir_flags */
4853 	nfserr = nfsd4_encode_uint32_t(xdr, exid->flags);
4854 	if (nfserr != nfs_ok)
4855 		return nfserr;
4856 	/* eir_state_protect */
4857 	nfserr = nfsd4_encode_state_protect4_r(xdr, exid);
4858 	if (nfserr != nfs_ok)
4859 		return nfserr;
4860 	/* eir_server_owner */
4861 	nfserr = nfsd4_encode_server_owner4(xdr, resp->rqstp);
4862 	if (nfserr != nfs_ok)
4863 		return nfserr;
4864 	/* eir_server_scope */
4865 	nfserr = nfsd4_encode_opaque(xdr, nn->nfsd_name,
4866 				     strlen(nn->nfsd_name));
4867 	if (nfserr != nfs_ok)
4868 		return nfserr;
4869 	/* eir_server_impl_id<1> */
4870 	if (xdr_stream_encode_u32(xdr, 0) != XDR_UNIT)
4871 		return nfserr_resource;
4872 
4873 	return nfs_ok;
4874 }
4875 
4876 static __be32
4877 nfsd4_encode_channel_attrs4(struct xdr_stream *xdr,
4878 			    const struct nfsd4_channel_attrs *attrs)
4879 {
4880 	__be32 status;
4881 
4882 	/* ca_headerpadsize */
4883 	status = nfsd4_encode_count4(xdr, 0);
4884 	if (status != nfs_ok)
4885 		return status;
4886 	/* ca_maxrequestsize */
4887 	status = nfsd4_encode_count4(xdr, attrs->maxreq_sz);
4888 	if (status != nfs_ok)
4889 		return status;
4890 	/* ca_maxresponsesize */
4891 	status = nfsd4_encode_count4(xdr, attrs->maxresp_sz);
4892 	if (status != nfs_ok)
4893 		return status;
4894 	/* ca_maxresponsesize_cached */
4895 	status = nfsd4_encode_count4(xdr, attrs->maxresp_cached);
4896 	if (status != nfs_ok)
4897 		return status;
4898 	/* ca_maxoperations */
4899 	status = nfsd4_encode_count4(xdr, attrs->maxops);
4900 	if (status != nfs_ok)
4901 		return status;
4902 	/* ca_maxrequests */
4903 	status = nfsd4_encode_count4(xdr, attrs->maxreqs);
4904 	if (status != nfs_ok)
4905 		return status;
4906 	/* ca_rdma_ird<1> */
4907 	if (xdr_stream_encode_u32(xdr, attrs->nr_rdma_attrs) != XDR_UNIT)
4908 		return nfserr_resource;
4909 	if (attrs->nr_rdma_attrs)
4910 		return nfsd4_encode_uint32_t(xdr, attrs->rdma_attrs);
4911 	return nfs_ok;
4912 }
4913 
4914 static __be32
4915 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
4916 			    union nfsd4_op_u *u)
4917 {
4918 	struct nfsd4_create_session *sess = &u->create_session;
4919 	struct xdr_stream *xdr = resp->xdr;
4920 
4921 	/* csr_sessionid */
4922 	nfserr = nfsd4_encode_sessionid4(xdr, &sess->sessionid);
4923 	if (nfserr != nfs_ok)
4924 		return nfserr;
4925 	/* csr_sequence */
4926 	nfserr = nfsd4_encode_sequenceid4(xdr, sess->seqid);
4927 	if (nfserr != nfs_ok)
4928 		return nfserr;
4929 	/* csr_flags */
4930 	nfserr = nfsd4_encode_uint32_t(xdr, sess->flags);
4931 	if (nfserr != nfs_ok)
4932 		return nfserr;
4933 	/* csr_fore_chan_attrs */
4934 	nfserr = nfsd4_encode_channel_attrs4(xdr, &sess->fore_channel);
4935 	if (nfserr != nfs_ok)
4936 		return nfserr;
4937 	/* csr_back_chan_attrs */
4938 	return nfsd4_encode_channel_attrs4(xdr, &sess->back_channel);
4939 }
4940 
4941 static __be32
4942 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
4943 		      union nfsd4_op_u *u)
4944 {
4945 	struct nfsd4_sequence *seq = &u->sequence;
4946 	struct xdr_stream *xdr = resp->xdr;
4947 
4948 	/* sr_sessionid */
4949 	nfserr = nfsd4_encode_sessionid4(xdr, &seq->sessionid);
4950 	if (nfserr != nfs_ok)
4951 		return nfserr;
4952 	/* sr_sequenceid */
4953 	nfserr = nfsd4_encode_sequenceid4(xdr, seq->seqid);
4954 	if (nfserr != nfs_ok)
4955 		return nfserr;
4956 	/* sr_slotid */
4957 	nfserr = nfsd4_encode_slotid4(xdr, seq->slotid);
4958 	if (nfserr != nfs_ok)
4959 		return nfserr;
4960 	/* Note slotid's are numbered from zero: */
4961 	/* sr_highest_slotid */
4962 	nfserr = nfsd4_encode_slotid4(xdr, seq->maxslots - 1);
4963 	if (nfserr != nfs_ok)
4964 		return nfserr;
4965 	/* sr_target_highest_slotid */
4966 	nfserr = nfsd4_encode_slotid4(xdr, seq->maxslots - 1);
4967 	if (nfserr != nfs_ok)
4968 		return nfserr;
4969 	/* sr_status_flags */
4970 	nfserr = nfsd4_encode_uint32_t(xdr, seq->status_flags);
4971 	if (nfserr != nfs_ok)
4972 		return nfserr;
4973 
4974 	resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */
4975 	return nfs_ok;
4976 }
4977 
4978 static __be32
4979 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
4980 			  union nfsd4_op_u *u)
4981 {
4982 	struct nfsd4_test_stateid *test_stateid = &u->test_stateid;
4983 	struct nfsd4_test_stateid_id *stateid, *next;
4984 	struct xdr_stream *xdr = resp->xdr;
4985 
4986 	/* tsr_status_codes<> */
4987 	if (xdr_stream_encode_u32(xdr, test_stateid->ts_num_ids) != XDR_UNIT)
4988 		return nfserr_resource;
4989 	list_for_each_entry_safe(stateid, next,
4990 				 &test_stateid->ts_stateid_list, ts_id_list) {
4991 		if (xdr_stream_encode_be32(xdr, stateid->ts_id_status) != XDR_UNIT)
4992 			return nfserr_resource;
4993 	}
4994 	return nfs_ok;
4995 }
4996 
4997 static __be32
4998 nfsd4_encode_get_dir_delegation(struct nfsd4_compoundres *resp, __be32 nfserr,
4999 				union nfsd4_op_u *u)
5000 {
5001 	struct nfsd4_get_dir_delegation *gdd = &u->get_dir_delegation;
5002 	struct xdr_stream *xdr = resp->xdr;
5003 	__be32 status = nfserr_resource;
5004 
5005 	switch(gdd->gddrnf_status) {
5006 	case GDD4_OK:
5007 		if (xdr_stream_encode_u32(xdr, GDD4_OK) != XDR_UNIT)
5008 			break;
5009 		status = nfsd4_encode_verifier4(xdr, &gdd->gddr_cookieverf);
5010 		if (status)
5011 			break;
5012 		status = nfsd4_encode_stateid4(xdr, &gdd->gddr_stateid);
5013 		if (status)
5014 			break;
5015 		status = nfsd4_encode_bitmap4(xdr, gdd->gddr_notification[0], 0, 0);
5016 		if (status)
5017 			break;
5018 		status = nfsd4_encode_bitmap4(xdr, gdd->gddr_child_attributes[0],
5019 						   gdd->gddr_child_attributes[1],
5020 						   gdd->gddr_child_attributes[2]);
5021 		if (status)
5022 			break;
5023 		status = nfsd4_encode_bitmap4(xdr, gdd->gddr_dir_attributes[0],
5024 						   gdd->gddr_dir_attributes[1],
5025 						   gdd->gddr_dir_attributes[2]);
5026 		break;
5027 	default:
5028 		pr_warn("nfsd: bad gddrnf_status (%u)\n", gdd->gddrnf_status);
5029 		gdd->gddrnf_will_signal_deleg_avail = 0;
5030 		fallthrough;
5031 	case GDD4_UNAVAIL:
5032 		if (xdr_stream_encode_u32(xdr, GDD4_UNAVAIL) != XDR_UNIT)
5033 			break;
5034 		status = nfsd4_encode_bool(xdr, gdd->gddrnf_will_signal_deleg_avail);
5035 		break;
5036 	}
5037 	return status;
5038 }
5039 
5040 #ifdef CONFIG_NFSD_PNFS
5041 static __be32
5042 nfsd4_encode_device_addr4(struct xdr_stream *xdr,
5043 			  const struct nfsd4_getdeviceinfo *gdev)
5044 {
5045 	u32 needed_len, starting_len = xdr->buf->len;
5046 	const struct nfsd4_layout_ops *ops;
5047 	__be32 status;
5048 
5049 	/* da_layout_type */
5050 	if (xdr_stream_encode_u32(xdr, gdev->gd_layout_type) != XDR_UNIT)
5051 		return nfserr_resource;
5052 	/* da_addr_body */
5053 	ops = nfsd4_layout_ops[gdev->gd_layout_type];
5054 	status = ops->encode_getdeviceinfo(xdr, gdev);
5055 	if (status != nfs_ok) {
5056 		/*
5057 		 * Don't burden the layout drivers with enforcing
5058 		 * gd_maxcount. Just tell the client to come back
5059 		 * with a bigger buffer if it's not enough.
5060 		 */
5061 		if (xdr->buf->len + XDR_UNIT > gdev->gd_maxcount)
5062 			goto toosmall;
5063 		return status;
5064 	}
5065 
5066 	return nfs_ok;
5067 
5068 toosmall:
5069 	needed_len = xdr->buf->len + XDR_UNIT;	/* notifications */
5070 	xdr_truncate_encode(xdr, starting_len);
5071 
5072 	status = nfsd4_encode_count4(xdr, needed_len);
5073 	if (status != nfs_ok)
5074 		return status;
5075 	return nfserr_toosmall;
5076 }
5077 
5078 static __be32
5079 nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
5080 		union nfsd4_op_u *u)
5081 {
5082 	struct nfsd4_getdeviceinfo *gdev = &u->getdeviceinfo;
5083 	struct xdr_stream *xdr = resp->xdr;
5084 
5085 	/* gdir_device_addr */
5086 	nfserr = nfsd4_encode_device_addr4(xdr, gdev);
5087 	if (nfserr)
5088 		return nfserr;
5089 	/* gdir_notification */
5090 	return nfsd4_encode_bitmap4(xdr, gdev->gd_notify_types, 0, 0);
5091 }
5092 
5093 static __be32
5094 nfsd4_encode_layout4(struct xdr_stream *xdr, const struct nfsd4_layoutget *lgp)
5095 {
5096 	const struct nfsd4_layout_ops *ops = nfsd4_layout_ops[lgp->lg_layout_type];
5097 	__be32 status;
5098 
5099 	/* lo_offset */
5100 	status = nfsd4_encode_offset4(xdr, lgp->lg_seg.offset);
5101 	if (status != nfs_ok)
5102 		return status;
5103 	/* lo_length */
5104 	status = nfsd4_encode_length4(xdr, lgp->lg_seg.length);
5105 	if (status != nfs_ok)
5106 		return status;
5107 	/* lo_iomode */
5108 	if (xdr_stream_encode_u32(xdr, lgp->lg_seg.iomode) != XDR_UNIT)
5109 		return nfserr_resource;
5110 	/* lo_content */
5111 	if (xdr_stream_encode_u32(xdr, lgp->lg_layout_type) != XDR_UNIT)
5112 		return nfserr_resource;
5113 	return ops->encode_layoutget(xdr, lgp);
5114 }
5115 
5116 static __be32
5117 nfsd4_encode_layoutget(struct nfsd4_compoundres *resp, __be32 nfserr,
5118 		union nfsd4_op_u *u)
5119 {
5120 	struct nfsd4_layoutget *lgp = &u->layoutget;
5121 	struct xdr_stream *xdr = resp->xdr;
5122 
5123 	/* logr_return_on_close */
5124 	nfserr = nfsd4_encode_bool(xdr, true);
5125 	if (nfserr != nfs_ok)
5126 		return nfserr;
5127 	/* logr_stateid */
5128 	nfserr = nfsd4_encode_stateid4(xdr, &lgp->lg_sid);
5129 	if (nfserr != nfs_ok)
5130 		return nfserr;
5131 	/* logr_layout<> */
5132 	if (xdr_stream_encode_u32(xdr, 1) != XDR_UNIT)
5133 		return nfserr_resource;
5134 	return nfsd4_encode_layout4(xdr, lgp);
5135 }
5136 
5137 static __be32
5138 nfsd4_encode_layoutcommit(struct nfsd4_compoundres *resp, __be32 nfserr,
5139 			  union nfsd4_op_u *u)
5140 {
5141 	struct nfsd4_layoutcommit *lcp = &u->layoutcommit;
5142 	struct xdr_stream *xdr = resp->xdr;
5143 
5144 	/* ns_sizechanged */
5145 	nfserr = nfsd4_encode_bool(xdr, lcp->lc_size_chg);
5146 	if (nfserr != nfs_ok)
5147 		return nfserr;
5148 	if (lcp->lc_size_chg)
5149 		/* ns_size */
5150 		return nfsd4_encode_length4(xdr, lcp->lc_newsize);
5151 	return nfs_ok;
5152 }
5153 
5154 static __be32
5155 nfsd4_encode_layoutreturn(struct nfsd4_compoundres *resp, __be32 nfserr,
5156 		union nfsd4_op_u *u)
5157 {
5158 	struct nfsd4_layoutreturn *lrp = &u->layoutreturn;
5159 	struct xdr_stream *xdr = resp->xdr;
5160 
5161 	/* lrs_present */
5162 	nfserr = nfsd4_encode_bool(xdr, lrp->lrs_present);
5163 	if (nfserr != nfs_ok)
5164 		return nfserr;
5165 	if (lrp->lrs_present)
5166 		/* lrs_stateid */
5167 		return nfsd4_encode_stateid4(xdr, &lrp->lr_sid);
5168 	return nfs_ok;
5169 }
5170 #endif /* CONFIG_NFSD_PNFS */
5171 
5172 static __be32
5173 nfsd4_encode_write_response4(struct xdr_stream *xdr,
5174 			     const struct nfsd4_copy *copy)
5175 {
5176 	const struct nfsd42_write_res *write = &copy->cp_res;
5177 	u32 count = nfsd4_copy_is_sync(copy) ? 0 : 1;
5178 	__be32 status;
5179 
5180 	/* wr_callback_id<1> */
5181 	if (xdr_stream_encode_u32(xdr, count) != XDR_UNIT)
5182 		return nfserr_resource;
5183 	if (count) {
5184 		status = nfsd4_encode_stateid4(xdr, &write->cb_stateid);
5185 		if (status != nfs_ok)
5186 			return status;
5187 	}
5188 
5189 	/* wr_count */
5190 	status = nfsd4_encode_length4(xdr, write->wr_bytes_written);
5191 	if (status != nfs_ok)
5192 		return status;
5193 	/* wr_committed */
5194 	if (xdr_stream_encode_u32(xdr, write->wr_stable_how) != XDR_UNIT)
5195 		return nfserr_resource;
5196 	/* wr_writeverf */
5197 	return nfsd4_encode_verifier4(xdr, &write->wr_verifier);
5198 }
5199 
5200 static __be32 nfsd4_encode_copy_requirements4(struct xdr_stream *xdr,
5201 					      const struct nfsd4_copy *copy)
5202 {
5203 	__be32 status;
5204 
5205 	/* cr_consecutive */
5206 	status = nfsd4_encode_bool(xdr, true);
5207 	if (status != nfs_ok)
5208 		return status;
5209 	/* cr_synchronous */
5210 	return nfsd4_encode_bool(xdr, nfsd4_copy_is_sync(copy));
5211 }
5212 
5213 static __be32
5214 nfsd4_encode_copy(struct nfsd4_compoundres *resp, __be32 nfserr,
5215 		  union nfsd4_op_u *u)
5216 {
5217 	struct nfsd4_copy *copy = &u->copy;
5218 
5219 	nfserr = nfsd4_encode_write_response4(resp->xdr, copy);
5220 	if (nfserr != nfs_ok)
5221 		return nfserr;
5222 	return nfsd4_encode_copy_requirements4(resp->xdr, copy);
5223 }
5224 
5225 static __be32
5226 nfsd4_encode_netloc4(struct xdr_stream *xdr, const struct nl4_server *ns)
5227 {
5228 	__be32 status;
5229 
5230 	if (xdr_stream_encode_u32(xdr, ns->nl4_type) != XDR_UNIT)
5231 		return nfserr_resource;
5232 	switch (ns->nl4_type) {
5233 	case NL4_NETADDR:
5234 		/* nl_addr */
5235 		status = nfsd4_encode_netaddr4(xdr, &ns->u.nl4_addr);
5236 		break;
5237 	default:
5238 		status = nfserr_serverfault;
5239 	}
5240 	return status;
5241 }
5242 
5243 static __be32
5244 nfsd4_encode_copy_notify(struct nfsd4_compoundres *resp, __be32 nfserr,
5245 			 union nfsd4_op_u *u)
5246 {
5247 	struct nfsd4_copy_notify *cn = &u->copy_notify;
5248 	struct xdr_stream *xdr = resp->xdr;
5249 
5250 	/* cnr_lease_time */
5251 	nfserr = nfsd4_encode_nfstime4(xdr, &cn->cpn_lease_time);
5252 	if (nfserr)
5253 		return nfserr;
5254 	/* cnr_stateid */
5255 	nfserr = nfsd4_encode_stateid4(xdr, &cn->cpn_cnr_stateid);
5256 	if (nfserr)
5257 		return nfserr;
5258 	/* cnr_source_server<> */
5259 	if (xdr_stream_encode_u32(xdr, 1) != XDR_UNIT)
5260 		return nfserr_resource;
5261 	return nfsd4_encode_netloc4(xdr, cn->cpn_src);
5262 }
5263 
5264 static __be32
5265 nfsd4_encode_offload_status(struct nfsd4_compoundres *resp, __be32 nfserr,
5266 			    union nfsd4_op_u *u)
5267 {
5268 	struct nfsd4_offload_status *os = &u->offload_status;
5269 	struct xdr_stream *xdr = resp->xdr;
5270 
5271 	/* osr_count */
5272 	nfserr = nfsd4_encode_length4(xdr, os->count);
5273 	if (nfserr != nfs_ok)
5274 		return nfserr;
5275 	/* osr_complete<1> */
5276 	if (os->completed) {
5277 		if (xdr_stream_encode_u32(xdr, 1) != XDR_UNIT)
5278 			return nfserr_resource;
5279 		if (xdr_stream_encode_be32(xdr, os->status) != XDR_UNIT)
5280 			return nfserr_resource;
5281 	} else if (xdr_stream_encode_u32(xdr, 0) != XDR_UNIT)
5282 		return nfserr_resource;
5283 	return nfs_ok;
5284 }
5285 
5286 static __be32
5287 nfsd4_encode_read_plus_data(struct nfsd4_compoundres *resp,
5288 			    struct nfsd4_read *read)
5289 {
5290 	struct nfsd4_compoundargs *argp = resp->rqstp->rq_argp;
5291 	struct file *file = read->rd_nf->nf_file;
5292 	struct xdr_stream *xdr = resp->xdr;
5293 	bool splice_ok = argp->splice_ok;
5294 	unsigned long maxcount;
5295 	__be32 nfserr, *p;
5296 
5297 	/* Content type, offset, byte count */
5298 	p = xdr_reserve_space(xdr, 4 + 8 + 4);
5299 	if (!p)
5300 		return nfserr_io;
5301 	if (resp->xdr->buf->page_len && splice_ok) {
5302 		WARN_ON_ONCE(splice_ok);
5303 		return nfserr_serverfault;
5304 	}
5305 
5306 	maxcount = min_t(unsigned long, read->rd_length,
5307 			 (xdr->buf->buflen - xdr->buf->len));
5308 
5309 	if (file->f_op->splice_read && splice_ok)
5310 		nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount);
5311 	else
5312 		nfserr = nfsd4_encode_readv(resp, read, file, maxcount);
5313 	if (nfserr)
5314 		return nfserr;
5315 
5316 	*p++ = cpu_to_be32(NFS4_CONTENT_DATA);
5317 	p = xdr_encode_hyper(p, read->rd_offset);
5318 	*p = cpu_to_be32(read->rd_length);
5319 
5320 	return nfs_ok;
5321 }
5322 
5323 static __be32
5324 nfsd4_encode_read_plus(struct nfsd4_compoundres *resp, __be32 nfserr,
5325 		       union nfsd4_op_u *u)
5326 {
5327 	struct nfsd4_read *read = &u->read;
5328 	struct file *file = read->rd_nf->nf_file;
5329 	struct xdr_stream *xdr = resp->xdr;
5330 	int starting_len = xdr->buf->len;
5331 	u32 segments = 0;
5332 	__be32 *p;
5333 
5334 	if (nfserr)
5335 		return nfserr;
5336 
5337 	/* eof flag, segment count */
5338 	p = xdr_reserve_space(xdr, 4 + 4);
5339 	if (!p)
5340 		return nfserr_io;
5341 	xdr_commit_encode(xdr);
5342 
5343 	read->rd_eof = read->rd_offset >= i_size_read(file_inode(file));
5344 	if (read->rd_eof)
5345 		goto out;
5346 
5347 	nfserr = nfsd4_encode_read_plus_data(resp, read);
5348 	if (nfserr) {
5349 		xdr_truncate_encode(xdr, starting_len);
5350 		return nfserr;
5351 	}
5352 
5353 	segments++;
5354 
5355 out:
5356 	p = xdr_encode_bool(p, read->rd_eof);
5357 	*p = cpu_to_be32(segments);
5358 	return nfserr;
5359 }
5360 
5361 static __be32
5362 nfsd4_encode_seek(struct nfsd4_compoundres *resp, __be32 nfserr,
5363 		  union nfsd4_op_u *u)
5364 {
5365 	struct nfsd4_seek *seek = &u->seek;
5366 	struct xdr_stream *xdr = resp->xdr;
5367 
5368 	/* sr_eof */
5369 	nfserr = nfsd4_encode_bool(xdr, seek->seek_eof);
5370 	if (nfserr != nfs_ok)
5371 		return nfserr;
5372 	/* sr_offset */
5373 	return nfsd4_encode_offset4(xdr, seek->seek_pos);
5374 }
5375 
5376 static __be32
5377 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr,
5378 		  union nfsd4_op_u *p)
5379 {
5380 	return nfserr;
5381 }
5382 
5383 /*
5384  * Encode kmalloc-ed buffer in to XDR stream.
5385  */
5386 static __be32
5387 nfsd4_vbuf_to_stream(struct xdr_stream *xdr, char *buf, u32 buflen)
5388 {
5389 	u32 cplen;
5390 	__be32 *p;
5391 
5392 	cplen = min_t(unsigned long, buflen,
5393 		      ((void *)xdr->end - (void *)xdr->p));
5394 	p = xdr_reserve_space(xdr, cplen);
5395 	if (!p)
5396 		return nfserr_resource;
5397 
5398 	memcpy(p, buf, cplen);
5399 	buf += cplen;
5400 	buflen -= cplen;
5401 
5402 	while (buflen) {
5403 		cplen = min_t(u32, buflen, PAGE_SIZE);
5404 		p = xdr_reserve_space(xdr, cplen);
5405 		if (!p)
5406 			return nfserr_resource;
5407 
5408 		memcpy(p, buf, cplen);
5409 
5410 		if (cplen < PAGE_SIZE) {
5411 			/*
5412 			 * We're done, with a length that wasn't page
5413 			 * aligned, so possibly not word aligned. Pad
5414 			 * any trailing bytes with 0.
5415 			 */
5416 			xdr_encode_opaque_fixed(p, NULL, cplen);
5417 			break;
5418 		}
5419 
5420 		buflen -= PAGE_SIZE;
5421 		buf += PAGE_SIZE;
5422 	}
5423 
5424 	return 0;
5425 }
5426 
5427 static __be32
5428 nfsd4_encode_getxattr(struct nfsd4_compoundres *resp, __be32 nfserr,
5429 		      union nfsd4_op_u *u)
5430 {
5431 	struct nfsd4_getxattr *getxattr = &u->getxattr;
5432 	struct xdr_stream *xdr = resp->xdr;
5433 	__be32 *p, err;
5434 
5435 	p = xdr_reserve_space(xdr, 4);
5436 	if (!p)
5437 		return nfserr_resource;
5438 
5439 	*p = cpu_to_be32(getxattr->getxa_len);
5440 
5441 	if (getxattr->getxa_len == 0)
5442 		return 0;
5443 
5444 	err = nfsd4_vbuf_to_stream(xdr, getxattr->getxa_buf,
5445 				    getxattr->getxa_len);
5446 
5447 	kvfree(getxattr->getxa_buf);
5448 
5449 	return err;
5450 }
5451 
5452 static __be32
5453 nfsd4_encode_setxattr(struct nfsd4_compoundres *resp, __be32 nfserr,
5454 		      union nfsd4_op_u *u)
5455 {
5456 	struct nfsd4_setxattr *setxattr = &u->setxattr;
5457 	struct xdr_stream *xdr = resp->xdr;
5458 
5459 	return nfsd4_encode_change_info4(xdr, &setxattr->setxa_cinfo);
5460 }
5461 
5462 /*
5463  * See if there are cookie values that can be rejected outright.
5464  */
5465 static __be32
5466 nfsd4_listxattr_validate_cookie(struct nfsd4_listxattrs *listxattrs,
5467 				u32 *offsetp)
5468 {
5469 	u64 cookie = listxattrs->lsxa_cookie;
5470 
5471 	/*
5472 	 * If the cookie is larger than the maximum number we can fit
5473 	 * in the buffer we just got back from vfs_listxattr, it's invalid.
5474 	 */
5475 	if (cookie > (listxattrs->lsxa_len) / (XATTR_USER_PREFIX_LEN + 2))
5476 		return nfserr_badcookie;
5477 
5478 	*offsetp = (u32)cookie;
5479 	return 0;
5480 }
5481 
5482 static __be32
5483 nfsd4_encode_listxattrs(struct nfsd4_compoundres *resp, __be32 nfserr,
5484 			union nfsd4_op_u *u)
5485 {
5486 	struct nfsd4_listxattrs *listxattrs = &u->listxattrs;
5487 	struct xdr_stream *xdr = resp->xdr;
5488 	u32 cookie_offset, count_offset, eof;
5489 	u32 left, xdrleft, slen, count;
5490 	u32 xdrlen, offset;
5491 	u64 cookie;
5492 	char *sp;
5493 	__be32 status, tmp;
5494 	__be64 wire_cookie;
5495 	__be32 *p;
5496 	u32 nuser;
5497 
5498 	eof = 1;
5499 
5500 	status = nfsd4_listxattr_validate_cookie(listxattrs, &offset);
5501 	if (status)
5502 		goto out;
5503 
5504 	/*
5505 	 * Reserve space for the cookie and the name array count. Record
5506 	 * the offsets to save them later.
5507 	 */
5508 	cookie_offset = xdr->buf->len;
5509 	count_offset = cookie_offset + 8;
5510 	p = xdr_reserve_space(xdr, XDR_UNIT * 3);
5511 	if (!p) {
5512 		status = nfserr_resource;
5513 		goto out;
5514 	}
5515 
5516 	count = 0;
5517 	left = listxattrs->lsxa_len;
5518 	sp = listxattrs->lsxa_buf;
5519 	nuser = 0;
5520 
5521 	/* Bytes left is maxcount - 8 (cookie) - 4 (array count) */
5522 	xdrleft = listxattrs->lsxa_maxcount - XDR_UNIT * 3;
5523 
5524 	while (left > 0 && xdrleft > 0) {
5525 		slen = strlen(sp);
5526 
5527 		/*
5528 		 * Check if this is a "user." attribute, skip it if not.
5529 		 */
5530 		if (strncmp(sp, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN))
5531 			goto contloop;
5532 
5533 		slen -= XATTR_USER_PREFIX_LEN;
5534 		xdrlen = 4 + ((slen + 3) & ~3);
5535 		/* Check if both entry and eof can fit in the XDR buffer */
5536 		if (xdrlen + XDR_UNIT > xdrleft) {
5537 			if (count == 0) {
5538 				/*
5539 				 * Can't even fit the first attribute name.
5540 				 */
5541 				status = nfserr_toosmall;
5542 				goto out;
5543 			}
5544 			eof = 0;
5545 			goto wreof;
5546 		}
5547 
5548 		left -= XATTR_USER_PREFIX_LEN;
5549 		sp += XATTR_USER_PREFIX_LEN;
5550 		if (nuser++ < offset)
5551 			goto contloop;
5552 
5553 
5554 		p = xdr_reserve_space(xdr, xdrlen);
5555 		if (!p) {
5556 			status = nfserr_resource;
5557 			goto out;
5558 		}
5559 
5560 		xdr_encode_opaque(p, sp, slen);
5561 
5562 		xdrleft -= xdrlen;
5563 		count++;
5564 contloop:
5565 		sp += slen + 1;
5566 		left -= slen + 1;
5567 	}
5568 
5569 	/*
5570 	 * If there were user attributes to copy, but we didn't copy
5571 	 * any, the offset was too large (e.g. the cookie was invalid).
5572 	 */
5573 	if (nuser > 0 && count == 0) {
5574 		status = nfserr_badcookie;
5575 		goto out;
5576 	}
5577 
5578 wreof:
5579 	p = xdr_reserve_space(xdr, 4);
5580 	if (!p) {
5581 		status = nfserr_resource;
5582 		goto out;
5583 	}
5584 	*p = cpu_to_be32(eof);
5585 
5586 	cookie = offset + count;
5587 
5588 	wire_cookie = cpu_to_be64(cookie);
5589 	write_bytes_to_xdr_buf(xdr->buf, cookie_offset, &wire_cookie, 8);
5590 	tmp = cpu_to_be32(count);
5591 	write_bytes_to_xdr_buf(xdr->buf, count_offset, &tmp, 4);
5592 out:
5593 	if (listxattrs->lsxa_len)
5594 		kvfree(listxattrs->lsxa_buf);
5595 	return status;
5596 }
5597 
5598 static __be32
5599 nfsd4_encode_removexattr(struct nfsd4_compoundres *resp, __be32 nfserr,
5600 			 union nfsd4_op_u *u)
5601 {
5602 	struct nfsd4_removexattr *removexattr = &u->removexattr;
5603 	struct xdr_stream *xdr = resp->xdr;
5604 
5605 	return nfsd4_encode_change_info4(xdr, &removexattr->rmxa_cinfo);
5606 }
5607 
5608 typedef __be32(*nfsd4_enc)(struct nfsd4_compoundres *, __be32, union nfsd4_op_u *u);
5609 
5610 /*
5611  * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
5612  * since we don't need to filter out obsolete ops as this is
5613  * done in the decoding phase.
5614  */
5615 static const nfsd4_enc nfsd4_enc_ops[] = {
5616 	[OP_ACCESS]		= nfsd4_encode_access,
5617 	[OP_CLOSE]		= nfsd4_encode_close,
5618 	[OP_COMMIT]		= nfsd4_encode_commit,
5619 	[OP_CREATE]		= nfsd4_encode_create,
5620 	[OP_DELEGPURGE]		= nfsd4_encode_noop,
5621 	[OP_DELEGRETURN]	= nfsd4_encode_noop,
5622 	[OP_GETATTR]		= nfsd4_encode_getattr,
5623 	[OP_GETFH]		= nfsd4_encode_getfh,
5624 	[OP_LINK]		= nfsd4_encode_link,
5625 	[OP_LOCK]		= nfsd4_encode_lock,
5626 	[OP_LOCKT]		= nfsd4_encode_lockt,
5627 	[OP_LOCKU]		= nfsd4_encode_locku,
5628 	[OP_LOOKUP]		= nfsd4_encode_noop,
5629 	[OP_LOOKUPP]		= nfsd4_encode_noop,
5630 	[OP_NVERIFY]		= nfsd4_encode_noop,
5631 	[OP_OPEN]		= nfsd4_encode_open,
5632 	[OP_OPENATTR]		= nfsd4_encode_noop,
5633 	[OP_OPEN_CONFIRM]	= nfsd4_encode_open_confirm,
5634 	[OP_OPEN_DOWNGRADE]	= nfsd4_encode_open_downgrade,
5635 	[OP_PUTFH]		= nfsd4_encode_noop,
5636 	[OP_PUTPUBFH]		= nfsd4_encode_noop,
5637 	[OP_PUTROOTFH]		= nfsd4_encode_noop,
5638 	[OP_READ]		= nfsd4_encode_read,
5639 	[OP_READDIR]		= nfsd4_encode_readdir,
5640 	[OP_READLINK]		= nfsd4_encode_readlink,
5641 	[OP_REMOVE]		= nfsd4_encode_remove,
5642 	[OP_RENAME]		= nfsd4_encode_rename,
5643 	[OP_RENEW]		= nfsd4_encode_noop,
5644 	[OP_RESTOREFH]		= nfsd4_encode_noop,
5645 	[OP_SAVEFH]		= nfsd4_encode_noop,
5646 	[OP_SECINFO]		= nfsd4_encode_secinfo,
5647 	[OP_SETATTR]		= nfsd4_encode_setattr,
5648 	[OP_SETCLIENTID]	= nfsd4_encode_setclientid,
5649 	[OP_SETCLIENTID_CONFIRM] = nfsd4_encode_noop,
5650 	[OP_VERIFY]		= nfsd4_encode_noop,
5651 	[OP_WRITE]		= nfsd4_encode_write,
5652 	[OP_RELEASE_LOCKOWNER]	= nfsd4_encode_noop,
5653 
5654 	/* NFSv4.1 operations */
5655 	[OP_BACKCHANNEL_CTL]	= nfsd4_encode_noop,
5656 	[OP_BIND_CONN_TO_SESSION] = nfsd4_encode_bind_conn_to_session,
5657 	[OP_EXCHANGE_ID]	= nfsd4_encode_exchange_id,
5658 	[OP_CREATE_SESSION]	= nfsd4_encode_create_session,
5659 	[OP_DESTROY_SESSION]	= nfsd4_encode_noop,
5660 	[OP_FREE_STATEID]	= nfsd4_encode_noop,
5661 	[OP_GET_DIR_DELEGATION]	= nfsd4_encode_get_dir_delegation,
5662 #ifdef CONFIG_NFSD_PNFS
5663 	[OP_GETDEVICEINFO]	= nfsd4_encode_getdeviceinfo,
5664 	[OP_GETDEVICELIST]	= nfsd4_encode_noop,
5665 	[OP_LAYOUTCOMMIT]	= nfsd4_encode_layoutcommit,
5666 	[OP_LAYOUTGET]		= nfsd4_encode_layoutget,
5667 	[OP_LAYOUTRETURN]	= nfsd4_encode_layoutreturn,
5668 #else
5669 	[OP_GETDEVICEINFO]	= nfsd4_encode_noop,
5670 	[OP_GETDEVICELIST]	= nfsd4_encode_noop,
5671 	[OP_LAYOUTCOMMIT]	= nfsd4_encode_noop,
5672 	[OP_LAYOUTGET]		= nfsd4_encode_noop,
5673 	[OP_LAYOUTRETURN]	= nfsd4_encode_noop,
5674 #endif
5675 	[OP_SECINFO_NO_NAME]	= nfsd4_encode_secinfo_no_name,
5676 	[OP_SEQUENCE]		= nfsd4_encode_sequence,
5677 	[OP_SET_SSV]		= nfsd4_encode_noop,
5678 	[OP_TEST_STATEID]	= nfsd4_encode_test_stateid,
5679 	[OP_WANT_DELEGATION]	= nfsd4_encode_noop,
5680 	[OP_DESTROY_CLIENTID]	= nfsd4_encode_noop,
5681 	[OP_RECLAIM_COMPLETE]	= nfsd4_encode_noop,
5682 
5683 	/* NFSv4.2 operations */
5684 	[OP_ALLOCATE]		= nfsd4_encode_noop,
5685 	[OP_COPY]		= nfsd4_encode_copy,
5686 	[OP_COPY_NOTIFY]	= nfsd4_encode_copy_notify,
5687 	[OP_DEALLOCATE]		= nfsd4_encode_noop,
5688 	[OP_IO_ADVISE]		= nfsd4_encode_noop,
5689 	[OP_LAYOUTERROR]	= nfsd4_encode_noop,
5690 	[OP_LAYOUTSTATS]	= nfsd4_encode_noop,
5691 	[OP_OFFLOAD_CANCEL]	= nfsd4_encode_noop,
5692 	[OP_OFFLOAD_STATUS]	= nfsd4_encode_offload_status,
5693 	[OP_READ_PLUS]		= nfsd4_encode_read_plus,
5694 	[OP_SEEK]		= nfsd4_encode_seek,
5695 	[OP_WRITE_SAME]		= nfsd4_encode_noop,
5696 	[OP_CLONE]		= nfsd4_encode_noop,
5697 
5698 	/* RFC 8276 extended atributes operations */
5699 	[OP_GETXATTR]		= nfsd4_encode_getxattr,
5700 	[OP_SETXATTR]		= nfsd4_encode_setxattr,
5701 	[OP_LISTXATTRS]		= nfsd4_encode_listxattrs,
5702 	[OP_REMOVEXATTR]	= nfsd4_encode_removexattr,
5703 };
5704 
5705 /*
5706  * Calculate whether we still have space to encode repsize bytes.
5707  * There are two considerations:
5708  *     - For NFS versions >=4.1, the size of the reply must stay within
5709  *       session limits
5710  *     - For all NFS versions, we must stay within limited preallocated
5711  *       buffer space.
5712  *
5713  * This is called before the operation is processed, so can only provide
5714  * an upper estimate.  For some nonidempotent operations (such as
5715  * getattr), it's not necessarily a problem if that estimate is wrong,
5716  * as we can fail it after processing without significant side effects.
5717  */
5718 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize)
5719 {
5720 	struct xdr_buf *buf = &resp->rqstp->rq_res;
5721 	struct nfsd4_slot *slot = resp->cstate.slot;
5722 
5723 	if (buf->len + respsize <= buf->buflen)
5724 		return nfs_ok;
5725 	if (!nfsd4_has_session(&resp->cstate))
5726 		return nfserr_resource;
5727 	if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) {
5728 		WARN_ON_ONCE(1);
5729 		return nfserr_rep_too_big_to_cache;
5730 	}
5731 	return nfserr_rep_too_big;
5732 }
5733 
5734 void
5735 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
5736 {
5737 	struct xdr_stream *xdr = resp->xdr;
5738 	struct nfs4_stateowner *so = resp->cstate.replay_owner;
5739 	struct svc_rqst *rqstp = resp->rqstp;
5740 	const struct nfsd4_operation *opdesc = op->opdesc;
5741 	int post_err_offset;
5742 	nfsd4_enc encoder;
5743 	__be32 *p;
5744 
5745 	p = xdr_reserve_space(xdr, 8);
5746 	if (!p)
5747 		goto release;
5748 	*p++ = cpu_to_be32(op->opnum);
5749 	post_err_offset = xdr->buf->len;
5750 
5751 	if (op->opnum == OP_ILLEGAL)
5752 		goto status;
5753 	if (op->status && opdesc &&
5754 			!(opdesc->op_flags & OP_NONTRIVIAL_ERROR_ENCODE))
5755 		goto status;
5756 	BUG_ON(op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
5757 	       !nfsd4_enc_ops[op->opnum]);
5758 	encoder = nfsd4_enc_ops[op->opnum];
5759 	op->status = encoder(resp, op->status, &op->u);
5760 	if (op->status)
5761 		trace_nfsd_compound_encode_err(rqstp, op->opnum, op->status);
5762 	xdr_commit_encode(xdr);
5763 
5764 	/* nfsd4_check_resp_size guarantees enough room for error status */
5765 	if (!op->status) {
5766 		int space_needed = 0;
5767 		if (!nfsd4_last_compound_op(rqstp))
5768 			space_needed = COMPOUND_ERR_SLACK_SPACE;
5769 		op->status = nfsd4_check_resp_size(resp, space_needed);
5770 	}
5771 	if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) {
5772 		struct nfsd4_slot *slot = resp->cstate.slot;
5773 
5774 		if (slot->sl_flags & NFSD4_SLOT_CACHETHIS)
5775 			op->status = nfserr_rep_too_big_to_cache;
5776 		else
5777 			op->status = nfserr_rep_too_big;
5778 	}
5779 	if (op->status == nfserr_resource ||
5780 	    op->status == nfserr_rep_too_big ||
5781 	    op->status == nfserr_rep_too_big_to_cache) {
5782 		/*
5783 		 * The operation may have already been encoded or
5784 		 * partially encoded.  No op returns anything additional
5785 		 * in the case of one of these three errors, so we can
5786 		 * just truncate back to after the status.  But it's a
5787 		 * bug if we had to do this on a non-idempotent op:
5788 		 */
5789 		warn_on_nonidempotent_op(op);
5790 		xdr_truncate_encode(xdr, post_err_offset);
5791 	}
5792 	if (so) {
5793 		int len = xdr->buf->len - post_err_offset;
5794 
5795 		so->so_replay.rp_status = op->status;
5796 		so->so_replay.rp_buflen = len;
5797 		read_bytes_from_xdr_buf(xdr->buf, post_err_offset,
5798 						so->so_replay.rp_buf, len);
5799 	}
5800 status:
5801 	*p = op->status;
5802 release:
5803 	if (opdesc && opdesc->op_release)
5804 		opdesc->op_release(&op->u);
5805 
5806 	/*
5807 	 * Account for pages consumed while encoding this operation.
5808 	 * The xdr_stream primitives don't manage rq_next_page.
5809 	 */
5810 	rqstp->rq_next_page = xdr->page_ptr + 1;
5811 }
5812 
5813 /**
5814  * nfsd4_encode_replay - encode a result stored in the stateowner reply cache
5815  * @xdr: send buffer's XDR stream
5816  * @op: operation being replayed
5817  *
5818  * @op->replay->rp_buf contains the previously-sent already-encoded result.
5819  */
5820 void nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op)
5821 {
5822 	struct nfs4_replay *rp = op->replay;
5823 
5824 	trace_nfsd_stateowner_replay(op->opnum, rp);
5825 
5826 	if (xdr_stream_encode_u32(xdr, op->opnum) != XDR_UNIT)
5827 		return;
5828 	if (xdr_stream_encode_be32(xdr, rp->rp_status) != XDR_UNIT)
5829 		return;
5830 	xdr_stream_encode_opaque_fixed(xdr, rp->rp_buf, rp->rp_buflen);
5831 }
5832 
5833 void nfsd4_release_compoundargs(struct svc_rqst *rqstp)
5834 {
5835 	struct nfsd4_compoundargs *args = rqstp->rq_argp;
5836 
5837 	if (args->ops != args->iops) {
5838 		vfree(args->ops);
5839 		args->ops = args->iops;
5840 	}
5841 	while (args->to_free) {
5842 		struct svcxdr_tmpbuf *tb = args->to_free;
5843 		args->to_free = tb->next;
5844 		kfree(tb);
5845 	}
5846 }
5847 
5848 bool
5849 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, struct xdr_stream *xdr)
5850 {
5851 	struct nfsd4_compoundargs *args = rqstp->rq_argp;
5852 
5853 	/* svcxdr_tmp_alloc */
5854 	args->to_free = NULL;
5855 
5856 	args->xdr = xdr;
5857 	args->ops = args->iops;
5858 	args->rqstp = rqstp;
5859 
5860 	return nfsd4_decode_compound(args);
5861 }
5862 
5863 bool
5864 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, struct xdr_stream *xdr)
5865 {
5866 	struct nfsd4_compoundres *resp = rqstp->rq_resp;
5867 	__be32 *p;
5868 
5869 	/*
5870 	 * Send buffer space for the following items is reserved
5871 	 * at the top of nfsd4_proc_compound().
5872 	 */
5873 	p = resp->statusp;
5874 
5875 	*p++ = resp->cstate.status;
5876 	*p++ = htonl(resp->taglen);
5877 	memcpy(p, resp->tag, resp->taglen);
5878 	p += XDR_QUADLEN(resp->taglen);
5879 	*p++ = htonl(resp->opcnt);
5880 
5881 	nfsd4_sequence_done(resp);
5882 	return true;
5883 }
5884