xref: /kernel/linux/linux-6.6/fs/smb/server/vfs.c (revision 62306a36)
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 *   Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org>
4 *   Copyright (C) 2018 Samsung Electronics Co., Ltd.
5 */
6
7#include <linux/kernel.h>
8#include <linux/fs.h>
9#include <linux/filelock.h>
10#include <linux/uaccess.h>
11#include <linux/backing-dev.h>
12#include <linux/writeback.h>
13#include <linux/xattr.h>
14#include <linux/falloc.h>
15#include <linux/fsnotify.h>
16#include <linux/dcache.h>
17#include <linux/slab.h>
18#include <linux/vmalloc.h>
19#include <linux/sched/xacct.h>
20#include <linux/crc32c.h>
21#include <linux/namei.h>
22
23#include "glob.h"
24#include "oplock.h"
25#include "connection.h"
26#include "vfs.h"
27#include "vfs_cache.h"
28#include "smbacl.h"
29#include "ndr.h"
30#include "auth.h"
31#include "misc.h"
32
33#include "smb_common.h"
34#include "mgmt/share_config.h"
35#include "mgmt/tree_connect.h"
36#include "mgmt/user_session.h"
37#include "mgmt/user_config.h"
38
39static void ksmbd_vfs_inherit_owner(struct ksmbd_work *work,
40				    struct inode *parent_inode,
41				    struct inode *inode)
42{
43	if (!test_share_config_flag(work->tcon->share_conf,
44				    KSMBD_SHARE_FLAG_INHERIT_OWNER))
45		return;
46
47	i_uid_write(inode, i_uid_read(parent_inode));
48}
49
50/**
51 * ksmbd_vfs_lock_parent() - lock parent dentry if it is stable
52 */
53int ksmbd_vfs_lock_parent(struct dentry *parent, struct dentry *child)
54{
55	inode_lock_nested(d_inode(parent), I_MUTEX_PARENT);
56	if (child->d_parent != parent) {
57		inode_unlock(d_inode(parent));
58		return -ENOENT;
59	}
60
61	return 0;
62}
63
64static int ksmbd_vfs_path_lookup_locked(struct ksmbd_share_config *share_conf,
65					char *pathname, unsigned int flags,
66					struct path *parent_path,
67					struct path *path)
68{
69	struct qstr last;
70	struct filename *filename;
71	struct path *root_share_path = &share_conf->vfs_path;
72	int err, type;
73	struct dentry *d;
74
75	if (pathname[0] == '\0') {
76		pathname = share_conf->path;
77		root_share_path = NULL;
78	} else {
79		flags |= LOOKUP_BENEATH;
80	}
81
82	filename = getname_kernel(pathname);
83	if (IS_ERR(filename))
84		return PTR_ERR(filename);
85
86	err = vfs_path_parent_lookup(filename, flags,
87				     parent_path, &last, &type,
88				     root_share_path);
89	if (err) {
90		putname(filename);
91		return err;
92	}
93
94	if (unlikely(type != LAST_NORM)) {
95		path_put(parent_path);
96		putname(filename);
97		return -ENOENT;
98	}
99
100	err = mnt_want_write(parent_path->mnt);
101	if (err) {
102		path_put(parent_path);
103		putname(filename);
104		return -ENOENT;
105	}
106
107	inode_lock_nested(parent_path->dentry->d_inode, I_MUTEX_PARENT);
108	d = lookup_one_qstr_excl(&last, parent_path->dentry, 0);
109	if (IS_ERR(d))
110		goto err_out;
111
112	if (d_is_negative(d)) {
113		dput(d);
114		goto err_out;
115	}
116
117	path->dentry = d;
118	path->mnt = mntget(parent_path->mnt);
119
120	if (test_share_config_flag(share_conf, KSMBD_SHARE_FLAG_CROSSMNT)) {
121		err = follow_down(path, 0);
122		if (err < 0) {
123			path_put(path);
124			goto err_out;
125		}
126	}
127
128	putname(filename);
129	return 0;
130
131err_out:
132	inode_unlock(d_inode(parent_path->dentry));
133	mnt_drop_write(parent_path->mnt);
134	path_put(parent_path);
135	putname(filename);
136	return -ENOENT;
137}
138
139void ksmbd_vfs_query_maximal_access(struct mnt_idmap *idmap,
140				   struct dentry *dentry, __le32 *daccess)
141{
142	*daccess = cpu_to_le32(FILE_READ_ATTRIBUTES | READ_CONTROL);
143
144	if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_WRITE))
145		*daccess |= cpu_to_le32(WRITE_DAC | WRITE_OWNER | SYNCHRONIZE |
146				FILE_WRITE_DATA | FILE_APPEND_DATA |
147				FILE_WRITE_EA | FILE_WRITE_ATTRIBUTES |
148				FILE_DELETE_CHILD);
149
150	if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_READ))
151		*daccess |= FILE_READ_DATA_LE | FILE_READ_EA_LE;
152
153	if (!inode_permission(idmap, d_inode(dentry), MAY_OPEN | MAY_EXEC))
154		*daccess |= FILE_EXECUTE_LE;
155
156	if (!inode_permission(idmap, d_inode(dentry->d_parent), MAY_EXEC | MAY_WRITE))
157		*daccess |= FILE_DELETE_LE;
158}
159
160/**
161 * ksmbd_vfs_create() - vfs helper for smb create file
162 * @work:	work
163 * @name:	file name that is relative to share
164 * @mode:	file create mode
165 *
166 * Return:	0 on success, otherwise error
167 */
168int ksmbd_vfs_create(struct ksmbd_work *work, const char *name, umode_t mode)
169{
170	struct path path;
171	struct dentry *dentry;
172	int err;
173
174	dentry = ksmbd_vfs_kern_path_create(work, name,
175					    LOOKUP_NO_SYMLINKS, &path);
176	if (IS_ERR(dentry)) {
177		err = PTR_ERR(dentry);
178		if (err != -ENOENT)
179			pr_err("path create failed for %s, err %d\n",
180			       name, err);
181		return err;
182	}
183
184	mode |= S_IFREG;
185	err = vfs_create(mnt_idmap(path.mnt), d_inode(path.dentry),
186			 dentry, mode, true);
187	if (!err) {
188		ksmbd_vfs_inherit_owner(work, d_inode(path.dentry),
189					d_inode(dentry));
190	} else {
191		pr_err("File(%s): creation failed (err:%d)\n", name, err);
192	}
193
194	done_path_create(&path, dentry);
195	return err;
196}
197
198/**
199 * ksmbd_vfs_mkdir() - vfs helper for smb create directory
200 * @work:	work
201 * @name:	directory name that is relative to share
202 * @mode:	directory create mode
203 *
204 * Return:	0 on success, otherwise error
205 */
206int ksmbd_vfs_mkdir(struct ksmbd_work *work, const char *name, umode_t mode)
207{
208	struct mnt_idmap *idmap;
209	struct path path;
210	struct dentry *dentry;
211	int err;
212
213	dentry = ksmbd_vfs_kern_path_create(work, name,
214					    LOOKUP_NO_SYMLINKS | LOOKUP_DIRECTORY,
215					    &path);
216	if (IS_ERR(dentry)) {
217		err = PTR_ERR(dentry);
218		if (err != -EEXIST)
219			ksmbd_debug(VFS, "path create failed for %s, err %d\n",
220				    name, err);
221		return err;
222	}
223
224	idmap = mnt_idmap(path.mnt);
225	mode |= S_IFDIR;
226	err = vfs_mkdir(idmap, d_inode(path.dentry), dentry, mode);
227	if (!err && d_unhashed(dentry)) {
228		struct dentry *d;
229
230		d = lookup_one(idmap, dentry->d_name.name, dentry->d_parent,
231			       dentry->d_name.len);
232		if (IS_ERR(d)) {
233			err = PTR_ERR(d);
234			goto out_err;
235		}
236		if (unlikely(d_is_negative(d))) {
237			dput(d);
238			err = -ENOENT;
239			goto out_err;
240		}
241
242		ksmbd_vfs_inherit_owner(work, d_inode(path.dentry), d_inode(d));
243		dput(d);
244	}
245
246out_err:
247	done_path_create(&path, dentry);
248	if (err)
249		pr_err("mkdir(%s): creation failed (err:%d)\n", name, err);
250	return err;
251}
252
253static ssize_t ksmbd_vfs_getcasexattr(struct mnt_idmap *idmap,
254				      struct dentry *dentry, char *attr_name,
255				      int attr_name_len, char **attr_value)
256{
257	char *name, *xattr_list = NULL;
258	ssize_t value_len = -ENOENT, xattr_list_len;
259
260	xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
261	if (xattr_list_len <= 0)
262		goto out;
263
264	for (name = xattr_list; name - xattr_list < xattr_list_len;
265			name += strlen(name) + 1) {
266		ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
267		if (strncasecmp(attr_name, name, attr_name_len))
268			continue;
269
270		value_len = ksmbd_vfs_getxattr(idmap,
271					       dentry,
272					       name,
273					       attr_value);
274		if (value_len < 0)
275			pr_err("failed to get xattr in file\n");
276		break;
277	}
278
279out:
280	kvfree(xattr_list);
281	return value_len;
282}
283
284static int ksmbd_vfs_stream_read(struct ksmbd_file *fp, char *buf, loff_t *pos,
285				 size_t count)
286{
287	ssize_t v_len;
288	char *stream_buf = NULL;
289
290	ksmbd_debug(VFS, "read stream data pos : %llu, count : %zd\n",
291		    *pos, count);
292
293	v_len = ksmbd_vfs_getcasexattr(file_mnt_idmap(fp->filp),
294				       fp->filp->f_path.dentry,
295				       fp->stream.name,
296				       fp->stream.size,
297				       &stream_buf);
298	if ((int)v_len <= 0)
299		return (int)v_len;
300
301	if (v_len <= *pos) {
302		count = -EINVAL;
303		goto free_buf;
304	}
305
306	if (v_len - *pos < count)
307		count = v_len - *pos;
308
309	memcpy(buf, &stream_buf[*pos], count);
310
311free_buf:
312	kvfree(stream_buf);
313	return count;
314}
315
316/**
317 * check_lock_range() - vfs helper for smb byte range file locking
318 * @filp:	the file to apply the lock to
319 * @start:	lock start byte offset
320 * @end:	lock end byte offset
321 * @type:	byte range type read/write
322 *
323 * Return:	0 on success, otherwise error
324 */
325static int check_lock_range(struct file *filp, loff_t start, loff_t end,
326			    unsigned char type)
327{
328	struct file_lock *flock;
329	struct file_lock_context *ctx = locks_inode_context(file_inode(filp));
330	int error = 0;
331
332	if (!ctx || list_empty_careful(&ctx->flc_posix))
333		return 0;
334
335	spin_lock(&ctx->flc_lock);
336	list_for_each_entry(flock, &ctx->flc_posix, fl_list) {
337		/* check conflict locks */
338		if (flock->fl_end >= start && end >= flock->fl_start) {
339			if (flock->fl_type == F_RDLCK) {
340				if (type == WRITE) {
341					pr_err("not allow write by shared lock\n");
342					error = 1;
343					goto out;
344				}
345			} else if (flock->fl_type == F_WRLCK) {
346				/* check owner in lock */
347				if (flock->fl_file != filp) {
348					error = 1;
349					pr_err("not allow rw access by exclusive lock from other opens\n");
350					goto out;
351				}
352			}
353		}
354	}
355out:
356	spin_unlock(&ctx->flc_lock);
357	return error;
358}
359
360/**
361 * ksmbd_vfs_read() - vfs helper for smb file read
362 * @work:	smb work
363 * @fid:	file id of open file
364 * @count:	read byte count
365 * @pos:	file pos
366 * @rbuf:	read data buffer
367 *
368 * Return:	number of read bytes on success, otherwise error
369 */
370int ksmbd_vfs_read(struct ksmbd_work *work, struct ksmbd_file *fp, size_t count,
371		   loff_t *pos, char *rbuf)
372{
373	struct file *filp = fp->filp;
374	ssize_t nbytes = 0;
375	struct inode *inode = file_inode(filp);
376
377	if (S_ISDIR(inode->i_mode))
378		return -EISDIR;
379
380	if (unlikely(count == 0))
381		return 0;
382
383	if (work->conn->connection_type) {
384		if (!(fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
385			pr_err("no right to read(%pD)\n", fp->filp);
386			return -EACCES;
387		}
388	}
389
390	if (ksmbd_stream_fd(fp))
391		return ksmbd_vfs_stream_read(fp, rbuf, pos, count);
392
393	if (!work->tcon->posix_extensions) {
394		int ret;
395
396		ret = check_lock_range(filp, *pos, *pos + count - 1, READ);
397		if (ret) {
398			pr_err("unable to read due to lock\n");
399			return -EAGAIN;
400		}
401	}
402
403	nbytes = kernel_read(filp, rbuf, count, pos);
404	if (nbytes < 0) {
405		pr_err("smb read failed, err = %zd\n", nbytes);
406		return nbytes;
407	}
408
409	filp->f_pos = *pos;
410	return nbytes;
411}
412
413static int ksmbd_vfs_stream_write(struct ksmbd_file *fp, char *buf, loff_t *pos,
414				  size_t count)
415{
416	char *stream_buf = NULL, *wbuf;
417	struct mnt_idmap *idmap = file_mnt_idmap(fp->filp);
418	size_t size;
419	ssize_t v_len;
420	int err = 0;
421
422	ksmbd_debug(VFS, "write stream data pos : %llu, count : %zd\n",
423		    *pos, count);
424
425	size = *pos + count;
426	if (size > XATTR_SIZE_MAX) {
427		size = XATTR_SIZE_MAX;
428		count = (*pos + count) - XATTR_SIZE_MAX;
429	}
430
431	v_len = ksmbd_vfs_getcasexattr(idmap,
432				       fp->filp->f_path.dentry,
433				       fp->stream.name,
434				       fp->stream.size,
435				       &stream_buf);
436	if (v_len < 0) {
437		pr_err("not found stream in xattr : %zd\n", v_len);
438		err = v_len;
439		goto out;
440	}
441
442	if (v_len < size) {
443		wbuf = kvzalloc(size, GFP_KERNEL);
444		if (!wbuf) {
445			err = -ENOMEM;
446			goto out;
447		}
448
449		if (v_len > 0)
450			memcpy(wbuf, stream_buf, v_len);
451		kvfree(stream_buf);
452		stream_buf = wbuf;
453	}
454
455	memcpy(&stream_buf[*pos], buf, count);
456
457	err = ksmbd_vfs_setxattr(idmap,
458				 &fp->filp->f_path,
459				 fp->stream.name,
460				 (void *)stream_buf,
461				 size,
462				 0,
463				 true);
464	if (err < 0)
465		goto out;
466
467	fp->filp->f_pos = *pos;
468	err = 0;
469out:
470	kvfree(stream_buf);
471	return err;
472}
473
474/**
475 * ksmbd_vfs_write() - vfs helper for smb file write
476 * @work:	work
477 * @fid:	file id of open file
478 * @buf:	buf containing data for writing
479 * @count:	read byte count
480 * @pos:	file pos
481 * @sync:	fsync after write
482 * @written:	number of bytes written
483 *
484 * Return:	0 on success, otherwise error
485 */
486int ksmbd_vfs_write(struct ksmbd_work *work, struct ksmbd_file *fp,
487		    char *buf, size_t count, loff_t *pos, bool sync,
488		    ssize_t *written)
489{
490	struct file *filp;
491	loff_t	offset = *pos;
492	int err = 0;
493
494	if (work->conn->connection_type) {
495		if (!(fp->daccess & FILE_WRITE_DATA_LE)) {
496			pr_err("no right to write(%pD)\n", fp->filp);
497			err = -EACCES;
498			goto out;
499		}
500	}
501
502	filp = fp->filp;
503
504	if (ksmbd_stream_fd(fp)) {
505		err = ksmbd_vfs_stream_write(fp, buf, pos, count);
506		if (!err)
507			*written = count;
508		goto out;
509	}
510
511	if (!work->tcon->posix_extensions) {
512		err = check_lock_range(filp, *pos, *pos + count - 1, WRITE);
513		if (err) {
514			pr_err("unable to write due to lock\n");
515			err = -EAGAIN;
516			goto out;
517		}
518	}
519
520	/* Reserve lease break for parent dir at closing time */
521	fp->reserve_lease_break = true;
522
523	/* Do we need to break any of a levelII oplock? */
524	smb_break_all_levII_oplock(work, fp, 1);
525
526	err = kernel_write(filp, buf, count, pos);
527	if (err < 0) {
528		ksmbd_debug(VFS, "smb write failed, err = %d\n", err);
529		goto out;
530	}
531
532	filp->f_pos = *pos;
533	*written = err;
534	err = 0;
535	if (sync) {
536		err = vfs_fsync_range(filp, offset, offset + *written, 0);
537		if (err < 0)
538			pr_err("fsync failed for filename = %pD, err = %d\n",
539			       fp->filp, err);
540	}
541
542out:
543	return err;
544}
545
546/**
547 * ksmbd_vfs_getattr() - vfs helper for smb getattr
548 * @work:	work
549 * @fid:	file id of open file
550 * @attrs:	inode attributes
551 *
552 * Return:	0 on success, otherwise error
553 */
554int ksmbd_vfs_getattr(const struct path *path, struct kstat *stat)
555{
556	int err;
557
558	err = vfs_getattr(path, stat, STATX_BTIME, AT_STATX_SYNC_AS_STAT);
559	if (err)
560		pr_err("getattr failed, err %d\n", err);
561	return err;
562}
563
564/**
565 * ksmbd_vfs_fsync() - vfs helper for smb fsync
566 * @work:	work
567 * @fid:	file id of open file
568 *
569 * Return:	0 on success, otherwise error
570 */
571int ksmbd_vfs_fsync(struct ksmbd_work *work, u64 fid, u64 p_id)
572{
573	struct ksmbd_file *fp;
574	int err;
575
576	fp = ksmbd_lookup_fd_slow(work, fid, p_id);
577	if (!fp) {
578		pr_err("failed to get filp for fid %llu\n", fid);
579		return -ENOENT;
580	}
581	err = vfs_fsync(fp->filp, 0);
582	if (err < 0)
583		pr_err("smb fsync failed, err = %d\n", err);
584	ksmbd_fd_put(work, fp);
585	return err;
586}
587
588/**
589 * ksmbd_vfs_remove_file() - vfs helper for smb rmdir or unlink
590 * @name:	directory or file name that is relative to share
591 *
592 * Return:	0 on success, otherwise error
593 */
594int ksmbd_vfs_remove_file(struct ksmbd_work *work, const struct path *path)
595{
596	struct mnt_idmap *idmap;
597	struct dentry *parent = path->dentry->d_parent;
598	int err;
599
600	if (ksmbd_override_fsids(work))
601		return -ENOMEM;
602
603	if (!d_inode(path->dentry)->i_nlink) {
604		err = -ENOENT;
605		goto out_err;
606	}
607
608	idmap = mnt_idmap(path->mnt);
609	if (S_ISDIR(d_inode(path->dentry)->i_mode)) {
610		err = vfs_rmdir(idmap, d_inode(parent), path->dentry);
611		if (err && err != -ENOTEMPTY)
612			ksmbd_debug(VFS, "rmdir failed, err %d\n", err);
613	} else {
614		err = vfs_unlink(idmap, d_inode(parent), path->dentry, NULL);
615		if (err)
616			ksmbd_debug(VFS, "unlink failed, err %d\n", err);
617	}
618
619out_err:
620	ksmbd_revert_fsids(work);
621	return err;
622}
623
624/**
625 * ksmbd_vfs_link() - vfs helper for creating smb hardlink
626 * @oldname:	source file name
627 * @newname:	hardlink name that is relative to share
628 *
629 * Return:	0 on success, otherwise error
630 */
631int ksmbd_vfs_link(struct ksmbd_work *work, const char *oldname,
632		   const char *newname)
633{
634	struct path oldpath, newpath;
635	struct dentry *dentry;
636	int err;
637
638	if (ksmbd_override_fsids(work))
639		return -ENOMEM;
640
641	err = kern_path(oldname, LOOKUP_NO_SYMLINKS, &oldpath);
642	if (err) {
643		pr_err("cannot get linux path for %s, err = %d\n",
644		       oldname, err);
645		goto out1;
646	}
647
648	dentry = ksmbd_vfs_kern_path_create(work, newname,
649					    LOOKUP_NO_SYMLINKS | LOOKUP_REVAL,
650					    &newpath);
651	if (IS_ERR(dentry)) {
652		err = PTR_ERR(dentry);
653		pr_err("path create err for %s, err %d\n", newname, err);
654		goto out2;
655	}
656
657	err = -EXDEV;
658	if (oldpath.mnt != newpath.mnt) {
659		pr_err("vfs_link failed err %d\n", err);
660		goto out3;
661	}
662
663	err = vfs_link(oldpath.dentry, mnt_idmap(newpath.mnt),
664		       d_inode(newpath.dentry),
665		       dentry, NULL);
666	if (err)
667		ksmbd_debug(VFS, "vfs_link failed err %d\n", err);
668
669out3:
670	done_path_create(&newpath, dentry);
671out2:
672	path_put(&oldpath);
673out1:
674	ksmbd_revert_fsids(work);
675	return err;
676}
677
678int ksmbd_vfs_rename(struct ksmbd_work *work, const struct path *old_path,
679		     char *newname, int flags)
680{
681	struct dentry *old_parent, *new_dentry, *trap;
682	struct dentry *old_child = old_path->dentry;
683	struct path new_path;
684	struct qstr new_last;
685	struct renamedata rd;
686	struct filename *to;
687	struct ksmbd_share_config *share_conf = work->tcon->share_conf;
688	struct ksmbd_file *parent_fp;
689	int new_type;
690	int err, lookup_flags = LOOKUP_NO_SYMLINKS;
691
692	if (ksmbd_override_fsids(work))
693		return -ENOMEM;
694
695	to = getname_kernel(newname);
696	if (IS_ERR(to)) {
697		err = PTR_ERR(to);
698		goto revert_fsids;
699	}
700
701retry:
702	err = vfs_path_parent_lookup(to, lookup_flags | LOOKUP_BENEATH,
703				     &new_path, &new_last, &new_type,
704				     &share_conf->vfs_path);
705	if (err)
706		goto out1;
707
708	if (old_path->mnt != new_path.mnt) {
709		err = -EXDEV;
710		goto out2;
711	}
712
713	err = mnt_want_write(old_path->mnt);
714	if (err)
715		goto out2;
716
717	trap = lock_rename_child(old_child, new_path.dentry);
718
719	old_parent = dget(old_child->d_parent);
720	if (d_unhashed(old_child)) {
721		err = -EINVAL;
722		goto out3;
723	}
724
725	parent_fp = ksmbd_lookup_fd_inode(old_child->d_parent);
726	if (parent_fp) {
727		if (parent_fp->daccess & FILE_DELETE_LE) {
728			pr_err("parent dir is opened with delete access\n");
729			err = -ESHARE;
730			ksmbd_fd_put(work, parent_fp);
731			goto out3;
732		}
733		ksmbd_fd_put(work, parent_fp);
734	}
735
736	new_dentry = lookup_one_qstr_excl(&new_last, new_path.dentry,
737					  lookup_flags | LOOKUP_RENAME_TARGET);
738	if (IS_ERR(new_dentry)) {
739		err = PTR_ERR(new_dentry);
740		goto out3;
741	}
742
743	if (d_is_symlink(new_dentry)) {
744		err = -EACCES;
745		goto out4;
746	}
747
748	if ((flags & RENAME_NOREPLACE) && d_is_positive(new_dentry)) {
749		err = -EEXIST;
750		goto out4;
751	}
752
753	if (old_child == trap) {
754		err = -EINVAL;
755		goto out4;
756	}
757
758	if (new_dentry == trap) {
759		err = -ENOTEMPTY;
760		goto out4;
761	}
762
763	rd.old_mnt_idmap	= mnt_idmap(old_path->mnt),
764	rd.old_dir		= d_inode(old_parent),
765	rd.old_dentry		= old_child,
766	rd.new_mnt_idmap	= mnt_idmap(new_path.mnt),
767	rd.new_dir		= new_path.dentry->d_inode,
768	rd.new_dentry		= new_dentry,
769	rd.flags		= flags,
770	rd.delegated_inode	= NULL,
771	err = vfs_rename(&rd);
772	if (err)
773		ksmbd_debug(VFS, "vfs_rename failed err %d\n", err);
774
775out4:
776	dput(new_dentry);
777out3:
778	dput(old_parent);
779	unlock_rename(old_parent, new_path.dentry);
780	mnt_drop_write(old_path->mnt);
781out2:
782	path_put(&new_path);
783
784	if (retry_estale(err, lookup_flags)) {
785		lookup_flags |= LOOKUP_REVAL;
786		goto retry;
787	}
788out1:
789	putname(to);
790revert_fsids:
791	ksmbd_revert_fsids(work);
792	return err;
793}
794
795/**
796 * ksmbd_vfs_truncate() - vfs helper for smb file truncate
797 * @work:	work
798 * @fid:	file id of old file
799 * @size:	truncate to given size
800 *
801 * Return:	0 on success, otherwise error
802 */
803int ksmbd_vfs_truncate(struct ksmbd_work *work,
804		       struct ksmbd_file *fp, loff_t size)
805{
806	int err = 0;
807	struct file *filp;
808
809	filp = fp->filp;
810
811	/* Do we need to break any of a levelII oplock? */
812	smb_break_all_levII_oplock(work, fp, 1);
813
814	if (!work->tcon->posix_extensions) {
815		struct inode *inode = file_inode(filp);
816
817		if (size < inode->i_size) {
818			err = check_lock_range(filp, size,
819					       inode->i_size - 1, WRITE);
820		} else {
821			err = check_lock_range(filp, inode->i_size,
822					       size - 1, WRITE);
823		}
824
825		if (err) {
826			pr_err("failed due to lock\n");
827			return -EAGAIN;
828		}
829	}
830
831	err = vfs_truncate(&filp->f_path, size);
832	if (err)
833		pr_err("truncate failed, err %d\n", err);
834	return err;
835}
836
837/**
838 * ksmbd_vfs_listxattr() - vfs helper for smb list extended attributes
839 * @dentry:	dentry of file for listing xattrs
840 * @list:	destination buffer
841 * @size:	destination buffer length
842 *
843 * Return:	xattr list length on success, otherwise error
844 */
845ssize_t ksmbd_vfs_listxattr(struct dentry *dentry, char **list)
846{
847	ssize_t size;
848	char *vlist = NULL;
849
850	size = vfs_listxattr(dentry, NULL, 0);
851	if (size <= 0)
852		return size;
853
854	vlist = kvzalloc(size, GFP_KERNEL);
855	if (!vlist)
856		return -ENOMEM;
857
858	*list = vlist;
859	size = vfs_listxattr(dentry, vlist, size);
860	if (size < 0) {
861		ksmbd_debug(VFS, "listxattr failed\n");
862		kvfree(vlist);
863		*list = NULL;
864	}
865
866	return size;
867}
868
869static ssize_t ksmbd_vfs_xattr_len(struct mnt_idmap *idmap,
870				   struct dentry *dentry, char *xattr_name)
871{
872	return vfs_getxattr(idmap, dentry, xattr_name, NULL, 0);
873}
874
875/**
876 * ksmbd_vfs_getxattr() - vfs helper for smb get extended attributes value
877 * @idmap:	idmap
878 * @dentry:	dentry of file for getting xattrs
879 * @xattr_name:	name of xattr name to query
880 * @xattr_buf:	destination buffer xattr value
881 *
882 * Return:	read xattr value length on success, otherwise error
883 */
884ssize_t ksmbd_vfs_getxattr(struct mnt_idmap *idmap,
885			   struct dentry *dentry,
886			   char *xattr_name, char **xattr_buf)
887{
888	ssize_t xattr_len;
889	char *buf;
890
891	*xattr_buf = NULL;
892	xattr_len = ksmbd_vfs_xattr_len(idmap, dentry, xattr_name);
893	if (xattr_len < 0)
894		return xattr_len;
895
896	buf = kmalloc(xattr_len + 1, GFP_KERNEL);
897	if (!buf)
898		return -ENOMEM;
899
900	xattr_len = vfs_getxattr(idmap, dentry, xattr_name,
901				 (void *)buf, xattr_len);
902	if (xattr_len > 0)
903		*xattr_buf = buf;
904	else
905		kfree(buf);
906	return xattr_len;
907}
908
909/**
910 * ksmbd_vfs_setxattr() - vfs helper for smb set extended attributes value
911 * @idmap:	idmap of the relevant mount
912 * @path:	path of dentry to set XATTR at
913 * @attr_name:	xattr name for setxattr
914 * @attr_value:	xattr value to set
915 * @attr_size:	size of xattr value
916 * @flags:	destination buffer length
917 * @get_write:	get write access to a mount
918 *
919 * Return:	0 on success, otherwise error
920 */
921int ksmbd_vfs_setxattr(struct mnt_idmap *idmap,
922		       const struct path *path, const char *attr_name,
923		       void *attr_value, size_t attr_size, int flags,
924		       bool get_write)
925{
926	int err;
927
928	if (get_write == true) {
929		err = mnt_want_write(path->mnt);
930		if (err)
931			return err;
932	}
933
934	err = vfs_setxattr(idmap,
935			   path->dentry,
936			   attr_name,
937			   attr_value,
938			   attr_size,
939			   flags);
940	if (err)
941		ksmbd_debug(VFS, "setxattr failed, err %d\n", err);
942	if (get_write == true)
943		mnt_drop_write(path->mnt);
944	return err;
945}
946
947/**
948 * ksmbd_vfs_set_fadvise() - convert smb IO caching options to linux options
949 * @filp:	file pointer for IO
950 * @options:	smb IO options
951 */
952void ksmbd_vfs_set_fadvise(struct file *filp, __le32 option)
953{
954	struct address_space *mapping;
955
956	mapping = filp->f_mapping;
957
958	if (!option || !mapping)
959		return;
960
961	if (option & FILE_WRITE_THROUGH_LE) {
962		filp->f_flags |= O_SYNC;
963	} else if (option & FILE_SEQUENTIAL_ONLY_LE) {
964		filp->f_ra.ra_pages = inode_to_bdi(mapping->host)->ra_pages * 2;
965		spin_lock(&filp->f_lock);
966		filp->f_mode &= ~FMODE_RANDOM;
967		spin_unlock(&filp->f_lock);
968	} else if (option & FILE_RANDOM_ACCESS_LE) {
969		spin_lock(&filp->f_lock);
970		filp->f_mode |= FMODE_RANDOM;
971		spin_unlock(&filp->f_lock);
972	}
973}
974
975int ksmbd_vfs_zero_data(struct ksmbd_work *work, struct ksmbd_file *fp,
976			loff_t off, loff_t len)
977{
978	smb_break_all_levII_oplock(work, fp, 1);
979	if (fp->f_ci->m_fattr & FILE_ATTRIBUTE_SPARSE_FILE_LE)
980		return vfs_fallocate(fp->filp,
981				     FALLOC_FL_PUNCH_HOLE | FALLOC_FL_KEEP_SIZE,
982				     off, len);
983
984	return vfs_fallocate(fp->filp,
985			     FALLOC_FL_ZERO_RANGE | FALLOC_FL_KEEP_SIZE,
986			     off, len);
987}
988
989int ksmbd_vfs_fqar_lseek(struct ksmbd_file *fp, loff_t start, loff_t length,
990			 struct file_allocated_range_buffer *ranges,
991			 unsigned int in_count, unsigned int *out_count)
992{
993	struct file *f = fp->filp;
994	struct inode *inode = file_inode(fp->filp);
995	loff_t maxbytes = (u64)inode->i_sb->s_maxbytes, end;
996	loff_t extent_start, extent_end;
997	int ret = 0;
998
999	if (start > maxbytes)
1000		return -EFBIG;
1001
1002	if (!in_count)
1003		return 0;
1004
1005	/*
1006	 * Shrink request scope to what the fs can actually handle.
1007	 */
1008	if (length > maxbytes || (maxbytes - length) < start)
1009		length = maxbytes - start;
1010
1011	if (start + length > inode->i_size)
1012		length = inode->i_size - start;
1013
1014	*out_count = 0;
1015	end = start + length;
1016	while (start < end && *out_count < in_count) {
1017		extent_start = vfs_llseek(f, start, SEEK_DATA);
1018		if (extent_start < 0) {
1019			if (extent_start != -ENXIO)
1020				ret = (int)extent_start;
1021			break;
1022		}
1023
1024		if (extent_start >= end)
1025			break;
1026
1027		extent_end = vfs_llseek(f, extent_start, SEEK_HOLE);
1028		if (extent_end < 0) {
1029			if (extent_end != -ENXIO)
1030				ret = (int)extent_end;
1031			break;
1032		} else if (extent_start >= extent_end) {
1033			break;
1034		}
1035
1036		ranges[*out_count].file_offset = cpu_to_le64(extent_start);
1037		ranges[(*out_count)++].length =
1038			cpu_to_le64(min(extent_end, end) - extent_start);
1039
1040		start = extent_end;
1041	}
1042
1043	return ret;
1044}
1045
1046int ksmbd_vfs_remove_xattr(struct mnt_idmap *idmap,
1047			   const struct path *path, char *attr_name)
1048{
1049	int err;
1050
1051	err = mnt_want_write(path->mnt);
1052	if (err)
1053		return err;
1054
1055	err = vfs_removexattr(idmap, path->dentry, attr_name);
1056	mnt_drop_write(path->mnt);
1057
1058	return err;
1059}
1060
1061int ksmbd_vfs_unlink(struct file *filp)
1062{
1063	int err = 0;
1064	struct dentry *dir, *dentry = filp->f_path.dentry;
1065	struct mnt_idmap *idmap = file_mnt_idmap(filp);
1066
1067	err = mnt_want_write(filp->f_path.mnt);
1068	if (err)
1069		return err;
1070
1071	dir = dget_parent(dentry);
1072	err = ksmbd_vfs_lock_parent(dir, dentry);
1073	if (err)
1074		goto out;
1075	dget(dentry);
1076
1077	if (S_ISDIR(d_inode(dentry)->i_mode))
1078		err = vfs_rmdir(idmap, d_inode(dir), dentry);
1079	else
1080		err = vfs_unlink(idmap, d_inode(dir), dentry, NULL);
1081
1082	dput(dentry);
1083	inode_unlock(d_inode(dir));
1084	if (err)
1085		ksmbd_debug(VFS, "failed to delete, err %d\n", err);
1086out:
1087	dput(dir);
1088	mnt_drop_write(filp->f_path.mnt);
1089
1090	return err;
1091}
1092
1093static bool __dir_empty(struct dir_context *ctx, const char *name, int namlen,
1094		       loff_t offset, u64 ino, unsigned int d_type)
1095{
1096	struct ksmbd_readdir_data *buf;
1097
1098	buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1099	buf->dirent_count++;
1100
1101	return buf->dirent_count <= 2;
1102}
1103
1104/**
1105 * ksmbd_vfs_empty_dir() - check for empty directory
1106 * @fp:	ksmbd file pointer
1107 *
1108 * Return:	true if directory empty, otherwise false
1109 */
1110int ksmbd_vfs_empty_dir(struct ksmbd_file *fp)
1111{
1112	int err;
1113	struct ksmbd_readdir_data readdir_data;
1114
1115	memset(&readdir_data, 0, sizeof(struct ksmbd_readdir_data));
1116
1117	set_ctx_actor(&readdir_data.ctx, __dir_empty);
1118	readdir_data.dirent_count = 0;
1119
1120	err = iterate_dir(fp->filp, &readdir_data.ctx);
1121	if (readdir_data.dirent_count > 2)
1122		err = -ENOTEMPTY;
1123	else
1124		err = 0;
1125	return err;
1126}
1127
1128static bool __caseless_lookup(struct dir_context *ctx, const char *name,
1129			     int namlen, loff_t offset, u64 ino,
1130			     unsigned int d_type)
1131{
1132	struct ksmbd_readdir_data *buf;
1133	int cmp = -EINVAL;
1134
1135	buf = container_of(ctx, struct ksmbd_readdir_data, ctx);
1136
1137	if (buf->used != namlen)
1138		return true;
1139	if (IS_ENABLED(CONFIG_UNICODE) && buf->um) {
1140		const struct qstr q_buf = {.name = buf->private,
1141					   .len = buf->used};
1142		const struct qstr q_name = {.name = name,
1143					    .len = namlen};
1144
1145		cmp = utf8_strncasecmp(buf->um, &q_buf, &q_name);
1146	}
1147	if (cmp < 0)
1148		cmp = strncasecmp((char *)buf->private, name, namlen);
1149	if (!cmp) {
1150		memcpy((char *)buf->private, name, namlen);
1151		buf->dirent_count = 1;
1152		return false;
1153	}
1154	return true;
1155}
1156
1157/**
1158 * ksmbd_vfs_lookup_in_dir() - lookup a file in a directory
1159 * @dir:	path info
1160 * @name:	filename to lookup
1161 * @namelen:	filename length
1162 *
1163 * Return:	0 on success, otherwise error
1164 */
1165static int ksmbd_vfs_lookup_in_dir(const struct path *dir, char *name,
1166				   size_t namelen, struct unicode_map *um)
1167{
1168	int ret;
1169	struct file *dfilp;
1170	int flags = O_RDONLY | O_LARGEFILE;
1171	struct ksmbd_readdir_data readdir_data = {
1172		.ctx.actor	= __caseless_lookup,
1173		.private	= name,
1174		.used		= namelen,
1175		.dirent_count	= 0,
1176		.um		= um,
1177	};
1178
1179	dfilp = dentry_open(dir, flags, current_cred());
1180	if (IS_ERR(dfilp))
1181		return PTR_ERR(dfilp);
1182
1183	ret = iterate_dir(dfilp, &readdir_data.ctx);
1184	if (readdir_data.dirent_count > 0)
1185		ret = 0;
1186	fput(dfilp);
1187	return ret;
1188}
1189
1190/**
1191 * ksmbd_vfs_kern_path_locked() - lookup a file and get path info
1192 * @name:		file path that is relative to share
1193 * @flags:		lookup flags
1194 * @parent_path:	if lookup succeed, return parent_path info
1195 * @path:		if lookup succeed, return path info
1196 * @caseless:	caseless filename lookup
1197 *
1198 * Return:	0 on success, otherwise error
1199 */
1200int ksmbd_vfs_kern_path_locked(struct ksmbd_work *work, char *name,
1201			       unsigned int flags, struct path *parent_path,
1202			       struct path *path, bool caseless)
1203{
1204	struct ksmbd_share_config *share_conf = work->tcon->share_conf;
1205	int err;
1206
1207	err = ksmbd_vfs_path_lookup_locked(share_conf, name, flags, parent_path,
1208					   path);
1209	if (!err)
1210		return 0;
1211
1212	if (caseless) {
1213		char *filepath;
1214		size_t path_len, remain_len;
1215
1216		filepath = kstrdup(name, GFP_KERNEL);
1217		if (!filepath)
1218			return -ENOMEM;
1219
1220		path_len = strlen(filepath);
1221		remain_len = path_len;
1222
1223		*parent_path = share_conf->vfs_path;
1224		path_get(parent_path);
1225
1226		while (d_can_lookup(parent_path->dentry)) {
1227			char *filename = filepath + path_len - remain_len;
1228			char *next = strchrnul(filename, '/');
1229			size_t filename_len = next - filename;
1230			bool is_last = !next[0];
1231
1232			if (filename_len == 0)
1233				break;
1234
1235			err = ksmbd_vfs_lookup_in_dir(parent_path, filename,
1236						      filename_len,
1237						      work->conn->um);
1238			if (err)
1239				goto out2;
1240
1241			next[0] = '\0';
1242
1243			err = vfs_path_lookup(share_conf->vfs_path.dentry,
1244					      share_conf->vfs_path.mnt,
1245					      filepath,
1246					      flags,
1247					      path);
1248			if (err)
1249				goto out2;
1250			else if (is_last)
1251				goto out1;
1252			path_put(parent_path);
1253			*parent_path = *path;
1254
1255			next[0] = '/';
1256			remain_len -= filename_len + 1;
1257		}
1258
1259		err = -EINVAL;
1260out2:
1261		path_put(parent_path);
1262out1:
1263		kfree(filepath);
1264	}
1265
1266	if (!err) {
1267		err = mnt_want_write(parent_path->mnt);
1268		if (err) {
1269			path_put(path);
1270			path_put(parent_path);
1271			return err;
1272		}
1273
1274		err = ksmbd_vfs_lock_parent(parent_path->dentry, path->dentry);
1275		if (err) {
1276			path_put(path);
1277			path_put(parent_path);
1278		}
1279	}
1280	return err;
1281}
1282
1283void ksmbd_vfs_kern_path_unlock(struct path *parent_path, struct path *path)
1284{
1285	inode_unlock(d_inode(parent_path->dentry));
1286	mnt_drop_write(parent_path->mnt);
1287	path_put(path);
1288	path_put(parent_path);
1289}
1290
1291struct dentry *ksmbd_vfs_kern_path_create(struct ksmbd_work *work,
1292					  const char *name,
1293					  unsigned int flags,
1294					  struct path *path)
1295{
1296	char *abs_name;
1297	struct dentry *dent;
1298
1299	abs_name = convert_to_unix_name(work->tcon->share_conf, name);
1300	if (!abs_name)
1301		return ERR_PTR(-ENOMEM);
1302
1303	dent = kern_path_create(AT_FDCWD, abs_name, path, flags);
1304	kfree(abs_name);
1305	return dent;
1306}
1307
1308int ksmbd_vfs_remove_acl_xattrs(struct mnt_idmap *idmap,
1309				const struct path *path)
1310{
1311	char *name, *xattr_list = NULL;
1312	ssize_t xattr_list_len;
1313	int err = 0;
1314
1315	xattr_list_len = ksmbd_vfs_listxattr(path->dentry, &xattr_list);
1316	if (xattr_list_len < 0) {
1317		goto out;
1318	} else if (!xattr_list_len) {
1319		ksmbd_debug(SMB, "empty xattr in the file\n");
1320		goto out;
1321	}
1322
1323	err = mnt_want_write(path->mnt);
1324	if (err)
1325		goto out;
1326
1327	for (name = xattr_list; name - xattr_list < xattr_list_len;
1328	     name += strlen(name) + 1) {
1329		ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1330
1331		if (!strncmp(name, XATTR_NAME_POSIX_ACL_ACCESS,
1332			     sizeof(XATTR_NAME_POSIX_ACL_ACCESS) - 1) ||
1333		    !strncmp(name, XATTR_NAME_POSIX_ACL_DEFAULT,
1334			     sizeof(XATTR_NAME_POSIX_ACL_DEFAULT) - 1)) {
1335			err = vfs_remove_acl(idmap, path->dentry, name);
1336			if (err)
1337				ksmbd_debug(SMB,
1338					    "remove acl xattr failed : %s\n", name);
1339		}
1340	}
1341	mnt_drop_write(path->mnt);
1342
1343out:
1344	kvfree(xattr_list);
1345	return err;
1346}
1347
1348int ksmbd_vfs_remove_sd_xattrs(struct mnt_idmap *idmap, const struct path *path)
1349{
1350	char *name, *xattr_list = NULL;
1351	ssize_t xattr_list_len;
1352	int err = 0;
1353
1354	xattr_list_len = ksmbd_vfs_listxattr(path->dentry, &xattr_list);
1355	if (xattr_list_len < 0) {
1356		goto out;
1357	} else if (!xattr_list_len) {
1358		ksmbd_debug(SMB, "empty xattr in the file\n");
1359		goto out;
1360	}
1361
1362	for (name = xattr_list; name - xattr_list < xattr_list_len;
1363			name += strlen(name) + 1) {
1364		ksmbd_debug(SMB, "%s, len %zd\n", name, strlen(name));
1365
1366		if (!strncmp(name, XATTR_NAME_SD, XATTR_NAME_SD_LEN)) {
1367			err = ksmbd_vfs_remove_xattr(idmap, path, name);
1368			if (err)
1369				ksmbd_debug(SMB, "remove xattr failed : %s\n", name);
1370		}
1371	}
1372out:
1373	kvfree(xattr_list);
1374	return err;
1375}
1376
1377static struct xattr_smb_acl *ksmbd_vfs_make_xattr_posix_acl(struct mnt_idmap *idmap,
1378							    struct inode *inode,
1379							    int acl_type)
1380{
1381	struct xattr_smb_acl *smb_acl = NULL;
1382	struct posix_acl *posix_acls;
1383	struct posix_acl_entry *pa_entry;
1384	struct xattr_acl_entry *xa_entry;
1385	int i;
1386
1387	if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1388		return NULL;
1389
1390	posix_acls = get_inode_acl(inode, acl_type);
1391	if (IS_ERR_OR_NULL(posix_acls))
1392		return NULL;
1393
1394	smb_acl = kzalloc(sizeof(struct xattr_smb_acl) +
1395			  sizeof(struct xattr_acl_entry) * posix_acls->a_count,
1396			  GFP_KERNEL);
1397	if (!smb_acl)
1398		goto out;
1399
1400	smb_acl->count = posix_acls->a_count;
1401	pa_entry = posix_acls->a_entries;
1402	xa_entry = smb_acl->entries;
1403	for (i = 0; i < posix_acls->a_count; i++, pa_entry++, xa_entry++) {
1404		switch (pa_entry->e_tag) {
1405		case ACL_USER:
1406			xa_entry->type = SMB_ACL_USER;
1407			xa_entry->uid = posix_acl_uid_translate(idmap, pa_entry);
1408			break;
1409		case ACL_USER_OBJ:
1410			xa_entry->type = SMB_ACL_USER_OBJ;
1411			break;
1412		case ACL_GROUP:
1413			xa_entry->type = SMB_ACL_GROUP;
1414			xa_entry->gid = posix_acl_gid_translate(idmap, pa_entry);
1415			break;
1416		case ACL_GROUP_OBJ:
1417			xa_entry->type = SMB_ACL_GROUP_OBJ;
1418			break;
1419		case ACL_OTHER:
1420			xa_entry->type = SMB_ACL_OTHER;
1421			break;
1422		case ACL_MASK:
1423			xa_entry->type = SMB_ACL_MASK;
1424			break;
1425		default:
1426			pr_err("unknown type : 0x%x\n", pa_entry->e_tag);
1427			goto out;
1428		}
1429
1430		if (pa_entry->e_perm & ACL_READ)
1431			xa_entry->perm |= SMB_ACL_READ;
1432		if (pa_entry->e_perm & ACL_WRITE)
1433			xa_entry->perm |= SMB_ACL_WRITE;
1434		if (pa_entry->e_perm & ACL_EXECUTE)
1435			xa_entry->perm |= SMB_ACL_EXECUTE;
1436	}
1437out:
1438	posix_acl_release(posix_acls);
1439	return smb_acl;
1440}
1441
1442int ksmbd_vfs_set_sd_xattr(struct ksmbd_conn *conn,
1443			   struct mnt_idmap *idmap,
1444			   const struct path *path,
1445			   struct smb_ntsd *pntsd, int len,
1446			   bool get_write)
1447{
1448	int rc;
1449	struct ndr sd_ndr = {0}, acl_ndr = {0};
1450	struct xattr_ntacl acl = {0};
1451	struct xattr_smb_acl *smb_acl, *def_smb_acl = NULL;
1452	struct dentry *dentry = path->dentry;
1453	struct inode *inode = d_inode(dentry);
1454
1455	acl.version = 4;
1456	acl.hash_type = XATTR_SD_HASH_TYPE_SHA256;
1457	acl.current_time = ksmbd_UnixTimeToNT(current_time(inode));
1458
1459	memcpy(acl.desc, "posix_acl", 9);
1460	acl.desc_len = 10;
1461
1462	pntsd->osidoffset =
1463		cpu_to_le32(le32_to_cpu(pntsd->osidoffset) + NDR_NTSD_OFFSETOF);
1464	pntsd->gsidoffset =
1465		cpu_to_le32(le32_to_cpu(pntsd->gsidoffset) + NDR_NTSD_OFFSETOF);
1466	pntsd->dacloffset =
1467		cpu_to_le32(le32_to_cpu(pntsd->dacloffset) + NDR_NTSD_OFFSETOF);
1468
1469	acl.sd_buf = (char *)pntsd;
1470	acl.sd_size = len;
1471
1472	rc = ksmbd_gen_sd_hash(conn, acl.sd_buf, acl.sd_size, acl.hash);
1473	if (rc) {
1474		pr_err("failed to generate hash for ndr acl\n");
1475		return rc;
1476	}
1477
1478	smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode,
1479						 ACL_TYPE_ACCESS);
1480	if (S_ISDIR(inode->i_mode))
1481		def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode,
1482							     ACL_TYPE_DEFAULT);
1483
1484	rc = ndr_encode_posix_acl(&acl_ndr, idmap, inode,
1485				  smb_acl, def_smb_acl);
1486	if (rc) {
1487		pr_err("failed to encode ndr to posix acl\n");
1488		goto out;
1489	}
1490
1491	rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset,
1492			       acl.posix_acl_hash);
1493	if (rc) {
1494		pr_err("failed to generate hash for ndr acl\n");
1495		goto out;
1496	}
1497
1498	rc = ndr_encode_v4_ntacl(&sd_ndr, &acl);
1499	if (rc) {
1500		pr_err("failed to encode ndr to posix acl\n");
1501		goto out;
1502	}
1503
1504	rc = ksmbd_vfs_setxattr(idmap, path,
1505				XATTR_NAME_SD, sd_ndr.data,
1506				sd_ndr.offset, 0, get_write);
1507	if (rc < 0)
1508		pr_err("Failed to store XATTR ntacl :%d\n", rc);
1509
1510	kfree(sd_ndr.data);
1511out:
1512	kfree(acl_ndr.data);
1513	kfree(smb_acl);
1514	kfree(def_smb_acl);
1515	return rc;
1516}
1517
1518int ksmbd_vfs_get_sd_xattr(struct ksmbd_conn *conn,
1519			   struct mnt_idmap *idmap,
1520			   struct dentry *dentry,
1521			   struct smb_ntsd **pntsd)
1522{
1523	int rc;
1524	struct ndr n;
1525	struct inode *inode = d_inode(dentry);
1526	struct ndr acl_ndr = {0};
1527	struct xattr_ntacl acl;
1528	struct xattr_smb_acl *smb_acl = NULL, *def_smb_acl = NULL;
1529	__u8 cmp_hash[XATTR_SD_HASH_SIZE] = {0};
1530
1531	rc = ksmbd_vfs_getxattr(idmap, dentry, XATTR_NAME_SD, &n.data);
1532	if (rc <= 0)
1533		return rc;
1534
1535	n.length = rc;
1536	rc = ndr_decode_v4_ntacl(&n, &acl);
1537	if (rc)
1538		goto free_n_data;
1539
1540	smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode,
1541						 ACL_TYPE_ACCESS);
1542	if (S_ISDIR(inode->i_mode))
1543		def_smb_acl = ksmbd_vfs_make_xattr_posix_acl(idmap, inode,
1544							     ACL_TYPE_DEFAULT);
1545
1546	rc = ndr_encode_posix_acl(&acl_ndr, idmap, inode, smb_acl,
1547				  def_smb_acl);
1548	if (rc) {
1549		pr_err("failed to encode ndr to posix acl\n");
1550		goto out_free;
1551	}
1552
1553	rc = ksmbd_gen_sd_hash(conn, acl_ndr.data, acl_ndr.offset, cmp_hash);
1554	if (rc) {
1555		pr_err("failed to generate hash for ndr acl\n");
1556		goto out_free;
1557	}
1558
1559	if (memcmp(cmp_hash, acl.posix_acl_hash, XATTR_SD_HASH_SIZE)) {
1560		pr_err("hash value diff\n");
1561		rc = -EINVAL;
1562		goto out_free;
1563	}
1564
1565	*pntsd = acl.sd_buf;
1566	if (acl.sd_size < sizeof(struct smb_ntsd)) {
1567		pr_err("sd size is invalid\n");
1568		goto out_free;
1569	}
1570
1571	(*pntsd)->osidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->osidoffset) -
1572					   NDR_NTSD_OFFSETOF);
1573	(*pntsd)->gsidoffset = cpu_to_le32(le32_to_cpu((*pntsd)->gsidoffset) -
1574					   NDR_NTSD_OFFSETOF);
1575	(*pntsd)->dacloffset = cpu_to_le32(le32_to_cpu((*pntsd)->dacloffset) -
1576					   NDR_NTSD_OFFSETOF);
1577
1578	rc = acl.sd_size;
1579out_free:
1580	kfree(acl_ndr.data);
1581	kfree(smb_acl);
1582	kfree(def_smb_acl);
1583	if (rc < 0) {
1584		kfree(acl.sd_buf);
1585		*pntsd = NULL;
1586	}
1587
1588free_n_data:
1589	kfree(n.data);
1590	return rc;
1591}
1592
1593int ksmbd_vfs_set_dos_attrib_xattr(struct mnt_idmap *idmap,
1594				   const struct path *path,
1595				   struct xattr_dos_attrib *da,
1596				   bool get_write)
1597{
1598	struct ndr n;
1599	int err;
1600
1601	err = ndr_encode_dos_attr(&n, da);
1602	if (err)
1603		return err;
1604
1605	err = ksmbd_vfs_setxattr(idmap, path, XATTR_NAME_DOS_ATTRIBUTE,
1606				 (void *)n.data, n.offset, 0, get_write);
1607	if (err)
1608		ksmbd_debug(SMB, "failed to store dos attribute in xattr\n");
1609	kfree(n.data);
1610
1611	return err;
1612}
1613
1614int ksmbd_vfs_get_dos_attrib_xattr(struct mnt_idmap *idmap,
1615				   struct dentry *dentry,
1616				   struct xattr_dos_attrib *da)
1617{
1618	struct ndr n;
1619	int err;
1620
1621	err = ksmbd_vfs_getxattr(idmap, dentry, XATTR_NAME_DOS_ATTRIBUTE,
1622				 (char **)&n.data);
1623	if (err > 0) {
1624		n.length = err;
1625		if (ndr_decode_dos_attr(&n, da))
1626			err = -EINVAL;
1627		kfree(n.data);
1628	} else {
1629		ksmbd_debug(SMB, "failed to load dos attribute in xattr\n");
1630	}
1631
1632	return err;
1633}
1634
1635/**
1636 * ksmbd_vfs_init_kstat() - convert unix stat information to smb stat format
1637 * @p:          destination buffer
1638 * @ksmbd_kstat:      ksmbd kstat wrapper
1639 */
1640void *ksmbd_vfs_init_kstat(char **p, struct ksmbd_kstat *ksmbd_kstat)
1641{
1642	struct file_directory_info *info = (struct file_directory_info *)(*p);
1643	struct kstat *kstat = ksmbd_kstat->kstat;
1644	u64 time;
1645
1646	info->FileIndex = 0;
1647	info->CreationTime = cpu_to_le64(ksmbd_kstat->create_time);
1648	time = ksmbd_UnixTimeToNT(kstat->atime);
1649	info->LastAccessTime = cpu_to_le64(time);
1650	time = ksmbd_UnixTimeToNT(kstat->mtime);
1651	info->LastWriteTime = cpu_to_le64(time);
1652	time = ksmbd_UnixTimeToNT(kstat->ctime);
1653	info->ChangeTime = cpu_to_le64(time);
1654
1655	if (ksmbd_kstat->file_attributes & FILE_ATTRIBUTE_DIRECTORY_LE) {
1656		info->EndOfFile = 0;
1657		info->AllocationSize = 0;
1658	} else {
1659		info->EndOfFile = cpu_to_le64(kstat->size);
1660		info->AllocationSize = cpu_to_le64(kstat->blocks << 9);
1661	}
1662	info->ExtFileAttributes = ksmbd_kstat->file_attributes;
1663
1664	return info;
1665}
1666
1667int ksmbd_vfs_fill_dentry_attrs(struct ksmbd_work *work,
1668				struct mnt_idmap *idmap,
1669				struct dentry *dentry,
1670				struct ksmbd_kstat *ksmbd_kstat)
1671{
1672	u64 time;
1673	int rc;
1674
1675	generic_fillattr(idmap, STATX_BASIC_STATS, d_inode(dentry),
1676			 ksmbd_kstat->kstat);
1677
1678	time = ksmbd_UnixTimeToNT(ksmbd_kstat->kstat->ctime);
1679	ksmbd_kstat->create_time = time;
1680
1681	/*
1682	 * set default value for the case that store dos attributes is not yes
1683	 * or that acl is disable in server's filesystem and the config is yes.
1684	 */
1685	if (S_ISDIR(ksmbd_kstat->kstat->mode))
1686		ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_DIRECTORY_LE;
1687	else
1688		ksmbd_kstat->file_attributes = FILE_ATTRIBUTE_ARCHIVE_LE;
1689
1690	if (test_share_config_flag(work->tcon->share_conf,
1691				   KSMBD_SHARE_FLAG_STORE_DOS_ATTRS)) {
1692		struct xattr_dos_attrib da;
1693
1694		rc = ksmbd_vfs_get_dos_attrib_xattr(idmap, dentry, &da);
1695		if (rc > 0) {
1696			ksmbd_kstat->file_attributes = cpu_to_le32(da.attr);
1697			ksmbd_kstat->create_time = da.create_time;
1698		} else {
1699			ksmbd_debug(VFS, "fail to load dos attribute.\n");
1700		}
1701	}
1702
1703	return 0;
1704}
1705
1706ssize_t ksmbd_vfs_casexattr_len(struct mnt_idmap *idmap,
1707				struct dentry *dentry, char *attr_name,
1708				int attr_name_len)
1709{
1710	char *name, *xattr_list = NULL;
1711	ssize_t value_len = -ENOENT, xattr_list_len;
1712
1713	xattr_list_len = ksmbd_vfs_listxattr(dentry, &xattr_list);
1714	if (xattr_list_len <= 0)
1715		goto out;
1716
1717	for (name = xattr_list; name - xattr_list < xattr_list_len;
1718			name += strlen(name) + 1) {
1719		ksmbd_debug(VFS, "%s, len %zd\n", name, strlen(name));
1720		if (strncasecmp(attr_name, name, attr_name_len))
1721			continue;
1722
1723		value_len = ksmbd_vfs_xattr_len(idmap, dentry, name);
1724		break;
1725	}
1726
1727out:
1728	kvfree(xattr_list);
1729	return value_len;
1730}
1731
1732int ksmbd_vfs_xattr_stream_name(char *stream_name, char **xattr_stream_name,
1733				size_t *xattr_stream_name_size, int s_type)
1734{
1735	char *type, *buf;
1736
1737	if (s_type == DIR_STREAM)
1738		type = ":$INDEX_ALLOCATION";
1739	else
1740		type = ":$DATA";
1741
1742	buf = kasprintf(GFP_KERNEL, "%s%s%s",
1743			XATTR_NAME_STREAM, stream_name,	type);
1744	if (!buf)
1745		return -ENOMEM;
1746
1747	*xattr_stream_name = buf;
1748	*xattr_stream_name_size = strlen(buf) + 1;
1749
1750	return 0;
1751}
1752
1753int ksmbd_vfs_copy_file_ranges(struct ksmbd_work *work,
1754			       struct ksmbd_file *src_fp,
1755			       struct ksmbd_file *dst_fp,
1756			       struct srv_copychunk *chunks,
1757			       unsigned int chunk_count,
1758			       unsigned int *chunk_count_written,
1759			       unsigned int *chunk_size_written,
1760			       loff_t *total_size_written)
1761{
1762	unsigned int i;
1763	loff_t src_off, dst_off, src_file_size;
1764	size_t len;
1765	int ret;
1766
1767	*chunk_count_written = 0;
1768	*chunk_size_written = 0;
1769	*total_size_written = 0;
1770
1771	if (!(src_fp->daccess & (FILE_READ_DATA_LE | FILE_EXECUTE_LE))) {
1772		pr_err("no right to read(%pD)\n", src_fp->filp);
1773		return -EACCES;
1774	}
1775	if (!(dst_fp->daccess & (FILE_WRITE_DATA_LE | FILE_APPEND_DATA_LE))) {
1776		pr_err("no right to write(%pD)\n", dst_fp->filp);
1777		return -EACCES;
1778	}
1779
1780	if (ksmbd_stream_fd(src_fp) || ksmbd_stream_fd(dst_fp))
1781		return -EBADF;
1782
1783	smb_break_all_levII_oplock(work, dst_fp, 1);
1784
1785	if (!work->tcon->posix_extensions) {
1786		for (i = 0; i < chunk_count; i++) {
1787			src_off = le64_to_cpu(chunks[i].SourceOffset);
1788			dst_off = le64_to_cpu(chunks[i].TargetOffset);
1789			len = le32_to_cpu(chunks[i].Length);
1790
1791			if (check_lock_range(src_fp->filp, src_off,
1792					     src_off + len - 1, READ))
1793				return -EAGAIN;
1794			if (check_lock_range(dst_fp->filp, dst_off,
1795					     dst_off + len - 1, WRITE))
1796				return -EAGAIN;
1797		}
1798	}
1799
1800	src_file_size = i_size_read(file_inode(src_fp->filp));
1801
1802	for (i = 0; i < chunk_count; i++) {
1803		src_off = le64_to_cpu(chunks[i].SourceOffset);
1804		dst_off = le64_to_cpu(chunks[i].TargetOffset);
1805		len = le32_to_cpu(chunks[i].Length);
1806
1807		if (src_off + len > src_file_size)
1808			return -E2BIG;
1809
1810		ret = vfs_copy_file_range(src_fp->filp, src_off,
1811					  dst_fp->filp, dst_off, len, 0);
1812		if (ret == -EOPNOTSUPP || ret == -EXDEV)
1813			ret = vfs_copy_file_range(src_fp->filp, src_off,
1814						  dst_fp->filp, dst_off, len,
1815						  COPY_FILE_SPLICE);
1816		if (ret < 0)
1817			return ret;
1818
1819		*chunk_count_written += 1;
1820		*total_size_written += ret;
1821	}
1822	return 0;
1823}
1824
1825void ksmbd_vfs_posix_lock_wait(struct file_lock *flock)
1826{
1827	wait_event(flock->fl_wait, !flock->fl_blocker);
1828}
1829
1830int ksmbd_vfs_posix_lock_wait_timeout(struct file_lock *flock, long timeout)
1831{
1832	return wait_event_interruptible_timeout(flock->fl_wait,
1833						!flock->fl_blocker,
1834						timeout);
1835}
1836
1837void ksmbd_vfs_posix_lock_unblock(struct file_lock *flock)
1838{
1839	locks_delete_block(flock);
1840}
1841
1842int ksmbd_vfs_set_init_posix_acl(struct mnt_idmap *idmap,
1843				 struct path *path)
1844{
1845	struct posix_acl_state acl_state;
1846	struct posix_acl *acls;
1847	struct dentry *dentry = path->dentry;
1848	struct inode *inode = d_inode(dentry);
1849	int rc;
1850
1851	if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1852		return -EOPNOTSUPP;
1853
1854	ksmbd_debug(SMB, "Set posix acls\n");
1855	rc = init_acl_state(&acl_state, 1);
1856	if (rc)
1857		return rc;
1858
1859	/* Set default owner group */
1860	acl_state.owner.allow = (inode->i_mode & 0700) >> 6;
1861	acl_state.group.allow = (inode->i_mode & 0070) >> 3;
1862	acl_state.other.allow = inode->i_mode & 0007;
1863	acl_state.users->aces[acl_state.users->n].uid = inode->i_uid;
1864	acl_state.users->aces[acl_state.users->n++].perms.allow =
1865		acl_state.owner.allow;
1866	acl_state.groups->aces[acl_state.groups->n].gid = inode->i_gid;
1867	acl_state.groups->aces[acl_state.groups->n++].perms.allow =
1868		acl_state.group.allow;
1869	acl_state.mask.allow = 0x07;
1870
1871	acls = posix_acl_alloc(6, GFP_KERNEL);
1872	if (!acls) {
1873		free_acl_state(&acl_state);
1874		return -ENOMEM;
1875	}
1876	posix_state_to_acl(&acl_state, acls->a_entries);
1877
1878	rc = set_posix_acl(idmap, dentry, ACL_TYPE_ACCESS, acls);
1879	if (rc < 0)
1880		ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1881			    rc);
1882	else if (S_ISDIR(inode->i_mode)) {
1883		posix_state_to_acl(&acl_state, acls->a_entries);
1884		rc = set_posix_acl(idmap, dentry, ACL_TYPE_DEFAULT, acls);
1885		if (rc < 0)
1886			ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1887				    rc);
1888	}
1889
1890	free_acl_state(&acl_state);
1891	posix_acl_release(acls);
1892	return rc;
1893}
1894
1895int ksmbd_vfs_inherit_posix_acl(struct mnt_idmap *idmap,
1896				struct path *path, struct inode *parent_inode)
1897{
1898	struct posix_acl *acls;
1899	struct posix_acl_entry *pace;
1900	struct dentry *dentry = path->dentry;
1901	struct inode *inode = d_inode(dentry);
1902	int rc, i;
1903
1904	if (!IS_ENABLED(CONFIG_FS_POSIX_ACL))
1905		return -EOPNOTSUPP;
1906
1907	acls = get_inode_acl(parent_inode, ACL_TYPE_DEFAULT);
1908	if (IS_ERR_OR_NULL(acls))
1909		return -ENOENT;
1910	pace = acls->a_entries;
1911
1912	for (i = 0; i < acls->a_count; i++, pace++) {
1913		if (pace->e_tag == ACL_MASK) {
1914			pace->e_perm = 0x07;
1915			break;
1916		}
1917	}
1918
1919	rc = set_posix_acl(idmap, dentry, ACL_TYPE_ACCESS, acls);
1920	if (rc < 0)
1921		ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_ACCESS) failed, rc : %d\n",
1922			    rc);
1923	if (S_ISDIR(inode->i_mode)) {
1924		rc = set_posix_acl(idmap, dentry, ACL_TYPE_DEFAULT,
1925				   acls);
1926		if (rc < 0)
1927			ksmbd_debug(SMB, "Set posix acl(ACL_TYPE_DEFAULT) failed, rc : %d\n",
1928				    rc);
1929	}
1930
1931	posix_acl_release(acls);
1932	return rc;
1933}
1934