Commit | Line | Data |
---|---|---|
237fead6 MH |
1 | /** |
2 | * eCryptfs: Linux filesystem encryption layer | |
3 | * This is where eCryptfs coordinates the symmetric encryption and | |
4 | * decryption of the file data as it passes between the lower | |
5 | * encrypted file and the upper decrypted file. | |
6 | * | |
7 | * Copyright (C) 1997-2003 Erez Zadok | |
8 | * Copyright (C) 2001-2003 Stony Brook University | |
dd2a3b7a | 9 | * Copyright (C) 2004-2007 International Business Machines Corp. |
237fead6 MH |
10 | * Author(s): Michael A. Halcrow <mahalcro@us.ibm.com> |
11 | * | |
12 | * This program is free software; you can redistribute it and/or | |
13 | * modify it under the terms of the GNU General Public License as | |
14 | * published by the Free Software Foundation; either version 2 of the | |
15 | * License, or (at your option) any later version. | |
16 | * | |
17 | * This program is distributed in the hope that it will be useful, but | |
18 | * WITHOUT ANY WARRANTY; without even the implied warranty of | |
19 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
20 | * General Public License for more details. | |
21 | * | |
22 | * You should have received a copy of the GNU General Public License | |
23 | * along with this program; if not, write to the Free Software | |
24 | * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA | |
25 | * 02111-1307, USA. | |
26 | */ | |
27 | ||
28 | #include <linux/pagemap.h> | |
29 | #include <linux/writeback.h> | |
30 | #include <linux/page-flags.h> | |
31 | #include <linux/mount.h> | |
32 | #include <linux/file.h> | |
33 | #include <linux/crypto.h> | |
34 | #include <linux/scatterlist.h> | |
0a688ad7 | 35 | #include <asm/unaligned.h> |
237fead6 MH |
36 | #include "ecryptfs_kernel.h" |
37 | ||
237fead6 | 38 | /** |
16a72c45 | 39 | * ecryptfs_get_locked_page |
237fead6 MH |
40 | * |
41 | * Get one page from cache or lower f/s, return error otherwise. | |
42 | * | |
16a72c45 | 43 | * Returns locked and up-to-date page (if ok), with increased |
237fead6 MH |
44 | * refcnt. |
45 | */ | |
16a72c45 | 46 | struct page *ecryptfs_get_locked_page(struct file *file, loff_t index) |
237fead6 | 47 | { |
237fead6 MH |
48 | struct dentry *dentry; |
49 | struct inode *inode; | |
50 | struct address_space *mapping; | |
16a72c45 | 51 | struct page *page; |
237fead6 | 52 | |
bd243a4b | 53 | dentry = file->f_path.dentry; |
237fead6 MH |
54 | inode = dentry->d_inode; |
55 | mapping = inode->i_mapping; | |
16a72c45 MH |
56 | page = read_mapping_page(mapping, index, (void *)file); |
57 | if (!IS_ERR(page)) | |
58 | lock_page(page); | |
59 | return page; | |
237fead6 MH |
60 | } |
61 | ||
237fead6 MH |
62 | /** |
63 | * ecryptfs_writepage | |
64 | * @page: Page that is locked before this call is made | |
65 | * | |
66 | * Returns zero on success; non-zero otherwise | |
67 | */ | |
68 | static int ecryptfs_writepage(struct page *page, struct writeback_control *wbc) | |
69 | { | |
237fead6 MH |
70 | int rc; |
71 | ||
0216f7f7 | 72 | rc = ecryptfs_encrypt_page(page); |
237fead6 MH |
73 | if (rc) { |
74 | ecryptfs_printk(KERN_WARNING, "Error encrypting " | |
75 | "page (upper index [0x%.16x])\n", page->index); | |
76 | ClearPageUptodate(page); | |
77 | goto out; | |
78 | } | |
79 | SetPageUptodate(page); | |
80 | unlock_page(page); | |
81 | out: | |
82 | return rc; | |
83 | } | |
84 | ||
e77a56dd MH |
85 | /** |
86 | * Header Extent: | |
87 | * Octets 0-7: Unencrypted file size (big-endian) | |
88 | * Octets 8-15: eCryptfs special marker | |
89 | * Octets 16-19: Flags | |
90 | * Octet 16: File format version number (between 0 and 255) | |
91 | * Octets 17-18: Reserved | |
92 | * Octet 19: Bit 1 (lsb): Reserved | |
93 | * Bit 2: Encrypted? | |
94 | * Bits 3-8: Reserved | |
95 | * Octets 20-23: Header extent size (big-endian) | |
96 | * Octets 24-25: Number of header extents at front of file | |
97 | * (big-endian) | |
98 | * Octet 26: Begin RFC 2440 authentication token packet set | |
99 | */ | |
237fead6 | 100 | |
bf12be1c MH |
101 | /** |
102 | * ecryptfs_copy_up_encrypted_with_header | |
103 | * @page: Sort of a ``virtual'' representation of the encrypted lower | |
104 | * file. The actual lower file does not have the metadata in | |
105 | * the header. This is locked. | |
106 | * @crypt_stat: The eCryptfs inode's cryptographic context | |
107 | * | |
108 | * The ``view'' is the version of the file that userspace winds up | |
109 | * seeing, with the header information inserted. | |
110 | */ | |
111 | static int | |
112 | ecryptfs_copy_up_encrypted_with_header(struct page *page, | |
113 | struct ecryptfs_crypt_stat *crypt_stat) | |
114 | { | |
115 | loff_t extent_num_in_page = 0; | |
116 | loff_t num_extents_per_page = (PAGE_CACHE_SIZE | |
117 | / crypt_stat->extent_size); | |
118 | int rc = 0; | |
119 | ||
120 | while (extent_num_in_page < num_extents_per_page) { | |
d6a13c17 MH |
121 | loff_t view_extent_num = ((((loff_t)page->index) |
122 | * num_extents_per_page) | |
bf12be1c | 123 | + extent_num_in_page); |
cc11beff | 124 | size_t num_header_extents_at_front = |
fa3ef1cb | 125 | (crypt_stat->metadata_size / crypt_stat->extent_size); |
bf12be1c | 126 | |
cc11beff | 127 | if (view_extent_num < num_header_extents_at_front) { |
bf12be1c MH |
128 | /* This is a header extent */ |
129 | char *page_virt; | |
130 | ||
131 | page_virt = kmap_atomic(page, KM_USER0); | |
132 | memset(page_virt, 0, PAGE_CACHE_SIZE); | |
133 | /* TODO: Support more than one header extent */ | |
134 | if (view_extent_num == 0) { | |
157f1071 TH |
135 | size_t written; |
136 | ||
bf12be1c MH |
137 | rc = ecryptfs_read_xattr_region( |
138 | page_virt, page->mapping->host); | |
157f1071 TH |
139 | ecryptfs_write_header_metadata(page_virt + 20, |
140 | crypt_stat, | |
141 | &written); | |
bf12be1c MH |
142 | } |
143 | kunmap_atomic(page_virt, KM_USER0); | |
144 | flush_dcache_page(page); | |
145 | if (rc) { | |
bf12be1c | 146 | printk(KERN_ERR "%s: Error reading xattr " |
18d1dbf1 | 147 | "region; rc = [%d]\n", __func__, rc); |
bf12be1c MH |
148 | goto out; |
149 | } | |
bf12be1c MH |
150 | } else { |
151 | /* This is an encrypted data extent */ | |
152 | loff_t lower_offset = | |
cc11beff | 153 | ((view_extent_num * crypt_stat->extent_size) |
fa3ef1cb | 154 | - crypt_stat->metadata_size); |
bf12be1c MH |
155 | |
156 | rc = ecryptfs_read_lower_page_segment( | |
157 | page, (lower_offset >> PAGE_CACHE_SHIFT), | |
158 | (lower_offset & ~PAGE_CACHE_MASK), | |
159 | crypt_stat->extent_size, page->mapping->host); | |
160 | if (rc) { | |
161 | printk(KERN_ERR "%s: Error attempting to read " | |
162 | "extent at offset [%lld] in the lower " | |
18d1dbf1 | 163 | "file; rc = [%d]\n", __func__, |
bf12be1c MH |
164 | lower_offset, rc); |
165 | goto out; | |
166 | } | |
167 | } | |
168 | extent_num_in_page++; | |
169 | } | |
170 | out: | |
171 | return rc; | |
172 | } | |
173 | ||
237fead6 MH |
174 | /** |
175 | * ecryptfs_readpage | |
bf12be1c MH |
176 | * @file: An eCryptfs file |
177 | * @page: Page from eCryptfs inode mapping into which to stick the read data | |
237fead6 MH |
178 | * |
179 | * Read in a page, decrypting if necessary. | |
180 | * | |
181 | * Returns zero on success; non-zero on error. | |
182 | */ | |
183 | static int ecryptfs_readpage(struct file *file, struct page *page) | |
184 | { | |
bf12be1c MH |
185 | struct ecryptfs_crypt_stat *crypt_stat = |
186 | &ecryptfs_inode_to_private(file->f_path.dentry->d_inode)->crypt_stat; | |
237fead6 | 187 | int rc = 0; |
237fead6 | 188 | |
237fead6 | 189 | if (!crypt_stat |
e2bd99ec MH |
190 | || !(crypt_stat->flags & ECRYPTFS_ENCRYPTED) |
191 | || (crypt_stat->flags & ECRYPTFS_NEW_FILE)) { | |
237fead6 MH |
192 | ecryptfs_printk(KERN_DEBUG, |
193 | "Passing through unencrypted page\n"); | |
bf12be1c MH |
194 | rc = ecryptfs_read_lower_page_segment(page, page->index, 0, |
195 | PAGE_CACHE_SIZE, | |
196 | page->mapping->host); | |
e77a56dd MH |
197 | } else if (crypt_stat->flags & ECRYPTFS_VIEW_AS_ENCRYPTED) { |
198 | if (crypt_stat->flags & ECRYPTFS_METADATA_IN_XATTR) { | |
bf12be1c MH |
199 | rc = ecryptfs_copy_up_encrypted_with_header(page, |
200 | crypt_stat); | |
201 | if (rc) { | |
202 | printk(KERN_ERR "%s: Error attempting to copy " | |
203 | "the encrypted content from the lower " | |
204 | "file whilst inserting the metadata " | |
205 | "from the xattr into the header; rc = " | |
18d1dbf1 | 206 | "[%d]\n", __func__, rc); |
bf12be1c | 207 | goto out; |
e77a56dd | 208 | } |
bf12be1c | 209 | |
e77a56dd | 210 | } else { |
bf12be1c MH |
211 | rc = ecryptfs_read_lower_page_segment( |
212 | page, page->index, 0, PAGE_CACHE_SIZE, | |
213 | page->mapping->host); | |
e77a56dd MH |
214 | if (rc) { |
215 | printk(KERN_ERR "Error reading page; rc = " | |
216 | "[%d]\n", rc); | |
217 | goto out; | |
218 | } | |
219 | } | |
237fead6 | 220 | } else { |
0216f7f7 | 221 | rc = ecryptfs_decrypt_page(page); |
237fead6 | 222 | if (rc) { |
237fead6 MH |
223 | ecryptfs_printk(KERN_ERR, "Error decrypting page; " |
224 | "rc = [%d]\n", rc); | |
225 | goto out; | |
226 | } | |
227 | } | |
237fead6 | 228 | out: |
16a72c45 MH |
229 | if (rc) |
230 | ClearPageUptodate(page); | |
231 | else | |
232 | SetPageUptodate(page); | |
237fead6 MH |
233 | ecryptfs_printk(KERN_DEBUG, "Unlocking page with index = [0x%.16x]\n", |
234 | page->index); | |
235 | unlock_page(page); | |
236 | return rc; | |
237 | } | |
238 | ||
dd2a3b7a MH |
239 | /** |
240 | * Called with lower inode mutex held. | |
241 | */ | |
237fead6 MH |
242 | static int fill_zeros_to_end_of_page(struct page *page, unsigned int to) |
243 | { | |
244 | struct inode *inode = page->mapping->host; | |
245 | int end_byte_in_page; | |
237fead6 | 246 | |
9d8b8ce5 MH |
247 | if ((i_size_read(inode) / PAGE_CACHE_SIZE) != page->index) |
248 | goto out; | |
249 | end_byte_in_page = i_size_read(inode) % PAGE_CACHE_SIZE; | |
250 | if (to > end_byte_in_page) | |
251 | end_byte_in_page = to; | |
eebd2aa3 | 252 | zero_user_segment(page, end_byte_in_page, PAGE_CACHE_SIZE); |
237fead6 | 253 | out: |
9d8b8ce5 | 254 | return 0; |
237fead6 MH |
255 | } |
256 | ||
e4465fda | 257 | /** |
807b7ebe | 258 | * ecryptfs_write_begin |
e4465fda | 259 | * @file: The eCryptfs file |
807b7ebe BP |
260 | * @mapping: The eCryptfs object |
261 | * @pos: The file offset at which to start writing | |
262 | * @len: Length of the write | |
263 | * @flags: Various flags | |
264 | * @pagep: Pointer to return the page | |
265 | * @fsdata: Pointer to return fs data (unused) | |
e4465fda MH |
266 | * |
267 | * This function must zero any hole we create | |
268 | * | |
269 | * Returns zero on success; non-zero otherwise | |
270 | */ | |
807b7ebe BP |
271 | static int ecryptfs_write_begin(struct file *file, |
272 | struct address_space *mapping, | |
273 | loff_t pos, unsigned len, unsigned flags, | |
274 | struct page **pagep, void **fsdata) | |
237fead6 | 275 | { |
807b7ebe BP |
276 | pgoff_t index = pos >> PAGE_CACHE_SHIFT; |
277 | struct page *page; | |
7a3f595c | 278 | loff_t prev_page_end_size; |
e4465fda | 279 | int rc = 0; |
237fead6 | 280 | |
54566b2c | 281 | page = grab_cache_page_write_begin(mapping, index, flags); |
807b7ebe BP |
282 | if (!page) |
283 | return -ENOMEM; | |
284 | *pagep = page; | |
285 | ||
16a72c45 | 286 | if (!PageUptodate(page)) { |
e4465fda MH |
287 | struct ecryptfs_crypt_stat *crypt_stat = |
288 | &ecryptfs_inode_to_private( | |
289 | file->f_path.dentry->d_inode)->crypt_stat; | |
290 | ||
291 | if (!(crypt_stat->flags & ECRYPTFS_ENCRYPTED) | |
292 | || (crypt_stat->flags & ECRYPTFS_NEW_FILE)) { | |
293 | rc = ecryptfs_read_lower_page_segment( | |
807b7ebe | 294 | page, index, 0, PAGE_CACHE_SIZE, mapping->host); |
e4465fda MH |
295 | if (rc) { |
296 | printk(KERN_ERR "%s: Error attemping to read " | |
297 | "lower page segment; rc = [%d]\n", | |
18d1dbf1 | 298 | __func__, rc); |
e4465fda MH |
299 | ClearPageUptodate(page); |
300 | goto out; | |
301 | } else | |
302 | SetPageUptodate(page); | |
303 | } else if (crypt_stat->flags & ECRYPTFS_VIEW_AS_ENCRYPTED) { | |
304 | if (crypt_stat->flags & ECRYPTFS_METADATA_IN_XATTR) { | |
305 | rc = ecryptfs_copy_up_encrypted_with_header( | |
306 | page, crypt_stat); | |
307 | if (rc) { | |
308 | printk(KERN_ERR "%s: Error attempting " | |
309 | "to copy the encrypted content " | |
310 | "from the lower file whilst " | |
311 | "inserting the metadata from " | |
312 | "the xattr into the header; rc " | |
18d1dbf1 | 313 | "= [%d]\n", __func__, rc); |
e4465fda MH |
314 | ClearPageUptodate(page); |
315 | goto out; | |
316 | } | |
317 | SetPageUptodate(page); | |
318 | } else { | |
319 | rc = ecryptfs_read_lower_page_segment( | |
807b7ebe BP |
320 | page, index, 0, PAGE_CACHE_SIZE, |
321 | mapping->host); | |
e4465fda MH |
322 | if (rc) { |
323 | printk(KERN_ERR "%s: Error reading " | |
324 | "page; rc = [%d]\n", | |
18d1dbf1 | 325 | __func__, rc); |
e4465fda MH |
326 | ClearPageUptodate(page); |
327 | goto out; | |
328 | } | |
329 | SetPageUptodate(page); | |
330 | } | |
331 | } else { | |
332 | rc = ecryptfs_decrypt_page(page); | |
333 | if (rc) { | |
334 | printk(KERN_ERR "%s: Error decrypting page " | |
335 | "at index [%ld]; rc = [%d]\n", | |
18d1dbf1 | 336 | __func__, page->index, rc); |
e4465fda MH |
337 | ClearPageUptodate(page); |
338 | goto out; | |
339 | } | |
16a72c45 | 340 | SetPageUptodate(page); |
e4465fda | 341 | } |
16a72c45 | 342 | } |
807b7ebe | 343 | prev_page_end_size = ((loff_t)index << PAGE_CACHE_SHIFT); |
e4465fda MH |
344 | /* If creating a page or more of holes, zero them out via truncate. |
345 | * Note, this will increase i_size. */ | |
807b7ebe | 346 | if (index != 0) { |
7a3f595c | 347 | if (prev_page_end_size > i_size_read(page->mapping->host)) { |
240e2df5 | 348 | rc = ecryptfs_truncate(file->f_path.dentry, |
7a3f595c | 349 | prev_page_end_size); |
240e2df5 | 350 | if (rc) { |
e4465fda | 351 | printk(KERN_ERR "%s: Error on attempt to " |
240e2df5 | 352 | "truncate to (higher) offset [%lld];" |
18d1dbf1 | 353 | " rc = [%d]\n", __func__, |
e4465fda | 354 | prev_page_end_size, rc); |
240e2df5 MH |
355 | goto out; |
356 | } | |
53a2731f | 357 | } |
7a3f595c | 358 | } |
e4465fda MH |
359 | /* Writing to a new page, and creating a small hole from start |
360 | * of page? Zero it out. */ | |
807b7ebe BP |
361 | if ((i_size_read(mapping->host) == prev_page_end_size) |
362 | && (pos != 0)) | |
eebd2aa3 | 363 | zero_user(page, 0, PAGE_CACHE_SIZE); |
237fead6 MH |
364 | out: |
365 | return rc; | |
366 | } | |
367 | ||
237fead6 MH |
368 | /** |
369 | * ecryptfs_write_inode_size_to_header | |
370 | * | |
371 | * Writes the lower file size to the first 8 bytes of the header. | |
372 | * | |
373 | * Returns zero on success; non-zero on error. | |
374 | */ | |
0216f7f7 | 375 | static int ecryptfs_write_inode_size_to_header(struct inode *ecryptfs_inode) |
237fead6 | 376 | { |
0216f7f7 MH |
377 | char *file_size_virt; |
378 | int rc; | |
237fead6 | 379 | |
0216f7f7 MH |
380 | file_size_virt = kmalloc(sizeof(u64), GFP_KERNEL); |
381 | if (!file_size_virt) { | |
382 | rc = -ENOMEM; | |
ae73fc09 MH |
383 | goto out; |
384 | } | |
0a688ad7 | 385 | put_unaligned_be64(i_size_read(ecryptfs_inode), file_size_virt); |
0216f7f7 MH |
386 | rc = ecryptfs_write_lower(ecryptfs_inode, file_size_virt, 0, |
387 | sizeof(u64)); | |
388 | kfree(file_size_virt); | |
96a7b9c2 | 389 | if (rc < 0) |
0216f7f7 | 390 | printk(KERN_ERR "%s: Error writing file size to header; " |
18d1dbf1 | 391 | "rc = [%d]\n", __func__, rc); |
96a7b9c2 TH |
392 | else |
393 | rc = 0; | |
237fead6 MH |
394 | out: |
395 | return rc; | |
396 | } | |
397 | ||
0216f7f7 MH |
398 | struct kmem_cache *ecryptfs_xattr_cache; |
399 | ||
400 | static int ecryptfs_write_inode_size_to_xattr(struct inode *ecryptfs_inode) | |
dd2a3b7a MH |
401 | { |
402 | ssize_t size; | |
403 | void *xattr_virt; | |
0216f7f7 MH |
404 | struct dentry *lower_dentry = |
405 | ecryptfs_inode_to_private(ecryptfs_inode)->lower_file->f_dentry; | |
406 | struct inode *lower_inode = lower_dentry->d_inode; | |
dd2a3b7a MH |
407 | int rc; |
408 | ||
0216f7f7 MH |
409 | if (!lower_inode->i_op->getxattr || !lower_inode->i_op->setxattr) { |
410 | printk(KERN_WARNING | |
411 | "No support for setting xattr in lower filesystem\n"); | |
412 | rc = -ENOSYS; | |
413 | goto out; | |
414 | } | |
dd2a3b7a MH |
415 | xattr_virt = kmem_cache_alloc(ecryptfs_xattr_cache, GFP_KERNEL); |
416 | if (!xattr_virt) { | |
417 | printk(KERN_ERR "Out of memory whilst attempting to write " | |
418 | "inode size to xattr\n"); | |
419 | rc = -ENOMEM; | |
420 | goto out; | |
421 | } | |
0216f7f7 MH |
422 | mutex_lock(&lower_inode->i_mutex); |
423 | size = lower_inode->i_op->getxattr(lower_dentry, ECRYPTFS_XATTR_NAME, | |
424 | xattr_virt, PAGE_CACHE_SIZE); | |
dd2a3b7a MH |
425 | if (size < 0) |
426 | size = 8; | |
0a688ad7 | 427 | put_unaligned_be64(i_size_read(ecryptfs_inode), xattr_virt); |
0216f7f7 MH |
428 | rc = lower_inode->i_op->setxattr(lower_dentry, ECRYPTFS_XATTR_NAME, |
429 | xattr_virt, size, 0); | |
430 | mutex_unlock(&lower_inode->i_mutex); | |
dd2a3b7a MH |
431 | if (rc) |
432 | printk(KERN_ERR "Error whilst attempting to write inode size " | |
433 | "to lower file xattr; rc = [%d]\n", rc); | |
434 | kmem_cache_free(ecryptfs_xattr_cache, xattr_virt); | |
435 | out: | |
436 | return rc; | |
437 | } | |
438 | ||
0216f7f7 | 439 | int ecryptfs_write_inode_size_to_metadata(struct inode *ecryptfs_inode) |
dd2a3b7a MH |
440 | { |
441 | struct ecryptfs_crypt_stat *crypt_stat; | |
442 | ||
0216f7f7 | 443 | crypt_stat = &ecryptfs_inode_to_private(ecryptfs_inode)->crypt_stat; |
13a791b4 | 444 | BUG_ON(!(crypt_stat->flags & ECRYPTFS_ENCRYPTED)); |
dd2a3b7a | 445 | if (crypt_stat->flags & ECRYPTFS_METADATA_IN_XATTR) |
0216f7f7 | 446 | return ecryptfs_write_inode_size_to_xattr(ecryptfs_inode); |
dd2a3b7a | 447 | else |
0216f7f7 | 448 | return ecryptfs_write_inode_size_to_header(ecryptfs_inode); |
dd2a3b7a MH |
449 | } |
450 | ||
237fead6 | 451 | /** |
807b7ebe | 452 | * ecryptfs_write_end |
237fead6 | 453 | * @file: The eCryptfs file object |
807b7ebe BP |
454 | * @mapping: The eCryptfs object |
455 | * @pos: The file position | |
456 | * @len: The length of the data (unused) | |
457 | * @copied: The amount of data copied | |
237fead6 | 458 | * @page: The eCryptfs page |
807b7ebe | 459 | * @fsdata: The fsdata (unused) |
237fead6 MH |
460 | * |
461 | * This is where we encrypt the data and pass the encrypted data to | |
462 | * the lower filesystem. In OpenPGP-compatible mode, we operate on | |
463 | * entire underlying packets. | |
464 | */ | |
807b7ebe BP |
465 | static int ecryptfs_write_end(struct file *file, |
466 | struct address_space *mapping, | |
467 | loff_t pos, unsigned len, unsigned copied, | |
468 | struct page *page, void *fsdata) | |
237fead6 | 469 | { |
807b7ebe BP |
470 | pgoff_t index = pos >> PAGE_CACHE_SHIFT; |
471 | unsigned from = pos & (PAGE_CACHE_SIZE - 1); | |
472 | unsigned to = from + copied; | |
473 | struct inode *ecryptfs_inode = mapping->host; | |
bf12be1c MH |
474 | struct ecryptfs_crypt_stat *crypt_stat = |
475 | &ecryptfs_inode_to_private(file->f_path.dentry->d_inode)->crypt_stat; | |
237fead6 MH |
476 | int rc; |
477 | ||
e2bd99ec | 478 | if (crypt_stat->flags & ECRYPTFS_NEW_FILE) { |
237fead6 MH |
479 | ecryptfs_printk(KERN_DEBUG, "ECRYPTFS_NEW_FILE flag set in " |
480 | "crypt_stat at memory location [%p]\n", crypt_stat); | |
e2bd99ec | 481 | crypt_stat->flags &= ~(ECRYPTFS_NEW_FILE); |
237fead6 MH |
482 | } else |
483 | ecryptfs_printk(KERN_DEBUG, "Not a new file\n"); | |
484 | ecryptfs_printk(KERN_DEBUG, "Calling fill_zeros_to_end_of_page" | |
807b7ebe | 485 | "(page w/ index = [0x%.16x], to = [%d])\n", index, to); |
13a791b4 TH |
486 | if (!(crypt_stat->flags & ECRYPTFS_ENCRYPTED)) { |
487 | rc = ecryptfs_write_lower_page_segment(ecryptfs_inode, page, 0, | |
488 | to); | |
489 | if (!rc) { | |
490 | rc = copied; | |
491 | fsstack_copy_inode_size(ecryptfs_inode, | |
492 | ecryptfs_inode_to_lower(ecryptfs_inode)); | |
493 | } | |
494 | goto out; | |
495 | } | |
bf12be1c | 496 | /* Fills in zeros if 'to' goes beyond inode size */ |
237fead6 MH |
497 | rc = fill_zeros_to_end_of_page(page, to); |
498 | if (rc) { | |
499 | ecryptfs_printk(KERN_WARNING, "Error attempting to fill " | |
807b7ebe | 500 | "zeros in page with index = [0x%.16x]\n", index); |
237fead6 MH |
501 | goto out; |
502 | } | |
0216f7f7 | 503 | rc = ecryptfs_encrypt_page(page); |
237fead6 MH |
504 | if (rc) { |
505 | ecryptfs_printk(KERN_WARNING, "Error encrypting page (upper " | |
807b7ebe | 506 | "index [0x%.16x])\n", index); |
237fead6 MH |
507 | goto out; |
508 | } | |
807b7ebe BP |
509 | if (pos + copied > i_size_read(ecryptfs_inode)) { |
510 | i_size_write(ecryptfs_inode, pos + copied); | |
237fead6 | 511 | ecryptfs_printk(KERN_DEBUG, "Expanded file size to " |
bf12be1c | 512 | "[0x%.16x]\n", i_size_read(ecryptfs_inode)); |
237fead6 | 513 | } |
bf12be1c | 514 | rc = ecryptfs_write_inode_size_to_metadata(ecryptfs_inode); |
dd2a3b7a MH |
515 | if (rc) |
516 | printk(KERN_ERR "Error writing inode size to metadata; " | |
517 | "rc = [%d]\n", rc); | |
807b7ebe BP |
518 | else |
519 | rc = copied; | |
237fead6 | 520 | out: |
807b7ebe BP |
521 | unlock_page(page); |
522 | page_cache_release(page); | |
237fead6 MH |
523 | return rc; |
524 | } | |
525 | ||
237fead6 MH |
526 | static sector_t ecryptfs_bmap(struct address_space *mapping, sector_t block) |
527 | { | |
528 | int rc = 0; | |
529 | struct inode *inode; | |
530 | struct inode *lower_inode; | |
531 | ||
532 | inode = (struct inode *)mapping->host; | |
533 | lower_inode = ecryptfs_inode_to_lower(inode); | |
534 | if (lower_inode->i_mapping->a_ops->bmap) | |
535 | rc = lower_inode->i_mapping->a_ops->bmap(lower_inode->i_mapping, | |
536 | block); | |
537 | return rc; | |
538 | } | |
539 | ||
7f09410b | 540 | const struct address_space_operations ecryptfs_aops = { |
237fead6 MH |
541 | .writepage = ecryptfs_writepage, |
542 | .readpage = ecryptfs_readpage, | |
807b7ebe BP |
543 | .write_begin = ecryptfs_write_begin, |
544 | .write_end = ecryptfs_write_end, | |
237fead6 | 545 | .bmap = ecryptfs_bmap, |
237fead6 | 546 | }; |