fs/ksmbd/vfs.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  *   Copyright (C) 2016 Namjae Jeon <[email protected]>
   4  *   Copyright (C) 2018 Samsung Electronics Co., Ltd.
   5  */
   6
   7 #include <linux/kernel.h>
   8 #include <linux/fs.h>
   9 #include <linux/uaccess.h>
  10 #include <linux/backing-dev.h>
  11 #include <linux/writeback.h>
  12 #include <linux/xattr.h>
  13 #include <linux/falloc.h>
  14 #include <linux/genhd.h>
  15 #include <linux/fsnotify.h>
  16 #include <linux/dcache.h>
  17 #include <linux/slab.h>
  18 #include <linux/vmalloc.h>
  19 #include <linux/sched/xacct.h>
  20 #include <linux/crc32c.h>
  21
  22 #include "glob.h"
  23 #include "oplock.h"
  24 #include "connection.h"
  25 #include "vfs.h"
  26 #include "vfs_cache.h"
  27 #include "smbacl.h"
  28 #include "ndr.h"
  29 #include "auth.h"
  30 #include "misc.h"
  31
  32 #include "smb_common.h"
  33 #include "mgmt/share_config.h"
  34 #include "mgmt/tree_connect.h"
  35 #include "mgmt/user_session.h"
  36 #include "mgmt/user_config.h"
  37
  38 static char *extract_last_component(char *path)
  39 {
  40         char *p = strrchr(path, '/');
  41
  42         if (p && p[1] != '\0') {
  43                 *p = '\0';
  44                 p++;
  45         } else {
  46                 p = NULL;
  47                 pr_err("Invalid path %s\n", path);
  48         }
  49         return p;
  50 }
  51
  52 static void ksmbd_vfs_inherit_owner(struct ksmbd_work *work,
  53                                     struct inode *parent_inode,
  54                                     struct inode *inode)
  55 {
  56         if (!test_share_config_flag(work->tcon->share_conf,
  57                                     KSMBD_SHARE_FLAG_INHERIT_OWNER))
  58                 return;
  59
  60         i_uid_write(inode, i_uid_read(parent_inode));
  61 }
  62
  63 /**
  64  * ksmbd_vfs_lock_parent() - lock parent dentry if it is stable
  65  *
  66  * the parent dentry got by dget_parent or @parent could be
  67  * unstable, we try to lock a parent inode and lookup the
  68  * child dentry again.
  69  *
  70  * the reference count of @parent isn't incremented.
  71  */
  72 int ksmbd_vfs_lock_parent(struct dentry *parent, struct dentry *child)
  73 {
  74         struct dentry *dentry;
  75         int ret = 0;
  76
  77         inode_lock_nested(d_inode(parent), I_MUTEX_PARENT);
  78         dentry = lookup_one_len(child->d_name.name, parent,
  79                                 child->d_name.len);
  80         if (IS_ERR(dentry)) {
  81                 ret = PTR_ERR(dentry);
  82                 goto out_err;
  83         }
  84
  85         if (dentry != child) {
  86                 ret = -ESTALE;
  87                 dput(dentry);
  88                 goto out_err;
  89         }
  90
  91         dput(dentry);
  92         return 0;
  93 out_err:
  94         inode_unlock(d_inode(parent));
  95         return ret;
  96 }
  97
  98 int ksmbd_vfs_may_delete(struct user_namespace *user_ns,
  99                          struct dentry *dentry)
 100 {
 101         struct dentry *parent;
 102         int ret;
 103
 104         parent = dget_parent(dentry);
 105         ret = ksmbd_vfs_lock_parent(parent, dentry);
 106         if (ret) {
 107                 dput(parent);
 108                 return ret;
 109         }
 110
 111         ret = inode_permission(user_ns, d_inode(parent),
 112                                MAY_EXEC | MAY_WRITE);
 113
 114         inode_unlock(d_inode(parent));
 115         dput(parent);
 116         return ret;
 117 }
 118
 119 int ksmbd_vfs_query_maximal_access(struct user_namespace *user_ns,
 120                                    struct dentry *dentry, __le32 *daccess)
 121 {
 122         struct dentry *parent;
 123         int ret = 0;
 124
 125         *daccess = cpu_to_le32(FILE_READ_ATTRIBUTES | READ_CONTROL);
 126
 127         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_WRITE))
 128                 *daccess |= cpu_to_le32(WRITE_DAC | WRITE_OWNER | SYNCHRONIZE |
 129                                 FILE_WRITE_DATA | FILE_APPEND_DATA |
 130                                 FILE_WRITE_EA | FILE_WRITE_ATTRIBUTES |
 131                                 FILE_DELETE_CHILD);
 132
 133         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_READ))
 134                 *daccess |= FILE_READ_DATA_LE | FILE_READ_EA_LE;
 135
 136         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_EXEC))
 137                 *daccess |= FILE_EXECUTE_LE;
 138
 139         parent = dget_parent(dentry);
 140         ret = ksmbd_vfs_lock_parent(parent, dentry);
 141         if (ret) {
 142                 dput(parent);
 143                 return ret;
 144         }
 145
 146         if (!inode_permission(user_ns, d_inode(parent), MAY_EXEC | MAY_WRITE))
 147                 *daccess |= FILE_DELETE_LE;
 148
 149         inode_unlock(d_inode(parent));
 150         dput(parent);
 151         return ret;
 152 }
 153
 154 /**
 155  * ksmbd_vfs_create() - vfs helper for smb create file
 156  * @work:       work
 157  * @name:       file name
 158  * @mode:       file create mode
 159  *
 160  * Return:      0 on success, otherwise error
 161  */
 162 int ksmbd_vfs_create(struct ksmbd_work *work, const char *name, umode_t mode)
 163 {
 164         struct path path;
 165         struct dentry *dentry;
 166         int err;
 167
 168         dentry = kern_path_create(AT_FDCWD, name, &path, 0);
 169         if (IS_ERR(dentry)) {
 170                 err = PTR_ERR(dentry);
 171                 if (err != -ENOENT)
 172                         pr_err("path create failed for %s, err %d\n",
 173                                name, err);
 174                 return err;
 175         }
 176
 177         mode |= S_IFREG;
 178         err = vfs_create(mnt_user_ns(path.mnt), d_inode(path.dentry),
 179                          dentry, mode, true);
 180         if (!err) {
 181                 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry),
 182                                         d_inode(dentry));
 183         } else {
 184                 pr_err("File(%s): creation failed (err:%d)\n", name, err);
 185         }
 186         done_path_create(&path, dentry);
 187         return err;
 188 }
 189
 190 /**
 191  * ksmbd_vfs_mkdir() - vfs helper for smb create directory
 192  * @work:       work
 193  * @name:       directory name
 194  * @mode:       directory create mode
 195  *
 196  * Return:      0 on success, otherwise error
 197  */
 198 int ksmbd_vfs_mkdir(struct ksmbd_work *work, const char *name, umode_t mode)
 199 {
 200         struct path path;
 201         struct dentry *dentry;
 202         int err;
 203
 204         dentry = kern_path_create(AT_FDCWD, name, &path, LOOKUP_DIRECTORY);
 205         if (IS_ERR(dentry)) {
 206                 err = PTR_ERR(dentry);
 207                 if (err != -EEXIST)
 208                         ksmbd_debug(VFS, "path create failed for %s, err %d\n",
 209                                     name, err);
 210                 return err;
 211         }
 212
 213         mode |= S_IFDIR;
 214         err = vfs_mkdir(mnt_user_ns(path.mnt), d_inode(path.dentry),
 215                         dentry, mode);
 216         if (err) {
 217                 goto out;
 218         } else if (d_unhashed(dentry)) {
 219                 struct dentry *d;
 220
 221                 d = lookup_one_len(dentry->d_name.name, dentry->d_parent,
 222                                    dentry->d_name.len);
 223                 if (IS_ERR(d)) {
 224                         err = PTR_ERR(d);
 225                         goto out;
 226                 }
 227                 if (unlikely(d_is_negative(d))) {
 228                         dput(d);
 229                         err = -ENOENT;
 230                         goto out;
 231                 }
 232
 233                 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), d_inode(d));
 234                 dput(d);
 235         }
 236 out:
 237         done_path_create(&path, dentry);
 238         if (err)
 239                 pr_err("mkdir(%s): creation failed (err:%d)\n", name, err);
 240         return err;
 241 }
 242
 243 static ssize_t ksmbd_vfs_getcasexattr(struct user_namespace *user_ns,
 244                                       struct dentry *dentry, char *attr_name,
 245                                       int attr_name_len, char **attr_value)
 246 {
 247         char *name, *xattr_list = NULL;
 248         ssize_t value_len = -ENOENT, xattr_list_len;
 249
 250         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
 251         if (xattr_list_len <= 0)
 252                 goto out;
 253
 254         for (name = xattr_list; name - xattr_list < xattr_list_len;
 255                         name += strlen(name) + 1) {
 256                 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
 257                 if (strncasecmp(attr_name, name, attr_name_len))
 258                         continue;
 259
 260                 value_len = ksmbd_vfs_getxattr(user_ns,
 261                                                dentry,
 262                                                name,
 263                                                attr_value);
 264                 if (value_len < 0)
 265                         pr_err("failed to get xattr in file\n");
 266                 break;
 267         }
 268
 269 out:
 270         kvfree(xattr_list);
 271         return value_len;
 272 }
 273
 274 static int ksmbd_vfs_stream_read(struct ksmbd_file *fp, char *buf, loff_t *pos,
 275                                  size_t count)
 276 {
 277         ssize_t v_len;
 278         char *stream_buf = NULL;
 279
 280         ksmbd_debug(VFS, "read stream data pos : %llu, count : %zd\n",
 281                     *pos, count);
 282
 283         v_len = ksmbd_vfs_getcasexattr(file_mnt_user_ns(fp->filp),
 284                                        fp->filp->f_path.dentry,
 285                                        fp->stream.name,
 286                                        fp->stream.size,
 287                                        &stream_buf);
 288         if ((int)v_len <= 0)
 289                 return (int)v_len;
 290
 291         if (v_len <= *pos) {
 292                 count = -EINVAL;
 293                 goto free_buf;
 294         }
 295
 296         if (v_len - *pos < count)
 297                 count = v_len - *pos;
 298
 299         memcpy(buf, &stream_buf[*pos], count);
 300
 301 free_buf:
 302         kvfree(stream_buf);
 303         return count;
 304 }
 305
 306 /**
 307  * check_lock_range() - vfs helper for smb byte range file locking
 308  * @filp:       the file to apply the lock to
 309  * @start:      lock start byte offset
 310  * @end:        lock end byte offset
 311  * @type:       byte range type read/write
 312  *
 313  * Return:      0 on success, otherwise error
 314  */
 315 static int check_lock_range(struct file *filp, loff_t start, loff_t end,
 316                             unsigned char type)
 317 {
 318         struct file_lock *flock;
 319         struct file_lock_context *ctx = file_inode(filp)->i_flctx;
 320         int error = 0;
 321
 322         if (!ctx || list_empty_careful(&ctx->flc_posix))
 323                 return 0;
 324
 325         spin_lock(&ctx->flc_lock);
 326         list_for_each_entry(flock, &ctx->flc_posix, fl_list) {
 327                 /* check conflict locks */
 328                 if (flock->fl_end >= start && end >= flock->fl_start) {
 329                         if (flock->fl_type == F_RDLCK) {
 330                                 if (type == WRITE) {
 331                                         pr_err("not allow write by shared lock\n");
 332                                         error = 1;
 333                                         goto out;
 334                                 }
 335                         } else if (flock->fl_type == F_WRLCK) {
 336                                 /* check owner in lock */
 337                                 if (flock->fl_file != filp) {
 338                                         error = 1;
 339                                         pr_err("not allow rw access by exclusive lock from other opens\n");
 340                                         goto out;
 341                                 }
 342                         }
 343                 }
 344         }
 345 out:
 346         spin_unlock(&ctx->flc_lock);
 347         return error;
 348 }
 349
 350 /**
 351  * ksmbd_vfs_read() - vfs helper for smb file read
 352  * @work:       smb work
 353  * @fid:        file id of open file
 354  * @count:      read byte count
 355  * @pos:        file pos
 356  *
 357  * Return:      number of read bytes on success, otherwise error
 358  */
 359 int ksmbd_vfs_read(struct ksmbd_work *work, struct ksmbd_file *fp, size_t count,
 360                    loff_t *pos)
 361 {
 362         struct file *filp = fp->filp;
 363         ssize_t nbytes = 0;
 364         char *rbuf = work->aux_payload_buf;
 365         struct inode *inode = file_inode(filp);
 366
 367         if (S_ISDIR(inode->i_mode))
 368                 return -EISDIR;
 369
 370         if (unlikely(count == 0))
 371                 return 0;
 372
 373         if (work->conn->connection_type) {
 374                 if (!(fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
 375                         pr_err("no right to read(%pd)\n",
 376                                fp->filp->f_path.dentry);
 377                         return -EACCES;
 378                 }
 379         }
 380
 381         if (ksmbd_stream_fd(fp))
 382                 return ksmbd_vfs_stream_read(fp, rbuf, pos, count);
 383
 384         if (!work->tcon->posix_extensions) {
 385                 int ret;
 386
 387                 ret = check_lock_range(filp, *pos, *pos + count - 1, READ);
 388                 if (ret) {
 389                         pr_err("unable to read due to lock\n");
 390                         return -EAGAIN;
 391                 }
 392         }
 393
 394         nbytes = kernel_read(filp, rbuf, count, pos);
 395         if (nbytes < 0) {
 396                 pr_err("smb read failed for (%s), err = %zd\n",
 397                        fp->filename, nbytes);
 398                 return nbytes;
 399         }
 400
 401         filp->f_pos = *pos;
 402         return nbytes;
 403 }
 404
 405 static int ksmbd_vfs_stream_write(struct ksmbd_file *fp, char *buf, loff_t *pos,
 406                                   size_t count)
 407 {
 408         char *stream_buf = NULL, *wbuf;
 409         struct user_namespace *user_ns = file_mnt_user_ns(fp->filp);
 410         size_t size, v_len;
 411         int err = 0;
 412
 413         ksmbd_debug(VFS, "write stream data pos : %llu, count : %zd\n",
 414                     *pos, count);
 415
 416         size = *pos + count;
 417         if (size > XATTR_SIZE_MAX) {
 418                 size = XATTR_SIZE_MAX;
 419                 count = (*pos + count) - XATTR_SIZE_MAX;
 420         }
 421
 422         v_len = ksmbd_vfs_getcasexattr(user_ns,
 423                                        fp->filp->f_path.dentry,
 424                                        fp->stream.name,
 425                                        fp->stream.size,
 426                                        &stream_buf);
 427         if ((int)v_len < 0) {
 428                 pr_err("not found stream in xattr : %zd\n", v_len);
 429                 err = (int)v_len;
 430                 goto out;
 431         }
 432
 433         if (v_len < size) {
 434                 wbuf = kvmalloc(size, GFP_KERNEL | __GFP_ZERO);
 435                 if (!wbuf) {
 436                         err = -ENOMEM;
 437                         goto out;
 438                 }
 439
 440                 if (v_len > 0)
 441                         memcpy(wbuf, stream_buf, v_len);
 442                 kvfree(stream_buf);
 443                 stream_buf = wbuf;
 444         }
 445
 446         memcpy(&stream_buf[*pos], buf, count);
 447
 448         err = ksmbd_vfs_setxattr(user_ns,
 449                                  fp->filp->f_path.dentry,
 450                                  fp->stream.name,
 451                                  (void *)stream_buf,
 452                                  size,
 453                                  0);
 454         if (err < 0)
 455                 goto out;
 456
 457         fp->filp->f_pos = *pos;
 458         err = 0;
 459 out:
 460         kvfree(stream_buf);
 461         return err;
 462 }
 463
 464 /**
 465  * ksmbd_vfs_write() - vfs helper for smb file write
 466  * @work:       work
 467  * @fid:        file id of open file
 468  * @buf:        buf containing data for writing
 469  * @count:      read byte count
 470  * @pos:        file pos
 471  * @sync:       fsync after write
 472  * @written:    number of bytes written
 473  *
 474  * Return:      0 on success, otherwise error
 475  */
 476 int ksmbd_vfs_write(struct ksmbd_work *work, struct ksmbd_file *fp,
 477                     char *buf, size_t count, loff_t *pos, bool sync,
 478                     ssize_t *written)
 479 {
 480         struct ksmbd_session *sess = work->sess;
 481         struct file *filp;
 482         loff_t  offset = *pos;
 483         int err = 0;
 484
 485         if (sess->conn->connection_type) {
 486                 if (!(fp->daccess & FILE_WRITE_DATA_LE)) {
 487                         pr_err("no right to write(%pd)\n",
 488                                fp->filp->f_path.dentry);
 489                         err = -EACCES;
 490                         goto out;
 491                 }
 492         }
 493
 494         filp = fp->filp;
 495
 496         if (ksmbd_stream_fd(fp)) {
 497                 err = ksmbd_vfs_stream_write(fp, buf, pos, count);
 498                 if (!err)
 499                         *written = count;
 500                 goto out;
 501         }
 502
 503         if (!work->tcon->posix_extensions) {
 504                 err = check_lock_range(filp, *pos, *pos + count - 1, WRITE);
 505                 if (err) {
 506                         pr_err("unable to write due to lock\n");
 507                         err = -EAGAIN;
 508                         goto out;
 509                 }
 510         }
 511
 512         /* Do we need to break any of a levelII oplock? */
 513         smb_break_all_levII_oplock(work, fp, 1);
 514
 515         err = kernel_write(filp, buf, count, pos);
 516         if (err < 0) {
 517                 ksmbd_debug(VFS, "smb write failed, err = %d\n", err);
 518                 goto out;
 519         }
 520
 521         filp->f_pos = *pos;
 522         *written = err;
 523         err = 0;
 524         if (sync) {
 525                 err = vfs_fsync_range(filp, offset, offset + *written, 0);
 526                 if (err < 0)
 527                         pr_err("fsync failed for filename = %pd, err = %d\n",
 528                                fp->filp->f_path.dentry, err);
 529         }
 530
 531 out:
 532         return err;
 533 }
 534
 535 /**
 536  * ksmbd_vfs_getattr() - vfs helper for smb getattr
 537  * @work:       work
 538  * @fid:        file id of open file
 539  * @attrs:      inode attributes
 540  *
 541  * Return:      0 on success, otherwise error
 542  */
 543 int ksmbd_vfs_getattr(struct path *path, struct kstat *stat)
 544 {
 545         int err;
 546
 547         err = vfs_getattr(path, stat, STATX_BTIME, AT_STATX_SYNC_AS_STAT);
 548         if (err)
 549                 pr_err("getattr failed, err %d\n", err);
 550         return err;
 551 }
 552
 553 /**
 554  * ksmbd_vfs_fsync() - vfs helper for smb fsync
 555  * @work:       work
 556  * @fid:        file id of open file
 557  *
 558  * Return:      0 on success, otherwise error
 559  */
 560 int ksmbd_vfs_fsync(struct ksmbd_work *work, u64 fid, u64 p_id)
 561 {
 562         struct ksmbd_file *fp;
 563         int err;
 564
 565         fp = ksmbd_lookup_fd_slow(work, fid, p_id);
 566         if (!fp) {
 567                 pr_err("failed to get filp for fid %llu\n", fid);
 568                 return -ENOENT;
 569         }
 570         err = vfs_fsync(fp->filp, 0);
 571         if (err < 0)
 572                 pr_err("smb fsync failed, err = %d\n", err);
 573         ksmbd_fd_put(work, fp);
 574         return err;
 575 }
 576
 577 /**
 578  * ksmbd_vfs_remove_file() - vfs helper for smb rmdir or unlink
 579  * @name:       absolute directory or file name
 580  *
 581  * Return:      0 on success, otherwise error
 582  */
 583 int ksmbd_vfs_remove_file(struct ksmbd_work *work, char *name)
 584 {
 585         struct path path;
 586         struct dentry *parent;
 587         int err;
 588         int flags = 0;
 589
 590         if (ksmbd_override_fsids(work))
 591                 return -ENOMEM;
 592
 593         if (test_share_config_flag(work->tcon->share_conf,
 594                                    KSMBD_SHARE_FLAG_FOLLOW_SYMLINKS))
 595                 flags = LOOKUP_FOLLOW;
 596
 597         err = kern_path(name, flags, &path);
 598         if (err) {
 599                 ksmbd_debug(VFS, "can't get %s, err %d\n", name, err);
 600                 ksmbd_revert_fsids(work);
 601                 return err;
 602         }
 603
 604         parent = dget_parent(path.dentry);
 605         err = ksmbd_vfs_lock_parent(parent, path.dentry);
 606         if (err) {
 607                 dput(parent);
 608                 path_put(&path);
 609                 ksmbd_revert_fsids(work);
 610                 return err;
 611         }
 612
 613         if (!d_inode(path.dentry)->i_nlink) {
 614                 err = -ENOENT;
 615                 goto out_err;
 616         }
 617
 618         if (S_ISDIR(d_inode(path.dentry)->i_mode)) {
 619                 err = vfs_rmdir(mnt_user_ns(path.mnt), d_inode(parent),
 620                                 path.dentry);
 621                 if (err && err != -ENOTEMPTY)
 622                         ksmbd_debug(VFS, "%s: rmdir failed, err %d\n", name,
 623                                     err);
 624         } else {
 625                 err = vfs_unlink(mnt_user_ns(path.mnt), d_inode(parent),
 626                                  path.dentry, NULL);
 627                 if (err)
 628                         ksmbd_debug(VFS, "%s: unlink failed, err %d\n", name,
 629                                     err);
 630         }
 631
 632 out_err:
 633         inode_unlock(d_inode(parent));
 634         dput(parent);
 635         path_put(&path);
 636         ksmbd_revert_fsids(work);
 637         return err;
 638 }
 639
 640 /**
 641  * ksmbd_vfs_link() - vfs helper for creating smb hardlink
 642  * @oldname:    source file name
 643  * @newname:    hardlink name
 644  *
 645  * Return:      0 on success, otherwise error
 646  */
 647 int ksmbd_vfs_link(struct ksmbd_work *work, const char *oldname,
 648                    const char *newname)
 649 {
 650         struct path oldpath, newpath;
 651         struct dentry *dentry;
 652         int err;
 653         int flags = 0;
 654
 655         if (ksmbd_override_fsids(work))
 656                 return -ENOMEM;
 657
 658         if (test_share_config_flag(work->tcon->share_conf,
 659                                    KSMBD_SHARE_FLAG_FOLLOW_SYMLINKS))
 660                 flags = LOOKUP_FOLLOW;
 661
 662         err = kern_path(oldname, flags, &oldpath);
 663         if (err) {
 664                 pr_err("cannot get linux path for %s, err = %d\n",
 665                        oldname, err);
 666                 goto out1;
 667         }
 668
 669         dentry = kern_path_create(AT_FDCWD, newname, &newpath,
 670                                   flags | LOOKUP_REVAL);
 671         if (IS_ERR(dentry)) {
 672                 err = PTR_ERR(dentry);
 673                 pr_err("path create err for %s, err %d\n", newname, err);
 674                 goto out2;
 675         }
 676
 677         err = -EXDEV;
 678         if (oldpath.mnt != newpath.mnt) {
 679                 pr_err("vfs_link failed err %d\n", err);
 680                 goto out3;
 681         }
 682
 683         err = vfs_link(oldpath.dentry, mnt_user_ns(newpath.mnt),
 684                        d_inode(newpath.dentry),
 685                        dentry, NULL);
 686         if (err)
 687                 ksmbd_debug(VFS, "vfs_link failed err %d\n", err);
 688
 689 out3:
 690         done_path_create(&newpath, dentry);
 691 out2:
 692         path_put(&oldpath);
 693 out1:
 694         ksmbd_revert_fsids(work);
 695         return err;
 696 }
 697
 698 static int ksmbd_validate_entry_in_use(struct dentry *src_dent)
 699 {
 700         struct dentry *dst_dent;
 701
 702         spin_lock(&src_dent->d_lock);
 703         list_for_each_entry(dst_dent, &src_dent->d_subdirs, d_child) {
 704                 struct ksmbd_file *child_fp;
 705
 706                 if (d_really_is_negative(dst_dent))
 707                         continue;
 708
 709                 child_fp = ksmbd_lookup_fd_inode(d_inode(dst_dent));
 710                 if (child_fp) {
 711                         spin_unlock(&src_dent->d_lock);
 712                         ksmbd_debug(VFS, "Forbid rename, sub file/dir is in use\n");
 713                         return -EACCES;
 714                 }
 715         }
 716         spin_unlock(&src_dent->d_lock);
 717
 718         return 0;
 719 }
 720
 721 static int __ksmbd_vfs_rename(struct ksmbd_work *work,
 722                               struct user_namespace *src_user_ns,
 723                               struct dentry *src_dent_parent,
 724                               struct dentry *src_dent,
 725                               struct user_namespace *dst_user_ns,
 726                               struct dentry *dst_dent_parent,
 727                               struct dentry *trap_dent,
 728                               char *dst_name)
 729 {
 730         struct dentry *dst_dent;
 731         int err;
 732
 733         if (!work->tcon->posix_extensions) {
 734                 err = ksmbd_validate_entry_in_use(src_dent);
 735                 if (err)
 736                         return err;
 737         }
 738
 739         if (d_really_is_negative(src_dent_parent))
 740                 return -ENOENT;
 741         if (d_really_is_negative(dst_dent_parent))
 742                 return -ENOENT;
 743         if (d_really_is_negative(src_dent))
 744                 return -ENOENT;
 745         if (src_dent == trap_dent)
 746                 return -EINVAL;
 747
 748         if (ksmbd_override_fsids(work))
 749                 return -ENOMEM;
 750
 751         dst_dent = lookup_one_len(dst_name, dst_dent_parent, strlen(dst_name));
 752         err = PTR_ERR(dst_dent);
 753         if (IS_ERR(dst_dent)) {
 754                 pr_err("lookup failed %s [%d]\n", dst_name, err);
 755                 goto out;
 756         }
 757
 758         err = -ENOTEMPTY;
 759         if (dst_dent != trap_dent && !d_really_is_positive(dst_dent)) {
 760                 struct renamedata rd = {
 761                         .old_mnt_userns = src_user_ns,
 762                         .old_dir        = d_inode(src_dent_parent),
 763                         .old_dentry     = src_dent,
 764                         .new_mnt_userns = dst_user_ns,
 765                         .new_dir        = d_inode(dst_dent_parent),
 766                         .new_dentry     = dst_dent,
 767                 };
 768                 err = vfs_rename(&rd);
 769         }
 770         if (err)
 771                 pr_err("vfs_rename failed err %d\n", err);
 772         if (dst_dent)
 773                 dput(dst_dent);
 774 out:
 775         ksmbd_revert_fsids(work);
 776         return err;
 777 }
 778
 779 int ksmbd_vfs_fp_rename(struct ksmbd_work *work, struct ksmbd_file *fp,
 780                         char *newname)
 781 {
 782         struct path dst_path;
 783         struct dentry *src_dent_parent, *dst_dent_parent;
 784         struct dentry *src_dent, *trap_dent, *src_child;
 785         char *dst_name;
 786         int err;
 787         int flags;
 788
 789         dst_name = extract_last_component(newname);
 790         if (!dst_name)
 791                 return -EINVAL;
 792
 793         src_dent_parent = dget_parent(fp->filp->f_path.dentry);
 794         src_dent = fp->filp->f_path.dentry;
 795
 796         flags = LOOKUP_DIRECTORY;
 797         if (test_share_config_flag(work->tcon->share_conf,
 798                                    KSMBD_SHARE_FLAG_FOLLOW_SYMLINKS))
 799                 flags |= LOOKUP_FOLLOW;
 800
 801         err = kern_path(newname, flags, &dst_path);
 802         if (err) {
 803                 ksmbd_debug(VFS, "Cannot get path for %s [%d]\n", newname, err);
 804                 goto out;
 805         }
 806         dst_dent_parent = dst_path.dentry;
 807
 808         trap_dent = lock_rename(src_dent_parent, dst_dent_parent);
 809         dget(src_dent);
 810         dget(dst_dent_parent);
 811         src_child = lookup_one_len(src_dent->d_name.name, src_dent_parent,
 812                                    src_dent->d_name.len);
 813         if (IS_ERR(src_child)) {
 814                 err = PTR_ERR(src_child);
 815                 goto out_lock;
 816         }
 817
 818         if (src_child != src_dent) {
 819                 err = -ESTALE;
 820                 dput(src_child);
 821                 goto out_lock;
 822         }
 823         dput(src_child);
 824
 825         err = __ksmbd_vfs_rename(work,
 826                                  file_mnt_user_ns(fp->filp),
 827                                  src_dent_parent,
 828                                  src_dent,
 829                                  mnt_user_ns(dst_path.mnt),
 830                                  dst_dent_parent,
 831                                  trap_dent,
 832                                  dst_name);
 833 out_lock:
 834         dput(src_dent);
 835         dput(dst_dent_parent);
 836         unlock_rename(src_dent_parent, dst_dent_parent);
 837         path_put(&dst_path);
 838 out:
 839         dput(src_dent_parent);
 840         return err;
 841 }
 842
 843 /**
 844  * ksmbd_vfs_truncate() - vfs helper for smb file truncate
 845  * @work:       work
 846  * @name:       old filename
 847  * @fid:        file id of old file
 848  * @size:       truncate to given size
 849  *
 850  * Return:      0 on success, otherwise error
 851  */
 852 int ksmbd_vfs_truncate(struct ksmbd_work *work, const char *name,
 853                        struct ksmbd_file *fp, loff_t size)
 854 {
 855         struct path path;
 856         int err = 0;
 857
 858         if (name) {
 859                 err = kern_path(name, 0, &path);
 860                 if (err) {
 861                         pr_err("cannot get linux path for %s, err %d\n",
 862                                name, err);
 863                         return err;
 864                 }
 865                 err = vfs_truncate(&path, size);
 866                 if (err)
 867                         pr_err("truncate failed for %s err %d\n",
 868                                name, err);
 869                 path_put(&path);
 870         } else {
 871                 struct file *filp;
 872
 873                 filp = fp->filp;
 874
 875                 /* Do we need to break any of a levelII oplock? */
 876                 smb_break_all_levII_oplock(work, fp, 1);
 877
 878                 if (!work->tcon->posix_extensions) {
 879                         struct inode *inode = file_inode(filp);
 880
 881                         if (size < inode->i_size) {
 882                                 err = check_lock_range(filp, size,
 883                                                        inode->i_size - 1, WRITE);
 884                         } else {
 885                                 err = check_lock_range(filp, inode->i_size,
 886                                                        size - 1, WRITE);
 887                         }
 888
 889                         if (err) {
 890                                 pr_err("failed due to lock\n");
 891                                 return -EAGAIN;
 892                         }
 893                 }
 894
 895                 err = vfs_truncate(&filp->f_path, size);
 896                 if (err)
 897                         pr_err("truncate failed for filename : %s err %d\n",
 898                                fp->filename, err);
 899         }
 900
 901         return err;
 902 }
 903
 904 /**
 905  * ksmbd_vfs_listxattr() - vfs helper for smb list extended attributes
 906  * @dentry:     dentry of file for listing xattrs
 907  * @list:       destination buffer
 908  * @size:       destination buffer length
 909  *
 910  * Return:      xattr list length on success, otherwise error
 911  */
 912 ssize_t ksmbd_vfs_listxattr(struct dentry *dentry, char **list)
 913 {
 914         ssize_t size;
 915         char *vlist = NULL;
 916
 917         size = vfs_listxattr(dentry, NULL, 0);
 918         if (size <= 0)
 919                 return size;
 920
 921         vlist = kvmalloc(size, GFP_KERNEL | __GFP_ZERO);
 922         if (!vlist)
 923                 return -ENOMEM;
 924
 925         *list = vlist;
 926         size = vfs_listxattr(dentry, vlist, size);
 927         if (size < 0) {
 928                 ksmbd_debug(VFS, "listxattr failed\n");
 929                 kvfree(vlist);
 930                 *list = NULL;
 931         }
 932
 933         return size;
 934 }
 935
 936 static ssize_t ksmbd_vfs_xattr_len(struct user_namespace *user_ns,
 937                                    struct dentry *dentry, char *xattr_name)
 938 {
 939         return vfs_getxattr(user_ns, dentry, xattr_name, NULL, 0);
 940 }
 941
 942 /**
 943  * ksmbd_vfs_getxattr() - vfs helper for smb get extended attributes value
 944  * @user_ns:    user namespace
 945  * @dentry:     dentry of file for getting xattrs
 946  * @xattr_name: name of xattr name to query
 947  * @xattr_buf:  destination buffer xattr value
 948  *
 949  * Return:      read xattr value length on success, otherwise error
 950  */
 951 ssize_t ksmbd_vfs_getxattr(struct user_namespace *user_ns,
 952                            struct dentry *dentry,
 953                            char *xattr_name, char **xattr_buf)
 954 {
 955         ssize_t xattr_len;
 956         char *buf;
 957
 958         *xattr_buf = NULL;
 959         xattr_len = ksmbd_vfs_xattr_len(user_ns, dentry, xattr_name);
 960         if (xattr_len < 0)
 961                 return xattr_len;
 962
 963         buf = kmalloc(xattr_len + 1, GFP_KERNEL);
 964         if (!buf)
 965                 return -ENOMEM;
 966
 967         xattr_len = vfs_getxattr(user_ns, dentry, xattr_name,
 968                                  (void *)buf, xattr_len);
 969         if (xattr_len > 0)
 970                 *xattr_buf = buf;
 971         else
 972                 kfree(buf);
 973         return xattr_len;
 974 }
 975
 976 /**
 977  * ksmbd_vfs_setxattr() - vfs helper for smb set extended attributes value
 978  * @user_ns:    user namespace
 979  * @dentry:     dentry to set XATTR at
 980  * @name:       xattr name for setxattr
 981  * @value:      xattr value to set
 982  * @size:       size of xattr value
 983  * @flags:      destination buffer length
 984  *
 985  * Return:      0 on success, otherwise error
 986  */
 987 int ksmbd_vfs_setxattr(struct user_namespace *user_ns,
 988                        struct dentry *dentry, const char *attr_name,
 989                        const void *attr_value, size_t attr_size, int flags)
 990 {
 991         int err;
 992
 993         err = vfs_setxattr(user_ns,
 994                            dentry,
 995                            attr_name,
 996                            attr_value,
 997                            attr_size,
 998                            flags);
 999         if (err)
1000                 ksmbd_debug(VFS, "setxattr failed, err %d\n", err);
1001         return err;
1002 }
1003
1004 /**
1005  * ksmbd_vfs_set_fadvise() - convert smb IO caching options to linux options
1006  * @filp:       file pointer for IO
1007  * @options:    smb IO options
1008  */
1009 void ksmbd_vfs_set_fadvise(struct file *filp, __le32 option)
1010 {
1011         struct address_space *mapping;
1012
1013         mapping = filp->f_mapping;
1014
1015         if (!option || !mapping)
1016                 return;
1017
1018         if (option & FILE_WRITE_THROUGH_LE) {
1019                 filp->f_flags |= O_SYNC;
1020         } else if (option & FILE_SEQUENTIAL_ONLY_LE) {
1021                 filp->f_ra.ra_pages = inode_to_bdi(mapping->host)->ra_pages * 2;
1022                 spin_lock(&filp->f_lock);
1023                 filp->f_mode &= ~FMODE_RANDOM;
1024                 spin_unlock(&filp->f_lock);
1025         } else if (option & FILE_RANDOM_ACCESS_LE) {
1026                 spin_lock(&filp->f_lock);
1027                 filp->f_mode |= FMODE_RANDOM;
1028                 spin_unlock(&filp->f_lock);
1029         }
1030 }
1031
1032 int ksmbd_vfs_zero_data(struct ksmbd_work *work, struct ksmbd_file *fp,
1033                         loff_t off, loff_t len)
1034 {
1035         smb_break_all_levII_oplock(work, fp, 1);
1036         if (fp->f_ci->m_fattr & ATTR_SPARSE_FILE_LE)
1037                 return vfs_fallocate(fp->filp,
1038                                      FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE,
1039                                      off, len);
1040
1041         return vfs_fallocate(fp->filp, FALLOC_FL_ZERO_RANGE, off, len);
1042 }
1043
1044 int ksmbd_vfs_fqar_lseek(struct ksmbd_file *fp, loff_t start, loff_t length,
1045                          struct file_allocated_range_buffer *ranges,
1046                          int in_count, int *out_count)
1047 {
1048         struct file *f = fp->filp;
1049         struct inode *inode = file_inode(fp->filp);
1050         loff_t maxbytes = (u64)inode->i_sb->s_maxbytes, end;
1051         loff_t extent_start, extent_end;
1052         int ret = 0;
1053
1054         if (start > maxbytes)
1055                 return -EFBIG;
1056
1057         if (!in_count)
1058                 return 0;
1059
1060         /*
1061          * Shrink request scope to what the fs can actually handle.
1062          */
1063         if (length > maxbytes || (maxbytes - length) < start)
1064                 length = maxbytes - start;
1065
1066         if (start + length > inode->i_size)
1067                 length = inode->i_size - start;
1068
1069         *out_count = 0;
1070         end = start + length;
1071         while (start < end && *out_count < in_count) {
1072                 extent_start = f->f_op->llseek(f, start, SEEK_DATA);
1073                 if (extent_start < 0) {
1074                         if (extent_start != -ENXIO)
1075                                 ret = (int)extent_start;
1076                         break;
1077                 }
1078
1079                 if (extent_start >= end)
1080                         break;
1081
1082                 extent_end = f->f_op->llseek(f, extent_start, SEEK_HOLE);
1083                 if (extent_end < 0) {
1084                         if (extent_end != -ENXIO)
1085                                 ret = (int)extent_end;
1086                         break;
1087                 } else if (extent_start >= extent_end) {
1088                         break;
1089                 }
1090
1091                 ranges[*out_count].file_offset = cpu_to_le64(extent_start);
1092                 ranges[(*out_count)++].length =
1093                         cpu_to_le64(min(extent_end, end) - extent_start);
1094
1095                 start = extent_end;
1096         }
1097
1098         return ret;
1099 }
1100
1101 int ksmbd_vfs_remove_xattr(struct user_namespace *user_ns,
1102                            struct dentry *dentry, char *attr_name)
1103 {
1104         return vfs_removexattr(user_ns, dentry, attr_name);
1105 }
1106
1107 int ksmbd_vfs_unlink(struct user_namespace *user_ns,
1108                      struct dentry *dir, struct dentry *dentry)
1109 {
1110         int err = 0;
1111
1112         err = ksmbd_vfs_lock_parent(dir, dentry);
1113         if (err)
1114                 return err;
1115         dget(dentry);
1116
1117         if (S_ISDIR(d_inode(dentry)->i_mode))
1118                 err = vfs_rmdir(user_ns, d_inode(dir), dentry);
1119         else
1120                 err = vfs_unlink(user_ns, d_inode(dir), dentry, NULL);
1121
1122         dput(dentry);
1123         inode_unlock(d_inode(dir));
1124         if (err)
1125                 ksmbd_debug(VFS, "failed to delete, err %d\n", err);
1126
1127         return err;
1128 }
1129
1130 static int __dir_empty(struct dir_context *ctx, const char *name, int namlen,
1131                        loff_t offset, u64 ino, unsigned int d_type)
1132 {
1133         struct ksmbd_readdir_data *buf;
1134
1135         buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1136         buf->dirent_count++;
1137
1138         if (buf->dirent_count > 2)
1139                 return -ENOTEMPTY;
1140         return 0;
1141 }
1142
1143 /**
1144  * ksmbd_vfs_empty_dir() - check for empty directory
1145  * @fp: ksmbd file pointer
1146  *
1147  * Return:      true if directory empty, otherwise false
1148  */
1149 int ksmbd_vfs_empty_dir(struct ksmbd_file *fp)
1150 {
1151         int err;
1152         struct ksmbd_readdir_data readdir_data;
1153
1154         memset(&readdir_data, 0, sizeof(struct ksmbd_readdir_data));
1155
1156         set_ctx_actor(&readdir_data.ctx, __dir_empty);
1157         readdir_data.dirent_count = 0;
1158
1159         err = iterate_dir(fp->filp, &readdir_data.ctx);
1160         if (readdir_data.dirent_count > 2)
1161                 err = -ENOTEMPTY;
1162         else
1163                 err = 0;
1164         return err;
1165 }
1166
1167 static int __caseless_lookup(struct dir_context *ctx, const char *name,
1168                              int namlen, loff_t offset, u64 ino,
1169                              unsigned int d_type)
1170 {
1171         struct ksmbd_readdir_data *buf;
1172
1173         buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1174
1175         if (buf->used != namlen)
1176                 return 0;
1177         if (!strncasecmp((char *)buf->private, name, namlen)) {
1178                 memcpy((char *)buf->private, name, namlen);
1179                 buf->dirent_count = 1;
1180                 return -EEXIST;
1181         }
1182         return 0;
1183 }
1184
1185 /**
1186  * ksmbd_vfs_lookup_in_dir() - lookup a file in a directory
1187  * @dir:        path info
1188  * @name:       filename to lookup
1189  * @namelen:    filename length
1190  *
1191  * Return:      0 on success, otherwise error
1192  */
1193 static int ksmbd_vfs_lookup_in_dir(struct path *dir, char *name, size_t namelen)
1194 {
1195         int ret;
1196         struct file *dfilp;
1197         int flags = O_RDONLY | O_LARGEFILE;
1198         struct ksmbd_readdir_data readdir_data = {
1199                 .ctx.actor      = __caseless_lookup,
1200                 .private        = name,
1201                 .used           = namelen,
1202                 .dirent_count   = 0,
1203         };
1204
1205         dfilp = dentry_open(dir, flags, current_cred());
1206         if (IS_ERR(dfilp))
1207                 return PTR_ERR(dfilp);
1208
1209         ret = iterate_dir(dfilp, &readdir_data.ctx);
1210         if (readdir_data.dirent_count > 0)
1211                 ret = 0;
1212         fput(dfilp);
1213         return ret;
1214 }
1215
1216 /**
1217  * ksmbd_vfs_kern_path() - lookup a file and get path info
1218  * @name:       name of file for lookup
1219  * @flags:      lookup flags
1220  * @path:       if lookup succeed, return path info
1221  * @caseless:   caseless filename lookup
1222  *
1223  * Return:      0 on success, otherwise error
1224  */
1225 int ksmbd_vfs_kern_path(char *name, unsigned int flags, struct path *path,
1226                         bool caseless)
1227 {
1228         int err;
1229
1230         if (name[0] != '/')
1231                 return -EINVAL;
1232
1233         err = kern_path(name, flags, path);
1234         if (!err)
1235                 return 0;
1236
1237         if (caseless) {
1238                 char *filepath;
1239                 struct path parent;
1240                 size_t path_len, remain_len;
1241
1242                 filepath = kstrdup(name, GFP_KERNEL);
1243                 if (!filepath)
1244                         return -ENOMEM;
1245
1246                 path_len = strlen(filepath);
1247                 remain_len = path_len - 1;
1248
1249                 err = kern_path("/", flags, &parent);
1250                 if (err)
1251                         goto out;
1252
1253                 while (d_can_lookup(parent.dentry)) {
1254                         char *filename = filepath + path_len - remain_len;
1255                         char *next = strchrnul(filename, '/');
1256                         size_t filename_len = next - filename;
1257                         bool is_last = !next[0];
1258
1259                         if (filename_len == 0)
1260                                 break;
1261
1262                         err = ksmbd_vfs_lookup_in_dir(&parent, filename,
1263                                                       filename_len);
1264                         if (err) {
1265                                 path_put(&parent);
1266                                 goto out;
1267                         }
1268
1269                         path_put(&parent);
1270                         next[0] = '\0';
1271
1272                         err = kern_path(filepath, flags, &parent);
1273                         if (err)
1274                                 goto out;
1275
1276                         if (is_last) {
1277                                 path->mnt = parent.mnt;
1278                                 path->dentry = parent.dentry;
1279                                 goto out;
1280                         }
1281
1282                         next[0] = '/';
1283                         remain_len -= filename_len + 1;
1284                 }
1285
1286                 path_put(&parent);
1287                 err = -EINVAL;
1288 out:
1289                 kfree(filepath);
1290         }
1291         return err;
1292 }
1293
1294 int ksmbd_vfs_remove_acl_xattrs(struct user_namespace *user_ns,
1295                                 struct dentry *dentry)
1296 {
1297         char *name, *xattr_list = NULL;
1298         ssize_t xattr_list_len;
1299         int err = 0;
1300
1301         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1302         if (xattr_list_len < 0) {
1303                 goto out;
1304         } else if (!xattr_list_len) {
1305                 ksmbd_debug(SMB, "empty xattr in the file\n");
1306                 goto out;
1307         }
1308
1309         for (name = xattr_list; name - xattr_list < xattr_list_len;
1310              name += strlen(name) + 1) {
1311                 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1312
1313                 if (!strncmp(name, XATTR_NAME_POSIX_ACL_ACCESS,
1314                              sizeof(XATTR_NAME_POSIX_ACL_ACCESS) - 1) ||
1315                     !strncmp(name, XATTR_NAME_POSIX_ACL_DEFAULT,
1316                              sizeof(XATTR_NAME_POSIX_ACL_DEFAULT) - 1)) {
1317                         err = ksmbd_vfs_remove_xattr(user_ns, dentry, name);
1318                         if (err)
1319                                 ksmbd_debug(SMB,
1320                                             "remove acl xattr failed : %s\n", name);
1321                 }
1322         }
1323 out:
1324         kvfree(xattr_list);
1325         return err;
1326 }
1327
1328 int ksmbd_vfs_remove_sd_xattrs(struct user_namespace *user_ns,
1329                                struct dentry *dentry)
1330 {
1331         char *name, *xattr_list = NULL;
1332         ssize_t xattr_list_len;
1333         int err = 0;
1334
1335         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1336         if (xattr_list_len < 0) {
1337                 goto out;
1338         } else if (!xattr_list_len) {
1339                 ksmbd_debug(SMB, "empty xattr in the file\n");
1340                 goto out;
1341         }
1342
1343         for (name = xattr_list; name - xattr_list < xattr_list_len;
1344                         name += strlen(name) + 1) {
1345                 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1346
1347                 if (!strncmp(name, XATTR_NAME_SD, XATTR_NAME_SD_LEN)) {
1348                         err = ksmbd_vfs_remove_xattr(user_ns, dentry, name);
1349                         if (err)
1350                                 ksmbd_debug(SMB, "remove xattr failed : %s\n", name);
1351                 }
1352         }
1353 out:
1354         kvfree(xattr_list);
1355         return err;
1356 }
1357
1358 static struct xattr_smb_acl *ksmbd_vfs_make_xattr_posix_acl(struct user_namespace *user_ns,
1359                                                             struct inode *inode,
1360                                                             int acl_type)
1361 {
1362         struct xattr_smb_acl *smb_acl = NULL;
1363         struct posix_acl *posix_acls;
1364         struct posix_acl_entry *pa_entry;
1365         struct xattr_acl_entry *xa_entry;
1366         int i;
1367
1368         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1369                 return NULL;
1370
1371         posix_acls = get_acl(inode, acl_type);
1372         if (!posix_acls)
1373                 return NULL;
1374
1375         smb_acl = kzalloc(sizeof(struct xattr_smb_acl) +
1376                           sizeof(struct xattr_acl_entry) * posix_acls->a_count,
1377                           GFP_KERNEL);
1378         if (!smb_acl)
1379                 goto out;
1380
1381         smb_acl->count = posix_acls->a_count;
1382         pa_entry = posix_acls->a_entries;
1383         xa_entry = smb_acl->entries;
1384         for (i = 0; i < posix_acls->a_count; i++, pa_entry++, xa_entry++) {
1385                 switch (pa_entry->e_tag) {
1386                 case ACL_USER:
1387                         xa_entry->type = SMB_ACL_USER;
1388                         xa_entry->uid = from_kuid(user_ns, pa_entry->e_uid);
1389                         break;
1390                 case ACL_USER_OBJ:
1391                         xa_entry->type = SMB_ACL_USER_OBJ;
1392                         break;
1393                 case ACL_GROUP:
1394                         xa_entry->type = SMB_ACL_GROUP;
1395                         xa_entry->gid = from_kgid(user_ns, pa_entry->e_gid);
1396                         break;
1397                 case ACL_GROUP_OBJ:
1398                         xa_entry->type = SMB_ACL_GROUP_OBJ;
1399                         break;
1400                 case ACL_OTHER:
1401                         xa_entry->type = SMB_ACL_OTHER;
1402                         break;
1403                 case ACL_MASK:
1404                         xa_entry->type = SMB_ACL_MASK;
1405                         break;
1406                 default:
1407                         pr_err("unknown type : 0x%x\n", pa_entry->e_tag);
1408                         goto out;
1409                 }
1410
1411                 if (pa_entry->e_perm & ACL_READ)
1412                         xa_entry->perm |= SMB_ACL_READ;
1413                 if (pa_entry->e_perm & ACL_WRITE)
1414                         xa_entry->perm |= SMB_ACL_WRITE;
1415                 if (pa_entry->e_perm & ACL_EXECUTE)
1416                         xa_entry->perm |= SMB_ACL_EXECUTE;
1417         }
1418 out:
1419         posix_acl_release(posix_acls);
1420         return smb_acl;
1421 }
1422
1423 int ksmbd_vfs_set_sd_xattr(struct ksmbd_conn *conn,
1424                            struct user_namespace *user_ns,
1425                            struct dentry *dentry,
1426                            struct smb_ntsd *pntsd, int len)
1427 {
1428         int rc;
1429         struct ndr sd_ndr = {0}, acl_ndr = {0};
1430         struct xattr_ntacl acl = {0};
1431         struct xattr_smb_acl *smb_acl, *def_smb_acl = NULL;
1432         struct inode *inode = d_inode(dentry);
1433
1434         acl.version = 4;
1435         acl.hash_type = XATTR_SD_HASH_TYPE_SHA256;
1436         acl.current_time = ksmbd_UnixTimeToNT(current_time(inode));
1437
1438         memcpy(acl.desc, "posix_acl", 9);
1439         acl.desc_len = 10;
1440
1441         pntsd->osidoffset =
1442                 cpu_to_le32(le32_to_cpu(pntsd->osidoffset) + NDR_NTSD_OFFSETOF);
1443         pntsd->gsidoffset =
1444                 cpu_to_le32(le32_to_cpu(pntsd->gsidoffset) + NDR_NTSD_OFFSETOF);
1445         pntsd->dacloffset =
1446                 cpu_to_le32(le32_to_cpu(pntsd->dacloffset) + NDR_NTSD_OFFSETOF);
1447
1448         acl.sd_buf = (char *)pntsd;
1449         acl.sd_size = len;
1450
1451         rc = ksmbd_gen_sd_hash(conn, acl.sd_buf, acl.sd_size, acl.hash);
1452         if (rc) {
1453                 pr_err("failed to generate hash for ndr acl\n");
1454                 return rc;
1455         }
1456
1457         smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1458                                                  ACL_TYPE_ACCESS);
1459         if (S_ISDIR(inode->i_mode))
1460                 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1461                                                              ACL_TYPE_DEFAULT);
1462
1463         rc = ndr_encode_posix_acl(&acl_ndr, user_ns, inode,
1464                                   smb_acl, def_smb_acl);
1465         if (rc) {
1466                 pr_err("failed to encode ndr to posix acl\n");
1467                 goto out;
1468         }
1469
1470         rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset,
1471                                acl.posix_acl_hash);
1472         if (rc) {
1473                 pr_err("failed to generate hash for ndr acl\n");
1474                 goto out;
1475         }
1476
1477         rc = ndr_encode_v4_ntacl(&sd_ndr, &acl);
1478         if (rc) {
1479                 pr_err("failed to encode ndr to posix acl\n");
1480                 goto out;
1481         }
1482
1483         rc = ksmbd_vfs_setxattr(user_ns, dentry,
1484                                 XATTR_NAME_SD, sd_ndr.data,
1485                                 sd_ndr.offset, 0);
1486         if (rc < 0)
1487                 pr_err("Failed to store XATTR ntacl :%d\n", rc);
1488
1489         kfree(sd_ndr.data);
1490 out:
1491         kfree(acl_ndr.data);
1492         kfree(smb_acl);
1493         kfree(def_smb_acl);
1494         return rc;
1495 }
1496
1497 int ksmbd_vfs_get_sd_xattr(struct ksmbd_conn *conn,
1498                            struct user_namespace *user_ns,
1499                            struct dentry *dentry,
1500                            struct smb_ntsd **pntsd)
1501 {
1502         int rc;
1503         struct ndr n;
1504         struct inode *inode = d_inode(dentry);
1505         struct ndr acl_ndr = {0};
1506         struct xattr_ntacl acl;
1507         struct xattr_smb_acl *smb_acl = NULL, *def_smb_acl = NULL;
1508         __u8 cmp_hash[XATTR_SD_HASH_SIZE] = {0};
1509
1510         rc = ksmbd_vfs_getxattr(user_ns, dentry, XATTR_NAME_SD, &n.data);
1511         if (rc <= 0)
1512                 return rc;
1513
1514         n.length = rc;
1515         rc = ndr_decode_v4_ntacl(&n, &acl);
1516         if (rc)
1517                 goto free_n_data;
1518
1519         smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1520                                                  ACL_TYPE_ACCESS);
1521         if (S_ISDIR(inode->i_mode))
1522                 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1523                                                              ACL_TYPE_DEFAULT);
1524
1525         rc = ndr_encode_posix_acl(&acl_ndr, user_ns, inode, smb_acl,
1526                                   def_smb_acl);
1527         if (rc) {
1528                 pr_err("failed to encode ndr to posix acl\n");
1529                 goto out_free;
1530         }
1531
1532         rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset, cmp_hash);
1533         if (rc) {
1534                 pr_err("failed to generate hash for ndr acl\n");
1535                 goto out_free;
1536         }
1537
1538         if (memcmp(cmp_hash, acl.posix_acl_hash, XATTR_SD_HASH_SIZE)) {
1539                 pr_err("hash value diff\n");
1540                 rc = -EINVAL;
1541                 goto out_free;
1542         }
1543
1544         *pntsd = acl.sd_buf;
1545         (*pntsd)->osidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->osidoffset) -
1546                                            NDR_NTSD_OFFSETOF);
1547         (*pntsd)->gsidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->gsidoffset) -
1548                                            NDR_NTSD_OFFSETOF);
1549         (*pntsd)->dacloffset = cpu_to_le32(le32_to_cpu((*pntsd)->dacloffset) -
1550                                            NDR_NTSD_OFFSETOF);
1551
1552         rc = acl.sd_size;
1553 out_free:
1554         kfree(acl_ndr.data);
1555         kfree(smb_acl);
1556         kfree(def_smb_acl);
1557         if (rc < 0) {
1558                 kfree(acl.sd_buf);
1559                 *pntsd = NULL;
1560         }
1561
1562 free_n_data:
1563         kfree(n.data);
1564         return rc;
1565 }
1566
1567 int ksmbd_vfs_set_dos_attrib_xattr(struct user_namespace *user_ns,
1568                                    struct dentry *dentry,
1569                                    struct xattr_dos_attrib *da)
1570 {
1571         struct ndr n;
1572         int err;
1573
1574         err = ndr_encode_dos_attr(&n, da);
1575         if (err)
1576                 return err;
1577
1578         err = ksmbd_vfs_setxattr(user_ns, dentry, XATTR_NAME_DOS_ATTRIBUTE,
1579                                  (void *)n.data, n.offset, 0);
1580         if (err)
1581                 ksmbd_debug(SMB, "failed to store dos attribute in xattr\n");
1582         kfree(n.data);
1583
1584         return err;
1585 }
1586
1587 int ksmbd_vfs_get_dos_attrib_xattr(struct user_namespace *user_ns,
1588                                    struct dentry *dentry,
1589                                    struct xattr_dos_attrib *da)
1590 {
1591         struct ndr n;
1592         int err;
1593
1594         err = ksmbd_vfs_getxattr(user_ns, dentry, XATTR_NAME_DOS_ATTRIBUTE,
1595                                  (char **)&n.data);
1596         if (err > 0) {
1597                 n.length = err;
1598                 if (ndr_decode_dos_attr(&n, da))
1599                         err = -EINVAL;
1600                 kfree(n.data);
1601         } else {
1602                 ksmbd_debug(SMB, "failed to load dos attribute in xattr\n");
1603         }
1604
1605         return err;
1606 }
1607
1608 /**
1609  * ksmbd_vfs_init_kstat() - convert unix stat information to smb stat format
1610  * @p:          destination buffer
1611  * @ksmbd_kstat:      ksmbd kstat wrapper
1612  */
1613 void *ksmbd_vfs_init_kstat(char **p, struct ksmbd_kstat *ksmbd_kstat)
1614 {
1615         struct file_directory_info *info = (struct file_directory_info *)(*p);
1616         struct kstat *kstat = ksmbd_kstat->kstat;
1617         u64 time;
1618
1619         info->FileIndex = 0;
1620         info->CreationTime = cpu_to_le64(ksmbd_kstat->create_time);
1621         time = ksmbd_UnixTimeToNT(kstat->atime);
1622         info->LastAccessTime = cpu_to_le64(time);
1623         time = ksmbd_UnixTimeToNT(kstat->mtime);
1624         info->LastWriteTime = cpu_to_le64(time);
1625         time = ksmbd_UnixTimeToNT(kstat->ctime);
1626         info->ChangeTime = cpu_to_le64(time);
1627
1628         if (ksmbd_kstat->file_attributes & ATTR_DIRECTORY_LE) {
1629                 info->EndOfFile = 0;
1630                 info->AllocationSize = 0;
1631         } else {
1632                 info->EndOfFile = cpu_to_le64(kstat->size);
1633                 info->AllocationSize = cpu_to_le64(kstat->blocks << 9);
1634         }
1635         info->ExtFileAttributes = ksmbd_kstat->file_attributes;
1636
1637         return info;
1638 }
1639
1640 int ksmbd_vfs_fill_dentry_attrs(struct ksmbd_work *work,
1641                                 struct user_namespace *user_ns,
1642                                 struct dentry *dentry,
1643                                 struct ksmbd_kstat *ksmbd_kstat)
1644 {
1645         u64 time;
1646         int rc;
1647
1648         generic_fillattr(user_ns, d_inode(dentry), ksmbd_kstat->kstat);
1649
1650         time = ksmbd_UnixTimeToNT(ksmbd_kstat->kstat->ctime);
1651         ksmbd_kstat->create_time = time;
1652
1653         /*
1654          * set default value for the case that store dos attributes is not yes
1655          * or that acl is disable in server's filesystem and the config is yes.
1656          */
1657         if (S_ISDIR(ksmbd_kstat->kstat->mode))
1658                 ksmbd_kstat->file_attributes = ATTR_DIRECTORY_LE;
1659         else
1660                 ksmbd_kstat->file_attributes = ATTR_ARCHIVE_LE;
1661
1662         if (test_share_config_flag(work->tcon->share_conf,
1663                                    KSMBD_SHARE_FLAG_STORE_DOS_ATTRS)) {
1664                 struct xattr_dos_attrib da;
1665
1666                 rc = ksmbd_vfs_get_dos_attrib_xattr(user_ns, dentry, &da);
1667                 if (rc > 0) {
1668                         ksmbd_kstat->file_attributes = cpu_to_le32(da.attr);
1669                         ksmbd_kstat->create_time = da.create_time;
1670                 } else {
1671                         ksmbd_debug(VFS, "fail to load dos attribute.\n");
1672                 }
1673         }
1674
1675         return 0;
1676 }
1677
1678 ssize_t ksmbd_vfs_casexattr_len(struct user_namespace *user_ns,
1679                                 struct dentry *dentry, char *attr_name,
1680                                 int attr_name_len)
1681 {
1682         char *name, *xattr_list = NULL;
1683         ssize_t value_len = -ENOENT, xattr_list_len;
1684
1685         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1686         if (xattr_list_len <= 0)
1687                 goto out;
1688
1689         for (name = xattr_list; name - xattr_list < xattr_list_len;
1690                         name += strlen(name) + 1) {
1691                 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
1692                 if (strncasecmp(attr_name, name, attr_name_len))
1693                         continue;
1694
1695                 value_len = ksmbd_vfs_xattr_len(user_ns, dentry, name);
1696                 break;
1697         }
1698
1699 out:
1700         kvfree(xattr_list);
1701         return value_len;
1702 }
1703
1704 int ksmbd_vfs_xattr_stream_name(char *stream_name, char **xattr_stream_name,
1705                                 size_t *xattr_stream_name_size, int s_type)
1706 {
1707         char *type, *buf;
1708
1709         if (s_type == DIR_STREAM)
1710                 type = ":$INDEX_ALLOCATION";
1711         else
1712                 type = ":$DATA";
1713
1714         buf = kasprintf(GFP_KERNEL, "%s%s%s",
1715                         XATTR_NAME_STREAM, stream_name, type);
1716         if (!buf)
1717                 return -ENOMEM;
1718
1719         *xattr_stream_name = buf;
1720         *xattr_stream_name_size = strlen(buf) + 1;
1721
1722         return 0;
1723 }
1724
1725 int ksmbd_vfs_copy_file_ranges(struct ksmbd_work *work,
1726                                struct ksmbd_file *src_fp,
1727                                struct ksmbd_file *dst_fp,
1728                                struct srv_copychunk *chunks,
1729                                unsigned int chunk_count,
1730                                unsigned int *chunk_count_written,
1731                                unsigned int *chunk_size_written,
1732                                loff_t *total_size_written)
1733 {
1734         unsigned int i;
1735         loff_t src_off, dst_off, src_file_size;
1736         size_t len;
1737         int ret;
1738
1739         *chunk_count_written = 0;
1740         *chunk_size_written = 0;
1741         *total_size_written = 0;
1742
1743         if (!(src_fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
1744                 pr_err("no right to read(%pd)\n", src_fp->filp->f_path.dentry);
1745                 return -EACCES;
1746         }
1747         if (!(dst_fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE))) {
1748                 pr_err("no right to write(%pd)\n", dst_fp->filp->f_path.dentry);
1749                 return -EACCES;
1750         }
1751
1752         if (ksmbd_stream_fd(src_fp) || ksmbd_stream_fd(dst_fp))
1753                 return -EBADF;
1754
1755         smb_break_all_levII_oplock(work, dst_fp, 1);
1756
1757         if (!work->tcon->posix_extensions) {
1758                 for (i = 0; i < chunk_count; i++) {
1759                         src_off = le64_to_cpu(chunks[i].SourceOffset);
1760                         dst_off = le64_to_cpu(chunks[i].TargetOffset);
1761                         len = le32_to_cpu(chunks[i].Length);
1762
1763                         if (check_lock_range(src_fp->filp, src_off,
1764                                              src_off + len - 1, READ))
1765                                 return -EAGAIN;
1766                         if (check_lock_range(dst_fp->filp, dst_off,
1767                                              dst_off + len - 1, WRITE))
1768                                 return -EAGAIN;
1769                 }
1770         }
1771
1772         src_file_size = i_size_read(file_inode(src_fp->filp));
1773
1774         for (i = 0; i < chunk_count; i++) {
1775                 src_off = le64_to_cpu(chunks[i].SourceOffset);
1776                 dst_off = le64_to_cpu(chunks[i].TargetOffset);
1777                 len = le32_to_cpu(chunks[i].Length);
1778
1779                 if (src_off + len > src_file_size)
1780                         return -E2BIG;
1781
1782                 ret = vfs_copy_file_range(src_fp->filp, src_off,
1783                                           dst_fp->filp, dst_off, len, 0);
1784                 if (ret < 0)
1785                         return ret;
1786
1787                 *chunk_count_written += 1;
1788                 *total_size_written += ret;
1789         }
1790         return 0;
1791 }
1792
1793 void ksmbd_vfs_posix_lock_wait(struct file_lock *flock)
1794 {
1795         wait_event(flock->fl_wait, !flock->fl_blocker);
1796 }
1797
1798 int ksmbd_vfs_posix_lock_wait_timeout(struct file_lock *flock, long timeout)
1799 {
1800         return wait_event_interruptible_timeout(flock->fl_wait,
1801                                                 !flock->fl_blocker,
1802                                                 timeout);
1803 }
1804
1805 void ksmbd_vfs_posix_lock_unblock(struct file_lock *flock)
1806 {
1807         locks_delete_block(flock);
1808 }
1809
1810 int ksmbd_vfs_set_init_posix_acl(struct user_namespace *user_ns,
1811                                  struct inode *inode)
1812 {
1813         struct posix_acl_state acl_state;
1814         struct posix_acl *acls;
1815         int rc;
1816
1817         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1818                 return -EOPNOTSUPP;
1819
1820         ksmbd_debug(SMB, "Set posix acls\n");
1821         rc = init_acl_state(&acl_state, 1);
1822         if (rc)
1823                 return rc;
1824
1825         /* Set default owner group */
1826         acl_state.owner.allow = (inode->i_mode & 0700) >> 6;
1827         acl_state.group.allow = (inode->i_mode & 0070) >> 3;
1828         acl_state.other.allow = inode->i_mode & 0007;
1829         acl_state.users->aces[acl_state.users->n].uid = inode->i_uid;
1830         acl_state.users->aces[acl_state.users->n++].perms.allow =
1831                 acl_state.owner.allow;
1832         acl_state.groups->aces[acl_state.groups->n].gid = inode->i_gid;
1833         acl_state.groups->aces[acl_state.groups->n++].perms.allow =
1834                 acl_state.group.allow;
1835         acl_state.mask.allow = 0x07;
1836
1837         acls = posix_acl_alloc(6, GFP_KERNEL);
1838         if (!acls) {
1839                 free_acl_state(&acl_state);
1840                 return -ENOMEM;
1841         }
1842         posix_state_to_acl(&acl_state, acls->a_entries);
1843         rc = set_posix_acl(user_ns, inode, ACL_TYPE_ACCESS, acls);
1844         if (rc < 0)
1845                 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1846                             rc);
1847         else if (S_ISDIR(inode->i_mode)) {
1848                 posix_state_to_acl(&acl_state, acls->a_entries);
1849                 rc = set_posix_acl(user_ns, inode, ACL_TYPE_DEFAULT,
1850                                    acls);
1851                 if (rc < 0)
1852                         ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1853                                     rc);
1854         }
1855         free_acl_state(&acl_state);
1856         posix_acl_release(acls);
1857         return rc;
1858 }
1859
1860 int ksmbd_vfs_inherit_posix_acl(struct user_namespace *user_ns,
1861                                 struct inode *inode, struct inode *parent_inode)
1862 {
1863         struct posix_acl *acls;
1864         struct posix_acl_entry *pace;
1865         int rc, i;
1866
1867         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1868                 return -EOPNOTSUPP;
1869
1870         acls = get_acl(parent_inode, ACL_TYPE_DEFAULT);
1871         if (!acls)
1872                 return -ENOENT;
1873         pace = acls->a_entries;
1874
1875         for (i = 0; i < acls->a_count; i++, pace++) {
1876                 if (pace->e_tag == ACL_MASK) {
1877                         pace->e_perm = 0x07;
1878                         break;
1879                 }
1880         }
1881
1882         rc = set_posix_acl(user_ns, inode, ACL_TYPE_ACCESS, acls);
1883         if (rc < 0)
1884                 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1885                             rc);
1886         if (S_ISDIR(inode->i_mode)) {
1887                 rc = set_posix_acl(user_ns, inode, ACL_TYPE_DEFAULT,
1888                                    acls);
1889                 if (rc < 0)
1890                         ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1891                                     rc);
1892         }
1893         posix_acl_release(acls);
1894         return rc;
1895 }