Linux Audio

Check our new training course

Loading...
v3.1
 
   1/*
   2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
   3 * All Rights Reserved.
   4 *
   5 * This program is free software; you can redistribute it and/or
   6 * modify it under the terms of the GNU General Public License as
   7 * published by the Free Software Foundation.
   8 *
   9 * This program is distributed in the hope that it would be useful,
  10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12 * GNU General Public License for more details.
  13 *
  14 * You should have received a copy of the GNU General Public License
  15 * along with this program; if not, write the Free Software Foundation,
  16 * Inc.,  51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
  17 */
  18#include "xfs.h"
  19#include "xfs_fs.h"
  20#include "xfs_bit.h"
  21#include "xfs_log.h"
  22#include "xfs_inum.h"
  23#include "xfs_trans.h"
  24#include "xfs_sb.h"
  25#include "xfs_ag.h"
  26#include "xfs_alloc.h"
  27#include "xfs_mount.h"
  28#include "xfs_bmap_btree.h"
  29#include "xfs_dinode.h"
  30#include "xfs_inode.h"
  31#include "xfs_ioctl.h"
  32#include "xfs_rtalloc.h"
 
  33#include "xfs_itable.h"
  34#include "xfs_error.h"
 
 
  35#include "xfs_attr.h"
  36#include "xfs_bmap.h"
  37#include "xfs_buf_item.h"
  38#include "xfs_utils.h"
  39#include "xfs_dfrag.h"
  40#include "xfs_fsops.h"
  41#include "xfs_vnodeops.h"
  42#include "xfs_discard.h"
  43#include "xfs_quota.h"
  44#include "xfs_inode_item.h"
  45#include "xfs_export.h"
  46#include "xfs_trace.h"
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  47
  48#include <linux/capability.h>
  49#include <linux/dcache.h>
  50#include <linux/mount.h>
  51#include <linux/namei.h>
  52#include <linux/pagemap.h>
  53#include <linux/slab.h>
  54#include <linux/exportfs.h>
  55
  56/*
  57 * xfs_find_handle maps from userspace xfs_fsop_handlereq structure to
  58 * a file or fs handle.
  59 *
  60 * XFS_IOC_PATH_TO_FSHANDLE
  61 *    returns fs handle for a mount point or path within that mount point
  62 * XFS_IOC_FD_TO_HANDLE
  63 *    returns full handle for a FD opened in user space
  64 * XFS_IOC_PATH_TO_HANDLE
  65 *    returns full handle for a path
  66 */
  67int
  68xfs_find_handle(
  69	unsigned int		cmd,
  70	xfs_fsop_handlereq_t	*hreq)
  71{
  72	int			hsize;
  73	xfs_handle_t		handle;
  74	struct inode		*inode;
  75	struct file		*file = NULL;
  76	struct path		path;
  77	int			error;
  78	struct xfs_inode	*ip;
  79
  80	if (cmd == XFS_IOC_FD_TO_HANDLE) {
  81		file = fget(hreq->fd);
  82		if (!file)
  83			return -EBADF;
  84		inode = file->f_path.dentry->d_inode;
  85	} else {
  86		error = user_lpath((const char __user *)hreq->path, &path);
  87		if (error)
  88			return error;
  89		inode = path.dentry->d_inode;
  90	}
  91	ip = XFS_I(inode);
  92
  93	/*
  94	 * We can only generate handles for inodes residing on a XFS filesystem,
  95	 * and only for regular files, directories or symbolic links.
  96	 */
  97	error = -EINVAL;
  98	if (inode->i_sb->s_magic != XFS_SB_MAGIC)
  99		goto out_put;
 100
 101	error = -EBADF;
 102	if (!S_ISREG(inode->i_mode) &&
 103	    !S_ISDIR(inode->i_mode) &&
 104	    !S_ISLNK(inode->i_mode))
 105		goto out_put;
 106
 107
 108	memcpy(&handle.ha_fsid, ip->i_mount->m_fixedfsid, sizeof(xfs_fsid_t));
 109
 110	if (cmd == XFS_IOC_PATH_TO_FSHANDLE) {
 111		/*
 112		 * This handle only contains an fsid, zero the rest.
 113		 */
 114		memset(&handle.ha_fid, 0, sizeof(handle.ha_fid));
 115		hsize = sizeof(xfs_fsid_t);
 116	} else {
 117		int		lock_mode;
 118
 119		lock_mode = xfs_ilock_map_shared(ip);
 120		handle.ha_fid.fid_len = sizeof(xfs_fid_t) -
 121					sizeof(handle.ha_fid.fid_len);
 122		handle.ha_fid.fid_pad = 0;
 123		handle.ha_fid.fid_gen = ip->i_d.di_gen;
 124		handle.ha_fid.fid_ino = ip->i_ino;
 125		xfs_iunlock_map_shared(ip, lock_mode);
 126
 127		hsize = XFS_HSIZE(handle);
 128	}
 129
 130	error = -EFAULT;
 131	if (copy_to_user(hreq->ohandle, &handle, hsize) ||
 132	    copy_to_user(hreq->ohandlen, &hsize, sizeof(__s32)))
 133		goto out_put;
 134
 135	error = 0;
 136
 137 out_put:
 138	if (cmd == XFS_IOC_FD_TO_HANDLE)
 139		fput(file);
 140	else
 141		path_put(&path);
 142	return error;
 143}
 144
 145/*
 146 * No need to do permission checks on the various pathname components
 147 * as the handle operations are privileged.
 148 */
 149STATIC int
 150xfs_handle_acceptable(
 151	void			*context,
 152	struct dentry		*dentry)
 153{
 154	return 1;
 155}
 156
 157/*
 158 * Convert userspace handle data into a dentry.
 159 */
 160struct dentry *
 161xfs_handle_to_dentry(
 162	struct file		*parfilp,
 163	void __user		*uhandle,
 164	u32			hlen)
 165{
 166	xfs_handle_t		handle;
 167	struct xfs_fid64	fid;
 168
 169	/*
 170	 * Only allow handle opens under a directory.
 171	 */
 172	if (!S_ISDIR(parfilp->f_path.dentry->d_inode->i_mode))
 173		return ERR_PTR(-ENOTDIR);
 174
 175	if (hlen != sizeof(xfs_handle_t))
 176		return ERR_PTR(-EINVAL);
 177	if (copy_from_user(&handle, uhandle, hlen))
 178		return ERR_PTR(-EFAULT);
 179	if (handle.ha_fid.fid_len !=
 180	    sizeof(handle.ha_fid) - sizeof(handle.ha_fid.fid_len))
 181		return ERR_PTR(-EINVAL);
 182
 183	memset(&fid, 0, sizeof(struct fid));
 184	fid.ino = handle.ha_fid.fid_ino;
 185	fid.gen = handle.ha_fid.fid_gen;
 186
 187	return exportfs_decode_fh(parfilp->f_path.mnt, (struct fid *)&fid, 3,
 188			FILEID_INO32_GEN | XFS_FILEID_TYPE_64FLAG,
 189			xfs_handle_acceptable, NULL);
 190}
 191
 192STATIC struct dentry *
 193xfs_handlereq_to_dentry(
 194	struct file		*parfilp,
 195	xfs_fsop_handlereq_t	*hreq)
 196{
 197	return xfs_handle_to_dentry(parfilp, hreq->ihandle, hreq->ihandlen);
 198}
 199
 200int
 201xfs_open_by_handle(
 202	struct file		*parfilp,
 203	xfs_fsop_handlereq_t	*hreq)
 
 204{
 205	const struct cred	*cred = current_cred();
 
 
 
 
 
 
 
 206	int			error;
 207	int			fd;
 208	int			permflag;
 209	struct file		*filp;
 210	struct inode		*inode;
 211	struct dentry		*dentry;
 212
 213	if (!capable(CAP_SYS_ADMIN))
 214		return -XFS_ERROR(EPERM);
 215
 216	dentry = xfs_handlereq_to_dentry(parfilp, hreq);
 217	if (IS_ERR(dentry))
 218		return PTR_ERR(dentry);
 219	inode = dentry->d_inode;
 220
 221	/* Restrict xfs_open_by_handle to directories & regular files. */
 222	if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode))) {
 223		error = -XFS_ERROR(EPERM);
 224		goto out_dput;
 225	}
 226
 227#if BITS_PER_LONG != 32
 228	hreq->oflags |= O_LARGEFILE;
 229#endif
 230
 231	/* Put open permission in namei format. */
 232	permflag = hreq->oflags;
 233	if ((permflag+1) & O_ACCMODE)
 234		permflag++;
 235	if (permflag & O_TRUNC)
 236		permflag |= 2;
 237
 238	if ((!(permflag & O_APPEND) || (permflag & O_TRUNC)) &&
 239	    (permflag & FMODE_WRITE) && IS_APPEND(inode)) {
 240		error = -XFS_ERROR(EPERM);
 241		goto out_dput;
 242	}
 243
 244	if ((permflag & FMODE_WRITE) && IS_IMMUTABLE(inode)) {
 245		error = -XFS_ERROR(EACCES);
 246		goto out_dput;
 247	}
 248
 249	/* Can't write directories. */
 250	if (S_ISDIR(inode->i_mode) && (permflag & FMODE_WRITE)) {
 251		error = -XFS_ERROR(EISDIR);
 252		goto out_dput;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 253	}
 254
 255	fd = get_unused_fd();
 256	if (fd < 0) {
 257		error = fd;
 258		goto out_dput;
 259	}
 260
 261	filp = dentry_open(dentry, mntget(parfilp->f_path.mnt),
 262			   hreq->oflags, cred);
 263	if (IS_ERR(filp)) {
 264		put_unused_fd(fd);
 265		return PTR_ERR(filp);
 266	}
 267
 268	if (S_ISREG(inode->i_mode)) {
 269		filp->f_flags |= O_NOATIME;
 270		filp->f_mode |= FMODE_NOCMTIME;
 271	}
 272
 273	fd_install(fd, filp);
 274	return fd;
 275
 276 out_dput:
 277	dput(dentry);
 278	return error;
 
 
 
 
 
 
 279}
 280
 281/*
 282 * This is a copy from fs/namei.c:vfs_readlink(), except for removing it's
 283 * unused first argument.
 
 
 284 */
 285STATIC int
 286do_readlink(
 287	char __user		*buffer,
 288	int			buflen,
 289	const char		*link)
 290{
 291        int len;
 
 
 
 
 
 
 
 
 
 
 292
 293	len = PTR_ERR(link);
 294	if (IS_ERR(link))
 295		goto out;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 296
 297	len = strlen(link);
 298	if (len > (unsigned) buflen)
 299		len = buflen;
 300	if (copy_to_user(buffer, link, len))
 301		len = -EFAULT;
 302 out:
 303	return len;
 304}
 305
 
 
 
 
 
 
 
 
 
 
 
 
 306
 307int
 308xfs_readlink_by_handle(
 309	struct file		*parfilp,
 310	xfs_fsop_handlereq_t	*hreq)
 311{
 312	struct dentry		*dentry;
 313	__u32			olen;
 314	void			*link;
 315	int			error;
 
 
 
 
 
 316
 317	if (!capable(CAP_SYS_ADMIN))
 318		return -XFS_ERROR(EPERM);
 319
 320	dentry = xfs_handlereq_to_dentry(parfilp, hreq);
 321	if (IS_ERR(dentry))
 322		return PTR_ERR(dentry);
 323
 324	/* Restrict this handle operation to symlinks only. */
 325	if (!S_ISLNK(dentry->d_inode->i_mode)) {
 326		error = -XFS_ERROR(EINVAL);
 327		goto out_dput;
 328	}
 329
 330	if (copy_from_user(&olen, hreq->ohandlen, sizeof(__u32))) {
 331		error = -XFS_ERROR(EFAULT);
 332		goto out_dput;
 333	}
 334
 335	link = kmalloc(MAXPATHLEN+1, GFP_KERNEL);
 336	if (!link) {
 337		error = -XFS_ERROR(ENOMEM);
 338		goto out_dput;
 339	}
 340
 341	error = -xfs_readlink(XFS_I(dentry->d_inode), link);
 342	if (error)
 343		goto out_kfree;
 344	error = do_readlink(hreq->ohandle, olen, link);
 345	if (error)
 346		goto out_kfree;
 347
 348 out_kfree:
 349	kfree(link);
 350 out_dput:
 351	dput(dentry);
 352	return error;
 
 353}
 354
 355STATIC int
 356xfs_fssetdm_by_handle(
 357	struct file		*parfilp,
 358	void			__user *arg)
 359{
 360	int			error;
 361	struct fsdmidata	fsd;
 362	xfs_fsop_setdm_handlereq_t dmhreq;
 363	struct dentry		*dentry;
 364
 365	if (!capable(CAP_MKNOD))
 366		return -XFS_ERROR(EPERM);
 367	if (copy_from_user(&dmhreq, arg, sizeof(xfs_fsop_setdm_handlereq_t)))
 368		return -XFS_ERROR(EFAULT);
 369
 370	dentry = xfs_handlereq_to_dentry(parfilp, &dmhreq.hreq);
 371	if (IS_ERR(dentry))
 372		return PTR_ERR(dentry);
 373
 374	if (IS_IMMUTABLE(dentry->d_inode) || IS_APPEND(dentry->d_inode)) {
 375		error = -XFS_ERROR(EPERM);
 376		goto out;
 377	}
 378
 379	if (copy_from_user(&fsd, dmhreq.data, sizeof(fsd))) {
 380		error = -XFS_ERROR(EFAULT);
 381		goto out;
 382	}
 383
 384	error = -xfs_set_dmattrs(XFS_I(dentry->d_inode), fsd.fsd_dmevmask,
 385				 fsd.fsd_dmstate);
 386
 387 out:
 388	dput(dentry);
 389	return error;
 390}
 391
 
 392STATIC int
 393xfs_attrlist_by_handle(
 394	struct file		*parfilp,
 395	void			__user *arg)
 396{
 397	int			error = -ENOMEM;
 398	attrlist_cursor_kern_t	*cursor;
 399	xfs_fsop_attrlist_handlereq_t al_hreq;
 400	struct dentry		*dentry;
 401	char			*kbuf;
 
 402
 403	if (!capable(CAP_SYS_ADMIN))
 404		return -XFS_ERROR(EPERM);
 405	if (copy_from_user(&al_hreq, arg, sizeof(xfs_fsop_attrlist_handlereq_t)))
 406		return -XFS_ERROR(EFAULT);
 407	if (al_hreq.buflen > XATTR_LIST_MAX)
 408		return -XFS_ERROR(EINVAL);
 409
 410	/*
 411	 * Reject flags, only allow namespaces.
 412	 */
 413	if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE))
 414		return -XFS_ERROR(EINVAL);
 415
 416	dentry = xfs_handlereq_to_dentry(parfilp, &al_hreq.hreq);
 417	if (IS_ERR(dentry))
 418		return PTR_ERR(dentry);
 419
 420	kbuf = kzalloc(al_hreq.buflen, GFP_KERNEL);
 421	if (!kbuf)
 422		goto out_dput;
 423
 424	cursor = (attrlist_cursor_kern_t *)&al_hreq.pos;
 425	error = -xfs_attr_list(XFS_I(dentry->d_inode), kbuf, al_hreq.buflen,
 426					al_hreq.flags, cursor);
 427	if (error)
 428		goto out_kfree;
 429
 430	if (copy_to_user(al_hreq.buffer, kbuf, al_hreq.buflen))
 431		error = -EFAULT;
 432
 433 out_kfree:
 434	kfree(kbuf);
 435 out_dput:
 436	dput(dentry);
 437	return error;
 438}
 439
 440int
 441xfs_attrmulti_attr_get(
 442	struct inode		*inode,
 443	unsigned char		*name,
 444	unsigned char		__user *ubuf,
 445	__uint32_t		*len,
 446	__uint32_t		flags)
 447{
 448	unsigned char		*kbuf;
 449	int			error = EFAULT;
 450
 451	if (*len > XATTR_SIZE_MAX)
 452		return EINVAL;
 453	kbuf = kmalloc(*len, GFP_KERNEL);
 454	if (!kbuf)
 455		return ENOMEM;
 456
 457	error = xfs_attr_get(XFS_I(inode), name, kbuf, (int *)len, flags);
 458	if (error)
 459		goto out_kfree;
 460
 461	if (copy_to_user(ubuf, kbuf, *len))
 462		error = EFAULT;
 
 
 463
 464 out_kfree:
 465	kfree(kbuf);
 466	return error;
 467}
 468
 469int
 470xfs_attrmulti_attr_set(
 471	struct inode		*inode,
 472	unsigned char		*name,
 473	const unsigned char	__user *ubuf,
 474	__uint32_t		len,
 475	__uint32_t		flags)
 476{
 477	unsigned char		*kbuf;
 478	int			error = EFAULT;
 479
 480	if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
 481		return EPERM;
 482	if (len > XATTR_SIZE_MAX)
 483		return EINVAL;
 484
 485	kbuf = memdup_user(ubuf, len);
 486	if (IS_ERR(kbuf))
 487		return PTR_ERR(kbuf);
 488
 489	error = xfs_attr_set(XFS_I(inode), name, kbuf, len, flags);
 490
 491	return error;
 492}
 
 
 
 
 
 
 493
 494int
 495xfs_attrmulti_attr_remove(
 496	struct inode		*inode,
 497	unsigned char		*name,
 498	__uint32_t		flags)
 499{
 500	if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
 501		return EPERM;
 502	return xfs_attr_remove(XFS_I(inode), name, flags);
 503}
 504
 505STATIC int
 506xfs_attrmulti_by_handle(
 507	struct file		*parfilp,
 508	void			__user *arg)
 509{
 
 
 510	int			error;
 511	xfs_attr_multiop_t	*ops;
 512	xfs_fsop_attrmulti_handlereq_t am_hreq;
 513	struct dentry		*dentry;
 514	unsigned int		i, size;
 515	unsigned char		*attr_name;
 516
 517	if (!capable(CAP_SYS_ADMIN))
 518		return -XFS_ERROR(EPERM);
 519	if (copy_from_user(&am_hreq, arg, sizeof(xfs_fsop_attrmulti_handlereq_t)))
 520		return -XFS_ERROR(EFAULT);
 521
 522	/* overflow check */
 523	if (am_hreq.opcount >= INT_MAX / sizeof(xfs_attr_multiop_t))
 524		return -E2BIG;
 525
 526	dentry = xfs_handlereq_to_dentry(parfilp, &am_hreq.hreq);
 527	if (IS_ERR(dentry))
 528		return PTR_ERR(dentry);
 529
 530	error = E2BIG;
 531	size = am_hreq.opcount * sizeof(xfs_attr_multiop_t);
 532	if (!size || size > 16 * PAGE_SIZE)
 533		goto out_dput;
 534
 535	ops = memdup_user(am_hreq.ops, size);
 536	if (IS_ERR(ops)) {
 537		error = PTR_ERR(ops);
 538		goto out_dput;
 539	}
 540
 541	attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL);
 542	if (!attr_name)
 543		goto out_kfree_ops;
 544
 545	error = 0;
 546	for (i = 0; i < am_hreq.opcount; i++) {
 547		ops[i].am_error = strncpy_from_user((char *)attr_name,
 548				ops[i].am_attrname, MAXNAMELEN);
 549		if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN)
 550			error = -ERANGE;
 551		if (ops[i].am_error < 0)
 552			break;
 553
 554		switch (ops[i].am_opcode) {
 555		case ATTR_OP_GET:
 556			ops[i].am_error = xfs_attrmulti_attr_get(
 557					dentry->d_inode, attr_name,
 558					ops[i].am_attrvalue, &ops[i].am_length,
 559					ops[i].am_flags);
 560			break;
 561		case ATTR_OP_SET:
 562			ops[i].am_error = mnt_want_write(parfilp->f_path.mnt);
 563			if (ops[i].am_error)
 564				break;
 565			ops[i].am_error = xfs_attrmulti_attr_set(
 566					dentry->d_inode, attr_name,
 567					ops[i].am_attrvalue, ops[i].am_length,
 568					ops[i].am_flags);
 569			mnt_drop_write(parfilp->f_path.mnt);
 570			break;
 571		case ATTR_OP_REMOVE:
 572			ops[i].am_error = mnt_want_write(parfilp->f_path.mnt);
 573			if (ops[i].am_error)
 574				break;
 575			ops[i].am_error = xfs_attrmulti_attr_remove(
 576					dentry->d_inode, attr_name,
 577					ops[i].am_flags);
 578			mnt_drop_write(parfilp->f_path.mnt);
 579			break;
 580		default:
 581			ops[i].am_error = EINVAL;
 582		}
 583	}
 584
 585	if (copy_to_user(am_hreq.ops, ops, size))
 586		error = XFS_ERROR(EFAULT);
 
 
 587
 588	kfree(attr_name);
 589 out_kfree_ops:
 590	kfree(ops);
 591 out_dput:
 592	dput(dentry);
 593	return -error;
 594}
 595
 596int
 597xfs_ioc_space(
 598	struct xfs_inode	*ip,
 599	struct inode		*inode,
 600	struct file		*filp,
 601	int			ioflags,
 602	unsigned int		cmd,
 603	xfs_flock64_t		*bf)
 604{
 605	int			attr_flags = 0;
 
 606	int			error;
 607
 608	/*
 609	 * Only allow the sys admin to reserve space unless
 610	 * unwritten extents are enabled.
 611	 */
 612	if (!xfs_sb_version_hasextflgbit(&ip->i_mount->m_sb) &&
 613	    !capable(CAP_SYS_ADMIN))
 614		return -XFS_ERROR(EPERM);
 
 
 
 
 
 615
 616	if (inode->i_flags & (S_IMMUTABLE|S_APPEND))
 617		return -XFS_ERROR(EPERM);
 
 
 618
 619	if (!(filp->f_mode & FMODE_WRITE))
 620		return -XFS_ERROR(EBADF);
 
 
 621
 622	if (!S_ISREG(inode->i_mode))
 623		return -XFS_ERROR(EINVAL);
 
 624
 625	if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
 626		attr_flags |= XFS_ATTR_NONBLOCK;
 
 
 
 
 
 
 627
 628	if (filp->f_flags & O_DSYNC)
 629		attr_flags |= XFS_ATTR_SYNC;
 630
 631	if (ioflags & IO_INVIS)
 632		attr_flags |= XFS_ATTR_DMI;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 633
 634	error = xfs_change_file_space(ip, cmd, bf, filp->f_pos, attr_flags);
 635	return -error;
 
 
 
 
 
 636}
 637
 638STATIC int
 639xfs_ioc_bulkstat(
 640	xfs_mount_t		*mp,
 641	unsigned int		cmd,
 642	void			__user *arg)
 643{
 644	xfs_fsop_bulkreq_t	bulkreq;
 645	int			count;	/* # of records returned */
 646	xfs_ino_t		inlast;	/* last inode number */
 647	int			done;
 648	int			error;
 649
 650	/* done = 1 if there are more stats to get and if bulkstat */
 651	/* should be called again (unused here, but used in dmapi) */
 
 652
 653	if (!capable(CAP_SYS_ADMIN))
 654		return -EPERM;
 655
 656	if (XFS_FORCED_SHUTDOWN(mp))
 657		return -XFS_ERROR(EIO);
 
 
 
 
 658
 659	if (copy_from_user(&bulkreq, arg, sizeof(xfs_fsop_bulkreq_t)))
 660		return -XFS_ERROR(EFAULT);
 661
 662	if (copy_from_user(&inlast, bulkreq.lastip, sizeof(__s64)))
 663		return -XFS_ERROR(EFAULT);
 
 664
 665	if ((count = bulkreq.icount) <= 0)
 666		return -XFS_ERROR(EINVAL);
 667
 668	if (bulkreq.ubuffer == NULL)
 669		return -XFS_ERROR(EINVAL);
 
 
 
 
 
 
 
 670
 671	if (cmd == XFS_IOC_FSINUMBERS)
 672		error = xfs_inumbers(mp, &inlast, &count,
 673					bulkreq.ubuffer, xfs_inumbers_fmt);
 674	else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE)
 675		error = xfs_bulkstat_single(mp, &inlast,
 676						bulkreq.ubuffer, &done);
 677	else	/* XFS_IOC_FSBULKSTAT */
 678		error = xfs_bulkstat(mp, &inlast, &count, xfs_bulkstat_one,
 679				     sizeof(xfs_bstat_t), bulkreq.ubuffer,
 680				     &done);
 681
 682	if (error)
 683		return -error;
 
 
 
 
 
 
 
 
 
 684
 685	if (bulkreq.ocount != NULL) {
 686		if (copy_to_user(bulkreq.lastip, &inlast,
 687						sizeof(xfs_ino_t)))
 688			return -XFS_ERROR(EFAULT);
 
 689
 690		if (copy_to_user(bulkreq.ocount, &count, sizeof(count)))
 691			return -XFS_ERROR(EFAULT);
 
 692	}
 693
 694	return 0;
 695}
 
 
 696
 697STATIC int
 698xfs_ioc_fsgeometry_v1(
 699	xfs_mount_t		*mp,
 700	void			__user *arg)
 701{
 702	xfs_fsop_geom_t         fsgeo;
 703	int			error;
 704
 705	error = xfs_fs_geometry(mp, &fsgeo, 3);
 706	if (error)
 707		return -error;
 708
 709	/*
 710	 * Caller should have passed an argument of type
 711	 * xfs_fsop_geom_v1_t.  This is a proper subset of the
 712	 * xfs_fsop_geom_t that xfs_fs_geometry() fills in.
 713	 */
 714	if (copy_to_user(arg, &fsgeo, sizeof(xfs_fsop_geom_v1_t)))
 715		return -XFS_ERROR(EFAULT);
 
 
 
 
 716	return 0;
 717}
 718
 719STATIC int
 720xfs_ioc_fsgeometry(
 721	xfs_mount_t		*mp,
 722	void			__user *arg)
 723{
 724	xfs_fsop_geom_t		fsgeo;
 725	int			error;
 726
 727	error = xfs_fs_geometry(mp, &fsgeo, 4);
 728	if (error)
 729		return -error;
 730
 731	if (copy_to_user(arg, &fsgeo, sizeof(fsgeo)))
 732		return -XFS_ERROR(EFAULT);
 733	return 0;
 
 
 
 
 
 734}
 735
 736/*
 737 * Linux extended inode flags interface.
 
 
 
 738 */
 739
 740STATIC unsigned int
 741xfs_merge_ioc_xflags(
 742	unsigned int	flags,
 743	unsigned int	start)
 744{
 745	unsigned int	xflags = start;
 
 
 746
 747	if (flags & FS_IMMUTABLE_FL)
 748		xflags |= XFS_XFLAG_IMMUTABLE;
 749	else
 750		xflags &= ~XFS_XFLAG_IMMUTABLE;
 751	if (flags & FS_APPEND_FL)
 752		xflags |= XFS_XFLAG_APPEND;
 753	else
 754		xflags &= ~XFS_XFLAG_APPEND;
 755	if (flags & FS_SYNC_FL)
 756		xflags |= XFS_XFLAG_SYNC;
 757	else
 758		xflags &= ~XFS_XFLAG_SYNC;
 759	if (flags & FS_NOATIME_FL)
 760		xflags |= XFS_XFLAG_NOATIME;
 761	else
 762		xflags &= ~XFS_XFLAG_NOATIME;
 763	if (flags & FS_NODUMP_FL)
 764		xflags |= XFS_XFLAG_NODUMP;
 765	else
 766		xflags &= ~XFS_XFLAG_NODUMP;
 767
 768	return xflags;
 769}
 
 
 
 
 
 770
 771STATIC unsigned int
 772xfs_di2lxflags(
 773	__uint16_t	di_flags)
 774{
 775	unsigned int	flags = 0;
 776
 777	if (di_flags & XFS_DIFLAG_IMMUTABLE)
 778		flags |= FS_IMMUTABLE_FL;
 779	if (di_flags & XFS_DIFLAG_APPEND)
 780		flags |= FS_APPEND_FL;
 781	if (di_flags & XFS_DIFLAG_SYNC)
 782		flags |= FS_SYNC_FL;
 783	if (di_flags & XFS_DIFLAG_NOATIME)
 784		flags |= FS_NOATIME_FL;
 785	if (di_flags & XFS_DIFLAG_NODUMP)
 786		flags |= FS_NODUMP_FL;
 787	return flags;
 788}
 789
 790STATIC int
 791xfs_ioc_fsgetxattr(
 792	xfs_inode_t		*ip,
 793	int			attr,
 794	void			__user *arg)
 
 
 
 795{
 796	struct fsxattr		fa;
 
 
 797
 798	memset(&fa, 0, sizeof(struct fsxattr));
 
 799
 800	xfs_ilock(ip, XFS_ILOCK_SHARED);
 801	fa.fsx_xflags = xfs_ip2xflags(ip);
 802	fa.fsx_extsize = ip->i_d.di_extsize << ip->i_mount->m_sb.sb_blocklog;
 803	fa.fsx_projid = xfs_get_projid(ip);
 804
 805	if (attr) {
 806		if (ip->i_afp) {
 807			if (ip->i_afp->if_flags & XFS_IFEXTENTS)
 808				fa.fsx_nextents = ip->i_afp->if_bytes /
 809							sizeof(xfs_bmbt_rec_t);
 810			else
 811				fa.fsx_nextents = ip->i_d.di_anextents;
 812		} else
 813			fa.fsx_nextents = 0;
 814	} else {
 815		if (ip->i_df.if_flags & XFS_IFEXTENTS)
 816			fa.fsx_nextents = ip->i_df.if_bytes /
 817						sizeof(xfs_bmbt_rec_t);
 818		else
 819			fa.fsx_nextents = ip->i_d.di_nextents;
 
 
 820	}
 821	xfs_iunlock(ip, XFS_ILOCK_SHARED);
 822
 823	if (copy_to_user(arg, &fa, sizeof(fa)))
 824		return -EFAULT;
 825	return 0;
 
 826}
 827
 828STATIC void
 829xfs_set_diflags(
 830	struct xfs_inode	*ip,
 831	unsigned int		xflags)
 832{
 833	unsigned int		di_flags;
 
 
 
 834
 835	/* can't set PREALLOC this way, just preserve it */
 836	di_flags = (ip->i_d.di_flags & XFS_DIFLAG_PREALLOC);
 837	if (xflags & XFS_XFLAG_IMMUTABLE)
 838		di_flags |= XFS_DIFLAG_IMMUTABLE;
 839	if (xflags & XFS_XFLAG_APPEND)
 840		di_flags |= XFS_DIFLAG_APPEND;
 841	if (xflags & XFS_XFLAG_SYNC)
 842		di_flags |= XFS_DIFLAG_SYNC;
 843	if (xflags & XFS_XFLAG_NOATIME)
 844		di_flags |= XFS_DIFLAG_NOATIME;
 845	if (xflags & XFS_XFLAG_NODUMP)
 846		di_flags |= XFS_DIFLAG_NODUMP;
 847	if (xflags & XFS_XFLAG_PROJINHERIT)
 848		di_flags |= XFS_DIFLAG_PROJINHERIT;
 849	if (xflags & XFS_XFLAG_NODEFRAG)
 850		di_flags |= XFS_DIFLAG_NODEFRAG;
 851	if (xflags & XFS_XFLAG_FILESTREAM)
 852		di_flags |= XFS_DIFLAG_FILESTREAM;
 853	if (S_ISDIR(ip->i_d.di_mode)) {
 854		if (xflags & XFS_XFLAG_RTINHERIT)
 855			di_flags |= XFS_DIFLAG_RTINHERIT;
 856		if (xflags & XFS_XFLAG_NOSYMLINKS)
 857			di_flags |= XFS_DIFLAG_NOSYMLINKS;
 858		if (xflags & XFS_XFLAG_EXTSZINHERIT)
 859			di_flags |= XFS_DIFLAG_EXTSZINHERIT;
 860	} else if (S_ISREG(ip->i_d.di_mode)) {
 861		if (xflags & XFS_XFLAG_REALTIME)
 862			di_flags |= XFS_DIFLAG_REALTIME;
 863		if (xflags & XFS_XFLAG_EXTSIZE)
 864			di_flags |= XFS_DIFLAG_EXTSIZE;
 865	}
 866
 867	ip->i_d.di_flags = di_flags;
 868}
 869
 870STATIC void
 871xfs_diflags_to_linux(
 872	struct xfs_inode	*ip)
 873{
 874	struct inode		*inode = VFS_I(ip);
 875	unsigned int		xflags = xfs_ip2xflags(ip);
 876
 877	if (xflags & XFS_XFLAG_IMMUTABLE)
 878		inode->i_flags |= S_IMMUTABLE;
 879	else
 880		inode->i_flags &= ~S_IMMUTABLE;
 881	if (xflags & XFS_XFLAG_APPEND)
 882		inode->i_flags |= S_APPEND;
 883	else
 884		inode->i_flags &= ~S_APPEND;
 885	if (xflags & XFS_XFLAG_SYNC)
 886		inode->i_flags |= S_SYNC;
 887	else
 888		inode->i_flags &= ~S_SYNC;
 889	if (xflags & XFS_XFLAG_NOATIME)
 890		inode->i_flags |= S_NOATIME;
 891	else
 892		inode->i_flags &= ~S_NOATIME;
 893}
 894
 895#define FSX_PROJID	1
 896#define FSX_EXTSIZE	2
 897#define FSX_XFLAGS	4
 898#define FSX_NONBLOCK	8
 
 
 
 
 
 
 
 
 
 
 899
 900STATIC int
 901xfs_ioctl_setattr(
 902	xfs_inode_t		*ip,
 903	struct fsxattr		*fa,
 904	int			mask)
 905{
 
 906	struct xfs_mount	*mp = ip->i_mount;
 907	struct xfs_trans	*tp;
 908	unsigned int		lock_flags = 0;
 909	struct xfs_dquot	*udqp = NULL;
 910	struct xfs_dquot	*gdqp = NULL;
 911	struct xfs_dquot	*olddquot = NULL;
 912	int			code;
 913
 914	trace_xfs_ioctl_setattr(ip);
 915
 916	if (mp->m_flags & XFS_MOUNT_RDONLY)
 917		return XFS_ERROR(EROFS);
 918	if (XFS_FORCED_SHUTDOWN(mp))
 919		return XFS_ERROR(EIO);
 920
 921	/*
 922	 * Disallow 32bit project ids when projid32bit feature is not enabled.
 923	 */
 924	if ((mask & FSX_PROJID) && (fa->fsx_projid > (__uint16_t)-1) &&
 925			!xfs_sb_version_hasprojid32bit(&ip->i_mount->m_sb))
 926		return XFS_ERROR(EINVAL);
 
 
 
 
 927
 928	/*
 929	 * If disk quotas is on, we make sure that the dquots do exist on disk,
 930	 * before we start any other transactions. Trying to do this later
 931	 * is messy. We don't care to take a readlock to look at the ids
 932	 * in inode here, because we can't hold it across the trans_reserve.
 933	 * If the IDs do change before we take the ilock, we're covered
 934	 * because the i_*dquot fields will get updated anyway.
 935	 */
 936	if (XFS_IS_QUOTA_ON(mp) && (mask & FSX_PROJID)) {
 937		code = xfs_qm_vop_dqalloc(ip, ip->i_d.di_uid,
 938					 ip->i_d.di_gid, fa->fsx_projid,
 939					 XFS_QMOPT_PQUOTA, &udqp, &gdqp);
 940		if (code)
 941			return code;
 942	}
 943
 944	/*
 945	 * For the other attributes, we acquire the inode lock and
 946	 * first do an error checking pass.
 947	 */
 948	tp = xfs_trans_alloc(mp, XFS_TRANS_SETATTR_NOT_SIZE);
 949	code = xfs_trans_reserve(tp, 0, XFS_ICHANGE_LOG_RES(mp), 0, 0, 0);
 950	if (code)
 951		goto error_return;
 952
 953	lock_flags = XFS_ILOCK_EXCL;
 954	xfs_ilock(ip, lock_flags);
 955
 956	/*
 957	 * CAP_FOWNER overrides the following restrictions:
 958	 *
 959	 * The user ID of the calling process must be equal
 960	 * to the file owner ID, except in cases where the
 961	 * CAP_FSETID capability is applicable.
 962	 */
 963	if (current_fsuid() != ip->i_d.di_uid && !capable(CAP_FOWNER)) {
 964		code = XFS_ERROR(EPERM);
 965		goto error_return;
 966	}
 967
 968	/*
 969	 * Do a quota reservation only if projid is actually going to change.
 970	 */
 971	if (mask & FSX_PROJID) {
 972		if (XFS_IS_QUOTA_RUNNING(mp) &&
 973		    XFS_IS_PQUOTA_ON(mp) &&
 974		    xfs_get_projid(ip) != fa->fsx_projid) {
 975			ASSERT(tp);
 976			code = xfs_qm_vop_chown_reserve(tp, ip, udqp, gdqp,
 977						capable(CAP_FOWNER) ?
 978						XFS_QMOPT_FORCE_RES : 0);
 979			if (code)	/* out of quota */
 980				goto error_return;
 981		}
 982	}
 983
 984	if (mask & FSX_EXTSIZE) {
 985		/*
 986		 * Can't change extent size if any extents are allocated.
 987		 */
 988		if (ip->i_d.di_nextents &&
 989		    ((ip->i_d.di_extsize << mp->m_sb.sb_blocklog) !=
 990		     fa->fsx_extsize)) {
 991			code = XFS_ERROR(EINVAL);	/* EFBIG? */
 992			goto error_return;
 993		}
 994
 995		/*
 996		 * Extent size must be a multiple of the appropriate block
 997		 * size, if set at all. It must also be smaller than the
 998		 * maximum extent size supported by the filesystem.
 999		 *
1000		 * Also, for non-realtime files, limit the extent size hint to
1001		 * half the size of the AGs in the filesystem so alignment
1002		 * doesn't result in extents larger than an AG.
1003		 */
1004		if (fa->fsx_extsize != 0) {
1005			xfs_extlen_t    size;
1006			xfs_fsblock_t   extsize_fsb;
1007
1008			extsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_extsize);
1009			if (extsize_fsb > MAXEXTLEN) {
1010				code = XFS_ERROR(EINVAL);
1011				goto error_return;
1012			}
1013
1014			if (XFS_IS_REALTIME_INODE(ip) ||
1015			    ((mask & FSX_XFLAGS) &&
1016			    (fa->fsx_xflags & XFS_XFLAG_REALTIME))) {
1017				size = mp->m_sb.sb_rextsize <<
1018				       mp->m_sb.sb_blocklog;
1019			} else {
1020				size = mp->m_sb.sb_blocksize;
1021				if (extsize_fsb > mp->m_sb.sb_agblocks / 2) {
1022					code = XFS_ERROR(EINVAL);
1023					goto error_return;
1024				}
1025			}
1026
1027			if (fa->fsx_extsize % size) {
1028				code = XFS_ERROR(EINVAL);
1029				goto error_return;
1030			}
1031		}
1032	}
1033
 
 
 
1034
1035	if (mask & FSX_XFLAGS) {
1036		/*
1037		 * Can't change realtime flag if any extents are allocated.
1038		 */
1039		if ((ip->i_d.di_nextents || ip->i_delayed_blks) &&
1040		    (XFS_IS_REALTIME_INODE(ip)) !=
1041		    (fa->fsx_xflags & XFS_XFLAG_REALTIME)) {
1042			code = XFS_ERROR(EINVAL);	/* EFBIG? */
1043			goto error_return;
1044		}
1045
1046		/*
1047		 * If realtime flag is set then must have realtime data.
1048		 */
1049		if ((fa->fsx_xflags & XFS_XFLAG_REALTIME)) {
1050			if ((mp->m_sb.sb_rblocks == 0) ||
1051			    (mp->m_sb.sb_rextsize == 0) ||
1052			    (ip->i_d.di_extsize % mp->m_sb.sb_rextsize)) {
1053				code = XFS_ERROR(EINVAL);
1054				goto error_return;
1055			}
1056		}
1057
1058		/*
1059		 * Can't modify an immutable/append-only file unless
1060		 * we have appropriate permission.
1061		 */
1062		if ((ip->i_d.di_flags &
1063				(XFS_DIFLAG_IMMUTABLE|XFS_DIFLAG_APPEND) ||
1064		     (fa->fsx_xflags &
1065				(XFS_XFLAG_IMMUTABLE | XFS_XFLAG_APPEND))) &&
1066		    !capable(CAP_LINUX_IMMUTABLE)) {
1067			code = XFS_ERROR(EPERM);
1068			goto error_return;
1069		}
 
1070	}
1071
1072	xfs_trans_ijoin(tp, ip);
1073
1074	/*
1075	 * Change file ownership.  Must be the owner or privileged.
 
 
1076	 */
1077	if (mask & FSX_PROJID) {
1078		/*
1079		 * CAP_FSETID overrides the following restrictions:
1080		 *
1081		 * The set-user-ID and set-group-ID bits of a file will be
1082		 * cleared upon successful return from chown()
1083		 */
1084		if ((ip->i_d.di_mode & (S_ISUID|S_ISGID)) &&
1085		    !capable(CAP_FSETID))
1086			ip->i_d.di_mode &= ~(S_ISUID|S_ISGID);
1087
1088		/*
1089		 * Change the ownerships and register quota modifications
1090		 * in the transaction.
1091		 */
1092		if (xfs_get_projid(ip) != fa->fsx_projid) {
1093			if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp)) {
1094				olddquot = xfs_qm_vop_chown(tp, ip,
1095							&ip->i_gdquot, gdqp);
1096			}
1097			xfs_set_projid(ip, fa->fsx_projid);
1098
1099			/*
1100			 * We may have to rev the inode as well as
1101			 * the superblock version number since projids didn't
1102			 * exist before DINODE_VERSION_2 and SB_VERSION_NLINK.
1103			 */
1104			if (ip->i_d.di_version == 1)
1105				xfs_bump_ino_vers2(tp, ip);
1106		}
1107
1108	}
1109
1110	if (mask & FSX_EXTSIZE)
1111		ip->i_d.di_extsize = fa->fsx_extsize >> mp->m_sb.sb_blocklog;
1112	if (mask & FSX_XFLAGS) {
1113		xfs_set_diflags(ip, fa->fsx_xflags);
1114		xfs_diflags_to_linux(ip);
1115	}
1116
1117	xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_CHG);
1118	xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1119
1120	XFS_STATS_INC(xs_ig_attrchg);
1121
1122	/*
1123	 * If this is a synchronous mount, make sure that the
1124	 * transaction goes to disk before returning to the user.
1125	 * This is slightly sub-optimal in that truncates require
1126	 * two sync transactions instead of one for wsync filesystems.
1127	 * One for the truncate and one for the timestamps since we
1128	 * don't want to change the timestamps unless we're sure the
1129	 * truncate worked.  Truncates are less than 1% of the laddis
1130	 * mix so this probably isn't worth the trouble to optimize.
1131	 */
1132	if (mp->m_flags & XFS_MOUNT_WSYNC)
1133		xfs_trans_set_sync(tp);
1134	code = xfs_trans_commit(tp, 0);
1135	xfs_iunlock(ip, lock_flags);
1136
1137	/*
1138	 * Release any dquot(s) the inode had kept before chown.
1139	 */
1140	xfs_qm_dqrele(olddquot);
1141	xfs_qm_dqrele(udqp);
1142	xfs_qm_dqrele(gdqp);
1143
1144	return code;
1145
1146 error_return:
1147	xfs_qm_dqrele(udqp);
1148	xfs_qm_dqrele(gdqp);
1149	xfs_trans_cancel(tp, 0);
1150	if (lock_flags)
1151		xfs_iunlock(ip, lock_flags);
1152	return code;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1153}
1154
1155STATIC int
1156xfs_ioc_fssetxattr(
1157	xfs_inode_t		*ip,
1158	struct file		*filp,
1159	void			__user *arg)
1160{
1161	struct fsxattr		fa;
1162	unsigned int		mask;
 
 
1163
1164	if (copy_from_user(&fa, arg, sizeof(fa)))
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1165		return -EFAULT;
1166
1167	mask = FSX_XFLAGS | FSX_EXTSIZE | FSX_PROJID;
1168	if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
1169		mask |= FSX_NONBLOCK;
 
 
 
 
 
1170
1171	return -xfs_ioctl_setattr(ip, &fa, mask);
1172}
 
1173
1174STATIC int
1175xfs_ioc_getxflags(
1176	xfs_inode_t		*ip,
1177	void			__user *arg)
1178{
1179	unsigned int		flags;
 
 
 
 
1180
1181	flags = xfs_di2lxflags(ip->i_d.di_flags);
1182	if (copy_to_user(arg, &flags, sizeof(flags)))
1183		return -EFAULT;
1184	return 0;
1185}
1186
1187STATIC int
1188xfs_ioc_setxflags(
1189	xfs_inode_t		*ip,
1190	struct file		*filp,
1191	void			__user *arg)
1192{
1193	struct fsxattr		fa;
1194	unsigned int		flags;
1195	unsigned int		mask;
1196
1197	if (copy_from_user(&flags, arg, sizeof(flags)))
1198		return -EFAULT;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1199
1200	if (flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL | \
1201		      FS_NOATIME_FL | FS_NODUMP_FL | \
1202		      FS_SYNC_FL))
1203		return -EOPNOTSUPP;
1204
1205	mask = FSX_XFLAGS;
1206	if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
1207		mask |= FSX_NONBLOCK;
1208	fa.fsx_xflags = xfs_merge_ioc_xflags(flags, xfs_ip2xflags(ip));
1209
1210	return -xfs_ioctl_setattr(ip, &fa, mask);
1211}
1212
1213STATIC int
1214xfs_getbmap_format(void **ap, struct getbmapx *bmv, int *full)
 
 
1215{
1216	struct getbmap __user	*base = *ap;
 
 
 
 
1217
1218	/* copy only getbmap portion (not getbmapx) */
1219	if (copy_to_user(base, bmv, sizeof(struct getbmap)))
1220		return XFS_ERROR(EFAULT);
 
 
1221
1222	*ap += sizeof(struct getbmap);
 
1223	return 0;
1224}
1225
1226STATIC int
1227xfs_ioc_getbmap(
1228	struct xfs_inode	*ip,
1229	int			ioflags,
1230	unsigned int		cmd,
1231	void			__user *arg)
1232{
1233	struct getbmapx		bmx;
 
 
1234	int			error;
1235
1236	if (copy_from_user(&bmx, arg, sizeof(struct getbmapx)))
1237		return -XFS_ERROR(EFAULT);
 
 
 
 
 
 
 
 
 
 
 
1238
1239	if (bmx.bmv_count < 2)
1240		return -XFS_ERROR(EINVAL);
 
1241
1242	bmx.bmv_iflags = (cmd == XFS_IOC_GETBMAPA ? BMV_IF_ATTRFORK : 0);
1243	if (ioflags & IO_INVIS)
1244		bmx.bmv_iflags |= BMV_IF_NO_DMAPI_READ;
 
1245
1246	error = xfs_getbmap(ip, &bmx, xfs_getbmap_format,
1247			    (struct getbmap *)arg+1);
 
 
 
 
 
 
 
 
1248	if (error)
1249		return -error;
 
 
 
 
 
 
 
 
 
 
1250
1251	/* copy back header - only size of getbmap */
1252	if (copy_to_user(arg, &bmx, sizeof(struct getbmap)))
1253		return -XFS_ERROR(EFAULT);
1254	return 0;
1255}
1256
1257STATIC int
1258xfs_getbmapx_format(void **ap, struct getbmapx *bmv, int *full)
1259{
1260	struct getbmapx __user	*base = *ap;
1261
1262	if (copy_to_user(base, bmv, sizeof(struct getbmapx)))
1263		return XFS_ERROR(EFAULT);
1264
1265	*ap += sizeof(struct getbmapx);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1266	return 0;
1267}
1268
1269STATIC int
1270xfs_ioc_getbmapx(
1271	struct xfs_inode	*ip,
1272	void			__user *arg)
 
1273{
1274	struct getbmapx		bmx;
 
1275	int			error;
1276
1277	if (copy_from_user(&bmx, arg, sizeof(bmx)))
1278		return -XFS_ERROR(EFAULT);
1279
1280	if (bmx.bmv_count < 2)
1281		return -XFS_ERROR(EINVAL);
 
1282
1283	if (bmx.bmv_iflags & (~BMV_IF_VALID))
1284		return -XFS_ERROR(EINVAL);
1285
1286	error = xfs_getbmap(ip, &bmx, xfs_getbmapx_format,
1287			    (struct getbmapx *)arg+1);
1288	if (error)
1289		return -error;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1290
1291	/* copy back header */
1292	if (copy_to_user(arg, &bmx, sizeof(struct getbmapx)))
1293		return -XFS_ERROR(EFAULT);
 
 
 
 
 
 
 
 
 
1294
 
 
1295	return 0;
1296}
1297
1298/*
 
 
 
 
 
 
 
 
 
1299 * Note: some of the ioctl's return positive numbers as a
1300 * byte count indicating success, such as readlink_by_handle.
1301 * So we don't "sign flip" like most other routines.  This means
1302 * true errors need to be returned as a negative value.
1303 */
1304long
1305xfs_file_ioctl(
1306	struct file		*filp,
1307	unsigned int		cmd,
1308	unsigned long		p)
1309{
1310	struct inode		*inode = filp->f_path.dentry->d_inode;
1311	struct xfs_inode	*ip = XFS_I(inode);
1312	struct xfs_mount	*mp = ip->i_mount;
1313	void			__user *arg = (void __user *)p;
1314	int			ioflags = 0;
1315	int			error;
1316
1317	if (filp->f_mode & FMODE_NOCMTIME)
1318		ioflags |= IO_INVIS;
1319
1320	trace_xfs_file_ioctl(ip);
1321
1322	switch (cmd) {
1323	case FITRIM:
1324		return xfs_ioc_trim(mp, arg);
 
 
 
 
1325	case XFS_IOC_ALLOCSP:
1326	case XFS_IOC_FREESP:
1327	case XFS_IOC_RESVSP:
1328	case XFS_IOC_UNRESVSP:
1329	case XFS_IOC_ALLOCSP64:
1330	case XFS_IOC_FREESP64:
1331	case XFS_IOC_RESVSP64:
1332	case XFS_IOC_UNRESVSP64:
1333	case XFS_IOC_ZERO_RANGE: {
1334		xfs_flock64_t		bf;
1335
1336		if (copy_from_user(&bf, arg, sizeof(bf)))
1337			return -XFS_ERROR(EFAULT);
1338		return xfs_ioc_space(ip, inode, filp, ioflags, cmd, &bf);
1339	}
1340	case XFS_IOC_DIOINFO: {
1341		struct dioattr	da;
1342		xfs_buftarg_t	*target =
1343			XFS_IS_REALTIME_INODE(ip) ?
1344			mp->m_rtdev_targp : mp->m_ddev_targp;
1345
1346		da.d_mem = da.d_miniosz = 1 << target->bt_sshift;
1347		da.d_maxiosz = INT_MAX & ~(da.d_miniosz - 1);
1348
1349		if (copy_to_user(arg, &da, sizeof(da)))
1350			return -XFS_ERROR(EFAULT);
1351		return 0;
1352	}
1353
1354	case XFS_IOC_FSBULKSTAT_SINGLE:
1355	case XFS_IOC_FSBULKSTAT:
1356	case XFS_IOC_FSINUMBERS:
1357		return xfs_ioc_bulkstat(mp, cmd, arg);
1358
1359	case XFS_IOC_FSGEOMETRY_V1:
1360		return xfs_ioc_fsgeometry_v1(mp, arg);
 
 
1361
 
 
 
 
1362	case XFS_IOC_FSGEOMETRY:
1363		return xfs_ioc_fsgeometry(mp, arg);
 
 
 
 
 
1364
1365	case XFS_IOC_GETVERSION:
1366		return put_user(inode->i_generation, (int __user *)arg);
1367
1368	case XFS_IOC_FSGETXATTR:
1369		return xfs_ioc_fsgetxattr(ip, 0, arg);
1370	case XFS_IOC_FSGETXATTRA:
1371		return xfs_ioc_fsgetxattr(ip, 1, arg);
1372	case XFS_IOC_FSSETXATTR:
1373		return xfs_ioc_fssetxattr(ip, filp, arg);
1374	case XFS_IOC_GETXFLAGS:
1375		return xfs_ioc_getxflags(ip, arg);
1376	case XFS_IOC_SETXFLAGS:
1377		return xfs_ioc_setxflags(ip, filp, arg);
1378
1379	case XFS_IOC_FSSETDM: {
1380		struct fsdmidata	dmi;
1381
1382		if (copy_from_user(&dmi, arg, sizeof(dmi)))
1383			return -XFS_ERROR(EFAULT);
1384
1385		error = xfs_set_dmattrs(ip, dmi.fsd_dmevmask,
1386				dmi.fsd_dmstate);
1387		return -error;
1388	}
1389
1390	case XFS_IOC_GETBMAP:
1391	case XFS_IOC_GETBMAPA:
1392		return xfs_ioc_getbmap(ip, ioflags, cmd, arg);
1393
1394	case XFS_IOC_GETBMAPX:
1395		return xfs_ioc_getbmapx(ip, arg);
 
 
 
 
 
 
 
 
1396
1397	case XFS_IOC_FD_TO_HANDLE:
1398	case XFS_IOC_PATH_TO_HANDLE:
1399	case XFS_IOC_PATH_TO_FSHANDLE: {
1400		xfs_fsop_handlereq_t	hreq;
1401
1402		if (copy_from_user(&hreq, arg, sizeof(hreq)))
1403			return -XFS_ERROR(EFAULT);
1404		return xfs_find_handle(cmd, &hreq);
1405	}
1406	case XFS_IOC_OPEN_BY_HANDLE: {
1407		xfs_fsop_handlereq_t	hreq;
1408
1409		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1410			return -XFS_ERROR(EFAULT);
1411		return xfs_open_by_handle(filp, &hreq);
1412	}
1413	case XFS_IOC_FSSETDM_BY_HANDLE:
1414		return xfs_fssetdm_by_handle(filp, arg);
1415
1416	case XFS_IOC_READLINK_BY_HANDLE: {
1417		xfs_fsop_handlereq_t	hreq;
1418
1419		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1420			return -XFS_ERROR(EFAULT);
1421		return xfs_readlink_by_handle(filp, &hreq);
1422	}
1423	case XFS_IOC_ATTRLIST_BY_HANDLE:
1424		return xfs_attrlist_by_handle(filp, arg);
1425
1426	case XFS_IOC_ATTRMULTI_BY_HANDLE:
1427		return xfs_attrmulti_by_handle(filp, arg);
1428
1429	case XFS_IOC_SWAPEXT: {
1430		struct xfs_swapext	sxp;
1431
1432		if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))
1433			return -XFS_ERROR(EFAULT);
1434		error = xfs_swapext(&sxp);
1435		return -error;
1436	}
1437
1438	case XFS_IOC_FSCOUNTS: {
1439		xfs_fsop_counts_t out;
1440
1441		error = xfs_fs_counts(mp, &out);
1442		if (error)
1443			return -error;
1444
1445		if (copy_to_user(arg, &out, sizeof(out)))
1446			return -XFS_ERROR(EFAULT);
1447		return 0;
1448	}
1449
1450	case XFS_IOC_SET_RESBLKS: {
1451		xfs_fsop_resblks_t inout;
1452		__uint64_t	   in;
1453
1454		if (!capable(CAP_SYS_ADMIN))
1455			return -EPERM;
1456
1457		if (mp->m_flags & XFS_MOUNT_RDONLY)
1458			return -XFS_ERROR(EROFS);
1459
1460		if (copy_from_user(&inout, arg, sizeof(inout)))
1461			return -XFS_ERROR(EFAULT);
1462
1463		/* input parameter is passed in resblks field of structure */
1464		in = inout.resblks;
1465		error = xfs_reserve_blocks(mp, &in, &inout);
1466		if (error)
1467			return -error;
1468
1469		if (copy_to_user(arg, &inout, sizeof(inout)))
1470			return -XFS_ERROR(EFAULT);
1471		return 0;
1472	}
1473
1474	case XFS_IOC_GET_RESBLKS: {
1475		xfs_fsop_resblks_t out;
1476
1477		if (!capable(CAP_SYS_ADMIN))
1478			return -EPERM;
1479
1480		error = xfs_reserve_blocks(mp, NULL, &out);
1481		if (error)
1482			return -error;
1483
1484		if (copy_to_user(arg, &out, sizeof(out)))
1485			return -XFS_ERROR(EFAULT);
1486
1487		return 0;
1488	}
1489
1490	case XFS_IOC_FSGROWFSDATA: {
1491		xfs_growfs_data_t in;
1492
1493		if (copy_from_user(&in, arg, sizeof(in)))
1494			return -XFS_ERROR(EFAULT);
1495
 
 
 
1496		error = xfs_growfs_data(mp, &in);
1497		return -error;
 
1498	}
1499
1500	case XFS_IOC_FSGROWFSLOG: {
1501		xfs_growfs_log_t in;
1502
1503		if (copy_from_user(&in, arg, sizeof(in)))
1504			return -XFS_ERROR(EFAULT);
1505
 
 
 
1506		error = xfs_growfs_log(mp, &in);
1507		return -error;
 
1508	}
1509
1510	case XFS_IOC_FSGROWFSRT: {
1511		xfs_growfs_rt_t in;
1512
1513		if (copy_from_user(&in, arg, sizeof(in)))
1514			return -XFS_ERROR(EFAULT);
1515
 
 
 
1516		error = xfs_growfs_rt(mp, &in);
1517		return -error;
 
1518	}
1519
1520	case XFS_IOC_GOINGDOWN: {
1521		__uint32_t in;
1522
1523		if (!capable(CAP_SYS_ADMIN))
1524			return -EPERM;
1525
1526		if (get_user(in, (__uint32_t __user *)arg))
1527			return -XFS_ERROR(EFAULT);
1528
1529		error = xfs_fs_goingdown(mp, in);
1530		return -error;
1531	}
1532
1533	case XFS_IOC_ERROR_INJECTION: {
1534		xfs_error_injection_t in;
1535
1536		if (!capable(CAP_SYS_ADMIN))
1537			return -EPERM;
1538
1539		if (copy_from_user(&in, arg, sizeof(in)))
1540			return -XFS_ERROR(EFAULT);
1541
1542		error = xfs_errortag_add(in.errtag, mp);
1543		return -error;
1544	}
1545
1546	case XFS_IOC_ERROR_CLEARALL:
1547		if (!capable(CAP_SYS_ADMIN))
1548			return -EPERM;
1549
1550		error = xfs_errortag_clearall(mp, 1);
1551		return -error;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1552
1553	default:
1554		return -ENOTTY;
1555	}
1556}
v6.13.7
   1// SPDX-License-Identifier: GPL-2.0
   2/*
   3 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
   4 * All Rights Reserved.
 
 
 
 
 
 
 
 
 
 
 
 
 
   5 */
   6#include "xfs.h"
   7#include "xfs_fs.h"
   8#include "xfs_shared.h"
   9#include "xfs_format.h"
  10#include "xfs_log_format.h"
  11#include "xfs_trans_resv.h"
 
 
 
  12#include "xfs_mount.h"
 
 
  13#include "xfs_inode.h"
 
  14#include "xfs_rtalloc.h"
  15#include "xfs_iwalk.h"
  16#include "xfs_itable.h"
  17#include "xfs_error.h"
  18#include "xfs_da_format.h"
  19#include "xfs_da_btree.h"
  20#include "xfs_attr.h"
  21#include "xfs_bmap.h"
  22#include "xfs_bmap_util.h"
 
 
  23#include "xfs_fsops.h"
 
  24#include "xfs_discard.h"
  25#include "xfs_quota.h"
 
 
  26#include "xfs_trace.h"
  27#include "xfs_icache.h"
  28#include "xfs_trans.h"
  29#include "xfs_btree.h"
  30#include <linux/fsmap.h>
  31#include "xfs_fsmap.h"
  32#include "scrub/xfs_scrub.h"
  33#include "xfs_sb.h"
  34#include "xfs_ag.h"
  35#include "xfs_health.h"
  36#include "xfs_reflink.h"
  37#include "xfs_ioctl.h"
  38#include "xfs_xattr.h"
  39#include "xfs_rtbitmap.h"
  40#include "xfs_file.h"
  41#include "xfs_exchrange.h"
  42#include "xfs_handle.h"
  43#include "xfs_rtgroup.h"
  44
 
 
  45#include <linux/mount.h>
  46#include <linux/fileattr.h>
 
 
 
  47
  48/* Return 0 on success or positive error */
 
 
 
 
 
 
 
 
 
 
  49int
  50xfs_fsbulkstat_one_fmt(
  51	struct xfs_ibulk		*breq,
  52	const struct xfs_bulkstat	*bstat)
  53{
  54	struct xfs_bstat		bs1;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  55
  56	xfs_bulkstat_to_bstat(breq->mp, &bs1, bstat);
  57	if (copy_to_user(breq->ubuffer, &bs1, sizeof(bs1)))
  58		return -EFAULT;
  59	return xfs_ibulk_advance(breq, sizeof(struct xfs_bstat));
 
 
 
 
 
 
  60}
  61
  62int
  63xfs_fsinumbers_fmt(
  64	struct xfs_ibulk		*breq,
  65	const struct xfs_inumbers	*igrp)
 
 
 
 
  66{
  67	struct xfs_inogrp		ig1;
 
 
 
 
 
 
 
  68
  69	xfs_inumbers_to_inogrp(&ig1, igrp);
  70	if (copy_to_user(breq->ubuffer, &ig1, sizeof(struct xfs_inogrp)))
  71		return -EFAULT;
  72	return xfs_ibulk_advance(breq, sizeof(struct xfs_inogrp));
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  73}
  74
  75STATIC int
  76xfs_ioc_fsbulkstat(
  77	struct file		*file,
  78	unsigned int		cmd,
  79	void			__user *arg)
  80{
  81	struct xfs_mount	*mp = XFS_I(file_inode(file))->i_mount;
  82	struct xfs_fsop_bulkreq	bulkreq;
  83	struct xfs_ibulk	breq = {
  84		.mp		= mp,
  85		.idmap		= file_mnt_idmap(file),
  86		.ocount		= 0,
  87	};
  88	xfs_ino_t		lastino;
  89	int			error;
  90
  91	/* done = 1 if there are more stats to get and if bulkstat */
  92	/* should be called again (unused here, but used in dmapi) */
 
 
  93
  94	if (!capable(CAP_SYS_ADMIN))
  95		return -EPERM;
  96
  97	if (xfs_is_shutdown(mp))
  98		return -EIO;
 
 
  99
 100	if (copy_from_user(&bulkreq, arg, sizeof(struct xfs_fsop_bulkreq)))
 101		return -EFAULT;
 
 
 
 102
 103	if (copy_from_user(&lastino, bulkreq.lastip, sizeof(__s64)))
 104		return -EFAULT;
 
 105
 106	if (bulkreq.icount <= 0)
 107		return -EINVAL;
 
 
 
 
 108
 109	if (bulkreq.ubuffer == NULL)
 110		return -EINVAL;
 
 
 
 111
 112	breq.ubuffer = bulkreq.ubuffer;
 113	breq.icount = bulkreq.icount;
 
 
 114
 115	/*
 116	 * FSBULKSTAT_SINGLE expects that *lastip contains the inode number
 117	 * that we want to stat.  However, FSINUMBERS and FSBULKSTAT expect
 118	 * that *lastip contains either zero or the number of the last inode to
 119	 * be examined by the previous call and return results starting with
 120	 * the next inode after that.  The new bulk request back end functions
 121	 * take the inode to start with, so we have to compute the startino
 122	 * parameter from lastino to maintain correct function.  lastino == 0
 123	 * is a special case because it has traditionally meant "first inode
 124	 * in filesystem".
 125	 */
 126	if (cmd == XFS_IOC_FSINUMBERS) {
 127		breq.startino = lastino ? lastino + 1 : 0;
 128		error = xfs_inumbers(&breq, xfs_fsinumbers_fmt);
 129		lastino = breq.startino - 1;
 130	} else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE) {
 131		breq.startino = lastino;
 132		breq.icount = 1;
 133		error = xfs_bulkstat_one(&breq, xfs_fsbulkstat_one_fmt);
 134	} else {	/* XFS_IOC_FSBULKSTAT */
 135		breq.startino = lastino ? lastino + 1 : 0;
 136		error = xfs_bulkstat(&breq, xfs_fsbulkstat_one_fmt);
 137		lastino = breq.startino - 1;
 138	}
 139
 140	if (error)
 141		return error;
 
 
 
 142
 143	if (bulkreq.lastip != NULL &&
 144	    copy_to_user(bulkreq.lastip, &lastino, sizeof(xfs_ino_t)))
 145		return -EFAULT;
 
 
 
 146
 147	if (bulkreq.ocount != NULL &&
 148	    copy_to_user(bulkreq.ocount, &breq.ocount, sizeof(__s32)))
 149		return -EFAULT;
 
 150
 151	return 0;
 152}
 153
 154/* Return 0 on success or positive error */
 155static int
 156xfs_bulkstat_fmt(
 157	struct xfs_ibulk		*breq,
 158	const struct xfs_bulkstat	*bstat)
 159{
 160	if (copy_to_user(breq->ubuffer, bstat, sizeof(struct xfs_bulkstat)))
 161		return -EFAULT;
 162	return xfs_ibulk_advance(breq, sizeof(struct xfs_bulkstat));
 163}
 164
 165/*
 166 * Check the incoming bulk request @hdr from userspace and initialize the
 167 * internal @breq bulk request appropriately.  Returns 0 if the bulk request
 168 * should proceed; -ECANCELED if there's nothing to do; or the usual
 169 * negative error code.
 170 */
 171static int
 172xfs_bulk_ireq_setup(
 173	struct xfs_mount	*mp,
 174	const struct xfs_bulk_ireq *hdr,
 175	struct xfs_ibulk	*breq,
 176	void __user		*ubuffer)
 177{
 178	if (hdr->icount == 0 ||
 179	    (hdr->flags & ~XFS_BULK_IREQ_FLAGS_ALL) ||
 180	    memchr_inv(hdr->reserved, 0, sizeof(hdr->reserved)))
 181		return -EINVAL;
 182
 183	breq->startino = hdr->ino;
 184	breq->ubuffer = ubuffer;
 185	breq->icount = hdr->icount;
 186	breq->ocount = 0;
 187	breq->flags = 0;
 188
 189	/*
 190	 * The @ino parameter is a special value, so we must look it up here.
 191	 * We're not allowed to have IREQ_AGNO, and we only return one inode
 192	 * worth of data.
 193	 */
 194	if (hdr->flags & XFS_BULK_IREQ_SPECIAL) {
 195		if (hdr->flags & XFS_BULK_IREQ_AGNO)
 196			return -EINVAL;
 197
 198		switch (hdr->ino) {
 199		case XFS_BULK_IREQ_SPECIAL_ROOT:
 200			breq->startino = mp->m_sb.sb_rootino;
 201			break;
 202		default:
 203			return -EINVAL;
 204		}
 205		breq->icount = 1;
 206	}
 207
 208	/*
 209	 * The IREQ_AGNO flag means that we only want results from a given AG.
 210	 * If @hdr->ino is zero, we start iterating in that AG.  If @hdr->ino is
 211	 * beyond the specified AG then we return no results.
 212	 */
 213	if (hdr->flags & XFS_BULK_IREQ_AGNO) {
 214		if (hdr->agno >= mp->m_sb.sb_agcount)
 215			return -EINVAL;
 216
 217		if (breq->startino == 0)
 218			breq->startino = XFS_AGINO_TO_INO(mp, hdr->agno, 0);
 219		else if (XFS_INO_TO_AGNO(mp, breq->startino) < hdr->agno)
 220			return -EINVAL;
 221
 222		breq->flags |= XFS_IBULK_SAME_AG;
 223
 224		/* Asking for an inode past the end of the AG?  We're done! */
 225		if (XFS_INO_TO_AGNO(mp, breq->startino) > hdr->agno)
 226			return -ECANCELED;
 227	} else if (hdr->agno)
 228		return -EINVAL;
 229
 230	/* Asking for an inode past the end of the FS?  We're done! */
 231	if (XFS_INO_TO_AGNO(mp, breq->startino) >= mp->m_sb.sb_agcount)
 232		return -ECANCELED;
 233
 234	if (hdr->flags & XFS_BULK_IREQ_NREXT64)
 235		breq->flags |= XFS_IBULK_NREXT64;
 236
 237	/* Caller wants to see metadata directories in bulkstat output. */
 238	if (hdr->flags & XFS_BULK_IREQ_METADIR)
 239		breq->flags |= XFS_IBULK_METADIR;
 240
 241	return 0;
 
 
 
 
 
 
 242}
 243
 244/*
 245 * Update the userspace bulk request @hdr to reflect the end state of the
 246 * internal bulk request @breq.
 247 */
 248static void
 249xfs_bulk_ireq_teardown(
 250	struct xfs_bulk_ireq	*hdr,
 251	struct xfs_ibulk	*breq)
 252{
 253	hdr->ino = breq->startino;
 254	hdr->ocount = breq->ocount;
 255}
 256
 257/* Handle the v5 bulkstat ioctl. */
 258STATIC int
 259xfs_ioc_bulkstat(
 260	struct file			*file,
 261	unsigned int			cmd,
 262	struct xfs_bulkstat_req __user	*arg)
 263{
 264	struct xfs_mount		*mp = XFS_I(file_inode(file))->i_mount;
 265	struct xfs_bulk_ireq		hdr;
 266	struct xfs_ibulk		breq = {
 267		.mp			= mp,
 268		.idmap			= file_mnt_idmap(file),
 269	};
 270	int				error;
 271
 272	if (!capable(CAP_SYS_ADMIN))
 273		return -EPERM;
 274
 275	if (xfs_is_shutdown(mp))
 276		return -EIO;
 
 277
 278	if (copy_from_user(&hdr, &arg->hdr, sizeof(hdr)))
 279		return -EFAULT;
 
 
 
 
 
 
 
 
 280
 281	error = xfs_bulk_ireq_setup(mp, &hdr, &breq, arg->bulkstat);
 282	if (error == -ECANCELED)
 283		goto out_teardown;
 284	if (error < 0)
 285		return error;
 286
 287	error = xfs_bulkstat(&breq, xfs_bulkstat_fmt);
 288	if (error)
 289		return error;
 
 
 
 290
 291out_teardown:
 292	xfs_bulk_ireq_teardown(&hdr, &breq);
 293	if (copy_to_user(&arg->hdr, &hdr, sizeof(hdr)))
 294		return -EFAULT;
 295
 296	return 0;
 297}
 298
 299STATIC int
 300xfs_inumbers_fmt(
 301	struct xfs_ibulk		*breq,
 302	const struct xfs_inumbers	*igrp)
 303{
 304	if (copy_to_user(breq->ubuffer, igrp, sizeof(struct xfs_inumbers)))
 305		return -EFAULT;
 306	return xfs_ibulk_advance(breq, sizeof(struct xfs_inumbers));
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 307}
 308
 309/* Handle the v5 inumbers ioctl. */
 310STATIC int
 311xfs_ioc_inumbers(
 312	struct xfs_mount		*mp,
 313	unsigned int			cmd,
 314	struct xfs_inumbers_req __user	*arg)
 315{
 316	struct xfs_bulk_ireq		hdr;
 317	struct xfs_ibulk		breq = {
 318		.mp			= mp,
 319	};
 320	int				error;
 321
 322	if (!capable(CAP_SYS_ADMIN))
 323		return -EPERM;
 
 
 
 
 324
 325	if (xfs_is_shutdown(mp))
 326		return -EIO;
 
 
 
 327
 328	if (copy_from_user(&hdr, &arg->hdr, sizeof(hdr)))
 329		return -EFAULT;
 
 
 
 
 
 
 
 
 
 
 
 330
 331	if (hdr.flags & XFS_BULK_IREQ_METADIR)
 332		return -EINVAL;
 333
 334	error = xfs_bulk_ireq_setup(mp, &hdr, &breq, arg->inumbers);
 335	if (error == -ECANCELED)
 336		goto out_teardown;
 337	if (error < 0)
 338		return error;
 
 339
 340	error = xfs_inumbers(&breq, xfs_inumbers_fmt);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 341	if (error)
 342		return error;
 343
 344out_teardown:
 345	xfs_bulk_ireq_teardown(&hdr, &breq);
 346	if (copy_to_user(&arg->hdr, &hdr, sizeof(hdr)))
 347		return -EFAULT;
 348
 349	return 0;
 
 
 350}
 351
 352STATIC int
 353xfs_ioc_fsgeometry(
 354	struct xfs_mount	*mp,
 355	void			__user *arg,
 356	int			struct_version)
 357{
 358	struct xfs_fsop_geom	fsgeo;
 359	size_t			len;
 
 
 
 
 
 
 
 
 
 
 
 360
 361	xfs_fs_geometry(mp, &fsgeo, struct_version);
 362
 363	if (struct_version <= 3)
 364		len = sizeof(struct xfs_fsop_geom_v1);
 365	else if (struct_version == 4)
 366		len = sizeof(struct xfs_fsop_geom_v4);
 367	else {
 368		xfs_fsop_geom_health(mp, &fsgeo);
 369		len = sizeof(fsgeo);
 370	}
 371
 372	if (copy_to_user(arg, &fsgeo, len))
 373		return -EFAULT;
 374	return 0;
 
 
 
 
 
 
 375}
 376
 377STATIC int
 378xfs_ioc_ag_geometry(
 379	struct xfs_mount	*mp,
 380	void			__user *arg)
 381{
 382	struct xfs_perag	*pag;
 383	struct xfs_ag_geometry	ageo;
 384	int			error;
 
 
 
 
 
 385
 386	if (copy_from_user(&ageo, arg, sizeof(ageo)))
 387		return -EFAULT;
 388	if (ageo.ag_flags)
 389		return -EINVAL;
 390	if (memchr_inv(&ageo.ag_reserved, 0, sizeof(ageo.ag_reserved)))
 391		return -EINVAL;
 392
 393	pag = xfs_perag_get(mp, ageo.ag_number);
 394	if (!pag)
 395		return -EINVAL;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 396
 397	error = xfs_ag_get_geometry(pag, &ageo);
 398	xfs_perag_put(pag);
 399	if (error)
 400		return error;
 401
 402	if (copy_to_user(arg, &ageo, sizeof(ageo)))
 403		return -EFAULT;
 404	return 0;
 
 
 
 405}
 406
 407STATIC int
 408xfs_ioc_rtgroup_geometry(
 409	struct xfs_mount	*mp,
 410	void			__user *arg)
 
 
 
 
 411{
 412	struct xfs_rtgroup	*rtg;
 413	struct xfs_rtgroup_geometry rgeo;
 414	int			error;
 415
 416	if (copy_from_user(&rgeo, arg, sizeof(rgeo)))
 417		return -EFAULT;
 418	if (rgeo.rg_flags)
 419		return -EINVAL;
 420	if (memchr_inv(&rgeo.rg_reserved, 0, sizeof(rgeo.rg_reserved)))
 421		return -EINVAL;
 422	if (!xfs_has_rtgroups(mp))
 423		return -EINVAL;
 424
 425	rtg = xfs_rtgroup_get(mp, rgeo.rg_number);
 426	if (!rtg)
 427		return -EINVAL;
 428
 429	error = xfs_rtgroup_get_geometry(rtg, &rgeo);
 430	xfs_rtgroup_put(rtg);
 431	if (error)
 432		return error;
 433
 434	if (copy_to_user(arg, &rgeo, sizeof(rgeo)))
 435		return -EFAULT;
 436	return 0;
 437}
 438
 439/*
 440 * Linux extended inode flags interface.
 441 */
 442
 443static void
 444xfs_fill_fsxattr(
 445	struct xfs_inode	*ip,
 446	int			whichfork,
 447	struct fileattr		*fa)
 448{
 449	struct xfs_mount	*mp = ip->i_mount;
 450	struct xfs_ifork	*ifp = xfs_ifork_ptr(ip, whichfork);
 451
 452	fileattr_fill_xflags(fa, xfs_ip2xflags(ip));
 
 453
 454	if (ip->i_diflags & XFS_DIFLAG_EXTSIZE) {
 455		fa->fsx_extsize = XFS_FSB_TO_B(mp, ip->i_extsize);
 456	} else if (ip->i_diflags & XFS_DIFLAG_EXTSZINHERIT) {
 457		/*
 458		 * Don't let a misaligned extent size hint on a directory
 459		 * escape to userspace if it won't pass the setattr checks
 460		 * later.
 461		 */
 462		if ((ip->i_diflags & XFS_DIFLAG_RTINHERIT) &&
 463		    xfs_extlen_to_rtxmod(mp, ip->i_extsize) > 0) {
 464			fa->fsx_xflags &= ~(FS_XFLAG_EXTSIZE |
 465					    FS_XFLAG_EXTSZINHERIT);
 466			fa->fsx_extsize = 0;
 467		} else {
 468			fa->fsx_extsize = XFS_FSB_TO_B(mp, ip->i_extsize);
 469		}
 470	}
 471
 472	if (ip->i_diflags2 & XFS_DIFLAG2_COWEXTSIZE)
 473		fa->fsx_cowextsize = XFS_FSB_TO_B(mp, ip->i_cowextsize);
 474	fa->fsx_projid = ip->i_projid;
 475	if (ifp && !xfs_need_iread_extents(ifp))
 476		fa->fsx_nextents = xfs_iext_count(ifp);
 477	else
 478		fa->fsx_nextents = xfs_ifork_nextents(ifp);
 479}
 480
 481STATIC int
 482xfs_ioc_fsgetxattra(
 483	xfs_inode_t		*ip,
 
 484	void			__user *arg)
 485{
 486	struct fileattr		fa;
 
 
 
 
 487
 488	xfs_ilock(ip, XFS_ILOCK_SHARED);
 489	xfs_fill_fsxattr(ip, XFS_ATTR_FORK, &fa);
 490	xfs_iunlock(ip, XFS_ILOCK_SHARED);
 491
 492	return copy_fsxattr_to_user(&fa, arg);
 493}
 494
 495int
 496xfs_fileattr_get(
 497	struct dentry		*dentry,
 498	struct fileattr		*fa)
 499{
 500	struct xfs_inode	*ip = XFS_I(d_inode(dentry));
 501
 502	if (d_is_special(dentry))
 503		return -ENOTTY;
 504
 505	xfs_ilock(ip, XFS_ILOCK_SHARED);
 506	xfs_fill_fsxattr(ip, XFS_DATA_FORK, fa);
 507	xfs_iunlock(ip, XFS_ILOCK_SHARED);
 508
 509	return 0;
 510}
 511
 512static int
 513xfs_ioctl_setattr_xflags(
 514	struct xfs_trans	*tp,
 515	struct xfs_inode	*ip,
 516	struct fileattr		*fa)
 517{
 518	struct xfs_mount	*mp = ip->i_mount;
 519	bool			rtflag = (fa->fsx_xflags & FS_XFLAG_REALTIME);
 520	uint64_t		i_flags2;
 521
 522	if (rtflag != XFS_IS_REALTIME_INODE(ip)) {
 523		/* Can't change realtime flag if any extents are allocated. */
 524		if (xfs_inode_has_filedata(ip))
 525			return -EINVAL;
 
 
 
 
 
 
 526
 527		/*
 528		 * If S_DAX is enabled on this file, we can only switch the
 529		 * device if both support fsdax.  We can't update S_DAX because
 530		 * there might be other threads walking down the access paths.
 531		 */
 532		if (IS_DAX(VFS_I(ip)) &&
 533		    (mp->m_ddev_targp->bt_daxdev == NULL ||
 534		     (mp->m_rtdev_targp &&
 535		      mp->m_rtdev_targp->bt_daxdev == NULL)))
 536			return -EINVAL;
 537	}
 538
 539	if (rtflag) {
 540		/* If realtime flag is set then must have realtime device */
 541		if (mp->m_sb.sb_rblocks == 0 || mp->m_sb.sb_rextsize == 0 ||
 542		    xfs_extlen_to_rtxmod(mp, ip->i_extsize))
 543			return -EINVAL;
 544
 545		/* Clear reflink if we are actually able to set the rt flag. */
 546		if (xfs_is_reflink_inode(ip))
 547			ip->i_diflags2 &= ~XFS_DIFLAG2_REFLINK;
 548	}
 549
 550	/* diflags2 only valid for v3 inodes. */
 551	i_flags2 = xfs_flags2diflags2(ip, fa->fsx_xflags);
 552	if (i_flags2 && !xfs_has_v3inodes(mp))
 553		return -EINVAL;
 554
 555	ip->i_diflags = xfs_flags2diflags(ip, fa->fsx_xflags);
 556	ip->i_diflags2 = i_flags2;
 
 
 
 
 
 557
 558	xfs_diflags_to_iflags(ip, false);
 
 
 559
 560	/*
 561	 * Make the stable writes flag match that of the device the inode
 562	 * resides on when flipping the RT flag.
 
 563	 */
 564	if (rtflag != XFS_IS_REALTIME_INODE(ip) && S_ISREG(VFS_I(ip)->i_mode))
 565		xfs_update_stable_writes(ip);
 566
 567	xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_CHG);
 568	xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
 569	XFS_STATS_INC(mp, xs_ig_attrchg);
 570	return 0;
 571}
 572
 573static void
 574xfs_ioctl_setattr_prepare_dax(
 575	struct xfs_inode	*ip,
 576	struct fileattr		*fa)
 577{
 578	struct xfs_mount	*mp = ip->i_mount;
 579	struct inode            *inode = VFS_I(ip);
 580
 581	if (S_ISDIR(inode->i_mode))
 582		return;
 
 583
 584	if (xfs_has_dax_always(mp) || xfs_has_dax_never(mp))
 585		return;
 586
 587	if (((fa->fsx_xflags & FS_XFLAG_DAX) &&
 588	    !(ip->i_diflags2 & XFS_DIFLAG2_DAX)) ||
 589	    (!(fa->fsx_xflags & FS_XFLAG_DAX) &&
 590	     (ip->i_diflags2 & XFS_DIFLAG2_DAX)))
 591		d_mark_dontcache(inode);
 592}
 593
 594/*
 595 * Set up the transaction structure for the setattr operation, checking that we
 596 * have permission to do so. On success, return a clean transaction and the
 597 * inode locked exclusively ready for further operation specific checks. On
 598 * failure, return an error without modifying or locking the inode.
 599 */
 600static struct xfs_trans *
 601xfs_ioctl_setattr_get_trans(
 602	struct xfs_inode	*ip,
 603	struct xfs_dquot	*pdqp)
 
 604{
 605	struct xfs_mount	*mp = ip->i_mount;
 606	struct xfs_trans	*tp;
 607	int			error = -EROFS;
 608
 609	if (xfs_is_readonly(mp))
 610		goto out_error;
 611	error = -EIO;
 612	if (xfs_is_shutdown(mp))
 613		goto out_error;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 614
 615	error = xfs_trans_alloc_ichange(ip, NULL, NULL, pdqp,
 616			has_capability_noaudit(current, CAP_FOWNER), &tp);
 617	if (error)
 618		goto out_error;
 619
 620	if (xfs_has_wsync(mp))
 621		xfs_trans_set_sync(tp);
 622
 623	return tp;
 624
 625out_error:
 626	return ERR_PTR(error);
 
 
 
 
 
 
 
 
 
 
 
 
 
 627}
 628
 629/*
 630 * Validate a proposed extent size hint.  For regular files, the hint can only
 631 * be changed if no extents are allocated.
 632 */
 633static int
 634xfs_ioctl_setattr_check_extsize(
 635	struct xfs_inode	*ip,
 636	struct fileattr		*fa)
 637{
 638	struct xfs_mount	*mp = ip->i_mount;
 639	xfs_failaddr_t		failaddr;
 640	uint16_t		new_diflags;
 641
 642	if (!fa->fsx_valid)
 643		return 0;
 644
 645	if (S_ISREG(VFS_I(ip)->i_mode) && xfs_inode_has_filedata(ip) &&
 646	    XFS_FSB_TO_B(mp, ip->i_extsize) != fa->fsx_extsize)
 647		return -EINVAL;
 648
 649	if (fa->fsx_extsize & mp->m_blockmask)
 650		return -EINVAL;
 651
 652	new_diflags = xfs_flags2diflags(ip, fa->fsx_xflags);
 653
 654	/*
 655	 * Inode verifiers do not check that the extent size hint is an integer
 656	 * multiple of the rt extent size on a directory with both rtinherit
 657	 * and extszinherit flags set.  Don't let sysadmins misconfigure
 658	 * directories.
 659	 */
 660	if ((new_diflags & XFS_DIFLAG_RTINHERIT) &&
 661	    (new_diflags & XFS_DIFLAG_EXTSZINHERIT)) {
 662		unsigned int	rtextsize_bytes;
 663
 664		rtextsize_bytes = XFS_FSB_TO_B(mp, mp->m_sb.sb_rextsize);
 665		if (fa->fsx_extsize % rtextsize_bytes)
 666			return -EINVAL;
 667	}
 
 668
 669	failaddr = xfs_inode_validate_extsize(ip->i_mount,
 670			XFS_B_TO_FSB(mp, fa->fsx_extsize),
 671			VFS_I(ip)->i_mode, new_diflags);
 672	return failaddr != NULL ? -EINVAL : 0;
 673}
 674
 675static int
 676xfs_ioctl_setattr_check_cowextsize(
 677	struct xfs_inode	*ip,
 678	struct fileattr		*fa)
 679{
 680	struct xfs_mount	*mp = ip->i_mount;
 681	xfs_failaddr_t		failaddr;
 682	uint64_t		new_diflags2;
 683	uint16_t		new_diflags;
 684
 685	if (!fa->fsx_valid)
 686		return 0;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 687
 688	if (fa->fsx_cowextsize & mp->m_blockmask)
 689		return -EINVAL;
 690
 691	new_diflags = xfs_flags2diflags(ip, fa->fsx_xflags);
 692	new_diflags2 = xfs_flags2diflags2(ip, fa->fsx_xflags);
 693
 694	failaddr = xfs_inode_validate_cowextsize(ip->i_mount,
 695			XFS_B_TO_FSB(mp, fa->fsx_cowextsize),
 696			VFS_I(ip)->i_mode, new_diflags, new_diflags2);
 697	return failaddr != NULL ? -EINVAL : 0;
 
 
 
 
 
 
 698}
 699
 700static int
 701xfs_ioctl_setattr_check_projid(
 702	struct xfs_inode	*ip,
 703	struct fileattr		*fa)
 704{
 705	if (!fa->fsx_valid)
 706		return 0;
 707
 708	/* Disallow 32bit project ids if 32bit IDs are not enabled. */
 709	if (fa->fsx_projid > (uint16_t)-1 &&
 710	    !xfs_has_projid32(ip->i_mount))
 711		return -EINVAL;
 712	return 0;
 713}
 714
 715int
 716xfs_fileattr_set(
 717	struct mnt_idmap	*idmap,
 718	struct dentry		*dentry,
 719	struct fileattr		*fa)
 720{
 721	struct xfs_inode	*ip = XFS_I(d_inode(dentry));
 722	struct xfs_mount	*mp = ip->i_mount;
 723	struct xfs_trans	*tp;
 724	struct xfs_dquot	*pdqp = NULL;
 
 
 725	struct xfs_dquot	*olddquot = NULL;
 726	int			error;
 727
 728	trace_xfs_ioctl_setattr(ip);
 729
 730	if (d_is_special(dentry))
 731		return -ENOTTY;
 
 
 732
 733	if (!fa->fsx_valid) {
 734		if (fa->flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL |
 735				  FS_NOATIME_FL | FS_NODUMP_FL |
 736				  FS_SYNC_FL | FS_DAX_FL | FS_PROJINHERIT_FL))
 737			return -EOPNOTSUPP;
 738	}
 739
 740	error = xfs_ioctl_setattr_check_projid(ip, fa);
 741	if (error)
 742		return error;
 743
 744	/*
 745	 * If disk quotas is on, we make sure that the dquots do exist on disk,
 746	 * before we start any other transactions. Trying to do this later
 747	 * is messy. We don't care to take a readlock to look at the ids
 748	 * in inode here, because we can't hold it across the trans_reserve.
 749	 * If the IDs do change before we take the ilock, we're covered
 750	 * because the i_*dquot fields will get updated anyway.
 751	 */
 752	if (fa->fsx_valid && XFS_IS_QUOTA_ON(mp)) {
 753		error = xfs_qm_vop_dqalloc(ip, VFS_I(ip)->i_uid,
 754				VFS_I(ip)->i_gid, fa->fsx_projid,
 755				XFS_QMOPT_PQUOTA, NULL, NULL, &pdqp);
 756		if (error)
 757			return error;
 758	}
 759
 760	xfs_ioctl_setattr_prepare_dax(ip, fa);
 
 
 
 
 
 
 
 
 
 
 761
 762	tp = xfs_ioctl_setattr_get_trans(ip, pdqp);
 763	if (IS_ERR(tp)) {
 764		error = PTR_ERR(tp);
 765		goto error_free_dquots;
 
 
 
 
 
 
 766	}
 767
 768	error = xfs_ioctl_setattr_check_extsize(ip, fa);
 769	if (error)
 770		goto error_trans_cancel;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 771
 772	error = xfs_ioctl_setattr_check_cowextsize(ip, fa);
 773	if (error)
 774		goto error_trans_cancel;
 775
 776	error = xfs_ioctl_setattr_xflags(tp, ip, fa);
 777	if (error)
 778		goto error_trans_cancel;
 
 
 
 
 
 
 
 779
 780	if (!fa->fsx_valid)
 781		goto skip_xattr;
 782	/*
 783	 * Change file ownership.  Must be the owner or privileged.  CAP_FSETID
 784	 * overrides the following restrictions:
 785	 *
 786	 * The set-user-ID and set-group-ID bits of a file will be cleared upon
 787	 * successful return from chown()
 788	 */
 
 
 789
 790	if ((VFS_I(ip)->i_mode & (S_ISUID|S_ISGID)) &&
 791	    !capable_wrt_inode_uidgid(idmap, VFS_I(ip), CAP_FSETID))
 792		VFS_I(ip)->i_mode &= ~(S_ISUID|S_ISGID);
 793
 794	/* Change the ownerships and register project quota modifications */
 795	if (ip->i_projid != fa->fsx_projid) {
 796		if (XFS_IS_PQUOTA_ON(mp)) {
 797			olddquot = xfs_qm_vop_chown(tp, ip,
 798						&ip->i_pdquot, pdqp);
 
 
 799		}
 800		ip->i_projid = fa->fsx_projid;
 801	}
 802
 
 
 803	/*
 804	 * Only set the extent size hint if we've already determined that the
 805	 * extent size hint should be set on the inode. If no extent size flags
 806	 * are set on the inode then unconditionally clear the extent size hint.
 807	 */
 808	if (ip->i_diflags & (XFS_DIFLAG_EXTSIZE | XFS_DIFLAG_EXTSZINHERIT))
 809		ip->i_extsize = XFS_B_TO_FSB(mp, fa->fsx_extsize);
 810	else
 811		ip->i_extsize = 0;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 812
 813	if (xfs_has_v3inodes(mp)) {
 814		if (ip->i_diflags2 & XFS_DIFLAG2_COWEXTSIZE)
 815			ip->i_cowextsize = XFS_B_TO_FSB(mp, fa->fsx_cowextsize);
 816		else
 817			ip->i_cowextsize = 0;
 818	}
 819
 820skip_xattr:
 821	error = xfs_trans_commit(tp);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 822
 823	/*
 824	 * Release any dquot(s) the inode had kept before chown.
 825	 */
 826	xfs_qm_dqrele(olddquot);
 827	xfs_qm_dqrele(pdqp);
 
 828
 829	return error;
 830
 831error_trans_cancel:
 832	xfs_trans_cancel(tp);
 833error_free_dquots:
 834	xfs_qm_dqrele(pdqp);
 835	return error;
 836}
 837
 838static bool
 839xfs_getbmap_format(
 840	struct kgetbmap		*p,
 841	struct getbmapx __user	*u,
 842	size_t			recsize)
 843{
 844	if (put_user(p->bmv_offset, &u->bmv_offset) ||
 845	    put_user(p->bmv_block, &u->bmv_block) ||
 846	    put_user(p->bmv_length, &u->bmv_length) ||
 847	    put_user(0, &u->bmv_count) ||
 848	    put_user(0, &u->bmv_entries))
 849		return false;
 850	if (recsize < sizeof(struct getbmapx))
 851		return true;
 852	if (put_user(0, &u->bmv_iflags) ||
 853	    put_user(p->bmv_oflags, &u->bmv_oflags) ||
 854	    put_user(0, &u->bmv_unused1) ||
 855	    put_user(0, &u->bmv_unused2))
 856		return false;
 857	return true;
 858}
 859
 860STATIC int
 861xfs_ioc_getbmap(
 862	struct file		*file,
 863	unsigned int		cmd,
 864	void			__user *arg)
 865{
 866	struct getbmapx		bmx = { 0 };
 867	struct kgetbmap		*buf;
 868	size_t			recsize;
 869	int			error, i;
 870
 871	switch (cmd) {
 872	case XFS_IOC_GETBMAPA:
 873		bmx.bmv_iflags = BMV_IF_ATTRFORK;
 874		fallthrough;
 875	case XFS_IOC_GETBMAP:
 876		/* struct getbmap is a strict subset of struct getbmapx. */
 877		recsize = sizeof(struct getbmap);
 878		break;
 879	case XFS_IOC_GETBMAPX:
 880		recsize = sizeof(struct getbmapx);
 881		break;
 882	default:
 883		return -EINVAL;
 884	}
 885
 886	if (copy_from_user(&bmx, arg, recsize))
 887		return -EFAULT;
 888
 889	if (bmx.bmv_count < 2)
 890		return -EINVAL;
 891	if (bmx.bmv_count >= INT_MAX / recsize)
 892		return -ENOMEM;
 893
 894	buf = kvcalloc(bmx.bmv_count, sizeof(*buf), GFP_KERNEL);
 895	if (!buf)
 896		return -ENOMEM;
 897
 898	error = xfs_getbmap(XFS_I(file_inode(file)), &bmx, buf);
 899	if (error)
 900		goto out_free_buf;
 901
 902	error = -EFAULT;
 903	if (copy_to_user(arg, &bmx, recsize))
 904		goto out_free_buf;
 905	arg += recsize;
 906
 907	for (i = 0; i < bmx.bmv_entries; i++) {
 908		if (!xfs_getbmap_format(buf + i, arg, recsize))
 909			goto out_free_buf;
 910		arg += recsize;
 911	}
 912
 913	error = 0;
 914out_free_buf:
 915	kvfree(buf);
 916	return error;
 917}
 918
 919int
 920xfs_ioc_swapext(
 921	xfs_swapext_t	*sxp)
 
 
 922{
 923	xfs_inode_t     *ip, *tip;
 
 
 924
 925	/* Pull information for the target fd */
 926	CLASS(fd, f)((int)sxp->sx_fdtarget);
 927	if (fd_empty(f))
 928		return -EINVAL;
 929
 930	if (!(fd_file(f)->f_mode & FMODE_WRITE) ||
 931	    !(fd_file(f)->f_mode & FMODE_READ) ||
 932	    (fd_file(f)->f_flags & O_APPEND))
 933		return -EBADF;
 934
 935	CLASS(fd, tmp)((int)sxp->sx_fdtmp);
 936	if (fd_empty(tmp))
 937		return -EINVAL;
 938
 939	if (!(fd_file(tmp)->f_mode & FMODE_WRITE) ||
 940	    !(fd_file(tmp)->f_mode & FMODE_READ) ||
 941	    (fd_file(tmp)->f_flags & O_APPEND))
 942		return -EBADF;
 943
 944	if (IS_SWAPFILE(file_inode(fd_file(f))) ||
 945	    IS_SWAPFILE(file_inode(fd_file(tmp))))
 946		return -EINVAL;
 947
 948	/*
 949	 * We need to ensure that the fds passed in point to XFS inodes
 950	 * before we cast and access them as XFS structures as we have no
 951	 * control over what the user passes us here.
 952	 */
 953	if (fd_file(f)->f_op != &xfs_file_operations ||
 954	    fd_file(tmp)->f_op != &xfs_file_operations)
 955		return -EINVAL;
 956
 957	ip = XFS_I(file_inode(fd_file(f)));
 958	tip = XFS_I(file_inode(fd_file(tmp)));
 959
 960	if (ip->i_mount != tip->i_mount)
 961		return -EINVAL;
 962
 963	if (ip->i_ino == tip->i_ino)
 964		return -EINVAL;
 
 
 965
 966	if (xfs_is_shutdown(ip->i_mount))
 967		return -EIO;
 
 
 968
 969	return xfs_swap_extents(ip, tip, sxp);
 970}
 971
 972static int
 973xfs_ioc_getlabel(
 974	struct xfs_mount	*mp,
 975	char			__user *user_label)
 976{
 977	struct xfs_sb		*sbp = &mp->m_sb;
 978	char			label[XFSLABEL_MAX + 1];
 979
 980	/* Paranoia */
 981	BUILD_BUG_ON(sizeof(sbp->sb_fname) > FSLABEL_MAX);
 982
 983	/* 1 larger than sb_fname, so this ensures a trailing NUL char */
 984	memset(label, 0, sizeof(label));
 985	spin_lock(&mp->m_sb_lock);
 986	strncpy(label, sbp->sb_fname, XFSLABEL_MAX);
 987	spin_unlock(&mp->m_sb_lock);
 988
 989	if (copy_to_user(user_label, label, sizeof(label)))
 990		return -EFAULT;
 991	return 0;
 992}
 993
 994static int
 995xfs_ioc_setlabel(
 996	struct file		*filp,
 997	struct xfs_mount	*mp,
 998	char			__user *newlabel)
 
 999{
1000	struct xfs_sb		*sbp = &mp->m_sb;
1001	char			label[XFSLABEL_MAX + 1];
1002	size_t			len;
1003	int			error;
1004
1005	if (!capable(CAP_SYS_ADMIN))
1006		return -EPERM;
1007	/*
1008	 * The generic ioctl allows up to FSLABEL_MAX chars, but XFS is much
1009	 * smaller, at 12 bytes.  We copy one more to be sure we find the
1010	 * (required) NULL character to test the incoming label length.
1011	 * NB: The on disk label doesn't need to be null terminated.
1012	 */
1013	if (copy_from_user(label, newlabel, XFSLABEL_MAX + 1))
1014		return -EFAULT;
1015	len = strnlen(label, XFSLABEL_MAX + 1);
1016	if (len > sizeof(sbp->sb_fname))
1017		return -EINVAL;
1018
1019	error = mnt_want_write_file(filp);
1020	if (error)
1021		return error;
1022
1023	spin_lock(&mp->m_sb_lock);
1024	memset(sbp->sb_fname, 0, sizeof(sbp->sb_fname));
1025	memcpy(sbp->sb_fname, label, len);
1026	spin_unlock(&mp->m_sb_lock);
1027
1028	/*
1029	 * Now we do several things to satisfy userspace.
1030	 * In addition to normal logging of the primary superblock, we also
1031	 * immediately write these changes to sector zero for the primary, then
1032	 * update all backup supers (as xfs_db does for a label change), then
1033	 * invalidate the block device page cache.  This is so that any prior
1034	 * buffered reads from userspace (i.e. from blkid) are invalidated,
1035	 * and userspace will see the newly-written label.
1036	 */
1037	error = xfs_sync_sb_buf(mp, true);
1038	if (error)
1039		goto out;
1040	/*
1041	 * growfs also updates backup supers so lock against that.
1042	 */
1043	mutex_lock(&mp->m_growlock);
1044	error = xfs_update_secondary_sbs(mp);
1045	mutex_unlock(&mp->m_growlock);
1046
1047	invalidate_bdev(mp->m_ddev_targp->bt_bdev);
1048	if (xfs_has_rtsb(mp) && mp->m_rtdev_targp)
1049		invalidate_bdev(mp->m_rtdev_targp->bt_bdev);
1050
1051out:
1052	mnt_drop_write_file(filp);
1053	return error;
 
1054}
1055
1056static inline int
1057xfs_fs_eofblocks_from_user(
1058	struct xfs_fs_eofblocks		*src,
1059	struct xfs_icwalk		*dst)
1060{
1061	if (src->eof_version != XFS_EOFBLOCKS_VERSION)
1062		return -EINVAL;
1063
1064	if (src->eof_flags & ~XFS_EOF_FLAGS_VALID)
1065		return -EINVAL;
1066
1067	if (memchr_inv(&src->pad32, 0, sizeof(src->pad32)) ||
1068	    memchr_inv(src->pad64, 0, sizeof(src->pad64)))
1069		return -EINVAL;
1070
1071	dst->icw_flags = 0;
1072	if (src->eof_flags & XFS_EOF_FLAGS_SYNC)
1073		dst->icw_flags |= XFS_ICWALK_FLAG_SYNC;
1074	if (src->eof_flags & XFS_EOF_FLAGS_UID)
1075		dst->icw_flags |= XFS_ICWALK_FLAG_UID;
1076	if (src->eof_flags & XFS_EOF_FLAGS_GID)
1077		dst->icw_flags |= XFS_ICWALK_FLAG_GID;
1078	if (src->eof_flags & XFS_EOF_FLAGS_PRID)
1079		dst->icw_flags |= XFS_ICWALK_FLAG_PRID;
1080	if (src->eof_flags & XFS_EOF_FLAGS_MINFILESIZE)
1081		dst->icw_flags |= XFS_ICWALK_FLAG_MINFILESIZE;
1082
1083	dst->icw_prid = src->eof_prid;
1084	dst->icw_min_file_size = src->eof_min_file_size;
1085
1086	dst->icw_uid = INVALID_UID;
1087	if (src->eof_flags & XFS_EOF_FLAGS_UID) {
1088		dst->icw_uid = make_kuid(current_user_ns(), src->eof_uid);
1089		if (!uid_valid(dst->icw_uid))
1090			return -EINVAL;
1091	}
1092
1093	dst->icw_gid = INVALID_GID;
1094	if (src->eof_flags & XFS_EOF_FLAGS_GID) {
1095		dst->icw_gid = make_kgid(current_user_ns(), src->eof_gid);
1096		if (!gid_valid(dst->icw_gid))
1097			return -EINVAL;
1098	}
1099	return 0;
1100}
1101
1102static int
1103xfs_ioctl_getset_resblocks(
1104	struct file		*filp,
1105	unsigned int		cmd,
1106	void __user		*arg)
1107{
1108	struct xfs_mount	*mp = XFS_I(file_inode(filp))->i_mount;
1109	struct xfs_fsop_resblks	fsop = { };
1110	int			error;
1111
1112	if (!capable(CAP_SYS_ADMIN))
1113		return -EPERM;
1114
1115	if (cmd == XFS_IOC_SET_RESBLKS) {
1116		if (xfs_is_readonly(mp))
1117			return -EROFS;
1118
1119		if (copy_from_user(&fsop, arg, sizeof(fsop)))
1120			return -EFAULT;
1121
1122		error = mnt_want_write_file(filp);
1123		if (error)
1124			return error;
1125		error = xfs_reserve_blocks(mp, fsop.resblks);
1126		mnt_drop_write_file(filp);
1127		if (error)
1128			return error;
1129	}
1130
1131	spin_lock(&mp->m_sb_lock);
1132	fsop.resblks = mp->m_resblks;
1133	fsop.resblks_avail = mp->m_resblks_avail;
1134	spin_unlock(&mp->m_sb_lock);
1135
1136	if (copy_to_user(arg, &fsop, sizeof(fsop)))
1137		return -EFAULT;
1138	return 0;
1139}
1140
1141static int
1142xfs_ioctl_fs_counts(
1143	struct xfs_mount	*mp,
1144	struct xfs_fsop_counts __user	*uarg)
1145{
1146	struct xfs_fsop_counts	out = {
1147		.allocino = percpu_counter_read_positive(&mp->m_icount),
1148		.freeino  = percpu_counter_read_positive(&mp->m_ifree),
1149		.freedata = percpu_counter_read_positive(&mp->m_fdblocks) -
1150				xfs_fdblocks_unavailable(mp),
1151		.freertx  = percpu_counter_read_positive(&mp->m_frextents),
1152	};
1153
1154	if (copy_to_user(uarg, &out, sizeof(out)))
1155		return -EFAULT;
1156	return 0;
1157}
1158
1159/*
1160 * These long-unused ioctls were removed from the official ioctl API in 5.17,
1161 * but retain these definitions so that we can log warnings about them.
1162 */
1163#define XFS_IOC_ALLOCSP		_IOW ('X', 10, struct xfs_flock64)
1164#define XFS_IOC_FREESP		_IOW ('X', 11, struct xfs_flock64)
1165#define XFS_IOC_ALLOCSP64	_IOW ('X', 36, struct xfs_flock64)
1166#define XFS_IOC_FREESP64	_IOW ('X', 37, struct xfs_flock64)
1167
1168/*
1169 * Note: some of the ioctl's return positive numbers as a
1170 * byte count indicating success, such as readlink_by_handle.
1171 * So we don't "sign flip" like most other routines.  This means
1172 * true errors need to be returned as a negative value.
1173 */
1174long
1175xfs_file_ioctl(
1176	struct file		*filp,
1177	unsigned int		cmd,
1178	unsigned long		p)
1179{
1180	struct inode		*inode = file_inode(filp);
1181	struct xfs_inode	*ip = XFS_I(inode);
1182	struct xfs_mount	*mp = ip->i_mount;
1183	void			__user *arg = (void __user *)p;
 
1184	int			error;
1185
 
 
 
1186	trace_xfs_file_ioctl(ip);
1187
1188	switch (cmd) {
1189	case FITRIM:
1190		return xfs_ioc_trim(mp, arg);
1191	case FS_IOC_GETFSLABEL:
1192		return xfs_ioc_getlabel(mp, arg);
1193	case FS_IOC_SETFSLABEL:
1194		return xfs_ioc_setlabel(filp, mp, arg);
1195	case XFS_IOC_ALLOCSP:
1196	case XFS_IOC_FREESP:
 
 
1197	case XFS_IOC_ALLOCSP64:
1198	case XFS_IOC_FREESP64:
1199		xfs_warn_once(mp,
1200	"%s should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported",
1201				current->comm);
1202		return -ENOTTY;
 
 
 
 
 
1203	case XFS_IOC_DIOINFO: {
1204		struct xfs_buftarg	*target = xfs_inode_buftarg(ip);
1205		struct dioattr		da;
 
 
1206
1207		da.d_mem =  da.d_miniosz = target->bt_logical_sectorsize;
1208		da.d_maxiosz = INT_MAX & ~(da.d_miniosz - 1);
1209
1210		if (copy_to_user(arg, &da, sizeof(da)))
1211			return -EFAULT;
1212		return 0;
1213	}
1214
1215	case XFS_IOC_FSBULKSTAT_SINGLE:
1216	case XFS_IOC_FSBULKSTAT:
1217	case XFS_IOC_FSINUMBERS:
1218		return xfs_ioc_fsbulkstat(filp, cmd, arg);
1219
1220	case XFS_IOC_BULKSTAT:
1221		return xfs_ioc_bulkstat(filp, cmd, arg);
1222	case XFS_IOC_INUMBERS:
1223		return xfs_ioc_inumbers(mp, cmd, arg);
1224
1225	case XFS_IOC_FSGEOMETRY_V1:
1226		return xfs_ioc_fsgeometry(mp, arg, 3);
1227	case XFS_IOC_FSGEOMETRY_V4:
1228		return xfs_ioc_fsgeometry(mp, arg, 4);
1229	case XFS_IOC_FSGEOMETRY:
1230		return xfs_ioc_fsgeometry(mp, arg, 5);
1231
1232	case XFS_IOC_AG_GEOMETRY:
1233		return xfs_ioc_ag_geometry(mp, arg);
1234	case XFS_IOC_RTGROUP_GEOMETRY:
1235		return xfs_ioc_rtgroup_geometry(mp, arg);
1236
1237	case XFS_IOC_GETVERSION:
1238		return put_user(inode->i_generation, (int __user *)arg);
1239
 
 
1240	case XFS_IOC_FSGETXATTRA:
1241		return xfs_ioc_fsgetxattra(ip, arg);
1242	case XFS_IOC_GETPARENTS:
1243		return xfs_ioc_getparents(filp, arg);
1244	case XFS_IOC_GETPARENTS_BY_HANDLE:
1245		return xfs_ioc_getparents_by_handle(filp, arg);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1246	case XFS_IOC_GETBMAP:
1247	case XFS_IOC_GETBMAPA:
 
 
1248	case XFS_IOC_GETBMAPX:
1249		return xfs_ioc_getbmap(filp, cmd, arg);
1250
1251	case FS_IOC_GETFSMAP:
1252		return xfs_ioc_getfsmap(ip, arg);
1253
1254	case XFS_IOC_SCRUBV_METADATA:
1255		return xfs_ioc_scrubv_metadata(filp, arg);
1256	case XFS_IOC_SCRUB_METADATA:
1257		return xfs_ioc_scrub_metadata(filp, arg);
1258
1259	case XFS_IOC_FD_TO_HANDLE:
1260	case XFS_IOC_PATH_TO_HANDLE:
1261	case XFS_IOC_PATH_TO_FSHANDLE: {
1262		xfs_fsop_handlereq_t	hreq;
1263
1264		if (copy_from_user(&hreq, arg, sizeof(hreq)))
1265			return -EFAULT;
1266		return xfs_find_handle(cmd, &hreq);
1267	}
1268	case XFS_IOC_OPEN_BY_HANDLE: {
1269		xfs_fsop_handlereq_t	hreq;
1270
1271		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1272			return -EFAULT;
1273		return xfs_open_by_handle(filp, &hreq);
1274	}
 
 
1275
1276	case XFS_IOC_READLINK_BY_HANDLE: {
1277		xfs_fsop_handlereq_t	hreq;
1278
1279		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1280			return -EFAULT;
1281		return xfs_readlink_by_handle(filp, &hreq);
1282	}
1283	case XFS_IOC_ATTRLIST_BY_HANDLE:
1284		return xfs_attrlist_by_handle(filp, arg);
1285
1286	case XFS_IOC_ATTRMULTI_BY_HANDLE:
1287		return xfs_attrmulti_by_handle(filp, arg);
1288
1289	case XFS_IOC_SWAPEXT: {
1290		struct xfs_swapext	sxp;
1291
1292		if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))
1293			return -EFAULT;
1294		error = mnt_want_write_file(filp);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1295		if (error)
1296			return error;
1297		error = xfs_ioc_swapext(&sxp);
1298		mnt_drop_write_file(filp);
1299		return error;
 
1300	}
1301
1302	case XFS_IOC_FSCOUNTS:
1303		return xfs_ioctl_fs_counts(mp, arg);
 
 
 
 
 
 
 
1304
1305	case XFS_IOC_SET_RESBLKS:
1306	case XFS_IOC_GET_RESBLKS:
1307		return xfs_ioctl_getset_resblocks(filp, cmd, arg);
 
 
1308
1309	case XFS_IOC_FSGROWFSDATA: {
1310		struct xfs_growfs_data in;
1311
1312		if (copy_from_user(&in, arg, sizeof(in)))
1313			return -EFAULT;
1314
1315		error = mnt_want_write_file(filp);
1316		if (error)
1317			return error;
1318		error = xfs_growfs_data(mp, &in);
1319		mnt_drop_write_file(filp);
1320		return error;
1321	}
1322
1323	case XFS_IOC_FSGROWFSLOG: {
1324		struct xfs_growfs_log in;
1325
1326		if (copy_from_user(&in, arg, sizeof(in)))
1327			return -EFAULT;
1328
1329		error = mnt_want_write_file(filp);
1330		if (error)
1331			return error;
1332		error = xfs_growfs_log(mp, &in);
1333		mnt_drop_write_file(filp);
1334		return error;
1335	}
1336
1337	case XFS_IOC_FSGROWFSRT: {
1338		xfs_growfs_rt_t in;
1339
1340		if (copy_from_user(&in, arg, sizeof(in)))
1341			return -EFAULT;
1342
1343		error = mnt_want_write_file(filp);
1344		if (error)
1345			return error;
1346		error = xfs_growfs_rt(mp, &in);
1347		mnt_drop_write_file(filp);
1348		return error;
1349	}
1350
1351	case XFS_IOC_GOINGDOWN: {
1352		uint32_t in;
1353
1354		if (!capable(CAP_SYS_ADMIN))
1355			return -EPERM;
1356
1357		if (get_user(in, (uint32_t __user *)arg))
1358			return -EFAULT;
1359
1360		return xfs_fs_goingdown(mp, in);
 
1361	}
1362
1363	case XFS_IOC_ERROR_INJECTION: {
1364		xfs_error_injection_t in;
1365
1366		if (!capable(CAP_SYS_ADMIN))
1367			return -EPERM;
1368
1369		if (copy_from_user(&in, arg, sizeof(in)))
1370			return -EFAULT;
1371
1372		return xfs_errortag_add(mp, in.errtag);
 
1373	}
1374
1375	case XFS_IOC_ERROR_CLEARALL:
1376		if (!capable(CAP_SYS_ADMIN))
1377			return -EPERM;
1378
1379		return xfs_errortag_clearall(mp);
1380
1381	case XFS_IOC_FREE_EOFBLOCKS: {
1382		struct xfs_fs_eofblocks	eofb;
1383		struct xfs_icwalk	icw;
1384
1385		if (!capable(CAP_SYS_ADMIN))
1386			return -EPERM;
1387
1388		if (xfs_is_readonly(mp))
1389			return -EROFS;
1390
1391		if (copy_from_user(&eofb, arg, sizeof(eofb)))
1392			return -EFAULT;
1393
1394		error = xfs_fs_eofblocks_from_user(&eofb, &icw);
1395		if (error)
1396			return error;
1397
1398		trace_xfs_ioc_free_eofblocks(mp, &icw, _RET_IP_);
1399
1400		sb_start_write(mp->m_super);
1401		error = xfs_blockgc_free_space(mp, &icw);
1402		sb_end_write(mp->m_super);
1403		return error;
1404	}
1405
1406	case XFS_IOC_EXCHANGE_RANGE:
1407		return xfs_ioc_exchange_range(filp, arg);
1408	case XFS_IOC_START_COMMIT:
1409		return xfs_ioc_start_commit(filp, arg);
1410	case XFS_IOC_COMMIT_RANGE:
1411		return xfs_ioc_commit_range(filp, arg);
1412
1413	default:
1414		return -ENOTTY;
1415	}
1416}