]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blame - fs/nfsd/nfs4xdr.c
NFSD: Fix handling of oversized NFSv4 COMPOUND requests
[mirror_ubuntu-jammy-kernel.git] / fs / nfsd / nfs4xdr.c
CommitLineData
1da177e4 1/*
1da177e4
LT
2 * Server-side XDR for NFSv4
3 *
4 * Copyright (c) 2002 The Regents of the University of Michigan.
5 * All rights reserved.
6 *
7 * Kendrick Smith <kmsmith@umich.edu>
8 * Andy Adamson <andros@umich.edu>
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 *
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the University nor the names of its
20 * contributors may be used to endorse or promote products derived
21 * from this software without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
1da177e4
LT
34 */
35
96bcad50 36#include <linux/file.h>
5a0e3ad6 37#include <linux/slab.h>
1da177e4 38#include <linux/namei.h>
341eb184 39#include <linux/statfs.h>
0733d213 40#include <linux/utsname.h>
17456804 41#include <linux/pagemap.h>
4796f457 42#include <linux/sunrpc/svcauth_gss.h>
84e1b21d 43#include <linux/sunrpc/addr.h>
23e50fe3
FL
44#include <linux/xattr.h>
45#include <uapi/linux/xattr.h>
9a74af21 46
2ca72e17
BF
47#include "idmap.h"
48#include "acl.h"
9a74af21 49#include "xdr4.h"
0a3adade 50#include "vfs.h"
17456804 51#include "state.h"
1091006c 52#include "cache.h"
3d733711 53#include "netns.h"
9cf514cc 54#include "pnfs.h"
5c4583b2 55#include "filecache.h"
2ca72e17 56
08281341
CL
57#include "trace.h"
58
18032ca0
DQ
59#ifdef CONFIG_NFSD_V4_SECURITY_LABEL
60#include <linux/security.h>
61#endif
62
63
1da177e4
LT
64#define NFSDDBG_FACILITY NFSDDBG_XDR
65
5cf23dbb 66const u32 nfsd_suppattrs[3][3] = {
916d2d84
BF
67 {NFSD4_SUPPORTED_ATTRS_WORD0,
68 NFSD4_SUPPORTED_ATTRS_WORD1,
69 NFSD4_SUPPORTED_ATTRS_WORD2},
70
71 {NFSD4_1_SUPPORTED_ATTRS_WORD0,
72 NFSD4_1_SUPPORTED_ATTRS_WORD1,
73 NFSD4_1_SUPPORTED_ATTRS_WORD2},
74
75 {NFSD4_1_SUPPORTED_ATTRS_WORD0,
76 NFSD4_1_SUPPORTED_ATTRS_WORD1,
77 NFSD4_2_SUPPORTED_ATTRS_WORD2},
78};
79
42ca0993
BF
80/*
81 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
82 * directory in order to indicate to the client that a filesystem boundary is present
83 * We use a fixed fsid for a referral
84 */
85#define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL
86#define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL
87
b37ad28b 88static __be32
a36b1725 89check_filename(char *str, int len)
1da177e4
LT
90{
91 int i;
92
93 if (len == 0)
94 return nfserr_inval;
000dfa18
CL
95 if (len > NFS4_MAXNAMLEN)
96 return nfserr_nametoolong;
1da177e4 97 if (isdotent(str, len))
a36b1725 98 return nfserr_badname;
1da177e4
LT
99 for (i = 0; i < len; i++)
100 if (str[i] == '/')
a36b1725 101 return nfserr_badname;
1da177e4
LT
102 return 0;
103}
104
60adfc50
AA
105static int zero_clientid(clientid_t *clid)
106{
107 return (clid->cl_boot == 0) && (clid->cl_id == 0);
108}
109
2d8498db 110/**
d5e23383 111 * svcxdr_tmpalloc - allocate memory to be freed after compound processing
ce043ac8 112 * @argp: NFSv4 compound argument structure
ed992753 113 * @len: length of buffer to allocate
2d8498db 114 *
ed992753
TM
115 * Allocates a buffer of size @len to be freed when processing the compound
116 * operation described in @argp finishes.
2d8498db 117 */
d5e23383
BF
118static void *
119svcxdr_tmpalloc(struct nfsd4_compoundargs *argp, u32 len)
1da177e4 120{
d5e23383 121 struct svcxdr_tmpbuf *tb;
1da177e4 122
d5e23383 123 tb = kmalloc(sizeof(*tb) + len, GFP_KERNEL);
1da177e4 124 if (!tb)
d5e23383 125 return NULL;
1da177e4
LT
126 tb->next = argp->to_free;
127 argp->to_free = tb;
d5e23383 128 return tb->buf;
1da177e4
LT
129}
130
29c353b3
BF
131/*
132 * For xdr strings that need to be passed to other kernel api's
133 * as null-terminated strings.
134 *
135 * Note null-terminating in place usually isn't safe since the
136 * buffer might end on a page boundary.
137 */
138static char *
139svcxdr_dupstr(struct nfsd4_compoundargs *argp, void *buf, u32 len)
140{
d5e23383 141 char *p = svcxdr_tmpalloc(argp, len + 1);
29c353b3
BF
142
143 if (!p)
144 return NULL;
145 memcpy(p, buf, len);
146 p[len] = '\0';
29c353b3 147 return p;
1da177e4
LT
148}
149
7b723008
CL
150static void *
151svcxdr_savemem(struct nfsd4_compoundargs *argp, __be32 *p, u32 len)
152{
153 __be32 *tmp;
154
155 /*
156 * The location of the decoded data item is stable,
157 * so @p is OK to use. This is the common case.
158 */
159 if (p != argp->xdr->scratch.iov_base)
160 return p;
161
162 tmp = svcxdr_tmpalloc(argp, len);
163 if (!tmp)
164 return NULL;
165 memcpy(tmp, p, len);
166 return tmp;
167}
168
5dcbfabb
CL
169/*
170 * NFSv4 basic data type decoders
171 */
172
1a994408
CL
173/*
174 * This helper handles variable-length opaques which belong to protocol
175 * elements that this implementation does not support.
176 */
177static __be32
178nfsd4_decode_ignored_string(struct nfsd4_compoundargs *argp, u32 maxlen)
179{
180 u32 len;
181
182 if (xdr_stream_decode_u32(argp->xdr, &len) < 0)
183 return nfserr_bad_xdr;
184 if (maxlen && len > maxlen)
185 return nfserr_bad_xdr;
186 if (!xdr_inline_decode(argp->xdr, len))
187 return nfserr_bad_xdr;
188
189 return nfs_ok;
190}
191
5dcbfabb
CL
192static __be32
193nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o)
194{
195 __be32 *p;
196 u32 len;
197
198 if (xdr_stream_decode_u32(argp->xdr, &len) < 0)
199 return nfserr_bad_xdr;
200 if (len == 0 || len > NFS4_OPAQUE_LIMIT)
201 return nfserr_bad_xdr;
202 p = xdr_inline_decode(argp->xdr, len);
203 if (!p)
204 return nfserr_bad_xdr;
7b723008 205 o->data = svcxdr_savemem(argp, p, len);
5dcbfabb
CL
206 if (!o->data)
207 return nfserr_jukebox;
208 o->len = len;
5dcbfabb
CL
209
210 return nfs_ok;
211}
212
000dfa18
CL
213static __be32
214nfsd4_decode_component4(struct nfsd4_compoundargs *argp, char **namp, u32 *lenp)
215{
216 __be32 *p, status;
217
218 if (xdr_stream_decode_u32(argp->xdr, lenp) < 0)
219 return nfserr_bad_xdr;
220 p = xdr_inline_decode(argp->xdr, *lenp);
221 if (!p)
222 return nfserr_bad_xdr;
223 status = check_filename((char *)p, *lenp);
224 if (status)
225 return status;
7b723008 226 *namp = svcxdr_savemem(argp, p, *lenp);
000dfa18
CL
227 if (!*namp)
228 return nfserr_jukebox;
000dfa18
CL
229
230 return nfs_ok;
231}
232
1c3eff7e
CL
233static __be32
234nfsd4_decode_nfstime4(struct nfsd4_compoundargs *argp, struct timespec64 *tv)
235{
236 __be32 *p;
237
238 p = xdr_inline_decode(argp->xdr, XDR_UNIT * 3);
239 if (!p)
240 return nfserr_bad_xdr;
241 p = xdr_decode_hyper(p, &tv->tv_sec);
242 tv->tv_nsec = be32_to_cpup(p++);
243 if (tv->tv_nsec >= (u32)1000000000)
244 return nfserr_inval;
245 return nfs_ok;
246}
247
796dd1c6
CL
248static __be32
249nfsd4_decode_verifier4(struct nfsd4_compoundargs *argp, nfs4_verifier *verf)
250{
251 __be32 *p;
252
253 p = xdr_inline_decode(argp->xdr, NFS4_VERIFIER_SIZE);
254 if (!p)
255 return nfserr_bad_xdr;
256 memcpy(verf->data, p, sizeof(verf->data));
257 return nfs_ok;
258}
259
d1c263a0
CL
260/**
261 * nfsd4_decode_bitmap4 - Decode an NFSv4 bitmap4
262 * @argp: NFSv4 compound argument structure
263 * @bmval: pointer to an array of u32's to decode into
264 * @bmlen: size of the @bmval array
265 *
266 * The server needs to return nfs_ok rather than nfserr_bad_xdr when
267 * encountering bitmaps containing bits it does not recognize. This
268 * includes bits in bitmap words past WORDn, where WORDn is the last
269 * bitmap WORD the implementation currently supports. Thus we are
270 * careful here to simply ignore bits in bitmap words that this
271 * implementation has yet to support explicitly.
272 *
273 * Return values:
274 * %nfs_ok: @bmval populated successfully
275 * %nfserr_bad_xdr: the encoded bitmap was invalid
276 */
277static __be32
278nfsd4_decode_bitmap4(struct nfsd4_compoundargs *argp, u32 *bmval, u32 bmlen)
279{
280 u32 i, count;
281 __be32 *p;
282
283 if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
284 return nfserr_bad_xdr;
285 /* request sanity */
286 if (count > 1000)
287 return nfserr_bad_xdr;
288 p = xdr_inline_decode(argp->xdr, count << 2);
289 if (!p)
290 return nfserr_bad_xdr;
7f0abc94
CL
291 for (i = 0; i < bmlen; i++)
292 bmval[i] = (i < count) ? be32_to_cpup(p++) : 0;
d1c263a0
CL
293
294 return nfs_ok;
295}
296
c941a968
CL
297static __be32
298nfsd4_decode_nfsace4(struct nfsd4_compoundargs *argp, struct nfs4_ace *ace)
299{
300 __be32 *p, status;
301 u32 length;
302
303 if (xdr_stream_decode_u32(argp->xdr, &ace->type) < 0)
304 return nfserr_bad_xdr;
305 if (xdr_stream_decode_u32(argp->xdr, &ace->flag) < 0)
306 return nfserr_bad_xdr;
307 if (xdr_stream_decode_u32(argp->xdr, &ace->access_mask) < 0)
308 return nfserr_bad_xdr;
309
310 if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
311 return nfserr_bad_xdr;
312 p = xdr_inline_decode(argp->xdr, length);
313 if (!p)
314 return nfserr_bad_xdr;
315 ace->whotype = nfs4_acl_get_whotype((char *)p, length);
316 if (ace->whotype != NFS4_ACL_WHO_NAMED)
317 status = nfs_ok;
318 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
319 status = nfsd_map_name_to_gid(argp->rqstp,
320 (char *)p, length, &ace->who_gid);
321 else
322 status = nfsd_map_name_to_uid(argp->rqstp,
323 (char *)p, length, &ace->who_uid);
324
325 return status;
326}
327
328/* A counted array of nfsace4's */
329static noinline __be32
330nfsd4_decode_acl(struct nfsd4_compoundargs *argp, struct nfs4_acl **acl)
331{
332 struct nfs4_ace *ace;
333 __be32 status;
334 u32 count;
335
336 if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
337 return nfserr_bad_xdr;
338
339 if (count > xdr_stream_remaining(argp->xdr) / 20)
340 /*
341 * Even with 4-byte names there wouldn't be
342 * space for that many aces; something fishy is
343 * going on:
344 */
345 return nfserr_fbig;
346
347 *acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(count));
348 if (*acl == NULL)
349 return nfserr_jukebox;
350
351 (*acl)->naces = count;
352 for (ace = (*acl)->aces; ace < (*acl)->aces + count; ace++) {
353 status = nfsd4_decode_nfsace4(argp, ace);
354 if (status)
355 return status;
356 }
357
358 return nfs_ok;
359}
360
dabe9182
CL
361static noinline __be32
362nfsd4_decode_security_label(struct nfsd4_compoundargs *argp,
363 struct xdr_netobj *label)
364{
365 u32 lfs, pi, length;
366 __be32 *p;
367
368 if (xdr_stream_decode_u32(argp->xdr, &lfs) < 0)
369 return nfserr_bad_xdr;
370 if (xdr_stream_decode_u32(argp->xdr, &pi) < 0)
371 return nfserr_bad_xdr;
372
373 if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
374 return nfserr_bad_xdr;
375 if (length > NFS4_MAXLABELLEN)
376 return nfserr_badlabel;
377 p = xdr_inline_decode(argp->xdr, length);
378 if (!p)
379 return nfserr_bad_xdr;
380 label->len = length;
381 label->data = svcxdr_dupstr(argp, p, length);
382 if (!label->data)
383 return nfserr_jukebox;
384
385 return nfs_ok;
386}
387
b37ad28b 388static __be32
d1c263a0
CL
389nfsd4_decode_fattr4(struct nfsd4_compoundargs *argp, u32 *bmval, u32 bmlen,
390 struct iattr *iattr, struct nfs4_acl **acl,
391 struct xdr_netobj *label, int *umask)
1da177e4 392{
081d53fe
CL
393 unsigned int starting_pos;
394 u32 attrlist4_count;
d1c263a0 395 __be32 *p, status;
1da177e4 396
1da177e4 397 iattr->ia_valid = 0;
d1c263a0
CL
398 status = nfsd4_decode_bitmap4(argp, bmval, bmlen);
399 if (status)
400 return nfserr_bad_xdr;
1da177e4 401
e864c189
BF
402 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
403 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
404 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) {
405 if (nfsd_attrs_supported(argp->minorversion, bmval))
406 return nfserr_inval;
407 return nfserr_attrnotsupp;
408 }
409
081d53fe
CL
410 if (xdr_stream_decode_u32(argp->xdr, &attrlist4_count) < 0)
411 return nfserr_bad_xdr;
412 starting_pos = xdr_stream_pos(argp->xdr);
1da177e4
LT
413
414 if (bmval[0] & FATTR4_WORD0_SIZE) {
2ac1b9b2
CL
415 u64 size;
416
417 if (xdr_stream_decode_u64(argp->xdr, &size) < 0)
418 return nfserr_bad_xdr;
419 iattr->ia_size = size;
1da177e4
LT
420 iattr->ia_valid |= ATTR_SIZE;
421 }
422 if (bmval[0] & FATTR4_WORD0_ACL) {
c941a968
CL
423 status = nfsd4_decode_acl(argp, acl);
424 if (status)
425 return status;
1da177e4
LT
426 } else
427 *acl = NULL;
428 if (bmval[1] & FATTR4_WORD1_MODE) {
1c8f0ad7
CL
429 u32 mode;
430
431 if (xdr_stream_decode_u32(argp->xdr, &mode) < 0)
432 return nfserr_bad_xdr;
433 iattr->ia_mode = mode;
1da177e4
LT
434 iattr->ia_mode &= (S_IFMT | S_IALLUGO);
435 iattr->ia_valid |= ATTR_MODE;
436 }
437 if (bmval[1] & FATTR4_WORD1_OWNER) {
9853a5ac
CL
438 u32 length;
439
440 if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
441 return nfserr_bad_xdr;
442 p = xdr_inline_decode(argp->xdr, length);
443 if (!p)
444 return nfserr_bad_xdr;
445 status = nfsd_map_name_to_uid(argp->rqstp, (char *)p, length,
446 &iattr->ia_uid);
447 if (status)
47c85291 448 return status;
1da177e4
LT
449 iattr->ia_valid |= ATTR_UID;
450 }
451 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
393c31dd
CL
452 u32 length;
453
454 if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
455 return nfserr_bad_xdr;
456 p = xdr_inline_decode(argp->xdr, length);
457 if (!p)
458 return nfserr_bad_xdr;
459 status = nfsd_map_name_to_gid(argp->rqstp, (char *)p, length,
460 &iattr->ia_gid);
461 if (status)
47c85291 462 return status;
1da177e4
LT
463 iattr->ia_valid |= ATTR_GID;
464 }
465 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
1c3eff7e
CL
466 u32 set_it;
467
468 if (xdr_stream_decode_u32(argp->xdr, &set_it) < 0)
469 return nfserr_bad_xdr;
470 switch (set_it) {
1da177e4 471 case NFS4_SET_TO_CLIENT_TIME:
1c3eff7e 472 status = nfsd4_decode_nfstime4(argp, &iattr->ia_atime);
4c94e13e
CH
473 if (status)
474 return status;
1da177e4
LT
475 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
476 break;
477 case NFS4_SET_TO_SERVER_TIME:
478 iattr->ia_valid |= ATTR_ATIME;
479 break;
480 default:
1c3eff7e 481 return nfserr_bad_xdr;
1da177e4
LT
482 }
483 }
1da177e4 484 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
1c3eff7e
CL
485 u32 set_it;
486
487 if (xdr_stream_decode_u32(argp->xdr, &set_it) < 0)
488 return nfserr_bad_xdr;
489 switch (set_it) {
1da177e4 490 case NFS4_SET_TO_CLIENT_TIME:
1c3eff7e 491 status = nfsd4_decode_nfstime4(argp, &iattr->ia_mtime);
4c94e13e
CH
492 if (status)
493 return status;
1da177e4
LT
494 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
495 break;
496 case NFS4_SET_TO_SERVER_TIME:
497 iattr->ia_valid |= ATTR_MTIME;
498 break;
499 default:
1c3eff7e 500 return nfserr_bad_xdr;
1da177e4
LT
501 }
502 }
18032ca0 503 label->len = 0;
2285ae76
AB
504 if (IS_ENABLED(CONFIG_NFSD_V4_SECURITY_LABEL) &&
505 bmval[2] & FATTR4_WORD2_SECURITY_LABEL) {
dabe9182
CL
506 status = nfsd4_decode_security_label(argp, label);
507 if (status)
508 return status;
18032ca0 509 }
47057abd 510 if (bmval[2] & FATTR4_WORD2_MODE_UMASK) {
66f0476c
CL
511 u32 mode, mask;
512
47057abd 513 if (!umask)
66f0476c
CL
514 return nfserr_bad_xdr;
515 if (xdr_stream_decode_u32(argp->xdr, &mode) < 0)
516 return nfserr_bad_xdr;
517 iattr->ia_mode = mode & (S_IFMT | S_IALLUGO);
518 if (xdr_stream_decode_u32(argp->xdr, &mask) < 0)
519 return nfserr_bad_xdr;
520 *umask = mask & S_IRWXUGO;
47057abd
AG
521 iattr->ia_valid |= ATTR_MODE;
522 }
081d53fe
CL
523
524 /* request sanity: did attrlist4 contain the expected number of words? */
525 if (attrlist4_count != xdr_stream_pos(argp->xdr) - starting_pos)
526 return nfserr_bad_xdr;
1da177e4 527
d1c263a0 528 return nfs_ok;
1da177e4
LT
529}
530
d3d2f381
CL
531static __be32
532nfsd4_decode_stateid4(struct nfsd4_compoundargs *argp, stateid_t *sid)
533{
534 __be32 *p;
535
536 p = xdr_inline_decode(argp->xdr, NFS4_STATEID_SIZE);
537 if (!p)
538 return nfserr_bad_xdr;
539 sid->si_generation = be32_to_cpup(p++);
540 memcpy(&sid->si_opaque, p, sizeof(sid->si_opaque));
541 return nfs_ok;
542}
543
144e8269
CL
544static __be32
545nfsd4_decode_clientid4(struct nfsd4_compoundargs *argp, clientid_t *clientid)
546{
547 __be32 *p;
548
549 p = xdr_inline_decode(argp->xdr, sizeof(__be64));
550 if (!p)
551 return nfserr_bad_xdr;
552 memcpy(clientid, p, sizeof(*clientid));
553 return nfs_ok;
554}
555
556static __be32
557nfsd4_decode_state_owner4(struct nfsd4_compoundargs *argp,
558 clientid_t *clientid, struct xdr_netobj *owner)
559{
560 __be32 status;
561
562 status = nfsd4_decode_clientid4(argp, clientid);
563 if (status)
564 return status;
565 return nfsd4_decode_opaque(argp, owner);
566}
567
04495971
CL
568#ifdef CONFIG_NFSD_PNFS
569static __be32
570nfsd4_decode_deviceid4(struct nfsd4_compoundargs *argp,
571 struct nfsd4_deviceid *devid)
572{
573 __be32 *p;
574
575 p = xdr_inline_decode(argp->xdr, NFS4_DEVICEID4_SIZE);
576 if (!p)
577 return nfserr_bad_xdr;
578 memcpy(devid, p, sizeof(*devid));
579 return nfs_ok;
580}
5185980d
CL
581
582static __be32
583nfsd4_decode_layoutupdate4(struct nfsd4_compoundargs *argp,
584 struct nfsd4_layoutcommit *lcp)
585{
586 if (xdr_stream_decode_u32(argp->xdr, &lcp->lc_layout_type) < 0)
587 return nfserr_bad_xdr;
588 if (lcp->lc_layout_type < LAYOUT_NFSV4_1_FILES)
589 return nfserr_bad_xdr;
590 if (lcp->lc_layout_type >= LAYOUT_TYPE_MAX)
591 return nfserr_bad_xdr;
592
593 if (xdr_stream_decode_u32(argp->xdr, &lcp->lc_up_len) < 0)
594 return nfserr_bad_xdr;
595 if (lcp->lc_up_len > 0) {
596 lcp->lc_up_layout = xdr_inline_decode(argp->xdr, lcp->lc_up_len);
597 if (!lcp->lc_up_layout)
598 return nfserr_bad_xdr;
599 }
600
601 return nfs_ok;
602}
603
645fcad3
CL
604static __be32
605nfsd4_decode_layoutreturn4(struct nfsd4_compoundargs *argp,
606 struct nfsd4_layoutreturn *lrp)
607{
608 __be32 status;
609
610 if (xdr_stream_decode_u32(argp->xdr, &lrp->lr_return_type) < 0)
611 return nfserr_bad_xdr;
612 switch (lrp->lr_return_type) {
613 case RETURN_FILE:
614 if (xdr_stream_decode_u64(argp->xdr, &lrp->lr_seg.offset) < 0)
615 return nfserr_bad_xdr;
616 if (xdr_stream_decode_u64(argp->xdr, &lrp->lr_seg.length) < 0)
617 return nfserr_bad_xdr;
618 status = nfsd4_decode_stateid4(argp, &lrp->lr_sid);
619 if (status)
620 return status;
621 if (xdr_stream_decode_u32(argp->xdr, &lrp->lrf_body_len) < 0)
622 return nfserr_bad_xdr;
623 if (lrp->lrf_body_len > 0) {
624 lrp->lrf_body = xdr_inline_decode(argp->xdr, lrp->lrf_body_len);
625 if (!lrp->lrf_body)
626 return nfserr_bad_xdr;
627 }
628 break;
629 case RETURN_FSID:
630 case RETURN_ALL:
631 lrp->lr_seg.offset = 0;
632 lrp->lr_seg.length = NFS4_MAX_UINT64;
633 break;
634 default:
635 return nfserr_bad_xdr;
636 }
637
638 return nfs_ok;
639}
640
04495971
CL
641#endif /* CONFIG_NFSD_PNFS */
642
571e0451
CL
643static __be32
644nfsd4_decode_sessionid4(struct nfsd4_compoundargs *argp,
645 struct nfs4_sessionid *sessionid)
646{
647 __be32 *p;
648
649 p = xdr_inline_decode(argp->xdr, NFS4_MAX_SESSIONID_LEN);
650 if (!p)
651 return nfserr_bad_xdr;
652 memcpy(sessionid->data, p, sizeof(sessionid->data));
653 return nfs_ok;
654}
655
1a994408
CL
656/* Defined in Appendix A of RFC 5531 */
657static __be32
658nfsd4_decode_authsys_parms(struct nfsd4_compoundargs *argp,
659 struct nfsd4_cb_sec *cbs)
acb2887e 660{
1a994408
CL
661 u32 stamp, gidcount, uid, gid;
662 __be32 *p, status;
663
664 if (xdr_stream_decode_u32(argp->xdr, &stamp) < 0)
665 return nfserr_bad_xdr;
666 /* machine name */
667 status = nfsd4_decode_ignored_string(argp, 255);
668 if (status)
669 return status;
670 if (xdr_stream_decode_u32(argp->xdr, &uid) < 0)
671 return nfserr_bad_xdr;
672 if (xdr_stream_decode_u32(argp->xdr, &gid) < 0)
673 return nfserr_bad_xdr;
674 if (xdr_stream_decode_u32(argp->xdr, &gidcount) < 0)
675 return nfserr_bad_xdr;
676 if (gidcount > 16)
677 return nfserr_bad_xdr;
678 p = xdr_inline_decode(argp->xdr, gidcount << 2);
679 if (!p)
680 return nfserr_bad_xdr;
681 if (cbs->flavor == (u32)(-1)) {
682 struct user_namespace *userns = nfsd_user_namespace(argp->rqstp);
683
684 kuid_t kuid = make_kuid(userns, uid);
685 kgid_t kgid = make_kgid(userns, gid);
686 if (uid_valid(kuid) && gid_valid(kgid)) {
687 cbs->uid = kuid;
688 cbs->gid = kgid;
689 cbs->flavor = RPC_AUTH_UNIX;
690 } else {
691 dprintk("RPC_AUTH_UNIX with invalid uid or gid, ignoring!\n");
692 }
693 }
694
695 return nfs_ok;
696}
697
698static __be32
699nfsd4_decode_gss_cb_handles4(struct nfsd4_compoundargs *argp,
700 struct nfsd4_cb_sec *cbs)
701{
702 __be32 status;
703 u32 service;
704
705 dprintk("RPC_AUTH_GSS callback secflavor not supported!\n");
706
707 if (xdr_stream_decode_u32(argp->xdr, &service) < 0)
708 return nfserr_bad_xdr;
709 if (service < RPC_GSS_SVC_NONE || service > RPC_GSS_SVC_PRIVACY)
710 return nfserr_bad_xdr;
711 /* gcbp_handle_from_server */
712 status = nfsd4_decode_ignored_string(argp, 0);
713 if (status)
714 return status;
715 /* gcbp_handle_from_client */
716 status = nfsd4_decode_ignored_string(argp, 0);
717 if (status)
718 return status;
719
720 return nfs_ok;
721}
722
723/* a counted array of callback_sec_parms4 items */
724static __be32
725nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs)
726{
727 u32 i, secflavor, nr_secflavs;
728 __be32 status;
acb2887e
BF
729
730 /* callback_sec_params4 */
1a994408
CL
731 if (xdr_stream_decode_u32(argp->xdr, &nr_secflavs) < 0)
732 return nfserr_bad_xdr;
57569a70
BF
733 if (nr_secflavs)
734 cbs->flavor = (u32)(-1);
735 else
736 /* Is this legal? Be generous, take it to mean AUTH_NONE: */
737 cbs->flavor = 0;
1a994408 738
acb2887e 739 for (i = 0; i < nr_secflavs; ++i) {
1a994408
CL
740 if (xdr_stream_decode_u32(argp->xdr, &secflavor) < 0)
741 return nfserr_bad_xdr;
742 switch (secflavor) {
acb2887e 743 case RPC_AUTH_NULL:
1a994408 744 /* void */
12fc3e92
BF
745 if (cbs->flavor == (u32)(-1))
746 cbs->flavor = RPC_AUTH_NULL;
acb2887e
BF
747 break;
748 case RPC_AUTH_UNIX:
1a994408
CL
749 status = nfsd4_decode_authsys_parms(argp, cbs);
750 if (status)
751 return status;
acb2887e
BF
752 break;
753 case RPC_AUTH_GSS:
1a994408
CL
754 status = nfsd4_decode_gss_cb_handles4(argp, cbs);
755 if (status)
756 return status;
acb2887e
BF
757 break;
758 default:
acb2887e
BF
759 return nfserr_inval;
760 }
761 }
1a994408
CL
762
763 return nfs_ok;
acb2887e
BF
764}
765
1a994408 766
d169a6a9
CL
767/*
768 * NFSv4 operation argument decoders
769 */
770
771static __be32
772nfsd4_decode_access(struct nfsd4_compoundargs *argp,
773 struct nfsd4_access *access)
774{
775 if (xdr_stream_decode_u32(argp->xdr, &access->ac_req_access) < 0)
776 return nfserr_bad_xdr;
777 return nfs_ok;
778}
779
b37ad28b 780static __be32
1da177e4
LT
781nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
782{
d3d2f381
CL
783 if (xdr_stream_decode_u32(argp->xdr, &close->cl_seqid) < 0)
784 return nfserr_bad_xdr;
785 return nfsd4_decode_stateid4(argp, &close->cl_stateid);
1da177e4
LT
786}
787
788
b37ad28b 789static __be32
1da177e4
LT
790nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit)
791{
cbd9abb3
CL
792 if (xdr_stream_decode_u64(argp->xdr, &commit->co_offset) < 0)
793 return nfserr_bad_xdr;
794 if (xdr_stream_decode_u32(argp->xdr, &commit->co_count) < 0)
795 return nfserr_bad_xdr;
796 return nfs_ok;
1da177e4
LT
797}
798
b37ad28b 799static __be32
1da177e4
LT
800nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create)
801{
000dfa18 802 __be32 *p, status;
1da177e4 803
000dfa18
CL
804 if (xdr_stream_decode_u32(argp->xdr, &create->cr_type) < 0)
805 return nfserr_bad_xdr;
1da177e4
LT
806 switch (create->cr_type) {
807 case NF4LNK:
000dfa18
CL
808 if (xdr_stream_decode_u32(argp->xdr, &create->cr_datalen) < 0)
809 return nfserr_bad_xdr;
810 p = xdr_inline_decode(argp->xdr, create->cr_datalen);
811 if (!p)
812 return nfserr_bad_xdr;
29c353b3 813 create->cr_data = svcxdr_dupstr(argp, p, create->cr_datalen);
7fb84306 814 if (!create->cr_data)
76f47128 815 return nfserr_jukebox;
1da177e4
LT
816 break;
817 case NF4BLK:
818 case NF4CHR:
000dfa18
CL
819 if (xdr_stream_decode_u32(argp->xdr, &create->cr_specdata1) < 0)
820 return nfserr_bad_xdr;
821 if (xdr_stream_decode_u32(argp->xdr, &create->cr_specdata2) < 0)
822 return nfserr_bad_xdr;
1da177e4
LT
823 break;
824 case NF4SOCK:
825 case NF4FIFO:
826 case NF4DIR:
827 default:
828 break;
829 }
000dfa18
CL
830 status = nfsd4_decode_component4(argp, &create->cr_name,
831 &create->cr_namelen);
832 if (status)
1da177e4 833 return status;
d1c263a0
CL
834 status = nfsd4_decode_fattr4(argp, create->cr_bmval,
835 ARRAY_SIZE(create->cr_bmval),
836 &create->cr_iattr, &create->cr_acl,
837 &create->cr_label, &create->cr_umask);
c0d6fc8a 838 if (status)
000dfa18 839 return status;
1da177e4 840
000dfa18 841 return nfs_ok;
1da177e4
LT
842}
843
b37ad28b 844static inline __be32
1da177e4
LT
845nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr)
846{
95e6482c 847 return nfsd4_decode_stateid4(argp, &dr->dr_stateid);
1da177e4
LT
848}
849
b37ad28b 850static inline __be32
1da177e4
LT
851nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr)
852{
f759eff2
CL
853 return nfsd4_decode_bitmap4(argp, getattr->ga_bmval,
854 ARRAY_SIZE(getattr->ga_bmval));
1da177e4
LT
855}
856
b37ad28b 857static __be32
1da177e4
LT
858nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
859{
5c505d12 860 return nfsd4_decode_component4(argp, &link->li_name, &link->li_namelen);
1da177e4
LT
861}
862
8918cc0d
CL
863static __be32
864nfsd4_decode_open_to_lock_owner4(struct nfsd4_compoundargs *argp,
865 struct nfsd4_lock *lock)
866{
867 __be32 status;
868
869 if (xdr_stream_decode_u32(argp->xdr, &lock->lk_new_open_seqid) < 0)
870 return nfserr_bad_xdr;
871 status = nfsd4_decode_stateid4(argp, &lock->lk_new_open_stateid);
872 if (status)
873 return status;
874 if (xdr_stream_decode_u32(argp->xdr, &lock->lk_new_lock_seqid) < 0)
875 return nfserr_bad_xdr;
876 return nfsd4_decode_state_owner4(argp, &lock->lk_new_clientid,
877 &lock->lk_new_owner);
878}
879
880static __be32
881nfsd4_decode_exist_lock_owner4(struct nfsd4_compoundargs *argp,
882 struct nfsd4_lock *lock)
883{
884 __be32 status;
885
886 status = nfsd4_decode_stateid4(argp, &lock->lk_old_lock_stateid);
887 if (status)
888 return status;
889 if (xdr_stream_decode_u32(argp->xdr, &lock->lk_old_lock_seqid) < 0)
890 return nfserr_bad_xdr;
891
892 return nfs_ok;
893}
894
895static __be32
896nfsd4_decode_locker4(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
897{
898 if (xdr_stream_decode_bool(argp->xdr, &lock->lk_is_new) < 0)
899 return nfserr_bad_xdr;
900 if (lock->lk_is_new)
901 return nfsd4_decode_open_to_lock_owner4(argp, lock);
902 return nfsd4_decode_exist_lock_owner4(argp, lock);
903}
904
b37ad28b 905static __be32
1da177e4
LT
906nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
907{
7c59deed
CL
908 if (xdr_stream_decode_u32(argp->xdr, &lock->lk_type) < 0)
909 return nfserr_bad_xdr;
1da177e4 910 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
7c59deed
CL
911 return nfserr_bad_xdr;
912 if (xdr_stream_decode_bool(argp->xdr, &lock->lk_reclaim) < 0)
913 return nfserr_bad_xdr;
914 if (xdr_stream_decode_u64(argp->xdr, &lock->lk_offset) < 0)
915 return nfserr_bad_xdr;
916 if (xdr_stream_decode_u64(argp->xdr, &lock->lk_length) < 0)
917 return nfserr_bad_xdr;
918 return nfsd4_decode_locker4(argp, lock);
1da177e4
LT
919}
920
b37ad28b 921static __be32
1da177e4
LT
922nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
923{
0a146f04
CL
924 if (xdr_stream_decode_u32(argp->xdr, &lockt->lt_type) < 0)
925 return nfserr_bad_xdr;
926 if ((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
927 return nfserr_bad_xdr;
928 if (xdr_stream_decode_u64(argp->xdr, &lockt->lt_offset) < 0)
929 return nfserr_bad_xdr;
930 if (xdr_stream_decode_u64(argp->xdr, &lockt->lt_length) < 0)
931 return nfserr_bad_xdr;
932 return nfsd4_decode_state_owner4(argp, &lockt->lt_clientid,
933 &lockt->lt_owner);
1da177e4
LT
934}
935
b37ad28b 936static __be32
1da177e4
LT
937nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
938{
ca9cf9fc 939 __be32 status;
1da177e4 940
ca9cf9fc
CL
941 if (xdr_stream_decode_u32(argp->xdr, &locku->lu_type) < 0)
942 return nfserr_bad_xdr;
1da177e4 943 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
ca9cf9fc
CL
944 return nfserr_bad_xdr;
945 if (xdr_stream_decode_u32(argp->xdr, &locku->lu_seqid) < 0)
946 return nfserr_bad_xdr;
947 status = nfsd4_decode_stateid4(argp, &locku->lu_stateid);
e31a1b66
BH
948 if (status)
949 return status;
ca9cf9fc
CL
950 if (xdr_stream_decode_u64(argp->xdr, &locku->lu_offset) < 0)
951 return nfserr_bad_xdr;
952 if (xdr_stream_decode_u64(argp->xdr, &locku->lu_length) < 0)
953 return nfserr_bad_xdr;
1da177e4 954
ca9cf9fc 955 return nfs_ok;
1da177e4
LT
956}
957
b37ad28b 958static __be32
1da177e4
LT
959nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup)
960{
3d5877e8 961 return nfsd4_decode_component4(argp, &lookup->lo_name, &lookup->lo_len);
1da177e4
LT
962}
963
bf33bab3
CL
964static __be32
965nfsd4_decode_createhow4(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
966{
967 __be32 status;
968
969 if (xdr_stream_decode_u32(argp->xdr, &open->op_createmode) < 0)
970 return nfserr_bad_xdr;
971 switch (open->op_createmode) {
972 case NFS4_CREATE_UNCHECKED:
973 case NFS4_CREATE_GUARDED:
974 status = nfsd4_decode_fattr4(argp, open->op_bmval,
975 ARRAY_SIZE(open->op_bmval),
976 &open->op_iattr, &open->op_acl,
977 &open->op_label, &open->op_umask);
978 if (status)
979 return status;
980 break;
981 case NFS4_CREATE_EXCLUSIVE:
982 status = nfsd4_decode_verifier4(argp, &open->op_verf);
983 if (status)
984 return status;
985 break;
986 case NFS4_CREATE_EXCLUSIVE4_1:
987 if (argp->minorversion < 1)
988 return nfserr_bad_xdr;
989 status = nfsd4_decode_verifier4(argp, &open->op_verf);
990 if (status)
991 return status;
992 status = nfsd4_decode_fattr4(argp, open->op_bmval,
993 ARRAY_SIZE(open->op_bmval),
994 &open->op_iattr, &open->op_acl,
995 &open->op_label, &open->op_umask);
996 if (status)
997 return status;
998 break;
999 default:
1000 return nfserr_bad_xdr;
1001 }
1002
1003 return nfs_ok;
1004}
1005
e6ec04b2
CL
1006static __be32
1007nfsd4_decode_openflag4(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
1008{
1009 __be32 status;
1010
1011 if (xdr_stream_decode_u32(argp->xdr, &open->op_create) < 0)
1012 return nfserr_bad_xdr;
1013 switch (open->op_create) {
1014 case NFS4_OPEN_NOCREATE:
1015 break;
1016 case NFS4_OPEN_CREATE:
1017 status = nfsd4_decode_createhow4(argp, open);
1018 if (status)
1019 return status;
1020 break;
1021 default:
1022 return nfserr_bad_xdr;
1023 }
1024
1025 return nfs_ok;
1026}
1027
2c8bd7e0 1028static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when)
04f9e664 1029{
04f9e664
BF
1030 u32 w;
1031
9aa62f51
CL
1032 if (xdr_stream_decode_u32(argp->xdr, &w) < 0)
1033 return nfserr_bad_xdr;
2c8bd7e0
BH
1034 *share_access = w & NFS4_SHARE_ACCESS_MASK;
1035 *deleg_want = w & NFS4_SHARE_WANT_MASK;
1036 if (deleg_when)
1037 *deleg_when = w & NFS4_SHARE_WHEN_MASK;
1038
04f9e664
BF
1039 switch (w & NFS4_SHARE_ACCESS_MASK) {
1040 case NFS4_SHARE_ACCESS_READ:
1041 case NFS4_SHARE_ACCESS_WRITE:
1042 case NFS4_SHARE_ACCESS_BOTH:
1043 break;
1044 default:
1045 return nfserr_bad_xdr;
1046 }
fc0d14fe 1047 w &= ~NFS4_SHARE_ACCESS_MASK;
04f9e664
BF
1048 if (!w)
1049 return nfs_ok;
1050 if (!argp->minorversion)
1051 return nfserr_bad_xdr;
1052 switch (w & NFS4_SHARE_WANT_MASK) {
1053 case NFS4_SHARE_WANT_NO_PREFERENCE:
1054 case NFS4_SHARE_WANT_READ_DELEG:
1055 case NFS4_SHARE_WANT_WRITE_DELEG:
1056 case NFS4_SHARE_WANT_ANY_DELEG:
1057 case NFS4_SHARE_WANT_NO_DELEG:
1058 case NFS4_SHARE_WANT_CANCEL:
1059 break;
1060 default:
1061 return nfserr_bad_xdr;
1062 }
92bac8c5 1063 w &= ~NFS4_SHARE_WANT_MASK;
04f9e664
BF
1064 if (!w)
1065 return nfs_ok;
2c8bd7e0
BH
1066
1067 if (!deleg_when) /* open_downgrade */
1068 return nfserr_inval;
04f9e664
BF
1069 switch (w) {
1070 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL:
1071 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED:
c668fc6d
BH
1072 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL |
1073 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED):
04f9e664
BF
1074 return nfs_ok;
1075 }
04f9e664
BF
1076 return nfserr_bad_xdr;
1077}
1078
1079static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
1080{
b07bebd9
CL
1081 if (xdr_stream_decode_u32(argp->xdr, x) < 0)
1082 return nfserr_bad_xdr;
1083 /* Note: unlike access bits, deny bits may be zero. */
01cd4afa 1084 if (*x & ~NFS4_SHARE_DENY_BOTH)
04f9e664 1085 return nfserr_bad_xdr;
b07bebd9 1086
04f9e664 1087 return nfs_ok;
04f9e664
BF
1088}
1089
1708e50b
CL
1090static __be32
1091nfsd4_decode_open_claim4(struct nfsd4_compoundargs *argp,
1092 struct nfsd4_open *open)
1093{
1094 __be32 status;
1095
1096 if (xdr_stream_decode_u32(argp->xdr, &open->op_claim_type) < 0)
1097 return nfserr_bad_xdr;
1098 switch (open->op_claim_type) {
1099 case NFS4_OPEN_CLAIM_NULL:
1100 case NFS4_OPEN_CLAIM_DELEGATE_PREV:
1101 status = nfsd4_decode_component4(argp, &open->op_fname,
1102 &open->op_fnamelen);
1103 if (status)
1104 return status;
1105 break;
1106 case NFS4_OPEN_CLAIM_PREVIOUS:
1107 if (xdr_stream_decode_u32(argp->xdr, &open->op_delegate_type) < 0)
1108 return nfserr_bad_xdr;
1109 break;
1110 case NFS4_OPEN_CLAIM_DELEGATE_CUR:
1111 status = nfsd4_decode_stateid4(argp, &open->op_delegate_stateid);
1112 if (status)
1113 return status;
1114 status = nfsd4_decode_component4(argp, &open->op_fname,
1115 &open->op_fnamelen);
1116 if (status)
1117 return status;
1118 break;
1119 case NFS4_OPEN_CLAIM_FH:
1120 case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
1121 if (argp->minorversion < 1)
1122 return nfserr_bad_xdr;
1123 /* void */
1124 break;
1125 case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
1126 if (argp->minorversion < 1)
1127 return nfserr_bad_xdr;
1128 status = nfsd4_decode_stateid4(argp, &open->op_delegate_stateid);
1129 if (status)
1130 return status;
1131 break;
1132 default:
1133 return nfserr_bad_xdr;
1134 }
1135
1136 return nfs_ok;
1137}
1138
b37ad28b 1139static __be32
1da177e4
LT
1140nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
1141{
61e5e0b3 1142 __be32 status;
2c8bd7e0 1143 u32 dummy;
1da177e4
LT
1144
1145 memset(open->op_bmval, 0, sizeof(open->op_bmval));
1146 open->op_iattr.ia_valid = 0;
fe0750e5 1147 open->op_openowner = NULL;
1da177e4 1148
9d313b17 1149 open->op_xdr_error = 0;
61e5e0b3
CL
1150 if (xdr_stream_decode_u32(argp->xdr, &open->op_seqid) < 0)
1151 return nfserr_bad_xdr;
1152 /* deleg_want is ignored */
2c8bd7e0
BH
1153 status = nfsd4_decode_share_access(argp, &open->op_share_access,
1154 &open->op_deleg_want, &dummy);
04f9e664 1155 if (status)
61e5e0b3 1156 return status;
04f9e664
BF
1157 status = nfsd4_decode_share_deny(argp, &open->op_share_deny);
1158 if (status)
61e5e0b3
CL
1159 return status;
1160 status = nfsd4_decode_state_owner4(argp, &open->op_clientid,
1161 &open->op_owner);
a084daf5 1162 if (status)
61e5e0b3 1163 return status;
e6ec04b2
CL
1164 status = nfsd4_decode_openflag4(argp, open);
1165 if (status)
1166 return status;
61e5e0b3 1167 return nfsd4_decode_open_claim4(argp, open);
1da177e4
LT
1168}
1169
b37ad28b 1170static __be32
1da177e4
LT
1171nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf)
1172{
06bee693 1173 __be32 status;
e1a90ebd
AS
1174
1175 if (argp->minorversion >= 1)
1176 return nfserr_notsupp;
1177
06bee693 1178 status = nfsd4_decode_stateid4(argp, &open_conf->oc_req_stateid);
e31a1b66
BH
1179 if (status)
1180 return status;
06bee693
CL
1181 if (xdr_stream_decode_u32(argp->xdr, &open_conf->oc_seqid) < 0)
1182 return nfserr_bad_xdr;
e1a90ebd 1183
06bee693 1184 return nfs_ok;
1da177e4
LT
1185}
1186
b37ad28b 1187static __be32
1da177e4
LT
1188nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down)
1189{
dca71651
CL
1190 __be32 status;
1191
1192 status = nfsd4_decode_stateid4(argp, &open_down->od_stateid);
e31a1b66
BH
1193 if (status)
1194 return status;
dca71651
CL
1195 if (xdr_stream_decode_u32(argp->xdr, &open_down->od_seqid) < 0)
1196 return nfserr_bad_xdr;
1197 /* deleg_want is ignored */
2c8bd7e0
BH
1198 status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
1199 &open_down->od_deleg_want, NULL);
04f9e664
BF
1200 if (status)
1201 return status;
dca71651 1202 return nfsd4_decode_share_deny(argp, &open_down->od_share_deny);
1da177e4
LT
1203}
1204
b37ad28b 1205static __be32
1da177e4
LT
1206nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
1207{
a73bed98 1208 __be32 *p;
1da177e4 1209
a73bed98
CL
1210 if (xdr_stream_decode_u32(argp->xdr, &putfh->pf_fhlen) < 0)
1211 return nfserr_bad_xdr;
1da177e4 1212 if (putfh->pf_fhlen > NFS4_FHSIZE)
a73bed98
CL
1213 return nfserr_bad_xdr;
1214 p = xdr_inline_decode(argp->xdr, putfh->pf_fhlen);
1215 if (!p)
1216 return nfserr_bad_xdr;
7b723008 1217 putfh->pf_fhval = svcxdr_savemem(argp, p, putfh->pf_fhlen);
a73bed98
CL
1218 if (!putfh->pf_fhval)
1219 return nfserr_jukebox;
1da177e4 1220
a73bed98 1221 return nfs_ok;
1da177e4
LT
1222}
1223
e1a90ebd
AS
1224static __be32
1225nfsd4_decode_putpubfh(struct nfsd4_compoundargs *argp, void *p)
1226{
1227 if (argp->minorversion == 0)
1228 return nfs_ok;
1229 return nfserr_notsupp;
1230}
1231
b37ad28b 1232static __be32
1da177e4
LT
1233nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
1234{
3909c3bc 1235 __be32 status;
1da177e4 1236
3909c3bc 1237 status = nfsd4_decode_stateid4(argp, &read->rd_stateid);
e31a1b66
BH
1238 if (status)
1239 return status;
3909c3bc
CL
1240 if (xdr_stream_decode_u64(argp->xdr, &read->rd_offset) < 0)
1241 return nfserr_bad_xdr;
1242 if (xdr_stream_decode_u32(argp->xdr, &read->rd_length) < 0)
1243 return nfserr_bad_xdr;
1da177e4 1244
3909c3bc 1245 return nfs_ok;
1da177e4
LT
1246}
1247
b37ad28b 1248static __be32
1da177e4
LT
1249nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir)
1250{
0dfaf2a3 1251 __be32 status;
1da177e4 1252
0dfaf2a3
CL
1253 if (xdr_stream_decode_u64(argp->xdr, &readdir->rd_cookie) < 0)
1254 return nfserr_bad_xdr;
1255 status = nfsd4_decode_verifier4(argp, &readdir->rd_verf);
1256 if (status)
1257 return status;
1258 if (xdr_stream_decode_u32(argp->xdr, &readdir->rd_dircount) < 0)
1259 return nfserr_bad_xdr;
1260 if (xdr_stream_decode_u32(argp->xdr, &readdir->rd_maxcount) < 0)
1261 return nfserr_bad_xdr;
1262 if (xdr_stream_decode_uint32_array(argp->xdr, readdir->rd_bmval,
1263 ARRAY_SIZE(readdir->rd_bmval)) < 0)
1264 return nfserr_bad_xdr;
1da177e4 1265
0dfaf2a3 1266 return nfs_ok;
1da177e4
LT
1267}
1268
b37ad28b 1269static __be32
1da177e4
LT
1270nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove)
1271{
b7f5fbf2 1272 return nfsd4_decode_component4(argp, &remove->rm_name, &remove->rm_namelen);
1da177e4
LT
1273}
1274
b37ad28b 1275static __be32
1da177e4
LT
1276nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename)
1277{
ba881a0a 1278 __be32 status;
1da177e4 1279
ba881a0a
CL
1280 status = nfsd4_decode_component4(argp, &rename->rn_sname, &rename->rn_snamelen);
1281 if (status)
1da177e4 1282 return status;
ba881a0a 1283 return nfsd4_decode_component4(argp, &rename->rn_tname, &rename->rn_tnamelen);
1da177e4
LT
1284}
1285
b37ad28b 1286static __be32
1da177e4
LT
1287nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid)
1288{
d12f9045 1289 return nfsd4_decode_clientid4(argp, clientid);
1da177e4
LT
1290}
1291
dcb488a3
AA
1292static __be32
1293nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
1294 struct nfsd4_secinfo *secinfo)
1295{
d0abdae5 1296 return nfsd4_decode_component4(argp, &secinfo->si_name, &secinfo->si_namelen);
dcb488a3
AA
1297}
1298
b37ad28b 1299static __be32
1da177e4
LT
1300nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr)
1301{
e31a1b66 1302 __be32 status;
1da177e4 1303
44592fe9 1304 status = nfsd4_decode_stateid4(argp, &setattr->sa_stateid);
e31a1b66
BH
1305 if (status)
1306 return status;
d1c263a0
CL
1307 return nfsd4_decode_fattr4(argp, setattr->sa_bmval,
1308 ARRAY_SIZE(setattr->sa_bmval),
1309 &setattr->sa_iattr, &setattr->sa_acl,
1310 &setattr->sa_label, NULL);
1da177e4
LT
1311}
1312
b37ad28b 1313static __be32
1da177e4
LT
1314nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid)
1315{
92fa6c08 1316 __be32 *p, status;
1da177e4 1317
e1a90ebd
AS
1318 if (argp->minorversion >= 1)
1319 return nfserr_notsupp;
1320
92fa6c08
CL
1321 status = nfsd4_decode_verifier4(argp, &setclientid->se_verf);
1322 if (status)
1323 return status;
a084daf5
BF
1324 status = nfsd4_decode_opaque(argp, &setclientid->se_name);
1325 if (status)
92fa6c08
CL
1326 return status;
1327 if (xdr_stream_decode_u32(argp->xdr, &setclientid->se_callback_prog) < 0)
a084daf5 1328 return nfserr_bad_xdr;
92fa6c08
CL
1329 if (xdr_stream_decode_u32(argp->xdr, &setclientid->se_callback_netid_len) < 0)
1330 return nfserr_bad_xdr;
1331 p = xdr_inline_decode(argp->xdr, setclientid->se_callback_netid_len);
1332 if (!p)
1333 return nfserr_bad_xdr;
7b723008 1334 setclientid->se_callback_netid_val = svcxdr_savemem(argp, p,
92fa6c08
CL
1335 setclientid->se_callback_netid_len);
1336 if (!setclientid->se_callback_netid_val)
1337 return nfserr_jukebox;
1da177e4 1338
92fa6c08
CL
1339 if (xdr_stream_decode_u32(argp->xdr, &setclientid->se_callback_addr_len) < 0)
1340 return nfserr_bad_xdr;
1341 p = xdr_inline_decode(argp->xdr, setclientid->se_callback_addr_len);
1342 if (!p)
1343 return nfserr_bad_xdr;
7b723008 1344 setclientid->se_callback_addr_val = svcxdr_savemem(argp, p,
92fa6c08
CL
1345 setclientid->se_callback_addr_len);
1346 if (!setclientid->se_callback_addr_val)
1347 return nfserr_jukebox;
92fa6c08
CL
1348 if (xdr_stream_decode_u32(argp->xdr, &setclientid->se_callback_ident) < 0)
1349 return nfserr_bad_xdr;
1da177e4 1350
92fa6c08 1351 return nfs_ok;
1da177e4
LT
1352}
1353
b37ad28b 1354static __be32
1da177e4
LT
1355nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c)
1356{
d1ca5514 1357 __be32 status;
1da177e4 1358
e1a90ebd
AS
1359 if (argp->minorversion >= 1)
1360 return nfserr_notsupp;
1361
d1ca5514
CL
1362 status = nfsd4_decode_clientid4(argp, &scd_c->sc_clientid);
1363 if (status)
1364 return status;
1365 return nfsd4_decode_verifier4(argp, &scd_c->sc_confirm);
1da177e4
LT
1366}
1367
1368/* Also used for NVERIFY */
b37ad28b 1369static __be32
1da177e4
LT
1370nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify)
1371{
67cd453e 1372 __be32 *p, status;
1da177e4 1373
67cd453e
CL
1374 status = nfsd4_decode_bitmap4(argp, verify->ve_bmval,
1375 ARRAY_SIZE(verify->ve_bmval));
1376 if (status)
1377 return status;
1da177e4
LT
1378
1379 /* For convenience's sake, we compare raw xdr'd attributes in
e5f95703
BF
1380 * nfsd4_proc_verify */
1381
67cd453e
CL
1382 if (xdr_stream_decode_u32(argp->xdr, &verify->ve_attrlen) < 0)
1383 return nfserr_bad_xdr;
1384 p = xdr_inline_decode(argp->xdr, verify->ve_attrlen);
1385 if (!p)
1386 return nfserr_bad_xdr;
7b723008 1387 verify->ve_attrval = svcxdr_savemem(argp, p, verify->ve_attrlen);
67cd453e
CL
1388 if (!verify->ve_attrval)
1389 return nfserr_jukebox;
1da177e4 1390
67cd453e 1391 return nfs_ok;
1da177e4
LT
1392}
1393
b37ad28b 1394static __be32
1da177e4
LT
1395nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
1396{
244e2bef 1397 __be32 status;
1da177e4 1398
244e2bef 1399 status = nfsd4_decode_stateid4(argp, &write->wr_stateid);
e31a1b66
BH
1400 if (status)
1401 return status;
244e2bef
CL
1402 if (xdr_stream_decode_u64(argp->xdr, &write->wr_offset) < 0)
1403 return nfserr_bad_xdr;
1404 if (xdr_stream_decode_u32(argp->xdr, &write->wr_stable_how) < 0)
1405 return nfserr_bad_xdr;
54bbb7d2 1406 if (write->wr_stable_how > NFS_FILE_SYNC)
244e2bef
CL
1407 return nfserr_bad_xdr;
1408 if (xdr_stream_decode_u32(argp->xdr, &write->wr_buflen) < 0)
1409 return nfserr_bad_xdr;
c1346a12 1410 if (!xdr_stream_subsegment(argp->xdr, &write->wr_payload, write->wr_buflen))
244e2bef 1411 return nfserr_bad_xdr;
1da177e4 1412
244e2bef 1413 return nfs_ok;
1da177e4
LT
1414}
1415
b37ad28b 1416static __be32
1da177e4
LT
1417nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner)
1418{
a4a80c15 1419 __be32 status;
1da177e4 1420
e1a90ebd
AS
1421 if (argp->minorversion >= 1)
1422 return nfserr_notsupp;
1423
a4a80c15
CL
1424 status = nfsd4_decode_state_owner4(argp, &rlockowner->rl_clientid,
1425 &rlockowner->rl_owner);
1426 if (status)
1427 return status;
1da177e4 1428
60adfc50
AA
1429 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1430 return nfserr_inval;
a4a80c15
CL
1431
1432 return nfs_ok;
1da177e4
LT
1433}
1434
0f81d960
CL
1435static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc)
1436{
1437 if (xdr_stream_decode_u32(argp->xdr, &bc->bc_cb_program) < 0)
1438 return nfserr_bad_xdr;
1439 return nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec);
1440}
1441
571e0451
CL
1442static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts)
1443{
1444 u32 use_conn_in_rdma_mode;
1445 __be32 status;
1446
1447 status = nfsd4_decode_sessionid4(argp, &bcts->sessionid);
1448 if (status)
1449 return status;
1450 if (xdr_stream_decode_u32(argp->xdr, &bcts->dir) < 0)
1451 return nfserr_bad_xdr;
1452 if (xdr_stream_decode_u32(argp->xdr, &use_conn_in_rdma_mode) < 0)
1453 return nfserr_bad_xdr;
1454
1455 return nfs_ok;
1456}
1457
2548aa78
CL
1458static __be32
1459nfsd4_decode_state_protect_ops(struct nfsd4_compoundargs *argp,
1460 struct nfsd4_exchange_id *exid)
1461{
1462 __be32 status;
1463
1464 status = nfsd4_decode_bitmap4(argp, exid->spo_must_enforce,
1465 ARRAY_SIZE(exid->spo_must_enforce));
1466 if (status)
1467 return nfserr_bad_xdr;
1468 status = nfsd4_decode_bitmap4(argp, exid->spo_must_allow,
1469 ARRAY_SIZE(exid->spo_must_allow));
1470 if (status)
1471 return nfserr_bad_xdr;
1472
1473 return nfs_ok;
1474}
1475
547bfeb4
CL
1476/*
1477 * This implementation currently does not support SP4_SSV.
1478 * This decoder simply skips over these arguments.
1479 */
1480static noinline __be32
1481nfsd4_decode_ssv_sp_parms(struct nfsd4_compoundargs *argp,
1482 struct nfsd4_exchange_id *exid)
1483{
1484 u32 count, window, num_gss_handles;
1485 __be32 status;
1486
1487 /* ssp_ops */
1488 status = nfsd4_decode_state_protect_ops(argp, exid);
1489 if (status)
1490 return status;
1491
1492 /* ssp_hash_algs<> */
1493 if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
1494 return nfserr_bad_xdr;
1495 while (count--) {
1496 status = nfsd4_decode_ignored_string(argp, 0);
1497 if (status)
1498 return status;
1499 }
1500
1501 /* ssp_encr_algs<> */
1502 if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
1503 return nfserr_bad_xdr;
1504 while (count--) {
1505 status = nfsd4_decode_ignored_string(argp, 0);
1506 if (status)
1507 return status;
1508 }
1509
1510 if (xdr_stream_decode_u32(argp->xdr, &window) < 0)
1511 return nfserr_bad_xdr;
1512 if (xdr_stream_decode_u32(argp->xdr, &num_gss_handles) < 0)
1513 return nfserr_bad_xdr;
1514
1515 return nfs_ok;
1516}
1517
2db134eb 1518static __be32
523ec6ed
CL
1519nfsd4_decode_state_protect4_a(struct nfsd4_compoundargs *argp,
1520 struct nfsd4_exchange_id *exid)
2db134eb 1521{
523ec6ed 1522 __be32 status;
0733d213 1523
523ec6ed 1524 if (xdr_stream_decode_u32(argp->xdr, &exid->spa_how) < 0)
a084daf5 1525 return nfserr_bad_xdr;
0733d213
AA
1526 switch (exid->spa_how) {
1527 case SP4_NONE:
1528 break;
1529 case SP4_MACH_CRED:
2548aa78 1530 status = nfsd4_decode_state_protect_ops(argp, exid);
ed941643 1531 if (status)
2548aa78 1532 return status;
0733d213
AA
1533 break;
1534 case SP4_SSV:
547bfeb4 1535 status = nfsd4_decode_ssv_sp_parms(argp, exid);
2548aa78
CL
1536 if (status)
1537 return status;
0733d213
AA
1538 break;
1539 default:
523ec6ed 1540 return nfserr_bad_xdr;
0733d213
AA
1541 }
1542
523ec6ed
CL
1543 return nfs_ok;
1544}
1545
10ff8422
CL
1546static __be32
1547nfsd4_decode_nfs_impl_id4(struct nfsd4_compoundargs *argp,
1548 struct nfsd4_exchange_id *exid)
1549{
1550 __be32 status;
1551 u32 count;
1552
1553 if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
1554 return nfserr_bad_xdr;
1555 switch (count) {
1556 case 0:
1557 break;
1558 case 1:
1559 /* Note that RFC 8881 places no length limit on
1560 * nii_domain, but this implementation permits no
1561 * more than NFS4_OPAQUE_LIMIT bytes */
1562 status = nfsd4_decode_opaque(argp, &exid->nii_domain);
1563 if (status)
1564 return status;
1565 /* Note that RFC 8881 places no length limit on
1566 * nii_name, but this implementation permits no
1567 * more than NFS4_OPAQUE_LIMIT bytes */
1568 status = nfsd4_decode_opaque(argp, &exid->nii_name);
1569 if (status)
1570 return status;
1571 status = nfsd4_decode_nfstime4(argp, &exid->nii_time);
1572 if (status)
1573 return status;
1574 break;
1575 default:
1576 return nfserr_bad_xdr;
1577 }
1578
1579 return nfs_ok;
1580}
1581
523ec6ed
CL
1582static __be32
1583nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1584 struct nfsd4_exchange_id *exid)
1585{
10ff8422 1586 __be32 status;
523ec6ed
CL
1587
1588 status = nfsd4_decode_verifier4(argp, &exid->verifier);
1589 if (status)
1590 return status;
1591 status = nfsd4_decode_opaque(argp, &exid->clname);
1592 if (status)
1593 return status;
1594 if (xdr_stream_decode_u32(argp->xdr, &exid->flags) < 0)
1595 return nfserr_bad_xdr;
1596 status = nfsd4_decode_state_protect4_a(argp, exid);
1597 if (status)
1598 return status;
10ff8422 1599 return nfsd4_decode_nfs_impl_id4(argp, exid);
2db134eb
AA
1600}
1601
3a3f1fba
CL
1602static __be32
1603nfsd4_decode_channel_attrs4(struct nfsd4_compoundargs *argp,
1604 struct nfsd4_channel_attrs *ca)
1605{
1606 __be32 *p;
1607
1608 p = xdr_inline_decode(argp->xdr, XDR_UNIT * 7);
1609 if (!p)
1610 return nfserr_bad_xdr;
1611
1612 /* headerpadsz is ignored */
1613 p++;
1614 ca->maxreq_sz = be32_to_cpup(p++);
1615 ca->maxresp_sz = be32_to_cpup(p++);
1616 ca->maxresp_cached = be32_to_cpup(p++);
1617 ca->maxops = be32_to_cpup(p++);
1618 ca->maxreqs = be32_to_cpup(p++);
1619 ca->nr_rdma_attrs = be32_to_cpup(p);
1620 switch (ca->nr_rdma_attrs) {
1621 case 0:
1622 break;
1623 case 1:
1624 if (xdr_stream_decode_u32(argp->xdr, &ca->rdma_attrs) < 0)
1625 return nfserr_bad_xdr;
1626 break;
1627 default:
1628 return nfserr_bad_xdr;
1629 }
1630
1631 return nfs_ok;
1632}
1633
2db134eb
AA
1634static __be32
1635nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1636 struct nfsd4_create_session *sess)
1637{
81243e3f 1638 __be32 status;
ec6b5d7b 1639
81243e3f
CL
1640 status = nfsd4_decode_clientid4(argp, &sess->clientid);
1641 if (status)
1642 return status;
1643 if (xdr_stream_decode_u32(argp->xdr, &sess->seqid) < 0)
1644 return nfserr_bad_xdr;
1645 if (xdr_stream_decode_u32(argp->xdr, &sess->flags) < 0)
1646 return nfserr_bad_xdr;
3a3f1fba
CL
1647 status = nfsd4_decode_channel_attrs4(argp, &sess->fore_channel);
1648 if (status)
1649 return status;
1650 status = nfsd4_decode_channel_attrs4(argp, &sess->back_channel);
81243e3f
CL
1651 if (status)
1652 return status;
1653 if (xdr_stream_decode_u32(argp->xdr, &sess->callback_prog) < 0)
1654 return nfserr_bad_xdr;
1655 status = nfsd4_decode_cb_sec(argp, &sess->cb_sec);
3a3f1fba
CL
1656 if (status)
1657 return status;
ec6b5d7b 1658
81243e3f 1659 return nfs_ok;
2db134eb
AA
1660}
1661
1662static __be32
1663nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1664 struct nfsd4_destroy_session *destroy_session)
1665{
94e254af 1666 return nfsd4_decode_sessionid4(argp, &destroy_session->sessionid);
2db134eb
AA
1667}
1668
e1ca12df
BS
1669static __be32
1670nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
1671 struct nfsd4_free_stateid *free_stateid)
1672{
aec387d5 1673 return nfsd4_decode_stateid4(argp, &free_stateid->fr_stateid);
e1ca12df
BS
1674}
1675
9cf514cc
CH
1676#ifdef CONFIG_NFSD_PNFS
1677static __be32
1678nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs *argp,
1679 struct nfsd4_getdeviceinfo *gdev)
1680{
04495971
CL
1681 __be32 status;
1682
1683 status = nfsd4_decode_deviceid4(argp, &gdev->gd_devid);
1684 if (status)
1685 return status;
1686 if (xdr_stream_decode_u32(argp->xdr, &gdev->gd_layout_type) < 0)
1687 return nfserr_bad_xdr;
1688 if (xdr_stream_decode_u32(argp->xdr, &gdev->gd_maxcount) < 0)
1689 return nfserr_bad_xdr;
1690 if (xdr_stream_decode_uint32_array(argp->xdr,
1691 &gdev->gd_notify_types, 1) < 0)
1692 return nfserr_bad_xdr;
1693
1694 return nfs_ok;
9cf514cc
CH
1695}
1696
5185980d
CL
1697static __be32
1698nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp,
1699 struct nfsd4_layoutcommit *lcp)
1700{
1701 __be32 *p, status;
1702
1703 if (xdr_stream_decode_u64(argp->xdr, &lcp->lc_seg.offset) < 0)
1704 return nfserr_bad_xdr;
1705 if (xdr_stream_decode_u64(argp->xdr, &lcp->lc_seg.length) < 0)
1706 return nfserr_bad_xdr;
1707 if (xdr_stream_decode_bool(argp->xdr, &lcp->lc_reclaim) < 0)
1708 return nfserr_bad_xdr;
1709 status = nfsd4_decode_stateid4(argp, &lcp->lc_sid);
1710 if (status)
1711 return status;
1712 if (xdr_stream_decode_u32(argp->xdr, &lcp->lc_newoffset) < 0)
1713 return nfserr_bad_xdr;
1714 if (lcp->lc_newoffset) {
1715 if (xdr_stream_decode_u64(argp->xdr, &lcp->lc_last_wr) < 0)
1716 return nfserr_bad_xdr;
1717 } else
1718 lcp->lc_last_wr = 0;
1719 p = xdr_inline_decode(argp->xdr, XDR_UNIT);
1720 if (!p)
1721 return nfserr_bad_xdr;
1722 if (xdr_item_is_present(p)) {
1723 status = nfsd4_decode_nfstime4(argp, &lcp->lc_mtime);
1724 if (status)
1725 return status;
1726 } else {
1727 lcp->lc_mtime.tv_nsec = UTIME_NOW;
1728 }
1729 return nfsd4_decode_layoutupdate4(argp, lcp);
1730}
1731
9cf514cc
CH
1732static __be32
1733nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp,
1734 struct nfsd4_layoutget *lgp)
1735{
c8e88e3a 1736 __be32 status;
db59c0ef 1737
c8e88e3a
CL
1738 if (xdr_stream_decode_u32(argp->xdr, &lgp->lg_signal) < 0)
1739 return nfserr_bad_xdr;
1740 if (xdr_stream_decode_u32(argp->xdr, &lgp->lg_layout_type) < 0)
1741 return nfserr_bad_xdr;
1742 if (xdr_stream_decode_u32(argp->xdr, &lgp->lg_seg.iomode) < 0)
1743 return nfserr_bad_xdr;
1744 if (xdr_stream_decode_u64(argp->xdr, &lgp->lg_seg.offset) < 0)
1745 return nfserr_bad_xdr;
1746 if (xdr_stream_decode_u64(argp->xdr, &lgp->lg_seg.length) < 0)
1747 return nfserr_bad_xdr;
1748 if (xdr_stream_decode_u64(argp->xdr, &lgp->lg_minlength) < 0)
1749 return nfserr_bad_xdr;
1750 status = nfsd4_decode_stateid4(argp, &lgp->lg_sid);
db59c0ef
KM
1751 if (status)
1752 return status;
c8e88e3a
CL
1753 if (xdr_stream_decode_u32(argp->xdr, &lgp->lg_maxcount) < 0)
1754 return nfserr_bad_xdr;
db59c0ef 1755
c8e88e3a 1756 return nfs_ok;
9cf514cc
CH
1757}
1758
9cf514cc
CH
1759static __be32
1760nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp,
1761 struct nfsd4_layoutreturn *lrp)
1762{
645fcad3
CL
1763 if (xdr_stream_decode_bool(argp->xdr, &lrp->lr_reclaim) < 0)
1764 return nfserr_bad_xdr;
1765 if (xdr_stream_decode_u32(argp->xdr, &lrp->lr_layout_type) < 0)
1766 return nfserr_bad_xdr;
1767 if (xdr_stream_decode_u32(argp->xdr, &lrp->lr_seg.iomode) < 0)
1768 return nfserr_bad_xdr;
1769 return nfsd4_decode_layoutreturn4(argp, lrp);
9cf514cc
CH
1770}
1771#endif /* CONFIG_NFSD_PNFS */
1772
53d70873
CL
1773static __be32 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
1774 struct nfsd4_secinfo_no_name *sin)
1775{
1776 if (xdr_stream_decode_u32(argp->xdr, &sin->sin_style) < 0)
1777 return nfserr_bad_xdr;
1778 return nfs_ok;
1779}
1780
cf907b11
CL
1781static __be32
1782nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1783 struct nfsd4_sequence *seq)
1784{
1785 __be32 *p, status;
1786
1787 status = nfsd4_decode_sessionid4(argp, &seq->sessionid);
1788 if (status)
1789 return status;
1790 p = xdr_inline_decode(argp->xdr, XDR_UNIT * 4);
1791 if (!p)
1792 return nfserr_bad_xdr;
1793 seq->seqid = be32_to_cpup(p++);
1794 seq->slotid = be32_to_cpup(p++);
1795 seq->maxslots = be32_to_cpup(p++);
1796 seq->cachethis = be32_to_cpup(p);
1797
1798 return nfs_ok;
1799}
1800
b7a0c8f6
CL
1801static __be32
1802nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid)
1803{
1804 struct nfsd4_test_stateid_id *stateid;
1805 __be32 status;
1806 u32 i;
1807
1808 if (xdr_stream_decode_u32(argp->xdr, &test_stateid->ts_num_ids) < 0)
1809 return nfserr_bad_xdr;
1810
1811 INIT_LIST_HEAD(&test_stateid->ts_stateid_list);
1812 for (i = 0; i < test_stateid->ts_num_ids; i++) {
1813 stateid = svcxdr_tmpalloc(argp, sizeof(*stateid));
1814 if (!stateid)
1815 return nfserrno(-ENOMEM); /* XXX: not jukebox? */
1816 INIT_LIST_HEAD(&stateid->ts_id_list);
1817 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list);
1818 status = nfsd4_decode_stateid4(argp, &stateid->ts_id_stateid);
1819 if (status)
1820 return status;
1821 }
1822
1823 return nfs_ok;
1824}
1825
c95f2ec3
CL
1826static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp,
1827 struct nfsd4_destroy_clientid *dc)
1828{
1829 return nfsd4_decode_clientid4(argp, &dc->clientid);
1830}
1831
0d646784
CL
1832static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp,
1833 struct nfsd4_reclaim_complete *rc)
1834{
1835 if (xdr_stream_decode_bool(argp->xdr, &rc->rca_one_fs) < 0)
1836 return nfserr_bad_xdr;
1837 return nfs_ok;
1838}
1839
95d871f0
AS
1840static __be32
1841nfsd4_decode_fallocate(struct nfsd4_compoundargs *argp,
1842 struct nfsd4_fallocate *fallocate)
1843{
6aef27aa 1844 __be32 status;
95d871f0 1845
6aef27aa 1846 status = nfsd4_decode_stateid4(argp, &fallocate->falloc_stateid);
95d871f0
AS
1847 if (status)
1848 return status;
6aef27aa
CL
1849 if (xdr_stream_decode_u64(argp->xdr, &fallocate->falloc_offset) < 0)
1850 return nfserr_bad_xdr;
1851 if (xdr_stream_decode_u64(argp->xdr, &fallocate->falloc_length) < 0)
1852 return nfserr_bad_xdr;
95d871f0 1853
6aef27aa 1854 return nfs_ok;
95d871f0
AS
1855}
1856
84e1b21d
OK
1857static __be32 nfsd4_decode_nl4_server(struct nfsd4_compoundargs *argp,
1858 struct nl4_server *ns)
1859{
84e1b21d 1860 struct nfs42_netaddr *naddr;
f49e4b4d 1861 __be32 *p;
84e1b21d 1862
f49e4b4d
CL
1863 if (xdr_stream_decode_u32(argp->xdr, &ns->nl4_type) < 0)
1864 return nfserr_bad_xdr;
84e1b21d
OK
1865
1866 /* currently support for 1 inter-server source server */
1867 switch (ns->nl4_type) {
1868 case NL4_NETADDR:
1869 naddr = &ns->u.nl4_addr;
1870
f49e4b4d
CL
1871 if (xdr_stream_decode_u32(argp->xdr, &naddr->netid_len) < 0)
1872 return nfserr_bad_xdr;
84e1b21d 1873 if (naddr->netid_len > RPCBIND_MAXNETIDLEN)
f49e4b4d 1874 return nfserr_bad_xdr;
84e1b21d 1875
f49e4b4d
CL
1876 p = xdr_inline_decode(argp->xdr, naddr->netid_len);
1877 if (!p)
1878 return nfserr_bad_xdr;
1879 memcpy(naddr->netid, p, naddr->netid_len);
84e1b21d 1880
f49e4b4d
CL
1881 if (xdr_stream_decode_u32(argp->xdr, &naddr->addr_len) < 0)
1882 return nfserr_bad_xdr;
84e1b21d 1883 if (naddr->addr_len > RPCBIND_MAXUADDRLEN)
f49e4b4d 1884 return nfserr_bad_xdr;
84e1b21d 1885
f49e4b4d
CL
1886 p = xdr_inline_decode(argp->xdr, naddr->addr_len);
1887 if (!p)
1888 return nfserr_bad_xdr;
1889 memcpy(naddr->addr, p, naddr->addr_len);
84e1b21d
OK
1890 break;
1891 default:
f49e4b4d 1892 return nfserr_bad_xdr;
84e1b21d 1893 }
f49e4b4d
CL
1894
1895 return nfs_ok;
84e1b21d
OK
1896}
1897
29ae7f9d
AS
1898static __be32
1899nfsd4_decode_copy(struct nfsd4_compoundargs *argp, struct nfsd4_copy *copy)
1900{
84e1b21d 1901 struct nl4_server *ns_dummy;
e8febea7
CL
1902 u32 consecutive, i, count;
1903 __be32 status;
29ae7f9d 1904
e8febea7 1905 status = nfsd4_decode_stateid4(argp, &copy->cp_src_stateid);
29ae7f9d
AS
1906 if (status)
1907 return status;
e8febea7 1908 status = nfsd4_decode_stateid4(argp, &copy->cp_dst_stateid);
29ae7f9d
AS
1909 if (status)
1910 return status;
e8febea7
CL
1911 if (xdr_stream_decode_u64(argp->xdr, &copy->cp_src_pos) < 0)
1912 return nfserr_bad_xdr;
1913 if (xdr_stream_decode_u64(argp->xdr, &copy->cp_dst_pos) < 0)
1914 return nfserr_bad_xdr;
1915 if (xdr_stream_decode_u64(argp->xdr, &copy->cp_count) < 0)
1916 return nfserr_bad_xdr;
1917 /* ca_consecutive: we always do consecutive copies */
1918 if (xdr_stream_decode_u32(argp->xdr, &consecutive) < 0)
1919 return nfserr_bad_xdr;
1920 if (xdr_stream_decode_u32(argp->xdr, &copy->cp_synchronous) < 0)
1921 return nfserr_bad_xdr;
29ae7f9d 1922
e8febea7
CL
1923 if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
1924 return nfserr_bad_xdr;
84e1b21d
OK
1925 copy->cp_intra = false;
1926 if (count == 0) { /* intra-server copy */
1927 copy->cp_intra = true;
e8febea7 1928 return nfs_ok;
84e1b21d
OK
1929 }
1930
e8febea7 1931 /* decode all the supplied server addresses but use only the first */
84e1b21d
OK
1932 status = nfsd4_decode_nl4_server(argp, &copy->cp_src);
1933 if (status)
1934 return status;
1935
1936 ns_dummy = kmalloc(sizeof(struct nl4_server), GFP_KERNEL);
1937 if (ns_dummy == NULL)
e8febea7 1938 return nfserrno(-ENOMEM); /* XXX: jukebox? */
84e1b21d
OK
1939 for (i = 0; i < count - 1; i++) {
1940 status = nfsd4_decode_nl4_server(argp, ns_dummy);
1941 if (status) {
1942 kfree(ns_dummy);
1943 return status;
1944 }
1945 }
1946 kfree(ns_dummy);
29ae7f9d 1947
e8febea7 1948 return nfs_ok;
29ae7f9d
AS
1949}
1950
51911868
OK
1951static __be32
1952nfsd4_decode_copy_notify(struct nfsd4_compoundargs *argp,
1953 struct nfsd4_copy_notify *cn)
1954{
5aff7d08 1955 __be32 status;
51911868 1956
f9a953fb 1957 status = nfsd4_decode_stateid4(argp, &cn->cpn_src_stateid);
51911868
OK
1958 if (status)
1959 return status;
1960 return nfsd4_decode_nl4_server(argp, &cn->cpn_dst);
1961}
1962
f9a953fb
CL
1963static __be32
1964nfsd4_decode_offload_status(struct nfsd4_compoundargs *argp,
1965 struct nfsd4_offload_status *os)
1966{
2846bb05 1967 return nfsd4_decode_stateid4(argp, &os->stateid);
f9a953fb
CL
1968}
1969
24bab491
AS
1970static __be32
1971nfsd4_decode_seek(struct nfsd4_compoundargs *argp, struct nfsd4_seek *seek)
1972{
9d32b412 1973 __be32 status;
24bab491 1974
9d32b412 1975 status = nfsd4_decode_stateid4(argp, &seek->seek_stateid);
24bab491
AS
1976 if (status)
1977 return status;
9d32b412
CL
1978 if (xdr_stream_decode_u64(argp->xdr, &seek->seek_offset) < 0)
1979 return nfserr_bad_xdr;
1980 if (xdr_stream_decode_u32(argp->xdr, &seek->seek_whence) < 0)
1981 return nfserr_bad_xdr;
24bab491 1982
9d32b412 1983 return nfs_ok;
24bab491
AS
1984}
1985
3dfd0b0e
CL
1986static __be32
1987nfsd4_decode_clone(struct nfsd4_compoundargs *argp, struct nfsd4_clone *clone)
1988{
1989 __be32 status;
1990
1991 status = nfsd4_decode_stateid4(argp, &clone->cl_src_stateid);
1992 if (status)
1993 return status;
1994 status = nfsd4_decode_stateid4(argp, &clone->cl_dst_stateid);
1995 if (status)
1996 return status;
1997 if (xdr_stream_decode_u64(argp->xdr, &clone->cl_src_pos) < 0)
1998 return nfserr_bad_xdr;
1999 if (xdr_stream_decode_u64(argp->xdr, &clone->cl_dst_pos) < 0)
2000 return nfserr_bad_xdr;
2001 if (xdr_stream_decode_u64(argp->xdr, &clone->cl_count) < 0)
2002 return nfserr_bad_xdr;
2003
2004 return nfs_ok;
2005}
2006
23e50fe3
FL
2007/*
2008 * XDR data that is more than PAGE_SIZE in size is normally part of a
2009 * read or write. However, the size of extended attributes is limited
2010 * by the maximum request size, and then further limited by the underlying
2011 * filesystem limits. This can exceed PAGE_SIZE (currently, XATTR_SIZE_MAX
2012 * is 64k). Since there is no kvec- or page-based interface to xattrs,
2013 * and we're not dealing with contiguous pages, we need to do some copying.
2014 */
2015
2016/*
c1346a12 2017 * Decode data into buffer.
23e50fe3
FL
2018 */
2019static __be32
c1346a12
CL
2020nfsd4_vbuf_from_vector(struct nfsd4_compoundargs *argp, struct xdr_buf *xdr,
2021 char **bufp, u32 buflen)
23e50fe3 2022{
c1346a12
CL
2023 struct page **pages = xdr->pages;
2024 struct kvec *head = xdr->head;
23e50fe3
FL
2025 char *tmp, *dp;
2026 u32 len;
2027
2028 if (buflen <= head->iov_len) {
2029 /*
2030 * We're in luck, the head has enough space. Just return
2031 * the head, no need for copying.
2032 */
2033 *bufp = head->iov_base;
2034 return 0;
2035 }
2036
2037 tmp = svcxdr_tmpalloc(argp, buflen);
2038 if (tmp == NULL)
2039 return nfserr_jukebox;
2040
2041 dp = tmp;
2042 memcpy(dp, head->iov_base, head->iov_len);
2043 buflen -= head->iov_len;
2044 dp += head->iov_len;
2045
2046 while (buflen > 0) {
2047 len = min_t(u32, buflen, PAGE_SIZE);
2048 memcpy(dp, page_address(*pages), len);
2049
2050 buflen -= len;
2051 dp += len;
2052 pages++;
2053 }
2054
2055 *bufp = tmp;
2056 return 0;
2057}
2058
2059/*
2060 * Get a user extended attribute name from the XDR buffer.
2061 * It will not have the "user." prefix, so prepend it.
2062 * Lastly, check for nul characters in the name.
2063 */
2064static __be32
2065nfsd4_decode_xattr_name(struct nfsd4_compoundargs *argp, char **namep)
2066{
23e50fe3
FL
2067 char *name, *sp, *dp;
2068 u32 namelen, cnt;
830c7150 2069 __be32 *p;
23e50fe3 2070
830c7150
CL
2071 if (xdr_stream_decode_u32(argp->xdr, &namelen) < 0)
2072 return nfserr_bad_xdr;
23e50fe3
FL
2073 if (namelen > (XATTR_NAME_MAX - XATTR_USER_PREFIX_LEN))
2074 return nfserr_nametoolong;
23e50fe3 2075 if (namelen == 0)
830c7150
CL
2076 return nfserr_bad_xdr;
2077 p = xdr_inline_decode(argp->xdr, namelen);
2078 if (!p)
2079 return nfserr_bad_xdr;
23e50fe3
FL
2080 name = svcxdr_tmpalloc(argp, namelen + XATTR_USER_PREFIX_LEN + 1);
2081 if (!name)
2082 return nfserr_jukebox;
23e50fe3
FL
2083 memcpy(name, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN);
2084
2085 /*
2086 * Copy the extended attribute name over while checking for 0
2087 * characters.
2088 */
2089 sp = (char *)p;
2090 dp = name + XATTR_USER_PREFIX_LEN;
2091 cnt = namelen;
2092
2093 while (cnt-- > 0) {
2094 if (*sp == '\0')
830c7150 2095 return nfserr_bad_xdr;
23e50fe3
FL
2096 *dp++ = *sp++;
2097 }
2098 *dp = '\0';
2099
2100 *namep = name;
2101
830c7150 2102 return nfs_ok;
23e50fe3
FL
2103}
2104
2105/*
2106 * A GETXATTR op request comes without a length specifier. We just set the
2107 * maximum length for the reply based on XATTR_SIZE_MAX and the maximum
2108 * channel reply size. nfsd_getxattr will probe the length of the xattr,
2109 * check it against getxa_len, and allocate + return the value.
2110 */
2111static __be32
2112nfsd4_decode_getxattr(struct nfsd4_compoundargs *argp,
2113 struct nfsd4_getxattr *getxattr)
2114{
2115 __be32 status;
2116 u32 maxcount;
2117
2118 status = nfsd4_decode_xattr_name(argp, &getxattr->getxa_name);
2119 if (status)
2120 return status;
2121
2122 maxcount = svc_max_payload(argp->rqstp);
2123 maxcount = min_t(u32, XATTR_SIZE_MAX, maxcount);
2124
2125 getxattr->getxa_len = maxcount;
2126
2127 return status;
2128}
2129
2130static __be32
2131nfsd4_decode_setxattr(struct nfsd4_compoundargs *argp,
2132 struct nfsd4_setxattr *setxattr)
2133{
23e50fe3 2134 u32 flags, maxcount, size;
403366a7 2135 __be32 status;
23e50fe3 2136
403366a7
CL
2137 if (xdr_stream_decode_u32(argp->xdr, &flags) < 0)
2138 return nfserr_bad_xdr;
23e50fe3
FL
2139
2140 if (flags > SETXATTR4_REPLACE)
2141 return nfserr_inval;
2142 setxattr->setxa_flags = flags;
2143
2144 status = nfsd4_decode_xattr_name(argp, &setxattr->setxa_name);
2145 if (status)
2146 return status;
2147
2148 maxcount = svc_max_payload(argp->rqstp);
2149 maxcount = min_t(u32, XATTR_SIZE_MAX, maxcount);
2150
403366a7
CL
2151 if (xdr_stream_decode_u32(argp->xdr, &size) < 0)
2152 return nfserr_bad_xdr;
23e50fe3
FL
2153 if (size > maxcount)
2154 return nfserr_xattr2big;
2155
2156 setxattr->setxa_len = size;
2157 if (size > 0) {
c1346a12 2158 struct xdr_buf payload;
23e50fe3 2159
c1346a12 2160 if (!xdr_stream_subsegment(argp->xdr, &payload, size))
403366a7 2161 return nfserr_bad_xdr;
c1346a12
CL
2162 status = nfsd4_vbuf_from_vector(argp, &payload,
2163 &setxattr->setxa_buf, size);
23e50fe3
FL
2164 }
2165
403366a7 2166 return nfs_ok;
23e50fe3
FL
2167}
2168
2169static __be32
2170nfsd4_decode_listxattrs(struct nfsd4_compoundargs *argp,
2171 struct nfsd4_listxattrs *listxattrs)
2172{
23e50fe3
FL
2173 u32 maxcount;
2174
2212036c
CL
2175 if (xdr_stream_decode_u64(argp->xdr, &listxattrs->lsxa_cookie) < 0)
2176 return nfserr_bad_xdr;
23e50fe3
FL
2177
2178 /*
2179 * If the cookie is too large to have even one user.x attribute
2180 * plus trailing '\0' left in a maximum size buffer, it's invalid.
2181 */
2182 if (listxattrs->lsxa_cookie >=
2183 (XATTR_LIST_MAX / (XATTR_USER_PREFIX_LEN + 2)))
2184 return nfserr_badcookie;
2185
2212036c
CL
2186 if (xdr_stream_decode_u32(argp->xdr, &maxcount) < 0)
2187 return nfserr_bad_xdr;
23e50fe3
FL
2188 if (maxcount < 8)
2189 /* Always need at least 2 words (length and one character) */
2190 return nfserr_inval;
2191
2192 maxcount = min(maxcount, svc_max_payload(argp->rqstp));
2193 listxattrs->lsxa_maxcount = maxcount;
2194
2212036c 2195 return nfs_ok;
23e50fe3
FL
2196}
2197
2198static __be32
2199nfsd4_decode_removexattr(struct nfsd4_compoundargs *argp,
2200 struct nfsd4_removexattr *removexattr)
2201{
2202 return nfsd4_decode_xattr_name(argp, &removexattr->rmxa_name);
2203}
2204
347e0ad9
BH
2205static __be32
2206nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p)
2207{
2208 return nfs_ok;
2209}
2210
3c375c6f
BH
2211static __be32
2212nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p)
2213{
1e685ec2 2214 return nfserr_notsupp;
3c375c6f
BH
2215}
2216
347e0ad9
BH
2217typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *);
2218
c1df609d 2219static const nfsd4_dec nfsd4_dec_ops[] = {
ad1060c8
BF
2220 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access,
2221 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close,
2222 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit,
2223 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create,
2224 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp,
2225 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn,
2226 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr,
2227 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop,
2228 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link,
2229 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock,
2230 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt,
2231 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku,
2232 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup,
2233 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop,
2234 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify,
2235 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open,
2236 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp,
2237 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm,
2238 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade,
2239 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh,
e1a90ebd 2240 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_putpubfh,
ad1060c8
BF
2241 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop,
2242 [OP_READ] = (nfsd4_dec)nfsd4_decode_read,
2243 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir,
2244 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop,
2245 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove,
2246 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename,
2247 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew,
2248 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop,
2249 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop,
2250 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo,
2251 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr,
2252 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid,
2253 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm,
2254 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify,
2255 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write,
2256 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner,
2db134eb
AA
2257
2258 /* new operations for NFSv4.1 */
cb73a9f4 2259 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl,
1d1bc8f2 2260 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session,
9064caae
RD
2261 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id,
2262 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session,
2263 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session,
e1ca12df 2264 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid,
9064caae 2265 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
9cf514cc
CH
2266#ifdef CONFIG_NFSD_PNFS
2267 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_getdeviceinfo,
2268 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
2269 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_layoutcommit,
2270 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_layoutget,
2271 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_layoutreturn,
2272#else
9064caae
RD
2273 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp,
2274 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
2275 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp,
2276 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp,
2277 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp,
9cf514cc 2278#endif
04f4ad16 2279 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name,
9064caae
RD
2280 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence,
2281 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp,
17456804 2282 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid,
9064caae 2283 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
345c2842 2284 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid,
4dc6ec00 2285 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete,
87a15a80
AS
2286
2287 /* new operations for NFSv4.2 */
95d871f0 2288 [OP_ALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate,
29ae7f9d 2289 [OP_COPY] = (nfsd4_dec)nfsd4_decode_copy,
51911868 2290 [OP_COPY_NOTIFY] = (nfsd4_dec)nfsd4_decode_copy_notify,
b0cb9085 2291 [OP_DEALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate,
87a15a80
AS
2292 [OP_IO_ADVISE] = (nfsd4_dec)nfsd4_decode_notsupp,
2293 [OP_LAYOUTERROR] = (nfsd4_dec)nfsd4_decode_notsupp,
2294 [OP_LAYOUTSTATS] = (nfsd4_dec)nfsd4_decode_notsupp,
885e2bf3 2295 [OP_OFFLOAD_CANCEL] = (nfsd4_dec)nfsd4_decode_offload_status,
6308bc98 2296 [OP_OFFLOAD_STATUS] = (nfsd4_dec)nfsd4_decode_offload_status,
528b8493 2297 [OP_READ_PLUS] = (nfsd4_dec)nfsd4_decode_read,
24bab491 2298 [OP_SEEK] = (nfsd4_dec)nfsd4_decode_seek,
87a15a80 2299 [OP_WRITE_SAME] = (nfsd4_dec)nfsd4_decode_notsupp,
ffa0160a 2300 [OP_CLONE] = (nfsd4_dec)nfsd4_decode_clone,
23e50fe3
FL
2301 /* RFC 8276 extended atributes operations */
2302 [OP_GETXATTR] = (nfsd4_dec)nfsd4_decode_getxattr,
2303 [OP_SETXATTR] = (nfsd4_dec)nfsd4_decode_setxattr,
2304 [OP_LISTXATTRS] = (nfsd4_dec)nfsd4_decode_listxattrs,
2305 [OP_REMOVEXATTR] = (nfsd4_dec)nfsd4_decode_removexattr,
2db134eb
AA
2306};
2307
e1a90ebd
AS
2308static inline bool
2309nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op)
2310{
8217d146 2311 if (op->opnum < FIRST_NFS4_OP)
e1a90ebd 2312 return false;
8217d146 2313 else if (argp->minorversion == 0 && op->opnum > LAST_NFS40_OP)
e1a90ebd 2314 return false;
8217d146
AS
2315 else if (argp->minorversion == 1 && op->opnum > LAST_NFS41_OP)
2316 return false;
2317 else if (argp->minorversion == 2 && op->opnum > LAST_NFS42_OP)
e1a90ebd
AS
2318 return false;
2319 return true;
2320}
f2feb96b 2321
d9b74bda 2322static int
1da177e4
LT
2323nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
2324{
1da177e4 2325 struct nfsd4_op *op;
1091006c 2326 bool cachethis = false;
a5cddc88
BF
2327 int auth_slack= argp->rqstp->rq_auth_slack;
2328 int max_reply = auth_slack + 8; /* opcnt, status */
b0e35fda
BF
2329 int readcount = 0;
2330 int readbytes = 0;
d9b74bda 2331 __be32 *p;
1da177e4
LT
2332 int i;
2333
d9b74bda
CL
2334 if (xdr_stream_decode_u32(argp->xdr, &argp->taglen) < 0)
2335 return 0;
2336 max_reply += XDR_UNIT;
2337 argp->tag = NULL;
2338 if (unlikely(argp->taglen)) {
2339 if (argp->taglen > NFSD4_MAX_TAGLEN)
2340 return 0;
2341 p = xdr_inline_decode(argp->xdr, argp->taglen);
2342 if (!p)
2343 return 0;
7b723008 2344 argp->tag = svcxdr_savemem(argp, p, argp->taglen);
d9b74bda
CL
2345 if (!argp->tag)
2346 return 0;
d9b74bda
CL
2347 max_reply += xdr_align_size(argp->taglen);
2348 }
2349
2350 if (xdr_stream_decode_u32(argp->xdr, &argp->minorversion) < 0)
2351 return 0;
b17b3a6f 2352 if (xdr_stream_decode_u32(argp->xdr, &argp->client_opcnt) < 0)
d9b74bda
CL
2353 return 0;
2354
b17b3a6f
CL
2355 argp->opcnt = min_t(u32, argp->client_opcnt,
2356 NFSD_MAX_OPS_PER_COMPOUND);
1da177e4 2357
e8c96f8c 2358 if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
5d6031ca 2359 argp->ops = kzalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL);
1da177e4
LT
2360 if (!argp->ops) {
2361 argp->ops = argp->iops;
817cb9d4 2362 dprintk("nfsd: couldn't allocate room for COMPOUND\n");
d9b74bda 2363 return 0;
1da177e4
LT
2364 }
2365 }
2366
e1a90ebd 2367 if (argp->minorversion > NFSD_SUPPORTED_MINOR_VERSION)
30cff1ff
BH
2368 argp->opcnt = 0;
2369
1da177e4
LT
2370 for (i = 0; i < argp->opcnt; i++) {
2371 op = &argp->ops[i];
2372 op->replay = NULL;
2373
3a237b4a 2374 if (xdr_stream_decode_u32(argp->xdr, &op->opnum) < 0)
d9b74bda 2375 return 0;
08281341 2376 if (nfsd4_opnum_in_range(argp, op)) {
e1a90ebd 2377 op->status = nfsd4_dec_ops[op->opnum](argp, &op->u);
08281341
CL
2378 if (op->status != nfs_ok)
2379 trace_nfsd_compound_decode_err(argp->rqstp,
2380 argp->opcnt, i,
2381 op->opnum,
2382 op->status);
2383 } else {
1da177e4
LT
2384 op->opnum = OP_ILLEGAL;
2385 op->status = nfserr_op_illegal;
1da177e4 2386 }
f4f9ef4a 2387 op->opdesc = OPDESC(op);
1091006c
BF
2388 /*
2389 * We'll try to cache the result in the DRC if any one
2390 * op in the compound wants to be cached:
2391 */
2392 cachethis |= nfsd4_cache_this_op(op);
6ff40dec 2393
528b8493 2394 if (op->opnum == OP_READ || op->opnum == OP_READ_PLUS) {
b0e35fda
BF
2395 readcount++;
2396 readbytes += nfsd4_max_reply(argp->rqstp, op);
2397 } else
2398 max_reply += nfsd4_max_reply(argp->rqstp, op);
f7b43d0c 2399 /*
7323f0d2
KM
2400 * OP_LOCK and OP_LOCKT may return a conflicting lock.
2401 * (Special case because it will just skip encoding this
2402 * if it runs out of xdr buffer space, and it is the only
2403 * operation that behaves this way.)
f7b43d0c 2404 */
7323f0d2 2405 if (op->opnum == OP_LOCK || op->opnum == OP_LOCKT)
f7b43d0c 2406 max_reply += NFS4_OPAQUE_LIMIT;
e372ba60
BF
2407
2408 if (op->status) {
2409 argp->opcnt = i+1;
2410 break;
2411 }
1da177e4 2412 }
1091006c
BF
2413 /* Sessions make the DRC unnecessary: */
2414 if (argp->minorversion)
2415 cachethis = false;
b0e35fda 2416 svc_reserve(argp->rqstp, max_reply + readbytes);
1091006c 2417 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
1da177e4 2418
a5cddc88 2419 if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack)
779fb0f3 2420 clear_bit(RQ_SPLICE_OK, &argp->rqstp->rq_flags);
b0e35fda 2421
d9b74bda 2422 return 1;
1da177e4 2423}
1da177e4 2424
b8800921
N
2425static __be32 *encode_change(__be32 *p, struct kstat *stat, struct inode *inode,
2426 struct svc_export *exp)
c654b8a9 2427{
b8800921
N
2428 if (exp->ex_flags & NFSEXP_V4ROOT) {
2429 *p++ = cpu_to_be32(convert_to_wallclock(exp->cd->flush_time));
2430 *p++ = 0;
70b87f77 2431 } else
39ca1bf6 2432 p = xdr_encode_hyper(p, nfsd4_change_attribute(stat, inode));
d05d5744 2433 return p;
c654b8a9
BF
2434}
2435
16945141
BF
2436/*
2437 * ctime (in NFSv4, time_metadata) is not writeable, and the client
2438 * doesn't really care what resolution could theoretically be stored by
2439 * the filesystem.
2440 *
2441 * The client cares how close together changes can be while still
2442 * guaranteeing ctime changes. For most filesystems (which have
2443 * timestamps with nanosecond fields) that is limited by the resolution
2444 * of the time returned from current_time() (which I'm assuming to be
2445 * 1/HZ).
2446 */
2447static __be32 *encode_time_delta(__be32 *p, struct inode *inode)
2448{
e4598e38 2449 struct timespec64 ts;
16945141
BF
2450 u32 ns;
2451
2452 ns = max_t(u32, NSEC_PER_SEC/HZ, inode->i_sb->s_time_gran);
e4598e38 2453 ts = ns_to_timespec64(ns);
16945141
BF
2454
2455 p = xdr_encode_hyper(p, ts.tv_sec);
2456 *p++ = cpu_to_be32(ts.tv_nsec);
2457
2458 return p;
2459}
2460
d05d5744 2461static __be32 *encode_cinfo(__be32 *p, struct nfsd4_change_info *c)
c654b8a9 2462{
d05d5744 2463 *p++ = cpu_to_be32(c->atomic);
b2140338
BF
2464 p = xdr_encode_hyper(p, c->before_change);
2465 p = xdr_encode_hyper(p, c->after_change);
d05d5744 2466 return p;
c654b8a9 2467}
1da177e4 2468
81c3f413 2469/* Encode as an array of strings the string given with components
e7a0444a 2470 * separated @sep, escaped with esc_enter and esc_exit.
81c3f413 2471 */
ddd1ea56
BF
2472static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep,
2473 char *components, char esc_enter,
2474 char esc_exit)
81c3f413 2475{
ddd1ea56 2476 __be32 *p;
082d4bd7
BF
2477 __be32 pathlen;
2478 int pathlen_offset;
81c3f413 2479 int strlen, count=0;
e7a0444a 2480 char *str, *end, *next;
81c3f413
BF
2481
2482 dprintk("nfsd4_encode_components(%s)\n", components);
082d4bd7
BF
2483
2484 pathlen_offset = xdr->buf->len;
ddd1ea56
BF
2485 p = xdr_reserve_space(xdr, 4);
2486 if (!p)
81c3f413 2487 return nfserr_resource;
082d4bd7
BF
2488 p++; /* We will fill this in with @count later */
2489
81c3f413
BF
2490 end = str = components;
2491 while (*end) {
e7a0444a
WAA
2492 bool found_esc = false;
2493
2494 /* try to parse as esc_start, ..., esc_end, sep */
2495 if (*str == esc_enter) {
2496 for (; *end && (*end != esc_exit); end++)
2497 /* find esc_exit or end of string */;
2498 next = end + 1;
2499 if (*end && (!*next || *next == sep)) {
2500 str++;
2501 found_esc = true;
2502 }
2503 }
2504
2505 if (!found_esc)
2506 for (; *end && (*end != sep); end++)
2507 /* find sep or end of string */;
2508
81c3f413
BF
2509 strlen = end - str;
2510 if (strlen) {
ddd1ea56
BF
2511 p = xdr_reserve_space(xdr, strlen + 4);
2512 if (!p)
81c3f413 2513 return nfserr_resource;
0c0c267b 2514 p = xdr_encode_opaque(p, str, strlen);
81c3f413
BF
2515 count++;
2516 }
2517 else
2518 end++;
5a64e569
BC
2519 if (found_esc)
2520 end = next;
2521
81c3f413
BF
2522 str = end;
2523 }
bf7491f1 2524 pathlen = htonl(count);
082d4bd7 2525 write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4);
81c3f413
BF
2526 return 0;
2527}
2528
e7a0444a
WAA
2529/* Encode as an array of strings the string given with components
2530 * separated @sep.
2531 */
ddd1ea56
BF
2532static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep,
2533 char *components)
e7a0444a 2534{
ddd1ea56 2535 return nfsd4_encode_components_esc(xdr, sep, components, 0, 0);
e7a0444a
WAA
2536}
2537
81c3f413
BF
2538/*
2539 * encode a location element of a fs_locations structure
2540 */
ddd1ea56
BF
2541static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr,
2542 struct nfsd4_fs_location *location)
81c3f413 2543{
b37ad28b 2544 __be32 status;
81c3f413 2545
ddd1ea56 2546 status = nfsd4_encode_components_esc(xdr, ':', location->hosts,
e7a0444a 2547 '[', ']');
81c3f413
BF
2548 if (status)
2549 return status;
ddd1ea56 2550 status = nfsd4_encode_components(xdr, '/', location->path);
81c3f413
BF
2551 if (status)
2552 return status;
81c3f413
BF
2553 return 0;
2554}
2555
2556/*
ed748aac 2557 * Encode a path in RFC3530 'pathname4' format
81c3f413 2558 */
ddd1ea56
BF
2559static __be32 nfsd4_encode_path(struct xdr_stream *xdr,
2560 const struct path *root,
2561 const struct path *path)
81c3f413 2562{
301f0268 2563 struct path cur = *path;
ddd1ea56 2564 __be32 *p;
ed748aac
TM
2565 struct dentry **components = NULL;
2566 unsigned int ncomponents = 0;
2567 __be32 err = nfserr_jukebox;
81c3f413 2568
ed748aac 2569 dprintk("nfsd4_encode_components(");
81c3f413 2570
ed748aac
TM
2571 path_get(&cur);
2572 /* First walk the path up to the nfsd root, and store the
2573 * dentries/path components in an array.
2574 */
2575 for (;;) {
b77a4b2e 2576 if (path_equal(&cur, root))
ed748aac
TM
2577 break;
2578 if (cur.dentry == cur.mnt->mnt_root) {
2579 if (follow_up(&cur))
2580 continue;
2581 goto out_free;
2582 }
2583 if ((ncomponents & 15) == 0) {
2584 struct dentry **new;
2585 new = krealloc(components,
2586 sizeof(*new) * (ncomponents + 16),
2587 GFP_KERNEL);
2588 if (!new)
2589 goto out_free;
2590 components = new;
2591 }
2592 components[ncomponents++] = cur.dentry;
2593 cur.dentry = dget_parent(cur.dentry);
2594 }
ddd1ea56
BF
2595 err = nfserr_resource;
2596 p = xdr_reserve_space(xdr, 4);
2597 if (!p)
ed748aac 2598 goto out_free;
c373b0a4 2599 *p++ = cpu_to_be32(ncomponents);
ed748aac
TM
2600
2601 while (ncomponents) {
2602 struct dentry *dentry = components[ncomponents - 1];
301f0268 2603 unsigned int len;
ed748aac 2604
301f0268
AV
2605 spin_lock(&dentry->d_lock);
2606 len = dentry->d_name.len;
ddd1ea56
BF
2607 p = xdr_reserve_space(xdr, len + 4);
2608 if (!p) {
301f0268 2609 spin_unlock(&dentry->d_lock);
ed748aac 2610 goto out_free;
301f0268 2611 }
0c0c267b 2612 p = xdr_encode_opaque(p, dentry->d_name.name, len);
a455589f 2613 dprintk("/%pd", dentry);
301f0268 2614 spin_unlock(&dentry->d_lock);
ed748aac
TM
2615 dput(dentry);
2616 ncomponents--;
81c3f413 2617 }
ed748aac 2618
ed748aac
TM
2619 err = 0;
2620out_free:
2621 dprintk(")\n");
2622 while (ncomponents)
2623 dput(components[--ncomponents]);
2624 kfree(components);
2625 path_put(&cur);
2626 return err;
2627}
2628
ddd1ea56
BF
2629static __be32 nfsd4_encode_fsloc_fsroot(struct xdr_stream *xdr,
2630 struct svc_rqst *rqstp, const struct path *path)
ed748aac
TM
2631{
2632 struct svc_export *exp_ps;
2633 __be32 res;
2634
2635 exp_ps = rqst_find_fsidzero_export(rqstp);
2636 if (IS_ERR(exp_ps))
2637 return nfserrno(PTR_ERR(exp_ps));
ddd1ea56 2638 res = nfsd4_encode_path(xdr, &exp_ps->ex_path, path);
ed748aac
TM
2639 exp_put(exp_ps);
2640 return res;
81c3f413
BF
2641}
2642
2643/*
2644 * encode a fs_locations structure
2645 */
ddd1ea56
BF
2646static __be32 nfsd4_encode_fs_locations(struct xdr_stream *xdr,
2647 struct svc_rqst *rqstp, struct svc_export *exp)
81c3f413 2648{
b37ad28b 2649 __be32 status;
cc45f017 2650 int i;
ddd1ea56 2651 __be32 *p;
81c3f413 2652 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
81c3f413 2653
ddd1ea56 2654 status = nfsd4_encode_fsloc_fsroot(xdr, rqstp, &exp->ex_path);
81c3f413
BF
2655 if (status)
2656 return status;
ddd1ea56
BF
2657 p = xdr_reserve_space(xdr, 4);
2658 if (!p)
81c3f413 2659 return nfserr_resource;
c373b0a4 2660 *p++ = cpu_to_be32(fslocs->locations_count);
81c3f413 2661 for (i=0; i<fslocs->locations_count; i++) {
ddd1ea56 2662 status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]);
81c3f413
BF
2663 if (status)
2664 return status;
2665 }
81c3f413
BF
2666 return 0;
2667}
1da177e4 2668
3d2544b1
BF
2669static u32 nfs4_file_type(umode_t mode)
2670{
2671 switch (mode & S_IFMT) {
2672 case S_IFIFO: return NF4FIFO;
2673 case S_IFCHR: return NF4CHR;
2674 case S_IFDIR: return NF4DIR;
2675 case S_IFBLK: return NF4BLK;
2676 case S_IFLNK: return NF4LNK;
2677 case S_IFREG: return NF4REG;
2678 case S_IFSOCK: return NF4SOCK;
2679 default: return NF4BAD;
25fef48b 2680 }
3d2544b1 2681}
1da177e4 2682
b37ad28b 2683static inline __be32
ddd1ea56
BF
2684nfsd4_encode_aclname(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2685 struct nfs4_ace *ace)
1da177e4 2686{
3554116d 2687 if (ace->whotype != NFS4_ACL_WHO_NAMED)
ddd1ea56 2688 return nfs4_acl_write_who(xdr, ace->whotype);
3554116d 2689 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
ddd1ea56 2690 return nfsd4_encode_group(xdr, rqstp, ace->who_gid);
3554116d 2691 else
ddd1ea56 2692 return nfsd4_encode_user(xdr, rqstp, ace->who_uid);
1da177e4
LT
2693}
2694
6896f15a 2695static inline __be32
8a4c3926 2696nfsd4_encode_layout_types(struct xdr_stream *xdr, u32 layout_types)
6896f15a 2697{
8a4c3926
JL
2698 __be32 *p;
2699 unsigned long i = hweight_long(layout_types);
6896f15a 2700
8a4c3926
JL
2701 p = xdr_reserve_space(xdr, 4 + 4 * i);
2702 if (!p)
2703 return nfserr_resource;
2704
2705 *p++ = cpu_to_be32(i);
2706
2707 for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i)
2708 if (layout_types & (1 << i))
2709 *p++ = cpu_to_be32(i);
6896f15a
KM
2710
2711 return 0;
2712}
2713
42ca0993
BF
2714#define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
2715 FATTR4_WORD0_RDATTR_ERROR)
2716#define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
c2227a39 2717#define WORD2_ABSENT_FS_ATTRS 0
42ca0993 2718
18032ca0
DQ
2719#ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2720static inline __be32
ddd1ea56 2721nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
1013a233 2722 struct lsmcontext *context)
18032ca0 2723{
ddd1ea56 2724 __be32 *p;
18032ca0 2725
1013a233 2726 p = xdr_reserve_space(xdr, context->len + 4 + 4 + 4);
ddd1ea56 2727 if (!p)
18032ca0
DQ
2728 return nfserr_resource;
2729
2730 /*
2731 * For now we use a 0 here to indicate the null translation; in
2732 * the future we may place a call to translation code here.
2733 */
c373b0a4
BF
2734 *p++ = cpu_to_be32(0); /* lfs */
2735 *p++ = cpu_to_be32(0); /* pi */
1013a233 2736 p = xdr_encode_opaque(p, context->context, context->len);
18032ca0
DQ
2737 return 0;
2738}
2739#else
2740static inline __be32
ddd1ea56 2741nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
1013a233 2742 struct lsmcontext *context)
18032ca0
DQ
2743{ return 0; }
2744#endif
2745
c2227a39 2746static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *bmval2, u32 *rdattr_err)
42ca0993
BF
2747{
2748 /* As per referral draft: */
2749 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
2750 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
2751 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
2752 *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
2753 *rdattr_err = NFSERR_MOVED;
2754 else
2755 return nfserr_moved;
2756 }
2757 *bmval0 &= WORD0_ABSENT_FS_ATTRS;
2758 *bmval1 &= WORD1_ABSENT_FS_ATTRS;
c2227a39 2759 *bmval2 &= WORD2_ABSENT_FS_ATTRS;
42ca0993
BF
2760 return 0;
2761}
1da177e4 2762
ae7095a7
BF
2763
2764static int get_parent_attributes(struct svc_export *exp, struct kstat *stat)
2765{
2766 struct path path = exp->ex_path;
2767 int err;
2768
2769 path_get(&path);
2770 while (follow_up(&path)) {
2771 if (path.dentry != path.mnt->mnt_root)
2772 break;
2773 }
a528d35e 2774 err = vfs_getattr(&path, stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT);
ae7095a7
BF
2775 path_put(&path);
2776 return err;
2777}
2778
75976de6
KM
2779static __be32
2780nfsd4_encode_bitmap(struct xdr_stream *xdr, u32 bmval0, u32 bmval1, u32 bmval2)
2781{
2782 __be32 *p;
2783
2784 if (bmval2) {
2785 p = xdr_reserve_space(xdr, 16);
2786 if (!p)
2787 goto out_resource;
2788 *p++ = cpu_to_be32(3);
2789 *p++ = cpu_to_be32(bmval0);
2790 *p++ = cpu_to_be32(bmval1);
2791 *p++ = cpu_to_be32(bmval2);
2792 } else if (bmval1) {
2793 p = xdr_reserve_space(xdr, 12);
2794 if (!p)
2795 goto out_resource;
2796 *p++ = cpu_to_be32(2);
2797 *p++ = cpu_to_be32(bmval0);
2798 *p++ = cpu_to_be32(bmval1);
2799 } else {
2800 p = xdr_reserve_space(xdr, 8);
2801 if (!p)
2802 goto out_resource;
2803 *p++ = cpu_to_be32(1);
2804 *p++ = cpu_to_be32(bmval0);
2805 }
2806
2807 return 0;
2808out_resource:
2809 return nfserr_resource;
2810}
2811
1da177e4
LT
2812/*
2813 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
2814 * ourselves.
1da177e4 2815 */
da2ebce6 2816static __be32
d5184658
BF
2817nfsd4_encode_fattr(struct xdr_stream *xdr, struct svc_fh *fhp,
2818 struct svc_export *exp,
2819 struct dentry *dentry, u32 *bmval,
406a7ea9 2820 struct svc_rqst *rqstp, int ignore_crossmnt)
1da177e4
LT
2821{
2822 u32 bmval0 = bmval[0];
2823 u32 bmval1 = bmval[1];
7e705706 2824 u32 bmval2 = bmval[2];
1da177e4 2825 struct kstat stat;
d50e6136 2826 struct svc_fh *tempfh = NULL;
1da177e4 2827 struct kstatfs statfs;
ddd1ea56 2828 __be32 *p;
1fcea5b2 2829 int starting_len = xdr->buf->len;
082d4bd7
BF
2830 int attrlen_offset;
2831 __be32 attrlen;
1da177e4
LT
2832 u32 dummy;
2833 u64 dummy64;
42ca0993 2834 u32 rdattr_err = 0;
b37ad28b 2835 __be32 status;
b8dd7b9a 2836 int err;
1da177e4 2837 struct nfs4_acl *acl = NULL;
0ab88ca4 2838#ifdef CONFIG_NFSD_V4_SECURITY_LABEL
1013a233 2839 struct lsmcontext context = { };
0ab88ca4 2840#endif
18032ca0 2841 bool contextsupport = false;
7e705706
AA
2842 struct nfsd4_compoundres *resp = rqstp->rq_resp;
2843 u32 minorversion = resp->cstate.minorversion;
ebabe9a9
CH
2844 struct path path = {
2845 .mnt = exp->ex_path.mnt,
2846 .dentry = dentry,
2847 };
3d733711 2848 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
1da177e4
LT
2849
2850 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1);
916d2d84 2851 BUG_ON(!nfsd_attrs_supported(minorversion, bmval));
1da177e4 2852
42ca0993 2853 if (exp->ex_fslocs.migrated) {
c2227a39 2854 status = fattr_handle_absent_fs(&bmval0, &bmval1, &bmval2, &rdattr_err);
42ca0993
BF
2855 if (status)
2856 goto out;
2857 }
2858
a528d35e 2859 err = vfs_getattr(&path, &stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT);
b8dd7b9a 2860 if (err)
1da177e4 2861 goto out_nfserr;
12337901
CH
2862 if ((bmval0 & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE |
2863 FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) ||
1da177e4
LT
2864 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
2865 FATTR4_WORD1_SPACE_TOTAL))) {
ebabe9a9 2866 err = vfs_statfs(&path, &statfs);
b8dd7b9a 2867 if (err)
1da177e4
LT
2868 goto out_nfserr;
2869 }
2870 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) {
d50e6136
BF
2871 tempfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL);
2872 status = nfserr_jukebox;
2873 if (!tempfh)
2874 goto out;
2875 fh_init(tempfh, NFS4_FHSIZE);
2876 status = fh_compose(tempfh, exp, dentry, NULL);
1da177e4
LT
2877 if (status)
2878 goto out;
d50e6136 2879 fhp = tempfh;
1da177e4 2880 }
0c9d65e7 2881 if (bmval0 & FATTR4_WORD0_ACL) {
b8dd7b9a 2882 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl);
0c9d65e7
AG
2883 if (err == -EOPNOTSUPP)
2884 bmval0 &= ~FATTR4_WORD0_ACL;
2885 else if (err == -EINVAL) {
2886 status = nfserr_attrnotsupp;
2887 goto out;
2888 } else if (err != 0)
2889 goto out_nfserr;
1da177e4 2890 }
1da177e4 2891
18032ca0 2892#ifdef CONFIG_NFSD_V4_SECURITY_LABEL
c2227a39
KM
2893 if ((bmval2 & FATTR4_WORD2_SECURITY_LABEL) ||
2894 bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
32ddd944
BF
2895 if (exp->ex_flags & NFSEXP_SECURITY_LABEL)
2896 err = security_inode_getsecctx(d_inode(dentry),
1013a233 2897 &context);
32ddd944
BF
2898 else
2899 err = -EOPNOTSUPP;
18032ca0
DQ
2900 contextsupport = (err == 0);
2901 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
2902 if (err == -EOPNOTSUPP)
2903 bmval2 &= ~FATTR4_WORD2_SECURITY_LABEL;
2904 else if (err)
2905 goto out_nfserr;
2906 }
2907 }
2908#endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
2909
75976de6
KM
2910 status = nfsd4_encode_bitmap(xdr, bmval0, bmval1, bmval2);
2911 if (status)
2912 goto out;
082d4bd7
BF
2913
2914 attrlen_offset = xdr->buf->len;
ddd1ea56
BF
2915 p = xdr_reserve_space(xdr, 4);
2916 if (!p)
2917 goto out_resource;
082d4bd7 2918 p++; /* to be backfilled later */
1da177e4
LT
2919
2920 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
dcd20869
BF
2921 u32 supp[3];
2922
2923 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
7e705706 2924
0c9d65e7 2925 if (!IS_POSIXACL(dentry->d_inode))
916d2d84 2926 supp[0] &= ~FATTR4_WORD0_ACL;
18032ca0 2927 if (!contextsupport)
916d2d84
BF
2928 supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
2929 if (!supp[2]) {
ddd1ea56
BF
2930 p = xdr_reserve_space(xdr, 12);
2931 if (!p)
2b44f1ba 2932 goto out_resource;
c373b0a4 2933 *p++ = cpu_to_be32(2);
916d2d84
BF
2934 *p++ = cpu_to_be32(supp[0]);
2935 *p++ = cpu_to_be32(supp[1]);
7e705706 2936 } else {
ddd1ea56
BF
2937 p = xdr_reserve_space(xdr, 16);
2938 if (!p)
2b44f1ba 2939 goto out_resource;
c373b0a4 2940 *p++ = cpu_to_be32(3);
916d2d84
BF
2941 *p++ = cpu_to_be32(supp[0]);
2942 *p++ = cpu_to_be32(supp[1]);
2943 *p++ = cpu_to_be32(supp[2]);
7e705706 2944 }
1da177e4
LT
2945 }
2946 if (bmval0 & FATTR4_WORD0_TYPE) {
ddd1ea56
BF
2947 p = xdr_reserve_space(xdr, 4);
2948 if (!p)
1da177e4 2949 goto out_resource;
3d2544b1 2950 dummy = nfs4_file_type(stat.mode);
6b6d8137
BF
2951 if (dummy == NF4BAD) {
2952 status = nfserr_serverfault;
2953 goto out;
2954 }
c373b0a4 2955 *p++ = cpu_to_be32(dummy);
1da177e4
LT
2956 }
2957 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
ddd1ea56
BF
2958 p = xdr_reserve_space(xdr, 4);
2959 if (!p)
1da177e4 2960 goto out_resource;
49640001 2961 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
c373b0a4 2962 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT);
49640001 2963 else
c373b0a4
BF
2964 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT|
2965 NFS4_FH_VOL_RENAME);
1da177e4
LT
2966 }
2967 if (bmval0 & FATTR4_WORD0_CHANGE) {
ddd1ea56
BF
2968 p = xdr_reserve_space(xdr, 8);
2969 if (!p)
1da177e4 2970 goto out_resource;
b8800921 2971 p = encode_change(p, &stat, d_inode(dentry), exp);
1da177e4
LT
2972 }
2973 if (bmval0 & FATTR4_WORD0_SIZE) {
ddd1ea56
BF
2974 p = xdr_reserve_space(xdr, 8);
2975 if (!p)
1da177e4 2976 goto out_resource;
b64c7f3b 2977 p = xdr_encode_hyper(p, stat.size);
1da177e4
LT
2978 }
2979 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
ddd1ea56
BF
2980 p = xdr_reserve_space(xdr, 4);
2981 if (!p)
1da177e4 2982 goto out_resource;
c373b0a4 2983 *p++ = cpu_to_be32(1);
1da177e4
LT
2984 }
2985 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
ddd1ea56
BF
2986 p = xdr_reserve_space(xdr, 4);
2987 if (!p)
1da177e4 2988 goto out_resource;
c373b0a4 2989 *p++ = cpu_to_be32(1);
1da177e4
LT
2990 }
2991 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
ddd1ea56
BF
2992 p = xdr_reserve_space(xdr, 4);
2993 if (!p)
1da177e4 2994 goto out_resource;
c373b0a4 2995 *p++ = cpu_to_be32(0);
1da177e4
LT
2996 }
2997 if (bmval0 & FATTR4_WORD0_FSID) {
ddd1ea56
BF
2998 p = xdr_reserve_space(xdr, 16);
2999 if (!p)
1da177e4 3000 goto out_resource;
42ca0993 3001 if (exp->ex_fslocs.migrated) {
b64c7f3b
BF
3002 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR);
3003 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR);
af6a4e28
N
3004 } else switch(fsid_source(fhp)) {
3005 case FSIDSOURCE_FSID:
b64c7f3b
BF
3006 p = xdr_encode_hyper(p, (u64)exp->ex_fsid);
3007 p = xdr_encode_hyper(p, (u64)0);
af6a4e28
N
3008 break;
3009 case FSIDSOURCE_DEV:
c373b0a4
BF
3010 *p++ = cpu_to_be32(0);
3011 *p++ = cpu_to_be32(MAJOR(stat.dev));
3012 *p++ = cpu_to_be32(0);
3013 *p++ = cpu_to_be32(MINOR(stat.dev));
af6a4e28
N
3014 break;
3015 case FSIDSOURCE_UUID:
94eb3689
KM
3016 p = xdr_encode_opaque_fixed(p, exp->ex_uuid,
3017 EX_UUID_LEN);
af6a4e28 3018 break;
1da177e4
LT
3019 }
3020 }
3021 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
ddd1ea56
BF
3022 p = xdr_reserve_space(xdr, 4);
3023 if (!p)
1da177e4 3024 goto out_resource;
c373b0a4 3025 *p++ = cpu_to_be32(0);
1da177e4
LT
3026 }
3027 if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
ddd1ea56
BF
3028 p = xdr_reserve_space(xdr, 4);
3029 if (!p)
1da177e4 3030 goto out_resource;
c373b0a4 3031 *p++ = cpu_to_be32(nn->nfsd4_lease);
1da177e4
LT
3032 }
3033 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
ddd1ea56
BF
3034 p = xdr_reserve_space(xdr, 4);
3035 if (!p)
1da177e4 3036 goto out_resource;
c373b0a4 3037 *p++ = cpu_to_be32(rdattr_err);
1da177e4
LT
3038 }
3039 if (bmval0 & FATTR4_WORD0_ACL) {
3040 struct nfs4_ace *ace;
1da177e4
LT
3041
3042 if (acl == NULL) {
ddd1ea56
BF
3043 p = xdr_reserve_space(xdr, 4);
3044 if (!p)
1da177e4
LT
3045 goto out_resource;
3046
c373b0a4 3047 *p++ = cpu_to_be32(0);
1da177e4
LT
3048 goto out_acl;
3049 }
ddd1ea56
BF
3050 p = xdr_reserve_space(xdr, 4);
3051 if (!p)
1da177e4 3052 goto out_resource;
c373b0a4 3053 *p++ = cpu_to_be32(acl->naces);
1da177e4 3054
28e05dd8 3055 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
ddd1ea56
BF
3056 p = xdr_reserve_space(xdr, 4*3);
3057 if (!p)
1da177e4 3058 goto out_resource;
c373b0a4
BF
3059 *p++ = cpu_to_be32(ace->type);
3060 *p++ = cpu_to_be32(ace->flag);
3061 *p++ = cpu_to_be32(ace->access_mask &
3062 NFS4_ACE_MASK_ALL);
ddd1ea56 3063 status = nfsd4_encode_aclname(xdr, rqstp, ace);
1da177e4
LT
3064 if (status)
3065 goto out;
3066 }
3067 }
3068out_acl:
3069 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
ddd1ea56
BF
3070 p = xdr_reserve_space(xdr, 4);
3071 if (!p)
1da177e4 3072 goto out_resource;
0c9d65e7 3073 *p++ = cpu_to_be32(IS_POSIXACL(dentry->d_inode) ?
1da177e4
LT
3074 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
3075 }
3076 if (bmval0 & FATTR4_WORD0_CANSETTIME) {
ddd1ea56
BF
3077 p = xdr_reserve_space(xdr, 4);
3078 if (!p)
1da177e4 3079 goto out_resource;
c373b0a4 3080 *p++ = cpu_to_be32(1);
1da177e4
LT
3081 }
3082 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
ddd1ea56
BF
3083 p = xdr_reserve_space(xdr, 4);
3084 if (!p)
1da177e4 3085 goto out_resource;
c373b0a4 3086 *p++ = cpu_to_be32(0);
1da177e4
LT
3087 }
3088 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
ddd1ea56
BF
3089 p = xdr_reserve_space(xdr, 4);
3090 if (!p)
1da177e4 3091 goto out_resource;
c373b0a4 3092 *p++ = cpu_to_be32(1);
1da177e4
LT
3093 }
3094 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
ddd1ea56
BF
3095 p = xdr_reserve_space(xdr, 4);
3096 if (!p)
1da177e4 3097 goto out_resource;
c373b0a4 3098 *p++ = cpu_to_be32(1);
1da177e4
LT
3099 }
3100 if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
ddd1ea56
BF
3101 p = xdr_reserve_space(xdr, fhp->fh_handle.fh_size + 4);
3102 if (!p)
1da177e4 3103 goto out_resource;
0c0c267b
BF
3104 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base,
3105 fhp->fh_handle.fh_size);
1da177e4
LT
3106 }
3107 if (bmval0 & FATTR4_WORD0_FILEID) {
ddd1ea56
BF
3108 p = xdr_reserve_space(xdr, 8);
3109 if (!p)
1da177e4 3110 goto out_resource;
b64c7f3b 3111 p = xdr_encode_hyper(p, stat.ino);
1da177e4
LT
3112 }
3113 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
ddd1ea56
BF
3114 p = xdr_reserve_space(xdr, 8);
3115 if (!p)
1da177e4 3116 goto out_resource;
b64c7f3b 3117 p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
1da177e4
LT
3118 }
3119 if (bmval0 & FATTR4_WORD0_FILES_FREE) {
ddd1ea56
BF
3120 p = xdr_reserve_space(xdr, 8);
3121 if (!p)
1da177e4 3122 goto out_resource;
b64c7f3b 3123 p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
1da177e4
LT
3124 }
3125 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
ddd1ea56
BF
3126 p = xdr_reserve_space(xdr, 8);
3127 if (!p)
1da177e4 3128 goto out_resource;
b64c7f3b 3129 p = xdr_encode_hyper(p, (u64) statfs.f_files);
1da177e4 3130 }
81c3f413 3131 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
ddd1ea56 3132 status = nfsd4_encode_fs_locations(xdr, rqstp, exp);
81c3f413
BF
3133 if (status)
3134 goto out;
3135 }
1da177e4 3136 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
ddd1ea56
BF
3137 p = xdr_reserve_space(xdr, 4);
3138 if (!p)
1da177e4 3139 goto out_resource;
c373b0a4 3140 *p++ = cpu_to_be32(1);
1da177e4
LT
3141 }
3142 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
ddd1ea56
BF
3143 p = xdr_reserve_space(xdr, 8);
3144 if (!p)
1da177e4 3145 goto out_resource;
b64c7f3b 3146 p = xdr_encode_hyper(p, exp->ex_path.mnt->mnt_sb->s_maxbytes);
1da177e4
LT
3147 }
3148 if (bmval0 & FATTR4_WORD0_MAXLINK) {
ddd1ea56
BF
3149 p = xdr_reserve_space(xdr, 4);
3150 if (!p)
1da177e4 3151 goto out_resource;
c373b0a4 3152 *p++ = cpu_to_be32(255);
1da177e4
LT
3153 }
3154 if (bmval0 & FATTR4_WORD0_MAXNAME) {
ddd1ea56
BF
3155 p = xdr_reserve_space(xdr, 4);
3156 if (!p)
1da177e4 3157 goto out_resource;
c373b0a4 3158 *p++ = cpu_to_be32(statfs.f_namelen);
1da177e4
LT
3159 }
3160 if (bmval0 & FATTR4_WORD0_MAXREAD) {
ddd1ea56
BF
3161 p = xdr_reserve_space(xdr, 8);
3162 if (!p)
1da177e4 3163 goto out_resource;
b64c7f3b 3164 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
1da177e4
LT
3165 }
3166 if (bmval0 & FATTR4_WORD0_MAXWRITE) {
ddd1ea56
BF
3167 p = xdr_reserve_space(xdr, 8);
3168 if (!p)
1da177e4 3169 goto out_resource;
b64c7f3b 3170 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
1da177e4
LT
3171 }
3172 if (bmval1 & FATTR4_WORD1_MODE) {
ddd1ea56
BF
3173 p = xdr_reserve_space(xdr, 4);
3174 if (!p)
1da177e4 3175 goto out_resource;
c373b0a4 3176 *p++ = cpu_to_be32(stat.mode & S_IALLUGO);
1da177e4
LT
3177 }
3178 if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
ddd1ea56
BF
3179 p = xdr_reserve_space(xdr, 4);
3180 if (!p)
1da177e4 3181 goto out_resource;
c373b0a4 3182 *p++ = cpu_to_be32(1);
1da177e4
LT
3183 }
3184 if (bmval1 & FATTR4_WORD1_NUMLINKS) {
ddd1ea56
BF
3185 p = xdr_reserve_space(xdr, 4);
3186 if (!p)
1da177e4 3187 goto out_resource;
c373b0a4 3188 *p++ = cpu_to_be32(stat.nlink);
1da177e4
LT
3189 }
3190 if (bmval1 & FATTR4_WORD1_OWNER) {
ddd1ea56 3191 status = nfsd4_encode_user(xdr, rqstp, stat.uid);
1da177e4
LT
3192 if (status)
3193 goto out;
3194 }
3195 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
ddd1ea56 3196 status = nfsd4_encode_group(xdr, rqstp, stat.gid);
1da177e4
LT
3197 if (status)
3198 goto out;
3199 }
3200 if (bmval1 & FATTR4_WORD1_RAWDEV) {
ddd1ea56
BF
3201 p = xdr_reserve_space(xdr, 8);
3202 if (!p)
1da177e4 3203 goto out_resource;
c373b0a4
BF
3204 *p++ = cpu_to_be32((u32) MAJOR(stat.rdev));
3205 *p++ = cpu_to_be32((u32) MINOR(stat.rdev));
1da177e4
LT
3206 }
3207 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
ddd1ea56
BF
3208 p = xdr_reserve_space(xdr, 8);
3209 if (!p)
1da177e4
LT
3210 goto out_resource;
3211 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
b64c7f3b 3212 p = xdr_encode_hyper(p, dummy64);
1da177e4
LT
3213 }
3214 if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
ddd1ea56
BF
3215 p = xdr_reserve_space(xdr, 8);
3216 if (!p)
1da177e4
LT
3217 goto out_resource;
3218 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
b64c7f3b 3219 p = xdr_encode_hyper(p, dummy64);
1da177e4
LT
3220 }
3221 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
ddd1ea56
BF
3222 p = xdr_reserve_space(xdr, 8);
3223 if (!p)
1da177e4
LT
3224 goto out_resource;
3225 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
b64c7f3b 3226 p = xdr_encode_hyper(p, dummy64);
1da177e4
LT
3227 }
3228 if (bmval1 & FATTR4_WORD1_SPACE_USED) {
ddd1ea56
BF
3229 p = xdr_reserve_space(xdr, 8);
3230 if (!p)
1da177e4
LT
3231 goto out_resource;
3232 dummy64 = (u64)stat.blocks << 9;
b64c7f3b 3233 p = xdr_encode_hyper(p, dummy64);
1da177e4
LT
3234 }
3235 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
ddd1ea56
BF
3236 p = xdr_reserve_space(xdr, 12);
3237 if (!p)
1da177e4 3238 goto out_resource;
b64c7f3b 3239 p = xdr_encode_hyper(p, (s64)stat.atime.tv_sec);
c373b0a4 3240 *p++ = cpu_to_be32(stat.atime.tv_nsec);
1da177e4
LT
3241 }
3242 if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
ddd1ea56
BF
3243 p = xdr_reserve_space(xdr, 12);
3244 if (!p)
1da177e4 3245 goto out_resource;
16945141 3246 p = encode_time_delta(p, d_inode(dentry));
1da177e4
LT
3247 }
3248 if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
ddd1ea56
BF
3249 p = xdr_reserve_space(xdr, 12);
3250 if (!p)
1da177e4 3251 goto out_resource;
b64c7f3b 3252 p = xdr_encode_hyper(p, (s64)stat.ctime.tv_sec);
c373b0a4 3253 *p++ = cpu_to_be32(stat.ctime.tv_nsec);
1da177e4
LT
3254 }
3255 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
ddd1ea56
BF
3256 p = xdr_reserve_space(xdr, 12);
3257 if (!p)
1da177e4 3258 goto out_resource;
b64c7f3b 3259 p = xdr_encode_hyper(p, (s64)stat.mtime.tv_sec);
c373b0a4 3260 *p++ = cpu_to_be32(stat.mtime.tv_nsec);
1da177e4
LT
3261 }
3262 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
0a2050d7
KM
3263 struct kstat parent_stat;
3264 u64 ino = stat.ino;
3265
ddd1ea56
BF
3266 p = xdr_reserve_space(xdr, 8);
3267 if (!p)
1da177e4 3268 goto out_resource;
406a7ea9
FF
3269 /*
3270 * Get parent's attributes if not ignoring crossmount
3271 * and this is the root of a cross-mounted filesystem.
3272 */
3273 if (ignore_crossmnt == 0 &&
0a2050d7
KM
3274 dentry == exp->ex_path.mnt->mnt_root) {
3275 err = get_parent_attributes(exp, &parent_stat);
3276 if (err)
3277 goto out_nfserr;
3278 ino = parent_stat.ino;
3279 }
3280 p = xdr_encode_hyper(p, ino);
1da177e4 3281 }
9cf514cc 3282#ifdef CONFIG_NFSD_PNFS
6896f15a 3283 if (bmval1 & FATTR4_WORD1_FS_LAYOUT_TYPES) {
8a4c3926 3284 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types);
6896f15a
KM
3285 if (status)
3286 goto out;
3287 }
3288
3289 if (bmval2 & FATTR4_WORD2_LAYOUT_TYPES) {
8a4c3926 3290 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types);
6896f15a
KM
3291 if (status)
3292 goto out;
9cf514cc
CH
3293 }
3294
3295 if (bmval2 & FATTR4_WORD2_LAYOUT_BLKSIZE) {
3296 p = xdr_reserve_space(xdr, 4);
3297 if (!p)
3298 goto out_resource;
3299 *p++ = cpu_to_be32(stat.blksize);
3300 }
3301#endif /* CONFIG_NFSD_PNFS */
8c18f205 3302 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
b26b78cb
TM
3303 u32 supp[3];
3304
3305 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
3306 supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0;
3307 supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1;
3308 supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2;
3309
3310 status = nfsd4_encode_bitmap(xdr, supp[0], supp[1], supp[2]);
75976de6
KM
3311 if (status)
3312 goto out;
8c18f205 3313 }
7e705706 3314
0ab88ca4 3315#ifdef CONFIG_NFSD_V4_SECURITY_LABEL
7d580722 3316 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
1013a233 3317 status = nfsd4_encode_security_label(xdr, rqstp, &context);
7d580722
KM
3318 if (status)
3319 goto out;
3320 }
0ab88ca4 3321#endif
7d580722 3322
0e885e84
FL
3323 if (bmval2 & FATTR4_WORD2_XATTR_SUPPORT) {
3324 p = xdr_reserve_space(xdr, 4);
3325 if (!p)
3326 goto out_resource;
3327 err = xattr_supported_namespace(d_inode(dentry),
3328 XATTR_USER_PREFIX);
3329 *p++ = cpu_to_be32(err == 0);
3330 }
3331
082d4bd7
BF
3332 attrlen = htonl(xdr->buf->len - attrlen_offset - 4);
3333 write_bytes_to_xdr_buf(xdr->buf, attrlen_offset, &attrlen, 4);
1da177e4
LT
3334 status = nfs_ok;
3335
3336out:
ba4e55bb 3337#ifdef CONFIG_NFSD_V4_SECURITY_LABEL
1013a233
CS
3338 if (context.context)
3339 security_release_secctx(&context);
ba4e55bb 3340#endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
28e05dd8 3341 kfree(acl);
18df11d0 3342 if (tempfh) {
d50e6136 3343 fh_put(tempfh);
18df11d0
YZ
3344 kfree(tempfh);
3345 }
1fcea5b2
BF
3346 if (status)
3347 xdr_truncate_encode(xdr, starting_len);
1da177e4
LT
3348 return status;
3349out_nfserr:
b8dd7b9a 3350 status = nfserrno(err);
1da177e4
LT
3351 goto out;
3352out_resource:
1da177e4
LT
3353 status = nfserr_resource;
3354 goto out;
1da177e4
LT
3355}
3356
2825a7f9
BF
3357static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr,
3358 struct xdr_buf *buf, __be32 *p, int bytes)
3359{
3360 xdr->scratch.iov_len = 0;
3361 memset(buf, 0, sizeof(struct xdr_buf));
3362 buf->head[0].iov_base = p;
3363 buf->head[0].iov_len = 0;
3364 buf->len = 0;
3365 xdr->buf = buf;
3366 xdr->iov = buf->head;
3367 xdr->p = p;
3368 xdr->end = (void *)p + bytes;
3369 buf->buflen = bytes;
3370}
3371
d5184658
BF
3372__be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words,
3373 struct svc_fh *fhp, struct svc_export *exp,
3374 struct dentry *dentry, u32 *bmval,
3375 struct svc_rqst *rqstp, int ignore_crossmnt)
3376{
2825a7f9 3377 struct xdr_buf dummy;
d5184658
BF
3378 struct xdr_stream xdr;
3379 __be32 ret;
3380
2825a7f9 3381 svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2);
d5184658
BF
3382 ret = nfsd4_encode_fattr(&xdr, fhp, exp, dentry, bmval, rqstp,
3383 ignore_crossmnt);
3384 *p = xdr.p;
3385 return ret;
3386}
3387
c0ce6ec8
BF
3388static inline int attributes_need_mount(u32 *bmval)
3389{
3390 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
3391 return 1;
3392 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
3393 return 1;
3394 return 0;
3395}
3396
b37ad28b 3397static __be32
561f0ed4
BF
3398nfsd4_encode_dirent_fattr(struct xdr_stream *xdr, struct nfsd4_readdir *cd,
3399 const char *name, int namlen)
1da177e4
LT
3400{
3401 struct svc_export *exp = cd->rd_fhp->fh_export;
3402 struct dentry *dentry;
b37ad28b 3403 __be32 nfserr;
406a7ea9 3404 int ignore_crossmnt = 0;
1da177e4 3405
6c2d4798 3406 dentry = lookup_positive_unlocked(name, cd->rd_fhp->fh_dentry, namlen);
1da177e4
LT
3407 if (IS_ERR(dentry))
3408 return nfserrno(PTR_ERR(dentry));
3409
3410 exp_get(exp);
406a7ea9
FF
3411 /*
3412 * In the case of a mountpoint, the client may be asking for
3413 * attributes that are only properties of the underlying filesystem
3414 * as opposed to the cross-mounted file system. In such a case,
3415 * we will not follow the cross mount and will fill the attribtutes
3416 * directly from the mountpoint dentry.
3417 */
3227fa41 3418 if (nfsd_mountpoint(dentry, exp)) {
021d3a72
BF
3419 int err;
3420
3227fa41
BF
3421 if (!(exp->ex_flags & NFSEXP_V4ROOT)
3422 && !attributes_need_mount(cd->rd_bmval)) {
3423 ignore_crossmnt = 1;
3424 goto out_encode;
3425 }
dcb488a3
AA
3426 /*
3427 * Why the heck aren't we just using nfsd_lookup??
3428 * Different "."/".." handling? Something else?
3429 * At least, add a comment here to explain....
3430 */
021d3a72
BF
3431 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
3432 if (err) {
3433 nfserr = nfserrno(err);
1da177e4
LT
3434 goto out_put;
3435 }
dcb488a3
AA
3436 nfserr = check_nfsd_access(exp, cd->rd_rqstp);
3437 if (nfserr)
3438 goto out_put;
1da177e4
LT
3439
3440 }
3227fa41 3441out_encode:
561f0ed4 3442 nfserr = nfsd4_encode_fattr(xdr, NULL, exp, dentry, cd->rd_bmval,
406a7ea9 3443 cd->rd_rqstp, ignore_crossmnt);
1da177e4
LT
3444out_put:
3445 dput(dentry);
3446 exp_put(exp);
3447 return nfserr;
3448}
3449
2ebbc012 3450static __be32 *
561f0ed4 3451nfsd4_encode_rdattr_error(struct xdr_stream *xdr, __be32 nfserr)
1da177e4 3452{
561f0ed4
BF
3453 __be32 *p;
3454
c3a45617 3455 p = xdr_reserve_space(xdr, 20);
561f0ed4 3456 if (!p)
1da177e4
LT
3457 return NULL;
3458 *p++ = htonl(2);
3459 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
3460 *p++ = htonl(0); /* bmval1 */
3461
87915c64 3462 *p++ = htonl(4); /* attribute length */
1da177e4 3463 *p++ = nfserr; /* no htonl */
1da177e4
LT
3464 return p;
3465}
3466
3467static int
a0ad13ef
N
3468nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
3469 loff_t offset, u64 ino, unsigned int d_type)
1da177e4 3470{
a0ad13ef 3471 struct readdir_cd *ccd = ccdv;
1da177e4 3472 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
561f0ed4
BF
3473 struct xdr_stream *xdr = cd->xdr;
3474 int start_offset = xdr->buf->len;
3475 int cookie_offset;
aee37764 3476 u32 name_and_cookie;
561f0ed4 3477 int entry_bytes;
b37ad28b 3478 __be32 nfserr = nfserr_toosmall;
561f0ed4
BF
3479 __be64 wire_offset;
3480 __be32 *p;
1da177e4
LT
3481
3482 /* In nfsv4, "." and ".." never make it onto the wire.. */
3483 if (name && isdotent(name, namlen)) {
3484 cd->common.err = nfs_ok;
3485 return 0;
3486 }
3487
561f0ed4
BF
3488 if (cd->cookie_offset) {
3489 wire_offset = cpu_to_be64(offset);
3490 write_bytes_to_xdr_buf(xdr->buf, cd->cookie_offset,
3491 &wire_offset, 8);
3492 }
1da177e4 3493
561f0ed4
BF
3494 p = xdr_reserve_space(xdr, 4);
3495 if (!p)
1da177e4 3496 goto fail;
1da177e4 3497 *p++ = xdr_one; /* mark entry present */
561f0ed4
BF
3498 cookie_offset = xdr->buf->len;
3499 p = xdr_reserve_space(xdr, 3*4 + namlen);
3500 if (!p)
3501 goto fail;
1da177e4
LT
3502 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */
3503 p = xdr_encode_array(p, name, namlen); /* name length & name */
3504
561f0ed4 3505 nfserr = nfsd4_encode_dirent_fattr(xdr, cd, name, namlen);
1da177e4
LT
3506 switch (nfserr) {
3507 case nfs_ok:
1da177e4
LT
3508 break;
3509 case nfserr_resource:
3510 nfserr = nfserr_toosmall;
3511 goto fail;
b2c0cea6 3512 case nfserr_noent:
f41c5ad2 3513 xdr_truncate_encode(xdr, start_offset);
b2c0cea6 3514 goto skip_entry;
1da177e4
LT
3515 default:
3516 /*
3517 * If the client requested the RDATTR_ERROR attribute,
3518 * we stuff the error code into this attribute
3519 * and continue. If this attribute was not requested,
3520 * then in accordance with the spec, we fail the
3521 * entire READDIR operation(!)
3522 */
3523 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
3524 goto fail;
561f0ed4 3525 p = nfsd4_encode_rdattr_error(xdr, nfserr);
34081efc
FI
3526 if (p == NULL) {
3527 nfserr = nfserr_toosmall;
1da177e4 3528 goto fail;
34081efc 3529 }
1da177e4 3530 }
561f0ed4
BF
3531 nfserr = nfserr_toosmall;
3532 entry_bytes = xdr->buf->len - start_offset;
3533 if (entry_bytes > cd->rd_maxcount)
3534 goto fail;
3535 cd->rd_maxcount -= entry_bytes;
aee37764 3536 /*
f2e717d6
TM
3537 * RFC 3530 14.2.24 describes rd_dircount as only a "hint", and
3538 * notes that it could be zero. If it is zero, then the server
3539 * should enforce only the rd_maxcount value.
aee37764 3540 */
f2e717d6
TM
3541 if (cd->rd_dircount) {
3542 name_and_cookie = 4 + 4 * XDR_QUADLEN(namlen) + 8;
3543 if (name_and_cookie > cd->rd_dircount && cd->cookie_offset)
3544 goto fail;
3545 cd->rd_dircount -= min(cd->rd_dircount, name_and_cookie);
3546 if (!cd->rd_dircount)
3547 cd->rd_maxcount = 0;
3548 }
0ec016e3 3549
561f0ed4 3550 cd->cookie_offset = cookie_offset;
b2c0cea6 3551skip_entry:
1da177e4
LT
3552 cd->common.err = nfs_ok;
3553 return 0;
3554fail:
561f0ed4 3555 xdr_truncate_encode(xdr, start_offset);
1da177e4
LT
3556 cd->common.err = nfserr;
3557 return -EINVAL;
3558}
3559
d0a381dd
BF
3560static __be32
3561nfsd4_encode_stateid(struct xdr_stream *xdr, stateid_t *sid)
e2f282b9 3562{
bc749ca4 3563 __be32 *p;
e2f282b9 3564
d0a381dd
BF
3565 p = xdr_reserve_space(xdr, sizeof(stateid_t));
3566 if (!p)
3567 return nfserr_resource;
c373b0a4 3568 *p++ = cpu_to_be32(sid->si_generation);
0c0c267b
BF
3569 p = xdr_encode_opaque_fixed(p, &sid->si_opaque,
3570 sizeof(stateid_opaque_t));
d0a381dd 3571 return 0;
e2f282b9
BH
3572}
3573
695e12f8 3574static __be32
b37ad28b 3575nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
1da177e4 3576{
bddfdbcd 3577 struct xdr_stream *xdr = resp->xdr;
bc749ca4 3578 __be32 *p;
1da177e4 3579
bac966d6
BF
3580 p = xdr_reserve_space(xdr, 8);
3581 if (!p)
3582 return nfserr_resource;
3583 *p++ = cpu_to_be32(access->ac_supported);
3584 *p++ = cpu_to_be32(access->ac_resp_access);
3585 return 0;
1da177e4
LT
3586}
3587
1d1bc8f2
BF
3588static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts)
3589{
bddfdbcd 3590 struct xdr_stream *xdr = resp->xdr;
1d1bc8f2
BF
3591 __be32 *p;
3592
bac966d6
BF
3593 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 8);
3594 if (!p)
3595 return nfserr_resource;
3596 p = xdr_encode_opaque_fixed(p, bcts->sessionid.data,
3597 NFS4_MAX_SESSIONID_LEN);
3598 *p++ = cpu_to_be32(bcts->dir);
3599 /* Upshifting from TCP to RDMA is not supported */
3600 *p++ = cpu_to_be32(0);
3601 return 0;
1d1bc8f2
BF
3602}
3603
695e12f8 3604static __be32
b37ad28b 3605nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
1da177e4 3606{
bddfdbcd 3607 struct xdr_stream *xdr = resp->xdr;
d0a381dd 3608
bac966d6 3609 return nfsd4_encode_stateid(xdr, &close->cl_stateid);
1da177e4
LT
3610}
3611
3612
695e12f8 3613static __be32
b37ad28b 3614nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
1da177e4 3615{
bddfdbcd 3616 struct xdr_stream *xdr = resp->xdr;
bc749ca4 3617 __be32 *p;
1da177e4 3618
bac966d6
BF
3619 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
3620 if (!p)
3621 return nfserr_resource;
3622 p = xdr_encode_opaque_fixed(p, commit->co_verf.data,
0c0c267b 3623 NFS4_VERIFIER_SIZE);
bac966d6 3624 return 0;
1da177e4
LT
3625}
3626
695e12f8 3627static __be32
b37ad28b 3628nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
1da177e4 3629{
bddfdbcd 3630 struct xdr_stream *xdr = resp->xdr;
bc749ca4 3631 __be32 *p;
1da177e4 3632
bac966d6
BF
3633 p = xdr_reserve_space(xdr, 20);
3634 if (!p)
3635 return nfserr_resource;
3636 encode_cinfo(p, &create->cr_cinfo);
b96811cd 3637 return nfsd4_encode_bitmap(xdr, create->cr_bmval[0],
bac966d6 3638 create->cr_bmval[1], create->cr_bmval[2]);
1da177e4
LT
3639}
3640
b37ad28b
AV
3641static __be32
3642nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
1da177e4
LT
3643{
3644 struct svc_fh *fhp = getattr->ga_fhp;
bddfdbcd 3645 struct xdr_stream *xdr = resp->xdr;
1da177e4 3646
bac966d6
BF
3647 return nfsd4_encode_fattr(xdr, fhp, fhp->fh_export, fhp->fh_dentry,
3648 getattr->ga_bmval, resp->rqstp, 0);
1da177e4
LT
3649}
3650
695e12f8
BH
3651static __be32
3652nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
1da177e4 3653{
bddfdbcd 3654 struct xdr_stream *xdr = resp->xdr;
695e12f8 3655 struct svc_fh *fhp = *fhpp;
1da177e4 3656 unsigned int len;
bc749ca4 3657 __be32 *p;
1da177e4 3658
bac966d6
BF
3659 len = fhp->fh_handle.fh_size;
3660 p = xdr_reserve_space(xdr, len + 4);
3661 if (!p)
3662 return nfserr_resource;
3663 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, len);
3664 return 0;
1da177e4
LT
3665}
3666
3667/*
3668* Including all fields other than the name, a LOCK4denied structure requires
3669* 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
3670*/
d0a381dd
BF
3671static __be32
3672nfsd4_encode_lock_denied(struct xdr_stream *xdr, struct nfsd4_lock_denied *ld)
1da177e4 3673{
7c13f344 3674 struct xdr_netobj *conf = &ld->ld_owner;
bc749ca4 3675 __be32 *p;
1da177e4 3676
8c7424cf 3677again:
d0a381dd 3678 p = xdr_reserve_space(xdr, 32 + XDR_LEN(conf->len));
8c7424cf
BF
3679 if (!p) {
3680 /*
3681 * Don't fail to return the result just because we can't
3682 * return the conflicting open:
3683 */
3684 if (conf->len) {
f98bac5a 3685 kfree(conf->data);
8c7424cf
BF
3686 conf->len = 0;
3687 conf->data = NULL;
3688 goto again;
3689 }
d0a381dd 3690 return nfserr_resource;
8c7424cf 3691 }
b64c7f3b
BF
3692 p = xdr_encode_hyper(p, ld->ld_start);
3693 p = xdr_encode_hyper(p, ld->ld_length);
c373b0a4 3694 *p++ = cpu_to_be32(ld->ld_type);
7c13f344 3695 if (conf->len) {
0c0c267b
BF
3696 p = xdr_encode_opaque_fixed(p, &ld->ld_clientid, 8);
3697 p = xdr_encode_opaque(p, conf->data, conf->len);
f98bac5a 3698 kfree(conf->data);
1da177e4 3699 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */
b64c7f3b 3700 p = xdr_encode_hyper(p, (u64)0); /* clientid */
c373b0a4 3701 *p++ = cpu_to_be32(0); /* length of owner name */
1da177e4 3702 }
d0a381dd 3703 return nfserr_denied;
1da177e4
LT
3704}
3705
695e12f8 3706static __be32
b37ad28b 3707nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
1da177e4 3708{
bddfdbcd 3709 struct xdr_stream *xdr = resp->xdr;
d0a381dd 3710
e2f282b9 3711 if (!nfserr)
d0a381dd 3712 nfserr = nfsd4_encode_stateid(xdr, &lock->lk_resp_stateid);
e2f282b9 3713 else if (nfserr == nfserr_denied)
d0a381dd 3714 nfserr = nfsd4_encode_lock_denied(xdr, &lock->lk_denied);
f98bac5a 3715
695e12f8 3716 return nfserr;
1da177e4
LT
3717}
3718
695e12f8 3719static __be32
b37ad28b 3720nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
1da177e4 3721{
bddfdbcd 3722 struct xdr_stream *xdr = resp->xdr;
d0a381dd 3723
1da177e4 3724 if (nfserr == nfserr_denied)
d0a381dd 3725 nfsd4_encode_lock_denied(xdr, &lockt->lt_denied);
695e12f8 3726 return nfserr;
1da177e4
LT
3727}
3728
695e12f8 3729static __be32
b37ad28b 3730nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
1da177e4 3731{
bddfdbcd 3732 struct xdr_stream *xdr = resp->xdr;
d0a381dd 3733
bac966d6 3734 return nfsd4_encode_stateid(xdr, &locku->lu_stateid);
1da177e4
LT
3735}
3736
3737
695e12f8 3738static __be32
b37ad28b 3739nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
1da177e4 3740{
bddfdbcd 3741 struct xdr_stream *xdr = resp->xdr;
bc749ca4 3742 __be32 *p;
1da177e4 3743
bac966d6
BF
3744 p = xdr_reserve_space(xdr, 20);
3745 if (!p)
3746 return nfserr_resource;
3747 p = encode_cinfo(p, &link->li_cinfo);
3748 return 0;
1da177e4
LT
3749}
3750
3751
695e12f8 3752static __be32
b37ad28b 3753nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
1da177e4 3754{
bddfdbcd 3755 struct xdr_stream *xdr = resp->xdr;
bc749ca4 3756 __be32 *p;
1da177e4 3757
d0a381dd
BF
3758 nfserr = nfsd4_encode_stateid(xdr, &open->op_stateid);
3759 if (nfserr)
bac966d6 3760 return nfserr;
75976de6 3761 p = xdr_reserve_space(xdr, 24);
d0a381dd
BF
3762 if (!p)
3763 return nfserr_resource;
d05d5744 3764 p = encode_cinfo(p, &open->op_cinfo);
c373b0a4 3765 *p++ = cpu_to_be32(open->op_rflags);
1da177e4 3766
75976de6
KM
3767 nfserr = nfsd4_encode_bitmap(xdr, open->op_bmval[0], open->op_bmval[1],
3768 open->op_bmval[2]);
3769 if (nfserr)
bac966d6 3770 return nfserr;
75976de6
KM
3771
3772 p = xdr_reserve_space(xdr, 4);
3773 if (!p)
3774 return nfserr_resource;
3775
3776 *p++ = cpu_to_be32(open->op_delegate_type);
1da177e4
LT
3777 switch (open->op_delegate_type) {
3778 case NFS4_OPEN_DELEGATE_NONE:
3779 break;
3780 case NFS4_OPEN_DELEGATE_READ:
d0a381dd
BF
3781 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
3782 if (nfserr)
3783 return nfserr;
3784 p = xdr_reserve_space(xdr, 20);
3785 if (!p)
3786 return nfserr_resource;
c373b0a4 3787 *p++ = cpu_to_be32(open->op_recall);
1da177e4
LT
3788
3789 /*
3790 * TODO: ACE's in delegations
3791 */
c373b0a4
BF
3792 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
3793 *p++ = cpu_to_be32(0);
3794 *p++ = cpu_to_be32(0);
3795 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */
1da177e4
LT
3796 break;
3797 case NFS4_OPEN_DELEGATE_WRITE:
d0a381dd
BF
3798 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
3799 if (nfserr)
3800 return nfserr;
3801 p = xdr_reserve_space(xdr, 32);
3802 if (!p)
3803 return nfserr_resource;
c373b0a4 3804 *p++ = cpu_to_be32(0);
1da177e4
LT
3805
3806 /*
3807 * TODO: space_limit's in delegations
3808 */
c373b0a4
BF
3809 *p++ = cpu_to_be32(NFS4_LIMIT_SIZE);
3810 *p++ = cpu_to_be32(~(u32)0);
3811 *p++ = cpu_to_be32(~(u32)0);
1da177e4
LT
3812
3813 /*
3814 * TODO: ACE's in delegations
3815 */
c373b0a4
BF
3816 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
3817 *p++ = cpu_to_be32(0);
3818 *p++ = cpu_to_be32(0);
3819 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */
1da177e4 3820 break;
d24433cd
BH
3821 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */
3822 switch (open->op_why_no_deleg) {
3823 case WND4_CONTENTION:
3824 case WND4_RESOURCE:
d0a381dd
BF
3825 p = xdr_reserve_space(xdr, 8);
3826 if (!p)
3827 return nfserr_resource;
c373b0a4
BF
3828 *p++ = cpu_to_be32(open->op_why_no_deleg);
3829 /* deleg signaling not supported yet: */
3830 *p++ = cpu_to_be32(0);
d24433cd
BH
3831 break;
3832 default:
d0a381dd
BF
3833 p = xdr_reserve_space(xdr, 4);
3834 if (!p)
3835 return nfserr_resource;
c373b0a4 3836 *p++ = cpu_to_be32(open->op_why_no_deleg);
d24433cd 3837 }
d24433cd 3838 break;
1da177e4
LT
3839 default:
3840 BUG();
3841 }
3842 /* XXX save filehandle here */
bac966d6 3843 return 0;
1da177e4
LT
3844}
3845
695e12f8 3846static __be32
b37ad28b 3847nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
1da177e4 3848{
bddfdbcd 3849 struct xdr_stream *xdr = resp->xdr;
d0a381dd 3850
bac966d6 3851 return nfsd4_encode_stateid(xdr, &oc->oc_resp_stateid);
1da177e4
LT
3852}
3853
695e12f8 3854static __be32
b37ad28b 3855nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
1da177e4 3856{
bddfdbcd 3857 struct xdr_stream *xdr = resp->xdr;
d0a381dd 3858
bac966d6 3859 return nfsd4_encode_stateid(xdr, &od->od_stateid);
1da177e4
LT
3860}
3861
dc97618d
BF
3862static __be32 nfsd4_encode_splice_read(
3863 struct nfsd4_compoundres *resp,
3864 struct nfsd4_read *read,
3865 struct file *file, unsigned long maxcount)
1da177e4 3866{
bddfdbcd 3867 struct xdr_stream *xdr = resp->xdr;
34a78b48 3868 struct xdr_buf *buf = xdr->buf;
76e5492b 3869 int status, space_left;
dc97618d 3870 u32 eof;
dc97618d 3871 __be32 nfserr;
fec25fa4 3872 __be32 *p = xdr->p - 2;
1da177e4 3873
d5d5c304
KM
3874 /* Make sure there will be room for padding if needed */
3875 if (xdr->end - xdr->p < 1)
d0a381dd 3876 return nfserr_resource;
dc97618d 3877
87c5942e 3878 nfserr = nfsd_splice_read(read->rd_rqstp, read->rd_fhp,
83a63072 3879 file, read->rd_offset, &maxcount, &eof);
87c5942e 3880 read->rd_length = maxcount;
76e5492b
CL
3881 if (nfserr)
3882 goto out_err;
3883 status = svc_encode_result_payload(read->rd_rqstp,
3884 buf->head[0].iov_len, maxcount);
3885 if (status) {
3886 nfserr = nfserrno(status);
3887 goto out_err;
b0e35fda 3888 }
1da177e4 3889
fec25fa4
BF
3890 *(p++) = htonl(eof);
3891 *(p++) = htonl(maxcount);
dc97618d 3892
34a78b48
BF
3893 buf->page_len = maxcount;
3894 buf->len += maxcount;
15b23ef5
BF
3895 xdr->page_ptr += (buf->page_base + maxcount + PAGE_SIZE - 1)
3896 / PAGE_SIZE;
dc97618d
BF
3897
3898 /* Use rest of head for padding and remaining ops: */
34a78b48
BF
3899 buf->tail[0].iov_base = xdr->p;
3900 buf->tail[0].iov_len = 0;
fec25fa4 3901 xdr->iov = buf->tail;
dc97618d 3902 if (maxcount&3) {
fec25fa4
BF
3903 int pad = 4 - (maxcount&3);
3904
3905 *(xdr->p++) = 0;
3906
34a78b48 3907 buf->tail[0].iov_base += maxcount&3;
fec25fa4
BF
3908 buf->tail[0].iov_len = pad;
3909 buf->len += pad;
b0e35fda 3910 }
2825a7f9 3911
dc97618d 3912 space_left = min_t(int, (void *)xdr->end - (void *)xdr->p,
34a78b48
BF
3913 buf->buflen - buf->len);
3914 buf->buflen = buf->len + space_left;
dc97618d
BF
3915 xdr->end = (__be32 *)((void *)xdr->end + space_left);
3916
3917 return 0;
76e5492b
CL
3918
3919out_err:
3920 /*
3921 * nfsd_splice_actor may have already messed with the
3922 * page length; reset it so as not to confuse
3923 * xdr_truncate_encode in our caller.
3924 */
3925 buf->page_len = 0;
3926 return nfserr;
dc97618d
BF
3927}
3928
3929static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp,
3930 struct nfsd4_read *read,
3931 struct file *file, unsigned long maxcount)
3932{
bddfdbcd 3933 struct xdr_stream *xdr = resp->xdr;
dc97618d 3934 u32 eof;
dc97618d 3935 int starting_len = xdr->buf->len - 8;
dc97618d
BF
3936 __be32 nfserr;
3937 __be32 tmp;
b0420980 3938 int pad;
1da177e4 3939
403217f3
AS
3940 read->rd_vlen = xdr_reserve_space_vec(xdr, resp->rqstp->rq_vec, maxcount);
3941 if (read->rd_vlen < 0)
3942 return nfserr_resource;
1da177e4 3943
87c5942e 3944 nfserr = nfsd_readv(resp->rqstp, read->rd_fhp, file, read->rd_offset,
83a63072
TM
3945 resp->rqstp->rq_vec, read->rd_vlen, &maxcount,
3946 &eof);
87c5942e 3947 read->rd_length = maxcount;
dc97618d 3948 if (nfserr)
1da177e4 3949 return nfserr;
03493bca 3950 if (svc_encode_result_payload(resp->rqstp, starting_len + 8, maxcount))
41205539 3951 return nfserr_io;
7dcf4ab9 3952 xdr_truncate_encode(xdr, starting_len + 8 + xdr_align_size(maxcount));
dc97618d 3953
dc97618d
BF
3954 tmp = htonl(eof);
3955 write_bytes_to_xdr_buf(xdr->buf, starting_len , &tmp, 4);
3956 tmp = htonl(maxcount);
3957 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4);
3958
7dcf4ab9 3959 tmp = xdr_zero;
b0420980
BF
3960 pad = (maxcount&3) ? 4 - (maxcount&3) : 0;
3961 write_bytes_to_xdr_buf(xdr->buf, starting_len + 8 + maxcount,
7dcf4ab9 3962 &tmp, pad);
1da177e4 3963 return 0;
dc97618d
BF
3964
3965}
3966
3967static __be32
3968nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
3969 struct nfsd4_read *read)
3970{
3971 unsigned long maxcount;
bddfdbcd 3972 struct xdr_stream *xdr = resp->xdr;
5c4583b2 3973 struct file *file;
dc97618d 3974 int starting_len = xdr->buf->len;
dc97618d 3975 __be32 *p;
dc97618d 3976
5c4583b2
JL
3977 if (nfserr)
3978 return nfserr;
3979 file = read->rd_nf->nf_file;
3980
dc97618d
BF
3981 p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */
3982 if (!p) {
779fb0f3 3983 WARN_ON_ONCE(test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags));
bac966d6 3984 return nfserr_resource;
dc97618d 3985 }
bddfdbcd 3986 if (resp->xdr->buf->page_len &&
68e8bb03 3987 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) {
b0420980 3988 WARN_ON_ONCE(1);
bac966d6 3989 return nfserr_resource;
dc97618d 3990 }
dc97618d
BF
3991 xdr_commit_encode(xdr);
3992
6fb739d8 3993 maxcount = min_t(unsigned long, read->rd_length,
68e8bb03 3994 (xdr->buf->buflen - xdr->buf->len));
dc97618d 3995
68e8bb03
CH
3996 if (file->f_op->splice_read &&
3997 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags))
96bcad50 3998 nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount);
dc97618d 3999 else
96bcad50 4000 nfserr = nfsd4_encode_readv(resp, read, file, maxcount);
dc97618d 4001
96bcad50 4002 if (nfserr)
dc97618d 4003 xdr_truncate_encode(xdr, starting_len);
96bcad50 4004
96bcad50 4005 return nfserr;
1da177e4
LT
4006}
4007
b37ad28b
AV
4008static __be32
4009nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
1da177e4
LT
4010{
4011 int maxcount;
476a7b1f
BF
4012 __be32 wire_count;
4013 int zero = 0;
bddfdbcd 4014 struct xdr_stream *xdr = resp->xdr;
1fcea5b2 4015 int length_offset = xdr->buf->len;
76e5492b 4016 int status;
bc749ca4 4017 __be32 *p;
1da177e4 4018
2825a7f9
BF
4019 p = xdr_reserve_space(xdr, 4);
4020 if (!p)
4021 return nfserr_resource;
1da177e4 4022 maxcount = PAGE_SIZE;
d0a381dd 4023
476a7b1f
BF
4024 p = xdr_reserve_space(xdr, maxcount);
4025 if (!p)
4e21ac4b 4026 return nfserr_resource;
1da177e4 4027 /*
fd4a0edf
MS
4028 * XXX: By default, vfs_readlink() will truncate symlinks if they
4029 * would overflow the buffer. Is this kosher in NFSv4? If not, one
4030 * easy fix is: if vfs_readlink() precisely fills the buffer, assume
4031 * that truncation occurred, and return NFS4ERR_RESOURCE.
1da177e4 4032 */
476a7b1f
BF
4033 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp,
4034 (char *)p, &maxcount);
1da177e4 4035 if (nfserr == nfserr_isdir)
d3f627c8 4036 nfserr = nfserr_inval;
76e5492b
CL
4037 if (nfserr)
4038 goto out_err;
4039 status = svc_encode_result_payload(readlink->rl_rqstp, length_offset,
4040 maxcount);
4041 if (status) {
4042 nfserr = nfserrno(status);
4043 goto out_err;
d3f627c8 4044 }
1da177e4 4045
476a7b1f
BF
4046 wire_count = htonl(maxcount);
4047 write_bytes_to_xdr_buf(xdr->buf, length_offset, &wire_count, 4);
69bbd9c7 4048 xdr_truncate_encode(xdr, length_offset + 4 + ALIGN(maxcount, 4));
476a7b1f
BF
4049 if (maxcount & 3)
4050 write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount,
4051 &zero, 4 - (maxcount&3));
1da177e4 4052 return 0;
76e5492b
CL
4053
4054out_err:
4055 xdr_truncate_encode(xdr, length_offset);
4056 return nfserr;
1da177e4
LT
4057}
4058
b37ad28b
AV
4059static __be32
4060nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
1da177e4
LT
4061{
4062 int maxcount;
561f0ed4 4063 int bytes_left;
1da177e4 4064 loff_t offset;
561f0ed4 4065 __be64 wire_offset;
bddfdbcd 4066 struct xdr_stream *xdr = resp->xdr;
1fcea5b2 4067 int starting_len = xdr->buf->len;
bc749ca4 4068 __be32 *p;
1da177e4 4069
d0a381dd
BF
4070 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
4071 if (!p)
4072 return nfserr_resource;
1da177e4
LT
4073
4074 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
c373b0a4
BF
4075 *p++ = cpu_to_be32(0);
4076 *p++ = cpu_to_be32(0);
bddfdbcd
CL
4077 xdr->buf->head[0].iov_len = (char *)xdr->p -
4078 (char *)xdr->buf->head[0].iov_base;
1da177e4
LT
4079
4080 /*
561f0ed4
BF
4081 * Number of bytes left for directory entries allowing for the
4082 * final 8 bytes of the readdir and a following failed op:
4083 */
4084 bytes_left = xdr->buf->buflen - xdr->buf->len
4085 - COMPOUND_ERR_SLACK_SPACE - 8;
4086 if (bytes_left < 0) {
4087 nfserr = nfserr_resource;
4088 goto err_no_verf;
4089 }
9c2ece6e
SM
4090 maxcount = svc_max_payload(resp->rqstp);
4091 maxcount = min_t(u32, readdir->rd_maxcount, maxcount);
561f0ed4
BF
4092 /*
4093 * Note the rfc defines rd_maxcount as the size of the
4094 * READDIR4resok structure, which includes the verifier above
4095 * and the 8 bytes encoded at the end of this function:
1da177e4 4096 */
561f0ed4
BF
4097 if (maxcount < 16) {
4098 nfserr = nfserr_toosmall;
1da177e4
LT
4099 goto err_no_verf;
4100 }
561f0ed4 4101 maxcount = min_t(int, maxcount-16, bytes_left);
1da177e4 4102
aee37764
BF
4103 /* RFC 3530 14.2.24 allows us to ignore dircount when it's 0: */
4104 if (!readdir->rd_dircount)
9c2ece6e 4105 readdir->rd_dircount = svc_max_payload(resp->rqstp);
aee37764 4106
561f0ed4
BF
4107 readdir->xdr = xdr;
4108 readdir->rd_maxcount = maxcount;
1da177e4 4109 readdir->common.err = 0;
561f0ed4 4110 readdir->cookie_offset = 0;
1da177e4
LT
4111
4112 offset = readdir->rd_cookie;
4113 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
4114 &offset,
4115 &readdir->common, nfsd4_encode_dirent);
4116 if (nfserr == nfs_ok &&
4117 readdir->common.err == nfserr_toosmall &&
561f0ed4
BF
4118 xdr->buf->len == starting_len + 8) {
4119 /* nothing encoded; which limit did we hit?: */
4120 if (maxcount - 16 < bytes_left)
4121 /* It was the fault of rd_maxcount: */
4122 nfserr = nfserr_toosmall;
4123 else
4124 /* We ran out of buffer space: */
4125 nfserr = nfserr_resource;
4126 }
1da177e4
LT
4127 if (nfserr)
4128 goto err_no_verf;
4129
561f0ed4
BF
4130 if (readdir->cookie_offset) {
4131 wire_offset = cpu_to_be64(offset);
4132 write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset,
4133 &wire_offset, 8);
4134 }
1da177e4 4135
561f0ed4
BF
4136 p = xdr_reserve_space(xdr, 8);
4137 if (!p) {
4138 WARN_ON_ONCE(1);
4139 goto err_no_verf;
4140 }
1da177e4
LT
4141 *p++ = 0; /* no more entries */
4142 *p++ = htonl(readdir->common.err == nfserr_eof);
1da177e4
LT
4143
4144 return 0;
4145err_no_verf:
1fcea5b2 4146 xdr_truncate_encode(xdr, starting_len);
1da177e4
LT
4147 return nfserr;
4148}
4149
695e12f8 4150static __be32
b37ad28b 4151nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
1da177e4 4152{
bddfdbcd 4153 struct xdr_stream *xdr = resp->xdr;
bc749ca4 4154 __be32 *p;
1da177e4 4155
bac966d6
BF
4156 p = xdr_reserve_space(xdr, 20);
4157 if (!p)
4158 return nfserr_resource;
4159 p = encode_cinfo(p, &remove->rm_cinfo);
4160 return 0;
1da177e4
LT
4161}
4162
695e12f8 4163static __be32
b37ad28b 4164nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
1da177e4 4165{
bddfdbcd 4166 struct xdr_stream *xdr = resp->xdr;
bc749ca4 4167 __be32 *p;
1da177e4 4168
bac966d6
BF
4169 p = xdr_reserve_space(xdr, 40);
4170 if (!p)
4171 return nfserr_resource;
4172 p = encode_cinfo(p, &rename->rn_sinfo);
4173 p = encode_cinfo(p, &rename->rn_tinfo);
4174 return 0;
1da177e4
LT
4175}
4176
695e12f8 4177static __be32
bac966d6 4178nfsd4_do_encode_secinfo(struct xdr_stream *xdr, struct svc_export *exp)
dcb488a3 4179{
676e4ebd 4180 u32 i, nflavs, supported;
4796f457
BF
4181 struct exp_flavor_info *flavs;
4182 struct exp_flavor_info def_flavs[2];
676e4ebd
CL
4183 __be32 *p, *flavorsp;
4184 static bool report = true;
dcb488a3 4185
4796f457
BF
4186 if (exp->ex_nflavors) {
4187 flavs = exp->ex_flavors;
4188 nflavs = exp->ex_nflavors;
4189 } else { /* Handling of some defaults in absence of real secinfo: */
4190 flavs = def_flavs;
4191 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
4192 nflavs = 2;
4193 flavs[0].pseudoflavor = RPC_AUTH_UNIX;
4194 flavs[1].pseudoflavor = RPC_AUTH_NULL;
4195 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
4196 nflavs = 1;
4197 flavs[0].pseudoflavor
4198 = svcauth_gss_flavor(exp->ex_client);
4199 } else {
4200 nflavs = 1;
4201 flavs[0].pseudoflavor
4202 = exp->ex_client->flavour->flavour;
4203 }
4204 }
4205
676e4ebd 4206 supported = 0;
d0a381dd
BF
4207 p = xdr_reserve_space(xdr, 4);
4208 if (!p)
bac966d6 4209 return nfserr_resource;
676e4ebd 4210 flavorsp = p++; /* to be backfilled later */
676e4ebd 4211
4796f457 4212 for (i = 0; i < nflavs; i++) {
676e4ebd 4213 rpc_authflavor_t pf = flavs[i].pseudoflavor;
a77c806f 4214 struct rpcsec_gss_info info;
dcb488a3 4215
676e4ebd
CL
4216 if (rpcauth_get_gssinfo(pf, &info) == 0) {
4217 supported++;
d0a381dd
BF
4218 p = xdr_reserve_space(xdr, 4 + 4 +
4219 XDR_LEN(info.oid.len) + 4 + 4);
4220 if (!p)
bac966d6 4221 return nfserr_resource;
c373b0a4 4222 *p++ = cpu_to_be32(RPC_AUTH_GSS);
0c0c267b 4223 p = xdr_encode_opaque(p, info.oid.data, info.oid.len);
c373b0a4
BF
4224 *p++ = cpu_to_be32(info.qop);
4225 *p++ = cpu_to_be32(info.service);
676e4ebd
CL
4226 } else if (pf < RPC_AUTH_MAXFLAVOR) {
4227 supported++;
d0a381dd
BF
4228 p = xdr_reserve_space(xdr, 4);
4229 if (!p)
bac966d6 4230 return nfserr_resource;
c373b0a4 4231 *p++ = cpu_to_be32(pf);
676e4ebd
CL
4232 } else {
4233 if (report)
4234 pr_warn("NFS: SECINFO: security flavor %u "
4235 "is not supported\n", pf);
dcb488a3
AA
4236 }
4237 }
a77c806f 4238
676e4ebd
CL
4239 if (nflavs != supported)
4240 report = false;
4241 *flavorsp = htonl(supported);
bac966d6 4242 return 0;
dcb488a3
AA
4243}
4244
22b6dee8
MJ
4245static __be32
4246nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
4247 struct nfsd4_secinfo *secinfo)
4248{
bddfdbcd 4249 struct xdr_stream *xdr = resp->xdr;
d0a381dd 4250
bac966d6 4251 return nfsd4_do_encode_secinfo(xdr, secinfo->si_exp);
22b6dee8
MJ
4252}
4253
4254static __be32
4255nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
4256 struct nfsd4_secinfo_no_name *secinfo)
4257{
bddfdbcd 4258 struct xdr_stream *xdr = resp->xdr;
d0a381dd 4259
bac966d6 4260 return nfsd4_do_encode_secinfo(xdr, secinfo->sin_exp);
22b6dee8
MJ
4261}
4262
1da177e4
LT
4263/*
4264 * The SETATTR encode routine is special -- it always encodes a bitmap,
4265 * regardless of the error status.
4266 */
695e12f8 4267static __be32
b37ad28b 4268nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
1da177e4 4269{
bddfdbcd 4270 struct xdr_stream *xdr = resp->xdr;
bc749ca4 4271 __be32 *p;
1da177e4 4272
d0a381dd
BF
4273 p = xdr_reserve_space(xdr, 16);
4274 if (!p)
4275 return nfserr_resource;
1da177e4 4276 if (nfserr) {
c373b0a4
BF
4277 *p++ = cpu_to_be32(3);
4278 *p++ = cpu_to_be32(0);
4279 *p++ = cpu_to_be32(0);
4280 *p++ = cpu_to_be32(0);
1da177e4
LT
4281 }
4282 else {
c373b0a4
BF
4283 *p++ = cpu_to_be32(3);
4284 *p++ = cpu_to_be32(setattr->sa_bmval[0]);
4285 *p++ = cpu_to_be32(setattr->sa_bmval[1]);
4286 *p++ = cpu_to_be32(setattr->sa_bmval[2]);
1da177e4 4287 }
695e12f8 4288 return nfserr;
1da177e4
LT
4289}
4290
695e12f8 4291static __be32
b37ad28b 4292nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
1da177e4 4293{
bddfdbcd 4294 struct xdr_stream *xdr = resp->xdr;
bc749ca4 4295 __be32 *p;
1da177e4
LT
4296
4297 if (!nfserr) {
d0a381dd
BF
4298 p = xdr_reserve_space(xdr, 8 + NFS4_VERIFIER_SIZE);
4299 if (!p)
4300 return nfserr_resource;
0c0c267b
BF
4301 p = xdr_encode_opaque_fixed(p, &scd->se_clientid, 8);
4302 p = xdr_encode_opaque_fixed(p, &scd->se_confirm,
4303 NFS4_VERIFIER_SIZE);
1da177e4
LT
4304 }
4305 else if (nfserr == nfserr_clid_inuse) {
d0a381dd
BF
4306 p = xdr_reserve_space(xdr, 8);
4307 if (!p)
4308 return nfserr_resource;
c373b0a4
BF
4309 *p++ = cpu_to_be32(0);
4310 *p++ = cpu_to_be32(0);
1da177e4 4311 }
695e12f8 4312 return nfserr;
1da177e4
LT
4313}
4314
695e12f8 4315static __be32
b37ad28b 4316nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
1da177e4 4317{
bddfdbcd 4318 struct xdr_stream *xdr = resp->xdr;
bc749ca4 4319 __be32 *p;
1da177e4 4320
bac966d6
BF
4321 p = xdr_reserve_space(xdr, 16);
4322 if (!p)
4323 return nfserr_resource;
4324 *p++ = cpu_to_be32(write->wr_bytes_written);
4325 *p++ = cpu_to_be32(write->wr_how_written);
4326 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
4327 NFS4_VERIFIER_SIZE);
4328 return 0;
1da177e4
LT
4329}
4330
2db134eb 4331static __be32
57b7b43b 4332nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
2db134eb
AA
4333 struct nfsd4_exchange_id *exid)
4334{
bddfdbcd 4335 struct xdr_stream *xdr = resp->xdr;
bc749ca4 4336 __be32 *p;
0733d213
AA
4337 char *major_id;
4338 char *server_scope;
4339 int major_id_sz;
4340 int server_scope_sz;
4341 uint64_t minor_id = 0;
7627d7dc 4342 struct nfsd_net *nn = net_generic(SVC_NET(resp->rqstp), nfsd_net_id);
0733d213 4343
7627d7dc
SM
4344 major_id = nn->nfsd_name;
4345 major_id_sz = strlen(nn->nfsd_name);
4346 server_scope = nn->nfsd_name;
4347 server_scope_sz = strlen(nn->nfsd_name);
0733d213 4348
d0a381dd 4349 p = xdr_reserve_space(xdr,
0733d213
AA
4350 8 /* eir_clientid */ +
4351 4 /* eir_sequenceid */ +
4352 4 /* eir_flags */ +
a8bb84bc 4353 4 /* spr_how */);
d0a381dd
BF
4354 if (!p)
4355 return nfserr_resource;
0733d213 4356
0c0c267b 4357 p = xdr_encode_opaque_fixed(p, &exid->clientid, 8);
c373b0a4
BF
4358 *p++ = cpu_to_be32(exid->seqid);
4359 *p++ = cpu_to_be32(exid->flags);
0733d213 4360
c373b0a4 4361 *p++ = cpu_to_be32(exid->spa_how);
a8bb84bc 4362
57266a6e
BF
4363 switch (exid->spa_how) {
4364 case SP4_NONE:
4365 break;
4366 case SP4_MACH_CRED:
4367 /* spo_must_enforce bitmap: */
bac966d6 4368 nfserr = nfsd4_encode_bitmap(xdr,
ed941643
AE
4369 exid->spo_must_enforce[0],
4370 exid->spo_must_enforce[1],
4371 exid->spo_must_enforce[2]);
bac966d6
BF
4372 if (nfserr)
4373 return nfserr;
ed941643 4374 /* spo_must_allow bitmap: */
bac966d6 4375 nfserr = nfsd4_encode_bitmap(xdr,
ed941643
AE
4376 exid->spo_must_allow[0],
4377 exid->spo_must_allow[1],
4378 exid->spo_must_allow[2]);
bac966d6
BF
4379 if (nfserr)
4380 return nfserr;
57266a6e
BF
4381 break;
4382 default:
4383 WARN_ON_ONCE(1);
4384 }
0733d213 4385
d0a381dd 4386 p = xdr_reserve_space(xdr,
a8bb84bc
KM
4387 8 /* so_minor_id */ +
4388 4 /* so_major_id.len */ +
4389 (XDR_QUADLEN(major_id_sz) * 4) +
4390 4 /* eir_server_scope.len */ +
4391 (XDR_QUADLEN(server_scope_sz) * 4) +
4392 4 /* eir_server_impl_id.count (0) */);
d0a381dd
BF
4393 if (!p)
4394 return nfserr_resource;
a8bb84bc 4395
0733d213 4396 /* The server_owner struct */
b64c7f3b 4397 p = xdr_encode_hyper(p, minor_id); /* Minor id */
0733d213 4398 /* major id */
0c0c267b 4399 p = xdr_encode_opaque(p, major_id, major_id_sz);
0733d213
AA
4400
4401 /* Server scope */
0c0c267b 4402 p = xdr_encode_opaque(p, server_scope, server_scope_sz);
0733d213
AA
4403
4404 /* Implementation id */
c373b0a4 4405 *p++ = cpu_to_be32(0); /* zero length nfs_impl_id4 array */
0733d213 4406 return 0;
2db134eb
AA
4407}
4408
4409static __be32
57b7b43b 4410nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
2db134eb
AA
4411 struct nfsd4_create_session *sess)
4412{
bddfdbcd 4413 struct xdr_stream *xdr = resp->xdr;
bc749ca4 4414 __be32 *p;
ec6b5d7b 4415
d0a381dd
BF
4416 p = xdr_reserve_space(xdr, 24);
4417 if (!p)
4418 return nfserr_resource;
0c0c267b
BF
4419 p = xdr_encode_opaque_fixed(p, sess->sessionid.data,
4420 NFS4_MAX_SESSIONID_LEN);
c373b0a4
BF
4421 *p++ = cpu_to_be32(sess->seqid);
4422 *p++ = cpu_to_be32(sess->flags);
ec6b5d7b 4423
d0a381dd
BF
4424 p = xdr_reserve_space(xdr, 28);
4425 if (!p)
4426 return nfserr_resource;
c373b0a4
BF
4427 *p++ = cpu_to_be32(0); /* headerpadsz */
4428 *p++ = cpu_to_be32(sess->fore_channel.maxreq_sz);
4429 *p++ = cpu_to_be32(sess->fore_channel.maxresp_sz);
4430 *p++ = cpu_to_be32(sess->fore_channel.maxresp_cached);
4431 *p++ = cpu_to_be32(sess->fore_channel.maxops);
4432 *p++ = cpu_to_be32(sess->fore_channel.maxreqs);
4433 *p++ = cpu_to_be32(sess->fore_channel.nr_rdma_attrs);
ec6b5d7b
AA
4434
4435 if (sess->fore_channel.nr_rdma_attrs) {
d0a381dd
BF
4436 p = xdr_reserve_space(xdr, 4);
4437 if (!p)
4438 return nfserr_resource;
c373b0a4 4439 *p++ = cpu_to_be32(sess->fore_channel.rdma_attrs);
ec6b5d7b
AA
4440 }
4441
d0a381dd
BF
4442 p = xdr_reserve_space(xdr, 28);
4443 if (!p)
4444 return nfserr_resource;
c373b0a4
BF
4445 *p++ = cpu_to_be32(0); /* headerpadsz */
4446 *p++ = cpu_to_be32(sess->back_channel.maxreq_sz);
4447 *p++ = cpu_to_be32(sess->back_channel.maxresp_sz);
4448 *p++ = cpu_to_be32(sess->back_channel.maxresp_cached);
4449 *p++ = cpu_to_be32(sess->back_channel.maxops);
4450 *p++ = cpu_to_be32(sess->back_channel.maxreqs);
4451 *p++ = cpu_to_be32(sess->back_channel.nr_rdma_attrs);
ec6b5d7b
AA
4452
4453 if (sess->back_channel.nr_rdma_attrs) {
d0a381dd
BF
4454 p = xdr_reserve_space(xdr, 4);
4455 if (!p)
4456 return nfserr_resource;
c373b0a4 4457 *p++ = cpu_to_be32(sess->back_channel.rdma_attrs);
ec6b5d7b
AA
4458 }
4459 return 0;
2db134eb
AA
4460}
4461
c47d832b 4462static __be32
57b7b43b 4463nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
2db134eb
AA
4464 struct nfsd4_sequence *seq)
4465{
bddfdbcd 4466 struct xdr_stream *xdr = resp->xdr;
bc749ca4 4467 __be32 *p;
b85d4c01 4468
d0a381dd
BF
4469 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 20);
4470 if (!p)
4471 return nfserr_resource;
0c0c267b
BF
4472 p = xdr_encode_opaque_fixed(p, seq->sessionid.data,
4473 NFS4_MAX_SESSIONID_LEN);
c373b0a4
BF
4474 *p++ = cpu_to_be32(seq->seqid);
4475 *p++ = cpu_to_be32(seq->slotid);
b7d7ca35 4476 /* Note slotid's are numbered from zero: */
c373b0a4
BF
4477 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_highest_slotid */
4478 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_target_highest_slotid */
4479 *p++ = cpu_to_be32(seq->status_flags);
b85d4c01 4480
f5236013 4481 resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */
b85d4c01 4482 return 0;
2db134eb
AA
4483}
4484
2355c596 4485static __be32
57b7b43b 4486nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
17456804
BS
4487 struct nfsd4_test_stateid *test_stateid)
4488{
bddfdbcd 4489 struct xdr_stream *xdr = resp->xdr;
03cfb420 4490 struct nfsd4_test_stateid_id *stateid, *next;
17456804 4491 __be32 *p;
17456804 4492
d0a381dd
BF
4493 p = xdr_reserve_space(xdr, 4 + (4 * test_stateid->ts_num_ids));
4494 if (!p)
4495 return nfserr_resource;
17456804 4496 *p++ = htonl(test_stateid->ts_num_ids);
17456804 4497
03cfb420 4498 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) {
02f5fde5 4499 *p++ = stateid->ts_id_status;
17456804 4500 }
17456804 4501
bac966d6 4502 return 0;
17456804
BS
4503}
4504
9cf514cc
CH
4505#ifdef CONFIG_NFSD_PNFS
4506static __be32
4507nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
4508 struct nfsd4_getdeviceinfo *gdev)
4509{
bddfdbcd 4510 struct xdr_stream *xdr = resp->xdr;
f961e3f2 4511 const struct nfsd4_layout_ops *ops;
9cf514cc
CH
4512 u32 starting_len = xdr->buf->len, needed_len;
4513 __be32 *p;
4514
9cf514cc
CH
4515 p = xdr_reserve_space(xdr, 4);
4516 if (!p)
bac966d6 4517 return nfserr_resource;
9cf514cc
CH
4518
4519 *p++ = cpu_to_be32(gdev->gd_layout_type);
4520
4521 /* If maxcount is 0 then just update notifications */
4522 if (gdev->gd_maxcount != 0) {
f961e3f2 4523 ops = nfsd4_layout_ops[gdev->gd_layout_type];
9cf514cc
CH
4524 nfserr = ops->encode_getdeviceinfo(xdr, gdev);
4525 if (nfserr) {
4526 /*
4527 * We don't bother to burden the layout drivers with
4528 * enforcing gd_maxcount, just tell the client to
4529 * come back with a bigger buffer if it's not enough.
4530 */
4531 if (xdr->buf->len + 4 > gdev->gd_maxcount)
4532 goto toosmall;
bac966d6 4533 return nfserr;
9cf514cc
CH
4534 }
4535 }
4536
9cf514cc
CH
4537 if (gdev->gd_notify_types) {
4538 p = xdr_reserve_space(xdr, 4 + 4);
4539 if (!p)
bac966d6 4540 return nfserr_resource;
9cf514cc
CH
4541 *p++ = cpu_to_be32(1); /* bitmap length */
4542 *p++ = cpu_to_be32(gdev->gd_notify_types);
4543 } else {
4544 p = xdr_reserve_space(xdr, 4);
4545 if (!p)
bac966d6 4546 return nfserr_resource;
9cf514cc
CH
4547 *p++ = 0;
4548 }
4549
bac966d6 4550 return 0;
9cf514cc
CH
4551toosmall:
4552 dprintk("%s: maxcount too small\n", __func__);
4553 needed_len = xdr->buf->len + 4 /* notifications */;
4554 xdr_truncate_encode(xdr, starting_len);
4555 p = xdr_reserve_space(xdr, 4);
bac966d6
BF
4556 if (!p)
4557 return nfserr_resource;
4558 *p++ = cpu_to_be32(needed_len);
4559 return nfserr_toosmall;
9cf514cc
CH
4560}
4561
4562static __be32
4563nfsd4_encode_layoutget(struct nfsd4_compoundres *resp, __be32 nfserr,
4564 struct nfsd4_layoutget *lgp)
4565{
bddfdbcd 4566 struct xdr_stream *xdr = resp->xdr;
f961e3f2 4567 const struct nfsd4_layout_ops *ops;
9cf514cc
CH
4568 __be32 *p;
4569
9cf514cc
CH
4570 p = xdr_reserve_space(xdr, 36 + sizeof(stateid_opaque_t));
4571 if (!p)
bac966d6 4572 return nfserr_resource;
9cf514cc
CH
4573
4574 *p++ = cpu_to_be32(1); /* we always set return-on-close */
4575 *p++ = cpu_to_be32(lgp->lg_sid.si_generation);
4576 p = xdr_encode_opaque_fixed(p, &lgp->lg_sid.si_opaque,
4577 sizeof(stateid_opaque_t));
4578
4579 *p++ = cpu_to_be32(1); /* we always return a single layout */
4580 p = xdr_encode_hyper(p, lgp->lg_seg.offset);
4581 p = xdr_encode_hyper(p, lgp->lg_seg.length);
4582 *p++ = cpu_to_be32(lgp->lg_seg.iomode);
4583 *p++ = cpu_to_be32(lgp->lg_layout_type);
4584
f961e3f2 4585 ops = nfsd4_layout_ops[lgp->lg_layout_type];
bac966d6 4586 return ops->encode_layoutget(xdr, lgp);
9cf514cc
CH
4587}
4588
4589static __be32
4590nfsd4_encode_layoutcommit(struct nfsd4_compoundres *resp, __be32 nfserr,
4591 struct nfsd4_layoutcommit *lcp)
4592{
bddfdbcd 4593 struct xdr_stream *xdr = resp->xdr;
9cf514cc
CH
4594 __be32 *p;
4595
9cf514cc
CH
4596 p = xdr_reserve_space(xdr, 4);
4597 if (!p)
4598 return nfserr_resource;
4599 *p++ = cpu_to_be32(lcp->lc_size_chg);
4600 if (lcp->lc_size_chg) {
4601 p = xdr_reserve_space(xdr, 8);
4602 if (!p)
4603 return nfserr_resource;
4604 p = xdr_encode_hyper(p, lcp->lc_newsize);
4605 }
4606
bac966d6 4607 return 0;
9cf514cc
CH
4608}
4609
4610static __be32
4611nfsd4_encode_layoutreturn(struct nfsd4_compoundres *resp, __be32 nfserr,
4612 struct nfsd4_layoutreturn *lrp)
4613{
bddfdbcd 4614 struct xdr_stream *xdr = resp->xdr;
9cf514cc
CH
4615 __be32 *p;
4616
9cf514cc
CH
4617 p = xdr_reserve_space(xdr, 4);
4618 if (!p)
4619 return nfserr_resource;
4620 *p++ = cpu_to_be32(lrp->lrs_present);
4621 if (lrp->lrs_present)
376675da 4622 return nfsd4_encode_stateid(xdr, &lrp->lr_sid);
bac966d6 4623 return 0;
9cf514cc
CH
4624}
4625#endif /* CONFIG_NFSD_PNFS */
4626
29ae7f9d 4627static __be32
e0639dc5
OK
4628nfsd42_encode_write_res(struct nfsd4_compoundres *resp,
4629 struct nfsd42_write_res *write, bool sync)
29ae7f9d
AS
4630{
4631 __be32 *p;
bddfdbcd 4632 p = xdr_reserve_space(resp->xdr, 4);
e0639dc5
OK
4633 if (!p)
4634 return nfserr_resource;
29ae7f9d 4635
e0639dc5
OK
4636 if (sync)
4637 *p++ = cpu_to_be32(0);
4638 else {
4639 __be32 nfserr;
4640 *p++ = cpu_to_be32(1);
bddfdbcd 4641 nfserr = nfsd4_encode_stateid(resp->xdr, &write->cb_stateid);
e0639dc5
OK
4642 if (nfserr)
4643 return nfserr;
4644 }
bddfdbcd 4645 p = xdr_reserve_space(resp->xdr, 8 + 4 + NFS4_VERIFIER_SIZE);
29ae7f9d
AS
4646 if (!p)
4647 return nfserr_resource;
4648
29ae7f9d
AS
4649 p = xdr_encode_hyper(p, write->wr_bytes_written);
4650 *p++ = cpu_to_be32(write->wr_stable_how);
4651 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
4652 NFS4_VERIFIER_SIZE);
4653 return nfs_ok;
4654}
4655
51911868
OK
4656static __be32
4657nfsd42_encode_nl4_server(struct nfsd4_compoundres *resp, struct nl4_server *ns)
4658{
bddfdbcd 4659 struct xdr_stream *xdr = resp->xdr;
51911868
OK
4660 struct nfs42_netaddr *addr;
4661 __be32 *p;
4662
4663 p = xdr_reserve_space(xdr, 4);
4664 *p++ = cpu_to_be32(ns->nl4_type);
4665
4666 switch (ns->nl4_type) {
4667 case NL4_NETADDR:
4668 addr = &ns->u.nl4_addr;
4669
4670 /* netid_len, netid, uaddr_len, uaddr (port included
4671 * in RPCBIND_MAXUADDRLEN)
4672 */
4673 p = xdr_reserve_space(xdr,
4674 4 /* netid len */ +
4675 (XDR_QUADLEN(addr->netid_len) * 4) +
4676 4 /* uaddr len */ +
4677 (XDR_QUADLEN(addr->addr_len) * 4));
4678 if (!p)
4679 return nfserr_resource;
4680
4681 *p++ = cpu_to_be32(addr->netid_len);
4682 p = xdr_encode_opaque_fixed(p, addr->netid,
4683 addr->netid_len);
4684 *p++ = cpu_to_be32(addr->addr_len);
4685 p = xdr_encode_opaque_fixed(p, addr->addr,
4686 addr->addr_len);
4687 break;
4688 default:
4689 WARN_ON_ONCE(ns->nl4_type != NL4_NETADDR);
4690 return nfserr_inval;
4691 }
4692
4693 return 0;
4694}
4695
29ae7f9d
AS
4696static __be32
4697nfsd4_encode_copy(struct nfsd4_compoundres *resp, __be32 nfserr,
4698 struct nfsd4_copy *copy)
4699{
4700 __be32 *p;
4701
e0639dc5 4702 nfserr = nfsd42_encode_write_res(resp, &copy->cp_res,
e8febea7 4703 !!copy->cp_synchronous);
bac966d6
BF
4704 if (nfserr)
4705 return nfserr;
29ae7f9d 4706
bddfdbcd 4707 p = xdr_reserve_space(resp->xdr, 4 + 4);
edcc8452 4708 *p++ = xdr_one; /* cr_consecutive */
bac966d6
BF
4709 *p++ = cpu_to_be32(copy->cp_synchronous);
4710 return 0;
29ae7f9d
AS
4711}
4712
6308bc98
OK
4713static __be32
4714nfsd4_encode_offload_status(struct nfsd4_compoundres *resp, __be32 nfserr,
4715 struct nfsd4_offload_status *os)
4716{
bddfdbcd 4717 struct xdr_stream *xdr = resp->xdr;
6308bc98
OK
4718 __be32 *p;
4719
4720 p = xdr_reserve_space(xdr, 8 + 4);
4721 if (!p)
4722 return nfserr_resource;
4723 p = xdr_encode_hyper(p, os->count);
4724 *p++ = cpu_to_be32(0);
528b8493
AS
4725 return nfserr;
4726}
4727
4728static __be32
4729nfsd4_encode_read_plus_data(struct nfsd4_compoundres *resp,
4730 struct nfsd4_read *read,
9f0b5792
AS
4731 unsigned long *maxcount, u32 *eof,
4732 loff_t *pos)
528b8493 4733{
bddfdbcd 4734 struct xdr_stream *xdr = resp->xdr;
528b8493
AS
4735 struct file *file = read->rd_nf->nf_file;
4736 int starting_len = xdr->buf->len;
9f0b5792 4737 loff_t hole_pos;
528b8493
AS
4738 __be32 nfserr;
4739 __be32 *p, tmp;
4740 __be64 tmp64;
4741
9f0b5792 4742 hole_pos = pos ? *pos : vfs_llseek(file, read->rd_offset, SEEK_HOLE);
2db27992 4743 if (hole_pos > read->rd_offset)
278765ea
AS
4744 *maxcount = min_t(unsigned long, *maxcount, hole_pos - read->rd_offset);
4745 *maxcount = min_t(unsigned long, *maxcount, (xdr->buf->buflen - xdr->buf->len));
528b8493
AS
4746
4747 /* Content type, offset, byte count */
4748 p = xdr_reserve_space(xdr, 4 + 8 + 4);
4749 if (!p)
4750 return nfserr_resource;
4751
278765ea 4752 read->rd_vlen = xdr_reserve_space_vec(xdr, resp->rqstp->rq_vec, *maxcount);
528b8493
AS
4753 if (read->rd_vlen < 0)
4754 return nfserr_resource;
4755
4756 nfserr = nfsd_readv(resp->rqstp, read->rd_fhp, file, read->rd_offset,
278765ea 4757 resp->rqstp->rq_vec, read->rd_vlen, maxcount, eof);
528b8493
AS
4758 if (nfserr)
4759 return nfserr;
72d78717 4760 xdr_truncate_encode(xdr, starting_len + 16 + xdr_align_size(*maxcount));
528b8493
AS
4761
4762 tmp = htonl(NFS4_CONTENT_DATA);
4763 write_bytes_to_xdr_buf(xdr->buf, starting_len, &tmp, 4);
4764 tmp64 = cpu_to_be64(read->rd_offset);
4765 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp64, 8);
278765ea 4766 tmp = htonl(*maxcount);
528b8493 4767 write_bytes_to_xdr_buf(xdr->buf, starting_len + 12, &tmp, 4);
72d78717
TM
4768
4769 tmp = xdr_zero;
4770 write_bytes_to_xdr_buf(xdr->buf, starting_len + 16 + *maxcount, &tmp,
4771 xdr_pad_size(*maxcount));
528b8493
AS
4772 return nfs_ok;
4773}
4774
2db27992
AS
4775static __be32
4776nfsd4_encode_read_plus_hole(struct nfsd4_compoundres *resp,
4777 struct nfsd4_read *read,
278765ea 4778 unsigned long *maxcount, u32 *eof)
2db27992
AS
4779{
4780 struct file *file = read->rd_nf->nf_file;
278765ea 4781 loff_t data_pos = vfs_llseek(file, read->rd_offset, SEEK_DATA);
9f0b5792 4782 loff_t f_size = i_size_read(file_inode(file));
278765ea 4783 unsigned long count;
2db27992
AS
4784 __be32 *p;
4785
278765ea 4786 if (data_pos == -ENXIO)
9f0b5792
AS
4787 data_pos = f_size;
4788 else if (data_pos <= read->rd_offset || (data_pos < f_size && data_pos % PAGE_SIZE))
4789 return nfsd4_encode_read_plus_data(resp, read, maxcount, eof, &f_size);
278765ea
AS
4790 count = data_pos - read->rd_offset;
4791
2db27992 4792 /* Content type, offset, byte count */
bddfdbcd 4793 p = xdr_reserve_space(resp->xdr, 4 + 8 + 8);
2db27992
AS
4794 if (!p)
4795 return nfserr_resource;
4796
4797 *p++ = htonl(NFS4_CONTENT_HOLE);
4798 p = xdr_encode_hyper(p, read->rd_offset);
278765ea 4799 p = xdr_encode_hyper(p, count);
2db27992 4800
9f0b5792 4801 *eof = (read->rd_offset + count) >= f_size;
278765ea 4802 *maxcount = min_t(unsigned long, count, *maxcount);
2db27992
AS
4803 return nfs_ok;
4804}
4805
528b8493
AS
4806static __be32
4807nfsd4_encode_read_plus(struct nfsd4_compoundres *resp, __be32 nfserr,
4808 struct nfsd4_read *read)
4809{
278765ea 4810 unsigned long maxcount, count;
bddfdbcd 4811 struct xdr_stream *xdr = resp->xdr;
528b8493
AS
4812 struct file *file;
4813 int starting_len = xdr->buf->len;
9f0b5792 4814 int last_segment = xdr->buf->len;
528b8493
AS
4815 int segments = 0;
4816 __be32 *p, tmp;
9f0b5792 4817 bool is_data;
2db27992 4818 loff_t pos;
528b8493
AS
4819 u32 eof;
4820
4821 if (nfserr)
4822 return nfserr;
4823 file = read->rd_nf->nf_file;
4824
4825 /* eof flag, segment count */
4826 p = xdr_reserve_space(xdr, 4 + 4);
4827 if (!p)
4828 return nfserr_resource;
4829 xdr_commit_encode(xdr);
4830
6fb739d8 4831 maxcount = min_t(unsigned long, read->rd_length,
528b8493 4832 (xdr->buf->buflen - xdr->buf->len));
278765ea 4833 count = maxcount;
528b8493
AS
4834
4835 eof = read->rd_offset >= i_size_read(file_inode(file));
2db27992
AS
4836 if (eof)
4837 goto out;
4838
9f0b5792
AS
4839 pos = vfs_llseek(file, read->rd_offset, SEEK_HOLE);
4840 is_data = pos > read->rd_offset;
2db27992 4841
9f0b5792 4842 while (count > 0 && !eof) {
278765ea 4843 maxcount = count;
9f0b5792
AS
4844 if (is_data)
4845 nfserr = nfsd4_encode_read_plus_data(resp, read, &maxcount, &eof,
4846 segments == 0 ? &pos : NULL);
4847 else
4848 nfserr = nfsd4_encode_read_plus_hole(resp, read, &maxcount, &eof);
278765ea
AS
4849 if (nfserr)
4850 goto out;
4851 count -= maxcount;
4852 read->rd_offset += maxcount;
9f0b5792
AS
4853 is_data = !is_data;
4854 last_segment = xdr->buf->len;
528b8493
AS
4855 segments++;
4856 }
4857
2db27992 4858out:
278765ea 4859 if (nfserr && segments == 0)
528b8493
AS
4860 xdr_truncate_encode(xdr, starting_len);
4861 else {
9f0b5792
AS
4862 if (nfserr) {
4863 xdr_truncate_encode(xdr, last_segment);
4864 nfserr = nfs_ok;
b68f0cbd 4865 eof = 0;
9f0b5792 4866 }
b68f0cbd
TM
4867 tmp = htonl(eof);
4868 write_bytes_to_xdr_buf(xdr->buf, starting_len, &tmp, 4);
4869 tmp = htonl(segments);
4870 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4);
528b8493 4871 }
6308bc98
OK
4872
4873 return nfserr;
4874}
4875
51911868
OK
4876static __be32
4877nfsd4_encode_copy_notify(struct nfsd4_compoundres *resp, __be32 nfserr,
4878 struct nfsd4_copy_notify *cn)
4879{
bddfdbcd 4880 struct xdr_stream *xdr = resp->xdr;
51911868
OK
4881 __be32 *p;
4882
4883 if (nfserr)
4884 return nfserr;
4885
4886 /* 8 sec, 4 nsec */
4887 p = xdr_reserve_space(xdr, 12);
4888 if (!p)
4889 return nfserr_resource;
4890
4891 /* cnr_lease_time */
4892 p = xdr_encode_hyper(p, cn->cpn_sec);
4893 *p++ = cpu_to_be32(cn->cpn_nsec);
4894
4895 /* cnr_stateid */
4896 nfserr = nfsd4_encode_stateid(xdr, &cn->cpn_cnr_stateid);
4897 if (nfserr)
4898 return nfserr;
4899
4900 /* cnr_src.nl_nsvr */
4901 p = xdr_reserve_space(xdr, 4);
4902 if (!p)
4903 return nfserr_resource;
4904
4905 *p++ = cpu_to_be32(1);
4906
4907 return nfsd42_encode_nl4_server(resp, &cn->cpn_src);
4908}
4909
24bab491
AS
4910static __be32
4911nfsd4_encode_seek(struct nfsd4_compoundres *resp, __be32 nfserr,
4912 struct nfsd4_seek *seek)
4913{
4914 __be32 *p;
4915
bddfdbcd 4916 p = xdr_reserve_space(resp->xdr, 4 + 8);
24bab491
AS
4917 *p++ = cpu_to_be32(seek->seek_eof);
4918 p = xdr_encode_hyper(p, seek->seek_pos);
4919
bac966d6 4920 return 0;
24bab491
AS
4921}
4922
695e12f8
BH
4923static __be32
4924nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p)
4925{
4926 return nfserr;
4927}
4928
23e50fe3
FL
4929/*
4930 * Encode kmalloc-ed buffer in to XDR stream.
4931 */
b9a49237 4932static __be32
23e50fe3
FL
4933nfsd4_vbuf_to_stream(struct xdr_stream *xdr, char *buf, u32 buflen)
4934{
4935 u32 cplen;
4936 __be32 *p;
4937
4938 cplen = min_t(unsigned long, buflen,
4939 ((void *)xdr->end - (void *)xdr->p));
4940 p = xdr_reserve_space(xdr, cplen);
4941 if (!p)
4942 return nfserr_resource;
4943
4944 memcpy(p, buf, cplen);
4945 buf += cplen;
4946 buflen -= cplen;
4947
4948 while (buflen) {
4949 cplen = min_t(u32, buflen, PAGE_SIZE);
4950 p = xdr_reserve_space(xdr, cplen);
4951 if (!p)
4952 return nfserr_resource;
4953
4954 memcpy(p, buf, cplen);
4955
4956 if (cplen < PAGE_SIZE) {
4957 /*
4958 * We're done, with a length that wasn't page
4959 * aligned, so possibly not word aligned. Pad
4960 * any trailing bytes with 0.
4961 */
4962 xdr_encode_opaque_fixed(p, NULL, cplen);
4963 break;
4964 }
4965
4966 buflen -= PAGE_SIZE;
4967 buf += PAGE_SIZE;
4968 }
4969
4970 return 0;
4971}
4972
4973static __be32
4974nfsd4_encode_getxattr(struct nfsd4_compoundres *resp, __be32 nfserr,
4975 struct nfsd4_getxattr *getxattr)
4976{
bddfdbcd 4977 struct xdr_stream *xdr = resp->xdr;
23e50fe3
FL
4978 __be32 *p, err;
4979
4980 p = xdr_reserve_space(xdr, 4);
4981 if (!p)
4982 return nfserr_resource;
4983
4984 *p = cpu_to_be32(getxattr->getxa_len);
4985
4986 if (getxattr->getxa_len == 0)
4987 return 0;
4988
4989 err = nfsd4_vbuf_to_stream(xdr, getxattr->getxa_buf,
4990 getxattr->getxa_len);
4991
4992 kvfree(getxattr->getxa_buf);
4993
4994 return err;
4995}
4996
4997static __be32
4998nfsd4_encode_setxattr(struct nfsd4_compoundres *resp, __be32 nfserr,
4999 struct nfsd4_setxattr *setxattr)
5000{
bddfdbcd 5001 struct xdr_stream *xdr = resp->xdr;
23e50fe3
FL
5002 __be32 *p;
5003
5004 p = xdr_reserve_space(xdr, 20);
5005 if (!p)
5006 return nfserr_resource;
5007
5008 encode_cinfo(p, &setxattr->setxa_cinfo);
5009
5010 return 0;
5011}
5012
5013/*
5014 * See if there are cookie values that can be rejected outright.
5015 */
5016static __be32
5017nfsd4_listxattr_validate_cookie(struct nfsd4_listxattrs *listxattrs,
5018 u32 *offsetp)
5019{
5020 u64 cookie = listxattrs->lsxa_cookie;
5021
5022 /*
5023 * If the cookie is larger than the maximum number we can fit
5024 * in either the buffer we just got back from vfs_listxattr, or,
5025 * XDR-encoded, in the return buffer, it's invalid.
5026 */
5027 if (cookie > (listxattrs->lsxa_len) / (XATTR_USER_PREFIX_LEN + 2))
5028 return nfserr_badcookie;
5029
5030 if (cookie > (listxattrs->lsxa_maxcount /
5031 (XDR_QUADLEN(XATTR_USER_PREFIX_LEN + 2) + 4)))
5032 return nfserr_badcookie;
5033
5034 *offsetp = (u32)cookie;
5035 return 0;
5036}
5037
5038static __be32
5039nfsd4_encode_listxattrs(struct nfsd4_compoundres *resp, __be32 nfserr,
5040 struct nfsd4_listxattrs *listxattrs)
5041{
bddfdbcd 5042 struct xdr_stream *xdr = resp->xdr;
23e50fe3
FL
5043 u32 cookie_offset, count_offset, eof;
5044 u32 left, xdrleft, slen, count;
5045 u32 xdrlen, offset;
5046 u64 cookie;
5047 char *sp;
b9a49237 5048 __be32 status, tmp;
23e50fe3
FL
5049 __be32 *p;
5050 u32 nuser;
5051
5052 eof = 1;
5053
5054 status = nfsd4_listxattr_validate_cookie(listxattrs, &offset);
5055 if (status)
5056 goto out;
5057
5058 /*
5059 * Reserve space for the cookie and the name array count. Record
5060 * the offsets to save them later.
5061 */
5062 cookie_offset = xdr->buf->len;
5063 count_offset = cookie_offset + 8;
5064 p = xdr_reserve_space(xdr, 12);
5065 if (!p) {
5066 status = nfserr_resource;
5067 goto out;
5068 }
5069
5070 count = 0;
5071 left = listxattrs->lsxa_len;
5072 sp = listxattrs->lsxa_buf;
5073 nuser = 0;
5074
5075 xdrleft = listxattrs->lsxa_maxcount;
5076
5077 while (left > 0 && xdrleft > 0) {
5078 slen = strlen(sp);
5079
5080 /*
4cce11fa 5081 * Check if this is a "user." attribute, skip it if not.
23e50fe3
FL
5082 */
5083 if (strncmp(sp, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN))
5084 goto contloop;
5085
5086 slen -= XATTR_USER_PREFIX_LEN;
5087 xdrlen = 4 + ((slen + 3) & ~3);
5088 if (xdrlen > xdrleft) {
5089 if (count == 0) {
5090 /*
5091 * Can't even fit the first attribute name.
5092 */
5093 status = nfserr_toosmall;
5094 goto out;
5095 }
5096 eof = 0;
5097 goto wreof;
5098 }
5099
5100 left -= XATTR_USER_PREFIX_LEN;
5101 sp += XATTR_USER_PREFIX_LEN;
5102 if (nuser++ < offset)
5103 goto contloop;
5104
5105
5106 p = xdr_reserve_space(xdr, xdrlen);
5107 if (!p) {
5108 status = nfserr_resource;
5109 goto out;
5110 }
5111
e2a1840e 5112 xdr_encode_opaque(p, sp, slen);
23e50fe3
FL
5113
5114 xdrleft -= xdrlen;
5115 count++;
5116contloop:
5117 sp += slen + 1;
5118 left -= slen + 1;
5119 }
5120
5121 /*
5122 * If there were user attributes to copy, but we didn't copy
5123 * any, the offset was too large (e.g. the cookie was invalid).
5124 */
5125 if (nuser > 0 && count == 0) {
5126 status = nfserr_badcookie;
5127 goto out;
5128 }
5129
5130wreof:
5131 p = xdr_reserve_space(xdr, 4);
5132 if (!p) {
5133 status = nfserr_resource;
5134 goto out;
5135 }
5136 *p = cpu_to_be32(eof);
5137
5138 cookie = offset + count;
5139
5140 write_bytes_to_xdr_buf(xdr->buf, cookie_offset, &cookie, 8);
b9a49237
CL
5141 tmp = cpu_to_be32(count);
5142 write_bytes_to_xdr_buf(xdr->buf, count_offset, &tmp, 4);
23e50fe3
FL
5143out:
5144 if (listxattrs->lsxa_len)
5145 kvfree(listxattrs->lsxa_buf);
5146 return status;
5147}
5148
5149static __be32
5150nfsd4_encode_removexattr(struct nfsd4_compoundres *resp, __be32 nfserr,
5151 struct nfsd4_removexattr *removexattr)
5152{
bddfdbcd 5153 struct xdr_stream *xdr = resp->xdr;
23e50fe3
FL
5154 __be32 *p;
5155
5156 p = xdr_reserve_space(xdr, 20);
5157 if (!p)
5158 return nfserr_resource;
5159
5160 p = encode_cinfo(p, &removexattr->rmxa_cinfo);
5161 return 0;
5162}
5163
695e12f8
BH
5164typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *);
5165
2db134eb
AA
5166/*
5167 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
5168 * since we don't need to filter out obsolete ops as this is
5169 * done in the decoding phase.
5170 */
c1df609d 5171static const nfsd4_enc nfsd4_enc_ops[] = {
ad1060c8
BF
5172 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access,
5173 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close,
5174 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit,
5175 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create,
5176 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop,
5177 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop,
5178 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr,
5179 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh,
5180 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link,
5181 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock,
5182 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt,
5183 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku,
5184 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop,
5185 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop,
5186 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop,
5187 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open,
84f09f46 5188 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop,
ad1060c8
BF
5189 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm,
5190 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade,
5191 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop,
5192 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop,
5193 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop,
5194 [OP_READ] = (nfsd4_enc)nfsd4_encode_read,
5195 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir,
5196 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink,
5197 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove,
5198 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename,
5199 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop,
5200 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop,
5201 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop,
5202 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo,
5203 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr,
5204 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid,
5205 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop,
5206 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop,
5207 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write,
5208 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop,
2db134eb
AA
5209
5210 /* NFSv4.1 operations */
5211 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop,
1d1bc8f2 5212 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session,
2db134eb
AA
5213 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id,
5214 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session,
43212cc7
KM
5215 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_noop,
5216 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_noop,
2db134eb 5217 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
9cf514cc
CH
5218#ifdef CONFIG_NFSD_PNFS
5219 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_getdeviceinfo,
5220 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
5221 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_layoutcommit,
5222 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_layoutget,
5223 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_layoutreturn,
5224#else
2db134eb
AA
5225 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop,
5226 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
5227 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop,
5228 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop,
5229 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop,
9cf514cc 5230#endif
22b6dee8 5231 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name,
2db134eb
AA
5232 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence,
5233 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop,
17456804 5234 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid,
2db134eb
AA
5235 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
5236 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop,
5237 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop,
87a15a80
AS
5238
5239 /* NFSv4.2 operations */
5240 [OP_ALLOCATE] = (nfsd4_enc)nfsd4_encode_noop,
29ae7f9d 5241 [OP_COPY] = (nfsd4_enc)nfsd4_encode_copy,
51911868 5242 [OP_COPY_NOTIFY] = (nfsd4_enc)nfsd4_encode_copy_notify,
87a15a80
AS
5243 [OP_DEALLOCATE] = (nfsd4_enc)nfsd4_encode_noop,
5244 [OP_IO_ADVISE] = (nfsd4_enc)nfsd4_encode_noop,
5245 [OP_LAYOUTERROR] = (nfsd4_enc)nfsd4_encode_noop,
5246 [OP_LAYOUTSTATS] = (nfsd4_enc)nfsd4_encode_noop,
5247 [OP_OFFLOAD_CANCEL] = (nfsd4_enc)nfsd4_encode_noop,
6308bc98 5248 [OP_OFFLOAD_STATUS] = (nfsd4_enc)nfsd4_encode_offload_status,
528b8493 5249 [OP_READ_PLUS] = (nfsd4_enc)nfsd4_encode_read_plus,
24bab491 5250 [OP_SEEK] = (nfsd4_enc)nfsd4_encode_seek,
87a15a80 5251 [OP_WRITE_SAME] = (nfsd4_enc)nfsd4_encode_noop,
ffa0160a 5252 [OP_CLONE] = (nfsd4_enc)nfsd4_encode_noop,
23e50fe3
FL
5253
5254 /* RFC 8276 extended atributes operations */
5255 [OP_GETXATTR] = (nfsd4_enc)nfsd4_encode_getxattr,
5256 [OP_SETXATTR] = (nfsd4_enc)nfsd4_encode_setxattr,
5257 [OP_LISTXATTRS] = (nfsd4_enc)nfsd4_encode_listxattrs,
5258 [OP_REMOVEXATTR] = (nfsd4_enc)nfsd4_encode_removexattr,
695e12f8
BH
5259};
5260
496c262c 5261/*
a8095f7e
BF
5262 * Calculate whether we still have space to encode repsize bytes.
5263 * There are two considerations:
5264 * - For NFS versions >=4.1, the size of the reply must stay within
5265 * session limits
5266 * - For all NFS versions, we must stay within limited preallocated
5267 * buffer space.
496c262c 5268 *
a8095f7e
BF
5269 * This is called before the operation is processed, so can only provide
5270 * an upper estimate. For some nonidempotent operations (such as
5271 * getattr), it's not necessarily a problem if that estimate is wrong,
5272 * as we can fail it after processing without significant side effects.
496c262c 5273 */
a8095f7e 5274__be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize)
496c262c 5275{
67492c99 5276 struct xdr_buf *buf = &resp->rqstp->rq_res;
47ee5298 5277 struct nfsd4_slot *slot = resp->cstate.slot;
496c262c 5278
47ee5298
BF
5279 if (buf->len + respsize <= buf->buflen)
5280 return nfs_ok;
5281 if (!nfsd4_has_session(&resp->cstate))
ea8d7720 5282 return nfserr_resource;
47ee5298
BF
5283 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) {
5284 WARN_ON_ONCE(1);
5285 return nfserr_rep_too_big_to_cache;
ea8d7720 5286 }
47ee5298 5287 return nfserr_rep_too_big;
496c262c
AA
5288}
5289
1da177e4
LT
5290void
5291nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
5292{
bddfdbcd 5293 struct xdr_stream *xdr = resp->xdr;
9411b1d4 5294 struct nfs4_stateowner *so = resp->cstate.replay_owner;
5f4ab945 5295 struct svc_rqst *rqstp = resp->rqstp;
34b1744c 5296 const struct nfsd4_operation *opdesc = op->opdesc;
082d4bd7 5297 int post_err_offset;
07d1f802 5298 nfsd4_enc encoder;
bc749ca4 5299 __be32 *p;
1da177e4 5300
d0a381dd
BF
5301 p = xdr_reserve_space(xdr, 8);
5302 if (!p) {
5303 WARN_ON_ONCE(1);
5304 return;
5305 }
c373b0a4 5306 *p++ = cpu_to_be32(op->opnum);
082d4bd7 5307 post_err_offset = xdr->buf->len;
1da177e4 5308
695e12f8
BH
5309 if (op->opnum == OP_ILLEGAL)
5310 goto status;
b7571e4c
BF
5311 if (op->status && opdesc &&
5312 !(opdesc->op_flags & OP_NONTRIVIAL_ERROR_ENCODE))
5313 goto status;
3a237b4a 5314 BUG_ON(op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
695e12f8 5315 !nfsd4_enc_ops[op->opnum]);
07d1f802
BF
5316 encoder = nfsd4_enc_ops[op->opnum];
5317 op->status = encoder(resp, op->status, &op->u);
08281341
CL
5318 if (op->status)
5319 trace_nfsd_compound_encode_err(rqstp, op->opnum, op->status);
34b1744c
BF
5320 if (opdesc && opdesc->op_release)
5321 opdesc->op_release(&op->u);
2825a7f9
BF
5322 xdr_commit_encode(xdr);
5323
067e1ace 5324 /* nfsd4_check_resp_size guarantees enough room for error status */
5f4ab945
BF
5325 if (!op->status) {
5326 int space_needed = 0;
5327 if (!nfsd4_last_compound_op(rqstp))
5328 space_needed = COMPOUND_ERR_SLACK_SPACE;
5329 op->status = nfsd4_check_resp_size(resp, space_needed);
5330 }
c8f13d97
BF
5331 if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) {
5332 struct nfsd4_slot *slot = resp->cstate.slot;
5333
5334 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS)
5335 op->status = nfserr_rep_too_big_to_cache;
5336 else
5337 op->status = nfserr_rep_too_big;
5338 }
07d1f802
BF
5339 if (op->status == nfserr_resource ||
5340 op->status == nfserr_rep_too_big ||
5341 op->status == nfserr_rep_too_big_to_cache) {
5342 /*
5343 * The operation may have already been encoded or
5344 * partially encoded. No op returns anything additional
5345 * in the case of one of these three errors, so we can
5346 * just truncate back to after the status. But it's a
5347 * bug if we had to do this on a non-idempotent op:
5348 */
5349 warn_on_nonidempotent_op(op);
082d4bd7 5350 xdr_truncate_encode(xdr, post_err_offset);
07d1f802 5351 }
9411b1d4 5352 if (so) {
082d4bd7
BF
5353 int len = xdr->buf->len - post_err_offset;
5354
9411b1d4 5355 so->so_replay.rp_status = op->status;
082d4bd7
BF
5356 so->so_replay.rp_buflen = len;
5357 read_bytes_from_xdr_buf(xdr->buf, post_err_offset,
5358 so->so_replay.rp_buf, len);
9411b1d4 5359 }
695e12f8 5360status:
082d4bd7
BF
5361 /* Note that op->status is already in network byte order: */
5362 write_bytes_to_xdr_buf(xdr->buf, post_err_offset - 4, &op->status, 4);
1da177e4
LT
5363}
5364
5365/*
5366 * Encode the reply stored in the stateowner reply cache
5367 *
5368 * XDR note: do not encode rp->rp_buflen: the buffer contains the
5369 * previously sent already encoded operation.
1da177e4
LT
5370 */
5371void
d0a381dd 5372nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op)
1da177e4 5373{
bc749ca4 5374 __be32 *p;
1da177e4
LT
5375 struct nfs4_replay *rp = op->replay;
5376
d0a381dd
BF
5377 p = xdr_reserve_space(xdr, 8 + rp->rp_buflen);
5378 if (!p) {
5379 WARN_ON_ONCE(1);
5380 return;
5381 }
c373b0a4 5382 *p++ = cpu_to_be32(op->opnum);
1da177e4 5383 *p++ = rp->rp_status; /* already xdr'ed */
1da177e4 5384
0c0c267b 5385 p = xdr_encode_opaque_fixed(p, rp->rp_buf, rp->rp_buflen);
1da177e4
LT
5386}
5387
8537488b 5388void nfsd4_release_compoundargs(struct svc_rqst *rqstp)
1da177e4 5389{
3e98abff
BF
5390 struct nfsd4_compoundargs *args = rqstp->rq_argp;
5391
1da177e4
LT
5392 if (args->ops != args->iops) {
5393 kfree(args->ops);
5394 args->ops = args->iops;
5395 }
1da177e4 5396 while (args->to_free) {
d5e23383 5397 struct svcxdr_tmpbuf *tb = args->to_free;
1da177e4 5398 args->to_free = tb->next;
1da177e4
LT
5399 kfree(tb);
5400 }
5401}
5402
5403int
026fec7e 5404nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p)
1da177e4 5405{
026fec7e
CH
5406 struct nfsd4_compoundargs *args = rqstp->rq_argp;
5407
c1346a12 5408 /* svcxdr_tmp_alloc */
1da177e4 5409 args->to_free = NULL;
c1346a12
CL
5410
5411 args->xdr = &rqstp->rq_arg_stream;
1da177e4
LT
5412 args->ops = args->iops;
5413 args->rqstp = rqstp;
5414
d9b74bda 5415 return nfsd4_decode_compound(args);
1da177e4
LT
5416}
5417
5418int
63f8de37 5419nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p)
1da177e4 5420{
63f8de37 5421 struct nfsd4_compoundres *resp = rqstp->rq_resp;
bddfdbcd 5422 struct xdr_buf *buf = resp->xdr->buf;
6ac90391
BF
5423
5424 WARN_ON_ONCE(buf->len != buf->head[0].iov_len + buf->page_len +
5425 buf->tail[0].iov_len);
dd97fdde 5426
cc028a10
CL
5427 *p = resp->cstate.status;
5428
bddfdbcd 5429 rqstp->rq_next_page = resp->xdr->page_ptr + 1;
2825a7f9 5430
1da177e4
LT
5431 p = resp->tagp;
5432 *p++ = htonl(resp->taglen);
5433 memcpy(p, resp->tag, resp->taglen);
5434 p += XDR_QUADLEN(resp->taglen);
5435 *p++ = htonl(resp->opcnt);
5436
b607664e 5437 nfsd4_sequence_done(resp);
1da177e4
LT
5438 return 1;
5439}