nfs4proc.c 39.9 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
/*
 *  Server-side procedures for NFSv4.
 *
 *  Copyright (c) 2002 The Regents of the University of Michigan.
 *  All rights reserved.
 *
 *  Kendrick Smith <kmsmith@umich.edu>
 *  Andy Adamson   <andros@umich.edu>
 *
 *  Redistribution and use in source and binary forms, with or without
 *  modification, are permitted provided that the following conditions
 *  are met:
 *
 *  1. Redistributions of source code must retain the above copyright
 *     notice, this list of conditions and the following disclaimer.
 *  2. Redistributions in binary form must reproduce the above copyright
 *     notice, this list of conditions and the following disclaimer in the
 *     documentation and/or other materials provided with the distribution.
 *  3. Neither the name of the University nor the names of its
 *     contributors may be used to endorse or promote products derived
 *     from this software without specific prior written permission.
 *
 *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
 *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
 *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
 *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
 *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
 *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */
35
#include <linux/file.h>
36
#include <linux/slab.h>
L
Linus Torvalds 已提交
37

38 39
#include "cache.h"
#include "xdr4.h"
40
#include "vfs.h"
L
Linus Torvalds 已提交
41 42 43

#define NFSDDBG_FACILITY		NFSDDBG_PROC

44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71
static u32 nfsd_attrmask[] = {
	NFSD_WRITEABLE_ATTRS_WORD0,
	NFSD_WRITEABLE_ATTRS_WORD1,
	NFSD_WRITEABLE_ATTRS_WORD2
};

static u32 nfsd41_ex_attrmask[] = {
	NFSD_SUPPATTR_EXCLCREAT_WORD0,
	NFSD_SUPPATTR_EXCLCREAT_WORD1,
	NFSD_SUPPATTR_EXCLCREAT_WORD2
};

static __be32
check_attr_support(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
		   u32 *bmval, u32 *writable)
{
	struct dentry *dentry = cstate->current_fh.fh_dentry;

	/*
	 * Check about attributes are supported by the NFSv4 server or not.
	 * According to spec, unsupported attributes return ERR_ATTRNOTSUPP.
	 */
	if ((bmval[0] & ~nfsd_suppattrs0(cstate->minorversion)) ||
	    (bmval[1] & ~nfsd_suppattrs1(cstate->minorversion)) ||
	    (bmval[2] & ~nfsd_suppattrs2(cstate->minorversion)))
		return nfserr_attrnotsupp;

	/*
72
	 * Check FATTR4_WORD0_ACL can be supported
73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110
	 * in current environment or not.
	 */
	if (bmval[0] & FATTR4_WORD0_ACL) {
		if (!IS_POSIXACL(dentry->d_inode))
			return nfserr_attrnotsupp;
	}

	/*
	 * According to spec, read-only attributes return ERR_INVAL.
	 */
	if (writable) {
		if ((bmval[0] & ~writable[0]) || (bmval[1] & ~writable[1]) ||
		    (bmval[2] & ~writable[2]))
			return nfserr_inval;
	}

	return nfs_ok;
}

static __be32
nfsd4_check_open_attributes(struct svc_rqst *rqstp,
	struct nfsd4_compound_state *cstate, struct nfsd4_open *open)
{
	__be32 status = nfs_ok;

	if (open->op_create == NFS4_OPEN_CREATE) {
		if (open->op_createmode == NFS4_CREATE_UNCHECKED
		    || open->op_createmode == NFS4_CREATE_GUARDED)
			status = check_attr_support(rqstp, cstate,
					open->op_bmval, nfsd_attrmask);
		else if (open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1)
			status = check_attr_support(rqstp, cstate,
					open->op_bmval, nfsd41_ex_attrmask);
	}

	return status;
}

111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139
static int
is_create_with_attrs(struct nfsd4_open *open)
{
	return open->op_create == NFS4_OPEN_CREATE
		&& (open->op_createmode == NFS4_CREATE_UNCHECKED
		    || open->op_createmode == NFS4_CREATE_GUARDED
		    || open->op_createmode == NFS4_CREATE_EXCLUSIVE4_1);
}

/*
 * if error occurs when setting the acl, just clear the acl bit
 * in the returned attr bitmap.
 */
static void
do_set_nfs4_acl(struct svc_rqst *rqstp, struct svc_fh *fhp,
		struct nfs4_acl *acl, u32 *bmval)
{
	__be32 status;

	status = nfsd4_set_nfs4_acl(rqstp, fhp, acl);
	if (status)
		/*
		 * We should probably fail the whole open at this point,
		 * but we've already created the file, so it's too late;
		 * So this seems the least of evils:
		 */
		bmval[0] &= ~FATTR4_WORD0_ACL;
}

L
Linus Torvalds 已提交
140 141 142 143 144 145 146 147 148 149
static inline void
fh_dup2(struct svc_fh *dst, struct svc_fh *src)
{
	fh_put(dst);
	dget(src->fh_dentry);
	if (src->fh_export)
		cache_get(&src->fh_export->h);
	*dst = *src;
}

150
static __be32
151
do_open_permission(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open, int accmode)
L
Linus Torvalds 已提交
152
{
153
	__be32 status;
L
Linus Torvalds 已提交
154 155 156 157 158 159

	if (open->op_truncate &&
		!(open->op_share_access & NFS4_SHARE_ACCESS_WRITE))
		return nfserr_inval;

	if (open->op_share_access & NFS4_SHARE_ACCESS_READ)
M
Miklos Szeredi 已提交
160
		accmode |= NFSD_MAY_READ;
161
	if (open->op_share_access & NFS4_SHARE_ACCESS_WRITE)
M
Miklos Szeredi 已提交
162
		accmode |= (NFSD_MAY_WRITE | NFSD_MAY_TRUNC);
163
	if (open->op_share_deny & NFS4_SHARE_DENY_READ)
M
Miklos Szeredi 已提交
164
		accmode |= NFSD_MAY_WRITE;
L
Linus Torvalds 已提交
165 166 167 168 169 170

	status = fh_verify(rqstp, current_fh, S_IFREG, accmode);

	return status;
}

171
static __be32
L
Linus Torvalds 已提交
172 173 174
do_open_lookup(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open)
{
	struct svc_fh resfh;
175
	__be32 status;
176
	int created = 0;
L
Linus Torvalds 已提交
177 178 179 180 181

	fh_init(&resfh, NFS4_FHSIZE);
	open->op_truncate = 0;

	if (open->op_create) {
B
Benny Halevy 已提交
182 183 184 185 186 187 188 189 190 191 192 193 194 195 196
		/* FIXME: check session persistence and pnfs flags.
		 * The nfsv4.1 spec requires the following semantics:
		 *
		 * Persistent   | pNFS   | Server REQUIRED | Client Allowed
		 * Reply Cache  | server |                 |
		 * -------------+--------+-----------------+--------------------
		 * no           | no     | EXCLUSIVE4_1    | EXCLUSIVE4_1
		 *              |        |                 | (SHOULD)
		 *              |        | and EXCLUSIVE4  | or EXCLUSIVE4
		 *              |        |                 | (SHOULD NOT)
		 * no           | yes    | EXCLUSIVE4_1    | EXCLUSIVE4_1
		 * yes          | no     | GUARDED4        | GUARDED4
		 * yes          | yes    | GUARDED4        | GUARDED4
		 */

L
Linus Torvalds 已提交
197 198
		/*
		 * Note: create modes (UNCHECKED,GUARDED...) are the same
199
		 * in NFSv4 as in v3 except EXCLUSIVE4_1.
L
Linus Torvalds 已提交
200
		 */
201
		status = do_nfsd_create(rqstp, current_fh, open->op_fname.data,
L
Linus Torvalds 已提交
202 203
					open->op_fname.len, &open->op_iattr,
					&resfh, open->op_createmode,
204 205 206
					(u32 *)open->op_verf.data,
					&open->op_truncate, &created);

207 208 209 210
		/*
		 * Following rfc 3530 14.2.16, use the returned bitmask
		 * to indicate which attributes we used to store the
		 * verifier:
211 212
		 */
		if (open->op_createmode == NFS4_CREATE_EXCLUSIVE && status == 0)
213
			open->op_bmval[1] = (FATTR4_WORD1_TIME_ACCESS |
214
						FATTR4_WORD1_TIME_MODIFY);
215
	} else {
L
Linus Torvalds 已提交
216 217 218 219
		status = nfsd_lookup(rqstp, current_fh,
				     open->op_fname.data, open->op_fname.len, &resfh);
		fh_unlock(current_fh);
	}
220 221
	if (status)
		goto out;
L
Linus Torvalds 已提交
222

223 224 225
	if (is_create_with_attrs(open) && open->op_acl != NULL)
		do_set_nfs4_acl(rqstp, &resfh, open->op_acl, open->op_bmval);

226
	set_change_info(&open->op_cinfo, current_fh);
J
J. Bruce Fields 已提交
227
	fh_dup2(current_fh, &resfh);
L
Linus Torvalds 已提交
228

229
	/* set reply cache */
230 231
	fh_copy_shallow(&open->op_stateowner->so_replay.rp_openfh,
			&resfh.fh_handle);
232
	if (!created)
M
Miklos Szeredi 已提交
233 234
		status = do_open_permission(rqstp, current_fh, open,
					    NFSD_MAY_NOP);
L
Linus Torvalds 已提交
235

236
out:
L
Linus Torvalds 已提交
237 238 239 240
	fh_put(&resfh);
	return status;
}

241
static __be32
L
Linus Torvalds 已提交
242 243
do_open_fhandle(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open)
{
244
	__be32 status;
L
Linus Torvalds 已提交
245 246 247 248 249 250 251 252 253 254 255 256

	/* Only reclaims from previously confirmed clients are valid */
	if ((status = nfs4_check_open_reclaim(&open->op_clientid)))
		return status;

	/* We don't know the target directory, and therefore can not
	* set the change info
	*/

	memset(&open->op_cinfo, 0, sizeof(struct nfsd4_change_info));

	/* set replay cache */
257 258
	fh_copy_shallow(&open->op_stateowner->so_replay.rp_openfh,
			&current_fh->fh_handle);
L
Linus Torvalds 已提交
259 260 261 262

	open->op_truncate = (open->op_iattr.ia_valid & ATTR_SIZE) &&
		(open->op_iattr.ia_size == 0);

M
Miklos Szeredi 已提交
263 264
	status = do_open_permission(rqstp, current_fh, open,
				    NFSD_MAY_OWNER_OVERRIDE);
L
Linus Torvalds 已提交
265 266 267 268

	return status;
}

A
Andy Adamson 已提交
269 270 271 272 273 274 275 276 277
static void
copy_clientid(clientid_t *clid, struct nfsd4_session *session)
{
	struct nfsd4_sessionid *sid =
			(struct nfsd4_sessionid *)session->se_sessionid.data;

	clid->cl_boot = sid->clientid.cl_boot;
	clid->cl_id = sid->clientid.cl_id;
}
L
Linus Torvalds 已提交
278

279
static __be32
280
nfsd4_open(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
281
	   struct nfsd4_open *open)
L
Linus Torvalds 已提交
282
{
283
	__be32 status;
A
Andy Adamson 已提交
284 285
	struct nfsd4_compoundres *resp;

L
Linus Torvalds 已提交
286 287 288 289 290 291 292 293
	dprintk("NFSD: nfsd4_open filename %.*s op_stateowner %p\n",
		(int)open->op_fname.len, open->op_fname.data,
		open->op_stateowner);

	/* This check required by spec. */
	if (open->op_create && open->op_claim_type != NFS4_OPEN_CLAIM_NULL)
		return nfserr_inval;

A
Andy Adamson 已提交
294 295 296
	if (nfsd4_has_session(cstate))
		copy_clientid(&open->op_clientid, cstate->session);

L
Linus Torvalds 已提交
297 298 299
	nfs4_lock_state();

	/* check seqid for replay. set nfs4_owner */
A
Andy Adamson 已提交
300 301
	resp = rqstp->rq_resp;
	status = nfsd4_process_open1(&resp->cstate, open);
A
Al Viro 已提交
302
	if (status == nfserr_replay_me) {
L
Linus Torvalds 已提交
303
		struct nfs4_replay *rp = &open->op_stateowner->so_replay;
304
		fh_put(&cstate->current_fh);
305 306
		fh_copy_shallow(&cstate->current_fh.fh_handle,
				&rp->rp_openfh);
M
Miklos Szeredi 已提交
307
		status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
L
Linus Torvalds 已提交
308 309 310 311
		if (status)
			dprintk("nfsd4_open: replay failed"
				" restoring previous filehandle\n");
		else
A
Al Viro 已提交
312
			status = nfserr_replay_me;
L
Linus Torvalds 已提交
313 314 315
	}
	if (status)
		goto out;
316

317 318 319 320
	status = nfsd4_check_open_attributes(rqstp, cstate, open);
	if (status)
		goto out;

321 322
	/* Openowner is now set, so sequence id will get bumped.  Now we need
	 * these checks before we do any creates: */
323
	status = nfserr_grace;
324
	if (locks_in_grace() && open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS)
325 326
		goto out;
	status = nfserr_no_grace;
327
	if (!locks_in_grace() && open->op_claim_type == NFS4_OPEN_CLAIM_PREVIOUS)
328
		goto out;
329

L
Linus Torvalds 已提交
330
	switch (open->op_claim_type) {
331
		case NFS4_OPEN_CLAIM_DELEGATE_CUR:
L
Linus Torvalds 已提交
332 333 334 335 336 337 338
		case NFS4_OPEN_CLAIM_NULL:
			/*
			 * (1) set CURRENT_FH to the file being opened,
			 * creating it if necessary, (2) set open->op_cinfo,
			 * (3) set open->op_truncate if the file is to be
			 * truncated after opening, (4) do permission checking.
			 */
339 340
			status = do_open_lookup(rqstp, &cstate->current_fh,
						open);
L
Linus Torvalds 已提交
341 342 343 344
			if (status)
				goto out;
			break;
		case NFS4_OPEN_CLAIM_PREVIOUS:
345
			open->op_stateowner->so_confirmed = 1;
L
Linus Torvalds 已提交
346 347 348 349 350 351
			/*
			 * The CURRENT_FH is already set to the file being
			 * opened.  (1) set open->op_cinfo, (2) set
			 * open->op_truncate if the file is to be truncated
			 * after opening, (3) do permission checking.
			*/
352 353
			status = do_open_fhandle(rqstp, &cstate->current_fh,
						 open);
L
Linus Torvalds 已提交
354 355 356 357
			if (status)
				goto out;
			break;
             	case NFS4_OPEN_CLAIM_DELEGATE_PREV:
358
			open->op_stateowner->so_confirmed = 1;
359
			dprintk("NFSD: unsupported OPEN claim type %d\n",
L
Linus Torvalds 已提交
360 361 362 363
				open->op_claim_type);
			status = nfserr_notsupp;
			goto out;
		default:
364
			dprintk("NFSD: Invalid OPEN claim type %d\n",
L
Linus Torvalds 已提交
365 366 367 368 369 370 371 372 373
				open->op_claim_type);
			status = nfserr_inval;
			goto out;
	}
	/*
	 * nfsd4_process_open2() does the actual opening of the file.  If
	 * successful, it (1) truncates the file if open->op_truncate was
	 * set, (2) sets open->op_stateid, (3) sets open->op_delegation.
	 */
374
	status = nfsd4_process_open2(rqstp, &cstate->current_fh, open);
L
Linus Torvalds 已提交
375
out:
N
Neil Brown 已提交
376
	if (open->op_stateowner) {
L
Linus Torvalds 已提交
377
		nfs4_get_stateowner(open->op_stateowner);
378
		cstate->replay_owner = open->op_stateowner;
N
Neil Brown 已提交
379
	}
L
Linus Torvalds 已提交
380 381 382 383 384 385 386
	nfs4_unlock_state();
	return status;
}

/*
 * filehandle-manipulating ops.
 */
387
static __be32
388 389
nfsd4_getfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	    struct svc_fh **getfh)
L
Linus Torvalds 已提交
390
{
391
	if (!cstate->current_fh.fh_dentry)
L
Linus Torvalds 已提交
392 393
		return nfserr_nofilehandle;

394
	*getfh = &cstate->current_fh;
L
Linus Torvalds 已提交
395 396 397
	return nfs_ok;
}

398
static __be32
399 400
nfsd4_putfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	    struct nfsd4_putfh *putfh)
L
Linus Torvalds 已提交
401
{
402 403 404 405
	fh_put(&cstate->current_fh);
	cstate->current_fh.fh_handle.fh_size = putfh->pf_fhlen;
	memcpy(&cstate->current_fh.fh_handle.fh_base, putfh->pf_fhval,
	       putfh->pf_fhlen);
406
	return fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_BYPASS_GSS);
L
Linus Torvalds 已提交
407 408
}

409
static __be32
410 411
nfsd4_putrootfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
		void *arg)
L
Linus Torvalds 已提交
412
{
413
	__be32 status;
L
Linus Torvalds 已提交
414

415
	fh_put(&cstate->current_fh);
416
	status = exp_pseudoroot(rqstp, &cstate->current_fh);
L
Linus Torvalds 已提交
417 418 419
	return status;
}

420
static __be32
421 422
nfsd4_restorefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
		void *arg)
L
Linus Torvalds 已提交
423
{
424
	if (!cstate->save_fh.fh_dentry)
L
Linus Torvalds 已提交
425 426
		return nfserr_restorefh;

427
	fh_dup2(&cstate->current_fh, &cstate->save_fh);
L
Linus Torvalds 已提交
428 429 430
	return nfs_ok;
}

431
static __be32
432 433
nfsd4_savefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	     void *arg)
L
Linus Torvalds 已提交
434
{
435
	if (!cstate->current_fh.fh_dentry)
L
Linus Torvalds 已提交
436 437
		return nfserr_nofilehandle;

438
	fh_dup2(&cstate->save_fh, &cstate->current_fh);
L
Linus Torvalds 已提交
439 440 441 442 443 444
	return nfs_ok;
}

/*
 * misc nfsv4 ops
 */
445
static __be32
446 447
nfsd4_access(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	     struct nfsd4_access *access)
L
Linus Torvalds 已提交
448 449 450 451 452
{
	if (access->ac_req_access & ~NFS3_ACCESS_FULL)
		return nfserr_inval;

	access->ac_resp_access = access->ac_req_access;
453 454
	return nfsd_access(rqstp, &cstate->current_fh, &access->ac_resp_access,
			   &access->ac_supported);
L
Linus Torvalds 已提交
455 456
}

457
static __be32
458 459
nfsd4_commit(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	     struct nfsd4_commit *commit)
L
Linus Torvalds 已提交
460
{
461
	__be32 status;
L
Linus Torvalds 已提交
462 463 464 465 466

	u32 *p = (u32 *)commit->co_verf.data;
	*p++ = nfssvc_boot.tv_sec;
	*p++ = nfssvc_boot.tv_usec;

467 468
	status = nfsd_commit(rqstp, &cstate->current_fh, commit->co_offset,
			     commit->co_count);
L
Linus Torvalds 已提交
469 470 471 472 473
	if (status == nfserr_symlink)
		status = nfserr_inval;
	return status;
}

474
static __be32
475 476
nfsd4_create(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	     struct nfsd4_create *create)
L
Linus Torvalds 已提交
477 478
{
	struct svc_fh resfh;
479
	__be32 status;
L
Linus Torvalds 已提交
480 481 482 483
	dev_t rdev;

	fh_init(&resfh, NFS4_FHSIZE);

M
Miklos Szeredi 已提交
484 485
	status = fh_verify(rqstp, &cstate->current_fh, S_IFDIR,
			   NFSD_MAY_CREATE);
L
Linus Torvalds 已提交
486 487 488 489 490
	if (status == nfserr_symlink)
		status = nfserr_notdir;
	if (status)
		return status;

491 492 493 494 495
	status = check_attr_support(rqstp, cstate, create->cr_bmval,
				    nfsd_attrmask);
	if (status)
		return status;

L
Linus Torvalds 已提交
496 497 498 499 500 501 502 503 504 505 506
	switch (create->cr_type) {
	case NF4LNK:
		/* ugh! we have to null-terminate the linktext, or
		 * vfs_symlink() will choke.  it is always safe to
		 * null-terminate by brute force, since at worst we
		 * will overwrite the first byte of the create namelen
		 * in the XDR buffer, which has already been extracted
		 * during XDR decode.
		 */
		create->cr_linkname[create->cr_linklen] = 0;

507 508 509 510
		status = nfsd_symlink(rqstp, &cstate->current_fh,
				      create->cr_name, create->cr_namelen,
				      create->cr_linkname, create->cr_linklen,
				      &resfh, &create->cr_iattr);
L
Linus Torvalds 已提交
511 512 513 514 515 516 517
		break;

	case NF4BLK:
		rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
		if (MAJOR(rdev) != create->cr_specdata1 ||
		    MINOR(rdev) != create->cr_specdata2)
			return nfserr_inval;
518 519 520
		status = nfsd_create(rqstp, &cstate->current_fh,
				     create->cr_name, create->cr_namelen,
				     &create->cr_iattr, S_IFBLK, rdev, &resfh);
L
Linus Torvalds 已提交
521 522 523 524 525 526 527
		break;

	case NF4CHR:
		rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
		if (MAJOR(rdev) != create->cr_specdata1 ||
		    MINOR(rdev) != create->cr_specdata2)
			return nfserr_inval;
528 529 530
		status = nfsd_create(rqstp, &cstate->current_fh,
				     create->cr_name, create->cr_namelen,
				     &create->cr_iattr,S_IFCHR, rdev, &resfh);
L
Linus Torvalds 已提交
531 532 533
		break;

	case NF4SOCK:
534 535 536
		status = nfsd_create(rqstp, &cstate->current_fh,
				     create->cr_name, create->cr_namelen,
				     &create->cr_iattr, S_IFSOCK, 0, &resfh);
L
Linus Torvalds 已提交
537 538 539
		break;

	case NF4FIFO:
540 541 542
		status = nfsd_create(rqstp, &cstate->current_fh,
				     create->cr_name, create->cr_namelen,
				     &create->cr_iattr, S_IFIFO, 0, &resfh);
L
Linus Torvalds 已提交
543 544 545 546
		break;

	case NF4DIR:
		create->cr_iattr.ia_valid &= ~ATTR_SIZE;
547 548 549
		status = nfsd_create(rqstp, &cstate->current_fh,
				     create->cr_name, create->cr_namelen,
				     &create->cr_iattr, S_IFDIR, 0, &resfh);
L
Linus Torvalds 已提交
550 551 552 553 554 555
		break;

	default:
		status = nfserr_badtype;
	}

556 557
	if (status)
		goto out;
L
Linus Torvalds 已提交
558

559 560 561 562 563 564 565 566
	if (create->cr_acl != NULL)
		do_set_nfs4_acl(rqstp, &resfh, create->cr_acl,
				create->cr_bmval);

	fh_unlock(&cstate->current_fh);
	set_change_info(&create->cr_cinfo, &cstate->current_fh);
	fh_dup2(&cstate->current_fh, &resfh);
out:
L
Linus Torvalds 已提交
567 568 569 570
	fh_put(&resfh);
	return status;
}

571
static __be32
572 573
nfsd4_getattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	      struct nfsd4_getattr *getattr)
L
Linus Torvalds 已提交
574
{
575
	__be32 status;
L
Linus Torvalds 已提交
576

M
Miklos Szeredi 已提交
577
	status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
L
Linus Torvalds 已提交
578 579 580 581 582 583
	if (status)
		return status;

	if (getattr->ga_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
		return nfserr_inval;

584 585 586
	getattr->ga_bmval[0] &= nfsd_suppattrs0(cstate->minorversion);
	getattr->ga_bmval[1] &= nfsd_suppattrs1(cstate->minorversion);
	getattr->ga_bmval[2] &= nfsd_suppattrs2(cstate->minorversion);
L
Linus Torvalds 已提交
587

588
	getattr->ga_fhp = &cstate->current_fh;
L
Linus Torvalds 已提交
589 590 591
	return nfs_ok;
}

592
static __be32
593 594
nfsd4_link(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	   struct nfsd4_link *link)
L
Linus Torvalds 已提交
595
{
596
	__be32 status = nfserr_nofilehandle;
L
Linus Torvalds 已提交
597

598
	if (!cstate->save_fh.fh_dentry)
L
Linus Torvalds 已提交
599
		return status;
600 601
	status = nfsd_link(rqstp, &cstate->current_fh,
			   link->li_name, link->li_namelen, &cstate->save_fh);
L
Linus Torvalds 已提交
602
	if (!status)
603
		set_change_info(&link->li_cinfo, &cstate->current_fh);
L
Linus Torvalds 已提交
604 605 606
	return status;
}

607
static __be32 nfsd4_do_lookupp(struct svc_rqst *rqstp, struct svc_fh *fh)
L
Linus Torvalds 已提交
608 609
{
	struct svc_fh tmp_fh;
610
	__be32 ret;
L
Linus Torvalds 已提交
611 612

	fh_init(&tmp_fh, NFS4_FHSIZE);
613 614
	ret = exp_pseudoroot(rqstp, &tmp_fh);
	if (ret)
L
Linus Torvalds 已提交
615
		return ret;
616
	if (tmp_fh.fh_dentry == fh->fh_dentry) {
L
Linus Torvalds 已提交
617 618 619 620
		fh_put(&tmp_fh);
		return nfserr_noent;
	}
	fh_put(&tmp_fh);
621 622 623 624 625 626 627 628
	return nfsd_lookup(rqstp, fh, "..", 2, fh);
}

static __be32
nfsd4_lookupp(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	      void *arg)
{
	return nfsd4_do_lookupp(rqstp, &cstate->current_fh);
L
Linus Torvalds 已提交
629 630
}

631
static __be32
632 633
nfsd4_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	     struct nfsd4_lookup *lookup)
L
Linus Torvalds 已提交
634
{
635 636 637
	return nfsd_lookup(rqstp, &cstate->current_fh,
			   lookup->lo_name, lookup->lo_len,
			   &cstate->current_fh);
L
Linus Torvalds 已提交
638 639
}

640
static __be32
641 642
nfsd4_read(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	   struct nfsd4_read *read)
L
Linus Torvalds 已提交
643
{
644
	__be32 status;
L
Linus Torvalds 已提交
645 646 647

	/* no need to check permission - this will be done in nfsd_read() */

648
	read->rd_filp = NULL;
L
Linus Torvalds 已提交
649 650 651 652 653
	if (read->rd_offset >= OFFSET_MAX)
		return nfserr_inval;

	nfs4_lock_state();
	/* check stateid */
654 655
	if ((status = nfs4_preprocess_stateid_op(cstate, &read->rd_stateid,
						 RD_STATE, &read->rd_filp))) {
L
Linus Torvalds 已提交
656 657 658
		dprintk("NFSD: nfsd4_read: couldn't process stateid!\n");
		goto out;
	}
659 660
	if (read->rd_filp)
		get_file(read->rd_filp);
L
Linus Torvalds 已提交
661 662 663 664
	status = nfs_ok;
out:
	nfs4_unlock_state();
	read->rd_rqstp = rqstp;
665
	read->rd_fhp = &cstate->current_fh;
L
Linus Torvalds 已提交
666 667 668
	return status;
}

669
static __be32
670 671
nfsd4_readdir(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	      struct nfsd4_readdir *readdir)
L
Linus Torvalds 已提交
672 673 674 675 676 677 678 679 680
{
	u64 cookie = readdir->rd_cookie;
	static const nfs4_verifier zeroverf;

	/* no need to check permission - this will be done in nfsd_readdir() */

	if (readdir->rd_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
		return nfserr_inval;

681 682 683
	readdir->rd_bmval[0] &= nfsd_suppattrs0(cstate->minorversion);
	readdir->rd_bmval[1] &= nfsd_suppattrs1(cstate->minorversion);
	readdir->rd_bmval[2] &= nfsd_suppattrs2(cstate->minorversion);
L
Linus Torvalds 已提交
684 685 686 687 688 689

	if ((cookie > ~(u32)0) || (cookie == 1) || (cookie == 2) ||
	    (cookie == 0 && memcmp(readdir->rd_verf.data, zeroverf.data, NFS4_VERIFIER_SIZE)))
		return nfserr_bad_cookie;

	readdir->rd_rqstp = rqstp;
690
	readdir->rd_fhp = &cstate->current_fh;
L
Linus Torvalds 已提交
691 692 693
	return nfs_ok;
}

694
static __be32
695 696
nfsd4_readlink(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	       struct nfsd4_readlink *readlink)
L
Linus Torvalds 已提交
697 698
{
	readlink->rl_rqstp = rqstp;
699
	readlink->rl_fhp = &cstate->current_fh;
L
Linus Torvalds 已提交
700 701 702
	return nfs_ok;
}

703
static __be32
704 705
nfsd4_remove(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	     struct nfsd4_remove *remove)
L
Linus Torvalds 已提交
706
{
707
	__be32 status;
L
Linus Torvalds 已提交
708

709
	if (locks_in_grace())
710
		return nfserr_grace;
711 712
	status = nfsd_unlink(rqstp, &cstate->current_fh, 0,
			     remove->rm_name, remove->rm_namelen);
L
Linus Torvalds 已提交
713 714 715
	if (status == nfserr_symlink)
		return nfserr_notdir;
	if (!status) {
716 717
		fh_unlock(&cstate->current_fh);
		set_change_info(&remove->rm_cinfo, &cstate->current_fh);
L
Linus Torvalds 已提交
718 719 720 721
	}
	return status;
}

722
static __be32
723 724
nfsd4_rename(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	     struct nfsd4_rename *rename)
L
Linus Torvalds 已提交
725
{
726
	__be32 status = nfserr_nofilehandle;
L
Linus Torvalds 已提交
727

728
	if (!cstate->save_fh.fh_dentry)
L
Linus Torvalds 已提交
729
		return status;
730
	if (locks_in_grace() && !(cstate->save_fh.fh_export->ex_flags
731 732
					& NFSEXP_NOSUBTREECHECK))
		return nfserr_grace;
733 734
	status = nfsd_rename(rqstp, &cstate->save_fh, rename->rn_sname,
			     rename->rn_snamelen, &cstate->current_fh,
L
Linus Torvalds 已提交
735 736 737 738 739 740 741
			     rename->rn_tname, rename->rn_tnamelen);

	/* the underlying filesystem returns different error's than required
	 * by NFSv4. both save_fh and current_fh have been verified.. */
	if (status == nfserr_isdir)
		status = nfserr_exist;
	else if ((status == nfserr_notdir) &&
742 743
                  (S_ISDIR(cstate->save_fh.fh_dentry->d_inode->i_mode) &&
                   S_ISDIR(cstate->current_fh.fh_dentry->d_inode->i_mode)))
L
Linus Torvalds 已提交
744 745 746 747 748
		status = nfserr_exist;
	else if (status == nfserr_symlink)
		status = nfserr_notdir;

	if (!status) {
749 750
		set_change_info(&rename->rn_sinfo, &cstate->current_fh);
		set_change_info(&rename->rn_tinfo, &cstate->save_fh);
L
Linus Torvalds 已提交
751 752 753 754
	}
	return status;
}

A
Andy Adamson 已提交
755 756 757 758 759 760 761 762 763 764
static __be32
nfsd4_secinfo(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	      struct nfsd4_secinfo *secinfo)
{
	struct svc_fh resfh;
	struct svc_export *exp;
	struct dentry *dentry;
	__be32 err;

	fh_init(&resfh, NFS4_FHSIZE);
765 766 767
	err = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, NFSD_MAY_EXEC);
	if (err)
		return err;
A
Andy Adamson 已提交
768 769 770 771 772 773 774 775 776 777 778
	err = nfsd_lookup_dentry(rqstp, &cstate->current_fh,
				    secinfo->si_name, secinfo->si_namelen,
				    &exp, &dentry);
	if (err)
		return err;
	if (dentry->d_inode == NULL) {
		exp_put(exp);
		err = nfserr_noent;
	} else
		secinfo->si_exp = exp;
	dput(dentry);
779 780 781
	if (cstate->minorversion)
		/* See rfc 5661 section 2.6.3.1.1.8 */
		fh_put(&cstate->current_fh);
A
Andy Adamson 已提交
782 783 784
	return err;
}

J
J. Bruce Fields 已提交
785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807
static __be32
nfsd4_secinfo_no_name(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	      struct nfsd4_secinfo_no_name *sin)
{
	__be32 err;

	switch (sin->sin_style) {
	case NFS4_SECINFO_STYLE4_CURRENT_FH:
		break;
	case NFS4_SECINFO_STYLE4_PARENT:
		err = nfsd4_do_lookupp(rqstp, &cstate->current_fh);
		if (err)
			return err;
		break;
	default:
		return nfserr_inval;
	}
	exp_get(cstate->current_fh.fh_export);
	sin->sin_exp = cstate->current_fh.fh_export;
	fh_put(&cstate->current_fh);
	return nfs_ok;
}

808
static __be32
809 810
nfsd4_setattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	      struct nfsd4_setattr *setattr)
L
Linus Torvalds 已提交
811
{
812
	__be32 status = nfs_ok;
L
Linus Torvalds 已提交
813 814 815

	if (setattr->sa_iattr.ia_valid & ATTR_SIZE) {
		nfs4_lock_state();
816
		status = nfs4_preprocess_stateid_op(cstate,
817
			&setattr->sa_stateid, WR_STATE, NULL);
L
Linus Torvalds 已提交
818
		nfs4_unlock_state();
819
		if (status) {
820
			dprintk("NFSD: nfsd4_setattr: couldn't process stateid!\n");
821 822
			return status;
		}
L
Linus Torvalds 已提交
823
	}
824 825 826
	status = mnt_want_write(cstate->current_fh.fh_export->ex_path.mnt);
	if (status)
		return status;
L
Linus Torvalds 已提交
827
	status = nfs_ok;
828 829 830 831 832 833

	status = check_attr_support(rqstp, cstate, setattr->sa_bmval,
				    nfsd_attrmask);
	if (status)
		goto out;

L
Linus Torvalds 已提交
834
	if (setattr->sa_acl != NULL)
835 836
		status = nfsd4_set_nfs4_acl(rqstp, &cstate->current_fh,
					    setattr->sa_acl);
L
Linus Torvalds 已提交
837
	if (status)
838
		goto out;
839
	status = nfsd_setattr(rqstp, &cstate->current_fh, &setattr->sa_iattr,
L
Linus Torvalds 已提交
840
				0, (time_t)0);
841 842
out:
	mnt_drop_write(cstate->current_fh.fh_export->ex_path.mnt);
L
Linus Torvalds 已提交
843 844 845
	return status;
}

846
static __be32
847 848
nfsd4_write(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	    struct nfsd4_write *write)
L
Linus Torvalds 已提交
849 850 851 852
{
	stateid_t *stateid = &write->wr_stateid;
	struct file *filp = NULL;
	u32 *p;
853
	__be32 status = nfs_ok;
854
	unsigned long cnt;
L
Linus Torvalds 已提交
855 856 857 858 859 860 861

	/* no need to check permission - this will be done in nfsd_write() */

	if (write->wr_offset >= OFFSET_MAX)
		return nfserr_inval;

	nfs4_lock_state();
862
	status = nfs4_preprocess_stateid_op(cstate, stateid, WR_STATE, &filp);
863 864
	if (filp)
		get_file(filp);
L
Linus Torvalds 已提交
865 866
	nfs4_unlock_state();

867 868 869 870 871
	if (status) {
		dprintk("NFSD: nfsd4_write: couldn't process stateid!\n");
		return status;
	}

872
	cnt = write->wr_buflen;
L
Linus Torvalds 已提交
873 874 875 876 877
	write->wr_how_written = write->wr_stable_how;
	p = (u32 *)write->wr_verifier.data;
	*p++ = nfssvc_boot.tv_sec;
	*p++ = nfssvc_boot.tv_usec;

878 879
	status =  nfsd_write(rqstp, &cstate->current_fh, filp,
			     write->wr_offset, rqstp->rq_vec, write->wr_vlen,
880
			     &cnt, &write->wr_how_written);
881 882
	if (filp)
		fput(filp);
L
Linus Torvalds 已提交
883

884 885
	write->wr_bytes_written = cnt;

L
Linus Torvalds 已提交
886 887 888 889 890 891 892 893 894 895
	if (status == nfserr_symlink)
		status = nfserr_inval;
	return status;
}

/* This routine never returns NFS_OK!  If there are no other errors, it
 * will return NFSERR_SAME or NFSERR_NOT_SAME depending on whether the
 * attributes matched.  VERIFY is implemented by mapping NFSERR_SAME
 * to NFS_OK after the call; NVERIFY by mapping NFSERR_NOT_SAME to NFS_OK.
 */
896
static __be32
897
_nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
898
	     struct nfsd4_verify *verify)
L
Linus Torvalds 已提交
899
{
A
Al Viro 已提交
900
	__be32 *buf, *p;
L
Linus Torvalds 已提交
901
	int count;
902
	__be32 status;
L
Linus Torvalds 已提交
903

M
Miklos Szeredi 已提交
904
	status = fh_verify(rqstp, &cstate->current_fh, 0, NFSD_MAY_NOP);
L
Linus Torvalds 已提交
905 906 907
	if (status)
		return status;

908 909 910 911
	status = check_attr_support(rqstp, cstate, verify->ve_bmval, NULL);
	if (status)
		return status;

L
Linus Torvalds 已提交
912 913 914 915 916 917 918 919 920 921 922 923 924 925
	if ((verify->ve_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)
	    || (verify->ve_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1))
		return nfserr_inval;
	if (verify->ve_attrlen & 3)
		return nfserr_inval;

	/* count in words:
	 *   bitmap_len(1) + bitmap(2) + attr_len(1) = 4
	 */
	count = 4 + (verify->ve_attrlen >> 2);
	buf = kmalloc(count << 2, GFP_KERNEL);
	if (!buf)
		return nfserr_resource;

926 927 928
	status = nfsd4_encode_fattr(&cstate->current_fh,
				    cstate->current_fh.fh_export,
				    cstate->current_fh.fh_dentry, buf,
L
Linus Torvalds 已提交
929
				    &count, verify->ve_bmval,
930
				    rqstp, 0);
L
Linus Torvalds 已提交
931 932 933 934 935 936 937

	/* this means that nfsd4_encode_fattr() ran out of space */
	if (status == nfserr_resource && count == 0)
		status = nfserr_not_same;
	if (status)
		goto out_kfree;

938 939
	/* skip bitmap */
	p = buf + 1 + ntohl(buf[0]);
L
Linus Torvalds 已提交
940 941 942 943 944 945 946 947 948 949 950
	status = nfserr_not_same;
	if (ntohl(*p++) != verify->ve_attrlen)
		goto out_kfree;
	if (!memcmp(p, verify->ve_attrval, verify->ve_attrlen))
		status = nfserr_same;

out_kfree:
	kfree(buf);
	return status;
}

951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970
static __be32
nfsd4_nverify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	      struct nfsd4_verify *verify)
{
	__be32 status;

	status = _nfsd4_verify(rqstp, cstate, verify);
	return status == nfserr_not_same ? nfs_ok : status;
}

static __be32
nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
	     struct nfsd4_verify *verify)
{
	__be32 status;

	status = _nfsd4_verify(rqstp, cstate, verify);
	return status == nfserr_same ? nfs_ok : status;
}

L
Linus Torvalds 已提交
971 972 973
/*
 * NULL call.
 */
A
Al Viro 已提交
974
static __be32
L
Linus Torvalds 已提交
975 976 977 978 979
nfsd4_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
{
	return nfs_ok;
}

980 981 982 983 984 985
static inline void nfsd4_increment_op_stats(u32 opnum)
{
	if (opnum >= FIRST_NFS4_OP && opnum <= LAST_NFS4_OP)
		nfsdstats.nfs4_opcount[opnum]++;
}

986 987
typedef __be32(*nfsd4op_func)(struct svc_rqst *, struct nfsd4_compound_state *,
			      void *);
988 989
enum nfsd4_op_flags {
	ALLOWED_WITHOUT_FH = 1 << 0,	/* No current filehandle required */
990 991
	ALLOWED_ON_ABSENT_FS = 1 << 1,	/* ops processed on absent fs */
	ALLOWED_AS_FIRST_OP = 1 << 2,	/* ops reqired first in compound */
992 993 994
	/* For rfc 5661 section 2.6.3.1.1: */
	OP_HANDLES_WRONGSEC = 1 << 3,
	OP_IS_PUTFH_LIKE = 1 << 4,
995
};
996 997 998 999

struct nfsd4_operation {
	nfsd4op_func op_func;
	u32 op_flags;
B
Benny Halevy 已提交
1000
	char *op_name;
1001 1002 1003 1004
};

static struct nfsd4_operation nfsd4_ops[];

A
Adrian Bunk 已提交
1005
static const char *nfsd4_op_name(unsigned opnum);
B
Benny Halevy 已提交
1006

1007
/*
1008
 * Enforce NFSv4.1 COMPOUND ordering rules:
1009
 *
1010 1011 1012
 * Also note, enforced elsewhere:
 *	- SEQUENCE other than as first op results in
 *	  NFS4ERR_SEQUENCE_POS. (Enforced in nfsd4_sequence().)
1013 1014
 *	- BIND_CONN_TO_SESSION must be the only op in its compound.
 *	  (Enforced in nfsd4_bind_conn_to_session().)
1015 1016 1017
 *	- DESTROY_SESSION must be the final operation in a compound, if
 *	  sessionid's in SEQUENCE and DESTROY_SESSION are the same.
 *	  (Enforced in nfsd4_destroy_session().)
1018
 */
1019
static __be32 nfs41_check_op_ordering(struct nfsd4_compoundargs *args)
1020
{
1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037
	struct nfsd4_op *op = &args->ops[0];

	/* These ordering requirements don't apply to NFSv4.0: */
	if (args->minorversion == 0)
		return nfs_ok;
	/* This is weird, but OK, not our problem: */
	if (args->opcnt == 0)
		return nfs_ok;
	if (op->status == nfserr_op_illegal)
		return nfs_ok;
	if (!(nfsd4_ops[op->opnum].op_flags & ALLOWED_AS_FIRST_OP))
		return nfserr_op_not_in_session;
	if (op->opnum == OP_SEQUENCE)
		return nfs_ok;
	if (args->opcnt != 1)
		return nfserr_not_only_op;
	return nfs_ok;
1038 1039
}

J
J. Bruce Fields 已提交
1040 1041 1042 1043 1044
static inline struct nfsd4_operation *OPDESC(struct nfsd4_op *op)
{
	return &nfsd4_ops[op->opnum];
}

1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077
static bool need_wrongsec_check(struct svc_rqst *rqstp)
{
	struct nfsd4_compoundres *resp = rqstp->rq_resp;
	struct nfsd4_compoundargs *argp = rqstp->rq_argp;
	struct nfsd4_op *this = &argp->ops[resp->opcnt - 1];
	struct nfsd4_op *next = &argp->ops[resp->opcnt];
	struct nfsd4_operation *thisd;
	struct nfsd4_operation *nextd;

	thisd = OPDESC(this);
	/*
	 * Most ops check wronsec on our own; only the putfh-like ops
	 * have special rules.
	 */
	if (!(thisd->op_flags & OP_IS_PUTFH_LIKE))
		return false;
	/*
	 * rfc 5661 2.6.3.1.1.6: don't bother erroring out a
	 * put-filehandle operation if we're not going to use the
	 * result:
	 */
	if (argp->opcnt == resp->opcnt)
		return false;

	nextd = OPDESC(next);
	/*
	 * Rest of 2.6.3.1.1: certain operations will return WRONGSEC
	 * errors themselves as necessary; others should check for them
	 * now:
	 */
	return !(nextd->op_flags & OP_HANDLES_WRONGSEC);
}

L
Linus Torvalds 已提交
1078 1079 1080
/*
 * COMPOUND call.
 */
A
Al Viro 已提交
1081
static __be32
L
Linus Torvalds 已提交
1082 1083 1084 1085 1086
nfsd4_proc_compound(struct svc_rqst *rqstp,
		    struct nfsd4_compoundargs *args,
		    struct nfsd4_compoundres *resp)
{
	struct nfsd4_op	*op;
1087
	struct nfsd4_operation *opdesc;
1088
	struct nfsd4_compound_state *cstate = &resp->cstate;
1089
	int		slack_bytes;
1090
	__be32		status;
L
Linus Torvalds 已提交
1091 1092

	resp->xbuf = &rqstp->rq_res;
1093 1094
	resp->p = rqstp->rq_res.head[0].iov_base +
						rqstp->rq_res.head[0].iov_len;
L
Linus Torvalds 已提交
1095 1096 1097 1098 1099 1100 1101 1102
	resp->tagp = resp->p;
	/* reserve space for: taglen, tag, and opcnt */
	resp->p += 2 + XDR_QUADLEN(args->taglen);
	resp->end = rqstp->rq_res.head[0].iov_base + PAGE_SIZE;
	resp->taglen = args->taglen;
	resp->tag = args->tag;
	resp->opcnt = 0;
	resp->rqstp = rqstp;
A
Andy Adamson 已提交
1103
	resp->cstate.minorversion = args->minorversion;
1104
	resp->cstate.replay_owner = NULL;
1105
	resp->cstate.session = NULL;
1106 1107
	fh_init(&resp->cstate.current_fh, NFS4_FHSIZE);
	fh_init(&resp->cstate.save_fh, NFS4_FHSIZE);
N
NeilBrown 已提交
1108 1109 1110 1111 1112
	/*
	 * Don't use the deferral mechanism for NFSv4; compounds make it
	 * too hard to avoid non-idempotency problems.
	 */
	rqstp->rq_usedeferral = 0;
L
Linus Torvalds 已提交
1113 1114 1115 1116 1117

	/*
	 * According to RFC3010, this takes precedence over all other errors.
	 */
	status = nfserr_minor_vers_mismatch;
1118
	if (args->minorversion > nfsd_supported_minorversion)
L
Linus Torvalds 已提交
1119 1120
		goto out;

1121 1122
	status = nfs41_check_op_ordering(args);
	if (status) {
1123
		op = &args->ops[0];
1124
		op->status = status;
1125 1126 1127
		goto encode_op;
	}

L
Linus Torvalds 已提交
1128 1129 1130
	while (!status && resp->opcnt < args->opcnt) {
		op = &args->ops[resp->opcnt++];

B
Benny Halevy 已提交
1131 1132 1133
		dprintk("nfsv4 compound op #%d/%d: %d (%s)\n",
			resp->opcnt, args->opcnt, op->opnum,
			nfsd4_op_name(op->opnum));
L
Linus Torvalds 已提交
1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146
		/*
		 * The XDR decode routines may have pre-set op->status;
		 * for example, if there is a miscellaneous XDR error
		 * it will be set to nfserr_bad_xdr.
		 */
		if (op->status)
			goto encode_op;

		/* We must be able to encode a successful response to
		 * this operation, with enough room left over to encode a
		 * failed response to the next operation.  If we don't
		 * have enough room, fail with ERR_RESOURCE.
		 */
1147 1148 1149 1150
		slack_bytes = (char *)resp->end - (char *)resp->p;
		if (slack_bytes < COMPOUND_SLACK_SPACE
				+ COMPOUND_ERR_SLACK_SPACE) {
			BUG_ON(slack_bytes < COMPOUND_ERR_SLACK_SPACE);
L
Linus Torvalds 已提交
1151 1152 1153 1154
			op->status = nfserr_resource;
			goto encode_op;
		}

J
J. Bruce Fields 已提交
1155
		opdesc = OPDESC(op);
1156

1157
		if (!cstate->current_fh.fh_dentry) {
1158
			if (!(opdesc->op_flags & ALLOWED_WITHOUT_FH)) {
1159 1160 1161
				op->status = nfserr_nofilehandle;
				goto encode_op;
			}
1162 1163
		} else if (cstate->current_fh.fh_export->ex_fslocs.migrated &&
			  !(opdesc->op_flags & ALLOWED_ON_ABSENT_FS)) {
1164
			op->status = nfserr_moved;
L
Linus Torvalds 已提交
1165 1166
			goto encode_op;
		}
1167 1168 1169 1170

		if (opdesc->op_func)
			op->status = opdesc->op_func(rqstp, cstate, &op->u);
		else
L
Linus Torvalds 已提交
1171 1172
			BUG_ON(op->status == nfs_ok);

1173 1174 1175
		if (!op->status && need_wrongsec_check(rqstp))
			op->status = check_nfsd_access(cstate->current_fh.fh_export, rqstp);

L
Linus Torvalds 已提交
1176
encode_op:
1177
		/* Only from SEQUENCE */
A
Andy Adamson 已提交
1178 1179
		if (resp->cstate.status == nfserr_replay_cache) {
			dprintk("%s NFS4.1 replay from cache\n", __func__);
1180
			status = op->status;
A
Andy Adamson 已提交
1181 1182
			goto out;
		}
A
Al Viro 已提交
1183
		if (op->status == nfserr_replay_me) {
1184
			op->replay = &cstate->replay_owner->so_replay;
L
Linus Torvalds 已提交
1185 1186 1187 1188 1189 1190
			nfsd4_encode_replay(resp, op);
			status = op->status = op->replay->rp_status;
		} else {
			nfsd4_encode_operation(resp, op);
			status = op->status;
		}
1191 1192 1193 1194 1195

		dprintk("nfsv4 compound op %p opcnt %d #%d: %d: status %d\n",
			args->ops, args->opcnt, resp->opcnt, op->opnum,
			be32_to_cpu(status));

1196 1197 1198
		if (cstate->replay_owner) {
			nfs4_put_stateowner(cstate->replay_owner);
			cstate->replay_owner = NULL;
L
Linus Torvalds 已提交
1199
		}
1200 1201 1202
		/* XXX Ugh, we need to get rid of this kind of special case: */
		if (op->opnum == OP_READ && op->u.read.rd_filp)
			fput(op->u.read.rd_filp);
1203 1204

		nfsd4_increment_op_stats(op->opnum);
L
Linus Torvalds 已提交
1205 1206
	}

A
Andy Adamson 已提交
1207
	resp->cstate.status = status;
1208 1209 1210
	fh_put(&resp->cstate.current_fh);
	fh_put(&resp->cstate.save_fh);
	BUG_ON(resp->cstate.replay_owner);
L
Linus Torvalds 已提交
1211 1212
out:
	nfsd4_release_compoundargs(args);
1213 1214
	/* Reset deferral mechanism for RPC deferrals */
	rqstp->rq_usedeferral = 1;
1215
	dprintk("nfsv4 compound returned %d\n", ntohl(status));
L
Linus Torvalds 已提交
1216 1217 1218
	return status;
}

B
Benny Halevy 已提交
1219
static struct nfsd4_operation nfsd4_ops[] = {
1220 1221
	[OP_ACCESS] = {
		.op_func = (nfsd4op_func)nfsd4_access,
B
Benny Halevy 已提交
1222
		.op_name = "OP_ACCESS",
1223 1224 1225
	},
	[OP_CLOSE] = {
		.op_func = (nfsd4op_func)nfsd4_close,
B
Benny Halevy 已提交
1226
		.op_name = "OP_CLOSE",
1227 1228 1229
	},
	[OP_COMMIT] = {
		.op_func = (nfsd4op_func)nfsd4_commit,
B
Benny Halevy 已提交
1230
		.op_name = "OP_COMMIT",
1231 1232 1233
	},
	[OP_CREATE] = {
		.op_func = (nfsd4op_func)nfsd4_create,
B
Benny Halevy 已提交
1234
		.op_name = "OP_CREATE",
1235 1236 1237
	},
	[OP_DELEGRETURN] = {
		.op_func = (nfsd4op_func)nfsd4_delegreturn,
B
Benny Halevy 已提交
1238
		.op_name = "OP_DELEGRETURN",
1239 1240 1241
	},
	[OP_GETATTR] = {
		.op_func = (nfsd4op_func)nfsd4_getattr,
1242
		.op_flags = ALLOWED_ON_ABSENT_FS,
B
Benny Halevy 已提交
1243
		.op_name = "OP_GETATTR",
1244 1245 1246
	},
	[OP_GETFH] = {
		.op_func = (nfsd4op_func)nfsd4_getfh,
B
Benny Halevy 已提交
1247
		.op_name = "OP_GETFH",
1248 1249 1250
	},
	[OP_LINK] = {
		.op_func = (nfsd4op_func)nfsd4_link,
B
Benny Halevy 已提交
1251
		.op_name = "OP_LINK",
1252 1253 1254
	},
	[OP_LOCK] = {
		.op_func = (nfsd4op_func)nfsd4_lock,
B
Benny Halevy 已提交
1255
		.op_name = "OP_LOCK",
1256 1257 1258
	},
	[OP_LOCKT] = {
		.op_func = (nfsd4op_func)nfsd4_lockt,
B
Benny Halevy 已提交
1259
		.op_name = "OP_LOCKT",
1260 1261 1262
	},
	[OP_LOCKU] = {
		.op_func = (nfsd4op_func)nfsd4_locku,
B
Benny Halevy 已提交
1263
		.op_name = "OP_LOCKU",
1264 1265 1266
	},
	[OP_LOOKUP] = {
		.op_func = (nfsd4op_func)nfsd4_lookup,
1267
		.op_flags = OP_HANDLES_WRONGSEC,
B
Benny Halevy 已提交
1268
		.op_name = "OP_LOOKUP",
1269 1270 1271
	},
	[OP_LOOKUPP] = {
		.op_func = (nfsd4op_func)nfsd4_lookupp,
1272
		.op_flags = OP_HANDLES_WRONGSEC,
B
Benny Halevy 已提交
1273
		.op_name = "OP_LOOKUPP",
1274 1275 1276
	},
	[OP_NVERIFY] = {
		.op_func = (nfsd4op_func)nfsd4_nverify,
B
Benny Halevy 已提交
1277
		.op_name = "OP_NVERIFY",
1278 1279 1280
	},
	[OP_OPEN] = {
		.op_func = (nfsd4op_func)nfsd4_open,
1281
		.op_flags = OP_HANDLES_WRONGSEC,
B
Benny Halevy 已提交
1282
		.op_name = "OP_OPEN",
1283 1284 1285
	},
	[OP_OPEN_CONFIRM] = {
		.op_func = (nfsd4op_func)nfsd4_open_confirm,
B
Benny Halevy 已提交
1286
		.op_name = "OP_OPEN_CONFIRM",
1287 1288 1289
	},
	[OP_OPEN_DOWNGRADE] = {
		.op_func = (nfsd4op_func)nfsd4_open_downgrade,
B
Benny Halevy 已提交
1290
		.op_name = "OP_OPEN_DOWNGRADE",
1291 1292 1293
	},
	[OP_PUTFH] = {
		.op_func = (nfsd4op_func)nfsd4_putfh,
1294 1295
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
				| OP_IS_PUTFH_LIKE,
B
Benny Halevy 已提交
1296
		.op_name = "OP_PUTFH",
1297
	},
1298
	[OP_PUTPUBFH] = {
1299
		.op_func = (nfsd4op_func)nfsd4_putrootfh,
1300 1301
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
				| OP_IS_PUTFH_LIKE,
B
Benny Halevy 已提交
1302
		.op_name = "OP_PUTPUBFH",
1303
	},
1304 1305
	[OP_PUTROOTFH] = {
		.op_func = (nfsd4op_func)nfsd4_putrootfh,
1306 1307
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
				| OP_IS_PUTFH_LIKE,
B
Benny Halevy 已提交
1308
		.op_name = "OP_PUTROOTFH",
1309 1310 1311
	},
	[OP_READ] = {
		.op_func = (nfsd4op_func)nfsd4_read,
B
Benny Halevy 已提交
1312
		.op_name = "OP_READ",
1313 1314 1315
	},
	[OP_READDIR] = {
		.op_func = (nfsd4op_func)nfsd4_readdir,
B
Benny Halevy 已提交
1316
		.op_name = "OP_READDIR",
1317 1318 1319
	},
	[OP_READLINK] = {
		.op_func = (nfsd4op_func)nfsd4_readlink,
B
Benny Halevy 已提交
1320
		.op_name = "OP_READLINK",
1321 1322 1323
	},
	[OP_REMOVE] = {
		.op_func = (nfsd4op_func)nfsd4_remove,
B
Benny Halevy 已提交
1324
		.op_name = "OP_REMOVE",
1325 1326
	},
	[OP_RENAME] = {
B
Benny Halevy 已提交
1327
		.op_name = "OP_RENAME",
1328 1329 1330 1331
		.op_func = (nfsd4op_func)nfsd4_rename,
	},
	[OP_RENEW] = {
		.op_func = (nfsd4op_func)nfsd4_renew,
1332
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
B
Benny Halevy 已提交
1333
		.op_name = "OP_RENEW",
1334 1335 1336
	},
	[OP_RESTOREFH] = {
		.op_func = (nfsd4op_func)nfsd4_restorefh,
1337 1338
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS
				| OP_IS_PUTFH_LIKE,
B
Benny Halevy 已提交
1339
		.op_name = "OP_RESTOREFH",
1340 1341 1342
	},
	[OP_SAVEFH] = {
		.op_func = (nfsd4op_func)nfsd4_savefh,
1343
		.op_flags = OP_HANDLES_WRONGSEC,
B
Benny Halevy 已提交
1344
		.op_name = "OP_SAVEFH",
1345
	},
A
Andy Adamson 已提交
1346 1347
	[OP_SECINFO] = {
		.op_func = (nfsd4op_func)nfsd4_secinfo,
1348
		.op_flags = OP_HANDLES_WRONGSEC,
B
Benny Halevy 已提交
1349
		.op_name = "OP_SECINFO",
A
Andy Adamson 已提交
1350
	},
1351 1352
	[OP_SETATTR] = {
		.op_func = (nfsd4op_func)nfsd4_setattr,
B
Benny Halevy 已提交
1353
		.op_name = "OP_SETATTR",
1354 1355 1356
	},
	[OP_SETCLIENTID] = {
		.op_func = (nfsd4op_func)nfsd4_setclientid,
1357
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
B
Benny Halevy 已提交
1358
		.op_name = "OP_SETCLIENTID",
1359 1360 1361
	},
	[OP_SETCLIENTID_CONFIRM] = {
		.op_func = (nfsd4op_func)nfsd4_setclientid_confirm,
1362
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
B
Benny Halevy 已提交
1363
		.op_name = "OP_SETCLIENTID_CONFIRM",
1364 1365 1366
	},
	[OP_VERIFY] = {
		.op_func = (nfsd4op_func)nfsd4_verify,
B
Benny Halevy 已提交
1367
		.op_name = "OP_VERIFY",
1368 1369 1370
	},
	[OP_WRITE] = {
		.op_func = (nfsd4op_func)nfsd4_write,
B
Benny Halevy 已提交
1371
		.op_name = "OP_WRITE",
1372 1373 1374
	},
	[OP_RELEASE_LOCKOWNER] = {
		.op_func = (nfsd4op_func)nfsd4_release_lockowner,
1375
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
B
Benny Halevy 已提交
1376
		.op_name = "OP_RELEASE_LOCKOWNER",
1377
	},
A
Andy Adamson 已提交
1378 1379 1380 1381

	/* NFSv4.1 operations */
	[OP_EXCHANGE_ID] = {
		.op_func = (nfsd4op_func)nfsd4_exchange_id,
1382
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
A
Andy Adamson 已提交
1383 1384
		.op_name = "OP_EXCHANGE_ID",
	},
1385 1386 1387 1388 1389
	[OP_BIND_CONN_TO_SESSION] = {
		.op_func = (nfsd4op_func)nfsd4_bind_conn_to_session,
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
		.op_name = "OP_BIND_CONN_TO_SESSION",
	},
A
Andy Adamson 已提交
1390 1391
	[OP_CREATE_SESSION] = {
		.op_func = (nfsd4op_func)nfsd4_create_session,
1392
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
A
Andy Adamson 已提交
1393 1394 1395 1396
		.op_name = "OP_CREATE_SESSION",
	},
	[OP_DESTROY_SESSION] = {
		.op_func = (nfsd4op_func)nfsd4_destroy_session,
1397
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
A
Andy Adamson 已提交
1398 1399 1400 1401
		.op_name = "OP_DESTROY_SESSION",
	},
	[OP_SEQUENCE] = {
		.op_func = (nfsd4op_func)nfsd4_sequence,
1402
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
A
Andy Adamson 已提交
1403 1404
		.op_name = "OP_SEQUENCE",
	},
1405 1406 1407 1408 1409
	[OP_DESTROY_CLIENTID] = {
		.op_func = NULL,
		.op_flags = ALLOWED_WITHOUT_FH | ALLOWED_AS_FIRST_OP,
		.op_name = "OP_DESTROY_CLIENTID",
	},
1410 1411 1412 1413 1414
	[OP_RECLAIM_COMPLETE] = {
		.op_func = (nfsd4op_func)nfsd4_reclaim_complete,
		.op_flags = ALLOWED_WITHOUT_FH,
		.op_name = "OP_RECLAIM_COMPLETE",
	},
J
J. Bruce Fields 已提交
1415 1416
	[OP_SECINFO_NO_NAME] = {
		.op_func = (nfsd4op_func)nfsd4_secinfo_no_name,
1417
		.op_flags = OP_HANDLES_WRONGSEC,
J
J. Bruce Fields 已提交
1418 1419
		.op_name = "OP_SECINFO_NO_NAME",
	},
1420 1421 1422 1423 1424
	[OP_FREE_STATEID] = {
		.op_func = (nfsd4op_func)nfsd4_free_stateid,
		.op_flags = ALLOWED_WITHOUT_FH,
		.op_name = "OP_FREE_STATEID",
	},
1425 1426
};

A
Adrian Bunk 已提交
1427
static const char *nfsd4_op_name(unsigned opnum)
B
Benny Halevy 已提交
1428 1429 1430 1431 1432 1433
{
	if (opnum < ARRAY_SIZE(nfsd4_ops))
		return nfsd4_ops[opnum].op_name;
	return "unknown_operation";
}

L
Linus Torvalds 已提交
1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447
#define nfsd4_voidres			nfsd4_voidargs
struct nfsd4_voidargs { int dummy; };

/*
 * TODO: At the present time, the NFSv4 server does not do XID caching
 * of requests.  Implementing XID caching would not be a serious problem,
 * although it would require a mild change in interfaces since one
 * doesn't know whether an NFSv4 request is idempotent until after the
 * XDR decode.  However, XID caching totally confuses pynfs (Peter
 * Astrand's regression testsuite for NFSv4 servers), which reuses
 * XID's liberally, so I've left it unimplemented until pynfs generates
 * better XID's.
 */
static struct svc_procedure		nfsd_procedures4[2] = {
1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464
	[NFSPROC4_NULL] = {
		.pc_func = (svc_procfunc) nfsd4_proc_null,
		.pc_encode = (kxdrproc_t) nfs4svc_encode_voidres,
		.pc_argsize = sizeof(struct nfsd4_voidargs),
		.pc_ressize = sizeof(struct nfsd4_voidres),
		.pc_cachetype = RC_NOCACHE,
		.pc_xdrressize = 1,
	},
	[NFSPROC4_COMPOUND] = {
		.pc_func = (svc_procfunc) nfsd4_proc_compound,
		.pc_decode = (kxdrproc_t) nfs4svc_decode_compoundargs,
		.pc_encode = (kxdrproc_t) nfs4svc_encode_compoundres,
		.pc_argsize = sizeof(struct nfsd4_compoundargs),
		.pc_ressize = sizeof(struct nfsd4_compoundres),
		.pc_cachetype = RC_NOCACHE,
		.pc_xdrressize = NFSD_BUFSIZE/4,
	},
L
Linus Torvalds 已提交
1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479
};

struct svc_version	nfsd_version4 = {
		.vs_vers	= 4,
		.vs_nproc	= 2,
		.vs_proc	= nfsd_procedures4,
		.vs_dispatch	= nfsd_dispatch,
		.vs_xdrsize	= NFS4_SVC_XDRSIZE,
};

/*
 * Local variables:
 *  c-basic-offset: 8
 * End:
 */