fs/ext4/ioctl.c

   1 /*
   2  * linux/fs/ext4/ioctl.c
   3  *
   4  * Copyright (C) 1993, 1994, 1995
   5  * Remy Card (card@masi.ibp.fr)
   6  * Laboratoire MASI - Institut Blaise Pascal
   7  * Universite Pierre et Marie Curie (Paris VI)
   8  */
   9
  10 #include <linux/fs.h>
  11 #include <linux/capability.h>
  12 #include <linux/time.h>
  13 #include <linux/compat.h>
  14 #include <linux/mount.h>
  15 #include <linux/file.h>
  16 #include <linux/quotaops.h>
  17 #include <linux/uuid.h>
  18 #include <linux/uaccess.h>
  19 #include "ext4_jbd2.h"
  20 #include "ext4.h"
  21
  22 /**
  23  * Swap memory between @a and @b for @len bytes.
  24  *
  25  * @a:          pointer to first memory area
  26  * @b:          pointer to second memory area
  27  * @len:        number of bytes to swap
  28  *
  29  */
  30 static void memswap(void *a, void *b, size_t len)
  31 {
  32         unsigned char *ap, *bp;
  33
  34         ap = (unsigned char *)a;
  35         bp = (unsigned char *)b;
  36         while (len-- > 0) {
  37                 swap(*ap, *bp);
  38                 ap++;
  39                 bp++;
  40         }
  41 }
  42
  43 /**
  44  * Swap i_data and associated attributes between @inode1 and @inode2.
  45  * This function is used for the primary swap between inode1 and inode2
  46  * and also to revert this primary swap in case of errors.
  47  *
  48  * Therefore you have to make sure, that calling this method twice
  49  * will revert all changes.
  50  *
  51  * @inode1:     pointer to first inode
  52  * @inode2:     pointer to second inode
  53  */
  54 static void swap_inode_data(struct inode *inode1, struct inode *inode2)
  55 {
  56         loff_t isize;
  57         struct ext4_inode_info *ei1;
  58         struct ext4_inode_info *ei2;
  59
  60         ei1 = EXT4_I(inode1);
  61         ei2 = EXT4_I(inode2);
  62
  63         memswap(&inode1->i_flags, &inode2->i_flags, sizeof(inode1->i_flags));
  64         memswap(&inode1->i_version, &inode2->i_version,
  65                   sizeof(inode1->i_version));
  66         memswap(&inode1->i_blocks, &inode2->i_blocks,
  67                   sizeof(inode1->i_blocks));
  68         memswap(&inode1->i_bytes, &inode2->i_bytes, sizeof(inode1->i_bytes));
  69         memswap(&inode1->i_atime, &inode2->i_atime, sizeof(inode1->i_atime));
  70         memswap(&inode1->i_mtime, &inode2->i_mtime, sizeof(inode1->i_mtime));
  71
  72         memswap(ei1->i_data, ei2->i_data, sizeof(ei1->i_data));
  73         memswap(&ei1->i_flags, &ei2->i_flags, sizeof(ei1->i_flags));
  74         memswap(&ei1->i_disksize, &ei2->i_disksize, sizeof(ei1->i_disksize));
  75         ext4_es_remove_extent(inode1, 0, EXT_MAX_BLOCKS);
  76         ext4_es_remove_extent(inode2, 0, EXT_MAX_BLOCKS);
  77
  78         isize = i_size_read(inode1);
  79         i_size_write(inode1, i_size_read(inode2));
  80         i_size_write(inode2, isize);
  81 }
  82
  83 /**
  84  * Swap the information from the given @inode and the inode
  85  * EXT4_BOOT_LOADER_INO. It will basically swap i_data and all other
  86  * important fields of the inodes.
  87  *
  88  * @sb:         the super block of the filesystem
  89  * @inode:      the inode to swap with EXT4_BOOT_LOADER_INO
  90  *
  91  */
  92 static long swap_inode_boot_loader(struct super_block *sb,
  93                                 struct inode *inode)
  94 {
  95         handle_t *handle;
  96         int err;
  97         struct inode *inode_bl;
  98         struct ext4_inode_info *ei_bl;
  99         struct ext4_sb_info *sbi = EXT4_SB(sb);
 100
 101         if (inode->i_nlink != 1 || !S_ISREG(inode->i_mode))
 102                 return -EINVAL;
 103
 104         if (!inode_owner_or_capable(inode) || !capable(CAP_SYS_ADMIN))
 105                 return -EPERM;
 106
 107         inode_bl = ext4_iget(sb, EXT4_BOOT_LOADER_INO);
 108         if (IS_ERR(inode_bl))
 109                 return PTR_ERR(inode_bl);
 110         ei_bl = EXT4_I(inode_bl);
 111
 112         filemap_flush(inode->i_mapping);
 113         filemap_flush(inode_bl->i_mapping);
 114
 115         /* Protect orig inodes against a truncate and make sure,
 116          * that only 1 swap_inode_boot_loader is running. */
 117         lock_two_nondirectories(inode, inode_bl);
 118
 119         truncate_inode_pages(&inode->i_data, 0);
 120         truncate_inode_pages(&inode_bl->i_data, 0);
 121
 122         /* Wait for all existing dio workers */
 123         ext4_inode_block_unlocked_dio(inode);
 124         ext4_inode_block_unlocked_dio(inode_bl);
 125         inode_dio_wait(inode);
 126         inode_dio_wait(inode_bl);
 127
 128         handle = ext4_journal_start(inode_bl, EXT4_HT_MOVE_EXTENTS, 2);
 129         if (IS_ERR(handle)) {
 130                 err = -EINVAL;
 131                 goto journal_err_out;
 132         }
 133
 134         /* Protect extent tree against block allocations via delalloc */
 135         ext4_double_down_write_data_sem(inode, inode_bl);
 136
 137         if (inode_bl->i_nlink == 0) {
 138                 /* this inode has never been used as a BOOT_LOADER */
 139                 set_nlink(inode_bl, 1);
 140                 i_uid_write(inode_bl, 0);
 141                 i_gid_write(inode_bl, 0);
 142                 inode_bl->i_flags = 0;
 143                 ei_bl->i_flags = 0;
 144                 inode_bl->i_version = 1;
 145                 i_size_write(inode_bl, 0);
 146                 inode_bl->i_mode = S_IFREG;
 147                 if (ext4_has_feature_extents(sb)) {
 148                         ext4_set_inode_flag(inode_bl, EXT4_INODE_EXTENTS);
 149                         ext4_ext_tree_init(handle, inode_bl);
 150                 } else
 151                         memset(ei_bl->i_data, 0, sizeof(ei_bl->i_data));
 152         }
 153
 154         swap_inode_data(inode, inode_bl);
 155
 156         inode->i_ctime = inode_bl->i_ctime = current_time(inode);
 157
 158         spin_lock(&sbi->s_next_gen_lock);
 159         inode->i_generation = sbi->s_next_generation++;
 160         inode_bl->i_generation = sbi->s_next_generation++;
 161         spin_unlock(&sbi->s_next_gen_lock);
 162
 163         ext4_discard_preallocations(inode);
 164
 165         err = ext4_mark_inode_dirty(handle, inode);
 166         if (err < 0) {
 167                 ext4_warning(inode->i_sb,
 168                         "couldn't mark inode #%lu dirty (err %d)",
 169                         inode->i_ino, err);
 170                 /* Revert all changes: */
 171                 swap_inode_data(inode, inode_bl);
 172         } else {
 173                 err = ext4_mark_inode_dirty(handle, inode_bl);
 174                 if (err < 0) {
 175                         ext4_warning(inode_bl->i_sb,
 176                                 "couldn't mark inode #%lu dirty (err %d)",
 177                                 inode_bl->i_ino, err);
 178                         /* Revert all changes: */
 179                         swap_inode_data(inode, inode_bl);
 180                         ext4_mark_inode_dirty(handle, inode);
 181                 }
 182         }
 183         ext4_journal_stop(handle);
 184         ext4_double_up_write_data_sem(inode, inode_bl);
 185
 186 journal_err_out:
 187         ext4_inode_resume_unlocked_dio(inode);
 188         ext4_inode_resume_unlocked_dio(inode_bl);
 189         unlock_two_nondirectories(inode, inode_bl);
 190         iput(inode_bl);
 191         return err;
 192 }
 193
 194 #ifdef CONFIG_EXT4_FS_ENCRYPTION
 195 static int uuid_is_zero(__u8 u[16])
 196 {
 197         int     i;
 198
 199         for (i = 0; i < 16; i++)
 200                 if (u[i])
 201                         return 0;
 202         return 1;
 203 }
 204 #endif
 205
 206 static int ext4_ioctl_setflags(struct inode *inode,
 207                                unsigned int flags)
 208 {
 209         struct ext4_inode_info *ei = EXT4_I(inode);
 210         handle_t *handle = NULL;
 211         int err = -EPERM, migrate = 0;
 212         struct ext4_iloc iloc;
 213         unsigned int oldflags, mask, i;
 214         unsigned int jflag;
 215
 216         /* Is it quota file? Do not allow user to mess with it */
 217         if (IS_NOQUOTA(inode))
 218                 goto flags_out;
 219
 220         oldflags = ei->i_flags;
 221
 222         /* The JOURNAL_DATA flag is modifiable only by root */
 223         jflag = flags & EXT4_JOURNAL_DATA_FL;
 224
 225         /*
 226          * The IMMUTABLE and APPEND_ONLY flags can only be changed by
 227          * the relevant capability.
 228          *
 229          * This test looks nicer. Thanks to Pauline Middelink
 230          */
 231         if ((flags ^ oldflags) & (EXT4_APPEND_FL | EXT4_IMMUTABLE_FL)) {
 232                 if (!capable(CAP_LINUX_IMMUTABLE))
 233                         goto flags_out;
 234         }
 235
 236         /*
 237          * The JOURNAL_DATA flag can only be changed by
 238          * the relevant capability.
 239          */
 240         if ((jflag ^ oldflags) & (EXT4_JOURNAL_DATA_FL)) {
 241                 if (!ns_capable(inode->i_sb->s_user_ns, CAP_SYS_RESOURCE))
 242                         goto flags_out;
 243         }
 244         if ((flags ^ oldflags) & EXT4_EXTENTS_FL)
 245                 migrate = 1;
 246
 247         if (flags & EXT4_EOFBLOCKS_FL) {
 248                 /* we don't support adding EOFBLOCKS flag */
 249                 if (!(oldflags & EXT4_EOFBLOCKS_FL)) {
 250                         err = -EOPNOTSUPP;
 251                         goto flags_out;
 252                 }
 253         } else if (oldflags & EXT4_EOFBLOCKS_FL) {
 254                 err = ext4_truncate(inode);
 255                 if (err)
 256                         goto flags_out;
 257         }
 258
 259         handle = ext4_journal_start(inode, EXT4_HT_INODE, 1);
 260         if (IS_ERR(handle)) {
 261                 err = PTR_ERR(handle);
 262                 goto flags_out;
 263         }
 264         if (IS_SYNC(inode))
 265                 ext4_handle_sync(handle);
 266         err = ext4_reserve_inode_write(handle, inode, &iloc);
 267         if (err)
 268                 goto flags_err;
 269
 270         for (i = 0, mask = 1; i < 32; i++, mask <<= 1) {
 271                 if (!(mask & EXT4_FL_USER_MODIFIABLE))
 272                         continue;
 273                 /* These flags get special treatment later */
 274                 if (mask == EXT4_JOURNAL_DATA_FL || mask == EXT4_EXTENTS_FL)
 275                         continue;
 276                 if (mask & flags)
 277                         ext4_set_inode_flag(inode, i);
 278                 else
 279                         ext4_clear_inode_flag(inode, i);
 280         }
 281
 282         ext4_set_inode_flags(inode);
 283         inode->i_ctime = current_time(inode);
 284
 285         err = ext4_mark_iloc_dirty(handle, inode, &iloc);
 286 flags_err:
 287         ext4_journal_stop(handle);
 288         if (err)
 289                 goto flags_out;
 290
 291         if ((jflag ^ oldflags) & (EXT4_JOURNAL_DATA_FL))
 292                 err = ext4_change_inode_journal_flag(inode, jflag);
 293         if (err)
 294                 goto flags_out;
 295         if (migrate) {
 296                 if (flags & EXT4_EXTENTS_FL)
 297                         err = ext4_ext_migrate(inode);
 298                 else
 299                         err = ext4_ind_migrate(inode);
 300         }
 301
 302 flags_out:
 303         return err;
 304 }
 305
 306 #ifdef CONFIG_QUOTA
 307 static int ext4_ioctl_setproject(struct file *filp, __u32 projid)
 308 {
 309         struct inode *inode = file_inode(filp);
 310         struct super_block *sb = inode->i_sb;
 311         struct ext4_inode_info *ei = EXT4_I(inode);
 312         int err, rc;
 313         handle_t *handle;
 314         kprojid_t kprojid;
 315         struct ext4_iloc iloc;
 316         struct ext4_inode *raw_inode;
 317         struct dquot *transfer_to[MAXQUOTAS] = { };
 318
 319         if (!ext4_has_feature_project(sb)) {
 320                 if (projid != EXT4_DEF_PROJID)
 321                         return -EOPNOTSUPP;
 322                 else
 323                         return 0;
 324         }
 325
 326         if (EXT4_INODE_SIZE(sb) <= EXT4_GOOD_OLD_INODE_SIZE)
 327                 return -EOPNOTSUPP;
 328
 329         kprojid = make_kprojid(sb->s_user_ns, (projid_t)projid);
 330
 331         if (!projid_valid(kprojid))
 332                 return -EOVERFLOW;
 333         if (projid_eq(kprojid, EXT4_I(inode)->i_projid))
 334                 return 0;
 335
 336         err = mnt_want_write_file(filp);
 337         if (err)
 338                 return err;
 339
 340         err = -EPERM;
 341         inode_lock(inode);
 342         /* Is it quota file? Do not allow user to mess with it */
 343         if (IS_NOQUOTA(inode))
 344                 goto out_unlock;
 345
 346         err = ext4_get_inode_loc(inode, &iloc);
 347         if (err)
 348                 goto out_unlock;
 349
 350         raw_inode = ext4_raw_inode(&iloc);
 351         if (!EXT4_FITS_IN_INODE(raw_inode, ei, i_projid)) {
 352                 err = -EOVERFLOW;
 353                 brelse(iloc.bh);
 354                 goto out_unlock;
 355         }
 356         brelse(iloc.bh);
 357
 358         dquot_initialize(inode);
 359
 360         handle = ext4_journal_start(inode, EXT4_HT_QUOTA,
 361                 EXT4_QUOTA_INIT_BLOCKS(sb) +
 362                 EXT4_QUOTA_DEL_BLOCKS(sb) + 3);
 363         if (IS_ERR(handle)) {
 364                 err = PTR_ERR(handle);
 365                 goto out_unlock;
 366         }
 367
 368         err = ext4_reserve_inode_write(handle, inode, &iloc);
 369         if (err)
 370                 goto out_stop;
 371
 372         transfer_to[PRJQUOTA] = dqget(sb, make_kqid_projid(kprojid));
 373         if (!IS_ERR(transfer_to[PRJQUOTA])) {
 374                 err = __dquot_transfer(inode, transfer_to);
 375                 dqput(transfer_to[PRJQUOTA]);
 376                 if (err)
 377                         goto out_dirty;
 378         }
 379
 380         EXT4_I(inode)->i_projid = kprojid;
 381         inode->i_ctime = current_time(inode);
 382 out_dirty:
 383         rc = ext4_mark_iloc_dirty(handle, inode, &iloc);
 384         if (!err)
 385                 err = rc;
 386 out_stop:
 387         ext4_journal_stop(handle);
 388 out_unlock:
 389         inode_unlock(inode);
 390         mnt_drop_write_file(filp);
 391         return err;
 392 }
 393 #else
 394 static int ext4_ioctl_setproject(struct file *filp, __u32 projid)
 395 {
 396         if (projid != EXT4_DEF_PROJID)
 397                 return -EOPNOTSUPP;
 398         return 0;
 399 }
 400 #endif
 401
 402 /* Transfer internal flags to xflags */
 403 static inline __u32 ext4_iflags_to_xflags(unsigned long iflags)
 404 {
 405         __u32 xflags = 0;
 406
 407         if (iflags & EXT4_SYNC_FL)
 408                 xflags |= FS_XFLAG_SYNC;
 409         if (iflags & EXT4_IMMUTABLE_FL)
 410                 xflags |= FS_XFLAG_IMMUTABLE;
 411         if (iflags & EXT4_APPEND_FL)
 412                 xflags |= FS_XFLAG_APPEND;
 413         if (iflags & EXT4_NODUMP_FL)
 414                 xflags |= FS_XFLAG_NODUMP;
 415         if (iflags & EXT4_NOATIME_FL)
 416                 xflags |= FS_XFLAG_NOATIME;
 417         if (iflags & EXT4_PROJINHERIT_FL)
 418                 xflags |= FS_XFLAG_PROJINHERIT;
 419         return xflags;
 420 }
 421
 422 #define EXT4_SUPPORTED_FS_XFLAGS (FS_XFLAG_SYNC | FS_XFLAG_IMMUTABLE | \
 423                                   FS_XFLAG_APPEND | FS_XFLAG_NODUMP | \
 424                                   FS_XFLAG_NOATIME | FS_XFLAG_PROJINHERIT)
 425
 426 /* Transfer xflags flags to internal */
 427 static inline unsigned long ext4_xflags_to_iflags(__u32 xflags)
 428 {
 429         unsigned long iflags = 0;
 430
 431         if (xflags & FS_XFLAG_SYNC)
 432                 iflags |= EXT4_SYNC_FL;
 433         if (xflags & FS_XFLAG_IMMUTABLE)
 434                 iflags |= EXT4_IMMUTABLE_FL;
 435         if (xflags & FS_XFLAG_APPEND)
 436                 iflags |= EXT4_APPEND_FL;
 437         if (xflags & FS_XFLAG_NODUMP)
 438                 iflags |= EXT4_NODUMP_FL;
 439         if (xflags & FS_XFLAG_NOATIME)
 440                 iflags |= EXT4_NOATIME_FL;
 441         if (xflags & FS_XFLAG_PROJINHERIT)
 442                 iflags |= EXT4_PROJINHERIT_FL;
 443
 444         return iflags;
 445 }
 446
 447 long ext4_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
 448 {
 449         struct inode *inode = file_inode(filp);
 450         struct super_block *sb = inode->i_sb;
 451         struct ext4_inode_info *ei = EXT4_I(inode);
 452         unsigned int flags;
 453
 454         ext4_debug("cmd = %u, arg = %lu\n", cmd, arg);
 455
 456         switch (cmd) {
 457         case EXT4_IOC_GETFLAGS:
 458                 ext4_get_inode_flags(ei);
 459                 flags = ei->i_flags & EXT4_FL_USER_VISIBLE;
 460                 return put_user(flags, (int __user *) arg);
 461         case EXT4_IOC_SETFLAGS: {
 462                 int err;
 463
 464                 if (!inode_owner_or_capable(inode))
 465                         return -EACCES;
 466
 467                 if (get_user(flags, (int __user *) arg))
 468                         return -EFAULT;
 469
 470                 if (flags & ~EXT4_FL_USER_VISIBLE)
 471                         return -EOPNOTSUPP;
 472                 /*
 473                  * chattr(1) grabs flags via GETFLAGS, modifies the result and
 474                  * passes that to SETFLAGS. So we cannot easily make SETFLAGS
 475                  * more restrictive than just silently masking off visible but
 476                  * not settable flags as we always did.
 477                  */
 478                 flags &= EXT4_FL_USER_MODIFIABLE;
 479                 if (ext4_mask_flags(inode->i_mode, flags) != flags)
 480                         return -EOPNOTSUPP;
 481
 482                 err = mnt_want_write_file(filp);
 483                 if (err)
 484                         return err;
 485
 486                 inode_lock(inode);
 487                 err = ext4_ioctl_setflags(inode, flags);
 488                 inode_unlock(inode);
 489                 mnt_drop_write_file(filp);
 490                 return err;
 491         }
 492         case EXT4_IOC_GETVERSION:
 493         case EXT4_IOC_GETVERSION_OLD:
 494                 return put_user(inode->i_generation, (int __user *) arg);
 495         case EXT4_IOC_SETVERSION:
 496         case EXT4_IOC_SETVERSION_OLD: {
 497                 handle_t *handle;
 498                 struct ext4_iloc iloc;
 499                 __u32 generation;
 500                 int err;
 501
 502                 if (!inode_owner_or_capable(inode))
 503                         return -EPERM;
 504
 505                 if (ext4_has_metadata_csum(inode->i_sb)) {
 506                         ext4_warning(sb, "Setting inode version is not "
 507                                      "supported with metadata_csum enabled.");
 508                         return -ENOTTY;
 509                 }
 510
 511                 err = mnt_want_write_file(filp);
 512                 if (err)
 513                         return err;
 514                 if (get_user(generation, (int __user *) arg)) {
 515                         err = -EFAULT;
 516                         goto setversion_out;
 517                 }
 518
 519                 inode_lock(inode);
 520                 handle = ext4_journal_start(inode, EXT4_HT_INODE, 1);
 521                 if (IS_ERR(handle)) {
 522                         err = PTR_ERR(handle);
 523                         goto unlock_out;
 524                 }
 525                 err = ext4_reserve_inode_write(handle, inode, &iloc);
 526                 if (err == 0) {
 527                         inode->i_ctime = current_time(inode);
 528                         inode->i_generation = generation;
 529                         err = ext4_mark_iloc_dirty(handle, inode, &iloc);
 530                 }
 531                 ext4_journal_stop(handle);
 532
 533 unlock_out:
 534                 inode_unlock(inode);
 535 setversion_out:
 536                 mnt_drop_write_file(filp);
 537                 return err;
 538         }
 539         case EXT4_IOC_GROUP_EXTEND: {
 540                 ext4_fsblk_t n_blocks_count;
 541                 int err, err2=0;
 542
 543                 err = ext4_resize_begin(sb);
 544                 if (err)
 545                         return err;
 546
 547                 if (get_user(n_blocks_count, (__u32 __user *)arg)) {
 548                         err = -EFAULT;
 549                         goto group_extend_out;
 550                 }
 551
 552                 if (ext4_has_feature_bigalloc(sb)) {
 553                         ext4_msg(sb, KERN_ERR,
 554                                  "Online resizing not supported with bigalloc");
 555                         err = -EOPNOTSUPP;
 556                         goto group_extend_out;
 557                 }
 558
 559                 err = mnt_want_write_file(filp);
 560                 if (err)
 561                         goto group_extend_out;
 562
 563                 err = ext4_group_extend(sb, EXT4_SB(sb)->s_es, n_blocks_count);
 564                 if (EXT4_SB(sb)->s_journal) {
 565                         jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal);
 566                         err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal);
 567                         jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal);
 568                 }
 569                 if (err == 0)
 570                         err = err2;
 571                 mnt_drop_write_file(filp);
 572 group_extend_out:
 573                 ext4_resize_end(sb);
 574                 return err;
 575         }
 576
 577         case EXT4_IOC_MOVE_EXT: {
 578                 struct move_extent me;
 579                 struct fd donor;
 580                 int err;
 581
 582                 if (!(filp->f_mode & FMODE_READ) ||
 583                     !(filp->f_mode & FMODE_WRITE))
 584                         return -EBADF;
 585
 586                 if (copy_from_user(&me,
 587                         (struct move_extent __user *)arg, sizeof(me)))
 588                         return -EFAULT;
 589                 me.moved_len = 0;
 590
 591                 donor = fdget(me.donor_fd);
 592                 if (!donor.file)
 593                         return -EBADF;
 594
 595                 if (!(donor.file->f_mode & FMODE_WRITE)) {
 596                         err = -EBADF;
 597                         goto mext_out;
 598                 }
 599
 600                 if (ext4_has_feature_bigalloc(sb)) {
 601                         ext4_msg(sb, KERN_ERR,
 602                                  "Online defrag not supported with bigalloc");
 603                         err = -EOPNOTSUPP;
 604                         goto mext_out;
 605                 } else if (IS_DAX(inode)) {
 606                         ext4_msg(sb, KERN_ERR,
 607                                  "Online defrag not supported with DAX");
 608                         err = -EOPNOTSUPP;
 609                         goto mext_out;
 610                 }
 611
 612                 err = mnt_want_write_file(filp);
 613                 if (err)
 614                         goto mext_out;
 615
 616                 err = ext4_move_extents(filp, donor.file, me.orig_start,
 617                                         me.donor_start, me.len, &me.moved_len);
 618                 mnt_drop_write_file(filp);
 619
 620                 if (copy_to_user((struct move_extent __user *)arg,
 621                                  &me, sizeof(me)))
 622                         err = -EFAULT;
 623 mext_out:
 624                 fdput(donor);
 625                 return err;
 626         }
 627
 628         case EXT4_IOC_GROUP_ADD: {
 629                 struct ext4_new_group_data input;
 630                 int err, err2=0;
 631
 632                 err = ext4_resize_begin(sb);
 633                 if (err)
 634                         return err;
 635
 636                 if (copy_from_user(&input, (struct ext4_new_group_input __user *)arg,
 637                                 sizeof(input))) {
 638                         err = -EFAULT;
 639                         goto group_add_out;
 640                 }
 641
 642                 if (ext4_has_feature_bigalloc(sb)) {
 643                         ext4_msg(sb, KERN_ERR,
 644                                  "Online resizing not supported with bigalloc");
 645                         err = -EOPNOTSUPP;
 646                         goto group_add_out;
 647                 }
 648
 649                 err = mnt_want_write_file(filp);
 650                 if (err)
 651                         goto group_add_out;
 652
 653                 err = ext4_group_add(sb, &input);
 654                 if (EXT4_SB(sb)->s_journal) {
 655                         jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal);
 656                         err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal);
 657                         jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal);
 658                 }
 659                 if (err == 0)
 660                         err = err2;
 661                 mnt_drop_write_file(filp);
 662                 if (!err && ext4_has_group_desc_csum(sb) &&
 663                     test_opt(sb, INIT_INODE_TABLE))
 664                         err = ext4_register_li_request(sb, input.group);
 665 group_add_out:
 666                 ext4_resize_end(sb);
 667                 return err;
 668         }
 669
 670         case EXT4_IOC_MIGRATE:
 671         {
 672                 int err;
 673                 if (!inode_owner_or_capable(inode))
 674                         return -EACCES;
 675
 676                 err = mnt_want_write_file(filp);
 677                 if (err)
 678                         return err;
 679                 /*
 680                  * inode_mutex prevent write and truncate on the file.
 681                  * Read still goes through. We take i_data_sem in
 682                  * ext4_ext_swap_inode_data before we switch the
 683                  * inode format to prevent read.
 684                  */
 685                 inode_lock((inode));
 686                 err = ext4_ext_migrate(inode);
 687                 inode_unlock((inode));
 688                 mnt_drop_write_file(filp);
 689                 return err;
 690         }
 691
 692         case EXT4_IOC_ALLOC_DA_BLKS:
 693         {
 694                 int err;
 695                 if (!inode_owner_or_capable(inode))
 696                         return -EACCES;
 697
 698                 err = mnt_want_write_file(filp);
 699                 if (err)
 700                         return err;
 701                 err = ext4_alloc_da_blocks(inode);
 702                 mnt_drop_write_file(filp);
 703                 return err;
 704         }
 705
 706         case EXT4_IOC_SWAP_BOOT:
 707         {
 708                 int err;
 709                 if (!(filp->f_mode & FMODE_WRITE))
 710                         return -EBADF;
 711                 err = mnt_want_write_file(filp);
 712                 if (err)
 713                         return err;
 714                 err = swap_inode_boot_loader(sb, inode);
 715                 mnt_drop_write_file(filp);
 716                 return err;
 717         }
 718
 719         case EXT4_IOC_RESIZE_FS: {
 720                 ext4_fsblk_t n_blocks_count;
 721                 int err = 0, err2 = 0;
 722                 ext4_group_t o_group = EXT4_SB(sb)->s_groups_count;
 723
 724                 if (ext4_has_feature_bigalloc(sb)) {
 725                         ext4_msg(sb, KERN_ERR,
 726                                  "Online resizing not (yet) supported with bigalloc");
 727                         return -EOPNOTSUPP;
 728                 }
 729
 730                 if (copy_from_user(&n_blocks_count, (__u64 __user *)arg,
 731                                    sizeof(__u64))) {
 732                         return -EFAULT;
 733                 }
 734
 735                 err = ext4_resize_begin(sb);
 736                 if (err)
 737                         return err;
 738
 739                 err = mnt_want_write_file(filp);
 740                 if (err)
 741                         goto resizefs_out;
 742
 743                 err = ext4_resize_fs(sb, n_blocks_count);
 744                 if (EXT4_SB(sb)->s_journal) {
 745                         jbd2_journal_lock_updates(EXT4_SB(sb)->s_journal);
 746                         err2 = jbd2_journal_flush(EXT4_SB(sb)->s_journal);
 747                         jbd2_journal_unlock_updates(EXT4_SB(sb)->s_journal);
 748                 }
 749                 if (err == 0)
 750                         err = err2;
 751                 mnt_drop_write_file(filp);
 752                 if (!err && (o_group > EXT4_SB(sb)->s_groups_count) &&
 753                     ext4_has_group_desc_csum(sb) &&
 754                     test_opt(sb, INIT_INODE_TABLE))
 755                         err = ext4_register_li_request(sb, o_group);
 756
 757 resizefs_out:
 758                 ext4_resize_end(sb);
 759                 return err;
 760         }
 761
 762         case FITRIM:
 763         {
 764                 struct request_queue *q = bdev_get_queue(sb->s_bdev);
 765                 struct fstrim_range range;
 766                 int ret = 0;
 767
 768                 if (!ns_capable(sb->s_user_ns, CAP_SYS_ADMIN))
 769                         return -EPERM;
 770
 771                 if (!blk_queue_discard(q))
 772                         return -EOPNOTSUPP;
 773
 774                 if (copy_from_user(&range, (struct fstrim_range __user *)arg,
 775                     sizeof(range)))
 776                         return -EFAULT;
 777
 778                 range.minlen = max((unsigned int)range.minlen,
 779                                    q->limits.discard_granularity);
 780                 ret = ext4_trim_fs(sb, &range);
 781                 if (ret < 0)
 782                         return ret;
 783
 784                 if (copy_to_user((struct fstrim_range __user *)arg, &range,
 785                     sizeof(range)))
 786                         return -EFAULT;
 787
 788                 return 0;
 789         }
 790         case EXT4_IOC_PRECACHE_EXTENTS:
 791                 return ext4_ext_precache(inode);
 792
 793         case EXT4_IOC_SET_ENCRYPTION_POLICY:
 794                 if (!ext4_has_feature_encrypt(sb))
 795                         return -EOPNOTSUPP;
 796                 return fscrypt_ioctl_set_policy(filp, (const void __user *)arg);
 797
 798         case EXT4_IOC_GET_ENCRYPTION_PWSALT: {
 799 #ifdef CONFIG_EXT4_FS_ENCRYPTION
 800                 int err, err2;
 801                 struct ext4_sb_info *sbi = EXT4_SB(sb);
 802                 handle_t *handle;
 803
 804                 if (!ext4_has_feature_encrypt(sb))
 805                         return -EOPNOTSUPP;
 806                 if (uuid_is_zero(sbi->s_es->s_encrypt_pw_salt)) {
 807                         err = mnt_want_write_file(filp);
 808                         if (err)
 809                                 return err;
 810                         handle = ext4_journal_start_sb(sb, EXT4_HT_MISC, 1);
 811                         if (IS_ERR(handle)) {
 812                                 err = PTR_ERR(handle);
 813                                 goto pwsalt_err_exit;
 814                         }
 815                         err = ext4_journal_get_write_access(handle, sbi->s_sbh);
 816                         if (err)
 817                                 goto pwsalt_err_journal;
 818                         generate_random_uuid(sbi->s_es->s_encrypt_pw_salt);
 819                         err = ext4_handle_dirty_metadata(handle, NULL,
 820                                                          sbi->s_sbh);
 821                 pwsalt_err_journal:
 822                         err2 = ext4_journal_stop(handle);
 823                         if (err2 && !err)
 824                                 err = err2;
 825                 pwsalt_err_exit:
 826                         mnt_drop_write_file(filp);
 827                         if (err)
 828                                 return err;
 829                 }
 830                 if (copy_to_user((void __user *) arg,
 831                                  sbi->s_es->s_encrypt_pw_salt, 16))
 832                         return -EFAULT;
 833                 return 0;
 834 #else
 835                 return -EOPNOTSUPP;
 836 #endif
 837         }
 838         case EXT4_IOC_GET_ENCRYPTION_POLICY:
 839                 return fscrypt_ioctl_get_policy(filp, (void __user *)arg);
 840
 841         case EXT4_IOC_FSGETXATTR:
 842         {
 843                 struct fsxattr fa;
 844
 845                 memset(&fa, 0, sizeof(struct fsxattr));
 846                 ext4_get_inode_flags(ei);
 847                 fa.fsx_xflags = ext4_iflags_to_xflags(ei->i_flags & EXT4_FL_USER_VISIBLE);
 848
 849                 if (ext4_has_feature_project(inode->i_sb)) {
 850                         fa.fsx_projid = (__u32)from_kprojid_munged(sb->s_user_ns,
 851                                 EXT4_I(inode)->i_projid);
 852                 }
 853
 854                 if (copy_to_user((struct fsxattr __user *)arg,
 855                                  &fa, sizeof(fa)))
 856                         return -EFAULT;
 857                 return 0;
 858         }
 859         case EXT4_IOC_FSSETXATTR:
 860         {
 861                 struct fsxattr fa;
 862                 int err;
 863
 864                 if (copy_from_user(&fa, (struct fsxattr __user *)arg,
 865                                    sizeof(fa)))
 866                         return -EFAULT;
 867
 868                 /* Make sure caller has proper permission */
 869                 if (!inode_owner_or_capable(inode))
 870                         return -EACCES;
 871
 872                 if (fa.fsx_xflags & ~EXT4_SUPPORTED_FS_XFLAGS)
 873                         return -EOPNOTSUPP;
 874
 875                 flags = ext4_xflags_to_iflags(fa.fsx_xflags);
 876                 if (ext4_mask_flags(inode->i_mode, flags) != flags)
 877                         return -EOPNOTSUPP;
 878
 879                 err = mnt_want_write_file(filp);
 880                 if (err)
 881                         return err;
 882
 883                 inode_lock(inode);
 884                 flags = (ei->i_flags & ~EXT4_FL_XFLAG_VISIBLE) |
 885                          (flags & EXT4_FL_XFLAG_VISIBLE);
 886                 err = ext4_ioctl_setflags(inode, flags);
 887                 inode_unlock(inode);
 888                 mnt_drop_write_file(filp);
 889                 if (err)
 890                         return err;
 891
 892                 err = ext4_ioctl_setproject(filp, fa.fsx_projid);
 893                 if (err)
 894                         return err;
 895
 896                 return 0;
 897         }
 898         default:
 899                 return -ENOTTY;
 900         }
 901 }
 902
 903 #ifdef CONFIG_COMPAT
 904 long ext4_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
 905 {
 906         /* These are just misnamed, they actually get/put from/to user an int */
 907         switch (cmd) {
 908         case EXT4_IOC32_GETFLAGS:
 909                 cmd = EXT4_IOC_GETFLAGS;
 910                 break;
 911         case EXT4_IOC32_SETFLAGS:
 912                 cmd = EXT4_IOC_SETFLAGS;
 913                 break;
 914         case EXT4_IOC32_GETVERSION:
 915                 cmd = EXT4_IOC_GETVERSION;
 916                 break;
 917         case EXT4_IOC32_SETVERSION:
 918                 cmd = EXT4_IOC_SETVERSION;
 919                 break;
 920         case EXT4_IOC32_GROUP_EXTEND:
 921                 cmd = EXT4_IOC_GROUP_EXTEND;
 922                 break;
 923         case EXT4_IOC32_GETVERSION_OLD:
 924                 cmd = EXT4_IOC_GETVERSION_OLD;
 925                 break;
 926         case EXT4_IOC32_SETVERSION_OLD:
 927                 cmd = EXT4_IOC_SETVERSION_OLD;
 928                 break;
 929         case EXT4_IOC32_GETRSVSZ:
 930                 cmd = EXT4_IOC_GETRSVSZ;
 931                 break;
 932         case EXT4_IOC32_SETRSVSZ:
 933                 cmd = EXT4_IOC_SETRSVSZ;
 934                 break;
 935         case EXT4_IOC32_GROUP_ADD: {
 936                 struct compat_ext4_new_group_input __user *uinput;
 937                 struct ext4_new_group_input input;
 938                 mm_segment_t old_fs;
 939                 int err;
 940
 941                 uinput = compat_ptr(arg);
 942                 err = get_user(input.group, &uinput->group);
 943                 err |= get_user(input.block_bitmap, &uinput->block_bitmap);
 944                 err |= get_user(input.inode_bitmap, &uinput->inode_bitmap);
 945                 err |= get_user(input.inode_table, &uinput->inode_table);
 946                 err |= get_user(input.blocks_count, &uinput->blocks_count);
 947                 err |= get_user(input.reserved_blocks,
 948                                 &uinput->reserved_blocks);
 949                 if (err)
 950                         return -EFAULT;
 951                 old_fs = get_fs();
 952                 set_fs(KERNEL_DS);
 953                 err = ext4_ioctl(file, EXT4_IOC_GROUP_ADD,
 954                                  (unsigned long) &input);
 955                 set_fs(old_fs);
 956                 return err;
 957         }
 958         case EXT4_IOC_MOVE_EXT:
 959         case EXT4_IOC_RESIZE_FS:
 960         case EXT4_IOC_PRECACHE_EXTENTS:
 961         case EXT4_IOC_SET_ENCRYPTION_POLICY:
 962         case EXT4_IOC_GET_ENCRYPTION_PWSALT:
 963         case EXT4_IOC_GET_ENCRYPTION_POLICY:
 964                 break;
 965         default:
 966                 return -ENOIOCTLCMD;
 967         }
 968         return ext4_ioctl(file, cmd, (unsigned long) compat_ptr(arg));
 969 }
 970 #endif