/*
 * Copyright (C) 2007 Red Hat.  All rights reserved.
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public
 * License v2 as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public
 * License along with this program; if not, write to the
 * Free Software Foundation, Inc., 59 Temple Place - Suite 330,
 * Boston, MA 021110-1307, USA.
 */

#include <linux/init.h>
#include <linux/fs.h>
#include <linux/slab.h>
#include <linux/rwsem.h>
#include <linux/xattr.h>
#include <linux/security.h>
#include "ctree.h"
#include "btrfs_inode.h"
#include "transaction.h"
#include "xattr.h"
#include "disk-io.h"


ssize_t __btrfs_getxattr(struct inode *inode, const char *name,
                                void *buffer, size_t size)
{
        struct btrfs_dir_item *di;
        struct btrfs_root *root = BTRFS_I(inode)->root;
        struct btrfs_path *path;
        struct extent_buffer *leaf;
        int ret = 0;
        unsigned long data_ptr;

        path = btrfs_alloc_path();
        if (!path)
                return -ENOMEM;

        /* lookup the xattr by name */
        di = btrfs_lookup_xattr(NULL, root, path, btrfs_ino(inode), name,
                                strlen(name), 0);
        if (!di) {
                ret = -ENODATA;
                goto out;
        } else if (IS_ERR(di)) {
                ret = PTR_ERR(di);
                goto out;
        }

        leaf = path->nodes[0];
        /* if size is 0, that means we want the size of the attr */
        if (!size) {
                ret = btrfs_dir_data_len(leaf, di);
                goto out;
        }

        /* now get the data out of our dir_item */
        if (btrfs_dir_data_len(leaf, di) > size) {
                ret = -ERANGE;
                goto out;
        }

        /*
         * The way things are packed into the leaf is like this
         * |struct btrfs_dir_item|name|data|
         * where name is the xattr name, so security.foo, and data is the
         * content of the xattr.  data_ptr points to the location in memory
         * where the data starts in the in memory leaf
         */
        data_ptr = (unsigned long)((char *)(di + 1) +
                                   btrfs_dir_name_len(leaf, di));
        read_extent_buffer(leaf, buffer, data_ptr,
                           btrfs_dir_data_len(leaf, di));
        ret = btrfs_dir_data_len(leaf, di);

out:
        btrfs_free_path(path);
        return ret;
}

static int do_setxattr(struct btrfs_trans_handle *trans,
                       struct inode *inode, const char *name,
                       const void *value, size_t size, int flags)
{
        struct btrfs_dir_item *di;
        struct btrfs_root *root = BTRFS_I(inode)->root;
        struct btrfs_path *path;
        size_t name_len = strlen(name);
        int ret = 0;

        if (name_len + size > BTRFS_MAX_XATTR_SIZE(root))
                return -ENOSPC;

        path = btrfs_alloc_path();
        if (!path)
                return -ENOMEM;

        if (flags & XATTR_REPLACE) {
                di = btrfs_lookup_xattr(trans, root, path, btrfs_ino(inode), name,
                                        name_len, -1);
                if (IS_ERR(di)) {
                        ret = PTR_ERR(di);
                        goto out;
                } else if (!di) {
                        ret = -ENODATA;
                        goto out;
                }
                ret = btrfs_delete_one_dir_name(trans, root, path, di);
                if (ret)
                        goto out;
                btrfs_release_path(path);

                /*
                 * remove the attribute
                 */
                if (!value)
                        goto out;
        } else {
                di = btrfs_lookup_xattr(NULL, root, path, btrfs_ino(inode),
                                        name, name_len, 0);
                if (IS_ERR(di)) {
                        ret = PTR_ERR(di);
                        goto out;
                }
                if (!di && !value)
                        goto out;
                btrfs_release_path(path);
        }

again:
        ret = btrfs_insert_xattr_item(trans, root, path, btrfs_ino(inode),
                                      name, name_len, value, size);
        /*
         * If we're setting an xattr to a new value but the new value is say
         * exactly BTRFS_MAX_XATTR_SIZE, we could end up with EOVERFLOW getting
         * back from split_leaf.  This is because it thinks we'll be extending
         * the existing item size, but we're asking for enough space to add the
         * item itself.  So if we get EOVERFLOW just set ret to EEXIST and let
         * the rest of the function figure it out.
         */
        if (ret == -EOVERFLOW)
                ret = -EEXIST;

        if (ret == -EEXIST) {
                if (flags & XATTR_CREATE)
                        goto out;
                /*
                 * We can't use the path we already have since we won't have the
                 * proper locking for a delete, so release the path and
                 * re-lookup to delete the thing.
                 */
                btrfs_release_path(path);
                di = btrfs_lookup_xattr(trans, root, path, btrfs_ino(inode),
                                        name, name_len, -1);
                if (IS_ERR(di)) {
                        ret = PTR_ERR(di);
                        goto out;
                } else if (!di) {
                        /* Shouldn't happen but just in case... */
                        btrfs_release_path(path);
                        goto again;
                }

                ret = btrfs_delete_one_dir_name(trans, root, path, di);
                if (ret)
                        goto out;

                /*
                 * We have a value to set, so go back and try to insert it now.
                 */
                if (value) {
                        btrfs_release_path(path);
                        goto again;
                }
        }
out:
        btrfs_free_path(path);
        return ret;
}

/*
 * @value: "" makes the attribute to empty, NULL removes it
 */
int __btrfs_setxattr(struct btrfs_trans_handle *trans,
                     struct inode *inode, const char *name,
                     const void *value, size_t size, int flags)
{
        struct btrfs_root *root = BTRFS_I(inode)->root;
        int ret;

        if (trans)
                return do_setxattr(trans, inode, name, value, size, flags);

        trans = btrfs_start_transaction(root, 2);
        if (IS_ERR(trans))
                return PTR_ERR(trans);

        ret = do_setxattr(trans, inode, name, value, size, flags);
        if (ret)
                goto out;

        inode_inc_iversion(inode);
        inode->i_ctime = CURRENT_TIME;
        set_bit(BTRFS_INODE_COPY_EVERYTHING, &BTRFS_I(inode)->runtime_flags);
        ret = btrfs_update_inode(trans, root, inode);
        BUG_ON(ret);
out:
        btrfs_end_transaction(trans, root);
        return ret;
}

ssize_t btrfs_listxattr(struct dentry *dentry, char *buffer, size_t size)
{
        struct btrfs_key key, found_key;
        struct inode *inode = dentry->d_inode;
        struct btrfs_root *root = BTRFS_I(inode)->root;
        struct btrfs_path *path;
        struct extent_buffer *leaf;
        struct btrfs_dir_item *di;
        int ret = 0, slot;
        size_t total_size = 0, size_left = size;
        unsigned long name_ptr;
        size_t name_len;

        /*
         * ok we want all objects associated with this id.
         * NOTE: we set key.offset = 0; because we want to start with the
         * first xattr that we find and walk forward
         */
        key.objectid = btrfs_ino(inode);
        btrfs_set_key_type(&key, BTRFS_XATTR_ITEM_KEY);
        key.offset = 0;

        path = btrfs_alloc_path();
        if (!path)
                return -ENOMEM;
        path->reada = 2;

        /* search for our xattrs */
        ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
        if (ret < 0)
                goto err;

        while (1) {
                leaf = path->nodes[0];
                slot = path->slots[0];

                /* this is where we start walking through the path */
                if (slot >= btrfs_header_nritems(leaf)) {
                        /*
                         * if we've reached the last slot in this leaf we need
                         * to go to the next leaf and reset everything
                         */
                        ret = btrfs_next_leaf(root, path);
                        if (ret < 0)
                                goto err;
                        else if (ret > 0)
                                break;
                        continue;
                }

                btrfs_item_key_to_cpu(leaf, &found_key, slot);

                /* check to make sure this item is what we want */
                if (found_key.objectid != key.objectid)
                        break;
                if (btrfs_key_type(&found_key) != BTRFS_XATTR_ITEM_KEY)
                        break;

                di = btrfs_item_ptr(leaf, slot, struct btrfs_dir_item);
                if (verify_dir_item(root, leaf, di))
                        goto next;

                name_len = btrfs_dir_name_len(leaf, di);
                total_size += name_len + 1;

                /* we are just looking for how big our buffer needs to be */
                if (!size)
                        goto next;

                if (!buffer || (name_len + 1) > size_left) {
                        ret = -ERANGE;
                        goto err;
                }

                name_ptr = (unsigned long)(di + 1);
                read_extent_buffer(leaf, buffer, name_ptr, name_len);
                buffer[name_len] = '\0';

                size_left -= name_len + 1;
                buffer += name_len + 1;
next:
                path->slots[0]++;
        }
        ret = total_size;

err:
        btrfs_free_path(path);

        return ret;
}

/*
 * List of handlers for synthetic system.* attributes.  All real ondisk
 * attributes are handled directly.
 */
const struct xattr_handler *btrfs_xattr_handlers[] = {
#ifdef CONFIG_BTRFS_FS_POSIX_ACL
        &btrfs_xattr_acl_access_handler,
        &btrfs_xattr_acl_default_handler,
#endif
        NULL,
};

/*
 * Check if the attribute is in a supported namespace.
 *
 * This applied after the check for the synthetic attributes in the system
 * namespace.
 */
static bool btrfs_is_valid_xattr(const char *name)
{
        return !strncmp(name, XATTR_SECURITY_PREFIX,
                        XATTR_SECURITY_PREFIX_LEN) ||
               !strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN) ||
               !strncmp(name, XATTR_TRUSTED_PREFIX, XATTR_TRUSTED_PREFIX_LEN) ||
               !strncmp(name, XATTR_USER_PREFIX, XATTR_USER_PREFIX_LEN);
}

ssize_t btrfs_getxattr(struct dentry *dentry, const char *name,
                       void *buffer, size_t size)
{
        /*
         * If this is a request for a synthetic attribute in the system.*
         * namespace use the generic infrastructure to resolve a handler
         * for it via sb->s_xattr.
         */
        if (!strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN))
                return generic_getxattr(dentry, name, buffer, size);

        if (!btrfs_is_valid_xattr(name))
                return -EOPNOTSUPP;
        return __btrfs_getxattr(dentry->d_inode, name, buffer, size);
}

int btrfs_setxattr(struct dentry *dentry, const char *name, const void *value,
                   size_t size, int flags)
{
        struct btrfs_root *root = BTRFS_I(dentry->d_inode)->root;

        /*
         * The permission on security.* and system.* is not checked
         * in permission().
         */
        if (btrfs_root_readonly(root))
                return -EROFS;

        /*
         * If this is a request for a synthetic attribute in the system.*
         * namespace use the generic infrastructure to resolve a handler
         * for it via sb->s_xattr.
         */
        if (!strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN))
                return generic_setxattr(dentry, name, value, size, flags);

        if (!btrfs_is_valid_xattr(name))
                return -EOPNOTSUPP;

        if (size == 0)
                value = "";  /* empty EA, do not remove */

        return __btrfs_setxattr(NULL, dentry->d_inode, name, value, size,
                                flags);
}

int btrfs_removexattr(struct dentry *dentry, const char *name)
{
        struct btrfs_root *root = BTRFS_I(dentry->d_inode)->root;

        /*
         * The permission on security.* and system.* is not checked
         * in permission().
         */
        if (btrfs_root_readonly(root))
                return -EROFS;

        /*
         * If this is a request for a synthetic attribute in the system.*
         * namespace use the generic infrastructure to resolve a handler
         * for it via sb->s_xattr.
         */
        if (!strncmp(name, XATTR_SYSTEM_PREFIX, XATTR_SYSTEM_PREFIX_LEN))
                return generic_removexattr(dentry, name);

        if (!btrfs_is_valid_xattr(name))
                return -EOPNOTSUPP;

        return __btrfs_setxattr(NULL, dentry->d_inode, name, NULL, 0,
                                XATTR_REPLACE);
}

static int btrfs_initxattrs(struct inode *inode,
                            const struct xattr *xattr_array, void *fs_info)
{
        const struct xattr *xattr;
        struct btrfs_trans_handle *trans = fs_info;
        char *name;
        int err = 0;

        for (xattr = xattr_array; xattr->name != NULL; xattr++) {
                name = kmalloc(XATTR_SECURITY_PREFIX_LEN +
                               strlen(xattr->name) + 1, GFP_NOFS);
                if (!name) {
                        err = -ENOMEM;
                        break;
                }
                strcpy(name, XATTR_SECURITY_PREFIX);
                strcpy(name + XATTR_SECURITY_PREFIX_LEN, xattr->name);
                err = __btrfs_setxattr(trans, inode, name,
                                       xattr->value, xattr->value_len, 0);
                kfree(name);
                if (err < 0)
                        break;
        }
        return err;
}

int btrfs_xattr_security_init(struct btrfs_trans_handle *trans,
                              struct inode *inode, struct inode *dir,
                              const struct qstr *qstr)
{
        return security_inode_init_security(inode, dir, qstr,
                                            &btrfs_initxattrs, trans);
}