1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 /* 22 * Copyright (c) 1998, 2010, Oracle and/or its affiliates. All rights reserved. 23 */ 24 25 #include <sys/types.h> 26 #include <sys/t_lock.h> 27 #include <sys/param.h> 28 #include <sys/time.h> 29 #include <sys/systm.h> 30 #include <sys/sysmacros.h> 31 #include <sys/resource.h> 32 #include <sys/signal.h> 33 #include <sys/cred.h> 34 #include <sys/user.h> 35 #include <sys/buf.h> 36 #include <sys/vfs.h> 37 #include <sys/stat.h> 38 #include <sys/vnode.h> 39 #include <sys/mode.h> 40 #include <sys/proc.h> 41 #include <sys/disp.h> 42 #include <sys/file.h> 43 #include <sys/fcntl.h> 44 #include <sys/flock.h> 45 #include <sys/kmem.h> 46 #include <sys/uio.h> 47 #include <sys/dnlc.h> 48 #include <sys/conf.h> 49 #include <sys/errno.h> 50 #include <sys/mman.h> 51 #include <sys/fbuf.h> 52 #include <sys/pathname.h> 53 #include <sys/debug.h> 54 #include <sys/vmsystm.h> 55 #include <sys/cmn_err.h> 56 #include <sys/dirent.h> 57 #include <sys/errno.h> 58 #include <sys/modctl.h> 59 #include <sys/statvfs.h> 60 #include <sys/mount.h> 61 #include <sys/sunddi.h> 62 #include <sys/bootconf.h> 63 #include <sys/policy.h> 64 65 #include <vm/hat.h> 66 #include <vm/page.h> 67 #include <vm/pvn.h> 68 #include <vm/as.h> 69 #include <vm/seg.h> 70 #include <vm/seg_map.h> 71 #include <vm/seg_kmem.h> 72 #include <vm/seg_vn.h> 73 #include <vm/rm.h> 74 #include <vm/page.h> 75 #include <sys/swap.h> 76 77 78 #include <fs/fs_subr.h> 79 80 81 #include <sys/fs/udf_volume.h> 82 #include <sys/fs/udf_inode.h> 83 84 int32_t ud_trace; 85 86 /* 87 * HASH chains and mutex 88 */ 89 extern union ihead ud_ihead[UD_HASH_SZ]; 90 extern kmutex_t ud_icache_lock; 91 92 93 extern kmutex_t ud_sync_busy; 94 /* 95 * udf_vfs list manipulation routines 96 */ 97 extern kmutex_t udf_vfs_mutex; 98 extern struct udf_vfs *udf_vfs_instances; 99 100 /* 101 * Used to verify that a given entry on the udf_instances list (see below) 102 * still refers to a mounted file system. 103 * 104 * XXX: This is a crock that substitutes for proper locking to coordinate 105 * updates to and uses of the entries in udf_instances. 106 */ 107 struct check_node { 108 struct vfs *vfsp; 109 struct udf_vfs *udf_vfs; 110 dev_t vfs_dev; 111 }; 112 113 vfs_t *ud_still_mounted(struct check_node *); 114 void ud_checkclean(struct vfs *, 115 struct udf_vfs *, dev_t, time_t); 116 int32_t ud_icheck(struct udf_vfs *); 117 void ud_flushi(int32_t); 118 119 /* 120 * Link udf_vfsp in at the head of the list of udf_vfs_instances. 121 */ 122 void 123 ud_vfs_add(struct udf_vfs *udf_vfsp) 124 { 125 mutex_enter(&udf_vfs_mutex); 126 udf_vfsp->udf_next = udf_vfs_instances; 127 udf_vfs_instances = udf_vfsp; 128 mutex_exit(&udf_vfs_mutex); 129 } 130 131 /* 132 * Remove udf_vfsp from the list of udf_vfs_instances. 133 * 134 * Does no error checking; udf_vfsp is assumed to actually be on the list. 135 */ 136 void 137 ud_vfs_remove(struct udf_vfs *udf_vfsp) 138 { 139 struct udf_vfs **delpt = &udf_vfs_instances; 140 141 mutex_enter(&udf_vfs_mutex); 142 for (; *delpt != NULL; delpt = &((*delpt)->udf_next)) { 143 if (*delpt == udf_vfsp) { 144 *delpt = udf_vfsp->udf_next; 145 udf_vfsp->udf_next = NULL; 146 break; 147 } 148 } 149 mutex_exit(&udf_vfs_mutex); 150 } 151 152 /* 153 * Search for the prn in the array 154 * of partitions and translate 155 * to the disk block number 156 */ 157 daddr_t 158 ud_xlate_to_daddr(struct udf_vfs *udf_vfsp, 159 uint16_t prn, uint32_t blkno, int32_t nblks, uint32_t *count) 160 { 161 int32_t i; 162 struct ud_map *map; 163 struct ud_part *ud_parts; 164 uint32_t lblkno, retblkno = 0, *addr; 165 uint32_t begin_req, end_req; 166 uint32_t begin_bad, end_bad; 167 168 ud_printf("ud_xlate_to_daddr\n"); 169 170 /* Is prn valid */ 171 if (prn < udf_vfsp->udf_nmaps) { 172 map = &(udf_vfsp->udf_maps[prn]); 173 174 if (map->udm_flags == UDM_MAP_VPM) { 175 /* 176 * Map is Virtual Parition Map 177 * first check for the appropriate 178 * table and then return the converted 179 * block number 180 */ 181 for (i = 0; i < map->udm_nent; i++) { 182 if (blkno < map->udm_count[i]) { 183 addr = map->udm_addr[i]; 184 lblkno = SWAP_32(addr[blkno]); 185 *count = 1; 186 break; 187 } else { 188 blkno -= map->udm_count[i]; 189 } 190 } 191 } else if (map->udm_flags == UDM_MAP_SPM) { 192 struct stbl *stbl; 193 struct stbl_entry *te; 194 int32_t entry_count; 195 196 /* 197 * Map type is Sparable Parition Map 198 * if the block is in the map 199 * return the translated block 200 * other wise use the regular 201 * partition stuff 202 */ 203 begin_req = blkno; 204 end_req = begin_req + nblks; 205 206 stbl = (struct stbl *)map->udm_spaddr[0]; 207 te = (struct stbl_entry *)&stbl->stbl_entry; 208 entry_count = SWAP_16(stbl->stbl_len); 209 210 for (i = 0; i < entry_count; i++, te++) { 211 begin_bad = SWAP_32(te->sent_ol); 212 end_bad = begin_bad + map->udm_plen; 213 214 /* 215 * Either unmapped or reserved 216 * or defective. need not consider 217 */ 218 if (begin_bad >= (uint32_t)0xFFFFFFF0) { 219 continue; 220 } 221 if ((end_req < begin_bad) || 222 (begin_req >= end_bad)) { 223 continue; 224 } 225 226 if (begin_req < begin_bad) { 227 ASSERT(end_req >= begin_bad); 228 end_req = begin_bad; 229 } else { 230 retblkno = SWAP_32(te->sent_ml) + 231 begin_req - begin_bad; 232 if (end_req < end_bad) { 233 *count = end_req - begin_req; 234 } else { 235 *count = end_bad - begin_req; 236 } 237 goto end; 238 } 239 } 240 241 lblkno = blkno; 242 *count = end_req - begin_req; 243 } else { 244 /* 245 * regular partition 246 */ 247 lblkno = blkno; 248 *count = nblks; 249 } 250 ud_parts = udf_vfsp->udf_parts; 251 for (i = 0; i < udf_vfsp->udf_npart; i++) { 252 if (map->udm_pn == ud_parts->udp_number) { 253 /* 254 * Check if the block is inside 255 * the partition or not 256 */ 257 if (lblkno >= ud_parts->udp_length) { 258 retblkno = 0; 259 } else { 260 retblkno = ud_parts->udp_start + lblkno; 261 } 262 goto end; 263 } 264 ud_parts ++; 265 } 266 } 267 268 end: 269 return (retblkno); 270 } 271 272 #ifdef UNDEF 273 uint32_t 274 ud_xlate_to_addr(struct udf_vfs *udf_vfsp, 275 uint16_t prn, daddr_t blkno, int32_t lad) 276 { 277 int32_t i; 278 struct ud_part *ud_parts; 279 280 ud_printf("ud_xlate_to_addr\n"); 281 282 if (lad == 0) { 283 return (blkno); 284 } 285 ud_parts = udf_vfsp->udf_parts; 286 for (i = 0; i < udf_vfsp->udf_npart; i++) { 287 if (prn == ud_parts->udp_number) { 288 return (blkno - ud_parts->udp_start); 289 } 290 } 291 return (0); 292 } 293 #endif 294 295 /* 296 * Directories do not have holes 297 */ 298 int32_t 299 ud_ip_off2bno(struct ud_inode *ip, uint32_t offset, uint32_t *bno) 300 { 301 int32_t i, error; 302 struct icb_ext *iext; 303 304 ASSERT(ip->i_type == VDIR); 305 306 if (ip->i_desc_type == ICB_FLAG_ONE_AD) { 307 *bno = ip->i_icb_block; 308 return (0); 309 } 310 311 if ((error = ud_read_icb_till_off(ip, (u_offset_t)offset)) != 0) { 312 return (error); 313 } 314 315 for (i = 0; i < ip->i_ext_used; i++) { 316 iext = &ip->i_ext[i]; 317 if ((iext->ib_offset <= offset) && 318 (offset < (iext->ib_offset + iext->ib_count))) { 319 *bno = iext->ib_block + 320 ((offset - iext->ib_offset) >> 321 ip->i_udf->udf_l2b_shift); 322 break; 323 } 324 } 325 return (0); 326 } 327 328 static uint32_t cum_sec[] = { 329 0x0, 0x28de80, 0x4dc880, 0x76a700, 0x9e3400, 0xc71280, 330 0xee9f80, 0x1177e00, 0x1405c80, 0x167e980, 0x190c800, 0x1b85500 331 }; 332 static uint32_t cum_sec_leap[] = { 333 0x0, 0x28de80, 0x4f1a00, 0x77f880, 0x9f8580, 0xc86400, 334 0xeff100, 0x118cf80, 0x141ae00, 0x1693b00, 0x1921980, 0x1b9a680 335 }; 336 337 #define DAYS_PER_YEAR 365 338 339 #define SEC_PER_DAY 0x15180 340 #define SEC_PER_YEAR 0x1e13380 341 342 343 /* This holds good till yr 2100 */ 344 void 345 ud_dtime2utime(struct timespec32 *utime, 346 struct tstamp const *dtime) 347 { 348 int16_t year, tzone; 349 int32_t sec; 350 uint32_t *cp; 351 352 ud_printf("ud_dtime2utime\n"); 353 354 year = SWAP_16(dtime->ts_year); 355 cp = (year % 4) ? cum_sec : cum_sec_leap; 356 357 utime->tv_sec = cp[dtime->ts_month - 1]; 358 utime->tv_sec += (dtime->ts_day - 1) * SEC_PER_DAY; 359 utime->tv_sec += ((dtime->ts_hour * 60) + 360 dtime->ts_min) * 60 + 361 dtime->ts_sec; 362 363 tzone = SWAP_16(dtime->ts_tzone); 364 if ((tzone & TMODE) == 0x1000) { 365 /* Local time */ 366 if ((tzone & TINVALID) != TINVALID) { 367 if (tzone & TSIGN) { 368 /* 369 * Sign extend the tzone 370 */ 371 sec = tzone | 0xFFFFF000; 372 } else { 373 sec = tzone & TOFFSET; 374 } 375 sec *= 60; 376 utime->tv_sec -= sec; 377 } 378 } 379 380 utime->tv_nsec = ((((dtime->ts_csec * 100) + 381 dtime->ts_husec) * 100) + 382 dtime->ts_usec) * 1000; 383 if (year >= 1970) { 384 utime->tv_sec += (year - 1970) * SEC_PER_YEAR; 385 utime->tv_sec += ((year - 1969) / 4) * SEC_PER_DAY; 386 } else { 387 utime->tv_sec = ((1970 - year) * SEC_PER_YEAR + 388 ((1972 - year) / 4) * SEC_PER_DAY - 389 utime->tv_sec) * -1; 390 if (utime->tv_nsec) { 391 utime->tv_sec++; 392 utime->tv_nsec = 1000 * 1000 * 1000 - utime->tv_nsec; 393 } 394 } 395 } 396 397 void 398 ud_utime2dtime(struct timespec32 const *utime, 399 struct tstamp *dtime) 400 { 401 time32_t sec = utime->tv_sec; 402 int32_t usec = utime->tv_nsec / 1000; 403 uint32_t lyrs, nyrs, dummy; 404 uint32_t *cp; 405 int32_t before = 0; 406 407 ud_printf("ud_utime2dtime\n"); 408 409 if (sec < 0) { 410 before = 1; 411 sec = sec * -1; 412 if (usec) { 413 sec = sec + 1; 414 usec = 1000 * 1000 - usec; 415 } 416 } 417 418 dtime->ts_csec = usec / 10000; 419 usec %= 10000; 420 dtime->ts_husec = usec / 100; 421 dtime->ts_usec = usec % 100; 422 423 nyrs = sec / SEC_PER_YEAR; 424 if (before == 0) { 425 lyrs = (nyrs + 1) / 4; 426 } else { 427 lyrs = (nyrs + 2) / 4; 428 } 429 if (nyrs != ((sec - (lyrs * SEC_PER_DAY)) / SEC_PER_YEAR)) { 430 nyrs--; 431 if (before == 0) { 432 lyrs = (nyrs + 1) / 4; 433 } else { 434 lyrs = (nyrs + 2) / 4; 435 } 436 } 437 sec -= nyrs * SEC_PER_YEAR + lyrs * SEC_PER_DAY; 438 439 if (before == 1) { 440 nyrs = 1970 - nyrs; 441 if (sec != 0) { 442 nyrs --; 443 if ((nyrs % 4) == 0) { 444 sec = SEC_PER_YEAR + SEC_PER_DAY - sec; 445 } else { 446 sec = SEC_PER_YEAR - sec; 447 } 448 } 449 } else { 450 nyrs += 1970; 451 } 452 cp = (nyrs % 4) ? cum_sec : cum_sec_leap; 453 dummy = sec / (SEC_PER_DAY * 29); 454 if (dummy > 11) { 455 dummy = 11; 456 } 457 if (sec < cp[dummy]) { 458 dummy--; 459 } 460 dtime->ts_year = SWAP_16(nyrs); 461 dtime->ts_month = dummy; 462 sec -= cp[dtime->ts_month]; 463 dtime->ts_month++; 464 dtime->ts_day = sec / SEC_PER_DAY; 465 sec -= dtime->ts_day * SEC_PER_DAY; 466 dtime->ts_day++; 467 dtime->ts_hour = sec / SECS_PER_HOUR; 468 sec -= dtime->ts_hour * SECS_PER_HOUR; 469 dtime->ts_min = sec / SECS_PER_MIN; 470 sec -= dtime->ts_min * SECS_PER_MIN; 471 dtime->ts_sec = (uint8_t)sec; 472 473 /* GMT offset is 0 */ 474 dtime->ts_tzone = SWAP_16(0x1000); 475 } 476 477 478 int32_t 479 ud_syncip(struct ud_inode *ip, int32_t flags, int32_t waitfor) 480 { 481 int32_t error; 482 struct vnode *vp = ITOV(ip); 483 484 ud_printf("ud_syncip\n"); 485 486 if (ip->i_udf == NULL) { 487 return (0); 488 } 489 490 if (!vn_has_cached_data(vp) || (vp->v_type == VCHR)) { 491 error = 0; 492 } else { 493 rw_exit(&ip->i_contents); 494 error = VOP_PUTPAGE(vp, (offset_t)0, 495 (uint32_t)0, flags, CRED(), NULL); 496 rw_enter(&ip->i_contents, RW_WRITER); 497 } 498 499 if (ip->i_flag & (IUPD |IACC | ICHG | IMOD)) { 500 ud_iupdat(ip, waitfor); 501 } 502 503 return (error); 504 } 505 506 507 /* ARGSUSED */ 508 int32_t 509 ud_fbwrite(struct fbuf *fbp, struct ud_inode *ip) 510 { 511 ud_printf("ud_fbwrite\n"); 512 513 ASSERT(fbp != NULL); 514 515 return (fbwrite(fbp)); 516 } 517 518 519 void 520 ud_sbwrite(struct udf_vfs *udf_vfsp) 521 { 522 struct log_vol_int_desc *lvid; 523 struct ud_part *ud_part; 524 struct lvid_iu *iu; 525 uint32_t *temp; 526 int32_t i, c; 527 528 ud_printf("ud_sbwrite\n"); 529 ASSERT(udf_vfsp); 530 ASSERT(MUTEX_HELD(&udf_vfsp->udf_lock)); 531 532 /* 533 * updatable information in the superblock 534 * integrity type, udf_maxuniq, udf_nfiles, udf_ndirs 535 * udp_nfree in lvid 536 */ 537 lvid = (struct log_vol_int_desc *)udf_vfsp->udf_lvid; 538 if (udf_vfsp->udf_clean == UDF_DIRTY) { 539 lvid->lvid_int_type = SWAP_32(LOG_VOL_OPEN_INT); 540 } else { 541 lvid->lvid_int_type = SWAP_32(LOG_VOL_CLOSE_INT); 542 } 543 lvid->lvid_uniqid = SWAP_64(udf_vfsp->udf_maxuniq); 544 temp = lvid->lvid_fst; 545 c = SWAP_32(lvid->lvid_npart); 546 ud_part = udf_vfsp->udf_parts; 547 for (i = 0; i < c; i++) { 548 temp[i] = SWAP_32(ud_part->udp_nfree); 549 ud_part++; 550 } 551 iu = (struct lvid_iu *)(temp + c * 2); 552 iu->lvidiu_nfiles = SWAP_32(udf_vfsp->udf_nfiles); 553 iu->lvidiu_ndirs = SWAP_32(udf_vfsp->udf_ndirs); 554 555 ud_update_regid(&iu->lvidiu_regid); 556 557 ud_make_tag(udf_vfsp, &lvid->lvid_tag, 558 UD_LOG_VOL_INT, udf_vfsp->udf_iseq_loc, 559 sizeof (struct log_vol_int_desc) - 8 + 560 8 * udf_vfsp->udf_npart + 561 SWAP_32(lvid->lvid_liu)); 562 563 /* 564 * Don't release the buffer after writing to the disk 565 */ 566 bwrite2(udf_vfsp->udf_iseq); 567 } 568 569 570 int32_t 571 ud_sync_indir(struct ud_inode *ip) 572 { 573 int32_t elen; 574 575 ud_printf("ud_sync_indir\n"); 576 577 if (ip->i_desc_type == ICB_FLAG_ONE_AD) { 578 return (0); 579 } else if (ip->i_desc_type == ICB_FLAG_SHORT_AD) { 580 elen = sizeof (struct short_ad); 581 } else if (ip->i_desc_type == ICB_FLAG_LONG_AD) { 582 elen = sizeof (struct long_ad); 583 } else { 584 return (EINVAL); 585 } 586 587 if (ip->i_astrat == STRAT_TYPE4) { 588 int32_t ndentry; 589 590 ndentry = ip->i_max_emb / elen; 591 if (ip->i_ext_used < ndentry) { 592 return (0); 593 } 594 ASSERT(ip->i_con); 595 } else { 596 cmn_err(CE_WARN, "unsupported strategy type\n"); 597 return (EINVAL); 598 } 599 600 return (0); 601 } 602 603 void 604 ud_update(int32_t flag) 605 { 606 struct vfs *vfsp; 607 struct udf_vfs *udfsp, *udfsnext, *update_list = NULL; 608 int32_t check_cnt = 0; 609 size_t check_size; 610 struct check_node *check_list, *ptr; 611 time_t start_time; 612 613 ud_printf("ud_update\n"); 614 615 mutex_enter(&ud_sync_busy); 616 /* 617 * Examine all udf_vfs structures and add those that we can lock to the 618 * update list. This is so that we don't hold the list lock for a 619 * long time. If vfs_lock fails for a file system instance, then skip 620 * it because somebody is doing a unmount on it. 621 */ 622 mutex_enter(&udf_vfs_mutex); 623 for (udfsp = udf_vfs_instances; 624 udfsp != NULL; udfsp = udfsp->udf_next) { 625 vfsp = udfsp->udf_vfs; 626 if (vfs_lock(vfsp) != 0) { 627 continue; 628 } 629 udfsp->udf_wnext = update_list; 630 update_list = udfsp; 631 check_cnt++; 632 } 633 mutex_exit(&udf_vfs_mutex); 634 635 if (update_list == NULL) { 636 mutex_exit(&ud_sync_busy); 637 return; 638 } 639 640 check_size = sizeof (struct check_node) * check_cnt; 641 check_list = ptr = kmem_alloc(check_size, KM_NOSLEEP); 642 643 /* 644 * Write back modified superblocks. 645 * Consistency check that the superblock of 646 * each file system is still in the buffer cache. 647 * 648 * Note that the update_list traversal is done without the protection 649 * of an overall list lock, so it's necessary to rely on the fact that 650 * each entry of the list is vfs_locked when moving from one entry to 651 * the next. This works because a concurrent attempt to add an entry 652 * to another thread's update_list won't find it, since it'll already 653 * be locked. 654 */ 655 check_cnt = 0; 656 for (udfsp = update_list; udfsp != NULL; udfsp = udfsnext) { 657 /* 658 * Need to grab the next ptr before we unlock this one so 659 * another thread doesn't grab it and change it before we move 660 * on to the next vfs. (Once we unlock it, it's ok if another 661 * thread finds it to add it to its own update_list; we don't 662 * attempt to refer to it through our list any more.) 663 */ 664 udfsnext = udfsp->udf_wnext; 665 vfsp = udfsp->udf_vfs; 666 667 if (!vfsp->vfs_data) { 668 vfs_unlock(vfsp); 669 continue; 670 } 671 mutex_enter(&udfsp->udf_lock); 672 673 /* 674 * Build up the STABLE check list, so we can unlock the vfs 675 * until we do the actual checking. 676 */ 677 if (check_list != NULL) { 678 if ((udfsp->udf_flags & UDF_FL_RDONLY) == 0) { 679 ptr->vfsp = vfsp; 680 ptr->udf_vfs = udfsp; 681 ptr->vfs_dev = vfsp->vfs_dev; 682 ptr++; 683 check_cnt++; 684 } 685 } 686 687 /* 688 * superblock is not modified 689 */ 690 if (udfsp->udf_mod == 0) { 691 mutex_exit(&udfsp->udf_lock); 692 vfs_unlock(vfsp); 693 continue; 694 } 695 if ((udfsp->udf_flags & UDF_FL_RDONLY) == 0) { 696 mutex_exit(&udfsp->udf_lock); 697 mutex_exit(&ud_sync_busy); 698 cmn_err(CE_WARN, "update ro udfs mod\n"); 699 return; 700 } 701 udfsp->udf_mod = 0; 702 mutex_exit(&udfsp->udf_lock); 703 704 ud_update_superblock(vfsp); 705 vfs_unlock(vfsp); 706 } 707 708 ud_flushi(flag); 709 /* 710 * Force stale buffer cache information to be flushed, 711 * for all devices. This should cause any remaining control 712 * information (e.g., inode info) to be flushed back. 713 */ 714 bflush((dev_t)NODEV); 715 716 if (check_list == NULL) { 717 mutex_exit(&ud_sync_busy); 718 return; 719 } 720 721 /* 722 * For each udf filesystem in the STABLE check_list, update 723 * the clean flag if warranted. 724 */ 725 start_time = gethrestime_sec(); 726 for (ptr = check_list; check_cnt > 0; check_cnt--, ptr++) { 727 /* 728 * ud_still_mounted() returns with vfsp and the vfs_reflock 729 * held if ptr refers to a vfs that is still mounted. 730 */ 731 if ((vfsp = ud_still_mounted(ptr)) == NULL) { 732 continue; 733 } 734 ud_checkclean(vfsp, ptr->udf_vfs, ptr->vfs_dev, start_time); 735 vfs_unlock(vfsp); 736 } 737 mutex_exit(&ud_sync_busy); 738 kmem_free(check_list, check_size); 739 } 740 741 742 /* 743 * Returns vfsp and hold the lock if the vfs is still being mounted. 744 * Otherwise, returns 0. 745 * 746 * For our purposes, "still mounted" means that the file system still appears 747 * on the list of UFS file system instances. 748 */ 749 vfs_t * 750 ud_still_mounted(struct check_node *checkp) 751 { 752 struct vfs *vfsp; 753 struct udf_vfs *udf_vfsp; 754 755 ud_printf("ud_still_mounted\n"); 756 757 mutex_enter(&udf_vfs_mutex); 758 for (udf_vfsp = udf_vfs_instances; 759 udf_vfsp != NULL; udf_vfsp = udf_vfsp->udf_next) { 760 if (udf_vfsp != checkp->udf_vfs) { 761 continue; 762 } 763 /* 764 * Tentative match: verify it and try to lock. (It's not at 765 * all clear how the verification could fail, given that we've 766 * gotten this far. We would have had to reallocate the 767 * ufsvfs struct at hand for a new incarnation; is that really 768 * possible in the interval from constructing the check_node 769 * to here?) 770 */ 771 vfsp = udf_vfsp->udf_vfs; 772 if (vfsp != checkp->vfsp) { 773 continue; 774 } 775 if (vfsp->vfs_dev != checkp->vfs_dev) { 776 continue; 777 } 778 if (vfs_lock(vfsp) != 0) { 779 continue; 780 } 781 mutex_exit(&udf_vfs_mutex); 782 return (vfsp); 783 } 784 mutex_exit(&udf_vfs_mutex); 785 return (NULL); 786 } 787 788 /* ARGSUSED */ 789 void 790 ud_checkclean(struct vfs *vfsp, 791 struct udf_vfs *udf_vfsp, dev_t dev, time_t timev) 792 { 793 ud_printf("ud_checkclean\n"); 794 udf_vfsp = (struct udf_vfs *)vfsp->vfs_data; 795 /* 796 * ignore if buffers or inodes are busy 797 */ 798 if ((bcheck(dev, udf_vfsp->udf_iseq)) || 799 (ud_icheck(udf_vfsp))) { 800 return; 801 } 802 mutex_enter(&udf_vfsp->udf_lock); 803 ud_sbwrite(udf_vfsp); 804 mutex_exit(&udf_vfsp->udf_lock); 805 } 806 807 int32_t 808 ud_icheck(struct udf_vfs *udf_vfsp) 809 { 810 int32_t index, error = 0; 811 union ihead *ih; 812 struct ud_inode *ip; 813 814 mutex_enter(&ud_icache_lock); 815 for (index = 0; index < UD_HASH_SZ; index++) { 816 ih = &ud_ihead[index]; 817 for (ip = ih->ih_chain[0]; 818 ip != (struct ud_inode *)ih; ip = ip->i_forw) { 819 if ((ip->i_udf == udf_vfsp) && 820 ((ip->i_flag & (IMOD|IUPD|ICHG)) || 821 (RW_ISWRITER(&ip->i_rwlock)) || 822 ((ip->i_nlink <= 0) && (ip->i_flag & IREF)))) { 823 error = 1; 824 goto end; 825 } 826 } 827 } 828 end: 829 mutex_exit(&ud_icache_lock); 830 return (error); 831 } 832 833 void 834 ud_flushi(int32_t flag) 835 { 836 struct ud_inode *ip, *lip; 837 struct vnode *vp; 838 int cheap = flag & SYNC_ATTR; 839 int32_t index; 840 union ihead *ih; 841 842 /* 843 * Write back each (modified) inode, 844 * but don't sync back pages if vnode is 845 * part of the virtual swap device. 846 */ 847 mutex_enter(&ud_icache_lock); 848 for (index = 0; index < UD_HASH_SZ; index++) { 849 ih = &ud_ihead[index]; 850 lip = NULL; 851 852 for (ip = ih->ih_chain[0], lip = NULL; 853 ip && ip != (struct ud_inode *)ih; 854 ip = ip->i_forw) { 855 int flag = ip->i_flag; 856 857 vp = ITOV(ip); 858 /* 859 * Skip locked & inactive inodes. 860 * Skip vnodes w/ no cached data and no inode changes. 861 * Skip read-only vnodes 862 */ 863 if ((flag & IREF) == 0 || 864 (!vn_has_cached_data(vp) && 865 ((flag & (IMOD|IACC|IUPD|ICHG)) == 0)) || 866 (vp->v_vfsp == NULL) || vn_is_readonly(vp)) { 867 continue; 868 } 869 870 if (!rw_tryenter(&ip->i_contents, RW_WRITER)) { 871 continue; 872 } 873 874 VN_HOLD(vp); 875 876 if (lip != NULL) { 877 ITIMES(lip); 878 VN_RELE(ITOV(lip)); 879 } 880 lip = ip; 881 882 /* 883 * If this is an inode sync for file system hardening 884 * or this is a full sync but file is a swap file, 885 * don't sync pages but make sure the inode is up 886 * to date. In other cases, push everything out. 887 */ 888 if (cheap || IS_SWAPVP(vp)) { 889 ud_iupdat(ip, 0); 890 } else { 891 (void) ud_syncip(ip, B_ASYNC, I_SYNC); 892 } 893 rw_exit(&ip->i_contents); 894 } 895 if (lip != NULL) { 896 ITIMES(lip); 897 VN_RELE(ITOV(lip)); 898 } 899 } 900 mutex_exit(&ud_icache_lock); 901 } 902 903 904 void 905 ud_update_regid(struct regid *reg) 906 { 907 ud_printf("ud_update_regid\n"); 908 909 bzero(reg->reg_id, 23); 910 (void) strncpy(reg->reg_id, SUN_IMPL_ID, SUN_IMPL_ID_LEN); 911 reg->reg_ids[0] = SUN_OS_CLASS; 912 reg->reg_ids[1] = SUN_OS_ID; 913 } 914 915 /* ARGSUSED4 */ 916 void 917 ud_make_tag(struct udf_vfs *udf_vfsp, 918 struct tag *tag, uint16_t tag_id, uint32_t blkno, uint16_t crc_len) 919 { 920 int32_t i; 921 uint16_t crc; 922 uint8_t *addr, cksum = 0; 923 924 ud_printf("ud_make_tag\n"); 925 926 ASSERT(crc_len > 0x10); 927 addr = (uint8_t *)tag; 928 crc_len -= sizeof (struct tag); 929 crc = ud_crc(addr + 0x10, crc_len); 930 931 tag->tag_id = SWAP_16(tag_id); 932 tag->tag_desc_ver = SWAP_16(2); 933 tag->tag_cksum = 0; 934 tag->tag_res = 0; 935 tag->tag_sno = SWAP_16(udf_vfsp->udf_tsno); 936 tag->tag_crc = SWAP_16(crc); 937 938 tag->tag_crc_len = SWAP_16(crc_len); 939 tag->tag_loc = SWAP_32(blkno); 940 941 addr = (uint8_t *)tag; 942 for (i = 0; i <= 15; i++) { 943 cksum += addr[i]; 944 } 945 tag->tag_cksum = cksum; 946 } 947 948 int32_t 949 ud_make_dev_spec_ear(struct dev_spec_ear *ds, 950 major_t major, minor_t minor) 951 { 952 int32_t attr_len; 953 954 ud_printf("ud_make_dev_spec_ear\n"); 955 956 bzero(ds, sizeof (struct dev_spec_ear)); 957 958 attr_len = sizeof (struct dev_spec_ear); 959 ds->ds_atype = SWAP_32(12); 960 ds->ds_astype = 1; 961 ds->ds_attr_len = SWAP_32(attr_len); 962 ds->ds_iu_len = 0; 963 ds->ds_major_id = SWAP_32(major); 964 ds->ds_minor_id = SWAP_32(minor); 965 966 return (attr_len); 967 } 968 969 970 int32_t 971 ud_get_next_fid(struct ud_inode *ip, struct fbuf **fbp, uint32_t offset, 972 struct file_id **fid, uint8_t **name, uint8_t *buf) 973 { 974 struct vnode *vp = ITOV(ip); 975 caddr_t beg, end; 976 int32_t error, lbsize, lbmask, sz, iulen, idlen, copied = 0; 977 struct udf_vfs *udf_vfsp; 978 uint8_t *obuf; 979 int32_t count; 980 uint32_t tbno; 981 uint16_t crc_len; 982 uint32_t len; 983 984 ud_printf("ud_get_next_fid\n"); 985 986 obuf = buf; 987 udf_vfsp = ip->i_udf; 988 lbsize = udf_vfsp->udf_lbsize; 989 lbmask = udf_vfsp->udf_lbmask; 990 991 if ((error = ud_ip_off2bno(ip, offset, &tbno)) != 0) { 992 return (error); 993 } 994 /* First time read */ 995 if (*fbp == NULL) { 996 if ((error = fbread(vp, (offset_t)(offset & ~lbmask), 997 lbsize, S_READ, fbp)) != 0) { 998 return (error); 999 } 1000 } 1001 1002 end = (*fbp)->fb_addr + (*fbp)->fb_count; 1003 beg = (*fbp)->fb_addr + (offset & lbmask); 1004 1005 1006 if ((offset % lbsize) || 1007 (offset == 0)) { 1008 sz = end - beg; 1009 } else { 1010 sz = 0; 1011 } 1012 1013 1014 if (F_LEN <= sz) { 1015 *fid = (struct file_id *)beg; 1016 beg += F_LEN; 1017 } else { 1018 copied = 1; 1019 bcopy(beg, buf, sz); 1020 fbrelse(*fbp, S_OTHER); 1021 *fbp = NULL; 1022 1023 /* Skip to next block */ 1024 if (offset & lbmask) { 1025 offset = (offset & ~lbmask) + lbsize; 1026 } 1027 if ((error = fbread(vp, (offset_t)offset, 1028 lbsize, S_READ, fbp)) != 0) { 1029 return (error); 1030 } 1031 end = (*fbp)->fb_addr + (*fbp)->fb_count; 1032 beg = (*fbp)->fb_addr; 1033 1034 bcopy(beg, buf + sz, F_LEN - sz); 1035 beg = beg + F_LEN - sz; 1036 *fid = (struct file_id *)buf; 1037 1038 buf += F_LEN; 1039 } 1040 1041 1042 /* 1043 * Check if this a valid file_identifier 1044 */ 1045 if (ud_verify_tag_and_desc(&(*fid)->fid_tag, UD_FILE_ID_DESC, 1046 tbno, 0, lbsize) != 0) { 1047 /* 1048 * Either end of directory or corrupted 1049 */ 1050 return (EINVAL); 1051 } 1052 1053 crc_len = SWAP_16((*fid)->fid_tag.tag_crc_len); 1054 if (crc_len > udf_vfsp->udf_lbsize) { 1055 /* 1056 * Entries cannot be larger than 1057 * blocksize 1058 */ 1059 return (EINVAL); 1060 } 1061 1062 if (crc_len < (F_LEN - sizeof (struct tag))) { 1063 iulen = SWAP_16((*fid)->fid_iulen); 1064 idlen = FID_LEN(*fid) - F_LEN; 1065 goto use_id_iu_len; 1066 } 1067 1068 /* 1069 * By now beg points to the start fo the file name 1070 */ 1071 1072 sz = end - beg; 1073 len = crc_len + sizeof (struct tag) - (F_LEN); 1074 if (len <= sz) { 1075 if (copied == 1) { 1076 bcopy(beg, buf, len); 1077 buf += len; 1078 } 1079 beg += len; 1080 } else { 1081 copied = 1; 1082 /* 1083 * We are releasing the 1084 * old buffer so copy fid to buf 1085 */ 1086 if (obuf == buf) { 1087 count = F_LEN + sz; 1088 bcopy(*fid, buf, count); 1089 *fid = (struct file_id *)buf; 1090 buf += count; 1091 } else { 1092 bcopy(beg, buf, sz); 1093 *fid = (struct file_id *)buf; 1094 buf += sz; 1095 } 1096 fbrelse(*fbp, S_OTHER); 1097 *fbp = NULL; 1098 1099 /* Skip to next block */ 1100 if (offset & lbmask) { 1101 offset = (offset & ~lbmask) + lbsize; 1102 } 1103 if ((error = fbread(vp, (offset_t)offset, 1104 lbsize, S_READ, fbp)) != 0) { 1105 return (error); 1106 } 1107 end = (*fbp)->fb_addr + (*fbp)->fb_count; 1108 beg = (*fbp)->fb_addr; 1109 count = len - sz; 1110 bcopy(beg, buf, count); 1111 beg += count; 1112 } 1113 1114 /* 1115 * First we verify that the tag id and the FID_LEN are valid. 1116 * Next we verify the crc of the descriptor. 1117 */ 1118 if (ud_verify_tag_and_desc(&(*fid)->fid_tag, UD_FILE_ID_DESC, 1119 tbno, 0, lbsize) != 0) { 1120 /* directory is corrupted */ 1121 return (EINVAL); 1122 } 1123 if (ud_verify_tag_and_desc(&(*fid)->fid_tag, UD_FILE_ID_DESC, 1124 tbno, 1, FID_LEN(*fid)) != 0) { 1125 /* directory is corrupted */ 1126 return (EINVAL); 1127 } 1128 1129 idlen = FID_LEN(*fid); 1130 1131 idlen -= F_LEN; 1132 iulen = SWAP_16((*fid)->fid_iulen); 1133 if (crc_len < (F_LEN - sizeof (struct tag) + idlen)) { 1134 use_id_iu_len: 1135 len = (F_LEN - sizeof (struct tag) + idlen) - crc_len; 1136 sz = end - beg; 1137 if (len <= sz) { 1138 if (copied == 1) { 1139 bcopy(beg, buf, len); 1140 } 1141 } else { 1142 if (obuf == buf) { 1143 count = crc_len + sizeof (struct tag); 1144 bcopy(*fid, buf, count); 1145 *fid = (struct file_id *)buf; 1146 buf += count; 1147 } else { 1148 bcopy(beg, buf, sz); 1149 *fid = (struct file_id *)buf; 1150 buf += sz; 1151 } 1152 fbrelse(*fbp, S_OTHER); 1153 *fbp = NULL; 1154 1155 /* Skip to next block */ 1156 if (offset & lbmask) { 1157 offset = (offset & ~lbmask) + lbsize; 1158 } 1159 if ((error = fbread(vp, (offset_t)offset, 1160 lbsize, S_READ, fbp)) != 0) { 1161 return (error); 1162 } 1163 end = (*fbp)->fb_addr + (*fbp)->fb_count; 1164 beg = (*fbp)->fb_addr; 1165 count = len - sz; 1166 bcopy(beg, buf, count); 1167 beg += count; 1168 } 1169 } 1170 1171 *name = ((uint8_t *)*fid) + F_LEN + iulen; 1172 1173 return (0); 1174 } 1175 1176 1177 int32_t 1178 ud_verify_tag_and_desc(struct tag *tag, uint16_t id, uint32_t blockno, 1179 int32_t verify_desc, int32_t desc_len) 1180 { 1181 int32_t i; 1182 uint8_t *addr, cksum = 0; 1183 uint16_t crc; 1184 file_entry_t *fe; 1185 struct ext_attr_hdr *eah; 1186 struct file_id *fid; 1187 int32_t fidlen, ea_off; 1188 1189 if (tag->tag_id != SWAP_16(id)) { 1190 return (1); 1191 } 1192 addr = (uint8_t *)tag; 1193 eah = (struct ext_attr_hdr *)tag; 1194 for (i = 0; i < 4; i++) { 1195 cksum += addr[i]; 1196 } 1197 for (i = 5; i <= 15; i++) { 1198 cksum += addr[i]; 1199 } 1200 if (cksum != tag->tag_cksum) { 1201 cmn_err(CE_NOTE, 1202 "Checksum Does not Verify TAG %x CALC %x blockno 0x%x\n", 1203 tag->tag_cksum, cksum, blockno); 1204 return (1); 1205 } 1206 /* 1207 * Validate the meta data for UD_FILE_ID_DESC. 1208 * The FID_LEN should not exceed the desc_len. 1209 * This validation is done before the entire descriptor is read. 1210 * A call to this routine is made initially with verify_desc set as 0 1211 * but a non zero value in desc_len. 1212 */ 1213 if (id == UD_FILE_ID_DESC) { 1214 fid = (struct file_id *)tag; 1215 fidlen = FID_LEN(fid); 1216 if (fidlen > desc_len) { 1217 cmn_err(CE_NOTE, 1218 "Invalid FID_LEN(0x%x). Greater than expected(0x%x) blockno 0x%x\n", 1219 fidlen, desc_len, blockno); 1220 return (1); 1221 } 1222 } 1223 if (verify_desc == 0) 1224 return (0); 1225 /* 1226 * We are done verifying the tag. We proceed with verifying the 1227 * the descriptor. desc_len indicates the size of the structure 1228 * pointed to by argument tag. It includes the size of struct tag. 1229 * We first check the tag_crc_len since we use this to compute the 1230 * crc of the descriptor. 1231 * Verifying the crc is normally sufficient to ensure the integrity 1232 * of the meta data in the descriptor. However given the paranoia 1233 * about the panic caused by illegal meta data values we do an 1234 * additional check of the meta data for decriptor UD_FILE_ENTRY. 1235 * (The original panic was caused because this routine was not called 1236 * to verify the integrity of the tag and descriptor.) 1237 */ 1238 if (SWAP_16(tag->tag_crc_len) > (desc_len - sizeof (struct tag))) { 1239 cmn_err(CE_NOTE, 1240 "tag_crc_len(0x%x) is greater than expected len(0x%x) blockno 0x%x\n", 1241 SWAP_16(tag->tag_crc_len), 1242 desc_len, blockno); 1243 return (1); 1244 } 1245 if (tag->tag_crc_len) { 1246 crc = ud_crc(addr + 0x10, SWAP_16(tag->tag_crc_len)); 1247 if (crc != SWAP_16(tag->tag_crc)) { 1248 cmn_err(CE_NOTE, "CRC mismatch TAG_ID 0x%x TAG_CRC 0x%x" 1249 " Computed crc 0x%x tag_loc %x blockno 0x%x\n", 1250 id, SWAP_16(tag->tag_crc), crc, 1251 SWAP_32(tag->tag_loc), blockno); 1252 return (1); 1253 } 1254 } 1255 switch (id) { 1256 case UD_FILE_ENTRY: 1257 fe = (file_entry_t *)tag; 1258 if ((offsetof(struct file_entry, fe_spec) + 1259 SWAP_32(fe->fe_len_ear) + 1260 SWAP_32(fe->fe_len_adesc)) > desc_len) { 1261 cmn_err(CE_NOTE, 1262 "fe_len_ear(0x%x) fe_len_adesc(0x%x) fields are not OK. blockno 0x%x\n", 1263 SWAP_32(fe->fe_len_ear), 1264 SWAP_32(fe->fe_len_adesc), 1265 blockno); 1266 return (1); 1267 } 1268 break; 1269 case UD_EXT_ATTR_HDR: 1270 eah = (struct ext_attr_hdr *)tag; 1271 if (SWAP_32(eah->eah_aal) > desc_len) { 1272 cmn_err(CE_NOTE, 1273 "eah_all(0x%x) exceeds desc. len(0x%x) blockno 0x%x\n", 1274 SWAP_32(eah->eah_aal), desc_len, blockno); 1275 return (1); 1276 } 1277 ea_off = GET_32(&eah->eah_ial); 1278 if (ea_off >= desc_len) { 1279 cmn_err(CE_NOTE, 1280 "ea_off(0x%x) is not less than ea_len(0x%x) blockno 0x%x\n", 1281 ea_off, desc_len, blockno); 1282 return (1); 1283 } 1284 break; 1285 default: 1286 break; 1287 } 1288 if (SWAP_32(blockno) != tag->tag_loc) { 1289 cmn_err(CE_NOTE, 1290 "Tag Location mismatch blockno %x tag_blockno %x\n", 1291 blockno, SWAP_32(tag->tag_loc)); 1292 return (1); 1293 } 1294 return (0); 1295 } 1296 1297 /* **************** udf specific subroutines *********************** */ 1298 1299 uint16_t ud_crc_table[256] = { 1300 0x0000, 0x1021, 0x2042, 0x3063, 0x4084, 0x50A5, 0x60C6, 0x70E7, 1301 0x8108, 0x9129, 0xA14A, 0xB16B, 0xC18C, 0xD1AD, 0xE1CE, 0xF1EF, 1302 0x1231, 0x0210, 0x3273, 0x2252, 0x52B5, 0x4294, 0x72F7, 0x62D6, 1303 0x9339, 0x8318, 0xB37B, 0xA35A, 0xD3BD, 0xC39C, 0xF3FF, 0xE3DE, 1304 0x2462, 0x3443, 0x0420, 0x1401, 0x64E6, 0x74C7, 0x44A4, 0x5485, 1305 0xA56A, 0xB54B, 0x8528, 0x9509, 0xE5EE, 0xF5CF, 0xC5AC, 0xD58D, 1306 0x3653, 0x2672, 0x1611, 0x0630, 0x76D7, 0x66F6, 0x5695, 0x46B4, 1307 0xB75B, 0xA77A, 0x9719, 0x8738, 0xF7DF, 0xE7FE, 0xD79D, 0xC7BC, 1308 0x48C4, 0x58E5, 0x6886, 0x78A7, 0x0840, 0x1861, 0x2802, 0x3823, 1309 0xC9CC, 0xD9ED, 0xE98E, 0xF9AF, 0x8948, 0x9969, 0xA90A, 0xB92B, 1310 0x5AF5, 0x4AD4, 0x7AB7, 0x6A96, 0x1A71, 0x0A50, 0x3A33, 0x2A12, 1311 0xDBFD, 0xCBDC, 0xFBBF, 0xEB9E, 0x9B79, 0x8B58, 0xBB3B, 0xAB1A, 1312 0x6CA6, 0x7C87, 0x4CE4, 0x5CC5, 0x2C22, 0x3C03, 0x0C60, 0x1C41, 1313 0xEDAE, 0xFD8F, 0xCDEC, 0xDDCD, 0xAD2A, 0xBD0B, 0x8D68, 0x9D49, 1314 0x7E97, 0x6EB6, 0x5ED5, 0x4EF4, 0x3E13, 0x2E32, 0x1E51, 0x0E70, 1315 0xFF9F, 0xEFBE, 0xDFDD, 0xCFFC, 0xBF1B, 0xAF3A, 0x9F59, 0x8F78, 1316 0x9188, 0x81A9, 0xB1CA, 0xA1EB, 0xD10C, 0xC12D, 0xF14E, 0xE16F, 1317 0x1080, 0x00A1, 0x30C2, 0x20E3, 0x5004, 0x4025, 0x7046, 0x6067, 1318 0x83B9, 0x9398, 0xA3FB, 0xB3DA, 0xC33D, 0xD31C, 0xE37F, 0xF35E, 1319 0x02B1, 0x1290, 0x22F3, 0x32D2, 0x4235, 0x5214, 0x6277, 0x7256, 1320 0xB5EA, 0xA5CB, 0x95A8, 0x8589, 0xF56E, 0xE54F, 0xD52C, 0xC50D, 1321 0x34E2, 0x24C3, 0x14A0, 0x0481, 0x7466, 0x6447, 0x5424, 0x4405, 1322 0xA7DB, 0xB7FA, 0x8799, 0x97B8, 0xE75F, 0xF77E, 0xC71D, 0xD73C, 1323 0x26D3, 0x36F2, 0x0691, 0x16B0, 0x6657, 0x7676, 0x4615, 0x5634, 1324 0xD94C, 0xC96D, 0xF90E, 0xE92F, 0x99C8, 0x89E9, 0xB98A, 0xA9AB, 1325 0x5844, 0x4865, 0x7806, 0x6827, 0x18C0, 0x08E1, 0x3882, 0x28A3, 1326 0xCB7D, 0xDB5C, 0xEB3F, 0xFB1E, 0x8BF9, 0x9BD8, 0xABBB, 0xBB9A, 1327 0x4A75, 0x5A54, 0x6A37, 0x7A16, 0x0AF1, 0x1AD0, 0x2AB3, 0x3A92, 1328 0xFD2E, 0xED0F, 0xDD6C, 0xCD4D, 0xBDAA, 0xAD8B, 0x9DE8, 0x8DC9, 1329 0x7C26, 0x6C07, 0x5C64, 0x4C45, 0x3CA2, 0x2C83, 0x1CE0, 0x0CC1, 1330 0xEF1F, 0xFF3E, 0xCF5D, 0xDF7C, 0xAF9B, 0xBFBA, 0x8FD9, 0x9FF8, 1331 0x6E17, 0x7E36, 0x4E55, 0x5E74, 0x2E93, 0x3EB2, 0x0ED1, 0x1EF0 1332 }; 1333 1334 uint16_t 1335 ud_crc(uint8_t *addr, int32_t len) 1336 { 1337 uint16_t crc = 0; 1338 1339 while (len-- > 0) { 1340 crc = ud_crc_table[(crc >> 8 ^ *addr++) & 0xff] ^ (crc<<8); 1341 } 1342 1343 return (crc); 1344 } 1345 1346 typedef unsigned short unicode_t; 1347 1348 #define POUND 0x0023 1349 #define DOT 0x002E 1350 #define SLASH 0x002F 1351 #define UNDERBAR 0x005F 1352 1353 1354 static uint16_t htoc[16] = {'0', '1', '2', '3', 1355 '4', '5', '6', '7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f'}; 1356 1357 1358 /* 1359 * An unrecorded block will return all 1360 * 0's on a WORM media. to simulate 1361 * a unrecorded block on a rw media 1362 * we fill it with all zero's 1363 * return 0 : If unrecorded 1364 * return 1 : If recorded. 1365 */ 1366 uint32_t 1367 ud_check_te_unrec(struct udf_vfs *udf_vfsp, caddr_t addr, uint32_t blkno) 1368 { 1369 int32_t i, lbsize; 1370 struct term_entry *te; 1371 1372 ASSERT(udf_vfsp); 1373 ASSERT(addr); 1374 1375 te = (struct term_entry *)addr; 1376 if (ud_verify_tag_and_desc(&te->te_tag, UD_TERMINAL_ENT, 1377 blkno, 1, udf_vfsp->udf_lbsize) != 0) { 1378 lbsize = udf_vfsp->udf_lbsize; 1379 for (i = 0; i < lbsize; i++) { 1380 if (addr[i] != 0) { 1381 return (1); 1382 } 1383 } 1384 } 1385 return (0); 1386 } 1387 1388 1389 /* 1390 * The algorithms ud_utf82utf16 and ud_utf162utf8 1391 * donot handle surrogates. This is unicode 1.1 as I 1392 * understand. When writing udf2.0 this code has 1393 * to be changed to process surrogates also 1394 * (Dont ask me what is a surrogate character) 1395 */ 1396 1397 /* 1398 * This will take a utf8 string convert the first character 1399 * to utf16 and return the number of bytes consumed in this 1400 * process. A 0 will be returned if the character is invalid 1401 */ 1402 uint8_t bytes_from_utf8[] = { 1403 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1404 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1405 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1406 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1407 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1408 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1409 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1410 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1411 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1412 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1413 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1414 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1415 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1416 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1417 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1418 3, 3, 3, 3, 3, 3, 3, 3, 4, 4, 4, 4, 5, 5, 5, 5 1419 }; 1420 int32_t 1421 ud_utf82utf16(uint8_t *s_8, uint16_t *c_16, int32_t count) 1422 { 1423 int32_t extra_bytes; 1424 uint32_t c_32; 1425 ASSERT(s_8); 1426 ASSERT(c_16); 1427 1428 /* 1429 * First convert to a 32-bit 1430 * character 1431 */ 1432 c_32 = 0; 1433 extra_bytes = bytes_from_utf8[*s_8]; 1434 if (extra_bytes > count) { 1435 return (0); 1436 } 1437 1438 /* 1439 * verify if the string is a valid 1440 * utf8 string 1441 */ 1442 if (extra_bytes == 0) { 1443 /* 1444 * Apply one byte rule 1445 */ 1446 if (*s_8 & 0x80) { 1447 return (0); 1448 } 1449 c_32 = *s_8 & 0x7F; 1450 } else if (extra_bytes == 1) { 1451 if (((*s_8 & 0xE0) != 0xC0) || 1452 ((*(s_8 + 1) & 0xC0) != 0x80)) { 1453 return (0); 1454 } 1455 c_32 = *s_8 & 0x1F; 1456 } else if (extra_bytes == 2) { 1457 if (((*s_8 & 0xF0) != 0xE0) || 1458 ((*(s_8 + 1) & 0xC0) != 0x80) || 1459 ((*(s_8 + 2) & 0xC0) != 0x80)) { 1460 return (0); 1461 } 1462 c_32 = *s_8 & 0x0F; 1463 } else if (extra_bytes == 3) { 1464 if (((*s_8 & 0xF8) != 0xF0) || 1465 ((*(s_8 + 1) & 0xC0) != 0x80) || 1466 ((*(s_8 + 2) & 0xC0) != 0x80) || 1467 ((*(s_8 + 3) & 0xC0) != 0x80)) { 1468 return (0); 1469 } 1470 c_32 = *s_8 & 0x07; 1471 } else if (extra_bytes == 4) { 1472 if (((*s_8 & 0xFC) != 0xF8) || 1473 ((*(s_8 + 1) & 0xC0) != 0x80) || 1474 ((*(s_8 + 2) & 0xC0) != 0x80) || 1475 ((*(s_8 + 3) & 0xC0) != 0x80) || 1476 ((*(s_8 + 4) & 0xC0) != 0x80)) { 1477 return (0); 1478 } 1479 c_32 = *s_8 & 0x03; 1480 } else if (extra_bytes == 5) { 1481 if (((*s_8 & 0xFE) != 0xFC) || 1482 ((*(s_8 + 1) & 0xC0) != 0x80) || 1483 ((*(s_8 + 2) & 0xC0) != 0x80) || 1484 ((*(s_8 + 3) & 0xC0) != 0x80) || 1485 ((*(s_8 + 4) & 0xC0) != 0x80) || 1486 ((*(s_8 + 5) & 0xC0) != 0x80)) { 1487 return (0); 1488 } 1489 c_32 = *s_8 & 0x01; 1490 } else { 1491 return (0); 1492 } 1493 s_8++; 1494 1495 /* 1496 * Convert to 32-bit character 1497 */ 1498 switch (extra_bytes) { 1499 case 5 : 1500 c_32 <<= 6; 1501 c_32 += (*s_8++ & 0x3F); 1502 /* FALLTHROUGH */ 1503 case 4 : 1504 c_32 <<= 6; 1505 c_32 += (*s_8++ & 0x3F); 1506 /* FALLTHROUGH */ 1507 case 3 : 1508 c_32 <<= 6; 1509 c_32 += (*s_8++ & 0x3F); 1510 /* FALLTHROUGH */ 1511 case 2 : 1512 c_32 <<= 6; 1513 c_32 += (*s_8++ & 0x3F); 1514 /* FALLTHROUGH */ 1515 case 1 : 1516 c_32 <<= 6; 1517 c_32 += (*s_8++ & 0x3F); 1518 /* FALLTHROUGH */ 1519 case 0 : 1520 break; 1521 } 1522 1523 /* 1524 * now convert the 32-bit 1525 * character into a 16-bit character 1526 */ 1527 *c_16 = c_32; 1528 return (extra_bytes + 1); 1529 } 1530 1531 /* 1532 * Convert to a form that can be put on the media 1533 * out_len has the size of out_str when we are called. 1534 * This routine will set out_len to actual bytes written to out_str. 1535 * We make sure that we will not attempt to write beyond the out_str_len. 1536 */ 1537 int32_t 1538 ud_compress(int32_t in_len, int32_t *out_len, 1539 uint8_t *in_str, uint8_t *out_str) 1540 { 1541 int32_t error, in_index, out_index, index, c_tx_sz, out_str_len; 1542 uint16_t w2_char, *w2_str; 1543 uint8_t comp_id; 1544 1545 out_str_len = *out_len; 1546 if (in_len > (out_str_len - 2)) { 1547 return (ENAMETOOLONG); 1548 } 1549 1550 *out_len = 0; 1551 w2_str = (uint16_t *)kmem_zalloc(512, KM_SLEEP); 1552 1553 error = in_index = out_index = c_tx_sz = 0; 1554 comp_id = 8; 1555 for (in_index = 0; in_index < in_len; in_index += c_tx_sz) { 1556 if ((c_tx_sz = ud_utf82utf16(&in_str[in_index], 1557 &w2_char, in_len - in_index)) == 0) { 1558 error = EINVAL; 1559 goto end; 1560 } 1561 /* 1562 * utf-8 characters can be 1563 * of 1 - 6 bytes in length 1564 */ 1565 ASSERT(c_tx_sz > 0); 1566 ASSERT(c_tx_sz < 7); 1567 if ((comp_id == 8) && (w2_char & 0xff00)) { 1568 comp_id = 0x10; 1569 } 1570 w2_str[out_index++] = w2_char; 1571 } 1572 if (((comp_id == 0x10) && (out_index > ((out_str_len - 2)/2))) || 1573 ((comp_id == 0x8) && (out_index > (out_str_len - 2)))) { 1574 error = ENAMETOOLONG; 1575 goto end; 1576 } 1577 1578 in_index = out_index; 1579 out_index = 0; 1580 out_str[out_index++] = comp_id; 1581 for (index = 0; index < in_index; index++) { 1582 if (comp_id == 0x10) { 1583 out_str[out_index++] = (w2_str[index] & 0xFF00) >> 8; 1584 } 1585 out_str[out_index++] = w2_str[index] & 0xFF; 1586 } 1587 ASSERT(out_index <= (out_str_len - 1)); 1588 *out_len = out_index; 1589 end: 1590 if (w2_str != NULL) { 1591 kmem_free((caddr_t)w2_str, 512); 1592 } 1593 return (error); 1594 } 1595 1596 /* 1597 * Take a utf16 character and convert 1598 * it into a utf8 character. 1599 * A 0 will be returned if the conversion fails 1600 */ 1601 uint8_t first_byte_mark[7] = { 0x00, 0x00, 0xC0, 0xE0, 0xF0, 0xF8, 0xFC}; 1602 int32_t 1603 ud_utf162utf8(uint16_t c_16, uint8_t *s_8) 1604 { 1605 int32_t nc; 1606 uint32_t c_32; 1607 uint32_t byte_mask = 0xBF; 1608 uint32_t byte_mark = 0x80; 1609 1610 ASSERT(s_8); 1611 1612 /* 1613 * Convert the 16-bit character to 1614 * a 32-bit character 1615 */ 1616 c_32 = c_16; 1617 1618 /* 1619 * By here the 16-bit character is converted 1620 * to a 32-bit wide character 1621 */ 1622 if (c_32 < 0x80) { 1623 nc = 1; 1624 } else if (c_32 < 0x800) { 1625 nc = 2; 1626 } else if (c_32 < 0x10000) { 1627 nc = 3; 1628 } else if (c_32 < 0x200000) { 1629 nc = 4; 1630 } else if (c_32 < 0x4000000) { 1631 nc = 5; 1632 } else if (c_32 < (uint32_t)0x80000000) { 1633 nc = 6; 1634 } else { 1635 nc = 0; 1636 } 1637 s_8 += nc; 1638 switch (nc) { 1639 case 6 : 1640 *(--s_8) = (c_32 | byte_mark) & byte_mask; 1641 c_32 >>= 6; 1642 /* FALLTHROUGH */ 1643 case 5 : 1644 *(--s_8) = (c_32 | byte_mark) & byte_mask; 1645 c_32 >>= 6; 1646 /* FALLTHROUGH */ 1647 case 4 : 1648 *(--s_8) = (c_32 | byte_mark) & byte_mask; 1649 c_32 >>= 6; 1650 /* FALLTHROUGH */ 1651 case 3 : 1652 *(--s_8) = (c_32 | byte_mark) & byte_mask; 1653 c_32 >>= 6; 1654 /* FALLTHROUGH */ 1655 case 2 : 1656 *(--s_8) = (c_32 | byte_mark) & byte_mask; 1657 c_32 >>= 6; 1658 /* FALLTHROUGH */ 1659 case 1 : 1660 *(--s_8) = c_32 | first_byte_mark[nc]; 1661 } 1662 return (nc); 1663 } 1664 1665 /* 1666 * Convert to a form that can be transferred to the user 1667 * Assumption's 1668 * in_length < 256, out_str is at least 255 bytes long 1669 * The converted byte stream length is returned in out_len 1670 */ 1671 #define MAX_ALLOWABLE_STRING 250 1672 1673 int32_t 1674 ud_uncompress(int32_t in_len, int32_t *out_len, 1675 uint8_t *in_str, uint8_t *out_str) 1676 { 1677 uint8_t comp_id, utf8[6]; 1678 uint16_t w2_char, crc; 1679 int32_t error, index, c_tx_sz, len_till_now; 1680 int32_t make_crc, lic, dot_loc, crc_start_loc = 0, k = 0; 1681 1682 if (in_len == 0) { 1683 *out_len = 0; 1684 out_str[0] = '\0'; 1685 return (0); 1686 } 1687 1688 error = len_till_now = make_crc = 0; 1689 dot_loc = lic = -2; 1690 *out_len = 0; 1691 crc = 0; 1692 comp_id = in_str[0]; 1693 1694 /* 1695 * File names "." and ".." are invalid under unix. 1696 * Transform them into something 1697 */ 1698 if (comp_id == 8) { 1699 if ((in_str[1] == DOT) && 1700 ((in_len == 2) || ((in_len == 3) && 1701 (in_str[2] == DOT)))) { 1702 out_str[k++] = UNDERBAR; 1703 len_till_now = 1; 1704 goto make_append_crc; 1705 } 1706 } else if (comp_id == 0x10) { 1707 if (((in_str[1] << 8 | in_str[2]) == DOT) && 1708 ((in_len == 3) || ((in_len == 5) && 1709 ((in_str[3] << 8 | in_str[4]) == DOT)))) { 1710 out_str[k++] = UNDERBAR; 1711 len_till_now = 1; 1712 goto make_append_crc; 1713 } 1714 } else { 1715 *out_len = 0; 1716 return (EINVAL); 1717 } 1718 1719 for (index = 1; index < in_len; ) { 1720 1721 /* 1722 * Uncompress each character 1723 */ 1724 if (comp_id == 0x10) { 1725 w2_char = in_str[index++] << 8; 1726 w2_char |= in_str[index++]; 1727 } else { 1728 w2_char = in_str[index++]; 1729 } 1730 1731 if (make_crc != 0) { 1732 crc += w2_char; 1733 } 1734 1735 if (w2_char == DOT) { 1736 dot_loc = len_till_now; 1737 } 1738 1739 /* 1740 * Get rid of invalid characters 1741 */ 1742 if ((w2_char == SLASH) || 1743 (w2_char == NULL)) { 1744 make_crc = 1; 1745 if (((comp_id == 8) && 1746 (lic != (index - 1))) || 1747 (comp_id == 0x10) && 1748 (lic != (index - 2))) { 1749 w2_char = UNDERBAR; 1750 lic = index; 1751 } else { 1752 lic = index; 1753 continue; 1754 } 1755 } 1756 1757 /* 1758 * Conver a 16bit character to a 1759 * utf8 byte stream 1760 */ 1761 if ((c_tx_sz = ud_utf162utf8(w2_char, utf8)) == 0) { 1762 error = EINVAL; 1763 goto end; 1764 } 1765 ASSERT(c_tx_sz > 0); 1766 ASSERT(c_tx_sz < 7); 1767 1768 /* 1769 * The output string is larger than 1770 * the maximum allowed string length 1771 */ 1772 if ((crc_start_loc == 0) && 1773 ((len_till_now + c_tx_sz) > MAX_ALLOWABLE_STRING)) { 1774 crc_start_loc = len_till_now; 1775 } 1776 1777 if ((len_till_now + c_tx_sz) < MAXNAMELEN) { 1778 (void) strncpy((caddr_t)&out_str[len_till_now], 1779 (caddr_t)utf8, c_tx_sz); 1780 len_till_now += c_tx_sz; 1781 } else { 1782 break; 1783 } 1784 } 1785 1786 /* 1787 * If we need to append CRC do it now 1788 */ 1789 1790 if (make_crc) { 1791 1792 if (len_till_now > MAX_ALLOWABLE_STRING) { 1793 len_till_now = crc_start_loc; 1794 } 1795 1796 if (dot_loc > 0) { 1797 /* 1798 * Make space for crc before the DOT 1799 * move the rest of the file name to the end 1800 */ 1801 for (k = len_till_now - 1; k >= dot_loc; k--) { 1802 out_str[k + 5] = out_str[k]; 1803 } 1804 k = dot_loc; 1805 } else { 1806 k = len_till_now; 1807 } 1808 make_append_crc: 1809 crc = ud_crc(in_str, in_len); 1810 out_str[k++] = POUND; 1811 out_str[k++] = htoc[(uint16_t)(crc & 0xf000) >> 12]; 1812 out_str[k++] = htoc[(uint16_t)(crc & 0xf00) >> 8]; 1813 out_str[k++] = htoc[(uint16_t)(crc & 0xf0) >> 4]; 1814 out_str[k++] = htoc[crc & 0xf]; 1815 len_till_now += 5; 1816 } 1817 *out_len = len_till_now; 1818 end: 1819 return (error); 1820 } 1821 1822 1823 struct buf * 1824 ud_bread(dev_t dev, daddr_t blkno, long bsize) 1825 { 1826 struct buf *bp; 1827 1828 begin: 1829 bp = bread(dev, blkno, bsize); 1830 1831 if (((bp->b_flags & B_ERROR) == 0) && 1832 (bp->b_bcount != bsize)) { 1833 /* 1834 * Buffer cache returned a 1835 * wrong number of bytes 1836 * flush the old buffer and 1837 * reread it again 1838 */ 1839 if (bp->b_flags & B_DELWRI) { 1840 bwrite(bp); 1841 } else { 1842 bp->b_flags |= (B_AGE | B_STALE); 1843 brelse(bp); 1844 } 1845 goto begin; 1846 } 1847 1848 return (bp); 1849 } 1850 1851 /* 1852 * Decide whether it is okay to remove within a sticky directory. 1853 * Two conditions need to be met: write access to the directory 1854 * is needed. In sticky directories, write access is not sufficient; 1855 * you can remove entries from a directory only if you own the directory, 1856 * if you are privileged, if you own the entry or if they entry is 1857 * a plain file and you have write access to that file. 1858 * Function returns 0 if remove access is granted. 1859 */ 1860 int 1861 ud_sticky_remove_access(struct ud_inode *dir, struct ud_inode *entry, 1862 struct cred *cr) 1863 { 1864 uid_t uid; 1865 1866 ASSERT(RW_LOCK_HELD(&entry->i_contents)); 1867 1868 if ((dir->i_char & ISVTX) && 1869 (uid = crgetuid(cr)) != dir->i_uid && 1870 uid != entry->i_uid && 1871 (entry->i_type != VREG || 1872 ud_iaccess(entry, IWRITE, cr, 0) != 0)) 1873 return (secpolicy_vnode_remove(cr)); 1874 1875 return (0); 1876 } 1877