1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * Copyright (c) 2000-2006 Silicon Graphics, Inc.
4*4882a593Smuzhiyun * Copyright (c) 2012-2013 Red Hat, Inc.
5*4882a593Smuzhiyun * All rights reserved.
6*4882a593Smuzhiyun */
7*4882a593Smuzhiyun #include "xfs.h"
8*4882a593Smuzhiyun #include "xfs_fs.h"
9*4882a593Smuzhiyun #include "xfs_format.h"
10*4882a593Smuzhiyun #include "xfs_log_format.h"
11*4882a593Smuzhiyun #include "xfs_shared.h"
12*4882a593Smuzhiyun #include "xfs_trans_resv.h"
13*4882a593Smuzhiyun #include "xfs_mount.h"
14*4882a593Smuzhiyun #include "xfs_inode.h"
15*4882a593Smuzhiyun #include "xfs_error.h"
16*4882a593Smuzhiyun #include "xfs_trans.h"
17*4882a593Smuzhiyun #include "xfs_buf_item.h"
18*4882a593Smuzhiyun #include "xfs_log.h"
19*4882a593Smuzhiyun
20*4882a593Smuzhiyun
21*4882a593Smuzhiyun /*
22*4882a593Smuzhiyun * Each contiguous block has a header, so it is not just a simple pathlen
23*4882a593Smuzhiyun * to FSB conversion.
24*4882a593Smuzhiyun */
25*4882a593Smuzhiyun int
xfs_symlink_blocks(struct xfs_mount * mp,int pathlen)26*4882a593Smuzhiyun xfs_symlink_blocks(
27*4882a593Smuzhiyun struct xfs_mount *mp,
28*4882a593Smuzhiyun int pathlen)
29*4882a593Smuzhiyun {
30*4882a593Smuzhiyun int buflen = XFS_SYMLINK_BUF_SPACE(mp, mp->m_sb.sb_blocksize);
31*4882a593Smuzhiyun
32*4882a593Smuzhiyun return (pathlen + buflen - 1) / buflen;
33*4882a593Smuzhiyun }
34*4882a593Smuzhiyun
35*4882a593Smuzhiyun int
xfs_symlink_hdr_set(struct xfs_mount * mp,xfs_ino_t ino,uint32_t offset,uint32_t size,struct xfs_buf * bp)36*4882a593Smuzhiyun xfs_symlink_hdr_set(
37*4882a593Smuzhiyun struct xfs_mount *mp,
38*4882a593Smuzhiyun xfs_ino_t ino,
39*4882a593Smuzhiyun uint32_t offset,
40*4882a593Smuzhiyun uint32_t size,
41*4882a593Smuzhiyun struct xfs_buf *bp)
42*4882a593Smuzhiyun {
43*4882a593Smuzhiyun struct xfs_dsymlink_hdr *dsl = bp->b_addr;
44*4882a593Smuzhiyun
45*4882a593Smuzhiyun if (!xfs_sb_version_hascrc(&mp->m_sb))
46*4882a593Smuzhiyun return 0;
47*4882a593Smuzhiyun
48*4882a593Smuzhiyun memset(dsl, 0, sizeof(struct xfs_dsymlink_hdr));
49*4882a593Smuzhiyun dsl->sl_magic = cpu_to_be32(XFS_SYMLINK_MAGIC);
50*4882a593Smuzhiyun dsl->sl_offset = cpu_to_be32(offset);
51*4882a593Smuzhiyun dsl->sl_bytes = cpu_to_be32(size);
52*4882a593Smuzhiyun uuid_copy(&dsl->sl_uuid, &mp->m_sb.sb_meta_uuid);
53*4882a593Smuzhiyun dsl->sl_owner = cpu_to_be64(ino);
54*4882a593Smuzhiyun dsl->sl_blkno = cpu_to_be64(bp->b_bn);
55*4882a593Smuzhiyun bp->b_ops = &xfs_symlink_buf_ops;
56*4882a593Smuzhiyun
57*4882a593Smuzhiyun return sizeof(struct xfs_dsymlink_hdr);
58*4882a593Smuzhiyun }
59*4882a593Smuzhiyun
60*4882a593Smuzhiyun /*
61*4882a593Smuzhiyun * Checking of the symlink header is split into two parts. the verifier does
62*4882a593Smuzhiyun * CRC, location and bounds checking, the unpacking function checks the path
63*4882a593Smuzhiyun * parameters and owner.
64*4882a593Smuzhiyun */
65*4882a593Smuzhiyun bool
xfs_symlink_hdr_ok(xfs_ino_t ino,uint32_t offset,uint32_t size,struct xfs_buf * bp)66*4882a593Smuzhiyun xfs_symlink_hdr_ok(
67*4882a593Smuzhiyun xfs_ino_t ino,
68*4882a593Smuzhiyun uint32_t offset,
69*4882a593Smuzhiyun uint32_t size,
70*4882a593Smuzhiyun struct xfs_buf *bp)
71*4882a593Smuzhiyun {
72*4882a593Smuzhiyun struct xfs_dsymlink_hdr *dsl = bp->b_addr;
73*4882a593Smuzhiyun
74*4882a593Smuzhiyun if (offset != be32_to_cpu(dsl->sl_offset))
75*4882a593Smuzhiyun return false;
76*4882a593Smuzhiyun if (size != be32_to_cpu(dsl->sl_bytes))
77*4882a593Smuzhiyun return false;
78*4882a593Smuzhiyun if (ino != be64_to_cpu(dsl->sl_owner))
79*4882a593Smuzhiyun return false;
80*4882a593Smuzhiyun
81*4882a593Smuzhiyun /* ok */
82*4882a593Smuzhiyun return true;
83*4882a593Smuzhiyun }
84*4882a593Smuzhiyun
85*4882a593Smuzhiyun static xfs_failaddr_t
xfs_symlink_verify(struct xfs_buf * bp)86*4882a593Smuzhiyun xfs_symlink_verify(
87*4882a593Smuzhiyun struct xfs_buf *bp)
88*4882a593Smuzhiyun {
89*4882a593Smuzhiyun struct xfs_mount *mp = bp->b_mount;
90*4882a593Smuzhiyun struct xfs_dsymlink_hdr *dsl = bp->b_addr;
91*4882a593Smuzhiyun
92*4882a593Smuzhiyun if (!xfs_sb_version_hascrc(&mp->m_sb))
93*4882a593Smuzhiyun return __this_address;
94*4882a593Smuzhiyun if (!xfs_verify_magic(bp, dsl->sl_magic))
95*4882a593Smuzhiyun return __this_address;
96*4882a593Smuzhiyun if (!uuid_equal(&dsl->sl_uuid, &mp->m_sb.sb_meta_uuid))
97*4882a593Smuzhiyun return __this_address;
98*4882a593Smuzhiyun if (bp->b_bn != be64_to_cpu(dsl->sl_blkno))
99*4882a593Smuzhiyun return __this_address;
100*4882a593Smuzhiyun if (be32_to_cpu(dsl->sl_offset) +
101*4882a593Smuzhiyun be32_to_cpu(dsl->sl_bytes) >= XFS_SYMLINK_MAXLEN)
102*4882a593Smuzhiyun return __this_address;
103*4882a593Smuzhiyun if (dsl->sl_owner == 0)
104*4882a593Smuzhiyun return __this_address;
105*4882a593Smuzhiyun if (!xfs_log_check_lsn(mp, be64_to_cpu(dsl->sl_lsn)))
106*4882a593Smuzhiyun return __this_address;
107*4882a593Smuzhiyun
108*4882a593Smuzhiyun return NULL;
109*4882a593Smuzhiyun }
110*4882a593Smuzhiyun
111*4882a593Smuzhiyun static void
xfs_symlink_read_verify(struct xfs_buf * bp)112*4882a593Smuzhiyun xfs_symlink_read_verify(
113*4882a593Smuzhiyun struct xfs_buf *bp)
114*4882a593Smuzhiyun {
115*4882a593Smuzhiyun struct xfs_mount *mp = bp->b_mount;
116*4882a593Smuzhiyun xfs_failaddr_t fa;
117*4882a593Smuzhiyun
118*4882a593Smuzhiyun /* no verification of non-crc buffers */
119*4882a593Smuzhiyun if (!xfs_sb_version_hascrc(&mp->m_sb))
120*4882a593Smuzhiyun return;
121*4882a593Smuzhiyun
122*4882a593Smuzhiyun if (!xfs_buf_verify_cksum(bp, XFS_SYMLINK_CRC_OFF))
123*4882a593Smuzhiyun xfs_verifier_error(bp, -EFSBADCRC, __this_address);
124*4882a593Smuzhiyun else {
125*4882a593Smuzhiyun fa = xfs_symlink_verify(bp);
126*4882a593Smuzhiyun if (fa)
127*4882a593Smuzhiyun xfs_verifier_error(bp, -EFSCORRUPTED, fa);
128*4882a593Smuzhiyun }
129*4882a593Smuzhiyun }
130*4882a593Smuzhiyun
131*4882a593Smuzhiyun static void
xfs_symlink_write_verify(struct xfs_buf * bp)132*4882a593Smuzhiyun xfs_symlink_write_verify(
133*4882a593Smuzhiyun struct xfs_buf *bp)
134*4882a593Smuzhiyun {
135*4882a593Smuzhiyun struct xfs_mount *mp = bp->b_mount;
136*4882a593Smuzhiyun struct xfs_buf_log_item *bip = bp->b_log_item;
137*4882a593Smuzhiyun xfs_failaddr_t fa;
138*4882a593Smuzhiyun
139*4882a593Smuzhiyun /* no verification of non-crc buffers */
140*4882a593Smuzhiyun if (!xfs_sb_version_hascrc(&mp->m_sb))
141*4882a593Smuzhiyun return;
142*4882a593Smuzhiyun
143*4882a593Smuzhiyun fa = xfs_symlink_verify(bp);
144*4882a593Smuzhiyun if (fa) {
145*4882a593Smuzhiyun xfs_verifier_error(bp, -EFSCORRUPTED, fa);
146*4882a593Smuzhiyun return;
147*4882a593Smuzhiyun }
148*4882a593Smuzhiyun
149*4882a593Smuzhiyun if (bip) {
150*4882a593Smuzhiyun struct xfs_dsymlink_hdr *dsl = bp->b_addr;
151*4882a593Smuzhiyun dsl->sl_lsn = cpu_to_be64(bip->bli_item.li_lsn);
152*4882a593Smuzhiyun }
153*4882a593Smuzhiyun xfs_buf_update_cksum(bp, XFS_SYMLINK_CRC_OFF);
154*4882a593Smuzhiyun }
155*4882a593Smuzhiyun
156*4882a593Smuzhiyun const struct xfs_buf_ops xfs_symlink_buf_ops = {
157*4882a593Smuzhiyun .name = "xfs_symlink",
158*4882a593Smuzhiyun .magic = { 0, cpu_to_be32(XFS_SYMLINK_MAGIC) },
159*4882a593Smuzhiyun .verify_read = xfs_symlink_read_verify,
160*4882a593Smuzhiyun .verify_write = xfs_symlink_write_verify,
161*4882a593Smuzhiyun .verify_struct = xfs_symlink_verify,
162*4882a593Smuzhiyun };
163*4882a593Smuzhiyun
164*4882a593Smuzhiyun void
xfs_symlink_local_to_remote(struct xfs_trans * tp,struct xfs_buf * bp,struct xfs_inode * ip,struct xfs_ifork * ifp)165*4882a593Smuzhiyun xfs_symlink_local_to_remote(
166*4882a593Smuzhiyun struct xfs_trans *tp,
167*4882a593Smuzhiyun struct xfs_buf *bp,
168*4882a593Smuzhiyun struct xfs_inode *ip,
169*4882a593Smuzhiyun struct xfs_ifork *ifp)
170*4882a593Smuzhiyun {
171*4882a593Smuzhiyun struct xfs_mount *mp = ip->i_mount;
172*4882a593Smuzhiyun char *buf;
173*4882a593Smuzhiyun
174*4882a593Smuzhiyun xfs_trans_buf_set_type(tp, bp, XFS_BLFT_SYMLINK_BUF);
175*4882a593Smuzhiyun
176*4882a593Smuzhiyun if (!xfs_sb_version_hascrc(&mp->m_sb)) {
177*4882a593Smuzhiyun bp->b_ops = NULL;
178*4882a593Smuzhiyun memcpy(bp->b_addr, ifp->if_u1.if_data, ifp->if_bytes);
179*4882a593Smuzhiyun xfs_trans_log_buf(tp, bp, 0, ifp->if_bytes - 1);
180*4882a593Smuzhiyun return;
181*4882a593Smuzhiyun }
182*4882a593Smuzhiyun
183*4882a593Smuzhiyun /*
184*4882a593Smuzhiyun * As this symlink fits in an inode literal area, it must also fit in
185*4882a593Smuzhiyun * the smallest buffer the filesystem supports.
186*4882a593Smuzhiyun */
187*4882a593Smuzhiyun ASSERT(BBTOB(bp->b_length) >=
188*4882a593Smuzhiyun ifp->if_bytes + sizeof(struct xfs_dsymlink_hdr));
189*4882a593Smuzhiyun
190*4882a593Smuzhiyun bp->b_ops = &xfs_symlink_buf_ops;
191*4882a593Smuzhiyun
192*4882a593Smuzhiyun buf = bp->b_addr;
193*4882a593Smuzhiyun buf += xfs_symlink_hdr_set(mp, ip->i_ino, 0, ifp->if_bytes, bp);
194*4882a593Smuzhiyun memcpy(buf, ifp->if_u1.if_data, ifp->if_bytes);
195*4882a593Smuzhiyun xfs_trans_log_buf(tp, bp, 0, sizeof(struct xfs_dsymlink_hdr) +
196*4882a593Smuzhiyun ifp->if_bytes - 1);
197*4882a593Smuzhiyun }
198*4882a593Smuzhiyun
199*4882a593Smuzhiyun /*
200*4882a593Smuzhiyun * Verify the in-memory consistency of an inline symlink data fork. This
201*4882a593Smuzhiyun * does not do on-disk format checks.
202*4882a593Smuzhiyun */
203*4882a593Smuzhiyun xfs_failaddr_t
xfs_symlink_shortform_verify(struct xfs_inode * ip)204*4882a593Smuzhiyun xfs_symlink_shortform_verify(
205*4882a593Smuzhiyun struct xfs_inode *ip)
206*4882a593Smuzhiyun {
207*4882a593Smuzhiyun struct xfs_ifork *ifp = XFS_IFORK_PTR(ip, XFS_DATA_FORK);
208*4882a593Smuzhiyun char *sfp = (char *)ifp->if_u1.if_data;
209*4882a593Smuzhiyun int size = ifp->if_bytes;
210*4882a593Smuzhiyun char *endp = sfp + size;
211*4882a593Smuzhiyun
212*4882a593Smuzhiyun ASSERT(ifp->if_format == XFS_DINODE_FMT_LOCAL);
213*4882a593Smuzhiyun
214*4882a593Smuzhiyun /*
215*4882a593Smuzhiyun * Zero length symlinks should never occur in memory as they are
216*4882a593Smuzhiyun * never alllowed to exist on disk.
217*4882a593Smuzhiyun */
218*4882a593Smuzhiyun if (!size)
219*4882a593Smuzhiyun return __this_address;
220*4882a593Smuzhiyun
221*4882a593Smuzhiyun /* No negative sizes or overly long symlink targets. */
222*4882a593Smuzhiyun if (size < 0 || size > XFS_SYMLINK_MAXLEN)
223*4882a593Smuzhiyun return __this_address;
224*4882a593Smuzhiyun
225*4882a593Smuzhiyun /* No NULLs in the target either. */
226*4882a593Smuzhiyun if (memchr(sfp, 0, size - 1))
227*4882a593Smuzhiyun return __this_address;
228*4882a593Smuzhiyun
229*4882a593Smuzhiyun /* We /did/ null-terminate the buffer, right? */
230*4882a593Smuzhiyun if (*endp != 0)
231*4882a593Smuzhiyun return __this_address;
232*4882a593Smuzhiyun return NULL;
233*4882a593Smuzhiyun }
234