]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blob - fs/nfsd/nfs4xdr.c
projects / mirror_ubuntu-bionic-kernel.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
Merge branch 'for-4.15-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj...
[mirror_ubuntu-bionic-kernel.git] / fs / nfsd / nfs4xdr.c
1 /*
2 * Server-side XDR for NFSv4
3 *
4 * Copyright (c) 2002 The Regents of the University of Michigan.
5 * All rights reserved.
6 *
7 * Kendrick Smith <kmsmith@umich.edu>
8 * Andy Adamson <andros@umich.edu>
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 *
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the University nor the names of its
20 * contributors may be used to endorse or promote products derived
21 * from this software without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 */
35
36 #include <linux/fs_struct.h>
37 #include <linux/file.h>
38 #include <linux/slab.h>
39 #include <linux/namei.h>
40 #include <linux/statfs.h>
41 #include <linux/utsname.h>
42 #include <linux/pagemap.h>
43 #include <linux/sunrpc/svcauth_gss.h>
44
45 #include "idmap.h"
46 #include "acl.h"
47 #include "xdr4.h"
48 #include "vfs.h"
49 #include "state.h"
50 #include "cache.h"
51 #include "netns.h"
52 #include "pnfs.h"
53
54 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
55 #include <linux/security.h>
56 #endif
57
58
59 #define NFSDDBG_FACILITY NFSDDBG_XDR
60
61 const u32 nfsd_suppattrs[3][3] = {
62 {NFSD4_SUPPORTED_ATTRS_WORD0,
63 NFSD4_SUPPORTED_ATTRS_WORD1,
64 NFSD4_SUPPORTED_ATTRS_WORD2},
65
66 {NFSD4_1_SUPPORTED_ATTRS_WORD0,
67 NFSD4_1_SUPPORTED_ATTRS_WORD1,
68 NFSD4_1_SUPPORTED_ATTRS_WORD2},
69
70 {NFSD4_1_SUPPORTED_ATTRS_WORD0,
71 NFSD4_1_SUPPORTED_ATTRS_WORD1,
72 NFSD4_2_SUPPORTED_ATTRS_WORD2},
73 };
74
75 /*
76 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
77 * directory in order to indicate to the client that a filesystem boundary is present
78 * We use a fixed fsid for a referral
79 */
80 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL
81 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL
82
83 static __be32
84 check_filename(char *str, int len)
85 {
86 int i;
87
88 if (len == 0)
89 return nfserr_inval;
90 if (isdotent(str, len))
91 return nfserr_badname;
92 for (i = 0; i < len; i++)
93 if (str[i] == '/')
94 return nfserr_badname;
95 return 0;
96 }
97
98 #define DECODE_HEAD \
99 __be32 *p; \
100 __be32 status
101 #define DECODE_TAIL \
102 status = 0; \
103 out: \
104 return status; \
105 xdr_error: \
106 dprintk("NFSD: xdr error (%s:%d)\n", \
107 __FILE__, __LINE__); \
108 status = nfserr_bad_xdr; \
109 goto out
110
111 #define READMEM(x,nbytes) do { \
112 x = (char *)p; \
113 p += XDR_QUADLEN(nbytes); \
114 } while (0)
115 #define SAVEMEM(x,nbytes) do { \
116 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \
117 savemem(argp, p, nbytes) : \
118 (char *)p)) { \
119 dprintk("NFSD: xdr error (%s:%d)\n", \
120 __FILE__, __LINE__); \
121 goto xdr_error; \
122 } \
123 p += XDR_QUADLEN(nbytes); \
124 } while (0)
125 #define COPYMEM(x,nbytes) do { \
126 memcpy((x), p, nbytes); \
127 p += XDR_QUADLEN(nbytes); \
128 } while (0)
129
130 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */
131 #define READ_BUF(nbytes) do { \
132 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \
133 p = argp->p; \
134 argp->p += XDR_QUADLEN(nbytes); \
135 } else if (!(p = read_buf(argp, nbytes))) { \
136 dprintk("NFSD: xdr error (%s:%d)\n", \
137 __FILE__, __LINE__); \
138 goto xdr_error; \
139 } \
140 } while (0)
141
142 static void next_decode_page(struct nfsd4_compoundargs *argp)
143 {
144 argp->p = page_address(argp->pagelist[0]);
145 argp->pagelist++;
146 if (argp->pagelen < PAGE_SIZE) {
147 argp->end = argp->p + XDR_QUADLEN(argp->pagelen);
148 argp->pagelen = 0;
149 } else {
150 argp->end = argp->p + (PAGE_SIZE>>2);
151 argp->pagelen -= PAGE_SIZE;
152 }
153 }
154
155 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes)
156 {
157 /* We want more bytes than seem to be available.
158 * Maybe we need a new page, maybe we have just run out
159 */
160 unsigned int avail = (char *)argp->end - (char *)argp->p;
161 __be32 *p;
162
163 if (argp->pagelen == 0) {
164 struct kvec *vec = &argp->rqstp->rq_arg.tail[0];
165
166 if (!argp->tail) {
167 argp->tail = true;
168 avail = vec->iov_len;
169 argp->p = vec->iov_base;
170 argp->end = vec->iov_base + avail;
171 }
172
173 if (avail < nbytes)
174 return NULL;
175
176 p = argp->p;
177 argp->p += XDR_QUADLEN(nbytes);
178 return p;
179 }
180
181 if (avail + argp->pagelen < nbytes)
182 return NULL;
183 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */
184 return NULL;
185 /* ok, we can do it with the current plus the next page */
186 if (nbytes <= sizeof(argp->tmp))
187 p = argp->tmp;
188 else {
189 kfree(argp->tmpp);
190 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL);
191 if (!p)
192 return NULL;
193
194 }
195 /*
196 * The following memcpy is safe because read_buf is always
197 * called with nbytes > avail, and the two cases above both
198 * guarantee p points to at least nbytes bytes.
199 */
200 memcpy(p, argp->p, avail);
201 next_decode_page(argp);
202 memcpy(((char*)p)+avail, argp->p, (nbytes - avail));
203 argp->p += XDR_QUADLEN(nbytes - avail);
204 return p;
205 }
206
207 static int zero_clientid(clientid_t *clid)
208 {
209 return (clid->cl_boot == 0) && (clid->cl_id == 0);
210 }
211
212 /**
213 * svcxdr_tmpalloc - allocate memory to be freed after compound processing
214 * @argp: NFSv4 compound argument structure
215 * @p: pointer to be freed (with kfree())
216 *
217 * Marks @p to be freed when processing the compound operation
218 * described in @argp finishes.
219 */
220 static void *
221 svcxdr_tmpalloc(struct nfsd4_compoundargs *argp, u32 len)
222 {
223 struct svcxdr_tmpbuf *tb;
224
225 tb = kmalloc(sizeof(*tb) + len, GFP_KERNEL);
226 if (!tb)
227 return NULL;
228 tb->next = argp->to_free;
229 argp->to_free = tb;
230 return tb->buf;
231 }
232
233 /*
234 * For xdr strings that need to be passed to other kernel api's
235 * as null-terminated strings.
236 *
237 * Note null-terminating in place usually isn't safe since the
238 * buffer might end on a page boundary.
239 */
240 static char *
241 svcxdr_dupstr(struct nfsd4_compoundargs *argp, void *buf, u32 len)
242 {
243 char *p = svcxdr_tmpalloc(argp, len + 1);
244
245 if (!p)
246 return NULL;
247 memcpy(p, buf, len);
248 p[len] = '\0';
249 return p;
250 }
251
252 /**
253 * savemem - duplicate a chunk of memory for later processing
254 * @argp: NFSv4 compound argument structure to be freed with
255 * @p: pointer to be duplicated
256 * @nbytes: length to be duplicated
257 *
258 * Returns a pointer to a copy of @nbytes bytes of memory at @p
259 * that are preserved until processing of the NFSv4 compound
260 * operation described by @argp finishes.
261 */
262 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes)
263 {
264 void *ret;
265
266 ret = svcxdr_tmpalloc(argp, nbytes);
267 if (!ret)
268 return NULL;
269 memcpy(ret, p, nbytes);
270 return ret;
271 }
272
273 /*
274 * We require the high 32 bits of 'seconds' to be 0, and
275 * we ignore all 32 bits of 'nseconds'.
276 */
277 static __be32
278 nfsd4_decode_time(struct nfsd4_compoundargs *argp, struct timespec *tv)
279 {
280 DECODE_HEAD;
281 u64 sec;
282
283 READ_BUF(12);
284 p = xdr_decode_hyper(p, &sec);
285 tv->tv_sec = sec;
286 tv->tv_nsec = be32_to_cpup(p++);
287 if (tv->tv_nsec >= (u32)1000000000)
288 return nfserr_inval;
289
290 DECODE_TAIL;
291 }
292
293 static __be32
294 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval)
295 {
296 u32 bmlen;
297 DECODE_HEAD;
298
299 bmval[0] = 0;
300 bmval[1] = 0;
301 bmval[2] = 0;
302
303 READ_BUF(4);
304 bmlen = be32_to_cpup(p++);
305 if (bmlen > 1000)
306 goto xdr_error;
307
308 READ_BUF(bmlen << 2);
309 if (bmlen > 0)
310 bmval[0] = be32_to_cpup(p++);
311 if (bmlen > 1)
312 bmval[1] = be32_to_cpup(p++);
313 if (bmlen > 2)
314 bmval[2] = be32_to_cpup(p++);
315
316 DECODE_TAIL;
317 }
318
319 static __be32
320 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
321 struct iattr *iattr, struct nfs4_acl **acl,
322 struct xdr_netobj *label, int *umask)
323 {
324 int expected_len, len = 0;
325 u32 dummy32;
326 char *buf;
327
328 DECODE_HEAD;
329 iattr->ia_valid = 0;
330 if ((status = nfsd4_decode_bitmap(argp, bmval)))
331 return status;
332
333 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
334 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
335 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) {
336 if (nfsd_attrs_supported(argp->minorversion, bmval))
337 return nfserr_inval;
338 return nfserr_attrnotsupp;
339 }
340
341 READ_BUF(4);
342 expected_len = be32_to_cpup(p++);
343
344 if (bmval[0] & FATTR4_WORD0_SIZE) {
345 READ_BUF(8);
346 len += 8;
347 p = xdr_decode_hyper(p, &iattr->ia_size);
348 iattr->ia_valid |= ATTR_SIZE;
349 }
350 if (bmval[0] & FATTR4_WORD0_ACL) {
351 u32 nace;
352 struct nfs4_ace *ace;
353
354 READ_BUF(4); len += 4;
355 nace = be32_to_cpup(p++);
356
357 if (nace > NFS4_ACL_MAX)
358 return nfserr_fbig;
359
360 *acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(nace));
361 if (*acl == NULL)
362 return nfserr_jukebox;
363
364 (*acl)->naces = nace;
365 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) {
366 READ_BUF(16); len += 16;
367 ace->type = be32_to_cpup(p++);
368 ace->flag = be32_to_cpup(p++);
369 ace->access_mask = be32_to_cpup(p++);
370 dummy32 = be32_to_cpup(p++);
371 READ_BUF(dummy32);
372 len += XDR_QUADLEN(dummy32) << 2;
373 READMEM(buf, dummy32);
374 ace->whotype = nfs4_acl_get_whotype(buf, dummy32);
375 status = nfs_ok;
376 if (ace->whotype != NFS4_ACL_WHO_NAMED)
377 ;
378 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
379 status = nfsd_map_name_to_gid(argp->rqstp,
380 buf, dummy32, &ace->who_gid);
381 else
382 status = nfsd_map_name_to_uid(argp->rqstp,
383 buf, dummy32, &ace->who_uid);
384 if (status)
385 return status;
386 }
387 } else
388 *acl = NULL;
389 if (bmval[1] & FATTR4_WORD1_MODE) {
390 READ_BUF(4);
391 len += 4;
392 iattr->ia_mode = be32_to_cpup(p++);
393 iattr->ia_mode &= (S_IFMT | S_IALLUGO);
394 iattr->ia_valid |= ATTR_MODE;
395 }
396 if (bmval[1] & FATTR4_WORD1_OWNER) {
397 READ_BUF(4);
398 len += 4;
399 dummy32 = be32_to_cpup(p++);
400 READ_BUF(dummy32);
401 len += (XDR_QUADLEN(dummy32) << 2);
402 READMEM(buf, dummy32);
403 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid)))
404 return status;
405 iattr->ia_valid |= ATTR_UID;
406 }
407 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
408 READ_BUF(4);
409 len += 4;
410 dummy32 = be32_to_cpup(p++);
411 READ_BUF(dummy32);
412 len += (XDR_QUADLEN(dummy32) << 2);
413 READMEM(buf, dummy32);
414 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid)))
415 return status;
416 iattr->ia_valid |= ATTR_GID;
417 }
418 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
419 READ_BUF(4);
420 len += 4;
421 dummy32 = be32_to_cpup(p++);
422 switch (dummy32) {
423 case NFS4_SET_TO_CLIENT_TIME:
424 len += 12;
425 status = nfsd4_decode_time(argp, &iattr->ia_atime);
426 if (status)
427 return status;
428 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
429 break;
430 case NFS4_SET_TO_SERVER_TIME:
431 iattr->ia_valid |= ATTR_ATIME;
432 break;
433 default:
434 goto xdr_error;
435 }
436 }
437 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
438 READ_BUF(4);
439 len += 4;
440 dummy32 = be32_to_cpup(p++);
441 switch (dummy32) {
442 case NFS4_SET_TO_CLIENT_TIME:
443 len += 12;
444 status = nfsd4_decode_time(argp, &iattr->ia_mtime);
445 if (status)
446 return status;
447 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
448 break;
449 case NFS4_SET_TO_SERVER_TIME:
450 iattr->ia_valid |= ATTR_MTIME;
451 break;
452 default:
453 goto xdr_error;
454 }
455 }
456
457 label->len = 0;
458 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
459 if (bmval[2] & FATTR4_WORD2_SECURITY_LABEL) {
460 READ_BUF(4);
461 len += 4;
462 dummy32 = be32_to_cpup(p++); /* lfs: we don't use it */
463 READ_BUF(4);
464 len += 4;
465 dummy32 = be32_to_cpup(p++); /* pi: we don't use it either */
466 READ_BUF(4);
467 len += 4;
468 dummy32 = be32_to_cpup(p++);
469 READ_BUF(dummy32);
470 if (dummy32 > NFS4_MAXLABELLEN)
471 return nfserr_badlabel;
472 len += (XDR_QUADLEN(dummy32) << 2);
473 READMEM(buf, dummy32);
474 label->len = dummy32;
475 label->data = svcxdr_dupstr(argp, buf, dummy32);
476 if (!label->data)
477 return nfserr_jukebox;
478 }
479 #endif
480 if (bmval[2] & FATTR4_WORD2_MODE_UMASK) {
481 if (!umask)
482 goto xdr_error;
483 READ_BUF(8);
484 len += 8;
485 dummy32 = be32_to_cpup(p++);
486 iattr->ia_mode = dummy32 & (S_IFMT | S_IALLUGO);
487 dummy32 = be32_to_cpup(p++);
488 *umask = dummy32 & S_IRWXUGO;
489 iattr->ia_valid |= ATTR_MODE;
490 }
491 if (len != expected_len)
492 goto xdr_error;
493
494 DECODE_TAIL;
495 }
496
497 static __be32
498 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid)
499 {
500 DECODE_HEAD;
501
502 READ_BUF(sizeof(stateid_t));
503 sid->si_generation = be32_to_cpup(p++);
504 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
505
506 DECODE_TAIL;
507 }
508
509 static __be32
510 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access)
511 {
512 DECODE_HEAD;
513
514 READ_BUF(4);
515 access->ac_req_access = be32_to_cpup(p++);
516
517 DECODE_TAIL;
518 }
519
520 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs)
521 {
522 DECODE_HEAD;
523 u32 dummy, uid, gid;
524 char *machine_name;
525 int i;
526 int nr_secflavs;
527
528 /* callback_sec_params4 */
529 READ_BUF(4);
530 nr_secflavs = be32_to_cpup(p++);
531 if (nr_secflavs)
532 cbs->flavor = (u32)(-1);
533 else
534 /* Is this legal? Be generous, take it to mean AUTH_NONE: */
535 cbs->flavor = 0;
536 for (i = 0; i < nr_secflavs; ++i) {
537 READ_BUF(4);
538 dummy = be32_to_cpup(p++);
539 switch (dummy) {
540 case RPC_AUTH_NULL:
541 /* Nothing to read */
542 if (cbs->flavor == (u32)(-1))
543 cbs->flavor = RPC_AUTH_NULL;
544 break;
545 case RPC_AUTH_UNIX:
546 READ_BUF(8);
547 /* stamp */
548 dummy = be32_to_cpup(p++);
549
550 /* machine name */
551 dummy = be32_to_cpup(p++);
552 READ_BUF(dummy);
553 SAVEMEM(machine_name, dummy);
554
555 /* uid, gid */
556 READ_BUF(8);
557 uid = be32_to_cpup(p++);
558 gid = be32_to_cpup(p++);
559
560 /* more gids */
561 READ_BUF(4);
562 dummy = be32_to_cpup(p++);
563 READ_BUF(dummy * 4);
564 if (cbs->flavor == (u32)(-1)) {
565 kuid_t kuid = make_kuid(&init_user_ns, uid);
566 kgid_t kgid = make_kgid(&init_user_ns, gid);
567 if (uid_valid(kuid) && gid_valid(kgid)) {
568 cbs->uid = kuid;
569 cbs->gid = kgid;
570 cbs->flavor = RPC_AUTH_UNIX;
571 } else {
572 dprintk("RPC_AUTH_UNIX with invalid"
573 "uid or gid ignoring!\n");
574 }
575 }
576 break;
577 case RPC_AUTH_GSS:
578 dprintk("RPC_AUTH_GSS callback secflavor "
579 "not supported!\n");
580 READ_BUF(8);
581 /* gcbp_service */
582 dummy = be32_to_cpup(p++);
583 /* gcbp_handle_from_server */
584 dummy = be32_to_cpup(p++);
585 READ_BUF(dummy);
586 p += XDR_QUADLEN(dummy);
587 /* gcbp_handle_from_client */
588 READ_BUF(4);
589 dummy = be32_to_cpup(p++);
590 READ_BUF(dummy);
591 break;
592 default:
593 dprintk("Illegal callback secflavor\n");
594 return nfserr_inval;
595 }
596 }
597 DECODE_TAIL;
598 }
599
600 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc)
601 {
602 DECODE_HEAD;
603
604 READ_BUF(4);
605 bc->bc_cb_program = be32_to_cpup(p++);
606 nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec);
607
608 DECODE_TAIL;
609 }
610
611 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts)
612 {
613 DECODE_HEAD;
614
615 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8);
616 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
617 bcts->dir = be32_to_cpup(p++);
618 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker
619 * could help us figure out we should be using it. */
620 DECODE_TAIL;
621 }
622
623 static __be32
624 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
625 {
626 DECODE_HEAD;
627
628 READ_BUF(4);
629 close->cl_seqid = be32_to_cpup(p++);
630 return nfsd4_decode_stateid(argp, &close->cl_stateid);
631
632 DECODE_TAIL;
633 }
634
635
636 static __be32
637 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit)
638 {
639 DECODE_HEAD;
640
641 READ_BUF(12);
642 p = xdr_decode_hyper(p, &commit->co_offset);
643 commit->co_count = be32_to_cpup(p++);
644
645 DECODE_TAIL;
646 }
647
648 static __be32
649 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create)
650 {
651 DECODE_HEAD;
652
653 READ_BUF(4);
654 create->cr_type = be32_to_cpup(p++);
655 switch (create->cr_type) {
656 case NF4LNK:
657 READ_BUF(4);
658 create->cr_datalen = be32_to_cpup(p++);
659 READ_BUF(create->cr_datalen);
660 create->cr_data = svcxdr_dupstr(argp, p, create->cr_datalen);
661 if (!create->cr_data)
662 return nfserr_jukebox;
663 break;
664 case NF4BLK:
665 case NF4CHR:
666 READ_BUF(8);
667 create->cr_specdata1 = be32_to_cpup(p++);
668 create->cr_specdata2 = be32_to_cpup(p++);
669 break;
670 case NF4SOCK:
671 case NF4FIFO:
672 case NF4DIR:
673 default:
674 break;
675 }
676
677 READ_BUF(4);
678 create->cr_namelen = be32_to_cpup(p++);
679 READ_BUF(create->cr_namelen);
680 SAVEMEM(create->cr_name, create->cr_namelen);
681 if ((status = check_filename(create->cr_name, create->cr_namelen)))
682 return status;
683
684 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr,
685 &create->cr_acl, &create->cr_label,
686 &current->fs->umask);
687 if (status)
688 goto out;
689
690 DECODE_TAIL;
691 }
692
693 static inline __be32
694 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr)
695 {
696 return nfsd4_decode_stateid(argp, &dr->dr_stateid);
697 }
698
699 static inline __be32
700 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr)
701 {
702 return nfsd4_decode_bitmap(argp, getattr->ga_bmval);
703 }
704
705 static __be32
706 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
707 {
708 DECODE_HEAD;
709
710 READ_BUF(4);
711 link->li_namelen = be32_to_cpup(p++);
712 READ_BUF(link->li_namelen);
713 SAVEMEM(link->li_name, link->li_namelen);
714 if ((status = check_filename(link->li_name, link->li_namelen)))
715 return status;
716
717 DECODE_TAIL;
718 }
719
720 static __be32
721 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
722 {
723 DECODE_HEAD;
724
725 /*
726 * type, reclaim(boolean), offset, length, new_lock_owner(boolean)
727 */
728 READ_BUF(28);
729 lock->lk_type = be32_to_cpup(p++);
730 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
731 goto xdr_error;
732 lock->lk_reclaim = be32_to_cpup(p++);
733 p = xdr_decode_hyper(p, &lock->lk_offset);
734 p = xdr_decode_hyper(p, &lock->lk_length);
735 lock->lk_is_new = be32_to_cpup(p++);
736
737 if (lock->lk_is_new) {
738 READ_BUF(4);
739 lock->lk_new_open_seqid = be32_to_cpup(p++);
740 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid);
741 if (status)
742 return status;
743 READ_BUF(8 + sizeof(clientid_t));
744 lock->lk_new_lock_seqid = be32_to_cpup(p++);
745 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t));
746 lock->lk_new_owner.len = be32_to_cpup(p++);
747 READ_BUF(lock->lk_new_owner.len);
748 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len);
749 } else {
750 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid);
751 if (status)
752 return status;
753 READ_BUF(4);
754 lock->lk_old_lock_seqid = be32_to_cpup(p++);
755 }
756
757 DECODE_TAIL;
758 }
759
760 static __be32
761 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
762 {
763 DECODE_HEAD;
764
765 READ_BUF(32);
766 lockt->lt_type = be32_to_cpup(p++);
767 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
768 goto xdr_error;
769 p = xdr_decode_hyper(p, &lockt->lt_offset);
770 p = xdr_decode_hyper(p, &lockt->lt_length);
771 COPYMEM(&lockt->lt_clientid, 8);
772 lockt->lt_owner.len = be32_to_cpup(p++);
773 READ_BUF(lockt->lt_owner.len);
774 READMEM(lockt->lt_owner.data, lockt->lt_owner.len);
775
776 DECODE_TAIL;
777 }
778
779 static __be32
780 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
781 {
782 DECODE_HEAD;
783
784 READ_BUF(8);
785 locku->lu_type = be32_to_cpup(p++);
786 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
787 goto xdr_error;
788 locku->lu_seqid = be32_to_cpup(p++);
789 status = nfsd4_decode_stateid(argp, &locku->lu_stateid);
790 if (status)
791 return status;
792 READ_BUF(16);
793 p = xdr_decode_hyper(p, &locku->lu_offset);
794 p = xdr_decode_hyper(p, &locku->lu_length);
795
796 DECODE_TAIL;
797 }
798
799 static __be32
800 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup)
801 {
802 DECODE_HEAD;
803
804 READ_BUF(4);
805 lookup->lo_len = be32_to_cpup(p++);
806 READ_BUF(lookup->lo_len);
807 SAVEMEM(lookup->lo_name, lookup->lo_len);
808 if ((status = check_filename(lookup->lo_name, lookup->lo_len)))
809 return status;
810
811 DECODE_TAIL;
812 }
813
814 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when)
815 {
816 __be32 *p;
817 u32 w;
818
819 READ_BUF(4);
820 w = be32_to_cpup(p++);
821 *share_access = w & NFS4_SHARE_ACCESS_MASK;
822 *deleg_want = w & NFS4_SHARE_WANT_MASK;
823 if (deleg_when)
824 *deleg_when = w & NFS4_SHARE_WHEN_MASK;
825
826 switch (w & NFS4_SHARE_ACCESS_MASK) {
827 case NFS4_SHARE_ACCESS_READ:
828 case NFS4_SHARE_ACCESS_WRITE:
829 case NFS4_SHARE_ACCESS_BOTH:
830 break;
831 default:
832 return nfserr_bad_xdr;
833 }
834 w &= ~NFS4_SHARE_ACCESS_MASK;
835 if (!w)
836 return nfs_ok;
837 if (!argp->minorversion)
838 return nfserr_bad_xdr;
839 switch (w & NFS4_SHARE_WANT_MASK) {
840 case NFS4_SHARE_WANT_NO_PREFERENCE:
841 case NFS4_SHARE_WANT_READ_DELEG:
842 case NFS4_SHARE_WANT_WRITE_DELEG:
843 case NFS4_SHARE_WANT_ANY_DELEG:
844 case NFS4_SHARE_WANT_NO_DELEG:
845 case NFS4_SHARE_WANT_CANCEL:
846 break;
847 default:
848 return nfserr_bad_xdr;
849 }
850 w &= ~NFS4_SHARE_WANT_MASK;
851 if (!w)
852 return nfs_ok;
853
854 if (!deleg_when) /* open_downgrade */
855 return nfserr_inval;
856 switch (w) {
857 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL:
858 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED:
859 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL |
860 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED):
861 return nfs_ok;
862 }
863 xdr_error:
864 return nfserr_bad_xdr;
865 }
866
867 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
868 {
869 __be32 *p;
870
871 READ_BUF(4);
872 *x = be32_to_cpup(p++);
873 /* Note: unlinke access bits, deny bits may be zero. */
874 if (*x & ~NFS4_SHARE_DENY_BOTH)
875 return nfserr_bad_xdr;
876 return nfs_ok;
877 xdr_error:
878 return nfserr_bad_xdr;
879 }
880
881 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o)
882 {
883 __be32 *p;
884
885 READ_BUF(4);
886 o->len = be32_to_cpup(p++);
887
888 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT)
889 return nfserr_bad_xdr;
890
891 READ_BUF(o->len);
892 SAVEMEM(o->data, o->len);
893 return nfs_ok;
894 xdr_error:
895 return nfserr_bad_xdr;
896 }
897
898 static __be32
899 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
900 {
901 DECODE_HEAD;
902 u32 dummy;
903
904 memset(open->op_bmval, 0, sizeof(open->op_bmval));
905 open->op_iattr.ia_valid = 0;
906 open->op_openowner = NULL;
907
908 open->op_xdr_error = 0;
909 /* seqid, share_access, share_deny, clientid, ownerlen */
910 READ_BUF(4);
911 open->op_seqid = be32_to_cpup(p++);
912 /* decode, yet ignore deleg_when until supported */
913 status = nfsd4_decode_share_access(argp, &open->op_share_access,
914 &open->op_deleg_want, &dummy);
915 if (status)
916 goto xdr_error;
917 status = nfsd4_decode_share_deny(argp, &open->op_share_deny);
918 if (status)
919 goto xdr_error;
920 READ_BUF(sizeof(clientid_t));
921 COPYMEM(&open->op_clientid, sizeof(clientid_t));
922 status = nfsd4_decode_opaque(argp, &open->op_owner);
923 if (status)
924 goto xdr_error;
925 READ_BUF(4);
926 open->op_create = be32_to_cpup(p++);
927 switch (open->op_create) {
928 case NFS4_OPEN_NOCREATE:
929 break;
930 case NFS4_OPEN_CREATE:
931 current->fs->umask = 0;
932 READ_BUF(4);
933 open->op_createmode = be32_to_cpup(p++);
934 switch (open->op_createmode) {
935 case NFS4_CREATE_UNCHECKED:
936 case NFS4_CREATE_GUARDED:
937 status = nfsd4_decode_fattr(argp, open->op_bmval,
938 &open->op_iattr, &open->op_acl, &open->op_label,
939 &current->fs->umask);
940 if (status)
941 goto out;
942 break;
943 case NFS4_CREATE_EXCLUSIVE:
944 READ_BUF(NFS4_VERIFIER_SIZE);
945 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
946 break;
947 case NFS4_CREATE_EXCLUSIVE4_1:
948 if (argp->minorversion < 1)
949 goto xdr_error;
950 READ_BUF(NFS4_VERIFIER_SIZE);
951 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
952 status = nfsd4_decode_fattr(argp, open->op_bmval,
953 &open->op_iattr, &open->op_acl, &open->op_label,
954 &current->fs->umask);
955 if (status)
956 goto out;
957 break;
958 default:
959 goto xdr_error;
960 }
961 break;
962 default:
963 goto xdr_error;
964 }
965
966 /* open_claim */
967 READ_BUF(4);
968 open->op_claim_type = be32_to_cpup(p++);
969 switch (open->op_claim_type) {
970 case NFS4_OPEN_CLAIM_NULL:
971 case NFS4_OPEN_CLAIM_DELEGATE_PREV:
972 READ_BUF(4);
973 open->op_fname.len = be32_to_cpup(p++);
974 READ_BUF(open->op_fname.len);
975 SAVEMEM(open->op_fname.data, open->op_fname.len);
976 if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
977 return status;
978 break;
979 case NFS4_OPEN_CLAIM_PREVIOUS:
980 READ_BUF(4);
981 open->op_delegate_type = be32_to_cpup(p++);
982 break;
983 case NFS4_OPEN_CLAIM_DELEGATE_CUR:
984 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
985 if (status)
986 return status;
987 READ_BUF(4);
988 open->op_fname.len = be32_to_cpup(p++);
989 READ_BUF(open->op_fname.len);
990 SAVEMEM(open->op_fname.data, open->op_fname.len);
991 if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
992 return status;
993 break;
994 case NFS4_OPEN_CLAIM_FH:
995 case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
996 if (argp->minorversion < 1)
997 goto xdr_error;
998 /* void */
999 break;
1000 case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
1001 if (argp->minorversion < 1)
1002 goto xdr_error;
1003 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
1004 if (status)
1005 return status;
1006 break;
1007 default:
1008 goto xdr_error;
1009 }
1010
1011 DECODE_TAIL;
1012 }
1013
1014 static __be32
1015 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf)
1016 {
1017 DECODE_HEAD;
1018
1019 if (argp->minorversion >= 1)
1020 return nfserr_notsupp;
1021
1022 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid);
1023 if (status)
1024 return status;
1025 READ_BUF(4);
1026 open_conf->oc_seqid = be32_to_cpup(p++);
1027
1028 DECODE_TAIL;
1029 }
1030
1031 static __be32
1032 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down)
1033 {
1034 DECODE_HEAD;
1035
1036 status = nfsd4_decode_stateid(argp, &open_down->od_stateid);
1037 if (status)
1038 return status;
1039 READ_BUF(4);
1040 open_down->od_seqid = be32_to_cpup(p++);
1041 status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
1042 &open_down->od_deleg_want, NULL);
1043 if (status)
1044 return status;
1045 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny);
1046 if (status)
1047 return status;
1048 DECODE_TAIL;
1049 }
1050
1051 static __be32
1052 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
1053 {
1054 DECODE_HEAD;
1055
1056 READ_BUF(4);
1057 putfh->pf_fhlen = be32_to_cpup(p++);
1058 if (putfh->pf_fhlen > NFS4_FHSIZE)
1059 goto xdr_error;
1060 READ_BUF(putfh->pf_fhlen);
1061 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen);
1062
1063 DECODE_TAIL;
1064 }
1065
1066 static __be32
1067 nfsd4_decode_putpubfh(struct nfsd4_compoundargs *argp, void *p)
1068 {
1069 if (argp->minorversion == 0)
1070 return nfs_ok;
1071 return nfserr_notsupp;
1072 }
1073
1074 static __be32
1075 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
1076 {
1077 DECODE_HEAD;
1078
1079 status = nfsd4_decode_stateid(argp, &read->rd_stateid);
1080 if (status)
1081 return status;
1082 READ_BUF(12);
1083 p = xdr_decode_hyper(p, &read->rd_offset);
1084 read->rd_length = be32_to_cpup(p++);
1085
1086 DECODE_TAIL;
1087 }
1088
1089 static __be32
1090 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir)
1091 {
1092 DECODE_HEAD;
1093
1094 READ_BUF(24);
1095 p = xdr_decode_hyper(p, &readdir->rd_cookie);
1096 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data));
1097 readdir->rd_dircount = be32_to_cpup(p++);
1098 readdir->rd_maxcount = be32_to_cpup(p++);
1099 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval)))
1100 goto out;
1101
1102 DECODE_TAIL;
1103 }
1104
1105 static __be32
1106 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove)
1107 {
1108 DECODE_HEAD;
1109
1110 READ_BUF(4);
1111 remove->rm_namelen = be32_to_cpup(p++);
1112 READ_BUF(remove->rm_namelen);
1113 SAVEMEM(remove->rm_name, remove->rm_namelen);
1114 if ((status = check_filename(remove->rm_name, remove->rm_namelen)))
1115 return status;
1116
1117 DECODE_TAIL;
1118 }
1119
1120 static __be32
1121 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename)
1122 {
1123 DECODE_HEAD;
1124
1125 READ_BUF(4);
1126 rename->rn_snamelen = be32_to_cpup(p++);
1127 READ_BUF(rename->rn_snamelen);
1128 SAVEMEM(rename->rn_sname, rename->rn_snamelen);
1129 READ_BUF(4);
1130 rename->rn_tnamelen = be32_to_cpup(p++);
1131 READ_BUF(rename->rn_tnamelen);
1132 SAVEMEM(rename->rn_tname, rename->rn_tnamelen);
1133 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen)))
1134 return status;
1135 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen)))
1136 return status;
1137
1138 DECODE_TAIL;
1139 }
1140
1141 static __be32
1142 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid)
1143 {
1144 DECODE_HEAD;
1145
1146 if (argp->minorversion >= 1)
1147 return nfserr_notsupp;
1148
1149 READ_BUF(sizeof(clientid_t));
1150 COPYMEM(clientid, sizeof(clientid_t));
1151
1152 DECODE_TAIL;
1153 }
1154
1155 static __be32
1156 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
1157 struct nfsd4_secinfo *secinfo)
1158 {
1159 DECODE_HEAD;
1160
1161 READ_BUF(4);
1162 secinfo->si_namelen = be32_to_cpup(p++);
1163 READ_BUF(secinfo->si_namelen);
1164 SAVEMEM(secinfo->si_name, secinfo->si_namelen);
1165 status = check_filename(secinfo->si_name, secinfo->si_namelen);
1166 if (status)
1167 return status;
1168 DECODE_TAIL;
1169 }
1170
1171 static __be32
1172 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
1173 struct nfsd4_secinfo_no_name *sin)
1174 {
1175 DECODE_HEAD;
1176
1177 READ_BUF(4);
1178 sin->sin_style = be32_to_cpup(p++);
1179 DECODE_TAIL;
1180 }
1181
1182 static __be32
1183 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr)
1184 {
1185 __be32 status;
1186
1187 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid);
1188 if (status)
1189 return status;
1190 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr,
1191 &setattr->sa_acl, &setattr->sa_label, NULL);
1192 }
1193
1194 static __be32
1195 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid)
1196 {
1197 DECODE_HEAD;
1198
1199 if (argp->minorversion >= 1)
1200 return nfserr_notsupp;
1201
1202 READ_BUF(NFS4_VERIFIER_SIZE);
1203 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE);
1204
1205 status = nfsd4_decode_opaque(argp, &setclientid->se_name);
1206 if (status)
1207 return nfserr_bad_xdr;
1208 READ_BUF(8);
1209 setclientid->se_callback_prog = be32_to_cpup(p++);
1210 setclientid->se_callback_netid_len = be32_to_cpup(p++);
1211 READ_BUF(setclientid->se_callback_netid_len);
1212 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len);
1213 READ_BUF(4);
1214 setclientid->se_callback_addr_len = be32_to_cpup(p++);
1215
1216 READ_BUF(setclientid->se_callback_addr_len);
1217 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len);
1218 READ_BUF(4);
1219 setclientid->se_callback_ident = be32_to_cpup(p++);
1220
1221 DECODE_TAIL;
1222 }
1223
1224 static __be32
1225 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c)
1226 {
1227 DECODE_HEAD;
1228
1229 if (argp->minorversion >= 1)
1230 return nfserr_notsupp;
1231
1232 READ_BUF(8 + NFS4_VERIFIER_SIZE);
1233 COPYMEM(&scd_c->sc_clientid, 8);
1234 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE);
1235
1236 DECODE_TAIL;
1237 }
1238
1239 /* Also used for NVERIFY */
1240 static __be32
1241 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify)
1242 {
1243 DECODE_HEAD;
1244
1245 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval)))
1246 goto out;
1247
1248 /* For convenience's sake, we compare raw xdr'd attributes in
1249 * nfsd4_proc_verify */
1250
1251 READ_BUF(4);
1252 verify->ve_attrlen = be32_to_cpup(p++);
1253 READ_BUF(verify->ve_attrlen);
1254 SAVEMEM(verify->ve_attrval, verify->ve_attrlen);
1255
1256 DECODE_TAIL;
1257 }
1258
1259 static __be32
1260 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
1261 {
1262 int avail;
1263 int len;
1264 DECODE_HEAD;
1265
1266 status = nfsd4_decode_stateid(argp, &write->wr_stateid);
1267 if (status)
1268 return status;
1269 READ_BUF(16);
1270 p = xdr_decode_hyper(p, &write->wr_offset);
1271 write->wr_stable_how = be32_to_cpup(p++);
1272 if (write->wr_stable_how > NFS_FILE_SYNC)
1273 goto xdr_error;
1274 write->wr_buflen = be32_to_cpup(p++);
1275
1276 /* Sorry .. no magic macros for this.. *
1277 * READ_BUF(write->wr_buflen);
1278 * SAVEMEM(write->wr_buf, write->wr_buflen);
1279 */
1280 avail = (char*)argp->end - (char*)argp->p;
1281 if (avail + argp->pagelen < write->wr_buflen) {
1282 dprintk("NFSD: xdr error (%s:%d)\n",
1283 __FILE__, __LINE__);
1284 goto xdr_error;
1285 }
1286 write->wr_head.iov_base = p;
1287 write->wr_head.iov_len = avail;
1288 write->wr_pagelist = argp->pagelist;
1289
1290 len = XDR_QUADLEN(write->wr_buflen) << 2;
1291 if (len >= avail) {
1292 int pages;
1293
1294 len -= avail;
1295
1296 pages = len >> PAGE_SHIFT;
1297 argp->pagelist += pages;
1298 argp->pagelen -= pages * PAGE_SIZE;
1299 len -= pages * PAGE_SIZE;
1300
1301 next_decode_page(argp);
1302 }
1303 argp->p += XDR_QUADLEN(len);
1304
1305 DECODE_TAIL;
1306 }
1307
1308 static __be32
1309 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner)
1310 {
1311 DECODE_HEAD;
1312
1313 if (argp->minorversion >= 1)
1314 return nfserr_notsupp;
1315
1316 READ_BUF(12);
1317 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t));
1318 rlockowner->rl_owner.len = be32_to_cpup(p++);
1319 READ_BUF(rlockowner->rl_owner.len);
1320 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len);
1321
1322 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1323 return nfserr_inval;
1324 DECODE_TAIL;
1325 }
1326
1327 static __be32
1328 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1329 struct nfsd4_exchange_id *exid)
1330 {
1331 int dummy, tmp;
1332 DECODE_HEAD;
1333
1334 READ_BUF(NFS4_VERIFIER_SIZE);
1335 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE);
1336
1337 status = nfsd4_decode_opaque(argp, &exid->clname);
1338 if (status)
1339 return nfserr_bad_xdr;
1340
1341 READ_BUF(4);
1342 exid->flags = be32_to_cpup(p++);
1343
1344 /* Ignore state_protect4_a */
1345 READ_BUF(4);
1346 exid->spa_how = be32_to_cpup(p++);
1347 switch (exid->spa_how) {
1348 case SP4_NONE:
1349 break;
1350 case SP4_MACH_CRED:
1351 /* spo_must_enforce */
1352 status = nfsd4_decode_bitmap(argp,
1353 exid->spo_must_enforce);
1354 if (status)
1355 goto out;
1356 /* spo_must_allow */
1357 status = nfsd4_decode_bitmap(argp, exid->spo_must_allow);
1358 if (status)
1359 goto out;
1360 break;
1361 case SP4_SSV:
1362 /* ssp_ops */
1363 READ_BUF(4);
1364 dummy = be32_to_cpup(p++);
1365 READ_BUF(dummy * 4);
1366 p += dummy;
1367
1368 READ_BUF(4);
1369 dummy = be32_to_cpup(p++);
1370 READ_BUF(dummy * 4);
1371 p += dummy;
1372
1373 /* ssp_hash_algs<> */
1374 READ_BUF(4);
1375 tmp = be32_to_cpup(p++);
1376 while (tmp--) {
1377 READ_BUF(4);
1378 dummy = be32_to_cpup(p++);
1379 READ_BUF(dummy);
1380 p += XDR_QUADLEN(dummy);
1381 }
1382
1383 /* ssp_encr_algs<> */
1384 READ_BUF(4);
1385 tmp = be32_to_cpup(p++);
1386 while (tmp--) {
1387 READ_BUF(4);
1388 dummy = be32_to_cpup(p++);
1389 READ_BUF(dummy);
1390 p += XDR_QUADLEN(dummy);
1391 }
1392
1393 /* ssp_window and ssp_num_gss_handles */
1394 READ_BUF(8);
1395 dummy = be32_to_cpup(p++);
1396 dummy = be32_to_cpup(p++);
1397 break;
1398 default:
1399 goto xdr_error;
1400 }
1401
1402 /* Ignore Implementation ID */
1403 READ_BUF(4); /* nfs_impl_id4 array length */
1404 dummy = be32_to_cpup(p++);
1405
1406 if (dummy > 1)
1407 goto xdr_error;
1408
1409 if (dummy == 1) {
1410 /* nii_domain */
1411 READ_BUF(4);
1412 dummy = be32_to_cpup(p++);
1413 READ_BUF(dummy);
1414 p += XDR_QUADLEN(dummy);
1415
1416 /* nii_name */
1417 READ_BUF(4);
1418 dummy = be32_to_cpup(p++);
1419 READ_BUF(dummy);
1420 p += XDR_QUADLEN(dummy);
1421
1422 /* nii_date */
1423 READ_BUF(12);
1424 p += 3;
1425 }
1426 DECODE_TAIL;
1427 }
1428
1429 static __be32
1430 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1431 struct nfsd4_create_session *sess)
1432 {
1433 DECODE_HEAD;
1434 u32 dummy;
1435
1436 READ_BUF(16);
1437 COPYMEM(&sess->clientid, 8);
1438 sess->seqid = be32_to_cpup(p++);
1439 sess->flags = be32_to_cpup(p++);
1440
1441 /* Fore channel attrs */
1442 READ_BUF(28);
1443 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */
1444 sess->fore_channel.maxreq_sz = be32_to_cpup(p++);
1445 sess->fore_channel.maxresp_sz = be32_to_cpup(p++);
1446 sess->fore_channel.maxresp_cached = be32_to_cpup(p++);
1447 sess->fore_channel.maxops = be32_to_cpup(p++);
1448 sess->fore_channel.maxreqs = be32_to_cpup(p++);
1449 sess->fore_channel.nr_rdma_attrs = be32_to_cpup(p++);
1450 if (sess->fore_channel.nr_rdma_attrs == 1) {
1451 READ_BUF(4);
1452 sess->fore_channel.rdma_attrs = be32_to_cpup(p++);
1453 } else if (sess->fore_channel.nr_rdma_attrs > 1) {
1454 dprintk("Too many fore channel attr bitmaps!\n");
1455 goto xdr_error;
1456 }
1457
1458 /* Back channel attrs */
1459 READ_BUF(28);
1460 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */
1461 sess->back_channel.maxreq_sz = be32_to_cpup(p++);
1462 sess->back_channel.maxresp_sz = be32_to_cpup(p++);
1463 sess->back_channel.maxresp_cached = be32_to_cpup(p++);
1464 sess->back_channel.maxops = be32_to_cpup(p++);
1465 sess->back_channel.maxreqs = be32_to_cpup(p++);
1466 sess->back_channel.nr_rdma_attrs = be32_to_cpup(p++);
1467 if (sess->back_channel.nr_rdma_attrs == 1) {
1468 READ_BUF(4);
1469 sess->back_channel.rdma_attrs = be32_to_cpup(p++);
1470 } else if (sess->back_channel.nr_rdma_attrs > 1) {
1471 dprintk("Too many back channel attr bitmaps!\n");
1472 goto xdr_error;
1473 }
1474
1475 READ_BUF(4);
1476 sess->callback_prog = be32_to_cpup(p++);
1477 nfsd4_decode_cb_sec(argp, &sess->cb_sec);
1478 DECODE_TAIL;
1479 }
1480
1481 static __be32
1482 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1483 struct nfsd4_destroy_session *destroy_session)
1484 {
1485 DECODE_HEAD;
1486 READ_BUF(NFS4_MAX_SESSIONID_LEN);
1487 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1488
1489 DECODE_TAIL;
1490 }
1491
1492 static __be32
1493 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
1494 struct nfsd4_free_stateid *free_stateid)
1495 {
1496 DECODE_HEAD;
1497
1498 READ_BUF(sizeof(stateid_t));
1499 free_stateid->fr_stateid.si_generation = be32_to_cpup(p++);
1500 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t));
1501
1502 DECODE_TAIL;
1503 }
1504
1505 static __be32
1506 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1507 struct nfsd4_sequence *seq)
1508 {
1509 DECODE_HEAD;
1510
1511 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16);
1512 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1513 seq->seqid = be32_to_cpup(p++);
1514 seq->slotid = be32_to_cpup(p++);
1515 seq->maxslots = be32_to_cpup(p++);
1516 seq->cachethis = be32_to_cpup(p++);
1517
1518 DECODE_TAIL;
1519 }
1520
1521 static __be32
1522 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid)
1523 {
1524 int i;
1525 __be32 *p, status;
1526 struct nfsd4_test_stateid_id *stateid;
1527
1528 READ_BUF(4);
1529 test_stateid->ts_num_ids = ntohl(*p++);
1530
1531 INIT_LIST_HEAD(&test_stateid->ts_stateid_list);
1532
1533 for (i = 0; i < test_stateid->ts_num_ids; i++) {
1534 stateid = svcxdr_tmpalloc(argp, sizeof(*stateid));
1535 if (!stateid) {
1536 status = nfserrno(-ENOMEM);
1537 goto out;
1538 }
1539
1540 INIT_LIST_HEAD(&stateid->ts_id_list);
1541 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list);
1542
1543 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid);
1544 if (status)
1545 goto out;
1546 }
1547
1548 status = 0;
1549 out:
1550 return status;
1551 xdr_error:
1552 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__);
1553 status = nfserr_bad_xdr;
1554 goto out;
1555 }
1556
1557 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc)
1558 {
1559 DECODE_HEAD;
1560
1561 READ_BUF(8);
1562 COPYMEM(&dc->clientid, 8);
1563
1564 DECODE_TAIL;
1565 }
1566
1567 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc)
1568 {
1569 DECODE_HEAD;
1570
1571 READ_BUF(4);
1572 rc->rca_one_fs = be32_to_cpup(p++);
1573
1574 DECODE_TAIL;
1575 }
1576
1577 #ifdef CONFIG_NFSD_PNFS
1578 static __be32
1579 nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs *argp,
1580 struct nfsd4_getdeviceinfo *gdev)
1581 {
1582 DECODE_HEAD;
1583 u32 num, i;
1584
1585 READ_BUF(sizeof(struct nfsd4_deviceid) + 3 * 4);
1586 COPYMEM(&gdev->gd_devid, sizeof(struct nfsd4_deviceid));
1587 gdev->gd_layout_type = be32_to_cpup(p++);
1588 gdev->gd_maxcount = be32_to_cpup(p++);
1589 num = be32_to_cpup(p++);
1590 if (num) {
1591 READ_BUF(4 * num);
1592 gdev->gd_notify_types = be32_to_cpup(p++);
1593 for (i = 1; i < num; i++) {
1594 if (be32_to_cpup(p++)) {
1595 status = nfserr_inval;
1596 goto out;
1597 }
1598 }
1599 }
1600 DECODE_TAIL;
1601 }
1602
1603 static __be32
1604 nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp,
1605 struct nfsd4_layoutget *lgp)
1606 {
1607 DECODE_HEAD;
1608
1609 READ_BUF(36);
1610 lgp->lg_signal = be32_to_cpup(p++);
1611 lgp->lg_layout_type = be32_to_cpup(p++);
1612 lgp->lg_seg.iomode = be32_to_cpup(p++);
1613 p = xdr_decode_hyper(p, &lgp->lg_seg.offset);
1614 p = xdr_decode_hyper(p, &lgp->lg_seg.length);
1615 p = xdr_decode_hyper(p, &lgp->lg_minlength);
1616
1617 status = nfsd4_decode_stateid(argp, &lgp->lg_sid);
1618 if (status)
1619 return status;
1620
1621 READ_BUF(4);
1622 lgp->lg_maxcount = be32_to_cpup(p++);
1623
1624 DECODE_TAIL;
1625 }
1626
1627 static __be32
1628 nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp,
1629 struct nfsd4_layoutcommit *lcp)
1630 {
1631 DECODE_HEAD;
1632 u32 timechange;
1633
1634 READ_BUF(20);
1635 p = xdr_decode_hyper(p, &lcp->lc_seg.offset);
1636 p = xdr_decode_hyper(p, &lcp->lc_seg.length);
1637 lcp->lc_reclaim = be32_to_cpup(p++);
1638
1639 status = nfsd4_decode_stateid(argp, &lcp->lc_sid);
1640 if (status)
1641 return status;
1642
1643 READ_BUF(4);
1644 lcp->lc_newoffset = be32_to_cpup(p++);
1645 if (lcp->lc_newoffset) {
1646 READ_BUF(8);
1647 p = xdr_decode_hyper(p, &lcp->lc_last_wr);
1648 } else
1649 lcp->lc_last_wr = 0;
1650 READ_BUF(4);
1651 timechange = be32_to_cpup(p++);
1652 if (timechange) {
1653 status = nfsd4_decode_time(argp, &lcp->lc_mtime);
1654 if (status)
1655 return status;
1656 } else {
1657 lcp->lc_mtime.tv_nsec = UTIME_NOW;
1658 }
1659 READ_BUF(8);
1660 lcp->lc_layout_type = be32_to_cpup(p++);
1661
1662 /*
1663 * Save the layout update in XDR format and let the layout driver deal
1664 * with it later.
1665 */
1666 lcp->lc_up_len = be32_to_cpup(p++);
1667 if (lcp->lc_up_len > 0) {
1668 READ_BUF(lcp->lc_up_len);
1669 READMEM(lcp->lc_up_layout, lcp->lc_up_len);
1670 }
1671
1672 DECODE_TAIL;
1673 }
1674
1675 static __be32
1676 nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp,
1677 struct nfsd4_layoutreturn *lrp)
1678 {
1679 DECODE_HEAD;
1680
1681 READ_BUF(16);
1682 lrp->lr_reclaim = be32_to_cpup(p++);
1683 lrp->lr_layout_type = be32_to_cpup(p++);
1684 lrp->lr_seg.iomode = be32_to_cpup(p++);
1685 lrp->lr_return_type = be32_to_cpup(p++);
1686 if (lrp->lr_return_type == RETURN_FILE) {
1687 READ_BUF(16);
1688 p = xdr_decode_hyper(p, &lrp->lr_seg.offset);
1689 p = xdr_decode_hyper(p, &lrp->lr_seg.length);
1690
1691 status = nfsd4_decode_stateid(argp, &lrp->lr_sid);
1692 if (status)
1693 return status;
1694
1695 READ_BUF(4);
1696 lrp->lrf_body_len = be32_to_cpup(p++);
1697 if (lrp->lrf_body_len > 0) {
1698 READ_BUF(lrp->lrf_body_len);
1699 READMEM(lrp->lrf_body, lrp->lrf_body_len);
1700 }
1701 } else {
1702 lrp->lr_seg.offset = 0;
1703 lrp->lr_seg.length = NFS4_MAX_UINT64;
1704 }
1705
1706 DECODE_TAIL;
1707 }
1708 #endif /* CONFIG_NFSD_PNFS */
1709
1710 static __be32
1711 nfsd4_decode_fallocate(struct nfsd4_compoundargs *argp,
1712 struct nfsd4_fallocate *fallocate)
1713 {
1714 DECODE_HEAD;
1715
1716 status = nfsd4_decode_stateid(argp, &fallocate->falloc_stateid);
1717 if (status)
1718 return status;
1719
1720 READ_BUF(16);
1721 p = xdr_decode_hyper(p, &fallocate->falloc_offset);
1722 xdr_decode_hyper(p, &fallocate->falloc_length);
1723
1724 DECODE_TAIL;
1725 }
1726
1727 static __be32
1728 nfsd4_decode_clone(struct nfsd4_compoundargs *argp, struct nfsd4_clone *clone)
1729 {
1730 DECODE_HEAD;
1731
1732 status = nfsd4_decode_stateid(argp, &clone->cl_src_stateid);
1733 if (status)
1734 return status;
1735 status = nfsd4_decode_stateid(argp, &clone->cl_dst_stateid);
1736 if (status)
1737 return status;
1738
1739 READ_BUF(8 + 8 + 8);
1740 p = xdr_decode_hyper(p, &clone->cl_src_pos);
1741 p = xdr_decode_hyper(p, &clone->cl_dst_pos);
1742 p = xdr_decode_hyper(p, &clone->cl_count);
1743 DECODE_TAIL;
1744 }
1745
1746 static __be32
1747 nfsd4_decode_copy(struct nfsd4_compoundargs *argp, struct nfsd4_copy *copy)
1748 {
1749 DECODE_HEAD;
1750 unsigned int tmp;
1751
1752 status = nfsd4_decode_stateid(argp, &copy->cp_src_stateid);
1753 if (status)
1754 return status;
1755 status = nfsd4_decode_stateid(argp, &copy->cp_dst_stateid);
1756 if (status)
1757 return status;
1758
1759 READ_BUF(8 + 8 + 8 + 4 + 4 + 4);
1760 p = xdr_decode_hyper(p, &copy->cp_src_pos);
1761 p = xdr_decode_hyper(p, &copy->cp_dst_pos);
1762 p = xdr_decode_hyper(p, &copy->cp_count);
1763 copy->cp_consecutive = be32_to_cpup(p++);
1764 copy->cp_synchronous = be32_to_cpup(p++);
1765 tmp = be32_to_cpup(p); /* Source server list not supported */
1766
1767 DECODE_TAIL;
1768 }
1769
1770 static __be32
1771 nfsd4_decode_seek(struct nfsd4_compoundargs *argp, struct nfsd4_seek *seek)
1772 {
1773 DECODE_HEAD;
1774
1775 status = nfsd4_decode_stateid(argp, &seek->seek_stateid);
1776 if (status)
1777 return status;
1778
1779 READ_BUF(8 + 4);
1780 p = xdr_decode_hyper(p, &seek->seek_offset);
1781 seek->seek_whence = be32_to_cpup(p);
1782
1783 DECODE_TAIL;
1784 }
1785
1786 static __be32
1787 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p)
1788 {
1789 return nfs_ok;
1790 }
1791
1792 static __be32
1793 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p)
1794 {
1795 return nfserr_notsupp;
1796 }
1797
1798 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *);
1799
1800 static const nfsd4_dec nfsd4_dec_ops[] = {
1801 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access,
1802 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close,
1803 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit,
1804 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create,
1805 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp,
1806 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn,
1807 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr,
1808 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop,
1809 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link,
1810 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock,
1811 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt,
1812 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku,
1813 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup,
1814 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop,
1815 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1816 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open,
1817 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp,
1818 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm,
1819 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade,
1820 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh,
1821 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_putpubfh,
1822 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop,
1823 [OP_READ] = (nfsd4_dec)nfsd4_decode_read,
1824 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir,
1825 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop,
1826 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove,
1827 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename,
1828 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew,
1829 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop,
1830 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop,
1831 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo,
1832 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr,
1833 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid,
1834 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm,
1835 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1836 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write,
1837 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner,
1838
1839 /* new operations for NFSv4.1 */
1840 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl,
1841 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session,
1842 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id,
1843 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session,
1844 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session,
1845 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid,
1846 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1847 #ifdef CONFIG_NFSD_PNFS
1848 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_getdeviceinfo,
1849 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
1850 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_layoutcommit,
1851 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_layoutget,
1852 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_layoutreturn,
1853 #else
1854 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp,
1855 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
1856 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp,
1857 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp,
1858 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp,
1859 #endif
1860 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name,
1861 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence,
1862 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp,
1863 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid,
1864 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1865 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid,
1866 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete,
1867
1868 /* new operations for NFSv4.2 */
1869 [OP_ALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate,
1870 [OP_COPY] = (nfsd4_dec)nfsd4_decode_copy,
1871 [OP_COPY_NOTIFY] = (nfsd4_dec)nfsd4_decode_notsupp,
1872 [OP_DEALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate,
1873 [OP_IO_ADVISE] = (nfsd4_dec)nfsd4_decode_notsupp,
1874 [OP_LAYOUTERROR] = (nfsd4_dec)nfsd4_decode_notsupp,
1875 [OP_LAYOUTSTATS] = (nfsd4_dec)nfsd4_decode_notsupp,
1876 [OP_OFFLOAD_CANCEL] = (nfsd4_dec)nfsd4_decode_notsupp,
1877 [OP_OFFLOAD_STATUS] = (nfsd4_dec)nfsd4_decode_notsupp,
1878 [OP_READ_PLUS] = (nfsd4_dec)nfsd4_decode_notsupp,
1879 [OP_SEEK] = (nfsd4_dec)nfsd4_decode_seek,
1880 [OP_WRITE_SAME] = (nfsd4_dec)nfsd4_decode_notsupp,
1881 [OP_CLONE] = (nfsd4_dec)nfsd4_decode_clone,
1882 };
1883
1884 static inline bool
1885 nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op)
1886 {
1887 if (op->opnum < FIRST_NFS4_OP)
1888 return false;
1889 else if (argp->minorversion == 0 && op->opnum > LAST_NFS40_OP)
1890 return false;
1891 else if (argp->minorversion == 1 && op->opnum > LAST_NFS41_OP)
1892 return false;
1893 else if (argp->minorversion == 2 && op->opnum > LAST_NFS42_OP)
1894 return false;
1895 return true;
1896 }
1897
1898 static __be32
1899 nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
1900 {
1901 DECODE_HEAD;
1902 struct nfsd4_op *op;
1903 bool cachethis = false;
1904 int auth_slack= argp->rqstp->rq_auth_slack;
1905 int max_reply = auth_slack + 8; /* opcnt, status */
1906 int readcount = 0;
1907 int readbytes = 0;
1908 int i;
1909
1910 READ_BUF(4);
1911 argp->taglen = be32_to_cpup(p++);
1912 READ_BUF(argp->taglen);
1913 SAVEMEM(argp->tag, argp->taglen);
1914 READ_BUF(8);
1915 argp->minorversion = be32_to_cpup(p++);
1916 argp->opcnt = be32_to_cpup(p++);
1917 max_reply += 4 + (XDR_QUADLEN(argp->taglen) << 2);
1918
1919 if (argp->taglen > NFSD4_MAX_TAGLEN)
1920 goto xdr_error;
1921 if (argp->opcnt > 100)
1922 goto xdr_error;
1923
1924 if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
1925 argp->ops = kzalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL);
1926 if (!argp->ops) {
1927 argp->ops = argp->iops;
1928 dprintk("nfsd: couldn't allocate room for COMPOUND\n");
1929 goto xdr_error;
1930 }
1931 }
1932
1933 if (argp->minorversion > NFSD_SUPPORTED_MINOR_VERSION)
1934 argp->opcnt = 0;
1935
1936 for (i = 0; i < argp->opcnt; i++) {
1937 op = &argp->ops[i];
1938 op->replay = NULL;
1939
1940 READ_BUF(4);
1941 op->opnum = be32_to_cpup(p++);
1942
1943 if (nfsd4_opnum_in_range(argp, op))
1944 op->status = nfsd4_dec_ops[op->opnum](argp, &op->u);
1945 else {
1946 op->opnum = OP_ILLEGAL;
1947 op->status = nfserr_op_illegal;
1948 }
1949 op->opdesc = OPDESC(op);
1950 /*
1951 * We'll try to cache the result in the DRC if any one
1952 * op in the compound wants to be cached:
1953 */
1954 cachethis |= nfsd4_cache_this_op(op);
1955
1956 if (op->opnum == OP_READ) {
1957 readcount++;
1958 readbytes += nfsd4_max_reply(argp->rqstp, op);
1959 } else
1960 max_reply += nfsd4_max_reply(argp->rqstp, op);
1961 /*
1962 * OP_LOCK and OP_LOCKT may return a conflicting lock.
1963 * (Special case because it will just skip encoding this
1964 * if it runs out of xdr buffer space, and it is the only
1965 * operation that behaves this way.)
1966 */
1967 if (op->opnum == OP_LOCK || op->opnum == OP_LOCKT)
1968 max_reply += NFS4_OPAQUE_LIMIT;
1969
1970 if (op->status) {
1971 argp->opcnt = i+1;
1972 break;
1973 }
1974 }
1975 /* Sessions make the DRC unnecessary: */
1976 if (argp->minorversion)
1977 cachethis = false;
1978 svc_reserve(argp->rqstp, max_reply + readbytes);
1979 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
1980
1981 if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack)
1982 clear_bit(RQ_SPLICE_OK, &argp->rqstp->rq_flags);
1983
1984 DECODE_TAIL;
1985 }
1986
1987 static __be32 *encode_change(__be32 *p, struct kstat *stat, struct inode *inode,
1988 struct svc_export *exp)
1989 {
1990 if (exp->ex_flags & NFSEXP_V4ROOT) {
1991 *p++ = cpu_to_be32(convert_to_wallclock(exp->cd->flush_time));
1992 *p++ = 0;
1993 } else if (IS_I_VERSION(inode)) {
1994 p = xdr_encode_hyper(p, nfsd4_change_attribute(inode));
1995 } else {
1996 *p++ = cpu_to_be32(stat->ctime.tv_sec);
1997 *p++ = cpu_to_be32(stat->ctime.tv_nsec);
1998 }
1999 return p;
2000 }
2001
2002 static __be32 *encode_cinfo(__be32 *p, struct nfsd4_change_info *c)
2003 {
2004 *p++ = cpu_to_be32(c->atomic);
2005 if (c->change_supported) {
2006 p = xdr_encode_hyper(p, c->before_change);
2007 p = xdr_encode_hyper(p, c->after_change);
2008 } else {
2009 *p++ = cpu_to_be32(c->before_ctime_sec);
2010 *p++ = cpu_to_be32(c->before_ctime_nsec);
2011 *p++ = cpu_to_be32(c->after_ctime_sec);
2012 *p++ = cpu_to_be32(c->after_ctime_nsec);
2013 }
2014 return p;
2015 }
2016
2017 /* Encode as an array of strings the string given with components
2018 * separated @sep, escaped with esc_enter and esc_exit.
2019 */
2020 static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep,
2021 char *components, char esc_enter,
2022 char esc_exit)
2023 {
2024 __be32 *p;
2025 __be32 pathlen;
2026 int pathlen_offset;
2027 int strlen, count=0;
2028 char *str, *end, *next;
2029
2030 dprintk("nfsd4_encode_components(%s)\n", components);
2031
2032 pathlen_offset = xdr->buf->len;
2033 p = xdr_reserve_space(xdr, 4);
2034 if (!p)
2035 return nfserr_resource;
2036 p++; /* We will fill this in with @count later */
2037
2038 end = str = components;
2039 while (*end) {
2040 bool found_esc = false;
2041
2042 /* try to parse as esc_start, ..., esc_end, sep */
2043 if (*str == esc_enter) {
2044 for (; *end && (*end != esc_exit); end++)
2045 /* find esc_exit or end of string */;
2046 next = end + 1;
2047 if (*end && (!*next || *next == sep)) {
2048 str++;
2049 found_esc = true;
2050 }
2051 }
2052
2053 if (!found_esc)
2054 for (; *end && (*end != sep); end++)
2055 /* find sep or end of string */;
2056
2057 strlen = end - str;
2058 if (strlen) {
2059 p = xdr_reserve_space(xdr, strlen + 4);
2060 if (!p)
2061 return nfserr_resource;
2062 p = xdr_encode_opaque(p, str, strlen);
2063 count++;
2064 }
2065 else
2066 end++;
2067 if (found_esc)
2068 end = next;
2069
2070 str = end;
2071 }
2072 pathlen = htonl(count);
2073 write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4);
2074 return 0;
2075 }
2076
2077 /* Encode as an array of strings the string given with components
2078 * separated @sep.
2079 */
2080 static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep,
2081 char *components)
2082 {
2083 return nfsd4_encode_components_esc(xdr, sep, components, 0, 0);
2084 }
2085
2086 /*
2087 * encode a location element of a fs_locations structure
2088 */
2089 static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr,
2090 struct nfsd4_fs_location *location)
2091 {
2092 __be32 status;
2093
2094 status = nfsd4_encode_components_esc(xdr, ':', location->hosts,
2095 '[', ']');
2096 if (status)
2097 return status;
2098 status = nfsd4_encode_components(xdr, '/', location->path);
2099 if (status)
2100 return status;
2101 return 0;
2102 }
2103
2104 /*
2105 * Encode a path in RFC3530 'pathname4' format
2106 */
2107 static __be32 nfsd4_encode_path(struct xdr_stream *xdr,
2108 const struct path *root,
2109 const struct path *path)
2110 {
2111 struct path cur = *path;
2112 __be32 *p;
2113 struct dentry **components = NULL;
2114 unsigned int ncomponents = 0;
2115 __be32 err = nfserr_jukebox;
2116
2117 dprintk("nfsd4_encode_components(");
2118
2119 path_get(&cur);
2120 /* First walk the path up to the nfsd root, and store the
2121 * dentries/path components in an array.
2122 */
2123 for (;;) {
2124 if (path_equal(&cur, root))
2125 break;
2126 if (cur.dentry == cur.mnt->mnt_root) {
2127 if (follow_up(&cur))
2128 continue;
2129 goto out_free;
2130 }
2131 if ((ncomponents & 15) == 0) {
2132 struct dentry **new;
2133 new = krealloc(components,
2134 sizeof(*new) * (ncomponents + 16),
2135 GFP_KERNEL);
2136 if (!new)
2137 goto out_free;
2138 components = new;
2139 }
2140 components[ncomponents++] = cur.dentry;
2141 cur.dentry = dget_parent(cur.dentry);
2142 }
2143 err = nfserr_resource;
2144 p = xdr_reserve_space(xdr, 4);
2145 if (!p)
2146 goto out_free;
2147 *p++ = cpu_to_be32(ncomponents);
2148
2149 while (ncomponents) {
2150 struct dentry *dentry = components[ncomponents - 1];
2151 unsigned int len;
2152
2153 spin_lock(&dentry->d_lock);
2154 len = dentry->d_name.len;
2155 p = xdr_reserve_space(xdr, len + 4);
2156 if (!p) {
2157 spin_unlock(&dentry->d_lock);
2158 goto out_free;
2159 }
2160 p = xdr_encode_opaque(p, dentry->d_name.name, len);
2161 dprintk("/%pd", dentry);
2162 spin_unlock(&dentry->d_lock);
2163 dput(dentry);
2164 ncomponents--;
2165 }
2166
2167 err = 0;
2168 out_free:
2169 dprintk(")\n");
2170 while (ncomponents)
2171 dput(components[--ncomponents]);
2172 kfree(components);
2173 path_put(&cur);
2174 return err;
2175 }
2176
2177 static __be32 nfsd4_encode_fsloc_fsroot(struct xdr_stream *xdr,
2178 struct svc_rqst *rqstp, const struct path *path)
2179 {
2180 struct svc_export *exp_ps;
2181 __be32 res;
2182
2183 exp_ps = rqst_find_fsidzero_export(rqstp);
2184 if (IS_ERR(exp_ps))
2185 return nfserrno(PTR_ERR(exp_ps));
2186 res = nfsd4_encode_path(xdr, &exp_ps->ex_path, path);
2187 exp_put(exp_ps);
2188 return res;
2189 }
2190
2191 /*
2192 * encode a fs_locations structure
2193 */
2194 static __be32 nfsd4_encode_fs_locations(struct xdr_stream *xdr,
2195 struct svc_rqst *rqstp, struct svc_export *exp)
2196 {
2197 __be32 status;
2198 int i;
2199 __be32 *p;
2200 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
2201
2202 status = nfsd4_encode_fsloc_fsroot(xdr, rqstp, &exp->ex_path);
2203 if (status)
2204 return status;
2205 p = xdr_reserve_space(xdr, 4);
2206 if (!p)
2207 return nfserr_resource;
2208 *p++ = cpu_to_be32(fslocs->locations_count);
2209 for (i=0; i<fslocs->locations_count; i++) {
2210 status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]);
2211 if (status)
2212 return status;
2213 }
2214 return 0;
2215 }
2216
2217 static u32 nfs4_file_type(umode_t mode)
2218 {
2219 switch (mode & S_IFMT) {
2220 case S_IFIFO: return NF4FIFO;
2221 case S_IFCHR: return NF4CHR;
2222 case S_IFDIR: return NF4DIR;
2223 case S_IFBLK: return NF4BLK;
2224 case S_IFLNK: return NF4LNK;
2225 case S_IFREG: return NF4REG;
2226 case S_IFSOCK: return NF4SOCK;
2227 default: return NF4BAD;
2228 };
2229 }
2230
2231 static inline __be32
2232 nfsd4_encode_aclname(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2233 struct nfs4_ace *ace)
2234 {
2235 if (ace->whotype != NFS4_ACL_WHO_NAMED)
2236 return nfs4_acl_write_who(xdr, ace->whotype);
2237 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
2238 return nfsd4_encode_group(xdr, rqstp, ace->who_gid);
2239 else
2240 return nfsd4_encode_user(xdr, rqstp, ace->who_uid);
2241 }
2242
2243 static inline __be32
2244 nfsd4_encode_layout_types(struct xdr_stream *xdr, u32 layout_types)
2245 {
2246 __be32 *p;
2247 unsigned long i = hweight_long(layout_types);
2248
2249 p = xdr_reserve_space(xdr, 4 + 4 * i);
2250 if (!p)
2251 return nfserr_resource;
2252
2253 *p++ = cpu_to_be32(i);
2254
2255 for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i)
2256 if (layout_types & (1 << i))
2257 *p++ = cpu_to_be32(i);
2258
2259 return 0;
2260 }
2261
2262 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
2263 FATTR4_WORD0_RDATTR_ERROR)
2264 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
2265 #define WORD2_ABSENT_FS_ATTRS 0
2266
2267 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2268 static inline __be32
2269 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2270 void *context, int len)
2271 {
2272 __be32 *p;
2273
2274 p = xdr_reserve_space(xdr, len + 4 + 4 + 4);
2275 if (!p)
2276 return nfserr_resource;
2277
2278 /*
2279 * For now we use a 0 here to indicate the null translation; in
2280 * the future we may place a call to translation code here.
2281 */
2282 *p++ = cpu_to_be32(0); /* lfs */
2283 *p++ = cpu_to_be32(0); /* pi */
2284 p = xdr_encode_opaque(p, context, len);
2285 return 0;
2286 }
2287 #else
2288 static inline __be32
2289 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2290 void *context, int len)
2291 { return 0; }
2292 #endif
2293
2294 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *bmval2, u32 *rdattr_err)
2295 {
2296 /* As per referral draft: */
2297 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
2298 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
2299 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
2300 *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
2301 *rdattr_err = NFSERR_MOVED;
2302 else
2303 return nfserr_moved;
2304 }
2305 *bmval0 &= WORD0_ABSENT_FS_ATTRS;
2306 *bmval1 &= WORD1_ABSENT_FS_ATTRS;
2307 *bmval2 &= WORD2_ABSENT_FS_ATTRS;
2308 return 0;
2309 }
2310
2311
2312 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat)
2313 {
2314 struct path path = exp->ex_path;
2315 int err;
2316
2317 path_get(&path);
2318 while (follow_up(&path)) {
2319 if (path.dentry != path.mnt->mnt_root)
2320 break;
2321 }
2322 err = vfs_getattr(&path, stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT);
2323 path_put(&path);
2324 return err;
2325 }
2326
2327 static __be32
2328 nfsd4_encode_bitmap(struct xdr_stream *xdr, u32 bmval0, u32 bmval1, u32 bmval2)
2329 {
2330 __be32 *p;
2331
2332 if (bmval2) {
2333 p = xdr_reserve_space(xdr, 16);
2334 if (!p)
2335 goto out_resource;
2336 *p++ = cpu_to_be32(3);
2337 *p++ = cpu_to_be32(bmval0);
2338 *p++ = cpu_to_be32(bmval1);
2339 *p++ = cpu_to_be32(bmval2);
2340 } else if (bmval1) {
2341 p = xdr_reserve_space(xdr, 12);
2342 if (!p)
2343 goto out_resource;
2344 *p++ = cpu_to_be32(2);
2345 *p++ = cpu_to_be32(bmval0);
2346 *p++ = cpu_to_be32(bmval1);
2347 } else {
2348 p = xdr_reserve_space(xdr, 8);
2349 if (!p)
2350 goto out_resource;
2351 *p++ = cpu_to_be32(1);
2352 *p++ = cpu_to_be32(bmval0);
2353 }
2354
2355 return 0;
2356 out_resource:
2357 return nfserr_resource;
2358 }
2359
2360 /*
2361 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
2362 * ourselves.
2363 */
2364 static __be32
2365 nfsd4_encode_fattr(struct xdr_stream *xdr, struct svc_fh *fhp,
2366 struct svc_export *exp,
2367 struct dentry *dentry, u32 *bmval,
2368 struct svc_rqst *rqstp, int ignore_crossmnt)
2369 {
2370 u32 bmval0 = bmval[0];
2371 u32 bmval1 = bmval[1];
2372 u32 bmval2 = bmval[2];
2373 struct kstat stat;
2374 struct svc_fh *tempfh = NULL;
2375 struct kstatfs statfs;
2376 __be32 *p;
2377 int starting_len = xdr->buf->len;
2378 int attrlen_offset;
2379 __be32 attrlen;
2380 u32 dummy;
2381 u64 dummy64;
2382 u32 rdattr_err = 0;
2383 __be32 status;
2384 int err;
2385 struct nfs4_acl *acl = NULL;
2386 void *context = NULL;
2387 int contextlen;
2388 bool contextsupport = false;
2389 struct nfsd4_compoundres *resp = rqstp->rq_resp;
2390 u32 minorversion = resp->cstate.minorversion;
2391 struct path path = {
2392 .mnt = exp->ex_path.mnt,
2393 .dentry = dentry,
2394 };
2395 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
2396
2397 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1);
2398 BUG_ON(!nfsd_attrs_supported(minorversion, bmval));
2399
2400 if (exp->ex_fslocs.migrated) {
2401 status = fattr_handle_absent_fs(&bmval0, &bmval1, &bmval2, &rdattr_err);
2402 if (status)
2403 goto out;
2404 }
2405
2406 err = vfs_getattr(&path, &stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT);
2407 if (err)
2408 goto out_nfserr;
2409 if ((bmval0 & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE |
2410 FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) ||
2411 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
2412 FATTR4_WORD1_SPACE_TOTAL))) {
2413 err = vfs_statfs(&path, &statfs);
2414 if (err)
2415 goto out_nfserr;
2416 }
2417 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) {
2418 tempfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL);
2419 status = nfserr_jukebox;
2420 if (!tempfh)
2421 goto out;
2422 fh_init(tempfh, NFS4_FHSIZE);
2423 status = fh_compose(tempfh, exp, dentry, NULL);
2424 if (status)
2425 goto out;
2426 fhp = tempfh;
2427 }
2428 if (bmval0 & FATTR4_WORD0_ACL) {
2429 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl);
2430 if (err == -EOPNOTSUPP)
2431 bmval0 &= ~FATTR4_WORD0_ACL;
2432 else if (err == -EINVAL) {
2433 status = nfserr_attrnotsupp;
2434 goto out;
2435 } else if (err != 0)
2436 goto out_nfserr;
2437 }
2438
2439 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2440 if ((bmval2 & FATTR4_WORD2_SECURITY_LABEL) ||
2441 bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2442 if (exp->ex_flags & NFSEXP_SECURITY_LABEL)
2443 err = security_inode_getsecctx(d_inode(dentry),
2444 &context, &contextlen);
2445 else
2446 err = -EOPNOTSUPP;
2447 contextsupport = (err == 0);
2448 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
2449 if (err == -EOPNOTSUPP)
2450 bmval2 &= ~FATTR4_WORD2_SECURITY_LABEL;
2451 else if (err)
2452 goto out_nfserr;
2453 }
2454 }
2455 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
2456
2457 status = nfsd4_encode_bitmap(xdr, bmval0, bmval1, bmval2);
2458 if (status)
2459 goto out;
2460
2461 attrlen_offset = xdr->buf->len;
2462 p = xdr_reserve_space(xdr, 4);
2463 if (!p)
2464 goto out_resource;
2465 p++; /* to be backfilled later */
2466
2467 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2468 u32 supp[3];
2469
2470 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
2471
2472 if (!IS_POSIXACL(dentry->d_inode))
2473 supp[0] &= ~FATTR4_WORD0_ACL;
2474 if (!contextsupport)
2475 supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
2476 if (!supp[2]) {
2477 p = xdr_reserve_space(xdr, 12);
2478 if (!p)
2479 goto out_resource;
2480 *p++ = cpu_to_be32(2);
2481 *p++ = cpu_to_be32(supp[0]);
2482 *p++ = cpu_to_be32(supp[1]);
2483 } else {
2484 p = xdr_reserve_space(xdr, 16);
2485 if (!p)
2486 goto out_resource;
2487 *p++ = cpu_to_be32(3);
2488 *p++ = cpu_to_be32(supp[0]);
2489 *p++ = cpu_to_be32(supp[1]);
2490 *p++ = cpu_to_be32(supp[2]);
2491 }
2492 }
2493 if (bmval0 & FATTR4_WORD0_TYPE) {
2494 p = xdr_reserve_space(xdr, 4);
2495 if (!p)
2496 goto out_resource;
2497 dummy = nfs4_file_type(stat.mode);
2498 if (dummy == NF4BAD) {
2499 status = nfserr_serverfault;
2500 goto out;
2501 }
2502 *p++ = cpu_to_be32(dummy);
2503 }
2504 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
2505 p = xdr_reserve_space(xdr, 4);
2506 if (!p)
2507 goto out_resource;
2508 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
2509 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT);
2510 else
2511 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT|
2512 NFS4_FH_VOL_RENAME);
2513 }
2514 if (bmval0 & FATTR4_WORD0_CHANGE) {
2515 p = xdr_reserve_space(xdr, 8);
2516 if (!p)
2517 goto out_resource;
2518 p = encode_change(p, &stat, d_inode(dentry), exp);
2519 }
2520 if (bmval0 & FATTR4_WORD0_SIZE) {
2521 p = xdr_reserve_space(xdr, 8);
2522 if (!p)
2523 goto out_resource;
2524 p = xdr_encode_hyper(p, stat.size);
2525 }
2526 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
2527 p = xdr_reserve_space(xdr, 4);
2528 if (!p)
2529 goto out_resource;
2530 *p++ = cpu_to_be32(1);
2531 }
2532 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
2533 p = xdr_reserve_space(xdr, 4);
2534 if (!p)
2535 goto out_resource;
2536 *p++ = cpu_to_be32(1);
2537 }
2538 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
2539 p = xdr_reserve_space(xdr, 4);
2540 if (!p)
2541 goto out_resource;
2542 *p++ = cpu_to_be32(0);
2543 }
2544 if (bmval0 & FATTR4_WORD0_FSID) {
2545 p = xdr_reserve_space(xdr, 16);
2546 if (!p)
2547 goto out_resource;
2548 if (exp->ex_fslocs.migrated) {
2549 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR);
2550 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR);
2551 } else switch(fsid_source(fhp)) {
2552 case FSIDSOURCE_FSID:
2553 p = xdr_encode_hyper(p, (u64)exp->ex_fsid);
2554 p = xdr_encode_hyper(p, (u64)0);
2555 break;
2556 case FSIDSOURCE_DEV:
2557 *p++ = cpu_to_be32(0);
2558 *p++ = cpu_to_be32(MAJOR(stat.dev));
2559 *p++ = cpu_to_be32(0);
2560 *p++ = cpu_to_be32(MINOR(stat.dev));
2561 break;
2562 case FSIDSOURCE_UUID:
2563 p = xdr_encode_opaque_fixed(p, exp->ex_uuid,
2564 EX_UUID_LEN);
2565 break;
2566 }
2567 }
2568 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
2569 p = xdr_reserve_space(xdr, 4);
2570 if (!p)
2571 goto out_resource;
2572 *p++ = cpu_to_be32(0);
2573 }
2574 if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
2575 p = xdr_reserve_space(xdr, 4);
2576 if (!p)
2577 goto out_resource;
2578 *p++ = cpu_to_be32(nn->nfsd4_lease);
2579 }
2580 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
2581 p = xdr_reserve_space(xdr, 4);
2582 if (!p)
2583 goto out_resource;
2584 *p++ = cpu_to_be32(rdattr_err);
2585 }
2586 if (bmval0 & FATTR4_WORD0_ACL) {
2587 struct nfs4_ace *ace;
2588
2589 if (acl == NULL) {
2590 p = xdr_reserve_space(xdr, 4);
2591 if (!p)
2592 goto out_resource;
2593
2594 *p++ = cpu_to_be32(0);
2595 goto out_acl;
2596 }
2597 p = xdr_reserve_space(xdr, 4);
2598 if (!p)
2599 goto out_resource;
2600 *p++ = cpu_to_be32(acl->naces);
2601
2602 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
2603 p = xdr_reserve_space(xdr, 4*3);
2604 if (!p)
2605 goto out_resource;
2606 *p++ = cpu_to_be32(ace->type);
2607 *p++ = cpu_to_be32(ace->flag);
2608 *p++ = cpu_to_be32(ace->access_mask &
2609 NFS4_ACE_MASK_ALL);
2610 status = nfsd4_encode_aclname(xdr, rqstp, ace);
2611 if (status)
2612 goto out;
2613 }
2614 }
2615 out_acl:
2616 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
2617 p = xdr_reserve_space(xdr, 4);
2618 if (!p)
2619 goto out_resource;
2620 *p++ = cpu_to_be32(IS_POSIXACL(dentry->d_inode) ?
2621 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
2622 }
2623 if (bmval0 & FATTR4_WORD0_CANSETTIME) {
2624 p = xdr_reserve_space(xdr, 4);
2625 if (!p)
2626 goto out_resource;
2627 *p++ = cpu_to_be32(1);
2628 }
2629 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
2630 p = xdr_reserve_space(xdr, 4);
2631 if (!p)
2632 goto out_resource;
2633 *p++ = cpu_to_be32(0);
2634 }
2635 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
2636 p = xdr_reserve_space(xdr, 4);
2637 if (!p)
2638 goto out_resource;
2639 *p++ = cpu_to_be32(1);
2640 }
2641 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
2642 p = xdr_reserve_space(xdr, 4);
2643 if (!p)
2644 goto out_resource;
2645 *p++ = cpu_to_be32(1);
2646 }
2647 if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
2648 p = xdr_reserve_space(xdr, fhp->fh_handle.fh_size + 4);
2649 if (!p)
2650 goto out_resource;
2651 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base,
2652 fhp->fh_handle.fh_size);
2653 }
2654 if (bmval0 & FATTR4_WORD0_FILEID) {
2655 p = xdr_reserve_space(xdr, 8);
2656 if (!p)
2657 goto out_resource;
2658 p = xdr_encode_hyper(p, stat.ino);
2659 }
2660 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
2661 p = xdr_reserve_space(xdr, 8);
2662 if (!p)
2663 goto out_resource;
2664 p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
2665 }
2666 if (bmval0 & FATTR4_WORD0_FILES_FREE) {
2667 p = xdr_reserve_space(xdr, 8);
2668 if (!p)
2669 goto out_resource;
2670 p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
2671 }
2672 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
2673 p = xdr_reserve_space(xdr, 8);
2674 if (!p)
2675 goto out_resource;
2676 p = xdr_encode_hyper(p, (u64) statfs.f_files);
2677 }
2678 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
2679 status = nfsd4_encode_fs_locations(xdr, rqstp, exp);
2680 if (status)
2681 goto out;
2682 }
2683 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
2684 p = xdr_reserve_space(xdr, 4);
2685 if (!p)
2686 goto out_resource;
2687 *p++ = cpu_to_be32(1);
2688 }
2689 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
2690 p = xdr_reserve_space(xdr, 8);
2691 if (!p)
2692 goto out_resource;
2693 p = xdr_encode_hyper(p, exp->ex_path.mnt->mnt_sb->s_maxbytes);
2694 }
2695 if (bmval0 & FATTR4_WORD0_MAXLINK) {
2696 p = xdr_reserve_space(xdr, 4);
2697 if (!p)
2698 goto out_resource;
2699 *p++ = cpu_to_be32(255);
2700 }
2701 if (bmval0 & FATTR4_WORD0_MAXNAME) {
2702 p = xdr_reserve_space(xdr, 4);
2703 if (!p)
2704 goto out_resource;
2705 *p++ = cpu_to_be32(statfs.f_namelen);
2706 }
2707 if (bmval0 & FATTR4_WORD0_MAXREAD) {
2708 p = xdr_reserve_space(xdr, 8);
2709 if (!p)
2710 goto out_resource;
2711 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
2712 }
2713 if (bmval0 & FATTR4_WORD0_MAXWRITE) {
2714 p = xdr_reserve_space(xdr, 8);
2715 if (!p)
2716 goto out_resource;
2717 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
2718 }
2719 if (bmval1 & FATTR4_WORD1_MODE) {
2720 p = xdr_reserve_space(xdr, 4);
2721 if (!p)
2722 goto out_resource;
2723 *p++ = cpu_to_be32(stat.mode & S_IALLUGO);
2724 }
2725 if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
2726 p = xdr_reserve_space(xdr, 4);
2727 if (!p)
2728 goto out_resource;
2729 *p++ = cpu_to_be32(1);
2730 }
2731 if (bmval1 & FATTR4_WORD1_NUMLINKS) {
2732 p = xdr_reserve_space(xdr, 4);
2733 if (!p)
2734 goto out_resource;
2735 *p++ = cpu_to_be32(stat.nlink);
2736 }
2737 if (bmval1 & FATTR4_WORD1_OWNER) {
2738 status = nfsd4_encode_user(xdr, rqstp, stat.uid);
2739 if (status)
2740 goto out;
2741 }
2742 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
2743 status = nfsd4_encode_group(xdr, rqstp, stat.gid);
2744 if (status)
2745 goto out;
2746 }
2747 if (bmval1 & FATTR4_WORD1_RAWDEV) {
2748 p = xdr_reserve_space(xdr, 8);
2749 if (!p)
2750 goto out_resource;
2751 *p++ = cpu_to_be32((u32) MAJOR(stat.rdev));
2752 *p++ = cpu_to_be32((u32) MINOR(stat.rdev));
2753 }
2754 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
2755 p = xdr_reserve_space(xdr, 8);
2756 if (!p)
2757 goto out_resource;
2758 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
2759 p = xdr_encode_hyper(p, dummy64);
2760 }
2761 if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
2762 p = xdr_reserve_space(xdr, 8);
2763 if (!p)
2764 goto out_resource;
2765 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
2766 p = xdr_encode_hyper(p, dummy64);
2767 }
2768 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
2769 p = xdr_reserve_space(xdr, 8);
2770 if (!p)
2771 goto out_resource;
2772 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
2773 p = xdr_encode_hyper(p, dummy64);
2774 }
2775 if (bmval1 & FATTR4_WORD1_SPACE_USED) {
2776 p = xdr_reserve_space(xdr, 8);
2777 if (!p)
2778 goto out_resource;
2779 dummy64 = (u64)stat.blocks << 9;
2780 p = xdr_encode_hyper(p, dummy64);
2781 }
2782 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
2783 p = xdr_reserve_space(xdr, 12);
2784 if (!p)
2785 goto out_resource;
2786 p = xdr_encode_hyper(p, (s64)stat.atime.tv_sec);
2787 *p++ = cpu_to_be32(stat.atime.tv_nsec);
2788 }
2789 if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
2790 p = xdr_reserve_space(xdr, 12);
2791 if (!p)
2792 goto out_resource;
2793 *p++ = cpu_to_be32(0);
2794 *p++ = cpu_to_be32(1);
2795 *p++ = cpu_to_be32(0);
2796 }
2797 if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
2798 p = xdr_reserve_space(xdr, 12);
2799 if (!p)
2800 goto out_resource;
2801 p = xdr_encode_hyper(p, (s64)stat.ctime.tv_sec);
2802 *p++ = cpu_to_be32(stat.ctime.tv_nsec);
2803 }
2804 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
2805 p = xdr_reserve_space(xdr, 12);
2806 if (!p)
2807 goto out_resource;
2808 p = xdr_encode_hyper(p, (s64)stat.mtime.tv_sec);
2809 *p++ = cpu_to_be32(stat.mtime.tv_nsec);
2810 }
2811 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
2812 struct kstat parent_stat;
2813 u64 ino = stat.ino;
2814
2815 p = xdr_reserve_space(xdr, 8);
2816 if (!p)
2817 goto out_resource;
2818 /*
2819 * Get parent's attributes if not ignoring crossmount
2820 * and this is the root of a cross-mounted filesystem.
2821 */
2822 if (ignore_crossmnt == 0 &&
2823 dentry == exp->ex_path.mnt->mnt_root) {
2824 err = get_parent_attributes(exp, &parent_stat);
2825 if (err)
2826 goto out_nfserr;
2827 ino = parent_stat.ino;
2828 }
2829 p = xdr_encode_hyper(p, ino);
2830 }
2831 #ifdef CONFIG_NFSD_PNFS
2832 if (bmval1 & FATTR4_WORD1_FS_LAYOUT_TYPES) {
2833 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types);
2834 if (status)
2835 goto out;
2836 }
2837
2838 if (bmval2 & FATTR4_WORD2_LAYOUT_TYPES) {
2839 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types);
2840 if (status)
2841 goto out;
2842 }
2843
2844 if (bmval2 & FATTR4_WORD2_LAYOUT_BLKSIZE) {
2845 p = xdr_reserve_space(xdr, 4);
2846 if (!p)
2847 goto out_resource;
2848 *p++ = cpu_to_be32(stat.blksize);
2849 }
2850 #endif /* CONFIG_NFSD_PNFS */
2851 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
2852 u32 supp[3];
2853
2854 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
2855 supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0;
2856 supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1;
2857 supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2;
2858
2859 status = nfsd4_encode_bitmap(xdr, supp[0], supp[1], supp[2]);
2860 if (status)
2861 goto out;
2862 }
2863
2864 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
2865 status = nfsd4_encode_security_label(xdr, rqstp, context,
2866 contextlen);
2867 if (status)
2868 goto out;
2869 }
2870
2871 attrlen = htonl(xdr->buf->len - attrlen_offset - 4);
2872 write_bytes_to_xdr_buf(xdr->buf, attrlen_offset, &attrlen, 4);
2873 status = nfs_ok;
2874
2875 out:
2876 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2877 if (context)
2878 security_release_secctx(context, contextlen);
2879 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
2880 kfree(acl);
2881 if (tempfh) {
2882 fh_put(tempfh);
2883 kfree(tempfh);
2884 }
2885 if (status)
2886 xdr_truncate_encode(xdr, starting_len);
2887 return status;
2888 out_nfserr:
2889 status = nfserrno(err);
2890 goto out;
2891 out_resource:
2892 status = nfserr_resource;
2893 goto out;
2894 }
2895
2896 static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr,
2897 struct xdr_buf *buf, __be32 *p, int bytes)
2898 {
2899 xdr->scratch.iov_len = 0;
2900 memset(buf, 0, sizeof(struct xdr_buf));
2901 buf->head[0].iov_base = p;
2902 buf->head[0].iov_len = 0;
2903 buf->len = 0;
2904 xdr->buf = buf;
2905 xdr->iov = buf->head;
2906 xdr->p = p;
2907 xdr->end = (void *)p + bytes;
2908 buf->buflen = bytes;
2909 }
2910
2911 __be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words,
2912 struct svc_fh *fhp, struct svc_export *exp,
2913 struct dentry *dentry, u32 *bmval,
2914 struct svc_rqst *rqstp, int ignore_crossmnt)
2915 {
2916 struct xdr_buf dummy;
2917 struct xdr_stream xdr;
2918 __be32 ret;
2919
2920 svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2);
2921 ret = nfsd4_encode_fattr(&xdr, fhp, exp, dentry, bmval, rqstp,
2922 ignore_crossmnt);
2923 *p = xdr.p;
2924 return ret;
2925 }
2926
2927 static inline int attributes_need_mount(u32 *bmval)
2928 {
2929 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
2930 return 1;
2931 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
2932 return 1;
2933 return 0;
2934 }
2935
2936 static __be32
2937 nfsd4_encode_dirent_fattr(struct xdr_stream *xdr, struct nfsd4_readdir *cd,
2938 const char *name, int namlen)
2939 {
2940 struct svc_export *exp = cd->rd_fhp->fh_export;
2941 struct dentry *dentry;
2942 __be32 nfserr;
2943 int ignore_crossmnt = 0;
2944
2945 dentry = lookup_one_len_unlocked(name, cd->rd_fhp->fh_dentry, namlen);
2946 if (IS_ERR(dentry))
2947 return nfserrno(PTR_ERR(dentry));
2948 if (d_really_is_negative(dentry)) {
2949 /*
2950 * we're not holding the i_mutex here, so there's
2951 * a window where this directory entry could have gone
2952 * away.
2953 */
2954 dput(dentry);
2955 return nfserr_noent;
2956 }
2957
2958 exp_get(exp);
2959 /*
2960 * In the case of a mountpoint, the client may be asking for
2961 * attributes that are only properties of the underlying filesystem
2962 * as opposed to the cross-mounted file system. In such a case,
2963 * we will not follow the cross mount and will fill the attribtutes
2964 * directly from the mountpoint dentry.
2965 */
2966 if (nfsd_mountpoint(dentry, exp)) {
2967 int err;
2968
2969 if (!(exp->ex_flags & NFSEXP_V4ROOT)
2970 && !attributes_need_mount(cd->rd_bmval)) {
2971 ignore_crossmnt = 1;
2972 goto out_encode;
2973 }
2974 /*
2975 * Why the heck aren't we just using nfsd_lookup??
2976 * Different "."/".." handling? Something else?
2977 * At least, add a comment here to explain....
2978 */
2979 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
2980 if (err) {
2981 nfserr = nfserrno(err);
2982 goto out_put;
2983 }
2984 nfserr = check_nfsd_access(exp, cd->rd_rqstp);
2985 if (nfserr)
2986 goto out_put;
2987
2988 }
2989 out_encode:
2990 nfserr = nfsd4_encode_fattr(xdr, NULL, exp, dentry, cd->rd_bmval,
2991 cd->rd_rqstp, ignore_crossmnt);
2992 out_put:
2993 dput(dentry);
2994 exp_put(exp);
2995 return nfserr;
2996 }
2997
2998 static __be32 *
2999 nfsd4_encode_rdattr_error(struct xdr_stream *xdr, __be32 nfserr)
3000 {
3001 __be32 *p;
3002
3003 p = xdr_reserve_space(xdr, 20);
3004 if (!p)
3005 return NULL;
3006 *p++ = htonl(2);
3007 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
3008 *p++ = htonl(0); /* bmval1 */
3009
3010 *p++ = htonl(4); /* attribute length */
3011 *p++ = nfserr; /* no htonl */
3012 return p;
3013 }
3014
3015 static int
3016 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
3017 loff_t offset, u64 ino, unsigned int d_type)
3018 {
3019 struct readdir_cd *ccd = ccdv;
3020 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
3021 struct xdr_stream *xdr = cd->xdr;
3022 int start_offset = xdr->buf->len;
3023 int cookie_offset;
3024 u32 name_and_cookie;
3025 int entry_bytes;
3026 __be32 nfserr = nfserr_toosmall;
3027 __be64 wire_offset;
3028 __be32 *p;
3029
3030 /* In nfsv4, "." and ".." never make it onto the wire.. */
3031 if (name && isdotent(name, namlen)) {
3032 cd->common.err = nfs_ok;
3033 return 0;
3034 }
3035
3036 if (cd->cookie_offset) {
3037 wire_offset = cpu_to_be64(offset);
3038 write_bytes_to_xdr_buf(xdr->buf, cd->cookie_offset,
3039 &wire_offset, 8);
3040 }
3041
3042 p = xdr_reserve_space(xdr, 4);
3043 if (!p)
3044 goto fail;
3045 *p++ = xdr_one; /* mark entry present */
3046 cookie_offset = xdr->buf->len;
3047 p = xdr_reserve_space(xdr, 3*4 + namlen);
3048 if (!p)
3049 goto fail;
3050 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */
3051 p = xdr_encode_array(p, name, namlen); /* name length & name */
3052
3053 nfserr = nfsd4_encode_dirent_fattr(xdr, cd, name, namlen);
3054 switch (nfserr) {
3055 case nfs_ok:
3056 break;
3057 case nfserr_resource:
3058 nfserr = nfserr_toosmall;
3059 goto fail;
3060 case nfserr_noent:
3061 xdr_truncate_encode(xdr, start_offset);
3062 goto skip_entry;
3063 default:
3064 /*
3065 * If the client requested the RDATTR_ERROR attribute,
3066 * we stuff the error code into this attribute
3067 * and continue. If this attribute was not requested,
3068 * then in accordance with the spec, we fail the
3069 * entire READDIR operation(!)
3070 */
3071 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
3072 goto fail;
3073 p = nfsd4_encode_rdattr_error(xdr, nfserr);
3074 if (p == NULL) {
3075 nfserr = nfserr_toosmall;
3076 goto fail;
3077 }
3078 }
3079 nfserr = nfserr_toosmall;
3080 entry_bytes = xdr->buf->len - start_offset;
3081 if (entry_bytes > cd->rd_maxcount)
3082 goto fail;
3083 cd->rd_maxcount -= entry_bytes;
3084 /*
3085 * RFC 3530 14.2.24 describes rd_dircount as only a "hint", so
3086 * let's always let through the first entry, at least:
3087 */
3088 if (!cd->rd_dircount)
3089 goto fail;
3090 name_and_cookie = 4 + 4 * XDR_QUADLEN(namlen) + 8;
3091 if (name_and_cookie > cd->rd_dircount && cd->cookie_offset)
3092 goto fail;
3093 cd->rd_dircount -= min(cd->rd_dircount, name_and_cookie);
3094
3095 cd->cookie_offset = cookie_offset;
3096 skip_entry:
3097 cd->common.err = nfs_ok;
3098 return 0;
3099 fail:
3100 xdr_truncate_encode(xdr, start_offset);
3101 cd->common.err = nfserr;
3102 return -EINVAL;
3103 }
3104
3105 static __be32
3106 nfsd4_encode_stateid(struct xdr_stream *xdr, stateid_t *sid)
3107 {
3108 __be32 *p;
3109
3110 p = xdr_reserve_space(xdr, sizeof(stateid_t));
3111 if (!p)
3112 return nfserr_resource;
3113 *p++ = cpu_to_be32(sid->si_generation);
3114 p = xdr_encode_opaque_fixed(p, &sid->si_opaque,
3115 sizeof(stateid_opaque_t));
3116 return 0;
3117 }
3118
3119 static __be32
3120 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
3121 {
3122 struct xdr_stream *xdr = &resp->xdr;
3123 __be32 *p;
3124
3125 p = xdr_reserve_space(xdr, 8);
3126 if (!p)
3127 return nfserr_resource;
3128 *p++ = cpu_to_be32(access->ac_supported);
3129 *p++ = cpu_to_be32(access->ac_resp_access);
3130 return 0;
3131 }
3132
3133 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts)
3134 {
3135 struct xdr_stream *xdr = &resp->xdr;
3136 __be32 *p;
3137
3138 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 8);
3139 if (!p)
3140 return nfserr_resource;
3141 p = xdr_encode_opaque_fixed(p, bcts->sessionid.data,
3142 NFS4_MAX_SESSIONID_LEN);
3143 *p++ = cpu_to_be32(bcts->dir);
3144 /* Upshifting from TCP to RDMA is not supported */
3145 *p++ = cpu_to_be32(0);
3146 return 0;
3147 }
3148
3149 static __be32
3150 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
3151 {
3152 struct xdr_stream *xdr = &resp->xdr;
3153
3154 return nfsd4_encode_stateid(xdr, &close->cl_stateid);
3155 }
3156
3157
3158 static __be32
3159 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
3160 {
3161 struct xdr_stream *xdr = &resp->xdr;
3162 __be32 *p;
3163
3164 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
3165 if (!p)
3166 return nfserr_resource;
3167 p = xdr_encode_opaque_fixed(p, commit->co_verf.data,
3168 NFS4_VERIFIER_SIZE);
3169 return 0;
3170 }
3171
3172 static __be32
3173 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
3174 {
3175 struct xdr_stream *xdr = &resp->xdr;
3176 __be32 *p;
3177
3178 p = xdr_reserve_space(xdr, 20);
3179 if (!p)
3180 return nfserr_resource;
3181 encode_cinfo(p, &create->cr_cinfo);
3182 nfserr = nfsd4_encode_bitmap(xdr, create->cr_bmval[0],
3183 create->cr_bmval[1], create->cr_bmval[2]);
3184 return 0;
3185 }
3186
3187 static __be32
3188 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
3189 {
3190 struct svc_fh *fhp = getattr->ga_fhp;
3191 struct xdr_stream *xdr = &resp->xdr;
3192
3193 return nfsd4_encode_fattr(xdr, fhp, fhp->fh_export, fhp->fh_dentry,
3194 getattr->ga_bmval, resp->rqstp, 0);
3195 }
3196
3197 static __be32
3198 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
3199 {
3200 struct xdr_stream *xdr = &resp->xdr;
3201 struct svc_fh *fhp = *fhpp;
3202 unsigned int len;
3203 __be32 *p;
3204
3205 len = fhp->fh_handle.fh_size;
3206 p = xdr_reserve_space(xdr, len + 4);
3207 if (!p)
3208 return nfserr_resource;
3209 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, len);
3210 return 0;
3211 }
3212
3213 /*
3214 * Including all fields other than the name, a LOCK4denied structure requires
3215 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
3216 */
3217 static __be32
3218 nfsd4_encode_lock_denied(struct xdr_stream *xdr, struct nfsd4_lock_denied *ld)
3219 {
3220 struct xdr_netobj *conf = &ld->ld_owner;
3221 __be32 *p;
3222
3223 again:
3224 p = xdr_reserve_space(xdr, 32 + XDR_LEN(conf->len));
3225 if (!p) {
3226 /*
3227 * Don't fail to return the result just because we can't
3228 * return the conflicting open:
3229 */
3230 if (conf->len) {
3231 kfree(conf->data);
3232 conf->len = 0;
3233 conf->data = NULL;
3234 goto again;
3235 }
3236 return nfserr_resource;
3237 }
3238 p = xdr_encode_hyper(p, ld->ld_start);
3239 p = xdr_encode_hyper(p, ld->ld_length);
3240 *p++ = cpu_to_be32(ld->ld_type);
3241 if (conf->len) {
3242 p = xdr_encode_opaque_fixed(p, &ld->ld_clientid, 8);
3243 p = xdr_encode_opaque(p, conf->data, conf->len);
3244 kfree(conf->data);
3245 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */
3246 p = xdr_encode_hyper(p, (u64)0); /* clientid */
3247 *p++ = cpu_to_be32(0); /* length of owner name */
3248 }
3249 return nfserr_denied;
3250 }
3251
3252 static __be32
3253 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
3254 {
3255 struct xdr_stream *xdr = &resp->xdr;
3256
3257 if (!nfserr)
3258 nfserr = nfsd4_encode_stateid(xdr, &lock->lk_resp_stateid);
3259 else if (nfserr == nfserr_denied)
3260 nfserr = nfsd4_encode_lock_denied(xdr, &lock->lk_denied);
3261
3262 return nfserr;
3263 }
3264
3265 static __be32
3266 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
3267 {
3268 struct xdr_stream *xdr = &resp->xdr;
3269
3270 if (nfserr == nfserr_denied)
3271 nfsd4_encode_lock_denied(xdr, &lockt->lt_denied);
3272 return nfserr;
3273 }
3274
3275 static __be32
3276 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
3277 {
3278 struct xdr_stream *xdr = &resp->xdr;
3279
3280 return nfsd4_encode_stateid(xdr, &locku->lu_stateid);
3281 }
3282
3283
3284 static __be32
3285 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
3286 {
3287 struct xdr_stream *xdr = &resp->xdr;
3288 __be32 *p;
3289
3290 p = xdr_reserve_space(xdr, 20);
3291 if (!p)
3292 return nfserr_resource;
3293 p = encode_cinfo(p, &link->li_cinfo);
3294 return 0;
3295 }
3296
3297
3298 static __be32
3299 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
3300 {
3301 struct xdr_stream *xdr = &resp->xdr;
3302 __be32 *p;
3303
3304 nfserr = nfsd4_encode_stateid(xdr, &open->op_stateid);
3305 if (nfserr)
3306 return nfserr;
3307 p = xdr_reserve_space(xdr, 24);
3308 if (!p)
3309 return nfserr_resource;
3310 p = encode_cinfo(p, &open->op_cinfo);
3311 *p++ = cpu_to_be32(open->op_rflags);
3312
3313 nfserr = nfsd4_encode_bitmap(xdr, open->op_bmval[0], open->op_bmval[1],
3314 open->op_bmval[2]);
3315 if (nfserr)
3316 return nfserr;
3317
3318 p = xdr_reserve_space(xdr, 4);
3319 if (!p)
3320 return nfserr_resource;
3321
3322 *p++ = cpu_to_be32(open->op_delegate_type);
3323 switch (open->op_delegate_type) {
3324 case NFS4_OPEN_DELEGATE_NONE:
3325 break;
3326 case NFS4_OPEN_DELEGATE_READ:
3327 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
3328 if (nfserr)
3329 return nfserr;
3330 p = xdr_reserve_space(xdr, 20);
3331 if (!p)
3332 return nfserr_resource;
3333 *p++ = cpu_to_be32(open->op_recall);
3334
3335 /*
3336 * TODO: ACE's in delegations
3337 */
3338 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
3339 *p++ = cpu_to_be32(0);
3340 *p++ = cpu_to_be32(0);
3341 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */
3342 break;
3343 case NFS4_OPEN_DELEGATE_WRITE:
3344 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
3345 if (nfserr)
3346 return nfserr;
3347 p = xdr_reserve_space(xdr, 32);
3348 if (!p)
3349 return nfserr_resource;
3350 *p++ = cpu_to_be32(0);
3351
3352 /*
3353 * TODO: space_limit's in delegations
3354 */
3355 *p++ = cpu_to_be32(NFS4_LIMIT_SIZE);
3356 *p++ = cpu_to_be32(~(u32)0);
3357 *p++ = cpu_to_be32(~(u32)0);
3358
3359 /*
3360 * TODO: ACE's in delegations
3361 */
3362 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
3363 *p++ = cpu_to_be32(0);
3364 *p++ = cpu_to_be32(0);
3365 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */
3366 break;
3367 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */
3368 switch (open->op_why_no_deleg) {
3369 case WND4_CONTENTION:
3370 case WND4_RESOURCE:
3371 p = xdr_reserve_space(xdr, 8);
3372 if (!p)
3373 return nfserr_resource;
3374 *p++ = cpu_to_be32(open->op_why_no_deleg);
3375 /* deleg signaling not supported yet: */
3376 *p++ = cpu_to_be32(0);
3377 break;
3378 default:
3379 p = xdr_reserve_space(xdr, 4);
3380 if (!p)
3381 return nfserr_resource;
3382 *p++ = cpu_to_be32(open->op_why_no_deleg);
3383 }
3384 break;
3385 default:
3386 BUG();
3387 }
3388 /* XXX save filehandle here */
3389 return 0;
3390 }
3391
3392 static __be32
3393 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
3394 {
3395 struct xdr_stream *xdr = &resp->xdr;
3396
3397 return nfsd4_encode_stateid(xdr, &oc->oc_resp_stateid);
3398 }
3399
3400 static __be32
3401 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
3402 {
3403 struct xdr_stream *xdr = &resp->xdr;
3404
3405 return nfsd4_encode_stateid(xdr, &od->od_stateid);
3406 }
3407
3408 static __be32 nfsd4_encode_splice_read(
3409 struct nfsd4_compoundres *resp,
3410 struct nfsd4_read *read,
3411 struct file *file, unsigned long maxcount)
3412 {
3413 struct xdr_stream *xdr = &resp->xdr;
3414 struct xdr_buf *buf = xdr->buf;
3415 u32 eof;
3416 long len;
3417 int space_left;
3418 __be32 nfserr;
3419 __be32 *p = xdr->p - 2;
3420
3421 /* Make sure there will be room for padding if needed */
3422 if (xdr->end - xdr->p < 1)
3423 return nfserr_resource;
3424
3425 len = maxcount;
3426 nfserr = nfsd_splice_read(read->rd_rqstp, file,
3427 read->rd_offset, &maxcount);
3428 if (nfserr) {
3429 /*
3430 * nfsd_splice_actor may have already messed with the
3431 * page length; reset it so as not to confuse
3432 * xdr_truncate_encode:
3433 */
3434 buf->page_len = 0;
3435 return nfserr;
3436 }
3437
3438 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset,
3439 d_inode(read->rd_fhp->fh_dentry)->i_size);
3440
3441 *(p++) = htonl(eof);
3442 *(p++) = htonl(maxcount);
3443
3444 buf->page_len = maxcount;
3445 buf->len += maxcount;
3446 xdr->page_ptr += (buf->page_base + maxcount + PAGE_SIZE - 1)
3447 / PAGE_SIZE;
3448
3449 /* Use rest of head for padding and remaining ops: */
3450 buf->tail[0].iov_base = xdr->p;
3451 buf->tail[0].iov_len = 0;
3452 xdr->iov = buf->tail;
3453 if (maxcount&3) {
3454 int pad = 4 - (maxcount&3);
3455
3456 *(xdr->p++) = 0;
3457
3458 buf->tail[0].iov_base += maxcount&3;
3459 buf->tail[0].iov_len = pad;
3460 buf->len += pad;
3461 }
3462
3463 space_left = min_t(int, (void *)xdr->end - (void *)xdr->p,
3464 buf->buflen - buf->len);
3465 buf->buflen = buf->len + space_left;
3466 xdr->end = (__be32 *)((void *)xdr->end + space_left);
3467
3468 return 0;
3469 }
3470
3471 static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp,
3472 struct nfsd4_read *read,
3473 struct file *file, unsigned long maxcount)
3474 {
3475 struct xdr_stream *xdr = &resp->xdr;
3476 u32 eof;
3477 int v;
3478 int starting_len = xdr->buf->len - 8;
3479 long len;
3480 int thislen;
3481 __be32 nfserr;
3482 __be32 tmp;
3483 __be32 *p;
3484 u32 zzz = 0;
3485 int pad;
3486
3487 len = maxcount;
3488 v = 0;
3489
3490 thislen = min_t(long, len, ((void *)xdr->end - (void *)xdr->p));
3491 p = xdr_reserve_space(xdr, (thislen+3)&~3);
3492 WARN_ON_ONCE(!p);
3493 resp->rqstp->rq_vec[v].iov_base = p;
3494 resp->rqstp->rq_vec[v].iov_len = thislen;
3495 v++;
3496 len -= thislen;
3497
3498 while (len) {
3499 thislen = min_t(long, len, PAGE_SIZE);
3500 p = xdr_reserve_space(xdr, (thislen+3)&~3);
3501 WARN_ON_ONCE(!p);
3502 resp->rqstp->rq_vec[v].iov_base = p;
3503 resp->rqstp->rq_vec[v].iov_len = thislen;
3504 v++;
3505 len -= thislen;
3506 }
3507 read->rd_vlen = v;
3508
3509 len = maxcount;
3510 nfserr = nfsd_readv(file, read->rd_offset, resp->rqstp->rq_vec,
3511 read->rd_vlen, &maxcount);
3512 if (nfserr)
3513 return nfserr;
3514 xdr_truncate_encode(xdr, starting_len + 8 + ((maxcount+3)&~3));
3515
3516 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset,
3517 d_inode(read->rd_fhp->fh_dentry)->i_size);
3518
3519 tmp = htonl(eof);
3520 write_bytes_to_xdr_buf(xdr->buf, starting_len , &tmp, 4);
3521 tmp = htonl(maxcount);
3522 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4);
3523
3524 pad = (maxcount&3) ? 4 - (maxcount&3) : 0;
3525 write_bytes_to_xdr_buf(xdr->buf, starting_len + 8 + maxcount,
3526 &zzz, pad);
3527 return 0;
3528
3529 }
3530
3531 static __be32
3532 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
3533 struct nfsd4_read *read)
3534 {
3535 unsigned long maxcount;
3536 struct xdr_stream *xdr = &resp->xdr;
3537 struct file *file = read->rd_filp;
3538 int starting_len = xdr->buf->len;
3539 struct raparms *ra = NULL;
3540 __be32 *p;
3541
3542 p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */
3543 if (!p) {
3544 WARN_ON_ONCE(test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags));
3545 return nfserr_resource;
3546 }
3547 if (resp->xdr.buf->page_len &&
3548 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) {
3549 WARN_ON_ONCE(1);
3550 return nfserr_resource;
3551 }
3552 xdr_commit_encode(xdr);
3553
3554 maxcount = svc_max_payload(resp->rqstp);
3555 maxcount = min_t(unsigned long, maxcount,
3556 (xdr->buf->buflen - xdr->buf->len));
3557 maxcount = min_t(unsigned long, maxcount, read->rd_length);
3558
3559 if (read->rd_tmp_file)
3560 ra = nfsd_init_raparms(file);
3561
3562 if (file->f_op->splice_read &&
3563 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags))
3564 nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount);
3565 else
3566 nfserr = nfsd4_encode_readv(resp, read, file, maxcount);
3567
3568 if (ra)
3569 nfsd_put_raparams(file, ra);
3570
3571 if (nfserr)
3572 xdr_truncate_encode(xdr, starting_len);
3573
3574 return nfserr;
3575 }
3576
3577 static __be32
3578 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
3579 {
3580 int maxcount;
3581 __be32 wire_count;
3582 int zero = 0;
3583 struct xdr_stream *xdr = &resp->xdr;
3584 int length_offset = xdr->buf->len;
3585 __be32 *p;
3586
3587 p = xdr_reserve_space(xdr, 4);
3588 if (!p)
3589 return nfserr_resource;
3590 maxcount = PAGE_SIZE;
3591
3592 p = xdr_reserve_space(xdr, maxcount);
3593 if (!p)
3594 return nfserr_resource;
3595 /*
3596 * XXX: By default, vfs_readlink() will truncate symlinks if they
3597 * would overflow the buffer. Is this kosher in NFSv4? If not, one
3598 * easy fix is: if vfs_readlink() precisely fills the buffer, assume
3599 * that truncation occurred, and return NFS4ERR_RESOURCE.
3600 */
3601 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp,
3602 (char *)p, &maxcount);
3603 if (nfserr == nfserr_isdir)
3604 nfserr = nfserr_inval;
3605 if (nfserr) {
3606 xdr_truncate_encode(xdr, length_offset);
3607 return nfserr;
3608 }
3609
3610 wire_count = htonl(maxcount);
3611 write_bytes_to_xdr_buf(xdr->buf, length_offset, &wire_count, 4);
3612 xdr_truncate_encode(xdr, length_offset + 4 + ALIGN(maxcount, 4));
3613 if (maxcount & 3)
3614 write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount,
3615 &zero, 4 - (maxcount&3));
3616 return 0;
3617 }
3618
3619 static __be32
3620 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
3621 {
3622 int maxcount;
3623 int bytes_left;
3624 loff_t offset;
3625 __be64 wire_offset;
3626 struct xdr_stream *xdr = &resp->xdr;
3627 int starting_len = xdr->buf->len;
3628 __be32 *p;
3629
3630 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
3631 if (!p)
3632 return nfserr_resource;
3633
3634 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
3635 *p++ = cpu_to_be32(0);
3636 *p++ = cpu_to_be32(0);
3637 resp->xdr.buf->head[0].iov_len = ((char *)resp->xdr.p)
3638 - (char *)resp->xdr.buf->head[0].iov_base;
3639
3640 /*
3641 * Number of bytes left for directory entries allowing for the
3642 * final 8 bytes of the readdir and a following failed op:
3643 */
3644 bytes_left = xdr->buf->buflen - xdr->buf->len
3645 - COMPOUND_ERR_SLACK_SPACE - 8;
3646 if (bytes_left < 0) {
3647 nfserr = nfserr_resource;
3648 goto err_no_verf;
3649 }
3650 maxcount = min_t(u32, readdir->rd_maxcount, INT_MAX);
3651 /*
3652 * Note the rfc defines rd_maxcount as the size of the
3653 * READDIR4resok structure, which includes the verifier above
3654 * and the 8 bytes encoded at the end of this function:
3655 */
3656 if (maxcount < 16) {
3657 nfserr = nfserr_toosmall;
3658 goto err_no_verf;
3659 }
3660 maxcount = min_t(int, maxcount-16, bytes_left);
3661
3662 /* RFC 3530 14.2.24 allows us to ignore dircount when it's 0: */
3663 if (!readdir->rd_dircount)
3664 readdir->rd_dircount = INT_MAX;
3665
3666 readdir->xdr = xdr;
3667 readdir->rd_maxcount = maxcount;
3668 readdir->common.err = 0;
3669 readdir->cookie_offset = 0;
3670
3671 offset = readdir->rd_cookie;
3672 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
3673 &offset,
3674 &readdir->common, nfsd4_encode_dirent);
3675 if (nfserr == nfs_ok &&
3676 readdir->common.err == nfserr_toosmall &&
3677 xdr->buf->len == starting_len + 8) {
3678 /* nothing encoded; which limit did we hit?: */
3679 if (maxcount - 16 < bytes_left)
3680 /* It was the fault of rd_maxcount: */
3681 nfserr = nfserr_toosmall;
3682 else
3683 /* We ran out of buffer space: */
3684 nfserr = nfserr_resource;
3685 }
3686 if (nfserr)
3687 goto err_no_verf;
3688
3689 if (readdir->cookie_offset) {
3690 wire_offset = cpu_to_be64(offset);
3691 write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset,
3692 &wire_offset, 8);
3693 }
3694
3695 p = xdr_reserve_space(xdr, 8);
3696 if (!p) {
3697 WARN_ON_ONCE(1);
3698 goto err_no_verf;
3699 }
3700 *p++ = 0; /* no more entries */
3701 *p++ = htonl(readdir->common.err == nfserr_eof);
3702
3703 return 0;
3704 err_no_verf:
3705 xdr_truncate_encode(xdr, starting_len);
3706 return nfserr;
3707 }
3708
3709 static __be32
3710 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
3711 {
3712 struct xdr_stream *xdr = &resp->xdr;
3713 __be32 *p;
3714
3715 p = xdr_reserve_space(xdr, 20);
3716 if (!p)
3717 return nfserr_resource;
3718 p = encode_cinfo(p, &remove->rm_cinfo);
3719 return 0;
3720 }
3721
3722 static __be32
3723 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
3724 {
3725 struct xdr_stream *xdr = &resp->xdr;
3726 __be32 *p;
3727
3728 p = xdr_reserve_space(xdr, 40);
3729 if (!p)
3730 return nfserr_resource;
3731 p = encode_cinfo(p, &rename->rn_sinfo);
3732 p = encode_cinfo(p, &rename->rn_tinfo);
3733 return 0;
3734 }
3735
3736 static __be32
3737 nfsd4_do_encode_secinfo(struct xdr_stream *xdr, struct svc_export *exp)
3738 {
3739 u32 i, nflavs, supported;
3740 struct exp_flavor_info *flavs;
3741 struct exp_flavor_info def_flavs[2];
3742 __be32 *p, *flavorsp;
3743 static bool report = true;
3744
3745 if (exp->ex_nflavors) {
3746 flavs = exp->ex_flavors;
3747 nflavs = exp->ex_nflavors;
3748 } else { /* Handling of some defaults in absence of real secinfo: */
3749 flavs = def_flavs;
3750 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
3751 nflavs = 2;
3752 flavs[0].pseudoflavor = RPC_AUTH_UNIX;
3753 flavs[1].pseudoflavor = RPC_AUTH_NULL;
3754 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
3755 nflavs = 1;
3756 flavs[0].pseudoflavor
3757 = svcauth_gss_flavor(exp->ex_client);
3758 } else {
3759 nflavs = 1;
3760 flavs[0].pseudoflavor
3761 = exp->ex_client->flavour->flavour;
3762 }
3763 }
3764
3765 supported = 0;
3766 p = xdr_reserve_space(xdr, 4);
3767 if (!p)
3768 return nfserr_resource;
3769 flavorsp = p++; /* to be backfilled later */
3770
3771 for (i = 0; i < nflavs; i++) {
3772 rpc_authflavor_t pf = flavs[i].pseudoflavor;
3773 struct rpcsec_gss_info info;
3774
3775 if (rpcauth_get_gssinfo(pf, &info) == 0) {
3776 supported++;
3777 p = xdr_reserve_space(xdr, 4 + 4 +
3778 XDR_LEN(info.oid.len) + 4 + 4);
3779 if (!p)
3780 return nfserr_resource;
3781 *p++ = cpu_to_be32(RPC_AUTH_GSS);
3782 p = xdr_encode_opaque(p, info.oid.data, info.oid.len);
3783 *p++ = cpu_to_be32(info.qop);
3784 *p++ = cpu_to_be32(info.service);
3785 } else if (pf < RPC_AUTH_MAXFLAVOR) {
3786 supported++;
3787 p = xdr_reserve_space(xdr, 4);
3788 if (!p)
3789 return nfserr_resource;
3790 *p++ = cpu_to_be32(pf);
3791 } else {
3792 if (report)
3793 pr_warn("NFS: SECINFO: security flavor %u "
3794 "is not supported\n", pf);
3795 }
3796 }
3797
3798 if (nflavs != supported)
3799 report = false;
3800 *flavorsp = htonl(supported);
3801 return 0;
3802 }
3803
3804 static __be32
3805 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
3806 struct nfsd4_secinfo *secinfo)
3807 {
3808 struct xdr_stream *xdr = &resp->xdr;
3809
3810 return nfsd4_do_encode_secinfo(xdr, secinfo->si_exp);
3811 }
3812
3813 static __be32
3814 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
3815 struct nfsd4_secinfo_no_name *secinfo)
3816 {
3817 struct xdr_stream *xdr = &resp->xdr;
3818
3819 return nfsd4_do_encode_secinfo(xdr, secinfo->sin_exp);
3820 }
3821
3822 /*
3823 * The SETATTR encode routine is special -- it always encodes a bitmap,
3824 * regardless of the error status.
3825 */
3826 static __be32
3827 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
3828 {
3829 struct xdr_stream *xdr = &resp->xdr;
3830 __be32 *p;
3831
3832 p = xdr_reserve_space(xdr, 16);
3833 if (!p)
3834 return nfserr_resource;
3835 if (nfserr) {
3836 *p++ = cpu_to_be32(3);
3837 *p++ = cpu_to_be32(0);
3838 *p++ = cpu_to_be32(0);
3839 *p++ = cpu_to_be32(0);
3840 }
3841 else {
3842 *p++ = cpu_to_be32(3);
3843 *p++ = cpu_to_be32(setattr->sa_bmval[0]);
3844 *p++ = cpu_to_be32(setattr->sa_bmval[1]);
3845 *p++ = cpu_to_be32(setattr->sa_bmval[2]);
3846 }
3847 return nfserr;
3848 }
3849
3850 static __be32
3851 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
3852 {
3853 struct xdr_stream *xdr = &resp->xdr;
3854 __be32 *p;
3855
3856 if (!nfserr) {
3857 p = xdr_reserve_space(xdr, 8 + NFS4_VERIFIER_SIZE);
3858 if (!p)
3859 return nfserr_resource;
3860 p = xdr_encode_opaque_fixed(p, &scd->se_clientid, 8);
3861 p = xdr_encode_opaque_fixed(p, &scd->se_confirm,
3862 NFS4_VERIFIER_SIZE);
3863 }
3864 else if (nfserr == nfserr_clid_inuse) {
3865 p = xdr_reserve_space(xdr, 8);
3866 if (!p)
3867 return nfserr_resource;
3868 *p++ = cpu_to_be32(0);
3869 *p++ = cpu_to_be32(0);
3870 }
3871 return nfserr;
3872 }
3873
3874 static __be32
3875 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
3876 {
3877 struct xdr_stream *xdr = &resp->xdr;
3878 __be32 *p;
3879
3880 p = xdr_reserve_space(xdr, 16);
3881 if (!p)
3882 return nfserr_resource;
3883 *p++ = cpu_to_be32(write->wr_bytes_written);
3884 *p++ = cpu_to_be32(write->wr_how_written);
3885 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
3886 NFS4_VERIFIER_SIZE);
3887 return 0;
3888 }
3889
3890 static __be32
3891 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
3892 struct nfsd4_exchange_id *exid)
3893 {
3894 struct xdr_stream *xdr = &resp->xdr;
3895 __be32 *p;
3896 char *major_id;
3897 char *server_scope;
3898 int major_id_sz;
3899 int server_scope_sz;
3900 uint64_t minor_id = 0;
3901
3902 major_id = utsname()->nodename;
3903 major_id_sz = strlen(major_id);
3904 server_scope = utsname()->nodename;
3905 server_scope_sz = strlen(server_scope);
3906
3907 p = xdr_reserve_space(xdr,
3908 8 /* eir_clientid */ +
3909 4 /* eir_sequenceid */ +
3910 4 /* eir_flags */ +
3911 4 /* spr_how */);
3912 if (!p)
3913 return nfserr_resource;
3914
3915 p = xdr_encode_opaque_fixed(p, &exid->clientid, 8);
3916 *p++ = cpu_to_be32(exid->seqid);
3917 *p++ = cpu_to_be32(exid->flags);
3918
3919 *p++ = cpu_to_be32(exid->spa_how);
3920
3921 switch (exid->spa_how) {
3922 case SP4_NONE:
3923 break;
3924 case SP4_MACH_CRED:
3925 /* spo_must_enforce bitmap: */
3926 nfserr = nfsd4_encode_bitmap(xdr,
3927 exid->spo_must_enforce[0],
3928 exid->spo_must_enforce[1],
3929 exid->spo_must_enforce[2]);
3930 if (nfserr)
3931 return nfserr;
3932 /* spo_must_allow bitmap: */
3933 nfserr = nfsd4_encode_bitmap(xdr,
3934 exid->spo_must_allow[0],
3935 exid->spo_must_allow[1],
3936 exid->spo_must_allow[2]);
3937 if (nfserr)
3938 return nfserr;
3939 break;
3940 default:
3941 WARN_ON_ONCE(1);
3942 }
3943
3944 p = xdr_reserve_space(xdr,
3945 8 /* so_minor_id */ +
3946 4 /* so_major_id.len */ +
3947 (XDR_QUADLEN(major_id_sz) * 4) +
3948 4 /* eir_server_scope.len */ +
3949 (XDR_QUADLEN(server_scope_sz) * 4) +
3950 4 /* eir_server_impl_id.count (0) */);
3951 if (!p)
3952 return nfserr_resource;
3953
3954 /* The server_owner struct */
3955 p = xdr_encode_hyper(p, minor_id); /* Minor id */
3956 /* major id */
3957 p = xdr_encode_opaque(p, major_id, major_id_sz);
3958
3959 /* Server scope */
3960 p = xdr_encode_opaque(p, server_scope, server_scope_sz);
3961
3962 /* Implementation id */
3963 *p++ = cpu_to_be32(0); /* zero length nfs_impl_id4 array */
3964 return 0;
3965 }
3966
3967 static __be32
3968 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3969 struct nfsd4_create_session *sess)
3970 {
3971 struct xdr_stream *xdr = &resp->xdr;
3972 __be32 *p;
3973
3974 p = xdr_reserve_space(xdr, 24);
3975 if (!p)
3976 return nfserr_resource;
3977 p = xdr_encode_opaque_fixed(p, sess->sessionid.data,
3978 NFS4_MAX_SESSIONID_LEN);
3979 *p++ = cpu_to_be32(sess->seqid);
3980 *p++ = cpu_to_be32(sess->flags);
3981
3982 p = xdr_reserve_space(xdr, 28);
3983 if (!p)
3984 return nfserr_resource;
3985 *p++ = cpu_to_be32(0); /* headerpadsz */
3986 *p++ = cpu_to_be32(sess->fore_channel.maxreq_sz);
3987 *p++ = cpu_to_be32(sess->fore_channel.maxresp_sz);
3988 *p++ = cpu_to_be32(sess->fore_channel.maxresp_cached);
3989 *p++ = cpu_to_be32(sess->fore_channel.maxops);
3990 *p++ = cpu_to_be32(sess->fore_channel.maxreqs);
3991 *p++ = cpu_to_be32(sess->fore_channel.nr_rdma_attrs);
3992
3993 if (sess->fore_channel.nr_rdma_attrs) {
3994 p = xdr_reserve_space(xdr, 4);
3995 if (!p)
3996 return nfserr_resource;
3997 *p++ = cpu_to_be32(sess->fore_channel.rdma_attrs);
3998 }
3999
4000 p = xdr_reserve_space(xdr, 28);
4001 if (!p)
4002 return nfserr_resource;
4003 *p++ = cpu_to_be32(0); /* headerpadsz */
4004 *p++ = cpu_to_be32(sess->back_channel.maxreq_sz);
4005 *p++ = cpu_to_be32(sess->back_channel.maxresp_sz);
4006 *p++ = cpu_to_be32(sess->back_channel.maxresp_cached);
4007 *p++ = cpu_to_be32(sess->back_channel.maxops);
4008 *p++ = cpu_to_be32(sess->back_channel.maxreqs);
4009 *p++ = cpu_to_be32(sess->back_channel.nr_rdma_attrs);
4010
4011 if (sess->back_channel.nr_rdma_attrs) {
4012 p = xdr_reserve_space(xdr, 4);
4013 if (!p)
4014 return nfserr_resource;
4015 *p++ = cpu_to_be32(sess->back_channel.rdma_attrs);
4016 }
4017 return 0;
4018 }
4019
4020 static __be32
4021 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
4022 struct nfsd4_sequence *seq)
4023 {
4024 struct xdr_stream *xdr = &resp->xdr;
4025 __be32 *p;
4026
4027 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 20);
4028 if (!p)
4029 return nfserr_resource;
4030 p = xdr_encode_opaque_fixed(p, seq->sessionid.data,
4031 NFS4_MAX_SESSIONID_LEN);
4032 *p++ = cpu_to_be32(seq->seqid);
4033 *p++ = cpu_to_be32(seq->slotid);
4034 /* Note slotid's are numbered from zero: */
4035 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_highest_slotid */
4036 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_target_highest_slotid */
4037 *p++ = cpu_to_be32(seq->status_flags);
4038
4039 resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */
4040 return 0;
4041 }
4042
4043 static __be32
4044 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
4045 struct nfsd4_test_stateid *test_stateid)
4046 {
4047 struct xdr_stream *xdr = &resp->xdr;
4048 struct nfsd4_test_stateid_id *stateid, *next;
4049 __be32 *p;
4050
4051 p = xdr_reserve_space(xdr, 4 + (4 * test_stateid->ts_num_ids));
4052 if (!p)
4053 return nfserr_resource;
4054 *p++ = htonl(test_stateid->ts_num_ids);
4055
4056 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) {
4057 *p++ = stateid->ts_id_status;
4058 }
4059
4060 return 0;
4061 }
4062
4063 #ifdef CONFIG_NFSD_PNFS
4064 static __be32
4065 nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
4066 struct nfsd4_getdeviceinfo *gdev)
4067 {
4068 struct xdr_stream *xdr = &resp->xdr;
4069 const struct nfsd4_layout_ops *ops;
4070 u32 starting_len = xdr->buf->len, needed_len;
4071 __be32 *p;
4072
4073 p = xdr_reserve_space(xdr, 4);
4074 if (!p)
4075 return nfserr_resource;
4076
4077 *p++ = cpu_to_be32(gdev->gd_layout_type);
4078
4079 /* If maxcount is 0 then just update notifications */
4080 if (gdev->gd_maxcount != 0) {
4081 ops = nfsd4_layout_ops[gdev->gd_layout_type];
4082 nfserr = ops->encode_getdeviceinfo(xdr, gdev);
4083 if (nfserr) {
4084 /*
4085 * We don't bother to burden the layout drivers with
4086 * enforcing gd_maxcount, just tell the client to
4087 * come back with a bigger buffer if it's not enough.
4088 */
4089 if (xdr->buf->len + 4 > gdev->gd_maxcount)
4090 goto toosmall;
4091 return nfserr;
4092 }
4093 }
4094
4095 if (gdev->gd_notify_types) {
4096 p = xdr_reserve_space(xdr, 4 + 4);
4097 if (!p)
4098 return nfserr_resource;
4099 *p++ = cpu_to_be32(1); /* bitmap length */
4100 *p++ = cpu_to_be32(gdev->gd_notify_types);
4101 } else {
4102 p = xdr_reserve_space(xdr, 4);
4103 if (!p)
4104 return nfserr_resource;
4105 *p++ = 0;
4106 }
4107
4108 return 0;
4109 toosmall:
4110 dprintk("%s: maxcount too small\n", __func__);
4111 needed_len = xdr->buf->len + 4 /* notifications */;
4112 xdr_truncate_encode(xdr, starting_len);
4113 p = xdr_reserve_space(xdr, 4);
4114 if (!p)
4115 return nfserr_resource;
4116 *p++ = cpu_to_be32(needed_len);
4117 return nfserr_toosmall;
4118 }
4119
4120 static __be32
4121 nfsd4_encode_layoutget(struct nfsd4_compoundres *resp, __be32 nfserr,
4122 struct nfsd4_layoutget *lgp)
4123 {
4124 struct xdr_stream *xdr = &resp->xdr;
4125 const struct nfsd4_layout_ops *ops;
4126 __be32 *p;
4127
4128 p = xdr_reserve_space(xdr, 36 + sizeof(stateid_opaque_t));
4129 if (!p)
4130 return nfserr_resource;
4131
4132 *p++ = cpu_to_be32(1); /* we always set return-on-close */
4133 *p++ = cpu_to_be32(lgp->lg_sid.si_generation);
4134 p = xdr_encode_opaque_fixed(p, &lgp->lg_sid.si_opaque,
4135 sizeof(stateid_opaque_t));
4136
4137 *p++ = cpu_to_be32(1); /* we always return a single layout */
4138 p = xdr_encode_hyper(p, lgp->lg_seg.offset);
4139 p = xdr_encode_hyper(p, lgp->lg_seg.length);
4140 *p++ = cpu_to_be32(lgp->lg_seg.iomode);
4141 *p++ = cpu_to_be32(lgp->lg_layout_type);
4142
4143 ops = nfsd4_layout_ops[lgp->lg_layout_type];
4144 return ops->encode_layoutget(xdr, lgp);
4145 }
4146
4147 static __be32
4148 nfsd4_encode_layoutcommit(struct nfsd4_compoundres *resp, __be32 nfserr,
4149 struct nfsd4_layoutcommit *lcp)
4150 {
4151 struct xdr_stream *xdr = &resp->xdr;
4152 __be32 *p;
4153
4154 p = xdr_reserve_space(xdr, 4);
4155 if (!p)
4156 return nfserr_resource;
4157 *p++ = cpu_to_be32(lcp->lc_size_chg);
4158 if (lcp->lc_size_chg) {
4159 p = xdr_reserve_space(xdr, 8);
4160 if (!p)
4161 return nfserr_resource;
4162 p = xdr_encode_hyper(p, lcp->lc_newsize);
4163 }
4164
4165 return 0;
4166 }
4167
4168 static __be32
4169 nfsd4_encode_layoutreturn(struct nfsd4_compoundres *resp, __be32 nfserr,
4170 struct nfsd4_layoutreturn *lrp)
4171 {
4172 struct xdr_stream *xdr = &resp->xdr;
4173 __be32 *p;
4174
4175 p = xdr_reserve_space(xdr, 4);
4176 if (!p)
4177 return nfserr_resource;
4178 *p++ = cpu_to_be32(lrp->lrs_present);
4179 if (lrp->lrs_present)
4180 return nfsd4_encode_stateid(xdr, &lrp->lr_sid);
4181 return 0;
4182 }
4183 #endif /* CONFIG_NFSD_PNFS */
4184
4185 static __be32
4186 nfsd42_encode_write_res(struct nfsd4_compoundres *resp, struct nfsd42_write_res *write)
4187 {
4188 __be32 *p;
4189
4190 p = xdr_reserve_space(&resp->xdr, 4 + 8 + 4 + NFS4_VERIFIER_SIZE);
4191 if (!p)
4192 return nfserr_resource;
4193
4194 *p++ = cpu_to_be32(0);
4195 p = xdr_encode_hyper(p, write->wr_bytes_written);
4196 *p++ = cpu_to_be32(write->wr_stable_how);
4197 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
4198 NFS4_VERIFIER_SIZE);
4199 return nfs_ok;
4200 }
4201
4202 static __be32
4203 nfsd4_encode_copy(struct nfsd4_compoundres *resp, __be32 nfserr,
4204 struct nfsd4_copy *copy)
4205 {
4206 __be32 *p;
4207
4208 nfserr = nfsd42_encode_write_res(resp, &copy->cp_res);
4209 if (nfserr)
4210 return nfserr;
4211
4212 p = xdr_reserve_space(&resp->xdr, 4 + 4);
4213 *p++ = cpu_to_be32(copy->cp_consecutive);
4214 *p++ = cpu_to_be32(copy->cp_synchronous);
4215 return 0;
4216 }
4217
4218 static __be32
4219 nfsd4_encode_seek(struct nfsd4_compoundres *resp, __be32 nfserr,
4220 struct nfsd4_seek *seek)
4221 {
4222 __be32 *p;
4223
4224 p = xdr_reserve_space(&resp->xdr, 4 + 8);
4225 *p++ = cpu_to_be32(seek->seek_eof);
4226 p = xdr_encode_hyper(p, seek->seek_pos);
4227
4228 return 0;
4229 }
4230
4231 static __be32
4232 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p)
4233 {
4234 return nfserr;
4235 }
4236
4237 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *);
4238
4239 /*
4240 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
4241 * since we don't need to filter out obsolete ops as this is
4242 * done in the decoding phase.
4243 */
4244 static const nfsd4_enc nfsd4_enc_ops[] = {
4245 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access,
4246 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close,
4247 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit,
4248 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create,
4249 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop,
4250 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop,
4251 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr,
4252 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh,
4253 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link,
4254 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock,
4255 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt,
4256 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku,
4257 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop,
4258 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop,
4259 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop,
4260 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open,
4261 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop,
4262 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm,
4263 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade,
4264 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop,
4265 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop,
4266 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop,
4267 [OP_READ] = (nfsd4_enc)nfsd4_encode_read,
4268 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir,
4269 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink,
4270 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove,
4271 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename,
4272 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop,
4273 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop,
4274 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop,
4275 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo,
4276 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr,
4277 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid,
4278 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop,
4279 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop,
4280 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write,
4281 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop,
4282
4283 /* NFSv4.1 operations */
4284 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop,
4285 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session,
4286 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id,
4287 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session,
4288 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_noop,
4289 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_noop,
4290 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
4291 #ifdef CONFIG_NFSD_PNFS
4292 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_getdeviceinfo,
4293 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
4294 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_layoutcommit,
4295 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_layoutget,
4296 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_layoutreturn,
4297 #else
4298 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop,
4299 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
4300 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop,
4301 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop,
4302 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop,
4303 #endif
4304 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name,
4305 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence,
4306 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop,
4307 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid,
4308 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
4309 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop,
4310 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop,
4311
4312 /* NFSv4.2 operations */
4313 [OP_ALLOCATE] = (nfsd4_enc)nfsd4_encode_noop,
4314 [OP_COPY] = (nfsd4_enc)nfsd4_encode_copy,
4315 [OP_COPY_NOTIFY] = (nfsd4_enc)nfsd4_encode_noop,
4316 [OP_DEALLOCATE] = (nfsd4_enc)nfsd4_encode_noop,
4317 [OP_IO_ADVISE] = (nfsd4_enc)nfsd4_encode_noop,
4318 [OP_LAYOUTERROR] = (nfsd4_enc)nfsd4_encode_noop,
4319 [OP_LAYOUTSTATS] = (nfsd4_enc)nfsd4_encode_noop,
4320 [OP_OFFLOAD_CANCEL] = (nfsd4_enc)nfsd4_encode_noop,
4321 [OP_OFFLOAD_STATUS] = (nfsd4_enc)nfsd4_encode_noop,
4322 [OP_READ_PLUS] = (nfsd4_enc)nfsd4_encode_noop,
4323 [OP_SEEK] = (nfsd4_enc)nfsd4_encode_seek,
4324 [OP_WRITE_SAME] = (nfsd4_enc)nfsd4_encode_noop,
4325 [OP_CLONE] = (nfsd4_enc)nfsd4_encode_noop,
4326 };
4327
4328 /*
4329 * Calculate whether we still have space to encode repsize bytes.
4330 * There are two considerations:
4331 * - For NFS versions >=4.1, the size of the reply must stay within
4332 * session limits
4333 * - For all NFS versions, we must stay within limited preallocated
4334 * buffer space.
4335 *
4336 * This is called before the operation is processed, so can only provide
4337 * an upper estimate. For some nonidempotent operations (such as
4338 * getattr), it's not necessarily a problem if that estimate is wrong,
4339 * as we can fail it after processing without significant side effects.
4340 */
4341 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize)
4342 {
4343 struct xdr_buf *buf = &resp->rqstp->rq_res;
4344 struct nfsd4_slot *slot = resp->cstate.slot;
4345
4346 if (buf->len + respsize <= buf->buflen)
4347 return nfs_ok;
4348 if (!nfsd4_has_session(&resp->cstate))
4349 return nfserr_resource;
4350 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) {
4351 WARN_ON_ONCE(1);
4352 return nfserr_rep_too_big_to_cache;
4353 }
4354 return nfserr_rep_too_big;
4355 }
4356
4357 void
4358 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
4359 {
4360 struct xdr_stream *xdr = &resp->xdr;
4361 struct nfs4_stateowner *so = resp->cstate.replay_owner;
4362 struct svc_rqst *rqstp = resp->rqstp;
4363 const struct nfsd4_operation *opdesc = op->opdesc;
4364 int post_err_offset;
4365 nfsd4_enc encoder;
4366 __be32 *p;
4367
4368 p = xdr_reserve_space(xdr, 8);
4369 if (!p) {
4370 WARN_ON_ONCE(1);
4371 return;
4372 }
4373 *p++ = cpu_to_be32(op->opnum);
4374 post_err_offset = xdr->buf->len;
4375
4376 if (op->opnum == OP_ILLEGAL)
4377 goto status;
4378 if (op->status && opdesc &&
4379 !(opdesc->op_flags & OP_NONTRIVIAL_ERROR_ENCODE))
4380 goto status;
4381 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
4382 !nfsd4_enc_ops[op->opnum]);
4383 encoder = nfsd4_enc_ops[op->opnum];
4384 op->status = encoder(resp, op->status, &op->u);
4385 if (opdesc && opdesc->op_release)
4386 opdesc->op_release(&op->u);
4387 xdr_commit_encode(xdr);
4388
4389 /* nfsd4_check_resp_size guarantees enough room for error status */
4390 if (!op->status) {
4391 int space_needed = 0;
4392 if (!nfsd4_last_compound_op(rqstp))
4393 space_needed = COMPOUND_ERR_SLACK_SPACE;
4394 op->status = nfsd4_check_resp_size(resp, space_needed);
4395 }
4396 if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) {
4397 struct nfsd4_slot *slot = resp->cstate.slot;
4398
4399 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS)
4400 op->status = nfserr_rep_too_big_to_cache;
4401 else
4402 op->status = nfserr_rep_too_big;
4403 }
4404 if (op->status == nfserr_resource ||
4405 op->status == nfserr_rep_too_big ||
4406 op->status == nfserr_rep_too_big_to_cache) {
4407 /*
4408 * The operation may have already been encoded or
4409 * partially encoded. No op returns anything additional
4410 * in the case of one of these three errors, so we can
4411 * just truncate back to after the status. But it's a
4412 * bug if we had to do this on a non-idempotent op:
4413 */
4414 warn_on_nonidempotent_op(op);
4415 xdr_truncate_encode(xdr, post_err_offset);
4416 }
4417 if (so) {
4418 int len = xdr->buf->len - post_err_offset;
4419
4420 so->so_replay.rp_status = op->status;
4421 so->so_replay.rp_buflen = len;
4422 read_bytes_from_xdr_buf(xdr->buf, post_err_offset,
4423 so->so_replay.rp_buf, len);
4424 }
4425 status:
4426 /* Note that op->status is already in network byte order: */
4427 write_bytes_to_xdr_buf(xdr->buf, post_err_offset - 4, &op->status, 4);
4428 }
4429
4430 /*
4431 * Encode the reply stored in the stateowner reply cache
4432 *
4433 * XDR note: do not encode rp->rp_buflen: the buffer contains the
4434 * previously sent already encoded operation.
4435 */
4436 void
4437 nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op)
4438 {
4439 __be32 *p;
4440 struct nfs4_replay *rp = op->replay;
4441
4442 BUG_ON(!rp);
4443
4444 p = xdr_reserve_space(xdr, 8 + rp->rp_buflen);
4445 if (!p) {
4446 WARN_ON_ONCE(1);
4447 return;
4448 }
4449 *p++ = cpu_to_be32(op->opnum);
4450 *p++ = rp->rp_status; /* already xdr'ed */
4451
4452 p = xdr_encode_opaque_fixed(p, rp->rp_buf, rp->rp_buflen);
4453 }
4454
4455 int
4456 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p)
4457 {
4458 return xdr_ressize_check(rqstp, p);
4459 }
4460
4461 void nfsd4_release_compoundargs(struct svc_rqst *rqstp)
4462 {
4463 struct nfsd4_compoundargs *args = rqstp->rq_argp;
4464
4465 if (args->ops != args->iops) {
4466 kfree(args->ops);
4467 args->ops = args->iops;
4468 }
4469 kfree(args->tmpp);
4470 args->tmpp = NULL;
4471 while (args->to_free) {
4472 struct svcxdr_tmpbuf *tb = args->to_free;
4473 args->to_free = tb->next;
4474 kfree(tb);
4475 }
4476 }
4477
4478 int
4479 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p)
4480 {
4481 struct nfsd4_compoundargs *args = rqstp->rq_argp;
4482
4483 if (rqstp->rq_arg.head[0].iov_len % 4) {
4484 /* client is nuts */
4485 dprintk("%s: compound not properly padded! (peeraddr=%pISc xid=0x%x)",
4486 __func__, svc_addr(rqstp), be32_to_cpu(rqstp->rq_xid));
4487 return 0;
4488 }
4489 args->p = p;
4490 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len;
4491 args->pagelist = rqstp->rq_arg.pages;
4492 args->pagelen = rqstp->rq_arg.page_len;
4493 args->tail = false;
4494 args->tmpp = NULL;
4495 args->to_free = NULL;
4496 args->ops = args->iops;
4497 args->rqstp = rqstp;
4498
4499 return !nfsd4_decode_compound(args);
4500 }
4501
4502 int
4503 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p)
4504 {
4505 /*
4506 * All that remains is to write the tag and operation count...
4507 */
4508 struct nfsd4_compoundres *resp = rqstp->rq_resp;
4509 struct xdr_buf *buf = resp->xdr.buf;
4510
4511 WARN_ON_ONCE(buf->len != buf->head[0].iov_len + buf->page_len +
4512 buf->tail[0].iov_len);
4513
4514 rqstp->rq_next_page = resp->xdr.page_ptr + 1;
4515
4516 p = resp->tagp;
4517 *p++ = htonl(resp->taglen);
4518 memcpy(p, resp->tag, resp->taglen);
4519 p += XDR_QUADLEN(resp->taglen);
4520 *p++ = htonl(resp->opcnt);
4521
4522 nfsd4_sequence_done(resp);
4523 return 1;
4524 }
4525
4526 /*
4527 * Local variables:
4528 * c-basic-offset: 8
4529 * End:
4530 */
ubuntu-bionic-kernel mirror