?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
nfsd4: clean up callback security parsing
[linux-2.6/libata-dev.git] / fs / nfsd / nfs4xdr.c
blob511f980b605cbc03c2ebc2428795f887a7afedb7
1 /*
2 * Server-side XDR for NFSv4
3 *
4 * Copyright (c) 2002 The Regents of the University of Michigan.
5 * All rights reserved.
6 *
7 * Kendrick Smith <kmsmith@umich.edu>
8 * Andy Adamson <andros@umich.edu>
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 *
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the University nor the names of its
20 * contributors may be used to endorse or promote products derived
21 * from this software without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 *
35 * TODO: Neil Brown made the following observation: We currently
36 * initially reserve NFSD_BUFSIZE space on the transmit queue and
37 * never release any of that until the request is complete.
38 * It would be good to calculate a new maximum response size while
39 * decoding the COMPOUND, and call svc_reserve with this number
40 * at the end of nfs4svc_decode_compoundargs.
41 */
42
43 #include <linux/slab.h>
44 #include <linux/namei.h>
45 #include <linux/statfs.h>
46 #include <linux/utsname.h>
47 #include <linux/pagemap.h>
48 #include <linux/sunrpc/svcauth_gss.h>
49
50 #include "idmap.h"
51 #include "acl.h"
52 #include "xdr4.h"
53 #include "vfs.h"
54 #include "state.h"
55 #include "cache.h"
56
57 #define NFSDDBG_FACILITY NFSDDBG_XDR
58
59 /*
60 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
61 * directory in order to indicate to the client that a filesystem boundary is present
62 * We use a fixed fsid for a referral
63 */
64 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL
65 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL
66
67 static __be32
68 check_filename(char *str, int len, __be32 err)
69 {
70 int i;
71
72 if (len == 0)
73 return nfserr_inval;
74 if (isdotent(str, len))
75 return err;
76 for (i = 0; i < len; i++)
77 if (str[i] == '/')
78 return err;
79 return 0;
80 }
81
82 #define DECODE_HEAD \
83 __be32 *p; \
84 __be32 status
85 #define DECODE_TAIL \
86 status = 0; \
87 out: \
88 return status; \
89 xdr_error: \
90 dprintk("NFSD: xdr error (%s:%d)\n", \
91 __FILE__, __LINE__); \
92 status = nfserr_bad_xdr; \
93 goto out
94
95 #define READ32(x) (x) = ntohl(*p++)
96 #define READ64(x) do { \
97 (x) = (u64)ntohl(*p++) << 32; \
98 (x) |= ntohl(*p++); \
99 } while (0)
100 #define READTIME(x) do { \
101 p++; \
102 (x) = ntohl(*p++); \
103 p++; \
104 } while (0)
105 #define READMEM(x,nbytes) do { \
106 x = (char *)p; \
107 p += XDR_QUADLEN(nbytes); \
108 } while (0)
109 #define SAVEMEM(x,nbytes) do { \
110 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \
111 savemem(argp, p, nbytes) : \
112 (char *)p)) { \
113 dprintk("NFSD: xdr error (%s:%d)\n", \
114 __FILE__, __LINE__); \
115 goto xdr_error; \
116 } \
117 p += XDR_QUADLEN(nbytes); \
118 } while (0)
119 #define COPYMEM(x,nbytes) do { \
120 memcpy((x), p, nbytes); \
121 p += XDR_QUADLEN(nbytes); \
122 } while (0)
123
124 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */
125 #define READ_BUF(nbytes) do { \
126 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \
127 p = argp->p; \
128 argp->p += XDR_QUADLEN(nbytes); \
129 } else if (!(p = read_buf(argp, nbytes))) { \
130 dprintk("NFSD: xdr error (%s:%d)\n", \
131 __FILE__, __LINE__); \
132 goto xdr_error; \
133 } \
134 } while (0)
135
136 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes)
137 {
138 /* We want more bytes than seem to be available.
139 * Maybe we need a new page, maybe we have just run out
140 */
141 unsigned int avail = (char *)argp->end - (char *)argp->p;
142 __be32 *p;
143 if (avail + argp->pagelen < nbytes)
144 return NULL;
145 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */
146 return NULL;
147 /* ok, we can do it with the current plus the next page */
148 if (nbytes <= sizeof(argp->tmp))
149 p = argp->tmp;
150 else {
151 kfree(argp->tmpp);
152 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL);
153 if (!p)
154 return NULL;
155
156 }
157 /*
158 * The following memcpy is safe because read_buf is always
159 * called with nbytes > avail, and the two cases above both
160 * guarantee p points to at least nbytes bytes.
161 */
162 memcpy(p, argp->p, avail);
163 /* step to next page */
164 argp->p = page_address(argp->pagelist[0]);
165 argp->pagelist++;
166 if (argp->pagelen < PAGE_SIZE) {
167 argp->end = argp->p + (argp->pagelen>>2);
168 argp->pagelen = 0;
169 } else {
170 argp->end = argp->p + (PAGE_SIZE>>2);
171 argp->pagelen -= PAGE_SIZE;
172 }
173 memcpy(((char*)p)+avail, argp->p, (nbytes - avail));
174 argp->p += XDR_QUADLEN(nbytes - avail);
175 return p;
176 }
177
178 static int zero_clientid(clientid_t *clid)
179 {
180 return (clid->cl_boot == 0) && (clid->cl_id == 0);
181 }
182
183 static int
184 defer_free(struct nfsd4_compoundargs *argp,
185 void (*release)(const void *), void *p)
186 {
187 struct tmpbuf *tb;
188
189 tb = kmalloc(sizeof(*tb), GFP_KERNEL);
190 if (!tb)
191 return -ENOMEM;
192 tb->buf = p;
193 tb->release = release;
194 tb->next = argp->to_free;
195 argp->to_free = tb;
196 return 0;
197 }
198
199 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes)
200 {
201 if (p == argp->tmp) {
202 p = kmemdup(argp->tmp, nbytes, GFP_KERNEL);
203 if (!p)
204 return NULL;
205 } else {
206 BUG_ON(p != argp->tmpp);
207 argp->tmpp = NULL;
208 }
209 if (defer_free(argp, kfree, p)) {
210 kfree(p);
211 return NULL;
212 } else
213 return (char *)p;
214 }
215
216 static __be32
217 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval)
218 {
219 u32 bmlen;
220 DECODE_HEAD;
221
222 bmval[0] = 0;
223 bmval[1] = 0;
224 bmval[2] = 0;
225
226 READ_BUF(4);
227 READ32(bmlen);
228 if (bmlen > 1000)
229 goto xdr_error;
230
231 READ_BUF(bmlen << 2);
232 if (bmlen > 0)
233 READ32(bmval[0]);
234 if (bmlen > 1)
235 READ32(bmval[1]);
236 if (bmlen > 2)
237 READ32(bmval[2]);
238
239 DECODE_TAIL;
240 }
241
242 static __be32
243 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
244 struct iattr *iattr, struct nfs4_acl **acl)
245 {
246 int expected_len, len = 0;
247 u32 dummy32;
248 char *buf;
249 int host_err;
250
251 DECODE_HEAD;
252 iattr->ia_valid = 0;
253 if ((status = nfsd4_decode_bitmap(argp, bmval)))
254 return status;
255
256 READ_BUF(4);
257 READ32(expected_len);
258
259 if (bmval[0] & FATTR4_WORD0_SIZE) {
260 READ_BUF(8);
261 len += 8;
262 READ64(iattr->ia_size);
263 iattr->ia_valid |= ATTR_SIZE;
264 }
265 if (bmval[0] & FATTR4_WORD0_ACL) {
266 int nace;
267 struct nfs4_ace *ace;
268
269 READ_BUF(4); len += 4;
270 READ32(nace);
271
272 if (nace > NFS4_ACL_MAX)
273 return nfserr_resource;
274
275 *acl = nfs4_acl_new(nace);
276 if (*acl == NULL) {
277 host_err = -ENOMEM;
278 goto out_nfserr;
279 }
280 defer_free(argp, kfree, *acl);
281
282 (*acl)->naces = nace;
283 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) {
284 READ_BUF(16); len += 16;
285 READ32(ace->type);
286 READ32(ace->flag);
287 READ32(ace->access_mask);
288 READ32(dummy32);
289 READ_BUF(dummy32);
290 len += XDR_QUADLEN(dummy32) << 2;
291 READMEM(buf, dummy32);
292 ace->whotype = nfs4_acl_get_whotype(buf, dummy32);
293 status = nfs_ok;
294 if (ace->whotype != NFS4_ACL_WHO_NAMED)
295 ace->who = 0;
296 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
297 status = nfsd_map_name_to_gid(argp->rqstp,
298 buf, dummy32, &ace->who);
299 else
300 status = nfsd_map_name_to_uid(argp->rqstp,
301 buf, dummy32, &ace->who);
302 if (status)
303 return status;
304 }
305 } else
306 *acl = NULL;
307 if (bmval[1] & FATTR4_WORD1_MODE) {
308 READ_BUF(4);
309 len += 4;
310 READ32(iattr->ia_mode);
311 iattr->ia_mode &= (S_IFMT | S_IALLUGO);
312 iattr->ia_valid |= ATTR_MODE;
313 }
314 if (bmval[1] & FATTR4_WORD1_OWNER) {
315 READ_BUF(4);
316 len += 4;
317 READ32(dummy32);
318 READ_BUF(dummy32);
319 len += (XDR_QUADLEN(dummy32) << 2);
320 READMEM(buf, dummy32);
321 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid)))
322 return status;
323 iattr->ia_valid |= ATTR_UID;
324 }
325 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
326 READ_BUF(4);
327 len += 4;
328 READ32(dummy32);
329 READ_BUF(dummy32);
330 len += (XDR_QUADLEN(dummy32) << 2);
331 READMEM(buf, dummy32);
332 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid)))
333 return status;
334 iattr->ia_valid |= ATTR_GID;
335 }
336 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
337 READ_BUF(4);
338 len += 4;
339 READ32(dummy32);
340 switch (dummy32) {
341 case NFS4_SET_TO_CLIENT_TIME:
342 /* We require the high 32 bits of 'seconds' to be 0, and we ignore
343 all 32 bits of 'nseconds'. */
344 READ_BUF(12);
345 len += 12;
346 READ32(dummy32);
347 if (dummy32)
348 return nfserr_inval;
349 READ32(iattr->ia_atime.tv_sec);
350 READ32(iattr->ia_atime.tv_nsec);
351 if (iattr->ia_atime.tv_nsec >= (u32)1000000000)
352 return nfserr_inval;
353 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
354 break;
355 case NFS4_SET_TO_SERVER_TIME:
356 iattr->ia_valid |= ATTR_ATIME;
357 break;
358 default:
359 goto xdr_error;
360 }
361 }
362 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
363 READ_BUF(4);
364 len += 4;
365 READ32(dummy32);
366 switch (dummy32) {
367 case NFS4_SET_TO_CLIENT_TIME:
368 /* We require the high 32 bits of 'seconds' to be 0, and we ignore
369 all 32 bits of 'nseconds'. */
370 READ_BUF(12);
371 len += 12;
372 READ32(dummy32);
373 if (dummy32)
374 return nfserr_inval;
375 READ32(iattr->ia_mtime.tv_sec);
376 READ32(iattr->ia_mtime.tv_nsec);
377 if (iattr->ia_mtime.tv_nsec >= (u32)1000000000)
378 return nfserr_inval;
379 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
380 break;
381 case NFS4_SET_TO_SERVER_TIME:
382 iattr->ia_valid |= ATTR_MTIME;
383 break;
384 default:
385 goto xdr_error;
386 }
387 }
388 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
389 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
390 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2)
391 READ_BUF(expected_len - len);
392 else if (len != expected_len)
393 goto xdr_error;
394
395 DECODE_TAIL;
396
397 out_nfserr:
398 status = nfserrno(host_err);
399 goto out;
400 }
401
402 static __be32
403 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid)
404 {
405 DECODE_HEAD;
406
407 READ_BUF(sizeof(stateid_t));
408 READ32(sid->si_generation);
409 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
410
411 DECODE_TAIL;
412 }
413
414 static __be32
415 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access)
416 {
417 DECODE_HEAD;
418
419 READ_BUF(4);
420 READ32(access->ac_req_access);
421
422 DECODE_TAIL;
423 }
424
425 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs)
426 {
427 DECODE_HEAD;
428 u32 dummy;
429 char *machine_name;
430 int i;
431 int nr_secflavs;
432
433 /* callback_sec_params4 */
434 READ_BUF(4);
435 READ32(nr_secflavs);
436 for (i = 0; i < nr_secflavs; ++i) {
437 READ_BUF(4);
438 READ32(dummy);
439 switch (dummy) {
440 case RPC_AUTH_NULL:
441 /* Nothing to read */
442 break;
443 case RPC_AUTH_UNIX:
444 READ_BUF(8);
445 /* stamp */
446 READ32(dummy);
447
448 /* machine name */
449 READ32(dummy);
450 READ_BUF(dummy);
451 SAVEMEM(machine_name, dummy);
452
453 /* uid, gid */
454 READ_BUF(8);
455 READ32(cbs->uid);
456 READ32(cbs->gid);
457
458 /* more gids */
459 READ_BUF(4);
460 READ32(dummy);
461 READ_BUF(dummy * 4);
462 break;
463 case RPC_AUTH_GSS:
464 dprintk("RPC_AUTH_GSS callback secflavor "
465 "not supported!\n");
466 READ_BUF(8);
467 /* gcbp_service */
468 READ32(dummy);
469 /* gcbp_handle_from_server */
470 READ32(dummy);
471 READ_BUF(dummy);
472 p += XDR_QUADLEN(dummy);
473 /* gcbp_handle_from_client */
474 READ_BUF(4);
475 READ32(dummy);
476 READ_BUF(dummy);
477 break;
478 default:
479 dprintk("Illegal callback secflavor\n");
480 return nfserr_inval;
481 }
482 }
483 DECODE_TAIL;
484 }
485
486 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts)
487 {
488 DECODE_HEAD;
489
490 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8);
491 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
492 READ32(bcts->dir);
493 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker
494 * could help us figure out we should be using it. */
495 DECODE_TAIL;
496 }
497
498 static __be32
499 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
500 {
501 DECODE_HEAD;
502
503 READ_BUF(4);
504 READ32(close->cl_seqid);
505 return nfsd4_decode_stateid(argp, &close->cl_stateid);
506
507 DECODE_TAIL;
508 }
509
510
511 static __be32
512 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit)
513 {
514 DECODE_HEAD;
515
516 READ_BUF(12);
517 READ64(commit->co_offset);
518 READ32(commit->co_count);
519
520 DECODE_TAIL;
521 }
522
523 static __be32
524 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create)
525 {
526 DECODE_HEAD;
527
528 READ_BUF(4);
529 READ32(create->cr_type);
530 switch (create->cr_type) {
531 case NF4LNK:
532 READ_BUF(4);
533 READ32(create->cr_linklen);
534 READ_BUF(create->cr_linklen);
535 SAVEMEM(create->cr_linkname, create->cr_linklen);
536 break;
537 case NF4BLK:
538 case NF4CHR:
539 READ_BUF(8);
540 READ32(create->cr_specdata1);
541 READ32(create->cr_specdata2);
542 break;
543 case NF4SOCK:
544 case NF4FIFO:
545 case NF4DIR:
546 default:
547 break;
548 }
549
550 READ_BUF(4);
551 READ32(create->cr_namelen);
552 READ_BUF(create->cr_namelen);
553 SAVEMEM(create->cr_name, create->cr_namelen);
554 if ((status = check_filename(create->cr_name, create->cr_namelen, nfserr_inval)))
555 return status;
556
557 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr,
558 &create->cr_acl);
559 if (status)
560 goto out;
561
562 DECODE_TAIL;
563 }
564
565 static inline __be32
566 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr)
567 {
568 return nfsd4_decode_stateid(argp, &dr->dr_stateid);
569 }
570
571 static inline __be32
572 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr)
573 {
574 return nfsd4_decode_bitmap(argp, getattr->ga_bmval);
575 }
576
577 static __be32
578 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
579 {
580 DECODE_HEAD;
581
582 READ_BUF(4);
583 READ32(link->li_namelen);
584 READ_BUF(link->li_namelen);
585 SAVEMEM(link->li_name, link->li_namelen);
586 if ((status = check_filename(link->li_name, link->li_namelen, nfserr_inval)))
587 return status;
588
589 DECODE_TAIL;
590 }
591
592 static __be32
593 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
594 {
595 DECODE_HEAD;
596
597 /*
598 * type, reclaim(boolean), offset, length, new_lock_owner(boolean)
599 */
600 READ_BUF(28);
601 READ32(lock->lk_type);
602 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
603 goto xdr_error;
604 READ32(lock->lk_reclaim);
605 READ64(lock->lk_offset);
606 READ64(lock->lk_length);
607 READ32(lock->lk_is_new);
608
609 if (lock->lk_is_new) {
610 READ_BUF(4);
611 READ32(lock->lk_new_open_seqid);
612 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid);
613 if (status)
614 return status;
615 READ_BUF(8 + sizeof(clientid_t));
616 READ32(lock->lk_new_lock_seqid);
617 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t));
618 READ32(lock->lk_new_owner.len);
619 READ_BUF(lock->lk_new_owner.len);
620 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len);
621 } else {
622 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid);
623 if (status)
624 return status;
625 READ_BUF(4);
626 READ32(lock->lk_old_lock_seqid);
627 }
628
629 DECODE_TAIL;
630 }
631
632 static __be32
633 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
634 {
635 DECODE_HEAD;
636
637 READ_BUF(32);
638 READ32(lockt->lt_type);
639 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
640 goto xdr_error;
641 READ64(lockt->lt_offset);
642 READ64(lockt->lt_length);
643 COPYMEM(&lockt->lt_clientid, 8);
644 READ32(lockt->lt_owner.len);
645 READ_BUF(lockt->lt_owner.len);
646 READMEM(lockt->lt_owner.data, lockt->lt_owner.len);
647
648 DECODE_TAIL;
649 }
650
651 static __be32
652 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
653 {
654 DECODE_HEAD;
655
656 READ_BUF(8);
657 READ32(locku->lu_type);
658 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
659 goto xdr_error;
660 READ32(locku->lu_seqid);
661 status = nfsd4_decode_stateid(argp, &locku->lu_stateid);
662 if (status)
663 return status;
664 READ_BUF(16);
665 READ64(locku->lu_offset);
666 READ64(locku->lu_length);
667
668 DECODE_TAIL;
669 }
670
671 static __be32
672 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup)
673 {
674 DECODE_HEAD;
675
676 READ_BUF(4);
677 READ32(lookup->lo_len);
678 READ_BUF(lookup->lo_len);
679 SAVEMEM(lookup->lo_name, lookup->lo_len);
680 if ((status = check_filename(lookup->lo_name, lookup->lo_len, nfserr_noent)))
681 return status;
682
683 DECODE_TAIL;
684 }
685
686 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when)
687 {
688 __be32 *p;
689 u32 w;
690
691 READ_BUF(4);
692 READ32(w);
693 *share_access = w & NFS4_SHARE_ACCESS_MASK;
694 *deleg_want = w & NFS4_SHARE_WANT_MASK;
695 if (deleg_when)
696 *deleg_when = w & NFS4_SHARE_WHEN_MASK;
697
698 switch (w & NFS4_SHARE_ACCESS_MASK) {
699 case NFS4_SHARE_ACCESS_READ:
700 case NFS4_SHARE_ACCESS_WRITE:
701 case NFS4_SHARE_ACCESS_BOTH:
702 break;
703 default:
704 return nfserr_bad_xdr;
705 }
706 w &= ~NFS4_SHARE_ACCESS_MASK;
707 if (!w)
708 return nfs_ok;
709 if (!argp->minorversion)
710 return nfserr_bad_xdr;
711 switch (w & NFS4_SHARE_WANT_MASK) {
712 case NFS4_SHARE_WANT_NO_PREFERENCE:
713 case NFS4_SHARE_WANT_READ_DELEG:
714 case NFS4_SHARE_WANT_WRITE_DELEG:
715 case NFS4_SHARE_WANT_ANY_DELEG:
716 case NFS4_SHARE_WANT_NO_DELEG:
717 case NFS4_SHARE_WANT_CANCEL:
718 break;
719 default:
720 return nfserr_bad_xdr;
721 }
722 w &= ~NFS4_SHARE_WANT_MASK;
723 if (!w)
724 return nfs_ok;
725
726 if (!deleg_when) /* open_downgrade */
727 return nfserr_inval;
728 switch (w) {
729 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL:
730 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED:
731 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL |
732 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED):
733 return nfs_ok;
734 }
735 xdr_error:
736 return nfserr_bad_xdr;
737 }
738
739 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
740 {
741 __be32 *p;
742
743 READ_BUF(4);
744 READ32(*x);
745 /* Note: unlinke access bits, deny bits may be zero. */
746 if (*x & ~NFS4_SHARE_DENY_BOTH)
747 return nfserr_bad_xdr;
748 return nfs_ok;
749 xdr_error:
750 return nfserr_bad_xdr;
751 }
752
753 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o)
754 {
755 __be32 *p;
756
757 READ_BUF(4);
758 READ32(o->len);
759
760 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT)
761 return nfserr_bad_xdr;
762
763 READ_BUF(o->len);
764 SAVEMEM(o->data, o->len);
765 return nfs_ok;
766 xdr_error:
767 return nfserr_bad_xdr;
768 }
769
770 static __be32
771 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
772 {
773 DECODE_HEAD;
774 u32 dummy;
775
776 memset(open->op_bmval, 0, sizeof(open->op_bmval));
777 open->op_iattr.ia_valid = 0;
778 open->op_openowner = NULL;
779
780 /* seqid, share_access, share_deny, clientid, ownerlen */
781 READ_BUF(4);
782 READ32(open->op_seqid);
783 /* decode, yet ignore deleg_when until supported */
784 status = nfsd4_decode_share_access(argp, &open->op_share_access,
785 &open->op_deleg_want, &dummy);
786 if (status)
787 goto xdr_error;
788 status = nfsd4_decode_share_deny(argp, &open->op_share_deny);
789 if (status)
790 goto xdr_error;
791 READ_BUF(sizeof(clientid_t));
792 COPYMEM(&open->op_clientid, sizeof(clientid_t));
793 status = nfsd4_decode_opaque(argp, &open->op_owner);
794 if (status)
795 goto xdr_error;
796 READ_BUF(4);
797 READ32(open->op_create);
798 switch (open->op_create) {
799 case NFS4_OPEN_NOCREATE:
800 break;
801 case NFS4_OPEN_CREATE:
802 READ_BUF(4);
803 READ32(open->op_createmode);
804 switch (open->op_createmode) {
805 case NFS4_CREATE_UNCHECKED:
806 case NFS4_CREATE_GUARDED:
807 status = nfsd4_decode_fattr(argp, open->op_bmval,
808 &open->op_iattr, &open->op_acl);
809 if (status)
810 goto out;
811 break;
812 case NFS4_CREATE_EXCLUSIVE:
813 READ_BUF(NFS4_VERIFIER_SIZE);
814 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
815 break;
816 case NFS4_CREATE_EXCLUSIVE4_1:
817 if (argp->minorversion < 1)
818 goto xdr_error;
819 READ_BUF(NFS4_VERIFIER_SIZE);
820 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
821 status = nfsd4_decode_fattr(argp, open->op_bmval,
822 &open->op_iattr, &open->op_acl);
823 if (status)
824 goto out;
825 break;
826 default:
827 goto xdr_error;
828 }
829 break;
830 default:
831 goto xdr_error;
832 }
833
834 /* open_claim */
835 READ_BUF(4);
836 READ32(open->op_claim_type);
837 switch (open->op_claim_type) {
838 case NFS4_OPEN_CLAIM_NULL:
839 case NFS4_OPEN_CLAIM_DELEGATE_PREV:
840 READ_BUF(4);
841 READ32(open->op_fname.len);
842 READ_BUF(open->op_fname.len);
843 SAVEMEM(open->op_fname.data, open->op_fname.len);
844 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval)))
845 return status;
846 break;
847 case NFS4_OPEN_CLAIM_PREVIOUS:
848 READ_BUF(4);
849 READ32(open->op_delegate_type);
850 break;
851 case NFS4_OPEN_CLAIM_DELEGATE_CUR:
852 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
853 if (status)
854 return status;
855 READ_BUF(4);
856 READ32(open->op_fname.len);
857 READ_BUF(open->op_fname.len);
858 SAVEMEM(open->op_fname.data, open->op_fname.len);
859 if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval)))
860 return status;
861 break;
862 case NFS4_OPEN_CLAIM_FH:
863 case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
864 if (argp->minorversion < 1)
865 goto xdr_error;
866 /* void */
867 break;
868 case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
869 if (argp->minorversion < 1)
870 goto xdr_error;
871 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
872 if (status)
873 return status;
874 break;
875 default:
876 goto xdr_error;
877 }
878
879 DECODE_TAIL;
880 }
881
882 static __be32
883 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf)
884 {
885 DECODE_HEAD;
886
887 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid);
888 if (status)
889 return status;
890 READ_BUF(4);
891 READ32(open_conf->oc_seqid);
892
893 DECODE_TAIL;
894 }
895
896 static __be32
897 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down)
898 {
899 DECODE_HEAD;
900
901 status = nfsd4_decode_stateid(argp, &open_down->od_stateid);
902 if (status)
903 return status;
904 READ_BUF(4);
905 READ32(open_down->od_seqid);
906 status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
907 &open_down->od_deleg_want, NULL);
908 if (status)
909 return status;
910 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny);
911 if (status)
912 return status;
913 DECODE_TAIL;
914 }
915
916 static __be32
917 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
918 {
919 DECODE_HEAD;
920
921 READ_BUF(4);
922 READ32(putfh->pf_fhlen);
923 if (putfh->pf_fhlen > NFS4_FHSIZE)
924 goto xdr_error;
925 READ_BUF(putfh->pf_fhlen);
926 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen);
927
928 DECODE_TAIL;
929 }
930
931 static __be32
932 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
933 {
934 DECODE_HEAD;
935
936 status = nfsd4_decode_stateid(argp, &read->rd_stateid);
937 if (status)
938 return status;
939 READ_BUF(12);
940 READ64(read->rd_offset);
941 READ32(read->rd_length);
942
943 DECODE_TAIL;
944 }
945
946 static __be32
947 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir)
948 {
949 DECODE_HEAD;
950
951 READ_BUF(24);
952 READ64(readdir->rd_cookie);
953 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data));
954 READ32(readdir->rd_dircount); /* just in case you needed a useless field... */
955 READ32(readdir->rd_maxcount);
956 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval)))
957 goto out;
958
959 DECODE_TAIL;
960 }
961
962 static __be32
963 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove)
964 {
965 DECODE_HEAD;
966
967 READ_BUF(4);
968 READ32(remove->rm_namelen);
969 READ_BUF(remove->rm_namelen);
970 SAVEMEM(remove->rm_name, remove->rm_namelen);
971 if ((status = check_filename(remove->rm_name, remove->rm_namelen, nfserr_noent)))
972 return status;
973
974 DECODE_TAIL;
975 }
976
977 static __be32
978 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename)
979 {
980 DECODE_HEAD;
981
982 READ_BUF(4);
983 READ32(rename->rn_snamelen);
984 READ_BUF(rename->rn_snamelen + 4);
985 SAVEMEM(rename->rn_sname, rename->rn_snamelen);
986 READ32(rename->rn_tnamelen);
987 READ_BUF(rename->rn_tnamelen);
988 SAVEMEM(rename->rn_tname, rename->rn_tnamelen);
989 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen, nfserr_noent)))
990 return status;
991 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen, nfserr_inval)))
992 return status;
993
994 DECODE_TAIL;
995 }
996
997 static __be32
998 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid)
999 {
1000 DECODE_HEAD;
1001
1002 READ_BUF(sizeof(clientid_t));
1003 COPYMEM(clientid, sizeof(clientid_t));
1004
1005 DECODE_TAIL;
1006 }
1007
1008 static __be32
1009 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
1010 struct nfsd4_secinfo *secinfo)
1011 {
1012 DECODE_HEAD;
1013
1014 READ_BUF(4);
1015 READ32(secinfo->si_namelen);
1016 READ_BUF(secinfo->si_namelen);
1017 SAVEMEM(secinfo->si_name, secinfo->si_namelen);
1018 status = check_filename(secinfo->si_name, secinfo->si_namelen,
1019 nfserr_noent);
1020 if (status)
1021 return status;
1022 DECODE_TAIL;
1023 }
1024
1025 static __be32
1026 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
1027 struct nfsd4_secinfo_no_name *sin)
1028 {
1029 DECODE_HEAD;
1030
1031 READ_BUF(4);
1032 READ32(sin->sin_style);
1033 DECODE_TAIL;
1034 }
1035
1036 static __be32
1037 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr)
1038 {
1039 __be32 status;
1040
1041 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid);
1042 if (status)
1043 return status;
1044 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr,
1045 &setattr->sa_acl);
1046 }
1047
1048 static __be32
1049 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid)
1050 {
1051 DECODE_HEAD;
1052
1053 READ_BUF(NFS4_VERIFIER_SIZE);
1054 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE);
1055
1056 status = nfsd4_decode_opaque(argp, &setclientid->se_name);
1057 if (status)
1058 return nfserr_bad_xdr;
1059 READ_BUF(8);
1060 READ32(setclientid->se_callback_prog);
1061 READ32(setclientid->se_callback_netid_len);
1062
1063 READ_BUF(setclientid->se_callback_netid_len + 4);
1064 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len);
1065 READ32(setclientid->se_callback_addr_len);
1066
1067 READ_BUF(setclientid->se_callback_addr_len + 4);
1068 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len);
1069 READ32(setclientid->se_callback_ident);
1070
1071 DECODE_TAIL;
1072 }
1073
1074 static __be32
1075 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c)
1076 {
1077 DECODE_HEAD;
1078
1079 READ_BUF(8 + NFS4_VERIFIER_SIZE);
1080 COPYMEM(&scd_c->sc_clientid, 8);
1081 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE);
1082
1083 DECODE_TAIL;
1084 }
1085
1086 /* Also used for NVERIFY */
1087 static __be32
1088 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify)
1089 {
1090 #if 0
1091 struct nfsd4_compoundargs save = {
1092 .p = argp->p,
1093 .end = argp->end,
1094 .rqstp = argp->rqstp,
1095 };
1096 u32 ve_bmval[2];
1097 struct iattr ve_iattr; /* request */
1098 struct nfs4_acl *ve_acl; /* request */
1099 #endif
1100 DECODE_HEAD;
1101
1102 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval)))
1103 goto out;
1104
1105 /* For convenience's sake, we compare raw xdr'd attributes in
1106 * nfsd4_proc_verify; however we still decode here just to return
1107 * correct error in case of bad xdr. */
1108 #if 0
1109 status = nfsd4_decode_fattr(ve_bmval, &ve_iattr, &ve_acl);
1110 if (status == nfserr_inval) {
1111 status = nfserrno(status);
1112 goto out;
1113 }
1114 #endif
1115 READ_BUF(4);
1116 READ32(verify->ve_attrlen);
1117 READ_BUF(verify->ve_attrlen);
1118 SAVEMEM(verify->ve_attrval, verify->ve_attrlen);
1119
1120 DECODE_TAIL;
1121 }
1122
1123 static __be32
1124 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
1125 {
1126 int avail;
1127 int v;
1128 int len;
1129 DECODE_HEAD;
1130
1131 status = nfsd4_decode_stateid(argp, &write->wr_stateid);
1132 if (status)
1133 return status;
1134 READ_BUF(16);
1135 READ64(write->wr_offset);
1136 READ32(write->wr_stable_how);
1137 if (write->wr_stable_how > 2)
1138 goto xdr_error;
1139 READ32(write->wr_buflen);
1140
1141 /* Sorry .. no magic macros for this.. *
1142 * READ_BUF(write->wr_buflen);
1143 * SAVEMEM(write->wr_buf, write->wr_buflen);
1144 */
1145 avail = (char*)argp->end - (char*)argp->p;
1146 if (avail + argp->pagelen < write->wr_buflen) {
1147 dprintk("NFSD: xdr error (%s:%d)\n",
1148 __FILE__, __LINE__);
1149 goto xdr_error;
1150 }
1151 argp->rqstp->rq_vec[0].iov_base = p;
1152 argp->rqstp->rq_vec[0].iov_len = avail;
1153 v = 0;
1154 len = write->wr_buflen;
1155 while (len > argp->rqstp->rq_vec[v].iov_len) {
1156 len -= argp->rqstp->rq_vec[v].iov_len;
1157 v++;
1158 argp->rqstp->rq_vec[v].iov_base = page_address(argp->pagelist[0]);
1159 argp->pagelist++;
1160 if (argp->pagelen >= PAGE_SIZE) {
1161 argp->rqstp->rq_vec[v].iov_len = PAGE_SIZE;
1162 argp->pagelen -= PAGE_SIZE;
1163 } else {
1164 argp->rqstp->rq_vec[v].iov_len = argp->pagelen;
1165 argp->pagelen -= len;
1166 }
1167 }
1168 argp->end = (__be32*) (argp->rqstp->rq_vec[v].iov_base + argp->rqstp->rq_vec[v].iov_len);
1169 argp->p = (__be32*) (argp->rqstp->rq_vec[v].iov_base + (XDR_QUADLEN(len) << 2));
1170 argp->rqstp->rq_vec[v].iov_len = len;
1171 write->wr_vlen = v+1;
1172
1173 DECODE_TAIL;
1174 }
1175
1176 static __be32
1177 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner)
1178 {
1179 DECODE_HEAD;
1180
1181 READ_BUF(12);
1182 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t));
1183 READ32(rlockowner->rl_owner.len);
1184 READ_BUF(rlockowner->rl_owner.len);
1185 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len);
1186
1187 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1188 return nfserr_inval;
1189 DECODE_TAIL;
1190 }
1191
1192 static __be32
1193 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1194 struct nfsd4_exchange_id *exid)
1195 {
1196 int dummy, tmp;
1197 DECODE_HEAD;
1198
1199 READ_BUF(NFS4_VERIFIER_SIZE);
1200 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE);
1201
1202 status = nfsd4_decode_opaque(argp, &exid->clname);
1203 if (status)
1204 return nfserr_bad_xdr;
1205
1206 READ_BUF(4);
1207 READ32(exid->flags);
1208
1209 /* Ignore state_protect4_a */
1210 READ_BUF(4);
1211 READ32(exid->spa_how);
1212 switch (exid->spa_how) {
1213 case SP4_NONE:
1214 break;
1215 case SP4_MACH_CRED:
1216 /* spo_must_enforce */
1217 READ_BUF(4);
1218 READ32(dummy);
1219 READ_BUF(dummy * 4);
1220 p += dummy;
1221
1222 /* spo_must_allow */
1223 READ_BUF(4);
1224 READ32(dummy);
1225 READ_BUF(dummy * 4);
1226 p += dummy;
1227 break;
1228 case SP4_SSV:
1229 /* ssp_ops */
1230 READ_BUF(4);
1231 READ32(dummy);
1232 READ_BUF(dummy * 4);
1233 p += dummy;
1234
1235 READ_BUF(4);
1236 READ32(dummy);
1237 READ_BUF(dummy * 4);
1238 p += dummy;
1239
1240 /* ssp_hash_algs<> */
1241 READ_BUF(4);
1242 READ32(tmp);
1243 while (tmp--) {
1244 READ_BUF(4);
1245 READ32(dummy);
1246 READ_BUF(dummy);
1247 p += XDR_QUADLEN(dummy);
1248 }
1249
1250 /* ssp_encr_algs<> */
1251 READ_BUF(4);
1252 READ32(tmp);
1253 while (tmp--) {
1254 READ_BUF(4);
1255 READ32(dummy);
1256 READ_BUF(dummy);
1257 p += XDR_QUADLEN(dummy);
1258 }
1259
1260 /* ssp_window and ssp_num_gss_handles */
1261 READ_BUF(8);
1262 READ32(dummy);
1263 READ32(dummy);
1264 break;
1265 default:
1266 goto xdr_error;
1267 }
1268
1269 /* Ignore Implementation ID */
1270 READ_BUF(4); /* nfs_impl_id4 array length */
1271 READ32(dummy);
1272
1273 if (dummy > 1)
1274 goto xdr_error;
1275
1276 if (dummy == 1) {
1277 /* nii_domain */
1278 READ_BUF(4);
1279 READ32(dummy);
1280 READ_BUF(dummy);
1281 p += XDR_QUADLEN(dummy);
1282
1283 /* nii_name */
1284 READ_BUF(4);
1285 READ32(dummy);
1286 READ_BUF(dummy);
1287 p += XDR_QUADLEN(dummy);
1288
1289 /* nii_date */
1290 READ_BUF(12);
1291 p += 3;
1292 }
1293 DECODE_TAIL;
1294 }
1295
1296 static __be32
1297 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1298 struct nfsd4_create_session *sess)
1299 {
1300 DECODE_HEAD;
1301 u32 dummy;
1302
1303 READ_BUF(16);
1304 COPYMEM(&sess->clientid, 8);
1305 READ32(sess->seqid);
1306 READ32(sess->flags);
1307
1308 /* Fore channel attrs */
1309 READ_BUF(28);
1310 READ32(dummy); /* headerpadsz is always 0 */
1311 READ32(sess->fore_channel.maxreq_sz);
1312 READ32(sess->fore_channel.maxresp_sz);
1313 READ32(sess->fore_channel.maxresp_cached);
1314 READ32(sess->fore_channel.maxops);
1315 READ32(sess->fore_channel.maxreqs);
1316 READ32(sess->fore_channel.nr_rdma_attrs);
1317 if (sess->fore_channel.nr_rdma_attrs == 1) {
1318 READ_BUF(4);
1319 READ32(sess->fore_channel.rdma_attrs);
1320 } else if (sess->fore_channel.nr_rdma_attrs > 1) {
1321 dprintk("Too many fore channel attr bitmaps!\n");
1322 goto xdr_error;
1323 }
1324
1325 /* Back channel attrs */
1326 READ_BUF(28);
1327 READ32(dummy); /* headerpadsz is always 0 */
1328 READ32(sess->back_channel.maxreq_sz);
1329 READ32(sess->back_channel.maxresp_sz);
1330 READ32(sess->back_channel.maxresp_cached);
1331 READ32(sess->back_channel.maxops);
1332 READ32(sess->back_channel.maxreqs);
1333 READ32(sess->back_channel.nr_rdma_attrs);
1334 if (sess->back_channel.nr_rdma_attrs == 1) {
1335 READ_BUF(4);
1336 READ32(sess->back_channel.rdma_attrs);
1337 } else if (sess->back_channel.nr_rdma_attrs > 1) {
1338 dprintk("Too many back channel attr bitmaps!\n");
1339 goto xdr_error;
1340 }
1341
1342 READ_BUF(4);
1343 READ32(sess->callback_prog);
1344 nfsd4_decode_cb_sec(argp, &sess->cb_sec);
1345 DECODE_TAIL;
1346 }
1347
1348 static __be32
1349 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1350 struct nfsd4_destroy_session *destroy_session)
1351 {
1352 DECODE_HEAD;
1353 READ_BUF(NFS4_MAX_SESSIONID_LEN);
1354 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1355
1356 DECODE_TAIL;
1357 }
1358
1359 static __be32
1360 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
1361 struct nfsd4_free_stateid *free_stateid)
1362 {
1363 DECODE_HEAD;
1364
1365 READ_BUF(sizeof(stateid_t));
1366 READ32(free_stateid->fr_stateid.si_generation);
1367 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t));
1368
1369 DECODE_TAIL;
1370 }
1371
1372 static __be32
1373 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1374 struct nfsd4_sequence *seq)
1375 {
1376 DECODE_HEAD;
1377
1378 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16);
1379 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1380 READ32(seq->seqid);
1381 READ32(seq->slotid);
1382 READ32(seq->maxslots);
1383 READ32(seq->cachethis);
1384
1385 DECODE_TAIL;
1386 }
1387
1388 static __be32
1389 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid)
1390 {
1391 int i;
1392 __be32 *p, status;
1393 struct nfsd4_test_stateid_id *stateid;
1394
1395 READ_BUF(4);
1396 test_stateid->ts_num_ids = ntohl(*p++);
1397
1398 INIT_LIST_HEAD(&test_stateid->ts_stateid_list);
1399
1400 for (i = 0; i < test_stateid->ts_num_ids; i++) {
1401 stateid = kmalloc(sizeof(struct nfsd4_test_stateid_id), GFP_KERNEL);
1402 if (!stateid) {
1403 status = nfserrno(-ENOMEM);
1404 goto out;
1405 }
1406
1407 defer_free(argp, kfree, stateid);
1408 INIT_LIST_HEAD(&stateid->ts_id_list);
1409 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list);
1410
1411 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid);
1412 if (status)
1413 goto out;
1414 }
1415
1416 status = 0;
1417 out:
1418 return status;
1419 xdr_error:
1420 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__);
1421 status = nfserr_bad_xdr;
1422 goto out;
1423 }
1424
1425 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc)
1426 {
1427 DECODE_HEAD;
1428
1429 READ_BUF(8);
1430 COPYMEM(&dc->clientid, 8);
1431
1432 DECODE_TAIL;
1433 }
1434
1435 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc)
1436 {
1437 DECODE_HEAD;
1438
1439 READ_BUF(4);
1440 READ32(rc->rca_one_fs);
1441
1442 DECODE_TAIL;
1443 }
1444
1445 static __be32
1446 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p)
1447 {
1448 return nfs_ok;
1449 }
1450
1451 static __be32
1452 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p)
1453 {
1454 return nfserr_notsupp;
1455 }
1456
1457 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *);
1458
1459 static nfsd4_dec nfsd4_dec_ops[] = {
1460 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access,
1461 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close,
1462 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit,
1463 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create,
1464 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp,
1465 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn,
1466 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr,
1467 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop,
1468 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link,
1469 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock,
1470 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt,
1471 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku,
1472 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup,
1473 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop,
1474 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1475 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open,
1476 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp,
1477 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm,
1478 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade,
1479 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh,
1480 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_noop,
1481 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop,
1482 [OP_READ] = (nfsd4_dec)nfsd4_decode_read,
1483 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir,
1484 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop,
1485 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove,
1486 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename,
1487 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew,
1488 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop,
1489 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop,
1490 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo,
1491 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr,
1492 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid,
1493 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm,
1494 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1495 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write,
1496 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner,
1497 };
1498
1499 static nfsd4_dec nfsd41_dec_ops[] = {
1500 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access,
1501 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close,
1502 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit,
1503 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create,
1504 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp,
1505 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn,
1506 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr,
1507 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop,
1508 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link,
1509 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock,
1510 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt,
1511 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku,
1512 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup,
1513 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop,
1514 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1515 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open,
1516 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp,
1517 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_notsupp,
1518 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade,
1519 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh,
1520 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_notsupp,
1521 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop,
1522 [OP_READ] = (nfsd4_dec)nfsd4_decode_read,
1523 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir,
1524 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop,
1525 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove,
1526 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename,
1527 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_notsupp,
1528 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop,
1529 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop,
1530 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo,
1531 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr,
1532 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_notsupp,
1533 [OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp,
1534 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1535 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write,
1536 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_notsupp,
1537
1538 /* new operations for NFSv4.1 */
1539 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_notsupp,
1540 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session,
1541 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id,
1542 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session,
1543 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session,
1544 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid,
1545 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1546 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp,
1547 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
1548 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp,
1549 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp,
1550 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp,
1551 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name,
1552 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence,
1553 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp,
1554 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid,
1555 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1556 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid,
1557 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete,
1558 };
1559
1560 struct nfsd4_minorversion_ops {
1561 nfsd4_dec *decoders;
1562 int nops;
1563 };
1564
1565 static struct nfsd4_minorversion_ops nfsd4_minorversion[] = {
1566 [0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) },
1567 [1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) },
1568 };
1569
1570 static __be32
1571 nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
1572 {
1573 DECODE_HEAD;
1574 struct nfsd4_op *op;
1575 struct nfsd4_minorversion_ops *ops;
1576 bool cachethis = false;
1577 int i;
1578
1579 /*
1580 * XXX: According to spec, we should check the tag
1581 * for UTF-8 compliance. I'm postponing this for
1582 * now because it seems that some clients do use
1583 * binary tags.
1584 */
1585 READ_BUF(4);
1586 READ32(argp->taglen);
1587 READ_BUF(argp->taglen + 8);
1588 SAVEMEM(argp->tag, argp->taglen);
1589 READ32(argp->minorversion);
1590 READ32(argp->opcnt);
1591
1592 if (argp->taglen > NFSD4_MAX_TAGLEN)
1593 goto xdr_error;
1594 if (argp->opcnt > 100)
1595 goto xdr_error;
1596
1597 if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
1598 argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL);
1599 if (!argp->ops) {
1600 argp->ops = argp->iops;
1601 dprintk("nfsd: couldn't allocate room for COMPOUND\n");
1602 goto xdr_error;
1603 }
1604 }
1605
1606 if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion))
1607 argp->opcnt = 0;
1608
1609 ops = &nfsd4_minorversion[argp->minorversion];
1610 for (i = 0; i < argp->opcnt; i++) {
1611 op = &argp->ops[i];
1612 op->replay = NULL;
1613
1614 /*
1615 * We can't use READ_BUF() here because we need to handle
1616 * a missing opcode as an OP_WRITE + 1. So we need to check
1617 * to see if we're truly at the end of our buffer or if there
1618 * is another page we need to flip to.
1619 */
1620
1621 if (argp->p == argp->end) {
1622 if (argp->pagelen < 4) {
1623 /* There isn't an opcode still on the wire */
1624 op->opnum = OP_WRITE + 1;
1625 op->status = nfserr_bad_xdr;
1626 argp->opcnt = i+1;
1627 break;
1628 }
1629
1630 /*
1631 * False alarm. We just hit a page boundary, but there
1632 * is still data available. Move pointer across page
1633 * boundary. *snip from READ_BUF*
1634 */
1635 argp->p = page_address(argp->pagelist[0]);
1636 argp->pagelist++;
1637 if (argp->pagelen < PAGE_SIZE) {
1638 argp->end = argp->p + (argp->pagelen>>2);
1639 argp->pagelen = 0;
1640 } else {
1641 argp->end = argp->p + (PAGE_SIZE>>2);
1642 argp->pagelen -= PAGE_SIZE;
1643 }
1644 }
1645 op->opnum = ntohl(*argp->p++);
1646
1647 if (op->opnum >= FIRST_NFS4_OP && op->opnum <= LAST_NFS4_OP)
1648 op->status = ops->decoders[op->opnum](argp, &op->u);
1649 else {
1650 op->opnum = OP_ILLEGAL;
1651 op->status = nfserr_op_illegal;
1652 }
1653
1654 if (op->status) {
1655 argp->opcnt = i+1;
1656 break;
1657 }
1658 /*
1659 * We'll try to cache the result in the DRC if any one
1660 * op in the compound wants to be cached:
1661 */
1662 cachethis |= nfsd4_cache_this_op(op);
1663 }
1664 /* Sessions make the DRC unnecessary: */
1665 if (argp->minorversion)
1666 cachethis = false;
1667 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
1668
1669 DECODE_TAIL;
1670 }
1671
1672 #define WRITE32(n) *p++ = htonl(n)
1673 #define WRITE64(n) do { \
1674 *p++ = htonl((u32)((n) >> 32)); \
1675 *p++ = htonl((u32)(n)); \
1676 } while (0)
1677 #define WRITEMEM(ptr,nbytes) do { if (nbytes > 0) { \
1678 *(p + XDR_QUADLEN(nbytes) -1) = 0; \
1679 memcpy(p, ptr, nbytes); \
1680 p += XDR_QUADLEN(nbytes); \
1681 }} while (0)
1682
1683 static void write32(__be32 **p, u32 n)
1684 {
1685 *(*p)++ = htonl(n);
1686 }
1687
1688 static void write64(__be32 **p, u64 n)
1689 {
1690 write32(p, (n >> 32));
1691 write32(p, (u32)n);
1692 }
1693
1694 static void write_change(__be32 **p, struct kstat *stat, struct inode *inode)
1695 {
1696 if (IS_I_VERSION(inode)) {
1697 write64(p, inode->i_version);
1698 } else {
1699 write32(p, stat->ctime.tv_sec);
1700 write32(p, stat->ctime.tv_nsec);
1701 }
1702 }
1703
1704 static void write_cinfo(__be32 **p, struct nfsd4_change_info *c)
1705 {
1706 write32(p, c->atomic);
1707 if (c->change_supported) {
1708 write64(p, c->before_change);
1709 write64(p, c->after_change);
1710 } else {
1711 write32(p, c->before_ctime_sec);
1712 write32(p, c->before_ctime_nsec);
1713 write32(p, c->after_ctime_sec);
1714 write32(p, c->after_ctime_nsec);
1715 }
1716 }
1717
1718 #define RESERVE_SPACE(nbytes) do { \
1719 p = resp->p; \
1720 BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end); \
1721 } while (0)
1722 #define ADJUST_ARGS() resp->p = p
1723
1724 /*
1725 * Header routine to setup seqid operation replay cache
1726 */
1727 #define ENCODE_SEQID_OP_HEAD \
1728 __be32 *save; \
1729 \
1730 save = resp->p;
1731
1732 /*
1733 * Routine for encoding the result of a "seqid-mutating" NFSv4 operation. This
1734 * is where sequence id's are incremented, and the replay cache is filled.
1735 * Note that we increment sequence id's here, at the last moment, so we're sure
1736 * we know whether the error to be returned is a sequence id mutating error.
1737 */
1738
1739 static void encode_seqid_op_tail(struct nfsd4_compoundres *resp, __be32 *save, __be32 nfserr)
1740 {
1741 struct nfs4_stateowner *stateowner = resp->cstate.replay_owner;
1742
1743 if (seqid_mutating_err(ntohl(nfserr)) && stateowner) {
1744 stateowner->so_seqid++;
1745 stateowner->so_replay.rp_status = nfserr;
1746 stateowner->so_replay.rp_buflen =
1747 (char *)resp->p - (char *)save;
1748 memcpy(stateowner->so_replay.rp_buf, save,
1749 stateowner->so_replay.rp_buflen);
1750 nfsd4_purge_closed_stateid(stateowner);
1751 }
1752 }
1753
1754 /* Encode as an array of strings the string given with components
1755 * separated @sep, escaped with esc_enter and esc_exit.
1756 */
1757 static __be32 nfsd4_encode_components_esc(char sep, char *components,
1758 __be32 **pp, int *buflen,
1759 char esc_enter, char esc_exit)
1760 {
1761 __be32 *p = *pp;
1762 __be32 *countp = p;
1763 int strlen, count=0;
1764 char *str, *end, *next;
1765
1766 dprintk("nfsd4_encode_components(%s)\n", components);
1767 if ((*buflen -= 4) < 0)
1768 return nfserr_resource;
1769 WRITE32(0); /* We will fill this in with @count later */
1770 end = str = components;
1771 while (*end) {
1772 bool found_esc = false;
1773
1774 /* try to parse as esc_start, ..., esc_end, sep */
1775 if (*str == esc_enter) {
1776 for (; *end && (*end != esc_exit); end++)
1777 /* find esc_exit or end of string */;
1778 next = end + 1;
1779 if (*end && (!*next || *next == sep)) {
1780 str++;
1781 found_esc = true;
1782 }
1783 }
1784
1785 if (!found_esc)
1786 for (; *end && (*end != sep); end++)
1787 /* find sep or end of string */;
1788
1789 strlen = end - str;
1790 if (strlen) {
1791 if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0)
1792 return nfserr_resource;
1793 WRITE32(strlen);
1794 WRITEMEM(str, strlen);
1795 count++;
1796 }
1797 else
1798 end++;
1799 str = end;
1800 }
1801 *pp = p;
1802 p = countp;
1803 WRITE32(count);
1804 return 0;
1805 }
1806
1807 /* Encode as an array of strings the string given with components
1808 * separated @sep.
1809 */
1810 static __be32 nfsd4_encode_components(char sep, char *components,
1811 __be32 **pp, int *buflen)
1812 {
1813 return nfsd4_encode_components_esc(sep, components, pp, buflen, 0, 0);
1814 }
1815
1816 /*
1817 * encode a location element of a fs_locations structure
1818 */
1819 static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location,
1820 __be32 **pp, int *buflen)
1821 {
1822 __be32 status;
1823 __be32 *p = *pp;
1824
1825 status = nfsd4_encode_components_esc(':', location->hosts, &p, buflen,
1826 '[', ']');
1827 if (status)
1828 return status;
1829 status = nfsd4_encode_components('/', location->path, &p, buflen);
1830 if (status)
1831 return status;
1832 *pp = p;
1833 return 0;
1834 }
1835
1836 /*
1837 * Encode a path in RFC3530 'pathname4' format
1838 */
1839 static __be32 nfsd4_encode_path(const struct path *root,
1840 const struct path *path, __be32 **pp, int *buflen)
1841 {
1842 struct path cur = {
1843 .mnt = path->mnt,
1844 .dentry = path->dentry,
1845 };
1846 __be32 *p = *pp;
1847 struct dentry **components = NULL;
1848 unsigned int ncomponents = 0;
1849 __be32 err = nfserr_jukebox;
1850
1851 dprintk("nfsd4_encode_components(");
1852
1853 path_get(&cur);
1854 /* First walk the path up to the nfsd root, and store the
1855 * dentries/path components in an array.
1856 */
1857 for (;;) {
1858 if (cur.dentry == root->dentry && cur.mnt == root->mnt)
1859 break;
1860 if (cur.dentry == cur.mnt->mnt_root) {
1861 if (follow_up(&cur))
1862 continue;
1863 goto out_free;
1864 }
1865 if ((ncomponents & 15) == 0) {
1866 struct dentry **new;
1867 new = krealloc(components,
1868 sizeof(*new) * (ncomponents + 16),
1869 GFP_KERNEL);
1870 if (!new)
1871 goto out_free;
1872 components = new;
1873 }
1874 components[ncomponents++] = cur.dentry;
1875 cur.dentry = dget_parent(cur.dentry);
1876 }
1877
1878 *buflen -= 4;
1879 if (*buflen < 0)
1880 goto out_free;
1881 WRITE32(ncomponents);
1882
1883 while (ncomponents) {
1884 struct dentry *dentry = components[ncomponents - 1];
1885 unsigned int len = dentry->d_name.len;
1886
1887 *buflen -= 4 + (XDR_QUADLEN(len) << 2);
1888 if (*buflen < 0)
1889 goto out_free;
1890 WRITE32(len);
1891 WRITEMEM(dentry->d_name.name, len);
1892 dprintk("/%s", dentry->d_name.name);
1893 dput(dentry);
1894 ncomponents--;
1895 }
1896
1897 *pp = p;
1898 err = 0;
1899 out_free:
1900 dprintk(")\n");
1901 while (ncomponents)
1902 dput(components[--ncomponents]);
1903 kfree(components);
1904 path_put(&cur);
1905 return err;
1906 }
1907
1908 static __be32 nfsd4_encode_fsloc_fsroot(struct svc_rqst *rqstp,
1909 const struct path *path, __be32 **pp, int *buflen)
1910 {
1911 struct svc_export *exp_ps;
1912 __be32 res;
1913
1914 exp_ps = rqst_find_fsidzero_export(rqstp);
1915 if (IS_ERR(exp_ps))
1916 return nfserrno(PTR_ERR(exp_ps));
1917 res = nfsd4_encode_path(&exp_ps->ex_path, path, pp, buflen);
1918 exp_put(exp_ps);
1919 return res;
1920 }
1921
1922 /*
1923 * encode a fs_locations structure
1924 */
1925 static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp,
1926 struct svc_export *exp,
1927 __be32 **pp, int *buflen)
1928 {
1929 __be32 status;
1930 int i;
1931 __be32 *p = *pp;
1932 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
1933
1934 status = nfsd4_encode_fsloc_fsroot(rqstp, &exp->ex_path, &p, buflen);
1935 if (status)
1936 return status;
1937 if ((*buflen -= 4) < 0)
1938 return nfserr_resource;
1939 WRITE32(fslocs->locations_count);
1940 for (i=0; i<fslocs->locations_count; i++) {
1941 status = nfsd4_encode_fs_location4(&fslocs->locations[i],
1942 &p, buflen);
1943 if (status)
1944 return status;
1945 }
1946 *pp = p;
1947 return 0;
1948 }
1949
1950 static u32 nfs4_file_type(umode_t mode)
1951 {
1952 switch (mode & S_IFMT) {
1953 case S_IFIFO: return NF4FIFO;
1954 case S_IFCHR: return NF4CHR;
1955 case S_IFDIR: return NF4DIR;
1956 case S_IFBLK: return NF4BLK;
1957 case S_IFLNK: return NF4LNK;
1958 case S_IFREG: return NF4REG;
1959 case S_IFSOCK: return NF4SOCK;
1960 default: return NF4BAD;
1961 };
1962 }
1963
1964 static __be32
1965 nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, uid_t id, int group,
1966 __be32 **p, int *buflen)
1967 {
1968 int status;
1969
1970 if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4)
1971 return nfserr_resource;
1972 if (whotype != NFS4_ACL_WHO_NAMED)
1973 status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1));
1974 else if (group)
1975 status = nfsd_map_gid_to_name(rqstp, id, (u8 *)(*p + 1));
1976 else
1977 status = nfsd_map_uid_to_name(rqstp, id, (u8 *)(*p + 1));
1978 if (status < 0)
1979 return nfserrno(status);
1980 *p = xdr_encode_opaque(*p, NULL, status);
1981 *buflen -= (XDR_QUADLEN(status) << 2) + 4;
1982 BUG_ON(*buflen < 0);
1983 return 0;
1984 }
1985
1986 static inline __be32
1987 nfsd4_encode_user(struct svc_rqst *rqstp, uid_t uid, __be32 **p, int *buflen)
1988 {
1989 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, uid, 0, p, buflen);
1990 }
1991
1992 static inline __be32
1993 nfsd4_encode_group(struct svc_rqst *rqstp, uid_t gid, __be32 **p, int *buflen)
1994 {
1995 return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, gid, 1, p, buflen);
1996 }
1997
1998 static inline __be32
1999 nfsd4_encode_aclname(struct svc_rqst *rqstp, int whotype, uid_t id, int group,
2000 __be32 **p, int *buflen)
2001 {
2002 return nfsd4_encode_name(rqstp, whotype, id, group, p, buflen);
2003 }
2004
2005 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
2006 FATTR4_WORD0_RDATTR_ERROR)
2007 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
2008
2009 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err)
2010 {
2011 /* As per referral draft: */
2012 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
2013 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
2014 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
2015 *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
2016 *rdattr_err = NFSERR_MOVED;
2017 else
2018 return nfserr_moved;
2019 }
2020 *bmval0 &= WORD0_ABSENT_FS_ATTRS;
2021 *bmval1 &= WORD1_ABSENT_FS_ATTRS;
2022 return 0;
2023 }
2024
2025
2026 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat)
2027 {
2028 struct path path = exp->ex_path;
2029 int err;
2030
2031 path_get(&path);
2032 while (follow_up(&path)) {
2033 if (path.dentry != path.mnt->mnt_root)
2034 break;
2035 }
2036 err = vfs_getattr(path.mnt, path.dentry, stat);
2037 path_put(&path);
2038 return err;
2039 }
2040
2041 /*
2042 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
2043 * ourselves.
2044 *
2045 * @countp is the buffer size in _words_; upon successful return this becomes
2046 * replaced with the number of words written.
2047 */
2048 __be32
2049 nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
2050 struct dentry *dentry, __be32 *buffer, int *countp, u32 *bmval,
2051 struct svc_rqst *rqstp, int ignore_crossmnt)
2052 {
2053 u32 bmval0 = bmval[0];
2054 u32 bmval1 = bmval[1];
2055 u32 bmval2 = bmval[2];
2056 struct kstat stat;
2057 struct svc_fh tempfh;
2058 struct kstatfs statfs;
2059 int buflen = *countp << 2;
2060 __be32 *attrlenp;
2061 u32 dummy;
2062 u64 dummy64;
2063 u32 rdattr_err = 0;
2064 __be32 *p = buffer;
2065 __be32 status;
2066 int err;
2067 int aclsupport = 0;
2068 struct nfs4_acl *acl = NULL;
2069 struct nfsd4_compoundres *resp = rqstp->rq_resp;
2070 u32 minorversion = resp->cstate.minorversion;
2071 struct path path = {
2072 .mnt = exp->ex_path.mnt,
2073 .dentry = dentry,
2074 };
2075
2076 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1);
2077 BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion));
2078 BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion));
2079 BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion));
2080
2081 if (exp->ex_fslocs.migrated) {
2082 BUG_ON(bmval[2]);
2083 status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err);
2084 if (status)
2085 goto out;
2086 }
2087
2088 err = vfs_getattr(exp->ex_path.mnt, dentry, &stat);
2089 if (err)
2090 goto out_nfserr;
2091 if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL |
2092 FATTR4_WORD0_MAXNAME)) ||
2093 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
2094 FATTR4_WORD1_SPACE_TOTAL))) {
2095 err = vfs_statfs(&path, &statfs);
2096 if (err)
2097 goto out_nfserr;
2098 }
2099 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) {
2100 fh_init(&tempfh, NFS4_FHSIZE);
2101 status = fh_compose(&tempfh, exp, dentry, NULL);
2102 if (status)
2103 goto out;
2104 fhp = &tempfh;
2105 }
2106 if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT
2107 | FATTR4_WORD0_SUPPORTED_ATTRS)) {
2108 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl);
2109 aclsupport = (err == 0);
2110 if (bmval0 & FATTR4_WORD0_ACL) {
2111 if (err == -EOPNOTSUPP)
2112 bmval0 &= ~FATTR4_WORD0_ACL;
2113 else if (err == -EINVAL) {
2114 status = nfserr_attrnotsupp;
2115 goto out;
2116 } else if (err != 0)
2117 goto out_nfserr;
2118 }
2119 }
2120
2121 if (bmval2) {
2122 if ((buflen -= 16) < 0)
2123 goto out_resource;
2124 WRITE32(3);
2125 WRITE32(bmval0);
2126 WRITE32(bmval1);
2127 WRITE32(bmval2);
2128 } else if (bmval1) {
2129 if ((buflen -= 12) < 0)
2130 goto out_resource;
2131 WRITE32(2);
2132 WRITE32(bmval0);
2133 WRITE32(bmval1);
2134 } else {
2135 if ((buflen -= 8) < 0)
2136 goto out_resource;
2137 WRITE32(1);
2138 WRITE32(bmval0);
2139 }
2140 attrlenp = p++; /* to be backfilled later */
2141
2142 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2143 u32 word0 = nfsd_suppattrs0(minorversion);
2144 u32 word1 = nfsd_suppattrs1(minorversion);
2145 u32 word2 = nfsd_suppattrs2(minorversion);
2146
2147 if (!aclsupport)
2148 word0 &= ~FATTR4_WORD0_ACL;
2149 if (!word2) {
2150 if ((buflen -= 12) < 0)
2151 goto out_resource;
2152 WRITE32(2);
2153 WRITE32(word0);
2154 WRITE32(word1);
2155 } else {
2156 if ((buflen -= 16) < 0)
2157 goto out_resource;
2158 WRITE32(3);
2159 WRITE32(word0);
2160 WRITE32(word1);
2161 WRITE32(word2);
2162 }
2163 }
2164 if (bmval0 & FATTR4_WORD0_TYPE) {
2165 if ((buflen -= 4) < 0)
2166 goto out_resource;
2167 dummy = nfs4_file_type(stat.mode);
2168 if (dummy == NF4BAD)
2169 goto out_serverfault;
2170 WRITE32(dummy);
2171 }
2172 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
2173 if ((buflen -= 4) < 0)
2174 goto out_resource;
2175 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
2176 WRITE32(NFS4_FH_PERSISTENT);
2177 else
2178 WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME);
2179 }
2180 if (bmval0 & FATTR4_WORD0_CHANGE) {
2181 if ((buflen -= 8) < 0)
2182 goto out_resource;
2183 write_change(&p, &stat, dentry->d_inode);
2184 }
2185 if (bmval0 & FATTR4_WORD0_SIZE) {
2186 if ((buflen -= 8) < 0)
2187 goto out_resource;
2188 WRITE64(stat.size);
2189 }
2190 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
2191 if ((buflen -= 4) < 0)
2192 goto out_resource;
2193 WRITE32(1);
2194 }
2195 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
2196 if ((buflen -= 4) < 0)
2197 goto out_resource;
2198 WRITE32(1);
2199 }
2200 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
2201 if ((buflen -= 4) < 0)
2202 goto out_resource;
2203 WRITE32(0);
2204 }
2205 if (bmval0 & FATTR4_WORD0_FSID) {
2206 if ((buflen -= 16) < 0)
2207 goto out_resource;
2208 if (exp->ex_fslocs.migrated) {
2209 WRITE64(NFS4_REFERRAL_FSID_MAJOR);
2210 WRITE64(NFS4_REFERRAL_FSID_MINOR);
2211 } else switch(fsid_source(fhp)) {
2212 case FSIDSOURCE_FSID:
2213 WRITE64((u64)exp->ex_fsid);
2214 WRITE64((u64)0);
2215 break;
2216 case FSIDSOURCE_DEV:
2217 WRITE32(0);
2218 WRITE32(MAJOR(stat.dev));
2219 WRITE32(0);
2220 WRITE32(MINOR(stat.dev));
2221 break;
2222 case FSIDSOURCE_UUID:
2223 WRITEMEM(exp->ex_uuid, 16);
2224 break;
2225 }
2226 }
2227 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
2228 if ((buflen -= 4) < 0)
2229 goto out_resource;
2230 WRITE32(0);
2231 }
2232 if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
2233 if ((buflen -= 4) < 0)
2234 goto out_resource;
2235 WRITE32(nfsd4_lease);
2236 }
2237 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
2238 if ((buflen -= 4) < 0)
2239 goto out_resource;
2240 WRITE32(rdattr_err);
2241 }
2242 if (bmval0 & FATTR4_WORD0_ACL) {
2243 struct nfs4_ace *ace;
2244
2245 if (acl == NULL) {
2246 if ((buflen -= 4) < 0)
2247 goto out_resource;
2248
2249 WRITE32(0);
2250 goto out_acl;
2251 }
2252 if ((buflen -= 4) < 0)
2253 goto out_resource;
2254 WRITE32(acl->naces);
2255
2256 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
2257 if ((buflen -= 4*3) < 0)
2258 goto out_resource;
2259 WRITE32(ace->type);
2260 WRITE32(ace->flag);
2261 WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL);
2262 status = nfsd4_encode_aclname(rqstp, ace->whotype,
2263 ace->who, ace->flag & NFS4_ACE_IDENTIFIER_GROUP,
2264 &p, &buflen);
2265 if (status == nfserr_resource)
2266 goto out_resource;
2267 if (status)
2268 goto out;
2269 }
2270 }
2271 out_acl:
2272 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
2273 if ((buflen -= 4) < 0)
2274 goto out_resource;
2275 WRITE32(aclsupport ?
2276 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
2277 }
2278 if (bmval0 & FATTR4_WORD0_CANSETTIME) {
2279 if ((buflen -= 4) < 0)
2280 goto out_resource;
2281 WRITE32(1);
2282 }
2283 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
2284 if ((buflen -= 4) < 0)
2285 goto out_resource;
2286 WRITE32(0);
2287 }
2288 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
2289 if ((buflen -= 4) < 0)
2290 goto out_resource;
2291 WRITE32(1);
2292 }
2293 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
2294 if ((buflen -= 4) < 0)
2295 goto out_resource;
2296 WRITE32(1);
2297 }
2298 if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
2299 buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4;
2300 if (buflen < 0)
2301 goto out_resource;
2302 WRITE32(fhp->fh_handle.fh_size);
2303 WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size);
2304 }
2305 if (bmval0 & FATTR4_WORD0_FILEID) {
2306 if ((buflen -= 8) < 0)
2307 goto out_resource;
2308 WRITE64(stat.ino);
2309 }
2310 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
2311 if ((buflen -= 8) < 0)
2312 goto out_resource;
2313 WRITE64((u64) statfs.f_ffree);
2314 }
2315 if (bmval0 & FATTR4_WORD0_FILES_FREE) {
2316 if ((buflen -= 8) < 0)
2317 goto out_resource;
2318 WRITE64((u64) statfs.f_ffree);
2319 }
2320 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
2321 if ((buflen -= 8) < 0)
2322 goto out_resource;
2323 WRITE64((u64) statfs.f_files);
2324 }
2325 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
2326 status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen);
2327 if (status == nfserr_resource)
2328 goto out_resource;
2329 if (status)
2330 goto out;
2331 }
2332 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
2333 if ((buflen -= 4) < 0)
2334 goto out_resource;
2335 WRITE32(1);
2336 }
2337 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
2338 if ((buflen -= 8) < 0)
2339 goto out_resource;
2340 WRITE64(~(u64)0);
2341 }
2342 if (bmval0 & FATTR4_WORD0_MAXLINK) {
2343 if ((buflen -= 4) < 0)
2344 goto out_resource;
2345 WRITE32(255);
2346 }
2347 if (bmval0 & FATTR4_WORD0_MAXNAME) {
2348 if ((buflen -= 4) < 0)
2349 goto out_resource;
2350 WRITE32(statfs.f_namelen);
2351 }
2352 if (bmval0 & FATTR4_WORD0_MAXREAD) {
2353 if ((buflen -= 8) < 0)
2354 goto out_resource;
2355 WRITE64((u64) svc_max_payload(rqstp));
2356 }
2357 if (bmval0 & FATTR4_WORD0_MAXWRITE) {
2358 if ((buflen -= 8) < 0)
2359 goto out_resource;
2360 WRITE64((u64) svc_max_payload(rqstp));
2361 }
2362 if (bmval1 & FATTR4_WORD1_MODE) {
2363 if ((buflen -= 4) < 0)
2364 goto out_resource;
2365 WRITE32(stat.mode & S_IALLUGO);
2366 }
2367 if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
2368 if ((buflen -= 4) < 0)
2369 goto out_resource;
2370 WRITE32(1);
2371 }
2372 if (bmval1 & FATTR4_WORD1_NUMLINKS) {
2373 if ((buflen -= 4) < 0)
2374 goto out_resource;
2375 WRITE32(stat.nlink);
2376 }
2377 if (bmval1 & FATTR4_WORD1_OWNER) {
2378 status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen);
2379 if (status == nfserr_resource)
2380 goto out_resource;
2381 if (status)
2382 goto out;
2383 }
2384 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
2385 status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen);
2386 if (status == nfserr_resource)
2387 goto out_resource;
2388 if (status)
2389 goto out;
2390 }
2391 if (bmval1 & FATTR4_WORD1_RAWDEV) {
2392 if ((buflen -= 8) < 0)
2393 goto out_resource;
2394 WRITE32((u32) MAJOR(stat.rdev));
2395 WRITE32((u32) MINOR(stat.rdev));
2396 }
2397 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
2398 if ((buflen -= 8) < 0)
2399 goto out_resource;
2400 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
2401 WRITE64(dummy64);
2402 }
2403 if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
2404 if ((buflen -= 8) < 0)
2405 goto out_resource;
2406 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
2407 WRITE64(dummy64);
2408 }
2409 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
2410 if ((buflen -= 8) < 0)
2411 goto out_resource;
2412 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
2413 WRITE64(dummy64);
2414 }
2415 if (bmval1 & FATTR4_WORD1_SPACE_USED) {
2416 if ((buflen -= 8) < 0)
2417 goto out_resource;
2418 dummy64 = (u64)stat.blocks << 9;
2419 WRITE64(dummy64);
2420 }
2421 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
2422 if ((buflen -= 12) < 0)
2423 goto out_resource;
2424 WRITE32(0);
2425 WRITE32(stat.atime.tv_sec);
2426 WRITE32(stat.atime.tv_nsec);
2427 }
2428 if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
2429 if ((buflen -= 12) < 0)
2430 goto out_resource;
2431 WRITE32(0);
2432 WRITE32(1);
2433 WRITE32(0);
2434 }
2435 if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
2436 if ((buflen -= 12) < 0)
2437 goto out_resource;
2438 WRITE32(0);
2439 WRITE32(stat.ctime.tv_sec);
2440 WRITE32(stat.ctime.tv_nsec);
2441 }
2442 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
2443 if ((buflen -= 12) < 0)
2444 goto out_resource;
2445 WRITE32(0);
2446 WRITE32(stat.mtime.tv_sec);
2447 WRITE32(stat.mtime.tv_nsec);
2448 }
2449 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
2450 if ((buflen -= 8) < 0)
2451 goto out_resource;
2452 /*
2453 * Get parent's attributes if not ignoring crossmount
2454 * and this is the root of a cross-mounted filesystem.
2455 */
2456 if (ignore_crossmnt == 0 &&
2457 dentry == exp->ex_path.mnt->mnt_root)
2458 get_parent_attributes(exp, &stat);
2459 WRITE64(stat.ino);
2460 }
2461 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
2462 WRITE32(3);
2463 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0);
2464 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1);
2465 WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2);
2466 }
2467
2468 *attrlenp = htonl((char *)p - (char *)attrlenp - 4);
2469 *countp = p - buffer;
2470 status = nfs_ok;
2471
2472 out:
2473 kfree(acl);
2474 if (fhp == &tempfh)
2475 fh_put(&tempfh);
2476 return status;
2477 out_nfserr:
2478 status = nfserrno(err);
2479 goto out;
2480 out_resource:
2481 *countp = 0;
2482 status = nfserr_resource;
2483 goto out;
2484 out_serverfault:
2485 status = nfserr_serverfault;
2486 goto out;
2487 }
2488
2489 static inline int attributes_need_mount(u32 *bmval)
2490 {
2491 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
2492 return 1;
2493 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
2494 return 1;
2495 return 0;
2496 }
2497
2498 static __be32
2499 nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd,
2500 const char *name, int namlen, __be32 *p, int *buflen)
2501 {
2502 struct svc_export *exp = cd->rd_fhp->fh_export;
2503 struct dentry *dentry;
2504 __be32 nfserr;
2505 int ignore_crossmnt = 0;
2506
2507 dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen);
2508 if (IS_ERR(dentry))
2509 return nfserrno(PTR_ERR(dentry));
2510 if (!dentry->d_inode) {
2511 /*
2512 * nfsd_buffered_readdir drops the i_mutex between
2513 * readdir and calling this callback, leaving a window
2514 * where this directory entry could have gone away.
2515 */
2516 dput(dentry);
2517 return nfserr_noent;
2518 }
2519
2520 exp_get(exp);
2521 /*
2522 * In the case of a mountpoint, the client may be asking for
2523 * attributes that are only properties of the underlying filesystem
2524 * as opposed to the cross-mounted file system. In such a case,
2525 * we will not follow the cross mount and will fill the attribtutes
2526 * directly from the mountpoint dentry.
2527 */
2528 if (nfsd_mountpoint(dentry, exp)) {
2529 int err;
2530
2531 if (!(exp->ex_flags & NFSEXP_V4ROOT)
2532 && !attributes_need_mount(cd->rd_bmval)) {
2533 ignore_crossmnt = 1;
2534 goto out_encode;
2535 }
2536 /*
2537 * Why the heck aren't we just using nfsd_lookup??
2538 * Different "."/".." handling? Something else?
2539 * At least, add a comment here to explain....
2540 */
2541 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
2542 if (err) {
2543 nfserr = nfserrno(err);
2544 goto out_put;
2545 }
2546 nfserr = check_nfsd_access(exp, cd->rd_rqstp);
2547 if (nfserr)
2548 goto out_put;
2549
2550 }
2551 out_encode:
2552 nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval,
2553 cd->rd_rqstp, ignore_crossmnt);
2554 out_put:
2555 dput(dentry);
2556 exp_put(exp);
2557 return nfserr;
2558 }
2559
2560 static __be32 *
2561 nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr)
2562 {
2563 __be32 *attrlenp;
2564
2565 if (buflen < 6)
2566 return NULL;
2567 *p++ = htonl(2);
2568 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
2569 *p++ = htonl(0); /* bmval1 */
2570
2571 attrlenp = p++;
2572 *p++ = nfserr; /* no htonl */
2573 *attrlenp = htonl((char *)p - (char *)attrlenp - 4);
2574 return p;
2575 }
2576
2577 static int
2578 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
2579 loff_t offset, u64 ino, unsigned int d_type)
2580 {
2581 struct readdir_cd *ccd = ccdv;
2582 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
2583 int buflen;
2584 __be32 *p = cd->buffer;
2585 __be32 *cookiep;
2586 __be32 nfserr = nfserr_toosmall;
2587
2588 /* In nfsv4, "." and ".." never make it onto the wire.. */
2589 if (name && isdotent(name, namlen)) {
2590 cd->common.err = nfs_ok;
2591 return 0;
2592 }
2593
2594 if (cd->offset)
2595 xdr_encode_hyper(cd->offset, (u64) offset);
2596
2597 buflen = cd->buflen - 4 - XDR_QUADLEN(namlen);
2598 if (buflen < 0)
2599 goto fail;
2600
2601 *p++ = xdr_one; /* mark entry present */
2602 cookiep = p;
2603 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */
2604 p = xdr_encode_array(p, name, namlen); /* name length & name */
2605
2606 nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, p, &buflen);
2607 switch (nfserr) {
2608 case nfs_ok:
2609 p += buflen;
2610 break;
2611 case nfserr_resource:
2612 nfserr = nfserr_toosmall;
2613 goto fail;
2614 case nfserr_noent:
2615 goto skip_entry;
2616 default:
2617 /*
2618 * If the client requested the RDATTR_ERROR attribute,
2619 * we stuff the error code into this attribute
2620 * and continue. If this attribute was not requested,
2621 * then in accordance with the spec, we fail the
2622 * entire READDIR operation(!)
2623 */
2624 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
2625 goto fail;
2626 p = nfsd4_encode_rdattr_error(p, buflen, nfserr);
2627 if (p == NULL) {
2628 nfserr = nfserr_toosmall;
2629 goto fail;
2630 }
2631 }
2632 cd->buflen -= (p - cd->buffer);
2633 cd->buffer = p;
2634 cd->offset = cookiep;
2635 skip_entry:
2636 cd->common.err = nfs_ok;
2637 return 0;
2638 fail:
2639 cd->common.err = nfserr;
2640 return -EINVAL;
2641 }
2642
2643 static void
2644 nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid)
2645 {
2646 __be32 *p;
2647
2648 RESERVE_SPACE(sizeof(stateid_t));
2649 WRITE32(sid->si_generation);
2650 WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
2651 ADJUST_ARGS();
2652 }
2653
2654 static __be32
2655 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
2656 {
2657 __be32 *p;
2658
2659 if (!nfserr) {
2660 RESERVE_SPACE(8);
2661 WRITE32(access->ac_supported);
2662 WRITE32(access->ac_resp_access);
2663 ADJUST_ARGS();
2664 }
2665 return nfserr;
2666 }
2667
2668 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts)
2669 {
2670 __be32 *p;
2671
2672 if (!nfserr) {
2673 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8);
2674 WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
2675 WRITE32(bcts->dir);
2676 /* Sorry, we do not yet support RDMA over 4.1: */
2677 WRITE32(0);
2678 ADJUST_ARGS();
2679 }
2680 return nfserr;
2681 }
2682
2683 static __be32
2684 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
2685 {
2686 ENCODE_SEQID_OP_HEAD;
2687
2688 if (!nfserr)
2689 nfsd4_encode_stateid(resp, &close->cl_stateid);
2690
2691 encode_seqid_op_tail(resp, save, nfserr);
2692 return nfserr;
2693 }
2694
2695
2696 static __be32
2697 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
2698 {
2699 __be32 *p;
2700
2701 if (!nfserr) {
2702 RESERVE_SPACE(NFS4_VERIFIER_SIZE);
2703 WRITEMEM(commit->co_verf.data, NFS4_VERIFIER_SIZE);
2704 ADJUST_ARGS();
2705 }
2706 return nfserr;
2707 }
2708
2709 static __be32
2710 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
2711 {
2712 __be32 *p;
2713
2714 if (!nfserr) {
2715 RESERVE_SPACE(32);
2716 write_cinfo(&p, &create->cr_cinfo);
2717 WRITE32(2);
2718 WRITE32(create->cr_bmval[0]);
2719 WRITE32(create->cr_bmval[1]);
2720 ADJUST_ARGS();
2721 }
2722 return nfserr;
2723 }
2724
2725 static __be32
2726 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
2727 {
2728 struct svc_fh *fhp = getattr->ga_fhp;
2729 int buflen;
2730
2731 if (nfserr)
2732 return nfserr;
2733
2734 buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2);
2735 nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry,
2736 resp->p, &buflen, getattr->ga_bmval,
2737 resp->rqstp, 0);
2738 if (!nfserr)
2739 resp->p += buflen;
2740 return nfserr;
2741 }
2742
2743 static __be32
2744 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
2745 {
2746 struct svc_fh *fhp = *fhpp;
2747 unsigned int len;
2748 __be32 *p;
2749
2750 if (!nfserr) {
2751 len = fhp->fh_handle.fh_size;
2752 RESERVE_SPACE(len + 4);
2753 WRITE32(len);
2754 WRITEMEM(&fhp->fh_handle.fh_base, len);
2755 ADJUST_ARGS();
2756 }
2757 return nfserr;
2758 }
2759
2760 /*
2761 * Including all fields other than the name, a LOCK4denied structure requires
2762 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
2763 */
2764 static void
2765 nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld)
2766 {
2767 struct xdr_netobj *conf = &ld->ld_owner;
2768 __be32 *p;
2769
2770 RESERVE_SPACE(32 + XDR_LEN(conf->len));
2771 WRITE64(ld->ld_start);
2772 WRITE64(ld->ld_length);
2773 WRITE32(ld->ld_type);
2774 if (conf->len) {
2775 WRITEMEM(&ld->ld_clientid, 8);
2776 WRITE32(conf->len);
2777 WRITEMEM(conf->data, conf->len);
2778 kfree(conf->data);
2779 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */
2780 WRITE64((u64)0); /* clientid */
2781 WRITE32(0); /* length of owner name */
2782 }
2783 ADJUST_ARGS();
2784 }
2785
2786 static __be32
2787 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
2788 {
2789 ENCODE_SEQID_OP_HEAD;
2790
2791 if (!nfserr)
2792 nfsd4_encode_stateid(resp, &lock->lk_resp_stateid);
2793 else if (nfserr == nfserr_denied)
2794 nfsd4_encode_lock_denied(resp, &lock->lk_denied);
2795
2796 encode_seqid_op_tail(resp, save, nfserr);
2797 return nfserr;
2798 }
2799
2800 static __be32
2801 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
2802 {
2803 if (nfserr == nfserr_denied)
2804 nfsd4_encode_lock_denied(resp, &lockt->lt_denied);
2805 return nfserr;
2806 }
2807
2808 static __be32
2809 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
2810 {
2811 ENCODE_SEQID_OP_HEAD;
2812
2813 if (!nfserr)
2814 nfsd4_encode_stateid(resp, &locku->lu_stateid);
2815
2816 encode_seqid_op_tail(resp, save, nfserr);
2817 return nfserr;
2818 }
2819
2820
2821 static __be32
2822 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
2823 {
2824 __be32 *p;
2825
2826 if (!nfserr) {
2827 RESERVE_SPACE(20);
2828 write_cinfo(&p, &link->li_cinfo);
2829 ADJUST_ARGS();
2830 }
2831 return nfserr;
2832 }
2833
2834
2835 static __be32
2836 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
2837 {
2838 __be32 *p;
2839 ENCODE_SEQID_OP_HEAD;
2840
2841 if (nfserr)
2842 goto out;
2843
2844 nfsd4_encode_stateid(resp, &open->op_stateid);
2845 RESERVE_SPACE(40);
2846 write_cinfo(&p, &open->op_cinfo);
2847 WRITE32(open->op_rflags);
2848 WRITE32(2);
2849 WRITE32(open->op_bmval[0]);
2850 WRITE32(open->op_bmval[1]);
2851 WRITE32(open->op_delegate_type);
2852 ADJUST_ARGS();
2853
2854 switch (open->op_delegate_type) {
2855 case NFS4_OPEN_DELEGATE_NONE:
2856 break;
2857 case NFS4_OPEN_DELEGATE_READ:
2858 nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
2859 RESERVE_SPACE(20);
2860 WRITE32(open->op_recall);
2861
2862 /*
2863 * TODO: ACE's in delegations
2864 */
2865 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
2866 WRITE32(0);
2867 WRITE32(0);
2868 WRITE32(0); /* XXX: is NULL principal ok? */
2869 ADJUST_ARGS();
2870 break;
2871 case NFS4_OPEN_DELEGATE_WRITE:
2872 nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
2873 RESERVE_SPACE(32);
2874 WRITE32(0);
2875
2876 /*
2877 * TODO: space_limit's in delegations
2878 */
2879 WRITE32(NFS4_LIMIT_SIZE);
2880 WRITE32(~(u32)0);
2881 WRITE32(~(u32)0);
2882
2883 /*
2884 * TODO: ACE's in delegations
2885 */
2886 WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
2887 WRITE32(0);
2888 WRITE32(0);
2889 WRITE32(0); /* XXX: is NULL principal ok? */
2890 ADJUST_ARGS();
2891 break;
2892 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */
2893 switch (open->op_why_no_deleg) {
2894 case WND4_CONTENTION:
2895 case WND4_RESOURCE:
2896 RESERVE_SPACE(8);
2897 WRITE32(open->op_why_no_deleg);
2898 WRITE32(0); /* deleg signaling not supported yet */
2899 break;
2900 default:
2901 RESERVE_SPACE(4);
2902 WRITE32(open->op_why_no_deleg);
2903 }
2904 ADJUST_ARGS();
2905 break;
2906 default:
2907 BUG();
2908 }
2909 /* XXX save filehandle here */
2910 out:
2911 encode_seqid_op_tail(resp, save, nfserr);
2912 return nfserr;
2913 }
2914
2915 static __be32
2916 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
2917 {
2918 ENCODE_SEQID_OP_HEAD;
2919
2920 if (!nfserr)
2921 nfsd4_encode_stateid(resp, &oc->oc_resp_stateid);
2922
2923 encode_seqid_op_tail(resp, save, nfserr);
2924 return nfserr;
2925 }
2926
2927 static __be32
2928 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
2929 {
2930 ENCODE_SEQID_OP_HEAD;
2931
2932 if (!nfserr)
2933 nfsd4_encode_stateid(resp, &od->od_stateid);
2934
2935 encode_seqid_op_tail(resp, save, nfserr);
2936 return nfserr;
2937 }
2938
2939 static __be32
2940 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
2941 struct nfsd4_read *read)
2942 {
2943 u32 eof;
2944 int v, pn;
2945 unsigned long maxcount;
2946 long len;
2947 __be32 *p;
2948
2949 if (nfserr)
2950 return nfserr;
2951 if (resp->xbuf->page_len)
2952 return nfserr_resource;
2953
2954 RESERVE_SPACE(8); /* eof flag and byte count */
2955
2956 maxcount = svc_max_payload(resp->rqstp);
2957 if (maxcount > read->rd_length)
2958 maxcount = read->rd_length;
2959
2960 len = maxcount;
2961 v = 0;
2962 while (len > 0) {
2963 pn = resp->rqstp->rq_resused++;
2964 resp->rqstp->rq_vec[v].iov_base =
2965 page_address(resp->rqstp->rq_respages[pn]);
2966 resp->rqstp->rq_vec[v].iov_len =
2967 len < PAGE_SIZE ? len : PAGE_SIZE;
2968 v++;
2969 len -= PAGE_SIZE;
2970 }
2971 read->rd_vlen = v;
2972
2973 nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp,
2974 read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen,
2975 &maxcount);
2976
2977 if (nfserr)
2978 return nfserr;
2979 eof = (read->rd_offset + maxcount >=
2980 read->rd_fhp->fh_dentry->d_inode->i_size);
2981
2982 WRITE32(eof);
2983 WRITE32(maxcount);
2984 ADJUST_ARGS();
2985 resp->xbuf->head[0].iov_len = (char*)p
2986 - (char*)resp->xbuf->head[0].iov_base;
2987 resp->xbuf->page_len = maxcount;
2988
2989 /* Use rest of head for padding and remaining ops: */
2990 resp->xbuf->tail[0].iov_base = p;
2991 resp->xbuf->tail[0].iov_len = 0;
2992 if (maxcount&3) {
2993 RESERVE_SPACE(4);
2994 WRITE32(0);
2995 resp->xbuf->tail[0].iov_base += maxcount&3;
2996 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
2997 ADJUST_ARGS();
2998 }
2999 return 0;
3000 }
3001
3002 static __be32
3003 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
3004 {
3005 int maxcount;
3006 char *page;
3007 __be32 *p;
3008
3009 if (nfserr)
3010 return nfserr;
3011 if (resp->xbuf->page_len)
3012 return nfserr_resource;
3013
3014 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]);
3015
3016 maxcount = PAGE_SIZE;
3017 RESERVE_SPACE(4);
3018
3019 /*
3020 * XXX: By default, the ->readlink() VFS op will truncate symlinks
3021 * if they would overflow the buffer. Is this kosher in NFSv4? If
3022 * not, one easy fix is: if ->readlink() precisely fills the buffer,
3023 * assume that truncation occurred, and return NFS4ERR_RESOURCE.
3024 */
3025 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount);
3026 if (nfserr == nfserr_isdir)
3027 return nfserr_inval;
3028 if (nfserr)
3029 return nfserr;
3030
3031 WRITE32(maxcount);
3032 ADJUST_ARGS();
3033 resp->xbuf->head[0].iov_len = (char*)p
3034 - (char*)resp->xbuf->head[0].iov_base;
3035 resp->xbuf->page_len = maxcount;
3036
3037 /* Use rest of head for padding and remaining ops: */
3038 resp->xbuf->tail[0].iov_base = p;
3039 resp->xbuf->tail[0].iov_len = 0;
3040 if (maxcount&3) {
3041 RESERVE_SPACE(4);
3042 WRITE32(0);
3043 resp->xbuf->tail[0].iov_base += maxcount&3;
3044 resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
3045 ADJUST_ARGS();
3046 }
3047 return 0;
3048 }
3049
3050 static __be32
3051 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
3052 {
3053 int maxcount;
3054 loff_t offset;
3055 __be32 *page, *savep, *tailbase;
3056 __be32 *p;
3057
3058 if (nfserr)
3059 return nfserr;
3060 if (resp->xbuf->page_len)
3061 return nfserr_resource;
3062
3063 RESERVE_SPACE(NFS4_VERIFIER_SIZE);
3064 savep = p;
3065
3066 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
3067 WRITE32(0);
3068 WRITE32(0);
3069 ADJUST_ARGS();
3070 resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base;
3071 tailbase = p;
3072
3073 maxcount = PAGE_SIZE;
3074 if (maxcount > readdir->rd_maxcount)
3075 maxcount = readdir->rd_maxcount;
3076
3077 /*
3078 * Convert from bytes to words, account for the two words already
3079 * written, make sure to leave two words at the end for the next
3080 * pointer and eof field.
3081 */
3082 maxcount = (maxcount >> 2) - 4;
3083 if (maxcount < 0) {
3084 nfserr = nfserr_toosmall;
3085 goto err_no_verf;
3086 }
3087
3088 page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]);
3089 readdir->common.err = 0;
3090 readdir->buflen = maxcount;
3091 readdir->buffer = page;
3092 readdir->offset = NULL;
3093
3094 offset = readdir->rd_cookie;
3095 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
3096 &offset,
3097 &readdir->common, nfsd4_encode_dirent);
3098 if (nfserr == nfs_ok &&
3099 readdir->common.err == nfserr_toosmall &&
3100 readdir->buffer == page)
3101 nfserr = nfserr_toosmall;
3102 if (nfserr)
3103 goto err_no_verf;
3104
3105 if (readdir->offset)
3106 xdr_encode_hyper(readdir->offset, offset);
3107
3108 p = readdir->buffer;
3109 *p++ = 0; /* no more entries */
3110 *p++ = htonl(readdir->common.err == nfserr_eof);
3111 resp->xbuf->page_len = ((char*)p) - (char*)page_address(
3112 resp->rqstp->rq_respages[resp->rqstp->rq_resused-1]);
3113
3114 /* Use rest of head for padding and remaining ops: */
3115 resp->xbuf->tail[0].iov_base = tailbase;
3116 resp->xbuf->tail[0].iov_len = 0;
3117 resp->p = resp->xbuf->tail[0].iov_base;
3118 resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4;
3119
3120 return 0;
3121 err_no_verf:
3122 p = savep;
3123 ADJUST_ARGS();
3124 return nfserr;
3125 }
3126
3127 static __be32
3128 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
3129 {
3130 __be32 *p;
3131
3132 if (!nfserr) {
3133 RESERVE_SPACE(20);
3134 write_cinfo(&p, &remove->rm_cinfo);
3135 ADJUST_ARGS();
3136 }
3137 return nfserr;
3138 }
3139
3140 static __be32
3141 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
3142 {
3143 __be32 *p;
3144
3145 if (!nfserr) {
3146 RESERVE_SPACE(40);
3147 write_cinfo(&p, &rename->rn_sinfo);
3148 write_cinfo(&p, &rename->rn_tinfo);
3149 ADJUST_ARGS();
3150 }
3151 return nfserr;
3152 }
3153
3154 static __be32
3155 nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp,
3156 __be32 nfserr,struct svc_export *exp)
3157 {
3158 int i = 0;
3159 u32 nflavs;
3160 struct exp_flavor_info *flavs;
3161 struct exp_flavor_info def_flavs[2];
3162 __be32 *p;
3163
3164 if (nfserr)
3165 goto out;
3166 if (exp->ex_nflavors) {
3167 flavs = exp->ex_flavors;
3168 nflavs = exp->ex_nflavors;
3169 } else { /* Handling of some defaults in absence of real secinfo: */
3170 flavs = def_flavs;
3171 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
3172 nflavs = 2;
3173 flavs[0].pseudoflavor = RPC_AUTH_UNIX;
3174 flavs[1].pseudoflavor = RPC_AUTH_NULL;
3175 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
3176 nflavs = 1;
3177 flavs[0].pseudoflavor
3178 = svcauth_gss_flavor(exp->ex_client);
3179 } else {
3180 nflavs = 1;
3181 flavs[0].pseudoflavor
3182 = exp->ex_client->flavour->flavour;
3183 }
3184 }
3185
3186 RESERVE_SPACE(4);
3187 WRITE32(nflavs);
3188 ADJUST_ARGS();
3189 for (i = 0; i < nflavs; i++) {
3190 u32 flav = flavs[i].pseudoflavor;
3191 struct gss_api_mech *gm = gss_mech_get_by_pseudoflavor(flav);
3192
3193 if (gm) {
3194 RESERVE_SPACE(4);
3195 WRITE32(RPC_AUTH_GSS);
3196 ADJUST_ARGS();
3197 RESERVE_SPACE(4 + gm->gm_oid.len);
3198 WRITE32(gm->gm_oid.len);
3199 WRITEMEM(gm->gm_oid.data, gm->gm_oid.len);
3200 ADJUST_ARGS();
3201 RESERVE_SPACE(4);
3202 WRITE32(0); /* qop */
3203 ADJUST_ARGS();
3204 RESERVE_SPACE(4);
3205 WRITE32(gss_pseudoflavor_to_service(gm, flav));
3206 ADJUST_ARGS();
3207 gss_mech_put(gm);
3208 } else {
3209 RESERVE_SPACE(4);
3210 WRITE32(flav);
3211 ADJUST_ARGS();
3212 }
3213 }
3214 out:
3215 if (exp)
3216 exp_put(exp);
3217 return nfserr;
3218 }
3219
3220 static __be32
3221 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
3222 struct nfsd4_secinfo *secinfo)
3223 {
3224 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp);
3225 }
3226
3227 static __be32
3228 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
3229 struct nfsd4_secinfo_no_name *secinfo)
3230 {
3231 return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp);
3232 }
3233
3234 /*
3235 * The SETATTR encode routine is special -- it always encodes a bitmap,
3236 * regardless of the error status.
3237 */
3238 static __be32
3239 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
3240 {
3241 __be32 *p;
3242
3243 RESERVE_SPACE(12);
3244 if (nfserr) {
3245 WRITE32(2);
3246 WRITE32(0);
3247 WRITE32(0);
3248 }
3249 else {
3250 WRITE32(2);
3251 WRITE32(setattr->sa_bmval[0]);
3252 WRITE32(setattr->sa_bmval[1]);
3253 }
3254 ADJUST_ARGS();
3255 return nfserr;
3256 }
3257
3258 static __be32
3259 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
3260 {
3261 __be32 *p;
3262
3263 if (!nfserr) {
3264 RESERVE_SPACE(8 + NFS4_VERIFIER_SIZE);
3265 WRITEMEM(&scd->se_clientid, 8);
3266 WRITEMEM(&scd->se_confirm, NFS4_VERIFIER_SIZE);
3267 ADJUST_ARGS();
3268 }
3269 else if (nfserr == nfserr_clid_inuse) {
3270 RESERVE_SPACE(8);
3271 WRITE32(0);
3272 WRITE32(0);
3273 ADJUST_ARGS();
3274 }
3275 return nfserr;
3276 }
3277
3278 static __be32
3279 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
3280 {
3281 __be32 *p;
3282
3283 if (!nfserr) {
3284 RESERVE_SPACE(16);
3285 WRITE32(write->wr_bytes_written);
3286 WRITE32(write->wr_how_written);
3287 WRITEMEM(write->wr_verifier.data, NFS4_VERIFIER_SIZE);
3288 ADJUST_ARGS();
3289 }
3290 return nfserr;
3291 }
3292
3293 static __be32
3294 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
3295 struct nfsd4_exchange_id *exid)
3296 {
3297 __be32 *p;
3298 char *major_id;
3299 char *server_scope;
3300 int major_id_sz;
3301 int server_scope_sz;
3302 uint64_t minor_id = 0;
3303
3304 if (nfserr)
3305 return nfserr;
3306
3307 major_id = utsname()->nodename;
3308 major_id_sz = strlen(major_id);
3309 server_scope = utsname()->nodename;
3310 server_scope_sz = strlen(server_scope);
3311
3312 RESERVE_SPACE(
3313 8 /* eir_clientid */ +
3314 4 /* eir_sequenceid */ +
3315 4 /* eir_flags */ +
3316 4 /* spr_how (SP4_NONE) */ +
3317 8 /* so_minor_id */ +
3318 4 /* so_major_id.len */ +
3319 (XDR_QUADLEN(major_id_sz) * 4) +
3320 4 /* eir_server_scope.len */ +
3321 (XDR_QUADLEN(server_scope_sz) * 4) +
3322 4 /* eir_server_impl_id.count (0) */);
3323
3324 WRITEMEM(&exid->clientid, 8);
3325 WRITE32(exid->seqid);
3326 WRITE32(exid->flags);
3327
3328 /* state_protect4_r. Currently only support SP4_NONE */
3329 BUG_ON(exid->spa_how != SP4_NONE);
3330 WRITE32(exid->spa_how);
3331
3332 /* The server_owner struct */
3333 WRITE64(minor_id); /* Minor id */
3334 /* major id */
3335 WRITE32(major_id_sz);
3336 WRITEMEM(major_id, major_id_sz);
3337
3338 /* Server scope */
3339 WRITE32(server_scope_sz);
3340 WRITEMEM(server_scope, server_scope_sz);
3341
3342 /* Implementation id */
3343 WRITE32(0); /* zero length nfs_impl_id4 array */
3344 ADJUST_ARGS();
3345 return 0;
3346 }
3347
3348 static __be32
3349 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3350 struct nfsd4_create_session *sess)
3351 {
3352 __be32 *p;
3353
3354 if (nfserr)
3355 return nfserr;
3356
3357 RESERVE_SPACE(24);
3358 WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN);
3359 WRITE32(sess->seqid);
3360 WRITE32(sess->flags);
3361 ADJUST_ARGS();
3362
3363 RESERVE_SPACE(28);
3364 WRITE32(0); /* headerpadsz */
3365 WRITE32(sess->fore_channel.maxreq_sz);
3366 WRITE32(sess->fore_channel.maxresp_sz);
3367 WRITE32(sess->fore_channel.maxresp_cached);
3368 WRITE32(sess->fore_channel.maxops);
3369 WRITE32(sess->fore_channel.maxreqs);
3370 WRITE32(sess->fore_channel.nr_rdma_attrs);
3371 ADJUST_ARGS();
3372
3373 if (sess->fore_channel.nr_rdma_attrs) {
3374 RESERVE_SPACE(4);
3375 WRITE32(sess->fore_channel.rdma_attrs);
3376 ADJUST_ARGS();
3377 }
3378
3379 RESERVE_SPACE(28);
3380 WRITE32(0); /* headerpadsz */
3381 WRITE32(sess->back_channel.maxreq_sz);
3382 WRITE32(sess->back_channel.maxresp_sz);
3383 WRITE32(sess->back_channel.maxresp_cached);
3384 WRITE32(sess->back_channel.maxops);
3385 WRITE32(sess->back_channel.maxreqs);
3386 WRITE32(sess->back_channel.nr_rdma_attrs);
3387 ADJUST_ARGS();
3388
3389 if (sess->back_channel.nr_rdma_attrs) {
3390 RESERVE_SPACE(4);
3391 WRITE32(sess->back_channel.rdma_attrs);
3392 ADJUST_ARGS();
3393 }
3394 return 0;
3395 }
3396
3397 static __be32
3398 nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3399 struct nfsd4_destroy_session *destroy_session)
3400 {
3401 return nfserr;
3402 }
3403
3404 static __be32
3405 nfsd4_encode_free_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
3406 struct nfsd4_free_stateid *free_stateid)
3407 {
3408 __be32 *p;
3409
3410 if (nfserr)
3411 return nfserr;
3412
3413 RESERVE_SPACE(4);
3414 *p++ = nfserr;
3415 ADJUST_ARGS();
3416 return nfserr;
3417 }
3418
3419 static __be32
3420 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
3421 struct nfsd4_sequence *seq)
3422 {
3423 __be32 *p;
3424
3425 if (nfserr)
3426 return nfserr;
3427
3428 RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20);
3429 WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
3430 WRITE32(seq->seqid);
3431 WRITE32(seq->slotid);
3432 /* Note slotid's are numbered from zero: */
3433 WRITE32(seq->maxslots - 1); /* sr_highest_slotid */
3434 WRITE32(seq->maxslots - 1); /* sr_target_highest_slotid */
3435 WRITE32(seq->status_flags);
3436
3437 ADJUST_ARGS();
3438 resp->cstate.datap = p; /* DRC cache data pointer */
3439 return 0;
3440 }
3441
3442 static __be32
3443 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
3444 struct nfsd4_test_stateid *test_stateid)
3445 {
3446 struct nfsd4_test_stateid_id *stateid, *next;
3447 __be32 *p;
3448
3449 RESERVE_SPACE(4 + (4 * test_stateid->ts_num_ids));
3450 *p++ = htonl(test_stateid->ts_num_ids);
3451
3452 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) {
3453 *p++ = stateid->ts_id_status;
3454 }
3455
3456 ADJUST_ARGS();
3457 return nfserr;
3458 }
3459
3460 static __be32
3461 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p)
3462 {
3463 return nfserr;
3464 }
3465
3466 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *);
3467
3468 /*
3469 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
3470 * since we don't need to filter out obsolete ops as this is
3471 * done in the decoding phase.
3472 */
3473 static nfsd4_enc nfsd4_enc_ops[] = {
3474 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access,
3475 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close,
3476 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit,
3477 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create,
3478 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop,
3479 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop,
3480 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr,
3481 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh,
3482 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link,
3483 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock,
3484 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt,
3485 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku,
3486 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop,
3487 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop,
3488 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop,
3489 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open,
3490 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop,
3491 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm,
3492 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade,
3493 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop,
3494 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop,
3495 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop,
3496 [OP_READ] = (nfsd4_enc)nfsd4_encode_read,
3497 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir,
3498 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink,
3499 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove,
3500 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename,
3501 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop,
3502 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop,
3503 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop,
3504 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo,
3505 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr,
3506 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid,
3507 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop,
3508 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop,
3509 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write,
3510 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop,
3511
3512 /* NFSv4.1 operations */
3513 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop,
3514 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session,
3515 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id,
3516 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session,
3517 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_destroy_session,
3518 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_free_stateid,
3519 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
3520 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop,
3521 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
3522 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop,
3523 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop,
3524 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop,
3525 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name,
3526 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence,
3527 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop,
3528 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid,
3529 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
3530 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop,
3531 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop,
3532 };
3533
3534 /*
3535 * Calculate the total amount of memory that the compound response has taken
3536 * after encoding the current operation with pad.
3537 *
3538 * pad: if operation is non-idempotent, pad was calculate by op_rsize_bop()
3539 * which was specified at nfsd4_operation, else pad is zero.
3540 *
3541 * Compare this length to the session se_fmaxresp_sz and se_fmaxresp_cached.
3542 *
3543 * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so
3544 * will be at least a page and will therefore hold the xdr_buf head.
3545 */
3546 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 pad)
3547 {
3548 struct xdr_buf *xb = &resp->rqstp->rq_res;
3549 struct nfsd4_session *session = NULL;
3550 struct nfsd4_slot *slot = resp->cstate.slot;
3551 u32 length, tlen = 0;
3552
3553 if (!nfsd4_has_session(&resp->cstate))
3554 return 0;
3555
3556 session = resp->cstate.session;
3557 if (session == NULL)
3558 return 0;
3559
3560 if (xb->page_len == 0) {
3561 length = (char *)resp->p - (char *)xb->head[0].iov_base + pad;
3562 } else {
3563 if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0)
3564 tlen = (char *)resp->p - (char *)xb->tail[0].iov_base;
3565
3566 length = xb->head[0].iov_len + xb->page_len + tlen + pad;
3567 }
3568 dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__,
3569 length, xb->page_len, tlen, pad);
3570
3571 if (length > session->se_fchannel.maxresp_sz)
3572 return nfserr_rep_too_big;
3573
3574 if ((slot->sl_flags & NFSD4_SLOT_CACHETHIS) &&
3575 length > session->se_fchannel.maxresp_cached)
3576 return nfserr_rep_too_big_to_cache;
3577
3578 return 0;
3579 }
3580
3581 void
3582 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
3583 {
3584 __be32 *statp;
3585 __be32 *p;
3586
3587 RESERVE_SPACE(8);
3588 WRITE32(op->opnum);
3589 statp = p++; /* to be backfilled at the end */
3590 ADJUST_ARGS();
3591
3592 if (op->opnum == OP_ILLEGAL)
3593 goto status;
3594 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
3595 !nfsd4_enc_ops[op->opnum]);
3596 op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u);
3597 /* nfsd4_check_drc_limit guarantees enough room for error status */
3598 if (!op->status)
3599 op->status = nfsd4_check_resp_size(resp, 0);
3600 status:
3601 /*
3602 * Note: We write the status directly, instead of using WRITE32(),
3603 * since it is already in network byte order.
3604 */
3605 *statp = op->status;
3606 }
3607
3608 /*
3609 * Encode the reply stored in the stateowner reply cache
3610 *
3611 * XDR note: do not encode rp->rp_buflen: the buffer contains the
3612 * previously sent already encoded operation.
3613 *
3614 * called with nfs4_lock_state() held
3615 */
3616 void
3617 nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
3618 {
3619 __be32 *p;
3620 struct nfs4_replay *rp = op->replay;
3621
3622 BUG_ON(!rp);
3623
3624 RESERVE_SPACE(8);
3625 WRITE32(op->opnum);
3626 *p++ = rp->rp_status; /* already xdr'ed */
3627 ADJUST_ARGS();
3628
3629 RESERVE_SPACE(rp->rp_buflen);
3630 WRITEMEM(rp->rp_buf, rp->rp_buflen);
3631 ADJUST_ARGS();
3632 }
3633
3634 int
3635 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy)
3636 {
3637 return xdr_ressize_check(rqstp, p);
3638 }
3639
3640 int nfsd4_release_compoundargs(void *rq, __be32 *p, void *resp)
3641 {
3642 struct svc_rqst *rqstp = rq;
3643 struct nfsd4_compoundargs *args = rqstp->rq_argp;
3644
3645 if (args->ops != args->iops) {
3646 kfree(args->ops);
3647 args->ops = args->iops;
3648 }
3649 kfree(args->tmpp);
3650 args->tmpp = NULL;
3651 while (args->to_free) {
3652 struct tmpbuf *tb = args->to_free;
3653 args->to_free = tb->next;
3654 tb->release(tb->buf);
3655 kfree(tb);
3656 }
3657 return 1;
3658 }
3659
3660 int
3661 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args)
3662 {
3663 args->p = p;
3664 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len;
3665 args->pagelist = rqstp->rq_arg.pages;
3666 args->pagelen = rqstp->rq_arg.page_len;
3667 args->tmpp = NULL;
3668 args->to_free = NULL;
3669 args->ops = args->iops;
3670 args->rqstp = rqstp;
3671
3672 return !nfsd4_decode_compound(args);
3673 }
3674
3675 int
3676 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp)
3677 {
3678 /*
3679 * All that remains is to write the tag and operation count...
3680 */
3681 struct nfsd4_compound_state *cs = &resp->cstate;
3682 struct kvec *iov;
3683 p = resp->tagp;
3684 *p++ = htonl(resp->taglen);
3685 memcpy(p, resp->tag, resp->taglen);
3686 p += XDR_QUADLEN(resp->taglen);
3687 *p++ = htonl(resp->opcnt);
3688
3689 if (rqstp->rq_res.page_len)
3690 iov = &rqstp->rq_res.tail[0];
3691 else
3692 iov = &rqstp->rq_res.head[0];
3693 iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base;
3694 BUG_ON(iov->iov_len > PAGE_SIZE);
3695 if (nfsd4_has_session(cs)) {
3696 if (cs->status != nfserr_replay_cache) {
3697 nfsd4_store_cache_entry(resp);
3698 cs->slot->sl_flags &= ~NFSD4_SLOT_INUSE;
3699 }
3700 /* Renew the clientid on success and on replay */
3701 release_session_client(cs->session);
3702 nfsd4_put_session(cs->session);
3703 }
3704 return 1;
3705 }
3706
3707 /*
3708 * Local variables:
3709 * c-basic-offset: 8
3710 * End:
3711 */
Linux 2.6 libata-dev (mirror)