1
2
3
4
5
6#include <linux/mount.h>
7#include <linux/fsmap.h>
8#include "xfs.h"
9#include "xfs_fs.h"
10#include "xfs_shared.h"
11#include "xfs_format.h"
12#include "xfs_log_format.h"
13#include "xfs_trans_resv.h"
14#include "xfs_mount.h"
15#include "xfs_inode.h"
16#include "xfs_iwalk.h"
17#include "xfs_itable.h"
18#include "xfs_fsops.h"
19#include "xfs_rtalloc.h"
20#include "xfs_attr.h"
21#include "xfs_ioctl.h"
22#include "xfs_ioctl32.h"
23#include "xfs_trace.h"
24#include "xfs_sb.h"
25
26#define _NATIVE_IOC(cmd, type) \
27 _IOC(_IOC_DIR(cmd), _IOC_TYPE(cmd), _IOC_NR(cmd), sizeof(type))
28
29#ifdef BROKEN_X86_ALIGNMENT
30STATIC int
31xfs_compat_flock64_copyin(
32 xfs_flock64_t *bf,
33 compat_xfs_flock64_t __user *arg32)
34{
35 if (get_user(bf->l_type, &arg32->l_type) ||
36 get_user(bf->l_whence, &arg32->l_whence) ||
37 get_user(bf->l_start, &arg32->l_start) ||
38 get_user(bf->l_len, &arg32->l_len) ||
39 get_user(bf->l_sysid, &arg32->l_sysid) ||
40 get_user(bf->l_pid, &arg32->l_pid) ||
41 copy_from_user(bf->l_pad, &arg32->l_pad, 4*sizeof(u32)))
42 return -EFAULT;
43 return 0;
44}
45
46STATIC int
47xfs_compat_ioc_fsgeometry_v1(
48 struct xfs_mount *mp,
49 compat_xfs_fsop_geom_v1_t __user *arg32)
50{
51 struct xfs_fsop_geom fsgeo;
52
53 xfs_fs_geometry(mp, &fsgeo, 3);
54
55 if (copy_to_user(arg32, &fsgeo, sizeof(struct compat_xfs_fsop_geom_v1)))
56 return -EFAULT;
57 return 0;
58}
59
60STATIC int
61xfs_compat_growfs_data_copyin(
62 struct xfs_growfs_data *in,
63 compat_xfs_growfs_data_t __user *arg32)
64{
65 if (get_user(in->newblocks, &arg32->newblocks) ||
66 get_user(in->imaxpct, &arg32->imaxpct))
67 return -EFAULT;
68 return 0;
69}
70
71STATIC int
72xfs_compat_growfs_rt_copyin(
73 struct xfs_growfs_rt *in,
74 compat_xfs_growfs_rt_t __user *arg32)
75{
76 if (get_user(in->newblocks, &arg32->newblocks) ||
77 get_user(in->extsize, &arg32->extsize))
78 return -EFAULT;
79 return 0;
80}
81
82STATIC int
83xfs_fsinumbers_fmt_compat(
84 struct xfs_ibulk *breq,
85 const struct xfs_inumbers *ig)
86{
87 struct compat_xfs_inogrp __user *p32 = breq->ubuffer;
88 struct xfs_inogrp ig1;
89 struct xfs_inogrp *igrp = &ig1;
90
91 xfs_inumbers_to_inogrp(&ig1, ig);
92
93 if (put_user(igrp->xi_startino, &p32->xi_startino) ||
94 put_user(igrp->xi_alloccount, &p32->xi_alloccount) ||
95 put_user(igrp->xi_allocmask, &p32->xi_allocmask))
96 return -EFAULT;
97
98 return xfs_ibulk_advance(breq, sizeof(struct compat_xfs_inogrp));
99}
100
101#else
102#define xfs_fsinumbers_fmt_compat xfs_fsinumbers_fmt
103#endif
104
105STATIC int
106xfs_ioctl32_bstime_copyin(
107 xfs_bstime_t *bstime,
108 compat_xfs_bstime_t __user *bstime32)
109{
110 old_time32_t sec32;
111
112 if (get_user(sec32, &bstime32->tv_sec) ||
113 get_user(bstime->tv_nsec, &bstime32->tv_nsec))
114 return -EFAULT;
115 bstime->tv_sec = sec32;
116 return 0;
117}
118
119
120
121
122
123STATIC int
124xfs_ioctl32_bstat_copyin(
125 struct xfs_bstat *bstat,
126 struct compat_xfs_bstat __user *bstat32)
127{
128 if (get_user(bstat->bs_ino, &bstat32->bs_ino) ||
129 get_user(bstat->bs_mode, &bstat32->bs_mode) ||
130 get_user(bstat->bs_nlink, &bstat32->bs_nlink) ||
131 get_user(bstat->bs_uid, &bstat32->bs_uid) ||
132 get_user(bstat->bs_gid, &bstat32->bs_gid) ||
133 get_user(bstat->bs_rdev, &bstat32->bs_rdev) ||
134 get_user(bstat->bs_blksize, &bstat32->bs_blksize) ||
135 get_user(bstat->bs_size, &bstat32->bs_size) ||
136 xfs_ioctl32_bstime_copyin(&bstat->bs_atime, &bstat32->bs_atime) ||
137 xfs_ioctl32_bstime_copyin(&bstat->bs_mtime, &bstat32->bs_mtime) ||
138 xfs_ioctl32_bstime_copyin(&bstat->bs_ctime, &bstat32->bs_ctime) ||
139 get_user(bstat->bs_blocks, &bstat32->bs_size) ||
140 get_user(bstat->bs_xflags, &bstat32->bs_size) ||
141 get_user(bstat->bs_extsize, &bstat32->bs_extsize) ||
142 get_user(bstat->bs_extents, &bstat32->bs_extents) ||
143 get_user(bstat->bs_gen, &bstat32->bs_gen) ||
144 get_user(bstat->bs_projid_lo, &bstat32->bs_projid_lo) ||
145 get_user(bstat->bs_projid_hi, &bstat32->bs_projid_hi) ||
146 get_user(bstat->bs_forkoff, &bstat32->bs_forkoff) ||
147 get_user(bstat->bs_dmevmask, &bstat32->bs_dmevmask) ||
148 get_user(bstat->bs_dmstate, &bstat32->bs_dmstate) ||
149 get_user(bstat->bs_aextents, &bstat32->bs_aextents))
150 return -EFAULT;
151 return 0;
152}
153
154
155
156STATIC int
157xfs_bstime_store_compat(
158 compat_xfs_bstime_t __user *p32,
159 const xfs_bstime_t *p)
160{
161 __s32 sec32;
162
163 sec32 = p->tv_sec;
164 if (put_user(sec32, &p32->tv_sec) ||
165 put_user(p->tv_nsec, &p32->tv_nsec))
166 return -EFAULT;
167 return 0;
168}
169
170
171STATIC int
172xfs_fsbulkstat_one_fmt_compat(
173 struct xfs_ibulk *breq,
174 const struct xfs_bulkstat *bstat)
175{
176 struct compat_xfs_bstat __user *p32 = breq->ubuffer;
177 struct xfs_bstat bs1;
178 struct xfs_bstat *buffer = &bs1;
179
180 xfs_bulkstat_to_bstat(breq->mp, &bs1, bstat);
181
182 if (put_user(buffer->bs_ino, &p32->bs_ino) ||
183 put_user(buffer->bs_mode, &p32->bs_mode) ||
184 put_user(buffer->bs_nlink, &p32->bs_nlink) ||
185 put_user(buffer->bs_uid, &p32->bs_uid) ||
186 put_user(buffer->bs_gid, &p32->bs_gid) ||
187 put_user(buffer->bs_rdev, &p32->bs_rdev) ||
188 put_user(buffer->bs_blksize, &p32->bs_blksize) ||
189 put_user(buffer->bs_size, &p32->bs_size) ||
190 xfs_bstime_store_compat(&p32->bs_atime, &buffer->bs_atime) ||
191 xfs_bstime_store_compat(&p32->bs_mtime, &buffer->bs_mtime) ||
192 xfs_bstime_store_compat(&p32->bs_ctime, &buffer->bs_ctime) ||
193 put_user(buffer->bs_blocks, &p32->bs_blocks) ||
194 put_user(buffer->bs_xflags, &p32->bs_xflags) ||
195 put_user(buffer->bs_extsize, &p32->bs_extsize) ||
196 put_user(buffer->bs_extents, &p32->bs_extents) ||
197 put_user(buffer->bs_gen, &p32->bs_gen) ||
198 put_user(buffer->bs_projid, &p32->bs_projid) ||
199 put_user(buffer->bs_projid_hi, &p32->bs_projid_hi) ||
200 put_user(buffer->bs_forkoff, &p32->bs_forkoff) ||
201 put_user(buffer->bs_dmevmask, &p32->bs_dmevmask) ||
202 put_user(buffer->bs_dmstate, &p32->bs_dmstate) ||
203 put_user(buffer->bs_aextents, &p32->bs_aextents))
204 return -EFAULT;
205
206 return xfs_ibulk_advance(breq, sizeof(struct compat_xfs_bstat));
207}
208
209
210STATIC int
211xfs_compat_ioc_fsbulkstat(
212 struct file *file,
213 unsigned int cmd,
214 struct compat_xfs_fsop_bulkreq __user *p32)
215{
216 struct xfs_mount *mp = XFS_I(file_inode(file))->i_mount;
217 u32 addr;
218 struct xfs_fsop_bulkreq bulkreq;
219 struct xfs_ibulk breq = {
220 .mp = mp,
221 .mnt_userns = file_mnt_user_ns(file),
222 .ocount = 0,
223 };
224 xfs_ino_t lastino;
225 int error;
226
227
228
229
230
231
232
233 inumbers_fmt_pf inumbers_func = xfs_fsinumbers_fmt_compat;
234 bulkstat_one_fmt_pf bs_one_func = xfs_fsbulkstat_one_fmt_compat;
235
236#ifdef CONFIG_X86_X32
237 if (in_x32_syscall()) {
238
239
240
241
242
243
244
245
246 inumbers_func = xfs_fsinumbers_fmt;
247 bs_one_func = xfs_fsbulkstat_one_fmt;
248 }
249#endif
250
251
252
253
254 if (!capable(CAP_SYS_ADMIN))
255 return -EPERM;
256
257 if (xfs_is_shutdown(mp))
258 return -EIO;
259
260 if (get_user(addr, &p32->lastip))
261 return -EFAULT;
262 bulkreq.lastip = compat_ptr(addr);
263 if (get_user(bulkreq.icount, &p32->icount) ||
264 get_user(addr, &p32->ubuffer))
265 return -EFAULT;
266 bulkreq.ubuffer = compat_ptr(addr);
267 if (get_user(addr, &p32->ocount))
268 return -EFAULT;
269 bulkreq.ocount = compat_ptr(addr);
270
271 if (copy_from_user(&lastino, bulkreq.lastip, sizeof(__s64)))
272 return -EFAULT;
273
274 if (bulkreq.icount <= 0)
275 return -EINVAL;
276
277 if (bulkreq.ubuffer == NULL)
278 return -EINVAL;
279
280 breq.ubuffer = bulkreq.ubuffer;
281 breq.icount = bulkreq.icount;
282
283
284
285
286
287
288
289
290
291
292
293
294 if (cmd == XFS_IOC_FSINUMBERS_32) {
295 breq.startino = lastino ? lastino + 1 : 0;
296 error = xfs_inumbers(&breq, inumbers_func);
297 lastino = breq.startino - 1;
298 } else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE_32) {
299 breq.startino = lastino;
300 breq.icount = 1;
301 error = xfs_bulkstat_one(&breq, bs_one_func);
302 lastino = breq.startino;
303 } else if (cmd == XFS_IOC_FSBULKSTAT_32) {
304 breq.startino = lastino ? lastino + 1 : 0;
305 error = xfs_bulkstat(&breq, bs_one_func);
306 lastino = breq.startino - 1;
307 } else {
308 error = -EINVAL;
309 }
310 if (error)
311 return error;
312
313 if (bulkreq.lastip != NULL &&
314 copy_to_user(bulkreq.lastip, &lastino, sizeof(xfs_ino_t)))
315 return -EFAULT;
316
317 if (bulkreq.ocount != NULL &&
318 copy_to_user(bulkreq.ocount, &breq.ocount, sizeof(__s32)))
319 return -EFAULT;
320
321 return 0;
322}
323
324STATIC int
325xfs_compat_handlereq_copyin(
326 xfs_fsop_handlereq_t *hreq,
327 compat_xfs_fsop_handlereq_t __user *arg32)
328{
329 compat_xfs_fsop_handlereq_t hreq32;
330
331 if (copy_from_user(&hreq32, arg32, sizeof(compat_xfs_fsop_handlereq_t)))
332 return -EFAULT;
333
334 hreq->fd = hreq32.fd;
335 hreq->path = compat_ptr(hreq32.path);
336 hreq->oflags = hreq32.oflags;
337 hreq->ihandle = compat_ptr(hreq32.ihandle);
338 hreq->ihandlen = hreq32.ihandlen;
339 hreq->ohandle = compat_ptr(hreq32.ohandle);
340 hreq->ohandlen = compat_ptr(hreq32.ohandlen);
341
342 return 0;
343}
344
345STATIC struct dentry *
346xfs_compat_handlereq_to_dentry(
347 struct file *parfilp,
348 compat_xfs_fsop_handlereq_t *hreq)
349{
350 return xfs_handle_to_dentry(parfilp,
351 compat_ptr(hreq->ihandle), hreq->ihandlen);
352}
353
354STATIC int
355xfs_compat_attrlist_by_handle(
356 struct file *parfilp,
357 compat_xfs_fsop_attrlist_handlereq_t __user *p)
358{
359 compat_xfs_fsop_attrlist_handlereq_t al_hreq;
360 struct dentry *dentry;
361 int error;
362
363 if (!capable(CAP_SYS_ADMIN))
364 return -EPERM;
365 if (copy_from_user(&al_hreq, p, sizeof(al_hreq)))
366 return -EFAULT;
367
368 dentry = xfs_compat_handlereq_to_dentry(parfilp, &al_hreq.hreq);
369 if (IS_ERR(dentry))
370 return PTR_ERR(dentry);
371
372 error = xfs_ioc_attr_list(XFS_I(d_inode(dentry)),
373 compat_ptr(al_hreq.buffer), al_hreq.buflen,
374 al_hreq.flags, &p->pos);
375 dput(dentry);
376 return error;
377}
378
379STATIC int
380xfs_compat_attrmulti_by_handle(
381 struct file *parfilp,
382 void __user *arg)
383{
384 int error;
385 compat_xfs_attr_multiop_t *ops;
386 compat_xfs_fsop_attrmulti_handlereq_t am_hreq;
387 struct dentry *dentry;
388 unsigned int i, size;
389
390 if (!capable(CAP_SYS_ADMIN))
391 return -EPERM;
392 if (copy_from_user(&am_hreq, arg,
393 sizeof(compat_xfs_fsop_attrmulti_handlereq_t)))
394 return -EFAULT;
395
396
397 if (am_hreq.opcount >= INT_MAX / sizeof(compat_xfs_attr_multiop_t))
398 return -E2BIG;
399
400 dentry = xfs_compat_handlereq_to_dentry(parfilp, &am_hreq.hreq);
401 if (IS_ERR(dentry))
402 return PTR_ERR(dentry);
403
404 error = -E2BIG;
405 size = am_hreq.opcount * sizeof(compat_xfs_attr_multiop_t);
406 if (!size || size > 16 * PAGE_SIZE)
407 goto out_dput;
408
409 ops = memdup_user(compat_ptr(am_hreq.ops), size);
410 if (IS_ERR(ops)) {
411 error = PTR_ERR(ops);
412 goto out_dput;
413 }
414
415 error = 0;
416 for (i = 0; i < am_hreq.opcount; i++) {
417 ops[i].am_error = xfs_ioc_attrmulti_one(parfilp,
418 d_inode(dentry), ops[i].am_opcode,
419 compat_ptr(ops[i].am_attrname),
420 compat_ptr(ops[i].am_attrvalue),
421 &ops[i].am_length, ops[i].am_flags);
422 }
423
424 if (copy_to_user(compat_ptr(am_hreq.ops), ops, size))
425 error = -EFAULT;
426
427 kfree(ops);
428 out_dput:
429 dput(dentry);
430 return error;
431}
432
433long
434xfs_file_compat_ioctl(
435 struct file *filp,
436 unsigned cmd,
437 unsigned long p)
438{
439 struct inode *inode = file_inode(filp);
440 struct xfs_inode *ip = XFS_I(inode);
441 void __user *arg = compat_ptr(p);
442 int error;
443
444 trace_xfs_file_compat_ioctl(ip);
445
446 switch (cmd) {
447#if defined(BROKEN_X86_ALIGNMENT)
448 case XFS_IOC_ALLOCSP_32:
449 case XFS_IOC_FREESP_32:
450 case XFS_IOC_ALLOCSP64_32:
451 case XFS_IOC_FREESP64_32: {
452 struct xfs_flock64 bf;
453
454 if (xfs_compat_flock64_copyin(&bf, arg))
455 return -EFAULT;
456 cmd = _NATIVE_IOC(cmd, struct xfs_flock64);
457 return xfs_ioc_space(filp, &bf);
458 }
459 case XFS_IOC_FSGEOMETRY_V1_32:
460 return xfs_compat_ioc_fsgeometry_v1(ip->i_mount, arg);
461 case XFS_IOC_FSGROWFSDATA_32: {
462 struct xfs_growfs_data in;
463
464 if (xfs_compat_growfs_data_copyin(&in, arg))
465 return -EFAULT;
466 error = mnt_want_write_file(filp);
467 if (error)
468 return error;
469 error = xfs_growfs_data(ip->i_mount, &in);
470 mnt_drop_write_file(filp);
471 return error;
472 }
473 case XFS_IOC_FSGROWFSRT_32: {
474 struct xfs_growfs_rt in;
475
476 if (xfs_compat_growfs_rt_copyin(&in, arg))
477 return -EFAULT;
478 error = mnt_want_write_file(filp);
479 if (error)
480 return error;
481 error = xfs_growfs_rt(ip->i_mount, &in);
482 mnt_drop_write_file(filp);
483 return error;
484 }
485#endif
486
487 case XFS_IOC_GETVERSION_32:
488 cmd = _NATIVE_IOC(cmd, long);
489 return xfs_file_ioctl(filp, cmd, p);
490 case XFS_IOC_SWAPEXT_32: {
491 struct xfs_swapext sxp;
492 struct compat_xfs_swapext __user *sxu = arg;
493
494
495 if (copy_from_user(&sxp, sxu,
496 offsetof(struct xfs_swapext, sx_stat)) ||
497 xfs_ioctl32_bstat_copyin(&sxp.sx_stat, &sxu->sx_stat))
498 return -EFAULT;
499 error = mnt_want_write_file(filp);
500 if (error)
501 return error;
502 error = xfs_ioc_swapext(&sxp);
503 mnt_drop_write_file(filp);
504 return error;
505 }
506 case XFS_IOC_FSBULKSTAT_32:
507 case XFS_IOC_FSBULKSTAT_SINGLE_32:
508 case XFS_IOC_FSINUMBERS_32:
509 return xfs_compat_ioc_fsbulkstat(filp, cmd, arg);
510 case XFS_IOC_FD_TO_HANDLE_32:
511 case XFS_IOC_PATH_TO_HANDLE_32:
512 case XFS_IOC_PATH_TO_FSHANDLE_32: {
513 struct xfs_fsop_handlereq hreq;
514
515 if (xfs_compat_handlereq_copyin(&hreq, arg))
516 return -EFAULT;
517 cmd = _NATIVE_IOC(cmd, struct xfs_fsop_handlereq);
518 return xfs_find_handle(cmd, &hreq);
519 }
520 case XFS_IOC_OPEN_BY_HANDLE_32: {
521 struct xfs_fsop_handlereq hreq;
522
523 if (xfs_compat_handlereq_copyin(&hreq, arg))
524 return -EFAULT;
525 return xfs_open_by_handle(filp, &hreq);
526 }
527 case XFS_IOC_READLINK_BY_HANDLE_32: {
528 struct xfs_fsop_handlereq hreq;
529
530 if (xfs_compat_handlereq_copyin(&hreq, arg))
531 return -EFAULT;
532 return xfs_readlink_by_handle(filp, &hreq);
533 }
534 case XFS_IOC_ATTRLIST_BY_HANDLE_32:
535 return xfs_compat_attrlist_by_handle(filp, arg);
536 case XFS_IOC_ATTRMULTI_BY_HANDLE_32:
537 return xfs_compat_attrmulti_by_handle(filp, arg);
538 default:
539
540 return xfs_file_ioctl(filp, cmd, (unsigned long)arg);
541 }
542}
543