Merge tag 'printk-for-5.11-urgent-fixup' of git://git.kernel.org/pub/scm/linux/kernel...
[linux-2.6-microblaze.git] / fs / nfsd / nfs4proc.c
1 /*
2  *  Server-side procedures for NFSv4.
3  *
4  *  Copyright (c) 2002 The Regents of the University of Michigan.
5  *  All rights reserved.
6  *
7  *  Kendrick Smith <kmsmith@umich.edu>
8  *  Andy Adamson   <andros@umich.edu>
9  *
10  *  Redistribution and use in source and binary forms, with or without
11  *  modification, are permitted provided that the following conditions
12  *  are met:
13  *
14  *  1. Redistributions of source code must retain the above copyright
15  *     notice, this list of conditions and the following disclaimer.
16  *  2. Redistributions in binary form must reproduce the above copyright
17  *     notice, this list of conditions and the following disclaimer in the
18  *     documentation and/or other materials provided with the distribution.
19  *  3. Neither the name of the University nor the names of its
20  *     contributors may be used to endorse or promote products derived
21  *     from this software without specific prior written permission.
22  *
23  *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24  *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25  *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26  *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27  *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28  *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29  *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30  *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31  *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32  *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33  *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34  */
35 #include <linux/fs_struct.h>
36 #include <linux/file.h>
37 #include <linux/falloc.h>
38 #include <linux/slab.h>
39 #include <linux/kthread.h>
40 #include <linux/sunrpc/addr.h>
41 #include <linux/nfs_ssc.h>
42
43 #include "idmap.h"
44 #include "cache.h"
45 #include "xdr4.h"
46 #include "vfs.h"
47 #include "current_stateid.h"
48 #include "netns.h"
49 #include "acl.h"
50 #include "pnfs.h"
51 #include "trace.h"
52
53 static bool inter_copy_offload_enable;
54 module_param(inter_copy_offload_enable, bool, 0644);
55 MODULE_PARM_DESC(inter_copy_offload_enable,
56                  "Enable inter server to server copy offload. Default: false");
57
58 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
59 #include <linux/security.h>
60
61 static inline void
62 nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval)
63 {
64         struct inode *inode = d_inode(resfh->fh_dentry);
65         int status;
66
67         inode_lock(inode);
68         status = security_inode_setsecctx(resfh->fh_dentry,
69                 label->data, label->len);
70         inode_unlock(inode);
71
72         if (status)
73                 /*
74                  * XXX: We should really fail the whole open, but we may
75                  * already have created a new file, so it may be too
76                  * late.  For now this seems the least of evils:
77                  */
78                 bmval[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
79
80         return;
81 }
82 #else
83 static inline void
84 nfsd4_security_inode_setsecctx(struct svc_fh *resfh, struct xdr_netobj *label, u32 *bmval)
85 { }
86 #endif
87
88 #define NFSDDBG_FACILITY                NFSDDBG_PROC
89
90 static u32 nfsd_attrmask[] = {
91         NFSD_WRITEABLE_ATTRS_WORD0,
92         NFSD_WRITEABLE_ATTRS_WORD1,
93         NFSD_WRITEABLE_ATTRS_WORD2
94 };
95
96 static u32 nfsd41_ex_attrmask[] = {
97         NFSD_SUPPATTR_EXCLCREAT_WORD0,
98         NFSD_SUPPATTR_EXCLCREAT_WORD1,
99         NFSD_SUPPATTR_EXCLCREAT_WORD2
100 };
101
102 static __be32
103 check_attr_support(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
104                    u32 *bmval, u32 *writable)
105 {
106         struct dentry *dentry = cstate->current_fh.fh_dentry;
107         struct svc_export *exp = cstate->current_fh.fh_export;
108
109         if (!nfsd_attrs_supported(cstate->minorversion, bmval))
110                 return nfserr_attrnotsupp;
111         if ((bmval[0] & FATTR4_WORD0_ACL) && !IS_POSIXACL(d_inode(dentry)))
112                 return nfserr_attrnotsupp;
113         if ((bmval[2] & FATTR4_WORD2_SECURITY_LABEL) &&
114                         !(exp->ex_flags & NFSEXP_SECURITY_LABEL))
115                 return nfserr_attrnotsupp;
116         if (writable && !bmval_is_subset(bmval, writable))
117                 return nfserr_inval;
118         if (writable && (bmval[2] & FATTR4_WORD2_MODE_UMASK) &&
119                         (bmval[1] & FATTR4_WORD1_MODE))
120                 return nfserr_inval;
121         return nfs_ok;
122 }
123
124 static __be32
125 nfsd4_check_open_attributes(struct svc_rqst *rqstp,
126         struct nfsd4_compound_state *cstate, struct nfsd4_open *open)
127 {
128         __be32 status = nfs_ok;
129
130         if (open->op_create == NFS4_OPEN_CREATE) {
131                 if (open->op_createmode == NFS4_CREATE_UNCHECKED
132                     || open->op_createmode == NFS4_CREATE_GUARDED)
133                         status = check_attr_support(rqstp, cstate,
134                                         open->op_bmval, nfsd_attrmask);
135                 else if (open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1)
136                         status = check_attr_support(rqstp, cstate,
137                                         open->op_bmval, nfsd41_ex_attrmask);
138         }
139
140         return status;
141 }
142
143 static int
144 is_create_with_attrs(struct nfsd4_open *open)
145 {
146         return open->op_create == NFS4_OPEN_CREATE
147                 && (open->op_createmode == NFS4_CREATE_UNCHECKED
148                     || open->op_createmode == NFS4_CREATE_GUARDED
149                     || open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1);
150 }
151
152 /*
153  * if error occurs when setting the acl, just clear the acl bit
154  * in the returned attr bitmap.
155  */
156 static void
157 do_set_nfs4_acl(struct svc_rqst *rqstp, struct svc_fh *fhp,
158                 struct nfs4_acl *acl, u32 *bmval)
159 {
160         __be32 status;
161
162         status = nfsd4_set_nfs4_acl(rqstp, fhp, acl);
163         if (status)
164                 /*
165                  * We should probably fail the whole open at this point,
166                  * but we've already created the file, so it's too late;
167                  * So this seems the least of evils:
168                  */
169                 bmval[0] &= ~FATTR4_WORD0_ACL;
170 }
171
172 static inline void
173 fh_dup2(struct svc_fh *dst, struct svc_fh *src)
174 {
175         fh_put(dst);
176         dget(src->fh_dentry);
177         if (src->fh_export)
178                 exp_get(src->fh_export);
179         *dst = *src;
180 }
181
182 static __be32
183 do_open_permission(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open, int accmode)
184 {
185         __be32 status;
186
187         if (open->op_truncate &&
188                 !(open->op_share_access & NFS4_SHARE_ACCESS_WRITE))
189                 return nfserr_inval;
190
191         accmode |= NFSD_MAY_READ_IF_EXEC;
192
193         if (open->op_share_access & NFS4_SHARE_ACCESS_READ)
194                 accmode |= NFSD_MAY_READ;
195         if (open->op_share_access & NFS4_SHARE_ACCESS_WRITE)
196                 accmode |= (NFSD_MAY_WRITE | NFSD_MAY_TRUNC);
197         if (open->op_share_deny & NFS4_SHARE_DENY_READ)
198                 accmode |= NFSD_MAY_WRITE;
199
200         status = fh_verify(rqstp, current_fh, S_IFREG, accmode);
201
202         return status;
203 }
204
205 static __be32 nfsd_check_obj_isreg(struct svc_fh *fh)
206 {
207         umode_t mode = d_inode(fh->fh_dentry)->i_mode;
208
209         if (S_ISREG(mode))
210                 return nfs_ok;
211         if (S_ISDIR(mode))
212                 return nfserr_isdir;
213         /*
214          * Using err_symlink as our catch-all case may look odd; but
215          * there's no other obvious error for this case in 4.0, and we
216          * happen to know that it will cause the linux v4 client to do
217          * the right thing on attempts to open something other than a
218          * regular file.
219          */
220         return nfserr_symlink;
221 }
222
223 static void nfsd4_set_open_owner_reply_cache(struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh *resfh)
224 {
225         if (nfsd4_has_session(cstate))
226                 return;
227         fh_copy_shallow(&open->op_openowner->oo_owner.so_replay.rp_openfh,
228                         &resfh->fh_handle);
229 }
230
231 static __be32
232 do_open_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open, struct svc_fh **resfh)
233 {
234         struct svc_fh *current_fh = &cstate->current_fh;
235         int accmode;
236         __be32 status;
237
238         *resfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL);
239         if (!*resfh)
240                 return nfserr_jukebox;
241         fh_init(*resfh, NFS4_FHSIZE);
242         open->op_truncate = false;
243
244         if (open->op_create) {
245                 /* FIXME: check session persistence and pnfs flags.
246                  * The nfsv4.1 spec requires the following semantics:
247                  *
248                  * Persistent   | pNFS   | Server REQUIRED | Client Allowed
249                  * Reply Cache  | server |                 |
250                  * -------------+--------+-----------------+--------------------
251                  * no           | no     | EXCLUSIVE4_1    | EXCLUSIVE4_1
252                  *              |        |                 | (SHOULD)
253                  *              |        | and EXCLUSIVE4  | or EXCLUSIVE4
254                  *              |        |                 | (SHOULD NOT)
255                  * no           | yes    | EXCLUSIVE4_1    | EXCLUSIVE4_1
256                  * yes          | no     | GUARDED4        | GUARDED4
257                  * yes          | yes    | GUARDED4        | GUARDED4
258                  */
259
260                 /*
261                  * Note: create modes (UNCHECKED,GUARDED...) are the same
262                  * in NFSv4 as in v3 except EXCLUSIVE4_1.
263                  */
264                 current->fs->umask = open->op_umask;
265                 status = do_nfsd_create(rqstp, current_fh, open->op_fname,
266                                         open->op_fnamelen, &open->op_iattr,
267                                         *resfh, open->op_createmode,
268                                         (u32 *)open->op_verf.data,
269                                         &open->op_truncate, &open->op_created);
270                 current->fs->umask = 0;
271
272                 if (!status && open->op_label.len)
273                         nfsd4_security_inode_setsecctx(*resfh, &open->op_label, open->op_bmval);
274
275                 /*
276                  * Following rfc 3530 14.2.16, and rfc 5661 18.16.4
277                  * use the returned bitmask to indicate which attributes
278                  * we used to store the verifier:
279                  */
280                 if (nfsd_create_is_exclusive(open->op_createmode) && status == 0)
281                         open->op_bmval[1] |= (FATTR4_WORD1_TIME_ACCESS |
282                                                 FATTR4_WORD1_TIME_MODIFY);
283         } else
284                 /*
285                  * Note this may exit with the parent still locked.
286                  * We will hold the lock until nfsd4_open's final
287                  * lookup, to prevent renames or unlinks until we've had
288                  * a chance to an acquire a delegation if appropriate.
289                  */
290                 status = nfsd_lookup(rqstp, current_fh,
291                                      open->op_fname, open->op_fnamelen, *resfh);
292         if (status)
293                 goto out;
294         status = nfsd_check_obj_isreg(*resfh);
295         if (status)
296                 goto out;
297
298         if (is_create_with_attrs(open) && open->op_acl != NULL)
299                 do_set_nfs4_acl(rqstp, *resfh, open->op_acl, open->op_bmval);
300
301         nfsd4_set_open_owner_reply_cache(cstate, open, *resfh);
302         accmode = NFSD_MAY_NOP;
303         if (open->op_created ||
304                         open->op_claim_type == NFS4_OPEN_CLAIM_DELEGATE_CUR)
305                 accmode |= NFSD_MAY_OWNER_OVERRIDE;
306         status = do_open_permission(rqstp, *resfh, open, accmode);
307         set_change_info(&open->op_cinfo, current_fh);
308 out:
309         return status;
310 }
311
312 static __be32
313 do_open_fhandle(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_open *open)
314 {
315         struct svc_fh *current_fh = &cstate->current_fh;
316         __be32 status;
317         int accmode = 0;
318
319         /* We don't know the target directory, and therefore can not
320         * set the change info
321         */
322
323         memset(&open->op_cinfo, 0, sizeof(struct nfsd4_change_info));
324
325         nfsd4_set_open_owner_reply_cache(cstate, open, current_fh);
326
327         open->op_truncate = (open->op_iattr.ia_valid & ATTR_SIZE) &&
328                 (open->op_iattr.ia_size == 0);
329         /*
330          * In the delegation case, the client is telling us about an
331          * open that it *already* performed locally, some time ago.  We
332          * should let it succeed now if possible.
333          *
334          * In the case of a CLAIM_FH open, on the other hand, the client
335          * may be counting on us to enforce permissions (the Linux 4.1
336          * client uses this for normal opens, for example).
337          */
338         if (open->op_claim_type == NFS4_OPEN_CLAIM_DELEG_CUR_FH)
339                 accmode = NFSD_MAY_OWNER_OVERRIDE;
340
341         status = do_open_permission(rqstp, current_fh, open, accmode);
342
343         return status;
344 }
345
346 static void
347 copy_clientid(clientid_t *clid, struct nfsd4_session *session)
348 {
349         struct nfsd4_sessionid *sid =
350                         (struct nfsd4_sessionid *)session->se_sessionid.data;
351
352         clid->cl_boot = sid->clientid.cl_boot;
353         clid->cl_id = sid->clientid.cl_id;
354 }
355
356 static __be32
357 nfsd4_open(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
358            union nfsd4_op_u *u)
359 {
360         struct nfsd4_open *open = &u->open;
361         __be32 status;
362         struct svc_fh *resfh = NULL;
363         struct net *net = SVC_NET(rqstp);
364         struct nfsd_net *nn = net_generic(net, nfsd_net_id);
365         bool reclaim = false;
366
367         dprintk("NFSD: nfsd4_open filename %.*s op_openowner %p\n",
368                 (int)open->op_fnamelen, open->op_fname,
369                 open->op_openowner);
370
371         /* This check required by spec. */
372         if (open->op_create && open->op_claim_type != NFS4_OPEN_CLAIM_NULL)
373                 return nfserr_inval;
374
375         open->op_created = false;
376         /*
377          * RFC5661 18.51.3
378          * Before RECLAIM_COMPLETE done, server should deny new lock
379          */
380         if (nfsd4_has_session(cstate) &&
381             !test_bit(NFSD4_CLIENT_RECLAIM_COMPLETE,
382                       &cstate->session->se_client->cl_flags) &&
383             open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS)
384                 return nfserr_grace;
385
386         if (nfsd4_has_session(cstate))
387                 copy_clientid(&open->op_clientid, cstate->session);
388
389         /* check seqid for replay. set nfs4_owner */
390         status = nfsd4_process_open1(cstate, open, nn);
391         if (status == nfserr_replay_me) {
392                 struct nfs4_replay *rp = &open->op_openowner->oo_owner.so_replay;
393                 fh_put(&cstate->current_fh);
394                 fh_copy_shallow(&cstate->current_fh.fh_handle,
395                                 &rp->rp_openfh);
396                 status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
397                 if (status)
398                         dprintk("nfsd4_open: replay failed"
399                                 " restoring previous filehandle\n");
400                 else
401                         status = nfserr_replay_me;
402         }
403         if (status)
404                 goto out;
405         if (open->op_xdr_error) {
406                 status = open->op_xdr_error;
407                 goto out;
408         }
409
410         status = nfsd4_check_open_attributes(rqstp, cstate, open);
411         if (status)
412                 goto out;
413
414         /* Openowner is now set, so sequence id will get bumped.  Now we need
415          * these checks before we do any creates: */
416         status = nfserr_grace;
417         if (opens_in_grace(net) && open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS)
418                 goto out;
419         status = nfserr_no_grace;
420         if (!opens_in_grace(net) && open->op_claim_type == NFS4_OPEN_CLAIM_PREVIOUS)
421                 goto out;
422
423         switch (open->op_claim_type) {
424                 case NFS4_OPEN_CLAIM_DELEGATE_CUR:
425                 case NFS4_OPEN_CLAIM_NULL:
426                         status = do_open_lookup(rqstp, cstate, open, &resfh);
427                         if (status)
428                                 goto out;
429                         break;
430                 case NFS4_OPEN_CLAIM_PREVIOUS:
431                         status = nfs4_check_open_reclaim(&open->op_clientid,
432                                                          cstate, nn);
433                         if (status)
434                                 goto out;
435                         open->op_openowner->oo_flags |= NFS4_OO_CONFIRMED;
436                         reclaim = true;
437                         fallthrough;
438                 case NFS4_OPEN_CLAIM_FH:
439                 case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
440                         status = do_open_fhandle(rqstp, cstate, open);
441                         if (status)
442                                 goto out;
443                         resfh = &cstate->current_fh;
444                         break;
445                 case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
446                 case NFS4_OPEN_CLAIM_DELEGATE_PREV:
447                         dprintk("NFSD: unsupported OPEN claim type %d\n",
448                                 open->op_claim_type);
449                         status = nfserr_notsupp;
450                         goto out;
451                 default:
452                         dprintk("NFSD: Invalid OPEN claim type %d\n",
453                                 open->op_claim_type);
454                         status = nfserr_inval;
455                         goto out;
456         }
457         /*
458          * nfsd4_process_open2() does the actual opening of the file.  If
459          * successful, it (1) truncates the file if open->op_truncate was
460          * set, (2) sets open->op_stateid, (3) sets open->op_delegation.
461          */
462         status = nfsd4_process_open2(rqstp, resfh, open);
463         WARN(status && open->op_created,
464              "nfsd4_process_open2 failed to open newly-created file! status=%u\n",
465              be32_to_cpu(status));
466         if (reclaim && !status)
467                 nn->somebody_reclaimed = true;
468 out:
469         if (resfh && resfh != &cstate->current_fh) {
470                 fh_dup2(&cstate->current_fh, resfh);
471                 fh_put(resfh);
472                 kfree(resfh);
473         }
474         nfsd4_cleanup_open_state(cstate, open);
475         nfsd4_bump_seqid(cstate, status);
476         return status;
477 }
478
479 /*
480  * OPEN is the only seqid-mutating operation whose decoding can fail
481  * with a seqid-mutating error (specifically, decoding of user names in
482  * the attributes).  Therefore we have to do some processing to look up
483  * the stateowner so that we can bump the seqid.
484  */
485 static __be32 nfsd4_open_omfg(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate, struct nfsd4_op *op)
486 {
487         struct nfsd4_open *open = &op->u.open;
488
489         if (!seqid_mutating_err(ntohl(op->status)))
490                 return op->status;
491         if (nfsd4_has_session(cstate))
492                 return op->status;
493         open->op_xdr_error = op->status;
494         return nfsd4_open(rqstp, cstate, &op->u);
495 }
496
497 /*
498  * filehandle-manipulating ops.
499  */
500 static __be32
501 nfsd4_getfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
502             union nfsd4_op_u *u)
503 {
504         u->getfh = &cstate->current_fh;
505         return nfs_ok;
506 }
507
508 static __be32
509 nfsd4_putfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
510             union nfsd4_op_u *u)
511 {
512         struct nfsd4_putfh *putfh = &u->putfh;
513         __be32 ret;
514
515         fh_put(&cstate->current_fh);
516         cstate->current_fh.fh_handle.fh_size = putfh->pf_fhlen;
517         memcpy(&cstate->current_fh.fh_handle.fh_base, putfh->pf_fhval,
518                putfh->pf_fhlen);
519         ret = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_BYPASS_GSS);
520 #ifdef CONFIG_NFSD_V4_2_INTER_SSC
521         if (ret == nfserr_stale && putfh->no_verify) {
522                 SET_FH_FLAG(&cstate->current_fh, NFSD4_FH_FOREIGN);
523                 ret = 0;
524         }
525 #endif
526         return ret;
527 }
528
529 static __be32
530 nfsd4_putrootfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
531                 union nfsd4_op_u *u)
532 {
533         __be32 status;
534
535         fh_put(&cstate->current_fh);
536         status = exp_pseudoroot(rqstp, &cstate->current_fh);
537         return status;
538 }
539
540 static __be32
541 nfsd4_restorefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
542                 union nfsd4_op_u *u)
543 {
544         if (!cstate->save_fh.fh_dentry)
545                 return nfserr_restorefh;
546
547         fh_dup2(&cstate->current_fh, &cstate->save_fh);
548         if (HAS_CSTATE_FLAG(cstate, SAVED_STATE_ID_FLAG)) {
549                 memcpy(&cstate->current_stateid, &cstate->save_stateid, sizeof(stateid_t));
550                 SET_CSTATE_FLAG(cstate, CURRENT_STATE_ID_FLAG);
551         }
552         return nfs_ok;
553 }
554
555 static __be32
556 nfsd4_savefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
557              union nfsd4_op_u *u)
558 {
559         fh_dup2(&cstate->save_fh, &cstate->current_fh);
560         if (HAS_CSTATE_FLAG(cstate, CURRENT_STATE_ID_FLAG)) {
561                 memcpy(&cstate->save_stateid, &cstate->current_stateid, sizeof(stateid_t));
562                 SET_CSTATE_FLAG(cstate, SAVED_STATE_ID_FLAG);
563         }
564         return nfs_ok;
565 }
566
567 /*
568  * misc nfsv4 ops
569  */
570 static __be32
571 nfsd4_access(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
572              union nfsd4_op_u *u)
573 {
574         struct nfsd4_access *access = &u->access;
575         u32 access_full;
576
577         access_full = NFS3_ACCESS_FULL;
578         if (cstate->minorversion >= 2)
579                 access_full |= NFS4_ACCESS_XALIST | NFS4_ACCESS_XAREAD |
580                                NFS4_ACCESS_XAWRITE;
581
582         if (access->ac_req_access & ~access_full)
583                 return nfserr_inval;
584
585         access->ac_resp_access = access->ac_req_access;
586         return nfsd_access(rqstp, &cstate->current_fh, &access->ac_resp_access,
587                            &access->ac_supported);
588 }
589
590 static void gen_boot_verifier(nfs4_verifier *verifier, struct net *net)
591 {
592         __be32 *verf = (__be32 *)verifier->data;
593
594         BUILD_BUG_ON(2*sizeof(*verf) != sizeof(verifier->data));
595
596         nfsd_copy_boot_verifier(verf, net_generic(net, nfsd_net_id));
597 }
598
599 static __be32
600 nfsd4_commit(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
601              union nfsd4_op_u *u)
602 {
603         struct nfsd4_commit *commit = &u->commit;
604
605         return nfsd_commit(rqstp, &cstate->current_fh, commit->co_offset,
606                              commit->co_count,
607                              (__be32 *)commit->co_verf.data);
608 }
609
610 static __be32
611 nfsd4_create(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
612              union nfsd4_op_u *u)
613 {
614         struct nfsd4_create *create = &u->create;
615         struct svc_fh resfh;
616         __be32 status;
617         dev_t rdev;
618
619         fh_init(&resfh, NFS4_FHSIZE);
620
621         status = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_NOP);
622         if (status)
623                 return status;
624
625         status = check_attr_support(rqstp, cstate, create->cr_bmval,
626                                     nfsd_attrmask);
627         if (status)
628                 return status;
629
630         current->fs->umask = create->cr_umask;
631         switch (create->cr_type) {
632         case NF4LNK:
633                 status = nfsd_symlink(rqstp, &cstate->current_fh,
634                                       create->cr_name, create->cr_namelen,
635                                       create->cr_data, &resfh);
636                 break;
637
638         case NF4BLK:
639                 status = nfserr_inval;
640                 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
641                 if (MAJOR(rdev) != create->cr_specdata1 ||
642                     MINOR(rdev) != create->cr_specdata2)
643                         goto out_umask;
644                 status = nfsd_create(rqstp, &cstate->current_fh,
645                                      create->cr_name, create->cr_namelen,
646                                      &create->cr_iattr, S_IFBLK, rdev, &resfh);
647                 break;
648
649         case NF4CHR:
650                 status = nfserr_inval;
651                 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
652                 if (MAJOR(rdev) != create->cr_specdata1 ||
653                     MINOR(rdev) != create->cr_specdata2)
654                         goto out_umask;
655                 status = nfsd_create(rqstp, &cstate->current_fh,
656                                      create->cr_name, create->cr_namelen,
657                                      &create->cr_iattr,S_IFCHR, rdev, &resfh);
658                 break;
659
660         case NF4SOCK:
661                 status = nfsd_create(rqstp, &cstate->current_fh,
662                                      create->cr_name, create->cr_namelen,
663                                      &create->cr_iattr, S_IFSOCK, 0, &resfh);
664                 break;
665
666         case NF4FIFO:
667                 status = nfsd_create(rqstp, &cstate->current_fh,
668                                      create->cr_name, create->cr_namelen,
669                                      &create->cr_iattr, S_IFIFO, 0, &resfh);
670                 break;
671
672         case NF4DIR:
673                 create->cr_iattr.ia_valid &= ~ATTR_SIZE;
674                 status = nfsd_create(rqstp, &cstate->current_fh,
675                                      create->cr_name, create->cr_namelen,
676                                      &create->cr_iattr, S_IFDIR, 0, &resfh);
677                 break;
678
679         default:
680                 status = nfserr_badtype;
681         }
682
683         if (status)
684                 goto out;
685
686         if (create->cr_label.len)
687                 nfsd4_security_inode_setsecctx(&resfh, &create->cr_label, create->cr_bmval);
688
689         if (create->cr_acl != NULL)
690                 do_set_nfs4_acl(rqstp, &resfh, create->cr_acl,
691                                 create->cr_bmval);
692
693         fh_unlock(&cstate->current_fh);
694         set_change_info(&create->cr_cinfo, &cstate->current_fh);
695         fh_dup2(&cstate->current_fh, &resfh);
696 out:
697         fh_put(&resfh);
698 out_umask:
699         current->fs->umask = 0;
700         return status;
701 }
702
703 static __be32
704 nfsd4_getattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
705               union nfsd4_op_u *u)
706 {
707         struct nfsd4_getattr *getattr = &u->getattr;
708         __be32 status;
709
710         status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
711         if (status)
712                 return status;
713
714         if (getattr->ga_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
715                 return nfserr_inval;
716
717         getattr->ga_bmval[0] &= nfsd_suppattrs[cstate->minorversion][0];
718         getattr->ga_bmval[1] &= nfsd_suppattrs[cstate->minorversion][1];
719         getattr->ga_bmval[2] &= nfsd_suppattrs[cstate->minorversion][2];
720
721         getattr->ga_fhp = &cstate->current_fh;
722         return nfs_ok;
723 }
724
725 static __be32
726 nfsd4_link(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
727            union nfsd4_op_u *u)
728 {
729         struct nfsd4_link *link = &u->link;
730         __be32 status;
731
732         status = nfsd_link(rqstp, &cstate->current_fh,
733                            link->li_name, link->li_namelen, &cstate->save_fh);
734         if (!status)
735                 set_change_info(&link->li_cinfo, &cstate->current_fh);
736         return status;
737 }
738
739 static __be32 nfsd4_do_lookupp(struct svc_rqst *rqstp, struct svc_fh *fh)
740 {
741         struct svc_fh tmp_fh;
742         __be32 ret;
743
744         fh_init(&tmp_fh, NFS4_FHSIZE);
745         ret = exp_pseudoroot(rqstp, &tmp_fh);
746         if (ret)
747                 return ret;
748         if (tmp_fh.fh_dentry == fh->fh_dentry) {
749                 fh_put(&tmp_fh);
750                 return nfserr_noent;
751         }
752         fh_put(&tmp_fh);
753         return nfsd_lookup(rqstp, fh, "..", 2, fh);
754 }
755
756 static __be32
757 nfsd4_lookupp(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
758               union nfsd4_op_u *u)
759 {
760         return nfsd4_do_lookupp(rqstp, &cstate->current_fh);
761 }
762
763 static __be32
764 nfsd4_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
765              union nfsd4_op_u *u)
766 {
767         return nfsd_lookup(rqstp, &cstate->current_fh,
768                            u->lookup.lo_name, u->lookup.lo_len,
769                            &cstate->current_fh);
770 }
771
772 static __be32
773 nfsd4_read(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
774            union nfsd4_op_u *u)
775 {
776         struct nfsd4_read *read = &u->read;
777         __be32 status;
778
779         read->rd_nf = NULL;
780         if (read->rd_offset >= OFFSET_MAX)
781                 return nfserr_inval;
782
783         trace_nfsd_read_start(rqstp, &cstate->current_fh,
784                               read->rd_offset, read->rd_length);
785
786         /*
787          * If we do a zero copy read, then a client will see read data
788          * that reflects the state of the file *after* performing the
789          * following compound.
790          *
791          * To ensure proper ordering, we therefore turn off zero copy if
792          * the client wants us to do more in this compound:
793          */
794         if (!nfsd4_last_compound_op(rqstp))
795                 clear_bit(RQ_SPLICE_OK, &rqstp->rq_flags);
796
797         /* check stateid */
798         status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
799                                         &read->rd_stateid, RD_STATE,
800                                         &read->rd_nf, NULL);
801         if (status) {
802                 dprintk("NFSD: nfsd4_read: couldn't process stateid!\n");
803                 goto out;
804         }
805         status = nfs_ok;
806 out:
807         read->rd_rqstp = rqstp;
808         read->rd_fhp = &cstate->current_fh;
809         return status;
810 }
811
812
813 static void
814 nfsd4_read_release(union nfsd4_op_u *u)
815 {
816         if (u->read.rd_nf)
817                 nfsd_file_put(u->read.rd_nf);
818         trace_nfsd_read_done(u->read.rd_rqstp, u->read.rd_fhp,
819                              u->read.rd_offset, u->read.rd_length);
820 }
821
822 static __be32
823 nfsd4_readdir(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
824               union nfsd4_op_u *u)
825 {
826         struct nfsd4_readdir *readdir = &u->readdir;
827         u64 cookie = readdir->rd_cookie;
828         static const nfs4_verifier zeroverf;
829
830         /* no need to check permission - this will be done in nfsd_readdir() */
831
832         if (readdir->rd_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
833                 return nfserr_inval;
834
835         readdir->rd_bmval[0] &= nfsd_suppattrs[cstate->minorversion][0];
836         readdir->rd_bmval[1] &= nfsd_suppattrs[cstate->minorversion][1];
837         readdir->rd_bmval[2] &= nfsd_suppattrs[cstate->minorversion][2];
838
839         if ((cookie == 1) || (cookie == 2) ||
840             (cookie == 0 && memcmp(readdir->rd_verf.data, zeroverf.data, NFS4_VERIFIER_SIZE)))
841                 return nfserr_bad_cookie;
842
843         readdir->rd_rqstp = rqstp;
844         readdir->rd_fhp = &cstate->current_fh;
845         return nfs_ok;
846 }
847
848 static __be32
849 nfsd4_readlink(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
850                union nfsd4_op_u *u)
851 {
852         u->readlink.rl_rqstp = rqstp;
853         u->readlink.rl_fhp = &cstate->current_fh;
854         return nfs_ok;
855 }
856
857 static __be32
858 nfsd4_remove(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
859              union nfsd4_op_u *u)
860 {
861         struct nfsd4_remove *remove = &u->remove;
862         __be32 status;
863
864         if (opens_in_grace(SVC_NET(rqstp)))
865                 return nfserr_grace;
866         status = nfsd_unlink(rqstp, &cstate->current_fh, 0,
867                              remove->rm_name, remove->rm_namelen);
868         if (!status) {
869                 fh_unlock(&cstate->current_fh);
870                 set_change_info(&remove->rm_cinfo, &cstate->current_fh);
871         }
872         return status;
873 }
874
875 static __be32
876 nfsd4_rename(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
877              union nfsd4_op_u *u)
878 {
879         struct nfsd4_rename *rename = &u->rename;
880         __be32 status;
881
882         if (opens_in_grace(SVC_NET(rqstp)))
883                 return nfserr_grace;
884         status = nfsd_rename(rqstp, &cstate->save_fh, rename->rn_sname,
885                              rename->rn_snamelen, &cstate->current_fh,
886                              rename->rn_tname, rename->rn_tnamelen);
887         if (status)
888                 return status;
889         set_change_info(&rename->rn_sinfo, &cstate->current_fh);
890         set_change_info(&rename->rn_tinfo, &cstate->save_fh);
891         return nfs_ok;
892 }
893
894 static __be32
895 nfsd4_secinfo(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
896               union nfsd4_op_u *u)
897 {
898         struct nfsd4_secinfo *secinfo = &u->secinfo;
899         struct svc_export *exp;
900         struct dentry *dentry;
901         __be32 err;
902
903         err = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_EXEC);
904         if (err)
905                 return err;
906         err = nfsd_lookup_dentry(rqstp, &cstate->current_fh,
907                                     secinfo->si_name, secinfo->si_namelen,
908                                     &exp, &dentry);
909         if (err)
910                 return err;
911         fh_unlock(&cstate->current_fh);
912         if (d_really_is_negative(dentry)) {
913                 exp_put(exp);
914                 err = nfserr_noent;
915         } else
916                 secinfo->si_exp = exp;
917         dput(dentry);
918         if (cstate->minorversion)
919                 /* See rfc 5661 section 2.6.3.1.1.8 */
920                 fh_put(&cstate->current_fh);
921         return err;
922 }
923
924 static __be32
925 nfsd4_secinfo_no_name(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
926                 union nfsd4_op_u *u)
927 {
928         __be32 err;
929
930         switch (u->secinfo_no_name.sin_style) {
931         case NFS4_SECINFO_STYLE4_CURRENT_FH:
932                 break;
933         case NFS4_SECINFO_STYLE4_PARENT:
934                 err = nfsd4_do_lookupp(rqstp, &cstate->current_fh);
935                 if (err)
936                         return err;
937                 break;
938         default:
939                 return nfserr_inval;
940         }
941
942         u->secinfo_no_name.sin_exp = exp_get(cstate->current_fh.fh_export);
943         fh_put(&cstate->current_fh);
944         return nfs_ok;
945 }
946
947 static void
948 nfsd4_secinfo_release(union nfsd4_op_u *u)
949 {
950         if (u->secinfo.si_exp)
951                 exp_put(u->secinfo.si_exp);
952 }
953
954 static void
955 nfsd4_secinfo_no_name_release(union nfsd4_op_u *u)
956 {
957         if (u->secinfo_no_name.sin_exp)
958                 exp_put(u->secinfo_no_name.sin_exp);
959 }
960
961 static __be32
962 nfsd4_setattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
963               union nfsd4_op_u *u)
964 {
965         struct nfsd4_setattr *setattr = &u->setattr;
966         __be32 status = nfs_ok;
967         int err;
968
969         if (setattr->sa_iattr.ia_valid & ATTR_SIZE) {
970                 status = nfs4_preprocess_stateid_op(rqstp, cstate,
971                                 &cstate->current_fh, &setattr->sa_stateid,
972                                 WR_STATE, NULL, NULL);
973                 if (status) {
974                         dprintk("NFSD: nfsd4_setattr: couldn't process stateid!\n");
975                         return status;
976                 }
977         }
978         err = fh_want_write(&cstate->current_fh);
979         if (err)
980                 return nfserrno(err);
981         status = nfs_ok;
982
983         status = check_attr_support(rqstp, cstate, setattr->sa_bmval,
984                                     nfsd_attrmask);
985         if (status)
986                 goto out;
987
988         if (setattr->sa_acl != NULL)
989                 status = nfsd4_set_nfs4_acl(rqstp, &cstate->current_fh,
990                                             setattr->sa_acl);
991         if (status)
992                 goto out;
993         if (setattr->sa_label.len)
994                 status = nfsd4_set_nfs4_label(rqstp, &cstate->current_fh,
995                                 &setattr->sa_label);
996         if (status)
997                 goto out;
998         status = nfsd_setattr(rqstp, &cstate->current_fh, &setattr->sa_iattr,
999                                 0, (time64_t)0);
1000 out:
1001         fh_drop_write(&cstate->current_fh);
1002         return status;
1003 }
1004
1005 static __be32
1006 nfsd4_write(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1007             union nfsd4_op_u *u)
1008 {
1009         struct nfsd4_write *write = &u->write;
1010         stateid_t *stateid = &write->wr_stateid;
1011         struct nfsd_file *nf = NULL;
1012         __be32 status = nfs_ok;
1013         unsigned long cnt;
1014         int nvecs;
1015
1016         if (write->wr_offset >= OFFSET_MAX)
1017                 return nfserr_inval;
1018
1019         cnt = write->wr_buflen;
1020         trace_nfsd_write_start(rqstp, &cstate->current_fh,
1021                                write->wr_offset, cnt);
1022         status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1023                                                 stateid, WR_STATE, &nf, NULL);
1024         if (status) {
1025                 dprintk("NFSD: nfsd4_write: couldn't process stateid!\n");
1026                 return status;
1027         }
1028
1029         write->wr_how_written = write->wr_stable_how;
1030
1031         nvecs = svc_fill_write_vector(rqstp, write->wr_payload.pages,
1032                                       write->wr_payload.head, write->wr_buflen);
1033         WARN_ON_ONCE(nvecs > ARRAY_SIZE(rqstp->rq_vec));
1034
1035         status = nfsd_vfs_write(rqstp, &cstate->current_fh, nf,
1036                                 write->wr_offset, rqstp->rq_vec, nvecs, &cnt,
1037                                 write->wr_how_written,
1038                                 (__be32 *)write->wr_verifier.data);
1039         nfsd_file_put(nf);
1040
1041         write->wr_bytes_written = cnt;
1042         trace_nfsd_write_done(rqstp, &cstate->current_fh,
1043                               write->wr_offset, cnt);
1044         return status;
1045 }
1046
1047 static __be32
1048 nfsd4_verify_copy(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1049                   stateid_t *src_stateid, struct nfsd_file **src,
1050                   stateid_t *dst_stateid, struct nfsd_file **dst)
1051 {
1052         __be32 status;
1053
1054         if (!cstate->save_fh.fh_dentry)
1055                 return nfserr_nofilehandle;
1056
1057         status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->save_fh,
1058                                             src_stateid, RD_STATE, src, NULL);
1059         if (status) {
1060                 dprintk("NFSD: %s: couldn't process src stateid!\n", __func__);
1061                 goto out;
1062         }
1063
1064         status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1065                                             dst_stateid, WR_STATE, dst, NULL);
1066         if (status) {
1067                 dprintk("NFSD: %s: couldn't process dst stateid!\n", __func__);
1068                 goto out_put_src;
1069         }
1070
1071         /* fix up for NFS-specific error code */
1072         if (!S_ISREG(file_inode((*src)->nf_file)->i_mode) ||
1073             !S_ISREG(file_inode((*dst)->nf_file)->i_mode)) {
1074                 status = nfserr_wrong_type;
1075                 goto out_put_dst;
1076         }
1077
1078 out:
1079         return status;
1080 out_put_dst:
1081         nfsd_file_put(*dst);
1082 out_put_src:
1083         nfsd_file_put(*src);
1084         goto out;
1085 }
1086
1087 static __be32
1088 nfsd4_clone(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1089                 union nfsd4_op_u *u)
1090 {
1091         struct nfsd4_clone *clone = &u->clone;
1092         struct nfsd_file *src, *dst;
1093         __be32 status;
1094
1095         status = nfsd4_verify_copy(rqstp, cstate, &clone->cl_src_stateid, &src,
1096                                    &clone->cl_dst_stateid, &dst);
1097         if (status)
1098                 goto out;
1099
1100         status = nfsd4_clone_file_range(src, clone->cl_src_pos,
1101                         dst, clone->cl_dst_pos, clone->cl_count,
1102                         EX_ISSYNC(cstate->current_fh.fh_export));
1103
1104         nfsd_file_put(dst);
1105         nfsd_file_put(src);
1106 out:
1107         return status;
1108 }
1109
1110 void nfs4_put_copy(struct nfsd4_copy *copy)
1111 {
1112         if (!refcount_dec_and_test(&copy->refcount))
1113                 return;
1114         kfree(copy);
1115 }
1116
1117 static bool
1118 check_and_set_stop_copy(struct nfsd4_copy *copy)
1119 {
1120         bool value;
1121
1122         spin_lock(&copy->cp_clp->async_lock);
1123         value = copy->stopped;
1124         if (!copy->stopped)
1125                 copy->stopped = true;
1126         spin_unlock(&copy->cp_clp->async_lock);
1127         return value;
1128 }
1129
1130 static void nfsd4_stop_copy(struct nfsd4_copy *copy)
1131 {
1132         /* only 1 thread should stop the copy */
1133         if (!check_and_set_stop_copy(copy))
1134                 kthread_stop(copy->copy_task);
1135         nfs4_put_copy(copy);
1136 }
1137
1138 static struct nfsd4_copy *nfsd4_get_copy(struct nfs4_client *clp)
1139 {
1140         struct nfsd4_copy *copy = NULL;
1141
1142         spin_lock(&clp->async_lock);
1143         if (!list_empty(&clp->async_copies)) {
1144                 copy = list_first_entry(&clp->async_copies, struct nfsd4_copy,
1145                                         copies);
1146                 refcount_inc(&copy->refcount);
1147         }
1148         spin_unlock(&clp->async_lock);
1149         return copy;
1150 }
1151
1152 void nfsd4_shutdown_copy(struct nfs4_client *clp)
1153 {
1154         struct nfsd4_copy *copy;
1155
1156         while ((copy = nfsd4_get_copy(clp)) != NULL)
1157                 nfsd4_stop_copy(copy);
1158 }
1159 #ifdef CONFIG_NFSD_V4_2_INTER_SSC
1160
1161 extern struct file *nfs42_ssc_open(struct vfsmount *ss_mnt,
1162                                    struct nfs_fh *src_fh,
1163                                    nfs4_stateid *stateid);
1164 extern void nfs42_ssc_close(struct file *filep);
1165
1166 extern void nfs_sb_deactive(struct super_block *sb);
1167
1168 #define NFSD42_INTERSSC_MOUNTOPS "vers=4.2,addr=%s,sec=sys"
1169
1170 /*
1171  * Support one copy source server for now.
1172  */
1173 static __be32
1174 nfsd4_interssc_connect(struct nl4_server *nss, struct svc_rqst *rqstp,
1175                        struct vfsmount **mount)
1176 {
1177         struct file_system_type *type;
1178         struct vfsmount *ss_mnt;
1179         struct nfs42_netaddr *naddr;
1180         struct sockaddr_storage tmp_addr;
1181         size_t tmp_addrlen, match_netid_len = 3;
1182         char *startsep = "", *endsep = "", *match_netid = "tcp";
1183         char *ipaddr, *dev_name, *raw_data;
1184         int len, raw_len;
1185         __be32 status = nfserr_inval;
1186
1187         naddr = &nss->u.nl4_addr;
1188         tmp_addrlen = rpc_uaddr2sockaddr(SVC_NET(rqstp), naddr->addr,
1189                                          naddr->addr_len,
1190                                          (struct sockaddr *)&tmp_addr,
1191                                          sizeof(tmp_addr));
1192         if (tmp_addrlen == 0)
1193                 goto out_err;
1194
1195         if (tmp_addr.ss_family == AF_INET6) {
1196                 startsep = "[";
1197                 endsep = "]";
1198                 match_netid = "tcp6";
1199                 match_netid_len = 4;
1200         }
1201
1202         if (naddr->netid_len != match_netid_len ||
1203                 strncmp(naddr->netid, match_netid, naddr->netid_len))
1204                 goto out_err;
1205
1206         /* Construct the raw data for the vfs_kern_mount call */
1207         len = RPC_MAX_ADDRBUFLEN + 1;
1208         ipaddr = kzalloc(len, GFP_KERNEL);
1209         if (!ipaddr)
1210                 goto out_err;
1211
1212         rpc_ntop((struct sockaddr *)&tmp_addr, ipaddr, len);
1213
1214         /* 2 for ipv6 endsep and startsep. 3 for ":/" and trailing '/0'*/
1215
1216         raw_len = strlen(NFSD42_INTERSSC_MOUNTOPS) + strlen(ipaddr);
1217         raw_data = kzalloc(raw_len, GFP_KERNEL);
1218         if (!raw_data)
1219                 goto out_free_ipaddr;
1220
1221         snprintf(raw_data, raw_len, NFSD42_INTERSSC_MOUNTOPS, ipaddr);
1222
1223         status = nfserr_nodev;
1224         type = get_fs_type("nfs");
1225         if (!type)
1226                 goto out_free_rawdata;
1227
1228         /* Set the server:<export> for the vfs_kern_mount call */
1229         dev_name = kzalloc(len + 5, GFP_KERNEL);
1230         if (!dev_name)
1231                 goto out_free_rawdata;
1232         snprintf(dev_name, len + 5, "%s%s%s:/", startsep, ipaddr, endsep);
1233
1234         /* Use an 'internal' mount: SB_KERNMOUNT -> MNT_INTERNAL */
1235         ss_mnt = vfs_kern_mount(type, SB_KERNMOUNT, dev_name, raw_data);
1236         module_put(type->owner);
1237         if (IS_ERR(ss_mnt))
1238                 goto out_free_devname;
1239
1240         status = 0;
1241         *mount = ss_mnt;
1242
1243 out_free_devname:
1244         kfree(dev_name);
1245 out_free_rawdata:
1246         kfree(raw_data);
1247 out_free_ipaddr:
1248         kfree(ipaddr);
1249 out_err:
1250         return status;
1251 }
1252
1253 static void
1254 nfsd4_interssc_disconnect(struct vfsmount *ss_mnt)
1255 {
1256         nfs_do_sb_deactive(ss_mnt->mnt_sb);
1257         mntput(ss_mnt);
1258 }
1259
1260 /*
1261  * Verify COPY destination stateid.
1262  *
1263  * Connect to the source server with NFSv4.1.
1264  * Create the source struct file for nfsd_copy_range.
1265  * Called with COPY cstate:
1266  *    SAVED_FH: source filehandle
1267  *    CURRENT_FH: destination filehandle
1268  */
1269 static __be32
1270 nfsd4_setup_inter_ssc(struct svc_rqst *rqstp,
1271                       struct nfsd4_compound_state *cstate,
1272                       struct nfsd4_copy *copy, struct vfsmount **mount)
1273 {
1274         struct svc_fh *s_fh = NULL;
1275         stateid_t *s_stid = &copy->cp_src_stateid;
1276         __be32 status = nfserr_inval;
1277
1278         /* Verify the destination stateid and set dst struct file*/
1279         status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1280                                             &copy->cp_dst_stateid,
1281                                             WR_STATE, &copy->nf_dst, NULL);
1282         if (status)
1283                 goto out;
1284
1285         status = nfsd4_interssc_connect(&copy->cp_src, rqstp, mount);
1286         if (status)
1287                 goto out;
1288
1289         s_fh = &cstate->save_fh;
1290
1291         copy->c_fh.size = s_fh->fh_handle.fh_size;
1292         memcpy(copy->c_fh.data, &s_fh->fh_handle.fh_base, copy->c_fh.size);
1293         copy->stateid.seqid = cpu_to_be32(s_stid->si_generation);
1294         memcpy(copy->stateid.other, (void *)&s_stid->si_opaque,
1295                sizeof(stateid_opaque_t));
1296
1297         status = 0;
1298 out:
1299         return status;
1300 }
1301
1302 static void
1303 nfsd4_cleanup_inter_ssc(struct vfsmount *ss_mnt, struct nfsd_file *src,
1304                         struct nfsd_file *dst)
1305 {
1306         nfs42_ssc_close(src->nf_file);
1307         /* 'src' is freed by nfsd4_do_async_copy */
1308         nfsd_file_put(dst);
1309         mntput(ss_mnt);
1310 }
1311
1312 #else /* CONFIG_NFSD_V4_2_INTER_SSC */
1313
1314 static __be32
1315 nfsd4_setup_inter_ssc(struct svc_rqst *rqstp,
1316                       struct nfsd4_compound_state *cstate,
1317                       struct nfsd4_copy *copy,
1318                       struct vfsmount **mount)
1319 {
1320         *mount = NULL;
1321         return nfserr_inval;
1322 }
1323
1324 static void
1325 nfsd4_cleanup_inter_ssc(struct vfsmount *ss_mnt, struct nfsd_file *src,
1326                         struct nfsd_file *dst)
1327 {
1328 }
1329
1330 static void
1331 nfsd4_interssc_disconnect(struct vfsmount *ss_mnt)
1332 {
1333 }
1334
1335 static struct file *nfs42_ssc_open(struct vfsmount *ss_mnt,
1336                                    struct nfs_fh *src_fh,
1337                                    nfs4_stateid *stateid)
1338 {
1339         return NULL;
1340 }
1341 #endif /* CONFIG_NFSD_V4_2_INTER_SSC */
1342
1343 static __be32
1344 nfsd4_setup_intra_ssc(struct svc_rqst *rqstp,
1345                       struct nfsd4_compound_state *cstate,
1346                       struct nfsd4_copy *copy)
1347 {
1348         return nfsd4_verify_copy(rqstp, cstate, &copy->cp_src_stateid,
1349                                  &copy->nf_src, &copy->cp_dst_stateid,
1350                                  &copy->nf_dst);
1351 }
1352
1353 static void
1354 nfsd4_cleanup_intra_ssc(struct nfsd_file *src, struct nfsd_file *dst)
1355 {
1356         nfsd_file_put(src);
1357         nfsd_file_put(dst);
1358 }
1359
1360 static void nfsd4_cb_offload_release(struct nfsd4_callback *cb)
1361 {
1362         struct nfsd4_copy *copy = container_of(cb, struct nfsd4_copy, cp_cb);
1363
1364         nfs4_put_copy(copy);
1365 }
1366
1367 static int nfsd4_cb_offload_done(struct nfsd4_callback *cb,
1368                                  struct rpc_task *task)
1369 {
1370         return 1;
1371 }
1372
1373 static const struct nfsd4_callback_ops nfsd4_cb_offload_ops = {
1374         .release = nfsd4_cb_offload_release,
1375         .done = nfsd4_cb_offload_done
1376 };
1377
1378 static void nfsd4_init_copy_res(struct nfsd4_copy *copy, bool sync)
1379 {
1380         copy->cp_res.wr_stable_how = NFS_UNSTABLE;
1381         copy->cp_synchronous = sync;
1382         gen_boot_verifier(&copy->cp_res.wr_verifier, copy->cp_clp->net);
1383 }
1384
1385 static ssize_t _nfsd_copy_file_range(struct nfsd4_copy *copy)
1386 {
1387         ssize_t bytes_copied = 0;
1388         size_t bytes_total = copy->cp_count;
1389         u64 src_pos = copy->cp_src_pos;
1390         u64 dst_pos = copy->cp_dst_pos;
1391
1392         do {
1393                 if (kthread_should_stop())
1394                         break;
1395                 bytes_copied = nfsd_copy_file_range(copy->nf_src->nf_file,
1396                                 src_pos, copy->nf_dst->nf_file, dst_pos,
1397                                 bytes_total);
1398                 if (bytes_copied <= 0)
1399                         break;
1400                 bytes_total -= bytes_copied;
1401                 copy->cp_res.wr_bytes_written += bytes_copied;
1402                 src_pos += bytes_copied;
1403                 dst_pos += bytes_copied;
1404         } while (bytes_total > 0 && !copy->cp_synchronous);
1405         return bytes_copied;
1406 }
1407
1408 static __be32 nfsd4_do_copy(struct nfsd4_copy *copy, bool sync)
1409 {
1410         __be32 status;
1411         ssize_t bytes;
1412
1413         bytes = _nfsd_copy_file_range(copy);
1414         /* for async copy, we ignore the error, client can always retry
1415          * to get the error
1416          */
1417         if (bytes < 0 && !copy->cp_res.wr_bytes_written)
1418                 status = nfserrno(bytes);
1419         else {
1420                 nfsd4_init_copy_res(copy, sync);
1421                 status = nfs_ok;
1422         }
1423
1424         if (!copy->cp_intra) /* Inter server SSC */
1425                 nfsd4_cleanup_inter_ssc(copy->ss_mnt, copy->nf_src,
1426                                         copy->nf_dst);
1427         else
1428                 nfsd4_cleanup_intra_ssc(copy->nf_src, copy->nf_dst);
1429
1430         return status;
1431 }
1432
1433 static void dup_copy_fields(struct nfsd4_copy *src, struct nfsd4_copy *dst)
1434 {
1435         dst->cp_src_pos = src->cp_src_pos;
1436         dst->cp_dst_pos = src->cp_dst_pos;
1437         dst->cp_count = src->cp_count;
1438         dst->cp_synchronous = src->cp_synchronous;
1439         memcpy(&dst->cp_res, &src->cp_res, sizeof(src->cp_res));
1440         memcpy(&dst->fh, &src->fh, sizeof(src->fh));
1441         dst->cp_clp = src->cp_clp;
1442         dst->nf_dst = nfsd_file_get(src->nf_dst);
1443         dst->cp_intra = src->cp_intra;
1444         if (src->cp_intra) /* for inter, file_src doesn't exist yet */
1445                 dst->nf_src = nfsd_file_get(src->nf_src);
1446
1447         memcpy(&dst->cp_stateid, &src->cp_stateid, sizeof(src->cp_stateid));
1448         memcpy(&dst->cp_src, &src->cp_src, sizeof(struct nl4_server));
1449         memcpy(&dst->stateid, &src->stateid, sizeof(src->stateid));
1450         memcpy(&dst->c_fh, &src->c_fh, sizeof(src->c_fh));
1451         dst->ss_mnt = src->ss_mnt;
1452 }
1453
1454 static void cleanup_async_copy(struct nfsd4_copy *copy)
1455 {
1456         nfs4_free_copy_state(copy);
1457         nfsd_file_put(copy->nf_dst);
1458         if (copy->cp_intra)
1459                 nfsd_file_put(copy->nf_src);
1460         spin_lock(&copy->cp_clp->async_lock);
1461         list_del(&copy->copies);
1462         spin_unlock(&copy->cp_clp->async_lock);
1463         nfs4_put_copy(copy);
1464 }
1465
1466 static int nfsd4_do_async_copy(void *data)
1467 {
1468         struct nfsd4_copy *copy = (struct nfsd4_copy *)data;
1469         struct nfsd4_copy *cb_copy;
1470
1471         if (!copy->cp_intra) { /* Inter server SSC */
1472                 copy->nf_src = kzalloc(sizeof(struct nfsd_file), GFP_KERNEL);
1473                 if (!copy->nf_src) {
1474                         copy->nfserr = nfserr_serverfault;
1475                         nfsd4_interssc_disconnect(copy->ss_mnt);
1476                         goto do_callback;
1477                 }
1478                 copy->nf_src->nf_file = nfs42_ssc_open(copy->ss_mnt, &copy->c_fh,
1479                                               &copy->stateid);
1480                 if (IS_ERR(copy->nf_src->nf_file)) {
1481                         copy->nfserr = nfserr_offload_denied;
1482                         nfsd4_interssc_disconnect(copy->ss_mnt);
1483                         goto do_callback;
1484                 }
1485         }
1486
1487         copy->nfserr = nfsd4_do_copy(copy, 0);
1488 do_callback:
1489         cb_copy = kzalloc(sizeof(struct nfsd4_copy), GFP_KERNEL);
1490         if (!cb_copy)
1491                 goto out;
1492         refcount_set(&cb_copy->refcount, 1);
1493         memcpy(&cb_copy->cp_res, &copy->cp_res, sizeof(copy->cp_res));
1494         cb_copy->cp_clp = copy->cp_clp;
1495         cb_copy->nfserr = copy->nfserr;
1496         memcpy(&cb_copy->fh, &copy->fh, sizeof(copy->fh));
1497         nfsd4_init_cb(&cb_copy->cp_cb, cb_copy->cp_clp,
1498                         &nfsd4_cb_offload_ops, NFSPROC4_CLNT_CB_OFFLOAD);
1499         nfsd4_run_cb(&cb_copy->cp_cb);
1500 out:
1501         if (!copy->cp_intra)
1502                 kfree(copy->nf_src);
1503         cleanup_async_copy(copy);
1504         return 0;
1505 }
1506
1507 static __be32
1508 nfsd4_copy(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1509                 union nfsd4_op_u *u)
1510 {
1511         struct nfsd4_copy *copy = &u->copy;
1512         __be32 status;
1513         struct nfsd4_copy *async_copy = NULL;
1514
1515         if (!copy->cp_intra) { /* Inter server SSC */
1516                 if (!inter_copy_offload_enable || copy->cp_synchronous) {
1517                         status = nfserr_notsupp;
1518                         goto out;
1519                 }
1520                 status = nfsd4_setup_inter_ssc(rqstp, cstate, copy,
1521                                 &copy->ss_mnt);
1522                 if (status)
1523                         return nfserr_offload_denied;
1524         } else {
1525                 status = nfsd4_setup_intra_ssc(rqstp, cstate, copy);
1526                 if (status)
1527                         return status;
1528         }
1529
1530         copy->cp_clp = cstate->clp;
1531         memcpy(&copy->fh, &cstate->current_fh.fh_handle,
1532                 sizeof(struct knfsd_fh));
1533         if (!copy->cp_synchronous) {
1534                 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
1535
1536                 status = nfserrno(-ENOMEM);
1537                 async_copy = kzalloc(sizeof(struct nfsd4_copy), GFP_KERNEL);
1538                 if (!async_copy)
1539                         goto out_err;
1540                 if (!nfs4_init_copy_state(nn, copy))
1541                         goto out_err;
1542                 refcount_set(&async_copy->refcount, 1);
1543                 memcpy(&copy->cp_res.cb_stateid, &copy->cp_stateid,
1544                         sizeof(copy->cp_stateid));
1545                 dup_copy_fields(copy, async_copy);
1546                 async_copy->copy_task = kthread_create(nfsd4_do_async_copy,
1547                                 async_copy, "%s", "copy thread");
1548                 if (IS_ERR(async_copy->copy_task))
1549                         goto out_err;
1550                 spin_lock(&async_copy->cp_clp->async_lock);
1551                 list_add(&async_copy->copies,
1552                                 &async_copy->cp_clp->async_copies);
1553                 spin_unlock(&async_copy->cp_clp->async_lock);
1554                 wake_up_process(async_copy->copy_task);
1555                 status = nfs_ok;
1556         } else {
1557                 status = nfsd4_do_copy(copy, 1);
1558         }
1559 out:
1560         return status;
1561 out_err:
1562         if (async_copy)
1563                 cleanup_async_copy(async_copy);
1564         status = nfserrno(-ENOMEM);
1565         if (!copy->cp_intra)
1566                 nfsd4_interssc_disconnect(copy->ss_mnt);
1567         goto out;
1568 }
1569
1570 struct nfsd4_copy *
1571 find_async_copy(struct nfs4_client *clp, stateid_t *stateid)
1572 {
1573         struct nfsd4_copy *copy;
1574
1575         spin_lock(&clp->async_lock);
1576         list_for_each_entry(copy, &clp->async_copies, copies) {
1577                 if (memcmp(&copy->cp_stateid.stid, stateid, NFS4_STATEID_SIZE))
1578                         continue;
1579                 refcount_inc(&copy->refcount);
1580                 spin_unlock(&clp->async_lock);
1581                 return copy;
1582         }
1583         spin_unlock(&clp->async_lock);
1584         return NULL;
1585 }
1586
1587 static __be32
1588 nfsd4_offload_cancel(struct svc_rqst *rqstp,
1589                      struct nfsd4_compound_state *cstate,
1590                      union nfsd4_op_u *u)
1591 {
1592         struct nfsd4_offload_status *os = &u->offload_status;
1593         struct nfsd4_copy *copy;
1594         struct nfs4_client *clp = cstate->clp;
1595
1596         copy = find_async_copy(clp, &os->stateid);
1597         if (!copy) {
1598                 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
1599
1600                 return manage_cpntf_state(nn, &os->stateid, clp, NULL);
1601         } else
1602                 nfsd4_stop_copy(copy);
1603
1604         return nfs_ok;
1605 }
1606
1607 static __be32
1608 nfsd4_copy_notify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1609                   union nfsd4_op_u *u)
1610 {
1611         struct nfsd4_copy_notify *cn = &u->copy_notify;
1612         __be32 status;
1613         struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
1614         struct nfs4_stid *stid;
1615         struct nfs4_cpntf_state *cps;
1616         struct nfs4_client *clp = cstate->clp;
1617
1618         status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1619                                         &cn->cpn_src_stateid, RD_STATE, NULL,
1620                                         &stid);
1621         if (status)
1622                 return status;
1623
1624         cn->cpn_sec = nn->nfsd4_lease;
1625         cn->cpn_nsec = 0;
1626
1627         status = nfserrno(-ENOMEM);
1628         cps = nfs4_alloc_init_cpntf_state(nn, stid);
1629         if (!cps)
1630                 goto out;
1631         memcpy(&cn->cpn_cnr_stateid, &cps->cp_stateid.stid, sizeof(stateid_t));
1632         memcpy(&cps->cp_p_stateid, &stid->sc_stateid, sizeof(stateid_t));
1633         memcpy(&cps->cp_p_clid, &clp->cl_clientid, sizeof(clientid_t));
1634
1635         /* For now, only return one server address in cpn_src, the
1636          * address used by the client to connect to this server.
1637          */
1638         cn->cpn_src.nl4_type = NL4_NETADDR;
1639         status = nfsd4_set_netaddr((struct sockaddr *)&rqstp->rq_daddr,
1640                                  &cn->cpn_src.u.nl4_addr);
1641         WARN_ON_ONCE(status);
1642         if (status) {
1643                 nfs4_put_cpntf_state(nn, cps);
1644                 goto out;
1645         }
1646 out:
1647         nfs4_put_stid(stid);
1648         return status;
1649 }
1650
1651 static __be32
1652 nfsd4_fallocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1653                 struct nfsd4_fallocate *fallocate, int flags)
1654 {
1655         __be32 status;
1656         struct nfsd_file *nf;
1657
1658         status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1659                                             &fallocate->falloc_stateid,
1660                                             WR_STATE, &nf, NULL);
1661         if (status != nfs_ok) {
1662                 dprintk("NFSD: nfsd4_fallocate: couldn't process stateid!\n");
1663                 return status;
1664         }
1665
1666         status = nfsd4_vfs_fallocate(rqstp, &cstate->current_fh, nf->nf_file,
1667                                      fallocate->falloc_offset,
1668                                      fallocate->falloc_length,
1669                                      flags);
1670         nfsd_file_put(nf);
1671         return status;
1672 }
1673 static __be32
1674 nfsd4_offload_status(struct svc_rqst *rqstp,
1675                      struct nfsd4_compound_state *cstate,
1676                      union nfsd4_op_u *u)
1677 {
1678         struct nfsd4_offload_status *os = &u->offload_status;
1679         __be32 status = 0;
1680         struct nfsd4_copy *copy;
1681         struct nfs4_client *clp = cstate->clp;
1682
1683         copy = find_async_copy(clp, &os->stateid);
1684         if (copy) {
1685                 os->count = copy->cp_res.wr_bytes_written;
1686                 nfs4_put_copy(copy);
1687         } else
1688                 status = nfserr_bad_stateid;
1689
1690         return status;
1691 }
1692
1693 static __be32
1694 nfsd4_allocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1695                union nfsd4_op_u *u)
1696 {
1697         return nfsd4_fallocate(rqstp, cstate, &u->allocate, 0);
1698 }
1699
1700 static __be32
1701 nfsd4_deallocate(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1702                  union nfsd4_op_u *u)
1703 {
1704         return nfsd4_fallocate(rqstp, cstate, &u->deallocate,
1705                                FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE);
1706 }
1707
1708 static __be32
1709 nfsd4_seek(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1710            union nfsd4_op_u *u)
1711 {
1712         struct nfsd4_seek *seek = &u->seek;
1713         int whence;
1714         __be32 status;
1715         struct nfsd_file *nf;
1716
1717         status = nfs4_preprocess_stateid_op(rqstp, cstate, &cstate->current_fh,
1718                                             &seek->seek_stateid,
1719                                             RD_STATE, &nf, NULL);
1720         if (status) {
1721                 dprintk("NFSD: nfsd4_seek: couldn't process stateid!\n");
1722                 return status;
1723         }
1724
1725         switch (seek->seek_whence) {
1726         case NFS4_CONTENT_DATA:
1727                 whence = SEEK_DATA;
1728                 break;
1729         case NFS4_CONTENT_HOLE:
1730                 whence = SEEK_HOLE;
1731                 break;
1732         default:
1733                 status = nfserr_union_notsupp;
1734                 goto out;
1735         }
1736
1737         /*
1738          * Note:  This call does change file->f_pos, but nothing in NFSD
1739          *        should ever file->f_pos.
1740          */
1741         seek->seek_pos = vfs_llseek(nf->nf_file, seek->seek_offset, whence);
1742         if (seek->seek_pos < 0)
1743                 status = nfserrno(seek->seek_pos);
1744         else if (seek->seek_pos >= i_size_read(file_inode(nf->nf_file)))
1745                 seek->seek_eof = true;
1746
1747 out:
1748         nfsd_file_put(nf);
1749         return status;
1750 }
1751
1752 /* This routine never returns NFS_OK!  If there are no other errors, it
1753  * will return NFSERR_SAME or NFSERR_NOT_SAME depending on whether the
1754  * attributes matched.  VERIFY is implemented by mapping NFSERR_SAME
1755  * to NFS_OK after the call; NVERIFY by mapping NFSERR_NOT_SAME to NFS_OK.
1756  */
1757 static __be32
1758 _nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1759              struct nfsd4_verify *verify)
1760 {
1761         __be32 *buf, *p;
1762         int count;
1763         __be32 status;
1764
1765         status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
1766         if (status)
1767                 return status;
1768
1769         status = check_attr_support(rqstp, cstate, verify->ve_bmval, NULL);
1770         if (status)
1771                 return status;
1772
1773         if ((verify->ve_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)
1774             || (verify->ve_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1))
1775                 return nfserr_inval;
1776         if (verify->ve_attrlen & 3)
1777                 return nfserr_inval;
1778
1779         /* count in words:
1780          *   bitmap_len(1) + bitmap(2) + attr_len(1) = 4
1781          */
1782         count = 4 + (verify->ve_attrlen >> 2);
1783         buf = kmalloc(count << 2, GFP_KERNEL);
1784         if (!buf)
1785                 return nfserr_jukebox;
1786
1787         p = buf;
1788         status = nfsd4_encode_fattr_to_buf(&p, count, &cstate->current_fh,
1789                                     cstate->current_fh.fh_export,
1790                                     cstate->current_fh.fh_dentry,
1791                                     verify->ve_bmval,
1792                                     rqstp, 0);
1793         /*
1794          * If nfsd4_encode_fattr() ran out of space, assume that's because
1795          * the attributes are longer (hence different) than those given:
1796          */
1797         if (status == nfserr_resource)
1798                 status = nfserr_not_same;
1799         if (status)
1800                 goto out_kfree;
1801
1802         /* skip bitmap */
1803         p = buf + 1 + ntohl(buf[0]);
1804         status = nfserr_not_same;
1805         if (ntohl(*p++) != verify->ve_attrlen)
1806                 goto out_kfree;
1807         if (!memcmp(p, verify->ve_attrval, verify->ve_attrlen))
1808                 status = nfserr_same;
1809
1810 out_kfree:
1811         kfree(buf);
1812         return status;
1813 }
1814
1815 static __be32
1816 nfsd4_nverify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1817               union nfsd4_op_u *u)
1818 {
1819         __be32 status;
1820
1821         status = _nfsd4_verify(rqstp, cstate, &u->verify);
1822         return status == nfserr_not_same ? nfs_ok : status;
1823 }
1824
1825 static __be32
1826 nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
1827              union nfsd4_op_u *u)
1828 {
1829         __be32 status;
1830
1831         status = _nfsd4_verify(rqstp, cstate, &u->nverify);
1832         return status == nfserr_same ? nfs_ok : status;
1833 }
1834
1835 #ifdef CONFIG_NFSD_PNFS
1836 static const struct nfsd4_layout_ops *
1837 nfsd4_layout_verify(struct svc_export *exp, unsigned int layout_type)
1838 {
1839         if (!exp->ex_layout_types) {
1840                 dprintk("%s: export does not support pNFS\n", __func__);
1841                 return NULL;
1842         }
1843
1844         if (layout_type >= LAYOUT_TYPE_MAX ||
1845             !(exp->ex_layout_types & (1 << layout_type))) {
1846                 dprintk("%s: layout type %d not supported\n",
1847                         __func__, layout_type);
1848                 return NULL;
1849         }
1850
1851         return nfsd4_layout_ops[layout_type];
1852 }
1853
1854 static __be32
1855 nfsd4_getdeviceinfo(struct svc_rqst *rqstp,
1856                 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u)
1857 {
1858         struct nfsd4_getdeviceinfo *gdp = &u->getdeviceinfo;
1859         const struct nfsd4_layout_ops *ops;
1860         struct nfsd4_deviceid_map *map;
1861         struct svc_export *exp;
1862         __be32 nfserr;
1863
1864         dprintk("%s: layout_type %u dev_id [0x%llx:0x%x] maxcnt %u\n",
1865                __func__,
1866                gdp->gd_layout_type,
1867                gdp->gd_devid.fsid_idx, gdp->gd_devid.generation,
1868                gdp->gd_maxcount);
1869
1870         map = nfsd4_find_devid_map(gdp->gd_devid.fsid_idx);
1871         if (!map) {
1872                 dprintk("%s: couldn't find device ID to export mapping!\n",
1873                         __func__);
1874                 return nfserr_noent;
1875         }
1876
1877         exp = rqst_exp_find(rqstp, map->fsid_type, map->fsid);
1878         if (IS_ERR(exp)) {
1879                 dprintk("%s: could not find device id\n", __func__);
1880                 return nfserr_noent;
1881         }
1882
1883         nfserr = nfserr_layoutunavailable;
1884         ops = nfsd4_layout_verify(exp, gdp->gd_layout_type);
1885         if (!ops)
1886                 goto out;
1887
1888         nfserr = nfs_ok;
1889         if (gdp->gd_maxcount != 0) {
1890                 nfserr = ops->proc_getdeviceinfo(exp->ex_path.mnt->mnt_sb,
1891                                 rqstp, cstate->session->se_client, gdp);
1892         }
1893
1894         gdp->gd_notify_types &= ops->notify_types;
1895 out:
1896         exp_put(exp);
1897         return nfserr;
1898 }
1899
1900 static void
1901 nfsd4_getdeviceinfo_release(union nfsd4_op_u *u)
1902 {
1903         kfree(u->getdeviceinfo.gd_device);
1904 }
1905
1906 static __be32
1907 nfsd4_layoutget(struct svc_rqst *rqstp,
1908                 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u)
1909 {
1910         struct nfsd4_layoutget *lgp = &u->layoutget;
1911         struct svc_fh *current_fh = &cstate->current_fh;
1912         const struct nfsd4_layout_ops *ops;
1913         struct nfs4_layout_stateid *ls;
1914         __be32 nfserr;
1915         int accmode = NFSD_MAY_READ_IF_EXEC;
1916
1917         switch (lgp->lg_seg.iomode) {
1918         case IOMODE_READ:
1919                 accmode |= NFSD_MAY_READ;
1920                 break;
1921         case IOMODE_RW:
1922                 accmode |= NFSD_MAY_READ | NFSD_MAY_WRITE;
1923                 break;
1924         default:
1925                 dprintk("%s: invalid iomode %d\n",
1926                         __func__, lgp->lg_seg.iomode);
1927                 nfserr = nfserr_badiomode;
1928                 goto out;
1929         }
1930
1931         nfserr = fh_verify(rqstp, current_fh, 0, accmode);
1932         if (nfserr)
1933                 goto out;
1934
1935         nfserr = nfserr_layoutunavailable;
1936         ops = nfsd4_layout_verify(current_fh->fh_export, lgp->lg_layout_type);
1937         if (!ops)
1938                 goto out;
1939
1940         /*
1941          * Verify minlength and range as per RFC5661:
1942          *  o  If loga_length is less than loga_minlength,
1943          *     the metadata server MUST return NFS4ERR_INVAL.
1944          *  o  If the sum of loga_offset and loga_minlength exceeds
1945          *     NFS4_UINT64_MAX, and loga_minlength is not
1946          *     NFS4_UINT64_MAX, the error NFS4ERR_INVAL MUST result.
1947          *  o  If the sum of loga_offset and loga_length exceeds
1948          *     NFS4_UINT64_MAX, and loga_length is not NFS4_UINT64_MAX,
1949          *     the error NFS4ERR_INVAL MUST result.
1950          */
1951         nfserr = nfserr_inval;
1952         if (lgp->lg_seg.length < lgp->lg_minlength ||
1953             (lgp->lg_minlength != NFS4_MAX_UINT64 &&
1954              lgp->lg_minlength > NFS4_MAX_UINT64 - lgp->lg_seg.offset) ||
1955             (lgp->lg_seg.length != NFS4_MAX_UINT64 &&
1956              lgp->lg_seg.length > NFS4_MAX_UINT64 - lgp->lg_seg.offset))
1957                 goto out;
1958         if (lgp->lg_seg.length == 0)
1959                 goto out;
1960
1961         nfserr = nfsd4_preprocess_layout_stateid(rqstp, cstate, &lgp->lg_sid,
1962                                                 true, lgp->lg_layout_type, &ls);
1963         if (nfserr) {
1964                 trace_nfsd_layout_get_lookup_fail(&lgp->lg_sid);
1965                 goto out;
1966         }
1967
1968         nfserr = nfserr_recallconflict;
1969         if (atomic_read(&ls->ls_stid.sc_file->fi_lo_recalls))
1970                 goto out_put_stid;
1971
1972         nfserr = ops->proc_layoutget(d_inode(current_fh->fh_dentry),
1973                                      current_fh, lgp);
1974         if (nfserr)
1975                 goto out_put_stid;
1976
1977         nfserr = nfsd4_insert_layout(lgp, ls);
1978
1979 out_put_stid:
1980         mutex_unlock(&ls->ls_mutex);
1981         nfs4_put_stid(&ls->ls_stid);
1982 out:
1983         return nfserr;
1984 }
1985
1986 static void
1987 nfsd4_layoutget_release(union nfsd4_op_u *u)
1988 {
1989         kfree(u->layoutget.lg_content);
1990 }
1991
1992 static __be32
1993 nfsd4_layoutcommit(struct svc_rqst *rqstp,
1994                 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u)
1995 {
1996         struct nfsd4_layoutcommit *lcp = &u->layoutcommit;
1997         const struct nfsd4_layout_seg *seg = &lcp->lc_seg;
1998         struct svc_fh *current_fh = &cstate->current_fh;
1999         const struct nfsd4_layout_ops *ops;
2000         loff_t new_size = lcp->lc_last_wr + 1;
2001         struct inode *inode;
2002         struct nfs4_layout_stateid *ls;
2003         __be32 nfserr;
2004
2005         nfserr = fh_verify(rqstp, current_fh, 0, NFSD_MAY_WRITE);
2006         if (nfserr)
2007                 goto out;
2008
2009         nfserr = nfserr_layoutunavailable;
2010         ops = nfsd4_layout_verify(current_fh->fh_export, lcp->lc_layout_type);
2011         if (!ops)
2012                 goto out;
2013         inode = d_inode(current_fh->fh_dentry);
2014
2015         nfserr = nfserr_inval;
2016         if (new_size <= seg->offset) {
2017                 dprintk("pnfsd: last write before layout segment\n");
2018                 goto out;
2019         }
2020         if (new_size > seg->offset + seg->length) {
2021                 dprintk("pnfsd: last write beyond layout segment\n");
2022                 goto out;
2023         }
2024         if (!lcp->lc_newoffset && new_size > i_size_read(inode)) {
2025                 dprintk("pnfsd: layoutcommit beyond EOF\n");
2026                 goto out;
2027         }
2028
2029         nfserr = nfsd4_preprocess_layout_stateid(rqstp, cstate, &lcp->lc_sid,
2030                                                 false, lcp->lc_layout_type,
2031                                                 &ls);
2032         if (nfserr) {
2033                 trace_nfsd_layout_commit_lookup_fail(&lcp->lc_sid);
2034                 /* fixup error code as per RFC5661 */
2035                 if (nfserr == nfserr_bad_stateid)
2036                         nfserr = nfserr_badlayout;
2037                 goto out;
2038         }
2039
2040         /* LAYOUTCOMMIT does not require any serialization */
2041         mutex_unlock(&ls->ls_mutex);
2042
2043         if (new_size > i_size_read(inode)) {
2044                 lcp->lc_size_chg = 1;
2045                 lcp->lc_newsize = new_size;
2046         } else {
2047                 lcp->lc_size_chg = 0;
2048         }
2049
2050         nfserr = ops->proc_layoutcommit(inode, lcp);
2051         nfs4_put_stid(&ls->ls_stid);
2052 out:
2053         return nfserr;
2054 }
2055
2056 static __be32
2057 nfsd4_layoutreturn(struct svc_rqst *rqstp,
2058                 struct nfsd4_compound_state *cstate, union nfsd4_op_u *u)
2059 {
2060         struct nfsd4_layoutreturn *lrp = &u->layoutreturn;
2061         struct svc_fh *current_fh = &cstate->current_fh;
2062         __be32 nfserr;
2063
2064         nfserr = fh_verify(rqstp, current_fh, 0, NFSD_MAY_NOP);
2065         if (nfserr)
2066                 goto out;
2067
2068         nfserr = nfserr_layoutunavailable;
2069         if (!nfsd4_layout_verify(current_fh->fh_export, lrp->lr_layout_type))
2070                 goto out;
2071
2072         switch (lrp->lr_seg.iomode) {
2073         case IOMODE_READ:
2074         case IOMODE_RW:
2075         case IOMODE_ANY:
2076                 break;
2077         default:
2078                 dprintk("%s: invalid iomode %d\n", __func__,
2079                         lrp->lr_seg.iomode);
2080                 nfserr = nfserr_inval;
2081                 goto out;
2082         }
2083
2084         switch (lrp->lr_return_type) {
2085         case RETURN_FILE:
2086                 nfserr = nfsd4_return_file_layouts(rqstp, cstate, lrp);
2087                 break;
2088         case RETURN_FSID:
2089         case RETURN_ALL:
2090                 nfserr = nfsd4_return_client_layouts(rqstp, cstate, lrp);
2091                 break;
2092         default:
2093                 dprintk("%s: invalid return_type %d\n", __func__,
2094                         lrp->lr_return_type);
2095                 nfserr = nfserr_inval;
2096                 break;
2097         }
2098 out:
2099         return nfserr;
2100 }
2101 #endif /* CONFIG_NFSD_PNFS */
2102
2103 static __be32
2104 nfsd4_getxattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
2105                union nfsd4_op_u *u)
2106 {
2107         struct nfsd4_getxattr *getxattr = &u->getxattr;
2108
2109         return nfsd_getxattr(rqstp, &cstate->current_fh,
2110                              getxattr->getxa_name, &getxattr->getxa_buf,
2111                              &getxattr->getxa_len);
2112 }
2113
2114 static __be32
2115 nfsd4_setxattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
2116            union nfsd4_op_u *u)
2117 {
2118         struct nfsd4_setxattr *setxattr = &u->setxattr;
2119         __be32 ret;
2120
2121         if (opens_in_grace(SVC_NET(rqstp)))
2122                 return nfserr_grace;
2123
2124         ret = nfsd_setxattr(rqstp, &cstate->current_fh, setxattr->setxa_name,
2125                             setxattr->setxa_buf, setxattr->setxa_len,
2126                             setxattr->setxa_flags);
2127
2128         if (!ret)
2129                 set_change_info(&setxattr->setxa_cinfo, &cstate->current_fh);
2130
2131         return ret;
2132 }
2133
2134 static __be32
2135 nfsd4_listxattrs(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
2136            union nfsd4_op_u *u)
2137 {
2138         /*
2139          * Get the entire list, then copy out only the user attributes
2140          * in the encode function.
2141          */
2142         return nfsd_listxattr(rqstp, &cstate->current_fh,
2143                              &u->listxattrs.lsxa_buf, &u->listxattrs.lsxa_len);
2144 }
2145
2146 static __be32
2147 nfsd4_removexattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
2148            union nfsd4_op_u *u)
2149 {
2150         struct nfsd4_removexattr *removexattr = &u->removexattr;
2151         __be32 ret;
2152
2153         if (opens_in_grace(SVC_NET(rqstp)))
2154                 return nfserr_grace;
2155
2156         ret = nfsd_removexattr(rqstp, &cstate->current_fh,
2157             removexattr->rmxa_name);
2158
2159         if (!ret)
2160                 set_change_info(&removexattr->rmxa_cinfo, &cstate->current_fh);
2161
2162         return ret;
2163 }
2164
2165 /*
2166  * NULL call.
2167  */
2168 static __be32
2169 nfsd4_proc_null(struct svc_rqst *rqstp)
2170 {
2171         return rpc_success;
2172 }
2173
2174 static inline void nfsd4_increment_op_stats(u32 opnum)
2175 {
2176         if (opnum >= FIRST_NFS4_OP && opnum <= LAST_NFS4_OP)
2177                 nfsdstats.nfs4_opcount[opnum]++;
2178 }
2179
2180 static const struct nfsd4_operation nfsd4_ops[];
2181
2182 static const char *nfsd4_op_name(unsigned opnum);
2183
2184 /*
2185  * Enforce NFSv4.1 COMPOUND ordering rules:
2186  *
2187  * Also note, enforced elsewhere:
2188  *      - SEQUENCE other than as first op results in
2189  *        NFS4ERR_SEQUENCE_POS. (Enforced in nfsd4_sequence().)
2190  *      - BIND_CONN_TO_SESSION must be the only op in its compound.
2191  *        (Enforced in nfsd4_bind_conn_to_session().)
2192  *      - DESTROY_SESSION must be the final operation in a compound, if
2193  *        sessionid's in SEQUENCE and DESTROY_SESSION are the same.
2194  *        (Enforced in nfsd4_destroy_session().)
2195  */
2196 static __be32 nfs41_check_op_ordering(struct nfsd4_compoundargs *args)
2197 {
2198         struct nfsd4_op *first_op = &args->ops[0];
2199
2200         /* These ordering requirements don't apply to NFSv4.0: */
2201         if (args->minorversion == 0)
2202                 return nfs_ok;
2203         /* This is weird, but OK, not our problem: */
2204         if (args->opcnt == 0)
2205                 return nfs_ok;
2206         if (first_op->status == nfserr_op_illegal)
2207                 return nfs_ok;
2208         if (!(nfsd4_ops[first_op->opnum].op_flags & ALLOWED_AS_FIRST_OP))
2209                 return nfserr_op_not_in_session;
2210         if (first_op->opnum == OP_SEQUENCE)
2211                 return nfs_ok;
2212         /*
2213          * So first_op is something allowed outside a session, like
2214          * EXCHANGE_ID; but then it has to be the only op in the
2215          * compound:
2216          */
2217         if (args->opcnt != 1)
2218                 return nfserr_not_only_op;
2219         return nfs_ok;
2220 }
2221
2222 const struct nfsd4_operation *OPDESC(struct nfsd4_op *op)
2223 {
2224         return &nfsd4_ops[op->opnum];
2225 }
2226
2227 bool nfsd4_cache_this_op(struct nfsd4_op *op)
2228 {
2229         if (op->opnum == OP_ILLEGAL)
2230                 return false;
2231         return OPDESC(op)->op_flags & OP_CACHEME;
2232 }
2233
2234 static bool need_wrongsec_check(struct svc_rqst *rqstp)
2235 {
2236         struct nfsd4_compoundres *resp = rqstp->rq_resp;
2237         struct nfsd4_compoundargs *argp = rqstp->rq_argp;
2238         struct nfsd4_op *this = &argp->ops[resp->opcnt - 1];
2239         struct nfsd4_op *next = &argp->ops[resp->opcnt];
2240         const struct nfsd4_operation *thisd = OPDESC(this);
2241         const struct nfsd4_operation *nextd;
2242
2243         /*
2244          * Most ops check wronsec on our own; only the putfh-like ops
2245          * have special rules.
2246          */
2247         if (!(thisd->op_flags & OP_IS_PUTFH_LIKE))
2248                 return false;
2249         /*
2250          * rfc 5661 2.6.3.1.1.6: don't bother erroring out a
2251          * put-filehandle operation if we're not going to use the
2252          * result:
2253          */
2254         if (argp->opcnt == resp->opcnt)
2255                 return false;
2256         if (next->opnum == OP_ILLEGAL)
2257                 return false;
2258         nextd = OPDESC(next);
2259         /*
2260          * Rest of 2.6.3.1.1: certain operations will return WRONGSEC
2261          * errors themselves as necessary; others should check for them
2262          * now:
2263          */
2264         return !(nextd->op_flags & OP_HANDLES_WRONGSEC);
2265 }
2266
2267 static void svcxdr_init_encode(struct svc_rqst *rqstp,
2268                                struct nfsd4_compoundres *resp)
2269 {
2270         struct xdr_stream *xdr = &resp->xdr;
2271         struct xdr_buf *buf = &rqstp->rq_res;
2272         struct kvec *head = buf->head;
2273
2274         xdr->buf = buf;
2275         xdr->iov = head;
2276         xdr->p   = head->iov_base + head->iov_len;
2277         xdr->end = head->iov_base + PAGE_SIZE - rqstp->rq_auth_slack;
2278         /* Tail and page_len should be zero at this point: */
2279         buf->len = buf->head[0].iov_len;
2280         xdr_reset_scratch_buffer(xdr);
2281         xdr->page_ptr = buf->pages - 1;
2282         buf->buflen = PAGE_SIZE * (1 + rqstp->rq_page_end - buf->pages)
2283                 - rqstp->rq_auth_slack;
2284 }
2285
2286 #ifdef CONFIG_NFSD_V4_2_INTER_SSC
2287 static void
2288 check_if_stalefh_allowed(struct nfsd4_compoundargs *args)
2289 {
2290         struct nfsd4_op *op, *current_op = NULL, *saved_op = NULL;
2291         struct nfsd4_copy *copy;
2292         struct nfsd4_putfh *putfh;
2293         int i;
2294
2295         /* traverse all operation and if it's a COPY compound, mark the
2296          * source filehandle to skip verification
2297          */
2298         for (i = 0; i < args->opcnt; i++) {
2299                 op = &args->ops[i];
2300                 if (op->opnum == OP_PUTFH)
2301                         current_op = op;
2302                 else if (op->opnum == OP_SAVEFH)
2303                         saved_op = current_op;
2304                 else if (op->opnum == OP_RESTOREFH)
2305                         current_op = saved_op;
2306                 else if (op->opnum == OP_COPY) {
2307                         copy = (struct nfsd4_copy *)&op->u;
2308                         if (!saved_op) {
2309                                 op->status = nfserr_nofilehandle;
2310                                 return;
2311                         }
2312                         putfh = (struct nfsd4_putfh *)&saved_op->u;
2313                         if (!copy->cp_intra)
2314                                 putfh->no_verify = true;
2315                 }
2316         }
2317 }
2318 #else
2319 static void
2320 check_if_stalefh_allowed(struct nfsd4_compoundargs *args)
2321 {
2322 }
2323 #endif
2324
2325 /*
2326  * COMPOUND call.
2327  */
2328 static __be32
2329 nfsd4_proc_compound(struct svc_rqst *rqstp)
2330 {
2331         struct nfsd4_compoundargs *args = rqstp->rq_argp;
2332         struct nfsd4_compoundres *resp = rqstp->rq_resp;
2333         struct nfsd4_op *op;
2334         struct nfsd4_compound_state *cstate = &resp->cstate;
2335         struct svc_fh *current_fh = &cstate->current_fh;
2336         struct svc_fh *save_fh = &cstate->save_fh;
2337         struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
2338         __be32          status;
2339
2340         svcxdr_init_encode(rqstp, resp);
2341         resp->tagp = resp->xdr.p;
2342         /* reserve space for: taglen, tag, and opcnt */
2343         xdr_reserve_space(&resp->xdr, 8 + args->taglen);
2344         resp->taglen = args->taglen;
2345         resp->tag = args->tag;
2346         resp->rqstp = rqstp;
2347         cstate->minorversion = args->minorversion;
2348         fh_init(current_fh, NFS4_FHSIZE);
2349         fh_init(save_fh, NFS4_FHSIZE);
2350         /*
2351          * Don't use the deferral mechanism for NFSv4; compounds make it
2352          * too hard to avoid non-idempotency problems.
2353          */
2354         clear_bit(RQ_USEDEFERRAL, &rqstp->rq_flags);
2355
2356         /*
2357          * According to RFC3010, this takes precedence over all other errors.
2358          */
2359         status = nfserr_minor_vers_mismatch;
2360         if (nfsd_minorversion(nn, args->minorversion, NFSD_TEST) <= 0)
2361                 goto out;
2362         status = nfserr_resource;
2363         if (args->opcnt > NFSD_MAX_OPS_PER_COMPOUND)
2364                 goto out;
2365
2366         status = nfs41_check_op_ordering(args);
2367         if (status) {
2368                 op = &args->ops[0];
2369                 op->status = status;
2370                 resp->opcnt = 1;
2371                 goto encode_op;
2372         }
2373         check_if_stalefh_allowed(args);
2374
2375         rqstp->rq_lease_breaker = (void **)&cstate->clp;
2376
2377         trace_nfsd_compound(rqstp, args->opcnt);
2378         while (!status && resp->opcnt < args->opcnt) {
2379                 op = &args->ops[resp->opcnt++];
2380
2381                 /*
2382                  * The XDR decode routines may have pre-set op->status;
2383                  * for example, if there is a miscellaneous XDR error
2384                  * it will be set to nfserr_bad_xdr.
2385                  */
2386                 if (op->status) {
2387                         if (op->opnum == OP_OPEN)
2388                                 op->status = nfsd4_open_omfg(rqstp, cstate, op);
2389                         goto encode_op;
2390                 }
2391                 if (!current_fh->fh_dentry &&
2392                                 !HAS_FH_FLAG(current_fh, NFSD4_FH_FOREIGN)) {
2393                         if (!(op->opdesc->op_flags & ALLOWED_WITHOUT_FH)) {
2394                                 op->status = nfserr_nofilehandle;
2395                                 goto encode_op;
2396                         }
2397                 } else if (current_fh->fh_export &&
2398                            current_fh->fh_export->ex_fslocs.migrated &&
2399                           !(op->opdesc->op_flags & ALLOWED_ON_ABSENT_FS)) {
2400                         op->status = nfserr_moved;
2401                         goto encode_op;
2402                 }
2403
2404                 fh_clear_wcc(current_fh);
2405
2406                 /* If op is non-idempotent */
2407                 if (op->opdesc->op_flags & OP_MODIFIES_SOMETHING) {
2408                         /*
2409                          * Don't execute this op if we couldn't encode a
2410                          * succesful reply:
2411                          */
2412                         u32 plen = op->opdesc->op_rsize_bop(rqstp, op);
2413                         /*
2414                          * Plus if there's another operation, make sure
2415                          * we'll have space to at least encode an error:
2416                          */
2417                         if (resp->opcnt < args->opcnt)
2418                                 plen += COMPOUND_ERR_SLACK_SPACE;
2419                         op->status = nfsd4_check_resp_size(resp, plen);
2420                 }
2421
2422                 if (op->status)
2423                         goto encode_op;
2424
2425                 if (op->opdesc->op_get_currentstateid)
2426                         op->opdesc->op_get_currentstateid(cstate, &op->u);
2427                 op->status = op->opdesc->op_func(rqstp, cstate, &op->u);
2428
2429                 /* Only from SEQUENCE */
2430                 if (cstate->status == nfserr_replay_cache) {
2431                         dprintk("%s NFS4.1 replay from cache\n", __func__);
2432                         status = op->status;
2433                         goto out;
2434                 }
2435                 if (!op->status) {
2436                         if (op->opdesc->op_set_currentstateid)
2437                                 op->opdesc->op_set_currentstateid(cstate, &op->u);
2438
2439                         if (op->opdesc->op_flags & OP_CLEAR_STATEID)
2440                                 clear_current_stateid(cstate);
2441
2442                         if (current_fh->fh_export &&
2443                                         need_wrongsec_check(rqstp))
2444                                 op->status = check_nfsd_access(current_fh->fh_export, rqstp);
2445                 }
2446 encode_op:
2447                 if (op->status == nfserr_replay_me) {
2448                         op->replay = &cstate->replay_owner->so_replay;
2449                         nfsd4_encode_replay(&resp->xdr, op);
2450                         status = op->status = op->replay->rp_status;
2451                 } else {
2452                         nfsd4_encode_operation(resp, op);
2453                         status = op->status;
2454                 }
2455
2456                 trace_nfsd_compound_status(args->opcnt, resp->opcnt, status,
2457                                            nfsd4_op_name(op->opnum));
2458
2459                 nfsd4_cstate_clear_replay(cstate);
2460                 nfsd4_increment_op_stats(op->opnum);
2461         }
2462
2463         fh_put(current_fh);
2464         fh_put(save_fh);
2465         BUG_ON(cstate->replay_owner);
2466 out:
2467         cstate->status = status;
2468         /* Reset deferral mechanism for RPC deferrals */
2469         set_bit(RQ_USEDEFERRAL, &rqstp->rq_flags);
2470         return rpc_success;
2471 }
2472
2473 #define op_encode_hdr_size              (2)
2474 #define op_encode_stateid_maxsz         (XDR_QUADLEN(NFS4_STATEID_SIZE))
2475 #define op_encode_verifier_maxsz        (XDR_QUADLEN(NFS4_VERIFIER_SIZE))
2476 #define op_encode_change_info_maxsz     (5)
2477 #define nfs4_fattr_bitmap_maxsz         (4)
2478
2479 /* We'll fall back on returning no lockowner if run out of space: */
2480 #define op_encode_lockowner_maxsz       (0)
2481 #define op_encode_lock_denied_maxsz     (8 + op_encode_lockowner_maxsz)
2482
2483 #define nfs4_owner_maxsz                (1 + XDR_QUADLEN(IDMAP_NAMESZ))
2484
2485 #define op_encode_ace_maxsz             (3 + nfs4_owner_maxsz)
2486 #define op_encode_delegation_maxsz      (1 + op_encode_stateid_maxsz + 1 + \
2487                                          op_encode_ace_maxsz)
2488
2489 #define op_encode_channel_attrs_maxsz   (6 + 1 + 1)
2490
2491 static inline u32 nfsd4_only_status_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2492 {
2493         return (op_encode_hdr_size) * sizeof(__be32);
2494 }
2495
2496 static inline u32 nfsd4_status_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2497 {
2498         return (op_encode_hdr_size + op_encode_stateid_maxsz)* sizeof(__be32);
2499 }
2500
2501 static inline u32 nfsd4_access_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2502 {
2503         /* ac_supported, ac_resp_access */
2504         return (op_encode_hdr_size + 2)* sizeof(__be32);
2505 }
2506
2507 static inline u32 nfsd4_commit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2508 {
2509         return (op_encode_hdr_size + op_encode_verifier_maxsz) * sizeof(__be32);
2510 }
2511
2512 static inline u32 nfsd4_create_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2513 {
2514         return (op_encode_hdr_size + op_encode_change_info_maxsz
2515                 + nfs4_fattr_bitmap_maxsz) * sizeof(__be32);
2516 }
2517
2518 /*
2519  * Note since this is an idempotent operation we won't insist on failing
2520  * the op prematurely if the estimate is too large.  We may turn off splice
2521  * reads unnecessarily.
2522  */
2523 static inline u32 nfsd4_getattr_rsize(struct svc_rqst *rqstp,
2524                                       struct nfsd4_op *op)
2525 {
2526         u32 *bmap = op->u.getattr.ga_bmval;
2527         u32 bmap0 = bmap[0], bmap1 = bmap[1], bmap2 = bmap[2];
2528         u32 ret = 0;
2529
2530         if (bmap0 & FATTR4_WORD0_ACL)
2531                 return svc_max_payload(rqstp);
2532         if (bmap0 & FATTR4_WORD0_FS_LOCATIONS)
2533                 return svc_max_payload(rqstp);
2534
2535         if (bmap1 & FATTR4_WORD1_OWNER) {
2536                 ret += IDMAP_NAMESZ + 4;
2537                 bmap1 &= ~FATTR4_WORD1_OWNER;
2538         }
2539         if (bmap1 & FATTR4_WORD1_OWNER_GROUP) {
2540                 ret += IDMAP_NAMESZ + 4;
2541                 bmap1 &= ~FATTR4_WORD1_OWNER_GROUP;
2542         }
2543         if (bmap0 & FATTR4_WORD0_FILEHANDLE) {
2544                 ret += NFS4_FHSIZE + 4;
2545                 bmap0 &= ~FATTR4_WORD0_FILEHANDLE;
2546         }
2547         if (bmap2 & FATTR4_WORD2_SECURITY_LABEL) {
2548                 ret += NFS4_MAXLABELLEN + 12;
2549                 bmap2 &= ~FATTR4_WORD2_SECURITY_LABEL;
2550         }
2551         /*
2552          * Largest of remaining attributes are 16 bytes (e.g.,
2553          * supported_attributes)
2554          */
2555         ret += 16 * (hweight32(bmap0) + hweight32(bmap1) + hweight32(bmap2));
2556         /* bitmask, length */
2557         ret += 20;
2558         return ret;
2559 }
2560
2561 static inline u32 nfsd4_getfh_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2562 {
2563         return (op_encode_hdr_size + 1) * sizeof(__be32) + NFS4_FHSIZE;
2564 }
2565
2566 static inline u32 nfsd4_link_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2567 {
2568         return (op_encode_hdr_size + op_encode_change_info_maxsz)
2569                 * sizeof(__be32);
2570 }
2571
2572 static inline u32 nfsd4_lock_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2573 {
2574         return (op_encode_hdr_size + op_encode_lock_denied_maxsz)
2575                 * sizeof(__be32);
2576 }
2577
2578 static inline u32 nfsd4_open_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2579 {
2580         return (op_encode_hdr_size + op_encode_stateid_maxsz
2581                 + op_encode_change_info_maxsz + 1
2582                 + nfs4_fattr_bitmap_maxsz
2583                 + op_encode_delegation_maxsz) * sizeof(__be32);
2584 }
2585
2586 static inline u32 nfsd4_read_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2587 {
2588         u32 maxcount = 0, rlen = 0;
2589
2590         maxcount = svc_max_payload(rqstp);
2591         rlen = min(op->u.read.rd_length, maxcount);
2592
2593         return (op_encode_hdr_size + 2 + XDR_QUADLEN(rlen)) * sizeof(__be32);
2594 }
2595
2596 static inline u32 nfsd4_read_plus_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2597 {
2598         u32 maxcount = svc_max_payload(rqstp);
2599         u32 rlen = min(op->u.read.rd_length, maxcount);
2600         /*
2601          * If we detect that the file changed during hole encoding, then we
2602          * recover by encoding the remaining reply as data. This means we need
2603          * to set aside enough room to encode two data segments.
2604          */
2605         u32 seg_len = 2 * (1 + 2 + 1);
2606
2607         return (op_encode_hdr_size + 2 + seg_len + XDR_QUADLEN(rlen)) * sizeof(__be32);
2608 }
2609
2610 static inline u32 nfsd4_readdir_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2611 {
2612         u32 maxcount = 0, rlen = 0;
2613
2614         maxcount = svc_max_payload(rqstp);
2615         rlen = min(op->u.readdir.rd_maxcount, maxcount);
2616
2617         return (op_encode_hdr_size + op_encode_verifier_maxsz +
2618                 XDR_QUADLEN(rlen)) * sizeof(__be32);
2619 }
2620
2621 static inline u32 nfsd4_readlink_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2622 {
2623         return (op_encode_hdr_size + 1) * sizeof(__be32) + PAGE_SIZE;
2624 }
2625
2626 static inline u32 nfsd4_remove_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2627 {
2628         return (op_encode_hdr_size + op_encode_change_info_maxsz)
2629                 * sizeof(__be32);
2630 }
2631
2632 static inline u32 nfsd4_rename_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2633 {
2634         return (op_encode_hdr_size + op_encode_change_info_maxsz
2635                 + op_encode_change_info_maxsz) * sizeof(__be32);
2636 }
2637
2638 static inline u32 nfsd4_sequence_rsize(struct svc_rqst *rqstp,
2639                                        struct nfsd4_op *op)
2640 {
2641         return (op_encode_hdr_size
2642                 + XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + 5) * sizeof(__be32);
2643 }
2644
2645 static inline u32 nfsd4_test_stateid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2646 {
2647         return (op_encode_hdr_size + 1 + op->u.test_stateid.ts_num_ids)
2648                 * sizeof(__be32);
2649 }
2650
2651 static inline u32 nfsd4_setattr_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2652 {
2653         return (op_encode_hdr_size + nfs4_fattr_bitmap_maxsz) * sizeof(__be32);
2654 }
2655
2656 static inline u32 nfsd4_secinfo_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2657 {
2658         return (op_encode_hdr_size + RPC_AUTH_MAXFLAVOR *
2659                 (4 + XDR_QUADLEN(GSS_OID_MAX_LEN))) * sizeof(__be32);
2660 }
2661
2662 static inline u32 nfsd4_setclientid_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2663 {
2664         return (op_encode_hdr_size + 2 + XDR_QUADLEN(NFS4_VERIFIER_SIZE)) *
2665                                                                 sizeof(__be32);
2666 }
2667
2668 static inline u32 nfsd4_write_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2669 {
2670         return (op_encode_hdr_size + 2 + op_encode_verifier_maxsz) * sizeof(__be32);
2671 }
2672
2673 static inline u32 nfsd4_exchange_id_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2674 {
2675         return (op_encode_hdr_size + 2 + 1 + /* eir_clientid, eir_sequenceid */\
2676                 1 + 1 + /* eir_flags, spr_how */\
2677                 4 + /* spo_must_enforce & _allow with bitmap */\
2678                 2 + /*eir_server_owner.so_minor_id */\
2679                 /* eir_server_owner.so_major_id<> */\
2680                 XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\
2681                 /* eir_server_scope<> */\
2682                 XDR_QUADLEN(NFS4_OPAQUE_LIMIT) + 1 +\
2683                 1 + /* eir_server_impl_id array length */\
2684                 0 /* ignored eir_server_impl_id contents */) * sizeof(__be32);
2685 }
2686
2687 static inline u32 nfsd4_bind_conn_to_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2688 {
2689         return (op_encode_hdr_size + \
2690                 XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* bctsr_sessid */\
2691                 2 /* bctsr_dir, use_conn_in_rdma_mode */) * sizeof(__be32);
2692 }
2693
2694 static inline u32 nfsd4_create_session_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2695 {
2696         return (op_encode_hdr_size + \
2697                 XDR_QUADLEN(NFS4_MAX_SESSIONID_LEN) + /* sessionid */\
2698                 2 + /* csr_sequence, csr_flags */\
2699                 op_encode_channel_attrs_maxsz + \
2700                 op_encode_channel_attrs_maxsz) * sizeof(__be32);
2701 }
2702
2703 static inline u32 nfsd4_copy_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2704 {
2705         return (op_encode_hdr_size +
2706                 1 /* wr_callback */ +
2707                 op_encode_stateid_maxsz /* wr_callback */ +
2708                 2 /* wr_count */ +
2709                 1 /* wr_committed */ +
2710                 op_encode_verifier_maxsz +
2711                 1 /* cr_consecutive */ +
2712                 1 /* cr_synchronous */) * sizeof(__be32);
2713 }
2714
2715 static inline u32 nfsd4_offload_status_rsize(struct svc_rqst *rqstp,
2716                                              struct nfsd4_op *op)
2717 {
2718         return (op_encode_hdr_size +
2719                 2 /* osr_count */ +
2720                 1 /* osr_complete<1> optional 0 for now */) * sizeof(__be32);
2721 }
2722
2723 static inline u32 nfsd4_copy_notify_rsize(struct svc_rqst *rqstp,
2724                                         struct nfsd4_op *op)
2725 {
2726         return (op_encode_hdr_size +
2727                 3 /* cnr_lease_time */ +
2728                 1 /* We support one cnr_source_server */ +
2729                 1 /* cnr_stateid seq */ +
2730                 op_encode_stateid_maxsz /* cnr_stateid */ +
2731                 1 /* num cnr_source_server*/ +
2732                 1 /* nl4_type */ +
2733                 1 /* nl4 size */ +
2734                 XDR_QUADLEN(NFS4_OPAQUE_LIMIT) /*nl4_loc + nl4_loc_sz */)
2735                 * sizeof(__be32);
2736 }
2737
2738 #ifdef CONFIG_NFSD_PNFS
2739 static inline u32 nfsd4_getdeviceinfo_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2740 {
2741         u32 maxcount = 0, rlen = 0;
2742
2743         maxcount = svc_max_payload(rqstp);
2744         rlen = min(op->u.getdeviceinfo.gd_maxcount, maxcount);
2745
2746         return (op_encode_hdr_size +
2747                 1 /* gd_layout_type*/ +
2748                 XDR_QUADLEN(rlen) +
2749                 2 /* gd_notify_types */) * sizeof(__be32);
2750 }
2751
2752 /*
2753  * At this stage we don't really know what layout driver will handle the request,
2754  * so we need to define an arbitrary upper bound here.
2755  */
2756 #define MAX_LAYOUT_SIZE         128
2757 static inline u32 nfsd4_layoutget_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2758 {
2759         return (op_encode_hdr_size +
2760                 1 /* logr_return_on_close */ +
2761                 op_encode_stateid_maxsz +
2762                 1 /* nr of layouts */ +
2763                 MAX_LAYOUT_SIZE) * sizeof(__be32);
2764 }
2765
2766 static inline u32 nfsd4_layoutcommit_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2767 {
2768         return (op_encode_hdr_size +
2769                 1 /* locr_newsize */ +
2770                 2 /* ns_size */) * sizeof(__be32);
2771 }
2772
2773 static inline u32 nfsd4_layoutreturn_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2774 {
2775         return (op_encode_hdr_size +
2776                 1 /* lrs_stateid */ +
2777                 op_encode_stateid_maxsz) * sizeof(__be32);
2778 }
2779 #endif /* CONFIG_NFSD_PNFS */
2780
2781
2782 static inline u32 nfsd4_seek_rsize(struct svc_rqst *rqstp, struct nfsd4_op *op)
2783 {
2784         return (op_encode_hdr_size + 3) * sizeof(__be32);
2785 }
2786
2787 static inline u32 nfsd4_getxattr_rsize(struct svc_rqst *rqstp,
2788                                        struct nfsd4_op *op)
2789 {
2790         u32 maxcount, rlen;
2791
2792         maxcount = svc_max_payload(rqstp);
2793         rlen = min_t(u32, XATTR_SIZE_MAX, maxcount);
2794
2795         return (op_encode_hdr_size + 1 + XDR_QUADLEN(rlen)) * sizeof(__be32);
2796 }
2797
2798 static inline u32 nfsd4_setxattr_rsize(struct svc_rqst *rqstp,
2799                                        struct nfsd4_op *op)
2800 {
2801         return (op_encode_hdr_size + op_encode_change_info_maxsz)
2802                 * sizeof(__be32);
2803 }
2804 static inline u32 nfsd4_listxattrs_rsize(struct svc_rqst *rqstp,
2805                                          struct nfsd4_op *op)
2806 {
2807         u32 maxcount, rlen;
2808
2809         maxcount = svc_max_payload(rqstp);
2810         rlen = min(op->u.listxattrs.lsxa_maxcount, maxcount);
2811
2812         return (op_encode_hdr_size + 4 + XDR_QUADLEN(rlen)) * sizeof(__be32);
2813 }
2814
2815 static inline u32 nfsd4_removexattr_rsize(struct svc_rqst *rqstp,
2816                                           struct nfsd4_op *op)
2817 {
2818         return (op_encode_hdr_size + op_encode_change_info_maxsz)
2819                 * sizeof(__be32);
2820 }
2821
2822
2823 static const struct nfsd4_operation nfsd4_ops[] = {
2824         [OP_ACCESS] = {
2825                 .op_func = nfsd4_access,
2826                 .op_name = "OP_ACCESS",
2827                 .op_rsize_bop = nfsd4_access_rsize,
2828         },
2829         [OP_CLOSE] = {
2830                 .op_func = nfsd4_close,
2831                 .op_flags = OP_MODIFIES_SOMETHING,
2832                 .op_name = "OP_CLOSE",
2833                 .op_rsize_bop = nfsd4_status_stateid_rsize,
2834                 .op_get_currentstateid = nfsd4_get_closestateid,
2835                 .op_set_currentstateid = nfsd4_set_closestateid,
2836         },
2837         [OP_COMMIT] = {
2838                 .op_func = nfsd4_commit,
2839                 .op_flags = OP_MODIFIES_SOMETHING,
2840                 .op_name = "OP_COMMIT",
2841                 .op_rsize_bop = nfsd4_commit_rsize,
2842         },
2843         [OP_CREATE] = {
2844                 .op_func = nfsd4_create,
2845                 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME | OP_CLEAR_STATEID,
2846                 .op_name = "OP_CREATE",
2847                 .op_rsize_bop = nfsd4_create_rsize,
2848         },
2849         [OP_DELEGRETURN] = {
2850                 .op_func = nfsd4_delegreturn,
2851                 .op_flags = OP_MODIFIES_SOMETHING,
2852                 .op_name = "OP_DELEGRETURN",
2853                 .op_rsize_bop = nfsd4_only_status_rsize,
2854                 .op_get_currentstateid = nfsd4_get_delegreturnstateid,
2855         },
2856         [OP_GETATTR] = {
2857                 .op_func = nfsd4_getattr,
2858                 .op_flags = ALLOWED_ON_ABSENT_FS,
2859                 .op_rsize_bop = nfsd4_getattr_rsize,
2860                 .op_name = "OP_GETATTR",
2861         },
2862         [OP_GETFH] = {
2863                 .op_func = nfsd4_getfh,
2864                 .op_name = "OP_GETFH",
2865                 .op_rsize_bop = nfsd4_getfh_rsize,
2866         },
2867         [OP_LINK] = {
2868                 .op_func = nfsd4_link,
2869                 .op_flags = ALLOWED_ON_ABSENT_FS | OP_MODIFIES_SOMETHING
2870                                 | OP_CACHEME,
2871                 .op_name = "OP_LINK",
2872                 .op_rsize_bop = nfsd4_link_rsize,
2873         },
2874         [OP_LOCK] = {
2875                 .op_func = nfsd4_lock,
2876                 .op_flags = OP_MODIFIES_SOMETHING |
2877                                 OP_NONTRIVIAL_ERROR_ENCODE,
2878                 .op_name = "OP_LOCK",
2879                 .op_rsize_bop = nfsd4_lock_rsize,
2880                 .op_set_currentstateid = nfsd4_set_lockstateid,
2881         },
2882         [OP_LOCKT] = {
2883                 .op_func = nfsd4_lockt,
2884                 .op_flags = OP_NONTRIVIAL_ERROR_ENCODE,
2885                 .op_name = "OP_LOCKT",
2886                 .op_rsize_bop = nfsd4_lock_rsize,
2887         },
2888         [OP_LOCKU] = {
2889                 .op_func = nfsd4_locku,
2890                 .op_flags = OP_MODIFIES_SOMETHING,
2891                 .op_name = "OP_LOCKU",
2892                 .op_rsize_bop = nfsd4_status_stateid_rsize,
2893                 .op_get_currentstateid = nfsd4_get_lockustateid,
2894         },
2895         [OP_LOOKUP] = {
2896                 .op_func = nfsd4_lookup,
2897                 .op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID,
2898                 .op_name = "OP_LOOKUP",
2899                 .op_rsize_bop = nfsd4_only_status_rsize,
2900         },
2901         [OP_LOOKUPP] = {
2902                 .op_func = nfsd4_lookupp,
2903                 .op_flags = OP_HANDLES_WRONGSEC | OP_CLEAR_STATEID,
2904                 .op_name = "OP_LOOKUPP",
2905                 .op_rsize_bop = nfsd4_only_status_rsize,
2906         },
2907         [OP_NVERIFY] = {
2908                 .op_func = nfsd4_nverify,
2909                 .op_name = "OP_NVERIFY",
2910                 .op_rsize_bop = nfsd4_only_status_rsize,
2911         },
2912         [OP_OPEN] = {
2913                 .op_func = nfsd4_open,
2914                 .op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING,
2915                 .op_name = "OP_OPEN",
2916                 .op_rsize_bop = nfsd4_open_rsize,
2917                 .op_set_currentstateid = nfsd4_set_openstateid,
2918         },
2919         [OP_OPEN_CONFIRM] = {
2920                 .op_func = nfsd4_open_confirm,
2921                 .op_flags = OP_MODIFIES_SOMETHING,
2922                 .op_name = "OP_OPEN_CONFIRM",
2923                 .op_rsize_bop = nfsd4_status_stateid_rsize,
2924         },
2925         [OP_OPEN_DOWNGRADE] = {
2926                 .op_func = nfsd4_open_downgrade,
2927                 .op_flags = OP_MODIFIES_SOMETHING,
2928                 .op_name = "OP_OPEN_DOWNGRADE",
2929                 .op_rsize_bop = nfsd4_status_stateid_rsize,
2930                 .op_get_currentstateid = nfsd4_get_opendowngradestateid,
2931                 .op_set_currentstateid = nfsd4_set_opendowngradestateid,
2932         },
2933         [OP_PUTFH] = {
2934                 .op_func = nfsd4_putfh,
2935                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
2936                                 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID,
2937                 .op_name = "OP_PUTFH",
2938                 .op_rsize_bop = nfsd4_only_status_rsize,
2939         },
2940         [OP_PUTPUBFH] = {
2941                 .op_func = nfsd4_putrootfh,
2942                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
2943                                 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID,
2944                 .op_name = "OP_PUTPUBFH",
2945                 .op_rsize_bop = nfsd4_only_status_rsize,
2946         },
2947         [OP_PUTROOTFH] = {
2948                 .op_func = nfsd4_putrootfh,
2949                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
2950                                 | OP_IS_PUTFH_LIKE | OP_CLEAR_STATEID,
2951                 .op_name = "OP_PUTROOTFH",
2952                 .op_rsize_bop = nfsd4_only_status_rsize,
2953         },
2954         [OP_READ] = {
2955                 .op_func = nfsd4_read,
2956                 .op_release = nfsd4_read_release,
2957                 .op_name = "OP_READ",
2958                 .op_rsize_bop = nfsd4_read_rsize,
2959                 .op_get_currentstateid = nfsd4_get_readstateid,
2960         },
2961         [OP_READDIR] = {
2962                 .op_func = nfsd4_readdir,
2963                 .op_name = "OP_READDIR",
2964                 .op_rsize_bop = nfsd4_readdir_rsize,
2965         },
2966         [OP_READLINK] = {
2967                 .op_func = nfsd4_readlink,
2968                 .op_name = "OP_READLINK",
2969                 .op_rsize_bop = nfsd4_readlink_rsize,
2970         },
2971         [OP_REMOVE] = {
2972                 .op_func = nfsd4_remove,
2973                 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
2974                 .op_name = "OP_REMOVE",
2975                 .op_rsize_bop = nfsd4_remove_rsize,
2976         },
2977         [OP_RENAME] = {
2978                 .op_func = nfsd4_rename,
2979                 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
2980                 .op_name = "OP_RENAME",
2981                 .op_rsize_bop = nfsd4_rename_rsize,
2982         },
2983         [OP_RENEW] = {
2984                 .op_func = nfsd4_renew,
2985                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
2986                                 | OP_MODIFIES_SOMETHING,
2987                 .op_name = "OP_RENEW",
2988                 .op_rsize_bop = nfsd4_only_status_rsize,
2989
2990         },
2991         [OP_RESTOREFH] = {
2992                 .op_func = nfsd4_restorefh,
2993                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
2994                                 | OP_IS_PUTFH_LIKE | OP_MODIFIES_SOMETHING,
2995                 .op_name = "OP_RESTOREFH",
2996                 .op_rsize_bop = nfsd4_only_status_rsize,
2997         },
2998         [OP_SAVEFH] = {
2999                 .op_func = nfsd4_savefh,
3000                 .op_flags = OP_HANDLES_WRONGSEC | OP_MODIFIES_SOMETHING,
3001                 .op_name = "OP_SAVEFH",
3002                 .op_rsize_bop = nfsd4_only_status_rsize,
3003         },
3004         [OP_SECINFO] = {
3005                 .op_func = nfsd4_secinfo,
3006                 .op_release = nfsd4_secinfo_release,
3007                 .op_flags = OP_HANDLES_WRONGSEC,
3008                 .op_name = "OP_SECINFO",
3009                 .op_rsize_bop = nfsd4_secinfo_rsize,
3010         },
3011         [OP_SETATTR] = {
3012                 .op_func = nfsd4_setattr,
3013                 .op_name = "OP_SETATTR",
3014                 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME
3015                                 | OP_NONTRIVIAL_ERROR_ENCODE,
3016                 .op_rsize_bop = nfsd4_setattr_rsize,
3017                 .op_get_currentstateid = nfsd4_get_setattrstateid,
3018         },
3019         [OP_SETCLIENTID] = {
3020                 .op_func = nfsd4_setclientid,
3021                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3022                                 | OP_MODIFIES_SOMETHING | OP_CACHEME
3023                                 | OP_NONTRIVIAL_ERROR_ENCODE,
3024                 .op_name = "OP_SETCLIENTID",
3025                 .op_rsize_bop = nfsd4_setclientid_rsize,
3026         },
3027         [OP_SETCLIENTID_CONFIRM] = {
3028                 .op_func = nfsd4_setclientid_confirm,
3029                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3030                                 | OP_MODIFIES_SOMETHING | OP_CACHEME,
3031                 .op_name = "OP_SETCLIENTID_CONFIRM",
3032                 .op_rsize_bop = nfsd4_only_status_rsize,
3033         },
3034         [OP_VERIFY] = {
3035                 .op_func = nfsd4_verify,
3036                 .op_name = "OP_VERIFY",
3037                 .op_rsize_bop = nfsd4_only_status_rsize,
3038         },
3039         [OP_WRITE] = {
3040                 .op_func = nfsd4_write,
3041                 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
3042                 .op_name = "OP_WRITE",
3043                 .op_rsize_bop = nfsd4_write_rsize,
3044                 .op_get_currentstateid = nfsd4_get_writestateid,
3045         },
3046         [OP_RELEASE_LOCKOWNER] = {
3047                 .op_func = nfsd4_release_lockowner,
3048                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
3049                                 | OP_MODIFIES_SOMETHING,
3050                 .op_name = "OP_RELEASE_LOCKOWNER",
3051                 .op_rsize_bop = nfsd4_only_status_rsize,
3052         },
3053
3054         /* NFSv4.1 operations */
3055         [OP_EXCHANGE_ID] = {
3056                 .op_func = nfsd4_exchange_id,
3057                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3058                                 | OP_MODIFIES_SOMETHING,
3059                 .op_name = "OP_EXCHANGE_ID",
3060                 .op_rsize_bop = nfsd4_exchange_id_rsize,
3061         },
3062         [OP_BACKCHANNEL_CTL] = {
3063                 .op_func = nfsd4_backchannel_ctl,
3064                 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
3065                 .op_name = "OP_BACKCHANNEL_CTL",
3066                 .op_rsize_bop = nfsd4_only_status_rsize,
3067         },
3068         [OP_BIND_CONN_TO_SESSION] = {
3069                 .op_func = nfsd4_bind_conn_to_session,
3070                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3071                                 | OP_MODIFIES_SOMETHING,
3072                 .op_name = "OP_BIND_CONN_TO_SESSION",
3073                 .op_rsize_bop = nfsd4_bind_conn_to_session_rsize,
3074         },
3075         [OP_CREATE_SESSION] = {
3076                 .op_func = nfsd4_create_session,
3077                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3078                                 | OP_MODIFIES_SOMETHING,
3079                 .op_name = "OP_CREATE_SESSION",
3080                 .op_rsize_bop = nfsd4_create_session_rsize,
3081         },
3082         [OP_DESTROY_SESSION] = {
3083                 .op_func = nfsd4_destroy_session,
3084                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3085                                 | OP_MODIFIES_SOMETHING,
3086                 .op_name = "OP_DESTROY_SESSION",
3087                 .op_rsize_bop = nfsd4_only_status_rsize,
3088         },
3089         [OP_SEQUENCE] = {
3090                 .op_func = nfsd4_sequence,
3091                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
3092                 .op_name = "OP_SEQUENCE",
3093                 .op_rsize_bop = nfsd4_sequence_rsize,
3094         },
3095         [OP_DESTROY_CLIENTID] = {
3096                 .op_func = nfsd4_destroy_clientid,
3097                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP
3098                                 | OP_MODIFIES_SOMETHING,
3099                 .op_name = "OP_DESTROY_CLIENTID",
3100                 .op_rsize_bop = nfsd4_only_status_rsize,
3101         },
3102         [OP_RECLAIM_COMPLETE] = {
3103                 .op_func = nfsd4_reclaim_complete,
3104                 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
3105                 .op_name = "OP_RECLAIM_COMPLETE",
3106                 .op_rsize_bop = nfsd4_only_status_rsize,
3107         },
3108         [OP_SECINFO_NO_NAME] = {
3109                 .op_func = nfsd4_secinfo_no_name,
3110                 .op_release = nfsd4_secinfo_no_name_release,
3111                 .op_flags = OP_HANDLES_WRONGSEC,
3112                 .op_name = "OP_SECINFO_NO_NAME",
3113                 .op_rsize_bop = nfsd4_secinfo_rsize,
3114         },
3115         [OP_TEST_STATEID] = {
3116                 .op_func = nfsd4_test_stateid,
3117                 .op_flags = ALLOWED_WITHOUT_FH,
3118                 .op_name = "OP_TEST_STATEID",
3119                 .op_rsize_bop = nfsd4_test_stateid_rsize,
3120         },
3121         [OP_FREE_STATEID] = {
3122                 .op_func = nfsd4_free_stateid,
3123                 .op_flags = ALLOWED_WITHOUT_FH | OP_MODIFIES_SOMETHING,
3124                 .op_name = "OP_FREE_STATEID",
3125                 .op_get_currentstateid = nfsd4_get_freestateid,
3126                 .op_rsize_bop = nfsd4_only_status_rsize,
3127         },
3128 #ifdef CONFIG_NFSD_PNFS
3129         [OP_GETDEVICEINFO] = {
3130                 .op_func = nfsd4_getdeviceinfo,
3131                 .op_release = nfsd4_getdeviceinfo_release,
3132                 .op_flags = ALLOWED_WITHOUT_FH,
3133                 .op_name = "OP_GETDEVICEINFO",
3134                 .op_rsize_bop = nfsd4_getdeviceinfo_rsize,
3135         },
3136         [OP_LAYOUTGET] = {
3137                 .op_func = nfsd4_layoutget,
3138                 .op_release = nfsd4_layoutget_release,
3139                 .op_flags = OP_MODIFIES_SOMETHING,
3140                 .op_name = "OP_LAYOUTGET",
3141                 .op_rsize_bop = nfsd4_layoutget_rsize,
3142         },
3143         [OP_LAYOUTCOMMIT] = {
3144                 .op_func = nfsd4_layoutcommit,
3145                 .op_flags = OP_MODIFIES_SOMETHING,
3146                 .op_name = "OP_LAYOUTCOMMIT",
3147                 .op_rsize_bop = nfsd4_layoutcommit_rsize,
3148         },
3149         [OP_LAYOUTRETURN] = {
3150                 .op_func = nfsd4_layoutreturn,
3151                 .op_flags = OP_MODIFIES_SOMETHING,
3152                 .op_name = "OP_LAYOUTRETURN",
3153                 .op_rsize_bop = nfsd4_layoutreturn_rsize,
3154         },
3155 #endif /* CONFIG_NFSD_PNFS */
3156
3157         /* NFSv4.2 operations */
3158         [OP_ALLOCATE] = {
3159                 .op_func = nfsd4_allocate,
3160                 .op_flags = OP_MODIFIES_SOMETHING,
3161                 .op_name = "OP_ALLOCATE",
3162                 .op_rsize_bop = nfsd4_only_status_rsize,
3163         },
3164         [OP_DEALLOCATE] = {
3165                 .op_func = nfsd4_deallocate,
3166                 .op_flags = OP_MODIFIES_SOMETHING,
3167                 .op_name = "OP_DEALLOCATE",
3168                 .op_rsize_bop = nfsd4_only_status_rsize,
3169         },
3170         [OP_CLONE] = {
3171                 .op_func = nfsd4_clone,
3172                 .op_flags = OP_MODIFIES_SOMETHING,
3173                 .op_name = "OP_CLONE",
3174                 .op_rsize_bop = nfsd4_only_status_rsize,
3175         },
3176         [OP_COPY] = {
3177                 .op_func = nfsd4_copy,
3178                 .op_flags = OP_MODIFIES_SOMETHING,
3179                 .op_name = "OP_COPY",
3180                 .op_rsize_bop = nfsd4_copy_rsize,
3181         },
3182         [OP_READ_PLUS] = {
3183                 .op_func = nfsd4_read,
3184                 .op_release = nfsd4_read_release,
3185                 .op_name = "OP_READ_PLUS",
3186                 .op_rsize_bop = nfsd4_read_plus_rsize,
3187                 .op_get_currentstateid = nfsd4_get_readstateid,
3188         },
3189         [OP_SEEK] = {
3190                 .op_func = nfsd4_seek,
3191                 .op_name = "OP_SEEK",
3192                 .op_rsize_bop = nfsd4_seek_rsize,
3193         },
3194         [OP_OFFLOAD_STATUS] = {
3195                 .op_func = nfsd4_offload_status,
3196                 .op_name = "OP_OFFLOAD_STATUS",
3197                 .op_rsize_bop = nfsd4_offload_status_rsize,
3198         },
3199         [OP_OFFLOAD_CANCEL] = {
3200                 .op_func = nfsd4_offload_cancel,
3201                 .op_flags = OP_MODIFIES_SOMETHING,
3202                 .op_name = "OP_OFFLOAD_CANCEL",
3203                 .op_rsize_bop = nfsd4_only_status_rsize,
3204         },
3205         [OP_COPY_NOTIFY] = {
3206                 .op_func = nfsd4_copy_notify,
3207                 .op_flags = OP_MODIFIES_SOMETHING,
3208                 .op_name = "OP_COPY_NOTIFY",
3209                 .op_rsize_bop = nfsd4_copy_notify_rsize,
3210         },
3211         [OP_GETXATTR] = {
3212                 .op_func = nfsd4_getxattr,
3213                 .op_name = "OP_GETXATTR",
3214                 .op_rsize_bop = nfsd4_getxattr_rsize,
3215         },
3216         [OP_SETXATTR] = {
3217                 .op_func = nfsd4_setxattr,
3218                 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
3219                 .op_name = "OP_SETXATTR",
3220                 .op_rsize_bop = nfsd4_setxattr_rsize,
3221         },
3222         [OP_LISTXATTRS] = {
3223                 .op_func = nfsd4_listxattrs,
3224                 .op_name = "OP_LISTXATTRS",
3225                 .op_rsize_bop = nfsd4_listxattrs_rsize,
3226         },
3227         [OP_REMOVEXATTR] = {
3228                 .op_func = nfsd4_removexattr,
3229                 .op_flags = OP_MODIFIES_SOMETHING | OP_CACHEME,
3230                 .op_name = "OP_REMOVEXATTR",
3231                 .op_rsize_bop = nfsd4_removexattr_rsize,
3232         },
3233 };
3234
3235 /**
3236  * nfsd4_spo_must_allow - Determine if the compound op contains an
3237  * operation that is allowed to be sent with machine credentials
3238  *
3239  * @rqstp: a pointer to the struct svc_rqst
3240  *
3241  * Checks to see if the compound contains a spo_must_allow op
3242  * and confirms that it was sent with the proper machine creds.
3243  */
3244
3245 bool nfsd4_spo_must_allow(struct svc_rqst *rqstp)
3246 {
3247         struct nfsd4_compoundres *resp = rqstp->rq_resp;
3248         struct nfsd4_compoundargs *argp = rqstp->rq_argp;
3249         struct nfsd4_op *this = &argp->ops[resp->opcnt - 1];
3250         struct nfsd4_compound_state *cstate = &resp->cstate;
3251         struct nfs4_op_map *allow = &cstate->clp->cl_spo_must_allow;
3252         u32 opiter;
3253
3254         if (!cstate->minorversion)
3255                 return false;
3256
3257         if (cstate->spo_must_allowed)
3258                 return true;
3259
3260         opiter = resp->opcnt;
3261         while (opiter < argp->opcnt) {
3262                 this = &argp->ops[opiter++];
3263                 if (test_bit(this->opnum, allow->u.longs) &&
3264                         cstate->clp->cl_mach_cred &&
3265                         nfsd4_mach_creds_match(cstate->clp, rqstp)) {
3266                         cstate->spo_must_allowed = true;
3267                         return true;
3268                 }
3269         }
3270         cstate->spo_must_allowed = false;
3271         return false;
3272 }
3273
3274 int nfsd4_max_reply(struct svc_rqst *rqstp, struct nfsd4_op *op)
3275 {
3276         if (op->opnum == OP_ILLEGAL || op->status == nfserr_notsupp)
3277                 return op_encode_hdr_size * sizeof(__be32);
3278
3279         BUG_ON(OPDESC(op)->op_rsize_bop == NULL);
3280         return OPDESC(op)->op_rsize_bop(rqstp, op);
3281 }
3282
3283 void warn_on_nonidempotent_op(struct nfsd4_op *op)
3284 {
3285         if (OPDESC(op)->op_flags & OP_MODIFIES_SOMETHING) {
3286                 pr_err("unable to encode reply to nonidempotent op %u (%s)\n",
3287                         op->opnum, nfsd4_op_name(op->opnum));
3288                 WARN_ON_ONCE(1);
3289         }
3290 }
3291
3292 static const char *nfsd4_op_name(unsigned opnum)
3293 {
3294         if (opnum < ARRAY_SIZE(nfsd4_ops))
3295                 return nfsd4_ops[opnum].op_name;
3296         return "unknown_operation";
3297 }
3298
3299 static const struct svc_procedure nfsd_procedures4[2] = {
3300         [NFSPROC4_NULL] = {
3301                 .pc_func = nfsd4_proc_null,
3302                 .pc_decode = nfssvc_decode_voidarg,
3303                 .pc_encode = nfssvc_encode_voidres,
3304                 .pc_argsize = sizeof(struct nfsd_voidargs),
3305                 .pc_ressize = sizeof(struct nfsd_voidres),
3306                 .pc_cachetype = RC_NOCACHE,
3307                 .pc_xdrressize = 1,
3308         },
3309         [NFSPROC4_COMPOUND] = {
3310                 .pc_func = nfsd4_proc_compound,
3311                 .pc_decode = nfs4svc_decode_compoundargs,
3312                 .pc_encode = nfs4svc_encode_compoundres,
3313                 .pc_argsize = sizeof(struct nfsd4_compoundargs),
3314                 .pc_ressize = sizeof(struct nfsd4_compoundres),
3315                 .pc_release = nfsd4_release_compoundargs,
3316                 .pc_cachetype = RC_NOCACHE,
3317                 .pc_xdrressize = NFSD_BUFSIZE/4,
3318         },
3319 };
3320
3321 static unsigned int nfsd_count3[ARRAY_SIZE(nfsd_procedures4)];
3322 const struct svc_version nfsd_version4 = {
3323         .vs_vers                = 4,
3324         .vs_nproc               = 2,
3325         .vs_proc                = nfsd_procedures4,
3326         .vs_count               = nfsd_count3,
3327         .vs_dispatch            = nfsd_dispatch,
3328         .vs_xdrsize             = NFS4_SVC_XDRSIZE,
3329         .vs_rpcb_optnl          = true,
3330         .vs_need_cong_ctrl      = true,
3331 };
3332
3333 /*
3334  * Local variables:
3335  *  c-basic-offset: 8
3336  * End:
3337  */