Linux Audio

Check our new training course

Loading...
v4.10.11
   1/*
   2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
   3 * All Rights Reserved.
   4 *
   5 * This program is free software; you can redistribute it and/or
   6 * modify it under the terms of the GNU General Public License as
   7 * published by the Free Software Foundation.
   8 *
   9 * This program is distributed in the hope that it would be useful,
  10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12 * GNU General Public License for more details.
  13 *
  14 * You should have received a copy of the GNU General Public License
  15 * along with this program; if not, write the Free Software Foundation,
  16 * Inc.,  51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
  17 */
  18#include "xfs.h"
  19#include "xfs_fs.h"
  20#include "xfs_shared.h"
  21#include "xfs_format.h"
  22#include "xfs_log_format.h"
  23#include "xfs_trans_resv.h"
  24#include "xfs_mount.h"
  25#include "xfs_inode.h"
  26#include "xfs_ioctl.h"
  27#include "xfs_alloc.h"
  28#include "xfs_rtalloc.h"
  29#include "xfs_itable.h"
  30#include "xfs_error.h"
  31#include "xfs_attr.h"
  32#include "xfs_bmap.h"
  33#include "xfs_bmap_util.h"
  34#include "xfs_fsops.h"
  35#include "xfs_discard.h"
  36#include "xfs_quota.h"
  37#include "xfs_export.h"
  38#include "xfs_trace.h"
  39#include "xfs_icache.h"
  40#include "xfs_symlink.h"
  41#include "xfs_trans.h"
  42#include "xfs_pnfs.h"
  43#include "xfs_acl.h"
 
 
 
 
 
  44
  45#include <linux/capability.h>
 
  46#include <linux/dcache.h>
  47#include <linux/mount.h>
  48#include <linux/namei.h>
  49#include <linux/pagemap.h>
  50#include <linux/slab.h>
  51#include <linux/exportfs.h>
  52
  53/*
  54 * xfs_find_handle maps from userspace xfs_fsop_handlereq structure to
  55 * a file or fs handle.
  56 *
  57 * XFS_IOC_PATH_TO_FSHANDLE
  58 *    returns fs handle for a mount point or path within that mount point
  59 * XFS_IOC_FD_TO_HANDLE
  60 *    returns full handle for a FD opened in user space
  61 * XFS_IOC_PATH_TO_HANDLE
  62 *    returns full handle for a path
  63 */
  64int
  65xfs_find_handle(
  66	unsigned int		cmd,
  67	xfs_fsop_handlereq_t	*hreq)
  68{
  69	int			hsize;
  70	xfs_handle_t		handle;
  71	struct inode		*inode;
  72	struct fd		f = {NULL};
  73	struct path		path;
  74	int			error;
  75	struct xfs_inode	*ip;
  76
  77	if (cmd == XFS_IOC_FD_TO_HANDLE) {
  78		f = fdget(hreq->fd);
  79		if (!f.file)
  80			return -EBADF;
  81		inode = file_inode(f.file);
  82	} else {
  83		error = user_lpath((const char __user *)hreq->path, &path);
  84		if (error)
  85			return error;
  86		inode = d_inode(path.dentry);
  87	}
  88	ip = XFS_I(inode);
  89
  90	/*
  91	 * We can only generate handles for inodes residing on a XFS filesystem,
  92	 * and only for regular files, directories or symbolic links.
  93	 */
  94	error = -EINVAL;
  95	if (inode->i_sb->s_magic != XFS_SB_MAGIC)
  96		goto out_put;
  97
  98	error = -EBADF;
  99	if (!S_ISREG(inode->i_mode) &&
 100	    !S_ISDIR(inode->i_mode) &&
 101	    !S_ISLNK(inode->i_mode))
 102		goto out_put;
 103
 104
 105	memcpy(&handle.ha_fsid, ip->i_mount->m_fixedfsid, sizeof(xfs_fsid_t));
 106
 107	if (cmd == XFS_IOC_PATH_TO_FSHANDLE) {
 108		/*
 109		 * This handle only contains an fsid, zero the rest.
 110		 */
 111		memset(&handle.ha_fid, 0, sizeof(handle.ha_fid));
 112		hsize = sizeof(xfs_fsid_t);
 113	} else {
 114		handle.ha_fid.fid_len = sizeof(xfs_fid_t) -
 115					sizeof(handle.ha_fid.fid_len);
 116		handle.ha_fid.fid_pad = 0;
 117		handle.ha_fid.fid_gen = inode->i_generation;
 118		handle.ha_fid.fid_ino = ip->i_ino;
 119
 120		hsize = XFS_HSIZE(handle);
 121	}
 122
 123	error = -EFAULT;
 124	if (copy_to_user(hreq->ohandle, &handle, hsize) ||
 125	    copy_to_user(hreq->ohandlen, &hsize, sizeof(__s32)))
 126		goto out_put;
 127
 128	error = 0;
 129
 130 out_put:
 131	if (cmd == XFS_IOC_FD_TO_HANDLE)
 132		fdput(f);
 133	else
 134		path_put(&path);
 135	return error;
 136}
 137
 138/*
 139 * No need to do permission checks on the various pathname components
 140 * as the handle operations are privileged.
 141 */
 142STATIC int
 143xfs_handle_acceptable(
 144	void			*context,
 145	struct dentry		*dentry)
 146{
 147	return 1;
 148}
 149
 150/*
 151 * Convert userspace handle data into a dentry.
 152 */
 153struct dentry *
 154xfs_handle_to_dentry(
 155	struct file		*parfilp,
 156	void __user		*uhandle,
 157	u32			hlen)
 158{
 159	xfs_handle_t		handle;
 160	struct xfs_fid64	fid;
 161
 162	/*
 163	 * Only allow handle opens under a directory.
 164	 */
 165	if (!S_ISDIR(file_inode(parfilp)->i_mode))
 166		return ERR_PTR(-ENOTDIR);
 167
 168	if (hlen != sizeof(xfs_handle_t))
 169		return ERR_PTR(-EINVAL);
 170	if (copy_from_user(&handle, uhandle, hlen))
 171		return ERR_PTR(-EFAULT);
 172	if (handle.ha_fid.fid_len !=
 173	    sizeof(handle.ha_fid) - sizeof(handle.ha_fid.fid_len))
 174		return ERR_PTR(-EINVAL);
 175
 176	memset(&fid, 0, sizeof(struct fid));
 177	fid.ino = handle.ha_fid.fid_ino;
 178	fid.gen = handle.ha_fid.fid_gen;
 179
 180	return exportfs_decode_fh(parfilp->f_path.mnt, (struct fid *)&fid, 3,
 181			FILEID_INO32_GEN | XFS_FILEID_TYPE_64FLAG,
 182			xfs_handle_acceptable, NULL);
 183}
 184
 185STATIC struct dentry *
 186xfs_handlereq_to_dentry(
 187	struct file		*parfilp,
 188	xfs_fsop_handlereq_t	*hreq)
 189{
 190	return xfs_handle_to_dentry(parfilp, hreq->ihandle, hreq->ihandlen);
 191}
 192
 193int
 194xfs_open_by_handle(
 195	struct file		*parfilp,
 196	xfs_fsop_handlereq_t	*hreq)
 197{
 198	const struct cred	*cred = current_cred();
 199	int			error;
 200	int			fd;
 201	int			permflag;
 202	struct file		*filp;
 203	struct inode		*inode;
 204	struct dentry		*dentry;
 205	fmode_t			fmode;
 206	struct path		path;
 207
 208	if (!capable(CAP_SYS_ADMIN))
 209		return -EPERM;
 210
 211	dentry = xfs_handlereq_to_dentry(parfilp, hreq);
 212	if (IS_ERR(dentry))
 213		return PTR_ERR(dentry);
 214	inode = d_inode(dentry);
 215
 216	/* Restrict xfs_open_by_handle to directories & regular files. */
 217	if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode))) {
 218		error = -EPERM;
 219		goto out_dput;
 220	}
 221
 222#if BITS_PER_LONG != 32
 223	hreq->oflags |= O_LARGEFILE;
 224#endif
 225
 226	permflag = hreq->oflags;
 227	fmode = OPEN_FMODE(permflag);
 228	if ((!(permflag & O_APPEND) || (permflag & O_TRUNC)) &&
 229	    (fmode & FMODE_WRITE) && IS_APPEND(inode)) {
 230		error = -EPERM;
 231		goto out_dput;
 232	}
 233
 234	if ((fmode & FMODE_WRITE) && IS_IMMUTABLE(inode)) {
 235		error = -EPERM;
 236		goto out_dput;
 237	}
 238
 239	/* Can't write directories. */
 240	if (S_ISDIR(inode->i_mode) && (fmode & FMODE_WRITE)) {
 241		error = -EISDIR;
 242		goto out_dput;
 243	}
 244
 245	fd = get_unused_fd_flags(0);
 246	if (fd < 0) {
 247		error = fd;
 248		goto out_dput;
 249	}
 250
 251	path.mnt = parfilp->f_path.mnt;
 252	path.dentry = dentry;
 253	filp = dentry_open(&path, hreq->oflags, cred);
 254	dput(dentry);
 255	if (IS_ERR(filp)) {
 256		put_unused_fd(fd);
 257		return PTR_ERR(filp);
 258	}
 259
 260	if (S_ISREG(inode->i_mode)) {
 261		filp->f_flags |= O_NOATIME;
 262		filp->f_mode |= FMODE_NOCMTIME;
 263	}
 264
 265	fd_install(fd, filp);
 266	return fd;
 267
 268 out_dput:
 269	dput(dentry);
 270	return error;
 271}
 272
 273int
 274xfs_readlink_by_handle(
 275	struct file		*parfilp,
 276	xfs_fsop_handlereq_t	*hreq)
 277{
 278	struct dentry		*dentry;
 279	__u32			olen;
 280	int			error;
 281
 282	if (!capable(CAP_SYS_ADMIN))
 283		return -EPERM;
 284
 285	dentry = xfs_handlereq_to_dentry(parfilp, hreq);
 286	if (IS_ERR(dentry))
 287		return PTR_ERR(dentry);
 288
 289	/* Restrict this handle operation to symlinks only. */
 290	if (!d_is_symlink(dentry)) {
 291		error = -EINVAL;
 292		goto out_dput;
 293	}
 294
 295	if (copy_from_user(&olen, hreq->ohandlen, sizeof(__u32))) {
 296		error = -EFAULT;
 297		goto out_dput;
 298	}
 299
 300	error = vfs_readlink(dentry, hreq->ohandle, olen);
 301
 302 out_dput:
 303	dput(dentry);
 304	return error;
 305}
 306
 307int
 308xfs_set_dmattrs(
 309	xfs_inode_t     *ip,
 310	u_int		evmask,
 311	u_int16_t	state)
 312{
 313	xfs_mount_t	*mp = ip->i_mount;
 314	xfs_trans_t	*tp;
 315	int		error;
 316
 317	if (!capable(CAP_SYS_ADMIN))
 318		return -EPERM;
 319
 320	if (XFS_FORCED_SHUTDOWN(mp))
 321		return -EIO;
 322
 323	error = xfs_trans_alloc(mp, &M_RES(mp)->tr_ichange, 0, 0, 0, &tp);
 324	if (error)
 325		return error;
 326
 327	xfs_ilock(ip, XFS_ILOCK_EXCL);
 328	xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL);
 329
 330	ip->i_d.di_dmevmask = evmask;
 331	ip->i_d.di_dmstate  = state;
 332
 333	xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
 334	error = xfs_trans_commit(tp);
 335
 336	return error;
 337}
 338
 339STATIC int
 340xfs_fssetdm_by_handle(
 341	struct file		*parfilp,
 342	void			__user *arg)
 343{
 344	int			error;
 345	struct fsdmidata	fsd;
 346	xfs_fsop_setdm_handlereq_t dmhreq;
 347	struct dentry		*dentry;
 348
 349	if (!capable(CAP_MKNOD))
 350		return -EPERM;
 351	if (copy_from_user(&dmhreq, arg, sizeof(xfs_fsop_setdm_handlereq_t)))
 352		return -EFAULT;
 353
 354	error = mnt_want_write_file(parfilp);
 355	if (error)
 356		return error;
 357
 358	dentry = xfs_handlereq_to_dentry(parfilp, &dmhreq.hreq);
 359	if (IS_ERR(dentry)) {
 360		mnt_drop_write_file(parfilp);
 361		return PTR_ERR(dentry);
 362	}
 363
 364	if (IS_IMMUTABLE(d_inode(dentry)) || IS_APPEND(d_inode(dentry))) {
 365		error = -EPERM;
 366		goto out;
 367	}
 368
 369	if (copy_from_user(&fsd, dmhreq.data, sizeof(fsd))) {
 370		error = -EFAULT;
 371		goto out;
 372	}
 373
 374	error = xfs_set_dmattrs(XFS_I(d_inode(dentry)), fsd.fsd_dmevmask,
 375				 fsd.fsd_dmstate);
 376
 377 out:
 378	mnt_drop_write_file(parfilp);
 379	dput(dentry);
 380	return error;
 381}
 382
 383STATIC int
 384xfs_attrlist_by_handle(
 385	struct file		*parfilp,
 386	void			__user *arg)
 387{
 388	int			error = -ENOMEM;
 389	attrlist_cursor_kern_t	*cursor;
 390	struct xfs_fsop_attrlist_handlereq __user	*p = arg;
 391	xfs_fsop_attrlist_handlereq_t al_hreq;
 392	struct dentry		*dentry;
 393	char			*kbuf;
 394
 395	if (!capable(CAP_SYS_ADMIN))
 396		return -EPERM;
 397	if (copy_from_user(&al_hreq, arg, sizeof(xfs_fsop_attrlist_handlereq_t)))
 398		return -EFAULT;
 399	if (al_hreq.buflen < sizeof(struct attrlist) ||
 400	    al_hreq.buflen > XFS_XATTR_LIST_MAX)
 401		return -EINVAL;
 402
 403	/*
 404	 * Reject flags, only allow namespaces.
 405	 */
 406	if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE))
 407		return -EINVAL;
 408
 409	dentry = xfs_handlereq_to_dentry(parfilp, &al_hreq.hreq);
 410	if (IS_ERR(dentry))
 411		return PTR_ERR(dentry);
 412
 413	kbuf = kmem_zalloc_large(al_hreq.buflen, KM_SLEEP);
 414	if (!kbuf)
 415		goto out_dput;
 416
 417	cursor = (attrlist_cursor_kern_t *)&al_hreq.pos;
 418	error = xfs_attr_list(XFS_I(d_inode(dentry)), kbuf, al_hreq.buflen,
 419					al_hreq.flags, cursor);
 420	if (error)
 421		goto out_kfree;
 422
 423	if (copy_to_user(&p->pos, cursor, sizeof(attrlist_cursor_kern_t))) {
 424		error = -EFAULT;
 425		goto out_kfree;
 426	}
 427
 428	if (copy_to_user(al_hreq.buffer, kbuf, al_hreq.buflen))
 429		error = -EFAULT;
 430
 431out_kfree:
 432	kmem_free(kbuf);
 433out_dput:
 434	dput(dentry);
 435	return error;
 436}
 437
 438int
 439xfs_attrmulti_attr_get(
 440	struct inode		*inode,
 441	unsigned char		*name,
 442	unsigned char		__user *ubuf,
 443	__uint32_t		*len,
 444	__uint32_t		flags)
 445{
 446	unsigned char		*kbuf;
 447	int			error = -EFAULT;
 448
 449	if (*len > XFS_XATTR_SIZE_MAX)
 450		return -EINVAL;
 451	kbuf = kmem_zalloc_large(*len, KM_SLEEP);
 452	if (!kbuf)
 453		return -ENOMEM;
 454
 455	error = xfs_attr_get(XFS_I(inode), name, kbuf, (int *)len, flags);
 456	if (error)
 457		goto out_kfree;
 458
 459	if (copy_to_user(ubuf, kbuf, *len))
 460		error = -EFAULT;
 461
 462out_kfree:
 463	kmem_free(kbuf);
 464	return error;
 465}
 466
 467int
 468xfs_attrmulti_attr_set(
 469	struct inode		*inode,
 470	unsigned char		*name,
 471	const unsigned char	__user *ubuf,
 472	__uint32_t		len,
 473	__uint32_t		flags)
 474{
 475	unsigned char		*kbuf;
 476	int			error;
 477
 478	if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
 479		return -EPERM;
 480	if (len > XFS_XATTR_SIZE_MAX)
 481		return -EINVAL;
 482
 483	kbuf = memdup_user(ubuf, len);
 484	if (IS_ERR(kbuf))
 485		return PTR_ERR(kbuf);
 486
 487	error = xfs_attr_set(XFS_I(inode), name, kbuf, len, flags);
 488	if (!error)
 489		xfs_forget_acl(inode, name, flags);
 490	kfree(kbuf);
 491	return error;
 492}
 493
 494int
 495xfs_attrmulti_attr_remove(
 496	struct inode		*inode,
 497	unsigned char		*name,
 498	__uint32_t		flags)
 499{
 500	int			error;
 501
 502	if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
 503		return -EPERM;
 504	error = xfs_attr_remove(XFS_I(inode), name, flags);
 505	if (!error)
 506		xfs_forget_acl(inode, name, flags);
 507	return error;
 508}
 509
 510STATIC int
 511xfs_attrmulti_by_handle(
 512	struct file		*parfilp,
 513	void			__user *arg)
 514{
 515	int			error;
 516	xfs_attr_multiop_t	*ops;
 517	xfs_fsop_attrmulti_handlereq_t am_hreq;
 518	struct dentry		*dentry;
 519	unsigned int		i, size;
 520	unsigned char		*attr_name;
 521
 522	if (!capable(CAP_SYS_ADMIN))
 523		return -EPERM;
 524	if (copy_from_user(&am_hreq, arg, sizeof(xfs_fsop_attrmulti_handlereq_t)))
 525		return -EFAULT;
 526
 527	/* overflow check */
 528	if (am_hreq.opcount >= INT_MAX / sizeof(xfs_attr_multiop_t))
 529		return -E2BIG;
 530
 531	dentry = xfs_handlereq_to_dentry(parfilp, &am_hreq.hreq);
 532	if (IS_ERR(dentry))
 533		return PTR_ERR(dentry);
 534
 535	error = -E2BIG;
 536	size = am_hreq.opcount * sizeof(xfs_attr_multiop_t);
 537	if (!size || size > 16 * PAGE_SIZE)
 538		goto out_dput;
 539
 540	ops = memdup_user(am_hreq.ops, size);
 541	if (IS_ERR(ops)) {
 542		error = PTR_ERR(ops);
 543		goto out_dput;
 544	}
 545
 546	error = -ENOMEM;
 547	attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL);
 548	if (!attr_name)
 549		goto out_kfree_ops;
 550
 551	error = 0;
 552	for (i = 0; i < am_hreq.opcount; i++) {
 553		ops[i].am_error = strncpy_from_user((char *)attr_name,
 554				ops[i].am_attrname, MAXNAMELEN);
 555		if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN)
 556			error = -ERANGE;
 557		if (ops[i].am_error < 0)
 558			break;
 559
 560		switch (ops[i].am_opcode) {
 561		case ATTR_OP_GET:
 562			ops[i].am_error = xfs_attrmulti_attr_get(
 563					d_inode(dentry), attr_name,
 564					ops[i].am_attrvalue, &ops[i].am_length,
 565					ops[i].am_flags);
 566			break;
 567		case ATTR_OP_SET:
 568			ops[i].am_error = mnt_want_write_file(parfilp);
 569			if (ops[i].am_error)
 570				break;
 571			ops[i].am_error = xfs_attrmulti_attr_set(
 572					d_inode(dentry), attr_name,
 573					ops[i].am_attrvalue, ops[i].am_length,
 574					ops[i].am_flags);
 575			mnt_drop_write_file(parfilp);
 576			break;
 577		case ATTR_OP_REMOVE:
 578			ops[i].am_error = mnt_want_write_file(parfilp);
 579			if (ops[i].am_error)
 580				break;
 581			ops[i].am_error = xfs_attrmulti_attr_remove(
 582					d_inode(dentry), attr_name,
 583					ops[i].am_flags);
 584			mnt_drop_write_file(parfilp);
 585			break;
 586		default:
 587			ops[i].am_error = -EINVAL;
 588		}
 589	}
 590
 591	if (copy_to_user(am_hreq.ops, ops, size))
 592		error = -EFAULT;
 593
 594	kfree(attr_name);
 595 out_kfree_ops:
 596	kfree(ops);
 597 out_dput:
 598	dput(dentry);
 599	return error;
 600}
 601
 602int
 603xfs_ioc_space(
 604	struct file		*filp,
 605	unsigned int		cmd,
 606	xfs_flock64_t		*bf)
 607{
 608	struct inode		*inode = file_inode(filp);
 609	struct xfs_inode	*ip = XFS_I(inode);
 610	struct iattr		iattr;
 611	enum xfs_prealloc_flags	flags = 0;
 612	uint			iolock = XFS_IOLOCK_EXCL;
 613	int			error;
 614
 615	/*
 616	 * Only allow the sys admin to reserve space unless
 617	 * unwritten extents are enabled.
 618	 */
 619	if (!xfs_sb_version_hasextflgbit(&ip->i_mount->m_sb) &&
 620	    !capable(CAP_SYS_ADMIN))
 621		return -EPERM;
 622
 623	if (inode->i_flags & (S_IMMUTABLE|S_APPEND))
 624		return -EPERM;
 625
 626	if (!(filp->f_mode & FMODE_WRITE))
 627		return -EBADF;
 628
 629	if (!S_ISREG(inode->i_mode))
 630		return -EINVAL;
 631
 632	if (filp->f_flags & O_DSYNC)
 633		flags |= XFS_PREALLOC_SYNC;
 634	if (filp->f_mode & FMODE_NOCMTIME)
 635		flags |= XFS_PREALLOC_INVISIBLE;
 636
 637	error = mnt_want_write_file(filp);
 638	if (error)
 639		return error;
 640
 641	xfs_ilock(ip, iolock);
 642	error = xfs_break_layouts(inode, &iolock);
 643	if (error)
 644		goto out_unlock;
 645
 646	xfs_ilock(ip, XFS_MMAPLOCK_EXCL);
 647	iolock |= XFS_MMAPLOCK_EXCL;
 648
 649	switch (bf->l_whence) {
 650	case 0: /*SEEK_SET*/
 651		break;
 652	case 1: /*SEEK_CUR*/
 653		bf->l_start += filp->f_pos;
 654		break;
 655	case 2: /*SEEK_END*/
 656		bf->l_start += XFS_ISIZE(ip);
 657		break;
 658	default:
 659		error = -EINVAL;
 660		goto out_unlock;
 661	}
 662
 663	/*
 664	 * length of <= 0 for resv/unresv/zero is invalid.  length for
 665	 * alloc/free is ignored completely and we have no idea what userspace
 666	 * might have set it to, so set it to zero to allow range
 667	 * checks to pass.
 668	 */
 669	switch (cmd) {
 670	case XFS_IOC_ZERO_RANGE:
 671	case XFS_IOC_RESVSP:
 672	case XFS_IOC_RESVSP64:
 673	case XFS_IOC_UNRESVSP:
 674	case XFS_IOC_UNRESVSP64:
 675		if (bf->l_len <= 0) {
 676			error = -EINVAL;
 677			goto out_unlock;
 678		}
 679		break;
 680	default:
 681		bf->l_len = 0;
 682		break;
 683	}
 684
 685	if (bf->l_start < 0 ||
 686	    bf->l_start > inode->i_sb->s_maxbytes ||
 687	    bf->l_start + bf->l_len < 0 ||
 688	    bf->l_start + bf->l_len >= inode->i_sb->s_maxbytes) {
 689		error = -EINVAL;
 690		goto out_unlock;
 691	}
 692
 693	switch (cmd) {
 694	case XFS_IOC_ZERO_RANGE:
 695		flags |= XFS_PREALLOC_SET;
 696		error = xfs_zero_file_space(ip, bf->l_start, bf->l_len);
 697		break;
 698	case XFS_IOC_RESVSP:
 699	case XFS_IOC_RESVSP64:
 700		flags |= XFS_PREALLOC_SET;
 701		error = xfs_alloc_file_space(ip, bf->l_start, bf->l_len,
 702						XFS_BMAPI_PREALLOC);
 703		break;
 704	case XFS_IOC_UNRESVSP:
 705	case XFS_IOC_UNRESVSP64:
 706		error = xfs_free_file_space(ip, bf->l_start, bf->l_len);
 707		break;
 708	case XFS_IOC_ALLOCSP:
 709	case XFS_IOC_ALLOCSP64:
 710	case XFS_IOC_FREESP:
 711	case XFS_IOC_FREESP64:
 712		flags |= XFS_PREALLOC_CLEAR;
 713		if (bf->l_start > XFS_ISIZE(ip)) {
 714			error = xfs_alloc_file_space(ip, XFS_ISIZE(ip),
 715					bf->l_start - XFS_ISIZE(ip), 0);
 716			if (error)
 717				goto out_unlock;
 718		}
 719
 720		iattr.ia_valid = ATTR_SIZE;
 721		iattr.ia_size = bf->l_start;
 722
 723		error = xfs_vn_setattr_size(file_dentry(filp), &iattr);
 724		break;
 725	default:
 726		ASSERT(0);
 727		error = -EINVAL;
 728	}
 729
 730	if (error)
 731		goto out_unlock;
 732
 733	error = xfs_update_prealloc_flags(ip, flags);
 734
 735out_unlock:
 736	xfs_iunlock(ip, iolock);
 737	mnt_drop_write_file(filp);
 738	return error;
 739}
 740
 741STATIC int
 742xfs_ioc_bulkstat(
 743	xfs_mount_t		*mp,
 744	unsigned int		cmd,
 745	void			__user *arg)
 746{
 747	xfs_fsop_bulkreq_t	bulkreq;
 748	int			count;	/* # of records returned */
 749	xfs_ino_t		inlast;	/* last inode number */
 750	int			done;
 751	int			error;
 752
 753	/* done = 1 if there are more stats to get and if bulkstat */
 754	/* should be called again (unused here, but used in dmapi) */
 755
 756	if (!capable(CAP_SYS_ADMIN))
 757		return -EPERM;
 758
 759	if (XFS_FORCED_SHUTDOWN(mp))
 760		return -EIO;
 761
 762	if (copy_from_user(&bulkreq, arg, sizeof(xfs_fsop_bulkreq_t)))
 763		return -EFAULT;
 764
 765	if (copy_from_user(&inlast, bulkreq.lastip, sizeof(__s64)))
 766		return -EFAULT;
 767
 768	if ((count = bulkreq.icount) <= 0)
 769		return -EINVAL;
 770
 771	if (bulkreq.ubuffer == NULL)
 772		return -EINVAL;
 773
 774	if (cmd == XFS_IOC_FSINUMBERS)
 775		error = xfs_inumbers(mp, &inlast, &count,
 776					bulkreq.ubuffer, xfs_inumbers_fmt);
 777	else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE)
 778		error = xfs_bulkstat_one(mp, inlast, bulkreq.ubuffer,
 779					sizeof(xfs_bstat_t), NULL, &done);
 780	else	/* XFS_IOC_FSBULKSTAT */
 781		error = xfs_bulkstat(mp, &inlast, &count, xfs_bulkstat_one,
 782				     sizeof(xfs_bstat_t), bulkreq.ubuffer,
 783				     &done);
 784
 785	if (error)
 786		return error;
 787
 788	if (bulkreq.ocount != NULL) {
 789		if (copy_to_user(bulkreq.lastip, &inlast,
 790						sizeof(xfs_ino_t)))
 791			return -EFAULT;
 792
 793		if (copy_to_user(bulkreq.ocount, &count, sizeof(count)))
 794			return -EFAULT;
 795	}
 796
 797	return 0;
 798}
 799
 800STATIC int
 801xfs_ioc_fsgeometry_v1(
 802	xfs_mount_t		*mp,
 803	void			__user *arg)
 804{
 805	xfs_fsop_geom_t         fsgeo;
 806	int			error;
 807
 808	error = xfs_fs_geometry(mp, &fsgeo, 3);
 809	if (error)
 810		return error;
 811
 812	/*
 813	 * Caller should have passed an argument of type
 814	 * xfs_fsop_geom_v1_t.  This is a proper subset of the
 815	 * xfs_fsop_geom_t that xfs_fs_geometry() fills in.
 816	 */
 817	if (copy_to_user(arg, &fsgeo, sizeof(xfs_fsop_geom_v1_t)))
 818		return -EFAULT;
 819	return 0;
 820}
 821
 822STATIC int
 823xfs_ioc_fsgeometry(
 824	xfs_mount_t		*mp,
 825	void			__user *arg)
 826{
 827	xfs_fsop_geom_t		fsgeo;
 828	int			error;
 829
 830	error = xfs_fs_geometry(mp, &fsgeo, 4);
 831	if (error)
 832		return error;
 833
 834	if (copy_to_user(arg, &fsgeo, sizeof(fsgeo)))
 835		return -EFAULT;
 836	return 0;
 837}
 838
 839/*
 840 * Linux extended inode flags interface.
 841 */
 842
 843STATIC unsigned int
 844xfs_merge_ioc_xflags(
 845	unsigned int	flags,
 846	unsigned int	start)
 847{
 848	unsigned int	xflags = start;
 849
 850	if (flags & FS_IMMUTABLE_FL)
 851		xflags |= FS_XFLAG_IMMUTABLE;
 852	else
 853		xflags &= ~FS_XFLAG_IMMUTABLE;
 854	if (flags & FS_APPEND_FL)
 855		xflags |= FS_XFLAG_APPEND;
 856	else
 857		xflags &= ~FS_XFLAG_APPEND;
 858	if (flags & FS_SYNC_FL)
 859		xflags |= FS_XFLAG_SYNC;
 860	else
 861		xflags &= ~FS_XFLAG_SYNC;
 862	if (flags & FS_NOATIME_FL)
 863		xflags |= FS_XFLAG_NOATIME;
 864	else
 865		xflags &= ~FS_XFLAG_NOATIME;
 866	if (flags & FS_NODUMP_FL)
 867		xflags |= FS_XFLAG_NODUMP;
 868	else
 869		xflags &= ~FS_XFLAG_NODUMP;
 870
 871	return xflags;
 872}
 873
 874STATIC unsigned int
 875xfs_di2lxflags(
 876	__uint16_t	di_flags)
 877{
 878	unsigned int	flags = 0;
 879
 880	if (di_flags & XFS_DIFLAG_IMMUTABLE)
 881		flags |= FS_IMMUTABLE_FL;
 882	if (di_flags & XFS_DIFLAG_APPEND)
 883		flags |= FS_APPEND_FL;
 884	if (di_flags & XFS_DIFLAG_SYNC)
 885		flags |= FS_SYNC_FL;
 886	if (di_flags & XFS_DIFLAG_NOATIME)
 887		flags |= FS_NOATIME_FL;
 888	if (di_flags & XFS_DIFLAG_NODUMP)
 889		flags |= FS_NODUMP_FL;
 890	return flags;
 891}
 892
 893STATIC int
 894xfs_ioc_fsgetxattr(
 895	xfs_inode_t		*ip,
 896	int			attr,
 897	void			__user *arg)
 898{
 899	struct fsxattr		fa;
 900
 901	memset(&fa, 0, sizeof(struct fsxattr));
 902
 903	xfs_ilock(ip, XFS_ILOCK_SHARED);
 904	fa.fsx_xflags = xfs_ip2xflags(ip);
 905	fa.fsx_extsize = ip->i_d.di_extsize << ip->i_mount->m_sb.sb_blocklog;
 906	fa.fsx_cowextsize = ip->i_d.di_cowextsize <<
 907			ip->i_mount->m_sb.sb_blocklog;
 908	fa.fsx_projid = xfs_get_projid(ip);
 909
 910	if (attr) {
 911		if (ip->i_afp) {
 912			if (ip->i_afp->if_flags & XFS_IFEXTENTS)
 913				fa.fsx_nextents = xfs_iext_count(ip->i_afp);
 914			else
 915				fa.fsx_nextents = ip->i_d.di_anextents;
 916		} else
 917			fa.fsx_nextents = 0;
 918	} else {
 919		if (ip->i_df.if_flags & XFS_IFEXTENTS)
 920			fa.fsx_nextents = xfs_iext_count(&ip->i_df);
 921		else
 922			fa.fsx_nextents = ip->i_d.di_nextents;
 923	}
 924	xfs_iunlock(ip, XFS_ILOCK_SHARED);
 925
 926	if (copy_to_user(arg, &fa, sizeof(fa)))
 927		return -EFAULT;
 928	return 0;
 929}
 930
 931STATIC void
 932xfs_set_diflags(
 933	struct xfs_inode	*ip,
 934	unsigned int		xflags)
 935{
 936	unsigned int		di_flags;
 937	uint64_t		di_flags2;
 938
 939	/* can't set PREALLOC this way, just preserve it */
 940	di_flags = (ip->i_d.di_flags & XFS_DIFLAG_PREALLOC);
 
 
 941	if (xflags & FS_XFLAG_IMMUTABLE)
 942		di_flags |= XFS_DIFLAG_IMMUTABLE;
 943	if (xflags & FS_XFLAG_APPEND)
 944		di_flags |= XFS_DIFLAG_APPEND;
 945	if (xflags & FS_XFLAG_SYNC)
 946		di_flags |= XFS_DIFLAG_SYNC;
 947	if (xflags & FS_XFLAG_NOATIME)
 948		di_flags |= XFS_DIFLAG_NOATIME;
 949	if (xflags & FS_XFLAG_NODUMP)
 950		di_flags |= XFS_DIFLAG_NODUMP;
 951	if (xflags & FS_XFLAG_NODEFRAG)
 952		di_flags |= XFS_DIFLAG_NODEFRAG;
 953	if (xflags & FS_XFLAG_FILESTREAM)
 954		di_flags |= XFS_DIFLAG_FILESTREAM;
 955	if (S_ISDIR(VFS_I(ip)->i_mode)) {
 956		if (xflags & FS_XFLAG_RTINHERIT)
 957			di_flags |= XFS_DIFLAG_RTINHERIT;
 958		if (xflags & FS_XFLAG_NOSYMLINKS)
 959			di_flags |= XFS_DIFLAG_NOSYMLINKS;
 960		if (xflags & FS_XFLAG_EXTSZINHERIT)
 961			di_flags |= XFS_DIFLAG_EXTSZINHERIT;
 962		if (xflags & FS_XFLAG_PROJINHERIT)
 963			di_flags |= XFS_DIFLAG_PROJINHERIT;
 964	} else if (S_ISREG(VFS_I(ip)->i_mode)) {
 965		if (xflags & FS_XFLAG_REALTIME)
 966			di_flags |= XFS_DIFLAG_REALTIME;
 967		if (xflags & FS_XFLAG_EXTSIZE)
 968			di_flags |= XFS_DIFLAG_EXTSIZE;
 969	}
 970	ip->i_d.di_flags = di_flags;
 971
 972	/* diflags2 only valid for v3 inodes. */
 973	if (ip->i_d.di_version < 3)
 974		return;
 
 
 
 
 
 
 
 975
 976	di_flags2 = (ip->i_d.di_flags2 & XFS_DIFLAG2_REFLINK);
 977	if (xflags & FS_XFLAG_DAX)
 978		di_flags2 |= XFS_DIFLAG2_DAX;
 979	if (xflags & FS_XFLAG_COWEXTSIZE)
 980		di_flags2 |= XFS_DIFLAG2_COWEXTSIZE;
 981
 982	ip->i_d.di_flags2 = di_flags2;
 983}
 984
 985STATIC void
 986xfs_diflags_to_linux(
 987	struct xfs_inode	*ip)
 988{
 989	struct inode		*inode = VFS_I(ip);
 990	unsigned int		xflags = xfs_ip2xflags(ip);
 991
 992	if (xflags & FS_XFLAG_IMMUTABLE)
 993		inode->i_flags |= S_IMMUTABLE;
 994	else
 995		inode->i_flags &= ~S_IMMUTABLE;
 996	if (xflags & FS_XFLAG_APPEND)
 997		inode->i_flags |= S_APPEND;
 998	else
 999		inode->i_flags &= ~S_APPEND;
1000	if (xflags & FS_XFLAG_SYNC)
1001		inode->i_flags |= S_SYNC;
1002	else
1003		inode->i_flags &= ~S_SYNC;
1004	if (xflags & FS_XFLAG_NOATIME)
1005		inode->i_flags |= S_NOATIME;
1006	else
1007		inode->i_flags &= ~S_NOATIME;
 
1008	if (xflags & FS_XFLAG_DAX)
1009		inode->i_flags |= S_DAX;
1010	else
1011		inode->i_flags &= ~S_DAX;
1012
1013}
1014
1015static int
1016xfs_ioctl_setattr_xflags(
1017	struct xfs_trans	*tp,
1018	struct xfs_inode	*ip,
1019	struct fsxattr		*fa)
1020{
1021	struct xfs_mount	*mp = ip->i_mount;
 
1022
1023	/* Can't change realtime flag if any extents are allocated. */
1024	if ((ip->i_d.di_nextents || ip->i_delayed_blks) &&
1025	    XFS_IS_REALTIME_INODE(ip) != (fa->fsx_xflags & FS_XFLAG_REALTIME))
1026		return -EINVAL;
1027
1028	/* If realtime flag is set then must have realtime device */
1029	if (fa->fsx_xflags & FS_XFLAG_REALTIME) {
1030		if (mp->m_sb.sb_rblocks == 0 || mp->m_sb.sb_rextsize == 0 ||
1031		    (ip->i_d.di_extsize % mp->m_sb.sb_rextsize))
1032			return -EINVAL;
1033	}
1034
1035	/* Clear reflink if we are actually able to set the rt flag. */
1036	if ((fa->fsx_xflags & FS_XFLAG_REALTIME) && xfs_is_reflink_inode(ip))
1037		ip->i_d.di_flags2 &= ~XFS_DIFLAG2_REFLINK;
1038
1039	/* Don't allow us to set DAX mode for a reflinked file for now. */
1040	if ((fa->fsx_xflags & FS_XFLAG_DAX) && xfs_is_reflink_inode(ip))
1041		return -EINVAL;
1042
1043	/*
1044	 * Can't modify an immutable/append-only file unless
1045	 * we have appropriate permission.
1046	 */
1047	if (((ip->i_d.di_flags & (XFS_DIFLAG_IMMUTABLE | XFS_DIFLAG_APPEND)) ||
1048	     (fa->fsx_xflags & (FS_XFLAG_IMMUTABLE | FS_XFLAG_APPEND))) &&
1049	    !capable(CAP_LINUX_IMMUTABLE))
1050		return -EPERM;
1051
1052	xfs_set_diflags(ip, fa->fsx_xflags);
 
 
 
 
 
 
 
1053	xfs_diflags_to_linux(ip);
1054	xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_CHG);
1055	xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1056	XFS_STATS_INC(mp, xs_ig_attrchg);
1057	return 0;
1058}
1059
1060/*
1061 * If we are changing DAX flags, we have to ensure the file is clean and any
1062 * cached objects in the address space are invalidated and removed. This
1063 * requires us to lock out other IO and page faults similar to a truncate
1064 * operation. The locks need to be held until the transaction has been committed
1065 * so that the cache invalidation is atomic with respect to the DAX flag
1066 * manipulation.
1067 */
1068static int
1069xfs_ioctl_setattr_dax_invalidate(
1070	struct xfs_inode	*ip,
1071	struct fsxattr		*fa,
1072	int			*join_flags)
1073{
1074	struct inode		*inode = VFS_I(ip);
 
1075	int			error;
1076
1077	*join_flags = 0;
1078
1079	/*
1080	 * It is only valid to set the DAX flag on regular files and
1081	 * directories on filesystems where the block size is equal to the page
1082	 * size. On directories it serves as an inherit hint.
1083	 */
1084	if (fa->fsx_xflags & FS_XFLAG_DAX) {
1085		if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode)))
1086			return -EINVAL;
1087		if (ip->i_mount->m_sb.sb_blocksize != PAGE_SIZE)
1088			return -EINVAL;
1089	}
1090
1091	/* If the DAX state is not changing, we have nothing to do here. */
1092	if ((fa->fsx_xflags & FS_XFLAG_DAX) && IS_DAX(inode))
1093		return 0;
1094	if (!(fa->fsx_xflags & FS_XFLAG_DAX) && !IS_DAX(inode))
1095		return 0;
1096
1097	/* lock, flush and invalidate mapping in preparation for flag change */
1098	xfs_ilock(ip, XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL);
1099	error = filemap_write_and_wait(inode->i_mapping);
1100	if (error)
1101		goto out_unlock;
1102	error = invalidate_inode_pages2(inode->i_mapping);
1103	if (error)
1104		goto out_unlock;
1105
1106	*join_flags = XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL;
1107	return 0;
1108
1109out_unlock:
1110	xfs_iunlock(ip, XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL);
1111	return error;
1112
1113}
1114
1115/*
1116 * Set up the transaction structure for the setattr operation, checking that we
1117 * have permission to do so. On success, return a clean transaction and the
1118 * inode locked exclusively ready for further operation specific checks. On
1119 * failure, return an error without modifying or locking the inode.
1120 *
1121 * The inode might already be IO locked on call. If this is the case, it is
1122 * indicated in @join_flags and we take full responsibility for ensuring they
1123 * are unlocked from now on. Hence if we have an error here, we still have to
1124 * unlock them. Otherwise, once they are joined to the transaction, they will
1125 * be unlocked on commit/cancel.
1126 */
1127static struct xfs_trans *
1128xfs_ioctl_setattr_get_trans(
1129	struct xfs_inode	*ip,
1130	int			join_flags)
1131{
1132	struct xfs_mount	*mp = ip->i_mount;
1133	struct xfs_trans	*tp;
1134	int			error = -EROFS;
1135
1136	if (mp->m_flags & XFS_MOUNT_RDONLY)
1137		goto out_unlock;
1138	error = -EIO;
1139	if (XFS_FORCED_SHUTDOWN(mp))
1140		goto out_unlock;
1141
1142	error = xfs_trans_alloc(mp, &M_RES(mp)->tr_ichange, 0, 0, 0, &tp);
1143	if (error)
1144		return ERR_PTR(error);
1145
1146	xfs_ilock(ip, XFS_ILOCK_EXCL);
1147	xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL | join_flags);
1148	join_flags = 0;
1149
1150	/*
1151	 * CAP_FOWNER overrides the following restrictions:
1152	 *
1153	 * The user ID of the calling process must be equal to the file owner
1154	 * ID, except in cases where the CAP_FSETID capability is applicable.
1155	 */
1156	if (!inode_owner_or_capable(VFS_I(ip))) {
1157		error = -EPERM;
1158		goto out_cancel;
1159	}
1160
1161	if (mp->m_flags & XFS_MOUNT_WSYNC)
1162		xfs_trans_set_sync(tp);
1163
1164	return tp;
1165
1166out_cancel:
1167	xfs_trans_cancel(tp);
1168out_unlock:
1169	if (join_flags)
1170		xfs_iunlock(ip, join_flags);
1171	return ERR_PTR(error);
1172}
1173
1174/*
1175 * extent size hint validation is somewhat cumbersome. Rules are:
1176 *
1177 * 1. extent size hint is only valid for directories and regular files
1178 * 2. FS_XFLAG_EXTSIZE is only valid for regular files
1179 * 3. FS_XFLAG_EXTSZINHERIT is only valid for directories.
1180 * 4. can only be changed on regular files if no extents are allocated
1181 * 5. can be changed on directories at any time
1182 * 6. extsize hint of 0 turns off hints, clears inode flags.
1183 * 7. Extent size must be a multiple of the appropriate block size.
1184 * 8. for non-realtime files, the extent size hint must be limited
1185 *    to half the AG size to avoid alignment extending the extent beyond the
1186 *    limits of the AG.
 
 
1187 */
1188static int
1189xfs_ioctl_setattr_check_extsize(
1190	struct xfs_inode	*ip,
1191	struct fsxattr		*fa)
1192{
1193	struct xfs_mount	*mp = ip->i_mount;
1194
1195	if ((fa->fsx_xflags & FS_XFLAG_EXTSIZE) && !S_ISREG(VFS_I(ip)->i_mode))
1196		return -EINVAL;
1197
1198	if ((fa->fsx_xflags & FS_XFLAG_EXTSZINHERIT) &&
1199	    !S_ISDIR(VFS_I(ip)->i_mode))
1200		return -EINVAL;
1201
1202	if (S_ISREG(VFS_I(ip)->i_mode) && ip->i_d.di_nextents &&
1203	    ((ip->i_d.di_extsize << mp->m_sb.sb_blocklog) != fa->fsx_extsize))
1204		return -EINVAL;
1205
1206	if (fa->fsx_extsize != 0) {
1207		xfs_extlen_t    size;
1208		xfs_fsblock_t   extsize_fsb;
1209
1210		extsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_extsize);
1211		if (extsize_fsb > MAXEXTLEN)
1212			return -EINVAL;
1213
1214		if (XFS_IS_REALTIME_INODE(ip) ||
1215		    (fa->fsx_xflags & FS_XFLAG_REALTIME)) {
1216			size = mp->m_sb.sb_rextsize << mp->m_sb.sb_blocklog;
1217		} else {
1218			size = mp->m_sb.sb_blocksize;
1219			if (extsize_fsb > mp->m_sb.sb_agblocks / 2)
1220				return -EINVAL;
1221		}
1222
1223		if (fa->fsx_extsize % size)
1224			return -EINVAL;
1225	} else
1226		fa->fsx_xflags &= ~(FS_XFLAG_EXTSIZE | FS_XFLAG_EXTSZINHERIT);
1227
1228	return 0;
1229}
1230
1231/*
1232 * CoW extent size hint validation rules are:
1233 *
1234 * 1. CoW extent size hint can only be set if reflink is enabled on the fs.
1235 *    The inode does not have to have any shared blocks, but it must be a v3.
1236 * 2. FS_XFLAG_COWEXTSIZE is only valid for directories and regular files;
1237 *    for a directory, the hint is propagated to new files.
1238 * 3. Can be changed on files & directories at any time.
1239 * 4. CoW extsize hint of 0 turns off hints, clears inode flags.
1240 * 5. Extent size must be a multiple of the appropriate block size.
1241 * 6. The extent size hint must be limited to half the AG size to avoid
1242 *    alignment extending the extent beyond the limits of the AG.
 
 
1243 */
1244static int
1245xfs_ioctl_setattr_check_cowextsize(
1246	struct xfs_inode	*ip,
1247	struct fsxattr		*fa)
1248{
1249	struct xfs_mount	*mp = ip->i_mount;
1250
1251	if (!(fa->fsx_xflags & FS_XFLAG_COWEXTSIZE))
1252		return 0;
1253
1254	if (!xfs_sb_version_hasreflink(&ip->i_mount->m_sb) ||
1255	    ip->i_d.di_version != 3)
1256		return -EINVAL;
1257
1258	if (!S_ISREG(VFS_I(ip)->i_mode) && !S_ISDIR(VFS_I(ip)->i_mode))
1259		return -EINVAL;
1260
1261	if (fa->fsx_cowextsize != 0) {
1262		xfs_extlen_t    size;
1263		xfs_fsblock_t   cowextsize_fsb;
1264
1265		cowextsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_cowextsize);
1266		if (cowextsize_fsb > MAXEXTLEN)
1267			return -EINVAL;
1268
1269		size = mp->m_sb.sb_blocksize;
1270		if (cowextsize_fsb > mp->m_sb.sb_agblocks / 2)
1271			return -EINVAL;
1272
1273		if (fa->fsx_cowextsize % size)
1274			return -EINVAL;
1275	} else
1276		fa->fsx_xflags &= ~FS_XFLAG_COWEXTSIZE;
1277
1278	return 0;
1279}
1280
1281static int
1282xfs_ioctl_setattr_check_projid(
1283	struct xfs_inode	*ip,
1284	struct fsxattr		*fa)
1285{
1286	/* Disallow 32bit project ids if projid32bit feature is not enabled. */
1287	if (fa->fsx_projid > (__uint16_t)-1 &&
1288	    !xfs_sb_version_hasprojid32bit(&ip->i_mount->m_sb))
1289		return -EINVAL;
1290
1291	/*
1292	 * Project Quota ID state is only allowed to change from within the init
1293	 * namespace. Enforce that restriction only if we are trying to change
1294	 * the quota ID state. Everything else is allowed in user namespaces.
1295	 */
1296	if (current_user_ns() == &init_user_ns)
1297		return 0;
1298
1299	if (xfs_get_projid(ip) != fa->fsx_projid)
1300		return -EINVAL;
1301	if ((fa->fsx_xflags & FS_XFLAG_PROJINHERIT) !=
1302	    (ip->i_d.di_flags & XFS_DIFLAG_PROJINHERIT))
1303		return -EINVAL;
1304
1305	return 0;
1306}
1307
1308STATIC int
1309xfs_ioctl_setattr(
1310	xfs_inode_t		*ip,
1311	struct fsxattr		*fa)
1312{
1313	struct xfs_mount	*mp = ip->i_mount;
1314	struct xfs_trans	*tp;
1315	struct xfs_dquot	*udqp = NULL;
1316	struct xfs_dquot	*pdqp = NULL;
1317	struct xfs_dquot	*olddquot = NULL;
1318	int			code;
1319	int			join_flags = 0;
1320
1321	trace_xfs_ioctl_setattr(ip);
1322
1323	code = xfs_ioctl_setattr_check_projid(ip, fa);
1324	if (code)
1325		return code;
1326
1327	/*
1328	 * If disk quotas is on, we make sure that the dquots do exist on disk,
1329	 * before we start any other transactions. Trying to do this later
1330	 * is messy. We don't care to take a readlock to look at the ids
1331	 * in inode here, because we can't hold it across the trans_reserve.
1332	 * If the IDs do change before we take the ilock, we're covered
1333	 * because the i_*dquot fields will get updated anyway.
1334	 */
1335	if (XFS_IS_QUOTA_ON(mp)) {
1336		code = xfs_qm_vop_dqalloc(ip, ip->i_d.di_uid,
1337					 ip->i_d.di_gid, fa->fsx_projid,
1338					 XFS_QMOPT_PQUOTA, &udqp, NULL, &pdqp);
1339		if (code)
1340			return code;
1341	}
1342
1343	/*
1344	 * Changing DAX config may require inode locking for mapping
1345	 * invalidation. These need to be held all the way to transaction commit
1346	 * or cancel time, so need to be passed through to
1347	 * xfs_ioctl_setattr_get_trans() so it can apply them to the join call
1348	 * appropriately.
1349	 */
1350	code = xfs_ioctl_setattr_dax_invalidate(ip, fa, &join_flags);
1351	if (code)
1352		goto error_free_dquots;
1353
1354	tp = xfs_ioctl_setattr_get_trans(ip, join_flags);
1355	if (IS_ERR(tp)) {
1356		code = PTR_ERR(tp);
1357		goto error_free_dquots;
1358	}
1359
1360
1361	if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp) &&
1362	    xfs_get_projid(ip) != fa->fsx_projid) {
1363		code = xfs_qm_vop_chown_reserve(tp, ip, udqp, NULL, pdqp,
1364				capable(CAP_FOWNER) ?  XFS_QMOPT_FORCE_RES : 0);
1365		if (code)	/* out of quota */
1366			goto error_trans_cancel;
1367	}
1368
1369	code = xfs_ioctl_setattr_check_extsize(ip, fa);
1370	if (code)
1371		goto error_trans_cancel;
1372
1373	code = xfs_ioctl_setattr_check_cowextsize(ip, fa);
1374	if (code)
1375		goto error_trans_cancel;
1376
1377	code = xfs_ioctl_setattr_xflags(tp, ip, fa);
1378	if (code)
1379		goto error_trans_cancel;
1380
1381	/*
1382	 * Change file ownership.  Must be the owner or privileged.  CAP_FSETID
1383	 * overrides the following restrictions:
1384	 *
1385	 * The set-user-ID and set-group-ID bits of a file will be cleared upon
1386	 * successful return from chown()
1387	 */
1388
1389	if ((VFS_I(ip)->i_mode & (S_ISUID|S_ISGID)) &&
1390	    !capable_wrt_inode_uidgid(VFS_I(ip), CAP_FSETID))
1391		VFS_I(ip)->i_mode &= ~(S_ISUID|S_ISGID);
1392
1393	/* Change the ownerships and register project quota modifications */
1394	if (xfs_get_projid(ip) != fa->fsx_projid) {
1395		if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp)) {
1396			olddquot = xfs_qm_vop_chown(tp, ip,
1397						&ip->i_pdquot, pdqp);
1398		}
1399		ASSERT(ip->i_d.di_version > 1);
1400		xfs_set_projid(ip, fa->fsx_projid);
1401	}
1402
1403	/*
1404	 * Only set the extent size hint if we've already determined that the
1405	 * extent size hint should be set on the inode. If no extent size flags
1406	 * are set on the inode then unconditionally clear the extent size hint.
1407	 */
1408	if (ip->i_d.di_flags & (XFS_DIFLAG_EXTSIZE | XFS_DIFLAG_EXTSZINHERIT))
1409		ip->i_d.di_extsize = fa->fsx_extsize >> mp->m_sb.sb_blocklog;
1410	else
1411		ip->i_d.di_extsize = 0;
1412	if (ip->i_d.di_version == 3 &&
1413	    (ip->i_d.di_flags2 & XFS_DIFLAG2_COWEXTSIZE))
1414		ip->i_d.di_cowextsize = fa->fsx_cowextsize >>
1415				mp->m_sb.sb_blocklog;
1416	else
1417		ip->i_d.di_cowextsize = 0;
1418
1419	code = xfs_trans_commit(tp);
1420
1421	/*
1422	 * Release any dquot(s) the inode had kept before chown.
1423	 */
1424	xfs_qm_dqrele(olddquot);
1425	xfs_qm_dqrele(udqp);
1426	xfs_qm_dqrele(pdqp);
1427
1428	return code;
1429
1430error_trans_cancel:
1431	xfs_trans_cancel(tp);
1432error_free_dquots:
1433	xfs_qm_dqrele(udqp);
1434	xfs_qm_dqrele(pdqp);
1435	return code;
1436}
1437
1438STATIC int
1439xfs_ioc_fssetxattr(
1440	xfs_inode_t		*ip,
1441	struct file		*filp,
1442	void			__user *arg)
1443{
1444	struct fsxattr		fa;
1445	int error;
1446
1447	if (copy_from_user(&fa, arg, sizeof(fa)))
1448		return -EFAULT;
1449
1450	error = mnt_want_write_file(filp);
1451	if (error)
1452		return error;
1453	error = xfs_ioctl_setattr(ip, &fa);
1454	mnt_drop_write_file(filp);
1455	return error;
1456}
1457
1458STATIC int
1459xfs_ioc_getxflags(
1460	xfs_inode_t		*ip,
1461	void			__user *arg)
1462{
1463	unsigned int		flags;
1464
1465	flags = xfs_di2lxflags(ip->i_d.di_flags);
1466	if (copy_to_user(arg, &flags, sizeof(flags)))
1467		return -EFAULT;
1468	return 0;
1469}
1470
1471STATIC int
1472xfs_ioc_setxflags(
1473	struct xfs_inode	*ip,
1474	struct file		*filp,
1475	void			__user *arg)
1476{
1477	struct xfs_trans	*tp;
1478	struct fsxattr		fa;
1479	unsigned int		flags;
1480	int			join_flags = 0;
1481	int			error;
1482
1483	if (copy_from_user(&flags, arg, sizeof(flags)))
1484		return -EFAULT;
1485
1486	if (flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL | \
1487		      FS_NOATIME_FL | FS_NODUMP_FL | \
1488		      FS_SYNC_FL))
1489		return -EOPNOTSUPP;
1490
1491	fa.fsx_xflags = xfs_merge_ioc_xflags(flags, xfs_ip2xflags(ip));
1492
1493	error = mnt_want_write_file(filp);
1494	if (error)
1495		return error;
1496
1497	/*
1498	 * Changing DAX config may require inode locking for mapping
1499	 * invalidation. These need to be held all the way to transaction commit
1500	 * or cancel time, so need to be passed through to
1501	 * xfs_ioctl_setattr_get_trans() so it can apply them to the join call
1502	 * appropriately.
1503	 */
1504	error = xfs_ioctl_setattr_dax_invalidate(ip, &fa, &join_flags);
1505	if (error)
1506		goto out_drop_write;
1507
1508	tp = xfs_ioctl_setattr_get_trans(ip, join_flags);
1509	if (IS_ERR(tp)) {
1510		error = PTR_ERR(tp);
1511		goto out_drop_write;
1512	}
1513
1514	error = xfs_ioctl_setattr_xflags(tp, ip, &fa);
1515	if (error) {
1516		xfs_trans_cancel(tp);
1517		goto out_drop_write;
1518	}
1519
1520	error = xfs_trans_commit(tp);
1521out_drop_write:
1522	mnt_drop_write_file(filp);
1523	return error;
1524}
1525
1526STATIC int
1527xfs_getbmap_format(void **ap, struct getbmapx *bmv, int *full)
1528{
1529	struct getbmap __user	*base = (struct getbmap __user *)*ap;
1530
1531	/* copy only getbmap portion (not getbmapx) */
1532	if (copy_to_user(base, bmv, sizeof(struct getbmap)))
1533		return -EFAULT;
1534
1535	*ap += sizeof(struct getbmap);
1536	return 0;
 
 
 
 
 
 
 
 
 
1537}
1538
1539STATIC int
1540xfs_ioc_getbmap(
1541	struct file		*file,
1542	unsigned int		cmd,
1543	void			__user *arg)
1544{
1545	struct getbmapx		bmx;
1546	int			error;
 
 
1547
1548	if (copy_from_user(&bmx, arg, sizeof(struct getbmapx)))
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1549		return -EFAULT;
1550
1551	if (bmx.bmv_count < 2)
1552		return -EINVAL;
 
 
1553
1554	bmx.bmv_iflags = (cmd == XFS_IOC_GETBMAPA ? BMV_IF_ATTRFORK : 0);
1555	if (file->f_mode & FMODE_NOCMTIME)
1556		bmx.bmv_iflags |= BMV_IF_NO_DMAPI_READ;
1557
1558	error = xfs_getbmap(XFS_I(file_inode(file)), &bmx, xfs_getbmap_format,
1559			    (__force struct getbmap *)arg+1);
1560	if (error)
1561		return error;
1562
1563	/* copy back header - only size of getbmap */
1564	if (copy_to_user(arg, &bmx, sizeof(struct getbmap)))
1565		return -EFAULT;
 
 
 
 
 
 
 
 
 
 
 
1566	return 0;
1567}
1568
 
 
 
 
 
 
 
1569STATIC int
1570xfs_getbmapx_format(void **ap, struct getbmapx *bmv, int *full)
1571{
1572	struct getbmapx __user	*base = (struct getbmapx __user *)*ap;
 
1573
1574	if (copy_to_user(base, bmv, sizeof(struct getbmapx)))
 
 
 
 
 
1575		return -EFAULT;
1576
1577	*ap += sizeof(struct getbmapx);
1578	return 0;
1579}
1580
1581STATIC int
1582xfs_ioc_getbmapx(
1583	struct xfs_inode	*ip,
1584	void			__user *arg)
1585{
1586	struct getbmapx		bmx;
 
 
 
1587	int			error;
1588
1589	if (copy_from_user(&bmx, arg, sizeof(bmx)))
1590		return -EFAULT;
1591
1592	if (bmx.bmv_count < 2)
 
 
 
1593		return -EINVAL;
1594
1595	if (bmx.bmv_iflags & (~BMV_IF_VALID))
1596		return -EINVAL;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1597
1598	error = xfs_getbmap(ip, &bmx, xfs_getbmapx_format,
1599			    (__force struct getbmapx *)arg+1);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1600	if (error)
1601		return error;
1602
1603	/* copy back header */
1604	if (copy_to_user(arg, &bmx, sizeof(struct getbmapx)))
1605		return -EFAULT;
1606
1607	return 0;
1608}
1609
1610int
1611xfs_ioc_swapext(
1612	xfs_swapext_t	*sxp)
1613{
1614	xfs_inode_t     *ip, *tip;
1615	struct fd	f, tmp;
1616	int		error = 0;
1617
1618	/* Pull information for the target fd */
1619	f = fdget((int)sxp->sx_fdtarget);
1620	if (!f.file) {
1621		error = -EINVAL;
1622		goto out;
1623	}
1624
1625	if (!(f.file->f_mode & FMODE_WRITE) ||
1626	    !(f.file->f_mode & FMODE_READ) ||
1627	    (f.file->f_flags & O_APPEND)) {
1628		error = -EBADF;
1629		goto out_put_file;
1630	}
1631
1632	tmp = fdget((int)sxp->sx_fdtmp);
1633	if (!tmp.file) {
1634		error = -EINVAL;
1635		goto out_put_file;
1636	}
1637
1638	if (!(tmp.file->f_mode & FMODE_WRITE) ||
1639	    !(tmp.file->f_mode & FMODE_READ) ||
1640	    (tmp.file->f_flags & O_APPEND)) {
1641		error = -EBADF;
1642		goto out_put_tmp_file;
1643	}
1644
1645	if (IS_SWAPFILE(file_inode(f.file)) ||
1646	    IS_SWAPFILE(file_inode(tmp.file))) {
1647		error = -EINVAL;
1648		goto out_put_tmp_file;
1649	}
1650
1651	/*
1652	 * We need to ensure that the fds passed in point to XFS inodes
1653	 * before we cast and access them as XFS structures as we have no
1654	 * control over what the user passes us here.
1655	 */
1656	if (f.file->f_op != &xfs_file_operations ||
1657	    tmp.file->f_op != &xfs_file_operations) {
1658		error = -EINVAL;
1659		goto out_put_tmp_file;
1660	}
1661
1662	ip = XFS_I(file_inode(f.file));
1663	tip = XFS_I(file_inode(tmp.file));
1664
1665	if (ip->i_mount != tip->i_mount) {
1666		error = -EINVAL;
1667		goto out_put_tmp_file;
1668	}
1669
1670	if (ip->i_ino == tip->i_ino) {
1671		error = -EINVAL;
1672		goto out_put_tmp_file;
1673	}
1674
1675	if (XFS_FORCED_SHUTDOWN(ip->i_mount)) {
1676		error = -EIO;
1677		goto out_put_tmp_file;
1678	}
1679
1680	error = xfs_swap_extents(ip, tip, sxp);
1681
1682 out_put_tmp_file:
1683	fdput(tmp);
1684 out_put_file:
1685	fdput(f);
1686 out:
1687	return error;
1688}
1689
1690/*
1691 * Note: some of the ioctl's return positive numbers as a
1692 * byte count indicating success, such as readlink_by_handle.
1693 * So we don't "sign flip" like most other routines.  This means
1694 * true errors need to be returned as a negative value.
1695 */
1696long
1697xfs_file_ioctl(
1698	struct file		*filp,
1699	unsigned int		cmd,
1700	unsigned long		p)
1701{
1702	struct inode		*inode = file_inode(filp);
1703	struct xfs_inode	*ip = XFS_I(inode);
1704	struct xfs_mount	*mp = ip->i_mount;
1705	void			__user *arg = (void __user *)p;
1706	int			error;
1707
1708	trace_xfs_file_ioctl(ip);
1709
1710	switch (cmd) {
1711	case FITRIM:
1712		return xfs_ioc_trim(mp, arg);
1713	case XFS_IOC_ALLOCSP:
1714	case XFS_IOC_FREESP:
1715	case XFS_IOC_RESVSP:
1716	case XFS_IOC_UNRESVSP:
1717	case XFS_IOC_ALLOCSP64:
1718	case XFS_IOC_FREESP64:
1719	case XFS_IOC_RESVSP64:
1720	case XFS_IOC_UNRESVSP64:
1721	case XFS_IOC_ZERO_RANGE: {
1722		xfs_flock64_t		bf;
1723
1724		if (copy_from_user(&bf, arg, sizeof(bf)))
1725			return -EFAULT;
1726		return xfs_ioc_space(filp, cmd, &bf);
1727	}
1728	case XFS_IOC_DIOINFO: {
1729		struct dioattr	da;
1730		xfs_buftarg_t	*target =
1731			XFS_IS_REALTIME_INODE(ip) ?
1732			mp->m_rtdev_targp : mp->m_ddev_targp;
1733
1734		da.d_mem =  da.d_miniosz = target->bt_logical_sectorsize;
1735		da.d_maxiosz = INT_MAX & ~(da.d_miniosz - 1);
1736
1737		if (copy_to_user(arg, &da, sizeof(da)))
1738			return -EFAULT;
1739		return 0;
1740	}
1741
1742	case XFS_IOC_FSBULKSTAT_SINGLE:
1743	case XFS_IOC_FSBULKSTAT:
1744	case XFS_IOC_FSINUMBERS:
1745		return xfs_ioc_bulkstat(mp, cmd, arg);
1746
1747	case XFS_IOC_FSGEOMETRY_V1:
1748		return xfs_ioc_fsgeometry_v1(mp, arg);
1749
1750	case XFS_IOC_FSGEOMETRY:
1751		return xfs_ioc_fsgeometry(mp, arg);
1752
1753	case XFS_IOC_GETVERSION:
1754		return put_user(inode->i_generation, (int __user *)arg);
1755
1756	case XFS_IOC_FSGETXATTR:
1757		return xfs_ioc_fsgetxattr(ip, 0, arg);
1758	case XFS_IOC_FSGETXATTRA:
1759		return xfs_ioc_fsgetxattr(ip, 1, arg);
1760	case XFS_IOC_FSSETXATTR:
1761		return xfs_ioc_fssetxattr(ip, filp, arg);
1762	case XFS_IOC_GETXFLAGS:
1763		return xfs_ioc_getxflags(ip, arg);
1764	case XFS_IOC_SETXFLAGS:
1765		return xfs_ioc_setxflags(ip, filp, arg);
1766
1767	case XFS_IOC_FSSETDM: {
1768		struct fsdmidata	dmi;
1769
1770		if (copy_from_user(&dmi, arg, sizeof(dmi)))
1771			return -EFAULT;
1772
1773		error = mnt_want_write_file(filp);
1774		if (error)
1775			return error;
1776
1777		error = xfs_set_dmattrs(ip, dmi.fsd_dmevmask,
1778				dmi.fsd_dmstate);
1779		mnt_drop_write_file(filp);
1780		return error;
1781	}
1782
1783	case XFS_IOC_GETBMAP:
1784	case XFS_IOC_GETBMAPA:
 
1785		return xfs_ioc_getbmap(filp, cmd, arg);
1786
1787	case XFS_IOC_GETBMAPX:
1788		return xfs_ioc_getbmapx(ip, arg);
 
 
 
1789
1790	case XFS_IOC_FD_TO_HANDLE:
1791	case XFS_IOC_PATH_TO_HANDLE:
1792	case XFS_IOC_PATH_TO_FSHANDLE: {
1793		xfs_fsop_handlereq_t	hreq;
1794
1795		if (copy_from_user(&hreq, arg, sizeof(hreq)))
1796			return -EFAULT;
1797		return xfs_find_handle(cmd, &hreq);
1798	}
1799	case XFS_IOC_OPEN_BY_HANDLE: {
1800		xfs_fsop_handlereq_t	hreq;
1801
1802		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1803			return -EFAULT;
1804		return xfs_open_by_handle(filp, &hreq);
1805	}
1806	case XFS_IOC_FSSETDM_BY_HANDLE:
1807		return xfs_fssetdm_by_handle(filp, arg);
1808
1809	case XFS_IOC_READLINK_BY_HANDLE: {
1810		xfs_fsop_handlereq_t	hreq;
1811
1812		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1813			return -EFAULT;
1814		return xfs_readlink_by_handle(filp, &hreq);
1815	}
1816	case XFS_IOC_ATTRLIST_BY_HANDLE:
1817		return xfs_attrlist_by_handle(filp, arg);
1818
1819	case XFS_IOC_ATTRMULTI_BY_HANDLE:
1820		return xfs_attrmulti_by_handle(filp, arg);
1821
1822	case XFS_IOC_SWAPEXT: {
1823		struct xfs_swapext	sxp;
1824
1825		if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))
1826			return -EFAULT;
1827		error = mnt_want_write_file(filp);
1828		if (error)
1829			return error;
1830		error = xfs_ioc_swapext(&sxp);
1831		mnt_drop_write_file(filp);
1832		return error;
1833	}
1834
1835	case XFS_IOC_FSCOUNTS: {
1836		xfs_fsop_counts_t out;
1837
1838		error = xfs_fs_counts(mp, &out);
1839		if (error)
1840			return error;
1841
1842		if (copy_to_user(arg, &out, sizeof(out)))
1843			return -EFAULT;
1844		return 0;
1845	}
1846
1847	case XFS_IOC_SET_RESBLKS: {
1848		xfs_fsop_resblks_t inout;
1849		__uint64_t	   in;
1850
1851		if (!capable(CAP_SYS_ADMIN))
1852			return -EPERM;
1853
1854		if (mp->m_flags & XFS_MOUNT_RDONLY)
1855			return -EROFS;
1856
1857		if (copy_from_user(&inout, arg, sizeof(inout)))
1858			return -EFAULT;
1859
1860		error = mnt_want_write_file(filp);
1861		if (error)
1862			return error;
1863
1864		/* input parameter is passed in resblks field of structure */
1865		in = inout.resblks;
1866		error = xfs_reserve_blocks(mp, &in, &inout);
1867		mnt_drop_write_file(filp);
1868		if (error)
1869			return error;
1870
1871		if (copy_to_user(arg, &inout, sizeof(inout)))
1872			return -EFAULT;
1873		return 0;
1874	}
1875
1876	case XFS_IOC_GET_RESBLKS: {
1877		xfs_fsop_resblks_t out;
1878
1879		if (!capable(CAP_SYS_ADMIN))
1880			return -EPERM;
1881
1882		error = xfs_reserve_blocks(mp, NULL, &out);
1883		if (error)
1884			return error;
1885
1886		if (copy_to_user(arg, &out, sizeof(out)))
1887			return -EFAULT;
1888
1889		return 0;
1890	}
1891
1892	case XFS_IOC_FSGROWFSDATA: {
1893		xfs_growfs_data_t in;
1894
1895		if (copy_from_user(&in, arg, sizeof(in)))
1896			return -EFAULT;
1897
1898		error = mnt_want_write_file(filp);
1899		if (error)
1900			return error;
1901		error = xfs_growfs_data(mp, &in);
1902		mnt_drop_write_file(filp);
1903		return error;
1904	}
1905
1906	case XFS_IOC_FSGROWFSLOG: {
1907		xfs_growfs_log_t in;
1908
1909		if (copy_from_user(&in, arg, sizeof(in)))
1910			return -EFAULT;
1911
1912		error = mnt_want_write_file(filp);
1913		if (error)
1914			return error;
1915		error = xfs_growfs_log(mp, &in);
1916		mnt_drop_write_file(filp);
1917		return error;
1918	}
1919
1920	case XFS_IOC_FSGROWFSRT: {
1921		xfs_growfs_rt_t in;
1922
1923		if (copy_from_user(&in, arg, sizeof(in)))
1924			return -EFAULT;
1925
1926		error = mnt_want_write_file(filp);
1927		if (error)
1928			return error;
1929		error = xfs_growfs_rt(mp, &in);
1930		mnt_drop_write_file(filp);
1931		return error;
1932	}
1933
1934	case XFS_IOC_GOINGDOWN: {
1935		__uint32_t in;
1936
1937		if (!capable(CAP_SYS_ADMIN))
1938			return -EPERM;
1939
1940		if (get_user(in, (__uint32_t __user *)arg))
1941			return -EFAULT;
1942
1943		return xfs_fs_goingdown(mp, in);
1944	}
1945
1946	case XFS_IOC_ERROR_INJECTION: {
1947		xfs_error_injection_t in;
1948
1949		if (!capable(CAP_SYS_ADMIN))
1950			return -EPERM;
1951
1952		if (copy_from_user(&in, arg, sizeof(in)))
1953			return -EFAULT;
1954
1955		return xfs_errortag_add(in.errtag, mp);
1956	}
1957
1958	case XFS_IOC_ERROR_CLEARALL:
1959		if (!capable(CAP_SYS_ADMIN))
1960			return -EPERM;
1961
1962		return xfs_errortag_clearall(mp, 1);
1963
1964	case XFS_IOC_FREE_EOFBLOCKS: {
1965		struct xfs_fs_eofblocks eofb;
1966		struct xfs_eofblocks keofb;
1967
1968		if (!capable(CAP_SYS_ADMIN))
1969			return -EPERM;
1970
1971		if (mp->m_flags & XFS_MOUNT_RDONLY)
1972			return -EROFS;
1973
1974		if (copy_from_user(&eofb, arg, sizeof(eofb)))
1975			return -EFAULT;
1976
1977		error = xfs_fs_eofblocks_from_user(&eofb, &keofb);
1978		if (error)
1979			return error;
1980
1981		return xfs_icache_free_eofblocks(mp, &keofb);
1982	}
1983
1984	default:
1985		return -ENOTTY;
1986	}
1987}
v4.17
   1/*
   2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
   3 * All Rights Reserved.
   4 *
   5 * This program is free software; you can redistribute it and/or
   6 * modify it under the terms of the GNU General Public License as
   7 * published by the Free Software Foundation.
   8 *
   9 * This program is distributed in the hope that it would be useful,
  10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12 * GNU General Public License for more details.
  13 *
  14 * You should have received a copy of the GNU General Public License
  15 * along with this program; if not, write the Free Software Foundation,
  16 * Inc.,  51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
  17 */
  18#include "xfs.h"
  19#include "xfs_fs.h"
  20#include "xfs_shared.h"
  21#include "xfs_format.h"
  22#include "xfs_log_format.h"
  23#include "xfs_trans_resv.h"
  24#include "xfs_mount.h"
  25#include "xfs_inode.h"
  26#include "xfs_ioctl.h"
  27#include "xfs_alloc.h"
  28#include "xfs_rtalloc.h"
  29#include "xfs_itable.h"
  30#include "xfs_error.h"
  31#include "xfs_attr.h"
  32#include "xfs_bmap.h"
  33#include "xfs_bmap_util.h"
  34#include "xfs_fsops.h"
  35#include "xfs_discard.h"
  36#include "xfs_quota.h"
  37#include "xfs_export.h"
  38#include "xfs_trace.h"
  39#include "xfs_icache.h"
  40#include "xfs_symlink.h"
  41#include "xfs_trans.h"
  42#include "xfs_pnfs.h"
  43#include "xfs_acl.h"
  44#include "xfs_btree.h"
  45#include <linux/fsmap.h>
  46#include "xfs_fsmap.h"
  47#include "scrub/xfs_scrub.h"
  48#include "xfs_sb.h"
  49
  50#include <linux/capability.h>
  51#include <linux/cred.h>
  52#include <linux/dcache.h>
  53#include <linux/mount.h>
  54#include <linux/namei.h>
  55#include <linux/pagemap.h>
  56#include <linux/slab.h>
  57#include <linux/exportfs.h>
  58
  59/*
  60 * xfs_find_handle maps from userspace xfs_fsop_handlereq structure to
  61 * a file or fs handle.
  62 *
  63 * XFS_IOC_PATH_TO_FSHANDLE
  64 *    returns fs handle for a mount point or path within that mount point
  65 * XFS_IOC_FD_TO_HANDLE
  66 *    returns full handle for a FD opened in user space
  67 * XFS_IOC_PATH_TO_HANDLE
  68 *    returns full handle for a path
  69 */
  70int
  71xfs_find_handle(
  72	unsigned int		cmd,
  73	xfs_fsop_handlereq_t	*hreq)
  74{
  75	int			hsize;
  76	xfs_handle_t		handle;
  77	struct inode		*inode;
  78	struct fd		f = {NULL};
  79	struct path		path;
  80	int			error;
  81	struct xfs_inode	*ip;
  82
  83	if (cmd == XFS_IOC_FD_TO_HANDLE) {
  84		f = fdget(hreq->fd);
  85		if (!f.file)
  86			return -EBADF;
  87		inode = file_inode(f.file);
  88	} else {
  89		error = user_lpath((const char __user *)hreq->path, &path);
  90		if (error)
  91			return error;
  92		inode = d_inode(path.dentry);
  93	}
  94	ip = XFS_I(inode);
  95
  96	/*
  97	 * We can only generate handles for inodes residing on a XFS filesystem,
  98	 * and only for regular files, directories or symbolic links.
  99	 */
 100	error = -EINVAL;
 101	if (inode->i_sb->s_magic != XFS_SB_MAGIC)
 102		goto out_put;
 103
 104	error = -EBADF;
 105	if (!S_ISREG(inode->i_mode) &&
 106	    !S_ISDIR(inode->i_mode) &&
 107	    !S_ISLNK(inode->i_mode))
 108		goto out_put;
 109
 110
 111	memcpy(&handle.ha_fsid, ip->i_mount->m_fixedfsid, sizeof(xfs_fsid_t));
 112
 113	if (cmd == XFS_IOC_PATH_TO_FSHANDLE) {
 114		/*
 115		 * This handle only contains an fsid, zero the rest.
 116		 */
 117		memset(&handle.ha_fid, 0, sizeof(handle.ha_fid));
 118		hsize = sizeof(xfs_fsid_t);
 119	} else {
 120		handle.ha_fid.fid_len = sizeof(xfs_fid_t) -
 121					sizeof(handle.ha_fid.fid_len);
 122		handle.ha_fid.fid_pad = 0;
 123		handle.ha_fid.fid_gen = inode->i_generation;
 124		handle.ha_fid.fid_ino = ip->i_ino;
 125		hsize = sizeof(xfs_handle_t);
 
 126	}
 127
 128	error = -EFAULT;
 129	if (copy_to_user(hreq->ohandle, &handle, hsize) ||
 130	    copy_to_user(hreq->ohandlen, &hsize, sizeof(__s32)))
 131		goto out_put;
 132
 133	error = 0;
 134
 135 out_put:
 136	if (cmd == XFS_IOC_FD_TO_HANDLE)
 137		fdput(f);
 138	else
 139		path_put(&path);
 140	return error;
 141}
 142
 143/*
 144 * No need to do permission checks on the various pathname components
 145 * as the handle operations are privileged.
 146 */
 147STATIC int
 148xfs_handle_acceptable(
 149	void			*context,
 150	struct dentry		*dentry)
 151{
 152	return 1;
 153}
 154
 155/*
 156 * Convert userspace handle data into a dentry.
 157 */
 158struct dentry *
 159xfs_handle_to_dentry(
 160	struct file		*parfilp,
 161	void __user		*uhandle,
 162	u32			hlen)
 163{
 164	xfs_handle_t		handle;
 165	struct xfs_fid64	fid;
 166
 167	/*
 168	 * Only allow handle opens under a directory.
 169	 */
 170	if (!S_ISDIR(file_inode(parfilp)->i_mode))
 171		return ERR_PTR(-ENOTDIR);
 172
 173	if (hlen != sizeof(xfs_handle_t))
 174		return ERR_PTR(-EINVAL);
 175	if (copy_from_user(&handle, uhandle, hlen))
 176		return ERR_PTR(-EFAULT);
 177	if (handle.ha_fid.fid_len !=
 178	    sizeof(handle.ha_fid) - sizeof(handle.ha_fid.fid_len))
 179		return ERR_PTR(-EINVAL);
 180
 181	memset(&fid, 0, sizeof(struct fid));
 182	fid.ino = handle.ha_fid.fid_ino;
 183	fid.gen = handle.ha_fid.fid_gen;
 184
 185	return exportfs_decode_fh(parfilp->f_path.mnt, (struct fid *)&fid, 3,
 186			FILEID_INO32_GEN | XFS_FILEID_TYPE_64FLAG,
 187			xfs_handle_acceptable, NULL);
 188}
 189
 190STATIC struct dentry *
 191xfs_handlereq_to_dentry(
 192	struct file		*parfilp,
 193	xfs_fsop_handlereq_t	*hreq)
 194{
 195	return xfs_handle_to_dentry(parfilp, hreq->ihandle, hreq->ihandlen);
 196}
 197
 198int
 199xfs_open_by_handle(
 200	struct file		*parfilp,
 201	xfs_fsop_handlereq_t	*hreq)
 202{
 203	const struct cred	*cred = current_cred();
 204	int			error;
 205	int			fd;
 206	int			permflag;
 207	struct file		*filp;
 208	struct inode		*inode;
 209	struct dentry		*dentry;
 210	fmode_t			fmode;
 211	struct path		path;
 212
 213	if (!capable(CAP_SYS_ADMIN))
 214		return -EPERM;
 215
 216	dentry = xfs_handlereq_to_dentry(parfilp, hreq);
 217	if (IS_ERR(dentry))
 218		return PTR_ERR(dentry);
 219	inode = d_inode(dentry);
 220
 221	/* Restrict xfs_open_by_handle to directories & regular files. */
 222	if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode))) {
 223		error = -EPERM;
 224		goto out_dput;
 225	}
 226
 227#if BITS_PER_LONG != 32
 228	hreq->oflags |= O_LARGEFILE;
 229#endif
 230
 231	permflag = hreq->oflags;
 232	fmode = OPEN_FMODE(permflag);
 233	if ((!(permflag & O_APPEND) || (permflag & O_TRUNC)) &&
 234	    (fmode & FMODE_WRITE) && IS_APPEND(inode)) {
 235		error = -EPERM;
 236		goto out_dput;
 237	}
 238
 239	if ((fmode & FMODE_WRITE) && IS_IMMUTABLE(inode)) {
 240		error = -EPERM;
 241		goto out_dput;
 242	}
 243
 244	/* Can't write directories. */
 245	if (S_ISDIR(inode->i_mode) && (fmode & FMODE_WRITE)) {
 246		error = -EISDIR;
 247		goto out_dput;
 248	}
 249
 250	fd = get_unused_fd_flags(0);
 251	if (fd < 0) {
 252		error = fd;
 253		goto out_dput;
 254	}
 255
 256	path.mnt = parfilp->f_path.mnt;
 257	path.dentry = dentry;
 258	filp = dentry_open(&path, hreq->oflags, cred);
 259	dput(dentry);
 260	if (IS_ERR(filp)) {
 261		put_unused_fd(fd);
 262		return PTR_ERR(filp);
 263	}
 264
 265	if (S_ISREG(inode->i_mode)) {
 266		filp->f_flags |= O_NOATIME;
 267		filp->f_mode |= FMODE_NOCMTIME;
 268	}
 269
 270	fd_install(fd, filp);
 271	return fd;
 272
 273 out_dput:
 274	dput(dentry);
 275	return error;
 276}
 277
 278int
 279xfs_readlink_by_handle(
 280	struct file		*parfilp,
 281	xfs_fsop_handlereq_t	*hreq)
 282{
 283	struct dentry		*dentry;
 284	__u32			olen;
 285	int			error;
 286
 287	if (!capable(CAP_SYS_ADMIN))
 288		return -EPERM;
 289
 290	dentry = xfs_handlereq_to_dentry(parfilp, hreq);
 291	if (IS_ERR(dentry))
 292		return PTR_ERR(dentry);
 293
 294	/* Restrict this handle operation to symlinks only. */
 295	if (!d_is_symlink(dentry)) {
 296		error = -EINVAL;
 297		goto out_dput;
 298	}
 299
 300	if (copy_from_user(&olen, hreq->ohandlen, sizeof(__u32))) {
 301		error = -EFAULT;
 302		goto out_dput;
 303	}
 304
 305	error = vfs_readlink(dentry, hreq->ohandle, olen);
 306
 307 out_dput:
 308	dput(dentry);
 309	return error;
 310}
 311
 312int
 313xfs_set_dmattrs(
 314	xfs_inode_t     *ip,
 315	uint		evmask,
 316	uint16_t	state)
 317{
 318	xfs_mount_t	*mp = ip->i_mount;
 319	xfs_trans_t	*tp;
 320	int		error;
 321
 322	if (!capable(CAP_SYS_ADMIN))
 323		return -EPERM;
 324
 325	if (XFS_FORCED_SHUTDOWN(mp))
 326		return -EIO;
 327
 328	error = xfs_trans_alloc(mp, &M_RES(mp)->tr_ichange, 0, 0, 0, &tp);
 329	if (error)
 330		return error;
 331
 332	xfs_ilock(ip, XFS_ILOCK_EXCL);
 333	xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL);
 334
 335	ip->i_d.di_dmevmask = evmask;
 336	ip->i_d.di_dmstate  = state;
 337
 338	xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
 339	error = xfs_trans_commit(tp);
 340
 341	return error;
 342}
 343
 344STATIC int
 345xfs_fssetdm_by_handle(
 346	struct file		*parfilp,
 347	void			__user *arg)
 348{
 349	int			error;
 350	struct fsdmidata	fsd;
 351	xfs_fsop_setdm_handlereq_t dmhreq;
 352	struct dentry		*dentry;
 353
 354	if (!capable(CAP_MKNOD))
 355		return -EPERM;
 356	if (copy_from_user(&dmhreq, arg, sizeof(xfs_fsop_setdm_handlereq_t)))
 357		return -EFAULT;
 358
 359	error = mnt_want_write_file(parfilp);
 360	if (error)
 361		return error;
 362
 363	dentry = xfs_handlereq_to_dentry(parfilp, &dmhreq.hreq);
 364	if (IS_ERR(dentry)) {
 365		mnt_drop_write_file(parfilp);
 366		return PTR_ERR(dentry);
 367	}
 368
 369	if (IS_IMMUTABLE(d_inode(dentry)) || IS_APPEND(d_inode(dentry))) {
 370		error = -EPERM;
 371		goto out;
 372	}
 373
 374	if (copy_from_user(&fsd, dmhreq.data, sizeof(fsd))) {
 375		error = -EFAULT;
 376		goto out;
 377	}
 378
 379	error = xfs_set_dmattrs(XFS_I(d_inode(dentry)), fsd.fsd_dmevmask,
 380				 fsd.fsd_dmstate);
 381
 382 out:
 383	mnt_drop_write_file(parfilp);
 384	dput(dentry);
 385	return error;
 386}
 387
 388STATIC int
 389xfs_attrlist_by_handle(
 390	struct file		*parfilp,
 391	void			__user *arg)
 392{
 393	int			error = -ENOMEM;
 394	attrlist_cursor_kern_t	*cursor;
 395	struct xfs_fsop_attrlist_handlereq __user	*p = arg;
 396	xfs_fsop_attrlist_handlereq_t al_hreq;
 397	struct dentry		*dentry;
 398	char			*kbuf;
 399
 400	if (!capable(CAP_SYS_ADMIN))
 401		return -EPERM;
 402	if (copy_from_user(&al_hreq, arg, sizeof(xfs_fsop_attrlist_handlereq_t)))
 403		return -EFAULT;
 404	if (al_hreq.buflen < sizeof(struct attrlist) ||
 405	    al_hreq.buflen > XFS_XATTR_LIST_MAX)
 406		return -EINVAL;
 407
 408	/*
 409	 * Reject flags, only allow namespaces.
 410	 */
 411	if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE))
 412		return -EINVAL;
 413
 414	dentry = xfs_handlereq_to_dentry(parfilp, &al_hreq.hreq);
 415	if (IS_ERR(dentry))
 416		return PTR_ERR(dentry);
 417
 418	kbuf = kmem_zalloc_large(al_hreq.buflen, KM_SLEEP);
 419	if (!kbuf)
 420		goto out_dput;
 421
 422	cursor = (attrlist_cursor_kern_t *)&al_hreq.pos;
 423	error = xfs_attr_list(XFS_I(d_inode(dentry)), kbuf, al_hreq.buflen,
 424					al_hreq.flags, cursor);
 425	if (error)
 426		goto out_kfree;
 427
 428	if (copy_to_user(&p->pos, cursor, sizeof(attrlist_cursor_kern_t))) {
 429		error = -EFAULT;
 430		goto out_kfree;
 431	}
 432
 433	if (copy_to_user(al_hreq.buffer, kbuf, al_hreq.buflen))
 434		error = -EFAULT;
 435
 436out_kfree:
 437	kmem_free(kbuf);
 438out_dput:
 439	dput(dentry);
 440	return error;
 441}
 442
 443int
 444xfs_attrmulti_attr_get(
 445	struct inode		*inode,
 446	unsigned char		*name,
 447	unsigned char		__user *ubuf,
 448	uint32_t		*len,
 449	uint32_t		flags)
 450{
 451	unsigned char		*kbuf;
 452	int			error = -EFAULT;
 453
 454	if (*len > XFS_XATTR_SIZE_MAX)
 455		return -EINVAL;
 456	kbuf = kmem_zalloc_large(*len, KM_SLEEP);
 457	if (!kbuf)
 458		return -ENOMEM;
 459
 460	error = xfs_attr_get(XFS_I(inode), name, kbuf, (int *)len, flags);
 461	if (error)
 462		goto out_kfree;
 463
 464	if (copy_to_user(ubuf, kbuf, *len))
 465		error = -EFAULT;
 466
 467out_kfree:
 468	kmem_free(kbuf);
 469	return error;
 470}
 471
 472int
 473xfs_attrmulti_attr_set(
 474	struct inode		*inode,
 475	unsigned char		*name,
 476	const unsigned char	__user *ubuf,
 477	uint32_t		len,
 478	uint32_t		flags)
 479{
 480	unsigned char		*kbuf;
 481	int			error;
 482
 483	if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
 484		return -EPERM;
 485	if (len > XFS_XATTR_SIZE_MAX)
 486		return -EINVAL;
 487
 488	kbuf = memdup_user(ubuf, len);
 489	if (IS_ERR(kbuf))
 490		return PTR_ERR(kbuf);
 491
 492	error = xfs_attr_set(XFS_I(inode), name, kbuf, len, flags);
 493	if (!error)
 494		xfs_forget_acl(inode, name, flags);
 495	kfree(kbuf);
 496	return error;
 497}
 498
 499int
 500xfs_attrmulti_attr_remove(
 501	struct inode		*inode,
 502	unsigned char		*name,
 503	uint32_t		flags)
 504{
 505	int			error;
 506
 507	if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
 508		return -EPERM;
 509	error = xfs_attr_remove(XFS_I(inode), name, flags);
 510	if (!error)
 511		xfs_forget_acl(inode, name, flags);
 512	return error;
 513}
 514
 515STATIC int
 516xfs_attrmulti_by_handle(
 517	struct file		*parfilp,
 518	void			__user *arg)
 519{
 520	int			error;
 521	xfs_attr_multiop_t	*ops;
 522	xfs_fsop_attrmulti_handlereq_t am_hreq;
 523	struct dentry		*dentry;
 524	unsigned int		i, size;
 525	unsigned char		*attr_name;
 526
 527	if (!capable(CAP_SYS_ADMIN))
 528		return -EPERM;
 529	if (copy_from_user(&am_hreq, arg, sizeof(xfs_fsop_attrmulti_handlereq_t)))
 530		return -EFAULT;
 531
 532	/* overflow check */
 533	if (am_hreq.opcount >= INT_MAX / sizeof(xfs_attr_multiop_t))
 534		return -E2BIG;
 535
 536	dentry = xfs_handlereq_to_dentry(parfilp, &am_hreq.hreq);
 537	if (IS_ERR(dentry))
 538		return PTR_ERR(dentry);
 539
 540	error = -E2BIG;
 541	size = am_hreq.opcount * sizeof(xfs_attr_multiop_t);
 542	if (!size || size > 16 * PAGE_SIZE)
 543		goto out_dput;
 544
 545	ops = memdup_user(am_hreq.ops, size);
 546	if (IS_ERR(ops)) {
 547		error = PTR_ERR(ops);
 548		goto out_dput;
 549	}
 550
 551	error = -ENOMEM;
 552	attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL);
 553	if (!attr_name)
 554		goto out_kfree_ops;
 555
 556	error = 0;
 557	for (i = 0; i < am_hreq.opcount; i++) {
 558		ops[i].am_error = strncpy_from_user((char *)attr_name,
 559				ops[i].am_attrname, MAXNAMELEN);
 560		if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN)
 561			error = -ERANGE;
 562		if (ops[i].am_error < 0)
 563			break;
 564
 565		switch (ops[i].am_opcode) {
 566		case ATTR_OP_GET:
 567			ops[i].am_error = xfs_attrmulti_attr_get(
 568					d_inode(dentry), attr_name,
 569					ops[i].am_attrvalue, &ops[i].am_length,
 570					ops[i].am_flags);
 571			break;
 572		case ATTR_OP_SET:
 573			ops[i].am_error = mnt_want_write_file(parfilp);
 574			if (ops[i].am_error)
 575				break;
 576			ops[i].am_error = xfs_attrmulti_attr_set(
 577					d_inode(dentry), attr_name,
 578					ops[i].am_attrvalue, ops[i].am_length,
 579					ops[i].am_flags);
 580			mnt_drop_write_file(parfilp);
 581			break;
 582		case ATTR_OP_REMOVE:
 583			ops[i].am_error = mnt_want_write_file(parfilp);
 584			if (ops[i].am_error)
 585				break;
 586			ops[i].am_error = xfs_attrmulti_attr_remove(
 587					d_inode(dentry), attr_name,
 588					ops[i].am_flags);
 589			mnt_drop_write_file(parfilp);
 590			break;
 591		default:
 592			ops[i].am_error = -EINVAL;
 593		}
 594	}
 595
 596	if (copy_to_user(am_hreq.ops, ops, size))
 597		error = -EFAULT;
 598
 599	kfree(attr_name);
 600 out_kfree_ops:
 601	kfree(ops);
 602 out_dput:
 603	dput(dentry);
 604	return error;
 605}
 606
 607int
 608xfs_ioc_space(
 609	struct file		*filp,
 610	unsigned int		cmd,
 611	xfs_flock64_t		*bf)
 612{
 613	struct inode		*inode = file_inode(filp);
 614	struct xfs_inode	*ip = XFS_I(inode);
 615	struct iattr		iattr;
 616	enum xfs_prealloc_flags	flags = 0;
 617	uint			iolock = XFS_IOLOCK_EXCL;
 618	int			error;
 619
 620	/*
 621	 * Only allow the sys admin to reserve space unless
 622	 * unwritten extents are enabled.
 623	 */
 624	if (!xfs_sb_version_hasextflgbit(&ip->i_mount->m_sb) &&
 625	    !capable(CAP_SYS_ADMIN))
 626		return -EPERM;
 627
 628	if (inode->i_flags & (S_IMMUTABLE|S_APPEND))
 629		return -EPERM;
 630
 631	if (!(filp->f_mode & FMODE_WRITE))
 632		return -EBADF;
 633
 634	if (!S_ISREG(inode->i_mode))
 635		return -EINVAL;
 636
 637	if (filp->f_flags & O_DSYNC)
 638		flags |= XFS_PREALLOC_SYNC;
 639	if (filp->f_mode & FMODE_NOCMTIME)
 640		flags |= XFS_PREALLOC_INVISIBLE;
 641
 642	error = mnt_want_write_file(filp);
 643	if (error)
 644		return error;
 645
 646	xfs_ilock(ip, iolock);
 647	error = xfs_break_layouts(inode, &iolock);
 648	if (error)
 649		goto out_unlock;
 650
 651	xfs_ilock(ip, XFS_MMAPLOCK_EXCL);
 652	iolock |= XFS_MMAPLOCK_EXCL;
 653
 654	switch (bf->l_whence) {
 655	case 0: /*SEEK_SET*/
 656		break;
 657	case 1: /*SEEK_CUR*/
 658		bf->l_start += filp->f_pos;
 659		break;
 660	case 2: /*SEEK_END*/
 661		bf->l_start += XFS_ISIZE(ip);
 662		break;
 663	default:
 664		error = -EINVAL;
 665		goto out_unlock;
 666	}
 667
 668	/*
 669	 * length of <= 0 for resv/unresv/zero is invalid.  length for
 670	 * alloc/free is ignored completely and we have no idea what userspace
 671	 * might have set it to, so set it to zero to allow range
 672	 * checks to pass.
 673	 */
 674	switch (cmd) {
 675	case XFS_IOC_ZERO_RANGE:
 676	case XFS_IOC_RESVSP:
 677	case XFS_IOC_RESVSP64:
 678	case XFS_IOC_UNRESVSP:
 679	case XFS_IOC_UNRESVSP64:
 680		if (bf->l_len <= 0) {
 681			error = -EINVAL;
 682			goto out_unlock;
 683		}
 684		break;
 685	default:
 686		bf->l_len = 0;
 687		break;
 688	}
 689
 690	if (bf->l_start < 0 ||
 691	    bf->l_start > inode->i_sb->s_maxbytes ||
 692	    bf->l_start + bf->l_len < 0 ||
 693	    bf->l_start + bf->l_len >= inode->i_sb->s_maxbytes) {
 694		error = -EINVAL;
 695		goto out_unlock;
 696	}
 697
 698	switch (cmd) {
 699	case XFS_IOC_ZERO_RANGE:
 700		flags |= XFS_PREALLOC_SET;
 701		error = xfs_zero_file_space(ip, bf->l_start, bf->l_len);
 702		break;
 703	case XFS_IOC_RESVSP:
 704	case XFS_IOC_RESVSP64:
 705		flags |= XFS_PREALLOC_SET;
 706		error = xfs_alloc_file_space(ip, bf->l_start, bf->l_len,
 707						XFS_BMAPI_PREALLOC);
 708		break;
 709	case XFS_IOC_UNRESVSP:
 710	case XFS_IOC_UNRESVSP64:
 711		error = xfs_free_file_space(ip, bf->l_start, bf->l_len);
 712		break;
 713	case XFS_IOC_ALLOCSP:
 714	case XFS_IOC_ALLOCSP64:
 715	case XFS_IOC_FREESP:
 716	case XFS_IOC_FREESP64:
 717		flags |= XFS_PREALLOC_CLEAR;
 718		if (bf->l_start > XFS_ISIZE(ip)) {
 719			error = xfs_alloc_file_space(ip, XFS_ISIZE(ip),
 720					bf->l_start - XFS_ISIZE(ip), 0);
 721			if (error)
 722				goto out_unlock;
 723		}
 724
 725		iattr.ia_valid = ATTR_SIZE;
 726		iattr.ia_size = bf->l_start;
 727
 728		error = xfs_vn_setattr_size(file_dentry(filp), &iattr);
 729		break;
 730	default:
 731		ASSERT(0);
 732		error = -EINVAL;
 733	}
 734
 735	if (error)
 736		goto out_unlock;
 737
 738	error = xfs_update_prealloc_flags(ip, flags);
 739
 740out_unlock:
 741	xfs_iunlock(ip, iolock);
 742	mnt_drop_write_file(filp);
 743	return error;
 744}
 745
 746STATIC int
 747xfs_ioc_bulkstat(
 748	xfs_mount_t		*mp,
 749	unsigned int		cmd,
 750	void			__user *arg)
 751{
 752	xfs_fsop_bulkreq_t	bulkreq;
 753	int			count;	/* # of records returned */
 754	xfs_ino_t		inlast;	/* last inode number */
 755	int			done;
 756	int			error;
 757
 758	/* done = 1 if there are more stats to get and if bulkstat */
 759	/* should be called again (unused here, but used in dmapi) */
 760
 761	if (!capable(CAP_SYS_ADMIN))
 762		return -EPERM;
 763
 764	if (XFS_FORCED_SHUTDOWN(mp))
 765		return -EIO;
 766
 767	if (copy_from_user(&bulkreq, arg, sizeof(xfs_fsop_bulkreq_t)))
 768		return -EFAULT;
 769
 770	if (copy_from_user(&inlast, bulkreq.lastip, sizeof(__s64)))
 771		return -EFAULT;
 772
 773	if ((count = bulkreq.icount) <= 0)
 774		return -EINVAL;
 775
 776	if (bulkreq.ubuffer == NULL)
 777		return -EINVAL;
 778
 779	if (cmd == XFS_IOC_FSINUMBERS)
 780		error = xfs_inumbers(mp, &inlast, &count,
 781					bulkreq.ubuffer, xfs_inumbers_fmt);
 782	else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE)
 783		error = xfs_bulkstat_one(mp, inlast, bulkreq.ubuffer,
 784					sizeof(xfs_bstat_t), NULL, &done);
 785	else	/* XFS_IOC_FSBULKSTAT */
 786		error = xfs_bulkstat(mp, &inlast, &count, xfs_bulkstat_one,
 787				     sizeof(xfs_bstat_t), bulkreq.ubuffer,
 788				     &done);
 789
 790	if (error)
 791		return error;
 792
 793	if (bulkreq.ocount != NULL) {
 794		if (copy_to_user(bulkreq.lastip, &inlast,
 795						sizeof(xfs_ino_t)))
 796			return -EFAULT;
 797
 798		if (copy_to_user(bulkreq.ocount, &count, sizeof(count)))
 799			return -EFAULT;
 800	}
 801
 802	return 0;
 803}
 804
 805STATIC int
 806xfs_ioc_fsgeometry_v1(
 807	xfs_mount_t		*mp,
 808	void			__user *arg)
 809{
 810	xfs_fsop_geom_t         fsgeo;
 811	int			error;
 812
 813	error = xfs_fs_geometry(&mp->m_sb, &fsgeo, 3);
 814	if (error)
 815		return error;
 816
 817	/*
 818	 * Caller should have passed an argument of type
 819	 * xfs_fsop_geom_v1_t.  This is a proper subset of the
 820	 * xfs_fsop_geom_t that xfs_fs_geometry() fills in.
 821	 */
 822	if (copy_to_user(arg, &fsgeo, sizeof(xfs_fsop_geom_v1_t)))
 823		return -EFAULT;
 824	return 0;
 825}
 826
 827STATIC int
 828xfs_ioc_fsgeometry(
 829	xfs_mount_t		*mp,
 830	void			__user *arg)
 831{
 832	xfs_fsop_geom_t		fsgeo;
 833	int			error;
 834
 835	error = xfs_fs_geometry(&mp->m_sb, &fsgeo, 4);
 836	if (error)
 837		return error;
 838
 839	if (copy_to_user(arg, &fsgeo, sizeof(fsgeo)))
 840		return -EFAULT;
 841	return 0;
 842}
 843
 844/*
 845 * Linux extended inode flags interface.
 846 */
 847
 848STATIC unsigned int
 849xfs_merge_ioc_xflags(
 850	unsigned int	flags,
 851	unsigned int	start)
 852{
 853	unsigned int	xflags = start;
 854
 855	if (flags & FS_IMMUTABLE_FL)
 856		xflags |= FS_XFLAG_IMMUTABLE;
 857	else
 858		xflags &= ~FS_XFLAG_IMMUTABLE;
 859	if (flags & FS_APPEND_FL)
 860		xflags |= FS_XFLAG_APPEND;
 861	else
 862		xflags &= ~FS_XFLAG_APPEND;
 863	if (flags & FS_SYNC_FL)
 864		xflags |= FS_XFLAG_SYNC;
 865	else
 866		xflags &= ~FS_XFLAG_SYNC;
 867	if (flags & FS_NOATIME_FL)
 868		xflags |= FS_XFLAG_NOATIME;
 869	else
 870		xflags &= ~FS_XFLAG_NOATIME;
 871	if (flags & FS_NODUMP_FL)
 872		xflags |= FS_XFLAG_NODUMP;
 873	else
 874		xflags &= ~FS_XFLAG_NODUMP;
 875
 876	return xflags;
 877}
 878
 879STATIC unsigned int
 880xfs_di2lxflags(
 881	uint16_t	di_flags)
 882{
 883	unsigned int	flags = 0;
 884
 885	if (di_flags & XFS_DIFLAG_IMMUTABLE)
 886		flags |= FS_IMMUTABLE_FL;
 887	if (di_flags & XFS_DIFLAG_APPEND)
 888		flags |= FS_APPEND_FL;
 889	if (di_flags & XFS_DIFLAG_SYNC)
 890		flags |= FS_SYNC_FL;
 891	if (di_flags & XFS_DIFLAG_NOATIME)
 892		flags |= FS_NOATIME_FL;
 893	if (di_flags & XFS_DIFLAG_NODUMP)
 894		flags |= FS_NODUMP_FL;
 895	return flags;
 896}
 897
 898STATIC int
 899xfs_ioc_fsgetxattr(
 900	xfs_inode_t		*ip,
 901	int			attr,
 902	void			__user *arg)
 903{
 904	struct fsxattr		fa;
 905
 906	memset(&fa, 0, sizeof(struct fsxattr));
 907
 908	xfs_ilock(ip, XFS_ILOCK_SHARED);
 909	fa.fsx_xflags = xfs_ip2xflags(ip);
 910	fa.fsx_extsize = ip->i_d.di_extsize << ip->i_mount->m_sb.sb_blocklog;
 911	fa.fsx_cowextsize = ip->i_d.di_cowextsize <<
 912			ip->i_mount->m_sb.sb_blocklog;
 913	fa.fsx_projid = xfs_get_projid(ip);
 914
 915	if (attr) {
 916		if (ip->i_afp) {
 917			if (ip->i_afp->if_flags & XFS_IFEXTENTS)
 918				fa.fsx_nextents = xfs_iext_count(ip->i_afp);
 919			else
 920				fa.fsx_nextents = ip->i_d.di_anextents;
 921		} else
 922			fa.fsx_nextents = 0;
 923	} else {
 924		if (ip->i_df.if_flags & XFS_IFEXTENTS)
 925			fa.fsx_nextents = xfs_iext_count(&ip->i_df);
 926		else
 927			fa.fsx_nextents = ip->i_d.di_nextents;
 928	}
 929	xfs_iunlock(ip, XFS_ILOCK_SHARED);
 930
 931	if (copy_to_user(arg, &fa, sizeof(fa)))
 932		return -EFAULT;
 933	return 0;
 934}
 935
 936STATIC uint16_t
 937xfs_flags2diflags(
 938	struct xfs_inode	*ip,
 939	unsigned int		xflags)
 940{
 
 
 
 941	/* can't set PREALLOC this way, just preserve it */
 942	uint16_t		di_flags =
 943		(ip->i_d.di_flags & XFS_DIFLAG_PREALLOC);
 944
 945	if (xflags & FS_XFLAG_IMMUTABLE)
 946		di_flags |= XFS_DIFLAG_IMMUTABLE;
 947	if (xflags & FS_XFLAG_APPEND)
 948		di_flags |= XFS_DIFLAG_APPEND;
 949	if (xflags & FS_XFLAG_SYNC)
 950		di_flags |= XFS_DIFLAG_SYNC;
 951	if (xflags & FS_XFLAG_NOATIME)
 952		di_flags |= XFS_DIFLAG_NOATIME;
 953	if (xflags & FS_XFLAG_NODUMP)
 954		di_flags |= XFS_DIFLAG_NODUMP;
 955	if (xflags & FS_XFLAG_NODEFRAG)
 956		di_flags |= XFS_DIFLAG_NODEFRAG;
 957	if (xflags & FS_XFLAG_FILESTREAM)
 958		di_flags |= XFS_DIFLAG_FILESTREAM;
 959	if (S_ISDIR(VFS_I(ip)->i_mode)) {
 960		if (xflags & FS_XFLAG_RTINHERIT)
 961			di_flags |= XFS_DIFLAG_RTINHERIT;
 962		if (xflags & FS_XFLAG_NOSYMLINKS)
 963			di_flags |= XFS_DIFLAG_NOSYMLINKS;
 964		if (xflags & FS_XFLAG_EXTSZINHERIT)
 965			di_flags |= XFS_DIFLAG_EXTSZINHERIT;
 966		if (xflags & FS_XFLAG_PROJINHERIT)
 967			di_flags |= XFS_DIFLAG_PROJINHERIT;
 968	} else if (S_ISREG(VFS_I(ip)->i_mode)) {
 969		if (xflags & FS_XFLAG_REALTIME)
 970			di_flags |= XFS_DIFLAG_REALTIME;
 971		if (xflags & FS_XFLAG_EXTSIZE)
 972			di_flags |= XFS_DIFLAG_EXTSIZE;
 973	}
 
 974
 975	return di_flags;
 976}
 977
 978STATIC uint64_t
 979xfs_flags2diflags2(
 980	struct xfs_inode	*ip,
 981	unsigned int		xflags)
 982{
 983	uint64_t		di_flags2 =
 984		(ip->i_d.di_flags2 & XFS_DIFLAG2_REFLINK);
 985
 
 986	if (xflags & FS_XFLAG_DAX)
 987		di_flags2 |= XFS_DIFLAG2_DAX;
 988	if (xflags & FS_XFLAG_COWEXTSIZE)
 989		di_flags2 |= XFS_DIFLAG2_COWEXTSIZE;
 990
 991	return di_flags2;
 992}
 993
 994STATIC void
 995xfs_diflags_to_linux(
 996	struct xfs_inode	*ip)
 997{
 998	struct inode		*inode = VFS_I(ip);
 999	unsigned int		xflags = xfs_ip2xflags(ip);
1000
1001	if (xflags & FS_XFLAG_IMMUTABLE)
1002		inode->i_flags |= S_IMMUTABLE;
1003	else
1004		inode->i_flags &= ~S_IMMUTABLE;
1005	if (xflags & FS_XFLAG_APPEND)
1006		inode->i_flags |= S_APPEND;
1007	else
1008		inode->i_flags &= ~S_APPEND;
1009	if (xflags & FS_XFLAG_SYNC)
1010		inode->i_flags |= S_SYNC;
1011	else
1012		inode->i_flags &= ~S_SYNC;
1013	if (xflags & FS_XFLAG_NOATIME)
1014		inode->i_flags |= S_NOATIME;
1015	else
1016		inode->i_flags &= ~S_NOATIME;
1017#if 0	/* disabled until the flag switching races are sorted out */
1018	if (xflags & FS_XFLAG_DAX)
1019		inode->i_flags |= S_DAX;
1020	else
1021		inode->i_flags &= ~S_DAX;
1022#endif
1023}
1024
1025static int
1026xfs_ioctl_setattr_xflags(
1027	struct xfs_trans	*tp,
1028	struct xfs_inode	*ip,
1029	struct fsxattr		*fa)
1030{
1031	struct xfs_mount	*mp = ip->i_mount;
1032	uint64_t		di_flags2;
1033
1034	/* Can't change realtime flag if any extents are allocated. */
1035	if ((ip->i_d.di_nextents || ip->i_delayed_blks) &&
1036	    XFS_IS_REALTIME_INODE(ip) != (fa->fsx_xflags & FS_XFLAG_REALTIME))
1037		return -EINVAL;
1038
1039	/* If realtime flag is set then must have realtime device */
1040	if (fa->fsx_xflags & FS_XFLAG_REALTIME) {
1041		if (mp->m_sb.sb_rblocks == 0 || mp->m_sb.sb_rextsize == 0 ||
1042		    (ip->i_d.di_extsize % mp->m_sb.sb_rextsize))
1043			return -EINVAL;
1044	}
1045
1046	/* Clear reflink if we are actually able to set the rt flag. */
1047	if ((fa->fsx_xflags & FS_XFLAG_REALTIME) && xfs_is_reflink_inode(ip))
1048		ip->i_d.di_flags2 &= ~XFS_DIFLAG2_REFLINK;
1049
1050	/* Don't allow us to set DAX mode for a reflinked file for now. */
1051	if ((fa->fsx_xflags & FS_XFLAG_DAX) && xfs_is_reflink_inode(ip))
1052		return -EINVAL;
1053
1054	/*
1055	 * Can't modify an immutable/append-only file unless
1056	 * we have appropriate permission.
1057	 */
1058	if (((ip->i_d.di_flags & (XFS_DIFLAG_IMMUTABLE | XFS_DIFLAG_APPEND)) ||
1059	     (fa->fsx_xflags & (FS_XFLAG_IMMUTABLE | FS_XFLAG_APPEND))) &&
1060	    !capable(CAP_LINUX_IMMUTABLE))
1061		return -EPERM;
1062
1063	/* diflags2 only valid for v3 inodes. */
1064	di_flags2 = xfs_flags2diflags2(ip, fa->fsx_xflags);
1065	if (di_flags2 && ip->i_d.di_version < 3)
1066		return -EINVAL;
1067
1068	ip->i_d.di_flags = xfs_flags2diflags(ip, fa->fsx_xflags);
1069	ip->i_d.di_flags2 = di_flags2;
1070
1071	xfs_diflags_to_linux(ip);
1072	xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_CHG);
1073	xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1074	XFS_STATS_INC(mp, xs_ig_attrchg);
1075	return 0;
1076}
1077
1078/*
1079 * If we are changing DAX flags, we have to ensure the file is clean and any
1080 * cached objects in the address space are invalidated and removed. This
1081 * requires us to lock out other IO and page faults similar to a truncate
1082 * operation. The locks need to be held until the transaction has been committed
1083 * so that the cache invalidation is atomic with respect to the DAX flag
1084 * manipulation.
1085 */
1086static int
1087xfs_ioctl_setattr_dax_invalidate(
1088	struct xfs_inode	*ip,
1089	struct fsxattr		*fa,
1090	int			*join_flags)
1091{
1092	struct inode		*inode = VFS_I(ip);
1093	struct super_block	*sb = inode->i_sb;
1094	int			error;
1095
1096	*join_flags = 0;
1097
1098	/*
1099	 * It is only valid to set the DAX flag on regular files and
1100	 * directories on filesystems where the block size is equal to the page
1101	 * size. On directories it serves as an inherit hint.
1102	 */
1103	if (fa->fsx_xflags & FS_XFLAG_DAX) {
1104		if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode)))
1105			return -EINVAL;
1106		if (bdev_dax_supported(sb, sb->s_blocksize) < 0)
1107			return -EINVAL;
1108	}
1109
1110	/* If the DAX state is not changing, we have nothing to do here. */
1111	if ((fa->fsx_xflags & FS_XFLAG_DAX) && IS_DAX(inode))
1112		return 0;
1113	if (!(fa->fsx_xflags & FS_XFLAG_DAX) && !IS_DAX(inode))
1114		return 0;
1115
1116	/* lock, flush and invalidate mapping in preparation for flag change */
1117	xfs_ilock(ip, XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL);
1118	error = filemap_write_and_wait(inode->i_mapping);
1119	if (error)
1120		goto out_unlock;
1121	error = invalidate_inode_pages2(inode->i_mapping);
1122	if (error)
1123		goto out_unlock;
1124
1125	*join_flags = XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL;
1126	return 0;
1127
1128out_unlock:
1129	xfs_iunlock(ip, XFS_MMAPLOCK_EXCL | XFS_IOLOCK_EXCL);
1130	return error;
1131
1132}
1133
1134/*
1135 * Set up the transaction structure for the setattr operation, checking that we
1136 * have permission to do so. On success, return a clean transaction and the
1137 * inode locked exclusively ready for further operation specific checks. On
1138 * failure, return an error without modifying or locking the inode.
1139 *
1140 * The inode might already be IO locked on call. If this is the case, it is
1141 * indicated in @join_flags and we take full responsibility for ensuring they
1142 * are unlocked from now on. Hence if we have an error here, we still have to
1143 * unlock them. Otherwise, once they are joined to the transaction, they will
1144 * be unlocked on commit/cancel.
1145 */
1146static struct xfs_trans *
1147xfs_ioctl_setattr_get_trans(
1148	struct xfs_inode	*ip,
1149	int			join_flags)
1150{
1151	struct xfs_mount	*mp = ip->i_mount;
1152	struct xfs_trans	*tp;
1153	int			error = -EROFS;
1154
1155	if (mp->m_flags & XFS_MOUNT_RDONLY)
1156		goto out_unlock;
1157	error = -EIO;
1158	if (XFS_FORCED_SHUTDOWN(mp))
1159		goto out_unlock;
1160
1161	error = xfs_trans_alloc(mp, &M_RES(mp)->tr_ichange, 0, 0, 0, &tp);
1162	if (error)
1163		return ERR_PTR(error);
1164
1165	xfs_ilock(ip, XFS_ILOCK_EXCL);
1166	xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL | join_flags);
1167	join_flags = 0;
1168
1169	/*
1170	 * CAP_FOWNER overrides the following restrictions:
1171	 *
1172	 * The user ID of the calling process must be equal to the file owner
1173	 * ID, except in cases where the CAP_FSETID capability is applicable.
1174	 */
1175	if (!inode_owner_or_capable(VFS_I(ip))) {
1176		error = -EPERM;
1177		goto out_cancel;
1178	}
1179
1180	if (mp->m_flags & XFS_MOUNT_WSYNC)
1181		xfs_trans_set_sync(tp);
1182
1183	return tp;
1184
1185out_cancel:
1186	xfs_trans_cancel(tp);
1187out_unlock:
1188	if (join_flags)
1189		xfs_iunlock(ip, join_flags);
1190	return ERR_PTR(error);
1191}
1192
1193/*
1194 * extent size hint validation is somewhat cumbersome. Rules are:
1195 *
1196 * 1. extent size hint is only valid for directories and regular files
1197 * 2. FS_XFLAG_EXTSIZE is only valid for regular files
1198 * 3. FS_XFLAG_EXTSZINHERIT is only valid for directories.
1199 * 4. can only be changed on regular files if no extents are allocated
1200 * 5. can be changed on directories at any time
1201 * 6. extsize hint of 0 turns off hints, clears inode flags.
1202 * 7. Extent size must be a multiple of the appropriate block size.
1203 * 8. for non-realtime files, the extent size hint must be limited
1204 *    to half the AG size to avoid alignment extending the extent beyond the
1205 *    limits of the AG.
1206 *
1207 * Please keep this function in sync with xfs_scrub_inode_extsize.
1208 */
1209static int
1210xfs_ioctl_setattr_check_extsize(
1211	struct xfs_inode	*ip,
1212	struct fsxattr		*fa)
1213{
1214	struct xfs_mount	*mp = ip->i_mount;
1215
1216	if ((fa->fsx_xflags & FS_XFLAG_EXTSIZE) && !S_ISREG(VFS_I(ip)->i_mode))
1217		return -EINVAL;
1218
1219	if ((fa->fsx_xflags & FS_XFLAG_EXTSZINHERIT) &&
1220	    !S_ISDIR(VFS_I(ip)->i_mode))
1221		return -EINVAL;
1222
1223	if (S_ISREG(VFS_I(ip)->i_mode) && ip->i_d.di_nextents &&
1224	    ((ip->i_d.di_extsize << mp->m_sb.sb_blocklog) != fa->fsx_extsize))
1225		return -EINVAL;
1226
1227	if (fa->fsx_extsize != 0) {
1228		xfs_extlen_t    size;
1229		xfs_fsblock_t   extsize_fsb;
1230
1231		extsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_extsize);
1232		if (extsize_fsb > MAXEXTLEN)
1233			return -EINVAL;
1234
1235		if (XFS_IS_REALTIME_INODE(ip) ||
1236		    (fa->fsx_xflags & FS_XFLAG_REALTIME)) {
1237			size = mp->m_sb.sb_rextsize << mp->m_sb.sb_blocklog;
1238		} else {
1239			size = mp->m_sb.sb_blocksize;
1240			if (extsize_fsb > mp->m_sb.sb_agblocks / 2)
1241				return -EINVAL;
1242		}
1243
1244		if (fa->fsx_extsize % size)
1245			return -EINVAL;
1246	} else
1247		fa->fsx_xflags &= ~(FS_XFLAG_EXTSIZE | FS_XFLAG_EXTSZINHERIT);
1248
1249	return 0;
1250}
1251
1252/*
1253 * CoW extent size hint validation rules are:
1254 *
1255 * 1. CoW extent size hint can only be set if reflink is enabled on the fs.
1256 *    The inode does not have to have any shared blocks, but it must be a v3.
1257 * 2. FS_XFLAG_COWEXTSIZE is only valid for directories and regular files;
1258 *    for a directory, the hint is propagated to new files.
1259 * 3. Can be changed on files & directories at any time.
1260 * 4. CoW extsize hint of 0 turns off hints, clears inode flags.
1261 * 5. Extent size must be a multiple of the appropriate block size.
1262 * 6. The extent size hint must be limited to half the AG size to avoid
1263 *    alignment extending the extent beyond the limits of the AG.
1264 *
1265 * Please keep this function in sync with xfs_scrub_inode_cowextsize.
1266 */
1267static int
1268xfs_ioctl_setattr_check_cowextsize(
1269	struct xfs_inode	*ip,
1270	struct fsxattr		*fa)
1271{
1272	struct xfs_mount	*mp = ip->i_mount;
1273
1274	if (!(fa->fsx_xflags & FS_XFLAG_COWEXTSIZE))
1275		return 0;
1276
1277	if (!xfs_sb_version_hasreflink(&ip->i_mount->m_sb) ||
1278	    ip->i_d.di_version != 3)
1279		return -EINVAL;
1280
1281	if (!S_ISREG(VFS_I(ip)->i_mode) && !S_ISDIR(VFS_I(ip)->i_mode))
1282		return -EINVAL;
1283
1284	if (fa->fsx_cowextsize != 0) {
1285		xfs_extlen_t    size;
1286		xfs_fsblock_t   cowextsize_fsb;
1287
1288		cowextsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_cowextsize);
1289		if (cowextsize_fsb > MAXEXTLEN)
1290			return -EINVAL;
1291
1292		size = mp->m_sb.sb_blocksize;
1293		if (cowextsize_fsb > mp->m_sb.sb_agblocks / 2)
1294			return -EINVAL;
1295
1296		if (fa->fsx_cowextsize % size)
1297			return -EINVAL;
1298	} else
1299		fa->fsx_xflags &= ~FS_XFLAG_COWEXTSIZE;
1300
1301	return 0;
1302}
1303
1304static int
1305xfs_ioctl_setattr_check_projid(
1306	struct xfs_inode	*ip,
1307	struct fsxattr		*fa)
1308{
1309	/* Disallow 32bit project ids if projid32bit feature is not enabled. */
1310	if (fa->fsx_projid > (uint16_t)-1 &&
1311	    !xfs_sb_version_hasprojid32bit(&ip->i_mount->m_sb))
1312		return -EINVAL;
1313
1314	/*
1315	 * Project Quota ID state is only allowed to change from within the init
1316	 * namespace. Enforce that restriction only if we are trying to change
1317	 * the quota ID state. Everything else is allowed in user namespaces.
1318	 */
1319	if (current_user_ns() == &init_user_ns)
1320		return 0;
1321
1322	if (xfs_get_projid(ip) != fa->fsx_projid)
1323		return -EINVAL;
1324	if ((fa->fsx_xflags & FS_XFLAG_PROJINHERIT) !=
1325	    (ip->i_d.di_flags & XFS_DIFLAG_PROJINHERIT))
1326		return -EINVAL;
1327
1328	return 0;
1329}
1330
1331STATIC int
1332xfs_ioctl_setattr(
1333	xfs_inode_t		*ip,
1334	struct fsxattr		*fa)
1335{
1336	struct xfs_mount	*mp = ip->i_mount;
1337	struct xfs_trans	*tp;
1338	struct xfs_dquot	*udqp = NULL;
1339	struct xfs_dquot	*pdqp = NULL;
1340	struct xfs_dquot	*olddquot = NULL;
1341	int			code;
1342	int			join_flags = 0;
1343
1344	trace_xfs_ioctl_setattr(ip);
1345
1346	code = xfs_ioctl_setattr_check_projid(ip, fa);
1347	if (code)
1348		return code;
1349
1350	/*
1351	 * If disk quotas is on, we make sure that the dquots do exist on disk,
1352	 * before we start any other transactions. Trying to do this later
1353	 * is messy. We don't care to take a readlock to look at the ids
1354	 * in inode here, because we can't hold it across the trans_reserve.
1355	 * If the IDs do change before we take the ilock, we're covered
1356	 * because the i_*dquot fields will get updated anyway.
1357	 */
1358	if (XFS_IS_QUOTA_ON(mp)) {
1359		code = xfs_qm_vop_dqalloc(ip, ip->i_d.di_uid,
1360					 ip->i_d.di_gid, fa->fsx_projid,
1361					 XFS_QMOPT_PQUOTA, &udqp, NULL, &pdqp);
1362		if (code)
1363			return code;
1364	}
1365
1366	/*
1367	 * Changing DAX config may require inode locking for mapping
1368	 * invalidation. These need to be held all the way to transaction commit
1369	 * or cancel time, so need to be passed through to
1370	 * xfs_ioctl_setattr_get_trans() so it can apply them to the join call
1371	 * appropriately.
1372	 */
1373	code = xfs_ioctl_setattr_dax_invalidate(ip, fa, &join_flags);
1374	if (code)
1375		goto error_free_dquots;
1376
1377	tp = xfs_ioctl_setattr_get_trans(ip, join_flags);
1378	if (IS_ERR(tp)) {
1379		code = PTR_ERR(tp);
1380		goto error_free_dquots;
1381	}
1382
1383
1384	if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp) &&
1385	    xfs_get_projid(ip) != fa->fsx_projid) {
1386		code = xfs_qm_vop_chown_reserve(tp, ip, udqp, NULL, pdqp,
1387				capable(CAP_FOWNER) ?  XFS_QMOPT_FORCE_RES : 0);
1388		if (code)	/* out of quota */
1389			goto error_trans_cancel;
1390	}
1391
1392	code = xfs_ioctl_setattr_check_extsize(ip, fa);
1393	if (code)
1394		goto error_trans_cancel;
1395
1396	code = xfs_ioctl_setattr_check_cowextsize(ip, fa);
1397	if (code)
1398		goto error_trans_cancel;
1399
1400	code = xfs_ioctl_setattr_xflags(tp, ip, fa);
1401	if (code)
1402		goto error_trans_cancel;
1403
1404	/*
1405	 * Change file ownership.  Must be the owner or privileged.  CAP_FSETID
1406	 * overrides the following restrictions:
1407	 *
1408	 * The set-user-ID and set-group-ID bits of a file will be cleared upon
1409	 * successful return from chown()
1410	 */
1411
1412	if ((VFS_I(ip)->i_mode & (S_ISUID|S_ISGID)) &&
1413	    !capable_wrt_inode_uidgid(VFS_I(ip), CAP_FSETID))
1414		VFS_I(ip)->i_mode &= ~(S_ISUID|S_ISGID);
1415
1416	/* Change the ownerships and register project quota modifications */
1417	if (xfs_get_projid(ip) != fa->fsx_projid) {
1418		if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp)) {
1419			olddquot = xfs_qm_vop_chown(tp, ip,
1420						&ip->i_pdquot, pdqp);
1421		}
1422		ASSERT(ip->i_d.di_version > 1);
1423		xfs_set_projid(ip, fa->fsx_projid);
1424	}
1425
1426	/*
1427	 * Only set the extent size hint if we've already determined that the
1428	 * extent size hint should be set on the inode. If no extent size flags
1429	 * are set on the inode then unconditionally clear the extent size hint.
1430	 */
1431	if (ip->i_d.di_flags & (XFS_DIFLAG_EXTSIZE | XFS_DIFLAG_EXTSZINHERIT))
1432		ip->i_d.di_extsize = fa->fsx_extsize >> mp->m_sb.sb_blocklog;
1433	else
1434		ip->i_d.di_extsize = 0;
1435	if (ip->i_d.di_version == 3 &&
1436	    (ip->i_d.di_flags2 & XFS_DIFLAG2_COWEXTSIZE))
1437		ip->i_d.di_cowextsize = fa->fsx_cowextsize >>
1438				mp->m_sb.sb_blocklog;
1439	else
1440		ip->i_d.di_cowextsize = 0;
1441
1442	code = xfs_trans_commit(tp);
1443
1444	/*
1445	 * Release any dquot(s) the inode had kept before chown.
1446	 */
1447	xfs_qm_dqrele(olddquot);
1448	xfs_qm_dqrele(udqp);
1449	xfs_qm_dqrele(pdqp);
1450
1451	return code;
1452
1453error_trans_cancel:
1454	xfs_trans_cancel(tp);
1455error_free_dquots:
1456	xfs_qm_dqrele(udqp);
1457	xfs_qm_dqrele(pdqp);
1458	return code;
1459}
1460
1461STATIC int
1462xfs_ioc_fssetxattr(
1463	xfs_inode_t		*ip,
1464	struct file		*filp,
1465	void			__user *arg)
1466{
1467	struct fsxattr		fa;
1468	int error;
1469
1470	if (copy_from_user(&fa, arg, sizeof(fa)))
1471		return -EFAULT;
1472
1473	error = mnt_want_write_file(filp);
1474	if (error)
1475		return error;
1476	error = xfs_ioctl_setattr(ip, &fa);
1477	mnt_drop_write_file(filp);
1478	return error;
1479}
1480
1481STATIC int
1482xfs_ioc_getxflags(
1483	xfs_inode_t		*ip,
1484	void			__user *arg)
1485{
1486	unsigned int		flags;
1487
1488	flags = xfs_di2lxflags(ip->i_d.di_flags);
1489	if (copy_to_user(arg, &flags, sizeof(flags)))
1490		return -EFAULT;
1491	return 0;
1492}
1493
1494STATIC int
1495xfs_ioc_setxflags(
1496	struct xfs_inode	*ip,
1497	struct file		*filp,
1498	void			__user *arg)
1499{
1500	struct xfs_trans	*tp;
1501	struct fsxattr		fa;
1502	unsigned int		flags;
1503	int			join_flags = 0;
1504	int			error;
1505
1506	if (copy_from_user(&flags, arg, sizeof(flags)))
1507		return -EFAULT;
1508
1509	if (flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL | \
1510		      FS_NOATIME_FL | FS_NODUMP_FL | \
1511		      FS_SYNC_FL))
1512		return -EOPNOTSUPP;
1513
1514	fa.fsx_xflags = xfs_merge_ioc_xflags(flags, xfs_ip2xflags(ip));
1515
1516	error = mnt_want_write_file(filp);
1517	if (error)
1518		return error;
1519
1520	/*
1521	 * Changing DAX config may require inode locking for mapping
1522	 * invalidation. These need to be held all the way to transaction commit
1523	 * or cancel time, so need to be passed through to
1524	 * xfs_ioctl_setattr_get_trans() so it can apply them to the join call
1525	 * appropriately.
1526	 */
1527	error = xfs_ioctl_setattr_dax_invalidate(ip, &fa, &join_flags);
1528	if (error)
1529		goto out_drop_write;
1530
1531	tp = xfs_ioctl_setattr_get_trans(ip, join_flags);
1532	if (IS_ERR(tp)) {
1533		error = PTR_ERR(tp);
1534		goto out_drop_write;
1535	}
1536
1537	error = xfs_ioctl_setattr_xflags(tp, ip, &fa);
1538	if (error) {
1539		xfs_trans_cancel(tp);
1540		goto out_drop_write;
1541	}
1542
1543	error = xfs_trans_commit(tp);
1544out_drop_write:
1545	mnt_drop_write_file(filp);
1546	return error;
1547}
1548
1549static bool
1550xfs_getbmap_format(
1551	struct kgetbmap		*p,
1552	struct getbmapx __user	*u,
1553	size_t			recsize)
1554{
1555	if (put_user(p->bmv_offset, &u->bmv_offset) ||
1556	    put_user(p->bmv_block, &u->bmv_block) ||
1557	    put_user(p->bmv_length, &u->bmv_length) ||
1558	    put_user(0, &u->bmv_count) ||
1559	    put_user(0, &u->bmv_entries))
1560		return false;
1561	if (recsize < sizeof(struct getbmapx))
1562		return true;
1563	if (put_user(0, &u->bmv_iflags) ||
1564	    put_user(p->bmv_oflags, &u->bmv_oflags) ||
1565	    put_user(0, &u->bmv_unused1) ||
1566	    put_user(0, &u->bmv_unused2))
1567		return false;
1568	return true;
1569}
1570
1571STATIC int
1572xfs_ioc_getbmap(
1573	struct file		*file,
1574	unsigned int		cmd,
1575	void			__user *arg)
1576{
1577	struct getbmapx		bmx = { 0 };
1578	struct kgetbmap		*buf;
1579	size_t			recsize;
1580	int			error, i;
1581
1582	switch (cmd) {
1583	case XFS_IOC_GETBMAPA:
1584		bmx.bmv_iflags = BMV_IF_ATTRFORK;
1585		/*FALLTHRU*/
1586	case XFS_IOC_GETBMAP:
1587		if (file->f_mode & FMODE_NOCMTIME)
1588			bmx.bmv_iflags |= BMV_IF_NO_DMAPI_READ;
1589		/* struct getbmap is a strict subset of struct getbmapx. */
1590		recsize = sizeof(struct getbmap);
1591		break;
1592	case XFS_IOC_GETBMAPX:
1593		recsize = sizeof(struct getbmapx);
1594		break;
1595	default:
1596		return -EINVAL;
1597	}
1598
1599	if (copy_from_user(&bmx, arg, recsize))
1600		return -EFAULT;
1601
1602	if (bmx.bmv_count < 2)
1603		return -EINVAL;
1604	if (bmx.bmv_count > ULONG_MAX / recsize)
1605		return -ENOMEM;
1606
1607	buf = kmem_zalloc_large(bmx.bmv_count * sizeof(*buf), 0);
1608	if (!buf)
1609		return -ENOMEM;
1610
1611	error = xfs_getbmap(XFS_I(file_inode(file)), &bmx, buf);
 
1612	if (error)
1613		goto out_free_buf;
1614
1615	error = -EFAULT;
1616	if (copy_to_user(arg, &bmx, recsize))
1617		goto out_free_buf;
1618	arg += recsize;
1619
1620	for (i = 0; i < bmx.bmv_entries; i++) {
1621		if (!xfs_getbmap_format(buf + i, arg, recsize))
1622			goto out_free_buf;
1623		arg += recsize;
1624	}
1625
1626	error = 0;
1627out_free_buf:
1628	kmem_free(buf);
1629	return 0;
1630}
1631
1632struct getfsmap_info {
1633	struct xfs_mount	*mp;
1634	struct fsmap_head __user *data;
1635	unsigned int		idx;
1636	__u32			last_flags;
1637};
1638
1639STATIC int
1640xfs_getfsmap_format(struct xfs_fsmap *xfm, void *priv)
1641{
1642	struct getfsmap_info	*info = priv;
1643	struct fsmap		fm;
1644
1645	trace_xfs_getfsmap_mapping(info->mp, xfm);
1646
1647	info->last_flags = xfm->fmr_flags;
1648	xfs_fsmap_from_internal(&fm, xfm);
1649	if (copy_to_user(&info->data->fmh_recs[info->idx++], &fm,
1650			sizeof(struct fsmap)))
1651		return -EFAULT;
1652
 
1653	return 0;
1654}
1655
1656STATIC int
1657xfs_ioc_getfsmap(
1658	struct xfs_inode	*ip,
1659	struct fsmap_head	__user *arg)
1660{
1661	struct getfsmap_info	info = { NULL };
1662	struct xfs_fsmap_head	xhead = {0};
1663	struct fsmap_head	head;
1664	bool			aborted = false;
1665	int			error;
1666
1667	if (copy_from_user(&head, arg, sizeof(struct fsmap_head)))
1668		return -EFAULT;
1669	if (memchr_inv(head.fmh_reserved, 0, sizeof(head.fmh_reserved)) ||
1670	    memchr_inv(head.fmh_keys[0].fmr_reserved, 0,
1671		       sizeof(head.fmh_keys[0].fmr_reserved)) ||
1672	    memchr_inv(head.fmh_keys[1].fmr_reserved, 0,
1673		       sizeof(head.fmh_keys[1].fmr_reserved)))
1674		return -EINVAL;
1675
1676	xhead.fmh_iflags = head.fmh_iflags;
1677	xhead.fmh_count = head.fmh_count;
1678	xfs_fsmap_to_internal(&xhead.fmh_keys[0], &head.fmh_keys[0]);
1679	xfs_fsmap_to_internal(&xhead.fmh_keys[1], &head.fmh_keys[1]);
1680
1681	trace_xfs_getfsmap_low_key(ip->i_mount, &xhead.fmh_keys[0]);
1682	trace_xfs_getfsmap_high_key(ip->i_mount, &xhead.fmh_keys[1]);
1683
1684	info.mp = ip->i_mount;
1685	info.data = arg;
1686	error = xfs_getfsmap(ip->i_mount, &xhead, xfs_getfsmap_format, &info);
1687	if (error == XFS_BTREE_QUERY_RANGE_ABORT) {
1688		error = 0;
1689		aborted = true;
1690	} else if (error)
1691		return error;
1692
1693	/* If we didn't abort, set the "last" flag in the last fmx */
1694	if (!aborted && info.idx) {
1695		info.last_flags |= FMR_OF_LAST;
1696		if (copy_to_user(&info.data->fmh_recs[info.idx - 1].fmr_flags,
1697				&info.last_flags, sizeof(info.last_flags)))
1698			return -EFAULT;
1699	}
1700
1701	/* copy back header */
1702	head.fmh_entries = xhead.fmh_entries;
1703	head.fmh_oflags = xhead.fmh_oflags;
1704	if (copy_to_user(arg, &head, sizeof(struct fsmap_head)))
1705		return -EFAULT;
1706
1707	return 0;
1708}
1709
1710STATIC int
1711xfs_ioc_scrub_metadata(
1712	struct xfs_inode		*ip,
1713	void				__user *arg)
1714{
1715	struct xfs_scrub_metadata	scrub;
1716	int				error;
1717
1718	if (!capable(CAP_SYS_ADMIN))
1719		return -EPERM;
1720
1721	if (copy_from_user(&scrub, arg, sizeof(scrub)))
1722		return -EFAULT;
1723
1724	error = xfs_scrub_metadata(ip, &scrub);
1725	if (error)
1726		return error;
1727
1728	if (copy_to_user(arg, &scrub, sizeof(scrub)))
 
1729		return -EFAULT;
1730
1731	return 0;
1732}
1733
1734int
1735xfs_ioc_swapext(
1736	xfs_swapext_t	*sxp)
1737{
1738	xfs_inode_t     *ip, *tip;
1739	struct fd	f, tmp;
1740	int		error = 0;
1741
1742	/* Pull information for the target fd */
1743	f = fdget((int)sxp->sx_fdtarget);
1744	if (!f.file) {
1745		error = -EINVAL;
1746		goto out;
1747	}
1748
1749	if (!(f.file->f_mode & FMODE_WRITE) ||
1750	    !(f.file->f_mode & FMODE_READ) ||
1751	    (f.file->f_flags & O_APPEND)) {
1752		error = -EBADF;
1753		goto out_put_file;
1754	}
1755
1756	tmp = fdget((int)sxp->sx_fdtmp);
1757	if (!tmp.file) {
1758		error = -EINVAL;
1759		goto out_put_file;
1760	}
1761
1762	if (!(tmp.file->f_mode & FMODE_WRITE) ||
1763	    !(tmp.file->f_mode & FMODE_READ) ||
1764	    (tmp.file->f_flags & O_APPEND)) {
1765		error = -EBADF;
1766		goto out_put_tmp_file;
1767	}
1768
1769	if (IS_SWAPFILE(file_inode(f.file)) ||
1770	    IS_SWAPFILE(file_inode(tmp.file))) {
1771		error = -EINVAL;
1772		goto out_put_tmp_file;
1773	}
1774
1775	/*
1776	 * We need to ensure that the fds passed in point to XFS inodes
1777	 * before we cast and access them as XFS structures as we have no
1778	 * control over what the user passes us here.
1779	 */
1780	if (f.file->f_op != &xfs_file_operations ||
1781	    tmp.file->f_op != &xfs_file_operations) {
1782		error = -EINVAL;
1783		goto out_put_tmp_file;
1784	}
1785
1786	ip = XFS_I(file_inode(f.file));
1787	tip = XFS_I(file_inode(tmp.file));
1788
1789	if (ip->i_mount != tip->i_mount) {
1790		error = -EINVAL;
1791		goto out_put_tmp_file;
1792	}
1793
1794	if (ip->i_ino == tip->i_ino) {
1795		error = -EINVAL;
1796		goto out_put_tmp_file;
1797	}
1798
1799	if (XFS_FORCED_SHUTDOWN(ip->i_mount)) {
1800		error = -EIO;
1801		goto out_put_tmp_file;
1802	}
1803
1804	error = xfs_swap_extents(ip, tip, sxp);
1805
1806 out_put_tmp_file:
1807	fdput(tmp);
1808 out_put_file:
1809	fdput(f);
1810 out:
1811	return error;
1812}
1813
1814/*
1815 * Note: some of the ioctl's return positive numbers as a
1816 * byte count indicating success, such as readlink_by_handle.
1817 * So we don't "sign flip" like most other routines.  This means
1818 * true errors need to be returned as a negative value.
1819 */
1820long
1821xfs_file_ioctl(
1822	struct file		*filp,
1823	unsigned int		cmd,
1824	unsigned long		p)
1825{
1826	struct inode		*inode = file_inode(filp);
1827	struct xfs_inode	*ip = XFS_I(inode);
1828	struct xfs_mount	*mp = ip->i_mount;
1829	void			__user *arg = (void __user *)p;
1830	int			error;
1831
1832	trace_xfs_file_ioctl(ip);
1833
1834	switch (cmd) {
1835	case FITRIM:
1836		return xfs_ioc_trim(mp, arg);
1837	case XFS_IOC_ALLOCSP:
1838	case XFS_IOC_FREESP:
1839	case XFS_IOC_RESVSP:
1840	case XFS_IOC_UNRESVSP:
1841	case XFS_IOC_ALLOCSP64:
1842	case XFS_IOC_FREESP64:
1843	case XFS_IOC_RESVSP64:
1844	case XFS_IOC_UNRESVSP64:
1845	case XFS_IOC_ZERO_RANGE: {
1846		xfs_flock64_t		bf;
1847
1848		if (copy_from_user(&bf, arg, sizeof(bf)))
1849			return -EFAULT;
1850		return xfs_ioc_space(filp, cmd, &bf);
1851	}
1852	case XFS_IOC_DIOINFO: {
1853		struct dioattr	da;
1854		xfs_buftarg_t	*target =
1855			XFS_IS_REALTIME_INODE(ip) ?
1856			mp->m_rtdev_targp : mp->m_ddev_targp;
1857
1858		da.d_mem =  da.d_miniosz = target->bt_logical_sectorsize;
1859		da.d_maxiosz = INT_MAX & ~(da.d_miniosz - 1);
1860
1861		if (copy_to_user(arg, &da, sizeof(da)))
1862			return -EFAULT;
1863		return 0;
1864	}
1865
1866	case XFS_IOC_FSBULKSTAT_SINGLE:
1867	case XFS_IOC_FSBULKSTAT:
1868	case XFS_IOC_FSINUMBERS:
1869		return xfs_ioc_bulkstat(mp, cmd, arg);
1870
1871	case XFS_IOC_FSGEOMETRY_V1:
1872		return xfs_ioc_fsgeometry_v1(mp, arg);
1873
1874	case XFS_IOC_FSGEOMETRY:
1875		return xfs_ioc_fsgeometry(mp, arg);
1876
1877	case XFS_IOC_GETVERSION:
1878		return put_user(inode->i_generation, (int __user *)arg);
1879
1880	case XFS_IOC_FSGETXATTR:
1881		return xfs_ioc_fsgetxattr(ip, 0, arg);
1882	case XFS_IOC_FSGETXATTRA:
1883		return xfs_ioc_fsgetxattr(ip, 1, arg);
1884	case XFS_IOC_FSSETXATTR:
1885		return xfs_ioc_fssetxattr(ip, filp, arg);
1886	case XFS_IOC_GETXFLAGS:
1887		return xfs_ioc_getxflags(ip, arg);
1888	case XFS_IOC_SETXFLAGS:
1889		return xfs_ioc_setxflags(ip, filp, arg);
1890
1891	case XFS_IOC_FSSETDM: {
1892		struct fsdmidata	dmi;
1893
1894		if (copy_from_user(&dmi, arg, sizeof(dmi)))
1895			return -EFAULT;
1896
1897		error = mnt_want_write_file(filp);
1898		if (error)
1899			return error;
1900
1901		error = xfs_set_dmattrs(ip, dmi.fsd_dmevmask,
1902				dmi.fsd_dmstate);
1903		mnt_drop_write_file(filp);
1904		return error;
1905	}
1906
1907	case XFS_IOC_GETBMAP:
1908	case XFS_IOC_GETBMAPA:
1909	case XFS_IOC_GETBMAPX:
1910		return xfs_ioc_getbmap(filp, cmd, arg);
1911
1912	case FS_IOC_GETFSMAP:
1913		return xfs_ioc_getfsmap(ip, arg);
1914
1915	case XFS_IOC_SCRUB_METADATA:
1916		return xfs_ioc_scrub_metadata(ip, arg);
1917
1918	case XFS_IOC_FD_TO_HANDLE:
1919	case XFS_IOC_PATH_TO_HANDLE:
1920	case XFS_IOC_PATH_TO_FSHANDLE: {
1921		xfs_fsop_handlereq_t	hreq;
1922
1923		if (copy_from_user(&hreq, arg, sizeof(hreq)))
1924			return -EFAULT;
1925		return xfs_find_handle(cmd, &hreq);
1926	}
1927	case XFS_IOC_OPEN_BY_HANDLE: {
1928		xfs_fsop_handlereq_t	hreq;
1929
1930		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1931			return -EFAULT;
1932		return xfs_open_by_handle(filp, &hreq);
1933	}
1934	case XFS_IOC_FSSETDM_BY_HANDLE:
1935		return xfs_fssetdm_by_handle(filp, arg);
1936
1937	case XFS_IOC_READLINK_BY_HANDLE: {
1938		xfs_fsop_handlereq_t	hreq;
1939
1940		if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1941			return -EFAULT;
1942		return xfs_readlink_by_handle(filp, &hreq);
1943	}
1944	case XFS_IOC_ATTRLIST_BY_HANDLE:
1945		return xfs_attrlist_by_handle(filp, arg);
1946
1947	case XFS_IOC_ATTRMULTI_BY_HANDLE:
1948		return xfs_attrmulti_by_handle(filp, arg);
1949
1950	case XFS_IOC_SWAPEXT: {
1951		struct xfs_swapext	sxp;
1952
1953		if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))
1954			return -EFAULT;
1955		error = mnt_want_write_file(filp);
1956		if (error)
1957			return error;
1958		error = xfs_ioc_swapext(&sxp);
1959		mnt_drop_write_file(filp);
1960		return error;
1961	}
1962
1963	case XFS_IOC_FSCOUNTS: {
1964		xfs_fsop_counts_t out;
1965
1966		error = xfs_fs_counts(mp, &out);
1967		if (error)
1968			return error;
1969
1970		if (copy_to_user(arg, &out, sizeof(out)))
1971			return -EFAULT;
1972		return 0;
1973	}
1974
1975	case XFS_IOC_SET_RESBLKS: {
1976		xfs_fsop_resblks_t inout;
1977		uint64_t	   in;
1978
1979		if (!capable(CAP_SYS_ADMIN))
1980			return -EPERM;
1981
1982		if (mp->m_flags & XFS_MOUNT_RDONLY)
1983			return -EROFS;
1984
1985		if (copy_from_user(&inout, arg, sizeof(inout)))
1986			return -EFAULT;
1987
1988		error = mnt_want_write_file(filp);
1989		if (error)
1990			return error;
1991
1992		/* input parameter is passed in resblks field of structure */
1993		in = inout.resblks;
1994		error = xfs_reserve_blocks(mp, &in, &inout);
1995		mnt_drop_write_file(filp);
1996		if (error)
1997			return error;
1998
1999		if (copy_to_user(arg, &inout, sizeof(inout)))
2000			return -EFAULT;
2001		return 0;
2002	}
2003
2004	case XFS_IOC_GET_RESBLKS: {
2005		xfs_fsop_resblks_t out;
2006
2007		if (!capable(CAP_SYS_ADMIN))
2008			return -EPERM;
2009
2010		error = xfs_reserve_blocks(mp, NULL, &out);
2011		if (error)
2012			return error;
2013
2014		if (copy_to_user(arg, &out, sizeof(out)))
2015			return -EFAULT;
2016
2017		return 0;
2018	}
2019
2020	case XFS_IOC_FSGROWFSDATA: {
2021		xfs_growfs_data_t in;
2022
2023		if (copy_from_user(&in, arg, sizeof(in)))
2024			return -EFAULT;
2025
2026		error = mnt_want_write_file(filp);
2027		if (error)
2028			return error;
2029		error = xfs_growfs_data(mp, &in);
2030		mnt_drop_write_file(filp);
2031		return error;
2032	}
2033
2034	case XFS_IOC_FSGROWFSLOG: {
2035		xfs_growfs_log_t in;
2036
2037		if (copy_from_user(&in, arg, sizeof(in)))
2038			return -EFAULT;
2039
2040		error = mnt_want_write_file(filp);
2041		if (error)
2042			return error;
2043		error = xfs_growfs_log(mp, &in);
2044		mnt_drop_write_file(filp);
2045		return error;
2046	}
2047
2048	case XFS_IOC_FSGROWFSRT: {
2049		xfs_growfs_rt_t in;
2050
2051		if (copy_from_user(&in, arg, sizeof(in)))
2052			return -EFAULT;
2053
2054		error = mnt_want_write_file(filp);
2055		if (error)
2056			return error;
2057		error = xfs_growfs_rt(mp, &in);
2058		mnt_drop_write_file(filp);
2059		return error;
2060	}
2061
2062	case XFS_IOC_GOINGDOWN: {
2063		uint32_t in;
2064
2065		if (!capable(CAP_SYS_ADMIN))
2066			return -EPERM;
2067
2068		if (get_user(in, (uint32_t __user *)arg))
2069			return -EFAULT;
2070
2071		return xfs_fs_goingdown(mp, in);
2072	}
2073
2074	case XFS_IOC_ERROR_INJECTION: {
2075		xfs_error_injection_t in;
2076
2077		if (!capable(CAP_SYS_ADMIN))
2078			return -EPERM;
2079
2080		if (copy_from_user(&in, arg, sizeof(in)))
2081			return -EFAULT;
2082
2083		return xfs_errortag_add(mp, in.errtag);
2084	}
2085
2086	case XFS_IOC_ERROR_CLEARALL:
2087		if (!capable(CAP_SYS_ADMIN))
2088			return -EPERM;
2089
2090		return xfs_errortag_clearall(mp);
2091
2092	case XFS_IOC_FREE_EOFBLOCKS: {
2093		struct xfs_fs_eofblocks eofb;
2094		struct xfs_eofblocks keofb;
2095
2096		if (!capable(CAP_SYS_ADMIN))
2097			return -EPERM;
2098
2099		if (mp->m_flags & XFS_MOUNT_RDONLY)
2100			return -EROFS;
2101
2102		if (copy_from_user(&eofb, arg, sizeof(eofb)))
2103			return -EFAULT;
2104
2105		error = xfs_fs_eofblocks_from_user(&eofb, &keofb);
2106		if (error)
2107			return error;
2108
2109		return xfs_icache_free_eofblocks(mp, &keofb);
2110	}
2111
2112	default:
2113		return -ENOTTY;
2114	}
2115}