projects / deliverable / linux.git / blob
? search:


0dc11586682fd7d93c85790af67bd8d83f6f9002
[deliverable/linux.git] / fs / nfsd / nfs4xdr.c
1 /*
2 * Server-side XDR for NFSv4
3 *
4 * Copyright (c) 2002 The Regents of the University of Michigan.
5 * All rights reserved.
6 *
7 * Kendrick Smith <kmsmith@umich.edu>
8 * Andy Adamson <andros@umich.edu>
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 *
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the University nor the names of its
20 * contributors may be used to endorse or promote products derived
21 * from this software without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 *
35 * TODO: Neil Brown made the following observation: We currently
36 * initially reserve NFSD_BUFSIZE space on the transmit queue and
37 * never release any of that until the request is complete.
38 * It would be good to calculate a new maximum response size while
39 * decoding the COMPOUND, and call svc_reserve with this number
40 * at the end of nfs4svc_decode_compoundargs.
41 */
42
43 #include <linux/slab.h>
44 #include <linux/namei.h>
45 #include <linux/statfs.h>
46 #include <linux/utsname.h>
47 #include <linux/pagemap.h>
48 #include <linux/sunrpc/svcauth_gss.h>
49
50 #include "idmap.h"
51 #include "acl.h"
52 #include "xdr4.h"
53 #include "vfs.h"
54 #include "state.h"
55 #include "cache.h"
56 #include "netns.h"
57
58 #define NFSDDBG_FACILITY NFSDDBG_XDR
59
60 /*
61 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
62 * directory in order to indicate to the client that a filesystem boundary is present
63 * We use a fixed fsid for a referral
64 */
65 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL
66 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL
67
68 static __be32
69 check_filename(char *str, int len)
70 {
71 int i;
72
73 if (len == 0)
74 return nfserr_inval;
75 if (isdotent(str, len))
76 return nfserr_badname;
77 for (i = 0; i < len; i++)
78 if (str[i] == '/')
79 return nfserr_badname;
80 return 0;
81 }
82
83 #define DECODE_HEAD \
84 __be32 *p; \
85 __be32 status
86 #define DECODE_TAIL \
87 status = 0; \
88 out: \
89 return status; \
90 xdr_error: \
91 dprintk("NFSD: xdr error (%s:%d)\n", \
92 __FILE__, __LINE__); \
93 status = nfserr_bad_xdr; \
94 goto out
95
96 #define READ32(x) (x) = ntohl(*p++)
97 #define READ64(x) do { \
98 (x) = (u64)ntohl(*p++) << 32; \
99 (x) |= ntohl(*p++); \
100 } while (0)
101 #define READTIME(x) do { \
102 p++; \
103 (x) = ntohl(*p++); \
104 p++; \
105 } while (0)
106 #define READMEM(x,nbytes) do { \
107 x = (char *)p; \
108 p += XDR_QUADLEN(nbytes); \
109 } while (0)
110 #define SAVEMEM(x,nbytes) do { \
111 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \
112 savemem(argp, p, nbytes) : \
113 (char *)p)) { \
114 dprintk("NFSD: xdr error (%s:%d)\n", \
115 __FILE__, __LINE__); \
116 goto xdr_error; \
117 } \
118 p += XDR_QUADLEN(nbytes); \
119 } while (0)
120 #define COPYMEM(x,nbytes) do { \
121 memcpy((x), p, nbytes); \
122 p += XDR_QUADLEN(nbytes); \
123 } while (0)
124
125 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */
126 #define READ_BUF(nbytes) do { \
127 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \
128 p = argp->p; \
129 argp->p += XDR_QUADLEN(nbytes); \
130 } else if (!(p = read_buf(argp, nbytes))) { \
131 dprintk("NFSD: xdr error (%s:%d)\n", \
132 __FILE__, __LINE__); \
133 goto xdr_error; \
134 } \
135 } while (0)
136
137 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes)
138 {
139 /* We want more bytes than seem to be available.
140 * Maybe we need a new page, maybe we have just run out
141 */
142 unsigned int avail = (char *)argp->end - (char *)argp->p;
143 __be32 *p;
144 if (avail + argp->pagelen < nbytes)
145 return NULL;
146 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */
147 return NULL;
148 /* ok, we can do it with the current plus the next page */
149 if (nbytes <= sizeof(argp->tmp))
150 p = argp->tmp;
151 else {
152 kfree(argp->tmpp);
153 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL);
154 if (!p)
155 return NULL;
156
157 }
158 /*
159 * The following memcpy is safe because read_buf is always
160 * called with nbytes > avail, and the two cases above both
161 * guarantee p points to at least nbytes bytes.
162 */
163 memcpy(p, argp->p, avail);
164 /* step to next page */
165 argp->p = page_address(argp->pagelist[0]);
166 argp->pagelist++;
167 if (argp->pagelen < PAGE_SIZE) {
168 argp->end = argp->p + (argp->pagelen>>2);
169 argp->pagelen = 0;
170 } else {
171 argp->end = argp->p + (PAGE_SIZE>>2);
172 argp->pagelen -= PAGE_SIZE;
173 }
174 memcpy(((char*)p)+avail, argp->p, (nbytes - avail));
175 argp->p += XDR_QUADLEN(nbytes - avail);
176 return p;
177 }
178
179 static int zero_clientid(clientid_t *clid)
180 {
181 return (clid->cl_boot == 0) && (clid->cl_id == 0);
182 }
183
184 static int
185 defer_free(struct nfsd4_compoundargs *argp,
186 void (*release)(const void *), void *p)
187 {
188 struct tmpbuf *tb;
189
190 tb = kmalloc(sizeof(*tb), GFP_KERNEL);
191 if (!tb)
192 return -ENOMEM;
193 tb->buf = p;
194 tb->release = release;
195 tb->next = argp->to_free;
196 argp->to_free = tb;
197 return 0;
198 }
199
200 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes)
201 {
202 if (p == argp->tmp) {
203 p = kmemdup(argp->tmp, nbytes, GFP_KERNEL);
204 if (!p)
205 return NULL;
206 } else {
207 BUG_ON(p != argp->tmpp);
208 argp->tmpp = NULL;
209 }
210 if (defer_free(argp, kfree, p)) {
211 kfree(p);
212 return NULL;
213 } else
214 return (char *)p;
215 }
216
217 static __be32
218 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval)
219 {
220 u32 bmlen;
221 DECODE_HEAD;
222
223 bmval[0] = 0;
224 bmval[1] = 0;
225 bmval[2] = 0;
226
227 READ_BUF(4);
228 READ32(bmlen);
229 if (bmlen > 1000)
230 goto xdr_error;
231
232 READ_BUF(bmlen << 2);
233 if (bmlen > 0)
234 READ32(bmval[0]);
235 if (bmlen > 1)
236 READ32(bmval[1]);
237 if (bmlen > 2)
238 READ32(bmval[2]);
239
240 DECODE_TAIL;
241 }
242
243 static __be32
244 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
245 struct iattr *iattr, struct nfs4_acl **acl)
246 {
247 int expected_len, len = 0;
248 u32 dummy32;
249 char *buf;
250 int host_err;
251
252 DECODE_HEAD;
253 iattr->ia_valid = 0;
254 if ((status = nfsd4_decode_bitmap(argp, bmval)))
255 return status;
256
257 READ_BUF(4);
258 READ32(expected_len);
259
260 if (bmval[0] & FATTR4_WORD0_SIZE) {
261 READ_BUF(8);
262 len += 8;
263 READ64(iattr->ia_size);
264 iattr->ia_valid |= ATTR_SIZE;
265 }
266 if (bmval[0] & FATTR4_WORD0_ACL) {
267 int nace;
268 struct nfs4_ace *ace;
269
270 READ_BUF(4); len += 4;
271 READ32(nace);
272
273 if (nace > NFS4_ACL_MAX)
274 return nfserr_resource;
275
276 *acl = nfs4_acl_new(nace);
277 if (*acl == NULL) {
278 host_err = -ENOMEM;
279 goto out_nfserr;
280 }
281 defer_free(argp, kfree, *acl);
282
283 (*acl)->naces = nace;
284 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) {
285 READ_BUF(16); len += 16;
286 READ32(ace->type);
287 READ32(ace->flag);
288 READ32(ace->access_mask);
289 READ32(dummy32);
290 READ_BUF(dummy32);
291 len += XDR_QUADLEN(dummy32) << 2;
292 READMEM(buf, dummy32);
293 ace->whotype = nfs4_acl_get_whotype(buf, dummy32);
294 status = nfs_ok;
295 if (ace->whotype != NFS4_ACL_WHO_NAMED)
296 ace->who = 0;
297 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
298 status = nfsd_map_name_to_gid(argp->rqstp,
299 buf, dummy32, &ace->who);
300 else
301 status = nfsd_map_name_to_uid(argp->rqstp,
302 buf, dummy32, &ace->who);
303 if (status)
304 return status;
305 }
306 } else
307 *acl = NULL;
308 if (bmval[1] & FATTR4_WORD1_MODE) {
309 READ_BUF(4);
310 len += 4;
311 READ32(iattr->ia_mode);
312 iattr->ia_mode &= (S_IFMT | S_IALLUGO);
313 iattr->ia_valid |= ATTR_MODE;
314 }
315 if (bmval[1] & FATTR4_WORD1_OWNER) {
316 READ_BUF(4);
317 len += 4;
318 READ32(dummy32);
319 READ_BUF(dummy32);
320 len += (XDR_QUADLEN(dummy32) << 2);
321 READMEM(buf, dummy32);
322 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid)))
323 return status;
324 iattr->ia_valid |= ATTR_UID;
325 }
326 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
327 READ_BUF(4);
328 len += 4;
329 READ32(dummy32);
330 READ_BUF(dummy32);
331 len += (XDR_QUADLEN(dummy32) << 2);
332 READMEM(buf, dummy32);
333 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid)))
334 return status;
335 iattr->ia_valid |= ATTR_GID;
336 }
337 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
338 READ_BUF(4);
339 len += 4;
340 READ32(dummy32);
341 switch (dummy32) {
342 case NFS4_SET_TO_CLIENT_TIME:
343 /* We require the high 32 bits of 'seconds' to be 0, and we ignore
344 all 32 bits of 'nseconds'. */
345 READ_BUF(12);
346 len += 12;
347 READ32(dummy32);
348 if (dummy32)
349 return nfserr_inval;
350 READ32(iattr->ia_atime.tv_sec);
351 READ32(iattr->ia_atime.tv_nsec);
352 if (iattr->ia_atime.tv_nsec >= (u32)1000000000)
353 return nfserr_inval;
354 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
355 break;
356 case NFS4_SET_TO_SERVER_TIME:
357 iattr->ia_valid |= ATTR_ATIME;
358 break;
359 default:
360 goto xdr_error;
361 }
362 }
363 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
364 READ_BUF(4);
365 len += 4;
366 READ32(dummy32);
367 switch (dummy32) {
368 case NFS4_SET_TO_CLIENT_TIME:
369 /* We require the high 32 bits of 'seconds' to be 0, and we ignore
370 all 32 bits of 'nseconds'. */
371 READ_BUF(12);
372 len += 12;
373 READ32(dummy32);
374 if (dummy32)
375 return nfserr_inval;
376 READ32(iattr->ia_mtime.tv_sec);
377 READ32(iattr->ia_mtime.tv_nsec);
378 if (iattr->ia_mtime.tv_nsec >= (u32)1000000000)
379 return nfserr_inval;
380 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
381 break;
382 case NFS4_SET_TO_SERVER_TIME:
383 iattr->ia_valid |= ATTR_MTIME;
384 break;
385 default:
386 goto xdr_error;
387 }
388 }
389 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
390 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
391 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2)
392 READ_BUF(expected_len - len);
393 else if (len != expected_len)
394 goto xdr_error;
395
396 DECODE_TAIL;
397
398 out_nfserr:
399 status = nfserrno(host_err);
400 goto out;
401 }
402
403 static __be32
404 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid)
405 {
406 DECODE_HEAD;
407
408 READ_BUF(sizeof(stateid_t));
409 READ32(sid->si_generation);
410 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
411
412 DECODE_TAIL;
413 }
414
415 static __be32
416 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access)
417 {
418 DECODE_HEAD;
419
420 READ_BUF(4);
421 READ32(access->ac_req_access);
422
423 DECODE_TAIL;
424 }
425
426 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs)
427 {
428 DECODE_HEAD;
429 u32 dummy, uid, gid;
430 char *machine_name;
431 int i;
432 int nr_secflavs;
433
434 /* callback_sec_params4 */
435 READ_BUF(4);
436 READ32(nr_secflavs);
437 cbs->flavor = (u32)(-1);
438 for (i = 0; i < nr_secflavs; ++i) {
439 READ_BUF(4);
440 READ32(dummy);
441 switch (dummy) {
442 case RPC_AUTH_NULL:
443 /* Nothing to read */
444 if (cbs->flavor == (u32)(-1))
445 cbs->flavor = RPC_AUTH_NULL;
446 break;
447 case RPC_AUTH_UNIX:
448 READ_BUF(8);
449 /* stamp */
450 READ32(dummy);
451
452 /* machine name */
453 READ32(dummy);
454 READ_BUF(dummy);
455 SAVEMEM(machine_name, dummy);
456
457 /* uid, gid */
458 READ_BUF(8);
459 READ32(uid);
460 READ32(gid);
461
462 /* more gids */
463 READ_BUF(4);
464 READ32(dummy);
465 READ_BUF(dummy * 4);
466 if (cbs->flavor == (u32)(-1)) {
467 cbs->uid = uid;
468 cbs->gid = gid;
469 cbs->flavor = RPC_AUTH_UNIX;
470 }
471 break;
472 case RPC_AUTH_GSS:
473 dprintk("RPC_AUTH_GSS callback secflavor "
474 "not supported!\n");
475 READ_BUF(8);
476 /* gcbp_service */
477 READ32(dummy);
478 /* gcbp_handle_from_server */
479 READ32(dummy);
480 READ_BUF(dummy);
481 p += XDR_QUADLEN(dummy);
482 /* gcbp_handle_from_client */
483 READ_BUF(4);
484 READ32(dummy);
485 READ_BUF(dummy);
486 break;
487 default:
488 dprintk("Illegal callback secflavor\n");
489 return nfserr_inval;
490 }
491 }
492 DECODE_TAIL;
493 }
494
495 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc)
496 {
497 DECODE_HEAD;
498
499 READ_BUF(4);
500 READ32(bc->bc_cb_program);
501 nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec);
502
503 DECODE_TAIL;
504 }
505
506 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts)
507 {
508 DECODE_HEAD;
509
510 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8);
511 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
512 READ32(bcts->dir);
513 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker
514 * could help us figure out we should be using it. */
515 DECODE_TAIL;
516 }
517
518 static __be32
519 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
520 {
521 DECODE_HEAD;
522
523 READ_BUF(4);
524 READ32(close->cl_seqid);
525 return nfsd4_decode_stateid(argp, &close->cl_stateid);
526
527 DECODE_TAIL;
528 }
529
530
531 static __be32
532 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit)
533 {
534 DECODE_HEAD;
535
536 READ_BUF(12);
537 READ64(commit->co_offset);
538 READ32(commit->co_count);
539
540 DECODE_TAIL;
541 }
542
543 static __be32
544 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create)
545 {
546 DECODE_HEAD;
547
548 READ_BUF(4);
549 READ32(create->cr_type);
550 switch (create->cr_type) {
551 case NF4LNK:
552 READ_BUF(4);
553 READ32(create->cr_linklen);
554 READ_BUF(create->cr_linklen);
555 SAVEMEM(create->cr_linkname, create->cr_linklen);
556 break;
557 case NF4BLK:
558 case NF4CHR:
559 READ_BUF(8);
560 READ32(create->cr_specdata1);
561 READ32(create->cr_specdata2);
562 break;
563 case NF4SOCK:
564 case NF4FIFO:
565 case NF4DIR:
566 default:
567 break;
568 }
569
570 READ_BUF(4);
571 READ32(create->cr_namelen);
572 READ_BUF(create->cr_namelen);
573 SAVEMEM(create->cr_name, create->cr_namelen);
574 if ((status = check_filename(create->cr_name, create->cr_namelen)))
575 return status;
576
577 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr,
578 &create->cr_acl);
579 if (status)
580 goto out;
581
582 DECODE_TAIL;
583 }
584
585 static inline __be32
586 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr)
587 {
588 return nfsd4_decode_stateid(argp, &dr->dr_stateid);
589 }
590
591 static inline __be32
592 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr)
593 {
594 return nfsd4_decode_bitmap(argp, getattr->ga_bmval);
595 }
596
597 static __be32
598 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
599 {
600 DECODE_HEAD;
601
602 READ_BUF(4);
603 READ32(link->li_namelen);
604 READ_BUF(link->li_namelen);
605 SAVEMEM(link->li_name, link->li_namelen);
606 if ((status = check_filename(link->li_name, link->li_namelen)))
607 return status;
608
609 DECODE_TAIL;
610 }
611
612 static __be32
613 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
614 {
615 DECODE_HEAD;
616
617 /*
618 * type, reclaim(boolean), offset, length, new_lock_owner(boolean)
619 */
620 READ_BUF(28);
621 READ32(lock->lk_type);
622 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
623 goto xdr_error;
624 READ32(lock->lk_reclaim);
625 READ64(lock->lk_offset);
626 READ64(lock->lk_length);
627 READ32(lock->lk_is_new);
628
629 if (lock->lk_is_new) {
630 READ_BUF(4);
631 READ32(lock->lk_new_open_seqid);
632 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid);
633 if (status)
634 return status;
635 READ_BUF(8 + sizeof(clientid_t));
636 READ32(lock->lk_new_lock_seqid);
637 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t));
638 READ32(lock->lk_new_owner.len);
639 READ_BUF(lock->lk_new_owner.len);
640 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len);
641 } else {
642 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid);
643 if (status)
644 return status;
645 READ_BUF(4);
646 READ32(lock->lk_old_lock_seqid);
647 }
648
649 DECODE_TAIL;
650 }
651
652 static __be32
653 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
654 {
655 DECODE_HEAD;
656
657 READ_BUF(32);
658 READ32(lockt->lt_type);
659 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
660 goto xdr_error;
661 READ64(lockt->lt_offset);
662 READ64(lockt->lt_length);
663 COPYMEM(&lockt->lt_clientid, 8);
664 READ32(lockt->lt_owner.len);
665 READ_BUF(lockt->lt_owner.len);
666 READMEM(lockt->lt_owner.data, lockt->lt_owner.len);
667
668 DECODE_TAIL;
669 }
670
671 static __be32
672 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
673 {
674 DECODE_HEAD;
675
676 READ_BUF(8);
677 READ32(locku->lu_type);
678 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
679 goto xdr_error;
680 READ32(locku->lu_seqid);
681 status = nfsd4_decode_stateid(argp, &locku->lu_stateid);
682 if (status)
683 return status;
684 READ_BUF(16);
685 READ64(locku->lu_offset);
686 READ64(locku->lu_length);
687
688 DECODE_TAIL;
689 }
690
691 static __be32
692 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup)
693 {
694 DECODE_HEAD;
695
696 READ_BUF(4);
697 READ32(lookup->lo_len);
698 READ_BUF(lookup->lo_len);
699 SAVEMEM(lookup->lo_name, lookup->lo_len);
700 if ((status = check_filename(lookup->lo_name, lookup->lo_len)))
701 return status;
702
703 DECODE_TAIL;
704 }
705
706 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when)
707 {
708 __be32 *p;
709 u32 w;
710
711 READ_BUF(4);
712 READ32(w);
713 *share_access = w & NFS4_SHARE_ACCESS_MASK;
714 *deleg_want = w & NFS4_SHARE_WANT_MASK;
715 if (deleg_when)
716 *deleg_when = w & NFS4_SHARE_WHEN_MASK;
717
718 switch (w & NFS4_SHARE_ACCESS_MASK) {
719 case NFS4_SHARE_ACCESS_READ:
720 case NFS4_SHARE_ACCESS_WRITE:
721 case NFS4_SHARE_ACCESS_BOTH:
722 break;
723 default:
724 return nfserr_bad_xdr;
725 }
726 w &= ~NFS4_SHARE_ACCESS_MASK;
727 if (!w)
728 return nfs_ok;
729 if (!argp->minorversion)
730 return nfserr_bad_xdr;
731 switch (w & NFS4_SHARE_WANT_MASK) {
732 case NFS4_SHARE_WANT_NO_PREFERENCE:
733 case NFS4_SHARE_WANT_READ_DELEG:
734 case NFS4_SHARE_WANT_WRITE_DELEG:
735 case NFS4_SHARE_WANT_ANY_DELEG:
736 case NFS4_SHARE_WANT_NO_DELEG:
737 case NFS4_SHARE_WANT_CANCEL:
738 break;
739 default:
740 return nfserr_bad_xdr;
741 }
742 w &= ~NFS4_SHARE_WANT_MASK;
743 if (!w)
744 return nfs_ok;
745
746 if (!deleg_when) /* open_downgrade */
747 return nfserr_inval;
748 switch (w) {
749 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL:
750 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED:
751 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL |
752 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED):
753 return nfs_ok;
754 }
755 xdr_error:
756 return nfserr_bad_xdr;
757 }
758
759 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
760 {
761 __be32 *p;
762
763 READ_BUF(4);
764 READ32(*x);
765 /* Note: unlinke access bits, deny bits may be zero. */
766 if (*x & ~NFS4_SHARE_DENY_BOTH)
767 return nfserr_bad_xdr;
768 return nfs_ok;
769 xdr_error:
770 return nfserr_bad_xdr;
771 }
772
773 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o)
774 {
775 __be32 *p;
776
777 READ_BUF(4);
778 READ32(o->len);
779
780 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT)
781 return nfserr_bad_xdr;
782
783 READ_BUF(o->len);
784 SAVEMEM(o->data, o->len);
785 return nfs_ok;
786 xdr_error:
787 return nfserr_bad_xdr;
788 }
789
790 static __be32
791 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
792 {
793 DECODE_HEAD;
794 u32 dummy;
795
796 memset(open->op_bmval, 0, sizeof(open->op_bmval));
797 open->op_iattr.ia_valid = 0;
798 open->op_openowner = NULL;
799
800 /* seqid, share_access, share_deny, clientid, ownerlen */
801 READ_BUF(4);
802 READ32(open->op_seqid);
803 /* decode, yet ignore deleg_when until supported */
804 status = nfsd4_decode_share_access(argp, &open->op_share_access,
805 &open->op_deleg_want, &dummy);
806 if (status)
807 goto xdr_error;
808 status = nfsd4_decode_share_deny(argp, &open->op_share_deny);
809 if (status)
810 goto xdr_error;
811 READ_BUF(sizeof(clientid_t));
812 COPYMEM(&open->op_clientid, sizeof(clientid_t));
813 status = nfsd4_decode_opaque(argp, &open->op_owner);
814 if (status)
815 goto xdr_error;
816 READ_BUF(4);
817 READ32(open->op_create);
818 switch (open->op_create) {
819 case NFS4_OPEN_NOCREATE:
820 break;
821 case NFS4_OPEN_CREATE:
822 READ_BUF(4);
823 READ32(open->op_createmode);
824 switch (open->op_createmode) {
825 case NFS4_CREATE_UNCHECKED:
826 case NFS4_CREATE_GUARDED:
827 status = nfsd4_decode_fattr(argp, open->op_bmval,
828 &open->op_iattr, &open->op_acl);
829 if (status)
830 goto out;
831 break;
832 case NFS4_CREATE_EXCLUSIVE:
833 READ_BUF(NFS4_VERIFIER_SIZE);
834 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
835 break;
836 case NFS4_CREATE_EXCLUSIVE4_1:
837 if (argp->minorversion < 1)
838 goto xdr_error;
839 READ_BUF(NFS4_VERIFIER_SIZE);
840 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
841 status = nfsd4_decode_fattr(argp, open->op_bmval,
842 &open->op_iattr, &open->op_acl);
843 if (status)
844 goto out;
845 break;
846 default:
847 goto xdr_error;
848 }
849 break;
850 default:
851 goto xdr_error;
852 }
853
854 /* open_claim */
855 READ_BUF(4);
856 READ32(open->op_claim_type);
857 switch (open->op_claim_type) {
858 case NFS4_OPEN_CLAIM_NULL:
859 case NFS4_OPEN_CLAIM_DELEGATE_PREV:
860 READ_BUF(4);
861 READ32(open->op_fname.len);
862 READ_BUF(open->op_fname.len);
863 SAVEMEM(open->op_fname.data, open->op_fname.len);
864 if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
865 return status;
866 break;
867 case NFS4_OPEN_CLAIM_PREVIOUS:
868 READ_BUF(4);
869 READ32(open->op_delegate_type);
870 break;
871 case NFS4_OPEN_CLAIM_DELEGATE_CUR:
872 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
873 if (status)
874 return status;
875 READ_BUF(4);
876 READ32(open->op_fname.len);
877 READ_BUF(open->op_fname.len);
878 SAVEMEM(open->op_fname.data, open->op_fname.len);
879 if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
880 return status;
881 break;
882 case NFS4_OPEN_CLAIM_FH:
883 case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
884 if (argp->minorversion < 1)
885 goto xdr_error;
886 /* void */
887 break;
888 case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
889 if (argp->minorversion < 1)
890 goto xdr_error;
891 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
892 if (status)
893 return status;
894 break;
895 default:
896 goto xdr_error;
897 }
898
899 DECODE_TAIL;
900 }
901
902 static __be32
903 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf)
904 {
905 DECODE_HEAD;
906
907 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid);
908 if (status)
909 return status;
910 READ_BUF(4);
911 READ32(open_conf->oc_seqid);
912
913 DECODE_TAIL;
914 }
915
916 static __be32
917 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down)
918 {
919 DECODE_HEAD;
920
921 status = nfsd4_decode_stateid(argp, &open_down->od_stateid);
922 if (status)
923 return status;
924 READ_BUF(4);
925 READ32(open_down->od_seqid);
926 status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
927 &open_down->od_deleg_want, NULL);
928 if (status)
929 return status;
930 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny);
931 if (status)
932 return status;
933 DECODE_TAIL;
934 }
935
936 static __be32
937 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
938 {
939 DECODE_HEAD;
940
941 READ_BUF(4);
942 READ32(putfh->pf_fhlen);
943 if (putfh->pf_fhlen > NFS4_FHSIZE)
944 goto xdr_error;
945 READ_BUF(putfh->pf_fhlen);
946 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen);
947
948 DECODE_TAIL;
949 }
950
951 static __be32
952 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
953 {
954 DECODE_HEAD;
955
956 status = nfsd4_decode_stateid(argp, &read->rd_stateid);
957 if (status)
958 return status;
959 READ_BUF(12);
960 READ64(read->rd_offset);
961 READ32(read->rd_length);
962
963 DECODE_TAIL;
964 }
965
966 static __be32
967 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir)
968 {
969 DECODE_HEAD;
970
971 READ_BUF(24);
972 READ64(readdir->rd_cookie);
973 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data));
974 READ32(readdir->rd_dircount); /* just in case you needed a useless field... */
975 READ32(readdir->rd_maxcount);
976 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval)))
977 goto out;
978
979 DECODE_TAIL;
980 }
981
982 static __be32
983 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove)
984 {
985 DECODE_HEAD;
986
987 READ_BUF(4);
988 READ32(remove->rm_namelen);
989 READ_BUF(remove->rm_namelen);
990 SAVEMEM(remove->rm_name, remove->rm_namelen);
991 if ((status = check_filename(remove->rm_name, remove->rm_namelen)))
992 return status;
993
994 DECODE_TAIL;
995 }
996
997 static __be32
998 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename)
999 {
1000 DECODE_HEAD;
1001
1002 READ_BUF(4);
1003 READ32(rename->rn_snamelen);
1004 READ_BUF(rename->rn_snamelen + 4);
1005 SAVEMEM(rename->rn_sname, rename->rn_snamelen);
1006 READ32(rename->rn_tnamelen);
1007 READ_BUF(rename->rn_tnamelen);
1008 SAVEMEM(rename->rn_tname, rename->rn_tnamelen);
1009 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen)))
1010 return status;
1011 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen)))
1012 return status;
1013
1014 DECODE_TAIL;
1015 }
1016
1017 static __be32
1018 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid)
1019 {
1020 DECODE_HEAD;
1021
1022 READ_BUF(sizeof(clientid_t));
1023 COPYMEM(clientid, sizeof(clientid_t));
1024
1025 DECODE_TAIL;
1026 }
1027
1028 static __be32
1029 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
1030 struct nfsd4_secinfo *secinfo)
1031 {
1032 DECODE_HEAD;
1033
1034 READ_BUF(4);
1035 READ32(secinfo->si_namelen);
1036 READ_BUF(secinfo->si_namelen);
1037 SAVEMEM(secinfo->si_name, secinfo->si_namelen);
1038 status = check_filename(secinfo->si_name, secinfo->si_namelen);
1039 if (status)
1040 return status;
1041 DECODE_TAIL;
1042 }
1043
1044 static __be32
1045 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
1046 struct nfsd4_secinfo_no_name *sin)
1047 {
1048 DECODE_HEAD;
1049
1050 READ_BUF(4);
1051 READ32(sin->sin_style);
1052 DECODE_TAIL;
1053 }
1054
1055 static __be32
1056 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr)
1057 {
1058 __be32 status;
1059
1060 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid);
1061 if (status)
1062 return status;
1063 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr,
1064 &setattr->sa_acl);
1065 }
1066
1067 static __be32
1068 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid)
1069 {
1070 DECODE_HEAD;
1071
1072 READ_BUF(NFS4_VERIFIER_SIZE);
1073 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE);
1074
1075 status = nfsd4_decode_opaque(argp, &setclientid->se_name);
1076 if (status)
1077 return nfserr_bad_xdr;
1078 READ_BUF(8);
1079 READ32(setclientid->se_callback_prog);
1080 READ32(setclientid->se_callback_netid_len);
1081
1082 READ_BUF(setclientid->se_callback_netid_len + 4);
1083 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len);
1084 READ32(setclientid->se_callback_addr_len);
1085
1086 READ_BUF(setclientid->se_callback_addr_len + 4);
1087 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len);
1088 READ32(setclientid->se_callback_ident);
1089
1090 DECODE_TAIL;
1091 }
1092
1093 static __be32
1094 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c)
1095 {
1096 DECODE_HEAD;
1097
1098 READ_BUF(8 + NFS4_VERIFIER_SIZE);
1099 COPYMEM(&scd_c->sc_clientid, 8);
1100 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE);
1101
1102 DECODE_TAIL;
1103 }
1104
1105 /* Also used for NVERIFY */
1106 static __be32
1107 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify)
1108 {
1109 DECODE_HEAD;
1110
1111 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval)))
1112 goto out;
1113
1114 /* For convenience's sake, we compare raw xdr'd attributes in
1115 * nfsd4_proc_verify */
1116
1117 READ_BUF(4);
1118 READ32(verify->ve_attrlen);
1119 READ_BUF(verify->ve_attrlen);
1120 SAVEMEM(verify->ve_attrval, verify->ve_attrlen);
1121
1122 DECODE_TAIL;
1123 }
1124
1125 static __be32
1126 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
1127 {
1128 int avail;
1129 int len;
1130 DECODE_HEAD;
1131
1132 status = nfsd4_decode_stateid(argp, &write->wr_stateid);
1133 if (status)
1134 return status;
1135 READ_BUF(16);
1136 READ64(write->wr_offset);
1137 READ32(write->wr_stable_how);
1138 if (write->wr_stable_how > 2)
1139 goto xdr_error;
1140 READ32(write->wr_buflen);
1141
1142 /* Sorry .. no magic macros for this.. *
1143 * READ_BUF(write->wr_buflen);
1144 * SAVEMEM(write->wr_buf, write->wr_buflen);
1145 */
1146 avail = (char*)argp->end - (char*)argp->p;
1147 if (avail + argp->pagelen < write->wr_buflen) {
1148 dprintk("NFSD: xdr error (%s:%d)\n",
1149 __FILE__, __LINE__);
1150 goto xdr_error;
1151 }
1152 write->wr_head.iov_base = p;
1153 write->wr_head.iov_len = avail;
1154 WARN_ON(avail != (XDR_QUADLEN(avail) << 2));
1155 write->wr_pagelist = argp->pagelist;
1156
1157 len = XDR_QUADLEN(write->wr_buflen) << 2;
1158 if (len >= avail) {
1159 int pages;
1160
1161 len -= avail;
1162
1163 pages = len >> PAGE_SHIFT;
1164 argp->pagelist += pages;
1165 argp->pagelen -= pages * PAGE_SIZE;
1166 len -= pages * PAGE_SIZE;
1167
1168 argp->p = (__be32 *)page_address(argp->pagelist[0]);
1169 argp->end = argp->p + XDR_QUADLEN(PAGE_SIZE);
1170 }
1171 argp->p += XDR_QUADLEN(len);
1172
1173 DECODE_TAIL;
1174 }
1175
1176 static __be32
1177 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner)
1178 {
1179 DECODE_HEAD;
1180
1181 READ_BUF(12);
1182 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t));
1183 READ32(rlockowner->rl_owner.len);
1184 READ_BUF(rlockowner->rl_owner.len);
1185 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len);
1186
1187 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1188 return nfserr_inval;
1189 DECODE_TAIL;
1190 }
1191
1192 static __be32
1193 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1194 struct nfsd4_exchange_id *exid)
1195 {
1196 int dummy, tmp;
1197 DECODE_HEAD;
1198
1199 READ_BUF(NFS4_VERIFIER_SIZE);
1200 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE);
1201
1202 status = nfsd4_decode_opaque(argp, &exid->clname);
1203 if (status)
1204 return nfserr_bad_xdr;
1205
1206 READ_BUF(4);
1207 READ32(exid->flags);
1208
1209 /* Ignore state_protect4_a */
1210 READ_BUF(4);
1211 READ32(exid->spa_how);
1212 switch (exid->spa_how) {
1213 case SP4_NONE:
1214 break;
1215 case SP4_MACH_CRED:
1216 /* spo_must_enforce */
1217 READ_BUF(4);
1218 READ32(dummy);
1219 READ_BUF(dummy * 4);
1220 p += dummy;
1221
1222 /* spo_must_allow */
1223 READ_BUF(4);
1224 READ32(dummy);
1225 READ_BUF(dummy * 4);
1226 p += dummy;
1227 break;
1228 case SP4_SSV:
1229 /* ssp_ops */
1230 READ_BUF(4);
1231 READ32(dummy);
1232 READ_BUF(dummy * 4);
1233 p += dummy;
1234
1235 READ_BUF(4);
1236 READ32(dummy);
1237 READ_BUF(dummy * 4);
1238 p += dummy;
1239
1240 /* ssp_hash_algs<> */
1241 READ_BUF(4);
1242 READ32(tmp);
1243 while (tmp--) {
1244 READ_BUF(4);
1245 READ32(dummy);
1246 READ_BUF(dummy);
1247 p += XDR_QUADLEN(dummy);
1248 }
1249
1250 /* ssp_encr_algs<> */
1251 READ_BUF(4);
1252 READ32(tmp);
1253 while (tmp--) {
1254 READ_BUF(4);
1255 READ32(dummy);
1256 READ_BUF(dummy);
1257 p += XDR_QUADLEN(dummy);
1258 }
1259
1260 /* ssp_window and ssp_num_gss_handles */
1261 READ_BUF(8);
1262 READ32(dummy);
1263 READ32(dummy);
1264 break;
1265 default:
1266 goto xdr_error;
1267 }
1268
1269 /* Ignore Implementation ID */
1270 READ_BUF(4); /* nfs_impl_id4 array length */
1271 READ32(dummy);
1272
1273 if (dummy > 1)
1274 goto xdr_error;
1275
1276 if (dummy == 1) {
1277 /* nii_domain */
1278 READ_BUF(4);
1279 READ32(dummy);
1280 READ_BUF(dummy);
1281 p += XDR_QUADLEN(dummy);
1282
1283 /* nii_name */
1284 READ_BUF(4);
1285 READ32(dummy);
1286 READ_BUF(dummy);
1287 p += XDR_QUADLEN(dummy);
1288
1289 /* nii_date */
1290 READ_BUF(12);
1291 p += 3;
1292 }
1293 DECODE_TAIL;
1294 }
1295
1296 static __be32
1297 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1298 struct nfsd4_create_session *sess)
1299 {
1300 DECODE_HEAD;
1301 u32 dummy;
1302
1303 READ_BUF(16);
1304 COPYMEM(&sess->clientid, 8);
1305 READ32(sess->seqid);
1306 READ32(sess->flags);
1307
1308 /* Fore channel attrs */
1309 READ_BUF(28);
1310 READ32(dummy); /* headerpadsz is always 0 */
1311 READ32(sess->fore_channel.maxreq_sz);
1312 READ32(sess->fore_channel.maxresp_sz);
1313 READ32(sess->fore_channel.maxresp_cached);
1314 READ32(sess->fore_channel.maxops);
1315 READ32(sess->fore_channel.maxreqs);
1316 READ32(sess->fore_channel.nr_rdma_attrs);
1317 if (sess->fore_channel.nr_rdma_attrs == 1) {
1318 READ_BUF(4);
1319 READ32(sess->fore_channel.rdma_attrs);
1320 } else if (sess->fore_channel.nr_rdma_attrs > 1) {
1321 dprintk("Too many fore channel attr bitmaps!\n");
1322 goto xdr_error;
1323 }
1324
1325 /* Back channel attrs */
1326 READ_BUF(28);
1327 READ32(dummy); /* headerpadsz is always 0 */
1328 READ32(sess->back_channel.maxreq_sz);
1329 READ32(sess->back_channel.maxresp_sz);
1330 READ32(sess->back_channel.maxresp_cached);
1331 READ32(sess->back_channel.maxops);
1332 READ32(sess->back_channel.maxreqs);
1333 READ32(sess->back_channel.nr_rdma_attrs);
1334 if (sess->back_channel.nr_rdma_attrs == 1) {
1335 READ_BUF(4);
1336 READ32(sess->back_channel.rdma_attrs);
1337 } else if (sess->back_channel.nr_rdma_attrs > 1) {
1338 dprintk("Too many back channel attr bitmaps!\n");
1339 goto xdr_error;
1340 }
1341
1342 READ_BUF(4);
1343 READ32(sess->callback_prog);
1344 nfsd4_decode_cb_sec(argp, &sess->cb_sec);
1345 DECODE_TAIL;
1346 }
1347
1348 static __be32
1349 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1350 struct nfsd4_destroy_session *destroy_session)
1351 {
1352 DECODE_HEAD;
1353 READ_BUF(NFS4_MAX_SESSIONID_LEN);
1354 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1355
1356 DECODE_TAIL;
1357 }
1358
1359 static __be32
1360 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
1361 struct nfsd4_free_stateid *free_stateid)
1362 {
1363 DECODE_HEAD;
1364
1365 READ_BUF(sizeof(stateid_t));
1366 READ32(free_stateid->fr_stateid.si_generation);
1367 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t));
1368
1369 DECODE_TAIL;
1370 }
1371
1372 static __be32
1373 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1374 struct nfsd4_sequence *seq)
1375 {
1376 DECODE_HEAD;
1377
1378 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16);
1379 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1380 READ32(seq->seqid);
1381 READ32(seq->slotid);
1382 READ32(seq->maxslots);
1383 READ32(seq->cachethis);
1384
1385 DECODE_TAIL;
1386 }
1387
1388 static __be32
1389 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid)
1390 {
1391 int i;
1392 __be32 *p, status;
1393 struct nfsd4_test_stateid_id *stateid;
1394
1395 READ_BUF(4);
1396 test_stateid->ts_num_ids = ntohl(*p++);
1397
1398 INIT_LIST_HEAD(&test_stateid->ts_stateid_list);
1399
1400 for (i = 0; i < test_stateid->ts_num_ids; i++) {
1401 stateid = kmalloc(sizeof(struct nfsd4_test_stateid_id), GFP_KERNEL);
1402 if (!stateid) {
1403 status = nfserrno(-ENOMEM);
1404 goto out;
1405 }
1406
1407 defer_free(argp, kfree, stateid);
1408 INIT_LIST_HEAD(&stateid->ts_id_list);
1409 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list);
1410
1411 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid);
1412 if (status)
1413 goto out;
1414 }
1415
1416 status = 0;
1417 out:
1418 return status;
1419 xdr_error:
1420 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__);
1421 status = nfserr_bad_xdr;
1422 goto out;
1423 }
1424
1425 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc)
1426 {
1427 DECODE_HEAD;
1428
1429 READ_BUF(8);
1430 COPYMEM(&dc->clientid, 8);
1431
1432 DECODE_TAIL;
1433 }
1434
1435 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc)
1436 {
1437 DECODE_HEAD;
1438
1439 READ_BUF(4);
1440 READ32(rc->rca_one_fs);
1441
1442 DECODE_TAIL;
1443 }
1444
1445 static __be32
1446 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p)
1447 {
1448 return nfs_ok;
1449 }
1450
1451 static __be32
1452 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p)
1453 {
1454 return nfserr_notsupp;
1455 }
1456
1457 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *);
1458
1459 static nfsd4_dec nfsd4_dec_ops[] = {
1460 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access,
1461 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close,
1462 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit,
1463 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create,
1464 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp,
1465 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn,
1466 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr,
1467 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop,
1468 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link,
1469 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock,
1470 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt,
1471 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku,
1472 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup,
1473 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop,
1474 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1475 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open,
1476 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp,
1477 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm,
1478 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade,
1479 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh,
1480 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_noop,
1481 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop,
1482 [OP_READ] = (nfsd4_dec)nfsd4_decode_read,
1483 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir,
1484 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop,
1485 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove,
1486 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename,
1487 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew,
1488 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop,
1489 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop,
1490 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo,
1491 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr,
1492 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid,
1493 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm,
1494 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1495 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write,
1496 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner,
1497 };
1498
1499 static nfsd4_dec nfsd41_dec_ops[] = {
1500 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access,
1501 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close,
1502 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit,
1503 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create,
1504 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp,
1505 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn,
1506 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr,
1507 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop,
1508 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link,
1509 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock,
1510 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt,
1511 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku,
1512 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup,
1513 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop,
1514 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1515 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open,
1516 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp,
1517 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_notsupp,
1518 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade,
1519 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh,
1520 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_notsupp,
1521 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop,
1522 [OP_READ] = (nfsd4_dec)nfsd4_decode_read,
1523 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir,
1524 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop,
1525 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove,
1526 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename,
1527 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_notsupp,
1528 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop,
1529 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop,
1530 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo,
1531 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr,
1532 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp,
1533 [OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp,
1534 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1535 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write,
1536 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_notsupp,
1537
1538 /* new operations for NFSv4.1 */
1539 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl,
1540 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session,
1541 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id,
1542 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session,
1543 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session,
1544 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid,
1545 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1546 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp,
1547 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
1548 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp,
1549 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp,
1550 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp,
1551 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name,
1552 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence,
1553 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp,
1554 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid,
1555 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1556 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid,
1557 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete,
1558 };
1559
1560 struct nfsd4_minorversion_ops {
1561 nfsd4_dec *decoders;
1562 int nops;
1563 };
1564
1565 static struct nfsd4_minorversion_ops nfsd4_minorversion[] = {
1566 [0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) },
1567 [1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) },
1568 };
1569
1570 static __be32
1571 nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
1572 {
1573 DECODE_HEAD;
1574 struct nfsd4_op *op;
1575 struct nfsd4_minorversion_ops *ops;
1576 bool cachethis = false;
1577 int i;
1578
1579 READ_BUF(4);
1580 READ32(argp->taglen);
1581 READ_BUF(argp->taglen + 8);
1582 SAVEMEM(argp->tag, argp->taglen);
1583 READ32(argp->minorversion);
1584 READ32(argp->opcnt);
1585
1586 if (argp->taglen > NFSD4_MAX_TAGLEN)
1587 goto xdr_error;
1588 if (argp->opcnt > 100)
1589 goto xdr_error;
1590
1591 if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
1592 argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL);
1593 if (!argp->ops) {
1594 argp->ops = argp->iops;
1595 dprintk("nfsd: couldn't allocate room for COMPOUND\n");
1596 goto xdr_error;
1597 }
1598 }
1599
1600 if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion))
1601 argp->opcnt = 0;
1602
1603 ops = &nfsd4_minorversion[argp->minorversion];
1604 for (i = 0; i < argp->opcnt; i++) {
1605 op = &argp->ops[i];
1606 op->replay = NULL;
1607
1608 READ_BUF(4);
1609 READ32(op->opnum);
1610
1611 if (op->opnum >= FIRST_NFS4_OP && op->opnum <= LAST_NFS4_OP)
1612 op->status = ops->decoders[op->opnum](argp, &op->u);
1613 else {
1614 op->opnum = OP_ILLEGAL;
1615 op->status = nfserr_op_illegal;
1616 }
1617
1618 if (op->status) {
1619 argp->opcnt = i+1;
1620 break;
1621 }
1622 /*
1623 * We'll try to cache the result in the DRC if any one
1624 * op in the compound wants to be cached:
1625 */
1626 cachethis |= nfsd4_cache_this_op(op);
1627 }
1628 /* Sessions make the DRC unnecessary: */
1629 if (argp->minorversion)
1630 cachethis = false;
1631 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
1632
1633 DECODE_TAIL;
1634 }
1635
1636 #define WRITE32(n) *p++ = htonl(n)
1637 #define WRITE64(n) do { \
1638 *p++ = htonl((u32)((n) >> 32)); \
1639 *p++ = htonl((u32)(n)); \
1640 } while (0)
1641 #define WRITEMEM(ptr,nbytes) do { if (nbytes > 0) { \
1642 *(p + XDR_QUADLEN(nbytes) -1) = 0; \
1643 memcpy(p, ptr, nbytes); \
1644 p += XDR_QUADLEN(nbytes); \
1645 }} while (0)
1646
1647 static void write32(__be32 **p, u32 n)
1648 {
1649 *(*p)++ = htonl(n);
1650 }
1651
1652 static void write64(__be32 **p, u64 n)
1653 {
1654 write32(p, (n >> 32));
1655 write32(p, (u32)n);
1656 }
1657
1658 static void write_change(__be32 **p, struct kstat *stat, struct inode *inode)
1659 {
1660 if (IS_I_VERSION(inode)) {
1661 write64(p, inode->i_version);
1662 } else {
1663 write32(p, stat->ctime.tv_sec);
1664 write32(p, stat->ctime.tv_nsec);
1665 }
1666 }
1667
1668 static void write_cinfo(__be32 **p, struct nfsd4_change_info *c)
1669 {
1670 write32(p, c->atomic);
1671 if (c->change_supported) {
1672 write64(p, c->before_change);
1673 write64(p, c->after_change);
1674 } else {
1675 write32(p, c->before_ctime_sec);
1676 write32(p, c->before_ctime_nsec);
1677 write32(p, c->after_ctime_sec);
1678 write32(p, c->after_ctime_nsec);
1679 }
1680 }
1681
1682 #define RESERVE_SPACE(nbytes) do { \
1683 p = resp->p; \
1684 BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end); \
1685 } while (0)
1686 #define ADJUST_ARGS() resp->p = p
1687
1688 /*
1689 * Header routine to setup seqid operation replay cache
1690 */
1691 #define ENCODE_SEQID_OP_HEAD \
1692 __be32 *save; \
1693 \
1694 save = resp->p;
1695
1696 /*
1697 * Routine for encoding the result of a "seqid-mutating" NFSv4 operation. This
1698 * is where sequence id's are incremented, and the replay cache is filled.
1699 * Note that we increment sequence id's here, at the last moment, so we're sure
1700 * we know whether the error to be returned is a sequence id mutating error.
1701 */
1702
1703 static void encode_seqid_op_tail(struct nfsd4_compoundres *resp, __be32 *save, __be32 nfserr)
1704 {
1705 struct nfs4_stateowner *stateowner = resp->cstate.replay_owner;
1706
1707 if (seqid_mutating_err(ntohl(nfserr)) && stateowner) {
1708 stateowner->so_seqid++;
1709 stateowner->so_replay.rp_status = nfserr;
1710 stateowner->so_replay.rp_buflen =
1711 (char *)resp->p - (char *)save;
1712 memcpy(stateowner->so_replay.rp_buf, save,
1713 stateowner->so_replay.rp_buflen);
1714 nfsd4_purge_closed_stateid(stateowner);
1715 }
1716 }
1717
1718 /* Encode as an array of strings the string given with components
1719 * separated @sep, escaped with esc_enter and esc_exit.
1720 */
1721 static __be32 nfsd4_encode_components_esc(char sep, char *components,
1722 __be32 **pp, int *buflen,
1723 char esc_enter, char esc_exit)
1724 {
1725 __be32 *p = *pp;
1726 __be32 *countp = p;
1727 int strlen, count=0;
1728 char *str, *end, *next;
1729
1730 dprintk("nfsd4_encode_components(%s)\n", components);
1731 if ((*buflen -= 4) < 0)
1732 return nfserr_resource;
1733 WRITE32(0); /* We will fill this in with @count later */
1734 end = str = components;
1735 while (*end) {
1736 bool found_esc = false;
1737
1738 /* try to parse as esc_start, ..., esc_end, sep */
1739 if (*str == esc_enter) {
1740 for (; *end && (*end != esc_exit); end++)
1741 /* find esc_exit or end of string */;
1742 next = end + 1;
1743 if (*end && (!*next || *next == sep)) {
1744 str++;
1745 found_esc = true;
1746 }
1747 }
1748
1749 if (!found_esc)
1750 for (; *end && (*end != sep); end++)
1751 /* find sep or end of string */;
1752
1753 strlen = end - str;
1754 if (strlen) {
1755 if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0)
1756 return nfserr_resource;
1757 WRITE32(strlen);
1758 WRITEMEM(str, strlen);
1759 count++;
1760 }
1761 else
1762 end++;
1763 str = end;
1764 }
1765 *pp = p;
1766 p = countp;
1767 WRITE32(count);
1768 return 0;
1769 }
1770
1771 /* Encode as an array of strings the string given with components
1772 * separated @sep.
1773 */
1774 static __be32 nfsd4_encode_components(char sep, char *components,
1775 __be32 **pp, int *buflen)
1776 {
1777 return nfsd4_encode_components_esc(sep, components, pp, buflen, 0, 0);
1778 }
1779
1780 /*
1781 * encode a location element of a fs_locations structure
1782 */
1783 static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location,
1784 __be32 **pp, int *buflen)
1785 {
1786 __be32 status;
1787 __be32 *p = *pp;
1788
1789 status = nfsd4_encode_components_esc(':', location->hosts, &p, buflen,
1790 '[', ']');
1791 if (status)
1792 return status;
1793 status = nfsd4_encode_components('/', location->path, &p, buflen);
1794 if (status)
1795 return status;
1796 *pp = p;
1797 return 0;
1798 }
1799
1800 /*
1801 * Encode a path in RFC3530 'pathname4' format
1802 */
1803 static __be32 nfsd4_encode_path(const struct path *root,
1804 const struct path *path, __be32 **pp, int *buflen)
1805 {
1806 struct path cur = {
1807 .mnt = path->mnt,
1808 .dentry = path->dentry,
1809 };
1810 __be32 *p = *pp;
1811 struct dentry **components = NULL;
1812 unsigned int ncomponents = 0;
1813 __be32 err = nfserr_jukebox;
1814
1815 dprintk("nfsd4_encode_components(");
1816
1817 path_get(&cur);
1818 /* First walk the path up to the nfsd root, and store the
1819 * dentries/path components in an array.
1820 */
1821 for (;;) {
1822 if (cur.dentry == root->dentry && cur.mnt == root->mnt)
1823 break;
1824 if (cur.dentry == cur.mnt->mnt_root) {
1825 if (follow_up(&cur))
1826 continue;
1827 goto out_free;
1828 }
1829 if ((ncomponents & 15) == 0) {
1830 struct dentry **new;
1831 new = krealloc(components,
1832 sizeof(*new) * (ncomponents + 16),
1833 GFP_KERNEL);
1834 if (!new)
1835 goto out_free;
1836 components = new;
1837 }
1838 components[ncomponents++] = cur.dentry;
1839 cur.dentry = dget_parent(cur.dentry);
1840 }
1841
1842 *buflen -= 4;
1843 if (*buflen < 0)
1844 goto out_free;
1845 WRITE32(ncomponents);
1846
1847 while (ncomponents) {
1848 struct dentry *dentry = components[ncomponents - 1];
1849 unsigned int len = dentry->d_name.len;
1850
1851 *buflen -= 4 + (XDR_QUADLEN(len) << 2);
1852 if (*buflen < 0)
1853 goto out_free;
1854 WRITE32(len);
1855 WRITEMEM(dentry->d_name.name, len);
1856 dprintk("/%s", dentry->d_name.name);
1857 dput(dentry);
1858 ncomponents--;
1859 }
1860
1861 *pp = p;
1862 err = 0;
1863 out_free:
1864 dprintk(")\n");
1865 while (ncomponents)
1866 dput(components[--ncomponents]);
1867 kfree(components);
1868 path_put(&cur);
1869 return err;
1870 }
1871
1872 static __be32 nfsd4_encode_fsloc_fsroot(struct svc_rqst *rqstp,
1873 const struct path *path, __be32 **pp, int *buflen)
1874 {
1875 struct svc_export *exp_ps;
1876 __be32 res;
1877
1878 exp_ps = rqst_find_fsidzero_export(rqstp);
1879 if (IS_ERR(exp_ps))
1880 return nfserrno(PTR_ERR(exp_ps));
1881 res = nfsd4_encode_path(&exp_ps->ex_path, path, pp, buflen);
1882 exp_put(exp_ps);
1883 return res;
1884 }
1885
1886 /*
1887 * encode a fs_locations structure
1888 */
1889 static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp,
1890 struct svc_export *exp,
1891 __be32 **pp, int *buflen)
1892 {
1893 __be32 status;
1894 int i;
1895 __be32 *p = *pp;
1896 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
1897
1898 status = nfsd4_encode_fsloc_fsroot(rqstp, &exp->ex_path, &p, buflen);
1899 if (status)
1900 return status;
1901 if ((*buflen -= 4) < 0)
1902 return nfserr_resource;
1903 WRITE32(fslocs->locations_count);
1904 for (i=0; i<fslocs->locations_count; i++) {
1905 status = nfsd4_encode_fs_location4(&fslocs->locations[i],
1906 &p, buflen);
1907 if (status)
1908 return status;
1909 }
1910 *pp = p;
1911 return 0;
1912 }
1913
1914 static u32 nfs4_file_type(umode_t mode)
1915 {
1916 switch (mode & S_IFMT) {
1917 case S_IFIFO: return NF4FIFO;
1918 case S_IFCHR: return NF4CHR;
1919 case S_IFDIR: return NF4DIR;
1920 case S_IFBLK: return NF4BLK;
1921 case S_IFLNK: return NF4LNK;
1922 case S_IFREG: return NF4REG;
1923 case S_IFSOCK: return NF4SOCK;
1924 default: return NF4BAD;
1925 };
1926 }
1927
1928 static __be32
1929 nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, uid_t id, int group,
1930 __be32 **p, int *buflen)
1931 {
1932 int status;
1933
1934 if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4)
1935 return nfserr_resource;
1936 if (whotype != NFS4_ACL_WHO_NAMED)
1937 status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1));
1938 else if (group)
1939 status = nfsd_map_gid_to_name(rqstp, id, (u8 *)(*p + 1));
1940 else
1941 status = nfsd_map_uid_to_name(rqstp, id, (u8 *)(*p + 1));
1942 if (status < 0)
1943 return nfserrno(status);
1944 *p = xdr_encode_opaque(*p, NULL, status);
1945 *buflen -= (XDR_QUADLEN(status) << 2) + 4;
1946 BUG_ON(*buflen < 0);
1947 return 0;
1948 }
1949
1950 static inline __be32
1951 nfsd4_encode_user(struct svc_rqst *rqstp, uid_t uid, __be32 **p, int *buflen)
1952 {
1953 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, uid, 0, p, buflen);
1954 }
1955
1956 static inline __be32
1957 nfsd4_encode_group(struct svc_rqst *rqstp, uid_t gid, __be32 **p, int *buflen)
1958 {
1959 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, gid, 1, p, buflen);
1960 }
1961
1962 static inline __be32
1963 nfsd4_encode_aclname(struct svc_rqst *rqstp, int whotype, uid_t id, int group,
1964 __be32 **p, int *buflen)
1965 {
1966 return nfsd4_encode_name(rqstp, whotype, id, group, p, buflen);
1967 }
1968
1969 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
1970 FATTR4_WORD0_RDATTR_ERROR)
1971 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
1972
1973 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err)
1974 {
1975 /* As per referral draft: */
1976 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
1977 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
1978 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
1979 *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
1980 *rdattr_err = NFSERR_MOVED;
1981 else
1982 return nfserr_moved;
1983 }
1984 *bmval0 &= WORD0_ABSENT_FS_ATTRS;
1985 *bmval1 &= WORD1_ABSENT_FS_ATTRS;
1986 return 0;
1987 }
1988
1989
1990 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat)
1991 {
1992 struct path path = exp->ex_path;
1993 int err;
1994
1995 path_get(&path);
1996 while (follow_up(&path)) {
1997 if (path.dentry != path.mnt->mnt_root)
1998 break;
1999 }
2000 err = vfs_getattr(path.mnt, path.dentry, stat);
2001 path_put(&path);
2002 return err;
2003 }
2004
2005 /*
2006 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
2007 * ourselves.
2008 *
2009 * @countp is the buffer size in _words_; upon successful return this becomes
2010 * replaced with the number of words written.
2011 */
2012 __be32
2013 nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
2014 struct dentry *dentry, __be32 *buffer, int *countp, u32 *bmval,
2015 struct svc_rqst *rqstp, int ignore_crossmnt)
2016 {
2017 u32 bmval0 = bmval[0];
2018 u32 bmval1 = bmval[1];
2019 u32 bmval2 = bmval[2];
2020 struct kstat stat;
2021 struct svc_fh tempfh;
2022 struct kstatfs statfs;
2023 int buflen = *countp << 2;
2024 __be32 *attrlenp;
2025 u32 dummy;
2026 u64 dummy64;
2027 u32 rdattr_err = 0;
2028 __be32 *p = buffer;
2029 __be32 status;
2030 int err;
2031 int aclsupport = 0;
2032 struct nfs4_acl *acl = NULL;
2033 struct nfsd4_compoundres *resp = rqstp->rq_resp;
2034 u32 minorversion = resp->cstate.minorversion;
2035 struct path path = {
2036 .mnt = exp->ex_path.mnt,
2037 .dentry = dentry,
2038 };
2039 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
2040
2041 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1);
2042 BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion));
2043 BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion));
2044 BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion));
2045
2046 if (exp->ex_fslocs.migrated) {
2047 BUG_ON(bmval[2]);
2048 status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err);
2049 if (status)
2050 goto out;
2051 }
2052
2053 err = vfs_getattr(exp->ex_path.mnt, dentry, &stat);
2054 if (err)
2055 goto out_nfserr;
2056 if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL |
2057 FATTR4_WORD0_MAXNAME)) ||
2058 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
2059 FATTR4_WORD1_SPACE_TOTAL))) {
2060 err = vfs_statfs(&path, &statfs);
2061 if (err)
2062 goto out_nfserr;
2063 }
2064 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) {
2065 fh_init(&tempfh, NFS4_FHSIZE);
2066 status = fh_compose(&tempfh, exp, dentry, NULL);
2067 if (status)
2068 goto out;
2069 fhp = &tempfh;
2070 }
2071 if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT
2072 | FATTR4_WORD0_SUPPORTED_ATTRS)) {
2073 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl);
2074 aclsupport = (err == 0);
2075 if (bmval0 & FATTR4_WORD0_ACL) {
2076 if (err == -EOPNOTSUPP)
2077 bmval0 &= ~FATTR4_WORD0_ACL;
2078 else if (err == -EINVAL) {
2079 status = nfserr_attrnotsupp;
2080 goto out;
2081 } else if (err != 0)
2082 goto out_nfserr;
2083 }
2084 }
2085
2086 if (bmval2) {
2087 if ((buflen -= 16) < 0)
2088 goto out_resource;
2089 WRITE32(3);
2090 WRITE32(bmval0);
2091 WRITE32(bmval1);
2092 WRITE32(bmval2);
2093 } else if (bmval1) {
2094 if ((buflen -= 12) < 0)
2095 goto out_resource;
2096 WRITE32(2);
2097 WRITE32(bmval0);
2098 WRITE32(bmval1);
2099 } else {
2100 if ((buflen -= 8) < 0)
2101 goto out_resource;
2102 WRITE32(1);
2103 WRITE32(bmval0);
2104 }
2105 attrlenp = p++; /* to be backfilled later */
2106
2107 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2108 u32 word0 = nfsd_suppattrs0(minorversion);
2109 u32 word1 = nfsd_suppattrs1(minorversion);
2110 u32 word2 = nfsd_suppattrs2(minorversion);
2111
2112 if (!aclsupport)
2113 word0 &= ~FATTR4_WORD0_ACL;
2114 if (!word2) {
2115 if ((buflen -= 12) < 0)
2116 goto out_resource;
2117 WRITE32(2);
2118 WRITE32(word0);
2119 WRITE32(word1);
2120 } else {
2121 if ((buflen -= 16) < 0)
2122 goto out_resource;
2123 WRITE32(3);
2124 WRITE32(word0);
2125 WRITE32(word1);
2126 WRITE32(word2);
2127 }
2128 }
2129 if (bmval0 & FATTR4_WORD0_TYPE) {
2130 if ((buflen -= 4) < 0)
2131 goto out_resource;
2132 dummy = nfs4_file_type(stat.mode);
2133 if (dummy == NF4BAD)
2134 goto out_serverfault;
2135 WRITE32(dummy);
2136 }
2137 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
2138 if ((buflen -= 4) < 0)
2139 goto out_resource;
2140 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
2141 WRITE32(NFS4_FH_PERSISTENT);
2142 else
2143 WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME);
2144 }
2145 if (bmval0 & FATTR4_WORD0_CHANGE) {
2146 if ((buflen -= 8) < 0)
2147 goto out_resource;
2148 write_change(&p, &stat, dentry->d_inode);
2149 }
2150 if (bmval0 & FATTR4_WORD0_SIZE) {
2151 if ((buflen -= 8) < 0)
2152 goto out_resource;
2153 WRITE64(stat.size);
2154 }
2155 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
2156 if ((buflen -= 4) < 0)
2157 goto out_resource;
2158 WRITE32(1);
2159 }
2160 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
2161 if ((buflen -= 4) < 0)
2162 goto out_resource;
2163 WRITE32(1);
2164 }
2165 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
2166 if ((buflen -= 4) < 0)
2167 goto out_resource;
2168 WRITE32(0);
2169 }
2170 if (bmval0 & FATTR4_WORD0_FSID) {
2171 if ((buflen -= 16) < 0)
2172 goto out_resource;
2173 if (exp->ex_fslocs.migrated) {
2174 WRITE64(NFS4_REFERRAL_FSID_MAJOR);
2175 WRITE64(NFS4_REFERRAL_FSID_MINOR);
2176 } else switch(fsid_source(fhp)) {
2177 case FSIDSOURCE_FSID:
2178 WRITE64((u64)exp->ex_fsid);
2179 WRITE64((u64)0);
2180 break;
2181 case FSIDSOURCE_DEV:
2182 WRITE32(0);
2183 WRITE32(MAJOR(stat.dev));
2184 WRITE32(0);
2185 WRITE32(MINOR(stat.dev));
2186 break;
2187 case FSIDSOURCE_UUID:
2188 WRITEMEM(exp->ex_uuid, 16);
2189 break;
2190 }
2191 }
2192 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
2193 if ((buflen -= 4) < 0)
2194 goto out_resource;
2195 WRITE32(0);
2196 }
2197 if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
2198 if ((buflen -= 4) < 0)
2199 goto out_resource;
2200 WRITE32(nn->nfsd4_lease);
2201 }
2202 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
2203 if ((buflen -= 4) < 0)
2204 goto out_resource;
2205 WRITE32(rdattr_err);
2206 }
2207 if (bmval0 & FATTR4_WORD0_ACL) {
2208 struct nfs4_ace *ace;
2209
2210 if (acl == NULL) {
2211 if ((buflen -= 4) < 0)
2212 goto out_resource;
2213
2214 WRITE32(0);
2215 goto out_acl;
2216 }
2217 if ((buflen -= 4) < 0)
2218 goto out_resource;
2219 WRITE32(acl->naces);
2220
2221 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
2222 if ((buflen -= 4*3) < 0)
2223 goto out_resource;
2224 WRITE32(ace->type);
2225 WRITE32(ace->flag);
2226 WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL);
2227 status = nfsd4_encode_aclname(rqstp, ace->whotype,
2228 ace->who, ace->flag & NFS4_ACE_IDENTIFIER_GROUP,
2229 &p, &buflen);
2230 if (status == nfserr_resource)
2231 goto out_resource;
2232 if (status)
2233 goto out;
2234 }
2235 }
2236 out_acl:
2237 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
2238 if ((buflen -= 4) < 0)
2239 goto out_resource;
2240 WRITE32(aclsupport ?
2241 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
2242 }
2243 if (bmval0 & FATTR4_WORD0_CANSETTIME) {
2244 if ((buflen -= 4) < 0)
2245 goto out_resource;
2246 WRITE32(1);
2247 }
2248 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
2249 if ((buflen -= 4) < 0)
2250 goto out_resource;
2251 WRITE32(0);
2252 }
2253 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
2254 if ((buflen -= 4) < 0)
2255 goto out_resource;
2256 WRITE32(1);
2257 }
2258 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
2259 if ((buflen -= 4) < 0)
2260 goto out_resource;
2261 WRITE32(1);
2262 }
2263 if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
2264 buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4;
2265 if (buflen < 0)
2266 goto out_resource;
2267 WRITE32(fhp->fh_handle.fh_size);
2268 WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size);
2269 }
2270 if (bmval0 & FATTR4_WORD0_FILEID) {
2271 if ((buflen -= 8) < 0)
2272 goto out_resource;
2273 WRITE64(stat.ino);
2274 }
2275 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
2276 if ((buflen -= 8) < 0)
2277 goto out_resource;
2278 WRITE64((u64) statfs.f_ffree);
2279 }
2280 if (bmval0 & FATTR4_WORD0_FILES_FREE) {
2281 if ((buflen -= 8) < 0)
2282 goto out_resource;
2283 WRITE64((u64) statfs.f_ffree);
2284 }
2285 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
2286 if ((buflen -= 8) < 0)
2287 goto out_resource;
2288 WRITE64((u64) statfs.f_files);
2289 }
2290 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
2291 status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen);
2292 if (status == nfserr_resource)
2293 goto out_resource;
2294 if (status)
2295 goto out;
2296 }
2297 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
2298 if ((buflen -= 4) < 0)
2299 goto out_resource;
2300 WRITE32(1);
2301 }
2302 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
2303 if ((buflen -= 8) < 0)
2304 goto out_resource;
2305 WRITE64(~(u64)0);
2306 }
2307 if (bmval0 & FATTR4_WORD0_MAXLINK) {
2308 if ((buflen -= 4) < 0)
2309 goto out_resource;
2310 WRITE32(255);
2311 }
2312 if (bmval0 & FATTR4_WORD0_MAXNAME) {
2313 if ((buflen -= 4) < 0)
2314 goto out_resource;
2315 WRITE32(statfs.f_namelen);
2316 }
2317 if (bmval0 & FATTR4_WORD0_MAXREAD) {
2318 if ((buflen -= 8) < 0)
2319 goto out_resource;
2320 WRITE64((u64) svc_max_payload(rqstp));
2321 }
2322 if (bmval0 & FATTR4_WORD0_MAXWRITE) {
2323 if ((buflen -= 8) < 0)
2324 goto out_resource;
2325 WRITE64((u64) svc_max_payload(rqstp));
2326 }
2327 if (bmval1 & FATTR4_WORD1_MODE) {
2328 if ((buflen -= 4) < 0)
2329 goto out_resource;
2330 WRITE32(stat.mode & S_IALLUGO);
2331 }
2332 if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
2333 if ((buflen -= 4) < 0)
2334 goto out_resource;
2335 WRITE32(1);
2336 }
2337 if (bmval1 & FATTR4_WORD1_NUMLINKS) {
2338 if ((buflen -= 4) < 0)
2339 goto out_resource;
2340 WRITE32(stat.nlink);
2341 }
2342 if (bmval1 & FATTR4_WORD1_OWNER) {
2343 status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen);
2344 if (status == nfserr_resource)
2345 goto out_resource;
2346 if (status)
2347 goto out;
2348 }
2349 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
2350 status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen);
2351 if (status == nfserr_resource)
2352 goto out_resource;
2353 if (status)
2354 goto out;
2355 }
2356 if (bmval1 & FATTR4_WORD1_RAWDEV) {
2357 if ((buflen -= 8) < 0)
2358 goto out_resource;
2359 WRITE32((u32) MAJOR(stat.rdev));
2360 WRITE32((u32) MINOR(stat.rdev));
2361 }
2362 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
2363 if ((buflen -= 8) < 0)
2364 goto out_resource;
2365 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
2366 WRITE64(dummy64);
2367 }
2368 if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
2369 if ((buflen -= 8) < 0)
2370 goto out_resource;
2371 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
2372 WRITE64(dummy64);
2373 }
2374 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
2375 if ((buflen -= 8) < 0)
2376 goto out_resource;
2377 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
2378 WRITE64(dummy64);
2379 }
2380 if (bmval1 & FATTR4_WORD1_SPACE_USED) {
2381 if ((buflen -= 8) < 0)
2382 goto out_resource;
2383 dummy64 = (u64)stat.blocks << 9;
2384 WRITE64(dummy64);
2385 }
2386 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
2387 if ((buflen -= 12) < 0)
2388 goto out_resource;
2389 WRITE32(0);
2390 WRITE32(stat.atime.tv_sec);
2391 WRITE32(stat.atime.tv_nsec);
2392 }
2393 if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
2394 if ((buflen -= 12) < 0)
2395 goto out_resource;
2396 WRITE32(0);
2397 WRITE32(1);
2398 WRITE32(0);
2399 }
2400 if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
2401 if ((buflen -= 12) < 0)
2402 goto out_resource;
2403 WRITE32(0);
2404 WRITE32(stat.ctime.tv_sec);
2405 WRITE32(stat.ctime.tv_nsec);
2406 }
2407 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
2408 if ((buflen -= 12) < 0)
2409 goto out_resource;
2410 WRITE32(0);
2411 WRITE32(stat.mtime.tv_sec);
2412 WRITE32(stat.mtime.tv_nsec);
2413 }
2414 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
2415 if ((buflen -= 8) < 0)
2416 goto out_resource;
2417 /*
2418 * Get parent's attributes if not ignoring crossmount
2419 * and this is the root of a cross-mounted filesystem.
2420 */
2421 if (ignore_crossmnt == 0 &&
2422 dentry == exp->ex_path.mnt->mnt_root)
2423 get_parent_attributes(exp, &stat);
2424 WRITE64(stat.ino);
2425 }
2426 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
2427 WRITE32(3);
2428 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0);
2429 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1);
2430 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2);
2431 }
2432
2433 *attrlenp = htonl((char *)p - (char *)attrlenp - 4);
2434 *countp = p - buffer;
2435 status = nfs_ok;
2436
2437 out:
2438 kfree(acl);
2439 if (fhp == &tempfh)
2440 fh_put(&tempfh);
2441 return status;
2442 out_nfserr:
2443 status = nfserrno(err);
2444 goto out;
2445 out_resource:
2446 *countp = 0;
2447 status = nfserr_resource;
2448 goto out;
2449 out_serverfault:
2450 status = nfserr_serverfault;
2451 goto out;
2452 }
2453
2454 static inline int attributes_need_mount(u32 *bmval)
2455 {
2456 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
2457 return 1;
2458 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
2459 return 1;
2460 return 0;
2461 }
2462
2463 static __be32
2464 nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd,
2465 const char *name, int namlen, __be32 *p, int *buflen)
2466 {
2467 struct svc_export *exp = cd->rd_fhp->fh_export;
2468 struct dentry *dentry;
2469 __be32 nfserr;
2470 int ignore_crossmnt = 0;
2471
2472 dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen);
2473 if (IS_ERR(dentry))
2474 return nfserrno(PTR_ERR(dentry));
2475 if (!dentry->d_inode) {
2476 /*
2477 * nfsd_buffered_readdir drops the i_mutex between
2478 * readdir and calling this callback, leaving a window
2479 * where this directory entry could have gone away.
2480 */
2481 dput(dentry);
2482 return nfserr_noent;
2483 }
2484
2485 exp_get(exp);
2486 /*
2487 * In the case of a mountpoint, the client may be asking for
2488 * attributes that are only properties of the underlying filesystem
2489 * as opposed to the cross-mounted file system. In such a case,
2490 * we will not follow the cross mount and will fill the attribtutes
2491 * directly from the mountpoint dentry.
2492 */
2493 if (nfsd_mountpoint(dentry, exp)) {
2494 int err;
2495
2496 if (!(exp->ex_flags & NFSEXP_V4ROOT)
2497 && !attributes_need_mount(cd->rd_bmval)) {
2498 ignore_crossmnt = 1;
2499 goto out_encode;
2500 }
2501 /*
2502 * Why the heck aren't we just using nfsd_lookup??
2503 * Different "."/".." handling? Something else?
2504 * At least, add a comment here to explain....
2505 */
2506 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
2507 if (err) {
2508 nfserr = nfserrno(err);
2509 goto out_put;
2510 }
2511 nfserr = check_nfsd_access(exp, cd->rd_rqstp);
2512 if (nfserr)
2513 goto out_put;
2514
2515 }
2516 out_encode:
2517 nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval,
2518 cd->rd_rqstp, ignore_crossmnt);
2519 out_put:
2520 dput(dentry);
2521 exp_put(exp);
2522 return nfserr;
2523 }
2524
2525 static __be32 *
2526 nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr)
2527 {
2528 __be32 *attrlenp;
2529
2530 if (buflen < 6)
2531 return NULL;
2532 *p++ = htonl(2);
2533 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
2534 *p++ = htonl(0); /* bmval1 */
2535
2536 attrlenp = p++;
2537 *p++ = nfserr; /* no htonl */
2538 *attrlenp = htonl((char *)p - (char *)attrlenp - 4);
2539 return p;
2540 }
2541
2542 static int
2543 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
2544 loff_t offset, u64 ino, unsigned int d_type)
2545 {
2546 struct readdir_cd *ccd = ccdv;
2547 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
2548 int buflen;
2549 __be32 *p = cd->buffer;
2550 __be32 *cookiep;
2551 __be32 nfserr = nfserr_toosmall;
2552
2553 /* In nfsv4, "." and ".." never make it onto the wire.. */
2554 if (name && isdotent(name, namlen)) {
2555 cd->common.err = nfs_ok;
2556 return 0;
2557 }
2558
2559 if (cd->offset)
2560 xdr_encode_hyper(cd->offset, (u64) offset);
2561
2562 buflen = cd->buflen - 4 - XDR_QUADLEN(namlen);
2563 if (buflen < 0)
2564 goto fail;
2565
2566 *p++ = xdr_one; /* mark entry present */
2567 cookiep = p;
2568 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */
2569 p = xdr_encode_array(p, name, namlen); /* name length & name */
2570
2571 nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, p, &buflen);
2572 switch (nfserr) {
2573 case nfs_ok:
2574 p += buflen;
2575 break;
2576 case nfserr_resource:
2577 nfserr = nfserr_toosmall;
2578 goto fail;
2579 case nfserr_noent:
2580 goto skip_entry;
2581 default:
2582 /*
2583 * If the client requested the RDATTR_ERROR attribute,
2584 * we stuff the error code into this attribute
2585 * and continue. If this attribute was not requested,
2586 * then in accordance with the spec, we fail the
2587 * entire READDIR operation(!)
2588 */
2589 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
2590 goto fail;
2591 p = nfsd4_encode_rdattr_error(p, buflen, nfserr);
2592 if (p == NULL) {
2593 nfserr = nfserr_toosmall;
2594 goto fail;
2595 }
2596 }
2597 cd->buflen -= (p - cd->buffer);
2598 cd->buffer = p;
2599 cd->offset = cookiep;
2600 skip_entry:
2601 cd->common.err = nfs_ok;
2602 return 0;
2603 fail:
2604 cd->common.err = nfserr;
2605 return -EINVAL;
2606 }
2607
2608 static void
2609 nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid)
2610 {
2611 __be32 *p;
2612
2613 RESERVE_SPACE(sizeof(stateid_t));
2614 WRITE32(sid->si_generation);
2615 WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
2616 ADJUST_ARGS();
2617 }
2618
2619 static __be32
2620 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
2621 {
2622 __be32 *p;
2623
2624 if (!nfserr) {
2625 RESERVE_SPACE(8);
2626 WRITE32(access->ac_supported);
2627 WRITE32(access->ac_resp_access);
2628 ADJUST_ARGS();
2629 }
2630 return nfserr;
2631 }
2632
2633 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts)
2634 {
2635 __be32 *p;
2636
2637 if (!nfserr) {
2638 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8);
2639 WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
2640 WRITE32(bcts->dir);
2641 /* Sorry, we do not yet support RDMA over 4.1: */
2642 WRITE32(0);
2643 ADJUST_ARGS();
2644 }
2645 return nfserr;
2646 }
2647
2648 static __be32
2649 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
2650 {
2651 ENCODE_SEQID_OP_HEAD;
2652
2653 if (!nfserr)
2654 nfsd4_encode_stateid(resp, &close->cl_stateid);
2655
2656 encode_seqid_op_tail(resp, save, nfserr);
2657 return nfserr;
2658 }
2659
2660
2661 static __be32
2662 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
2663 {
2664 __be32 *p;
2665
2666 if (!nfserr) {
2667 RESERVE_SPACE(NFS4_VERIFIER_SIZE);
2668 WRITEMEM(commit->co_verf.data, NFS4_VERIFIER_SIZE);
2669 ADJUST_ARGS();
2670 }
2671 return nfserr;
2672 }
2673
2674 static __be32
2675 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
2676 {
2677 __be32 *p;
2678
2679 if (!nfserr) {
2680 RESERVE_SPACE(32);
2681 write_cinfo(&p, &create->cr_cinfo);
2682 WRITE32(2);
2683 WRITE32(create->cr_bmval[0]);
2684 WRITE32(create->cr_bmval[1]);
2685 ADJUST_ARGS();
2686 }
2687 return nfserr;
2688 }
2689
2690 static __be32
2691 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
2692 {
2693 struct svc_fh *fhp = getattr->ga_fhp;
2694 int buflen;
2695
2696 if (nfserr)
2697 return nfserr;
2698
2699 buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2);
2700 nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry,
2701 resp->p, &buflen, getattr->ga_bmval,
2702 resp->rqstp, 0);
2703 if (!nfserr)
2704 resp->p += buflen;
2705 return nfserr;
2706 }
2707
2708 static __be32
2709 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
2710 {
2711 struct svc_fh *fhp = *fhpp;
2712 unsigned int len;
2713 __be32 *p;
2714
2715 if (!nfserr) {
2716 len = fhp->fh_handle.fh_size;
2717 RESERVE_SPACE(len + 4);
2718 WRITE32(len);
2719 WRITEMEM(&fhp->fh_handle.fh_base, len);
2720 ADJUST_ARGS();
2721 }
2722 return nfserr;
2723 }
2724
2725 /*
2726 * Including all fields other than the name, a LOCK4denied structure requires
2727 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
2728 */
2729 static void
2730 nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld)
2731 {
2732 struct xdr_netobj *conf = &ld->ld_owner;
2733 __be32 *p;
2734
2735 RESERVE_SPACE(32 + XDR_LEN(conf->len));
2736 WRITE64(ld->ld_start);
2737 WRITE64(ld->ld_length);
2738 WRITE32(ld->ld_type);
2739 if (conf->len) {
2740 WRITEMEM(&ld->ld_clientid, 8);
2741 WRITE32(conf->len);
2742 WRITEMEM(conf->data, conf->len);
2743 kfree(conf->data);
2744 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */
2745 WRITE64((u64)0); /* clientid */
2746 WRITE32(0); /* length of owner name */
2747 }
2748 ADJUST_ARGS();
2749 }
2750
2751 static __be32
2752 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
2753 {
2754 ENCODE_SEQID_OP_HEAD;
2755
2756 if (!nfserr)
2757 nfsd4_encode_stateid(resp, &lock->lk_resp_stateid);
2758 else if (nfserr == nfserr_denied)
2759 nfsd4_encode_lock_denied(resp, &lock->lk_denied);
2760
2761 encode_seqid_op_tail(resp, save, nfserr);
2762 return nfserr;
2763 }
2764
2765 static __be32
2766 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
2767 {
2768 if (nfserr == nfserr_denied)
2769 nfsd4_encode_lock_denied(resp, &lockt->lt_denied);
2770 return nfserr;
2771 }
2772
2773 static __be32
2774 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
2775 {
2776 ENCODE_SEQID_OP_HEAD;
2777
2778 if (!nfserr)
2779 nfsd4_encode_stateid(resp, &locku->lu_stateid);
2780
2781 encode_seqid_op_tail(resp, save, nfserr);
2782 return nfserr;
2783 }
2784
2785
2786 static __be32
2787 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
2788 {
2789 __be32 *p;
2790
2791 if (!nfserr) {
2792 RESERVE_SPACE(20);
2793 write_cinfo(&p, &link->li_cinfo);
2794 ADJUST_ARGS();
2795 }
2796 return nfserr;
2797 }
2798
2799
2800 static __be32
2801 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
2802 {
2803 __be32 *p;
2804 ENCODE_SEQID_OP_HEAD;
2805
2806 if (nfserr)
2807 goto out;
2808
2809 nfsd4_encode_stateid(resp, &open->op_stateid);
2810 RESERVE_SPACE(40);
2811 write_cinfo(&p, &open->op_cinfo);
2812 WRITE32(open->op_rflags);
2813 WRITE32(2);
2814 WRITE32(open->op_bmval[0]);
2815 WRITE32(open->op_bmval[1]);
2816 WRITE32(open->op_delegate_type);
2817 ADJUST_ARGS();
2818
2819 switch (open->op_delegate_type) {
2820 case NFS4_OPEN_DELEGATE_NONE:
2821 break;
2822 case NFS4_OPEN_DELEGATE_READ:
2823 nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
2824 RESERVE_SPACE(20);
2825 WRITE32(open->op_recall);
2826
2827 /*
2828 * TODO: ACE's in delegations
2829 */
2830 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
2831 WRITE32(0);
2832 WRITE32(0);
2833 WRITE32(0); /* XXX: is NULL principal ok? */
2834 ADJUST_ARGS();
2835 break;
2836 case NFS4_OPEN_DELEGATE_WRITE:
2837 nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
2838 RESERVE_SPACE(32);
2839 WRITE32(0);
2840
2841 /*
2842 * TODO: space_limit's in delegations
2843 */
2844 WRITE32(NFS4_LIMIT_SIZE);
2845 WRITE32(~(u32)0);
2846 WRITE32(~(u32)0);
2847
2848 /*
2849 * TODO: ACE's in delegations
2850 */
2851 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
2852 WRITE32(0);
2853 WRITE32(0);
2854 WRITE32(0); /* XXX: is NULL principal ok? */
2855 ADJUST_ARGS();
2856 break;
2857 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */
2858 switch (open->op_why_no_deleg) {
2859 case WND4_CONTENTION:
2860 case WND4_RESOURCE:
2861 RESERVE_SPACE(8);
2862 WRITE32(open->op_why_no_deleg);
2863 WRITE32(0); /* deleg signaling not supported yet */
2864 break;
2865 default:
2866 RESERVE_SPACE(4);
2867 WRITE32(open->op_why_no_deleg);
2868 }
2869 ADJUST_ARGS();
2870 break;
2871 default:
2872 BUG();
2873 }
2874 /* XXX save filehandle here */
2875 out:
2876 encode_seqid_op_tail(resp, save, nfserr);
2877 return nfserr;
2878 }
2879
2880 static __be32
2881 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
2882 {
2883 ENCODE_SEQID_OP_HEAD;
2884
2885 if (!nfserr)
2886 nfsd4_encode_stateid(resp, &oc->oc_resp_stateid);
2887
2888 encode_seqid_op_tail(resp, save, nfserr);
2889 return nfserr;
2890 }
2891
2892 static __be32
2893 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
2894 {
2895 ENCODE_SEQID_OP_HEAD;
2896
2897 if (!nfserr)
2898 nfsd4_encode_stateid(resp, &od->od_stateid);
2899
2900 encode_seqid_op_tail(resp, save, nfserr);
2901 return nfserr;
2902 }
2903
2904 static __be32
2905 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
2906 struct nfsd4_read *read)
2907 {
2908 u32 eof;
2909 int v;
2910 struct page *page;
2911 unsigned long maxcount;
2912 long len;
2913 __be32 *p;
2914
2915 if (nfserr)
2916 return nfserr;
2917 if (resp->xbuf->page_len)
2918 return nfserr_resource;
2919
2920 RESERVE_SPACE(8); /* eof flag and byte count */
2921
2922 maxcount = svc_max_payload(resp->rqstp);
2923 if (maxcount > read->rd_length)
2924 maxcount = read->rd_length;
2925
2926 len = maxcount;
2927 v = 0;
2928 while (len > 0) {
2929 page = *(resp->rqstp->rq_next_page);
2930 if (!page) { /* ran out of pages */
2931 maxcount -= len;
2932 break;
2933 }
2934 resp->rqstp->rq_vec[v].iov_base = page_address(page);
2935 resp->rqstp->rq_vec[v].iov_len =
2936 len < PAGE_SIZE ? len : PAGE_SIZE;
2937 resp->rqstp->rq_next_page++;
2938 v++;
2939 len -= PAGE_SIZE;
2940 }
2941 read->rd_vlen = v;
2942
2943 nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp,
2944 read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen,
2945 &maxcount);
2946
2947 if (nfserr)
2948 return nfserr;
2949 eof = (read->rd_offset + maxcount >=
2950 read->rd_fhp->fh_dentry->d_inode->i_size);
2951
2952 WRITE32(eof);
2953 WRITE32(maxcount);
2954 ADJUST_ARGS();
2955 resp->xbuf->head[0].iov_len = (char*)p
2956 - (char*)resp->xbuf->head[0].iov_base;
2957 resp->xbuf->page_len = maxcount;
2958
2959 /* Use rest of head for padding and remaining ops: */
2960 resp->xbuf->tail[0].iov_base = p;
2961 resp->xbuf->tail[0].iov_len = 0;
2962 if (maxcount&3) {
2963 RESERVE_SPACE(4);
2964 WRITE32(0);
2965 resp->xbuf->tail[0].iov_base += maxcount&3;
2966 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
2967 ADJUST_ARGS();
2968 }
2969 return 0;
2970 }
2971
2972 static __be32
2973 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
2974 {
2975 int maxcount;
2976 char *page;
2977 __be32 *p;
2978
2979 if (nfserr)
2980 return nfserr;
2981 if (resp->xbuf->page_len)
2982 return nfserr_resource;
2983 if (!*resp->rqstp->rq_next_page)
2984 return nfserr_resource;
2985
2986 page = page_address(*(resp->rqstp->rq_next_page++));
2987
2988 maxcount = PAGE_SIZE;
2989 RESERVE_SPACE(4);
2990
2991 /*
2992 * XXX: By default, the ->readlink() VFS op will truncate symlinks
2993 * if they would overflow the buffer. Is this kosher in NFSv4? If
2994 * not, one easy fix is: if ->readlink() precisely fills the buffer,
2995 * assume that truncation occurred, and return NFS4ERR_RESOURCE.
2996 */
2997 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount);
2998 if (nfserr == nfserr_isdir)
2999 return nfserr_inval;
3000 if (nfserr)
3001 return nfserr;
3002
3003 WRITE32(maxcount);
3004 ADJUST_ARGS();
3005 resp->xbuf->head[0].iov_len = (char*)p
3006 - (char*)resp->xbuf->head[0].iov_base;
3007 resp->xbuf->page_len = maxcount;
3008
3009 /* Use rest of head for padding and remaining ops: */
3010 resp->xbuf->tail[0].iov_base = p;
3011 resp->xbuf->tail[0].iov_len = 0;
3012 if (maxcount&3) {
3013 RESERVE_SPACE(4);
3014 WRITE32(0);
3015 resp->xbuf->tail[0].iov_base += maxcount&3;
3016 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
3017 ADJUST_ARGS();
3018 }
3019 return 0;
3020 }
3021
3022 static __be32
3023 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
3024 {
3025 int maxcount;
3026 loff_t offset;
3027 __be32 *page, *savep, *tailbase;
3028 __be32 *p;
3029
3030 if (nfserr)
3031 return nfserr;
3032 if (resp->xbuf->page_len)
3033 return nfserr_resource;
3034 if (!*resp->rqstp->rq_next_page)
3035 return nfserr_resource;
3036
3037 RESERVE_SPACE(NFS4_VERIFIER_SIZE);
3038 savep = p;
3039
3040 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
3041 WRITE32(0);
3042 WRITE32(0);
3043 ADJUST_ARGS();
3044 resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base;
3045 tailbase = p;
3046
3047 maxcount = PAGE_SIZE;
3048 if (maxcount > readdir->rd_maxcount)
3049 maxcount = readdir->rd_maxcount;
3050
3051 /*
3052 * Convert from bytes to words, account for the two words already
3053 * written, make sure to leave two words at the end for the next
3054 * pointer and eof field.
3055 */
3056 maxcount = (maxcount >> 2) - 4;
3057 if (maxcount < 0) {
3058 nfserr = nfserr_toosmall;
3059 goto err_no_verf;
3060 }
3061
3062 page = page_address(*(resp->rqstp->rq_next_page++));
3063 readdir->common.err = 0;
3064 readdir->buflen = maxcount;
3065 readdir->buffer = page;
3066 readdir->offset = NULL;
3067
3068 offset = readdir->rd_cookie;
3069 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
3070 &offset,
3071 &readdir->common, nfsd4_encode_dirent);
3072 if (nfserr == nfs_ok &&
3073 readdir->common.err == nfserr_toosmall &&
3074 readdir->buffer == page)
3075 nfserr = nfserr_toosmall;
3076 if (nfserr)
3077 goto err_no_verf;
3078
3079 if (readdir->offset)
3080 xdr_encode_hyper(readdir->offset, offset);
3081
3082 p = readdir->buffer;
3083 *p++ = 0; /* no more entries */
3084 *p++ = htonl(readdir->common.err == nfserr_eof);
3085 resp->xbuf->page_len = ((char*)p) -
3086 (char*)page_address(*(resp->rqstp->rq_next_page-1));
3087
3088 /* Use rest of head for padding and remaining ops: */
3089 resp->xbuf->tail[0].iov_base = tailbase;
3090 resp->xbuf->tail[0].iov_len = 0;
3091 resp->p = resp->xbuf->tail[0].iov_base;
3092 resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4;
3093
3094 return 0;
3095 err_no_verf:
3096 p = savep;
3097 ADJUST_ARGS();
3098 return nfserr;
3099 }
3100
3101 static __be32
3102 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
3103 {
3104 __be32 *p;
3105
3106 if (!nfserr) {
3107 RESERVE_SPACE(20);
3108 write_cinfo(&p, &remove->rm_cinfo);
3109 ADJUST_ARGS();
3110 }
3111 return nfserr;
3112 }
3113
3114 static __be32
3115 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
3116 {
3117 __be32 *p;
3118
3119 if (!nfserr) {
3120 RESERVE_SPACE(40);
3121 write_cinfo(&p, &rename->rn_sinfo);
3122 write_cinfo(&p, &rename->rn_tinfo);
3123 ADJUST_ARGS();
3124 }
3125 return nfserr;
3126 }
3127
3128 static __be32
3129 nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp,
3130 __be32 nfserr,struct svc_export *exp)
3131 {
3132 int i = 0;
3133 u32 nflavs;
3134 struct exp_flavor_info *flavs;
3135 struct exp_flavor_info def_flavs[2];
3136 __be32 *p;
3137
3138 if (nfserr)
3139 goto out;
3140 if (exp->ex_nflavors) {
3141 flavs = exp->ex_flavors;
3142 nflavs = exp->ex_nflavors;
3143 } else { /* Handling of some defaults in absence of real secinfo: */
3144 flavs = def_flavs;
3145 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
3146 nflavs = 2;
3147 flavs[0].pseudoflavor = RPC_AUTH_UNIX;
3148 flavs[1].pseudoflavor = RPC_AUTH_NULL;
3149 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
3150 nflavs = 1;
3151 flavs[0].pseudoflavor
3152 = svcauth_gss_flavor(exp->ex_client);
3153 } else {
3154 nflavs = 1;
3155 flavs[0].pseudoflavor
3156 = exp->ex_client->flavour->flavour;
3157 }
3158 }
3159
3160 RESERVE_SPACE(4);
3161 WRITE32(nflavs);
3162 ADJUST_ARGS();
3163 for (i = 0; i < nflavs; i++) {
3164 u32 flav = flavs[i].pseudoflavor;
3165 struct gss_api_mech *gm = gss_mech_get_by_pseudoflavor(flav);
3166
3167 if (gm) {
3168 RESERVE_SPACE(4);
3169 WRITE32(RPC_AUTH_GSS);
3170 ADJUST_ARGS();
3171 RESERVE_SPACE(4 + gm->gm_oid.len);
3172 WRITE32(gm->gm_oid.len);
3173 WRITEMEM(gm->gm_oid.data, gm->gm_oid.len);
3174 ADJUST_ARGS();
3175 RESERVE_SPACE(4);
3176 WRITE32(0); /* qop */
3177 ADJUST_ARGS();
3178 RESERVE_SPACE(4);
3179 WRITE32(gss_pseudoflavor_to_service(gm, flav));
3180 ADJUST_ARGS();
3181 gss_mech_put(gm);
3182 } else {
3183 RESERVE_SPACE(4);
3184 WRITE32(flav);
3185 ADJUST_ARGS();
3186 }
3187 }
3188 out:
3189 if (exp)
3190 exp_put(exp);
3191 return nfserr;
3192 }
3193
3194 static __be32
3195 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
3196 struct nfsd4_secinfo *secinfo)
3197 {
3198 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp);
3199 }
3200
3201 static __be32
3202 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
3203 struct nfsd4_secinfo_no_name *secinfo)
3204 {
3205 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp);
3206 }
3207
3208 /*
3209 * The SETATTR encode routine is special -- it always encodes a bitmap,
3210 * regardless of the error status.
3211 */
3212 static __be32
3213 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
3214 {
3215 __be32 *p;
3216
3217 RESERVE_SPACE(12);
3218 if (nfserr) {
3219 WRITE32(2);
3220 WRITE32(0);
3221 WRITE32(0);
3222 }
3223 else {
3224 WRITE32(2);
3225 WRITE32(setattr->sa_bmval[0]);
3226 WRITE32(setattr->sa_bmval[1]);
3227 }
3228 ADJUST_ARGS();
3229 return nfserr;
3230 }
3231
3232 static __be32
3233 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
3234 {
3235 __be32 *p;
3236
3237 if (!nfserr) {
3238 RESERVE_SPACE(8 + NFS4_VERIFIER_SIZE);
3239 WRITEMEM(&scd->se_clientid, 8);
3240 WRITEMEM(&scd->se_confirm, NFS4_VERIFIER_SIZE);
3241 ADJUST_ARGS();
3242 }
3243 else if (nfserr == nfserr_clid_inuse) {
3244 RESERVE_SPACE(8);
3245 WRITE32(0);
3246 WRITE32(0);
3247 ADJUST_ARGS();
3248 }
3249 return nfserr;
3250 }
3251
3252 static __be32
3253 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
3254 {
3255 __be32 *p;
3256
3257 if (!nfserr) {
3258 RESERVE_SPACE(16);
3259 WRITE32(write->wr_bytes_written);
3260 WRITE32(write->wr_how_written);
3261 WRITEMEM(write->wr_verifier.data, NFS4_VERIFIER_SIZE);
3262 ADJUST_ARGS();
3263 }
3264 return nfserr;
3265 }
3266
3267 static __be32
3268 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
3269 struct nfsd4_exchange_id *exid)
3270 {
3271 __be32 *p;
3272 char *major_id;
3273 char *server_scope;
3274 int major_id_sz;
3275 int server_scope_sz;
3276 uint64_t minor_id = 0;
3277
3278 if (nfserr)
3279 return nfserr;
3280
3281 major_id = utsname()->nodename;
3282 major_id_sz = strlen(major_id);
3283 server_scope = utsname()->nodename;
3284 server_scope_sz = strlen(server_scope);
3285
3286 RESERVE_SPACE(
3287 8 /* eir_clientid */ +
3288 4 /* eir_sequenceid */ +
3289 4 /* eir_flags */ +
3290 4 /* spr_how (SP4_NONE) */ +
3291 8 /* so_minor_id */ +
3292 4 /* so_major_id.len */ +
3293 (XDR_QUADLEN(major_id_sz) * 4) +
3294 4 /* eir_server_scope.len */ +
3295 (XDR_QUADLEN(server_scope_sz) * 4) +
3296 4 /* eir_server_impl_id.count (0) */);
3297
3298 WRITEMEM(&exid->clientid, 8);
3299 WRITE32(exid->seqid);
3300 WRITE32(exid->flags);
3301
3302 /* state_protect4_r. Currently only support SP4_NONE */
3303 BUG_ON(exid->spa_how != SP4_NONE);
3304 WRITE32(exid->spa_how);
3305
3306 /* The server_owner struct */
3307 WRITE64(minor_id); /* Minor id */
3308 /* major id */
3309 WRITE32(major_id_sz);
3310 WRITEMEM(major_id, major_id_sz);
3311
3312 /* Server scope */
3313 WRITE32(server_scope_sz);
3314 WRITEMEM(server_scope, server_scope_sz);
3315
3316 /* Implementation id */
3317 WRITE32(0); /* zero length nfs_impl_id4 array */
3318 ADJUST_ARGS();
3319 return 0;
3320 }
3321
3322 static __be32
3323 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3324 struct nfsd4_create_session *sess)
3325 {
3326 __be32 *p;
3327
3328 if (nfserr)
3329 return nfserr;
3330
3331 RESERVE_SPACE(24);
3332 WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN);
3333 WRITE32(sess->seqid);
3334 WRITE32(sess->flags);
3335 ADJUST_ARGS();
3336
3337 RESERVE_SPACE(28);
3338 WRITE32(0); /* headerpadsz */
3339 WRITE32(sess->fore_channel.maxreq_sz);
3340 WRITE32(sess->fore_channel.maxresp_sz);
3341 WRITE32(sess->fore_channel.maxresp_cached);
3342 WRITE32(sess->fore_channel.maxops);
3343 WRITE32(sess->fore_channel.maxreqs);
3344 WRITE32(sess->fore_channel.nr_rdma_attrs);
3345 ADJUST_ARGS();
3346
3347 if (sess->fore_channel.nr_rdma_attrs) {
3348 RESERVE_SPACE(4);
3349 WRITE32(sess->fore_channel.rdma_attrs);
3350 ADJUST_ARGS();
3351 }
3352
3353 RESERVE_SPACE(28);
3354 WRITE32(0); /* headerpadsz */
3355 WRITE32(sess->back_channel.maxreq_sz);
3356 WRITE32(sess->back_channel.maxresp_sz);
3357 WRITE32(sess->back_channel.maxresp_cached);
3358 WRITE32(sess->back_channel.maxops);
3359 WRITE32(sess->back_channel.maxreqs);
3360 WRITE32(sess->back_channel.nr_rdma_attrs);
3361 ADJUST_ARGS();
3362
3363 if (sess->back_channel.nr_rdma_attrs) {
3364 RESERVE_SPACE(4);
3365 WRITE32(sess->back_channel.rdma_attrs);
3366 ADJUST_ARGS();
3367 }
3368 return 0;
3369 }
3370
3371 static __be32
3372 nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3373 struct nfsd4_destroy_session *destroy_session)
3374 {
3375 return nfserr;
3376 }
3377
3378 static __be32
3379 nfsd4_encode_free_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
3380 struct nfsd4_free_stateid *free_stateid)
3381 {
3382 __be32 *p;
3383
3384 if (nfserr)
3385 return nfserr;
3386
3387 RESERVE_SPACE(4);
3388 *p++ = nfserr;
3389 ADJUST_ARGS();
3390 return nfserr;
3391 }
3392
3393 static __be32
3394 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
3395 struct nfsd4_sequence *seq)
3396 {
3397 __be32 *p;
3398
3399 if (nfserr)
3400 return nfserr;
3401
3402 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20);
3403 WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
3404 WRITE32(seq->seqid);
3405 WRITE32(seq->slotid);
3406 /* Note slotid's are numbered from zero: */
3407 WRITE32(seq->maxslots - 1); /* sr_highest_slotid */
3408 WRITE32(seq->maxslots - 1); /* sr_target_highest_slotid */
3409 WRITE32(seq->status_flags);
3410
3411 ADJUST_ARGS();
3412 resp->cstate.datap = p; /* DRC cache data pointer */
3413 return 0;
3414 }
3415
3416 static __be32
3417 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
3418 struct nfsd4_test_stateid *test_stateid)
3419 {
3420 struct nfsd4_test_stateid_id *stateid, *next;
3421 __be32 *p;
3422
3423 RESERVE_SPACE(4 + (4 * test_stateid->ts_num_ids));
3424 *p++ = htonl(test_stateid->ts_num_ids);
3425
3426 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) {
3427 *p++ = stateid->ts_id_status;
3428 }
3429
3430 ADJUST_ARGS();
3431 return nfserr;
3432 }
3433
3434 static __be32
3435 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p)
3436 {
3437 return nfserr;
3438 }
3439
3440 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *);
3441
3442 /*
3443 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
3444 * since we don't need to filter out obsolete ops as this is
3445 * done in the decoding phase.
3446 */
3447 static nfsd4_enc nfsd4_enc_ops[] = {
3448 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access,
3449 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close,
3450 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit,
3451 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create,
3452 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop,
3453 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop,
3454 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr,
3455 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh,
3456 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link,
3457 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock,
3458 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt,
3459 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku,
3460 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop,
3461 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop,
3462 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop,
3463 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open,
3464 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop,
3465 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm,
3466 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade,
3467 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop,
3468 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop,
3469 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop,
3470 [OP_READ] = (nfsd4_enc)nfsd4_encode_read,
3471 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir,
3472 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink,
3473 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove,
3474 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename,
3475 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop,
3476 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop,
3477 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop,
3478 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo,
3479 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr,
3480 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid,
3481 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop,
3482 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop,
3483 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write,
3484 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop,
3485
3486 /* NFSv4.1 operations */
3487 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop,
3488 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session,
3489 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id,
3490 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session,
3491 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_destroy_session,
3492 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_free_stateid,
3493 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
3494 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop,
3495 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
3496 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop,
3497 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop,
3498 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop,
3499 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name,
3500 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence,
3501 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop,
3502 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid,
3503 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
3504 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop,
3505 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop,
3506 };
3507
3508 /*
3509 * Calculate the total amount of memory that the compound response has taken
3510 * after encoding the current operation with pad.
3511 *
3512 * pad: if operation is non-idempotent, pad was calculate by op_rsize_bop()
3513 * which was specified at nfsd4_operation, else pad is zero.
3514 *
3515 * Compare this length to the session se_fmaxresp_sz and se_fmaxresp_cached.
3516 *
3517 * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so
3518 * will be at least a page and will therefore hold the xdr_buf head.
3519 */
3520 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 pad)
3521 {
3522 struct xdr_buf *xb = &resp->rqstp->rq_res;
3523 struct nfsd4_session *session = NULL;
3524 struct nfsd4_slot *slot = resp->cstate.slot;
3525 u32 length, tlen = 0;
3526
3527 if (!nfsd4_has_session(&resp->cstate))
3528 return 0;
3529
3530 session = resp->cstate.session;
3531 if (session == NULL)
3532 return 0;
3533
3534 if (xb->page_len == 0) {
3535 length = (char *)resp->p - (char *)xb->head[0].iov_base + pad;
3536 } else {
3537 if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0)
3538 tlen = (char *)resp->p - (char *)xb->tail[0].iov_base;
3539
3540 length = xb->head[0].iov_len + xb->page_len + tlen + pad;
3541 }
3542 dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__,
3543 length, xb->page_len, tlen, pad);
3544
3545 if (length > session->se_fchannel.maxresp_sz)
3546 return nfserr_rep_too_big;
3547
3548 if ((slot->sl_flags & NFSD4_SLOT_CACHETHIS) &&
3549 length > session->se_fchannel.maxresp_cached)
3550 return nfserr_rep_too_big_to_cache;
3551
3552 return 0;
3553 }
3554
3555 void
3556 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
3557 {
3558 __be32 *statp;
3559 __be32 *p;
3560
3561 RESERVE_SPACE(8);
3562 WRITE32(op->opnum);
3563 statp = p++; /* to be backfilled at the end */
3564 ADJUST_ARGS();
3565
3566 if (op->opnum == OP_ILLEGAL)
3567 goto status;
3568 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
3569 !nfsd4_enc_ops[op->opnum]);
3570 op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u);
3571 /* nfsd4_check_drc_limit guarantees enough room for error status */
3572 if (!op->status)
3573 op->status = nfsd4_check_resp_size(resp, 0);
3574 status:
3575 /*
3576 * Note: We write the status directly, instead of using WRITE32(),
3577 * since it is already in network byte order.
3578 */
3579 *statp = op->status;
3580 }
3581
3582 /*
3583 * Encode the reply stored in the stateowner reply cache
3584 *
3585 * XDR note: do not encode rp->rp_buflen: the buffer contains the
3586 * previously sent already encoded operation.
3587 *
3588 * called with nfs4_lock_state() held
3589 */
3590 void
3591 nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
3592 {
3593 __be32 *p;
3594 struct nfs4_replay *rp = op->replay;
3595
3596 BUG_ON(!rp);
3597
3598 RESERVE_SPACE(8);
3599 WRITE32(op->opnum);
3600 *p++ = rp->rp_status; /* already xdr'ed */
3601 ADJUST_ARGS();
3602
3603 RESERVE_SPACE(rp->rp_buflen);
3604 WRITEMEM(rp->rp_buf, rp->rp_buflen);
3605 ADJUST_ARGS();
3606 }
3607
3608 int
3609 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy)
3610 {
3611 return xdr_ressize_check(rqstp, p);
3612 }
3613
3614 int nfsd4_release_compoundargs(void *rq, __be32 *p, void *resp)
3615 {
3616 struct svc_rqst *rqstp = rq;
3617 struct nfsd4_compoundargs *args = rqstp->rq_argp;
3618
3619 if (args->ops != args->iops) {
3620 kfree(args->ops);
3621 args->ops = args->iops;
3622 }
3623 kfree(args->tmpp);
3624 args->tmpp = NULL;
3625 while (args->to_free) {
3626 struct tmpbuf *tb = args->to_free;
3627 args->to_free = tb->next;
3628 tb->release(tb->buf);
3629 kfree(tb);
3630 }
3631 return 1;
3632 }
3633
3634 int
3635 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args)
3636 {
3637 args->p = p;
3638 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len;
3639 args->pagelist = rqstp->rq_arg.pages;
3640 args->pagelen = rqstp->rq_arg.page_len;
3641 args->tmpp = NULL;
3642 args->to_free = NULL;
3643 args->ops = args->iops;
3644 args->rqstp = rqstp;
3645
3646 return !nfsd4_decode_compound(args);
3647 }
3648
3649 int
3650 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp)
3651 {
3652 /*
3653 * All that remains is to write the tag and operation count...
3654 */
3655 struct nfsd4_compound_state *cs = &resp->cstate;
3656 struct kvec *iov;
3657 p = resp->tagp;
3658 *p++ = htonl(resp->taglen);
3659 memcpy(p, resp->tag, resp->taglen);
3660 p += XDR_QUADLEN(resp->taglen);
3661 *p++ = htonl(resp->opcnt);
3662
3663 if (rqstp->rq_res.page_len)
3664 iov = &rqstp->rq_res.tail[0];
3665 else
3666 iov = &rqstp->rq_res.head[0];
3667 iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base;
3668 BUG_ON(iov->iov_len > PAGE_SIZE);
3669 if (nfsd4_has_session(cs)) {
3670 if (cs->status != nfserr_replay_cache) {
3671 nfsd4_store_cache_entry(resp);
3672 cs->slot->sl_flags &= ~NFSD4_SLOT_INUSE;
3673 }
3674 /* Renew the clientid on success and on replay */
3675 release_session_client(cs->session);
3676 nfsd4_put_session(cs->session);
3677 }
3678 return 1;
3679 }
3680
3681 /*
3682 * Local variables:
3683 * c-basic-offset: 8
3684 * End:
3685 */
Linux kernel - Deliverables
This page took 0.116705 seconds and 4 git commands to generate.