|  | /* | 
|  | * Copyright (c) 2004-2005 Silicon Graphics, Inc. | 
|  | * All Rights Reserved. | 
|  | * | 
|  | * This program is free software; you can redistribute it and/or | 
|  | * modify it under the terms of the GNU General Public License as | 
|  | * published by the Free Software Foundation. | 
|  | * | 
|  | * This program is distributed in the hope that it would be useful, | 
|  | * but WITHOUT ANY WARRANTY; without even the implied warranty of | 
|  | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the | 
|  | * GNU General Public License for more details. | 
|  | * | 
|  | * You should have received a copy of the GNU General Public License | 
|  | * along with this program; if not, write the Free Software Foundation, | 
|  | * Inc.,  51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA | 
|  | */ | 
|  | #include <linux/compat.h> | 
|  | #include <linux/ioctl.h> | 
|  | #include <asm/uaccess.h> | 
|  | #include "xfs.h" | 
|  | #include "xfs_fs.h" | 
|  | #include "xfs_bit.h" | 
|  | #include "xfs_log.h" | 
|  | #include "xfs_inum.h" | 
|  | #include "xfs_trans.h" | 
|  | #include "xfs_sb.h" | 
|  | #include "xfs_ag.h" | 
|  | #include "xfs_dir2.h" | 
|  | #include "xfs_dmapi.h" | 
|  | #include "xfs_mount.h" | 
|  | #include "xfs_bmap_btree.h" | 
|  | #include "xfs_attr_sf.h" | 
|  | #include "xfs_dir2_sf.h" | 
|  | #include "xfs_vnode.h" | 
|  | #include "xfs_dinode.h" | 
|  | #include "xfs_inode.h" | 
|  | #include "xfs_itable.h" | 
|  | #include "xfs_error.h" | 
|  | #include "xfs_dfrag.h" | 
|  | #include "xfs_vnodeops.h" | 
|  | #include "xfs_fsops.h" | 
|  | #include "xfs_alloc.h" | 
|  | #include "xfs_rtalloc.h" | 
|  | #include "xfs_attr.h" | 
|  | #include "xfs_ioctl.h" | 
|  | #include "xfs_ioctl32.h" | 
|  |  | 
|  | #define  _NATIVE_IOC(cmd, type) \ | 
|  | _IOC(_IOC_DIR(cmd), _IOC_TYPE(cmd), _IOC_NR(cmd), sizeof(type)) | 
|  |  | 
|  | #ifdef BROKEN_X86_ALIGNMENT | 
|  | STATIC int | 
|  | xfs_compat_flock64_copyin( | 
|  | xfs_flock64_t		*bf, | 
|  | compat_xfs_flock64_t	__user *arg32) | 
|  | { | 
|  | if (get_user(bf->l_type,	&arg32->l_type) || | 
|  | get_user(bf->l_whence,	&arg32->l_whence) || | 
|  | get_user(bf->l_start,	&arg32->l_start) || | 
|  | get_user(bf->l_len,		&arg32->l_len) || | 
|  | get_user(bf->l_sysid,	&arg32->l_sysid) || | 
|  | get_user(bf->l_pid,		&arg32->l_pid) || | 
|  | copy_from_user(bf->l_pad,	&arg32->l_pad,	4*sizeof(u32))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_compat_ioc_fsgeometry_v1( | 
|  | struct xfs_mount	  *mp, | 
|  | compat_xfs_fsop_geom_v1_t __user *arg32) | 
|  | { | 
|  | xfs_fsop_geom_t		  fsgeo; | 
|  | int			  error; | 
|  |  | 
|  | error = xfs_fs_geometry(mp, &fsgeo, 3); | 
|  | if (error) | 
|  | return -error; | 
|  | /* The 32-bit variant simply has some padding at the end */ | 
|  | if (copy_to_user(arg32, &fsgeo, sizeof(struct compat_xfs_fsop_geom_v1))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_compat_growfs_data_copyin( | 
|  | struct xfs_growfs_data	 *in, | 
|  | compat_xfs_growfs_data_t __user *arg32) | 
|  | { | 
|  | if (get_user(in->newblocks, &arg32->newblocks) || | 
|  | get_user(in->imaxpct,   &arg32->imaxpct)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_compat_growfs_rt_copyin( | 
|  | struct xfs_growfs_rt	 *in, | 
|  | compat_xfs_growfs_rt_t	__user *arg32) | 
|  | { | 
|  | if (get_user(in->newblocks, &arg32->newblocks) || | 
|  | get_user(in->extsize,   &arg32->extsize)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_inumbers_fmt_compat( | 
|  | void			__user *ubuffer, | 
|  | const xfs_inogrp_t	*buffer, | 
|  | long			count, | 
|  | long			*written) | 
|  | { | 
|  | compat_xfs_inogrp_t	__user *p32 = ubuffer; | 
|  | long			i; | 
|  |  | 
|  | for (i = 0; i < count; i++) { | 
|  | if (put_user(buffer[i].xi_startino,   &p32[i].xi_startino) || | 
|  | put_user(buffer[i].xi_alloccount, &p32[i].xi_alloccount) || | 
|  | put_user(buffer[i].xi_allocmask,  &p32[i].xi_allocmask)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | } | 
|  | *written = count * sizeof(*p32); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | #else | 
|  | #define xfs_inumbers_fmt_compat xfs_inumbers_fmt | 
|  | #endif	/* BROKEN_X86_ALIGNMENT */ | 
|  |  | 
|  | STATIC int | 
|  | xfs_ioctl32_bstime_copyin( | 
|  | xfs_bstime_t		*bstime, | 
|  | compat_xfs_bstime_t	__user *bstime32) | 
|  | { | 
|  | compat_time_t		sec32;	/* tv_sec differs on 64 vs. 32 */ | 
|  |  | 
|  | if (get_user(sec32,		&bstime32->tv_sec)	|| | 
|  | get_user(bstime->tv_nsec,	&bstime32->tv_nsec)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | bstime->tv_sec = sec32; | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | /* xfs_bstat_t has differing alignment on intel, & bstime_t sizes everywhere */ | 
|  | STATIC int | 
|  | xfs_ioctl32_bstat_copyin( | 
|  | xfs_bstat_t		*bstat, | 
|  | compat_xfs_bstat_t	__user *bstat32) | 
|  | { | 
|  | if (get_user(bstat->bs_ino,	&bstat32->bs_ino)	|| | 
|  | get_user(bstat->bs_mode,	&bstat32->bs_mode)	|| | 
|  | get_user(bstat->bs_nlink,	&bstat32->bs_nlink)	|| | 
|  | get_user(bstat->bs_uid,	&bstat32->bs_uid)	|| | 
|  | get_user(bstat->bs_gid,	&bstat32->bs_gid)	|| | 
|  | get_user(bstat->bs_rdev,	&bstat32->bs_rdev)	|| | 
|  | get_user(bstat->bs_blksize,	&bstat32->bs_blksize)	|| | 
|  | get_user(bstat->bs_size,	&bstat32->bs_size)	|| | 
|  | xfs_ioctl32_bstime_copyin(&bstat->bs_atime, &bstat32->bs_atime) || | 
|  | xfs_ioctl32_bstime_copyin(&bstat->bs_mtime, &bstat32->bs_mtime) || | 
|  | xfs_ioctl32_bstime_copyin(&bstat->bs_ctime, &bstat32->bs_ctime) || | 
|  | get_user(bstat->bs_blocks,	&bstat32->bs_size)	|| | 
|  | get_user(bstat->bs_xflags,	&bstat32->bs_size)	|| | 
|  | get_user(bstat->bs_extsize,	&bstat32->bs_extsize)	|| | 
|  | get_user(bstat->bs_extents,	&bstat32->bs_extents)	|| | 
|  | get_user(bstat->bs_gen,	&bstat32->bs_gen)	|| | 
|  | get_user(bstat->bs_projid,	&bstat32->bs_projid)	|| | 
|  | get_user(bstat->bs_dmevmask, &bstat32->bs_dmevmask)	|| | 
|  | get_user(bstat->bs_dmstate,	&bstat32->bs_dmstate)	|| | 
|  | get_user(bstat->bs_aextents, &bstat32->bs_aextents)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | /* XFS_IOC_FSBULKSTAT and friends */ | 
|  |  | 
|  | STATIC int | 
|  | xfs_bstime_store_compat( | 
|  | compat_xfs_bstime_t	__user *p32, | 
|  | const xfs_bstime_t	*p) | 
|  | { | 
|  | __s32			sec32; | 
|  |  | 
|  | sec32 = p->tv_sec; | 
|  | if (put_user(sec32, &p32->tv_sec) || | 
|  | put_user(p->tv_nsec, &p32->tv_nsec)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | /* Return 0 on success or positive error (to xfs_bulkstat()) */ | 
|  | STATIC int | 
|  | xfs_bulkstat_one_fmt_compat( | 
|  | void			__user *ubuffer, | 
|  | int			ubsize, | 
|  | int			*ubused, | 
|  | const xfs_bstat_t	*buffer) | 
|  | { | 
|  | compat_xfs_bstat_t	__user *p32 = ubuffer; | 
|  |  | 
|  | if (ubsize < sizeof(*p32)) | 
|  | return XFS_ERROR(ENOMEM); | 
|  |  | 
|  | if (put_user(buffer->bs_ino,	  &p32->bs_ino)		|| | 
|  | put_user(buffer->bs_mode,	  &p32->bs_mode)	|| | 
|  | put_user(buffer->bs_nlink,	  &p32->bs_nlink)	|| | 
|  | put_user(buffer->bs_uid,	  &p32->bs_uid)		|| | 
|  | put_user(buffer->bs_gid,	  &p32->bs_gid)		|| | 
|  | put_user(buffer->bs_rdev,	  &p32->bs_rdev)	|| | 
|  | put_user(buffer->bs_blksize,  &p32->bs_blksize)	|| | 
|  | put_user(buffer->bs_size,	  &p32->bs_size)	|| | 
|  | xfs_bstime_store_compat(&p32->bs_atime, &buffer->bs_atime) || | 
|  | xfs_bstime_store_compat(&p32->bs_mtime, &buffer->bs_mtime) || | 
|  | xfs_bstime_store_compat(&p32->bs_ctime, &buffer->bs_ctime) || | 
|  | put_user(buffer->bs_blocks,	  &p32->bs_blocks)	|| | 
|  | put_user(buffer->bs_xflags,	  &p32->bs_xflags)	|| | 
|  | put_user(buffer->bs_extsize,  &p32->bs_extsize)	|| | 
|  | put_user(buffer->bs_extents,  &p32->bs_extents)	|| | 
|  | put_user(buffer->bs_gen,	  &p32->bs_gen)		|| | 
|  | put_user(buffer->bs_projid,	  &p32->bs_projid)	|| | 
|  | put_user(buffer->bs_dmevmask, &p32->bs_dmevmask)	|| | 
|  | put_user(buffer->bs_dmstate,  &p32->bs_dmstate)	|| | 
|  | put_user(buffer->bs_aextents, &p32->bs_aextents)) | 
|  | return XFS_ERROR(EFAULT); | 
|  | if (ubused) | 
|  | *ubused = sizeof(*p32); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_bulkstat_one_compat( | 
|  | xfs_mount_t	*mp,		/* mount point for filesystem */ | 
|  | xfs_ino_t	ino,		/* inode number to get data for */ | 
|  | void		__user *buffer,	/* buffer to place output in */ | 
|  | int		ubsize,		/* size of buffer */ | 
|  | void		*private_data,	/* my private data */ | 
|  | xfs_daddr_t	bno,		/* starting bno of inode cluster */ | 
|  | int		*ubused,	/* bytes used by me */ | 
|  | void		*dibuff,	/* on-disk inode buffer */ | 
|  | int		*stat)		/* BULKSTAT_RV_... */ | 
|  | { | 
|  | return xfs_bulkstat_one_int(mp, ino, buffer, ubsize, | 
|  | xfs_bulkstat_one_fmt_compat, bno, | 
|  | ubused, dibuff, stat); | 
|  | } | 
|  |  | 
|  | /* copied from xfs_ioctl.c */ | 
|  | STATIC int | 
|  | xfs_compat_ioc_bulkstat( | 
|  | xfs_mount_t		  *mp, | 
|  | unsigned int		  cmd, | 
|  | compat_xfs_fsop_bulkreq_t __user *p32) | 
|  | { | 
|  | u32			addr; | 
|  | xfs_fsop_bulkreq_t	bulkreq; | 
|  | int			count;	/* # of records returned */ | 
|  | xfs_ino_t		inlast;	/* last inode number */ | 
|  | int			done; | 
|  | int			error; | 
|  |  | 
|  | /* done = 1 if there are more stats to get and if bulkstat */ | 
|  | /* should be called again (unused here, but used in dmapi) */ | 
|  |  | 
|  | if (!capable(CAP_SYS_ADMIN)) | 
|  | return -XFS_ERROR(EPERM); | 
|  |  | 
|  | if (XFS_FORCED_SHUTDOWN(mp)) | 
|  | return -XFS_ERROR(EIO); | 
|  |  | 
|  | if (get_user(addr, &p32->lastip)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | bulkreq.lastip = compat_ptr(addr); | 
|  | if (get_user(bulkreq.icount, &p32->icount) || | 
|  | get_user(addr, &p32->ubuffer)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | bulkreq.ubuffer = compat_ptr(addr); | 
|  | if (get_user(addr, &p32->ocount)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | bulkreq.ocount = compat_ptr(addr); | 
|  |  | 
|  | if (copy_from_user(&inlast, bulkreq.lastip, sizeof(__s64))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  |  | 
|  | if ((count = bulkreq.icount) <= 0) | 
|  | return -XFS_ERROR(EINVAL); | 
|  |  | 
|  | if (bulkreq.ubuffer == NULL) | 
|  | return -XFS_ERROR(EINVAL); | 
|  |  | 
|  | if (cmd == XFS_IOC_FSINUMBERS_32) { | 
|  | error = xfs_inumbers(mp, &inlast, &count, | 
|  | bulkreq.ubuffer, xfs_inumbers_fmt_compat); | 
|  | } else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE_32) { | 
|  | int res; | 
|  |  | 
|  | error = xfs_bulkstat_one_compat(mp, inlast, bulkreq.ubuffer, | 
|  | sizeof(compat_xfs_bstat_t), | 
|  | NULL, 0, NULL, NULL, &res); | 
|  | } else if (cmd == XFS_IOC_FSBULKSTAT_32) { | 
|  | error = xfs_bulkstat(mp, &inlast, &count, | 
|  | xfs_bulkstat_one_compat, NULL, | 
|  | sizeof(compat_xfs_bstat_t), bulkreq.ubuffer, | 
|  | BULKSTAT_FG_QUICK, &done); | 
|  | } else | 
|  | error = XFS_ERROR(EINVAL); | 
|  | if (error) | 
|  | return -error; | 
|  |  | 
|  | if (bulkreq.ocount != NULL) { | 
|  | if (copy_to_user(bulkreq.lastip, &inlast, | 
|  | sizeof(xfs_ino_t))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  |  | 
|  | if (copy_to_user(bulkreq.ocount, &count, sizeof(count))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | } | 
|  |  | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_compat_handlereq_copyin( | 
|  | xfs_fsop_handlereq_t		*hreq, | 
|  | compat_xfs_fsop_handlereq_t	__user *arg32) | 
|  | { | 
|  | compat_xfs_fsop_handlereq_t	hreq32; | 
|  |  | 
|  | if (copy_from_user(&hreq32, arg32, sizeof(compat_xfs_fsop_handlereq_t))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  |  | 
|  | hreq->fd = hreq32.fd; | 
|  | hreq->path = compat_ptr(hreq32.path); | 
|  | hreq->oflags = hreq32.oflags; | 
|  | hreq->ihandle = compat_ptr(hreq32.ihandle); | 
|  | hreq->ihandlen = hreq32.ihandlen; | 
|  | hreq->ohandle = compat_ptr(hreq32.ohandle); | 
|  | hreq->ohandlen = compat_ptr(hreq32.ohandlen); | 
|  |  | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Convert userspace handle data into inode. | 
|  | * | 
|  | * We use the fact that all the fsop_handlereq ioctl calls have a data | 
|  | * structure argument whose first component is always a xfs_fsop_handlereq_t, | 
|  | * so we can pass that sub structure into this handy, shared routine. | 
|  | * | 
|  | * If no error, caller must always iput the returned inode. | 
|  | */ | 
|  | STATIC int | 
|  | xfs_vget_fsop_handlereq_compat( | 
|  | xfs_mount_t		*mp, | 
|  | struct inode		*parinode,	/* parent inode pointer    */ | 
|  | compat_xfs_fsop_handlereq_t	*hreq, | 
|  | struct inode		**inode) | 
|  | { | 
|  | void			__user *hanp; | 
|  | size_t			hlen; | 
|  | xfs_fid_t		*xfid; | 
|  | xfs_handle_t		*handlep; | 
|  | xfs_handle_t		handle; | 
|  | xfs_inode_t		*ip; | 
|  | xfs_ino_t		ino; | 
|  | __u32			igen; | 
|  | int			error; | 
|  |  | 
|  | /* | 
|  | * Only allow handle opens under a directory. | 
|  | */ | 
|  | if (!S_ISDIR(parinode->i_mode)) | 
|  | return XFS_ERROR(ENOTDIR); | 
|  |  | 
|  | hanp = compat_ptr(hreq->ihandle); | 
|  | hlen = hreq->ihandlen; | 
|  | handlep = &handle; | 
|  |  | 
|  | if (hlen < sizeof(handlep->ha_fsid) || hlen > sizeof(*handlep)) | 
|  | return XFS_ERROR(EINVAL); | 
|  | if (copy_from_user(handlep, hanp, hlen)) | 
|  | return XFS_ERROR(EFAULT); | 
|  | if (hlen < sizeof(*handlep)) | 
|  | memset(((char *)handlep) + hlen, 0, sizeof(*handlep) - hlen); | 
|  | if (hlen > sizeof(handlep->ha_fsid)) { | 
|  | if (handlep->ha_fid.fid_len != | 
|  | (hlen - sizeof(handlep->ha_fsid) - | 
|  | sizeof(handlep->ha_fid.fid_len)) || | 
|  | handlep->ha_fid.fid_pad) | 
|  | return XFS_ERROR(EINVAL); | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Crack the handle, obtain the inode # & generation # | 
|  | */ | 
|  | xfid = (struct xfs_fid *)&handlep->ha_fid; | 
|  | if (xfid->fid_len == sizeof(*xfid) - sizeof(xfid->fid_len)) { | 
|  | ino  = xfid->fid_ino; | 
|  | igen = xfid->fid_gen; | 
|  | } else { | 
|  | return XFS_ERROR(EINVAL); | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Get the XFS inode, building a Linux inode to go with it. | 
|  | */ | 
|  | error = xfs_iget(mp, NULL, ino, 0, XFS_ILOCK_SHARED, &ip, 0); | 
|  | if (error) | 
|  | return error; | 
|  | if (ip == NULL) | 
|  | return XFS_ERROR(EIO); | 
|  | if (ip->i_d.di_gen != igen) { | 
|  | xfs_iput_new(ip, XFS_ILOCK_SHARED); | 
|  | return XFS_ERROR(ENOENT); | 
|  | } | 
|  |  | 
|  | xfs_iunlock(ip, XFS_ILOCK_SHARED); | 
|  |  | 
|  | *inode = VFS_I(ip); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_compat_attrlist_by_handle( | 
|  | xfs_mount_t		*mp, | 
|  | void			__user *arg, | 
|  | struct inode		*parinode) | 
|  | { | 
|  | int			error; | 
|  | attrlist_cursor_kern_t	*cursor; | 
|  | compat_xfs_fsop_attrlist_handlereq_t al_hreq; | 
|  | struct inode		*inode; | 
|  | char			*kbuf; | 
|  |  | 
|  | if (!capable(CAP_SYS_ADMIN)) | 
|  | return -XFS_ERROR(EPERM); | 
|  | if (copy_from_user(&al_hreq, arg, | 
|  | sizeof(compat_xfs_fsop_attrlist_handlereq_t))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | if (al_hreq.buflen > XATTR_LIST_MAX) | 
|  | return -XFS_ERROR(EINVAL); | 
|  |  | 
|  | /* | 
|  | * Reject flags, only allow namespaces. | 
|  | */ | 
|  | if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE)) | 
|  | return -XFS_ERROR(EINVAL); | 
|  |  | 
|  | error = xfs_vget_fsop_handlereq_compat(mp, parinode, &al_hreq.hreq, | 
|  | &inode); | 
|  | if (error) | 
|  | goto out; | 
|  |  | 
|  | kbuf = kmalloc(al_hreq.buflen, GFP_KERNEL); | 
|  | if (!kbuf) | 
|  | goto out_vn_rele; | 
|  |  | 
|  | cursor = (attrlist_cursor_kern_t *)&al_hreq.pos; | 
|  | error = xfs_attr_list(XFS_I(inode), kbuf, al_hreq.buflen, | 
|  | al_hreq.flags, cursor); | 
|  | if (error) | 
|  | goto out_kfree; | 
|  |  | 
|  | if (copy_to_user(compat_ptr(al_hreq.buffer), kbuf, al_hreq.buflen)) | 
|  | error = -EFAULT; | 
|  |  | 
|  | out_kfree: | 
|  | kfree(kbuf); | 
|  | out_vn_rele: | 
|  | iput(inode); | 
|  | out: | 
|  | return -error; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_compat_attrmulti_by_handle( | 
|  | xfs_mount_t				*mp, | 
|  | void					__user *arg, | 
|  | struct inode				*parinode) | 
|  | { | 
|  | int					error; | 
|  | compat_xfs_attr_multiop_t		*ops; | 
|  | compat_xfs_fsop_attrmulti_handlereq_t	am_hreq; | 
|  | struct inode				*inode; | 
|  | unsigned int				i, size; | 
|  | char					*attr_name; | 
|  |  | 
|  | if (!capable(CAP_SYS_ADMIN)) | 
|  | return -XFS_ERROR(EPERM); | 
|  | if (copy_from_user(&am_hreq, arg, | 
|  | sizeof(compat_xfs_fsop_attrmulti_handlereq_t))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  |  | 
|  | error = xfs_vget_fsop_handlereq_compat(mp, parinode, &am_hreq.hreq, | 
|  | &inode); | 
|  | if (error) | 
|  | goto out; | 
|  |  | 
|  | error = E2BIG; | 
|  | size = am_hreq.opcount * sizeof(compat_xfs_attr_multiop_t); | 
|  | if (!size || size > 16 * PAGE_SIZE) | 
|  | goto out_vn_rele; | 
|  |  | 
|  | error = ENOMEM; | 
|  | ops = kmalloc(size, GFP_KERNEL); | 
|  | if (!ops) | 
|  | goto out_vn_rele; | 
|  |  | 
|  | error = EFAULT; | 
|  | if (copy_from_user(ops, compat_ptr(am_hreq.ops), size)) | 
|  | goto out_kfree_ops; | 
|  |  | 
|  | attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL); | 
|  | if (!attr_name) | 
|  | goto out_kfree_ops; | 
|  |  | 
|  |  | 
|  | error = 0; | 
|  | for (i = 0; i < am_hreq.opcount; i++) { | 
|  | ops[i].am_error = strncpy_from_user(attr_name, | 
|  | compat_ptr(ops[i].am_attrname), | 
|  | MAXNAMELEN); | 
|  | if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN) | 
|  | error = -ERANGE; | 
|  | if (ops[i].am_error < 0) | 
|  | break; | 
|  |  | 
|  | switch (ops[i].am_opcode) { | 
|  | case ATTR_OP_GET: | 
|  | ops[i].am_error = xfs_attrmulti_attr_get(inode, | 
|  | attr_name, | 
|  | compat_ptr(ops[i].am_attrvalue), | 
|  | &ops[i].am_length, ops[i].am_flags); | 
|  | break; | 
|  | case ATTR_OP_SET: | 
|  | ops[i].am_error = xfs_attrmulti_attr_set(inode, | 
|  | attr_name, | 
|  | compat_ptr(ops[i].am_attrvalue), | 
|  | ops[i].am_length, ops[i].am_flags); | 
|  | break; | 
|  | case ATTR_OP_REMOVE: | 
|  | ops[i].am_error = xfs_attrmulti_attr_remove(inode, | 
|  | attr_name, ops[i].am_flags); | 
|  | break; | 
|  | default: | 
|  | ops[i].am_error = EINVAL; | 
|  | } | 
|  | } | 
|  |  | 
|  | if (copy_to_user(compat_ptr(am_hreq.ops), ops, size)) | 
|  | error = XFS_ERROR(EFAULT); | 
|  |  | 
|  | kfree(attr_name); | 
|  | out_kfree_ops: | 
|  | kfree(ops); | 
|  | out_vn_rele: | 
|  | iput(inode); | 
|  | out: | 
|  | return -error; | 
|  | } | 
|  |  | 
|  | STATIC int | 
|  | xfs_compat_fssetdm_by_handle( | 
|  | xfs_mount_t		*mp, | 
|  | void			__user *arg, | 
|  | struct inode		*parinode) | 
|  | { | 
|  | int			error; | 
|  | struct fsdmidata	fsd; | 
|  | compat_xfs_fsop_setdm_handlereq_t dmhreq; | 
|  | struct inode		*inode; | 
|  |  | 
|  | if (!capable(CAP_MKNOD)) | 
|  | return -XFS_ERROR(EPERM); | 
|  | if (copy_from_user(&dmhreq, arg, | 
|  | sizeof(compat_xfs_fsop_setdm_handlereq_t))) | 
|  | return -XFS_ERROR(EFAULT); | 
|  |  | 
|  | error = xfs_vget_fsop_handlereq_compat(mp, parinode, &dmhreq.hreq, | 
|  | &inode); | 
|  | if (error) | 
|  | return -error; | 
|  |  | 
|  | if (IS_IMMUTABLE(inode) || IS_APPEND(inode)) { | 
|  | error = -XFS_ERROR(EPERM); | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | if (copy_from_user(&fsd, compat_ptr(dmhreq.data), sizeof(fsd))) { | 
|  | error = -XFS_ERROR(EFAULT); | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | error = -xfs_set_dmattrs(XFS_I(inode), fsd.fsd_dmevmask, | 
|  | fsd.fsd_dmstate); | 
|  |  | 
|  | out: | 
|  | iput(inode); | 
|  | return error; | 
|  | } | 
|  |  | 
|  | long | 
|  | xfs_file_compat_ioctl( | 
|  | struct file		*filp, | 
|  | unsigned		cmd, | 
|  | unsigned long		p) | 
|  | { | 
|  | struct inode		*inode = filp->f_path.dentry->d_inode; | 
|  | struct xfs_inode	*ip = XFS_I(inode); | 
|  | struct xfs_mount	*mp = ip->i_mount; | 
|  | void			__user *arg = (void __user *)p; | 
|  | int			ioflags = 0; | 
|  | int			error; | 
|  |  | 
|  | if (filp->f_mode & FMODE_NOCMTIME) | 
|  | ioflags |= IO_INVIS; | 
|  |  | 
|  | xfs_itrace_entry(ip); | 
|  |  | 
|  | switch (cmd) { | 
|  | /* No size or alignment issues on any arch */ | 
|  | case XFS_IOC_DIOINFO: | 
|  | case XFS_IOC_FSGEOMETRY: | 
|  | case XFS_IOC_FSGETXATTR: | 
|  | case XFS_IOC_FSSETXATTR: | 
|  | case XFS_IOC_FSGETXATTRA: | 
|  | case XFS_IOC_FSSETDM: | 
|  | case XFS_IOC_GETBMAP: | 
|  | case XFS_IOC_GETBMAPA: | 
|  | case XFS_IOC_GETBMAPX: | 
|  | case XFS_IOC_FSCOUNTS: | 
|  | case XFS_IOC_SET_RESBLKS: | 
|  | case XFS_IOC_GET_RESBLKS: | 
|  | case XFS_IOC_FSGROWFSLOG: | 
|  | case XFS_IOC_FREEZE: | 
|  | case XFS_IOC_THAW: | 
|  | case XFS_IOC_GOINGDOWN: | 
|  | case XFS_IOC_ERROR_INJECTION: | 
|  | case XFS_IOC_ERROR_CLEARALL: | 
|  | return xfs_file_ioctl(filp, cmd, p); | 
|  | #ifndef BROKEN_X86_ALIGNMENT | 
|  | /* These are handled fine if no alignment issues */ | 
|  | case XFS_IOC_ALLOCSP: | 
|  | case XFS_IOC_FREESP: | 
|  | case XFS_IOC_RESVSP: | 
|  | case XFS_IOC_UNRESVSP: | 
|  | case XFS_IOC_ALLOCSP64: | 
|  | case XFS_IOC_FREESP64: | 
|  | case XFS_IOC_RESVSP64: | 
|  | case XFS_IOC_UNRESVSP64: | 
|  | case XFS_IOC_FSGEOMETRY_V1: | 
|  | case XFS_IOC_FSGROWFSDATA: | 
|  | case XFS_IOC_FSGROWFSRT: | 
|  | return xfs_file_ioctl(filp, cmd, p); | 
|  | #else | 
|  | case XFS_IOC_ALLOCSP_32: | 
|  | case XFS_IOC_FREESP_32: | 
|  | case XFS_IOC_ALLOCSP64_32: | 
|  | case XFS_IOC_FREESP64_32: | 
|  | case XFS_IOC_RESVSP_32: | 
|  | case XFS_IOC_UNRESVSP_32: | 
|  | case XFS_IOC_RESVSP64_32: | 
|  | case XFS_IOC_UNRESVSP64_32: { | 
|  | struct xfs_flock64	bf; | 
|  |  | 
|  | if (xfs_compat_flock64_copyin(&bf, arg)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | cmd = _NATIVE_IOC(cmd, struct xfs_flock64); | 
|  | return xfs_ioc_space(ip, inode, filp, ioflags, cmd, &bf); | 
|  | } | 
|  | case XFS_IOC_FSGEOMETRY_V1_32: | 
|  | return xfs_compat_ioc_fsgeometry_v1(mp, arg); | 
|  | case XFS_IOC_FSGROWFSDATA_32: { | 
|  | struct xfs_growfs_data	in; | 
|  |  | 
|  | if (xfs_compat_growfs_data_copyin(&in, arg)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | error = xfs_growfs_data(mp, &in); | 
|  | return -error; | 
|  | } | 
|  | case XFS_IOC_FSGROWFSRT_32: { | 
|  | struct xfs_growfs_rt	in; | 
|  |  | 
|  | if (xfs_compat_growfs_rt_copyin(&in, arg)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | error = xfs_growfs_rt(mp, &in); | 
|  | return -error; | 
|  | } | 
|  | #endif | 
|  | /* long changes size, but xfs only copiese out 32 bits */ | 
|  | case XFS_IOC_GETXFLAGS_32: | 
|  | case XFS_IOC_SETXFLAGS_32: | 
|  | case XFS_IOC_GETVERSION_32: | 
|  | cmd = _NATIVE_IOC(cmd, long); | 
|  | return xfs_file_ioctl(filp, cmd, p); | 
|  | case XFS_IOC_SWAPEXT: { | 
|  | struct xfs_swapext	  sxp; | 
|  | struct compat_xfs_swapext __user *sxu = arg; | 
|  |  | 
|  | /* Bulk copy in up to the sx_stat field, then copy bstat */ | 
|  | if (copy_from_user(&sxp, sxu, | 
|  | offsetof(struct xfs_swapext, sx_stat)) || | 
|  | xfs_ioctl32_bstat_copyin(&sxp.sx_stat, &sxu->sx_stat)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | error = xfs_swapext(&sxp); | 
|  | return -error; | 
|  | } | 
|  | case XFS_IOC_FSBULKSTAT_32: | 
|  | case XFS_IOC_FSBULKSTAT_SINGLE_32: | 
|  | case XFS_IOC_FSINUMBERS_32: | 
|  | return xfs_compat_ioc_bulkstat(mp, cmd, arg); | 
|  | case XFS_IOC_FD_TO_HANDLE_32: | 
|  | case XFS_IOC_PATH_TO_HANDLE_32: | 
|  | case XFS_IOC_PATH_TO_FSHANDLE_32: { | 
|  | struct xfs_fsop_handlereq	hreq; | 
|  |  | 
|  | if (xfs_compat_handlereq_copyin(&hreq, arg)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | cmd = _NATIVE_IOC(cmd, struct xfs_fsop_handlereq); | 
|  | return xfs_find_handle(cmd, &hreq); | 
|  | } | 
|  | case XFS_IOC_OPEN_BY_HANDLE_32: { | 
|  | struct xfs_fsop_handlereq	hreq; | 
|  |  | 
|  | if (xfs_compat_handlereq_copyin(&hreq, arg)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | return xfs_open_by_handle(mp, &hreq, filp, inode); | 
|  | } | 
|  | case XFS_IOC_READLINK_BY_HANDLE_32: { | 
|  | struct xfs_fsop_handlereq	hreq; | 
|  |  | 
|  | if (xfs_compat_handlereq_copyin(&hreq, arg)) | 
|  | return -XFS_ERROR(EFAULT); | 
|  | return xfs_readlink_by_handle(mp, &hreq, inode); | 
|  | } | 
|  | case XFS_IOC_ATTRLIST_BY_HANDLE_32: | 
|  | return xfs_compat_attrlist_by_handle(mp, arg, inode); | 
|  | case XFS_IOC_ATTRMULTI_BY_HANDLE_32: | 
|  | return xfs_compat_attrmulti_by_handle(mp, arg, inode); | 
|  | case XFS_IOC_FSSETDM_BY_HANDLE_32: | 
|  | return xfs_compat_fssetdm_by_handle(mp, arg, inode); | 
|  | default: | 
|  | return -XFS_ERROR(ENOIOCTLCMD); | 
|  | } | 
|  | } |