]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blob - fs/xfs/xfs_ioctl.c
projects / mirror_ubuntu-jammy-kernel.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
xfs: ioctl check for capabilities in the current user namespace
[mirror_ubuntu-jammy-kernel.git] / fs / xfs / xfs_ioctl.c
1 /*
2 * Copyright (c) 2000-2005 Silicon Graphics, Inc.
3 * All Rights Reserved.
4 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
8 *
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
17 */
18 #include "xfs.h"
19 #include "xfs_fs.h"
20 #include "xfs_format.h"
21 #include "xfs_log.h"
22 #include "xfs_trans.h"
23 #include "xfs_sb.h"
24 #include "xfs_ag.h"
25 #include "xfs_alloc.h"
26 #include "xfs_mount.h"
27 #include "xfs_bmap_btree.h"
28 #include "xfs_dinode.h"
29 #include "xfs_inode.h"
30 #include "xfs_ioctl.h"
31 #include "xfs_rtalloc.h"
32 #include "xfs_itable.h"
33 #include "xfs_error.h"
34 #include "xfs_attr.h"
35 #include "xfs_bmap.h"
36 #include "xfs_bmap_util.h"
37 #include "xfs_buf_item.h"
38 #include "xfs_fsops.h"
39 #include "xfs_discard.h"
40 #include "xfs_quota.h"
41 #include "xfs_inode_item.h"
42 #include "xfs_export.h"
43 #include "xfs_trace.h"
44 #include "xfs_icache.h"
45 #include "xfs_symlink.h"
46
47 #include <linux/capability.h>
48 #include <linux/dcache.h>
49 #include <linux/mount.h>
50 #include <linux/namei.h>
51 #include <linux/pagemap.h>
52 #include <linux/slab.h>
53 #include <linux/exportfs.h>
54
55 /*
56 * xfs_find_handle maps from userspace xfs_fsop_handlereq structure to
57 * a file or fs handle.
58 *
59 * XFS_IOC_PATH_TO_FSHANDLE
60 * returns fs handle for a mount point or path within that mount point
61 * XFS_IOC_FD_TO_HANDLE
62 * returns full handle for a FD opened in user space
63 * XFS_IOC_PATH_TO_HANDLE
64 * returns full handle for a path
65 */
66 int
67 xfs_find_handle(
68 unsigned int cmd,
69 xfs_fsop_handlereq_t *hreq)
70 {
71 int hsize;
72 xfs_handle_t handle;
73 struct inode *inode;
74 struct fd f = {0};
75 struct path path;
76 int error;
77 struct xfs_inode *ip;
78
79 if (cmd == XFS_IOC_FD_TO_HANDLE) {
80 f = fdget(hreq->fd);
81 if (!f.file)
82 return -EBADF;
83 inode = file_inode(f.file);
84 } else {
85 error = user_lpath((const char __user *)hreq->path, &path);
86 if (error)
87 return error;
88 inode = path.dentry->d_inode;
89 }
90 ip = XFS_I(inode);
91
92 /*
93 * We can only generate handles for inodes residing on a XFS filesystem,
94 * and only for regular files, directories or symbolic links.
95 */
96 error = -EINVAL;
97 if (inode->i_sb->s_magic != XFS_SB_MAGIC)
98 goto out_put;
99
100 error = -EBADF;
101 if (!S_ISREG(inode->i_mode) &&
102 !S_ISDIR(inode->i_mode) &&
103 !S_ISLNK(inode->i_mode))
104 goto out_put;
105
106
107 memcpy(&handle.ha_fsid, ip->i_mount->m_fixedfsid, sizeof(xfs_fsid_t));
108
109 if (cmd == XFS_IOC_PATH_TO_FSHANDLE) {
110 /*
111 * This handle only contains an fsid, zero the rest.
112 */
113 memset(&handle.ha_fid, 0, sizeof(handle.ha_fid));
114 hsize = sizeof(xfs_fsid_t);
115 } else {
116 int lock_mode;
117
118 lock_mode = xfs_ilock_map_shared(ip);
119 handle.ha_fid.fid_len = sizeof(xfs_fid_t) -
120 sizeof(handle.ha_fid.fid_len);
121 handle.ha_fid.fid_pad = 0;
122 handle.ha_fid.fid_gen = ip->i_d.di_gen;
123 handle.ha_fid.fid_ino = ip->i_ino;
124 xfs_iunlock_map_shared(ip, lock_mode);
125
126 hsize = XFS_HSIZE(handle);
127 }
128
129 error = -EFAULT;
130 if (copy_to_user(hreq->ohandle, &handle, hsize) ||
131 copy_to_user(hreq->ohandlen, &hsize, sizeof(__s32)))
132 goto out_put;
133
134 error = 0;
135
136 out_put:
137 if (cmd == XFS_IOC_FD_TO_HANDLE)
138 fdput(f);
139 else
140 path_put(&path);
141 return error;
142 }
143
144 /*
145 * No need to do permission checks on the various pathname components
146 * as the handle operations are privileged.
147 */
148 STATIC int
149 xfs_handle_acceptable(
150 void *context,
151 struct dentry *dentry)
152 {
153 return 1;
154 }
155
156 /*
157 * Convert userspace handle data into a dentry.
158 */
159 struct dentry *
160 xfs_handle_to_dentry(
161 struct file *parfilp,
162 void __user *uhandle,
163 u32 hlen)
164 {
165 xfs_handle_t handle;
166 struct xfs_fid64 fid;
167
168 /*
169 * Only allow handle opens under a directory.
170 */
171 if (!S_ISDIR(file_inode(parfilp)->i_mode))
172 return ERR_PTR(-ENOTDIR);
173
174 if (hlen != sizeof(xfs_handle_t))
175 return ERR_PTR(-EINVAL);
176 if (copy_from_user(&handle, uhandle, hlen))
177 return ERR_PTR(-EFAULT);
178 if (handle.ha_fid.fid_len !=
179 sizeof(handle.ha_fid) - sizeof(handle.ha_fid.fid_len))
180 return ERR_PTR(-EINVAL);
181
182 memset(&fid, 0, sizeof(struct fid));
183 fid.ino = handle.ha_fid.fid_ino;
184 fid.gen = handle.ha_fid.fid_gen;
185
186 return exportfs_decode_fh(parfilp->f_path.mnt, (struct fid *)&fid, 3,
187 FILEID_INO32_GEN | XFS_FILEID_TYPE_64FLAG,
188 xfs_handle_acceptable, NULL);
189 }
190
191 STATIC struct dentry *
192 xfs_handlereq_to_dentry(
193 struct file *parfilp,
194 xfs_fsop_handlereq_t *hreq)
195 {
196 return xfs_handle_to_dentry(parfilp, hreq->ihandle, hreq->ihandlen);
197 }
198
199 int
200 xfs_open_by_handle(
201 struct file *parfilp,
202 xfs_fsop_handlereq_t *hreq)
203 {
204 const struct cred *cred = current_cred();
205 int error;
206 int fd;
207 int permflag;
208 struct file *filp;
209 struct inode *inode;
210 struct dentry *dentry;
211 fmode_t fmode;
212 struct path path;
213
214 if (!capable(CAP_SYS_ADMIN))
215 return -XFS_ERROR(EPERM);
216
217 dentry = xfs_handlereq_to_dentry(parfilp, hreq);
218 if (IS_ERR(dentry))
219 return PTR_ERR(dentry);
220 inode = dentry->d_inode;
221
222 /* Restrict xfs_open_by_handle to directories & regular files. */
223 if (!(S_ISREG(inode->i_mode) || S_ISDIR(inode->i_mode))) {
224 error = -XFS_ERROR(EPERM);
225 goto out_dput;
226 }
227
228 #if BITS_PER_LONG != 32
229 hreq->oflags |= O_LARGEFILE;
230 #endif
231
232 permflag = hreq->oflags;
233 fmode = OPEN_FMODE(permflag);
234 if ((!(permflag & O_APPEND) || (permflag & O_TRUNC)) &&
235 (fmode & FMODE_WRITE) && IS_APPEND(inode)) {
236 error = -XFS_ERROR(EPERM);
237 goto out_dput;
238 }
239
240 if ((fmode & FMODE_WRITE) && IS_IMMUTABLE(inode)) {
241 error = -XFS_ERROR(EACCES);
242 goto out_dput;
243 }
244
245 /* Can't write directories. */
246 if (S_ISDIR(inode->i_mode) && (fmode & FMODE_WRITE)) {
247 error = -XFS_ERROR(EISDIR);
248 goto out_dput;
249 }
250
251 fd = get_unused_fd_flags(0);
252 if (fd < 0) {
253 error = fd;
254 goto out_dput;
255 }
256
257 path.mnt = parfilp->f_path.mnt;
258 path.dentry = dentry;
259 filp = dentry_open(&path, hreq->oflags, cred);
260 dput(dentry);
261 if (IS_ERR(filp)) {
262 put_unused_fd(fd);
263 return PTR_ERR(filp);
264 }
265
266 if (S_ISREG(inode->i_mode)) {
267 filp->f_flags |= O_NOATIME;
268 filp->f_mode |= FMODE_NOCMTIME;
269 }
270
271 fd_install(fd, filp);
272 return fd;
273
274 out_dput:
275 dput(dentry);
276 return error;
277 }
278
279 /*
280 * This is a copy from fs/namei.c:vfs_readlink(), except for removing it's
281 * unused first argument.
282 */
283 STATIC int
284 do_readlink(
285 char __user *buffer,
286 int buflen,
287 const char *link)
288 {
289 int len;
290
291 len = PTR_ERR(link);
292 if (IS_ERR(link))
293 goto out;
294
295 len = strlen(link);
296 if (len > (unsigned) buflen)
297 len = buflen;
298 if (copy_to_user(buffer, link, len))
299 len = -EFAULT;
300 out:
301 return len;
302 }
303
304
305 int
306 xfs_readlink_by_handle(
307 struct file *parfilp,
308 xfs_fsop_handlereq_t *hreq)
309 {
310 struct dentry *dentry;
311 __u32 olen;
312 void *link;
313 int error;
314
315 if (!capable(CAP_SYS_ADMIN))
316 return -XFS_ERROR(EPERM);
317
318 dentry = xfs_handlereq_to_dentry(parfilp, hreq);
319 if (IS_ERR(dentry))
320 return PTR_ERR(dentry);
321
322 /* Restrict this handle operation to symlinks only. */
323 if (!S_ISLNK(dentry->d_inode->i_mode)) {
324 error = -XFS_ERROR(EINVAL);
325 goto out_dput;
326 }
327
328 if (copy_from_user(&olen, hreq->ohandlen, sizeof(__u32))) {
329 error = -XFS_ERROR(EFAULT);
330 goto out_dput;
331 }
332
333 link = kmalloc(MAXPATHLEN+1, GFP_KERNEL);
334 if (!link) {
335 error = -XFS_ERROR(ENOMEM);
336 goto out_dput;
337 }
338
339 error = -xfs_readlink(XFS_I(dentry->d_inode), link);
340 if (error)
341 goto out_kfree;
342 error = do_readlink(hreq->ohandle, olen, link);
343 if (error)
344 goto out_kfree;
345
346 out_kfree:
347 kfree(link);
348 out_dput:
349 dput(dentry);
350 return error;
351 }
352
353 int
354 xfs_set_dmattrs(
355 xfs_inode_t *ip,
356 u_int evmask,
357 u_int16_t state)
358 {
359 xfs_mount_t *mp = ip->i_mount;
360 xfs_trans_t *tp;
361 int error;
362
363 if (!capable(CAP_SYS_ADMIN))
364 return XFS_ERROR(EPERM);
365
366 if (XFS_FORCED_SHUTDOWN(mp))
367 return XFS_ERROR(EIO);
368
369 tp = xfs_trans_alloc(mp, XFS_TRANS_SET_DMATTRS);
370 error = xfs_trans_reserve(tp, &M_RES(mp)->tr_ichange, 0, 0);
371 if (error) {
372 xfs_trans_cancel(tp, 0);
373 return error;
374 }
375 xfs_ilock(ip, XFS_ILOCK_EXCL);
376 xfs_trans_ijoin(tp, ip, XFS_ILOCK_EXCL);
377
378 ip->i_d.di_dmevmask = evmask;
379 ip->i_d.di_dmstate = state;
380
381 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
382 error = xfs_trans_commit(tp, 0);
383
384 return error;
385 }
386
387 STATIC int
388 xfs_fssetdm_by_handle(
389 struct file *parfilp,
390 void __user *arg)
391 {
392 int error;
393 struct fsdmidata fsd;
394 xfs_fsop_setdm_handlereq_t dmhreq;
395 struct dentry *dentry;
396
397 if (!capable(CAP_MKNOD))
398 return -XFS_ERROR(EPERM);
399 if (copy_from_user(&dmhreq, arg, sizeof(xfs_fsop_setdm_handlereq_t)))
400 return -XFS_ERROR(EFAULT);
401
402 error = mnt_want_write_file(parfilp);
403 if (error)
404 return error;
405
406 dentry = xfs_handlereq_to_dentry(parfilp, &dmhreq.hreq);
407 if (IS_ERR(dentry)) {
408 mnt_drop_write_file(parfilp);
409 return PTR_ERR(dentry);
410 }
411
412 if (IS_IMMUTABLE(dentry->d_inode) || IS_APPEND(dentry->d_inode)) {
413 error = -XFS_ERROR(EPERM);
414 goto out;
415 }
416
417 if (copy_from_user(&fsd, dmhreq.data, sizeof(fsd))) {
418 error = -XFS_ERROR(EFAULT);
419 goto out;
420 }
421
422 error = -xfs_set_dmattrs(XFS_I(dentry->d_inode), fsd.fsd_dmevmask,
423 fsd.fsd_dmstate);
424
425 out:
426 mnt_drop_write_file(parfilp);
427 dput(dentry);
428 return error;
429 }
430
431 STATIC int
432 xfs_attrlist_by_handle(
433 struct file *parfilp,
434 void __user *arg)
435 {
436 int error = -ENOMEM;
437 attrlist_cursor_kern_t *cursor;
438 xfs_fsop_attrlist_handlereq_t al_hreq;
439 struct dentry *dentry;
440 char *kbuf;
441
442 if (!capable(CAP_SYS_ADMIN))
443 return -XFS_ERROR(EPERM);
444 if (copy_from_user(&al_hreq, arg, sizeof(xfs_fsop_attrlist_handlereq_t)))
445 return -XFS_ERROR(EFAULT);
446 if (al_hreq.buflen > XATTR_LIST_MAX)
447 return -XFS_ERROR(EINVAL);
448
449 /*
450 * Reject flags, only allow namespaces.
451 */
452 if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE))
453 return -XFS_ERROR(EINVAL);
454
455 dentry = xfs_handlereq_to_dentry(parfilp, &al_hreq.hreq);
456 if (IS_ERR(dentry))
457 return PTR_ERR(dentry);
458
459 kbuf = kmem_zalloc(al_hreq.buflen, KM_SLEEP | KM_MAYFAIL);
460 if (!kbuf) {
461 kbuf = kmem_zalloc_large(al_hreq.buflen);
462 if (!kbuf)
463 goto out_dput;
464 }
465
466 cursor = (attrlist_cursor_kern_t *)&al_hreq.pos;
467 error = -xfs_attr_list(XFS_I(dentry->d_inode), kbuf, al_hreq.buflen,
468 al_hreq.flags, cursor);
469 if (error)
470 goto out_kfree;
471
472 if (copy_to_user(al_hreq.buffer, kbuf, al_hreq.buflen))
473 error = -EFAULT;
474
475 out_kfree:
476 if (is_vmalloc_addr(kbuf))
477 kmem_free_large(kbuf);
478 else
479 kmem_free(kbuf);
480 out_dput:
481 dput(dentry);
482 return error;
483 }
484
485 int
486 xfs_attrmulti_attr_get(
487 struct inode *inode,
488 unsigned char *name,
489 unsigned char __user *ubuf,
490 __uint32_t *len,
491 __uint32_t flags)
492 {
493 unsigned char *kbuf;
494 int error = EFAULT;
495
496 if (*len > XATTR_SIZE_MAX)
497 return EINVAL;
498 kbuf = kmem_zalloc(*len, KM_SLEEP | KM_MAYFAIL);
499 if (!kbuf) {
500 kbuf = kmem_zalloc_large(*len);
501 if (!kbuf)
502 return ENOMEM;
503 }
504
505 error = xfs_attr_get(XFS_I(inode), name, kbuf, (int *)len, flags);
506 if (error)
507 goto out_kfree;
508
509 if (copy_to_user(ubuf, kbuf, *len))
510 error = EFAULT;
511
512 out_kfree:
513 if (is_vmalloc_addr(kbuf))
514 kmem_free_large(kbuf);
515 else
516 kmem_free(kbuf);
517 return error;
518 }
519
520 int
521 xfs_attrmulti_attr_set(
522 struct inode *inode,
523 unsigned char *name,
524 const unsigned char __user *ubuf,
525 __uint32_t len,
526 __uint32_t flags)
527 {
528 unsigned char *kbuf;
529 int error = EFAULT;
530
531 if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
532 return EPERM;
533 if (len > XATTR_SIZE_MAX)
534 return EINVAL;
535
536 kbuf = memdup_user(ubuf, len);
537 if (IS_ERR(kbuf))
538 return PTR_ERR(kbuf);
539
540 error = xfs_attr_set(XFS_I(inode), name, kbuf, len, flags);
541
542 return error;
543 }
544
545 int
546 xfs_attrmulti_attr_remove(
547 struct inode *inode,
548 unsigned char *name,
549 __uint32_t flags)
550 {
551 if (IS_IMMUTABLE(inode) || IS_APPEND(inode))
552 return EPERM;
553 return xfs_attr_remove(XFS_I(inode), name, flags);
554 }
555
556 STATIC int
557 xfs_attrmulti_by_handle(
558 struct file *parfilp,
559 void __user *arg)
560 {
561 int error;
562 xfs_attr_multiop_t *ops;
563 xfs_fsop_attrmulti_handlereq_t am_hreq;
564 struct dentry *dentry;
565 unsigned int i, size;
566 unsigned char *attr_name;
567
568 if (!capable(CAP_SYS_ADMIN))
569 return -XFS_ERROR(EPERM);
570 if (copy_from_user(&am_hreq, arg, sizeof(xfs_fsop_attrmulti_handlereq_t)))
571 return -XFS_ERROR(EFAULT);
572
573 /* overflow check */
574 if (am_hreq.opcount >= INT_MAX / sizeof(xfs_attr_multiop_t))
575 return -E2BIG;
576
577 dentry = xfs_handlereq_to_dentry(parfilp, &am_hreq.hreq);
578 if (IS_ERR(dentry))
579 return PTR_ERR(dentry);
580
581 error = E2BIG;
582 size = am_hreq.opcount * sizeof(xfs_attr_multiop_t);
583 if (!size || size > 16 * PAGE_SIZE)
584 goto out_dput;
585
586 ops = memdup_user(am_hreq.ops, size);
587 if (IS_ERR(ops)) {
588 error = PTR_ERR(ops);
589 goto out_dput;
590 }
591
592 attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL);
593 if (!attr_name)
594 goto out_kfree_ops;
595
596 error = 0;
597 for (i = 0; i < am_hreq.opcount; i++) {
598 ops[i].am_error = strncpy_from_user((char *)attr_name,
599 ops[i].am_attrname, MAXNAMELEN);
600 if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN)
601 error = -ERANGE;
602 if (ops[i].am_error < 0)
603 break;
604
605 switch (ops[i].am_opcode) {
606 case ATTR_OP_GET:
607 ops[i].am_error = xfs_attrmulti_attr_get(
608 dentry->d_inode, attr_name,
609 ops[i].am_attrvalue, &ops[i].am_length,
610 ops[i].am_flags);
611 break;
612 case ATTR_OP_SET:
613 ops[i].am_error = mnt_want_write_file(parfilp);
614 if (ops[i].am_error)
615 break;
616 ops[i].am_error = xfs_attrmulti_attr_set(
617 dentry->d_inode, attr_name,
618 ops[i].am_attrvalue, ops[i].am_length,
619 ops[i].am_flags);
620 mnt_drop_write_file(parfilp);
621 break;
622 case ATTR_OP_REMOVE:
623 ops[i].am_error = mnt_want_write_file(parfilp);
624 if (ops[i].am_error)
625 break;
626 ops[i].am_error = xfs_attrmulti_attr_remove(
627 dentry->d_inode, attr_name,
628 ops[i].am_flags);
629 mnt_drop_write_file(parfilp);
630 break;
631 default:
632 ops[i].am_error = EINVAL;
633 }
634 }
635
636 if (copy_to_user(am_hreq.ops, ops, size))
637 error = XFS_ERROR(EFAULT);
638
639 kfree(attr_name);
640 out_kfree_ops:
641 kfree(ops);
642 out_dput:
643 dput(dentry);
644 return -error;
645 }
646
647 int
648 xfs_ioc_space(
649 struct xfs_inode *ip,
650 struct inode *inode,
651 struct file *filp,
652 int ioflags,
653 unsigned int cmd,
654 xfs_flock64_t *bf)
655 {
656 int attr_flags = 0;
657 int error;
658
659 /*
660 * Only allow the sys admin to reserve space unless
661 * unwritten extents are enabled.
662 */
663 if (!xfs_sb_version_hasextflgbit(&ip->i_mount->m_sb) &&
664 !capable(CAP_SYS_ADMIN))
665 return -XFS_ERROR(EPERM);
666
667 if (inode->i_flags & (S_IMMUTABLE|S_APPEND))
668 return -XFS_ERROR(EPERM);
669
670 if (!(filp->f_mode & FMODE_WRITE))
671 return -XFS_ERROR(EBADF);
672
673 if (!S_ISREG(inode->i_mode))
674 return -XFS_ERROR(EINVAL);
675
676 if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
677 attr_flags |= XFS_ATTR_NONBLOCK;
678
679 if (filp->f_flags & O_DSYNC)
680 attr_flags |= XFS_ATTR_SYNC;
681
682 if (ioflags & IO_INVIS)
683 attr_flags |= XFS_ATTR_DMI;
684
685 error = mnt_want_write_file(filp);
686 if (error)
687 return error;
688 error = xfs_change_file_space(ip, cmd, bf, filp->f_pos, attr_flags);
689 mnt_drop_write_file(filp);
690 return -error;
691 }
692
693 STATIC int
694 xfs_ioc_bulkstat(
695 xfs_mount_t *mp,
696 unsigned int cmd,
697 void __user *arg)
698 {
699 xfs_fsop_bulkreq_t bulkreq;
700 int count; /* # of records returned */
701 xfs_ino_t inlast; /* last inode number */
702 int done;
703 int error;
704
705 /* done = 1 if there are more stats to get and if bulkstat */
706 /* should be called again (unused here, but used in dmapi) */
707
708 if (!capable(CAP_SYS_ADMIN))
709 return -EPERM;
710
711 if (XFS_FORCED_SHUTDOWN(mp))
712 return -XFS_ERROR(EIO);
713
714 if (copy_from_user(&bulkreq, arg, sizeof(xfs_fsop_bulkreq_t)))
715 return -XFS_ERROR(EFAULT);
716
717 if (copy_from_user(&inlast, bulkreq.lastip, sizeof(__s64)))
718 return -XFS_ERROR(EFAULT);
719
720 if ((count = bulkreq.icount) <= 0)
721 return -XFS_ERROR(EINVAL);
722
723 if (bulkreq.ubuffer == NULL)
724 return -XFS_ERROR(EINVAL);
725
726 if (cmd == XFS_IOC_FSINUMBERS)
727 error = xfs_inumbers(mp, &inlast, &count,
728 bulkreq.ubuffer, xfs_inumbers_fmt);
729 else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE)
730 error = xfs_bulkstat_single(mp, &inlast,
731 bulkreq.ubuffer, &done);
732 else /* XFS_IOC_FSBULKSTAT */
733 error = xfs_bulkstat(mp, &inlast, &count, xfs_bulkstat_one,
734 sizeof(xfs_bstat_t), bulkreq.ubuffer,
735 &done);
736
737 if (error)
738 return -error;
739
740 if (bulkreq.ocount != NULL) {
741 if (copy_to_user(bulkreq.lastip, &inlast,
742 sizeof(xfs_ino_t)))
743 return -XFS_ERROR(EFAULT);
744
745 if (copy_to_user(bulkreq.ocount, &count, sizeof(count)))
746 return -XFS_ERROR(EFAULT);
747 }
748
749 return 0;
750 }
751
752 STATIC int
753 xfs_ioc_fsgeometry_v1(
754 xfs_mount_t *mp,
755 void __user *arg)
756 {
757 xfs_fsop_geom_t fsgeo;
758 int error;
759
760 error = xfs_fs_geometry(mp, &fsgeo, 3);
761 if (error)
762 return -error;
763
764 /*
765 * Caller should have passed an argument of type
766 * xfs_fsop_geom_v1_t. This is a proper subset of the
767 * xfs_fsop_geom_t that xfs_fs_geometry() fills in.
768 */
769 if (copy_to_user(arg, &fsgeo, sizeof(xfs_fsop_geom_v1_t)))
770 return -XFS_ERROR(EFAULT);
771 return 0;
772 }
773
774 STATIC int
775 xfs_ioc_fsgeometry(
776 xfs_mount_t *mp,
777 void __user *arg)
778 {
779 xfs_fsop_geom_t fsgeo;
780 int error;
781
782 error = xfs_fs_geometry(mp, &fsgeo, 4);
783 if (error)
784 return -error;
785
786 if (copy_to_user(arg, &fsgeo, sizeof(fsgeo)))
787 return -XFS_ERROR(EFAULT);
788 return 0;
789 }
790
791 /*
792 * Linux extended inode flags interface.
793 */
794
795 STATIC unsigned int
796 xfs_merge_ioc_xflags(
797 unsigned int flags,
798 unsigned int start)
799 {
800 unsigned int xflags = start;
801
802 if (flags & FS_IMMUTABLE_FL)
803 xflags |= XFS_XFLAG_IMMUTABLE;
804 else
805 xflags &= ~XFS_XFLAG_IMMUTABLE;
806 if (flags & FS_APPEND_FL)
807 xflags |= XFS_XFLAG_APPEND;
808 else
809 xflags &= ~XFS_XFLAG_APPEND;
810 if (flags & FS_SYNC_FL)
811 xflags |= XFS_XFLAG_SYNC;
812 else
813 xflags &= ~XFS_XFLAG_SYNC;
814 if (flags & FS_NOATIME_FL)
815 xflags |= XFS_XFLAG_NOATIME;
816 else
817 xflags &= ~XFS_XFLAG_NOATIME;
818 if (flags & FS_NODUMP_FL)
819 xflags |= XFS_XFLAG_NODUMP;
820 else
821 xflags &= ~XFS_XFLAG_NODUMP;
822
823 return xflags;
824 }
825
826 STATIC unsigned int
827 xfs_di2lxflags(
828 __uint16_t di_flags)
829 {
830 unsigned int flags = 0;
831
832 if (di_flags & XFS_DIFLAG_IMMUTABLE)
833 flags |= FS_IMMUTABLE_FL;
834 if (di_flags & XFS_DIFLAG_APPEND)
835 flags |= FS_APPEND_FL;
836 if (di_flags & XFS_DIFLAG_SYNC)
837 flags |= FS_SYNC_FL;
838 if (di_flags & XFS_DIFLAG_NOATIME)
839 flags |= FS_NOATIME_FL;
840 if (di_flags & XFS_DIFLAG_NODUMP)
841 flags |= FS_NODUMP_FL;
842 return flags;
843 }
844
845 STATIC int
846 xfs_ioc_fsgetxattr(
847 xfs_inode_t *ip,
848 int attr,
849 void __user *arg)
850 {
851 struct fsxattr fa;
852
853 memset(&fa, 0, sizeof(struct fsxattr));
854
855 xfs_ilock(ip, XFS_ILOCK_SHARED);
856 fa.fsx_xflags = xfs_ip2xflags(ip);
857 fa.fsx_extsize = ip->i_d.di_extsize << ip->i_mount->m_sb.sb_blocklog;
858 fa.fsx_projid = xfs_get_projid(ip);
859
860 if (attr) {
861 if (ip->i_afp) {
862 if (ip->i_afp->if_flags & XFS_IFEXTENTS)
863 fa.fsx_nextents = ip->i_afp->if_bytes /
864 sizeof(xfs_bmbt_rec_t);
865 else
866 fa.fsx_nextents = ip->i_d.di_anextents;
867 } else
868 fa.fsx_nextents = 0;
869 } else {
870 if (ip->i_df.if_flags & XFS_IFEXTENTS)
871 fa.fsx_nextents = ip->i_df.if_bytes /
872 sizeof(xfs_bmbt_rec_t);
873 else
874 fa.fsx_nextents = ip->i_d.di_nextents;
875 }
876 xfs_iunlock(ip, XFS_ILOCK_SHARED);
877
878 if (copy_to_user(arg, &fa, sizeof(fa)))
879 return -EFAULT;
880 return 0;
881 }
882
883 STATIC void
884 xfs_set_diflags(
885 struct xfs_inode *ip,
886 unsigned int xflags)
887 {
888 unsigned int di_flags;
889
890 /* can't set PREALLOC this way, just preserve it */
891 di_flags = (ip->i_d.di_flags & XFS_DIFLAG_PREALLOC);
892 if (xflags & XFS_XFLAG_IMMUTABLE)
893 di_flags |= XFS_DIFLAG_IMMUTABLE;
894 if (xflags & XFS_XFLAG_APPEND)
895 di_flags |= XFS_DIFLAG_APPEND;
896 if (xflags & XFS_XFLAG_SYNC)
897 di_flags |= XFS_DIFLAG_SYNC;
898 if (xflags & XFS_XFLAG_NOATIME)
899 di_flags |= XFS_DIFLAG_NOATIME;
900 if (xflags & XFS_XFLAG_NODUMP)
901 di_flags |= XFS_DIFLAG_NODUMP;
902 if (xflags & XFS_XFLAG_PROJINHERIT)
903 di_flags |= XFS_DIFLAG_PROJINHERIT;
904 if (xflags & XFS_XFLAG_NODEFRAG)
905 di_flags |= XFS_DIFLAG_NODEFRAG;
906 if (xflags & XFS_XFLAG_FILESTREAM)
907 di_flags |= XFS_DIFLAG_FILESTREAM;
908 if (S_ISDIR(ip->i_d.di_mode)) {
909 if (xflags & XFS_XFLAG_RTINHERIT)
910 di_flags |= XFS_DIFLAG_RTINHERIT;
911 if (xflags & XFS_XFLAG_NOSYMLINKS)
912 di_flags |= XFS_DIFLAG_NOSYMLINKS;
913 if (xflags & XFS_XFLAG_EXTSZINHERIT)
914 di_flags |= XFS_DIFLAG_EXTSZINHERIT;
915 } else if (S_ISREG(ip->i_d.di_mode)) {
916 if (xflags & XFS_XFLAG_REALTIME)
917 di_flags |= XFS_DIFLAG_REALTIME;
918 if (xflags & XFS_XFLAG_EXTSIZE)
919 di_flags |= XFS_DIFLAG_EXTSIZE;
920 }
921
922 ip->i_d.di_flags = di_flags;
923 }
924
925 STATIC void
926 xfs_diflags_to_linux(
927 struct xfs_inode *ip)
928 {
929 struct inode *inode = VFS_I(ip);
930 unsigned int xflags = xfs_ip2xflags(ip);
931
932 if (xflags & XFS_XFLAG_IMMUTABLE)
933 inode->i_flags |= S_IMMUTABLE;
934 else
935 inode->i_flags &= ~S_IMMUTABLE;
936 if (xflags & XFS_XFLAG_APPEND)
937 inode->i_flags |= S_APPEND;
938 else
939 inode->i_flags &= ~S_APPEND;
940 if (xflags & XFS_XFLAG_SYNC)
941 inode->i_flags |= S_SYNC;
942 else
943 inode->i_flags &= ~S_SYNC;
944 if (xflags & XFS_XFLAG_NOATIME)
945 inode->i_flags |= S_NOATIME;
946 else
947 inode->i_flags &= ~S_NOATIME;
948 }
949
950 #define FSX_PROJID 1
951 #define FSX_EXTSIZE 2
952 #define FSX_XFLAGS 4
953 #define FSX_NONBLOCK 8
954
955 STATIC int
956 xfs_ioctl_setattr(
957 xfs_inode_t *ip,
958 struct fsxattr *fa,
959 int mask)
960 {
961 struct xfs_mount *mp = ip->i_mount;
962 struct xfs_trans *tp;
963 unsigned int lock_flags = 0;
964 struct xfs_dquot *udqp = NULL;
965 struct xfs_dquot *pdqp = NULL;
966 struct xfs_dquot *olddquot = NULL;
967 int code;
968
969 trace_xfs_ioctl_setattr(ip);
970
971 if (mp->m_flags & XFS_MOUNT_RDONLY)
972 return XFS_ERROR(EROFS);
973 if (XFS_FORCED_SHUTDOWN(mp))
974 return XFS_ERROR(EIO);
975
976 /*
977 * Disallow 32bit project ids when projid32bit feature is not enabled.
978 */
979 if ((mask & FSX_PROJID) && (fa->fsx_projid > (__uint16_t)-1) &&
980 !xfs_sb_version_hasprojid32bit(&ip->i_mount->m_sb))
981 return XFS_ERROR(EINVAL);
982
983 /*
984 * If disk quotas is on, we make sure that the dquots do exist on disk,
985 * before we start any other transactions. Trying to do this later
986 * is messy. We don't care to take a readlock to look at the ids
987 * in inode here, because we can't hold it across the trans_reserve.
988 * If the IDs do change before we take the ilock, we're covered
989 * because the i_*dquot fields will get updated anyway.
990 */
991 if (XFS_IS_QUOTA_ON(mp) && (mask & FSX_PROJID)) {
992 code = xfs_qm_vop_dqalloc(ip, ip->i_d.di_uid,
993 ip->i_d.di_gid, fa->fsx_projid,
994 XFS_QMOPT_PQUOTA, &udqp, NULL, &pdqp);
995 if (code)
996 return code;
997 }
998
999 /*
1000 * For the other attributes, we acquire the inode lock and
1001 * first do an error checking pass.
1002 */
1003 tp = xfs_trans_alloc(mp, XFS_TRANS_SETATTR_NOT_SIZE);
1004 code = xfs_trans_reserve(tp, &M_RES(mp)->tr_ichange, 0, 0);
1005 if (code)
1006 goto error_return;
1007
1008 lock_flags = XFS_ILOCK_EXCL;
1009 xfs_ilock(ip, lock_flags);
1010
1011 /*
1012 * CAP_FOWNER overrides the following restrictions:
1013 *
1014 * The user ID of the calling process must be equal
1015 * to the file owner ID, except in cases where the
1016 * CAP_FSETID capability is applicable.
1017 */
1018 if (!inode_owner_or_capable(VFS_I(ip))) {
1019 code = XFS_ERROR(EPERM);
1020 goto error_return;
1021 }
1022
1023 /*
1024 * Do a quota reservation only if projid is actually going to change.
1025 * Only allow changing of projid from init_user_ns since it is a
1026 * non user namespace aware identifier.
1027 */
1028 if (mask & FSX_PROJID) {
1029 if (current_user_ns() != &init_user_ns) {
1030 code = XFS_ERROR(EINVAL);
1031 goto error_return;
1032 }
1033
1034 if (XFS_IS_QUOTA_RUNNING(mp) &&
1035 XFS_IS_PQUOTA_ON(mp) &&
1036 xfs_get_projid(ip) != fa->fsx_projid) {
1037 ASSERT(tp);
1038 code = xfs_qm_vop_chown_reserve(tp, ip, udqp, NULL,
1039 pdqp, capable(CAP_FOWNER) ?
1040 XFS_QMOPT_FORCE_RES : 0);
1041 if (code) /* out of quota */
1042 goto error_return;
1043 }
1044 }
1045
1046 if (mask & FSX_EXTSIZE) {
1047 /*
1048 * Can't change extent size if any extents are allocated.
1049 */
1050 if (ip->i_d.di_nextents &&
1051 ((ip->i_d.di_extsize << mp->m_sb.sb_blocklog) !=
1052 fa->fsx_extsize)) {
1053 code = XFS_ERROR(EINVAL); /* EFBIG? */
1054 goto error_return;
1055 }
1056
1057 /*
1058 * Extent size must be a multiple of the appropriate block
1059 * size, if set at all. It must also be smaller than the
1060 * maximum extent size supported by the filesystem.
1061 *
1062 * Also, for non-realtime files, limit the extent size hint to
1063 * half the size of the AGs in the filesystem so alignment
1064 * doesn't result in extents larger than an AG.
1065 */
1066 if (fa->fsx_extsize != 0) {
1067 xfs_extlen_t size;
1068 xfs_fsblock_t extsize_fsb;
1069
1070 extsize_fsb = XFS_B_TO_FSB(mp, fa->fsx_extsize);
1071 if (extsize_fsb > MAXEXTLEN) {
1072 code = XFS_ERROR(EINVAL);
1073 goto error_return;
1074 }
1075
1076 if (XFS_IS_REALTIME_INODE(ip) ||
1077 ((mask & FSX_XFLAGS) &&
1078 (fa->fsx_xflags & XFS_XFLAG_REALTIME))) {
1079 size = mp->m_sb.sb_rextsize <<
1080 mp->m_sb.sb_blocklog;
1081 } else {
1082 size = mp->m_sb.sb_blocksize;
1083 if (extsize_fsb > mp->m_sb.sb_agblocks / 2) {
1084 code = XFS_ERROR(EINVAL);
1085 goto error_return;
1086 }
1087 }
1088
1089 if (fa->fsx_extsize % size) {
1090 code = XFS_ERROR(EINVAL);
1091 goto error_return;
1092 }
1093 }
1094 }
1095
1096
1097 if (mask & FSX_XFLAGS) {
1098 /*
1099 * Can't change realtime flag if any extents are allocated.
1100 */
1101 if ((ip->i_d.di_nextents || ip->i_delayed_blks) &&
1102 (XFS_IS_REALTIME_INODE(ip)) !=
1103 (fa->fsx_xflags & XFS_XFLAG_REALTIME)) {
1104 code = XFS_ERROR(EINVAL); /* EFBIG? */
1105 goto error_return;
1106 }
1107
1108 /*
1109 * If realtime flag is set then must have realtime data.
1110 */
1111 if ((fa->fsx_xflags & XFS_XFLAG_REALTIME)) {
1112 if ((mp->m_sb.sb_rblocks == 0) ||
1113 (mp->m_sb.sb_rextsize == 0) ||
1114 (ip->i_d.di_extsize % mp->m_sb.sb_rextsize)) {
1115 code = XFS_ERROR(EINVAL);
1116 goto error_return;
1117 }
1118 }
1119
1120 /*
1121 * Can't modify an immutable/append-only file unless
1122 * we have appropriate permission.
1123 */
1124 if ((ip->i_d.di_flags &
1125 (XFS_DIFLAG_IMMUTABLE|XFS_DIFLAG_APPEND) ||
1126 (fa->fsx_xflags &
1127 (XFS_XFLAG_IMMUTABLE | XFS_XFLAG_APPEND))) &&
1128 !capable(CAP_LINUX_IMMUTABLE)) {
1129 code = XFS_ERROR(EPERM);
1130 goto error_return;
1131 }
1132 }
1133
1134 xfs_trans_ijoin(tp, ip, 0);
1135
1136 /*
1137 * Change file ownership. Must be the owner or privileged.
1138 */
1139 if (mask & FSX_PROJID) {
1140 /*
1141 * CAP_FSETID overrides the following restrictions:
1142 *
1143 * The set-user-ID and set-group-ID bits of a file will be
1144 * cleared upon successful return from chown()
1145 */
1146 if ((ip->i_d.di_mode & (S_ISUID|S_ISGID)) &&
1147 !inode_capable(VFS_I(ip), CAP_FSETID))
1148 ip->i_d.di_mode &= ~(S_ISUID|S_ISGID);
1149
1150 /*
1151 * Change the ownerships and register quota modifications
1152 * in the transaction.
1153 */
1154 if (xfs_get_projid(ip) != fa->fsx_projid) {
1155 if (XFS_IS_QUOTA_RUNNING(mp) && XFS_IS_PQUOTA_ON(mp)) {
1156 olddquot = xfs_qm_vop_chown(tp, ip,
1157 &ip->i_pdquot, pdqp);
1158 }
1159 xfs_set_projid(ip, fa->fsx_projid);
1160
1161 /*
1162 * We may have to rev the inode as well as
1163 * the superblock version number since projids didn't
1164 * exist before DINODE_VERSION_2 and SB_VERSION_NLINK.
1165 */
1166 if (ip->i_d.di_version == 1)
1167 xfs_bump_ino_vers2(tp, ip);
1168 }
1169
1170 }
1171
1172 if (mask & FSX_EXTSIZE)
1173 ip->i_d.di_extsize = fa->fsx_extsize >> mp->m_sb.sb_blocklog;
1174 if (mask & FSX_XFLAGS) {
1175 xfs_set_diflags(ip, fa->fsx_xflags);
1176 xfs_diflags_to_linux(ip);
1177 }
1178
1179 xfs_trans_ichgtime(tp, ip, XFS_ICHGTIME_CHG);
1180 xfs_trans_log_inode(tp, ip, XFS_ILOG_CORE);
1181
1182 XFS_STATS_INC(xs_ig_attrchg);
1183
1184 /*
1185 * If this is a synchronous mount, make sure that the
1186 * transaction goes to disk before returning to the user.
1187 * This is slightly sub-optimal in that truncates require
1188 * two sync transactions instead of one for wsync filesystems.
1189 * One for the truncate and one for the timestamps since we
1190 * don't want to change the timestamps unless we're sure the
1191 * truncate worked. Truncates are less than 1% of the laddis
1192 * mix so this probably isn't worth the trouble to optimize.
1193 */
1194 if (mp->m_flags & XFS_MOUNT_WSYNC)
1195 xfs_trans_set_sync(tp);
1196 code = xfs_trans_commit(tp, 0);
1197 xfs_iunlock(ip, lock_flags);
1198
1199 /*
1200 * Release any dquot(s) the inode had kept before chown.
1201 */
1202 xfs_qm_dqrele(olddquot);
1203 xfs_qm_dqrele(udqp);
1204 xfs_qm_dqrele(pdqp);
1205
1206 return code;
1207
1208 error_return:
1209 xfs_qm_dqrele(udqp);
1210 xfs_qm_dqrele(pdqp);
1211 xfs_trans_cancel(tp, 0);
1212 if (lock_flags)
1213 xfs_iunlock(ip, lock_flags);
1214 return code;
1215 }
1216
1217 STATIC int
1218 xfs_ioc_fssetxattr(
1219 xfs_inode_t *ip,
1220 struct file *filp,
1221 void __user *arg)
1222 {
1223 struct fsxattr fa;
1224 unsigned int mask;
1225 int error;
1226
1227 if (copy_from_user(&fa, arg, sizeof(fa)))
1228 return -EFAULT;
1229
1230 mask = FSX_XFLAGS | FSX_EXTSIZE | FSX_PROJID;
1231 if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
1232 mask |= FSX_NONBLOCK;
1233
1234 error = mnt_want_write_file(filp);
1235 if (error)
1236 return error;
1237 error = xfs_ioctl_setattr(ip, &fa, mask);
1238 mnt_drop_write_file(filp);
1239 return -error;
1240 }
1241
1242 STATIC int
1243 xfs_ioc_getxflags(
1244 xfs_inode_t *ip,
1245 void __user *arg)
1246 {
1247 unsigned int flags;
1248
1249 flags = xfs_di2lxflags(ip->i_d.di_flags);
1250 if (copy_to_user(arg, &flags, sizeof(flags)))
1251 return -EFAULT;
1252 return 0;
1253 }
1254
1255 STATIC int
1256 xfs_ioc_setxflags(
1257 xfs_inode_t *ip,
1258 struct file *filp,
1259 void __user *arg)
1260 {
1261 struct fsxattr fa;
1262 unsigned int flags;
1263 unsigned int mask;
1264 int error;
1265
1266 if (copy_from_user(&flags, arg, sizeof(flags)))
1267 return -EFAULT;
1268
1269 if (flags & ~(FS_IMMUTABLE_FL | FS_APPEND_FL | \
1270 FS_NOATIME_FL | FS_NODUMP_FL | \
1271 FS_SYNC_FL))
1272 return -EOPNOTSUPP;
1273
1274 mask = FSX_XFLAGS;
1275 if (filp->f_flags & (O_NDELAY|O_NONBLOCK))
1276 mask |= FSX_NONBLOCK;
1277 fa.fsx_xflags = xfs_merge_ioc_xflags(flags, xfs_ip2xflags(ip));
1278
1279 error = mnt_want_write_file(filp);
1280 if (error)
1281 return error;
1282 error = xfs_ioctl_setattr(ip, &fa, mask);
1283 mnt_drop_write_file(filp);
1284 return -error;
1285 }
1286
1287 STATIC int
1288 xfs_getbmap_format(void **ap, struct getbmapx *bmv, int *full)
1289 {
1290 struct getbmap __user *base = *ap;
1291
1292 /* copy only getbmap portion (not getbmapx) */
1293 if (copy_to_user(base, bmv, sizeof(struct getbmap)))
1294 return XFS_ERROR(EFAULT);
1295
1296 *ap += sizeof(struct getbmap);
1297 return 0;
1298 }
1299
1300 STATIC int
1301 xfs_ioc_getbmap(
1302 struct xfs_inode *ip,
1303 int ioflags,
1304 unsigned int cmd,
1305 void __user *arg)
1306 {
1307 struct getbmapx bmx;
1308 int error;
1309
1310 if (copy_from_user(&bmx, arg, sizeof(struct getbmapx)))
1311 return -XFS_ERROR(EFAULT);
1312
1313 if (bmx.bmv_count < 2)
1314 return -XFS_ERROR(EINVAL);
1315
1316 bmx.bmv_iflags = (cmd == XFS_IOC_GETBMAPA ? BMV_IF_ATTRFORK : 0);
1317 if (ioflags & IO_INVIS)
1318 bmx.bmv_iflags |= BMV_IF_NO_DMAPI_READ;
1319
1320 error = xfs_getbmap(ip, &bmx, xfs_getbmap_format,
1321 (struct getbmap *)arg+1);
1322 if (error)
1323 return -error;
1324
1325 /* copy back header - only size of getbmap */
1326 if (copy_to_user(arg, &bmx, sizeof(struct getbmap)))
1327 return -XFS_ERROR(EFAULT);
1328 return 0;
1329 }
1330
1331 STATIC int
1332 xfs_getbmapx_format(void **ap, struct getbmapx *bmv, int *full)
1333 {
1334 struct getbmapx __user *base = *ap;
1335
1336 if (copy_to_user(base, bmv, sizeof(struct getbmapx)))
1337 return XFS_ERROR(EFAULT);
1338
1339 *ap += sizeof(struct getbmapx);
1340 return 0;
1341 }
1342
1343 STATIC int
1344 xfs_ioc_getbmapx(
1345 struct xfs_inode *ip,
1346 void __user *arg)
1347 {
1348 struct getbmapx bmx;
1349 int error;
1350
1351 if (copy_from_user(&bmx, arg, sizeof(bmx)))
1352 return -XFS_ERROR(EFAULT);
1353
1354 if (bmx.bmv_count < 2)
1355 return -XFS_ERROR(EINVAL);
1356
1357 if (bmx.bmv_iflags & (~BMV_IF_VALID))
1358 return -XFS_ERROR(EINVAL);
1359
1360 error = xfs_getbmap(ip, &bmx, xfs_getbmapx_format,
1361 (struct getbmapx *)arg+1);
1362 if (error)
1363 return -error;
1364
1365 /* copy back header */
1366 if (copy_to_user(arg, &bmx, sizeof(struct getbmapx)))
1367 return -XFS_ERROR(EFAULT);
1368
1369 return 0;
1370 }
1371
1372 int
1373 xfs_ioc_swapext(
1374 xfs_swapext_t *sxp)
1375 {
1376 xfs_inode_t *ip, *tip;
1377 struct fd f, tmp;
1378 int error = 0;
1379
1380 /* Pull information for the target fd */
1381 f = fdget((int)sxp->sx_fdtarget);
1382 if (!f.file) {
1383 error = XFS_ERROR(EINVAL);
1384 goto out;
1385 }
1386
1387 if (!(f.file->f_mode & FMODE_WRITE) ||
1388 !(f.file->f_mode & FMODE_READ) ||
1389 (f.file->f_flags & O_APPEND)) {
1390 error = XFS_ERROR(EBADF);
1391 goto out_put_file;
1392 }
1393
1394 tmp = fdget((int)sxp->sx_fdtmp);
1395 if (!tmp.file) {
1396 error = XFS_ERROR(EINVAL);
1397 goto out_put_file;
1398 }
1399
1400 if (!(tmp.file->f_mode & FMODE_WRITE) ||
1401 !(tmp.file->f_mode & FMODE_READ) ||
1402 (tmp.file->f_flags & O_APPEND)) {
1403 error = XFS_ERROR(EBADF);
1404 goto out_put_tmp_file;
1405 }
1406
1407 if (IS_SWAPFILE(file_inode(f.file)) ||
1408 IS_SWAPFILE(file_inode(tmp.file))) {
1409 error = XFS_ERROR(EINVAL);
1410 goto out_put_tmp_file;
1411 }
1412
1413 ip = XFS_I(file_inode(f.file));
1414 tip = XFS_I(file_inode(tmp.file));
1415
1416 if (ip->i_mount != tip->i_mount) {
1417 error = XFS_ERROR(EINVAL);
1418 goto out_put_tmp_file;
1419 }
1420
1421 if (ip->i_ino == tip->i_ino) {
1422 error = XFS_ERROR(EINVAL);
1423 goto out_put_tmp_file;
1424 }
1425
1426 if (XFS_FORCED_SHUTDOWN(ip->i_mount)) {
1427 error = XFS_ERROR(EIO);
1428 goto out_put_tmp_file;
1429 }
1430
1431 error = xfs_swap_extents(ip, tip, sxp);
1432
1433 out_put_tmp_file:
1434 fdput(tmp);
1435 out_put_file:
1436 fdput(f);
1437 out:
1438 return error;
1439 }
1440
1441 /*
1442 * Note: some of the ioctl's return positive numbers as a
1443 * byte count indicating success, such as readlink_by_handle.
1444 * So we don't "sign flip" like most other routines. This means
1445 * true errors need to be returned as a negative value.
1446 */
1447 long
1448 xfs_file_ioctl(
1449 struct file *filp,
1450 unsigned int cmd,
1451 unsigned long p)
1452 {
1453 struct inode *inode = file_inode(filp);
1454 struct xfs_inode *ip = XFS_I(inode);
1455 struct xfs_mount *mp = ip->i_mount;
1456 void __user *arg = (void __user *)p;
1457 int ioflags = 0;
1458 int error;
1459
1460 if (filp->f_mode & FMODE_NOCMTIME)
1461 ioflags |= IO_INVIS;
1462
1463 trace_xfs_file_ioctl(ip);
1464
1465 switch (cmd) {
1466 case FITRIM:
1467 return xfs_ioc_trim(mp, arg);
1468 case XFS_IOC_ALLOCSP:
1469 case XFS_IOC_FREESP:
1470 case XFS_IOC_RESVSP:
1471 case XFS_IOC_UNRESVSP:
1472 case XFS_IOC_ALLOCSP64:
1473 case XFS_IOC_FREESP64:
1474 case XFS_IOC_RESVSP64:
1475 case XFS_IOC_UNRESVSP64:
1476 case XFS_IOC_ZERO_RANGE: {
1477 xfs_flock64_t bf;
1478
1479 if (copy_from_user(&bf, arg, sizeof(bf)))
1480 return -XFS_ERROR(EFAULT);
1481 return xfs_ioc_space(ip, inode, filp, ioflags, cmd, &bf);
1482 }
1483 case XFS_IOC_DIOINFO: {
1484 struct dioattr da;
1485 xfs_buftarg_t *target =
1486 XFS_IS_REALTIME_INODE(ip) ?
1487 mp->m_rtdev_targp : mp->m_ddev_targp;
1488
1489 da.d_mem = da.d_miniosz = 1 << target->bt_sshift;
1490 da.d_maxiosz = INT_MAX & ~(da.d_miniosz - 1);
1491
1492 if (copy_to_user(arg, &da, sizeof(da)))
1493 return -XFS_ERROR(EFAULT);
1494 return 0;
1495 }
1496
1497 case XFS_IOC_FSBULKSTAT_SINGLE:
1498 case XFS_IOC_FSBULKSTAT:
1499 case XFS_IOC_FSINUMBERS:
1500 return xfs_ioc_bulkstat(mp, cmd, arg);
1501
1502 case XFS_IOC_FSGEOMETRY_V1:
1503 return xfs_ioc_fsgeometry_v1(mp, arg);
1504
1505 case XFS_IOC_FSGEOMETRY:
1506 return xfs_ioc_fsgeometry(mp, arg);
1507
1508 case XFS_IOC_GETVERSION:
1509 return put_user(inode->i_generation, (int __user *)arg);
1510
1511 case XFS_IOC_FSGETXATTR:
1512 return xfs_ioc_fsgetxattr(ip, 0, arg);
1513 case XFS_IOC_FSGETXATTRA:
1514 return xfs_ioc_fsgetxattr(ip, 1, arg);
1515 case XFS_IOC_FSSETXATTR:
1516 return xfs_ioc_fssetxattr(ip, filp, arg);
1517 case XFS_IOC_GETXFLAGS:
1518 return xfs_ioc_getxflags(ip, arg);
1519 case XFS_IOC_SETXFLAGS:
1520 return xfs_ioc_setxflags(ip, filp, arg);
1521
1522 case XFS_IOC_FSSETDM: {
1523 struct fsdmidata dmi;
1524
1525 if (copy_from_user(&dmi, arg, sizeof(dmi)))
1526 return -XFS_ERROR(EFAULT);
1527
1528 error = mnt_want_write_file(filp);
1529 if (error)
1530 return error;
1531
1532 error = xfs_set_dmattrs(ip, dmi.fsd_dmevmask,
1533 dmi.fsd_dmstate);
1534 mnt_drop_write_file(filp);
1535 return -error;
1536 }
1537
1538 case XFS_IOC_GETBMAP:
1539 case XFS_IOC_GETBMAPA:
1540 return xfs_ioc_getbmap(ip, ioflags, cmd, arg);
1541
1542 case XFS_IOC_GETBMAPX:
1543 return xfs_ioc_getbmapx(ip, arg);
1544
1545 case XFS_IOC_FD_TO_HANDLE:
1546 case XFS_IOC_PATH_TO_HANDLE:
1547 case XFS_IOC_PATH_TO_FSHANDLE: {
1548 xfs_fsop_handlereq_t hreq;
1549
1550 if (copy_from_user(&hreq, arg, sizeof(hreq)))
1551 return -XFS_ERROR(EFAULT);
1552 return xfs_find_handle(cmd, &hreq);
1553 }
1554 case XFS_IOC_OPEN_BY_HANDLE: {
1555 xfs_fsop_handlereq_t hreq;
1556
1557 if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1558 return -XFS_ERROR(EFAULT);
1559 return xfs_open_by_handle(filp, &hreq);
1560 }
1561 case XFS_IOC_FSSETDM_BY_HANDLE:
1562 return xfs_fssetdm_by_handle(filp, arg);
1563
1564 case XFS_IOC_READLINK_BY_HANDLE: {
1565 xfs_fsop_handlereq_t hreq;
1566
1567 if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))
1568 return -XFS_ERROR(EFAULT);
1569 return xfs_readlink_by_handle(filp, &hreq);
1570 }
1571 case XFS_IOC_ATTRLIST_BY_HANDLE:
1572 return xfs_attrlist_by_handle(filp, arg);
1573
1574 case XFS_IOC_ATTRMULTI_BY_HANDLE:
1575 return xfs_attrmulti_by_handle(filp, arg);
1576
1577 case XFS_IOC_SWAPEXT: {
1578 struct xfs_swapext sxp;
1579
1580 if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))
1581 return -XFS_ERROR(EFAULT);
1582 error = mnt_want_write_file(filp);
1583 if (error)
1584 return error;
1585 error = xfs_ioc_swapext(&sxp);
1586 mnt_drop_write_file(filp);
1587 return -error;
1588 }
1589
1590 case XFS_IOC_FSCOUNTS: {
1591 xfs_fsop_counts_t out;
1592
1593 error = xfs_fs_counts(mp, &out);
1594 if (error)
1595 return -error;
1596
1597 if (copy_to_user(arg, &out, sizeof(out)))
1598 return -XFS_ERROR(EFAULT);
1599 return 0;
1600 }
1601
1602 case XFS_IOC_SET_RESBLKS: {
1603 xfs_fsop_resblks_t inout;
1604 __uint64_t in;
1605
1606 if (!capable(CAP_SYS_ADMIN))
1607 return -EPERM;
1608
1609 if (mp->m_flags & XFS_MOUNT_RDONLY)
1610 return -XFS_ERROR(EROFS);
1611
1612 if (copy_from_user(&inout, arg, sizeof(inout)))
1613 return -XFS_ERROR(EFAULT);
1614
1615 error = mnt_want_write_file(filp);
1616 if (error)
1617 return error;
1618
1619 /* input parameter is passed in resblks field of structure */
1620 in = inout.resblks;
1621 error = xfs_reserve_blocks(mp, &in, &inout);
1622 mnt_drop_write_file(filp);
1623 if (error)
1624 return -error;
1625
1626 if (copy_to_user(arg, &inout, sizeof(inout)))
1627 return -XFS_ERROR(EFAULT);
1628 return 0;
1629 }
1630
1631 case XFS_IOC_GET_RESBLKS: {
1632 xfs_fsop_resblks_t out;
1633
1634 if (!capable(CAP_SYS_ADMIN))
1635 return -EPERM;
1636
1637 error = xfs_reserve_blocks(mp, NULL, &out);
1638 if (error)
1639 return -error;
1640
1641 if (copy_to_user(arg, &out, sizeof(out)))
1642 return -XFS_ERROR(EFAULT);
1643
1644 return 0;
1645 }
1646
1647 case XFS_IOC_FSGROWFSDATA: {
1648 xfs_growfs_data_t in;
1649
1650 if (copy_from_user(&in, arg, sizeof(in)))
1651 return -XFS_ERROR(EFAULT);
1652
1653 error = mnt_want_write_file(filp);
1654 if (error)
1655 return error;
1656 error = xfs_growfs_data(mp, &in);
1657 mnt_drop_write_file(filp);
1658 return -error;
1659 }
1660
1661 case XFS_IOC_FSGROWFSLOG: {
1662 xfs_growfs_log_t in;
1663
1664 if (copy_from_user(&in, arg, sizeof(in)))
1665 return -XFS_ERROR(EFAULT);
1666
1667 error = mnt_want_write_file(filp);
1668 if (error)
1669 return error;
1670 error = xfs_growfs_log(mp, &in);
1671 mnt_drop_write_file(filp);
1672 return -error;
1673 }
1674
1675 case XFS_IOC_FSGROWFSRT: {
1676 xfs_growfs_rt_t in;
1677
1678 if (copy_from_user(&in, arg, sizeof(in)))
1679 return -XFS_ERROR(EFAULT);
1680
1681 error = mnt_want_write_file(filp);
1682 if (error)
1683 return error;
1684 error = xfs_growfs_rt(mp, &in);
1685 mnt_drop_write_file(filp);
1686 return -error;
1687 }
1688
1689 case XFS_IOC_GOINGDOWN: {
1690 __uint32_t in;
1691
1692 if (!capable(CAP_SYS_ADMIN))
1693 return -EPERM;
1694
1695 if (get_user(in, (__uint32_t __user *)arg))
1696 return -XFS_ERROR(EFAULT);
1697
1698 error = xfs_fs_goingdown(mp, in);
1699 return -error;
1700 }
1701
1702 case XFS_IOC_ERROR_INJECTION: {
1703 xfs_error_injection_t in;
1704
1705 if (!capable(CAP_SYS_ADMIN))
1706 return -EPERM;
1707
1708 if (copy_from_user(&in, arg, sizeof(in)))
1709 return -XFS_ERROR(EFAULT);
1710
1711 error = xfs_errortag_add(in.errtag, mp);
1712 return -error;
1713 }
1714
1715 case XFS_IOC_ERROR_CLEARALL:
1716 if (!capable(CAP_SYS_ADMIN))
1717 return -EPERM;
1718
1719 error = xfs_errortag_clearall(mp, 1);
1720 return -error;
1721
1722 case XFS_IOC_FREE_EOFBLOCKS: {
1723 struct xfs_eofblocks eofb;
1724
1725 if (copy_from_user(&eofb, arg, sizeof(eofb)))
1726 return -XFS_ERROR(EFAULT);
1727
1728 if (eofb.eof_version != XFS_EOFBLOCKS_VERSION)
1729 return -XFS_ERROR(EINVAL);
1730
1731 if (eofb.eof_flags & ~XFS_EOF_FLAGS_VALID)
1732 return -XFS_ERROR(EINVAL);
1733
1734 if (memchr_inv(&eofb.pad32, 0, sizeof(eofb.pad32)) ||
1735 memchr_inv(eofb.pad64, 0, sizeof(eofb.pad64)))
1736 return -XFS_ERROR(EINVAL);
1737
1738 error = xfs_icache_free_eofblocks(mp, &eofb);
1739 return -error;
1740 }
1741
1742 default:
1743 return -ENOTTY;
1744 }
1745 }
Ubuntu Jammy Linux kernel mirror