locks.c 71.5 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62
/*
 *  linux/fs/locks.c
 *
 *  Provide support for fcntl()'s F_GETLK, F_SETLK, and F_SETLKW calls.
 *  Doug Evans (dje@spiff.uucp), August 07, 1992
 *
 *  Deadlock detection added.
 *  FIXME: one thing isn't handled yet:
 *	- mandatory locks (requires lots of changes elsewhere)
 *  Kelly Carmichael (kelly@[142.24.8.65]), September 17, 1994.
 *
 *  Miscellaneous edits, and a total rewrite of posix_lock_file() code.
 *  Kai Petzke (wpp@marie.physik.tu-berlin.de), 1994
 *  
 *  Converted file_lock_table to a linked list from an array, which eliminates
 *  the limits on how many active file locks are open.
 *  Chad Page (pageone@netcom.com), November 27, 1994
 * 
 *  Removed dependency on file descriptors. dup()'ed file descriptors now
 *  get the same locks as the original file descriptors, and a close() on
 *  any file descriptor removes ALL the locks on the file for the current
 *  process. Since locks still depend on the process id, locks are inherited
 *  after an exec() but not after a fork(). This agrees with POSIX, and both
 *  BSD and SVR4 practice.
 *  Andy Walker (andy@lysaker.kvaerner.no), February 14, 1995
 *
 *  Scrapped free list which is redundant now that we allocate locks
 *  dynamically with kmalloc()/kfree().
 *  Andy Walker (andy@lysaker.kvaerner.no), February 21, 1995
 *
 *  Implemented two lock personalities - FL_FLOCK and FL_POSIX.
 *
 *  FL_POSIX locks are created with calls to fcntl() and lockf() through the
 *  fcntl() system call. They have the semantics described above.
 *
 *  FL_FLOCK locks are created with calls to flock(), through the flock()
 *  system call, which is new. Old C libraries implement flock() via fcntl()
 *  and will continue to use the old, broken implementation.
 *
 *  FL_FLOCK locks follow the 4.4 BSD flock() semantics. They are associated
 *  with a file pointer (filp). As a result they can be shared by a parent
 *  process and its children after a fork(). They are removed when the last
 *  file descriptor referring to the file pointer is closed (unless explicitly
 *  unlocked). 
 *
 *  FL_FLOCK locks never deadlock, an existing lock is always removed before
 *  upgrading from shared to exclusive (or vice versa). When this happens
 *  any processes blocked by the current lock are woken up and allowed to
 *  run before the new lock is applied.
 *  Andy Walker (andy@lysaker.kvaerner.no), June 09, 1995
 *
 *  Removed some race conditions in flock_lock_file(), marked other possible
 *  races. Just grep for FIXME to see them. 
 *  Dmitry Gorodchanin (pgmdsg@ibi.com), February 09, 1996.
 *
 *  Addressed Dmitry's concerns. Deadlock checking no longer recursive.
 *  Lock allocation changed to GFP_ATOMIC as we can't afford to sleep
 *  once we've checked for blocking and deadlocking.
 *  Andy Walker (andy@lysaker.kvaerner.no), April 03, 1996.
 *
 *  Initial implementation of mandatory locks. SunOS turned out to be
 *  a rotten model, so I implemented the "obvious" semantics.
P
Paul Bolle 已提交
63
 *  See 'Documentation/filesystems/mandatory-locking.txt' for details.
L
Linus Torvalds 已提交
64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118
 *  Andy Walker (andy@lysaker.kvaerner.no), April 06, 1996.
 *
 *  Don't allow mandatory locks on mmap()'ed files. Added simple functions to
 *  check if a file has mandatory locks, used by mmap(), open() and creat() to
 *  see if system call should be rejected. Ref. HP-UX/SunOS/Solaris Reference
 *  Manual, Section 2.
 *  Andy Walker (andy@lysaker.kvaerner.no), April 09, 1996.
 *
 *  Tidied up block list handling. Added '/proc/locks' interface.
 *  Andy Walker (andy@lysaker.kvaerner.no), April 24, 1996.
 *
 *  Fixed deadlock condition for pathological code that mixes calls to
 *  flock() and fcntl().
 *  Andy Walker (andy@lysaker.kvaerner.no), April 29, 1996.
 *
 *  Allow only one type of locking scheme (FL_POSIX or FL_FLOCK) to be in use
 *  for a given file at a time. Changed the CONFIG_LOCK_MANDATORY scheme to
 *  guarantee sensible behaviour in the case where file system modules might
 *  be compiled with different options than the kernel itself.
 *  Andy Walker (andy@lysaker.kvaerner.no), May 15, 1996.
 *
 *  Added a couple of missing wake_up() calls. Thanks to Thomas Meckel
 *  (Thomas.Meckel@mni.fh-giessen.de) for spotting this.
 *  Andy Walker (andy@lysaker.kvaerner.no), May 15, 1996.
 *
 *  Changed FL_POSIX locks to use the block list in the same way as FL_FLOCK
 *  locks. Changed process synchronisation to avoid dereferencing locks that
 *  have already been freed.
 *  Andy Walker (andy@lysaker.kvaerner.no), Sep 21, 1996.
 *
 *  Made the block list a circular list to minimise searching in the list.
 *  Andy Walker (andy@lysaker.kvaerner.no), Sep 25, 1996.
 *
 *  Made mandatory locking a mount option. Default is not to allow mandatory
 *  locking.
 *  Andy Walker (andy@lysaker.kvaerner.no), Oct 04, 1996.
 *
 *  Some adaptations for NFS support.
 *  Olaf Kirch (okir@monad.swb.de), Dec 1996,
 *
 *  Fixed /proc/locks interface so that we can't overrun the buffer we are handed.
 *  Andy Walker (andy@lysaker.kvaerner.no), May 12, 1997.
 *
 *  Use slab allocator instead of kmalloc/kfree.
 *  Use generic list implementation from <linux/list.h>.
 *  Sped up posix_locks_deadlock by only considering blocked locks.
 *  Matthew Wilcox <willy@debian.org>, March, 2000.
 *
 *  Leases and LOCK_MAND
 *  Matthew Wilcox <willy@debian.org>, June, 2000.
 *  Stephen Rothwell <sfr@canb.auug.org.au>, June, 2000.
 */

#include <linux/capability.h>
#include <linux/file.h>
A
Al Viro 已提交
119
#include <linux/fdtable.h>
L
Linus Torvalds 已提交
120 121 122 123 124 125
#include <linux/fs.h>
#include <linux/init.h>
#include <linux/security.h>
#include <linux/slab.h>
#include <linux/syscalls.h>
#include <linux/time.h>
126
#include <linux/rcupdate.h>
127
#include <linux/pid_namespace.h>
128
#include <linux/hashtable.h>
129 130
#include <linux/percpu.h>
#include <linux/lglock.h>
L
Linus Torvalds 已提交
131

132 133 134
#define CREATE_TRACE_POINTS
#include <trace/events/filelock.h>

L
Linus Torvalds 已提交
135 136 137 138
#include <asm/uaccess.h>

#define IS_POSIX(fl)	(fl->fl_flags & FL_POSIX)
#define IS_FLOCK(fl)	(fl->fl_flags & FL_FLOCK)
C
Christoph Hellwig 已提交
139
#define IS_LEASE(fl)	(fl->fl_flags & (FL_LEASE|FL_DELEG|FL_LAYOUT))
140
#define IS_OFDLCK(fl)	(fl->fl_flags & FL_OFDLCK)
L
Linus Torvalds 已提交
141

J
J. Bruce Fields 已提交
142 143
static bool lease_breaking(struct file_lock *fl)
{
144 145 146 147 148 149 150 151 152 153
	return fl->fl_flags & (FL_UNLOCK_PENDING | FL_DOWNGRADE_PENDING);
}

static int target_leasetype(struct file_lock *fl)
{
	if (fl->fl_flags & FL_UNLOCK_PENDING)
		return F_UNLCK;
	if (fl->fl_flags & FL_DOWNGRADE_PENDING)
		return F_RDLCK;
	return fl->fl_type;
J
J. Bruce Fields 已提交
154 155
}

L
Linus Torvalds 已提交
156 157 158
int leases_enable = 1;
int lease_break_time = 45;

159
/*
160 161 162
 * The global file_lock_list is only used for displaying /proc/locks, so we
 * keep a list on each CPU, with each list protected by its own spinlock via
 * the file_lock_lglock. Note that alterations to the list also require that
163
 * the relevant flc_lock is held.
164
 */
165 166
DEFINE_STATIC_LGLOCK(file_lock_lglock);
static DEFINE_PER_CPU(struct hlist_head, file_lock_list);
167

168
/*
169
 * The blocked_hash is used to find POSIX lock loops for deadlock detection.
170
 * It is protected by blocked_lock_lock.
171 172 173 174 175 176 177
 *
 * We hash locks by lockowner in order to optimize searching for the lock a
 * particular lockowner is waiting on.
 *
 * FIXME: make this value scale via some heuristic? We generally will want more
 * buckets when we have more lockowners holding locks, but that's a little
 * difficult to determine without knowing what the workload will look like.
178
 */
179 180
#define BLOCKED_HASH_BITS	7
static DEFINE_HASHTABLE(blocked_hash, BLOCKED_HASH_BITS);
181

182
/*
183 184
 * This lock protects the blocked_hash. Generally, if you're accessing it, you
 * want to be holding this lock.
185 186 187 188 189 190
 *
 * In addition, it also protects the fl->fl_block list, and the fl->fl_next
 * pointer for file_lock structures that are acting as lock requests (in
 * contrast to those that are acting as records of acquired locks).
 *
 * Note that when we acquire this lock in order to change the above fields,
191
 * we often hold the flc_lock as well. In certain cases, when reading the fields
192
 * protected by this lock, we can skip acquiring it iff we already hold the
193
 * flc_lock.
194 195
 *
 * In particular, adding an entry to the fl_block list requires that you hold
196 197
 * both the flc_lock and the blocked_lock_lock (acquired in that order).
 * Deleting an entry from the list however only requires the file_lock_lock.
198
 */
199
static DEFINE_SPINLOCK(blocked_lock_lock);
L
Linus Torvalds 已提交
200

201
static struct kmem_cache *flctx_cache __read_mostly;
202
static struct kmem_cache *filelock_cache __read_mostly;
L
Linus Torvalds 已提交
203

204
static struct file_lock_context *
205
locks_get_lock_context(struct inode *inode, int type)
206
{
207
	struct file_lock_context *ctx;
208

209 210 211
	/* paired with cmpxchg() below */
	ctx = smp_load_acquire(&inode->i_flctx);
	if (likely(ctx) || type == F_UNLCK)
212 213
		goto out;

214 215
	ctx = kmem_cache_alloc(flctx_cache, GFP_KERNEL);
	if (!ctx)
216 217
		goto out;

218 219 220 221
	spin_lock_init(&ctx->flc_lock);
	INIT_LIST_HEAD(&ctx->flc_flock);
	INIT_LIST_HEAD(&ctx->flc_posix);
	INIT_LIST_HEAD(&ctx->flc_lease);
222 223 224 225 226

	/*
	 * Assign the pointer if it's not already assigned. If it is, then
	 * free the context we just allocated.
	 */
227 228 229 230
	if (cmpxchg(&inode->i_flctx, NULL, ctx)) {
		kmem_cache_free(flctx_cache, ctx);
		ctx = smp_load_acquire(&inode->i_flctx);
	}
231
out:
232
	trace_locks_get_lock_context(inode, type, ctx);
233
	return ctx;
234 235
}

236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262
static void
locks_dump_ctx_list(struct list_head *list, char *list_type)
{
	struct file_lock *fl;

	list_for_each_entry(fl, list, fl_list) {
		pr_warn("%s: fl_owner=%p fl_flags=0x%x fl_type=0x%x fl_pid=%u\n", list_type, fl->fl_owner, fl->fl_flags, fl->fl_type, fl->fl_pid);
	}
}

static void
locks_check_ctx_lists(struct inode *inode)
{
	struct file_lock_context *ctx = inode->i_flctx;

	if (unlikely(!list_empty(&ctx->flc_flock) ||
		     !list_empty(&ctx->flc_posix) ||
		     !list_empty(&ctx->flc_lease))) {
		pr_warn("Leaked locks on dev=0x%x:0x%x ino=0x%lx:\n",
			MAJOR(inode->i_sb->s_dev), MINOR(inode->i_sb->s_dev),
			inode->i_ino);
		locks_dump_ctx_list(&ctx->flc_flock, "FLOCK");
		locks_dump_ctx_list(&ctx->flc_posix, "POSIX");
		locks_dump_ctx_list(&ctx->flc_lease, "LEASE");
	}
}

263
void
264
locks_free_lock_context(struct inode *inode)
265
{
266 267
	struct file_lock_context *ctx = inode->i_flctx;

268 269
	if (unlikely(ctx)) {
		locks_check_ctx_lists(inode);
270 271 272 273
		kmem_cache_free(flctx_cache, ctx);
	}
}

M
Miklos Szeredi 已提交
274
static void locks_init_lock_heads(struct file_lock *fl)
M
Miklos Szeredi 已提交
275
{
276
	INIT_HLIST_NODE(&fl->fl_link);
277
	INIT_LIST_HEAD(&fl->fl_list);
M
Miklos Szeredi 已提交
278 279
	INIT_LIST_HEAD(&fl->fl_block);
	init_waitqueue_head(&fl->fl_wait);
M
Miklos Szeredi 已提交
280 281
}

L
Linus Torvalds 已提交
282
/* Allocate an empty lock structure. */
283
struct file_lock *locks_alloc_lock(void)
L
Linus Torvalds 已提交
284
{
M
Miklos Szeredi 已提交
285
	struct file_lock *fl = kmem_cache_zalloc(filelock_cache, GFP_KERNEL);
M
Miklos Szeredi 已提交
286 287

	if (fl)
M
Miklos Szeredi 已提交
288
		locks_init_lock_heads(fl);
M
Miklos Szeredi 已提交
289 290

	return fl;
L
Linus Torvalds 已提交
291
}
292
EXPORT_SYMBOL_GPL(locks_alloc_lock);
L
Linus Torvalds 已提交
293

294
void locks_release_private(struct file_lock *fl)
295 296 297 298 299 300 301
{
	if (fl->fl_ops) {
		if (fl->fl_ops->fl_release_private)
			fl->fl_ops->fl_release_private(fl);
		fl->fl_ops = NULL;
	}

302
	if (fl->fl_lmops) {
303 304 305 306
		if (fl->fl_lmops->lm_put_owner) {
			fl->fl_lmops->lm_put_owner(fl->fl_owner);
			fl->fl_owner = NULL;
		}
307 308
		fl->fl_lmops = NULL;
	}
309
}
310
EXPORT_SYMBOL_GPL(locks_release_private);
311

L
Linus Torvalds 已提交
312
/* Free a lock which is not in use. */
313
void locks_free_lock(struct file_lock *fl)
L
Linus Torvalds 已提交
314
{
M
Miklos Szeredi 已提交
315
	BUG_ON(waitqueue_active(&fl->fl_wait));
316
	BUG_ON(!list_empty(&fl->fl_list));
M
Miklos Szeredi 已提交
317
	BUG_ON(!list_empty(&fl->fl_block));
318
	BUG_ON(!hlist_unhashed(&fl->fl_link));
L
Linus Torvalds 已提交
319

320
	locks_release_private(fl);
L
Linus Torvalds 已提交
321 322
	kmem_cache_free(filelock_cache, fl);
}
323
EXPORT_SYMBOL(locks_free_lock);
L
Linus Torvalds 已提交
324

325 326 327 328 329 330
static void
locks_dispose_list(struct list_head *dispose)
{
	struct file_lock *fl;

	while (!list_empty(dispose)) {
331 332
		fl = list_first_entry(dispose, struct file_lock, fl_list);
		list_del_init(&fl->fl_list);
333 334 335 336
		locks_free_lock(fl);
	}
}

L
Linus Torvalds 已提交
337 338
void locks_init_lock(struct file_lock *fl)
{
M
Miklos Szeredi 已提交
339 340
	memset(fl, 0, sizeof(struct file_lock));
	locks_init_lock_heads(fl);
L
Linus Torvalds 已提交
341 342 343 344 345 346 347
}

EXPORT_SYMBOL(locks_init_lock);

/*
 * Initialize a new lock from an existing file_lock structure.
 */
348
void locks_copy_conflock(struct file_lock *new, struct file_lock *fl)
L
Linus Torvalds 已提交
349 350 351
{
	new->fl_owner = fl->fl_owner;
	new->fl_pid = fl->fl_pid;
352
	new->fl_file = NULL;
L
Linus Torvalds 已提交
353 354 355 356
	new->fl_flags = fl->fl_flags;
	new->fl_type = fl->fl_type;
	new->fl_start = fl->fl_start;
	new->fl_end = fl->fl_end;
357
	new->fl_lmops = fl->fl_lmops;
358
	new->fl_ops = NULL;
359 360 361

	if (fl->fl_lmops) {
		if (fl->fl_lmops->lm_get_owner)
362
			fl->fl_lmops->lm_get_owner(fl->fl_owner);
363
	}
364
}
365
EXPORT_SYMBOL(locks_copy_conflock);
366 367 368

void locks_copy_lock(struct file_lock *new, struct file_lock *fl)
{
369 370
	/* "new" must be a freshly-initialized lock */
	WARN_ON_ONCE(new->fl_ops);
371

372
	locks_copy_conflock(new, fl);
373

374
	new->fl_file = fl->fl_file;
L
Linus Torvalds 已提交
375
	new->fl_ops = fl->fl_ops;
376

377 378 379 380
	if (fl->fl_ops) {
		if (fl->fl_ops->fl_copy_lock)
			fl->fl_ops->fl_copy_lock(new, fl);
	}
L
Linus Torvalds 已提交
381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399
}

EXPORT_SYMBOL(locks_copy_lock);

static inline int flock_translate_cmd(int cmd) {
	if (cmd & LOCK_MAND)
		return cmd & (LOCK_MAND | LOCK_RW);
	switch (cmd) {
	case LOCK_SH:
		return F_RDLCK;
	case LOCK_EX:
		return F_WRLCK;
	case LOCK_UN:
		return F_UNLCK;
	}
	return -EINVAL;
}

/* Fill in a file_lock structure with an appropriate FLOCK lock. */
400 401
static struct file_lock *
flock_make_lock(struct file *filp, unsigned int cmd)
L
Linus Torvalds 已提交
402 403 404
{
	struct file_lock *fl;
	int type = flock_translate_cmd(cmd);
405

L
Linus Torvalds 已提交
406
	if (type < 0)
407
		return ERR_PTR(type);
L
Linus Torvalds 已提交
408 409 410
	
	fl = locks_alloc_lock();
	if (fl == NULL)
411
		return ERR_PTR(-ENOMEM);
L
Linus Torvalds 已提交
412 413

	fl->fl_file = filp;
414
	fl->fl_owner = filp;
L
Linus Torvalds 已提交
415 416 417 418 419
	fl->fl_pid = current->tgid;
	fl->fl_flags = FL_FLOCK;
	fl->fl_type = type;
	fl->fl_end = OFFSET_MAX;
	
420
	return fl;
L
Linus Torvalds 已提交
421 422
}

423
static int assign_type(struct file_lock *fl, long type)
L
Linus Torvalds 已提交
424 425 426 427 428 429 430 431 432 433 434 435 436
{
	switch (type) {
	case F_RDLCK:
	case F_WRLCK:
	case F_UNLCK:
		fl->fl_type = type;
		break;
	default:
		return -EINVAL;
	}
	return 0;
}

437 438
static int flock64_to_posix_lock(struct file *filp, struct file_lock *fl,
				 struct flock64 *l)
L
Linus Torvalds 已提交
439 440
{
	switch (l->l_whence) {
441
	case SEEK_SET:
442
		fl->fl_start = 0;
L
Linus Torvalds 已提交
443
		break;
444
	case SEEK_CUR:
445
		fl->fl_start = filp->f_pos;
L
Linus Torvalds 已提交
446
		break;
447
	case SEEK_END:
448
		fl->fl_start = i_size_read(file_inode(filp));
L
Linus Torvalds 已提交
449 450 451 452
		break;
	default:
		return -EINVAL;
	}
453 454 455 456 457
	if (l->l_start > OFFSET_MAX - fl->fl_start)
		return -EOVERFLOW;
	fl->fl_start += l->l_start;
	if (fl->fl_start < 0)
		return -EINVAL;
L
Linus Torvalds 已提交
458 459 460

	/* POSIX-1996 leaves the case l->l_len < 0 undefined;
	   POSIX-2001 defines it. */
461
	if (l->l_len > 0) {
462 463 464 465
		if (l->l_len - 1 > OFFSET_MAX - fl->fl_start)
			return -EOVERFLOW;
		fl->fl_end = fl->fl_start + l->l_len - 1;

466
	} else if (l->l_len < 0) {
467
		if (fl->fl_start + l->l_len < 0)
468
			return -EINVAL;
469 470 471 472 473
		fl->fl_end = fl->fl_start - 1;
		fl->fl_start += l->l_len;
	} else
		fl->fl_end = OFFSET_MAX;

L
Linus Torvalds 已提交
474 475 476 477 478 479 480 481 482 483
	fl->fl_owner = current->files;
	fl->fl_pid = current->tgid;
	fl->fl_file = filp;
	fl->fl_flags = FL_POSIX;
	fl->fl_ops = NULL;
	fl->fl_lmops = NULL;

	return assign_type(fl, l->l_type);
}

484 485 486 487 488
/* Verify a "struct flock" and copy it to a "struct file_lock" as a POSIX
 * style lock.
 */
static int flock_to_posix_lock(struct file *filp, struct file_lock *fl,
			       struct flock *l)
L
Linus Torvalds 已提交
489
{
490 491 492 493 494 495 496 497
	struct flock64 ll = {
		.l_type = l->l_type,
		.l_whence = l->l_whence,
		.l_start = l->l_start,
		.l_len = l->l_len,
	};

	return flock64_to_posix_lock(filp, fl, &ll);
L
Linus Torvalds 已提交
498 499 500
}

/* default lease lock manager operations */
J
Jeff Layton 已提交
501 502
static bool
lease_break_callback(struct file_lock *fl)
L
Linus Torvalds 已提交
503 504
{
	kill_fasync(&fl->fl_fasync, SIGIO, POLL_MSG);
J
Jeff Layton 已提交
505
	return false;
L
Linus Torvalds 已提交
506 507
}

508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524
static void
lease_setup(struct file_lock *fl, void **priv)
{
	struct file *filp = fl->fl_file;
	struct fasync_struct *fa = *priv;

	/*
	 * fasync_insert_entry() returns the old entry if any. If there was no
	 * old entry, then it used "priv" and inserted it into the fasync list.
	 * Clear the pointer to indicate that it shouldn't be freed.
	 */
	if (!fasync_insert_entry(fa->fa_fd, filp, &fl->fl_fasync, fa))
		*priv = NULL;

	__f_setown(filp, task_pid(current), PIDTYPE_PID, 0);
}

525
static const struct lock_manager_operations lease_manager_ops = {
J
J. Bruce Fields 已提交
526 527
	.lm_break = lease_break_callback,
	.lm_change = lease_modify,
528
	.lm_setup = lease_setup,
L
Linus Torvalds 已提交
529 530 531 532 533
};

/*
 * Initialize a lease, use the default lock manager operations
 */
534
static int lease_init(struct file *filp, long type, struct file_lock *fl)
L
Linus Torvalds 已提交
535
 {
536 537 538
	if (assign_type(fl, type) != 0)
		return -EINVAL;

539
	fl->fl_owner = filp;
L
Linus Torvalds 已提交
540 541 542 543 544 545 546 547 548 549 550 551
	fl->fl_pid = current->tgid;

	fl->fl_file = filp;
	fl->fl_flags = FL_LEASE;
	fl->fl_start = 0;
	fl->fl_end = OFFSET_MAX;
	fl->fl_ops = NULL;
	fl->fl_lmops = &lease_manager_ops;
	return 0;
}

/* Allocate a file_lock initialised to this type of lease */
552
static struct file_lock *lease_alloc(struct file *filp, long type)
L
Linus Torvalds 已提交
553 554
{
	struct file_lock *fl = locks_alloc_lock();
555
	int error = -ENOMEM;
L
Linus Torvalds 已提交
556 557

	if (fl == NULL)
J
J. Bruce Fields 已提交
558
		return ERR_PTR(error);
L
Linus Torvalds 已提交
559 560

	error = lease_init(filp, type, fl);
561 562
	if (error) {
		locks_free_lock(fl);
J
J. Bruce Fields 已提交
563
		return ERR_PTR(error);
564
	}
J
J. Bruce Fields 已提交
565
	return fl;
L
Linus Torvalds 已提交
566 567 568 569 570 571 572 573 574 575 576 577 578
}

/* Check if two locks overlap each other.
 */
static inline int locks_overlap(struct file_lock *fl1, struct file_lock *fl2)
{
	return ((fl1->fl_end >= fl2->fl_start) &&
		(fl2->fl_end >= fl1->fl_start));
}

/*
 * Check whether two locks have the same owner.
 */
579
static int posix_same_owner(struct file_lock *fl1, struct file_lock *fl2)
L
Linus Torvalds 已提交
580
{
J
J. Bruce Fields 已提交
581
	if (fl1->fl_lmops && fl1->fl_lmops->lm_compare_owner)
L
Linus Torvalds 已提交
582
		return fl2->fl_lmops == fl1->fl_lmops &&
J
J. Bruce Fields 已提交
583
			fl1->fl_lmops->lm_compare_owner(fl1, fl2);
L
Linus Torvalds 已提交
584 585 586
	return fl1->fl_owner == fl2->fl_owner;
}

587
/* Must be called with the flc_lock held! */
588
static void locks_insert_global_locks(struct file_lock *fl)
589
{
590 591 592 593
	lg_local_lock(&file_lock_lglock);
	fl->fl_link_cpu = smp_processor_id();
	hlist_add_head(&fl->fl_link, this_cpu_ptr(&file_lock_list));
	lg_local_unlock(&file_lock_lglock);
594 595
}

596
/* Must be called with the flc_lock held! */
597
static void locks_delete_global_locks(struct file_lock *fl)
598
{
599 600
	/*
	 * Avoid taking lock if already unhashed. This is safe since this check
601
	 * is done while holding the flc_lock, and new insertions into the list
602 603 604 605 606
	 * also require that it be held.
	 */
	if (hlist_unhashed(&fl->fl_link))
		return;
	lg_local_lock_cpu(&file_lock_lglock, fl->fl_link_cpu);
607
	hlist_del_init(&fl->fl_link);
608
	lg_local_unlock_cpu(&file_lock_lglock, fl->fl_link_cpu);
609 610
}

611 612 613 614 615 616 617 618
static unsigned long
posix_owner_key(struct file_lock *fl)
{
	if (fl->fl_lmops && fl->fl_lmops->lm_owner_key)
		return fl->fl_lmops->lm_owner_key(fl);
	return (unsigned long)fl->fl_owner;
}

619
static void locks_insert_global_blocked(struct file_lock *waiter)
620
{
621 622
	lockdep_assert_held(&blocked_lock_lock);

623
	hash_add(blocked_hash, &waiter->fl_link, posix_owner_key(waiter));
624 625
}

626
static void locks_delete_global_blocked(struct file_lock *waiter)
627
{
628 629
	lockdep_assert_held(&blocked_lock_lock);

630
	hash_del(&waiter->fl_link);
631 632
}

L
Linus Torvalds 已提交
633 634
/* Remove waiter from blocker's block list.
 * When blocker ends up pointing to itself then the list is empty.
635
 *
636
 * Must be called with blocked_lock_lock held.
L
Linus Torvalds 已提交
637
 */
638
static void __locks_delete_block(struct file_lock *waiter)
L
Linus Torvalds 已提交
639
{
640
	locks_delete_global_blocked(waiter);
L
Linus Torvalds 已提交
641 642 643 644
	list_del_init(&waiter->fl_block);
	waiter->fl_next = NULL;
}

645
static void locks_delete_block(struct file_lock *waiter)
L
Linus Torvalds 已提交
646
{
647
	spin_lock(&blocked_lock_lock);
L
Linus Torvalds 已提交
648
	__locks_delete_block(waiter);
649
	spin_unlock(&blocked_lock_lock);
L
Linus Torvalds 已提交
650 651 652 653 654 655
}

/* Insert waiter into blocker's block list.
 * We use a circular list so that processes can be easily woken up in
 * the order they blocked. The documentation doesn't require this but
 * it seems like the reasonable thing to do.
656
 *
657 658 659 660
 * Must be called with both the flc_lock and blocked_lock_lock held. The
 * fl_block list itself is protected by the blocked_lock_lock, but by ensuring
 * that the flc_lock is also held on insertions we can avoid taking the
 * blocked_lock_lock in some cases when we see that the fl_block list is empty.
L
Linus Torvalds 已提交
661
 */
662 663
static void __locks_insert_block(struct file_lock *blocker,
					struct file_lock *waiter)
L
Linus Torvalds 已提交
664
{
665
	BUG_ON(!list_empty(&waiter->fl_block));
L
Linus Torvalds 已提交
666
	waiter->fl_next = blocker;
667
	list_add_tail(&waiter->fl_block, &blocker->fl_block);
668
	if (IS_POSIX(blocker) && !IS_OFDLCK(blocker))
669 670 671
		locks_insert_global_blocked(waiter);
}

672
/* Must be called with flc_lock held. */
673 674 675
static void locks_insert_block(struct file_lock *blocker,
					struct file_lock *waiter)
{
676
	spin_lock(&blocked_lock_lock);
677
	__locks_insert_block(blocker, waiter);
678
	spin_unlock(&blocked_lock_lock);
L
Linus Torvalds 已提交
679 680
}

681 682 683
/*
 * Wake up processes blocked waiting for blocker.
 *
684
 * Must be called with the inode->flc_lock held!
L
Linus Torvalds 已提交
685 686 687
 */
static void locks_wake_up_blocks(struct file_lock *blocker)
{
688 689
	/*
	 * Avoid taking global lock if list is empty. This is safe since new
690 691 692
	 * blocked requests are only added to the list under the flc_lock, and
	 * the flc_lock is always held here. Note that removal from the fl_block
	 * list does not require the flc_lock, so we must recheck list_empty()
693
	 * after acquiring the blocked_lock_lock.
694 695 696 697
	 */
	if (list_empty(&blocker->fl_block))
		return;

698
	spin_lock(&blocked_lock_lock);
L
Linus Torvalds 已提交
699
	while (!list_empty(&blocker->fl_block)) {
700 701 702
		struct file_lock *waiter;

		waiter = list_first_entry(&blocker->fl_block,
L
Linus Torvalds 已提交
703 704
				struct file_lock, fl_block);
		__locks_delete_block(waiter);
J
J. Bruce Fields 已提交
705 706
		if (waiter->fl_lmops && waiter->fl_lmops->lm_notify)
			waiter->fl_lmops->lm_notify(waiter);
L
Linus Torvalds 已提交
707 708 709
		else
			wake_up(&waiter->fl_wait);
	}
710
	spin_unlock(&blocked_lock_lock);
L
Linus Torvalds 已提交
711 712
}

713
static void
714
locks_insert_lock_ctx(struct file_lock *fl, struct list_head *before)
715 716 717 718 719 720
{
	fl->fl_nspid = get_pid(task_tgid(current));
	list_add_tail(&fl->fl_list, before);
	locks_insert_global_locks(fl);
}

721
static void
722
locks_unlink_lock_ctx(struct file_lock *fl)
L
Linus Torvalds 已提交
723
{
724
	locks_delete_global_locks(fl);
725
	list_del_init(&fl->fl_list);
726 727 728 729
	if (fl->fl_nspid) {
		put_pid(fl->fl_nspid);
		fl->fl_nspid = NULL;
	}
L
Linus Torvalds 已提交
730
	locks_wake_up_blocks(fl);
731 732
}

733
static void
734
locks_delete_lock_ctx(struct file_lock *fl, struct list_head *dispose)
735
{
736
	locks_unlink_lock_ctx(fl);
737
	if (dispose)
738
		list_add(&fl->fl_list, dispose);
739 740
	else
		locks_free_lock(fl);
L
Linus Torvalds 已提交
741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762
}

/* Determine if lock sys_fl blocks lock caller_fl. Common functionality
 * checks for shared/exclusive status of overlapping locks.
 */
static int locks_conflict(struct file_lock *caller_fl, struct file_lock *sys_fl)
{
	if (sys_fl->fl_type == F_WRLCK)
		return 1;
	if (caller_fl->fl_type == F_WRLCK)
		return 1;
	return 0;
}

/* Determine if lock sys_fl blocks lock caller_fl. POSIX specific
 * checking before calling the locks_conflict().
 */
static int posix_locks_conflict(struct file_lock *caller_fl, struct file_lock *sys_fl)
{
	/* POSIX locks owned by the same process do not conflict with
	 * each other.
	 */
763
	if (posix_same_owner(caller_fl, sys_fl))
L
Linus Torvalds 已提交
764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780
		return (0);

	/* Check whether they overlap */
	if (!locks_overlap(caller_fl, sys_fl))
		return 0;

	return (locks_conflict(caller_fl, sys_fl));
}

/* Determine if lock sys_fl blocks lock caller_fl. FLOCK specific
 * checking before calling the locks_conflict().
 */
static int flock_locks_conflict(struct file_lock *caller_fl, struct file_lock *sys_fl)
{
	/* FLOCK locks referring to the same filp do not conflict with
	 * each other.
	 */
781
	if (caller_fl->fl_file == sys_fl->fl_file)
L
Linus Torvalds 已提交
782 783 784 785 786 787 788
		return (0);
	if ((caller_fl->fl_type & LOCK_MAND) || (sys_fl->fl_type & LOCK_MAND))
		return 0;

	return (locks_conflict(caller_fl, sys_fl));
}

789
void
790
posix_test_lock(struct file *filp, struct file_lock *fl)
L
Linus Torvalds 已提交
791 792
{
	struct file_lock *cfl;
793
	struct file_lock_context *ctx;
794
	struct inode *inode = file_inode(filp);
L
Linus Torvalds 已提交
795

796
	ctx = smp_load_acquire(&inode->i_flctx);
797 798 799 800 801
	if (!ctx || list_empty_careful(&ctx->flc_posix)) {
		fl->fl_type = F_UNLCK;
		return;
	}

802
	spin_lock(&ctx->flc_lock);
803 804 805 806 807 808 809
	list_for_each_entry(cfl, &ctx->flc_posix, fl_list) {
		if (posix_locks_conflict(fl, cfl)) {
			locks_copy_conflock(fl, cfl);
			if (cfl->fl_nspid)
				fl->fl_pid = pid_vnr(cfl->fl_nspid);
			goto out;
		}
L
Linus Torvalds 已提交
810
	}
811 812
	fl->fl_type = F_UNLCK;
out:
813
	spin_unlock(&ctx->flc_lock);
814
	return;
L
Linus Torvalds 已提交
815 816 817
}
EXPORT_SYMBOL(posix_test_lock);

818 819 820 821 822
/*
 * Deadlock detection:
 *
 * We attempt to detect deadlocks that are due purely to posix file
 * locks.
L
Linus Torvalds 已提交
823
 *
824 825 826 827 828 829 830
 * We assume that a task can be waiting for at most one lock at a time.
 * So for any acquired lock, the process holding that lock may be
 * waiting on at most one other lock.  That lock in turns may be held by
 * someone waiting for at most one other lock.  Given a requested lock
 * caller_fl which is about to wait for a conflicting lock block_fl, we
 * follow this chain of waiters to ensure we are not about to create a
 * cycle.
L
Linus Torvalds 已提交
831
 *
832 833 834
 * Since we do this before we ever put a process to sleep on a lock, we
 * are ensured that there is never a cycle; that is what guarantees that
 * the while() loop in posix_locks_deadlock() eventually completes.
835
 *
836 837 838 839
 * Note: the above assumption may not be true when handling lock
 * requests from a broken NFS client. It may also fail in the presence
 * of tasks (such as posix threads) sharing the same open file table.
 * To handle those cases, we just bail out after a few iterations.
840
 *
841
 * For FL_OFDLCK locks, the owner is the filp, not the files_struct.
842 843 844 845
 * Because the owner is not even nominally tied to a thread of
 * execution, the deadlock detection below can't reasonably work well. Just
 * skip it for those.
 *
846
 * In principle, we could do a more limited deadlock detection on FL_OFDLCK
847 848
 * locks that just checks for the case where two tasks are attempting to
 * upgrade from read to write locks on the same inode.
L
Linus Torvalds 已提交
849
 */
850 851 852

#define MAX_DEADLK_ITERATIONS 10

853 854 855 856 857
/* Find a lock that the owner of the given block_fl is blocking on. */
static struct file_lock *what_owner_is_waiting_for(struct file_lock *block_fl)
{
	struct file_lock *fl;

858
	hash_for_each_possible(blocked_hash, fl, fl_link, posix_owner_key(block_fl)) {
859 860 861 862 863 864
		if (posix_same_owner(fl, block_fl))
			return fl->fl_next;
	}
	return NULL;
}

865
/* Must be called with the blocked_lock_lock held! */
866
static int posix_locks_deadlock(struct file_lock *caller_fl,
L
Linus Torvalds 已提交
867 868
				struct file_lock *block_fl)
{
869
	int i = 0;
L
Linus Torvalds 已提交
870

871 872
	lockdep_assert_held(&blocked_lock_lock);

873 874
	/*
	 * This deadlock detector can't reasonably detect deadlocks with
875
	 * FL_OFDLCK locks, since they aren't owned by a process, per-se.
876
	 */
877
	if (IS_OFDLCK(caller_fl))
878 879
		return 0;

880 881 882 883 884
	while ((block_fl = what_owner_is_waiting_for(block_fl))) {
		if (i++ > MAX_DEADLK_ITERATIONS)
			return 0;
		if (posix_same_owner(caller_fl, block_fl))
			return 1;
L
Linus Torvalds 已提交
885 886 887 888 889
	}
	return 0;
}

/* Try to create a FLOCK lock on filp. We always insert new FLOCK locks
890
 * after any leases, but before any posix locks.
891 892 893 894
 *
 * Note that if called with an FL_EXISTS argument, the caller may determine
 * whether or not a lock was successfully freed by testing the return
 * value for -ENOENT.
L
Linus Torvalds 已提交
895
 */
896
static int flock_lock_inode(struct inode *inode, struct file_lock *request)
L
Linus Torvalds 已提交
897
{
898
	struct file_lock *new_fl = NULL;
899 900
	struct file_lock *fl;
	struct file_lock_context *ctx;
L
Linus Torvalds 已提交
901
	int error = 0;
902
	bool found = false;
903
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
904

905 906 907 908 909 910
	ctx = locks_get_lock_context(inode, request->fl_type);
	if (!ctx) {
		if (request->fl_type != F_UNLCK)
			return -ENOMEM;
		return (request->fl_flags & FL_EXISTS) ? -ENOENT : 0;
	}
911

912
	if (!(request->fl_flags & FL_ACCESS) && (request->fl_type != F_UNLCK)) {
913
		new_fl = locks_alloc_lock();
914 915
		if (!new_fl)
			return -ENOMEM;
916 917
	}

918
	spin_lock(&ctx->flc_lock);
919 920 921
	if (request->fl_flags & FL_ACCESS)
		goto find_conflict;

922
	list_for_each_entry(fl, &ctx->flc_flock, fl_list) {
923
		if (request->fl_file != fl->fl_file)
L
Linus Torvalds 已提交
924
			continue;
925
		if (request->fl_type == fl->fl_type)
L
Linus Torvalds 已提交
926
			goto out;
927
		found = true;
928
		locks_delete_lock_ctx(fl, &dispose);
L
Linus Torvalds 已提交
929 930 931
		break;
	}

932 933 934
	if (request->fl_type == F_UNLCK) {
		if ((request->fl_flags & FL_EXISTS) && !found)
			error = -ENOENT;
935
		goto out;
936
	}
L
Linus Torvalds 已提交
937

938
find_conflict:
939
	list_for_each_entry(fl, &ctx->flc_flock, fl_list) {
940
		if (!flock_locks_conflict(request, fl))
L
Linus Torvalds 已提交
941 942
			continue;
		error = -EAGAIN;
943 944 945 946
		if (!(request->fl_flags & FL_SLEEP))
			goto out;
		error = FILE_LOCK_DEFERRED;
		locks_insert_block(fl, request);
L
Linus Torvalds 已提交
947 948
		goto out;
	}
949 950
	if (request->fl_flags & FL_ACCESS)
		goto out;
951
	locks_copy_lock(new_fl, request);
952
	locks_insert_lock_ctx(new_fl, &ctx->flc_flock);
953
	new_fl = NULL;
954
	error = 0;
L
Linus Torvalds 已提交
955 956

out:
957
	spin_unlock(&ctx->flc_lock);
958 959
	if (new_fl)
		locks_free_lock(new_fl);
960
	locks_dispose_list(&dispose);
L
Linus Torvalds 已提交
961 962 963
	return error;
}

964 965
static int posix_lock_inode(struct inode *inode, struct file_lock *request,
			    struct file_lock *conflock)
L
Linus Torvalds 已提交
966
{
967
	struct file_lock *fl, *tmp;
968 969
	struct file_lock *new_fl = NULL;
	struct file_lock *new_fl2 = NULL;
L
Linus Torvalds 已提交
970 971
	struct file_lock *left = NULL;
	struct file_lock *right = NULL;
972
	struct file_lock_context *ctx;
973 974
	int error;
	bool added = false;
975
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
976

977
	ctx = locks_get_lock_context(inode, request->fl_type);
978
	if (!ctx)
979
		return (request->fl_type == F_UNLCK) ? 0 : -ENOMEM;
980

L
Linus Torvalds 已提交
981 982 983
	/*
	 * We may need two file_lock structures for this operation,
	 * so we get them in advance to avoid races.
984 985
	 *
	 * In some cases we can be sure, that no new locks will be needed
L
Linus Torvalds 已提交
986
	 */
987 988 989 990 991 992
	if (!(request->fl_flags & FL_ACCESS) &&
	    (request->fl_type != F_UNLCK ||
	     request->fl_start != 0 || request->fl_end != OFFSET_MAX)) {
		new_fl = locks_alloc_lock();
		new_fl2 = locks_alloc_lock();
	}
L
Linus Torvalds 已提交
993

994
	spin_lock(&ctx->flc_lock);
995 996 997
	/*
	 * New lock request. Walk all POSIX locks and look for conflicts. If
	 * there are any, either return error or put the request on the
998
	 * blocker's list of waiters and the global blocked_hash.
999
	 */
L
Linus Torvalds 已提交
1000
	if (request->fl_type != F_UNLCK) {
1001
		list_for_each_entry(fl, &ctx->flc_posix, fl_list) {
L
Linus Torvalds 已提交
1002 1003
			if (!posix_locks_conflict(request, fl))
				continue;
1004
			if (conflock)
1005
				locks_copy_conflock(conflock, fl);
L
Linus Torvalds 已提交
1006 1007 1008
			error = -EAGAIN;
			if (!(request->fl_flags & FL_SLEEP))
				goto out;
1009 1010 1011 1012
			/*
			 * Deadlock detection and insertion into the blocked
			 * locks list must be done while holding the same lock!
			 */
L
Linus Torvalds 已提交
1013
			error = -EDEADLK;
1014
			spin_lock(&blocked_lock_lock);
1015 1016 1017 1018
			if (likely(!posix_locks_deadlock(request, fl))) {
				error = FILE_LOCK_DEFERRED;
				__locks_insert_block(fl, request);
			}
1019
			spin_unlock(&blocked_lock_lock);
L
Linus Torvalds 已提交
1020 1021 1022 1023 1024 1025 1026 1027 1028
			goto out;
  		}
  	}

	/* If we're just looking for a conflict, we're done. */
	error = 0;
	if (request->fl_flags & FL_ACCESS)
		goto out;

1029 1030 1031 1032
	/* Find the first old lock with the same owner as the new lock */
	list_for_each_entry(fl, &ctx->flc_posix, fl_list) {
		if (posix_same_owner(request, fl))
			break;
L
Linus Torvalds 已提交
1033 1034
	}

1035
	/* Process locks with this owner. */
1036 1037 1038 1039 1040
	list_for_each_entry_safe_from(fl, tmp, &ctx->flc_posix, fl_list) {
		if (!posix_same_owner(request, fl))
			break;

		/* Detect adjacent or overlapping regions (if same lock type) */
L
Linus Torvalds 已提交
1041
		if (request->fl_type == fl->fl_type) {
O
Olaf Kirch 已提交
1042 1043 1044 1045
			/* In all comparisons of start vs end, use
			 * "start - 1" rather than "end + 1". If end
			 * is OFFSET_MAX, end + 1 will become negative.
			 */
L
Linus Torvalds 已提交
1046
			if (fl->fl_end < request->fl_start - 1)
1047
				continue;
L
Linus Torvalds 已提交
1048 1049 1050
			/* If the next lock in the list has entirely bigger
			 * addresses than the new one, insert the lock here.
			 */
O
Olaf Kirch 已提交
1051
			if (fl->fl_start - 1 > request->fl_end)
L
Linus Torvalds 已提交
1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067
				break;

			/* If we come here, the new and old lock are of the
			 * same type and adjacent or overlapping. Make one
			 * lock yielding from the lower start address of both
			 * locks to the higher end address.
			 */
			if (fl->fl_start > request->fl_start)
				fl->fl_start = request->fl_start;
			else
				request->fl_start = fl->fl_start;
			if (fl->fl_end < request->fl_end)
				fl->fl_end = request->fl_end;
			else
				request->fl_end = fl->fl_end;
			if (added) {
1068
				locks_delete_lock_ctx(fl, &dispose);
L
Linus Torvalds 已提交
1069 1070 1071
				continue;
			}
			request = fl;
1072
			added = true;
1073
		} else {
L
Linus Torvalds 已提交
1074 1075 1076 1077
			/* Processing for different lock types is a bit
			 * more complex.
			 */
			if (fl->fl_end < request->fl_start)
1078
				continue;
L
Linus Torvalds 已提交
1079 1080 1081
			if (fl->fl_start > request->fl_end)
				break;
			if (request->fl_type == F_UNLCK)
1082
				added = true;
L
Linus Torvalds 已提交
1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096
			if (fl->fl_start < request->fl_start)
				left = fl;
			/* If the next lock in the list has a higher end
			 * address than the new one, insert the new one here.
			 */
			if (fl->fl_end > request->fl_end) {
				right = fl;
				break;
			}
			if (fl->fl_start >= request->fl_start) {
				/* The new lock completely replaces an old
				 * one (This may happen several times).
				 */
				if (added) {
1097
					locks_delete_lock_ctx(fl, &dispose);
L
Linus Torvalds 已提交
1098 1099
					continue;
				}
1100 1101 1102 1103 1104 1105
				/*
				 * Replace the old lock with new_fl, and
				 * remove the old one. It's safe to do the
				 * insert here since we know that we won't be
				 * using new_fl later, and that the lock is
				 * just replacing an existing lock.
L
Linus Torvalds 已提交
1106
				 */
1107 1108 1109 1110 1111 1112
				error = -ENOLCK;
				if (!new_fl)
					goto out;
				locks_copy_lock(new_fl, request);
				request = new_fl;
				new_fl = NULL;
1113 1114
				locks_insert_lock_ctx(request, &fl->fl_list);
				locks_delete_lock_ctx(fl, &dispose);
1115
				added = true;
L
Linus Torvalds 已提交
1116 1117 1118 1119
			}
		}
	}

1120
	/*
1121 1122 1123
	 * The above code only modifies existing locks in case of merging or
	 * replacing. If new lock(s) need to be inserted all modifications are
	 * done below this, so it's safe yet to bail out.
1124 1125 1126 1127 1128
	 */
	error = -ENOLCK; /* "no luck" */
	if (right && left == right && !new_fl2)
		goto out;

L
Linus Torvalds 已提交
1129 1130
	error = 0;
	if (!added) {
1131 1132 1133
		if (request->fl_type == F_UNLCK) {
			if (request->fl_flags & FL_EXISTS)
				error = -ENOENT;
L
Linus Torvalds 已提交
1134
			goto out;
1135
		}
1136 1137 1138 1139 1140

		if (!new_fl) {
			error = -ENOLCK;
			goto out;
		}
L
Linus Torvalds 已提交
1141
		locks_copy_lock(new_fl, request);
1142
		locks_insert_lock_ctx(new_fl, &fl->fl_list);
1143
		fl = new_fl;
L
Linus Torvalds 已提交
1144 1145 1146 1147 1148 1149 1150 1151 1152 1153
		new_fl = NULL;
	}
	if (right) {
		if (left == right) {
			/* The new lock breaks the old one in two pieces,
			 * so we have to use the second new lock.
			 */
			left = new_fl2;
			new_fl2 = NULL;
			locks_copy_lock(left, right);
1154
			locks_insert_lock_ctx(left, &fl->fl_list);
L
Linus Torvalds 已提交
1155 1156 1157 1158 1159 1160 1161 1162 1163
		}
		right->fl_start = request->fl_end + 1;
		locks_wake_up_blocks(right);
	}
	if (left) {
		left->fl_end = request->fl_start - 1;
		locks_wake_up_blocks(left);
	}
 out:
1164
	spin_unlock(&ctx->flc_lock);
L
Linus Torvalds 已提交
1165 1166 1167 1168 1169 1170 1171
	/*
	 * Free any unused locks.
	 */
	if (new_fl)
		locks_free_lock(new_fl);
	if (new_fl2)
		locks_free_lock(new_fl2);
1172
	locks_dispose_list(&dispose);
1173 1174
	trace_posix_lock_inode(inode, request, error);

L
Linus Torvalds 已提交
1175 1176 1177 1178 1179 1180 1181
	return error;
}

/**
 * posix_lock_file - Apply a POSIX-style lock to a file
 * @filp: The file to apply the lock to
 * @fl: The lock to be applied
1182
 * @conflock: Place to return a copy of the conflicting lock, if found.
L
Linus Torvalds 已提交
1183 1184 1185 1186
 *
 * Add a POSIX style lock to a file.
 * We merge adjacent & overlapping locks whenever possible.
 * POSIX locks are sorted by owner task, then by starting address
1187 1188 1189 1190
 *
 * Note that if called with an FL_EXISTS argument, the caller may determine
 * whether or not a lock was successfully freed by testing the return
 * value for -ENOENT.
L
Linus Torvalds 已提交
1191
 */
1192
int posix_lock_file(struct file *filp, struct file_lock *fl,
1193 1194
			struct file_lock *conflock)
{
1195
	return posix_lock_inode(file_inode(filp), fl, conflock);
L
Linus Torvalds 已提交
1196
}
1197
EXPORT_SYMBOL(posix_lock_file);
L
Linus Torvalds 已提交
1198 1199

/**
1200 1201
 * posix_lock_inode_wait - Apply a POSIX-style lock to a file
 * @inode: inode of file to which lock request should be applied
L
Linus Torvalds 已提交
1202 1203
 * @fl: The lock to be applied
 *
1204
 * Apply a POSIX style lock request to an inode.
L
Linus Torvalds 已提交
1205
 */
1206
static int posix_lock_inode_wait(struct inode *inode, struct file_lock *fl)
L
Linus Torvalds 已提交
1207 1208 1209 1210
{
	int error;
	might_sleep ();
	for (;;) {
1211
		error = posix_lock_inode(inode, fl, NULL);
1212
		if (error != FILE_LOCK_DEFERRED)
L
Linus Torvalds 已提交
1213 1214 1215 1216 1217 1218 1219 1220 1221 1222
			break;
		error = wait_event_interruptible(fl->fl_wait, !fl->fl_next);
		if (!error)
			continue;

		locks_delete_block(fl);
		break;
	}
	return error;
}
1223

1224
#ifdef CONFIG_MANDATORY_FILE_LOCKING
L
Linus Torvalds 已提交
1225 1226
/**
 * locks_mandatory_locked - Check for an active lock
1227
 * @file: the file to check
L
Linus Torvalds 已提交
1228 1229 1230 1231
 *
 * Searches the inode's list of locks to find any POSIX locks which conflict.
 * This function is called from locks_verify_locked() only.
 */
1232
int locks_mandatory_locked(struct file *file)
L
Linus Torvalds 已提交
1233
{
1234
	int ret;
1235
	struct inode *inode = file_inode(file);
1236
	struct file_lock_context *ctx;
L
Linus Torvalds 已提交
1237 1238
	struct file_lock *fl;

1239
	ctx = smp_load_acquire(&inode->i_flctx);
1240 1241 1242
	if (!ctx || list_empty_careful(&ctx->flc_posix))
		return 0;

L
Linus Torvalds 已提交
1243 1244 1245
	/*
	 * Search the lock list for this inode for any POSIX locks.
	 */
1246
	spin_lock(&ctx->flc_lock);
1247 1248
	ret = 0;
	list_for_each_entry(fl, &ctx->flc_posix, fl_list) {
1249
		if (fl->fl_owner != current->files &&
1250 1251
		    fl->fl_owner != file) {
			ret = -EAGAIN;
L
Linus Torvalds 已提交
1252
			break;
1253
		}
L
Linus Torvalds 已提交
1254
	}
1255
	spin_unlock(&ctx->flc_lock);
1256
	return ret;
L
Linus Torvalds 已提交
1257 1258 1259 1260
}

/**
 * locks_mandatory_area - Check for a conflicting lock
1261
 * @inode:	the file to check
L
Linus Torvalds 已提交
1262
 * @filp:       how the file was opened (if it was)
1263 1264 1265
 * @start:	first byte in the file to check
 * @end:	lastbyte in the file to check
 * @type:	%F_WRLCK for a write lock, else %F_RDLCK
L
Linus Torvalds 已提交
1266 1267 1268
 *
 * Searches the inode's list of locks to find any POSIX locks which conflict.
 */
1269 1270
int locks_mandatory_area(struct inode *inode, struct file *filp, loff_t start,
			 loff_t end, unsigned char type)
L
Linus Torvalds 已提交
1271 1272 1273
{
	struct file_lock fl;
	int error;
1274
	bool sleep = false;
L
Linus Torvalds 已提交
1275 1276 1277 1278 1279 1280

	locks_init_lock(&fl);
	fl.fl_pid = current->tgid;
	fl.fl_file = filp;
	fl.fl_flags = FL_POSIX | FL_ACCESS;
	if (filp && !(filp->f_flags & O_NONBLOCK))
1281
		sleep = true;
1282 1283 1284
	fl.fl_type = type;
	fl.fl_start = start;
	fl.fl_end = end;
L
Linus Torvalds 已提交
1285 1286

	for (;;) {
1287
		if (filp) {
1288
			fl.fl_owner = filp;
1289
			fl.fl_flags &= ~FL_SLEEP;
1290
			error = posix_lock_inode(inode, &fl, NULL);
1291 1292 1293 1294 1295 1296 1297
			if (!error)
				break;
		}

		if (sleep)
			fl.fl_flags |= FL_SLEEP;
		fl.fl_owner = current->files;
1298
		error = posix_lock_inode(inode, &fl, NULL);
1299
		if (error != FILE_LOCK_DEFERRED)
L
Linus Torvalds 已提交
1300 1301 1302 1303 1304 1305 1306
			break;
		error = wait_event_interruptible(fl.fl_wait, !fl.fl_next);
		if (!error) {
			/*
			 * If we've been sleeping someone might have
			 * changed the permissions behind our back.
			 */
1307
			if (__mandatory_lock(inode))
L
Linus Torvalds 已提交
1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318
				continue;
		}

		locks_delete_block(&fl);
		break;
	}

	return error;
}

EXPORT_SYMBOL(locks_mandatory_area);
1319
#endif /* CONFIG_MANDATORY_FILE_LOCKING */
L
Linus Torvalds 已提交
1320

1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331
static void lease_clear_pending(struct file_lock *fl, int arg)
{
	switch (arg) {
	case F_UNLCK:
		fl->fl_flags &= ~FL_UNLOCK_PENDING;
		/* fall through: */
	case F_RDLCK:
		fl->fl_flags &= ~FL_DOWNGRADE_PENDING;
	}
}

L
Linus Torvalds 已提交
1332
/* We already had a lease on this file; just change its type */
1333
int lease_modify(struct file_lock *fl, int arg, struct list_head *dispose)
L
Linus Torvalds 已提交
1334 1335 1336 1337 1338
{
	int error = assign_type(fl, arg);

	if (error)
		return error;
1339
	lease_clear_pending(fl, arg);
L
Linus Torvalds 已提交
1340
	locks_wake_up_blocks(fl);
1341 1342 1343 1344 1345
	if (arg == F_UNLCK) {
		struct file *filp = fl->fl_file;

		f_delown(filp);
		filp->f_owner.signum = 0;
1346 1347 1348 1349 1350
		fasync_helper(0, fl->fl_file, 0, &fl->fl_fasync);
		if (fl->fl_fasync != NULL) {
			printk(KERN_ERR "locks_delete_lock: fasync == %p\n", fl->fl_fasync);
			fl->fl_fasync = NULL;
		}
1351
		locks_delete_lock_ctx(fl, dispose);
1352
	}
L
Linus Torvalds 已提交
1353 1354 1355 1356
	return 0;
}
EXPORT_SYMBOL(lease_modify);

1357 1358 1359 1360 1361 1362 1363 1364
static bool past_time(unsigned long then)
{
	if (!then)
		/* 0 is a special value meaning "this never expires": */
		return false;
	return time_after(jiffies, then);
}

1365
static void time_out_leases(struct inode *inode, struct list_head *dispose)
L
Linus Torvalds 已提交
1366
{
1367 1368
	struct file_lock_context *ctx = inode->i_flctx;
	struct file_lock *fl, *tmp;
L
Linus Torvalds 已提交
1369

1370
	lockdep_assert_held(&ctx->flc_lock);
1371

1372
	list_for_each_entry_safe(fl, tmp, &ctx->flc_lease, fl_list) {
1373
		trace_time_out_leases(inode, fl);
1374
		if (past_time(fl->fl_downgrade_time))
1375
			lease_modify(fl, F_RDLCK, dispose);
1376
		if (past_time(fl->fl_break_time))
1377
			lease_modify(fl, F_UNLCK, dispose);
L
Linus Torvalds 已提交
1378 1379 1380
	}
}

J
J. Bruce Fields 已提交
1381 1382
static bool leases_conflict(struct file_lock *lease, struct file_lock *breaker)
{
C
Christoph Hellwig 已提交
1383 1384
	if ((breaker->fl_flags & FL_LAYOUT) != (lease->fl_flags & FL_LAYOUT))
		return false;
J
J. Bruce Fields 已提交
1385 1386 1387 1388 1389
	if ((breaker->fl_flags & FL_DELEG) && (lease->fl_flags & FL_LEASE))
		return false;
	return locks_conflict(breaker, lease);
}

1390 1391 1392
static bool
any_leases_conflict(struct inode *inode, struct file_lock *breaker)
{
1393
	struct file_lock_context *ctx = inode->i_flctx;
1394 1395
	struct file_lock *fl;

1396
	lockdep_assert_held(&ctx->flc_lock);
1397

1398
	list_for_each_entry(fl, &ctx->flc_lease, fl_list) {
1399 1400 1401 1402 1403 1404
		if (leases_conflict(fl, breaker))
			return true;
	}
	return false;
}

L
Linus Torvalds 已提交
1405 1406 1407
/**
 *	__break_lease	-	revoke all outstanding leases on file
 *	@inode: the inode of the file to return
J
J. Bruce Fields 已提交
1408 1409 1410 1411
 *	@mode: O_RDONLY: break only write leases; O_WRONLY or O_RDWR:
 *	    break all leases
 *	@type: FL_LEASE: break leases and delegations; FL_DELEG: break
 *	    only delegations
L
Linus Torvalds 已提交
1412
 *
1413 1414 1415
 *	break_lease (inlined for speed) has checked there already is at least
 *	some kind of lock (maybe a lease) on this file.  Leases are broken on
 *	a call to open() or truncate().  This function can sleep unless you
L
Linus Torvalds 已提交
1416 1417
 *	specified %O_NONBLOCK to your open().
 */
J
J. Bruce Fields 已提交
1418
int __break_lease(struct inode *inode, unsigned int mode, unsigned int type)
L
Linus Torvalds 已提交
1419
{
1420
	int error = 0;
1421
	struct file_lock_context *ctx;
1422
	struct file_lock *new_fl, *fl, *tmp;
L
Linus Torvalds 已提交
1423
	unsigned long break_time;
1424
	int want_write = (mode & O_ACCMODE) != O_RDONLY;
1425
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
1426

1427
	new_fl = lease_alloc(NULL, want_write ? F_WRLCK : F_RDLCK);
1428 1429
	if (IS_ERR(new_fl))
		return PTR_ERR(new_fl);
J
J. Bruce Fields 已提交
1430
	new_fl->fl_flags = type;
L
Linus Torvalds 已提交
1431

1432
	/* typically we will check that ctx is non-NULL before calling */
1433
	ctx = smp_load_acquire(&inode->i_flctx);
1434 1435 1436 1437 1438
	if (!ctx) {
		WARN_ON_ONCE(1);
		return error;
	}

1439
	spin_lock(&ctx->flc_lock);
L
Linus Torvalds 已提交
1440

1441
	time_out_leases(inode, &dispose);
L
Linus Torvalds 已提交
1442

1443
	if (!any_leases_conflict(inode, new_fl))
1444 1445
		goto out;

L
Linus Torvalds 已提交
1446 1447 1448 1449 1450 1451 1452
	break_time = 0;
	if (lease_break_time > 0) {
		break_time = jiffies + lease_break_time * HZ;
		if (break_time == 0)
			break_time++;	/* so that 0 means no break time */
	}

1453
	list_for_each_entry_safe(fl, tmp, &ctx->flc_lease, fl_list) {
J
J. Bruce Fields 已提交
1454 1455
		if (!leases_conflict(fl, new_fl))
			continue;
1456 1457 1458 1459
		if (want_write) {
			if (fl->fl_flags & FL_UNLOCK_PENDING)
				continue;
			fl->fl_flags |= FL_UNLOCK_PENDING;
L
Linus Torvalds 已提交
1460
			fl->fl_break_time = break_time;
1461
		} else {
1462
			if (lease_breaking(fl))
1463 1464 1465
				continue;
			fl->fl_flags |= FL_DOWNGRADE_PENDING;
			fl->fl_downgrade_time = break_time;
L
Linus Torvalds 已提交
1466
		}
J
Jeff Layton 已提交
1467
		if (fl->fl_lmops->lm_break(fl))
1468
			locks_delete_lock_ctx(fl, &dispose);
L
Linus Torvalds 已提交
1469 1470
	}

1471
	if (list_empty(&ctx->flc_lease))
J
Jeff Layton 已提交
1472 1473
		goto out;

1474
	if (mode & O_NONBLOCK) {
1475
		trace_break_lease_noblock(inode, new_fl);
L
Linus Torvalds 已提交
1476 1477 1478 1479 1480
		error = -EWOULDBLOCK;
		goto out;
	}

restart:
1481 1482
	fl = list_first_entry(&ctx->flc_lease, struct file_lock, fl_list);
	break_time = fl->fl_break_time;
1483
	if (break_time != 0)
L
Linus Torvalds 已提交
1484
		break_time -= jiffies;
1485 1486
	if (break_time == 0)
		break_time++;
1487
	locks_insert_block(fl, new_fl);
1488
	trace_break_lease_block(inode, new_fl);
1489
	spin_unlock(&ctx->flc_lock);
1490
	locks_dispose_list(&dispose);
1491 1492
	error = wait_event_interruptible_timeout(new_fl->fl_wait,
						!new_fl->fl_next, break_time);
1493
	spin_lock(&ctx->flc_lock);
1494
	trace_break_lease_unblock(inode, new_fl);
1495
	locks_delete_block(new_fl);
L
Linus Torvalds 已提交
1496
	if (error >= 0) {
1497 1498 1499 1500
		/*
		 * Wait for the next conflicting lease that has not been
		 * broken yet
		 */
1501 1502 1503 1504
		if (error == 0)
			time_out_leases(inode, &dispose);
		if (any_leases_conflict(inode, new_fl))
			goto restart;
L
Linus Torvalds 已提交
1505 1506 1507
		error = 0;
	}
out:
1508
	spin_unlock(&ctx->flc_lock);
1509
	locks_dispose_list(&dispose);
1510
	locks_free_lock(new_fl);
L
Linus Torvalds 已提交
1511 1512 1513 1514 1515 1516
	return error;
}

EXPORT_SYMBOL(__break_lease);

/**
1517
 *	lease_get_mtime - get the last modified time of an inode
L
Linus Torvalds 已提交
1518 1519 1520 1521 1522
 *	@inode: the inode
 *      @time:  pointer to a timespec which will contain the last modified time
 *
 * This is to force NFS clients to flush their caches for files with
 * exclusive leases.  The justification is that if someone has an
1523
 * exclusive lease, then they could be modifying it.
L
Linus Torvalds 已提交
1524 1525 1526
 */
void lease_get_mtime(struct inode *inode, struct timespec *time)
{
1527
	bool has_lease = false;
1528
	struct file_lock_context *ctx;
1529
	struct file_lock *fl;
1530

1531
	ctx = smp_load_acquire(&inode->i_flctx);
1532
	if (ctx && !list_empty_careful(&ctx->flc_lease)) {
1533
		spin_lock(&ctx->flc_lock);
1534 1535 1536 1537
		fl = list_first_entry_or_null(&ctx->flc_lease,
					      struct file_lock, fl_list);
		if (fl && (fl->fl_type == F_WRLCK))
			has_lease = true;
1538
		spin_unlock(&ctx->flc_lock);
1539 1540 1541
	}

	if (has_lease)
L
Linus Torvalds 已提交
1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574
		*time = current_fs_time(inode->i_sb);
	else
		*time = inode->i_mtime;
}

EXPORT_SYMBOL(lease_get_mtime);

/**
 *	fcntl_getlease - Enquire what lease is currently active
 *	@filp: the file
 *
 *	The value returned by this function will be one of
 *	(if no lease break is pending):
 *
 *	%F_RDLCK to indicate a shared lease is held.
 *
 *	%F_WRLCK to indicate an exclusive lease is held.
 *
 *	%F_UNLCK to indicate no lease is held.
 *
 *	(if a lease break is pending):
 *
 *	%F_RDLCK to indicate an exclusive lease needs to be
 *		changed to a shared lease (or removed).
 *
 *	%F_UNLCK to indicate the lease needs to be removed.
 *
 *	XXX: sfr & willy disagree over whether F_INPROGRESS
 *	should be returned to userspace.
 */
int fcntl_getlease(struct file *filp)
{
	struct file_lock *fl;
1575
	struct inode *inode = file_inode(filp);
1576
	struct file_lock_context *ctx;
L
Linus Torvalds 已提交
1577
	int type = F_UNLCK;
1578
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
1579

1580
	ctx = smp_load_acquire(&inode->i_flctx);
1581
	if (ctx && !list_empty_careful(&ctx->flc_lease)) {
1582
		spin_lock(&ctx->flc_lock);
1583 1584 1585 1586
		time_out_leases(file_inode(filp), &dispose);
		list_for_each_entry(fl, &ctx->flc_lease, fl_list) {
			if (fl->fl_file != filp)
				continue;
1587
			type = target_leasetype(fl);
L
Linus Torvalds 已提交
1588 1589
			break;
		}
1590
		spin_unlock(&ctx->flc_lock);
1591
		locks_dispose_list(&dispose);
L
Linus Torvalds 已提交
1592 1593 1594 1595
	}
	return type;
}

1596 1597 1598 1599 1600 1601
/**
 * check_conflicting_open - see if the given dentry points to a file that has
 * 			    an existing open that would conflict with the
 * 			    desired lease.
 * @dentry:	dentry to check
 * @arg:	type of lease that we're trying to acquire
1602
 * @flags:	current lock flags
1603 1604 1605 1606 1607
 *
 * Check to see if there's an existing open fd on this file that would
 * conflict with the lease we're trying to set.
 */
static int
C
Christoph Hellwig 已提交
1608
check_conflicting_open(const struct dentry *dentry, const long arg, int flags)
1609 1610 1611 1612
{
	int ret = 0;
	struct inode *inode = dentry->d_inode;

C
Christoph Hellwig 已提交
1613 1614 1615
	if (flags & FL_LAYOUT)
		return 0;

1616 1617 1618 1619 1620 1621 1622 1623 1624 1625
	if ((arg == F_RDLCK) && (atomic_read(&inode->i_writecount) > 0))
		return -EAGAIN;

	if ((arg == F_WRLCK) && ((d_count(dentry) > 1) ||
	    (atomic_read(&inode->i_count) > 1)))
		ret = -EAGAIN;

	return ret;
}

1626 1627
static int
generic_add_lease(struct file *filp, long arg, struct file_lock **flp, void **priv)
L
Linus Torvalds 已提交
1628
{
1629
	struct file_lock *fl, *my_fl = NULL, *lease;
1630
	struct dentry *dentry = filp->f_path.dentry;
M
Miklos Szeredi 已提交
1631
	struct inode *inode = file_inode(filp);
1632
	struct file_lock_context *ctx;
J
J. Bruce Fields 已提交
1633
	bool is_deleg = (*flp)->fl_flags & FL_DELEG;
J
J. Bruce Fields 已提交
1634
	int error;
1635
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
1636

1637
	lease = *flp;
1638 1639
	trace_generic_add_lease(inode, lease);

1640 1641
	/* Note that arg is never F_UNLCK here */
	ctx = locks_get_lock_context(inode, arg);
1642 1643 1644
	if (!ctx)
		return -ENOMEM;

J
J. Bruce Fields 已提交
1645 1646 1647 1648 1649 1650 1651 1652
	/*
	 * In the delegation case we need mutual exclusion with
	 * a number of operations that take the i_mutex.  We trylock
	 * because delegations are an optional optimization, and if
	 * there's some chance of a conflict--we'd rather not
	 * bother, maybe that's a sign this just isn't a good file to
	 * hand out a delegation on.
	 */
A
Al Viro 已提交
1653
	if (is_deleg && !inode_trylock(inode))
J
J. Bruce Fields 已提交
1654 1655 1656 1657
		return -EAGAIN;

	if (is_deleg && arg == F_WRLCK) {
		/* Write delegations are not currently supported: */
A
Al Viro 已提交
1658
		inode_unlock(inode);
J
J. Bruce Fields 已提交
1659 1660 1661
		WARN_ON_ONCE(1);
		return -EINVAL;
	}
1662

1663
	spin_lock(&ctx->flc_lock);
1664
	time_out_leases(inode, &dispose);
C
Christoph Hellwig 已提交
1665
	error = check_conflicting_open(dentry, arg, lease->fl_flags);
1666
	if (error)
1667
		goto out;
1668

L
Linus Torvalds 已提交
1669 1670 1671 1672 1673 1674 1675 1676
	/*
	 * At this point, we know that if there is an exclusive
	 * lease on this file, then we hold it on this filp
	 * (otherwise our open of this file would have blocked).
	 * And if we are trying to acquire an exclusive lease,
	 * then the file is not open by anyone (including us)
	 * except for this filp.
	 */
J
J. Bruce Fields 已提交
1677
	error = -EAGAIN;
1678
	list_for_each_entry(fl, &ctx->flc_lease, fl_list) {
1679 1680
		if (fl->fl_file == filp &&
		    fl->fl_owner == lease->fl_owner) {
1681
			my_fl = fl;
J
J. Bruce Fields 已提交
1682 1683
			continue;
		}
1684

J
J. Bruce Fields 已提交
1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696
		/*
		 * No exclusive leases if someone else has a lease on
		 * this file:
		 */
		if (arg == F_WRLCK)
			goto out;
		/*
		 * Modifying our existing lease is OK, but no getting a
		 * new lease if someone else is opening for write:
		 */
		if (fl->fl_flags & FL_UNLOCK_PENDING)
			goto out;
L
Linus Torvalds 已提交
1697 1698
	}

1699
	if (my_fl != NULL) {
1700 1701
		lease = my_fl;
		error = lease->fl_lmops->lm_change(lease, arg, &dispose);
1702 1703 1704
		if (error)
			goto out;
		goto out_setup;
L
Linus Torvalds 已提交
1705 1706 1707 1708 1709 1710
	}

	error = -EINVAL;
	if (!leases_enable)
		goto out;

1711
	locks_insert_lock_ctx(lease, &ctx->flc_lease);
1712 1713 1714 1715 1716 1717 1718 1719 1720 1721
	/*
	 * The check in break_lease() is lockless. It's possible for another
	 * open to race in after we did the earlier check for a conflicting
	 * open but before the lease was inserted. Check again for a
	 * conflicting open and cancel the lease if there is one.
	 *
	 * We also add a barrier here to ensure that the insertion of the lock
	 * precedes these checks.
	 */
	smp_mb();
C
Christoph Hellwig 已提交
1722
	error = check_conflicting_open(dentry, arg, lease->fl_flags);
1723
	if (error) {
1724
		locks_unlink_lock_ctx(lease);
1725 1726
		goto out;
	}
1727 1728 1729 1730

out_setup:
	if (lease->fl_lmops->lm_setup)
		lease->fl_lmops->lm_setup(lease, priv);
L
Linus Torvalds 已提交
1731
out:
1732
	spin_unlock(&ctx->flc_lock);
1733
	locks_dispose_list(&dispose);
J
J. Bruce Fields 已提交
1734
	if (is_deleg)
A
Al Viro 已提交
1735
		inode_unlock(inode);
1736
	if (!error && !my_fl)
1737
		*flp = NULL;
L
Linus Torvalds 已提交
1738 1739
	return error;
}
1740

1741
static int generic_delete_lease(struct file *filp, void *owner)
1742
{
1743
	int error = -EAGAIN;
1744
	struct file_lock *fl, *victim = NULL;
1745
	struct inode *inode = file_inode(filp);
1746
	struct file_lock_context *ctx;
1747
	LIST_HEAD(dispose);
1748

1749
	ctx = smp_load_acquire(&inode->i_flctx);
1750 1751 1752 1753 1754
	if (!ctx) {
		trace_generic_delete_lease(inode, NULL);
		return error;
	}

1755
	spin_lock(&ctx->flc_lock);
1756
	list_for_each_entry(fl, &ctx->flc_lease, fl_list) {
1757 1758
		if (fl->fl_file == filp &&
		    fl->fl_owner == owner) {
1759
			victim = fl;
1760
			break;
1761
		}
1762
	}
1763
	trace_generic_delete_lease(inode, victim);
1764
	if (victim)
1765
		error = fl->fl_lmops->lm_change(victim, F_UNLCK, &dispose);
1766
	spin_unlock(&ctx->flc_lock);
1767
	locks_dispose_list(&dispose);
1768
	return error;
1769 1770 1771 1772
}

/**
 *	generic_setlease	-	sets a lease on an open file
1773 1774 1775 1776 1777
 *	@filp:	file pointer
 *	@arg:	type of lease to obtain
 *	@flp:	input - file_lock to use, output - file_lock inserted
 *	@priv:	private data for lm_setup (may be NULL if lm_setup
 *		doesn't require it)
1778 1779 1780 1781
 *
 *	The (input) flp->fl_lmops->lm_break function is required
 *	by break_lease().
 */
1782 1783
int generic_setlease(struct file *filp, long arg, struct file_lock **flp,
			void **priv)
1784
{
1785
	struct inode *inode = file_inode(filp);
1786 1787
	int error;

1788
	if ((!uid_eq(current_fsuid(), inode->i_uid)) && !capable(CAP_LEASE))
1789 1790 1791 1792 1793 1794 1795 1796 1797
		return -EACCES;
	if (!S_ISREG(inode->i_mode))
		return -EINVAL;
	error = security_file_lock(filp, arg);
	if (error)
		return error;

	switch (arg) {
	case F_UNLCK:
1798
		return generic_delete_lease(filp, *priv);
1799 1800
	case F_RDLCK:
	case F_WRLCK:
1801 1802 1803 1804
		if (!(*flp)->fl_lmops->lm_break) {
			WARN_ON_ONCE(1);
			return -ENOLCK;
		}
C
Christoph Hellwig 已提交
1805

1806
		return generic_add_lease(filp, arg, flp, priv);
1807
	default:
1808
		return -EINVAL;
1809 1810
	}
}
1811
EXPORT_SYMBOL(generic_setlease);
L
Linus Torvalds 已提交
1812

1813
/**
1814
 * vfs_setlease        -       sets a lease on an open file
1815 1816 1817 1818 1819
 * @filp:	file pointer
 * @arg:	type of lease to obtain
 * @lease:	file_lock to use when adding a lease
 * @priv:	private info for lm_setup when adding a lease (may be
 * 		NULL if lm_setup doesn't require it)
1820 1821 1822 1823 1824 1825
 *
 * Call this to establish a lease on the file. The "lease" argument is not
 * used for F_UNLCK requests and may be NULL. For commands that set or alter
 * an existing lease, the (*lease)->fl_lmops->lm_break operation must be set;
 * if not, this function will return -ENOLCK (and generate a scary-looking
 * stack trace).
1826 1827 1828
 *
 * The "priv" pointer is passed directly to the lm_setup function as-is. It
 * may be NULL if the lm_setup operation doesn't require it.
L
Linus Torvalds 已提交
1829
 */
1830 1831
int
vfs_setlease(struct file *filp, long arg, struct file_lock **lease, void **priv)
L
Linus Torvalds 已提交
1832
{
1833
	if (filp->f_op->setlease)
1834
		return filp->f_op->setlease(filp, arg, lease, priv);
1835
	else
1836
		return generic_setlease(filp, arg, lease, priv);
L
Linus Torvalds 已提交
1837
}
1838
EXPORT_SYMBOL_GPL(vfs_setlease);
L
Linus Torvalds 已提交
1839

1840
static int do_fcntl_add_lease(unsigned int fd, struct file *filp, long arg)
L
Linus Torvalds 已提交
1841
{
1842
	struct file_lock *fl;
1843
	struct fasync_struct *new;
L
Linus Torvalds 已提交
1844 1845
	int error;

1846 1847 1848
	fl = lease_alloc(filp, arg);
	if (IS_ERR(fl))
		return PTR_ERR(fl);
L
Linus Torvalds 已提交
1849

1850 1851 1852 1853 1854
	new = fasync_alloc();
	if (!new) {
		locks_free_lock(fl);
		return -ENOMEM;
	}
1855
	new->fa_fd = fd;
1856

1857
	error = vfs_setlease(filp, arg, &fl, (void **)&new);
1858 1859
	if (fl)
		locks_free_lock(fl);
1860 1861
	if (new)
		fasync_free(new);
L
Linus Torvalds 已提交
1862 1863 1864
	return error;
}

1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877
/**
 *	fcntl_setlease	-	sets a lease on an open file
 *	@fd: open file descriptor
 *	@filp: file pointer
 *	@arg: type of lease to obtain
 *
 *	Call this fcntl to establish a lease on the file.
 *	Note that you also need to call %F_SETSIG to
 *	receive a signal when the lease is broken.
 */
int fcntl_setlease(unsigned int fd, struct file *filp, long arg)
{
	if (arg == F_UNLCK)
1878
		return vfs_setlease(filp, F_UNLCK, NULL, (void **)&filp);
1879 1880 1881
	return do_fcntl_add_lease(fd, filp, arg);
}

L
Linus Torvalds 已提交
1882
/**
1883 1884
 * flock_lock_inode_wait - Apply a FLOCK-style lock to a file
 * @inode: inode of the file to apply to
L
Linus Torvalds 已提交
1885 1886
 * @fl: The lock to be applied
 *
1887
 * Apply a FLOCK style lock request to an inode.
L
Linus Torvalds 已提交
1888
 */
1889
static int flock_lock_inode_wait(struct inode *inode, struct file_lock *fl)
L
Linus Torvalds 已提交
1890 1891 1892 1893
{
	int error;
	might_sleep();
	for (;;) {
1894
		error = flock_lock_inode(inode, fl);
1895
		if (error != FILE_LOCK_DEFERRED)
L
Linus Torvalds 已提交
1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906
			break;
		error = wait_event_interruptible(fl->fl_wait, !fl->fl_next);
		if (!error)
			continue;

		locks_delete_block(fl);
		break;
	}
	return error;
}

1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930
/**
 * locks_lock_inode_wait - Apply a lock to an inode
 * @inode: inode of the file to apply to
 * @fl: The lock to be applied
 *
 * Apply a POSIX or FLOCK style lock request to an inode.
 */
int locks_lock_inode_wait(struct inode *inode, struct file_lock *fl)
{
	int res = 0;
	switch (fl->fl_flags & (FL_POSIX|FL_FLOCK)) {
		case FL_POSIX:
			res = posix_lock_inode_wait(inode, fl);
			break;
		case FL_FLOCK:
			res = flock_lock_inode_wait(inode, fl);
			break;
		default:
			BUG();
	}
	return res;
}
EXPORT_SYMBOL(locks_lock_inode_wait);

L
Linus Torvalds 已提交
1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949
/**
 *	sys_flock: - flock() system call.
 *	@fd: the file descriptor to lock.
 *	@cmd: the type of lock to apply.
 *
 *	Apply a %FL_FLOCK style lock to an open file descriptor.
 *	The @cmd can be one of
 *
 *	%LOCK_SH -- a shared lock.
 *
 *	%LOCK_EX -- an exclusive lock.
 *
 *	%LOCK_UN -- remove an existing lock.
 *
 *	%LOCK_MAND -- a `mandatory' flock.  This exists to emulate Windows Share Modes.
 *
 *	%LOCK_MAND can be combined with %LOCK_READ or %LOCK_WRITE to allow other
 *	processes read and write access respectively.
 */
1950
SYSCALL_DEFINE2(flock, unsigned int, fd, unsigned int, cmd)
L
Linus Torvalds 已提交
1951
{
1952
	struct fd f = fdget(fd);
L
Linus Torvalds 已提交
1953 1954 1955 1956 1957
	struct file_lock *lock;
	int can_sleep, unlock;
	int error;

	error = -EBADF;
1958
	if (!f.file)
L
Linus Torvalds 已提交
1959 1960 1961 1962 1963 1964
		goto out;

	can_sleep = !(cmd & LOCK_NB);
	cmd &= ~LOCK_NB;
	unlock = (cmd == LOCK_UN);

1965
	if (!unlock && !(cmd & LOCK_MAND) &&
1966
	    !(f.file->f_mode & (FMODE_READ|FMODE_WRITE)))
L
Linus Torvalds 已提交
1967 1968
		goto out_putf;

1969 1970 1971
	lock = flock_make_lock(f.file, cmd);
	if (IS_ERR(lock)) {
		error = PTR_ERR(lock);
L
Linus Torvalds 已提交
1972
		goto out_putf;
1973 1974
	}

L
Linus Torvalds 已提交
1975 1976 1977
	if (can_sleep)
		lock->fl_flags |= FL_SLEEP;

1978
	error = security_file_lock(f.file, lock->fl_type);
L
Linus Torvalds 已提交
1979 1980 1981
	if (error)
		goto out_free;

A
Al Viro 已提交
1982
	if (f.file->f_op->flock)
1983
		error = f.file->f_op->flock(f.file,
L
Linus Torvalds 已提交
1984 1985 1986
					  (can_sleep) ? F_SETLKW : F_SETLK,
					  lock);
	else
1987
		error = locks_lock_file_wait(f.file, lock);
L
Linus Torvalds 已提交
1988 1989

 out_free:
1990
	locks_free_lock(lock);
L
Linus Torvalds 已提交
1991 1992

 out_putf:
1993
	fdput(f);
L
Linus Torvalds 已提交
1994 1995 1996 1997
 out:
	return error;
}

1998 1999 2000
/**
 * vfs_test_lock - test file byte range lock
 * @filp: The file to test lock for
2001
 * @fl: The lock to test; also used to hold result
2002 2003 2004 2005 2006 2007
 *
 * Returns -ERRNO on failure.  Indicates presence of conflicting lock by
 * setting conf->fl_type to something other than F_UNLCK.
 */
int vfs_test_lock(struct file *filp, struct file_lock *fl)
{
A
Al Viro 已提交
2008
	if (filp->f_op->lock)
2009 2010 2011 2012 2013 2014
		return filp->f_op->lock(filp, F_GETLK, fl);
	posix_test_lock(filp, fl);
	return 0;
}
EXPORT_SYMBOL_GPL(vfs_test_lock);

2015 2016
static int posix_lock_to_flock(struct flock *flock, struct file_lock *fl)
{
2017
	flock->l_pid = IS_OFDLCK(fl) ? -1 : fl->fl_pid;
2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031
#if BITS_PER_LONG == 32
	/*
	 * Make sure we can represent the posix lock via
	 * legacy 32bit flock.
	 */
	if (fl->fl_start > OFFT_OFFSET_MAX)
		return -EOVERFLOW;
	if (fl->fl_end != OFFSET_MAX && fl->fl_end > OFFT_OFFSET_MAX)
		return -EOVERFLOW;
#endif
	flock->l_start = fl->fl_start;
	flock->l_len = fl->fl_end == OFFSET_MAX ? 0 :
		fl->fl_end - fl->fl_start + 1;
	flock->l_whence = 0;
2032
	flock->l_type = fl->fl_type;
2033 2034 2035 2036 2037 2038
	return 0;
}

#if BITS_PER_LONG == 32
static void posix_lock_to_flock64(struct flock64 *flock, struct file_lock *fl)
{
2039
	flock->l_pid = IS_OFDLCK(fl) ? -1 : fl->fl_pid;
2040 2041 2042 2043 2044 2045 2046 2047
	flock->l_start = fl->fl_start;
	flock->l_len = fl->fl_end == OFFSET_MAX ? 0 :
		fl->fl_end - fl->fl_start + 1;
	flock->l_whence = 0;
	flock->l_type = fl->fl_type;
}
#endif

L
Linus Torvalds 已提交
2048 2049 2050
/* Report the first existing lock that would conflict with l.
 * This implements the F_GETLK command of fcntl().
 */
2051
int fcntl_getlk(struct file *filp, unsigned int cmd, struct flock __user *l)
L
Linus Torvalds 已提交
2052
{
2053
	struct file_lock file_lock;
L
Linus Torvalds 已提交
2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067
	struct flock flock;
	int error;

	error = -EFAULT;
	if (copy_from_user(&flock, l, sizeof(flock)))
		goto out;
	error = -EINVAL;
	if ((flock.l_type != F_RDLCK) && (flock.l_type != F_WRLCK))
		goto out;

	error = flock_to_posix_lock(filp, &file_lock, &flock);
	if (error)
		goto out;

2068
	if (cmd == F_OFD_GETLK) {
2069 2070 2071 2072
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2073
		cmd = F_GETLK;
2074
		file_lock.fl_flags |= FL_OFDLCK;
2075
		file_lock.fl_owner = filp;
2076 2077
	}

2078 2079 2080
	error = vfs_test_lock(filp, &file_lock);
	if (error)
		goto out;
L
Linus Torvalds 已提交
2081
 
2082 2083 2084
	flock.l_type = file_lock.fl_type;
	if (file_lock.fl_type != F_UNLCK) {
		error = posix_lock_to_flock(&flock, &file_lock);
2085
		if (error)
2086
			goto rel_priv;
L
Linus Torvalds 已提交
2087 2088 2089 2090
	}
	error = -EFAULT;
	if (!copy_to_user(l, &flock, sizeof(flock)))
		error = 0;
2091 2092
rel_priv:
	locks_release_private(&file_lock);
L
Linus Torvalds 已提交
2093 2094 2095 2096
out:
	return error;
}

2097 2098 2099 2100 2101
/**
 * vfs_lock_file - file byte range lock
 * @filp: The file to apply the lock to
 * @cmd: type of locking operation (F_SETLK, F_GETLK, etc.)
 * @fl: The lock to be applied
2102 2103 2104 2105 2106 2107 2108 2109
 * @conf: Place to return a copy of the conflicting lock, if found.
 *
 * A caller that doesn't care about the conflicting lock may pass NULL
 * as the final argument.
 *
 * If the filesystem defines a private ->lock() method, then @conf will
 * be left unchanged; so a caller that cares should initialize it to
 * some acceptable default.
2110 2111 2112 2113
 *
 * To avoid blocking kernel daemons, such as lockd, that need to acquire POSIX
 * locks, the ->lock() interface may return asynchronously, before the lock has
 * been granted or denied by the underlying filesystem, if (and only if)
J
J. Bruce Fields 已提交
2114
 * lm_grant is set. Callers expecting ->lock() to return asynchronously
2115 2116
 * will only use F_SETLK, not F_SETLKW; they will set FL_SLEEP if (and only if)
 * the request is for a blocking lock. When ->lock() does return asynchronously,
J
J. Bruce Fields 已提交
2117
 * it must return FILE_LOCK_DEFERRED, and call ->lm_grant() when the lock
2118 2119
 * request completes.
 * If the request is for non-blocking lock the file system should return
2120 2121
 * FILE_LOCK_DEFERRED then try to get the lock and call the callback routine
 * with the result. If the request timed out the callback routine will return a
2122 2123 2124 2125 2126
 * nonzero return code and the file system should release the lock. The file
 * system is also responsible to keep a corresponding posix lock when it
 * grants a lock so the VFS can find out which locks are locally held and do
 * the correct lock cleanup when required.
 * The underlying filesystem must not drop the kernel lock or call
J
J. Bruce Fields 已提交
2127
 * ->lm_grant() before returning to the caller with a FILE_LOCK_DEFERRED
2128
 * return code.
2129
 */
2130
int vfs_lock_file(struct file *filp, unsigned int cmd, struct file_lock *fl, struct file_lock *conf)
2131
{
A
Al Viro 已提交
2132
	if (filp->f_op->lock)
2133 2134
		return filp->f_op->lock(filp, cmd, fl);
	else
2135
		return posix_lock_file(filp, fl, conf);
2136 2137 2138
}
EXPORT_SYMBOL_GPL(vfs_lock_file);

M
Miklos Szeredi 已提交
2139 2140 2141 2142 2143 2144 2145 2146 2147
static int do_lock_file_wait(struct file *filp, unsigned int cmd,
			     struct file_lock *fl)
{
	int error;

	error = security_file_lock(filp, fl->fl_type);
	if (error)
		return error;

2148 2149 2150
	for (;;) {
		error = vfs_lock_file(filp, cmd, fl, NULL);
		if (error != FILE_LOCK_DEFERRED)
M
Miklos Szeredi 已提交
2151
			break;
2152 2153 2154 2155 2156 2157
		error = wait_event_interruptible(fl->fl_wait, !fl->fl_next);
		if (!error)
			continue;

		locks_delete_block(fl);
		break;
M
Miklos Szeredi 已提交
2158 2159 2160 2161 2162
	}

	return error;
}

2163
/* Ensure that fl->fl_file has compatible f_mode for F_SETLK calls */
2164 2165 2166 2167 2168 2169 2170 2171 2172 2173 2174 2175 2176 2177 2178
static int
check_fmode_for_setlk(struct file_lock *fl)
{
	switch (fl->fl_type) {
	case F_RDLCK:
		if (!(fl->fl_file->f_mode & FMODE_READ))
			return -EBADF;
		break;
	case F_WRLCK:
		if (!(fl->fl_file->f_mode & FMODE_WRITE))
			return -EBADF;
	}
	return 0;
}

L
Linus Torvalds 已提交
2179 2180 2181
/* Apply the lock described by l to an open file descriptor.
 * This implements both the F_SETLK and F_SETLKW commands of fcntl().
 */
2182 2183
int fcntl_setlk(unsigned int fd, struct file *filp, unsigned int cmd,
		struct flock __user *l)
L
Linus Torvalds 已提交
2184 2185 2186 2187
{
	struct file_lock *file_lock = locks_alloc_lock();
	struct flock flock;
	struct inode *inode;
2188
	struct file *f;
L
Linus Torvalds 已提交
2189 2190 2191 2192 2193
	int error;

	if (file_lock == NULL)
		return -ENOLCK;

2194 2195
	inode = file_inode(filp);

L
Linus Torvalds 已提交
2196 2197 2198 2199 2200 2201 2202 2203 2204 2205
	/*
	 * This might block, so we do it before checking the inode.
	 */
	error = -EFAULT;
	if (copy_from_user(&flock, l, sizeof(flock)))
		goto out;

	/* Don't allow mandatory locks on files that may be memory mapped
	 * and shared.
	 */
2206
	if (mandatory_lock(inode) && mapping_writably_mapped(filp->f_mapping)) {
L
Linus Torvalds 已提交
2207 2208 2209 2210 2211 2212 2213
		error = -EAGAIN;
		goto out;
	}

	error = flock_to_posix_lock(filp, file_lock, &flock);
	if (error)
		goto out;
2214

2215 2216 2217 2218
	error = check_fmode_for_setlk(file_lock);
	if (error)
		goto out;

2219 2220
	/*
	 * If the cmd is requesting file-private locks, then set the
2221
	 * FL_OFDLCK flag and override the owner.
2222 2223
	 */
	switch (cmd) {
2224
	case F_OFD_SETLK:
2225 2226 2227 2228
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2229
		cmd = F_SETLK;
2230
		file_lock->fl_flags |= FL_OFDLCK;
2231
		file_lock->fl_owner = filp;
2232
		break;
2233
	case F_OFD_SETLKW:
2234 2235 2236 2237
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2238
		cmd = F_SETLKW;
2239
		file_lock->fl_flags |= FL_OFDLCK;
2240
		file_lock->fl_owner = filp;
2241 2242
		/* Fallthrough */
	case F_SETLKW:
L
Linus Torvalds 已提交
2243 2244
		file_lock->fl_flags |= FL_SLEEP;
	}
2245

M
Miklos Szeredi 已提交
2246
	error = do_lock_file_wait(filp, cmd, file_lock);
L
Linus Torvalds 已提交
2247

2248
	/*
2249 2250 2251
	 * Attempt to detect a close/fcntl race and recover by releasing the
	 * lock that was just acquired. There is no need to do that when we're
	 * unlocking though, or for OFD locks.
2252
	 */
2253 2254
	if (!error && file_lock->fl_type != F_UNLCK &&
	    !(file_lock->fl_flags & FL_OFDLCK)) {
2255 2256 2257 2258 2259 2260 2261 2262 2263 2264 2265 2266 2267 2268
		/*
		 * We need that spin_lock here - it prevents reordering between
		 * update of i_flctx->flc_posix and check for it done in
		 * close(). rcu_read_lock() wouldn't do.
		 */
		spin_lock(&current->files->file_lock);
		f = fcheck(fd);
		spin_unlock(&current->files->file_lock);
		if (f != filp) {
			file_lock->fl_type = F_UNLCK;
			error = do_lock_file_wait(filp, cmd, file_lock);
			WARN_ON_ONCE(error);
			error = -EBADF;
		}
L
Linus Torvalds 已提交
2269
	}
2270
out:
2271
	trace_fcntl_setlk(inode, file_lock, error);
L
Linus Torvalds 已提交
2272 2273 2274 2275 2276 2277 2278 2279
	locks_free_lock(file_lock);
	return error;
}

#if BITS_PER_LONG == 32
/* Report the first existing lock that would conflict with l.
 * This implements the F_GETLK command of fcntl().
 */
2280
int fcntl_getlk64(struct file *filp, unsigned int cmd, struct flock64 __user *l)
L
Linus Torvalds 已提交
2281
{
2282
	struct file_lock file_lock;
L
Linus Torvalds 已提交
2283 2284 2285 2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296
	struct flock64 flock;
	int error;

	error = -EFAULT;
	if (copy_from_user(&flock, l, sizeof(flock)))
		goto out;
	error = -EINVAL;
	if ((flock.l_type != F_RDLCK) && (flock.l_type != F_WRLCK))
		goto out;

	error = flock64_to_posix_lock(filp, &file_lock, &flock);
	if (error)
		goto out;

2297
	if (cmd == F_OFD_GETLK) {
2298 2299 2300 2301
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2302
		cmd = F_GETLK64;
2303
		file_lock.fl_flags |= FL_OFDLCK;
2304
		file_lock.fl_owner = filp;
2305 2306
	}

2307 2308 2309 2310
	error = vfs_test_lock(filp, &file_lock);
	if (error)
		goto out;

2311 2312 2313 2314
	flock.l_type = file_lock.fl_type;
	if (file_lock.fl_type != F_UNLCK)
		posix_lock_to_flock64(&flock, &file_lock);

L
Linus Torvalds 已提交
2315 2316 2317
	error = -EFAULT;
	if (!copy_to_user(l, &flock, sizeof(flock)))
		error = 0;
2318 2319

	locks_release_private(&file_lock);
L
Linus Torvalds 已提交
2320 2321 2322 2323 2324 2325 2326
out:
	return error;
}

/* Apply the lock described by l to an open file descriptor.
 * This implements both the F_SETLK and F_SETLKW commands of fcntl().
 */
2327 2328
int fcntl_setlk64(unsigned int fd, struct file *filp, unsigned int cmd,
		struct flock64 __user *l)
L
Linus Torvalds 已提交
2329 2330 2331 2332
{
	struct file_lock *file_lock = locks_alloc_lock();
	struct flock64 flock;
	struct inode *inode;
2333
	struct file *f;
L
Linus Torvalds 已提交
2334 2335 2336 2337 2338 2339 2340 2341 2342 2343 2344 2345
	int error;

	if (file_lock == NULL)
		return -ENOLCK;

	/*
	 * This might block, so we do it before checking the inode.
	 */
	error = -EFAULT;
	if (copy_from_user(&flock, l, sizeof(flock)))
		goto out;

A
Al Viro 已提交
2346
	inode = file_inode(filp);
L
Linus Torvalds 已提交
2347 2348 2349 2350

	/* Don't allow mandatory locks on files that may be memory mapped
	 * and shared.
	 */
2351
	if (mandatory_lock(inode) && mapping_writably_mapped(filp->f_mapping)) {
L
Linus Torvalds 已提交
2352 2353 2354 2355 2356 2357 2358
		error = -EAGAIN;
		goto out;
	}

	error = flock64_to_posix_lock(filp, file_lock, &flock);
	if (error)
		goto out;
2359

2360 2361 2362 2363
	error = check_fmode_for_setlk(file_lock);
	if (error)
		goto out;

2364 2365
	/*
	 * If the cmd is requesting file-private locks, then set the
2366
	 * FL_OFDLCK flag and override the owner.
2367 2368
	 */
	switch (cmd) {
2369
	case F_OFD_SETLK:
2370 2371 2372 2373
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2374
		cmd = F_SETLK64;
2375
		file_lock->fl_flags |= FL_OFDLCK;
2376
		file_lock->fl_owner = filp;
2377
		break;
2378
	case F_OFD_SETLKW:
2379 2380 2381 2382
		error = -EINVAL;
		if (flock.l_pid != 0)
			goto out;

2383
		cmd = F_SETLKW64;
2384
		file_lock->fl_flags |= FL_OFDLCK;
2385
		file_lock->fl_owner = filp;
2386 2387
		/* Fallthrough */
	case F_SETLKW64:
L
Linus Torvalds 已提交
2388 2389
		file_lock->fl_flags |= FL_SLEEP;
	}
2390

M
Miklos Szeredi 已提交
2391
	error = do_lock_file_wait(filp, cmd, file_lock);
L
Linus Torvalds 已提交
2392

2393
	/*
2394 2395 2396
	 * Attempt to detect a close/fcntl race and recover by releasing the
	 * lock that was just acquired. There is no need to do that when we're
	 * unlocking though, or for OFD locks.
2397
	 */
2398 2399
	if (!error && file_lock->fl_type != F_UNLCK &&
	    !(file_lock->fl_flags & FL_OFDLCK)) {
2400 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2411 2412 2413
		/*
		 * We need that spin_lock here - it prevents reordering between
		 * update of i_flctx->flc_posix and check for it done in
		 * close(). rcu_read_lock() wouldn't do.
		 */
		spin_lock(&current->files->file_lock);
		f = fcheck(fd);
		spin_unlock(&current->files->file_lock);
		if (f != filp) {
			file_lock->fl_type = F_UNLCK;
			error = do_lock_file_wait(filp, cmd, file_lock);
			WARN_ON_ONCE(error);
			error = -EBADF;
		}
L
Linus Torvalds 已提交
2414 2415 2416 2417 2418 2419 2420 2421 2422 2423 2424 2425 2426 2427
	}
out:
	locks_free_lock(file_lock);
	return error;
}
#endif /* BITS_PER_LONG == 32 */

/*
 * This function is called when the file is being removed
 * from the task's fd array.  POSIX locks belonging to this task
 * are deleted at this time.
 */
void locks_remove_posix(struct file *filp, fl_owner_t owner)
{
2428
	int error;
2429
	struct file_lock lock;
2430
	struct file_lock_context *ctx;
L
Linus Torvalds 已提交
2431 2432 2433 2434 2435 2436

	/*
	 * If there are no locks held on this file, we don't need to call
	 * posix_lock_file().  Another process could be setting a lock on this
	 * file at the same time, but we wouldn't remove that lock anyway.
	 */
2437
	ctx =  smp_load_acquire(&file_inode(filp)->i_flctx);
2438
	if (!ctx || list_empty(&ctx->flc_posix))
L
Linus Torvalds 已提交
2439 2440 2441
		return;

	lock.fl_type = F_UNLCK;
2442
	lock.fl_flags = FL_POSIX | FL_CLOSE;
L
Linus Torvalds 已提交
2443 2444 2445 2446 2447 2448 2449 2450
	lock.fl_start = 0;
	lock.fl_end = OFFSET_MAX;
	lock.fl_owner = owner;
	lock.fl_pid = current->tgid;
	lock.fl_file = filp;
	lock.fl_ops = NULL;
	lock.fl_lmops = NULL;

2451
	error = vfs_lock_file(filp, F_SETLK, &lock, NULL);
L
Linus Torvalds 已提交
2452 2453 2454

	if (lock.fl_ops && lock.fl_ops->fl_release_private)
		lock.fl_ops->fl_release_private(&lock);
2455
	trace_locks_remove_posix(file_inode(filp), &lock, error);
L
Linus Torvalds 已提交
2456 2457 2458 2459
}

EXPORT_SYMBOL(locks_remove_posix);

2460
/* The i_flctx must be valid when calling into here */
2461
static void
2462
locks_remove_flock(struct file *filp, struct file_lock_context *flctx)
2463 2464 2465 2466 2467 2468 2469 2470 2471
{
	struct file_lock fl = {
		.fl_owner = filp,
		.fl_pid = current->tgid,
		.fl_file = filp,
		.fl_flags = FL_FLOCK,
		.fl_type = F_UNLCK,
		.fl_end = OFFSET_MAX,
	};
2472
	struct inode *inode = file_inode(filp);
2473

2474
	if (list_empty(&flctx->flc_flock))
2475 2476 2477 2478 2479
		return;

	if (filp->f_op->flock)
		filp->f_op->flock(filp, F_SETLKW, &fl);
	else
2480
		flock_lock_inode(inode, &fl);
2481 2482 2483 2484 2485

	if (fl.fl_ops && fl.fl_ops->fl_release_private)
		fl.fl_ops->fl_release_private(&fl);
}

2486
/* The i_flctx must be valid when calling into here */
2487
static void
2488
locks_remove_lease(struct file *filp, struct file_lock_context *ctx)
2489 2490 2491 2492
{
	struct file_lock *fl, *tmp;
	LIST_HEAD(dispose);

2493
	if (list_empty(&ctx->flc_lease))
2494 2495
		return;

2496
	spin_lock(&ctx->flc_lock);
2497
	list_for_each_entry_safe(fl, tmp, &ctx->flc_lease, fl_list)
2498 2499
		if (filp == fl->fl_file)
			lease_modify(fl, F_UNLCK, &dispose);
2500
	spin_unlock(&ctx->flc_lock);
2501 2502 2503
	locks_dispose_list(&dispose);
}

L
Linus Torvalds 已提交
2504 2505 2506
/*
 * This function is called on the last close of an open file.
 */
2507
void locks_remove_file(struct file *filp)
L
Linus Torvalds 已提交
2508
{
2509 2510 2511 2512
	struct file_lock_context *ctx;

	ctx = smp_load_acquire(&file_inode(filp)->i_flctx);
	if (!ctx)
2513 2514
		return;

2515
	/* remove any OFD locks */
2516
	locks_remove_posix(filp, filp);
2517

2518
	/* remove flock locks */
2519
	locks_remove_flock(filp, ctx);
2520

2521
	/* remove any leases */
2522
	locks_remove_lease(filp, ctx);
L
Linus Torvalds 已提交
2523 2524 2525 2526 2527 2528 2529 2530
}

/**
 *	posix_unblock_lock - stop waiting for a file lock
 *	@waiter: the lock which was waiting
 *
 *	lockd needs to block waiting for locks.
 */
J
J. Bruce Fields 已提交
2531
int
2532
posix_unblock_lock(struct file_lock *waiter)
L
Linus Torvalds 已提交
2533
{
J
J. Bruce Fields 已提交
2534 2535
	int status = 0;

2536
	spin_lock(&blocked_lock_lock);
2537
	if (waiter->fl_next)
L
Linus Torvalds 已提交
2538
		__locks_delete_block(waiter);
J
J. Bruce Fields 已提交
2539 2540
	else
		status = -ENOENT;
2541
	spin_unlock(&blocked_lock_lock);
J
J. Bruce Fields 已提交
2542
	return status;
L
Linus Torvalds 已提交
2543 2544 2545
}
EXPORT_SYMBOL(posix_unblock_lock);

M
Marc Eshel 已提交
2546 2547 2548 2549 2550 2551 2552 2553 2554
/**
 * vfs_cancel_lock - file byte range unblock lock
 * @filp: The file to apply the unblock to
 * @fl: The lock to be unblocked
 *
 * Used by lock managers to cancel blocked requests
 */
int vfs_cancel_lock(struct file *filp, struct file_lock *fl)
{
A
Al Viro 已提交
2555
	if (filp->f_op->lock)
M
Marc Eshel 已提交
2556 2557 2558 2559 2560 2561
		return filp->f_op->lock(filp, F_CANCELLK, fl);
	return 0;
}

EXPORT_SYMBOL_GPL(vfs_cancel_lock);

2562
#ifdef CONFIG_PROC_FS
2563
#include <linux/proc_fs.h>
2564 2565
#include <linux/seq_file.h>

2566 2567 2568 2569 2570
struct locks_iterator {
	int	li_cpu;
	loff_t	li_pos;
};

2571
static void lock_get_status(struct seq_file *f, struct file_lock *fl,
2572
			    loff_t id, char *pfx)
L
Linus Torvalds 已提交
2573 2574
{
	struct inode *inode = NULL;
2575 2576 2577
	unsigned int fl_pid;

	if (fl->fl_nspid)
2578
		fl_pid = pid_vnr(fl->fl_nspid);
2579 2580
	else
		fl_pid = fl->fl_pid;
L
Linus Torvalds 已提交
2581 2582

	if (fl->fl_file != NULL)
A
Al Viro 已提交
2583
		inode = file_inode(fl->fl_file);
L
Linus Torvalds 已提交
2584

2585
	seq_printf(f, "%lld:%s ", id, pfx);
L
Linus Torvalds 已提交
2586
	if (IS_POSIX(fl)) {
2587
		if (fl->fl_flags & FL_ACCESS)
2588
			seq_puts(f, "ACCESS");
2589
		else if (IS_OFDLCK(fl))
2590
			seq_puts(f, "OFDLCK");
2591
		else
2592
			seq_puts(f, "POSIX ");
2593 2594

		seq_printf(f, " %s ",
L
Linus Torvalds 已提交
2595
			     (inode == NULL) ? "*NOINODE*" :
2596
			     mandatory_lock(inode) ? "MANDATORY" : "ADVISORY ");
L
Linus Torvalds 已提交
2597 2598
	} else if (IS_FLOCK(fl)) {
		if (fl->fl_type & LOCK_MAND) {
2599
			seq_puts(f, "FLOCK  MSNFS     ");
L
Linus Torvalds 已提交
2600
		} else {
2601
			seq_puts(f, "FLOCK  ADVISORY  ");
L
Linus Torvalds 已提交
2602 2603
		}
	} else if (IS_LEASE(fl)) {
2604 2605 2606 2607 2608
		if (fl->fl_flags & FL_DELEG)
			seq_puts(f, "DELEG  ");
		else
			seq_puts(f, "LEASE  ");

J
J. Bruce Fields 已提交
2609
		if (lease_breaking(fl))
2610
			seq_puts(f, "BREAKING  ");
L
Linus Torvalds 已提交
2611
		else if (fl->fl_file)
2612
			seq_puts(f, "ACTIVE    ");
L
Linus Torvalds 已提交
2613
		else
2614
			seq_puts(f, "BREAKER   ");
L
Linus Torvalds 已提交
2615
	} else {
2616
		seq_puts(f, "UNKNOWN UNKNOWN  ");
L
Linus Torvalds 已提交
2617 2618
	}
	if (fl->fl_type & LOCK_MAND) {
2619
		seq_printf(f, "%s ",
L
Linus Torvalds 已提交
2620 2621 2622 2623
			       (fl->fl_type & LOCK_READ)
			       ? (fl->fl_type & LOCK_WRITE) ? "RW   " : "READ "
			       : (fl->fl_type & LOCK_WRITE) ? "WRITE" : "NONE ");
	} else {
2624
		seq_printf(f, "%s ",
J
J. Bruce Fields 已提交
2625
			       (lease_breaking(fl))
2626 2627
			       ? (fl->fl_type == F_UNLCK) ? "UNLCK" : "READ "
			       : (fl->fl_type == F_WRLCK) ? "WRITE" : "READ ");
L
Linus Torvalds 已提交
2628 2629
	}
	if (inode) {
2630
		/* userspace relies on this representation of dev_t */
2631
		seq_printf(f, "%d %02x:%02x:%ld ", fl_pid,
L
Linus Torvalds 已提交
2632 2633 2634
				MAJOR(inode->i_sb->s_dev),
				MINOR(inode->i_sb->s_dev), inode->i_ino);
	} else {
2635
		seq_printf(f, "%d <none>:0 ", fl_pid);
L
Linus Torvalds 已提交
2636 2637 2638
	}
	if (IS_POSIX(fl)) {
		if (fl->fl_end == OFFSET_MAX)
2639
			seq_printf(f, "%Ld EOF\n", fl->fl_start);
L
Linus Torvalds 已提交
2640
		else
2641
			seq_printf(f, "%Ld %Ld\n", fl->fl_start, fl->fl_end);
L
Linus Torvalds 已提交
2642
	} else {
2643
		seq_puts(f, "0 EOF\n");
L
Linus Torvalds 已提交
2644 2645 2646
	}
}

2647
static int locks_show(struct seq_file *f, void *v)
L
Linus Torvalds 已提交
2648
{
2649
	struct locks_iterator *iter = f->private;
2650
	struct file_lock *fl, *bfl;
L
Linus Torvalds 已提交
2651

2652
	fl = hlist_entry(v, struct file_lock, fl_link);
L
Linus Torvalds 已提交
2653

2654
	lock_get_status(f, fl, iter->li_pos, "");
L
Linus Torvalds 已提交
2655

2656
	list_for_each_entry(bfl, &fl->fl_block, fl_block)
2657
		lock_get_status(f, bfl, iter->li_pos, " ->");
2658

2659 2660
	return 0;
}
L
Linus Torvalds 已提交
2661

2662 2663 2664 2665 2666 2667 2668 2669 2670 2671 2672 2673 2674 2675 2676 2677 2678 2679 2680 2681 2682 2683 2684 2685 2686 2687 2688
static void __show_fd_locks(struct seq_file *f,
			struct list_head *head, int *id,
			struct file *filp, struct files_struct *files)
{
	struct file_lock *fl;

	list_for_each_entry(fl, head, fl_list) {

		if (filp != fl->fl_file)
			continue;
		if (fl->fl_owner != files &&
		    fl->fl_owner != filp)
			continue;

		(*id)++;
		seq_puts(f, "lock:\t");
		lock_get_status(f, fl, *id, "");
	}
}

void show_fd_locks(struct seq_file *f,
		  struct file *filp, struct files_struct *files)
{
	struct inode *inode = file_inode(filp);
	struct file_lock_context *ctx;
	int id = 0;

2689
	ctx = smp_load_acquire(&inode->i_flctx);
2690 2691 2692 2693 2694 2695 2696 2697 2698 2699
	if (!ctx)
		return;

	spin_lock(&ctx->flc_lock);
	__show_fd_locks(f, &ctx->flc_flock, &id, filp, files);
	__show_fd_locks(f, &ctx->flc_posix, &id, filp, files);
	__show_fd_locks(f, &ctx->flc_lease, &id, filp, files);
	spin_unlock(&ctx->flc_lock);
}

2700
static void *locks_start(struct seq_file *f, loff_t *pos)
2701
	__acquires(&blocked_lock_lock)
2702
{
2703
	struct locks_iterator *iter = f->private;
2704

2705 2706
	iter->li_pos = *pos + 1;
	lg_global_lock(&file_lock_lglock);
2707
	spin_lock(&blocked_lock_lock);
2708
	return seq_hlist_start_percpu(&file_lock_list, &iter->li_cpu, *pos);
2709
}
L
Linus Torvalds 已提交
2710

2711 2712
static void *locks_next(struct seq_file *f, void *v, loff_t *pos)
{
2713 2714 2715 2716
	struct locks_iterator *iter = f->private;

	++iter->li_pos;
	return seq_hlist_next_percpu(v, &file_lock_list, &iter->li_cpu, pos);
2717
}
L
Linus Torvalds 已提交
2718

2719
static void locks_stop(struct seq_file *f, void *v)
2720
	__releases(&blocked_lock_lock)
2721
{
2722
	spin_unlock(&blocked_lock_lock);
2723
	lg_global_unlock(&file_lock_lglock);
L
Linus Torvalds 已提交
2724 2725
}

2726
static const struct seq_operations locks_seq_operations = {
2727 2728 2729 2730 2731
	.start	= locks_start,
	.next	= locks_next,
	.stop	= locks_stop,
	.show	= locks_show,
};
2732 2733 2734

static int locks_open(struct inode *inode, struct file *filp)
{
2735 2736
	return seq_open_private(filp, &locks_seq_operations,
					sizeof(struct locks_iterator));
2737 2738 2739 2740 2741 2742
}

static const struct file_operations proc_locks_operations = {
	.open		= locks_open,
	.read		= seq_read,
	.llseek		= seq_lseek,
2743
	.release	= seq_release_private,
2744 2745 2746 2747 2748 2749 2750
};

static int __init proc_locks_init(void)
{
	proc_create("locks", 0, NULL, &proc_locks_operations);
	return 0;
}
2751
fs_initcall(proc_locks_init);
2752 2753
#endif

L
Linus Torvalds 已提交
2754 2755
static int __init filelock_init(void)
{
2756 2757
	int i;

2758 2759 2760
	flctx_cache = kmem_cache_create("file_lock_ctx",
			sizeof(struct file_lock_context), 0, SLAB_PANIC, NULL);

L
Linus Torvalds 已提交
2761
	filelock_cache = kmem_cache_create("file_lock_cache",
M
Miklos Szeredi 已提交
2762 2763
			sizeof(struct file_lock), 0, SLAB_PANIC, NULL);

2764 2765 2766 2767 2768
	lg_lock_init(&file_lock_lglock, "file_lock_lglock");

	for_each_possible_cpu(i)
		INIT_HLIST_HEAD(per_cpu_ptr(&file_lock_list, i));

L
Linus Torvalds 已提交
2769 2770 2771 2772
	return 0;
}

core_initcall(filelock_init);