Linux Audio

Check our new training course

Loading...
v3.15
   1/*
   2 *  Copyright (c) 2001 The Regents of the University of Michigan.
   3 *  All rights reserved.
   4 *
   5 *  Kendrick Smith <kmsmith@umich.edu>
   6 *  Andy Adamson <andros@umich.edu>
   7 *
   8 *  Redistribution and use in source and binary forms, with or without
   9 *  modification, are permitted provided that the following conditions
  10 *  are met:
  11 *
  12 *  1. Redistributions of source code must retain the above copyright
  13 *     notice, this list of conditions and the following disclaimer.
  14 *  2. Redistributions in binary form must reproduce the above copyright
  15 *     notice, this list of conditions and the following disclaimer in the
  16 *     documentation and/or other materials provided with the distribution.
  17 *  3. Neither the name of the University nor the names of its
  18 *     contributors may be used to endorse or promote products derived
  19 *     from this software without specific prior written permission.
  20 *
  21 *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
  22 *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  23 *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  24 *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  25 *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  26 *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  27 *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  28 *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  29 *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  30 *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  31 *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  32 */
  33
  34#include <linux/sunrpc/clnt.h>
  35#include <linux/sunrpc/xprt.h>
  36#include <linux/sunrpc/svc_xprt.h>
  37#include <linux/slab.h>
  38#include "nfsd.h"
  39#include "state.h"
  40#include "netns.h"
  41#include "xdr4cb.h"
  42
  43#define NFSDDBG_FACILITY                NFSDDBG_PROC
  44
  45static void nfsd4_mark_cb_fault(struct nfs4_client *, int reason);
  46
  47#define NFSPROC4_CB_NULL 0
  48#define NFSPROC4_CB_COMPOUND 1
  49
  50/* Index of predefined Linux callback client operations */
  51
  52enum {
  53	NFSPROC4_CLNT_CB_NULL = 0,
  54	NFSPROC4_CLNT_CB_RECALL,
  55	NFSPROC4_CLNT_CB_SEQUENCE,
  56};
  57
  58struct nfs4_cb_compound_hdr {
  59	/* args */
  60	u32		ident;	/* minorversion 0 only */
  61	u32		nops;
  62	__be32		*nops_p;
  63	u32		minorversion;
  64	/* res */
  65	int		status;
  66};
  67
  68/*
  69 * Handle decode buffer overflows out-of-line.
  70 */
  71static void print_overflow_msg(const char *func, const struct xdr_stream *xdr)
  72{
  73	dprintk("NFS: %s prematurely hit the end of our receive buffer. "
  74		"Remaining buffer length is %tu words.\n",
  75		func, xdr->end - xdr->p);
  76}
  77
  78static __be32 *xdr_encode_empty_array(__be32 *p)
  79{
  80	*p++ = xdr_zero;
  81	return p;
  82}
  83
  84/*
  85 * Encode/decode NFSv4 CB basic data types
  86 *
  87 * Basic NFSv4 callback data types are defined in section 15 of RFC
  88 * 3530: "Network File System (NFS) version 4 Protocol" and section
  89 * 20 of RFC 5661: "Network File System (NFS) Version 4 Minor Version
  90 * 1 Protocol"
  91 */
  92
  93/*
  94 *	nfs_cb_opnum4
  95 *
  96 *	enum nfs_cb_opnum4 {
  97 *		OP_CB_GETATTR		= 3,
  98 *		  ...
  99 *	};
 100 */
 101enum nfs_cb_opnum4 {
 102	OP_CB_GETATTR			= 3,
 103	OP_CB_RECALL			= 4,
 104	OP_CB_LAYOUTRECALL		= 5,
 105	OP_CB_NOTIFY			= 6,
 106	OP_CB_PUSH_DELEG		= 7,
 107	OP_CB_RECALL_ANY		= 8,
 108	OP_CB_RECALLABLE_OBJ_AVAIL	= 9,
 109	OP_CB_RECALL_SLOT		= 10,
 110	OP_CB_SEQUENCE			= 11,
 111	OP_CB_WANTS_CANCELLED		= 12,
 112	OP_CB_NOTIFY_LOCK		= 13,
 113	OP_CB_NOTIFY_DEVICEID		= 14,
 114	OP_CB_ILLEGAL			= 10044
 115};
 116
 117static void encode_nfs_cb_opnum4(struct xdr_stream *xdr, enum nfs_cb_opnum4 op)
 118{
 119	__be32 *p;
 120
 121	p = xdr_reserve_space(xdr, 4);
 122	*p = cpu_to_be32(op);
 123}
 124
 125/*
 126 * nfs_fh4
 127 *
 128 *	typedef opaque nfs_fh4<NFS4_FHSIZE>;
 129 */
 130static void encode_nfs_fh4(struct xdr_stream *xdr, const struct knfsd_fh *fh)
 131{
 132	u32 length = fh->fh_size;
 133	__be32 *p;
 134
 135	BUG_ON(length > NFS4_FHSIZE);
 136	p = xdr_reserve_space(xdr, 4 + length);
 137	xdr_encode_opaque(p, &fh->fh_base, length);
 138}
 139
 140/*
 141 * stateid4
 142 *
 143 *	struct stateid4 {
 144 *		uint32_t	seqid;
 145 *		opaque		other[12];
 146 *	};
 147 */
 148static void encode_stateid4(struct xdr_stream *xdr, const stateid_t *sid)
 149{
 150	__be32 *p;
 151
 152	p = xdr_reserve_space(xdr, NFS4_STATEID_SIZE);
 153	*p++ = cpu_to_be32(sid->si_generation);
 154	xdr_encode_opaque_fixed(p, &sid->si_opaque, NFS4_STATEID_OTHER_SIZE);
 155}
 156
 157/*
 158 * sessionid4
 159 *
 160 *	typedef opaque sessionid4[NFS4_SESSIONID_SIZE];
 161 */
 162static void encode_sessionid4(struct xdr_stream *xdr,
 163			      const struct nfsd4_session *session)
 164{
 165	__be32 *p;
 166
 167	p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN);
 168	xdr_encode_opaque_fixed(p, session->se_sessionid.data,
 169					NFS4_MAX_SESSIONID_LEN);
 170}
 171
 172/*
 173 * nfsstat4
 174 */
 175static const struct {
 176	int stat;
 177	int errno;
 178} nfs_cb_errtbl[] = {
 179	{ NFS4_OK,		0		},
 180	{ NFS4ERR_PERM,		-EPERM		},
 181	{ NFS4ERR_NOENT,	-ENOENT		},
 182	{ NFS4ERR_IO,		-EIO		},
 183	{ NFS4ERR_NXIO,		-ENXIO		},
 184	{ NFS4ERR_ACCESS,	-EACCES		},
 185	{ NFS4ERR_EXIST,	-EEXIST		},
 186	{ NFS4ERR_XDEV,		-EXDEV		},
 187	{ NFS4ERR_NOTDIR,	-ENOTDIR	},
 188	{ NFS4ERR_ISDIR,	-EISDIR		},
 189	{ NFS4ERR_INVAL,	-EINVAL		},
 190	{ NFS4ERR_FBIG,		-EFBIG		},
 191	{ NFS4ERR_NOSPC,	-ENOSPC		},
 192	{ NFS4ERR_ROFS,		-EROFS		},
 193	{ NFS4ERR_MLINK,	-EMLINK		},
 194	{ NFS4ERR_NAMETOOLONG,	-ENAMETOOLONG	},
 195	{ NFS4ERR_NOTEMPTY,	-ENOTEMPTY	},
 196	{ NFS4ERR_DQUOT,	-EDQUOT		},
 197	{ NFS4ERR_STALE,	-ESTALE		},
 198	{ NFS4ERR_BADHANDLE,	-EBADHANDLE	},
 199	{ NFS4ERR_BAD_COOKIE,	-EBADCOOKIE	},
 200	{ NFS4ERR_NOTSUPP,	-ENOTSUPP	},
 201	{ NFS4ERR_TOOSMALL,	-ETOOSMALL	},
 202	{ NFS4ERR_SERVERFAULT,	-ESERVERFAULT	},
 203	{ NFS4ERR_BADTYPE,	-EBADTYPE	},
 204	{ NFS4ERR_LOCKED,	-EAGAIN		},
 205	{ NFS4ERR_RESOURCE,	-EREMOTEIO	},
 206	{ NFS4ERR_SYMLINK,	-ELOOP		},
 207	{ NFS4ERR_OP_ILLEGAL,	-EOPNOTSUPP	},
 208	{ NFS4ERR_DEADLOCK,	-EDEADLK	},
 209	{ -1,			-EIO		}
 210};
 211
 212/*
 213 * If we cannot translate the error, the recovery routines should
 214 * handle it.
 215 *
 216 * Note: remaining NFSv4 error codes have values > 10000, so should
 217 * not conflict with native Linux error codes.
 218 */
 219static int nfs_cb_stat_to_errno(int status)
 220{
 221	int i;
 222
 223	for (i = 0; nfs_cb_errtbl[i].stat != -1; i++) {
 224		if (nfs_cb_errtbl[i].stat == status)
 225			return nfs_cb_errtbl[i].errno;
 226	}
 227
 228	dprintk("NFSD: Unrecognized NFS CB status value: %u\n", status);
 229	return -status;
 230}
 231
 232static int decode_cb_op_status(struct xdr_stream *xdr, enum nfs_opnum4 expected,
 233			       enum nfsstat4 *status)
 234{
 235	__be32 *p;
 236	u32 op;
 237
 238	p = xdr_inline_decode(xdr, 4 + 4);
 239	if (unlikely(p == NULL))
 240		goto out_overflow;
 241	op = be32_to_cpup(p++);
 242	if (unlikely(op != expected))
 243		goto out_unexpected;
 244	*status = be32_to_cpup(p);
 245	return 0;
 246out_overflow:
 247	print_overflow_msg(__func__, xdr);
 248	return -EIO;
 249out_unexpected:
 250	dprintk("NFSD: Callback server returned operation %d but "
 251		"we issued a request for %d\n", op, expected);
 252	return -EIO;
 253}
 254
 255/*
 256 * CB_COMPOUND4args
 257 *
 258 *	struct CB_COMPOUND4args {
 259 *		utf8str_cs	tag;
 260 *		uint32_t	minorversion;
 261 *		uint32_t	callback_ident;
 262 *		nfs_cb_argop4	argarray<>;
 263 *	};
 264*/
 265static void encode_cb_compound4args(struct xdr_stream *xdr,
 266				    struct nfs4_cb_compound_hdr *hdr)
 267{
 268	__be32 * p;
 269
 270	p = xdr_reserve_space(xdr, 4 + 4 + 4 + 4);
 271	p = xdr_encode_empty_array(p);		/* empty tag */
 272	*p++ = cpu_to_be32(hdr->minorversion);
 273	*p++ = cpu_to_be32(hdr->ident);
 274
 275	hdr->nops_p = p;
 276	*p = cpu_to_be32(hdr->nops);		/* argarray element count */
 277}
 278
 279/*
 280 * Update argarray element count
 281 */
 282static void encode_cb_nops(struct nfs4_cb_compound_hdr *hdr)
 283{
 284	BUG_ON(hdr->nops > NFS4_MAX_BACK_CHANNEL_OPS);
 285	*hdr->nops_p = cpu_to_be32(hdr->nops);
 286}
 287
 288/*
 289 * CB_COMPOUND4res
 290 *
 291 *	struct CB_COMPOUND4res {
 292 *		nfsstat4	status;
 293 *		utf8str_cs	tag;
 294 *		nfs_cb_resop4	resarray<>;
 295 *	};
 296 */
 297static int decode_cb_compound4res(struct xdr_stream *xdr,
 298				  struct nfs4_cb_compound_hdr *hdr)
 299{
 300	u32 length;
 301	__be32 *p;
 302
 303	p = xdr_inline_decode(xdr, 4 + 4);
 304	if (unlikely(p == NULL))
 305		goto out_overflow;
 306	hdr->status = be32_to_cpup(p++);
 307	/* Ignore the tag */
 308	length = be32_to_cpup(p++);
 309	p = xdr_inline_decode(xdr, length + 4);
 310	if (unlikely(p == NULL))
 311		goto out_overflow;
 312	hdr->nops = be32_to_cpup(p);
 313	return 0;
 314out_overflow:
 315	print_overflow_msg(__func__, xdr);
 316	return -EIO;
 317}
 318
 319/*
 320 * CB_RECALL4args
 321 *
 322 *	struct CB_RECALL4args {
 323 *		stateid4	stateid;
 324 *		bool		truncate;
 325 *		nfs_fh4		fh;
 326 *	};
 327 */
 328static void encode_cb_recall4args(struct xdr_stream *xdr,
 329				  const struct nfs4_delegation *dp,
 330				  struct nfs4_cb_compound_hdr *hdr)
 331{
 332	__be32 *p;
 333
 334	encode_nfs_cb_opnum4(xdr, OP_CB_RECALL);
 335	encode_stateid4(xdr, &dp->dl_stid.sc_stateid);
 336
 337	p = xdr_reserve_space(xdr, 4);
 338	*p++ = xdr_zero;			/* truncate */
 339
 340	encode_nfs_fh4(xdr, &dp->dl_fh);
 341
 342	hdr->nops++;
 343}
 344
 345/*
 346 * CB_SEQUENCE4args
 347 *
 348 *	struct CB_SEQUENCE4args {
 349 *		sessionid4		csa_sessionid;
 350 *		sequenceid4		csa_sequenceid;
 351 *		slotid4			csa_slotid;
 352 *		slotid4			csa_highest_slotid;
 353 *		bool			csa_cachethis;
 354 *		referring_call_list4	csa_referring_call_lists<>;
 355 *	};
 356 */
 357static void encode_cb_sequence4args(struct xdr_stream *xdr,
 358				    const struct nfsd4_callback *cb,
 359				    struct nfs4_cb_compound_hdr *hdr)
 360{
 361	struct nfsd4_session *session = cb->cb_clp->cl_cb_session;
 362	__be32 *p;
 363
 364	if (hdr->minorversion == 0)
 365		return;
 366
 367	encode_nfs_cb_opnum4(xdr, OP_CB_SEQUENCE);
 368	encode_sessionid4(xdr, session);
 369
 370	p = xdr_reserve_space(xdr, 4 + 4 + 4 + 4 + 4);
 371	*p++ = cpu_to_be32(session->se_cb_seq_nr);	/* csa_sequenceid */
 372	*p++ = xdr_zero;			/* csa_slotid */
 373	*p++ = xdr_zero;			/* csa_highest_slotid */
 374	*p++ = xdr_zero;			/* csa_cachethis */
 375	xdr_encode_empty_array(p);		/* csa_referring_call_lists */
 376
 377	hdr->nops++;
 378}
 379
 380/*
 381 * CB_SEQUENCE4resok
 382 *
 383 *	struct CB_SEQUENCE4resok {
 384 *		sessionid4	csr_sessionid;
 385 *		sequenceid4	csr_sequenceid;
 386 *		slotid4		csr_slotid;
 387 *		slotid4		csr_highest_slotid;
 388 *		slotid4		csr_target_highest_slotid;
 389 *	};
 390 *
 391 *	union CB_SEQUENCE4res switch (nfsstat4 csr_status) {
 392 *	case NFS4_OK:
 393 *		CB_SEQUENCE4resok	csr_resok4;
 394 *	default:
 395 *		void;
 396 *	};
 397 *
 398 * Our current back channel implmentation supports a single backchannel
 399 * with a single slot.
 400 */
 401static int decode_cb_sequence4resok(struct xdr_stream *xdr,
 402				    struct nfsd4_callback *cb)
 403{
 404	struct nfsd4_session *session = cb->cb_clp->cl_cb_session;
 405	struct nfs4_sessionid id;
 406	int status;
 407	__be32 *p;
 408	u32 dummy;
 409
 410	status = -ESERVERFAULT;
 411
 412	/*
 413	 * If the server returns different values for sessionID, slotID or
 414	 * sequence number, the server is looney tunes.
 415	 */
 416	p = xdr_inline_decode(xdr, NFS4_MAX_SESSIONID_LEN + 4 + 4 + 4 + 4);
 417	if (unlikely(p == NULL))
 418		goto out_overflow;
 419	memcpy(id.data, p, NFS4_MAX_SESSIONID_LEN);
 420	if (memcmp(id.data, session->se_sessionid.data,
 421					NFS4_MAX_SESSIONID_LEN) != 0) {
 422		dprintk("NFS: %s Invalid session id\n", __func__);
 423		goto out;
 424	}
 425	p += XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN);
 426
 427	dummy = be32_to_cpup(p++);
 428	if (dummy != session->se_cb_seq_nr) {
 429		dprintk("NFS: %s Invalid sequence number\n", __func__);
 430		goto out;
 431	}
 432
 433	dummy = be32_to_cpup(p++);
 434	if (dummy != 0) {
 435		dprintk("NFS: %s Invalid slotid\n", __func__);
 436		goto out;
 437	}
 438
 439	/*
 440	 * FIXME: process highest slotid and target highest slotid
 441	 */
 442	status = 0;
 443out:
 444	if (status)
 445		nfsd4_mark_cb_fault(cb->cb_clp, status);
 446	return status;
 447out_overflow:
 448	print_overflow_msg(__func__, xdr);
 449	return -EIO;
 
 450}
 451
 452static int decode_cb_sequence4res(struct xdr_stream *xdr,
 453				  struct nfsd4_callback *cb)
 454{
 455	enum nfsstat4 nfserr;
 456	int status;
 457
 458	if (cb->cb_minorversion == 0)
 459		return 0;
 460
 461	status = decode_cb_op_status(xdr, OP_CB_SEQUENCE, &nfserr);
 462	if (unlikely(status))
 463		goto out;
 464	if (unlikely(nfserr != NFS4_OK))
 465		goto out_default;
 466	status = decode_cb_sequence4resok(xdr, cb);
 467out:
 468	return status;
 469out_default:
 470	return nfs_cb_stat_to_errno(nfserr);
 471}
 472
 473/*
 474 * NFSv4.0 and NFSv4.1 XDR encode functions
 475 *
 476 * NFSv4.0 callback argument types are defined in section 15 of RFC
 477 * 3530: "Network File System (NFS) version 4 Protocol" and section 20
 478 * of RFC 5661:  "Network File System (NFS) Version 4 Minor Version 1
 479 * Protocol".
 480 */
 481
 482/*
 483 * NB: Without this zero space reservation, callbacks over krb5p fail
 484 */
 485static void nfs4_xdr_enc_cb_null(struct rpc_rqst *req, struct xdr_stream *xdr,
 486				 void *__unused)
 487{
 488	xdr_reserve_space(xdr, 0);
 489}
 490
 491/*
 492 * 20.2. Operation 4: CB_RECALL - Recall a Delegation
 493 */
 494static void nfs4_xdr_enc_cb_recall(struct rpc_rqst *req, struct xdr_stream *xdr,
 495				   const struct nfsd4_callback *cb)
 496{
 497	const struct nfs4_delegation *args = cb->cb_op;
 498	struct nfs4_cb_compound_hdr hdr = {
 499		.ident = cb->cb_clp->cl_cb_ident,
 500		.minorversion = cb->cb_minorversion,
 501	};
 502
 503	encode_cb_compound4args(xdr, &hdr);
 504	encode_cb_sequence4args(xdr, cb, &hdr);
 505	encode_cb_recall4args(xdr, args, &hdr);
 506	encode_cb_nops(&hdr);
 507}
 508
 509
 510/*
 511 * NFSv4.0 and NFSv4.1 XDR decode functions
 512 *
 513 * NFSv4.0 callback result types are defined in section 15 of RFC
 514 * 3530: "Network File System (NFS) version 4 Protocol" and section 20
 515 * of RFC 5661:  "Network File System (NFS) Version 4 Minor Version 1
 516 * Protocol".
 517 */
 518
 519static int nfs4_xdr_dec_cb_null(struct rpc_rqst *req, struct xdr_stream *xdr,
 520				void *__unused)
 521{
 522	return 0;
 523}
 524
 525/*
 526 * 20.2. Operation 4: CB_RECALL - Recall a Delegation
 527 */
 528static int nfs4_xdr_dec_cb_recall(struct rpc_rqst *rqstp,
 529				  struct xdr_stream *xdr,
 530				  struct nfsd4_callback *cb)
 531{
 532	struct nfs4_cb_compound_hdr hdr;
 533	enum nfsstat4 nfserr;
 534	int status;
 535
 536	status = decode_cb_compound4res(xdr, &hdr);
 537	if (unlikely(status))
 538		goto out;
 539
 540	if (cb != NULL) {
 541		status = decode_cb_sequence4res(xdr, cb);
 542		if (unlikely(status))
 543			goto out;
 544	}
 545
 546	status = decode_cb_op_status(xdr, OP_CB_RECALL, &nfserr);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 547	if (unlikely(status))
 548		goto out;
 549	if (unlikely(nfserr != NFS4_OK))
 550		status = nfs_cb_stat_to_errno(nfserr);
 551out:
 552	return status;
 
 
 
 553}
 
 554
 555/*
 556 * RPC procedure tables
 557 */
 558#define PROC(proc, call, argtype, restype)				\
 559[NFSPROC4_CLNT_##proc] = {						\
 560	.p_proc    = NFSPROC4_CB_##call,				\
 561	.p_encode  = (kxdreproc_t)nfs4_xdr_enc_##argtype,		\
 562	.p_decode  = (kxdrdproc_t)nfs4_xdr_dec_##restype,		\
 563	.p_arglen  = NFS4_enc_##argtype##_sz,				\
 564	.p_replen  = NFS4_dec_##restype##_sz,				\
 565	.p_statidx = NFSPROC4_CB_##call,				\
 566	.p_name    = #proc,						\
 567}
 568
 569static struct rpc_procinfo nfs4_cb_procedures[] = {
 570	PROC(CB_NULL,	NULL,		cb_null,	cb_null),
 571	PROC(CB_RECALL,	COMPOUND,	cb_recall,	cb_recall),
 
 
 
 572};
 573
 574static struct rpc_version nfs_cb_version4 = {
 575/*
 576 * Note on the callback rpc program version number: despite language in rfc
 577 * 5661 section 18.36.3 requiring servers to use 4 in this field, the
 578 * official xdr descriptions for both 4.0 and 4.1 specify version 1, and
 579 * in practice that appears to be what implementations use.  The section
 580 * 18.36.3 language is expected to be fixed in an erratum.
 581 */
 582	.number			= 1,
 583	.nrprocs		= ARRAY_SIZE(nfs4_cb_procedures),
 584	.procs			= nfs4_cb_procedures
 585};
 586
 587static const struct rpc_version *nfs_cb_version[] = {
 588	&nfs_cb_version4,
 589};
 590
 591static const struct rpc_program cb_program;
 592
 593static struct rpc_stat cb_stats = {
 594	.program		= &cb_program
 595};
 596
 597#define NFS4_CALLBACK 0x40000000
 598static const struct rpc_program cb_program = {
 599	.name			= "nfs4_cb",
 600	.number			= NFS4_CALLBACK,
 601	.nrvers			= ARRAY_SIZE(nfs_cb_version),
 602	.version		= nfs_cb_version,
 603	.stats			= &cb_stats,
 604	.pipe_dir_name		= "nfsd4_cb",
 605};
 606
 607static int max_cb_time(struct net *net)
 608{
 609	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
 610	return max(nn->nfsd4_lease/10, (time_t)1) * HZ;
 611}
 612
 613static struct rpc_cred *callback_cred;
 614
 615int set_callback_cred(void)
 616{
 617	if (callback_cred)
 618		return 0;
 619	callback_cred = rpc_lookup_machine_cred("nfs");
 620	if (!callback_cred)
 621		return -ENOMEM;
 622	return 0;
 623}
 624
 625static struct rpc_cred *get_backchannel_cred(struct nfs4_client *clp, struct rpc_clnt *client, struct nfsd4_session *ses)
 626{
 627	if (clp->cl_minorversion == 0) {
 628		return get_rpccred(callback_cred);
 629	} else {
 630		struct rpc_auth *auth = client->cl_auth;
 631		struct auth_cred acred = {};
 632
 633		acred.uid = ses->se_cb_sec.uid;
 634		acred.gid = ses->se_cb_sec.gid;
 635		return auth->au_ops->lookup_cred(client->cl_auth, &acred, 0);
 636	}
 637}
 638
 639static struct rpc_clnt *create_backchannel_client(struct rpc_create_args *args)
 640{
 641	struct rpc_xprt *xprt;
 642
 643	if (args->protocol != XPRT_TRANSPORT_BC_TCP)
 644		return rpc_create(args);
 645
 646	xprt = args->bc_xprt->xpt_bc_xprt;
 647	if (xprt) {
 648		xprt_get(xprt);
 649		return rpc_create_xprt(args, xprt);
 650	}
 651
 652	return rpc_create(args);
 653}
 654
 655static int setup_callback_client(struct nfs4_client *clp, struct nfs4_cb_conn *conn, struct nfsd4_session *ses)
 656{
 657	int maxtime = max_cb_time(clp->net);
 658	struct rpc_timeout	timeparms = {
 659		.to_initval	= maxtime,
 660		.to_retries	= 0,
 661		.to_maxval	= maxtime,
 662	};
 663	struct rpc_create_args args = {
 664		.net		= clp->net,
 665		.address	= (struct sockaddr *) &conn->cb_addr,
 666		.addrsize	= conn->cb_addrlen,
 667		.saddress	= (struct sockaddr *) &conn->cb_saddr,
 668		.timeout	= &timeparms,
 669		.program	= &cb_program,
 670		.version	= 0,
 671		.flags		= (RPC_CLNT_CREATE_NOPING | RPC_CLNT_CREATE_QUIET),
 672	};
 673	struct rpc_clnt *client;
 674	struct rpc_cred *cred;
 675
 676	if (clp->cl_minorversion == 0) {
 677		if (!clp->cl_cred.cr_principal &&
 678				(clp->cl_cred.cr_flavor >= RPC_AUTH_GSS_KRB5))
 679			return -EINVAL;
 680		args.client_name = clp->cl_cred.cr_principal;
 681		args.prognumber	= conn->cb_prog,
 682		args.protocol = XPRT_TRANSPORT_TCP;
 683		args.authflavor = clp->cl_cred.cr_flavor;
 684		clp->cl_cb_ident = conn->cb_ident;
 685	} else {
 686		if (!conn->cb_xprt)
 687			return -EINVAL;
 688		clp->cl_cb_conn.cb_xprt = conn->cb_xprt;
 689		clp->cl_cb_session = ses;
 690		args.bc_xprt = conn->cb_xprt;
 691		args.prognumber = clp->cl_cb_session->se_cb_prog;
 692		args.protocol = XPRT_TRANSPORT_BC_TCP;
 
 693		args.authflavor = ses->se_cb_sec.flavor;
 694	}
 695	/* Create RPC client */
 696	client = create_backchannel_client(&args);
 697	if (IS_ERR(client)) {
 698		dprintk("NFSD: couldn't create callback client: %ld\n",
 699			PTR_ERR(client));
 700		return PTR_ERR(client);
 701	}
 702	cred = get_backchannel_cred(clp, client, ses);
 703	if (IS_ERR(cred)) {
 704		rpc_shutdown_client(client);
 705		return PTR_ERR(cred);
 706	}
 707	clp->cl_cb_client = client;
 708	clp->cl_cb_cred = cred;
 709	return 0;
 710}
 711
 712static void warn_no_callback_path(struct nfs4_client *clp, int reason)
 713{
 714	dprintk("NFSD: warning: no callback path to client %.*s: error %d\n",
 715		(int)clp->cl_name.len, clp->cl_name.data, reason);
 716}
 717
 718static void nfsd4_mark_cb_down(struct nfs4_client *clp, int reason)
 719{
 
 
 720	clp->cl_cb_state = NFSD4_CB_DOWN;
 721	warn_no_callback_path(clp, reason);
 722}
 723
 724static void nfsd4_mark_cb_fault(struct nfs4_client *clp, int reason)
 725{
 
 
 726	clp->cl_cb_state = NFSD4_CB_FAULT;
 727	warn_no_callback_path(clp, reason);
 728}
 729
 730static void nfsd4_cb_probe_done(struct rpc_task *task, void *calldata)
 731{
 732	struct nfs4_client *clp = container_of(calldata, struct nfs4_client, cl_cb_null);
 733
 734	if (task->tk_status)
 735		nfsd4_mark_cb_down(clp, task->tk_status);
 736	else
 737		clp->cl_cb_state = NFSD4_CB_UP;
 738}
 739
 740static const struct rpc_call_ops nfsd4_cb_probe_ops = {
 741	/* XXX: release method to ensure we set the cb channel down if
 742	 * necessary on early failure? */
 743	.rpc_call_done = nfsd4_cb_probe_done,
 744};
 745
 746static struct workqueue_struct *callback_wq;
 747
 748static void run_nfsd4_cb(struct nfsd4_callback *cb)
 749{
 750	queue_work(callback_wq, &cb->cb_work);
 751}
 752
 753static void do_probe_callback(struct nfs4_client *clp)
 754{
 755	struct nfsd4_callback *cb = &clp->cl_cb_null;
 756
 757	cb->cb_op = NULL;
 758	cb->cb_clp = clp;
 759
 760	cb->cb_msg.rpc_proc = &nfs4_cb_procedures[NFSPROC4_CLNT_CB_NULL];
 761	cb->cb_msg.rpc_argp = NULL;
 762	cb->cb_msg.rpc_resp = NULL;
 763
 764	cb->cb_ops = &nfsd4_cb_probe_ops;
 765
 766	run_nfsd4_cb(cb);
 767}
 768
 769/*
 770 * Poke the callback thread to process any updates to the callback
 771 * parameters, and send a null probe.
 772 */
 773void nfsd4_probe_callback(struct nfs4_client *clp)
 774{
 775	clp->cl_cb_state = NFSD4_CB_UNKNOWN;
 776	set_bit(NFSD4_CLIENT_CB_UPDATE, &clp->cl_flags);
 777	do_probe_callback(clp);
 778}
 779
 780void nfsd4_probe_callback_sync(struct nfs4_client *clp)
 781{
 782	nfsd4_probe_callback(clp);
 783	flush_workqueue(callback_wq);
 784}
 785
 786void nfsd4_change_callback(struct nfs4_client *clp, struct nfs4_cb_conn *conn)
 787{
 788	clp->cl_cb_state = NFSD4_CB_UNKNOWN;
 789	spin_lock(&clp->cl_lock);
 790	memcpy(&clp->cl_cb_conn, conn, sizeof(struct nfs4_cb_conn));
 791	spin_unlock(&clp->cl_lock);
 792}
 793
 794/*
 795 * There's currently a single callback channel slot.
 796 * If the slot is available, then mark it busy.  Otherwise, set the
 797 * thread for sleeping on the callback RPC wait queue.
 798 */
 799static bool nfsd41_cb_get_slot(struct nfs4_client *clp, struct rpc_task *task)
 800{
 801	if (test_and_set_bit(0, &clp->cl_cb_slot_busy) != 0) {
 802		rpc_sleep_on(&clp->cl_cb_waitq, task, NULL);
 803		dprintk("%s slot is busy\n", __func__);
 804		return false;
 
 
 
 
 805	}
 806	return true;
 807}
 808
 809/*
 810 * TODO: cb_sequence should support referring call lists, cachethis, multiple
 811 * slots, and mark callback channel down on communication errors.
 812 */
 813static void nfsd4_cb_prepare(struct rpc_task *task, void *calldata)
 814{
 815	struct nfsd4_callback *cb = calldata;
 816	struct nfs4_client *clp = cb->cb_clp;
 817	u32 minorversion = clp->cl_minorversion;
 818
 819	cb->cb_minorversion = minorversion;
 
 
 
 
 
 
 820	if (minorversion) {
 821		if (!nfsd41_cb_get_slot(clp, task))
 822			return;
 823	}
 824	spin_lock(&clp->cl_lock);
 825	if (list_empty(&cb->cb_per_client)) {
 826		/* This is the first call, not a restart */
 827		cb->cb_done = false;
 828		list_add(&cb->cb_per_client, &clp->cl_callbacks);
 829	}
 830	spin_unlock(&clp->cl_lock);
 831	rpc_call_start(task);
 832}
 833
 834static void nfsd4_cb_done(struct rpc_task *task, void *calldata)
 835{
 836	struct nfsd4_callback *cb = calldata;
 837	struct nfs4_client *clp = cb->cb_clp;
 
 
 838
 839	dprintk("%s: minorversion=%d\n", __func__,
 840		clp->cl_minorversion);
 
 
 
 
 
 
 
 
 
 
 841
 842	if (clp->cl_minorversion) {
 843		/* No need for lock, access serialized in nfsd4_cb_prepare */
 844		++clp->cl_cb_session->se_cb_seq_nr;
 845		clear_bit(0, &clp->cl_cb_slot_busy);
 846		rpc_wake_up_next(&clp->cl_cb_waitq);
 847		dprintk("%s: freed slot, new seqid=%d\n", __func__,
 848			clp->cl_cb_session->se_cb_seq_nr);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 849
 850		/* We're done looking into the sequence information */
 851		task->tk_msg.rpc_resp = NULL;
 
 
 
 
 
 
 
 
 
 
 
 852	}
 853}
 854
 
 
 
 
 855
 856static void nfsd4_cb_recall_done(struct rpc_task *task, void *calldata)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 857{
 858	struct nfsd4_callback *cb = calldata;
 859	struct nfs4_delegation *dp = container_of(cb, struct nfs4_delegation, dl_recall);
 860	struct nfs4_client *clp = cb->cb_clp;
 861	struct rpc_clnt *current_rpc_client = clp->cl_cb_client;
 862
 863	nfsd4_cb_done(task, calldata);
 
 864
 865	if (current_rpc_client != task->tk_client) {
 866		/* We're shutting down or changing cl_cb_client; leave
 867		 * it to nfsd4_process_cb_update to restart the call if
 868		 * necessary. */
 869		return;
 
 
 
 
 870	}
 871
 872	if (cb->cb_done)
 873		return;
 874	switch (task->tk_status) {
 875	case 0:
 876		cb->cb_done = true;
 
 877		return;
 878	case -EBADHANDLE:
 879	case -NFS4ERR_BAD_STATEID:
 880		/* Race: client probably got cb_recall
 881		 * before open reply granting delegation */
 882		break;
 883	default:
 884		/* Network partition? */
 885		nfsd4_mark_cb_down(clp, task->tk_status);
 
 
 
 886	}
 887	if (dp->dl_retries--) {
 888		rpc_delay(task, 2*HZ);
 889		task->tk_status = 0;
 890		rpc_restart_call_prepare(task);
 891		return;
 892	}
 893	nfsd4_mark_cb_down(clp, task->tk_status);
 894	cb->cb_done = true;
 895}
 896
 897static void nfsd4_cb_recall_release(void *calldata)
 898{
 899	struct nfsd4_callback *cb = calldata;
 900	struct nfs4_client *clp = cb->cb_clp;
 901	struct nfs4_delegation *dp = container_of(cb, struct nfs4_delegation, dl_recall);
 902
 903	if (cb->cb_done) {
 904		spin_lock(&clp->cl_lock);
 905		list_del(&cb->cb_per_client);
 906		spin_unlock(&clp->cl_lock);
 907		nfs4_put_delegation(dp);
 908	}
 909}
 910
 911static const struct rpc_call_ops nfsd4_cb_recall_ops = {
 912	.rpc_call_prepare = nfsd4_cb_prepare,
 913	.rpc_call_done = nfsd4_cb_recall_done,
 914	.rpc_release = nfsd4_cb_recall_release,
 915};
 916
 917int nfsd4_create_callback_queue(void)
 918{
 919	callback_wq = create_singlethread_workqueue("nfsd4_callbacks");
 920	if (!callback_wq)
 921		return -ENOMEM;
 922	return 0;
 923}
 924
 925void nfsd4_destroy_callback_queue(void)
 926{
 927	destroy_workqueue(callback_wq);
 928}
 929
 930/* must be called under the state lock */
 931void nfsd4_shutdown_callback(struct nfs4_client *clp)
 932{
 933	set_bit(NFSD4_CLIENT_CB_KILL, &clp->cl_flags);
 934	/*
 935	 * Note this won't actually result in a null callback;
 936	 * instead, nfsd4_do_callback_rpc() will detect the killed
 937	 * client, destroy the rpc client, and stop:
 938	 */
 939	do_probe_callback(clp);
 940	flush_workqueue(callback_wq);
 941}
 942
 943static void nfsd4_release_cb(struct nfsd4_callback *cb)
 944{
 945	if (cb->cb_ops->rpc_release)
 946		cb->cb_ops->rpc_release(cb);
 947}
 948
 949/* requires cl_lock: */
 950static struct nfsd4_conn * __nfsd4_find_backchannel(struct nfs4_client *clp)
 951{
 952	struct nfsd4_session *s;
 953	struct nfsd4_conn *c;
 954
 955	list_for_each_entry(s, &clp->cl_sessions, se_perclnt) {
 956		list_for_each_entry(c, &s->se_conns, cn_persession) {
 957			if (c->cn_flags & NFS4_CDFC4_BACK)
 958				return c;
 959		}
 960	}
 961	return NULL;
 962}
 963
 964static void nfsd4_process_cb_update(struct nfsd4_callback *cb)
 965{
 966	struct nfs4_cb_conn conn;
 967	struct nfs4_client *clp = cb->cb_clp;
 968	struct nfsd4_session *ses = NULL;
 969	struct nfsd4_conn *c;
 970	int err;
 971
 972	/*
 973	 * This is either an update, or the client dying; in either case,
 974	 * kill the old client:
 975	 */
 976	if (clp->cl_cb_client) {
 977		rpc_shutdown_client(clp->cl_cb_client);
 978		clp->cl_cb_client = NULL;
 979		put_rpccred(clp->cl_cb_cred);
 980		clp->cl_cb_cred = NULL;
 981	}
 982	if (clp->cl_cb_conn.cb_xprt) {
 983		svc_xprt_put(clp->cl_cb_conn.cb_xprt);
 984		clp->cl_cb_conn.cb_xprt = NULL;
 985	}
 986	if (test_bit(NFSD4_CLIENT_CB_KILL, &clp->cl_flags))
 987		return;
 988	spin_lock(&clp->cl_lock);
 989	/*
 990	 * Only serialized callback code is allowed to clear these
 991	 * flags; main nfsd code can only set them:
 992	 */
 993	BUG_ON(!(clp->cl_flags & NFSD4_CLIENT_CB_FLAG_MASK));
 994	clear_bit(NFSD4_CLIENT_CB_UPDATE, &clp->cl_flags);
 995	memcpy(&conn, &cb->cb_clp->cl_cb_conn, sizeof(struct nfs4_cb_conn));
 996	c = __nfsd4_find_backchannel(clp);
 997	if (c) {
 998		svc_xprt_get(c->cn_xprt);
 999		conn.cb_xprt = c->cn_xprt;
1000		ses = c->cn_session;
1001	}
1002	spin_unlock(&clp->cl_lock);
1003
1004	err = setup_callback_client(clp, &conn, ses);
1005	if (err) {
1006		nfsd4_mark_cb_down(clp, err);
1007		return;
1008	}
1009	/* Yay, the callback channel's back! Restart any callbacks: */
1010	list_for_each_entry(cb, &clp->cl_callbacks, cb_per_client)
1011		run_nfsd4_cb(cb);
1012}
1013
1014static void nfsd4_do_callback_rpc(struct work_struct *w)
 
1015{
1016	struct nfsd4_callback *cb = container_of(w, struct nfsd4_callback, cb_work);
 
1017	struct nfs4_client *clp = cb->cb_clp;
1018	struct rpc_clnt *clnt;
1019
 
 
 
 
 
 
 
1020	if (clp->cl_flags & NFSD4_CLIENT_CB_FLAG_MASK)
1021		nfsd4_process_cb_update(cb);
1022
1023	clnt = clp->cl_cb_client;
1024	if (!clnt) {
1025		/* Callback channel broken, or client killed; give up: */
1026		nfsd4_release_cb(cb);
 
1027		return;
1028	}
 
 
 
 
 
 
 
 
 
1029	cb->cb_msg.rpc_cred = clp->cl_cb_cred;
1030	rpc_call_async(clnt, &cb->cb_msg, RPC_TASK_SOFT | RPC_TASK_SOFTCONN,
1031			cb->cb_ops, cb);
1032}
1033
1034void nfsd4_init_callback(struct nfsd4_callback *cb)
1035{
1036	INIT_WORK(&cb->cb_work, nfsd4_do_callback_rpc);
1037}
1038
1039void nfsd4_cb_recall(struct nfs4_delegation *dp)
 
1040{
1041	struct nfsd4_callback *cb = &dp->dl_recall;
1042	struct nfs4_client *clp = dp->dl_stid.sc_client;
1043
1044	dp->dl_retries = 1;
1045	cb->cb_op = dp;
1046	cb->cb_clp = clp;
1047	cb->cb_msg.rpc_proc = &nfs4_cb_procedures[NFSPROC4_CLNT_CB_RECALL];
1048	cb->cb_msg.rpc_argp = cb;
1049	cb->cb_msg.rpc_resp = cb;
 
 
 
 
 
 
1050
1051	cb->cb_ops = &nfsd4_cb_recall_ops;
1052
1053	INIT_LIST_HEAD(&cb->cb_per_client);
1054	cb->cb_done = true;
1055
1056	run_nfsd4_cb(&dp->dl_recall);
1057}
v4.6
   1/*
   2 *  Copyright (c) 2001 The Regents of the University of Michigan.
   3 *  All rights reserved.
   4 *
   5 *  Kendrick Smith <kmsmith@umich.edu>
   6 *  Andy Adamson <andros@umich.edu>
   7 *
   8 *  Redistribution and use in source and binary forms, with or without
   9 *  modification, are permitted provided that the following conditions
  10 *  are met:
  11 *
  12 *  1. Redistributions of source code must retain the above copyright
  13 *     notice, this list of conditions and the following disclaimer.
  14 *  2. Redistributions in binary form must reproduce the above copyright
  15 *     notice, this list of conditions and the following disclaimer in the
  16 *     documentation and/or other materials provided with the distribution.
  17 *  3. Neither the name of the University nor the names of its
  18 *     contributors may be used to endorse or promote products derived
  19 *     from this software without specific prior written permission.
  20 *
  21 *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
  22 *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  23 *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  24 *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  25 *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  26 *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  27 *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  28 *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  29 *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  30 *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  31 *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  32 */
  33
  34#include <linux/sunrpc/clnt.h>
  35#include <linux/sunrpc/xprt.h>
  36#include <linux/sunrpc/svc_xprt.h>
  37#include <linux/slab.h>
  38#include "nfsd.h"
  39#include "state.h"
  40#include "netns.h"
  41#include "xdr4cb.h"
  42
  43#define NFSDDBG_FACILITY                NFSDDBG_PROC
  44
  45static void nfsd4_mark_cb_fault(struct nfs4_client *, int reason);
  46
  47#define NFSPROC4_CB_NULL 0
  48#define NFSPROC4_CB_COMPOUND 1
  49
  50/* Index of predefined Linux callback client operations */
  51
 
 
 
 
 
 
  52struct nfs4_cb_compound_hdr {
  53	/* args */
  54	u32		ident;	/* minorversion 0 only */
  55	u32		nops;
  56	__be32		*nops_p;
  57	u32		minorversion;
  58	/* res */
  59	int		status;
  60};
  61
  62/*
  63 * Handle decode buffer overflows out-of-line.
  64 */
  65static void print_overflow_msg(const char *func, const struct xdr_stream *xdr)
  66{
  67	dprintk("NFS: %s prematurely hit the end of our receive buffer. "
  68		"Remaining buffer length is %tu words.\n",
  69		func, xdr->end - xdr->p);
  70}
  71
  72static __be32 *xdr_encode_empty_array(__be32 *p)
  73{
  74	*p++ = xdr_zero;
  75	return p;
  76}
  77
  78/*
  79 * Encode/decode NFSv4 CB basic data types
  80 *
  81 * Basic NFSv4 callback data types are defined in section 15 of RFC
  82 * 3530: "Network File System (NFS) version 4 Protocol" and section
  83 * 20 of RFC 5661: "Network File System (NFS) Version 4 Minor Version
  84 * 1 Protocol"
  85 */
  86
  87/*
  88 *	nfs_cb_opnum4
  89 *
  90 *	enum nfs_cb_opnum4 {
  91 *		OP_CB_GETATTR		= 3,
  92 *		  ...
  93 *	};
  94 */
  95enum nfs_cb_opnum4 {
  96	OP_CB_GETATTR			= 3,
  97	OP_CB_RECALL			= 4,
  98	OP_CB_LAYOUTRECALL		= 5,
  99	OP_CB_NOTIFY			= 6,
 100	OP_CB_PUSH_DELEG		= 7,
 101	OP_CB_RECALL_ANY		= 8,
 102	OP_CB_RECALLABLE_OBJ_AVAIL	= 9,
 103	OP_CB_RECALL_SLOT		= 10,
 104	OP_CB_SEQUENCE			= 11,
 105	OP_CB_WANTS_CANCELLED		= 12,
 106	OP_CB_NOTIFY_LOCK		= 13,
 107	OP_CB_NOTIFY_DEVICEID		= 14,
 108	OP_CB_ILLEGAL			= 10044
 109};
 110
 111static void encode_nfs_cb_opnum4(struct xdr_stream *xdr, enum nfs_cb_opnum4 op)
 112{
 113	__be32 *p;
 114
 115	p = xdr_reserve_space(xdr, 4);
 116	*p = cpu_to_be32(op);
 117}
 118
 119/*
 120 * nfs_fh4
 121 *
 122 *	typedef opaque nfs_fh4<NFS4_FHSIZE>;
 123 */
 124static void encode_nfs_fh4(struct xdr_stream *xdr, const struct knfsd_fh *fh)
 125{
 126	u32 length = fh->fh_size;
 127	__be32 *p;
 128
 129	BUG_ON(length > NFS4_FHSIZE);
 130	p = xdr_reserve_space(xdr, 4 + length);
 131	xdr_encode_opaque(p, &fh->fh_base, length);
 132}
 133
 134/*
 135 * stateid4
 136 *
 137 *	struct stateid4 {
 138 *		uint32_t	seqid;
 139 *		opaque		other[12];
 140 *	};
 141 */
 142static void encode_stateid4(struct xdr_stream *xdr, const stateid_t *sid)
 143{
 144	__be32 *p;
 145
 146	p = xdr_reserve_space(xdr, NFS4_STATEID_SIZE);
 147	*p++ = cpu_to_be32(sid->si_generation);
 148	xdr_encode_opaque_fixed(p, &sid->si_opaque, NFS4_STATEID_OTHER_SIZE);
 149}
 150
 151/*
 152 * sessionid4
 153 *
 154 *	typedef opaque sessionid4[NFS4_SESSIONID_SIZE];
 155 */
 156static void encode_sessionid4(struct xdr_stream *xdr,
 157			      const struct nfsd4_session *session)
 158{
 159	__be32 *p;
 160
 161	p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN);
 162	xdr_encode_opaque_fixed(p, session->se_sessionid.data,
 163					NFS4_MAX_SESSIONID_LEN);
 164}
 165
 166/*
 167 * nfsstat4
 168 */
 169static const struct {
 170	int stat;
 171	int errno;
 172} nfs_cb_errtbl[] = {
 173	{ NFS4_OK,		0		},
 174	{ NFS4ERR_PERM,		-EPERM		},
 175	{ NFS4ERR_NOENT,	-ENOENT		},
 176	{ NFS4ERR_IO,		-EIO		},
 177	{ NFS4ERR_NXIO,		-ENXIO		},
 178	{ NFS4ERR_ACCESS,	-EACCES		},
 179	{ NFS4ERR_EXIST,	-EEXIST		},
 180	{ NFS4ERR_XDEV,		-EXDEV		},
 181	{ NFS4ERR_NOTDIR,	-ENOTDIR	},
 182	{ NFS4ERR_ISDIR,	-EISDIR		},
 183	{ NFS4ERR_INVAL,	-EINVAL		},
 184	{ NFS4ERR_FBIG,		-EFBIG		},
 185	{ NFS4ERR_NOSPC,	-ENOSPC		},
 186	{ NFS4ERR_ROFS,		-EROFS		},
 187	{ NFS4ERR_MLINK,	-EMLINK		},
 188	{ NFS4ERR_NAMETOOLONG,	-ENAMETOOLONG	},
 189	{ NFS4ERR_NOTEMPTY,	-ENOTEMPTY	},
 190	{ NFS4ERR_DQUOT,	-EDQUOT		},
 191	{ NFS4ERR_STALE,	-ESTALE		},
 192	{ NFS4ERR_BADHANDLE,	-EBADHANDLE	},
 193	{ NFS4ERR_BAD_COOKIE,	-EBADCOOKIE	},
 194	{ NFS4ERR_NOTSUPP,	-ENOTSUPP	},
 195	{ NFS4ERR_TOOSMALL,	-ETOOSMALL	},
 196	{ NFS4ERR_SERVERFAULT,	-ESERVERFAULT	},
 197	{ NFS4ERR_BADTYPE,	-EBADTYPE	},
 198	{ NFS4ERR_LOCKED,	-EAGAIN		},
 199	{ NFS4ERR_RESOURCE,	-EREMOTEIO	},
 200	{ NFS4ERR_SYMLINK,	-ELOOP		},
 201	{ NFS4ERR_OP_ILLEGAL,	-EOPNOTSUPP	},
 202	{ NFS4ERR_DEADLOCK,	-EDEADLK	},
 203	{ -1,			-EIO		}
 204};
 205
 206/*
 207 * If we cannot translate the error, the recovery routines should
 208 * handle it.
 209 *
 210 * Note: remaining NFSv4 error codes have values > 10000, so should
 211 * not conflict with native Linux error codes.
 212 */
 213static int nfs_cb_stat_to_errno(int status)
 214{
 215	int i;
 216
 217	for (i = 0; nfs_cb_errtbl[i].stat != -1; i++) {
 218		if (nfs_cb_errtbl[i].stat == status)
 219			return nfs_cb_errtbl[i].errno;
 220	}
 221
 222	dprintk("NFSD: Unrecognized NFS CB status value: %u\n", status);
 223	return -status;
 224}
 225
 226static int decode_cb_op_status(struct xdr_stream *xdr, enum nfs_opnum4 expected,
 227			       int *status)
 228{
 229	__be32 *p;
 230	u32 op;
 231
 232	p = xdr_inline_decode(xdr, 4 + 4);
 233	if (unlikely(p == NULL))
 234		goto out_overflow;
 235	op = be32_to_cpup(p++);
 236	if (unlikely(op != expected))
 237		goto out_unexpected;
 238	*status = nfs_cb_stat_to_errno(be32_to_cpup(p));
 239	return 0;
 240out_overflow:
 241	print_overflow_msg(__func__, xdr);
 242	return -EIO;
 243out_unexpected:
 244	dprintk("NFSD: Callback server returned operation %d but "
 245		"we issued a request for %d\n", op, expected);
 246	return -EIO;
 247}
 248
 249/*
 250 * CB_COMPOUND4args
 251 *
 252 *	struct CB_COMPOUND4args {
 253 *		utf8str_cs	tag;
 254 *		uint32_t	minorversion;
 255 *		uint32_t	callback_ident;
 256 *		nfs_cb_argop4	argarray<>;
 257 *	};
 258*/
 259static void encode_cb_compound4args(struct xdr_stream *xdr,
 260				    struct nfs4_cb_compound_hdr *hdr)
 261{
 262	__be32 * p;
 263
 264	p = xdr_reserve_space(xdr, 4 + 4 + 4 + 4);
 265	p = xdr_encode_empty_array(p);		/* empty tag */
 266	*p++ = cpu_to_be32(hdr->minorversion);
 267	*p++ = cpu_to_be32(hdr->ident);
 268
 269	hdr->nops_p = p;
 270	*p = cpu_to_be32(hdr->nops);		/* argarray element count */
 271}
 272
 273/*
 274 * Update argarray element count
 275 */
 276static void encode_cb_nops(struct nfs4_cb_compound_hdr *hdr)
 277{
 278	BUG_ON(hdr->nops > NFS4_MAX_BACK_CHANNEL_OPS);
 279	*hdr->nops_p = cpu_to_be32(hdr->nops);
 280}
 281
 282/*
 283 * CB_COMPOUND4res
 284 *
 285 *	struct CB_COMPOUND4res {
 286 *		nfsstat4	status;
 287 *		utf8str_cs	tag;
 288 *		nfs_cb_resop4	resarray<>;
 289 *	};
 290 */
 291static int decode_cb_compound4res(struct xdr_stream *xdr,
 292				  struct nfs4_cb_compound_hdr *hdr)
 293{
 294	u32 length;
 295	__be32 *p;
 296
 297	p = xdr_inline_decode(xdr, 4 + 4);
 298	if (unlikely(p == NULL))
 299		goto out_overflow;
 300	hdr->status = be32_to_cpup(p++);
 301	/* Ignore the tag */
 302	length = be32_to_cpup(p++);
 303	p = xdr_inline_decode(xdr, length + 4);
 304	if (unlikely(p == NULL))
 305		goto out_overflow;
 306	hdr->nops = be32_to_cpup(p);
 307	return 0;
 308out_overflow:
 309	print_overflow_msg(__func__, xdr);
 310	return -EIO;
 311}
 312
 313/*
 314 * CB_RECALL4args
 315 *
 316 *	struct CB_RECALL4args {
 317 *		stateid4	stateid;
 318 *		bool		truncate;
 319 *		nfs_fh4		fh;
 320 *	};
 321 */
 322static void encode_cb_recall4args(struct xdr_stream *xdr,
 323				  const struct nfs4_delegation *dp,
 324				  struct nfs4_cb_compound_hdr *hdr)
 325{
 326	__be32 *p;
 327
 328	encode_nfs_cb_opnum4(xdr, OP_CB_RECALL);
 329	encode_stateid4(xdr, &dp->dl_stid.sc_stateid);
 330
 331	p = xdr_reserve_space(xdr, 4);
 332	*p++ = xdr_zero;			/* truncate */
 333
 334	encode_nfs_fh4(xdr, &dp->dl_stid.sc_file->fi_fhandle);
 335
 336	hdr->nops++;
 337}
 338
 339/*
 340 * CB_SEQUENCE4args
 341 *
 342 *	struct CB_SEQUENCE4args {
 343 *		sessionid4		csa_sessionid;
 344 *		sequenceid4		csa_sequenceid;
 345 *		slotid4			csa_slotid;
 346 *		slotid4			csa_highest_slotid;
 347 *		bool			csa_cachethis;
 348 *		referring_call_list4	csa_referring_call_lists<>;
 349 *	};
 350 */
 351static void encode_cb_sequence4args(struct xdr_stream *xdr,
 352				    const struct nfsd4_callback *cb,
 353				    struct nfs4_cb_compound_hdr *hdr)
 354{
 355	struct nfsd4_session *session = cb->cb_clp->cl_cb_session;
 356	__be32 *p;
 357
 358	if (hdr->minorversion == 0)
 359		return;
 360
 361	encode_nfs_cb_opnum4(xdr, OP_CB_SEQUENCE);
 362	encode_sessionid4(xdr, session);
 363
 364	p = xdr_reserve_space(xdr, 4 + 4 + 4 + 4 + 4);
 365	*p++ = cpu_to_be32(session->se_cb_seq_nr);	/* csa_sequenceid */
 366	*p++ = xdr_zero;			/* csa_slotid */
 367	*p++ = xdr_zero;			/* csa_highest_slotid */
 368	*p++ = xdr_zero;			/* csa_cachethis */
 369	xdr_encode_empty_array(p);		/* csa_referring_call_lists */
 370
 371	hdr->nops++;
 372}
 373
 374/*
 375 * CB_SEQUENCE4resok
 376 *
 377 *	struct CB_SEQUENCE4resok {
 378 *		sessionid4	csr_sessionid;
 379 *		sequenceid4	csr_sequenceid;
 380 *		slotid4		csr_slotid;
 381 *		slotid4		csr_highest_slotid;
 382 *		slotid4		csr_target_highest_slotid;
 383 *	};
 384 *
 385 *	union CB_SEQUENCE4res switch (nfsstat4 csr_status) {
 386 *	case NFS4_OK:
 387 *		CB_SEQUENCE4resok	csr_resok4;
 388 *	default:
 389 *		void;
 390 *	};
 391 *
 392 * Our current back channel implmentation supports a single backchannel
 393 * with a single slot.
 394 */
 395static int decode_cb_sequence4resok(struct xdr_stream *xdr,
 396				    struct nfsd4_callback *cb)
 397{
 398	struct nfsd4_session *session = cb->cb_clp->cl_cb_session;
 399	struct nfs4_sessionid id;
 400	int status;
 401	__be32 *p;
 402	u32 dummy;
 403
 404	status = -ESERVERFAULT;
 405
 406	/*
 407	 * If the server returns different values for sessionID, slotID or
 408	 * sequence number, the server is looney tunes.
 409	 */
 410	p = xdr_inline_decode(xdr, NFS4_MAX_SESSIONID_LEN + 4 + 4 + 4 + 4);
 411	if (unlikely(p == NULL))
 412		goto out_overflow;
 413	memcpy(id.data, p, NFS4_MAX_SESSIONID_LEN);
 414	if (memcmp(id.data, session->se_sessionid.data,
 415					NFS4_MAX_SESSIONID_LEN) != 0) {
 416		dprintk("NFS: %s Invalid session id\n", __func__);
 417		goto out;
 418	}
 419	p += XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN);
 420
 421	dummy = be32_to_cpup(p++);
 422	if (dummy != session->se_cb_seq_nr) {
 423		dprintk("NFS: %s Invalid sequence number\n", __func__);
 424		goto out;
 425	}
 426
 427	dummy = be32_to_cpup(p++);
 428	if (dummy != 0) {
 429		dprintk("NFS: %s Invalid slotid\n", __func__);
 430		goto out;
 431	}
 432
 433	/*
 434	 * FIXME: process highest slotid and target highest slotid
 435	 */
 436	status = 0;
 437out:
 438	cb->cb_seq_status = status;
 
 439	return status;
 440out_overflow:
 441	print_overflow_msg(__func__, xdr);
 442	status = -EIO;
 443	goto out;
 444}
 445
 446static int decode_cb_sequence4res(struct xdr_stream *xdr,
 447				  struct nfsd4_callback *cb)
 448{
 
 449	int status;
 450
 451	if (cb->cb_minorversion == 0)
 452		return 0;
 453
 454	status = decode_cb_op_status(xdr, OP_CB_SEQUENCE, &cb->cb_seq_status);
 455	if (unlikely(status || cb->cb_seq_status))
 456		return status;
 457
 458	return decode_cb_sequence4resok(xdr, cb);
 
 
 
 
 
 459}
 460
 461/*
 462 * NFSv4.0 and NFSv4.1 XDR encode functions
 463 *
 464 * NFSv4.0 callback argument types are defined in section 15 of RFC
 465 * 3530: "Network File System (NFS) version 4 Protocol" and section 20
 466 * of RFC 5661:  "Network File System (NFS) Version 4 Minor Version 1
 467 * Protocol".
 468 */
 469
 470/*
 471 * NB: Without this zero space reservation, callbacks over krb5p fail
 472 */
 473static void nfs4_xdr_enc_cb_null(struct rpc_rqst *req, struct xdr_stream *xdr,
 474				 void *__unused)
 475{
 476	xdr_reserve_space(xdr, 0);
 477}
 478
 479/*
 480 * 20.2. Operation 4: CB_RECALL - Recall a Delegation
 481 */
 482static void nfs4_xdr_enc_cb_recall(struct rpc_rqst *req, struct xdr_stream *xdr,
 483				   const struct nfsd4_callback *cb)
 484{
 485	const struct nfs4_delegation *dp = cb_to_delegation(cb);
 486	struct nfs4_cb_compound_hdr hdr = {
 487		.ident = cb->cb_clp->cl_cb_ident,
 488		.minorversion = cb->cb_minorversion,
 489	};
 490
 491	encode_cb_compound4args(xdr, &hdr);
 492	encode_cb_sequence4args(xdr, cb, &hdr);
 493	encode_cb_recall4args(xdr, dp, &hdr);
 494	encode_cb_nops(&hdr);
 495}
 496
 497
 498/*
 499 * NFSv4.0 and NFSv4.1 XDR decode functions
 500 *
 501 * NFSv4.0 callback result types are defined in section 15 of RFC
 502 * 3530: "Network File System (NFS) version 4 Protocol" and section 20
 503 * of RFC 5661:  "Network File System (NFS) Version 4 Minor Version 1
 504 * Protocol".
 505 */
 506
 507static int nfs4_xdr_dec_cb_null(struct rpc_rqst *req, struct xdr_stream *xdr,
 508				void *__unused)
 509{
 510	return 0;
 511}
 512
 513/*
 514 * 20.2. Operation 4: CB_RECALL - Recall a Delegation
 515 */
 516static int nfs4_xdr_dec_cb_recall(struct rpc_rqst *rqstp,
 517				  struct xdr_stream *xdr,
 518				  struct nfsd4_callback *cb)
 519{
 520	struct nfs4_cb_compound_hdr hdr;
 
 521	int status;
 522
 523	status = decode_cb_compound4res(xdr, &hdr);
 524	if (unlikely(status))
 525		return status;
 526
 527	if (cb != NULL) {
 528		status = decode_cb_sequence4res(xdr, cb);
 529		if (unlikely(status || cb->cb_seq_status))
 530			return status;
 531	}
 532
 533	return decode_cb_op_status(xdr, OP_CB_RECALL, &cb->cb_status);
 534}
 535
 536#ifdef CONFIG_NFSD_PNFS
 537/*
 538 * CB_LAYOUTRECALL4args
 539 *
 540 *	struct layoutrecall_file4 {
 541 *		nfs_fh4         lor_fh;
 542 *		offset4         lor_offset;
 543 *		length4         lor_length;
 544 *		stateid4        lor_stateid;
 545 *	};
 546 *
 547 *	union layoutrecall4 switch(layoutrecall_type4 lor_recalltype) {
 548 *	case LAYOUTRECALL4_FILE:
 549 *		layoutrecall_file4 lor_layout;
 550 *	case LAYOUTRECALL4_FSID:
 551 *		fsid4              lor_fsid;
 552 *	case LAYOUTRECALL4_ALL:
 553 *		void;
 554 *	};
 555 *
 556 *	struct CB_LAYOUTRECALL4args {
 557 *		layouttype4             clora_type;
 558 *		layoutiomode4           clora_iomode;
 559 *		bool                    clora_changed;
 560 *		layoutrecall4           clora_recall;
 561 *	};
 562 */
 563static void encode_cb_layout4args(struct xdr_stream *xdr,
 564				  const struct nfs4_layout_stateid *ls,
 565				  struct nfs4_cb_compound_hdr *hdr)
 566{
 567	__be32 *p;
 568
 569	BUG_ON(hdr->minorversion == 0);
 570
 571	p = xdr_reserve_space(xdr, 5 * 4);
 572	*p++ = cpu_to_be32(OP_CB_LAYOUTRECALL);
 573	*p++ = cpu_to_be32(ls->ls_layout_type);
 574	*p++ = cpu_to_be32(IOMODE_ANY);
 575	*p++ = cpu_to_be32(1);
 576	*p = cpu_to_be32(RETURN_FILE);
 577
 578	encode_nfs_fh4(xdr, &ls->ls_stid.sc_file->fi_fhandle);
 579
 580	p = xdr_reserve_space(xdr, 2 * 8);
 581	p = xdr_encode_hyper(p, 0);
 582	xdr_encode_hyper(p, NFS4_MAX_UINT64);
 583
 584	encode_stateid4(xdr, &ls->ls_recall_sid);
 585
 586	hdr->nops++;
 587}
 588
 589static void nfs4_xdr_enc_cb_layout(struct rpc_rqst *req,
 590				   struct xdr_stream *xdr,
 591				   const struct nfsd4_callback *cb)
 592{
 593	const struct nfs4_layout_stateid *ls =
 594		container_of(cb, struct nfs4_layout_stateid, ls_recall);
 595	struct nfs4_cb_compound_hdr hdr = {
 596		.ident = 0,
 597		.minorversion = cb->cb_minorversion,
 598	};
 599
 600	encode_cb_compound4args(xdr, &hdr);
 601	encode_cb_sequence4args(xdr, cb, &hdr);
 602	encode_cb_layout4args(xdr, ls, &hdr);
 603	encode_cb_nops(&hdr);
 604}
 605
 606static int nfs4_xdr_dec_cb_layout(struct rpc_rqst *rqstp,
 607				  struct xdr_stream *xdr,
 608				  struct nfsd4_callback *cb)
 609{
 610	struct nfs4_cb_compound_hdr hdr;
 611	int status;
 612
 613	status = decode_cb_compound4res(xdr, &hdr);
 614	if (unlikely(status))
 615		return status;
 616
 617	if (cb) {
 618		status = decode_cb_sequence4res(xdr, cb);
 619		if (unlikely(status || cb->cb_seq_status))
 620			return status;
 621	}
 622	return decode_cb_op_status(xdr, OP_CB_LAYOUTRECALL, &cb->cb_status);
 623}
 624#endif /* CONFIG_NFSD_PNFS */
 625
 626/*
 627 * RPC procedure tables
 628 */
 629#define PROC(proc, call, argtype, restype)				\
 630[NFSPROC4_CLNT_##proc] = {						\
 631	.p_proc    = NFSPROC4_CB_##call,				\
 632	.p_encode  = (kxdreproc_t)nfs4_xdr_enc_##argtype,		\
 633	.p_decode  = (kxdrdproc_t)nfs4_xdr_dec_##restype,		\
 634	.p_arglen  = NFS4_enc_##argtype##_sz,				\
 635	.p_replen  = NFS4_dec_##restype##_sz,				\
 636	.p_statidx = NFSPROC4_CB_##call,				\
 637	.p_name    = #proc,						\
 638}
 639
 640static struct rpc_procinfo nfs4_cb_procedures[] = {
 641	PROC(CB_NULL,	NULL,		cb_null,	cb_null),
 642	PROC(CB_RECALL,	COMPOUND,	cb_recall,	cb_recall),
 643#ifdef CONFIG_NFSD_PNFS
 644	PROC(CB_LAYOUT,	COMPOUND,	cb_layout,	cb_layout),
 645#endif
 646};
 647
 648static struct rpc_version nfs_cb_version4 = {
 649/*
 650 * Note on the callback rpc program version number: despite language in rfc
 651 * 5661 section 18.36.3 requiring servers to use 4 in this field, the
 652 * official xdr descriptions for both 4.0 and 4.1 specify version 1, and
 653 * in practice that appears to be what implementations use.  The section
 654 * 18.36.3 language is expected to be fixed in an erratum.
 655 */
 656	.number			= 1,
 657	.nrprocs		= ARRAY_SIZE(nfs4_cb_procedures),
 658	.procs			= nfs4_cb_procedures
 659};
 660
 661static const struct rpc_version *nfs_cb_version[] = {
 662	&nfs_cb_version4,
 663};
 664
 665static const struct rpc_program cb_program;
 666
 667static struct rpc_stat cb_stats = {
 668	.program		= &cb_program
 669};
 670
 671#define NFS4_CALLBACK 0x40000000
 672static const struct rpc_program cb_program = {
 673	.name			= "nfs4_cb",
 674	.number			= NFS4_CALLBACK,
 675	.nrvers			= ARRAY_SIZE(nfs_cb_version),
 676	.version		= nfs_cb_version,
 677	.stats			= &cb_stats,
 678	.pipe_dir_name		= "nfsd4_cb",
 679};
 680
 681static int max_cb_time(struct net *net)
 682{
 683	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
 684	return max(nn->nfsd4_lease/10, (time_t)1) * HZ;
 685}
 686
 687static struct rpc_cred *callback_cred;
 688
 689int set_callback_cred(void)
 690{
 691	if (callback_cred)
 692		return 0;
 693	callback_cred = rpc_lookup_machine_cred("nfs");
 694	if (!callback_cred)
 695		return -ENOMEM;
 696	return 0;
 697}
 698
 699static struct rpc_cred *get_backchannel_cred(struct nfs4_client *clp, struct rpc_clnt *client, struct nfsd4_session *ses)
 700{
 701	if (clp->cl_minorversion == 0) {
 702		return get_rpccred(callback_cred);
 703	} else {
 704		struct rpc_auth *auth = client->cl_auth;
 705		struct auth_cred acred = {};
 706
 707		acred.uid = ses->se_cb_sec.uid;
 708		acred.gid = ses->se_cb_sec.gid;
 709		return auth->au_ops->lookup_cred(client->cl_auth, &acred, 0);
 710	}
 711}
 712
 713static struct rpc_clnt *create_backchannel_client(struct rpc_create_args *args)
 714{
 715	struct rpc_xprt *xprt;
 716
 717	if (args->protocol != XPRT_TRANSPORT_BC_TCP)
 718		return rpc_create(args);
 719
 720	xprt = args->bc_xprt->xpt_bc_xprt;
 721	if (xprt) {
 722		xprt_get(xprt);
 723		return rpc_create_xprt(args, xprt);
 724	}
 725
 726	return rpc_create(args);
 727}
 728
 729static int setup_callback_client(struct nfs4_client *clp, struct nfs4_cb_conn *conn, struct nfsd4_session *ses)
 730{
 731	int maxtime = max_cb_time(clp->net);
 732	struct rpc_timeout	timeparms = {
 733		.to_initval	= maxtime,
 734		.to_retries	= 0,
 735		.to_maxval	= maxtime,
 736	};
 737	struct rpc_create_args args = {
 738		.net		= clp->net,
 739		.address	= (struct sockaddr *) &conn->cb_addr,
 740		.addrsize	= conn->cb_addrlen,
 741		.saddress	= (struct sockaddr *) &conn->cb_saddr,
 742		.timeout	= &timeparms,
 743		.program	= &cb_program,
 744		.version	= 0,
 745		.flags		= (RPC_CLNT_CREATE_NOPING | RPC_CLNT_CREATE_QUIET),
 746	};
 747	struct rpc_clnt *client;
 748	struct rpc_cred *cred;
 749
 750	if (clp->cl_minorversion == 0) {
 751		if (!clp->cl_cred.cr_principal &&
 752				(clp->cl_cred.cr_flavor >= RPC_AUTH_GSS_KRB5))
 753			return -EINVAL;
 754		args.client_name = clp->cl_cred.cr_principal;
 755		args.prognumber	= conn->cb_prog;
 756		args.protocol = XPRT_TRANSPORT_TCP;
 757		args.authflavor = clp->cl_cred.cr_flavor;
 758		clp->cl_cb_ident = conn->cb_ident;
 759	} else {
 760		if (!conn->cb_xprt)
 761			return -EINVAL;
 762		clp->cl_cb_conn.cb_xprt = conn->cb_xprt;
 763		clp->cl_cb_session = ses;
 764		args.bc_xprt = conn->cb_xprt;
 765		args.prognumber = clp->cl_cb_session->se_cb_prog;
 766		args.protocol = conn->cb_xprt->xpt_class->xcl_ident |
 767				XPRT_TRANSPORT_BC;
 768		args.authflavor = ses->se_cb_sec.flavor;
 769	}
 770	/* Create RPC client */
 771	client = create_backchannel_client(&args);
 772	if (IS_ERR(client)) {
 773		dprintk("NFSD: couldn't create callback client: %ld\n",
 774			PTR_ERR(client));
 775		return PTR_ERR(client);
 776	}
 777	cred = get_backchannel_cred(clp, client, ses);
 778	if (IS_ERR(cred)) {
 779		rpc_shutdown_client(client);
 780		return PTR_ERR(cred);
 781	}
 782	clp->cl_cb_client = client;
 783	clp->cl_cb_cred = cred;
 784	return 0;
 785}
 786
 787static void warn_no_callback_path(struct nfs4_client *clp, int reason)
 788{
 789	dprintk("NFSD: warning: no callback path to client %.*s: error %d\n",
 790		(int)clp->cl_name.len, clp->cl_name.data, reason);
 791}
 792
 793static void nfsd4_mark_cb_down(struct nfs4_client *clp, int reason)
 794{
 795	if (test_bit(NFSD4_CLIENT_CB_UPDATE, &clp->cl_flags))
 796		return;
 797	clp->cl_cb_state = NFSD4_CB_DOWN;
 798	warn_no_callback_path(clp, reason);
 799}
 800
 801static void nfsd4_mark_cb_fault(struct nfs4_client *clp, int reason)
 802{
 803	if (test_bit(NFSD4_CLIENT_CB_UPDATE, &clp->cl_flags))
 804		return;
 805	clp->cl_cb_state = NFSD4_CB_FAULT;
 806	warn_no_callback_path(clp, reason);
 807}
 808
 809static void nfsd4_cb_probe_done(struct rpc_task *task, void *calldata)
 810{
 811	struct nfs4_client *clp = container_of(calldata, struct nfs4_client, cl_cb_null);
 812
 813	if (task->tk_status)
 814		nfsd4_mark_cb_down(clp, task->tk_status);
 815	else
 816		clp->cl_cb_state = NFSD4_CB_UP;
 817}
 818
 819static const struct rpc_call_ops nfsd4_cb_probe_ops = {
 820	/* XXX: release method to ensure we set the cb channel down if
 821	 * necessary on early failure? */
 822	.rpc_call_done = nfsd4_cb_probe_done,
 823};
 824
 825static struct workqueue_struct *callback_wq;
 826
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 827/*
 828 * Poke the callback thread to process any updates to the callback
 829 * parameters, and send a null probe.
 830 */
 831void nfsd4_probe_callback(struct nfs4_client *clp)
 832{
 833	clp->cl_cb_state = NFSD4_CB_UNKNOWN;
 834	set_bit(NFSD4_CLIENT_CB_UPDATE, &clp->cl_flags);
 835	nfsd4_run_cb(&clp->cl_cb_null);
 836}
 837
 838void nfsd4_probe_callback_sync(struct nfs4_client *clp)
 839{
 840	nfsd4_probe_callback(clp);
 841	flush_workqueue(callback_wq);
 842}
 843
 844void nfsd4_change_callback(struct nfs4_client *clp, struct nfs4_cb_conn *conn)
 845{
 846	clp->cl_cb_state = NFSD4_CB_UNKNOWN;
 847	spin_lock(&clp->cl_lock);
 848	memcpy(&clp->cl_cb_conn, conn, sizeof(struct nfs4_cb_conn));
 849	spin_unlock(&clp->cl_lock);
 850}
 851
 852/*
 853 * There's currently a single callback channel slot.
 854 * If the slot is available, then mark it busy.  Otherwise, set the
 855 * thread for sleeping on the callback RPC wait queue.
 856 */
 857static bool nfsd41_cb_get_slot(struct nfs4_client *clp, struct rpc_task *task)
 858{
 859	if (test_and_set_bit(0, &clp->cl_cb_slot_busy) != 0) {
 860		rpc_sleep_on(&clp->cl_cb_waitq, task, NULL);
 861		/* Race breaker */
 862		if (test_and_set_bit(0, &clp->cl_cb_slot_busy) != 0) {
 863			dprintk("%s slot is busy\n", __func__);
 864			return false;
 865		}
 866		rpc_wake_up_queued_task(&clp->cl_cb_waitq, task);
 867	}
 868	return true;
 869}
 870
 871/*
 872 * TODO: cb_sequence should support referring call lists, cachethis, multiple
 873 * slots, and mark callback channel down on communication errors.
 874 */
 875static void nfsd4_cb_prepare(struct rpc_task *task, void *calldata)
 876{
 877	struct nfsd4_callback *cb = calldata;
 878	struct nfs4_client *clp = cb->cb_clp;
 879	u32 minorversion = clp->cl_minorversion;
 880
 881	cb->cb_minorversion = minorversion;
 882	/*
 883	 * cb_seq_status is only set in decode_cb_sequence4res,
 884	 * and so will remain 1 if an rpc level failure occurs.
 885	 */
 886	cb->cb_seq_status = 1;
 887	cb->cb_status = 0;
 888	if (minorversion) {
 889		if (!nfsd41_cb_get_slot(clp, task))
 890			return;
 891	}
 
 
 
 
 
 
 
 892	rpc_call_start(task);
 893}
 894
 895static bool nfsd4_cb_sequence_done(struct rpc_task *task, struct nfsd4_callback *cb)
 896{
 
 897	struct nfs4_client *clp = cb->cb_clp;
 898	struct nfsd4_session *session = clp->cl_cb_session;
 899	bool ret = true;
 900
 901	if (!clp->cl_minorversion) {
 902		/*
 903		 * If the backchannel connection was shut down while this
 904		 * task was queued, we need to resubmit it after setting up
 905		 * a new backchannel connection.
 906		 *
 907		 * Note that if we lost our callback connection permanently
 908		 * the submission code will error out, so we don't need to
 909		 * handle that case here.
 910		 */
 911		if (task->tk_flags & RPC_TASK_KILLED)
 912			goto need_restart;
 913
 914		return true;
 915	}
 916
 917	switch (cb->cb_seq_status) {
 918	case 0:
 919		/*
 920		 * No need for lock, access serialized in nfsd4_cb_prepare
 921		 *
 922		 * RFC5661 20.9.3
 923		 * If CB_SEQUENCE returns an error, then the state of the slot
 924		 * (sequence ID, cached reply) MUST NOT change.
 925		 */
 926		++session->se_cb_seq_nr;
 927		break;
 928	case -ESERVERFAULT:
 929		++session->se_cb_seq_nr;
 930	case 1:
 931	case -NFS4ERR_BADSESSION:
 932		nfsd4_mark_cb_fault(cb->cb_clp, cb->cb_seq_status);
 933		ret = false;
 934		break;
 935	case -NFS4ERR_DELAY:
 936		if (!rpc_restart_call(task))
 937			goto out;
 938
 939		rpc_delay(task, 2 * HZ);
 940		return false;
 941	case -NFS4ERR_BADSLOT:
 942		goto retry_nowait;
 943	case -NFS4ERR_SEQ_MISORDERED:
 944		if (session->se_cb_seq_nr != 1) {
 945			session->se_cb_seq_nr = 1;
 946			goto retry_nowait;
 947		}
 948		break;
 949	default:
 950		dprintk("%s: unprocessed error %d\n", __func__,
 951			cb->cb_seq_status);
 952	}
 
 953
 954	clear_bit(0, &clp->cl_cb_slot_busy);
 955	rpc_wake_up_next(&clp->cl_cb_waitq);
 956	dprintk("%s: freed slot, new seqid=%d\n", __func__,
 957		clp->cl_cb_session->se_cb_seq_nr);
 958
 959	if (task->tk_flags & RPC_TASK_KILLED)
 960		goto need_restart;
 961out:
 962	return ret;
 963retry_nowait:
 964	if (rpc_restart_call_prepare(task))
 965		ret = false;
 966	goto out;
 967need_restart:
 968	task->tk_status = 0;
 969	cb->cb_need_restart = true;
 970	return false;
 971}
 972
 973static void nfsd4_cb_done(struct rpc_task *task, void *calldata)
 974{
 975	struct nfsd4_callback *cb = calldata;
 
 976	struct nfs4_client *clp = cb->cb_clp;
 
 977
 978	dprintk("%s: minorversion=%d\n", __func__,
 979		clp->cl_minorversion);
 980
 981	if (!nfsd4_cb_sequence_done(task, cb))
 
 
 
 982		return;
 983
 984	if (cb->cb_status) {
 985		WARN_ON_ONCE(task->tk_status);
 986		task->tk_status = cb->cb_status;
 987	}
 988
 989	switch (cb->cb_ops->done(cb, task)) {
 
 
 990	case 0:
 991		task->tk_status = 0;
 992		rpc_restart_call_prepare(task);
 993		return;
 994	case 1:
 
 
 
 995		break;
 996	case -1:
 997		/* Network partition? */
 998		nfsd4_mark_cb_down(clp, task->tk_status);
 999		break;
1000	default:
1001		BUG();
1002	}
 
 
 
 
 
 
 
 
1003}
1004
1005static void nfsd4_cb_release(void *calldata)
1006{
1007	struct nfsd4_callback *cb = calldata;
 
 
1008
1009	if (cb->cb_need_restart)
1010		nfsd4_run_cb(cb);
1011	else
1012		cb->cb_ops->release(cb);
1013
 
1014}
1015
1016static const struct rpc_call_ops nfsd4_cb_ops = {
1017	.rpc_call_prepare = nfsd4_cb_prepare,
1018	.rpc_call_done = nfsd4_cb_done,
1019	.rpc_release = nfsd4_cb_release,
1020};
1021
1022int nfsd4_create_callback_queue(void)
1023{
1024	callback_wq = create_singlethread_workqueue("nfsd4_callbacks");
1025	if (!callback_wq)
1026		return -ENOMEM;
1027	return 0;
1028}
1029
1030void nfsd4_destroy_callback_queue(void)
1031{
1032	destroy_workqueue(callback_wq);
1033}
1034
1035/* must be called under the state lock */
1036void nfsd4_shutdown_callback(struct nfs4_client *clp)
1037{
1038	set_bit(NFSD4_CLIENT_CB_KILL, &clp->cl_flags);
1039	/*
1040	 * Note this won't actually result in a null callback;
1041	 * instead, nfsd4_run_cb_null() will detect the killed
1042	 * client, destroy the rpc client, and stop:
1043	 */
1044	nfsd4_run_cb(&clp->cl_cb_null);
1045	flush_workqueue(callback_wq);
1046}
1047
 
 
 
 
 
 
1048/* requires cl_lock: */
1049static struct nfsd4_conn * __nfsd4_find_backchannel(struct nfs4_client *clp)
1050{
1051	struct nfsd4_session *s;
1052	struct nfsd4_conn *c;
1053
1054	list_for_each_entry(s, &clp->cl_sessions, se_perclnt) {
1055		list_for_each_entry(c, &s->se_conns, cn_persession) {
1056			if (c->cn_flags & NFS4_CDFC4_BACK)
1057				return c;
1058		}
1059	}
1060	return NULL;
1061}
1062
1063static void nfsd4_process_cb_update(struct nfsd4_callback *cb)
1064{
1065	struct nfs4_cb_conn conn;
1066	struct nfs4_client *clp = cb->cb_clp;
1067	struct nfsd4_session *ses = NULL;
1068	struct nfsd4_conn *c;
1069	int err;
1070
1071	/*
1072	 * This is either an update, or the client dying; in either case,
1073	 * kill the old client:
1074	 */
1075	if (clp->cl_cb_client) {
1076		rpc_shutdown_client(clp->cl_cb_client);
1077		clp->cl_cb_client = NULL;
1078		put_rpccred(clp->cl_cb_cred);
1079		clp->cl_cb_cred = NULL;
1080	}
1081	if (clp->cl_cb_conn.cb_xprt) {
1082		svc_xprt_put(clp->cl_cb_conn.cb_xprt);
1083		clp->cl_cb_conn.cb_xprt = NULL;
1084	}
1085	if (test_bit(NFSD4_CLIENT_CB_KILL, &clp->cl_flags))
1086		return;
1087	spin_lock(&clp->cl_lock);
1088	/*
1089	 * Only serialized callback code is allowed to clear these
1090	 * flags; main nfsd code can only set them:
1091	 */
1092	BUG_ON(!(clp->cl_flags & NFSD4_CLIENT_CB_FLAG_MASK));
1093	clear_bit(NFSD4_CLIENT_CB_UPDATE, &clp->cl_flags);
1094	memcpy(&conn, &cb->cb_clp->cl_cb_conn, sizeof(struct nfs4_cb_conn));
1095	c = __nfsd4_find_backchannel(clp);
1096	if (c) {
1097		svc_xprt_get(c->cn_xprt);
1098		conn.cb_xprt = c->cn_xprt;
1099		ses = c->cn_session;
1100	}
1101	spin_unlock(&clp->cl_lock);
1102
1103	err = setup_callback_client(clp, &conn, ses);
1104	if (err) {
1105		nfsd4_mark_cb_down(clp, err);
1106		return;
1107	}
 
 
 
1108}
1109
1110static void
1111nfsd4_run_cb_work(struct work_struct *work)
1112{
1113	struct nfsd4_callback *cb =
1114		container_of(work, struct nfsd4_callback, cb_work);
1115	struct nfs4_client *clp = cb->cb_clp;
1116	struct rpc_clnt *clnt;
1117
1118	if (cb->cb_need_restart) {
1119		cb->cb_need_restart = false;
1120	} else {
1121		if (cb->cb_ops && cb->cb_ops->prepare)
1122			cb->cb_ops->prepare(cb);
1123	}
1124
1125	if (clp->cl_flags & NFSD4_CLIENT_CB_FLAG_MASK)
1126		nfsd4_process_cb_update(cb);
1127
1128	clnt = clp->cl_cb_client;
1129	if (!clnt) {
1130		/* Callback channel broken, or client killed; give up: */
1131		if (cb->cb_ops && cb->cb_ops->release)
1132			cb->cb_ops->release(cb);
1133		return;
1134	}
1135
1136	/*
1137	 * Don't send probe messages for 4.1 or later.
1138	 */
1139	if (!cb->cb_ops && clp->cl_minorversion) {
1140		clp->cl_cb_state = NFSD4_CB_UP;
1141		return;
1142	}
1143
1144	cb->cb_msg.rpc_cred = clp->cl_cb_cred;
1145	rpc_call_async(clnt, &cb->cb_msg, RPC_TASK_SOFT | RPC_TASK_SOFTCONN,
1146			cb->cb_ops ? &nfsd4_cb_ops : &nfsd4_cb_probe_ops, cb);
 
 
 
 
 
1147}
1148
1149void nfsd4_init_cb(struct nfsd4_callback *cb, struct nfs4_client *clp,
1150		const struct nfsd4_callback_ops *ops, enum nfsd4_cb_op op)
1151{
 
 
 
 
 
1152	cb->cb_clp = clp;
1153	cb->cb_msg.rpc_proc = &nfs4_cb_procedures[op];
1154	cb->cb_msg.rpc_argp = cb;
1155	cb->cb_msg.rpc_resp = cb;
1156	cb->cb_ops = ops;
1157	INIT_WORK(&cb->cb_work, nfsd4_run_cb_work);
1158	cb->cb_seq_status = 1;
1159	cb->cb_status = 0;
1160	cb->cb_need_restart = false;
1161}
1162
1163void nfsd4_run_cb(struct nfsd4_callback *cb)
1164{
1165	queue_work(callback_wq, &cb->cb_work);
 
 
 
1166}