Linux Audio

Check our new training course

Loading...
v6.2
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * linux/fs/nfs/fs_context.c
   4 *
   5 * Copyright (C) 1992 Rick Sladkey
   6 * Conversion to new mount api Copyright (C) David Howells
   7 *
   8 * NFS mount handling.
   9 *
  10 * Split from fs/nfs/super.c by David Howells <dhowells@redhat.com>
  11 */
  12
  13#include <linux/compat.h>
  14#include <linux/module.h>
  15#include <linux/fs.h>
  16#include <linux/fs_context.h>
  17#include <linux/fs_parser.h>
  18#include <linux/nfs_fs.h>
  19#include <linux/nfs_mount.h>
  20#include <linux/nfs4_mount.h>
 
 
 
  21#include "nfs.h"
  22#include "internal.h"
  23
  24#include "nfstrace.h"
  25
  26#define NFSDBG_FACILITY		NFSDBG_MOUNT
  27
  28#if IS_ENABLED(CONFIG_NFS_V3)
  29#define NFS_DEFAULT_VERSION 3
  30#else
  31#define NFS_DEFAULT_VERSION 2
  32#endif
  33
  34#define NFS_MAX_CONNECTIONS 16
  35
  36enum nfs_param {
  37	Opt_ac,
  38	Opt_acdirmax,
  39	Opt_acdirmin,
  40	Opt_acl,
  41	Opt_acregmax,
  42	Opt_acregmin,
  43	Opt_actimeo,
  44	Opt_addr,
  45	Opt_bg,
  46	Opt_bsize,
  47	Opt_clientaddr,
  48	Opt_cto,
  49	Opt_fg,
  50	Opt_fscache,
  51	Opt_fscache_flag,
  52	Opt_hard,
  53	Opt_intr,
  54	Opt_local_lock,
  55	Opt_lock,
  56	Opt_lookupcache,
  57	Opt_migration,
  58	Opt_minorversion,
  59	Opt_mountaddr,
  60	Opt_mounthost,
  61	Opt_mountport,
  62	Opt_mountproto,
  63	Opt_mountvers,
  64	Opt_namelen,
  65	Opt_nconnect,
  66	Opt_max_connect,
  67	Opt_port,
  68	Opt_posix,
  69	Opt_proto,
  70	Opt_rdirplus,
  71	Opt_rdma,
  72	Opt_resvport,
  73	Opt_retrans,
  74	Opt_retry,
  75	Opt_rsize,
  76	Opt_sec,
  77	Opt_sharecache,
  78	Opt_sloppy,
  79	Opt_soft,
  80	Opt_softerr,
  81	Opt_softreval,
  82	Opt_source,
  83	Opt_tcp,
  84	Opt_timeo,
  85	Opt_trunkdiscovery,
  86	Opt_udp,
  87	Opt_v,
  88	Opt_vers,
  89	Opt_wsize,
  90	Opt_write,
 
  91};
  92
  93enum {
  94	Opt_local_lock_all,
  95	Opt_local_lock_flock,
  96	Opt_local_lock_none,
  97	Opt_local_lock_posix,
  98};
  99
 100static const struct constant_table nfs_param_enums_local_lock[] = {
 101	{ "all",		Opt_local_lock_all },
 102	{ "flock",	Opt_local_lock_flock },
 103	{ "posix",	Opt_local_lock_posix },
 104	{ "none",		Opt_local_lock_none },
 105	{}
 106};
 107
 108enum {
 109	Opt_lookupcache_all,
 110	Opt_lookupcache_none,
 111	Opt_lookupcache_positive,
 112};
 113
 114static const struct constant_table nfs_param_enums_lookupcache[] = {
 115	{ "all",		Opt_lookupcache_all },
 116	{ "none",		Opt_lookupcache_none },
 117	{ "pos",		Opt_lookupcache_positive },
 118	{ "positive",		Opt_lookupcache_positive },
 119	{}
 120};
 121
 122enum {
 123	Opt_write_lazy,
 124	Opt_write_eager,
 125	Opt_write_wait,
 126};
 127
 128static const struct constant_table nfs_param_enums_write[] = {
 129	{ "lazy",		Opt_write_lazy },
 130	{ "eager",		Opt_write_eager },
 131	{ "wait",		Opt_write_wait },
 132	{}
 133};
 134
 135static const struct fs_parameter_spec nfs_fs_parameters[] = {
 136	fsparam_flag_no("ac",		Opt_ac),
 137	fsparam_u32   ("acdirmax",	Opt_acdirmax),
 138	fsparam_u32   ("acdirmin",	Opt_acdirmin),
 139	fsparam_flag_no("acl",		Opt_acl),
 140	fsparam_u32   ("acregmax",	Opt_acregmax),
 141	fsparam_u32   ("acregmin",	Opt_acregmin),
 142	fsparam_u32   ("actimeo",	Opt_actimeo),
 143	fsparam_string("addr",		Opt_addr),
 144	fsparam_flag  ("bg",		Opt_bg),
 145	fsparam_u32   ("bsize",		Opt_bsize),
 146	fsparam_string("clientaddr",	Opt_clientaddr),
 147	fsparam_flag_no("cto",		Opt_cto),
 148	fsparam_flag  ("fg",		Opt_fg),
 149	fsparam_flag_no("fsc",		Opt_fscache_flag),
 150	fsparam_string("fsc",		Opt_fscache),
 151	fsparam_flag  ("hard",		Opt_hard),
 152	__fsparam(NULL, "intr",		Opt_intr,
 153		  fs_param_neg_with_no|fs_param_deprecated, NULL),
 154	fsparam_enum  ("local_lock",	Opt_local_lock, nfs_param_enums_local_lock),
 155	fsparam_flag_no("lock",		Opt_lock),
 156	fsparam_enum  ("lookupcache",	Opt_lookupcache, nfs_param_enums_lookupcache),
 157	fsparam_flag_no("migration",	Opt_migration),
 158	fsparam_u32   ("minorversion",	Opt_minorversion),
 159	fsparam_string("mountaddr",	Opt_mountaddr),
 160	fsparam_string("mounthost",	Opt_mounthost),
 161	fsparam_u32   ("mountport",	Opt_mountport),
 162	fsparam_string("mountproto",	Opt_mountproto),
 163	fsparam_u32   ("mountvers",	Opt_mountvers),
 164	fsparam_u32   ("namlen",	Opt_namelen),
 165	fsparam_u32   ("nconnect",	Opt_nconnect),
 166	fsparam_u32   ("max_connect",	Opt_max_connect),
 167	fsparam_string("nfsvers",	Opt_vers),
 168	fsparam_u32   ("port",		Opt_port),
 169	fsparam_flag_no("posix",	Opt_posix),
 170	fsparam_string("proto",		Opt_proto),
 171	fsparam_flag_no("rdirplus",	Opt_rdirplus),
 172	fsparam_flag  ("rdma",		Opt_rdma),
 173	fsparam_flag_no("resvport",	Opt_resvport),
 174	fsparam_u32   ("retrans",	Opt_retrans),
 175	fsparam_string("retry",		Opt_retry),
 176	fsparam_u32   ("rsize",		Opt_rsize),
 177	fsparam_string("sec",		Opt_sec),
 178	fsparam_flag_no("sharecache",	Opt_sharecache),
 179	fsparam_flag  ("sloppy",	Opt_sloppy),
 180	fsparam_flag  ("soft",		Opt_soft),
 181	fsparam_flag  ("softerr",	Opt_softerr),
 182	fsparam_flag  ("softreval",	Opt_softreval),
 183	fsparam_string("source",	Opt_source),
 184	fsparam_flag  ("tcp",		Opt_tcp),
 185	fsparam_u32   ("timeo",		Opt_timeo),
 186	fsparam_flag_no("trunkdiscovery", Opt_trunkdiscovery),
 187	fsparam_flag  ("udp",		Opt_udp),
 188	fsparam_flag  ("v2",		Opt_v),
 189	fsparam_flag  ("v3",		Opt_v),
 190	fsparam_flag  ("v4",		Opt_v),
 191	fsparam_flag  ("v4.0",		Opt_v),
 192	fsparam_flag  ("v4.1",		Opt_v),
 193	fsparam_flag  ("v4.2",		Opt_v),
 194	fsparam_string("vers",		Opt_vers),
 195	fsparam_enum  ("write",		Opt_write, nfs_param_enums_write),
 196	fsparam_u32   ("wsize",		Opt_wsize),
 
 197	{}
 198};
 199
 200enum {
 201	Opt_vers_2,
 202	Opt_vers_3,
 203	Opt_vers_4,
 204	Opt_vers_4_0,
 205	Opt_vers_4_1,
 206	Opt_vers_4_2,
 207};
 208
 209static const struct constant_table nfs_vers_tokens[] = {
 210	{ "2",		Opt_vers_2 },
 211	{ "3",		Opt_vers_3 },
 212	{ "4",		Opt_vers_4 },
 213	{ "4.0",	Opt_vers_4_0 },
 214	{ "4.1",	Opt_vers_4_1 },
 215	{ "4.2",	Opt_vers_4_2 },
 216	{}
 217};
 218
 219enum {
 220	Opt_xprt_rdma,
 221	Opt_xprt_rdma6,
 222	Opt_xprt_tcp,
 223	Opt_xprt_tcp6,
 224	Opt_xprt_udp,
 225	Opt_xprt_udp6,
 226	nr__Opt_xprt
 227};
 228
 229static const struct constant_table nfs_xprt_protocol_tokens[] = {
 230	{ "rdma",	Opt_xprt_rdma },
 231	{ "rdma6",	Opt_xprt_rdma6 },
 232	{ "tcp",	Opt_xprt_tcp },
 233	{ "tcp6",	Opt_xprt_tcp6 },
 234	{ "udp",	Opt_xprt_udp },
 235	{ "udp6",	Opt_xprt_udp6 },
 236	{}
 237};
 238
 239enum {
 240	Opt_sec_krb5,
 241	Opt_sec_krb5i,
 242	Opt_sec_krb5p,
 243	Opt_sec_lkey,
 244	Opt_sec_lkeyi,
 245	Opt_sec_lkeyp,
 246	Opt_sec_none,
 247	Opt_sec_spkm,
 248	Opt_sec_spkmi,
 249	Opt_sec_spkmp,
 250	Opt_sec_sys,
 251	nr__Opt_sec
 252};
 253
 254static const struct constant_table nfs_secflavor_tokens[] = {
 255	{ "krb5",	Opt_sec_krb5 },
 256	{ "krb5i",	Opt_sec_krb5i },
 257	{ "krb5p",	Opt_sec_krb5p },
 258	{ "lkey",	Opt_sec_lkey },
 259	{ "lkeyi",	Opt_sec_lkeyi },
 260	{ "lkeyp",	Opt_sec_lkeyp },
 261	{ "none",	Opt_sec_none },
 262	{ "null",	Opt_sec_none },
 263	{ "spkm3",	Opt_sec_spkm },
 264	{ "spkm3i",	Opt_sec_spkmi },
 265	{ "spkm3p",	Opt_sec_spkmp },
 266	{ "sys",	Opt_sec_sys },
 267	{}
 268};
 269
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 270/*
 271 * Sanity-check a server address provided by the mount command.
 272 *
 273 * Address family must be initialized, and address must not be
 274 * the ANY address for that family.
 275 */
 276static int nfs_verify_server_address(struct sockaddr_storage *addr)
 277{
 278	switch (addr->ss_family) {
 279	case AF_INET: {
 280		struct sockaddr_in *sa = (struct sockaddr_in *)addr;
 281		return sa->sin_addr.s_addr != htonl(INADDR_ANY);
 282	}
 283	case AF_INET6: {
 284		struct in6_addr *sa = &((struct sockaddr_in6 *)addr)->sin6_addr;
 285		return !ipv6_addr_any(sa);
 286	}
 287	}
 288
 289	return 0;
 290}
 291
 292#ifdef CONFIG_NFS_DISABLE_UDP_SUPPORT
 293static bool nfs_server_transport_udp_invalid(const struct nfs_fs_context *ctx)
 294{
 295	return true;
 296}
 297#else
 298static bool nfs_server_transport_udp_invalid(const struct nfs_fs_context *ctx)
 299{
 300	if (ctx->version == 4)
 301		return true;
 302	return false;
 303}
 304#endif
 305
 306/*
 307 * Sanity check the NFS transport protocol.
 308 */
 309static int nfs_validate_transport_protocol(struct fs_context *fc,
 310					   struct nfs_fs_context *ctx)
 311{
 312	switch (ctx->nfs_server.protocol) {
 313	case XPRT_TRANSPORT_UDP:
 314		if (nfs_server_transport_udp_invalid(ctx))
 315			goto out_invalid_transport_udp;
 316		break;
 317	case XPRT_TRANSPORT_TCP:
 318	case XPRT_TRANSPORT_RDMA:
 319		break;
 320	default:
 321		ctx->nfs_server.protocol = XPRT_TRANSPORT_TCP;
 322	}
 
 
 
 
 
 
 
 
 
 
 323	return 0;
 324out_invalid_transport_udp:
 325	return nfs_invalf(fc, "NFS: Unsupported transport protocol udp");
 
 
 326}
 327
 328/*
 329 * For text based NFSv2/v3 mounts, the mount protocol transport default
 330 * settings should depend upon the specified NFS transport.
 331 */
 332static void nfs_set_mount_transport_protocol(struct nfs_fs_context *ctx)
 333{
 334	if (ctx->mount_server.protocol == XPRT_TRANSPORT_UDP ||
 335	    ctx->mount_server.protocol == XPRT_TRANSPORT_TCP)
 336			return;
 337	switch (ctx->nfs_server.protocol) {
 338	case XPRT_TRANSPORT_UDP:
 339		ctx->mount_server.protocol = XPRT_TRANSPORT_UDP;
 340		break;
 341	case XPRT_TRANSPORT_TCP:
 342	case XPRT_TRANSPORT_RDMA:
 343		ctx->mount_server.protocol = XPRT_TRANSPORT_TCP;
 344	}
 345}
 346
 347/*
 348 * Add 'flavor' to 'auth_info' if not already present.
 349 * Returns true if 'flavor' ends up in the list, false otherwise
 350 */
 351static int nfs_auth_info_add(struct fs_context *fc,
 352			     struct nfs_auth_info *auth_info,
 353			     rpc_authflavor_t flavor)
 354{
 355	unsigned int i;
 356	unsigned int max_flavor_len = ARRAY_SIZE(auth_info->flavors);
 357
 358	/* make sure this flavor isn't already in the list */
 359	for (i = 0; i < auth_info->flavor_len; i++) {
 360		if (flavor == auth_info->flavors[i])
 361			return 0;
 362	}
 363
 364	if (auth_info->flavor_len + 1 >= max_flavor_len)
 365		return nfs_invalf(fc, "NFS: too many sec= flavors");
 366
 367	auth_info->flavors[auth_info->flavor_len++] = flavor;
 368	return 0;
 369}
 370
 371/*
 372 * Parse the value of the 'sec=' option.
 373 */
 374static int nfs_parse_security_flavors(struct fs_context *fc,
 375				      struct fs_parameter *param)
 376{
 377	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 378	rpc_authflavor_t pseudoflavor;
 379	char *string = param->string, *p;
 380	int ret;
 381
 382	trace_nfs_mount_assign(param->key, string);
 383
 384	while ((p = strsep(&string, ":")) != NULL) {
 385		if (!*p)
 386			continue;
 387		switch (lookup_constant(nfs_secflavor_tokens, p, -1)) {
 388		case Opt_sec_none:
 389			pseudoflavor = RPC_AUTH_NULL;
 390			break;
 391		case Opt_sec_sys:
 392			pseudoflavor = RPC_AUTH_UNIX;
 393			break;
 394		case Opt_sec_krb5:
 395			pseudoflavor = RPC_AUTH_GSS_KRB5;
 396			break;
 397		case Opt_sec_krb5i:
 398			pseudoflavor = RPC_AUTH_GSS_KRB5I;
 399			break;
 400		case Opt_sec_krb5p:
 401			pseudoflavor = RPC_AUTH_GSS_KRB5P;
 402			break;
 403		case Opt_sec_lkey:
 404			pseudoflavor = RPC_AUTH_GSS_LKEY;
 405			break;
 406		case Opt_sec_lkeyi:
 407			pseudoflavor = RPC_AUTH_GSS_LKEYI;
 408			break;
 409		case Opt_sec_lkeyp:
 410			pseudoflavor = RPC_AUTH_GSS_LKEYP;
 411			break;
 412		case Opt_sec_spkm:
 413			pseudoflavor = RPC_AUTH_GSS_SPKM;
 414			break;
 415		case Opt_sec_spkmi:
 416			pseudoflavor = RPC_AUTH_GSS_SPKMI;
 417			break;
 418		case Opt_sec_spkmp:
 419			pseudoflavor = RPC_AUTH_GSS_SPKMP;
 420			break;
 421		default:
 422			return nfs_invalf(fc, "NFS: sec=%s option not recognized", p);
 423		}
 424
 425		ret = nfs_auth_info_add(fc, &ctx->auth_info, pseudoflavor);
 426		if (ret < 0)
 427			return ret;
 428	}
 429
 430	return 0;
 431}
 432
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 433static int nfs_parse_version_string(struct fs_context *fc,
 434				    const char *string)
 435{
 436	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 437
 438	ctx->flags &= ~NFS_MOUNT_VER3;
 439	switch (lookup_constant(nfs_vers_tokens, string, -1)) {
 440	case Opt_vers_2:
 441		ctx->version = 2;
 442		break;
 443	case Opt_vers_3:
 444		ctx->flags |= NFS_MOUNT_VER3;
 445		ctx->version = 3;
 446		break;
 447	case Opt_vers_4:
 448		/* Backward compatibility option. In future,
 449		 * the mount program should always supply
 450		 * a NFSv4 minor version number.
 451		 */
 452		ctx->version = 4;
 453		break;
 454	case Opt_vers_4_0:
 455		ctx->version = 4;
 456		ctx->minorversion = 0;
 457		break;
 458	case Opt_vers_4_1:
 459		ctx->version = 4;
 460		ctx->minorversion = 1;
 461		break;
 462	case Opt_vers_4_2:
 463		ctx->version = 4;
 464		ctx->minorversion = 2;
 465		break;
 466	default:
 467		return nfs_invalf(fc, "NFS: Unsupported NFS version");
 468	}
 469	return 0;
 470}
 471
 472/*
 473 * Parse a single mount parameter.
 474 */
 475static int nfs_fs_context_parse_param(struct fs_context *fc,
 476				      struct fs_parameter *param)
 477{
 478	struct fs_parse_result result;
 479	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 480	unsigned short protofamily, mountfamily;
 481	unsigned int len;
 482	int ret, opt;
 483
 484	trace_nfs_mount_option(param);
 485
 486	opt = fs_parse(fc, nfs_fs_parameters, param, &result);
 487	if (opt < 0)
 488		return (opt == -ENOPARAM && ctx->sloppy) ? 1 : opt;
 489
 490	if (fc->security)
 491		ctx->has_sec_mnt_opts = 1;
 492
 493	switch (opt) {
 494	case Opt_source:
 495		if (fc->source)
 496			return nfs_invalf(fc, "NFS: Multiple sources not supported");
 497		fc->source = param->string;
 498		param->string = NULL;
 499		break;
 500
 501		/*
 502		 * boolean options:  foo/nofoo
 503		 */
 504	case Opt_soft:
 505		ctx->flags |= NFS_MOUNT_SOFT;
 506		ctx->flags &= ~NFS_MOUNT_SOFTERR;
 507		break;
 508	case Opt_softerr:
 509		ctx->flags |= NFS_MOUNT_SOFTERR | NFS_MOUNT_SOFTREVAL;
 510		ctx->flags &= ~NFS_MOUNT_SOFT;
 511		break;
 512	case Opt_hard:
 513		ctx->flags &= ~(NFS_MOUNT_SOFT |
 514				NFS_MOUNT_SOFTERR |
 515				NFS_MOUNT_SOFTREVAL);
 516		break;
 517	case Opt_softreval:
 518		if (result.negated)
 519			ctx->flags &= ~NFS_MOUNT_SOFTREVAL;
 520		else
 521			ctx->flags |= NFS_MOUNT_SOFTREVAL;
 522		break;
 523	case Opt_posix:
 524		if (result.negated)
 525			ctx->flags &= ~NFS_MOUNT_POSIX;
 526		else
 527			ctx->flags |= NFS_MOUNT_POSIX;
 528		break;
 529	case Opt_cto:
 530		if (result.negated)
 531			ctx->flags |= NFS_MOUNT_NOCTO;
 532		else
 533			ctx->flags &= ~NFS_MOUNT_NOCTO;
 534		break;
 535	case Opt_trunkdiscovery:
 536		if (result.negated)
 537			ctx->flags &= ~NFS_MOUNT_TRUNK_DISCOVERY;
 538		else
 539			ctx->flags |= NFS_MOUNT_TRUNK_DISCOVERY;
 540		break;
 541	case Opt_ac:
 542		if (result.negated)
 543			ctx->flags |= NFS_MOUNT_NOAC;
 544		else
 545			ctx->flags &= ~NFS_MOUNT_NOAC;
 546		break;
 547	case Opt_lock:
 548		if (result.negated) {
 549			ctx->flags |= NFS_MOUNT_NONLM;
 550			ctx->flags |= (NFS_MOUNT_LOCAL_FLOCK | NFS_MOUNT_LOCAL_FCNTL);
 551		} else {
 552			ctx->flags &= ~NFS_MOUNT_NONLM;
 553			ctx->flags &= ~(NFS_MOUNT_LOCAL_FLOCK | NFS_MOUNT_LOCAL_FCNTL);
 554		}
 555		break;
 556	case Opt_udp:
 557		ctx->flags &= ~NFS_MOUNT_TCP;
 558		ctx->nfs_server.protocol = XPRT_TRANSPORT_UDP;
 559		break;
 560	case Opt_tcp:
 561	case Opt_rdma:
 562		ctx->flags |= NFS_MOUNT_TCP; /* for side protocols */
 563		ret = xprt_find_transport_ident(param->key);
 564		if (ret < 0)
 565			goto out_bad_transport;
 566		ctx->nfs_server.protocol = ret;
 567		break;
 568	case Opt_acl:
 569		if (result.negated)
 570			ctx->flags |= NFS_MOUNT_NOACL;
 571		else
 572			ctx->flags &= ~NFS_MOUNT_NOACL;
 573		break;
 574	case Opt_rdirplus:
 575		if (result.negated)
 576			ctx->flags |= NFS_MOUNT_NORDIRPLUS;
 577		else
 578			ctx->flags &= ~NFS_MOUNT_NORDIRPLUS;
 579		break;
 580	case Opt_sharecache:
 581		if (result.negated)
 582			ctx->flags |= NFS_MOUNT_UNSHARED;
 583		else
 584			ctx->flags &= ~NFS_MOUNT_UNSHARED;
 585		break;
 586	case Opt_resvport:
 587		if (result.negated)
 588			ctx->flags |= NFS_MOUNT_NORESVPORT;
 589		else
 590			ctx->flags &= ~NFS_MOUNT_NORESVPORT;
 591		break;
 592	case Opt_fscache_flag:
 593		if (result.negated)
 594			ctx->options &= ~NFS_OPTION_FSCACHE;
 595		else
 596			ctx->options |= NFS_OPTION_FSCACHE;
 597		kfree(ctx->fscache_uniq);
 598		ctx->fscache_uniq = NULL;
 599		break;
 600	case Opt_fscache:
 601		ctx->options |= NFS_OPTION_FSCACHE;
 602		kfree(ctx->fscache_uniq);
 603		ctx->fscache_uniq = param->string;
 604		param->string = NULL;
 605		break;
 606	case Opt_migration:
 607		if (result.negated)
 608			ctx->options &= ~NFS_OPTION_MIGRATION;
 609		else
 610			ctx->options |= NFS_OPTION_MIGRATION;
 611		break;
 612
 613		/*
 614		 * options that take numeric values
 615		 */
 616	case Opt_port:
 617		if (result.uint_32 > USHRT_MAX)
 618			goto out_of_bounds;
 619		ctx->nfs_server.port = result.uint_32;
 620		break;
 621	case Opt_rsize:
 622		ctx->rsize = result.uint_32;
 623		break;
 624	case Opt_wsize:
 625		ctx->wsize = result.uint_32;
 626		break;
 627	case Opt_bsize:
 628		ctx->bsize = result.uint_32;
 629		break;
 630	case Opt_timeo:
 631		if (result.uint_32 < 1 || result.uint_32 > INT_MAX)
 632			goto out_of_bounds;
 633		ctx->timeo = result.uint_32;
 634		break;
 635	case Opt_retrans:
 636		if (result.uint_32 > INT_MAX)
 637			goto out_of_bounds;
 638		ctx->retrans = result.uint_32;
 639		break;
 640	case Opt_acregmin:
 641		ctx->acregmin = result.uint_32;
 642		break;
 643	case Opt_acregmax:
 644		ctx->acregmax = result.uint_32;
 645		break;
 646	case Opt_acdirmin:
 647		ctx->acdirmin = result.uint_32;
 648		break;
 649	case Opt_acdirmax:
 650		ctx->acdirmax = result.uint_32;
 651		break;
 652	case Opt_actimeo:
 653		ctx->acregmin = result.uint_32;
 654		ctx->acregmax = result.uint_32;
 655		ctx->acdirmin = result.uint_32;
 656		ctx->acdirmax = result.uint_32;
 657		break;
 658	case Opt_namelen:
 659		ctx->namlen = result.uint_32;
 660		break;
 661	case Opt_mountport:
 662		if (result.uint_32 > USHRT_MAX)
 663			goto out_of_bounds;
 664		ctx->mount_server.port = result.uint_32;
 665		break;
 666	case Opt_mountvers:
 667		if (result.uint_32 < NFS_MNT_VERSION ||
 668		    result.uint_32 > NFS_MNT3_VERSION)
 669			goto out_of_bounds;
 670		ctx->mount_server.version = result.uint_32;
 671		break;
 672	case Opt_minorversion:
 673		if (result.uint_32 > NFS4_MAX_MINOR_VERSION)
 674			goto out_of_bounds;
 675		ctx->minorversion = result.uint_32;
 676		break;
 677
 678		/*
 679		 * options that take text values
 680		 */
 681	case Opt_v:
 682		ret = nfs_parse_version_string(fc, param->key + 1);
 683		if (ret < 0)
 684			return ret;
 685		break;
 686	case Opt_vers:
 687		if (!param->string)
 688			goto out_invalid_value;
 689		trace_nfs_mount_assign(param->key, param->string);
 690		ret = nfs_parse_version_string(fc, param->string);
 691		if (ret < 0)
 692			return ret;
 693		break;
 694	case Opt_sec:
 695		ret = nfs_parse_security_flavors(fc, param);
 696		if (ret < 0)
 697			return ret;
 698		break;
 
 
 
 
 
 699
 700	case Opt_proto:
 701		if (!param->string)
 702			goto out_invalid_value;
 703		trace_nfs_mount_assign(param->key, param->string);
 704		protofamily = AF_INET;
 705		switch (lookup_constant(nfs_xprt_protocol_tokens, param->string, -1)) {
 706		case Opt_xprt_udp6:
 707			protofamily = AF_INET6;
 708			fallthrough;
 709		case Opt_xprt_udp:
 710			ctx->flags &= ~NFS_MOUNT_TCP;
 711			ctx->nfs_server.protocol = XPRT_TRANSPORT_UDP;
 712			break;
 713		case Opt_xprt_tcp6:
 714			protofamily = AF_INET6;
 715			fallthrough;
 716		case Opt_xprt_tcp:
 717			ctx->flags |= NFS_MOUNT_TCP;
 718			ctx->nfs_server.protocol = XPRT_TRANSPORT_TCP;
 719			break;
 720		case Opt_xprt_rdma6:
 721			protofamily = AF_INET6;
 722			fallthrough;
 723		case Opt_xprt_rdma:
 724			/* vector side protocols to TCP */
 725			ctx->flags |= NFS_MOUNT_TCP;
 726			ret = xprt_find_transport_ident(param->string);
 727			if (ret < 0)
 728				goto out_bad_transport;
 729			ctx->nfs_server.protocol = ret;
 730			break;
 731		default:
 732			goto out_bad_transport;
 733		}
 734
 735		ctx->protofamily = protofamily;
 736		break;
 737
 738	case Opt_mountproto:
 739		if (!param->string)
 740			goto out_invalid_value;
 741		trace_nfs_mount_assign(param->key, param->string);
 742		mountfamily = AF_INET;
 743		switch (lookup_constant(nfs_xprt_protocol_tokens, param->string, -1)) {
 744		case Opt_xprt_udp6:
 745			mountfamily = AF_INET6;
 746			fallthrough;
 747		case Opt_xprt_udp:
 748			ctx->mount_server.protocol = XPRT_TRANSPORT_UDP;
 749			break;
 750		case Opt_xprt_tcp6:
 751			mountfamily = AF_INET6;
 752			fallthrough;
 753		case Opt_xprt_tcp:
 754			ctx->mount_server.protocol = XPRT_TRANSPORT_TCP;
 755			break;
 756		case Opt_xprt_rdma: /* not used for side protocols */
 757		default:
 758			goto out_bad_transport;
 759		}
 760		ctx->mountfamily = mountfamily;
 761		break;
 762
 763	case Opt_addr:
 764		trace_nfs_mount_assign(param->key, param->string);
 765		len = rpc_pton(fc->net_ns, param->string, param->size,
 766			       &ctx->nfs_server.address,
 767			       sizeof(ctx->nfs_server._address));
 768		if (len == 0)
 769			goto out_invalid_address;
 770		ctx->nfs_server.addrlen = len;
 771		break;
 772	case Opt_clientaddr:
 773		trace_nfs_mount_assign(param->key, param->string);
 774		kfree(ctx->client_address);
 775		ctx->client_address = param->string;
 776		param->string = NULL;
 777		break;
 778	case Opt_mounthost:
 779		trace_nfs_mount_assign(param->key, param->string);
 780		kfree(ctx->mount_server.hostname);
 781		ctx->mount_server.hostname = param->string;
 782		param->string = NULL;
 783		break;
 784	case Opt_mountaddr:
 785		trace_nfs_mount_assign(param->key, param->string);
 786		len = rpc_pton(fc->net_ns, param->string, param->size,
 787			       &ctx->mount_server.address,
 788			       sizeof(ctx->mount_server._address));
 789		if (len == 0)
 790			goto out_invalid_address;
 791		ctx->mount_server.addrlen = len;
 792		break;
 793	case Opt_nconnect:
 
 794		if (result.uint_32 < 1 || result.uint_32 > NFS_MAX_CONNECTIONS)
 795			goto out_of_bounds;
 796		ctx->nfs_server.nconnect = result.uint_32;
 797		break;
 798	case Opt_max_connect:
 
 799		if (result.uint_32 < 1 || result.uint_32 > NFS_MAX_TRANSPORTS)
 800			goto out_of_bounds;
 801		ctx->nfs_server.max_connect = result.uint_32;
 802		break;
 803	case Opt_lookupcache:
 
 804		switch (result.uint_32) {
 805		case Opt_lookupcache_all:
 806			ctx->flags &= ~(NFS_MOUNT_LOOKUP_CACHE_NONEG|NFS_MOUNT_LOOKUP_CACHE_NONE);
 807			break;
 808		case Opt_lookupcache_positive:
 809			ctx->flags &= ~NFS_MOUNT_LOOKUP_CACHE_NONE;
 810			ctx->flags |= NFS_MOUNT_LOOKUP_CACHE_NONEG;
 811			break;
 812		case Opt_lookupcache_none:
 813			ctx->flags |= NFS_MOUNT_LOOKUP_CACHE_NONEG|NFS_MOUNT_LOOKUP_CACHE_NONE;
 814			break;
 815		default:
 816			goto out_invalid_value;
 817		}
 818		break;
 819	case Opt_local_lock:
 
 820		switch (result.uint_32) {
 821		case Opt_local_lock_all:
 822			ctx->flags |= (NFS_MOUNT_LOCAL_FLOCK |
 823				       NFS_MOUNT_LOCAL_FCNTL);
 824			break;
 825		case Opt_local_lock_flock:
 826			ctx->flags |= NFS_MOUNT_LOCAL_FLOCK;
 827			break;
 828		case Opt_local_lock_posix:
 829			ctx->flags |= NFS_MOUNT_LOCAL_FCNTL;
 830			break;
 831		case Opt_local_lock_none:
 832			ctx->flags &= ~(NFS_MOUNT_LOCAL_FLOCK |
 833					NFS_MOUNT_LOCAL_FCNTL);
 834			break;
 835		default:
 836			goto out_invalid_value;
 837		}
 838		break;
 839	case Opt_write:
 
 840		switch (result.uint_32) {
 841		case Opt_write_lazy:
 842			ctx->flags &=
 843				~(NFS_MOUNT_WRITE_EAGER | NFS_MOUNT_WRITE_WAIT);
 844			break;
 845		case Opt_write_eager:
 846			ctx->flags |= NFS_MOUNT_WRITE_EAGER;
 847			ctx->flags &= ~NFS_MOUNT_WRITE_WAIT;
 848			break;
 849		case Opt_write_wait:
 850			ctx->flags |=
 851				NFS_MOUNT_WRITE_EAGER | NFS_MOUNT_WRITE_WAIT;
 852			break;
 853		default:
 854			goto out_invalid_value;
 855		}
 856		break;
 857
 858		/*
 859		 * Special options
 860		 */
 861	case Opt_sloppy:
 862		ctx->sloppy = true;
 863		break;
 864	}
 865
 866	return 0;
 867
 868out_invalid_value:
 869	return nfs_invalf(fc, "NFS: Bad mount option value specified");
 870out_invalid_address:
 871	return nfs_invalf(fc, "NFS: Bad IP address specified");
 872out_of_bounds:
 873	return nfs_invalf(fc, "NFS: Value for '%s' out of range", param->key);
 874out_bad_transport:
 875	return nfs_invalf(fc, "NFS: Unrecognized transport protocol");
 876}
 877
 878/*
 879 * Split fc->source into "hostname:export_path".
 880 *
 881 * The leftmost colon demarks the split between the server's hostname
 882 * and the export path.  If the hostname starts with a left square
 883 * bracket, then it may contain colons.
 884 *
 885 * Note: caller frees hostname and export path, even on error.
 886 */
 887static int nfs_parse_source(struct fs_context *fc,
 888			    size_t maxnamlen, size_t maxpathlen)
 889{
 890	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 891	const char *dev_name = fc->source;
 892	size_t len;
 893	const char *end;
 894
 895	if (unlikely(!dev_name || !*dev_name))
 896		return -EINVAL;
 897
 898	/* Is the host name protected with square brakcets? */
 899	if (*dev_name == '[') {
 900		end = strchr(++dev_name, ']');
 901		if (end == NULL || end[1] != ':')
 902			goto out_bad_devname;
 903
 904		len = end - dev_name;
 905		end++;
 906	} else {
 907		const char *comma;
 908
 909		end = strchr(dev_name, ':');
 910		if (end == NULL)
 911			goto out_bad_devname;
 912		len = end - dev_name;
 913
 914		/* kill possible hostname list: not supported */
 915		comma = memchr(dev_name, ',', len);
 916		if (comma)
 917			len = comma - dev_name;
 918	}
 919
 920	if (len > maxnamlen)
 921		goto out_hostname;
 922
 923	kfree(ctx->nfs_server.hostname);
 924
 925	/* N.B. caller will free nfs_server.hostname in all cases */
 926	ctx->nfs_server.hostname = kmemdup_nul(dev_name, len, GFP_KERNEL);
 927	if (!ctx->nfs_server.hostname)
 928		goto out_nomem;
 929	len = strlen(++end);
 930	if (len > maxpathlen)
 931		goto out_path;
 932	ctx->nfs_server.export_path = kmemdup_nul(end, len, GFP_KERNEL);
 933	if (!ctx->nfs_server.export_path)
 934		goto out_nomem;
 935
 936	trace_nfs_mount_path(ctx->nfs_server.export_path);
 937	return 0;
 938
 939out_bad_devname:
 940	return nfs_invalf(fc, "NFS: device name not in host:path format");
 941out_nomem:
 942	nfs_errorf(fc, "NFS: not enough memory to parse device name");
 943	return -ENOMEM;
 944out_hostname:
 945	nfs_errorf(fc, "NFS: server hostname too long");
 946	return -ENAMETOOLONG;
 947out_path:
 948	nfs_errorf(fc, "NFS: export pathname too long");
 949	return -ENAMETOOLONG;
 950}
 951
 952static inline bool is_remount_fc(struct fs_context *fc)
 953{
 954	return fc->root != NULL;
 955}
 956
 957/*
 958 * Parse monolithic NFS2/NFS3 mount data
 959 * - fills in the mount root filehandle
 960 *
 961 * For option strings, user space handles the following behaviors:
 962 *
 963 * + DNS: mapping server host name to IP address ("addr=" option)
 964 *
 965 * + failure mode: how to behave if a mount request can't be handled
 966 *   immediately ("fg/bg" option)
 967 *
 968 * + retry: how often to retry a mount request ("retry=" option)
 969 *
 970 * + breaking back: trying proto=udp after proto=tcp, v2 after v3,
 971 *   mountproto=tcp after mountproto=udp, and so on
 972 */
 973static int nfs23_parse_monolithic(struct fs_context *fc,
 974				  struct nfs_mount_data *data)
 975{
 976	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 977	struct nfs_fh *mntfh = ctx->mntfh;
 978	struct sockaddr_storage *sap = &ctx->nfs_server._address;
 979	int extra_flags = NFS_MOUNT_LEGACY_INTERFACE;
 980	int ret;
 981
 982	if (data == NULL)
 983		goto out_no_data;
 984
 985	ctx->version = NFS_DEFAULT_VERSION;
 986	switch (data->version) {
 987	case 1:
 988		data->namlen = 0;
 989		fallthrough;
 990	case 2:
 991		data->bsize = 0;
 992		fallthrough;
 993	case 3:
 994		if (data->flags & NFS_MOUNT_VER3)
 995			goto out_no_v3;
 996		data->root.size = NFS2_FHSIZE;
 997		memcpy(data->root.data, data->old_root.data, NFS2_FHSIZE);
 998		/* Turn off security negotiation */
 999		extra_flags |= NFS_MOUNT_SECFLAVOUR;
1000		fallthrough;
1001	case 4:
1002		if (data->flags & NFS_MOUNT_SECFLAVOUR)
1003			goto out_no_sec;
1004		fallthrough;
1005	case 5:
1006		memset(data->context, 0, sizeof(data->context));
1007		fallthrough;
1008	case 6:
1009		if (data->flags & NFS_MOUNT_VER3) {
1010			if (data->root.size > NFS3_FHSIZE || data->root.size == 0)
1011				goto out_invalid_fh;
1012			mntfh->size = data->root.size;
1013			ctx->version = 3;
1014		} else {
1015			mntfh->size = NFS2_FHSIZE;
1016			ctx->version = 2;
1017		}
1018
1019
1020		memcpy(mntfh->data, data->root.data, mntfh->size);
1021		if (mntfh->size < sizeof(mntfh->data))
1022			memset(mntfh->data + mntfh->size, 0,
1023			       sizeof(mntfh->data) - mntfh->size);
1024
1025		/*
1026		 * for proto == XPRT_TRANSPORT_UDP, which is what uses
1027		 * to_exponential, implying shift: limit the shift value
1028		 * to BITS_PER_LONG (majortimeo is unsigned long)
1029		 */
1030		if (!(data->flags & NFS_MOUNT_TCP)) /* this will be UDP */
1031			if (data->retrans >= 64) /* shift value is too large */
1032				goto out_invalid_data;
1033
1034		/*
1035		 * Translate to nfs_fs_context, which nfs_fill_super
1036		 * can deal with.
1037		 */
1038		ctx->flags	= data->flags & NFS_MOUNT_FLAGMASK;
1039		ctx->flags	|= extra_flags;
1040		ctx->rsize	= data->rsize;
1041		ctx->wsize	= data->wsize;
1042		ctx->timeo	= data->timeo;
1043		ctx->retrans	= data->retrans;
1044		ctx->acregmin	= data->acregmin;
1045		ctx->acregmax	= data->acregmax;
1046		ctx->acdirmin	= data->acdirmin;
1047		ctx->acdirmax	= data->acdirmax;
1048		ctx->need_mount	= false;
1049
1050		memcpy(sap, &data->addr, sizeof(data->addr));
1051		ctx->nfs_server.addrlen = sizeof(data->addr);
1052		ctx->nfs_server.port = ntohs(data->addr.sin_port);
1053		if (sap->ss_family != AF_INET ||
1054		    !nfs_verify_server_address(sap))
1055			goto out_no_address;
1056
1057		if (!(data->flags & NFS_MOUNT_TCP))
1058			ctx->nfs_server.protocol = XPRT_TRANSPORT_UDP;
1059		/* N.B. caller will free nfs_server.hostname in all cases */
1060		ctx->nfs_server.hostname = kstrdup(data->hostname, GFP_KERNEL);
1061		if (!ctx->nfs_server.hostname)
1062			goto out_nomem;
1063
1064		ctx->namlen		= data->namlen;
1065		ctx->bsize		= data->bsize;
1066
1067		if (data->flags & NFS_MOUNT_SECFLAVOUR)
1068			ctx->selected_flavor = data->pseudoflavor;
1069		else
1070			ctx->selected_flavor = RPC_AUTH_UNIX;
1071
1072		if (!(data->flags & NFS_MOUNT_NONLM))
1073			ctx->flags &= ~(NFS_MOUNT_LOCAL_FLOCK|
1074					 NFS_MOUNT_LOCAL_FCNTL);
1075		else
1076			ctx->flags |= (NFS_MOUNT_LOCAL_FLOCK|
1077					NFS_MOUNT_LOCAL_FCNTL);
1078
1079		/*
1080		 * The legacy version 6 binary mount data from userspace has a
1081		 * field used only to transport selinux information into the
1082		 * kernel.  To continue to support that functionality we
1083		 * have a touch of selinux knowledge here in the NFS code. The
1084		 * userspace code converted context=blah to just blah so we are
1085		 * converting back to the full string selinux understands.
1086		 */
1087		if (data->context[0]){
1088#ifdef CONFIG_SECURITY_SELINUX
1089			int ret;
1090
1091			data->context[NFS_MAX_CONTEXT_LEN] = '\0';
1092			ret = vfs_parse_fs_string(fc, "context",
1093						  data->context, strlen(data->context));
1094			if (ret < 0)
1095				return ret;
1096#else
1097			return -EINVAL;
1098#endif
1099		}
1100
1101		break;
1102	default:
1103		goto generic;
1104	}
1105
1106	ret = nfs_validate_transport_protocol(fc, ctx);
1107	if (ret)
1108		return ret;
1109
1110	ctx->skip_reconfig_option_check = true;
1111	return 0;
1112
1113generic:
1114	return generic_parse_monolithic(fc, data);
1115
1116out_no_data:
1117	if (is_remount_fc(fc)) {
1118		ctx->skip_reconfig_option_check = true;
1119		return 0;
1120	}
1121	return nfs_invalf(fc, "NFS: mount program didn't pass any mount data");
1122
1123out_no_v3:
1124	return nfs_invalf(fc, "NFS: nfs_mount_data version does not support v3");
1125
1126out_no_sec:
1127	return nfs_invalf(fc, "NFS: nfs_mount_data version supports only AUTH_SYS");
1128
1129out_nomem:
1130	return -ENOMEM;
1131
1132out_no_address:
1133	return nfs_invalf(fc, "NFS: mount program didn't pass remote address");
1134
1135out_invalid_fh:
1136	return nfs_invalf(fc, "NFS: invalid root filehandle");
1137
1138out_invalid_data:
1139	return nfs_invalf(fc, "NFS: invalid binary mount data");
1140}
1141
1142#if IS_ENABLED(CONFIG_NFS_V4)
1143struct compat_nfs_string {
1144	compat_uint_t len;
1145	compat_uptr_t data;
1146};
1147
1148static inline void compat_nfs_string(struct nfs_string *dst,
1149				     struct compat_nfs_string *src)
1150{
1151	dst->data = compat_ptr(src->data);
1152	dst->len = src->len;
1153}
1154
1155struct compat_nfs4_mount_data_v1 {
1156	compat_int_t version;
1157	compat_int_t flags;
1158	compat_int_t rsize;
1159	compat_int_t wsize;
1160	compat_int_t timeo;
1161	compat_int_t retrans;
1162	compat_int_t acregmin;
1163	compat_int_t acregmax;
1164	compat_int_t acdirmin;
1165	compat_int_t acdirmax;
1166	struct compat_nfs_string client_addr;
1167	struct compat_nfs_string mnt_path;
1168	struct compat_nfs_string hostname;
1169	compat_uint_t host_addrlen;
1170	compat_uptr_t host_addr;
1171	compat_int_t proto;
1172	compat_int_t auth_flavourlen;
1173	compat_uptr_t auth_flavours;
1174};
1175
1176static void nfs4_compat_mount_data_conv(struct nfs4_mount_data *data)
1177{
1178	struct compat_nfs4_mount_data_v1 *compat =
1179			(struct compat_nfs4_mount_data_v1 *)data;
1180
1181	/* copy the fields backwards */
1182	data->auth_flavours = compat_ptr(compat->auth_flavours);
1183	data->auth_flavourlen = compat->auth_flavourlen;
1184	data->proto = compat->proto;
1185	data->host_addr = compat_ptr(compat->host_addr);
1186	data->host_addrlen = compat->host_addrlen;
1187	compat_nfs_string(&data->hostname, &compat->hostname);
1188	compat_nfs_string(&data->mnt_path, &compat->mnt_path);
1189	compat_nfs_string(&data->client_addr, &compat->client_addr);
1190	data->acdirmax = compat->acdirmax;
1191	data->acdirmin = compat->acdirmin;
1192	data->acregmax = compat->acregmax;
1193	data->acregmin = compat->acregmin;
1194	data->retrans = compat->retrans;
1195	data->timeo = compat->timeo;
1196	data->wsize = compat->wsize;
1197	data->rsize = compat->rsize;
1198	data->flags = compat->flags;
1199	data->version = compat->version;
1200}
1201
1202/*
1203 * Validate NFSv4 mount options
1204 */
1205static int nfs4_parse_monolithic(struct fs_context *fc,
1206				 struct nfs4_mount_data *data)
1207{
1208	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1209	struct sockaddr_storage *sap = &ctx->nfs_server._address;
1210	int ret;
1211	char *c;
1212
1213	if (!data) {
1214		if (is_remount_fc(fc))
1215			goto done;
1216		return nfs_invalf(fc,
1217			"NFS4: mount program didn't pass any mount data");
1218	}
1219
1220	ctx->version = 4;
1221
1222	if (data->version != 1)
1223		return generic_parse_monolithic(fc, data);
1224
1225	if (in_compat_syscall())
1226		nfs4_compat_mount_data_conv(data);
1227
1228	if (data->host_addrlen > sizeof(ctx->nfs_server.address))
1229		goto out_no_address;
1230	if (data->host_addrlen == 0)
1231		goto out_no_address;
1232	ctx->nfs_server.addrlen = data->host_addrlen;
1233	if (copy_from_user(sap, data->host_addr, data->host_addrlen))
1234		return -EFAULT;
1235	if (!nfs_verify_server_address(sap))
1236		goto out_no_address;
1237	ctx->nfs_server.port = ntohs(((struct sockaddr_in *)sap)->sin_port);
1238
1239	if (data->auth_flavourlen) {
1240		rpc_authflavor_t pseudoflavor;
1241
1242		if (data->auth_flavourlen > 1)
1243			goto out_inval_auth;
1244		if (copy_from_user(&pseudoflavor, data->auth_flavours,
1245				   sizeof(pseudoflavor)))
1246			return -EFAULT;
1247		ctx->selected_flavor = pseudoflavor;
1248	} else {
1249		ctx->selected_flavor = RPC_AUTH_UNIX;
1250	}
1251
1252	c = strndup_user(data->hostname.data, NFS4_MAXNAMLEN);
1253	if (IS_ERR(c))
1254		return PTR_ERR(c);
1255	ctx->nfs_server.hostname = c;
1256
1257	c = strndup_user(data->mnt_path.data, NFS4_MAXPATHLEN);
1258	if (IS_ERR(c))
1259		return PTR_ERR(c);
1260	ctx->nfs_server.export_path = c;
1261	trace_nfs_mount_path(c);
1262
1263	c = strndup_user(data->client_addr.data, 16);
1264	if (IS_ERR(c))
1265		return PTR_ERR(c);
1266	ctx->client_address = c;
1267
1268	/*
1269	 * Translate to nfs_fs_context, which nfs_fill_super
1270	 * can deal with.
1271	 */
1272
1273	ctx->flags	= data->flags & NFS4_MOUNT_FLAGMASK;
1274	ctx->rsize	= data->rsize;
1275	ctx->wsize	= data->wsize;
1276	ctx->timeo	= data->timeo;
1277	ctx->retrans	= data->retrans;
1278	ctx->acregmin	= data->acregmin;
1279	ctx->acregmax	= data->acregmax;
1280	ctx->acdirmin	= data->acdirmin;
1281	ctx->acdirmax	= data->acdirmax;
1282	ctx->nfs_server.protocol = data->proto;
1283	ret = nfs_validate_transport_protocol(fc, ctx);
1284	if (ret)
1285		return ret;
1286done:
1287	ctx->skip_reconfig_option_check = true;
1288	return 0;
1289
1290out_inval_auth:
1291	return nfs_invalf(fc, "NFS4: Invalid number of RPC auth flavours %d",
1292		      data->auth_flavourlen);
1293
1294out_no_address:
1295	return nfs_invalf(fc, "NFS4: mount program didn't pass remote address");
1296}
1297#endif
1298
1299/*
1300 * Parse a monolithic block of data from sys_mount().
1301 */
1302static int nfs_fs_context_parse_monolithic(struct fs_context *fc,
1303					   void *data)
1304{
1305	if (fc->fs_type == &nfs_fs_type)
1306		return nfs23_parse_monolithic(fc, data);
1307
1308#if IS_ENABLED(CONFIG_NFS_V4)
1309	if (fc->fs_type == &nfs4_fs_type)
1310		return nfs4_parse_monolithic(fc, data);
1311#endif
1312
1313	return nfs_invalf(fc, "NFS: Unsupported monolithic data version");
1314}
1315
1316/*
1317 * Validate the preparsed information in the config.
1318 */
1319static int nfs_fs_context_validate(struct fs_context *fc)
1320{
1321	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1322	struct nfs_subversion *nfs_mod;
1323	struct sockaddr_storage *sap = &ctx->nfs_server._address;
1324	int max_namelen = PAGE_SIZE;
1325	int max_pathlen = NFS_MAXPATHLEN;
1326	int port = 0;
1327	int ret;
1328
1329	if (!fc->source)
1330		goto out_no_device_name;
1331
1332	/* Check for sanity first. */
1333	if (ctx->minorversion && ctx->version != 4)
1334		goto out_minorversion_mismatch;
1335
1336	if (ctx->options & NFS_OPTION_MIGRATION &&
1337	    (ctx->version != 4 || ctx->minorversion != 0))
1338		goto out_migration_misuse;
1339
1340	/* Verify that any proto=/mountproto= options match the address
1341	 * families in the addr=/mountaddr= options.
1342	 */
1343	if (ctx->protofamily != AF_UNSPEC &&
1344	    ctx->protofamily != ctx->nfs_server.address.sa_family)
1345		goto out_proto_mismatch;
1346
1347	if (ctx->mountfamily != AF_UNSPEC) {
1348		if (ctx->mount_server.addrlen) {
1349			if (ctx->mountfamily != ctx->mount_server.address.sa_family)
1350				goto out_mountproto_mismatch;
1351		} else {
1352			if (ctx->mountfamily != ctx->nfs_server.address.sa_family)
1353				goto out_mountproto_mismatch;
1354		}
1355	}
1356
1357	if (!nfs_verify_server_address(sap))
1358		goto out_no_address;
1359
1360	ret = nfs_validate_transport_protocol(fc, ctx);
1361	if (ret)
1362		return ret;
1363
1364	if (ctx->version == 4) {
1365		if (IS_ENABLED(CONFIG_NFS_V4)) {
1366			if (ctx->nfs_server.protocol == XPRT_TRANSPORT_RDMA)
1367				port = NFS_RDMA_PORT;
1368			else
1369				port = NFS_PORT;
1370			max_namelen = NFS4_MAXNAMLEN;
1371			max_pathlen = NFS4_MAXPATHLEN;
1372			ctx->flags &= ~(NFS_MOUNT_NONLM | NFS_MOUNT_NOACL |
1373					NFS_MOUNT_VER3 | NFS_MOUNT_LOCAL_FLOCK |
1374					NFS_MOUNT_LOCAL_FCNTL);
1375		} else {
1376			goto out_v4_not_compiled;
1377		}
1378	} else {
1379		nfs_set_mount_transport_protocol(ctx);
1380		if (ctx->nfs_server.protocol == XPRT_TRANSPORT_RDMA)
1381			port = NFS_RDMA_PORT;
1382	}
1383
1384	nfs_set_port(sap, &ctx->nfs_server.port, port);
1385
1386	ret = nfs_parse_source(fc, max_namelen, max_pathlen);
1387	if (ret < 0)
1388		return ret;
1389
1390	/* Load the NFS protocol module if we haven't done so yet */
1391	if (!ctx->nfs_mod) {
1392		nfs_mod = get_nfs_version(ctx->version);
1393		if (IS_ERR(nfs_mod)) {
1394			ret = PTR_ERR(nfs_mod);
1395			goto out_version_unavailable;
1396		}
1397		ctx->nfs_mod = nfs_mod;
1398	}
1399
1400	/* Ensure the filesystem context has the correct fs_type */
1401	if (fc->fs_type != ctx->nfs_mod->nfs_fs) {
1402		module_put(fc->fs_type->owner);
1403		__module_get(ctx->nfs_mod->nfs_fs->owner);
1404		fc->fs_type = ctx->nfs_mod->nfs_fs;
1405	}
1406	return 0;
1407
1408out_no_device_name:
1409	return nfs_invalf(fc, "NFS: Device name not specified");
1410out_v4_not_compiled:
1411	nfs_errorf(fc, "NFS: NFSv4 is not compiled into kernel");
1412	return -EPROTONOSUPPORT;
1413out_no_address:
1414	return nfs_invalf(fc, "NFS: mount program didn't pass remote address");
1415out_mountproto_mismatch:
1416	return nfs_invalf(fc, "NFS: Mount server address does not match mountproto= option");
1417out_proto_mismatch:
1418	return nfs_invalf(fc, "NFS: Server address does not match proto= option");
1419out_minorversion_mismatch:
1420	return nfs_invalf(fc, "NFS: Mount option vers=%u does not support minorversion=%u",
1421			  ctx->version, ctx->minorversion);
1422out_migration_misuse:
1423	return nfs_invalf(fc, "NFS: 'Migration' not supported for this NFS version");
1424out_version_unavailable:
1425	nfs_errorf(fc, "NFS: Version unavailable");
1426	return ret;
1427}
1428
1429/*
1430 * Create an NFS superblock by the appropriate method.
1431 */
1432static int nfs_get_tree(struct fs_context *fc)
1433{
1434	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1435	int err = nfs_fs_context_validate(fc);
1436
1437	if (err)
1438		return err;
1439	if (!ctx->internal)
1440		return ctx->nfs_mod->rpc_ops->try_get_tree(fc);
1441	else
1442		return nfs_get_tree_common(fc);
1443}
1444
1445/*
1446 * Handle duplication of a configuration.  The caller copied *src into *sc, but
1447 * it can't deal with resource pointers in the filesystem context, so we have
1448 * to do that.  We need to clear pointers, copy data or get extra refs as
1449 * appropriate.
1450 */
1451static int nfs_fs_context_dup(struct fs_context *fc, struct fs_context *src_fc)
1452{
1453	struct nfs_fs_context *src = nfs_fc2context(src_fc), *ctx;
1454
1455	ctx = kmemdup(src, sizeof(struct nfs_fs_context), GFP_KERNEL);
1456	if (!ctx)
1457		return -ENOMEM;
1458
1459	ctx->mntfh = nfs_alloc_fhandle();
1460	if (!ctx->mntfh) {
1461		kfree(ctx);
1462		return -ENOMEM;
1463	}
1464	nfs_copy_fh(ctx->mntfh, src->mntfh);
1465
1466	__module_get(ctx->nfs_mod->owner);
1467	ctx->client_address		= NULL;
1468	ctx->mount_server.hostname	= NULL;
1469	ctx->nfs_server.export_path	= NULL;
1470	ctx->nfs_server.hostname	= NULL;
1471	ctx->fscache_uniq		= NULL;
1472	ctx->clone_data.fattr		= NULL;
1473	fc->fs_private = ctx;
1474	return 0;
1475}
1476
1477static void nfs_fs_context_free(struct fs_context *fc)
1478{
1479	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1480
1481	if (ctx) {
1482		if (ctx->server)
1483			nfs_free_server(ctx->server);
1484		if (ctx->nfs_mod)
1485			put_nfs_version(ctx->nfs_mod);
1486		kfree(ctx->client_address);
1487		kfree(ctx->mount_server.hostname);
1488		kfree(ctx->nfs_server.export_path);
1489		kfree(ctx->nfs_server.hostname);
1490		kfree(ctx->fscache_uniq);
1491		nfs_free_fhandle(ctx->mntfh);
1492		nfs_free_fattr(ctx->clone_data.fattr);
1493		kfree(ctx);
1494	}
1495}
1496
1497static const struct fs_context_operations nfs_fs_context_ops = {
1498	.free			= nfs_fs_context_free,
1499	.dup			= nfs_fs_context_dup,
1500	.parse_param		= nfs_fs_context_parse_param,
1501	.parse_monolithic	= nfs_fs_context_parse_monolithic,
1502	.get_tree		= nfs_get_tree,
1503	.reconfigure		= nfs_reconfigure,
1504};
1505
1506/*
1507 * Prepare superblock configuration.  We use the namespaces attached to the
1508 * context.  This may be the current process's namespaces, or it may be a
1509 * container's namespaces.
1510 */
1511static int nfs_init_fs_context(struct fs_context *fc)
1512{
1513	struct nfs_fs_context *ctx;
1514
1515	ctx = kzalloc(sizeof(struct nfs_fs_context), GFP_KERNEL);
1516	if (unlikely(!ctx))
1517		return -ENOMEM;
1518
1519	ctx->mntfh = nfs_alloc_fhandle();
1520	if (unlikely(!ctx->mntfh)) {
1521		kfree(ctx);
1522		return -ENOMEM;
1523	}
1524
1525	ctx->protofamily	= AF_UNSPEC;
1526	ctx->mountfamily	= AF_UNSPEC;
1527	ctx->mount_server.port	= NFS_UNSPEC_PORT;
1528
1529	if (fc->root) {
1530		/* reconfigure, start with the current config */
1531		struct nfs_server *nfss = fc->root->d_sb->s_fs_info;
1532		struct net *net = nfss->nfs_client->cl_net;
1533
1534		ctx->flags		= nfss->flags;
1535		ctx->rsize		= nfss->rsize;
1536		ctx->wsize		= nfss->wsize;
1537		ctx->retrans		= nfss->client->cl_timeout->to_retries;
1538		ctx->selected_flavor	= nfss->client->cl_auth->au_flavor;
1539		ctx->acregmin		= nfss->acregmin / HZ;
1540		ctx->acregmax		= nfss->acregmax / HZ;
1541		ctx->acdirmin		= nfss->acdirmin / HZ;
1542		ctx->acdirmax		= nfss->acdirmax / HZ;
1543		ctx->timeo		= 10U * nfss->client->cl_timeout->to_initval / HZ;
1544		ctx->nfs_server.port	= nfss->port;
1545		ctx->nfs_server.addrlen	= nfss->nfs_client->cl_addrlen;
1546		ctx->version		= nfss->nfs_client->rpc_ops->version;
1547		ctx->minorversion	= nfss->nfs_client->cl_minorversion;
1548
1549		memcpy(&ctx->nfs_server._address, &nfss->nfs_client->cl_addr,
1550			ctx->nfs_server.addrlen);
1551
1552		if (fc->net_ns != net) {
1553			put_net(fc->net_ns);
1554			fc->net_ns = get_net(net);
1555		}
1556
1557		ctx->nfs_mod = nfss->nfs_client->cl_nfs_mod;
1558		__module_get(ctx->nfs_mod->owner);
1559	} else {
1560		/* defaults */
1561		ctx->timeo		= NFS_UNSPEC_TIMEO;
1562		ctx->retrans		= NFS_UNSPEC_RETRANS;
1563		ctx->acregmin		= NFS_DEF_ACREGMIN;
1564		ctx->acregmax		= NFS_DEF_ACREGMAX;
1565		ctx->acdirmin		= NFS_DEF_ACDIRMIN;
1566		ctx->acdirmax		= NFS_DEF_ACDIRMAX;
1567		ctx->nfs_server.port	= NFS_UNSPEC_PORT;
1568		ctx->nfs_server.protocol = XPRT_TRANSPORT_TCP;
1569		ctx->selected_flavor	= RPC_AUTH_MAXFLAVOR;
1570		ctx->minorversion	= 0;
1571		ctx->need_mount		= true;
 
 
 
1572
1573		fc->s_iflags		|= SB_I_STABLE_WRITES;
1574	}
1575	fc->fs_private = ctx;
1576	fc->ops = &nfs_fs_context_ops;
1577	return 0;
1578}
1579
1580struct file_system_type nfs_fs_type = {
1581	.owner			= THIS_MODULE,
1582	.name			= "nfs",
1583	.init_fs_context	= nfs_init_fs_context,
1584	.parameters		= nfs_fs_parameters,
1585	.kill_sb		= nfs_kill_super,
1586	.fs_flags		= FS_RENAME_DOES_D_MOVE|FS_BINARY_MOUNTDATA,
1587};
1588MODULE_ALIAS_FS("nfs");
1589EXPORT_SYMBOL_GPL(nfs_fs_type);
1590
1591#if IS_ENABLED(CONFIG_NFS_V4)
1592struct file_system_type nfs4_fs_type = {
1593	.owner			= THIS_MODULE,
1594	.name			= "nfs4",
1595	.init_fs_context	= nfs_init_fs_context,
1596	.parameters		= nfs_fs_parameters,
1597	.kill_sb		= nfs_kill_super,
1598	.fs_flags		= FS_RENAME_DOES_D_MOVE|FS_BINARY_MOUNTDATA,
1599};
1600MODULE_ALIAS_FS("nfs4");
1601MODULE_ALIAS("nfs4");
1602EXPORT_SYMBOL_GPL(nfs4_fs_type);
1603#endif /* CONFIG_NFS_V4 */
v6.8
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * linux/fs/nfs/fs_context.c
   4 *
   5 * Copyright (C) 1992 Rick Sladkey
   6 * Conversion to new mount api Copyright (C) David Howells
   7 *
   8 * NFS mount handling.
   9 *
  10 * Split from fs/nfs/super.c by David Howells <dhowells@redhat.com>
  11 */
  12
  13#include <linux/compat.h>
  14#include <linux/module.h>
  15#include <linux/fs.h>
  16#include <linux/fs_context.h>
  17#include <linux/fs_parser.h>
  18#include <linux/nfs_fs.h>
  19#include <linux/nfs_mount.h>
  20#include <linux/nfs4_mount.h>
  21
  22#include <net/handshake.h>
  23
  24#include "nfs.h"
  25#include "internal.h"
  26
  27#include "nfstrace.h"
  28
  29#define NFSDBG_FACILITY		NFSDBG_MOUNT
  30
  31#if IS_ENABLED(CONFIG_NFS_V3)
  32#define NFS_DEFAULT_VERSION 3
  33#else
  34#define NFS_DEFAULT_VERSION 2
  35#endif
  36
  37#define NFS_MAX_CONNECTIONS 16
  38
  39enum nfs_param {
  40	Opt_ac,
  41	Opt_acdirmax,
  42	Opt_acdirmin,
  43	Opt_acl,
  44	Opt_acregmax,
  45	Opt_acregmin,
  46	Opt_actimeo,
  47	Opt_addr,
  48	Opt_bg,
  49	Opt_bsize,
  50	Opt_clientaddr,
  51	Opt_cto,
  52	Opt_fg,
  53	Opt_fscache,
  54	Opt_fscache_flag,
  55	Opt_hard,
  56	Opt_intr,
  57	Opt_local_lock,
  58	Opt_lock,
  59	Opt_lookupcache,
  60	Opt_migration,
  61	Opt_minorversion,
  62	Opt_mountaddr,
  63	Opt_mounthost,
  64	Opt_mountport,
  65	Opt_mountproto,
  66	Opt_mountvers,
  67	Opt_namelen,
  68	Opt_nconnect,
  69	Opt_max_connect,
  70	Opt_port,
  71	Opt_posix,
  72	Opt_proto,
  73	Opt_rdirplus,
  74	Opt_rdma,
  75	Opt_resvport,
  76	Opt_retrans,
  77	Opt_retry,
  78	Opt_rsize,
  79	Opt_sec,
  80	Opt_sharecache,
  81	Opt_sloppy,
  82	Opt_soft,
  83	Opt_softerr,
  84	Opt_softreval,
  85	Opt_source,
  86	Opt_tcp,
  87	Opt_timeo,
  88	Opt_trunkdiscovery,
  89	Opt_udp,
  90	Opt_v,
  91	Opt_vers,
  92	Opt_wsize,
  93	Opt_write,
  94	Opt_xprtsec,
  95};
  96
  97enum {
  98	Opt_local_lock_all,
  99	Opt_local_lock_flock,
 100	Opt_local_lock_none,
 101	Opt_local_lock_posix,
 102};
 103
 104static const struct constant_table nfs_param_enums_local_lock[] = {
 105	{ "all",		Opt_local_lock_all },
 106	{ "flock",	Opt_local_lock_flock },
 107	{ "posix",	Opt_local_lock_posix },
 108	{ "none",		Opt_local_lock_none },
 109	{}
 110};
 111
 112enum {
 113	Opt_lookupcache_all,
 114	Opt_lookupcache_none,
 115	Opt_lookupcache_positive,
 116};
 117
 118static const struct constant_table nfs_param_enums_lookupcache[] = {
 119	{ "all",		Opt_lookupcache_all },
 120	{ "none",		Opt_lookupcache_none },
 121	{ "pos",		Opt_lookupcache_positive },
 122	{ "positive",		Opt_lookupcache_positive },
 123	{}
 124};
 125
 126enum {
 127	Opt_write_lazy,
 128	Opt_write_eager,
 129	Opt_write_wait,
 130};
 131
 132static const struct constant_table nfs_param_enums_write[] = {
 133	{ "lazy",		Opt_write_lazy },
 134	{ "eager",		Opt_write_eager },
 135	{ "wait",		Opt_write_wait },
 136	{}
 137};
 138
 139static const struct fs_parameter_spec nfs_fs_parameters[] = {
 140	fsparam_flag_no("ac",		Opt_ac),
 141	fsparam_u32   ("acdirmax",	Opt_acdirmax),
 142	fsparam_u32   ("acdirmin",	Opt_acdirmin),
 143	fsparam_flag_no("acl",		Opt_acl),
 144	fsparam_u32   ("acregmax",	Opt_acregmax),
 145	fsparam_u32   ("acregmin",	Opt_acregmin),
 146	fsparam_u32   ("actimeo",	Opt_actimeo),
 147	fsparam_string("addr",		Opt_addr),
 148	fsparam_flag  ("bg",		Opt_bg),
 149	fsparam_u32   ("bsize",		Opt_bsize),
 150	fsparam_string("clientaddr",	Opt_clientaddr),
 151	fsparam_flag_no("cto",		Opt_cto),
 152	fsparam_flag  ("fg",		Opt_fg),
 153	fsparam_flag_no("fsc",		Opt_fscache_flag),
 154	fsparam_string("fsc",		Opt_fscache),
 155	fsparam_flag  ("hard",		Opt_hard),
 156	__fsparam(NULL, "intr",		Opt_intr,
 157		  fs_param_neg_with_no|fs_param_deprecated, NULL),
 158	fsparam_enum  ("local_lock",	Opt_local_lock, nfs_param_enums_local_lock),
 159	fsparam_flag_no("lock",		Opt_lock),
 160	fsparam_enum  ("lookupcache",	Opt_lookupcache, nfs_param_enums_lookupcache),
 161	fsparam_flag_no("migration",	Opt_migration),
 162	fsparam_u32   ("minorversion",	Opt_minorversion),
 163	fsparam_string("mountaddr",	Opt_mountaddr),
 164	fsparam_string("mounthost",	Opt_mounthost),
 165	fsparam_u32   ("mountport",	Opt_mountport),
 166	fsparam_string("mountproto",	Opt_mountproto),
 167	fsparam_u32   ("mountvers",	Opt_mountvers),
 168	fsparam_u32   ("namlen",	Opt_namelen),
 169	fsparam_u32   ("nconnect",	Opt_nconnect),
 170	fsparam_u32   ("max_connect",	Opt_max_connect),
 171	fsparam_string("nfsvers",	Opt_vers),
 172	fsparam_u32   ("port",		Opt_port),
 173	fsparam_flag_no("posix",	Opt_posix),
 174	fsparam_string("proto",		Opt_proto),
 175	fsparam_flag_no("rdirplus",	Opt_rdirplus),
 176	fsparam_flag  ("rdma",		Opt_rdma),
 177	fsparam_flag_no("resvport",	Opt_resvport),
 178	fsparam_u32   ("retrans",	Opt_retrans),
 179	fsparam_string("retry",		Opt_retry),
 180	fsparam_u32   ("rsize",		Opt_rsize),
 181	fsparam_string("sec",		Opt_sec),
 182	fsparam_flag_no("sharecache",	Opt_sharecache),
 183	fsparam_flag  ("sloppy",	Opt_sloppy),
 184	fsparam_flag  ("soft",		Opt_soft),
 185	fsparam_flag  ("softerr",	Opt_softerr),
 186	fsparam_flag  ("softreval",	Opt_softreval),
 187	fsparam_string("source",	Opt_source),
 188	fsparam_flag  ("tcp",		Opt_tcp),
 189	fsparam_u32   ("timeo",		Opt_timeo),
 190	fsparam_flag_no("trunkdiscovery", Opt_trunkdiscovery),
 191	fsparam_flag  ("udp",		Opt_udp),
 192	fsparam_flag  ("v2",		Opt_v),
 193	fsparam_flag  ("v3",		Opt_v),
 194	fsparam_flag  ("v4",		Opt_v),
 195	fsparam_flag  ("v4.0",		Opt_v),
 196	fsparam_flag  ("v4.1",		Opt_v),
 197	fsparam_flag  ("v4.2",		Opt_v),
 198	fsparam_string("vers",		Opt_vers),
 199	fsparam_enum  ("write",		Opt_write, nfs_param_enums_write),
 200	fsparam_u32   ("wsize",		Opt_wsize),
 201	fsparam_string("xprtsec",	Opt_xprtsec),
 202	{}
 203};
 204
 205enum {
 206	Opt_vers_2,
 207	Opt_vers_3,
 208	Opt_vers_4,
 209	Opt_vers_4_0,
 210	Opt_vers_4_1,
 211	Opt_vers_4_2,
 212};
 213
 214static const struct constant_table nfs_vers_tokens[] = {
 215	{ "2",		Opt_vers_2 },
 216	{ "3",		Opt_vers_3 },
 217	{ "4",		Opt_vers_4 },
 218	{ "4.0",	Opt_vers_4_0 },
 219	{ "4.1",	Opt_vers_4_1 },
 220	{ "4.2",	Opt_vers_4_2 },
 221	{}
 222};
 223
 224enum {
 225	Opt_xprt_rdma,
 226	Opt_xprt_rdma6,
 227	Opt_xprt_tcp,
 228	Opt_xprt_tcp6,
 229	Opt_xprt_udp,
 230	Opt_xprt_udp6,
 231	nr__Opt_xprt
 232};
 233
 234static const struct constant_table nfs_xprt_protocol_tokens[] = {
 235	{ "rdma",	Opt_xprt_rdma },
 236	{ "rdma6",	Opt_xprt_rdma6 },
 237	{ "tcp",	Opt_xprt_tcp },
 238	{ "tcp6",	Opt_xprt_tcp6 },
 239	{ "udp",	Opt_xprt_udp },
 240	{ "udp6",	Opt_xprt_udp6 },
 241	{}
 242};
 243
 244enum {
 245	Opt_sec_krb5,
 246	Opt_sec_krb5i,
 247	Opt_sec_krb5p,
 248	Opt_sec_lkey,
 249	Opt_sec_lkeyi,
 250	Opt_sec_lkeyp,
 251	Opt_sec_none,
 252	Opt_sec_spkm,
 253	Opt_sec_spkmi,
 254	Opt_sec_spkmp,
 255	Opt_sec_sys,
 256	nr__Opt_sec
 257};
 258
 259static const struct constant_table nfs_secflavor_tokens[] = {
 260	{ "krb5",	Opt_sec_krb5 },
 261	{ "krb5i",	Opt_sec_krb5i },
 262	{ "krb5p",	Opt_sec_krb5p },
 263	{ "lkey",	Opt_sec_lkey },
 264	{ "lkeyi",	Opt_sec_lkeyi },
 265	{ "lkeyp",	Opt_sec_lkeyp },
 266	{ "none",	Opt_sec_none },
 267	{ "null",	Opt_sec_none },
 268	{ "spkm3",	Opt_sec_spkm },
 269	{ "spkm3i",	Opt_sec_spkmi },
 270	{ "spkm3p",	Opt_sec_spkmp },
 271	{ "sys",	Opt_sec_sys },
 272	{}
 273};
 274
 275enum {
 276	Opt_xprtsec_none,
 277	Opt_xprtsec_tls,
 278	Opt_xprtsec_mtls,
 279	nr__Opt_xprtsec
 280};
 281
 282static const struct constant_table nfs_xprtsec_policies[] = {
 283	{ "none",	Opt_xprtsec_none },
 284	{ "tls",	Opt_xprtsec_tls },
 285	{ "mtls",	Opt_xprtsec_mtls },
 286	{}
 287};
 288
 289/*
 290 * Sanity-check a server address provided by the mount command.
 291 *
 292 * Address family must be initialized, and address must not be
 293 * the ANY address for that family.
 294 */
 295static int nfs_verify_server_address(struct sockaddr_storage *addr)
 296{
 297	switch (addr->ss_family) {
 298	case AF_INET: {
 299		struct sockaddr_in *sa = (struct sockaddr_in *)addr;
 300		return sa->sin_addr.s_addr != htonl(INADDR_ANY);
 301	}
 302	case AF_INET6: {
 303		struct in6_addr *sa = &((struct sockaddr_in6 *)addr)->sin6_addr;
 304		return !ipv6_addr_any(sa);
 305	}
 306	}
 307
 308	return 0;
 309}
 310
 311#ifdef CONFIG_NFS_DISABLE_UDP_SUPPORT
 312static bool nfs_server_transport_udp_invalid(const struct nfs_fs_context *ctx)
 313{
 314	return true;
 315}
 316#else
 317static bool nfs_server_transport_udp_invalid(const struct nfs_fs_context *ctx)
 318{
 319	if (ctx->version == 4)
 320		return true;
 321	return false;
 322}
 323#endif
 324
 325/*
 326 * Sanity check the NFS transport protocol.
 327 */
 328static int nfs_validate_transport_protocol(struct fs_context *fc,
 329					   struct nfs_fs_context *ctx)
 330{
 331	switch (ctx->nfs_server.protocol) {
 332	case XPRT_TRANSPORT_UDP:
 333		if (nfs_server_transport_udp_invalid(ctx))
 334			goto out_invalid_transport_udp;
 335		break;
 336	case XPRT_TRANSPORT_TCP:
 337	case XPRT_TRANSPORT_RDMA:
 338		break;
 339	default:
 340		ctx->nfs_server.protocol = XPRT_TRANSPORT_TCP;
 341	}
 342
 343	if (ctx->xprtsec.policy != RPC_XPRTSEC_NONE)
 344		switch (ctx->nfs_server.protocol) {
 345		case XPRT_TRANSPORT_TCP:
 346			ctx->nfs_server.protocol = XPRT_TRANSPORT_TCP_TLS;
 347			break;
 348		default:
 349			goto out_invalid_xprtsec_policy;
 350	}
 351
 352	return 0;
 353out_invalid_transport_udp:
 354	return nfs_invalf(fc, "NFS: Unsupported transport protocol udp");
 355out_invalid_xprtsec_policy:
 356	return nfs_invalf(fc, "NFS: Transport does not support xprtsec");
 357}
 358
 359/*
 360 * For text based NFSv2/v3 mounts, the mount protocol transport default
 361 * settings should depend upon the specified NFS transport.
 362 */
 363static void nfs_set_mount_transport_protocol(struct nfs_fs_context *ctx)
 364{
 365	if (ctx->mount_server.protocol == XPRT_TRANSPORT_UDP ||
 366	    ctx->mount_server.protocol == XPRT_TRANSPORT_TCP)
 367			return;
 368	switch (ctx->nfs_server.protocol) {
 369	case XPRT_TRANSPORT_UDP:
 370		ctx->mount_server.protocol = XPRT_TRANSPORT_UDP;
 371		break;
 372	case XPRT_TRANSPORT_TCP:
 373	case XPRT_TRANSPORT_RDMA:
 374		ctx->mount_server.protocol = XPRT_TRANSPORT_TCP;
 375	}
 376}
 377
 378/*
 379 * Add 'flavor' to 'auth_info' if not already present.
 380 * Returns true if 'flavor' ends up in the list, false otherwise
 381 */
 382static int nfs_auth_info_add(struct fs_context *fc,
 383			     struct nfs_auth_info *auth_info,
 384			     rpc_authflavor_t flavor)
 385{
 386	unsigned int i;
 387	unsigned int max_flavor_len = ARRAY_SIZE(auth_info->flavors);
 388
 389	/* make sure this flavor isn't already in the list */
 390	for (i = 0; i < auth_info->flavor_len; i++) {
 391		if (flavor == auth_info->flavors[i])
 392			return 0;
 393	}
 394
 395	if (auth_info->flavor_len + 1 >= max_flavor_len)
 396		return nfs_invalf(fc, "NFS: too many sec= flavors");
 397
 398	auth_info->flavors[auth_info->flavor_len++] = flavor;
 399	return 0;
 400}
 401
 402/*
 403 * Parse the value of the 'sec=' option.
 404 */
 405static int nfs_parse_security_flavors(struct fs_context *fc,
 406				      struct fs_parameter *param)
 407{
 408	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 409	rpc_authflavor_t pseudoflavor;
 410	char *string = param->string, *p;
 411	int ret;
 412
 413	trace_nfs_mount_assign(param->key, string);
 414
 415	while ((p = strsep(&string, ":")) != NULL) {
 416		if (!*p)
 417			continue;
 418		switch (lookup_constant(nfs_secflavor_tokens, p, -1)) {
 419		case Opt_sec_none:
 420			pseudoflavor = RPC_AUTH_NULL;
 421			break;
 422		case Opt_sec_sys:
 423			pseudoflavor = RPC_AUTH_UNIX;
 424			break;
 425		case Opt_sec_krb5:
 426			pseudoflavor = RPC_AUTH_GSS_KRB5;
 427			break;
 428		case Opt_sec_krb5i:
 429			pseudoflavor = RPC_AUTH_GSS_KRB5I;
 430			break;
 431		case Opt_sec_krb5p:
 432			pseudoflavor = RPC_AUTH_GSS_KRB5P;
 433			break;
 434		case Opt_sec_lkey:
 435			pseudoflavor = RPC_AUTH_GSS_LKEY;
 436			break;
 437		case Opt_sec_lkeyi:
 438			pseudoflavor = RPC_AUTH_GSS_LKEYI;
 439			break;
 440		case Opt_sec_lkeyp:
 441			pseudoflavor = RPC_AUTH_GSS_LKEYP;
 442			break;
 443		case Opt_sec_spkm:
 444			pseudoflavor = RPC_AUTH_GSS_SPKM;
 445			break;
 446		case Opt_sec_spkmi:
 447			pseudoflavor = RPC_AUTH_GSS_SPKMI;
 448			break;
 449		case Opt_sec_spkmp:
 450			pseudoflavor = RPC_AUTH_GSS_SPKMP;
 451			break;
 452		default:
 453			return nfs_invalf(fc, "NFS: sec=%s option not recognized", p);
 454		}
 455
 456		ret = nfs_auth_info_add(fc, &ctx->auth_info, pseudoflavor);
 457		if (ret < 0)
 458			return ret;
 459	}
 460
 461	return 0;
 462}
 463
 464static int nfs_parse_xprtsec_policy(struct fs_context *fc,
 465				    struct fs_parameter *param)
 466{
 467	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 468
 469	trace_nfs_mount_assign(param->key, param->string);
 470
 471	switch (lookup_constant(nfs_xprtsec_policies, param->string, -1)) {
 472	case Opt_xprtsec_none:
 473		ctx->xprtsec.policy = RPC_XPRTSEC_NONE;
 474		break;
 475	case Opt_xprtsec_tls:
 476		ctx->xprtsec.policy = RPC_XPRTSEC_TLS_ANON;
 477		break;
 478	case Opt_xprtsec_mtls:
 479		ctx->xprtsec.policy = RPC_XPRTSEC_TLS_X509;
 480		break;
 481	default:
 482		return nfs_invalf(fc, "NFS: Unrecognized transport security policy");
 483	}
 484	return 0;
 485}
 486
 487static int nfs_parse_version_string(struct fs_context *fc,
 488				    const char *string)
 489{
 490	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 491
 492	ctx->flags &= ~NFS_MOUNT_VER3;
 493	switch (lookup_constant(nfs_vers_tokens, string, -1)) {
 494	case Opt_vers_2:
 495		ctx->version = 2;
 496		break;
 497	case Opt_vers_3:
 498		ctx->flags |= NFS_MOUNT_VER3;
 499		ctx->version = 3;
 500		break;
 501	case Opt_vers_4:
 502		/* Backward compatibility option. In future,
 503		 * the mount program should always supply
 504		 * a NFSv4 minor version number.
 505		 */
 506		ctx->version = 4;
 507		break;
 508	case Opt_vers_4_0:
 509		ctx->version = 4;
 510		ctx->minorversion = 0;
 511		break;
 512	case Opt_vers_4_1:
 513		ctx->version = 4;
 514		ctx->minorversion = 1;
 515		break;
 516	case Opt_vers_4_2:
 517		ctx->version = 4;
 518		ctx->minorversion = 2;
 519		break;
 520	default:
 521		return nfs_invalf(fc, "NFS: Unsupported NFS version");
 522	}
 523	return 0;
 524}
 525
 526/*
 527 * Parse a single mount parameter.
 528 */
 529static int nfs_fs_context_parse_param(struct fs_context *fc,
 530				      struct fs_parameter *param)
 531{
 532	struct fs_parse_result result;
 533	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 534	unsigned short protofamily, mountfamily;
 535	unsigned int len;
 536	int ret, opt;
 537
 538	trace_nfs_mount_option(param);
 539
 540	opt = fs_parse(fc, nfs_fs_parameters, param, &result);
 541	if (opt < 0)
 542		return (opt == -ENOPARAM && ctx->sloppy) ? 1 : opt;
 543
 544	if (fc->security)
 545		ctx->has_sec_mnt_opts = 1;
 546
 547	switch (opt) {
 548	case Opt_source:
 549		if (fc->source)
 550			return nfs_invalf(fc, "NFS: Multiple sources not supported");
 551		fc->source = param->string;
 552		param->string = NULL;
 553		break;
 554
 555		/*
 556		 * boolean options:  foo/nofoo
 557		 */
 558	case Opt_soft:
 559		ctx->flags |= NFS_MOUNT_SOFT;
 560		ctx->flags &= ~NFS_MOUNT_SOFTERR;
 561		break;
 562	case Opt_softerr:
 563		ctx->flags |= NFS_MOUNT_SOFTERR | NFS_MOUNT_SOFTREVAL;
 564		ctx->flags &= ~NFS_MOUNT_SOFT;
 565		break;
 566	case Opt_hard:
 567		ctx->flags &= ~(NFS_MOUNT_SOFT |
 568				NFS_MOUNT_SOFTERR |
 569				NFS_MOUNT_SOFTREVAL);
 570		break;
 571	case Opt_softreval:
 572		if (result.negated)
 573			ctx->flags &= ~NFS_MOUNT_SOFTREVAL;
 574		else
 575			ctx->flags |= NFS_MOUNT_SOFTREVAL;
 576		break;
 577	case Opt_posix:
 578		if (result.negated)
 579			ctx->flags &= ~NFS_MOUNT_POSIX;
 580		else
 581			ctx->flags |= NFS_MOUNT_POSIX;
 582		break;
 583	case Opt_cto:
 584		if (result.negated)
 585			ctx->flags |= NFS_MOUNT_NOCTO;
 586		else
 587			ctx->flags &= ~NFS_MOUNT_NOCTO;
 588		break;
 589	case Opt_trunkdiscovery:
 590		if (result.negated)
 591			ctx->flags &= ~NFS_MOUNT_TRUNK_DISCOVERY;
 592		else
 593			ctx->flags |= NFS_MOUNT_TRUNK_DISCOVERY;
 594		break;
 595	case Opt_ac:
 596		if (result.negated)
 597			ctx->flags |= NFS_MOUNT_NOAC;
 598		else
 599			ctx->flags &= ~NFS_MOUNT_NOAC;
 600		break;
 601	case Opt_lock:
 602		if (result.negated) {
 603			ctx->flags |= NFS_MOUNT_NONLM;
 604			ctx->flags |= (NFS_MOUNT_LOCAL_FLOCK | NFS_MOUNT_LOCAL_FCNTL);
 605		} else {
 606			ctx->flags &= ~NFS_MOUNT_NONLM;
 607			ctx->flags &= ~(NFS_MOUNT_LOCAL_FLOCK | NFS_MOUNT_LOCAL_FCNTL);
 608		}
 609		break;
 610	case Opt_udp:
 611		ctx->flags &= ~NFS_MOUNT_TCP;
 612		ctx->nfs_server.protocol = XPRT_TRANSPORT_UDP;
 613		break;
 614	case Opt_tcp:
 615	case Opt_rdma:
 616		ctx->flags |= NFS_MOUNT_TCP; /* for side protocols */
 617		ret = xprt_find_transport_ident(param->key);
 618		if (ret < 0)
 619			goto out_bad_transport;
 620		ctx->nfs_server.protocol = ret;
 621		break;
 622	case Opt_acl:
 623		if (result.negated)
 624			ctx->flags |= NFS_MOUNT_NOACL;
 625		else
 626			ctx->flags &= ~NFS_MOUNT_NOACL;
 627		break;
 628	case Opt_rdirplus:
 629		if (result.negated)
 630			ctx->flags |= NFS_MOUNT_NORDIRPLUS;
 631		else
 632			ctx->flags &= ~NFS_MOUNT_NORDIRPLUS;
 633		break;
 634	case Opt_sharecache:
 635		if (result.negated)
 636			ctx->flags |= NFS_MOUNT_UNSHARED;
 637		else
 638			ctx->flags &= ~NFS_MOUNT_UNSHARED;
 639		break;
 640	case Opt_resvport:
 641		if (result.negated)
 642			ctx->flags |= NFS_MOUNT_NORESVPORT;
 643		else
 644			ctx->flags &= ~NFS_MOUNT_NORESVPORT;
 645		break;
 646	case Opt_fscache_flag:
 647		if (result.negated)
 648			ctx->options &= ~NFS_OPTION_FSCACHE;
 649		else
 650			ctx->options |= NFS_OPTION_FSCACHE;
 651		kfree(ctx->fscache_uniq);
 652		ctx->fscache_uniq = NULL;
 653		break;
 654	case Opt_fscache:
 655		ctx->options |= NFS_OPTION_FSCACHE;
 656		kfree(ctx->fscache_uniq);
 657		ctx->fscache_uniq = param->string;
 658		param->string = NULL;
 659		break;
 660	case Opt_migration:
 661		if (result.negated)
 662			ctx->options &= ~NFS_OPTION_MIGRATION;
 663		else
 664			ctx->options |= NFS_OPTION_MIGRATION;
 665		break;
 666
 667		/*
 668		 * options that take numeric values
 669		 */
 670	case Opt_port:
 671		if (result.uint_32 > USHRT_MAX)
 672			goto out_of_bounds;
 673		ctx->nfs_server.port = result.uint_32;
 674		break;
 675	case Opt_rsize:
 676		ctx->rsize = result.uint_32;
 677		break;
 678	case Opt_wsize:
 679		ctx->wsize = result.uint_32;
 680		break;
 681	case Opt_bsize:
 682		ctx->bsize = result.uint_32;
 683		break;
 684	case Opt_timeo:
 685		if (result.uint_32 < 1 || result.uint_32 > INT_MAX)
 686			goto out_of_bounds;
 687		ctx->timeo = result.uint_32;
 688		break;
 689	case Opt_retrans:
 690		if (result.uint_32 > INT_MAX)
 691			goto out_of_bounds;
 692		ctx->retrans = result.uint_32;
 693		break;
 694	case Opt_acregmin:
 695		ctx->acregmin = result.uint_32;
 696		break;
 697	case Opt_acregmax:
 698		ctx->acregmax = result.uint_32;
 699		break;
 700	case Opt_acdirmin:
 701		ctx->acdirmin = result.uint_32;
 702		break;
 703	case Opt_acdirmax:
 704		ctx->acdirmax = result.uint_32;
 705		break;
 706	case Opt_actimeo:
 707		ctx->acregmin = result.uint_32;
 708		ctx->acregmax = result.uint_32;
 709		ctx->acdirmin = result.uint_32;
 710		ctx->acdirmax = result.uint_32;
 711		break;
 712	case Opt_namelen:
 713		ctx->namlen = result.uint_32;
 714		break;
 715	case Opt_mountport:
 716		if (result.uint_32 > USHRT_MAX)
 717			goto out_of_bounds;
 718		ctx->mount_server.port = result.uint_32;
 719		break;
 720	case Opt_mountvers:
 721		if (result.uint_32 < NFS_MNT_VERSION ||
 722		    result.uint_32 > NFS_MNT3_VERSION)
 723			goto out_of_bounds;
 724		ctx->mount_server.version = result.uint_32;
 725		break;
 726	case Opt_minorversion:
 727		if (result.uint_32 > NFS4_MAX_MINOR_VERSION)
 728			goto out_of_bounds;
 729		ctx->minorversion = result.uint_32;
 730		break;
 731
 732		/*
 733		 * options that take text values
 734		 */
 735	case Opt_v:
 736		ret = nfs_parse_version_string(fc, param->key + 1);
 737		if (ret < 0)
 738			return ret;
 739		break;
 740	case Opt_vers:
 741		if (!param->string)
 742			goto out_invalid_value;
 743		trace_nfs_mount_assign(param->key, param->string);
 744		ret = nfs_parse_version_string(fc, param->string);
 745		if (ret < 0)
 746			return ret;
 747		break;
 748	case Opt_sec:
 749		ret = nfs_parse_security_flavors(fc, param);
 750		if (ret < 0)
 751			return ret;
 752		break;
 753	case Opt_xprtsec:
 754		ret = nfs_parse_xprtsec_policy(fc, param);
 755		if (ret < 0)
 756			return ret;
 757		break;
 758
 759	case Opt_proto:
 760		if (!param->string)
 761			goto out_invalid_value;
 762		trace_nfs_mount_assign(param->key, param->string);
 763		protofamily = AF_INET;
 764		switch (lookup_constant(nfs_xprt_protocol_tokens, param->string, -1)) {
 765		case Opt_xprt_udp6:
 766			protofamily = AF_INET6;
 767			fallthrough;
 768		case Opt_xprt_udp:
 769			ctx->flags &= ~NFS_MOUNT_TCP;
 770			ctx->nfs_server.protocol = XPRT_TRANSPORT_UDP;
 771			break;
 772		case Opt_xprt_tcp6:
 773			protofamily = AF_INET6;
 774			fallthrough;
 775		case Opt_xprt_tcp:
 776			ctx->flags |= NFS_MOUNT_TCP;
 777			ctx->nfs_server.protocol = XPRT_TRANSPORT_TCP;
 778			break;
 779		case Opt_xprt_rdma6:
 780			protofamily = AF_INET6;
 781			fallthrough;
 782		case Opt_xprt_rdma:
 783			/* vector side protocols to TCP */
 784			ctx->flags |= NFS_MOUNT_TCP;
 785			ret = xprt_find_transport_ident(param->string);
 786			if (ret < 0)
 787				goto out_bad_transport;
 788			ctx->nfs_server.protocol = ret;
 789			break;
 790		default:
 791			goto out_bad_transport;
 792		}
 793
 794		ctx->protofamily = protofamily;
 795		break;
 796
 797	case Opt_mountproto:
 798		if (!param->string)
 799			goto out_invalid_value;
 800		trace_nfs_mount_assign(param->key, param->string);
 801		mountfamily = AF_INET;
 802		switch (lookup_constant(nfs_xprt_protocol_tokens, param->string, -1)) {
 803		case Opt_xprt_udp6:
 804			mountfamily = AF_INET6;
 805			fallthrough;
 806		case Opt_xprt_udp:
 807			ctx->mount_server.protocol = XPRT_TRANSPORT_UDP;
 808			break;
 809		case Opt_xprt_tcp6:
 810			mountfamily = AF_INET6;
 811			fallthrough;
 812		case Opt_xprt_tcp:
 813			ctx->mount_server.protocol = XPRT_TRANSPORT_TCP;
 814			break;
 815		case Opt_xprt_rdma: /* not used for side protocols */
 816		default:
 817			goto out_bad_transport;
 818		}
 819		ctx->mountfamily = mountfamily;
 820		break;
 821
 822	case Opt_addr:
 823		trace_nfs_mount_assign(param->key, param->string);
 824		len = rpc_pton(fc->net_ns, param->string, param->size,
 825			       &ctx->nfs_server.address,
 826			       sizeof(ctx->nfs_server._address));
 827		if (len == 0)
 828			goto out_invalid_address;
 829		ctx->nfs_server.addrlen = len;
 830		break;
 831	case Opt_clientaddr:
 832		trace_nfs_mount_assign(param->key, param->string);
 833		kfree(ctx->client_address);
 834		ctx->client_address = param->string;
 835		param->string = NULL;
 836		break;
 837	case Opt_mounthost:
 838		trace_nfs_mount_assign(param->key, param->string);
 839		kfree(ctx->mount_server.hostname);
 840		ctx->mount_server.hostname = param->string;
 841		param->string = NULL;
 842		break;
 843	case Opt_mountaddr:
 844		trace_nfs_mount_assign(param->key, param->string);
 845		len = rpc_pton(fc->net_ns, param->string, param->size,
 846			       &ctx->mount_server.address,
 847			       sizeof(ctx->mount_server._address));
 848		if (len == 0)
 849			goto out_invalid_address;
 850		ctx->mount_server.addrlen = len;
 851		break;
 852	case Opt_nconnect:
 853		trace_nfs_mount_assign(param->key, param->string);
 854		if (result.uint_32 < 1 || result.uint_32 > NFS_MAX_CONNECTIONS)
 855			goto out_of_bounds;
 856		ctx->nfs_server.nconnect = result.uint_32;
 857		break;
 858	case Opt_max_connect:
 859		trace_nfs_mount_assign(param->key, param->string);
 860		if (result.uint_32 < 1 || result.uint_32 > NFS_MAX_TRANSPORTS)
 861			goto out_of_bounds;
 862		ctx->nfs_server.max_connect = result.uint_32;
 863		break;
 864	case Opt_lookupcache:
 865		trace_nfs_mount_assign(param->key, param->string);
 866		switch (result.uint_32) {
 867		case Opt_lookupcache_all:
 868			ctx->flags &= ~(NFS_MOUNT_LOOKUP_CACHE_NONEG|NFS_MOUNT_LOOKUP_CACHE_NONE);
 869			break;
 870		case Opt_lookupcache_positive:
 871			ctx->flags &= ~NFS_MOUNT_LOOKUP_CACHE_NONE;
 872			ctx->flags |= NFS_MOUNT_LOOKUP_CACHE_NONEG;
 873			break;
 874		case Opt_lookupcache_none:
 875			ctx->flags |= NFS_MOUNT_LOOKUP_CACHE_NONEG|NFS_MOUNT_LOOKUP_CACHE_NONE;
 876			break;
 877		default:
 878			goto out_invalid_value;
 879		}
 880		break;
 881	case Opt_local_lock:
 882		trace_nfs_mount_assign(param->key, param->string);
 883		switch (result.uint_32) {
 884		case Opt_local_lock_all:
 885			ctx->flags |= (NFS_MOUNT_LOCAL_FLOCK |
 886				       NFS_MOUNT_LOCAL_FCNTL);
 887			break;
 888		case Opt_local_lock_flock:
 889			ctx->flags |= NFS_MOUNT_LOCAL_FLOCK;
 890			break;
 891		case Opt_local_lock_posix:
 892			ctx->flags |= NFS_MOUNT_LOCAL_FCNTL;
 893			break;
 894		case Opt_local_lock_none:
 895			ctx->flags &= ~(NFS_MOUNT_LOCAL_FLOCK |
 896					NFS_MOUNT_LOCAL_FCNTL);
 897			break;
 898		default:
 899			goto out_invalid_value;
 900		}
 901		break;
 902	case Opt_write:
 903		trace_nfs_mount_assign(param->key, param->string);
 904		switch (result.uint_32) {
 905		case Opt_write_lazy:
 906			ctx->flags &=
 907				~(NFS_MOUNT_WRITE_EAGER | NFS_MOUNT_WRITE_WAIT);
 908			break;
 909		case Opt_write_eager:
 910			ctx->flags |= NFS_MOUNT_WRITE_EAGER;
 911			ctx->flags &= ~NFS_MOUNT_WRITE_WAIT;
 912			break;
 913		case Opt_write_wait:
 914			ctx->flags |=
 915				NFS_MOUNT_WRITE_EAGER | NFS_MOUNT_WRITE_WAIT;
 916			break;
 917		default:
 918			goto out_invalid_value;
 919		}
 920		break;
 921
 922		/*
 923		 * Special options
 924		 */
 925	case Opt_sloppy:
 926		ctx->sloppy = true;
 927		break;
 928	}
 929
 930	return 0;
 931
 932out_invalid_value:
 933	return nfs_invalf(fc, "NFS: Bad mount option value specified");
 934out_invalid_address:
 935	return nfs_invalf(fc, "NFS: Bad IP address specified");
 936out_of_bounds:
 937	return nfs_invalf(fc, "NFS: Value for '%s' out of range", param->key);
 938out_bad_transport:
 939	return nfs_invalf(fc, "NFS: Unrecognized transport protocol");
 940}
 941
 942/*
 943 * Split fc->source into "hostname:export_path".
 944 *
 945 * The leftmost colon demarks the split between the server's hostname
 946 * and the export path.  If the hostname starts with a left square
 947 * bracket, then it may contain colons.
 948 *
 949 * Note: caller frees hostname and export path, even on error.
 950 */
 951static int nfs_parse_source(struct fs_context *fc,
 952			    size_t maxnamlen, size_t maxpathlen)
 953{
 954	struct nfs_fs_context *ctx = nfs_fc2context(fc);
 955	const char *dev_name = fc->source;
 956	size_t len;
 957	const char *end;
 958
 959	if (unlikely(!dev_name || !*dev_name))
 960		return -EINVAL;
 961
 962	/* Is the host name protected with square brakcets? */
 963	if (*dev_name == '[') {
 964		end = strchr(++dev_name, ']');
 965		if (end == NULL || end[1] != ':')
 966			goto out_bad_devname;
 967
 968		len = end - dev_name;
 969		end++;
 970	} else {
 971		const char *comma;
 972
 973		end = strchr(dev_name, ':');
 974		if (end == NULL)
 975			goto out_bad_devname;
 976		len = end - dev_name;
 977
 978		/* kill possible hostname list: not supported */
 979		comma = memchr(dev_name, ',', len);
 980		if (comma)
 981			len = comma - dev_name;
 982	}
 983
 984	if (len > maxnamlen)
 985		goto out_hostname;
 986
 987	kfree(ctx->nfs_server.hostname);
 988
 989	/* N.B. caller will free nfs_server.hostname in all cases */
 990	ctx->nfs_server.hostname = kmemdup_nul(dev_name, len, GFP_KERNEL);
 991	if (!ctx->nfs_server.hostname)
 992		goto out_nomem;
 993	len = strlen(++end);
 994	if (len > maxpathlen)
 995		goto out_path;
 996	ctx->nfs_server.export_path = kmemdup_nul(end, len, GFP_KERNEL);
 997	if (!ctx->nfs_server.export_path)
 998		goto out_nomem;
 999
1000	trace_nfs_mount_path(ctx->nfs_server.export_path);
1001	return 0;
1002
1003out_bad_devname:
1004	return nfs_invalf(fc, "NFS: device name not in host:path format");
1005out_nomem:
1006	nfs_errorf(fc, "NFS: not enough memory to parse device name");
1007	return -ENOMEM;
1008out_hostname:
1009	nfs_errorf(fc, "NFS: server hostname too long");
1010	return -ENAMETOOLONG;
1011out_path:
1012	nfs_errorf(fc, "NFS: export pathname too long");
1013	return -ENAMETOOLONG;
1014}
1015
1016static inline bool is_remount_fc(struct fs_context *fc)
1017{
1018	return fc->root != NULL;
1019}
1020
1021/*
1022 * Parse monolithic NFS2/NFS3 mount data
1023 * - fills in the mount root filehandle
1024 *
1025 * For option strings, user space handles the following behaviors:
1026 *
1027 * + DNS: mapping server host name to IP address ("addr=" option)
1028 *
1029 * + failure mode: how to behave if a mount request can't be handled
1030 *   immediately ("fg/bg" option)
1031 *
1032 * + retry: how often to retry a mount request ("retry=" option)
1033 *
1034 * + breaking back: trying proto=udp after proto=tcp, v2 after v3,
1035 *   mountproto=tcp after mountproto=udp, and so on
1036 */
1037static int nfs23_parse_monolithic(struct fs_context *fc,
1038				  struct nfs_mount_data *data)
1039{
1040	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1041	struct nfs_fh *mntfh = ctx->mntfh;
1042	struct sockaddr_storage *sap = &ctx->nfs_server._address;
1043	int extra_flags = NFS_MOUNT_LEGACY_INTERFACE;
1044	int ret;
1045
1046	if (data == NULL)
1047		goto out_no_data;
1048
1049	ctx->version = NFS_DEFAULT_VERSION;
1050	switch (data->version) {
1051	case 1:
1052		data->namlen = 0;
1053		fallthrough;
1054	case 2:
1055		data->bsize = 0;
1056		fallthrough;
1057	case 3:
1058		if (data->flags & NFS_MOUNT_VER3)
1059			goto out_no_v3;
1060		data->root.size = NFS2_FHSIZE;
1061		memcpy(data->root.data, data->old_root.data, NFS2_FHSIZE);
1062		/* Turn off security negotiation */
1063		extra_flags |= NFS_MOUNT_SECFLAVOUR;
1064		fallthrough;
1065	case 4:
1066		if (data->flags & NFS_MOUNT_SECFLAVOUR)
1067			goto out_no_sec;
1068		fallthrough;
1069	case 5:
1070		memset(data->context, 0, sizeof(data->context));
1071		fallthrough;
1072	case 6:
1073		if (data->flags & NFS_MOUNT_VER3) {
1074			if (data->root.size > NFS3_FHSIZE || data->root.size == 0)
1075				goto out_invalid_fh;
1076			mntfh->size = data->root.size;
1077			ctx->version = 3;
1078		} else {
1079			mntfh->size = NFS2_FHSIZE;
1080			ctx->version = 2;
1081		}
1082
1083
1084		memcpy(mntfh->data, data->root.data, mntfh->size);
1085		if (mntfh->size < sizeof(mntfh->data))
1086			memset(mntfh->data + mntfh->size, 0,
1087			       sizeof(mntfh->data) - mntfh->size);
1088
1089		/*
1090		 * for proto == XPRT_TRANSPORT_UDP, which is what uses
1091		 * to_exponential, implying shift: limit the shift value
1092		 * to BITS_PER_LONG (majortimeo is unsigned long)
1093		 */
1094		if (!(data->flags & NFS_MOUNT_TCP)) /* this will be UDP */
1095			if (data->retrans >= 64) /* shift value is too large */
1096				goto out_invalid_data;
1097
1098		/*
1099		 * Translate to nfs_fs_context, which nfs_fill_super
1100		 * can deal with.
1101		 */
1102		ctx->flags	= data->flags & NFS_MOUNT_FLAGMASK;
1103		ctx->flags	|= extra_flags;
1104		ctx->rsize	= data->rsize;
1105		ctx->wsize	= data->wsize;
1106		ctx->timeo	= data->timeo;
1107		ctx->retrans	= data->retrans;
1108		ctx->acregmin	= data->acregmin;
1109		ctx->acregmax	= data->acregmax;
1110		ctx->acdirmin	= data->acdirmin;
1111		ctx->acdirmax	= data->acdirmax;
1112		ctx->need_mount	= false;
1113
1114		memcpy(sap, &data->addr, sizeof(data->addr));
1115		ctx->nfs_server.addrlen = sizeof(data->addr);
1116		ctx->nfs_server.port = ntohs(data->addr.sin_port);
1117		if (sap->ss_family != AF_INET ||
1118		    !nfs_verify_server_address(sap))
1119			goto out_no_address;
1120
1121		if (!(data->flags & NFS_MOUNT_TCP))
1122			ctx->nfs_server.protocol = XPRT_TRANSPORT_UDP;
1123		/* N.B. caller will free nfs_server.hostname in all cases */
1124		ctx->nfs_server.hostname = kstrdup(data->hostname, GFP_KERNEL);
1125		if (!ctx->nfs_server.hostname)
1126			goto out_nomem;
1127
1128		ctx->namlen		= data->namlen;
1129		ctx->bsize		= data->bsize;
1130
1131		if (data->flags & NFS_MOUNT_SECFLAVOUR)
1132			ctx->selected_flavor = data->pseudoflavor;
1133		else
1134			ctx->selected_flavor = RPC_AUTH_UNIX;
1135
1136		if (!(data->flags & NFS_MOUNT_NONLM))
1137			ctx->flags &= ~(NFS_MOUNT_LOCAL_FLOCK|
1138					 NFS_MOUNT_LOCAL_FCNTL);
1139		else
1140			ctx->flags |= (NFS_MOUNT_LOCAL_FLOCK|
1141					NFS_MOUNT_LOCAL_FCNTL);
1142
1143		/*
1144		 * The legacy version 6 binary mount data from userspace has a
1145		 * field used only to transport selinux information into the
1146		 * kernel.  To continue to support that functionality we
1147		 * have a touch of selinux knowledge here in the NFS code. The
1148		 * userspace code converted context=blah to just blah so we are
1149		 * converting back to the full string selinux understands.
1150		 */
1151		if (data->context[0]){
1152#ifdef CONFIG_SECURITY_SELINUX
1153			int ret;
1154
1155			data->context[NFS_MAX_CONTEXT_LEN] = '\0';
1156			ret = vfs_parse_fs_string(fc, "context",
1157						  data->context, strlen(data->context));
1158			if (ret < 0)
1159				return ret;
1160#else
1161			return -EINVAL;
1162#endif
1163		}
1164
1165		break;
1166	default:
1167		goto generic;
1168	}
1169
1170	ret = nfs_validate_transport_protocol(fc, ctx);
1171	if (ret)
1172		return ret;
1173
1174	ctx->skip_reconfig_option_check = true;
1175	return 0;
1176
1177generic:
1178	return generic_parse_monolithic(fc, data);
1179
1180out_no_data:
1181	if (is_remount_fc(fc)) {
1182		ctx->skip_reconfig_option_check = true;
1183		return 0;
1184	}
1185	return nfs_invalf(fc, "NFS: mount program didn't pass any mount data");
1186
1187out_no_v3:
1188	return nfs_invalf(fc, "NFS: nfs_mount_data version does not support v3");
1189
1190out_no_sec:
1191	return nfs_invalf(fc, "NFS: nfs_mount_data version supports only AUTH_SYS");
1192
1193out_nomem:
1194	return -ENOMEM;
1195
1196out_no_address:
1197	return nfs_invalf(fc, "NFS: mount program didn't pass remote address");
1198
1199out_invalid_fh:
1200	return nfs_invalf(fc, "NFS: invalid root filehandle");
1201
1202out_invalid_data:
1203	return nfs_invalf(fc, "NFS: invalid binary mount data");
1204}
1205
1206#if IS_ENABLED(CONFIG_NFS_V4)
1207struct compat_nfs_string {
1208	compat_uint_t len;
1209	compat_uptr_t data;
1210};
1211
1212static inline void compat_nfs_string(struct nfs_string *dst,
1213				     struct compat_nfs_string *src)
1214{
1215	dst->data = compat_ptr(src->data);
1216	dst->len = src->len;
1217}
1218
1219struct compat_nfs4_mount_data_v1 {
1220	compat_int_t version;
1221	compat_int_t flags;
1222	compat_int_t rsize;
1223	compat_int_t wsize;
1224	compat_int_t timeo;
1225	compat_int_t retrans;
1226	compat_int_t acregmin;
1227	compat_int_t acregmax;
1228	compat_int_t acdirmin;
1229	compat_int_t acdirmax;
1230	struct compat_nfs_string client_addr;
1231	struct compat_nfs_string mnt_path;
1232	struct compat_nfs_string hostname;
1233	compat_uint_t host_addrlen;
1234	compat_uptr_t host_addr;
1235	compat_int_t proto;
1236	compat_int_t auth_flavourlen;
1237	compat_uptr_t auth_flavours;
1238};
1239
1240static void nfs4_compat_mount_data_conv(struct nfs4_mount_data *data)
1241{
1242	struct compat_nfs4_mount_data_v1 *compat =
1243			(struct compat_nfs4_mount_data_v1 *)data;
1244
1245	/* copy the fields backwards */
1246	data->auth_flavours = compat_ptr(compat->auth_flavours);
1247	data->auth_flavourlen = compat->auth_flavourlen;
1248	data->proto = compat->proto;
1249	data->host_addr = compat_ptr(compat->host_addr);
1250	data->host_addrlen = compat->host_addrlen;
1251	compat_nfs_string(&data->hostname, &compat->hostname);
1252	compat_nfs_string(&data->mnt_path, &compat->mnt_path);
1253	compat_nfs_string(&data->client_addr, &compat->client_addr);
1254	data->acdirmax = compat->acdirmax;
1255	data->acdirmin = compat->acdirmin;
1256	data->acregmax = compat->acregmax;
1257	data->acregmin = compat->acregmin;
1258	data->retrans = compat->retrans;
1259	data->timeo = compat->timeo;
1260	data->wsize = compat->wsize;
1261	data->rsize = compat->rsize;
1262	data->flags = compat->flags;
1263	data->version = compat->version;
1264}
1265
1266/*
1267 * Validate NFSv4 mount options
1268 */
1269static int nfs4_parse_monolithic(struct fs_context *fc,
1270				 struct nfs4_mount_data *data)
1271{
1272	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1273	struct sockaddr_storage *sap = &ctx->nfs_server._address;
1274	int ret;
1275	char *c;
1276
1277	if (!data) {
1278		if (is_remount_fc(fc))
1279			goto done;
1280		return nfs_invalf(fc,
1281			"NFS4: mount program didn't pass any mount data");
1282	}
1283
1284	ctx->version = 4;
1285
1286	if (data->version != 1)
1287		return generic_parse_monolithic(fc, data);
1288
1289	if (in_compat_syscall())
1290		nfs4_compat_mount_data_conv(data);
1291
1292	if (data->host_addrlen > sizeof(ctx->nfs_server.address))
1293		goto out_no_address;
1294	if (data->host_addrlen == 0)
1295		goto out_no_address;
1296	ctx->nfs_server.addrlen = data->host_addrlen;
1297	if (copy_from_user(sap, data->host_addr, data->host_addrlen))
1298		return -EFAULT;
1299	if (!nfs_verify_server_address(sap))
1300		goto out_no_address;
1301	ctx->nfs_server.port = ntohs(((struct sockaddr_in *)sap)->sin_port);
1302
1303	if (data->auth_flavourlen) {
1304		rpc_authflavor_t pseudoflavor;
1305
1306		if (data->auth_flavourlen > 1)
1307			goto out_inval_auth;
1308		if (copy_from_user(&pseudoflavor, data->auth_flavours,
1309				   sizeof(pseudoflavor)))
1310			return -EFAULT;
1311		ctx->selected_flavor = pseudoflavor;
1312	} else {
1313		ctx->selected_flavor = RPC_AUTH_UNIX;
1314	}
1315
1316	c = strndup_user(data->hostname.data, NFS4_MAXNAMLEN);
1317	if (IS_ERR(c))
1318		return PTR_ERR(c);
1319	ctx->nfs_server.hostname = c;
1320
1321	c = strndup_user(data->mnt_path.data, NFS4_MAXPATHLEN);
1322	if (IS_ERR(c))
1323		return PTR_ERR(c);
1324	ctx->nfs_server.export_path = c;
1325	trace_nfs_mount_path(c);
1326
1327	c = strndup_user(data->client_addr.data, 16);
1328	if (IS_ERR(c))
1329		return PTR_ERR(c);
1330	ctx->client_address = c;
1331
1332	/*
1333	 * Translate to nfs_fs_context, which nfs_fill_super
1334	 * can deal with.
1335	 */
1336
1337	ctx->flags	= data->flags & NFS4_MOUNT_FLAGMASK;
1338	ctx->rsize	= data->rsize;
1339	ctx->wsize	= data->wsize;
1340	ctx->timeo	= data->timeo;
1341	ctx->retrans	= data->retrans;
1342	ctx->acregmin	= data->acregmin;
1343	ctx->acregmax	= data->acregmax;
1344	ctx->acdirmin	= data->acdirmin;
1345	ctx->acdirmax	= data->acdirmax;
1346	ctx->nfs_server.protocol = data->proto;
1347	ret = nfs_validate_transport_protocol(fc, ctx);
1348	if (ret)
1349		return ret;
1350done:
1351	ctx->skip_reconfig_option_check = true;
1352	return 0;
1353
1354out_inval_auth:
1355	return nfs_invalf(fc, "NFS4: Invalid number of RPC auth flavours %d",
1356		      data->auth_flavourlen);
1357
1358out_no_address:
1359	return nfs_invalf(fc, "NFS4: mount program didn't pass remote address");
1360}
1361#endif
1362
1363/*
1364 * Parse a monolithic block of data from sys_mount().
1365 */
1366static int nfs_fs_context_parse_monolithic(struct fs_context *fc,
1367					   void *data)
1368{
1369	if (fc->fs_type == &nfs_fs_type)
1370		return nfs23_parse_monolithic(fc, data);
1371
1372#if IS_ENABLED(CONFIG_NFS_V4)
1373	if (fc->fs_type == &nfs4_fs_type)
1374		return nfs4_parse_monolithic(fc, data);
1375#endif
1376
1377	return nfs_invalf(fc, "NFS: Unsupported monolithic data version");
1378}
1379
1380/*
1381 * Validate the preparsed information in the config.
1382 */
1383static int nfs_fs_context_validate(struct fs_context *fc)
1384{
1385	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1386	struct nfs_subversion *nfs_mod;
1387	struct sockaddr_storage *sap = &ctx->nfs_server._address;
1388	int max_namelen = PAGE_SIZE;
1389	int max_pathlen = NFS_MAXPATHLEN;
1390	int port = 0;
1391	int ret;
1392
1393	if (!fc->source)
1394		goto out_no_device_name;
1395
1396	/* Check for sanity first. */
1397	if (ctx->minorversion && ctx->version != 4)
1398		goto out_minorversion_mismatch;
1399
1400	if (ctx->options & NFS_OPTION_MIGRATION &&
1401	    (ctx->version != 4 || ctx->minorversion != 0))
1402		goto out_migration_misuse;
1403
1404	/* Verify that any proto=/mountproto= options match the address
1405	 * families in the addr=/mountaddr= options.
1406	 */
1407	if (ctx->protofamily != AF_UNSPEC &&
1408	    ctx->protofamily != ctx->nfs_server.address.sa_family)
1409		goto out_proto_mismatch;
1410
1411	if (ctx->mountfamily != AF_UNSPEC) {
1412		if (ctx->mount_server.addrlen) {
1413			if (ctx->mountfamily != ctx->mount_server.address.sa_family)
1414				goto out_mountproto_mismatch;
1415		} else {
1416			if (ctx->mountfamily != ctx->nfs_server.address.sa_family)
1417				goto out_mountproto_mismatch;
1418		}
1419	}
1420
1421	if (!nfs_verify_server_address(sap))
1422		goto out_no_address;
1423
1424	ret = nfs_validate_transport_protocol(fc, ctx);
1425	if (ret)
1426		return ret;
1427
1428	if (ctx->version == 4) {
1429		if (IS_ENABLED(CONFIG_NFS_V4)) {
1430			if (ctx->nfs_server.protocol == XPRT_TRANSPORT_RDMA)
1431				port = NFS_RDMA_PORT;
1432			else
1433				port = NFS_PORT;
1434			max_namelen = NFS4_MAXNAMLEN;
1435			max_pathlen = NFS4_MAXPATHLEN;
1436			ctx->flags &= ~(NFS_MOUNT_NONLM | NFS_MOUNT_NOACL |
1437					NFS_MOUNT_VER3 | NFS_MOUNT_LOCAL_FLOCK |
1438					NFS_MOUNT_LOCAL_FCNTL);
1439		} else {
1440			goto out_v4_not_compiled;
1441		}
1442	} else {
1443		nfs_set_mount_transport_protocol(ctx);
1444		if (ctx->nfs_server.protocol == XPRT_TRANSPORT_RDMA)
1445			port = NFS_RDMA_PORT;
1446	}
1447
1448	nfs_set_port(sap, &ctx->nfs_server.port, port);
1449
1450	ret = nfs_parse_source(fc, max_namelen, max_pathlen);
1451	if (ret < 0)
1452		return ret;
1453
1454	/* Load the NFS protocol module if we haven't done so yet */
1455	if (!ctx->nfs_mod) {
1456		nfs_mod = get_nfs_version(ctx->version);
1457		if (IS_ERR(nfs_mod)) {
1458			ret = PTR_ERR(nfs_mod);
1459			goto out_version_unavailable;
1460		}
1461		ctx->nfs_mod = nfs_mod;
1462	}
1463
1464	/* Ensure the filesystem context has the correct fs_type */
1465	if (fc->fs_type != ctx->nfs_mod->nfs_fs) {
1466		module_put(fc->fs_type->owner);
1467		__module_get(ctx->nfs_mod->nfs_fs->owner);
1468		fc->fs_type = ctx->nfs_mod->nfs_fs;
1469	}
1470	return 0;
1471
1472out_no_device_name:
1473	return nfs_invalf(fc, "NFS: Device name not specified");
1474out_v4_not_compiled:
1475	nfs_errorf(fc, "NFS: NFSv4 is not compiled into kernel");
1476	return -EPROTONOSUPPORT;
1477out_no_address:
1478	return nfs_invalf(fc, "NFS: mount program didn't pass remote address");
1479out_mountproto_mismatch:
1480	return nfs_invalf(fc, "NFS: Mount server address does not match mountproto= option");
1481out_proto_mismatch:
1482	return nfs_invalf(fc, "NFS: Server address does not match proto= option");
1483out_minorversion_mismatch:
1484	return nfs_invalf(fc, "NFS: Mount option vers=%u does not support minorversion=%u",
1485			  ctx->version, ctx->minorversion);
1486out_migration_misuse:
1487	return nfs_invalf(fc, "NFS: 'Migration' not supported for this NFS version");
1488out_version_unavailable:
1489	nfs_errorf(fc, "NFS: Version unavailable");
1490	return ret;
1491}
1492
1493/*
1494 * Create an NFS superblock by the appropriate method.
1495 */
1496static int nfs_get_tree(struct fs_context *fc)
1497{
1498	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1499	int err = nfs_fs_context_validate(fc);
1500
1501	if (err)
1502		return err;
1503	if (!ctx->internal)
1504		return ctx->nfs_mod->rpc_ops->try_get_tree(fc);
1505	else
1506		return nfs_get_tree_common(fc);
1507}
1508
1509/*
1510 * Handle duplication of a configuration.  The caller copied *src into *sc, but
1511 * it can't deal with resource pointers in the filesystem context, so we have
1512 * to do that.  We need to clear pointers, copy data or get extra refs as
1513 * appropriate.
1514 */
1515static int nfs_fs_context_dup(struct fs_context *fc, struct fs_context *src_fc)
1516{
1517	struct nfs_fs_context *src = nfs_fc2context(src_fc), *ctx;
1518
1519	ctx = kmemdup(src, sizeof(struct nfs_fs_context), GFP_KERNEL);
1520	if (!ctx)
1521		return -ENOMEM;
1522
1523	ctx->mntfh = nfs_alloc_fhandle();
1524	if (!ctx->mntfh) {
1525		kfree(ctx);
1526		return -ENOMEM;
1527	}
1528	nfs_copy_fh(ctx->mntfh, src->mntfh);
1529
1530	__module_get(ctx->nfs_mod->owner);
1531	ctx->client_address		= NULL;
1532	ctx->mount_server.hostname	= NULL;
1533	ctx->nfs_server.export_path	= NULL;
1534	ctx->nfs_server.hostname	= NULL;
1535	ctx->fscache_uniq		= NULL;
1536	ctx->clone_data.fattr		= NULL;
1537	fc->fs_private = ctx;
1538	return 0;
1539}
1540
1541static void nfs_fs_context_free(struct fs_context *fc)
1542{
1543	struct nfs_fs_context *ctx = nfs_fc2context(fc);
1544
1545	if (ctx) {
1546		if (ctx->server)
1547			nfs_free_server(ctx->server);
1548		if (ctx->nfs_mod)
1549			put_nfs_version(ctx->nfs_mod);
1550		kfree(ctx->client_address);
1551		kfree(ctx->mount_server.hostname);
1552		kfree(ctx->nfs_server.export_path);
1553		kfree(ctx->nfs_server.hostname);
1554		kfree(ctx->fscache_uniq);
1555		nfs_free_fhandle(ctx->mntfh);
1556		nfs_free_fattr(ctx->clone_data.fattr);
1557		kfree(ctx);
1558	}
1559}
1560
1561static const struct fs_context_operations nfs_fs_context_ops = {
1562	.free			= nfs_fs_context_free,
1563	.dup			= nfs_fs_context_dup,
1564	.parse_param		= nfs_fs_context_parse_param,
1565	.parse_monolithic	= nfs_fs_context_parse_monolithic,
1566	.get_tree		= nfs_get_tree,
1567	.reconfigure		= nfs_reconfigure,
1568};
1569
1570/*
1571 * Prepare superblock configuration.  We use the namespaces attached to the
1572 * context.  This may be the current process's namespaces, or it may be a
1573 * container's namespaces.
1574 */
1575static int nfs_init_fs_context(struct fs_context *fc)
1576{
1577	struct nfs_fs_context *ctx;
1578
1579	ctx = kzalloc(sizeof(struct nfs_fs_context), GFP_KERNEL);
1580	if (unlikely(!ctx))
1581		return -ENOMEM;
1582
1583	ctx->mntfh = nfs_alloc_fhandle();
1584	if (unlikely(!ctx->mntfh)) {
1585		kfree(ctx);
1586		return -ENOMEM;
1587	}
1588
1589	ctx->protofamily	= AF_UNSPEC;
1590	ctx->mountfamily	= AF_UNSPEC;
1591	ctx->mount_server.port	= NFS_UNSPEC_PORT;
1592
1593	if (fc->root) {
1594		/* reconfigure, start with the current config */
1595		struct nfs_server *nfss = fc->root->d_sb->s_fs_info;
1596		struct net *net = nfss->nfs_client->cl_net;
1597
1598		ctx->flags		= nfss->flags;
1599		ctx->rsize		= nfss->rsize;
1600		ctx->wsize		= nfss->wsize;
1601		ctx->retrans		= nfss->client->cl_timeout->to_retries;
1602		ctx->selected_flavor	= nfss->client->cl_auth->au_flavor;
1603		ctx->acregmin		= nfss->acregmin / HZ;
1604		ctx->acregmax		= nfss->acregmax / HZ;
1605		ctx->acdirmin		= nfss->acdirmin / HZ;
1606		ctx->acdirmax		= nfss->acdirmax / HZ;
1607		ctx->timeo		= 10U * nfss->client->cl_timeout->to_initval / HZ;
1608		ctx->nfs_server.port	= nfss->port;
1609		ctx->nfs_server.addrlen	= nfss->nfs_client->cl_addrlen;
1610		ctx->version		= nfss->nfs_client->rpc_ops->version;
1611		ctx->minorversion	= nfss->nfs_client->cl_minorversion;
1612
1613		memcpy(&ctx->nfs_server._address, &nfss->nfs_client->cl_addr,
1614			ctx->nfs_server.addrlen);
1615
1616		if (fc->net_ns != net) {
1617			put_net(fc->net_ns);
1618			fc->net_ns = get_net(net);
1619		}
1620
1621		ctx->nfs_mod = nfss->nfs_client->cl_nfs_mod;
1622		__module_get(ctx->nfs_mod->owner);
1623	} else {
1624		/* defaults */
1625		ctx->timeo		= NFS_UNSPEC_TIMEO;
1626		ctx->retrans		= NFS_UNSPEC_RETRANS;
1627		ctx->acregmin		= NFS_DEF_ACREGMIN;
1628		ctx->acregmax		= NFS_DEF_ACREGMAX;
1629		ctx->acdirmin		= NFS_DEF_ACDIRMIN;
1630		ctx->acdirmax		= NFS_DEF_ACDIRMAX;
1631		ctx->nfs_server.port	= NFS_UNSPEC_PORT;
1632		ctx->nfs_server.protocol = XPRT_TRANSPORT_TCP;
1633		ctx->selected_flavor	= RPC_AUTH_MAXFLAVOR;
1634		ctx->minorversion	= 0;
1635		ctx->need_mount		= true;
1636		ctx->xprtsec.policy	= RPC_XPRTSEC_NONE;
1637		ctx->xprtsec.cert_serial	= TLS_NO_CERT;
1638		ctx->xprtsec.privkey_serial	= TLS_NO_PRIVKEY;
1639
1640		fc->s_iflags		|= SB_I_STABLE_WRITES;
1641	}
1642	fc->fs_private = ctx;
1643	fc->ops = &nfs_fs_context_ops;
1644	return 0;
1645}
1646
1647struct file_system_type nfs_fs_type = {
1648	.owner			= THIS_MODULE,
1649	.name			= "nfs",
1650	.init_fs_context	= nfs_init_fs_context,
1651	.parameters		= nfs_fs_parameters,
1652	.kill_sb		= nfs_kill_super,
1653	.fs_flags		= FS_RENAME_DOES_D_MOVE|FS_BINARY_MOUNTDATA,
1654};
1655MODULE_ALIAS_FS("nfs");
1656EXPORT_SYMBOL_GPL(nfs_fs_type);
1657
1658#if IS_ENABLED(CONFIG_NFS_V4)
1659struct file_system_type nfs4_fs_type = {
1660	.owner			= THIS_MODULE,
1661	.name			= "nfs4",
1662	.init_fs_context	= nfs_init_fs_context,
1663	.parameters		= nfs_fs_parameters,
1664	.kill_sb		= nfs_kill_super,
1665	.fs_flags		= FS_RENAME_DOES_D_MOVE|FS_BINARY_MOUNTDATA,
1666};
1667MODULE_ALIAS_FS("nfs4");
1668MODULE_ALIAS("nfs4");
1669EXPORT_SYMBOL_GPL(nfs4_fs_type);
1670#endif /* CONFIG_NFS_V4 */