fs/ksmbd/vfs.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  *   Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org>
   4  *   Copyright (C) 2018 Samsung Electronics Co., Ltd.
   5  */
   6
   7 #include <linux/kernel.h>
   8 #include <linux/fs.h>
   9 #include <linux/uaccess.h>
  10 #include <linux/backing-dev.h>
  11 #include <linux/writeback.h>
  12 #include <linux/xattr.h>
  13 #include <linux/falloc.h>
  14 #include <linux/fsnotify.h>
  15 #include <linux/dcache.h>
  16 #include <linux/slab.h>
  17 #include <linux/vmalloc.h>
  18 #include <linux/sched/xacct.h>
  19 #include <linux/crc32c.h>
  20
  21 #include "../internal.h"        /* for vfs_path_lookup */
  22
  23 #include "glob.h"
  24 #include "oplock.h"
  25 #include "connection.h"
  26 #include "vfs.h"
  27 #include "vfs_cache.h"
  28 #include "smbacl.h"
  29 #include "ndr.h"
  30 #include "auth.h"
  31 #include "misc.h"
  32
  33 #include "smb_common.h"
  34 #include "mgmt/share_config.h"
  35 #include "mgmt/tree_connect.h"
  36 #include "mgmt/user_session.h"
  37 #include "mgmt/user_config.h"
  38
  39 static char *extract_last_component(char *path)
  40 {
  41         char *p = strrchr(path, '/');
  42
  43         if (p && p[1] != '\0') {
  44                 *p = '\0';
  45                 p++;
  46         } else {
  47                 p = NULL;
  48         }
  49         return p;
  50 }
  51
  52 static void ksmbd_vfs_inherit_owner(struct ksmbd_work *work,
  53                                     struct inode *parent_inode,
  54                                     struct inode *inode)
  55 {
  56         if (!test_share_config_flag(work->tcon->share_conf,
  57                                     KSMBD_SHARE_FLAG_INHERIT_OWNER))
  58                 return;
  59
  60         i_uid_write(inode, i_uid_read(parent_inode));
  61 }
  62
  63 /**
  64  * ksmbd_vfs_lock_parent() - lock parent dentry if it is stable
  65  *
  66  * the parent dentry got by dget_parent or @parent could be
  67  * unstable, we try to lock a parent inode and lookup the
  68  * child dentry again.
  69  *
  70  * the reference count of @parent isn't incremented.
  71  */
  72 int ksmbd_vfs_lock_parent(struct user_namespace *user_ns, struct dentry *parent,
  73                           struct dentry *child)
  74 {
  75         struct dentry *dentry;
  76         int ret = 0;
  77
  78         inode_lock_nested(d_inode(parent), I_MUTEX_PARENT);
  79         dentry = lookup_one(user_ns, child->d_name.name, parent,
  80                             child->d_name.len);
  81         if (IS_ERR(dentry)) {
  82                 ret = PTR_ERR(dentry);
  83                 goto out_err;
  84         }
  85
  86         if (dentry != child) {
  87                 ret = -ESTALE;
  88                 dput(dentry);
  89                 goto out_err;
  90         }
  91
  92         dput(dentry);
  93         return 0;
  94 out_err:
  95         inode_unlock(d_inode(parent));
  96         return ret;
  97 }
  98
  99 int ksmbd_vfs_may_delete(struct user_namespace *user_ns,
 100                          struct dentry *dentry)
 101 {
 102         struct dentry *parent;
 103         int ret;
 104
 105         parent = dget_parent(dentry);
 106         ret = ksmbd_vfs_lock_parent(user_ns, parent, dentry);
 107         if (ret) {
 108                 dput(parent);
 109                 return ret;
 110         }
 111
 112         ret = inode_permission(user_ns, d_inode(parent),
 113                                MAY_EXEC | MAY_WRITE);
 114
 115         inode_unlock(d_inode(parent));
 116         dput(parent);
 117         return ret;
 118 }
 119
 120 int ksmbd_vfs_query_maximal_access(struct user_namespace *user_ns,
 121                                    struct dentry *dentry, __le32 *daccess)
 122 {
 123         struct dentry *parent;
 124         int ret = 0;
 125
 126         *daccess = cpu_to_le32(FILE_READ_ATTRIBUTES | READ_CONTROL);
 127
 128         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_WRITE))
 129                 *daccess |= cpu_to_le32(WRITE_DAC | WRITE_OWNER | SYNCHRONIZE |
 130                                 FILE_WRITE_DATA | FILE_APPEND_DATA |
 131                                 FILE_WRITE_EA | FILE_WRITE_ATTRIBUTES |
 132                                 FILE_DELETE_CHILD);
 133
 134         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_READ))
 135                 *daccess |= FILE_READ_DATA_LE | FILE_READ_EA_LE;
 136
 137         if (!inode_permission(user_ns, d_inode(dentry), MAY_OPEN | MAY_EXEC))
 138                 *daccess |= FILE_EXECUTE_LE;
 139
 140         parent = dget_parent(dentry);
 141         ret = ksmbd_vfs_lock_parent(user_ns, parent, dentry);
 142         if (ret) {
 143                 dput(parent);
 144                 return ret;
 145         }
 146
 147         if (!inode_permission(user_ns, d_inode(parent), MAY_EXEC | MAY_WRITE))
 148                 *daccess |= FILE_DELETE_LE;
 149
 150         inode_unlock(d_inode(parent));
 151         dput(parent);
 152         return ret;
 153 }
 154
 155 /**
 156  * ksmbd_vfs_create() - vfs helper for smb create file
 157  * @work:       work
 158  * @name:       file name that is relative to share
 159  * @mode:       file create mode
 160  *
 161  * Return:      0 on success, otherwise error
 162  */
 163 int ksmbd_vfs_create(struct ksmbd_work *work, const char *name, umode_t mode)
 164 {
 165         struct path path;
 166         struct dentry *dentry;
 167         int err;
 168
 169         dentry = ksmbd_vfs_kern_path_create(work, name,
 170                                             LOOKUP_NO_SYMLINKS, &path);
 171         if (IS_ERR(dentry)) {
 172                 err = PTR_ERR(dentry);
 173                 if (err != -ENOENT)
 174                         pr_err("path create failed for %s, err %d\n",
 175                                name, err);
 176                 return err;
 177         }
 178
 179         mode |= S_IFREG;
 180         err = vfs_create(mnt_idmap(path.mnt), d_inode(path.dentry),
 181                          dentry, mode, true);
 182         if (!err) {
 183                 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry),
 184                                         d_inode(dentry));
 185         } else {
 186                 pr_err("File(%s): creation failed (err:%d)\n", name, err);
 187         }
 188         done_path_create(&path, dentry);
 189         return err;
 190 }
 191
 192 /**
 193  * ksmbd_vfs_mkdir() - vfs helper for smb create directory
 194  * @work:       work
 195  * @name:       directory name that is relative to share
 196  * @mode:       directory create mode
 197  *
 198  * Return:      0 on success, otherwise error
 199  */
 200 int ksmbd_vfs_mkdir(struct ksmbd_work *work, const char *name, umode_t mode)
 201 {
 202         struct mnt_idmap *idmap;
 203         struct user_namespace *user_ns;
 204         struct path path;
 205         struct dentry *dentry;
 206         int err;
 207
 208         dentry = ksmbd_vfs_kern_path_create(work, name,
 209                                             LOOKUP_NO_SYMLINKS | LOOKUP_DIRECTORY,
 210                                             &path);
 211         if (IS_ERR(dentry)) {
 212                 err = PTR_ERR(dentry);
 213                 if (err != -EEXIST)
 214                         ksmbd_debug(VFS, "path create failed for %s, err %d\n",
 215                                     name, err);
 216                 return err;
 217         }
 218
 219         idmap = mnt_idmap(path.mnt);
 220         user_ns = mnt_idmap_owner(idmap);
 221         mode |= S_IFDIR;
 222         err = vfs_mkdir(idmap, d_inode(path.dentry), dentry, mode);
 223         if (err) {
 224                 goto out;
 225         } else if (d_unhashed(dentry)) {
 226                 struct dentry *d;
 227
 228                 d = lookup_one(user_ns, dentry->d_name.name, dentry->d_parent,
 229                                dentry->d_name.len);
 230                 if (IS_ERR(d)) {
 231                         err = PTR_ERR(d);
 232                         goto out;
 233                 }
 234                 if (unlikely(d_is_negative(d))) {
 235                         dput(d);
 236                         err = -ENOENT;
 237                         goto out;
 238                 }
 239
 240                 ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), d_inode(d));
 241                 dput(d);
 242         }
 243 out:
 244         done_path_create(&path, dentry);
 245         if (err)
 246                 pr_err("mkdir(%s): creation failed (err:%d)\n", name, err);
 247         return err;
 248 }
 249
 250 static ssize_t ksmbd_vfs_getcasexattr(struct user_namespace *user_ns,
 251                                       struct dentry *dentry, char *attr_name,
 252                                       int attr_name_len, char **attr_value)
 253 {
 254         char *name, *xattr_list = NULL;
 255         ssize_t value_len = -ENOENT, xattr_list_len;
 256
 257         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
 258         if (xattr_list_len <= 0)
 259                 goto out;
 260
 261         for (name = xattr_list; name - xattr_list < xattr_list_len;
 262                         name += strlen(name) + 1) {
 263                 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
 264                 if (strncasecmp(attr_name, name, attr_name_len))
 265                         continue;
 266
 267                 value_len = ksmbd_vfs_getxattr(user_ns,
 268                                                dentry,
 269                                                name,
 270                                                attr_value);
 271                 if (value_len < 0)
 272                         pr_err("failed to get xattr in file\n");
 273                 break;
 274         }
 275
 276 out:
 277         kvfree(xattr_list);
 278         return value_len;
 279 }
 280
 281 static int ksmbd_vfs_stream_read(struct ksmbd_file *fp, char *buf, loff_t *pos,
 282                                  size_t count)
 283 {
 284         ssize_t v_len;
 285         char *stream_buf = NULL;
 286
 287         ksmbd_debug(VFS, "read stream data pos : %llu, count : %zd\n",
 288                     *pos, count);
 289
 290         v_len = ksmbd_vfs_getcasexattr(file_mnt_user_ns(fp->filp),
 291                                        fp->filp->f_path.dentry,
 292                                        fp->stream.name,
 293                                        fp->stream.size,
 294                                        &stream_buf);
 295         if ((int)v_len <= 0)
 296                 return (int)v_len;
 297
 298         if (v_len <= *pos) {
 299                 count = -EINVAL;
 300                 goto free_buf;
 301         }
 302
 303         if (v_len - *pos < count)
 304                 count = v_len - *pos;
 305
 306         memcpy(buf, &stream_buf[*pos], count);
 307
 308 free_buf:
 309         kvfree(stream_buf);
 310         return count;
 311 }
 312
 313 /**
 314  * check_lock_range() - vfs helper for smb byte range file locking
 315  * @filp:       the file to apply the lock to
 316  * @start:      lock start byte offset
 317  * @end:        lock end byte offset
 318  * @type:       byte range type read/write
 319  *
 320  * Return:      0 on success, otherwise error
 321  */
 322 static int check_lock_range(struct file *filp, loff_t start, loff_t end,
 323                             unsigned char type)
 324 {
 325         struct file_lock *flock;
 326         struct file_lock_context *ctx = locks_inode_context(file_inode(filp));
 327         int error = 0;
 328
 329         if (!ctx || list_empty_careful(&ctx->flc_posix))
 330                 return 0;
 331
 332         spin_lock(&ctx->flc_lock);
 333         list_for_each_entry(flock, &ctx->flc_posix, fl_list) {
 334                 /* check conflict locks */
 335                 if (flock->fl_end >= start && end >= flock->fl_start) {
 336                         if (flock->fl_type == F_RDLCK) {
 337                                 if (type == WRITE) {
 338                                         pr_err("not allow write by shared lock\n");
 339                                         error = 1;
 340                                         goto out;
 341                                 }
 342                         } else if (flock->fl_type == F_WRLCK) {
 343                                 /* check owner in lock */
 344                                 if (flock->fl_file != filp) {
 345                                         error = 1;
 346                                         pr_err("not allow rw access by exclusive lock from other opens\n");
 347                                         goto out;
 348                                 }
 349                         }
 350                 }
 351         }
 352 out:
 353         spin_unlock(&ctx->flc_lock);
 354         return error;
 355 }
 356
 357 /**
 358  * ksmbd_vfs_read() - vfs helper for smb file read
 359  * @work:       smb work
 360  * @fid:        file id of open file
 361  * @count:      read byte count
 362  * @pos:        file pos
 363  *
 364  * Return:      number of read bytes on success, otherwise error
 365  */
 366 int ksmbd_vfs_read(struct ksmbd_work *work, struct ksmbd_file *fp, size_t count,
 367                    loff_t *pos)
 368 {
 369         struct file *filp = fp->filp;
 370         ssize_t nbytes = 0;
 371         char *rbuf = work->aux_payload_buf;
 372         struct inode *inode = file_inode(filp);
 373
 374         if (S_ISDIR(inode->i_mode))
 375                 return -EISDIR;
 376
 377         if (unlikely(count == 0))
 378                 return 0;
 379
 380         if (work->conn->connection_type) {
 381                 if (!(fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
 382                         pr_err("no right to read(%pD)\n", fp->filp);
 383                         return -EACCES;
 384                 }
 385         }
 386
 387         if (ksmbd_stream_fd(fp))
 388                 return ksmbd_vfs_stream_read(fp, rbuf, pos, count);
 389
 390         if (!work->tcon->posix_extensions) {
 391                 int ret;
 392
 393                 ret = check_lock_range(filp, *pos, *pos + count - 1, READ);
 394                 if (ret) {
 395                         pr_err("unable to read due to lock\n");
 396                         return -EAGAIN;
 397                 }
 398         }
 399
 400         nbytes = kernel_read(filp, rbuf, count, pos);
 401         if (nbytes < 0) {
 402                 pr_err("smb read failed, err = %zd\n", nbytes);
 403                 return nbytes;
 404         }
 405
 406         filp->f_pos = *pos;
 407         return nbytes;
 408 }
 409
 410 static int ksmbd_vfs_stream_write(struct ksmbd_file *fp, char *buf, loff_t *pos,
 411                                   size_t count)
 412 {
 413         char *stream_buf = NULL, *wbuf;
 414         struct user_namespace *user_ns = file_mnt_user_ns(fp->filp);
 415         size_t size, v_len;
 416         int err = 0;
 417
 418         ksmbd_debug(VFS, "write stream data pos : %llu, count : %zd\n",
 419                     *pos, count);
 420
 421         size = *pos + count;
 422         if (size > XATTR_SIZE_MAX) {
 423                 size = XATTR_SIZE_MAX;
 424                 count = (*pos + count) - XATTR_SIZE_MAX;
 425         }
 426
 427         v_len = ksmbd_vfs_getcasexattr(user_ns,
 428                                        fp->filp->f_path.dentry,
 429                                        fp->stream.name,
 430                                        fp->stream.size,
 431                                        &stream_buf);
 432         if ((int)v_len < 0) {
 433                 pr_err("not found stream in xattr : %zd\n", v_len);
 434                 err = (int)v_len;
 435                 goto out;
 436         }
 437
 438         if (v_len < size) {
 439                 wbuf = kvmalloc(size, GFP_KERNEL | __GFP_ZERO);
 440                 if (!wbuf) {
 441                         err = -ENOMEM;
 442                         goto out;
 443                 }
 444
 445                 if (v_len > 0)
 446                         memcpy(wbuf, stream_buf, v_len);
 447                 kvfree(stream_buf);
 448                 stream_buf = wbuf;
 449         }
 450
 451         memcpy(&stream_buf[*pos], buf, count);
 452
 453         err = ksmbd_vfs_setxattr(user_ns,
 454                                  fp->filp->f_path.dentry,
 455                                  fp->stream.name,
 456                                  (void *)stream_buf,
 457                                  size,
 458                                  0);
 459         if (err < 0)
 460                 goto out;
 461
 462         fp->filp->f_pos = *pos;
 463         err = 0;
 464 out:
 465         kvfree(stream_buf);
 466         return err;
 467 }
 468
 469 /**
 470  * ksmbd_vfs_write() - vfs helper for smb file write
 471  * @work:       work
 472  * @fid:        file id of open file
 473  * @buf:        buf containing data for writing
 474  * @count:      read byte count
 475  * @pos:        file pos
 476  * @sync:       fsync after write
 477  * @written:    number of bytes written
 478  *
 479  * Return:      0 on success, otherwise error
 480  */
 481 int ksmbd_vfs_write(struct ksmbd_work *work, struct ksmbd_file *fp,
 482                     char *buf, size_t count, loff_t *pos, bool sync,
 483                     ssize_t *written)
 484 {
 485         struct file *filp;
 486         loff_t  offset = *pos;
 487         int err = 0;
 488
 489         if (work->conn->connection_type) {
 490                 if (!(fp->daccess & FILE_WRITE_DATA_LE)) {
 491                         pr_err("no right to write(%pD)\n", fp->filp);
 492                         err = -EACCES;
 493                         goto out;
 494                 }
 495         }
 496
 497         filp = fp->filp;
 498
 499         if (ksmbd_stream_fd(fp)) {
 500                 err = ksmbd_vfs_stream_write(fp, buf, pos, count);
 501                 if (!err)
 502                         *written = count;
 503                 goto out;
 504         }
 505
 506         if (!work->tcon->posix_extensions) {
 507                 err = check_lock_range(filp, *pos, *pos + count - 1, WRITE);
 508                 if (err) {
 509                         pr_err("unable to write due to lock\n");
 510                         err = -EAGAIN;
 511                         goto out;
 512                 }
 513         }
 514
 515         /* Do we need to break any of a levelII oplock? */
 516         smb_break_all_levII_oplock(work, fp, 1);
 517
 518         err = kernel_write(filp, buf, count, pos);
 519         if (err < 0) {
 520                 ksmbd_debug(VFS, "smb write failed, err = %d\n", err);
 521                 goto out;
 522         }
 523
 524         filp->f_pos = *pos;
 525         *written = err;
 526         err = 0;
 527         if (sync) {
 528                 err = vfs_fsync_range(filp, offset, offset + *written, 0);
 529                 if (err < 0)
 530                         pr_err("fsync failed for filename = %pD, err = %d\n",
 531                                fp->filp, err);
 532         }
 533
 534 out:
 535         return err;
 536 }
 537
 538 /**
 539  * ksmbd_vfs_getattr() - vfs helper for smb getattr
 540  * @work:       work
 541  * @fid:        file id of open file
 542  * @attrs:      inode attributes
 543  *
 544  * Return:      0 on success, otherwise error
 545  */
 546 int ksmbd_vfs_getattr(const struct path *path, struct kstat *stat)
 547 {
 548         int err;
 549
 550         err = vfs_getattr(path, stat, STATX_BTIME, AT_STATX_SYNC_AS_STAT);
 551         if (err)
 552                 pr_err("getattr failed, err %d\n", err);
 553         return err;
 554 }
 555
 556 /**
 557  * ksmbd_vfs_fsync() - vfs helper for smb fsync
 558  * @work:       work
 559  * @fid:        file id of open file
 560  *
 561  * Return:      0 on success, otherwise error
 562  */
 563 int ksmbd_vfs_fsync(struct ksmbd_work *work, u64 fid, u64 p_id)
 564 {
 565         struct ksmbd_file *fp;
 566         int err;
 567
 568         fp = ksmbd_lookup_fd_slow(work, fid, p_id);
 569         if (!fp) {
 570                 pr_err("failed to get filp for fid %llu\n", fid);
 571                 return -ENOENT;
 572         }
 573         err = vfs_fsync(fp->filp, 0);
 574         if (err < 0)
 575                 pr_err("smb fsync failed, err = %d\n", err);
 576         ksmbd_fd_put(work, fp);
 577         return err;
 578 }
 579
 580 /**
 581  * ksmbd_vfs_remove_file() - vfs helper for smb rmdir or unlink
 582  * @name:       directory or file name that is relative to share
 583  *
 584  * Return:      0 on success, otherwise error
 585  */
 586 int ksmbd_vfs_remove_file(struct ksmbd_work *work, char *name)
 587 {
 588         struct mnt_idmap *idmap;
 589         struct user_namespace *user_ns;
 590         struct path path;
 591         struct dentry *parent;
 592         int err;
 593
 594         if (ksmbd_override_fsids(work))
 595                 return -ENOMEM;
 596
 597         err = ksmbd_vfs_kern_path(work, name, LOOKUP_NO_SYMLINKS, &path, false);
 598         if (err) {
 599                 ksmbd_debug(VFS, "can't get %s, err %d\n", name, err);
 600                 ksmbd_revert_fsids(work);
 601                 return err;
 602         }
 603
 604         idmap = mnt_idmap(path.mnt);
 605         user_ns = mnt_idmap_owner(idmap);
 606         parent = dget_parent(path.dentry);
 607         err = ksmbd_vfs_lock_parent(user_ns, parent, path.dentry);
 608         if (err) {
 609                 dput(parent);
 610                 path_put(&path);
 611                 ksmbd_revert_fsids(work);
 612                 return err;
 613         }
 614
 615         if (!d_inode(path.dentry)->i_nlink) {
 616                 err = -ENOENT;
 617                 goto out_err;
 618         }
 619
 620         if (S_ISDIR(d_inode(path.dentry)->i_mode)) {
 621                 err = vfs_rmdir(idmap, d_inode(parent), path.dentry);
 622                 if (err && err != -ENOTEMPTY)
 623                         ksmbd_debug(VFS, "%s: rmdir failed, err %d\n", name,
 624                                     err);
 625         } else {
 626                 err = vfs_unlink(idmap, d_inode(parent), path.dentry, NULL);
 627                 if (err)
 628                         ksmbd_debug(VFS, "%s: unlink failed, err %d\n", name,
 629                                     err);
 630         }
 631
 632 out_err:
 633         inode_unlock(d_inode(parent));
 634         dput(parent);
 635         path_put(&path);
 636         ksmbd_revert_fsids(work);
 637         return err;
 638 }
 639
 640 /**
 641  * ksmbd_vfs_link() - vfs helper for creating smb hardlink
 642  * @oldname:    source file name
 643  * @newname:    hardlink name that is relative to share
 644  *
 645  * Return:      0 on success, otherwise error
 646  */
 647 int ksmbd_vfs_link(struct ksmbd_work *work, const char *oldname,
 648                    const char *newname)
 649 {
 650         struct path oldpath, newpath;
 651         struct dentry *dentry;
 652         int err;
 653
 654         if (ksmbd_override_fsids(work))
 655                 return -ENOMEM;
 656
 657         err = kern_path(oldname, LOOKUP_NO_SYMLINKS, &oldpath);
 658         if (err) {
 659                 pr_err("cannot get linux path for %s, err = %d\n",
 660                        oldname, err);
 661                 goto out1;
 662         }
 663
 664         dentry = ksmbd_vfs_kern_path_create(work, newname,
 665                                             LOOKUP_NO_SYMLINKS | LOOKUP_REVAL,
 666                                             &newpath);
 667         if (IS_ERR(dentry)) {
 668                 err = PTR_ERR(dentry);
 669                 pr_err("path create err for %s, err %d\n", newname, err);
 670                 goto out2;
 671         }
 672
 673         err = -EXDEV;
 674         if (oldpath.mnt != newpath.mnt) {
 675                 pr_err("vfs_link failed err %d\n", err);
 676                 goto out3;
 677         }
 678
 679         err = vfs_link(oldpath.dentry, mnt_idmap(newpath.mnt),
 680                        d_inode(newpath.dentry),
 681                        dentry, NULL);
 682         if (err)
 683                 ksmbd_debug(VFS, "vfs_link failed err %d\n", err);
 684
 685 out3:
 686         done_path_create(&newpath, dentry);
 687 out2:
 688         path_put(&oldpath);
 689 out1:
 690         ksmbd_revert_fsids(work);
 691         return err;
 692 }
 693
 694 static int ksmbd_validate_entry_in_use(struct dentry *src_dent)
 695 {
 696         struct dentry *dst_dent;
 697
 698         spin_lock(&src_dent->d_lock);
 699         list_for_each_entry(dst_dent, &src_dent->d_subdirs, d_child) {
 700                 struct ksmbd_file *child_fp;
 701
 702                 if (d_really_is_negative(dst_dent))
 703                         continue;
 704
 705                 child_fp = ksmbd_lookup_fd_inode(d_inode(dst_dent));
 706                 if (child_fp) {
 707                         spin_unlock(&src_dent->d_lock);
 708                         ksmbd_debug(VFS, "Forbid rename, sub file/dir is in use\n");
 709                         return -EACCES;
 710                 }
 711         }
 712         spin_unlock(&src_dent->d_lock);
 713
 714         return 0;
 715 }
 716
 717 static int __ksmbd_vfs_rename(struct ksmbd_work *work,
 718                               struct mnt_idmap *src_idmap,
 719                               struct dentry *src_dent_parent,
 720                               struct dentry *src_dent,
 721                               struct mnt_idmap *dst_idmap,
 722                               struct dentry *dst_dent_parent,
 723                               struct dentry *trap_dent,
 724                               char *dst_name)
 725 {
 726         struct dentry *dst_dent;
 727         int err;
 728
 729         if (!work->tcon->posix_extensions) {
 730                 err = ksmbd_validate_entry_in_use(src_dent);
 731                 if (err)
 732                         return err;
 733         }
 734
 735         if (d_really_is_negative(src_dent_parent))
 736                 return -ENOENT;
 737         if (d_really_is_negative(dst_dent_parent))
 738                 return -ENOENT;
 739         if (d_really_is_negative(src_dent))
 740                 return -ENOENT;
 741         if (src_dent == trap_dent)
 742                 return -EINVAL;
 743
 744         if (ksmbd_override_fsids(work))
 745                 return -ENOMEM;
 746
 747         dst_dent = lookup_one(mnt_idmap_owner(dst_idmap), dst_name,
 748                               dst_dent_parent, strlen(dst_name));
 749         err = PTR_ERR(dst_dent);
 750         if (IS_ERR(dst_dent)) {
 751                 pr_err("lookup failed %s [%d]\n", dst_name, err);
 752                 goto out;
 753         }
 754
 755         err = -ENOTEMPTY;
 756         if (dst_dent != trap_dent && !d_really_is_positive(dst_dent)) {
 757                 struct renamedata rd = {
 758                         .old_mnt_idmap  = src_idmap,
 759                         .old_dir        = d_inode(src_dent_parent),
 760                         .old_dentry     = src_dent,
 761                         .new_mnt_idmap  = dst_idmap,
 762                         .new_dir        = d_inode(dst_dent_parent),
 763                         .new_dentry     = dst_dent,
 764                 };
 765                 err = vfs_rename(&rd);
 766         }
 767         if (err)
 768                 pr_err("vfs_rename failed err %d\n", err);
 769         if (dst_dent)
 770                 dput(dst_dent);
 771 out:
 772         ksmbd_revert_fsids(work);
 773         return err;
 774 }
 775
 776 int ksmbd_vfs_fp_rename(struct ksmbd_work *work, struct ksmbd_file *fp,
 777                         char *newname)
 778 {
 779         struct mnt_idmap *idmap;
 780         struct user_namespace *user_ns;
 781         struct path dst_path;
 782         struct dentry *src_dent_parent, *dst_dent_parent;
 783         struct dentry *src_dent, *trap_dent, *src_child;
 784         char *dst_name;
 785         int err;
 786
 787         dst_name = extract_last_component(newname);
 788         if (!dst_name) {
 789                 dst_name = newname;
 790                 newname = "";
 791         }
 792
 793         src_dent_parent = dget_parent(fp->filp->f_path.dentry);
 794         src_dent = fp->filp->f_path.dentry;
 795
 796         err = ksmbd_vfs_kern_path(work, newname,
 797                                   LOOKUP_NO_SYMLINKS | LOOKUP_DIRECTORY,
 798                                   &dst_path, false);
 799         if (err) {
 800                 ksmbd_debug(VFS, "Cannot get path for %s [%d]\n", newname, err);
 801                 goto out;
 802         }
 803         dst_dent_parent = dst_path.dentry;
 804
 805         trap_dent = lock_rename(src_dent_parent, dst_dent_parent);
 806         dget(src_dent);
 807         dget(dst_dent_parent);
 808         idmap = file_mnt_idmap(fp->filp);
 809         user_ns = mnt_idmap_owner(idmap);
 810         src_child = lookup_one(user_ns, src_dent->d_name.name, src_dent_parent,
 811                                src_dent->d_name.len);
 812         if (IS_ERR(src_child)) {
 813                 err = PTR_ERR(src_child);
 814                 goto out_lock;
 815         }
 816
 817         if (src_child != src_dent) {
 818                 err = -ESTALE;
 819                 dput(src_child);
 820                 goto out_lock;
 821         }
 822         dput(src_child);
 823
 824         err = __ksmbd_vfs_rename(work,
 825                                  idmap,
 826                                  src_dent_parent,
 827                                  src_dent,
 828                                  mnt_idmap(dst_path.mnt),
 829                                  dst_dent_parent,
 830                                  trap_dent,
 831                                  dst_name);
 832 out_lock:
 833         dput(src_dent);
 834         dput(dst_dent_parent);
 835         unlock_rename(src_dent_parent, dst_dent_parent);
 836         path_put(&dst_path);
 837 out:
 838         dput(src_dent_parent);
 839         return err;
 840 }
 841
 842 /**
 843  * ksmbd_vfs_truncate() - vfs helper for smb file truncate
 844  * @work:       work
 845  * @fid:        file id of old file
 846  * @size:       truncate to given size
 847  *
 848  * Return:      0 on success, otherwise error
 849  */
 850 int ksmbd_vfs_truncate(struct ksmbd_work *work,
 851                        struct ksmbd_file *fp, loff_t size)
 852 {
 853         int err = 0;
 854         struct file *filp;
 855
 856         filp = fp->filp;
 857
 858         /* Do we need to break any of a levelII oplock? */
 859         smb_break_all_levII_oplock(work, fp, 1);
 860
 861         if (!work->tcon->posix_extensions) {
 862                 struct inode *inode = file_inode(filp);
 863
 864                 if (size < inode->i_size) {
 865                         err = check_lock_range(filp, size,
 866                                                inode->i_size - 1, WRITE);
 867                 } else {
 868                         err = check_lock_range(filp, inode->i_size,
 869                                                size - 1, WRITE);
 870                 }
 871
 872                 if (err) {
 873                         pr_err("failed due to lock\n");
 874                         return -EAGAIN;
 875                 }
 876         }
 877
 878         err = vfs_truncate(&filp->f_path, size);
 879         if (err)
 880                 pr_err("truncate failed, err %d\n", err);
 881         return err;
 882 }
 883
 884 /**
 885  * ksmbd_vfs_listxattr() - vfs helper for smb list extended attributes
 886  * @dentry:     dentry of file for listing xattrs
 887  * @list:       destination buffer
 888  * @size:       destination buffer length
 889  *
 890  * Return:      xattr list length on success, otherwise error
 891  */
 892 ssize_t ksmbd_vfs_listxattr(struct dentry *dentry, char **list)
 893 {
 894         ssize_t size;
 895         char *vlist = NULL;
 896
 897         size = vfs_listxattr(dentry, NULL, 0);
 898         if (size <= 0)
 899                 return size;
 900
 901         vlist = kvmalloc(size, GFP_KERNEL | __GFP_ZERO);
 902         if (!vlist)
 903                 return -ENOMEM;
 904
 905         *list = vlist;
 906         size = vfs_listxattr(dentry, vlist, size);
 907         if (size < 0) {
 908                 ksmbd_debug(VFS, "listxattr failed\n");
 909                 kvfree(vlist);
 910                 *list = NULL;
 911         }
 912
 913         return size;
 914 }
 915
 916 static ssize_t ksmbd_vfs_xattr_len(struct user_namespace *user_ns,
 917                                    struct dentry *dentry, char *xattr_name)
 918 {
 919         return vfs_getxattr(user_ns, dentry, xattr_name, NULL, 0);
 920 }
 921
 922 /**
 923  * ksmbd_vfs_getxattr() - vfs helper for smb get extended attributes value
 924  * @user_ns:    user namespace
 925  * @dentry:     dentry of file for getting xattrs
 926  * @xattr_name: name of xattr name to query
 927  * @xattr_buf:  destination buffer xattr value
 928  *
 929  * Return:      read xattr value length on success, otherwise error
 930  */
 931 ssize_t ksmbd_vfs_getxattr(struct user_namespace *user_ns,
 932                            struct dentry *dentry,
 933                            char *xattr_name, char **xattr_buf)
 934 {
 935         ssize_t xattr_len;
 936         char *buf;
 937
 938         *xattr_buf = NULL;
 939         xattr_len = ksmbd_vfs_xattr_len(user_ns, dentry, xattr_name);
 940         if (xattr_len < 0)
 941                 return xattr_len;
 942
 943         buf = kmalloc(xattr_len + 1, GFP_KERNEL);
 944         if (!buf)
 945                 return -ENOMEM;
 946
 947         xattr_len = vfs_getxattr(user_ns, dentry, xattr_name,
 948                                  (void *)buf, xattr_len);
 949         if (xattr_len > 0)
 950                 *xattr_buf = buf;
 951         else
 952                 kfree(buf);
 953         return xattr_len;
 954 }
 955
 956 /**
 957  * ksmbd_vfs_setxattr() - vfs helper for smb set extended attributes value
 958  * @user_ns:    user namespace
 959  * @dentry:     dentry to set XATTR at
 960  * @name:       xattr name for setxattr
 961  * @value:      xattr value to set
 962  * @size:       size of xattr value
 963  * @flags:      destination buffer length
 964  *
 965  * Return:      0 on success, otherwise error
 966  */
 967 int ksmbd_vfs_setxattr(struct user_namespace *user_ns,
 968                        struct dentry *dentry, const char *attr_name,
 969                        void *attr_value, size_t attr_size, int flags)
 970 {
 971         int err;
 972
 973         err = vfs_setxattr(user_ns,
 974                            dentry,
 975                            attr_name,
 976                            attr_value,
 977                            attr_size,
 978                            flags);
 979         if (err)
 980                 ksmbd_debug(VFS, "setxattr failed, err %d\n", err);
 981         return err;
 982 }
 983
 984 /**
 985  * ksmbd_vfs_set_fadvise() - convert smb IO caching options to linux options
 986  * @filp:       file pointer for IO
 987  * @options:    smb IO options
 988  */
 989 void ksmbd_vfs_set_fadvise(struct file *filp, __le32 option)
 990 {
 991         struct address_space *mapping;
 992
 993         mapping = filp->f_mapping;
 994
 995         if (!option || !mapping)
 996                 return;
 997
 998         if (option & FILE_WRITE_THROUGH_LE) {
 999                 filp->f_flags |= O_SYNC;
1000         } else if (option & FILE_SEQUENTIAL_ONLY_LE) {
1001                 filp->f_ra.ra_pages = inode_to_bdi(mapping->host)->ra_pages * 2;
1002                 spin_lock(&filp->f_lock);
1003                 filp->f_mode &= ~FMODE_RANDOM;
1004                 spin_unlock(&filp->f_lock);
1005         } else if (option & FILE_RANDOM_ACCESS_LE) {
1006                 spin_lock(&filp->f_lock);
1007                 filp->f_mode |= FMODE_RANDOM;
1008                 spin_unlock(&filp->f_lock);
1009         }
1010 }
1011
1012 int ksmbd_vfs_zero_data(struct ksmbd_work *work, struct ksmbd_file *fp,
1013                         loff_t off, loff_t len)
1014 {
1015         smb_break_all_levII_oplock(work, fp, 1);
1016         if (fp->f_ci->m_fattr & FILE_ATTRIBUTE_SPARSE_FILE_LE)
1017                 return vfs_fallocate(fp->filp,
1018                                      FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE,
1019                                      off, len);
1020
1021         return vfs_fallocate(fp->filp,
1022                              FALLOC_FL_ZERO_RANGE | FALLOC_FL_KEEP_SIZE,
1023                              off, len);
1024 }
1025
1026 int ksmbd_vfs_fqar_lseek(struct ksmbd_file *fp, loff_t start, loff_t length,
1027                          struct file_allocated_range_buffer *ranges,
1028                          unsigned int in_count, unsigned int *out_count)
1029 {
1030         struct file *f = fp->filp;
1031         struct inode *inode = file_inode(fp->filp);
1032         loff_t maxbytes = (u64)inode->i_sb->s_maxbytes, end;
1033         loff_t extent_start, extent_end;
1034         int ret = 0;
1035
1036         if (start > maxbytes)
1037                 return -EFBIG;
1038
1039         if (!in_count)
1040                 return 0;
1041
1042         /*
1043          * Shrink request scope to what the fs can actually handle.
1044          */
1045         if (length > maxbytes || (maxbytes - length) < start)
1046                 length = maxbytes - start;
1047
1048         if (start + length > inode->i_size)
1049                 length = inode->i_size - start;
1050
1051         *out_count = 0;
1052         end = start + length;
1053         while (start < end && *out_count < in_count) {
1054                 extent_start = vfs_llseek(f, start, SEEK_DATA);
1055                 if (extent_start < 0) {
1056                         if (extent_start != -ENXIO)
1057                                 ret = (int)extent_start;
1058                         break;
1059                 }
1060
1061                 if (extent_start >= end)
1062                         break;
1063
1064                 extent_end = vfs_llseek(f, extent_start, SEEK_HOLE);
1065                 if (extent_end < 0) {
1066                         if (extent_end != -ENXIO)
1067                                 ret = (int)extent_end;
1068                         break;
1069                 } else if (extent_start >= extent_end) {
1070                         break;
1071                 }
1072
1073                 ranges[*out_count].file_offset = cpu_to_le64(extent_start);
1074                 ranges[(*out_count)++].length =
1075                         cpu_to_le64(min(extent_end, end) - extent_start);
1076
1077                 start = extent_end;
1078         }
1079
1080         return ret;
1081 }
1082
1083 int ksmbd_vfs_remove_xattr(struct user_namespace *user_ns,
1084                            struct dentry *dentry, char *attr_name)
1085 {
1086         return vfs_removexattr(user_ns, dentry, attr_name);
1087 }
1088
1089 int ksmbd_vfs_unlink(struct mnt_idmap *idmap,
1090                      struct dentry *dir, struct dentry *dentry)
1091 {
1092         int err = 0;
1093         struct user_namespace *mnt_userns = mnt_idmap_owner(idmap);
1094
1095         err = ksmbd_vfs_lock_parent(mnt_userns, dir, dentry);
1096         if (err)
1097                 return err;
1098         dget(dentry);
1099
1100         if (S_ISDIR(d_inode(dentry)->i_mode))
1101                 err = vfs_rmdir(idmap, d_inode(dir), dentry);
1102         else
1103                 err = vfs_unlink(idmap, d_inode(dir), dentry, NULL);
1104
1105         dput(dentry);
1106         inode_unlock(d_inode(dir));
1107         if (err)
1108                 ksmbd_debug(VFS, "failed to delete, err %d\n", err);
1109
1110         return err;
1111 }
1112
1113 static bool __dir_empty(struct dir_context *ctx, const char *name, int namlen,
1114                        loff_t offset, u64 ino, unsigned int d_type)
1115 {
1116         struct ksmbd_readdir_data *buf;
1117
1118         buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1119         buf->dirent_count++;
1120
1121         return buf->dirent_count <= 2;
1122 }
1123
1124 /**
1125  * ksmbd_vfs_empty_dir() - check for empty directory
1126  * @fp: ksmbd file pointer
1127  *
1128  * Return:      true if directory empty, otherwise false
1129  */
1130 int ksmbd_vfs_empty_dir(struct ksmbd_file *fp)
1131 {
1132         int err;
1133         struct ksmbd_readdir_data readdir_data;
1134
1135         memset(&readdir_data, 0, sizeof(struct ksmbd_readdir_data));
1136
1137         set_ctx_actor(&readdir_data.ctx, __dir_empty);
1138         readdir_data.dirent_count = 0;
1139
1140         err = iterate_dir(fp->filp, &readdir_data.ctx);
1141         if (readdir_data.dirent_count > 2)
1142                 err = -ENOTEMPTY;
1143         else
1144                 err = 0;
1145         return err;
1146 }
1147
1148 static bool __caseless_lookup(struct dir_context *ctx, const char *name,
1149                              int namlen, loff_t offset, u64 ino,
1150                              unsigned int d_type)
1151 {
1152         struct ksmbd_readdir_data *buf;
1153         int cmp = -EINVAL;
1154
1155         buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1156
1157         if (buf->used != namlen)
1158                 return true;
1159         if (IS_ENABLED(CONFIG_UNICODE) && buf->um) {
1160                 const struct qstr q_buf = {.name = buf->private,
1161                                            .len = buf->used};
1162                 const struct qstr q_name = {.name = name,
1163                                             .len = namlen};
1164
1165                 cmp = utf8_strncasecmp(buf->um, &q_buf, &q_name);
1166         }
1167         if (cmp < 0)
1168                 cmp = strncasecmp((char *)buf->private, name, namlen);
1169         if (!cmp) {
1170                 memcpy((char *)buf->private, name, namlen);
1171                 buf->dirent_count = 1;
1172                 return false;
1173         }
1174         return true;
1175 }
1176
1177 /**
1178  * ksmbd_vfs_lookup_in_dir() - lookup a file in a directory
1179  * @dir:        path info
1180  * @name:       filename to lookup
1181  * @namelen:    filename length
1182  *
1183  * Return:      0 on success, otherwise error
1184  */
1185 static int ksmbd_vfs_lookup_in_dir(const struct path *dir, char *name,
1186                                    size_t namelen, struct unicode_map *um)
1187 {
1188         int ret;
1189         struct file *dfilp;
1190         int flags = O_RDONLY | O_LARGEFILE;
1191         struct ksmbd_readdir_data readdir_data = {
1192                 .ctx.actor      = __caseless_lookup,
1193                 .private        = name,
1194                 .used           = namelen,
1195                 .dirent_count   = 0,
1196                 .um             = um,
1197         };
1198
1199         dfilp = dentry_open(dir, flags, current_cred());
1200         if (IS_ERR(dfilp))
1201                 return PTR_ERR(dfilp);
1202
1203         ret = iterate_dir(dfilp, &readdir_data.ctx);
1204         if (readdir_data.dirent_count > 0)
1205                 ret = 0;
1206         fput(dfilp);
1207         return ret;
1208 }
1209
1210 /**
1211  * ksmbd_vfs_kern_path() - lookup a file and get path info
1212  * @name:       file path that is relative to share
1213  * @flags:      lookup flags
1214  * @path:       if lookup succeed, return path info
1215  * @caseless:   caseless filename lookup
1216  *
1217  * Return:      0 on success, otherwise error
1218  */
1219 int ksmbd_vfs_kern_path(struct ksmbd_work *work, char *name,
1220                         unsigned int flags, struct path *path, bool caseless)
1221 {
1222         struct ksmbd_share_config *share_conf = work->tcon->share_conf;
1223         int err;
1224
1225         flags |= LOOKUP_BENEATH;
1226         err = vfs_path_lookup(share_conf->vfs_path.dentry,
1227                               share_conf->vfs_path.mnt,
1228                               name,
1229                               flags,
1230                               path);
1231         if (!err)
1232                 return 0;
1233
1234         if (caseless) {
1235                 char *filepath;
1236                 struct path parent;
1237                 size_t path_len, remain_len;
1238
1239                 filepath = kstrdup(name, GFP_KERNEL);
1240                 if (!filepath)
1241                         return -ENOMEM;
1242
1243                 path_len = strlen(filepath);
1244                 remain_len = path_len;
1245
1246                 parent = share_conf->vfs_path;
1247                 path_get(&parent);
1248
1249                 while (d_can_lookup(parent.dentry)) {
1250                         char *filename = filepath + path_len - remain_len;
1251                         char *next = strchrnul(filename, '/');
1252                         size_t filename_len = next - filename;
1253                         bool is_last = !next[0];
1254
1255                         if (filename_len == 0)
1256                                 break;
1257
1258                         err = ksmbd_vfs_lookup_in_dir(&parent, filename,
1259                                                       filename_len,
1260                                                       work->conn->um);
1261                         path_put(&parent);
1262                         if (err)
1263                                 goto out;
1264
1265                         next[0] = '\0';
1266
1267                         err = vfs_path_lookup(share_conf->vfs_path.dentry,
1268                                               share_conf->vfs_path.mnt,
1269                                               filepath,
1270                                               flags,
1271                                               &parent);
1272                         if (err)
1273                                 goto out;
1274                         else if (is_last) {
1275                                 *path = parent;
1276                                 goto out;
1277                         }
1278
1279                         next[0] = '/';
1280                         remain_len -= filename_len + 1;
1281                 }
1282
1283                 path_put(&parent);
1284                 err = -EINVAL;
1285 out:
1286                 kfree(filepath);
1287         }
1288         return err;
1289 }
1290
1291 struct dentry *ksmbd_vfs_kern_path_create(struct ksmbd_work *work,
1292                                           const char *name,
1293                                           unsigned int flags,
1294                                           struct path *path)
1295 {
1296         char *abs_name;
1297         struct dentry *dent;
1298
1299         abs_name = convert_to_unix_name(work->tcon->share_conf, name);
1300         if (!abs_name)
1301                 return ERR_PTR(-ENOMEM);
1302
1303         dent = kern_path_create(AT_FDCWD, abs_name, path, flags);
1304         kfree(abs_name);
1305         return dent;
1306 }
1307
1308 int ksmbd_vfs_remove_acl_xattrs(struct mnt_idmap *idmap,
1309                                 struct dentry *dentry)
1310 {
1311         char *name, *xattr_list = NULL;
1312         ssize_t xattr_list_len;
1313         int err = 0;
1314
1315         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1316         if (xattr_list_len < 0) {
1317                 goto out;
1318         } else if (!xattr_list_len) {
1319                 ksmbd_debug(SMB, "empty xattr in the file\n");
1320                 goto out;
1321         }
1322
1323         for (name = xattr_list; name - xattr_list < xattr_list_len;
1324              name += strlen(name) + 1) {
1325                 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1326
1327                 if (!strncmp(name, XATTR_NAME_POSIX_ACL_ACCESS,
1328                              sizeof(XATTR_NAME_POSIX_ACL_ACCESS) - 1) ||
1329                     !strncmp(name, XATTR_NAME_POSIX_ACL_DEFAULT,
1330                              sizeof(XATTR_NAME_POSIX_ACL_DEFAULT) - 1)) {
1331                         err = vfs_remove_acl(idmap, dentry, name);
1332                         if (err)
1333                                 ksmbd_debug(SMB,
1334                                             "remove acl xattr failed : %s\n", name);
1335                 }
1336         }
1337 out:
1338         kvfree(xattr_list);
1339         return err;
1340 }
1341
1342 int ksmbd_vfs_remove_sd_xattrs(struct user_namespace *user_ns,
1343                                struct dentry *dentry)
1344 {
1345         char *name, *xattr_list = NULL;
1346         ssize_t xattr_list_len;
1347         int err = 0;
1348
1349         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1350         if (xattr_list_len < 0) {
1351                 goto out;
1352         } else if (!xattr_list_len) {
1353                 ksmbd_debug(SMB, "empty xattr in the file\n");
1354                 goto out;
1355         }
1356
1357         for (name = xattr_list; name - xattr_list < xattr_list_len;
1358                         name += strlen(name) + 1) {
1359                 ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1360
1361                 if (!strncmp(name, XATTR_NAME_SD, XATTR_NAME_SD_LEN)) {
1362                         err = ksmbd_vfs_remove_xattr(user_ns, dentry, name);
1363                         if (err)
1364                                 ksmbd_debug(SMB, "remove xattr failed : %s\n", name);
1365                 }
1366         }
1367 out:
1368         kvfree(xattr_list);
1369         return err;
1370 }
1371
1372 static struct xattr_smb_acl *ksmbd_vfs_make_xattr_posix_acl(struct user_namespace *user_ns,
1373                                                             struct inode *inode,
1374                                                             int acl_type)
1375 {
1376         struct xattr_smb_acl *smb_acl = NULL;
1377         struct posix_acl *posix_acls;
1378         struct posix_acl_entry *pa_entry;
1379         struct xattr_acl_entry *xa_entry;
1380         int i;
1381
1382         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1383                 return NULL;
1384
1385         posix_acls = get_inode_acl(inode, acl_type);
1386         if (!posix_acls)
1387                 return NULL;
1388
1389         smb_acl = kzalloc(sizeof(struct xattr_smb_acl) +
1390                           sizeof(struct xattr_acl_entry) * posix_acls->a_count,
1391                           GFP_KERNEL);
1392         if (!smb_acl)
1393                 goto out;
1394
1395         smb_acl->count = posix_acls->a_count;
1396         pa_entry = posix_acls->a_entries;
1397         xa_entry = smb_acl->entries;
1398         for (i = 0; i < posix_acls->a_count; i++, pa_entry++, xa_entry++) {
1399                 switch (pa_entry->e_tag) {
1400                 case ACL_USER:
1401                         xa_entry->type = SMB_ACL_USER;
1402                         xa_entry->uid = posix_acl_uid_translate(user_ns, pa_entry);
1403                         break;
1404                 case ACL_USER_OBJ:
1405                         xa_entry->type = SMB_ACL_USER_OBJ;
1406                         break;
1407                 case ACL_GROUP:
1408                         xa_entry->type = SMB_ACL_GROUP;
1409                         xa_entry->gid = posix_acl_gid_translate(user_ns, pa_entry);
1410                         break;
1411                 case ACL_GROUP_OBJ:
1412                         xa_entry->type = SMB_ACL_GROUP_OBJ;
1413                         break;
1414                 case ACL_OTHER:
1415                         xa_entry->type = SMB_ACL_OTHER;
1416                         break;
1417                 case ACL_MASK:
1418                         xa_entry->type = SMB_ACL_MASK;
1419                         break;
1420                 default:
1421                         pr_err("unknown type : 0x%x\n", pa_entry->e_tag);
1422                         goto out;
1423                 }
1424
1425                 if (pa_entry->e_perm & ACL_READ)
1426                         xa_entry->perm |= SMB_ACL_READ;
1427                 if (pa_entry->e_perm & ACL_WRITE)
1428                         xa_entry->perm |= SMB_ACL_WRITE;
1429                 if (pa_entry->e_perm & ACL_EXECUTE)
1430                         xa_entry->perm |= SMB_ACL_EXECUTE;
1431         }
1432 out:
1433         posix_acl_release(posix_acls);
1434         return smb_acl;
1435 }
1436
1437 int ksmbd_vfs_set_sd_xattr(struct ksmbd_conn *conn,
1438                            struct user_namespace *user_ns,
1439                            struct dentry *dentry,
1440                            struct smb_ntsd *pntsd, int len)
1441 {
1442         int rc;
1443         struct ndr sd_ndr = {0}, acl_ndr = {0};
1444         struct xattr_ntacl acl = {0};
1445         struct xattr_smb_acl *smb_acl, *def_smb_acl = NULL;
1446         struct inode *inode = d_inode(dentry);
1447
1448         acl.version = 4;
1449         acl.hash_type = XATTR_SD_HASH_TYPE_SHA256;
1450         acl.current_time = ksmbd_UnixTimeToNT(current_time(inode));
1451
1452         memcpy(acl.desc, "posix_acl", 9);
1453         acl.desc_len = 10;
1454
1455         pntsd->osidoffset =
1456                 cpu_to_le32(le32_to_cpu(pntsd->osidoffset) + NDR_NTSD_OFFSETOF);
1457         pntsd->gsidoffset =
1458                 cpu_to_le32(le32_to_cpu(pntsd->gsidoffset) + NDR_NTSD_OFFSETOF);
1459         pntsd->dacloffset =
1460                 cpu_to_le32(le32_to_cpu(pntsd->dacloffset) + NDR_NTSD_OFFSETOF);
1461
1462         acl.sd_buf = (char *)pntsd;
1463         acl.sd_size = len;
1464
1465         rc = ksmbd_gen_sd_hash(conn, acl.sd_buf, acl.sd_size, acl.hash);
1466         if (rc) {
1467                 pr_err("failed to generate hash for ndr acl\n");
1468                 return rc;
1469         }
1470
1471         smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1472                                                  ACL_TYPE_ACCESS);
1473         if (S_ISDIR(inode->i_mode))
1474                 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1475                                                              ACL_TYPE_DEFAULT);
1476
1477         rc = ndr_encode_posix_acl(&acl_ndr, user_ns, inode,
1478                                   smb_acl, def_smb_acl);
1479         if (rc) {
1480                 pr_err("failed to encode ndr to posix acl\n");
1481                 goto out;
1482         }
1483
1484         rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset,
1485                                acl.posix_acl_hash);
1486         if (rc) {
1487                 pr_err("failed to generate hash for ndr acl\n");
1488                 goto out;
1489         }
1490
1491         rc = ndr_encode_v4_ntacl(&sd_ndr, &acl);
1492         if (rc) {
1493                 pr_err("failed to encode ndr to posix acl\n");
1494                 goto out;
1495         }
1496
1497         rc = ksmbd_vfs_setxattr(user_ns, dentry,
1498                                 XATTR_NAME_SD, sd_ndr.data,
1499                                 sd_ndr.offset, 0);
1500         if (rc < 0)
1501                 pr_err("Failed to store XATTR ntacl :%d\n", rc);
1502
1503         kfree(sd_ndr.data);
1504 out:
1505         kfree(acl_ndr.data);
1506         kfree(smb_acl);
1507         kfree(def_smb_acl);
1508         return rc;
1509 }
1510
1511 int ksmbd_vfs_get_sd_xattr(struct ksmbd_conn *conn,
1512                            struct user_namespace *user_ns,
1513                            struct dentry *dentry,
1514                            struct smb_ntsd **pntsd)
1515 {
1516         int rc;
1517         struct ndr n;
1518         struct inode *inode = d_inode(dentry);
1519         struct ndr acl_ndr = {0};
1520         struct xattr_ntacl acl;
1521         struct xattr_smb_acl *smb_acl = NULL, *def_smb_acl = NULL;
1522         __u8 cmp_hash[XATTR_SD_HASH_SIZE] = {0};
1523
1524         rc = ksmbd_vfs_getxattr(user_ns, dentry, XATTR_NAME_SD, &n.data);
1525         if (rc <= 0)
1526                 return rc;
1527
1528         n.length = rc;
1529         rc = ndr_decode_v4_ntacl(&n, &acl);
1530         if (rc)
1531                 goto free_n_data;
1532
1533         smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1534                                                  ACL_TYPE_ACCESS);
1535         if (S_ISDIR(inode->i_mode))
1536                 def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(user_ns, inode,
1537                                                              ACL_TYPE_DEFAULT);
1538
1539         rc = ndr_encode_posix_acl(&acl_ndr, user_ns, inode, smb_acl,
1540                                   def_smb_acl);
1541         if (rc) {
1542                 pr_err("failed to encode ndr to posix acl\n");
1543                 goto out_free;
1544         }
1545
1546         rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset, cmp_hash);
1547         if (rc) {
1548                 pr_err("failed to generate hash for ndr acl\n");
1549                 goto out_free;
1550         }
1551
1552         if (memcmp(cmp_hash, acl.posix_acl_hash, XATTR_SD_HASH_SIZE)) {
1553                 pr_err("hash value diff\n");
1554                 rc = -EINVAL;
1555                 goto out_free;
1556         }
1557
1558         *pntsd = acl.sd_buf;
1559         if (acl.sd_size < sizeof(struct smb_ntsd)) {
1560                 pr_err("sd size is invalid\n");
1561                 goto out_free;
1562         }
1563
1564         (*pntsd)->osidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->osidoffset) -
1565                                            NDR_NTSD_OFFSETOF);
1566         (*pntsd)->gsidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->gsidoffset) -
1567                                            NDR_NTSD_OFFSETOF);
1568         (*pntsd)->dacloffset = cpu_to_le32(le32_to_cpu((*pntsd)->dacloffset) -
1569                                            NDR_NTSD_OFFSETOF);
1570
1571         rc = acl.sd_size;
1572 out_free:
1573         kfree(acl_ndr.data);
1574         kfree(smb_acl);
1575         kfree(def_smb_acl);
1576         if (rc < 0) {
1577                 kfree(acl.sd_buf);
1578                 *pntsd = NULL;
1579         }
1580
1581 free_n_data:
1582         kfree(n.data);
1583         return rc;
1584 }
1585
1586 int ksmbd_vfs_set_dos_attrib_xattr(struct user_namespace *user_ns,
1587                                    struct dentry *dentry,
1588                                    struct xattr_dos_attrib *da)
1589 {
1590         struct ndr n;
1591         int err;
1592
1593         err = ndr_encode_dos_attr(&n, da);
1594         if (err)
1595                 return err;
1596
1597         err = ksmbd_vfs_setxattr(user_ns, dentry, XATTR_NAME_DOS_ATTRIBUTE,
1598                                  (void *)n.data, n.offset, 0);
1599         if (err)
1600                 ksmbd_debug(SMB, "failed to store dos attribute in xattr\n");
1601         kfree(n.data);
1602
1603         return err;
1604 }
1605
1606 int ksmbd_vfs_get_dos_attrib_xattr(struct user_namespace *user_ns,
1607                                    struct dentry *dentry,
1608                                    struct xattr_dos_attrib *da)
1609 {
1610         struct ndr n;
1611         int err;
1612
1613         err = ksmbd_vfs_getxattr(user_ns, dentry, XATTR_NAME_DOS_ATTRIBUTE,
1614                                  (char **)&n.data);
1615         if (err > 0) {
1616                 n.length = err;
1617                 if (ndr_decode_dos_attr(&n, da))
1618                         err = -EINVAL;
1619                 kfree(n.data);
1620         } else {
1621                 ksmbd_debug(SMB, "failed to load dos attribute in xattr\n");
1622         }
1623
1624         return err;
1625 }
1626
1627 /**
1628  * ksmbd_vfs_init_kstat() - convert unix stat information to smb stat format
1629  * @p:          destination buffer
1630  * @ksmbd_kstat:      ksmbd kstat wrapper
1631  */
1632 void *ksmbd_vfs_init_kstat(char **p, struct ksmbd_kstat *ksmbd_kstat)
1633 {
1634         struct file_directory_info *info = (struct file_directory_info *)(*p);
1635         struct kstat *kstat = ksmbd_kstat->kstat;
1636         u64 time;
1637
1638         info->FileIndex = 0;
1639         info->CreationTime = cpu_to_le64(ksmbd_kstat->create_time);
1640         time = ksmbd_UnixTimeToNT(kstat->atime);
1641         info->LastAccessTime = cpu_to_le64(time);
1642         time = ksmbd_UnixTimeToNT(kstat->mtime);
1643         info->LastWriteTime = cpu_to_le64(time);
1644         time = ksmbd_UnixTimeToNT(kstat->ctime);
1645         info->ChangeTime = cpu_to_le64(time);
1646
1647         if (ksmbd_kstat->file_attributes & FILE_ATTRIBUTE_DIRECTORY_LE) {
1648                 info->EndOfFile = 0;
1649                 info->AllocationSize = 0;
1650         } else {
1651                 info->EndOfFile = cpu_to_le64(kstat->size);
1652                 info->AllocationSize = cpu_to_le64(kstat->blocks << 9);
1653         }
1654         info->ExtFileAttributes = ksmbd_kstat->file_attributes;
1655
1656         return info;
1657 }
1658
1659 int ksmbd_vfs_fill_dentry_attrs(struct ksmbd_work *work,
1660                                 struct mnt_idmap *idmap,
1661                                 struct dentry *dentry,
1662                                 struct ksmbd_kstat *ksmbd_kstat)
1663 {
1664         u64 time;
1665         int rc;
1666
1667         generic_fillattr(idmap, d_inode(dentry), ksmbd_kstat->kstat);
1668
1669         time = ksmbd_UnixTimeToNT(ksmbd_kstat->kstat->ctime);
1670         ksmbd_kstat->create_time = time;
1671
1672         /*
1673          * set default value for the case that store dos attributes is not yes
1674          * or that acl is disable in server's filesystem and the config is yes.
1675          */
1676         if (S_ISDIR(ksmbd_kstat->kstat->mode))
1677                 ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_DIRECTORY_LE;
1678         else
1679                 ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_ARCHIVE_LE;
1680
1681         if (test_share_config_flag(work->tcon->share_conf,
1682                                    KSMBD_SHARE_FLAG_STORE_DOS_ATTRS)) {
1683                 struct xattr_dos_attrib da;
1684
1685                 rc = ksmbd_vfs_get_dos_attrib_xattr(mnt_idmap_owner(idmap), dentry, &da);
1686                 if (rc > 0) {
1687                         ksmbd_kstat->file_attributes = cpu_to_le32(da.attr);
1688                         ksmbd_kstat->create_time = da.create_time;
1689                 } else {
1690                         ksmbd_debug(VFS, "fail to load dos attribute.\n");
1691                 }
1692         }
1693
1694         return 0;
1695 }
1696
1697 ssize_t ksmbd_vfs_casexattr_len(struct user_namespace *user_ns,
1698                                 struct dentry *dentry, char *attr_name,
1699                                 int attr_name_len)
1700 {
1701         char *name, *xattr_list = NULL;
1702         ssize_t value_len = -ENOENT, xattr_list_len;
1703
1704         xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1705         if (xattr_list_len <= 0)
1706                 goto out;
1707
1708         for (name = xattr_list; name - xattr_list < xattr_list_len;
1709                         name += strlen(name) + 1) {
1710                 ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
1711                 if (strncasecmp(attr_name, name, attr_name_len))
1712                         continue;
1713
1714                 value_len = ksmbd_vfs_xattr_len(user_ns, dentry, name);
1715                 break;
1716         }
1717
1718 out:
1719         kvfree(xattr_list);
1720         return value_len;
1721 }
1722
1723 int ksmbd_vfs_xattr_stream_name(char *stream_name, char **xattr_stream_name,
1724                                 size_t *xattr_stream_name_size, int s_type)
1725 {
1726         char *type, *buf;
1727
1728         if (s_type == DIR_STREAM)
1729                 type = ":$INDEX_ALLOCATION";
1730         else
1731                 type = ":$DATA";
1732
1733         buf = kasprintf(GFP_KERNEL, "%s%s%s",
1734                         XATTR_NAME_STREAM, stream_name, type);
1735         if (!buf)
1736                 return -ENOMEM;
1737
1738         *xattr_stream_name = buf;
1739         *xattr_stream_name_size = strlen(buf) + 1;
1740
1741         return 0;
1742 }
1743
1744 int ksmbd_vfs_copy_file_ranges(struct ksmbd_work *work,
1745                                struct ksmbd_file *src_fp,
1746                                struct ksmbd_file *dst_fp,
1747                                struct srv_copychunk *chunks,
1748                                unsigned int chunk_count,
1749                                unsigned int *chunk_count_written,
1750                                unsigned int *chunk_size_written,
1751                                loff_t *total_size_written)
1752 {
1753         unsigned int i;
1754         loff_t src_off, dst_off, src_file_size;
1755         size_t len;
1756         int ret;
1757
1758         *chunk_count_written = 0;
1759         *chunk_size_written = 0;
1760         *total_size_written = 0;
1761
1762         if (!(src_fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
1763                 pr_err("no right to read(%pD)\n", src_fp->filp);
1764                 return -EACCES;
1765         }
1766         if (!(dst_fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE))) {
1767                 pr_err("no right to write(%pD)\n", dst_fp->filp);
1768                 return -EACCES;
1769         }
1770
1771         if (ksmbd_stream_fd(src_fp) || ksmbd_stream_fd(dst_fp))
1772                 return -EBADF;
1773
1774         smb_break_all_levII_oplock(work, dst_fp, 1);
1775
1776         if (!work->tcon->posix_extensions) {
1777                 for (i = 0; i < chunk_count; i++) {
1778                         src_off = le64_to_cpu(chunks[i].SourceOffset);
1779                         dst_off = le64_to_cpu(chunks[i].TargetOffset);
1780                         len = le32_to_cpu(chunks[i].Length);
1781
1782                         if (check_lock_range(src_fp->filp, src_off,
1783                                              src_off + len - 1, READ))
1784                                 return -EAGAIN;
1785                         if (check_lock_range(dst_fp->filp, dst_off,
1786                                              dst_off + len - 1, WRITE))
1787                                 return -EAGAIN;
1788                 }
1789         }
1790
1791         src_file_size = i_size_read(file_inode(src_fp->filp));
1792
1793         for (i = 0; i < chunk_count; i++) {
1794                 src_off = le64_to_cpu(chunks[i].SourceOffset);
1795                 dst_off = le64_to_cpu(chunks[i].TargetOffset);
1796                 len = le32_to_cpu(chunks[i].Length);
1797
1798                 if (src_off + len > src_file_size)
1799                         return -E2BIG;
1800
1801                 ret = vfs_copy_file_range(src_fp->filp, src_off,
1802                                           dst_fp->filp, dst_off, len, 0);
1803                 if (ret == -EOPNOTSUPP || ret == -EXDEV)
1804                         ret = vfs_copy_file_range(src_fp->filp, src_off,
1805                                                   dst_fp->filp, dst_off, len,
1806                                                   COPY_FILE_SPLICE);
1807                 if (ret < 0)
1808                         return ret;
1809
1810                 *chunk_count_written += 1;
1811                 *total_size_written += ret;
1812         }
1813         return 0;
1814 }
1815
1816 void ksmbd_vfs_posix_lock_wait(struct file_lock *flock)
1817 {
1818         wait_event(flock->fl_wait, !flock->fl_blocker);
1819 }
1820
1821 int ksmbd_vfs_posix_lock_wait_timeout(struct file_lock *flock, long timeout)
1822 {
1823         return wait_event_interruptible_timeout(flock->fl_wait,
1824                                                 !flock->fl_blocker,
1825                                                 timeout);
1826 }
1827
1828 void ksmbd_vfs_posix_lock_unblock(struct file_lock *flock)
1829 {
1830         locks_delete_block(flock);
1831 }
1832
1833 int ksmbd_vfs_set_init_posix_acl(struct mnt_idmap *idmap,
1834                                  struct dentry *dentry)
1835 {
1836         struct posix_acl_state acl_state;
1837         struct posix_acl *acls;
1838         struct inode *inode = d_inode(dentry);
1839         int rc;
1840
1841         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1842                 return -EOPNOTSUPP;
1843
1844         ksmbd_debug(SMB, "Set posix acls\n");
1845         rc = init_acl_state(&acl_state, 1);
1846         if (rc)
1847                 return rc;
1848
1849         /* Set default owner group */
1850         acl_state.owner.allow = (inode->i_mode & 0700) >> 6;
1851         acl_state.group.allow = (inode->i_mode & 0070) >> 3;
1852         acl_state.other.allow = inode->i_mode & 0007;
1853         acl_state.users->aces[acl_state.users->n].uid = inode->i_uid;
1854         acl_state.users->aces[acl_state.users->n++].perms.allow =
1855                 acl_state.owner.allow;
1856         acl_state.groups->aces[acl_state.groups->n].gid = inode->i_gid;
1857         acl_state.groups->aces[acl_state.groups->n++].perms.allow =
1858                 acl_state.group.allow;
1859         acl_state.mask.allow = 0x07;
1860
1861         acls = posix_acl_alloc(6, GFP_KERNEL);
1862         if (!acls) {
1863                 free_acl_state(&acl_state);
1864                 return -ENOMEM;
1865         }
1866         posix_state_to_acl(&acl_state, acls->a_entries);
1867         rc = set_posix_acl(idmap, dentry, ACL_TYPE_ACCESS, acls);
1868         if (rc < 0)
1869                 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1870                             rc);
1871         else if (S_ISDIR(inode->i_mode)) {
1872                 posix_state_to_acl(&acl_state, acls->a_entries);
1873                 rc = set_posix_acl(idmap, dentry, ACL_TYPE_DEFAULT, acls);
1874                 if (rc < 0)
1875                         ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1876                                     rc);
1877         }
1878         free_acl_state(&acl_state);
1879         posix_acl_release(acls);
1880         return rc;
1881 }
1882
1883 int ksmbd_vfs_inherit_posix_acl(struct mnt_idmap *idmap,
1884                                 struct dentry *dentry, struct inode *parent_inode)
1885 {
1886         struct posix_acl *acls;
1887         struct posix_acl_entry *pace;
1888         struct inode *inode = d_inode(dentry);
1889         int rc, i;
1890
1891         if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1892                 return -EOPNOTSUPP;
1893
1894         acls = get_inode_acl(parent_inode, ACL_TYPE_DEFAULT);
1895         if (!acls)
1896                 return -ENOENT;
1897         pace = acls->a_entries;
1898
1899         for (i = 0; i < acls->a_count; i++, pace++) {
1900                 if (pace->e_tag == ACL_MASK) {
1901                         pace->e_perm = 0x07;
1902                         break;
1903                 }
1904         }
1905
1906         rc = set_posix_acl(idmap, dentry, ACL_TYPE_ACCESS, acls);
1907         if (rc < 0)
1908                 ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1909                             rc);
1910         if (S_ISDIR(inode->i_mode)) {
1911                 rc = set_posix_acl(idmap, dentry, ACL_TYPE_DEFAULT,
1912                                    acls);
1913                 if (rc < 0)
1914                         ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1915                                     rc);
1916         }
1917         posix_acl_release(acls);
1918         return rc;
1919 }