1 /*
2   FUSE: Filesystem in Userspace
3   Copyright (C) 2001-2008  Miklos Szeredi <miklos@szeredi.hu>
4 
5   This program can be distributed under the terms of the GNU GPL.
6   See the file COPYING.
7 */
8 
9 #ifndef _FS_FUSE_I_H
10 #define _FS_FUSE_I_H
11 
12 #ifndef pr_fmt
13 # define pr_fmt(fmt) "fuse: " fmt
14 #endif
15 
16 #include <linux/fuse.h>
17 #include <linux/fs.h>
18 #include <linux/mount.h>
19 #include <linux/wait.h>
20 #include <linux/list.h>
21 #include <linux/spinlock.h>
22 #include <linux/mm.h>
23 #include <linux/backing-dev.h>
24 #include <linux/mutex.h>
25 #include <linux/rwsem.h>
26 #include <linux/rbtree.h>
27 #include <linux/poll.h>
28 #include <linux/workqueue.h>
29 #include <linux/kref.h>
30 #include <linux/xattr.h>
31 #include <linux/pid_namespace.h>
32 #include <linux/refcount.h>
33 #include <linux/user_namespace.h>
34 
35 /** Default max number of pages that can be used in a single read request */
36 #define FUSE_DEFAULT_MAX_PAGES_PER_REQ 32
37 
38 /** Maximum of max_pages received in init_out */
39 #define FUSE_MAX_MAX_PAGES 256
40 
41 /** Bias for fi->writectr, meaning new writepages must not be sent */
42 #define FUSE_NOWRITE INT_MIN
43 
44 /** It could be as large as PATH_MAX, but would that have any uses? */
45 #define FUSE_NAME_MAX 1024
46 
47 /** Number of dentries for each connection in the control filesystem */
48 #define FUSE_CTL_NUM_DENTRIES 5
49 
50 /** List of active connections */
51 extern struct list_head fuse_conn_list;
52 
53 /** Global mutex protecting fuse_conn_list and the control filesystem */
54 extern struct mutex fuse_mutex;
55 
56 /** Module parameters */
57 extern unsigned max_user_bgreq;
58 extern unsigned max_user_congthresh;
59 
60 /* One forget request */
61 struct fuse_forget_link {
62 	struct fuse_forget_one forget_one;
63 	struct fuse_forget_link *next;
64 };
65 
66 /** FUSE inode */
67 struct fuse_inode {
68 	/** Inode data */
69 	struct inode inode;
70 
71 	/** Unique ID, which identifies the inode between userspace
72 	 * and kernel */
73 	u64 nodeid;
74 
75 	/** Number of lookups on this inode */
76 	u64 nlookup;
77 
78 	/** The request used for sending the FORGET message */
79 	struct fuse_forget_link *forget;
80 
81 	/** Time in jiffies until the file attributes are valid */
82 	u64 i_time;
83 
84 	/* Which attributes are invalid */
85 	u32 inval_mask;
86 
87 	/** The sticky bit in inode->i_mode may have been removed, so
88 	    preserve the original mode */
89 	umode_t orig_i_mode;
90 
91 	/** 64 bit inode number */
92 	u64 orig_ino;
93 
94 	/** Version of last attribute change */
95 	u64 attr_version;
96 
97 	union {
98 		/* Write related fields (regular file only) */
99 		struct {
100 			/* Files usable in writepage.  Protected by fi->lock */
101 			struct list_head write_files;
102 
103 			/* Writepages pending on truncate or fsync */
104 			struct list_head queued_writes;
105 
106 			/* Number of sent writes, a negative bias
107 			 * (FUSE_NOWRITE) means more writes are blocked */
108 			int writectr;
109 
110 			/* Waitq for writepage completion */
111 			wait_queue_head_t page_waitq;
112 
113 			/* List of writepage requestst (pending or sent) */
114 			struct rb_root writepages;
115 		};
116 
117 		/* readdir cache (directory only) */
118 		struct {
119 			/* true if fully cached */
120 			bool cached;
121 
122 			/* size of cache */
123 			loff_t size;
124 
125 			/* position at end of cache (position of next entry) */
126 			loff_t pos;
127 
128 			/* version of the cache */
129 			u64 version;
130 
131 			/* modification time of directory when cache was
132 			 * started */
133 			struct timespec64 mtime;
134 
135 			/* iversion of directory when cache was started */
136 			u64 iversion;
137 
138 			/* protects above fields */
139 			spinlock_t lock;
140 		} rdc;
141 	};
142 
143 	/** Miscellaneous bits describing inode state */
144 	unsigned long state;
145 
146 	/** Lock for serializing lookup and readdir for back compatibility*/
147 	struct mutex mutex;
148 
149 	/** Lock to protect write related fields */
150 	spinlock_t lock;
151 
152 #ifdef CONFIG_FUSE_DAX
153 	/*
154 	 * Dax specific inode data
155 	 */
156 	struct fuse_inode_dax *dax;
157 #endif
158 };
159 
160 /** FUSE inode state bits */
161 enum {
162 	/** Advise readdirplus  */
163 	FUSE_I_ADVISE_RDPLUS,
164 	/** Initialized with readdirplus */
165 	FUSE_I_INIT_RDPLUS,
166 	/** An operation changing file size is in progress  */
167 	FUSE_I_SIZE_UNSTABLE,
168 	/* Bad inode */
169 	FUSE_I_BAD,
170 };
171 
172 struct fuse_conn;
173 struct fuse_mount;
174 struct fuse_release_args;
175 
176 /** FUSE specific file data */
177 struct fuse_file {
178 	/** Fuse connection for this file */
179 	struct fuse_mount *fm;
180 
181 	/* Argument space reserved for release */
182 	struct fuse_release_args *release_args;
183 
184 	/** Kernel file handle guaranteed to be unique */
185 	u64 kh;
186 
187 	/** File handle used by userspace */
188 	u64 fh;
189 
190 	/** Node id of this file */
191 	u64 nodeid;
192 
193 	/** Refcount */
194 	refcount_t count;
195 
196 	/** FOPEN_* flags returned by open */
197 	u32 open_flags;
198 
199 	/** Entry on inode's write_files list */
200 	struct list_head write_entry;
201 
202 	/* Readdir related */
203 	struct {
204 		/*
205 		 * Protects below fields against (crazy) parallel readdir on
206 		 * same open file.  Uncontended in the normal case.
207 		 */
208 		struct mutex lock;
209 
210 		/* Dir stream position */
211 		loff_t pos;
212 
213 		/* Offset in cache */
214 		loff_t cache_off;
215 
216 		/* Version of cache we are reading */
217 		u64 version;
218 
219 	} readdir;
220 
221 	/** RB node to be linked on fuse_conn->polled_files */
222 	struct rb_node polled_node;
223 
224 	/** Wait queue head for poll */
225 	wait_queue_head_t poll_wait;
226 
227 	/** Has flock been performed on this file? */
228 	bool flock:1;
229 };
230 
231 /** One input argument of a request */
232 struct fuse_in_arg {
233 	unsigned size;
234 	const void *value;
235 };
236 
237 /** One output argument of a request */
238 struct fuse_arg {
239 	unsigned size;
240 	void *value;
241 };
242 
243 /** FUSE page descriptor */
244 struct fuse_page_desc {
245 	unsigned int length;
246 	unsigned int offset;
247 };
248 
249 struct fuse_args {
250 	uint64_t nodeid;
251 	uint32_t opcode;
252 	unsigned short in_numargs;
253 	unsigned short out_numargs;
254 	bool force:1;
255 	bool noreply:1;
256 	bool nocreds:1;
257 	bool in_pages:1;
258 	bool out_pages:1;
259 	bool out_argvar:1;
260 	bool page_zeroing:1;
261 	bool page_replace:1;
262 	bool may_block:1;
263 	struct fuse_in_arg in_args[3];
264 	struct fuse_arg out_args[2];
265 	void (*end)(struct fuse_mount *fm, struct fuse_args *args, int error);
266 };
267 
268 struct fuse_args_pages {
269 	struct fuse_args args;
270 	struct page **pages;
271 	struct fuse_page_desc *descs;
272 	unsigned int num_pages;
273 };
274 
275 #define FUSE_ARGS(args) struct fuse_args args = {}
276 
277 /** The request IO state (for asynchronous processing) */
278 struct fuse_io_priv {
279 	struct kref refcnt;
280 	int async;
281 	spinlock_t lock;
282 	unsigned reqs;
283 	ssize_t bytes;
284 	size_t size;
285 	__u64 offset;
286 	bool write;
287 	bool should_dirty;
288 	int err;
289 	struct kiocb *iocb;
290 	struct completion *done;
291 	bool blocking;
292 };
293 
294 #define FUSE_IO_PRIV_SYNC(i) \
295 {					\
296 	.refcnt = KREF_INIT(1),		\
297 	.async = 0,			\
298 	.iocb = i,			\
299 }
300 
301 /**
302  * Request flags
303  *
304  * FR_ISREPLY:		set if the request has reply
305  * FR_FORCE:		force sending of the request even if interrupted
306  * FR_BACKGROUND:	request is sent in the background
307  * FR_WAITING:		request is counted as "waiting"
308  * FR_ABORTED:		the request was aborted
309  * FR_INTERRUPTED:	the request has been interrupted
310  * FR_LOCKED:		data is being copied to/from the request
311  * FR_PENDING:		request is not yet in userspace
312  * FR_SENT:		request is in userspace, waiting for an answer
313  * FR_FINISHED:		request is finished
314  * FR_PRIVATE:		request is on private list
315  * FR_ASYNC:		request is asynchronous
316  */
317 enum fuse_req_flag {
318 	FR_ISREPLY,
319 	FR_FORCE,
320 	FR_BACKGROUND,
321 	FR_WAITING,
322 	FR_ABORTED,
323 	FR_INTERRUPTED,
324 	FR_LOCKED,
325 	FR_PENDING,
326 	FR_SENT,
327 	FR_FINISHED,
328 	FR_PRIVATE,
329 	FR_ASYNC,
330 };
331 
332 /**
333  * A request to the client
334  *
335  * .waitq.lock protects the following fields:
336  *   - FR_ABORTED
337  *   - FR_LOCKED (may also be modified under fc->lock, tested under both)
338  */
339 struct fuse_req {
340 	/** This can be on either pending processing or io lists in
341 	    fuse_conn */
342 	struct list_head list;
343 
344 	/** Entry on the interrupts list  */
345 	struct list_head intr_entry;
346 
347 	/* Input/output arguments */
348 	struct fuse_args *args;
349 
350 	/** refcount */
351 	refcount_t count;
352 
353 	/* Request flags, updated with test/set/clear_bit() */
354 	unsigned long flags;
355 
356 	/* The request input header */
357 	struct {
358 		struct fuse_in_header h;
359 	} in;
360 
361 	/* The request output header */
362 	struct {
363 		struct fuse_out_header h;
364 	} out;
365 
366 	/** Used to wake up the task waiting for completion of request*/
367 	wait_queue_head_t waitq;
368 
369 #if IS_ENABLED(CONFIG_VIRTIO_FS)
370 	/** virtio-fs's physically contiguous buffer for in and out args */
371 	void *argbuf;
372 #endif
373 
374 	/** fuse_mount this request belongs to */
375 	struct fuse_mount *fm;
376 };
377 
378 struct fuse_iqueue;
379 
380 /**
381  * Input queue callbacks
382  *
383  * Input queue signalling is device-specific.  For example, the /dev/fuse file
384  * uses fiq->waitq and fasync to wake processes that are waiting on queue
385  * readiness.  These callbacks allow other device types to respond to input
386  * queue activity.
387  */
388 struct fuse_iqueue_ops {
389 	/**
390 	 * Signal that a forget has been queued
391 	 */
392 	void (*wake_forget_and_unlock)(struct fuse_iqueue *fiq)
393 		__releases(fiq->lock);
394 
395 	/**
396 	 * Signal that an INTERRUPT request has been queued
397 	 */
398 	void (*wake_interrupt_and_unlock)(struct fuse_iqueue *fiq)
399 		__releases(fiq->lock);
400 
401 	/**
402 	 * Signal that a request has been queued
403 	 */
404 	void (*wake_pending_and_unlock)(struct fuse_iqueue *fiq)
405 		__releases(fiq->lock);
406 
407 	/**
408 	 * Clean up when fuse_iqueue is destroyed
409 	 */
410 	void (*release)(struct fuse_iqueue *fiq);
411 };
412 
413 /** /dev/fuse input queue operations */
414 extern const struct fuse_iqueue_ops fuse_dev_fiq_ops;
415 
416 struct fuse_iqueue {
417 	/** Connection established */
418 	unsigned connected;
419 
420 	/** Lock protecting accesses to members of this structure */
421 	spinlock_t lock;
422 
423 	/** Readers of the connection are waiting on this */
424 	wait_queue_head_t waitq;
425 
426 	/** The next unique request id */
427 	u64 reqctr;
428 
429 	/** The list of pending requests */
430 	struct list_head pending;
431 
432 	/** Pending interrupts */
433 	struct list_head interrupts;
434 
435 	/** Queue of pending forgets */
436 	struct fuse_forget_link forget_list_head;
437 	struct fuse_forget_link *forget_list_tail;
438 
439 	/** Batching of FORGET requests (positive indicates FORGET batch) */
440 	int forget_batch;
441 
442 	/** O_ASYNC requests */
443 	struct fasync_struct *fasync;
444 
445 	/** Device-specific callbacks */
446 	const struct fuse_iqueue_ops *ops;
447 
448 	/** Device-specific state */
449 	void *priv;
450 };
451 
452 #define FUSE_PQ_HASH_BITS 8
453 #define FUSE_PQ_HASH_SIZE (1 << FUSE_PQ_HASH_BITS)
454 
455 struct fuse_pqueue {
456 	/** Connection established */
457 	unsigned connected;
458 
459 	/** Lock protecting accessess to  members of this structure */
460 	spinlock_t lock;
461 
462 	/** Hash table of requests being processed */
463 	struct list_head *processing;
464 
465 	/** The list of requests under I/O */
466 	struct list_head io;
467 };
468 
469 /**
470  * Fuse device instance
471  */
472 struct fuse_dev {
473 	/** Fuse connection for this device */
474 	struct fuse_conn *fc;
475 
476 	/** Processing queue */
477 	struct fuse_pqueue pq;
478 
479 	/** list entry on fc->devices */
480 	struct list_head entry;
481 };
482 
483 struct fuse_fs_context {
484 	int fd;
485 	struct file *file;
486 	unsigned int rootmode;
487 	kuid_t user_id;
488 	kgid_t group_id;
489 	bool is_bdev:1;
490 	bool fd_present:1;
491 	bool rootmode_present:1;
492 	bool user_id_present:1;
493 	bool group_id_present:1;
494 	bool default_permissions:1;
495 	bool allow_other:1;
496 	bool destroy:1;
497 	bool no_control:1;
498 	bool no_force_umount:1;
499 	bool legacy_opts_show:1;
500 	bool dax:1;
501 	unsigned int max_read;
502 	unsigned int blksize;
503 	const char *subtype;
504 
505 	/* DAX device, may be NULL */
506 	struct dax_device *dax_dev;
507 
508 	/* fuse_dev pointer to fill in, should contain NULL on entry */
509 	void **fudptr;
510 };
511 
512 struct fuse_sync_bucket {
513 	/* count is a possible scalability bottleneck */
514 	atomic_t count;
515 	wait_queue_head_t waitq;
516 	struct rcu_head rcu;
517 };
518 
519 /**
520  * A Fuse connection.
521  *
522  * This structure is created, when the root filesystem is mounted, and
523  * is destroyed, when the client device is closed and the last
524  * fuse_mount is destroyed.
525  */
526 struct fuse_conn {
527 	/** Lock protecting accessess to  members of this structure */
528 	spinlock_t lock;
529 
530 	/** Refcount */
531 	refcount_t count;
532 
533 	/** Number of fuse_dev's */
534 	atomic_t dev_count;
535 
536 	struct rcu_head rcu;
537 
538 	/** The user id for this mount */
539 	kuid_t user_id;
540 
541 	/** The group id for this mount */
542 	kgid_t group_id;
543 
544 	/** The pid namespace for this mount */
545 	struct pid_namespace *pid_ns;
546 
547 	/** The user namespace for this mount */
548 	struct user_namespace *user_ns;
549 
550 	/** Maximum read size */
551 	unsigned max_read;
552 
553 	/** Maximum write size */
554 	unsigned max_write;
555 
556 	/** Maximum number of pages that can be used in a single request */
557 	unsigned int max_pages;
558 
559 	/** Constrain ->max_pages to this value during feature negotiation */
560 	unsigned int max_pages_limit;
561 
562 	/** Input queue */
563 	struct fuse_iqueue iq;
564 
565 	/** The next unique kernel file handle */
566 	atomic64_t khctr;
567 
568 	/** rbtree of fuse_files waiting for poll events indexed by ph */
569 	struct rb_root polled_files;
570 
571 	/** Maximum number of outstanding background requests */
572 	unsigned max_background;
573 
574 	/** Number of background requests at which congestion starts */
575 	unsigned congestion_threshold;
576 
577 	/** Number of requests currently in the background */
578 	unsigned num_background;
579 
580 	/** Number of background requests currently queued for userspace */
581 	unsigned active_background;
582 
583 	/** The list of background requests set aside for later queuing */
584 	struct list_head bg_queue;
585 
586 	/** Protects: max_background, congestion_threshold, num_background,
587 	 * active_background, bg_queue, blocked */
588 	spinlock_t bg_lock;
589 
590 	/** Flag indicating that INIT reply has been received. Allocating
591 	 * any fuse request will be suspended until the flag is set */
592 	int initialized;
593 
594 	/** Flag indicating if connection is blocked.  This will be
595 	    the case before the INIT reply is received, and if there
596 	    are too many outstading backgrounds requests */
597 	int blocked;
598 
599 	/** waitq for blocked connection */
600 	wait_queue_head_t blocked_waitq;
601 
602 	/** Connection established, cleared on umount, connection
603 	    abort and device release */
604 	unsigned connected;
605 
606 	/** Connection aborted via sysfs */
607 	bool aborted;
608 
609 	/** Connection failed (version mismatch).  Cannot race with
610 	    setting other bitfields since it is only set once in INIT
611 	    reply, before any other request, and never cleared */
612 	unsigned conn_error:1;
613 
614 	/** Connection successful.  Only set in INIT */
615 	unsigned conn_init:1;
616 
617 	/** Do readpages asynchronously?  Only set in INIT */
618 	unsigned async_read:1;
619 
620 	/** Return an unique read error after abort.  Only set in INIT */
621 	unsigned abort_err:1;
622 
623 	/** Do not send separate SETATTR request before open(O_TRUNC)  */
624 	unsigned atomic_o_trunc:1;
625 
626 	/** Filesystem supports NFS exporting.  Only set in INIT */
627 	unsigned export_support:1;
628 
629 	/** write-back cache policy (default is write-through) */
630 	unsigned writeback_cache:1;
631 
632 	/** allow parallel lookups and readdir (default is serialized) */
633 	unsigned parallel_dirops:1;
634 
635 	/** handle fs handles killing suid/sgid/cap on write/chown/trunc */
636 	unsigned handle_killpriv:1;
637 
638 	/** cache READLINK responses in page cache */
639 	unsigned cache_symlinks:1;
640 
641 	/* show legacy mount options */
642 	unsigned int legacy_opts_show:1;
643 
644 	/*
645 	 * fs kills suid/sgid/cap on write/chown/trunc. suid is killed on
646 	 * write/trunc only if caller did not have CAP_FSETID.  sgid is killed
647 	 * on write/truncate only if caller did not have CAP_FSETID as well as
648 	 * file has group execute permission.
649 	 */
650 	unsigned handle_killpriv_v2:1;
651 
652 	/*
653 	 * The following bitfields are only for optimization purposes
654 	 * and hence races in setting them will not cause malfunction
655 	 */
656 
657 	/** Is open/release not implemented by fs? */
658 	unsigned no_open:1;
659 
660 	/** Is opendir/releasedir not implemented by fs? */
661 	unsigned no_opendir:1;
662 
663 	/** Is fsync not implemented by fs? */
664 	unsigned no_fsync:1;
665 
666 	/** Is fsyncdir not implemented by fs? */
667 	unsigned no_fsyncdir:1;
668 
669 	/** Is flush not implemented by fs? */
670 	unsigned no_flush:1;
671 
672 	/** Is setxattr not implemented by fs? */
673 	unsigned no_setxattr:1;
674 
675 	/** Does file server support extended setxattr */
676 	unsigned setxattr_ext:1;
677 
678 	/** Is getxattr not implemented by fs? */
679 	unsigned no_getxattr:1;
680 
681 	/** Is listxattr not implemented by fs? */
682 	unsigned no_listxattr:1;
683 
684 	/** Is removexattr not implemented by fs? */
685 	unsigned no_removexattr:1;
686 
687 	/** Are posix file locking primitives not implemented by fs? */
688 	unsigned no_lock:1;
689 
690 	/** Is access not implemented by fs? */
691 	unsigned no_access:1;
692 
693 	/** Is create not implemented by fs? */
694 	unsigned no_create:1;
695 
696 	/** Is interrupt not implemented by fs? */
697 	unsigned no_interrupt:1;
698 
699 	/** Is bmap not implemented by fs? */
700 	unsigned no_bmap:1;
701 
702 	/** Is poll not implemented by fs? */
703 	unsigned no_poll:1;
704 
705 	/** Do multi-page cached writes */
706 	unsigned big_writes:1;
707 
708 	/** Don't apply umask to creation modes */
709 	unsigned dont_mask:1;
710 
711 	/** Are BSD file locking primitives not implemented by fs? */
712 	unsigned no_flock:1;
713 
714 	/** Is fallocate not implemented by fs? */
715 	unsigned no_fallocate:1;
716 
717 	/** Is rename with flags implemented by fs? */
718 	unsigned no_rename2:1;
719 
720 	/** Use enhanced/automatic page cache invalidation. */
721 	unsigned auto_inval_data:1;
722 
723 	/** Filesystem is fully responsible for page cache invalidation. */
724 	unsigned explicit_inval_data:1;
725 
726 	/** Does the filesystem support readdirplus? */
727 	unsigned do_readdirplus:1;
728 
729 	/** Does the filesystem want adaptive readdirplus? */
730 	unsigned readdirplus_auto:1;
731 
732 	/** Does the filesystem support asynchronous direct-IO submission? */
733 	unsigned async_dio:1;
734 
735 	/** Is lseek not implemented by fs? */
736 	unsigned no_lseek:1;
737 
738 	/** Does the filesystem support posix acls? */
739 	unsigned posix_acl:1;
740 
741 	/** Check permissions based on the file mode or not? */
742 	unsigned default_permissions:1;
743 
744 	/** Allow other than the mounter user to access the filesystem ? */
745 	unsigned allow_other:1;
746 
747 	/** Does the filesystem support copy_file_range? */
748 	unsigned no_copy_file_range:1;
749 
750 	/* Send DESTROY request */
751 	unsigned int destroy:1;
752 
753 	/* Delete dentries that have gone stale */
754 	unsigned int delete_stale:1;
755 
756 	/** Do not create entry in fusectl fs */
757 	unsigned int no_control:1;
758 
759 	/** Do not allow MNT_FORCE umount */
760 	unsigned int no_force_umount:1;
761 
762 	/* Auto-mount submounts announced by the server */
763 	unsigned int auto_submounts:1;
764 
765 	/* Propagate syncfs() to server */
766 	unsigned int sync_fs:1;
767 
768 	/** The number of requests waiting for completion */
769 	atomic_t num_waiting;
770 
771 	/** Negotiated minor version */
772 	unsigned minor;
773 
774 	/** Entry on the fuse_mount_list */
775 	struct list_head entry;
776 
777 	/** Device ID from the root super block */
778 	dev_t dev;
779 
780 	/** Dentries in the control filesystem */
781 	struct dentry *ctl_dentry[FUSE_CTL_NUM_DENTRIES];
782 
783 	/** number of dentries used in the above array */
784 	int ctl_ndents;
785 
786 	/** Key for lock owner ID scrambling */
787 	u32 scramble_key[4];
788 
789 	/** Version counter for attribute changes */
790 	atomic64_t attr_version;
791 
792 	/** Called on final put */
793 	void (*release)(struct fuse_conn *);
794 
795 	/**
796 	 * Read/write semaphore to hold when accessing the sb of any
797 	 * fuse_mount belonging to this connection
798 	 */
799 	struct rw_semaphore killsb;
800 
801 	/** List of device instances belonging to this connection */
802 	struct list_head devices;
803 
804 #ifdef CONFIG_FUSE_DAX
805 	/* Dax specific conn data, non-NULL if DAX is enabled */
806 	struct fuse_conn_dax *dax;
807 #endif
808 
809 	/** List of filesystems using this connection */
810 	struct list_head mounts;
811 
812 	/* New writepages go into this bucket */
813 	struct fuse_sync_bucket __rcu *curr_bucket;
814 };
815 
816 /*
817  * Represents a mounted filesystem, potentially a submount.
818  *
819  * This object allows sharing a fuse_conn between separate mounts to
820  * allow submounts with dedicated superblocks and thus separate device
821  * IDs.
822  */
823 struct fuse_mount {
824 	/* Underlying (potentially shared) connection to the FUSE server */
825 	struct fuse_conn *fc;
826 
827 	/*
828 	 * Super block for this connection (fc->killsb must be held when
829 	 * accessing this).
830 	 */
831 	struct super_block *sb;
832 
833 	/* Entry on fc->mounts */
834 	struct list_head fc_entry;
835 };
836 
get_fuse_mount_super(struct super_block * sb)837 static inline struct fuse_mount *get_fuse_mount_super(struct super_block *sb)
838 {
839 	return sb->s_fs_info;
840 }
841 
get_fuse_conn_super(struct super_block * sb)842 static inline struct fuse_conn *get_fuse_conn_super(struct super_block *sb)
843 {
844 	return get_fuse_mount_super(sb)->fc;
845 }
846 
get_fuse_mount(struct inode * inode)847 static inline struct fuse_mount *get_fuse_mount(struct inode *inode)
848 {
849 	return get_fuse_mount_super(inode->i_sb);
850 }
851 
get_fuse_conn(struct inode * inode)852 static inline struct fuse_conn *get_fuse_conn(struct inode *inode)
853 {
854 	return get_fuse_mount_super(inode->i_sb)->fc;
855 }
856 
get_fuse_inode(struct inode * inode)857 static inline struct fuse_inode *get_fuse_inode(struct inode *inode)
858 {
859 	return container_of(inode, struct fuse_inode, inode);
860 }
861 
get_node_id(struct inode * inode)862 static inline u64 get_node_id(struct inode *inode)
863 {
864 	return get_fuse_inode(inode)->nodeid;
865 }
866 
invalid_nodeid(u64 nodeid)867 static inline int invalid_nodeid(u64 nodeid)
868 {
869 	return !nodeid || nodeid == FUSE_ROOT_ID;
870 }
871 
fuse_get_attr_version(struct fuse_conn * fc)872 static inline u64 fuse_get_attr_version(struct fuse_conn *fc)
873 {
874 	return atomic64_read(&fc->attr_version);
875 }
876 
fuse_stale_inode(const struct inode * inode,int generation,struct fuse_attr * attr)877 static inline bool fuse_stale_inode(const struct inode *inode, int generation,
878 				    struct fuse_attr *attr)
879 {
880 	return inode->i_generation != generation ||
881 		inode_wrong_type(inode, attr->mode);
882 }
883 
fuse_make_bad(struct inode * inode)884 static inline void fuse_make_bad(struct inode *inode)
885 {
886 	remove_inode_hash(inode);
887 	set_bit(FUSE_I_BAD, &get_fuse_inode(inode)->state);
888 }
889 
fuse_is_bad(struct inode * inode)890 static inline bool fuse_is_bad(struct inode *inode)
891 {
892 	return unlikely(test_bit(FUSE_I_BAD, &get_fuse_inode(inode)->state));
893 }
894 
fuse_pages_alloc(unsigned int npages,gfp_t flags,struct fuse_page_desc ** desc)895 static inline struct page **fuse_pages_alloc(unsigned int npages, gfp_t flags,
896 					     struct fuse_page_desc **desc)
897 {
898 	struct page **pages;
899 
900 	pages = kzalloc(npages * (sizeof(struct page *) +
901 				  sizeof(struct fuse_page_desc)), flags);
902 	*desc = (void *) (pages + npages);
903 
904 	return pages;
905 }
906 
fuse_page_descs_length_init(struct fuse_page_desc * descs,unsigned int index,unsigned int nr_pages)907 static inline void fuse_page_descs_length_init(struct fuse_page_desc *descs,
908 					       unsigned int index,
909 					       unsigned int nr_pages)
910 {
911 	int i;
912 
913 	for (i = index; i < index + nr_pages; i++)
914 		descs[i].length = PAGE_SIZE - descs[i].offset;
915 }
916 
fuse_sync_bucket_dec(struct fuse_sync_bucket * bucket)917 static inline void fuse_sync_bucket_dec(struct fuse_sync_bucket *bucket)
918 {
919 	/* Need RCU protection to prevent use after free after the decrement */
920 	rcu_read_lock();
921 	if (atomic_dec_and_test(&bucket->count))
922 		wake_up(&bucket->waitq);
923 	rcu_read_unlock();
924 }
925 
926 /** Device operations */
927 extern const struct file_operations fuse_dev_operations;
928 
929 extern const struct dentry_operations fuse_dentry_operations;
930 extern const struct dentry_operations fuse_root_dentry_operations;
931 
932 /**
933  * Get a filled in inode
934  */
935 struct inode *fuse_iget(struct super_block *sb, u64 nodeid,
936 			int generation, struct fuse_attr *attr,
937 			u64 attr_valid, u64 attr_version);
938 
939 int fuse_lookup_name(struct super_block *sb, u64 nodeid, const struct qstr *name,
940 		     struct fuse_entry_out *outarg, struct inode **inode);
941 
942 /**
943  * Send FORGET command
944  */
945 void fuse_queue_forget(struct fuse_conn *fc, struct fuse_forget_link *forget,
946 		       u64 nodeid, u64 nlookup);
947 
948 struct fuse_forget_link *fuse_alloc_forget(void);
949 
950 struct fuse_forget_link *fuse_dequeue_forget(struct fuse_iqueue *fiq,
951 					     unsigned int max,
952 					     unsigned int *countp);
953 
954 /*
955  * Initialize READ or READDIR request
956  */
957 struct fuse_io_args {
958 	union {
959 		struct {
960 			struct fuse_read_in in;
961 			u64 attr_ver;
962 		} read;
963 		struct {
964 			struct fuse_write_in in;
965 			struct fuse_write_out out;
966 			bool page_locked;
967 		} write;
968 	};
969 	struct fuse_args_pages ap;
970 	struct fuse_io_priv *io;
971 	struct fuse_file *ff;
972 };
973 
974 void fuse_read_args_fill(struct fuse_io_args *ia, struct file *file, loff_t pos,
975 			 size_t count, int opcode);
976 
977 
978 /**
979  * Send OPEN or OPENDIR request
980  */
981 int fuse_open_common(struct inode *inode, struct file *file, bool isdir);
982 
983 struct fuse_file *fuse_file_alloc(struct fuse_mount *fm);
984 void fuse_file_free(struct fuse_file *ff);
985 void fuse_finish_open(struct inode *inode, struct file *file);
986 
987 void fuse_sync_release(struct fuse_inode *fi, struct fuse_file *ff,
988 		       unsigned int flags);
989 
990 /**
991  * Send RELEASE or RELEASEDIR request
992  */
993 void fuse_release_common(struct file *file, bool isdir);
994 
995 /**
996  * Send FSYNC or FSYNCDIR request
997  */
998 int fuse_fsync_common(struct file *file, loff_t start, loff_t end,
999 		      int datasync, int opcode);
1000 
1001 /**
1002  * Notify poll wakeup
1003  */
1004 int fuse_notify_poll_wakeup(struct fuse_conn *fc,
1005 			    struct fuse_notify_poll_wakeup_out *outarg);
1006 
1007 /**
1008  * Initialize file operations on a regular file
1009  */
1010 void fuse_init_file_inode(struct inode *inode);
1011 
1012 /**
1013  * Initialize inode operations on regular files and special files
1014  */
1015 void fuse_init_common(struct inode *inode);
1016 
1017 /**
1018  * Initialize inode and file operations on a directory
1019  */
1020 void fuse_init_dir(struct inode *inode);
1021 
1022 /**
1023  * Initialize inode operations on a symlink
1024  */
1025 void fuse_init_symlink(struct inode *inode);
1026 
1027 /**
1028  * Change attributes of an inode
1029  */
1030 void fuse_change_attributes(struct inode *inode, struct fuse_attr *attr,
1031 			    u64 attr_valid, u64 attr_version);
1032 
1033 void fuse_change_attributes_common(struct inode *inode, struct fuse_attr *attr,
1034 				   u64 attr_valid, u32 cache_mask);
1035 
1036 u32 fuse_get_cache_mask(struct inode *inode);
1037 
1038 /**
1039  * Initialize the client device
1040  */
1041 int fuse_dev_init(void);
1042 
1043 /**
1044  * Cleanup the client device
1045  */
1046 void fuse_dev_cleanup(void);
1047 
1048 int fuse_ctl_init(void);
1049 void __exit fuse_ctl_cleanup(void);
1050 
1051 /**
1052  * Simple request sending that does request allocation and freeing
1053  */
1054 ssize_t fuse_simple_request(struct fuse_mount *fm, struct fuse_args *args);
1055 int fuse_simple_background(struct fuse_mount *fm, struct fuse_args *args,
1056 			   gfp_t gfp_flags);
1057 
1058 /**
1059  * End a finished request
1060  */
1061 void fuse_request_end(struct fuse_req *req);
1062 
1063 /* Abort all requests */
1064 void fuse_abort_conn(struct fuse_conn *fc);
1065 void fuse_wait_aborted(struct fuse_conn *fc);
1066 
1067 /**
1068  * Invalidate inode attributes
1069  */
1070 
1071 /* Attributes possibly changed on data modification */
1072 #define FUSE_STATX_MODIFY	(STATX_MTIME | STATX_CTIME | STATX_BLOCKS)
1073 
1074 /* Attributes possibly changed on data and/or size modification */
1075 #define FUSE_STATX_MODSIZE	(FUSE_STATX_MODIFY | STATX_SIZE)
1076 
1077 void fuse_invalidate_attr(struct inode *inode);
1078 void fuse_invalidate_attr_mask(struct inode *inode, u32 mask);
1079 
1080 void fuse_invalidate_entry_cache(struct dentry *entry);
1081 
1082 void fuse_invalidate_atime(struct inode *inode);
1083 
1084 u64 entry_attr_timeout(struct fuse_entry_out *o);
1085 void fuse_change_entry_timeout(struct dentry *entry, struct fuse_entry_out *o);
1086 
1087 /**
1088  * Acquire reference to fuse_conn
1089  */
1090 struct fuse_conn *fuse_conn_get(struct fuse_conn *fc);
1091 
1092 /**
1093  * Initialize fuse_conn
1094  */
1095 void fuse_conn_init(struct fuse_conn *fc, struct fuse_mount *fm,
1096 		    struct user_namespace *user_ns,
1097 		    const struct fuse_iqueue_ops *fiq_ops, void *fiq_priv);
1098 
1099 /**
1100  * Release reference to fuse_conn
1101  */
1102 void fuse_conn_put(struct fuse_conn *fc);
1103 
1104 struct fuse_dev *fuse_dev_alloc_install(struct fuse_conn *fc);
1105 struct fuse_dev *fuse_dev_alloc(void);
1106 void fuse_dev_install(struct fuse_dev *fud, struct fuse_conn *fc);
1107 void fuse_dev_free(struct fuse_dev *fud);
1108 void fuse_send_init(struct fuse_mount *fm);
1109 
1110 /**
1111  * Fill in superblock and initialize fuse connection
1112  * @sb: partially-initialized superblock to fill in
1113  * @ctx: mount context
1114  */
1115 int fuse_fill_super_common(struct super_block *sb, struct fuse_fs_context *ctx);
1116 
1117 /*
1118  * Remove the mount from the connection
1119  *
1120  * Returns whether this was the last mount
1121  */
1122 bool fuse_mount_remove(struct fuse_mount *fm);
1123 
1124 /*
1125  * Setup context ops for submounts
1126  */
1127 int fuse_init_fs_context_submount(struct fs_context *fsc);
1128 
1129 /*
1130  * Shut down the connection (possibly sending DESTROY request).
1131  */
1132 void fuse_conn_destroy(struct fuse_mount *fm);
1133 
1134 /* Drop the connection and free the fuse mount */
1135 void fuse_mount_destroy(struct fuse_mount *fm);
1136 
1137 /**
1138  * Add connection to control filesystem
1139  */
1140 int fuse_ctl_add_conn(struct fuse_conn *fc);
1141 
1142 /**
1143  * Remove connection from control filesystem
1144  */
1145 void fuse_ctl_remove_conn(struct fuse_conn *fc);
1146 
1147 /**
1148  * Is file type valid?
1149  */
1150 int fuse_valid_type(int m);
1151 
1152 bool fuse_invalid_attr(struct fuse_attr *attr);
1153 
1154 /**
1155  * Is current process allowed to perform filesystem operation?
1156  */
1157 int fuse_allow_current_process(struct fuse_conn *fc);
1158 
1159 u64 fuse_lock_owner_id(struct fuse_conn *fc, fl_owner_t id);
1160 
1161 void fuse_flush_time_update(struct inode *inode);
1162 void fuse_update_ctime(struct inode *inode);
1163 
1164 int fuse_update_attributes(struct inode *inode, struct file *file, u32 mask);
1165 
1166 void fuse_flush_writepages(struct inode *inode);
1167 
1168 void fuse_set_nowrite(struct inode *inode);
1169 void fuse_release_nowrite(struct inode *inode);
1170 
1171 /**
1172  * Scan all fuse_mounts belonging to fc to find the first where
1173  * ilookup5() returns a result.  Return that result and the
1174  * respective fuse_mount in *fm (unless fm is NULL).
1175  *
1176  * The caller must hold fc->killsb.
1177  */
1178 struct inode *fuse_ilookup(struct fuse_conn *fc, u64 nodeid,
1179 			   struct fuse_mount **fm);
1180 
1181 /**
1182  * File-system tells the kernel to invalidate cache for the given node id.
1183  */
1184 int fuse_reverse_inval_inode(struct fuse_conn *fc, u64 nodeid,
1185 			     loff_t offset, loff_t len);
1186 
1187 /**
1188  * File-system tells the kernel to invalidate parent attributes and
1189  * the dentry matching parent/name.
1190  *
1191  * If the child_nodeid is non-zero and:
1192  *    - matches the inode number for the dentry matching parent/name,
1193  *    - is not a mount point
1194  *    - is a file or oan empty directory
1195  * then the dentry is unhashed (d_delete()).
1196  */
1197 int fuse_reverse_inval_entry(struct fuse_conn *fc, u64 parent_nodeid,
1198 			     u64 child_nodeid, struct qstr *name);
1199 
1200 int fuse_do_open(struct fuse_mount *fm, u64 nodeid, struct file *file,
1201 		 bool isdir);
1202 
1203 /**
1204  * fuse_direct_io() flags
1205  */
1206 
1207 /** If set, it is WRITE; otherwise - READ */
1208 #define FUSE_DIO_WRITE (1 << 0)
1209 
1210 /** CUSE pass fuse_direct_io() a file which f_mapping->host is not from FUSE */
1211 #define FUSE_DIO_CUSE  (1 << 1)
1212 
1213 ssize_t fuse_direct_io(struct fuse_io_priv *io, struct iov_iter *iter,
1214 		       loff_t *ppos, int flags);
1215 long fuse_do_ioctl(struct file *file, unsigned int cmd, unsigned long arg,
1216 		   unsigned int flags);
1217 long fuse_ioctl_common(struct file *file, unsigned int cmd,
1218 		       unsigned long arg, unsigned int flags);
1219 __poll_t fuse_file_poll(struct file *file, poll_table *wait);
1220 int fuse_dev_release(struct inode *inode, struct file *file);
1221 
1222 bool fuse_write_update_attr(struct inode *inode, loff_t pos, ssize_t written);
1223 
1224 int fuse_flush_times(struct inode *inode, struct fuse_file *ff);
1225 int fuse_write_inode(struct inode *inode, struct writeback_control *wbc);
1226 
1227 int fuse_do_setattr(struct dentry *dentry, struct iattr *attr,
1228 		    struct file *file);
1229 
1230 void fuse_set_initialized(struct fuse_conn *fc);
1231 
1232 void fuse_unlock_inode(struct inode *inode, bool locked);
1233 bool fuse_lock_inode(struct inode *inode);
1234 
1235 int fuse_setxattr(struct inode *inode, const char *name, const void *value,
1236 		  size_t size, int flags, unsigned int extra_flags);
1237 ssize_t fuse_getxattr(struct inode *inode, const char *name, void *value,
1238 		      size_t size);
1239 ssize_t fuse_listxattr(struct dentry *entry, char *list, size_t size);
1240 int fuse_removexattr(struct inode *inode, const char *name);
1241 extern const struct xattr_handler *fuse_xattr_handlers[];
1242 extern const struct xattr_handler *fuse_acl_xattr_handlers[];
1243 extern const struct xattr_handler *fuse_no_acl_xattr_handlers[];
1244 
1245 struct posix_acl;
1246 struct posix_acl *fuse_get_acl(struct inode *inode, int type, bool rcu);
1247 int fuse_set_acl(struct user_namespace *mnt_userns, struct inode *inode,
1248 		 struct posix_acl *acl, int type);
1249 
1250 /* readdir.c */
1251 int fuse_readdir(struct file *file, struct dir_context *ctx);
1252 
1253 /**
1254  * Return the number of bytes in an arguments list
1255  */
1256 unsigned int fuse_len_args(unsigned int numargs, struct fuse_arg *args);
1257 
1258 /**
1259  * Get the next unique ID for a request
1260  */
1261 u64 fuse_get_unique(struct fuse_iqueue *fiq);
1262 void fuse_free_conn(struct fuse_conn *fc);
1263 
1264 /* dax.c */
1265 
1266 #define FUSE_IS_DAX(inode) (IS_ENABLED(CONFIG_FUSE_DAX) && IS_DAX(inode))
1267 
1268 ssize_t fuse_dax_read_iter(struct kiocb *iocb, struct iov_iter *to);
1269 ssize_t fuse_dax_write_iter(struct kiocb *iocb, struct iov_iter *from);
1270 int fuse_dax_mmap(struct file *file, struct vm_area_struct *vma);
1271 int fuse_dax_break_layouts(struct inode *inode, u64 dmap_start, u64 dmap_end);
1272 int fuse_dax_conn_alloc(struct fuse_conn *fc, struct dax_device *dax_dev);
1273 void fuse_dax_conn_free(struct fuse_conn *fc);
1274 bool fuse_dax_inode_alloc(struct super_block *sb, struct fuse_inode *fi);
1275 void fuse_dax_inode_init(struct inode *inode);
1276 void fuse_dax_inode_cleanup(struct inode *inode);
1277 bool fuse_dax_check_alignment(struct fuse_conn *fc, unsigned int map_alignment);
1278 void fuse_dax_cancel_work(struct fuse_conn *fc);
1279 
1280 /* ioctl.c */
1281 long fuse_file_ioctl(struct file *file, unsigned int cmd, unsigned long arg);
1282 long fuse_file_compat_ioctl(struct file *file, unsigned int cmd,
1283 			    unsigned long arg);
1284 int fuse_fileattr_get(struct dentry *dentry, struct fileattr *fa);
1285 int fuse_fileattr_set(struct user_namespace *mnt_userns,
1286 		      struct dentry *dentry, struct fileattr *fa);
1287 
1288 /* file.c */
1289 
1290 struct fuse_file *fuse_file_open(struct fuse_mount *fm, u64 nodeid,
1291 				 unsigned int open_flags, bool isdir);
1292 void fuse_file_release(struct inode *inode, struct fuse_file *ff,
1293 		       unsigned int open_flags, fl_owner_t id, bool isdir);
1294 
1295 #endif /* _FS_FUSE_I_H */
1296