162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci * Copyright (c) 2000-2006 Silicon Graphics, Inc.
462306a36Sopenharmony_ci * Copyright (c) 2012-2013 Red Hat, Inc.
562306a36Sopenharmony_ci * All rights reserved.
662306a36Sopenharmony_ci */
762306a36Sopenharmony_ci#include "xfs.h"
862306a36Sopenharmony_ci#include "xfs_fs.h"
962306a36Sopenharmony_ci#include "xfs_format.h"
1062306a36Sopenharmony_ci#include "xfs_log_format.h"
1162306a36Sopenharmony_ci#include "xfs_shared.h"
1262306a36Sopenharmony_ci#include "xfs_trans_resv.h"
1362306a36Sopenharmony_ci#include "xfs_mount.h"
1462306a36Sopenharmony_ci#include "xfs_inode.h"
1562306a36Sopenharmony_ci#include "xfs_error.h"
1662306a36Sopenharmony_ci#include "xfs_trans.h"
1762306a36Sopenharmony_ci#include "xfs_buf_item.h"
1862306a36Sopenharmony_ci#include "xfs_log.h"
1962306a36Sopenharmony_ci
2062306a36Sopenharmony_ci
2162306a36Sopenharmony_ci/*
2262306a36Sopenharmony_ci * Each contiguous block has a header, so it is not just a simple pathlen
2362306a36Sopenharmony_ci * to FSB conversion.
2462306a36Sopenharmony_ci */
2562306a36Sopenharmony_ciint
2662306a36Sopenharmony_cixfs_symlink_blocks(
2762306a36Sopenharmony_ci	struct xfs_mount *mp,
2862306a36Sopenharmony_ci	int		pathlen)
2962306a36Sopenharmony_ci{
3062306a36Sopenharmony_ci	int buflen = XFS_SYMLINK_BUF_SPACE(mp, mp->m_sb.sb_blocksize);
3162306a36Sopenharmony_ci
3262306a36Sopenharmony_ci	return (pathlen + buflen - 1) / buflen;
3362306a36Sopenharmony_ci}
3462306a36Sopenharmony_ci
3562306a36Sopenharmony_ciint
3662306a36Sopenharmony_cixfs_symlink_hdr_set(
3762306a36Sopenharmony_ci	struct xfs_mount	*mp,
3862306a36Sopenharmony_ci	xfs_ino_t		ino,
3962306a36Sopenharmony_ci	uint32_t		offset,
4062306a36Sopenharmony_ci	uint32_t		size,
4162306a36Sopenharmony_ci	struct xfs_buf		*bp)
4262306a36Sopenharmony_ci{
4362306a36Sopenharmony_ci	struct xfs_dsymlink_hdr	*dsl = bp->b_addr;
4462306a36Sopenharmony_ci
4562306a36Sopenharmony_ci	if (!xfs_has_crc(mp))
4662306a36Sopenharmony_ci		return 0;
4762306a36Sopenharmony_ci
4862306a36Sopenharmony_ci	memset(dsl, 0, sizeof(struct xfs_dsymlink_hdr));
4962306a36Sopenharmony_ci	dsl->sl_magic = cpu_to_be32(XFS_SYMLINK_MAGIC);
5062306a36Sopenharmony_ci	dsl->sl_offset = cpu_to_be32(offset);
5162306a36Sopenharmony_ci	dsl->sl_bytes = cpu_to_be32(size);
5262306a36Sopenharmony_ci	uuid_copy(&dsl->sl_uuid, &mp->m_sb.sb_meta_uuid);
5362306a36Sopenharmony_ci	dsl->sl_owner = cpu_to_be64(ino);
5462306a36Sopenharmony_ci	dsl->sl_blkno = cpu_to_be64(xfs_buf_daddr(bp));
5562306a36Sopenharmony_ci	bp->b_ops = &xfs_symlink_buf_ops;
5662306a36Sopenharmony_ci
5762306a36Sopenharmony_ci	return sizeof(struct xfs_dsymlink_hdr);
5862306a36Sopenharmony_ci}
5962306a36Sopenharmony_ci
6062306a36Sopenharmony_ci/*
6162306a36Sopenharmony_ci * Checking of the symlink header is split into two parts. the verifier does
6262306a36Sopenharmony_ci * CRC, location and bounds checking, the unpacking function checks the path
6362306a36Sopenharmony_ci * parameters and owner.
6462306a36Sopenharmony_ci */
6562306a36Sopenharmony_cibool
6662306a36Sopenharmony_cixfs_symlink_hdr_ok(
6762306a36Sopenharmony_ci	xfs_ino_t		ino,
6862306a36Sopenharmony_ci	uint32_t		offset,
6962306a36Sopenharmony_ci	uint32_t		size,
7062306a36Sopenharmony_ci	struct xfs_buf		*bp)
7162306a36Sopenharmony_ci{
7262306a36Sopenharmony_ci	struct xfs_dsymlink_hdr *dsl = bp->b_addr;
7362306a36Sopenharmony_ci
7462306a36Sopenharmony_ci	if (offset != be32_to_cpu(dsl->sl_offset))
7562306a36Sopenharmony_ci		return false;
7662306a36Sopenharmony_ci	if (size != be32_to_cpu(dsl->sl_bytes))
7762306a36Sopenharmony_ci		return false;
7862306a36Sopenharmony_ci	if (ino != be64_to_cpu(dsl->sl_owner))
7962306a36Sopenharmony_ci		return false;
8062306a36Sopenharmony_ci
8162306a36Sopenharmony_ci	/* ok */
8262306a36Sopenharmony_ci	return true;
8362306a36Sopenharmony_ci}
8462306a36Sopenharmony_ci
8562306a36Sopenharmony_cistatic xfs_failaddr_t
8662306a36Sopenharmony_cixfs_symlink_verify(
8762306a36Sopenharmony_ci	struct xfs_buf		*bp)
8862306a36Sopenharmony_ci{
8962306a36Sopenharmony_ci	struct xfs_mount	*mp = bp->b_mount;
9062306a36Sopenharmony_ci	struct xfs_dsymlink_hdr	*dsl = bp->b_addr;
9162306a36Sopenharmony_ci
9262306a36Sopenharmony_ci	if (!xfs_has_crc(mp))
9362306a36Sopenharmony_ci		return __this_address;
9462306a36Sopenharmony_ci	if (!xfs_verify_magic(bp, dsl->sl_magic))
9562306a36Sopenharmony_ci		return __this_address;
9662306a36Sopenharmony_ci	if (!uuid_equal(&dsl->sl_uuid, &mp->m_sb.sb_meta_uuid))
9762306a36Sopenharmony_ci		return __this_address;
9862306a36Sopenharmony_ci	if (xfs_buf_daddr(bp) != be64_to_cpu(dsl->sl_blkno))
9962306a36Sopenharmony_ci		return __this_address;
10062306a36Sopenharmony_ci	if (be32_to_cpu(dsl->sl_offset) +
10162306a36Sopenharmony_ci				be32_to_cpu(dsl->sl_bytes) >= XFS_SYMLINK_MAXLEN)
10262306a36Sopenharmony_ci		return __this_address;
10362306a36Sopenharmony_ci	if (dsl->sl_owner == 0)
10462306a36Sopenharmony_ci		return __this_address;
10562306a36Sopenharmony_ci	if (!xfs_log_check_lsn(mp, be64_to_cpu(dsl->sl_lsn)))
10662306a36Sopenharmony_ci		return __this_address;
10762306a36Sopenharmony_ci
10862306a36Sopenharmony_ci	return NULL;
10962306a36Sopenharmony_ci}
11062306a36Sopenharmony_ci
11162306a36Sopenharmony_cistatic void
11262306a36Sopenharmony_cixfs_symlink_read_verify(
11362306a36Sopenharmony_ci	struct xfs_buf	*bp)
11462306a36Sopenharmony_ci{
11562306a36Sopenharmony_ci	struct xfs_mount *mp = bp->b_mount;
11662306a36Sopenharmony_ci	xfs_failaddr_t	fa;
11762306a36Sopenharmony_ci
11862306a36Sopenharmony_ci	/* no verification of non-crc buffers */
11962306a36Sopenharmony_ci	if (!xfs_has_crc(mp))
12062306a36Sopenharmony_ci		return;
12162306a36Sopenharmony_ci
12262306a36Sopenharmony_ci	if (!xfs_buf_verify_cksum(bp, XFS_SYMLINK_CRC_OFF))
12362306a36Sopenharmony_ci		xfs_verifier_error(bp, -EFSBADCRC, __this_address);
12462306a36Sopenharmony_ci	else {
12562306a36Sopenharmony_ci		fa = xfs_symlink_verify(bp);
12662306a36Sopenharmony_ci		if (fa)
12762306a36Sopenharmony_ci			xfs_verifier_error(bp, -EFSCORRUPTED, fa);
12862306a36Sopenharmony_ci	}
12962306a36Sopenharmony_ci}
13062306a36Sopenharmony_ci
13162306a36Sopenharmony_cistatic void
13262306a36Sopenharmony_cixfs_symlink_write_verify(
13362306a36Sopenharmony_ci	struct xfs_buf	*bp)
13462306a36Sopenharmony_ci{
13562306a36Sopenharmony_ci	struct xfs_mount *mp = bp->b_mount;
13662306a36Sopenharmony_ci	struct xfs_buf_log_item	*bip = bp->b_log_item;
13762306a36Sopenharmony_ci	xfs_failaddr_t		fa;
13862306a36Sopenharmony_ci
13962306a36Sopenharmony_ci	/* no verification of non-crc buffers */
14062306a36Sopenharmony_ci	if (!xfs_has_crc(mp))
14162306a36Sopenharmony_ci		return;
14262306a36Sopenharmony_ci
14362306a36Sopenharmony_ci	fa = xfs_symlink_verify(bp);
14462306a36Sopenharmony_ci	if (fa) {
14562306a36Sopenharmony_ci		xfs_verifier_error(bp, -EFSCORRUPTED, fa);
14662306a36Sopenharmony_ci		return;
14762306a36Sopenharmony_ci	}
14862306a36Sopenharmony_ci
14962306a36Sopenharmony_ci	if (bip) {
15062306a36Sopenharmony_ci		struct xfs_dsymlink_hdr *dsl = bp->b_addr;
15162306a36Sopenharmony_ci		dsl->sl_lsn = cpu_to_be64(bip->bli_item.li_lsn);
15262306a36Sopenharmony_ci	}
15362306a36Sopenharmony_ci	xfs_buf_update_cksum(bp, XFS_SYMLINK_CRC_OFF);
15462306a36Sopenharmony_ci}
15562306a36Sopenharmony_ci
15662306a36Sopenharmony_ciconst struct xfs_buf_ops xfs_symlink_buf_ops = {
15762306a36Sopenharmony_ci	.name = "xfs_symlink",
15862306a36Sopenharmony_ci	.magic = { 0, cpu_to_be32(XFS_SYMLINK_MAGIC) },
15962306a36Sopenharmony_ci	.verify_read = xfs_symlink_read_verify,
16062306a36Sopenharmony_ci	.verify_write = xfs_symlink_write_verify,
16162306a36Sopenharmony_ci	.verify_struct = xfs_symlink_verify,
16262306a36Sopenharmony_ci};
16362306a36Sopenharmony_ci
16462306a36Sopenharmony_civoid
16562306a36Sopenharmony_cixfs_symlink_local_to_remote(
16662306a36Sopenharmony_ci	struct xfs_trans	*tp,
16762306a36Sopenharmony_ci	struct xfs_buf		*bp,
16862306a36Sopenharmony_ci	struct xfs_inode	*ip,
16962306a36Sopenharmony_ci	struct xfs_ifork	*ifp)
17062306a36Sopenharmony_ci{
17162306a36Sopenharmony_ci	struct xfs_mount	*mp = ip->i_mount;
17262306a36Sopenharmony_ci	char			*buf;
17362306a36Sopenharmony_ci
17462306a36Sopenharmony_ci	xfs_trans_buf_set_type(tp, bp, XFS_BLFT_SYMLINK_BUF);
17562306a36Sopenharmony_ci
17662306a36Sopenharmony_ci	if (!xfs_has_crc(mp)) {
17762306a36Sopenharmony_ci		bp->b_ops = NULL;
17862306a36Sopenharmony_ci		memcpy(bp->b_addr, ifp->if_u1.if_data, ifp->if_bytes);
17962306a36Sopenharmony_ci		xfs_trans_log_buf(tp, bp, 0, ifp->if_bytes - 1);
18062306a36Sopenharmony_ci		return;
18162306a36Sopenharmony_ci	}
18262306a36Sopenharmony_ci
18362306a36Sopenharmony_ci	/*
18462306a36Sopenharmony_ci	 * As this symlink fits in an inode literal area, it must also fit in
18562306a36Sopenharmony_ci	 * the smallest buffer the filesystem supports.
18662306a36Sopenharmony_ci	 */
18762306a36Sopenharmony_ci	ASSERT(BBTOB(bp->b_length) >=
18862306a36Sopenharmony_ci			ifp->if_bytes + sizeof(struct xfs_dsymlink_hdr));
18962306a36Sopenharmony_ci
19062306a36Sopenharmony_ci	bp->b_ops = &xfs_symlink_buf_ops;
19162306a36Sopenharmony_ci
19262306a36Sopenharmony_ci	buf = bp->b_addr;
19362306a36Sopenharmony_ci	buf += xfs_symlink_hdr_set(mp, ip->i_ino, 0, ifp->if_bytes, bp);
19462306a36Sopenharmony_ci	memcpy(buf, ifp->if_u1.if_data, ifp->if_bytes);
19562306a36Sopenharmony_ci	xfs_trans_log_buf(tp, bp, 0, sizeof(struct xfs_dsymlink_hdr) +
19662306a36Sopenharmony_ci					ifp->if_bytes - 1);
19762306a36Sopenharmony_ci}
19862306a36Sopenharmony_ci
19962306a36Sopenharmony_ci/*
20062306a36Sopenharmony_ci * Verify the in-memory consistency of an inline symlink data fork. This
20162306a36Sopenharmony_ci * does not do on-disk format checks.
20262306a36Sopenharmony_ci */
20362306a36Sopenharmony_cixfs_failaddr_t
20462306a36Sopenharmony_cixfs_symlink_shortform_verify(
20562306a36Sopenharmony_ci	struct xfs_inode	*ip)
20662306a36Sopenharmony_ci{
20762306a36Sopenharmony_ci	struct xfs_ifork	*ifp = xfs_ifork_ptr(ip, XFS_DATA_FORK);
20862306a36Sopenharmony_ci	char			*sfp = (char *)ifp->if_u1.if_data;
20962306a36Sopenharmony_ci	int			size = ifp->if_bytes;
21062306a36Sopenharmony_ci	char			*endp = sfp + size;
21162306a36Sopenharmony_ci
21262306a36Sopenharmony_ci	ASSERT(ifp->if_format == XFS_DINODE_FMT_LOCAL);
21362306a36Sopenharmony_ci
21462306a36Sopenharmony_ci	/*
21562306a36Sopenharmony_ci	 * Zero length symlinks should never occur in memory as they are
21662306a36Sopenharmony_ci	 * never allowed to exist on disk.
21762306a36Sopenharmony_ci	 */
21862306a36Sopenharmony_ci	if (!size)
21962306a36Sopenharmony_ci		return __this_address;
22062306a36Sopenharmony_ci
22162306a36Sopenharmony_ci	/* No negative sizes or overly long symlink targets. */
22262306a36Sopenharmony_ci	if (size < 0 || size > XFS_SYMLINK_MAXLEN)
22362306a36Sopenharmony_ci		return __this_address;
22462306a36Sopenharmony_ci
22562306a36Sopenharmony_ci	/* No NULLs in the target either. */
22662306a36Sopenharmony_ci	if (memchr(sfp, 0, size - 1))
22762306a36Sopenharmony_ci		return __this_address;
22862306a36Sopenharmony_ci
22962306a36Sopenharmony_ci	/* We /did/ null-terminate the buffer, right? */
23062306a36Sopenharmony_ci	if (*endp != 0)
23162306a36Sopenharmony_ci		return __this_address;
23262306a36Sopenharmony_ci	return NULL;
23362306a36Sopenharmony_ci}
234