inode.c 54.9 KB
Newer Older
L
Linus Torvalds 已提交
1 2
/*
 * (C) 1997 Linus Torvalds
3
 * (C) 1999 Andrea Arcangeli <andrea@suse.de> (dynamic inode allocation)
L
Linus Torvalds 已提交
4
 */
A
Al Viro 已提交
5
#include <linux/export.h>
L
Linus Torvalds 已提交
6 7 8 9 10 11 12 13
#include <linux/fs.h>
#include <linux/mm.h>
#include <linux/backing-dev.h>
#include <linux/hash.h>
#include <linux/swap.h>
#include <linux/security.h>
#include <linux/cdev.h>
#include <linux/bootmem.h>
14
#include <linux/fsnotify.h>
15
#include <linux/mount.h>
A
Al Viro 已提交
16
#include <linux/posix_acl.h>
17
#include <linux/prefetch.h>
18
#include <linux/buffer_head.h> /* for inode_has_buffers */
M
Miklos Szeredi 已提交
19
#include <linux/ratelimit.h>
20
#include <linux/list_lru.h>
21
#include <trace/events/writeback.h>
22
#include "internal.h"
L
Linus Torvalds 已提交
23

24
/*
25
 * Inode locking rules:
26 27 28
 *
 * inode->i_lock protects:
 *   inode->i_state, inode->i_hash, __iget()
29
 * Inode LRU list locks protect:
30
 *   inode->i_sb->s_inode_lru, inode->i_lru
31 32
 * inode->i_sb->s_inode_list_lock protects:
 *   inode->i_sb->s_inodes, inode->i_sb_list
33
 * bdi->wb.list_lock protects:
34
 *   bdi->wb.b_{dirty,io,more_io,dirty_time}, inode->i_io_list
35 36
 * inode_hash_lock protects:
 *   inode_hashtable, inode->i_hash
37 38
 *
 * Lock ordering:
39
 *
40
 * inode->i_sb->s_inode_list_lock
41
 *   inode->i_lock
42
 *     Inode LRU list locks
43
 *
44
 * bdi->wb.list_lock
45
 *   inode->i_lock
46 47
 *
 * inode_hash_lock
48
 *   inode->i_sb->s_inode_list_lock
49 50 51 52
 *   inode->i_lock
 *
 * iunique_lock
 *   inode_hash_lock
53 54
 */

55 56
static unsigned int i_hash_mask __read_mostly;
static unsigned int i_hash_shift __read_mostly;
57 58
static struct hlist_head *inode_hashtable __read_mostly;
static __cacheline_aligned_in_smp DEFINE_SPINLOCK(inode_hash_lock);
L
Linus Torvalds 已提交
59

J
Jens Axboe 已提交
60 61 62 63 64 65 66 67
/*
 * Empty aops. Can be used for the cases where the user does not
 * define any of the address_space operations.
 */
const struct address_space_operations empty_aops = {
};
EXPORT_SYMBOL(empty_aops);

L
Linus Torvalds 已提交
68 69 70 71 72
/*
 * Statistics gathering..
 */
struct inodes_stat_t inodes_stat;

73 74
static DEFINE_PER_CPU(unsigned long, nr_inodes);
static DEFINE_PER_CPU(unsigned long, nr_unused);
75

76
static struct kmem_cache *inode_cachep __read_mostly;
L
Linus Torvalds 已提交
77

78
static long get_nr_inodes(void)
79
{
80
	int i;
81
	long sum = 0;
82 83 84
	for_each_possible_cpu(i)
		sum += per_cpu(nr_inodes, i);
	return sum < 0 ? 0 : sum;
85 86
}

87
static inline long get_nr_inodes_unused(void)
88
{
89
	int i;
90
	long sum = 0;
91 92 93
	for_each_possible_cpu(i)
		sum += per_cpu(nr_unused, i);
	return sum < 0 ? 0 : sum;
94 95
}

96
long get_nr_dirty_inodes(void)
97
{
98
	/* not actually dirty inodes, but a wild approximation */
99
	long nr_dirty = get_nr_inodes() - get_nr_inodes_unused();
100 101 102 103 104 105 106
	return nr_dirty > 0 ? nr_dirty : 0;
}

/*
 * Handle nr_inode sysctl
 */
#ifdef CONFIG_SYSCTL
107
int proc_nr_inodes(struct ctl_table *table, int write,
108 109 110
		   void __user *buffer, size_t *lenp, loff_t *ppos)
{
	inodes_stat.nr_inodes = get_nr_inodes();
111
	inodes_stat.nr_unused = get_nr_inodes_unused();
112
	return proc_doulongvec_minmax(table, write, buffer, lenp, ppos);
113 114 115
}
#endif

116 117 118 119 120
static int no_open(struct inode *inode, struct file *file)
{
	return -ENXIO;
}

D
David Chinner 已提交
121
/**
122
 * inode_init_always - perform inode structure initialisation
R
Randy Dunlap 已提交
123 124
 * @sb: superblock inode belongs to
 * @inode: inode to initialise
D
David Chinner 已提交
125 126 127 128
 *
 * These are initializations that need to be done on every inode
 * allocation as the fields are not initialised by slab allocation.
 */
129
int inode_init_always(struct super_block *sb, struct inode *inode)
L
Linus Torvalds 已提交
130
{
131
	static const struct inode_operations empty_iops;
132
	static const struct file_operations no_open_fops = {.open = no_open};
133
	struct address_space *const mapping = &inode->i_data;
D
David Chinner 已提交
134 135 136 137 138 139

	inode->i_sb = sb;
	inode->i_blkbits = sb->s_blocksize_bits;
	inode->i_flags = 0;
	atomic_set(&inode->i_count, 1);
	inode->i_op = &empty_iops;
140
	inode->i_fop = &no_open_fops;
M
Miklos Szeredi 已提交
141
	inode->__i_nlink = 1;
142
	inode->i_opflags = 0;
143 144
	if (sb->s_xattr)
		inode->i_opflags |= IOP_XATTR;
145 146
	i_uid_write(inode, 0);
	i_gid_write(inode, 0);
D
David Chinner 已提交
147 148 149 150 151 152 153 154
	atomic_set(&inode->i_writecount, 0);
	inode->i_size = 0;
	inode->i_blocks = 0;
	inode->i_bytes = 0;
	inode->i_generation = 0;
	inode->i_pipe = NULL;
	inode->i_bdev = NULL;
	inode->i_cdev = NULL;
A
Al Viro 已提交
155
	inode->i_link = NULL;
A
Al Viro 已提交
156
	inode->i_dir_seq = 0;
D
David Chinner 已提交
157 158
	inode->i_rdev = 0;
	inode->dirtied_when = 0;
M
Mimi Zohar 已提交
159

160 161 162 163 164 165
#ifdef CONFIG_CGROUP_WRITEBACK
	inode->i_wb_frn_winner = 0;
	inode->i_wb_frn_avg_time = 0;
	inode->i_wb_frn_history = 0;
#endif

M
Mimi Zohar 已提交
166
	if (security_inode_alloc(inode))
167
		goto out;
D
David Chinner 已提交
168 169 170
	spin_lock_init(&inode->i_lock);
	lockdep_set_class(&inode->i_lock, &sb->s_type->i_lock_key);

171 172
	init_rwsem(&inode->i_rwsem);
	lockdep_set_class(&inode->i_rwsem, &sb->s_type->i_mutex_key);
D
David Chinner 已提交
173

C
Christoph Hellwig 已提交
174
	atomic_set(&inode->i_dio_count, 0);
D
David Chinner 已提交
175 176 177 178

	mapping->a_ops = &empty_aops;
	mapping->host = inode;
	mapping->flags = 0;
179
	atomic_set(&mapping->i_mmap_writable, 0);
H
Hugh Dickins 已提交
180
	mapping_set_gfp_mask(mapping, GFP_HIGHUSER_MOVABLE);
181
	mapping->private_data = NULL;
D
David Chinner 已提交
182 183 184
	mapping->writeback_index = 0;
	inode->i_private = NULL;
	inode->i_mapping = mapping;
A
Al Viro 已提交
185
	INIT_HLIST_HEAD(&inode->i_dentry);	/* buggered by rcu freeing */
A
Al Viro 已提交
186 187 188
#ifdef CONFIG_FS_POSIX_ACL
	inode->i_acl = inode->i_default_acl = ACL_NOT_CACHED;
#endif
D
David Chinner 已提交
189

190 191 192
#ifdef CONFIG_FSNOTIFY
	inode->i_fsnotify_mask = 0;
#endif
193
	inode->i_flctx = NULL;
194
	this_cpu_inc(nr_inodes);
195

196 197 198
	return 0;
out:
	return -ENOMEM;
L
Linus Torvalds 已提交
199
}
D
David Chinner 已提交
200 201 202 203 204 205 206 207 208 209 210
EXPORT_SYMBOL(inode_init_always);

static struct inode *alloc_inode(struct super_block *sb)
{
	struct inode *inode;

	if (sb->s_op->alloc_inode)
		inode = sb->s_op->alloc_inode(sb);
	else
		inode = kmem_cache_alloc(inode_cachep, GFP_KERNEL);

211 212 213 214 215 216 217 218 219 220 221 222
	if (!inode)
		return NULL;

	if (unlikely(inode_init_always(sb, inode))) {
		if (inode->i_sb->s_op->destroy_inode)
			inode->i_sb->s_op->destroy_inode(inode);
		else
			kmem_cache_free(inode_cachep, inode);
		return NULL;
	}

	return inode;
D
David Chinner 已提交
223
}
L
Linus Torvalds 已提交
224

225 226 227 228 229 230
void free_inode_nonrcu(struct inode *inode)
{
	kmem_cache_free(inode_cachep, inode);
}
EXPORT_SYMBOL(free_inode_nonrcu);

C
Christoph Hellwig 已提交
231
void __destroy_inode(struct inode *inode)
L
Linus Torvalds 已提交
232
{
233
	BUG_ON(inode_has_buffers(inode));
234
	inode_detach_wb(inode);
L
Linus Torvalds 已提交
235
	security_inode_free(inode);
236
	fsnotify_inode_delete(inode);
237
	locks_free_lock_context(inode);
M
Miklos Szeredi 已提交
238 239 240 241 242
	if (!inode->i_nlink) {
		WARN_ON(atomic_long_read(&inode->i_sb->s_remove_count) == 0);
		atomic_long_dec(&inode->i_sb->s_remove_count);
	}

A
Al Viro 已提交
243
#ifdef CONFIG_FS_POSIX_ACL
244
	if (inode->i_acl && !is_uncached_acl(inode->i_acl))
A
Al Viro 已提交
245
		posix_acl_release(inode->i_acl);
246
	if (inode->i_default_acl && !is_uncached_acl(inode->i_default_acl))
A
Al Viro 已提交
247 248
		posix_acl_release(inode->i_default_acl);
#endif
249
	this_cpu_dec(nr_inodes);
C
Christoph Hellwig 已提交
250 251 252
}
EXPORT_SYMBOL(__destroy_inode);

N
Nick Piggin 已提交
253 254 255 256 257 258
static void i_callback(struct rcu_head *head)
{
	struct inode *inode = container_of(head, struct inode, i_rcu);
	kmem_cache_free(inode_cachep, inode);
}

C
Christoph Hellwig 已提交
259
static void destroy_inode(struct inode *inode)
C
Christoph Hellwig 已提交
260
{
N
Nick Piggin 已提交
261
	BUG_ON(!list_empty(&inode->i_lru));
C
Christoph Hellwig 已提交
262
	__destroy_inode(inode);
L
Linus Torvalds 已提交
263 264 265
	if (inode->i_sb->s_op->destroy_inode)
		inode->i_sb->s_op->destroy_inode(inode);
	else
N
Nick Piggin 已提交
266
		call_rcu(&inode->i_rcu, i_callback);
L
Linus Torvalds 已提交
267 268
}

M
Miklos Szeredi 已提交
269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337
/**
 * drop_nlink - directly drop an inode's link count
 * @inode: inode
 *
 * This is a low-level filesystem helper to replace any
 * direct filesystem manipulation of i_nlink.  In cases
 * where we are attempting to track writes to the
 * filesystem, a decrement to zero means an imminent
 * write when the file is truncated and actually unlinked
 * on the filesystem.
 */
void drop_nlink(struct inode *inode)
{
	WARN_ON(inode->i_nlink == 0);
	inode->__i_nlink--;
	if (!inode->i_nlink)
		atomic_long_inc(&inode->i_sb->s_remove_count);
}
EXPORT_SYMBOL(drop_nlink);

/**
 * clear_nlink - directly zero an inode's link count
 * @inode: inode
 *
 * This is a low-level filesystem helper to replace any
 * direct filesystem manipulation of i_nlink.  See
 * drop_nlink() for why we care about i_nlink hitting zero.
 */
void clear_nlink(struct inode *inode)
{
	if (inode->i_nlink) {
		inode->__i_nlink = 0;
		atomic_long_inc(&inode->i_sb->s_remove_count);
	}
}
EXPORT_SYMBOL(clear_nlink);

/**
 * set_nlink - directly set an inode's link count
 * @inode: inode
 * @nlink: new nlink (should be non-zero)
 *
 * This is a low-level filesystem helper to replace any
 * direct filesystem manipulation of i_nlink.
 */
void set_nlink(struct inode *inode, unsigned int nlink)
{
	if (!nlink) {
		clear_nlink(inode);
	} else {
		/* Yes, some filesystems do change nlink from zero to one */
		if (inode->i_nlink == 0)
			atomic_long_dec(&inode->i_sb->s_remove_count);

		inode->__i_nlink = nlink;
	}
}
EXPORT_SYMBOL(set_nlink);

/**
 * inc_nlink - directly increment an inode's link count
 * @inode: inode
 *
 * This is a low-level filesystem helper to replace any
 * direct filesystem manipulation of i_nlink.  Currently,
 * it is only here for parity with dec_nlink().
 */
void inc_nlink(struct inode *inode)
{
338 339
	if (unlikely(inode->i_nlink == 0)) {
		WARN_ON(!(inode->i_state & I_LINKABLE));
M
Miklos Szeredi 已提交
340
		atomic_long_dec(&inode->i_sb->s_remove_count);
341
	}
M
Miklos Szeredi 已提交
342 343 344 345 346

	inode->__i_nlink++;
}
EXPORT_SYMBOL(inc_nlink);

347 348 349
void address_space_init_once(struct address_space *mapping)
{
	memset(mapping, 0, sizeof(*mapping));
350
	INIT_RADIX_TREE(&mapping->page_tree, GFP_ATOMIC | __GFP_ACCOUNT);
351
	spin_lock_init(&mapping->tree_lock);
352
	init_rwsem(&mapping->i_mmap_rwsem);
353 354
	INIT_LIST_HEAD(&mapping->private_list);
	spin_lock_init(&mapping->private_lock);
355
	mapping->i_mmap = RB_ROOT;
356 357 358
}
EXPORT_SYMBOL(address_space_init_once);

L
Linus Torvalds 已提交
359 360 361 362 363 364 365 366 367 368
/*
 * These are initializations that only need to be done
 * once, because the fields are idempotent across use
 * of the inode, so let the slab aware of that.
 */
void inode_init_once(struct inode *inode)
{
	memset(inode, 0, sizeof(*inode));
	INIT_HLIST_NODE(&inode->i_hash);
	INIT_LIST_HEAD(&inode->i_devices);
369
	INIT_LIST_HEAD(&inode->i_io_list);
370
	INIT_LIST_HEAD(&inode->i_wb_list);
N
Nick Piggin 已提交
371
	INIT_LIST_HEAD(&inode->i_lru);
372
	address_space_init_once(&inode->i_data);
L
Linus Torvalds 已提交
373 374 375 376
	i_size_ordered_init(inode);
}
EXPORT_SYMBOL(inode_init_once);

377
static void init_once(void *foo)
L
Linus Torvalds 已提交
378
{
379
	struct inode *inode = (struct inode *) foo;
L
Linus Torvalds 已提交
380

C
Christoph Lameter 已提交
381
	inode_init_once(inode);
L
Linus Torvalds 已提交
382 383 384
}

/*
385
 * inode->i_lock must be held
L
Linus Torvalds 已提交
386
 */
387
void __iget(struct inode *inode)
L
Linus Torvalds 已提交
388
{
389 390
	atomic_inc(&inode->i_count);
}
391

A
Al Viro 已提交
392 393 394 395 396 397 398 399 400
/*
 * get additional reference to inode; caller must already hold one.
 */
void ihold(struct inode *inode)
{
	WARN_ON(atomic_inc_return(&inode->i_count) < 2);
}
EXPORT_SYMBOL(ihold);

401 402
static void inode_lru_list_add(struct inode *inode)
{
403
	if (list_lru_add(&inode->i_sb->s_inode_lru, &inode->i_lru))
404
		this_cpu_inc(nr_unused);
405 406
	else
		inode->i_state |= I_REFERENCED;
407
}
408

409 410 411 412 413 414 415
/*
 * Add inode to LRU if needed (inode is unused and clean).
 *
 * Needs inode->i_lock held.
 */
void inode_add_lru(struct inode *inode)
{
416 417
	if (!(inode->i_state & (I_DIRTY_ALL | I_SYNC |
				I_FREEING | I_WILL_FREE)) &&
418 419 420 421 422
	    !atomic_read(&inode->i_count) && inode->i_sb->s_flags & MS_ACTIVE)
		inode_lru_list_add(inode);
}


423 424
static void inode_lru_list_del(struct inode *inode)
{
425 426

	if (list_lru_del(&inode->i_sb->s_inode_lru, &inode->i_lru))
427
		this_cpu_dec(nr_unused);
L
Linus Torvalds 已提交
428 429
}

430 431 432 433 434 435
/**
 * inode_sb_list_add - add inode to the superblock list of inodes
 * @inode: inode to add
 */
void inode_sb_list_add(struct inode *inode)
{
436
	spin_lock(&inode->i_sb->s_inode_list_lock);
437
	list_add(&inode->i_sb_list, &inode->i_sb->s_inodes);
438
	spin_unlock(&inode->i_sb->s_inode_list_lock);
439 440 441
}
EXPORT_SYMBOL_GPL(inode_sb_list_add);

442
static inline void inode_sb_list_del(struct inode *inode)
443
{
444
	if (!list_empty(&inode->i_sb_list)) {
445
		spin_lock(&inode->i_sb->s_inode_list_lock);
446
		list_del_init(&inode->i_sb_list);
447
		spin_unlock(&inode->i_sb->s_inode_list_lock);
448
	}
449 450
}

451 452 453 454 455 456
static unsigned long hash(struct super_block *sb, unsigned long hashval)
{
	unsigned long tmp;

	tmp = (hashval * (unsigned long)sb) ^ (GOLDEN_RATIO_PRIME + hashval) /
			L1_CACHE_BYTES;
457 458
	tmp = tmp ^ ((tmp ^ GOLDEN_RATIO_PRIME) >> i_hash_shift);
	return tmp & i_hash_mask;
459 460 461 462 463 464 465 466 467 468 469 470
}

/**
 *	__insert_inode_hash - hash an inode
 *	@inode: unhashed inode
 *	@hashval: unsigned long value used to locate this object in the
 *		inode_hashtable.
 *
 *	Add an inode to the inode hash for this superblock.
 */
void __insert_inode_hash(struct inode *inode, unsigned long hashval)
{
471 472
	struct hlist_head *b = inode_hashtable + hash(inode->i_sb, hashval);

473
	spin_lock(&inode_hash_lock);
474
	spin_lock(&inode->i_lock);
475
	hlist_add_head(&inode->i_hash, b);
476
	spin_unlock(&inode->i_lock);
477
	spin_unlock(&inode_hash_lock);
478 479 480 481
}
EXPORT_SYMBOL(__insert_inode_hash);

/**
482
 *	__remove_inode_hash - remove an inode from the hash
483 484 485 486
 *	@inode: inode to unhash
 *
 *	Remove an inode from the superblock.
 */
487
void __remove_inode_hash(struct inode *inode)
488
{
489
	spin_lock(&inode_hash_lock);
490
	spin_lock(&inode->i_lock);
491
	hlist_del_init(&inode->i_hash);
492
	spin_unlock(&inode->i_lock);
493
	spin_unlock(&inode_hash_lock);
494
}
495
EXPORT_SYMBOL(__remove_inode_hash);
496

497
void clear_inode(struct inode *inode)
A
Al Viro 已提交
498 499
{
	might_sleep();
500 501 502 503 504 505
	/*
	 * We have to cycle tree_lock here because reclaim can be still in the
	 * process of removing the last page (in __delete_from_page_cache())
	 * and we must not free mapping under it.
	 */
	spin_lock_irq(&inode->i_data.tree_lock);
A
Al Viro 已提交
506
	BUG_ON(inode->i_data.nrpages);
507
	BUG_ON(inode->i_data.nrexceptional);
508
	spin_unlock_irq(&inode->i_data.tree_lock);
A
Al Viro 已提交
509 510 511
	BUG_ON(!list_empty(&inode->i_data.private_list));
	BUG_ON(!(inode->i_state & I_FREEING));
	BUG_ON(inode->i_state & I_CLEAR);
512
	BUG_ON(!list_empty(&inode->i_wb_list));
N
Nick Piggin 已提交
513
	/* don't need i_lock here, no concurrent mods to i_state */
A
Al Viro 已提交
514 515
	inode->i_state = I_FREEING | I_CLEAR;
}
516
EXPORT_SYMBOL(clear_inode);
A
Al Viro 已提交
517

D
Dave Chinner 已提交
518 519 520 521 522 523 524 525 526 527 528 529 530
/*
 * Free the inode passed in, removing it from the lists it is still connected
 * to. We remove any pages still attached to the inode and wait for any IO that
 * is still in progress before finally destroying the inode.
 *
 * An inode must already be marked I_FREEING so that we avoid the inode being
 * moved back onto lists if we race with other code that manipulates the lists
 * (e.g. writeback_single_inode). The caller is responsible for setting this.
 *
 * An inode must already be removed from the LRU list before being evicted from
 * the cache. This should occur atomically with setting the I_FREEING state
 * flag, so no inodes here should ever be on the LRU when being evicted.
 */
531
static void evict(struct inode *inode)
532 533 534
{
	const struct super_operations *op = inode->i_sb->s_op;

D
Dave Chinner 已提交
535 536 537
	BUG_ON(!(inode->i_state & I_FREEING));
	BUG_ON(!list_empty(&inode->i_lru));

538 539
	if (!list_empty(&inode->i_io_list))
		inode_io_list_del(inode);
540

541 542
	inode_sb_list_del(inode);

543 544 545 546 547 548 549
	/*
	 * Wait for flusher thread to be done with the inode so that filesystem
	 * does not start destroying it while writeback is still running. Since
	 * the inode has I_FREEING set, flusher thread won't start new work on
	 * the inode.  We just have to wait for running writeback to finish.
	 */
	inode_wait_for_writeback(inode);
550

A
Al Viro 已提交
551 552
	if (op->evict_inode) {
		op->evict_inode(inode);
553
	} else {
554
		truncate_inode_pages_final(&inode->i_data);
555
		clear_inode(inode);
556
	}
557 558 559 560
	if (S_ISBLK(inode->i_mode) && inode->i_bdev)
		bd_forget(inode);
	if (S_ISCHR(inode->i_mode) && inode->i_cdev)
		cd_forget(inode);
D
Dave Chinner 已提交
561 562 563 564 565 566 567 568 569

	remove_inode_hash(inode);

	spin_lock(&inode->i_lock);
	wake_up_bit(&inode->i_state, __I_NEW);
	BUG_ON(inode->i_state != (I_FREEING | I_CLEAR));
	spin_unlock(&inode->i_lock);

	destroy_inode(inode);
570 571
}

L
Linus Torvalds 已提交
572 573 574 575 576 577 578 579 580 581 582 583
/*
 * dispose_list - dispose of the contents of a local list
 * @head: the head of the list to free
 *
 * Dispose-list gets a local list with local inodes in it, so it doesn't
 * need to worry about list corruption and SMP locks.
 */
static void dispose_list(struct list_head *head)
{
	while (!list_empty(head)) {
		struct inode *inode;

N
Nick Piggin 已提交
584 585
		inode = list_first_entry(head, struct inode, i_lru);
		list_del_init(&inode->i_lru);
L
Linus Torvalds 已提交
586

587
		evict(inode);
588
		cond_resched();
L
Linus Torvalds 已提交
589 590 591
	}
}

A
Al Viro 已提交
592 593 594 595 596 597 598 599
/**
 * evict_inodes	- evict all evictable inodes for a superblock
 * @sb:		superblock to operate on
 *
 * Make sure that no inodes with zero refcount are retained.  This is
 * called by superblock shutdown after having MS_ACTIVE flag removed,
 * so any inode reaching zero refcount during or after that call will
 * be immediately evicted.
L
Linus Torvalds 已提交
600
 */
A
Al Viro 已提交
601
void evict_inodes(struct super_block *sb)
L
Linus Torvalds 已提交
602
{
A
Al Viro 已提交
603 604
	struct inode *inode, *next;
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
605

606
again:
607
	spin_lock(&sb->s_inode_list_lock);
A
Al Viro 已提交
608 609
	list_for_each_entry_safe(inode, next, &sb->s_inodes, i_sb_list) {
		if (atomic_read(&inode->i_count))
N
Nick Piggin 已提交
610
			continue;
611 612 613 614

		spin_lock(&inode->i_lock);
		if (inode->i_state & (I_NEW | I_FREEING | I_WILL_FREE)) {
			spin_unlock(&inode->i_lock);
L
Linus Torvalds 已提交
615
			continue;
616
		}
A
Al Viro 已提交
617 618

		inode->i_state |= I_FREEING;
619
		inode_lru_list_del(inode);
620
		spin_unlock(&inode->i_lock);
621
		list_add(&inode->i_lru, &dispose);
622 623 624 625 626 627 628 629 630 631 632 633

		/*
		 * We can have a ton of inodes to evict at unmount time given
		 * enough memory, check to see if we need to go to sleep for a
		 * bit so we don't livelock.
		 */
		if (need_resched()) {
			spin_unlock(&sb->s_inode_list_lock);
			cond_resched();
			dispose_list(&dispose);
			goto again;
		}
L
Linus Torvalds 已提交
634
	}
635
	spin_unlock(&sb->s_inode_list_lock);
A
Al Viro 已提交
636 637

	dispose_list(&dispose);
L
Linus Torvalds 已提交
638 639 640
}

/**
641 642
 * invalidate_inodes	- attempt to free all inodes on a superblock
 * @sb:		superblock to operate on
643
 * @kill_dirty: flag to guide handling of dirty inodes
L
Linus Torvalds 已提交
644
 *
645 646
 * Attempts to free all inodes for a given superblock.  If there were any
 * busy inodes return a non-zero value, else zero.
647 648
 * If @kill_dirty is set, discard dirty inodes too, otherwise treat
 * them as busy.
L
Linus Torvalds 已提交
649
 */
650
int invalidate_inodes(struct super_block *sb, bool kill_dirty)
L
Linus Torvalds 已提交
651
{
652
	int busy = 0;
653 654
	struct inode *inode, *next;
	LIST_HEAD(dispose);
L
Linus Torvalds 已提交
655

656
	spin_lock(&sb->s_inode_list_lock);
657
	list_for_each_entry_safe(inode, next, &sb->s_inodes, i_sb_list) {
658 659 660
		spin_lock(&inode->i_lock);
		if (inode->i_state & (I_NEW | I_FREEING | I_WILL_FREE)) {
			spin_unlock(&inode->i_lock);
N
Nick Piggin 已提交
661
			continue;
662
		}
663
		if (inode->i_state & I_DIRTY_ALL && !kill_dirty) {
664
			spin_unlock(&inode->i_lock);
665 666 667
			busy = 1;
			continue;
		}
668
		if (atomic_read(&inode->i_count)) {
669
			spin_unlock(&inode->i_lock);
670
			busy = 1;
L
Linus Torvalds 已提交
671 672
			continue;
		}
673 674

		inode->i_state |= I_FREEING;
675
		inode_lru_list_del(inode);
676
		spin_unlock(&inode->i_lock);
677
		list_add(&inode->i_lru, &dispose);
L
Linus Torvalds 已提交
678
	}
679
	spin_unlock(&sb->s_inode_list_lock);
L
Linus Torvalds 已提交
680

681
	dispose_list(&dispose);
L
Linus Torvalds 已提交
682 683 684 685 686

	return busy;
}

/*
687
 * Isolate the inode from the LRU in preparation for freeing it.
L
Linus Torvalds 已提交
688 689
 *
 * Any inodes which are pinned purely because of attached pagecache have their
690 691
 * pagecache removed.  If the inode has metadata buffers attached to
 * mapping->private_list then try to remove them.
L
Linus Torvalds 已提交
692
 *
693 694 695 696 697 698 699
 * If the inode has the I_REFERENCED flag set, then it means that it has been
 * used recently - the flag is set in iput_final(). When we encounter such an
 * inode, clear the flag and move it to the back of the LRU so it gets another
 * pass through the LRU before it gets reclaimed. This is necessary because of
 * the fact we are doing lazy LRU updates to minimise lock contention so the
 * LRU does not have strict ordering. Hence we don't want to reclaim inodes
 * with this flag set because they are the inodes that are out of order.
L
Linus Torvalds 已提交
700
 */
701 702
static enum lru_status inode_lru_isolate(struct list_head *item,
		struct list_lru_one *lru, spinlock_t *lru_lock, void *arg)
L
Linus Torvalds 已提交
703
{
704 705
	struct list_head *freeable = arg;
	struct inode	*inode = container_of(item, struct inode, i_lru);
L
Linus Torvalds 已提交
706

707 708 709 710 711 712
	/*
	 * we are inverting the lru lock/inode->i_lock here, so use a trylock.
	 * If we fail to get the lock, just skip it.
	 */
	if (!spin_trylock(&inode->i_lock))
		return LRU_SKIP;
L
Linus Torvalds 已提交
713

714 715 716 717 718 719
	/*
	 * Referenced or dirty inodes are still in use. Give them another pass
	 * through the LRU as we canot reclaim them now.
	 */
	if (atomic_read(&inode->i_count) ||
	    (inode->i_state & ~I_REFERENCED)) {
720
		list_lru_isolate(lru, &inode->i_lru);
721 722 723 724
		spin_unlock(&inode->i_lock);
		this_cpu_dec(nr_unused);
		return LRU_REMOVED;
	}
L
Linus Torvalds 已提交
725

726 727 728 729 730 731
	/* recently referenced inodes get one more pass */
	if (inode->i_state & I_REFERENCED) {
		inode->i_state &= ~I_REFERENCED;
		spin_unlock(&inode->i_lock);
		return LRU_ROTATE;
	}
L
Linus Torvalds 已提交
732

733 734 735 736 737 738 739 740 741 742 743 744 745
	if (inode_has_buffers(inode) || inode->i_data.nrpages) {
		__iget(inode);
		spin_unlock(&inode->i_lock);
		spin_unlock(lru_lock);
		if (remove_inode_buffers(inode)) {
			unsigned long reap;
			reap = invalidate_mapping_pages(&inode->i_data, 0, -1);
			if (current_is_kswapd())
				__count_vm_events(KSWAPD_INODESTEAL, reap);
			else
				__count_vm_events(PGINODESTEAL, reap);
			if (current->reclaim_state)
				current->reclaim_state->reclaimed_slab += reap;
746
		}
747 748 749 750
		iput(inode);
		spin_lock(lru_lock);
		return LRU_RETRY;
	}
751

752 753
	WARN_ON(inode->i_state & I_NEW);
	inode->i_state |= I_FREEING;
754
	list_lru_isolate_move(lru, &inode->i_lru, freeable);
755
	spin_unlock(&inode->i_lock);
756

757 758 759
	this_cpu_dec(nr_unused);
	return LRU_REMOVED;
}
N
Nick Piggin 已提交
760

761 762 763 764 765 766
/*
 * Walk the superblock inode LRU for freeable inodes and attempt to free them.
 * This is called from the superblock shrinker function with a number of inodes
 * to trim from the LRU. Inodes to be freed are moved to a temporary list and
 * then are freed outside inode_lock by dispose_list().
 */
767
long prune_icache_sb(struct super_block *sb, struct shrink_control *sc)
768 769 770
{
	LIST_HEAD(freeable);
	long freed;
L
Linus Torvalds 已提交
771

772 773
	freed = list_lru_shrink_walk(&sb->s_inode_lru, sc,
				     inode_lru_isolate, &freeable);
L
Linus Torvalds 已提交
774
	dispose_list(&freeable);
775
	return freed;
L
Linus Torvalds 已提交
776 777 778 779 780 781
}

static void __wait_on_freeing_inode(struct inode *inode);
/*
 * Called with the inode lock held.
 */
782 783 784 785
static struct inode *find_inode(struct super_block *sb,
				struct hlist_head *head,
				int (*test)(struct inode *, void *),
				void *data)
L
Linus Torvalds 已提交
786
{
787
	struct inode *inode = NULL;
L
Linus Torvalds 已提交
788 789

repeat:
790
	hlist_for_each_entry(inode, head, i_hash) {
791
		if (inode->i_sb != sb)
L
Linus Torvalds 已提交
792
			continue;
793
		if (!test(inode, data))
L
Linus Torvalds 已提交
794
			continue;
795
		spin_lock(&inode->i_lock);
A
Al Viro 已提交
796
		if (inode->i_state & (I_FREEING|I_WILL_FREE)) {
L
Linus Torvalds 已提交
797 798 799
			__wait_on_freeing_inode(inode);
			goto repeat;
		}
800
		__iget(inode);
801
		spin_unlock(&inode->i_lock);
802
		return inode;
L
Linus Torvalds 已提交
803
	}
804
	return NULL;
L
Linus Torvalds 已提交
805 806 807 808 809 810
}

/*
 * find_inode_fast is the fast path version of find_inode, see the comment at
 * iget_locked for details.
 */
811 812
static struct inode *find_inode_fast(struct super_block *sb,
				struct hlist_head *head, unsigned long ino)
L
Linus Torvalds 已提交
813
{
814
	struct inode *inode = NULL;
L
Linus Torvalds 已提交
815 816

repeat:
817
	hlist_for_each_entry(inode, head, i_hash) {
818
		if (inode->i_ino != ino)
L
Linus Torvalds 已提交
819
			continue;
820
		if (inode->i_sb != sb)
L
Linus Torvalds 已提交
821
			continue;
822
		spin_lock(&inode->i_lock);
A
Al Viro 已提交
823
		if (inode->i_state & (I_FREEING|I_WILL_FREE)) {
L
Linus Torvalds 已提交
824 825 826
			__wait_on_freeing_inode(inode);
			goto repeat;
		}
827
		__iget(inode);
828
		spin_unlock(&inode->i_lock);
829
		return inode;
L
Linus Torvalds 已提交
830
	}
831
	return NULL;
832 833
}

834 835 836 837
/*
 * Each cpu owns a range of LAST_INO_BATCH numbers.
 * 'shared_last_ino' is dirtied only once out of LAST_INO_BATCH allocations,
 * to renew the exhausted range.
838
 *
839 840 841 842 843 844 845 846 847
 * This does not significantly increase overflow rate because every CPU can
 * consume at most LAST_INO_BATCH-1 unused inode numbers. So there is
 * NR_CPUS*(LAST_INO_BATCH-1) wastage. At 4096 and 1024, this is ~0.1% of the
 * 2^32 range, and is a worst-case. Even a 50% wastage would only increase
 * overflow rate by 2x, which does not seem too significant.
 *
 * On a 32bit, non LFS stat() call, glibc will generate an EOVERFLOW
 * error if st_ino won't fit in target struct field. Use 32bit counter
 * here to attempt to avoid that.
848
 */
849 850 851
#define LAST_INO_BATCH 1024
static DEFINE_PER_CPU(unsigned int, last_ino);

852
unsigned int get_next_ino(void)
853
{
854 855
	unsigned int *p = &get_cpu_var(last_ino);
	unsigned int res = *p;
856

857 858 859 860 861 862 863 864 865
#ifdef CONFIG_SMP
	if (unlikely((res & (LAST_INO_BATCH-1)) == 0)) {
		static atomic_t shared_last_ino;
		int next = atomic_add_return(LAST_INO_BATCH, &shared_last_ino);

		res = next - LAST_INO_BATCH;
	}
#endif

866 867 868 869 870
	res++;
	/* get_next_ino should not provide a 0 inode number */
	if (unlikely(!res))
		res++;
	*p = res;
871 872
	put_cpu_var(last_ino);
	return res;
873
}
874
EXPORT_SYMBOL(get_next_ino);
875

876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898
/**
 *	new_inode_pseudo 	- obtain an inode
 *	@sb: superblock
 *
 *	Allocates a new inode for given superblock.
 *	Inode wont be chained in superblock s_inodes list
 *	This means :
 *	- fs can't be unmount
 *	- quotas, fsnotify, writeback can't work
 */
struct inode *new_inode_pseudo(struct super_block *sb)
{
	struct inode *inode = alloc_inode(sb);

	if (inode) {
		spin_lock(&inode->i_lock);
		inode->i_state = 0;
		spin_unlock(&inode->i_lock);
		INIT_LIST_HEAD(&inode->i_sb_list);
	}
	return inode;
}

L
Linus Torvalds 已提交
899 900 901 902
/**
 *	new_inode 	- obtain an inode
 *	@sb: superblock
 *
903
 *	Allocates a new inode for given superblock. The default gfp_mask
H
Hugh Dickins 已提交
904
 *	for allocations related to inode->i_mapping is GFP_HIGHUSER_MOVABLE.
905 906 907 908 909
 *	If HIGHMEM pages are unsuitable or it is known that pages allocated
 *	for the page cache are not reclaimable or migratable,
 *	mapping_set_gfp_mask() must be called with suitable flags on the
 *	newly created inode's mapping
 *
L
Linus Torvalds 已提交
910 911 912
 */
struct inode *new_inode(struct super_block *sb)
{
913
	struct inode *inode;
L
Linus Torvalds 已提交
914

915
	spin_lock_prefetch(&sb->s_inode_list_lock);
916

917 918
	inode = new_inode_pseudo(sb);
	if (inode)
919
		inode_sb_list_add(inode);
L
Linus Torvalds 已提交
920 921 922 923
	return inode;
}
EXPORT_SYMBOL(new_inode);

924
#ifdef CONFIG_DEBUG_LOCK_ALLOC
925 926
void lockdep_annotate_inode_mutex_key(struct inode *inode)
{
927
	if (S_ISDIR(inode->i_mode)) {
928 929
		struct file_system_type *type = inode->i_sb->s_type;

930
		/* Set new key only if filesystem hasn't already changed it */
931
		if (lockdep_match_class(&inode->i_rwsem, &type->i_mutex_key)) {
932 933 934
			/*
			 * ensure nobody is actually holding i_mutex
			 */
935 936 937
			// mutex_destroy(&inode->i_mutex);
			init_rwsem(&inode->i_rwsem);
			lockdep_set_class(&inode->i_rwsem,
938 939
					  &type->i_mutex_dir_key);
		}
940
	}
941 942
}
EXPORT_SYMBOL(lockdep_annotate_inode_mutex_key);
943
#endif
944 945 946 947 948 949 950 951 952 953 954

/**
 * unlock_new_inode - clear the I_NEW state and wake up any waiters
 * @inode:	new inode to unlock
 *
 * Called when the inode is fully initialised to clear the new state of the
 * inode and wake up anyone waiting for the inode to finish initialisation.
 */
void unlock_new_inode(struct inode *inode)
{
	lockdep_annotate_inode_mutex_key(inode);
955
	spin_lock(&inode->i_lock);
C
Christoph Hellwig 已提交
956 957
	WARN_ON(!(inode->i_state & I_NEW));
	inode->i_state &= ~I_NEW;
A
Al Viro 已提交
958
	smp_mb();
959 960
	wake_up_bit(&inode->i_state, __I_NEW);
	spin_unlock(&inode->i_lock);
L
Linus Torvalds 已提交
961 962 963
}
EXPORT_SYMBOL(unlock_new_inode);

964 965
/**
 * lock_two_nondirectories - take two i_mutexes on non-directory objects
966 967 968 969
 *
 * Lock any non-NULL argument that is not a directory.
 * Zero, one or two objects may be locked by this function.
 *
970 971 972 973 974
 * @inode1: first inode to lock
 * @inode2: second inode to lock
 */
void lock_two_nondirectories(struct inode *inode1, struct inode *inode2)
{
975 976 977 978
	if (inode1 > inode2)
		swap(inode1, inode2);

	if (inode1 && !S_ISDIR(inode1->i_mode))
A
Al Viro 已提交
979
		inode_lock(inode1);
980
	if (inode2 && !S_ISDIR(inode2->i_mode) && inode2 != inode1)
A
Al Viro 已提交
981
		inode_lock_nested(inode2, I_MUTEX_NONDIR2);
982 983 984 985 986 987 988 989 990 991
}
EXPORT_SYMBOL(lock_two_nondirectories);

/**
 * unlock_two_nondirectories - release locks from lock_two_nondirectories()
 * @inode1: first inode to unlock
 * @inode2: second inode to unlock
 */
void unlock_two_nondirectories(struct inode *inode1, struct inode *inode2)
{
992
	if (inode1 && !S_ISDIR(inode1->i_mode))
A
Al Viro 已提交
993
		inode_unlock(inode1);
994
	if (inode2 && !S_ISDIR(inode2->i_mode) && inode2 != inode1)
A
Al Viro 已提交
995
		inode_unlock(inode2);
996 997 998
}
EXPORT_SYMBOL(unlock_two_nondirectories);

C
Christoph Hellwig 已提交
999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014
/**
 * iget5_locked - obtain an inode from a mounted file system
 * @sb:		super block of file system
 * @hashval:	hash value (usually inode number) to get
 * @test:	callback used for comparisons between inodes
 * @set:	callback used to initialize a new struct inode
 * @data:	opaque data pointer to pass to @test and @set
 *
 * Search for the inode specified by @hashval and @data in the inode cache,
 * and if present it is return it with an increased reference count. This is
 * a generalized version of iget_locked() for file systems where the inode
 * number is not sufficient for unique identification of an inode.
 *
 * If the inode is not in cache, allocate a new inode and return it locked,
 * hashed, and with the I_NEW flag set. The file system gets to fill it in
 * before unlocking it via unlock_new_inode().
L
Linus Torvalds 已提交
1015
 *
C
Christoph Hellwig 已提交
1016 1017
 * Note both @test and @set are called with the inode_hash_lock held, so can't
 * sleep.
L
Linus Torvalds 已提交
1018
 */
C
Christoph Hellwig 已提交
1019 1020 1021
struct inode *iget5_locked(struct super_block *sb, unsigned long hashval,
		int (*test)(struct inode *, void *),
		int (*set)(struct inode *, void *), void *data)
L
Linus Torvalds 已提交
1022
{
C
Christoph Hellwig 已提交
1023
	struct hlist_head *head = inode_hashtable + hash(sb, hashval);
1024
	struct inode *inode;
1025
again:
C
Christoph Hellwig 已提交
1026 1027 1028 1029 1030 1031
	spin_lock(&inode_hash_lock);
	inode = find_inode(sb, head, test, data);
	spin_unlock(&inode_hash_lock);

	if (inode) {
		wait_on_inode(inode);
1032 1033 1034 1035
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
C
Christoph Hellwig 已提交
1036 1037 1038
		return inode;
	}

L
Linus Torvalds 已提交
1039 1040
	inode = alloc_inode(sb);
	if (inode) {
1041
		struct inode *old;
L
Linus Torvalds 已提交
1042

1043
		spin_lock(&inode_hash_lock);
L
Linus Torvalds 已提交
1044 1045 1046 1047 1048 1049
		/* We released the lock, so.. */
		old = find_inode(sb, head, test, data);
		if (!old) {
			if (set(inode, data))
				goto set_failed;

1050 1051
			spin_lock(&inode->i_lock);
			inode->i_state = I_NEW;
1052
			hlist_add_head(&inode->i_hash, head);
1053
			spin_unlock(&inode->i_lock);
1054
			inode_sb_list_add(inode);
1055
			spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067

			/* Return the locked inode with I_NEW set, the
			 * caller is responsible for filling in the contents
			 */
			return inode;
		}

		/*
		 * Uhhuh, somebody else created the same inode under
		 * us. Use the old inode instead of the one we just
		 * allocated.
		 */
1068
		spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1069 1070 1071
		destroy_inode(inode);
		inode = old;
		wait_on_inode(inode);
1072 1073 1074 1075
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
L
Linus Torvalds 已提交
1076 1077 1078 1079
	}
	return inode;

set_failed:
1080
	spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1081 1082 1083
	destroy_inode(inode);
	return NULL;
}
C
Christoph Hellwig 已提交
1084
EXPORT_SYMBOL(iget5_locked);
L
Linus Torvalds 已提交
1085

C
Christoph Hellwig 已提交
1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097
/**
 * iget_locked - obtain an inode from a mounted file system
 * @sb:		super block of file system
 * @ino:	inode number to get
 *
 * Search for the inode specified by @ino in the inode cache and if present
 * return it with an increased reference count. This is for file systems
 * where the inode number is sufficient for unique identification of an inode.
 *
 * If the inode is not in cache, allocate a new inode and return it locked,
 * hashed, and with the I_NEW flag set.  The file system gets to fill it in
 * before unlocking it via unlock_new_inode().
L
Linus Torvalds 已提交
1098
 */
C
Christoph Hellwig 已提交
1099
struct inode *iget_locked(struct super_block *sb, unsigned long ino)
L
Linus Torvalds 已提交
1100
{
C
Christoph Hellwig 已提交
1101
	struct hlist_head *head = inode_hashtable + hash(sb, ino);
1102
	struct inode *inode;
1103
again:
C
Christoph Hellwig 已提交
1104 1105 1106 1107 1108
	spin_lock(&inode_hash_lock);
	inode = find_inode_fast(sb, head, ino);
	spin_unlock(&inode_hash_lock);
	if (inode) {
		wait_on_inode(inode);
1109 1110 1111 1112
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
C
Christoph Hellwig 已提交
1113 1114 1115
		return inode;
	}

L
Linus Torvalds 已提交
1116 1117
	inode = alloc_inode(sb);
	if (inode) {
1118
		struct inode *old;
L
Linus Torvalds 已提交
1119

1120
		spin_lock(&inode_hash_lock);
L
Linus Torvalds 已提交
1121 1122 1123 1124
		/* We released the lock, so.. */
		old = find_inode_fast(sb, head, ino);
		if (!old) {
			inode->i_ino = ino;
1125 1126
			spin_lock(&inode->i_lock);
			inode->i_state = I_NEW;
1127
			hlist_add_head(&inode->i_hash, head);
1128
			spin_unlock(&inode->i_lock);
1129
			inode_sb_list_add(inode);
1130
			spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142

			/* Return the locked inode with I_NEW set, the
			 * caller is responsible for filling in the contents
			 */
			return inode;
		}

		/*
		 * Uhhuh, somebody else created the same inode under
		 * us. Use the old inode instead of the one we just
		 * allocated.
		 */
1143
		spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1144 1145 1146
		destroy_inode(inode);
		inode = old;
		wait_on_inode(inode);
1147 1148 1149 1150
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
L
Linus Torvalds 已提交
1151 1152 1153
	}
	return inode;
}
C
Christoph Hellwig 已提交
1154
EXPORT_SYMBOL(iget_locked);
L
Linus Torvalds 已提交
1155

1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167
/*
 * search the inode cache for a matching inode number.
 * If we find one, then the inode number we are trying to
 * allocate is not unique and so we should not use it.
 *
 * Returns 1 if the inode number is unique, 0 if it is not.
 */
static int test_inode_iunique(struct super_block *sb, unsigned long ino)
{
	struct hlist_head *b = inode_hashtable + hash(sb, ino);
	struct inode *inode;

1168
	spin_lock(&inode_hash_lock);
1169
	hlist_for_each_entry(inode, b, i_hash) {
1170 1171
		if (inode->i_ino == ino && inode->i_sb == sb) {
			spin_unlock(&inode_hash_lock);
1172
			return 0;
1173
		}
1174
	}
1175
	spin_unlock(&inode_hash_lock);
1176 1177 1178 1179

	return 1;
}

L
Linus Torvalds 已提交
1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195
/**
 *	iunique - get a unique inode number
 *	@sb: superblock
 *	@max_reserved: highest reserved inode number
 *
 *	Obtain an inode number that is unique on the system for a given
 *	superblock. This is used by file systems that have no natural
 *	permanent inode numbering system. An inode number is returned that
 *	is higher than the reserved limit but unique.
 *
 *	BUGS:
 *	With a large number of inodes live on the file system this function
 *	currently becomes quite slow.
 */
ino_t iunique(struct super_block *sb, ino_t max_reserved)
{
1196 1197 1198 1199 1200
	/*
	 * On a 32bit, non LFS stat() call, glibc will generate an EOVERFLOW
	 * error if st_ino won't fit in target struct field. Use 32bit counter
	 * here to attempt to avoid that.
	 */
1201
	static DEFINE_SPINLOCK(iunique_lock);
1202
	static unsigned int counter;
L
Linus Torvalds 已提交
1203
	ino_t res;
1204

1205
	spin_lock(&iunique_lock);
1206 1207 1208
	do {
		if (counter <= max_reserved)
			counter = max_reserved + 1;
L
Linus Torvalds 已提交
1209
		res = counter++;
1210 1211
	} while (!test_inode_iunique(sb, res));
	spin_unlock(&iunique_lock);
L
Linus Torvalds 已提交
1212

1213 1214
	return res;
}
L
Linus Torvalds 已提交
1215 1216 1217 1218
EXPORT_SYMBOL(iunique);

struct inode *igrab(struct inode *inode)
{
1219 1220
	spin_lock(&inode->i_lock);
	if (!(inode->i_state & (I_FREEING|I_WILL_FREE))) {
L
Linus Torvalds 已提交
1221
		__iget(inode);
1222 1223 1224
		spin_unlock(&inode->i_lock);
	} else {
		spin_unlock(&inode->i_lock);
L
Linus Torvalds 已提交
1225 1226 1227 1228 1229 1230
		/*
		 * Handle the case where s_op->clear_inode is not been
		 * called yet, and somebody is calling igrab
		 * while the inode is getting freed.
		 */
		inode = NULL;
1231
	}
L
Linus Torvalds 已提交
1232 1233 1234 1235 1236
	return inode;
}
EXPORT_SYMBOL(igrab);

/**
C
Christoph Hellwig 已提交
1237
 * ilookup5_nowait - search for an inode in the inode cache
L
Linus Torvalds 已提交
1238
 * @sb:		super block of file system to search
C
Christoph Hellwig 已提交
1239
 * @hashval:	hash value (usually inode number) to search for
L
Linus Torvalds 已提交
1240 1241 1242
 * @test:	callback used for comparisons between inodes
 * @data:	opaque data pointer to pass to @test
 *
C
Christoph Hellwig 已提交
1243
 * Search for the inode specified by @hashval and @data in the inode cache.
L
Linus Torvalds 已提交
1244 1245 1246
 * If the inode is in the cache, the inode is returned with an incremented
 * reference count.
 *
C
Christoph Hellwig 已提交
1247 1248
 * Note: I_NEW is not waited upon so you have to be very careful what you do
 * with the returned inode.  You probably should be using ilookup5() instead.
L
Linus Torvalds 已提交
1249
 *
1250
 * Note2: @test is called with the inode_hash_lock held, so can't sleep.
L
Linus Torvalds 已提交
1251
 */
C
Christoph Hellwig 已提交
1252 1253
struct inode *ilookup5_nowait(struct super_block *sb, unsigned long hashval,
		int (*test)(struct inode *, void *), void *data)
L
Linus Torvalds 已提交
1254
{
C
Christoph Hellwig 已提交
1255
	struct hlist_head *head = inode_hashtable + hash(sb, hashval);
L
Linus Torvalds 已提交
1256 1257
	struct inode *inode;

1258
	spin_lock(&inode_hash_lock);
L
Linus Torvalds 已提交
1259
	inode = find_inode(sb, head, test, data);
1260
	spin_unlock(&inode_hash_lock);
1261

C
Christoph Hellwig 已提交
1262
	return inode;
1263 1264 1265 1266 1267 1268 1269 1270 1271 1272
}
EXPORT_SYMBOL(ilookup5_nowait);

/**
 * ilookup5 - search for an inode in the inode cache
 * @sb:		super block of file system to search
 * @hashval:	hash value (usually inode number) to search for
 * @test:	callback used for comparisons between inodes
 * @data:	opaque data pointer to pass to @test
 *
C
Christoph Hellwig 已提交
1273 1274 1275
 * Search for the inode specified by @hashval and @data in the inode cache,
 * and if the inode is in the cache, return the inode with an incremented
 * reference count.  Waits on I_NEW before returning the inode.
1276
 * returned with an incremented reference count.
L
Linus Torvalds 已提交
1277
 *
C
Christoph Hellwig 已提交
1278 1279
 * This is a generalized version of ilookup() for file systems where the
 * inode number is not sufficient for unique identification of an inode.
L
Linus Torvalds 已提交
1280
 *
C
Christoph Hellwig 已提交
1281
 * Note: @test is called with the inode_hash_lock held, so can't sleep.
L
Linus Torvalds 已提交
1282 1283 1284 1285
 */
struct inode *ilookup5(struct super_block *sb, unsigned long hashval,
		int (*test)(struct inode *, void *), void *data)
{
1286 1287 1288 1289
	struct inode *inode;
again:
	inode = ilookup5_nowait(sb, hashval, test, data);
	if (inode) {
C
Christoph Hellwig 已提交
1290
		wait_on_inode(inode);
1291 1292 1293 1294 1295
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
	}
C
Christoph Hellwig 已提交
1296
	return inode;
L
Linus Torvalds 已提交
1297 1298 1299 1300 1301 1302 1303 1304
}
EXPORT_SYMBOL(ilookup5);

/**
 * ilookup - search for an inode in the inode cache
 * @sb:		super block of file system to search
 * @ino:	inode number to search for
 *
C
Christoph Hellwig 已提交
1305 1306
 * Search for the inode @ino in the inode cache, and if the inode is in the
 * cache, the inode is returned with an incremented reference count.
L
Linus Torvalds 已提交
1307 1308 1309 1310 1311
 */
struct inode *ilookup(struct super_block *sb, unsigned long ino)
{
	struct hlist_head *head = inode_hashtable + hash(sb, ino);
	struct inode *inode;
1312
again:
C
Christoph Hellwig 已提交
1313 1314 1315
	spin_lock(&inode_hash_lock);
	inode = find_inode_fast(sb, head, ino);
	spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1316

1317
	if (inode) {
C
Christoph Hellwig 已提交
1318
		wait_on_inode(inode);
1319 1320 1321 1322 1323
		if (unlikely(inode_unhashed(inode))) {
			iput(inode);
			goto again;
		}
	}
C
Christoph Hellwig 已提交
1324
	return inode;
L
Linus Torvalds 已提交
1325
}
C
Christoph Hellwig 已提交
1326
EXPORT_SYMBOL(ilookup);
L
Linus Torvalds 已提交
1327

1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377
/**
 * find_inode_nowait - find an inode in the inode cache
 * @sb:		super block of file system to search
 * @hashval:	hash value (usually inode number) to search for
 * @match:	callback used for comparisons between inodes
 * @data:	opaque data pointer to pass to @match
 *
 * Search for the inode specified by @hashval and @data in the inode
 * cache, where the helper function @match will return 0 if the inode
 * does not match, 1 if the inode does match, and -1 if the search
 * should be stopped.  The @match function must be responsible for
 * taking the i_lock spin_lock and checking i_state for an inode being
 * freed or being initialized, and incrementing the reference count
 * before returning 1.  It also must not sleep, since it is called with
 * the inode_hash_lock spinlock held.
 *
 * This is a even more generalized version of ilookup5() when the
 * function must never block --- find_inode() can block in
 * __wait_on_freeing_inode() --- or when the caller can not increment
 * the reference count because the resulting iput() might cause an
 * inode eviction.  The tradeoff is that the @match funtion must be
 * very carefully implemented.
 */
struct inode *find_inode_nowait(struct super_block *sb,
				unsigned long hashval,
				int (*match)(struct inode *, unsigned long,
					     void *),
				void *data)
{
	struct hlist_head *head = inode_hashtable + hash(sb, hashval);
	struct inode *inode, *ret_inode = NULL;
	int mval;

	spin_lock(&inode_hash_lock);
	hlist_for_each_entry(inode, head, i_hash) {
		if (inode->i_sb != sb)
			continue;
		mval = match(inode, hashval, data);
		if (mval == 0)
			continue;
		if (mval == 1)
			ret_inode = inode;
		goto out;
	}
out:
	spin_unlock(&inode_hash_lock);
	return ret_inode;
}
EXPORT_SYMBOL(find_inode_nowait);

A
Al Viro 已提交
1378 1379 1380 1381 1382 1383 1384
int insert_inode_locked(struct inode *inode)
{
	struct super_block *sb = inode->i_sb;
	ino_t ino = inode->i_ino;
	struct hlist_head *head = inode_hashtable + hash(sb, ino);

	while (1) {
1385
		struct inode *old = NULL;
1386
		spin_lock(&inode_hash_lock);
1387
		hlist_for_each_entry(old, head, i_hash) {
1388 1389 1390 1391
			if (old->i_ino != ino)
				continue;
			if (old->i_sb != sb)
				continue;
1392 1393 1394
			spin_lock(&old->i_lock);
			if (old->i_state & (I_FREEING|I_WILL_FREE)) {
				spin_unlock(&old->i_lock);
1395
				continue;
1396
			}
1397 1398
			break;
		}
1399
		if (likely(!old)) {
1400 1401
			spin_lock(&inode->i_lock);
			inode->i_state |= I_NEW;
A
Al Viro 已提交
1402
			hlist_add_head(&inode->i_hash, head);
1403
			spin_unlock(&inode->i_lock);
1404
			spin_unlock(&inode_hash_lock);
A
Al Viro 已提交
1405 1406 1407
			return 0;
		}
		__iget(old);
1408
		spin_unlock(&old->i_lock);
1409
		spin_unlock(&inode_hash_lock);
A
Al Viro 已提交
1410
		wait_on_inode(old);
A
Al Viro 已提交
1411
		if (unlikely(!inode_unhashed(old))) {
A
Al Viro 已提交
1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426
			iput(old);
			return -EBUSY;
		}
		iput(old);
	}
}
EXPORT_SYMBOL(insert_inode_locked);

int insert_inode_locked4(struct inode *inode, unsigned long hashval,
		int (*test)(struct inode *, void *), void *data)
{
	struct super_block *sb = inode->i_sb;
	struct hlist_head *head = inode_hashtable + hash(sb, hashval);

	while (1) {
1427 1428
		struct inode *old = NULL;

1429
		spin_lock(&inode_hash_lock);
1430
		hlist_for_each_entry(old, head, i_hash) {
1431 1432 1433 1434
			if (old->i_sb != sb)
				continue;
			if (!test(old, data))
				continue;
1435 1436 1437
			spin_lock(&old->i_lock);
			if (old->i_state & (I_FREEING|I_WILL_FREE)) {
				spin_unlock(&old->i_lock);
1438
				continue;
1439
			}
1440 1441
			break;
		}
1442
		if (likely(!old)) {
1443 1444
			spin_lock(&inode->i_lock);
			inode->i_state |= I_NEW;
A
Al Viro 已提交
1445
			hlist_add_head(&inode->i_hash, head);
1446
			spin_unlock(&inode->i_lock);
1447
			spin_unlock(&inode_hash_lock);
A
Al Viro 已提交
1448 1449 1450
			return 0;
		}
		__iget(old);
1451
		spin_unlock(&old->i_lock);
1452
		spin_unlock(&inode_hash_lock);
A
Al Viro 已提交
1453
		wait_on_inode(old);
A
Al Viro 已提交
1454
		if (unlikely(!inode_unhashed(old))) {
A
Al Viro 已提交
1455 1456 1457 1458 1459 1460 1461 1462
			iput(old);
			return -EBUSY;
		}
		iput(old);
	}
}
EXPORT_SYMBOL(insert_inode_locked4);

L
Linus Torvalds 已提交
1463

1464 1465 1466 1467 1468 1469 1470 1471 1472
int generic_delete_inode(struct inode *inode)
{
	return 1;
}
EXPORT_SYMBOL(generic_delete_inode);

/*
 * Called when we're dropping the last reference
 * to an inode.
1473
 *
1474 1475 1476 1477 1478
 * Call the FS "drop_inode()" function, defaulting to
 * the legacy UNIX filesystem behaviour.  If it tells
 * us to evict inode, do so.  Otherwise, retain inode
 * in cache if fs is alive, sync and evict if fs is
 * shutting down.
1479
 */
1480
static void iput_final(struct inode *inode)
L
Linus Torvalds 已提交
1481 1482
{
	struct super_block *sb = inode->i_sb;
1483 1484 1485
	const struct super_operations *op = inode->i_sb->s_op;
	int drop;

1486 1487
	WARN_ON(inode->i_state & I_NEW);

1488
	if (op->drop_inode)
1489 1490 1491
		drop = op->drop_inode(inode);
	else
		drop = generic_drop_inode(inode);
L
Linus Torvalds 已提交
1492

D
Dave Chinner 已提交
1493
	if (!drop && (sb->s_flags & MS_ACTIVE)) {
1494
		inode_add_lru(inode);
D
Dave Chinner 已提交
1495 1496 1497 1498
		spin_unlock(&inode->i_lock);
		return;
	}

1499
	if (!drop) {
1500
		inode->i_state |= I_WILL_FREE;
1501
		spin_unlock(&inode->i_lock);
L
Linus Torvalds 已提交
1502
		write_inode_now(inode, 1);
1503
		spin_lock(&inode->i_lock);
1504
		WARN_ON(inode->i_state & I_NEW);
1505
		inode->i_state &= ~I_WILL_FREE;
L
Linus Torvalds 已提交
1506
	}
N
Nick Piggin 已提交
1507

1508
	inode->i_state |= I_FREEING;
1509 1510
	if (!list_empty(&inode->i_lru))
		inode_lru_list_del(inode);
D
Dave Chinner 已提交
1511 1512
	spin_unlock(&inode->i_lock);

1513
	evict(inode);
L
Linus Torvalds 已提交
1514 1515 1516
}

/**
1517
 *	iput	- put an inode
L
Linus Torvalds 已提交
1518 1519 1520 1521 1522 1523 1524 1525 1526
 *	@inode: inode to put
 *
 *	Puts an inode, dropping its usage count. If the inode use count hits
 *	zero, the inode is then freed and may also be destroyed.
 *
 *	Consequently, iput() can sleep.
 */
void iput(struct inode *inode)
{
1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540
	if (!inode)
		return;
	BUG_ON(inode->i_state & I_CLEAR);
retry:
	if (atomic_dec_and_lock(&inode->i_count, &inode->i_lock)) {
		if (inode->i_nlink && (inode->i_state & I_DIRTY_TIME)) {
			atomic_inc(&inode->i_count);
			inode->i_state &= ~I_DIRTY_TIME;
			spin_unlock(&inode->i_lock);
			trace_writeback_lazytime_iput(inode);
			mark_inode_dirty_sync(inode);
			goto retry;
		}
		iput_final(inode);
L
Linus Torvalds 已提交
1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552
	}
}
EXPORT_SYMBOL(iput);

/**
 *	bmap	- find a block number in a file
 *	@inode: inode of file
 *	@block: block to find
 *
 *	Returns the block number on the device holding the inode that
 *	is the disk block number for the block of the file requested.
 *	That is, asked for block 4 of inode 1 the function will return the
1553
 *	disk block relative to the disk start that holds that block of the
L
Linus Torvalds 已提交
1554 1555
 *	file.
 */
1556
sector_t bmap(struct inode *inode, sector_t block)
L
Linus Torvalds 已提交
1557 1558 1559 1560 1561 1562 1563 1564
{
	sector_t res = 0;
	if (inode->i_mapping->a_ops->bmap)
		res = inode->i_mapping->a_ops->bmap(inode->i_mapping, block);
	return res;
}
EXPORT_SYMBOL(bmap);

1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582
/*
 * Update times in overlayed inode from underlying real inode
 */
static void update_ovl_inode_times(struct dentry *dentry, struct inode *inode,
			       bool rcu)
{
	if (!rcu) {
		struct inode *realinode = d_real_inode(dentry);

		if (unlikely(inode != realinode) &&
		    (!timespec_equal(&inode->i_mtime, &realinode->i_mtime) ||
		     !timespec_equal(&inode->i_ctime, &realinode->i_ctime))) {
			inode->i_mtime = realinode->i_mtime;
			inode->i_ctime = realinode->i_ctime;
		}
	}
}

1583 1584 1585 1586 1587
/*
 * With relative atime, only update atime if the previous atime is
 * earlier than either the ctime or mtime or if at least a day has
 * passed since the last atime update.
 */
1588 1589
static int relatime_need_update(const struct path *path, struct inode *inode,
				struct timespec now, bool rcu)
1590 1591
{

1592
	if (!(path->mnt->mnt_flags & MNT_RELATIME))
1593
		return 1;
1594 1595

	update_ovl_inode_times(path->dentry, inode, rcu);
1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618
	/*
	 * Is mtime younger than atime? If yes, update atime:
	 */
	if (timespec_compare(&inode->i_mtime, &inode->i_atime) >= 0)
		return 1;
	/*
	 * Is ctime younger than atime? If yes, update atime:
	 */
	if (timespec_compare(&inode->i_ctime, &inode->i_atime) >= 0)
		return 1;

	/*
	 * Is the previous atime value older than a day? If yes,
	 * update atime:
	 */
	if ((long)(now.tv_sec - inode->i_atime.tv_sec) >= 24*60*60)
		return 1;
	/*
	 * Good, we can skip the atime update:
	 */
	return 0;
}

1619
int generic_update_time(struct inode *inode, struct timespec *time, int flags)
1620
{
1621
	int iflags = I_DIRTY_TIME;
1622 1623 1624 1625 1626 1627 1628 1629 1630

	if (flags & S_ATIME)
		inode->i_atime = *time;
	if (flags & S_VERSION)
		inode_inc_iversion(inode);
	if (flags & S_CTIME)
		inode->i_ctime = *time;
	if (flags & S_MTIME)
		inode->i_mtime = *time;
1631 1632 1633 1634

	if (!(inode->i_sb->s_flags & MS_LAZYTIME) || (flags & S_VERSION))
		iflags |= I_DIRTY_SYNC;
	__mark_inode_dirty(inode, iflags);
1635 1636
	return 0;
}
1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651
EXPORT_SYMBOL(generic_update_time);

/*
 * This does the actual work of updating an inodes time or version.  Must have
 * had called mnt_want_write() before calling this.
 */
static int update_time(struct inode *inode, struct timespec *time, int flags)
{
	int (*update_time)(struct inode *, struct timespec *, int);

	update_time = inode->i_op->update_time ? inode->i_op->update_time :
		generic_update_time;

	return update_time(inode, time, flags);
}
1652

L
Linus Torvalds 已提交
1653
/**
C
Christoph Hellwig 已提交
1654
 *	touch_atime	-	update the access time
1655
 *	@path: the &struct path to update
R
Randy Dunlap 已提交
1656
 *	@inode: inode to update
L
Linus Torvalds 已提交
1657 1658 1659 1660 1661
 *
 *	Update the accessed time on an inode and mark it for writeback.
 *	This function automatically handles read only file systems and media,
 *	as well as the "noatime" flag and inode specific "noatime" markers.
 */
1662 1663
bool __atime_needs_update(const struct path *path, struct inode *inode,
			  bool rcu)
L
Linus Torvalds 已提交
1664
{
A
Al Viro 已提交
1665
	struct vfsmount *mnt = path->mnt;
L
Linus Torvalds 已提交
1666 1667
	struct timespec now;

1668
	if (inode->i_flags & S_NOATIME)
1669
		return false;
1670 1671 1672 1673 1674 1675 1676

	/* Atime updates will likely cause i_uid and i_gid to be written
	 * back improprely if their true value is unknown to the vfs.
	 */
	if (HAS_UNMAPPED_ID(inode))
		return false;

1677
	if (IS_NOATIME(inode))
1678
		return false;
A
Andrew Morton 已提交
1679
	if ((inode->i_sb->s_flags & MS_NODIRATIME) && S_ISDIR(inode->i_mode))
1680
		return false;
V
Valerie Henson 已提交
1681

1682
	if (mnt->mnt_flags & MNT_NOATIME)
1683
		return false;
1684
	if ((mnt->mnt_flags & MNT_NODIRATIME) && S_ISDIR(inode->i_mode))
1685
		return false;
L
Linus Torvalds 已提交
1686

1687
	now = current_time(inode);
1688

1689
	if (!relatime_need_update(path, inode, now, rcu))
1690
		return false;
1691

V
Valerie Henson 已提交
1692
	if (timespec_equal(&inode->i_atime, &now))
1693 1694 1695 1696 1697 1698 1699 1700 1701 1702 1703
		return false;

	return true;
}

void touch_atime(const struct path *path)
{
	struct vfsmount *mnt = path->mnt;
	struct inode *inode = d_inode(path->dentry);
	struct timespec now;

1704
	if (!__atime_needs_update(path, inode, false))
A
Andi Kleen 已提交
1705 1706
		return;

1707
	if (!sb_start_write_trylock(inode->i_sb))
A
Andi Kleen 已提交
1708
		return;
V
Valerie Henson 已提交
1709

1710
	if (__mnt_want_write(mnt) != 0)
1711
		goto skip_update;
1712 1713 1714 1715 1716 1717
	/*
	 * File systems can error out when updating inodes if they need to
	 * allocate new space to modify an inode (such is the case for
	 * Btrfs), but since we touch atime while walking down the path we
	 * really don't care if we failed to update the atime of the file,
	 * so just ignore the return value.
1718 1719
	 * We may also fail on filesystems that have the ability to make parts
	 * of the fs read only, e.g. subvolumes in Btrfs.
1720
	 */
1721
	now = current_time(inode);
1722
	update_time(inode, &now, S_ATIME);
1723 1724 1725
	__mnt_drop_write(mnt);
skip_update:
	sb_end_write(inode->i_sb);
L
Linus Torvalds 已提交
1726
}
C
Christoph Hellwig 已提交
1727
EXPORT_SYMBOL(touch_atime);
L
Linus Torvalds 已提交
1728

1729 1730 1731 1732 1733 1734 1735 1736
/*
 * The logic we want is
 *
 *	if suid or (sgid and xgrp)
 *		remove privs
 */
int should_remove_suid(struct dentry *dentry)
{
1737
	umode_t mode = d_inode(dentry)->i_mode;
1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757
	int kill = 0;

	/* suid always must be killed */
	if (unlikely(mode & S_ISUID))
		kill = ATTR_KILL_SUID;

	/*
	 * sgid without any exec bits is just a mandatory locking mark; leave
	 * it alone.  If some exec bits are set, it's a real sgid; kill it.
	 */
	if (unlikely((mode & S_ISGID) && (mode & S_IXGRP)))
		kill |= ATTR_KILL_SGID;

	if (unlikely(kill && !capable(CAP_FSETID) && S_ISREG(mode)))
		return kill;

	return 0;
}
EXPORT_SYMBOL(should_remove_suid);

1758 1759 1760 1761 1762
/*
 * Return mask of changes for notify_change() that need to be done as a
 * response to write or truncate. Return 0 if nothing has to be changed.
 * Negative value on error (change should be denied).
 */
1763
int dentry_needs_remove_privs(struct dentry *dentry)
1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781
{
	struct inode *inode = d_inode(dentry);
	int mask = 0;
	int ret;

	if (IS_NOSEC(inode))
		return 0;

	mask = should_remove_suid(dentry);
	ret = security_inode_need_killpriv(dentry);
	if (ret < 0)
		return ret;
	if (ret)
		mask |= ATTR_KILL_PRIV;
	return mask;
}

static int __remove_privs(struct dentry *dentry, int kill)
1782 1783 1784 1785
{
	struct iattr newattrs;

	newattrs.ia_valid = ATTR_FORCE | kill;
1786 1787 1788 1789 1790
	/*
	 * Note we call this on write, so notify_change will not
	 * encounter any conflicting delegations:
	 */
	return notify_change(dentry, &newattrs, NULL);
1791 1792
}

1793 1794 1795 1796 1797
/*
 * Remove special file priviledges (suid, capabilities) when file is written
 * to or truncated.
 */
int file_remove_privs(struct file *file)
1798
{
1799 1800
	struct dentry *dentry = file_dentry(file);
	struct inode *inode = file_inode(file);
1801
	int kill;
1802 1803 1804 1805 1806 1807
	int error = 0;

	/* Fast path for nothing security related */
	if (IS_NOSEC(inode))
		return 0;

1808
	kill = dentry_needs_remove_privs(dentry);
1809 1810 1811 1812
	if (kill < 0)
		return kill;
	if (kill)
		error = __remove_privs(dentry, kill);
J
Jan Kara 已提交
1813 1814
	if (!error)
		inode_has_no_xattr(inode);
1815 1816 1817

	return error;
}
1818
EXPORT_SYMBOL(file_remove_privs);
1819

L
Linus Torvalds 已提交
1820
/**
1821 1822
 *	file_update_time	-	update mtime and ctime time
 *	@file: file accessed
L
Linus Torvalds 已提交
1823
 *
1824 1825 1826 1827
 *	Update the mtime and ctime members of an inode and mark the inode
 *	for writeback.  Note that this function is meant exclusively for
 *	usage in the file write path of filesystems, and filesystems may
 *	choose to explicitly ignore update via this function with the
1828
 *	S_NOCMTIME inode flag, e.g. for network filesystem where these
1829 1830
 *	timestamps are handled by the server.  This can return an error for
 *	file systems who need to allocate space in order to update an inode.
L
Linus Torvalds 已提交
1831 1832
 */

1833
int file_update_time(struct file *file)
L
Linus Torvalds 已提交
1834
{
A
Al Viro 已提交
1835
	struct inode *inode = file_inode(file);
L
Linus Torvalds 已提交
1836
	struct timespec now;
1837 1838
	int sync_it = 0;
	int ret;
L
Linus Torvalds 已提交
1839

A
Andi Kleen 已提交
1840
	/* First try to exhaust all avenues to not sync */
L
Linus Torvalds 已提交
1841
	if (IS_NOCMTIME(inode))
1842
		return 0;
1843

1844
	now = current_time(inode);
A
Andi Kleen 已提交
1845 1846
	if (!timespec_equal(&inode->i_mtime, &now))
		sync_it = S_MTIME;
L
Linus Torvalds 已提交
1847

A
Andi Kleen 已提交
1848 1849
	if (!timespec_equal(&inode->i_ctime, &now))
		sync_it |= S_CTIME;
1850

A
Andi Kleen 已提交
1851 1852
	if (IS_I_VERSION(inode))
		sync_it |= S_VERSION;
1853

A
Andi Kleen 已提交
1854
	if (!sync_it)
1855
		return 0;
A
Andi Kleen 已提交
1856 1857

	/* Finally allowed to write? Takes lock. */
1858
	if (__mnt_want_write_file(file))
1859
		return 0;
A
Andi Kleen 已提交
1860

1861
	ret = update_time(inode, &now, sync_it);
1862
	__mnt_drop_write_file(file);
1863 1864

	return ret;
L
Linus Torvalds 已提交
1865
}
1866
EXPORT_SYMBOL(file_update_time);
L
Linus Torvalds 已提交
1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878

int inode_needs_sync(struct inode *inode)
{
	if (IS_SYNC(inode))
		return 1;
	if (S_ISDIR(inode->i_mode) && IS_DIRSYNC(inode))
		return 1;
	return 0;
}
EXPORT_SYMBOL(inode_needs_sync);

/*
1879 1880 1881 1882 1883 1884
 * If we try to find an inode in the inode hash while it is being
 * deleted, we have to wait until the filesystem completes its
 * deletion before reporting that it isn't found.  This function waits
 * until the deletion _might_ have completed.  Callers are responsible
 * to recheck inode state.
 *
C
Christoph Hellwig 已提交
1885
 * It doesn't matter if I_NEW is not set initially, a call to
1886 1887
 * wake_up_bit(&inode->i_state, __I_NEW) after removing from the hash list
 * will DTRT.
L
Linus Torvalds 已提交
1888 1889 1890 1891
 */
static void __wait_on_freeing_inode(struct inode *inode)
{
	wait_queue_head_t *wq;
C
Christoph Hellwig 已提交
1892 1893
	DEFINE_WAIT_BIT(wait, &inode->i_state, __I_NEW);
	wq = bit_waitqueue(&inode->i_state, __I_NEW);
L
Linus Torvalds 已提交
1894
	prepare_to_wait(wq, &wait.wait, TASK_UNINTERRUPTIBLE);
1895
	spin_unlock(&inode->i_lock);
1896
	spin_unlock(&inode_hash_lock);
L
Linus Torvalds 已提交
1897 1898
	schedule();
	finish_wait(wq, &wait.wait);
1899
	spin_lock(&inode_hash_lock);
L
Linus Torvalds 已提交
1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916
}

static __initdata unsigned long ihash_entries;
static int __init set_ihash_entries(char *str)
{
	if (!str)
		return 0;
	ihash_entries = simple_strtoul(str, &str, 0);
	return 1;
}
__setup("ihash_entries=", set_ihash_entries);

/*
 * Initialize the waitqueues and inode hash table.
 */
void __init inode_init_early(void)
{
1917
	unsigned int loop;
L
Linus Torvalds 已提交
1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932

	/* If hashes are distributed across NUMA nodes, defer
	 * hash allocation until vmalloc space is available.
	 */
	if (hashdist)
		return;

	inode_hashtable =
		alloc_large_system_hash("Inode-cache",
					sizeof(struct hlist_head),
					ihash_entries,
					14,
					HASH_EARLY,
					&i_hash_shift,
					&i_hash_mask,
1933
					0,
L
Linus Torvalds 已提交
1934 1935
					0);

1936
	for (loop = 0; loop < (1U << i_hash_shift); loop++)
L
Linus Torvalds 已提交
1937 1938 1939
		INIT_HLIST_HEAD(&inode_hashtable[loop]);
}

1940
void __init inode_init(void)
L
Linus Torvalds 已提交
1941
{
1942
	unsigned int loop;
L
Linus Torvalds 已提交
1943 1944

	/* inode slab cache */
1945 1946 1947 1948
	inode_cachep = kmem_cache_create("inode_cache",
					 sizeof(struct inode),
					 0,
					 (SLAB_RECLAIM_ACCOUNT|SLAB_PANIC|
1949
					 SLAB_MEM_SPREAD|SLAB_ACCOUNT),
1950
					 init_once);
L
Linus Torvalds 已提交
1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963

	/* Hash may have been set up in inode_init_early */
	if (!hashdist)
		return;

	inode_hashtable =
		alloc_large_system_hash("Inode-cache",
					sizeof(struct hlist_head),
					ihash_entries,
					14,
					0,
					&i_hash_shift,
					&i_hash_mask,
1964
					0,
L
Linus Torvalds 已提交
1965 1966
					0);

1967
	for (loop = 0; loop < (1U << i_hash_shift); loop++)
L
Linus Torvalds 已提交
1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980
		INIT_HLIST_HEAD(&inode_hashtable[loop]);
}

void init_special_inode(struct inode *inode, umode_t mode, dev_t rdev)
{
	inode->i_mode = mode;
	if (S_ISCHR(mode)) {
		inode->i_fop = &def_chr_fops;
		inode->i_rdev = rdev;
	} else if (S_ISBLK(mode)) {
		inode->i_fop = &def_blk_fops;
		inode->i_rdev = rdev;
	} else if (S_ISFIFO(mode))
1981
		inode->i_fop = &pipefifo_fops;
L
Linus Torvalds 已提交
1982
	else if (S_ISSOCK(mode))
1983
		;	/* leave it no_open_fops */
L
Linus Torvalds 已提交
1984
	else
1985 1986 1987
		printk(KERN_DEBUG "init_special_inode: bogus i_mode (%o) for"
				  " inode %s:%lu\n", mode, inode->i_sb->s_id,
				  inode->i_ino);
L
Linus Torvalds 已提交
1988 1989
}
EXPORT_SYMBOL(init_special_inode);
1990 1991

/**
1992
 * inode_init_owner - Init uid,gid,mode for new inode according to posix standards
1993 1994 1995 1996 1997
 * @inode: New inode
 * @dir: Directory inode
 * @mode: mode of the new inode
 */
void inode_init_owner(struct inode *inode, const struct inode *dir,
A
Al Viro 已提交
1998
			umode_t mode)
1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009
{
	inode->i_uid = current_fsuid();
	if (dir && dir->i_mode & S_ISGID) {
		inode->i_gid = dir->i_gid;
		if (S_ISDIR(mode))
			mode |= S_ISGID;
	} else
		inode->i_gid = current_fsgid();
	inode->i_mode = mode;
}
EXPORT_SYMBOL(inode_init_owner);
2010

2011 2012 2013 2014
/**
 * inode_owner_or_capable - check current task permissions to inode
 * @inode: inode being checked
 *
2015 2016
 * Return true if current either has CAP_FOWNER in a namespace with the
 * inode owner uid mapped, or owns the file.
2017
 */
2018
bool inode_owner_or_capable(const struct inode *inode)
2019
{
2020 2021
	struct user_namespace *ns;

2022
	if (uid_eq(current_fsuid(), inode->i_uid))
2023
		return true;
2024 2025

	ns = current_user_ns();
2026
	if (kuid_has_mapping(ns, inode->i_uid) && ns_capable(ns, CAP_FOWNER))
2027 2028 2029
		return true;
	return false;
}
2030
EXPORT_SYMBOL(inode_owner_or_capable);
2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064

/*
 * Direct i/o helper functions
 */
static void __inode_dio_wait(struct inode *inode)
{
	wait_queue_head_t *wq = bit_waitqueue(&inode->i_state, __I_DIO_WAKEUP);
	DEFINE_WAIT_BIT(q, &inode->i_state, __I_DIO_WAKEUP);

	do {
		prepare_to_wait(wq, &q.wait, TASK_UNINTERRUPTIBLE);
		if (atomic_read(&inode->i_dio_count))
			schedule();
	} while (atomic_read(&inode->i_dio_count));
	finish_wait(wq, &q.wait);
}

/**
 * inode_dio_wait - wait for outstanding DIO requests to finish
 * @inode: inode to wait for
 *
 * Waits for all pending direct I/O requests to finish so that we can
 * proceed with a truncate or equivalent operation.
 *
 * Must be called under a lock that serializes taking new references
 * to i_dio_count, usually by inode->i_mutex.
 */
void inode_dio_wait(struct inode *inode)
{
	if (atomic_read(&inode->i_dio_count))
		__inode_dio_wait(inode);
}
EXPORT_SYMBOL(inode_dio_wait);

2065 2066 2067 2068 2069 2070 2071 2072
/*
 * inode_set_flags - atomically set some inode flags
 *
 * Note: the caller should be holding i_mutex, or else be sure that
 * they have exclusive access to the inode structure (i.e., while the
 * inode is being instantiated).  The reason for the cmpxchg() loop
 * --- which wouldn't be necessary if all code paths which modify
 * i_flags actually followed this rule, is that there is at least one
2073 2074
 * code path which doesn't today so we use cmpxchg() out of an abundance
 * of caution.
2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093
 *
 * In the long run, i_mutex is overkill, and we should probably look
 * at using the i_lock spinlock to protect i_flags, and then make sure
 * it is so documented in include/linux/fs.h and that all code follows
 * the locking convention!!
 */
void inode_set_flags(struct inode *inode, unsigned int flags,
		     unsigned int mask)
{
	unsigned int old_flags, new_flags;

	WARN_ON_ONCE(flags & ~mask);
	do {
		old_flags = ACCESS_ONCE(inode->i_flags);
		new_flags = (old_flags & ~mask) | flags;
	} while (unlikely(cmpxchg(&inode->i_flags, old_flags,
				  new_flags) != old_flags));
}
EXPORT_SYMBOL(inode_set_flags);
2094 2095 2096 2097 2098 2099

void inode_nohighmem(struct inode *inode)
{
	mapping_set_gfp_mask(inode->i_mapping, GFP_USER);
}
EXPORT_SYMBOL(inode_nohighmem);
D
Deepa Dinamani 已提交
2100 2101 2102 2103 2104 2105 2106 2107 2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121 2122

/**
 * current_time - Return FS time
 * @inode: inode.
 *
 * Return the current time truncated to the time granularity supported by
 * the fs.
 *
 * Note that inode and inode->sb cannot be NULL.
 * Otherwise, the function warns and returns time without truncation.
 */
struct timespec current_time(struct inode *inode)
{
	struct timespec now = current_kernel_time();

	if (unlikely(!inode->i_sb)) {
		WARN(1, "current_time() called with uninitialized super_block in the inode");
		return now;
	}

	return timespec_trunc(now, inode->i_sb->s_time_gran);
}
EXPORT_SYMBOL(current_time);