SAFE public projects git trees. - safe/jmp/linux-2.6/blob - fs/nfsd/nfs4proc.c

   1 /*
   2  *  fs/nfsd/nfs4proc.c
   3  *
   4  *  Server-side procedures for NFSv4.
   5  *
   6  *  Copyright (c) 2002 The Regents of the University of Michigan.
   7  *  All rights reserved.
   8  *
   9  *  Kendrick Smith <kmsmith@umich.edu>
  10  *  Andy Adamson   <andros@umich.edu>
  11  *
  12  *  Redistribution and use in source and binary forms, with or without
  13  *  modification, are permitted provided that the following conditions
  14  *  are met:
  15  *
  16  *  1. Redistributions of source code must retain the above copyright
  17  *     notice, this list of conditions and the following disclaimer.
  18  *  2. Redistributions in binary form must reproduce the above copyright
  19  *     notice, this list of conditions and the following disclaimer in the
  20  *     documentation and/or other materials provided with the distribution.
  21  *  3. Neither the name of the University nor the names of its
  22  *     contributors may be used to endorse or promote products derived
  23  *     from this software without specific prior written permission.
  24  *
  25  *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
  26  *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  27  *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  28  *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  29  *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  30  *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  31  *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  32  *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  33  *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  34  *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  35  *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  36  */
  37
  38 #include <linux/param.h>
  39 #include <linux/major.h>
  40 #include <linux/slab.h>
  41 #include <linux/file.h>
  42
  43 #include <linux/sunrpc/svc.h>
  44 #include <linux/nfsd/nfsd.h>
  45 #include <linux/nfsd/cache.h>
  46 #include <linux/nfs4.h>
  47 #include <linux/nfsd/state.h>
  48 #include <linux/nfsd/xdr4.h>
  49 #include <linux/nfs4_acl.h>
  50
  51 #define NFSDDBG_FACILITY                NFSDDBG_PROC
  52
  53 static inline void
  54 fh_dup2(struct svc_fh *dst, struct svc_fh *src)
  55 {
  56         fh_put(dst);
  57         dget(src->fh_dentry);
  58         if (src->fh_export)
  59                 cache_get(&src->fh_export->h);
  60         *dst = *src;
  61 }
  62
  63 static __be32
  64 do_open_permission(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open, int accmode)
  65 {
  66         __be32 status;
  67
  68         if (open->op_truncate &&
  69                 !(open->op_share_access & NFS4_SHARE_ACCESS_WRITE))
  70                 return nfserr_inval;
  71
  72         if (open->op_share_access & NFS4_SHARE_ACCESS_READ)
  73                 accmode |= MAY_READ;
  74         if (open->op_share_access & NFS4_SHARE_ACCESS_WRITE)
  75                 accmode |= (MAY_WRITE | MAY_TRUNC);
  76         if (open->op_share_deny & NFS4_SHARE_DENY_WRITE)
  77                 accmode |= MAY_WRITE;
  78
  79         status = fh_verify(rqstp, current_fh, S_IFREG, accmode);
  80
  81         return status;
  82 }
  83
  84 static __be32
  85 do_open_lookup(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open)
  86 {
  87         struct svc_fh resfh;
  88         __be32 status;
  89         int created = 0;
  90
  91         fh_init(&resfh, NFS4_FHSIZE);
  92         open->op_truncate = 0;
  93
  94         if (open->op_create) {
  95                 /*
  96                  * Note: create modes (UNCHECKED,GUARDED...) are the same
  97                  * in NFSv4 as in v3.
  98                  */
  99                 status = nfsd_create_v3(rqstp, current_fh, open->op_fname.data,
 100                                         open->op_fname.len, &open->op_iattr,
 101                                         &resfh, open->op_createmode,
 102                                         (u32 *)open->op_verf.data, &open->op_truncate, &created);
 103         } else {
 104                 status = nfsd_lookup(rqstp, current_fh,
 105                                      open->op_fname.data, open->op_fname.len, &resfh);
 106                 fh_unlock(current_fh);
 107         }
 108         if (status)
 109                 goto out;
 110
 111         set_change_info(&open->op_cinfo, current_fh);
 112
 113         /* set reply cache */
 114         fh_dup2(current_fh, &resfh);
 115         open->op_stateowner->so_replay.rp_openfh_len = resfh.fh_handle.fh_size;
 116         memcpy(open->op_stateowner->so_replay.rp_openfh,
 117                         &resfh.fh_handle.fh_base, resfh.fh_handle.fh_size);
 118
 119         if (!created)
 120                 status = do_open_permission(rqstp, current_fh, open, MAY_NOP);
 121
 122 out:
 123         fh_put(&resfh);
 124         return status;
 125 }
 126
 127 static __be32
 128 do_open_fhandle(struct svc_rqst *rqstp, struct svc_fh *current_fh, struct nfsd4_open *open)
 129 {
 130         __be32 status;
 131
 132         /* Only reclaims from previously confirmed clients are valid */
 133         if ((status = nfs4_check_open_reclaim(&open->op_clientid)))
 134                 return status;
 135
 136         /* We don't know the target directory, and therefore can not
 137         * set the change info
 138         */
 139
 140         memset(&open->op_cinfo, 0, sizeof(struct nfsd4_change_info));
 141
 142         /* set replay cache */
 143         open->op_stateowner->so_replay.rp_openfh_len = current_fh->fh_handle.fh_size;
 144         memcpy(open->op_stateowner->so_replay.rp_openfh,
 145                 &current_fh->fh_handle.fh_base,
 146                 current_fh->fh_handle.fh_size);
 147
 148         open->op_truncate = (open->op_iattr.ia_valid & ATTR_SIZE) &&
 149                 (open->op_iattr.ia_size == 0);
 150
 151         status = do_open_permission(rqstp, current_fh, open, MAY_OWNER_OVERRIDE);
 152
 153         return status;
 154 }
 155
 156
 157 static __be32
 158 nfsd4_open(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 159            struct nfsd4_open *open)
 160 {
 161         __be32 status;
 162         dprintk("NFSD: nfsd4_open filename %.*s op_stateowner %p\n",
 163                 (int)open->op_fname.len, open->op_fname.data,
 164                 open->op_stateowner);
 165
 166         /* This check required by spec. */
 167         if (open->op_create && open->op_claim_type != NFS4_OPEN_CLAIM_NULL)
 168                 return nfserr_inval;
 169
 170         nfs4_lock_state();
 171
 172         /* check seqid for replay. set nfs4_owner */
 173         status = nfsd4_process_open1(open);
 174         if (status == nfserr_replay_me) {
 175                 struct nfs4_replay *rp = &open->op_stateowner->so_replay;
 176                 fh_put(&cstate->current_fh);
 177                 cstate->current_fh.fh_handle.fh_size = rp->rp_openfh_len;
 178                 memcpy(&cstate->current_fh.fh_handle.fh_base, rp->rp_openfh,
 179                                 rp->rp_openfh_len);
 180                 status = fh_verify(rqstp, &cstate->current_fh, 0, MAY_NOP);
 181                 if (status)
 182                         dprintk("nfsd4_open: replay failed"
 183                                 " restoring previous filehandle\n");
 184                 else
 185                         status = nfserr_replay_me;
 186         }
 187         if (status)
 188                 goto out;
 189
 190         /* Openowner is now set, so sequence id will get bumped.  Now we need
 191          * these checks before we do any creates: */
 192         status = nfserr_grace;
 193         if (nfs4_in_grace() && open->op_claim_type != NFS4_OPEN_CLAIM_PREVIOUS)
 194                 goto out;
 195         status = nfserr_no_grace;
 196         if (!nfs4_in_grace() && open->op_claim_type == NFS4_OPEN_CLAIM_PREVIOUS)
 197                 goto out;
 198
 199         switch (open->op_claim_type) {
 200                 case NFS4_OPEN_CLAIM_DELEGATE_CUR:
 201                         status = nfserr_inval;
 202                         if (open->op_create)
 203                                 goto out;
 204                         /* fall through */
 205                 case NFS4_OPEN_CLAIM_NULL:
 206                         /*
 207                          * (1) set CURRENT_FH to the file being opened,
 208                          * creating it if necessary, (2) set open->op_cinfo,
 209                          * (3) set open->op_truncate if the file is to be
 210                          * truncated after opening, (4) do permission checking.
 211                          */
 212                         status = do_open_lookup(rqstp, &cstate->current_fh,
 213                                                 open);
 214                         if (status)
 215                                 goto out;
 216                         break;
 217                 case NFS4_OPEN_CLAIM_PREVIOUS:
 218                         open->op_stateowner->so_confirmed = 1;
 219                         /*
 220                          * The CURRENT_FH is already set to the file being
 221                          * opened.  (1) set open->op_cinfo, (2) set
 222                          * open->op_truncate if the file is to be truncated
 223                          * after opening, (3) do permission checking.
 224                         */
 225                         status = do_open_fhandle(rqstp, &cstate->current_fh,
 226                                                  open);
 227                         if (status)
 228                                 goto out;
 229                         break;
 230                 case NFS4_OPEN_CLAIM_DELEGATE_PREV:
 231                         open->op_stateowner->so_confirmed = 1;
 232                         printk("NFSD: unsupported OPEN claim type %d\n",
 233                                 open->op_claim_type);
 234                         status = nfserr_notsupp;
 235                         goto out;
 236                 default:
 237                         printk("NFSD: Invalid OPEN claim type %d\n",
 238                                 open->op_claim_type);
 239                         status = nfserr_inval;
 240                         goto out;
 241         }
 242         /*
 243          * nfsd4_process_open2() does the actual opening of the file.  If
 244          * successful, it (1) truncates the file if open->op_truncate was
 245          * set, (2) sets open->op_stateid, (3) sets open->op_delegation.
 246          */
 247         status = nfsd4_process_open2(rqstp, &cstate->current_fh, open);
 248 out:
 249         if (open->op_stateowner) {
 250                 nfs4_get_stateowner(open->op_stateowner);
 251                 cstate->replay_owner = open->op_stateowner;
 252         }
 253         nfs4_unlock_state();
 254         return status;
 255 }
 256
 257 /*
 258  * filehandle-manipulating ops.
 259  */
 260 static __be32
 261 nfsd4_getfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 262             struct svc_fh **getfh)
 263 {
 264         if (!cstate->current_fh.fh_dentry)
 265                 return nfserr_nofilehandle;
 266
 267         *getfh = &cstate->current_fh;
 268         return nfs_ok;
 269 }
 270
 271 static __be32
 272 nfsd4_putfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 273             struct nfsd4_putfh *putfh)
 274 {
 275         fh_put(&cstate->current_fh);
 276         cstate->current_fh.fh_handle.fh_size = putfh->pf_fhlen;
 277         memcpy(&cstate->current_fh.fh_handle.fh_base, putfh->pf_fhval,
 278                putfh->pf_fhlen);
 279         return fh_verify(rqstp, &cstate->current_fh, 0, MAY_NOP);
 280 }
 281
 282 static __be32
 283 nfsd4_putrootfh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 284                 void *arg)
 285 {
 286         __be32 status;
 287
 288         fh_put(&cstate->current_fh);
 289         status = exp_pseudoroot(rqstp, &cstate->current_fh);
 290         return status;
 291 }
 292
 293 static __be32
 294 nfsd4_restorefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 295                 void *arg)
 296 {
 297         if (!cstate->save_fh.fh_dentry)
 298                 return nfserr_restorefh;
 299
 300         fh_dup2(&cstate->current_fh, &cstate->save_fh);
 301         return nfs_ok;
 302 }
 303
 304 static __be32
 305 nfsd4_savefh(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 306              void *arg)
 307 {
 308         if (!cstate->current_fh.fh_dentry)
 309                 return nfserr_nofilehandle;
 310
 311         fh_dup2(&cstate->save_fh, &cstate->current_fh);
 312         return nfs_ok;
 313 }
 314
 315 /*
 316  * misc nfsv4 ops
 317  */
 318 static __be32
 319 nfsd4_access(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 320              struct nfsd4_access *access)
 321 {
 322         if (access->ac_req_access & ~NFS3_ACCESS_FULL)
 323                 return nfserr_inval;
 324
 325         access->ac_resp_access = access->ac_req_access;
 326         return nfsd_access(rqstp, &cstate->current_fh, &access->ac_resp_access,
 327                            &access->ac_supported);
 328 }
 329
 330 static __be32
 331 nfsd4_commit(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 332              struct nfsd4_commit *commit)
 333 {
 334         __be32 status;
 335
 336         u32 *p = (u32 *)commit->co_verf.data;
 337         *p++ = nfssvc_boot.tv_sec;
 338         *p++ = nfssvc_boot.tv_usec;
 339
 340         status = nfsd_commit(rqstp, &cstate->current_fh, commit->co_offset,
 341                              commit->co_count);
 342         if (status == nfserr_symlink)
 343                 status = nfserr_inval;
 344         return status;
 345 }
 346
 347 static __be32
 348 nfsd4_create(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 349              struct nfsd4_create *create)
 350 {
 351         struct svc_fh resfh;
 352         __be32 status;
 353         dev_t rdev;
 354
 355         fh_init(&resfh, NFS4_FHSIZE);
 356
 357         status = fh_verify(rqstp, &cstate->current_fh, S_IFDIR, MAY_CREATE);
 358         if (status == nfserr_symlink)
 359                 status = nfserr_notdir;
 360         if (status)
 361                 return status;
 362
 363         switch (create->cr_type) {
 364         case NF4LNK:
 365                 /* ugh! we have to null-terminate the linktext, or
 366                  * vfs_symlink() will choke.  it is always safe to
 367                  * null-terminate by brute force, since at worst we
 368                  * will overwrite the first byte of the create namelen
 369                  * in the XDR buffer, which has already been extracted
 370                  * during XDR decode.
 371                  */
 372                 create->cr_linkname[create->cr_linklen] = 0;
 373
 374                 status = nfsd_symlink(rqstp, &cstate->current_fh,
 375                                       create->cr_name, create->cr_namelen,
 376                                       create->cr_linkname, create->cr_linklen,
 377                                       &resfh, &create->cr_iattr);
 378                 break;
 379
 380         case NF4BLK:
 381                 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
 382                 if (MAJOR(rdev) != create->cr_specdata1 ||
 383                     MINOR(rdev) != create->cr_specdata2)
 384                         return nfserr_inval;
 385                 status = nfsd_create(rqstp, &cstate->current_fh,
 386                                      create->cr_name, create->cr_namelen,
 387                                      &create->cr_iattr, S_IFBLK, rdev, &resfh);
 388                 break;
 389
 390         case NF4CHR:
 391                 rdev = MKDEV(create->cr_specdata1, create->cr_specdata2);
 392                 if (MAJOR(rdev) != create->cr_specdata1 ||
 393                     MINOR(rdev) != create->cr_specdata2)
 394                         return nfserr_inval;
 395                 status = nfsd_create(rqstp, &cstate->current_fh,
 396                                      create->cr_name, create->cr_namelen,
 397                                      &create->cr_iattr,S_IFCHR, rdev, &resfh);
 398                 break;
 399
 400         case NF4SOCK:
 401                 status = nfsd_create(rqstp, &cstate->current_fh,
 402                                      create->cr_name, create->cr_namelen,
 403                                      &create->cr_iattr, S_IFSOCK, 0, &resfh);
 404                 break;
 405
 406         case NF4FIFO:
 407                 status = nfsd_create(rqstp, &cstate->current_fh,
 408                                      create->cr_name, create->cr_namelen,
 409                                      &create->cr_iattr, S_IFIFO, 0, &resfh);
 410                 break;
 411
 412         case NF4DIR:
 413                 create->cr_iattr.ia_valid &= ~ATTR_SIZE;
 414                 status = nfsd_create(rqstp, &cstate->current_fh,
 415                                      create->cr_name, create->cr_namelen,
 416                                      &create->cr_iattr, S_IFDIR, 0, &resfh);
 417                 break;
 418
 419         default:
 420                 status = nfserr_badtype;
 421         }
 422
 423         if (!status) {
 424                 fh_unlock(&cstate->current_fh);
 425                 set_change_info(&create->cr_cinfo, &cstate->current_fh);
 426                 fh_dup2(&cstate->current_fh, &resfh);
 427         }
 428
 429         fh_put(&resfh);
 430         return status;
 431 }
 432
 433 static __be32
 434 nfsd4_getattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 435               struct nfsd4_getattr *getattr)
 436 {
 437         __be32 status;
 438
 439         status = fh_verify(rqstp, &cstate->current_fh, 0, MAY_NOP);
 440         if (status)
 441                 return status;
 442
 443         if (getattr->ga_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
 444                 return nfserr_inval;
 445
 446         getattr->ga_bmval[0] &= NFSD_SUPPORTED_ATTRS_WORD0;
 447         getattr->ga_bmval[1] &= NFSD_SUPPORTED_ATTRS_WORD1;
 448
 449         getattr->ga_fhp = &cstate->current_fh;
 450         return nfs_ok;
 451 }
 452
 453 static __be32
 454 nfsd4_link(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 455            struct nfsd4_link *link)
 456 {
 457         __be32 status = nfserr_nofilehandle;
 458
 459         if (!cstate->save_fh.fh_dentry)
 460                 return status;
 461         status = nfsd_link(rqstp, &cstate->current_fh,
 462                            link->li_name, link->li_namelen, &cstate->save_fh);
 463         if (!status)
 464                 set_change_info(&link->li_cinfo, &cstate->current_fh);
 465         return status;
 466 }
 467
 468 static __be32
 469 nfsd4_lookupp(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 470               void *arg)
 471 {
 472         struct svc_fh tmp_fh;
 473         __be32 ret;
 474
 475         fh_init(&tmp_fh, NFS4_FHSIZE);
 476         ret = exp_pseudoroot(rqstp, &tmp_fh);
 477         if (ret)
 478                 return ret;
 479         if (tmp_fh.fh_dentry == cstate->current_fh.fh_dentry) {
 480                 fh_put(&tmp_fh);
 481                 return nfserr_noent;
 482         }
 483         fh_put(&tmp_fh);
 484         return nfsd_lookup(rqstp, &cstate->current_fh,
 485                            "..", 2, &cstate->current_fh);
 486 }
 487
 488 static __be32
 489 nfsd4_lookup(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 490              struct nfsd4_lookup *lookup)
 491 {
 492         return nfsd_lookup(rqstp, &cstate->current_fh,
 493                            lookup->lo_name, lookup->lo_len,
 494                            &cstate->current_fh);
 495 }
 496
 497 static __be32
 498 nfsd4_read(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 499            struct nfsd4_read *read)
 500 {
 501         __be32 status;
 502
 503         /* no need to check permission - this will be done in nfsd_read() */
 504
 505         read->rd_filp = NULL;
 506         if (read->rd_offset >= OFFSET_MAX)
 507                 return nfserr_inval;
 508
 509         nfs4_lock_state();
 510         /* check stateid */
 511         if ((status = nfs4_preprocess_stateid_op(&cstate->current_fh,
 512                                 &read->rd_stateid,
 513                                 CHECK_FH | RD_STATE, &read->rd_filp))) {
 514                 dprintk("NFSD: nfsd4_read: couldn't process stateid!\n");
 515                 goto out;
 516         }
 517         if (read->rd_filp)
 518                 get_file(read->rd_filp);
 519         status = nfs_ok;
 520 out:
 521         nfs4_unlock_state();
 522         read->rd_rqstp = rqstp;
 523         read->rd_fhp = &cstate->current_fh;
 524         return status;
 525 }
 526
 527 static __be32
 528 nfsd4_readdir(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 529               struct nfsd4_readdir *readdir)
 530 {
 531         u64 cookie = readdir->rd_cookie;
 532         static const nfs4_verifier zeroverf;
 533
 534         /* no need to check permission - this will be done in nfsd_readdir() */
 535
 536         if (readdir->rd_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1)
 537                 return nfserr_inval;
 538
 539         readdir->rd_bmval[0] &= NFSD_SUPPORTED_ATTRS_WORD0;
 540         readdir->rd_bmval[1] &= NFSD_SUPPORTED_ATTRS_WORD1;
 541
 542         if ((cookie > ~(u32)0) || (cookie == 1) || (cookie == 2) ||
 543             (cookie == 0 && memcmp(readdir->rd_verf.data, zeroverf.data, NFS4_VERIFIER_SIZE)))
 544                 return nfserr_bad_cookie;
 545
 546         readdir->rd_rqstp = rqstp;
 547         readdir->rd_fhp = &cstate->current_fh;
 548         return nfs_ok;
 549 }
 550
 551 static __be32
 552 nfsd4_readlink(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 553                struct nfsd4_readlink *readlink)
 554 {
 555         readlink->rl_rqstp = rqstp;
 556         readlink->rl_fhp = &cstate->current_fh;
 557         return nfs_ok;
 558 }
 559
 560 static __be32
 561 nfsd4_remove(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 562              struct nfsd4_remove *remove)
 563 {
 564         __be32 status;
 565
 566         if (nfs4_in_grace())
 567                 return nfserr_grace;
 568         status = nfsd_unlink(rqstp, &cstate->current_fh, 0,
 569                              remove->rm_name, remove->rm_namelen);
 570         if (status == nfserr_symlink)
 571                 return nfserr_notdir;
 572         if (!status) {
 573                 fh_unlock(&cstate->current_fh);
 574                 set_change_info(&remove->rm_cinfo, &cstate->current_fh);
 575         }
 576         return status;
 577 }
 578
 579 static __be32
 580 nfsd4_rename(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 581              struct nfsd4_rename *rename)
 582 {
 583         __be32 status = nfserr_nofilehandle;
 584
 585         if (!cstate->save_fh.fh_dentry)
 586                 return status;
 587         if (nfs4_in_grace() && !(cstate->save_fh.fh_export->ex_flags
 588                                         & NFSEXP_NOSUBTREECHECK))
 589                 return nfserr_grace;
 590         status = nfsd_rename(rqstp, &cstate->save_fh, rename->rn_sname,
 591                              rename->rn_snamelen, &cstate->current_fh,
 592                              rename->rn_tname, rename->rn_tnamelen);
 593
 594         /* the underlying filesystem returns different error's than required
 595          * by NFSv4. both save_fh and current_fh have been verified.. */
 596         if (status == nfserr_isdir)
 597                 status = nfserr_exist;
 598         else if ((status == nfserr_notdir) &&
 599                   (S_ISDIR(cstate->save_fh.fh_dentry->d_inode->i_mode) &&
 600                    S_ISDIR(cstate->current_fh.fh_dentry->d_inode->i_mode)))
 601                 status = nfserr_exist;
 602         else if (status == nfserr_symlink)
 603                 status = nfserr_notdir;
 604
 605         if (!status) {
 606                 set_change_info(&rename->rn_sinfo, &cstate->current_fh);
 607                 set_change_info(&rename->rn_tinfo, &cstate->save_fh);
 608         }
 609         return status;
 610 }
 611
 612 static __be32
 613 nfsd4_setattr(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 614               struct nfsd4_setattr *setattr)
 615 {
 616         __be32 status = nfs_ok;
 617
 618         if (setattr->sa_iattr.ia_valid & ATTR_SIZE) {
 619                 nfs4_lock_state();
 620                 status = nfs4_preprocess_stateid_op(&cstate->current_fh,
 621                         &setattr->sa_stateid, CHECK_FH | WR_STATE, NULL);
 622                 nfs4_unlock_state();
 623                 if (status) {
 624                         dprintk("NFSD: nfsd4_setattr: couldn't process stateid!\n");
 625                         return status;
 626                 }
 627         }
 628         status = nfs_ok;
 629         if (setattr->sa_acl != NULL)
 630                 status = nfsd4_set_nfs4_acl(rqstp, &cstate->current_fh,
 631                                             setattr->sa_acl);
 632         if (status)
 633                 return status;
 634         status = nfsd_setattr(rqstp, &cstate->current_fh, &setattr->sa_iattr,
 635                                 0, (time_t)0);
 636         return status;
 637 }
 638
 639 static __be32
 640 nfsd4_write(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 641             struct nfsd4_write *write)
 642 {
 643         stateid_t *stateid = &write->wr_stateid;
 644         struct file *filp = NULL;
 645         u32 *p;
 646         __be32 status = nfs_ok;
 647
 648         /* no need to check permission - this will be done in nfsd_write() */
 649
 650         if (write->wr_offset >= OFFSET_MAX)
 651                 return nfserr_inval;
 652
 653         nfs4_lock_state();
 654         status = nfs4_preprocess_stateid_op(&cstate->current_fh, stateid,
 655                                         CHECK_FH | WR_STATE, &filp);
 656         if (filp)
 657                 get_file(filp);
 658         nfs4_unlock_state();
 659
 660         if (status) {
 661                 dprintk("NFSD: nfsd4_write: couldn't process stateid!\n");
 662                 return status;
 663         }
 664
 665         write->wr_bytes_written = write->wr_buflen;
 666         write->wr_how_written = write->wr_stable_how;
 667         p = (u32 *)write->wr_verifier.data;
 668         *p++ = nfssvc_boot.tv_sec;
 669         *p++ = nfssvc_boot.tv_usec;
 670
 671         status =  nfsd_write(rqstp, &cstate->current_fh, filp,
 672                              write->wr_offset, rqstp->rq_vec, write->wr_vlen,
 673                              write->wr_buflen, &write->wr_how_written);
 674         if (filp)
 675                 fput(filp);
 676
 677         if (status == nfserr_symlink)
 678                 status = nfserr_inval;
 679         return status;
 680 }
 681
 682 /* This routine never returns NFS_OK!  If there are no other errors, it
 683  * will return NFSERR_SAME or NFSERR_NOT_SAME depending on whether the
 684  * attributes matched.  VERIFY is implemented by mapping NFSERR_SAME
 685  * to NFS_OK after the call; NVERIFY by mapping NFSERR_NOT_SAME to NFS_OK.
 686  */
 687 static __be32
 688 _nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 689              struct nfsd4_verify *verify)
 690 {
 691         __be32 *buf, *p;
 692         int count;
 693         __be32 status;
 694
 695         status = fh_verify(rqstp, &cstate->current_fh, 0, MAY_NOP);
 696         if (status)
 697                 return status;
 698
 699         if ((verify->ve_bmval[0] & ~NFSD_SUPPORTED_ATTRS_WORD0)
 700             || (verify->ve_bmval[1] & ~NFSD_SUPPORTED_ATTRS_WORD1))
 701                 return nfserr_attrnotsupp;
 702         if ((verify->ve_bmval[0] & FATTR4_WORD0_RDATTR_ERROR)
 703             || (verify->ve_bmval[1] & NFSD_WRITEONLY_ATTRS_WORD1))
 704                 return nfserr_inval;
 705         if (verify->ve_attrlen & 3)
 706                 return nfserr_inval;
 707
 708         /* count in words:
 709          *   bitmap_len(1) + bitmap(2) + attr_len(1) = 4
 710          */
 711         count = 4 + (verify->ve_attrlen >> 2);
 712         buf = kmalloc(count << 2, GFP_KERNEL);
 713         if (!buf)
 714                 return nfserr_resource;
 715
 716         status = nfsd4_encode_fattr(&cstate->current_fh,
 717                                     cstate->current_fh.fh_export,
 718                                     cstate->current_fh.fh_dentry, buf,
 719                                     &count, verify->ve_bmval,
 720                                     rqstp);
 721
 722         /* this means that nfsd4_encode_fattr() ran out of space */
 723         if (status == nfserr_resource && count == 0)
 724                 status = nfserr_not_same;
 725         if (status)
 726                 goto out_kfree;
 727
 728         p = buf + 3;
 729         status = nfserr_not_same;
 730         if (ntohl(*p++) != verify->ve_attrlen)
 731                 goto out_kfree;
 732         if (!memcmp(p, verify->ve_attrval, verify->ve_attrlen))
 733                 status = nfserr_same;
 734
 735 out_kfree:
 736         kfree(buf);
 737         return status;
 738 }
 739
 740 static __be32
 741 nfsd4_nverify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 742               struct nfsd4_verify *verify)
 743 {
 744         __be32 status;
 745
 746         status = _nfsd4_verify(rqstp, cstate, verify);
 747         return status == nfserr_not_same ? nfs_ok : status;
 748 }
 749
 750 static __be32
 751 nfsd4_verify(struct svc_rqst *rqstp, struct nfsd4_compound_state *cstate,
 752              struct nfsd4_verify *verify)
 753 {
 754         __be32 status;
 755
 756         status = _nfsd4_verify(rqstp, cstate, verify);
 757         return status == nfserr_same ? nfs_ok : status;
 758 }
 759
 760 /*
 761  * NULL call.
 762  */
 763 static __be32
 764 nfsd4_proc_null(struct svc_rqst *rqstp, void *argp, void *resp)
 765 {
 766         return nfs_ok;
 767 }
 768
 769 static inline void nfsd4_increment_op_stats(u32 opnum)
 770 {
 771         if (opnum >= FIRST_NFS4_OP && opnum <= LAST_NFS4_OP)
 772                 nfsdstats.nfs4_opcount[opnum]++;
 773 }
 774
 775 static void cstate_free(struct nfsd4_compound_state *cstate)
 776 {
 777         if (cstate == NULL)
 778                 return;
 779         fh_put(&cstate->current_fh);
 780         fh_put(&cstate->save_fh);
 781         BUG_ON(cstate->replay_owner);
 782         kfree(cstate);
 783 }
 784
 785 static struct nfsd4_compound_state *cstate_alloc(void)
 786 {
 787         struct nfsd4_compound_state *cstate;
 788
 789         cstate = kmalloc(sizeof(struct nfsd4_compound_state), GFP_KERNEL);
 790         if (cstate == NULL)
 791                 return NULL;
 792         fh_init(&cstate->current_fh, NFS4_FHSIZE);
 793         fh_init(&cstate->save_fh, NFS4_FHSIZE);
 794         cstate->replay_owner = NULL;
 795         return cstate;
 796 }
 797
 798 typedef __be32(*nfsd4op_func)(struct svc_rqst *, struct nfsd4_compound_state *,
 799                               void *);
 800
 801 struct nfsd4_operation {
 802         nfsd4op_func op_func;
 803         u32 op_flags;
 804 /* Most ops require a valid current filehandle; a few don't: */
 805 #define ALLOWED_WITHOUT_FH 1
 806 /* GETATTR and ops not listed as returning NFS4ERR_MOVED: */
 807 #define ALLOWED_ON_ABSENT_FS 2
 808 };
 809
 810 static struct nfsd4_operation nfsd4_ops[];
 811
 812 /*
 813  * COMPOUND call.
 814  */
 815 static __be32
 816 nfsd4_proc_compound(struct svc_rqst *rqstp,
 817                     struct nfsd4_compoundargs *args,
 818                     struct nfsd4_compoundres *resp)
 819 {
 820         struct nfsd4_op *op;
 821         struct nfsd4_operation *opdesc;
 822         struct nfsd4_compound_state *cstate = NULL;
 823         int             slack_bytes;
 824         __be32          status;
 825
 826         status = nfserr_resource;
 827         cstate = cstate_alloc();
 828         if (cstate == NULL)
 829                 goto out;
 830
 831         resp->xbuf = &rqstp->rq_res;
 832         resp->p = rqstp->rq_res.head[0].iov_base + rqstp->rq_res.head[0].iov_len;
 833         resp->tagp = resp->p;
 834         /* reserve space for: taglen, tag, and opcnt */
 835         resp->p += 2 + XDR_QUADLEN(args->taglen);
 836         resp->end = rqstp->rq_res.head[0].iov_base + PAGE_SIZE;
 837         resp->taglen = args->taglen;
 838         resp->tag = args->tag;
 839         resp->opcnt = 0;
 840         resp->rqstp = rqstp;
 841
 842         /*
 843          * According to RFC3010, this takes precedence over all other errors.
 844          */
 845         status = nfserr_minor_vers_mismatch;
 846         if (args->minorversion > NFSD_SUPPORTED_MINOR_VERSION)
 847                 goto out;
 848
 849         status = nfs_ok;
 850         while (!status && resp->opcnt < args->opcnt) {
 851                 op = &args->ops[resp->opcnt++];
 852
 853                 dprintk("nfsv4 compound op #%d: %d\n", resp->opcnt, op->opnum);
 854
 855                 /*
 856                  * The XDR decode routines may have pre-set op->status;
 857                  * for example, if there is a miscellaneous XDR error
 858                  * it will be set to nfserr_bad_xdr.
 859                  */
 860                 if (op->status)
 861                         goto encode_op;
 862
 863                 /* We must be able to encode a successful response to
 864                  * this operation, with enough room left over to encode a
 865                  * failed response to the next operation.  If we don't
 866                  * have enough room, fail with ERR_RESOURCE.
 867                  */
 868                 slack_bytes = (char *)resp->end - (char *)resp->p;
 869                 if (slack_bytes < COMPOUND_SLACK_SPACE
 870                                 + COMPOUND_ERR_SLACK_SPACE) {
 871                         BUG_ON(slack_bytes < COMPOUND_ERR_SLACK_SPACE);
 872                         op->status = nfserr_resource;
 873                         goto encode_op;
 874                 }
 875
 876                 opdesc = &nfsd4_ops[op->opnum];
 877
 878                 if (!cstate->current_fh.fh_dentry) {
 879                         if (!(opdesc->op_flags & ALLOWED_WITHOUT_FH)) {
 880                                 op->status = nfserr_nofilehandle;
 881                                 goto encode_op;
 882                         }
 883                 } else if (cstate->current_fh.fh_export->ex_fslocs.migrated &&
 884                           !(opdesc->op_flags & ALLOWED_ON_ABSENT_FS)) {
 885                         op->status = nfserr_moved;
 886                         goto encode_op;
 887                 }
 888
 889                 if (opdesc->op_func)
 890                         op->status = opdesc->op_func(rqstp, cstate, &op->u);
 891                 else
 892                         BUG_ON(op->status == nfs_ok);
 893
 894 encode_op:
 895                 if (op->status == nfserr_replay_me) {
 896                         op->replay = &cstate->replay_owner->so_replay;
 897                         nfsd4_encode_replay(resp, op);
 898                         status = op->status = op->replay->rp_status;
 899                 } else {
 900                         nfsd4_encode_operation(resp, op);
 901                         status = op->status;
 902                 }
 903                 if (cstate->replay_owner) {
 904                         nfs4_put_stateowner(cstate->replay_owner);
 905                         cstate->replay_owner = NULL;
 906                 }
 907                 /* XXX Ugh, we need to get rid of this kind of special case: */
 908                 if (op->opnum == OP_READ && op->u.read.rd_filp)
 909                         fput(op->u.read.rd_filp);
 910
 911                 nfsd4_increment_op_stats(op->opnum);
 912         }
 913
 914 out:
 915         nfsd4_release_compoundargs(args);
 916         cstate_free(cstate);
 917         return status;
 918 }
 919
 920 static struct nfsd4_operation nfsd4_ops[OP_RELEASE_LOCKOWNER+1] = {
 921         [OP_ACCESS] = {
 922                 .op_func = (nfsd4op_func)nfsd4_access,
 923         },
 924         [OP_CLOSE] = {
 925                 .op_func = (nfsd4op_func)nfsd4_close,
 926         },
 927         [OP_COMMIT] = {
 928                 .op_func = (nfsd4op_func)nfsd4_commit,
 929         },
 930         [OP_CREATE] = {
 931                 .op_func = (nfsd4op_func)nfsd4_create,
 932         },
 933         [OP_DELEGRETURN] = {
 934                 .op_func = (nfsd4op_func)nfsd4_delegreturn,
 935         },
 936         [OP_GETATTR] = {
 937                 .op_func = (nfsd4op_func)nfsd4_getattr,
 938                 .op_flags = ALLOWED_ON_ABSENT_FS,
 939         },
 940         [OP_GETFH] = {
 941                 .op_func = (nfsd4op_func)nfsd4_getfh,
 942         },
 943         [OP_LINK] = {
 944                 .op_func = (nfsd4op_func)nfsd4_link,
 945         },
 946         [OP_LOCK] = {
 947                 .op_func = (nfsd4op_func)nfsd4_lock,
 948         },
 949         [OP_LOCKT] = {
 950                 .op_func = (nfsd4op_func)nfsd4_lockt,
 951         },
 952         [OP_LOCKU] = {
 953                 .op_func = (nfsd4op_func)nfsd4_locku,
 954         },
 955         [OP_LOOKUP] = {
 956                 .op_func = (nfsd4op_func)nfsd4_lookup,
 957         },
 958         [OP_LOOKUPP] = {
 959                 .op_func = (nfsd4op_func)nfsd4_lookupp,
 960         },
 961         [OP_NVERIFY] = {
 962                 .op_func = (nfsd4op_func)nfsd4_nverify,
 963         },
 964         [OP_OPEN] = {
 965                 .op_func = (nfsd4op_func)nfsd4_open,
 966         },
 967         [OP_OPEN_CONFIRM] = {
 968                 .op_func = (nfsd4op_func)nfsd4_open_confirm,
 969         },
 970         [OP_OPEN_DOWNGRADE] = {
 971                 .op_func = (nfsd4op_func)nfsd4_open_downgrade,
 972         },
 973         [OP_PUTFH] = {
 974                 .op_func = (nfsd4op_func)nfsd4_putfh,
 975                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
 976         },
 977         [OP_PUTPUBFH] = {
 978                 /* unsupported; just for future reference: */
 979                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
 980         },
 981         [OP_PUTROOTFH] = {
 982                 .op_func = (nfsd4op_func)nfsd4_putrootfh,
 983                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
 984         },
 985         [OP_READ] = {
 986                 .op_func = (nfsd4op_func)nfsd4_read,
 987         },
 988         [OP_READDIR] = {
 989                 .op_func = (nfsd4op_func)nfsd4_readdir,
 990         },
 991         [OP_READLINK] = {
 992                 .op_func = (nfsd4op_func)nfsd4_readlink,
 993         },
 994         [OP_REMOVE] = {
 995                 .op_func = (nfsd4op_func)nfsd4_remove,
 996         },
 997         [OP_RENAME] = {
 998                 .op_func = (nfsd4op_func)nfsd4_rename,
 999         },
1000         [OP_RENEW] = {
1001                 .op_func = (nfsd4op_func)nfsd4_renew,
1002                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
1003         },
1004         [OP_RESTOREFH] = {
1005                 .op_func = (nfsd4op_func)nfsd4_restorefh,
1006                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
1007         },
1008         [OP_SAVEFH] = {
1009                 .op_func = (nfsd4op_func)nfsd4_savefh,
1010         },
1011         [OP_SETATTR] = {
1012                 .op_func = (nfsd4op_func)nfsd4_setattr,
1013         },
1014         [OP_SETCLIENTID] = {
1015                 .op_func = (nfsd4op_func)nfsd4_setclientid,
1016                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
1017         },
1018         [OP_SETCLIENTID_CONFIRM] = {
1019                 .op_func = (nfsd4op_func)nfsd4_setclientid_confirm,
1020                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
1021         },
1022         [OP_VERIFY] = {
1023                 .op_func = (nfsd4op_func)nfsd4_verify,
1024         },
1025         [OP_WRITE] = {
1026                 .op_func = (nfsd4op_func)nfsd4_write,
1027         },
1028         [OP_RELEASE_LOCKOWNER] = {
1029                 .op_func = (nfsd4op_func)nfsd4_release_lockowner,
1030                 .op_flags = ALLOWED_WITHOUT_FH | ALLOWED_ON_ABSENT_FS,
1031         },
1032 };
1033
1034 #define nfs4svc_decode_voidargs         NULL
1035 #define nfs4svc_release_void            NULL
1036 #define nfsd4_voidres                   nfsd4_voidargs
1037 #define nfs4svc_release_compound        NULL
1038 struct nfsd4_voidargs { int dummy; };
1039
1040 #define PROC(name, argt, rest, relt, cache, respsize)   \
1041  { (svc_procfunc) nfsd4_proc_##name,            \
1042    (kxdrproc_t) nfs4svc_decode_##argt##args,    \
1043    (kxdrproc_t) nfs4svc_encode_##rest##res,     \
1044    (kxdrproc_t) nfs4svc_release_##relt,         \
1045    sizeof(struct nfsd4_##argt##args),           \
1046    sizeof(struct nfsd4_##rest##res),            \
1047    0,                                           \
1048    cache,                                       \
1049    respsize,                                    \
1050  }
1051
1052 /*
1053  * TODO: At the present time, the NFSv4 server does not do XID caching
1054  * of requests.  Implementing XID caching would not be a serious problem,
1055  * although it would require a mild change in interfaces since one
1056  * doesn't know whether an NFSv4 request is idempotent until after the
1057  * XDR decode.  However, XID caching totally confuses pynfs (Peter
1058  * Astrand's regression testsuite for NFSv4 servers), which reuses
1059  * XID's liberally, so I've left it unimplemented until pynfs generates
1060  * better XID's.
1061  */
1062 static struct svc_procedure             nfsd_procedures4[2] = {
1063   PROC(null,     void,          void,           void,     RC_NOCACHE, 1),
1064   PROC(compound, compound,      compound,       compound, RC_NOCACHE, NFSD_BUFSIZE/4)
1065 };
1066
1067 struct svc_version      nfsd_version4 = {
1068                 .vs_vers        = 4,
1069                 .vs_nproc       = 2,
1070                 .vs_proc        = nfsd_procedures4,
1071                 .vs_dispatch    = nfsd_dispatch,
1072                 .vs_xdrsize     = NFS4_SVC_XDRSIZE,
1073 };
1074
1075 /*
1076  * Local variables:
1077  *  c-basic-offset: 8
1078  * End:
1079  */