linux/fs/nfsd/nfs4xdr.c
<<
>>
Prefs
   1/*
   2 *  Server-side XDR for NFSv4
   3 *
   4 *  Copyright (c) 2002 The Regents of the University of Michigan.
   5 *  All rights reserved.
   6 *
   7 *  Kendrick Smith <kmsmith@umich.edu>
   8 *  Andy Adamson   <andros@umich.edu>
   9 *
  10 *  Redistribution and use in source and binary forms, with or without
  11 *  modification, are permitted provided that the following conditions
  12 *  are met:
  13 *
  14 *  1. Redistributions of source code must retain the above copyright
  15 *     notice, this list of conditions and the following disclaimer.
  16 *  2. Redistributions in binary form must reproduce the above copyright
  17 *     notice, this list of conditions and the following disclaimer in the
  18 *     documentation and/or other materials provided with the distribution.
  19 *  3. Neither the name of the University nor the names of its
  20 *     contributors may be used to endorse or promote products derived
  21 *     from this software without specific prior written permission.
  22 *
  23 *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
  24 *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
  25 *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  26 *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  27 *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  28 *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  29 *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  30 *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
  31 *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  32 *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  33 *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  34 *
  35 * TODO: Neil Brown made the following observation:  We currently
  36 * initially reserve NFSD_BUFSIZE space on the transmit queue and
  37 * never release any of that until the request is complete.
  38 * It would be good to calculate a new maximum response size while
  39 * decoding the COMPOUND, and call svc_reserve with this number
  40 * at the end of nfs4svc_decode_compoundargs.
  41 */
  42
  43#include <linux/param.h>
  44#include <linux/smp.h>
  45#include <linux/fs.h>
  46#include <linux/namei.h>
  47#include <linux/vfs.h>
  48#include <linux/utsname.h>
  49#include <linux/sunrpc/xdr.h>
  50#include <linux/sunrpc/svc.h>
  51#include <linux/sunrpc/clnt.h>
  52#include <linux/nfsd/nfsd.h>
  53#include <linux/nfsd/state.h>
  54#include <linux/nfsd/xdr4.h>
  55#include <linux/nfsd_idmap.h>
  56#include <linux/nfs4.h>
  57#include <linux/nfs4_acl.h>
  58#include <linux/sunrpc/gss_api.h>
  59#include <linux/sunrpc/svcauth_gss.h>
  60
  61#define NFSDDBG_FACILITY                NFSDDBG_XDR
  62
  63/*
  64 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
  65 * directory in order to indicate to the client that a filesystem boundary is present
  66 * We use a fixed fsid for a referral
  67 */
  68#define NFS4_REFERRAL_FSID_MAJOR        0x8000000ULL
  69#define NFS4_REFERRAL_FSID_MINOR        0x8000000ULL
  70
  71static __be32
  72check_filename(char *str, int len, __be32 err)
  73{
  74        int i;
  75
  76        if (len == 0)
  77                return nfserr_inval;
  78        if (isdotent(str, len))
  79                return err;
  80        for (i = 0; i < len; i++)
  81                if (str[i] == '/')
  82                        return err;
  83        return 0;
  84}
  85
  86#define DECODE_HEAD                             \
  87        __be32 *p;                              \
  88        __be32 status
  89#define DECODE_TAIL                             \
  90        status = 0;                             \
  91out:                                            \
  92        return status;                          \
  93xdr_error:                                      \
  94        dprintk("NFSD: xdr error (%s:%d)\n",    \
  95                        __FILE__, __LINE__);    \
  96        status = nfserr_bad_xdr;                \
  97        goto out
  98
  99#define READ32(x)         (x) = ntohl(*p++)
 100#define READ64(x)         do {                  \
 101        (x) = (u64)ntohl(*p++) << 32;           \
 102        (x) |= ntohl(*p++);                     \
 103} while (0)
 104#define READTIME(x)       do {                  \
 105        p++;                                    \
 106        (x) = ntohl(*p++);                      \
 107        p++;                                    \
 108} while (0)
 109#define READMEM(x,nbytes) do {                  \
 110        x = (char *)p;                          \
 111        p += XDR_QUADLEN(nbytes);               \
 112} while (0)
 113#define SAVEMEM(x,nbytes) do {                  \
 114        if (!(x = (p==argp->tmp || p == argp->tmpp) ? \
 115                savemem(argp, p, nbytes) :      \
 116                (char *)p)) {                   \
 117                dprintk("NFSD: xdr error (%s:%d)\n", \
 118                                __FILE__, __LINE__); \
 119                goto xdr_error;                 \
 120                }                               \
 121        p += XDR_QUADLEN(nbytes);               \
 122} while (0)
 123#define COPYMEM(x,nbytes) do {                  \
 124        memcpy((x), p, nbytes);                 \
 125        p += XDR_QUADLEN(nbytes);               \
 126} while (0)
 127
 128/* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */
 129#define READ_BUF(nbytes)  do {                  \
 130        if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) {     \
 131                p = argp->p;                    \
 132                argp->p += XDR_QUADLEN(nbytes); \
 133        } else if (!(p = read_buf(argp, nbytes))) { \
 134                dprintk("NFSD: xdr error (%s:%d)\n", \
 135                                __FILE__, __LINE__); \
 136                goto xdr_error;                 \
 137        }                                       \
 138} while (0)
 139
 140static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes)
 141{
 142        /* We want more bytes than seem to be available.
 143         * Maybe we need a new page, maybe we have just run out
 144         */
 145        unsigned int avail = (char *)argp->end - (char *)argp->p;
 146        __be32 *p;
 147        if (avail + argp->pagelen < nbytes)
 148                return NULL;
 149        if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */
 150                return NULL;
 151        /* ok, we can do it with the current plus the next page */
 152        if (nbytes <= sizeof(argp->tmp))
 153                p = argp->tmp;
 154        else {
 155                kfree(argp->tmpp);
 156                p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL);
 157                if (!p)
 158                        return NULL;
 159                
 160        }
 161        /*
 162         * The following memcpy is safe because read_buf is always
 163         * called with nbytes > avail, and the two cases above both
 164         * guarantee p points to at least nbytes bytes.
 165         */
 166        memcpy(p, argp->p, avail);
 167        /* step to next page */
 168        argp->p = page_address(argp->pagelist[0]);
 169        argp->pagelist++;
 170        if (argp->pagelen < PAGE_SIZE) {
 171                argp->end = p + (argp->pagelen>>2);
 172                argp->pagelen = 0;
 173        } else {
 174                argp->end = p + (PAGE_SIZE>>2);
 175                argp->pagelen -= PAGE_SIZE;
 176        }
 177        memcpy(((char*)p)+avail, argp->p, (nbytes - avail));
 178        argp->p += XDR_QUADLEN(nbytes - avail);
 179        return p;
 180}
 181
 182static int zero_clientid(clientid_t *clid)
 183{
 184        return (clid->cl_boot == 0) && (clid->cl_id == 0);
 185}
 186
 187static int
 188defer_free(struct nfsd4_compoundargs *argp,
 189                void (*release)(const void *), void *p)
 190{
 191        struct tmpbuf *tb;
 192
 193        tb = kmalloc(sizeof(*tb), GFP_KERNEL);
 194        if (!tb)
 195                return -ENOMEM;
 196        tb->buf = p;
 197        tb->release = release;
 198        tb->next = argp->to_free;
 199        argp->to_free = tb;
 200        return 0;
 201}
 202
 203static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes)
 204{
 205        if (p == argp->tmp) {
 206                p = kmalloc(nbytes, GFP_KERNEL);
 207                if (!p)
 208                        return NULL;
 209                memcpy(p, argp->tmp, nbytes);
 210        } else {
 211                BUG_ON(p != argp->tmpp);
 212                argp->tmpp = NULL;
 213        }
 214        if (defer_free(argp, kfree, p)) {
 215                kfree(p);
 216                return NULL;
 217        } else
 218                return (char *)p;
 219}
 220
 221static __be32
 222nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval)
 223{
 224        u32 bmlen;
 225        DECODE_HEAD;
 226
 227        bmval[0] = 0;
 228        bmval[1] = 0;
 229        bmval[2] = 0;
 230
 231        READ_BUF(4);
 232        READ32(bmlen);
 233        if (bmlen > 1000)
 234                goto xdr_error;
 235
 236        READ_BUF(bmlen << 2);
 237        if (bmlen > 0)
 238                READ32(bmval[0]);
 239        if (bmlen > 1)
 240                READ32(bmval[1]);
 241        if (bmlen > 2)
 242                READ32(bmval[2]);
 243
 244        DECODE_TAIL;
 245}
 246
 247static __be32
 248nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
 249                   struct iattr *iattr, struct nfs4_acl **acl)
 250{
 251        int expected_len, len = 0;
 252        u32 dummy32;
 253        char *buf;
 254        int host_err;
 255
 256        DECODE_HEAD;
 257        iattr->ia_valid = 0;
 258        if ((status = nfsd4_decode_bitmap(argp, bmval)))
 259                return status;
 260
 261        READ_BUF(4);
 262        READ32(expected_len);
 263
 264        if (bmval[0] & FATTR4_WORD0_SIZE) {
 265                READ_BUF(8);
 266                len += 8;
 267                READ64(iattr->ia_size);
 268                iattr->ia_valid |= ATTR_SIZE;
 269        }
 270        if (bmval[0] & FATTR4_WORD0_ACL) {
 271                int nace;
 272                struct nfs4_ace *ace;
 273
 274                READ_BUF(4); len += 4;
 275                READ32(nace);
 276
 277                if (nace > NFS4_ACL_MAX)
 278                        return nfserr_resource;
 279
 280                *acl = nfs4_acl_new(nace);
 281                if (*acl == NULL) {
 282                        host_err = -ENOMEM;
 283                        goto out_nfserr;
 284                }
 285                defer_free(argp, kfree, *acl);
 286
 287                (*acl)->naces = nace;
 288                for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) {
 289                        READ_BUF(16); len += 16;
 290                        READ32(ace->type);
 291                        READ32(ace->flag);
 292                        READ32(ace->access_mask);
 293                        READ32(dummy32);
 294                        READ_BUF(dummy32);
 295                        len += XDR_QUADLEN(dummy32) << 2;
 296                        READMEM(buf, dummy32);
 297                        ace->whotype = nfs4_acl_get_whotype(buf, dummy32);
 298                        host_err = 0;
 299                        if (ace->whotype != NFS4_ACL_WHO_NAMED)
 300                                ace->who = 0;
 301                        else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
 302                                host_err = nfsd_map_name_to_gid(argp->rqstp,
 303                                                buf, dummy32, &ace->who);
 304                        else
 305                                host_err = nfsd_map_name_to_uid(argp->rqstp,
 306                                                buf, dummy32, &ace->who);
 307                        if (host_err)
 308                                goto out_nfserr;
 309                }
 310        } else
 311                *acl = NULL;
 312        if (bmval[1] & FATTR4_WORD1_MODE) {
 313                READ_BUF(4);
 314                len += 4;
 315                READ32(iattr->ia_mode);
 316                iattr->ia_mode &= (S_IFMT | S_IALLUGO);
 317                iattr->ia_valid |= ATTR_MODE;
 318        }
 319        if (bmval[1] & FATTR4_WORD1_OWNER) {
 320                READ_BUF(4);
 321                len += 4;
 322                READ32(dummy32);
 323                READ_BUF(dummy32);
 324                len += (XDR_QUADLEN(dummy32) << 2);
 325                READMEM(buf, dummy32);
 326                if ((host_err = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid)))
 327                        goto out_nfserr;
 328                iattr->ia_valid |= ATTR_UID;
 329        }
 330        if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
 331                READ_BUF(4);
 332                len += 4;
 333                READ32(dummy32);
 334                READ_BUF(dummy32);
 335                len += (XDR_QUADLEN(dummy32) << 2);
 336                READMEM(buf, dummy32);
 337                if ((host_err = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid)))
 338                        goto out_nfserr;
 339                iattr->ia_valid |= ATTR_GID;
 340        }
 341        if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
 342                READ_BUF(4);
 343                len += 4;
 344                READ32(dummy32);
 345                switch (dummy32) {
 346                case NFS4_SET_TO_CLIENT_TIME:
 347                        /* We require the high 32 bits of 'seconds' to be 0, and we ignore
 348                           all 32 bits of 'nseconds'. */
 349                        READ_BUF(12);
 350                        len += 12;
 351                        READ32(dummy32);
 352                        if (dummy32)
 353                                return nfserr_inval;
 354                        READ32(iattr->ia_atime.tv_sec);
 355                        READ32(iattr->ia_atime.tv_nsec);
 356                        if (iattr->ia_atime.tv_nsec >= (u32)1000000000)
 357                                return nfserr_inval;
 358                        iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
 359                        break;
 360                case NFS4_SET_TO_SERVER_TIME:
 361                        iattr->ia_valid |= ATTR_ATIME;
 362                        break;
 363                default:
 364                        goto xdr_error;
 365                }
 366        }
 367        if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
 368                READ_BUF(4);
 369                len += 4;
 370                READ32(dummy32);
 371                switch (dummy32) {
 372                case NFS4_SET_TO_CLIENT_TIME:
 373                        /* We require the high 32 bits of 'seconds' to be 0, and we ignore
 374                           all 32 bits of 'nseconds'. */
 375                        READ_BUF(12);
 376                        len += 12;
 377                        READ32(dummy32);
 378                        if (dummy32)
 379                                return nfserr_inval;
 380                        READ32(iattr->ia_mtime.tv_sec);
 381                        READ32(iattr->ia_mtime.tv_nsec);
 382                        if (iattr->ia_mtime.tv_nsec >= (u32)1000000000)
 383                                return nfserr_inval;
 384                        iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
 385                        break;
 386                case NFS4_SET_TO_SERVER_TIME:
 387                        iattr->ia_valid |= ATTR_MTIME;
 388                        break;
 389                default:
 390                        goto xdr_error;
 391                }
 392        }
 393        if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
 394            || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
 395            || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2)
 396                READ_BUF(expected_len - len);
 397        else if (len != expected_len)
 398                goto xdr_error;
 399
 400        DECODE_TAIL;
 401
 402out_nfserr:
 403        status = nfserrno(host_err);
 404        goto out;
 405}
 406
 407static __be32
 408nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid)
 409{
 410        DECODE_HEAD;
 411
 412        READ_BUF(sizeof(stateid_t));
 413        READ32(sid->si_generation);
 414        COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
 415
 416        DECODE_TAIL;
 417}
 418
 419static __be32
 420nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access)
 421{
 422        DECODE_HEAD;
 423
 424        READ_BUF(4);
 425        READ32(access->ac_req_access);
 426
 427        DECODE_TAIL;
 428}
 429
 430static __be32
 431nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
 432{
 433        DECODE_HEAD;
 434
 435        close->cl_stateowner = NULL;
 436        READ_BUF(4);
 437        READ32(close->cl_seqid);
 438        return nfsd4_decode_stateid(argp, &close->cl_stateid);
 439
 440        DECODE_TAIL;
 441}
 442
 443
 444static __be32
 445nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit)
 446{
 447        DECODE_HEAD;
 448
 449        READ_BUF(12);
 450        READ64(commit->co_offset);
 451        READ32(commit->co_count);
 452
 453        DECODE_TAIL;
 454}
 455
 456static __be32
 457nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create)
 458{
 459        DECODE_HEAD;
 460
 461        READ_BUF(4);
 462        READ32(create->cr_type);
 463        switch (create->cr_type) {
 464        case NF4LNK:
 465                READ_BUF(4);
 466                READ32(create->cr_linklen);
 467                READ_BUF(create->cr_linklen);
 468                SAVEMEM(create->cr_linkname, create->cr_linklen);
 469                break;
 470        case NF4BLK:
 471        case NF4CHR:
 472                READ_BUF(8);
 473                READ32(create->cr_specdata1);
 474                READ32(create->cr_specdata2);
 475                break;
 476        case NF4SOCK:
 477        case NF4FIFO:
 478        case NF4DIR:
 479        default:
 480                break;
 481        }
 482
 483        READ_BUF(4);
 484        READ32(create->cr_namelen);
 485        READ_BUF(create->cr_namelen);
 486        SAVEMEM(create->cr_name, create->cr_namelen);
 487        if ((status = check_filename(create->cr_name, create->cr_namelen, nfserr_inval)))
 488                return status;
 489
 490        status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr,
 491                                    &create->cr_acl);
 492        if (status)
 493                goto out;
 494
 495        DECODE_TAIL;
 496}
 497
 498static inline __be32
 499nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr)
 500{
 501        return nfsd4_decode_stateid(argp, &dr->dr_stateid);
 502}
 503
 504static inline __be32
 505nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr)
 506{
 507        return nfsd4_decode_bitmap(argp, getattr->ga_bmval);
 508}
 509
 510static __be32
 511nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
 512{
 513        DECODE_HEAD;
 514
 515        READ_BUF(4);
 516        READ32(link->li_namelen);
 517        READ_BUF(link->li_namelen);
 518        SAVEMEM(link->li_name, link->li_namelen);
 519        if ((status = check_filename(link->li_name, link->li_namelen, nfserr_inval)))
 520                return status;
 521
 522        DECODE_TAIL;
 523}
 524
 525static __be32
 526nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
 527{
 528        DECODE_HEAD;
 529
 530        lock->lk_replay_owner = NULL;
 531        /*
 532        * type, reclaim(boolean), offset, length, new_lock_owner(boolean)
 533        */
 534        READ_BUF(28);
 535        READ32(lock->lk_type);
 536        if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
 537                goto xdr_error;
 538        READ32(lock->lk_reclaim);
 539        READ64(lock->lk_offset);
 540        READ64(lock->lk_length);
 541        READ32(lock->lk_is_new);
 542
 543        if (lock->lk_is_new) {
 544                READ_BUF(4);
 545                READ32(lock->lk_new_open_seqid);
 546                status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid);
 547                if (status)
 548                        return status;
 549                READ_BUF(8 + sizeof(clientid_t));
 550                READ32(lock->lk_new_lock_seqid);
 551                COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t));
 552                READ32(lock->lk_new_owner.len);
 553                READ_BUF(lock->lk_new_owner.len);
 554                READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len);
 555        } else {
 556                status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid);
 557                if (status)
 558                        return status;
 559                READ_BUF(4);
 560                READ32(lock->lk_old_lock_seqid);
 561        }
 562
 563        DECODE_TAIL;
 564}
 565
 566static __be32
 567nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
 568{
 569        DECODE_HEAD;
 570                        
 571        READ_BUF(32);
 572        READ32(lockt->lt_type);
 573        if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
 574                goto xdr_error;
 575        READ64(lockt->lt_offset);
 576        READ64(lockt->lt_length);
 577        COPYMEM(&lockt->lt_clientid, 8);
 578        READ32(lockt->lt_owner.len);
 579        READ_BUF(lockt->lt_owner.len);
 580        READMEM(lockt->lt_owner.data, lockt->lt_owner.len);
 581
 582        if (argp->minorversion && !zero_clientid(&lockt->lt_clientid))
 583                return nfserr_inval;
 584        DECODE_TAIL;
 585}
 586
 587static __be32
 588nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
 589{
 590        DECODE_HEAD;
 591
 592        locku->lu_stateowner = NULL;
 593        READ_BUF(8);
 594        READ32(locku->lu_type);
 595        if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
 596                goto xdr_error;
 597        READ32(locku->lu_seqid);
 598        status = nfsd4_decode_stateid(argp, &locku->lu_stateid);
 599        if (status)
 600                return status;
 601        READ_BUF(16);
 602        READ64(locku->lu_offset);
 603        READ64(locku->lu_length);
 604
 605        DECODE_TAIL;
 606}
 607
 608static __be32
 609nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup)
 610{
 611        DECODE_HEAD;
 612
 613        READ_BUF(4);
 614        READ32(lookup->lo_len);
 615        READ_BUF(lookup->lo_len);
 616        SAVEMEM(lookup->lo_name, lookup->lo_len);
 617        if ((status = check_filename(lookup->lo_name, lookup->lo_len, nfserr_noent)))
 618                return status;
 619
 620        DECODE_TAIL;
 621}
 622
 623static __be32
 624nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
 625{
 626        DECODE_HEAD;
 627
 628        memset(open->op_bmval, 0, sizeof(open->op_bmval));
 629        open->op_iattr.ia_valid = 0;
 630        open->op_stateowner = NULL;
 631
 632        /* seqid, share_access, share_deny, clientid, ownerlen */
 633        READ_BUF(16 + sizeof(clientid_t));
 634        READ32(open->op_seqid);
 635        READ32(open->op_share_access);
 636        READ32(open->op_share_deny);
 637        COPYMEM(&open->op_clientid, sizeof(clientid_t));
 638        READ32(open->op_owner.len);
 639
 640        /* owner, open_flag */
 641        READ_BUF(open->op_owner.len + 4);
 642        SAVEMEM(open->op_owner.data, open->op_owner.len);
 643        READ32(open->op_create);
 644        switch (open->op_create) {
 645        case NFS4_OPEN_NOCREATE:
 646                break;
 647        case NFS4_OPEN_CREATE:
 648                READ_BUF(4);
 649                READ32(open->op_createmode);
 650                switch (open->op_createmode) {
 651                case NFS4_CREATE_UNCHECKED:
 652                case NFS4_CREATE_GUARDED:
 653                        status = nfsd4_decode_fattr(argp, open->op_bmval,
 654                                &open->op_iattr, &open->op_acl);
 655                        if (status)
 656                                goto out;
 657                        break;
 658                case NFS4_CREATE_EXCLUSIVE:
 659                        READ_BUF(8);
 660                        COPYMEM(open->op_verf.data, 8);
 661                        break;
 662                case NFS4_CREATE_EXCLUSIVE4_1:
 663                        if (argp->minorversion < 1)
 664                                goto xdr_error;
 665                        READ_BUF(8);
 666                        COPYMEM(open->op_verf.data, 8);
 667                        status = nfsd4_decode_fattr(argp, open->op_bmval,
 668                                &open->op_iattr, &open->op_acl);
 669                        if (status)
 670                                goto out;
 671                        break;
 672                default:
 673                        goto xdr_error;
 674                }
 675                break;
 676        default:
 677                goto xdr_error;
 678        }
 679
 680        /* open_claim */
 681        READ_BUF(4);
 682        READ32(open->op_claim_type);
 683        switch (open->op_claim_type) {
 684        case NFS4_OPEN_CLAIM_NULL:
 685        case NFS4_OPEN_CLAIM_DELEGATE_PREV:
 686                READ_BUF(4);
 687                READ32(open->op_fname.len);
 688                READ_BUF(open->op_fname.len);
 689                SAVEMEM(open->op_fname.data, open->op_fname.len);
 690                if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval)))
 691                        return status;
 692                break;
 693        case NFS4_OPEN_CLAIM_PREVIOUS:
 694                READ_BUF(4);
 695                READ32(open->op_delegate_type);
 696                break;
 697        case NFS4_OPEN_CLAIM_DELEGATE_CUR:
 698                status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
 699                if (status)
 700                        return status;
 701                READ_BUF(4);
 702                READ32(open->op_fname.len);
 703                READ_BUF(open->op_fname.len);
 704                SAVEMEM(open->op_fname.data, open->op_fname.len);
 705                if ((status = check_filename(open->op_fname.data, open->op_fname.len, nfserr_inval)))
 706                        return status;
 707                break;
 708        default:
 709                goto xdr_error;
 710        }
 711
 712        DECODE_TAIL;
 713}
 714
 715static __be32
 716nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf)
 717{
 718        DECODE_HEAD;
 719                    
 720        open_conf->oc_stateowner = NULL;
 721        status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid);
 722        if (status)
 723                return status;
 724        READ_BUF(4);
 725        READ32(open_conf->oc_seqid);
 726                                                        
 727        DECODE_TAIL;
 728}
 729
 730static __be32
 731nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down)
 732{
 733        DECODE_HEAD;
 734                    
 735        open_down->od_stateowner = NULL;
 736        status = nfsd4_decode_stateid(argp, &open_down->od_stateid);
 737        if (status)
 738                return status;
 739        READ_BUF(12);
 740        READ32(open_down->od_seqid);
 741        READ32(open_down->od_share_access);
 742        READ32(open_down->od_share_deny);
 743                                                        
 744        DECODE_TAIL;
 745}
 746
 747static __be32
 748nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
 749{
 750        DECODE_HEAD;
 751
 752        READ_BUF(4);
 753        READ32(putfh->pf_fhlen);
 754        if (putfh->pf_fhlen > NFS4_FHSIZE)
 755                goto xdr_error;
 756        READ_BUF(putfh->pf_fhlen);
 757        SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen);
 758
 759        DECODE_TAIL;
 760}
 761
 762static __be32
 763nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
 764{
 765        DECODE_HEAD;
 766
 767        status = nfsd4_decode_stateid(argp, &read->rd_stateid);
 768        if (status)
 769                return status;
 770        READ_BUF(12);
 771        READ64(read->rd_offset);
 772        READ32(read->rd_length);
 773
 774        DECODE_TAIL;
 775}
 776
 777static __be32
 778nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir)
 779{
 780        DECODE_HEAD;
 781
 782        READ_BUF(24);
 783        READ64(readdir->rd_cookie);
 784        COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data));
 785        READ32(readdir->rd_dircount);    /* just in case you needed a useless field... */
 786        READ32(readdir->rd_maxcount);
 787        if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval)))
 788                goto out;
 789
 790        DECODE_TAIL;
 791}
 792
 793static __be32
 794nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove)
 795{
 796        DECODE_HEAD;
 797
 798        READ_BUF(4);
 799        READ32(remove->rm_namelen);
 800        READ_BUF(remove->rm_namelen);
 801        SAVEMEM(remove->rm_name, remove->rm_namelen);
 802        if ((status = check_filename(remove->rm_name, remove->rm_namelen, nfserr_noent)))
 803                return status;
 804
 805        DECODE_TAIL;
 806}
 807
 808static __be32
 809nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename)
 810{
 811        DECODE_HEAD;
 812
 813        READ_BUF(4);
 814        READ32(rename->rn_snamelen);
 815        READ_BUF(rename->rn_snamelen + 4);
 816        SAVEMEM(rename->rn_sname, rename->rn_snamelen);
 817        READ32(rename->rn_tnamelen);
 818        READ_BUF(rename->rn_tnamelen);
 819        SAVEMEM(rename->rn_tname, rename->rn_tnamelen);
 820        if ((status = check_filename(rename->rn_sname, rename->rn_snamelen, nfserr_noent)))
 821                return status;
 822        if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen, nfserr_inval)))
 823                return status;
 824
 825        DECODE_TAIL;
 826}
 827
 828static __be32
 829nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid)
 830{
 831        DECODE_HEAD;
 832
 833        READ_BUF(sizeof(clientid_t));
 834        COPYMEM(clientid, sizeof(clientid_t));
 835
 836        DECODE_TAIL;
 837}
 838
 839static __be32
 840nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
 841                     struct nfsd4_secinfo *secinfo)
 842{
 843        DECODE_HEAD;
 844
 845        READ_BUF(4);
 846        READ32(secinfo->si_namelen);
 847        READ_BUF(secinfo->si_namelen);
 848        SAVEMEM(secinfo->si_name, secinfo->si_namelen);
 849        status = check_filename(secinfo->si_name, secinfo->si_namelen,
 850                                                                nfserr_noent);
 851        if (status)
 852                return status;
 853        DECODE_TAIL;
 854}
 855
 856static __be32
 857nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr)
 858{
 859        __be32 status;
 860
 861        status = nfsd4_decode_stateid(argp, &setattr->sa_stateid);
 862        if (status)
 863                return status;
 864        return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr,
 865                                  &setattr->sa_acl);
 866}
 867
 868static __be32
 869nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid)
 870{
 871        DECODE_HEAD;
 872
 873        READ_BUF(12);
 874        COPYMEM(setclientid->se_verf.data, 8);
 875        READ32(setclientid->se_namelen);
 876
 877        READ_BUF(setclientid->se_namelen + 8);
 878        SAVEMEM(setclientid->se_name, setclientid->se_namelen);
 879        READ32(setclientid->se_callback_prog);
 880        READ32(setclientid->se_callback_netid_len);
 881
 882        READ_BUF(setclientid->se_callback_netid_len + 4);
 883        SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len);
 884        READ32(setclientid->se_callback_addr_len);
 885
 886        READ_BUF(setclientid->se_callback_addr_len + 4);
 887        SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len);
 888        READ32(setclientid->se_callback_ident);
 889
 890        DECODE_TAIL;
 891}
 892
 893static __be32
 894nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c)
 895{
 896        DECODE_HEAD;
 897
 898        READ_BUF(8 + sizeof(nfs4_verifier));
 899        COPYMEM(&scd_c->sc_clientid, 8);
 900        COPYMEM(&scd_c->sc_confirm, sizeof(nfs4_verifier));
 901
 902        DECODE_TAIL;
 903}
 904
 905/* Also used for NVERIFY */
 906static __be32
 907nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify)
 908{
 909#if 0
 910        struct nfsd4_compoundargs save = {
 911                .p = argp->p,
 912                .end = argp->end,
 913                .rqstp = argp->rqstp,
 914        };
 915        u32             ve_bmval[2];
 916        struct iattr    ve_iattr;           /* request */
 917        struct nfs4_acl *ve_acl;            /* request */
 918#endif
 919        DECODE_HEAD;
 920
 921        if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval)))
 922                goto out;
 923
 924        /* For convenience's sake, we compare raw xdr'd attributes in
 925         * nfsd4_proc_verify; however we still decode here just to return
 926         * correct error in case of bad xdr. */
 927#if 0
 928        status = nfsd4_decode_fattr(ve_bmval, &ve_iattr, &ve_acl);
 929        if (status == nfserr_inval) {
 930                status = nfserrno(status);
 931                goto out;
 932        }
 933#endif
 934        READ_BUF(4);
 935        READ32(verify->ve_attrlen);
 936        READ_BUF(verify->ve_attrlen);
 937        SAVEMEM(verify->ve_attrval, verify->ve_attrlen);
 938
 939        DECODE_TAIL;
 940}
 941
 942static __be32
 943nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
 944{
 945        int avail;
 946        int v;
 947        int len;
 948        DECODE_HEAD;
 949
 950        status = nfsd4_decode_stateid(argp, &write->wr_stateid);
 951        if (status)
 952                return status;
 953        READ_BUF(16);
 954        READ64(write->wr_offset);
 955        READ32(write->wr_stable_how);
 956        if (write->wr_stable_how > 2)
 957                goto xdr_error;
 958        READ32(write->wr_buflen);
 959
 960        /* Sorry .. no magic macros for this.. *
 961         * READ_BUF(write->wr_buflen);
 962         * SAVEMEM(write->wr_buf, write->wr_buflen);
 963         */
 964        avail = (char*)argp->end - (char*)argp->p;
 965        if (avail + argp->pagelen < write->wr_buflen) {
 966                dprintk("NFSD: xdr error (%s:%d)\n",
 967                                __FILE__, __LINE__);
 968                goto xdr_error;
 969        }
 970        argp->rqstp->rq_vec[0].iov_base = p;
 971        argp->rqstp->rq_vec[0].iov_len = avail;
 972        v = 0;
 973        len = write->wr_buflen;
 974        while (len > argp->rqstp->rq_vec[v].iov_len) {
 975                len -= argp->rqstp->rq_vec[v].iov_len;
 976                v++;
 977                argp->rqstp->rq_vec[v].iov_base = page_address(argp->pagelist[0]);
 978                argp->pagelist++;
 979                if (argp->pagelen >= PAGE_SIZE) {
 980                        argp->rqstp->rq_vec[v].iov_len = PAGE_SIZE;
 981                        argp->pagelen -= PAGE_SIZE;
 982                } else {
 983                        argp->rqstp->rq_vec[v].iov_len = argp->pagelen;
 984                        argp->pagelen -= len;
 985                }
 986        }
 987        argp->end = (__be32*) (argp->rqstp->rq_vec[v].iov_base + argp->rqstp->rq_vec[v].iov_len);
 988        argp->p = (__be32*)  (argp->rqstp->rq_vec[v].iov_base + (XDR_QUADLEN(len) << 2));
 989        argp->rqstp->rq_vec[v].iov_len = len;
 990        write->wr_vlen = v+1;
 991
 992        DECODE_TAIL;
 993}
 994
 995static __be32
 996nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner)
 997{
 998        DECODE_HEAD;
 999
1000        READ_BUF(12);
1001        COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t));
1002        READ32(rlockowner->rl_owner.len);
1003        READ_BUF(rlockowner->rl_owner.len);
1004        READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len);
1005
1006        if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1007                return nfserr_inval;
1008        DECODE_TAIL;
1009}
1010
1011static __be32
1012nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1013                         struct nfsd4_exchange_id *exid)
1014{
1015        int dummy;
1016        DECODE_HEAD;
1017
1018        READ_BUF(NFS4_VERIFIER_SIZE);
1019        COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE);
1020
1021        READ_BUF(4);
1022        READ32(exid->clname.len);
1023
1024        READ_BUF(exid->clname.len);
1025        SAVEMEM(exid->clname.data, exid->clname.len);
1026
1027        READ_BUF(4);
1028        READ32(exid->flags);
1029
1030        /* Ignore state_protect4_a */
1031        READ_BUF(4);
1032        READ32(exid->spa_how);
1033        switch (exid->spa_how) {
1034        case SP4_NONE:
1035                break;
1036        case SP4_MACH_CRED:
1037                /* spo_must_enforce */
1038                READ_BUF(4);
1039                READ32(dummy);
1040                READ_BUF(dummy * 4);
1041                p += dummy;
1042
1043                /* spo_must_allow */
1044                READ_BUF(4);
1045                READ32(dummy);
1046                READ_BUF(dummy * 4);
1047                p += dummy;
1048                break;
1049        case SP4_SSV:
1050                /* ssp_ops */
1051                READ_BUF(4);
1052                READ32(dummy);
1053                READ_BUF(dummy * 4);
1054                p += dummy;
1055
1056                READ_BUF(4);
1057                READ32(dummy);
1058                READ_BUF(dummy * 4);
1059                p += dummy;
1060
1061                /* ssp_hash_algs<> */
1062                READ_BUF(4);
1063                READ32(dummy);
1064                READ_BUF(dummy);
1065                p += XDR_QUADLEN(dummy);
1066
1067                /* ssp_encr_algs<> */
1068                READ_BUF(4);
1069                READ32(dummy);
1070                READ_BUF(dummy);
1071                p += XDR_QUADLEN(dummy);
1072
1073                /* ssp_window and ssp_num_gss_handles */
1074                READ_BUF(8);
1075                READ32(dummy);
1076                READ32(dummy);
1077                break;
1078        default:
1079                goto xdr_error;
1080        }
1081
1082        /* Ignore Implementation ID */
1083        READ_BUF(4);    /* nfs_impl_id4 array length */
1084        READ32(dummy);
1085
1086        if (dummy > 1)
1087                goto xdr_error;
1088
1089        if (dummy == 1) {
1090                /* nii_domain */
1091                READ_BUF(4);
1092                READ32(dummy);
1093                READ_BUF(dummy);
1094                p += XDR_QUADLEN(dummy);
1095
1096                /* nii_name */
1097                READ_BUF(4);
1098                READ32(dummy);
1099                READ_BUF(dummy);
1100                p += XDR_QUADLEN(dummy);
1101
1102                /* nii_date */
1103                READ_BUF(12);
1104                p += 3;
1105        }
1106        DECODE_TAIL;
1107}
1108
1109static __be32
1110nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1111                            struct nfsd4_create_session *sess)
1112{
1113        DECODE_HEAD;
1114
1115        u32 dummy;
1116        char *machine_name;
1117        int i;
1118        int nr_secflavs;
1119
1120        READ_BUF(16);
1121        COPYMEM(&sess->clientid, 8);
1122        READ32(sess->seqid);
1123        READ32(sess->flags);
1124
1125        /* Fore channel attrs */
1126        READ_BUF(28);
1127        READ32(dummy); /* headerpadsz is always 0 */
1128        READ32(sess->fore_channel.maxreq_sz);
1129        READ32(sess->fore_channel.maxresp_sz);
1130        READ32(sess->fore_channel.maxresp_cached);
1131        READ32(sess->fore_channel.maxops);
1132        READ32(sess->fore_channel.maxreqs);
1133        READ32(sess->fore_channel.nr_rdma_attrs);
1134        if (sess->fore_channel.nr_rdma_attrs == 1) {
1135                READ_BUF(4);
1136                READ32(sess->fore_channel.rdma_attrs);
1137        } else if (sess->fore_channel.nr_rdma_attrs > 1) {
1138                dprintk("Too many fore channel attr bitmaps!\n");
1139                goto xdr_error;
1140        }
1141
1142        /* Back channel attrs */
1143        READ_BUF(28);
1144        READ32(dummy); /* headerpadsz is always 0 */
1145        READ32(sess->back_channel.maxreq_sz);
1146        READ32(sess->back_channel.maxresp_sz);
1147        READ32(sess->back_channel.maxresp_cached);
1148        READ32(sess->back_channel.maxops);
1149        READ32(sess->back_channel.maxreqs);
1150        READ32(sess->back_channel.nr_rdma_attrs);
1151        if (sess->back_channel.nr_rdma_attrs == 1) {
1152                READ_BUF(4);
1153                READ32(sess->back_channel.rdma_attrs);
1154        } else if (sess->back_channel.nr_rdma_attrs > 1) {
1155                dprintk("Too many back channel attr bitmaps!\n");
1156                goto xdr_error;
1157        }
1158
1159        READ_BUF(8);
1160        READ32(sess->callback_prog);
1161
1162        /* callback_sec_params4 */
1163        READ32(nr_secflavs);
1164        for (i = 0; i < nr_secflavs; ++i) {
1165                READ_BUF(4);
1166                READ32(dummy);
1167                switch (dummy) {
1168                case RPC_AUTH_NULL:
1169                        /* Nothing to read */
1170                        break;
1171                case RPC_AUTH_UNIX:
1172                        READ_BUF(8);
1173                        /* stamp */
1174                        READ32(dummy);
1175
1176                        /* machine name */
1177                        READ32(dummy);
1178                        READ_BUF(dummy);
1179                        SAVEMEM(machine_name, dummy);
1180
1181                        /* uid, gid */
1182                        READ_BUF(8);
1183                        READ32(sess->uid);
1184                        READ32(sess->gid);
1185
1186                        /* more gids */
1187                        READ_BUF(4);
1188                        READ32(dummy);
1189                        READ_BUF(dummy * 4);
1190                        for (i = 0; i < dummy; ++i)
1191                                READ32(dummy);
1192                        break;
1193                case RPC_AUTH_GSS:
1194                        dprintk("RPC_AUTH_GSS callback secflavor "
1195                                "not supported!\n");
1196                        READ_BUF(8);
1197                        /* gcbp_service */
1198                        READ32(dummy);
1199                        /* gcbp_handle_from_server */
1200                        READ32(dummy);
1201                        READ_BUF(dummy);
1202                        p += XDR_QUADLEN(dummy);
1203                        /* gcbp_handle_from_client */
1204                        READ_BUF(4);
1205                        READ32(dummy);
1206                        READ_BUF(dummy);
1207                        p += XDR_QUADLEN(dummy);
1208                        break;
1209                default:
1210                        dprintk("Illegal callback secflavor\n");
1211                        return nfserr_inval;
1212                }
1213        }
1214        DECODE_TAIL;
1215}
1216
1217static __be32
1218nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1219                             struct nfsd4_destroy_session *destroy_session)
1220{
1221        DECODE_HEAD;
1222        READ_BUF(NFS4_MAX_SESSIONID_LEN);
1223        COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1224
1225        DECODE_TAIL;
1226}
1227
1228static __be32
1229nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1230                      struct nfsd4_sequence *seq)
1231{
1232        DECODE_HEAD;
1233
1234        READ_BUF(NFS4_MAX_SESSIONID_LEN + 16);
1235        COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1236        READ32(seq->seqid);
1237        READ32(seq->slotid);
1238        READ32(seq->maxslots);
1239        READ32(seq->cachethis);
1240
1241        DECODE_TAIL;
1242}
1243
1244static __be32
1245nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p)
1246{
1247        return nfs_ok;
1248}
1249
1250static __be32
1251nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p)
1252{
1253        return nfserr_notsupp;
1254}
1255
1256typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *);
1257
1258static nfsd4_dec nfsd4_dec_ops[] = {
1259        [OP_ACCESS]             = (nfsd4_dec)nfsd4_decode_access,
1260        [OP_CLOSE]              = (nfsd4_dec)nfsd4_decode_close,
1261        [OP_COMMIT]             = (nfsd4_dec)nfsd4_decode_commit,
1262        [OP_CREATE]             = (nfsd4_dec)nfsd4_decode_create,
1263        [OP_DELEGPURGE]         = (nfsd4_dec)nfsd4_decode_notsupp,
1264        [OP_DELEGRETURN]        = (nfsd4_dec)nfsd4_decode_delegreturn,
1265        [OP_GETATTR]            = (nfsd4_dec)nfsd4_decode_getattr,
1266        [OP_GETFH]              = (nfsd4_dec)nfsd4_decode_noop,
1267        [OP_LINK]               = (nfsd4_dec)nfsd4_decode_link,
1268        [OP_LOCK]               = (nfsd4_dec)nfsd4_decode_lock,
1269        [OP_LOCKT]              = (nfsd4_dec)nfsd4_decode_lockt,
1270        [OP_LOCKU]              = (nfsd4_dec)nfsd4_decode_locku,
1271        [OP_LOOKUP]             = (nfsd4_dec)nfsd4_decode_lookup,
1272        [OP_LOOKUPP]            = (nfsd4_dec)nfsd4_decode_noop,
1273        [OP_NVERIFY]            = (nfsd4_dec)nfsd4_decode_verify,
1274        [OP_OPEN]               = (nfsd4_dec)nfsd4_decode_open,
1275        [OP_OPENATTR]           = (nfsd4_dec)nfsd4_decode_notsupp,
1276        [OP_OPEN_CONFIRM]       = (nfsd4_dec)nfsd4_decode_open_confirm,
1277        [OP_OPEN_DOWNGRADE]     = (nfsd4_dec)nfsd4_decode_open_downgrade,
1278        [OP_PUTFH]              = (nfsd4_dec)nfsd4_decode_putfh,
1279        [OP_PUTPUBFH]           = (nfsd4_dec)nfsd4_decode_noop,
1280        [OP_PUTROOTFH]          = (nfsd4_dec)nfsd4_decode_noop,
1281        [OP_READ]               = (nfsd4_dec)nfsd4_decode_read,
1282        [OP_READDIR]            = (nfsd4_dec)nfsd4_decode_readdir,
1283        [OP_READLINK]           = (nfsd4_dec)nfsd4_decode_noop,
1284        [OP_REMOVE]             = (nfsd4_dec)nfsd4_decode_remove,
1285        [OP_RENAME]             = (nfsd4_dec)nfsd4_decode_rename,
1286        [OP_RENEW]              = (nfsd4_dec)nfsd4_decode_renew,
1287        [OP_RESTOREFH]          = (nfsd4_dec)nfsd4_decode_noop,
1288        [OP_SAVEFH]             = (nfsd4_dec)nfsd4_decode_noop,
1289        [OP_SECINFO]            = (nfsd4_dec)nfsd4_decode_secinfo,
1290        [OP_SETATTR]            = (nfsd4_dec)nfsd4_decode_setattr,
1291        [OP_SETCLIENTID]        = (nfsd4_dec)nfsd4_decode_setclientid,
1292        [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm,
1293        [OP_VERIFY]             = (nfsd4_dec)nfsd4_decode_verify,
1294        [OP_WRITE]              = (nfsd4_dec)nfsd4_decode_write,
1295        [OP_RELEASE_LOCKOWNER]  = (nfsd4_dec)nfsd4_decode_release_lockowner,
1296};
1297
1298static nfsd4_dec nfsd41_dec_ops[] = {
1299        [OP_ACCESS]             = (nfsd4_dec)nfsd4_decode_access,
1300        [OP_CLOSE]              = (nfsd4_dec)nfsd4_decode_close,
1301        [OP_COMMIT]             = (nfsd4_dec)nfsd4_decode_commit,
1302        [OP_CREATE]             = (nfsd4_dec)nfsd4_decode_create,
1303        [OP_DELEGPURGE]         = (nfsd4_dec)nfsd4_decode_notsupp,
1304        [OP_DELEGRETURN]        = (nfsd4_dec)nfsd4_decode_delegreturn,
1305        [OP_GETATTR]            = (nfsd4_dec)nfsd4_decode_getattr,
1306        [OP_GETFH]              = (nfsd4_dec)nfsd4_decode_noop,
1307        [OP_LINK]               = (nfsd4_dec)nfsd4_decode_link,
1308        [OP_LOCK]               = (nfsd4_dec)nfsd4_decode_lock,
1309        [OP_LOCKT]              = (nfsd4_dec)nfsd4_decode_lockt,
1310        [OP_LOCKU]              = (nfsd4_dec)nfsd4_decode_locku,
1311        [OP_LOOKUP]             = (nfsd4_dec)nfsd4_decode_lookup,
1312        [OP_LOOKUPP]            = (nfsd4_dec)nfsd4_decode_noop,
1313        [OP_NVERIFY]            = (nfsd4_dec)nfsd4_decode_verify,
1314        [OP_OPEN]               = (nfsd4_dec)nfsd4_decode_open,
1315        [OP_OPENATTR]           = (nfsd4_dec)nfsd4_decode_notsupp,
1316        [OP_OPEN_CONFIRM]       = (nfsd4_dec)nfsd4_decode_notsupp,
1317        [OP_OPEN_DOWNGRADE]     = (nfsd4_dec)nfsd4_decode_open_downgrade,
1318        [OP_PUTFH]              = (nfsd4_dec)nfsd4_decode_putfh,
1319        [OP_PUTPUBFH]           = (nfsd4_dec)nfsd4_decode_notsupp,
1320        [OP_PUTROOTFH]          = (nfsd4_dec)nfsd4_decode_noop,
1321        [OP_READ]               = (nfsd4_dec)nfsd4_decode_read,
1322        [OP_READDIR]            = (nfsd4_dec)nfsd4_decode_readdir,
1323        [OP_READLINK]           = (nfsd4_dec)nfsd4_decode_noop,
1324        [OP_REMOVE]             = (nfsd4_dec)nfsd4_decode_remove,
1325        [OP_RENAME]             = (nfsd4_dec)nfsd4_decode_rename,
1326        [OP_RENEW]              = (nfsd4_dec)nfsd4_decode_notsupp,
1327        [OP_RESTOREFH]          = (nfsd4_dec)nfsd4_decode_noop,
1328        [OP_SAVEFH]             = (nfsd4_dec)nfsd4_decode_noop,
1329        [OP_SECINFO]            = (nfsd4_dec)nfsd4_decode_secinfo,
1330        [OP_SETATTR]            = (nfsd4_dec)nfsd4_decode_setattr,
1331        [OP_SETCLIENTID]        = (nfsd4_dec)nfsd4_decode_notsupp,
1332        [OP_SETCLIENTID_CONFIRM]= (nfsd4_dec)nfsd4_decode_notsupp,
1333        [OP_VERIFY]             = (nfsd4_dec)nfsd4_decode_verify,
1334        [OP_WRITE]              = (nfsd4_dec)nfsd4_decode_write,
1335        [OP_RELEASE_LOCKOWNER]  = (nfsd4_dec)nfsd4_decode_notsupp,
1336
1337        /* new operations for NFSv4.1 */
1338        [OP_BACKCHANNEL_CTL]    = (nfsd4_dec)nfsd4_decode_notsupp,
1339        [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_notsupp,
1340        [OP_EXCHANGE_ID]        = (nfsd4_dec)nfsd4_decode_exchange_id,
1341        [OP_CREATE_SESSION]     = (nfsd4_dec)nfsd4_decode_create_session,
1342        [OP_DESTROY_SESSION]    = (nfsd4_dec)nfsd4_decode_destroy_session,
1343        [OP_FREE_STATEID]       = (nfsd4_dec)nfsd4_decode_notsupp,
1344        [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1345        [OP_GETDEVICEINFO]      = (nfsd4_dec)nfsd4_decode_notsupp,
1346        [OP_GETDEVICELIST]      = (nfsd4_dec)nfsd4_decode_notsupp,
1347        [OP_LAYOUTCOMMIT]       = (nfsd4_dec)nfsd4_decode_notsupp,
1348        [OP_LAYOUTGET]          = (nfsd4_dec)nfsd4_decode_notsupp,
1349        [OP_LAYOUTRETURN]       = (nfsd4_dec)nfsd4_decode_notsupp,
1350        [OP_SECINFO_NO_NAME]    = (nfsd4_dec)nfsd4_decode_notsupp,
1351        [OP_SEQUENCE]           = (nfsd4_dec)nfsd4_decode_sequence,
1352        [OP_SET_SSV]            = (nfsd4_dec)nfsd4_decode_notsupp,
1353        [OP_TEST_STATEID]       = (nfsd4_dec)nfsd4_decode_notsupp,
1354        [OP_WANT_DELEGATION]    = (nfsd4_dec)nfsd4_decode_notsupp,
1355        [OP_DESTROY_CLIENTID]   = (nfsd4_dec)nfsd4_decode_notsupp,
1356        [OP_RECLAIM_COMPLETE]   = (nfsd4_dec)nfsd4_decode_notsupp,
1357};
1358
1359struct nfsd4_minorversion_ops {
1360        nfsd4_dec *decoders;
1361        int nops;
1362};
1363
1364static struct nfsd4_minorversion_ops nfsd4_minorversion[] = {
1365        [0] = { nfsd4_dec_ops, ARRAY_SIZE(nfsd4_dec_ops) },
1366        [1] = { nfsd41_dec_ops, ARRAY_SIZE(nfsd41_dec_ops) },
1367};
1368
1369static __be32
1370nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
1371{
1372        DECODE_HEAD;
1373        struct nfsd4_op *op;
1374        struct nfsd4_minorversion_ops *ops;
1375        int i;
1376
1377        /*
1378         * XXX: According to spec, we should check the tag
1379         * for UTF-8 compliance.  I'm postponing this for
1380         * now because it seems that some clients do use
1381         * binary tags.
1382         */
1383        READ_BUF(4);
1384        READ32(argp->taglen);
1385        READ_BUF(argp->taglen + 8);
1386        SAVEMEM(argp->tag, argp->taglen);
1387        READ32(argp->minorversion);
1388        READ32(argp->opcnt);
1389
1390        if (argp->taglen > NFSD4_MAX_TAGLEN)
1391                goto xdr_error;
1392        if (argp->opcnt > 100)
1393                goto xdr_error;
1394
1395        if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
1396                argp->ops = kmalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL);
1397                if (!argp->ops) {
1398                        argp->ops = argp->iops;
1399                        dprintk("nfsd: couldn't allocate room for COMPOUND\n");
1400                        goto xdr_error;
1401                }
1402        }
1403
1404        if (argp->minorversion >= ARRAY_SIZE(nfsd4_minorversion))
1405                argp->opcnt = 0;
1406
1407        ops = &nfsd4_minorversion[argp->minorversion];
1408        for (i = 0; i < argp->opcnt; i++) {
1409                op = &argp->ops[i];
1410                op->replay = NULL;
1411
1412                /*
1413                 * We can't use READ_BUF() here because we need to handle
1414                 * a missing opcode as an OP_WRITE + 1. So we need to check
1415                 * to see if we're truly at the end of our buffer or if there
1416                 * is another page we need to flip to.
1417                 */
1418
1419                if (argp->p == argp->end) {
1420                        if (argp->pagelen < 4) {
1421                                /* There isn't an opcode still on the wire */
1422                                op->opnum = OP_WRITE + 1;
1423                                op->status = nfserr_bad_xdr;
1424                                argp->opcnt = i+1;
1425                                break;
1426                        }
1427
1428                        /*
1429                         * False alarm. We just hit a page boundary, but there
1430                         * is still data available.  Move pointer across page
1431                         * boundary.  *snip from READ_BUF*
1432                         */
1433                        argp->p = page_address(argp->pagelist[0]);
1434                        argp->pagelist++;
1435                        if (argp->pagelen < PAGE_SIZE) {
1436                                argp->end = p + (argp->pagelen>>2);
1437                                argp->pagelen = 0;
1438                        } else {
1439                                argp->end = p + (PAGE_SIZE>>2);
1440                                argp->pagelen -= PAGE_SIZE;
1441                        }
1442                }
1443                op->opnum = ntohl(*argp->p++);
1444
1445                if (op->opnum >= OP_ACCESS && op->opnum < ops->nops)
1446                        op->status = ops->decoders[op->opnum](argp, &op->u);
1447                else {
1448                        op->opnum = OP_ILLEGAL;
1449                        op->status = nfserr_op_illegal;
1450                }
1451
1452                if (op->status) {
1453                        argp->opcnt = i+1;
1454                        break;
1455                }
1456        }
1457
1458        DECODE_TAIL;
1459}
1460
1461#define WRITE32(n)               *p++ = htonl(n)
1462#define WRITE64(n)               do {                           \
1463        *p++ = htonl((u32)((n) >> 32));                         \
1464        *p++ = htonl((u32)(n));                                 \
1465} while (0)
1466#define WRITEMEM(ptr,nbytes)     do { if (nbytes > 0) {         \
1467        *(p + XDR_QUADLEN(nbytes) -1) = 0;                      \
1468        memcpy(p, ptr, nbytes);                                 \
1469        p += XDR_QUADLEN(nbytes);                               \
1470}} while (0)
1471
1472static void write32(__be32 **p, u32 n)
1473{
1474        *(*p)++ = n;
1475}
1476
1477static void write64(__be32 **p, u64 n)
1478{
1479        write32(p, (u32)(n >> 32));
1480        write32(p, (u32)n);
1481}
1482
1483static void write_change(__be32 **p, struct kstat *stat, struct inode *inode)
1484{
1485        if (IS_I_VERSION(inode)) {
1486                write64(p, inode->i_version);
1487        } else {
1488                write32(p, stat->ctime.tv_sec);
1489                write32(p, stat->ctime.tv_nsec);
1490        }
1491}
1492
1493static void write_cinfo(__be32 **p, struct nfsd4_change_info *c)
1494{
1495        write32(p, c->atomic);
1496        if (c->change_supported) {
1497                write64(p, c->before_change);
1498                write64(p, c->after_change);
1499        } else {
1500                write32(p, c->before_ctime_sec);
1501                write32(p, c->before_ctime_nsec);
1502                write32(p, c->after_ctime_sec);
1503                write32(p, c->after_ctime_nsec);
1504        }
1505}
1506
1507#define RESERVE_SPACE(nbytes)   do {                            \
1508        p = resp->p;                                            \
1509        BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end);            \
1510} while (0)
1511#define ADJUST_ARGS()           resp->p = p
1512
1513/*
1514 * Header routine to setup seqid operation replay cache
1515 */
1516#define ENCODE_SEQID_OP_HEAD                                    \
1517        __be32 *save;                                           \
1518                                                                \
1519        save = resp->p;
1520
1521/*
1522 * Routine for encoding the result of a "seqid-mutating" NFSv4 operation.  This
1523 * is where sequence id's are incremented, and the replay cache is filled.
1524 * Note that we increment sequence id's here, at the last moment, so we're sure
1525 * we know whether the error to be returned is a sequence id mutating error.
1526 */
1527
1528#define ENCODE_SEQID_OP_TAIL(stateowner) do {                   \
1529        if (seqid_mutating_err(nfserr) && stateowner) {         \
1530                stateowner->so_seqid++;                         \
1531                stateowner->so_replay.rp_status = nfserr;       \
1532                stateowner->so_replay.rp_buflen =               \
1533                          (((char *)(resp)->p - (char *)save)); \
1534                memcpy(stateowner->so_replay.rp_buf, save,      \
1535                        stateowner->so_replay.rp_buflen);       \
1536        } } while (0);
1537
1538/* Encode as an array of strings the string given with components
1539 * seperated @sep.
1540 */
1541static __be32 nfsd4_encode_components(char sep, char *components,
1542                                   __be32 **pp, int *buflen)
1543{
1544        __be32 *p = *pp;
1545        __be32 *countp = p;
1546        int strlen, count=0;
1547        char *str, *end;
1548
1549        dprintk("nfsd4_encode_components(%s)\n", components);
1550        if ((*buflen -= 4) < 0)
1551                return nfserr_resource;
1552        WRITE32(0); /* We will fill this in with @count later */
1553        end = str = components;
1554        while (*end) {
1555                for (; *end && (*end != sep); end++)
1556                        ; /* Point to end of component */
1557                strlen = end - str;
1558                if (strlen) {
1559                        if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0)
1560                                return nfserr_resource;
1561                        WRITE32(strlen);
1562                        WRITEMEM(str, strlen);
1563                        count++;
1564                }
1565                else
1566                        end++;
1567                str = end;
1568        }
1569        *pp = p;
1570        p = countp;
1571        WRITE32(count);
1572        return 0;
1573}
1574
1575/*
1576 * encode a location element of a fs_locations structure
1577 */
1578static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location,
1579                                    __be32 **pp, int *buflen)
1580{
1581        __be32 status;
1582        __be32 *p = *pp;
1583
1584        status = nfsd4_encode_components(':', location->hosts, &p, buflen);
1585        if (status)
1586                return status;
1587        status = nfsd4_encode_components('/', location->path, &p, buflen);
1588        if (status)
1589                return status;
1590        *pp = p;
1591        return 0;
1592}
1593
1594/*
1595 * Return the path to an export point in the pseudo filesystem namespace
1596 * Returned string is safe to use as long as the caller holds a reference
1597 * to @exp.
1598 */
1599static char *nfsd4_path(struct svc_rqst *rqstp, struct svc_export *exp, __be32 *stat)
1600{
1601        struct svc_fh tmp_fh;
1602        char *path = NULL, *rootpath;
1603        size_t rootlen;
1604
1605        fh_init(&tmp_fh, NFS4_FHSIZE);
1606        *stat = exp_pseudoroot(rqstp, &tmp_fh);
1607        if (*stat)
1608                return NULL;
1609        rootpath = tmp_fh.fh_export->ex_pathname;
1610
1611        path = exp->ex_pathname;
1612
1613        rootlen = strlen(rootpath);
1614        if (strncmp(path, rootpath, rootlen)) {
1615                dprintk("nfsd: fs_locations failed;"
1616                        "%s is not contained in %s\n", path, rootpath);
1617                *stat = nfserr_notsupp;
1618                path = NULL;
1619                goto out;
1620        }
1621        path += rootlen;
1622out:
1623        fh_put(&tmp_fh);
1624        return path;
1625}
1626
1627/*
1628 *  encode a fs_locations structure
1629 */
1630static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp,
1631                                     struct svc_export *exp,
1632                                     __be32 **pp, int *buflen)
1633{
1634        __be32 status;
1635        int i;
1636        __be32 *p = *pp;
1637        struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
1638        char *root = nfsd4_path(rqstp, exp, &status);
1639
1640        if (status)
1641                return status;
1642        status = nfsd4_encode_components('/', root, &p, buflen);
1643        if (status)
1644                return status;
1645        if ((*buflen -= 4) < 0)
1646                return nfserr_resource;
1647        WRITE32(fslocs->locations_count);
1648        for (i=0; i<fslocs->locations_count; i++) {
1649                status = nfsd4_encode_fs_location4(&fslocs->locations[i],
1650                                                   &p, buflen);
1651                if (status)
1652                        return status;
1653        }
1654        *pp = p;
1655        return 0;
1656}
1657
1658static u32 nfs4_ftypes[16] = {
1659        NF4BAD,  NF4FIFO, NF4CHR, NF4BAD,
1660        NF4DIR,  NF4BAD,  NF4BLK, NF4BAD,
1661        NF4REG,  NF4BAD,  NF4LNK, NF4BAD,
1662        NF4SOCK, NF4BAD,  NF4LNK, NF4BAD,
1663};
1664
1665static __be32
1666nfsd4_encode_name(struct svc_rqst *rqstp, int whotype, uid_t id, int group,
1667                        __be32 **p, int *buflen)
1668{
1669        int status;
1670
1671        if (*buflen < (XDR_QUADLEN(IDMAP_NAMESZ) << 2) + 4)
1672                return nfserr_resource;
1673        if (whotype != NFS4_ACL_WHO_NAMED)
1674                status = nfs4_acl_write_who(whotype, (u8 *)(*p + 1));
1675        else if (group)
1676                status = nfsd_map_gid_to_name(rqstp, id, (u8 *)(*p + 1));
1677        else
1678                status = nfsd_map_uid_to_name(rqstp, id, (u8 *)(*p + 1));
1679        if (status < 0)
1680                return nfserrno(status);
1681        *p = xdr_encode_opaque(*p, NULL, status);
1682        *buflen -= (XDR_QUADLEN(status) << 2) + 4;
1683        BUG_ON(*buflen < 0);
1684        return 0;
1685}
1686
1687static inline __be32
1688nfsd4_encode_user(struct svc_rqst *rqstp, uid_t uid, __be32 **p, int *buflen)
1689{
1690        return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, uid, 0, p, buflen);
1691}
1692
1693static inline __be32
1694nfsd4_encode_group(struct svc_rqst *rqstp, uid_t gid, __be32 **p, int *buflen)
1695{
1696        return nfsd4_encode_name(rqstp, NFS4_ACL_WHO_NAMED, gid, 1, p, buflen);
1697}
1698
1699static inline __be32
1700nfsd4_encode_aclname(struct svc_rqst *rqstp, int whotype, uid_t id, int group,
1701                __be32 **p, int *buflen)
1702{
1703        return nfsd4_encode_name(rqstp, whotype, id, group, p, buflen);
1704}
1705
1706#define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
1707                              FATTR4_WORD0_RDATTR_ERROR)
1708#define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
1709
1710static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *rdattr_err)
1711{
1712        /* As per referral draft:  */
1713        if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
1714            *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
1715                if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
1716                    *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
1717                        *rdattr_err = NFSERR_MOVED;
1718                else
1719                        return nfserr_moved;
1720        }
1721        *bmval0 &= WORD0_ABSENT_FS_ATTRS;
1722        *bmval1 &= WORD1_ABSENT_FS_ATTRS;
1723        return 0;
1724}
1725
1726/*
1727 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
1728 * ourselves.
1729 *
1730 * @countp is the buffer size in _words_; upon successful return this becomes
1731 * replaced with the number of words written.
1732 */
1733__be32
1734nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
1735                struct dentry *dentry, __be32 *buffer, int *countp, u32 *bmval,
1736                struct svc_rqst *rqstp, int ignore_crossmnt)
1737{
1738        u32 bmval0 = bmval[0];
1739        u32 bmval1 = bmval[1];
1740        u32 bmval2 = bmval[2];
1741        struct kstat stat;
1742        struct svc_fh tempfh;
1743        struct kstatfs statfs;
1744        int buflen = *countp << 2;
1745        __be32 *attrlenp;
1746        u32 dummy;
1747        u64 dummy64;
1748        u32 rdattr_err = 0;
1749        __be32 *p = buffer;
1750        __be32 status;
1751        int err;
1752        int aclsupport = 0;
1753        struct nfs4_acl *acl = NULL;
1754        struct nfsd4_compoundres *resp = rqstp->rq_resp;
1755        u32 minorversion = resp->cstate.minorversion;
1756
1757        BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1);
1758        BUG_ON(bmval0 & ~nfsd_suppattrs0(minorversion));
1759        BUG_ON(bmval1 & ~nfsd_suppattrs1(minorversion));
1760        BUG_ON(bmval2 & ~nfsd_suppattrs2(minorversion));
1761
1762        if (exp->ex_fslocs.migrated) {
1763                BUG_ON(bmval[2]);
1764                status = fattr_handle_absent_fs(&bmval0, &bmval1, &rdattr_err);
1765                if (status)
1766                        goto out;
1767        }
1768
1769        err = vfs_getattr(exp->ex_path.mnt, dentry, &stat);
1770        if (err)
1771                goto out_nfserr;
1772        if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL |
1773                        FATTR4_WORD0_MAXNAME)) ||
1774            (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
1775                       FATTR4_WORD1_SPACE_TOTAL))) {
1776                err = vfs_statfs(dentry, &statfs);
1777                if (err)
1778                        goto out_nfserr;
1779        }
1780        if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) {
1781                fh_init(&tempfh, NFS4_FHSIZE);
1782                status = fh_compose(&tempfh, exp, dentry, NULL);
1783                if (status)
1784                        goto out;
1785                fhp = &tempfh;
1786        }
1787        if (bmval0 & (FATTR4_WORD0_ACL | FATTR4_WORD0_ACLSUPPORT
1788                        | FATTR4_WORD0_SUPPORTED_ATTRS)) {
1789                err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl);
1790                aclsupport = (err == 0);
1791                if (bmval0 & FATTR4_WORD0_ACL) {
1792                        if (err == -EOPNOTSUPP)
1793                                bmval0 &= ~FATTR4_WORD0_ACL;
1794                        else if (err == -EINVAL) {
1795                                status = nfserr_attrnotsupp;
1796                                goto out;
1797                        } else if (err != 0)
1798                                goto out_nfserr;
1799                }
1800        }
1801        if ((buflen -= 16) < 0)
1802                goto out_resource;
1803
1804        if (unlikely(bmval2)) {
1805                WRITE32(3);
1806                WRITE32(bmval0);
1807                WRITE32(bmval1);
1808                WRITE32(bmval2);
1809        } else if (likely(bmval1)) {
1810                WRITE32(2);
1811                WRITE32(bmval0);
1812                WRITE32(bmval1);
1813        } else {
1814                WRITE32(1);
1815                WRITE32(bmval0);
1816        }
1817        attrlenp = p++;                /* to be backfilled later */
1818
1819        if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
1820                u32 word0 = nfsd_suppattrs0(minorversion);
1821                u32 word1 = nfsd_suppattrs1(minorversion);
1822                u32 word2 = nfsd_suppattrs2(minorversion);
1823
1824                if ((buflen -= 12) < 0)
1825                        goto out_resource;
1826                if (!aclsupport)
1827                        word0 &= ~FATTR4_WORD0_ACL;
1828                if (!word2) {
1829                        WRITE32(2);
1830                        WRITE32(word0);
1831                        WRITE32(word1);
1832                } else {
1833                        WRITE32(3);
1834                        WRITE32(word0);
1835                        WRITE32(word1);
1836                        WRITE32(word2);
1837                }
1838        }
1839        if (bmval0 & FATTR4_WORD0_TYPE) {
1840                if ((buflen -= 4) < 0)
1841                        goto out_resource;
1842                dummy = nfs4_ftypes[(stat.mode & S_IFMT) >> 12];
1843                if (dummy == NF4BAD)
1844                        goto out_serverfault;
1845                WRITE32(dummy);
1846        }
1847        if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
1848                if ((buflen -= 4) < 0)
1849                        goto out_resource;
1850                if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
1851                        WRITE32(NFS4_FH_PERSISTENT);
1852                else
1853                        WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME);
1854        }
1855        if (bmval0 & FATTR4_WORD0_CHANGE) {
1856                if ((buflen -= 8) < 0)
1857                        goto out_resource;
1858                write_change(&p, &stat, dentry->d_inode);
1859        }
1860        if (bmval0 & FATTR4_WORD0_SIZE) {
1861                if ((buflen -= 8) < 0)
1862                        goto out_resource;
1863                WRITE64(stat.size);
1864        }
1865        if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
1866                if ((buflen -= 4) < 0)
1867                        goto out_resource;
1868                WRITE32(1);
1869        }
1870        if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
1871                if ((buflen -= 4) < 0)
1872                        goto out_resource;
1873                WRITE32(1);
1874        }
1875        if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
1876                if ((buflen -= 4) < 0)
1877                        goto out_resource;
1878                WRITE32(0);
1879        }
1880        if (bmval0 & FATTR4_WORD0_FSID) {
1881                if ((buflen -= 16) < 0)
1882                        goto out_resource;
1883                if (exp->ex_fslocs.migrated) {
1884                        WRITE64(NFS4_REFERRAL_FSID_MAJOR);
1885                        WRITE64(NFS4_REFERRAL_FSID_MINOR);
1886                } else switch(fsid_source(fhp)) {
1887                case FSIDSOURCE_FSID:
1888                        WRITE64((u64)exp->ex_fsid);
1889                        WRITE64((u64)0);
1890                        break;
1891                case FSIDSOURCE_DEV:
1892                        WRITE32(0);
1893                        WRITE32(MAJOR(stat.dev));
1894                        WRITE32(0);
1895                        WRITE32(MINOR(stat.dev));
1896                        break;
1897                case FSIDSOURCE_UUID:
1898                        WRITEMEM(exp->ex_uuid, 16);
1899                        break;
1900                }
1901        }
1902        if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
1903                if ((buflen -= 4) < 0)
1904                        goto out_resource;
1905                WRITE32(0);
1906        }
1907        if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
1908                if ((buflen -= 4) < 0)
1909                        goto out_resource;
1910                WRITE32(NFSD_LEASE_TIME);
1911        }
1912        if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
1913                if ((buflen -= 4) < 0)
1914                        goto out_resource;
1915                WRITE32(rdattr_err);
1916        }
1917        if (bmval0 & FATTR4_WORD0_ACL) {
1918                struct nfs4_ace *ace;
1919
1920                if (acl == NULL) {
1921                        if ((buflen -= 4) < 0)
1922                                goto out_resource;
1923
1924                        WRITE32(0);
1925                        goto out_acl;
1926                }
1927                if ((buflen -= 4) < 0)
1928                        goto out_resource;
1929                WRITE32(acl->naces);
1930
1931                for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
1932                        if ((buflen -= 4*3) < 0)
1933                                goto out_resource;
1934                        WRITE32(ace->type);
1935                        WRITE32(ace->flag);
1936                        WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL);
1937                        status = nfsd4_encode_aclname(rqstp, ace->whotype,
1938                                ace->who, ace->flag & NFS4_ACE_IDENTIFIER_GROUP,
1939                                &p, &buflen);
1940                        if (status == nfserr_resource)
1941                                goto out_resource;
1942                        if (status)
1943                                goto out;
1944                }
1945        }
1946out_acl:
1947        if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
1948                if ((buflen -= 4) < 0)
1949                        goto out_resource;
1950                WRITE32(aclsupport ?
1951                        ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
1952        }
1953        if (bmval0 & FATTR4_WORD0_CANSETTIME) {
1954                if ((buflen -= 4) < 0)
1955                        goto out_resource;
1956                WRITE32(1);
1957        }
1958        if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
1959                if ((buflen -= 4) < 0)
1960                        goto out_resource;
1961                WRITE32(1);
1962        }
1963        if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
1964                if ((buflen -= 4) < 0)
1965                        goto out_resource;
1966                WRITE32(1);
1967        }
1968        if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
1969                if ((buflen -= 4) < 0)
1970                        goto out_resource;
1971                WRITE32(1);
1972        }
1973        if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
1974                buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4;
1975                if (buflen < 0)
1976                        goto out_resource;
1977                WRITE32(fhp->fh_handle.fh_size);
1978                WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size);
1979        }
1980        if (bmval0 & FATTR4_WORD0_FILEID) {
1981                if ((buflen -= 8) < 0)
1982                        goto out_resource;
1983                WRITE64(stat.ino);
1984        }
1985        if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
1986                if ((buflen -= 8) < 0)
1987                        goto out_resource;
1988                WRITE64((u64) statfs.f_ffree);
1989        }
1990        if (bmval0 & FATTR4_WORD0_FILES_FREE) {
1991                if ((buflen -= 8) < 0)
1992                        goto out_resource;
1993                WRITE64((u64) statfs.f_ffree);
1994        }
1995        if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
1996                if ((buflen -= 8) < 0)
1997                        goto out_resource;
1998                WRITE64((u64) statfs.f_files);
1999        }
2000        if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
2001                status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen);
2002                if (status == nfserr_resource)
2003                        goto out_resource;
2004                if (status)
2005                        goto out;
2006        }
2007        if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
2008                if ((buflen -= 4) < 0)
2009                        goto out_resource;
2010                WRITE32(1);
2011        }
2012        if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
2013                if ((buflen -= 8) < 0)
2014                        goto out_resource;
2015                WRITE64(~(u64)0);
2016        }
2017        if (bmval0 & FATTR4_WORD0_MAXLINK) {
2018                if ((buflen -= 4) < 0)
2019                        goto out_resource;
2020                WRITE32(255);
2021        }
2022        if (bmval0 & FATTR4_WORD0_MAXNAME) {
2023                if ((buflen -= 4) < 0)
2024                        goto out_resource;
2025                WRITE32(statfs.f_namelen);
2026        }
2027        if (bmval0 & FATTR4_WORD0_MAXREAD) {
2028                if ((buflen -= 8) < 0)
2029                        goto out_resource;
2030                WRITE64((u64) svc_max_payload(rqstp));
2031        }
2032        if (bmval0 & FATTR4_WORD0_MAXWRITE) {
2033                if ((buflen -= 8) < 0)
2034                        goto out_resource;
2035                WRITE64((u64) svc_max_payload(rqstp));
2036        }
2037        if (bmval1 & FATTR4_WORD1_MODE) {
2038                if ((buflen -= 4) < 0)
2039                        goto out_resource;
2040                WRITE32(stat.mode & S_IALLUGO);
2041        }
2042        if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
2043                if ((buflen -= 4) < 0)
2044                        goto out_resource;
2045                WRITE32(1);
2046        }
2047        if (bmval1 & FATTR4_WORD1_NUMLINKS) {
2048                if ((buflen -= 4) < 0)
2049                        goto out_resource;
2050                WRITE32(stat.nlink);
2051        }
2052        if (bmval1 & FATTR4_WORD1_OWNER) {
2053                status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen);
2054                if (status == nfserr_resource)
2055                        goto out_resource;
2056                if (status)
2057                        goto out;
2058        }
2059        if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
2060                status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen);
2061                if (status == nfserr_resource)
2062                        goto out_resource;
2063                if (status)
2064                        goto out;
2065        }
2066        if (bmval1 & FATTR4_WORD1_RAWDEV) {
2067                if ((buflen -= 8) < 0)
2068                        goto out_resource;
2069                WRITE32((u32) MAJOR(stat.rdev));
2070                WRITE32((u32) MINOR(stat.rdev));
2071        }
2072        if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
2073                if ((buflen -= 8) < 0)
2074                        goto out_resource;
2075                dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
2076                WRITE64(dummy64);
2077        }
2078        if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
2079                if ((buflen -= 8) < 0)
2080                        goto out_resource;
2081                dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
2082                WRITE64(dummy64);
2083        }
2084        if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
2085                if ((buflen -= 8) < 0)
2086                        goto out_resource;
2087                dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
2088                WRITE64(dummy64);
2089        }
2090        if (bmval1 & FATTR4_WORD1_SPACE_USED) {
2091                if ((buflen -= 8) < 0)
2092                        goto out_resource;
2093                dummy64 = (u64)stat.blocks << 9;
2094                WRITE64(dummy64);
2095        }
2096        if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
2097                if ((buflen -= 12) < 0)
2098                        goto out_resource;
2099                WRITE32(0);
2100                WRITE32(stat.atime.tv_sec);
2101                WRITE32(stat.atime.tv_nsec);
2102        }
2103        if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
2104                if ((buflen -= 12) < 0)
2105                        goto out_resource;
2106                WRITE32(0);
2107                WRITE32(1);
2108                WRITE32(0);
2109        }
2110        if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
2111                if ((buflen -= 12) < 0)
2112                        goto out_resource;
2113                WRITE32(0);
2114                WRITE32(stat.ctime.tv_sec);
2115                WRITE32(stat.ctime.tv_nsec);
2116        }
2117        if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
2118                if ((buflen -= 12) < 0)
2119                        goto out_resource;
2120                WRITE32(0);
2121                WRITE32(stat.mtime.tv_sec);
2122                WRITE32(stat.mtime.tv_nsec);
2123        }
2124        if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
2125                if ((buflen -= 8) < 0)
2126                        goto out_resource;
2127                /*
2128                 * Get parent's attributes if not ignoring crossmount
2129                 * and this is the root of a cross-mounted filesystem.
2130                 */
2131                if (ignore_crossmnt == 0 &&
2132                    exp->ex_path.mnt->mnt_root->d_inode == dentry->d_inode) {
2133                        err = vfs_getattr(exp->ex_path.mnt->mnt_parent,
2134                                exp->ex_path.mnt->mnt_mountpoint, &stat);
2135                        if (err)
2136                                goto out_nfserr;
2137                }
2138                WRITE64(stat.ino);
2139        }
2140        if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
2141                WRITE32(3);
2142                WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0);
2143                WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1);
2144                WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2);
2145        }
2146
2147        *attrlenp = htonl((char *)p - (char *)attrlenp - 4);
2148        *countp = p - buffer;
2149        status = nfs_ok;
2150
2151out:
2152        kfree(acl);
2153        if (fhp == &tempfh)
2154                fh_put(&tempfh);
2155        return status;
2156out_nfserr:
2157        status = nfserrno(err);
2158        goto out;
2159out_resource:
2160        *countp = 0;
2161        status = nfserr_resource;
2162        goto out;
2163out_serverfault:
2164        status = nfserr_serverfault;
2165        goto out;
2166}
2167
2168static inline int attributes_need_mount(u32 *bmval)
2169{
2170        if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
2171                return 1;
2172        if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
2173                return 1;
2174        return 0;
2175}
2176
2177static __be32
2178nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd,
2179                const char *name, int namlen, __be32 *p, int *buflen)
2180{
2181        struct svc_export *exp = cd->rd_fhp->fh_export;
2182        struct dentry *dentry;
2183        __be32 nfserr;
2184        int ignore_crossmnt = 0;
2185
2186        dentry = lookup_one_len(name, cd->rd_fhp->fh_dentry, namlen);
2187        if (IS_ERR(dentry))
2188                return nfserrno(PTR_ERR(dentry));
2189        if (!dentry->d_inode) {
2190                /*
2191                 * nfsd_buffered_readdir drops the i_mutex between
2192                 * readdir and calling this callback, leaving a window
2193                 * where this directory entry could have gone away.
2194                 */
2195                dput(dentry);
2196                return nfserr_noent;
2197        }
2198
2199        exp_get(exp);
2200        /*
2201         * In the case of a mountpoint, the client may be asking for
2202         * attributes that are only properties of the underlying filesystem
2203         * as opposed to the cross-mounted file system. In such a case,
2204         * we will not follow the cross mount and will fill the attribtutes
2205         * directly from the mountpoint dentry.
2206         */
2207        if (d_mountpoint(dentry) && !attributes_need_mount(cd->rd_bmval))
2208                ignore_crossmnt = 1;
2209        else if (d_mountpoint(dentry)) {
2210                int err;
2211
2212                /*
2213                 * Why the heck aren't we just using nfsd_lookup??
2214                 * Different "."/".." handling?  Something else?
2215                 * At least, add a comment here to explain....
2216                 */
2217                err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
2218                if (err) {
2219                        nfserr = nfserrno(err);
2220                        goto out_put;
2221                }
2222                nfserr = check_nfsd_access(exp, cd->rd_rqstp);
2223                if (nfserr)
2224                        goto out_put;
2225
2226        }
2227        nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval,
2228                                        cd->rd_rqstp, ignore_crossmnt);
2229out_put:
2230        dput(dentry);
2231        exp_put(exp);
2232        return nfserr;
2233}
2234
2235static __be32 *
2236nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr)
2237{
2238        __be32 *attrlenp;
2239
2240        if (buflen < 6)
2241                return NULL;
2242        *p++ = htonl(2);
2243        *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
2244        *p++ = htonl(0);                         /* bmval1 */
2245
2246        attrlenp = p++;
2247        *p++ = nfserr;       /* no htonl */
2248        *attrlenp = htonl((char *)p - (char *)attrlenp - 4);
2249        return p;
2250}
2251
2252static int
2253nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
2254                    loff_t offset, u64 ino, unsigned int d_type)
2255{
2256        struct readdir_cd *ccd = ccdv;
2257        struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
2258        int buflen;
2259        __be32 *p = cd->buffer;
2260        __be32 *cookiep;
2261        __be32 nfserr = nfserr_toosmall;
2262
2263        /* In nfsv4, "." and ".." never make it onto the wire.. */
2264        if (name && isdotent(name, namlen)) {
2265                cd->common.err = nfs_ok;
2266                return 0;
2267        }
2268
2269        if (cd->offset)
2270                xdr_encode_hyper(cd->offset, (u64) offset);
2271
2272        buflen = cd->buflen - 4 - XDR_QUADLEN(namlen);
2273        if (buflen < 0)
2274                goto fail;
2275
2276        *p++ = xdr_one;                             /* mark entry present */
2277        cookiep = p;
2278        p = xdr_encode_hyper(p, NFS_OFFSET_MAX);    /* offset of next entry */
2279        p = xdr_encode_array(p, name, namlen);      /* name length & name */
2280
2281        nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, p, &buflen);
2282        switch (nfserr) {
2283        case nfs_ok:
2284                p += buflen;
2285                break;
2286        case nfserr_resource:
2287                nfserr = nfserr_toosmall;
2288                goto fail;
2289        case nfserr_dropit:
2290                goto fail;
2291        case nfserr_noent:
2292                goto skip_entry;
2293        default:
2294                /*
2295                 * If the client requested the RDATTR_ERROR attribute,
2296                 * we stuff the error code into this attribute
2297                 * and continue.  If this attribute was not requested,
2298                 * then in accordance with the spec, we fail the
2299                 * entire READDIR operation(!)
2300                 */
2301                if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
2302                        goto fail;
2303                p = nfsd4_encode_rdattr_error(p, buflen, nfserr);
2304                if (p == NULL) {
2305                        nfserr = nfserr_toosmall;
2306                        goto fail;
2307                }
2308        }
2309        cd->buflen -= (p - cd->buffer);
2310        cd->buffer = p;
2311        cd->offset = cookiep;
2312skip_entry:
2313        cd->common.err = nfs_ok;
2314        return 0;
2315fail:
2316        cd->common.err = nfserr;
2317        return -EINVAL;
2318}
2319
2320static void
2321nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid)
2322{
2323        __be32 *p;
2324
2325        RESERVE_SPACE(sizeof(stateid_t));
2326        WRITE32(sid->si_generation);
2327        WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
2328        ADJUST_ARGS();
2329}
2330
2331static __be32
2332nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
2333{
2334        __be32 *p;
2335
2336        if (!nfserr) {
2337                RESERVE_SPACE(8);
2338                WRITE32(access->ac_supported);
2339                WRITE32(access->ac_resp_access);
2340                ADJUST_ARGS();
2341        }
2342        return nfserr;
2343}
2344
2345static __be32
2346nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
2347{
2348        ENCODE_SEQID_OP_HEAD;
2349
2350        if (!nfserr)
2351                nfsd4_encode_stateid(resp, &close->cl_stateid);
2352
2353        ENCODE_SEQID_OP_TAIL(close->cl_stateowner);
2354        return nfserr;
2355}
2356
2357
2358static __be32
2359nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
2360{
2361        __be32 *p;
2362
2363        if (!nfserr) {
2364                RESERVE_SPACE(8);
2365                WRITEMEM(commit->co_verf.data, 8);
2366                ADJUST_ARGS();
2367        }
2368        return nfserr;
2369}
2370
2371static __be32
2372nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
2373{
2374        __be32 *p;
2375
2376        if (!nfserr) {
2377                RESERVE_SPACE(32);
2378                write_cinfo(&p, &create->cr_cinfo);
2379                WRITE32(2);
2380                WRITE32(create->cr_bmval[0]);
2381                WRITE32(create->cr_bmval[1]);
2382                ADJUST_ARGS();
2383        }
2384        return nfserr;
2385}
2386
2387static __be32
2388nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
2389{
2390        struct svc_fh *fhp = getattr->ga_fhp;
2391        int buflen;
2392
2393        if (nfserr)
2394                return nfserr;
2395
2396        buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2);
2397        nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry,
2398                                    resp->p, &buflen, getattr->ga_bmval,
2399                                    resp->rqstp, 0);
2400        if (!nfserr)
2401                resp->p += buflen;
2402        return nfserr;
2403}
2404
2405static __be32
2406nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
2407{
2408        struct svc_fh *fhp = *fhpp;
2409        unsigned int len;
2410        __be32 *p;
2411
2412        if (!nfserr) {
2413                len = fhp->fh_handle.fh_size;
2414                RESERVE_SPACE(len + 4);
2415                WRITE32(len);
2416                WRITEMEM(&fhp->fh_handle.fh_base, len);
2417                ADJUST_ARGS();
2418        }
2419        return nfserr;
2420}
2421
2422/*
2423* Including all fields other than the name, a LOCK4denied structure requires
2424*   8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
2425*/
2426static void
2427nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld)
2428{
2429        __be32 *p;
2430
2431        RESERVE_SPACE(32 + XDR_LEN(ld->ld_sop ? ld->ld_sop->so_owner.len : 0));
2432        WRITE64(ld->ld_start);
2433        WRITE64(ld->ld_length);
2434        WRITE32(ld->ld_type);
2435        if (ld->ld_sop) {
2436                WRITEMEM(&ld->ld_clientid, 8);
2437                WRITE32(ld->ld_sop->so_owner.len);
2438                WRITEMEM(ld->ld_sop->so_owner.data, ld->ld_sop->so_owner.len);
2439                kref_put(&ld->ld_sop->so_ref, nfs4_free_stateowner);
2440        }  else {  /* non - nfsv4 lock in conflict, no clientid nor owner */
2441                WRITE64((u64)0); /* clientid */
2442                WRITE32(0); /* length of owner name */
2443        }
2444        ADJUST_ARGS();
2445}
2446
2447static __be32
2448nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
2449{
2450        ENCODE_SEQID_OP_HEAD;
2451
2452        if (!nfserr)
2453                nfsd4_encode_stateid(resp, &lock->lk_resp_stateid);
2454        else if (nfserr == nfserr_denied)
2455                nfsd4_encode_lock_denied(resp, &lock->lk_denied);
2456
2457        ENCODE_SEQID_OP_TAIL(lock->lk_replay_owner);
2458        return nfserr;
2459}
2460
2461static __be32
2462nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
2463{
2464        if (nfserr == nfserr_denied)
2465                nfsd4_encode_lock_denied(resp, &lockt->lt_denied);
2466        return nfserr;
2467}
2468
2469static __be32
2470nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
2471{
2472        ENCODE_SEQID_OP_HEAD;
2473
2474        if (!nfserr)
2475                nfsd4_encode_stateid(resp, &locku->lu_stateid);
2476
2477        ENCODE_SEQID_OP_TAIL(locku->lu_stateowner);
2478        return nfserr;
2479}
2480
2481
2482static __be32
2483nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
2484{
2485        __be32 *p;
2486
2487        if (!nfserr) {
2488                RESERVE_SPACE(20);
2489                write_cinfo(&p, &link->li_cinfo);
2490                ADJUST_ARGS();
2491        }
2492        return nfserr;
2493}
2494
2495
2496static __be32
2497nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
2498{
2499        __be32 *p;
2500        ENCODE_SEQID_OP_HEAD;
2501
2502        if (nfserr)
2503                goto out;
2504
2505        nfsd4_encode_stateid(resp, &open->op_stateid);
2506        RESERVE_SPACE(40);
2507        write_cinfo(&p, &open->op_cinfo);
2508        WRITE32(open->op_rflags);
2509        WRITE32(2);
2510        WRITE32(open->op_bmval[0]);
2511        WRITE32(open->op_bmval[1]);
2512        WRITE32(open->op_delegate_type);
2513        ADJUST_ARGS();
2514
2515        switch (open->op_delegate_type) {
2516        case NFS4_OPEN_DELEGATE_NONE:
2517                break;
2518        case NFS4_OPEN_DELEGATE_READ:
2519                nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
2520                RESERVE_SPACE(20);
2521                WRITE32(open->op_recall);
2522
2523                /*
2524                 * TODO: ACE's in delegations
2525                 */
2526                WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
2527                WRITE32(0);
2528                WRITE32(0);
2529                WRITE32(0);   /* XXX: is NULL principal ok? */
2530                ADJUST_ARGS();
2531                break;
2532        case NFS4_OPEN_DELEGATE_WRITE:
2533                nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
2534                RESERVE_SPACE(32);
2535                WRITE32(0);
2536
2537                /*
2538                 * TODO: space_limit's in delegations
2539                 */
2540                WRITE32(NFS4_LIMIT_SIZE);
2541                WRITE32(~(u32)0);
2542                WRITE32(~(u32)0);
2543
2544                /*
2545                 * TODO: ACE's in delegations
2546                 */
2547                WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
2548                WRITE32(0);
2549                WRITE32(0);
2550                WRITE32(0);   /* XXX: is NULL principal ok? */
2551                ADJUST_ARGS();
2552                break;
2553        default:
2554                BUG();
2555        }
2556        /* XXX save filehandle here */
2557out:
2558        ENCODE_SEQID_OP_TAIL(open->op_stateowner);
2559        return nfserr;
2560}
2561
2562static __be32
2563nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
2564{
2565        ENCODE_SEQID_OP_HEAD;
2566
2567        if (!nfserr)
2568                nfsd4_encode_stateid(resp, &oc->oc_resp_stateid);
2569
2570        ENCODE_SEQID_OP_TAIL(oc->oc_stateowner);
2571        return nfserr;
2572}
2573
2574static __be32
2575nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
2576{
2577        ENCODE_SEQID_OP_HEAD;
2578
2579        if (!nfserr)
2580                nfsd4_encode_stateid(resp, &od->od_stateid);
2581
2582        ENCODE_SEQID_OP_TAIL(od->od_stateowner);
2583        return nfserr;
2584}
2585
2586static __be32
2587nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
2588                  struct nfsd4_read *read)
2589{
2590        u32 eof;
2591        int v, pn;
2592        unsigned long maxcount; 
2593        long len;
2594        __be32 *p;
2595
2596        if (nfserr)
2597                return nfserr;
2598        if (resp->xbuf->page_len)
2599                return nfserr_resource;
2600
2601        RESERVE_SPACE(8); /* eof flag and byte count */
2602
2603        maxcount = svc_max_payload(resp->rqstp);
2604        if (maxcount > read->rd_length)
2605                maxcount = read->rd_length;
2606
2607        len = maxcount;
2608        v = 0;
2609        while (len > 0) {
2610                pn = resp->rqstp->rq_resused++;
2611                resp->rqstp->rq_vec[v].iov_base =
2612                        page_address(resp->rqstp->rq_respages[pn]);
2613                resp->rqstp->rq_vec[v].iov_len =
2614                        len < PAGE_SIZE ? len : PAGE_SIZE;
2615                v++;
2616                len -= PAGE_SIZE;
2617        }
2618        read->rd_vlen = v;
2619
2620        nfserr = nfsd_read(read->rd_rqstp, read->rd_fhp, read->rd_filp,
2621                        read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen,
2622                        &maxcount);
2623
2624        if (nfserr == nfserr_symlink)
2625                nfserr = nfserr_inval;
2626        if (nfserr)
2627                return nfserr;
2628        eof = (read->rd_offset + maxcount >=
2629               read->rd_fhp->fh_dentry->d_inode->i_size);
2630
2631        WRITE32(eof);
2632        WRITE32(maxcount);
2633        ADJUST_ARGS();
2634        resp->xbuf->head[0].iov_len = (char*)p
2635                                        - (char*)resp->xbuf->head[0].iov_base;
2636        resp->xbuf->page_len = maxcount;
2637
2638        /* Use rest of head for padding and remaining ops: */
2639        resp->xbuf->tail[0].iov_base = p;
2640        resp->xbuf->tail[0].iov_len = 0;
2641        if (maxcount&3) {
2642                RESERVE_SPACE(4);
2643                WRITE32(0);
2644                resp->xbuf->tail[0].iov_base += maxcount&3;
2645                resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
2646                ADJUST_ARGS();
2647        }
2648        return 0;
2649}
2650
2651static __be32
2652nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
2653{
2654        int maxcount;
2655        char *page;
2656        __be32 *p;
2657
2658        if (nfserr)
2659                return nfserr;
2660        if (resp->xbuf->page_len)
2661                return nfserr_resource;
2662
2663        page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]);
2664
2665        maxcount = PAGE_SIZE;
2666        RESERVE_SPACE(4);
2667
2668        /*
2669         * XXX: By default, the ->readlink() VFS op will truncate symlinks
2670         * if they would overflow the buffer.  Is this kosher in NFSv4?  If
2671         * not, one easy fix is: if ->readlink() precisely fills the buffer,
2672         * assume that truncation occurred, and return NFS4ERR_RESOURCE.
2673         */
2674        nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount);
2675        if (nfserr == nfserr_isdir)
2676                return nfserr_inval;
2677        if (nfserr)
2678                return nfserr;
2679
2680        WRITE32(maxcount);
2681        ADJUST_ARGS();
2682        resp->xbuf->head[0].iov_len = (char*)p
2683                                - (char*)resp->xbuf->head[0].iov_base;
2684        resp->xbuf->page_len = maxcount;
2685
2686        /* Use rest of head for padding and remaining ops: */
2687        resp->xbuf->tail[0].iov_base = p;
2688        resp->xbuf->tail[0].iov_len = 0;
2689        if (maxcount&3) {
2690                RESERVE_SPACE(4);
2691                WRITE32(0);
2692                resp->xbuf->tail[0].iov_base += maxcount&3;
2693                resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
2694                ADJUST_ARGS();
2695        }
2696        return 0;
2697}
2698
2699static __be32
2700nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
2701{
2702        int maxcount;
2703        loff_t offset;
2704        __be32 *page, *savep, *tailbase;
2705        __be32 *p;
2706
2707        if (nfserr)
2708                return nfserr;
2709        if (resp->xbuf->page_len)
2710                return nfserr_resource;
2711
2712        RESERVE_SPACE(8);  /* verifier */
2713        savep = p;
2714
2715        /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
2716        WRITE32(0);
2717        WRITE32(0);
2718        ADJUST_ARGS();
2719        resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base;
2720        tailbase = p;
2721
2722        maxcount = PAGE_SIZE;
2723        if (maxcount > readdir->rd_maxcount)
2724                maxcount = readdir->rd_maxcount;
2725
2726        /*
2727         * Convert from bytes to words, account for the two words already
2728         * written, make sure to leave two words at the end for the next
2729         * pointer and eof field.
2730         */
2731        maxcount = (maxcount >> 2) - 4;
2732        if (maxcount < 0) {
2733                nfserr =  nfserr_toosmall;
2734                goto err_no_verf;
2735        }
2736
2737        page = page_address(resp->rqstp->rq_respages[resp->rqstp->rq_resused++]);
2738        readdir->common.err = 0;
2739        readdir->buflen = maxcount;
2740        readdir->buffer = page;
2741        readdir->offset = NULL;
2742
2743        offset = readdir->rd_cookie;
2744        nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
2745                              &offset,
2746                              &readdir->common, nfsd4_encode_dirent);
2747        if (nfserr == nfs_ok &&
2748            readdir->common.err == nfserr_toosmall &&
2749            readdir->buffer == page) 
2750                nfserr = nfserr_toosmall;
2751        if (nfserr == nfserr_symlink)
2752                nfserr = nfserr_notdir;
2753        if (nfserr)
2754                goto err_no_verf;
2755
2756        if (readdir->offset)
2757                xdr_encode_hyper(readdir->offset, offset);
2758
2759        p = readdir->buffer;
2760        *p++ = 0;       /* no more entries */
2761        *p++ = htonl(readdir->common.err == nfserr_eof);
2762        resp->xbuf->page_len = ((char*)p) - (char*)page_address(
2763                resp->rqstp->rq_respages[resp->rqstp->rq_resused-1]);
2764
2765        /* Use rest of head for padding and remaining ops: */
2766        resp->xbuf->tail[0].iov_base = tailbase;
2767        resp->xbuf->tail[0].iov_len = 0;
2768        resp->p = resp->xbuf->tail[0].iov_base;
2769        resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4;
2770
2771        return 0;
2772err_no_verf:
2773        p = savep;
2774        ADJUST_ARGS();
2775        return nfserr;
2776}
2777
2778static __be32
2779nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
2780{
2781        __be32 *p;
2782
2783        if (!nfserr) {
2784                RESERVE_SPACE(20);
2785                write_cinfo(&p, &remove->rm_cinfo);
2786                ADJUST_ARGS();
2787        }
2788        return nfserr;
2789}
2790
2791static __be32
2792nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
2793{
2794        __be32 *p;
2795
2796        if (!nfserr) {
2797                RESERVE_SPACE(40);
2798                write_cinfo(&p, &rename->rn_sinfo);
2799                write_cinfo(&p, &rename->rn_tinfo);
2800                ADJUST_ARGS();
2801        }
2802        return nfserr;
2803}
2804
2805static __be32
2806nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
2807                     struct nfsd4_secinfo *secinfo)
2808{
2809        int i = 0;
2810        struct svc_export *exp = secinfo->si_exp;
2811        u32 nflavs;
2812        struct exp_flavor_info *flavs;
2813        struct exp_flavor_info def_flavs[2];
2814        __be32 *p;
2815
2816        if (nfserr)
2817                goto out;
2818        if (exp->ex_nflavors) {
2819                flavs = exp->ex_flavors;
2820                nflavs = exp->ex_nflavors;
2821        } else { /* Handling of some defaults in absence of real secinfo: */
2822                flavs = def_flavs;
2823                if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
2824                        nflavs = 2;
2825                        flavs[0].pseudoflavor = RPC_AUTH_UNIX;
2826                        flavs[1].pseudoflavor = RPC_AUTH_NULL;
2827                } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
2828                        nflavs = 1;
2829                        flavs[0].pseudoflavor
2830                                        = svcauth_gss_flavor(exp->ex_client);
2831                } else {
2832                        nflavs = 1;
2833                        flavs[0].pseudoflavor
2834                                        = exp->ex_client->flavour->flavour;
2835                }
2836        }
2837
2838        RESERVE_SPACE(4);
2839        WRITE32(nflavs);
2840        ADJUST_ARGS();
2841        for (i = 0; i < nflavs; i++) {
2842                u32 flav = flavs[i].pseudoflavor;
2843                struct gss_api_mech *gm = gss_mech_get_by_pseudoflavor(flav);
2844
2845                if (gm) {
2846                        RESERVE_SPACE(4);
2847                        WRITE32(RPC_AUTH_GSS);
2848                        ADJUST_ARGS();
2849                        RESERVE_SPACE(4 + gm->gm_oid.len);
2850                        WRITE32(gm->gm_oid.len);
2851                        WRITEMEM(gm->gm_oid.data, gm->gm_oid.len);
2852                        ADJUST_ARGS();
2853                        RESERVE_SPACE(4);
2854                        WRITE32(0); /* qop */
2855                        ADJUST_ARGS();
2856                        RESERVE_SPACE(4);
2857                        WRITE32(gss_pseudoflavor_to_service(gm, flav));
2858                        ADJUST_ARGS();
2859                        gss_mech_put(gm);
2860                } else {
2861                        RESERVE_SPACE(4);
2862                        WRITE32(flav);
2863                        ADJUST_ARGS();
2864                }
2865        }
2866out:
2867        if (exp)
2868                exp_put(exp);
2869        return nfserr;
2870}
2871
2872/*
2873 * The SETATTR encode routine is special -- it always encodes a bitmap,
2874 * regardless of the error status.
2875 */
2876static __be32
2877nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
2878{
2879        __be32 *p;
2880
2881        RESERVE_SPACE(12);
2882        if (nfserr) {
2883                WRITE32(2);
2884                WRITE32(0);
2885                WRITE32(0);
2886        }
2887        else {
2888                WRITE32(2);
2889                WRITE32(setattr->sa_bmval[0]);
2890                WRITE32(setattr->sa_bmval[1]);
2891        }
2892        ADJUST_ARGS();
2893        return nfserr;
2894}
2895
2896static __be32
2897nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
2898{
2899        __be32 *p;
2900
2901        if (!nfserr) {
2902                RESERVE_SPACE(8 + sizeof(nfs4_verifier));
2903                WRITEMEM(&scd->se_clientid, 8);
2904                WRITEMEM(&scd->se_confirm, sizeof(nfs4_verifier));
2905                ADJUST_ARGS();
2906        }
2907        else if (nfserr == nfserr_clid_inuse) {
2908                RESERVE_SPACE(8);
2909                WRITE32(0);
2910                WRITE32(0);
2911                ADJUST_ARGS();
2912        }
2913        return nfserr;
2914}
2915
2916static __be32
2917nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
2918{
2919        __be32 *p;
2920
2921        if (!nfserr) {
2922                RESERVE_SPACE(16);
2923                WRITE32(write->wr_bytes_written);
2924                WRITE32(write->wr_how_written);
2925                WRITEMEM(write->wr_verifier.data, 8);
2926                ADJUST_ARGS();
2927        }
2928        return nfserr;
2929}
2930
2931static __be32
2932nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, int nfserr,
2933                         struct nfsd4_exchange_id *exid)
2934{
2935        __be32 *p;
2936        char *major_id;
2937        char *server_scope;
2938        int major_id_sz;
2939        int server_scope_sz;
2940        uint64_t minor_id = 0;
2941
2942        if (nfserr)
2943                return nfserr;
2944
2945        major_id = utsname()->nodename;
2946        major_id_sz = strlen(major_id);
2947        server_scope = utsname()->nodename;
2948        server_scope_sz = strlen(server_scope);
2949
2950        RESERVE_SPACE(
2951                8 /* eir_clientid */ +
2952                4 /* eir_sequenceid */ +
2953                4 /* eir_flags */ +
2954                4 /* spr_how (SP4_NONE) */ +
2955                8 /* so_minor_id */ +
2956                4 /* so_major_id.len */ +
2957                (XDR_QUADLEN(major_id_sz) * 4) +
2958                4 /* eir_server_scope.len */ +
2959                (XDR_QUADLEN(server_scope_sz) * 4) +
2960                4 /* eir_server_impl_id.count (0) */);
2961
2962        WRITEMEM(&exid->clientid, 8);
2963        WRITE32(exid->seqid);
2964        WRITE32(exid->flags);
2965
2966        /* state_protect4_r. Currently only support SP4_NONE */
2967        BUG_ON(exid->spa_how != SP4_NONE);
2968        WRITE32(exid->spa_how);
2969
2970        /* The server_owner struct */
2971        WRITE64(minor_id);      /* Minor id */
2972        /* major id */
2973        WRITE32(major_id_sz);
2974        WRITEMEM(major_id, major_id_sz);
2975
2976        /* Server scope */
2977        WRITE32(server_scope_sz);
2978        WRITEMEM(server_scope, server_scope_sz);
2979
2980        /* Implementation id */
2981        WRITE32(0);     /* zero length nfs_impl_id4 array */
2982        ADJUST_ARGS();
2983        return 0;
2984}
2985
2986static __be32
2987nfsd4_encode_create_session(struct nfsd4_compoundres *resp, int nfserr,
2988                            struct nfsd4_create_session *sess)
2989{
2990        __be32 *p;
2991
2992        if (nfserr)
2993                return nfserr;
2994
2995        RESERVE_SPACE(24);
2996        WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN);
2997        WRITE32(sess->seqid);
2998        WRITE32(sess->flags);
2999        ADJUST_ARGS();
3000
3001        RESERVE_SPACE(28);
3002        WRITE32(0); /* headerpadsz */
3003        WRITE32(sess->fore_channel.maxreq_sz);
3004        WRITE32(sess->fore_channel.maxresp_sz);
3005        WRITE32(sess->fore_channel.maxresp_cached);
3006        WRITE32(sess->fore_channel.maxops);
3007        WRITE32(sess->fore_channel.maxreqs);
3008        WRITE32(sess->fore_channel.nr_rdma_attrs);
3009        ADJUST_ARGS();
3010
3011        if (sess->fore_channel.nr_rdma_attrs) {
3012                RESERVE_SPACE(4);
3013                WRITE32(sess->fore_channel.rdma_attrs);
3014                ADJUST_ARGS();
3015        }
3016
3017        RESERVE_SPACE(28);
3018        WRITE32(0); /* headerpadsz */
3019        WRITE32(sess->back_channel.maxreq_sz);
3020        WRITE32(sess->back_channel.maxresp_sz);
3021        WRITE32(sess->back_channel.maxresp_cached);
3022        WRITE32(sess->back_channel.maxops);
3023        WRITE32(sess->back_channel.maxreqs);
3024        WRITE32(sess->back_channel.nr_rdma_attrs);
3025        ADJUST_ARGS();
3026
3027        if (sess->back_channel.nr_rdma_attrs) {
3028                RESERVE_SPACE(4);
3029                WRITE32(sess->back_channel.rdma_attrs);
3030                ADJUST_ARGS();
3031        }
3032        return 0;
3033}
3034
3035static __be32
3036nfsd4_encode_destroy_session(struct nfsd4_compoundres *resp, int nfserr,
3037                             struct nfsd4_destroy_session *destroy_session)
3038{
3039        return nfserr;
3040}
3041
3042__be32
3043nfsd4_encode_sequence(struct nfsd4_compoundres *resp, int nfserr,
3044                      struct nfsd4_sequence *seq)
3045{
3046        __be32 *p;
3047
3048        if (nfserr)
3049                return nfserr;
3050
3051        RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20);
3052        WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
3053        WRITE32(seq->seqid);
3054        WRITE32(seq->slotid);
3055        WRITE32(seq->maxslots);
3056        /*
3057         * FIXME: for now:
3058         *   target_maxslots = maxslots
3059         *   status_flags = 0
3060         */
3061        WRITE32(seq->maxslots);
3062        WRITE32(0);
3063
3064        ADJUST_ARGS();
3065        resp->cstate.datap = p; /* DRC cache data pointer */
3066        return 0;
3067}
3068
3069static __be32
3070nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p)
3071{
3072        return nfserr;
3073}
3074
3075typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *);
3076
3077/*
3078 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
3079 * since we don't need to filter out obsolete ops as this is
3080 * done in the decoding phase.
3081 */
3082static nfsd4_enc nfsd4_enc_ops[] = {
3083        [OP_ACCESS]             = (nfsd4_enc)nfsd4_encode_access,
3084        [OP_CLOSE]              = (nfsd4_enc)nfsd4_encode_close,
3085        [OP_COMMIT]             = (nfsd4_enc)nfsd4_encode_commit,
3086        [OP_CREATE]             = (nfsd4_enc)nfsd4_encode_create,
3087        [OP_DELEGPURGE]         = (nfsd4_enc)nfsd4_encode_noop,
3088        [OP_DELEGRETURN]        = (nfsd4_enc)nfsd4_encode_noop,
3089        [OP_GETATTR]            = (nfsd4_enc)nfsd4_encode_getattr,
3090        [OP_GETFH]              = (nfsd4_enc)nfsd4_encode_getfh,
3091        [OP_LINK]               = (nfsd4_enc)nfsd4_encode_link,
3092        [OP_LOCK]               = (nfsd4_enc)nfsd4_encode_lock,
3093        [OP_LOCKT]              = (nfsd4_enc)nfsd4_encode_lockt,
3094        [OP_LOCKU]              = (nfsd4_enc)nfsd4_encode_locku,
3095        [OP_LOOKUP]             = (nfsd4_enc)nfsd4_encode_noop,
3096        [OP_LOOKUPP]            = (nfsd4_enc)nfsd4_encode_noop,
3097        [OP_NVERIFY]            = (nfsd4_enc)nfsd4_encode_noop,
3098        [OP_OPEN]               = (nfsd4_enc)nfsd4_encode_open,
3099        [OP_OPENATTR]           = (nfsd4_enc)nfsd4_encode_noop,
3100        [OP_OPEN_CONFIRM]       = (nfsd4_enc)nfsd4_encode_open_confirm,
3101        [OP_OPEN_DOWNGRADE]     = (nfsd4_enc)nfsd4_encode_open_downgrade,
3102        [OP_PUTFH]              = (nfsd4_enc)nfsd4_encode_noop,
3103        [OP_PUTPUBFH]           = (nfsd4_enc)nfsd4_encode_noop,
3104        [OP_PUTROOTFH]          = (nfsd4_enc)nfsd4_encode_noop,
3105        [OP_READ]               = (nfsd4_enc)nfsd4_encode_read,
3106        [OP_READDIR]            = (nfsd4_enc)nfsd4_encode_readdir,
3107        [OP_READLINK]           = (nfsd4_enc)nfsd4_encode_readlink,
3108        [OP_REMOVE]             = (nfsd4_enc)nfsd4_encode_remove,
3109        [OP_RENAME]             = (nfsd4_enc)nfsd4_encode_rename,
3110        [OP_RENEW]              = (nfsd4_enc)nfsd4_encode_noop,
3111        [OP_RESTOREFH]          = (nfsd4_enc)nfsd4_encode_noop,
3112        [OP_SAVEFH]             = (nfsd4_enc)nfsd4_encode_noop,
3113        [OP_SECINFO]            = (nfsd4_enc)nfsd4_encode_secinfo,
3114        [OP_SETATTR]            = (nfsd4_enc)nfsd4_encode_setattr,
3115        [OP_SETCLIENTID]        = (nfsd4_enc)nfsd4_encode_setclientid,
3116        [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop,
3117        [OP_VERIFY]             = (nfsd4_enc)nfsd4_encode_noop,
3118        [OP_WRITE]              = (nfsd4_enc)nfsd4_encode_write,
3119        [OP_RELEASE_LOCKOWNER]  = (nfsd4_enc)nfsd4_encode_noop,
3120
3121        /* NFSv4.1 operations */
3122        [OP_BACKCHANNEL_CTL]    = (nfsd4_enc)nfsd4_encode_noop,
3123        [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_noop,
3124        [OP_EXCHANGE_ID]        = (nfsd4_enc)nfsd4_encode_exchange_id,
3125        [OP_CREATE_SESSION]     = (nfsd4_enc)nfsd4_encode_create_session,
3126        [OP_DESTROY_SESSION]    = (nfsd4_enc)nfsd4_encode_destroy_session,
3127        [OP_FREE_STATEID]       = (nfsd4_enc)nfsd4_encode_noop,
3128        [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
3129        [OP_GETDEVICEINFO]      = (nfsd4_enc)nfsd4_encode_noop,
3130        [OP_GETDEVICELIST]      = (nfsd4_enc)nfsd4_encode_noop,
3131        [OP_LAYOUTCOMMIT]       = (nfsd4_enc)nfsd4_encode_noop,
3132        [OP_LAYOUTGET]          = (nfsd4_enc)nfsd4_encode_noop,
3133        [OP_LAYOUTRETURN]       = (nfsd4_enc)nfsd4_encode_noop,
3134        [OP_SECINFO_NO_NAME]    = (nfsd4_enc)nfsd4_encode_noop,
3135        [OP_SEQUENCE]           = (nfsd4_enc)nfsd4_encode_sequence,
3136        [OP_SET_SSV]            = (nfsd4_enc)nfsd4_encode_noop,
3137        [OP_TEST_STATEID]       = (nfsd4_enc)nfsd4_encode_noop,
3138        [OP_WANT_DELEGATION]    = (nfsd4_enc)nfsd4_encode_noop,
3139        [OP_DESTROY_CLIENTID]   = (nfsd4_enc)nfsd4_encode_noop,
3140        [OP_RECLAIM_COMPLETE]   = (nfsd4_enc)nfsd4_encode_noop,
3141};
3142
3143/*
3144 * Calculate the total amount of memory that the compound response has taken
3145 * after encoding the current operation.
3146 *
3147 * pad: add on 8 bytes for the next operation's op_code and status so that
3148 * there is room to cache a failure on the next operation.
3149 *
3150 * Compare this length to the session se_fmaxresp_cached.
3151 *
3152 * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so
3153 * will be at least a page and will therefore hold the xdr_buf head.
3154 */
3155static int nfsd4_check_drc_limit(struct nfsd4_compoundres *resp)
3156{
3157        int status = 0;
3158        struct xdr_buf *xb = &resp->rqstp->rq_res;
3159        struct nfsd4_compoundargs *args = resp->rqstp->rq_argp;
3160        struct nfsd4_session *session = NULL;
3161        struct nfsd4_slot *slot = resp->cstate.slot;
3162        u32 length, tlen = 0, pad = 8;
3163
3164        if (!nfsd4_has_session(&resp->cstate))
3165                return status;
3166
3167        session = resp->cstate.session;
3168        if (session == NULL || slot->sl_cachethis == 0)
3169                return status;
3170
3171        if (resp->opcnt >= args->opcnt)
3172                pad = 0; /* this is the last operation */
3173
3174        if (xb->page_len == 0) {
3175                length = (char *)resp->p - (char *)xb->head[0].iov_base + pad;
3176        } else {
3177                if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0)
3178                        tlen = (char *)resp->p - (char *)xb->tail[0].iov_base;
3179
3180                length = xb->head[0].iov_len + xb->page_len + tlen + pad;
3181        }
3182        dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__,
3183                length, xb->page_len, tlen, pad);
3184
3185        if (length <= session->se_fchannel.maxresp_cached)
3186                return status;
3187        else
3188                return nfserr_rep_too_big_to_cache;
3189}
3190
3191void
3192nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
3193{
3194        __be32 *statp;
3195        __be32 *p;
3196
3197        RESERVE_SPACE(8);
3198        WRITE32(op->opnum);
3199        statp = p++;    /* to be backfilled at the end */
3200        ADJUST_ARGS();
3201
3202        if (op->opnum == OP_ILLEGAL)
3203                goto status;
3204        BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
3205               !nfsd4_enc_ops[op->opnum]);
3206        op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u);
3207        /* nfsd4_check_drc_limit guarantees enough room for error status */
3208        if (!op->status && nfsd4_check_drc_limit(resp))
3209                op->status = nfserr_rep_too_big_to_cache;
3210status:
3211        /*
3212         * Note: We write the status directly, instead of using WRITE32(),
3213         * since it is already in network byte order.
3214         */
3215        *statp = op->status;
3216}
3217
3218/* 
3219 * Encode the reply stored in the stateowner reply cache 
3220 * 
3221 * XDR note: do not encode rp->rp_buflen: the buffer contains the
3222 * previously sent already encoded operation.
3223 *
3224 * called with nfs4_lock_state() held
3225 */
3226void
3227nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
3228{
3229        __be32 *p;
3230        struct nfs4_replay *rp = op->replay;
3231
3232        BUG_ON(!rp);
3233
3234        RESERVE_SPACE(8);
3235        WRITE32(op->opnum);
3236        *p++ = rp->rp_status;  /* already xdr'ed */
3237        ADJUST_ARGS();
3238
3239        RESERVE_SPACE(rp->rp_buflen);
3240        WRITEMEM(rp->rp_buf, rp->rp_buflen);
3241        ADJUST_ARGS();
3242}
3243
3244int
3245nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p, void *dummy)
3246{
3247        return xdr_ressize_check(rqstp, p);
3248}
3249
3250void nfsd4_release_compoundargs(struct nfsd4_compoundargs *args)
3251{
3252        if (args->ops != args->iops) {
3253                kfree(args->ops);
3254                args->ops = args->iops;
3255        }
3256        kfree(args->tmpp);
3257        args->tmpp = NULL;
3258        while (args->to_free) {
3259                struct tmpbuf *tb = args->to_free;
3260                args->to_free = tb->next;
3261                tb->release(tb->buf);
3262                kfree(tb);
3263        }
3264}
3265
3266int
3267nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundargs *args)
3268{
3269        __be32 status;
3270
3271        args->p = p;
3272        args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len;
3273        args->pagelist = rqstp->rq_arg.pages;
3274        args->pagelen = rqstp->rq_arg.page_len;
3275        args->tmpp = NULL;
3276        args->to_free = NULL;
3277        args->ops = args->iops;
3278        args->rqstp = rqstp;
3279
3280        status = nfsd4_decode_compound(args);
3281        if (status) {
3282                nfsd4_release_compoundargs(args);
3283        }
3284        return !status;
3285}
3286
3287int
3288nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compoundres *resp)
3289{
3290        /*
3291         * All that remains is to write the tag and operation count...
3292         */
3293        struct nfsd4_compound_state *cs = &resp->cstate;
3294        struct kvec *iov;
3295        p = resp->tagp;
3296        *p++ = htonl(resp->taglen);
3297        memcpy(p, resp->tag, resp->taglen);
3298        p += XDR_QUADLEN(resp->taglen);
3299        *p++ = htonl(resp->opcnt);
3300
3301        if (rqstp->rq_res.page_len) 
3302                iov = &rqstp->rq_res.tail[0];
3303        else
3304                iov = &rqstp->rq_res.head[0];
3305        iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base;
3306        BUG_ON(iov->iov_len > PAGE_SIZE);
3307        if (nfsd4_has_session(cs) && cs->status != nfserr_replay_cache) {
3308                nfsd4_store_cache_entry(resp);
3309                dprintk("%s: SET SLOT STATE TO AVAILABLE\n", __func__);
3310                resp->cstate.slot->sl_inuse = false;
3311                nfsd4_put_session(resp->cstate.session);
3312        }
3313        return 1;
3314}
3315
3316/*
3317 * Local variables:
3318 *  c-basic-offset: 8
3319 * End:
3320 */
3321