fs/ksmbd/vfs.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  *   Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org>
   4  *   Copyright (C) 2018 Samsung Electronics Co., Ltd.
   5  */
   6
   7 #include <linux/kernel.h>
   8 #include <linux/fs.h>
   9 #include <linux/uaccess.h>
  10 #include <linux/backing-dev.h>
  11 #include <linux/writeback.h>
  12 #include <linux/xattr.h>
  13 #include <linux/falloc.h>
  14 #include <linux/fsnotify.h>
  15 #include <linux/dcache.h>
  16 #include <linux/slab.h>
  17 #include <linux/vmalloc.h>
  18 #include <linux/sched/xacct.h>
  19 #include <linux/crc32c.h>
  20
  21 #include "../internal.h"        /* for vfs_path_lookup */
  22
  23 #include "glob.h"
  24 #include "oplock.h"
  25 #include "connection.h"
  26 #include "vfs.h"
  27 #include "vfs_cache.h"
  28 #include "smbacl.h"
  29 #include "ndr.h"
  30 #include "auth.h"
  31 #include "misc.h"
  32
  33 #include "smb_common.h"
  34 #include "mgmt/share_config.h"
  35 #include "mgmt/tree_connect.h"
  36 #include "mgmt/user_session.h"
  37 #include "mgmt/user_config.h"
  38
  39 static char *extract_last_component(char *path)
  40 {
  41         char *p = strrchr(path, '/');
  42
  43         if (p && p[1] != '\0') {
  44                 *p = '\0';
  45                 p++;
  46         } else {
  47                 p = NULL;
  48         }
  49         return p;
  50 }
  51
  52 static void ksmbd_vfs_inherit_owner(struct ksmbd_work *work,
  53                                     struct inode *parent_inode,
  54                                     struct inode *inode)
  55 {
  56         if (!test_share_config_flag(work->tcon->share_conf,
  57                                     KSMBD_SHARE_FLAG_INHERIT_OWNER))
  58                 return;
  59
  60         i_uid_write(inode, i_uid_read(parent_inode));
  61 }
  62
  63 /**
  64  * ksmbd_vfs_lock_parent() - lock parent dentry if it is stable
  65  *
  66  * the parent dentry got by dget_parent or @parent could be
  67  * unstable, we try to lock a parent inode and lookup the
  68  * child dentry again.
  69  *
  70  * the reference count of @parent isn't incremented.
  71  */
  72 int ksmbd_vfs_lock_parent(struct user_namespace *user_ns, struct dentry *parent,
  73                           struct dentry *child)
  74 {
  75         struct dentry *dentry;
  76         int ret = 0;
  77
  78         inode_lock_nested(d_inode(parent), I_MUTEX_PARENT);
  79         dentry = lookup_one(user_ns, child->d_name.name, parent,
  80                             child->d_name.len);
  81         if (IS_ERR(dentry)) {
  82                 ret = PTR_ERR(dentry);
  83                 goto out_err;
  84         }
  85
  86         if (dentry != child) {
  87                 ret = -ESTALE;
  88                 dput(dentry);
  89                 goto out_err;
  90         }
  91
  92         dput(dentry);
  93         return 0;
  94 out_err:
  95         inode_unlock(d_inode(parent));
  96         return ret;
  97 }
  98
  99 int ksmbd_vfs_may_delete(struct user_namespace *user_ns,
 100                          struct dentry *dentry)
 101 {
 102         struct dentry *parent;
 103         int ret;
 104
 105         parent = dget_parent(dentry);
 106         ret = ksmbd_vfs_lock_parent(user_ns, parent, dentry);
 107         if (ret) {
 108                 dput(parent);
 109                 return ret;
 110         }
 111
 112         ret = inode_permission(user_ns, d_inode(parent),
 113                                MAY_EXEC | MAY_WRITE);
 114
 115         inode_unlock(d_inode(parent));
 116         dput(parent);
 117         return ret;
 118 }
 119
 120 int ksmbd_vfs_query_maximal_access(struct user_namespace *user_ns,
 121                                    struct dentry *dentry, __le32 *daccess)
 122 {
 123         struct dentry *parent;
 124         int ret = 0;
 125
 126         *daccess = cpu_to_le32(FILE_READ_ATTRIBUTES | READ_CONTROL);
 127
 128         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_WRITE))
 129                 *daccess |= cpu_to_le32(WRITE_DAC | WRITE_OWNER | SYNCHRONIZE |
 130                                 FILE_WRITE_DATA | FILE_APPEND_DATA |
 131                                 FILE_WRITE_EA | FILE_WRITE_ATTRIBUTES |
 132                                 FILE_DELETE_CHILD);
 133
 134         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_READ))
 135                 *daccess |= FILE_READ_DATA_LE | FILE_READ_EA_LE;
 136
 137         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_EXEC))
 138                 *daccess |= FILE_EXECUTE_LE;
 139
 140         parent = dget_parent(dentry);
 141         ret = ksmbd_vfs_lock_parent(user_ns, parent, dentry);
 142         if (ret) {
 143                 dput(parent);
 144                 return ret;
 145         }
 146
 147         if (!inode_permission(user_ns, d_inode(parent), MAY_EXEC | MAY_WRITE))
 148                 *daccess |= FILE_DELETE_LE;
 149
 150         inode_unlock(d_inode(parent));
 151         dput(parent);
 152         return ret;
 153 }
 154
 155 /**
 156  * ksmbd_vfs_create() - vfs helper for smb create file
 157  * @work:       work
 158  * @name:       file name that is relative to share
 159  * @mode:       file create mode
 160  *
 161  * Return:      0 on success, otherwise error
 162  */
 163 int ksmbd_vfs_create(struct ksmbd_work *work, const char *name, umode_t mode)
 164 {
 165         struct path path;
 166         struct dentry *dentry;
 167         int err;
 168
 169         dentry = ksmbd_vfs_kern_path_create(work, name,
 170                                             LOOKUP_NO_SYMLINKS, &path);
 171         if (IS_ERR(dentry)) {
 172                 err = PTR_ERR(dentry);
 173                 if (err != -ENOENT)
 174                         pr_err("path create failed for %s, err %d\n",
 175                                name, err);
 176                 return err;
 177         }
 178
 179         mode |= S_IFREG;
 180         err = vfs_create(mnt_user_ns(path.mnt), d_inode(path.dentry),
 181                          dentry, mode, true);
 182         if (!err) {
 183                 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry),
 184                                         d_inode(dentry));
 185         } else {
 186                 pr_err("File(%s): creation failed (err:%d)\n", name, err);
 187         }
 188         done_path_create(&path, dentry);
 189         return err;
 190 }
 191
 192 /**
 193  * ksmbd_vfs_mkdir() - vfs helper for smb create directory
 194  * @work:       work
 195  * @name:       directory name that is relative to share
 196  * @mode:       directory create mode
 197  *
 198  * Return:      0 on success, otherwise error
 199  */
 200 int ksmbd_vfs_mkdir(struct ksmbd_work *work, const char *name, umode_t mode)
 201 {
 202         struct user_namespace *user_ns;
 203         struct path path;
 204         struct dentry *dentry;
 205         int err;
 206
 207         dentry = ksmbd_vfs_kern_path_create(work, name,
 208                                             LOOKUP_NO_SYMLINKS | LOOKUP_DIRECTORY,
 209                                             &path);
 210         if (IS_ERR(dentry)) {
 211                 err = PTR_ERR(dentry);
 212                 if (err != -EEXIST)
 213                         ksmbd_debug(VFS, "path create failed for %s, err %d\n",
 214                                     name, err);
 215                 return err;
 216         }
 217
 218         user_ns = mnt_user_ns(path.mnt);
 219         mode |= S_IFDIR;
 220         err = vfs_mkdir(user_ns, d_inode(path.dentry), dentry, mode);
 221         if (err) {
 222                 goto out;
 223         } else if (d_unhashed(dentry)) {
 224                 struct dentry *d;
 225
 226                 d = lookup_one(user_ns, dentry->d_name.name, dentry->d_parent,
 227                                dentry->d_name.len);
 228                 if (IS_ERR(d)) {
 229                         err = PTR_ERR(d);
 230                         goto out;
 231                 }
 232                 if (unlikely(d_is_negative(d))) {
 233                         dput(d);
 234                         err = -ENOENT;
 235                         goto out;
 236                 }
 237
 238                 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), d_inode(d));
 239                 dput(d);
 240         }
 241 out:
 242         done_path_create(&path, dentry);
 243         if (err)
 244                 pr_err("mkdir(%s): creation failed (err:%d)\n", name, err);
 245         return err;
 246 }
 247
 248 static ssize_t ksmbd_vfs_getcasexattr(struct user_namespace *user_ns,
 249                                       struct dentry *dentry, char *attr_name,
 250                                       int attr_name_len, char **attr_value)
 251 {
 252         char *name, *xattr_list = NULL;
 253         ssize_t value_len = -ENOENT, xattr_list_len;
 254
 255         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
 256         if (xattr_list_len <= 0)
 257                 goto out;
 258
 259         for (name = xattr_list; name - xattr_list < xattr_list_len;
 260                         name += strlen(name) + 1) {
 261                 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
 262                 if (strncasecmp(attr_name, name, attr_name_len))
 263                         continue;
 264
 265                 value_len = ksmbd_vfs_getxattr(user_ns,
 266                                                dentry,
 267                                                name,
 268                                                attr_value);
 269                 if (value_len < 0)
 270                         pr_err("failed to get xattr in file\n");
 271                 break;
 272         }
 273
 274 out:
 275         kvfree(xattr_list);
 276         return value_len;
 277 }
 278
 279 static int ksmbd_vfs_stream_read(struct ksmbd_file *fp, char *buf, loff_t *pos,
 280                                  size_t count)
 281 {
 282         ssize_t v_len;
 283         char *stream_buf = NULL;
 284
 285         ksmbd_debug(VFS, "read stream data pos : %llu, count : %zd\n",
 286                     *pos, count);
 287
 288         v_len = ksmbd_vfs_getcasexattr(file_mnt_user_ns(fp->filp),
 289                                        fp->filp->f_path.dentry,
 290                                        fp->stream.name,
 291                                        fp->stream.size,
 292                                        &stream_buf);
 293         if ((int)v_len <= 0)
 294                 return (int)v_len;
 295
 296         if (v_len <= *pos) {
 297                 count = -EINVAL;
 298                 goto free_buf;
 299         }
 300
 301         if (v_len - *pos < count)
 302                 count = v_len - *pos;
 303
 304         memcpy(buf, &stream_buf[*pos], count);
 305
 306 free_buf:
 307         kvfree(stream_buf);
 308         return count;
 309 }
 310
 311 /**
 312  * check_lock_range() - vfs helper for smb byte range file locking
 313  * @filp:       the file to apply the lock to
 314  * @start:      lock start byte offset
 315  * @end:        lock end byte offset
 316  * @type:       byte range type read/write
 317  *
 318  * Return:      0 on success, otherwise error
 319  */
 320 static int check_lock_range(struct file *filp, loff_t start, loff_t end,
 321                             unsigned char type)
 322 {
 323         struct file_lock *flock;
 324         struct file_lock_context *ctx = file_inode(filp)->i_flctx;
 325         int error = 0;
 326
 327         if (!ctx || list_empty_careful(&ctx->flc_posix))
 328                 return 0;
 329
 330         spin_lock(&ctx->flc_lock);
 331         list_for_each_entry(flock, &ctx->flc_posix, fl_list) {
 332                 /* check conflict locks */
 333                 if (flock->fl_end >= start && end >= flock->fl_start) {
 334                         if (flock->fl_type == F_RDLCK) {
 335                                 if (type == WRITE) {
 336                                         pr_err("not allow write by shared lock\n");
 337                                         error = 1;
 338                                         goto out;
 339                                 }
 340                         } else if (flock->fl_type == F_WRLCK) {
 341                                 /* check owner in lock */
 342                                 if (flock->fl_file != filp) {
 343                                         error = 1;
 344                                         pr_err("not allow rw access by exclusive lock from other opens\n");
 345                                         goto out;
 346                                 }
 347                         }
 348                 }
 349         }
 350 out:
 351         spin_unlock(&ctx->flc_lock);
 352         return error;
 353 }
 354
 355 /**
 356  * ksmbd_vfs_read() - vfs helper for smb file read
 357  * @work:       smb work
 358  * @fid:        file id of open file
 359  * @count:      read byte count
 360  * @pos:        file pos
 361  *
 362  * Return:      number of read bytes on success, otherwise error
 363  */
 364 int ksmbd_vfs_read(struct ksmbd_work *work, struct ksmbd_file *fp, size_t count,
 365                    loff_t *pos)
 366 {
 367         struct file *filp = fp->filp;
 368         ssize_t nbytes = 0;
 369         char *rbuf = work->aux_payload_buf;
 370         struct inode *inode = file_inode(filp);
 371
 372         if (S_ISDIR(inode->i_mode))
 373                 return -EISDIR;
 374
 375         if (unlikely(count == 0))
 376                 return 0;
 377
 378         if (work->conn->connection_type) {
 379                 if (!(fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
 380                         pr_err("no right to read(%pD)\n", fp->filp);
 381                         return -EACCES;
 382                 }
 383         }
 384
 385         if (ksmbd_stream_fd(fp))
 386                 return ksmbd_vfs_stream_read(fp, rbuf, pos, count);
 387
 388         if (!work->tcon->posix_extensions) {
 389                 int ret;
 390
 391                 ret = check_lock_range(filp, *pos, *pos + count - 1, READ);
 392                 if (ret) {
 393                         pr_err("unable to read due to lock\n");
 394                         return -EAGAIN;
 395                 }
 396         }
 397
 398         nbytes = kernel_read(filp, rbuf, count, pos);
 399         if (nbytes < 0) {
 400                 pr_err("smb read failed, err = %zd\n", nbytes);
 401                 return nbytes;
 402         }
 403
 404         filp->f_pos = *pos;
 405         return nbytes;
 406 }
 407
 408 static int ksmbd_vfs_stream_write(struct ksmbd_file *fp, char *buf, loff_t *pos,
 409                                   size_t count)
 410 {
 411         char *stream_buf = NULL, *wbuf;
 412         struct user_namespace *user_ns = file_mnt_user_ns(fp->filp);
 413         size_t size, v_len;
 414         int err = 0;
 415
 416         ksmbd_debug(VFS, "write stream data pos : %llu, count : %zd\n",
 417                     *pos, count);
 418
 419         size = *pos + count;
 420         if (size > XATTR_SIZE_MAX) {
 421                 size = XATTR_SIZE_MAX;
 422                 count = (*pos + count) - XATTR_SIZE_MAX;
 423         }
 424
 425         v_len = ksmbd_vfs_getcasexattr(user_ns,
 426                                        fp->filp->f_path.dentry,
 427                                        fp->stream.name,
 428                                        fp->stream.size,
 429                                        &stream_buf);
 430         if ((int)v_len < 0) {
 431                 pr_err("not found stream in xattr : %zd\n", v_len);
 432                 err = (int)v_len;
 433                 goto out;
 434         }
 435
 436         if (v_len < size) {
 437                 wbuf = kvmalloc(size, GFP_KERNEL | __GFP_ZERO);
 438                 if (!wbuf) {
 439                         err = -ENOMEM;
 440                         goto out;
 441                 }
 442
 443                 if (v_len > 0)
 444                         memcpy(wbuf, stream_buf, v_len);
 445                 kvfree(stream_buf);
 446                 stream_buf = wbuf;
 447         }
 448
 449         memcpy(&stream_buf[*pos], buf, count);
 450
 451         err = ksmbd_vfs_setxattr(user_ns,
 452                                  fp->filp->f_path.dentry,
 453                                  fp->stream.name,
 454                                  (void *)stream_buf,
 455                                  size,
 456                                  0);
 457         if (err < 0)
 458                 goto out;
 459
 460         fp->filp->f_pos = *pos;
 461         err = 0;
 462 out:
 463         kvfree(stream_buf);
 464         return err;
 465 }
 466
 467 /**
 468  * ksmbd_vfs_write() - vfs helper for smb file write
 469  * @work:       work
 470  * @fid:        file id of open file
 471  * @buf:        buf containing data for writing
 472  * @count:      read byte count
 473  * @pos:        file pos
 474  * @sync:       fsync after write
 475  * @written:    number of bytes written
 476  *
 477  * Return:      0 on success, otherwise error
 478  */
 479 int ksmbd_vfs_write(struct ksmbd_work *work, struct ksmbd_file *fp,
 480                     char *buf, size_t count, loff_t *pos, bool sync,
 481                     ssize_t *written)
 482 {
 483         struct file *filp;
 484         loff_t  offset = *pos;
 485         int err = 0;
 486
 487         if (work->conn->connection_type) {
 488                 if (!(fp->daccess & FILE_WRITE_DATA_LE)) {
 489                         pr_err("no right to write(%pD)\n", fp->filp);
 490                         err = -EACCES;
 491                         goto out;
 492                 }
 493         }
 494
 495         filp = fp->filp;
 496
 497         if (ksmbd_stream_fd(fp)) {
 498                 err = ksmbd_vfs_stream_write(fp, buf, pos, count);
 499                 if (!err)
 500                         *written = count;
 501                 goto out;
 502         }
 503
 504         if (!work->tcon->posix_extensions) {
 505                 err = check_lock_range(filp, *pos, *pos + count - 1, WRITE);
 506                 if (err) {
 507                         pr_err("unable to write due to lock\n");
 508                         err = -EAGAIN;
 509                         goto out;
 510                 }
 511         }
 512
 513         /* Do we need to break any of a levelII oplock? */
 514         smb_break_all_levII_oplock(work, fp, 1);
 515
 516         err = kernel_write(filp, buf, count, pos);
 517         if (err < 0) {
 518                 ksmbd_debug(VFS, "smb write failed, err = %d\n", err);
 519                 goto out;
 520         }
 521
 522         filp->f_pos = *pos;
 523         *written = err;
 524         err = 0;
 525         if (sync) {
 526                 err = vfs_fsync_range(filp, offset, offset + *written, 0);
 527                 if (err < 0)
 528                         pr_err("fsync failed for filename = %pD, err = %d\n",
 529                                fp->filp, err);
 530         }
 531
 532 out:
 533         return err;
 534 }
 535
 536 /**
 537  * ksmbd_vfs_getattr() - vfs helper for smb getattr
 538  * @work:       work
 539  * @fid:        file id of open file
 540  * @attrs:      inode attributes
 541  *
 542  * Return:      0 on success, otherwise error
 543  */
 544 int ksmbd_vfs_getattr(const struct path *path, struct kstat *stat)
 545 {
 546         int err;
 547
 548         err = vfs_getattr(path, stat, STATX_BTIME, AT_STATX_SYNC_AS_STAT);
 549         if (err)
 550                 pr_err("getattr failed, err %d\n", err);
 551         return err;
 552 }
 553
 554 /**
 555  * ksmbd_vfs_fsync() - vfs helper for smb fsync
 556  * @work:       work
 557  * @fid:        file id of open file
 558  *
 559  * Return:      0 on success, otherwise error
 560  */
 561 int ksmbd_vfs_fsync(struct ksmbd_work *work, u64 fid, u64 p_id)
 562 {
 563         struct ksmbd_file *fp;
 564         int err;
 565
 566         fp = ksmbd_lookup_fd_slow(work, fid, p_id);
 567         if (!fp) {
 568                 pr_err("failed to get filp for fid %llu\n", fid);
 569                 return -ENOENT;
 570         }
 571         err = vfs_fsync(fp->filp, 0);
 572         if (err < 0)
 573                 pr_err("smb fsync failed, err = %d\n", err);
 574         ksmbd_fd_put(work, fp);
 575         return err;
 576 }
 577
 578 /**
 579  * ksmbd_vfs_remove_file() - vfs helper for smb rmdir or unlink
 580  * @name:       directory or file name that is relative to share
 581  *
 582  * Return:      0 on success, otherwise error
 583  */
 584 int ksmbd_vfs_remove_file(struct ksmbd_work *work, char *name)
 585 {
 586         struct user_namespace *user_ns;
 587         struct path path;
 588         struct dentry *parent;
 589         int err;
 590
 591         if (ksmbd_override_fsids(work))
 592                 return -ENOMEM;
 593
 594         err = ksmbd_vfs_kern_path(work, name, LOOKUP_NO_SYMLINKS, &path, false);
 595         if (err) {
 596                 ksmbd_debug(VFS, "can't get %s, err %d\n", name, err);
 597                 ksmbd_revert_fsids(work);
 598                 return err;
 599         }
 600
 601         user_ns = mnt_user_ns(path.mnt);
 602         parent = dget_parent(path.dentry);
 603         err = ksmbd_vfs_lock_parent(user_ns, parent, path.dentry);
 604         if (err) {
 605                 dput(parent);
 606                 path_put(&path);
 607                 ksmbd_revert_fsids(work);
 608                 return err;
 609         }
 610
 611         if (!d_inode(path.dentry)->i_nlink) {
 612                 err = -ENOENT;
 613                 goto out_err;
 614         }
 615
 616         if (S_ISDIR(d_inode(path.dentry)->i_mode)) {
 617                 err = vfs_rmdir(user_ns, d_inode(parent), path.dentry);
 618                 if (err && err != -ENOTEMPTY)
 619                         ksmbd_debug(VFS, "%s: rmdir failed, err %d\n", name,
 620                                     err);
 621         } else {
 622                 err = vfs_unlink(user_ns, d_inode(parent), path.dentry, NULL);
 623                 if (err)
 624                         ksmbd_debug(VFS, "%s: unlink failed, err %d\n", name,
 625                                     err);
 626         }
 627
 628 out_err:
 629         inode_unlock(d_inode(parent));
 630         dput(parent);
 631         path_put(&path);
 632         ksmbd_revert_fsids(work);
 633         return err;
 634 }
 635
 636 /**
 637  * ksmbd_vfs_link() - vfs helper for creating smb hardlink
 638  * @oldname:    source file name
 639  * @newname:    hardlink name that is relative to share
 640  *
 641  * Return:      0 on success, otherwise error
 642  */
 643 int ksmbd_vfs_link(struct ksmbd_work *work, const char *oldname,
 644                    const char *newname)
 645 {
 646         struct path oldpath, newpath;
 647         struct dentry *dentry;
 648         int err;
 649
 650         if (ksmbd_override_fsids(work))
 651                 return -ENOMEM;
 652
 653         err = kern_path(oldname, LOOKUP_NO_SYMLINKS, &oldpath);
 654         if (err) {
 655                 pr_err("cannot get linux path for %s, err = %d\n",
 656                        oldname, err);
 657                 goto out1;
 658         }
 659
 660         dentry = ksmbd_vfs_kern_path_create(work, newname,
 661                                             LOOKUP_NO_SYMLINKS | LOOKUP_REVAL,
 662                                             &newpath);
 663         if (IS_ERR(dentry)) {
 664                 err = PTR_ERR(dentry);
 665                 pr_err("path create err for %s, err %d\n", newname, err);
 666                 goto out2;
 667         }
 668
 669         err = -EXDEV;
 670         if (oldpath.mnt != newpath.mnt) {
 671                 pr_err("vfs_link failed err %d\n", err);
 672                 goto out3;
 673         }
 674
 675         err = vfs_link(oldpath.dentry, mnt_user_ns(newpath.mnt),
 676                        d_inode(newpath.dentry),
 677                        dentry, NULL);
 678         if (err)
 679                 ksmbd_debug(VFS, "vfs_link failed err %d\n", err);
 680
 681 out3:
 682         done_path_create(&newpath, dentry);
 683 out2:
 684         path_put(&oldpath);
 685 out1:
 686         ksmbd_revert_fsids(work);
 687         return err;
 688 }
 689
 690 static int ksmbd_validate_entry_in_use(struct dentry *src_dent)
 691 {
 692         struct dentry *dst_dent;
 693
 694         spin_lock(&src_dent->d_lock);
 695         list_for_each_entry(dst_dent, &src_dent->d_subdirs, d_child) {
 696                 struct ksmbd_file *child_fp;
 697
 698                 if (d_really_is_negative(dst_dent))
 699                         continue;
 700
 701                 child_fp = ksmbd_lookup_fd_inode(d_inode(dst_dent));
 702                 if (child_fp) {
 703                         spin_unlock(&src_dent->d_lock);
 704                         ksmbd_debug(VFS, "Forbid rename, sub file/dir is in use\n");
 705                         return -EACCES;
 706                 }
 707         }
 708         spin_unlock(&src_dent->d_lock);
 709
 710         return 0;
 711 }
 712
 713 static int __ksmbd_vfs_rename(struct ksmbd_work *work,
 714                               struct user_namespace *src_user_ns,
 715                               struct dentry *src_dent_parent,
 716                               struct dentry *src_dent,
 717                               struct user_namespace *dst_user_ns,
 718                               struct dentry *dst_dent_parent,
 719                               struct dentry *trap_dent,
 720                               char *dst_name)
 721 {
 722         struct dentry *dst_dent;
 723         int err;
 724
 725         if (!work->tcon->posix_extensions) {
 726                 err = ksmbd_validate_entry_in_use(src_dent);
 727                 if (err)
 728                         return err;
 729         }
 730
 731         if (d_really_is_negative(src_dent_parent))
 732                 return -ENOENT;
 733         if (d_really_is_negative(dst_dent_parent))
 734                 return -ENOENT;
 735         if (d_really_is_negative(src_dent))
 736                 return -ENOENT;
 737         if (src_dent == trap_dent)
 738                 return -EINVAL;
 739
 740         if (ksmbd_override_fsids(work))
 741                 return -ENOMEM;
 742
 743         dst_dent = lookup_one(dst_user_ns, dst_name, dst_dent_parent,
 744                               strlen(dst_name));
 745         err = PTR_ERR(dst_dent);
 746         if (IS_ERR(dst_dent)) {
 747                 pr_err("lookup failed %s [%d]\n", dst_name, err);
 748                 goto out;
 749         }
 750
 751         err = -ENOTEMPTY;
 752         if (dst_dent != trap_dent && !d_really_is_positive(dst_dent)) {
 753                 struct renamedata rd = {
 754                         .old_mnt_userns = src_user_ns,
 755                         .old_dir        = d_inode(src_dent_parent),
 756                         .old_dentry     = src_dent,
 757                         .new_mnt_userns = dst_user_ns,
 758                         .new_dir        = d_inode(dst_dent_parent),
 759                         .new_dentry     = dst_dent,
 760                 };
 761                 err = vfs_rename(&rd);
 762         }
 763         if (err)
 764                 pr_err("vfs_rename failed err %d\n", err);
 765         if (dst_dent)
 766                 dput(dst_dent);
 767 out:
 768         ksmbd_revert_fsids(work);
 769         return err;
 770 }
 771
 772 int ksmbd_vfs_fp_rename(struct ksmbd_work *work, struct ksmbd_file *fp,
 773                         char *newname)
 774 {
 775         struct user_namespace *user_ns;
 776         struct path dst_path;
 777         struct dentry *src_dent_parent, *dst_dent_parent;
 778         struct dentry *src_dent, *trap_dent, *src_child;
 779         char *dst_name;
 780         int err;
 781
 782         dst_name = extract_last_component(newname);
 783         if (!dst_name) {
 784                 dst_name = newname;
 785                 newname = "";
 786         }
 787
 788         src_dent_parent = dget_parent(fp->filp->f_path.dentry);
 789         src_dent = fp->filp->f_path.dentry;
 790
 791         err = ksmbd_vfs_kern_path(work, newname,
 792                                   LOOKUP_NO_SYMLINKS | LOOKUP_DIRECTORY,
 793                                   &dst_path, false);
 794         if (err) {
 795                 ksmbd_debug(VFS, "Cannot get path for %s [%d]\n", newname, err);
 796                 goto out;
 797         }
 798         dst_dent_parent = dst_path.dentry;
 799
 800         trap_dent = lock_rename(src_dent_parent, dst_dent_parent);
 801         dget(src_dent);
 802         dget(dst_dent_parent);
 803         user_ns = file_mnt_user_ns(fp->filp);
 804         src_child = lookup_one(user_ns, src_dent->d_name.name, src_dent_parent,
 805                                src_dent->d_name.len);
 806         if (IS_ERR(src_child)) {
 807                 err = PTR_ERR(src_child);
 808                 goto out_lock;
 809         }
 810
 811         if (src_child != src_dent) {
 812                 err = -ESTALE;
 813                 dput(src_child);
 814                 goto out_lock;
 815         }
 816         dput(src_child);
 817
 818         err = __ksmbd_vfs_rename(work,
 819                                  user_ns,
 820                                  src_dent_parent,
 821                                  src_dent,
 822                                  mnt_user_ns(dst_path.mnt),
 823                                  dst_dent_parent,
 824                                  trap_dent,
 825                                  dst_name);
 826 out_lock:
 827         dput(src_dent);
 828         dput(dst_dent_parent);
 829         unlock_rename(src_dent_parent, dst_dent_parent);
 830         path_put(&dst_path);
 831 out:
 832         dput(src_dent_parent);
 833         return err;
 834 }
 835
 836 /**
 837  * ksmbd_vfs_truncate() - vfs helper for smb file truncate
 838  * @work:       work
 839  * @fid:        file id of old file
 840  * @size:       truncate to given size
 841  *
 842  * Return:      0 on success, otherwise error
 843  */
 844 int ksmbd_vfs_truncate(struct ksmbd_work *work,
 845                        struct ksmbd_file *fp, loff_t size)
 846 {
 847         int err = 0;
 848         struct file *filp;
 849
 850         filp = fp->filp;
 851
 852         /* Do we need to break any of a levelII oplock? */
 853         smb_break_all_levII_oplock(work, fp, 1);
 854
 855         if (!work->tcon->posix_extensions) {
 856                 struct inode *inode = file_inode(filp);
 857
 858                 if (size < inode->i_size) {
 859                         err = check_lock_range(filp, size,
 860                                                inode->i_size - 1, WRITE);
 861                 } else {
 862                         err = check_lock_range(filp, inode->i_size,
 863                                                size - 1, WRITE);
 864                 }
 865
 866                 if (err) {
 867                         pr_err("failed due to lock\n");
 868                         return -EAGAIN;
 869                 }
 870         }
 871
 872         err = vfs_truncate(&filp->f_path, size);
 873         if (err)
 874                 pr_err("truncate failed, err %d\n", err);
 875         return err;
 876 }
 877
 878 /**
 879  * ksmbd_vfs_listxattr() - vfs helper for smb list extended attributes
 880  * @dentry:     dentry of file for listing xattrs
 881  * @list:       destination buffer
 882  * @size:       destination buffer length
 883  *
 884  * Return:      xattr list length on success, otherwise error
 885  */
 886 ssize_t ksmbd_vfs_listxattr(struct dentry *dentry, char **list)
 887 {
 888         ssize_t size;
 889         char *vlist = NULL;
 890
 891         size = vfs_listxattr(dentry, NULL, 0);
 892         if (size <= 0)
 893                 return size;
 894
 895         vlist = kvmalloc(size, GFP_KERNEL | __GFP_ZERO);
 896         if (!vlist)
 897                 return -ENOMEM;
 898
 899         *list = vlist;
 900         size = vfs_listxattr(dentry, vlist, size);
 901         if (size < 0) {
 902                 ksmbd_debug(VFS, "listxattr failed\n");
 903                 kvfree(vlist);
 904                 *list = NULL;
 905         }
 906
 907         return size;
 908 }
 909
 910 static ssize_t ksmbd_vfs_xattr_len(struct user_namespace *user_ns,
 911                                    struct dentry *dentry, char *xattr_name)
 912 {
 913         return vfs_getxattr(user_ns, dentry, xattr_name, NULL, 0);
 914 }
 915
 916 /**
 917  * ksmbd_vfs_getxattr() - vfs helper for smb get extended attributes value
 918  * @user_ns:    user namespace
 919  * @dentry:     dentry of file for getting xattrs
 920  * @xattr_name: name of xattr name to query
 921  * @xattr_buf:  destination buffer xattr value
 922  *
 923  * Return:      read xattr value length on success, otherwise error
 924  */
 925 ssize_t ksmbd_vfs_getxattr(struct user_namespace *user_ns,
 926                            struct dentry *dentry,
 927                            char *xattr_name, char **xattr_buf)
 928 {
 929         ssize_t xattr_len;
 930         char *buf;
 931
 932         *xattr_buf = NULL;
 933         xattr_len = ksmbd_vfs_xattr_len(user_ns, dentry, xattr_name);
 934         if (xattr_len < 0)
 935                 return xattr_len;
 936
 937         buf = kmalloc(xattr_len + 1, GFP_KERNEL);
 938         if (!buf)
 939                 return -ENOMEM;
 940
 941         xattr_len = vfs_getxattr(user_ns, dentry, xattr_name,
 942                                  (void *)buf, xattr_len);
 943         if (xattr_len > 0)
 944                 *xattr_buf = buf;
 945         else
 946                 kfree(buf);
 947         return xattr_len;
 948 }
 949
 950 /**
 951  * ksmbd_vfs_setxattr() - vfs helper for smb set extended attributes value
 952  * @user_ns:    user namespace
 953  * @dentry:     dentry to set XATTR at
 954  * @name:       xattr name for setxattr
 955  * @value:      xattr value to set
 956  * @size:       size of xattr value
 957  * @flags:      destination buffer length
 958  *
 959  * Return:      0 on success, otherwise error
 960  */
 961 int ksmbd_vfs_setxattr(struct user_namespace *user_ns,
 962                        struct dentry *dentry, const char *attr_name,
 963                        void *attr_value, size_t attr_size, int flags)
 964 {
 965         int err;
 966
 967         err = vfs_setxattr(user_ns,
 968                            dentry,
 969                            attr_name,
 970                            attr_value,
 971                            attr_size,
 972                            flags);
 973         if (err)
 974                 ksmbd_debug(VFS, "setxattr failed, err %d\n", err);
 975         return err;
 976 }
 977
 978 /**
 979  * ksmbd_vfs_set_fadvise() - convert smb IO caching options to linux options
 980  * @filp:       file pointer for IO
 981  * @options:    smb IO options
 982  */
 983 void ksmbd_vfs_set_fadvise(struct file *filp, __le32 option)
 984 {
 985         struct address_space *mapping;
 986
 987         mapping = filp->f_mapping;
 988
 989         if (!option || !mapping)
 990                 return;
 991
 992         if (option & FILE_WRITE_THROUGH_LE) {
 993                 filp->f_flags |= O_SYNC;
 994         } else if (option & FILE_SEQUENTIAL_ONLY_LE) {
 995                 filp->f_ra.ra_pages = inode_to_bdi(mapping->host)->ra_pages * 2;
 996                 spin_lock(&filp->f_lock);
 997                 filp->f_mode &= ~FMODE_RANDOM;
 998                 spin_unlock(&filp->f_lock);
 999         } else if (option & FILE_RANDOM_ACCESS_LE) {
1000                 spin_lock(&filp->f_lock);
1001                 filp->f_mode |= FMODE_RANDOM;
1002                 spin_unlock(&filp->f_lock);
1003         }
1004 }
1005
1006 int ksmbd_vfs_zero_data(struct ksmbd_work *work, struct ksmbd_file *fp,
1007                         loff_t off, loff_t len)
1008 {
1009         smb_break_all_levII_oplock(work, fp, 1);
1010         if (fp->f_ci->m_fattr & FILE_ATTRIBUTE_SPARSE_FILE_LE)
1011                 return vfs_fallocate(fp->filp,
1012                                      FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE,
1013                                      off, len);
1014
1015         return vfs_fallocate(fp->filp,
1016                              FALLOC_FL_ZERO_RANGE | FALLOC_FL_KEEP_SIZE,
1017                              off, len);
1018 }
1019
1020 int ksmbd_vfs_fqar_lseek(struct ksmbd_file *fp, loff_t start, loff_t length,
1021                          struct file_allocated_range_buffer *ranges,
1022                          unsigned int in_count, unsigned int *out_count)
1023 {
1024         struct file *f = fp->filp;
1025         struct inode *inode = file_inode(fp->filp);
1026         loff_t maxbytes = (u64)inode->i_sb->s_maxbytes, end;
1027         loff_t extent_start, extent_end;
1028         int ret = 0;
1029
1030         if (start > maxbytes)
1031                 return -EFBIG;
1032
1033         if (!in_count)
1034                 return 0;
1035
1036         /*
1037          * Shrink request scope to what the fs can actually handle.
1038          */
1039         if (length > maxbytes || (maxbytes - length) < start)
1040                 length = maxbytes - start;
1041
1042         if (start + length > inode->i_size)
1043                 length = inode->i_size - start;
1044
1045         *out_count = 0;
1046         end = start + length;
1047         while (start < end && *out_count < in_count) {
1048                 extent_start = vfs_llseek(f, start, SEEK_DATA);
1049                 if (extent_start < 0) {
1050                         if (extent_start != -ENXIO)
1051                                 ret = (int)extent_start;
1052                         break;
1053                 }
1054
1055                 if (extent_start >= end)
1056                         break;
1057
1058                 extent_end = vfs_llseek(f, extent_start, SEEK_HOLE);
1059                 if (extent_end < 0) {
1060                         if (extent_end != -ENXIO)
1061                                 ret = (int)extent_end;
1062                         break;
1063                 } else if (extent_start >= extent_end) {
1064                         break;
1065                 }
1066
1067                 ranges[*out_count].file_offset = cpu_to_le64(extent_start);
1068                 ranges[(*out_count)++].length =
1069                         cpu_to_le64(min(extent_end, end) - extent_start);
1070
1071                 start = extent_end;
1072         }
1073
1074         return ret;
1075 }
1076
1077 int ksmbd_vfs_remove_xattr(struct user_namespace *user_ns,
1078                            struct dentry *dentry, char *attr_name)
1079 {
1080         return vfs_removexattr(user_ns, dentry, attr_name);
1081 }
1082
1083 int ksmbd_vfs_unlink(struct user_namespace *user_ns,
1084                      struct dentry *dir, struct dentry *dentry)
1085 {
1086         int err = 0;
1087
1088         err = ksmbd_vfs_lock_parent(user_ns, dir, dentry);
1089         if (err)
1090                 return err;
1091         dget(dentry);
1092
1093         if (S_ISDIR(d_inode(dentry)->i_mode))
1094                 err = vfs_rmdir(user_ns, d_inode(dir), dentry);
1095         else
1096                 err = vfs_unlink(user_ns, d_inode(dir), dentry, NULL);
1097
1098         dput(dentry);
1099         inode_unlock(d_inode(dir));
1100         if (err)
1101                 ksmbd_debug(VFS, "failed to delete, err %d\n", err);
1102
1103         return err;
1104 }
1105
1106 static bool __dir_empty(struct dir_context *ctx, const char *name, int namlen,
1107                        loff_t offset, u64 ino, unsigned int d_type)
1108 {
1109         struct ksmbd_readdir_data *buf;
1110
1111         buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1112         buf->dirent_count++;
1113
1114         return buf->dirent_count <= 2;
1115 }
1116
1117 /**
1118  * ksmbd_vfs_empty_dir() - check for empty directory
1119  * @fp: ksmbd file pointer
1120  *
1121  * Return:      true if directory empty, otherwise false
1122  */
1123 int ksmbd_vfs_empty_dir(struct ksmbd_file *fp)
1124 {
1125         int err;
1126         struct ksmbd_readdir_data readdir_data;
1127
1128         memset(&readdir_data, 0, sizeof(struct ksmbd_readdir_data));
1129
1130         set_ctx_actor(&readdir_data.ctx, __dir_empty);
1131         readdir_data.dirent_count = 0;
1132
1133         err = iterate_dir(fp->filp, &readdir_data.ctx);
1134         if (readdir_data.dirent_count > 2)
1135                 err = -ENOTEMPTY;
1136         else
1137                 err = 0;
1138         return err;
1139 }
1140
1141 static bool __caseless_lookup(struct dir_context *ctx, const char *name,
1142                              int namlen, loff_t offset, u64 ino,
1143                              unsigned int d_type)
1144 {
1145         struct ksmbd_readdir_data *buf;
1146         int cmp = -EINVAL;
1147
1148         buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1149
1150         if (buf->used != namlen)
1151                 return true;
1152         if (IS_ENABLED(CONFIG_UNICODE) && buf->um) {
1153                 const struct qstr q_buf = {.name = buf->private,
1154                                            .len = buf->used};
1155                 const struct qstr q_name = {.name = name,
1156                                             .len = namlen};
1157
1158                 cmp = utf8_strncasecmp(buf->um, &q_buf, &q_name);
1159         }
1160         if (cmp < 0)
1161                 cmp = strncasecmp((char *)buf->private, name, namlen);
1162         if (!cmp) {
1163                 memcpy((char *)buf->private, name, namlen);
1164                 buf->dirent_count = 1;
1165                 return false;
1166         }
1167         return true;
1168 }
1169
1170 /**
1171  * ksmbd_vfs_lookup_in_dir() - lookup a file in a directory
1172  * @dir:        path info
1173  * @name:       filename to lookup
1174  * @namelen:    filename length
1175  *
1176  * Return:      0 on success, otherwise error
1177  */
1178 static int ksmbd_vfs_lookup_in_dir(const struct path *dir, char *name,
1179                                    size_t namelen, struct unicode_map *um)
1180 {
1181         int ret;
1182         struct file *dfilp;
1183         int flags = O_RDONLY | O_LARGEFILE;
1184         struct ksmbd_readdir_data readdir_data = {
1185                 .ctx.actor      = __caseless_lookup,
1186                 .private        = name,
1187                 .used           = namelen,
1188                 .dirent_count   = 0,
1189                 .um             = um,
1190         };
1191
1192         dfilp = dentry_open(dir, flags, current_cred());
1193         if (IS_ERR(dfilp))
1194                 return PTR_ERR(dfilp);
1195
1196         ret = iterate_dir(dfilp, &readdir_data.ctx);
1197         if (readdir_data.dirent_count > 0)
1198                 ret = 0;
1199         fput(dfilp);
1200         return ret;
1201 }
1202
1203 /**
1204  * ksmbd_vfs_kern_path() - lookup a file and get path info
1205  * @name:       file path that is relative to share
1206  * @flags:      lookup flags
1207  * @path:       if lookup succeed, return path info
1208  * @caseless:   caseless filename lookup
1209  *
1210  * Return:      0 on success, otherwise error
1211  */
1212 int ksmbd_vfs_kern_path(struct ksmbd_work *work, char *name,
1213                         unsigned int flags, struct path *path, bool caseless)
1214 {
1215         struct ksmbd_share_config *share_conf = work->tcon->share_conf;
1216         int err;
1217
1218         flags |= LOOKUP_BENEATH;
1219         err = vfs_path_lookup(share_conf->vfs_path.dentry,
1220                               share_conf->vfs_path.mnt,
1221                               name,
1222                               flags,
1223                               path);
1224         if (!err)
1225                 return 0;
1226
1227         if (caseless) {
1228                 char *filepath;
1229                 struct path parent;
1230                 size_t path_len, remain_len;
1231
1232                 filepath = kstrdup(name, GFP_KERNEL);
1233                 if (!filepath)
1234                         return -ENOMEM;
1235
1236                 path_len = strlen(filepath);
1237                 remain_len = path_len;
1238
1239                 parent = share_conf->vfs_path;
1240                 path_get(&parent);
1241
1242                 while (d_can_lookup(parent.dentry)) {
1243                         char *filename = filepath + path_len - remain_len;
1244                         char *next = strchrnul(filename, '/');
1245                         size_t filename_len = next - filename;
1246                         bool is_last = !next[0];
1247
1248                         if (filename_len == 0)
1249                                 break;
1250
1251                         err = ksmbd_vfs_lookup_in_dir(&parent, filename,
1252                                                       filename_len,
1253                                                       work->conn->um);
1254                         path_put(&parent);
1255                         if (err)
1256                                 goto out;
1257
1258                         next[0] = '\0';
1259
1260                         err = vfs_path_lookup(share_conf->vfs_path.dentry,
1261                                               share_conf->vfs_path.mnt,
1262                                               filepath,
1263                                               flags,
1264                                               &parent);
1265                         if (err)
1266                                 goto out;
1267                         else if (is_last) {
1268                                 *path = parent;
1269                                 goto out;
1270                         }
1271
1272                         next[0] = '/';
1273                         remain_len -= filename_len + 1;
1274                 }
1275
1276                 path_put(&parent);
1277                 err = -EINVAL;
1278 out:
1279                 kfree(filepath);
1280         }
1281         return err;
1282 }
1283
1284 struct dentry *ksmbd_vfs_kern_path_create(struct ksmbd_work *work,
1285                                           const char *name,
1286                                           unsigned int flags,
1287                                           struct path *path)
1288 {
1289         char *abs_name;
1290         struct dentry *dent;
1291
1292         abs_name = convert_to_unix_name(work->tcon->share_conf, name);
1293         if (!abs_name)
1294                 return ERR_PTR(-ENOMEM);
1295
1296         dent = kern_path_create(AT_FDCWD, abs_name, path, flags);
1297         kfree(abs_name);
1298         return dent;
1299 }
1300
1301 int ksmbd_vfs_remove_acl_xattrs(struct user_namespace *user_ns,
1302                                 struct dentry *dentry)
1303 {
1304         char *name, *xattr_list = NULL;
1305         ssize_t xattr_list_len;
1306         int err = 0;
1307
1308         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1309         if (xattr_list_len < 0) {
1310                 goto out;
1311         } else if (!xattr_list_len) {
1312                 ksmbd_debug(SMB, "empty xattr in the file\n");
1313                 goto out;
1314         }
1315
1316         for (name = xattr_list; name - xattr_list < xattr_list_len;
1317              name += strlen(name) + 1) {
1318                 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1319
1320                 if (!strncmp(name, XATTR_NAME_POSIX_ACL_ACCESS,
1321                              sizeof(XATTR_NAME_POSIX_ACL_ACCESS) - 1) ||
1322                     !strncmp(name, XATTR_NAME_POSIX_ACL_DEFAULT,
1323                              sizeof(XATTR_NAME_POSIX_ACL_DEFAULT) - 1)) {
1324                         err = ksmbd_vfs_remove_xattr(user_ns, dentry, name);
1325                         if (err)
1326                                 ksmbd_debug(SMB,
1327                                             "remove acl xattr failed : %s\n", name);
1328                 }
1329         }
1330 out:
1331         kvfree(xattr_list);
1332         return err;
1333 }
1334
1335 int ksmbd_vfs_remove_sd_xattrs(struct user_namespace *user_ns,
1336                                struct dentry *dentry)
1337 {
1338         char *name, *xattr_list = NULL;
1339         ssize_t xattr_list_len;
1340         int err = 0;
1341
1342         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1343         if (xattr_list_len < 0) {
1344                 goto out;
1345         } else if (!xattr_list_len) {
1346                 ksmbd_debug(SMB, "empty xattr in the file\n");
1347                 goto out;
1348         }
1349
1350         for (name = xattr_list; name - xattr_list < xattr_list_len;
1351                         name += strlen(name) + 1) {
1352                 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1353
1354                 if (!strncmp(name, XATTR_NAME_SD, XATTR_NAME_SD_LEN)) {
1355                         err = ksmbd_vfs_remove_xattr(user_ns, dentry, name);
1356                         if (err)
1357                                 ksmbd_debug(SMB, "remove xattr failed : %s\n", name);
1358                 }
1359         }
1360 out:
1361         kvfree(xattr_list);
1362         return err;
1363 }
1364
1365 static struct xattr_smb_acl *ksmbd_vfs_make_xattr_posix_acl(struct user_namespace *user_ns,
1366                                                             struct inode *inode,
1367                                                             int acl_type)
1368 {
1369         struct xattr_smb_acl *smb_acl = NULL;
1370         struct posix_acl *posix_acls;
1371         struct posix_acl_entry *pa_entry;
1372         struct xattr_acl_entry *xa_entry;
1373         int i;
1374
1375         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1376                 return NULL;
1377
1378         posix_acls = get_acl(inode, acl_type);
1379         if (!posix_acls)
1380                 return NULL;
1381
1382         smb_acl = kzalloc(sizeof(struct xattr_smb_acl) +
1383                           sizeof(struct xattr_acl_entry) * posix_acls->a_count,
1384                           GFP_KERNEL);
1385         if (!smb_acl)
1386                 goto out;
1387
1388         smb_acl->count = posix_acls->a_count;
1389         pa_entry = posix_acls->a_entries;
1390         xa_entry = smb_acl->entries;
1391         for (i = 0; i < posix_acls->a_count; i++, pa_entry++, xa_entry++) {
1392                 switch (pa_entry->e_tag) {
1393                 case ACL_USER:
1394                         xa_entry->type = SMB_ACL_USER;
1395                         xa_entry->uid = posix_acl_uid_translate(user_ns, pa_entry);
1396                         break;
1397                 case ACL_USER_OBJ:
1398                         xa_entry->type = SMB_ACL_USER_OBJ;
1399                         break;
1400                 case ACL_GROUP:
1401                         xa_entry->type = SMB_ACL_GROUP;
1402                         xa_entry->gid = posix_acl_gid_translate(user_ns, pa_entry);
1403                         break;
1404                 case ACL_GROUP_OBJ:
1405                         xa_entry->type = SMB_ACL_GROUP_OBJ;
1406                         break;
1407                 case ACL_OTHER:
1408                         xa_entry->type = SMB_ACL_OTHER;
1409                         break;
1410                 case ACL_MASK:
1411                         xa_entry->type = SMB_ACL_MASK;
1412                         break;
1413                 default:
1414                         pr_err("unknown type : 0x%x\n", pa_entry->e_tag);
1415                         goto out;
1416                 }
1417
1418                 if (pa_entry->e_perm & ACL_READ)
1419                         xa_entry->perm |= SMB_ACL_READ;
1420                 if (pa_entry->e_perm & ACL_WRITE)
1421                         xa_entry->perm |= SMB_ACL_WRITE;
1422                 if (pa_entry->e_perm & ACL_EXECUTE)
1423                         xa_entry->perm |= SMB_ACL_EXECUTE;
1424         }
1425 out:
1426         posix_acl_release(posix_acls);
1427         return smb_acl;
1428 }
1429
1430 int ksmbd_vfs_set_sd_xattr(struct ksmbd_conn *conn,
1431                            struct user_namespace *user_ns,
1432                            struct dentry *dentry,
1433                            struct smb_ntsd *pntsd, int len)
1434 {
1435         int rc;
1436         struct ndr sd_ndr = {0}, acl_ndr = {0};
1437         struct xattr_ntacl acl = {0};
1438         struct xattr_smb_acl *smb_acl, *def_smb_acl = NULL;
1439         struct inode *inode = d_inode(dentry);
1440
1441         acl.version = 4;
1442         acl.hash_type = XATTR_SD_HASH_TYPE_SHA256;
1443         acl.current_time = ksmbd_UnixTimeToNT(current_time(inode));
1444
1445         memcpy(acl.desc, "posix_acl", 9);
1446         acl.desc_len = 10;
1447
1448         pntsd->osidoffset =
1449                 cpu_to_le32(le32_to_cpu(pntsd->osidoffset) + NDR_NTSD_OFFSETOF);
1450         pntsd->gsidoffset =
1451                 cpu_to_le32(le32_to_cpu(pntsd->gsidoffset) + NDR_NTSD_OFFSETOF);
1452         pntsd->dacloffset =
1453                 cpu_to_le32(le32_to_cpu(pntsd->dacloffset) + NDR_NTSD_OFFSETOF);
1454
1455         acl.sd_buf = (char *)pntsd;
1456         acl.sd_size = len;
1457
1458         rc = ksmbd_gen_sd_hash(conn, acl.sd_buf, acl.sd_size, acl.hash);
1459         if (rc) {
1460                 pr_err("failed to generate hash for ndr acl\n");
1461                 return rc;
1462         }
1463
1464         smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1465                                                  ACL_TYPE_ACCESS);
1466         if (S_ISDIR(inode->i_mode))
1467                 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1468                                                              ACL_TYPE_DEFAULT);
1469
1470         rc = ndr_encode_posix_acl(&acl_ndr, user_ns, inode,
1471                                   smb_acl, def_smb_acl);
1472         if (rc) {
1473                 pr_err("failed to encode ndr to posix acl\n");
1474                 goto out;
1475         }
1476
1477         rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset,
1478                                acl.posix_acl_hash);
1479         if (rc) {
1480                 pr_err("failed to generate hash for ndr acl\n");
1481                 goto out;
1482         }
1483
1484         rc = ndr_encode_v4_ntacl(&sd_ndr, &acl);
1485         if (rc) {
1486                 pr_err("failed to encode ndr to posix acl\n");
1487                 goto out;
1488         }
1489
1490         rc = ksmbd_vfs_setxattr(user_ns, dentry,
1491                                 XATTR_NAME_SD, sd_ndr.data,
1492                                 sd_ndr.offset, 0);
1493         if (rc < 0)
1494                 pr_err("Failed to store XATTR ntacl :%d\n", rc);
1495
1496         kfree(sd_ndr.data);
1497 out:
1498         kfree(acl_ndr.data);
1499         kfree(smb_acl);
1500         kfree(def_smb_acl);
1501         return rc;
1502 }
1503
1504 int ksmbd_vfs_get_sd_xattr(struct ksmbd_conn *conn,
1505                            struct user_namespace *user_ns,
1506                            struct dentry *dentry,
1507                            struct smb_ntsd **pntsd)
1508 {
1509         int rc;
1510         struct ndr n;
1511         struct inode *inode = d_inode(dentry);
1512         struct ndr acl_ndr = {0};
1513         struct xattr_ntacl acl;
1514         struct xattr_smb_acl *smb_acl = NULL, *def_smb_acl = NULL;
1515         __u8 cmp_hash[XATTR_SD_HASH_SIZE] = {0};
1516
1517         rc = ksmbd_vfs_getxattr(user_ns, dentry, XATTR_NAME_SD, &n.data);
1518         if (rc <= 0)
1519                 return rc;
1520
1521         n.length = rc;
1522         rc = ndr_decode_v4_ntacl(&n, &acl);
1523         if (rc)
1524                 goto free_n_data;
1525
1526         smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1527                                                  ACL_TYPE_ACCESS);
1528         if (S_ISDIR(inode->i_mode))
1529                 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1530                                                              ACL_TYPE_DEFAULT);
1531
1532         rc = ndr_encode_posix_acl(&acl_ndr, user_ns, inode, smb_acl,
1533                                   def_smb_acl);
1534         if (rc) {
1535                 pr_err("failed to encode ndr to posix acl\n");
1536                 goto out_free;
1537         }
1538
1539         rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset, cmp_hash);
1540         if (rc) {
1541                 pr_err("failed to generate hash for ndr acl\n");
1542                 goto out_free;
1543         }
1544
1545         if (memcmp(cmp_hash, acl.posix_acl_hash, XATTR_SD_HASH_SIZE)) {
1546                 pr_err("hash value diff\n");
1547                 rc = -EINVAL;
1548                 goto out_free;
1549         }
1550
1551         *pntsd = acl.sd_buf;
1552         if (acl.sd_size < sizeof(struct smb_ntsd)) {
1553                 pr_err("sd size is invalid\n");
1554                 goto out_free;
1555         }
1556
1557         (*pntsd)->osidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->osidoffset) -
1558                                            NDR_NTSD_OFFSETOF);
1559         (*pntsd)->gsidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->gsidoffset) -
1560                                            NDR_NTSD_OFFSETOF);
1561         (*pntsd)->dacloffset = cpu_to_le32(le32_to_cpu((*pntsd)->dacloffset) -
1562                                            NDR_NTSD_OFFSETOF);
1563
1564         rc = acl.sd_size;
1565 out_free:
1566         kfree(acl_ndr.data);
1567         kfree(smb_acl);
1568         kfree(def_smb_acl);
1569         if (rc < 0) {
1570                 kfree(acl.sd_buf);
1571                 *pntsd = NULL;
1572         }
1573
1574 free_n_data:
1575         kfree(n.data);
1576         return rc;
1577 }
1578
1579 int ksmbd_vfs_set_dos_attrib_xattr(struct user_namespace *user_ns,
1580                                    struct dentry *dentry,
1581                                    struct xattr_dos_attrib *da)
1582 {
1583         struct ndr n;
1584         int err;
1585
1586         err = ndr_encode_dos_attr(&n, da);
1587         if (err)
1588                 return err;
1589
1590         err = ksmbd_vfs_setxattr(user_ns, dentry, XATTR_NAME_DOS_ATTRIBUTE,
1591                                  (void *)n.data, n.offset, 0);
1592         if (err)
1593                 ksmbd_debug(SMB, "failed to store dos attribute in xattr\n");
1594         kfree(n.data);
1595
1596         return err;
1597 }
1598
1599 int ksmbd_vfs_get_dos_attrib_xattr(struct user_namespace *user_ns,
1600                                    struct dentry *dentry,
1601                                    struct xattr_dos_attrib *da)
1602 {
1603         struct ndr n;
1604         int err;
1605
1606         err = ksmbd_vfs_getxattr(user_ns, dentry, XATTR_NAME_DOS_ATTRIBUTE,
1607                                  (char **)&n.data);
1608         if (err > 0) {
1609                 n.length = err;
1610                 if (ndr_decode_dos_attr(&n, da))
1611                         err = -EINVAL;
1612                 kfree(n.data);
1613         } else {
1614                 ksmbd_debug(SMB, "failed to load dos attribute in xattr\n");
1615         }
1616
1617         return err;
1618 }
1619
1620 /**
1621  * ksmbd_vfs_init_kstat() - convert unix stat information to smb stat format
1622  * @p:          destination buffer
1623  * @ksmbd_kstat:      ksmbd kstat wrapper
1624  */
1625 void *ksmbd_vfs_init_kstat(char **p, struct ksmbd_kstat *ksmbd_kstat)
1626 {
1627         struct file_directory_info *info = (struct file_directory_info *)(*p);
1628         struct kstat *kstat = ksmbd_kstat->kstat;
1629         u64 time;
1630
1631         info->FileIndex = 0;
1632         info->CreationTime = cpu_to_le64(ksmbd_kstat->create_time);
1633         time = ksmbd_UnixTimeToNT(kstat->atime);
1634         info->LastAccessTime = cpu_to_le64(time);
1635         time = ksmbd_UnixTimeToNT(kstat->mtime);
1636         info->LastWriteTime = cpu_to_le64(time);
1637         time = ksmbd_UnixTimeToNT(kstat->ctime);
1638         info->ChangeTime = cpu_to_le64(time);
1639
1640         if (ksmbd_kstat->file_attributes & FILE_ATTRIBUTE_DIRECTORY_LE) {
1641                 info->EndOfFile = 0;
1642                 info->AllocationSize = 0;
1643         } else {
1644                 info->EndOfFile = cpu_to_le64(kstat->size);
1645                 info->AllocationSize = cpu_to_le64(kstat->blocks << 9);
1646         }
1647         info->ExtFileAttributes = ksmbd_kstat->file_attributes;
1648
1649         return info;
1650 }
1651
1652 int ksmbd_vfs_fill_dentry_attrs(struct ksmbd_work *work,
1653                                 struct user_namespace *user_ns,
1654                                 struct dentry *dentry,
1655                                 struct ksmbd_kstat *ksmbd_kstat)
1656 {
1657         u64 time;
1658         int rc;
1659
1660         generic_fillattr(user_ns, d_inode(dentry), ksmbd_kstat->kstat);
1661
1662         time = ksmbd_UnixTimeToNT(ksmbd_kstat->kstat->ctime);
1663         ksmbd_kstat->create_time = time;
1664
1665         /*
1666          * set default value for the case that store dos attributes is not yes
1667          * or that acl is disable in server's filesystem and the config is yes.
1668          */
1669         if (S_ISDIR(ksmbd_kstat->kstat->mode))
1670                 ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_DIRECTORY_LE;
1671         else
1672                 ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_ARCHIVE_LE;
1673
1674         if (test_share_config_flag(work->tcon->share_conf,
1675                                    KSMBD_SHARE_FLAG_STORE_DOS_ATTRS)) {
1676                 struct xattr_dos_attrib da;
1677
1678                 rc = ksmbd_vfs_get_dos_attrib_xattr(user_ns, dentry, &da);
1679                 if (rc > 0) {
1680                         ksmbd_kstat->file_attributes = cpu_to_le32(da.attr);
1681                         ksmbd_kstat->create_time = da.create_time;
1682                 } else {
1683                         ksmbd_debug(VFS, "fail to load dos attribute.\n");
1684                 }
1685         }
1686
1687         return 0;
1688 }
1689
1690 ssize_t ksmbd_vfs_casexattr_len(struct user_namespace *user_ns,
1691                                 struct dentry *dentry, char *attr_name,
1692                                 int attr_name_len)
1693 {
1694         char *name, *xattr_list = NULL;
1695         ssize_t value_len = -ENOENT, xattr_list_len;
1696
1697         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1698         if (xattr_list_len <= 0)
1699                 goto out;
1700
1701         for (name = xattr_list; name - xattr_list < xattr_list_len;
1702                         name += strlen(name) + 1) {
1703                 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
1704                 if (strncasecmp(attr_name, name, attr_name_len))
1705                         continue;
1706
1707                 value_len = ksmbd_vfs_xattr_len(user_ns, dentry, name);
1708                 break;
1709         }
1710
1711 out:
1712         kvfree(xattr_list);
1713         return value_len;
1714 }
1715
1716 int ksmbd_vfs_xattr_stream_name(char *stream_name, char **xattr_stream_name,
1717                                 size_t *xattr_stream_name_size, int s_type)
1718 {
1719         char *type, *buf;
1720
1721         if (s_type == DIR_STREAM)
1722                 type = ":$INDEX_ALLOCATION";
1723         else
1724                 type = ":$DATA";
1725
1726         buf = kasprintf(GFP_KERNEL, "%s%s%s",
1727                         XATTR_NAME_STREAM, stream_name, type);
1728         if (!buf)
1729                 return -ENOMEM;
1730
1731         *xattr_stream_name = buf;
1732         *xattr_stream_name_size = strlen(buf) + 1;
1733
1734         return 0;
1735 }
1736
1737 int ksmbd_vfs_copy_file_ranges(struct ksmbd_work *work,
1738                                struct ksmbd_file *src_fp,
1739                                struct ksmbd_file *dst_fp,
1740                                struct srv_copychunk *chunks,
1741                                unsigned int chunk_count,
1742                                unsigned int *chunk_count_written,
1743                                unsigned int *chunk_size_written,
1744                                loff_t *total_size_written)
1745 {
1746         unsigned int i;
1747         loff_t src_off, dst_off, src_file_size;
1748         size_t len;
1749         int ret;
1750
1751         *chunk_count_written = 0;
1752         *chunk_size_written = 0;
1753         *total_size_written = 0;
1754
1755         if (!(src_fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
1756                 pr_err("no right to read(%pD)\n", src_fp->filp);
1757                 return -EACCES;
1758         }
1759         if (!(dst_fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE))) {
1760                 pr_err("no right to write(%pD)\n", dst_fp->filp);
1761                 return -EACCES;
1762         }
1763
1764         if (ksmbd_stream_fd(src_fp) || ksmbd_stream_fd(dst_fp))
1765                 return -EBADF;
1766
1767         smb_break_all_levII_oplock(work, dst_fp, 1);
1768
1769         if (!work->tcon->posix_extensions) {
1770                 for (i = 0; i < chunk_count; i++) {
1771                         src_off = le64_to_cpu(chunks[i].SourceOffset);
1772                         dst_off = le64_to_cpu(chunks[i].TargetOffset);
1773                         len = le32_to_cpu(chunks[i].Length);
1774
1775                         if (check_lock_range(src_fp->filp, src_off,
1776                                              src_off + len - 1, READ))
1777                                 return -EAGAIN;
1778                         if (check_lock_range(dst_fp->filp, dst_off,
1779                                              dst_off + len - 1, WRITE))
1780                                 return -EAGAIN;
1781                 }
1782         }
1783
1784         src_file_size = i_size_read(file_inode(src_fp->filp));
1785
1786         for (i = 0; i < chunk_count; i++) {
1787                 src_off = le64_to_cpu(chunks[i].SourceOffset);
1788                 dst_off = le64_to_cpu(chunks[i].TargetOffset);
1789                 len = le32_to_cpu(chunks[i].Length);
1790
1791                 if (src_off + len > src_file_size)
1792                         return -E2BIG;
1793
1794                 ret = vfs_copy_file_range(src_fp->filp, src_off,
1795                                           dst_fp->filp, dst_off, len, 0);
1796                 if (ret == -EOPNOTSUPP || ret == -EXDEV)
1797                         ret = vfs_copy_file_range(src_fp->filp, src_off,
1798                                                   dst_fp->filp, dst_off, len,
1799                                                   COPY_FILE_SPLICE);
1800                 if (ret < 0)
1801                         return ret;
1802
1803                 *chunk_count_written += 1;
1804                 *total_size_written += ret;
1805         }
1806         return 0;
1807 }
1808
1809 void ksmbd_vfs_posix_lock_wait(struct file_lock *flock)
1810 {
1811         wait_event(flock->fl_wait, !flock->fl_blocker);
1812 }
1813
1814 int ksmbd_vfs_posix_lock_wait_timeout(struct file_lock *flock, long timeout)
1815 {
1816         return wait_event_interruptible_timeout(flock->fl_wait,
1817                                                 !flock->fl_blocker,
1818                                                 timeout);
1819 }
1820
1821 void ksmbd_vfs_posix_lock_unblock(struct file_lock *flock)
1822 {
1823         locks_delete_block(flock);
1824 }
1825
1826 int ksmbd_vfs_set_init_posix_acl(struct user_namespace *user_ns,
1827                                  struct inode *inode)
1828 {
1829         struct posix_acl_state acl_state;
1830         struct posix_acl *acls;
1831         int rc;
1832
1833         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1834                 return -EOPNOTSUPP;
1835
1836         ksmbd_debug(SMB, "Set posix acls\n");
1837         rc = init_acl_state(&acl_state, 1);
1838         if (rc)
1839                 return rc;
1840
1841         /* Set default owner group */
1842         acl_state.owner.allow = (inode->i_mode & 0700) >> 6;
1843         acl_state.group.allow = (inode->i_mode & 0070) >> 3;
1844         acl_state.other.allow = inode->i_mode & 0007;
1845         acl_state.users->aces[acl_state.users->n].uid = inode->i_uid;
1846         acl_state.users->aces[acl_state.users->n++].perms.allow =
1847                 acl_state.owner.allow;
1848         acl_state.groups->aces[acl_state.groups->n].gid = inode->i_gid;
1849         acl_state.groups->aces[acl_state.groups->n++].perms.allow =
1850                 acl_state.group.allow;
1851         acl_state.mask.allow = 0x07;
1852
1853         acls = posix_acl_alloc(6, GFP_KERNEL);
1854         if (!acls) {
1855                 free_acl_state(&acl_state);
1856                 return -ENOMEM;
1857         }
1858         posix_state_to_acl(&acl_state, acls->a_entries);
1859         rc = set_posix_acl(user_ns, inode, ACL_TYPE_ACCESS, acls);
1860         if (rc < 0)
1861                 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1862                             rc);
1863         else if (S_ISDIR(inode->i_mode)) {
1864                 posix_state_to_acl(&acl_state, acls->a_entries);
1865                 rc = set_posix_acl(user_ns, inode, ACL_TYPE_DEFAULT,
1866                                    acls);
1867                 if (rc < 0)
1868                         ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1869                                     rc);
1870         }
1871         free_acl_state(&acl_state);
1872         posix_acl_release(acls);
1873         return rc;
1874 }
1875
1876 int ksmbd_vfs_inherit_posix_acl(struct user_namespace *user_ns,
1877                                 struct inode *inode, struct inode *parent_inode)
1878 {
1879         struct posix_acl *acls;
1880         struct posix_acl_entry *pace;
1881         int rc, i;
1882
1883         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1884                 return -EOPNOTSUPP;
1885
1886         acls = get_acl(parent_inode, ACL_TYPE_DEFAULT);
1887         if (!acls)
1888                 return -ENOENT;
1889         pace = acls->a_entries;
1890
1891         for (i = 0; i < acls->a_count; i++, pace++) {
1892                 if (pace->e_tag == ACL_MASK) {
1893                         pace->e_perm = 0x07;
1894                         break;
1895                 }
1896         }
1897
1898         rc = set_posix_acl(user_ns, inode, ACL_TYPE_ACCESS, acls);
1899         if (rc < 0)
1900                 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1901                             rc);
1902         if (S_ISDIR(inode->i_mode)) {
1903                 rc = set_posix_acl(user_ns, inode, ACL_TYPE_DEFAULT,
1904                                    acls);
1905                 if (rc < 0)
1906                         ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1907                                     rc);
1908         }
1909         posix_acl_release(acls);
1910         return rc;
1911 }