162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0 262306a36Sopenharmony_ci/* 362306a36Sopenharmony_ci * Copyright (c) 2000-2006 Silicon Graphics, Inc. 462306a36Sopenharmony_ci * Copyright (c) 2012-2013 Red Hat, Inc. 562306a36Sopenharmony_ci * All rights reserved. 662306a36Sopenharmony_ci */ 762306a36Sopenharmony_ci#include "xfs.h" 862306a36Sopenharmony_ci#include "xfs_fs.h" 962306a36Sopenharmony_ci#include "xfs_format.h" 1062306a36Sopenharmony_ci#include "xfs_log_format.h" 1162306a36Sopenharmony_ci#include "xfs_shared.h" 1262306a36Sopenharmony_ci#include "xfs_trans_resv.h" 1362306a36Sopenharmony_ci#include "xfs_mount.h" 1462306a36Sopenharmony_ci#include "xfs_inode.h" 1562306a36Sopenharmony_ci#include "xfs_error.h" 1662306a36Sopenharmony_ci#include "xfs_trans.h" 1762306a36Sopenharmony_ci#include "xfs_buf_item.h" 1862306a36Sopenharmony_ci#include "xfs_log.h" 1962306a36Sopenharmony_ci 2062306a36Sopenharmony_ci 2162306a36Sopenharmony_ci/* 2262306a36Sopenharmony_ci * Each contiguous block has a header, so it is not just a simple pathlen 2362306a36Sopenharmony_ci * to FSB conversion. 2462306a36Sopenharmony_ci */ 2562306a36Sopenharmony_ciint 2662306a36Sopenharmony_cixfs_symlink_blocks( 2762306a36Sopenharmony_ci struct xfs_mount *mp, 2862306a36Sopenharmony_ci int pathlen) 2962306a36Sopenharmony_ci{ 3062306a36Sopenharmony_ci int buflen = XFS_SYMLINK_BUF_SPACE(mp, mp->m_sb.sb_blocksize); 3162306a36Sopenharmony_ci 3262306a36Sopenharmony_ci return (pathlen + buflen - 1) / buflen; 3362306a36Sopenharmony_ci} 3462306a36Sopenharmony_ci 3562306a36Sopenharmony_ciint 3662306a36Sopenharmony_cixfs_symlink_hdr_set( 3762306a36Sopenharmony_ci struct xfs_mount *mp, 3862306a36Sopenharmony_ci xfs_ino_t ino, 3962306a36Sopenharmony_ci uint32_t offset, 4062306a36Sopenharmony_ci uint32_t size, 4162306a36Sopenharmony_ci struct xfs_buf *bp) 4262306a36Sopenharmony_ci{ 4362306a36Sopenharmony_ci struct xfs_dsymlink_hdr *dsl = bp->b_addr; 4462306a36Sopenharmony_ci 4562306a36Sopenharmony_ci if (!xfs_has_crc(mp)) 4662306a36Sopenharmony_ci return 0; 4762306a36Sopenharmony_ci 4862306a36Sopenharmony_ci memset(dsl, 0, sizeof(struct xfs_dsymlink_hdr)); 4962306a36Sopenharmony_ci dsl->sl_magic = cpu_to_be32(XFS_SYMLINK_MAGIC); 5062306a36Sopenharmony_ci dsl->sl_offset = cpu_to_be32(offset); 5162306a36Sopenharmony_ci dsl->sl_bytes = cpu_to_be32(size); 5262306a36Sopenharmony_ci uuid_copy(&dsl->sl_uuid, &mp->m_sb.sb_meta_uuid); 5362306a36Sopenharmony_ci dsl->sl_owner = cpu_to_be64(ino); 5462306a36Sopenharmony_ci dsl->sl_blkno = cpu_to_be64(xfs_buf_daddr(bp)); 5562306a36Sopenharmony_ci bp->b_ops = &xfs_symlink_buf_ops; 5662306a36Sopenharmony_ci 5762306a36Sopenharmony_ci return sizeof(struct xfs_dsymlink_hdr); 5862306a36Sopenharmony_ci} 5962306a36Sopenharmony_ci 6062306a36Sopenharmony_ci/* 6162306a36Sopenharmony_ci * Checking of the symlink header is split into two parts. the verifier does 6262306a36Sopenharmony_ci * CRC, location and bounds checking, the unpacking function checks the path 6362306a36Sopenharmony_ci * parameters and owner. 6462306a36Sopenharmony_ci */ 6562306a36Sopenharmony_cibool 6662306a36Sopenharmony_cixfs_symlink_hdr_ok( 6762306a36Sopenharmony_ci xfs_ino_t ino, 6862306a36Sopenharmony_ci uint32_t offset, 6962306a36Sopenharmony_ci uint32_t size, 7062306a36Sopenharmony_ci struct xfs_buf *bp) 7162306a36Sopenharmony_ci{ 7262306a36Sopenharmony_ci struct xfs_dsymlink_hdr *dsl = bp->b_addr; 7362306a36Sopenharmony_ci 7462306a36Sopenharmony_ci if (offset != be32_to_cpu(dsl->sl_offset)) 7562306a36Sopenharmony_ci return false; 7662306a36Sopenharmony_ci if (size != be32_to_cpu(dsl->sl_bytes)) 7762306a36Sopenharmony_ci return false; 7862306a36Sopenharmony_ci if (ino != be64_to_cpu(dsl->sl_owner)) 7962306a36Sopenharmony_ci return false; 8062306a36Sopenharmony_ci 8162306a36Sopenharmony_ci /* ok */ 8262306a36Sopenharmony_ci return true; 8362306a36Sopenharmony_ci} 8462306a36Sopenharmony_ci 8562306a36Sopenharmony_cistatic xfs_failaddr_t 8662306a36Sopenharmony_cixfs_symlink_verify( 8762306a36Sopenharmony_ci struct xfs_buf *bp) 8862306a36Sopenharmony_ci{ 8962306a36Sopenharmony_ci struct xfs_mount *mp = bp->b_mount; 9062306a36Sopenharmony_ci struct xfs_dsymlink_hdr *dsl = bp->b_addr; 9162306a36Sopenharmony_ci 9262306a36Sopenharmony_ci if (!xfs_has_crc(mp)) 9362306a36Sopenharmony_ci return __this_address; 9462306a36Sopenharmony_ci if (!xfs_verify_magic(bp, dsl->sl_magic)) 9562306a36Sopenharmony_ci return __this_address; 9662306a36Sopenharmony_ci if (!uuid_equal(&dsl->sl_uuid, &mp->m_sb.sb_meta_uuid)) 9762306a36Sopenharmony_ci return __this_address; 9862306a36Sopenharmony_ci if (xfs_buf_daddr(bp) != be64_to_cpu(dsl->sl_blkno)) 9962306a36Sopenharmony_ci return __this_address; 10062306a36Sopenharmony_ci if (be32_to_cpu(dsl->sl_offset) + 10162306a36Sopenharmony_ci be32_to_cpu(dsl->sl_bytes) >= XFS_SYMLINK_MAXLEN) 10262306a36Sopenharmony_ci return __this_address; 10362306a36Sopenharmony_ci if (dsl->sl_owner == 0) 10462306a36Sopenharmony_ci return __this_address; 10562306a36Sopenharmony_ci if (!xfs_log_check_lsn(mp, be64_to_cpu(dsl->sl_lsn))) 10662306a36Sopenharmony_ci return __this_address; 10762306a36Sopenharmony_ci 10862306a36Sopenharmony_ci return NULL; 10962306a36Sopenharmony_ci} 11062306a36Sopenharmony_ci 11162306a36Sopenharmony_cistatic void 11262306a36Sopenharmony_cixfs_symlink_read_verify( 11362306a36Sopenharmony_ci struct xfs_buf *bp) 11462306a36Sopenharmony_ci{ 11562306a36Sopenharmony_ci struct xfs_mount *mp = bp->b_mount; 11662306a36Sopenharmony_ci xfs_failaddr_t fa; 11762306a36Sopenharmony_ci 11862306a36Sopenharmony_ci /* no verification of non-crc buffers */ 11962306a36Sopenharmony_ci if (!xfs_has_crc(mp)) 12062306a36Sopenharmony_ci return; 12162306a36Sopenharmony_ci 12262306a36Sopenharmony_ci if (!xfs_buf_verify_cksum(bp, XFS_SYMLINK_CRC_OFF)) 12362306a36Sopenharmony_ci xfs_verifier_error(bp, -EFSBADCRC, __this_address); 12462306a36Sopenharmony_ci else { 12562306a36Sopenharmony_ci fa = xfs_symlink_verify(bp); 12662306a36Sopenharmony_ci if (fa) 12762306a36Sopenharmony_ci xfs_verifier_error(bp, -EFSCORRUPTED, fa); 12862306a36Sopenharmony_ci } 12962306a36Sopenharmony_ci} 13062306a36Sopenharmony_ci 13162306a36Sopenharmony_cistatic void 13262306a36Sopenharmony_cixfs_symlink_write_verify( 13362306a36Sopenharmony_ci struct xfs_buf *bp) 13462306a36Sopenharmony_ci{ 13562306a36Sopenharmony_ci struct xfs_mount *mp = bp->b_mount; 13662306a36Sopenharmony_ci struct xfs_buf_log_item *bip = bp->b_log_item; 13762306a36Sopenharmony_ci xfs_failaddr_t fa; 13862306a36Sopenharmony_ci 13962306a36Sopenharmony_ci /* no verification of non-crc buffers */ 14062306a36Sopenharmony_ci if (!xfs_has_crc(mp)) 14162306a36Sopenharmony_ci return; 14262306a36Sopenharmony_ci 14362306a36Sopenharmony_ci fa = xfs_symlink_verify(bp); 14462306a36Sopenharmony_ci if (fa) { 14562306a36Sopenharmony_ci xfs_verifier_error(bp, -EFSCORRUPTED, fa); 14662306a36Sopenharmony_ci return; 14762306a36Sopenharmony_ci } 14862306a36Sopenharmony_ci 14962306a36Sopenharmony_ci if (bip) { 15062306a36Sopenharmony_ci struct xfs_dsymlink_hdr *dsl = bp->b_addr; 15162306a36Sopenharmony_ci dsl->sl_lsn = cpu_to_be64(bip->bli_item.li_lsn); 15262306a36Sopenharmony_ci } 15362306a36Sopenharmony_ci xfs_buf_update_cksum(bp, XFS_SYMLINK_CRC_OFF); 15462306a36Sopenharmony_ci} 15562306a36Sopenharmony_ci 15662306a36Sopenharmony_ciconst struct xfs_buf_ops xfs_symlink_buf_ops = { 15762306a36Sopenharmony_ci .name = "xfs_symlink", 15862306a36Sopenharmony_ci .magic = { 0, cpu_to_be32(XFS_SYMLINK_MAGIC) }, 15962306a36Sopenharmony_ci .verify_read = xfs_symlink_read_verify, 16062306a36Sopenharmony_ci .verify_write = xfs_symlink_write_verify, 16162306a36Sopenharmony_ci .verify_struct = xfs_symlink_verify, 16262306a36Sopenharmony_ci}; 16362306a36Sopenharmony_ci 16462306a36Sopenharmony_civoid 16562306a36Sopenharmony_cixfs_symlink_local_to_remote( 16662306a36Sopenharmony_ci struct xfs_trans *tp, 16762306a36Sopenharmony_ci struct xfs_buf *bp, 16862306a36Sopenharmony_ci struct xfs_inode *ip, 16962306a36Sopenharmony_ci struct xfs_ifork *ifp) 17062306a36Sopenharmony_ci{ 17162306a36Sopenharmony_ci struct xfs_mount *mp = ip->i_mount; 17262306a36Sopenharmony_ci char *buf; 17362306a36Sopenharmony_ci 17462306a36Sopenharmony_ci xfs_trans_buf_set_type(tp, bp, XFS_BLFT_SYMLINK_BUF); 17562306a36Sopenharmony_ci 17662306a36Sopenharmony_ci if (!xfs_has_crc(mp)) { 17762306a36Sopenharmony_ci bp->b_ops = NULL; 17862306a36Sopenharmony_ci memcpy(bp->b_addr, ifp->if_u1.if_data, ifp->if_bytes); 17962306a36Sopenharmony_ci xfs_trans_log_buf(tp, bp, 0, ifp->if_bytes - 1); 18062306a36Sopenharmony_ci return; 18162306a36Sopenharmony_ci } 18262306a36Sopenharmony_ci 18362306a36Sopenharmony_ci /* 18462306a36Sopenharmony_ci * As this symlink fits in an inode literal area, it must also fit in 18562306a36Sopenharmony_ci * the smallest buffer the filesystem supports. 18662306a36Sopenharmony_ci */ 18762306a36Sopenharmony_ci ASSERT(BBTOB(bp->b_length) >= 18862306a36Sopenharmony_ci ifp->if_bytes + sizeof(struct xfs_dsymlink_hdr)); 18962306a36Sopenharmony_ci 19062306a36Sopenharmony_ci bp->b_ops = &xfs_symlink_buf_ops; 19162306a36Sopenharmony_ci 19262306a36Sopenharmony_ci buf = bp->b_addr; 19362306a36Sopenharmony_ci buf += xfs_symlink_hdr_set(mp, ip->i_ino, 0, ifp->if_bytes, bp); 19462306a36Sopenharmony_ci memcpy(buf, ifp->if_u1.if_data, ifp->if_bytes); 19562306a36Sopenharmony_ci xfs_trans_log_buf(tp, bp, 0, sizeof(struct xfs_dsymlink_hdr) + 19662306a36Sopenharmony_ci ifp->if_bytes - 1); 19762306a36Sopenharmony_ci} 19862306a36Sopenharmony_ci 19962306a36Sopenharmony_ci/* 20062306a36Sopenharmony_ci * Verify the in-memory consistency of an inline symlink data fork. This 20162306a36Sopenharmony_ci * does not do on-disk format checks. 20262306a36Sopenharmony_ci */ 20362306a36Sopenharmony_cixfs_failaddr_t 20462306a36Sopenharmony_cixfs_symlink_shortform_verify( 20562306a36Sopenharmony_ci struct xfs_inode *ip) 20662306a36Sopenharmony_ci{ 20762306a36Sopenharmony_ci struct xfs_ifork *ifp = xfs_ifork_ptr(ip, XFS_DATA_FORK); 20862306a36Sopenharmony_ci char *sfp = (char *)ifp->if_u1.if_data; 20962306a36Sopenharmony_ci int size = ifp->if_bytes; 21062306a36Sopenharmony_ci char *endp = sfp + size; 21162306a36Sopenharmony_ci 21262306a36Sopenharmony_ci ASSERT(ifp->if_format == XFS_DINODE_FMT_LOCAL); 21362306a36Sopenharmony_ci 21462306a36Sopenharmony_ci /* 21562306a36Sopenharmony_ci * Zero length symlinks should never occur in memory as they are 21662306a36Sopenharmony_ci * never allowed to exist on disk. 21762306a36Sopenharmony_ci */ 21862306a36Sopenharmony_ci if (!size) 21962306a36Sopenharmony_ci return __this_address; 22062306a36Sopenharmony_ci 22162306a36Sopenharmony_ci /* No negative sizes or overly long symlink targets. */ 22262306a36Sopenharmony_ci if (size < 0 || size > XFS_SYMLINK_MAXLEN) 22362306a36Sopenharmony_ci return __this_address; 22462306a36Sopenharmony_ci 22562306a36Sopenharmony_ci /* No NULLs in the target either. */ 22662306a36Sopenharmony_ci if (memchr(sfp, 0, size - 1)) 22762306a36Sopenharmony_ci return __this_address; 22862306a36Sopenharmony_ci 22962306a36Sopenharmony_ci /* We /did/ null-terminate the buffer, right? */ 23062306a36Sopenharmony_ci if (*endp != 0) 23162306a36Sopenharmony_ci return __this_address; 23262306a36Sopenharmony_ci return NULL; 23362306a36Sopenharmony_ci} 234