locks.c 71.8 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62
/*
 *  linux/fs/locks.c
 *
 *  Provide support for fcntl()'s F_GETLK, F_SETLK, and F_SETLKW calls.
 *  Doug Evans (dje@spiff.uucp), August 07, 1992
 *
 *  Deadlock detection added.
 *  FIXME: one thing isn't handled yet:
 *	- mandatory locks (requires lots of changes elsewhere)
 *  Kelly Carmichael (kelly@[142.24.8.65]), September 17, 1994.
 *
 *  Miscellaneous edits, and a total rewrite of posix_lock_file() code.
 *  Kai Petzke (wpp@marie.physik.tu-berlin.de), 1994
 *  
 *  Converted file_lock_table to a linked list from an array, which eliminates
 *  the limits on how many active file locks are open.
 *  Chad Page (pageone@netcom.com), November 27, 1994
 * 
 *  Removed dependency on file descriptors. dup()'ed file descriptors now
 *  get the same locks as the original file descriptors, and a close() on
 *  any file descriptor removes ALL the locks on the file for the current
 *  process. Since locks still depend on the process id, locks are inherited
 *  after an exec() but not after a fork(). This agrees with POSIX, and both
 *  BSD and SVR4 practice.
 *  Andy Walker (andy@lysaker.kvaerner.no), February 14, 1995
 *
 *  Scrapped free list which is redundant now that we allocate locks
 *  dynamically with kmalloc()/kfree().
 *  Andy Walker (andy@lysaker.kvaerner.no), February 21, 1995
 *
 *  Implemented two lock personalities - FL_FLOCK and FL_POSIX.
 *
 *  FL_POSIX locks are created with calls to fcntl() and lockf() through the
 *  fcntl() system call. They have the semantics described above.
 *
 *  FL_FLOCK locks are created with calls to flock(), through the flock()
 *  system call, which is new. Old C libraries implement flock() via fcntl()
 *  and will continue to use the old, broken implementation.
 *
 *  FL_FLOCK locks follow the 4.4 BSD flock() semantics. They are associated
 *  with a file pointer (filp). As a result they can be shared by a parent
 *  process and its children after a fork(). They are removed when the last
 *  file descriptor referring to the file pointer is closed (unless explicitly
 *  unlocked). 
 *
 *  FL_FLOCK locks never deadlock, an existing lock is always removed before
 *  upgrading from shared to exclusive (or vice versa). When this happens
 *  any processes blocked by the current lock are woken up and allowed to
 *  run before the new lock is applied.
 *  Andy Walker (andy@lysaker.kvaerner.no), June 09, 1995
 *
 *  Removed some race conditions in flock_lock_file(), marked other possible
 *  races. Just grep for FIXME to see them. 
 *  Dmitry Gorodchanin (pgmdsg@ibi.com), February 09, 1996.
 *
 *  Addressed Dmitry's concerns. Deadlock checking no longer recursive.
 *  Lock allocation changed to GFP_ATOMIC as we can't afford to sleep
 *  once we've checked for blocking and deadlocking.
 *  Andy Walker (andy@lysaker.kvaerner.no), April 03, 1996.
 *
 *  Initial implementation of mandatory locks. SunOS turned out to be
 *  a rotten model, so I implemented the "obvious" semantics.
P
Paul Bolle 已提交
63
 *  See 'Documentation/filesystems/mandatory-locking.txt' for details.
L
Linus Torvalds 已提交
64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118
 *  Andy Walker (andy@lysaker.kvaerner.no), April 06, 1996.
 *
 *  Don't allow mandatory locks on mmap()'ed files. Added simple functions to
 *  check if a file has mandatory locks, used by mmap(), open() and creat() to
 *  see if system call should be rejected. Ref. HP-UX/SunOS/Solaris Reference
 *  Manual, Section 2.
 *  Andy Walker (andy@lysaker.kvaerner.no), April 09, 1996.
 *
 *  Tidied up block list handling. Added '/proc/locks' interface.
 *  Andy Walker (andy@lysaker.kvaerner.no), April 24, 1996.
 *
 *  Fixed deadlock condition for pathological code that mixes calls to
 *  flock() and fcntl().
 *  Andy Walker (andy@lysaker.kvaerner.no), April 29, 1996.
 *
 *  Allow only one type of locking scheme (FL_POSIX or FL_FLOCK) to be in use
 *  for a given file at a time. Changed the CONFIG_LOCK_MANDATORY scheme to
 *  guarantee sensible behaviour in the case where file system modules might
 *  be compiled with different options than the kernel itself.
 *  Andy Walker (andy@lysaker.kvaerner.no), May 15, 1996.
 *
 *  Added a couple of missing wake_up() calls. Thanks to Thomas Meckel
 *  (Thomas.Meckel@mni.fh-giessen.de) for spotting this.
 *  Andy Walker (andy@lysaker.kvaerner.no), May 15, 1996.
 *
 *  Changed FL_POSIX locks to use the block list in the same way as FL_FLOCK
 *  locks. Changed process synchronisation to avoid dereferencing locks that
 *  have already been freed.
 *  Andy Walker (andy@lysaker.kvaerner.no), Sep 21, 1996.
 *
 *  Made the block list a circular list to minimise searching in the list.
 *  Andy Walker (andy@lysaker.kvaerner.no), Sep 25, 1996.
 *
 *  Made mandatory locking a mount option. Default is not to allow mandatory
 *  locking.
 *  Andy Walker (andy@lysaker.kvaerner.no), Oct 04, 1996.
 *
 *  Some adaptations for NFS support.
 *  Olaf Kirch (okir@monad.swb.de), Dec 1996,
 *
 *  Fixed /proc/locks interface so that we can't overrun the buffer we are handed.
 *  Andy Walker (andy@lysaker.kvaerner.no), May 12, 1997.
 *
 *  Use slab allocator instead of kmalloc/kfree.
 *  Use generic list implementation from <linux/list.h>.
 *  Sped up posix_locks_deadlock by only considering blocked locks.
 *  Matthew Wilcox <willy@debian.org>, March, 2000.
 *
 *  Leases and LOCK_MAND
 *  Matthew Wilcox <willy@debian.org>, June, 2000.
 *  Stephen Rothwell <sfr@canb.auug.org.au>, June, 2000.
 */

#include <linux/capability.h>
#include <linux/file.h>
A
Al Viro 已提交
119
#include <linux/fdtable.h>
L
Linus Torvalds 已提交
120 121 122 123 124 125
#include <linux/fs.h>
#include <linux/init.h>
#include <linux/security.h>
#include <linux/slab.h>
#include <linux/syscalls.h>
#include <linux/time.h>
126
#include <linux/rcupdate.h>
127
#include <linux/pid_namespace.h>
128
#include <linux/hashtable.h>
129 130
#include <linux/percpu.h>
#include <linux/lglock.h>
L
Linus Torvalds 已提交
131

132 133 134
#define CREATE_TRACE_POINTS
#include <trace/events/filelock.h>

L
Linus Torvalds 已提交
135 136 137 138
#include <asm/uaccess.h>

#define IS_POSIX(fl)	(fl->fl_flags & FL_POSIX)
#define IS_FLOCK(fl)	(fl->fl_flags & FL_FLOCK)
C
Christoph Hellwig 已提交
139
#define IS_LEASE(fl)	(fl->fl_flags & (FL_LEASE|FL_DELEG|FL_LAYOUT))
140
#define IS_OFDLCK(fl)	(fl->fl_flags & FL_OFDLCK)
L
Linus Torvalds 已提交
141

142 143 144 145 146
static inline bool is_remote_lock(struct file *filp)
{
	return likely(!(filp->f_path.dentry->d_sb->s_flags & MS_NOREMOTELOCK));
}

J
J. Bruce Fields 已提交
147 148
static bool lease_breaking(struct file_lock *fl)
{
149 150 151 152 153 154 155 156 157 158
	return fl->fl_flags & (FL_UNLOCK_PENDING | FL_DOWNGRADE_PENDING);
}

static int target_leasetype(struct file_lock *fl)
{
	if (fl->fl_flags & FL_UNLOCK_PENDING)
		return F_UNLCK;
	if (fl->fl_flags & FL_DOWNGRADE_PENDING)
		return F_RDLCK;
	return fl->fl_type;
J
J. Bruce Fields 已提交
159 160
}

L
Linus Torvalds 已提交
161 162 163
int leases_enable = 1;
int lease_break_time = 45;

164
/*
165 166 167
 * The global file_lock_list is only used for displaying /proc/locks, so we
 * keep a list on each CPU, with each list protected by its own spinlock via
 * the file_lock_lglock. Note that alterations to the list also require that
168
 * the relevant flc_lock is held.
169
 */
170 171
DEFINE_STATIC_LGLOCK(file_lock_lglock);
static DEFINE_PER_CPU(struct hlist_head, file_lock_list);
172

173
/*
174
 * The blocked_hash is used to find POSIX lock loops for deadlock detection.
175
 * It is protected by blocked_lock_lock.
176 177 178 179 180 181 182
 *
 * We hash locks by lockowner in order to optimize searching for the lock a
 * particular lockowner is waiting on.
 *
 * FIXME: make this value scale via some heuristic? We generally will want more
 * buckets when we have more lockowners holding locks, but that's a little
 * difficult to determine without knowing what the workload will look like.
183
 */
184 185
#define BLOCKED_HASH_BITS	7
static DEFINE_HASHTABLE(blocked_hash, BLOCKED_HASH_BITS);
186

187
/*
188 189
 * This lock protects the blocked_hash. Generally, if you're accessing it, you
 * want to be holding this lock.
190 191 192 193 194 195
 *
 * In addition, it also protects the fl->fl_block list, and the fl->fl_next
 * pointer for file_lock structures that are acting as lock requests (in
 * contrast to those that are acting as records of acquired locks).
 *
 * Note that when we acquire this lock in order to change the above fields,
196
 * we often hold the flc_lock as well. In certain cases, when reading the fields
197
 * protected by this lock, we can skip acquiring it iff we already hold the
198
 * flc_lock.
199 200
 *
 * In particular, adding an entry to the fl_block list requires that you hold
201 202
 * both the flc_lock and the blocked_lock_lock (acquired in that order).
 * Deleting an entry from the list however only requires the file_lock_lock.
203
 */
204
static DEFINE_SPINLOCK(blocked_lock_lock);
L
Linus Torvalds 已提交
205

206
static struct kmem_cache *flctx_cache __read_mostly;
207
static struct kmem_cache *filelock_cache __read_mostly;
L
Linus Torvalds 已提交
208

209
static struct file_lock_context *
210
locks_get_lock_context(struct inode *inode, int type)
211
{
212
	struct file_lock_context *ctx;
213

214 215 216
	/* paired with cmpxchg() below */
	ctx = smp_load_acquire(&inode->i_flctx);
	if (likely(ctx) || type == F_UNLCK)
217 218
		goto out;

219 220
	ctx = kmem_cache_alloc(flctx_cache, GFP_KERNEL);
	if (!ctx)
221 222
		goto out;

223 224 225 226
	spin_lock_init(&ctx->flc_lock);
	INIT_LIST_HEAD(&ctx->flc_flock);
	INIT_LIST_HEAD(&ctx->flc_posix);
	INIT_LIST_HEAD(&ctx->flc_lease);
227 228 229 230 231

	/*
	 * Assign the pointer if it's not already assigned. If it is, then
	 * free the context we just allocated.
	 */
232 233 234 235
	if (cmpxchg(&inode->i_flctx, NULL, ctx)) {
		kmem_cache_free(flctx_cache, ctx);
		ctx = smp_load_acquire(&inode->i_flctx);
	}
236
out:
237
	trace_locks_get_lock_context(inode, type, ctx);
238
	return ctx;
239 240
}

241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267
static void
locks_dump_ctx_list(struct list_head *list, char *list_type)
{
	struct file_lock *fl;

	list_for_each_entry(fl, list, fl_list) {
		pr_warn("%s: fl_owner=%p fl_flags=0x%x fl_type=0x%x fl_pid=%u\n", list_type, fl->fl_owner, fl->fl_flags, fl->fl_type, fl->fl_pid);
	}
}

static void
locks_check_ctx_lists(struct inode *inode)
{
	struct file_lock_context *ctx = inode->i_flctx;

	if (unlikely(!list_empty(&ctx->flc_flock) ||
		     !list_empty(&ctx->flc_posix) ||
		     !list_empty(&ctx->flc_lease))) {
		pr_warn("Leaked locks on dev=0x%x:0x%x ino=0x%lx:\n",
			MAJOR(inode->i_sb->s_dev), MINOR(inode->i_sb->s_dev),
			inode->i_ino);
		locks_dump_ctx_list(&ctx->flc_flock, "FLOCK");
		locks_dump_ctx_list(&ctx->flc_posix, "POSIX");
		locks_dump_ctx_list(&ctx->flc_lease, "LEASE");
	}
}

268
void
269
locks_free_lock_context(struct inode *inode)
270
{
271 272
	struct file_lock_context *ctx = inode->i_flctx;

273 274
	if (unlikely(ctx)) {
		locks_check_ctx_lists(inode);
275 276 277 278
		kmem_cache_free(flctx_cache, ctx);
	}
}

M
Miklos Szeredi 已提交
279
static void locks_init_lock_heads(struct file_lock *fl)
M
Miklos Szeredi 已提交
280
{
281
	INIT_HLIST_NODE(&fl->fl_link);
282
	INIT_LIST_HEAD(&fl->fl_list);
M
Miklos Szeredi 已提交
283 284
	INIT_LIST_HEAD(&fl->fl_block);
	init_waitqueue_head(&fl->fl_wait);
M
Miklos Szeredi 已提交
285 286
}

L
Linus Torvalds 已提交
287
/* Allocate an empty lock structure. */
288
struct file_lock *locks_alloc_lock(void)
L
Linus Torvalds 已提交
289
{
M
Miklos Szeredi 已提交
290
	struct file_lock *fl = kmem_cache_zalloc(filelock_cache, GFP_KERNEL);
M
Miklos Szeredi 已提交
291 292

	if (fl)
M
Miklos Szeredi 已提交
293
		locks_init_lock_heads(fl);
M
Miklos Szeredi 已提交
294 295

	return fl;
L
Linus Torvalds 已提交
296
}
297
EXPORT_SYMBOL_GPL(locks_alloc_lock);
L
Linus Torvalds 已提交
298

299
void locks_release_private(struct file_lock *fl)
300 301 302 303 304 305 306
{
	if (fl->fl_ops) {
		if (fl->fl_ops->fl_release_private)
			fl->fl_ops->fl_release_private(fl);
		fl->fl_ops = NULL;
	}

307
	if (fl->fl_lmops) {
308 309 310 311
		if (fl->fl_lmops->lm_put_owner) {
			fl->fl_lmops->lm_put_owner(fl->fl_owner);
			fl->fl_owner = NULL;
		}
312 313
		fl->fl_lmops = NULL;
	}
314
}
315
EXPORT_SYMBOL_GPL(locks_release_private);
316

L
Linus Torvalds 已提交
317
/* Free a lock which is not in use. */
318
void locks_free_lock(struct file_lock *fl)
L
Linus Torvalds 已提交
319
{
M
Miklos Szeredi 已提交
320
	BUG_ON(waitqueue_active(&fl->fl_wait));
321
	BUG_ON(!list_empty(&fl->fl_list));
M
Miklos Szeredi 已提交
322
	BUG_ON(!list_empty(&fl->fl_block));
323
	BUG_ON(!hlist_unhashed(&fl->fl_link));
L
Linus Torvalds 已提交
324

325
	locks_release_private(fl);
L
Linus Torvalds 已提交
326 327
	kmem_cache_free(filelock_cache, fl);
}
328
EXPORT_SYMBOL(locks_free_lock);
L
Linus Torvalds 已提交
329

330 331 332 333 334 335
static void
locks_dispose_list(struct list_head *dispose)
{
	struct file_lock *fl;

	while (!list_empty(dispose)) {
336 337
		fl = list_first_entry(dispose, struct file_lock, fl_list);
		list_del_init(&fl->fl_list);
338 339 340 341
		locks_free_lock(fl);
	}
}

L
Linus Torvalds 已提交
342 343
void locks_init_lock(struct file_lock *fl)
{
M
Miklos Szeredi 已提交
344 345
	memset(fl, 0, sizeof(struct file_lock));
	locks_init_lock_heads(fl);
L
Linus Torvalds 已提交
346 347 348 349 350 351 352
}

EXPORT_SYMBOL(locks_init_lock);

/*
 * Initialize a new lock from an existing file_lock structure.
 */
353
void locks_copy_conflock(struct file_lock *new, struct file_lock *fl)
L
Linus Torvalds 已提交
354 355 356
{
	new->fl_owner = fl->fl_owner;
	new->fl_pid = fl->fl_pid;
357
	new->fl_file = NULL;
L
Linus Torvalds 已提交
358 359 360 361
	new->fl_flags = fl->fl_flags;
	new->fl_type = fl->fl_type;
	new->fl_start = fl->fl_start;
	new->fl_end = fl->fl_end;
362
	new->fl_lmops = fl->fl_lmops;
363
	new->fl_ops = NULL;
364 365 366

	if (fl->fl_lmops) {
		if (fl->fl_lmops->lm_get_owner)
367
			fl->fl_lmops->lm_get_owner(fl->fl_owner);
368
	}
369
}
370
EXPORT_SYMBOL(locks_copy_conflock);
371 372 373

void locks_copy_lock(struct file_lock *new, struct file_lock *fl)
{
374 375
	/* "new" must be a freshly-initialized lock */
	WARN_ON_ONCE(new->fl_ops);
376

377
	locks_copy_conflock(new, fl);
378

379
	new->fl_file = fl->fl_file;
L
Linus Torvalds 已提交
380
	new->fl_ops = fl->fl_ops;
381

382 383 384 385
	if (fl->fl_ops) {
		if (fl->fl_ops->fl_copy_lock)
			fl->fl_ops->fl_copy_lock(new, fl);
	}
L
Linus Torvalds 已提交
386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404
}

EXPORT_SYMBOL(locks_copy_lock);

static inline int flock_translate_cmd(int cmd) {
	if (cmd & LOCK_MAND)
		return cmd & (LOCK_MAND | LOCK_RW);
	switch (cmd) {
	case LOCK_SH:
		return F_RDLCK;
	case LOCK_EX:
		return F_WRLCK;
	case LOCK_UN:
		return F_UNLCK;
	}
	return -EINVAL;
}

/* Fill in a file_lock structure with an appropriate FLOCK lock. */
405 406
static struct file_lock *
flock_make_lock(struct file *filp, unsigned int cmd)
L
Linus Torvalds 已提交
407 408 409
{
	struct file_lock *fl;
	int type = flock_translate_cmd(cmd);
410

L
Linus Torvalds 已提交
411
	if (type < 0)
412
		return ERR_PTR(type);
L
Linus Torvalds 已提交
413 414 415
	
	fl = locks_alloc_lock();
	if (fl == NULL)
416
		return ERR_PTR(-ENOMEM);
L
Linus Torvalds 已提交
417 418

	fl->fl_file = filp;
419
	fl->fl_owner = filp;
L
Linus Torvalds 已提交
420 421 422 423 424
	fl->fl_pid = current->tgid;
	fl->fl_flags = FL_FLOCK;
	fl->fl_type = type;
	fl->fl_end = OFFSET_MAX;
	
425
	return fl;
L
Linus Torvalds 已提交
426 427
}

428
static int assign_type(struct file_lock *fl, long type)
L
Linus Torvalds 已提交
429 430 431 432 433 434 435 436 437 438 439 440 441
{
	switch (type) {
	case F_RDLCK:
	case F_WRLCK:
	case F_UNLCK:
		fl->fl_type = type;
		break;
	default:
		return -EINVAL;
	}
	return 0;
}

442 443
static int flock64_to_posix_lock(struct file *filp, struct file_lock *fl,
				 struct flock64 *l)
L
Linus Torvalds 已提交
444 445
{
	switch (l->l_whence) {
446
	case SEEK_SET:
447
		fl->fl_start = 0;
L
Linus Torvalds 已提交
448
		break;
449
	case SEEK_CUR:
450
		fl->fl_start = filp->f_pos;
L
Linus Torvalds 已提交
451
		break;
452
	case SEEK_END:
453
		fl->fl_start = i_size_read(file_inode(filp));
L
Linus Torvalds 已提交
454 455 456 457
		break;
	default:
		return -EINVAL;
	}
458 459 460 461 462
	if (l->l_start > OFFSET_MAX - fl->fl_start)
		return -EOVERFLOW;
	fl->fl_start += l->l_start;
	if (fl->fl_start < 0)
		return -EINVAL;
L
Linus Torvalds 已提交
463 464 465

	/* POSIX-1996 leaves the case l->l_len < 0 undefined;
	   POSIX-2001 defines it. */
466
	if (l->l_len > 0) {
467 468 469 470
		if (l->l_len - 1 > OFFSET_MAX - fl->fl_start)
			return -EOVERFLOW;
		fl->fl_end = fl->fl_start + l->l_len - 1;

471
	} else if (l->l_len < 0) {
472
		if (fl->fl_start + l->l_len < 0)
473
			return -EINVAL;
474 475 476 477 478
		fl->fl_end = fl->fl_start - 1;
		fl->fl_start += l->l_len;
	} else
		fl->fl_end = OFFSET_MAX;

L
Linus Torvalds 已提交
479 480 481 482 483 484 485 486 487 488
	fl->fl_owner = current->files;
	fl->fl_pid = current->tgid;
	fl->fl_file = filp;
	fl->fl_flags = FL_POSIX;
	fl->fl_ops = NULL;
	fl->fl_lmops = NULL;

	return assign_type(fl, l->l_type);
}

489 490 491 492 493
/* Verify a "struct flock" and copy it to a "struct file_lock" as a POSIX
 * style lock.
 */
static int flock_to_posix_lock(struct file *filp, struct file_lock *fl,
			       struct flock *l)
L
Linus Torvalds 已提交
494
{
495 496 497 498 499 500 501 502
	struct flock64 ll = {
		.l_type = l->l_type,
		.l_whence = l->l_whence,
		.l_start = l->l_start,
		.l_len = l->l_len,
	};

	return flock64_to_posix_lock(filp, fl, &ll);
L
Linus Torvalds 已提交
503 504 505
}

/* default lease lock manager operations */
J
Jeff Layton 已提交
506 507
static bool
lease_break_callback(struct file_lock *fl)
L
Linus Torvalds 已提交
508 509
{
	kill_fasync(&fl->fl_fasync, SIGIO, POLL_MSG);
J
Jeff Layton 已提交
510
	return false;
L
Linus Torvalds 已提交
511 512
}

513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529
static void
lease_setup(struct file_lock *fl, void **priv)
{
	struct file *filp = fl->fl_file;
	struct fasync_struct *fa = *priv;

	/*
	 * fasync_insert_entry() returns the old entry if any. If there was no
	 * old entry, then it used "priv" and inserted it into the fasync list.
	 * Clear the pointer to indicate that it shouldn't be freed.
	 */
	if (!fasync_insert_entry(fa->fa_fd, filp, &fl->fl_fasync, fa))
		*priv = NULL;

	__f_setown(filp, task_pid(current), PIDTYPE_PID, 0);
}

530
static const struct lock_manager_operations lease_manager_ops = {
J
J. Bruce Fields 已提交
531 532
	.lm_break = lease_break_callback,
	.lm_change = lease_modify,
533
	.lm_setup = lease_setup,
L
Linus Torvalds 已提交
534 535 536 537 538
};

/*
 * Initialize a lease, use the default lock manager operations
 */
539
static int lease_init(struct file *filp, long type, struct file_lock *fl)
L
Linus Torvalds 已提交
540
 {
541 542 543
	if (assign_type(fl, type) != 0)
		return -EINVAL;

544
	fl->fl_owner = filp;
L
Linus Torvalds 已提交
545 546 547 548 549 550 551 552 553 554 555 556
	fl->fl_pid = current->tgid;

	fl->fl_file = filp;
	fl->fl_flags = FL_LEASE;
	fl->fl_start = 0;
	fl->fl_end = OFFSET_MAX;
	fl->fl_ops = NULL;
	fl->fl_lmops = &lease_manager_ops;
	return 0;
}

/* Allocate a file_lock initialised to this type of lease */
557
static struct file_lock *lease_alloc(struct file *filp, long type)
L
Linus Torvalds 已提交
558 559
{
	struct file_lock *fl = locks_alloc_lock();
560
	int error = -ENOMEM;
L
Linus Torvalds 已提交
561 562

	if (fl == NULL)
J
J. Bruce Fields 已提交
563
		return ERR_PTR(error);
L
Linus Torvalds 已提交
564 565

	error = lease_init(filp, type, fl);
566 567
	if (error) {
		locks_free_lock(fl);
J
J. Bruce Fields 已提交
568
		return ERR_PTR(error);
569
	}
J
J. Bruce Fields 已提交
570
	return fl;
L
Linus Torvalds 已提交
571 572 573 574 575 576 577 578 579 580 581 582 583
}

/* Check if two locks overlap each other.
 */
static inline int locks_overlap(struct file_lock *fl1, struct file_lock *fl2)
{
	return ((fl1->fl_end >= fl2->fl_start) &&
		(fl2->fl_end >= fl1->fl_start));
}

/*
 * Check whether two locks have the same owner.
 */
584
static int posix_same_owner(struct file_lock *fl1, struct file_lock *fl2)
L
Linus Torvalds 已提交
585
{
J
J. Bruce Fields 已提交
586
	if (fl1->fl_lmops && fl1->fl_lmops->lm_compare_owner)
L
Linus Torvalds 已提交
587
		return fl2->fl_lmops == fl1->fl_lmops &&
J
J. Bruce Fields 已提交
588
			fl1->fl_lmops->lm_compare_owner(fl1, fl2);
L
Linus Torvalds 已提交
589 590 591
	return fl1->fl_owner == fl2->fl_owner;
}

592
/* Must be called with the flc_lock held! */
593
static void locks_insert_global_locks(struct file_lock *fl)
594
{
595 596 597 598
	lg_local_lock(&file_lock_lglock);
	fl->fl_link_cpu = smp_processor_id();
	hlist_add_head(&fl->fl_link, this_cpu_ptr(&file_lock_list));
	lg_local_unlock(&file_lock_lglock);
599 600
}

601
/* Must be called with the flc_lock held! */
602
static void locks_delete_global_locks(struct file_lock *fl)
603
{
604 605
	/*
	 * Avoid taking lock if already unhashed. This is safe since this check
606
	 * is done while holding the flc_lock, and new insertions into the list
607 608 609 610 611
	 * also require that it be held.
	 */
	if (hlist_unhashed(&fl->fl_link))
		return;
	lg_local_lock_cpu(&file_lock_lglock, fl->fl_link_cpu);
612
	hlist_del_init(&fl->fl_link);
613
	lg_local_unlock_cpu(&file_lock_lglock, fl->fl_link_cpu);
614 615
}

616 617 618 619 620 621 622 623
static unsigned long
posix_owner_key(struct file_lock *fl)
{
	if (fl->fl_lmops && fl->fl_lmops->lm_owner_key)
		return fl->fl_lmops->lm_owner_key(fl);
	return (unsigned long)fl->fl_owner;
}

624
static void locks_insert_global_blocked(struct file_lock *waiter)
625
{
626 627
	lockdep_assert_held(&blocked_lock_lock);

628
	hash_add(blocked_hash, &waiter->fl_link, posix_owner_key(waiter));
629 630
}

631
static void locks_delete_global_blocked(struct file_lock *waiter)
632
{
633 634
	lockdep_assert_held(&blocked_lock_lock);

635
	hash_del(&waiter->fl_link);
636 637
}

L
Linus Torvalds 已提交
638 639
/* Remove waiter from blocker's block list.
 * When blocker ends up pointing to itself then the list is empty.
640
 *
641
 * Must be called with blocked_lock_lock held.
L
Linus Torvalds 已提交
642
 */
643
static void __locks_delete_block(struct file_lock *waiter)
L
Linus Torvalds 已提交
644
{
645
	locks_delete_global_blocked(waiter);
L
Linus Torvalds 已提交
646 647 648 649
	list_del_init(&waiter->fl_block);
	waiter->fl_next = NULL;
}

650
static void locks_delete_block(struct file_lock *waiter)
L
Linus Torvalds 已提交
651
{
652
	spin_lock(&blocked_lock_lock);
L
Linus Torvalds 已提交
653
	__locks_delete_block(waiter);
654
	spin_unlock(&blocked_lock_lock);
L
Linus Torvalds 已提交
655 656 657 658 659 660
}

/* Insert waiter into blocker's block list.
 * We use a circular list so that processes can be easily woken up in
 * the order they blocked. The documentation doesn't require this but
 * it seems like the reasonable thing to do.
661
 *
662 663 664 665
 * Must be called with both the flc_lock and blocked_lock_lock held. The
 * fl_block list itself is protected by the blocked_lock_lock, but by ensuring
 * that the flc_lock is also held on insertions we can avoid taking the
 * blocked_lock_lock in some cases when we see that the fl_block list is empty.
L
Linus Torvalds 已提交
666
 */
667 668
static void __locks_insert_block(struct file_lock *blocker,
					struct file_lock *waiter)
L
Linus Torvalds 已提交
669
{
670
	BUG_ON(!list_empty(&waiter->fl_block));
L
Linus Torvalds 已提交
671
	waiter->fl_next = blocker;
672
	list_add_tail(&waiter->fl_block, &blocker->fl_block);
673
	if (IS_POSIX(blocker) && !IS_OFDLCK(blocker))
674 675 676
		locks_insert_global_blocked(waiter);
}

677
/* Must be called with flc_lock held. */
678 679 680
static void locks_insert_block(struct file_lock *blocker,
					struct file_lock *waiter)
{
681
	spin_lock(&blocked_lock_lock);
682
	__locks_insert_block(blocker, waiter);
683
	spin_unlock(&blocked_lock_lock);
L
Linus Torvalds 已提交
684 685
}

686 687 688
/*
 * Wake up processes blocked waiting for blocker.
 *
689
 * Must be called with the inode->flc_lock held!
L
Linus Torvalds 已提交
690 691 692
 */
static void locks_wake_up_blocks(struct file_lock *blocker)
{
693 694
	/*
	 * Avoid taking global lock if list is empty. This is safe since new
695 696 697
	 * blocked requests are only added to the list under the flc_lock, and
	 * the flc_lock is always held here. Note that removal from the fl_block
	 * list does not require the flc_lock, so we must recheck list_empty()
698
	 * after acquiring the blocked_lock_lock.
699 700 701 702
	 */
	if (list_empty(&blocker->fl_block))
		return;

703
	spin_lock(&blocked_lock_lock);
L
Linus Torvalds 已提交
704
	while (!list_empty(&blocker->fl_block)) {
705 706 707
		struct file_lock *waiter;

		waiter = list_first_entry(&blocker->fl_block,
L
Linus Torvalds 已提交
708 709
				struct file_lock, fl_block);
		__locks_delete_block(waiter);
J
J. Bruce Fields 已提交
710 711
		if (waiter->fl_lmops && waiter->fl_lmops->lm_notify)
			waiter->fl_lmops->lm_notify(waiter);
L
Linus Torvalds 已提交
712 713 714
		else
			wake_up(&waiter->fl_wait);
	}
715
	spin_unlock(&blocked_lock_lock);
L
Linus Torvalds 已提交
716 717
}

718
static void
719
locks_insert_lock_ctx(struct file_lock *fl, struct list_head *before)
720 721 722 723 724 725
{
	fl->fl_nspid = get_pid(task_tgid(current));
	list_add_tail(&fl->fl_list, before);
	locks_insert_global_locks(fl);
}

726
static void
727
locks_unlink_lock_ctx(struct file_lock *fl)
L
Linus Torvalds 已提交
728
{
729
	locks_delete_global_locks(fl);
730
	list_del_init(&fl->fl_list);
731 732 733 734
	if (fl->fl_nspid) {
		put_pid(fl->fl_nspid);
		fl->fl_nspid = NULL;
	}
L
Linus Torvalds 已提交
735
	locks_wake_up_blocks(fl);
736 737
}

738
static void
739
locks_delete_lock_ctx(struct file_lock *fl, struct list_head *dispose)
740
{
741
	locks_unlink_lock_ctx(fl);
742
	if (dispose)
743
		list_add(&fl->fl_list, dispose);
744 745
	else
		locks_free_lock(fl);
L
Linus Torvalds 已提交
746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767
}

/* Determine if lock sys_fl blocks lock caller_fl. Common functionality
 * checks for shared/exclusive status of overlapping locks.
 */
static int locks_conflict(struct file_lock *caller_fl, struct file_lock *sys_fl)
{
	if (sys_fl->fl_type == F_WRLCK)
		return 1;
	if (caller_fl->fl_type == F_WRLCK)
		return 1;
	return 0;
}

/* Determine if lock sys_fl blocks lock caller_fl. POSIX specific
 * checking before calling the locks_conflict().
 */
static int posix_locks_conflict(struct file_lock *caller_fl, struct file_lock *sys_fl)
{
	/* POSIX locks owned by the same process do not conflict with
	 * each other.
	 */
768
	if (posix_same_owner(caller_fl, sys_fl))
L
Linus Torvalds 已提交
769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785
		return (0);

	/* Check whether they overlap */
	if (!locks_overlap(caller_fl, sys_fl))
		return 0;

	return (locks_conflict(caller_fl, sys_fl));
}

/* Determine if lock sys_fl blocks lock caller_fl. FLOCK specific
 * checking before calling the locks_conflict().
 */
static int flock_locks_conflict(struct file_lock *caller_fl, struct file_lock *sys_fl)
{
	/* FLOCK locks referring to the same filp do not conflict with
	 * each other.
	 */
786
	if (caller_fl->fl_file == sys_fl->fl_file)
L
Linus Torvalds 已提交
787 788 789 790 791 792 793
		return (0);
	if ((caller_fl->fl_type & LOCK_MAND) || (sys_fl->fl_type & LOCK_MAND))
		return 0;

	return (locks_conflict(caller_fl, sys_fl));
}

794
void
795
posix_test_lock(struct file *filp, struct file_lock *fl)
L
Linus Torvalds 已提交
796 797
{
	struct file_lock *cfl;
798
	struct file_lock_context *ctx;
799
	struct inode *inode = locks_inode(filp);
L
Linus Torvalds 已提交
800

801
	ctx = smp_load_acquire(&inode->i_flctx);
802 803 804 805 806
	if (!ctx || list_empty_careful(&ctx->flc_posix)) {
		fl->fl_type = F_UNLCK;
		return;
	}

807
	spin_lock(&ctx->flc_lock);
808 809 810 811 812 813 814
	list_for_each_entry(cfl, &ctx->flc_posix, fl_list) {
		if (posix_locks_conflict(fl, cfl)) {
			locks_copy_conflock(fl, cfl);
			if (cfl->fl_nspid)
				fl->fl_pid = pid_vnr(cfl->fl_nspid);
			goto out;
		}
L
Linus Torvalds 已提交
815
	}
816 817
	fl->fl_type = F_UNLCK;
out:
818
	spin_unlock(&ctx->flc_lock);
819
	return;
L
Linus Torvalds 已提交
820 821 822
}
EXPORT_SYMBOL(posix_test_lock);

823 824 825 826 827
/*
 * Deadlock detection:
 *
 * We attempt to detect deadlocks that are due purely to posix file
 * locks.
L
Linus Torvalds 已提交
828
 *
829 830 831 832 833 834 835
 * We assume that a task can be waiting for at most one lock at a time.
 * So for any acquired lock, the process holding that lock may be
 * waiting on at most one other lock.  That lock in turns may be held by
 * someone waiting for at most one other lock.  Given a requested lock
 * caller_fl which is about to wait for a conflicting lock block_fl, we
 * follow this chain of waiters to ensure we are not about to create a
 * cycle.
L
Linus Torvalds 已提交
836
 *
837 838 839
 * Since we do this before we ever put a process to sleep on a lock, we
 * are ensured that there is never a cycle; that is what guarantees that
 * the while() loop in posix_locks_deadlock() eventually completes.
840
 *
841 842 843 844
 * Note: the above assumption may not be true when handling lock
 * requests from a broken NFS client. It may also fail in the presence
 * of tasks (such as posix threads) sharing the same open file table.
 * To handle those cases, we just bail out after a few iterations.
845
 *
846
 * For FL_OFDLCK locks, the owner is the filp, not the files_struct.
847 848 849 850
 * Because the owner is not even nominally tied to a thread of
 * execution, the deadlock detection below can't reasonably work well. Just
 * skip it for those.
 *
851
 * In principle, we could do a more limited deadlock detection on FL_OFDLCK
852 853
 * locks that just checks for the case where two tasks are attempting to
 * upgrade from read to write locks on the same inode.
L
Linus Torvalds 已提交
854
 */
855 856 857

#define MAX_DEADLK_ITERATIONS 10

858 859 860 861 862
/* Find a lock that the owner of the given block_fl is blocking on. */
static struct file_lock *what_owner_is_waiting_for(struct file_lock *block_fl)
{
	struct file_lock *fl;

863
	hash_for_each_possible(blocked_hash, fl, fl_link, posix_owner_key(block_fl)) {
864 865 866 867 868 869
		if (posix_same_owner(fl, block_fl))
			return fl->fl_next;
	}
	return NULL;
}

870
/* Must be called with the blocked_lock_lock held! */
871
static int posix_locks_deadlock(struct file_lock *caller_fl,
L
Linus Torvalds 已提交
872 873
				struct file_lock *block_fl)
{
874
	int i = 0;
L
Linus Torvalds 已提交
875

876 877
	lockdep_assert_held(&blocked_lock_lock);

878 879
	/*
	 * This deadlock detector can't reasonably detect deadlocks with
880
	 * FL_OFDLCK locks, since they aren't owned by a process, per-se.
881
	 */
882
	if (IS_OFDLCK(caller_fl))
883 884
		return 0;

885 886 887 888 889
	while ((block_fl = what_owner_is_waiting_for(block_fl))) {
		if (i++ > MAX_DEADLK_ITERATIONS)
			return 0;
		if (posix_same_owner(caller_fl, block_fl))
			return 1;
L
Linus Torvalds 已提交
890 891 892 893 894
	}
	return 0;
}

/* Try to create a FLOCK lock on filp. We always insert new FLOCK locks
895
 * after any leases, but before any posix locks.
896 897 898 899
 *
 * Note that if called with an FL_EXISTS argument, the caller may determine
 * whether or not a lock was successfully freed by testing the return
 * value for -ENOENT.
L
Linus Torvalds 已提交
900
 */
901
static int flock_lock_inode(struct inode *inode, struct file_lock *request)
L
Linus Torvalds 已提交
902
{
903
	struct file_lock *new_fl = NULL;
904 905
	struct file_lock *fl;
	struct file_lock_context *ctx;
L
Linus Torvalds 已提交
906
	int error = 0;
907
	bool found = false;
908
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
909

910 911 912 913 914 915
	ctx = locks_get_lock_context(inode, request->fl_type);
	if (!ctx) {
		if (request->fl_type != F_UNLCK)
			return -ENOMEM;
		return (request->fl_flags & FL_EXISTS) ? -ENOENT : 0;
	}
916

917
	if (!(request->fl_flags & FL_ACCESS) && (request->fl_type != F_UNLCK)) {
918
		new_fl = locks_alloc_lock();
919 920
		if (!new_fl)
			return -ENOMEM;
921 922
	}

923
	spin_lock(&ctx->flc_lock);
924 925 926
	if (request->fl_flags & FL_ACCESS)
		goto find_conflict;

927
	list_for_each_entry(fl, &ctx->flc_flock, fl_list) {
928
		if (request->fl_file != fl->fl_file)
L
Linus Torvalds 已提交
929
			continue;
930
		if (request->fl_type == fl->fl_type)
L
Linus Torvalds 已提交
931
			goto out;
932
		found = true;
933
		locks_delete_lock_ctx(fl, &dispose);
L
Linus Torvalds 已提交
934 935 936
		break;
	}

937 938 939
	if (request->fl_type == F_UNLCK) {
		if ((request->fl_flags & FL_EXISTS) && !found)
			error = -ENOENT;
940
		goto out;
941
	}
L
Linus Torvalds 已提交
942

943
find_conflict:
944
	list_for_each_entry(fl, &ctx->flc_flock, fl_list) {
945
		if (!flock_locks_conflict(request, fl))
L
Linus Torvalds 已提交
946 947
			continue;
		error = -EAGAIN;
948 949 950 951
		if (!(request->fl_flags & FL_SLEEP))
			goto out;
		error = FILE_LOCK_DEFERRED;
		locks_insert_block(fl, request);
L
Linus Torvalds 已提交
952 953
		goto out;
	}
954 955
	if (request->fl_flags & FL_ACCESS)
		goto out;
956
	locks_copy_lock(new_fl, request);
957
	locks_insert_lock_ctx(new_fl, &ctx->flc_flock);
958
	new_fl = NULL;
959
	error = 0;
L
Linus Torvalds 已提交
960 961

out:
962
	spin_unlock(&ctx->flc_lock);
963 964
	if (new_fl)
		locks_free_lock(new_fl);
965
	locks_dispose_list(&dispose);
L
Linus Torvalds 已提交
966 967 968
	return error;
}

969 970
static int posix_lock_inode(struct inode *inode, struct file_lock *request,
			    struct file_lock *conflock)
L
Linus Torvalds 已提交
971
{
972
	struct file_lock *fl, *tmp;
973 974
	struct file_lock *new_fl = NULL;
	struct file_lock *new_fl2 = NULL;
L
Linus Torvalds 已提交
975 976
	struct file_lock *left = NULL;
	struct file_lock *right = NULL;
977
	struct file_lock_context *ctx;
978 979
	int error;
	bool added = false;
980
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
981

982
	ctx = locks_get_lock_context(inode, request->fl_type);
983
	if (!ctx)
984
		return (request->fl_type == F_UNLCK) ? 0 : -ENOMEM;
985

L
Linus Torvalds 已提交
986 987 988
	/*
	 * We may need two file_lock structures for this operation,
	 * so we get them in advance to avoid races.
989 990
	 *
	 * In some cases we can be sure, that no new locks will be needed
L
Linus Torvalds 已提交
991
	 */
992 993 994 995 996 997
	if (!(request->fl_flags & FL_ACCESS) &&
	    (request->fl_type != F_UNLCK ||
	     request->fl_start != 0 || request->fl_end != OFFSET_MAX)) {
		new_fl = locks_alloc_lock();
		new_fl2 = locks_alloc_lock();
	}
L
Linus Torvalds 已提交
998

999
	spin_lock(&ctx->flc_lock);
1000 1001 1002
	/*
	 * New lock request. Walk all POSIX locks and look for conflicts. If
	 * there are any, either return error or put the request on the
1003
	 * blocker's list of waiters and the global blocked_hash.
1004
	 */
L
Linus Torvalds 已提交
1005
	if (request->fl_type != F_UNLCK) {
1006
		list_for_each_entry(fl, &ctx->flc_posix, fl_list) {
L
Linus Torvalds 已提交
1007 1008
			if (!posix_locks_conflict(request, fl))
				continue;
1009
			if (conflock)
1010
				locks_copy_conflock(conflock, fl);
L
Linus Torvalds 已提交
1011 1012 1013
			error = -EAGAIN;
			if (!(request->fl_flags & FL_SLEEP))
				goto out;
1014 1015 1016 1017
			/*
			 * Deadlock detection and insertion into the blocked
			 * locks list must be done while holding the same lock!
			 */
L
Linus Torvalds 已提交
1018
			error = -EDEADLK;
1019
			spin_lock(&blocked_lock_lock);
1020 1021 1022 1023
			if (likely(!posix_locks_deadlock(request, fl))) {
				error = FILE_LOCK_DEFERRED;
				__locks_insert_block(fl, request);
			}
1024
			spin_unlock(&blocked_lock_lock);
L
Linus Torvalds 已提交
1025 1026 1027 1028 1029 1030 1031 1032 1033
			goto out;
  		}
  	}

	/* If we're just looking for a conflict, we're done. */
	error = 0;
	if (request->fl_flags & FL_ACCESS)
		goto out;

1034 1035 1036 1037
	/* Find the first old lock with the same owner as the new lock */
	list_for_each_entry(fl, &ctx->flc_posix, fl_list) {
		if (posix_same_owner(request, fl))
			break;
L
Linus Torvalds 已提交
1038 1039
	}

1040
	/* Process locks with this owner. */
1041 1042 1043 1044 1045
	list_for_each_entry_safe_from(fl, tmp, &ctx->flc_posix, fl_list) {
		if (!posix_same_owner(request, fl))
			break;

		/* Detect adjacent or overlapping regions (if same lock type) */
L
Linus Torvalds 已提交
1046
		if (request->fl_type == fl->fl_type) {
O
Olaf Kirch 已提交
1047 1048 1049 1050
			/* In all comparisons of start vs end, use
			 * "start - 1" rather than "end + 1". If end
			 * is OFFSET_MAX, end + 1 will become negative.
			 */
L
Linus Torvalds 已提交
1051
			if (fl->fl_end < request->fl_start - 1)
1052
				continue;
L
Linus Torvalds 已提交
1053 1054 1055
			/* If the next lock in the list has entirely bigger
			 * addresses than the new one, insert the lock here.
			 */
O
Olaf Kirch 已提交
1056
			if (fl->fl_start - 1 > request->fl_end)
L
Linus Torvalds 已提交
1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072
				break;

			/* If we come here, the new and old lock are of the
			 * same type and adjacent or overlapping. Make one
			 * lock yielding from the lower start address of both
			 * locks to the higher end address.
			 */
			if (fl->fl_start > request->fl_start)
				fl->fl_start = request->fl_start;
			else
				request->fl_start = fl->fl_start;
			if (fl->fl_end < request->fl_end)
				fl->fl_end = request->fl_end;
			else
				request->fl_end = fl->fl_end;
			if (added) {
1073
				locks_delete_lock_ctx(fl, &dispose);
L
Linus Torvalds 已提交
1074 1075 1076
				continue;
			}
			request = fl;
1077
			added = true;
1078
		} else {
L
Linus Torvalds 已提交
1079 1080 1081 1082
			/* Processing for different lock types is a bit
			 * more complex.
			 */
			if (fl->fl_end < request->fl_start)
1083
				continue;
L
Linus Torvalds 已提交
1084 1085 1086
			if (fl->fl_start > request->fl_end)
				break;
			if (request->fl_type == F_UNLCK)
1087
				added = true;
L
Linus Torvalds 已提交
1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101
			if (fl->fl_start < request->fl_start)
				left = fl;
			/* If the next lock in the list has a higher end
			 * address than the new one, insert the new one here.
			 */
			if (fl->fl_end > request->fl_end) {
				right = fl;
				break;
			}
			if (fl->fl_start >= request->fl_start) {
				/* The new lock completely replaces an old
				 * one (This may happen several times).
				 */
				if (added) {
1102
					locks_delete_lock_ctx(fl, &dispose);
L
Linus Torvalds 已提交
1103 1104
					continue;
				}
1105 1106 1107 1108 1109 1110
				/*
				 * Replace the old lock with new_fl, and
				 * remove the old one. It's safe to do the
				 * insert here since we know that we won't be
				 * using new_fl later, and that the lock is
				 * just replacing an existing lock.
L
Linus Torvalds 已提交
1111
				 */
1112 1113 1114 1115 1116 1117
				error = -ENOLCK;
				if (!new_fl)
					goto out;
				locks_copy_lock(new_fl, request);
				request = new_fl;
				new_fl = NULL;
1118 1119
				locks_insert_lock_ctx(request, &fl->fl_list);
				locks_delete_lock_ctx(fl, &dispose);
1120
				added = true;
L
Linus Torvalds 已提交
1121 1122 1123 1124
			}
		}
	}

1125
	/*
1126 1127 1128
	 * The above code only modifies existing locks in case of merging or
	 * replacing. If new lock(s) need to be inserted all modifications are
	 * done below this, so it's safe yet to bail out.
1129 1130 1131 1132 1133
	 */
	error = -ENOLCK; /* "no luck" */
	if (right && left == right && !new_fl2)
		goto out;

L
Linus Torvalds 已提交
1134 1135
	error = 0;
	if (!added) {
1136 1137 1138
		if (request->fl_type == F_UNLCK) {
			if (request->fl_flags & FL_EXISTS)
				error = -ENOENT;
L
Linus Torvalds 已提交
1139
			goto out;
1140
		}
1141 1142 1143 1144 1145

		if (!new_fl) {
			error = -ENOLCK;
			goto out;
		}
L
Linus Torvalds 已提交
1146
		locks_copy_lock(new_fl, request);
1147
		locks_insert_lock_ctx(new_fl, &fl->fl_list);
1148
		fl = new_fl;
L
Linus Torvalds 已提交
1149 1150 1151 1152 1153 1154 1155 1156 1157 1158
		new_fl = NULL;
	}
	if (right) {
		if (left == right) {
			/* The new lock breaks the old one in two pieces,
			 * so we have to use the second new lock.
			 */
			left = new_fl2;
			new_fl2 = NULL;
			locks_copy_lock(left, right);
1159
			locks_insert_lock_ctx(left, &fl->fl_list);
L
Linus Torvalds 已提交
1160 1161 1162 1163 1164 1165 1166 1167 1168
		}
		right->fl_start = request->fl_end + 1;
		locks_wake_up_blocks(right);
	}
	if (left) {
		left->fl_end = request->fl_start - 1;
		locks_wake_up_blocks(left);
	}
 out:
1169
	spin_unlock(&ctx->flc_lock);
L
Linus Torvalds 已提交
1170 1171 1172 1173 1174 1175 1176
	/*
	 * Free any unused locks.
	 */
	if (new_fl)
		locks_free_lock(new_fl);
	if (new_fl2)
		locks_free_lock(new_fl2);
1177
	locks_dispose_list(&dispose);
1178 1179
	trace_posix_lock_inode(inode, request, error);

L
Linus Torvalds 已提交
1180 1181 1182 1183 1184 1185 1186
	return error;
}

/**
 * posix_lock_file - Apply a POSIX-style lock to a file
 * @filp: The file to apply the lock to
 * @fl: The lock to be applied
1187
 * @conflock: Place to return a copy of the conflicting lock, if found.
L
Linus Torvalds 已提交
1188 1189 1190 1191
 *
 * Add a POSIX style lock to a file.
 * We merge adjacent & overlapping locks whenever possible.
 * POSIX locks are sorted by owner task, then by starting address
1192 1193 1194 1195
 *
 * Note that if called with an FL_EXISTS argument, the caller may determine
 * whether or not a lock was successfully freed by testing the return
 * value for -ENOENT.
L
Linus Torvalds 已提交
1196
 */
1197
int posix_lock_file(struct file *filp, struct file_lock *fl,
1198 1199
			struct file_lock *conflock)
{
1200
	return posix_lock_inode(locks_inode(filp), fl, conflock);
L
Linus Torvalds 已提交
1201
}
1202
EXPORT_SYMBOL(posix_lock_file);
L
Linus Torvalds 已提交
1203 1204

/**
1205 1206
 * posix_lock_inode_wait - Apply a POSIX-style lock to a file
 * @inode: inode of file to which lock request should be applied
L
Linus Torvalds 已提交
1207 1208
 * @fl: The lock to be applied
 *
1209
 * Apply a POSIX style lock request to an inode.
L
Linus Torvalds 已提交
1210
 */
1211
static int posix_lock_inode_wait(struct inode *inode, struct file_lock *fl)
L
Linus Torvalds 已提交
1212 1213 1214 1215
{
	int error;
	might_sleep ();
	for (;;) {
1216
		error = posix_lock_inode(inode, fl, NULL);
1217
		if (error != FILE_LOCK_DEFERRED)
L
Linus Torvalds 已提交
1218 1219 1220 1221 1222 1223 1224 1225 1226 1227
			break;
		error = wait_event_interruptible(fl->fl_wait, !fl->fl_next);
		if (!error)
			continue;

		locks_delete_block(fl);
		break;
	}
	return error;
}
1228

1229
#ifdef CONFIG_MANDATORY_FILE_LOCKING
L
Linus Torvalds 已提交
1230 1231
/**
 * locks_mandatory_locked - Check for an active lock
1232
 * @file: the file to check
L
Linus Torvalds 已提交
1233 1234 1235 1236
 *
 * Searches the inode's list of locks to find any POSIX locks which conflict.
 * This function is called from locks_verify_locked() only.
 */
1237
int locks_mandatory_locked(struct file *file)
L
Linus Torvalds 已提交
1238
{
1239
	int ret;
1240
	struct inode *inode = locks_inode(file);
1241
	struct file_lock_context *ctx;
L
Linus Torvalds 已提交
1242 1243
	struct file_lock *fl;

1244
	ctx = smp_load_acquire(&inode->i_flctx);
1245 1246 1247
	if (!ctx || list_empty_careful(&ctx->flc_posix))
		return 0;

L
Linus Torvalds 已提交
1248 1249 1250
	/*
	 * Search the lock list for this inode for any POSIX locks.
	 */
1251
	spin_lock(&ctx->flc_lock);
1252 1253
	ret = 0;
	list_for_each_entry(fl, &ctx->flc_posix, fl_list) {
1254
		if (fl->fl_owner != current->files &&
1255 1256
		    fl->fl_owner != file) {
			ret = -EAGAIN;
L
Linus Torvalds 已提交
1257
			break;
1258
		}
L
Linus Torvalds 已提交
1259
	}
1260
	spin_unlock(&ctx->flc_lock);
1261
	return ret;
L
Linus Torvalds 已提交
1262 1263 1264 1265
}

/**
 * locks_mandatory_area - Check for a conflicting lock
1266
 * @inode:	the file to check
L
Linus Torvalds 已提交
1267
 * @filp:       how the file was opened (if it was)
1268 1269 1270
 * @start:	first byte in the file to check
 * @end:	lastbyte in the file to check
 * @type:	%F_WRLCK for a write lock, else %F_RDLCK
L
Linus Torvalds 已提交
1271 1272 1273
 *
 * Searches the inode's list of locks to find any POSIX locks which conflict.
 */
1274 1275
int locks_mandatory_area(struct inode *inode, struct file *filp, loff_t start,
			 loff_t end, unsigned char type)
L
Linus Torvalds 已提交
1276 1277 1278
{
	struct file_lock fl;
	int error;
1279
	bool sleep = false;
L
Linus Torvalds 已提交
1280 1281 1282 1283 1284 1285

	locks_init_lock(&fl);
	fl.fl_pid = current->tgid;
	fl.fl_file = filp;
	fl.fl_flags = FL_POSIX | FL_ACCESS;
	if (filp && !(filp->f_flags & O_NONBLOCK))
1286
		sleep = true;
1287 1288 1289
	fl.fl_type = type;
	fl.fl_start = start;
	fl.fl_end = end;
L
Linus Torvalds 已提交
1290 1291

	for (;;) {
1292
		if (filp) {
1293
			fl.fl_owner = filp;
1294
			fl.fl_flags &= ~FL_SLEEP;
1295
			error = posix_lock_inode(inode, &fl, NULL);
1296 1297 1298 1299 1300 1301 1302
			if (!error)
				break;
		}

		if (sleep)
			fl.fl_flags |= FL_SLEEP;
		fl.fl_owner = current->files;
1303
		error = posix_lock_inode(inode, &fl, NULL);
1304
		if (error != FILE_LOCK_DEFERRED)
L
Linus Torvalds 已提交
1305 1306 1307 1308 1309 1310 1311
			break;
		error = wait_event_interruptible(fl.fl_wait, !fl.fl_next);
		if (!error) {
			/*
			 * If we've been sleeping someone might have
			 * changed the permissions behind our back.
			 */
1312
			if (__mandatory_lock(inode))
L
Linus Torvalds 已提交
1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323
				continue;
		}

		locks_delete_block(&fl);
		break;
	}

	return error;
}

EXPORT_SYMBOL(locks_mandatory_area);
1324
#endif /* CONFIG_MANDATORY_FILE_LOCKING */
L
Linus Torvalds 已提交
1325

1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336
static void lease_clear_pending(struct file_lock *fl, int arg)
{
	switch (arg) {
	case F_UNLCK:
		fl->fl_flags &= ~FL_UNLOCK_PENDING;
		/* fall through: */
	case F_RDLCK:
		fl->fl_flags &= ~FL_DOWNGRADE_PENDING;
	}
}

L
Linus Torvalds 已提交
1337
/* We already had a lease on this file; just change its type */
1338
int lease_modify(struct file_lock *fl, int arg, struct list_head *dispose)
L
Linus Torvalds 已提交
1339 1340 1341 1342 1343
{
	int error = assign_type(fl, arg);

	if (error)
		return error;
1344
	lease_clear_pending(fl, arg);
L
Linus Torvalds 已提交
1345
	locks_wake_up_blocks(fl);
1346 1347 1348 1349 1350
	if (arg == F_UNLCK) {
		struct file *filp = fl->fl_file;

		f_delown(filp);
		filp->f_owner.signum = 0;
1351 1352 1353 1354 1355
		fasync_helper(0, fl->fl_file, 0, &fl->fl_fasync);
		if (fl->fl_fasync != NULL) {
			printk(KERN_ERR "locks_delete_lock: fasync == %p\n", fl->fl_fasync);
			fl->fl_fasync = NULL;
		}
1356
		locks_delete_lock_ctx(fl, dispose);
1357
	}
L
Linus Torvalds 已提交
1358 1359 1360 1361
	return 0;
}
EXPORT_SYMBOL(lease_modify);

1362 1363 1364 1365 1366 1367 1368 1369
static bool past_time(unsigned long then)
{
	if (!then)
		/* 0 is a special value meaning "this never expires": */
		return false;
	return time_after(jiffies, then);
}

1370
static void time_out_leases(struct inode *inode, struct list_head *dispose)
L
Linus Torvalds 已提交
1371
{
1372 1373
	struct file_lock_context *ctx = inode->i_flctx;
	struct file_lock *fl, *tmp;
L
Linus Torvalds 已提交
1374

1375
	lockdep_assert_held(&ctx->flc_lock);
1376

1377
	list_for_each_entry_safe(fl, tmp, &ctx->flc_lease, fl_list) {
1378
		trace_time_out_leases(inode, fl);
1379
		if (past_time(fl->fl_downgrade_time))
1380
			lease_modify(fl, F_RDLCK, dispose);
1381
		if (past_time(fl->fl_break_time))
1382
			lease_modify(fl, F_UNLCK, dispose);
L
Linus Torvalds 已提交
1383 1384 1385
	}
}

J
J. Bruce Fields 已提交
1386 1387
static bool leases_conflict(struct file_lock *lease, struct file_lock *breaker)
{
C
Christoph Hellwig 已提交
1388 1389
	if ((breaker->fl_flags & FL_LAYOUT) != (lease->fl_flags & FL_LAYOUT))
		return false;
J
J. Bruce Fields 已提交
1390 1391 1392 1393 1394
	if ((breaker->fl_flags & FL_DELEG) && (lease->fl_flags & FL_LEASE))
		return false;
	return locks_conflict(breaker, lease);
}

1395 1396 1397
static bool
any_leases_conflict(struct inode *inode, struct file_lock *breaker)
{
1398
	struct file_lock_context *ctx = inode->i_flctx;
1399 1400
	struct file_lock *fl;

1401
	lockdep_assert_held(&ctx->flc_lock);
1402

1403
	list_for_each_entry(fl, &ctx->flc_lease, fl_list) {
1404 1405 1406 1407 1408 1409
		if (leases_conflict(fl, breaker))
			return true;
	}
	return false;
}

L
Linus Torvalds 已提交
1410 1411 1412
/**
 *	__break_lease	-	revoke all outstanding leases on file
 *	@inode: the inode of the file to return
J
J. Bruce Fields 已提交
1413 1414 1415 1416
 *	@mode: O_RDONLY: break only write leases; O_WRONLY or O_RDWR:
 *	    break all leases
 *	@type: FL_LEASE: break leases and delegations; FL_DELEG: break
 *	    only delegations
L
Linus Torvalds 已提交
1417
 *
1418 1419 1420
 *	break_lease (inlined for speed) has checked there already is at least
 *	some kind of lock (maybe a lease) on this file.  Leases are broken on
 *	a call to open() or truncate().  This function can sleep unless you
L
Linus Torvalds 已提交
1421 1422
 *	specified %O_NONBLOCK to your open().
 */
J
J. Bruce Fields 已提交
1423
int __break_lease(struct inode *inode, unsigned int mode, unsigned int type)
L
Linus Torvalds 已提交
1424
{
1425
	int error = 0;
1426
	struct file_lock_context *ctx;
1427
	struct file_lock *new_fl, *fl, *tmp;
L
Linus Torvalds 已提交
1428
	unsigned long break_time;
1429
	int want_write = (mode & O_ACCMODE) != O_RDONLY;
1430
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
1431

1432
	new_fl = lease_alloc(NULL, want_write ? F_WRLCK : F_RDLCK);
1433 1434
	if (IS_ERR(new_fl))
		return PTR_ERR(new_fl);
J
J. Bruce Fields 已提交
1435
	new_fl->fl_flags = type;
L
Linus Torvalds 已提交
1436

1437
	/* typically we will check that ctx is non-NULL before calling */
1438
	ctx = smp_load_acquire(&inode->i_flctx);
1439 1440 1441 1442 1443
	if (!ctx) {
		WARN_ON_ONCE(1);
		return error;
	}

1444
	spin_lock(&ctx->flc_lock);
L
Linus Torvalds 已提交
1445

1446
	time_out_leases(inode, &dispose);
L
Linus Torvalds 已提交
1447

1448
	if (!any_leases_conflict(inode, new_fl))
1449 1450
		goto out;

L
Linus Torvalds 已提交
1451 1452 1453 1454 1455 1456 1457
	break_time = 0;
	if (lease_break_time > 0) {
		break_time = jiffies + lease_break_time * HZ;
		if (break_time == 0)
			break_time++;	/* so that 0 means no break time */
	}

1458
	list_for_each_entry_safe(fl, tmp, &ctx->flc_lease, fl_list) {
J
J. Bruce Fields 已提交
1459 1460
		if (!leases_conflict(fl, new_fl))
			continue;
1461 1462 1463 1464
		if (want_write) {
			if (fl->fl_flags & FL_UNLOCK_PENDING)
				continue;
			fl->fl_flags |= FL_UNLOCK_PENDING;
L
Linus Torvalds 已提交
1465
			fl->fl_break_time = break_time;
1466
		} else {
1467
			if (lease_breaking(fl))
1468 1469 1470
				continue;
			fl->fl_flags |= FL_DOWNGRADE_PENDING;
			fl->fl_downgrade_time = break_time;
L
Linus Torvalds 已提交
1471
		}
J
Jeff Layton 已提交
1472
		if (fl->fl_lmops->lm_break(fl))
1473
			locks_delete_lock_ctx(fl, &dispose);
L
Linus Torvalds 已提交
1474 1475
	}

1476
	if (list_empty(&ctx->flc_lease))
J
Jeff Layton 已提交
1477 1478
		goto out;

1479
	if (mode & O_NONBLOCK) {
1480
		trace_break_lease_noblock(inode, new_fl);
L
Linus Torvalds 已提交
1481 1482 1483 1484 1485
		error = -EWOULDBLOCK;
		goto out;
	}

restart:
1486 1487
	fl = list_first_entry(&ctx->flc_lease, struct file_lock, fl_list);
	break_time = fl->fl_break_time;
1488
	if (break_time != 0)
L
Linus Torvalds 已提交
1489
		break_time -= jiffies;
1490 1491
	if (break_time == 0)
		break_time++;
1492
	locks_insert_block(fl, new_fl);
1493
	trace_break_lease_block(inode, new_fl);
1494
	spin_unlock(&ctx->flc_lock);
1495
	locks_dispose_list(&dispose);
1496 1497
	error = wait_event_interruptible_timeout(new_fl->fl_wait,
						!new_fl->fl_next, break_time);
1498
	spin_lock(&ctx->flc_lock);
1499
	trace_break_lease_unblock(inode, new_fl);
1500
	locks_delete_block(new_fl);
L
Linus Torvalds 已提交
1501
	if (error >= 0) {
1502 1503 1504 1505
		/*
		 * Wait for the next conflicting lease that has not been
		 * broken yet
		 */
1506 1507 1508 1509
		if (error == 0)
			time_out_leases(inode, &dispose);
		if (any_leases_conflict(inode, new_fl))
			goto restart;
L
Linus Torvalds 已提交
1510 1511 1512
		error = 0;
	}
out:
1513
	spin_unlock(&ctx->flc_lock);
1514
	locks_dispose_list(&dispose);
1515
	locks_free_lock(new_fl);
L
Linus Torvalds 已提交
1516 1517 1518 1519 1520 1521
	return error;
}

EXPORT_SYMBOL(__break_lease);

/**
1522
 *	lease_get_mtime - get the last modified time of an inode
L
Linus Torvalds 已提交
1523 1524 1525 1526 1527
 *	@inode: the inode
 *      @time:  pointer to a timespec which will contain the last modified time
 *
 * This is to force NFS clients to flush their caches for files with
 * exclusive leases.  The justification is that if someone has an
1528
 * exclusive lease, then they could be modifying it.
L
Linus Torvalds 已提交
1529 1530 1531
 */
void lease_get_mtime(struct inode *inode, struct timespec *time)
{
1532
	bool has_lease = false;
1533
	struct file_lock_context *ctx;
1534
	struct file_lock *fl;
1535

1536
	ctx = smp_load_acquire(&inode->i_flctx);
1537
	if (ctx && !list_empty_careful(&ctx->flc_lease)) {
1538
		spin_lock(&ctx->flc_lock);
1539 1540 1541 1542
		fl = list_first_entry_or_null(&ctx->flc_lease,
					      struct file_lock, fl_list);
		if (fl && (fl->fl_type == F_WRLCK))
			has_lease = true;
1543
		spin_unlock(&ctx->flc_lock);
1544 1545 1546
	}

	if (has_lease)
L
Linus Torvalds 已提交
1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579
		*time = current_fs_time(inode->i_sb);
	else
		*time = inode->i_mtime;
}

EXPORT_SYMBOL(lease_get_mtime);

/**
 *	fcntl_getlease - Enquire what lease is currently active
 *	@filp: the file
 *
 *	The value returned by this function will be one of
 *	(if no lease break is pending):
 *
 *	%F_RDLCK to indicate a shared lease is held.
 *
 *	%F_WRLCK to indicate an exclusive lease is held.
 *
 *	%F_UNLCK to indicate no lease is held.
 *
 *	(if a lease break is pending):
 *
 *	%F_RDLCK to indicate an exclusive lease needs to be
 *		changed to a shared lease (or removed).
 *
 *	%F_UNLCK to indicate the lease needs to be removed.
 *
 *	XXX: sfr & willy disagree over whether F_INPROGRESS
 *	should be returned to userspace.
 */
int fcntl_getlease(struct file *filp)
{
	struct file_lock *fl;
1580
	struct inode *inode = locks_inode(filp);
1581
	struct file_lock_context *ctx;
L
Linus Torvalds 已提交
1582
	int type = F_UNLCK;
1583
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
1584

1585
	ctx = smp_load_acquire(&inode->i_flctx);
1586
	if (ctx && !list_empty_careful(&ctx->flc_lease)) {
1587
		spin_lock(&ctx->flc_lock);
1588
		time_out_leases(inode, &dispose);
1589 1590 1591
		list_for_each_entry(fl, &ctx->flc_lease, fl_list) {
			if (fl->fl_file != filp)
				continue;
1592
			type = target_leasetype(fl);
L
Linus Torvalds 已提交
1593 1594
			break;
		}
1595
		spin_unlock(&ctx->flc_lock);
1596
		locks_dispose_list(&dispose);
L
Linus Torvalds 已提交
1597 1598 1599 1600
	}
	return type;
}

1601 1602 1603 1604 1605 1606
/**
 * check_conflicting_open - see if the given dentry points to a file that has
 * 			    an existing open that would conflict with the
 * 			    desired lease.
 * @dentry:	dentry to check
 * @arg:	type of lease that we're trying to acquire
1607
 * @flags:	current lock flags
1608 1609 1610 1611 1612
 *
 * Check to see if there's an existing open fd on this file that would
 * conflict with the lease we're trying to set.
 */
static int
C
Christoph Hellwig 已提交
1613
check_conflicting_open(const struct dentry *dentry, const long arg, int flags)
1614 1615 1616 1617
{
	int ret = 0;
	struct inode *inode = dentry->d_inode;

C
Christoph Hellwig 已提交
1618 1619 1620
	if (flags & FL_LAYOUT)
		return 0;

1621 1622
	if ((arg == F_RDLCK) &&
	    (atomic_read(&d_real_inode(dentry)->i_writecount) > 0))
1623 1624 1625 1626 1627 1628 1629 1630 1631
		return -EAGAIN;

	if ((arg == F_WRLCK) && ((d_count(dentry) > 1) ||
	    (atomic_read(&inode->i_count) > 1)))
		ret = -EAGAIN;

	return ret;
}

1632 1633
static int
generic_add_lease(struct file *filp, long arg, struct file_lock **flp, void **priv)
L
Linus Torvalds 已提交
1634
{
1635
	struct file_lock *fl, *my_fl = NULL, *lease;
1636
	struct dentry *dentry = filp->f_path.dentry;
1637
	struct inode *inode = dentry->d_inode;
1638
	struct file_lock_context *ctx;
J
J. Bruce Fields 已提交
1639
	bool is_deleg = (*flp)->fl_flags & FL_DELEG;
J
J. Bruce Fields 已提交
1640
	int error;
1641
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
1642

1643
	lease = *flp;
1644 1645
	trace_generic_add_lease(inode, lease);

1646 1647
	/* Note that arg is never F_UNLCK here */
	ctx = locks_get_lock_context(inode, arg);
1648 1649 1650
	if (!ctx)
		return -ENOMEM;

J
J. Bruce Fields 已提交
1651 1652 1653 1654 1655 1656 1657 1658
	/*
	 * In the delegation case we need mutual exclusion with
	 * a number of operations that take the i_mutex.  We trylock
	 * because delegations are an optional optimization, and if
	 * there's some chance of a conflict--we'd rather not
	 * bother, maybe that's a sign this just isn't a good file to
	 * hand out a delegation on.
	 */
A
Al Viro 已提交
1659
	if (is_deleg && !inode_trylock(inode))
J
J. Bruce Fields 已提交
1660 1661 1662 1663
		return -EAGAIN;

	if (is_deleg && arg == F_WRLCK) {
		/* Write delegations are not currently supported: */
A
Al Viro 已提交
1664
		inode_unlock(inode);
J
J. Bruce Fields 已提交
1665 1666 1667
		WARN_ON_ONCE(1);
		return -EINVAL;
	}
1668

1669
	spin_lock(&ctx->flc_lock);
1670
	time_out_leases(inode, &dispose);
C
Christoph Hellwig 已提交
1671
	error = check_conflicting_open(dentry, arg, lease->fl_flags);
1672
	if (error)
1673
		goto out;
1674

L
Linus Torvalds 已提交
1675 1676 1677 1678 1679 1680 1681 1682
	/*
	 * At this point, we know that if there is an exclusive
	 * lease on this file, then we hold it on this filp
	 * (otherwise our open of this file would have blocked).
	 * And if we are trying to acquire an exclusive lease,
	 * then the file is not open by anyone (including us)
	 * except for this filp.
	 */
J
J. Bruce Fields 已提交
1683
	error = -EAGAIN;
1684
	list_for_each_entry(fl, &ctx->flc_lease, fl_list) {
1685 1686
		if (fl->fl_file == filp &&
		    fl->fl_owner == lease->fl_owner) {
1687
			my_fl = fl;
J
J. Bruce Fields 已提交
1688 1689
			continue;
		}
1690

J
J. Bruce Fields 已提交
1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701 1702
		/*
		 * No exclusive leases if someone else has a lease on
		 * this file:
		 */
		if (arg == F_WRLCK)
			goto out;
		/*
		 * Modifying our existing lease is OK, but no getting a
		 * new lease if someone else is opening for write:
		 */
		if (fl->fl_flags & FL_UNLOCK_PENDING)
			goto out;
L
Linus Torvalds 已提交
1703 1704
	}

1705
	if (my_fl != NULL) {
1706 1707
		lease = my_fl;
		error = lease->fl_lmops->lm_change(lease, arg, &dispose);
1708 1709 1710
		if (error)
			goto out;
		goto out_setup;
L
Linus Torvalds 已提交
1711 1712 1713 1714 1715 1716
	}

	error = -EINVAL;
	if (!leases_enable)
		goto out;

1717
	locks_insert_lock_ctx(lease, &ctx->flc_lease);
1718 1719 1720 1721 1722 1723 1724 1725 1726 1727
	/*
	 * The check in break_lease() is lockless. It's possible for another
	 * open to race in after we did the earlier check for a conflicting
	 * open but before the lease was inserted. Check again for a
	 * conflicting open and cancel the lease if there is one.
	 *
	 * We also add a barrier here to ensure that the insertion of the lock
	 * precedes these checks.
	 */
	smp_mb();
C
Christoph Hellwig 已提交
1728
	error = check_conflicting_open(dentry, arg, lease->fl_flags);
1729
	if (error) {
1730
		locks_unlink_lock_ctx(lease);
1731 1732
		goto out;
	}
1733 1734 1735 1736

out_setup:
	if (lease->fl_lmops->lm_setup)
		lease->fl_lmops->lm_setup(lease, priv);
L
Linus Torvalds 已提交
1737
out:
1738
	spin_unlock(&ctx->flc_lock);
1739
	locks_dispose_list(&dispose);
J
J. Bruce Fields 已提交
1740
	if (is_deleg)
A
Al Viro 已提交
1741
		inode_unlock(inode);
1742
	if (!error && !my_fl)
1743
		*flp = NULL;
L
Linus Torvalds 已提交
1744 1745
	return error;
}
1746

1747
static int generic_delete_lease(struct file *filp, void *owner)
1748
{
1749
	int error = -EAGAIN;
1750
	struct file_lock *fl, *victim = NULL;
1751
	struct inode *inode = locks_inode(filp);
1752
	struct file_lock_context *ctx;
1753
	LIST_HEAD(dispose);
1754

1755
	ctx = smp_load_acquire(&inode->i_flctx);
1756 1757 1758 1759 1760
	if (!ctx) {
		trace_generic_delete_lease(inode, NULL);
		return error;
	}

1761
	spin_lock(&ctx->flc_lock);
1762
	list_for_each_entry(fl, &ctx->flc_lease, fl_list) {
1763 1764
		if (fl->fl_file == filp &&
		    fl->fl_owner == owner) {
1765
			victim = fl;
1766
			break;
1767
		}
1768
	}
1769
	trace_generic_delete_lease(inode, victim);
1770
	if (victim)
1771
		error = fl->fl_lmops->lm_change(victim, F_UNLCK, &dispose);
1772
	spin_unlock(&ctx->flc_lock);
1773
	locks_dispose_list(&dispose);
1774
	return error;
1775 1776 1777 1778
}

/**
 *	generic_setlease	-	sets a lease on an open file
1779 1780 1781 1782 1783
 *	@filp:	file pointer
 *	@arg:	type of lease to obtain
 *	@flp:	input - file_lock to use, output - file_lock inserted
 *	@priv:	private data for lm_setup (may be NULL if lm_setup
 *		doesn't require it)
1784 1785 1786 1787
 *
 *	The (input) flp->fl_lmops->lm_break function is required
 *	by break_lease().
 */
1788 1789
int generic_setlease(struct file *filp, long arg, struct file_lock **flp,
			void **priv)
1790
{
1791
	struct inode *inode = locks_inode(filp);
1792 1793
	int error;

1794
	if ((!uid_eq(current_fsuid(), inode->i_uid)) && !capable(CAP_LEASE))
1795 1796 1797 1798 1799 1800 1801 1802 1803
		return -EACCES;
	if (!S_ISREG(inode->i_mode))
		return -EINVAL;
	error = security_file_lock(filp, arg);
	if (error)
		return error;

	switch (arg) {
	case F_UNLCK:
1804
		return generic_delete_lease(filp, *priv);
1805 1806
	case F_RDLCK:
	case F_WRLCK:
1807 1808 1809 1810
		if (!(*flp)->fl_lmops->lm_break) {
			WARN_ON_ONCE(1);
			return -ENOLCK;
		}
C
Christoph Hellwig 已提交
1811

1812
		return generic_add_lease(filp, arg, flp, priv);
1813
	default:
1814
		return -EINVAL;
1815 1816
	}
}
1817
EXPORT_SYMBOL(generic_setlease);
L
Linus Torvalds 已提交
1818

1819
/**
1820
 * vfs_setlease        -       sets a lease on an open file
1821 1822 1823 1824 1825
 * @filp:	file pointer
 * @arg:	type of lease to obtain
 * @lease:	file_lock to use when adding a lease
 * @priv:	private info for lm_setup when adding a lease (may be
 * 		NULL if lm_setup doesn't require it)
1826 1827 1828 1829 1830 1831
 *
 * Call this to establish a lease on the file. The "lease" argument is not
 * used for F_UNLCK requests and may be NULL. For commands that set or alter
 * an existing lease, the (*lease)->fl_lmops->lm_break operation must be set;
 * if not, this function will return -ENOLCK (and generate a scary-looking
 * stack trace).
1832 1833 1834
 *
 * The "priv" pointer is passed directly to the lm_setup function as-is. It
 * may be NULL if the lm_setup operation doesn't require it.
L
Linus Torvalds 已提交
1835
 */
1836 1837
int
vfs_setlease(struct file *filp, long arg, struct file_lock **lease, void **priv)
L
Linus Torvalds 已提交
1838
{
1839
	if (filp->f_op->setlease && is_remote_lock(filp))
1840
		return filp->f_op->setlease(filp, arg, lease, priv);
1841
	else
1842
		return generic_setlease(filp, arg, lease, priv);
L
Linus Torvalds 已提交
1843
}
1844
EXPORT_SYMBOL_GPL(vfs_setlease);
L
Linus Torvalds 已提交
1845

1846
static int do_fcntl_add_lease(unsigned int fd, struct file *filp, long arg)
L
Linus Torvalds 已提交
1847
{
1848
	struct file_lock *fl;
1849
	struct fasync_struct *new;
L
Linus Torvalds 已提交
1850 1851
	int error;

1852 1853 1854
	fl = lease_alloc(filp, arg);
	if (IS_ERR(fl))
		return PTR_ERR(fl);
L
Linus Torvalds 已提交
1855

1856 1857 1858 1859 1860
	new = fasync_alloc();
	if (!new) {
		locks_free_lock(fl);
		return -ENOMEM;
	}
1861
	new->fa_fd = fd;
1862

1863
	error = vfs_setlease(filp, arg, &fl, (void **)&new);
1864 1865
	if (fl)
		locks_free_lock(fl);
1866 1867
	if (new)
		fasync_free(new);
L
Linus Torvalds 已提交
1868 1869 1870
	return error;
}

1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883
/**
 *	fcntl_setlease	-	sets a lease on an open file
 *	@fd: open file descriptor
 *	@filp: file pointer
 *	@arg: type of lease to obtain
 *
 *	Call this fcntl to establish a lease on the file.
 *	Note that you also need to call %F_SETSIG to
 *	receive a signal when the lease is broken.
 */
int fcntl_setlease(unsigned int fd, struct file *filp, long arg)
{
	if (arg == F_UNLCK)
1884
		return vfs_setlease(filp, F_UNLCK, NULL, (void **)&filp);
1885 1886 1887
	return do_fcntl_add_lease(fd, filp, arg);
}

L
Linus Torvalds 已提交
1888
/**
1889 1890
 * flock_lock_inode_wait - Apply a FLOCK-style lock to a file
 * @inode: inode of the file to apply to
L
Linus Torvalds 已提交
1891 1892
 * @fl: The lock to be applied
 *
1893
 * Apply a FLOCK style lock request to an inode.
L
Linus Torvalds 已提交
1894
 */
1895
static int flock_lock_inode_wait(struct inode *inode, struct file_lock *fl)
L
Linus Torvalds 已提交
1896 1897 1898 1899
{
	int error;
	might_sleep();
	for (;;) {
1900
		error = flock_lock_inode(inode, fl);
1901
		if (error != FILE_LOCK_DEFERRED)
L
Linus Torvalds 已提交
1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912
			break;
		error = wait_event_interruptible(fl->fl_wait, !fl->fl_next);
		if (!error)
			continue;

		locks_delete_block(fl);
		break;
	}
	return error;
}

1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936
/**
 * locks_lock_inode_wait - Apply a lock to an inode
 * @inode: inode of the file to apply to
 * @fl: The lock to be applied
 *
 * Apply a POSIX or FLOCK style lock request to an inode.
 */
int locks_lock_inode_wait(struct inode *inode, struct file_lock *fl)
{
	int res = 0;
	switch (fl->fl_flags & (FL_POSIX|FL_FLOCK)) {
		case FL_POSIX:
			res = posix_lock_inode_wait(inode, fl);
			break;
		case FL_FLOCK:
			res = flock_lock_inode_wait(inode, fl);
			break;
		default:
			BUG();
	}
	return res;
}
EXPORT_SYMBOL(locks_lock_inode_wait);

L
Linus Torvalds 已提交
1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955
/**
 *	sys_flock: - flock() system call.
 *	@fd: the file descriptor to lock.
 *	@cmd: the type of lock to apply.
 *
 *	Apply a %FL_FLOCK style lock to an open file descriptor.
 *	The @cmd can be one of
 *
 *	%LOCK_SH -- a shared lock.
 *
 *	%LOCK_EX -- an exclusive lock.
 *
 *	%LOCK_UN -- remove an existing lock.
 *
 *	%LOCK_MAND -- a `mandatory' flock.  This exists to emulate Windows Share Modes.
 *
 *	%LOCK_MAND can be combined with %LOCK_READ or %LOCK_WRITE to allow other
 *	processes read and write access respectively.
 */
1956
SYSCALL_DEFINE2(flock, unsigned int, fd, unsigned int, cmd)
L
Linus Torvalds 已提交
1957
{
1958
	struct fd f = fdget(fd);
L
Linus Torvalds 已提交
1959 1960 1961 1962 1963
	struct file_lock *lock;
	int can_sleep, unlock;
	int error;

	error = -EBADF;
1964
	if (!f.file)
L
Linus Torvalds 已提交
1965 1966 1967 1968 1969 1970
		goto out;

	can_sleep = !(cmd & LOCK_NB);
	cmd &= ~LOCK_NB;
	unlock = (cmd == LOCK_UN);

1971
	if (!unlock && !(cmd & LOCK_MAND) &&
1972
	    !(f.file->f_mode & (FMODE_READ|FMODE_WRITE)))
L
Linus Torvalds 已提交
1973 1974
		goto out_putf;

1975 1976 1977
	lock = flock_make_lock(f.file, cmd);
	if (IS_ERR(lock)) {
		error = PTR_ERR(lock);
L
Linus Torvalds 已提交
1978
		goto out_putf;
1979 1980
	}

L
Linus Torvalds 已提交
1981 1982 1983
	if (can_sleep)
		lock->fl_flags |= FL_SLEEP;

1984
	error = security_file_lock(f.file, lock->fl_type);
L
Linus Torvalds 已提交
1985 1986 1987
	if (error)
		goto out_free;

1988
	if (f.file->f_op->flock && is_remote_lock(f.file))
1989
		error = f.file->f_op->flock(f.file,
L
Linus Torvalds 已提交
1990 1991 1992
					  (can_sleep) ? F_SETLKW : F_SETLK,
					  lock);
	else
1993
		error = locks_lock_file_wait(f.file, lock);
L
Linus Torvalds 已提交
1994 1995

 out_free:
1996
	locks_free_lock(lock);
L
Linus Torvalds 已提交
1997 1998

 out_putf:
1999
	fdput(f);
L
Linus Torvalds 已提交
2000 2001 2002 2003
 out:
	return error;
}

2004 2005 2006
/**
 * vfs_test_lock - test file byte range lock
 * @filp: The file to test lock for
2007
 * @fl: The lock to test; also used to hold result
2008 2009 2010 2011 2012 2013
 *
 * Returns -ERRNO on failure.  Indicates presence of conflicting lock by
 * setting conf->fl_type to something other than F_UNLCK.
 */
int vfs_test_lock(struct file *filp, struct file_lock *fl)
{
2014
	if (filp->f_op->lock && is_remote_lock(filp))
2015 2016 2017 2018 2019 2020
		return filp->f_op->lock(filp, F_GETLK, fl);
	posix_test_lock(filp, fl);
	return 0;
}
EXPORT_SYMBOL_GPL(vfs_test_lock);

2021 2022
static int posix_lock_to_flock(struct flock *flock, struct file_lock *fl)
{
2023
	flock->l_pid = IS_OFDLCK(fl) ? -1 : fl->fl_pid;
2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037
#if BITS_PER_LONG == 32
	/*
	 * Make sure we can represent the posix lock via
	 * legacy 32bit flock.
	 */
	if (fl->fl_start > OFFT_OFFSET_MAX)
		return -EOVERFLOW;
	if (fl->fl_end != OFFSET_MAX && fl->fl_end > OFFT_OFFSET_MAX)
		return -EOVERFLOW;
#endif
	flock->l_start = fl->fl_start;
	flock->l_len = fl->fl_end == OFFSET_MAX ? 0 :
		fl->fl_end - fl->fl_start + 1;
	flock->l_whence = 0;
2038
	flock->l_type = fl->fl_type;
2039 2040 2041 2042 2043 2044
	return 0;
}

#if BITS_PER_LONG == 32
static void posix_lock_to_flock64(struct flock64 *flock, struct file_lock *fl)
{
2045
	flock->l_pid = IS_OFDLCK(fl) ? -1 : fl->fl_pid;
2046 2047 2048 2049 2050 2051 2052 2053
	flock->l_start = fl->fl_start;
	flock->l_len = fl->fl_end == OFFSET_MAX ? 0 :
		fl->fl_end - fl->fl_start + 1;
	flock->l_whence = 0;
	flock->l_type = fl->fl_type;
}
#endif

L
Linus Torvalds 已提交
2054 2055 2056
/* Report the first existing lock that would conflict with l.
 * This implements the F_GETLK command of fcntl().
 */
2057
int fcntl_getlk(struct file *filp, unsigned int cmd, struct flock __user *l)
L
Linus Torvalds 已提交
2058
{
2059
	struct file_lock file_lock;
L
Linus Torvalds 已提交
2060 2061 2062 2063 2064 2065 2066 2067 2068 2069 2070 2071 2072 2073
	struct flock flock;
	int error;

	error = -EFAULT;
	if (copy_from_user(&flock, l, sizeof(flock)))
		goto out;
	error = -EINVAL;
	if ((flock.l_type != F_RDLCK) && (flock.l_type != F_WRLCK))
		goto out;

	error = flock_to_posix_lock(filp, &file_lock, &flock);
	if (error)
		goto out;

2074
	if (cmd == F_OFD_GETLK) {
2075 2076 2077 2078
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2079
		cmd = F_GETLK;
2080
		file_lock.fl_flags |= FL_OFDLCK;
2081
		file_lock.fl_owner = filp;
2082 2083
	}

2084 2085 2086
	error = vfs_test_lock(filp, &file_lock);
	if (error)
		goto out;
L
Linus Torvalds 已提交
2087
 
2088 2089 2090
	flock.l_type = file_lock.fl_type;
	if (file_lock.fl_type != F_UNLCK) {
		error = posix_lock_to_flock(&flock, &file_lock);
2091
		if (error)
2092
			goto rel_priv;
L
Linus Torvalds 已提交
2093 2094 2095 2096
	}
	error = -EFAULT;
	if (!copy_to_user(l, &flock, sizeof(flock)))
		error = 0;
2097 2098
rel_priv:
	locks_release_private(&file_lock);
L
Linus Torvalds 已提交
2099 2100 2101 2102
out:
	return error;
}

2103 2104 2105 2106 2107
/**
 * vfs_lock_file - file byte range lock
 * @filp: The file to apply the lock to
 * @cmd: type of locking operation (F_SETLK, F_GETLK, etc.)
 * @fl: The lock to be applied
2108 2109 2110 2111 2112 2113 2114 2115
 * @conf: Place to return a copy of the conflicting lock, if found.
 *
 * A caller that doesn't care about the conflicting lock may pass NULL
 * as the final argument.
 *
 * If the filesystem defines a private ->lock() method, then @conf will
 * be left unchanged; so a caller that cares should initialize it to
 * some acceptable default.
2116 2117 2118 2119
 *
 * To avoid blocking kernel daemons, such as lockd, that need to acquire POSIX
 * locks, the ->lock() interface may return asynchronously, before the lock has
 * been granted or denied by the underlying filesystem, if (and only if)
J
J. Bruce Fields 已提交
2120
 * lm_grant is set. Callers expecting ->lock() to return asynchronously
2121 2122
 * will only use F_SETLK, not F_SETLKW; they will set FL_SLEEP if (and only if)
 * the request is for a blocking lock. When ->lock() does return asynchronously,
J
J. Bruce Fields 已提交
2123
 * it must return FILE_LOCK_DEFERRED, and call ->lm_grant() when the lock
2124 2125
 * request completes.
 * If the request is for non-blocking lock the file system should return
2126 2127
 * FILE_LOCK_DEFERRED then try to get the lock and call the callback routine
 * with the result. If the request timed out the callback routine will return a
2128 2129 2130 2131 2132
 * nonzero return code and the file system should release the lock. The file
 * system is also responsible to keep a corresponding posix lock when it
 * grants a lock so the VFS can find out which locks are locally held and do
 * the correct lock cleanup when required.
 * The underlying filesystem must not drop the kernel lock or call
J
J. Bruce Fields 已提交
2133
 * ->lm_grant() before returning to the caller with a FILE_LOCK_DEFERRED
2134
 * return code.
2135
 */
2136
int vfs_lock_file(struct file *filp, unsigned int cmd, struct file_lock *fl, struct file_lock *conf)
2137
{
2138
	if (filp->f_op->lock && is_remote_lock(filp))
2139 2140
		return filp->f_op->lock(filp, cmd, fl);
	else
2141
		return posix_lock_file(filp, fl, conf);
2142 2143 2144
}
EXPORT_SYMBOL_GPL(vfs_lock_file);

M
Miklos Szeredi 已提交
2145 2146 2147 2148 2149 2150 2151 2152 2153
static int do_lock_file_wait(struct file *filp, unsigned int cmd,
			     struct file_lock *fl)
{
	int error;

	error = security_file_lock(filp, fl->fl_type);
	if (error)
		return error;

2154 2155 2156
	for (;;) {
		error = vfs_lock_file(filp, cmd, fl, NULL);
		if (error != FILE_LOCK_DEFERRED)
M
Miklos Szeredi 已提交
2157
			break;
2158 2159 2160 2161 2162 2163
		error = wait_event_interruptible(fl->fl_wait, !fl->fl_next);
		if (!error)
			continue;

		locks_delete_block(fl);
		break;
M
Miklos Szeredi 已提交
2164 2165 2166 2167 2168
	}

	return error;
}

2169
/* Ensure that fl->fl_file has compatible f_mode for F_SETLK calls */
2170 2171 2172 2173 2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184
static int
check_fmode_for_setlk(struct file_lock *fl)
{
	switch (fl->fl_type) {
	case F_RDLCK:
		if (!(fl->fl_file->f_mode & FMODE_READ))
			return -EBADF;
		break;
	case F_WRLCK:
		if (!(fl->fl_file->f_mode & FMODE_WRITE))
			return -EBADF;
	}
	return 0;
}

L
Linus Torvalds 已提交
2185 2186 2187
/* Apply the lock described by l to an open file descriptor.
 * This implements both the F_SETLK and F_SETLKW commands of fcntl().
 */
2188 2189
int fcntl_setlk(unsigned int fd, struct file *filp, unsigned int cmd,
		struct flock __user *l)
L
Linus Torvalds 已提交
2190 2191 2192 2193
{
	struct file_lock *file_lock = locks_alloc_lock();
	struct flock flock;
	struct inode *inode;
2194
	struct file *f;
L
Linus Torvalds 已提交
2195 2196 2197 2198 2199
	int error;

	if (file_lock == NULL)
		return -ENOLCK;

2200
	inode = locks_inode(filp);
2201

L
Linus Torvalds 已提交
2202 2203 2204 2205 2206 2207 2208 2209 2210 2211
	/*
	 * This might block, so we do it before checking the inode.
	 */
	error = -EFAULT;
	if (copy_from_user(&flock, l, sizeof(flock)))
		goto out;

	/* Don't allow mandatory locks on files that may be memory mapped
	 * and shared.
	 */
2212
	if (mandatory_lock(inode) && mapping_writably_mapped(filp->f_mapping)) {
L
Linus Torvalds 已提交
2213 2214 2215 2216 2217 2218 2219
		error = -EAGAIN;
		goto out;
	}

	error = flock_to_posix_lock(filp, file_lock, &flock);
	if (error)
		goto out;
2220

2221 2222 2223 2224
	error = check_fmode_for_setlk(file_lock);
	if (error)
		goto out;

2225 2226
	/*
	 * If the cmd is requesting file-private locks, then set the
2227
	 * FL_OFDLCK flag and override the owner.
2228 2229
	 */
	switch (cmd) {
2230
	case F_OFD_SETLK:
2231 2232 2233 2234
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2235
		cmd = F_SETLK;
2236
		file_lock->fl_flags |= FL_OFDLCK;
2237
		file_lock->fl_owner = filp;
2238
		break;
2239
	case F_OFD_SETLKW:
2240 2241 2242 2243
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2244
		cmd = F_SETLKW;
2245
		file_lock->fl_flags |= FL_OFDLCK;
2246
		file_lock->fl_owner = filp;
2247 2248
		/* Fallthrough */
	case F_SETLKW:
L
Linus Torvalds 已提交
2249 2250
		file_lock->fl_flags |= FL_SLEEP;
	}
2251

M
Miklos Szeredi 已提交
2252
	error = do_lock_file_wait(filp, cmd, file_lock);
L
Linus Torvalds 已提交
2253

2254
	/*
2255 2256 2257
	 * Attempt to detect a close/fcntl race and recover by releasing the
	 * lock that was just acquired. There is no need to do that when we're
	 * unlocking though, or for OFD locks.
2258
	 */
2259 2260
	if (!error && file_lock->fl_type != F_UNLCK &&
	    !(file_lock->fl_flags & FL_OFDLCK)) {
2261 2262 2263 2264 2265 2266 2267 2268 2269 2270 2271 2272 2273 2274
		/*
		 * We need that spin_lock here - it prevents reordering between
		 * update of i_flctx->flc_posix and check for it done in
		 * close(). rcu_read_lock() wouldn't do.
		 */
		spin_lock(&current->files->file_lock);
		f = fcheck(fd);
		spin_unlock(&current->files->file_lock);
		if (f != filp) {
			file_lock->fl_type = F_UNLCK;
			error = do_lock_file_wait(filp, cmd, file_lock);
			WARN_ON_ONCE(error);
			error = -EBADF;
		}
L
Linus Torvalds 已提交
2275
	}
2276
out:
2277
	trace_fcntl_setlk(inode, file_lock, error);
L
Linus Torvalds 已提交
2278 2279 2280 2281 2282 2283 2284 2285
	locks_free_lock(file_lock);
	return error;
}

#if BITS_PER_LONG == 32
/* Report the first existing lock that would conflict with l.
 * This implements the F_GETLK command of fcntl().
 */
2286
int fcntl_getlk64(struct file *filp, unsigned int cmd, struct flock64 __user *l)
L
Linus Torvalds 已提交
2287
{
2288
	struct file_lock file_lock;
L
Linus Torvalds 已提交
2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302
	struct flock64 flock;
	int error;

	error = -EFAULT;
	if (copy_from_user(&flock, l, sizeof(flock)))
		goto out;
	error = -EINVAL;
	if ((flock.l_type != F_RDLCK) && (flock.l_type != F_WRLCK))
		goto out;

	error = flock64_to_posix_lock(filp, &file_lock, &flock);
	if (error)
		goto out;

2303
	if (cmd == F_OFD_GETLK) {
2304 2305 2306 2307
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2308
		cmd = F_GETLK64;
2309
		file_lock.fl_flags |= FL_OFDLCK;
2310
		file_lock.fl_owner = filp;
2311 2312
	}

2313 2314 2315 2316
	error = vfs_test_lock(filp, &file_lock);
	if (error)
		goto out;

2317 2318 2319 2320
	flock.l_type = file_lock.fl_type;
	if (file_lock.fl_type != F_UNLCK)
		posix_lock_to_flock64(&flock, &file_lock);

L
Linus Torvalds 已提交
2321 2322 2323
	error = -EFAULT;
	if (!copy_to_user(l, &flock, sizeof(flock)))
		error = 0;
2324 2325

	locks_release_private(&file_lock);
L
Linus Torvalds 已提交
2326 2327 2328 2329 2330 2331 2332
out:
	return error;
}

/* Apply the lock described by l to an open file descriptor.
 * This implements both the F_SETLK and F_SETLKW commands of fcntl().
 */
2333 2334
int fcntl_setlk64(unsigned int fd, struct file *filp, unsigned int cmd,
		struct flock64 __user *l)
L
Linus Torvalds 已提交
2335 2336 2337 2338
{
	struct file_lock *file_lock = locks_alloc_lock();
	struct flock64 flock;
	struct inode *inode;
2339
	struct file *f;
L
Linus Torvalds 已提交
2340 2341 2342 2343 2344 2345 2346 2347 2348 2349 2350 2351
	int error;

	if (file_lock == NULL)
		return -ENOLCK;

	/*
	 * This might block, so we do it before checking the inode.
	 */
	error = -EFAULT;
	if (copy_from_user(&flock, l, sizeof(flock)))
		goto out;

2352
	inode = locks_inode(filp);
L
Linus Torvalds 已提交
2353 2354 2355 2356

	/* Don't allow mandatory locks on files that may be memory mapped
	 * and shared.
	 */
2357
	if (mandatory_lock(inode) && mapping_writably_mapped(filp->f_mapping)) {
L
Linus Torvalds 已提交
2358 2359 2360 2361 2362 2363 2364
		error = -EAGAIN;
		goto out;
	}

	error = flock64_to_posix_lock(filp, file_lock, &flock);
	if (error)
		goto out;
2365

2366 2367 2368 2369
	error = check_fmode_for_setlk(file_lock);
	if (error)
		goto out;

2370 2371
	/*
	 * If the cmd is requesting file-private locks, then set the
2372
	 * FL_OFDLCK flag and override the owner.
2373 2374
	 */
	switch (cmd) {
2375
	case F_OFD_SETLK:
2376 2377 2378 2379
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2380
		cmd = F_SETLK64;
2381
		file_lock->fl_flags |= FL_OFDLCK;
2382
		file_lock->fl_owner = filp;
2383
		break;
2384
	case F_OFD_SETLKW:
2385 2386 2387 2388
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2389
		cmd = F_SETLKW64;
2390
		file_lock->fl_flags |= FL_OFDLCK;
2391
		file_lock->fl_owner = filp;
2392 2393
		/* Fallthrough */
	case F_SETLKW64:
L
Linus Torvalds 已提交
2394 2395
		file_lock->fl_flags |= FL_SLEEP;
	}
2396

M
Miklos Szeredi 已提交
2397
	error = do_lock_file_wait(filp, cmd, file_lock);
L
Linus Torvalds 已提交
2398

2399
	/*
2400 2401 2402
	 * Attempt to detect a close/fcntl race and recover by releasing the
	 * lock that was just acquired. There is no need to do that when we're
	 * unlocking though, or for OFD locks.
2403
	 */
2404 2405
	if (!error && file_lock->fl_type != F_UNLCK &&
	    !(file_lock->fl_flags & FL_OFDLCK)) {
2406 2407 2408 2409 2410 2411 2412 2413 2414 2415 2416 2417 2418 2419
		/*
		 * We need that spin_lock here - it prevents reordering between
		 * update of i_flctx->flc_posix and check for it done in
		 * close(). rcu_read_lock() wouldn't do.
		 */
		spin_lock(&current->files->file_lock);
		f = fcheck(fd);
		spin_unlock(&current->files->file_lock);
		if (f != filp) {
			file_lock->fl_type = F_UNLCK;
			error = do_lock_file_wait(filp, cmd, file_lock);
			WARN_ON_ONCE(error);
			error = -EBADF;
		}
L
Linus Torvalds 已提交
2420 2421 2422 2423 2424 2425 2426 2427 2428 2429 2430 2431 2432 2433
	}
out:
	locks_free_lock(file_lock);
	return error;
}
#endif /* BITS_PER_LONG == 32 */

/*
 * This function is called when the file is being removed
 * from the task's fd array.  POSIX locks belonging to this task
 * are deleted at this time.
 */
void locks_remove_posix(struct file *filp, fl_owner_t owner)
{
2434
	int error;
2435
	struct inode *inode = locks_inode(filp);
2436
	struct file_lock lock;
2437
	struct file_lock_context *ctx;
L
Linus Torvalds 已提交
2438 2439 2440 2441 2442 2443

	/*
	 * If there are no locks held on this file, we don't need to call
	 * posix_lock_file().  Another process could be setting a lock on this
	 * file at the same time, but we wouldn't remove that lock anyway.
	 */
2444
	ctx =  smp_load_acquire(&inode->i_flctx);
2445
	if (!ctx || list_empty(&ctx->flc_posix))
L
Linus Torvalds 已提交
2446 2447 2448
		return;

	lock.fl_type = F_UNLCK;
2449
	lock.fl_flags = FL_POSIX | FL_CLOSE;
L
Linus Torvalds 已提交
2450 2451 2452 2453 2454 2455 2456 2457
	lock.fl_start = 0;
	lock.fl_end = OFFSET_MAX;
	lock.fl_owner = owner;
	lock.fl_pid = current->tgid;
	lock.fl_file = filp;
	lock.fl_ops = NULL;
	lock.fl_lmops = NULL;

2458
	error = vfs_lock_file(filp, F_SETLK, &lock, NULL);
L
Linus Torvalds 已提交
2459 2460 2461

	if (lock.fl_ops && lock.fl_ops->fl_release_private)
		lock.fl_ops->fl_release_private(&lock);
2462
	trace_locks_remove_posix(inode, &lock, error);
L
Linus Torvalds 已提交
2463 2464 2465 2466
}

EXPORT_SYMBOL(locks_remove_posix);

2467
/* The i_flctx must be valid when calling into here */
2468
static void
2469
locks_remove_flock(struct file *filp, struct file_lock_context *flctx)
2470 2471 2472 2473 2474 2475 2476 2477 2478
{
	struct file_lock fl = {
		.fl_owner = filp,
		.fl_pid = current->tgid,
		.fl_file = filp,
		.fl_flags = FL_FLOCK,
		.fl_type = F_UNLCK,
		.fl_end = OFFSET_MAX,
	};
2479
	struct inode *inode = locks_inode(filp);
2480

2481
	if (list_empty(&flctx->flc_flock))
2482 2483
		return;

2484
	if (filp->f_op->flock && is_remote_lock(filp))
2485 2486
		filp->f_op->flock(filp, F_SETLKW, &fl);
	else
2487
		flock_lock_inode(inode, &fl);
2488 2489 2490 2491 2492

	if (fl.fl_ops && fl.fl_ops->fl_release_private)
		fl.fl_ops->fl_release_private(&fl);
}

2493
/* The i_flctx must be valid when calling into here */
2494
static void
2495
locks_remove_lease(struct file *filp, struct file_lock_context *ctx)
2496 2497 2498 2499
{
	struct file_lock *fl, *tmp;
	LIST_HEAD(dispose);

2500
	if (list_empty(&ctx->flc_lease))
2501 2502
		return;

2503
	spin_lock(&ctx->flc_lock);
2504
	list_for_each_entry_safe(fl, tmp, &ctx->flc_lease, fl_list)
2505 2506
		if (filp == fl->fl_file)
			lease_modify(fl, F_UNLCK, &dispose);
2507
	spin_unlock(&ctx->flc_lock);
2508 2509 2510
	locks_dispose_list(&dispose);
}

L
Linus Torvalds 已提交
2511 2512 2513
/*
 * This function is called on the last close of an open file.
 */
2514
void locks_remove_file(struct file *filp)
L
Linus Torvalds 已提交
2515
{
2516 2517
	struct file_lock_context *ctx;

2518
	ctx = smp_load_acquire(&locks_inode(filp)->i_flctx);
2519
	if (!ctx)
2520 2521
		return;

2522
	/* remove any OFD locks */
2523
	locks_remove_posix(filp, filp);
2524

2525
	/* remove flock locks */
2526
	locks_remove_flock(filp, ctx);
2527

2528
	/* remove any leases */
2529
	locks_remove_lease(filp, ctx);
L
Linus Torvalds 已提交
2530 2531 2532 2533 2534 2535 2536 2537
}

/**
 *	posix_unblock_lock - stop waiting for a file lock
 *	@waiter: the lock which was waiting
 *
 *	lockd needs to block waiting for locks.
 */
J
J. Bruce Fields 已提交
2538
int
2539
posix_unblock_lock(struct file_lock *waiter)
L
Linus Torvalds 已提交
2540
{
J
J. Bruce Fields 已提交
2541 2542
	int status = 0;

2543
	spin_lock(&blocked_lock_lock);
2544
	if (waiter->fl_next)
L
Linus Torvalds 已提交
2545
		__locks_delete_block(waiter);
J
J. Bruce Fields 已提交
2546 2547
	else
		status = -ENOENT;
2548
	spin_unlock(&blocked_lock_lock);
J
J. Bruce Fields 已提交
2549
	return status;
L
Linus Torvalds 已提交
2550 2551 2552
}
EXPORT_SYMBOL(posix_unblock_lock);

M
Marc Eshel 已提交
2553 2554 2555 2556 2557 2558 2559 2560 2561
/**
 * vfs_cancel_lock - file byte range unblock lock
 * @filp: The file to apply the unblock to
 * @fl: The lock to be unblocked
 *
 * Used by lock managers to cancel blocked requests
 */
int vfs_cancel_lock(struct file *filp, struct file_lock *fl)
{
2562
	if (filp->f_op->lock && is_remote_lock(filp))
M
Marc Eshel 已提交
2563 2564 2565 2566 2567 2568
		return filp->f_op->lock(filp, F_CANCELLK, fl);
	return 0;
}

EXPORT_SYMBOL_GPL(vfs_cancel_lock);

2569
#ifdef CONFIG_PROC_FS
2570
#include <linux/proc_fs.h>
2571 2572
#include <linux/seq_file.h>

2573 2574 2575 2576 2577
struct locks_iterator {
	int	li_cpu;
	loff_t	li_pos;
};

2578
static void lock_get_status(struct seq_file *f, struct file_lock *fl,
2579
			    loff_t id, char *pfx)
L
Linus Torvalds 已提交
2580 2581
{
	struct inode *inode = NULL;
2582 2583 2584
	unsigned int fl_pid;

	if (fl->fl_nspid)
2585
		fl_pid = pid_vnr(fl->fl_nspid);
2586 2587
	else
		fl_pid = fl->fl_pid;
L
Linus Torvalds 已提交
2588 2589

	if (fl->fl_file != NULL)
2590
		inode = locks_inode(fl->fl_file);
L
Linus Torvalds 已提交
2591

2592
	seq_printf(f, "%lld:%s ", id, pfx);
L
Linus Torvalds 已提交
2593
	if (IS_POSIX(fl)) {
2594
		if (fl->fl_flags & FL_ACCESS)
2595
			seq_puts(f, "ACCESS");
2596
		else if (IS_OFDLCK(fl))
2597
			seq_puts(f, "OFDLCK");
2598
		else
2599
			seq_puts(f, "POSIX ");
2600 2601

		seq_printf(f, " %s ",
L
Linus Torvalds 已提交
2602
			     (inode == NULL) ? "*NOINODE*" :
2603
			     mandatory_lock(inode) ? "MANDATORY" : "ADVISORY ");
L
Linus Torvalds 已提交
2604 2605
	} else if (IS_FLOCK(fl)) {
		if (fl->fl_type & LOCK_MAND) {
2606
			seq_puts(f, "FLOCK  MSNFS     ");
L
Linus Torvalds 已提交
2607
		} else {
2608
			seq_puts(f, "FLOCK  ADVISORY  ");
L
Linus Torvalds 已提交
2609 2610
		}
	} else if (IS_LEASE(fl)) {
2611 2612 2613 2614 2615
		if (fl->fl_flags & FL_DELEG)
			seq_puts(f, "DELEG  ");
		else
			seq_puts(f, "LEASE  ");

J
J. Bruce Fields 已提交
2616
		if (lease_breaking(fl))
2617
			seq_puts(f, "BREAKING  ");
L
Linus Torvalds 已提交
2618
		else if (fl->fl_file)
2619
			seq_puts(f, "ACTIVE    ");
L
Linus Torvalds 已提交
2620
		else
2621
			seq_puts(f, "BREAKER   ");
L
Linus Torvalds 已提交
2622
	} else {
2623
		seq_puts(f, "UNKNOWN UNKNOWN  ");
L
Linus Torvalds 已提交
2624 2625
	}
	if (fl->fl_type & LOCK_MAND) {
2626
		seq_printf(f, "%s ",
L
Linus Torvalds 已提交
2627 2628 2629 2630
			       (fl->fl_type & LOCK_READ)
			       ? (fl->fl_type & LOCK_WRITE) ? "RW   " : "READ "
			       : (fl->fl_type & LOCK_WRITE) ? "WRITE" : "NONE ");
	} else {
2631
		seq_printf(f, "%s ",
J
J. Bruce Fields 已提交
2632
			       (lease_breaking(fl))
2633 2634
			       ? (fl->fl_type == F_UNLCK) ? "UNLCK" : "READ "
			       : (fl->fl_type == F_WRLCK) ? "WRITE" : "READ ");
L
Linus Torvalds 已提交
2635 2636
	}
	if (inode) {
2637
		/* userspace relies on this representation of dev_t */
2638
		seq_printf(f, "%d %02x:%02x:%ld ", fl_pid,
L
Linus Torvalds 已提交
2639 2640 2641
				MAJOR(inode->i_sb->s_dev),
				MINOR(inode->i_sb->s_dev), inode->i_ino);
	} else {
2642
		seq_printf(f, "%d <none>:0 ", fl_pid);
L
Linus Torvalds 已提交
2643 2644 2645
	}
	if (IS_POSIX(fl)) {
		if (fl->fl_end == OFFSET_MAX)
2646
			seq_printf(f, "%Ld EOF\n", fl->fl_start);
L
Linus Torvalds 已提交
2647
		else
2648
			seq_printf(f, "%Ld %Ld\n", fl->fl_start, fl->fl_end);
L
Linus Torvalds 已提交
2649
	} else {
2650
		seq_puts(f, "0 EOF\n");
L
Linus Torvalds 已提交
2651 2652 2653
	}
}

2654
static int locks_show(struct seq_file *f, void *v)
L
Linus Torvalds 已提交
2655
{
2656
	struct locks_iterator *iter = f->private;
2657
	struct file_lock *fl, *bfl;
L
Linus Torvalds 已提交
2658

2659
	fl = hlist_entry(v, struct file_lock, fl_link);
L
Linus Torvalds 已提交
2660

2661
	lock_get_status(f, fl, iter->li_pos, "");
L
Linus Torvalds 已提交
2662

2663
	list_for_each_entry(bfl, &fl->fl_block, fl_block)
2664
		lock_get_status(f, bfl, iter->li_pos, " ->");
2665

2666 2667
	return 0;
}
L
Linus Torvalds 已提交
2668

2669 2670 2671 2672 2673 2674 2675 2676 2677 2678 2679 2680 2681 2682 2683 2684 2685 2686 2687 2688 2689 2690 2691
static void __show_fd_locks(struct seq_file *f,
			struct list_head *head, int *id,
			struct file *filp, struct files_struct *files)
{
	struct file_lock *fl;

	list_for_each_entry(fl, head, fl_list) {

		if (filp != fl->fl_file)
			continue;
		if (fl->fl_owner != files &&
		    fl->fl_owner != filp)
			continue;

		(*id)++;
		seq_puts(f, "lock:\t");
		lock_get_status(f, fl, *id, "");
	}
}

void show_fd_locks(struct seq_file *f,
		  struct file *filp, struct files_struct *files)
{
2692
	struct inode *inode = locks_inode(filp);
2693 2694 2695
	struct file_lock_context *ctx;
	int id = 0;

2696
	ctx = smp_load_acquire(&inode->i_flctx);
2697 2698 2699 2700 2701 2702 2703 2704 2705 2706
	if (!ctx)
		return;

	spin_lock(&ctx->flc_lock);
	__show_fd_locks(f, &ctx->flc_flock, &id, filp, files);
	__show_fd_locks(f, &ctx->flc_posix, &id, filp, files);
	__show_fd_locks(f, &ctx->flc_lease, &id, filp, files);
	spin_unlock(&ctx->flc_lock);
}

2707
static void *locks_start(struct seq_file *f, loff_t *pos)
2708
	__acquires(&blocked_lock_lock)
2709
{
2710
	struct locks_iterator *iter = f->private;
2711

2712 2713
	iter->li_pos = *pos + 1;
	lg_global_lock(&file_lock_lglock);
2714
	spin_lock(&blocked_lock_lock);
2715
	return seq_hlist_start_percpu(&file_lock_list, &iter->li_cpu, *pos);
2716
}
L
Linus Torvalds 已提交
2717

2718 2719
static void *locks_next(struct seq_file *f, void *v, loff_t *pos)
{
2720 2721 2722 2723
	struct locks_iterator *iter = f->private;

	++iter->li_pos;
	return seq_hlist_next_percpu(v, &file_lock_list, &iter->li_cpu, pos);
2724
}
L
Linus Torvalds 已提交
2725

2726
static void locks_stop(struct seq_file *f, void *v)
2727
	__releases(&blocked_lock_lock)
2728
{
2729
	spin_unlock(&blocked_lock_lock);
2730
	lg_global_unlock(&file_lock_lglock);
L
Linus Torvalds 已提交
2731 2732
}

2733
static const struct seq_operations locks_seq_operations = {
2734 2735 2736 2737 2738
	.start	= locks_start,
	.next	= locks_next,
	.stop	= locks_stop,
	.show	= locks_show,
};
2739 2740 2741

static int locks_open(struct inode *inode, struct file *filp)
{
2742 2743
	return seq_open_private(filp, &locks_seq_operations,
					sizeof(struct locks_iterator));
2744 2745 2746 2747 2748 2749
}

static const struct file_operations proc_locks_operations = {
	.open		= locks_open,
	.read		= seq_read,
	.llseek		= seq_lseek,
2750
	.release	= seq_release_private,
2751 2752 2753 2754 2755 2756 2757
};

static int __init proc_locks_init(void)
{
	proc_create("locks", 0, NULL, &proc_locks_operations);
	return 0;
}
2758
fs_initcall(proc_locks_init);
2759 2760
#endif

L
Linus Torvalds 已提交
2761 2762
static int __init filelock_init(void)
{
2763 2764
	int i;

2765 2766 2767
	flctx_cache = kmem_cache_create("file_lock_ctx",
			sizeof(struct file_lock_context), 0, SLAB_PANIC, NULL);

L
Linus Torvalds 已提交
2768
	filelock_cache = kmem_cache_create("file_lock_cache",
M
Miklos Szeredi 已提交
2769 2770
			sizeof(struct file_lock), 0, SLAB_PANIC, NULL);

2771 2772 2773 2774 2775
	lg_lock_init(&file_lock_lglock, "file_lock_lglock");

	for_each_possible_cpu(i)
		INIT_HLIST_HEAD(per_cpu_ptr(&file_lock_list, i));

L
Linus Torvalds 已提交
2776 2777 2778 2779
	return 0;
}

core_initcall(filelock_init);