Linux Audio

Check our new training course

Loading...
v6.2
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/* AFS cell and server record management
  3 *
  4 * Copyright (C) 2002, 2017 Red Hat, Inc. All Rights Reserved.
  5 * Written by David Howells (dhowells@redhat.com)
  6 */
  7
  8#include <linux/slab.h>
  9#include <linux/key.h>
 10#include <linux/ctype.h>
 11#include <linux/dns_resolver.h>
 12#include <linux/sched.h>
 13#include <linux/inet.h>
 14#include <linux/namei.h>
 15#include <keys/rxrpc-type.h>
 16#include "internal.h"
 17
 18static unsigned __read_mostly afs_cell_gc_delay = 10;
 19static unsigned __read_mostly afs_cell_min_ttl = 10 * 60;
 20static unsigned __read_mostly afs_cell_max_ttl = 24 * 60 * 60;
 21static atomic_t cell_debug_id;
 22
 23static void afs_queue_cell_manager(struct afs_net *);
 24static void afs_manage_cell_work(struct work_struct *);
 25
 26static void afs_dec_cells_outstanding(struct afs_net *net)
 27{
 28	if (atomic_dec_and_test(&net->cells_outstanding))
 29		wake_up_var(&net->cells_outstanding);
 30}
 31
 32/*
 33 * Set the cell timer to fire after a given delay, assuming it's not already
 34 * set for an earlier time.
 35 */
 36static void afs_set_cell_timer(struct afs_net *net, time64_t delay)
 37{
 38	if (net->live) {
 39		atomic_inc(&net->cells_outstanding);
 40		if (timer_reduce(&net->cells_timer, jiffies + delay * HZ))
 41			afs_dec_cells_outstanding(net);
 42	} else {
 43		afs_queue_cell_manager(net);
 44	}
 45}
 46
 47/*
 48 * Look up and get an activation reference on a cell record.  The caller must
 49 * hold net->cells_lock at least read-locked.
 50 */
 51static struct afs_cell *afs_find_cell_locked(struct afs_net *net,
 52					     const char *name, unsigned int namesz,
 53					     enum afs_cell_trace reason)
 54{
 55	struct afs_cell *cell = NULL;
 56	struct rb_node *p;
 57	int n;
 58
 59	_enter("%*.*s", namesz, namesz, name);
 60
 61	if (name && namesz == 0)
 62		return ERR_PTR(-EINVAL);
 63	if (namesz > AFS_MAXCELLNAME)
 64		return ERR_PTR(-ENAMETOOLONG);
 65
 66	if (!name) {
 67		cell = net->ws_cell;
 68		if (!cell)
 69			return ERR_PTR(-EDESTADDRREQ);
 70		goto found;
 71	}
 72
 73	p = net->cells.rb_node;
 74	while (p) {
 75		cell = rb_entry(p, struct afs_cell, net_node);
 76
 77		n = strncasecmp(cell->name, name,
 78				min_t(size_t, cell->name_len, namesz));
 79		if (n == 0)
 80			n = cell->name_len - namesz;
 81		if (n < 0)
 82			p = p->rb_left;
 83		else if (n > 0)
 84			p = p->rb_right;
 85		else
 86			goto found;
 87	}
 88
 89	return ERR_PTR(-ENOENT);
 90
 91found:
 92	return afs_use_cell(cell, reason);
 93}
 94
 95/*
 96 * Look up and get an activation reference on a cell record.
 97 */
 98struct afs_cell *afs_find_cell(struct afs_net *net,
 99			       const char *name, unsigned int namesz,
100			       enum afs_cell_trace reason)
101{
102	struct afs_cell *cell;
103
104	down_read(&net->cells_lock);
105	cell = afs_find_cell_locked(net, name, namesz, reason);
106	up_read(&net->cells_lock);
107	return cell;
108}
109
110/*
111 * Set up a cell record and fill in its name, VL server address list and
112 * allocate an anonymous key
113 */
114static struct afs_cell *afs_alloc_cell(struct afs_net *net,
115				       const char *name, unsigned int namelen,
116				       const char *addresses)
117{
118	struct afs_vlserver_list *vllist;
119	struct afs_cell *cell;
120	int i, ret;
121
122	ASSERT(name);
123	if (namelen == 0)
124		return ERR_PTR(-EINVAL);
125	if (namelen > AFS_MAXCELLNAME) {
126		_leave(" = -ENAMETOOLONG");
127		return ERR_PTR(-ENAMETOOLONG);
128	}
129
130	/* Prohibit cell names that contain unprintable chars, '/' and '@' or
131	 * that begin with a dot.  This also precludes "@cell".
132	 */
133	if (name[0] == '.')
134		return ERR_PTR(-EINVAL);
135	for (i = 0; i < namelen; i++) {
136		char ch = name[i];
137		if (!isprint(ch) || ch == '/' || ch == '@')
138			return ERR_PTR(-EINVAL);
139	}
140
141	_enter("%*.*s,%s", namelen, namelen, name, addresses);
142
143	cell = kzalloc(sizeof(struct afs_cell), GFP_KERNEL);
144	if (!cell) {
145		_leave(" = -ENOMEM");
146		return ERR_PTR(-ENOMEM);
147	}
148
149	cell->name = kmalloc(namelen + 1, GFP_KERNEL);
150	if (!cell->name) {
151		kfree(cell);
152		return ERR_PTR(-ENOMEM);
153	}
154
155	cell->net = net;
156	cell->name_len = namelen;
157	for (i = 0; i < namelen; i++)
158		cell->name[i] = tolower(name[i]);
159	cell->name[i] = 0;
160
161	refcount_set(&cell->ref, 1);
162	atomic_set(&cell->active, 0);
163	INIT_WORK(&cell->manager, afs_manage_cell_work);
 
164	cell->volumes = RB_ROOT;
165	INIT_HLIST_HEAD(&cell->proc_volumes);
166	seqlock_init(&cell->volume_lock);
167	cell->fs_servers = RB_ROOT;
168	seqlock_init(&cell->fs_lock);
169	INIT_LIST_HEAD(&cell->fs_open_mmaps);
170	init_rwsem(&cell->fs_open_mmaps_lock);
171	rwlock_init(&cell->vl_servers_lock);
172	cell->flags = (1 << AFS_CELL_FL_CHECK_ALIAS);
173
174	/* Provide a VL server list, filling it in if we were given a list of
175	 * addresses to use.
176	 */
177	if (addresses) {
178		vllist = afs_parse_text_addrs(net,
179					      addresses, strlen(addresses), ':',
180					      VL_SERVICE, AFS_VL_PORT);
181		if (IS_ERR(vllist)) {
182			ret = PTR_ERR(vllist);
183			goto parse_failed;
184		}
185
186		vllist->source = DNS_RECORD_FROM_CONFIG;
187		vllist->status = DNS_LOOKUP_NOT_DONE;
188		cell->dns_expiry = TIME64_MAX;
189	} else {
190		ret = -ENOMEM;
191		vllist = afs_alloc_vlserver_list(0);
192		if (!vllist)
193			goto error;
194		vllist->source = DNS_RECORD_UNAVAILABLE;
195		vllist->status = DNS_LOOKUP_NOT_DONE;
196		cell->dns_expiry = ktime_get_real_seconds();
197	}
198
199	rcu_assign_pointer(cell->vl_servers, vllist);
200
201	cell->dns_source = vllist->source;
202	cell->dns_status = vllist->status;
203	smp_store_release(&cell->dns_lookup_count, 1); /* vs source/status */
204	atomic_inc(&net->cells_outstanding);
205	cell->debug_id = atomic_inc_return(&cell_debug_id);
206	trace_afs_cell(cell->debug_id, 1, 0, afs_cell_trace_alloc);
207
208	_leave(" = %p", cell);
209	return cell;
210
211parse_failed:
212	if (ret == -EINVAL)
213		printk(KERN_ERR "kAFS: bad VL server IP address\n");
214error:
215	kfree(cell->name);
216	kfree(cell);
217	_leave(" = %d", ret);
218	return ERR_PTR(ret);
219}
220
221/*
222 * afs_lookup_cell - Look up or create a cell record.
223 * @net:	The network namespace
224 * @name:	The name of the cell.
225 * @namesz:	The strlen of the cell name.
226 * @vllist:	A colon/comma separated list of numeric IP addresses or NULL.
227 * @excl:	T if an error should be given if the cell name already exists.
228 *
229 * Look up a cell record by name and query the DNS for VL server addresses if
230 * needed.  Note that that actual DNS query is punted off to the manager thread
231 * so that this function can return immediately if interrupted whilst allowing
232 * cell records to be shared even if not yet fully constructed.
233 */
234struct afs_cell *afs_lookup_cell(struct afs_net *net,
235				 const char *name, unsigned int namesz,
236				 const char *vllist, bool excl)
237{
238	struct afs_cell *cell, *candidate, *cursor;
239	struct rb_node *parent, **pp;
240	enum afs_cell_state state;
241	int ret, n;
242
243	_enter("%s,%s", name, vllist);
244
245	if (!excl) {
246		cell = afs_find_cell(net, name, namesz, afs_cell_trace_use_lookup);
247		if (!IS_ERR(cell))
248			goto wait_for_cell;
249	}
250
251	/* Assume we're probably going to create a cell and preallocate and
252	 * mostly set up a candidate record.  We can then use this to stash the
253	 * name, the net namespace and VL server addresses.
254	 *
255	 * We also want to do this before we hold any locks as it may involve
256	 * upcalling to userspace to make DNS queries.
257	 */
258	candidate = afs_alloc_cell(net, name, namesz, vllist);
259	if (IS_ERR(candidate)) {
260		_leave(" = %ld", PTR_ERR(candidate));
261		return candidate;
262	}
263
264	/* Find the insertion point and check to see if someone else added a
265	 * cell whilst we were allocating.
266	 */
267	down_write(&net->cells_lock);
268
269	pp = &net->cells.rb_node;
270	parent = NULL;
271	while (*pp) {
272		parent = *pp;
273		cursor = rb_entry(parent, struct afs_cell, net_node);
274
275		n = strncasecmp(cursor->name, name,
276				min_t(size_t, cursor->name_len, namesz));
277		if (n == 0)
278			n = cursor->name_len - namesz;
279		if (n < 0)
280			pp = &(*pp)->rb_left;
281		else if (n > 0)
282			pp = &(*pp)->rb_right;
283		else
284			goto cell_already_exists;
285	}
286
287	cell = candidate;
288	candidate = NULL;
289	atomic_set(&cell->active, 2);
290	trace_afs_cell(cell->debug_id, refcount_read(&cell->ref), 2, afs_cell_trace_insert);
291	rb_link_node_rcu(&cell->net_node, parent, pp);
292	rb_insert_color(&cell->net_node, &net->cells);
293	up_write(&net->cells_lock);
294
295	afs_queue_cell(cell, afs_cell_trace_get_queue_new);
296
297wait_for_cell:
298	trace_afs_cell(cell->debug_id, refcount_read(&cell->ref), atomic_read(&cell->active),
299		       afs_cell_trace_wait);
300	_debug("wait_for_cell");
301	wait_var_event(&cell->state,
302		       ({
303			       state = smp_load_acquire(&cell->state); /* vs error */
304			       state == AFS_CELL_ACTIVE || state == AFS_CELL_REMOVED;
305		       }));
306
307	/* Check the state obtained from the wait check. */
308	if (state == AFS_CELL_REMOVED) {
309		ret = cell->error;
310		goto error;
311	}
312
313	_leave(" = %p [cell]", cell);
314	return cell;
315
316cell_already_exists:
317	_debug("cell exists");
318	cell = cursor;
319	if (excl) {
320		ret = -EEXIST;
321	} else {
322		afs_use_cell(cursor, afs_cell_trace_use_lookup);
323		ret = 0;
324	}
325	up_write(&net->cells_lock);
326	if (candidate)
327		afs_put_cell(candidate, afs_cell_trace_put_candidate);
328	if (ret == 0)
329		goto wait_for_cell;
330	goto error_noput;
331error:
332	afs_unuse_cell(net, cell, afs_cell_trace_unuse_lookup);
333error_noput:
334	_leave(" = %d [error]", ret);
335	return ERR_PTR(ret);
336}
337
338/*
339 * set the root cell information
340 * - can be called with a module parameter string
341 * - can be called from a write to /proc/fs/afs/rootcell
342 */
343int afs_cell_init(struct afs_net *net, const char *rootcell)
344{
345	struct afs_cell *old_root, *new_root;
346	const char *cp, *vllist;
347	size_t len;
348
349	_enter("");
350
351	if (!rootcell) {
352		/* module is loaded with no parameters, or built statically.
353		 * - in the future we might initialize cell DB here.
354		 */
355		_leave(" = 0 [no root]");
356		return 0;
357	}
358
359	cp = strchr(rootcell, ':');
360	if (!cp) {
361		_debug("kAFS: no VL server IP addresses specified");
362		vllist = NULL;
363		len = strlen(rootcell);
364	} else {
365		vllist = cp + 1;
366		len = cp - rootcell;
367	}
368
369	/* allocate a cell record for the root cell */
370	new_root = afs_lookup_cell(net, rootcell, len, vllist, false);
371	if (IS_ERR(new_root)) {
372		_leave(" = %ld", PTR_ERR(new_root));
373		return PTR_ERR(new_root);
374	}
375
376	if (!test_and_set_bit(AFS_CELL_FL_NO_GC, &new_root->flags))
377		afs_use_cell(new_root, afs_cell_trace_use_pin);
378
379	/* install the new cell */
380	down_write(&net->cells_lock);
381	afs_see_cell(new_root, afs_cell_trace_see_ws);
382	old_root = net->ws_cell;
383	net->ws_cell = new_root;
384	up_write(&net->cells_lock);
385
386	afs_unuse_cell(net, old_root, afs_cell_trace_unuse_ws);
387	_leave(" = 0");
388	return 0;
389}
390
391/*
392 * Update a cell's VL server address list from the DNS.
393 */
394static int afs_update_cell(struct afs_cell *cell)
395{
396	struct afs_vlserver_list *vllist, *old = NULL, *p;
397	unsigned int min_ttl = READ_ONCE(afs_cell_min_ttl);
398	unsigned int max_ttl = READ_ONCE(afs_cell_max_ttl);
399	time64_t now, expiry = 0;
400	int ret = 0;
401
402	_enter("%s", cell->name);
403
404	vllist = afs_dns_query(cell, &expiry);
405	if (IS_ERR(vllist)) {
406		ret = PTR_ERR(vllist);
407
408		_debug("%s: fail %d", cell->name, ret);
409		if (ret == -ENOMEM)
410			goto out_wake;
411
412		ret = -ENOMEM;
413		vllist = afs_alloc_vlserver_list(0);
414		if (!vllist)
 
 
415			goto out_wake;
 
416
417		switch (ret) {
418		case -ENODATA:
419		case -EDESTADDRREQ:
420			vllist->status = DNS_LOOKUP_GOT_NOT_FOUND;
421			break;
422		case -EAGAIN:
423		case -ECONNREFUSED:
424			vllist->status = DNS_LOOKUP_GOT_TEMP_FAILURE;
425			break;
426		default:
427			vllist->status = DNS_LOOKUP_GOT_LOCAL_FAILURE;
428			break;
429		}
430	}
431
432	_debug("%s: got list %d %d", cell->name, vllist->source, vllist->status);
433	cell->dns_status = vllist->status;
434
435	now = ktime_get_real_seconds();
436	if (min_ttl > max_ttl)
437		max_ttl = min_ttl;
438	if (expiry < now + min_ttl)
439		expiry = now + min_ttl;
440	else if (expiry > now + max_ttl)
441		expiry = now + max_ttl;
442
443	_debug("%s: status %d", cell->name, vllist->status);
444	if (vllist->source == DNS_RECORD_UNAVAILABLE) {
445		switch (vllist->status) {
446		case DNS_LOOKUP_GOT_NOT_FOUND:
447			/* The DNS said that the cell does not exist or there
448			 * weren't any addresses to be had.
449			 */
450			cell->dns_expiry = expiry;
451			break;
452
453		case DNS_LOOKUP_BAD:
454		case DNS_LOOKUP_GOT_LOCAL_FAILURE:
455		case DNS_LOOKUP_GOT_TEMP_FAILURE:
456		case DNS_LOOKUP_GOT_NS_FAILURE:
457		default:
458			cell->dns_expiry = now + 10;
459			break;
460		}
461	} else {
462		cell->dns_expiry = expiry;
463	}
464
465	/* Replace the VL server list if the new record has servers or the old
466	 * record doesn't.
467	 */
468	write_lock(&cell->vl_servers_lock);
469	p = rcu_dereference_protected(cell->vl_servers, true);
470	if (vllist->nr_servers > 0 || p->nr_servers == 0) {
471		rcu_assign_pointer(cell->vl_servers, vllist);
472		cell->dns_source = vllist->source;
473		old = p;
474	}
475	write_unlock(&cell->vl_servers_lock);
476	afs_put_vlserverlist(cell->net, old);
477
478out_wake:
479	smp_store_release(&cell->dns_lookup_count,
480			  cell->dns_lookup_count + 1); /* vs source/status */
481	wake_up_var(&cell->dns_lookup_count);
482	_leave(" = %d", ret);
483	return ret;
484}
485
486/*
487 * Destroy a cell record
488 */
489static void afs_cell_destroy(struct rcu_head *rcu)
490{
491	struct afs_cell *cell = container_of(rcu, struct afs_cell, rcu);
492	struct afs_net *net = cell->net;
493	int r;
494
495	_enter("%p{%s}", cell, cell->name);
496
497	r = refcount_read(&cell->ref);
498	ASSERTCMP(r, ==, 0);
499	trace_afs_cell(cell->debug_id, r, atomic_read(&cell->active), afs_cell_trace_free);
500
501	afs_put_vlserverlist(net, rcu_access_pointer(cell->vl_servers));
502	afs_unuse_cell(net, cell->alias_of, afs_cell_trace_unuse_alias);
503	key_put(cell->anonymous_key);
504	kfree(cell->name);
505	kfree(cell);
506
507	afs_dec_cells_outstanding(net);
508	_leave(" [destroyed]");
509}
510
511/*
512 * Queue the cell manager.
513 */
514static void afs_queue_cell_manager(struct afs_net *net)
515{
516	int outstanding = atomic_inc_return(&net->cells_outstanding);
517
518	_enter("%d", outstanding);
519
520	if (!queue_work(afs_wq, &net->cells_manager))
521		afs_dec_cells_outstanding(net);
522}
523
524/*
525 * Cell management timer.  We have an increment on cells_outstanding that we
526 * need to pass along to the work item.
527 */
528void afs_cells_timer(struct timer_list *timer)
529{
530	struct afs_net *net = container_of(timer, struct afs_net, cells_timer);
531
532	_enter("");
533	if (!queue_work(afs_wq, &net->cells_manager))
534		afs_dec_cells_outstanding(net);
535}
536
537/*
538 * Get a reference on a cell record.
539 */
540struct afs_cell *afs_get_cell(struct afs_cell *cell, enum afs_cell_trace reason)
541{
542	int r;
543
544	__refcount_inc(&cell->ref, &r);
545	trace_afs_cell(cell->debug_id, r + 1, atomic_read(&cell->active), reason);
546	return cell;
547}
548
549/*
550 * Drop a reference on a cell record.
551 */
552void afs_put_cell(struct afs_cell *cell, enum afs_cell_trace reason)
553{
554	if (cell) {
555		unsigned int debug_id = cell->debug_id;
556		unsigned int a;
557		bool zero;
558		int r;
559
560		a = atomic_read(&cell->active);
561		zero = __refcount_dec_and_test(&cell->ref, &r);
562		trace_afs_cell(debug_id, r - 1, a, reason);
563		if (zero) {
564			a = atomic_read(&cell->active);
565			WARN(a != 0, "Cell active count %u > 0\n", a);
566			call_rcu(&cell->rcu, afs_cell_destroy);
567		}
568	}
569}
570
571/*
572 * Note a cell becoming more active.
573 */
574struct afs_cell *afs_use_cell(struct afs_cell *cell, enum afs_cell_trace reason)
575{
576	int r, a;
577
578	r = refcount_read(&cell->ref);
579	WARN_ON(r == 0);
580	a = atomic_inc_return(&cell->active);
581	trace_afs_cell(cell->debug_id, r, a, reason);
582	return cell;
583}
584
585/*
586 * Record a cell becoming less active.  When the active counter reaches 1, it
587 * is scheduled for destruction, but may get reactivated.
588 */
589void afs_unuse_cell(struct afs_net *net, struct afs_cell *cell, enum afs_cell_trace reason)
590{
591	unsigned int debug_id;
592	time64_t now, expire_delay;
593	int r, a;
594
595	if (!cell)
596		return;
597
598	_enter("%s", cell->name);
599
600	now = ktime_get_real_seconds();
601	cell->last_inactive = now;
602	expire_delay = 0;
603	if (cell->vl_servers->nr_servers)
604		expire_delay = afs_cell_gc_delay;
605
606	debug_id = cell->debug_id;
607	r = refcount_read(&cell->ref);
608	a = atomic_dec_return(&cell->active);
609	trace_afs_cell(debug_id, r, a, reason);
610	WARN_ON(a == 0);
611	if (a == 1)
612		/* 'cell' may now be garbage collected. */
613		afs_set_cell_timer(net, expire_delay);
614}
615
616/*
617 * Note that a cell has been seen.
618 */
619void afs_see_cell(struct afs_cell *cell, enum afs_cell_trace reason)
620{
621	int r, a;
622
623	r = refcount_read(&cell->ref);
624	a = atomic_read(&cell->active);
625	trace_afs_cell(cell->debug_id, r, a, reason);
626}
627
628/*
629 * Queue a cell for management, giving the workqueue a ref to hold.
630 */
631void afs_queue_cell(struct afs_cell *cell, enum afs_cell_trace reason)
632{
633	afs_get_cell(cell, reason);
634	if (!queue_work(afs_wq, &cell->manager))
635		afs_put_cell(cell, afs_cell_trace_put_queue_fail);
636}
637
638/*
639 * Allocate a key to use as a placeholder for anonymous user security.
640 */
641static int afs_alloc_anon_key(struct afs_cell *cell)
642{
643	struct key *key;
644	char keyname[4 + AFS_MAXCELLNAME + 1], *cp, *dp;
645
646	/* Create a key to represent an anonymous user. */
647	memcpy(keyname, "afs@", 4);
648	dp = keyname + 4;
649	cp = cell->name;
650	do {
651		*dp++ = tolower(*cp);
652	} while (*cp++);
653
654	key = rxrpc_get_null_key(keyname);
655	if (IS_ERR(key))
656		return PTR_ERR(key);
657
658	cell->anonymous_key = key;
659
660	_debug("anon key %p{%x}",
661	       cell->anonymous_key, key_serial(cell->anonymous_key));
662	return 0;
663}
664
665/*
666 * Activate a cell.
667 */
668static int afs_activate_cell(struct afs_net *net, struct afs_cell *cell)
669{
670	struct hlist_node **p;
671	struct afs_cell *pcell;
672	int ret;
673
674	if (!cell->anonymous_key) {
675		ret = afs_alloc_anon_key(cell);
676		if (ret < 0)
677			return ret;
678	}
679
680	ret = afs_proc_cell_setup(cell);
681	if (ret < 0)
682		return ret;
683
684	mutex_lock(&net->proc_cells_lock);
685	for (p = &net->proc_cells.first; *p; p = &(*p)->next) {
686		pcell = hlist_entry(*p, struct afs_cell, proc_link);
687		if (strcmp(cell->name, pcell->name) < 0)
688			break;
689	}
690
691	cell->proc_link.pprev = p;
692	cell->proc_link.next = *p;
693	rcu_assign_pointer(*p, &cell->proc_link.next);
694	if (cell->proc_link.next)
695		cell->proc_link.next->pprev = &cell->proc_link.next;
696
697	afs_dynroot_mkdir(net, cell);
698	mutex_unlock(&net->proc_cells_lock);
699	return 0;
700}
701
702/*
703 * Deactivate a cell.
704 */
705static void afs_deactivate_cell(struct afs_net *net, struct afs_cell *cell)
706{
707	_enter("%s", cell->name);
708
709	afs_proc_cell_remove(cell);
710
711	mutex_lock(&net->proc_cells_lock);
712	hlist_del_rcu(&cell->proc_link);
713	afs_dynroot_rmdir(net, cell);
714	mutex_unlock(&net->proc_cells_lock);
715
716	_leave("");
717}
718
719/*
720 * Manage a cell record, initialising and destroying it, maintaining its DNS
721 * records.
722 */
723static void afs_manage_cell(struct afs_cell *cell)
724{
725	struct afs_net *net = cell->net;
726	int ret, active;
727
728	_enter("%s", cell->name);
729
730again:
731	_debug("state %u", cell->state);
732	switch (cell->state) {
733	case AFS_CELL_INACTIVE:
734	case AFS_CELL_FAILED:
735		down_write(&net->cells_lock);
736		active = 1;
737		if (atomic_try_cmpxchg_relaxed(&cell->active, &active, 0)) {
738			rb_erase(&cell->net_node, &net->cells);
739			trace_afs_cell(cell->debug_id, refcount_read(&cell->ref), 0,
740				       afs_cell_trace_unuse_delete);
741			smp_store_release(&cell->state, AFS_CELL_REMOVED);
742		}
743		up_write(&net->cells_lock);
744		if (cell->state == AFS_CELL_REMOVED) {
745			wake_up_var(&cell->state);
746			goto final_destruction;
747		}
748		if (cell->state == AFS_CELL_FAILED)
749			goto done;
750		smp_store_release(&cell->state, AFS_CELL_UNSET);
751		wake_up_var(&cell->state);
752		goto again;
753
754	case AFS_CELL_UNSET:
755		smp_store_release(&cell->state, AFS_CELL_ACTIVATING);
756		wake_up_var(&cell->state);
757		goto again;
758
759	case AFS_CELL_ACTIVATING:
760		ret = afs_activate_cell(net, cell);
761		if (ret < 0)
762			goto activation_failed;
763
764		smp_store_release(&cell->state, AFS_CELL_ACTIVE);
765		wake_up_var(&cell->state);
766		goto again;
767
768	case AFS_CELL_ACTIVE:
769		if (atomic_read(&cell->active) > 1) {
770			if (test_and_clear_bit(AFS_CELL_FL_DO_LOOKUP, &cell->flags)) {
771				ret = afs_update_cell(cell);
772				if (ret < 0)
773					cell->error = ret;
774			}
775			goto done;
776		}
777		smp_store_release(&cell->state, AFS_CELL_DEACTIVATING);
778		wake_up_var(&cell->state);
779		goto again;
780
781	case AFS_CELL_DEACTIVATING:
782		if (atomic_read(&cell->active) > 1)
783			goto reverse_deactivation;
784		afs_deactivate_cell(net, cell);
785		smp_store_release(&cell->state, AFS_CELL_INACTIVE);
786		wake_up_var(&cell->state);
787		goto again;
788
789	case AFS_CELL_REMOVED:
790		goto done;
791
792	default:
793		break;
794	}
795	_debug("bad state %u", cell->state);
796	BUG(); /* Unhandled state */
797
798activation_failed:
799	cell->error = ret;
800	afs_deactivate_cell(net, cell);
801
802	smp_store_release(&cell->state, AFS_CELL_FAILED); /* vs error */
803	wake_up_var(&cell->state);
804	goto again;
805
806reverse_deactivation:
807	smp_store_release(&cell->state, AFS_CELL_ACTIVE);
808	wake_up_var(&cell->state);
809	_leave(" [deact->act]");
810	return;
811
812done:
813	_leave(" [done %u]", cell->state);
814	return;
815
816final_destruction:
817	/* The root volume is pinning the cell */
818	afs_put_volume(cell->net, cell->root_volume, afs_volume_trace_put_cell_root);
819	cell->root_volume = NULL;
820	afs_put_cell(cell, afs_cell_trace_put_destroy);
821}
822
823static void afs_manage_cell_work(struct work_struct *work)
824{
825	struct afs_cell *cell = container_of(work, struct afs_cell, manager);
826
827	afs_manage_cell(cell);
828	afs_put_cell(cell, afs_cell_trace_put_queue_work);
829}
830
831/*
832 * Manage the records of cells known to a network namespace.  This includes
833 * updating the DNS records and garbage collecting unused cells that were
834 * automatically added.
835 *
836 * Note that constructed cell records may only be removed from net->cells by
837 * this work item, so it is safe for this work item to stash a cursor pointing
838 * into the tree and then return to caller (provided it skips cells that are
839 * still under construction).
840 *
841 * Note also that we were given an increment on net->cells_outstanding by
842 * whoever queued us that we need to deal with before returning.
843 */
844void afs_manage_cells(struct work_struct *work)
845{
846	struct afs_net *net = container_of(work, struct afs_net, cells_manager);
847	struct rb_node *cursor;
848	time64_t now = ktime_get_real_seconds(), next_manage = TIME64_MAX;
849	bool purging = !net->live;
850
851	_enter("");
852
853	/* Trawl the cell database looking for cells that have expired from
854	 * lack of use and cells whose DNS results have expired and dispatch
855	 * their managers.
856	 */
857	down_read(&net->cells_lock);
858
859	for (cursor = rb_first(&net->cells); cursor; cursor = rb_next(cursor)) {
860		struct afs_cell *cell =
861			rb_entry(cursor, struct afs_cell, net_node);
862		unsigned active;
863		bool sched_cell = false;
864
865		active = atomic_read(&cell->active);
866		trace_afs_cell(cell->debug_id, refcount_read(&cell->ref),
867			       active, afs_cell_trace_manage);
868
869		ASSERTCMP(active, >=, 1);
870
871		if (purging) {
872			if (test_and_clear_bit(AFS_CELL_FL_NO_GC, &cell->flags)) {
873				active = atomic_dec_return(&cell->active);
874				trace_afs_cell(cell->debug_id, refcount_read(&cell->ref),
875					       active, afs_cell_trace_unuse_pin);
876			}
877		}
878
879		if (active == 1) {
880			struct afs_vlserver_list *vllist;
881			time64_t expire_at = cell->last_inactive;
882
883			read_lock(&cell->vl_servers_lock);
884			vllist = rcu_dereference_protected(
885				cell->vl_servers,
886				lockdep_is_held(&cell->vl_servers_lock));
887			if (vllist->nr_servers > 0)
888				expire_at += afs_cell_gc_delay;
889			read_unlock(&cell->vl_servers_lock);
890			if (purging || expire_at <= now)
891				sched_cell = true;
892			else if (expire_at < next_manage)
893				next_manage = expire_at;
894		}
895
896		if (!purging) {
897			if (test_bit(AFS_CELL_FL_DO_LOOKUP, &cell->flags))
898				sched_cell = true;
899		}
900
901		if (sched_cell)
902			afs_queue_cell(cell, afs_cell_trace_get_queue_manage);
903	}
904
905	up_read(&net->cells_lock);
906
907	/* Update the timer on the way out.  We have to pass an increment on
908	 * cells_outstanding in the namespace that we are in to the timer or
909	 * the work scheduler.
910	 */
911	if (!purging && next_manage < TIME64_MAX) {
912		now = ktime_get_real_seconds();
913
914		if (next_manage - now <= 0) {
915			if (queue_work(afs_wq, &net->cells_manager))
916				atomic_inc(&net->cells_outstanding);
917		} else {
918			afs_set_cell_timer(net, next_manage - now);
919		}
920	}
921
922	afs_dec_cells_outstanding(net);
923	_leave(" [%d]", atomic_read(&net->cells_outstanding));
924}
925
926/*
927 * Purge in-memory cell database.
928 */
929void afs_cell_purge(struct afs_net *net)
930{
931	struct afs_cell *ws;
932
933	_enter("");
934
935	down_write(&net->cells_lock);
936	ws = net->ws_cell;
937	net->ws_cell = NULL;
938	up_write(&net->cells_lock);
939	afs_unuse_cell(net, ws, afs_cell_trace_unuse_ws);
940
941	_debug("del timer");
942	if (del_timer_sync(&net->cells_timer))
943		atomic_dec(&net->cells_outstanding);
944
945	_debug("kick mgr");
946	afs_queue_cell_manager(net);
947
948	_debug("wait");
949	wait_var_event(&net->cells_outstanding,
950		       !atomic_read(&net->cells_outstanding));
951	_leave("");
952}
v6.13.7
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/* AFS cell and server record management
  3 *
  4 * Copyright (C) 2002, 2017 Red Hat, Inc. All Rights Reserved.
  5 * Written by David Howells (dhowells@redhat.com)
  6 */
  7
  8#include <linux/slab.h>
  9#include <linux/key.h>
 10#include <linux/ctype.h>
 11#include <linux/dns_resolver.h>
 12#include <linux/sched.h>
 13#include <linux/inet.h>
 14#include <linux/namei.h>
 15#include <keys/rxrpc-type.h>
 16#include "internal.h"
 17
 18static unsigned __read_mostly afs_cell_gc_delay = 10;
 19static unsigned __read_mostly afs_cell_min_ttl = 10 * 60;
 20static unsigned __read_mostly afs_cell_max_ttl = 24 * 60 * 60;
 21static atomic_t cell_debug_id;
 22
 23static void afs_queue_cell_manager(struct afs_net *);
 24static void afs_manage_cell_work(struct work_struct *);
 25
 26static void afs_dec_cells_outstanding(struct afs_net *net)
 27{
 28	if (atomic_dec_and_test(&net->cells_outstanding))
 29		wake_up_var(&net->cells_outstanding);
 30}
 31
 32/*
 33 * Set the cell timer to fire after a given delay, assuming it's not already
 34 * set for an earlier time.
 35 */
 36static void afs_set_cell_timer(struct afs_net *net, time64_t delay)
 37{
 38	if (net->live) {
 39		atomic_inc(&net->cells_outstanding);
 40		if (timer_reduce(&net->cells_timer, jiffies + delay * HZ))
 41			afs_dec_cells_outstanding(net);
 42	} else {
 43		afs_queue_cell_manager(net);
 44	}
 45}
 46
 47/*
 48 * Look up and get an activation reference on a cell record.  The caller must
 49 * hold net->cells_lock at least read-locked.
 50 */
 51static struct afs_cell *afs_find_cell_locked(struct afs_net *net,
 52					     const char *name, unsigned int namesz,
 53					     enum afs_cell_trace reason)
 54{
 55	struct afs_cell *cell = NULL;
 56	struct rb_node *p;
 57	int n;
 58
 59	_enter("%*.*s", namesz, namesz, name);
 60
 61	if (name && namesz == 0)
 62		return ERR_PTR(-EINVAL);
 63	if (namesz > AFS_MAXCELLNAME)
 64		return ERR_PTR(-ENAMETOOLONG);
 65
 66	if (!name) {
 67		cell = net->ws_cell;
 68		if (!cell)
 69			return ERR_PTR(-EDESTADDRREQ);
 70		goto found;
 71	}
 72
 73	p = net->cells.rb_node;
 74	while (p) {
 75		cell = rb_entry(p, struct afs_cell, net_node);
 76
 77		n = strncasecmp(cell->name, name,
 78				min_t(size_t, cell->name_len, namesz));
 79		if (n == 0)
 80			n = cell->name_len - namesz;
 81		if (n < 0)
 82			p = p->rb_left;
 83		else if (n > 0)
 84			p = p->rb_right;
 85		else
 86			goto found;
 87	}
 88
 89	return ERR_PTR(-ENOENT);
 90
 91found:
 92	return afs_use_cell(cell, reason);
 93}
 94
 95/*
 96 * Look up and get an activation reference on a cell record.
 97 */
 98struct afs_cell *afs_find_cell(struct afs_net *net,
 99			       const char *name, unsigned int namesz,
100			       enum afs_cell_trace reason)
101{
102	struct afs_cell *cell;
103
104	down_read(&net->cells_lock);
105	cell = afs_find_cell_locked(net, name, namesz, reason);
106	up_read(&net->cells_lock);
107	return cell;
108}
109
110/*
111 * Set up a cell record and fill in its name, VL server address list and
112 * allocate an anonymous key
113 */
114static struct afs_cell *afs_alloc_cell(struct afs_net *net,
115				       const char *name, unsigned int namelen,
116				       const char *addresses)
117{
118	struct afs_vlserver_list *vllist;
119	struct afs_cell *cell;
120	int i, ret;
121
122	ASSERT(name);
123	if (namelen == 0)
124		return ERR_PTR(-EINVAL);
125	if (namelen > AFS_MAXCELLNAME) {
126		_leave(" = -ENAMETOOLONG");
127		return ERR_PTR(-ENAMETOOLONG);
128	}
129
130	/* Prohibit cell names that contain unprintable chars, '/' and '@' or
131	 * that begin with a dot.  This also precludes "@cell".
132	 */
133	if (name[0] == '.')
134		return ERR_PTR(-EINVAL);
135	for (i = 0; i < namelen; i++) {
136		char ch = name[i];
137		if (!isprint(ch) || ch == '/' || ch == '@')
138			return ERR_PTR(-EINVAL);
139	}
140
141	_enter("%*.*s,%s", namelen, namelen, name, addresses);
142
143	cell = kzalloc(sizeof(struct afs_cell), GFP_KERNEL);
144	if (!cell) {
145		_leave(" = -ENOMEM");
146		return ERR_PTR(-ENOMEM);
147	}
148
149	cell->name = kmalloc(namelen + 1, GFP_KERNEL);
150	if (!cell->name) {
151		kfree(cell);
152		return ERR_PTR(-ENOMEM);
153	}
154
155	cell->net = net;
156	cell->name_len = namelen;
157	for (i = 0; i < namelen; i++)
158		cell->name[i] = tolower(name[i]);
159	cell->name[i] = 0;
160
161	refcount_set(&cell->ref, 1);
162	atomic_set(&cell->active, 0);
163	INIT_WORK(&cell->manager, afs_manage_cell_work);
164	init_rwsem(&cell->vs_lock);
165	cell->volumes = RB_ROOT;
166	INIT_HLIST_HEAD(&cell->proc_volumes);
167	seqlock_init(&cell->volume_lock);
168	cell->fs_servers = RB_ROOT;
169	seqlock_init(&cell->fs_lock);
 
 
170	rwlock_init(&cell->vl_servers_lock);
171	cell->flags = (1 << AFS_CELL_FL_CHECK_ALIAS);
172
173	/* Provide a VL server list, filling it in if we were given a list of
174	 * addresses to use.
175	 */
176	if (addresses) {
177		vllist = afs_parse_text_addrs(net,
178					      addresses, strlen(addresses), ':',
179					      VL_SERVICE, AFS_VL_PORT);
180		if (IS_ERR(vllist)) {
181			ret = PTR_ERR(vllist);
182			goto parse_failed;
183		}
184
185		vllist->source = DNS_RECORD_FROM_CONFIG;
186		vllist->status = DNS_LOOKUP_NOT_DONE;
187		cell->dns_expiry = TIME64_MAX;
188	} else {
189		ret = -ENOMEM;
190		vllist = afs_alloc_vlserver_list(0);
191		if (!vllist)
192			goto error;
193		vllist->source = DNS_RECORD_UNAVAILABLE;
194		vllist->status = DNS_LOOKUP_NOT_DONE;
195		cell->dns_expiry = ktime_get_real_seconds();
196	}
197
198	rcu_assign_pointer(cell->vl_servers, vllist);
199
200	cell->dns_source = vllist->source;
201	cell->dns_status = vllist->status;
202	smp_store_release(&cell->dns_lookup_count, 1); /* vs source/status */
203	atomic_inc(&net->cells_outstanding);
204	cell->debug_id = atomic_inc_return(&cell_debug_id);
205	trace_afs_cell(cell->debug_id, 1, 0, afs_cell_trace_alloc);
206
207	_leave(" = %p", cell);
208	return cell;
209
210parse_failed:
211	if (ret == -EINVAL)
212		printk(KERN_ERR "kAFS: bad VL server IP address\n");
213error:
214	kfree(cell->name);
215	kfree(cell);
216	_leave(" = %d", ret);
217	return ERR_PTR(ret);
218}
219
220/*
221 * afs_lookup_cell - Look up or create a cell record.
222 * @net:	The network namespace
223 * @name:	The name of the cell.
224 * @namesz:	The strlen of the cell name.
225 * @vllist:	A colon/comma separated list of numeric IP addresses or NULL.
226 * @excl:	T if an error should be given if the cell name already exists.
227 *
228 * Look up a cell record by name and query the DNS for VL server addresses if
229 * needed.  Note that that actual DNS query is punted off to the manager thread
230 * so that this function can return immediately if interrupted whilst allowing
231 * cell records to be shared even if not yet fully constructed.
232 */
233struct afs_cell *afs_lookup_cell(struct afs_net *net,
234				 const char *name, unsigned int namesz,
235				 const char *vllist, bool excl)
236{
237	struct afs_cell *cell, *candidate, *cursor;
238	struct rb_node *parent, **pp;
239	enum afs_cell_state state;
240	int ret, n;
241
242	_enter("%s,%s", name, vllist);
243
244	if (!excl) {
245		cell = afs_find_cell(net, name, namesz, afs_cell_trace_use_lookup);
246		if (!IS_ERR(cell))
247			goto wait_for_cell;
248	}
249
250	/* Assume we're probably going to create a cell and preallocate and
251	 * mostly set up a candidate record.  We can then use this to stash the
252	 * name, the net namespace and VL server addresses.
253	 *
254	 * We also want to do this before we hold any locks as it may involve
255	 * upcalling to userspace to make DNS queries.
256	 */
257	candidate = afs_alloc_cell(net, name, namesz, vllist);
258	if (IS_ERR(candidate)) {
259		_leave(" = %ld", PTR_ERR(candidate));
260		return candidate;
261	}
262
263	/* Find the insertion point and check to see if someone else added a
264	 * cell whilst we were allocating.
265	 */
266	down_write(&net->cells_lock);
267
268	pp = &net->cells.rb_node;
269	parent = NULL;
270	while (*pp) {
271		parent = *pp;
272		cursor = rb_entry(parent, struct afs_cell, net_node);
273
274		n = strncasecmp(cursor->name, name,
275				min_t(size_t, cursor->name_len, namesz));
276		if (n == 0)
277			n = cursor->name_len - namesz;
278		if (n < 0)
279			pp = &(*pp)->rb_left;
280		else if (n > 0)
281			pp = &(*pp)->rb_right;
282		else
283			goto cell_already_exists;
284	}
285
286	cell = candidate;
287	candidate = NULL;
288	atomic_set(&cell->active, 2);
289	trace_afs_cell(cell->debug_id, refcount_read(&cell->ref), 2, afs_cell_trace_insert);
290	rb_link_node_rcu(&cell->net_node, parent, pp);
291	rb_insert_color(&cell->net_node, &net->cells);
292	up_write(&net->cells_lock);
293
294	afs_queue_cell(cell, afs_cell_trace_get_queue_new);
295
296wait_for_cell:
297	trace_afs_cell(cell->debug_id, refcount_read(&cell->ref), atomic_read(&cell->active),
298		       afs_cell_trace_wait);
299	_debug("wait_for_cell");
300	wait_var_event(&cell->state,
301		       ({
302			       state = smp_load_acquire(&cell->state); /* vs error */
303			       state == AFS_CELL_ACTIVE || state == AFS_CELL_REMOVED;
304		       }));
305
306	/* Check the state obtained from the wait check. */
307	if (state == AFS_CELL_REMOVED) {
308		ret = cell->error;
309		goto error;
310	}
311
312	_leave(" = %p [cell]", cell);
313	return cell;
314
315cell_already_exists:
316	_debug("cell exists");
317	cell = cursor;
318	if (excl) {
319		ret = -EEXIST;
320	} else {
321		afs_use_cell(cursor, afs_cell_trace_use_lookup);
322		ret = 0;
323	}
324	up_write(&net->cells_lock);
325	if (candidate)
326		afs_put_cell(candidate, afs_cell_trace_put_candidate);
327	if (ret == 0)
328		goto wait_for_cell;
329	goto error_noput;
330error:
331	afs_unuse_cell(net, cell, afs_cell_trace_unuse_lookup);
332error_noput:
333	_leave(" = %d [error]", ret);
334	return ERR_PTR(ret);
335}
336
337/*
338 * set the root cell information
339 * - can be called with a module parameter string
340 * - can be called from a write to /proc/fs/afs/rootcell
341 */
342int afs_cell_init(struct afs_net *net, const char *rootcell)
343{
344	struct afs_cell *old_root, *new_root;
345	const char *cp, *vllist;
346	size_t len;
347
348	_enter("");
349
350	if (!rootcell) {
351		/* module is loaded with no parameters, or built statically.
352		 * - in the future we might initialize cell DB here.
353		 */
354		_leave(" = 0 [no root]");
355		return 0;
356	}
357
358	cp = strchr(rootcell, ':');
359	if (!cp) {
360		_debug("kAFS: no VL server IP addresses specified");
361		vllist = NULL;
362		len = strlen(rootcell);
363	} else {
364		vllist = cp + 1;
365		len = cp - rootcell;
366	}
367
368	/* allocate a cell record for the root cell */
369	new_root = afs_lookup_cell(net, rootcell, len, vllist, false);
370	if (IS_ERR(new_root)) {
371		_leave(" = %ld", PTR_ERR(new_root));
372		return PTR_ERR(new_root);
373	}
374
375	if (!test_and_set_bit(AFS_CELL_FL_NO_GC, &new_root->flags))
376		afs_use_cell(new_root, afs_cell_trace_use_pin);
377
378	/* install the new cell */
379	down_write(&net->cells_lock);
380	afs_see_cell(new_root, afs_cell_trace_see_ws);
381	old_root = net->ws_cell;
382	net->ws_cell = new_root;
383	up_write(&net->cells_lock);
384
385	afs_unuse_cell(net, old_root, afs_cell_trace_unuse_ws);
386	_leave(" = 0");
387	return 0;
388}
389
390/*
391 * Update a cell's VL server address list from the DNS.
392 */
393static int afs_update_cell(struct afs_cell *cell)
394{
395	struct afs_vlserver_list *vllist, *old = NULL, *p;
396	unsigned int min_ttl = READ_ONCE(afs_cell_min_ttl);
397	unsigned int max_ttl = READ_ONCE(afs_cell_max_ttl);
398	time64_t now, expiry = 0;
399	int ret = 0;
400
401	_enter("%s", cell->name);
402
403	vllist = afs_dns_query(cell, &expiry);
404	if (IS_ERR(vllist)) {
405		ret = PTR_ERR(vllist);
406
407		_debug("%s: fail %d", cell->name, ret);
408		if (ret == -ENOMEM)
409			goto out_wake;
410
 
411		vllist = afs_alloc_vlserver_list(0);
412		if (!vllist) {
413			if (ret >= 0)
414				ret = -ENOMEM;
415			goto out_wake;
416		}
417
418		switch (ret) {
419		case -ENODATA:
420		case -EDESTADDRREQ:
421			vllist->status = DNS_LOOKUP_GOT_NOT_FOUND;
422			break;
423		case -EAGAIN:
424		case -ECONNREFUSED:
425			vllist->status = DNS_LOOKUP_GOT_TEMP_FAILURE;
426			break;
427		default:
428			vllist->status = DNS_LOOKUP_GOT_LOCAL_FAILURE;
429			break;
430		}
431	}
432
433	_debug("%s: got list %d %d", cell->name, vllist->source, vllist->status);
434	cell->dns_status = vllist->status;
435
436	now = ktime_get_real_seconds();
437	if (min_ttl > max_ttl)
438		max_ttl = min_ttl;
439	if (expiry < now + min_ttl)
440		expiry = now + min_ttl;
441	else if (expiry > now + max_ttl)
442		expiry = now + max_ttl;
443
444	_debug("%s: status %d", cell->name, vllist->status);
445	if (vllist->source == DNS_RECORD_UNAVAILABLE) {
446		switch (vllist->status) {
447		case DNS_LOOKUP_GOT_NOT_FOUND:
448			/* The DNS said that the cell does not exist or there
449			 * weren't any addresses to be had.
450			 */
451			cell->dns_expiry = expiry;
452			break;
453
454		case DNS_LOOKUP_BAD:
455		case DNS_LOOKUP_GOT_LOCAL_FAILURE:
456		case DNS_LOOKUP_GOT_TEMP_FAILURE:
457		case DNS_LOOKUP_GOT_NS_FAILURE:
458		default:
459			cell->dns_expiry = now + 10;
460			break;
461		}
462	} else {
463		cell->dns_expiry = expiry;
464	}
465
466	/* Replace the VL server list if the new record has servers or the old
467	 * record doesn't.
468	 */
469	write_lock(&cell->vl_servers_lock);
470	p = rcu_dereference_protected(cell->vl_servers, true);
471	if (vllist->nr_servers > 0 || p->nr_servers == 0) {
472		rcu_assign_pointer(cell->vl_servers, vllist);
473		cell->dns_source = vllist->source;
474		old = p;
475	}
476	write_unlock(&cell->vl_servers_lock);
477	afs_put_vlserverlist(cell->net, old);
478
479out_wake:
480	smp_store_release(&cell->dns_lookup_count,
481			  cell->dns_lookup_count + 1); /* vs source/status */
482	wake_up_var(&cell->dns_lookup_count);
483	_leave(" = %d", ret);
484	return ret;
485}
486
487/*
488 * Destroy a cell record
489 */
490static void afs_cell_destroy(struct rcu_head *rcu)
491{
492	struct afs_cell *cell = container_of(rcu, struct afs_cell, rcu);
493	struct afs_net *net = cell->net;
494	int r;
495
496	_enter("%p{%s}", cell, cell->name);
497
498	r = refcount_read(&cell->ref);
499	ASSERTCMP(r, ==, 0);
500	trace_afs_cell(cell->debug_id, r, atomic_read(&cell->active), afs_cell_trace_free);
501
502	afs_put_vlserverlist(net, rcu_access_pointer(cell->vl_servers));
503	afs_unuse_cell(net, cell->alias_of, afs_cell_trace_unuse_alias);
504	key_put(cell->anonymous_key);
505	kfree(cell->name);
506	kfree(cell);
507
508	afs_dec_cells_outstanding(net);
509	_leave(" [destroyed]");
510}
511
512/*
513 * Queue the cell manager.
514 */
515static void afs_queue_cell_manager(struct afs_net *net)
516{
517	int outstanding = atomic_inc_return(&net->cells_outstanding);
518
519	_enter("%d", outstanding);
520
521	if (!queue_work(afs_wq, &net->cells_manager))
522		afs_dec_cells_outstanding(net);
523}
524
525/*
526 * Cell management timer.  We have an increment on cells_outstanding that we
527 * need to pass along to the work item.
528 */
529void afs_cells_timer(struct timer_list *timer)
530{
531	struct afs_net *net = container_of(timer, struct afs_net, cells_timer);
532
533	_enter("");
534	if (!queue_work(afs_wq, &net->cells_manager))
535		afs_dec_cells_outstanding(net);
536}
537
538/*
539 * Get a reference on a cell record.
540 */
541struct afs_cell *afs_get_cell(struct afs_cell *cell, enum afs_cell_trace reason)
542{
543	int r;
544
545	__refcount_inc(&cell->ref, &r);
546	trace_afs_cell(cell->debug_id, r + 1, atomic_read(&cell->active), reason);
547	return cell;
548}
549
550/*
551 * Drop a reference on a cell record.
552 */
553void afs_put_cell(struct afs_cell *cell, enum afs_cell_trace reason)
554{
555	if (cell) {
556		unsigned int debug_id = cell->debug_id;
557		unsigned int a;
558		bool zero;
559		int r;
560
561		a = atomic_read(&cell->active);
562		zero = __refcount_dec_and_test(&cell->ref, &r);
563		trace_afs_cell(debug_id, r - 1, a, reason);
564		if (zero) {
565			a = atomic_read(&cell->active);
566			WARN(a != 0, "Cell active count %u > 0\n", a);
567			call_rcu(&cell->rcu, afs_cell_destroy);
568		}
569	}
570}
571
572/*
573 * Note a cell becoming more active.
574 */
575struct afs_cell *afs_use_cell(struct afs_cell *cell, enum afs_cell_trace reason)
576{
577	int r, a;
578
579	r = refcount_read(&cell->ref);
580	WARN_ON(r == 0);
581	a = atomic_inc_return(&cell->active);
582	trace_afs_cell(cell->debug_id, r, a, reason);
583	return cell;
584}
585
586/*
587 * Record a cell becoming less active.  When the active counter reaches 1, it
588 * is scheduled for destruction, but may get reactivated.
589 */
590void afs_unuse_cell(struct afs_net *net, struct afs_cell *cell, enum afs_cell_trace reason)
591{
592	unsigned int debug_id;
593	time64_t now, expire_delay;
594	int r, a;
595
596	if (!cell)
597		return;
598
599	_enter("%s", cell->name);
600
601	now = ktime_get_real_seconds();
602	cell->last_inactive = now;
603	expire_delay = 0;
604	if (cell->vl_servers->nr_servers)
605		expire_delay = afs_cell_gc_delay;
606
607	debug_id = cell->debug_id;
608	r = refcount_read(&cell->ref);
609	a = atomic_dec_return(&cell->active);
610	trace_afs_cell(debug_id, r, a, reason);
611	WARN_ON(a == 0);
612	if (a == 1)
613		/* 'cell' may now be garbage collected. */
614		afs_set_cell_timer(net, expire_delay);
615}
616
617/*
618 * Note that a cell has been seen.
619 */
620void afs_see_cell(struct afs_cell *cell, enum afs_cell_trace reason)
621{
622	int r, a;
623
624	r = refcount_read(&cell->ref);
625	a = atomic_read(&cell->active);
626	trace_afs_cell(cell->debug_id, r, a, reason);
627}
628
629/*
630 * Queue a cell for management, giving the workqueue a ref to hold.
631 */
632void afs_queue_cell(struct afs_cell *cell, enum afs_cell_trace reason)
633{
634	afs_get_cell(cell, reason);
635	if (!queue_work(afs_wq, &cell->manager))
636		afs_put_cell(cell, afs_cell_trace_put_queue_fail);
637}
638
639/*
640 * Allocate a key to use as a placeholder for anonymous user security.
641 */
642static int afs_alloc_anon_key(struct afs_cell *cell)
643{
644	struct key *key;
645	char keyname[4 + AFS_MAXCELLNAME + 1], *cp, *dp;
646
647	/* Create a key to represent an anonymous user. */
648	memcpy(keyname, "afs@", 4);
649	dp = keyname + 4;
650	cp = cell->name;
651	do {
652		*dp++ = tolower(*cp);
653	} while (*cp++);
654
655	key = rxrpc_get_null_key(keyname);
656	if (IS_ERR(key))
657		return PTR_ERR(key);
658
659	cell->anonymous_key = key;
660
661	_debug("anon key %p{%x}",
662	       cell->anonymous_key, key_serial(cell->anonymous_key));
663	return 0;
664}
665
666/*
667 * Activate a cell.
668 */
669static int afs_activate_cell(struct afs_net *net, struct afs_cell *cell)
670{
671	struct hlist_node **p;
672	struct afs_cell *pcell;
673	int ret;
674
675	if (!cell->anonymous_key) {
676		ret = afs_alloc_anon_key(cell);
677		if (ret < 0)
678			return ret;
679	}
680
681	ret = afs_proc_cell_setup(cell);
682	if (ret < 0)
683		return ret;
684
685	mutex_lock(&net->proc_cells_lock);
686	for (p = &net->proc_cells.first; *p; p = &(*p)->next) {
687		pcell = hlist_entry(*p, struct afs_cell, proc_link);
688		if (strcmp(cell->name, pcell->name) < 0)
689			break;
690	}
691
692	cell->proc_link.pprev = p;
693	cell->proc_link.next = *p;
694	rcu_assign_pointer(*p, &cell->proc_link.next);
695	if (cell->proc_link.next)
696		cell->proc_link.next->pprev = &cell->proc_link.next;
697
698	afs_dynroot_mkdir(net, cell);
699	mutex_unlock(&net->proc_cells_lock);
700	return 0;
701}
702
703/*
704 * Deactivate a cell.
705 */
706static void afs_deactivate_cell(struct afs_net *net, struct afs_cell *cell)
707{
708	_enter("%s", cell->name);
709
710	afs_proc_cell_remove(cell);
711
712	mutex_lock(&net->proc_cells_lock);
713	hlist_del_rcu(&cell->proc_link);
714	afs_dynroot_rmdir(net, cell);
715	mutex_unlock(&net->proc_cells_lock);
716
717	_leave("");
718}
719
720/*
721 * Manage a cell record, initialising and destroying it, maintaining its DNS
722 * records.
723 */
724static void afs_manage_cell(struct afs_cell *cell)
725{
726	struct afs_net *net = cell->net;
727	int ret, active;
728
729	_enter("%s", cell->name);
730
731again:
732	_debug("state %u", cell->state);
733	switch (cell->state) {
734	case AFS_CELL_INACTIVE:
735	case AFS_CELL_FAILED:
736		down_write(&net->cells_lock);
737		active = 1;
738		if (atomic_try_cmpxchg_relaxed(&cell->active, &active, 0)) {
739			rb_erase(&cell->net_node, &net->cells);
740			trace_afs_cell(cell->debug_id, refcount_read(&cell->ref), 0,
741				       afs_cell_trace_unuse_delete);
742			smp_store_release(&cell->state, AFS_CELL_REMOVED);
743		}
744		up_write(&net->cells_lock);
745		if (cell->state == AFS_CELL_REMOVED) {
746			wake_up_var(&cell->state);
747			goto final_destruction;
748		}
749		if (cell->state == AFS_CELL_FAILED)
750			goto done;
751		smp_store_release(&cell->state, AFS_CELL_UNSET);
752		wake_up_var(&cell->state);
753		goto again;
754
755	case AFS_CELL_UNSET:
756		smp_store_release(&cell->state, AFS_CELL_ACTIVATING);
757		wake_up_var(&cell->state);
758		goto again;
759
760	case AFS_CELL_ACTIVATING:
761		ret = afs_activate_cell(net, cell);
762		if (ret < 0)
763			goto activation_failed;
764
765		smp_store_release(&cell->state, AFS_CELL_ACTIVE);
766		wake_up_var(&cell->state);
767		goto again;
768
769	case AFS_CELL_ACTIVE:
770		if (atomic_read(&cell->active) > 1) {
771			if (test_and_clear_bit(AFS_CELL_FL_DO_LOOKUP, &cell->flags)) {
772				ret = afs_update_cell(cell);
773				if (ret < 0)
774					cell->error = ret;
775			}
776			goto done;
777		}
778		smp_store_release(&cell->state, AFS_CELL_DEACTIVATING);
779		wake_up_var(&cell->state);
780		goto again;
781
782	case AFS_CELL_DEACTIVATING:
783		if (atomic_read(&cell->active) > 1)
784			goto reverse_deactivation;
785		afs_deactivate_cell(net, cell);
786		smp_store_release(&cell->state, AFS_CELL_INACTIVE);
787		wake_up_var(&cell->state);
788		goto again;
789
790	case AFS_CELL_REMOVED:
791		goto done;
792
793	default:
794		break;
795	}
796	_debug("bad state %u", cell->state);
797	BUG(); /* Unhandled state */
798
799activation_failed:
800	cell->error = ret;
801	afs_deactivate_cell(net, cell);
802
803	smp_store_release(&cell->state, AFS_CELL_FAILED); /* vs error */
804	wake_up_var(&cell->state);
805	goto again;
806
807reverse_deactivation:
808	smp_store_release(&cell->state, AFS_CELL_ACTIVE);
809	wake_up_var(&cell->state);
810	_leave(" [deact->act]");
811	return;
812
813done:
814	_leave(" [done %u]", cell->state);
815	return;
816
817final_destruction:
818	/* The root volume is pinning the cell */
819	afs_put_volume(cell->root_volume, afs_volume_trace_put_cell_root);
820	cell->root_volume = NULL;
821	afs_put_cell(cell, afs_cell_trace_put_destroy);
822}
823
824static void afs_manage_cell_work(struct work_struct *work)
825{
826	struct afs_cell *cell = container_of(work, struct afs_cell, manager);
827
828	afs_manage_cell(cell);
829	afs_put_cell(cell, afs_cell_trace_put_queue_work);
830}
831
832/*
833 * Manage the records of cells known to a network namespace.  This includes
834 * updating the DNS records and garbage collecting unused cells that were
835 * automatically added.
836 *
837 * Note that constructed cell records may only be removed from net->cells by
838 * this work item, so it is safe for this work item to stash a cursor pointing
839 * into the tree and then return to caller (provided it skips cells that are
840 * still under construction).
841 *
842 * Note also that we were given an increment on net->cells_outstanding by
843 * whoever queued us that we need to deal with before returning.
844 */
845void afs_manage_cells(struct work_struct *work)
846{
847	struct afs_net *net = container_of(work, struct afs_net, cells_manager);
848	struct rb_node *cursor;
849	time64_t now = ktime_get_real_seconds(), next_manage = TIME64_MAX;
850	bool purging = !net->live;
851
852	_enter("");
853
854	/* Trawl the cell database looking for cells that have expired from
855	 * lack of use and cells whose DNS results have expired and dispatch
856	 * their managers.
857	 */
858	down_read(&net->cells_lock);
859
860	for (cursor = rb_first(&net->cells); cursor; cursor = rb_next(cursor)) {
861		struct afs_cell *cell =
862			rb_entry(cursor, struct afs_cell, net_node);
863		unsigned active;
864		bool sched_cell = false;
865
866		active = atomic_read(&cell->active);
867		trace_afs_cell(cell->debug_id, refcount_read(&cell->ref),
868			       active, afs_cell_trace_manage);
869
870		ASSERTCMP(active, >=, 1);
871
872		if (purging) {
873			if (test_and_clear_bit(AFS_CELL_FL_NO_GC, &cell->flags)) {
874				active = atomic_dec_return(&cell->active);
875				trace_afs_cell(cell->debug_id, refcount_read(&cell->ref),
876					       active, afs_cell_trace_unuse_pin);
877			}
878		}
879
880		if (active == 1) {
881			struct afs_vlserver_list *vllist;
882			time64_t expire_at = cell->last_inactive;
883
884			read_lock(&cell->vl_servers_lock);
885			vllist = rcu_dereference_protected(
886				cell->vl_servers,
887				lockdep_is_held(&cell->vl_servers_lock));
888			if (vllist->nr_servers > 0)
889				expire_at += afs_cell_gc_delay;
890			read_unlock(&cell->vl_servers_lock);
891			if (purging || expire_at <= now)
892				sched_cell = true;
893			else if (expire_at < next_manage)
894				next_manage = expire_at;
895		}
896
897		if (!purging) {
898			if (test_bit(AFS_CELL_FL_DO_LOOKUP, &cell->flags))
899				sched_cell = true;
900		}
901
902		if (sched_cell)
903			afs_queue_cell(cell, afs_cell_trace_get_queue_manage);
904	}
905
906	up_read(&net->cells_lock);
907
908	/* Update the timer on the way out.  We have to pass an increment on
909	 * cells_outstanding in the namespace that we are in to the timer or
910	 * the work scheduler.
911	 */
912	if (!purging && next_manage < TIME64_MAX) {
913		now = ktime_get_real_seconds();
914
915		if (next_manage - now <= 0) {
916			if (queue_work(afs_wq, &net->cells_manager))
917				atomic_inc(&net->cells_outstanding);
918		} else {
919			afs_set_cell_timer(net, next_manage - now);
920		}
921	}
922
923	afs_dec_cells_outstanding(net);
924	_leave(" [%d]", atomic_read(&net->cells_outstanding));
925}
926
927/*
928 * Purge in-memory cell database.
929 */
930void afs_cell_purge(struct afs_net *net)
931{
932	struct afs_cell *ws;
933
934	_enter("");
935
936	down_write(&net->cells_lock);
937	ws = net->ws_cell;
938	net->ws_cell = NULL;
939	up_write(&net->cells_lock);
940	afs_unuse_cell(net, ws, afs_cell_trace_unuse_ws);
941
942	_debug("del timer");
943	if (del_timer_sync(&net->cells_timer))
944		atomic_dec(&net->cells_outstanding);
945
946	_debug("kick mgr");
947	afs_queue_cell_manager(net);
948
949	_debug("wait");
950	wait_var_event(&net->cells_outstanding,
951		       !atomic_read(&net->cells_outstanding));
952	_leave("");
953}