Linux Audio

Check our new training course

Loading...
v3.15
   1/*
   2 *  Server-side procedures for NFSv4.
   3 *
   4 *  Copyright (c) 2002 The Regents of the University of Michigan.
   5 *  All rights reserved.
   6 *
   7 *  Kendrick Smith <kmsmith@umich.edu>
   8 *  Andy Adamson   <andros@umich.edu>
   9 *
  10 *  Redistribution and use in source and binary forms, with or without
  11 *  modification, are permitted provided that the following conditions
  12 *  are met:
  13 *
  14 *  1. Redistributions of source code must retain the above copyright
  15 *     notice, this list of conditions and the following disclaimer.
  16 *  2. Redistributions in binary form must reproduce the above copyright
  17 *     notice, this list of conditions and the following disclaimer in the
  18 *     documentation and/or other materials provided with the distribution.
  19 *  3. Neither the name of the University nor the names of its
  20 *     contributors may be used to endorse or promote products derived
  21 *     from this software without specific prior written permission.
  22 *
  23 *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
  24 *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  25 *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  26 *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  27 *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  28 *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  29 *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  30 *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  31 *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  32 *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  33 *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  34 */
 
  35#include <linux/file.h>
 
  36#include <linux/slab.h>
 
 
 
  37
  38#include "idmap.h"
  39#include "cache.h"
  40#include "xdr4.h"
  41#include "vfs.h"
  42#include "current_stateid.h"
  43#include "netns.h"
  44#include "acl.h"
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  45
  46#ifdef CONFIG_NFSD_V4_SECURITY_LABEL
  47#include <linux/security.h>
  48
  49static inline void
  50nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval)
  51{
  52	struct inode *inode = resfh->fh_dentry->d_inode;
  53	int status;
  54
  55	mutex_lock(&inode->i_mutex);
  56	status = security_inode_setsecctx(resfh->fh_dentry,
  57		label->data, label->len);
  58	mutex_unlock(&inode->i_mutex);
  59
  60	if (status)
  61		/*
  62		 * XXX: We should really fail the whole open, but we may
  63		 * already have created a new file, so it may be too
  64		 * late.  For now this seems the least of evils:
  65		 */
  66		bmval[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
  67
  68	return;
  69}
  70#else
  71static inline void
  72nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval)
  73{ }
  74#endif
  75
  76#define NFSDDBG_FACILITY		NFSDDBG_PROC
  77
  78static u32 nfsd_attrmask[] = {
  79	NFSD_WRITEABLE_ATTRS_WORD0,
  80	NFSD_WRITEABLE_ATTRS_WORD1,
  81	NFSD_WRITEABLE_ATTRS_WORD2
  82};
  83
  84static u32 nfsd41_ex_attrmask[] = {
  85	NFSD_SUPPATTR_EXCLCREAT_WORD0,
  86	NFSD_SUPPATTR_EXCLCREAT_WORD1,
  87	NFSD_SUPPATTR_EXCLCREAT_WORD2
  88};
  89
  90static __be32
  91check_attr_support(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
  92		   u32 *bmval, u32 *writable)
  93{
  94	struct dentry *dentry = cstate->current_fh.fh_dentry;
 
  95
  96	/*
  97	 * Check about attributes are supported by the NFSv4 server or not.
  98	 * According to spec, unsupported attributes return ERR_ATTRNOTSUPP.
  99	 */
 100	if ((bmval[0] & ~nfsd_suppattrs0(cstate->minorversion)) ||
 101	    (bmval[1] & ~nfsd_suppattrs1(cstate->minorversion)) ||
 102	    (bmval[2] & ~nfsd_suppattrs2(cstate->minorversion)))
 103		return nfserr_attrnotsupp;
 104
 105	/*
 106	 * Check FATTR4_WORD0_ACL can be supported
 107	 * in current environment or not.
 108	 */
 109	if (bmval[0] & FATTR4_WORD0_ACL) {
 110		if (!IS_POSIXACL(dentry->d_inode))
 111			return nfserr_attrnotsupp;
 112	}
 113
 114	/*
 115	 * According to spec, read-only attributes return ERR_INVAL.
 116	 */
 117	if (writable) {
 118		if ((bmval[0] & ~writable[0]) || (bmval[1] & ~writable[1]) ||
 119		    (bmval[2] & ~writable[2]))
 120			return nfserr_inval;
 121	}
 122
 123	return nfs_ok;
 124}
 125
 126static __be32
 127nfsd4_check_open_attributes(struct svc_rqst *rqstp,
 128	struct nfsd4_compound_state *cstate, struct nfsd4_open *open)
 129{
 130	__be32 status = nfs_ok;
 131
 132	if (open->op_create == NFS4_OPEN_CREATE) {
 133		if (open->op_createmode == NFS4_CREATE_UNCHECKED
 134		    || open->op_createmode == NFS4_CREATE_GUARDED)
 135			status = check_attr_support(rqstp, cstate,
 136					open->op_bmval, nfsd_attrmask);
 137		else if (open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1)
 138			status = check_attr_support(rqstp, cstate,
 139					open->op_bmval, nfsd41_ex_attrmask);
 140	}
 141
 142	return status;
 143}
 144
 145static int
 146is_create_with_attrs(struct nfsd4_open *open)
 147{
 148	return open->op_create == NFS4_OPEN_CREATE
 149		&& (open->op_createmode == NFS4_CREATE_UNCHECKED
 150		    || open->op_createmode == NFS4_CREATE_GUARDED
 151		    || open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1);
 152}
 153
 154/*
 155 * if error occurs when setting the acl, just clear the acl bit
 156 * in the returned attr bitmap.
 157 */
 158static void
 159do_set_nfs4_acl(struct svc_rqst *rqstp, struct svc_fh *fhp,
 160		struct nfs4_acl *acl, u32 *bmval)
 161{
 162	__be32 status;
 163
 164	status = nfsd4_set_nfs4_acl(rqstp, fhp, acl);
 165	if (status)
 166		/*
 167		 * We should probably fail the whole open at this point,
 168		 * but we've already created the file, so it's too late;
 169		 * So this seems the least of evils:
 170		 */
 171		bmval[0] &= ~FATTR4_WORD0_ACL;
 172}
 173
 174static inline void
 175fh_dup2(struct svc_fh *dst, struct svc_fh *src)
 176{
 177	fh_put(dst);
 178	dget(src->fh_dentry);
 179	if (src->fh_export)
 180		cache_get(&src->fh_export->h);
 181	*dst = *src;
 182}
 183
 184static __be32
 185do_open_permission(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open, int accmode)
 186{
 187	__be32 status;
 188
 189	if (open->op_truncate &&
 190		!(open->op_share_access & NFS4_SHARE_ACCESS_WRITE))
 191		return nfserr_inval;
 192
 193	accmode |= NFSD_MAY_READ_IF_EXEC;
 194
 195	if (open->op_share_access & NFS4_SHARE_ACCESS_READ)
 196		accmode |= NFSD_MAY_READ;
 197	if (open->op_share_access & NFS4_SHARE_ACCESS_WRITE)
 198		accmode |= (NFSD_MAY_WRITE | NFSD_MAY_TRUNC);
 199	if (open->op_share_deny & NFS4_SHARE_DENY_READ)
 200		accmode |= NFSD_MAY_WRITE;
 201
 202	status = fh_verify(rqstp, current_fh, S_IFREG, accmode);
 203
 204	return status;
 205}
 206
 207static __be32 nfsd_check_obj_isreg(struct svc_fh *fh)
 208{
 209	umode_t mode = fh->fh_dentry->d_inode->i_mode;
 210
 211	if (S_ISREG(mode))
 212		return nfs_ok;
 213	if (S_ISDIR(mode))
 214		return nfserr_isdir;
 215	/*
 216	 * Using err_symlink as our catch-all case may look odd; but
 217	 * there's no other obvious error for this case in 4.0, and we
 218	 * happen to know that it will cause the linux v4 client to do
 219	 * the right thing on attempts to open something other than a
 220	 * regular file.
 221	 */
 222	return nfserr_symlink;
 223}
 224
 225static void nfsd4_set_open_owner_reply_cache(struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh *resfh)
 226{
 227	if (nfsd4_has_session(cstate))
 228		return;
 229	fh_copy_shallow(&open->op_openowner->oo_owner.so_replay.rp_openfh,
 230			&resfh->fh_handle);
 231}
 232
 233static __be32
 234do_open_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh **resfh)
 235{
 236	struct svc_fh *current_fh = &cstate->current_fh;
 237	int accmode;
 238	__be32 status;
 239
 240	*resfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL);
 241	if (!*resfh)
 242		return nfserr_jukebox;
 243	fh_init(*resfh, NFS4_FHSIZE);
 244	open->op_truncate = 0;
 245
 246	if (open->op_create) {
 247		/* FIXME: check session persistence and pnfs flags.
 248		 * The nfsv4.1 spec requires the following semantics:
 249		 *
 250		 * Persistent   | pNFS   | Server REQUIRED | Client Allowed
 251		 * Reply Cache  | server |                 |
 252		 * -------------+--------+-----------------+--------------------
 253		 * no           | no     | EXCLUSIVE4_1    | EXCLUSIVE4_1
 254		 *              |        |                 | (SHOULD)
 255		 *              |        | and EXCLUSIVE4  | or EXCLUSIVE4
 256		 *              |        |                 | (SHOULD NOT)
 257		 * no           | yes    | EXCLUSIVE4_1    | EXCLUSIVE4_1
 258		 * yes          | no     | GUARDED4        | GUARDED4
 259		 * yes          | yes    | GUARDED4        | GUARDED4
 260		 */
 261
 262		/*
 263		 * Note: create modes (UNCHECKED,GUARDED...) are the same
 264		 * in NFSv4 as in v3 except EXCLUSIVE4_1.
 265		 */
 266		status = do_nfsd_create(rqstp, current_fh, open->op_fname.data,
 267					open->op_fname.len, &open->op_iattr,
 
 268					*resfh, open->op_createmode,
 269					(u32 *)open->op_verf.data,
 270					&open->op_truncate, &open->op_created);
 
 271
 272		if (!status && open->op_label.len)
 273			nfsd4_security_inode_setsecctx(*resfh, &open->op_label, open->op_bmval);
 274
 275		/*
 276		 * Following rfc 3530 14.2.16, use the returned bitmask
 277		 * to indicate which attributes we used to store the
 278		 * verifier:
 279		 */
 280		if (open->op_createmode == NFS4_CREATE_EXCLUSIVE && status == 0)
 281			open->op_bmval[1] = (FATTR4_WORD1_TIME_ACCESS |
 282							FATTR4_WORD1_TIME_MODIFY);
 283	} else
 284		/*
 285		 * Note this may exit with the parent still locked.
 286		 * We will hold the lock until nfsd4_open's final
 287		 * lookup, to prevent renames or unlinks until we've had
 288		 * a chance to an acquire a delegation if appropriate.
 289		 */
 290		status = nfsd_lookup(rqstp, current_fh,
 291				     open->op_fname.data, open->op_fname.len, *resfh);
 292	if (status)
 293		goto out;
 294	status = nfsd_check_obj_isreg(*resfh);
 295	if (status)
 296		goto out;
 297
 298	if (is_create_with_attrs(open) && open->op_acl != NULL)
 299		do_set_nfs4_acl(rqstp, *resfh, open->op_acl, open->op_bmval);
 300
 301	nfsd4_set_open_owner_reply_cache(cstate, open, *resfh);
 302	accmode = NFSD_MAY_NOP;
 303	if (open->op_created ||
 304			open->op_claim_type == NFS4_OPEN_CLAIM_DELEGATE_CUR)
 305		accmode |= NFSD_MAY_OWNER_OVERRIDE;
 306	status = do_open_permission(rqstp, *resfh, open, accmode);
 307	set_change_info(&open->op_cinfo, current_fh);
 308out:
 309	return status;
 310}
 311
 312static __be32
 313do_open_fhandle(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open)
 314{
 315	struct svc_fh *current_fh = &cstate->current_fh;
 316	__be32 status;
 317	int accmode = 0;
 318
 319	/* We don't know the target directory, and therefore can not
 320	* set the change info
 321	*/
 322
 323	memset(&open->op_cinfo, 0, sizeof(struct nfsd4_change_info));
 324
 325	nfsd4_set_open_owner_reply_cache(cstate, open, current_fh);
 326
 327	open->op_truncate = (open->op_iattr.ia_valid & ATTR_SIZE) &&
 328		(open->op_iattr.ia_size == 0);
 329	/*
 330	 * In the delegation case, the client is telling us about an
 331	 * open that it *already* performed locally, some time ago.  We
 332	 * should let it succeed now if possible.
 333	 *
 334	 * In the case of a CLAIM_FH open, on the other hand, the client
 335	 * may be counting on us to enforce permissions (the Linux 4.1
 336	 * client uses this for normal opens, for example).
 337	 */
 338	if (open->op_claim_type == NFS4_OPEN_CLAIM_DELEG_CUR_FH)
 339		accmode = NFSD_MAY_OWNER_OVERRIDE;
 340
 341	status = do_open_permission(rqstp, current_fh, open, accmode);
 342
 343	return status;
 344}
 345
 346static void
 347copy_clientid(clientid_t *clid, struct nfsd4_session *session)
 348{
 349	struct nfsd4_sessionid *sid =
 350			(struct nfsd4_sessionid *)session->se_sessionid.data;
 351
 352	clid->cl_boot = sid->clientid.cl_boot;
 353	clid->cl_id = sid->clientid.cl_id;
 354}
 355
 356static __be32
 357nfsd4_open(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 358	   struct nfsd4_open *open)
 359{
 
 360	__be32 status;
 361	struct svc_fh *resfh = NULL;
 362	struct nfsd4_compoundres *resp;
 363	struct net *net = SVC_NET(rqstp);
 364	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
 
 365
 366	dprintk("NFSD: nfsd4_open filename %.*s op_openowner %p\n",
 367		(int)open->op_fname.len, open->op_fname.data,
 368		open->op_openowner);
 369
 370	/* This check required by spec. */
 371	if (open->op_create && open->op_claim_type != NFS4_OPEN_CLAIM_NULL)
 372		return nfserr_inval;
 373
 374	open->op_created = 0;
 375	/*
 376	 * RFC5661 18.51.3
 377	 * Before RECLAIM_COMPLETE done, server should deny new lock
 378	 */
 379	if (nfsd4_has_session(cstate) &&
 380	    !test_bit(NFSD4_CLIENT_RECLAIM_COMPLETE,
 381		      &cstate->session->se_client->cl_flags) &&
 382	    open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS)
 383		return nfserr_grace;
 384
 385	if (nfsd4_has_session(cstate))
 386		copy_clientid(&open->op_clientid, cstate->session);
 387
 388	nfs4_lock_state();
 389
 390	/* check seqid for replay. set nfs4_owner */
 391	resp = rqstp->rq_resp;
 392	status = nfsd4_process_open1(&resp->cstate, open, nn);
 393	if (status == nfserr_replay_me) {
 394		struct nfs4_replay *rp = &open->op_openowner->oo_owner.so_replay;
 395		fh_put(&cstate->current_fh);
 396		fh_copy_shallow(&cstate->current_fh.fh_handle,
 397				&rp->rp_openfh);
 398		status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
 399		if (status)
 400			dprintk("nfsd4_open: replay failed"
 401				" restoring previous filehandle\n");
 402		else
 403			status = nfserr_replay_me;
 404	}
 405	if (status)
 406		goto out;
 407	if (open->op_xdr_error) {
 408		status = open->op_xdr_error;
 409		goto out;
 410	}
 411
 412	status = nfsd4_check_open_attributes(rqstp, cstate, open);
 413	if (status)
 414		goto out;
 415
 416	/* Openowner is now set, so sequence id will get bumped.  Now we need
 417	 * these checks before we do any creates: */
 418	status = nfserr_grace;
 419	if (locks_in_grace(net) && open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS)
 420		goto out;
 421	status = nfserr_no_grace;
 422	if (!locks_in_grace(net) && open->op_claim_type == NFS4_OPEN_CLAIM_PREVIOUS)
 423		goto out;
 424
 425	switch (open->op_claim_type) {
 426		case NFS4_OPEN_CLAIM_DELEGATE_CUR:
 427		case NFS4_OPEN_CLAIM_NULL:
 428			status = do_open_lookup(rqstp, cstate, open, &resfh);
 429			if (status)
 430				goto out;
 431			break;
 432		case NFS4_OPEN_CLAIM_PREVIOUS:
 433			open->op_openowner->oo_flags |= NFS4_OO_CONFIRMED;
 434			status = nfs4_check_open_reclaim(&open->op_clientid,
 435							 cstate->minorversion,
 436							 nn);
 437			if (status)
 438				goto out;
 
 
 
 439		case NFS4_OPEN_CLAIM_FH:
 440		case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
 441			status = do_open_fhandle(rqstp, cstate, open);
 442			if (status)
 443				goto out;
 444			resfh = &cstate->current_fh;
 445			break;
 446		case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
 447             	case NFS4_OPEN_CLAIM_DELEGATE_PREV:
 448			open->op_openowner->oo_flags |= NFS4_OO_CONFIRMED;
 449			dprintk("NFSD: unsupported OPEN claim type %d\n",
 450				open->op_claim_type);
 451			status = nfserr_notsupp;
 452			goto out;
 453		default:
 454			dprintk("NFSD: Invalid OPEN claim type %d\n",
 455				open->op_claim_type);
 456			status = nfserr_inval;
 457			goto out;
 458	}
 459	/*
 460	 * nfsd4_process_open2() does the actual opening of the file.  If
 461	 * successful, it (1) truncates the file if open->op_truncate was
 462	 * set, (2) sets open->op_stateid, (3) sets open->op_delegation.
 463	 */
 464	status = nfsd4_process_open2(rqstp, resfh, open);
 465	WARN_ON(status && open->op_created);
 
 
 
 
 466out:
 467	if (resfh && resfh != &cstate->current_fh) {
 468		fh_dup2(&cstate->current_fh, resfh);
 469		fh_put(resfh);
 470		kfree(resfh);
 471	}
 472	nfsd4_cleanup_open_state(open, status);
 473	if (open->op_openowner && !nfsd4_has_session(cstate))
 474		cstate->replay_owner = &open->op_openowner->oo_owner;
 475	nfsd4_bump_seqid(cstate, status);
 476	if (!cstate->replay_owner)
 477		nfs4_unlock_state();
 478	return status;
 479}
 480
 481/*
 482 * OPEN is the only seqid-mutating operation whose decoding can fail
 483 * with a seqid-mutating error (specifically, decoding of user names in
 484 * the attributes).  Therefore we have to do some processing to look up
 485 * the stateowner so that we can bump the seqid.
 486 */
 487static __be32 nfsd4_open_omfg(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_op *op)
 488{
 489	struct nfsd4_open *open = (struct nfsd4_open *)&op->u;
 490
 491	if (!seqid_mutating_err(ntohl(op->status)))
 492		return op->status;
 493	if (nfsd4_has_session(cstate))
 494		return op->status;
 495	open->op_xdr_error = op->status;
 496	return nfsd4_open(rqstp, cstate, open);
 497}
 498
 499/*
 500 * filehandle-manipulating ops.
 501 */
 502static __be32
 503nfsd4_getfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 504	    struct svc_fh **getfh)
 505{
 506	if (!cstate->current_fh.fh_dentry)
 507		return nfserr_nofilehandle;
 508
 509	*getfh = &cstate->current_fh;
 510	return nfs_ok;
 511}
 512
 513static __be32
 514nfsd4_putfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 515	    struct nfsd4_putfh *putfh)
 516{
 
 
 
 517	fh_put(&cstate->current_fh);
 518	cstate->current_fh.fh_handle.fh_size = putfh->pf_fhlen;
 519	memcpy(&cstate->current_fh.fh_handle.fh_base, putfh->pf_fhval,
 520	       putfh->pf_fhlen);
 521	return fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_BYPASS_GSS);
 
 
 
 
 
 
 
 522}
 523
 524static __be32
 525nfsd4_putrootfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 526		void *arg)
 527{
 528	__be32 status;
 529
 530	fh_put(&cstate->current_fh);
 531	status = exp_pseudoroot(rqstp, &cstate->current_fh);
 532	return status;
 533}
 534
 535static __be32
 536nfsd4_restorefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 537		void *arg)
 538{
 539	if (!cstate->save_fh.fh_dentry)
 540		return nfserr_restorefh;
 541
 542	fh_dup2(&cstate->current_fh, &cstate->save_fh);
 543	if (HAS_STATE_ID(cstate, SAVED_STATE_ID_FLAG)) {
 544		memcpy(&cstate->current_stateid, &cstate->save_stateid, sizeof(stateid_t));
 545		SET_STATE_ID(cstate, CURRENT_STATE_ID_FLAG);
 546	}
 547	return nfs_ok;
 548}
 549
 550static __be32
 551nfsd4_savefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 552	     void *arg)
 553{
 554	if (!cstate->current_fh.fh_dentry)
 555		return nfserr_nofilehandle;
 556
 557	fh_dup2(&cstate->save_fh, &cstate->current_fh);
 558	if (HAS_STATE_ID(cstate, CURRENT_STATE_ID_FLAG)) {
 559		memcpy(&cstate->save_stateid, &cstate->current_stateid, sizeof(stateid_t));
 560		SET_STATE_ID(cstate, SAVED_STATE_ID_FLAG);
 561	}
 562	return nfs_ok;
 563}
 564
 565/*
 566 * misc nfsv4 ops
 567 */
 568static __be32
 569nfsd4_access(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 570	     struct nfsd4_access *access)
 571{
 572	if (access->ac_req_access & ~NFS3_ACCESS_FULL)
 
 
 
 
 
 
 
 
 573		return nfserr_inval;
 574
 575	access->ac_resp_access = access->ac_req_access;
 576	return nfsd_access(rqstp, &cstate->current_fh, &access->ac_resp_access,
 577			   &access->ac_supported);
 578}
 579
 580static void gen_boot_verifier(nfs4_verifier *verifier, struct net *net)
 581{
 582	__be32 verf[2];
 583	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
 
 584
 585	verf[0] = (__be32)nn->nfssvc_boot.tv_sec;
 586	verf[1] = (__be32)nn->nfssvc_boot.tv_usec;
 587	memcpy(verifier->data, verf, sizeof(verifier->data));
 588}
 589
 590static __be32
 591nfsd4_commit(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 592	     struct nfsd4_commit *commit)
 593{
 594	gen_boot_verifier(&commit->co_verf, SVC_NET(rqstp));
 
 595	return nfsd_commit(rqstp, &cstate->current_fh, commit->co_offset,
 596			     commit->co_count);
 
 597}
 598
 599static __be32
 600nfsd4_create(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 601	     struct nfsd4_create *create)
 602{
 
 603	struct svc_fh resfh;
 604	__be32 status;
 605	dev_t rdev;
 606
 607	fh_init(&resfh, NFS4_FHSIZE);
 608
 609	status = fh_verify(rqstp, &cstate->current_fh, S_IFDIR,
 610			   NFSD_MAY_CREATE);
 611	if (status)
 612		return status;
 613
 614	status = check_attr_support(rqstp, cstate, create->cr_bmval,
 615				    nfsd_attrmask);
 616	if (status)
 617		return status;
 618
 
 619	switch (create->cr_type) {
 620	case NF4LNK:
 621		/* ugh! we have to null-terminate the linktext, or
 622		 * vfs_symlink() will choke.  it is always safe to
 623		 * null-terminate by brute force, since at worst we
 624		 * will overwrite the first byte of the create namelen
 625		 * in the XDR buffer, which has already been extracted
 626		 * during XDR decode.
 627		 */
 628		create->cr_linkname[create->cr_linklen] = 0;
 629
 630		status = nfsd_symlink(rqstp, &cstate->current_fh,
 631				      create->cr_name, create->cr_namelen,
 632				      create->cr_linkname, create->cr_linklen,
 633				      &resfh, &create->cr_iattr);
 634		break;
 635
 636	case NF4BLK:
 
 637		rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
 638		if (MAJOR(rdev) != create->cr_specdata1 ||
 639		    MINOR(rdev) != create->cr_specdata2)
 640			return nfserr_inval;
 641		status = nfsd_create(rqstp, &cstate->current_fh,
 642				     create->cr_name, create->cr_namelen,
 643				     &create->cr_iattr, S_IFBLK, rdev, &resfh);
 644		break;
 645
 646	case NF4CHR:
 
 647		rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
 648		if (MAJOR(rdev) != create->cr_specdata1 ||
 649		    MINOR(rdev) != create->cr_specdata2)
 650			return nfserr_inval;
 651		status = nfsd_create(rqstp, &cstate->current_fh,
 652				     create->cr_name, create->cr_namelen,
 653				     &create->cr_iattr,S_IFCHR, rdev, &resfh);
 654		break;
 655
 656	case NF4SOCK:
 657		status = nfsd_create(rqstp, &cstate->current_fh,
 658				     create->cr_name, create->cr_namelen,
 659				     &create->cr_iattr, S_IFSOCK, 0, &resfh);
 660		break;
 661
 662	case NF4FIFO:
 663		status = nfsd_create(rqstp, &cstate->current_fh,
 664				     create->cr_name, create->cr_namelen,
 665				     &create->cr_iattr, S_IFIFO, 0, &resfh);
 666		break;
 667
 668	case NF4DIR:
 669		create->cr_iattr.ia_valid &= ~ATTR_SIZE;
 670		status = nfsd_create(rqstp, &cstate->current_fh,
 671				     create->cr_name, create->cr_namelen,
 672				     &create->cr_iattr, S_IFDIR, 0, &resfh);
 673		break;
 674
 675	default:
 676		status = nfserr_badtype;
 677	}
 678
 679	if (status)
 680		goto out;
 681
 682	if (create->cr_label.len)
 683		nfsd4_security_inode_setsecctx(&resfh, &create->cr_label, create->cr_bmval);
 684
 685	if (create->cr_acl != NULL)
 686		do_set_nfs4_acl(rqstp, &resfh, create->cr_acl,
 687				create->cr_bmval);
 688
 689	fh_unlock(&cstate->current_fh);
 690	set_change_info(&create->cr_cinfo, &cstate->current_fh);
 691	fh_dup2(&cstate->current_fh, &resfh);
 692out:
 693	fh_put(&resfh);
 
 
 694	return status;
 695}
 696
 697static __be32
 698nfsd4_getattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 699	      struct nfsd4_getattr *getattr)
 700{
 
 701	__be32 status;
 702
 703	status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
 704	if (status)
 705		return status;
 706
 707	if (getattr->ga_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
 708		return nfserr_inval;
 709
 710	getattr->ga_bmval[0] &= nfsd_suppattrs0(cstate->minorversion);
 711	getattr->ga_bmval[1] &= nfsd_suppattrs1(cstate->minorversion);
 712	getattr->ga_bmval[2] &= nfsd_suppattrs2(cstate->minorversion);
 713
 714	getattr->ga_fhp = &cstate->current_fh;
 715	return nfs_ok;
 716}
 717
 718static __be32
 719nfsd4_link(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 720	   struct nfsd4_link *link)
 721{
 722	__be32 status = nfserr_nofilehandle;
 
 723
 724	if (!cstate->save_fh.fh_dentry)
 725		return status;
 726	status = nfsd_link(rqstp, &cstate->current_fh,
 727			   link->li_name, link->li_namelen, &cstate->save_fh);
 728	if (!status)
 729		set_change_info(&link->li_cinfo, &cstate->current_fh);
 730	return status;
 731}
 732
 733static __be32 nfsd4_do_lookupp(struct svc_rqst *rqstp, struct svc_fh *fh)
 734{
 735	struct svc_fh tmp_fh;
 736	__be32 ret;
 737
 738	fh_init(&tmp_fh, NFS4_FHSIZE);
 739	ret = exp_pseudoroot(rqstp, &tmp_fh);
 740	if (ret)
 741		return ret;
 742	if (tmp_fh.fh_dentry == fh->fh_dentry) {
 743		fh_put(&tmp_fh);
 744		return nfserr_noent;
 745	}
 746	fh_put(&tmp_fh);
 747	return nfsd_lookup(rqstp, fh, "..", 2, fh);
 748}
 749
 750static __be32
 751nfsd4_lookupp(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 752	      void *arg)
 753{
 754	return nfsd4_do_lookupp(rqstp, &cstate->current_fh);
 755}
 756
 757static __be32
 758nfsd4_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 759	     struct nfsd4_lookup *lookup)
 760{
 761	return nfsd_lookup(rqstp, &cstate->current_fh,
 762			   lookup->lo_name, lookup->lo_len,
 763			   &cstate->current_fh);
 764}
 765
 766static __be32
 767nfsd4_read(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 768	   struct nfsd4_read *read)
 769{
 
 770	__be32 status;
 771
 772	/* no need to check permission - this will be done in nfsd_read() */
 773
 774	read->rd_filp = NULL;
 775	if (read->rd_offset >= OFFSET_MAX)
 776		return nfserr_inval;
 777
 
 
 
 778	/*
 779	 * If we do a zero copy read, then a client will see read data
 780	 * that reflects the state of the file *after* performing the
 781	 * following compound.
 782	 *
 783	 * To ensure proper ordering, we therefore turn off zero copy if
 784	 * the client wants us to do more in this compound:
 785	 */
 786	if (!nfsd4_last_compound_op(rqstp))
 787		rqstp->rq_splice_ok = false;
 788
 789	nfs4_lock_state();
 790	/* check stateid */
 791	if ((status = nfs4_preprocess_stateid_op(SVC_NET(rqstp),
 792						 cstate, &read->rd_stateid,
 793						 RD_STATE, &read->rd_filp))) {
 
 794		dprintk("NFSD: nfsd4_read: couldn't process stateid!\n");
 795		goto out;
 796	}
 797	if (read->rd_filp)
 798		get_file(read->rd_filp);
 799	status = nfs_ok;
 800out:
 801	nfs4_unlock_state();
 802	read->rd_rqstp = rqstp;
 803	read->rd_fhp = &cstate->current_fh;
 804	return status;
 805}
 806
 
 
 
 
 
 
 
 
 
 
 807static __be32
 808nfsd4_readdir(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 809	      struct nfsd4_readdir *readdir)
 810{
 
 811	u64 cookie = readdir->rd_cookie;
 812	static const nfs4_verifier zeroverf;
 813
 814	/* no need to check permission - this will be done in nfsd_readdir() */
 815
 816	if (readdir->rd_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
 817		return nfserr_inval;
 818
 819	readdir->rd_bmval[0] &= nfsd_suppattrs0(cstate->minorversion);
 820	readdir->rd_bmval[1] &= nfsd_suppattrs1(cstate->minorversion);
 821	readdir->rd_bmval[2] &= nfsd_suppattrs2(cstate->minorversion);
 822
 823	if ((cookie == 1) || (cookie == 2) ||
 824	    (cookie == 0 && memcmp(readdir->rd_verf.data, zeroverf.data, NFS4_VERIFIER_SIZE)))
 825		return nfserr_bad_cookie;
 826
 827	readdir->rd_rqstp = rqstp;
 828	readdir->rd_fhp = &cstate->current_fh;
 829	return nfs_ok;
 830}
 831
 832static __be32
 833nfsd4_readlink(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 834	       struct nfsd4_readlink *readlink)
 835{
 836	readlink->rl_rqstp = rqstp;
 837	readlink->rl_fhp = &cstate->current_fh;
 838	return nfs_ok;
 839}
 840
 841static __be32
 842nfsd4_remove(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 843	     struct nfsd4_remove *remove)
 844{
 
 845	__be32 status;
 846
 847	if (locks_in_grace(SVC_NET(rqstp)))
 848		return nfserr_grace;
 849	status = nfsd_unlink(rqstp, &cstate->current_fh, 0,
 850			     remove->rm_name, remove->rm_namelen);
 851	if (!status) {
 852		fh_unlock(&cstate->current_fh);
 853		set_change_info(&remove->rm_cinfo, &cstate->current_fh);
 854	}
 855	return status;
 856}
 857
 858static __be32
 859nfsd4_rename(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 860	     struct nfsd4_rename *rename)
 861{
 862	__be32 status = nfserr_nofilehandle;
 
 863
 864	if (!cstate->save_fh.fh_dentry)
 865		return status;
 866	if (locks_in_grace(SVC_NET(rqstp)) &&
 867		!(cstate->save_fh.fh_export->ex_flags & NFSEXP_NOSUBTREECHECK))
 868		return nfserr_grace;
 869	status = nfsd_rename(rqstp, &cstate->save_fh, rename->rn_sname,
 870			     rename->rn_snamelen, &cstate->current_fh,
 871			     rename->rn_tname, rename->rn_tnamelen);
 872	if (status)
 873		return status;
 874	set_change_info(&rename->rn_sinfo, &cstate->current_fh);
 875	set_change_info(&rename->rn_tinfo, &cstate->save_fh);
 876	return nfs_ok;
 877}
 878
 879static __be32
 880nfsd4_secinfo(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 881	      struct nfsd4_secinfo *secinfo)
 882{
 883	struct svc_fh resfh;
 884	struct svc_export *exp;
 885	struct dentry *dentry;
 886	__be32 err;
 887
 888	fh_init(&resfh, NFS4_FHSIZE);
 889	err = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_EXEC);
 890	if (err)
 891		return err;
 892	err = nfsd_lookup_dentry(rqstp, &cstate->current_fh,
 893				    secinfo->si_name, secinfo->si_namelen,
 894				    &exp, &dentry);
 895	if (err)
 896		return err;
 897	if (dentry->d_inode == NULL) {
 
 898		exp_put(exp);
 899		err = nfserr_noent;
 900	} else
 901		secinfo->si_exp = exp;
 902	dput(dentry);
 903	if (cstate->minorversion)
 904		/* See rfc 5661 section 2.6.3.1.1.8 */
 905		fh_put(&cstate->current_fh);
 906	return err;
 907}
 908
 909static __be32
 910nfsd4_secinfo_no_name(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 911	      struct nfsd4_secinfo_no_name *sin)
 912{
 913	__be32 err;
 914
 915	switch (sin->sin_style) {
 916	case NFS4_SECINFO_STYLE4_CURRENT_FH:
 917		break;
 918	case NFS4_SECINFO_STYLE4_PARENT:
 919		err = nfsd4_do_lookupp(rqstp, &cstate->current_fh);
 920		if (err)
 921			return err;
 922		break;
 923	default:
 924		return nfserr_inval;
 925	}
 926	exp_get(cstate->current_fh.fh_export);
 927	sin->sin_exp = cstate->current_fh.fh_export;
 928	fh_put(&cstate->current_fh);
 929	return nfs_ok;
 930}
 931
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 932static __be32
 933nfsd4_setattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 934	      struct nfsd4_setattr *setattr)
 935{
 
 936	__be32 status = nfs_ok;
 937	int err;
 938
 939	if (setattr->sa_iattr.ia_valid & ATTR_SIZE) {
 940		nfs4_lock_state();
 941		status = nfs4_preprocess_stateid_op(SVC_NET(rqstp), cstate,
 942			&setattr->sa_stateid, WR_STATE, NULL);
 943		nfs4_unlock_state();
 944		if (status) {
 945			dprintk("NFSD: nfsd4_setattr: couldn't process stateid!\n");
 946			return status;
 947		}
 948	}
 949	err = fh_want_write(&cstate->current_fh);
 950	if (err)
 951		return nfserrno(err);
 952	status = nfs_ok;
 953
 954	status = check_attr_support(rqstp, cstate, setattr->sa_bmval,
 955				    nfsd_attrmask);
 956	if (status)
 957		goto out;
 958
 959	if (setattr->sa_acl != NULL)
 960		status = nfsd4_set_nfs4_acl(rqstp, &cstate->current_fh,
 961					    setattr->sa_acl);
 962	if (status)
 963		goto out;
 964	if (setattr->sa_label.len)
 965		status = nfsd4_set_nfs4_label(rqstp, &cstate->current_fh,
 966				&setattr->sa_label);
 967	if (status)
 968		goto out;
 969	status = nfsd_setattr(rqstp, &cstate->current_fh, &setattr->sa_iattr,
 970				0, (time_t)0);
 971out:
 972	fh_drop_write(&cstate->current_fh);
 973	return status;
 974}
 975
 976static int fill_in_write_vector(struct kvec *vec, struct nfsd4_write *write)
 977{
 978        int i = 1;
 979        int buflen = write->wr_buflen;
 980
 981        vec[0].iov_base = write->wr_head.iov_base;
 982        vec[0].iov_len = min_t(int, buflen, write->wr_head.iov_len);
 983        buflen -= vec[0].iov_len;
 984
 985        while (buflen) {
 986                vec[i].iov_base = page_address(write->wr_pagelist[i - 1]);
 987                vec[i].iov_len = min_t(int, PAGE_SIZE, buflen);
 988                buflen -= vec[i].iov_len;
 989                i++;
 990        }
 991        return i;
 992}
 993
 994static __be32
 995nfsd4_write(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 996	    struct nfsd4_write *write)
 997{
 
 998	stateid_t *stateid = &write->wr_stateid;
 999	struct file *filp = NULL;
1000	__be32 status = nfs_ok;
1001	unsigned long cnt;
1002	int nvecs;
1003
1004	/* no need to check permission - this will be done in nfsd_write() */
1005
1006	if (write->wr_offset >= OFFSET_MAX)
1007		return nfserr_inval;
1008
1009	nfs4_lock_state();
1010	status = nfs4_preprocess_stateid_op(SVC_NET(rqstp),
1011					cstate, stateid, WR_STATE, &filp);
 
 
1012	if (status) {
1013		nfs4_unlock_state();
1014		dprintk("NFSD: nfsd4_write: couldn't process stateid!\n");
1015		return status;
1016	}
1017	if (filp)
1018		get_file(filp);
1019	nfs4_unlock_state();
1020
1021	cnt = write->wr_buflen;
1022	write->wr_how_written = write->wr_stable_how;
1023	gen_boot_verifier(&write->wr_verifier, SVC_NET(rqstp));
1024
1025	nvecs = fill_in_write_vector(rqstp->rq_vec, write);
 
1026	WARN_ON_ONCE(nvecs > ARRAY_SIZE(rqstp->rq_vec));
1027
1028	status =  nfsd_write(rqstp, &cstate->current_fh, filp,
1029			     write->wr_offset, rqstp->rq_vec, nvecs,
1030			     &cnt, &write->wr_how_written);
1031	if (filp)
1032		fput(filp);
1033
1034	write->wr_bytes_written = cnt;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1035
1036	return status;
1037}
1038
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1039/* This routine never returns NFS_OK!  If there are no other errors, it
1040 * will return NFSERR_SAME or NFSERR_NOT_SAME depending on whether the
1041 * attributes matched.  VERIFY is implemented by mapping NFSERR_SAME
1042 * to NFS_OK after the call; NVERIFY by mapping NFSERR_NOT_SAME to NFS_OK.
1043 */
1044static __be32
1045_nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1046	     struct nfsd4_verify *verify)
1047{
1048	__be32 *buf, *p;
1049	int count;
1050	__be32 status;
1051
1052	status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
1053	if (status)
1054		return status;
1055
1056	status = check_attr_support(rqstp, cstate, verify->ve_bmval, NULL);
1057	if (status)
1058		return status;
1059
1060	if ((verify->ve_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)
1061	    || (verify->ve_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1))
1062		return nfserr_inval;
1063	if (verify->ve_attrlen & 3)
1064		return nfserr_inval;
1065
1066	/* count in words:
1067	 *   bitmap_len(1) + bitmap(2) + attr_len(1) = 4
1068	 */
1069	count = 4 + (verify->ve_attrlen >> 2);
1070	buf = kmalloc(count << 2, GFP_KERNEL);
1071	if (!buf)
1072		return nfserr_jukebox;
1073
1074	p = buf;
1075	status = nfsd4_encode_fattr(&cstate->current_fh,
1076				    cstate->current_fh.fh_export,
1077				    cstate->current_fh.fh_dentry, &p,
1078				    count, verify->ve_bmval,
1079				    rqstp, 0);
1080	/*
1081	 * If nfsd4_encode_fattr() ran out of space, assume that's because
1082	 * the attributes are longer (hence different) than those given:
1083	 */
1084	if (status == nfserr_resource)
1085		status = nfserr_not_same;
1086	if (status)
1087		goto out_kfree;
1088
1089	/* skip bitmap */
1090	p = buf + 1 + ntohl(buf[0]);
1091	status = nfserr_not_same;
1092	if (ntohl(*p++) != verify->ve_attrlen)
1093		goto out_kfree;
1094	if (!memcmp(p, verify->ve_attrval, verify->ve_attrlen))
1095		status = nfserr_same;
1096
1097out_kfree:
1098	kfree(buf);
1099	return status;
1100}
1101
1102static __be32
1103nfsd4_nverify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1104	      struct nfsd4_verify *verify)
1105{
1106	__be32 status;
1107
1108	status = _nfsd4_verify(rqstp, cstate, verify);
1109	return status == nfserr_not_same ? nfs_ok : status;
1110}
1111
1112static __be32
1113nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1114	     struct nfsd4_verify *verify)
1115{
1116	__be32 status;
1117
1118	status = _nfsd4_verify(rqstp, cstate, verify);
1119	return status == nfserr_same ? nfs_ok : status;
1120}
1121
1122/*
1123 * NULL call.
1124 */
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1125static __be32
1126nfsd4_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
 
1127{
1128	return nfs_ok;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1129}
1130
1131static inline void nfsd4_increment_op_stats(u32 opnum)
 
1132{
1133	if (opnum >= FIRST_NFS4_OP && opnum <= LAST_NFS4_OP)
1134		nfsdstats.nfs4_opcount[opnum]++;
1135}
1136
1137typedef __be32(*nfsd4op_func)(struct svc_rqst *, struct nfsd4_compound_state *,
1138			      void *);
1139typedef u32(*nfsd4op_rsize)(struct svc_rqst *, struct nfsd4_op *op);
1140typedef void(*stateid_setter)(struct nfsd4_compound_state *, void *);
1141typedef void(*stateid_getter)(struct nfsd4_compound_state *, void *);
1142
1143enum nfsd4_op_flags {
1144	ALLOWED_WITHOUT_FH = 1 << 0,	/* No current filehandle required */
1145	ALLOWED_ON_ABSENT_FS = 1 << 1,	/* ops processed on absent fs */
1146	ALLOWED_AS_FIRST_OP = 1 << 2,	/* ops reqired first in compound */
1147	/* For rfc 5661 section 2.6.3.1.1: */
1148	OP_HANDLES_WRONGSEC = 1 << 3,
1149	OP_IS_PUTFH_LIKE = 1 << 4,
1150	/*
1151	 * These are the ops whose result size we estimate before
1152	 * encoding, to avoid performing an op then not being able to
1153	 * respond or cache a response.  This includes writes and setattrs
1154	 * as well as the operations usually called "nonidempotent":
1155	 */
1156	OP_MODIFIES_SOMETHING = 1 << 5,
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1157	/*
1158	 * Cache compounds containing these ops in the xid-based drc:
1159	 * We use the DRC for compounds containing non-idempotent
1160	 * operations, *except* those that are 4.1-specific (since
1161	 * sessions provide their own EOS), and except for stateful
1162	 * operations other than setclientid and setclientid_confirm
1163	 * (since sequence numbers provide EOS for open, lock, etc in
1164	 * the v4.0 case).
 
 
1165	 */
1166	OP_CACHEME = 1 << 6,
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1167	/*
1168	 * These are ops which clear current state id.
 
1169	 */
1170	OP_CLEAR_STATEID = 1 << 7,
1171};
 
1172
1173struct nfsd4_operation {
1174	nfsd4op_func op_func;
1175	u32 op_flags;
1176	char *op_name;
1177	/* Try to get response size before operation */
1178	nfsd4op_rsize op_rsize_bop;
1179	stateid_getter op_get_currentstateid;
1180	stateid_setter op_set_currentstateid;
1181};
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1182
1183static struct nfsd4_operation nfsd4_ops[];
 
 
 
 
 
 
1184
1185#ifdef NFSD_DEBUG
1186static const char *nfsd4_op_name(unsigned opnum);
1187#endif
1188
1189/*
1190 * Enforce NFSv4.1 COMPOUND ordering rules:
1191 *
1192 * Also note, enforced elsewhere:
1193 *	- SEQUENCE other than as first op results in
1194 *	  NFS4ERR_SEQUENCE_POS. (Enforced in nfsd4_sequence().)
1195 *	- BIND_CONN_TO_SESSION must be the only op in its compound.
1196 *	  (Enforced in nfsd4_bind_conn_to_session().)
1197 *	- DESTROY_SESSION must be the final operation in a compound, if
1198 *	  sessionid's in SEQUENCE and DESTROY_SESSION are the same.
1199 *	  (Enforced in nfsd4_destroy_session().)
1200 */
1201static __be32 nfs41_check_op_ordering(struct nfsd4_compoundargs *args)
1202{
1203	struct nfsd4_op *op = &args->ops[0];
1204
1205	/* These ordering requirements don't apply to NFSv4.0: */
1206	if (args->minorversion == 0)
1207		return nfs_ok;
1208	/* This is weird, but OK, not our problem: */
1209	if (args->opcnt == 0)
1210		return nfs_ok;
1211	if (op->status == nfserr_op_illegal)
1212		return nfs_ok;
1213	if (!(nfsd4_ops[op->opnum].op_flags & ALLOWED_AS_FIRST_OP))
1214		return nfserr_op_not_in_session;
1215	if (op->opnum == OP_SEQUENCE)
1216		return nfs_ok;
 
 
 
 
 
1217	if (args->opcnt != 1)
1218		return nfserr_not_only_op;
1219	return nfs_ok;
1220}
1221
1222static inline struct nfsd4_operation *OPDESC(struct nfsd4_op *op)
1223{
1224	return &nfsd4_ops[op->opnum];
1225}
1226
1227bool nfsd4_cache_this_op(struct nfsd4_op *op)
1228{
 
 
1229	return OPDESC(op)->op_flags & OP_CACHEME;
1230}
1231
1232static bool need_wrongsec_check(struct svc_rqst *rqstp)
1233{
1234	struct nfsd4_compoundres *resp = rqstp->rq_resp;
1235	struct nfsd4_compoundargs *argp = rqstp->rq_argp;
1236	struct nfsd4_op *this = &argp->ops[resp->opcnt - 1];
1237	struct nfsd4_op *next = &argp->ops[resp->opcnt];
1238	struct nfsd4_operation *thisd;
1239	struct nfsd4_operation *nextd;
1240
1241	thisd = OPDESC(this);
1242	/*
1243	 * Most ops check wronsec on our own; only the putfh-like ops
1244	 * have special rules.
1245	 */
1246	if (!(thisd->op_flags & OP_IS_PUTFH_LIKE))
1247		return false;
1248	/*
1249	 * rfc 5661 2.6.3.1.1.6: don't bother erroring out a
1250	 * put-filehandle operation if we're not going to use the
1251	 * result:
1252	 */
1253	if (argp->opcnt == resp->opcnt)
1254		return false;
1255
 
1256	nextd = OPDESC(next);
1257	/*
1258	 * Rest of 2.6.3.1.1: certain operations will return WRONGSEC
1259	 * errors themselves as necessary; others should check for them
1260	 * now:
1261	 */
1262	return !(nextd->op_flags & OP_HANDLES_WRONGSEC);
1263}
1264
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1265/*
1266 * COMPOUND call.
1267 */
1268static __be32
1269nfsd4_proc_compound(struct svc_rqst *rqstp,
1270		    struct nfsd4_compoundargs *args,
1271		    struct nfsd4_compoundres *resp)
1272{
 
 
1273	struct nfsd4_op	*op;
1274	struct nfsd4_operation *opdesc;
1275	struct nfsd4_compound_state *cstate = &resp->cstate;
1276	struct svc_fh *current_fh = &cstate->current_fh;
1277	struct svc_fh *save_fh = &cstate->save_fh;
1278	int		slack_bytes;
1279	u32		plen = 0;
1280	__be32		status;
1281
1282	resp->xbuf = &rqstp->rq_res;
1283	resp->p = rqstp->rq_res.head[0].iov_base +
1284						rqstp->rq_res.head[0].iov_len;
1285	resp->tagp = resp->p;
 
 
1286	/* reserve space for: taglen, tag, and opcnt */
1287	resp->p += 2 + XDR_QUADLEN(args->taglen);
1288	resp->end = rqstp->rq_res.head[0].iov_base + PAGE_SIZE;
1289	resp->taglen = args->taglen;
1290	resp->tag = args->tag;
1291	resp->opcnt = 0;
1292	resp->rqstp = rqstp;
1293	cstate->minorversion = args->minorversion;
1294	cstate->replay_owner = NULL;
1295	cstate->session = NULL;
1296	fh_init(current_fh, NFS4_FHSIZE);
1297	fh_init(save_fh, NFS4_FHSIZE);
1298	/*
1299	 * Don't use the deferral mechanism for NFSv4; compounds make it
1300	 * too hard to avoid non-idempotency problems.
1301	 */
1302	rqstp->rq_usedeferral = 0;
1303
1304	/*
1305	 * According to RFC3010, this takes precedence over all other errors.
1306	 */
1307	status = nfserr_minor_vers_mismatch;
1308	if (nfsd_minorversion(args->minorversion, NFSD_TEST) <= 0)
 
 
 
1309		goto out;
1310
1311	status = nfs41_check_op_ordering(args);
1312	if (status) {
1313		op = &args->ops[0];
1314		op->status = status;
 
1315		goto encode_op;
1316	}
 
1317
 
 
 
1318	while (!status && resp->opcnt < args->opcnt) {
1319		op = &args->ops[resp->opcnt++];
1320
1321		dprintk("nfsv4 compound op #%d/%d: %d (%s)\n",
1322			resp->opcnt, args->opcnt, op->opnum,
1323			nfsd4_op_name(op->opnum));
1324		/*
1325		 * The XDR decode routines may have pre-set op->status;
1326		 * for example, if there is a miscellaneous XDR error
1327		 * it will be set to nfserr_bad_xdr.
1328		 */
1329		if (op->status) {
1330			if (op->opnum == OP_OPEN)
1331				op->status = nfsd4_open_omfg(rqstp, cstate, op);
1332			goto encode_op;
1333		}
1334
1335		/* We must be able to encode a successful response to
1336		 * this operation, with enough room left over to encode a
1337		 * failed response to the next operation.  If we don't
1338		 * have enough room, fail with ERR_RESOURCE.
1339		 */
1340		slack_bytes = (char *)resp->end - (char *)resp->p;
1341		if (slack_bytes < COMPOUND_SLACK_SPACE
1342				+ COMPOUND_ERR_SLACK_SPACE) {
1343			BUG_ON(slack_bytes < COMPOUND_ERR_SLACK_SPACE);
1344			op->status = nfserr_resource;
1345			goto encode_op;
1346		}
1347
1348		opdesc = OPDESC(op);
1349
1350		if (!current_fh->fh_dentry) {
1351			if (!(opdesc->op_flags & ALLOWED_WITHOUT_FH)) {
1352				op->status = nfserr_nofilehandle;
1353				goto encode_op;
1354			}
1355		} else if (current_fh->fh_export->ex_fslocs.migrated &&
1356			  !(opdesc->op_flags & ALLOWED_ON_ABSENT_FS)) {
 
1357			op->status = nfserr_moved;
1358			goto encode_op;
1359		}
1360
1361		fh_clear_wcc(current_fh);
1362
1363		/* If op is non-idempotent */
1364		if (opdesc->op_flags & OP_MODIFIES_SOMETHING) {
1365			plen = opdesc->op_rsize_bop(rqstp, op);
 
 
 
 
1366			/*
1367			 * If there's still another operation, make sure
1368			 * we'll have space to at least encode an error:
1369			 */
1370			if (resp->opcnt < args->opcnt)
1371				plen += COMPOUND_ERR_SLACK_SPACE;
1372			op->status = nfsd4_check_resp_size(resp, plen);
1373		}
1374
1375		if (op->status)
1376			goto encode_op;
1377
1378		if (opdesc->op_get_currentstateid)
1379			opdesc->op_get_currentstateid(cstate, &op->u);
1380		op->status = opdesc->op_func(rqstp, cstate, &op->u);
1381
 
 
 
 
 
 
1382		if (!op->status) {
1383			if (opdesc->op_set_currentstateid)
1384				opdesc->op_set_currentstateid(cstate, &op->u);
1385
1386			if (opdesc->op_flags & OP_CLEAR_STATEID)
1387				clear_current_stateid(cstate);
1388
1389			if (need_wrongsec_check(rqstp))
 
1390				op->status = check_nfsd_access(current_fh->fh_export, rqstp);
1391		}
1392
1393encode_op:
1394		/* Only from SEQUENCE */
1395		if (cstate->status == nfserr_replay_cache) {
1396			dprintk("%s NFS4.1 replay from cache\n", __func__);
1397			status = op->status;
1398			goto out;
1399		}
1400		if (op->status == nfserr_replay_me) {
1401			op->replay = &cstate->replay_owner->so_replay;
1402			nfsd4_encode_replay(resp, op);
1403			status = op->status = op->replay->rp_status;
1404		} else {
1405			nfsd4_encode_operation(resp, op);
1406			status = op->status;
1407		}
1408
1409		dprintk("nfsv4 compound op %p opcnt %d #%d: %d: status %d\n",
1410			args->ops, args->opcnt, resp->opcnt, op->opnum,
1411			be32_to_cpu(status));
1412
1413		if (cstate->replay_owner) {
1414			nfs4_unlock_state();
1415			cstate->replay_owner = NULL;
1416		}
1417		/* XXX Ugh, we need to get rid of this kind of special case: */
1418		if (op->opnum == OP_READ && op->u.read.rd_filp)
1419			fput(op->u.read.rd_filp);
1420
 
1421		nfsd4_increment_op_stats(op->opnum);
1422	}
1423
1424	cstate->status = status;
1425	fh_put(current_fh);
1426	fh_put(save_fh);
1427	BUG_ON(cstate->replay_owner);
1428out:
 
1429	/* Reset deferral mechanism for RPC deferrals */
1430	rqstp->rq_usedeferral = 1;
1431	dprintk("nfsv4 compound returned %d\n", ntohl(status));
1432	return status;
1433}
1434
1435#define op_encode_hdr_size		(2)
1436#define op_encode_stateid_maxsz		(XDR_QUADLEN(NFS4_STATEID_SIZE))
1437#define op_encode_verifier_maxsz	(XDR_QUADLEN(NFS4_VERIFIER_SIZE))
1438#define op_encode_change_info_maxsz	(5)
1439#define nfs4_fattr_bitmap_maxsz		(4)
1440
1441#define op_encode_lockowner_maxsz	(1 + XDR_QUADLEN(IDMAP_NAMESZ))
 
1442#define op_encode_lock_denied_maxsz	(8 + op_encode_lockowner_maxsz)
1443
1444#define nfs4_owner_maxsz		(1 + XDR_QUADLEN(IDMAP_NAMESZ))
1445
1446#define op_encode_ace_maxsz		(3 + nfs4_owner_maxsz)
1447#define op_encode_delegation_maxsz	(1 + op_encode_stateid_maxsz + 1 + \
1448					 op_encode_ace_maxsz)
1449
1450#define op_encode_channel_attrs_maxsz	(6 + 1 + 1)
1451
1452static inline u32 nfsd4_only_status_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1453{
1454	return (op_encode_hdr_size) * sizeof(__be32);
1455}
1456
1457static inline u32 nfsd4_status_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1458{
1459	return (op_encode_hdr_size + op_encode_stateid_maxsz)* sizeof(__be32);
1460}
1461
 
 
 
 
 
 
1462static inline u32 nfsd4_commit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1463{
1464	return (op_encode_hdr_size + op_encode_verifier_maxsz) * sizeof(__be32);
1465}
1466
1467static inline u32 nfsd4_create_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1468{
1469	return (op_encode_hdr_size + op_encode_change_info_maxsz
1470		+ nfs4_fattr_bitmap_maxsz) * sizeof(__be32);
1471}
1472
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1473static inline u32 nfsd4_link_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1474{
1475	return (op_encode_hdr_size + op_encode_change_info_maxsz)
1476		* sizeof(__be32);
1477}
1478
1479static inline u32 nfsd4_lock_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1480{
1481	return (op_encode_hdr_size + op_encode_lock_denied_maxsz)
1482		* sizeof(__be32);
1483}
1484
1485static inline u32 nfsd4_open_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1486{
1487	return (op_encode_hdr_size + op_encode_stateid_maxsz
1488		+ op_encode_change_info_maxsz + 1
1489		+ nfs4_fattr_bitmap_maxsz
1490		+ op_encode_delegation_maxsz) * sizeof(__be32);
1491}
1492
1493static inline u32 nfsd4_read_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1494{
1495	u32 maxcount = 0, rlen = 0;
1496
1497	maxcount = svc_max_payload(rqstp);
1498	rlen = op->u.read.rd_length;
1499
1500	if (rlen > maxcount)
1501		rlen = maxcount;
 
 
 
 
 
 
 
 
 
 
 
1502
1503	return (op_encode_hdr_size + 2) * sizeof(__be32) + rlen;
1504}
1505
1506static inline u32 nfsd4_readdir_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1507{
1508	u32 rlen = op->u.readdir.rd_maxcount;
1509
1510	if (rlen > PAGE_SIZE)
1511		rlen = PAGE_SIZE;
1512
1513	return (op_encode_hdr_size + op_encode_verifier_maxsz)
1514		 * sizeof(__be32) + rlen;
 
 
 
 
 
1515}
1516
1517static inline u32 nfsd4_remove_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1518{
1519	return (op_encode_hdr_size + op_encode_change_info_maxsz)
1520		* sizeof(__be32);
1521}
1522
1523static inline u32 nfsd4_rename_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1524{
1525	return (op_encode_hdr_size + op_encode_change_info_maxsz
1526		+ op_encode_change_info_maxsz) * sizeof(__be32);
1527}
1528
 
 
 
 
 
 
 
 
 
 
 
 
 
1529static inline u32 nfsd4_setattr_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1530{
1531	return (op_encode_hdr_size + nfs4_fattr_bitmap_maxsz) * sizeof(__be32);
1532}
1533
 
 
 
 
 
 
1534static inline u32 nfsd4_setclientid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1535{
1536	return (op_encode_hdr_size + 2 + XDR_QUADLEN(NFS4_VERIFIER_SIZE)) *
1537								sizeof(__be32);
1538}
1539
1540static inline u32 nfsd4_write_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1541{
1542	return (op_encode_hdr_size + op_encode_verifier_maxsz) * sizeof(__be32);
1543}
1544
1545static inline u32 nfsd4_exchange_id_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1546{
1547	return (op_encode_hdr_size + 2 + 1 + /* eir_clientid, eir_sequenceid */\
1548		1 + 1 + /* eir_flags, spr_how */\
1549		4 + /* spo_must_enforce & _allow with bitmap */\
1550		2 + /*eir_server_owner.so_minor_id */\
1551		/* eir_server_owner.so_major_id<> */\
1552		XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\
1553		/* eir_server_scope<> */\
1554		XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\
1555		1 + /* eir_server_impl_id array length */\
1556		0 /* ignored eir_server_impl_id contents */) * sizeof(__be32);
1557}
1558
1559static inline u32 nfsd4_bind_conn_to_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1560{
1561	return (op_encode_hdr_size + \
1562		XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* bctsr_sessid */\
1563		2 /* bctsr_dir, use_conn_in_rdma_mode */) * sizeof(__be32);
1564}
1565
1566static inline u32 nfsd4_create_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
1567{
1568	return (op_encode_hdr_size + \
1569		XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* sessionid */\
1570		2 + /* csr_sequence, csr_flags */\
1571		op_encode_channel_attrs_maxsz + \
1572		op_encode_channel_attrs_maxsz) * sizeof(__be32);
1573}
1574
1575static struct nfsd4_operation nfsd4_ops[] = {
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1576	[OP_ACCESS] = {
1577		.op_func = (nfsd4op_func)nfsd4_access,
1578		.op_name = "OP_ACCESS",
 
1579	},
1580	[OP_CLOSE] = {
1581		.op_func = (nfsd4op_func)nfsd4_close,
1582		.op_flags = OP_MODIFIES_SOMETHING,
1583		.op_name = "OP_CLOSE",
1584		.op_rsize_bop = (nfsd4op_rsize)nfsd4_status_stateid_rsize,
1585		.op_get_currentstateid = (stateid_getter)nfsd4_get_closestateid,
1586		.op_set_currentstateid = (stateid_setter)nfsd4_set_closestateid,
1587	},
1588	[OP_COMMIT] = {
1589		.op_func = (nfsd4op_func)nfsd4_commit,
1590		.op_flags = OP_MODIFIES_SOMETHING,
1591		.op_name = "OP_COMMIT",
1592		.op_rsize_bop = (nfsd4op_rsize)nfsd4_commit_rsize,
1593	},
1594	[OP_CREATE] = {
1595		.op_func = (nfsd4op_func)nfsd4_create,
1596		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME | OP_CLEAR_STATEID,
1597		.op_name = "OP_CREATE",
1598		.op_rsize_bop = (nfsd4op_rsize)nfsd4_create_rsize,
1599	},
1600	[OP_DELEGRETURN] = {
1601		.op_func = (nfsd4op_func)nfsd4_delegreturn,
1602		.op_flags = OP_MODIFIES_SOMETHING,
1603		.op_name = "OP_DELEGRETURN",
1604		.op_rsize_bop = nfsd4_only_status_rsize,
1605		.op_get_currentstateid = (stateid_getter)nfsd4_get_delegreturnstateid,
1606	},
1607	[OP_GETATTR] = {
1608		.op_func = (nfsd4op_func)nfsd4_getattr,
1609		.op_flags = ALLOWED_ON_ABSENT_FS,
 
1610		.op_name = "OP_GETATTR",
1611	},
1612	[OP_GETFH] = {
1613		.op_func = (nfsd4op_func)nfsd4_getfh,
1614		.op_name = "OP_GETFH",
 
1615	},
1616	[OP_LINK] = {
1617		.op_func = (nfsd4op_func)nfsd4_link,
1618		.op_flags = ALLOWED_ON_ABSENT_FS | OP_MODIFIES_SOMETHING
1619				| OP_CACHEME,
1620		.op_name = "OP_LINK",
1621		.op_rsize_bop = (nfsd4op_rsize)nfsd4_link_rsize,
1622	},
1623	[OP_LOCK] = {
1624		.op_func = (nfsd4op_func)nfsd4_lock,
1625		.op_flags = OP_MODIFIES_SOMETHING,
 
1626		.op_name = "OP_LOCK",
1627		.op_rsize_bop = (nfsd4op_rsize)nfsd4_lock_rsize,
1628		.op_set_currentstateid = (stateid_setter)nfsd4_set_lockstateid,
1629	},
1630	[OP_LOCKT] = {
1631		.op_func = (nfsd4op_func)nfsd4_lockt,
 
1632		.op_name = "OP_LOCKT",
 
1633	},
1634	[OP_LOCKU] = {
1635		.op_func = (nfsd4op_func)nfsd4_locku,
1636		.op_flags = OP_MODIFIES_SOMETHING,
1637		.op_name = "OP_LOCKU",
1638		.op_rsize_bop = (nfsd4op_rsize)nfsd4_status_stateid_rsize,
1639		.op_get_currentstateid = (stateid_getter)nfsd4_get_lockustateid,
1640	},
1641	[OP_LOOKUP] = {
1642		.op_func = (nfsd4op_func)nfsd4_lookup,
1643		.op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID,
1644		.op_name = "OP_LOOKUP",
 
1645	},
1646	[OP_LOOKUPP] = {
1647		.op_func = (nfsd4op_func)nfsd4_lookupp,
1648		.op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID,
1649		.op_name = "OP_LOOKUPP",
 
1650	},
1651	[OP_NVERIFY] = {
1652		.op_func = (nfsd4op_func)nfsd4_nverify,
1653		.op_name = "OP_NVERIFY",
 
1654	},
1655	[OP_OPEN] = {
1656		.op_func = (nfsd4op_func)nfsd4_open,
1657		.op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING,
1658		.op_name = "OP_OPEN",
1659		.op_rsize_bop = (nfsd4op_rsize)nfsd4_open_rsize,
1660		.op_set_currentstateid = (stateid_setter)nfsd4_set_openstateid,
1661	},
1662	[OP_OPEN_CONFIRM] = {
1663		.op_func = (nfsd4op_func)nfsd4_open_confirm,
1664		.op_flags = OP_MODIFIES_SOMETHING,
1665		.op_name = "OP_OPEN_CONFIRM",
1666		.op_rsize_bop = (nfsd4op_rsize)nfsd4_status_stateid_rsize,
1667	},
1668	[OP_OPEN_DOWNGRADE] = {
1669		.op_func = (nfsd4op_func)nfsd4_open_downgrade,
1670		.op_flags = OP_MODIFIES_SOMETHING,
1671		.op_name = "OP_OPEN_DOWNGRADE",
1672		.op_rsize_bop = (nfsd4op_rsize)nfsd4_status_stateid_rsize,
1673		.op_get_currentstateid = (stateid_getter)nfsd4_get_opendowngradestateid,
1674		.op_set_currentstateid = (stateid_setter)nfsd4_set_opendowngradestateid,
1675	},
1676	[OP_PUTFH] = {
1677		.op_func = (nfsd4op_func)nfsd4_putfh,
1678		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
1679				| OP_IS_PUTFH_LIKE | OP_MODIFIES_SOMETHING
1680				| OP_CLEAR_STATEID,
1681		.op_name = "OP_PUTFH",
1682		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1683	},
1684	[OP_PUTPUBFH] = {
1685		.op_func = (nfsd4op_func)nfsd4_putrootfh,
1686		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
1687				| OP_IS_PUTFH_LIKE | OP_MODIFIES_SOMETHING
1688				| OP_CLEAR_STATEID,
1689		.op_name = "OP_PUTPUBFH",
1690		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1691	},
1692	[OP_PUTROOTFH] = {
1693		.op_func = (nfsd4op_func)nfsd4_putrootfh,
1694		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
1695				| OP_IS_PUTFH_LIKE | OP_MODIFIES_SOMETHING
1696				| OP_CLEAR_STATEID,
1697		.op_name = "OP_PUTROOTFH",
1698		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1699	},
1700	[OP_READ] = {
1701		.op_func = (nfsd4op_func)nfsd4_read,
1702		.op_flags = OP_MODIFIES_SOMETHING,
1703		.op_name = "OP_READ",
1704		.op_rsize_bop = (nfsd4op_rsize)nfsd4_read_rsize,
1705		.op_get_currentstateid = (stateid_getter)nfsd4_get_readstateid,
1706	},
1707	[OP_READDIR] = {
1708		.op_func = (nfsd4op_func)nfsd4_readdir,
1709		.op_flags = OP_MODIFIES_SOMETHING,
1710		.op_name = "OP_READDIR",
1711		.op_rsize_bop = (nfsd4op_rsize)nfsd4_readdir_rsize,
1712	},
1713	[OP_READLINK] = {
1714		.op_func = (nfsd4op_func)nfsd4_readlink,
1715		.op_name = "OP_READLINK",
 
1716	},
1717	[OP_REMOVE] = {
1718		.op_func = (nfsd4op_func)nfsd4_remove,
1719		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
1720		.op_name = "OP_REMOVE",
1721		.op_rsize_bop = (nfsd4op_rsize)nfsd4_remove_rsize,
1722	},
1723	[OP_RENAME] = {
1724		.op_func = (nfsd4op_func)nfsd4_rename,
1725		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
1726		.op_name = "OP_RENAME",
1727		.op_rsize_bop = (nfsd4op_rsize)nfsd4_rename_rsize,
1728	},
1729	[OP_RENEW] = {
1730		.op_func = (nfsd4op_func)nfsd4_renew,
1731		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
1732				| OP_MODIFIES_SOMETHING,
1733		.op_name = "OP_RENEW",
1734		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1735
1736	},
1737	[OP_RESTOREFH] = {
1738		.op_func = (nfsd4op_func)nfsd4_restorefh,
1739		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
1740				| OP_IS_PUTFH_LIKE | OP_MODIFIES_SOMETHING,
1741		.op_name = "OP_RESTOREFH",
1742		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1743	},
1744	[OP_SAVEFH] = {
1745		.op_func = (nfsd4op_func)nfsd4_savefh,
1746		.op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING,
1747		.op_name = "OP_SAVEFH",
1748		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1749	},
1750	[OP_SECINFO] = {
1751		.op_func = (nfsd4op_func)nfsd4_secinfo,
 
1752		.op_flags = OP_HANDLES_WRONGSEC,
1753		.op_name = "OP_SECINFO",
 
1754	},
1755	[OP_SETATTR] = {
1756		.op_func = (nfsd4op_func)nfsd4_setattr,
1757		.op_name = "OP_SETATTR",
1758		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
1759		.op_rsize_bop = (nfsd4op_rsize)nfsd4_setattr_rsize,
1760		.op_get_currentstateid = (stateid_getter)nfsd4_get_setattrstateid,
 
1761	},
1762	[OP_SETCLIENTID] = {
1763		.op_func = (nfsd4op_func)nfsd4_setclientid,
1764		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
1765				| OP_MODIFIES_SOMETHING | OP_CACHEME,
 
1766		.op_name = "OP_SETCLIENTID",
1767		.op_rsize_bop = (nfsd4op_rsize)nfsd4_setclientid_rsize,
1768	},
1769	[OP_SETCLIENTID_CONFIRM] = {
1770		.op_func = (nfsd4op_func)nfsd4_setclientid_confirm,
1771		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
1772				| OP_MODIFIES_SOMETHING | OP_CACHEME,
1773		.op_name = "OP_SETCLIENTID_CONFIRM",
1774		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1775	},
1776	[OP_VERIFY] = {
1777		.op_func = (nfsd4op_func)nfsd4_verify,
1778		.op_name = "OP_VERIFY",
 
1779	},
1780	[OP_WRITE] = {
1781		.op_func = (nfsd4op_func)nfsd4_write,
1782		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
1783		.op_name = "OP_WRITE",
1784		.op_rsize_bop = (nfsd4op_rsize)nfsd4_write_rsize,
1785		.op_get_currentstateid = (stateid_getter)nfsd4_get_writestateid,
1786	},
1787	[OP_RELEASE_LOCKOWNER] = {
1788		.op_func = (nfsd4op_func)nfsd4_release_lockowner,
1789		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
1790				| OP_MODIFIES_SOMETHING,
1791		.op_name = "OP_RELEASE_LOCKOWNER",
1792		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1793	},
1794
1795	/* NFSv4.1 operations */
1796	[OP_EXCHANGE_ID] = {
1797		.op_func = (nfsd4op_func)nfsd4_exchange_id,
1798		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
1799				| OP_MODIFIES_SOMETHING,
1800		.op_name = "OP_EXCHANGE_ID",
1801		.op_rsize_bop = (nfsd4op_rsize)nfsd4_exchange_id_rsize,
1802	},
1803	[OP_BACKCHANNEL_CTL] = {
1804		.op_func = (nfsd4op_func)nfsd4_backchannel_ctl,
1805		.op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
1806		.op_name = "OP_BACKCHANNEL_CTL",
1807		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1808	},
1809	[OP_BIND_CONN_TO_SESSION] = {
1810		.op_func = (nfsd4op_func)nfsd4_bind_conn_to_session,
1811		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
1812				| OP_MODIFIES_SOMETHING,
1813		.op_name = "OP_BIND_CONN_TO_SESSION",
1814		.op_rsize_bop = (nfsd4op_rsize)nfsd4_bind_conn_to_session_rsize,
1815	},
1816	[OP_CREATE_SESSION] = {
1817		.op_func = (nfsd4op_func)nfsd4_create_session,
1818		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
1819				| OP_MODIFIES_SOMETHING,
1820		.op_name = "OP_CREATE_SESSION",
1821		.op_rsize_bop = (nfsd4op_rsize)nfsd4_create_session_rsize,
1822	},
1823	[OP_DESTROY_SESSION] = {
1824		.op_func = (nfsd4op_func)nfsd4_destroy_session,
1825		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
1826				| OP_MODIFIES_SOMETHING,
1827		.op_name = "OP_DESTROY_SESSION",
1828		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1829	},
1830	[OP_SEQUENCE] = {
1831		.op_func = (nfsd4op_func)nfsd4_sequence,
1832		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
1833		.op_name = "OP_SEQUENCE",
 
1834	},
1835	[OP_DESTROY_CLIENTID] = {
1836		.op_func = (nfsd4op_func)nfsd4_destroy_clientid,
1837		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
1838				| OP_MODIFIES_SOMETHING,
1839		.op_name = "OP_DESTROY_CLIENTID",
1840		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1841	},
1842	[OP_RECLAIM_COMPLETE] = {
1843		.op_func = (nfsd4op_func)nfsd4_reclaim_complete,
1844		.op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
1845		.op_name = "OP_RECLAIM_COMPLETE",
1846		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
1847	},
1848	[OP_SECINFO_NO_NAME] = {
1849		.op_func = (nfsd4op_func)nfsd4_secinfo_no_name,
 
1850		.op_flags = OP_HANDLES_WRONGSEC,
1851		.op_name = "OP_SECINFO_NO_NAME",
 
1852	},
1853	[OP_TEST_STATEID] = {
1854		.op_func = (nfsd4op_func)nfsd4_test_stateid,
1855		.op_flags = ALLOWED_WITHOUT_FH,
1856		.op_name = "OP_TEST_STATEID",
 
1857	},
1858	[OP_FREE_STATEID] = {
1859		.op_func = (nfsd4op_func)nfsd4_free_stateid,
1860		.op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
1861		.op_name = "OP_FREE_STATEID",
1862		.op_get_currentstateid = (stateid_getter)nfsd4_get_freestateid,
1863		.op_rsize_bop = (nfsd4op_rsize)nfsd4_only_status_rsize,
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1864	},
1865};
1866
1867#ifdef NFSD_DEBUG
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1868static const char *nfsd4_op_name(unsigned opnum)
1869{
1870	if (opnum < ARRAY_SIZE(nfsd4_ops))
1871		return nfsd4_ops[opnum].op_name;
1872	return "unknown_operation";
1873}
1874#endif
1875
1876#define nfsd4_voidres			nfsd4_voidargs
1877struct nfsd4_voidargs { int dummy; };
1878
1879static struct svc_procedure		nfsd_procedures4[2] = {
1880	[NFSPROC4_NULL] = {
1881		.pc_func = (svc_procfunc) nfsd4_proc_null,
1882		.pc_encode = (kxdrproc_t) nfs4svc_encode_voidres,
1883		.pc_argsize = sizeof(struct nfsd4_voidargs),
1884		.pc_ressize = sizeof(struct nfsd4_voidres),
 
1885		.pc_cachetype = RC_NOCACHE,
1886		.pc_xdrressize = 1,
 
1887	},
1888	[NFSPROC4_COMPOUND] = {
1889		.pc_func = (svc_procfunc) nfsd4_proc_compound,
1890		.pc_decode = (kxdrproc_t) nfs4svc_decode_compoundargs,
1891		.pc_encode = (kxdrproc_t) nfs4svc_encode_compoundres,
1892		.pc_argsize = sizeof(struct nfsd4_compoundargs),
1893		.pc_ressize = sizeof(struct nfsd4_compoundres),
1894		.pc_release = nfsd4_release_compoundargs,
1895		.pc_cachetype = RC_NOCACHE,
1896		.pc_xdrressize = NFSD_BUFSIZE/4,
 
1897	},
1898};
1899
1900struct svc_version	nfsd_version4 = {
1901		.vs_vers	= 4,
1902		.vs_nproc	= 2,
1903		.vs_proc	= nfsd_procedures4,
1904		.vs_dispatch	= nfsd_dispatch,
1905		.vs_xdrsize	= NFS4_SVC_XDRSIZE,
1906		.vs_rpcb_optnl	= 1,
 
 
 
1907};
1908
1909/*
1910 * Local variables:
1911 *  c-basic-offset: 8
1912 * End:
1913 */
v5.14.15
   1/*
   2 *  Server-side procedures for NFSv4.
   3 *
   4 *  Copyright (c) 2002 The Regents of the University of Michigan.
   5 *  All rights reserved.
   6 *
   7 *  Kendrick Smith <kmsmith@umich.edu>
   8 *  Andy Adamson   <andros@umich.edu>
   9 *
  10 *  Redistribution and use in source and binary forms, with or without
  11 *  modification, are permitted provided that the following conditions
  12 *  are met:
  13 *
  14 *  1. Redistributions of source code must retain the above copyright
  15 *     notice, this list of conditions and the following disclaimer.
  16 *  2. Redistributions in binary form must reproduce the above copyright
  17 *     notice, this list of conditions and the following disclaimer in the
  18 *     documentation and/or other materials provided with the distribution.
  19 *  3. Neither the name of the University nor the names of its
  20 *     contributors may be used to endorse or promote products derived
  21 *     from this software without specific prior written permission.
  22 *
  23 *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
  24 *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  25 *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  26 *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  27 *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  28 *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  29 *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  30 *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  31 *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  32 *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  33 *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  34 */
  35#include <linux/fs_struct.h>
  36#include <linux/file.h>
  37#include <linux/falloc.h>
  38#include <linux/slab.h>
  39#include <linux/kthread.h>
  40#include <linux/sunrpc/addr.h>
  41#include <linux/nfs_ssc.h>
  42
  43#include "idmap.h"
  44#include "cache.h"
  45#include "xdr4.h"
  46#include "vfs.h"
  47#include "current_stateid.h"
  48#include "netns.h"
  49#include "acl.h"
  50#include "pnfs.h"
  51#include "trace.h"
  52
  53static bool inter_copy_offload_enable;
  54module_param(inter_copy_offload_enable, bool, 0644);
  55MODULE_PARM_DESC(inter_copy_offload_enable,
  56		 "Enable inter server to server copy offload. Default: false");
  57
  58#ifdef CONFIG_NFSD_V4_2_INTER_SSC
  59static int nfsd4_ssc_umount_timeout = 900000;		/* default to 15 mins */
  60module_param(nfsd4_ssc_umount_timeout, int, 0644);
  61MODULE_PARM_DESC(nfsd4_ssc_umount_timeout,
  62		"idle msecs before unmount export from source server");
  63#endif
  64
  65#ifdef CONFIG_NFSD_V4_SECURITY_LABEL
  66#include <linux/security.h>
  67
  68static inline void
  69nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval)
  70{
  71	struct inode *inode = d_inode(resfh->fh_dentry);
  72	int status;
  73
  74	inode_lock(inode);
  75	status = security_inode_setsecctx(resfh->fh_dentry,
  76		label->data, label->len);
  77	inode_unlock(inode);
  78
  79	if (status)
  80		/*
  81		 * XXX: We should really fail the whole open, but we may
  82		 * already have created a new file, so it may be too
  83		 * late.  For now this seems the least of evils:
  84		 */
  85		bmval[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
  86
  87	return;
  88}
  89#else
  90static inline void
  91nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval)
  92{ }
  93#endif
  94
  95#define NFSDDBG_FACILITY		NFSDDBG_PROC
  96
  97static u32 nfsd_attrmask[] = {
  98	NFSD_WRITEABLE_ATTRS_WORD0,
  99	NFSD_WRITEABLE_ATTRS_WORD1,
 100	NFSD_WRITEABLE_ATTRS_WORD2
 101};
 102
 103static u32 nfsd41_ex_attrmask[] = {
 104	NFSD_SUPPATTR_EXCLCREAT_WORD0,
 105	NFSD_SUPPATTR_EXCLCREAT_WORD1,
 106	NFSD_SUPPATTR_EXCLCREAT_WORD2
 107};
 108
 109static __be32
 110check_attr_support(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 111		   u32 *bmval, u32 *writable)
 112{
 113	struct dentry *dentry = cstate->current_fh.fh_dentry;
 114	struct svc_export *exp = cstate->current_fh.fh_export;
 115
 116	if (!nfsd_attrs_supported(cstate->minorversion, bmval))
 
 
 
 
 
 
 117		return nfserr_attrnotsupp;
 118	if ((bmval[0] & FATTR4_WORD0_ACL) && !IS_POSIXACL(d_inode(dentry)))
 119		return nfserr_attrnotsupp;
 120	if ((bmval[2] & FATTR4_WORD2_SECURITY_LABEL) &&
 121			!(exp->ex_flags & NFSEXP_SECURITY_LABEL))
 122		return nfserr_attrnotsupp;
 123	if (writable && !bmval_is_subset(bmval, writable))
 124		return nfserr_inval;
 125	if (writable && (bmval[2] & FATTR4_WORD2_MODE_UMASK) &&
 126			(bmval[1] & FATTR4_WORD1_MODE))
 127		return nfserr_inval;
 
 
 
 
 
 
 
 
 
 128	return nfs_ok;
 129}
 130
 131static __be32
 132nfsd4_check_open_attributes(struct svc_rqst *rqstp,
 133	struct nfsd4_compound_state *cstate, struct nfsd4_open *open)
 134{
 135	__be32 status = nfs_ok;
 136
 137	if (open->op_create == NFS4_OPEN_CREATE) {
 138		if (open->op_createmode == NFS4_CREATE_UNCHECKED
 139		    || open->op_createmode == NFS4_CREATE_GUARDED)
 140			status = check_attr_support(rqstp, cstate,
 141					open->op_bmval, nfsd_attrmask);
 142		else if (open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1)
 143			status = check_attr_support(rqstp, cstate,
 144					open->op_bmval, nfsd41_ex_attrmask);
 145	}
 146
 147	return status;
 148}
 149
 150static int
 151is_create_with_attrs(struct nfsd4_open *open)
 152{
 153	return open->op_create == NFS4_OPEN_CREATE
 154		&& (open->op_createmode == NFS4_CREATE_UNCHECKED
 155		    || open->op_createmode == NFS4_CREATE_GUARDED
 156		    || open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1);
 157}
 158
 159/*
 160 * if error occurs when setting the acl, just clear the acl bit
 161 * in the returned attr bitmap.
 162 */
 163static void
 164do_set_nfs4_acl(struct svc_rqst *rqstp, struct svc_fh *fhp,
 165		struct nfs4_acl *acl, u32 *bmval)
 166{
 167	__be32 status;
 168
 169	status = nfsd4_set_nfs4_acl(rqstp, fhp, acl);
 170	if (status)
 171		/*
 172		 * We should probably fail the whole open at this point,
 173		 * but we've already created the file, so it's too late;
 174		 * So this seems the least of evils:
 175		 */
 176		bmval[0] &= ~FATTR4_WORD0_ACL;
 177}
 178
 179static inline void
 180fh_dup2(struct svc_fh *dst, struct svc_fh *src)
 181{
 182	fh_put(dst);
 183	dget(src->fh_dentry);
 184	if (src->fh_export)
 185		exp_get(src->fh_export);
 186	*dst = *src;
 187}
 188
 189static __be32
 190do_open_permission(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open, int accmode)
 191{
 192	__be32 status;
 193
 194	if (open->op_truncate &&
 195		!(open->op_share_access & NFS4_SHARE_ACCESS_WRITE))
 196		return nfserr_inval;
 197
 198	accmode |= NFSD_MAY_READ_IF_EXEC;
 199
 200	if (open->op_share_access & NFS4_SHARE_ACCESS_READ)
 201		accmode |= NFSD_MAY_READ;
 202	if (open->op_share_access & NFS4_SHARE_ACCESS_WRITE)
 203		accmode |= (NFSD_MAY_WRITE | NFSD_MAY_TRUNC);
 204	if (open->op_share_deny & NFS4_SHARE_DENY_READ)
 205		accmode |= NFSD_MAY_WRITE;
 206
 207	status = fh_verify(rqstp, current_fh, S_IFREG, accmode);
 208
 209	return status;
 210}
 211
 212static __be32 nfsd_check_obj_isreg(struct svc_fh *fh)
 213{
 214	umode_t mode = d_inode(fh->fh_dentry)->i_mode;
 215
 216	if (S_ISREG(mode))
 217		return nfs_ok;
 218	if (S_ISDIR(mode))
 219		return nfserr_isdir;
 220	/*
 221	 * Using err_symlink as our catch-all case may look odd; but
 222	 * there's no other obvious error for this case in 4.0, and we
 223	 * happen to know that it will cause the linux v4 client to do
 224	 * the right thing on attempts to open something other than a
 225	 * regular file.
 226	 */
 227	return nfserr_symlink;
 228}
 229
 230static void nfsd4_set_open_owner_reply_cache(struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh *resfh)
 231{
 232	if (nfsd4_has_session(cstate))
 233		return;
 234	fh_copy_shallow(&open->op_openowner->oo_owner.so_replay.rp_openfh,
 235			&resfh->fh_handle);
 236}
 237
 238static __be32
 239do_open_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh **resfh)
 240{
 241	struct svc_fh *current_fh = &cstate->current_fh;
 242	int accmode;
 243	__be32 status;
 244
 245	*resfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL);
 246	if (!*resfh)
 247		return nfserr_jukebox;
 248	fh_init(*resfh, NFS4_FHSIZE);
 249	open->op_truncate = false;
 250
 251	if (open->op_create) {
 252		/* FIXME: check session persistence and pnfs flags.
 253		 * The nfsv4.1 spec requires the following semantics:
 254		 *
 255		 * Persistent   | pNFS   | Server REQUIRED | Client Allowed
 256		 * Reply Cache  | server |                 |
 257		 * -------------+--------+-----------------+--------------------
 258		 * no           | no     | EXCLUSIVE4_1    | EXCLUSIVE4_1
 259		 *              |        |                 | (SHOULD)
 260		 *              |        | and EXCLUSIVE4  | or EXCLUSIVE4
 261		 *              |        |                 | (SHOULD NOT)
 262		 * no           | yes    | EXCLUSIVE4_1    | EXCLUSIVE4_1
 263		 * yes          | no     | GUARDED4        | GUARDED4
 264		 * yes          | yes    | GUARDED4        | GUARDED4
 265		 */
 266
 267		/*
 268		 * Note: create modes (UNCHECKED,GUARDED...) are the same
 269		 * in NFSv4 as in v3 except EXCLUSIVE4_1.
 270		 */
 271		current->fs->umask = open->op_umask;
 272		status = do_nfsd_create(rqstp, current_fh, open->op_fname,
 273					open->op_fnamelen, &open->op_iattr,
 274					*resfh, open->op_createmode,
 275					(u32 *)open->op_verf.data,
 276					&open->op_truncate, &open->op_created);
 277		current->fs->umask = 0;
 278
 279		if (!status && open->op_label.len)
 280			nfsd4_security_inode_setsecctx(*resfh, &open->op_label, open->op_bmval);
 281
 282		/*
 283		 * Following rfc 3530 14.2.16, and rfc 5661 18.16.4
 284		 * use the returned bitmask to indicate which attributes
 285		 * we used to store the verifier:
 286		 */
 287		if (nfsd_create_is_exclusive(open->op_createmode) && status == 0)
 288			open->op_bmval[1] |= (FATTR4_WORD1_TIME_ACCESS |
 289						FATTR4_WORD1_TIME_MODIFY);
 290	} else
 291		/*
 292		 * Note this may exit with the parent still locked.
 293		 * We will hold the lock until nfsd4_open's final
 294		 * lookup, to prevent renames or unlinks until we've had
 295		 * a chance to an acquire a delegation if appropriate.
 296		 */
 297		status = nfsd_lookup(rqstp, current_fh,
 298				     open->op_fname, open->op_fnamelen, *resfh);
 299	if (status)
 300		goto out;
 301	status = nfsd_check_obj_isreg(*resfh);
 302	if (status)
 303		goto out;
 304
 305	if (is_create_with_attrs(open) && open->op_acl != NULL)
 306		do_set_nfs4_acl(rqstp, *resfh, open->op_acl, open->op_bmval);
 307
 308	nfsd4_set_open_owner_reply_cache(cstate, open, *resfh);
 309	accmode = NFSD_MAY_NOP;
 310	if (open->op_created ||
 311			open->op_claim_type == NFS4_OPEN_CLAIM_DELEGATE_CUR)
 312		accmode |= NFSD_MAY_OWNER_OVERRIDE;
 313	status = do_open_permission(rqstp, *resfh, open, accmode);
 314	set_change_info(&open->op_cinfo, current_fh);
 315out:
 316	return status;
 317}
 318
 319static __be32
 320do_open_fhandle(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open)
 321{
 322	struct svc_fh *current_fh = &cstate->current_fh;
 323	__be32 status;
 324	int accmode = 0;
 325
 326	/* We don't know the target directory, and therefore can not
 327	* set the change info
 328	*/
 329
 330	memset(&open->op_cinfo, 0, sizeof(struct nfsd4_change_info));
 331
 332	nfsd4_set_open_owner_reply_cache(cstate, open, current_fh);
 333
 334	open->op_truncate = (open->op_iattr.ia_valid & ATTR_SIZE) &&
 335		(open->op_iattr.ia_size == 0);
 336	/*
 337	 * In the delegation case, the client is telling us about an
 338	 * open that it *already* performed locally, some time ago.  We
 339	 * should let it succeed now if possible.
 340	 *
 341	 * In the case of a CLAIM_FH open, on the other hand, the client
 342	 * may be counting on us to enforce permissions (the Linux 4.1
 343	 * client uses this for normal opens, for example).
 344	 */
 345	if (open->op_claim_type == NFS4_OPEN_CLAIM_DELEG_CUR_FH)
 346		accmode = NFSD_MAY_OWNER_OVERRIDE;
 347
 348	status = do_open_permission(rqstp, current_fh, open, accmode);
 349
 350	return status;
 351}
 352
 353static void
 354copy_clientid(clientid_t *clid, struct nfsd4_session *session)
 355{
 356	struct nfsd4_sessionid *sid =
 357			(struct nfsd4_sessionid *)session->se_sessionid.data;
 358
 359	clid->cl_boot = sid->clientid.cl_boot;
 360	clid->cl_id = sid->clientid.cl_id;
 361}
 362
 363static __be32
 364nfsd4_open(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 365	   union nfsd4_op_u *u)
 366{
 367	struct nfsd4_open *open = &u->open;
 368	__be32 status;
 369	struct svc_fh *resfh = NULL;
 
 370	struct net *net = SVC_NET(rqstp);
 371	struct nfsd_net *nn = net_generic(net, nfsd_net_id);
 372	bool reclaim = false;
 373
 374	dprintk("NFSD: nfsd4_open filename %.*s op_openowner %p\n",
 375		(int)open->op_fnamelen, open->op_fname,
 376		open->op_openowner);
 377
 378	/* This check required by spec. */
 379	if (open->op_create && open->op_claim_type != NFS4_OPEN_CLAIM_NULL)
 380		return nfserr_inval;
 381
 382	open->op_created = false;
 383	/*
 384	 * RFC5661 18.51.3
 385	 * Before RECLAIM_COMPLETE done, server should deny new lock
 386	 */
 387	if (nfsd4_has_session(cstate) &&
 388	    !test_bit(NFSD4_CLIENT_RECLAIM_COMPLETE, &cstate->clp->cl_flags) &&
 
 389	    open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS)
 390		return nfserr_grace;
 391
 392	if (nfsd4_has_session(cstate))
 393		copy_clientid(&open->op_clientid, cstate->session);
 394
 
 
 395	/* check seqid for replay. set nfs4_owner */
 396	status = nfsd4_process_open1(cstate, open, nn);
 
 397	if (status == nfserr_replay_me) {
 398		struct nfs4_replay *rp = &open->op_openowner->oo_owner.so_replay;
 399		fh_put(&cstate->current_fh);
 400		fh_copy_shallow(&cstate->current_fh.fh_handle,
 401				&rp->rp_openfh);
 402		status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
 403		if (status)
 404			dprintk("nfsd4_open: replay failed"
 405				" restoring previous filehandle\n");
 406		else
 407			status = nfserr_replay_me;
 408	}
 409	if (status)
 410		goto out;
 411	if (open->op_xdr_error) {
 412		status = open->op_xdr_error;
 413		goto out;
 414	}
 415
 416	status = nfsd4_check_open_attributes(rqstp, cstate, open);
 417	if (status)
 418		goto out;
 419
 420	/* Openowner is now set, so sequence id will get bumped.  Now we need
 421	 * these checks before we do any creates: */
 422	status = nfserr_grace;
 423	if (opens_in_grace(net) && open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS)
 424		goto out;
 425	status = nfserr_no_grace;
 426	if (!opens_in_grace(net) && open->op_claim_type == NFS4_OPEN_CLAIM_PREVIOUS)
 427		goto out;
 428
 429	switch (open->op_claim_type) {
 430		case NFS4_OPEN_CLAIM_DELEGATE_CUR:
 431		case NFS4_OPEN_CLAIM_NULL:
 432			status = do_open_lookup(rqstp, cstate, open, &resfh);
 433			if (status)
 434				goto out;
 435			break;
 436		case NFS4_OPEN_CLAIM_PREVIOUS:
 437			status = nfs4_check_open_reclaim(cstate->clp);
 
 
 
 438			if (status)
 439				goto out;
 440			open->op_openowner->oo_flags |= NFS4_OO_CONFIRMED;
 441			reclaim = true;
 442			fallthrough;
 443		case NFS4_OPEN_CLAIM_FH:
 444		case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
 445			status = do_open_fhandle(rqstp, cstate, open);
 446			if (status)
 447				goto out;
 448			resfh = &cstate->current_fh;
 449			break;
 450		case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
 451             	case NFS4_OPEN_CLAIM_DELEGATE_PREV:
 
 452			dprintk("NFSD: unsupported OPEN claim type %d\n",
 453				open->op_claim_type);
 454			status = nfserr_notsupp;
 455			goto out;
 456		default:
 457			dprintk("NFSD: Invalid OPEN claim type %d\n",
 458				open->op_claim_type);
 459			status = nfserr_inval;
 460			goto out;
 461	}
 462	/*
 463	 * nfsd4_process_open2() does the actual opening of the file.  If
 464	 * successful, it (1) truncates the file if open->op_truncate was
 465	 * set, (2) sets open->op_stateid, (3) sets open->op_delegation.
 466	 */
 467	status = nfsd4_process_open2(rqstp, resfh, open);
 468	WARN(status && open->op_created,
 469	     "nfsd4_process_open2 failed to open newly-created file! status=%u\n",
 470	     be32_to_cpu(status));
 471	if (reclaim && !status)
 472		nn->somebody_reclaimed = true;
 473out:
 474	if (resfh && resfh != &cstate->current_fh) {
 475		fh_dup2(&cstate->current_fh, resfh);
 476		fh_put(resfh);
 477		kfree(resfh);
 478	}
 479	nfsd4_cleanup_open_state(cstate, open);
 
 
 480	nfsd4_bump_seqid(cstate, status);
 
 
 481	return status;
 482}
 483
 484/*
 485 * OPEN is the only seqid-mutating operation whose decoding can fail
 486 * with a seqid-mutating error (specifically, decoding of user names in
 487 * the attributes).  Therefore we have to do some processing to look up
 488 * the stateowner so that we can bump the seqid.
 489 */
 490static __be32 nfsd4_open_omfg(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_op *op)
 491{
 492	struct nfsd4_open *open = &op->u.open;
 493
 494	if (!seqid_mutating_err(ntohl(op->status)))
 495		return op->status;
 496	if (nfsd4_has_session(cstate))
 497		return op->status;
 498	open->op_xdr_error = op->status;
 499	return nfsd4_open(rqstp, cstate, &op->u);
 500}
 501
 502/*
 503 * filehandle-manipulating ops.
 504 */
 505static __be32
 506nfsd4_getfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 507	    union nfsd4_op_u *u)
 508{
 509	u->getfh = &cstate->current_fh;
 
 
 
 510	return nfs_ok;
 511}
 512
 513static __be32
 514nfsd4_putfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 515	    union nfsd4_op_u *u)
 516{
 517	struct nfsd4_putfh *putfh = &u->putfh;
 518	__be32 ret;
 519
 520	fh_put(&cstate->current_fh);
 521	cstate->current_fh.fh_handle.fh_size = putfh->pf_fhlen;
 522	memcpy(&cstate->current_fh.fh_handle.fh_base, putfh->pf_fhval,
 523	       putfh->pf_fhlen);
 524	ret = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_BYPASS_GSS);
 525#ifdef CONFIG_NFSD_V4_2_INTER_SSC
 526	if (ret == nfserr_stale && putfh->no_verify) {
 527		SET_FH_FLAG(&cstate->current_fh, NFSD4_FH_FOREIGN);
 528		ret = 0;
 529	}
 530#endif
 531	return ret;
 532}
 533
 534static __be32
 535nfsd4_putrootfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 536		union nfsd4_op_u *u)
 537{
 538	__be32 status;
 539
 540	fh_put(&cstate->current_fh);
 541	status = exp_pseudoroot(rqstp, &cstate->current_fh);
 542	return status;
 543}
 544
 545static __be32
 546nfsd4_restorefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 547		union nfsd4_op_u *u)
 548{
 549	if (!cstate->save_fh.fh_dentry)
 550		return nfserr_restorefh;
 551
 552	fh_dup2(&cstate->current_fh, &cstate->save_fh);
 553	if (HAS_CSTATE_FLAG(cstate, SAVED_STATE_ID_FLAG)) {
 554		memcpy(&cstate->current_stateid, &cstate->save_stateid, sizeof(stateid_t));
 555		SET_CSTATE_FLAG(cstate, CURRENT_STATE_ID_FLAG);
 556	}
 557	return nfs_ok;
 558}
 559
 560static __be32
 561nfsd4_savefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 562	     union nfsd4_op_u *u)
 563{
 
 
 
 564	fh_dup2(&cstate->save_fh, &cstate->current_fh);
 565	if (HAS_CSTATE_FLAG(cstate, CURRENT_STATE_ID_FLAG)) {
 566		memcpy(&cstate->save_stateid, &cstate->current_stateid, sizeof(stateid_t));
 567		SET_CSTATE_FLAG(cstate, SAVED_STATE_ID_FLAG);
 568	}
 569	return nfs_ok;
 570}
 571
 572/*
 573 * misc nfsv4 ops
 574 */
 575static __be32
 576nfsd4_access(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 577	     union nfsd4_op_u *u)
 578{
 579	struct nfsd4_access *access = &u->access;
 580	u32 access_full;
 581
 582	access_full = NFS3_ACCESS_FULL;
 583	if (cstate->minorversion >= 2)
 584		access_full |= NFS4_ACCESS_XALIST | NFS4_ACCESS_XAREAD |
 585			       NFS4_ACCESS_XAWRITE;
 586
 587	if (access->ac_req_access & ~access_full)
 588		return nfserr_inval;
 589
 590	access->ac_resp_access = access->ac_req_access;
 591	return nfsd_access(rqstp, &cstate->current_fh, &access->ac_resp_access,
 592			   &access->ac_supported);
 593}
 594
 595static void gen_boot_verifier(nfs4_verifier *verifier, struct net *net)
 596{
 597	__be32 *verf = (__be32 *)verifier->data;
 598
 599	BUILD_BUG_ON(2*sizeof(*verf) != sizeof(verifier->data));
 600
 601	nfsd_copy_boot_verifier(verf, net_generic(net, nfsd_net_id));
 
 
 602}
 603
 604static __be32
 605nfsd4_commit(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 606	     union nfsd4_op_u *u)
 607{
 608	struct nfsd4_commit *commit = &u->commit;
 609
 610	return nfsd_commit(rqstp, &cstate->current_fh, commit->co_offset,
 611			     commit->co_count,
 612			     (__be32 *)commit->co_verf.data);
 613}
 614
 615static __be32
 616nfsd4_create(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 617	     union nfsd4_op_u *u)
 618{
 619	struct nfsd4_create *create = &u->create;
 620	struct svc_fh resfh;
 621	__be32 status;
 622	dev_t rdev;
 623
 624	fh_init(&resfh, NFS4_FHSIZE);
 625
 626	status = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_NOP);
 
 627	if (status)
 628		return status;
 629
 630	status = check_attr_support(rqstp, cstate, create->cr_bmval,
 631				    nfsd_attrmask);
 632	if (status)
 633		return status;
 634
 635	current->fs->umask = create->cr_umask;
 636	switch (create->cr_type) {
 637	case NF4LNK:
 
 
 
 
 
 
 
 
 
 638		status = nfsd_symlink(rqstp, &cstate->current_fh,
 639				      create->cr_name, create->cr_namelen,
 640				      create->cr_data, &resfh);
 
 641		break;
 642
 643	case NF4BLK:
 644		status = nfserr_inval;
 645		rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
 646		if (MAJOR(rdev) != create->cr_specdata1 ||
 647		    MINOR(rdev) != create->cr_specdata2)
 648			goto out_umask;
 649		status = nfsd_create(rqstp, &cstate->current_fh,
 650				     create->cr_name, create->cr_namelen,
 651				     &create->cr_iattr, S_IFBLK, rdev, &resfh);
 652		break;
 653
 654	case NF4CHR:
 655		status = nfserr_inval;
 656		rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
 657		if (MAJOR(rdev) != create->cr_specdata1 ||
 658		    MINOR(rdev) != create->cr_specdata2)
 659			goto out_umask;
 660		status = nfsd_create(rqstp, &cstate->current_fh,
 661				     create->cr_name, create->cr_namelen,
 662				     &create->cr_iattr,S_IFCHR, rdev, &resfh);
 663		break;
 664
 665	case NF4SOCK:
 666		status = nfsd_create(rqstp, &cstate->current_fh,
 667				     create->cr_name, create->cr_namelen,
 668				     &create->cr_iattr, S_IFSOCK, 0, &resfh);
 669		break;
 670
 671	case NF4FIFO:
 672		status = nfsd_create(rqstp, &cstate->current_fh,
 673				     create->cr_name, create->cr_namelen,
 674				     &create->cr_iattr, S_IFIFO, 0, &resfh);
 675		break;
 676
 677	case NF4DIR:
 678		create->cr_iattr.ia_valid &= ~ATTR_SIZE;
 679		status = nfsd_create(rqstp, &cstate->current_fh,
 680				     create->cr_name, create->cr_namelen,
 681				     &create->cr_iattr, S_IFDIR, 0, &resfh);
 682		break;
 683
 684	default:
 685		status = nfserr_badtype;
 686	}
 687
 688	if (status)
 689		goto out;
 690
 691	if (create->cr_label.len)
 692		nfsd4_security_inode_setsecctx(&resfh, &create->cr_label, create->cr_bmval);
 693
 694	if (create->cr_acl != NULL)
 695		do_set_nfs4_acl(rqstp, &resfh, create->cr_acl,
 696				create->cr_bmval);
 697
 698	fh_unlock(&cstate->current_fh);
 699	set_change_info(&create->cr_cinfo, &cstate->current_fh);
 700	fh_dup2(&cstate->current_fh, &resfh);
 701out:
 702	fh_put(&resfh);
 703out_umask:
 704	current->fs->umask = 0;
 705	return status;
 706}
 707
 708static __be32
 709nfsd4_getattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 710	      union nfsd4_op_u *u)
 711{
 712	struct nfsd4_getattr *getattr = &u->getattr;
 713	__be32 status;
 714
 715	status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
 716	if (status)
 717		return status;
 718
 719	if (getattr->ga_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
 720		return nfserr_inval;
 721
 722	getattr->ga_bmval[0] &= nfsd_suppattrs[cstate->minorversion][0];
 723	getattr->ga_bmval[1] &= nfsd_suppattrs[cstate->minorversion][1];
 724	getattr->ga_bmval[2] &= nfsd_suppattrs[cstate->minorversion][2];
 725
 726	getattr->ga_fhp = &cstate->current_fh;
 727	return nfs_ok;
 728}
 729
 730static __be32
 731nfsd4_link(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 732	   union nfsd4_op_u *u)
 733{
 734	struct nfsd4_link *link = &u->link;
 735	__be32 status;
 736
 
 
 737	status = nfsd_link(rqstp, &cstate->current_fh,
 738			   link->li_name, link->li_namelen, &cstate->save_fh);
 739	if (!status)
 740		set_change_info(&link->li_cinfo, &cstate->current_fh);
 741	return status;
 742}
 743
 744static __be32 nfsd4_do_lookupp(struct svc_rqst *rqstp, struct svc_fh *fh)
 745{
 746	struct svc_fh tmp_fh;
 747	__be32 ret;
 748
 749	fh_init(&tmp_fh, NFS4_FHSIZE);
 750	ret = exp_pseudoroot(rqstp, &tmp_fh);
 751	if (ret)
 752		return ret;
 753	if (tmp_fh.fh_dentry == fh->fh_dentry) {
 754		fh_put(&tmp_fh);
 755		return nfserr_noent;
 756	}
 757	fh_put(&tmp_fh);
 758	return nfsd_lookup(rqstp, fh, "..", 2, fh);
 759}
 760
 761static __be32
 762nfsd4_lookupp(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 763	      union nfsd4_op_u *u)
 764{
 765	return nfsd4_do_lookupp(rqstp, &cstate->current_fh);
 766}
 767
 768static __be32
 769nfsd4_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 770	     union nfsd4_op_u *u)
 771{
 772	return nfsd_lookup(rqstp, &cstate->current_fh,
 773			   u->lookup.lo_name, u->lookup.lo_len,
 774			   &cstate->current_fh);
 775}
 776
 777static __be32
 778nfsd4_read(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 779	   union nfsd4_op_u *u)
 780{
 781	struct nfsd4_read *read = &u->read;
 782	__be32 status;
 783
 784	read->rd_nf = NULL;
 
 
 785	if (read->rd_offset >= OFFSET_MAX)
 786		return nfserr_inval;
 787
 788	trace_nfsd_read_start(rqstp, &cstate->current_fh,
 789			      read->rd_offset, read->rd_length);
 790
 791	/*
 792	 * If we do a zero copy read, then a client will see read data
 793	 * that reflects the state of the file *after* performing the
 794	 * following compound.
 795	 *
 796	 * To ensure proper ordering, we therefore turn off zero copy if
 797	 * the client wants us to do more in this compound:
 798	 */
 799	if (!nfsd4_last_compound_op(rqstp))
 800		clear_bit(RQ_SPLICE_OK, &rqstp->rq_flags);
 801
 
 802	/* check stateid */
 803	status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
 804					&read->rd_stateid, RD_STATE,
 805					&read->rd_nf, NULL);
 806	if (status) {
 807		dprintk("NFSD: nfsd4_read: couldn't process stateid!\n");
 808		goto out;
 809	}
 
 
 810	status = nfs_ok;
 811out:
 
 812	read->rd_rqstp = rqstp;
 813	read->rd_fhp = &cstate->current_fh;
 814	return status;
 815}
 816
 817
 818static void
 819nfsd4_read_release(union nfsd4_op_u *u)
 820{
 821	if (u->read.rd_nf)
 822		nfsd_file_put(u->read.rd_nf);
 823	trace_nfsd_read_done(u->read.rd_rqstp, u->read.rd_fhp,
 824			     u->read.rd_offset, u->read.rd_length);
 825}
 826
 827static __be32
 828nfsd4_readdir(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 829	      union nfsd4_op_u *u)
 830{
 831	struct nfsd4_readdir *readdir = &u->readdir;
 832	u64 cookie = readdir->rd_cookie;
 833	static const nfs4_verifier zeroverf;
 834
 835	/* no need to check permission - this will be done in nfsd_readdir() */
 836
 837	if (readdir->rd_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
 838		return nfserr_inval;
 839
 840	readdir->rd_bmval[0] &= nfsd_suppattrs[cstate->minorversion][0];
 841	readdir->rd_bmval[1] &= nfsd_suppattrs[cstate->minorversion][1];
 842	readdir->rd_bmval[2] &= nfsd_suppattrs[cstate->minorversion][2];
 843
 844	if ((cookie == 1) || (cookie == 2) ||
 845	    (cookie == 0 && memcmp(readdir->rd_verf.data, zeroverf.data, NFS4_VERIFIER_SIZE)))
 846		return nfserr_bad_cookie;
 847
 848	readdir->rd_rqstp = rqstp;
 849	readdir->rd_fhp = &cstate->current_fh;
 850	return nfs_ok;
 851}
 852
 853static __be32
 854nfsd4_readlink(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 855	       union nfsd4_op_u *u)
 856{
 857	u->readlink.rl_rqstp = rqstp;
 858	u->readlink.rl_fhp = &cstate->current_fh;
 859	return nfs_ok;
 860}
 861
 862static __be32
 863nfsd4_remove(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 864	     union nfsd4_op_u *u)
 865{
 866	struct nfsd4_remove *remove = &u->remove;
 867	__be32 status;
 868
 869	if (opens_in_grace(SVC_NET(rqstp)))
 870		return nfserr_grace;
 871	status = nfsd_unlink(rqstp, &cstate->current_fh, 0,
 872			     remove->rm_name, remove->rm_namelen);
 873	if (!status) {
 874		fh_unlock(&cstate->current_fh);
 875		set_change_info(&remove->rm_cinfo, &cstate->current_fh);
 876	}
 877	return status;
 878}
 879
 880static __be32
 881nfsd4_rename(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 882	     union nfsd4_op_u *u)
 883{
 884	struct nfsd4_rename *rename = &u->rename;
 885	__be32 status;
 886
 887	if (opens_in_grace(SVC_NET(rqstp)))
 
 
 
 888		return nfserr_grace;
 889	status = nfsd_rename(rqstp, &cstate->save_fh, rename->rn_sname,
 890			     rename->rn_snamelen, &cstate->current_fh,
 891			     rename->rn_tname, rename->rn_tnamelen);
 892	if (status)
 893		return status;
 894	set_change_info(&rename->rn_sinfo, &cstate->current_fh);
 895	set_change_info(&rename->rn_tinfo, &cstate->save_fh);
 896	return nfs_ok;
 897}
 898
 899static __be32
 900nfsd4_secinfo(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 901	      union nfsd4_op_u *u)
 902{
 903	struct nfsd4_secinfo *secinfo = &u->secinfo;
 904	struct svc_export *exp;
 905	struct dentry *dentry;
 906	__be32 err;
 907
 
 908	err = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_EXEC);
 909	if (err)
 910		return err;
 911	err = nfsd_lookup_dentry(rqstp, &cstate->current_fh,
 912				    secinfo->si_name, secinfo->si_namelen,
 913				    &exp, &dentry);
 914	if (err)
 915		return err;
 916	fh_unlock(&cstate->current_fh);
 917	if (d_really_is_negative(dentry)) {
 918		exp_put(exp);
 919		err = nfserr_noent;
 920	} else
 921		secinfo->si_exp = exp;
 922	dput(dentry);
 923	if (cstate->minorversion)
 924		/* See rfc 5661 section 2.6.3.1.1.8 */
 925		fh_put(&cstate->current_fh);
 926	return err;
 927}
 928
 929static __be32
 930nfsd4_secinfo_no_name(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 931		union nfsd4_op_u *u)
 932{
 933	__be32 err;
 934
 935	switch (u->secinfo_no_name.sin_style) {
 936	case NFS4_SECINFO_STYLE4_CURRENT_FH:
 937		break;
 938	case NFS4_SECINFO_STYLE4_PARENT:
 939		err = nfsd4_do_lookupp(rqstp, &cstate->current_fh);
 940		if (err)
 941			return err;
 942		break;
 943	default:
 944		return nfserr_inval;
 945	}
 946
 947	u->secinfo_no_name.sin_exp = exp_get(cstate->current_fh.fh_export);
 948	fh_put(&cstate->current_fh);
 949	return nfs_ok;
 950}
 951
 952static void
 953nfsd4_secinfo_release(union nfsd4_op_u *u)
 954{
 955	if (u->secinfo.si_exp)
 956		exp_put(u->secinfo.si_exp);
 957}
 958
 959static void
 960nfsd4_secinfo_no_name_release(union nfsd4_op_u *u)
 961{
 962	if (u->secinfo_no_name.sin_exp)
 963		exp_put(u->secinfo_no_name.sin_exp);
 964}
 965
 966static __be32
 967nfsd4_setattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 968	      union nfsd4_op_u *u)
 969{
 970	struct nfsd4_setattr *setattr = &u->setattr;
 971	__be32 status = nfs_ok;
 972	int err;
 973
 974	if (setattr->sa_iattr.ia_valid & ATTR_SIZE) {
 975		status = nfs4_preprocess_stateid_op(rqstp, cstate,
 976				&cstate->current_fh, &setattr->sa_stateid,
 977				WR_STATE, NULL, NULL);
 
 978		if (status) {
 979			dprintk("NFSD: nfsd4_setattr: couldn't process stateid!\n");
 980			return status;
 981		}
 982	}
 983	err = fh_want_write(&cstate->current_fh);
 984	if (err)
 985		return nfserrno(err);
 986	status = nfs_ok;
 987
 988	status = check_attr_support(rqstp, cstate, setattr->sa_bmval,
 989				    nfsd_attrmask);
 990	if (status)
 991		goto out;
 992
 993	if (setattr->sa_acl != NULL)
 994		status = nfsd4_set_nfs4_acl(rqstp, &cstate->current_fh,
 995					    setattr->sa_acl);
 996	if (status)
 997		goto out;
 998	if (setattr->sa_label.len)
 999		status = nfsd4_set_nfs4_label(rqstp, &cstate->current_fh,
1000				&setattr->sa_label);
1001	if (status)
1002		goto out;
1003	status = nfsd_setattr(rqstp, &cstate->current_fh, &setattr->sa_iattr,
1004				0, (time64_t)0);
1005out:
1006	fh_drop_write(&cstate->current_fh);
1007	return status;
1008}
1009
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1010static __be32
1011nfsd4_write(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1012	    union nfsd4_op_u *u)
1013{
1014	struct nfsd4_write *write = &u->write;
1015	stateid_t *stateid = &write->wr_stateid;
1016	struct nfsd_file *nf = NULL;
1017	__be32 status = nfs_ok;
1018	unsigned long cnt;
1019	int nvecs;
1020
 
 
1021	if (write->wr_offset >= OFFSET_MAX)
1022		return nfserr_inval;
1023
1024	cnt = write->wr_buflen;
1025	trace_nfsd_write_start(rqstp, &cstate->current_fh,
1026			       write->wr_offset, cnt);
1027	status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1028						stateid, WR_STATE, &nf, NULL);
1029	if (status) {
 
1030		dprintk("NFSD: nfsd4_write: couldn't process stateid!\n");
1031		return status;
1032	}
 
 
 
1033
 
1034	write->wr_how_written = write->wr_stable_how;
 
1035
1036	nvecs = svc_fill_write_vector(rqstp, write->wr_payload.pages,
1037				      write->wr_payload.head, write->wr_buflen);
1038	WARN_ON_ONCE(nvecs > ARRAY_SIZE(rqstp->rq_vec));
1039
1040	status = nfsd_vfs_write(rqstp, &cstate->current_fh, nf,
1041				write->wr_offset, rqstp->rq_vec, nvecs, &cnt,
1042				write->wr_how_written,
1043				(__be32 *)write->wr_verifier.data);
1044	nfsd_file_put(nf);
1045
1046	write->wr_bytes_written = cnt;
1047	trace_nfsd_write_done(rqstp, &cstate->current_fh,
1048			      write->wr_offset, cnt);
1049	return status;
1050}
1051
1052static __be32
1053nfsd4_verify_copy(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1054		  stateid_t *src_stateid, struct nfsd_file **src,
1055		  stateid_t *dst_stateid, struct nfsd_file **dst)
1056{
1057	__be32 status;
1058
1059	if (!cstate->save_fh.fh_dentry)
1060		return nfserr_nofilehandle;
1061
1062	status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->save_fh,
1063					    src_stateid, RD_STATE, src, NULL);
1064	if (status) {
1065		dprintk("NFSD: %s: couldn't process src stateid!\n", __func__);
1066		goto out;
1067	}
1068
1069	status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1070					    dst_stateid, WR_STATE, dst, NULL);
1071	if (status) {
1072		dprintk("NFSD: %s: couldn't process dst stateid!\n", __func__);
1073		goto out_put_src;
1074	}
1075
1076	/* fix up for NFS-specific error code */
1077	if (!S_ISREG(file_inode((*src)->nf_file)->i_mode) ||
1078	    !S_ISREG(file_inode((*dst)->nf_file)->i_mode)) {
1079		status = nfserr_wrong_type;
1080		goto out_put_dst;
1081	}
1082
1083out:
1084	return status;
1085out_put_dst:
1086	nfsd_file_put(*dst);
1087out_put_src:
1088	nfsd_file_put(*src);
1089	goto out;
1090}
1091
1092static __be32
1093nfsd4_clone(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1094		union nfsd4_op_u *u)
1095{
1096	struct nfsd4_clone *clone = &u->clone;
1097	struct nfsd_file *src, *dst;
1098	__be32 status;
1099
1100	status = nfsd4_verify_copy(rqstp, cstate, &clone->cl_src_stateid, &src,
1101				   &clone->cl_dst_stateid, &dst);
1102	if (status)
1103		goto out;
1104
1105	status = nfsd4_clone_file_range(src, clone->cl_src_pos,
1106			dst, clone->cl_dst_pos, clone->cl_count,
1107			EX_ISSYNC(cstate->current_fh.fh_export));
1108
1109	nfsd_file_put(dst);
1110	nfsd_file_put(src);
1111out:
1112	return status;
1113}
1114
1115void nfs4_put_copy(struct nfsd4_copy *copy)
1116{
1117	if (!refcount_dec_and_test(&copy->refcount))
1118		return;
1119	kfree(copy);
1120}
1121
1122static bool
1123check_and_set_stop_copy(struct nfsd4_copy *copy)
1124{
1125	bool value;
1126
1127	spin_lock(&copy->cp_clp->async_lock);
1128	value = copy->stopped;
1129	if (!copy->stopped)
1130		copy->stopped = true;
1131	spin_unlock(&copy->cp_clp->async_lock);
1132	return value;
1133}
1134
1135static void nfsd4_stop_copy(struct nfsd4_copy *copy)
1136{
1137	/* only 1 thread should stop the copy */
1138	if (!check_and_set_stop_copy(copy))
1139		kthread_stop(copy->copy_task);
1140	nfs4_put_copy(copy);
1141}
1142
1143static struct nfsd4_copy *nfsd4_get_copy(struct nfs4_client *clp)
1144{
1145	struct nfsd4_copy *copy = NULL;
1146
1147	spin_lock(&clp->async_lock);
1148	if (!list_empty(&clp->async_copies)) {
1149		copy = list_first_entry(&clp->async_copies, struct nfsd4_copy,
1150					copies);
1151		refcount_inc(&copy->refcount);
1152	}
1153	spin_unlock(&clp->async_lock);
1154	return copy;
1155}
1156
1157void nfsd4_shutdown_copy(struct nfs4_client *clp)
1158{
1159	struct nfsd4_copy *copy;
1160
1161	while ((copy = nfsd4_get_copy(clp)) != NULL)
1162		nfsd4_stop_copy(copy);
1163}
1164#ifdef CONFIG_NFSD_V4_2_INTER_SSC
1165
1166extern struct file *nfs42_ssc_open(struct vfsmount *ss_mnt,
1167				   struct nfs_fh *src_fh,
1168				   nfs4_stateid *stateid);
1169extern void nfs42_ssc_close(struct file *filep);
1170
1171extern void nfs_sb_deactive(struct super_block *sb);
1172
1173#define NFSD42_INTERSSC_MOUNTOPS "vers=4.2,addr=%s,sec=sys"
1174
1175/*
1176 * setup a work entry in the ssc delayed unmount list.
1177 */
1178static __be32 nfsd4_ssc_setup_dul(struct nfsd_net *nn, char *ipaddr,
1179		struct nfsd4_ssc_umount_item **retwork, struct vfsmount **ss_mnt)
1180{
1181	struct nfsd4_ssc_umount_item *ni = 0;
1182	struct nfsd4_ssc_umount_item *work = NULL;
1183	struct nfsd4_ssc_umount_item *tmp;
1184	DEFINE_WAIT(wait);
1185
1186	*ss_mnt = NULL;
1187	*retwork = NULL;
1188	work = kzalloc(sizeof(*work), GFP_KERNEL);
1189try_again:
1190	spin_lock(&nn->nfsd_ssc_lock);
1191	list_for_each_entry_safe(ni, tmp, &nn->nfsd_ssc_mount_list, nsui_list) {
1192		if (strncmp(ni->nsui_ipaddr, ipaddr, sizeof(ni->nsui_ipaddr)))
1193			continue;
1194		/* found a match */
1195		if (ni->nsui_busy) {
1196			/*  wait - and try again */
1197			prepare_to_wait(&nn->nfsd_ssc_waitq, &wait,
1198				TASK_INTERRUPTIBLE);
1199			spin_unlock(&nn->nfsd_ssc_lock);
1200
1201			/* allow 20secs for mount/unmount for now - revisit */
1202			if (signal_pending(current) ||
1203					(schedule_timeout(20*HZ) == 0)) {
1204				kfree(work);
1205				return nfserr_eagain;
1206			}
1207			finish_wait(&nn->nfsd_ssc_waitq, &wait);
1208			goto try_again;
1209		}
1210		*ss_mnt = ni->nsui_vfsmount;
1211		refcount_inc(&ni->nsui_refcnt);
1212		spin_unlock(&nn->nfsd_ssc_lock);
1213		kfree(work);
1214
1215		/* return vfsmount in ss_mnt */
1216		return 0;
1217	}
1218	if (work) {
1219		strncpy(work->nsui_ipaddr, ipaddr, sizeof(work->nsui_ipaddr));
1220		refcount_set(&work->nsui_refcnt, 2);
1221		work->nsui_busy = true;
1222		list_add_tail(&work->nsui_list, &nn->nfsd_ssc_mount_list);
1223		*retwork = work;
1224	}
1225	spin_unlock(&nn->nfsd_ssc_lock);
1226	return 0;
1227}
1228
1229static void nfsd4_ssc_update_dul_work(struct nfsd_net *nn,
1230		struct nfsd4_ssc_umount_item *work, struct vfsmount *ss_mnt)
1231{
1232	/* set nsui_vfsmount, clear busy flag and wakeup waiters */
1233	spin_lock(&nn->nfsd_ssc_lock);
1234	work->nsui_vfsmount = ss_mnt;
1235	work->nsui_busy = false;
1236	wake_up_all(&nn->nfsd_ssc_waitq);
1237	spin_unlock(&nn->nfsd_ssc_lock);
1238}
1239
1240static void nfsd4_ssc_cancel_dul_work(struct nfsd_net *nn,
1241		struct nfsd4_ssc_umount_item *work)
1242{
1243	spin_lock(&nn->nfsd_ssc_lock);
1244	list_del(&work->nsui_list);
1245	wake_up_all(&nn->nfsd_ssc_waitq);
1246	spin_unlock(&nn->nfsd_ssc_lock);
1247	kfree(work);
1248}
1249
1250/*
1251 * Support one copy source server for now.
1252 */
1253static __be32
1254nfsd4_interssc_connect(struct nl4_server *nss, struct svc_rqst *rqstp,
1255		       struct vfsmount **mount)
1256{
1257	struct file_system_type *type;
1258	struct vfsmount *ss_mnt;
1259	struct nfs42_netaddr *naddr;
1260	struct sockaddr_storage tmp_addr;
1261	size_t tmp_addrlen, match_netid_len = 3;
1262	char *startsep = "", *endsep = "", *match_netid = "tcp";
1263	char *ipaddr, *dev_name, *raw_data;
1264	int len, raw_len;
1265	__be32 status = nfserr_inval;
1266	struct nfsd4_ssc_umount_item *work = NULL;
1267	struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
1268
1269	naddr = &nss->u.nl4_addr;
1270	tmp_addrlen = rpc_uaddr2sockaddr(SVC_NET(rqstp), naddr->addr,
1271					 naddr->addr_len,
1272					 (struct sockaddr *)&tmp_addr,
1273					 sizeof(tmp_addr));
1274	if (tmp_addrlen == 0)
1275		goto out_err;
1276
1277	if (tmp_addr.ss_family == AF_INET6) {
1278		startsep = "[";
1279		endsep = "]";
1280		match_netid = "tcp6";
1281		match_netid_len = 4;
1282	}
1283
1284	if (naddr->netid_len != match_netid_len ||
1285		strncmp(naddr->netid, match_netid, naddr->netid_len))
1286		goto out_err;
1287
1288	/* Construct the raw data for the vfs_kern_mount call */
1289	len = RPC_MAX_ADDRBUFLEN + 1;
1290	ipaddr = kzalloc(len, GFP_KERNEL);
1291	if (!ipaddr)
1292		goto out_err;
1293
1294	rpc_ntop((struct sockaddr *)&tmp_addr, ipaddr, len);
1295
1296	/* 2 for ipv6 endsep and startsep. 3 for ":/" and trailing '/0'*/
1297
1298	raw_len = strlen(NFSD42_INTERSSC_MOUNTOPS) + strlen(ipaddr);
1299	raw_data = kzalloc(raw_len, GFP_KERNEL);
1300	if (!raw_data)
1301		goto out_free_ipaddr;
1302
1303	snprintf(raw_data, raw_len, NFSD42_INTERSSC_MOUNTOPS, ipaddr);
1304
1305	status = nfserr_nodev;
1306	type = get_fs_type("nfs");
1307	if (!type)
1308		goto out_free_rawdata;
1309
1310	/* Set the server:<export> for the vfs_kern_mount call */
1311	dev_name = kzalloc(len + 5, GFP_KERNEL);
1312	if (!dev_name)
1313		goto out_free_rawdata;
1314	snprintf(dev_name, len + 5, "%s%s%s:/", startsep, ipaddr, endsep);
1315
1316	status = nfsd4_ssc_setup_dul(nn, ipaddr, &work, &ss_mnt);
1317	if (status)
1318		goto out_free_devname;
1319	if (ss_mnt)
1320		goto out_done;
1321
1322	/* Use an 'internal' mount: SB_KERNMOUNT -> MNT_INTERNAL */
1323	ss_mnt = vfs_kern_mount(type, SB_KERNMOUNT, dev_name, raw_data);
1324	module_put(type->owner);
1325	if (IS_ERR(ss_mnt)) {
1326		status = nfserr_nodev;
1327		if (work)
1328			nfsd4_ssc_cancel_dul_work(nn, work);
1329		goto out_free_devname;
1330	}
1331	if (work)
1332		nfsd4_ssc_update_dul_work(nn, work, ss_mnt);
1333out_done:
1334	status = 0;
1335	*mount = ss_mnt;
1336
1337out_free_devname:
1338	kfree(dev_name);
1339out_free_rawdata:
1340	kfree(raw_data);
1341out_free_ipaddr:
1342	kfree(ipaddr);
1343out_err:
1344	return status;
1345}
1346
1347static void
1348nfsd4_interssc_disconnect(struct vfsmount *ss_mnt)
1349{
1350	nfs_do_sb_deactive(ss_mnt->mnt_sb);
1351	mntput(ss_mnt);
1352}
1353
1354/*
1355 * Verify COPY destination stateid.
1356 *
1357 * Connect to the source server with NFSv4.1.
1358 * Create the source struct file for nfsd_copy_range.
1359 * Called with COPY cstate:
1360 *    SAVED_FH: source filehandle
1361 *    CURRENT_FH: destination filehandle
1362 */
1363static __be32
1364nfsd4_setup_inter_ssc(struct svc_rqst *rqstp,
1365		      struct nfsd4_compound_state *cstate,
1366		      struct nfsd4_copy *copy, struct vfsmount **mount)
1367{
1368	struct svc_fh *s_fh = NULL;
1369	stateid_t *s_stid = &copy->cp_src_stateid;
1370	__be32 status = nfserr_inval;
1371
1372	/* Verify the destination stateid and set dst struct file*/
1373	status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1374					    &copy->cp_dst_stateid,
1375					    WR_STATE, &copy->nf_dst, NULL);
1376	if (status)
1377		goto out;
1378
1379	status = nfsd4_interssc_connect(&copy->cp_src, rqstp, mount);
1380	if (status)
1381		goto out;
1382
1383	s_fh = &cstate->save_fh;
1384
1385	copy->c_fh.size = s_fh->fh_handle.fh_size;
1386	memcpy(copy->c_fh.data, &s_fh->fh_handle.fh_base, copy->c_fh.size);
1387	copy->stateid.seqid = cpu_to_be32(s_stid->si_generation);
1388	memcpy(copy->stateid.other, (void *)&s_stid->si_opaque,
1389	       sizeof(stateid_opaque_t));
1390
1391	status = 0;
1392out:
1393	return status;
1394}
1395
1396static void
1397nfsd4_cleanup_inter_ssc(struct vfsmount *ss_mnt, struct nfsd_file *src,
1398			struct nfsd_file *dst)
1399{
1400	bool found = false;
1401	long timeout;
1402	struct nfsd4_ssc_umount_item *tmp;
1403	struct nfsd4_ssc_umount_item *ni = NULL;
1404	struct nfsd_net *nn = net_generic(dst->nf_net, nfsd_net_id);
1405
1406	nfs42_ssc_close(src->nf_file);
1407	nfsd_file_put(dst);
1408	fput(src->nf_file);
1409
1410	if (!nn) {
1411		mntput(ss_mnt);
1412		return;
1413	}
1414	spin_lock(&nn->nfsd_ssc_lock);
1415	timeout = msecs_to_jiffies(nfsd4_ssc_umount_timeout);
1416	list_for_each_entry_safe(ni, tmp, &nn->nfsd_ssc_mount_list, nsui_list) {
1417		if (ni->nsui_vfsmount->mnt_sb == ss_mnt->mnt_sb) {
1418			list_del(&ni->nsui_list);
1419			/*
1420			 * vfsmount can be shared by multiple exports,
1421			 * decrement refcnt. If the count drops to 1 it
1422			 * will be unmounted when nsui_expire expires.
1423			 */
1424			refcount_dec(&ni->nsui_refcnt);
1425			ni->nsui_expire = jiffies + timeout;
1426			list_add_tail(&ni->nsui_list, &nn->nfsd_ssc_mount_list);
1427			found = true;
1428			break;
1429		}
1430	}
1431	spin_unlock(&nn->nfsd_ssc_lock);
1432	if (!found) {
1433		mntput(ss_mnt);
1434		return;
1435	}
1436}
1437
1438#else /* CONFIG_NFSD_V4_2_INTER_SSC */
1439
1440static __be32
1441nfsd4_setup_inter_ssc(struct svc_rqst *rqstp,
1442		      struct nfsd4_compound_state *cstate,
1443		      struct nfsd4_copy *copy,
1444		      struct vfsmount **mount)
1445{
1446	*mount = NULL;
1447	return nfserr_inval;
1448}
1449
1450static void
1451nfsd4_cleanup_inter_ssc(struct vfsmount *ss_mnt, struct nfsd_file *src,
1452			struct nfsd_file *dst)
1453{
1454}
1455
1456static void
1457nfsd4_interssc_disconnect(struct vfsmount *ss_mnt)
1458{
1459}
1460
1461static struct file *nfs42_ssc_open(struct vfsmount *ss_mnt,
1462				   struct nfs_fh *src_fh,
1463				   nfs4_stateid *stateid)
1464{
1465	return NULL;
1466}
1467#endif /* CONFIG_NFSD_V4_2_INTER_SSC */
1468
1469static __be32
1470nfsd4_setup_intra_ssc(struct svc_rqst *rqstp,
1471		      struct nfsd4_compound_state *cstate,
1472		      struct nfsd4_copy *copy)
1473{
1474	return nfsd4_verify_copy(rqstp, cstate, &copy->cp_src_stateid,
1475				 &copy->nf_src, &copy->cp_dst_stateid,
1476				 &copy->nf_dst);
1477}
1478
1479static void
1480nfsd4_cleanup_intra_ssc(struct nfsd_file *src, struct nfsd_file *dst)
1481{
1482	nfsd_file_put(src);
1483	nfsd_file_put(dst);
1484}
1485
1486static void nfsd4_cb_offload_release(struct nfsd4_callback *cb)
1487{
1488	struct nfsd4_copy *copy = container_of(cb, struct nfsd4_copy, cp_cb);
1489
1490	nfs4_put_copy(copy);
1491}
1492
1493static int nfsd4_cb_offload_done(struct nfsd4_callback *cb,
1494				 struct rpc_task *task)
1495{
1496	return 1;
1497}
1498
1499static const struct nfsd4_callback_ops nfsd4_cb_offload_ops = {
1500	.release = nfsd4_cb_offload_release,
1501	.done = nfsd4_cb_offload_done
1502};
1503
1504static void nfsd4_init_copy_res(struct nfsd4_copy *copy, bool sync)
1505{
1506	copy->cp_res.wr_stable_how =
1507		copy->committed ? NFS_FILE_SYNC : NFS_UNSTABLE;
1508	copy->cp_synchronous = sync;
1509	gen_boot_verifier(&copy->cp_res.wr_verifier, copy->cp_clp->net);
1510}
1511
1512static ssize_t _nfsd_copy_file_range(struct nfsd4_copy *copy)
1513{
1514	ssize_t bytes_copied = 0;
1515	u64 bytes_total = copy->cp_count;
1516	u64 src_pos = copy->cp_src_pos;
1517	u64 dst_pos = copy->cp_dst_pos;
1518	__be32 status;
1519
1520	/* See RFC 7862 p.67: */
1521	if (bytes_total == 0)
1522		bytes_total = ULLONG_MAX;
1523	do {
1524		if (kthread_should_stop())
1525			break;
1526		bytes_copied = nfsd_copy_file_range(copy->nf_src->nf_file,
1527				src_pos, copy->nf_dst->nf_file, dst_pos,
1528				bytes_total);
1529		if (bytes_copied <= 0)
1530			break;
1531		bytes_total -= bytes_copied;
1532		copy->cp_res.wr_bytes_written += bytes_copied;
1533		src_pos += bytes_copied;
1534		dst_pos += bytes_copied;
1535	} while (bytes_total > 0 && !copy->cp_synchronous);
1536	/* for a non-zero asynchronous copy do a commit of data */
1537	if (!copy->cp_synchronous && copy->cp_res.wr_bytes_written > 0) {
1538		down_write(&copy->nf_dst->nf_rwsem);
1539		status = vfs_fsync_range(copy->nf_dst->nf_file,
1540					 copy->cp_dst_pos,
1541					 copy->cp_res.wr_bytes_written, 0);
1542		up_write(&copy->nf_dst->nf_rwsem);
1543		if (!status)
1544			copy->committed = true;
1545	}
1546	return bytes_copied;
1547}
1548
1549static __be32 nfsd4_do_copy(struct nfsd4_copy *copy, bool sync)
1550{
1551	__be32 status;
1552	ssize_t bytes;
1553
1554	bytes = _nfsd_copy_file_range(copy);
1555	/* for async copy, we ignore the error, client can always retry
1556	 * to get the error
1557	 */
1558	if (bytes < 0 && !copy->cp_res.wr_bytes_written)
1559		status = nfserrno(bytes);
1560	else {
1561		nfsd4_init_copy_res(copy, sync);
1562		status = nfs_ok;
1563	}
1564
1565	if (!copy->cp_intra) /* Inter server SSC */
1566		nfsd4_cleanup_inter_ssc(copy->ss_mnt, copy->nf_src,
1567					copy->nf_dst);
1568	else
1569		nfsd4_cleanup_intra_ssc(copy->nf_src, copy->nf_dst);
1570
1571	return status;
1572}
1573
1574static void dup_copy_fields(struct nfsd4_copy *src, struct nfsd4_copy *dst)
1575{
1576	dst->cp_src_pos = src->cp_src_pos;
1577	dst->cp_dst_pos = src->cp_dst_pos;
1578	dst->cp_count = src->cp_count;
1579	dst->cp_synchronous = src->cp_synchronous;
1580	memcpy(&dst->cp_res, &src->cp_res, sizeof(src->cp_res));
1581	memcpy(&dst->fh, &src->fh, sizeof(src->fh));
1582	dst->cp_clp = src->cp_clp;
1583	dst->nf_dst = nfsd_file_get(src->nf_dst);
1584	dst->cp_intra = src->cp_intra;
1585	if (src->cp_intra) /* for inter, file_src doesn't exist yet */
1586		dst->nf_src = nfsd_file_get(src->nf_src);
1587
1588	memcpy(&dst->cp_stateid, &src->cp_stateid, sizeof(src->cp_stateid));
1589	memcpy(&dst->cp_src, &src->cp_src, sizeof(struct nl4_server));
1590	memcpy(&dst->stateid, &src->stateid, sizeof(src->stateid));
1591	memcpy(&dst->c_fh, &src->c_fh, sizeof(src->c_fh));
1592	dst->ss_mnt = src->ss_mnt;
1593}
1594
1595static void cleanup_async_copy(struct nfsd4_copy *copy)
1596{
1597	nfs4_free_copy_state(copy);
1598	nfsd_file_put(copy->nf_dst);
1599	if (copy->cp_intra)
1600		nfsd_file_put(copy->nf_src);
1601	spin_lock(&copy->cp_clp->async_lock);
1602	list_del(&copy->copies);
1603	spin_unlock(&copy->cp_clp->async_lock);
1604	nfs4_put_copy(copy);
1605}
1606
1607static int nfsd4_do_async_copy(void *data)
1608{
1609	struct nfsd4_copy *copy = (struct nfsd4_copy *)data;
1610	struct nfsd4_copy *cb_copy;
1611
1612	if (!copy->cp_intra) { /* Inter server SSC */
1613		copy->nf_src = kzalloc(sizeof(struct nfsd_file), GFP_KERNEL);
1614		if (!copy->nf_src) {
1615			copy->nfserr = nfserr_serverfault;
1616			nfsd4_interssc_disconnect(copy->ss_mnt);
1617			goto do_callback;
1618		}
1619		copy->nf_src->nf_file = nfs42_ssc_open(copy->ss_mnt, &copy->c_fh,
1620					      &copy->stateid);
1621		if (IS_ERR(copy->nf_src->nf_file)) {
1622			copy->nfserr = nfserr_offload_denied;
1623			nfsd4_interssc_disconnect(copy->ss_mnt);
1624			goto do_callback;
1625		}
1626	}
1627
1628	copy->nfserr = nfsd4_do_copy(copy, 0);
1629do_callback:
1630	cb_copy = kzalloc(sizeof(struct nfsd4_copy), GFP_KERNEL);
1631	if (!cb_copy)
1632		goto out;
1633	refcount_set(&cb_copy->refcount, 1);
1634	memcpy(&cb_copy->cp_res, &copy->cp_res, sizeof(copy->cp_res));
1635	cb_copy->cp_clp = copy->cp_clp;
1636	cb_copy->nfserr = copy->nfserr;
1637	memcpy(&cb_copy->fh, &copy->fh, sizeof(copy->fh));
1638	nfsd4_init_cb(&cb_copy->cp_cb, cb_copy->cp_clp,
1639			&nfsd4_cb_offload_ops, NFSPROC4_CLNT_CB_OFFLOAD);
1640	trace_nfsd_cb_offload(copy->cp_clp, &copy->cp_res.cb_stateid,
1641			      &copy->fh, copy->cp_count, copy->nfserr);
1642	nfsd4_run_cb(&cb_copy->cp_cb);
1643out:
1644	if (!copy->cp_intra)
1645		kfree(copy->nf_src);
1646	cleanup_async_copy(copy);
1647	return 0;
1648}
1649
1650static __be32
1651nfsd4_copy(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1652		union nfsd4_op_u *u)
1653{
1654	struct nfsd4_copy *copy = &u->copy;
1655	__be32 status;
1656	struct nfsd4_copy *async_copy = NULL;
1657
1658	if (!copy->cp_intra) { /* Inter server SSC */
1659		if (!inter_copy_offload_enable || copy->cp_synchronous) {
1660			status = nfserr_notsupp;
1661			goto out;
1662		}
1663		status = nfsd4_setup_inter_ssc(rqstp, cstate, copy,
1664				&copy->ss_mnt);
1665		if (status)
1666			return nfserr_offload_denied;
1667	} else {
1668		status = nfsd4_setup_intra_ssc(rqstp, cstate, copy);
1669		if (status)
1670			return status;
1671	}
1672
1673	copy->cp_clp = cstate->clp;
1674	memcpy(&copy->fh, &cstate->current_fh.fh_handle,
1675		sizeof(struct knfsd_fh));
1676	if (!copy->cp_synchronous) {
1677		struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
1678
1679		status = nfserrno(-ENOMEM);
1680		async_copy = kzalloc(sizeof(struct nfsd4_copy), GFP_KERNEL);
1681		if (!async_copy)
1682			goto out_err;
1683		if (!nfs4_init_copy_state(nn, copy))
1684			goto out_err;
1685		refcount_set(&async_copy->refcount, 1);
1686		memcpy(&copy->cp_res.cb_stateid, &copy->cp_stateid.stid,
1687			sizeof(copy->cp_res.cb_stateid));
1688		dup_copy_fields(copy, async_copy);
1689		async_copy->copy_task = kthread_create(nfsd4_do_async_copy,
1690				async_copy, "%s", "copy thread");
1691		if (IS_ERR(async_copy->copy_task))
1692			goto out_err;
1693		spin_lock(&async_copy->cp_clp->async_lock);
1694		list_add(&async_copy->copies,
1695				&async_copy->cp_clp->async_copies);
1696		spin_unlock(&async_copy->cp_clp->async_lock);
1697		wake_up_process(async_copy->copy_task);
1698		status = nfs_ok;
1699	} else {
1700		status = nfsd4_do_copy(copy, 1);
1701	}
1702out:
1703	return status;
1704out_err:
1705	if (async_copy)
1706		cleanup_async_copy(async_copy);
1707	status = nfserrno(-ENOMEM);
1708	if (!copy->cp_intra)
1709		nfsd4_interssc_disconnect(copy->ss_mnt);
1710	goto out;
1711}
1712
1713struct nfsd4_copy *
1714find_async_copy(struct nfs4_client *clp, stateid_t *stateid)
1715{
1716	struct nfsd4_copy *copy;
1717
1718	spin_lock(&clp->async_lock);
1719	list_for_each_entry(copy, &clp->async_copies, copies) {
1720		if (memcmp(&copy->cp_stateid.stid, stateid, NFS4_STATEID_SIZE))
1721			continue;
1722		refcount_inc(&copy->refcount);
1723		spin_unlock(&clp->async_lock);
1724		return copy;
1725	}
1726	spin_unlock(&clp->async_lock);
1727	return NULL;
1728}
1729
1730static __be32
1731nfsd4_offload_cancel(struct svc_rqst *rqstp,
1732		     struct nfsd4_compound_state *cstate,
1733		     union nfsd4_op_u *u)
1734{
1735	struct nfsd4_offload_status *os = &u->offload_status;
1736	struct nfsd4_copy *copy;
1737	struct nfs4_client *clp = cstate->clp;
1738
1739	copy = find_async_copy(clp, &os->stateid);
1740	if (!copy) {
1741		struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
1742
1743		return manage_cpntf_state(nn, &os->stateid, clp, NULL);
1744	} else
1745		nfsd4_stop_copy(copy);
1746
1747	return nfs_ok;
1748}
1749
1750static __be32
1751nfsd4_copy_notify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1752		  union nfsd4_op_u *u)
1753{
1754	struct nfsd4_copy_notify *cn = &u->copy_notify;
1755	__be32 status;
1756	struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
1757	struct nfs4_stid *stid;
1758	struct nfs4_cpntf_state *cps;
1759	struct nfs4_client *clp = cstate->clp;
1760
1761	status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1762					&cn->cpn_src_stateid, RD_STATE, NULL,
1763					&stid);
1764	if (status)
1765		return status;
1766
1767	cn->cpn_sec = nn->nfsd4_lease;
1768	cn->cpn_nsec = 0;
1769
1770	status = nfserrno(-ENOMEM);
1771	cps = nfs4_alloc_init_cpntf_state(nn, stid);
1772	if (!cps)
1773		goto out;
1774	memcpy(&cn->cpn_cnr_stateid, &cps->cp_stateid.stid, sizeof(stateid_t));
1775	memcpy(&cps->cp_p_stateid, &stid->sc_stateid, sizeof(stateid_t));
1776	memcpy(&cps->cp_p_clid, &clp->cl_clientid, sizeof(clientid_t));
1777
1778	/* For now, only return one server address in cpn_src, the
1779	 * address used by the client to connect to this server.
1780	 */
1781	cn->cpn_src.nl4_type = NL4_NETADDR;
1782	status = nfsd4_set_netaddr((struct sockaddr *)&rqstp->rq_daddr,
1783				 &cn->cpn_src.u.nl4_addr);
1784	WARN_ON_ONCE(status);
1785	if (status) {
1786		nfs4_put_cpntf_state(nn, cps);
1787		goto out;
1788	}
1789out:
1790	nfs4_put_stid(stid);
1791	return status;
1792}
1793
1794static __be32
1795nfsd4_fallocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1796		struct nfsd4_fallocate *fallocate, int flags)
1797{
1798	__be32 status;
1799	struct nfsd_file *nf;
1800
1801	status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1802					    &fallocate->falloc_stateid,
1803					    WR_STATE, &nf, NULL);
1804	if (status != nfs_ok) {
1805		dprintk("NFSD: nfsd4_fallocate: couldn't process stateid!\n");
1806		return status;
1807	}
1808
1809	status = nfsd4_vfs_fallocate(rqstp, &cstate->current_fh, nf->nf_file,
1810				     fallocate->falloc_offset,
1811				     fallocate->falloc_length,
1812				     flags);
1813	nfsd_file_put(nf);
1814	return status;
1815}
1816static __be32
1817nfsd4_offload_status(struct svc_rqst *rqstp,
1818		     struct nfsd4_compound_state *cstate,
1819		     union nfsd4_op_u *u)
1820{
1821	struct nfsd4_offload_status *os = &u->offload_status;
1822	__be32 status = 0;
1823	struct nfsd4_copy *copy;
1824	struct nfs4_client *clp = cstate->clp;
1825
1826	copy = find_async_copy(clp, &os->stateid);
1827	if (copy) {
1828		os->count = copy->cp_res.wr_bytes_written;
1829		nfs4_put_copy(copy);
1830	} else
1831		status = nfserr_bad_stateid;
1832
1833	return status;
1834}
1835
1836static __be32
1837nfsd4_allocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1838	       union nfsd4_op_u *u)
1839{
1840	return nfsd4_fallocate(rqstp, cstate, &u->allocate, 0);
1841}
1842
1843static __be32
1844nfsd4_deallocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1845		 union nfsd4_op_u *u)
1846{
1847	return nfsd4_fallocate(rqstp, cstate, &u->deallocate,
1848			       FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE);
1849}
1850
1851static __be32
1852nfsd4_seek(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1853	   union nfsd4_op_u *u)
1854{
1855	struct nfsd4_seek *seek = &u->seek;
1856	int whence;
1857	__be32 status;
1858	struct nfsd_file *nf;
1859
1860	status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1861					    &seek->seek_stateid,
1862					    RD_STATE, &nf, NULL);
1863	if (status) {
1864		dprintk("NFSD: nfsd4_seek: couldn't process stateid!\n");
1865		return status;
1866	}
1867
1868	switch (seek->seek_whence) {
1869	case NFS4_CONTENT_DATA:
1870		whence = SEEK_DATA;
1871		break;
1872	case NFS4_CONTENT_HOLE:
1873		whence = SEEK_HOLE;
1874		break;
1875	default:
1876		status = nfserr_union_notsupp;
1877		goto out;
1878	}
1879
1880	/*
1881	 * Note:  This call does change file->f_pos, but nothing in NFSD
1882	 *        should ever file->f_pos.
1883	 */
1884	seek->seek_pos = vfs_llseek(nf->nf_file, seek->seek_offset, whence);
1885	if (seek->seek_pos < 0)
1886		status = nfserrno(seek->seek_pos);
1887	else if (seek->seek_pos >= i_size_read(file_inode(nf->nf_file)))
1888		seek->seek_eof = true;
1889
1890out:
1891	nfsd_file_put(nf);
1892	return status;
1893}
1894
1895/* This routine never returns NFS_OK!  If there are no other errors, it
1896 * will return NFSERR_SAME or NFSERR_NOT_SAME depending on whether the
1897 * attributes matched.  VERIFY is implemented by mapping NFSERR_SAME
1898 * to NFS_OK after the call; NVERIFY by mapping NFSERR_NOT_SAME to NFS_OK.
1899 */
1900static __be32
1901_nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1902	     struct nfsd4_verify *verify)
1903{
1904	__be32 *buf, *p;
1905	int count;
1906	__be32 status;
1907
1908	status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
1909	if (status)
1910		return status;
1911
1912	status = check_attr_support(rqstp, cstate, verify->ve_bmval, NULL);
1913	if (status)
1914		return status;
1915
1916	if ((verify->ve_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)
1917	    || (verify->ve_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1))
1918		return nfserr_inval;
1919	if (verify->ve_attrlen & 3)
1920		return nfserr_inval;
1921
1922	/* count in words:
1923	 *   bitmap_len(1) + bitmap(2) + attr_len(1) = 4
1924	 */
1925	count = 4 + (verify->ve_attrlen >> 2);
1926	buf = kmalloc(count << 2, GFP_KERNEL);
1927	if (!buf)
1928		return nfserr_jukebox;
1929
1930	p = buf;
1931	status = nfsd4_encode_fattr_to_buf(&p, count, &cstate->current_fh,
1932				    cstate->current_fh.fh_export,
1933				    cstate->current_fh.fh_dentry,
1934				    verify->ve_bmval,
1935				    rqstp, 0);
1936	/*
1937	 * If nfsd4_encode_fattr() ran out of space, assume that's because
1938	 * the attributes are longer (hence different) than those given:
1939	 */
1940	if (status == nfserr_resource)
1941		status = nfserr_not_same;
1942	if (status)
1943		goto out_kfree;
1944
1945	/* skip bitmap */
1946	p = buf + 1 + ntohl(buf[0]);
1947	status = nfserr_not_same;
1948	if (ntohl(*p++) != verify->ve_attrlen)
1949		goto out_kfree;
1950	if (!memcmp(p, verify->ve_attrval, verify->ve_attrlen))
1951		status = nfserr_same;
1952
1953out_kfree:
1954	kfree(buf);
1955	return status;
1956}
1957
1958static __be32
1959nfsd4_nverify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1960	      union nfsd4_op_u *u)
1961{
1962	__be32 status;
1963
1964	status = _nfsd4_verify(rqstp, cstate, &u->verify);
1965	return status == nfserr_not_same ? nfs_ok : status;
1966}
1967
1968static __be32
1969nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1970	     union nfsd4_op_u *u)
1971{
1972	__be32 status;
1973
1974	status = _nfsd4_verify(rqstp, cstate, &u->nverify);
1975	return status == nfserr_same ? nfs_ok : status;
1976}
1977
1978#ifdef CONFIG_NFSD_PNFS
1979static const struct nfsd4_layout_ops *
1980nfsd4_layout_verify(struct svc_export *exp, unsigned int layout_type)
1981{
1982	if (!exp->ex_layout_types) {
1983		dprintk("%s: export does not support pNFS\n", __func__);
1984		return NULL;
1985	}
1986
1987	if (layout_type >= LAYOUT_TYPE_MAX ||
1988	    !(exp->ex_layout_types & (1 << layout_type))) {
1989		dprintk("%s: layout type %d not supported\n",
1990			__func__, layout_type);
1991		return NULL;
1992	}
1993
1994	return nfsd4_layout_ops[layout_type];
1995}
1996
1997static __be32
1998nfsd4_getdeviceinfo(struct svc_rqst *rqstp,
1999		struct nfsd4_compound_state *cstate, union nfsd4_op_u *u)
2000{
2001	struct nfsd4_getdeviceinfo *gdp = &u->getdeviceinfo;
2002	const struct nfsd4_layout_ops *ops;
2003	struct nfsd4_deviceid_map *map;
2004	struct svc_export *exp;
2005	__be32 nfserr;
2006
2007	dprintk("%s: layout_type %u dev_id [0x%llx:0x%x] maxcnt %u\n",
2008	       __func__,
2009	       gdp->gd_layout_type,
2010	       gdp->gd_devid.fsid_idx, gdp->gd_devid.generation,
2011	       gdp->gd_maxcount);
2012
2013	map = nfsd4_find_devid_map(gdp->gd_devid.fsid_idx);
2014	if (!map) {
2015		dprintk("%s: couldn't find device ID to export mapping!\n",
2016			__func__);
2017		return nfserr_noent;
2018	}
2019
2020	exp = rqst_exp_find(rqstp, map->fsid_type, map->fsid);
2021	if (IS_ERR(exp)) {
2022		dprintk("%s: could not find device id\n", __func__);
2023		return nfserr_noent;
2024	}
2025
2026	nfserr = nfserr_layoutunavailable;
2027	ops = nfsd4_layout_verify(exp, gdp->gd_layout_type);
2028	if (!ops)
2029		goto out;
2030
2031	nfserr = nfs_ok;
2032	if (gdp->gd_maxcount != 0) {
2033		nfserr = ops->proc_getdeviceinfo(exp->ex_path.mnt->mnt_sb,
2034				rqstp, cstate->clp, gdp);
2035	}
2036
2037	gdp->gd_notify_types &= ops->notify_types;
2038out:
2039	exp_put(exp);
2040	return nfserr;
2041}
2042
2043static void
2044nfsd4_getdeviceinfo_release(union nfsd4_op_u *u)
2045{
2046	kfree(u->getdeviceinfo.gd_device);
 
2047}
2048
2049static __be32
2050nfsd4_layoutget(struct svc_rqst *rqstp,
2051		struct nfsd4_compound_state *cstate, union nfsd4_op_u *u)
2052{
2053	struct nfsd4_layoutget *lgp = &u->layoutget;
2054	struct svc_fh *current_fh = &cstate->current_fh;
2055	const struct nfsd4_layout_ops *ops;
2056	struct nfs4_layout_stateid *ls;
2057	__be32 nfserr;
2058	int accmode = NFSD_MAY_READ_IF_EXEC;
2059
2060	switch (lgp->lg_seg.iomode) {
2061	case IOMODE_READ:
2062		accmode |= NFSD_MAY_READ;
2063		break;
2064	case IOMODE_RW:
2065		accmode |= NFSD_MAY_READ | NFSD_MAY_WRITE;
2066		break;
2067	default:
2068		dprintk("%s: invalid iomode %d\n",
2069			__func__, lgp->lg_seg.iomode);
2070		nfserr = nfserr_badiomode;
2071		goto out;
2072	}
2073
2074	nfserr = fh_verify(rqstp, current_fh, 0, accmode);
2075	if (nfserr)
2076		goto out;
2077
2078	nfserr = nfserr_layoutunavailable;
2079	ops = nfsd4_layout_verify(current_fh->fh_export, lgp->lg_layout_type);
2080	if (!ops)
2081		goto out;
2082
2083	/*
2084	 * Verify minlength and range as per RFC5661:
2085	 *  o  If loga_length is less than loga_minlength,
2086	 *     the metadata server MUST return NFS4ERR_INVAL.
2087	 *  o  If the sum of loga_offset and loga_minlength exceeds
2088	 *     NFS4_UINT64_MAX, and loga_minlength is not
2089	 *     NFS4_UINT64_MAX, the error NFS4ERR_INVAL MUST result.
2090	 *  o  If the sum of loga_offset and loga_length exceeds
2091	 *     NFS4_UINT64_MAX, and loga_length is not NFS4_UINT64_MAX,
2092	 *     the error NFS4ERR_INVAL MUST result.
2093	 */
2094	nfserr = nfserr_inval;
2095	if (lgp->lg_seg.length < lgp->lg_minlength ||
2096	    (lgp->lg_minlength != NFS4_MAX_UINT64 &&
2097	     lgp->lg_minlength > NFS4_MAX_UINT64 - lgp->lg_seg.offset) ||
2098	    (lgp->lg_seg.length != NFS4_MAX_UINT64 &&
2099	     lgp->lg_seg.length > NFS4_MAX_UINT64 - lgp->lg_seg.offset))
2100		goto out;
2101	if (lgp->lg_seg.length == 0)
2102		goto out;
2103
2104	nfserr = nfsd4_preprocess_layout_stateid(rqstp, cstate, &lgp->lg_sid,
2105						true, lgp->lg_layout_type, &ls);
2106	if (nfserr) {
2107		trace_nfsd_layout_get_lookup_fail(&lgp->lg_sid);
2108		goto out;
2109	}
2110
2111	nfserr = nfserr_recallconflict;
2112	if (atomic_read(&ls->ls_stid.sc_file->fi_lo_recalls))
2113		goto out_put_stid;
2114
2115	nfserr = ops->proc_layoutget(d_inode(current_fh->fh_dentry),
2116				     current_fh, lgp);
2117	if (nfserr)
2118		goto out_put_stid;
2119
2120	nfserr = nfsd4_insert_layout(lgp, ls);
2121
2122out_put_stid:
2123	mutex_unlock(&ls->ls_mutex);
2124	nfs4_put_stid(&ls->ls_stid);
2125out:
2126	return nfserr;
2127}
2128
2129static void
2130nfsd4_layoutget_release(union nfsd4_op_u *u)
2131{
2132	kfree(u->layoutget.lg_content);
2133}
2134
2135static __be32
2136nfsd4_layoutcommit(struct svc_rqst *rqstp,
2137		struct nfsd4_compound_state *cstate, union nfsd4_op_u *u)
2138{
2139	struct nfsd4_layoutcommit *lcp = &u->layoutcommit;
2140	const struct nfsd4_layout_seg *seg = &lcp->lc_seg;
2141	struct svc_fh *current_fh = &cstate->current_fh;
2142	const struct nfsd4_layout_ops *ops;
2143	loff_t new_size = lcp->lc_last_wr + 1;
2144	struct inode *inode;
2145	struct nfs4_layout_stateid *ls;
2146	__be32 nfserr;
2147
2148	nfserr = fh_verify(rqstp, current_fh, 0, NFSD_MAY_WRITE);
2149	if (nfserr)
2150		goto out;
2151
2152	nfserr = nfserr_layoutunavailable;
2153	ops = nfsd4_layout_verify(current_fh->fh_export, lcp->lc_layout_type);
2154	if (!ops)
2155		goto out;
2156	inode = d_inode(current_fh->fh_dentry);
2157
2158	nfserr = nfserr_inval;
2159	if (new_size <= seg->offset) {
2160		dprintk("pnfsd: last write before layout segment\n");
2161		goto out;
2162	}
2163	if (new_size > seg->offset + seg->length) {
2164		dprintk("pnfsd: last write beyond layout segment\n");
2165		goto out;
2166	}
2167	if (!lcp->lc_newoffset && new_size > i_size_read(inode)) {
2168		dprintk("pnfsd: layoutcommit beyond EOF\n");
2169		goto out;
2170	}
2171
2172	nfserr = nfsd4_preprocess_layout_stateid(rqstp, cstate, &lcp->lc_sid,
2173						false, lcp->lc_layout_type,
2174						&ls);
2175	if (nfserr) {
2176		trace_nfsd_layout_commit_lookup_fail(&lcp->lc_sid);
2177		/* fixup error code as per RFC5661 */
2178		if (nfserr == nfserr_bad_stateid)
2179			nfserr = nfserr_badlayout;
2180		goto out;
2181	}
2182
2183	/* LAYOUTCOMMIT does not require any serialization */
2184	mutex_unlock(&ls->ls_mutex);
2185
2186	if (new_size > i_size_read(inode)) {
2187		lcp->lc_size_chg = 1;
2188		lcp->lc_newsize = new_size;
2189	} else {
2190		lcp->lc_size_chg = 0;
2191	}
2192
2193	nfserr = ops->proc_layoutcommit(inode, lcp);
2194	nfs4_put_stid(&ls->ls_stid);
2195out:
2196	return nfserr;
2197}
2198
2199static __be32
2200nfsd4_layoutreturn(struct svc_rqst *rqstp,
2201		struct nfsd4_compound_state *cstate, union nfsd4_op_u *u)
2202{
2203	struct nfsd4_layoutreturn *lrp = &u->layoutreturn;
2204	struct svc_fh *current_fh = &cstate->current_fh;
2205	__be32 nfserr;
2206
2207	nfserr = fh_verify(rqstp, current_fh, 0, NFSD_MAY_NOP);
2208	if (nfserr)
2209		goto out;
2210
2211	nfserr = nfserr_layoutunavailable;
2212	if (!nfsd4_layout_verify(current_fh->fh_export, lrp->lr_layout_type))
2213		goto out;
2214
2215	switch (lrp->lr_seg.iomode) {
2216	case IOMODE_READ:
2217	case IOMODE_RW:
2218	case IOMODE_ANY:
2219		break;
2220	default:
2221		dprintk("%s: invalid iomode %d\n", __func__,
2222			lrp->lr_seg.iomode);
2223		nfserr = nfserr_inval;
2224		goto out;
2225	}
2226
2227	switch (lrp->lr_return_type) {
2228	case RETURN_FILE:
2229		nfserr = nfsd4_return_file_layouts(rqstp, cstate, lrp);
2230		break;
2231	case RETURN_FSID:
2232	case RETURN_ALL:
2233		nfserr = nfsd4_return_client_layouts(rqstp, cstate, lrp);
2234		break;
2235	default:
2236		dprintk("%s: invalid return_type %d\n", __func__,
2237			lrp->lr_return_type);
2238		nfserr = nfserr_inval;
2239		break;
2240	}
2241out:
2242	return nfserr;
2243}
2244#endif /* CONFIG_NFSD_PNFS */
2245
2246static __be32
2247nfsd4_getxattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
2248	       union nfsd4_op_u *u)
2249{
2250	struct nfsd4_getxattr *getxattr = &u->getxattr;
2251
2252	return nfsd_getxattr(rqstp, &cstate->current_fh,
2253			     getxattr->getxa_name, &getxattr->getxa_buf,
2254			     &getxattr->getxa_len);
2255}
2256
2257static __be32
2258nfsd4_setxattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
2259	   union nfsd4_op_u *u)
2260{
2261	struct nfsd4_setxattr *setxattr = &u->setxattr;
2262	__be32 ret;
2263
2264	if (opens_in_grace(SVC_NET(rqstp)))
2265		return nfserr_grace;
2266
2267	ret = nfsd_setxattr(rqstp, &cstate->current_fh, setxattr->setxa_name,
2268			    setxattr->setxa_buf, setxattr->setxa_len,
2269			    setxattr->setxa_flags);
2270
2271	if (!ret)
2272		set_change_info(&setxattr->setxa_cinfo, &cstate->current_fh);
2273
2274	return ret;
2275}
2276
2277static __be32
2278nfsd4_listxattrs(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
2279	   union nfsd4_op_u *u)
2280{
2281	/*
2282	 * Get the entire list, then copy out only the user attributes
2283	 * in the encode function.
2284	 */
2285	return nfsd_listxattr(rqstp, &cstate->current_fh,
2286			     &u->listxattrs.lsxa_buf, &u->listxattrs.lsxa_len);
2287}
2288
2289static __be32
2290nfsd4_removexattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
2291	   union nfsd4_op_u *u)
2292{
2293	struct nfsd4_removexattr *removexattr = &u->removexattr;
2294	__be32 ret;
2295
2296	if (opens_in_grace(SVC_NET(rqstp)))
2297		return nfserr_grace;
2298
2299	ret = nfsd_removexattr(rqstp, &cstate->current_fh,
2300	    removexattr->rmxa_name);
2301
2302	if (!ret)
2303		set_change_info(&removexattr->rmxa_cinfo, &cstate->current_fh);
2304
2305	return ret;
2306}
2307
2308/*
2309 * NULL call.
2310 */
2311static __be32
2312nfsd4_proc_null(struct svc_rqst *rqstp)
2313{
2314	return rpc_success;
2315}
2316
2317static inline void nfsd4_increment_op_stats(u32 opnum)
2318{
2319	if (opnum >= FIRST_NFS4_OP && opnum <= LAST_NFS4_OP)
2320		percpu_counter_inc(&nfsdstats.counter[NFSD_STATS_NFS4_OP(opnum)]);
2321}
2322
2323static const struct nfsd4_operation nfsd4_ops[];
2324
 
2325static const char *nfsd4_op_name(unsigned opnum);
 
2326
2327/*
2328 * Enforce NFSv4.1 COMPOUND ordering rules:
2329 *
2330 * Also note, enforced elsewhere:
2331 *	- SEQUENCE other than as first op results in
2332 *	  NFS4ERR_SEQUENCE_POS. (Enforced in nfsd4_sequence().)
2333 *	- BIND_CONN_TO_SESSION must be the only op in its compound.
2334 *	  (Enforced in nfsd4_bind_conn_to_session().)
2335 *	- DESTROY_SESSION must be the final operation in a compound, if
2336 *	  sessionid's in SEQUENCE and DESTROY_SESSION are the same.
2337 *	  (Enforced in nfsd4_destroy_session().)
2338 */
2339static __be32 nfs41_check_op_ordering(struct nfsd4_compoundargs *args)
2340{
2341	struct nfsd4_op *first_op = &args->ops[0];
2342
2343	/* These ordering requirements don't apply to NFSv4.0: */
2344	if (args->minorversion == 0)
2345		return nfs_ok;
2346	/* This is weird, but OK, not our problem: */
2347	if (args->opcnt == 0)
2348		return nfs_ok;
2349	if (first_op->status == nfserr_op_illegal)
2350		return nfs_ok;
2351	if (!(nfsd4_ops[first_op->opnum].op_flags & ALLOWED_AS_FIRST_OP))
2352		return nfserr_op_not_in_session;
2353	if (first_op->opnum == OP_SEQUENCE)
2354		return nfs_ok;
2355	/*
2356	 * So first_op is something allowed outside a session, like
2357	 * EXCHANGE_ID; but then it has to be the only op in the
2358	 * compound:
2359	 */
2360	if (args->opcnt != 1)
2361		return nfserr_not_only_op;
2362	return nfs_ok;
2363}
2364
2365const struct nfsd4_operation *OPDESC(struct nfsd4_op *op)
2366{
2367	return &nfsd4_ops[op->opnum];
2368}
2369
2370bool nfsd4_cache_this_op(struct nfsd4_op *op)
2371{
2372	if (op->opnum == OP_ILLEGAL)
2373		return false;
2374	return OPDESC(op)->op_flags & OP_CACHEME;
2375}
2376
2377static bool need_wrongsec_check(struct svc_rqst *rqstp)
2378{
2379	struct nfsd4_compoundres *resp = rqstp->rq_resp;
2380	struct nfsd4_compoundargs *argp = rqstp->rq_argp;
2381	struct nfsd4_op *this = &argp->ops[resp->opcnt - 1];
2382	struct nfsd4_op *next = &argp->ops[resp->opcnt];
2383	const struct nfsd4_operation *thisd = OPDESC(this);
2384	const struct nfsd4_operation *nextd;
2385
 
2386	/*
2387	 * Most ops check wronsec on our own; only the putfh-like ops
2388	 * have special rules.
2389	 */
2390	if (!(thisd->op_flags & OP_IS_PUTFH_LIKE))
2391		return false;
2392	/*
2393	 * rfc 5661 2.6.3.1.1.6: don't bother erroring out a
2394	 * put-filehandle operation if we're not going to use the
2395	 * result:
2396	 */
2397	if (argp->opcnt == resp->opcnt)
2398		return false;
2399	if (next->opnum == OP_ILLEGAL)
2400		return false;
2401	nextd = OPDESC(next);
2402	/*
2403	 * Rest of 2.6.3.1.1: certain operations will return WRONGSEC
2404	 * errors themselves as necessary; others should check for them
2405	 * now:
2406	 */
2407	return !(nextd->op_flags & OP_HANDLES_WRONGSEC);
2408}
2409
2410#ifdef CONFIG_NFSD_V4_2_INTER_SSC
2411static void
2412check_if_stalefh_allowed(struct nfsd4_compoundargs *args)
2413{
2414	struct nfsd4_op	*op, *current_op = NULL, *saved_op = NULL;
2415	struct nfsd4_copy *copy;
2416	struct nfsd4_putfh *putfh;
2417	int i;
2418
2419	/* traverse all operation and if it's a COPY compound, mark the
2420	 * source filehandle to skip verification
2421	 */
2422	for (i = 0; i < args->opcnt; i++) {
2423		op = &args->ops[i];
2424		if (op->opnum == OP_PUTFH)
2425			current_op = op;
2426		else if (op->opnum == OP_SAVEFH)
2427			saved_op = current_op;
2428		else if (op->opnum == OP_RESTOREFH)
2429			current_op = saved_op;
2430		else if (op->opnum == OP_COPY) {
2431			copy = (struct nfsd4_copy *)&op->u;
2432			if (!saved_op) {
2433				op->status = nfserr_nofilehandle;
2434				return;
2435			}
2436			putfh = (struct nfsd4_putfh *)&saved_op->u;
2437			if (!copy->cp_intra)
2438				putfh->no_verify = true;
2439		}
2440	}
2441}
2442#else
2443static void
2444check_if_stalefh_allowed(struct nfsd4_compoundargs *args)
2445{
2446}
2447#endif
2448
2449/*
2450 * COMPOUND call.
2451 */
2452static __be32
2453nfsd4_proc_compound(struct svc_rqst *rqstp)
 
 
2454{
2455	struct nfsd4_compoundargs *args = rqstp->rq_argp;
2456	struct nfsd4_compoundres *resp = rqstp->rq_resp;
2457	struct nfsd4_op	*op;
 
2458	struct nfsd4_compound_state *cstate = &resp->cstate;
2459	struct svc_fh *current_fh = &cstate->current_fh;
2460	struct svc_fh *save_fh = &cstate->save_fh;
2461	struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
 
2462	__be32		status;
2463
2464	resp->xdr = &rqstp->rq_res_stream;
2465
2466	/* reserve space for: NFS status code */
2467	xdr_reserve_space(resp->xdr, XDR_UNIT);
2468
2469	resp->tagp = resp->xdr->p;
2470	/* reserve space for: taglen, tag, and opcnt */
2471	xdr_reserve_space(resp->xdr, XDR_UNIT * 2 + args->taglen);
 
2472	resp->taglen = args->taglen;
2473	resp->tag = args->tag;
 
2474	resp->rqstp = rqstp;
2475	cstate->minorversion = args->minorversion;
 
 
2476	fh_init(current_fh, NFS4_FHSIZE);
2477	fh_init(save_fh, NFS4_FHSIZE);
2478	/*
2479	 * Don't use the deferral mechanism for NFSv4; compounds make it
2480	 * too hard to avoid non-idempotency problems.
2481	 */
2482	clear_bit(RQ_USEDEFERRAL, &rqstp->rq_flags);
2483
2484	/*
2485	 * According to RFC3010, this takes precedence over all other errors.
2486	 */
2487	status = nfserr_minor_vers_mismatch;
2488	if (nfsd_minorversion(nn, args->minorversion, NFSD_TEST) <= 0)
2489		goto out;
2490	status = nfserr_resource;
2491	if (args->opcnt > NFSD_MAX_OPS_PER_COMPOUND)
2492		goto out;
2493
2494	status = nfs41_check_op_ordering(args);
2495	if (status) {
2496		op = &args->ops[0];
2497		op->status = status;
2498		resp->opcnt = 1;
2499		goto encode_op;
2500	}
2501	check_if_stalefh_allowed(args);
2502
2503	rqstp->rq_lease_breaker = (void **)&cstate->clp;
2504
2505	trace_nfsd_compound(rqstp, args->opcnt);
2506	while (!status && resp->opcnt < args->opcnt) {
2507		op = &args->ops[resp->opcnt++];
2508
 
 
 
2509		/*
2510		 * The XDR decode routines may have pre-set op->status;
2511		 * for example, if there is a miscellaneous XDR error
2512		 * it will be set to nfserr_bad_xdr.
2513		 */
2514		if (op->status) {
2515			if (op->opnum == OP_OPEN)
2516				op->status = nfsd4_open_omfg(rqstp, cstate, op);
2517			goto encode_op;
2518		}
2519		if (!current_fh->fh_dentry &&
2520				!HAS_FH_FLAG(current_fh, NFSD4_FH_FOREIGN)) {
2521			if (!(op->opdesc->op_flags & ALLOWED_WITHOUT_FH)) {
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
2522				op->status = nfserr_nofilehandle;
2523				goto encode_op;
2524			}
2525		} else if (current_fh->fh_export &&
2526			   current_fh->fh_export->ex_fslocs.migrated &&
2527			  !(op->opdesc->op_flags & ALLOWED_ON_ABSENT_FS)) {
2528			op->status = nfserr_moved;
2529			goto encode_op;
2530		}
2531
2532		fh_clear_wcc(current_fh);
2533
2534		/* If op is non-idempotent */
2535		if (op->opdesc->op_flags & OP_MODIFIES_SOMETHING) {
2536			/*
2537			 * Don't execute this op if we couldn't encode a
2538			 * succesful reply:
2539			 */
2540			u32 plen = op->opdesc->op_rsize_bop(rqstp, op);
2541			/*
2542			 * Plus if there's another operation, make sure
2543			 * we'll have space to at least encode an error:
2544			 */
2545			if (resp->opcnt < args->opcnt)
2546				plen += COMPOUND_ERR_SLACK_SPACE;
2547			op->status = nfsd4_check_resp_size(resp, plen);
2548		}
2549
2550		if (op->status)
2551			goto encode_op;
2552
2553		if (op->opdesc->op_get_currentstateid)
2554			op->opdesc->op_get_currentstateid(cstate, &op->u);
2555		op->status = op->opdesc->op_func(rqstp, cstate, &op->u);
2556
2557		/* Only from SEQUENCE */
2558		if (cstate->status == nfserr_replay_cache) {
2559			dprintk("%s NFS4.1 replay from cache\n", __func__);
2560			status = op->status;
2561			goto out;
2562		}
2563		if (!op->status) {
2564			if (op->opdesc->op_set_currentstateid)
2565				op->opdesc->op_set_currentstateid(cstate, &op->u);
2566
2567			if (op->opdesc->op_flags & OP_CLEAR_STATEID)
2568				clear_current_stateid(cstate);
2569
2570			if (current_fh->fh_export &&
2571					need_wrongsec_check(rqstp))
2572				op->status = check_nfsd_access(current_fh->fh_export, rqstp);
2573		}
 
2574encode_op:
 
 
 
 
 
 
2575		if (op->status == nfserr_replay_me) {
2576			op->replay = &cstate->replay_owner->so_replay;
2577			nfsd4_encode_replay(resp->xdr, op);
2578			status = op->status = op->replay->rp_status;
2579		} else {
2580			nfsd4_encode_operation(resp, op);
2581			status = op->status;
2582		}
2583
2584		trace_nfsd_compound_status(args->opcnt, resp->opcnt, status,
2585					   nfsd4_op_name(op->opnum));
 
 
 
 
 
 
 
 
 
2586
2587		nfsd4_cstate_clear_replay(cstate);
2588		nfsd4_increment_op_stats(op->opnum);
2589	}
2590
 
2591	fh_put(current_fh);
2592	fh_put(save_fh);
2593	BUG_ON(cstate->replay_owner);
2594out:
2595	cstate->status = status;
2596	/* Reset deferral mechanism for RPC deferrals */
2597	set_bit(RQ_USEDEFERRAL, &rqstp->rq_flags);
2598	return rpc_success;
 
2599}
2600
2601#define op_encode_hdr_size		(2)
2602#define op_encode_stateid_maxsz		(XDR_QUADLEN(NFS4_STATEID_SIZE))
2603#define op_encode_verifier_maxsz	(XDR_QUADLEN(NFS4_VERIFIER_SIZE))
2604#define op_encode_change_info_maxsz	(5)
2605#define nfs4_fattr_bitmap_maxsz		(4)
2606
2607/* We'll fall back on returning no lockowner if run out of space: */
2608#define op_encode_lockowner_maxsz	(0)
2609#define op_encode_lock_denied_maxsz	(8 + op_encode_lockowner_maxsz)
2610
2611#define nfs4_owner_maxsz		(1 + XDR_QUADLEN(IDMAP_NAMESZ))
2612
2613#define op_encode_ace_maxsz		(3 + nfs4_owner_maxsz)
2614#define op_encode_delegation_maxsz	(1 + op_encode_stateid_maxsz + 1 + \
2615					 op_encode_ace_maxsz)
2616
2617#define op_encode_channel_attrs_maxsz	(6 + 1 + 1)
2618
2619static inline u32 nfsd4_only_status_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2620{
2621	return (op_encode_hdr_size) * sizeof(__be32);
2622}
2623
2624static inline u32 nfsd4_status_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2625{
2626	return (op_encode_hdr_size + op_encode_stateid_maxsz)* sizeof(__be32);
2627}
2628
2629static inline u32 nfsd4_access_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2630{
2631	/* ac_supported, ac_resp_access */
2632	return (op_encode_hdr_size + 2)* sizeof(__be32);
2633}
2634
2635static inline u32 nfsd4_commit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2636{
2637	return (op_encode_hdr_size + op_encode_verifier_maxsz) * sizeof(__be32);
2638}
2639
2640static inline u32 nfsd4_create_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2641{
2642	return (op_encode_hdr_size + op_encode_change_info_maxsz
2643		+ nfs4_fattr_bitmap_maxsz) * sizeof(__be32);
2644}
2645
2646/*
2647 * Note since this is an idempotent operation we won't insist on failing
2648 * the op prematurely if the estimate is too large.  We may turn off splice
2649 * reads unnecessarily.
2650 */
2651static inline u32 nfsd4_getattr_rsize(struct svc_rqst *rqstp,
2652				      struct nfsd4_op *op)
2653{
2654	u32 *bmap = op->u.getattr.ga_bmval;
2655	u32 bmap0 = bmap[0], bmap1 = bmap[1], bmap2 = bmap[2];
2656	u32 ret = 0;
2657
2658	if (bmap0 & FATTR4_WORD0_ACL)
2659		return svc_max_payload(rqstp);
2660	if (bmap0 & FATTR4_WORD0_FS_LOCATIONS)
2661		return svc_max_payload(rqstp);
2662
2663	if (bmap1 & FATTR4_WORD1_OWNER) {
2664		ret += IDMAP_NAMESZ + 4;
2665		bmap1 &= ~FATTR4_WORD1_OWNER;
2666	}
2667	if (bmap1 & FATTR4_WORD1_OWNER_GROUP) {
2668		ret += IDMAP_NAMESZ + 4;
2669		bmap1 &= ~FATTR4_WORD1_OWNER_GROUP;
2670	}
2671	if (bmap0 & FATTR4_WORD0_FILEHANDLE) {
2672		ret += NFS4_FHSIZE + 4;
2673		bmap0 &= ~FATTR4_WORD0_FILEHANDLE;
2674	}
2675	if (bmap2 & FATTR4_WORD2_SECURITY_LABEL) {
2676		ret += NFS4_MAXLABELLEN + 12;
2677		bmap2 &= ~FATTR4_WORD2_SECURITY_LABEL;
2678	}
2679	/*
2680	 * Largest of remaining attributes are 16 bytes (e.g.,
2681	 * supported_attributes)
2682	 */
2683	ret += 16 * (hweight32(bmap0) + hweight32(bmap1) + hweight32(bmap2));
2684	/* bitmask, length */
2685	ret += 20;
2686	return ret;
2687}
2688
2689static inline u32 nfsd4_getfh_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2690{
2691	return (op_encode_hdr_size + 1) * sizeof(__be32) + NFS4_FHSIZE;
2692}
2693
2694static inline u32 nfsd4_link_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2695{
2696	return (op_encode_hdr_size + op_encode_change_info_maxsz)
2697		* sizeof(__be32);
2698}
2699
2700static inline u32 nfsd4_lock_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2701{
2702	return (op_encode_hdr_size + op_encode_lock_denied_maxsz)
2703		* sizeof(__be32);
2704}
2705
2706static inline u32 nfsd4_open_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2707{
2708	return (op_encode_hdr_size + op_encode_stateid_maxsz
2709		+ op_encode_change_info_maxsz + 1
2710		+ nfs4_fattr_bitmap_maxsz
2711		+ op_encode_delegation_maxsz) * sizeof(__be32);
2712}
2713
2714static inline u32 nfsd4_read_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2715{
2716	u32 maxcount = 0, rlen = 0;
2717
2718	maxcount = svc_max_payload(rqstp);
2719	rlen = min(op->u.read.rd_length, maxcount);
2720
2721	return (op_encode_hdr_size + 2 + XDR_QUADLEN(rlen)) * sizeof(__be32);
2722}
2723
2724static inline u32 nfsd4_read_plus_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2725{
2726	u32 maxcount = svc_max_payload(rqstp);
2727	u32 rlen = min(op->u.read.rd_length, maxcount);
2728	/*
2729	 * If we detect that the file changed during hole encoding, then we
2730	 * recover by encoding the remaining reply as data. This means we need
2731	 * to set aside enough room to encode two data segments.
2732	 */
2733	u32 seg_len = 2 * (1 + 2 + 1);
2734
2735	return (op_encode_hdr_size + 2 + seg_len + XDR_QUADLEN(rlen)) * sizeof(__be32);
2736}
2737
2738static inline u32 nfsd4_readdir_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2739{
2740	u32 maxcount = 0, rlen = 0;
2741
2742	maxcount = svc_max_payload(rqstp);
2743	rlen = min(op->u.readdir.rd_maxcount, maxcount);
2744
2745	return (op_encode_hdr_size + op_encode_verifier_maxsz +
2746		XDR_QUADLEN(rlen)) * sizeof(__be32);
2747}
2748
2749static inline u32 nfsd4_readlink_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2750{
2751	return (op_encode_hdr_size + 1) * sizeof(__be32) + PAGE_SIZE;
2752}
2753
2754static inline u32 nfsd4_remove_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2755{
2756	return (op_encode_hdr_size + op_encode_change_info_maxsz)
2757		* sizeof(__be32);
2758}
2759
2760static inline u32 nfsd4_rename_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2761{
2762	return (op_encode_hdr_size + op_encode_change_info_maxsz
2763		+ op_encode_change_info_maxsz) * sizeof(__be32);
2764}
2765
2766static inline u32 nfsd4_sequence_rsize(struct svc_rqst *rqstp,
2767				       struct nfsd4_op *op)
2768{
2769	return (op_encode_hdr_size
2770		+ XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + 5) * sizeof(__be32);
2771}
2772
2773static inline u32 nfsd4_test_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2774{
2775	return (op_encode_hdr_size + 1 + op->u.test_stateid.ts_num_ids)
2776		* sizeof(__be32);
2777}
2778
2779static inline u32 nfsd4_setattr_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2780{
2781	return (op_encode_hdr_size + nfs4_fattr_bitmap_maxsz) * sizeof(__be32);
2782}
2783
2784static inline u32 nfsd4_secinfo_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2785{
2786	return (op_encode_hdr_size + RPC_AUTH_MAXFLAVOR *
2787		(4 + XDR_QUADLEN(GSS_OID_MAX_LEN))) * sizeof(__be32);
2788}
2789
2790static inline u32 nfsd4_setclientid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2791{
2792	return (op_encode_hdr_size + 2 + XDR_QUADLEN(NFS4_VERIFIER_SIZE)) *
2793								sizeof(__be32);
2794}
2795
2796static inline u32 nfsd4_write_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2797{
2798	return (op_encode_hdr_size + 2 + op_encode_verifier_maxsz) * sizeof(__be32);
2799}
2800
2801static inline u32 nfsd4_exchange_id_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2802{
2803	return (op_encode_hdr_size + 2 + 1 + /* eir_clientid, eir_sequenceid */\
2804		1 + 1 + /* eir_flags, spr_how */\
2805		4 + /* spo_must_enforce & _allow with bitmap */\
2806		2 + /*eir_server_owner.so_minor_id */\
2807		/* eir_server_owner.so_major_id<> */\
2808		XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\
2809		/* eir_server_scope<> */\
2810		XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\
2811		1 + /* eir_server_impl_id array length */\
2812		0 /* ignored eir_server_impl_id contents */) * sizeof(__be32);
2813}
2814
2815static inline u32 nfsd4_bind_conn_to_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2816{
2817	return (op_encode_hdr_size + \
2818		XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* bctsr_sessid */\
2819		2 /* bctsr_dir, use_conn_in_rdma_mode */) * sizeof(__be32);
2820}
2821
2822static inline u32 nfsd4_create_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2823{
2824	return (op_encode_hdr_size + \
2825		XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* sessionid */\
2826		2 + /* csr_sequence, csr_flags */\
2827		op_encode_channel_attrs_maxsz + \
2828		op_encode_channel_attrs_maxsz) * sizeof(__be32);
2829}
2830
2831static inline u32 nfsd4_copy_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2832{
2833	return (op_encode_hdr_size +
2834		1 /* wr_callback */ +
2835		op_encode_stateid_maxsz /* wr_callback */ +
2836		2 /* wr_count */ +
2837		1 /* wr_committed */ +
2838		op_encode_verifier_maxsz +
2839		1 /* cr_consecutive */ +
2840		1 /* cr_synchronous */) * sizeof(__be32);
2841}
2842
2843static inline u32 nfsd4_offload_status_rsize(struct svc_rqst *rqstp,
2844					     struct nfsd4_op *op)
2845{
2846	return (op_encode_hdr_size +
2847		2 /* osr_count */ +
2848		1 /* osr_complete<1> optional 0 for now */) * sizeof(__be32);
2849}
2850
2851static inline u32 nfsd4_copy_notify_rsize(struct svc_rqst *rqstp,
2852					struct nfsd4_op *op)
2853{
2854	return (op_encode_hdr_size +
2855		3 /* cnr_lease_time */ +
2856		1 /* We support one cnr_source_server */ +
2857		1 /* cnr_stateid seq */ +
2858		op_encode_stateid_maxsz /* cnr_stateid */ +
2859		1 /* num cnr_source_server*/ +
2860		1 /* nl4_type */ +
2861		1 /* nl4 size */ +
2862		XDR_QUADLEN(NFS4_OPAQUE_LIMIT) /*nl4_loc + nl4_loc_sz */)
2863		* sizeof(__be32);
2864}
2865
2866#ifdef CONFIG_NFSD_PNFS
2867static inline u32 nfsd4_getdeviceinfo_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2868{
2869	u32 maxcount = 0, rlen = 0;
2870
2871	maxcount = svc_max_payload(rqstp);
2872	rlen = min(op->u.getdeviceinfo.gd_maxcount, maxcount);
2873
2874	return (op_encode_hdr_size +
2875		1 /* gd_layout_type*/ +
2876		XDR_QUADLEN(rlen) +
2877		2 /* gd_notify_types */) * sizeof(__be32);
2878}
2879
2880/*
2881 * At this stage we don't really know what layout driver will handle the request,
2882 * so we need to define an arbitrary upper bound here.
2883 */
2884#define MAX_LAYOUT_SIZE		128
2885static inline u32 nfsd4_layoutget_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2886{
2887	return (op_encode_hdr_size +
2888		1 /* logr_return_on_close */ +
2889		op_encode_stateid_maxsz +
2890		1 /* nr of layouts */ +
2891		MAX_LAYOUT_SIZE) * sizeof(__be32);
2892}
2893
2894static inline u32 nfsd4_layoutcommit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2895{
2896	return (op_encode_hdr_size +
2897		1 /* locr_newsize */ +
2898		2 /* ns_size */) * sizeof(__be32);
2899}
2900
2901static inline u32 nfsd4_layoutreturn_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2902{
2903	return (op_encode_hdr_size +
2904		1 /* lrs_stateid */ +
2905		op_encode_stateid_maxsz) * sizeof(__be32);
2906}
2907#endif /* CONFIG_NFSD_PNFS */
2908
2909
2910static inline u32 nfsd4_seek_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2911{
2912	return (op_encode_hdr_size + 3) * sizeof(__be32);
2913}
2914
2915static inline u32 nfsd4_getxattr_rsize(struct svc_rqst *rqstp,
2916				       struct nfsd4_op *op)
2917{
2918	u32 maxcount, rlen;
2919
2920	maxcount = svc_max_payload(rqstp);
2921	rlen = min_t(u32, XATTR_SIZE_MAX, maxcount);
2922
2923	return (op_encode_hdr_size + 1 + XDR_QUADLEN(rlen)) * sizeof(__be32);
2924}
2925
2926static inline u32 nfsd4_setxattr_rsize(struct svc_rqst *rqstp,
2927				       struct nfsd4_op *op)
2928{
2929	return (op_encode_hdr_size + op_encode_change_info_maxsz)
2930		* sizeof(__be32);
2931}
2932static inline u32 nfsd4_listxattrs_rsize(struct svc_rqst *rqstp,
2933					 struct nfsd4_op *op)
2934{
2935	u32 maxcount, rlen;
2936
2937	maxcount = svc_max_payload(rqstp);
2938	rlen = min(op->u.listxattrs.lsxa_maxcount, maxcount);
2939
2940	return (op_encode_hdr_size + 4 + XDR_QUADLEN(rlen)) * sizeof(__be32);
2941}
2942
2943static inline u32 nfsd4_removexattr_rsize(struct svc_rqst *rqstp,
2944					  struct nfsd4_op *op)
2945{
2946	return (op_encode_hdr_size + op_encode_change_info_maxsz)
2947		* sizeof(__be32);
2948}
2949
2950
2951static const struct nfsd4_operation nfsd4_ops[] = {
2952	[OP_ACCESS] = {
2953		.op_func = nfsd4_access,
2954		.op_name = "OP_ACCESS",
2955		.op_rsize_bop = nfsd4_access_rsize,
2956	},
2957	[OP_CLOSE] = {
2958		.op_func = nfsd4_close,
2959		.op_flags = OP_MODIFIES_SOMETHING,
2960		.op_name = "OP_CLOSE",
2961		.op_rsize_bop = nfsd4_status_stateid_rsize,
2962		.op_get_currentstateid = nfsd4_get_closestateid,
2963		.op_set_currentstateid = nfsd4_set_closestateid,
2964	},
2965	[OP_COMMIT] = {
2966		.op_func = nfsd4_commit,
2967		.op_flags = OP_MODIFIES_SOMETHING,
2968		.op_name = "OP_COMMIT",
2969		.op_rsize_bop = nfsd4_commit_rsize,
2970	},
2971	[OP_CREATE] = {
2972		.op_func = nfsd4_create,
2973		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME | OP_CLEAR_STATEID,
2974		.op_name = "OP_CREATE",
2975		.op_rsize_bop = nfsd4_create_rsize,
2976	},
2977	[OP_DELEGRETURN] = {
2978		.op_func = nfsd4_delegreturn,
2979		.op_flags = OP_MODIFIES_SOMETHING,
2980		.op_name = "OP_DELEGRETURN",
2981		.op_rsize_bop = nfsd4_only_status_rsize,
2982		.op_get_currentstateid = nfsd4_get_delegreturnstateid,
2983	},
2984	[OP_GETATTR] = {
2985		.op_func = nfsd4_getattr,
2986		.op_flags = ALLOWED_ON_ABSENT_FS,
2987		.op_rsize_bop = nfsd4_getattr_rsize,
2988		.op_name = "OP_GETATTR",
2989	},
2990	[OP_GETFH] = {
2991		.op_func = nfsd4_getfh,
2992		.op_name = "OP_GETFH",
2993		.op_rsize_bop = nfsd4_getfh_rsize,
2994	},
2995	[OP_LINK] = {
2996		.op_func = nfsd4_link,
2997		.op_flags = ALLOWED_ON_ABSENT_FS | OP_MODIFIES_SOMETHING
2998				| OP_CACHEME,
2999		.op_name = "OP_LINK",
3000		.op_rsize_bop = nfsd4_link_rsize,
3001	},
3002	[OP_LOCK] = {
3003		.op_func = nfsd4_lock,
3004		.op_flags = OP_MODIFIES_SOMETHING |
3005				OP_NONTRIVIAL_ERROR_ENCODE,
3006		.op_name = "OP_LOCK",
3007		.op_rsize_bop = nfsd4_lock_rsize,
3008		.op_set_currentstateid = nfsd4_set_lockstateid,
3009	},
3010	[OP_LOCKT] = {
3011		.op_func = nfsd4_lockt,
3012		.op_flags = OP_NONTRIVIAL_ERROR_ENCODE,
3013		.op_name = "OP_LOCKT",
3014		.op_rsize_bop = nfsd4_lock_rsize,
3015	},
3016	[OP_LOCKU] = {
3017		.op_func = nfsd4_locku,
3018		.op_flags = OP_MODIFIES_SOMETHING,
3019		.op_name = "OP_LOCKU",
3020		.op_rsize_bop = nfsd4_status_stateid_rsize,
3021		.op_get_currentstateid = nfsd4_get_lockustateid,
3022	},
3023	[OP_LOOKUP] = {
3024		.op_func = nfsd4_lookup,
3025		.op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID,
3026		.op_name = "OP_LOOKUP",
3027		.op_rsize_bop = nfsd4_only_status_rsize,
3028	},
3029	[OP_LOOKUPP] = {
3030		.op_func = nfsd4_lookupp,
3031		.op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID,
3032		.op_name = "OP_LOOKUPP",
3033		.op_rsize_bop = nfsd4_only_status_rsize,
3034	},
3035	[OP_NVERIFY] = {
3036		.op_func = nfsd4_nverify,
3037		.op_name = "OP_NVERIFY",
3038		.op_rsize_bop = nfsd4_only_status_rsize,
3039	},
3040	[OP_OPEN] = {
3041		.op_func = nfsd4_open,
3042		.op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING,
3043		.op_name = "OP_OPEN",
3044		.op_rsize_bop = nfsd4_open_rsize,
3045		.op_set_currentstateid = nfsd4_set_openstateid,
3046	},
3047	[OP_OPEN_CONFIRM] = {
3048		.op_func = nfsd4_open_confirm,
3049		.op_flags = OP_MODIFIES_SOMETHING,
3050		.op_name = "OP_OPEN_CONFIRM",
3051		.op_rsize_bop = nfsd4_status_stateid_rsize,
3052	},
3053	[OP_OPEN_DOWNGRADE] = {
3054		.op_func = nfsd4_open_downgrade,
3055		.op_flags = OP_MODIFIES_SOMETHING,
3056		.op_name = "OP_OPEN_DOWNGRADE",
3057		.op_rsize_bop = nfsd4_status_stateid_rsize,
3058		.op_get_currentstateid = nfsd4_get_opendowngradestateid,
3059		.op_set_currentstateid = nfsd4_set_opendowngradestateid,
3060	},
3061	[OP_PUTFH] = {
3062		.op_func = nfsd4_putfh,
3063		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3064				| OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID,
 
3065		.op_name = "OP_PUTFH",
3066		.op_rsize_bop = nfsd4_only_status_rsize,
3067	},
3068	[OP_PUTPUBFH] = {
3069		.op_func = nfsd4_putrootfh,
3070		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3071				| OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID,
 
3072		.op_name = "OP_PUTPUBFH",
3073		.op_rsize_bop = nfsd4_only_status_rsize,
3074	},
3075	[OP_PUTROOTFH] = {
3076		.op_func = nfsd4_putrootfh,
3077		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3078				| OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID,
 
3079		.op_name = "OP_PUTROOTFH",
3080		.op_rsize_bop = nfsd4_only_status_rsize,
3081	},
3082	[OP_READ] = {
3083		.op_func = nfsd4_read,
3084		.op_release = nfsd4_read_release,
3085		.op_name = "OP_READ",
3086		.op_rsize_bop = nfsd4_read_rsize,
3087		.op_get_currentstateid = nfsd4_get_readstateid,
3088	},
3089	[OP_READDIR] = {
3090		.op_func = nfsd4_readdir,
 
3091		.op_name = "OP_READDIR",
3092		.op_rsize_bop = nfsd4_readdir_rsize,
3093	},
3094	[OP_READLINK] = {
3095		.op_func = nfsd4_readlink,
3096		.op_name = "OP_READLINK",
3097		.op_rsize_bop = nfsd4_readlink_rsize,
3098	},
3099	[OP_REMOVE] = {
3100		.op_func = nfsd4_remove,
3101		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
3102		.op_name = "OP_REMOVE",
3103		.op_rsize_bop = nfsd4_remove_rsize,
3104	},
3105	[OP_RENAME] = {
3106		.op_func = nfsd4_rename,
3107		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
3108		.op_name = "OP_RENAME",
3109		.op_rsize_bop = nfsd4_rename_rsize,
3110	},
3111	[OP_RENEW] = {
3112		.op_func = nfsd4_renew,
3113		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3114				| OP_MODIFIES_SOMETHING,
3115		.op_name = "OP_RENEW",
3116		.op_rsize_bop = nfsd4_only_status_rsize,
3117
3118	},
3119	[OP_RESTOREFH] = {
3120		.op_func = nfsd4_restorefh,
3121		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3122				| OP_IS_PUTFH_LIKE | OP_MODIFIES_SOMETHING,
3123		.op_name = "OP_RESTOREFH",
3124		.op_rsize_bop = nfsd4_only_status_rsize,
3125	},
3126	[OP_SAVEFH] = {
3127		.op_func = nfsd4_savefh,
3128		.op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING,
3129		.op_name = "OP_SAVEFH",
3130		.op_rsize_bop = nfsd4_only_status_rsize,
3131	},
3132	[OP_SECINFO] = {
3133		.op_func = nfsd4_secinfo,
3134		.op_release = nfsd4_secinfo_release,
3135		.op_flags = OP_HANDLES_WRONGSEC,
3136		.op_name = "OP_SECINFO",
3137		.op_rsize_bop = nfsd4_secinfo_rsize,
3138	},
3139	[OP_SETATTR] = {
3140		.op_func = nfsd4_setattr,
3141		.op_name = "OP_SETATTR",
3142		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME
3143				| OP_NONTRIVIAL_ERROR_ENCODE,
3144		.op_rsize_bop = nfsd4_setattr_rsize,
3145		.op_get_currentstateid = nfsd4_get_setattrstateid,
3146	},
3147	[OP_SETCLIENTID] = {
3148		.op_func = nfsd4_setclientid,
3149		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3150				| OP_MODIFIES_SOMETHING | OP_CACHEME
3151				| OP_NONTRIVIAL_ERROR_ENCODE,
3152		.op_name = "OP_SETCLIENTID",
3153		.op_rsize_bop = nfsd4_setclientid_rsize,
3154	},
3155	[OP_SETCLIENTID_CONFIRM] = {
3156		.op_func = nfsd4_setclientid_confirm,
3157		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3158				| OP_MODIFIES_SOMETHING | OP_CACHEME,
3159		.op_name = "OP_SETCLIENTID_CONFIRM",
3160		.op_rsize_bop = nfsd4_only_status_rsize,
3161	},
3162	[OP_VERIFY] = {
3163		.op_func = nfsd4_verify,
3164		.op_name = "OP_VERIFY",
3165		.op_rsize_bop = nfsd4_only_status_rsize,
3166	},
3167	[OP_WRITE] = {
3168		.op_func = nfsd4_write,
3169		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
3170		.op_name = "OP_WRITE",
3171		.op_rsize_bop = nfsd4_write_rsize,
3172		.op_get_currentstateid = nfsd4_get_writestateid,
3173	},
3174	[OP_RELEASE_LOCKOWNER] = {
3175		.op_func = nfsd4_release_lockowner,
3176		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3177				| OP_MODIFIES_SOMETHING,
3178		.op_name = "OP_RELEASE_LOCKOWNER",
3179		.op_rsize_bop = nfsd4_only_status_rsize,
3180	},
3181
3182	/* NFSv4.1 operations */
3183	[OP_EXCHANGE_ID] = {
3184		.op_func = nfsd4_exchange_id,
3185		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3186				| OP_MODIFIES_SOMETHING,
3187		.op_name = "OP_EXCHANGE_ID",
3188		.op_rsize_bop = nfsd4_exchange_id_rsize,
3189	},
3190	[OP_BACKCHANNEL_CTL] = {
3191		.op_func = nfsd4_backchannel_ctl,
3192		.op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
3193		.op_name = "OP_BACKCHANNEL_CTL",
3194		.op_rsize_bop = nfsd4_only_status_rsize,
3195	},
3196	[OP_BIND_CONN_TO_SESSION] = {
3197		.op_func = nfsd4_bind_conn_to_session,
3198		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3199				| OP_MODIFIES_SOMETHING,
3200		.op_name = "OP_BIND_CONN_TO_SESSION",
3201		.op_rsize_bop = nfsd4_bind_conn_to_session_rsize,
3202	},
3203	[OP_CREATE_SESSION] = {
3204		.op_func = nfsd4_create_session,
3205		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3206				| OP_MODIFIES_SOMETHING,
3207		.op_name = "OP_CREATE_SESSION",
3208		.op_rsize_bop = nfsd4_create_session_rsize,
3209	},
3210	[OP_DESTROY_SESSION] = {
3211		.op_func = nfsd4_destroy_session,
3212		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3213				| OP_MODIFIES_SOMETHING,
3214		.op_name = "OP_DESTROY_SESSION",
3215		.op_rsize_bop = nfsd4_only_status_rsize,
3216	},
3217	[OP_SEQUENCE] = {
3218		.op_func = nfsd4_sequence,
3219		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
3220		.op_name = "OP_SEQUENCE",
3221		.op_rsize_bop = nfsd4_sequence_rsize,
3222	},
3223	[OP_DESTROY_CLIENTID] = {
3224		.op_func = nfsd4_destroy_clientid,
3225		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3226				| OP_MODIFIES_SOMETHING,
3227		.op_name = "OP_DESTROY_CLIENTID",
3228		.op_rsize_bop = nfsd4_only_status_rsize,
3229	},
3230	[OP_RECLAIM_COMPLETE] = {
3231		.op_func = nfsd4_reclaim_complete,
3232		.op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
3233		.op_name = "OP_RECLAIM_COMPLETE",
3234		.op_rsize_bop = nfsd4_only_status_rsize,
3235	},
3236	[OP_SECINFO_NO_NAME] = {
3237		.op_func = nfsd4_secinfo_no_name,
3238		.op_release = nfsd4_secinfo_no_name_release,
3239		.op_flags = OP_HANDLES_WRONGSEC,
3240		.op_name = "OP_SECINFO_NO_NAME",
3241		.op_rsize_bop = nfsd4_secinfo_rsize,
3242	},
3243	[OP_TEST_STATEID] = {
3244		.op_func = nfsd4_test_stateid,
3245		.op_flags = ALLOWED_WITHOUT_FH,
3246		.op_name = "OP_TEST_STATEID",
3247		.op_rsize_bop = nfsd4_test_stateid_rsize,
3248	},
3249	[OP_FREE_STATEID] = {
3250		.op_func = nfsd4_free_stateid,
3251		.op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
3252		.op_name = "OP_FREE_STATEID",
3253		.op_get_currentstateid = nfsd4_get_freestateid,
3254		.op_rsize_bop = nfsd4_only_status_rsize,
3255	},
3256#ifdef CONFIG_NFSD_PNFS
3257	[OP_GETDEVICEINFO] = {
3258		.op_func = nfsd4_getdeviceinfo,
3259		.op_release = nfsd4_getdeviceinfo_release,
3260		.op_flags = ALLOWED_WITHOUT_FH,
3261		.op_name = "OP_GETDEVICEINFO",
3262		.op_rsize_bop = nfsd4_getdeviceinfo_rsize,
3263	},
3264	[OP_LAYOUTGET] = {
3265		.op_func = nfsd4_layoutget,
3266		.op_release = nfsd4_layoutget_release,
3267		.op_flags = OP_MODIFIES_SOMETHING,
3268		.op_name = "OP_LAYOUTGET",
3269		.op_rsize_bop = nfsd4_layoutget_rsize,
3270	},
3271	[OP_LAYOUTCOMMIT] = {
3272		.op_func = nfsd4_layoutcommit,
3273		.op_flags = OP_MODIFIES_SOMETHING,
3274		.op_name = "OP_LAYOUTCOMMIT",
3275		.op_rsize_bop = nfsd4_layoutcommit_rsize,
3276	},
3277	[OP_LAYOUTRETURN] = {
3278		.op_func = nfsd4_layoutreturn,
3279		.op_flags = OP_MODIFIES_SOMETHING,
3280		.op_name = "OP_LAYOUTRETURN",
3281		.op_rsize_bop = nfsd4_layoutreturn_rsize,
3282	},
3283#endif /* CONFIG_NFSD_PNFS */
3284
3285	/* NFSv4.2 operations */
3286	[OP_ALLOCATE] = {
3287		.op_func = nfsd4_allocate,
3288		.op_flags = OP_MODIFIES_SOMETHING,
3289		.op_name = "OP_ALLOCATE",
3290		.op_rsize_bop = nfsd4_only_status_rsize,
3291	},
3292	[OP_DEALLOCATE] = {
3293		.op_func = nfsd4_deallocate,
3294		.op_flags = OP_MODIFIES_SOMETHING,
3295		.op_name = "OP_DEALLOCATE",
3296		.op_rsize_bop = nfsd4_only_status_rsize,
3297	},
3298	[OP_CLONE] = {
3299		.op_func = nfsd4_clone,
3300		.op_flags = OP_MODIFIES_SOMETHING,
3301		.op_name = "OP_CLONE",
3302		.op_rsize_bop = nfsd4_only_status_rsize,
3303	},
3304	[OP_COPY] = {
3305		.op_func = nfsd4_copy,
3306		.op_flags = OP_MODIFIES_SOMETHING,
3307		.op_name = "OP_COPY",
3308		.op_rsize_bop = nfsd4_copy_rsize,
3309	},
3310	[OP_READ_PLUS] = {
3311		.op_func = nfsd4_read,
3312		.op_release = nfsd4_read_release,
3313		.op_name = "OP_READ_PLUS",
3314		.op_rsize_bop = nfsd4_read_plus_rsize,
3315		.op_get_currentstateid = nfsd4_get_readstateid,
3316	},
3317	[OP_SEEK] = {
3318		.op_func = nfsd4_seek,
3319		.op_name = "OP_SEEK",
3320		.op_rsize_bop = nfsd4_seek_rsize,
3321	},
3322	[OP_OFFLOAD_STATUS] = {
3323		.op_func = nfsd4_offload_status,
3324		.op_name = "OP_OFFLOAD_STATUS",
3325		.op_rsize_bop = nfsd4_offload_status_rsize,
3326	},
3327	[OP_OFFLOAD_CANCEL] = {
3328		.op_func = nfsd4_offload_cancel,
3329		.op_flags = OP_MODIFIES_SOMETHING,
3330		.op_name = "OP_OFFLOAD_CANCEL",
3331		.op_rsize_bop = nfsd4_only_status_rsize,
3332	},
3333	[OP_COPY_NOTIFY] = {
3334		.op_func = nfsd4_copy_notify,
3335		.op_flags = OP_MODIFIES_SOMETHING,
3336		.op_name = "OP_COPY_NOTIFY",
3337		.op_rsize_bop = nfsd4_copy_notify_rsize,
3338	},
3339	[OP_GETXATTR] = {
3340		.op_func = nfsd4_getxattr,
3341		.op_name = "OP_GETXATTR",
3342		.op_rsize_bop = nfsd4_getxattr_rsize,
3343	},
3344	[OP_SETXATTR] = {
3345		.op_func = nfsd4_setxattr,
3346		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
3347		.op_name = "OP_SETXATTR",
3348		.op_rsize_bop = nfsd4_setxattr_rsize,
3349	},
3350	[OP_LISTXATTRS] = {
3351		.op_func = nfsd4_listxattrs,
3352		.op_name = "OP_LISTXATTRS",
3353		.op_rsize_bop = nfsd4_listxattrs_rsize,
3354	},
3355	[OP_REMOVEXATTR] = {
3356		.op_func = nfsd4_removexattr,
3357		.op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
3358		.op_name = "OP_REMOVEXATTR",
3359		.op_rsize_bop = nfsd4_removexattr_rsize,
3360	},
3361};
3362
3363/**
3364 * nfsd4_spo_must_allow - Determine if the compound op contains an
3365 * operation that is allowed to be sent with machine credentials
3366 *
3367 * @rqstp: a pointer to the struct svc_rqst
3368 *
3369 * Checks to see if the compound contains a spo_must_allow op
3370 * and confirms that it was sent with the proper machine creds.
3371 */
3372
3373bool nfsd4_spo_must_allow(struct svc_rqst *rqstp)
3374{
3375	struct nfsd4_compoundres *resp = rqstp->rq_resp;
3376	struct nfsd4_compoundargs *argp = rqstp->rq_argp;
3377	struct nfsd4_op *this;
3378	struct nfsd4_compound_state *cstate = &resp->cstate;
3379	struct nfs4_op_map *allow = &cstate->clp->cl_spo_must_allow;
3380	u32 opiter;
3381
3382	if (!cstate->minorversion)
3383		return false;
3384
3385	if (cstate->spo_must_allowed)
3386		return true;
3387
3388	opiter = resp->opcnt;
3389	while (opiter < argp->opcnt) {
3390		this = &argp->ops[opiter++];
3391		if (test_bit(this->opnum, allow->u.longs) &&
3392			cstate->clp->cl_mach_cred &&
3393			nfsd4_mach_creds_match(cstate->clp, rqstp)) {
3394			cstate->spo_must_allowed = true;
3395			return true;
3396		}
3397	}
3398	cstate->spo_must_allowed = false;
3399	return false;
3400}
3401
3402int nfsd4_max_reply(struct svc_rqst *rqstp, struct nfsd4_op *op)
3403{
3404	if (op->opnum == OP_ILLEGAL || op->status == nfserr_notsupp)
3405		return op_encode_hdr_size * sizeof(__be32);
3406
3407	BUG_ON(OPDESC(op)->op_rsize_bop == NULL);
3408	return OPDESC(op)->op_rsize_bop(rqstp, op);
3409}
3410
3411void warn_on_nonidempotent_op(struct nfsd4_op *op)
3412{
3413	if (OPDESC(op)->op_flags & OP_MODIFIES_SOMETHING) {
3414		pr_err("unable to encode reply to nonidempotent op %u (%s)\n",
3415			op->opnum, nfsd4_op_name(op->opnum));
3416		WARN_ON_ONCE(1);
3417	}
3418}
3419
3420static const char *nfsd4_op_name(unsigned opnum)
3421{
3422	if (opnum < ARRAY_SIZE(nfsd4_ops))
3423		return nfsd4_ops[opnum].op_name;
3424	return "unknown_operation";
3425}
 
 
 
 
3426
3427static const struct svc_procedure nfsd_procedures4[2] = {
3428	[NFSPROC4_NULL] = {
3429		.pc_func = nfsd4_proc_null,
3430		.pc_decode = nfssvc_decode_voidarg,
3431		.pc_encode = nfssvc_encode_voidres,
3432		.pc_argsize = sizeof(struct nfsd_voidargs),
3433		.pc_ressize = sizeof(struct nfsd_voidres),
3434		.pc_cachetype = RC_NOCACHE,
3435		.pc_xdrressize = 1,
3436		.pc_name = "NULL",
3437	},
3438	[NFSPROC4_COMPOUND] = {
3439		.pc_func = nfsd4_proc_compound,
3440		.pc_decode = nfs4svc_decode_compoundargs,
3441		.pc_encode = nfs4svc_encode_compoundres,
3442		.pc_argsize = sizeof(struct nfsd4_compoundargs),
3443		.pc_ressize = sizeof(struct nfsd4_compoundres),
3444		.pc_release = nfsd4_release_compoundargs,
3445		.pc_cachetype = RC_NOCACHE,
3446		.pc_xdrressize = NFSD_BUFSIZE/4,
3447		.pc_name = "COMPOUND",
3448	},
3449};
3450
3451static unsigned int nfsd_count3[ARRAY_SIZE(nfsd_procedures4)];
3452const struct svc_version nfsd_version4 = {
3453	.vs_vers		= 4,
3454	.vs_nproc		= 2,
3455	.vs_proc		= nfsd_procedures4,
3456	.vs_count		= nfsd_count3,
3457	.vs_dispatch		= nfsd_dispatch,
3458	.vs_xdrsize		= NFS4_SVC_XDRSIZE,
3459	.vs_rpcb_optnl		= true,
3460	.vs_need_cong_ctrl	= true,
3461};