]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blob - fs/ext4/xattr.c
projects / mirror_ubuntu-bionic-kernel.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge remote-tracking branches 'asoc/topic/sgtl5000', 'asoc/topic/simple', 'asoc...
[mirror_ubuntu-bionic-kernel.git] / fs / ext4 / xattr.c
1 /*
2 * linux/fs/ext4/xattr.c
3 *
4 * Copyright (C) 2001-2003 Andreas Gruenbacher, <agruen@suse.de>
5 *
6 * Fix by Harrison Xing <harrison@mountainviewdata.com>.
7 * Ext4 code with a lot of help from Eric Jarman <ejarman@acm.org>.
8 * Extended attributes for symlinks and special files added per
9 * suggestion of Luka Renko <luka.renko@hermes.si>.
10 * xattr consolidation Copyright (c) 2004 James Morris <jmorris@redhat.com>,
11 * Red Hat Inc.
12 * ea-in-inode support by Alex Tomas <alex@clusterfs.com> aka bzzz
13 * and Andreas Gruenbacher <agruen@suse.de>.
14 */
15
16 /*
17 * Extended attributes are stored directly in inodes (on file systems with
18 * inodes bigger than 128 bytes) and on additional disk blocks. The i_file_acl
19 * field contains the block number if an inode uses an additional block. All
20 * attributes must fit in the inode and one additional block. Blocks that
21 * contain the identical set of attributes may be shared among several inodes.
22 * Identical blocks are detected by keeping a cache of blocks that have
23 * recently been accessed.
24 *
25 * The attributes in inodes and on blocks have a different header; the entries
26 * are stored in the same format:
27 *
28 * +------------------+
29 * | header |
30 * | entry 1 | |
31 * | entry 2 | | growing downwards
32 * | entry 3 | v
33 * | four null bytes |
34 * | . . . |
35 * | value 1 | ^
36 * | value 3 | | growing upwards
37 * | value 2 | |
38 * +------------------+
39 *
40 * The header is followed by multiple entry descriptors. In disk blocks, the
41 * entry descriptors are kept sorted. In inodes, they are unsorted. The
42 * attribute values are aligned to the end of the block in no specific order.
43 *
44 * Locking strategy
45 * ----------------
46 * EXT4_I(inode)->i_file_acl is protected by EXT4_I(inode)->xattr_sem.
47 * EA blocks are only changed if they are exclusive to an inode, so
48 * holding xattr_sem also means that nothing but the EA block's reference
49 * count can change. Multiple writers to the same block are synchronized
50 * by the buffer lock.
51 */
52
53 #include <linux/init.h>
54 #include <linux/fs.h>
55 #include <linux/slab.h>
56 #include <linux/mbcache.h>
57 #include <linux/quotaops.h>
58 #include "ext4_jbd2.h"
59 #include "ext4.h"
60 #include "xattr.h"
61 #include "acl.h"
62
63 #ifdef EXT4_XATTR_DEBUG
64 # define ea_idebug(inode, f...) do { \
65 printk(KERN_DEBUG "inode %s:%lu: ", \
66 inode->i_sb->s_id, inode->i_ino); \
67 printk(f); \
68 printk("\n"); \
69 } while (0)
70 # define ea_bdebug(bh, f...) do { \
71 printk(KERN_DEBUG "block %pg:%lu: ", \
72 bh->b_bdev, (unsigned long) bh->b_blocknr); \
73 printk(f); \
74 printk("\n"); \
75 } while (0)
76 #else
77 # define ea_idebug(inode, fmt, ...) no_printk(fmt, ##__VA_ARGS__)
78 # define ea_bdebug(bh, fmt, ...) no_printk(fmt, ##__VA_ARGS__)
79 #endif
80
81 static void ext4_xattr_cache_insert(struct mb_cache *, struct buffer_head *);
82 static struct buffer_head *ext4_xattr_cache_find(struct inode *,
83 struct ext4_xattr_header *,
84 struct mb_cache_entry **);
85 static void ext4_xattr_rehash(struct ext4_xattr_header *,
86 struct ext4_xattr_entry *);
87 static int ext4_xattr_list(struct dentry *dentry, char *buffer,
88 size_t buffer_size);
89
90 static const struct xattr_handler *ext4_xattr_handler_map[] = {
91 [EXT4_XATTR_INDEX_USER] = &ext4_xattr_user_handler,
92 #ifdef CONFIG_EXT4_FS_POSIX_ACL
93 [EXT4_XATTR_INDEX_POSIX_ACL_ACCESS] = &posix_acl_access_xattr_handler,
94 [EXT4_XATTR_INDEX_POSIX_ACL_DEFAULT] = &posix_acl_default_xattr_handler,
95 #endif
96 [EXT4_XATTR_INDEX_TRUSTED] = &ext4_xattr_trusted_handler,
97 #ifdef CONFIG_EXT4_FS_SECURITY
98 [EXT4_XATTR_INDEX_SECURITY] = &ext4_xattr_security_handler,
99 #endif
100 };
101
102 const struct xattr_handler *ext4_xattr_handlers[] = {
103 &ext4_xattr_user_handler,
104 &ext4_xattr_trusted_handler,
105 #ifdef CONFIG_EXT4_FS_POSIX_ACL
106 &posix_acl_access_xattr_handler,
107 &posix_acl_default_xattr_handler,
108 #endif
109 #ifdef CONFIG_EXT4_FS_SECURITY
110 &ext4_xattr_security_handler,
111 #endif
112 NULL
113 };
114
115 #define EXT4_GET_MB_CACHE(inode) (((struct ext4_sb_info *) \
116 inode->i_sb->s_fs_info)->s_mb_cache)
117
118 static __le32 ext4_xattr_block_csum(struct inode *inode,
119 sector_t block_nr,
120 struct ext4_xattr_header *hdr)
121 {
122 struct ext4_sb_info *sbi = EXT4_SB(inode->i_sb);
123 __u32 csum;
124 __le64 dsk_block_nr = cpu_to_le64(block_nr);
125 __u32 dummy_csum = 0;
126 int offset = offsetof(struct ext4_xattr_header, h_checksum);
127
128 csum = ext4_chksum(sbi, sbi->s_csum_seed, (__u8 *)&dsk_block_nr,
129 sizeof(dsk_block_nr));
130 csum = ext4_chksum(sbi, csum, (__u8 *)hdr, offset);
131 csum = ext4_chksum(sbi, csum, (__u8 *)&dummy_csum, sizeof(dummy_csum));
132 offset += sizeof(dummy_csum);
133 csum = ext4_chksum(sbi, csum, (__u8 *)hdr + offset,
134 EXT4_BLOCK_SIZE(inode->i_sb) - offset);
135
136 return cpu_to_le32(csum);
137 }
138
139 static int ext4_xattr_block_csum_verify(struct inode *inode,
140 sector_t block_nr,
141 struct ext4_xattr_header *hdr)
142 {
143 if (ext4_has_metadata_csum(inode->i_sb) &&
144 (hdr->h_checksum != ext4_xattr_block_csum(inode, block_nr, hdr)))
145 return 0;
146 return 1;
147 }
148
149 static void ext4_xattr_block_csum_set(struct inode *inode,
150 sector_t block_nr,
151 struct ext4_xattr_header *hdr)
152 {
153 if (!ext4_has_metadata_csum(inode->i_sb))
154 return;
155
156 hdr->h_checksum = ext4_xattr_block_csum(inode, block_nr, hdr);
157 }
158
159 static inline int ext4_handle_dirty_xattr_block(handle_t *handle,
160 struct inode *inode,
161 struct buffer_head *bh)
162 {
163 ext4_xattr_block_csum_set(inode, bh->b_blocknr, BHDR(bh));
164 return ext4_handle_dirty_metadata(handle, inode, bh);
165 }
166
167 static inline const struct xattr_handler *
168 ext4_xattr_handler(int name_index)
169 {
170 const struct xattr_handler *handler = NULL;
171
172 if (name_index > 0 && name_index < ARRAY_SIZE(ext4_xattr_handler_map))
173 handler = ext4_xattr_handler_map[name_index];
174 return handler;
175 }
176
177 /*
178 * Inode operation listxattr()
179 *
180 * d_inode(dentry)->i_mutex: don't care
181 */
182 ssize_t
183 ext4_listxattr(struct dentry *dentry, char *buffer, size_t size)
184 {
185 return ext4_xattr_list(dentry, buffer, size);
186 }
187
188 static int
189 ext4_xattr_check_names(struct ext4_xattr_entry *entry, void *end,
190 void *value_start)
191 {
192 struct ext4_xattr_entry *e = entry;
193
194 while (!IS_LAST_ENTRY(e)) {
195 struct ext4_xattr_entry *next = EXT4_XATTR_NEXT(e);
196 if ((void *)next >= end)
197 return -EFSCORRUPTED;
198 e = next;
199 }
200
201 while (!IS_LAST_ENTRY(entry)) {
202 if (entry->e_value_size != 0 &&
203 (value_start + le16_to_cpu(entry->e_value_offs) <
204 (void *)e + sizeof(__u32) ||
205 value_start + le16_to_cpu(entry->e_value_offs) +
206 le32_to_cpu(entry->e_value_size) > end))
207 return -EFSCORRUPTED;
208 entry = EXT4_XATTR_NEXT(entry);
209 }
210
211 return 0;
212 }
213
214 static inline int
215 ext4_xattr_check_block(struct inode *inode, struct buffer_head *bh)
216 {
217 int error;
218
219 if (buffer_verified(bh))
220 return 0;
221
222 if (BHDR(bh)->h_magic != cpu_to_le32(EXT4_XATTR_MAGIC) ||
223 BHDR(bh)->h_blocks != cpu_to_le32(1))
224 return -EFSCORRUPTED;
225 if (!ext4_xattr_block_csum_verify(inode, bh->b_blocknr, BHDR(bh)))
226 return -EFSBADCRC;
227 error = ext4_xattr_check_names(BFIRST(bh), bh->b_data + bh->b_size,
228 bh->b_data);
229 if (!error)
230 set_buffer_verified(bh);
231 return error;
232 }
233
234 static int
235 __xattr_check_inode(struct inode *inode, struct ext4_xattr_ibody_header *header,
236 void *end, const char *function, unsigned int line)
237 {
238 struct ext4_xattr_entry *entry = IFIRST(header);
239 int error = -EFSCORRUPTED;
240
241 if (((void *) header >= end) ||
242 (header->h_magic != le32_to_cpu(EXT4_XATTR_MAGIC)))
243 goto errout;
244 error = ext4_xattr_check_names(entry, end, entry);
245 errout:
246 if (error)
247 __ext4_error_inode(inode, function, line, 0,
248 "corrupted in-inode xattr");
249 return error;
250 }
251
252 #define xattr_check_inode(inode, header, end) \
253 __xattr_check_inode((inode), (header), (end), __func__, __LINE__)
254
255 static inline int
256 ext4_xattr_check_entry(struct ext4_xattr_entry *entry, size_t size)
257 {
258 size_t value_size = le32_to_cpu(entry->e_value_size);
259
260 if (entry->e_value_block != 0 || value_size > size ||
261 le16_to_cpu(entry->e_value_offs) + value_size > size)
262 return -EFSCORRUPTED;
263 return 0;
264 }
265
266 static int
267 ext4_xattr_find_entry(struct ext4_xattr_entry **pentry, int name_index,
268 const char *name, size_t size, int sorted)
269 {
270 struct ext4_xattr_entry *entry;
271 size_t name_len;
272 int cmp = 1;
273
274 if (name == NULL)
275 return -EINVAL;
276 name_len = strlen(name);
277 entry = *pentry;
278 for (; !IS_LAST_ENTRY(entry); entry = EXT4_XATTR_NEXT(entry)) {
279 cmp = name_index - entry->e_name_index;
280 if (!cmp)
281 cmp = name_len - entry->e_name_len;
282 if (!cmp)
283 cmp = memcmp(name, entry->e_name, name_len);
284 if (cmp <= 0 && (sorted || cmp == 0))
285 break;
286 }
287 *pentry = entry;
288 if (!cmp && ext4_xattr_check_entry(entry, size))
289 return -EFSCORRUPTED;
290 return cmp ? -ENODATA : 0;
291 }
292
293 static int
294 ext4_xattr_block_get(struct inode *inode, int name_index, const char *name,
295 void *buffer, size_t buffer_size)
296 {
297 struct buffer_head *bh = NULL;
298 struct ext4_xattr_entry *entry;
299 size_t size;
300 int error;
301 struct mb_cache *ext4_mb_cache = EXT4_GET_MB_CACHE(inode);
302
303 ea_idebug(inode, "name=%d.%s, buffer=%p, buffer_size=%ld",
304 name_index, name, buffer, (long)buffer_size);
305
306 error = -ENODATA;
307 if (!EXT4_I(inode)->i_file_acl)
308 goto cleanup;
309 ea_idebug(inode, "reading block %llu",
310 (unsigned long long)EXT4_I(inode)->i_file_acl);
311 bh = sb_bread(inode->i_sb, EXT4_I(inode)->i_file_acl);
312 if (!bh)
313 goto cleanup;
314 ea_bdebug(bh, "b_count=%d, refcount=%d",
315 atomic_read(&(bh->b_count)), le32_to_cpu(BHDR(bh)->h_refcount));
316 if (ext4_xattr_check_block(inode, bh)) {
317 bad_block:
318 EXT4_ERROR_INODE(inode, "bad block %llu",
319 EXT4_I(inode)->i_file_acl);
320 error = -EFSCORRUPTED;
321 goto cleanup;
322 }
323 ext4_xattr_cache_insert(ext4_mb_cache, bh);
324 entry = BFIRST(bh);
325 error = ext4_xattr_find_entry(&entry, name_index, name, bh->b_size, 1);
326 if (error == -EFSCORRUPTED)
327 goto bad_block;
328 if (error)
329 goto cleanup;
330 size = le32_to_cpu(entry->e_value_size);
331 if (buffer) {
332 error = -ERANGE;
333 if (size > buffer_size)
334 goto cleanup;
335 memcpy(buffer, bh->b_data + le16_to_cpu(entry->e_value_offs),
336 size);
337 }
338 error = size;
339
340 cleanup:
341 brelse(bh);
342 return error;
343 }
344
345 int
346 ext4_xattr_ibody_get(struct inode *inode, int name_index, const char *name,
347 void *buffer, size_t buffer_size)
348 {
349 struct ext4_xattr_ibody_header *header;
350 struct ext4_xattr_entry *entry;
351 struct ext4_inode *raw_inode;
352 struct ext4_iloc iloc;
353 size_t size;
354 void *end;
355 int error;
356
357 if (!ext4_test_inode_state(inode, EXT4_STATE_XATTR))
358 return -ENODATA;
359 error = ext4_get_inode_loc(inode, &iloc);
360 if (error)
361 return error;
362 raw_inode = ext4_raw_inode(&iloc);
363 header = IHDR(inode, raw_inode);
364 entry = IFIRST(header);
365 end = (void *)raw_inode + EXT4_SB(inode->i_sb)->s_inode_size;
366 error = xattr_check_inode(inode, header, end);
367 if (error)
368 goto cleanup;
369 error = ext4_xattr_find_entry(&entry, name_index, name,
370 end - (void *)entry, 0);
371 if (error)
372 goto cleanup;
373 size = le32_to_cpu(entry->e_value_size);
374 if (buffer) {
375 error = -ERANGE;
376 if (size > buffer_size)
377 goto cleanup;
378 memcpy(buffer, (void *)IFIRST(header) +
379 le16_to_cpu(entry->e_value_offs), size);
380 }
381 error = size;
382
383 cleanup:
384 brelse(iloc.bh);
385 return error;
386 }
387
388 /*
389 * ext4_xattr_get()
390 *
391 * Copy an extended attribute into the buffer
392 * provided, or compute the buffer size required.
393 * Buffer is NULL to compute the size of the buffer required.
394 *
395 * Returns a negative error number on failure, or the number of bytes
396 * used / required on success.
397 */
398 int
399 ext4_xattr_get(struct inode *inode, int name_index, const char *name,
400 void *buffer, size_t buffer_size)
401 {
402 int error;
403
404 if (strlen(name) > 255)
405 return -ERANGE;
406
407 down_read(&EXT4_I(inode)->xattr_sem);
408 error = ext4_xattr_ibody_get(inode, name_index, name, buffer,
409 buffer_size);
410 if (error == -ENODATA)
411 error = ext4_xattr_block_get(inode, name_index, name, buffer,
412 buffer_size);
413 up_read(&EXT4_I(inode)->xattr_sem);
414 return error;
415 }
416
417 static int
418 ext4_xattr_list_entries(struct dentry *dentry, struct ext4_xattr_entry *entry,
419 char *buffer, size_t buffer_size)
420 {
421 size_t rest = buffer_size;
422
423 for (; !IS_LAST_ENTRY(entry); entry = EXT4_XATTR_NEXT(entry)) {
424 const struct xattr_handler *handler =
425 ext4_xattr_handler(entry->e_name_index);
426
427 if (handler && (!handler->list || handler->list(dentry))) {
428 const char *prefix = handler->prefix ?: handler->name;
429 size_t prefix_len = strlen(prefix);
430 size_t size = prefix_len + entry->e_name_len + 1;
431
432 if (buffer) {
433 if (size > rest)
434 return -ERANGE;
435 memcpy(buffer, prefix, prefix_len);
436 buffer += prefix_len;
437 memcpy(buffer, entry->e_name, entry->e_name_len);
438 buffer += entry->e_name_len;
439 *buffer++ = 0;
440 }
441 rest -= size;
442 }
443 }
444 return buffer_size - rest; /* total size */
445 }
446
447 static int
448 ext4_xattr_block_list(struct dentry *dentry, char *buffer, size_t buffer_size)
449 {
450 struct inode *inode = d_inode(dentry);
451 struct buffer_head *bh = NULL;
452 int error;
453 struct mb_cache *ext4_mb_cache = EXT4_GET_MB_CACHE(inode);
454
455 ea_idebug(inode, "buffer=%p, buffer_size=%ld",
456 buffer, (long)buffer_size);
457
458 error = 0;
459 if (!EXT4_I(inode)->i_file_acl)
460 goto cleanup;
461 ea_idebug(inode, "reading block %llu",
462 (unsigned long long)EXT4_I(inode)->i_file_acl);
463 bh = sb_bread(inode->i_sb, EXT4_I(inode)->i_file_acl);
464 error = -EIO;
465 if (!bh)
466 goto cleanup;
467 ea_bdebug(bh, "b_count=%d, refcount=%d",
468 atomic_read(&(bh->b_count)), le32_to_cpu(BHDR(bh)->h_refcount));
469 if (ext4_xattr_check_block(inode, bh)) {
470 EXT4_ERROR_INODE(inode, "bad block %llu",
471 EXT4_I(inode)->i_file_acl);
472 error = -EFSCORRUPTED;
473 goto cleanup;
474 }
475 ext4_xattr_cache_insert(ext4_mb_cache, bh);
476 error = ext4_xattr_list_entries(dentry, BFIRST(bh), buffer, buffer_size);
477
478 cleanup:
479 brelse(bh);
480
481 return error;
482 }
483
484 static int
485 ext4_xattr_ibody_list(struct dentry *dentry, char *buffer, size_t buffer_size)
486 {
487 struct inode *inode = d_inode(dentry);
488 struct ext4_xattr_ibody_header *header;
489 struct ext4_inode *raw_inode;
490 struct ext4_iloc iloc;
491 void *end;
492 int error;
493
494 if (!ext4_test_inode_state(inode, EXT4_STATE_XATTR))
495 return 0;
496 error = ext4_get_inode_loc(inode, &iloc);
497 if (error)
498 return error;
499 raw_inode = ext4_raw_inode(&iloc);
500 header = IHDR(inode, raw_inode);
501 end = (void *)raw_inode + EXT4_SB(inode->i_sb)->s_inode_size;
502 error = xattr_check_inode(inode, header, end);
503 if (error)
504 goto cleanup;
505 error = ext4_xattr_list_entries(dentry, IFIRST(header),
506 buffer, buffer_size);
507
508 cleanup:
509 brelse(iloc.bh);
510 return error;
511 }
512
513 /*
514 * ext4_xattr_list()
515 *
516 * Copy a list of attribute names into the buffer
517 * provided, or compute the buffer size required.
518 * Buffer is NULL to compute the size of the buffer required.
519 *
520 * Returns a negative error number on failure, or the number of bytes
521 * used / required on success.
522 */
523 static int
524 ext4_xattr_list(struct dentry *dentry, char *buffer, size_t buffer_size)
525 {
526 int ret, ret2;
527
528 down_read(&EXT4_I(d_inode(dentry))->xattr_sem);
529 ret = ret2 = ext4_xattr_ibody_list(dentry, buffer, buffer_size);
530 if (ret < 0)
531 goto errout;
532 if (buffer) {
533 buffer += ret;
534 buffer_size -= ret;
535 }
536 ret = ext4_xattr_block_list(dentry, buffer, buffer_size);
537 if (ret < 0)
538 goto errout;
539 ret += ret2;
540 errout:
541 up_read(&EXT4_I(d_inode(dentry))->xattr_sem);
542 return ret;
543 }
544
545 /*
546 * If the EXT4_FEATURE_COMPAT_EXT_ATTR feature of this file system is
547 * not set, set it.
548 */
549 static void ext4_xattr_update_super_block(handle_t *handle,
550 struct super_block *sb)
551 {
552 if (ext4_has_feature_xattr(sb))
553 return;
554
555 BUFFER_TRACE(EXT4_SB(sb)->s_sbh, "get_write_access");
556 if (ext4_journal_get_write_access(handle, EXT4_SB(sb)->s_sbh) == 0) {
557 ext4_set_feature_xattr(sb);
558 ext4_handle_dirty_super(handle, sb);
559 }
560 }
561
562 /*
563 * Release the xattr block BH: If the reference count is > 1, decrement it;
564 * otherwise free the block.
565 */
566 static void
567 ext4_xattr_release_block(handle_t *handle, struct inode *inode,
568 struct buffer_head *bh)
569 {
570 struct mb_cache *ext4_mb_cache = EXT4_GET_MB_CACHE(inode);
571 u32 hash, ref;
572 int error = 0;
573
574 BUFFER_TRACE(bh, "get_write_access");
575 error = ext4_journal_get_write_access(handle, bh);
576 if (error)
577 goto out;
578
579 lock_buffer(bh);
580 hash = le32_to_cpu(BHDR(bh)->h_hash);
581 ref = le32_to_cpu(BHDR(bh)->h_refcount);
582 if (ref == 1) {
583 ea_bdebug(bh, "refcount now=0; freeing");
584 /*
585 * This must happen under buffer lock for
586 * ext4_xattr_block_set() to reliably detect freed block
587 */
588 mb_cache_entry_delete_block(ext4_mb_cache, hash, bh->b_blocknr);
589 get_bh(bh);
590 unlock_buffer(bh);
591 ext4_free_blocks(handle, inode, bh, 0, 1,
592 EXT4_FREE_BLOCKS_METADATA |
593 EXT4_FREE_BLOCKS_FORGET);
594 } else {
595 ref--;
596 BHDR(bh)->h_refcount = cpu_to_le32(ref);
597 if (ref == EXT4_XATTR_REFCOUNT_MAX - 1) {
598 struct mb_cache_entry *ce;
599
600 ce = mb_cache_entry_get(ext4_mb_cache, hash,
601 bh->b_blocknr);
602 if (ce) {
603 ce->e_reusable = 1;
604 mb_cache_entry_put(ext4_mb_cache, ce);
605 }
606 }
607
608 /*
609 * Beware of this ugliness: Releasing of xattr block references
610 * from different inodes can race and so we have to protect
611 * from a race where someone else frees the block (and releases
612 * its journal_head) before we are done dirtying the buffer. In
613 * nojournal mode this race is harmless and we actually cannot
614 * call ext4_handle_dirty_xattr_block() with locked buffer as
615 * that function can call sync_dirty_buffer() so for that case
616 * we handle the dirtying after unlocking the buffer.
617 */
618 if (ext4_handle_valid(handle))
619 error = ext4_handle_dirty_xattr_block(handle, inode,
620 bh);
621 unlock_buffer(bh);
622 if (!ext4_handle_valid(handle))
623 error = ext4_handle_dirty_xattr_block(handle, inode,
624 bh);
625 if (IS_SYNC(inode))
626 ext4_handle_sync(handle);
627 dquot_free_block(inode, EXT4_C2B(EXT4_SB(inode->i_sb), 1));
628 ea_bdebug(bh, "refcount now=%d; releasing",
629 le32_to_cpu(BHDR(bh)->h_refcount));
630 }
631 out:
632 ext4_std_error(inode->i_sb, error);
633 return;
634 }
635
636 /*
637 * Find the available free space for EAs. This also returns the total number of
638 * bytes used by EA entries.
639 */
640 static size_t ext4_xattr_free_space(struct ext4_xattr_entry *last,
641 size_t *min_offs, void *base, int *total)
642 {
643 for (; !IS_LAST_ENTRY(last); last = EXT4_XATTR_NEXT(last)) {
644 if (!last->e_value_block && last->e_value_size) {
645 size_t offs = le16_to_cpu(last->e_value_offs);
646 if (offs < *min_offs)
647 *min_offs = offs;
648 }
649 if (total)
650 *total += EXT4_XATTR_LEN(last->e_name_len);
651 }
652 return (*min_offs - ((void *)last - base) - sizeof(__u32));
653 }
654
655 static int
656 ext4_xattr_set_entry(struct ext4_xattr_info *i, struct ext4_xattr_search *s)
657 {
658 struct ext4_xattr_entry *last;
659 size_t free, min_offs = s->end - s->base, name_len = strlen(i->name);
660
661 /* Compute min_offs and last. */
662 last = s->first;
663 for (; !IS_LAST_ENTRY(last); last = EXT4_XATTR_NEXT(last)) {
664 if (!last->e_value_block && last->e_value_size) {
665 size_t offs = le16_to_cpu(last->e_value_offs);
666 if (offs < min_offs)
667 min_offs = offs;
668 }
669 }
670 free = min_offs - ((void *)last - s->base) - sizeof(__u32);
671 if (!s->not_found) {
672 if (!s->here->e_value_block && s->here->e_value_size) {
673 size_t size = le32_to_cpu(s->here->e_value_size);
674 free += EXT4_XATTR_SIZE(size);
675 }
676 free += EXT4_XATTR_LEN(name_len);
677 }
678 if (i->value) {
679 if (free < EXT4_XATTR_LEN(name_len) +
680 EXT4_XATTR_SIZE(i->value_len))
681 return -ENOSPC;
682 }
683
684 if (i->value && s->not_found) {
685 /* Insert the new name. */
686 size_t size = EXT4_XATTR_LEN(name_len);
687 size_t rest = (void *)last - (void *)s->here + sizeof(__u32);
688 memmove((void *)s->here + size, s->here, rest);
689 memset(s->here, 0, size);
690 s->here->e_name_index = i->name_index;
691 s->here->e_name_len = name_len;
692 memcpy(s->here->e_name, i->name, name_len);
693 } else {
694 if (!s->here->e_value_block && s->here->e_value_size) {
695 void *first_val = s->base + min_offs;
696 size_t offs = le16_to_cpu(s->here->e_value_offs);
697 void *val = s->base + offs;
698 size_t size = EXT4_XATTR_SIZE(
699 le32_to_cpu(s->here->e_value_size));
700
701 if (i->value && size == EXT4_XATTR_SIZE(i->value_len)) {
702 /* The old and the new value have the same
703 size. Just replace. */
704 s->here->e_value_size =
705 cpu_to_le32(i->value_len);
706 if (i->value == EXT4_ZERO_XATTR_VALUE) {
707 memset(val, 0, size);
708 } else {
709 /* Clear pad bytes first. */
710 memset(val + size - EXT4_XATTR_PAD, 0,
711 EXT4_XATTR_PAD);
712 memcpy(val, i->value, i->value_len);
713 }
714 return 0;
715 }
716
717 /* Remove the old value. */
718 memmove(first_val + size, first_val, val - first_val);
719 memset(first_val, 0, size);
720 s->here->e_value_size = 0;
721 s->here->e_value_offs = 0;
722 min_offs += size;
723
724 /* Adjust all value offsets. */
725 last = s->first;
726 while (!IS_LAST_ENTRY(last)) {
727 size_t o = le16_to_cpu(last->e_value_offs);
728 if (!last->e_value_block &&
729 last->e_value_size && o < offs)
730 last->e_value_offs =
731 cpu_to_le16(o + size);
732 last = EXT4_XATTR_NEXT(last);
733 }
734 }
735 if (!i->value) {
736 /* Remove the old name. */
737 size_t size = EXT4_XATTR_LEN(name_len);
738 last = ENTRY((void *)last - size);
739 memmove(s->here, (void *)s->here + size,
740 (void *)last - (void *)s->here + sizeof(__u32));
741 memset(last, 0, size);
742 }
743 }
744
745 if (i->value) {
746 /* Insert the new value. */
747 s->here->e_value_size = cpu_to_le32(i->value_len);
748 if (i->value_len) {
749 size_t size = EXT4_XATTR_SIZE(i->value_len);
750 void *val = s->base + min_offs - size;
751 s->here->e_value_offs = cpu_to_le16(min_offs - size);
752 if (i->value == EXT4_ZERO_XATTR_VALUE) {
753 memset(val, 0, size);
754 } else {
755 /* Clear the pad bytes first. */
756 memset(val + size - EXT4_XATTR_PAD, 0,
757 EXT4_XATTR_PAD);
758 memcpy(val, i->value, i->value_len);
759 }
760 }
761 }
762 return 0;
763 }
764
765 struct ext4_xattr_block_find {
766 struct ext4_xattr_search s;
767 struct buffer_head *bh;
768 };
769
770 static int
771 ext4_xattr_block_find(struct inode *inode, struct ext4_xattr_info *i,
772 struct ext4_xattr_block_find *bs)
773 {
774 struct super_block *sb = inode->i_sb;
775 int error;
776
777 ea_idebug(inode, "name=%d.%s, value=%p, value_len=%ld",
778 i->name_index, i->name, i->value, (long)i->value_len);
779
780 if (EXT4_I(inode)->i_file_acl) {
781 /* The inode already has an extended attribute block. */
782 bs->bh = sb_bread(sb, EXT4_I(inode)->i_file_acl);
783 error = -EIO;
784 if (!bs->bh)
785 goto cleanup;
786 ea_bdebug(bs->bh, "b_count=%d, refcount=%d",
787 atomic_read(&(bs->bh->b_count)),
788 le32_to_cpu(BHDR(bs->bh)->h_refcount));
789 if (ext4_xattr_check_block(inode, bs->bh)) {
790 EXT4_ERROR_INODE(inode, "bad block %llu",
791 EXT4_I(inode)->i_file_acl);
792 error = -EFSCORRUPTED;
793 goto cleanup;
794 }
795 /* Find the named attribute. */
796 bs->s.base = BHDR(bs->bh);
797 bs->s.first = BFIRST(bs->bh);
798 bs->s.end = bs->bh->b_data + bs->bh->b_size;
799 bs->s.here = bs->s.first;
800 error = ext4_xattr_find_entry(&bs->s.here, i->name_index,
801 i->name, bs->bh->b_size, 1);
802 if (error && error != -ENODATA)
803 goto cleanup;
804 bs->s.not_found = error;
805 }
806 error = 0;
807
808 cleanup:
809 return error;
810 }
811
812 static int
813 ext4_xattr_block_set(handle_t *handle, struct inode *inode,
814 struct ext4_xattr_info *i,
815 struct ext4_xattr_block_find *bs)
816 {
817 struct super_block *sb = inode->i_sb;
818 struct buffer_head *new_bh = NULL;
819 struct ext4_xattr_search *s = &bs->s;
820 struct mb_cache_entry *ce = NULL;
821 int error = 0;
822 struct mb_cache *ext4_mb_cache = EXT4_GET_MB_CACHE(inode);
823
824 #define header(x) ((struct ext4_xattr_header *)(x))
825
826 if (i->value && i->value_len > sb->s_blocksize)
827 return -ENOSPC;
828 if (s->base) {
829 BUFFER_TRACE(bs->bh, "get_write_access");
830 error = ext4_journal_get_write_access(handle, bs->bh);
831 if (error)
832 goto cleanup;
833 lock_buffer(bs->bh);
834
835 if (header(s->base)->h_refcount == cpu_to_le32(1)) {
836 __u32 hash = le32_to_cpu(BHDR(bs->bh)->h_hash);
837
838 /*
839 * This must happen under buffer lock for
840 * ext4_xattr_block_set() to reliably detect modified
841 * block
842 */
843 mb_cache_entry_delete_block(ext4_mb_cache, hash,
844 bs->bh->b_blocknr);
845 ea_bdebug(bs->bh, "modifying in-place");
846 error = ext4_xattr_set_entry(i, s);
847 if (!error) {
848 if (!IS_LAST_ENTRY(s->first))
849 ext4_xattr_rehash(header(s->base),
850 s->here);
851 ext4_xattr_cache_insert(ext4_mb_cache,
852 bs->bh);
853 }
854 unlock_buffer(bs->bh);
855 if (error == -EFSCORRUPTED)
856 goto bad_block;
857 if (!error)
858 error = ext4_handle_dirty_xattr_block(handle,
859 inode,
860 bs->bh);
861 if (error)
862 goto cleanup;
863 goto inserted;
864 } else {
865 int offset = (char *)s->here - bs->bh->b_data;
866
867 unlock_buffer(bs->bh);
868 ea_bdebug(bs->bh, "cloning");
869 s->base = kmalloc(bs->bh->b_size, GFP_NOFS);
870 error = -ENOMEM;
871 if (s->base == NULL)
872 goto cleanup;
873 memcpy(s->base, BHDR(bs->bh), bs->bh->b_size);
874 s->first = ENTRY(header(s->base)+1);
875 header(s->base)->h_refcount = cpu_to_le32(1);
876 s->here = ENTRY(s->base + offset);
877 s->end = s->base + bs->bh->b_size;
878 }
879 } else {
880 /* Allocate a buffer where we construct the new block. */
881 s->base = kzalloc(sb->s_blocksize, GFP_NOFS);
882 /* assert(header == s->base) */
883 error = -ENOMEM;
884 if (s->base == NULL)
885 goto cleanup;
886 header(s->base)->h_magic = cpu_to_le32(EXT4_XATTR_MAGIC);
887 header(s->base)->h_blocks = cpu_to_le32(1);
888 header(s->base)->h_refcount = cpu_to_le32(1);
889 s->first = ENTRY(header(s->base)+1);
890 s->here = ENTRY(header(s->base)+1);
891 s->end = s->base + sb->s_blocksize;
892 }
893
894 error = ext4_xattr_set_entry(i, s);
895 if (error == -EFSCORRUPTED)
896 goto bad_block;
897 if (error)
898 goto cleanup;
899 if (!IS_LAST_ENTRY(s->first))
900 ext4_xattr_rehash(header(s->base), s->here);
901
902 inserted:
903 if (!IS_LAST_ENTRY(s->first)) {
904 new_bh = ext4_xattr_cache_find(inode, header(s->base), &ce);
905 if (new_bh) {
906 /* We found an identical block in the cache. */
907 if (new_bh == bs->bh)
908 ea_bdebug(new_bh, "keeping");
909 else {
910 u32 ref;
911
912 /* The old block is released after updating
913 the inode. */
914 error = dquot_alloc_block(inode,
915 EXT4_C2B(EXT4_SB(sb), 1));
916 if (error)
917 goto cleanup;
918 BUFFER_TRACE(new_bh, "get_write_access");
919 error = ext4_journal_get_write_access(handle,
920 new_bh);
921 if (error)
922 goto cleanup_dquot;
923 lock_buffer(new_bh);
924 /*
925 * We have to be careful about races with
926 * freeing, rehashing or adding references to
927 * xattr block. Once we hold buffer lock xattr
928 * block's state is stable so we can check
929 * whether the block got freed / rehashed or
930 * not. Since we unhash mbcache entry under
931 * buffer lock when freeing / rehashing xattr
932 * block, checking whether entry is still
933 * hashed is reliable. Same rules hold for
934 * e_reusable handling.
935 */
936 if (hlist_bl_unhashed(&ce->e_hash_list) ||
937 !ce->e_reusable) {
938 /*
939 * Undo everything and check mbcache
940 * again.
941 */
942 unlock_buffer(new_bh);
943 dquot_free_block(inode,
944 EXT4_C2B(EXT4_SB(sb),
945 1));
946 brelse(new_bh);
947 mb_cache_entry_put(ext4_mb_cache, ce);
948 ce = NULL;
949 new_bh = NULL;
950 goto inserted;
951 }
952 ref = le32_to_cpu(BHDR(new_bh)->h_refcount) + 1;
953 BHDR(new_bh)->h_refcount = cpu_to_le32(ref);
954 if (ref >= EXT4_XATTR_REFCOUNT_MAX)
955 ce->e_reusable = 0;
956 ea_bdebug(new_bh, "reusing; refcount now=%d",
957 ref);
958 unlock_buffer(new_bh);
959 error = ext4_handle_dirty_xattr_block(handle,
960 inode,
961 new_bh);
962 if (error)
963 goto cleanup_dquot;
964 }
965 mb_cache_entry_touch(ext4_mb_cache, ce);
966 mb_cache_entry_put(ext4_mb_cache, ce);
967 ce = NULL;
968 } else if (bs->bh && s->base == bs->bh->b_data) {
969 /* We were modifying this block in-place. */
970 ea_bdebug(bs->bh, "keeping this block");
971 new_bh = bs->bh;
972 get_bh(new_bh);
973 } else {
974 /* We need to allocate a new block */
975 ext4_fsblk_t goal, block;
976
977 goal = ext4_group_first_block_no(sb,
978 EXT4_I(inode)->i_block_group);
979
980 /* non-extent files can't have physical blocks past 2^32 */
981 if (!(ext4_test_inode_flag(inode, EXT4_INODE_EXTENTS)))
982 goal = goal & EXT4_MAX_BLOCK_FILE_PHYS;
983
984 block = ext4_new_meta_blocks(handle, inode, goal, 0,
985 NULL, &error);
986 if (error)
987 goto cleanup;
988
989 if (!(ext4_test_inode_flag(inode, EXT4_INODE_EXTENTS)))
990 BUG_ON(block > EXT4_MAX_BLOCK_FILE_PHYS);
991
992 ea_idebug(inode, "creating block %llu",
993 (unsigned long long)block);
994
995 new_bh = sb_getblk(sb, block);
996 if (unlikely(!new_bh)) {
997 error = -ENOMEM;
998 getblk_failed:
999 ext4_free_blocks(handle, inode, NULL, block, 1,
1000 EXT4_FREE_BLOCKS_METADATA);
1001 goto cleanup;
1002 }
1003 lock_buffer(new_bh);
1004 error = ext4_journal_get_create_access(handle, new_bh);
1005 if (error) {
1006 unlock_buffer(new_bh);
1007 error = -EIO;
1008 goto getblk_failed;
1009 }
1010 memcpy(new_bh->b_data, s->base, new_bh->b_size);
1011 set_buffer_uptodate(new_bh);
1012 unlock_buffer(new_bh);
1013 ext4_xattr_cache_insert(ext4_mb_cache, new_bh);
1014 error = ext4_handle_dirty_xattr_block(handle,
1015 inode, new_bh);
1016 if (error)
1017 goto cleanup;
1018 }
1019 }
1020
1021 /* Update the inode. */
1022 EXT4_I(inode)->i_file_acl = new_bh ? new_bh->b_blocknr : 0;
1023
1024 /* Drop the previous xattr block. */
1025 if (bs->bh && bs->bh != new_bh)
1026 ext4_xattr_release_block(handle, inode, bs->bh);
1027 error = 0;
1028
1029 cleanup:
1030 if (ce)
1031 mb_cache_entry_put(ext4_mb_cache, ce);
1032 brelse(new_bh);
1033 if (!(bs->bh && s->base == bs->bh->b_data))
1034 kfree(s->base);
1035
1036 return error;
1037
1038 cleanup_dquot:
1039 dquot_free_block(inode, EXT4_C2B(EXT4_SB(sb), 1));
1040 goto cleanup;
1041
1042 bad_block:
1043 EXT4_ERROR_INODE(inode, "bad block %llu",
1044 EXT4_I(inode)->i_file_acl);
1045 goto cleanup;
1046
1047 #undef header
1048 }
1049
1050 int ext4_xattr_ibody_find(struct inode *inode, struct ext4_xattr_info *i,
1051 struct ext4_xattr_ibody_find *is)
1052 {
1053 struct ext4_xattr_ibody_header *header;
1054 struct ext4_inode *raw_inode;
1055 int error;
1056
1057 if (EXT4_I(inode)->i_extra_isize == 0)
1058 return 0;
1059 raw_inode = ext4_raw_inode(&is->iloc);
1060 header = IHDR(inode, raw_inode);
1061 is->s.base = is->s.first = IFIRST(header);
1062 is->s.here = is->s.first;
1063 is->s.end = (void *)raw_inode + EXT4_SB(inode->i_sb)->s_inode_size;
1064 if (ext4_test_inode_state(inode, EXT4_STATE_XATTR)) {
1065 error = xattr_check_inode(inode, header, is->s.end);
1066 if (error)
1067 return error;
1068 /* Find the named attribute. */
1069 error = ext4_xattr_find_entry(&is->s.here, i->name_index,
1070 i->name, is->s.end -
1071 (void *)is->s.base, 0);
1072 if (error && error != -ENODATA)
1073 return error;
1074 is->s.not_found = error;
1075 }
1076 return 0;
1077 }
1078
1079 int ext4_xattr_ibody_inline_set(handle_t *handle, struct inode *inode,
1080 struct ext4_xattr_info *i,
1081 struct ext4_xattr_ibody_find *is)
1082 {
1083 struct ext4_xattr_ibody_header *header;
1084 struct ext4_xattr_search *s = &is->s;
1085 int error;
1086
1087 if (EXT4_I(inode)->i_extra_isize == 0)
1088 return -ENOSPC;
1089 error = ext4_xattr_set_entry(i, s);
1090 if (error) {
1091 if (error == -ENOSPC &&
1092 ext4_has_inline_data(inode)) {
1093 error = ext4_try_to_evict_inline_data(handle, inode,
1094 EXT4_XATTR_LEN(strlen(i->name) +
1095 EXT4_XATTR_SIZE(i->value_len)));
1096 if (error)
1097 return error;
1098 error = ext4_xattr_ibody_find(inode, i, is);
1099 if (error)
1100 return error;
1101 error = ext4_xattr_set_entry(i, s);
1102 }
1103 if (error)
1104 return error;
1105 }
1106 header = IHDR(inode, ext4_raw_inode(&is->iloc));
1107 if (!IS_LAST_ENTRY(s->first)) {
1108 header->h_magic = cpu_to_le32(EXT4_XATTR_MAGIC);
1109 ext4_set_inode_state(inode, EXT4_STATE_XATTR);
1110 } else {
1111 header->h_magic = cpu_to_le32(0);
1112 ext4_clear_inode_state(inode, EXT4_STATE_XATTR);
1113 }
1114 return 0;
1115 }
1116
1117 static int ext4_xattr_ibody_set(handle_t *handle, struct inode *inode,
1118 struct ext4_xattr_info *i,
1119 struct ext4_xattr_ibody_find *is)
1120 {
1121 struct ext4_xattr_ibody_header *header;
1122 struct ext4_xattr_search *s = &is->s;
1123 int error;
1124
1125 if (EXT4_I(inode)->i_extra_isize == 0)
1126 return -ENOSPC;
1127 error = ext4_xattr_set_entry(i, s);
1128 if (error)
1129 return error;
1130 header = IHDR(inode, ext4_raw_inode(&is->iloc));
1131 if (!IS_LAST_ENTRY(s->first)) {
1132 header->h_magic = cpu_to_le32(EXT4_XATTR_MAGIC);
1133 ext4_set_inode_state(inode, EXT4_STATE_XATTR);
1134 } else {
1135 header->h_magic = cpu_to_le32(0);
1136 ext4_clear_inode_state(inode, EXT4_STATE_XATTR);
1137 }
1138 return 0;
1139 }
1140
1141 static int ext4_xattr_value_same(struct ext4_xattr_search *s,
1142 struct ext4_xattr_info *i)
1143 {
1144 void *value;
1145
1146 if (le32_to_cpu(s->here->e_value_size) != i->value_len)
1147 return 0;
1148 value = ((void *)s->base) + le16_to_cpu(s->here->e_value_offs);
1149 return !memcmp(value, i->value, i->value_len);
1150 }
1151
1152 /*
1153 * ext4_xattr_set_handle()
1154 *
1155 * Create, replace or remove an extended attribute for this inode. Value
1156 * is NULL to remove an existing extended attribute, and non-NULL to
1157 * either replace an existing extended attribute, or create a new extended
1158 * attribute. The flags XATTR_REPLACE and XATTR_CREATE
1159 * specify that an extended attribute must exist and must not exist
1160 * previous to the call, respectively.
1161 *
1162 * Returns 0, or a negative error number on failure.
1163 */
1164 int
1165 ext4_xattr_set_handle(handle_t *handle, struct inode *inode, int name_index,
1166 const char *name, const void *value, size_t value_len,
1167 int flags)
1168 {
1169 struct ext4_xattr_info i = {
1170 .name_index = name_index,
1171 .name = name,
1172 .value = value,
1173 .value_len = value_len,
1174
1175 };
1176 struct ext4_xattr_ibody_find is = {
1177 .s = { .not_found = -ENODATA, },
1178 };
1179 struct ext4_xattr_block_find bs = {
1180 .s = { .not_found = -ENODATA, },
1181 };
1182 unsigned long no_expand;
1183 int error;
1184
1185 if (!name)
1186 return -EINVAL;
1187 if (strlen(name) > 255)
1188 return -ERANGE;
1189 down_write(&EXT4_I(inode)->xattr_sem);
1190 no_expand = ext4_test_inode_state(inode, EXT4_STATE_NO_EXPAND);
1191 ext4_set_inode_state(inode, EXT4_STATE_NO_EXPAND);
1192
1193 error = ext4_reserve_inode_write(handle, inode, &is.iloc);
1194 if (error)
1195 goto cleanup;
1196
1197 if (ext4_test_inode_state(inode, EXT4_STATE_NEW)) {
1198 struct ext4_inode *raw_inode = ext4_raw_inode(&is.iloc);
1199 memset(raw_inode, 0, EXT4_SB(inode->i_sb)->s_inode_size);
1200 ext4_clear_inode_state(inode, EXT4_STATE_NEW);
1201 }
1202
1203 error = ext4_xattr_ibody_find(inode, &i, &is);
1204 if (error)
1205 goto cleanup;
1206 if (is.s.not_found)
1207 error = ext4_xattr_block_find(inode, &i, &bs);
1208 if (error)
1209 goto cleanup;
1210 if (is.s.not_found && bs.s.not_found) {
1211 error = -ENODATA;
1212 if (flags & XATTR_REPLACE)
1213 goto cleanup;
1214 error = 0;
1215 if (!value)
1216 goto cleanup;
1217 } else {
1218 error = -EEXIST;
1219 if (flags & XATTR_CREATE)
1220 goto cleanup;
1221 }
1222 if (!value) {
1223 if (!is.s.not_found)
1224 error = ext4_xattr_ibody_set(handle, inode, &i, &is);
1225 else if (!bs.s.not_found)
1226 error = ext4_xattr_block_set(handle, inode, &i, &bs);
1227 } else {
1228 error = 0;
1229 /* Xattr value did not change? Save us some work and bail out */
1230 if (!is.s.not_found && ext4_xattr_value_same(&is.s, &i))
1231 goto cleanup;
1232 if (!bs.s.not_found && ext4_xattr_value_same(&bs.s, &i))
1233 goto cleanup;
1234
1235 error = ext4_xattr_ibody_set(handle, inode, &i, &is);
1236 if (!error && !bs.s.not_found) {
1237 i.value = NULL;
1238 error = ext4_xattr_block_set(handle, inode, &i, &bs);
1239 } else if (error == -ENOSPC) {
1240 if (EXT4_I(inode)->i_file_acl && !bs.s.base) {
1241 error = ext4_xattr_block_find(inode, &i, &bs);
1242 if (error)
1243 goto cleanup;
1244 }
1245 error = ext4_xattr_block_set(handle, inode, &i, &bs);
1246 if (error)
1247 goto cleanup;
1248 if (!is.s.not_found) {
1249 i.value = NULL;
1250 error = ext4_xattr_ibody_set(handle, inode, &i,
1251 &is);
1252 }
1253 }
1254 }
1255 if (!error) {
1256 ext4_xattr_update_super_block(handle, inode->i_sb);
1257 inode->i_ctime = ext4_current_time(inode);
1258 if (!value)
1259 ext4_clear_inode_state(inode, EXT4_STATE_NO_EXPAND);
1260 error = ext4_mark_iloc_dirty(handle, inode, &is.iloc);
1261 /*
1262 * The bh is consumed by ext4_mark_iloc_dirty, even with
1263 * error != 0.
1264 */
1265 is.iloc.bh = NULL;
1266 if (IS_SYNC(inode))
1267 ext4_handle_sync(handle);
1268 }
1269
1270 cleanup:
1271 brelse(is.iloc.bh);
1272 brelse(bs.bh);
1273 if (no_expand == 0)
1274 ext4_clear_inode_state(inode, EXT4_STATE_NO_EXPAND);
1275 up_write(&EXT4_I(inode)->xattr_sem);
1276 return error;
1277 }
1278
1279 /*
1280 * ext4_xattr_set()
1281 *
1282 * Like ext4_xattr_set_handle, but start from an inode. This extended
1283 * attribute modification is a filesystem transaction by itself.
1284 *
1285 * Returns 0, or a negative error number on failure.
1286 */
1287 int
1288 ext4_xattr_set(struct inode *inode, int name_index, const char *name,
1289 const void *value, size_t value_len, int flags)
1290 {
1291 handle_t *handle;
1292 int error, retries = 0;
1293 int credits = ext4_jbd2_credits_xattr(inode);
1294
1295 retry:
1296 handle = ext4_journal_start(inode, EXT4_HT_XATTR, credits);
1297 if (IS_ERR(handle)) {
1298 error = PTR_ERR(handle);
1299 } else {
1300 int error2;
1301
1302 error = ext4_xattr_set_handle(handle, inode, name_index, name,
1303 value, value_len, flags);
1304 error2 = ext4_journal_stop(handle);
1305 if (error == -ENOSPC &&
1306 ext4_should_retry_alloc(inode->i_sb, &retries))
1307 goto retry;
1308 if (error == 0)
1309 error = error2;
1310 }
1311
1312 return error;
1313 }
1314
1315 /*
1316 * Shift the EA entries in the inode to create space for the increased
1317 * i_extra_isize.
1318 */
1319 static void ext4_xattr_shift_entries(struct ext4_xattr_entry *entry,
1320 int value_offs_shift, void *to,
1321 void *from, size_t n, int blocksize)
1322 {
1323 struct ext4_xattr_entry *last = entry;
1324 int new_offs;
1325
1326 /* Adjust the value offsets of the entries */
1327 for (; !IS_LAST_ENTRY(last); last = EXT4_XATTR_NEXT(last)) {
1328 if (!last->e_value_block && last->e_value_size) {
1329 new_offs = le16_to_cpu(last->e_value_offs) +
1330 value_offs_shift;
1331 BUG_ON(new_offs + le32_to_cpu(last->e_value_size)
1332 > blocksize);
1333 last->e_value_offs = cpu_to_le16(new_offs);
1334 }
1335 }
1336 /* Shift the entries by n bytes */
1337 memmove(to, from, n);
1338 }
1339
1340 /*
1341 * Expand an inode by new_extra_isize bytes when EAs are present.
1342 * Returns 0 on success or negative error number on failure.
1343 */
1344 int ext4_expand_extra_isize_ea(struct inode *inode, int new_extra_isize,
1345 struct ext4_inode *raw_inode, handle_t *handle)
1346 {
1347 struct ext4_xattr_ibody_header *header;
1348 struct ext4_xattr_entry *entry, *last, *first;
1349 struct buffer_head *bh = NULL;
1350 struct ext4_xattr_ibody_find *is = NULL;
1351 struct ext4_xattr_block_find *bs = NULL;
1352 char *buffer = NULL, *b_entry_name = NULL;
1353 size_t min_offs, free;
1354 int total_ino;
1355 void *base, *start, *end;
1356 int error = 0, tried_min_extra_isize = 0;
1357 int s_min_extra_isize = le16_to_cpu(EXT4_SB(inode->i_sb)->s_es->s_min_extra_isize);
1358 int isize_diff; /* How much do we need to grow i_extra_isize */
1359
1360 down_write(&EXT4_I(inode)->xattr_sem);
1361 /*
1362 * Set EXT4_STATE_NO_EXPAND to avoid recursion when marking inode dirty
1363 */
1364 ext4_set_inode_state(inode, EXT4_STATE_NO_EXPAND);
1365 retry:
1366 isize_diff = new_extra_isize - EXT4_I(inode)->i_extra_isize;
1367 if (EXT4_I(inode)->i_extra_isize >= new_extra_isize)
1368 goto out;
1369
1370 header = IHDR(inode, raw_inode);
1371 entry = IFIRST(header);
1372
1373 /*
1374 * Check if enough free space is available in the inode to shift the
1375 * entries ahead by new_extra_isize.
1376 */
1377
1378 base = start = entry;
1379 end = (void *)raw_inode + EXT4_SB(inode->i_sb)->s_inode_size;
1380 min_offs = end - base;
1381 last = entry;
1382 total_ino = sizeof(struct ext4_xattr_ibody_header);
1383
1384 error = xattr_check_inode(inode, header, end);
1385 if (error)
1386 goto cleanup;
1387
1388 free = ext4_xattr_free_space(last, &min_offs, base, &total_ino);
1389 if (free >= isize_diff) {
1390 entry = IFIRST(header);
1391 ext4_xattr_shift_entries(entry, EXT4_I(inode)->i_extra_isize
1392 - new_extra_isize, (void *)raw_inode +
1393 EXT4_GOOD_OLD_INODE_SIZE + new_extra_isize,
1394 (void *)header, total_ino,
1395 inode->i_sb->s_blocksize);
1396 EXT4_I(inode)->i_extra_isize = new_extra_isize;
1397 goto out;
1398 }
1399
1400 /*
1401 * Enough free space isn't available in the inode, check if
1402 * EA block can hold new_extra_isize bytes.
1403 */
1404 if (EXT4_I(inode)->i_file_acl) {
1405 bh = sb_bread(inode->i_sb, EXT4_I(inode)->i_file_acl);
1406 error = -EIO;
1407 if (!bh)
1408 goto cleanup;
1409 if (ext4_xattr_check_block(inode, bh)) {
1410 EXT4_ERROR_INODE(inode, "bad block %llu",
1411 EXT4_I(inode)->i_file_acl);
1412 error = -EFSCORRUPTED;
1413 goto cleanup;
1414 }
1415 base = BHDR(bh);
1416 first = BFIRST(bh);
1417 end = bh->b_data + bh->b_size;
1418 min_offs = end - base;
1419 free = ext4_xattr_free_space(first, &min_offs, base, NULL);
1420 if (free < isize_diff) {
1421 if (!tried_min_extra_isize && s_min_extra_isize) {
1422 tried_min_extra_isize++;
1423 new_extra_isize = s_min_extra_isize;
1424 brelse(bh);
1425 goto retry;
1426 }
1427 error = -1;
1428 goto cleanup;
1429 }
1430 } else {
1431 free = inode->i_sb->s_blocksize;
1432 }
1433
1434 while (isize_diff > 0) {
1435 size_t offs, size, entry_size;
1436 struct ext4_xattr_entry *small_entry = NULL;
1437 struct ext4_xattr_info i = {
1438 .value = NULL,
1439 .value_len = 0,
1440 };
1441 unsigned int total_size; /* EA entry size + value size */
1442 unsigned int shift_bytes; /* No. of bytes to shift EAs by? */
1443 unsigned int min_total_size = ~0U;
1444
1445 is = kzalloc(sizeof(struct ext4_xattr_ibody_find), GFP_NOFS);
1446 bs = kzalloc(sizeof(struct ext4_xattr_block_find), GFP_NOFS);
1447 if (!is || !bs) {
1448 error = -ENOMEM;
1449 goto cleanup;
1450 }
1451
1452 is->s.not_found = -ENODATA;
1453 bs->s.not_found = -ENODATA;
1454 is->iloc.bh = NULL;
1455 bs->bh = NULL;
1456
1457 last = IFIRST(header);
1458 /* Find the entry best suited to be pushed into EA block */
1459 entry = NULL;
1460 for (; !IS_LAST_ENTRY(last); last = EXT4_XATTR_NEXT(last)) {
1461 total_size =
1462 EXT4_XATTR_SIZE(le32_to_cpu(last->e_value_size)) +
1463 EXT4_XATTR_LEN(last->e_name_len);
1464 if (total_size <= free && total_size < min_total_size) {
1465 if (total_size < isize_diff) {
1466 small_entry = last;
1467 } else {
1468 entry = last;
1469 min_total_size = total_size;
1470 }
1471 }
1472 }
1473
1474 if (entry == NULL) {
1475 if (small_entry) {
1476 entry = small_entry;
1477 } else {
1478 if (!tried_min_extra_isize &&
1479 s_min_extra_isize) {
1480 tried_min_extra_isize++;
1481 new_extra_isize = s_min_extra_isize;
1482 kfree(is); is = NULL;
1483 kfree(bs); bs = NULL;
1484 brelse(bh);
1485 goto retry;
1486 }
1487 error = -1;
1488 goto cleanup;
1489 }
1490 }
1491 offs = le16_to_cpu(entry->e_value_offs);
1492 size = le32_to_cpu(entry->e_value_size);
1493 entry_size = EXT4_XATTR_LEN(entry->e_name_len);
1494 i.name_index = entry->e_name_index,
1495 buffer = kmalloc(EXT4_XATTR_SIZE(size), GFP_NOFS);
1496 b_entry_name = kmalloc(entry->e_name_len + 1, GFP_NOFS);
1497 if (!buffer || !b_entry_name) {
1498 error = -ENOMEM;
1499 goto cleanup;
1500 }
1501 /* Save the entry name and the entry value */
1502 memcpy(buffer, (void *)IFIRST(header) + offs,
1503 EXT4_XATTR_SIZE(size));
1504 memcpy(b_entry_name, entry->e_name, entry->e_name_len);
1505 b_entry_name[entry->e_name_len] = '\0';
1506 i.name = b_entry_name;
1507
1508 error = ext4_get_inode_loc(inode, &is->iloc);
1509 if (error)
1510 goto cleanup;
1511
1512 error = ext4_xattr_ibody_find(inode, &i, is);
1513 if (error)
1514 goto cleanup;
1515
1516 /* Remove the chosen entry from the inode */
1517 error = ext4_xattr_ibody_set(handle, inode, &i, is);
1518 if (error)
1519 goto cleanup;
1520 total_ino -= entry_size;
1521
1522 entry = IFIRST(header);
1523 if (entry_size + EXT4_XATTR_SIZE(size) >= isize_diff)
1524 shift_bytes = isize_diff;
1525 else
1526 shift_bytes = entry_size + EXT4_XATTR_SIZE(size);
1527 /* Adjust the offsets and shift the remaining entries ahead */
1528 ext4_xattr_shift_entries(entry, -shift_bytes,
1529 (void *)raw_inode + EXT4_GOOD_OLD_INODE_SIZE +
1530 EXT4_I(inode)->i_extra_isize + shift_bytes,
1531 (void *)header, total_ino, inode->i_sb->s_blocksize);
1532
1533 isize_diff -= shift_bytes;
1534 EXT4_I(inode)->i_extra_isize += shift_bytes;
1535 header = IHDR(inode, raw_inode);
1536
1537 i.name = b_entry_name;
1538 i.value = buffer;
1539 i.value_len = size;
1540 error = ext4_xattr_block_find(inode, &i, bs);
1541 if (error)
1542 goto cleanup;
1543
1544 /* Add entry which was removed from the inode into the block */
1545 error = ext4_xattr_block_set(handle, inode, &i, bs);
1546 if (error)
1547 goto cleanup;
1548 kfree(b_entry_name);
1549 kfree(buffer);
1550 b_entry_name = NULL;
1551 buffer = NULL;
1552 brelse(is->iloc.bh);
1553 kfree(is);
1554 kfree(bs);
1555 }
1556 brelse(bh);
1557 out:
1558 ext4_clear_inode_state(inode, EXT4_STATE_NO_EXPAND);
1559 up_write(&EXT4_I(inode)->xattr_sem);
1560 return 0;
1561
1562 cleanup:
1563 kfree(b_entry_name);
1564 kfree(buffer);
1565 if (is)
1566 brelse(is->iloc.bh);
1567 kfree(is);
1568 kfree(bs);
1569 brelse(bh);
1570 /*
1571 * We deliberately leave EXT4_STATE_NO_EXPAND set here since inode
1572 * size expansion failed.
1573 */
1574 up_write(&EXT4_I(inode)->xattr_sem);
1575 return error;
1576 }
1577
1578
1579
1580 /*
1581 * ext4_xattr_delete_inode()
1582 *
1583 * Free extended attribute resources associated with this inode. This
1584 * is called immediately before an inode is freed. We have exclusive
1585 * access to the inode.
1586 */
1587 void
1588 ext4_xattr_delete_inode(handle_t *handle, struct inode *inode)
1589 {
1590 struct buffer_head *bh = NULL;
1591
1592 if (!EXT4_I(inode)->i_file_acl)
1593 goto cleanup;
1594 bh = sb_bread(inode->i_sb, EXT4_I(inode)->i_file_acl);
1595 if (!bh) {
1596 EXT4_ERROR_INODE(inode, "block %llu read error",
1597 EXT4_I(inode)->i_file_acl);
1598 goto cleanup;
1599 }
1600 if (BHDR(bh)->h_magic != cpu_to_le32(EXT4_XATTR_MAGIC) ||
1601 BHDR(bh)->h_blocks != cpu_to_le32(1)) {
1602 EXT4_ERROR_INODE(inode, "bad block %llu",
1603 EXT4_I(inode)->i_file_acl);
1604 goto cleanup;
1605 }
1606 ext4_xattr_release_block(handle, inode, bh);
1607 EXT4_I(inode)->i_file_acl = 0;
1608
1609 cleanup:
1610 brelse(bh);
1611 }
1612
1613 /*
1614 * ext4_xattr_cache_insert()
1615 *
1616 * Create a new entry in the extended attribute cache, and insert
1617 * it unless such an entry is already in the cache.
1618 *
1619 * Returns 0, or a negative error number on failure.
1620 */
1621 static void
1622 ext4_xattr_cache_insert(struct mb_cache *ext4_mb_cache, struct buffer_head *bh)
1623 {
1624 struct ext4_xattr_header *header = BHDR(bh);
1625 __u32 hash = le32_to_cpu(header->h_hash);
1626 int reusable = le32_to_cpu(header->h_refcount) <
1627 EXT4_XATTR_REFCOUNT_MAX;
1628 int error;
1629
1630 error = mb_cache_entry_create(ext4_mb_cache, GFP_NOFS, hash,
1631 bh->b_blocknr, reusable);
1632 if (error) {
1633 if (error == -EBUSY)
1634 ea_bdebug(bh, "already in cache");
1635 } else
1636 ea_bdebug(bh, "inserting [%x]", (int)hash);
1637 }
1638
1639 /*
1640 * ext4_xattr_cmp()
1641 *
1642 * Compare two extended attribute blocks for equality.
1643 *
1644 * Returns 0 if the blocks are equal, 1 if they differ, and
1645 * a negative error number on errors.
1646 */
1647 static int
1648 ext4_xattr_cmp(struct ext4_xattr_header *header1,
1649 struct ext4_xattr_header *header2)
1650 {
1651 struct ext4_xattr_entry *entry1, *entry2;
1652
1653 entry1 = ENTRY(header1+1);
1654 entry2 = ENTRY(header2+1);
1655 while (!IS_LAST_ENTRY(entry1)) {
1656 if (IS_LAST_ENTRY(entry2))
1657 return 1;
1658 if (entry1->e_hash != entry2->e_hash ||
1659 entry1->e_name_index != entry2->e_name_index ||
1660 entry1->e_name_len != entry2->e_name_len ||
1661 entry1->e_value_size != entry2->e_value_size ||
1662 memcmp(entry1->e_name, entry2->e_name, entry1->e_name_len))
1663 return 1;
1664 if (entry1->e_value_block != 0 || entry2->e_value_block != 0)
1665 return -EFSCORRUPTED;
1666 if (memcmp((char *)header1 + le16_to_cpu(entry1->e_value_offs),
1667 (char *)header2 + le16_to_cpu(entry2->e_value_offs),
1668 le32_to_cpu(entry1->e_value_size)))
1669 return 1;
1670
1671 entry1 = EXT4_XATTR_NEXT(entry1);
1672 entry2 = EXT4_XATTR_NEXT(entry2);
1673 }
1674 if (!IS_LAST_ENTRY(entry2))
1675 return 1;
1676 return 0;
1677 }
1678
1679 /*
1680 * ext4_xattr_cache_find()
1681 *
1682 * Find an identical extended attribute block.
1683 *
1684 * Returns a pointer to the block found, or NULL if such a block was
1685 * not found or an error occurred.
1686 */
1687 static struct buffer_head *
1688 ext4_xattr_cache_find(struct inode *inode, struct ext4_xattr_header *header,
1689 struct mb_cache_entry **pce)
1690 {
1691 __u32 hash = le32_to_cpu(header->h_hash);
1692 struct mb_cache_entry *ce;
1693 struct mb_cache *ext4_mb_cache = EXT4_GET_MB_CACHE(inode);
1694
1695 if (!header->h_hash)
1696 return NULL; /* never share */
1697 ea_idebug(inode, "looking for cached blocks [%x]", (int)hash);
1698 ce = mb_cache_entry_find_first(ext4_mb_cache, hash);
1699 while (ce) {
1700 struct buffer_head *bh;
1701
1702 bh = sb_bread(inode->i_sb, ce->e_block);
1703 if (!bh) {
1704 EXT4_ERROR_INODE(inode, "block %lu read error",
1705 (unsigned long) ce->e_block);
1706 } else if (ext4_xattr_cmp(header, BHDR(bh)) == 0) {
1707 *pce = ce;
1708 return bh;
1709 }
1710 brelse(bh);
1711 ce = mb_cache_entry_find_next(ext4_mb_cache, ce);
1712 }
1713 return NULL;
1714 }
1715
1716 #define NAME_HASH_SHIFT 5
1717 #define VALUE_HASH_SHIFT 16
1718
1719 /*
1720 * ext4_xattr_hash_entry()
1721 *
1722 * Compute the hash of an extended attribute.
1723 */
1724 static inline void ext4_xattr_hash_entry(struct ext4_xattr_header *header,
1725 struct ext4_xattr_entry *entry)
1726 {
1727 __u32 hash = 0;
1728 char *name = entry->e_name;
1729 int n;
1730
1731 for (n = 0; n < entry->e_name_len; n++) {
1732 hash = (hash << NAME_HASH_SHIFT) ^
1733 (hash >> (8*sizeof(hash) - NAME_HASH_SHIFT)) ^
1734 *name++;
1735 }
1736
1737 if (entry->e_value_block == 0 && entry->e_value_size != 0) {
1738 __le32 *value = (__le32 *)((char *)header +
1739 le16_to_cpu(entry->e_value_offs));
1740 for (n = (le32_to_cpu(entry->e_value_size) +
1741 EXT4_XATTR_ROUND) >> EXT4_XATTR_PAD_BITS; n; n--) {
1742 hash = (hash << VALUE_HASH_SHIFT) ^
1743 (hash >> (8*sizeof(hash) - VALUE_HASH_SHIFT)) ^
1744 le32_to_cpu(*value++);
1745 }
1746 }
1747 entry->e_hash = cpu_to_le32(hash);
1748 }
1749
1750 #undef NAME_HASH_SHIFT
1751 #undef VALUE_HASH_SHIFT
1752
1753 #define BLOCK_HASH_SHIFT 16
1754
1755 /*
1756 * ext4_xattr_rehash()
1757 *
1758 * Re-compute the extended attribute hash value after an entry has changed.
1759 */
1760 static void ext4_xattr_rehash(struct ext4_xattr_header *header,
1761 struct ext4_xattr_entry *entry)
1762 {
1763 struct ext4_xattr_entry *here;
1764 __u32 hash = 0;
1765
1766 ext4_xattr_hash_entry(header, entry);
1767 here = ENTRY(header+1);
1768 while (!IS_LAST_ENTRY(here)) {
1769 if (!here->e_hash) {
1770 /* Block is not shared if an entry's hash value == 0 */
1771 hash = 0;
1772 break;
1773 }
1774 hash = (hash << BLOCK_HASH_SHIFT) ^
1775 (hash >> (8*sizeof(hash) - BLOCK_HASH_SHIFT)) ^
1776 le32_to_cpu(here->e_hash);
1777 here = EXT4_XATTR_NEXT(here);
1778 }
1779 header->h_hash = cpu_to_le32(hash);
1780 }
1781
1782 #undef BLOCK_HASH_SHIFT
1783
1784 #define HASH_BUCKET_BITS 10
1785
1786 struct mb_cache *
1787 ext4_xattr_create_cache(void)
1788 {
1789 return mb_cache_create(HASH_BUCKET_BITS);
1790 }
1791
1792 void ext4_xattr_destroy_cache(struct mb_cache *cache)
1793 {
1794 if (cache)
1795 mb_cache_destroy(cache);
1796 }
1797
ubuntu-bionic-kernel mirror