1 /* 2 * Server-side XDR for NFSv4 3 * 4 * Copyright (c) 2002 The Regents of the University of Michigan. 5 * All rights reserved. 6 * 7 * Kendrick Smith <kmsmith@umich.edu> 8 * Andy Adamson <andros@umich.edu> 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 2. Redistributions in binary form must reproduce the above copyright 17 * notice, this list of conditions and the following disclaimer in the 18 * documentation and/or other materials provided with the distribution. 19 * 3. Neither the name of the University nor the names of its 20 * contributors may be used to endorse or promote products derived 21 * from this software without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34 */ 35 36 #include <linux/file.h> 37 #include <linux/slab.h> 38 #include <linux/namei.h> 39 #include <linux/statfs.h> 40 #include <linux/utsname.h> 41 #include <linux/pagemap.h> 42 #include <linux/sunrpc/svcauth_gss.h> 43 44 #include "idmap.h" 45 #include "acl.h" 46 #include "xdr4.h" 47 #include "vfs.h" 48 #include "state.h" 49 #include "cache.h" 50 #include "netns.h" 51 #include "pnfs.h" 52 53 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 54 #include <linux/security.h> 55 #endif 56 57 58 #define NFSDDBG_FACILITY NFSDDBG_XDR 59 60 const u32 nfsd_suppattrs[3][3] = { 61 {NFSD4_SUPPORTED_ATTRS_WORD0, 62 NFSD4_SUPPORTED_ATTRS_WORD1, 63 NFSD4_SUPPORTED_ATTRS_WORD2}, 64 65 {NFSD4_1_SUPPORTED_ATTRS_WORD0, 66 NFSD4_1_SUPPORTED_ATTRS_WORD1, 67 NFSD4_1_SUPPORTED_ATTRS_WORD2}, 68 69 {NFSD4_1_SUPPORTED_ATTRS_WORD0, 70 NFSD4_1_SUPPORTED_ATTRS_WORD1, 71 NFSD4_2_SUPPORTED_ATTRS_WORD2}, 72 }; 73 74 /* 75 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing 76 * directory in order to indicate to the client that a filesystem boundary is present 77 * We use a fixed fsid for a referral 78 */ 79 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL 80 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL 81 82 static __be32 83 check_filename(char *str, int len) 84 { 85 int i; 86 87 if (len == 0) 88 return nfserr_inval; 89 if (isdotent(str, len)) 90 return nfserr_badname; 91 for (i = 0; i < len; i++) 92 if (str[i] == '/') 93 return nfserr_badname; 94 return 0; 95 } 96 97 #define DECODE_HEAD \ 98 __be32 *p; \ 99 __be32 status 100 #define DECODE_TAIL \ 101 status = 0; \ 102 out: \ 103 return status; \ 104 xdr_error: \ 105 dprintk("NFSD: xdr error (%s:%d)\n", \ 106 __FILE__, __LINE__); \ 107 status = nfserr_bad_xdr; \ 108 goto out 109 110 #define READMEM(x,nbytes) do { \ 111 x = (char *)p; \ 112 p += XDR_QUADLEN(nbytes); \ 113 } while (0) 114 #define SAVEMEM(x,nbytes) do { \ 115 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \ 116 savemem(argp, p, nbytes) : \ 117 (char *)p)) { \ 118 dprintk("NFSD: xdr error (%s:%d)\n", \ 119 __FILE__, __LINE__); \ 120 goto xdr_error; \ 121 } \ 122 p += XDR_QUADLEN(nbytes); \ 123 } while (0) 124 #define COPYMEM(x,nbytes) do { \ 125 memcpy((x), p, nbytes); \ 126 p += XDR_QUADLEN(nbytes); \ 127 } while (0) 128 129 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */ 130 #define READ_BUF(nbytes) do { \ 131 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \ 132 p = argp->p; \ 133 argp->p += XDR_QUADLEN(nbytes); \ 134 } else if (!(p = read_buf(argp, nbytes))) { \ 135 dprintk("NFSD: xdr error (%s:%d)\n", \ 136 __FILE__, __LINE__); \ 137 goto xdr_error; \ 138 } \ 139 } while (0) 140 141 static void next_decode_page(struct nfsd4_compoundargs *argp) 142 { 143 argp->p = page_address(argp->pagelist[0]); 144 argp->pagelist++; 145 if (argp->pagelen < PAGE_SIZE) { 146 argp->end = argp->p + XDR_QUADLEN(argp->pagelen); 147 argp->pagelen = 0; 148 } else { 149 argp->end = argp->p + (PAGE_SIZE>>2); 150 argp->pagelen -= PAGE_SIZE; 151 } 152 } 153 154 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes) 155 { 156 /* We want more bytes than seem to be available. 157 * Maybe we need a new page, maybe we have just run out 158 */ 159 unsigned int avail = (char *)argp->end - (char *)argp->p; 160 __be32 *p; 161 162 if (argp->pagelen == 0) { 163 struct kvec *vec = &argp->rqstp->rq_arg.tail[0]; 164 165 if (!argp->tail) { 166 argp->tail = true; 167 avail = vec->iov_len; 168 argp->p = vec->iov_base; 169 argp->end = vec->iov_base + avail; 170 } 171 172 if (avail < nbytes) 173 return NULL; 174 175 p = argp->p; 176 argp->p += XDR_QUADLEN(nbytes); 177 return p; 178 } 179 180 if (avail + argp->pagelen < nbytes) 181 return NULL; 182 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */ 183 return NULL; 184 /* ok, we can do it with the current plus the next page */ 185 if (nbytes <= sizeof(argp->tmp)) 186 p = argp->tmp; 187 else { 188 kfree(argp->tmpp); 189 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL); 190 if (!p) 191 return NULL; 192 193 } 194 /* 195 * The following memcpy is safe because read_buf is always 196 * called with nbytes > avail, and the two cases above both 197 * guarantee p points to at least nbytes bytes. 198 */ 199 memcpy(p, argp->p, avail); 200 next_decode_page(argp); 201 memcpy(((char*)p)+avail, argp->p, (nbytes - avail)); 202 argp->p += XDR_QUADLEN(nbytes - avail); 203 return p; 204 } 205 206 static int zero_clientid(clientid_t *clid) 207 { 208 return (clid->cl_boot == 0) && (clid->cl_id == 0); 209 } 210 211 /** 212 * svcxdr_tmpalloc - allocate memory to be freed after compound processing 213 * @argp: NFSv4 compound argument structure 214 * @p: pointer to be freed (with kfree()) 215 * 216 * Marks @p to be freed when processing the compound operation 217 * described in @argp finishes. 218 */ 219 static void * 220 svcxdr_tmpalloc(struct nfsd4_compoundargs *argp, u32 len) 221 { 222 struct svcxdr_tmpbuf *tb; 223 224 tb = kmalloc(sizeof(*tb) + len, GFP_KERNEL); 225 if (!tb) 226 return NULL; 227 tb->next = argp->to_free; 228 argp->to_free = tb; 229 return tb->buf; 230 } 231 232 /* 233 * For xdr strings that need to be passed to other kernel api's 234 * as null-terminated strings. 235 * 236 * Note null-terminating in place usually isn't safe since the 237 * buffer might end on a page boundary. 238 */ 239 static char * 240 svcxdr_dupstr(struct nfsd4_compoundargs *argp, void *buf, u32 len) 241 { 242 char *p = svcxdr_tmpalloc(argp, len + 1); 243 244 if (!p) 245 return NULL; 246 memcpy(p, buf, len); 247 p[len] = '\0'; 248 return p; 249 } 250 251 /** 252 * savemem - duplicate a chunk of memory for later processing 253 * @argp: NFSv4 compound argument structure to be freed with 254 * @p: pointer to be duplicated 255 * @nbytes: length to be duplicated 256 * 257 * Returns a pointer to a copy of @nbytes bytes of memory at @p 258 * that are preserved until processing of the NFSv4 compound 259 * operation described by @argp finishes. 260 */ 261 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes) 262 { 263 void *ret; 264 265 ret = svcxdr_tmpalloc(argp, nbytes); 266 if (!ret) 267 return NULL; 268 memcpy(ret, p, nbytes); 269 return ret; 270 } 271 272 /* 273 * We require the high 32 bits of 'seconds' to be 0, and 274 * we ignore all 32 bits of 'nseconds'. 275 */ 276 static __be32 277 nfsd4_decode_time(struct nfsd4_compoundargs *argp, struct timespec *tv) 278 { 279 DECODE_HEAD; 280 u64 sec; 281 282 READ_BUF(12); 283 p = xdr_decode_hyper(p, &sec); 284 tv->tv_sec = sec; 285 tv->tv_nsec = be32_to_cpup(p++); 286 if (tv->tv_nsec >= (u32)1000000000) 287 return nfserr_inval; 288 289 DECODE_TAIL; 290 } 291 292 static __be32 293 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval) 294 { 295 u32 bmlen; 296 DECODE_HEAD; 297 298 bmval[0] = 0; 299 bmval[1] = 0; 300 bmval[2] = 0; 301 302 READ_BUF(4); 303 bmlen = be32_to_cpup(p++); 304 if (bmlen > 1000) 305 goto xdr_error; 306 307 READ_BUF(bmlen << 2); 308 if (bmlen > 0) 309 bmval[0] = be32_to_cpup(p++); 310 if (bmlen > 1) 311 bmval[1] = be32_to_cpup(p++); 312 if (bmlen > 2) 313 bmval[2] = be32_to_cpup(p++); 314 315 DECODE_TAIL; 316 } 317 318 static __be32 319 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval, 320 struct iattr *iattr, struct nfs4_acl **acl, 321 struct xdr_netobj *label, int *umask) 322 { 323 int expected_len, len = 0; 324 u32 dummy32; 325 char *buf; 326 327 DECODE_HEAD; 328 iattr->ia_valid = 0; 329 if ((status = nfsd4_decode_bitmap(argp, bmval))) 330 return status; 331 332 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0 333 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1 334 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) { 335 if (nfsd_attrs_supported(argp->minorversion, bmval)) 336 return nfserr_inval; 337 return nfserr_attrnotsupp; 338 } 339 340 READ_BUF(4); 341 expected_len = be32_to_cpup(p++); 342 343 if (bmval[0] & FATTR4_WORD0_SIZE) { 344 READ_BUF(8); 345 len += 8; 346 p = xdr_decode_hyper(p, &iattr->ia_size); 347 iattr->ia_valid |= ATTR_SIZE; 348 } 349 if (bmval[0] & FATTR4_WORD0_ACL) { 350 u32 nace; 351 struct nfs4_ace *ace; 352 353 READ_BUF(4); len += 4; 354 nace = be32_to_cpup(p++); 355 356 if (nace > NFS4_ACL_MAX) 357 return nfserr_fbig; 358 359 *acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(nace)); 360 if (*acl == NULL) 361 return nfserr_jukebox; 362 363 (*acl)->naces = nace; 364 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) { 365 READ_BUF(16); len += 16; 366 ace->type = be32_to_cpup(p++); 367 ace->flag = be32_to_cpup(p++); 368 ace->access_mask = be32_to_cpup(p++); 369 dummy32 = be32_to_cpup(p++); 370 READ_BUF(dummy32); 371 len += XDR_QUADLEN(dummy32) << 2; 372 READMEM(buf, dummy32); 373 ace->whotype = nfs4_acl_get_whotype(buf, dummy32); 374 status = nfs_ok; 375 if (ace->whotype != NFS4_ACL_WHO_NAMED) 376 ; 377 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 378 status = nfsd_map_name_to_gid(argp->rqstp, 379 buf, dummy32, &ace->who_gid); 380 else 381 status = nfsd_map_name_to_uid(argp->rqstp, 382 buf, dummy32, &ace->who_uid); 383 if (status) 384 return status; 385 } 386 } else 387 *acl = NULL; 388 if (bmval[1] & FATTR4_WORD1_MODE) { 389 READ_BUF(4); 390 len += 4; 391 iattr->ia_mode = be32_to_cpup(p++); 392 iattr->ia_mode &= (S_IFMT | S_IALLUGO); 393 iattr->ia_valid |= ATTR_MODE; 394 } 395 if (bmval[1] & FATTR4_WORD1_OWNER) { 396 READ_BUF(4); 397 len += 4; 398 dummy32 = be32_to_cpup(p++); 399 READ_BUF(dummy32); 400 len += (XDR_QUADLEN(dummy32) << 2); 401 READMEM(buf, dummy32); 402 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid))) 403 return status; 404 iattr->ia_valid |= ATTR_UID; 405 } 406 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) { 407 READ_BUF(4); 408 len += 4; 409 dummy32 = be32_to_cpup(p++); 410 READ_BUF(dummy32); 411 len += (XDR_QUADLEN(dummy32) << 2); 412 READMEM(buf, dummy32); 413 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid))) 414 return status; 415 iattr->ia_valid |= ATTR_GID; 416 } 417 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) { 418 READ_BUF(4); 419 len += 4; 420 dummy32 = be32_to_cpup(p++); 421 switch (dummy32) { 422 case NFS4_SET_TO_CLIENT_TIME: 423 len += 12; 424 status = nfsd4_decode_time(argp, &iattr->ia_atime); 425 if (status) 426 return status; 427 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET); 428 break; 429 case NFS4_SET_TO_SERVER_TIME: 430 iattr->ia_valid |= ATTR_ATIME; 431 break; 432 default: 433 goto xdr_error; 434 } 435 } 436 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) { 437 READ_BUF(4); 438 len += 4; 439 dummy32 = be32_to_cpup(p++); 440 switch (dummy32) { 441 case NFS4_SET_TO_CLIENT_TIME: 442 len += 12; 443 status = nfsd4_decode_time(argp, &iattr->ia_mtime); 444 if (status) 445 return status; 446 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET); 447 break; 448 case NFS4_SET_TO_SERVER_TIME: 449 iattr->ia_valid |= ATTR_MTIME; 450 break; 451 default: 452 goto xdr_error; 453 } 454 } 455 456 label->len = 0; 457 if (IS_ENABLED(CONFIG_NFSD_V4_SECURITY_LABEL) && 458 bmval[2] & FATTR4_WORD2_SECURITY_LABEL) { 459 READ_BUF(4); 460 len += 4; 461 dummy32 = be32_to_cpup(p++); /* lfs: we don't use it */ 462 READ_BUF(4); 463 len += 4; 464 dummy32 = be32_to_cpup(p++); /* pi: we don't use it either */ 465 READ_BUF(4); 466 len += 4; 467 dummy32 = be32_to_cpup(p++); 468 READ_BUF(dummy32); 469 if (dummy32 > NFS4_MAXLABELLEN) 470 return nfserr_badlabel; 471 len += (XDR_QUADLEN(dummy32) << 2); 472 READMEM(buf, dummy32); 473 label->len = dummy32; 474 label->data = svcxdr_dupstr(argp, buf, dummy32); 475 if (!label->data) 476 return nfserr_jukebox; 477 } 478 if (bmval[2] & FATTR4_WORD2_MODE_UMASK) { 479 if (!umask) 480 goto xdr_error; 481 READ_BUF(8); 482 len += 8; 483 dummy32 = be32_to_cpup(p++); 484 iattr->ia_mode = dummy32 & (S_IFMT | S_IALLUGO); 485 dummy32 = be32_to_cpup(p++); 486 *umask = dummy32 & S_IRWXUGO; 487 iattr->ia_valid |= ATTR_MODE; 488 } 489 if (len != expected_len) 490 goto xdr_error; 491 492 DECODE_TAIL; 493 } 494 495 static __be32 496 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid) 497 { 498 DECODE_HEAD; 499 500 READ_BUF(sizeof(stateid_t)); 501 sid->si_generation = be32_to_cpup(p++); 502 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t)); 503 504 DECODE_TAIL; 505 } 506 507 static __be32 508 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access) 509 { 510 DECODE_HEAD; 511 512 READ_BUF(4); 513 access->ac_req_access = be32_to_cpup(p++); 514 515 DECODE_TAIL; 516 } 517 518 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs) 519 { 520 DECODE_HEAD; 521 u32 dummy, uid, gid; 522 char *machine_name; 523 int i; 524 int nr_secflavs; 525 526 /* callback_sec_params4 */ 527 READ_BUF(4); 528 nr_secflavs = be32_to_cpup(p++); 529 if (nr_secflavs) 530 cbs->flavor = (u32)(-1); 531 else 532 /* Is this legal? Be generous, take it to mean AUTH_NONE: */ 533 cbs->flavor = 0; 534 for (i = 0; i < nr_secflavs; ++i) { 535 READ_BUF(4); 536 dummy = be32_to_cpup(p++); 537 switch (dummy) { 538 case RPC_AUTH_NULL: 539 /* Nothing to read */ 540 if (cbs->flavor == (u32)(-1)) 541 cbs->flavor = RPC_AUTH_NULL; 542 break; 543 case RPC_AUTH_UNIX: 544 READ_BUF(8); 545 /* stamp */ 546 dummy = be32_to_cpup(p++); 547 548 /* machine name */ 549 dummy = be32_to_cpup(p++); 550 READ_BUF(dummy); 551 SAVEMEM(machine_name, dummy); 552 553 /* uid, gid */ 554 READ_BUF(8); 555 uid = be32_to_cpup(p++); 556 gid = be32_to_cpup(p++); 557 558 /* more gids */ 559 READ_BUF(4); 560 dummy = be32_to_cpup(p++); 561 READ_BUF(dummy * 4); 562 if (cbs->flavor == (u32)(-1)) { 563 kuid_t kuid = make_kuid(&init_user_ns, uid); 564 kgid_t kgid = make_kgid(&init_user_ns, gid); 565 if (uid_valid(kuid) && gid_valid(kgid)) { 566 cbs->uid = kuid; 567 cbs->gid = kgid; 568 cbs->flavor = RPC_AUTH_UNIX; 569 } else { 570 dprintk("RPC_AUTH_UNIX with invalid" 571 "uid or gid ignoring!\n"); 572 } 573 } 574 break; 575 case RPC_AUTH_GSS: 576 dprintk("RPC_AUTH_GSS callback secflavor " 577 "not supported!\n"); 578 READ_BUF(8); 579 /* gcbp_service */ 580 dummy = be32_to_cpup(p++); 581 /* gcbp_handle_from_server */ 582 dummy = be32_to_cpup(p++); 583 READ_BUF(dummy); 584 p += XDR_QUADLEN(dummy); 585 /* gcbp_handle_from_client */ 586 READ_BUF(4); 587 dummy = be32_to_cpup(p++); 588 READ_BUF(dummy); 589 break; 590 default: 591 dprintk("Illegal callback secflavor\n"); 592 return nfserr_inval; 593 } 594 } 595 DECODE_TAIL; 596 } 597 598 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc) 599 { 600 DECODE_HEAD; 601 602 READ_BUF(4); 603 bc->bc_cb_program = be32_to_cpup(p++); 604 nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec); 605 606 DECODE_TAIL; 607 } 608 609 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts) 610 { 611 DECODE_HEAD; 612 613 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8); 614 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN); 615 bcts->dir = be32_to_cpup(p++); 616 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker 617 * could help us figure out we should be using it. */ 618 DECODE_TAIL; 619 } 620 621 static __be32 622 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close) 623 { 624 DECODE_HEAD; 625 626 READ_BUF(4); 627 close->cl_seqid = be32_to_cpup(p++); 628 return nfsd4_decode_stateid(argp, &close->cl_stateid); 629 630 DECODE_TAIL; 631 } 632 633 634 static __be32 635 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit) 636 { 637 DECODE_HEAD; 638 639 READ_BUF(12); 640 p = xdr_decode_hyper(p, &commit->co_offset); 641 commit->co_count = be32_to_cpup(p++); 642 643 DECODE_TAIL; 644 } 645 646 static __be32 647 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create) 648 { 649 DECODE_HEAD; 650 651 READ_BUF(4); 652 create->cr_type = be32_to_cpup(p++); 653 switch (create->cr_type) { 654 case NF4LNK: 655 READ_BUF(4); 656 create->cr_datalen = be32_to_cpup(p++); 657 READ_BUF(create->cr_datalen); 658 create->cr_data = svcxdr_dupstr(argp, p, create->cr_datalen); 659 if (!create->cr_data) 660 return nfserr_jukebox; 661 break; 662 case NF4BLK: 663 case NF4CHR: 664 READ_BUF(8); 665 create->cr_specdata1 = be32_to_cpup(p++); 666 create->cr_specdata2 = be32_to_cpup(p++); 667 break; 668 case NF4SOCK: 669 case NF4FIFO: 670 case NF4DIR: 671 default: 672 break; 673 } 674 675 READ_BUF(4); 676 create->cr_namelen = be32_to_cpup(p++); 677 READ_BUF(create->cr_namelen); 678 SAVEMEM(create->cr_name, create->cr_namelen); 679 if ((status = check_filename(create->cr_name, create->cr_namelen))) 680 return status; 681 682 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr, 683 &create->cr_acl, &create->cr_label, 684 &create->cr_umask); 685 if (status) 686 goto out; 687 688 DECODE_TAIL; 689 } 690 691 static inline __be32 692 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr) 693 { 694 return nfsd4_decode_stateid(argp, &dr->dr_stateid); 695 } 696 697 static inline __be32 698 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr) 699 { 700 return nfsd4_decode_bitmap(argp, getattr->ga_bmval); 701 } 702 703 static __be32 704 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link) 705 { 706 DECODE_HEAD; 707 708 READ_BUF(4); 709 link->li_namelen = be32_to_cpup(p++); 710 READ_BUF(link->li_namelen); 711 SAVEMEM(link->li_name, link->li_namelen); 712 if ((status = check_filename(link->li_name, link->li_namelen))) 713 return status; 714 715 DECODE_TAIL; 716 } 717 718 static __be32 719 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock) 720 { 721 DECODE_HEAD; 722 723 /* 724 * type, reclaim(boolean), offset, length, new_lock_owner(boolean) 725 */ 726 READ_BUF(28); 727 lock->lk_type = be32_to_cpup(p++); 728 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT)) 729 goto xdr_error; 730 lock->lk_reclaim = be32_to_cpup(p++); 731 p = xdr_decode_hyper(p, &lock->lk_offset); 732 p = xdr_decode_hyper(p, &lock->lk_length); 733 lock->lk_is_new = be32_to_cpup(p++); 734 735 if (lock->lk_is_new) { 736 READ_BUF(4); 737 lock->lk_new_open_seqid = be32_to_cpup(p++); 738 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid); 739 if (status) 740 return status; 741 READ_BUF(8 + sizeof(clientid_t)); 742 lock->lk_new_lock_seqid = be32_to_cpup(p++); 743 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t)); 744 lock->lk_new_owner.len = be32_to_cpup(p++); 745 READ_BUF(lock->lk_new_owner.len); 746 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len); 747 } else { 748 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid); 749 if (status) 750 return status; 751 READ_BUF(4); 752 lock->lk_old_lock_seqid = be32_to_cpup(p++); 753 } 754 755 DECODE_TAIL; 756 } 757 758 static __be32 759 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt) 760 { 761 DECODE_HEAD; 762 763 READ_BUF(32); 764 lockt->lt_type = be32_to_cpup(p++); 765 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT)) 766 goto xdr_error; 767 p = xdr_decode_hyper(p, &lockt->lt_offset); 768 p = xdr_decode_hyper(p, &lockt->lt_length); 769 COPYMEM(&lockt->lt_clientid, 8); 770 lockt->lt_owner.len = be32_to_cpup(p++); 771 READ_BUF(lockt->lt_owner.len); 772 READMEM(lockt->lt_owner.data, lockt->lt_owner.len); 773 774 DECODE_TAIL; 775 } 776 777 static __be32 778 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku) 779 { 780 DECODE_HEAD; 781 782 READ_BUF(8); 783 locku->lu_type = be32_to_cpup(p++); 784 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT)) 785 goto xdr_error; 786 locku->lu_seqid = be32_to_cpup(p++); 787 status = nfsd4_decode_stateid(argp, &locku->lu_stateid); 788 if (status) 789 return status; 790 READ_BUF(16); 791 p = xdr_decode_hyper(p, &locku->lu_offset); 792 p = xdr_decode_hyper(p, &locku->lu_length); 793 794 DECODE_TAIL; 795 } 796 797 static __be32 798 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup) 799 { 800 DECODE_HEAD; 801 802 READ_BUF(4); 803 lookup->lo_len = be32_to_cpup(p++); 804 READ_BUF(lookup->lo_len); 805 SAVEMEM(lookup->lo_name, lookup->lo_len); 806 if ((status = check_filename(lookup->lo_name, lookup->lo_len))) 807 return status; 808 809 DECODE_TAIL; 810 } 811 812 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when) 813 { 814 __be32 *p; 815 u32 w; 816 817 READ_BUF(4); 818 w = be32_to_cpup(p++); 819 *share_access = w & NFS4_SHARE_ACCESS_MASK; 820 *deleg_want = w & NFS4_SHARE_WANT_MASK; 821 if (deleg_when) 822 *deleg_when = w & NFS4_SHARE_WHEN_MASK; 823 824 switch (w & NFS4_SHARE_ACCESS_MASK) { 825 case NFS4_SHARE_ACCESS_READ: 826 case NFS4_SHARE_ACCESS_WRITE: 827 case NFS4_SHARE_ACCESS_BOTH: 828 break; 829 default: 830 return nfserr_bad_xdr; 831 } 832 w &= ~NFS4_SHARE_ACCESS_MASK; 833 if (!w) 834 return nfs_ok; 835 if (!argp->minorversion) 836 return nfserr_bad_xdr; 837 switch (w & NFS4_SHARE_WANT_MASK) { 838 case NFS4_SHARE_WANT_NO_PREFERENCE: 839 case NFS4_SHARE_WANT_READ_DELEG: 840 case NFS4_SHARE_WANT_WRITE_DELEG: 841 case NFS4_SHARE_WANT_ANY_DELEG: 842 case NFS4_SHARE_WANT_NO_DELEG: 843 case NFS4_SHARE_WANT_CANCEL: 844 break; 845 default: 846 return nfserr_bad_xdr; 847 } 848 w &= ~NFS4_SHARE_WANT_MASK; 849 if (!w) 850 return nfs_ok; 851 852 if (!deleg_when) /* open_downgrade */ 853 return nfserr_inval; 854 switch (w) { 855 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL: 856 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED: 857 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL | 858 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED): 859 return nfs_ok; 860 } 861 xdr_error: 862 return nfserr_bad_xdr; 863 } 864 865 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x) 866 { 867 __be32 *p; 868 869 READ_BUF(4); 870 *x = be32_to_cpup(p++); 871 /* Note: unlinke access bits, deny bits may be zero. */ 872 if (*x & ~NFS4_SHARE_DENY_BOTH) 873 return nfserr_bad_xdr; 874 return nfs_ok; 875 xdr_error: 876 return nfserr_bad_xdr; 877 } 878 879 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o) 880 { 881 __be32 *p; 882 883 READ_BUF(4); 884 o->len = be32_to_cpup(p++); 885 886 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT) 887 return nfserr_bad_xdr; 888 889 READ_BUF(o->len); 890 SAVEMEM(o->data, o->len); 891 return nfs_ok; 892 xdr_error: 893 return nfserr_bad_xdr; 894 } 895 896 static __be32 897 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open) 898 { 899 DECODE_HEAD; 900 u32 dummy; 901 902 memset(open->op_bmval, 0, sizeof(open->op_bmval)); 903 open->op_iattr.ia_valid = 0; 904 open->op_openowner = NULL; 905 906 open->op_xdr_error = 0; 907 /* seqid, share_access, share_deny, clientid, ownerlen */ 908 READ_BUF(4); 909 open->op_seqid = be32_to_cpup(p++); 910 /* decode, yet ignore deleg_when until supported */ 911 status = nfsd4_decode_share_access(argp, &open->op_share_access, 912 &open->op_deleg_want, &dummy); 913 if (status) 914 goto xdr_error; 915 status = nfsd4_decode_share_deny(argp, &open->op_share_deny); 916 if (status) 917 goto xdr_error; 918 READ_BUF(sizeof(clientid_t)); 919 COPYMEM(&open->op_clientid, sizeof(clientid_t)); 920 status = nfsd4_decode_opaque(argp, &open->op_owner); 921 if (status) 922 goto xdr_error; 923 READ_BUF(4); 924 open->op_create = be32_to_cpup(p++); 925 switch (open->op_create) { 926 case NFS4_OPEN_NOCREATE: 927 break; 928 case NFS4_OPEN_CREATE: 929 READ_BUF(4); 930 open->op_createmode = be32_to_cpup(p++); 931 switch (open->op_createmode) { 932 case NFS4_CREATE_UNCHECKED: 933 case NFS4_CREATE_GUARDED: 934 status = nfsd4_decode_fattr(argp, open->op_bmval, 935 &open->op_iattr, &open->op_acl, &open->op_label, 936 &open->op_umask); 937 if (status) 938 goto out; 939 break; 940 case NFS4_CREATE_EXCLUSIVE: 941 READ_BUF(NFS4_VERIFIER_SIZE); 942 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE); 943 break; 944 case NFS4_CREATE_EXCLUSIVE4_1: 945 if (argp->minorversion < 1) 946 goto xdr_error; 947 READ_BUF(NFS4_VERIFIER_SIZE); 948 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE); 949 status = nfsd4_decode_fattr(argp, open->op_bmval, 950 &open->op_iattr, &open->op_acl, &open->op_label, 951 &open->op_umask); 952 if (status) 953 goto out; 954 break; 955 default: 956 goto xdr_error; 957 } 958 break; 959 default: 960 goto xdr_error; 961 } 962 963 /* open_claim */ 964 READ_BUF(4); 965 open->op_claim_type = be32_to_cpup(p++); 966 switch (open->op_claim_type) { 967 case NFS4_OPEN_CLAIM_NULL: 968 case NFS4_OPEN_CLAIM_DELEGATE_PREV: 969 READ_BUF(4); 970 open->op_fname.len = be32_to_cpup(p++); 971 READ_BUF(open->op_fname.len); 972 SAVEMEM(open->op_fname.data, open->op_fname.len); 973 if ((status = check_filename(open->op_fname.data, open->op_fname.len))) 974 return status; 975 break; 976 case NFS4_OPEN_CLAIM_PREVIOUS: 977 READ_BUF(4); 978 open->op_delegate_type = be32_to_cpup(p++); 979 break; 980 case NFS4_OPEN_CLAIM_DELEGATE_CUR: 981 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 982 if (status) 983 return status; 984 READ_BUF(4); 985 open->op_fname.len = be32_to_cpup(p++); 986 READ_BUF(open->op_fname.len); 987 SAVEMEM(open->op_fname.data, open->op_fname.len); 988 if ((status = check_filename(open->op_fname.data, open->op_fname.len))) 989 return status; 990 break; 991 case NFS4_OPEN_CLAIM_FH: 992 case NFS4_OPEN_CLAIM_DELEG_PREV_FH: 993 if (argp->minorversion < 1) 994 goto xdr_error; 995 /* void */ 996 break; 997 case NFS4_OPEN_CLAIM_DELEG_CUR_FH: 998 if (argp->minorversion < 1) 999 goto xdr_error; 1000 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid); 1001 if (status) 1002 return status; 1003 break; 1004 default: 1005 goto xdr_error; 1006 } 1007 1008 DECODE_TAIL; 1009 } 1010 1011 static __be32 1012 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf) 1013 { 1014 DECODE_HEAD; 1015 1016 if (argp->minorversion >= 1) 1017 return nfserr_notsupp; 1018 1019 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid); 1020 if (status) 1021 return status; 1022 READ_BUF(4); 1023 open_conf->oc_seqid = be32_to_cpup(p++); 1024 1025 DECODE_TAIL; 1026 } 1027 1028 static __be32 1029 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down) 1030 { 1031 DECODE_HEAD; 1032 1033 status = nfsd4_decode_stateid(argp, &open_down->od_stateid); 1034 if (status) 1035 return status; 1036 READ_BUF(4); 1037 open_down->od_seqid = be32_to_cpup(p++); 1038 status = nfsd4_decode_share_access(argp, &open_down->od_share_access, 1039 &open_down->od_deleg_want, NULL); 1040 if (status) 1041 return status; 1042 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny); 1043 if (status) 1044 return status; 1045 DECODE_TAIL; 1046 } 1047 1048 static __be32 1049 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh) 1050 { 1051 DECODE_HEAD; 1052 1053 READ_BUF(4); 1054 putfh->pf_fhlen = be32_to_cpup(p++); 1055 if (putfh->pf_fhlen > NFS4_FHSIZE) 1056 goto xdr_error; 1057 READ_BUF(putfh->pf_fhlen); 1058 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen); 1059 1060 DECODE_TAIL; 1061 } 1062 1063 static __be32 1064 nfsd4_decode_putpubfh(struct nfsd4_compoundargs *argp, void *p) 1065 { 1066 if (argp->minorversion == 0) 1067 return nfs_ok; 1068 return nfserr_notsupp; 1069 } 1070 1071 static __be32 1072 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read) 1073 { 1074 DECODE_HEAD; 1075 1076 status = nfsd4_decode_stateid(argp, &read->rd_stateid); 1077 if (status) 1078 return status; 1079 READ_BUF(12); 1080 p = xdr_decode_hyper(p, &read->rd_offset); 1081 read->rd_length = be32_to_cpup(p++); 1082 1083 DECODE_TAIL; 1084 } 1085 1086 static __be32 1087 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir) 1088 { 1089 DECODE_HEAD; 1090 1091 READ_BUF(24); 1092 p = xdr_decode_hyper(p, &readdir->rd_cookie); 1093 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data)); 1094 readdir->rd_dircount = be32_to_cpup(p++); 1095 readdir->rd_maxcount = be32_to_cpup(p++); 1096 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval))) 1097 goto out; 1098 1099 DECODE_TAIL; 1100 } 1101 1102 static __be32 1103 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove) 1104 { 1105 DECODE_HEAD; 1106 1107 READ_BUF(4); 1108 remove->rm_namelen = be32_to_cpup(p++); 1109 READ_BUF(remove->rm_namelen); 1110 SAVEMEM(remove->rm_name, remove->rm_namelen); 1111 if ((status = check_filename(remove->rm_name, remove->rm_namelen))) 1112 return status; 1113 1114 DECODE_TAIL; 1115 } 1116 1117 static __be32 1118 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename) 1119 { 1120 DECODE_HEAD; 1121 1122 READ_BUF(4); 1123 rename->rn_snamelen = be32_to_cpup(p++); 1124 READ_BUF(rename->rn_snamelen); 1125 SAVEMEM(rename->rn_sname, rename->rn_snamelen); 1126 READ_BUF(4); 1127 rename->rn_tnamelen = be32_to_cpup(p++); 1128 READ_BUF(rename->rn_tnamelen); 1129 SAVEMEM(rename->rn_tname, rename->rn_tnamelen); 1130 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen))) 1131 return status; 1132 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen))) 1133 return status; 1134 1135 DECODE_TAIL; 1136 } 1137 1138 static __be32 1139 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid) 1140 { 1141 DECODE_HEAD; 1142 1143 if (argp->minorversion >= 1) 1144 return nfserr_notsupp; 1145 1146 READ_BUF(sizeof(clientid_t)); 1147 COPYMEM(clientid, sizeof(clientid_t)); 1148 1149 DECODE_TAIL; 1150 } 1151 1152 static __be32 1153 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp, 1154 struct nfsd4_secinfo *secinfo) 1155 { 1156 DECODE_HEAD; 1157 1158 READ_BUF(4); 1159 secinfo->si_namelen = be32_to_cpup(p++); 1160 READ_BUF(secinfo->si_namelen); 1161 SAVEMEM(secinfo->si_name, secinfo->si_namelen); 1162 status = check_filename(secinfo->si_name, secinfo->si_namelen); 1163 if (status) 1164 return status; 1165 DECODE_TAIL; 1166 } 1167 1168 static __be32 1169 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp, 1170 struct nfsd4_secinfo_no_name *sin) 1171 { 1172 DECODE_HEAD; 1173 1174 READ_BUF(4); 1175 sin->sin_style = be32_to_cpup(p++); 1176 DECODE_TAIL; 1177 } 1178 1179 static __be32 1180 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr) 1181 { 1182 __be32 status; 1183 1184 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid); 1185 if (status) 1186 return status; 1187 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr, 1188 &setattr->sa_acl, &setattr->sa_label, NULL); 1189 } 1190 1191 static __be32 1192 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid) 1193 { 1194 DECODE_HEAD; 1195 1196 if (argp->minorversion >= 1) 1197 return nfserr_notsupp; 1198 1199 READ_BUF(NFS4_VERIFIER_SIZE); 1200 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE); 1201 1202 status = nfsd4_decode_opaque(argp, &setclientid->se_name); 1203 if (status) 1204 return nfserr_bad_xdr; 1205 READ_BUF(8); 1206 setclientid->se_callback_prog = be32_to_cpup(p++); 1207 setclientid->se_callback_netid_len = be32_to_cpup(p++); 1208 READ_BUF(setclientid->se_callback_netid_len); 1209 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len); 1210 READ_BUF(4); 1211 setclientid->se_callback_addr_len = be32_to_cpup(p++); 1212 1213 READ_BUF(setclientid->se_callback_addr_len); 1214 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len); 1215 READ_BUF(4); 1216 setclientid->se_callback_ident = be32_to_cpup(p++); 1217 1218 DECODE_TAIL; 1219 } 1220 1221 static __be32 1222 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c) 1223 { 1224 DECODE_HEAD; 1225 1226 if (argp->minorversion >= 1) 1227 return nfserr_notsupp; 1228 1229 READ_BUF(8 + NFS4_VERIFIER_SIZE); 1230 COPYMEM(&scd_c->sc_clientid, 8); 1231 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE); 1232 1233 DECODE_TAIL; 1234 } 1235 1236 /* Also used for NVERIFY */ 1237 static __be32 1238 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify) 1239 { 1240 DECODE_HEAD; 1241 1242 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval))) 1243 goto out; 1244 1245 /* For convenience's sake, we compare raw xdr'd attributes in 1246 * nfsd4_proc_verify */ 1247 1248 READ_BUF(4); 1249 verify->ve_attrlen = be32_to_cpup(p++); 1250 READ_BUF(verify->ve_attrlen); 1251 SAVEMEM(verify->ve_attrval, verify->ve_attrlen); 1252 1253 DECODE_TAIL; 1254 } 1255 1256 static __be32 1257 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write) 1258 { 1259 int avail; 1260 int len; 1261 DECODE_HEAD; 1262 1263 status = nfsd4_decode_stateid(argp, &write->wr_stateid); 1264 if (status) 1265 return status; 1266 READ_BUF(16); 1267 p = xdr_decode_hyper(p, &write->wr_offset); 1268 write->wr_stable_how = be32_to_cpup(p++); 1269 if (write->wr_stable_how > NFS_FILE_SYNC) 1270 goto xdr_error; 1271 write->wr_buflen = be32_to_cpup(p++); 1272 1273 /* Sorry .. no magic macros for this.. * 1274 * READ_BUF(write->wr_buflen); 1275 * SAVEMEM(write->wr_buf, write->wr_buflen); 1276 */ 1277 avail = (char*)argp->end - (char*)argp->p; 1278 if (avail + argp->pagelen < write->wr_buflen) { 1279 dprintk("NFSD: xdr error (%s:%d)\n", 1280 __FILE__, __LINE__); 1281 goto xdr_error; 1282 } 1283 write->wr_head.iov_base = p; 1284 write->wr_head.iov_len = avail; 1285 write->wr_pagelist = argp->pagelist; 1286 1287 len = XDR_QUADLEN(write->wr_buflen) << 2; 1288 if (len >= avail) { 1289 int pages; 1290 1291 len -= avail; 1292 1293 pages = len >> PAGE_SHIFT; 1294 argp->pagelist += pages; 1295 argp->pagelen -= pages * PAGE_SIZE; 1296 len -= pages * PAGE_SIZE; 1297 1298 next_decode_page(argp); 1299 } 1300 argp->p += XDR_QUADLEN(len); 1301 1302 DECODE_TAIL; 1303 } 1304 1305 static __be32 1306 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner) 1307 { 1308 DECODE_HEAD; 1309 1310 if (argp->minorversion >= 1) 1311 return nfserr_notsupp; 1312 1313 READ_BUF(12); 1314 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t)); 1315 rlockowner->rl_owner.len = be32_to_cpup(p++); 1316 READ_BUF(rlockowner->rl_owner.len); 1317 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len); 1318 1319 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid)) 1320 return nfserr_inval; 1321 DECODE_TAIL; 1322 } 1323 1324 static __be32 1325 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp, 1326 struct nfsd4_exchange_id *exid) 1327 { 1328 int dummy, tmp; 1329 DECODE_HEAD; 1330 1331 READ_BUF(NFS4_VERIFIER_SIZE); 1332 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE); 1333 1334 status = nfsd4_decode_opaque(argp, &exid->clname); 1335 if (status) 1336 return nfserr_bad_xdr; 1337 1338 READ_BUF(4); 1339 exid->flags = be32_to_cpup(p++); 1340 1341 /* Ignore state_protect4_a */ 1342 READ_BUF(4); 1343 exid->spa_how = be32_to_cpup(p++); 1344 switch (exid->spa_how) { 1345 case SP4_NONE: 1346 break; 1347 case SP4_MACH_CRED: 1348 /* spo_must_enforce */ 1349 status = nfsd4_decode_bitmap(argp, 1350 exid->spo_must_enforce); 1351 if (status) 1352 goto out; 1353 /* spo_must_allow */ 1354 status = nfsd4_decode_bitmap(argp, exid->spo_must_allow); 1355 if (status) 1356 goto out; 1357 break; 1358 case SP4_SSV: 1359 /* ssp_ops */ 1360 READ_BUF(4); 1361 dummy = be32_to_cpup(p++); 1362 READ_BUF(dummy * 4); 1363 p += dummy; 1364 1365 READ_BUF(4); 1366 dummy = be32_to_cpup(p++); 1367 READ_BUF(dummy * 4); 1368 p += dummy; 1369 1370 /* ssp_hash_algs<> */ 1371 READ_BUF(4); 1372 tmp = be32_to_cpup(p++); 1373 while (tmp--) { 1374 READ_BUF(4); 1375 dummy = be32_to_cpup(p++); 1376 READ_BUF(dummy); 1377 p += XDR_QUADLEN(dummy); 1378 } 1379 1380 /* ssp_encr_algs<> */ 1381 READ_BUF(4); 1382 tmp = be32_to_cpup(p++); 1383 while (tmp--) { 1384 READ_BUF(4); 1385 dummy = be32_to_cpup(p++); 1386 READ_BUF(dummy); 1387 p += XDR_QUADLEN(dummy); 1388 } 1389 1390 /* ssp_window and ssp_num_gss_handles */ 1391 READ_BUF(8); 1392 dummy = be32_to_cpup(p++); 1393 dummy = be32_to_cpup(p++); 1394 break; 1395 default: 1396 goto xdr_error; 1397 } 1398 1399 /* Ignore Implementation ID */ 1400 READ_BUF(4); /* nfs_impl_id4 array length */ 1401 dummy = be32_to_cpup(p++); 1402 1403 if (dummy > 1) 1404 goto xdr_error; 1405 1406 if (dummy == 1) { 1407 /* nii_domain */ 1408 READ_BUF(4); 1409 dummy = be32_to_cpup(p++); 1410 READ_BUF(dummy); 1411 p += XDR_QUADLEN(dummy); 1412 1413 /* nii_name */ 1414 READ_BUF(4); 1415 dummy = be32_to_cpup(p++); 1416 READ_BUF(dummy); 1417 p += XDR_QUADLEN(dummy); 1418 1419 /* nii_date */ 1420 READ_BUF(12); 1421 p += 3; 1422 } 1423 DECODE_TAIL; 1424 } 1425 1426 static __be32 1427 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp, 1428 struct nfsd4_create_session *sess) 1429 { 1430 DECODE_HEAD; 1431 u32 dummy; 1432 1433 READ_BUF(16); 1434 COPYMEM(&sess->clientid, 8); 1435 sess->seqid = be32_to_cpup(p++); 1436 sess->flags = be32_to_cpup(p++); 1437 1438 /* Fore channel attrs */ 1439 READ_BUF(28); 1440 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */ 1441 sess->fore_channel.maxreq_sz = be32_to_cpup(p++); 1442 sess->fore_channel.maxresp_sz = be32_to_cpup(p++); 1443 sess->fore_channel.maxresp_cached = be32_to_cpup(p++); 1444 sess->fore_channel.maxops = be32_to_cpup(p++); 1445 sess->fore_channel.maxreqs = be32_to_cpup(p++); 1446 sess->fore_channel.nr_rdma_attrs = be32_to_cpup(p++); 1447 if (sess->fore_channel.nr_rdma_attrs == 1) { 1448 READ_BUF(4); 1449 sess->fore_channel.rdma_attrs = be32_to_cpup(p++); 1450 } else if (sess->fore_channel.nr_rdma_attrs > 1) { 1451 dprintk("Too many fore channel attr bitmaps!\n"); 1452 goto xdr_error; 1453 } 1454 1455 /* Back channel attrs */ 1456 READ_BUF(28); 1457 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */ 1458 sess->back_channel.maxreq_sz = be32_to_cpup(p++); 1459 sess->back_channel.maxresp_sz = be32_to_cpup(p++); 1460 sess->back_channel.maxresp_cached = be32_to_cpup(p++); 1461 sess->back_channel.maxops = be32_to_cpup(p++); 1462 sess->back_channel.maxreqs = be32_to_cpup(p++); 1463 sess->back_channel.nr_rdma_attrs = be32_to_cpup(p++); 1464 if (sess->back_channel.nr_rdma_attrs == 1) { 1465 READ_BUF(4); 1466 sess->back_channel.rdma_attrs = be32_to_cpup(p++); 1467 } else if (sess->back_channel.nr_rdma_attrs > 1) { 1468 dprintk("Too many back channel attr bitmaps!\n"); 1469 goto xdr_error; 1470 } 1471 1472 READ_BUF(4); 1473 sess->callback_prog = be32_to_cpup(p++); 1474 nfsd4_decode_cb_sec(argp, &sess->cb_sec); 1475 DECODE_TAIL; 1476 } 1477 1478 static __be32 1479 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp, 1480 struct nfsd4_destroy_session *destroy_session) 1481 { 1482 DECODE_HEAD; 1483 READ_BUF(NFS4_MAX_SESSIONID_LEN); 1484 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1485 1486 DECODE_TAIL; 1487 } 1488 1489 static __be32 1490 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp, 1491 struct nfsd4_free_stateid *free_stateid) 1492 { 1493 DECODE_HEAD; 1494 1495 READ_BUF(sizeof(stateid_t)); 1496 free_stateid->fr_stateid.si_generation = be32_to_cpup(p++); 1497 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t)); 1498 1499 DECODE_TAIL; 1500 } 1501 1502 static __be32 1503 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp, 1504 struct nfsd4_sequence *seq) 1505 { 1506 DECODE_HEAD; 1507 1508 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16); 1509 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN); 1510 seq->seqid = be32_to_cpup(p++); 1511 seq->slotid = be32_to_cpup(p++); 1512 seq->maxslots = be32_to_cpup(p++); 1513 seq->cachethis = be32_to_cpup(p++); 1514 1515 DECODE_TAIL; 1516 } 1517 1518 static __be32 1519 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid) 1520 { 1521 int i; 1522 __be32 *p, status; 1523 struct nfsd4_test_stateid_id *stateid; 1524 1525 READ_BUF(4); 1526 test_stateid->ts_num_ids = ntohl(*p++); 1527 1528 INIT_LIST_HEAD(&test_stateid->ts_stateid_list); 1529 1530 for (i = 0; i < test_stateid->ts_num_ids; i++) { 1531 stateid = svcxdr_tmpalloc(argp, sizeof(*stateid)); 1532 if (!stateid) { 1533 status = nfserrno(-ENOMEM); 1534 goto out; 1535 } 1536 1537 INIT_LIST_HEAD(&stateid->ts_id_list); 1538 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list); 1539 1540 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid); 1541 if (status) 1542 goto out; 1543 } 1544 1545 status = 0; 1546 out: 1547 return status; 1548 xdr_error: 1549 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__); 1550 status = nfserr_bad_xdr; 1551 goto out; 1552 } 1553 1554 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc) 1555 { 1556 DECODE_HEAD; 1557 1558 READ_BUF(8); 1559 COPYMEM(&dc->clientid, 8); 1560 1561 DECODE_TAIL; 1562 } 1563 1564 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc) 1565 { 1566 DECODE_HEAD; 1567 1568 READ_BUF(4); 1569 rc->rca_one_fs = be32_to_cpup(p++); 1570 1571 DECODE_TAIL; 1572 } 1573 1574 #ifdef CONFIG_NFSD_PNFS 1575 static __be32 1576 nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs *argp, 1577 struct nfsd4_getdeviceinfo *gdev) 1578 { 1579 DECODE_HEAD; 1580 u32 num, i; 1581 1582 READ_BUF(sizeof(struct nfsd4_deviceid) + 3 * 4); 1583 COPYMEM(&gdev->gd_devid, sizeof(struct nfsd4_deviceid)); 1584 gdev->gd_layout_type = be32_to_cpup(p++); 1585 gdev->gd_maxcount = be32_to_cpup(p++); 1586 num = be32_to_cpup(p++); 1587 if (num) { 1588 if (num > 1000) 1589 goto xdr_error; 1590 READ_BUF(4 * num); 1591 gdev->gd_notify_types = be32_to_cpup(p++); 1592 for (i = 1; i < num; i++) { 1593 if (be32_to_cpup(p++)) { 1594 status = nfserr_inval; 1595 goto out; 1596 } 1597 } 1598 } 1599 DECODE_TAIL; 1600 } 1601 1602 static __be32 1603 nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp, 1604 struct nfsd4_layoutget *lgp) 1605 { 1606 DECODE_HEAD; 1607 1608 READ_BUF(36); 1609 lgp->lg_signal = be32_to_cpup(p++); 1610 lgp->lg_layout_type = be32_to_cpup(p++); 1611 lgp->lg_seg.iomode = be32_to_cpup(p++); 1612 p = xdr_decode_hyper(p, &lgp->lg_seg.offset); 1613 p = xdr_decode_hyper(p, &lgp->lg_seg.length); 1614 p = xdr_decode_hyper(p, &lgp->lg_minlength); 1615 1616 status = nfsd4_decode_stateid(argp, &lgp->lg_sid); 1617 if (status) 1618 return status; 1619 1620 READ_BUF(4); 1621 lgp->lg_maxcount = be32_to_cpup(p++); 1622 1623 DECODE_TAIL; 1624 } 1625 1626 static __be32 1627 nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp, 1628 struct nfsd4_layoutcommit *lcp) 1629 { 1630 DECODE_HEAD; 1631 u32 timechange; 1632 1633 READ_BUF(20); 1634 p = xdr_decode_hyper(p, &lcp->lc_seg.offset); 1635 p = xdr_decode_hyper(p, &lcp->lc_seg.length); 1636 lcp->lc_reclaim = be32_to_cpup(p++); 1637 1638 status = nfsd4_decode_stateid(argp, &lcp->lc_sid); 1639 if (status) 1640 return status; 1641 1642 READ_BUF(4); 1643 lcp->lc_newoffset = be32_to_cpup(p++); 1644 if (lcp->lc_newoffset) { 1645 READ_BUF(8); 1646 p = xdr_decode_hyper(p, &lcp->lc_last_wr); 1647 } else 1648 lcp->lc_last_wr = 0; 1649 READ_BUF(4); 1650 timechange = be32_to_cpup(p++); 1651 if (timechange) { 1652 status = nfsd4_decode_time(argp, &lcp->lc_mtime); 1653 if (status) 1654 return status; 1655 } else { 1656 lcp->lc_mtime.tv_nsec = UTIME_NOW; 1657 } 1658 READ_BUF(8); 1659 lcp->lc_layout_type = be32_to_cpup(p++); 1660 1661 /* 1662 * Save the layout update in XDR format and let the layout driver deal 1663 * with it later. 1664 */ 1665 lcp->lc_up_len = be32_to_cpup(p++); 1666 if (lcp->lc_up_len > 0) { 1667 READ_BUF(lcp->lc_up_len); 1668 READMEM(lcp->lc_up_layout, lcp->lc_up_len); 1669 } 1670 1671 DECODE_TAIL; 1672 } 1673 1674 static __be32 1675 nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp, 1676 struct nfsd4_layoutreturn *lrp) 1677 { 1678 DECODE_HEAD; 1679 1680 READ_BUF(16); 1681 lrp->lr_reclaim = be32_to_cpup(p++); 1682 lrp->lr_layout_type = be32_to_cpup(p++); 1683 lrp->lr_seg.iomode = be32_to_cpup(p++); 1684 lrp->lr_return_type = be32_to_cpup(p++); 1685 if (lrp->lr_return_type == RETURN_FILE) { 1686 READ_BUF(16); 1687 p = xdr_decode_hyper(p, &lrp->lr_seg.offset); 1688 p = xdr_decode_hyper(p, &lrp->lr_seg.length); 1689 1690 status = nfsd4_decode_stateid(argp, &lrp->lr_sid); 1691 if (status) 1692 return status; 1693 1694 READ_BUF(4); 1695 lrp->lrf_body_len = be32_to_cpup(p++); 1696 if (lrp->lrf_body_len > 0) { 1697 READ_BUF(lrp->lrf_body_len); 1698 READMEM(lrp->lrf_body, lrp->lrf_body_len); 1699 } 1700 } else { 1701 lrp->lr_seg.offset = 0; 1702 lrp->lr_seg.length = NFS4_MAX_UINT64; 1703 } 1704 1705 DECODE_TAIL; 1706 } 1707 #endif /* CONFIG_NFSD_PNFS */ 1708 1709 static __be32 1710 nfsd4_decode_fallocate(struct nfsd4_compoundargs *argp, 1711 struct nfsd4_fallocate *fallocate) 1712 { 1713 DECODE_HEAD; 1714 1715 status = nfsd4_decode_stateid(argp, &fallocate->falloc_stateid); 1716 if (status) 1717 return status; 1718 1719 READ_BUF(16); 1720 p = xdr_decode_hyper(p, &fallocate->falloc_offset); 1721 xdr_decode_hyper(p, &fallocate->falloc_length); 1722 1723 DECODE_TAIL; 1724 } 1725 1726 static __be32 1727 nfsd4_decode_clone(struct nfsd4_compoundargs *argp, struct nfsd4_clone *clone) 1728 { 1729 DECODE_HEAD; 1730 1731 status = nfsd4_decode_stateid(argp, &clone->cl_src_stateid); 1732 if (status) 1733 return status; 1734 status = nfsd4_decode_stateid(argp, &clone->cl_dst_stateid); 1735 if (status) 1736 return status; 1737 1738 READ_BUF(8 + 8 + 8); 1739 p = xdr_decode_hyper(p, &clone->cl_src_pos); 1740 p = xdr_decode_hyper(p, &clone->cl_dst_pos); 1741 p = xdr_decode_hyper(p, &clone->cl_count); 1742 DECODE_TAIL; 1743 } 1744 1745 static __be32 1746 nfsd4_decode_copy(struct nfsd4_compoundargs *argp, struct nfsd4_copy *copy) 1747 { 1748 DECODE_HEAD; 1749 unsigned int tmp; 1750 1751 status = nfsd4_decode_stateid(argp, ©->cp_src_stateid); 1752 if (status) 1753 return status; 1754 status = nfsd4_decode_stateid(argp, ©->cp_dst_stateid); 1755 if (status) 1756 return status; 1757 1758 READ_BUF(8 + 8 + 8 + 4 + 4 + 4); 1759 p = xdr_decode_hyper(p, ©->cp_src_pos); 1760 p = xdr_decode_hyper(p, ©->cp_dst_pos); 1761 p = xdr_decode_hyper(p, ©->cp_count); 1762 p++; /* ca_consecutive: we always do consecutive copies */ 1763 copy->cp_synchronous = be32_to_cpup(p++); 1764 tmp = be32_to_cpup(p); /* Source server list not supported */ 1765 1766 DECODE_TAIL; 1767 } 1768 1769 static __be32 1770 nfsd4_decode_seek(struct nfsd4_compoundargs *argp, struct nfsd4_seek *seek) 1771 { 1772 DECODE_HEAD; 1773 1774 status = nfsd4_decode_stateid(argp, &seek->seek_stateid); 1775 if (status) 1776 return status; 1777 1778 READ_BUF(8 + 4); 1779 p = xdr_decode_hyper(p, &seek->seek_offset); 1780 seek->seek_whence = be32_to_cpup(p); 1781 1782 DECODE_TAIL; 1783 } 1784 1785 static __be32 1786 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p) 1787 { 1788 return nfs_ok; 1789 } 1790 1791 static __be32 1792 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p) 1793 { 1794 return nfserr_notsupp; 1795 } 1796 1797 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *); 1798 1799 static const nfsd4_dec nfsd4_dec_ops[] = { 1800 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access, 1801 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close, 1802 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit, 1803 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create, 1804 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp, 1805 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn, 1806 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr, 1807 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop, 1808 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link, 1809 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock, 1810 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt, 1811 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku, 1812 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup, 1813 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop, 1814 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1815 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open, 1816 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp, 1817 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm, 1818 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade, 1819 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh, 1820 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_putpubfh, 1821 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop, 1822 [OP_READ] = (nfsd4_dec)nfsd4_decode_read, 1823 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir, 1824 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop, 1825 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove, 1826 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename, 1827 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew, 1828 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop, 1829 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop, 1830 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo, 1831 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr, 1832 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid, 1833 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm, 1834 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify, 1835 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write, 1836 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner, 1837 1838 /* new operations for NFSv4.1 */ 1839 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl, 1840 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session, 1841 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id, 1842 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session, 1843 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session, 1844 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid, 1845 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1846 #ifdef CONFIG_NFSD_PNFS 1847 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_getdeviceinfo, 1848 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1849 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_layoutcommit, 1850 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_layoutget, 1851 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_layoutreturn, 1852 #else 1853 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp, 1854 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp, 1855 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp, 1856 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp, 1857 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp, 1858 #endif 1859 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name, 1860 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence, 1861 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp, 1862 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid, 1863 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp, 1864 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid, 1865 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete, 1866 1867 /* new operations for NFSv4.2 */ 1868 [OP_ALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate, 1869 [OP_COPY] = (nfsd4_dec)nfsd4_decode_copy, 1870 [OP_COPY_NOTIFY] = (nfsd4_dec)nfsd4_decode_notsupp, 1871 [OP_DEALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate, 1872 [OP_IO_ADVISE] = (nfsd4_dec)nfsd4_decode_notsupp, 1873 [OP_LAYOUTERROR] = (nfsd4_dec)nfsd4_decode_notsupp, 1874 [OP_LAYOUTSTATS] = (nfsd4_dec)nfsd4_decode_notsupp, 1875 [OP_OFFLOAD_CANCEL] = (nfsd4_dec)nfsd4_decode_notsupp, 1876 [OP_OFFLOAD_STATUS] = (nfsd4_dec)nfsd4_decode_notsupp, 1877 [OP_READ_PLUS] = (nfsd4_dec)nfsd4_decode_notsupp, 1878 [OP_SEEK] = (nfsd4_dec)nfsd4_decode_seek, 1879 [OP_WRITE_SAME] = (nfsd4_dec)nfsd4_decode_notsupp, 1880 [OP_CLONE] = (nfsd4_dec)nfsd4_decode_clone, 1881 }; 1882 1883 static inline bool 1884 nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op) 1885 { 1886 if (op->opnum < FIRST_NFS4_OP) 1887 return false; 1888 else if (argp->minorversion == 0 && op->opnum > LAST_NFS40_OP) 1889 return false; 1890 else if (argp->minorversion == 1 && op->opnum > LAST_NFS41_OP) 1891 return false; 1892 else if (argp->minorversion == 2 && op->opnum > LAST_NFS42_OP) 1893 return false; 1894 return true; 1895 } 1896 1897 static __be32 1898 nfsd4_decode_compound(struct nfsd4_compoundargs *argp) 1899 { 1900 DECODE_HEAD; 1901 struct nfsd4_op *op; 1902 bool cachethis = false; 1903 int auth_slack= argp->rqstp->rq_auth_slack; 1904 int max_reply = auth_slack + 8; /* opcnt, status */ 1905 int readcount = 0; 1906 int readbytes = 0; 1907 int i; 1908 1909 READ_BUF(4); 1910 argp->taglen = be32_to_cpup(p++); 1911 READ_BUF(argp->taglen); 1912 SAVEMEM(argp->tag, argp->taglen); 1913 READ_BUF(8); 1914 argp->minorversion = be32_to_cpup(p++); 1915 argp->opcnt = be32_to_cpup(p++); 1916 max_reply += 4 + (XDR_QUADLEN(argp->taglen) << 2); 1917 1918 if (argp->taglen > NFSD4_MAX_TAGLEN) 1919 goto xdr_error; 1920 /* 1921 * NFS4ERR_RESOURCE is a more helpful error than GARBAGE_ARGS 1922 * here, so we return success at the xdr level so that 1923 * nfsd4_proc can handle this is an NFS-level error. 1924 */ 1925 if (argp->opcnt > NFSD_MAX_OPS_PER_COMPOUND) 1926 return 0; 1927 1928 if (argp->opcnt > ARRAY_SIZE(argp->iops)) { 1929 argp->ops = kzalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL); 1930 if (!argp->ops) { 1931 argp->ops = argp->iops; 1932 dprintk("nfsd: couldn't allocate room for COMPOUND\n"); 1933 goto xdr_error; 1934 } 1935 } 1936 1937 if (argp->minorversion > NFSD_SUPPORTED_MINOR_VERSION) 1938 argp->opcnt = 0; 1939 1940 for (i = 0; i < argp->opcnt; i++) { 1941 op = &argp->ops[i]; 1942 op->replay = NULL; 1943 1944 READ_BUF(4); 1945 op->opnum = be32_to_cpup(p++); 1946 1947 if (nfsd4_opnum_in_range(argp, op)) 1948 op->status = nfsd4_dec_ops[op->opnum](argp, &op->u); 1949 else { 1950 op->opnum = OP_ILLEGAL; 1951 op->status = nfserr_op_illegal; 1952 } 1953 op->opdesc = OPDESC(op); 1954 /* 1955 * We'll try to cache the result in the DRC if any one 1956 * op in the compound wants to be cached: 1957 */ 1958 cachethis |= nfsd4_cache_this_op(op); 1959 1960 if (op->opnum == OP_READ) { 1961 readcount++; 1962 readbytes += nfsd4_max_reply(argp->rqstp, op); 1963 } else 1964 max_reply += nfsd4_max_reply(argp->rqstp, op); 1965 /* 1966 * OP_LOCK and OP_LOCKT may return a conflicting lock. 1967 * (Special case because it will just skip encoding this 1968 * if it runs out of xdr buffer space, and it is the only 1969 * operation that behaves this way.) 1970 */ 1971 if (op->opnum == OP_LOCK || op->opnum == OP_LOCKT) 1972 max_reply += NFS4_OPAQUE_LIMIT; 1973 1974 if (op->status) { 1975 argp->opcnt = i+1; 1976 break; 1977 } 1978 } 1979 /* Sessions make the DRC unnecessary: */ 1980 if (argp->minorversion) 1981 cachethis = false; 1982 svc_reserve(argp->rqstp, max_reply + readbytes); 1983 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE; 1984 1985 if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack) 1986 clear_bit(RQ_SPLICE_OK, &argp->rqstp->rq_flags); 1987 1988 DECODE_TAIL; 1989 } 1990 1991 static __be32 *encode_change(__be32 *p, struct kstat *stat, struct inode *inode, 1992 struct svc_export *exp) 1993 { 1994 if (exp->ex_flags & NFSEXP_V4ROOT) { 1995 *p++ = cpu_to_be32(convert_to_wallclock(exp->cd->flush_time)); 1996 *p++ = 0; 1997 } else if (IS_I_VERSION(inode)) { 1998 p = xdr_encode_hyper(p, nfsd4_change_attribute(stat, inode)); 1999 } else { 2000 *p++ = cpu_to_be32(stat->ctime.tv_sec); 2001 *p++ = cpu_to_be32(stat->ctime.tv_nsec); 2002 } 2003 return p; 2004 } 2005 2006 static __be32 *encode_cinfo(__be32 *p, struct nfsd4_change_info *c) 2007 { 2008 *p++ = cpu_to_be32(c->atomic); 2009 if (c->change_supported) { 2010 p = xdr_encode_hyper(p, c->before_change); 2011 p = xdr_encode_hyper(p, c->after_change); 2012 } else { 2013 *p++ = cpu_to_be32(c->before_ctime_sec); 2014 *p++ = cpu_to_be32(c->before_ctime_nsec); 2015 *p++ = cpu_to_be32(c->after_ctime_sec); 2016 *p++ = cpu_to_be32(c->after_ctime_nsec); 2017 } 2018 return p; 2019 } 2020 2021 /* Encode as an array of strings the string given with components 2022 * separated @sep, escaped with esc_enter and esc_exit. 2023 */ 2024 static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep, 2025 char *components, char esc_enter, 2026 char esc_exit) 2027 { 2028 __be32 *p; 2029 __be32 pathlen; 2030 int pathlen_offset; 2031 int strlen, count=0; 2032 char *str, *end, *next; 2033 2034 dprintk("nfsd4_encode_components(%s)\n", components); 2035 2036 pathlen_offset = xdr->buf->len; 2037 p = xdr_reserve_space(xdr, 4); 2038 if (!p) 2039 return nfserr_resource; 2040 p++; /* We will fill this in with @count later */ 2041 2042 end = str = components; 2043 while (*end) { 2044 bool found_esc = false; 2045 2046 /* try to parse as esc_start, ..., esc_end, sep */ 2047 if (*str == esc_enter) { 2048 for (; *end && (*end != esc_exit); end++) 2049 /* find esc_exit or end of string */; 2050 next = end + 1; 2051 if (*end && (!*next || *next == sep)) { 2052 str++; 2053 found_esc = true; 2054 } 2055 } 2056 2057 if (!found_esc) 2058 for (; *end && (*end != sep); end++) 2059 /* find sep or end of string */; 2060 2061 strlen = end - str; 2062 if (strlen) { 2063 p = xdr_reserve_space(xdr, strlen + 4); 2064 if (!p) 2065 return nfserr_resource; 2066 p = xdr_encode_opaque(p, str, strlen); 2067 count++; 2068 } 2069 else 2070 end++; 2071 if (found_esc) 2072 end = next; 2073 2074 str = end; 2075 } 2076 pathlen = htonl(count); 2077 write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4); 2078 return 0; 2079 } 2080 2081 /* Encode as an array of strings the string given with components 2082 * separated @sep. 2083 */ 2084 static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep, 2085 char *components) 2086 { 2087 return nfsd4_encode_components_esc(xdr, sep, components, 0, 0); 2088 } 2089 2090 /* 2091 * encode a location element of a fs_locations structure 2092 */ 2093 static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr, 2094 struct nfsd4_fs_location *location) 2095 { 2096 __be32 status; 2097 2098 status = nfsd4_encode_components_esc(xdr, ':', location->hosts, 2099 '[', ']'); 2100 if (status) 2101 return status; 2102 status = nfsd4_encode_components(xdr, '/', location->path); 2103 if (status) 2104 return status; 2105 return 0; 2106 } 2107 2108 /* 2109 * Encode a path in RFC3530 'pathname4' format 2110 */ 2111 static __be32 nfsd4_encode_path(struct xdr_stream *xdr, 2112 const struct path *root, 2113 const struct path *path) 2114 { 2115 struct path cur = *path; 2116 __be32 *p; 2117 struct dentry **components = NULL; 2118 unsigned int ncomponents = 0; 2119 __be32 err = nfserr_jukebox; 2120 2121 dprintk("nfsd4_encode_components("); 2122 2123 path_get(&cur); 2124 /* First walk the path up to the nfsd root, and store the 2125 * dentries/path components in an array. 2126 */ 2127 for (;;) { 2128 if (path_equal(&cur, root)) 2129 break; 2130 if (cur.dentry == cur.mnt->mnt_root) { 2131 if (follow_up(&cur)) 2132 continue; 2133 goto out_free; 2134 } 2135 if ((ncomponents & 15) == 0) { 2136 struct dentry **new; 2137 new = krealloc(components, 2138 sizeof(*new) * (ncomponents + 16), 2139 GFP_KERNEL); 2140 if (!new) 2141 goto out_free; 2142 components = new; 2143 } 2144 components[ncomponents++] = cur.dentry; 2145 cur.dentry = dget_parent(cur.dentry); 2146 } 2147 err = nfserr_resource; 2148 p = xdr_reserve_space(xdr, 4); 2149 if (!p) 2150 goto out_free; 2151 *p++ = cpu_to_be32(ncomponents); 2152 2153 while (ncomponents) { 2154 struct dentry *dentry = components[ncomponents - 1]; 2155 unsigned int len; 2156 2157 spin_lock(&dentry->d_lock); 2158 len = dentry->d_name.len; 2159 p = xdr_reserve_space(xdr, len + 4); 2160 if (!p) { 2161 spin_unlock(&dentry->d_lock); 2162 goto out_free; 2163 } 2164 p = xdr_encode_opaque(p, dentry->d_name.name, len); 2165 dprintk("/%pd", dentry); 2166 spin_unlock(&dentry->d_lock); 2167 dput(dentry); 2168 ncomponents--; 2169 } 2170 2171 err = 0; 2172 out_free: 2173 dprintk(")\n"); 2174 while (ncomponents) 2175 dput(components[--ncomponents]); 2176 kfree(components); 2177 path_put(&cur); 2178 return err; 2179 } 2180 2181 static __be32 nfsd4_encode_fsloc_fsroot(struct xdr_stream *xdr, 2182 struct svc_rqst *rqstp, const struct path *path) 2183 { 2184 struct svc_export *exp_ps; 2185 __be32 res; 2186 2187 exp_ps = rqst_find_fsidzero_export(rqstp); 2188 if (IS_ERR(exp_ps)) 2189 return nfserrno(PTR_ERR(exp_ps)); 2190 res = nfsd4_encode_path(xdr, &exp_ps->ex_path, path); 2191 exp_put(exp_ps); 2192 return res; 2193 } 2194 2195 /* 2196 * encode a fs_locations structure 2197 */ 2198 static __be32 nfsd4_encode_fs_locations(struct xdr_stream *xdr, 2199 struct svc_rqst *rqstp, struct svc_export *exp) 2200 { 2201 __be32 status; 2202 int i; 2203 __be32 *p; 2204 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs; 2205 2206 status = nfsd4_encode_fsloc_fsroot(xdr, rqstp, &exp->ex_path); 2207 if (status) 2208 return status; 2209 p = xdr_reserve_space(xdr, 4); 2210 if (!p) 2211 return nfserr_resource; 2212 *p++ = cpu_to_be32(fslocs->locations_count); 2213 for (i=0; i<fslocs->locations_count; i++) { 2214 status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]); 2215 if (status) 2216 return status; 2217 } 2218 return 0; 2219 } 2220 2221 static u32 nfs4_file_type(umode_t mode) 2222 { 2223 switch (mode & S_IFMT) { 2224 case S_IFIFO: return NF4FIFO; 2225 case S_IFCHR: return NF4CHR; 2226 case S_IFDIR: return NF4DIR; 2227 case S_IFBLK: return NF4BLK; 2228 case S_IFLNK: return NF4LNK; 2229 case S_IFREG: return NF4REG; 2230 case S_IFSOCK: return NF4SOCK; 2231 default: return NF4BAD; 2232 }; 2233 } 2234 2235 static inline __be32 2236 nfsd4_encode_aclname(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2237 struct nfs4_ace *ace) 2238 { 2239 if (ace->whotype != NFS4_ACL_WHO_NAMED) 2240 return nfs4_acl_write_who(xdr, ace->whotype); 2241 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP) 2242 return nfsd4_encode_group(xdr, rqstp, ace->who_gid); 2243 else 2244 return nfsd4_encode_user(xdr, rqstp, ace->who_uid); 2245 } 2246 2247 static inline __be32 2248 nfsd4_encode_layout_types(struct xdr_stream *xdr, u32 layout_types) 2249 { 2250 __be32 *p; 2251 unsigned long i = hweight_long(layout_types); 2252 2253 p = xdr_reserve_space(xdr, 4 + 4 * i); 2254 if (!p) 2255 return nfserr_resource; 2256 2257 *p++ = cpu_to_be32(i); 2258 2259 for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i) 2260 if (layout_types & (1 << i)) 2261 *p++ = cpu_to_be32(i); 2262 2263 return 0; 2264 } 2265 2266 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \ 2267 FATTR4_WORD0_RDATTR_ERROR) 2268 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID 2269 #define WORD2_ABSENT_FS_ATTRS 0 2270 2271 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2272 static inline __be32 2273 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2274 void *context, int len) 2275 { 2276 __be32 *p; 2277 2278 p = xdr_reserve_space(xdr, len + 4 + 4 + 4); 2279 if (!p) 2280 return nfserr_resource; 2281 2282 /* 2283 * For now we use a 0 here to indicate the null translation; in 2284 * the future we may place a call to translation code here. 2285 */ 2286 *p++ = cpu_to_be32(0); /* lfs */ 2287 *p++ = cpu_to_be32(0); /* pi */ 2288 p = xdr_encode_opaque(p, context, len); 2289 return 0; 2290 } 2291 #else 2292 static inline __be32 2293 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp, 2294 void *context, int len) 2295 { return 0; } 2296 #endif 2297 2298 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *bmval2, u32 *rdattr_err) 2299 { 2300 /* As per referral draft: */ 2301 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS || 2302 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) { 2303 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR || 2304 *bmval0 & FATTR4_WORD0_FS_LOCATIONS) 2305 *rdattr_err = NFSERR_MOVED; 2306 else 2307 return nfserr_moved; 2308 } 2309 *bmval0 &= WORD0_ABSENT_FS_ATTRS; 2310 *bmval1 &= WORD1_ABSENT_FS_ATTRS; 2311 *bmval2 &= WORD2_ABSENT_FS_ATTRS; 2312 return 0; 2313 } 2314 2315 2316 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat) 2317 { 2318 struct path path = exp->ex_path; 2319 int err; 2320 2321 path_get(&path); 2322 while (follow_up(&path)) { 2323 if (path.dentry != path.mnt->mnt_root) 2324 break; 2325 } 2326 err = vfs_getattr(&path, stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT); 2327 path_put(&path); 2328 return err; 2329 } 2330 2331 static __be32 2332 nfsd4_encode_bitmap(struct xdr_stream *xdr, u32 bmval0, u32 bmval1, u32 bmval2) 2333 { 2334 __be32 *p; 2335 2336 if (bmval2) { 2337 p = xdr_reserve_space(xdr, 16); 2338 if (!p) 2339 goto out_resource; 2340 *p++ = cpu_to_be32(3); 2341 *p++ = cpu_to_be32(bmval0); 2342 *p++ = cpu_to_be32(bmval1); 2343 *p++ = cpu_to_be32(bmval2); 2344 } else if (bmval1) { 2345 p = xdr_reserve_space(xdr, 12); 2346 if (!p) 2347 goto out_resource; 2348 *p++ = cpu_to_be32(2); 2349 *p++ = cpu_to_be32(bmval0); 2350 *p++ = cpu_to_be32(bmval1); 2351 } else { 2352 p = xdr_reserve_space(xdr, 8); 2353 if (!p) 2354 goto out_resource; 2355 *p++ = cpu_to_be32(1); 2356 *p++ = cpu_to_be32(bmval0); 2357 } 2358 2359 return 0; 2360 out_resource: 2361 return nfserr_resource; 2362 } 2363 2364 /* 2365 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle 2366 * ourselves. 2367 */ 2368 static __be32 2369 nfsd4_encode_fattr(struct xdr_stream *xdr, struct svc_fh *fhp, 2370 struct svc_export *exp, 2371 struct dentry *dentry, u32 *bmval, 2372 struct svc_rqst *rqstp, int ignore_crossmnt) 2373 { 2374 u32 bmval0 = bmval[0]; 2375 u32 bmval1 = bmval[1]; 2376 u32 bmval2 = bmval[2]; 2377 struct kstat stat; 2378 struct svc_fh *tempfh = NULL; 2379 struct kstatfs statfs; 2380 __be32 *p; 2381 int starting_len = xdr->buf->len; 2382 int attrlen_offset; 2383 __be32 attrlen; 2384 u32 dummy; 2385 u64 dummy64; 2386 u32 rdattr_err = 0; 2387 __be32 status; 2388 int err; 2389 struct nfs4_acl *acl = NULL; 2390 void *context = NULL; 2391 int contextlen; 2392 bool contextsupport = false; 2393 struct nfsd4_compoundres *resp = rqstp->rq_resp; 2394 u32 minorversion = resp->cstate.minorversion; 2395 struct path path = { 2396 .mnt = exp->ex_path.mnt, 2397 .dentry = dentry, 2398 }; 2399 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id); 2400 2401 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1); 2402 BUG_ON(!nfsd_attrs_supported(minorversion, bmval)); 2403 2404 if (exp->ex_fslocs.migrated) { 2405 status = fattr_handle_absent_fs(&bmval0, &bmval1, &bmval2, &rdattr_err); 2406 if (status) 2407 goto out; 2408 } 2409 2410 err = vfs_getattr(&path, &stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT); 2411 if (err) 2412 goto out_nfserr; 2413 if ((bmval0 & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE | 2414 FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) || 2415 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE | 2416 FATTR4_WORD1_SPACE_TOTAL))) { 2417 err = vfs_statfs(&path, &statfs); 2418 if (err) 2419 goto out_nfserr; 2420 } 2421 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) { 2422 tempfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL); 2423 status = nfserr_jukebox; 2424 if (!tempfh) 2425 goto out; 2426 fh_init(tempfh, NFS4_FHSIZE); 2427 status = fh_compose(tempfh, exp, dentry, NULL); 2428 if (status) 2429 goto out; 2430 fhp = tempfh; 2431 } 2432 if (bmval0 & FATTR4_WORD0_ACL) { 2433 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl); 2434 if (err == -EOPNOTSUPP) 2435 bmval0 &= ~FATTR4_WORD0_ACL; 2436 else if (err == -EINVAL) { 2437 status = nfserr_attrnotsupp; 2438 goto out; 2439 } else if (err != 0) 2440 goto out_nfserr; 2441 } 2442 2443 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2444 if ((bmval2 & FATTR4_WORD2_SECURITY_LABEL) || 2445 bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 2446 if (exp->ex_flags & NFSEXP_SECURITY_LABEL) 2447 err = security_inode_getsecctx(d_inode(dentry), 2448 &context, &contextlen); 2449 else 2450 err = -EOPNOTSUPP; 2451 contextsupport = (err == 0); 2452 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) { 2453 if (err == -EOPNOTSUPP) 2454 bmval2 &= ~FATTR4_WORD2_SECURITY_LABEL; 2455 else if (err) 2456 goto out_nfserr; 2457 } 2458 } 2459 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */ 2460 2461 status = nfsd4_encode_bitmap(xdr, bmval0, bmval1, bmval2); 2462 if (status) 2463 goto out; 2464 2465 attrlen_offset = xdr->buf->len; 2466 p = xdr_reserve_space(xdr, 4); 2467 if (!p) 2468 goto out_resource; 2469 p++; /* to be backfilled later */ 2470 2471 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) { 2472 u32 supp[3]; 2473 2474 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp)); 2475 2476 if (!IS_POSIXACL(dentry->d_inode)) 2477 supp[0] &= ~FATTR4_WORD0_ACL; 2478 if (!contextsupport) 2479 supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL; 2480 if (!supp[2]) { 2481 p = xdr_reserve_space(xdr, 12); 2482 if (!p) 2483 goto out_resource; 2484 *p++ = cpu_to_be32(2); 2485 *p++ = cpu_to_be32(supp[0]); 2486 *p++ = cpu_to_be32(supp[1]); 2487 } else { 2488 p = xdr_reserve_space(xdr, 16); 2489 if (!p) 2490 goto out_resource; 2491 *p++ = cpu_to_be32(3); 2492 *p++ = cpu_to_be32(supp[0]); 2493 *p++ = cpu_to_be32(supp[1]); 2494 *p++ = cpu_to_be32(supp[2]); 2495 } 2496 } 2497 if (bmval0 & FATTR4_WORD0_TYPE) { 2498 p = xdr_reserve_space(xdr, 4); 2499 if (!p) 2500 goto out_resource; 2501 dummy = nfs4_file_type(stat.mode); 2502 if (dummy == NF4BAD) { 2503 status = nfserr_serverfault; 2504 goto out; 2505 } 2506 *p++ = cpu_to_be32(dummy); 2507 } 2508 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) { 2509 p = xdr_reserve_space(xdr, 4); 2510 if (!p) 2511 goto out_resource; 2512 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK) 2513 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT); 2514 else 2515 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT| 2516 NFS4_FH_VOL_RENAME); 2517 } 2518 if (bmval0 & FATTR4_WORD0_CHANGE) { 2519 p = xdr_reserve_space(xdr, 8); 2520 if (!p) 2521 goto out_resource; 2522 p = encode_change(p, &stat, d_inode(dentry), exp); 2523 } 2524 if (bmval0 & FATTR4_WORD0_SIZE) { 2525 p = xdr_reserve_space(xdr, 8); 2526 if (!p) 2527 goto out_resource; 2528 p = xdr_encode_hyper(p, stat.size); 2529 } 2530 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) { 2531 p = xdr_reserve_space(xdr, 4); 2532 if (!p) 2533 goto out_resource; 2534 *p++ = cpu_to_be32(1); 2535 } 2536 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) { 2537 p = xdr_reserve_space(xdr, 4); 2538 if (!p) 2539 goto out_resource; 2540 *p++ = cpu_to_be32(1); 2541 } 2542 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) { 2543 p = xdr_reserve_space(xdr, 4); 2544 if (!p) 2545 goto out_resource; 2546 *p++ = cpu_to_be32(0); 2547 } 2548 if (bmval0 & FATTR4_WORD0_FSID) { 2549 p = xdr_reserve_space(xdr, 16); 2550 if (!p) 2551 goto out_resource; 2552 if (exp->ex_fslocs.migrated) { 2553 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR); 2554 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR); 2555 } else switch(fsid_source(fhp)) { 2556 case FSIDSOURCE_FSID: 2557 p = xdr_encode_hyper(p, (u64)exp->ex_fsid); 2558 p = xdr_encode_hyper(p, (u64)0); 2559 break; 2560 case FSIDSOURCE_DEV: 2561 *p++ = cpu_to_be32(0); 2562 *p++ = cpu_to_be32(MAJOR(stat.dev)); 2563 *p++ = cpu_to_be32(0); 2564 *p++ = cpu_to_be32(MINOR(stat.dev)); 2565 break; 2566 case FSIDSOURCE_UUID: 2567 p = xdr_encode_opaque_fixed(p, exp->ex_uuid, 2568 EX_UUID_LEN); 2569 break; 2570 } 2571 } 2572 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) { 2573 p = xdr_reserve_space(xdr, 4); 2574 if (!p) 2575 goto out_resource; 2576 *p++ = cpu_to_be32(0); 2577 } 2578 if (bmval0 & FATTR4_WORD0_LEASE_TIME) { 2579 p = xdr_reserve_space(xdr, 4); 2580 if (!p) 2581 goto out_resource; 2582 *p++ = cpu_to_be32(nn->nfsd4_lease); 2583 } 2584 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) { 2585 p = xdr_reserve_space(xdr, 4); 2586 if (!p) 2587 goto out_resource; 2588 *p++ = cpu_to_be32(rdattr_err); 2589 } 2590 if (bmval0 & FATTR4_WORD0_ACL) { 2591 struct nfs4_ace *ace; 2592 2593 if (acl == NULL) { 2594 p = xdr_reserve_space(xdr, 4); 2595 if (!p) 2596 goto out_resource; 2597 2598 *p++ = cpu_to_be32(0); 2599 goto out_acl; 2600 } 2601 p = xdr_reserve_space(xdr, 4); 2602 if (!p) 2603 goto out_resource; 2604 *p++ = cpu_to_be32(acl->naces); 2605 2606 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) { 2607 p = xdr_reserve_space(xdr, 4*3); 2608 if (!p) 2609 goto out_resource; 2610 *p++ = cpu_to_be32(ace->type); 2611 *p++ = cpu_to_be32(ace->flag); 2612 *p++ = cpu_to_be32(ace->access_mask & 2613 NFS4_ACE_MASK_ALL); 2614 status = nfsd4_encode_aclname(xdr, rqstp, ace); 2615 if (status) 2616 goto out; 2617 } 2618 } 2619 out_acl: 2620 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) { 2621 p = xdr_reserve_space(xdr, 4); 2622 if (!p) 2623 goto out_resource; 2624 *p++ = cpu_to_be32(IS_POSIXACL(dentry->d_inode) ? 2625 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0); 2626 } 2627 if (bmval0 & FATTR4_WORD0_CANSETTIME) { 2628 p = xdr_reserve_space(xdr, 4); 2629 if (!p) 2630 goto out_resource; 2631 *p++ = cpu_to_be32(1); 2632 } 2633 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) { 2634 p = xdr_reserve_space(xdr, 4); 2635 if (!p) 2636 goto out_resource; 2637 *p++ = cpu_to_be32(0); 2638 } 2639 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) { 2640 p = xdr_reserve_space(xdr, 4); 2641 if (!p) 2642 goto out_resource; 2643 *p++ = cpu_to_be32(1); 2644 } 2645 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) { 2646 p = xdr_reserve_space(xdr, 4); 2647 if (!p) 2648 goto out_resource; 2649 *p++ = cpu_to_be32(1); 2650 } 2651 if (bmval0 & FATTR4_WORD0_FILEHANDLE) { 2652 p = xdr_reserve_space(xdr, fhp->fh_handle.fh_size + 4); 2653 if (!p) 2654 goto out_resource; 2655 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, 2656 fhp->fh_handle.fh_size); 2657 } 2658 if (bmval0 & FATTR4_WORD0_FILEID) { 2659 p = xdr_reserve_space(xdr, 8); 2660 if (!p) 2661 goto out_resource; 2662 p = xdr_encode_hyper(p, stat.ino); 2663 } 2664 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) { 2665 p = xdr_reserve_space(xdr, 8); 2666 if (!p) 2667 goto out_resource; 2668 p = xdr_encode_hyper(p, (u64) statfs.f_ffree); 2669 } 2670 if (bmval0 & FATTR4_WORD0_FILES_FREE) { 2671 p = xdr_reserve_space(xdr, 8); 2672 if (!p) 2673 goto out_resource; 2674 p = xdr_encode_hyper(p, (u64) statfs.f_ffree); 2675 } 2676 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) { 2677 p = xdr_reserve_space(xdr, 8); 2678 if (!p) 2679 goto out_resource; 2680 p = xdr_encode_hyper(p, (u64) statfs.f_files); 2681 } 2682 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) { 2683 status = nfsd4_encode_fs_locations(xdr, rqstp, exp); 2684 if (status) 2685 goto out; 2686 } 2687 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) { 2688 p = xdr_reserve_space(xdr, 4); 2689 if (!p) 2690 goto out_resource; 2691 *p++ = cpu_to_be32(1); 2692 } 2693 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) { 2694 p = xdr_reserve_space(xdr, 8); 2695 if (!p) 2696 goto out_resource; 2697 p = xdr_encode_hyper(p, exp->ex_path.mnt->mnt_sb->s_maxbytes); 2698 } 2699 if (bmval0 & FATTR4_WORD0_MAXLINK) { 2700 p = xdr_reserve_space(xdr, 4); 2701 if (!p) 2702 goto out_resource; 2703 *p++ = cpu_to_be32(255); 2704 } 2705 if (bmval0 & FATTR4_WORD0_MAXNAME) { 2706 p = xdr_reserve_space(xdr, 4); 2707 if (!p) 2708 goto out_resource; 2709 *p++ = cpu_to_be32(statfs.f_namelen); 2710 } 2711 if (bmval0 & FATTR4_WORD0_MAXREAD) { 2712 p = xdr_reserve_space(xdr, 8); 2713 if (!p) 2714 goto out_resource; 2715 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp)); 2716 } 2717 if (bmval0 & FATTR4_WORD0_MAXWRITE) { 2718 p = xdr_reserve_space(xdr, 8); 2719 if (!p) 2720 goto out_resource; 2721 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp)); 2722 } 2723 if (bmval1 & FATTR4_WORD1_MODE) { 2724 p = xdr_reserve_space(xdr, 4); 2725 if (!p) 2726 goto out_resource; 2727 *p++ = cpu_to_be32(stat.mode & S_IALLUGO); 2728 } 2729 if (bmval1 & FATTR4_WORD1_NO_TRUNC) { 2730 p = xdr_reserve_space(xdr, 4); 2731 if (!p) 2732 goto out_resource; 2733 *p++ = cpu_to_be32(1); 2734 } 2735 if (bmval1 & FATTR4_WORD1_NUMLINKS) { 2736 p = xdr_reserve_space(xdr, 4); 2737 if (!p) 2738 goto out_resource; 2739 *p++ = cpu_to_be32(stat.nlink); 2740 } 2741 if (bmval1 & FATTR4_WORD1_OWNER) { 2742 status = nfsd4_encode_user(xdr, rqstp, stat.uid); 2743 if (status) 2744 goto out; 2745 } 2746 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) { 2747 status = nfsd4_encode_group(xdr, rqstp, stat.gid); 2748 if (status) 2749 goto out; 2750 } 2751 if (bmval1 & FATTR4_WORD1_RAWDEV) { 2752 p = xdr_reserve_space(xdr, 8); 2753 if (!p) 2754 goto out_resource; 2755 *p++ = cpu_to_be32((u32) MAJOR(stat.rdev)); 2756 *p++ = cpu_to_be32((u32) MINOR(stat.rdev)); 2757 } 2758 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) { 2759 p = xdr_reserve_space(xdr, 8); 2760 if (!p) 2761 goto out_resource; 2762 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize; 2763 p = xdr_encode_hyper(p, dummy64); 2764 } 2765 if (bmval1 & FATTR4_WORD1_SPACE_FREE) { 2766 p = xdr_reserve_space(xdr, 8); 2767 if (!p) 2768 goto out_resource; 2769 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize; 2770 p = xdr_encode_hyper(p, dummy64); 2771 } 2772 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) { 2773 p = xdr_reserve_space(xdr, 8); 2774 if (!p) 2775 goto out_resource; 2776 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize; 2777 p = xdr_encode_hyper(p, dummy64); 2778 } 2779 if (bmval1 & FATTR4_WORD1_SPACE_USED) { 2780 p = xdr_reserve_space(xdr, 8); 2781 if (!p) 2782 goto out_resource; 2783 dummy64 = (u64)stat.blocks << 9; 2784 p = xdr_encode_hyper(p, dummy64); 2785 } 2786 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) { 2787 p = xdr_reserve_space(xdr, 12); 2788 if (!p) 2789 goto out_resource; 2790 p = xdr_encode_hyper(p, (s64)stat.atime.tv_sec); 2791 *p++ = cpu_to_be32(stat.atime.tv_nsec); 2792 } 2793 if (bmval1 & FATTR4_WORD1_TIME_DELTA) { 2794 p = xdr_reserve_space(xdr, 12); 2795 if (!p) 2796 goto out_resource; 2797 *p++ = cpu_to_be32(0); 2798 *p++ = cpu_to_be32(1); 2799 *p++ = cpu_to_be32(0); 2800 } 2801 if (bmval1 & FATTR4_WORD1_TIME_METADATA) { 2802 p = xdr_reserve_space(xdr, 12); 2803 if (!p) 2804 goto out_resource; 2805 p = xdr_encode_hyper(p, (s64)stat.ctime.tv_sec); 2806 *p++ = cpu_to_be32(stat.ctime.tv_nsec); 2807 } 2808 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) { 2809 p = xdr_reserve_space(xdr, 12); 2810 if (!p) 2811 goto out_resource; 2812 p = xdr_encode_hyper(p, (s64)stat.mtime.tv_sec); 2813 *p++ = cpu_to_be32(stat.mtime.tv_nsec); 2814 } 2815 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) { 2816 struct kstat parent_stat; 2817 u64 ino = stat.ino; 2818 2819 p = xdr_reserve_space(xdr, 8); 2820 if (!p) 2821 goto out_resource; 2822 /* 2823 * Get parent's attributes if not ignoring crossmount 2824 * and this is the root of a cross-mounted filesystem. 2825 */ 2826 if (ignore_crossmnt == 0 && 2827 dentry == exp->ex_path.mnt->mnt_root) { 2828 err = get_parent_attributes(exp, &parent_stat); 2829 if (err) 2830 goto out_nfserr; 2831 ino = parent_stat.ino; 2832 } 2833 p = xdr_encode_hyper(p, ino); 2834 } 2835 #ifdef CONFIG_NFSD_PNFS 2836 if (bmval1 & FATTR4_WORD1_FS_LAYOUT_TYPES) { 2837 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types); 2838 if (status) 2839 goto out; 2840 } 2841 2842 if (bmval2 & FATTR4_WORD2_LAYOUT_TYPES) { 2843 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types); 2844 if (status) 2845 goto out; 2846 } 2847 2848 if (bmval2 & FATTR4_WORD2_LAYOUT_BLKSIZE) { 2849 p = xdr_reserve_space(xdr, 4); 2850 if (!p) 2851 goto out_resource; 2852 *p++ = cpu_to_be32(stat.blksize); 2853 } 2854 #endif /* CONFIG_NFSD_PNFS */ 2855 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) { 2856 u32 supp[3]; 2857 2858 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp)); 2859 supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0; 2860 supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1; 2861 supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2; 2862 2863 status = nfsd4_encode_bitmap(xdr, supp[0], supp[1], supp[2]); 2864 if (status) 2865 goto out; 2866 } 2867 2868 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) { 2869 status = nfsd4_encode_security_label(xdr, rqstp, context, 2870 contextlen); 2871 if (status) 2872 goto out; 2873 } 2874 2875 attrlen = htonl(xdr->buf->len - attrlen_offset - 4); 2876 write_bytes_to_xdr_buf(xdr->buf, attrlen_offset, &attrlen, 4); 2877 status = nfs_ok; 2878 2879 out: 2880 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL 2881 if (context) 2882 security_release_secctx(context, contextlen); 2883 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */ 2884 kfree(acl); 2885 if (tempfh) { 2886 fh_put(tempfh); 2887 kfree(tempfh); 2888 } 2889 if (status) 2890 xdr_truncate_encode(xdr, starting_len); 2891 return status; 2892 out_nfserr: 2893 status = nfserrno(err); 2894 goto out; 2895 out_resource: 2896 status = nfserr_resource; 2897 goto out; 2898 } 2899 2900 static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr, 2901 struct xdr_buf *buf, __be32 *p, int bytes) 2902 { 2903 xdr->scratch.iov_len = 0; 2904 memset(buf, 0, sizeof(struct xdr_buf)); 2905 buf->head[0].iov_base = p; 2906 buf->head[0].iov_len = 0; 2907 buf->len = 0; 2908 xdr->buf = buf; 2909 xdr->iov = buf->head; 2910 xdr->p = p; 2911 xdr->end = (void *)p + bytes; 2912 buf->buflen = bytes; 2913 } 2914 2915 __be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words, 2916 struct svc_fh *fhp, struct svc_export *exp, 2917 struct dentry *dentry, u32 *bmval, 2918 struct svc_rqst *rqstp, int ignore_crossmnt) 2919 { 2920 struct xdr_buf dummy; 2921 struct xdr_stream xdr; 2922 __be32 ret; 2923 2924 svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2); 2925 ret = nfsd4_encode_fattr(&xdr, fhp, exp, dentry, bmval, rqstp, 2926 ignore_crossmnt); 2927 *p = xdr.p; 2928 return ret; 2929 } 2930 2931 static inline int attributes_need_mount(u32 *bmval) 2932 { 2933 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME)) 2934 return 1; 2935 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID) 2936 return 1; 2937 return 0; 2938 } 2939 2940 static __be32 2941 nfsd4_encode_dirent_fattr(struct xdr_stream *xdr, struct nfsd4_readdir *cd, 2942 const char *name, int namlen) 2943 { 2944 struct svc_export *exp = cd->rd_fhp->fh_export; 2945 struct dentry *dentry; 2946 __be32 nfserr; 2947 int ignore_crossmnt = 0; 2948 2949 dentry = lookup_one_len_unlocked(name, cd->rd_fhp->fh_dentry, namlen); 2950 if (IS_ERR(dentry)) 2951 return nfserrno(PTR_ERR(dentry)); 2952 if (d_really_is_negative(dentry)) { 2953 /* 2954 * we're not holding the i_mutex here, so there's 2955 * a window where this directory entry could have gone 2956 * away. 2957 */ 2958 dput(dentry); 2959 return nfserr_noent; 2960 } 2961 2962 exp_get(exp); 2963 /* 2964 * In the case of a mountpoint, the client may be asking for 2965 * attributes that are only properties of the underlying filesystem 2966 * as opposed to the cross-mounted file system. In such a case, 2967 * we will not follow the cross mount and will fill the attribtutes 2968 * directly from the mountpoint dentry. 2969 */ 2970 if (nfsd_mountpoint(dentry, exp)) { 2971 int err; 2972 2973 if (!(exp->ex_flags & NFSEXP_V4ROOT) 2974 && !attributes_need_mount(cd->rd_bmval)) { 2975 ignore_crossmnt = 1; 2976 goto out_encode; 2977 } 2978 /* 2979 * Why the heck aren't we just using nfsd_lookup?? 2980 * Different "."/".." handling? Something else? 2981 * At least, add a comment here to explain.... 2982 */ 2983 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp); 2984 if (err) { 2985 nfserr = nfserrno(err); 2986 goto out_put; 2987 } 2988 nfserr = check_nfsd_access(exp, cd->rd_rqstp); 2989 if (nfserr) 2990 goto out_put; 2991 2992 } 2993 out_encode: 2994 nfserr = nfsd4_encode_fattr(xdr, NULL, exp, dentry, cd->rd_bmval, 2995 cd->rd_rqstp, ignore_crossmnt); 2996 out_put: 2997 dput(dentry); 2998 exp_put(exp); 2999 return nfserr; 3000 } 3001 3002 static __be32 * 3003 nfsd4_encode_rdattr_error(struct xdr_stream *xdr, __be32 nfserr) 3004 { 3005 __be32 *p; 3006 3007 p = xdr_reserve_space(xdr, 20); 3008 if (!p) 3009 return NULL; 3010 *p++ = htonl(2); 3011 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */ 3012 *p++ = htonl(0); /* bmval1 */ 3013 3014 *p++ = htonl(4); /* attribute length */ 3015 *p++ = nfserr; /* no htonl */ 3016 return p; 3017 } 3018 3019 static int 3020 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen, 3021 loff_t offset, u64 ino, unsigned int d_type) 3022 { 3023 struct readdir_cd *ccd = ccdv; 3024 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common); 3025 struct xdr_stream *xdr = cd->xdr; 3026 int start_offset = xdr->buf->len; 3027 int cookie_offset; 3028 u32 name_and_cookie; 3029 int entry_bytes; 3030 __be32 nfserr = nfserr_toosmall; 3031 __be64 wire_offset; 3032 __be32 *p; 3033 3034 /* In nfsv4, "." and ".." never make it onto the wire.. */ 3035 if (name && isdotent(name, namlen)) { 3036 cd->common.err = nfs_ok; 3037 return 0; 3038 } 3039 3040 if (cd->cookie_offset) { 3041 wire_offset = cpu_to_be64(offset); 3042 write_bytes_to_xdr_buf(xdr->buf, cd->cookie_offset, 3043 &wire_offset, 8); 3044 } 3045 3046 p = xdr_reserve_space(xdr, 4); 3047 if (!p) 3048 goto fail; 3049 *p++ = xdr_one; /* mark entry present */ 3050 cookie_offset = xdr->buf->len; 3051 p = xdr_reserve_space(xdr, 3*4 + namlen); 3052 if (!p) 3053 goto fail; 3054 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */ 3055 p = xdr_encode_array(p, name, namlen); /* name length & name */ 3056 3057 nfserr = nfsd4_encode_dirent_fattr(xdr, cd, name, namlen); 3058 switch (nfserr) { 3059 case nfs_ok: 3060 break; 3061 case nfserr_resource: 3062 nfserr = nfserr_toosmall; 3063 goto fail; 3064 case nfserr_noent: 3065 xdr_truncate_encode(xdr, start_offset); 3066 goto skip_entry; 3067 default: 3068 /* 3069 * If the client requested the RDATTR_ERROR attribute, 3070 * we stuff the error code into this attribute 3071 * and continue. If this attribute was not requested, 3072 * then in accordance with the spec, we fail the 3073 * entire READDIR operation(!) 3074 */ 3075 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)) 3076 goto fail; 3077 p = nfsd4_encode_rdattr_error(xdr, nfserr); 3078 if (p == NULL) { 3079 nfserr = nfserr_toosmall; 3080 goto fail; 3081 } 3082 } 3083 nfserr = nfserr_toosmall; 3084 entry_bytes = xdr->buf->len - start_offset; 3085 if (entry_bytes > cd->rd_maxcount) 3086 goto fail; 3087 cd->rd_maxcount -= entry_bytes; 3088 /* 3089 * RFC 3530 14.2.24 describes rd_dircount as only a "hint", so 3090 * let's always let through the first entry, at least: 3091 */ 3092 if (!cd->rd_dircount) 3093 goto fail; 3094 name_and_cookie = 4 + 4 * XDR_QUADLEN(namlen) + 8; 3095 if (name_and_cookie > cd->rd_dircount && cd->cookie_offset) 3096 goto fail; 3097 cd->rd_dircount -= min(cd->rd_dircount, name_and_cookie); 3098 3099 cd->cookie_offset = cookie_offset; 3100 skip_entry: 3101 cd->common.err = nfs_ok; 3102 return 0; 3103 fail: 3104 xdr_truncate_encode(xdr, start_offset); 3105 cd->common.err = nfserr; 3106 return -EINVAL; 3107 } 3108 3109 static __be32 3110 nfsd4_encode_stateid(struct xdr_stream *xdr, stateid_t *sid) 3111 { 3112 __be32 *p; 3113 3114 p = xdr_reserve_space(xdr, sizeof(stateid_t)); 3115 if (!p) 3116 return nfserr_resource; 3117 *p++ = cpu_to_be32(sid->si_generation); 3118 p = xdr_encode_opaque_fixed(p, &sid->si_opaque, 3119 sizeof(stateid_opaque_t)); 3120 return 0; 3121 } 3122 3123 static __be32 3124 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access) 3125 { 3126 struct xdr_stream *xdr = &resp->xdr; 3127 __be32 *p; 3128 3129 p = xdr_reserve_space(xdr, 8); 3130 if (!p) 3131 return nfserr_resource; 3132 *p++ = cpu_to_be32(access->ac_supported); 3133 *p++ = cpu_to_be32(access->ac_resp_access); 3134 return 0; 3135 } 3136 3137 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts) 3138 { 3139 struct xdr_stream *xdr = &resp->xdr; 3140 __be32 *p; 3141 3142 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 8); 3143 if (!p) 3144 return nfserr_resource; 3145 p = xdr_encode_opaque_fixed(p, bcts->sessionid.data, 3146 NFS4_MAX_SESSIONID_LEN); 3147 *p++ = cpu_to_be32(bcts->dir); 3148 /* Upshifting from TCP to RDMA is not supported */ 3149 *p++ = cpu_to_be32(0); 3150 return 0; 3151 } 3152 3153 static __be32 3154 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close) 3155 { 3156 struct xdr_stream *xdr = &resp->xdr; 3157 3158 return nfsd4_encode_stateid(xdr, &close->cl_stateid); 3159 } 3160 3161 3162 static __be32 3163 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit) 3164 { 3165 struct xdr_stream *xdr = &resp->xdr; 3166 __be32 *p; 3167 3168 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE); 3169 if (!p) 3170 return nfserr_resource; 3171 p = xdr_encode_opaque_fixed(p, commit->co_verf.data, 3172 NFS4_VERIFIER_SIZE); 3173 return 0; 3174 } 3175 3176 static __be32 3177 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create) 3178 { 3179 struct xdr_stream *xdr = &resp->xdr; 3180 __be32 *p; 3181 3182 p = xdr_reserve_space(xdr, 20); 3183 if (!p) 3184 return nfserr_resource; 3185 encode_cinfo(p, &create->cr_cinfo); 3186 nfserr = nfsd4_encode_bitmap(xdr, create->cr_bmval[0], 3187 create->cr_bmval[1], create->cr_bmval[2]); 3188 return 0; 3189 } 3190 3191 static __be32 3192 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr) 3193 { 3194 struct svc_fh *fhp = getattr->ga_fhp; 3195 struct xdr_stream *xdr = &resp->xdr; 3196 3197 return nfsd4_encode_fattr(xdr, fhp, fhp->fh_export, fhp->fh_dentry, 3198 getattr->ga_bmval, resp->rqstp, 0); 3199 } 3200 3201 static __be32 3202 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp) 3203 { 3204 struct xdr_stream *xdr = &resp->xdr; 3205 struct svc_fh *fhp = *fhpp; 3206 unsigned int len; 3207 __be32 *p; 3208 3209 len = fhp->fh_handle.fh_size; 3210 p = xdr_reserve_space(xdr, len + 4); 3211 if (!p) 3212 return nfserr_resource; 3213 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, len); 3214 return 0; 3215 } 3216 3217 /* 3218 * Including all fields other than the name, a LOCK4denied structure requires 3219 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes. 3220 */ 3221 static __be32 3222 nfsd4_encode_lock_denied(struct xdr_stream *xdr, struct nfsd4_lock_denied *ld) 3223 { 3224 struct xdr_netobj *conf = &ld->ld_owner; 3225 __be32 *p; 3226 3227 again: 3228 p = xdr_reserve_space(xdr, 32 + XDR_LEN(conf->len)); 3229 if (!p) { 3230 /* 3231 * Don't fail to return the result just because we can't 3232 * return the conflicting open: 3233 */ 3234 if (conf->len) { 3235 kfree(conf->data); 3236 conf->len = 0; 3237 conf->data = NULL; 3238 goto again; 3239 } 3240 return nfserr_resource; 3241 } 3242 p = xdr_encode_hyper(p, ld->ld_start); 3243 p = xdr_encode_hyper(p, ld->ld_length); 3244 *p++ = cpu_to_be32(ld->ld_type); 3245 if (conf->len) { 3246 p = xdr_encode_opaque_fixed(p, &ld->ld_clientid, 8); 3247 p = xdr_encode_opaque(p, conf->data, conf->len); 3248 kfree(conf->data); 3249 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */ 3250 p = xdr_encode_hyper(p, (u64)0); /* clientid */ 3251 *p++ = cpu_to_be32(0); /* length of owner name */ 3252 } 3253 return nfserr_denied; 3254 } 3255 3256 static __be32 3257 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock) 3258 { 3259 struct xdr_stream *xdr = &resp->xdr; 3260 3261 if (!nfserr) 3262 nfserr = nfsd4_encode_stateid(xdr, &lock->lk_resp_stateid); 3263 else if (nfserr == nfserr_denied) 3264 nfserr = nfsd4_encode_lock_denied(xdr, &lock->lk_denied); 3265 3266 return nfserr; 3267 } 3268 3269 static __be32 3270 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt) 3271 { 3272 struct xdr_stream *xdr = &resp->xdr; 3273 3274 if (nfserr == nfserr_denied) 3275 nfsd4_encode_lock_denied(xdr, &lockt->lt_denied); 3276 return nfserr; 3277 } 3278 3279 static __be32 3280 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku) 3281 { 3282 struct xdr_stream *xdr = &resp->xdr; 3283 3284 return nfsd4_encode_stateid(xdr, &locku->lu_stateid); 3285 } 3286 3287 3288 static __be32 3289 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link) 3290 { 3291 struct xdr_stream *xdr = &resp->xdr; 3292 __be32 *p; 3293 3294 p = xdr_reserve_space(xdr, 20); 3295 if (!p) 3296 return nfserr_resource; 3297 p = encode_cinfo(p, &link->li_cinfo); 3298 return 0; 3299 } 3300 3301 3302 static __be32 3303 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open) 3304 { 3305 struct xdr_stream *xdr = &resp->xdr; 3306 __be32 *p; 3307 3308 nfserr = nfsd4_encode_stateid(xdr, &open->op_stateid); 3309 if (nfserr) 3310 return nfserr; 3311 p = xdr_reserve_space(xdr, 24); 3312 if (!p) 3313 return nfserr_resource; 3314 p = encode_cinfo(p, &open->op_cinfo); 3315 *p++ = cpu_to_be32(open->op_rflags); 3316 3317 nfserr = nfsd4_encode_bitmap(xdr, open->op_bmval[0], open->op_bmval[1], 3318 open->op_bmval[2]); 3319 if (nfserr) 3320 return nfserr; 3321 3322 p = xdr_reserve_space(xdr, 4); 3323 if (!p) 3324 return nfserr_resource; 3325 3326 *p++ = cpu_to_be32(open->op_delegate_type); 3327 switch (open->op_delegate_type) { 3328 case NFS4_OPEN_DELEGATE_NONE: 3329 break; 3330 case NFS4_OPEN_DELEGATE_READ: 3331 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid); 3332 if (nfserr) 3333 return nfserr; 3334 p = xdr_reserve_space(xdr, 20); 3335 if (!p) 3336 return nfserr_resource; 3337 *p++ = cpu_to_be32(open->op_recall); 3338 3339 /* 3340 * TODO: ACE's in delegations 3341 */ 3342 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 3343 *p++ = cpu_to_be32(0); 3344 *p++ = cpu_to_be32(0); 3345 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */ 3346 break; 3347 case NFS4_OPEN_DELEGATE_WRITE: 3348 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid); 3349 if (nfserr) 3350 return nfserr; 3351 p = xdr_reserve_space(xdr, 32); 3352 if (!p) 3353 return nfserr_resource; 3354 *p++ = cpu_to_be32(0); 3355 3356 /* 3357 * TODO: space_limit's in delegations 3358 */ 3359 *p++ = cpu_to_be32(NFS4_LIMIT_SIZE); 3360 *p++ = cpu_to_be32(~(u32)0); 3361 *p++ = cpu_to_be32(~(u32)0); 3362 3363 /* 3364 * TODO: ACE's in delegations 3365 */ 3366 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE); 3367 *p++ = cpu_to_be32(0); 3368 *p++ = cpu_to_be32(0); 3369 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */ 3370 break; 3371 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */ 3372 switch (open->op_why_no_deleg) { 3373 case WND4_CONTENTION: 3374 case WND4_RESOURCE: 3375 p = xdr_reserve_space(xdr, 8); 3376 if (!p) 3377 return nfserr_resource; 3378 *p++ = cpu_to_be32(open->op_why_no_deleg); 3379 /* deleg signaling not supported yet: */ 3380 *p++ = cpu_to_be32(0); 3381 break; 3382 default: 3383 p = xdr_reserve_space(xdr, 4); 3384 if (!p) 3385 return nfserr_resource; 3386 *p++ = cpu_to_be32(open->op_why_no_deleg); 3387 } 3388 break; 3389 default: 3390 BUG(); 3391 } 3392 /* XXX save filehandle here */ 3393 return 0; 3394 } 3395 3396 static __be32 3397 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc) 3398 { 3399 struct xdr_stream *xdr = &resp->xdr; 3400 3401 return nfsd4_encode_stateid(xdr, &oc->oc_resp_stateid); 3402 } 3403 3404 static __be32 3405 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od) 3406 { 3407 struct xdr_stream *xdr = &resp->xdr; 3408 3409 return nfsd4_encode_stateid(xdr, &od->od_stateid); 3410 } 3411 3412 static __be32 nfsd4_encode_splice_read( 3413 struct nfsd4_compoundres *resp, 3414 struct nfsd4_read *read, 3415 struct file *file, unsigned long maxcount) 3416 { 3417 struct xdr_stream *xdr = &resp->xdr; 3418 struct xdr_buf *buf = xdr->buf; 3419 u32 eof; 3420 long len; 3421 int space_left; 3422 __be32 nfserr; 3423 __be32 *p = xdr->p - 2; 3424 3425 /* Make sure there will be room for padding if needed */ 3426 if (xdr->end - xdr->p < 1) 3427 return nfserr_resource; 3428 3429 len = maxcount; 3430 nfserr = nfsd_splice_read(read->rd_rqstp, read->rd_fhp, 3431 file, read->rd_offset, &maxcount); 3432 read->rd_length = maxcount; 3433 if (nfserr) { 3434 /* 3435 * nfsd_splice_actor may have already messed with the 3436 * page length; reset it so as not to confuse 3437 * xdr_truncate_encode: 3438 */ 3439 buf->page_len = 0; 3440 return nfserr; 3441 } 3442 3443 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset, 3444 d_inode(read->rd_fhp->fh_dentry)->i_size); 3445 3446 *(p++) = htonl(eof); 3447 *(p++) = htonl(maxcount); 3448 3449 buf->page_len = maxcount; 3450 buf->len += maxcount; 3451 xdr->page_ptr += (buf->page_base + maxcount + PAGE_SIZE - 1) 3452 / PAGE_SIZE; 3453 3454 /* Use rest of head for padding and remaining ops: */ 3455 buf->tail[0].iov_base = xdr->p; 3456 buf->tail[0].iov_len = 0; 3457 xdr->iov = buf->tail; 3458 if (maxcount&3) { 3459 int pad = 4 - (maxcount&3); 3460 3461 *(xdr->p++) = 0; 3462 3463 buf->tail[0].iov_base += maxcount&3; 3464 buf->tail[0].iov_len = pad; 3465 buf->len += pad; 3466 } 3467 3468 space_left = min_t(int, (void *)xdr->end - (void *)xdr->p, 3469 buf->buflen - buf->len); 3470 buf->buflen = buf->len + space_left; 3471 xdr->end = (__be32 *)((void *)xdr->end + space_left); 3472 3473 return 0; 3474 } 3475 3476 static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp, 3477 struct nfsd4_read *read, 3478 struct file *file, unsigned long maxcount) 3479 { 3480 struct xdr_stream *xdr = &resp->xdr; 3481 u32 eof; 3482 int v; 3483 int starting_len = xdr->buf->len - 8; 3484 long len; 3485 int thislen; 3486 __be32 nfserr; 3487 __be32 tmp; 3488 __be32 *p; 3489 u32 zzz = 0; 3490 int pad; 3491 3492 len = maxcount; 3493 v = 0; 3494 3495 thislen = min_t(long, len, ((void *)xdr->end - (void *)xdr->p)); 3496 p = xdr_reserve_space(xdr, (thislen+3)&~3); 3497 WARN_ON_ONCE(!p); 3498 resp->rqstp->rq_vec[v].iov_base = p; 3499 resp->rqstp->rq_vec[v].iov_len = thislen; 3500 v++; 3501 len -= thislen; 3502 3503 while (len) { 3504 thislen = min_t(long, len, PAGE_SIZE); 3505 p = xdr_reserve_space(xdr, (thislen+3)&~3); 3506 WARN_ON_ONCE(!p); 3507 resp->rqstp->rq_vec[v].iov_base = p; 3508 resp->rqstp->rq_vec[v].iov_len = thislen; 3509 v++; 3510 len -= thislen; 3511 } 3512 read->rd_vlen = v; 3513 3514 len = maxcount; 3515 nfserr = nfsd_readv(resp->rqstp, read->rd_fhp, file, read->rd_offset, 3516 resp->rqstp->rq_vec, read->rd_vlen, &maxcount); 3517 read->rd_length = maxcount; 3518 if (nfserr) 3519 return nfserr; 3520 xdr_truncate_encode(xdr, starting_len + 8 + ((maxcount+3)&~3)); 3521 3522 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset, 3523 d_inode(read->rd_fhp->fh_dentry)->i_size); 3524 3525 tmp = htonl(eof); 3526 write_bytes_to_xdr_buf(xdr->buf, starting_len , &tmp, 4); 3527 tmp = htonl(maxcount); 3528 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4); 3529 3530 pad = (maxcount&3) ? 4 - (maxcount&3) : 0; 3531 write_bytes_to_xdr_buf(xdr->buf, starting_len + 8 + maxcount, 3532 &zzz, pad); 3533 return 0; 3534 3535 } 3536 3537 static __be32 3538 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr, 3539 struct nfsd4_read *read) 3540 { 3541 unsigned long maxcount; 3542 struct xdr_stream *xdr = &resp->xdr; 3543 struct file *file = read->rd_filp; 3544 int starting_len = xdr->buf->len; 3545 struct raparms *ra = NULL; 3546 __be32 *p; 3547 3548 p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */ 3549 if (!p) { 3550 WARN_ON_ONCE(test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)); 3551 return nfserr_resource; 3552 } 3553 if (resp->xdr.buf->page_len && 3554 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) { 3555 WARN_ON_ONCE(1); 3556 return nfserr_resource; 3557 } 3558 xdr_commit_encode(xdr); 3559 3560 maxcount = svc_max_payload(resp->rqstp); 3561 maxcount = min_t(unsigned long, maxcount, 3562 (xdr->buf->buflen - xdr->buf->len)); 3563 maxcount = min_t(unsigned long, maxcount, read->rd_length); 3564 3565 if (read->rd_tmp_file) 3566 ra = nfsd_init_raparms(file); 3567 3568 if (file->f_op->splice_read && 3569 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) 3570 nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount); 3571 else 3572 nfserr = nfsd4_encode_readv(resp, read, file, maxcount); 3573 3574 if (ra) 3575 nfsd_put_raparams(file, ra); 3576 3577 if (nfserr) 3578 xdr_truncate_encode(xdr, starting_len); 3579 3580 return nfserr; 3581 } 3582 3583 static __be32 3584 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink) 3585 { 3586 int maxcount; 3587 __be32 wire_count; 3588 int zero = 0; 3589 struct xdr_stream *xdr = &resp->xdr; 3590 int length_offset = xdr->buf->len; 3591 __be32 *p; 3592 3593 p = xdr_reserve_space(xdr, 4); 3594 if (!p) 3595 return nfserr_resource; 3596 maxcount = PAGE_SIZE; 3597 3598 p = xdr_reserve_space(xdr, maxcount); 3599 if (!p) 3600 return nfserr_resource; 3601 /* 3602 * XXX: By default, vfs_readlink() will truncate symlinks if they 3603 * would overflow the buffer. Is this kosher in NFSv4? If not, one 3604 * easy fix is: if vfs_readlink() precisely fills the buffer, assume 3605 * that truncation occurred, and return NFS4ERR_RESOURCE. 3606 */ 3607 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, 3608 (char *)p, &maxcount); 3609 if (nfserr == nfserr_isdir) 3610 nfserr = nfserr_inval; 3611 if (nfserr) { 3612 xdr_truncate_encode(xdr, length_offset); 3613 return nfserr; 3614 } 3615 3616 wire_count = htonl(maxcount); 3617 write_bytes_to_xdr_buf(xdr->buf, length_offset, &wire_count, 4); 3618 xdr_truncate_encode(xdr, length_offset + 4 + ALIGN(maxcount, 4)); 3619 if (maxcount & 3) 3620 write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount, 3621 &zero, 4 - (maxcount&3)); 3622 return 0; 3623 } 3624 3625 static __be32 3626 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir) 3627 { 3628 int maxcount; 3629 int bytes_left; 3630 loff_t offset; 3631 __be64 wire_offset; 3632 struct xdr_stream *xdr = &resp->xdr; 3633 int starting_len = xdr->buf->len; 3634 __be32 *p; 3635 3636 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE); 3637 if (!p) 3638 return nfserr_resource; 3639 3640 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */ 3641 *p++ = cpu_to_be32(0); 3642 *p++ = cpu_to_be32(0); 3643 resp->xdr.buf->head[0].iov_len = ((char *)resp->xdr.p) 3644 - (char *)resp->xdr.buf->head[0].iov_base; 3645 3646 /* 3647 * Number of bytes left for directory entries allowing for the 3648 * final 8 bytes of the readdir and a following failed op: 3649 */ 3650 bytes_left = xdr->buf->buflen - xdr->buf->len 3651 - COMPOUND_ERR_SLACK_SPACE - 8; 3652 if (bytes_left < 0) { 3653 nfserr = nfserr_resource; 3654 goto err_no_verf; 3655 } 3656 maxcount = svc_max_payload(resp->rqstp); 3657 maxcount = min_t(u32, readdir->rd_maxcount, maxcount); 3658 /* 3659 * Note the rfc defines rd_maxcount as the size of the 3660 * READDIR4resok structure, which includes the verifier above 3661 * and the 8 bytes encoded at the end of this function: 3662 */ 3663 if (maxcount < 16) { 3664 nfserr = nfserr_toosmall; 3665 goto err_no_verf; 3666 } 3667 maxcount = min_t(int, maxcount-16, bytes_left); 3668 3669 /* RFC 3530 14.2.24 allows us to ignore dircount when it's 0: */ 3670 if (!readdir->rd_dircount) 3671 readdir->rd_dircount = svc_max_payload(resp->rqstp); 3672 3673 readdir->xdr = xdr; 3674 readdir->rd_maxcount = maxcount; 3675 readdir->common.err = 0; 3676 readdir->cookie_offset = 0; 3677 3678 offset = readdir->rd_cookie; 3679 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp, 3680 &offset, 3681 &readdir->common, nfsd4_encode_dirent); 3682 if (nfserr == nfs_ok && 3683 readdir->common.err == nfserr_toosmall && 3684 xdr->buf->len == starting_len + 8) { 3685 /* nothing encoded; which limit did we hit?: */ 3686 if (maxcount - 16 < bytes_left) 3687 /* It was the fault of rd_maxcount: */ 3688 nfserr = nfserr_toosmall; 3689 else 3690 /* We ran out of buffer space: */ 3691 nfserr = nfserr_resource; 3692 } 3693 if (nfserr) 3694 goto err_no_verf; 3695 3696 if (readdir->cookie_offset) { 3697 wire_offset = cpu_to_be64(offset); 3698 write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset, 3699 &wire_offset, 8); 3700 } 3701 3702 p = xdr_reserve_space(xdr, 8); 3703 if (!p) { 3704 WARN_ON_ONCE(1); 3705 goto err_no_verf; 3706 } 3707 *p++ = 0; /* no more entries */ 3708 *p++ = htonl(readdir->common.err == nfserr_eof); 3709 3710 return 0; 3711 err_no_verf: 3712 xdr_truncate_encode(xdr, starting_len); 3713 return nfserr; 3714 } 3715 3716 static __be32 3717 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove) 3718 { 3719 struct xdr_stream *xdr = &resp->xdr; 3720 __be32 *p; 3721 3722 p = xdr_reserve_space(xdr, 20); 3723 if (!p) 3724 return nfserr_resource; 3725 p = encode_cinfo(p, &remove->rm_cinfo); 3726 return 0; 3727 } 3728 3729 static __be32 3730 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename) 3731 { 3732 struct xdr_stream *xdr = &resp->xdr; 3733 __be32 *p; 3734 3735 p = xdr_reserve_space(xdr, 40); 3736 if (!p) 3737 return nfserr_resource; 3738 p = encode_cinfo(p, &rename->rn_sinfo); 3739 p = encode_cinfo(p, &rename->rn_tinfo); 3740 return 0; 3741 } 3742 3743 static __be32 3744 nfsd4_do_encode_secinfo(struct xdr_stream *xdr, struct svc_export *exp) 3745 { 3746 u32 i, nflavs, supported; 3747 struct exp_flavor_info *flavs; 3748 struct exp_flavor_info def_flavs[2]; 3749 __be32 *p, *flavorsp; 3750 static bool report = true; 3751 3752 if (exp->ex_nflavors) { 3753 flavs = exp->ex_flavors; 3754 nflavs = exp->ex_nflavors; 3755 } else { /* Handling of some defaults in absence of real secinfo: */ 3756 flavs = def_flavs; 3757 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) { 3758 nflavs = 2; 3759 flavs[0].pseudoflavor = RPC_AUTH_UNIX; 3760 flavs[1].pseudoflavor = RPC_AUTH_NULL; 3761 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) { 3762 nflavs = 1; 3763 flavs[0].pseudoflavor 3764 = svcauth_gss_flavor(exp->ex_client); 3765 } else { 3766 nflavs = 1; 3767 flavs[0].pseudoflavor 3768 = exp->ex_client->flavour->flavour; 3769 } 3770 } 3771 3772 supported = 0; 3773 p = xdr_reserve_space(xdr, 4); 3774 if (!p) 3775 return nfserr_resource; 3776 flavorsp = p++; /* to be backfilled later */ 3777 3778 for (i = 0; i < nflavs; i++) { 3779 rpc_authflavor_t pf = flavs[i].pseudoflavor; 3780 struct rpcsec_gss_info info; 3781 3782 if (rpcauth_get_gssinfo(pf, &info) == 0) { 3783 supported++; 3784 p = xdr_reserve_space(xdr, 4 + 4 + 3785 XDR_LEN(info.oid.len) + 4 + 4); 3786 if (!p) 3787 return nfserr_resource; 3788 *p++ = cpu_to_be32(RPC_AUTH_GSS); 3789 p = xdr_encode_opaque(p, info.oid.data, info.oid.len); 3790 *p++ = cpu_to_be32(info.qop); 3791 *p++ = cpu_to_be32(info.service); 3792 } else if (pf < RPC_AUTH_MAXFLAVOR) { 3793 supported++; 3794 p = xdr_reserve_space(xdr, 4); 3795 if (!p) 3796 return nfserr_resource; 3797 *p++ = cpu_to_be32(pf); 3798 } else { 3799 if (report) 3800 pr_warn("NFS: SECINFO: security flavor %u " 3801 "is not supported\n", pf); 3802 } 3803 } 3804 3805 if (nflavs != supported) 3806 report = false; 3807 *flavorsp = htonl(supported); 3808 return 0; 3809 } 3810 3811 static __be32 3812 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 3813 struct nfsd4_secinfo *secinfo) 3814 { 3815 struct xdr_stream *xdr = &resp->xdr; 3816 3817 return nfsd4_do_encode_secinfo(xdr, secinfo->si_exp); 3818 } 3819 3820 static __be32 3821 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr, 3822 struct nfsd4_secinfo_no_name *secinfo) 3823 { 3824 struct xdr_stream *xdr = &resp->xdr; 3825 3826 return nfsd4_do_encode_secinfo(xdr, secinfo->sin_exp); 3827 } 3828 3829 /* 3830 * The SETATTR encode routine is special -- it always encodes a bitmap, 3831 * regardless of the error status. 3832 */ 3833 static __be32 3834 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr) 3835 { 3836 struct xdr_stream *xdr = &resp->xdr; 3837 __be32 *p; 3838 3839 p = xdr_reserve_space(xdr, 16); 3840 if (!p) 3841 return nfserr_resource; 3842 if (nfserr) { 3843 *p++ = cpu_to_be32(3); 3844 *p++ = cpu_to_be32(0); 3845 *p++ = cpu_to_be32(0); 3846 *p++ = cpu_to_be32(0); 3847 } 3848 else { 3849 *p++ = cpu_to_be32(3); 3850 *p++ = cpu_to_be32(setattr->sa_bmval[0]); 3851 *p++ = cpu_to_be32(setattr->sa_bmval[1]); 3852 *p++ = cpu_to_be32(setattr->sa_bmval[2]); 3853 } 3854 return nfserr; 3855 } 3856 3857 static __be32 3858 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd) 3859 { 3860 struct xdr_stream *xdr = &resp->xdr; 3861 __be32 *p; 3862 3863 if (!nfserr) { 3864 p = xdr_reserve_space(xdr, 8 + NFS4_VERIFIER_SIZE); 3865 if (!p) 3866 return nfserr_resource; 3867 p = xdr_encode_opaque_fixed(p, &scd->se_clientid, 8); 3868 p = xdr_encode_opaque_fixed(p, &scd->se_confirm, 3869 NFS4_VERIFIER_SIZE); 3870 } 3871 else if (nfserr == nfserr_clid_inuse) { 3872 p = xdr_reserve_space(xdr, 8); 3873 if (!p) 3874 return nfserr_resource; 3875 *p++ = cpu_to_be32(0); 3876 *p++ = cpu_to_be32(0); 3877 } 3878 return nfserr; 3879 } 3880 3881 static __be32 3882 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write) 3883 { 3884 struct xdr_stream *xdr = &resp->xdr; 3885 __be32 *p; 3886 3887 p = xdr_reserve_space(xdr, 16); 3888 if (!p) 3889 return nfserr_resource; 3890 *p++ = cpu_to_be32(write->wr_bytes_written); 3891 *p++ = cpu_to_be32(write->wr_how_written); 3892 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data, 3893 NFS4_VERIFIER_SIZE); 3894 return 0; 3895 } 3896 3897 static __be32 3898 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr, 3899 struct nfsd4_exchange_id *exid) 3900 { 3901 struct xdr_stream *xdr = &resp->xdr; 3902 __be32 *p; 3903 char *major_id; 3904 char *server_scope; 3905 int major_id_sz; 3906 int server_scope_sz; 3907 uint64_t minor_id = 0; 3908 3909 major_id = utsname()->nodename; 3910 major_id_sz = strlen(major_id); 3911 server_scope = utsname()->nodename; 3912 server_scope_sz = strlen(server_scope); 3913 3914 p = xdr_reserve_space(xdr, 3915 8 /* eir_clientid */ + 3916 4 /* eir_sequenceid */ + 3917 4 /* eir_flags */ + 3918 4 /* spr_how */); 3919 if (!p) 3920 return nfserr_resource; 3921 3922 p = xdr_encode_opaque_fixed(p, &exid->clientid, 8); 3923 *p++ = cpu_to_be32(exid->seqid); 3924 *p++ = cpu_to_be32(exid->flags); 3925 3926 *p++ = cpu_to_be32(exid->spa_how); 3927 3928 switch (exid->spa_how) { 3929 case SP4_NONE: 3930 break; 3931 case SP4_MACH_CRED: 3932 /* spo_must_enforce bitmap: */ 3933 nfserr = nfsd4_encode_bitmap(xdr, 3934 exid->spo_must_enforce[0], 3935 exid->spo_must_enforce[1], 3936 exid->spo_must_enforce[2]); 3937 if (nfserr) 3938 return nfserr; 3939 /* spo_must_allow bitmap: */ 3940 nfserr = nfsd4_encode_bitmap(xdr, 3941 exid->spo_must_allow[0], 3942 exid->spo_must_allow[1], 3943 exid->spo_must_allow[2]); 3944 if (nfserr) 3945 return nfserr; 3946 break; 3947 default: 3948 WARN_ON_ONCE(1); 3949 } 3950 3951 p = xdr_reserve_space(xdr, 3952 8 /* so_minor_id */ + 3953 4 /* so_major_id.len */ + 3954 (XDR_QUADLEN(major_id_sz) * 4) + 3955 4 /* eir_server_scope.len */ + 3956 (XDR_QUADLEN(server_scope_sz) * 4) + 3957 4 /* eir_server_impl_id.count (0) */); 3958 if (!p) 3959 return nfserr_resource; 3960 3961 /* The server_owner struct */ 3962 p = xdr_encode_hyper(p, minor_id); /* Minor id */ 3963 /* major id */ 3964 p = xdr_encode_opaque(p, major_id, major_id_sz); 3965 3966 /* Server scope */ 3967 p = xdr_encode_opaque(p, server_scope, server_scope_sz); 3968 3969 /* Implementation id */ 3970 *p++ = cpu_to_be32(0); /* zero length nfs_impl_id4 array */ 3971 return 0; 3972 } 3973 3974 static __be32 3975 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr, 3976 struct nfsd4_create_session *sess) 3977 { 3978 struct xdr_stream *xdr = &resp->xdr; 3979 __be32 *p; 3980 3981 p = xdr_reserve_space(xdr, 24); 3982 if (!p) 3983 return nfserr_resource; 3984 p = xdr_encode_opaque_fixed(p, sess->sessionid.data, 3985 NFS4_MAX_SESSIONID_LEN); 3986 *p++ = cpu_to_be32(sess->seqid); 3987 *p++ = cpu_to_be32(sess->flags); 3988 3989 p = xdr_reserve_space(xdr, 28); 3990 if (!p) 3991 return nfserr_resource; 3992 *p++ = cpu_to_be32(0); /* headerpadsz */ 3993 *p++ = cpu_to_be32(sess->fore_channel.maxreq_sz); 3994 *p++ = cpu_to_be32(sess->fore_channel.maxresp_sz); 3995 *p++ = cpu_to_be32(sess->fore_channel.maxresp_cached); 3996 *p++ = cpu_to_be32(sess->fore_channel.maxops); 3997 *p++ = cpu_to_be32(sess->fore_channel.maxreqs); 3998 *p++ = cpu_to_be32(sess->fore_channel.nr_rdma_attrs); 3999 4000 if (sess->fore_channel.nr_rdma_attrs) { 4001 p = xdr_reserve_space(xdr, 4); 4002 if (!p) 4003 return nfserr_resource; 4004 *p++ = cpu_to_be32(sess->fore_channel.rdma_attrs); 4005 } 4006 4007 p = xdr_reserve_space(xdr, 28); 4008 if (!p) 4009 return nfserr_resource; 4010 *p++ = cpu_to_be32(0); /* headerpadsz */ 4011 *p++ = cpu_to_be32(sess->back_channel.maxreq_sz); 4012 *p++ = cpu_to_be32(sess->back_channel.maxresp_sz); 4013 *p++ = cpu_to_be32(sess->back_channel.maxresp_cached); 4014 *p++ = cpu_to_be32(sess->back_channel.maxops); 4015 *p++ = cpu_to_be32(sess->back_channel.maxreqs); 4016 *p++ = cpu_to_be32(sess->back_channel.nr_rdma_attrs); 4017 4018 if (sess->back_channel.nr_rdma_attrs) { 4019 p = xdr_reserve_space(xdr, 4); 4020 if (!p) 4021 return nfserr_resource; 4022 *p++ = cpu_to_be32(sess->back_channel.rdma_attrs); 4023 } 4024 return 0; 4025 } 4026 4027 static __be32 4028 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr, 4029 struct nfsd4_sequence *seq) 4030 { 4031 struct xdr_stream *xdr = &resp->xdr; 4032 __be32 *p; 4033 4034 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 20); 4035 if (!p) 4036 return nfserr_resource; 4037 p = xdr_encode_opaque_fixed(p, seq->sessionid.data, 4038 NFS4_MAX_SESSIONID_LEN); 4039 *p++ = cpu_to_be32(seq->seqid); 4040 *p++ = cpu_to_be32(seq->slotid); 4041 /* Note slotid's are numbered from zero: */ 4042 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_highest_slotid */ 4043 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_target_highest_slotid */ 4044 *p++ = cpu_to_be32(seq->status_flags); 4045 4046 resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */ 4047 return 0; 4048 } 4049 4050 static __be32 4051 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr, 4052 struct nfsd4_test_stateid *test_stateid) 4053 { 4054 struct xdr_stream *xdr = &resp->xdr; 4055 struct nfsd4_test_stateid_id *stateid, *next; 4056 __be32 *p; 4057 4058 p = xdr_reserve_space(xdr, 4 + (4 * test_stateid->ts_num_ids)); 4059 if (!p) 4060 return nfserr_resource; 4061 *p++ = htonl(test_stateid->ts_num_ids); 4062 4063 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) { 4064 *p++ = stateid->ts_id_status; 4065 } 4066 4067 return 0; 4068 } 4069 4070 #ifdef CONFIG_NFSD_PNFS 4071 static __be32 4072 nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres *resp, __be32 nfserr, 4073 struct nfsd4_getdeviceinfo *gdev) 4074 { 4075 struct xdr_stream *xdr = &resp->xdr; 4076 const struct nfsd4_layout_ops *ops; 4077 u32 starting_len = xdr->buf->len, needed_len; 4078 __be32 *p; 4079 4080 p = xdr_reserve_space(xdr, 4); 4081 if (!p) 4082 return nfserr_resource; 4083 4084 *p++ = cpu_to_be32(gdev->gd_layout_type); 4085 4086 /* If maxcount is 0 then just update notifications */ 4087 if (gdev->gd_maxcount != 0) { 4088 ops = nfsd4_layout_ops[gdev->gd_layout_type]; 4089 nfserr = ops->encode_getdeviceinfo(xdr, gdev); 4090 if (nfserr) { 4091 /* 4092 * We don't bother to burden the layout drivers with 4093 * enforcing gd_maxcount, just tell the client to 4094 * come back with a bigger buffer if it's not enough. 4095 */ 4096 if (xdr->buf->len + 4 > gdev->gd_maxcount) 4097 goto toosmall; 4098 return nfserr; 4099 } 4100 } 4101 4102 if (gdev->gd_notify_types) { 4103 p = xdr_reserve_space(xdr, 4 + 4); 4104 if (!p) 4105 return nfserr_resource; 4106 *p++ = cpu_to_be32(1); /* bitmap length */ 4107 *p++ = cpu_to_be32(gdev->gd_notify_types); 4108 } else { 4109 p = xdr_reserve_space(xdr, 4); 4110 if (!p) 4111 return nfserr_resource; 4112 *p++ = 0; 4113 } 4114 4115 return 0; 4116 toosmall: 4117 dprintk("%s: maxcount too small\n", __func__); 4118 needed_len = xdr->buf->len + 4 /* notifications */; 4119 xdr_truncate_encode(xdr, starting_len); 4120 p = xdr_reserve_space(xdr, 4); 4121 if (!p) 4122 return nfserr_resource; 4123 *p++ = cpu_to_be32(needed_len); 4124 return nfserr_toosmall; 4125 } 4126 4127 static __be32 4128 nfsd4_encode_layoutget(struct nfsd4_compoundres *resp, __be32 nfserr, 4129 struct nfsd4_layoutget *lgp) 4130 { 4131 struct xdr_stream *xdr = &resp->xdr; 4132 const struct nfsd4_layout_ops *ops; 4133 __be32 *p; 4134 4135 p = xdr_reserve_space(xdr, 36 + sizeof(stateid_opaque_t)); 4136 if (!p) 4137 return nfserr_resource; 4138 4139 *p++ = cpu_to_be32(1); /* we always set return-on-close */ 4140 *p++ = cpu_to_be32(lgp->lg_sid.si_generation); 4141 p = xdr_encode_opaque_fixed(p, &lgp->lg_sid.si_opaque, 4142 sizeof(stateid_opaque_t)); 4143 4144 *p++ = cpu_to_be32(1); /* we always return a single layout */ 4145 p = xdr_encode_hyper(p, lgp->lg_seg.offset); 4146 p = xdr_encode_hyper(p, lgp->lg_seg.length); 4147 *p++ = cpu_to_be32(lgp->lg_seg.iomode); 4148 *p++ = cpu_to_be32(lgp->lg_layout_type); 4149 4150 ops = nfsd4_layout_ops[lgp->lg_layout_type]; 4151 return ops->encode_layoutget(xdr, lgp); 4152 } 4153 4154 static __be32 4155 nfsd4_encode_layoutcommit(struct nfsd4_compoundres *resp, __be32 nfserr, 4156 struct nfsd4_layoutcommit *lcp) 4157 { 4158 struct xdr_stream *xdr = &resp->xdr; 4159 __be32 *p; 4160 4161 p = xdr_reserve_space(xdr, 4); 4162 if (!p) 4163 return nfserr_resource; 4164 *p++ = cpu_to_be32(lcp->lc_size_chg); 4165 if (lcp->lc_size_chg) { 4166 p = xdr_reserve_space(xdr, 8); 4167 if (!p) 4168 return nfserr_resource; 4169 p = xdr_encode_hyper(p, lcp->lc_newsize); 4170 } 4171 4172 return 0; 4173 } 4174 4175 static __be32 4176 nfsd4_encode_layoutreturn(struct nfsd4_compoundres *resp, __be32 nfserr, 4177 struct nfsd4_layoutreturn *lrp) 4178 { 4179 struct xdr_stream *xdr = &resp->xdr; 4180 __be32 *p; 4181 4182 p = xdr_reserve_space(xdr, 4); 4183 if (!p) 4184 return nfserr_resource; 4185 *p++ = cpu_to_be32(lrp->lrs_present); 4186 if (lrp->lrs_present) 4187 return nfsd4_encode_stateid(xdr, &lrp->lr_sid); 4188 return 0; 4189 } 4190 #endif /* CONFIG_NFSD_PNFS */ 4191 4192 static __be32 4193 nfsd42_encode_write_res(struct nfsd4_compoundres *resp, struct nfsd42_write_res *write) 4194 { 4195 __be32 *p; 4196 4197 p = xdr_reserve_space(&resp->xdr, 4 + 8 + 4 + NFS4_VERIFIER_SIZE); 4198 if (!p) 4199 return nfserr_resource; 4200 4201 *p++ = cpu_to_be32(0); 4202 p = xdr_encode_hyper(p, write->wr_bytes_written); 4203 *p++ = cpu_to_be32(write->wr_stable_how); 4204 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data, 4205 NFS4_VERIFIER_SIZE); 4206 return nfs_ok; 4207 } 4208 4209 static __be32 4210 nfsd4_encode_copy(struct nfsd4_compoundres *resp, __be32 nfserr, 4211 struct nfsd4_copy *copy) 4212 { 4213 __be32 *p; 4214 4215 nfserr = nfsd42_encode_write_res(resp, ©->cp_res); 4216 if (nfserr) 4217 return nfserr; 4218 4219 p = xdr_reserve_space(&resp->xdr, 4 + 4); 4220 *p++ = xdr_one; /* cr_consecutive */ 4221 *p++ = cpu_to_be32(copy->cp_synchronous); 4222 return 0; 4223 } 4224 4225 static __be32 4226 nfsd4_encode_seek(struct nfsd4_compoundres *resp, __be32 nfserr, 4227 struct nfsd4_seek *seek) 4228 { 4229 __be32 *p; 4230 4231 p = xdr_reserve_space(&resp->xdr, 4 + 8); 4232 *p++ = cpu_to_be32(seek->seek_eof); 4233 p = xdr_encode_hyper(p, seek->seek_pos); 4234 4235 return 0; 4236 } 4237 4238 static __be32 4239 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p) 4240 { 4241 return nfserr; 4242 } 4243 4244 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *); 4245 4246 /* 4247 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1 4248 * since we don't need to filter out obsolete ops as this is 4249 * done in the decoding phase. 4250 */ 4251 static const nfsd4_enc nfsd4_enc_ops[] = { 4252 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access, 4253 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close, 4254 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit, 4255 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create, 4256 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop, 4257 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop, 4258 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr, 4259 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh, 4260 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link, 4261 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock, 4262 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt, 4263 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku, 4264 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop, 4265 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop, 4266 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop, 4267 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open, 4268 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop, 4269 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm, 4270 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade, 4271 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop, 4272 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop, 4273 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop, 4274 [OP_READ] = (nfsd4_enc)nfsd4_encode_read, 4275 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir, 4276 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink, 4277 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove, 4278 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename, 4279 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop, 4280 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop, 4281 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop, 4282 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo, 4283 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr, 4284 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid, 4285 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop, 4286 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop, 4287 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write, 4288 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop, 4289 4290 /* NFSv4.1 operations */ 4291 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop, 4292 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session, 4293 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id, 4294 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session, 4295 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_noop, 4296 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_noop, 4297 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 4298 #ifdef CONFIG_NFSD_PNFS 4299 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_getdeviceinfo, 4300 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 4301 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_layoutcommit, 4302 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_layoutget, 4303 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_layoutreturn, 4304 #else 4305 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop, 4306 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop, 4307 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop, 4308 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop, 4309 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop, 4310 #endif 4311 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name, 4312 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence, 4313 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop, 4314 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid, 4315 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop, 4316 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop, 4317 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop, 4318 4319 /* NFSv4.2 operations */ 4320 [OP_ALLOCATE] = (nfsd4_enc)nfsd4_encode_noop, 4321 [OP_COPY] = (nfsd4_enc)nfsd4_encode_copy, 4322 [OP_COPY_NOTIFY] = (nfsd4_enc)nfsd4_encode_noop, 4323 [OP_DEALLOCATE] = (nfsd4_enc)nfsd4_encode_noop, 4324 [OP_IO_ADVISE] = (nfsd4_enc)nfsd4_encode_noop, 4325 [OP_LAYOUTERROR] = (nfsd4_enc)nfsd4_encode_noop, 4326 [OP_LAYOUTSTATS] = (nfsd4_enc)nfsd4_encode_noop, 4327 [OP_OFFLOAD_CANCEL] = (nfsd4_enc)nfsd4_encode_noop, 4328 [OP_OFFLOAD_STATUS] = (nfsd4_enc)nfsd4_encode_noop, 4329 [OP_READ_PLUS] = (nfsd4_enc)nfsd4_encode_noop, 4330 [OP_SEEK] = (nfsd4_enc)nfsd4_encode_seek, 4331 [OP_WRITE_SAME] = (nfsd4_enc)nfsd4_encode_noop, 4332 [OP_CLONE] = (nfsd4_enc)nfsd4_encode_noop, 4333 }; 4334 4335 /* 4336 * Calculate whether we still have space to encode repsize bytes. 4337 * There are two considerations: 4338 * - For NFS versions >=4.1, the size of the reply must stay within 4339 * session limits 4340 * - For all NFS versions, we must stay within limited preallocated 4341 * buffer space. 4342 * 4343 * This is called before the operation is processed, so can only provide 4344 * an upper estimate. For some nonidempotent operations (such as 4345 * getattr), it's not necessarily a problem if that estimate is wrong, 4346 * as we can fail it after processing without significant side effects. 4347 */ 4348 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize) 4349 { 4350 struct xdr_buf *buf = &resp->rqstp->rq_res; 4351 struct nfsd4_slot *slot = resp->cstate.slot; 4352 4353 if (buf->len + respsize <= buf->buflen) 4354 return nfs_ok; 4355 if (!nfsd4_has_session(&resp->cstate)) 4356 return nfserr_resource; 4357 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) { 4358 WARN_ON_ONCE(1); 4359 return nfserr_rep_too_big_to_cache; 4360 } 4361 return nfserr_rep_too_big; 4362 } 4363 4364 void 4365 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op) 4366 { 4367 struct xdr_stream *xdr = &resp->xdr; 4368 struct nfs4_stateowner *so = resp->cstate.replay_owner; 4369 struct svc_rqst *rqstp = resp->rqstp; 4370 const struct nfsd4_operation *opdesc = op->opdesc; 4371 int post_err_offset; 4372 nfsd4_enc encoder; 4373 __be32 *p; 4374 4375 p = xdr_reserve_space(xdr, 8); 4376 if (!p) { 4377 WARN_ON_ONCE(1); 4378 return; 4379 } 4380 *p++ = cpu_to_be32(op->opnum); 4381 post_err_offset = xdr->buf->len; 4382 4383 if (op->opnum == OP_ILLEGAL) 4384 goto status; 4385 if (op->status && opdesc && 4386 !(opdesc->op_flags & OP_NONTRIVIAL_ERROR_ENCODE)) 4387 goto status; 4388 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) || 4389 !nfsd4_enc_ops[op->opnum]); 4390 encoder = nfsd4_enc_ops[op->opnum]; 4391 op->status = encoder(resp, op->status, &op->u); 4392 if (opdesc && opdesc->op_release) 4393 opdesc->op_release(&op->u); 4394 xdr_commit_encode(xdr); 4395 4396 /* nfsd4_check_resp_size guarantees enough room for error status */ 4397 if (!op->status) { 4398 int space_needed = 0; 4399 if (!nfsd4_last_compound_op(rqstp)) 4400 space_needed = COMPOUND_ERR_SLACK_SPACE; 4401 op->status = nfsd4_check_resp_size(resp, space_needed); 4402 } 4403 if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) { 4404 struct nfsd4_slot *slot = resp->cstate.slot; 4405 4406 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) 4407 op->status = nfserr_rep_too_big_to_cache; 4408 else 4409 op->status = nfserr_rep_too_big; 4410 } 4411 if (op->status == nfserr_resource || 4412 op->status == nfserr_rep_too_big || 4413 op->status == nfserr_rep_too_big_to_cache) { 4414 /* 4415 * The operation may have already been encoded or 4416 * partially encoded. No op returns anything additional 4417 * in the case of one of these three errors, so we can 4418 * just truncate back to after the status. But it's a 4419 * bug if we had to do this on a non-idempotent op: 4420 */ 4421 warn_on_nonidempotent_op(op); 4422 xdr_truncate_encode(xdr, post_err_offset); 4423 } 4424 if (so) { 4425 int len = xdr->buf->len - post_err_offset; 4426 4427 so->so_replay.rp_status = op->status; 4428 so->so_replay.rp_buflen = len; 4429 read_bytes_from_xdr_buf(xdr->buf, post_err_offset, 4430 so->so_replay.rp_buf, len); 4431 } 4432 status: 4433 /* Note that op->status is already in network byte order: */ 4434 write_bytes_to_xdr_buf(xdr->buf, post_err_offset - 4, &op->status, 4); 4435 } 4436 4437 /* 4438 * Encode the reply stored in the stateowner reply cache 4439 * 4440 * XDR note: do not encode rp->rp_buflen: the buffer contains the 4441 * previously sent already encoded operation. 4442 */ 4443 void 4444 nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op) 4445 { 4446 __be32 *p; 4447 struct nfs4_replay *rp = op->replay; 4448 4449 BUG_ON(!rp); 4450 4451 p = xdr_reserve_space(xdr, 8 + rp->rp_buflen); 4452 if (!p) { 4453 WARN_ON_ONCE(1); 4454 return; 4455 } 4456 *p++ = cpu_to_be32(op->opnum); 4457 *p++ = rp->rp_status; /* already xdr'ed */ 4458 4459 p = xdr_encode_opaque_fixed(p, rp->rp_buf, rp->rp_buflen); 4460 } 4461 4462 int 4463 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p) 4464 { 4465 return xdr_ressize_check(rqstp, p); 4466 } 4467 4468 void nfsd4_release_compoundargs(struct svc_rqst *rqstp) 4469 { 4470 struct nfsd4_compoundargs *args = rqstp->rq_argp; 4471 4472 if (args->ops != args->iops) { 4473 kfree(args->ops); 4474 args->ops = args->iops; 4475 } 4476 kfree(args->tmpp); 4477 args->tmpp = NULL; 4478 while (args->to_free) { 4479 struct svcxdr_tmpbuf *tb = args->to_free; 4480 args->to_free = tb->next; 4481 kfree(tb); 4482 } 4483 } 4484 4485 int 4486 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p) 4487 { 4488 struct nfsd4_compoundargs *args = rqstp->rq_argp; 4489 4490 if (rqstp->rq_arg.head[0].iov_len % 4) { 4491 /* client is nuts */ 4492 dprintk("%s: compound not properly padded! (peeraddr=%pISc xid=0x%x)", 4493 __func__, svc_addr(rqstp), be32_to_cpu(rqstp->rq_xid)); 4494 return 0; 4495 } 4496 args->p = p; 4497 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len; 4498 args->pagelist = rqstp->rq_arg.pages; 4499 args->pagelen = rqstp->rq_arg.page_len; 4500 args->tail = false; 4501 args->tmpp = NULL; 4502 args->to_free = NULL; 4503 args->ops = args->iops; 4504 args->rqstp = rqstp; 4505 4506 return !nfsd4_decode_compound(args); 4507 } 4508 4509 int 4510 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p) 4511 { 4512 /* 4513 * All that remains is to write the tag and operation count... 4514 */ 4515 struct nfsd4_compoundres *resp = rqstp->rq_resp; 4516 struct xdr_buf *buf = resp->xdr.buf; 4517 4518 WARN_ON_ONCE(buf->len != buf->head[0].iov_len + buf->page_len + 4519 buf->tail[0].iov_len); 4520 4521 rqstp->rq_next_page = resp->xdr.page_ptr + 1; 4522 4523 p = resp->tagp; 4524 *p++ = htonl(resp->taglen); 4525 memcpy(p, resp->tag, resp->taglen); 4526 p += XDR_QUADLEN(resp->taglen); 4527 *p++ = htonl(resp->opcnt); 4528 4529 nfsd4_sequence_done(resp); 4530 return 1; 4531 } 4532 4533 /* 4534 * Local variables: 4535 * c-basic-offset: 8 4536 * End: 4537 */ 4538