mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2024-12-05 22:56:39 +07:00
31978b5cc6
If we allocate less than sizeof(struct attrlist) then we end up
corrupting memory or doing a ZERO_PTR_SIZE dereference.
This can only be triggered with CAP_SYS_ADMIN.
Reported-by: Nico Golde <nico@ngolde.de>
Reported-by: Fabian Yamaguchi <fabs@goesec.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Dave Chinner <dchinner@redhat.com>
Signed-off-by: Ben Myers <bpm@sgi.com>
(cherry picked from commit 071c529eb6
)
681 lines
18 KiB
C
681 lines
18 KiB
C
/*
|
|
* Copyright (c) 2004-2005 Silicon Graphics, Inc.
|
|
* All Rights Reserved.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it would be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
#include <linux/compat.h>
|
|
#include <linux/ioctl.h>
|
|
#include <linux/mount.h>
|
|
#include <linux/slab.h>
|
|
#include <asm/uaccess.h>
|
|
#include "xfs.h"
|
|
#include "xfs_fs.h"
|
|
#include "xfs_format.h"
|
|
#include "xfs_log_format.h"
|
|
#include "xfs_trans_resv.h"
|
|
#include "xfs_sb.h"
|
|
#include "xfs_ag.h"
|
|
#include "xfs_mount.h"
|
|
#include "xfs_vnode.h"
|
|
#include "xfs_inode.h"
|
|
#include "xfs_itable.h"
|
|
#include "xfs_error.h"
|
|
#include "xfs_fsops.h"
|
|
#include "xfs_alloc.h"
|
|
#include "xfs_rtalloc.h"
|
|
#include "xfs_attr.h"
|
|
#include "xfs_ioctl.h"
|
|
#include "xfs_ioctl32.h"
|
|
#include "xfs_trace.h"
|
|
|
|
#define _NATIVE_IOC(cmd, type) \
|
|
_IOC(_IOC_DIR(cmd), _IOC_TYPE(cmd), _IOC_NR(cmd), sizeof(type))
|
|
|
|
#ifdef BROKEN_X86_ALIGNMENT
|
|
STATIC int
|
|
xfs_compat_flock64_copyin(
|
|
xfs_flock64_t *bf,
|
|
compat_xfs_flock64_t __user *arg32)
|
|
{
|
|
if (get_user(bf->l_type, &arg32->l_type) ||
|
|
get_user(bf->l_whence, &arg32->l_whence) ||
|
|
get_user(bf->l_start, &arg32->l_start) ||
|
|
get_user(bf->l_len, &arg32->l_len) ||
|
|
get_user(bf->l_sysid, &arg32->l_sysid) ||
|
|
get_user(bf->l_pid, &arg32->l_pid) ||
|
|
copy_from_user(bf->l_pad, &arg32->l_pad, 4*sizeof(u32)))
|
|
return -XFS_ERROR(EFAULT);
|
|
return 0;
|
|
}
|
|
|
|
STATIC int
|
|
xfs_compat_ioc_fsgeometry_v1(
|
|
struct xfs_mount *mp,
|
|
compat_xfs_fsop_geom_v1_t __user *arg32)
|
|
{
|
|
xfs_fsop_geom_t fsgeo;
|
|
int error;
|
|
|
|
error = xfs_fs_geometry(mp, &fsgeo, 3);
|
|
if (error)
|
|
return -error;
|
|
/* The 32-bit variant simply has some padding at the end */
|
|
if (copy_to_user(arg32, &fsgeo, sizeof(struct compat_xfs_fsop_geom_v1)))
|
|
return -XFS_ERROR(EFAULT);
|
|
return 0;
|
|
}
|
|
|
|
STATIC int
|
|
xfs_compat_growfs_data_copyin(
|
|
struct xfs_growfs_data *in,
|
|
compat_xfs_growfs_data_t __user *arg32)
|
|
{
|
|
if (get_user(in->newblocks, &arg32->newblocks) ||
|
|
get_user(in->imaxpct, &arg32->imaxpct))
|
|
return -XFS_ERROR(EFAULT);
|
|
return 0;
|
|
}
|
|
|
|
STATIC int
|
|
xfs_compat_growfs_rt_copyin(
|
|
struct xfs_growfs_rt *in,
|
|
compat_xfs_growfs_rt_t __user *arg32)
|
|
{
|
|
if (get_user(in->newblocks, &arg32->newblocks) ||
|
|
get_user(in->extsize, &arg32->extsize))
|
|
return -XFS_ERROR(EFAULT);
|
|
return 0;
|
|
}
|
|
|
|
STATIC int
|
|
xfs_inumbers_fmt_compat(
|
|
void __user *ubuffer,
|
|
const xfs_inogrp_t *buffer,
|
|
long count,
|
|
long *written)
|
|
{
|
|
compat_xfs_inogrp_t __user *p32 = ubuffer;
|
|
long i;
|
|
|
|
for (i = 0; i < count; i++) {
|
|
if (put_user(buffer[i].xi_startino, &p32[i].xi_startino) ||
|
|
put_user(buffer[i].xi_alloccount, &p32[i].xi_alloccount) ||
|
|
put_user(buffer[i].xi_allocmask, &p32[i].xi_allocmask))
|
|
return -XFS_ERROR(EFAULT);
|
|
}
|
|
*written = count * sizeof(*p32);
|
|
return 0;
|
|
}
|
|
|
|
#else
|
|
#define xfs_inumbers_fmt_compat xfs_inumbers_fmt
|
|
#endif /* BROKEN_X86_ALIGNMENT */
|
|
|
|
STATIC int
|
|
xfs_ioctl32_bstime_copyin(
|
|
xfs_bstime_t *bstime,
|
|
compat_xfs_bstime_t __user *bstime32)
|
|
{
|
|
compat_time_t sec32; /* tv_sec differs on 64 vs. 32 */
|
|
|
|
if (get_user(sec32, &bstime32->tv_sec) ||
|
|
get_user(bstime->tv_nsec, &bstime32->tv_nsec))
|
|
return -XFS_ERROR(EFAULT);
|
|
bstime->tv_sec = sec32;
|
|
return 0;
|
|
}
|
|
|
|
/* xfs_bstat_t has differing alignment on intel, & bstime_t sizes everywhere */
|
|
STATIC int
|
|
xfs_ioctl32_bstat_copyin(
|
|
xfs_bstat_t *bstat,
|
|
compat_xfs_bstat_t __user *bstat32)
|
|
{
|
|
if (get_user(bstat->bs_ino, &bstat32->bs_ino) ||
|
|
get_user(bstat->bs_mode, &bstat32->bs_mode) ||
|
|
get_user(bstat->bs_nlink, &bstat32->bs_nlink) ||
|
|
get_user(bstat->bs_uid, &bstat32->bs_uid) ||
|
|
get_user(bstat->bs_gid, &bstat32->bs_gid) ||
|
|
get_user(bstat->bs_rdev, &bstat32->bs_rdev) ||
|
|
get_user(bstat->bs_blksize, &bstat32->bs_blksize) ||
|
|
get_user(bstat->bs_size, &bstat32->bs_size) ||
|
|
xfs_ioctl32_bstime_copyin(&bstat->bs_atime, &bstat32->bs_atime) ||
|
|
xfs_ioctl32_bstime_copyin(&bstat->bs_mtime, &bstat32->bs_mtime) ||
|
|
xfs_ioctl32_bstime_copyin(&bstat->bs_ctime, &bstat32->bs_ctime) ||
|
|
get_user(bstat->bs_blocks, &bstat32->bs_size) ||
|
|
get_user(bstat->bs_xflags, &bstat32->bs_size) ||
|
|
get_user(bstat->bs_extsize, &bstat32->bs_extsize) ||
|
|
get_user(bstat->bs_extents, &bstat32->bs_extents) ||
|
|
get_user(bstat->bs_gen, &bstat32->bs_gen) ||
|
|
get_user(bstat->bs_projid_lo, &bstat32->bs_projid_lo) ||
|
|
get_user(bstat->bs_projid_hi, &bstat32->bs_projid_hi) ||
|
|
get_user(bstat->bs_dmevmask, &bstat32->bs_dmevmask) ||
|
|
get_user(bstat->bs_dmstate, &bstat32->bs_dmstate) ||
|
|
get_user(bstat->bs_aextents, &bstat32->bs_aextents))
|
|
return -XFS_ERROR(EFAULT);
|
|
return 0;
|
|
}
|
|
|
|
/* XFS_IOC_FSBULKSTAT and friends */
|
|
|
|
STATIC int
|
|
xfs_bstime_store_compat(
|
|
compat_xfs_bstime_t __user *p32,
|
|
const xfs_bstime_t *p)
|
|
{
|
|
__s32 sec32;
|
|
|
|
sec32 = p->tv_sec;
|
|
if (put_user(sec32, &p32->tv_sec) ||
|
|
put_user(p->tv_nsec, &p32->tv_nsec))
|
|
return -XFS_ERROR(EFAULT);
|
|
return 0;
|
|
}
|
|
|
|
/* Return 0 on success or positive error (to xfs_bulkstat()) */
|
|
STATIC int
|
|
xfs_bulkstat_one_fmt_compat(
|
|
void __user *ubuffer,
|
|
int ubsize,
|
|
int *ubused,
|
|
const xfs_bstat_t *buffer)
|
|
{
|
|
compat_xfs_bstat_t __user *p32 = ubuffer;
|
|
|
|
if (ubsize < sizeof(*p32))
|
|
return XFS_ERROR(ENOMEM);
|
|
|
|
if (put_user(buffer->bs_ino, &p32->bs_ino) ||
|
|
put_user(buffer->bs_mode, &p32->bs_mode) ||
|
|
put_user(buffer->bs_nlink, &p32->bs_nlink) ||
|
|
put_user(buffer->bs_uid, &p32->bs_uid) ||
|
|
put_user(buffer->bs_gid, &p32->bs_gid) ||
|
|
put_user(buffer->bs_rdev, &p32->bs_rdev) ||
|
|
put_user(buffer->bs_blksize, &p32->bs_blksize) ||
|
|
put_user(buffer->bs_size, &p32->bs_size) ||
|
|
xfs_bstime_store_compat(&p32->bs_atime, &buffer->bs_atime) ||
|
|
xfs_bstime_store_compat(&p32->bs_mtime, &buffer->bs_mtime) ||
|
|
xfs_bstime_store_compat(&p32->bs_ctime, &buffer->bs_ctime) ||
|
|
put_user(buffer->bs_blocks, &p32->bs_blocks) ||
|
|
put_user(buffer->bs_xflags, &p32->bs_xflags) ||
|
|
put_user(buffer->bs_extsize, &p32->bs_extsize) ||
|
|
put_user(buffer->bs_extents, &p32->bs_extents) ||
|
|
put_user(buffer->bs_gen, &p32->bs_gen) ||
|
|
put_user(buffer->bs_projid, &p32->bs_projid) ||
|
|
put_user(buffer->bs_projid_hi, &p32->bs_projid_hi) ||
|
|
put_user(buffer->bs_dmevmask, &p32->bs_dmevmask) ||
|
|
put_user(buffer->bs_dmstate, &p32->bs_dmstate) ||
|
|
put_user(buffer->bs_aextents, &p32->bs_aextents))
|
|
return XFS_ERROR(EFAULT);
|
|
if (ubused)
|
|
*ubused = sizeof(*p32);
|
|
return 0;
|
|
}
|
|
|
|
STATIC int
|
|
xfs_bulkstat_one_compat(
|
|
xfs_mount_t *mp, /* mount point for filesystem */
|
|
xfs_ino_t ino, /* inode number to get data for */
|
|
void __user *buffer, /* buffer to place output in */
|
|
int ubsize, /* size of buffer */
|
|
int *ubused, /* bytes used by me */
|
|
int *stat) /* BULKSTAT_RV_... */
|
|
{
|
|
return xfs_bulkstat_one_int(mp, ino, buffer, ubsize,
|
|
xfs_bulkstat_one_fmt_compat,
|
|
ubused, stat);
|
|
}
|
|
|
|
/* copied from xfs_ioctl.c */
|
|
STATIC int
|
|
xfs_compat_ioc_bulkstat(
|
|
xfs_mount_t *mp,
|
|
unsigned int cmd,
|
|
compat_xfs_fsop_bulkreq_t __user *p32)
|
|
{
|
|
u32 addr;
|
|
xfs_fsop_bulkreq_t bulkreq;
|
|
int count; /* # of records returned */
|
|
xfs_ino_t inlast; /* last inode number */
|
|
int done;
|
|
int error;
|
|
|
|
/* done = 1 if there are more stats to get and if bulkstat */
|
|
/* should be called again (unused here, but used in dmapi) */
|
|
|
|
if (!capable(CAP_SYS_ADMIN))
|
|
return -XFS_ERROR(EPERM);
|
|
|
|
if (XFS_FORCED_SHUTDOWN(mp))
|
|
return -XFS_ERROR(EIO);
|
|
|
|
if (get_user(addr, &p32->lastip))
|
|
return -XFS_ERROR(EFAULT);
|
|
bulkreq.lastip = compat_ptr(addr);
|
|
if (get_user(bulkreq.icount, &p32->icount) ||
|
|
get_user(addr, &p32->ubuffer))
|
|
return -XFS_ERROR(EFAULT);
|
|
bulkreq.ubuffer = compat_ptr(addr);
|
|
if (get_user(addr, &p32->ocount))
|
|
return -XFS_ERROR(EFAULT);
|
|
bulkreq.ocount = compat_ptr(addr);
|
|
|
|
if (copy_from_user(&inlast, bulkreq.lastip, sizeof(__s64)))
|
|
return -XFS_ERROR(EFAULT);
|
|
|
|
if ((count = bulkreq.icount) <= 0)
|
|
return -XFS_ERROR(EINVAL);
|
|
|
|
if (bulkreq.ubuffer == NULL)
|
|
return -XFS_ERROR(EINVAL);
|
|
|
|
if (cmd == XFS_IOC_FSINUMBERS_32) {
|
|
error = xfs_inumbers(mp, &inlast, &count,
|
|
bulkreq.ubuffer, xfs_inumbers_fmt_compat);
|
|
} else if (cmd == XFS_IOC_FSBULKSTAT_SINGLE_32) {
|
|
int res;
|
|
|
|
error = xfs_bulkstat_one_compat(mp, inlast, bulkreq.ubuffer,
|
|
sizeof(compat_xfs_bstat_t), NULL, &res);
|
|
} else if (cmd == XFS_IOC_FSBULKSTAT_32) {
|
|
error = xfs_bulkstat(mp, &inlast, &count,
|
|
xfs_bulkstat_one_compat, sizeof(compat_xfs_bstat_t),
|
|
bulkreq.ubuffer, &done);
|
|
} else
|
|
error = XFS_ERROR(EINVAL);
|
|
if (error)
|
|
return -error;
|
|
|
|
if (bulkreq.ocount != NULL) {
|
|
if (copy_to_user(bulkreq.lastip, &inlast,
|
|
sizeof(xfs_ino_t)))
|
|
return -XFS_ERROR(EFAULT);
|
|
|
|
if (copy_to_user(bulkreq.ocount, &count, sizeof(count)))
|
|
return -XFS_ERROR(EFAULT);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
STATIC int
|
|
xfs_compat_handlereq_copyin(
|
|
xfs_fsop_handlereq_t *hreq,
|
|
compat_xfs_fsop_handlereq_t __user *arg32)
|
|
{
|
|
compat_xfs_fsop_handlereq_t hreq32;
|
|
|
|
if (copy_from_user(&hreq32, arg32, sizeof(compat_xfs_fsop_handlereq_t)))
|
|
return -XFS_ERROR(EFAULT);
|
|
|
|
hreq->fd = hreq32.fd;
|
|
hreq->path = compat_ptr(hreq32.path);
|
|
hreq->oflags = hreq32.oflags;
|
|
hreq->ihandle = compat_ptr(hreq32.ihandle);
|
|
hreq->ihandlen = hreq32.ihandlen;
|
|
hreq->ohandle = compat_ptr(hreq32.ohandle);
|
|
hreq->ohandlen = compat_ptr(hreq32.ohandlen);
|
|
|
|
return 0;
|
|
}
|
|
|
|
STATIC struct dentry *
|
|
xfs_compat_handlereq_to_dentry(
|
|
struct file *parfilp,
|
|
compat_xfs_fsop_handlereq_t *hreq)
|
|
{
|
|
return xfs_handle_to_dentry(parfilp,
|
|
compat_ptr(hreq->ihandle), hreq->ihandlen);
|
|
}
|
|
|
|
STATIC int
|
|
xfs_compat_attrlist_by_handle(
|
|
struct file *parfilp,
|
|
void __user *arg)
|
|
{
|
|
int error;
|
|
attrlist_cursor_kern_t *cursor;
|
|
compat_xfs_fsop_attrlist_handlereq_t al_hreq;
|
|
struct dentry *dentry;
|
|
char *kbuf;
|
|
|
|
if (!capable(CAP_SYS_ADMIN))
|
|
return -XFS_ERROR(EPERM);
|
|
if (copy_from_user(&al_hreq, arg,
|
|
sizeof(compat_xfs_fsop_attrlist_handlereq_t)))
|
|
return -XFS_ERROR(EFAULT);
|
|
if (al_hreq.buflen < sizeof(struct attrlist) ||
|
|
al_hreq.buflen > XATTR_LIST_MAX)
|
|
return -XFS_ERROR(EINVAL);
|
|
|
|
/*
|
|
* Reject flags, only allow namespaces.
|
|
*/
|
|
if (al_hreq.flags & ~(ATTR_ROOT | ATTR_SECURE))
|
|
return -XFS_ERROR(EINVAL);
|
|
|
|
dentry = xfs_compat_handlereq_to_dentry(parfilp, &al_hreq.hreq);
|
|
if (IS_ERR(dentry))
|
|
return PTR_ERR(dentry);
|
|
|
|
error = -ENOMEM;
|
|
kbuf = kmem_zalloc_large(al_hreq.buflen, KM_SLEEP);
|
|
if (!kbuf)
|
|
goto out_dput;
|
|
|
|
cursor = (attrlist_cursor_kern_t *)&al_hreq.pos;
|
|
error = -xfs_attr_list(XFS_I(dentry->d_inode), kbuf, al_hreq.buflen,
|
|
al_hreq.flags, cursor);
|
|
if (error)
|
|
goto out_kfree;
|
|
|
|
if (copy_to_user(compat_ptr(al_hreq.buffer), kbuf, al_hreq.buflen))
|
|
error = -EFAULT;
|
|
|
|
out_kfree:
|
|
kmem_free(kbuf);
|
|
out_dput:
|
|
dput(dentry);
|
|
return error;
|
|
}
|
|
|
|
STATIC int
|
|
xfs_compat_attrmulti_by_handle(
|
|
struct file *parfilp,
|
|
void __user *arg)
|
|
{
|
|
int error;
|
|
compat_xfs_attr_multiop_t *ops;
|
|
compat_xfs_fsop_attrmulti_handlereq_t am_hreq;
|
|
struct dentry *dentry;
|
|
unsigned int i, size;
|
|
unsigned char *attr_name;
|
|
|
|
if (!capable(CAP_SYS_ADMIN))
|
|
return -XFS_ERROR(EPERM);
|
|
if (copy_from_user(&am_hreq, arg,
|
|
sizeof(compat_xfs_fsop_attrmulti_handlereq_t)))
|
|
return -XFS_ERROR(EFAULT);
|
|
|
|
/* overflow check */
|
|
if (am_hreq.opcount >= INT_MAX / sizeof(compat_xfs_attr_multiop_t))
|
|
return -E2BIG;
|
|
|
|
dentry = xfs_compat_handlereq_to_dentry(parfilp, &am_hreq.hreq);
|
|
if (IS_ERR(dentry))
|
|
return PTR_ERR(dentry);
|
|
|
|
error = E2BIG;
|
|
size = am_hreq.opcount * sizeof(compat_xfs_attr_multiop_t);
|
|
if (!size || size > 16 * PAGE_SIZE)
|
|
goto out_dput;
|
|
|
|
ops = memdup_user(compat_ptr(am_hreq.ops), size);
|
|
if (IS_ERR(ops)) {
|
|
error = PTR_ERR(ops);
|
|
goto out_dput;
|
|
}
|
|
|
|
attr_name = kmalloc(MAXNAMELEN, GFP_KERNEL);
|
|
if (!attr_name)
|
|
goto out_kfree_ops;
|
|
|
|
error = 0;
|
|
for (i = 0; i < am_hreq.opcount; i++) {
|
|
ops[i].am_error = strncpy_from_user((char *)attr_name,
|
|
compat_ptr(ops[i].am_attrname),
|
|
MAXNAMELEN);
|
|
if (ops[i].am_error == 0 || ops[i].am_error == MAXNAMELEN)
|
|
error = -ERANGE;
|
|
if (ops[i].am_error < 0)
|
|
break;
|
|
|
|
switch (ops[i].am_opcode) {
|
|
case ATTR_OP_GET:
|
|
ops[i].am_error = xfs_attrmulti_attr_get(
|
|
dentry->d_inode, attr_name,
|
|
compat_ptr(ops[i].am_attrvalue),
|
|
&ops[i].am_length, ops[i].am_flags);
|
|
break;
|
|
case ATTR_OP_SET:
|
|
ops[i].am_error = mnt_want_write_file(parfilp);
|
|
if (ops[i].am_error)
|
|
break;
|
|
ops[i].am_error = xfs_attrmulti_attr_set(
|
|
dentry->d_inode, attr_name,
|
|
compat_ptr(ops[i].am_attrvalue),
|
|
ops[i].am_length, ops[i].am_flags);
|
|
mnt_drop_write_file(parfilp);
|
|
break;
|
|
case ATTR_OP_REMOVE:
|
|
ops[i].am_error = mnt_want_write_file(parfilp);
|
|
if (ops[i].am_error)
|
|
break;
|
|
ops[i].am_error = xfs_attrmulti_attr_remove(
|
|
dentry->d_inode, attr_name,
|
|
ops[i].am_flags);
|
|
mnt_drop_write_file(parfilp);
|
|
break;
|
|
default:
|
|
ops[i].am_error = EINVAL;
|
|
}
|
|
}
|
|
|
|
if (copy_to_user(compat_ptr(am_hreq.ops), ops, size))
|
|
error = XFS_ERROR(EFAULT);
|
|
|
|
kfree(attr_name);
|
|
out_kfree_ops:
|
|
kfree(ops);
|
|
out_dput:
|
|
dput(dentry);
|
|
return -error;
|
|
}
|
|
|
|
STATIC int
|
|
xfs_compat_fssetdm_by_handle(
|
|
struct file *parfilp,
|
|
void __user *arg)
|
|
{
|
|
int error;
|
|
struct fsdmidata fsd;
|
|
compat_xfs_fsop_setdm_handlereq_t dmhreq;
|
|
struct dentry *dentry;
|
|
|
|
if (!capable(CAP_MKNOD))
|
|
return -XFS_ERROR(EPERM);
|
|
if (copy_from_user(&dmhreq, arg,
|
|
sizeof(compat_xfs_fsop_setdm_handlereq_t)))
|
|
return -XFS_ERROR(EFAULT);
|
|
|
|
dentry = xfs_compat_handlereq_to_dentry(parfilp, &dmhreq.hreq);
|
|
if (IS_ERR(dentry))
|
|
return PTR_ERR(dentry);
|
|
|
|
if (IS_IMMUTABLE(dentry->d_inode) || IS_APPEND(dentry->d_inode)) {
|
|
error = -XFS_ERROR(EPERM);
|
|
goto out;
|
|
}
|
|
|
|
if (copy_from_user(&fsd, compat_ptr(dmhreq.data), sizeof(fsd))) {
|
|
error = -XFS_ERROR(EFAULT);
|
|
goto out;
|
|
}
|
|
|
|
error = -xfs_set_dmattrs(XFS_I(dentry->d_inode), fsd.fsd_dmevmask,
|
|
fsd.fsd_dmstate);
|
|
|
|
out:
|
|
dput(dentry);
|
|
return error;
|
|
}
|
|
|
|
long
|
|
xfs_file_compat_ioctl(
|
|
struct file *filp,
|
|
unsigned cmd,
|
|
unsigned long p)
|
|
{
|
|
struct inode *inode = file_inode(filp);
|
|
struct xfs_inode *ip = XFS_I(inode);
|
|
struct xfs_mount *mp = ip->i_mount;
|
|
void __user *arg = (void __user *)p;
|
|
int ioflags = 0;
|
|
int error;
|
|
|
|
if (filp->f_mode & FMODE_NOCMTIME)
|
|
ioflags |= IO_INVIS;
|
|
|
|
trace_xfs_file_compat_ioctl(ip);
|
|
|
|
switch (cmd) {
|
|
/* No size or alignment issues on any arch */
|
|
case XFS_IOC_DIOINFO:
|
|
case XFS_IOC_FSGEOMETRY:
|
|
case XFS_IOC_FSGETXATTR:
|
|
case XFS_IOC_FSSETXATTR:
|
|
case XFS_IOC_FSGETXATTRA:
|
|
case XFS_IOC_FSSETDM:
|
|
case XFS_IOC_GETBMAP:
|
|
case XFS_IOC_GETBMAPA:
|
|
case XFS_IOC_GETBMAPX:
|
|
case XFS_IOC_FSCOUNTS:
|
|
case XFS_IOC_SET_RESBLKS:
|
|
case XFS_IOC_GET_RESBLKS:
|
|
case XFS_IOC_FSGROWFSLOG:
|
|
case XFS_IOC_GOINGDOWN:
|
|
case XFS_IOC_ERROR_INJECTION:
|
|
case XFS_IOC_ERROR_CLEARALL:
|
|
return xfs_file_ioctl(filp, cmd, p);
|
|
#ifndef BROKEN_X86_ALIGNMENT
|
|
/* These are handled fine if no alignment issues */
|
|
case XFS_IOC_ALLOCSP:
|
|
case XFS_IOC_FREESP:
|
|
case XFS_IOC_RESVSP:
|
|
case XFS_IOC_UNRESVSP:
|
|
case XFS_IOC_ALLOCSP64:
|
|
case XFS_IOC_FREESP64:
|
|
case XFS_IOC_RESVSP64:
|
|
case XFS_IOC_UNRESVSP64:
|
|
case XFS_IOC_FSGEOMETRY_V1:
|
|
case XFS_IOC_FSGROWFSDATA:
|
|
case XFS_IOC_FSGROWFSRT:
|
|
case XFS_IOC_ZERO_RANGE:
|
|
return xfs_file_ioctl(filp, cmd, p);
|
|
#else
|
|
case XFS_IOC_ALLOCSP_32:
|
|
case XFS_IOC_FREESP_32:
|
|
case XFS_IOC_ALLOCSP64_32:
|
|
case XFS_IOC_FREESP64_32:
|
|
case XFS_IOC_RESVSP_32:
|
|
case XFS_IOC_UNRESVSP_32:
|
|
case XFS_IOC_RESVSP64_32:
|
|
case XFS_IOC_UNRESVSP64_32:
|
|
case XFS_IOC_ZERO_RANGE_32: {
|
|
struct xfs_flock64 bf;
|
|
|
|
if (xfs_compat_flock64_copyin(&bf, arg))
|
|
return -XFS_ERROR(EFAULT);
|
|
cmd = _NATIVE_IOC(cmd, struct xfs_flock64);
|
|
return xfs_ioc_space(ip, inode, filp, ioflags, cmd, &bf);
|
|
}
|
|
case XFS_IOC_FSGEOMETRY_V1_32:
|
|
return xfs_compat_ioc_fsgeometry_v1(mp, arg);
|
|
case XFS_IOC_FSGROWFSDATA_32: {
|
|
struct xfs_growfs_data in;
|
|
|
|
if (xfs_compat_growfs_data_copyin(&in, arg))
|
|
return -XFS_ERROR(EFAULT);
|
|
error = mnt_want_write_file(filp);
|
|
if (error)
|
|
return error;
|
|
error = xfs_growfs_data(mp, &in);
|
|
mnt_drop_write_file(filp);
|
|
return -error;
|
|
}
|
|
case XFS_IOC_FSGROWFSRT_32: {
|
|
struct xfs_growfs_rt in;
|
|
|
|
if (xfs_compat_growfs_rt_copyin(&in, arg))
|
|
return -XFS_ERROR(EFAULT);
|
|
error = mnt_want_write_file(filp);
|
|
if (error)
|
|
return error;
|
|
error = xfs_growfs_rt(mp, &in);
|
|
mnt_drop_write_file(filp);
|
|
return -error;
|
|
}
|
|
#endif
|
|
/* long changes size, but xfs only copiese out 32 bits */
|
|
case XFS_IOC_GETXFLAGS_32:
|
|
case XFS_IOC_SETXFLAGS_32:
|
|
case XFS_IOC_GETVERSION_32:
|
|
cmd = _NATIVE_IOC(cmd, long);
|
|
return xfs_file_ioctl(filp, cmd, p);
|
|
case XFS_IOC_SWAPEXT_32: {
|
|
struct xfs_swapext sxp;
|
|
struct compat_xfs_swapext __user *sxu = arg;
|
|
|
|
/* Bulk copy in up to the sx_stat field, then copy bstat */
|
|
if (copy_from_user(&sxp, sxu,
|
|
offsetof(struct xfs_swapext, sx_stat)) ||
|
|
xfs_ioctl32_bstat_copyin(&sxp.sx_stat, &sxu->sx_stat))
|
|
return -XFS_ERROR(EFAULT);
|
|
error = mnt_want_write_file(filp);
|
|
if (error)
|
|
return error;
|
|
error = xfs_ioc_swapext(&sxp);
|
|
mnt_drop_write_file(filp);
|
|
return -error;
|
|
}
|
|
case XFS_IOC_FSBULKSTAT_32:
|
|
case XFS_IOC_FSBULKSTAT_SINGLE_32:
|
|
case XFS_IOC_FSINUMBERS_32:
|
|
return xfs_compat_ioc_bulkstat(mp, cmd, arg);
|
|
case XFS_IOC_FD_TO_HANDLE_32:
|
|
case XFS_IOC_PATH_TO_HANDLE_32:
|
|
case XFS_IOC_PATH_TO_FSHANDLE_32: {
|
|
struct xfs_fsop_handlereq hreq;
|
|
|
|
if (xfs_compat_handlereq_copyin(&hreq, arg))
|
|
return -XFS_ERROR(EFAULT);
|
|
cmd = _NATIVE_IOC(cmd, struct xfs_fsop_handlereq);
|
|
return xfs_find_handle(cmd, &hreq);
|
|
}
|
|
case XFS_IOC_OPEN_BY_HANDLE_32: {
|
|
struct xfs_fsop_handlereq hreq;
|
|
|
|
if (xfs_compat_handlereq_copyin(&hreq, arg))
|
|
return -XFS_ERROR(EFAULT);
|
|
return xfs_open_by_handle(filp, &hreq);
|
|
}
|
|
case XFS_IOC_READLINK_BY_HANDLE_32: {
|
|
struct xfs_fsop_handlereq hreq;
|
|
|
|
if (xfs_compat_handlereq_copyin(&hreq, arg))
|
|
return -XFS_ERROR(EFAULT);
|
|
return xfs_readlink_by_handle(filp, &hreq);
|
|
}
|
|
case XFS_IOC_ATTRLIST_BY_HANDLE_32:
|
|
return xfs_compat_attrlist_by_handle(filp, arg);
|
|
case XFS_IOC_ATTRMULTI_BY_HANDLE_32:
|
|
return xfs_compat_attrmulti_by_handle(filp, arg);
|
|
case XFS_IOC_FSSETDM_BY_HANDLE_32:
|
|
return xfs_compat_fssetdm_by_handle(filp, arg);
|
|
default:
|
|
return -XFS_ERROR(ENOIOCTLCMD);
|
|
}
|
|
}
|