ioctl.c 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918
  1. /*
  2. * ioctl.c
  3. *
  4. * Copyright (C) 1995, 1996 by Volker Lendecke
  5. * Modified 1997 Peter Waltenberg, Bill Hawes, David Woodhouse for 2.1 dcache
  6. * Modified 1998, 1999 Wolfram Pienkoss for NLS
  7. *
  8. */
  9. #include <linux/capability.h>
  10. #include <linux/compat.h>
  11. #include <linux/errno.h>
  12. #include <linux/fs.h>
  13. #include <linux/ioctl.h>
  14. #include <linux/time.h>
  15. #include <linux/mm.h>
  16. #include <linux/mount.h>
  17. #include <linux/slab.h>
  18. #include <linux/highuid.h>
  19. #include <linux/vmalloc.h>
  20. #include <linux/sched.h>
  21. #include <asm/uaccess.h>
  22. #include "ncp_fs.h"
  23. /* maximum limit for ncp_objectname_ioctl */
  24. #define NCP_OBJECT_NAME_MAX_LEN 4096
  25. /* maximum limit for ncp_privatedata_ioctl */
  26. #define NCP_PRIVATE_DATA_MAX_LEN 8192
  27. /* maximum negotiable packet size */
  28. #define NCP_PACKET_SIZE_INTERNAL 65536
  29. static int
  30. ncp_get_fs_info(struct ncp_server * server, struct inode *inode,
  31. struct ncp_fs_info __user *arg)
  32. {
  33. struct ncp_fs_info info;
  34. if (copy_from_user(&info, arg, sizeof(info)))
  35. return -EFAULT;
  36. if (info.version != NCP_GET_FS_INFO_VERSION) {
  37. DPRINTK("info.version invalid: %d\n", info.version);
  38. return -EINVAL;
  39. }
  40. /* TODO: info.addr = server->m.serv_addr; */
  41. SET_UID(info.mounted_uid, server->m.mounted_uid);
  42. info.connection = server->connection;
  43. info.buffer_size = server->buffer_size;
  44. info.volume_number = NCP_FINFO(inode)->volNumber;
  45. info.directory_id = NCP_FINFO(inode)->DosDirNum;
  46. if (copy_to_user(arg, &info, sizeof(info)))
  47. return -EFAULT;
  48. return 0;
  49. }
  50. static int
  51. ncp_get_fs_info_v2(struct ncp_server * server, struct inode *inode,
  52. struct ncp_fs_info_v2 __user * arg)
  53. {
  54. struct ncp_fs_info_v2 info2;
  55. if (copy_from_user(&info2, arg, sizeof(info2)))
  56. return -EFAULT;
  57. if (info2.version != NCP_GET_FS_INFO_VERSION_V2) {
  58. DPRINTK("info.version invalid: %d\n", info2.version);
  59. return -EINVAL;
  60. }
  61. info2.mounted_uid = server->m.mounted_uid;
  62. info2.connection = server->connection;
  63. info2.buffer_size = server->buffer_size;
  64. info2.volume_number = NCP_FINFO(inode)->volNumber;
  65. info2.directory_id = NCP_FINFO(inode)->DosDirNum;
  66. info2.dummy1 = info2.dummy2 = info2.dummy3 = 0;
  67. if (copy_to_user(arg, &info2, sizeof(info2)))
  68. return -EFAULT;
  69. return 0;
  70. }
  71. #ifdef CONFIG_COMPAT
  72. struct compat_ncp_objectname_ioctl
  73. {
  74. s32 auth_type;
  75. u32 object_name_len;
  76. compat_caddr_t object_name; /* a userspace data, in most cases user name */
  77. };
  78. struct compat_ncp_fs_info_v2 {
  79. s32 version;
  80. u32 mounted_uid;
  81. u32 connection;
  82. u32 buffer_size;
  83. u32 volume_number;
  84. u32 directory_id;
  85. u32 dummy1;
  86. u32 dummy2;
  87. u32 dummy3;
  88. };
  89. struct compat_ncp_ioctl_request {
  90. u32 function;
  91. u32 size;
  92. compat_caddr_t data;
  93. };
  94. struct compat_ncp_privatedata_ioctl
  95. {
  96. u32 len;
  97. compat_caddr_t data; /* ~1000 for NDS */
  98. };
  99. #define NCP_IOC_GET_FS_INFO_V2_32 _IOWR('n', 4, struct compat_ncp_fs_info_v2)
  100. #define NCP_IOC_NCPREQUEST_32 _IOR('n', 1, struct compat_ncp_ioctl_request)
  101. #define NCP_IOC_GETOBJECTNAME_32 _IOWR('n', 9, struct compat_ncp_objectname_ioctl)
  102. #define NCP_IOC_SETOBJECTNAME_32 _IOR('n', 9, struct compat_ncp_objectname_ioctl)
  103. #define NCP_IOC_GETPRIVATEDATA_32 _IOWR('n', 10, struct compat_ncp_privatedata_ioctl)
  104. #define NCP_IOC_SETPRIVATEDATA_32 _IOR('n', 10, struct compat_ncp_privatedata_ioctl)
  105. static int
  106. ncp_get_compat_fs_info_v2(struct ncp_server * server, struct inode *inode,
  107. struct compat_ncp_fs_info_v2 __user * arg)
  108. {
  109. struct compat_ncp_fs_info_v2 info2;
  110. if (copy_from_user(&info2, arg, sizeof(info2)))
  111. return -EFAULT;
  112. if (info2.version != NCP_GET_FS_INFO_VERSION_V2) {
  113. DPRINTK("info.version invalid: %d\n", info2.version);
  114. return -EINVAL;
  115. }
  116. info2.mounted_uid = server->m.mounted_uid;
  117. info2.connection = server->connection;
  118. info2.buffer_size = server->buffer_size;
  119. info2.volume_number = NCP_FINFO(inode)->volNumber;
  120. info2.directory_id = NCP_FINFO(inode)->DosDirNum;
  121. info2.dummy1 = info2.dummy2 = info2.dummy3 = 0;
  122. if (copy_to_user(arg, &info2, sizeof(info2)))
  123. return -EFAULT;
  124. return 0;
  125. }
  126. #endif
  127. #define NCP_IOC_GETMOUNTUID16 _IOW('n', 2, u16)
  128. #define NCP_IOC_GETMOUNTUID32 _IOW('n', 2, u32)
  129. #define NCP_IOC_GETMOUNTUID64 _IOW('n', 2, u64)
  130. #ifdef CONFIG_NCPFS_NLS
  131. /* Here we are select the iocharset and the codepage for NLS.
  132. * Thanks Petr Vandrovec for idea and many hints.
  133. */
  134. static int
  135. ncp_set_charsets(struct ncp_server* server, struct ncp_nls_ioctl __user *arg)
  136. {
  137. struct ncp_nls_ioctl user;
  138. struct nls_table *codepage;
  139. struct nls_table *iocharset;
  140. struct nls_table *oldset_io;
  141. struct nls_table *oldset_cp;
  142. int utf8;
  143. int err;
  144. if (copy_from_user(&user, arg, sizeof(user)))
  145. return -EFAULT;
  146. codepage = NULL;
  147. user.codepage[NCP_IOCSNAME_LEN] = 0;
  148. if (!user.codepage[0] || !strcmp(user.codepage, "default"))
  149. codepage = load_nls_default();
  150. else {
  151. codepage = load_nls(user.codepage);
  152. if (!codepage) {
  153. return -EBADRQC;
  154. }
  155. }
  156. iocharset = NULL;
  157. user.iocharset[NCP_IOCSNAME_LEN] = 0;
  158. if (!user.iocharset[0] || !strcmp(user.iocharset, "default")) {
  159. iocharset = load_nls_default();
  160. utf8 = 0;
  161. } else if (!strcmp(user.iocharset, "utf8")) {
  162. iocharset = load_nls_default();
  163. utf8 = 1;
  164. } else {
  165. iocharset = load_nls(user.iocharset);
  166. if (!iocharset) {
  167. unload_nls(codepage);
  168. return -EBADRQC;
  169. }
  170. utf8 = 0;
  171. }
  172. mutex_lock(&server->root_setup_lock);
  173. if (server->root_setuped) {
  174. oldset_cp = codepage;
  175. oldset_io = iocharset;
  176. err = -EBUSY;
  177. } else {
  178. if (utf8)
  179. NCP_SET_FLAG(server, NCP_FLAG_UTF8);
  180. else
  181. NCP_CLR_FLAG(server, NCP_FLAG_UTF8);
  182. oldset_cp = server->nls_vol;
  183. server->nls_vol = codepage;
  184. oldset_io = server->nls_io;
  185. server->nls_io = iocharset;
  186. err = 0;
  187. }
  188. mutex_unlock(&server->root_setup_lock);
  189. unload_nls(oldset_cp);
  190. unload_nls(oldset_io);
  191. return err;
  192. }
  193. static int
  194. ncp_get_charsets(struct ncp_server* server, struct ncp_nls_ioctl __user *arg)
  195. {
  196. struct ncp_nls_ioctl user;
  197. int len;
  198. memset(&user, 0, sizeof(user));
  199. mutex_lock(&server->root_setup_lock);
  200. if (server->nls_vol && server->nls_vol->charset) {
  201. len = strlen(server->nls_vol->charset);
  202. if (len > NCP_IOCSNAME_LEN)
  203. len = NCP_IOCSNAME_LEN;
  204. strncpy(user.codepage, server->nls_vol->charset, len);
  205. user.codepage[len] = 0;
  206. }
  207. if (NCP_IS_FLAG(server, NCP_FLAG_UTF8))
  208. strcpy(user.iocharset, "utf8");
  209. else if (server->nls_io && server->nls_io->charset) {
  210. len = strlen(server->nls_io->charset);
  211. if (len > NCP_IOCSNAME_LEN)
  212. len = NCP_IOCSNAME_LEN;
  213. strncpy(user.iocharset, server->nls_io->charset, len);
  214. user.iocharset[len] = 0;
  215. }
  216. mutex_unlock(&server->root_setup_lock);
  217. if (copy_to_user(arg, &user, sizeof(user)))
  218. return -EFAULT;
  219. return 0;
  220. }
  221. #endif /* CONFIG_NCPFS_NLS */
  222. static long __ncp_ioctl(struct inode *inode, unsigned int cmd, unsigned long arg)
  223. {
  224. struct ncp_server *server = NCP_SERVER(inode);
  225. int result;
  226. struct ncp_ioctl_request request;
  227. char* bouncebuffer;
  228. void __user *argp = (void __user *)arg;
  229. switch (cmd) {
  230. #ifdef CONFIG_COMPAT
  231. case NCP_IOC_NCPREQUEST_32:
  232. #endif
  233. case NCP_IOC_NCPREQUEST:
  234. #ifdef CONFIG_COMPAT
  235. if (cmd == NCP_IOC_NCPREQUEST_32) {
  236. struct compat_ncp_ioctl_request request32;
  237. if (copy_from_user(&request32, argp, sizeof(request32)))
  238. return -EFAULT;
  239. request.function = request32.function;
  240. request.size = request32.size;
  241. request.data = compat_ptr(request32.data);
  242. } else
  243. #endif
  244. if (copy_from_user(&request, argp, sizeof(request)))
  245. return -EFAULT;
  246. if ((request.function > 255)
  247. || (request.size >
  248. NCP_PACKET_SIZE - sizeof(struct ncp_request_header))) {
  249. return -EINVAL;
  250. }
  251. bouncebuffer = vmalloc(NCP_PACKET_SIZE_INTERNAL);
  252. if (!bouncebuffer)
  253. return -ENOMEM;
  254. if (copy_from_user(bouncebuffer, request.data, request.size)) {
  255. vfree(bouncebuffer);
  256. return -EFAULT;
  257. }
  258. ncp_lock_server(server);
  259. /* FIXME: We hack around in the server's structures
  260. here to be able to use ncp_request */
  261. server->has_subfunction = 0;
  262. server->current_size = request.size;
  263. memcpy(server->packet, bouncebuffer, request.size);
  264. result = ncp_request2(server, request.function,
  265. bouncebuffer, NCP_PACKET_SIZE_INTERNAL);
  266. if (result < 0)
  267. result = -EIO;
  268. else
  269. result = server->reply_size;
  270. ncp_unlock_server(server);
  271. DPRINTK("ncp_ioctl: copy %d bytes\n",
  272. result);
  273. if (result >= 0)
  274. if (copy_to_user(request.data, bouncebuffer, result))
  275. result = -EFAULT;
  276. vfree(bouncebuffer);
  277. return result;
  278. case NCP_IOC_CONN_LOGGED_IN:
  279. if (!(server->m.int_flags & NCP_IMOUNT_LOGGEDIN_POSSIBLE))
  280. return -EINVAL;
  281. mutex_lock(&server->root_setup_lock);
  282. if (server->root_setuped)
  283. result = -EBUSY;
  284. else {
  285. result = ncp_conn_logged_in(inode->i_sb);
  286. if (result == 0)
  287. server->root_setuped = 1;
  288. }
  289. mutex_unlock(&server->root_setup_lock);
  290. return result;
  291. case NCP_IOC_GET_FS_INFO:
  292. return ncp_get_fs_info(server, inode, argp);
  293. case NCP_IOC_GET_FS_INFO_V2:
  294. return ncp_get_fs_info_v2(server, inode, argp);
  295. #ifdef CONFIG_COMPAT
  296. case NCP_IOC_GET_FS_INFO_V2_32:
  297. return ncp_get_compat_fs_info_v2(server, inode, argp);
  298. #endif
  299. /* we have too many combinations of CONFIG_COMPAT,
  300. * CONFIG_64BIT and CONFIG_UID16, so just handle
  301. * any of the possible ioctls */
  302. case NCP_IOC_GETMOUNTUID16:
  303. {
  304. u16 uid;
  305. SET_UID(uid, server->m.mounted_uid);
  306. if (put_user(uid, (u16 __user *)argp))
  307. return -EFAULT;
  308. return 0;
  309. }
  310. case NCP_IOC_GETMOUNTUID32:
  311. if (put_user(server->m.mounted_uid,
  312. (u32 __user *)argp))
  313. return -EFAULT;
  314. return 0;
  315. case NCP_IOC_GETMOUNTUID64:
  316. if (put_user(server->m.mounted_uid,
  317. (u64 __user *)argp))
  318. return -EFAULT;
  319. return 0;
  320. case NCP_IOC_GETROOT:
  321. {
  322. struct ncp_setroot_ioctl sr;
  323. result = -EACCES;
  324. mutex_lock(&server->root_setup_lock);
  325. if (server->m.mounted_vol[0]) {
  326. struct dentry* dentry = inode->i_sb->s_root;
  327. if (dentry) {
  328. struct inode* s_inode = dentry->d_inode;
  329. if (s_inode) {
  330. sr.volNumber = NCP_FINFO(s_inode)->volNumber;
  331. sr.dirEntNum = NCP_FINFO(s_inode)->dirEntNum;
  332. sr.namespace = server->name_space[sr.volNumber];
  333. result = 0;
  334. } else
  335. DPRINTK("ncpfs: s_root->d_inode==NULL\n");
  336. } else
  337. DPRINTK("ncpfs: s_root==NULL\n");
  338. } else {
  339. sr.volNumber = -1;
  340. sr.namespace = 0;
  341. sr.dirEntNum = 0;
  342. result = 0;
  343. }
  344. mutex_unlock(&server->root_setup_lock);
  345. if (!result && copy_to_user(argp, &sr, sizeof(sr)))
  346. result = -EFAULT;
  347. return result;
  348. }
  349. case NCP_IOC_SETROOT:
  350. {
  351. struct ncp_setroot_ioctl sr;
  352. __u32 vnum;
  353. __le32 de;
  354. __le32 dosde;
  355. struct dentry* dentry;
  356. if (copy_from_user(&sr, argp, sizeof(sr)))
  357. return -EFAULT;
  358. mutex_lock(&server->root_setup_lock);
  359. if (server->root_setuped)
  360. result = -EBUSY;
  361. else {
  362. if (sr.volNumber < 0) {
  363. server->m.mounted_vol[0] = 0;
  364. vnum = NCP_NUMBER_OF_VOLUMES;
  365. de = 0;
  366. dosde = 0;
  367. result = 0;
  368. } else if (sr.volNumber >= NCP_NUMBER_OF_VOLUMES) {
  369. result = -EINVAL;
  370. } else if (ncp_mount_subdir(server, sr.volNumber,
  371. sr.namespace, sr.dirEntNum,
  372. &vnum, &de, &dosde)) {
  373. result = -ENOENT;
  374. } else
  375. result = 0;
  376. if (result == 0) {
  377. dentry = inode->i_sb->s_root;
  378. if (dentry) {
  379. struct inode* s_inode = dentry->d_inode;
  380. if (s_inode) {
  381. NCP_FINFO(s_inode)->volNumber = vnum;
  382. NCP_FINFO(s_inode)->dirEntNum = de;
  383. NCP_FINFO(s_inode)->DosDirNum = dosde;
  384. server->root_setuped = 1;
  385. } else {
  386. DPRINTK("ncpfs: s_root->d_inode==NULL\n");
  387. result = -EIO;
  388. }
  389. } else {
  390. DPRINTK("ncpfs: s_root==NULL\n");
  391. result = -EIO;
  392. }
  393. }
  394. }
  395. mutex_unlock(&server->root_setup_lock);
  396. return result;
  397. }
  398. #ifdef CONFIG_NCPFS_PACKET_SIGNING
  399. case NCP_IOC_SIGN_INIT:
  400. {
  401. struct ncp_sign_init sign;
  402. if (argp)
  403. if (copy_from_user(&sign, argp, sizeof(sign)))
  404. return -EFAULT;
  405. ncp_lock_server(server);
  406. mutex_lock(&server->rcv.creq_mutex);
  407. if (argp) {
  408. if (server->sign_wanted) {
  409. memcpy(server->sign_root,sign.sign_root,8);
  410. memcpy(server->sign_last,sign.sign_last,16);
  411. server->sign_active = 1;
  412. }
  413. /* ignore when signatures not wanted */
  414. } else {
  415. server->sign_active = 0;
  416. }
  417. mutex_unlock(&server->rcv.creq_mutex);
  418. ncp_unlock_server(server);
  419. return 0;
  420. }
  421. case NCP_IOC_SIGN_WANTED:
  422. {
  423. int state;
  424. ncp_lock_server(server);
  425. state = server->sign_wanted;
  426. ncp_unlock_server(server);
  427. if (put_user(state, (int __user *)argp))
  428. return -EFAULT;
  429. return 0;
  430. }
  431. case NCP_IOC_SET_SIGN_WANTED:
  432. {
  433. int newstate;
  434. /* get only low 8 bits... */
  435. if (get_user(newstate, (unsigned char __user *)argp))
  436. return -EFAULT;
  437. result = 0;
  438. ncp_lock_server(server);
  439. if (server->sign_active) {
  440. /* cannot turn signatures OFF when active */
  441. if (!newstate)
  442. result = -EINVAL;
  443. } else {
  444. server->sign_wanted = newstate != 0;
  445. }
  446. ncp_unlock_server(server);
  447. return result;
  448. }
  449. #endif /* CONFIG_NCPFS_PACKET_SIGNING */
  450. #ifdef CONFIG_NCPFS_IOCTL_LOCKING
  451. case NCP_IOC_LOCKUNLOCK:
  452. {
  453. struct ncp_lock_ioctl rqdata;
  454. if (copy_from_user(&rqdata, argp, sizeof(rqdata)))
  455. return -EFAULT;
  456. if (rqdata.origin != 0)
  457. return -EINVAL;
  458. /* check for cmd */
  459. switch (rqdata.cmd) {
  460. case NCP_LOCK_EX:
  461. case NCP_LOCK_SH:
  462. if (rqdata.timeout == 0)
  463. rqdata.timeout = NCP_LOCK_DEFAULT_TIMEOUT;
  464. else if (rqdata.timeout > NCP_LOCK_MAX_TIMEOUT)
  465. rqdata.timeout = NCP_LOCK_MAX_TIMEOUT;
  466. break;
  467. case NCP_LOCK_LOG:
  468. rqdata.timeout = NCP_LOCK_DEFAULT_TIMEOUT; /* has no effect */
  469. case NCP_LOCK_CLEAR:
  470. break;
  471. default:
  472. return -EINVAL;
  473. }
  474. /* locking needs both read and write access */
  475. if ((result = ncp_make_open(inode, O_RDWR)) != 0)
  476. {
  477. return result;
  478. }
  479. result = -EISDIR;
  480. if (!S_ISREG(inode->i_mode))
  481. goto outrel;
  482. if (rqdata.cmd == NCP_LOCK_CLEAR)
  483. {
  484. result = ncp_ClearPhysicalRecord(NCP_SERVER(inode),
  485. NCP_FINFO(inode)->file_handle,
  486. rqdata.offset,
  487. rqdata.length);
  488. if (result > 0) result = 0; /* no such lock */
  489. }
  490. else
  491. {
  492. int lockcmd;
  493. switch (rqdata.cmd)
  494. {
  495. case NCP_LOCK_EX: lockcmd=1; break;
  496. case NCP_LOCK_SH: lockcmd=3; break;
  497. default: lockcmd=0; break;
  498. }
  499. result = ncp_LogPhysicalRecord(NCP_SERVER(inode),
  500. NCP_FINFO(inode)->file_handle,
  501. lockcmd,
  502. rqdata.offset,
  503. rqdata.length,
  504. rqdata.timeout);
  505. if (result > 0) result = -EAGAIN;
  506. }
  507. outrel:
  508. ncp_inode_close(inode);
  509. return result;
  510. }
  511. #endif /* CONFIG_NCPFS_IOCTL_LOCKING */
  512. #ifdef CONFIG_COMPAT
  513. case NCP_IOC_GETOBJECTNAME_32:
  514. {
  515. struct compat_ncp_objectname_ioctl user;
  516. size_t outl;
  517. if (copy_from_user(&user, argp, sizeof(user)))
  518. return -EFAULT;
  519. down_read(&server->auth_rwsem);
  520. user.auth_type = server->auth.auth_type;
  521. outl = user.object_name_len;
  522. user.object_name_len = server->auth.object_name_len;
  523. if (outl > user.object_name_len)
  524. outl = user.object_name_len;
  525. result = 0;
  526. if (outl) {
  527. if (copy_to_user(compat_ptr(user.object_name),
  528. server->auth.object_name,
  529. outl))
  530. result = -EFAULT;
  531. }
  532. up_read(&server->auth_rwsem);
  533. if (!result && copy_to_user(argp, &user, sizeof(user)))
  534. result = -EFAULT;
  535. return result;
  536. }
  537. #endif
  538. case NCP_IOC_GETOBJECTNAME:
  539. {
  540. struct ncp_objectname_ioctl user;
  541. size_t outl;
  542. if (copy_from_user(&user, argp, sizeof(user)))
  543. return -EFAULT;
  544. down_read(&server->auth_rwsem);
  545. user.auth_type = server->auth.auth_type;
  546. outl = user.object_name_len;
  547. user.object_name_len = server->auth.object_name_len;
  548. if (outl > user.object_name_len)
  549. outl = user.object_name_len;
  550. result = 0;
  551. if (outl) {
  552. if (copy_to_user(user.object_name,
  553. server->auth.object_name,
  554. outl))
  555. result = -EFAULT;
  556. }
  557. up_read(&server->auth_rwsem);
  558. if (!result && copy_to_user(argp, &user, sizeof(user)))
  559. result = -EFAULT;
  560. return result;
  561. }
  562. #ifdef CONFIG_COMPAT
  563. case NCP_IOC_SETOBJECTNAME_32:
  564. #endif
  565. case NCP_IOC_SETOBJECTNAME:
  566. {
  567. struct ncp_objectname_ioctl user;
  568. void* newname;
  569. void* oldname;
  570. size_t oldnamelen;
  571. void* oldprivate;
  572. size_t oldprivatelen;
  573. #ifdef CONFIG_COMPAT
  574. if (cmd == NCP_IOC_SETOBJECTNAME_32) {
  575. struct compat_ncp_objectname_ioctl user32;
  576. if (copy_from_user(&user32, argp, sizeof(user32)))
  577. return -EFAULT;
  578. user.auth_type = user32.auth_type;
  579. user.object_name_len = user32.object_name_len;
  580. user.object_name = compat_ptr(user32.object_name);
  581. } else
  582. #endif
  583. if (copy_from_user(&user, argp, sizeof(user)))
  584. return -EFAULT;
  585. if (user.object_name_len > NCP_OBJECT_NAME_MAX_LEN)
  586. return -ENOMEM;
  587. if (user.object_name_len) {
  588. newname = memdup_user(user.object_name,
  589. user.object_name_len);
  590. if (IS_ERR(newname))
  591. return PTR_ERR(newname);
  592. } else {
  593. newname = NULL;
  594. }
  595. down_write(&server->auth_rwsem);
  596. oldname = server->auth.object_name;
  597. oldnamelen = server->auth.object_name_len;
  598. oldprivate = server->priv.data;
  599. oldprivatelen = server->priv.len;
  600. server->auth.auth_type = user.auth_type;
  601. server->auth.object_name_len = user.object_name_len;
  602. server->auth.object_name = newname;
  603. server->priv.len = 0;
  604. server->priv.data = NULL;
  605. up_write(&server->auth_rwsem);
  606. kfree(oldprivate);
  607. kfree(oldname);
  608. return 0;
  609. }
  610. #ifdef CONFIG_COMPAT
  611. case NCP_IOC_GETPRIVATEDATA_32:
  612. #endif
  613. case NCP_IOC_GETPRIVATEDATA:
  614. {
  615. struct ncp_privatedata_ioctl user;
  616. size_t outl;
  617. #ifdef CONFIG_COMPAT
  618. if (cmd == NCP_IOC_GETPRIVATEDATA_32) {
  619. struct compat_ncp_privatedata_ioctl user32;
  620. if (copy_from_user(&user32, argp, sizeof(user32)))
  621. return -EFAULT;
  622. user.len = user32.len;
  623. user.data = compat_ptr(user32.data);
  624. } else
  625. #endif
  626. if (copy_from_user(&user, argp, sizeof(user)))
  627. return -EFAULT;
  628. down_read(&server->auth_rwsem);
  629. outl = user.len;
  630. user.len = server->priv.len;
  631. if (outl > user.len) outl = user.len;
  632. result = 0;
  633. if (outl) {
  634. if (copy_to_user(user.data,
  635. server->priv.data,
  636. outl))
  637. result = -EFAULT;
  638. }
  639. up_read(&server->auth_rwsem);
  640. if (result)
  641. return result;
  642. #ifdef CONFIG_COMPAT
  643. if (cmd == NCP_IOC_GETPRIVATEDATA_32) {
  644. struct compat_ncp_privatedata_ioctl user32;
  645. user32.len = user.len;
  646. user32.data = (unsigned long) user.data;
  647. if (copy_to_user(argp, &user32, sizeof(user32)))
  648. return -EFAULT;
  649. } else
  650. #endif
  651. if (copy_to_user(argp, &user, sizeof(user)))
  652. return -EFAULT;
  653. return 0;
  654. }
  655. #ifdef CONFIG_COMPAT
  656. case NCP_IOC_SETPRIVATEDATA_32:
  657. #endif
  658. case NCP_IOC_SETPRIVATEDATA:
  659. {
  660. struct ncp_privatedata_ioctl user;
  661. void* new;
  662. void* old;
  663. size_t oldlen;
  664. #ifdef CONFIG_COMPAT
  665. if (cmd == NCP_IOC_SETPRIVATEDATA_32) {
  666. struct compat_ncp_privatedata_ioctl user32;
  667. if (copy_from_user(&user32, argp, sizeof(user32)))
  668. return -EFAULT;
  669. user.len = user32.len;
  670. user.data = compat_ptr(user32.data);
  671. } else
  672. #endif
  673. if (copy_from_user(&user, argp, sizeof(user)))
  674. return -EFAULT;
  675. if (user.len > NCP_PRIVATE_DATA_MAX_LEN)
  676. return -ENOMEM;
  677. if (user.len) {
  678. new = memdup_user(user.data, user.len);
  679. if (IS_ERR(new))
  680. return PTR_ERR(new);
  681. } else {
  682. new = NULL;
  683. }
  684. down_write(&server->auth_rwsem);
  685. old = server->priv.data;
  686. oldlen = server->priv.len;
  687. server->priv.len = user.len;
  688. server->priv.data = new;
  689. up_write(&server->auth_rwsem);
  690. kfree(old);
  691. return 0;
  692. }
  693. #ifdef CONFIG_NCPFS_NLS
  694. case NCP_IOC_SETCHARSETS:
  695. return ncp_set_charsets(server, argp);
  696. case NCP_IOC_GETCHARSETS:
  697. return ncp_get_charsets(server, argp);
  698. #endif /* CONFIG_NCPFS_NLS */
  699. case NCP_IOC_SETDENTRYTTL:
  700. {
  701. u_int32_t user;
  702. if (copy_from_user(&user, argp, sizeof(user)))
  703. return -EFAULT;
  704. /* 20 secs at most... */
  705. if (user > 20000)
  706. return -EINVAL;
  707. user = (user * HZ) / 1000;
  708. atomic_set(&server->dentry_ttl, user);
  709. return 0;
  710. }
  711. case NCP_IOC_GETDENTRYTTL:
  712. {
  713. u_int32_t user = (atomic_read(&server->dentry_ttl) * 1000) / HZ;
  714. if (copy_to_user(argp, &user, sizeof(user)))
  715. return -EFAULT;
  716. return 0;
  717. }
  718. }
  719. return -EINVAL;
  720. }
  721. long ncp_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
  722. {
  723. struct inode *inode = filp->f_dentry->d_inode;
  724. struct ncp_server *server = NCP_SERVER(inode);
  725. uid_t uid = current_uid();
  726. int need_drop_write = 0;
  727. long ret;
  728. switch (cmd) {
  729. case NCP_IOC_SETCHARSETS:
  730. case NCP_IOC_CONN_LOGGED_IN:
  731. case NCP_IOC_SETROOT:
  732. if (!capable(CAP_SYS_ADMIN)) {
  733. ret = -EPERM;
  734. goto out;
  735. }
  736. break;
  737. }
  738. if (server->m.mounted_uid != uid) {
  739. switch (cmd) {
  740. /*
  741. * Only mount owner can issue these ioctls. Information
  742. * necessary to authenticate to other NDS servers are
  743. * stored here.
  744. */
  745. case NCP_IOC_GETOBJECTNAME:
  746. case NCP_IOC_SETOBJECTNAME:
  747. case NCP_IOC_GETPRIVATEDATA:
  748. case NCP_IOC_SETPRIVATEDATA:
  749. #ifdef CONFIG_COMPAT
  750. case NCP_IOC_GETOBJECTNAME_32:
  751. case NCP_IOC_SETOBJECTNAME_32:
  752. case NCP_IOC_GETPRIVATEDATA_32:
  753. case NCP_IOC_SETPRIVATEDATA_32:
  754. #endif
  755. ret = -EACCES;
  756. goto out;
  757. /*
  758. * These require write access on the inode if user id
  759. * does not match. Note that they do not write to the
  760. * file... But old code did mnt_want_write, so I keep
  761. * it as is. Of course not for mountpoint owner, as
  762. * that breaks read-only mounts altogether as ncpmount
  763. * needs working NCP_IOC_NCPREQUEST and
  764. * NCP_IOC_GET_FS_INFO. Some of these codes (setdentryttl,
  765. * signinit, setsignwanted) should be probably restricted
  766. * to owner only, or even more to CAP_SYS_ADMIN).
  767. */
  768. case NCP_IOC_GET_FS_INFO:
  769. case NCP_IOC_GET_FS_INFO_V2:
  770. case NCP_IOC_NCPREQUEST:
  771. case NCP_IOC_SETDENTRYTTL:
  772. case NCP_IOC_SIGN_INIT:
  773. case NCP_IOC_LOCKUNLOCK:
  774. case NCP_IOC_SET_SIGN_WANTED:
  775. #ifdef CONFIG_COMPAT
  776. case NCP_IOC_GET_FS_INFO_V2_32:
  777. case NCP_IOC_NCPREQUEST_32:
  778. #endif
  779. ret = mnt_want_write_file(filp);
  780. if (ret)
  781. goto out;
  782. need_drop_write = 1;
  783. ret = inode_permission(inode, MAY_WRITE);
  784. if (ret)
  785. goto outDropWrite;
  786. break;
  787. /*
  788. * Read access required.
  789. */
  790. case NCP_IOC_GETMOUNTUID16:
  791. case NCP_IOC_GETMOUNTUID32:
  792. case NCP_IOC_GETMOUNTUID64:
  793. case NCP_IOC_GETROOT:
  794. case NCP_IOC_SIGN_WANTED:
  795. ret = inode_permission(inode, MAY_READ);
  796. if (ret)
  797. goto out;
  798. break;
  799. /*
  800. * Anybody can read these.
  801. */
  802. case NCP_IOC_GETCHARSETS:
  803. case NCP_IOC_GETDENTRYTTL:
  804. default:
  805. /* Three codes below are protected by CAP_SYS_ADMIN above. */
  806. case NCP_IOC_SETCHARSETS:
  807. case NCP_IOC_CONN_LOGGED_IN:
  808. case NCP_IOC_SETROOT:
  809. break;
  810. }
  811. }
  812. ret = __ncp_ioctl(inode, cmd, arg);
  813. outDropWrite:
  814. if (need_drop_write)
  815. mnt_drop_write_file(filp);
  816. out:
  817. return ret;
  818. }
  819. #ifdef CONFIG_COMPAT
  820. long ncp_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
  821. {
  822. long ret;
  823. arg = (unsigned long) compat_ptr(arg);
  824. ret = ncp_ioctl(file, cmd, arg);
  825. return ret;
  826. }
  827. #endif