?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
qed: Fix iWARP buffer size provided for syn packet processing.
[linux-stable.git] / fs / nfsd / nfs4xdr.c
blob3de42a7290939eac692cc57b66d4e515576641ec
1 /*
2 * Server-side XDR for NFSv4
3 *
4 * Copyright (c) 2002 The Regents of the University of Michigan.
5 * All rights reserved.
6 *
7 * Kendrick Smith <kmsmith@umich.edu>
8 * Andy Adamson <andros@umich.edu>
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 *
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the University nor the names of its
20 * contributors may be used to endorse or promote products derived
21 * from this software without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 */
35
36 #include <linux/file.h>
37 #include <linux/slab.h>
38 #include <linux/namei.h>
39 #include <linux/statfs.h>
40 #include <linux/utsname.h>
41 #include <linux/pagemap.h>
42 #include <linux/sunrpc/svcauth_gss.h>
43
44 #include "idmap.h"
45 #include "acl.h"
46 #include "xdr4.h"
47 #include "vfs.h"
48 #include "state.h"
49 #include "cache.h"
50 #include "netns.h"
51 #include "pnfs.h"
52
53 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
54 #include <linux/security.h>
55 #endif
56
57
58 #define NFSDDBG_FACILITY NFSDDBG_XDR
59
60 const u32 nfsd_suppattrs[3][3] = {
61 {NFSD4_SUPPORTED_ATTRS_WORD0,
62 NFSD4_SUPPORTED_ATTRS_WORD1,
63 NFSD4_SUPPORTED_ATTRS_WORD2},
64
65 {NFSD4_1_SUPPORTED_ATTRS_WORD0,
66 NFSD4_1_SUPPORTED_ATTRS_WORD1,
67 NFSD4_1_SUPPORTED_ATTRS_WORD2},
68
69 {NFSD4_1_SUPPORTED_ATTRS_WORD0,
70 NFSD4_1_SUPPORTED_ATTRS_WORD1,
71 NFSD4_2_SUPPORTED_ATTRS_WORD2},
72 };
73
74 /*
75 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
76 * directory in order to indicate to the client that a filesystem boundary is present
77 * We use a fixed fsid for a referral
78 */
79 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL
80 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL
81
82 static __be32
83 check_filename(char *str, int len)
84 {
85 int i;
86
87 if (len == 0)
88 return nfserr_inval;
89 if (isdotent(str, len))
90 return nfserr_badname;
91 for (i = 0; i < len; i++)
92 if (str[i] == '/')
93 return nfserr_badname;
94 return 0;
95 }
96
97 #define DECODE_HEAD \
98 __be32 *p; \
99 __be32 status
100 #define DECODE_TAIL \
101 status = 0; \
102 out: \
103 return status; \
104 xdr_error: \
105 dprintk("NFSD: xdr error (%s:%d)\n", \
106 __FILE__, __LINE__); \
107 status = nfserr_bad_xdr; \
108 goto out
109
110 #define READMEM(x,nbytes) do { \
111 x = (char *)p; \
112 p += XDR_QUADLEN(nbytes); \
113 } while (0)
114 #define SAVEMEM(x,nbytes) do { \
115 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \
116 savemem(argp, p, nbytes) : \
117 (char *)p)) { \
118 dprintk("NFSD: xdr error (%s:%d)\n", \
119 __FILE__, __LINE__); \
120 goto xdr_error; \
121 } \
122 p += XDR_QUADLEN(nbytes); \
123 } while (0)
124 #define COPYMEM(x,nbytes) do { \
125 memcpy((x), p, nbytes); \
126 p += XDR_QUADLEN(nbytes); \
127 } while (0)
128
129 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */
130 #define READ_BUF(nbytes) do { \
131 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \
132 p = argp->p; \
133 argp->p += XDR_QUADLEN(nbytes); \
134 } else if (!(p = read_buf(argp, nbytes))) { \
135 dprintk("NFSD: xdr error (%s:%d)\n", \
136 __FILE__, __LINE__); \
137 goto xdr_error; \
138 } \
139 } while (0)
140
141 static void next_decode_page(struct nfsd4_compoundargs *argp)
142 {
143 argp->p = page_address(argp->pagelist[0]);
144 argp->pagelist++;
145 if (argp->pagelen < PAGE_SIZE) {
146 argp->end = argp->p + XDR_QUADLEN(argp->pagelen);
147 argp->pagelen = 0;
148 } else {
149 argp->end = argp->p + (PAGE_SIZE>>2);
150 argp->pagelen -= PAGE_SIZE;
151 }
152 }
153
154 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes)
155 {
156 /* We want more bytes than seem to be available.
157 * Maybe we need a new page, maybe we have just run out
158 */
159 unsigned int avail = (char *)argp->end - (char *)argp->p;
160 __be32 *p;
161
162 if (argp->pagelen == 0) {
163 struct kvec *vec = &argp->rqstp->rq_arg.tail[0];
164
165 if (!argp->tail) {
166 argp->tail = true;
167 avail = vec->iov_len;
168 argp->p = vec->iov_base;
169 argp->end = vec->iov_base + avail;
170 }
171
172 if (avail < nbytes)
173 return NULL;
174
175 p = argp->p;
176 argp->p += XDR_QUADLEN(nbytes);
177 return p;
178 }
179
180 if (avail + argp->pagelen < nbytes)
181 return NULL;
182 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */
183 return NULL;
184 /* ok, we can do it with the current plus the next page */
185 if (nbytes <= sizeof(argp->tmp))
186 p = argp->tmp;
187 else {
188 kfree(argp->tmpp);
189 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL);
190 if (!p)
191 return NULL;
192
193 }
194 /*
195 * The following memcpy is safe because read_buf is always
196 * called with nbytes > avail, and the two cases above both
197 * guarantee p points to at least nbytes bytes.
198 */
199 memcpy(p, argp->p, avail);
200 next_decode_page(argp);
201 memcpy(((char*)p)+avail, argp->p, (nbytes - avail));
202 argp->p += XDR_QUADLEN(nbytes - avail);
203 return p;
204 }
205
206 static int zero_clientid(clientid_t *clid)
207 {
208 return (clid->cl_boot == 0) && (clid->cl_id == 0);
209 }
210
211 /**
212 * svcxdr_tmpalloc - allocate memory to be freed after compound processing
213 * @argp: NFSv4 compound argument structure
214 * @p: pointer to be freed (with kfree())
215 *
216 * Marks @p to be freed when processing the compound operation
217 * described in @argp finishes.
218 */
219 static void *
220 svcxdr_tmpalloc(struct nfsd4_compoundargs *argp, u32 len)
221 {
222 struct svcxdr_tmpbuf *tb;
223
224 tb = kmalloc(sizeof(*tb) + len, GFP_KERNEL);
225 if (!tb)
226 return NULL;
227 tb->next = argp->to_free;
228 argp->to_free = tb;
229 return tb->buf;
230 }
231
232 /*
233 * For xdr strings that need to be passed to other kernel api's
234 * as null-terminated strings.
235 *
236 * Note null-terminating in place usually isn't safe since the
237 * buffer might end on a page boundary.
238 */
239 static char *
240 svcxdr_dupstr(struct nfsd4_compoundargs *argp, void *buf, u32 len)
241 {
242 char *p = svcxdr_tmpalloc(argp, len + 1);
243
244 if (!p)
245 return NULL;
246 memcpy(p, buf, len);
247 p[len] = '\0';
248 return p;
249 }
250
251 /**
252 * savemem - duplicate a chunk of memory for later processing
253 * @argp: NFSv4 compound argument structure to be freed with
254 * @p: pointer to be duplicated
255 * @nbytes: length to be duplicated
256 *
257 * Returns a pointer to a copy of @nbytes bytes of memory at @p
258 * that are preserved until processing of the NFSv4 compound
259 * operation described by @argp finishes.
260 */
261 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes)
262 {
263 void *ret;
264
265 ret = svcxdr_tmpalloc(argp, nbytes);
266 if (!ret)
267 return NULL;
268 memcpy(ret, p, nbytes);
269 return ret;
270 }
271
272 /*
273 * We require the high 32 bits of 'seconds' to be 0, and
274 * we ignore all 32 bits of 'nseconds'.
275 */
276 static __be32
277 nfsd4_decode_time(struct nfsd4_compoundargs *argp, struct timespec *tv)
278 {
279 DECODE_HEAD;
280 u64 sec;
281
282 READ_BUF(12);
283 p = xdr_decode_hyper(p, &sec);
284 tv->tv_sec = sec;
285 tv->tv_nsec = be32_to_cpup(p++);
286 if (tv->tv_nsec >= (u32)1000000000)
287 return nfserr_inval;
288
289 DECODE_TAIL;
290 }
291
292 static __be32
293 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval)
294 {
295 u32 bmlen;
296 DECODE_HEAD;
297
298 bmval[0] = 0;
299 bmval[1] = 0;
300 bmval[2] = 0;
301
302 READ_BUF(4);
303 bmlen = be32_to_cpup(p++);
304 if (bmlen > 1000)
305 goto xdr_error;
306
307 READ_BUF(bmlen << 2);
308 if (bmlen > 0)
309 bmval[0] = be32_to_cpup(p++);
310 if (bmlen > 1)
311 bmval[1] = be32_to_cpup(p++);
312 if (bmlen > 2)
313 bmval[2] = be32_to_cpup(p++);
314
315 DECODE_TAIL;
316 }
317
318 static __be32
319 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
320 struct iattr *iattr, struct nfs4_acl **acl,
321 struct xdr_netobj *label, int *umask)
322 {
323 struct timespec ts;
324 int expected_len, len = 0;
325 u32 dummy32;
326 char *buf;
327
328 DECODE_HEAD;
329 iattr->ia_valid = 0;
330 if ((status = nfsd4_decode_bitmap(argp, bmval)))
331 return status;
332
333 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
334 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
335 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) {
336 if (nfsd_attrs_supported(argp->minorversion, bmval))
337 return nfserr_inval;
338 return nfserr_attrnotsupp;
339 }
340
341 READ_BUF(4);
342 expected_len = be32_to_cpup(p++);
343
344 if (bmval[0] & FATTR4_WORD0_SIZE) {
345 READ_BUF(8);
346 len += 8;
347 p = xdr_decode_hyper(p, &iattr->ia_size);
348 iattr->ia_valid |= ATTR_SIZE;
349 }
350 if (bmval[0] & FATTR4_WORD0_ACL) {
351 u32 nace;
352 struct nfs4_ace *ace;
353
354 READ_BUF(4); len += 4;
355 nace = be32_to_cpup(p++);
356
357 if (nace > NFS4_ACL_MAX)
358 return nfserr_fbig;
359
360 *acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(nace));
361 if (*acl == NULL)
362 return nfserr_jukebox;
363
364 (*acl)->naces = nace;
365 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) {
366 READ_BUF(16); len += 16;
367 ace->type = be32_to_cpup(p++);
368 ace->flag = be32_to_cpup(p++);
369 ace->access_mask = be32_to_cpup(p++);
370 dummy32 = be32_to_cpup(p++);
371 READ_BUF(dummy32);
372 len += XDR_QUADLEN(dummy32) << 2;
373 READMEM(buf, dummy32);
374 ace->whotype = nfs4_acl_get_whotype(buf, dummy32);
375 status = nfs_ok;
376 if (ace->whotype != NFS4_ACL_WHO_NAMED)
377 ;
378 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
379 status = nfsd_map_name_to_gid(argp->rqstp,
380 buf, dummy32, &ace->who_gid);
381 else
382 status = nfsd_map_name_to_uid(argp->rqstp,
383 buf, dummy32, &ace->who_uid);
384 if (status)
385 return status;
386 }
387 } else
388 *acl = NULL;
389 if (bmval[1] & FATTR4_WORD1_MODE) {
390 READ_BUF(4);
391 len += 4;
392 iattr->ia_mode = be32_to_cpup(p++);
393 iattr->ia_mode &= (S_IFMT | S_IALLUGO);
394 iattr->ia_valid |= ATTR_MODE;
395 }
396 if (bmval[1] & FATTR4_WORD1_OWNER) {
397 READ_BUF(4);
398 len += 4;
399 dummy32 = be32_to_cpup(p++);
400 READ_BUF(dummy32);
401 len += (XDR_QUADLEN(dummy32) << 2);
402 READMEM(buf, dummy32);
403 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid)))
404 return status;
405 iattr->ia_valid |= ATTR_UID;
406 }
407 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
408 READ_BUF(4);
409 len += 4;
410 dummy32 = be32_to_cpup(p++);
411 READ_BUF(dummy32);
412 len += (XDR_QUADLEN(dummy32) << 2);
413 READMEM(buf, dummy32);
414 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid)))
415 return status;
416 iattr->ia_valid |= ATTR_GID;
417 }
418 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
419 READ_BUF(4);
420 len += 4;
421 dummy32 = be32_to_cpup(p++);
422 switch (dummy32) {
423 case NFS4_SET_TO_CLIENT_TIME:
424 len += 12;
425 status = nfsd4_decode_time(argp, &ts);
426 iattr->ia_atime = timespec_to_timespec64(ts);
427 if (status)
428 return status;
429 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
430 break;
431 case NFS4_SET_TO_SERVER_TIME:
432 iattr->ia_valid |= ATTR_ATIME;
433 break;
434 default:
435 goto xdr_error;
436 }
437 }
438 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
439 READ_BUF(4);
440 len += 4;
441 dummy32 = be32_to_cpup(p++);
442 switch (dummy32) {
443 case NFS4_SET_TO_CLIENT_TIME:
444 len += 12;
445 status = nfsd4_decode_time(argp, &ts);
446 iattr->ia_mtime = timespec_to_timespec64(ts);
447 if (status)
448 return status;
449 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
450 break;
451 case NFS4_SET_TO_SERVER_TIME:
452 iattr->ia_valid |= ATTR_MTIME;
453 break;
454 default:
455 goto xdr_error;
456 }
457 }
458
459 label->len = 0;
460 if (IS_ENABLED(CONFIG_NFSD_V4_SECURITY_LABEL) &&
461 bmval[2] & FATTR4_WORD2_SECURITY_LABEL) {
462 READ_BUF(4);
463 len += 4;
464 dummy32 = be32_to_cpup(p++); /* lfs: we don't use it */
465 READ_BUF(4);
466 len += 4;
467 dummy32 = be32_to_cpup(p++); /* pi: we don't use it either */
468 READ_BUF(4);
469 len += 4;
470 dummy32 = be32_to_cpup(p++);
471 READ_BUF(dummy32);
472 if (dummy32 > NFS4_MAXLABELLEN)
473 return nfserr_badlabel;
474 len += (XDR_QUADLEN(dummy32) << 2);
475 READMEM(buf, dummy32);
476 label->len = dummy32;
477 label->data = svcxdr_dupstr(argp, buf, dummy32);
478 if (!label->data)
479 return nfserr_jukebox;
480 }
481 if (bmval[2] & FATTR4_WORD2_MODE_UMASK) {
482 if (!umask)
483 goto xdr_error;
484 READ_BUF(8);
485 len += 8;
486 dummy32 = be32_to_cpup(p++);
487 iattr->ia_mode = dummy32 & (S_IFMT | S_IALLUGO);
488 dummy32 = be32_to_cpup(p++);
489 *umask = dummy32 & S_IRWXUGO;
490 iattr->ia_valid |= ATTR_MODE;
491 }
492 if (len != expected_len)
493 goto xdr_error;
494
495 DECODE_TAIL;
496 }
497
498 static __be32
499 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid)
500 {
501 DECODE_HEAD;
502
503 READ_BUF(sizeof(stateid_t));
504 sid->si_generation = be32_to_cpup(p++);
505 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
506
507 DECODE_TAIL;
508 }
509
510 static __be32
511 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access)
512 {
513 DECODE_HEAD;
514
515 READ_BUF(4);
516 access->ac_req_access = be32_to_cpup(p++);
517
518 DECODE_TAIL;
519 }
520
521 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs)
522 {
523 DECODE_HEAD;
524 u32 dummy, uid, gid;
525 char *machine_name;
526 int i;
527 int nr_secflavs;
528
529 /* callback_sec_params4 */
530 READ_BUF(4);
531 nr_secflavs = be32_to_cpup(p++);
532 if (nr_secflavs)
533 cbs->flavor = (u32)(-1);
534 else
535 /* Is this legal? Be generous, take it to mean AUTH_NONE: */
536 cbs->flavor = 0;
537 for (i = 0; i < nr_secflavs; ++i) {
538 READ_BUF(4);
539 dummy = be32_to_cpup(p++);
540 switch (dummy) {
541 case RPC_AUTH_NULL:
542 /* Nothing to read */
543 if (cbs->flavor == (u32)(-1))
544 cbs->flavor = RPC_AUTH_NULL;
545 break;
546 case RPC_AUTH_UNIX:
547 READ_BUF(8);
548 /* stamp */
549 dummy = be32_to_cpup(p++);
550
551 /* machine name */
552 dummy = be32_to_cpup(p++);
553 READ_BUF(dummy);
554 SAVEMEM(machine_name, dummy);
555
556 /* uid, gid */
557 READ_BUF(8);
558 uid = be32_to_cpup(p++);
559 gid = be32_to_cpup(p++);
560
561 /* more gids */
562 READ_BUF(4);
563 dummy = be32_to_cpup(p++);
564 READ_BUF(dummy * 4);
565 if (cbs->flavor == (u32)(-1)) {
566 kuid_t kuid = make_kuid(&init_user_ns, uid);
567 kgid_t kgid = make_kgid(&init_user_ns, gid);
568 if (uid_valid(kuid) && gid_valid(kgid)) {
569 cbs->uid = kuid;
570 cbs->gid = kgid;
571 cbs->flavor = RPC_AUTH_UNIX;
572 } else {
573 dprintk("RPC_AUTH_UNIX with invalid"
574 "uid or gid ignoring!\n");
575 }
576 }
577 break;
578 case RPC_AUTH_GSS:
579 dprintk("RPC_AUTH_GSS callback secflavor "
580 "not supported!\n");
581 READ_BUF(8);
582 /* gcbp_service */
583 dummy = be32_to_cpup(p++);
584 /* gcbp_handle_from_server */
585 dummy = be32_to_cpup(p++);
586 READ_BUF(dummy);
587 p += XDR_QUADLEN(dummy);
588 /* gcbp_handle_from_client */
589 READ_BUF(4);
590 dummy = be32_to_cpup(p++);
591 READ_BUF(dummy);
592 break;
593 default:
594 dprintk("Illegal callback secflavor\n");
595 return nfserr_inval;
596 }
597 }
598 DECODE_TAIL;
599 }
600
601 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc)
602 {
603 DECODE_HEAD;
604
605 READ_BUF(4);
606 bc->bc_cb_program = be32_to_cpup(p++);
607 nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec);
608
609 DECODE_TAIL;
610 }
611
612 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts)
613 {
614 DECODE_HEAD;
615
616 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8);
617 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
618 bcts->dir = be32_to_cpup(p++);
619 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker
620 * could help us figure out we should be using it. */
621 DECODE_TAIL;
622 }
623
624 static __be32
625 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
626 {
627 DECODE_HEAD;
628
629 READ_BUF(4);
630 close->cl_seqid = be32_to_cpup(p++);
631 return nfsd4_decode_stateid(argp, &close->cl_stateid);
632
633 DECODE_TAIL;
634 }
635
636
637 static __be32
638 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit)
639 {
640 DECODE_HEAD;
641
642 READ_BUF(12);
643 p = xdr_decode_hyper(p, &commit->co_offset);
644 commit->co_count = be32_to_cpup(p++);
645
646 DECODE_TAIL;
647 }
648
649 static __be32
650 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create)
651 {
652 DECODE_HEAD;
653
654 READ_BUF(4);
655 create->cr_type = be32_to_cpup(p++);
656 switch (create->cr_type) {
657 case NF4LNK:
658 READ_BUF(4);
659 create->cr_datalen = be32_to_cpup(p++);
660 READ_BUF(create->cr_datalen);
661 create->cr_data = svcxdr_dupstr(argp, p, create->cr_datalen);
662 if (!create->cr_data)
663 return nfserr_jukebox;
664 break;
665 case NF4BLK:
666 case NF4CHR:
667 READ_BUF(8);
668 create->cr_specdata1 = be32_to_cpup(p++);
669 create->cr_specdata2 = be32_to_cpup(p++);
670 break;
671 case NF4SOCK:
672 case NF4FIFO:
673 case NF4DIR:
674 default:
675 break;
676 }
677
678 READ_BUF(4);
679 create->cr_namelen = be32_to_cpup(p++);
680 READ_BUF(create->cr_namelen);
681 SAVEMEM(create->cr_name, create->cr_namelen);
682 if ((status = check_filename(create->cr_name, create->cr_namelen)))
683 return status;
684
685 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr,
686 &create->cr_acl, &create->cr_label,
687 &create->cr_umask);
688 if (status)
689 goto out;
690
691 DECODE_TAIL;
692 }
693
694 static inline __be32
695 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr)
696 {
697 return nfsd4_decode_stateid(argp, &dr->dr_stateid);
698 }
699
700 static inline __be32
701 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr)
702 {
703 return nfsd4_decode_bitmap(argp, getattr->ga_bmval);
704 }
705
706 static __be32
707 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
708 {
709 DECODE_HEAD;
710
711 READ_BUF(4);
712 link->li_namelen = be32_to_cpup(p++);
713 READ_BUF(link->li_namelen);
714 SAVEMEM(link->li_name, link->li_namelen);
715 if ((status = check_filename(link->li_name, link->li_namelen)))
716 return status;
717
718 DECODE_TAIL;
719 }
720
721 static __be32
722 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
723 {
724 DECODE_HEAD;
725
726 /*
727 * type, reclaim(boolean), offset, length, new_lock_owner(boolean)
728 */
729 READ_BUF(28);
730 lock->lk_type = be32_to_cpup(p++);
731 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
732 goto xdr_error;
733 lock->lk_reclaim = be32_to_cpup(p++);
734 p = xdr_decode_hyper(p, &lock->lk_offset);
735 p = xdr_decode_hyper(p, &lock->lk_length);
736 lock->lk_is_new = be32_to_cpup(p++);
737
738 if (lock->lk_is_new) {
739 READ_BUF(4);
740 lock->lk_new_open_seqid = be32_to_cpup(p++);
741 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid);
742 if (status)
743 return status;
744 READ_BUF(8 + sizeof(clientid_t));
745 lock->lk_new_lock_seqid = be32_to_cpup(p++);
746 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t));
747 lock->lk_new_owner.len = be32_to_cpup(p++);
748 READ_BUF(lock->lk_new_owner.len);
749 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len);
750 } else {
751 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid);
752 if (status)
753 return status;
754 READ_BUF(4);
755 lock->lk_old_lock_seqid = be32_to_cpup(p++);
756 }
757
758 DECODE_TAIL;
759 }
760
761 static __be32
762 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
763 {
764 DECODE_HEAD;
765
766 READ_BUF(32);
767 lockt->lt_type = be32_to_cpup(p++);
768 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
769 goto xdr_error;
770 p = xdr_decode_hyper(p, &lockt->lt_offset);
771 p = xdr_decode_hyper(p, &lockt->lt_length);
772 COPYMEM(&lockt->lt_clientid, 8);
773 lockt->lt_owner.len = be32_to_cpup(p++);
774 READ_BUF(lockt->lt_owner.len);
775 READMEM(lockt->lt_owner.data, lockt->lt_owner.len);
776
777 DECODE_TAIL;
778 }
779
780 static __be32
781 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
782 {
783 DECODE_HEAD;
784
785 READ_BUF(8);
786 locku->lu_type = be32_to_cpup(p++);
787 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
788 goto xdr_error;
789 locku->lu_seqid = be32_to_cpup(p++);
790 status = nfsd4_decode_stateid(argp, &locku->lu_stateid);
791 if (status)
792 return status;
793 READ_BUF(16);
794 p = xdr_decode_hyper(p, &locku->lu_offset);
795 p = xdr_decode_hyper(p, &locku->lu_length);
796
797 DECODE_TAIL;
798 }
799
800 static __be32
801 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup)
802 {
803 DECODE_HEAD;
804
805 READ_BUF(4);
806 lookup->lo_len = be32_to_cpup(p++);
807 READ_BUF(lookup->lo_len);
808 SAVEMEM(lookup->lo_name, lookup->lo_len);
809 if ((status = check_filename(lookup->lo_name, lookup->lo_len)))
810 return status;
811
812 DECODE_TAIL;
813 }
814
815 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when)
816 {
817 __be32 *p;
818 u32 w;
819
820 READ_BUF(4);
821 w = be32_to_cpup(p++);
822 *share_access = w & NFS4_SHARE_ACCESS_MASK;
823 *deleg_want = w & NFS4_SHARE_WANT_MASK;
824 if (deleg_when)
825 *deleg_when = w & NFS4_SHARE_WHEN_MASK;
826
827 switch (w & NFS4_SHARE_ACCESS_MASK) {
828 case NFS4_SHARE_ACCESS_READ:
829 case NFS4_SHARE_ACCESS_WRITE:
830 case NFS4_SHARE_ACCESS_BOTH:
831 break;
832 default:
833 return nfserr_bad_xdr;
834 }
835 w &= ~NFS4_SHARE_ACCESS_MASK;
836 if (!w)
837 return nfs_ok;
838 if (!argp->minorversion)
839 return nfserr_bad_xdr;
840 switch (w & NFS4_SHARE_WANT_MASK) {
841 case NFS4_SHARE_WANT_NO_PREFERENCE:
842 case NFS4_SHARE_WANT_READ_DELEG:
843 case NFS4_SHARE_WANT_WRITE_DELEG:
844 case NFS4_SHARE_WANT_ANY_DELEG:
845 case NFS4_SHARE_WANT_NO_DELEG:
846 case NFS4_SHARE_WANT_CANCEL:
847 break;
848 default:
849 return nfserr_bad_xdr;
850 }
851 w &= ~NFS4_SHARE_WANT_MASK;
852 if (!w)
853 return nfs_ok;
854
855 if (!deleg_when) /* open_downgrade */
856 return nfserr_inval;
857 switch (w) {
858 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL:
859 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED:
860 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL |
861 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED):
862 return nfs_ok;
863 }
864 xdr_error:
865 return nfserr_bad_xdr;
866 }
867
868 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
869 {
870 __be32 *p;
871
872 READ_BUF(4);
873 *x = be32_to_cpup(p++);
874 /* Note: unlinke access bits, deny bits may be zero. */
875 if (*x & ~NFS4_SHARE_DENY_BOTH)
876 return nfserr_bad_xdr;
877 return nfs_ok;
878 xdr_error:
879 return nfserr_bad_xdr;
880 }
881
882 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o)
883 {
884 __be32 *p;
885
886 READ_BUF(4);
887 o->len = be32_to_cpup(p++);
888
889 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT)
890 return nfserr_bad_xdr;
891
892 READ_BUF(o->len);
893 SAVEMEM(o->data, o->len);
894 return nfs_ok;
895 xdr_error:
896 return nfserr_bad_xdr;
897 }
898
899 static __be32
900 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
901 {
902 DECODE_HEAD;
903 u32 dummy;
904
905 memset(open->op_bmval, 0, sizeof(open->op_bmval));
906 open->op_iattr.ia_valid = 0;
907 open->op_openowner = NULL;
908
909 open->op_xdr_error = 0;
910 /* seqid, share_access, share_deny, clientid, ownerlen */
911 READ_BUF(4);
912 open->op_seqid = be32_to_cpup(p++);
913 /* decode, yet ignore deleg_when until supported */
914 status = nfsd4_decode_share_access(argp, &open->op_share_access,
915 &open->op_deleg_want, &dummy);
916 if (status)
917 goto xdr_error;
918 status = nfsd4_decode_share_deny(argp, &open->op_share_deny);
919 if (status)
920 goto xdr_error;
921 READ_BUF(sizeof(clientid_t));
922 COPYMEM(&open->op_clientid, sizeof(clientid_t));
923 status = nfsd4_decode_opaque(argp, &open->op_owner);
924 if (status)
925 goto xdr_error;
926 READ_BUF(4);
927 open->op_create = be32_to_cpup(p++);
928 switch (open->op_create) {
929 case NFS4_OPEN_NOCREATE:
930 break;
931 case NFS4_OPEN_CREATE:
932 READ_BUF(4);
933 open->op_createmode = be32_to_cpup(p++);
934 switch (open->op_createmode) {
935 case NFS4_CREATE_UNCHECKED:
936 case NFS4_CREATE_GUARDED:
937 status = nfsd4_decode_fattr(argp, open->op_bmval,
938 &open->op_iattr, &open->op_acl, &open->op_label,
939 &open->op_umask);
940 if (status)
941 goto out;
942 break;
943 case NFS4_CREATE_EXCLUSIVE:
944 READ_BUF(NFS4_VERIFIER_SIZE);
945 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
946 break;
947 case NFS4_CREATE_EXCLUSIVE4_1:
948 if (argp->minorversion < 1)
949 goto xdr_error;
950 READ_BUF(NFS4_VERIFIER_SIZE);
951 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
952 status = nfsd4_decode_fattr(argp, open->op_bmval,
953 &open->op_iattr, &open->op_acl, &open->op_label,
954 &open->op_umask);
955 if (status)
956 goto out;
957 break;
958 default:
959 goto xdr_error;
960 }
961 break;
962 default:
963 goto xdr_error;
964 }
965
966 /* open_claim */
967 READ_BUF(4);
968 open->op_claim_type = be32_to_cpup(p++);
969 switch (open->op_claim_type) {
970 case NFS4_OPEN_CLAIM_NULL:
971 case NFS4_OPEN_CLAIM_DELEGATE_PREV:
972 READ_BUF(4);
973 open->op_fname.len = be32_to_cpup(p++);
974 READ_BUF(open->op_fname.len);
975 SAVEMEM(open->op_fname.data, open->op_fname.len);
976 if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
977 return status;
978 break;
979 case NFS4_OPEN_CLAIM_PREVIOUS:
980 READ_BUF(4);
981 open->op_delegate_type = be32_to_cpup(p++);
982 break;
983 case NFS4_OPEN_CLAIM_DELEGATE_CUR:
984 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
985 if (status)
986 return status;
987 READ_BUF(4);
988 open->op_fname.len = be32_to_cpup(p++);
989 READ_BUF(open->op_fname.len);
990 SAVEMEM(open->op_fname.data, open->op_fname.len);
991 if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
992 return status;
993 break;
994 case NFS4_OPEN_CLAIM_FH:
995 case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
996 if (argp->minorversion < 1)
997 goto xdr_error;
998 /* void */
999 break;
1000 case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
1001 if (argp->minorversion < 1)
1002 goto xdr_error;
1003 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
1004 if (status)
1005 return status;
1006 break;
1007 default:
1008 goto xdr_error;
1009 }
1010
1011 DECODE_TAIL;
1012 }
1013
1014 static __be32
1015 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf)
1016 {
1017 DECODE_HEAD;
1018
1019 if (argp->minorversion >= 1)
1020 return nfserr_notsupp;
1021
1022 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid);
1023 if (status)
1024 return status;
1025 READ_BUF(4);
1026 open_conf->oc_seqid = be32_to_cpup(p++);
1027
1028 DECODE_TAIL;
1029 }
1030
1031 static __be32
1032 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down)
1033 {
1034 DECODE_HEAD;
1035
1036 status = nfsd4_decode_stateid(argp, &open_down->od_stateid);
1037 if (status)
1038 return status;
1039 READ_BUF(4);
1040 open_down->od_seqid = be32_to_cpup(p++);
1041 status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
1042 &open_down->od_deleg_want, NULL);
1043 if (status)
1044 return status;
1045 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny);
1046 if (status)
1047 return status;
1048 DECODE_TAIL;
1049 }
1050
1051 static __be32
1052 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
1053 {
1054 DECODE_HEAD;
1055
1056 READ_BUF(4);
1057 putfh->pf_fhlen = be32_to_cpup(p++);
1058 if (putfh->pf_fhlen > NFS4_FHSIZE)
1059 goto xdr_error;
1060 READ_BUF(putfh->pf_fhlen);
1061 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen);
1062
1063 DECODE_TAIL;
1064 }
1065
1066 static __be32
1067 nfsd4_decode_putpubfh(struct nfsd4_compoundargs *argp, void *p)
1068 {
1069 if (argp->minorversion == 0)
1070 return nfs_ok;
1071 return nfserr_notsupp;
1072 }
1073
1074 static __be32
1075 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
1076 {
1077 DECODE_HEAD;
1078
1079 status = nfsd4_decode_stateid(argp, &read->rd_stateid);
1080 if (status)
1081 return status;
1082 READ_BUF(12);
1083 p = xdr_decode_hyper(p, &read->rd_offset);
1084 read->rd_length = be32_to_cpup(p++);
1085
1086 DECODE_TAIL;
1087 }
1088
1089 static __be32
1090 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir)
1091 {
1092 DECODE_HEAD;
1093
1094 READ_BUF(24);
1095 p = xdr_decode_hyper(p, &readdir->rd_cookie);
1096 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data));
1097 readdir->rd_dircount = be32_to_cpup(p++);
1098 readdir->rd_maxcount = be32_to_cpup(p++);
1099 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval)))
1100 goto out;
1101
1102 DECODE_TAIL;
1103 }
1104
1105 static __be32
1106 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove)
1107 {
1108 DECODE_HEAD;
1109
1110 READ_BUF(4);
1111 remove->rm_namelen = be32_to_cpup(p++);
1112 READ_BUF(remove->rm_namelen);
1113 SAVEMEM(remove->rm_name, remove->rm_namelen);
1114 if ((status = check_filename(remove->rm_name, remove->rm_namelen)))
1115 return status;
1116
1117 DECODE_TAIL;
1118 }
1119
1120 static __be32
1121 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename)
1122 {
1123 DECODE_HEAD;
1124
1125 READ_BUF(4);
1126 rename->rn_snamelen = be32_to_cpup(p++);
1127 READ_BUF(rename->rn_snamelen);
1128 SAVEMEM(rename->rn_sname, rename->rn_snamelen);
1129 READ_BUF(4);
1130 rename->rn_tnamelen = be32_to_cpup(p++);
1131 READ_BUF(rename->rn_tnamelen);
1132 SAVEMEM(rename->rn_tname, rename->rn_tnamelen);
1133 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen)))
1134 return status;
1135 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen)))
1136 return status;
1137
1138 DECODE_TAIL;
1139 }
1140
1141 static __be32
1142 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid)
1143 {
1144 DECODE_HEAD;
1145
1146 if (argp->minorversion >= 1)
1147 return nfserr_notsupp;
1148
1149 READ_BUF(sizeof(clientid_t));
1150 COPYMEM(clientid, sizeof(clientid_t));
1151
1152 DECODE_TAIL;
1153 }
1154
1155 static __be32
1156 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
1157 struct nfsd4_secinfo *secinfo)
1158 {
1159 DECODE_HEAD;
1160
1161 READ_BUF(4);
1162 secinfo->si_namelen = be32_to_cpup(p++);
1163 READ_BUF(secinfo->si_namelen);
1164 SAVEMEM(secinfo->si_name, secinfo->si_namelen);
1165 status = check_filename(secinfo->si_name, secinfo->si_namelen);
1166 if (status)
1167 return status;
1168 DECODE_TAIL;
1169 }
1170
1171 static __be32
1172 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
1173 struct nfsd4_secinfo_no_name *sin)
1174 {
1175 DECODE_HEAD;
1176
1177 READ_BUF(4);
1178 sin->sin_style = be32_to_cpup(p++);
1179 DECODE_TAIL;
1180 }
1181
1182 static __be32
1183 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr)
1184 {
1185 __be32 status;
1186
1187 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid);
1188 if (status)
1189 return status;
1190 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr,
1191 &setattr->sa_acl, &setattr->sa_label, NULL);
1192 }
1193
1194 static __be32
1195 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid)
1196 {
1197 DECODE_HEAD;
1198
1199 if (argp->minorversion >= 1)
1200 return nfserr_notsupp;
1201
1202 READ_BUF(NFS4_VERIFIER_SIZE);
1203 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE);
1204
1205 status = nfsd4_decode_opaque(argp, &setclientid->se_name);
1206 if (status)
1207 return nfserr_bad_xdr;
1208 READ_BUF(8);
1209 setclientid->se_callback_prog = be32_to_cpup(p++);
1210 setclientid->se_callback_netid_len = be32_to_cpup(p++);
1211 READ_BUF(setclientid->se_callback_netid_len);
1212 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len);
1213 READ_BUF(4);
1214 setclientid->se_callback_addr_len = be32_to_cpup(p++);
1215
1216 READ_BUF(setclientid->se_callback_addr_len);
1217 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len);
1218 READ_BUF(4);
1219 setclientid->se_callback_ident = be32_to_cpup(p++);
1220
1221 DECODE_TAIL;
1222 }
1223
1224 static __be32
1225 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c)
1226 {
1227 DECODE_HEAD;
1228
1229 if (argp->minorversion >= 1)
1230 return nfserr_notsupp;
1231
1232 READ_BUF(8 + NFS4_VERIFIER_SIZE);
1233 COPYMEM(&scd_c->sc_clientid, 8);
1234 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE);
1235
1236 DECODE_TAIL;
1237 }
1238
1239 /* Also used for NVERIFY */
1240 static __be32
1241 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify)
1242 {
1243 DECODE_HEAD;
1244
1245 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval)))
1246 goto out;
1247
1248 /* For convenience's sake, we compare raw xdr'd attributes in
1249 * nfsd4_proc_verify */
1250
1251 READ_BUF(4);
1252 verify->ve_attrlen = be32_to_cpup(p++);
1253 READ_BUF(verify->ve_attrlen);
1254 SAVEMEM(verify->ve_attrval, verify->ve_attrlen);
1255
1256 DECODE_TAIL;
1257 }
1258
1259 static __be32
1260 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
1261 {
1262 int avail;
1263 int len;
1264 DECODE_HEAD;
1265
1266 status = nfsd4_decode_stateid(argp, &write->wr_stateid);
1267 if (status)
1268 return status;
1269 READ_BUF(16);
1270 p = xdr_decode_hyper(p, &write->wr_offset);
1271 write->wr_stable_how = be32_to_cpup(p++);
1272 if (write->wr_stable_how > NFS_FILE_SYNC)
1273 goto xdr_error;
1274 write->wr_buflen = be32_to_cpup(p++);
1275
1276 /* Sorry .. no magic macros for this.. *
1277 * READ_BUF(write->wr_buflen);
1278 * SAVEMEM(write->wr_buf, write->wr_buflen);
1279 */
1280 avail = (char*)argp->end - (char*)argp->p;
1281 if (avail + argp->pagelen < write->wr_buflen) {
1282 dprintk("NFSD: xdr error (%s:%d)\n",
1283 __FILE__, __LINE__);
1284 goto xdr_error;
1285 }
1286 write->wr_head.iov_base = p;
1287 write->wr_head.iov_len = avail;
1288 write->wr_pagelist = argp->pagelist;
1289
1290 len = XDR_QUADLEN(write->wr_buflen) << 2;
1291 if (len >= avail) {
1292 int pages;
1293
1294 len -= avail;
1295
1296 pages = len >> PAGE_SHIFT;
1297 argp->pagelist += pages;
1298 argp->pagelen -= pages * PAGE_SIZE;
1299 len -= pages * PAGE_SIZE;
1300
1301 next_decode_page(argp);
1302 }
1303 argp->p += XDR_QUADLEN(len);
1304
1305 DECODE_TAIL;
1306 }
1307
1308 static __be32
1309 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner)
1310 {
1311 DECODE_HEAD;
1312
1313 if (argp->minorversion >= 1)
1314 return nfserr_notsupp;
1315
1316 READ_BUF(12);
1317 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t));
1318 rlockowner->rl_owner.len = be32_to_cpup(p++);
1319 READ_BUF(rlockowner->rl_owner.len);
1320 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len);
1321
1322 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1323 return nfserr_inval;
1324 DECODE_TAIL;
1325 }
1326
1327 static __be32
1328 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1329 struct nfsd4_exchange_id *exid)
1330 {
1331 int dummy, tmp;
1332 DECODE_HEAD;
1333
1334 READ_BUF(NFS4_VERIFIER_SIZE);
1335 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE);
1336
1337 status = nfsd4_decode_opaque(argp, &exid->clname);
1338 if (status)
1339 return nfserr_bad_xdr;
1340
1341 READ_BUF(4);
1342 exid->flags = be32_to_cpup(p++);
1343
1344 /* Ignore state_protect4_a */
1345 READ_BUF(4);
1346 exid->spa_how = be32_to_cpup(p++);
1347 switch (exid->spa_how) {
1348 case SP4_NONE:
1349 break;
1350 case SP4_MACH_CRED:
1351 /* spo_must_enforce */
1352 status = nfsd4_decode_bitmap(argp,
1353 exid->spo_must_enforce);
1354 if (status)
1355 goto out;
1356 /* spo_must_allow */
1357 status = nfsd4_decode_bitmap(argp, exid->spo_must_allow);
1358 if (status)
1359 goto out;
1360 break;
1361 case SP4_SSV:
1362 /* ssp_ops */
1363 READ_BUF(4);
1364 dummy = be32_to_cpup(p++);
1365 READ_BUF(dummy * 4);
1366 p += dummy;
1367
1368 READ_BUF(4);
1369 dummy = be32_to_cpup(p++);
1370 READ_BUF(dummy * 4);
1371 p += dummy;
1372
1373 /* ssp_hash_algs<> */
1374 READ_BUF(4);
1375 tmp = be32_to_cpup(p++);
1376 while (tmp--) {
1377 READ_BUF(4);
1378 dummy = be32_to_cpup(p++);
1379 READ_BUF(dummy);
1380 p += XDR_QUADLEN(dummy);
1381 }
1382
1383 /* ssp_encr_algs<> */
1384 READ_BUF(4);
1385 tmp = be32_to_cpup(p++);
1386 while (tmp--) {
1387 READ_BUF(4);
1388 dummy = be32_to_cpup(p++);
1389 READ_BUF(dummy);
1390 p += XDR_QUADLEN(dummy);
1391 }
1392
1393 /* ignore ssp_window and ssp_num_gss_handles: */
1394 READ_BUF(8);
1395 break;
1396 default:
1397 goto xdr_error;
1398 }
1399
1400 /* Ignore Implementation ID */
1401 READ_BUF(4); /* nfs_impl_id4 array length */
1402 dummy = be32_to_cpup(p++);
1403
1404 if (dummy > 1)
1405 goto xdr_error;
1406
1407 if (dummy == 1) {
1408 /* nii_domain */
1409 READ_BUF(4);
1410 dummy = be32_to_cpup(p++);
1411 READ_BUF(dummy);
1412 p += XDR_QUADLEN(dummy);
1413
1414 /* nii_name */
1415 READ_BUF(4);
1416 dummy = be32_to_cpup(p++);
1417 READ_BUF(dummy);
1418 p += XDR_QUADLEN(dummy);
1419
1420 /* nii_date */
1421 READ_BUF(12);
1422 p += 3;
1423 }
1424 DECODE_TAIL;
1425 }
1426
1427 static __be32
1428 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1429 struct nfsd4_create_session *sess)
1430 {
1431 DECODE_HEAD;
1432 u32 dummy;
1433
1434 READ_BUF(16);
1435 COPYMEM(&sess->clientid, 8);
1436 sess->seqid = be32_to_cpup(p++);
1437 sess->flags = be32_to_cpup(p++);
1438
1439 /* Fore channel attrs */
1440 READ_BUF(28);
1441 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */
1442 sess->fore_channel.maxreq_sz = be32_to_cpup(p++);
1443 sess->fore_channel.maxresp_sz = be32_to_cpup(p++);
1444 sess->fore_channel.maxresp_cached = be32_to_cpup(p++);
1445 sess->fore_channel.maxops = be32_to_cpup(p++);
1446 sess->fore_channel.maxreqs = be32_to_cpup(p++);
1447 sess->fore_channel.nr_rdma_attrs = be32_to_cpup(p++);
1448 if (sess->fore_channel.nr_rdma_attrs == 1) {
1449 READ_BUF(4);
1450 sess->fore_channel.rdma_attrs = be32_to_cpup(p++);
1451 } else if (sess->fore_channel.nr_rdma_attrs > 1) {
1452 dprintk("Too many fore channel attr bitmaps!\n");
1453 goto xdr_error;
1454 }
1455
1456 /* Back channel attrs */
1457 READ_BUF(28);
1458 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */
1459 sess->back_channel.maxreq_sz = be32_to_cpup(p++);
1460 sess->back_channel.maxresp_sz = be32_to_cpup(p++);
1461 sess->back_channel.maxresp_cached = be32_to_cpup(p++);
1462 sess->back_channel.maxops = be32_to_cpup(p++);
1463 sess->back_channel.maxreqs = be32_to_cpup(p++);
1464 sess->back_channel.nr_rdma_attrs = be32_to_cpup(p++);
1465 if (sess->back_channel.nr_rdma_attrs == 1) {
1466 READ_BUF(4);
1467 sess->back_channel.rdma_attrs = be32_to_cpup(p++);
1468 } else if (sess->back_channel.nr_rdma_attrs > 1) {
1469 dprintk("Too many back channel attr bitmaps!\n");
1470 goto xdr_error;
1471 }
1472
1473 READ_BUF(4);
1474 sess->callback_prog = be32_to_cpup(p++);
1475 nfsd4_decode_cb_sec(argp, &sess->cb_sec);
1476 DECODE_TAIL;
1477 }
1478
1479 static __be32
1480 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1481 struct nfsd4_destroy_session *destroy_session)
1482 {
1483 DECODE_HEAD;
1484 READ_BUF(NFS4_MAX_SESSIONID_LEN);
1485 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1486
1487 DECODE_TAIL;
1488 }
1489
1490 static __be32
1491 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
1492 struct nfsd4_free_stateid *free_stateid)
1493 {
1494 DECODE_HEAD;
1495
1496 READ_BUF(sizeof(stateid_t));
1497 free_stateid->fr_stateid.si_generation = be32_to_cpup(p++);
1498 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t));
1499
1500 DECODE_TAIL;
1501 }
1502
1503 static __be32
1504 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1505 struct nfsd4_sequence *seq)
1506 {
1507 DECODE_HEAD;
1508
1509 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16);
1510 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1511 seq->seqid = be32_to_cpup(p++);
1512 seq->slotid = be32_to_cpup(p++);
1513 seq->maxslots = be32_to_cpup(p++);
1514 seq->cachethis = be32_to_cpup(p++);
1515
1516 DECODE_TAIL;
1517 }
1518
1519 static __be32
1520 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid)
1521 {
1522 int i;
1523 __be32 *p, status;
1524 struct nfsd4_test_stateid_id *stateid;
1525
1526 READ_BUF(4);
1527 test_stateid->ts_num_ids = ntohl(*p++);
1528
1529 INIT_LIST_HEAD(&test_stateid->ts_stateid_list);
1530
1531 for (i = 0; i < test_stateid->ts_num_ids; i++) {
1532 stateid = svcxdr_tmpalloc(argp, sizeof(*stateid));
1533 if (!stateid) {
1534 status = nfserrno(-ENOMEM);
1535 goto out;
1536 }
1537
1538 INIT_LIST_HEAD(&stateid->ts_id_list);
1539 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list);
1540
1541 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid);
1542 if (status)
1543 goto out;
1544 }
1545
1546 status = 0;
1547 out:
1548 return status;
1549 xdr_error:
1550 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__);
1551 status = nfserr_bad_xdr;
1552 goto out;
1553 }
1554
1555 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc)
1556 {
1557 DECODE_HEAD;
1558
1559 READ_BUF(8);
1560 COPYMEM(&dc->clientid, 8);
1561
1562 DECODE_TAIL;
1563 }
1564
1565 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc)
1566 {
1567 DECODE_HEAD;
1568
1569 READ_BUF(4);
1570 rc->rca_one_fs = be32_to_cpup(p++);
1571
1572 DECODE_TAIL;
1573 }
1574
1575 #ifdef CONFIG_NFSD_PNFS
1576 static __be32
1577 nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs *argp,
1578 struct nfsd4_getdeviceinfo *gdev)
1579 {
1580 DECODE_HEAD;
1581 u32 num, i;
1582
1583 READ_BUF(sizeof(struct nfsd4_deviceid) + 3 * 4);
1584 COPYMEM(&gdev->gd_devid, sizeof(struct nfsd4_deviceid));
1585 gdev->gd_layout_type = be32_to_cpup(p++);
1586 gdev->gd_maxcount = be32_to_cpup(p++);
1587 num = be32_to_cpup(p++);
1588 if (num) {
1589 if (num > 1000)
1590 goto xdr_error;
1591 READ_BUF(4 * num);
1592 gdev->gd_notify_types = be32_to_cpup(p++);
1593 for (i = 1; i < num; i++) {
1594 if (be32_to_cpup(p++)) {
1595 status = nfserr_inval;
1596 goto out;
1597 }
1598 }
1599 }
1600 DECODE_TAIL;
1601 }
1602
1603 static __be32
1604 nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp,
1605 struct nfsd4_layoutget *lgp)
1606 {
1607 DECODE_HEAD;
1608
1609 READ_BUF(36);
1610 lgp->lg_signal = be32_to_cpup(p++);
1611 lgp->lg_layout_type = be32_to_cpup(p++);
1612 lgp->lg_seg.iomode = be32_to_cpup(p++);
1613 p = xdr_decode_hyper(p, &lgp->lg_seg.offset);
1614 p = xdr_decode_hyper(p, &lgp->lg_seg.length);
1615 p = xdr_decode_hyper(p, &lgp->lg_minlength);
1616
1617 status = nfsd4_decode_stateid(argp, &lgp->lg_sid);
1618 if (status)
1619 return status;
1620
1621 READ_BUF(4);
1622 lgp->lg_maxcount = be32_to_cpup(p++);
1623
1624 DECODE_TAIL;
1625 }
1626
1627 static __be32
1628 nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp,
1629 struct nfsd4_layoutcommit *lcp)
1630 {
1631 DECODE_HEAD;
1632 u32 timechange;
1633
1634 READ_BUF(20);
1635 p = xdr_decode_hyper(p, &lcp->lc_seg.offset);
1636 p = xdr_decode_hyper(p, &lcp->lc_seg.length);
1637 lcp->lc_reclaim = be32_to_cpup(p++);
1638
1639 status = nfsd4_decode_stateid(argp, &lcp->lc_sid);
1640 if (status)
1641 return status;
1642
1643 READ_BUF(4);
1644 lcp->lc_newoffset = be32_to_cpup(p++);
1645 if (lcp->lc_newoffset) {
1646 READ_BUF(8);
1647 p = xdr_decode_hyper(p, &lcp->lc_last_wr);
1648 } else
1649 lcp->lc_last_wr = 0;
1650 READ_BUF(4);
1651 timechange = be32_to_cpup(p++);
1652 if (timechange) {
1653 status = nfsd4_decode_time(argp, &lcp->lc_mtime);
1654 if (status)
1655 return status;
1656 } else {
1657 lcp->lc_mtime.tv_nsec = UTIME_NOW;
1658 }
1659 READ_BUF(8);
1660 lcp->lc_layout_type = be32_to_cpup(p++);
1661
1662 /*
1663 * Save the layout update in XDR format and let the layout driver deal
1664 * with it later.
1665 */
1666 lcp->lc_up_len = be32_to_cpup(p++);
1667 if (lcp->lc_up_len > 0) {
1668 READ_BUF(lcp->lc_up_len);
1669 READMEM(lcp->lc_up_layout, lcp->lc_up_len);
1670 }
1671
1672 DECODE_TAIL;
1673 }
1674
1675 static __be32
1676 nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp,
1677 struct nfsd4_layoutreturn *lrp)
1678 {
1679 DECODE_HEAD;
1680
1681 READ_BUF(16);
1682 lrp->lr_reclaim = be32_to_cpup(p++);
1683 lrp->lr_layout_type = be32_to_cpup(p++);
1684 lrp->lr_seg.iomode = be32_to_cpup(p++);
1685 lrp->lr_return_type = be32_to_cpup(p++);
1686 if (lrp->lr_return_type == RETURN_FILE) {
1687 READ_BUF(16);
1688 p = xdr_decode_hyper(p, &lrp->lr_seg.offset);
1689 p = xdr_decode_hyper(p, &lrp->lr_seg.length);
1690
1691 status = nfsd4_decode_stateid(argp, &lrp->lr_sid);
1692 if (status)
1693 return status;
1694
1695 READ_BUF(4);
1696 lrp->lrf_body_len = be32_to_cpup(p++);
1697 if (lrp->lrf_body_len > 0) {
1698 READ_BUF(lrp->lrf_body_len);
1699 READMEM(lrp->lrf_body, lrp->lrf_body_len);
1700 }
1701 } else {
1702 lrp->lr_seg.offset = 0;
1703 lrp->lr_seg.length = NFS4_MAX_UINT64;
1704 }
1705
1706 DECODE_TAIL;
1707 }
1708 #endif /* CONFIG_NFSD_PNFS */
1709
1710 static __be32
1711 nfsd4_decode_fallocate(struct nfsd4_compoundargs *argp,
1712 struct nfsd4_fallocate *fallocate)
1713 {
1714 DECODE_HEAD;
1715
1716 status = nfsd4_decode_stateid(argp, &fallocate->falloc_stateid);
1717 if (status)
1718 return status;
1719
1720 READ_BUF(16);
1721 p = xdr_decode_hyper(p, &fallocate->falloc_offset);
1722 xdr_decode_hyper(p, &fallocate->falloc_length);
1723
1724 DECODE_TAIL;
1725 }
1726
1727 static __be32
1728 nfsd4_decode_clone(struct nfsd4_compoundargs *argp, struct nfsd4_clone *clone)
1729 {
1730 DECODE_HEAD;
1731
1732 status = nfsd4_decode_stateid(argp, &clone->cl_src_stateid);
1733 if (status)
1734 return status;
1735 status = nfsd4_decode_stateid(argp, &clone->cl_dst_stateid);
1736 if (status)
1737 return status;
1738
1739 READ_BUF(8 + 8 + 8);
1740 p = xdr_decode_hyper(p, &clone->cl_src_pos);
1741 p = xdr_decode_hyper(p, &clone->cl_dst_pos);
1742 p = xdr_decode_hyper(p, &clone->cl_count);
1743 DECODE_TAIL;
1744 }
1745
1746 static __be32
1747 nfsd4_decode_copy(struct nfsd4_compoundargs *argp, struct nfsd4_copy *copy)
1748 {
1749 DECODE_HEAD;
1750 unsigned int tmp;
1751
1752 status = nfsd4_decode_stateid(argp, &copy->cp_src_stateid);
1753 if (status)
1754 return status;
1755 status = nfsd4_decode_stateid(argp, &copy->cp_dst_stateid);
1756 if (status)
1757 return status;
1758
1759 READ_BUF(8 + 8 + 8 + 4 + 4 + 4);
1760 p = xdr_decode_hyper(p, &copy->cp_src_pos);
1761 p = xdr_decode_hyper(p, &copy->cp_dst_pos);
1762 p = xdr_decode_hyper(p, &copy->cp_count);
1763 p++; /* ca_consecutive: we always do consecutive copies */
1764 copy->cp_synchronous = be32_to_cpup(p++);
1765 tmp = be32_to_cpup(p); /* Source server list not supported */
1766
1767 DECODE_TAIL;
1768 }
1769
1770 static __be32
1771 nfsd4_decode_offload_status(struct nfsd4_compoundargs *argp,
1772 struct nfsd4_offload_status *os)
1773 {
1774 return nfsd4_decode_stateid(argp, &os->stateid);
1775 }
1776
1777 static __be32
1778 nfsd4_decode_seek(struct nfsd4_compoundargs *argp, struct nfsd4_seek *seek)
1779 {
1780 DECODE_HEAD;
1781
1782 status = nfsd4_decode_stateid(argp, &seek->seek_stateid);
1783 if (status)
1784 return status;
1785
1786 READ_BUF(8 + 4);
1787 p = xdr_decode_hyper(p, &seek->seek_offset);
1788 seek->seek_whence = be32_to_cpup(p);
1789
1790 DECODE_TAIL;
1791 }
1792
1793 static __be32
1794 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p)
1795 {
1796 return nfs_ok;
1797 }
1798
1799 static __be32
1800 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p)
1801 {
1802 return nfserr_notsupp;
1803 }
1804
1805 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *);
1806
1807 static const nfsd4_dec nfsd4_dec_ops[] = {
1808 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access,
1809 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close,
1810 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit,
1811 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create,
1812 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp,
1813 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn,
1814 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr,
1815 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop,
1816 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link,
1817 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock,
1818 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt,
1819 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku,
1820 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup,
1821 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop,
1822 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1823 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open,
1824 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp,
1825 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm,
1826 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade,
1827 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh,
1828 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_putpubfh,
1829 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop,
1830 [OP_READ] = (nfsd4_dec)nfsd4_decode_read,
1831 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir,
1832 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop,
1833 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove,
1834 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename,
1835 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew,
1836 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop,
1837 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop,
1838 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo,
1839 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr,
1840 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid,
1841 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm,
1842 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1843 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write,
1844 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner,
1845
1846 /* new operations for NFSv4.1 */
1847 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl,
1848 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session,
1849 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id,
1850 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session,
1851 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session,
1852 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid,
1853 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1854 #ifdef CONFIG_NFSD_PNFS
1855 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_getdeviceinfo,
1856 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
1857 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_layoutcommit,
1858 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_layoutget,
1859 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_layoutreturn,
1860 #else
1861 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp,
1862 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
1863 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp,
1864 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp,
1865 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp,
1866 #endif
1867 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name,
1868 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence,
1869 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp,
1870 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid,
1871 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1872 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid,
1873 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete,
1874
1875 /* new operations for NFSv4.2 */
1876 [OP_ALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate,
1877 [OP_COPY] = (nfsd4_dec)nfsd4_decode_copy,
1878 [OP_COPY_NOTIFY] = (nfsd4_dec)nfsd4_decode_notsupp,
1879 [OP_DEALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate,
1880 [OP_IO_ADVISE] = (nfsd4_dec)nfsd4_decode_notsupp,
1881 [OP_LAYOUTERROR] = (nfsd4_dec)nfsd4_decode_notsupp,
1882 [OP_LAYOUTSTATS] = (nfsd4_dec)nfsd4_decode_notsupp,
1883 [OP_OFFLOAD_CANCEL] = (nfsd4_dec)nfsd4_decode_offload_status,
1884 [OP_OFFLOAD_STATUS] = (nfsd4_dec)nfsd4_decode_offload_status,
1885 [OP_READ_PLUS] = (nfsd4_dec)nfsd4_decode_notsupp,
1886 [OP_SEEK] = (nfsd4_dec)nfsd4_decode_seek,
1887 [OP_WRITE_SAME] = (nfsd4_dec)nfsd4_decode_notsupp,
1888 [OP_CLONE] = (nfsd4_dec)nfsd4_decode_clone,
1889 };
1890
1891 static inline bool
1892 nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op)
1893 {
1894 if (op->opnum < FIRST_NFS4_OP)
1895 return false;
1896 else if (argp->minorversion == 0 && op->opnum > LAST_NFS40_OP)
1897 return false;
1898 else if (argp->minorversion == 1 && op->opnum > LAST_NFS41_OP)
1899 return false;
1900 else if (argp->minorversion == 2 && op->opnum > LAST_NFS42_OP)
1901 return false;
1902 return true;
1903 }
1904
1905 static __be32
1906 nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
1907 {
1908 DECODE_HEAD;
1909 struct nfsd4_op *op;
1910 bool cachethis = false;
1911 int auth_slack= argp->rqstp->rq_auth_slack;
1912 int max_reply = auth_slack + 8; /* opcnt, status */
1913 int readcount = 0;
1914 int readbytes = 0;
1915 int i;
1916
1917 READ_BUF(4);
1918 argp->taglen = be32_to_cpup(p++);
1919 READ_BUF(argp->taglen);
1920 SAVEMEM(argp->tag, argp->taglen);
1921 READ_BUF(8);
1922 argp->minorversion = be32_to_cpup(p++);
1923 argp->opcnt = be32_to_cpup(p++);
1924 max_reply += 4 + (XDR_QUADLEN(argp->taglen) << 2);
1925
1926 if (argp->taglen > NFSD4_MAX_TAGLEN)
1927 goto xdr_error;
1928 /*
1929 * NFS4ERR_RESOURCE is a more helpful error than GARBAGE_ARGS
1930 * here, so we return success at the xdr level so that
1931 * nfsd4_proc can handle this is an NFS-level error.
1932 */
1933 if (argp->opcnt > NFSD_MAX_OPS_PER_COMPOUND)
1934 return 0;
1935
1936 if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
1937 argp->ops = kzalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL);
1938 if (!argp->ops) {
1939 argp->ops = argp->iops;
1940 dprintk("nfsd: couldn't allocate room for COMPOUND\n");
1941 goto xdr_error;
1942 }
1943 }
1944
1945 if (argp->minorversion > NFSD_SUPPORTED_MINOR_VERSION)
1946 argp->opcnt = 0;
1947
1948 for (i = 0; i < argp->opcnt; i++) {
1949 op = &argp->ops[i];
1950 op->replay = NULL;
1951
1952 READ_BUF(4);
1953 op->opnum = be32_to_cpup(p++);
1954
1955 if (nfsd4_opnum_in_range(argp, op))
1956 op->status = nfsd4_dec_ops[op->opnum](argp, &op->u);
1957 else {
1958 op->opnum = OP_ILLEGAL;
1959 op->status = nfserr_op_illegal;
1960 }
1961 op->opdesc = OPDESC(op);
1962 /*
1963 * We'll try to cache the result in the DRC if any one
1964 * op in the compound wants to be cached:
1965 */
1966 cachethis |= nfsd4_cache_this_op(op);
1967
1968 if (op->opnum == OP_READ) {
1969 readcount++;
1970 readbytes += nfsd4_max_reply(argp->rqstp, op);
1971 } else
1972 max_reply += nfsd4_max_reply(argp->rqstp, op);
1973 /*
1974 * OP_LOCK and OP_LOCKT may return a conflicting lock.
1975 * (Special case because it will just skip encoding this
1976 * if it runs out of xdr buffer space, and it is the only
1977 * operation that behaves this way.)
1978 */
1979 if (op->opnum == OP_LOCK || op->opnum == OP_LOCKT)
1980 max_reply += NFS4_OPAQUE_LIMIT;
1981
1982 if (op->status) {
1983 argp->opcnt = i+1;
1984 break;
1985 }
1986 }
1987 /* Sessions make the DRC unnecessary: */
1988 if (argp->minorversion)
1989 cachethis = false;
1990 svc_reserve(argp->rqstp, max_reply + readbytes);
1991 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
1992
1993 if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack)
1994 clear_bit(RQ_SPLICE_OK, &argp->rqstp->rq_flags);
1995
1996 DECODE_TAIL;
1997 }
1998
1999 static __be32 *encode_change(__be32 *p, struct kstat *stat, struct inode *inode,
2000 struct svc_export *exp)
2001 {
2002 if (exp->ex_flags & NFSEXP_V4ROOT) {
2003 *p++ = cpu_to_be32(convert_to_wallclock(exp->cd->flush_time));
2004 *p++ = 0;
2005 } else if (IS_I_VERSION(inode)) {
2006 p = xdr_encode_hyper(p, nfsd4_change_attribute(stat, inode));
2007 } else {
2008 *p++ = cpu_to_be32(stat->ctime.tv_sec);
2009 *p++ = cpu_to_be32(stat->ctime.tv_nsec);
2010 }
2011 return p;
2012 }
2013
2014 /*
2015 * ctime (in NFSv4, time_metadata) is not writeable, and the client
2016 * doesn't really care what resolution could theoretically be stored by
2017 * the filesystem.
2018 *
2019 * The client cares how close together changes can be while still
2020 * guaranteeing ctime changes. For most filesystems (which have
2021 * timestamps with nanosecond fields) that is limited by the resolution
2022 * of the time returned from current_time() (which I'm assuming to be
2023 * 1/HZ).
2024 */
2025 static __be32 *encode_time_delta(__be32 *p, struct inode *inode)
2026 {
2027 struct timespec ts;
2028 u32 ns;
2029
2030 ns = max_t(u32, NSEC_PER_SEC/HZ, inode->i_sb->s_time_gran);
2031 ts = ns_to_timespec(ns);
2032
2033 p = xdr_encode_hyper(p, ts.tv_sec);
2034 *p++ = cpu_to_be32(ts.tv_nsec);
2035
2036 return p;
2037 }
2038
2039 static __be32 *encode_cinfo(__be32 *p, struct nfsd4_change_info *c)
2040 {
2041 *p++ = cpu_to_be32(c->atomic);
2042 if (c->change_supported) {
2043 p = xdr_encode_hyper(p, c->before_change);
2044 p = xdr_encode_hyper(p, c->after_change);
2045 } else {
2046 *p++ = cpu_to_be32(c->before_ctime_sec);
2047 *p++ = cpu_to_be32(c->before_ctime_nsec);
2048 *p++ = cpu_to_be32(c->after_ctime_sec);
2049 *p++ = cpu_to_be32(c->after_ctime_nsec);
2050 }
2051 return p;
2052 }
2053
2054 /* Encode as an array of strings the string given with components
2055 * separated @sep, escaped with esc_enter and esc_exit.
2056 */
2057 static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep,
2058 char *components, char esc_enter,
2059 char esc_exit)
2060 {
2061 __be32 *p;
2062 __be32 pathlen;
2063 int pathlen_offset;
2064 int strlen, count=0;
2065 char *str, *end, *next;
2066
2067 dprintk("nfsd4_encode_components(%s)\n", components);
2068
2069 pathlen_offset = xdr->buf->len;
2070 p = xdr_reserve_space(xdr, 4);
2071 if (!p)
2072 return nfserr_resource;
2073 p++; /* We will fill this in with @count later */
2074
2075 end = str = components;
2076 while (*end) {
2077 bool found_esc = false;
2078
2079 /* try to parse as esc_start, ..., esc_end, sep */
2080 if (*str == esc_enter) {
2081 for (; *end && (*end != esc_exit); end++)
2082 /* find esc_exit or end of string */;
2083 next = end + 1;
2084 if (*end && (!*next || *next == sep)) {
2085 str++;
2086 found_esc = true;
2087 }
2088 }
2089
2090 if (!found_esc)
2091 for (; *end && (*end != sep); end++)
2092 /* find sep or end of string */;
2093
2094 strlen = end - str;
2095 if (strlen) {
2096 p = xdr_reserve_space(xdr, strlen + 4);
2097 if (!p)
2098 return nfserr_resource;
2099 p = xdr_encode_opaque(p, str, strlen);
2100 count++;
2101 }
2102 else
2103 end++;
2104 if (found_esc)
2105 end = next;
2106
2107 str = end;
2108 }
2109 pathlen = htonl(count);
2110 write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4);
2111 return 0;
2112 }
2113
2114 /* Encode as an array of strings the string given with components
2115 * separated @sep.
2116 */
2117 static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep,
2118 char *components)
2119 {
2120 return nfsd4_encode_components_esc(xdr, sep, components, 0, 0);
2121 }
2122
2123 /*
2124 * encode a location element of a fs_locations structure
2125 */
2126 static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr,
2127 struct nfsd4_fs_location *location)
2128 {
2129 __be32 status;
2130
2131 status = nfsd4_encode_components_esc(xdr, ':', location->hosts,
2132 '[', ']');
2133 if (status)
2134 return status;
2135 status = nfsd4_encode_components(xdr, '/', location->path);
2136 if (status)
2137 return status;
2138 return 0;
2139 }
2140
2141 /*
2142 * Encode a path in RFC3530 'pathname4' format
2143 */
2144 static __be32 nfsd4_encode_path(struct xdr_stream *xdr,
2145 const struct path *root,
2146 const struct path *path)
2147 {
2148 struct path cur = *path;
2149 __be32 *p;
2150 struct dentry **components = NULL;
2151 unsigned int ncomponents = 0;
2152 __be32 err = nfserr_jukebox;
2153
2154 dprintk("nfsd4_encode_components(");
2155
2156 path_get(&cur);
2157 /* First walk the path up to the nfsd root, and store the
2158 * dentries/path components in an array.
2159 */
2160 for (;;) {
2161 if (path_equal(&cur, root))
2162 break;
2163 if (cur.dentry == cur.mnt->mnt_root) {
2164 if (follow_up(&cur))
2165 continue;
2166 goto out_free;
2167 }
2168 if ((ncomponents & 15) == 0) {
2169 struct dentry **new;
2170 new = krealloc(components,
2171 sizeof(*new) * (ncomponents + 16),
2172 GFP_KERNEL);
2173 if (!new)
2174 goto out_free;
2175 components = new;
2176 }
2177 components[ncomponents++] = cur.dentry;
2178 cur.dentry = dget_parent(cur.dentry);
2179 }
2180 err = nfserr_resource;
2181 p = xdr_reserve_space(xdr, 4);
2182 if (!p)
2183 goto out_free;
2184 *p++ = cpu_to_be32(ncomponents);
2185
2186 while (ncomponents) {
2187 struct dentry *dentry = components[ncomponents - 1];
2188 unsigned int len;
2189
2190 spin_lock(&dentry->d_lock);
2191 len = dentry->d_name.len;
2192 p = xdr_reserve_space(xdr, len + 4);
2193 if (!p) {
2194 spin_unlock(&dentry->d_lock);
2195 goto out_free;
2196 }
2197 p = xdr_encode_opaque(p, dentry->d_name.name, len);
2198 dprintk("/%pd", dentry);
2199 spin_unlock(&dentry->d_lock);
2200 dput(dentry);
2201 ncomponents--;
2202 }
2203
2204 err = 0;
2205 out_free:
2206 dprintk(")\n");
2207 while (ncomponents)
2208 dput(components[--ncomponents]);
2209 kfree(components);
2210 path_put(&cur);
2211 return err;
2212 }
2213
2214 static __be32 nfsd4_encode_fsloc_fsroot(struct xdr_stream *xdr,
2215 struct svc_rqst *rqstp, const struct path *path)
2216 {
2217 struct svc_export *exp_ps;
2218 __be32 res;
2219
2220 exp_ps = rqst_find_fsidzero_export(rqstp);
2221 if (IS_ERR(exp_ps))
2222 return nfserrno(PTR_ERR(exp_ps));
2223 res = nfsd4_encode_path(xdr, &exp_ps->ex_path, path);
2224 exp_put(exp_ps);
2225 return res;
2226 }
2227
2228 /*
2229 * encode a fs_locations structure
2230 */
2231 static __be32 nfsd4_encode_fs_locations(struct xdr_stream *xdr,
2232 struct svc_rqst *rqstp, struct svc_export *exp)
2233 {
2234 __be32 status;
2235 int i;
2236 __be32 *p;
2237 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
2238
2239 status = nfsd4_encode_fsloc_fsroot(xdr, rqstp, &exp->ex_path);
2240 if (status)
2241 return status;
2242 p = xdr_reserve_space(xdr, 4);
2243 if (!p)
2244 return nfserr_resource;
2245 *p++ = cpu_to_be32(fslocs->locations_count);
2246 for (i=0; i<fslocs->locations_count; i++) {
2247 status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]);
2248 if (status)
2249 return status;
2250 }
2251 return 0;
2252 }
2253
2254 static u32 nfs4_file_type(umode_t mode)
2255 {
2256 switch (mode & S_IFMT) {
2257 case S_IFIFO: return NF4FIFO;
2258 case S_IFCHR: return NF4CHR;
2259 case S_IFDIR: return NF4DIR;
2260 case S_IFBLK: return NF4BLK;
2261 case S_IFLNK: return NF4LNK;
2262 case S_IFREG: return NF4REG;
2263 case S_IFSOCK: return NF4SOCK;
2264 default: return NF4BAD;
2265 };
2266 }
2267
2268 static inline __be32
2269 nfsd4_encode_aclname(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2270 struct nfs4_ace *ace)
2271 {
2272 if (ace->whotype != NFS4_ACL_WHO_NAMED)
2273 return nfs4_acl_write_who(xdr, ace->whotype);
2274 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
2275 return nfsd4_encode_group(xdr, rqstp, ace->who_gid);
2276 else
2277 return nfsd4_encode_user(xdr, rqstp, ace->who_uid);
2278 }
2279
2280 static inline __be32
2281 nfsd4_encode_layout_types(struct xdr_stream *xdr, u32 layout_types)
2282 {
2283 __be32 *p;
2284 unsigned long i = hweight_long(layout_types);
2285
2286 p = xdr_reserve_space(xdr, 4 + 4 * i);
2287 if (!p)
2288 return nfserr_resource;
2289
2290 *p++ = cpu_to_be32(i);
2291
2292 for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i)
2293 if (layout_types & (1 << i))
2294 *p++ = cpu_to_be32(i);
2295
2296 return 0;
2297 }
2298
2299 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
2300 FATTR4_WORD0_RDATTR_ERROR)
2301 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
2302 #define WORD2_ABSENT_FS_ATTRS 0
2303
2304 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2305 static inline __be32
2306 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2307 void *context, int len)
2308 {
2309 __be32 *p;
2310
2311 p = xdr_reserve_space(xdr, len + 4 + 4 + 4);
2312 if (!p)
2313 return nfserr_resource;
2314
2315 /*
2316 * For now we use a 0 here to indicate the null translation; in
2317 * the future we may place a call to translation code here.
2318 */
2319 *p++ = cpu_to_be32(0); /* lfs */
2320 *p++ = cpu_to_be32(0); /* pi */
2321 p = xdr_encode_opaque(p, context, len);
2322 return 0;
2323 }
2324 #else
2325 static inline __be32
2326 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2327 void *context, int len)
2328 { return 0; }
2329 #endif
2330
2331 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *bmval2, u32 *rdattr_err)
2332 {
2333 /* As per referral draft: */
2334 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
2335 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
2336 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
2337 *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
2338 *rdattr_err = NFSERR_MOVED;
2339 else
2340 return nfserr_moved;
2341 }
2342 *bmval0 &= WORD0_ABSENT_FS_ATTRS;
2343 *bmval1 &= WORD1_ABSENT_FS_ATTRS;
2344 *bmval2 &= WORD2_ABSENT_FS_ATTRS;
2345 return 0;
2346 }
2347
2348
2349 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat)
2350 {
2351 struct path path = exp->ex_path;
2352 int err;
2353
2354 path_get(&path);
2355 while (follow_up(&path)) {
2356 if (path.dentry != path.mnt->mnt_root)
2357 break;
2358 }
2359 err = vfs_getattr(&path, stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT);
2360 path_put(&path);
2361 return err;
2362 }
2363
2364 static __be32
2365 nfsd4_encode_bitmap(struct xdr_stream *xdr, u32 bmval0, u32 bmval1, u32 bmval2)
2366 {
2367 __be32 *p;
2368
2369 if (bmval2) {
2370 p = xdr_reserve_space(xdr, 16);
2371 if (!p)
2372 goto out_resource;
2373 *p++ = cpu_to_be32(3);
2374 *p++ = cpu_to_be32(bmval0);
2375 *p++ = cpu_to_be32(bmval1);
2376 *p++ = cpu_to_be32(bmval2);
2377 } else if (bmval1) {
2378 p = xdr_reserve_space(xdr, 12);
2379 if (!p)
2380 goto out_resource;
2381 *p++ = cpu_to_be32(2);
2382 *p++ = cpu_to_be32(bmval0);
2383 *p++ = cpu_to_be32(bmval1);
2384 } else {
2385 p = xdr_reserve_space(xdr, 8);
2386 if (!p)
2387 goto out_resource;
2388 *p++ = cpu_to_be32(1);
2389 *p++ = cpu_to_be32(bmval0);
2390 }
2391
2392 return 0;
2393 out_resource:
2394 return nfserr_resource;
2395 }
2396
2397 /*
2398 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
2399 * ourselves.
2400 */
2401 static __be32
2402 nfsd4_encode_fattr(struct xdr_stream *xdr, struct svc_fh *fhp,
2403 struct svc_export *exp,
2404 struct dentry *dentry, u32 *bmval,
2405 struct svc_rqst *rqstp, int ignore_crossmnt)
2406 {
2407 u32 bmval0 = bmval[0];
2408 u32 bmval1 = bmval[1];
2409 u32 bmval2 = bmval[2];
2410 struct kstat stat;
2411 struct svc_fh *tempfh = NULL;
2412 struct kstatfs statfs;
2413 __be32 *p;
2414 int starting_len = xdr->buf->len;
2415 int attrlen_offset;
2416 __be32 attrlen;
2417 u32 dummy;
2418 u64 dummy64;
2419 u32 rdattr_err = 0;
2420 __be32 status;
2421 int err;
2422 struct nfs4_acl *acl = NULL;
2423 void *context = NULL;
2424 int contextlen;
2425 bool contextsupport = false;
2426 struct nfsd4_compoundres *resp = rqstp->rq_resp;
2427 u32 minorversion = resp->cstate.minorversion;
2428 struct path path = {
2429 .mnt = exp->ex_path.mnt,
2430 .dentry = dentry,
2431 };
2432 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
2433
2434 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1);
2435 BUG_ON(!nfsd_attrs_supported(minorversion, bmval));
2436
2437 if (exp->ex_fslocs.migrated) {
2438 status = fattr_handle_absent_fs(&bmval0, &bmval1, &bmval2, &rdattr_err);
2439 if (status)
2440 goto out;
2441 }
2442
2443 err = vfs_getattr(&path, &stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT);
2444 if (err)
2445 goto out_nfserr;
2446 if ((bmval0 & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE |
2447 FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) ||
2448 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
2449 FATTR4_WORD1_SPACE_TOTAL))) {
2450 err = vfs_statfs(&path, &statfs);
2451 if (err)
2452 goto out_nfserr;
2453 }
2454 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) {
2455 tempfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL);
2456 status = nfserr_jukebox;
2457 if (!tempfh)
2458 goto out;
2459 fh_init(tempfh, NFS4_FHSIZE);
2460 status = fh_compose(tempfh, exp, dentry, NULL);
2461 if (status)
2462 goto out;
2463 fhp = tempfh;
2464 }
2465 if (bmval0 & FATTR4_WORD0_ACL) {
2466 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl);
2467 if (err == -EOPNOTSUPP)
2468 bmval0 &= ~FATTR4_WORD0_ACL;
2469 else if (err == -EINVAL) {
2470 status = nfserr_attrnotsupp;
2471 goto out;
2472 } else if (err != 0)
2473 goto out_nfserr;
2474 }
2475
2476 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2477 if ((bmval2 & FATTR4_WORD2_SECURITY_LABEL) ||
2478 bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2479 if (exp->ex_flags & NFSEXP_SECURITY_LABEL)
2480 err = security_inode_getsecctx(d_inode(dentry),
2481 &context, &contextlen);
2482 else
2483 err = -EOPNOTSUPP;
2484 contextsupport = (err == 0);
2485 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
2486 if (err == -EOPNOTSUPP)
2487 bmval2 &= ~FATTR4_WORD2_SECURITY_LABEL;
2488 else if (err)
2489 goto out_nfserr;
2490 }
2491 }
2492 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
2493
2494 status = nfsd4_encode_bitmap(xdr, bmval0, bmval1, bmval2);
2495 if (status)
2496 goto out;
2497
2498 attrlen_offset = xdr->buf->len;
2499 p = xdr_reserve_space(xdr, 4);
2500 if (!p)
2501 goto out_resource;
2502 p++; /* to be backfilled later */
2503
2504 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2505 u32 supp[3];
2506
2507 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
2508
2509 if (!IS_POSIXACL(dentry->d_inode))
2510 supp[0] &= ~FATTR4_WORD0_ACL;
2511 if (!contextsupport)
2512 supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
2513 if (!supp[2]) {
2514 p = xdr_reserve_space(xdr, 12);
2515 if (!p)
2516 goto out_resource;
2517 *p++ = cpu_to_be32(2);
2518 *p++ = cpu_to_be32(supp[0]);
2519 *p++ = cpu_to_be32(supp[1]);
2520 } else {
2521 p = xdr_reserve_space(xdr, 16);
2522 if (!p)
2523 goto out_resource;
2524 *p++ = cpu_to_be32(3);
2525 *p++ = cpu_to_be32(supp[0]);
2526 *p++ = cpu_to_be32(supp[1]);
2527 *p++ = cpu_to_be32(supp[2]);
2528 }
2529 }
2530 if (bmval0 & FATTR4_WORD0_TYPE) {
2531 p = xdr_reserve_space(xdr, 4);
2532 if (!p)
2533 goto out_resource;
2534 dummy = nfs4_file_type(stat.mode);
2535 if (dummy == NF4BAD) {
2536 status = nfserr_serverfault;
2537 goto out;
2538 }
2539 *p++ = cpu_to_be32(dummy);
2540 }
2541 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
2542 p = xdr_reserve_space(xdr, 4);
2543 if (!p)
2544 goto out_resource;
2545 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
2546 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT);
2547 else
2548 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT|
2549 NFS4_FH_VOL_RENAME);
2550 }
2551 if (bmval0 & FATTR4_WORD0_CHANGE) {
2552 p = xdr_reserve_space(xdr, 8);
2553 if (!p)
2554 goto out_resource;
2555 p = encode_change(p, &stat, d_inode(dentry), exp);
2556 }
2557 if (bmval0 & FATTR4_WORD0_SIZE) {
2558 p = xdr_reserve_space(xdr, 8);
2559 if (!p)
2560 goto out_resource;
2561 p = xdr_encode_hyper(p, stat.size);
2562 }
2563 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
2564 p = xdr_reserve_space(xdr, 4);
2565 if (!p)
2566 goto out_resource;
2567 *p++ = cpu_to_be32(1);
2568 }
2569 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
2570 p = xdr_reserve_space(xdr, 4);
2571 if (!p)
2572 goto out_resource;
2573 *p++ = cpu_to_be32(1);
2574 }
2575 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
2576 p = xdr_reserve_space(xdr, 4);
2577 if (!p)
2578 goto out_resource;
2579 *p++ = cpu_to_be32(0);
2580 }
2581 if (bmval0 & FATTR4_WORD0_FSID) {
2582 p = xdr_reserve_space(xdr, 16);
2583 if (!p)
2584 goto out_resource;
2585 if (exp->ex_fslocs.migrated) {
2586 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR);
2587 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR);
2588 } else switch(fsid_source(fhp)) {
2589 case FSIDSOURCE_FSID:
2590 p = xdr_encode_hyper(p, (u64)exp->ex_fsid);
2591 p = xdr_encode_hyper(p, (u64)0);
2592 break;
2593 case FSIDSOURCE_DEV:
2594 *p++ = cpu_to_be32(0);
2595 *p++ = cpu_to_be32(MAJOR(stat.dev));
2596 *p++ = cpu_to_be32(0);
2597 *p++ = cpu_to_be32(MINOR(stat.dev));
2598 break;
2599 case FSIDSOURCE_UUID:
2600 p = xdr_encode_opaque_fixed(p, exp->ex_uuid,
2601 EX_UUID_LEN);
2602 break;
2603 }
2604 }
2605 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
2606 p = xdr_reserve_space(xdr, 4);
2607 if (!p)
2608 goto out_resource;
2609 *p++ = cpu_to_be32(0);
2610 }
2611 if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
2612 p = xdr_reserve_space(xdr, 4);
2613 if (!p)
2614 goto out_resource;
2615 *p++ = cpu_to_be32(nn->nfsd4_lease);
2616 }
2617 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
2618 p = xdr_reserve_space(xdr, 4);
2619 if (!p)
2620 goto out_resource;
2621 *p++ = cpu_to_be32(rdattr_err);
2622 }
2623 if (bmval0 & FATTR4_WORD0_ACL) {
2624 struct nfs4_ace *ace;
2625
2626 if (acl == NULL) {
2627 p = xdr_reserve_space(xdr, 4);
2628 if (!p)
2629 goto out_resource;
2630
2631 *p++ = cpu_to_be32(0);
2632 goto out_acl;
2633 }
2634 p = xdr_reserve_space(xdr, 4);
2635 if (!p)
2636 goto out_resource;
2637 *p++ = cpu_to_be32(acl->naces);
2638
2639 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
2640 p = xdr_reserve_space(xdr, 4*3);
2641 if (!p)
2642 goto out_resource;
2643 *p++ = cpu_to_be32(ace->type);
2644 *p++ = cpu_to_be32(ace->flag);
2645 *p++ = cpu_to_be32(ace->access_mask &
2646 NFS4_ACE_MASK_ALL);
2647 status = nfsd4_encode_aclname(xdr, rqstp, ace);
2648 if (status)
2649 goto out;
2650 }
2651 }
2652 out_acl:
2653 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
2654 p = xdr_reserve_space(xdr, 4);
2655 if (!p)
2656 goto out_resource;
2657 *p++ = cpu_to_be32(IS_POSIXACL(dentry->d_inode) ?
2658 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
2659 }
2660 if (bmval0 & FATTR4_WORD0_CANSETTIME) {
2661 p = xdr_reserve_space(xdr, 4);
2662 if (!p)
2663 goto out_resource;
2664 *p++ = cpu_to_be32(1);
2665 }
2666 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
2667 p = xdr_reserve_space(xdr, 4);
2668 if (!p)
2669 goto out_resource;
2670 *p++ = cpu_to_be32(0);
2671 }
2672 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
2673 p = xdr_reserve_space(xdr, 4);
2674 if (!p)
2675 goto out_resource;
2676 *p++ = cpu_to_be32(1);
2677 }
2678 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
2679 p = xdr_reserve_space(xdr, 4);
2680 if (!p)
2681 goto out_resource;
2682 *p++ = cpu_to_be32(1);
2683 }
2684 if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
2685 p = xdr_reserve_space(xdr, fhp->fh_handle.fh_size + 4);
2686 if (!p)
2687 goto out_resource;
2688 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base,
2689 fhp->fh_handle.fh_size);
2690 }
2691 if (bmval0 & FATTR4_WORD0_FILEID) {
2692 p = xdr_reserve_space(xdr, 8);
2693 if (!p)
2694 goto out_resource;
2695 p = xdr_encode_hyper(p, stat.ino);
2696 }
2697 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
2698 p = xdr_reserve_space(xdr, 8);
2699 if (!p)
2700 goto out_resource;
2701 p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
2702 }
2703 if (bmval0 & FATTR4_WORD0_FILES_FREE) {
2704 p = xdr_reserve_space(xdr, 8);
2705 if (!p)
2706 goto out_resource;
2707 p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
2708 }
2709 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
2710 p = xdr_reserve_space(xdr, 8);
2711 if (!p)
2712 goto out_resource;
2713 p = xdr_encode_hyper(p, (u64) statfs.f_files);
2714 }
2715 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
2716 status = nfsd4_encode_fs_locations(xdr, rqstp, exp);
2717 if (status)
2718 goto out;
2719 }
2720 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
2721 p = xdr_reserve_space(xdr, 4);
2722 if (!p)
2723 goto out_resource;
2724 *p++ = cpu_to_be32(1);
2725 }
2726 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
2727 p = xdr_reserve_space(xdr, 8);
2728 if (!p)
2729 goto out_resource;
2730 p = xdr_encode_hyper(p, exp->ex_path.mnt->mnt_sb->s_maxbytes);
2731 }
2732 if (bmval0 & FATTR4_WORD0_MAXLINK) {
2733 p = xdr_reserve_space(xdr, 4);
2734 if (!p)
2735 goto out_resource;
2736 *p++ = cpu_to_be32(255);
2737 }
2738 if (bmval0 & FATTR4_WORD0_MAXNAME) {
2739 p = xdr_reserve_space(xdr, 4);
2740 if (!p)
2741 goto out_resource;
2742 *p++ = cpu_to_be32(statfs.f_namelen);
2743 }
2744 if (bmval0 & FATTR4_WORD0_MAXREAD) {
2745 p = xdr_reserve_space(xdr, 8);
2746 if (!p)
2747 goto out_resource;
2748 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
2749 }
2750 if (bmval0 & FATTR4_WORD0_MAXWRITE) {
2751 p = xdr_reserve_space(xdr, 8);
2752 if (!p)
2753 goto out_resource;
2754 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
2755 }
2756 if (bmval1 & FATTR4_WORD1_MODE) {
2757 p = xdr_reserve_space(xdr, 4);
2758 if (!p)
2759 goto out_resource;
2760 *p++ = cpu_to_be32(stat.mode & S_IALLUGO);
2761 }
2762 if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
2763 p = xdr_reserve_space(xdr, 4);
2764 if (!p)
2765 goto out_resource;
2766 *p++ = cpu_to_be32(1);
2767 }
2768 if (bmval1 & FATTR4_WORD1_NUMLINKS) {
2769 p = xdr_reserve_space(xdr, 4);
2770 if (!p)
2771 goto out_resource;
2772 *p++ = cpu_to_be32(stat.nlink);
2773 }
2774 if (bmval1 & FATTR4_WORD1_OWNER) {
2775 status = nfsd4_encode_user(xdr, rqstp, stat.uid);
2776 if (status)
2777 goto out;
2778 }
2779 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
2780 status = nfsd4_encode_group(xdr, rqstp, stat.gid);
2781 if (status)
2782 goto out;
2783 }
2784 if (bmval1 & FATTR4_WORD1_RAWDEV) {
2785 p = xdr_reserve_space(xdr, 8);
2786 if (!p)
2787 goto out_resource;
2788 *p++ = cpu_to_be32((u32) MAJOR(stat.rdev));
2789 *p++ = cpu_to_be32((u32) MINOR(stat.rdev));
2790 }
2791 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
2792 p = xdr_reserve_space(xdr, 8);
2793 if (!p)
2794 goto out_resource;
2795 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
2796 p = xdr_encode_hyper(p, dummy64);
2797 }
2798 if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
2799 p = xdr_reserve_space(xdr, 8);
2800 if (!p)
2801 goto out_resource;
2802 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
2803 p = xdr_encode_hyper(p, dummy64);
2804 }
2805 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
2806 p = xdr_reserve_space(xdr, 8);
2807 if (!p)
2808 goto out_resource;
2809 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
2810 p = xdr_encode_hyper(p, dummy64);
2811 }
2812 if (bmval1 & FATTR4_WORD1_SPACE_USED) {
2813 p = xdr_reserve_space(xdr, 8);
2814 if (!p)
2815 goto out_resource;
2816 dummy64 = (u64)stat.blocks << 9;
2817 p = xdr_encode_hyper(p, dummy64);
2818 }
2819 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
2820 p = xdr_reserve_space(xdr, 12);
2821 if (!p)
2822 goto out_resource;
2823 p = xdr_encode_hyper(p, (s64)stat.atime.tv_sec);
2824 *p++ = cpu_to_be32(stat.atime.tv_nsec);
2825 }
2826 if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
2827 p = xdr_reserve_space(xdr, 12);
2828 if (!p)
2829 goto out_resource;
2830 p = encode_time_delta(p, d_inode(dentry));
2831 }
2832 if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
2833 p = xdr_reserve_space(xdr, 12);
2834 if (!p)
2835 goto out_resource;
2836 p = xdr_encode_hyper(p, (s64)stat.ctime.tv_sec);
2837 *p++ = cpu_to_be32(stat.ctime.tv_nsec);
2838 }
2839 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
2840 p = xdr_reserve_space(xdr, 12);
2841 if (!p)
2842 goto out_resource;
2843 p = xdr_encode_hyper(p, (s64)stat.mtime.tv_sec);
2844 *p++ = cpu_to_be32(stat.mtime.tv_nsec);
2845 }
2846 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
2847 struct kstat parent_stat;
2848 u64 ino = stat.ino;
2849
2850 p = xdr_reserve_space(xdr, 8);
2851 if (!p)
2852 goto out_resource;
2853 /*
2854 * Get parent's attributes if not ignoring crossmount
2855 * and this is the root of a cross-mounted filesystem.
2856 */
2857 if (ignore_crossmnt == 0 &&
2858 dentry == exp->ex_path.mnt->mnt_root) {
2859 err = get_parent_attributes(exp, &parent_stat);
2860 if (err)
2861 goto out_nfserr;
2862 ino = parent_stat.ino;
2863 }
2864 p = xdr_encode_hyper(p, ino);
2865 }
2866 #ifdef CONFIG_NFSD_PNFS
2867 if (bmval1 & FATTR4_WORD1_FS_LAYOUT_TYPES) {
2868 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types);
2869 if (status)
2870 goto out;
2871 }
2872
2873 if (bmval2 & FATTR4_WORD2_LAYOUT_TYPES) {
2874 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types);
2875 if (status)
2876 goto out;
2877 }
2878
2879 if (bmval2 & FATTR4_WORD2_LAYOUT_BLKSIZE) {
2880 p = xdr_reserve_space(xdr, 4);
2881 if (!p)
2882 goto out_resource;
2883 *p++ = cpu_to_be32(stat.blksize);
2884 }
2885 #endif /* CONFIG_NFSD_PNFS */
2886 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
2887 u32 supp[3];
2888
2889 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
2890 supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0;
2891 supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1;
2892 supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2;
2893
2894 status = nfsd4_encode_bitmap(xdr, supp[0], supp[1], supp[2]);
2895 if (status)
2896 goto out;
2897 }
2898
2899 if (bmval2 & FATTR4_WORD2_CHANGE_ATTR_TYPE) {
2900 p = xdr_reserve_space(xdr, 4);
2901 if (!p)
2902 goto out_resource;
2903 if (IS_I_VERSION(d_inode(dentry)))
2904 *p++ = cpu_to_be32(NFS4_CHANGE_TYPE_IS_MONOTONIC_INCR);
2905 else
2906 *p++ = cpu_to_be32(NFS4_CHANGE_TYPE_IS_TIME_METADATA);
2907 }
2908
2909 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
2910 status = nfsd4_encode_security_label(xdr, rqstp, context,
2911 contextlen);
2912 if (status)
2913 goto out;
2914 }
2915
2916 attrlen = htonl(xdr->buf->len - attrlen_offset - 4);
2917 write_bytes_to_xdr_buf(xdr->buf, attrlen_offset, &attrlen, 4);
2918 status = nfs_ok;
2919
2920 out:
2921 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2922 if (context)
2923 security_release_secctx(context, contextlen);
2924 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
2925 kfree(acl);
2926 if (tempfh) {
2927 fh_put(tempfh);
2928 kfree(tempfh);
2929 }
2930 if (status)
2931 xdr_truncate_encode(xdr, starting_len);
2932 return status;
2933 out_nfserr:
2934 status = nfserrno(err);
2935 goto out;
2936 out_resource:
2937 status = nfserr_resource;
2938 goto out;
2939 }
2940
2941 static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr,
2942 struct xdr_buf *buf, __be32 *p, int bytes)
2943 {
2944 xdr->scratch.iov_len = 0;
2945 memset(buf, 0, sizeof(struct xdr_buf));
2946 buf->head[0].iov_base = p;
2947 buf->head[0].iov_len = 0;
2948 buf->len = 0;
2949 xdr->buf = buf;
2950 xdr->iov = buf->head;
2951 xdr->p = p;
2952 xdr->end = (void *)p + bytes;
2953 buf->buflen = bytes;
2954 }
2955
2956 __be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words,
2957 struct svc_fh *fhp, struct svc_export *exp,
2958 struct dentry *dentry, u32 *bmval,
2959 struct svc_rqst *rqstp, int ignore_crossmnt)
2960 {
2961 struct xdr_buf dummy;
2962 struct xdr_stream xdr;
2963 __be32 ret;
2964
2965 svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2);
2966 ret = nfsd4_encode_fattr(&xdr, fhp, exp, dentry, bmval, rqstp,
2967 ignore_crossmnt);
2968 *p = xdr.p;
2969 return ret;
2970 }
2971
2972 static inline int attributes_need_mount(u32 *bmval)
2973 {
2974 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
2975 return 1;
2976 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
2977 return 1;
2978 return 0;
2979 }
2980
2981 static __be32
2982 nfsd4_encode_dirent_fattr(struct xdr_stream *xdr, struct nfsd4_readdir *cd,
2983 const char *name, int namlen)
2984 {
2985 struct svc_export *exp = cd->rd_fhp->fh_export;
2986 struct dentry *dentry;
2987 __be32 nfserr;
2988 int ignore_crossmnt = 0;
2989
2990 dentry = lookup_one_len_unlocked(name, cd->rd_fhp->fh_dentry, namlen);
2991 if (IS_ERR(dentry))
2992 return nfserrno(PTR_ERR(dentry));
2993 if (d_really_is_negative(dentry)) {
2994 /*
2995 * we're not holding the i_mutex here, so there's
2996 * a window where this directory entry could have gone
2997 * away.
2998 */
2999 dput(dentry);
3000 return nfserr_noent;
3001 }
3002
3003 exp_get(exp);
3004 /*
3005 * In the case of a mountpoint, the client may be asking for
3006 * attributes that are only properties of the underlying filesystem
3007 * as opposed to the cross-mounted file system. In such a case,
3008 * we will not follow the cross mount and will fill the attribtutes
3009 * directly from the mountpoint dentry.
3010 */
3011 if (nfsd_mountpoint(dentry, exp)) {
3012 int err;
3013
3014 if (!(exp->ex_flags & NFSEXP_V4ROOT)
3015 && !attributes_need_mount(cd->rd_bmval)) {
3016 ignore_crossmnt = 1;
3017 goto out_encode;
3018 }
3019 /*
3020 * Why the heck aren't we just using nfsd_lookup??
3021 * Different "."/".." handling? Something else?
3022 * At least, add a comment here to explain....
3023 */
3024 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
3025 if (err) {
3026 nfserr = nfserrno(err);
3027 goto out_put;
3028 }
3029 nfserr = check_nfsd_access(exp, cd->rd_rqstp);
3030 if (nfserr)
3031 goto out_put;
3032
3033 }
3034 out_encode:
3035 nfserr = nfsd4_encode_fattr(xdr, NULL, exp, dentry, cd->rd_bmval,
3036 cd->rd_rqstp, ignore_crossmnt);
3037 out_put:
3038 dput(dentry);
3039 exp_put(exp);
3040 return nfserr;
3041 }
3042
3043 static __be32 *
3044 nfsd4_encode_rdattr_error(struct xdr_stream *xdr, __be32 nfserr)
3045 {
3046 __be32 *p;
3047
3048 p = xdr_reserve_space(xdr, 20);
3049 if (!p)
3050 return NULL;
3051 *p++ = htonl(2);
3052 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
3053 *p++ = htonl(0); /* bmval1 */
3054
3055 *p++ = htonl(4); /* attribute length */
3056 *p++ = nfserr; /* no htonl */
3057 return p;
3058 }
3059
3060 static int
3061 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
3062 loff_t offset, u64 ino, unsigned int d_type)
3063 {
3064 struct readdir_cd *ccd = ccdv;
3065 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
3066 struct xdr_stream *xdr = cd->xdr;
3067 int start_offset = xdr->buf->len;
3068 int cookie_offset;
3069 u32 name_and_cookie;
3070 int entry_bytes;
3071 __be32 nfserr = nfserr_toosmall;
3072 __be64 wire_offset;
3073 __be32 *p;
3074
3075 /* In nfsv4, "." and ".." never make it onto the wire.. */
3076 if (name && isdotent(name, namlen)) {
3077 cd->common.err = nfs_ok;
3078 return 0;
3079 }
3080
3081 if (cd->cookie_offset) {
3082 wire_offset = cpu_to_be64(offset);
3083 write_bytes_to_xdr_buf(xdr->buf, cd->cookie_offset,
3084 &wire_offset, 8);
3085 }
3086
3087 p = xdr_reserve_space(xdr, 4);
3088 if (!p)
3089 goto fail;
3090 *p++ = xdr_one; /* mark entry present */
3091 cookie_offset = xdr->buf->len;
3092 p = xdr_reserve_space(xdr, 3*4 + namlen);
3093 if (!p)
3094 goto fail;
3095 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */
3096 p = xdr_encode_array(p, name, namlen); /* name length & name */
3097
3098 nfserr = nfsd4_encode_dirent_fattr(xdr, cd, name, namlen);
3099 switch (nfserr) {
3100 case nfs_ok:
3101 break;
3102 case nfserr_resource:
3103 nfserr = nfserr_toosmall;
3104 goto fail;
3105 case nfserr_noent:
3106 xdr_truncate_encode(xdr, start_offset);
3107 goto skip_entry;
3108 default:
3109 /*
3110 * If the client requested the RDATTR_ERROR attribute,
3111 * we stuff the error code into this attribute
3112 * and continue. If this attribute was not requested,
3113 * then in accordance with the spec, we fail the
3114 * entire READDIR operation(!)
3115 */
3116 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
3117 goto fail;
3118 p = nfsd4_encode_rdattr_error(xdr, nfserr);
3119 if (p == NULL) {
3120 nfserr = nfserr_toosmall;
3121 goto fail;
3122 }
3123 }
3124 nfserr = nfserr_toosmall;
3125 entry_bytes = xdr->buf->len - start_offset;
3126 if (entry_bytes > cd->rd_maxcount)
3127 goto fail;
3128 cd->rd_maxcount -= entry_bytes;
3129 /*
3130 * RFC 3530 14.2.24 describes rd_dircount as only a "hint", so
3131 * let's always let through the first entry, at least:
3132 */
3133 if (!cd->rd_dircount)
3134 goto fail;
3135 name_and_cookie = 4 + 4 * XDR_QUADLEN(namlen) + 8;
3136 if (name_and_cookie > cd->rd_dircount && cd->cookie_offset)
3137 goto fail;
3138 cd->rd_dircount -= min(cd->rd_dircount, name_and_cookie);
3139
3140 cd->cookie_offset = cookie_offset;
3141 skip_entry:
3142 cd->common.err = nfs_ok;
3143 return 0;
3144 fail:
3145 xdr_truncate_encode(xdr, start_offset);
3146 cd->common.err = nfserr;
3147 return -EINVAL;
3148 }
3149
3150 static __be32
3151 nfsd4_encode_stateid(struct xdr_stream *xdr, stateid_t *sid)
3152 {
3153 __be32 *p;
3154
3155 p = xdr_reserve_space(xdr, sizeof(stateid_t));
3156 if (!p)
3157 return nfserr_resource;
3158 *p++ = cpu_to_be32(sid->si_generation);
3159 p = xdr_encode_opaque_fixed(p, &sid->si_opaque,
3160 sizeof(stateid_opaque_t));
3161 return 0;
3162 }
3163
3164 static __be32
3165 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
3166 {
3167 struct xdr_stream *xdr = &resp->xdr;
3168 __be32 *p;
3169
3170 p = xdr_reserve_space(xdr, 8);
3171 if (!p)
3172 return nfserr_resource;
3173 *p++ = cpu_to_be32(access->ac_supported);
3174 *p++ = cpu_to_be32(access->ac_resp_access);
3175 return 0;
3176 }
3177
3178 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts)
3179 {
3180 struct xdr_stream *xdr = &resp->xdr;
3181 __be32 *p;
3182
3183 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 8);
3184 if (!p)
3185 return nfserr_resource;
3186 p = xdr_encode_opaque_fixed(p, bcts->sessionid.data,
3187 NFS4_MAX_SESSIONID_LEN);
3188 *p++ = cpu_to_be32(bcts->dir);
3189 /* Upshifting from TCP to RDMA is not supported */
3190 *p++ = cpu_to_be32(0);
3191 return 0;
3192 }
3193
3194 static __be32
3195 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
3196 {
3197 struct xdr_stream *xdr = &resp->xdr;
3198
3199 return nfsd4_encode_stateid(xdr, &close->cl_stateid);
3200 }
3201
3202
3203 static __be32
3204 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
3205 {
3206 struct xdr_stream *xdr = &resp->xdr;
3207 __be32 *p;
3208
3209 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
3210 if (!p)
3211 return nfserr_resource;
3212 p = xdr_encode_opaque_fixed(p, commit->co_verf.data,
3213 NFS4_VERIFIER_SIZE);
3214 return 0;
3215 }
3216
3217 static __be32
3218 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
3219 {
3220 struct xdr_stream *xdr = &resp->xdr;
3221 __be32 *p;
3222
3223 p = xdr_reserve_space(xdr, 20);
3224 if (!p)
3225 return nfserr_resource;
3226 encode_cinfo(p, &create->cr_cinfo);
3227 nfserr = nfsd4_encode_bitmap(xdr, create->cr_bmval[0],
3228 create->cr_bmval[1], create->cr_bmval[2]);
3229 return 0;
3230 }
3231
3232 static __be32
3233 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
3234 {
3235 struct svc_fh *fhp = getattr->ga_fhp;
3236 struct xdr_stream *xdr = &resp->xdr;
3237
3238 return nfsd4_encode_fattr(xdr, fhp, fhp->fh_export, fhp->fh_dentry,
3239 getattr->ga_bmval, resp->rqstp, 0);
3240 }
3241
3242 static __be32
3243 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
3244 {
3245 struct xdr_stream *xdr = &resp->xdr;
3246 struct svc_fh *fhp = *fhpp;
3247 unsigned int len;
3248 __be32 *p;
3249
3250 len = fhp->fh_handle.fh_size;
3251 p = xdr_reserve_space(xdr, len + 4);
3252 if (!p)
3253 return nfserr_resource;
3254 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, len);
3255 return 0;
3256 }
3257
3258 /*
3259 * Including all fields other than the name, a LOCK4denied structure requires
3260 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
3261 */
3262 static __be32
3263 nfsd4_encode_lock_denied(struct xdr_stream *xdr, struct nfsd4_lock_denied *ld)
3264 {
3265 struct xdr_netobj *conf = &ld->ld_owner;
3266 __be32 *p;
3267
3268 again:
3269 p = xdr_reserve_space(xdr, 32 + XDR_LEN(conf->len));
3270 if (!p) {
3271 /*
3272 * Don't fail to return the result just because we can't
3273 * return the conflicting open:
3274 */
3275 if (conf->len) {
3276 kfree(conf->data);
3277 conf->len = 0;
3278 conf->data = NULL;
3279 goto again;
3280 }
3281 return nfserr_resource;
3282 }
3283 p = xdr_encode_hyper(p, ld->ld_start);
3284 p = xdr_encode_hyper(p, ld->ld_length);
3285 *p++ = cpu_to_be32(ld->ld_type);
3286 if (conf->len) {
3287 p = xdr_encode_opaque_fixed(p, &ld->ld_clientid, 8);
3288 p = xdr_encode_opaque(p, conf->data, conf->len);
3289 kfree(conf->data);
3290 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */
3291 p = xdr_encode_hyper(p, (u64)0); /* clientid */
3292 *p++ = cpu_to_be32(0); /* length of owner name */
3293 }
3294 return nfserr_denied;
3295 }
3296
3297 static __be32
3298 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
3299 {
3300 struct xdr_stream *xdr = &resp->xdr;
3301
3302 if (!nfserr)
3303 nfserr = nfsd4_encode_stateid(xdr, &lock->lk_resp_stateid);
3304 else if (nfserr == nfserr_denied)
3305 nfserr = nfsd4_encode_lock_denied(xdr, &lock->lk_denied);
3306
3307 return nfserr;
3308 }
3309
3310 static __be32
3311 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
3312 {
3313 struct xdr_stream *xdr = &resp->xdr;
3314
3315 if (nfserr == nfserr_denied)
3316 nfsd4_encode_lock_denied(xdr, &lockt->lt_denied);
3317 return nfserr;
3318 }
3319
3320 static __be32
3321 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
3322 {
3323 struct xdr_stream *xdr = &resp->xdr;
3324
3325 return nfsd4_encode_stateid(xdr, &locku->lu_stateid);
3326 }
3327
3328
3329 static __be32
3330 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
3331 {
3332 struct xdr_stream *xdr = &resp->xdr;
3333 __be32 *p;
3334
3335 p = xdr_reserve_space(xdr, 20);
3336 if (!p)
3337 return nfserr_resource;
3338 p = encode_cinfo(p, &link->li_cinfo);
3339 return 0;
3340 }
3341
3342
3343 static __be32
3344 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
3345 {
3346 struct xdr_stream *xdr = &resp->xdr;
3347 __be32 *p;
3348
3349 nfserr = nfsd4_encode_stateid(xdr, &open->op_stateid);
3350 if (nfserr)
3351 return nfserr;
3352 p = xdr_reserve_space(xdr, 24);
3353 if (!p)
3354 return nfserr_resource;
3355 p = encode_cinfo(p, &open->op_cinfo);
3356 *p++ = cpu_to_be32(open->op_rflags);
3357
3358 nfserr = nfsd4_encode_bitmap(xdr, open->op_bmval[0], open->op_bmval[1],
3359 open->op_bmval[2]);
3360 if (nfserr)
3361 return nfserr;
3362
3363 p = xdr_reserve_space(xdr, 4);
3364 if (!p)
3365 return nfserr_resource;
3366
3367 *p++ = cpu_to_be32(open->op_delegate_type);
3368 switch (open->op_delegate_type) {
3369 case NFS4_OPEN_DELEGATE_NONE:
3370 break;
3371 case NFS4_OPEN_DELEGATE_READ:
3372 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
3373 if (nfserr)
3374 return nfserr;
3375 p = xdr_reserve_space(xdr, 20);
3376 if (!p)
3377 return nfserr_resource;
3378 *p++ = cpu_to_be32(open->op_recall);
3379
3380 /*
3381 * TODO: ACE's in delegations
3382 */
3383 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
3384 *p++ = cpu_to_be32(0);
3385 *p++ = cpu_to_be32(0);
3386 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */
3387 break;
3388 case NFS4_OPEN_DELEGATE_WRITE:
3389 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
3390 if (nfserr)
3391 return nfserr;
3392 p = xdr_reserve_space(xdr, 32);
3393 if (!p)
3394 return nfserr_resource;
3395 *p++ = cpu_to_be32(0);
3396
3397 /*
3398 * TODO: space_limit's in delegations
3399 */
3400 *p++ = cpu_to_be32(NFS4_LIMIT_SIZE);
3401 *p++ = cpu_to_be32(~(u32)0);
3402 *p++ = cpu_to_be32(~(u32)0);
3403
3404 /*
3405 * TODO: ACE's in delegations
3406 */
3407 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
3408 *p++ = cpu_to_be32(0);
3409 *p++ = cpu_to_be32(0);
3410 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */
3411 break;
3412 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */
3413 switch (open->op_why_no_deleg) {
3414 case WND4_CONTENTION:
3415 case WND4_RESOURCE:
3416 p = xdr_reserve_space(xdr, 8);
3417 if (!p)
3418 return nfserr_resource;
3419 *p++ = cpu_to_be32(open->op_why_no_deleg);
3420 /* deleg signaling not supported yet: */
3421 *p++ = cpu_to_be32(0);
3422 break;
3423 default:
3424 p = xdr_reserve_space(xdr, 4);
3425 if (!p)
3426 return nfserr_resource;
3427 *p++ = cpu_to_be32(open->op_why_no_deleg);
3428 }
3429 break;
3430 default:
3431 BUG();
3432 }
3433 /* XXX save filehandle here */
3434 return 0;
3435 }
3436
3437 static __be32
3438 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
3439 {
3440 struct xdr_stream *xdr = &resp->xdr;
3441
3442 return nfsd4_encode_stateid(xdr, &oc->oc_resp_stateid);
3443 }
3444
3445 static __be32
3446 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
3447 {
3448 struct xdr_stream *xdr = &resp->xdr;
3449
3450 return nfsd4_encode_stateid(xdr, &od->od_stateid);
3451 }
3452
3453 static __be32 nfsd4_encode_splice_read(
3454 struct nfsd4_compoundres *resp,
3455 struct nfsd4_read *read,
3456 struct file *file, unsigned long maxcount)
3457 {
3458 struct xdr_stream *xdr = &resp->xdr;
3459 struct xdr_buf *buf = xdr->buf;
3460 u32 eof;
3461 long len;
3462 int space_left;
3463 __be32 nfserr;
3464 __be32 *p = xdr->p - 2;
3465
3466 /* Make sure there will be room for padding if needed */
3467 if (xdr->end - xdr->p < 1)
3468 return nfserr_resource;
3469
3470 len = maxcount;
3471 nfserr = nfsd_splice_read(read->rd_rqstp, read->rd_fhp,
3472 file, read->rd_offset, &maxcount);
3473 read->rd_length = maxcount;
3474 if (nfserr) {
3475 /*
3476 * nfsd_splice_actor may have already messed with the
3477 * page length; reset it so as not to confuse
3478 * xdr_truncate_encode:
3479 */
3480 buf->page_len = 0;
3481 return nfserr;
3482 }
3483
3484 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset,
3485 d_inode(read->rd_fhp->fh_dentry)->i_size);
3486
3487 *(p++) = htonl(eof);
3488 *(p++) = htonl(maxcount);
3489
3490 buf->page_len = maxcount;
3491 buf->len += maxcount;
3492 xdr->page_ptr += (buf->page_base + maxcount + PAGE_SIZE - 1)
3493 / PAGE_SIZE;
3494
3495 /* Use rest of head for padding and remaining ops: */
3496 buf->tail[0].iov_base = xdr->p;
3497 buf->tail[0].iov_len = 0;
3498 xdr->iov = buf->tail;
3499 if (maxcount&3) {
3500 int pad = 4 - (maxcount&3);
3501
3502 *(xdr->p++) = 0;
3503
3504 buf->tail[0].iov_base += maxcount&3;
3505 buf->tail[0].iov_len = pad;
3506 buf->len += pad;
3507 }
3508
3509 space_left = min_t(int, (void *)xdr->end - (void *)xdr->p,
3510 buf->buflen - buf->len);
3511 buf->buflen = buf->len + space_left;
3512 xdr->end = (__be32 *)((void *)xdr->end + space_left);
3513
3514 return 0;
3515 }
3516
3517 static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp,
3518 struct nfsd4_read *read,
3519 struct file *file, unsigned long maxcount)
3520 {
3521 struct xdr_stream *xdr = &resp->xdr;
3522 u32 eof;
3523 int v;
3524 int starting_len = xdr->buf->len - 8;
3525 long len;
3526 int thislen;
3527 __be32 nfserr;
3528 __be32 tmp;
3529 __be32 *p;
3530 u32 zzz = 0;
3531 int pad;
3532
3533 len = maxcount;
3534 v = 0;
3535
3536 thislen = min_t(long, len, ((void *)xdr->end - (void *)xdr->p));
3537 p = xdr_reserve_space(xdr, (thislen+3)&~3);
3538 WARN_ON_ONCE(!p);
3539 resp->rqstp->rq_vec[v].iov_base = p;
3540 resp->rqstp->rq_vec[v].iov_len = thislen;
3541 v++;
3542 len -= thislen;
3543
3544 while (len) {
3545 thislen = min_t(long, len, PAGE_SIZE);
3546 p = xdr_reserve_space(xdr, (thislen+3)&~3);
3547 WARN_ON_ONCE(!p);
3548 resp->rqstp->rq_vec[v].iov_base = p;
3549 resp->rqstp->rq_vec[v].iov_len = thislen;
3550 v++;
3551 len -= thislen;
3552 }
3553 read->rd_vlen = v;
3554
3555 len = maxcount;
3556 nfserr = nfsd_readv(resp->rqstp, read->rd_fhp, file, read->rd_offset,
3557 resp->rqstp->rq_vec, read->rd_vlen, &maxcount);
3558 read->rd_length = maxcount;
3559 if (nfserr)
3560 return nfserr;
3561 xdr_truncate_encode(xdr, starting_len + 8 + ((maxcount+3)&~3));
3562
3563 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset,
3564 d_inode(read->rd_fhp->fh_dentry)->i_size);
3565
3566 tmp = htonl(eof);
3567 write_bytes_to_xdr_buf(xdr->buf, starting_len , &tmp, 4);
3568 tmp = htonl(maxcount);
3569 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4);
3570
3571 pad = (maxcount&3) ? 4 - (maxcount&3) : 0;
3572 write_bytes_to_xdr_buf(xdr->buf, starting_len + 8 + maxcount,
3573 &zzz, pad);
3574 return 0;
3575
3576 }
3577
3578 static __be32
3579 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
3580 struct nfsd4_read *read)
3581 {
3582 unsigned long maxcount;
3583 struct xdr_stream *xdr = &resp->xdr;
3584 struct file *file = read->rd_filp;
3585 int starting_len = xdr->buf->len;
3586 struct raparms *ra = NULL;
3587 __be32 *p;
3588
3589 p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */
3590 if (!p) {
3591 WARN_ON_ONCE(test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags));
3592 return nfserr_resource;
3593 }
3594 if (resp->xdr.buf->page_len &&
3595 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) {
3596 WARN_ON_ONCE(1);
3597 return nfserr_resource;
3598 }
3599 xdr_commit_encode(xdr);
3600
3601 maxcount = svc_max_payload(resp->rqstp);
3602 maxcount = min_t(unsigned long, maxcount,
3603 (xdr->buf->buflen - xdr->buf->len));
3604 maxcount = min_t(unsigned long, maxcount, read->rd_length);
3605
3606 if (read->rd_tmp_file)
3607 ra = nfsd_init_raparms(file);
3608
3609 if (file->f_op->splice_read &&
3610 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags))
3611 nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount);
3612 else
3613 nfserr = nfsd4_encode_readv(resp, read, file, maxcount);
3614
3615 if (ra)
3616 nfsd_put_raparams(file, ra);
3617
3618 if (nfserr)
3619 xdr_truncate_encode(xdr, starting_len);
3620
3621 return nfserr;
3622 }
3623
3624 static __be32
3625 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
3626 {
3627 int maxcount;
3628 __be32 wire_count;
3629 int zero = 0;
3630 struct xdr_stream *xdr = &resp->xdr;
3631 int length_offset = xdr->buf->len;
3632 __be32 *p;
3633
3634 p = xdr_reserve_space(xdr, 4);
3635 if (!p)
3636 return nfserr_resource;
3637 maxcount = PAGE_SIZE;
3638
3639 p = xdr_reserve_space(xdr, maxcount);
3640 if (!p)
3641 return nfserr_resource;
3642 /*
3643 * XXX: By default, vfs_readlink() will truncate symlinks if they
3644 * would overflow the buffer. Is this kosher in NFSv4? If not, one
3645 * easy fix is: if vfs_readlink() precisely fills the buffer, assume
3646 * that truncation occurred, and return NFS4ERR_RESOURCE.
3647 */
3648 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp,
3649 (char *)p, &maxcount);
3650 if (nfserr == nfserr_isdir)
3651 nfserr = nfserr_inval;
3652 if (nfserr) {
3653 xdr_truncate_encode(xdr, length_offset);
3654 return nfserr;
3655 }
3656
3657 wire_count = htonl(maxcount);
3658 write_bytes_to_xdr_buf(xdr->buf, length_offset, &wire_count, 4);
3659 xdr_truncate_encode(xdr, length_offset + 4 + ALIGN(maxcount, 4));
3660 if (maxcount & 3)
3661 write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount,
3662 &zero, 4 - (maxcount&3));
3663 return 0;
3664 }
3665
3666 static __be32
3667 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
3668 {
3669 int maxcount;
3670 int bytes_left;
3671 loff_t offset;
3672 __be64 wire_offset;
3673 struct xdr_stream *xdr = &resp->xdr;
3674 int starting_len = xdr->buf->len;
3675 __be32 *p;
3676
3677 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
3678 if (!p)
3679 return nfserr_resource;
3680
3681 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
3682 *p++ = cpu_to_be32(0);
3683 *p++ = cpu_to_be32(0);
3684 resp->xdr.buf->head[0].iov_len = ((char *)resp->xdr.p)
3685 - (char *)resp->xdr.buf->head[0].iov_base;
3686
3687 /*
3688 * Number of bytes left for directory entries allowing for the
3689 * final 8 bytes of the readdir and a following failed op:
3690 */
3691 bytes_left = xdr->buf->buflen - xdr->buf->len
3692 - COMPOUND_ERR_SLACK_SPACE - 8;
3693 if (bytes_left < 0) {
3694 nfserr = nfserr_resource;
3695 goto err_no_verf;
3696 }
3697 maxcount = svc_max_payload(resp->rqstp);
3698 maxcount = min_t(u32, readdir->rd_maxcount, maxcount);
3699 /*
3700 * Note the rfc defines rd_maxcount as the size of the
3701 * READDIR4resok structure, which includes the verifier above
3702 * and the 8 bytes encoded at the end of this function:
3703 */
3704 if (maxcount < 16) {
3705 nfserr = nfserr_toosmall;
3706 goto err_no_verf;
3707 }
3708 maxcount = min_t(int, maxcount-16, bytes_left);
3709
3710 /* RFC 3530 14.2.24 allows us to ignore dircount when it's 0: */
3711 if (!readdir->rd_dircount)
3712 readdir->rd_dircount = svc_max_payload(resp->rqstp);
3713
3714 readdir->xdr = xdr;
3715 readdir->rd_maxcount = maxcount;
3716 readdir->common.err = 0;
3717 readdir->cookie_offset = 0;
3718
3719 offset = readdir->rd_cookie;
3720 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
3721 &offset,
3722 &readdir->common, nfsd4_encode_dirent);
3723 if (nfserr == nfs_ok &&
3724 readdir->common.err == nfserr_toosmall &&
3725 xdr->buf->len == starting_len + 8) {
3726 /* nothing encoded; which limit did we hit?: */
3727 if (maxcount - 16 < bytes_left)
3728 /* It was the fault of rd_maxcount: */
3729 nfserr = nfserr_toosmall;
3730 else
3731 /* We ran out of buffer space: */
3732 nfserr = nfserr_resource;
3733 }
3734 if (nfserr)
3735 goto err_no_verf;
3736
3737 if (readdir->cookie_offset) {
3738 wire_offset = cpu_to_be64(offset);
3739 write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset,
3740 &wire_offset, 8);
3741 }
3742
3743 p = xdr_reserve_space(xdr, 8);
3744 if (!p) {
3745 WARN_ON_ONCE(1);
3746 goto err_no_verf;
3747 }
3748 *p++ = 0; /* no more entries */
3749 *p++ = htonl(readdir->common.err == nfserr_eof);
3750
3751 return 0;
3752 err_no_verf:
3753 xdr_truncate_encode(xdr, starting_len);
3754 return nfserr;
3755 }
3756
3757 static __be32
3758 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
3759 {
3760 struct xdr_stream *xdr = &resp->xdr;
3761 __be32 *p;
3762
3763 p = xdr_reserve_space(xdr, 20);
3764 if (!p)
3765 return nfserr_resource;
3766 p = encode_cinfo(p, &remove->rm_cinfo);
3767 return 0;
3768 }
3769
3770 static __be32
3771 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
3772 {
3773 struct xdr_stream *xdr = &resp->xdr;
3774 __be32 *p;
3775
3776 p = xdr_reserve_space(xdr, 40);
3777 if (!p)
3778 return nfserr_resource;
3779 p = encode_cinfo(p, &rename->rn_sinfo);
3780 p = encode_cinfo(p, &rename->rn_tinfo);
3781 return 0;
3782 }
3783
3784 static __be32
3785 nfsd4_do_encode_secinfo(struct xdr_stream *xdr, struct svc_export *exp)
3786 {
3787 u32 i, nflavs, supported;
3788 struct exp_flavor_info *flavs;
3789 struct exp_flavor_info def_flavs[2];
3790 __be32 *p, *flavorsp;
3791 static bool report = true;
3792
3793 if (exp->ex_nflavors) {
3794 flavs = exp->ex_flavors;
3795 nflavs = exp->ex_nflavors;
3796 } else { /* Handling of some defaults in absence of real secinfo: */
3797 flavs = def_flavs;
3798 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
3799 nflavs = 2;
3800 flavs[0].pseudoflavor = RPC_AUTH_UNIX;
3801 flavs[1].pseudoflavor = RPC_AUTH_NULL;
3802 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
3803 nflavs = 1;
3804 flavs[0].pseudoflavor
3805 = svcauth_gss_flavor(exp->ex_client);
3806 } else {
3807 nflavs = 1;
3808 flavs[0].pseudoflavor
3809 = exp->ex_client->flavour->flavour;
3810 }
3811 }
3812
3813 supported = 0;
3814 p = xdr_reserve_space(xdr, 4);
3815 if (!p)
3816 return nfserr_resource;
3817 flavorsp = p++; /* to be backfilled later */
3818
3819 for (i = 0; i < nflavs; i++) {
3820 rpc_authflavor_t pf = flavs[i].pseudoflavor;
3821 struct rpcsec_gss_info info;
3822
3823 if (rpcauth_get_gssinfo(pf, &info) == 0) {
3824 supported++;
3825 p = xdr_reserve_space(xdr, 4 + 4 +
3826 XDR_LEN(info.oid.len) + 4 + 4);
3827 if (!p)
3828 return nfserr_resource;
3829 *p++ = cpu_to_be32(RPC_AUTH_GSS);
3830 p = xdr_encode_opaque(p, info.oid.data, info.oid.len);
3831 *p++ = cpu_to_be32(info.qop);
3832 *p++ = cpu_to_be32(info.service);
3833 } else if (pf < RPC_AUTH_MAXFLAVOR) {
3834 supported++;
3835 p = xdr_reserve_space(xdr, 4);
3836 if (!p)
3837 return nfserr_resource;
3838 *p++ = cpu_to_be32(pf);
3839 } else {
3840 if (report)
3841 pr_warn("NFS: SECINFO: security flavor %u "
3842 "is not supported\n", pf);
3843 }
3844 }
3845
3846 if (nflavs != supported)
3847 report = false;
3848 *flavorsp = htonl(supported);
3849 return 0;
3850 }
3851
3852 static __be32
3853 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
3854 struct nfsd4_secinfo *secinfo)
3855 {
3856 struct xdr_stream *xdr = &resp->xdr;
3857
3858 return nfsd4_do_encode_secinfo(xdr, secinfo->si_exp);
3859 }
3860
3861 static __be32
3862 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
3863 struct nfsd4_secinfo_no_name *secinfo)
3864 {
3865 struct xdr_stream *xdr = &resp->xdr;
3866
3867 return nfsd4_do_encode_secinfo(xdr, secinfo->sin_exp);
3868 }
3869
3870 /*
3871 * The SETATTR encode routine is special -- it always encodes a bitmap,
3872 * regardless of the error status.
3873 */
3874 static __be32
3875 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
3876 {
3877 struct xdr_stream *xdr = &resp->xdr;
3878 __be32 *p;
3879
3880 p = xdr_reserve_space(xdr, 16);
3881 if (!p)
3882 return nfserr_resource;
3883 if (nfserr) {
3884 *p++ = cpu_to_be32(3);
3885 *p++ = cpu_to_be32(0);
3886 *p++ = cpu_to_be32(0);
3887 *p++ = cpu_to_be32(0);
3888 }
3889 else {
3890 *p++ = cpu_to_be32(3);
3891 *p++ = cpu_to_be32(setattr->sa_bmval[0]);
3892 *p++ = cpu_to_be32(setattr->sa_bmval[1]);
3893 *p++ = cpu_to_be32(setattr->sa_bmval[2]);
3894 }
3895 return nfserr;
3896 }
3897
3898 static __be32
3899 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
3900 {
3901 struct xdr_stream *xdr = &resp->xdr;
3902 __be32 *p;
3903
3904 if (!nfserr) {
3905 p = xdr_reserve_space(xdr, 8 + NFS4_VERIFIER_SIZE);
3906 if (!p)
3907 return nfserr_resource;
3908 p = xdr_encode_opaque_fixed(p, &scd->se_clientid, 8);
3909 p = xdr_encode_opaque_fixed(p, &scd->se_confirm,
3910 NFS4_VERIFIER_SIZE);
3911 }
3912 else if (nfserr == nfserr_clid_inuse) {
3913 p = xdr_reserve_space(xdr, 8);
3914 if (!p)
3915 return nfserr_resource;
3916 *p++ = cpu_to_be32(0);
3917 *p++ = cpu_to_be32(0);
3918 }
3919 return nfserr;
3920 }
3921
3922 static __be32
3923 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
3924 {
3925 struct xdr_stream *xdr = &resp->xdr;
3926 __be32 *p;
3927
3928 p = xdr_reserve_space(xdr, 16);
3929 if (!p)
3930 return nfserr_resource;
3931 *p++ = cpu_to_be32(write->wr_bytes_written);
3932 *p++ = cpu_to_be32(write->wr_how_written);
3933 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
3934 NFS4_VERIFIER_SIZE);
3935 return 0;
3936 }
3937
3938 static __be32
3939 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
3940 struct nfsd4_exchange_id *exid)
3941 {
3942 struct xdr_stream *xdr = &resp->xdr;
3943 __be32 *p;
3944 char *major_id;
3945 char *server_scope;
3946 int major_id_sz;
3947 int server_scope_sz;
3948 uint64_t minor_id = 0;
3949
3950 major_id = utsname()->nodename;
3951 major_id_sz = strlen(major_id);
3952 server_scope = utsname()->nodename;
3953 server_scope_sz = strlen(server_scope);
3954
3955 p = xdr_reserve_space(xdr,
3956 8 /* eir_clientid */ +
3957 4 /* eir_sequenceid */ +
3958 4 /* eir_flags */ +
3959 4 /* spr_how */);
3960 if (!p)
3961 return nfserr_resource;
3962
3963 p = xdr_encode_opaque_fixed(p, &exid->clientid, 8);
3964 *p++ = cpu_to_be32(exid->seqid);
3965 *p++ = cpu_to_be32(exid->flags);
3966
3967 *p++ = cpu_to_be32(exid->spa_how);
3968
3969 switch (exid->spa_how) {
3970 case SP4_NONE:
3971 break;
3972 case SP4_MACH_CRED:
3973 /* spo_must_enforce bitmap: */
3974 nfserr = nfsd4_encode_bitmap(xdr,
3975 exid->spo_must_enforce[0],
3976 exid->spo_must_enforce[1],
3977 exid->spo_must_enforce[2]);
3978 if (nfserr)
3979 return nfserr;
3980 /* spo_must_allow bitmap: */
3981 nfserr = nfsd4_encode_bitmap(xdr,
3982 exid->spo_must_allow[0],
3983 exid->spo_must_allow[1],
3984 exid->spo_must_allow[2]);
3985 if (nfserr)
3986 return nfserr;
3987 break;
3988 default:
3989 WARN_ON_ONCE(1);
3990 }
3991
3992 p = xdr_reserve_space(xdr,
3993 8 /* so_minor_id */ +
3994 4 /* so_major_id.len */ +
3995 (XDR_QUADLEN(major_id_sz) * 4) +
3996 4 /* eir_server_scope.len */ +
3997 (XDR_QUADLEN(server_scope_sz) * 4) +
3998 4 /* eir_server_impl_id.count (0) */);
3999 if (!p)
4000 return nfserr_resource;
4001
4002 /* The server_owner struct */
4003 p = xdr_encode_hyper(p, minor_id); /* Minor id */
4004 /* major id */
4005 p = xdr_encode_opaque(p, major_id, major_id_sz);
4006
4007 /* Server scope */
4008 p = xdr_encode_opaque(p, server_scope, server_scope_sz);
4009
4010 /* Implementation id */
4011 *p++ = cpu_to_be32(0); /* zero length nfs_impl_id4 array */
4012 return 0;
4013 }
4014
4015 static __be32
4016 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
4017 struct nfsd4_create_session *sess)
4018 {
4019 struct xdr_stream *xdr = &resp->xdr;
4020 __be32 *p;
4021
4022 p = xdr_reserve_space(xdr, 24);
4023 if (!p)
4024 return nfserr_resource;
4025 p = xdr_encode_opaque_fixed(p, sess->sessionid.data,
4026 NFS4_MAX_SESSIONID_LEN);
4027 *p++ = cpu_to_be32(sess->seqid);
4028 *p++ = cpu_to_be32(sess->flags);
4029
4030 p = xdr_reserve_space(xdr, 28);
4031 if (!p)
4032 return nfserr_resource;
4033 *p++ = cpu_to_be32(0); /* headerpadsz */
4034 *p++ = cpu_to_be32(sess->fore_channel.maxreq_sz);
4035 *p++ = cpu_to_be32(sess->fore_channel.maxresp_sz);
4036 *p++ = cpu_to_be32(sess->fore_channel.maxresp_cached);
4037 *p++ = cpu_to_be32(sess->fore_channel.maxops);
4038 *p++ = cpu_to_be32(sess->fore_channel.maxreqs);
4039 *p++ = cpu_to_be32(sess->fore_channel.nr_rdma_attrs);
4040
4041 if (sess->fore_channel.nr_rdma_attrs) {
4042 p = xdr_reserve_space(xdr, 4);
4043 if (!p)
4044 return nfserr_resource;
4045 *p++ = cpu_to_be32(sess->fore_channel.rdma_attrs);
4046 }
4047
4048 p = xdr_reserve_space(xdr, 28);
4049 if (!p)
4050 return nfserr_resource;
4051 *p++ = cpu_to_be32(0); /* headerpadsz */
4052 *p++ = cpu_to_be32(sess->back_channel.maxreq_sz);
4053 *p++ = cpu_to_be32(sess->back_channel.maxresp_sz);
4054 *p++ = cpu_to_be32(sess->back_channel.maxresp_cached);
4055 *p++ = cpu_to_be32(sess->back_channel.maxops);
4056 *p++ = cpu_to_be32(sess->back_channel.maxreqs);
4057 *p++ = cpu_to_be32(sess->back_channel.nr_rdma_attrs);
4058
4059 if (sess->back_channel.nr_rdma_attrs) {
4060 p = xdr_reserve_space(xdr, 4);
4061 if (!p)
4062 return nfserr_resource;
4063 *p++ = cpu_to_be32(sess->back_channel.rdma_attrs);
4064 }
4065 return 0;
4066 }
4067
4068 static __be32
4069 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
4070 struct nfsd4_sequence *seq)
4071 {
4072 struct xdr_stream *xdr = &resp->xdr;
4073 __be32 *p;
4074
4075 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 20);
4076 if (!p)
4077 return nfserr_resource;
4078 p = xdr_encode_opaque_fixed(p, seq->sessionid.data,
4079 NFS4_MAX_SESSIONID_LEN);
4080 *p++ = cpu_to_be32(seq->seqid);
4081 *p++ = cpu_to_be32(seq->slotid);
4082 /* Note slotid's are numbered from zero: */
4083 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_highest_slotid */
4084 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_target_highest_slotid */
4085 *p++ = cpu_to_be32(seq->status_flags);
4086
4087 resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */
4088 return 0;
4089 }
4090
4091 static __be32
4092 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
4093 struct nfsd4_test_stateid *test_stateid)
4094 {
4095 struct xdr_stream *xdr = &resp->xdr;
4096 struct nfsd4_test_stateid_id *stateid, *next;
4097 __be32 *p;
4098
4099 p = xdr_reserve_space(xdr, 4 + (4 * test_stateid->ts_num_ids));
4100 if (!p)
4101 return nfserr_resource;
4102 *p++ = htonl(test_stateid->ts_num_ids);
4103
4104 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) {
4105 *p++ = stateid->ts_id_status;
4106 }
4107
4108 return 0;
4109 }
4110
4111 #ifdef CONFIG_NFSD_PNFS
4112 static __be32
4113 nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
4114 struct nfsd4_getdeviceinfo *gdev)
4115 {
4116 struct xdr_stream *xdr = &resp->xdr;
4117 const struct nfsd4_layout_ops *ops;
4118 u32 starting_len = xdr->buf->len, needed_len;
4119 __be32 *p;
4120
4121 p = xdr_reserve_space(xdr, 4);
4122 if (!p)
4123 return nfserr_resource;
4124
4125 *p++ = cpu_to_be32(gdev->gd_layout_type);
4126
4127 /* If maxcount is 0 then just update notifications */
4128 if (gdev->gd_maxcount != 0) {
4129 ops = nfsd4_layout_ops[gdev->gd_layout_type];
4130 nfserr = ops->encode_getdeviceinfo(xdr, gdev);
4131 if (nfserr) {
4132 /*
4133 * We don't bother to burden the layout drivers with
4134 * enforcing gd_maxcount, just tell the client to
4135 * come back with a bigger buffer if it's not enough.
4136 */
4137 if (xdr->buf->len + 4 > gdev->gd_maxcount)
4138 goto toosmall;
4139 return nfserr;
4140 }
4141 }
4142
4143 if (gdev->gd_notify_types) {
4144 p = xdr_reserve_space(xdr, 4 + 4);
4145 if (!p)
4146 return nfserr_resource;
4147 *p++ = cpu_to_be32(1); /* bitmap length */
4148 *p++ = cpu_to_be32(gdev->gd_notify_types);
4149 } else {
4150 p = xdr_reserve_space(xdr, 4);
4151 if (!p)
4152 return nfserr_resource;
4153 *p++ = 0;
4154 }
4155
4156 return 0;
4157 toosmall:
4158 dprintk("%s: maxcount too small\n", __func__);
4159 needed_len = xdr->buf->len + 4 /* notifications */;
4160 xdr_truncate_encode(xdr, starting_len);
4161 p = xdr_reserve_space(xdr, 4);
4162 if (!p)
4163 return nfserr_resource;
4164 *p++ = cpu_to_be32(needed_len);
4165 return nfserr_toosmall;
4166 }
4167
4168 static __be32
4169 nfsd4_encode_layoutget(struct nfsd4_compoundres *resp, __be32 nfserr,
4170 struct nfsd4_layoutget *lgp)
4171 {
4172 struct xdr_stream *xdr = &resp->xdr;
4173 const struct nfsd4_layout_ops *ops;
4174 __be32 *p;
4175
4176 p = xdr_reserve_space(xdr, 36 + sizeof(stateid_opaque_t));
4177 if (!p)
4178 return nfserr_resource;
4179
4180 *p++ = cpu_to_be32(1); /* we always set return-on-close */
4181 *p++ = cpu_to_be32(lgp->lg_sid.si_generation);
4182 p = xdr_encode_opaque_fixed(p, &lgp->lg_sid.si_opaque,
4183 sizeof(stateid_opaque_t));
4184
4185 *p++ = cpu_to_be32(1); /* we always return a single layout */
4186 p = xdr_encode_hyper(p, lgp->lg_seg.offset);
4187 p = xdr_encode_hyper(p, lgp->lg_seg.length);
4188 *p++ = cpu_to_be32(lgp->lg_seg.iomode);
4189 *p++ = cpu_to_be32(lgp->lg_layout_type);
4190
4191 ops = nfsd4_layout_ops[lgp->lg_layout_type];
4192 return ops->encode_layoutget(xdr, lgp);
4193 }
4194
4195 static __be32
4196 nfsd4_encode_layoutcommit(struct nfsd4_compoundres *resp, __be32 nfserr,
4197 struct nfsd4_layoutcommit *lcp)
4198 {
4199 struct xdr_stream *xdr = &resp->xdr;
4200 __be32 *p;
4201
4202 p = xdr_reserve_space(xdr, 4);
4203 if (!p)
4204 return nfserr_resource;
4205 *p++ = cpu_to_be32(lcp->lc_size_chg);
4206 if (lcp->lc_size_chg) {
4207 p = xdr_reserve_space(xdr, 8);
4208 if (!p)
4209 return nfserr_resource;
4210 p = xdr_encode_hyper(p, lcp->lc_newsize);
4211 }
4212
4213 return 0;
4214 }
4215
4216 static __be32
4217 nfsd4_encode_layoutreturn(struct nfsd4_compoundres *resp, __be32 nfserr,
4218 struct nfsd4_layoutreturn *lrp)
4219 {
4220 struct xdr_stream *xdr = &resp->xdr;
4221 __be32 *p;
4222
4223 p = xdr_reserve_space(xdr, 4);
4224 if (!p)
4225 return nfserr_resource;
4226 *p++ = cpu_to_be32(lrp->lrs_present);
4227 if (lrp->lrs_present)
4228 return nfsd4_encode_stateid(xdr, &lrp->lr_sid);
4229 return 0;
4230 }
4231 #endif /* CONFIG_NFSD_PNFS */
4232
4233 static __be32
4234 nfsd42_encode_write_res(struct nfsd4_compoundres *resp,
4235 struct nfsd42_write_res *write, bool sync)
4236 {
4237 __be32 *p;
4238 p = xdr_reserve_space(&resp->xdr, 4);
4239 if (!p)
4240 return nfserr_resource;
4241
4242 if (sync)
4243 *p++ = cpu_to_be32(0);
4244 else {
4245 __be32 nfserr;
4246 *p++ = cpu_to_be32(1);
4247 nfserr = nfsd4_encode_stateid(&resp->xdr, &write->cb_stateid);
4248 if (nfserr)
4249 return nfserr;
4250 }
4251 p = xdr_reserve_space(&resp->xdr, 8 + 4 + NFS4_VERIFIER_SIZE);
4252 if (!p)
4253 return nfserr_resource;
4254
4255 p = xdr_encode_hyper(p, write->wr_bytes_written);
4256 *p++ = cpu_to_be32(write->wr_stable_how);
4257 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
4258 NFS4_VERIFIER_SIZE);
4259 return nfs_ok;
4260 }
4261
4262 static __be32
4263 nfsd4_encode_copy(struct nfsd4_compoundres *resp, __be32 nfserr,
4264 struct nfsd4_copy *copy)
4265 {
4266 __be32 *p;
4267
4268 nfserr = nfsd42_encode_write_res(resp, &copy->cp_res,
4269 copy->cp_synchronous);
4270 if (nfserr)
4271 return nfserr;
4272
4273 p = xdr_reserve_space(&resp->xdr, 4 + 4);
4274 *p++ = xdr_one; /* cr_consecutive */
4275 *p++ = cpu_to_be32(copy->cp_synchronous);
4276 return 0;
4277 }
4278
4279 static __be32
4280 nfsd4_encode_offload_status(struct nfsd4_compoundres *resp, __be32 nfserr,
4281 struct nfsd4_offload_status *os)
4282 {
4283 struct xdr_stream *xdr = &resp->xdr;
4284 __be32 *p;
4285
4286 p = xdr_reserve_space(xdr, 8 + 4);
4287 if (!p)
4288 return nfserr_resource;
4289 p = xdr_encode_hyper(p, os->count);
4290 *p++ = cpu_to_be32(0);
4291
4292 return nfserr;
4293 }
4294
4295 static __be32
4296 nfsd4_encode_seek(struct nfsd4_compoundres *resp, __be32 nfserr,
4297 struct nfsd4_seek *seek)
4298 {
4299 __be32 *p;
4300
4301 p = xdr_reserve_space(&resp->xdr, 4 + 8);
4302 *p++ = cpu_to_be32(seek->seek_eof);
4303 p = xdr_encode_hyper(p, seek->seek_pos);
4304
4305 return 0;
4306 }
4307
4308 static __be32
4309 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p)
4310 {
4311 return nfserr;
4312 }
4313
4314 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *);
4315
4316 /*
4317 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
4318 * since we don't need to filter out obsolete ops as this is
4319 * done in the decoding phase.
4320 */
4321 static const nfsd4_enc nfsd4_enc_ops[] = {
4322 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access,
4323 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close,
4324 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit,
4325 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create,
4326 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop,
4327 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop,
4328 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr,
4329 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh,
4330 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link,
4331 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock,
4332 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt,
4333 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku,
4334 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop,
4335 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop,
4336 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop,
4337 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open,
4338 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop,
4339 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm,
4340 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade,
4341 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop,
4342 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop,
4343 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop,
4344 [OP_READ] = (nfsd4_enc)nfsd4_encode_read,
4345 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir,
4346 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink,
4347 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove,
4348 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename,
4349 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop,
4350 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop,
4351 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop,
4352 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo,
4353 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr,
4354 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid,
4355 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop,
4356 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop,
4357 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write,
4358 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop,
4359
4360 /* NFSv4.1 operations */
4361 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop,
4362 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session,
4363 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id,
4364 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session,
4365 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_noop,
4366 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_noop,
4367 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
4368 #ifdef CONFIG_NFSD_PNFS
4369 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_getdeviceinfo,
4370 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
4371 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_layoutcommit,
4372 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_layoutget,
4373 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_layoutreturn,
4374 #else
4375 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop,
4376 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
4377 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop,
4378 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop,
4379 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop,
4380 #endif
4381 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name,
4382 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence,
4383 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop,
4384 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid,
4385 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
4386 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop,
4387 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop,
4388
4389 /* NFSv4.2 operations */
4390 [OP_ALLOCATE] = (nfsd4_enc)nfsd4_encode_noop,
4391 [OP_COPY] = (nfsd4_enc)nfsd4_encode_copy,
4392 [OP_COPY_NOTIFY] = (nfsd4_enc)nfsd4_encode_noop,
4393 [OP_DEALLOCATE] = (nfsd4_enc)nfsd4_encode_noop,
4394 [OP_IO_ADVISE] = (nfsd4_enc)nfsd4_encode_noop,
4395 [OP_LAYOUTERROR] = (nfsd4_enc)nfsd4_encode_noop,
4396 [OP_LAYOUTSTATS] = (nfsd4_enc)nfsd4_encode_noop,
4397 [OP_OFFLOAD_CANCEL] = (nfsd4_enc)nfsd4_encode_noop,
4398 [OP_OFFLOAD_STATUS] = (nfsd4_enc)nfsd4_encode_offload_status,
4399 [OP_READ_PLUS] = (nfsd4_enc)nfsd4_encode_noop,
4400 [OP_SEEK] = (nfsd4_enc)nfsd4_encode_seek,
4401 [OP_WRITE_SAME] = (nfsd4_enc)nfsd4_encode_noop,
4402 [OP_CLONE] = (nfsd4_enc)nfsd4_encode_noop,
4403 };
4404
4405 /*
4406 * Calculate whether we still have space to encode repsize bytes.
4407 * There are two considerations:
4408 * - For NFS versions >=4.1, the size of the reply must stay within
4409 * session limits
4410 * - For all NFS versions, we must stay within limited preallocated
4411 * buffer space.
4412 *
4413 * This is called before the operation is processed, so can only provide
4414 * an upper estimate. For some nonidempotent operations (such as
4415 * getattr), it's not necessarily a problem if that estimate is wrong,
4416 * as we can fail it after processing without significant side effects.
4417 */
4418 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize)
4419 {
4420 struct xdr_buf *buf = &resp->rqstp->rq_res;
4421 struct nfsd4_slot *slot = resp->cstate.slot;
4422
4423 if (buf->len + respsize <= buf->buflen)
4424 return nfs_ok;
4425 if (!nfsd4_has_session(&resp->cstate))
4426 return nfserr_resource;
4427 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) {
4428 WARN_ON_ONCE(1);
4429 return nfserr_rep_too_big_to_cache;
4430 }
4431 return nfserr_rep_too_big;
4432 }
4433
4434 void
4435 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
4436 {
4437 struct xdr_stream *xdr = &resp->xdr;
4438 struct nfs4_stateowner *so = resp->cstate.replay_owner;
4439 struct svc_rqst *rqstp = resp->rqstp;
4440 const struct nfsd4_operation *opdesc = op->opdesc;
4441 int post_err_offset;
4442 nfsd4_enc encoder;
4443 __be32 *p;
4444
4445 p = xdr_reserve_space(xdr, 8);
4446 if (!p) {
4447 WARN_ON_ONCE(1);
4448 return;
4449 }
4450 *p++ = cpu_to_be32(op->opnum);
4451 post_err_offset = xdr->buf->len;
4452
4453 if (op->opnum == OP_ILLEGAL)
4454 goto status;
4455 if (op->status && opdesc &&
4456 !(opdesc->op_flags & OP_NONTRIVIAL_ERROR_ENCODE))
4457 goto status;
4458 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
4459 !nfsd4_enc_ops[op->opnum]);
4460 encoder = nfsd4_enc_ops[op->opnum];
4461 op->status = encoder(resp, op->status, &op->u);
4462 if (opdesc && opdesc->op_release)
4463 opdesc->op_release(&op->u);
4464 xdr_commit_encode(xdr);
4465
4466 /* nfsd4_check_resp_size guarantees enough room for error status */
4467 if (!op->status) {
4468 int space_needed = 0;
4469 if (!nfsd4_last_compound_op(rqstp))
4470 space_needed = COMPOUND_ERR_SLACK_SPACE;
4471 op->status = nfsd4_check_resp_size(resp, space_needed);
4472 }
4473 if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) {
4474 struct nfsd4_slot *slot = resp->cstate.slot;
4475
4476 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS)
4477 op->status = nfserr_rep_too_big_to_cache;
4478 else
4479 op->status = nfserr_rep_too_big;
4480 }
4481 if (op->status == nfserr_resource ||
4482 op->status == nfserr_rep_too_big ||
4483 op->status == nfserr_rep_too_big_to_cache) {
4484 /*
4485 * The operation may have already been encoded or
4486 * partially encoded. No op returns anything additional
4487 * in the case of one of these three errors, so we can
4488 * just truncate back to after the status. But it's a
4489 * bug if we had to do this on a non-idempotent op:
4490 */
4491 warn_on_nonidempotent_op(op);
4492 xdr_truncate_encode(xdr, post_err_offset);
4493 }
4494 if (so) {
4495 int len = xdr->buf->len - post_err_offset;
4496
4497 so->so_replay.rp_status = op->status;
4498 so->so_replay.rp_buflen = len;
4499 read_bytes_from_xdr_buf(xdr->buf, post_err_offset,
4500 so->so_replay.rp_buf, len);
4501 }
4502 status:
4503 /* Note that op->status is already in network byte order: */
4504 write_bytes_to_xdr_buf(xdr->buf, post_err_offset - 4, &op->status, 4);
4505 }
4506
4507 /*
4508 * Encode the reply stored in the stateowner reply cache
4509 *
4510 * XDR note: do not encode rp->rp_buflen: the buffer contains the
4511 * previously sent already encoded operation.
4512 */
4513 void
4514 nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op)
4515 {
4516 __be32 *p;
4517 struct nfs4_replay *rp = op->replay;
4518
4519 BUG_ON(!rp);
4520
4521 p = xdr_reserve_space(xdr, 8 + rp->rp_buflen);
4522 if (!p) {
4523 WARN_ON_ONCE(1);
4524 return;
4525 }
4526 *p++ = cpu_to_be32(op->opnum);
4527 *p++ = rp->rp_status; /* already xdr'ed */
4528
4529 p = xdr_encode_opaque_fixed(p, rp->rp_buf, rp->rp_buflen);
4530 }
4531
4532 int
4533 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p)
4534 {
4535 return xdr_ressize_check(rqstp, p);
4536 }
4537
4538 void nfsd4_release_compoundargs(struct svc_rqst *rqstp)
4539 {
4540 struct nfsd4_compoundargs *args = rqstp->rq_argp;
4541
4542 if (args->ops != args->iops) {
4543 kfree(args->ops);
4544 args->ops = args->iops;
4545 }
4546 kfree(args->tmpp);
4547 args->tmpp = NULL;
4548 while (args->to_free) {
4549 struct svcxdr_tmpbuf *tb = args->to_free;
4550 args->to_free = tb->next;
4551 kfree(tb);
4552 }
4553 }
4554
4555 int
4556 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p)
4557 {
4558 struct nfsd4_compoundargs *args = rqstp->rq_argp;
4559
4560 if (rqstp->rq_arg.head[0].iov_len % 4) {
4561 /* client is nuts */
4562 dprintk("%s: compound not properly padded! (peeraddr=%pISc xid=0x%x)",
4563 __func__, svc_addr(rqstp), be32_to_cpu(rqstp->rq_xid));
4564 return 0;
4565 }
4566 args->p = p;
4567 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len;
4568 args->pagelist = rqstp->rq_arg.pages;
4569 args->pagelen = rqstp->rq_arg.page_len;
4570 args->tail = false;
4571 args->tmpp = NULL;
4572 args->to_free = NULL;
4573 args->ops = args->iops;
4574 args->rqstp = rqstp;
4575
4576 return !nfsd4_decode_compound(args);
4577 }
4578
4579 int
4580 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p)
4581 {
4582 /*
4583 * All that remains is to write the tag and operation count...
4584 */
4585 struct nfsd4_compoundres *resp = rqstp->rq_resp;
4586 struct xdr_buf *buf = resp->xdr.buf;
4587
4588 WARN_ON_ONCE(buf->len != buf->head[0].iov_len + buf->page_len +
4589 buf->tail[0].iov_len);
4590
4591 rqstp->rq_next_page = resp->xdr.page_ptr + 1;
4592
4593 p = resp->tagp;
4594 *p++ = htonl(resp->taglen);
4595 memcpy(p, resp->tag, resp->taglen);
4596 p += XDR_QUADLEN(resp->taglen);
4597 *p++ = htonl(resp->opcnt);
4598
4599 nfsd4_sequence_done(resp);
4600 return 1;
4601 }
4602
4603 /*
4604 * Local variables:
4605 * c-basic-offset: 8
4606 * End:
4607 */
Linux kernel stable tree