nfs_socket.c revision 1.156
1 /* $NetBSD: nfs_socket.c,v 1.156 2007/06/01 11:38:44 yamt Exp $ */ 2 3 /* 4 * Copyright (c) 1989, 1991, 1993, 1995 5 * The Regents of the University of California. All rights reserved. 6 * 7 * This code is derived from software contributed to Berkeley by 8 * Rick Macklem at The University of Guelph. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 3. Neither the name of the University nor the names of its contributors 19 * may be used to endorse or promote products derived from this software 20 * without specific prior written permission. 21 * 22 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 23 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 24 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32 * SUCH DAMAGE. 33 * 34 * @(#)nfs_socket.c 8.5 (Berkeley) 3/30/95 35 */ 36 37 /* 38 * Socket operations for use by nfs 39 */ 40 41 #include <sys/cdefs.h> 42 __KERNEL_RCSID(0, "$NetBSD: nfs_socket.c,v 1.156 2007/06/01 11:38:44 yamt Exp $"); 43 44 #include "fs_nfs.h" 45 #include "opt_nfs.h" 46 #include "opt_nfsserver.h" 47 #include "opt_mbuftrace.h" 48 #include "opt_inet.h" 49 50 #include <sys/param.h> 51 #include <sys/systm.h> 52 #include <sys/callout.h> 53 #include <sys/proc.h> 54 #include <sys/mount.h> 55 #include <sys/kernel.h> 56 #include <sys/mbuf.h> 57 #include <sys/vnode.h> 58 #include <sys/domain.h> 59 #include <sys/protosw.h> 60 #include <sys/socket.h> 61 #include <sys/socketvar.h> 62 #include <sys/syslog.h> 63 #include <sys/tprintf.h> 64 #include <sys/namei.h> 65 #include <sys/signal.h> 66 #include <sys/signalvar.h> 67 #include <sys/kauth.h> 68 69 #include <netinet/in.h> 70 #include <netinet/tcp.h> 71 72 #include <nfs/rpcv2.h> 73 #include <nfs/nfsproto.h> 74 #include <nfs/nfs.h> 75 #include <nfs/xdr_subs.h> 76 #include <nfs/nfsm_subs.h> 77 #include <nfs/nfsmount.h> 78 #include <nfs/nfsnode.h> 79 #include <nfs/nfsrtt.h> 80 #include <nfs/nfs_var.h> 81 82 MALLOC_DEFINE(M_NFSREQ, "NFS req", "NFS request header"); 83 #ifdef MBUFTRACE 84 struct mowner nfs_mowner = MOWNER_INIT("nfs",""); 85 #endif 86 87 /* 88 * Estimate rto for an nfs rpc sent via. an unreliable datagram. 89 * Use the mean and mean deviation of rtt for the appropriate type of rpc 90 * for the frequent rpcs and a default for the others. 91 * The justification for doing "other" this way is that these rpcs 92 * happen so infrequently that timer est. would probably be stale. 93 * Also, since many of these rpcs are 94 * non-idempotent, a conservative timeout is desired. 95 * getattr, lookup - A+2D 96 * read, write - A+4D 97 * other - nm_timeo 98 */ 99 #define NFS_RTO(n, t) \ 100 ((t) == 0 ? (n)->nm_timeo : \ 101 ((t) < 3 ? \ 102 (((((n)->nm_srtt[t-1] + 3) >> 2) + (n)->nm_sdrtt[t-1] + 1) >> 1) : \ 103 ((((n)->nm_srtt[t-1] + 7) >> 3) + (n)->nm_sdrtt[t-1] + 1))) 104 #define NFS_SRTT(r) (r)->r_nmp->nm_srtt[proct[(r)->r_procnum] - 1] 105 #define NFS_SDRTT(r) (r)->r_nmp->nm_sdrtt[proct[(r)->r_procnum] - 1] 106 /* 107 * External data, mostly RPC constants in XDR form 108 */ 109 extern u_int32_t rpc_reply, rpc_msgdenied, rpc_mismatch, rpc_vers, 110 rpc_auth_unix, rpc_msgaccepted, rpc_call, rpc_autherr, 111 rpc_auth_kerb; 112 extern u_int32_t nfs_prog; 113 extern const int nfsv3_procid[NFS_NPROCS]; 114 extern int nfs_ticks; 115 116 /* 117 * Defines which timer to use for the procnum. 118 * 0 - default 119 * 1 - getattr 120 * 2 - lookup 121 * 3 - read 122 * 4 - write 123 */ 124 static const int proct[NFS_NPROCS] = { 125 [NFSPROC_NULL] = 0, 126 [NFSPROC_GETATTR] = 1, 127 [NFSPROC_SETATTR] = 0, 128 [NFSPROC_LOOKUP] = 2, 129 [NFSPROC_ACCESS] = 1, 130 [NFSPROC_READLINK] = 3, 131 [NFSPROC_READ] = 3, 132 [NFSPROC_WRITE] = 4, 133 [NFSPROC_CREATE] = 0, 134 [NFSPROC_MKDIR] = 0, 135 [NFSPROC_SYMLINK] = 0, 136 [NFSPROC_MKNOD] = 0, 137 [NFSPROC_REMOVE] = 0, 138 [NFSPROC_RMDIR] = 0, 139 [NFSPROC_RENAME] = 0, 140 [NFSPROC_LINK] = 0, 141 [NFSPROC_READDIR] = 3, 142 [NFSPROC_READDIRPLUS] = 3, 143 [NFSPROC_FSSTAT] = 0, 144 [NFSPROC_FSINFO] = 0, 145 [NFSPROC_PATHCONF] = 0, 146 [NFSPROC_COMMIT] = 0, 147 [NFSPROC_NOOP] = 0, 148 }; 149 150 /* 151 * There is a congestion window for outstanding rpcs maintained per mount 152 * point. The cwnd size is adjusted in roughly the way that: 153 * Van Jacobson, Congestion avoidance and Control, In "Proceedings of 154 * SIGCOMM '88". ACM, August 1988. 155 * describes for TCP. The cwnd size is chopped in half on a retransmit timeout 156 * and incremented by 1/cwnd when each rpc reply is received and a full cwnd 157 * of rpcs is in progress. 158 * (The sent count and cwnd are scaled for integer arith.) 159 * Variants of "slow start" were tried and were found to be too much of a 160 * performance hit (ave. rtt 3 times larger), 161 * I suspect due to the large rtt that nfs rpcs have. 162 */ 163 #define NFS_CWNDSCALE 256 164 #define NFS_MAXCWND (NFS_CWNDSCALE * 32) 165 static const int nfs_backoff[8] = { 2, 4, 8, 16, 32, 64, 128, 256, }; 166 int nfsrtton = 0; 167 struct nfsrtt nfsrtt; 168 struct nfsreqhead nfs_reqq; 169 170 struct callout nfs_timer_ch = CALLOUT_INITIALIZER_SETFUNC(nfs_timer, NULL); 171 172 static int nfs_sndlock(struct nfsmount *, struct nfsreq *); 173 static void nfs_sndunlock(struct nfsmount *); 174 static int nfs_rcvlock(struct nfsmount *, struct nfsreq *); 175 static void nfs_rcvunlock(struct nfsmount *); 176 177 /* 178 * Initialize sockets and congestion for a new NFS connection. 179 * We do not free the sockaddr if error. 180 */ 181 int 182 nfs_connect(nmp, rep, l) 183 struct nfsmount *nmp; 184 struct nfsreq *rep; 185 struct lwp *l; 186 { 187 struct socket *so; 188 int s, error, rcvreserve, sndreserve; 189 struct sockaddr *saddr; 190 struct sockaddr_in *sin; 191 #ifdef INET6 192 struct sockaddr_in6 *sin6; 193 #endif 194 struct mbuf *m; 195 196 nmp->nm_so = (struct socket *)0; 197 saddr = mtod(nmp->nm_nam, struct sockaddr *); 198 error = socreate(saddr->sa_family, &nmp->nm_so, 199 nmp->nm_sotype, nmp->nm_soproto, l); 200 if (error) 201 goto bad; 202 so = nmp->nm_so; 203 #ifdef MBUFTRACE 204 so->so_mowner = &nfs_mowner; 205 so->so_rcv.sb_mowner = &nfs_mowner; 206 so->so_snd.sb_mowner = &nfs_mowner; 207 #endif 208 nmp->nm_soflags = so->so_proto->pr_flags; 209 210 /* 211 * Some servers require that the client port be a reserved port number. 212 */ 213 if (saddr->sa_family == AF_INET && (nmp->nm_flag & NFSMNT_RESVPORT)) { 214 m = m_get(M_WAIT, MT_SOOPTS); 215 MCLAIM(m, so->so_mowner); 216 *mtod(m, int32_t *) = IP_PORTRANGE_LOW; 217 m->m_len = sizeof(int32_t); 218 if ((error = sosetopt(so, IPPROTO_IP, IP_PORTRANGE, m))) 219 goto bad; 220 m = m_get(M_WAIT, MT_SONAME); 221 MCLAIM(m, so->so_mowner); 222 sin = mtod(m, struct sockaddr_in *); 223 sin->sin_len = m->m_len = sizeof (struct sockaddr_in); 224 sin->sin_family = AF_INET; 225 sin->sin_addr.s_addr = INADDR_ANY; 226 sin->sin_port = 0; 227 error = sobind(so, m, &lwp0); 228 m_freem(m); 229 if (error) 230 goto bad; 231 } 232 #ifdef INET6 233 if (saddr->sa_family == AF_INET6 && (nmp->nm_flag & NFSMNT_RESVPORT)) { 234 m = m_get(M_WAIT, MT_SOOPTS); 235 MCLAIM(m, so->so_mowner); 236 *mtod(m, int32_t *) = IPV6_PORTRANGE_LOW; 237 m->m_len = sizeof(int32_t); 238 if ((error = sosetopt(so, IPPROTO_IPV6, IPV6_PORTRANGE, m))) 239 goto bad; 240 m = m_get(M_WAIT, MT_SONAME); 241 MCLAIM(m, so->so_mowner); 242 sin6 = mtod(m, struct sockaddr_in6 *); 243 sin6->sin6_len = m->m_len = sizeof (struct sockaddr_in6); 244 sin6->sin6_family = AF_INET6; 245 sin6->sin6_addr = in6addr_any; 246 sin6->sin6_port = 0; 247 error = sobind(so, m, &lwp0); 248 m_freem(m); 249 if (error) 250 goto bad; 251 } 252 #endif 253 254 /* 255 * Protocols that do not require connections may be optionally left 256 * unconnected for servers that reply from a port other than NFS_PORT. 257 */ 258 if (nmp->nm_flag & NFSMNT_NOCONN) { 259 if (nmp->nm_soflags & PR_CONNREQUIRED) { 260 error = ENOTCONN; 261 goto bad; 262 } 263 } else { 264 error = soconnect(so, nmp->nm_nam, l); 265 if (error) 266 goto bad; 267 268 /* 269 * Wait for the connection to complete. Cribbed from the 270 * connect system call but with the wait timing out so 271 * that interruptible mounts don't hang here for a long time. 272 */ 273 s = splsoftnet(); 274 while ((so->so_state & SS_ISCONNECTING) && so->so_error == 0) { 275 (void) tsleep((void *)&so->so_timeo, PSOCK, 276 "nfscn1", 2 * hz); 277 if ((so->so_state & SS_ISCONNECTING) && 278 so->so_error == 0 && rep && 279 (error = nfs_sigintr(nmp, rep, rep->r_lwp)) != 0){ 280 so->so_state &= ~SS_ISCONNECTING; 281 splx(s); 282 goto bad; 283 } 284 } 285 if (so->so_error) { 286 error = so->so_error; 287 so->so_error = 0; 288 splx(s); 289 goto bad; 290 } 291 splx(s); 292 } 293 if (nmp->nm_flag & (NFSMNT_SOFT | NFSMNT_INT)) { 294 so->so_rcv.sb_timeo = (5 * hz); 295 so->so_snd.sb_timeo = (5 * hz); 296 } else { 297 /* 298 * enable receive timeout to detect server crash and reconnect. 299 * otherwise, we can be stuck in soreceive forever. 300 */ 301 so->so_rcv.sb_timeo = (5 * hz); 302 so->so_snd.sb_timeo = 0; 303 } 304 if (nmp->nm_sotype == SOCK_DGRAM) { 305 sndreserve = (nmp->nm_wsize + NFS_MAXPKTHDR) * 2; 306 rcvreserve = (max(nmp->nm_rsize, nmp->nm_readdirsize) + 307 NFS_MAXPKTHDR) * 2; 308 } else if (nmp->nm_sotype == SOCK_SEQPACKET) { 309 sndreserve = (nmp->nm_wsize + NFS_MAXPKTHDR) * 2; 310 rcvreserve = (max(nmp->nm_rsize, nmp->nm_readdirsize) + 311 NFS_MAXPKTHDR) * 2; 312 } else { 313 if (nmp->nm_sotype != SOCK_STREAM) 314 panic("nfscon sotype"); 315 if (so->so_proto->pr_flags & PR_CONNREQUIRED) { 316 m = m_get(M_WAIT, MT_SOOPTS); 317 MCLAIM(m, so->so_mowner); 318 *mtod(m, int32_t *) = 1; 319 m->m_len = sizeof(int32_t); 320 sosetopt(so, SOL_SOCKET, SO_KEEPALIVE, m); 321 } 322 if (so->so_proto->pr_protocol == IPPROTO_TCP) { 323 m = m_get(M_WAIT, MT_SOOPTS); 324 MCLAIM(m, so->so_mowner); 325 *mtod(m, int32_t *) = 1; 326 m->m_len = sizeof(int32_t); 327 sosetopt(so, IPPROTO_TCP, TCP_NODELAY, m); 328 } 329 sndreserve = (nmp->nm_wsize + NFS_MAXPKTHDR + 330 sizeof (u_int32_t)) * 2; 331 rcvreserve = (nmp->nm_rsize + NFS_MAXPKTHDR + 332 sizeof (u_int32_t)) * 2; 333 } 334 error = soreserve(so, sndreserve, rcvreserve); 335 if (error) 336 goto bad; 337 so->so_rcv.sb_flags |= SB_NOINTR; 338 so->so_snd.sb_flags |= SB_NOINTR; 339 340 /* Initialize other non-zero congestion variables */ 341 nmp->nm_srtt[0] = nmp->nm_srtt[1] = nmp->nm_srtt[2] = nmp->nm_srtt[3] = 342 NFS_TIMEO << 3; 343 nmp->nm_sdrtt[0] = nmp->nm_sdrtt[1] = nmp->nm_sdrtt[2] = 344 nmp->nm_sdrtt[3] = 0; 345 nmp->nm_cwnd = NFS_MAXCWND / 2; /* Initial send window */ 346 nmp->nm_sent = 0; 347 nmp->nm_timeouts = 0; 348 return (0); 349 350 bad: 351 nfs_disconnect(nmp); 352 return (error); 353 } 354 355 /* 356 * Reconnect routine: 357 * Called when a connection is broken on a reliable protocol. 358 * - clean up the old socket 359 * - nfs_connect() again 360 * - set R_MUSTRESEND for all outstanding requests on mount point 361 * If this fails the mount point is DEAD! 362 * nb: Must be called with the nfs_sndlock() set on the mount point. 363 */ 364 int 365 nfs_reconnect(rep, l) 366 struct nfsreq *rep; 367 struct lwp *l; 368 { 369 struct nfsreq *rp; 370 struct nfsmount *nmp = rep->r_nmp; 371 int error; 372 373 nfs_disconnect(nmp); 374 while ((error = nfs_connect(nmp, rep, l)) != 0) { 375 if (error == EINTR || error == ERESTART) 376 return (EINTR); 377 (void) tsleep((void *)&lbolt, PSOCK, "nfscn2", 0); 378 } 379 380 /* 381 * Loop through outstanding request list and fix up all requests 382 * on old socket. 383 */ 384 TAILQ_FOREACH(rp, &nfs_reqq, r_chain) { 385 if (rp->r_nmp == nmp) { 386 if ((rp->r_flags & R_MUSTRESEND) == 0) 387 rp->r_flags |= R_MUSTRESEND | R_REXMITTED; 388 rp->r_rexmit = 0; 389 } 390 } 391 return (0); 392 } 393 394 /* 395 * NFS disconnect. Clean up and unlink. 396 */ 397 void 398 nfs_disconnect(nmp) 399 struct nfsmount *nmp; 400 { 401 struct socket *so; 402 int drain = 0; 403 404 if (nmp->nm_so) { 405 so = nmp->nm_so; 406 nmp->nm_so = (struct socket *)0; 407 soshutdown(so, SHUT_RDWR); 408 drain = (nmp->nm_iflag & NFSMNT_DISMNT) != 0; 409 if (drain) { 410 /* 411 * soshutdown() above should wake up the current 412 * listener. 413 * Now wake up those waiting for the receive lock, and 414 * wait for them to go away unhappy, to prevent *nmp 415 * from evaporating while they're sleeping. 416 */ 417 mutex_enter(&nmp->nm_lock); 418 while (nmp->nm_waiters > 0) { 419 cv_broadcast(&nmp->nm_rcvcv); 420 cv_broadcast(&nmp->nm_sndcv); 421 cv_wait(&nmp->nm_disconcv, &nmp->nm_lock); 422 } 423 mutex_exit(&nmp->nm_lock); 424 } 425 soclose(so); 426 } 427 #ifdef DIAGNOSTIC 428 if (drain && (nmp->nm_waiters > 0)) 429 panic("nfs_disconnect: waiters left after drain?"); 430 #endif 431 } 432 433 void 434 nfs_safedisconnect(nmp) 435 struct nfsmount *nmp; 436 { 437 struct nfsreq dummyreq; 438 439 memset(&dummyreq, 0, sizeof(dummyreq)); 440 dummyreq.r_nmp = nmp; 441 nfs_rcvlock(nmp, &dummyreq); /* XXX ignored error return */ 442 nfs_disconnect(nmp); 443 nfs_rcvunlock(nmp); 444 } 445 446 /* 447 * This is the nfs send routine. For connection based socket types, it 448 * must be called with an nfs_sndlock() on the socket. 449 * "rep == NULL" indicates that it has been called from a server. 450 * For the client side: 451 * - return EINTR if the RPC is terminated, 0 otherwise 452 * - set R_MUSTRESEND if the send fails for any reason 453 * - do any cleanup required by recoverable socket errors (? ? ?) 454 * For the server side: 455 * - return EINTR or ERESTART if interrupted by a signal 456 * - return EPIPE if a connection is lost for connection based sockets (TCP...) 457 * - do any cleanup required by recoverable socket errors (? ? ?) 458 */ 459 int 460 nfs_send(so, nam, top, rep, l) 461 struct socket *so; 462 struct mbuf *nam; 463 struct mbuf *top; 464 struct nfsreq *rep; 465 struct lwp *l; 466 { 467 struct mbuf *sendnam; 468 int error, soflags, flags; 469 470 /* XXX nfs_doio()/nfs_request() calls with rep->r_lwp == NULL */ 471 if (l == NULL && rep->r_lwp == NULL) 472 l = curlwp; 473 474 if (rep) { 475 if (rep->r_flags & R_SOFTTERM) { 476 m_freem(top); 477 return (EINTR); 478 } 479 if ((so = rep->r_nmp->nm_so) == NULL) { 480 rep->r_flags |= R_MUSTRESEND; 481 m_freem(top); 482 return (0); 483 } 484 rep->r_flags &= ~R_MUSTRESEND; 485 soflags = rep->r_nmp->nm_soflags; 486 } else 487 soflags = so->so_proto->pr_flags; 488 if ((soflags & PR_CONNREQUIRED) || (so->so_state & SS_ISCONNECTED)) 489 sendnam = (struct mbuf *)0; 490 else 491 sendnam = nam; 492 if (so->so_type == SOCK_SEQPACKET) 493 flags = MSG_EOR; 494 else 495 flags = 0; 496 497 error = (*so->so_send)(so, sendnam, (struct uio *)0, top, 498 (struct mbuf *)0, flags, l); 499 if (error) { 500 if (rep) { 501 if (error == ENOBUFS && so->so_type == SOCK_DGRAM) { 502 /* 503 * We're too fast for the network/driver, 504 * and UDP isn't flowcontrolled. 505 * We need to resend. This is not fatal, 506 * just try again. 507 * 508 * Could be smarter here by doing some sort 509 * of a backoff, but this is rare. 510 */ 511 rep->r_flags |= R_MUSTRESEND; 512 } else { 513 if (error != EPIPE) 514 log(LOG_INFO, 515 "nfs send error %d for %s\n", 516 error, 517 rep->r_nmp->nm_mountp-> 518 mnt_stat.f_mntfromname); 519 /* 520 * Deal with errors for the client side. 521 */ 522 if (rep->r_flags & R_SOFTTERM) 523 error = EINTR; 524 else 525 rep->r_flags |= R_MUSTRESEND; 526 } 527 } else { 528 /* 529 * See above. This error can happen under normal 530 * circumstances and the log is too noisy. 531 * The error will still show up in nfsstat. 532 */ 533 if (error != ENOBUFS || so->so_type != SOCK_DGRAM) 534 log(LOG_INFO, "nfsd send error %d\n", error); 535 } 536 537 /* 538 * Handle any recoverable (soft) socket errors here. (? ? ?) 539 */ 540 if (error != EINTR && error != ERESTART && 541 error != EWOULDBLOCK && error != EPIPE) 542 error = 0; 543 } 544 return (error); 545 } 546 547 #ifdef NFS 548 /* 549 * Receive a Sun RPC Request/Reply. For SOCK_DGRAM, the work is all 550 * done by soreceive(), but for SOCK_STREAM we must deal with the Record 551 * Mark and consolidate the data into a new mbuf list. 552 * nb: Sometimes TCP passes the data up to soreceive() in long lists of 553 * small mbufs. 554 * For SOCK_STREAM we must be very careful to read an entire record once 555 * we have read any of it, even if the system call has been interrupted. 556 */ 557 int 558 nfs_receive(rep, aname, mp, l) 559 struct nfsreq *rep; 560 struct mbuf **aname; 561 struct mbuf **mp; 562 struct lwp *l; 563 { 564 struct socket *so; 565 struct uio auio; 566 struct iovec aio; 567 struct mbuf *m; 568 struct mbuf *control; 569 u_int32_t len; 570 struct mbuf **getnam; 571 int error, sotype, rcvflg; 572 573 /* 574 * Set up arguments for soreceive() 575 */ 576 *mp = (struct mbuf *)0; 577 *aname = (struct mbuf *)0; 578 sotype = rep->r_nmp->nm_sotype; 579 580 /* 581 * For reliable protocols, lock against other senders/receivers 582 * in case a reconnect is necessary. 583 * For SOCK_STREAM, first get the Record Mark to find out how much 584 * more there is to get. 585 * We must lock the socket against other receivers 586 * until we have an entire rpc request/reply. 587 */ 588 if (sotype != SOCK_DGRAM) { 589 error = nfs_sndlock(rep->r_nmp, rep); 590 if (error) 591 return (error); 592 tryagain: 593 /* 594 * Check for fatal errors and resending request. 595 */ 596 /* 597 * Ugh: If a reconnect attempt just happened, nm_so 598 * would have changed. NULL indicates a failed 599 * attempt that has essentially shut down this 600 * mount point. 601 */ 602 if (rep->r_mrep || (rep->r_flags & R_SOFTTERM)) { 603 nfs_sndunlock(rep->r_nmp); 604 return (EINTR); 605 } 606 so = rep->r_nmp->nm_so; 607 if (!so) { 608 error = nfs_reconnect(rep, l); 609 if (error) { 610 nfs_sndunlock(rep->r_nmp); 611 return (error); 612 } 613 goto tryagain; 614 } 615 while (rep->r_flags & R_MUSTRESEND) { 616 m = m_copym(rep->r_mreq, 0, M_COPYALL, M_WAIT); 617 nfsstats.rpcretries++; 618 rep->r_rtt = 0; 619 rep->r_flags &= ~R_TIMING; 620 error = nfs_send(so, rep->r_nmp->nm_nam, m, rep, l); 621 if (error) { 622 if (error == EINTR || error == ERESTART || 623 (error = nfs_reconnect(rep, l)) != 0) { 624 nfs_sndunlock(rep->r_nmp); 625 return (error); 626 } 627 goto tryagain; 628 } 629 } 630 nfs_sndunlock(rep->r_nmp); 631 if (sotype == SOCK_STREAM) { 632 aio.iov_base = (void *) &len; 633 aio.iov_len = sizeof(u_int32_t); 634 auio.uio_iov = &aio; 635 auio.uio_iovcnt = 1; 636 auio.uio_rw = UIO_READ; 637 auio.uio_offset = 0; 638 auio.uio_resid = sizeof(u_int32_t); 639 UIO_SETUP_SYSSPACE(&auio); 640 do { 641 rcvflg = MSG_WAITALL; 642 error = (*so->so_receive)(so, (struct mbuf **)0, &auio, 643 (struct mbuf **)0, (struct mbuf **)0, &rcvflg); 644 if (error == EWOULDBLOCK && rep) { 645 if (rep->r_flags & R_SOFTTERM) 646 return (EINTR); 647 /* 648 * if it seems that the server died after it 649 * received our request, set EPIPE so that 650 * we'll reconnect and retransmit requests. 651 */ 652 if (rep->r_rexmit >= rep->r_nmp->nm_retry) { 653 nfsstats.rpctimeouts++; 654 error = EPIPE; 655 } 656 } 657 } while (error == EWOULDBLOCK); 658 if (!error && auio.uio_resid > 0) { 659 /* 660 * Don't log a 0 byte receive; it means 661 * that the socket has been closed, and 662 * can happen during normal operation 663 * (forcible unmount or Solaris server). 664 */ 665 if (auio.uio_resid != sizeof (u_int32_t)) 666 log(LOG_INFO, 667 "short receive (%lu/%lu) from nfs server %s\n", 668 (u_long)sizeof(u_int32_t) - auio.uio_resid, 669 (u_long)sizeof(u_int32_t), 670 rep->r_nmp->nm_mountp->mnt_stat.f_mntfromname); 671 error = EPIPE; 672 } 673 if (error) 674 goto errout; 675 len = ntohl(len) & ~0x80000000; 676 /* 677 * This is SERIOUS! We are out of sync with the sender 678 * and forcing a disconnect/reconnect is all I can do. 679 */ 680 if (len > NFS_MAXPACKET) { 681 log(LOG_ERR, "%s (%d) from nfs server %s\n", 682 "impossible packet length", 683 len, 684 rep->r_nmp->nm_mountp->mnt_stat.f_mntfromname); 685 error = EFBIG; 686 goto errout; 687 } 688 auio.uio_resid = len; 689 do { 690 rcvflg = MSG_WAITALL; 691 error = (*so->so_receive)(so, (struct mbuf **)0, 692 &auio, mp, (struct mbuf **)0, &rcvflg); 693 } while (error == EWOULDBLOCK || error == EINTR || 694 error == ERESTART); 695 if (!error && auio.uio_resid > 0) { 696 if (len != auio.uio_resid) 697 log(LOG_INFO, 698 "short receive (%lu/%d) from nfs server %s\n", 699 (u_long)len - auio.uio_resid, len, 700 rep->r_nmp->nm_mountp->mnt_stat.f_mntfromname); 701 error = EPIPE; 702 } 703 } else { 704 /* 705 * NB: Since uio_resid is big, MSG_WAITALL is ignored 706 * and soreceive() will return when it has either a 707 * control msg or a data msg. 708 * We have no use for control msg., but must grab them 709 * and then throw them away so we know what is going 710 * on. 711 */ 712 auio.uio_resid = len = 100000000; /* Anything Big */ 713 /* not need to setup uio_vmspace */ 714 do { 715 rcvflg = 0; 716 error = (*so->so_receive)(so, (struct mbuf **)0, 717 &auio, mp, &control, &rcvflg); 718 if (control) 719 m_freem(control); 720 if (error == EWOULDBLOCK && rep) { 721 if (rep->r_flags & R_SOFTTERM) 722 return (EINTR); 723 } 724 } while (error == EWOULDBLOCK || 725 (!error && *mp == NULL && control)); 726 if ((rcvflg & MSG_EOR) == 0) 727 printf("Egad!!\n"); 728 if (!error && *mp == NULL) 729 error = EPIPE; 730 len -= auio.uio_resid; 731 } 732 errout: 733 if (error && error != EINTR && error != ERESTART) { 734 m_freem(*mp); 735 *mp = (struct mbuf *)0; 736 if (error != EPIPE) 737 log(LOG_INFO, 738 "receive error %d from nfs server %s\n", 739 error, 740 rep->r_nmp->nm_mountp->mnt_stat.f_mntfromname); 741 error = nfs_sndlock(rep->r_nmp, rep); 742 if (!error) 743 error = nfs_reconnect(rep, l); 744 if (!error) 745 goto tryagain; 746 else 747 nfs_sndunlock(rep->r_nmp); 748 } 749 } else { 750 if ((so = rep->r_nmp->nm_so) == NULL) 751 return (EACCES); 752 if (so->so_state & SS_ISCONNECTED) 753 getnam = (struct mbuf **)0; 754 else 755 getnam = aname; 756 auio.uio_resid = len = 1000000; 757 /* not need to setup uio_vmspace */ 758 do { 759 rcvflg = 0; 760 error = (*so->so_receive)(so, getnam, &auio, mp, 761 (struct mbuf **)0, &rcvflg); 762 if (error == EWOULDBLOCK && 763 (rep->r_flags & R_SOFTTERM)) 764 return (EINTR); 765 } while (error == EWOULDBLOCK); 766 len -= auio.uio_resid; 767 if (!error && *mp == NULL) 768 error = EPIPE; 769 } 770 if (error) { 771 m_freem(*mp); 772 *mp = (struct mbuf *)0; 773 } 774 return (error); 775 } 776 777 /* 778 * Implement receipt of reply on a socket. 779 * We must search through the list of received datagrams matching them 780 * with outstanding requests using the xid, until ours is found. 781 */ 782 /* ARGSUSED */ 783 int 784 nfs_reply(myrep, lwp) 785 struct nfsreq *myrep; 786 struct lwp *lwp; 787 { 788 struct nfsreq *rep; 789 struct nfsmount *nmp = myrep->r_nmp; 790 int32_t t1; 791 struct mbuf *mrep, *nam, *md; 792 u_int32_t rxid, *tl; 793 char *dpos, *cp2; 794 int error; 795 796 /* 797 * Loop around until we get our own reply 798 */ 799 for (;;) { 800 /* 801 * Lock against other receivers so that I don't get stuck in 802 * sbwait() after someone else has received my reply for me. 803 * Also necessary for connection based protocols to avoid 804 * race conditions during a reconnect. 805 */ 806 error = nfs_rcvlock(nmp, myrep); 807 if (error == EALREADY) 808 return (0); 809 if (error) 810 return (error); 811 /* 812 * Get the next Rpc reply off the socket 813 */ 814 815 mutex_enter(&nmp->nm_lock); 816 nmp->nm_waiters++; 817 mutex_exit(&nmp->nm_lock); 818 819 error = nfs_receive(myrep, &nam, &mrep, lwp); 820 821 mutex_enter(&nmp->nm_lock); 822 nmp->nm_waiters--; 823 cv_signal(&nmp->nm_disconcv); 824 mutex_exit(&nmp->nm_lock); 825 826 if (error) { 827 nfs_rcvunlock(nmp); 828 829 if (nmp->nm_iflag & NFSMNT_DISMNT) { 830 /* 831 * Oops, we're going away now.. 832 */ 833 return error; 834 } 835 /* 836 * Ignore routing errors on connectionless protocols? ? 837 */ 838 if (NFSIGNORE_SOERROR(nmp->nm_soflags, error)) { 839 nmp->nm_so->so_error = 0; 840 #ifdef DEBUG 841 printf("nfs_reply: ignoring error %d\n", error); 842 #endif 843 continue; 844 } 845 return (error); 846 } 847 if (nam) 848 m_freem(nam); 849 850 /* 851 * Get the xid and check that it is an rpc reply 852 */ 853 md = mrep; 854 dpos = mtod(md, void *); 855 nfsm_dissect(tl, u_int32_t *, 2*NFSX_UNSIGNED); 856 rxid = *tl++; 857 if (*tl != rpc_reply) { 858 nfsstats.rpcinvalid++; 859 m_freem(mrep); 860 nfsmout: 861 nfs_rcvunlock(nmp); 862 continue; 863 } 864 865 /* 866 * Loop through the request list to match up the reply 867 * Iff no match, just drop the datagram 868 */ 869 TAILQ_FOREACH(rep, &nfs_reqq, r_chain) { 870 if (rep->r_mrep == NULL && rxid == rep->r_xid) { 871 /* Found it.. */ 872 rep->r_mrep = mrep; 873 rep->r_md = md; 874 rep->r_dpos = dpos; 875 if (nfsrtton) { 876 struct rttl *rt; 877 878 rt = &nfsrtt.rttl[nfsrtt.pos]; 879 rt->proc = rep->r_procnum; 880 rt->rto = NFS_RTO(nmp, proct[rep->r_procnum]); 881 rt->sent = nmp->nm_sent; 882 rt->cwnd = nmp->nm_cwnd; 883 rt->srtt = nmp->nm_srtt[proct[rep->r_procnum] - 1]; 884 rt->sdrtt = nmp->nm_sdrtt[proct[rep->r_procnum] - 1]; 885 rt->fsid = nmp->nm_mountp->mnt_stat.f_fsidx; 886 getmicrotime(&rt->tstamp); 887 if (rep->r_flags & R_TIMING) 888 rt->rtt = rep->r_rtt; 889 else 890 rt->rtt = 1000000; 891 nfsrtt.pos = (nfsrtt.pos + 1) % NFSRTTLOGSIZ; 892 } 893 /* 894 * Update congestion window. 895 * Do the additive increase of 896 * one rpc/rtt. 897 */ 898 if (nmp->nm_cwnd <= nmp->nm_sent) { 899 nmp->nm_cwnd += 900 (NFS_CWNDSCALE * NFS_CWNDSCALE + 901 (nmp->nm_cwnd >> 1)) / nmp->nm_cwnd; 902 if (nmp->nm_cwnd > NFS_MAXCWND) 903 nmp->nm_cwnd = NFS_MAXCWND; 904 } 905 rep->r_flags &= ~R_SENT; 906 nmp->nm_sent -= NFS_CWNDSCALE; 907 /* 908 * Update rtt using a gain of 0.125 on the mean 909 * and a gain of 0.25 on the deviation. 910 */ 911 if (rep->r_flags & R_TIMING) { 912 /* 913 * Since the timer resolution of 914 * NFS_HZ is so course, it can often 915 * result in r_rtt == 0. Since 916 * r_rtt == N means that the actual 917 * rtt is between N+dt and N+2-dt ticks, 918 * add 1. 919 */ 920 t1 = rep->r_rtt + 1; 921 t1 -= (NFS_SRTT(rep) >> 3); 922 NFS_SRTT(rep) += t1; 923 if (t1 < 0) 924 t1 = -t1; 925 t1 -= (NFS_SDRTT(rep) >> 2); 926 NFS_SDRTT(rep) += t1; 927 } 928 nmp->nm_timeouts = 0; 929 break; 930 } 931 } 932 nfs_rcvunlock(nmp); 933 /* 934 * If not matched to a request, drop it. 935 * If it's mine, get out. 936 */ 937 if (rep == 0) { 938 nfsstats.rpcunexpected++; 939 m_freem(mrep); 940 } else if (rep == myrep) { 941 if (rep->r_mrep == NULL) 942 panic("nfsreply nil"); 943 return (0); 944 } 945 } 946 } 947 948 /* 949 * nfs_request - goes something like this 950 * - fill in request struct 951 * - links it into list 952 * - calls nfs_send() for first transmit 953 * - calls nfs_receive() to get reply 954 * - break down rpc header and return with nfs reply pointed to 955 * by mrep or error 956 * nb: always frees up mreq mbuf list 957 */ 958 int 959 nfs_request(np, mrest, procnum, lwp, cred, mrp, mdp, dposp, rexmitp) 960 struct nfsnode *np; 961 struct mbuf *mrest; 962 int procnum; 963 struct lwp *lwp; 964 kauth_cred_t cred; 965 struct mbuf **mrp; 966 struct mbuf **mdp; 967 char **dposp; 968 int *rexmitp; 969 { 970 struct mbuf *m, *mrep; 971 struct nfsreq *rep; 972 u_int32_t *tl; 973 int i; 974 struct nfsmount *nmp = VFSTONFS(np->n_vnode->v_mount); 975 struct mbuf *md, *mheadend; 976 char nickv[RPCX_NICKVERF]; 977 time_t waituntil; 978 char *dpos, *cp2; 979 int t1, s, error = 0, mrest_len, auth_len, auth_type; 980 int trylater_delay = NFS_TRYLATERDEL, failed_auth = 0; 981 int verf_len, verf_type; 982 u_int32_t xid; 983 char *auth_str, *verf_str; 984 NFSKERBKEY_T key; /* save session key */ 985 kauth_cred_t acred; 986 struct mbuf *mrest_backup = NULL; 987 kauth_cred_t origcred = NULL; /* XXX: gcc */ 988 bool retry_cred = true; 989 bool use_opencred = (np->n_flag & NUSEOPENCRED) != 0; 990 991 if (rexmitp != NULL) 992 *rexmitp = 0; 993 994 acred = kauth_cred_alloc(); 995 996 tryagain_cred: 997 KASSERT(cred != NULL); 998 MALLOC(rep, struct nfsreq *, sizeof(struct nfsreq), M_NFSREQ, M_WAITOK); 999 rep->r_nmp = nmp; 1000 KASSERT(lwp == NULL || lwp == curlwp); 1001 rep->r_lwp = lwp; 1002 rep->r_procnum = procnum; 1003 i = 0; 1004 m = mrest; 1005 while (m) { 1006 i += m->m_len; 1007 m = m->m_next; 1008 } 1009 mrest_len = i; 1010 1011 /* 1012 * Get the RPC header with authorization. 1013 */ 1014 kerbauth: 1015 verf_str = auth_str = (char *)0; 1016 if (nmp->nm_flag & NFSMNT_KERB) { 1017 verf_str = nickv; 1018 verf_len = sizeof (nickv); 1019 auth_type = RPCAUTH_KERB4; 1020 memset((void *)key, 0, sizeof (key)); 1021 if (failed_auth || nfs_getnickauth(nmp, cred, &auth_str, 1022 &auth_len, verf_str, verf_len)) { 1023 error = nfs_getauth(nmp, rep, cred, &auth_str, 1024 &auth_len, verf_str, &verf_len, key); 1025 if (error) { 1026 free((void *)rep, M_NFSREQ); 1027 m_freem(mrest); 1028 KASSERT(kauth_cred_getrefcnt(acred) == 1); 1029 kauth_cred_free(acred); 1030 return (error); 1031 } 1032 } 1033 retry_cred = false; 1034 } else { 1035 /* AUTH_UNIX */ 1036 uid_t uid; 1037 gid_t gid; 1038 1039 /* 1040 * on the most unix filesystems, permission checks are 1041 * done when the file is open(2)'ed. 1042 * ie. once a file is successfully open'ed, 1043 * following i/o operations never fail with EACCES. 1044 * we try to follow the semantics as far as possible. 1045 * 1046 * note that we expect that the nfs server always grant 1047 * accesses by the file's owner. 1048 */ 1049 origcred = cred; 1050 switch (procnum) { 1051 case NFSPROC_READ: 1052 case NFSPROC_WRITE: 1053 case NFSPROC_COMMIT: 1054 uid = np->n_vattr->va_uid; 1055 gid = np->n_vattr->va_gid; 1056 if (kauth_cred_geteuid(cred) == uid && 1057 kauth_cred_getegid(cred) == gid) { 1058 retry_cred = false; 1059 break; 1060 } 1061 if (use_opencred) 1062 break; 1063 kauth_cred_setuid(acred, uid); 1064 kauth_cred_seteuid(acred, uid); 1065 kauth_cred_setsvuid(acred, uid); 1066 kauth_cred_setgid(acred, gid); 1067 kauth_cred_setegid(acred, gid); 1068 kauth_cred_setsvgid(acred, gid); 1069 cred = acred; 1070 break; 1071 default: 1072 retry_cred = false; 1073 break; 1074 } 1075 /* 1076 * backup mbuf chain if we can need it later to retry. 1077 * 1078 * XXX maybe we can keep a direct reference to 1079 * mrest without doing m_copym, but it's ...ugly. 1080 */ 1081 if (retry_cred) 1082 mrest_backup = m_copym(mrest, 0, M_COPYALL, M_WAIT); 1083 auth_type = RPCAUTH_UNIX; 1084 /* XXX elad - ngroups */ 1085 auth_len = (((kauth_cred_ngroups(cred) > nmp->nm_numgrps) ? 1086 nmp->nm_numgrps : kauth_cred_ngroups(cred)) << 2) + 1087 5 * NFSX_UNSIGNED; 1088 } 1089 m = nfsm_rpchead(cred, nmp->nm_flag, procnum, auth_type, auth_len, 1090 auth_str, verf_len, verf_str, mrest, mrest_len, &mheadend, &xid); 1091 if (auth_str) 1092 free(auth_str, M_TEMP); 1093 1094 /* 1095 * For stream protocols, insert a Sun RPC Record Mark. 1096 */ 1097 if (nmp->nm_sotype == SOCK_STREAM) { 1098 M_PREPEND(m, NFSX_UNSIGNED, M_WAIT); 1099 *mtod(m, u_int32_t *) = htonl(0x80000000 | 1100 (m->m_pkthdr.len - NFSX_UNSIGNED)); 1101 } 1102 rep->r_mreq = m; 1103 rep->r_xid = xid; 1104 tryagain: 1105 if (nmp->nm_flag & NFSMNT_SOFT) 1106 rep->r_retry = nmp->nm_retry; 1107 else 1108 rep->r_retry = NFS_MAXREXMIT + 1; /* past clip limit */ 1109 rep->r_rtt = rep->r_rexmit = 0; 1110 if (proct[procnum] > 0) 1111 rep->r_flags = R_TIMING; 1112 else 1113 rep->r_flags = 0; 1114 rep->r_mrep = NULL; 1115 1116 /* 1117 * Do the client side RPC. 1118 */ 1119 nfsstats.rpcrequests++; 1120 /* 1121 * Chain request into list of outstanding requests. Be sure 1122 * to put it LAST so timer finds oldest requests first. 1123 */ 1124 s = splsoftnet(); 1125 TAILQ_INSERT_TAIL(&nfs_reqq, rep, r_chain); 1126 1127 /* 1128 * If backing off another request or avoiding congestion, don't 1129 * send this one now but let timer do it. If not timing a request, 1130 * do it now. 1131 */ 1132 if (nmp->nm_so && (nmp->nm_sotype != SOCK_DGRAM || 1133 (nmp->nm_flag & NFSMNT_DUMBTIMR) || 1134 nmp->nm_sent < nmp->nm_cwnd)) { 1135 splx(s); 1136 if (nmp->nm_soflags & PR_CONNREQUIRED) 1137 error = nfs_sndlock(nmp, rep); 1138 if (!error) { 1139 m = m_copym(rep->r_mreq, 0, M_COPYALL, M_WAIT); 1140 error = nfs_send(nmp->nm_so, nmp->nm_nam, m, rep, lwp); 1141 if (nmp->nm_soflags & PR_CONNREQUIRED) 1142 nfs_sndunlock(nmp); 1143 } 1144 if (!error && (rep->r_flags & R_MUSTRESEND) == 0) { 1145 nmp->nm_sent += NFS_CWNDSCALE; 1146 rep->r_flags |= R_SENT; 1147 } 1148 } else { 1149 splx(s); 1150 rep->r_rtt = -1; 1151 } 1152 1153 /* 1154 * Wait for the reply from our send or the timer's. 1155 */ 1156 if (!error || error == EPIPE) 1157 error = nfs_reply(rep, lwp); 1158 1159 /* 1160 * RPC done, unlink the request. 1161 */ 1162 s = splsoftnet(); 1163 TAILQ_REMOVE(&nfs_reqq, rep, r_chain); 1164 splx(s); 1165 1166 /* 1167 * Decrement the outstanding request count. 1168 */ 1169 if (rep->r_flags & R_SENT) { 1170 rep->r_flags &= ~R_SENT; /* paranoia */ 1171 nmp->nm_sent -= NFS_CWNDSCALE; 1172 } 1173 1174 if (rexmitp != NULL) { 1175 int rexmit; 1176 1177 if (nmp->nm_sotype != SOCK_DGRAM) 1178 rexmit = (rep->r_flags & R_REXMITTED) != 0; 1179 else 1180 rexmit = rep->r_rexmit; 1181 *rexmitp = rexmit; 1182 } 1183 1184 /* 1185 * If there was a successful reply and a tprintf msg. 1186 * tprintf a response. 1187 */ 1188 if (!error && (rep->r_flags & R_TPRINTFMSG)) 1189 nfs_msg(rep->r_lwp, nmp->nm_mountp->mnt_stat.f_mntfromname, 1190 "is alive again"); 1191 mrep = rep->r_mrep; 1192 md = rep->r_md; 1193 dpos = rep->r_dpos; 1194 if (error) 1195 goto nfsmout; 1196 1197 /* 1198 * break down the rpc header and check if ok 1199 */ 1200 nfsm_dissect(tl, u_int32_t *, 3 * NFSX_UNSIGNED); 1201 if (*tl++ == rpc_msgdenied) { 1202 if (*tl == rpc_mismatch) 1203 error = EOPNOTSUPP; 1204 else if ((nmp->nm_flag & NFSMNT_KERB) && *tl++ == rpc_autherr) { 1205 if (!failed_auth) { 1206 failed_auth++; 1207 mheadend->m_next = (struct mbuf *)0; 1208 m_freem(mrep); 1209 m_freem(rep->r_mreq); 1210 goto kerbauth; 1211 } else 1212 error = EAUTH; 1213 } else 1214 error = EACCES; 1215 m_freem(mrep); 1216 goto nfsmout; 1217 } 1218 1219 /* 1220 * Grab any Kerberos verifier, otherwise just throw it away. 1221 */ 1222 verf_type = fxdr_unsigned(int, *tl++); 1223 i = fxdr_unsigned(int32_t, *tl); 1224 if ((nmp->nm_flag & NFSMNT_KERB) && verf_type == RPCAUTH_KERB4) { 1225 error = nfs_savenickauth(nmp, cred, i, key, &md, &dpos, mrep); 1226 if (error) 1227 goto nfsmout; 1228 } else if (i > 0) 1229 nfsm_adv(nfsm_rndup(i)); 1230 nfsm_dissect(tl, u_int32_t *, NFSX_UNSIGNED); 1231 /* 0 == ok */ 1232 if (*tl == 0) { 1233 nfsm_dissect(tl, u_int32_t *, NFSX_UNSIGNED); 1234 if (*tl != 0) { 1235 error = fxdr_unsigned(int, *tl); 1236 switch (error) { 1237 case NFSERR_PERM: 1238 error = EPERM; 1239 break; 1240 1241 case NFSERR_NOENT: 1242 error = ENOENT; 1243 break; 1244 1245 case NFSERR_IO: 1246 error = EIO; 1247 break; 1248 1249 case NFSERR_NXIO: 1250 error = ENXIO; 1251 break; 1252 1253 case NFSERR_ACCES: 1254 error = EACCES; 1255 if (!retry_cred) 1256 break; 1257 m_freem(mrep); 1258 m_freem(rep->r_mreq); 1259 FREE(rep, M_NFSREQ); 1260 use_opencred = !use_opencred; 1261 if (mrest_backup == NULL) { 1262 /* m_copym failure */ 1263 KASSERT( 1264 kauth_cred_getrefcnt(acred) == 1); 1265 kauth_cred_free(acred); 1266 return ENOMEM; 1267 } 1268 mrest = mrest_backup; 1269 mrest_backup = NULL; 1270 cred = origcred; 1271 error = 0; 1272 retry_cred = false; 1273 goto tryagain_cred; 1274 1275 case NFSERR_EXIST: 1276 error = EEXIST; 1277 break; 1278 1279 case NFSERR_XDEV: 1280 error = EXDEV; 1281 break; 1282 1283 case NFSERR_NODEV: 1284 error = ENODEV; 1285 break; 1286 1287 case NFSERR_NOTDIR: 1288 error = ENOTDIR; 1289 break; 1290 1291 case NFSERR_ISDIR: 1292 error = EISDIR; 1293 break; 1294 1295 case NFSERR_INVAL: 1296 error = EINVAL; 1297 break; 1298 1299 case NFSERR_FBIG: 1300 error = EFBIG; 1301 break; 1302 1303 case NFSERR_NOSPC: 1304 error = ENOSPC; 1305 break; 1306 1307 case NFSERR_ROFS: 1308 error = EROFS; 1309 break; 1310 1311 case NFSERR_MLINK: 1312 error = EMLINK; 1313 break; 1314 1315 case NFSERR_TIMEDOUT: 1316 error = ETIMEDOUT; 1317 break; 1318 1319 case NFSERR_NAMETOL: 1320 error = ENAMETOOLONG; 1321 break; 1322 1323 case NFSERR_NOTEMPTY: 1324 error = ENOTEMPTY; 1325 break; 1326 1327 case NFSERR_DQUOT: 1328 error = EDQUOT; 1329 break; 1330 1331 case NFSERR_STALE: 1332 /* 1333 * If the File Handle was stale, invalidate the 1334 * lookup cache, just in case. 1335 */ 1336 error = ESTALE; 1337 cache_purge(NFSTOV(np)); 1338 break; 1339 1340 case NFSERR_REMOTE: 1341 error = EREMOTE; 1342 break; 1343 1344 case NFSERR_WFLUSH: 1345 case NFSERR_BADHANDLE: 1346 case NFSERR_NOT_SYNC: 1347 case NFSERR_BAD_COOKIE: 1348 error = EINVAL; 1349 break; 1350 1351 case NFSERR_NOTSUPP: 1352 error = ENOTSUP; 1353 break; 1354 1355 case NFSERR_TOOSMALL: 1356 case NFSERR_SERVERFAULT: 1357 case NFSERR_BADTYPE: 1358 error = EINVAL; 1359 break; 1360 1361 case NFSERR_TRYLATER: 1362 if ((nmp->nm_flag & NFSMNT_NFSV3) == 0) 1363 break; 1364 m_freem(mrep); 1365 error = 0; 1366 waituntil = time_second + trylater_delay; 1367 while (time_second < waituntil) { 1368 tsleep(&lbolt, PSOCK, "nfstrylater", 0); 1369 } 1370 trylater_delay *= NFS_TRYLATERDELMUL; 1371 if (trylater_delay > NFS_TRYLATERDELMAX) 1372 trylater_delay = NFS_TRYLATERDELMAX; 1373 /* 1374 * RFC1813: 1375 * The client should wait and then try 1376 * the request with a new RPC transaction ID. 1377 */ 1378 nfs_renewxid(rep); 1379 goto tryagain; 1380 1381 default: 1382 #ifdef DIAGNOSTIC 1383 printf("Invalid rpc error code %d\n", error); 1384 #endif 1385 error = EINVAL; 1386 break; 1387 } 1388 1389 if (nmp->nm_flag & NFSMNT_NFSV3) { 1390 *mrp = mrep; 1391 *mdp = md; 1392 *dposp = dpos; 1393 error |= NFSERR_RETERR; 1394 } else 1395 m_freem(mrep); 1396 goto nfsmout; 1397 } 1398 1399 /* 1400 * note which credential worked to minimize number of retries. 1401 */ 1402 if (use_opencred) 1403 np->n_flag |= NUSEOPENCRED; 1404 else 1405 np->n_flag &= ~NUSEOPENCRED; 1406 1407 *mrp = mrep; 1408 *mdp = md; 1409 *dposp = dpos; 1410 1411 KASSERT(error == 0); 1412 goto nfsmout; 1413 } 1414 m_freem(mrep); 1415 error = EPROTONOSUPPORT; 1416 nfsmout: 1417 KASSERT(kauth_cred_getrefcnt(acred) == 1); 1418 kauth_cred_free(acred); 1419 m_freem(rep->r_mreq); 1420 free((void *)rep, M_NFSREQ); 1421 m_freem(mrest_backup); 1422 return (error); 1423 } 1424 #endif /* NFS */ 1425 1426 /* 1427 * Generate the rpc reply header 1428 * siz arg. is used to decide if adding a cluster is worthwhile 1429 */ 1430 int 1431 nfs_rephead(siz, nd, slp, err, cache, frev, mrq, mbp, bposp) 1432 int siz; 1433 struct nfsrv_descript *nd; 1434 struct nfssvc_sock *slp; 1435 int err; 1436 int cache; 1437 u_quad_t *frev; 1438 struct mbuf **mrq; 1439 struct mbuf **mbp; 1440 char **bposp; 1441 { 1442 u_int32_t *tl; 1443 struct mbuf *mreq; 1444 char *bpos; 1445 struct mbuf *mb; 1446 1447 mreq = m_gethdr(M_WAIT, MT_DATA); 1448 MCLAIM(mreq, &nfs_mowner); 1449 mb = mreq; 1450 /* 1451 * If this is a big reply, use a cluster else 1452 * try and leave leading space for the lower level headers. 1453 */ 1454 siz += RPC_REPLYSIZ; 1455 if (siz >= max_datalen) { 1456 m_clget(mreq, M_WAIT); 1457 } else 1458 mreq->m_data += max_hdr; 1459 tl = mtod(mreq, u_int32_t *); 1460 mreq->m_len = 6 * NFSX_UNSIGNED; 1461 bpos = ((char *)tl) + mreq->m_len; 1462 *tl++ = txdr_unsigned(nd->nd_retxid); 1463 *tl++ = rpc_reply; 1464 if (err == ERPCMISMATCH || (err & NFSERR_AUTHERR)) { 1465 *tl++ = rpc_msgdenied; 1466 if (err & NFSERR_AUTHERR) { 1467 *tl++ = rpc_autherr; 1468 *tl = txdr_unsigned(err & ~NFSERR_AUTHERR); 1469 mreq->m_len -= NFSX_UNSIGNED; 1470 bpos -= NFSX_UNSIGNED; 1471 } else { 1472 *tl++ = rpc_mismatch; 1473 *tl++ = txdr_unsigned(RPC_VER2); 1474 *tl = txdr_unsigned(RPC_VER2); 1475 } 1476 } else { 1477 *tl++ = rpc_msgaccepted; 1478 1479 /* 1480 * For Kerberos authentication, we must send the nickname 1481 * verifier back, otherwise just RPCAUTH_NULL. 1482 */ 1483 if (nd->nd_flag & ND_KERBFULL) { 1484 struct nfsuid *nuidp; 1485 struct timeval ktvin, ktvout; 1486 1487 memset(&ktvout, 0, sizeof ktvout); /* XXX gcc */ 1488 1489 LIST_FOREACH(nuidp, 1490 NUIDHASH(slp, kauth_cred_geteuid(nd->nd_cr)), 1491 nu_hash) { 1492 if (kauth_cred_geteuid(nuidp->nu_cr) == 1493 kauth_cred_geteuid(nd->nd_cr) && 1494 (!nd->nd_nam2 || netaddr_match( 1495 NU_NETFAM(nuidp), &nuidp->nu_haddr, 1496 nd->nd_nam2))) 1497 break; 1498 } 1499 if (nuidp) { 1500 ktvin.tv_sec = 1501 txdr_unsigned(nuidp->nu_timestamp.tv_sec 1502 - 1); 1503 ktvin.tv_usec = 1504 txdr_unsigned(nuidp->nu_timestamp.tv_usec); 1505 1506 /* 1507 * Encrypt the timestamp in ecb mode using the 1508 * session key. 1509 */ 1510 #ifdef NFSKERB 1511 XXX 1512 #endif 1513 1514 *tl++ = rpc_auth_kerb; 1515 *tl++ = txdr_unsigned(3 * NFSX_UNSIGNED); 1516 *tl = ktvout.tv_sec; 1517 nfsm_build(tl, u_int32_t *, 3 * NFSX_UNSIGNED); 1518 *tl++ = ktvout.tv_usec; 1519 *tl++ = txdr_unsigned( 1520 kauth_cred_geteuid(nuidp->nu_cr)); 1521 } else { 1522 *tl++ = 0; 1523 *tl++ = 0; 1524 } 1525 } else { 1526 *tl++ = 0; 1527 *tl++ = 0; 1528 } 1529 switch (err) { 1530 case EPROGUNAVAIL: 1531 *tl = txdr_unsigned(RPC_PROGUNAVAIL); 1532 break; 1533 case EPROGMISMATCH: 1534 *tl = txdr_unsigned(RPC_PROGMISMATCH); 1535 nfsm_build(tl, u_int32_t *, 2 * NFSX_UNSIGNED); 1536 *tl++ = txdr_unsigned(2); 1537 *tl = txdr_unsigned(3); 1538 break; 1539 case EPROCUNAVAIL: 1540 *tl = txdr_unsigned(RPC_PROCUNAVAIL); 1541 break; 1542 case EBADRPC: 1543 *tl = txdr_unsigned(RPC_GARBAGE); 1544 break; 1545 default: 1546 *tl = 0; 1547 if (err != NFSERR_RETVOID) { 1548 nfsm_build(tl, u_int32_t *, NFSX_UNSIGNED); 1549 if (err) 1550 *tl = txdr_unsigned(nfsrv_errmap(nd, err)); 1551 else 1552 *tl = 0; 1553 } 1554 break; 1555 }; 1556 } 1557 1558 if (mrq != NULL) 1559 *mrq = mreq; 1560 *mbp = mb; 1561 *bposp = bpos; 1562 if (err != 0 && err != NFSERR_RETVOID) 1563 nfsstats.srvrpc_errs++; 1564 return (0); 1565 } 1566 1567 /* 1568 * Nfs timer routine 1569 * Scan the nfsreq list and retranmit any requests that have timed out 1570 * To avoid retransmission attempts on STREAM sockets (in the future) make 1571 * sure to set the r_retry field to 0 (implies nm_retry == 0). 1572 */ 1573 void 1574 nfs_timer(void *arg) 1575 { 1576 struct nfsreq *rep; 1577 struct mbuf *m; 1578 struct socket *so; 1579 struct nfsmount *nmp; 1580 int timeo; 1581 int s, error; 1582 #ifdef NFSSERVER 1583 struct timeval tv; 1584 struct nfssvc_sock *slp; 1585 u_quad_t cur_usec; 1586 #endif 1587 1588 s = splsoftnet(); 1589 TAILQ_FOREACH(rep, &nfs_reqq, r_chain) { 1590 nmp = rep->r_nmp; 1591 if (rep->r_mrep || (rep->r_flags & R_SOFTTERM)) 1592 continue; 1593 if (nfs_sigintr(nmp, rep, rep->r_lwp)) { 1594 rep->r_flags |= R_SOFTTERM; 1595 continue; 1596 } 1597 if (rep->r_rtt >= 0) { 1598 rep->r_rtt++; 1599 if (nmp->nm_flag & NFSMNT_DUMBTIMR) 1600 timeo = nmp->nm_timeo; 1601 else 1602 timeo = NFS_RTO(nmp, proct[rep->r_procnum]); 1603 if (nmp->nm_timeouts > 0) 1604 timeo *= nfs_backoff[nmp->nm_timeouts - 1]; 1605 if (rep->r_rtt <= timeo) 1606 continue; 1607 if (nmp->nm_timeouts < 1608 (sizeof(nfs_backoff) / sizeof(nfs_backoff[0]))) 1609 nmp->nm_timeouts++; 1610 } 1611 /* 1612 * Check for server not responding 1613 */ 1614 if ((rep->r_flags & R_TPRINTFMSG) == 0 && 1615 rep->r_rexmit > nmp->nm_deadthresh) { 1616 nfs_msg(rep->r_lwp, 1617 nmp->nm_mountp->mnt_stat.f_mntfromname, 1618 "not responding"); 1619 rep->r_flags |= R_TPRINTFMSG; 1620 } 1621 if (rep->r_rexmit >= rep->r_retry) { /* too many */ 1622 nfsstats.rpctimeouts++; 1623 rep->r_flags |= R_SOFTTERM; 1624 continue; 1625 } 1626 if (nmp->nm_sotype != SOCK_DGRAM) { 1627 if (++rep->r_rexmit > NFS_MAXREXMIT) 1628 rep->r_rexmit = NFS_MAXREXMIT; 1629 continue; 1630 } 1631 if ((so = nmp->nm_so) == NULL) 1632 continue; 1633 1634 /* 1635 * If there is enough space and the window allows.. 1636 * Resend it 1637 * Set r_rtt to -1 in case we fail to send it now. 1638 */ 1639 rep->r_rtt = -1; 1640 if (sbspace(&so->so_snd) >= rep->r_mreq->m_pkthdr.len && 1641 ((nmp->nm_flag & NFSMNT_DUMBTIMR) || 1642 (rep->r_flags & R_SENT) || 1643 nmp->nm_sent < nmp->nm_cwnd) && 1644 (m = m_copym(rep->r_mreq, 0, M_COPYALL, M_DONTWAIT))){ 1645 if (so->so_state & SS_ISCONNECTED) 1646 error = (*so->so_proto->pr_usrreq)(so, PRU_SEND, m, 1647 (struct mbuf *)0, (struct mbuf *)0, (struct lwp *)0); 1648 else 1649 error = (*so->so_proto->pr_usrreq)(so, PRU_SEND, m, 1650 nmp->nm_nam, (struct mbuf *)0, (struct lwp *)0); 1651 if (error) { 1652 if (NFSIGNORE_SOERROR(nmp->nm_soflags, error)) { 1653 #ifdef DEBUG 1654 printf("nfs_timer: ignoring error %d\n", 1655 error); 1656 #endif 1657 so->so_error = 0; 1658 } 1659 } else { 1660 /* 1661 * Iff first send, start timing 1662 * else turn timing off, backoff timer 1663 * and divide congestion window by 2. 1664 */ 1665 if (rep->r_flags & R_SENT) { 1666 rep->r_flags &= ~R_TIMING; 1667 if (++rep->r_rexmit > NFS_MAXREXMIT) 1668 rep->r_rexmit = NFS_MAXREXMIT; 1669 nmp->nm_cwnd >>= 1; 1670 if (nmp->nm_cwnd < NFS_CWNDSCALE) 1671 nmp->nm_cwnd = NFS_CWNDSCALE; 1672 nfsstats.rpcretries++; 1673 } else { 1674 rep->r_flags |= R_SENT; 1675 nmp->nm_sent += NFS_CWNDSCALE; 1676 } 1677 rep->r_rtt = 0; 1678 } 1679 } 1680 } 1681 1682 #ifdef NFSSERVER 1683 /* 1684 * Scan the write gathering queues for writes that need to be 1685 * completed now. 1686 */ 1687 getmicrotime(&tv); 1688 cur_usec = (u_quad_t)tv.tv_sec * 1000000 + (u_quad_t)tv.tv_usec; 1689 TAILQ_FOREACH(slp, &nfssvc_sockhead, ns_chain) { 1690 if (LIST_FIRST(&slp->ns_tq) && 1691 LIST_FIRST(&slp->ns_tq)->nd_time <= cur_usec) 1692 nfsrv_wakenfsd(slp); 1693 } 1694 #endif /* NFSSERVER */ 1695 splx(s); 1696 callout_schedule(&nfs_timer_ch, nfs_ticks); 1697 } 1698 1699 /* 1700 * Test for a termination condition pending on the process. 1701 * This is used for NFSMNT_INT mounts. 1702 */ 1703 int 1704 nfs_sigintr(nmp, rep, l) 1705 struct nfsmount *nmp; 1706 struct nfsreq *rep; 1707 struct lwp *l; 1708 { 1709 sigset_t ss; 1710 1711 if (rep && (rep->r_flags & R_SOFTTERM)) 1712 return (EINTR); 1713 if (!(nmp->nm_flag & NFSMNT_INT)) 1714 return (0); 1715 if (l) { 1716 sigpending1(l, &ss); 1717 #if 0 1718 sigminusset(&l->l_proc->p_sigctx.ps_sigignore, &ss); 1719 #endif 1720 if (sigismember(&ss, SIGINT) || sigismember(&ss, SIGTERM) || 1721 sigismember(&ss, SIGKILL) || sigismember(&ss, SIGHUP) || 1722 sigismember(&ss, SIGQUIT)) 1723 return (EINTR); 1724 } 1725 return (0); 1726 } 1727 1728 /* 1729 * Lock a socket against others. 1730 * Necessary for STREAM sockets to ensure you get an entire rpc request/reply 1731 * and also to avoid race conditions between the processes with nfs requests 1732 * in progress when a reconnect is necessary. 1733 */ 1734 static int 1735 nfs_sndlock(struct nfsmount *nmp, struct nfsreq *rep) 1736 { 1737 struct lwp *l; 1738 int timeo = 0; 1739 bool catch = false; 1740 int error = 0; 1741 1742 if (rep) { 1743 l = rep->r_lwp; 1744 if (rep->r_nmp->nm_flag & NFSMNT_INT) 1745 catch = true; 1746 } else 1747 l = NULL; 1748 mutex_enter(&nmp->nm_lock); 1749 while ((nmp->nm_iflag & NFSMNT_SNDLOCK) != 0) { 1750 if (rep && nfs_sigintr(rep->r_nmp, rep, l)) { 1751 error = EINTR; 1752 goto quit; 1753 } 1754 if (catch) { 1755 cv_timedwait_sig(&nmp->nm_sndcv, &nmp->nm_lock, timeo); 1756 } else { 1757 cv_timedwait(&nmp->nm_sndcv, &nmp->nm_lock, timeo); 1758 } 1759 if (catch) { 1760 catch = false; 1761 timeo = 2 * hz; 1762 } 1763 } 1764 nmp->nm_iflag |= NFSMNT_SNDLOCK; 1765 quit: 1766 mutex_exit(&nmp->nm_lock); 1767 return error; 1768 } 1769 1770 /* 1771 * Unlock the stream socket for others. 1772 */ 1773 static void 1774 nfs_sndunlock(struct nfsmount *nmp) 1775 { 1776 1777 mutex_enter(&nmp->nm_lock); 1778 if ((nmp->nm_iflag & NFSMNT_SNDLOCK) == 0) 1779 panic("nfs sndunlock"); 1780 nmp->nm_iflag &= ~NFSMNT_SNDLOCK; 1781 cv_signal(&nmp->nm_sndcv); 1782 mutex_exit(&nmp->nm_lock); 1783 } 1784 1785 static int 1786 nfs_rcvlock(struct nfsmount *nmp, struct nfsreq *rep) 1787 { 1788 int *flagp = &nmp->nm_iflag; 1789 int slptimeo = 0; 1790 bool catch; 1791 int error = 0; 1792 1793 KASSERT(nmp == rep->r_nmp); 1794 1795 catch = (nmp->nm_flag & NFSMNT_INT) != 0; 1796 mutex_enter(&nmp->nm_lock); 1797 while (/* CONSTCOND */ true) { 1798 if (*flagp & NFSMNT_DISMNT) { 1799 cv_signal(&nmp->nm_disconcv); 1800 error = EIO; 1801 break; 1802 } 1803 /* If our reply was received while we were sleeping, 1804 * then just return without taking the lock to avoid a 1805 * situation where a single iod could 'capture' the 1806 * receive lock. 1807 */ 1808 if (rep->r_mrep != NULL) { 1809 error = EALREADY; 1810 break; 1811 } 1812 if (nfs_sigintr(rep->r_nmp, rep, rep->r_lwp)) { 1813 error = EINTR; 1814 break; 1815 } 1816 if ((*flagp & NFSMNT_RCVLOCK) == 0) { 1817 *flagp |= NFSMNT_RCVLOCK; 1818 break; 1819 } 1820 if (catch) { 1821 cv_timedwait_sig(&nmp->nm_rcvcv, &nmp->nm_lock, 1822 slptimeo); 1823 } else { 1824 cv_timedwait(&nmp->nm_rcvcv, &nmp->nm_lock, 1825 slptimeo); 1826 } 1827 if (catch) { 1828 catch = false; 1829 slptimeo = 2 * hz; 1830 } 1831 } 1832 mutex_exit(&nmp->nm_lock); 1833 return error; 1834 } 1835 1836 /* 1837 * Unlock the stream socket for others. 1838 */ 1839 static void 1840 nfs_rcvunlock(struct nfsmount *nmp) 1841 { 1842 1843 mutex_enter(&nmp->nm_lock); 1844 if ((nmp->nm_iflag & NFSMNT_RCVLOCK) == 0) 1845 panic("nfs rcvunlock"); 1846 nmp->nm_iflag &= ~NFSMNT_RCVLOCK; 1847 cv_broadcast(&nmp->nm_rcvcv); 1848 mutex_exit(&nmp->nm_lock); 1849 } 1850 1851 /* 1852 * Parse an RPC request 1853 * - verify it 1854 * - allocate and fill in the cred. 1855 */ 1856 int 1857 nfs_getreq(nd, nfsd, has_header) 1858 struct nfsrv_descript *nd; 1859 struct nfsd *nfsd; 1860 int has_header; 1861 { 1862 int len, i; 1863 u_int32_t *tl; 1864 int32_t t1; 1865 struct uio uio; 1866 struct iovec iov; 1867 char *dpos, *cp2, *cp; 1868 u_int32_t nfsvers, auth_type; 1869 uid_t nickuid; 1870 int error = 0, ticklen; 1871 struct mbuf *mrep, *md; 1872 struct nfsuid *nuidp; 1873 struct timeval tvin, tvout; 1874 1875 memset(&tvout, 0, sizeof tvout); /* XXX gcc */ 1876 1877 KASSERT(nd->nd_cr == NULL); 1878 mrep = nd->nd_mrep; 1879 md = nd->nd_md; 1880 dpos = nd->nd_dpos; 1881 if (has_header) { 1882 nfsm_dissect(tl, u_int32_t *, 10 * NFSX_UNSIGNED); 1883 nd->nd_retxid = fxdr_unsigned(u_int32_t, *tl++); 1884 if (*tl++ != rpc_call) { 1885 m_freem(mrep); 1886 return (EBADRPC); 1887 } 1888 } else 1889 nfsm_dissect(tl, u_int32_t *, 8 * NFSX_UNSIGNED); 1890 nd->nd_repstat = 0; 1891 nd->nd_flag = 0; 1892 if (*tl++ != rpc_vers) { 1893 nd->nd_repstat = ERPCMISMATCH; 1894 nd->nd_procnum = NFSPROC_NOOP; 1895 return (0); 1896 } 1897 if (*tl != nfs_prog) { 1898 nd->nd_repstat = EPROGUNAVAIL; 1899 nd->nd_procnum = NFSPROC_NOOP; 1900 return (0); 1901 } 1902 tl++; 1903 nfsvers = fxdr_unsigned(u_int32_t, *tl++); 1904 if (nfsvers < NFS_VER2 || nfsvers > NFS_VER3) { 1905 nd->nd_repstat = EPROGMISMATCH; 1906 nd->nd_procnum = NFSPROC_NOOP; 1907 return (0); 1908 } 1909 if (nfsvers == NFS_VER3) 1910 nd->nd_flag = ND_NFSV3; 1911 nd->nd_procnum = fxdr_unsigned(u_int32_t, *tl++); 1912 if (nd->nd_procnum == NFSPROC_NULL) 1913 return (0); 1914 if (nd->nd_procnum > NFSPROC_COMMIT || 1915 (!nd->nd_flag && nd->nd_procnum > NFSV2PROC_STATFS)) { 1916 nd->nd_repstat = EPROCUNAVAIL; 1917 nd->nd_procnum = NFSPROC_NOOP; 1918 return (0); 1919 } 1920 if ((nd->nd_flag & ND_NFSV3) == 0) 1921 nd->nd_procnum = nfsv3_procid[nd->nd_procnum]; 1922 auth_type = *tl++; 1923 len = fxdr_unsigned(int, *tl++); 1924 if (len < 0 || len > RPCAUTH_MAXSIZ) { 1925 m_freem(mrep); 1926 return (EBADRPC); 1927 } 1928 1929 nd->nd_flag &= ~ND_KERBAUTH; 1930 /* 1931 * Handle auth_unix or auth_kerb. 1932 */ 1933 if (auth_type == rpc_auth_unix) { 1934 uid_t uid; 1935 gid_t gid, *grbuf; 1936 1937 nd->nd_cr = kauth_cred_alloc(); 1938 len = fxdr_unsigned(int, *++tl); 1939 if (len < 0 || len > NFS_MAXNAMLEN) { 1940 m_freem(mrep); 1941 error = EBADRPC; 1942 goto errout; 1943 } 1944 nfsm_adv(nfsm_rndup(len)); 1945 nfsm_dissect(tl, u_int32_t *, 3 * NFSX_UNSIGNED); 1946 1947 uid = fxdr_unsigned(uid_t, *tl++); 1948 gid = fxdr_unsigned(gid_t, *tl++); 1949 kauth_cred_setuid(nd->nd_cr, uid); 1950 kauth_cred_seteuid(nd->nd_cr, uid); 1951 kauth_cred_setsvuid(nd->nd_cr, uid); 1952 kauth_cred_setgid(nd->nd_cr, gid); 1953 kauth_cred_setegid(nd->nd_cr, gid); 1954 kauth_cred_setsvgid(nd->nd_cr, gid); 1955 1956 len = fxdr_unsigned(int, *tl); 1957 if (len < 0 || len > RPCAUTH_UNIXGIDS) { 1958 m_freem(mrep); 1959 error = EBADRPC; 1960 goto errout; 1961 } 1962 nfsm_dissect(tl, u_int32_t *, (len + 2) * NFSX_UNSIGNED); 1963 1964 grbuf = malloc(len * sizeof(gid_t), M_TEMP, M_WAITOK); 1965 for (i = 0; i < len; i++) { 1966 if (i < NGROUPS) /* XXX elad */ 1967 grbuf[i] = fxdr_unsigned(gid_t, *tl++); 1968 else 1969 tl++; 1970 } 1971 kauth_cred_setgroups(nd->nd_cr, grbuf, min(len, NGROUPS), -1); 1972 free(grbuf, M_TEMP); 1973 1974 len = fxdr_unsigned(int, *++tl); 1975 if (len < 0 || len > RPCAUTH_MAXSIZ) { 1976 m_freem(mrep); 1977 error = EBADRPC; 1978 goto errout; 1979 } 1980 if (len > 0) 1981 nfsm_adv(nfsm_rndup(len)); 1982 } else if (auth_type == rpc_auth_kerb) { 1983 switch (fxdr_unsigned(int, *tl++)) { 1984 case RPCAKN_FULLNAME: 1985 ticklen = fxdr_unsigned(int, *tl); 1986 *((u_int32_t *)nfsd->nfsd_authstr) = *tl; 1987 uio.uio_resid = nfsm_rndup(ticklen) + NFSX_UNSIGNED; 1988 nfsd->nfsd_authlen = uio.uio_resid + NFSX_UNSIGNED; 1989 if (uio.uio_resid > (len - 2 * NFSX_UNSIGNED)) { 1990 m_freem(mrep); 1991 error = EBADRPC; 1992 goto errout; 1993 } 1994 uio.uio_offset = 0; 1995 uio.uio_iov = &iov; 1996 uio.uio_iovcnt = 1; 1997 UIO_SETUP_SYSSPACE(&uio); 1998 iov.iov_base = (void *)&nfsd->nfsd_authstr[4]; 1999 iov.iov_len = RPCAUTH_MAXSIZ - 4; 2000 nfsm_mtouio(&uio, uio.uio_resid); 2001 nfsm_dissect(tl, u_int32_t *, 2 * NFSX_UNSIGNED); 2002 if (*tl++ != rpc_auth_kerb || 2003 fxdr_unsigned(int, *tl) != 4 * NFSX_UNSIGNED) { 2004 printf("Bad kerb verifier\n"); 2005 nd->nd_repstat = (NFSERR_AUTHERR|AUTH_BADVERF); 2006 nd->nd_procnum = NFSPROC_NOOP; 2007 return (0); 2008 } 2009 nfsm_dissect(cp, void *, 4 * NFSX_UNSIGNED); 2010 tl = (u_int32_t *)cp; 2011 if (fxdr_unsigned(int, *tl) != RPCAKN_FULLNAME) { 2012 printf("Not fullname kerb verifier\n"); 2013 nd->nd_repstat = (NFSERR_AUTHERR|AUTH_BADVERF); 2014 nd->nd_procnum = NFSPROC_NOOP; 2015 return (0); 2016 } 2017 cp += NFSX_UNSIGNED; 2018 memcpy(nfsd->nfsd_verfstr, cp, 3 * NFSX_UNSIGNED); 2019 nfsd->nfsd_verflen = 3 * NFSX_UNSIGNED; 2020 nd->nd_flag |= ND_KERBFULL; 2021 nfsd->nfsd_flag |= NFSD_NEEDAUTH; 2022 break; 2023 case RPCAKN_NICKNAME: 2024 if (len != 2 * NFSX_UNSIGNED) { 2025 printf("Kerb nickname short\n"); 2026 nd->nd_repstat = (NFSERR_AUTHERR|AUTH_BADCRED); 2027 nd->nd_procnum = NFSPROC_NOOP; 2028 return (0); 2029 } 2030 nickuid = fxdr_unsigned(uid_t, *tl); 2031 nfsm_dissect(tl, u_int32_t *, 2 * NFSX_UNSIGNED); 2032 if (*tl++ != rpc_auth_kerb || 2033 fxdr_unsigned(int, *tl) != 3 * NFSX_UNSIGNED) { 2034 printf("Kerb nick verifier bad\n"); 2035 nd->nd_repstat = (NFSERR_AUTHERR|AUTH_BADVERF); 2036 nd->nd_procnum = NFSPROC_NOOP; 2037 return (0); 2038 } 2039 nfsm_dissect(tl, u_int32_t *, 3 * NFSX_UNSIGNED); 2040 tvin.tv_sec = *tl++; 2041 tvin.tv_usec = *tl; 2042 2043 LIST_FOREACH(nuidp, NUIDHASH(nfsd->nfsd_slp, nickuid), 2044 nu_hash) { 2045 if (kauth_cred_geteuid(nuidp->nu_cr) == nickuid && 2046 (!nd->nd_nam2 || 2047 netaddr_match(NU_NETFAM(nuidp), 2048 &nuidp->nu_haddr, nd->nd_nam2))) 2049 break; 2050 } 2051 if (!nuidp) { 2052 nd->nd_repstat = 2053 (NFSERR_AUTHERR|AUTH_REJECTCRED); 2054 nd->nd_procnum = NFSPROC_NOOP; 2055 return (0); 2056 } 2057 2058 /* 2059 * Now, decrypt the timestamp using the session key 2060 * and validate it. 2061 */ 2062 #ifdef NFSKERB 2063 XXX 2064 #endif 2065 2066 tvout.tv_sec = fxdr_unsigned(long, tvout.tv_sec); 2067 tvout.tv_usec = fxdr_unsigned(long, tvout.tv_usec); 2068 if (nuidp->nu_expire < time_second || 2069 nuidp->nu_timestamp.tv_sec > tvout.tv_sec || 2070 (nuidp->nu_timestamp.tv_sec == tvout.tv_sec && 2071 nuidp->nu_timestamp.tv_usec > tvout.tv_usec)) { 2072 nuidp->nu_expire = 0; 2073 nd->nd_repstat = 2074 (NFSERR_AUTHERR|AUTH_REJECTVERF); 2075 nd->nd_procnum = NFSPROC_NOOP; 2076 return (0); 2077 } 2078 kauth_cred_hold(nuidp->nu_cr); 2079 nd->nd_cr = nuidp->nu_cr; 2080 nd->nd_flag |= ND_KERBNICK; 2081 } 2082 } else { 2083 nd->nd_repstat = (NFSERR_AUTHERR | AUTH_REJECTCRED); 2084 nd->nd_procnum = NFSPROC_NOOP; 2085 return (0); 2086 } 2087 2088 nd->nd_md = md; 2089 nd->nd_dpos = dpos; 2090 KASSERT((nd->nd_cr == NULL && (nfsd->nfsd_flag & NFSD_NEEDAUTH) != 0) 2091 || (nd->nd_cr != NULL && (nfsd->nfsd_flag & NFSD_NEEDAUTH) == 0)); 2092 return (0); 2093 nfsmout: 2094 errout: 2095 KASSERT(error != 0); 2096 if (nd->nd_cr != NULL) { 2097 kauth_cred_free(nd->nd_cr); 2098 nd->nd_cr = NULL; 2099 } 2100 return (error); 2101 } 2102 2103 int 2104 nfs_msg(l, server, msg) 2105 struct lwp *l; 2106 const char *server, *msg; 2107 { 2108 tpr_t tpr; 2109 2110 if (l) 2111 tpr = tprintf_open(l->l_proc); 2112 else 2113 tpr = NULL; 2114 tprintf(tpr, "nfs server %s: %s\n", server, msg); 2115 tprintf_close(tpr); 2116 return (0); 2117 } 2118 2119 #ifdef NFSSERVER 2120 int (*nfsrv3_procs[NFS_NPROCS]) __P((struct nfsrv_descript *, 2121 struct nfssvc_sock *, struct lwp *, 2122 struct mbuf **)) = { 2123 nfsrv_null, 2124 nfsrv_getattr, 2125 nfsrv_setattr, 2126 nfsrv_lookup, 2127 nfsrv3_access, 2128 nfsrv_readlink, 2129 nfsrv_read, 2130 nfsrv_write, 2131 nfsrv_create, 2132 nfsrv_mkdir, 2133 nfsrv_symlink, 2134 nfsrv_mknod, 2135 nfsrv_remove, 2136 nfsrv_rmdir, 2137 nfsrv_rename, 2138 nfsrv_link, 2139 nfsrv_readdir, 2140 nfsrv_readdirplus, 2141 nfsrv_statfs, 2142 nfsrv_fsinfo, 2143 nfsrv_pathconf, 2144 nfsrv_commit, 2145 nfsrv_noop 2146 }; 2147 2148 /* 2149 * Socket upcall routine for the nfsd sockets. 2150 * The void *arg is a pointer to the "struct nfssvc_sock". 2151 * Essentially do as much as possible non-blocking, else punt and it will 2152 * be called with M_WAIT from an nfsd. 2153 */ 2154 void 2155 nfsrv_rcv(so, arg, waitflag) 2156 struct socket *so; 2157 void *arg; 2158 int waitflag; 2159 { 2160 struct nfssvc_sock *slp = (struct nfssvc_sock *)arg; 2161 struct mbuf *m; 2162 struct mbuf *mp, *nam; 2163 struct uio auio; 2164 int flags, error; 2165 int setflags = 0; 2166 2167 error = nfsdsock_lock(slp, (waitflag != M_DONTWAIT)); 2168 if (error) { 2169 setflags |= SLP_NEEDQ; 2170 goto dorecs_unlocked; 2171 } 2172 2173 KASSERT(so == slp->ns_so); 2174 #define NFS_TEST_HEAVY 2175 #ifdef NFS_TEST_HEAVY 2176 /* 2177 * Define this to test for nfsds handling this under heavy load. 2178 * 2179 * XXX it isn't safe to call so_receive from so_upcall context. 2180 */ 2181 if (waitflag == M_DONTWAIT) { 2182 setflags |= SLP_NEEDQ; 2183 goto dorecs; 2184 } 2185 #endif 2186 simple_lock(&slp->ns_lock); 2187 slp->ns_flag &= ~SLP_NEEDQ; 2188 simple_unlock(&slp->ns_lock); 2189 if (so->so_type == SOCK_STREAM) { 2190 #ifndef NFS_TEST_HEAVY 2191 /* 2192 * If there are already records on the queue, defer soreceive() 2193 * to an nfsd so that there is feedback to the TCP layer that 2194 * the nfs servers are heavily loaded. 2195 */ 2196 if (slp->ns_rec && waitflag == M_DONTWAIT) { 2197 setflags |= SLP_NEEDQ; 2198 goto dorecs; 2199 } 2200 #endif 2201 2202 /* 2203 * Do soreceive(). 2204 */ 2205 auio.uio_resid = 1000000000; 2206 /* not need to setup uio_vmspace */ 2207 flags = MSG_DONTWAIT; 2208 error = (*so->so_receive)(so, &nam, &auio, &mp, NULL, &flags); 2209 if (error || mp == NULL) { 2210 if (error == EWOULDBLOCK) 2211 setflags |= SLP_NEEDQ; 2212 else 2213 setflags |= SLP_DISCONN; 2214 goto dorecs; 2215 } 2216 m = mp; 2217 m_claimm(m, &nfs_mowner); 2218 if (slp->ns_rawend) { 2219 slp->ns_rawend->m_next = m; 2220 slp->ns_cc += 1000000000 - auio.uio_resid; 2221 } else { 2222 slp->ns_raw = m; 2223 slp->ns_cc = 1000000000 - auio.uio_resid; 2224 } 2225 while (m->m_next) 2226 m = m->m_next; 2227 slp->ns_rawend = m; 2228 2229 /* 2230 * Now try and parse record(s) out of the raw stream data. 2231 */ 2232 error = nfsrv_getstream(slp, waitflag); 2233 if (error) { 2234 if (error == EPERM) 2235 setflags |= SLP_DISCONN; 2236 else 2237 setflags |= SLP_NEEDQ; 2238 } 2239 } else { 2240 do { 2241 auio.uio_resid = 1000000000; 2242 /* not need to setup uio_vmspace */ 2243 flags = MSG_DONTWAIT; 2244 error = (*so->so_receive)(so, &nam, &auio, &mp, NULL, 2245 &flags); 2246 if (mp) { 2247 if (nam) { 2248 m = nam; 2249 m->m_next = mp; 2250 } else 2251 m = mp; 2252 m_claimm(m, &nfs_mowner); 2253 if (slp->ns_recend) 2254 slp->ns_recend->m_nextpkt = m; 2255 else 2256 slp->ns_rec = m; 2257 slp->ns_recend = m; 2258 m->m_nextpkt = (struct mbuf *)0; 2259 } 2260 if (error) { 2261 if ((so->so_proto->pr_flags & PR_CONNREQUIRED) 2262 && error != EWOULDBLOCK) { 2263 setflags |= SLP_DISCONN; 2264 goto dorecs; 2265 } 2266 } 2267 } while (mp); 2268 } 2269 dorecs: 2270 nfsdsock_unlock(slp); 2271 2272 dorecs_unlocked: 2273 /* 2274 * Now try and process the request records, non-blocking. 2275 */ 2276 if (setflags) { 2277 simple_lock(&slp->ns_lock); 2278 slp->ns_flag |= setflags; 2279 simple_unlock(&slp->ns_lock); 2280 } 2281 if (waitflag == M_DONTWAIT && 2282 (slp->ns_rec || (slp->ns_flag & (SLP_DISCONN | SLP_NEEDQ)) != 0)) { 2283 nfsrv_wakenfsd(slp); 2284 } 2285 } 2286 2287 int 2288 nfsdsock_lock(struct nfssvc_sock *slp, bool waitok) 2289 { 2290 2291 simple_lock(&slp->ns_lock); 2292 while ((~slp->ns_flag & (SLP_BUSY|SLP_VALID)) == 0) { 2293 if (!waitok) { 2294 simple_unlock(&slp->ns_lock); 2295 return EWOULDBLOCK; 2296 } 2297 slp->ns_flag |= SLP_WANT; 2298 ltsleep(&slp->ns_flag, PSOCK, "nslock", 0, &slp->ns_lock); 2299 } 2300 if ((slp->ns_flag & SLP_VALID) == 0) { 2301 simple_unlock(&slp->ns_lock); 2302 return EINVAL; 2303 } 2304 slp->ns_flag |= SLP_BUSY; 2305 simple_unlock(&slp->ns_lock); 2306 2307 return 0; 2308 } 2309 2310 void 2311 nfsdsock_unlock(struct nfssvc_sock *slp) 2312 { 2313 2314 KASSERT((slp->ns_flag & SLP_BUSY) != 0); 2315 2316 simple_lock(&slp->ns_lock); 2317 if ((slp->ns_flag & SLP_WANT) != 0) { 2318 wakeup(&slp->ns_flag); 2319 } 2320 slp->ns_flag &= ~(SLP_BUSY|SLP_WANT); 2321 simple_unlock(&slp->ns_lock); 2322 } 2323 2324 int 2325 nfsdsock_drain(struct nfssvc_sock *slp) 2326 { 2327 int error = 0; 2328 2329 simple_lock(&slp->ns_lock); 2330 if ((slp->ns_flag & SLP_VALID) == 0) { 2331 error = EINVAL; 2332 goto done; 2333 } 2334 slp->ns_flag &= ~SLP_VALID; 2335 while ((slp->ns_flag & SLP_BUSY) != 0) { 2336 slp->ns_flag |= SLP_WANT; 2337 ltsleep(&slp->ns_flag, PSOCK, "nsdrain", 0, &slp->ns_lock); 2338 } 2339 done: 2340 simple_unlock(&slp->ns_lock); 2341 2342 return error; 2343 } 2344 2345 /* 2346 * Try and extract an RPC request from the mbuf data list received on a 2347 * stream socket. The "waitflag" argument indicates whether or not it 2348 * can sleep. 2349 */ 2350 int 2351 nfsrv_getstream(slp, waitflag) 2352 struct nfssvc_sock *slp; 2353 int waitflag; 2354 { 2355 struct mbuf *m, **mpp; 2356 struct mbuf *recm; 2357 u_int32_t recmark; 2358 int error = 0; 2359 2360 for (;;) { 2361 if (slp->ns_reclen == 0) { 2362 if (slp->ns_cc < NFSX_UNSIGNED) { 2363 break; 2364 } 2365 m = slp->ns_raw; 2366 m_copydata(m, 0, NFSX_UNSIGNED, (void *)&recmark); 2367 m_adj(m, NFSX_UNSIGNED); 2368 slp->ns_cc -= NFSX_UNSIGNED; 2369 recmark = ntohl(recmark); 2370 slp->ns_reclen = recmark & ~0x80000000; 2371 if (recmark & 0x80000000) 2372 slp->ns_flag |= SLP_LASTFRAG; 2373 else 2374 slp->ns_flag &= ~SLP_LASTFRAG; 2375 if (slp->ns_reclen > NFS_MAXPACKET) { 2376 error = EPERM; 2377 break; 2378 } 2379 } 2380 2381 /* 2382 * Now get the record part. 2383 * 2384 * Note that slp->ns_reclen may be 0. Linux sometimes 2385 * generates 0-length records. 2386 */ 2387 if (slp->ns_cc == slp->ns_reclen) { 2388 recm = slp->ns_raw; 2389 slp->ns_raw = slp->ns_rawend = (struct mbuf *)0; 2390 slp->ns_cc = slp->ns_reclen = 0; 2391 } else if (slp->ns_cc > slp->ns_reclen) { 2392 recm = slp->ns_raw; 2393 m = m_split(recm, slp->ns_reclen, waitflag); 2394 if (m == NULL) { 2395 error = EWOULDBLOCK; 2396 break; 2397 } 2398 m_claimm(recm, &nfs_mowner); 2399 slp->ns_raw = m; 2400 if (m->m_next == NULL) 2401 slp->ns_rawend = m; 2402 slp->ns_cc -= slp->ns_reclen; 2403 slp->ns_reclen = 0; 2404 } else { 2405 break; 2406 } 2407 2408 /* 2409 * Accumulate the fragments into a record. 2410 */ 2411 mpp = &slp->ns_frag; 2412 while (*mpp) 2413 mpp = &((*mpp)->m_next); 2414 *mpp = recm; 2415 if (slp->ns_flag & SLP_LASTFRAG) { 2416 if (slp->ns_recend) 2417 slp->ns_recend->m_nextpkt = slp->ns_frag; 2418 else 2419 slp->ns_rec = slp->ns_frag; 2420 slp->ns_recend = slp->ns_frag; 2421 slp->ns_frag = (struct mbuf *)0; 2422 } 2423 } 2424 2425 return error; 2426 } 2427 2428 /* 2429 * Parse an RPC header. 2430 */ 2431 int 2432 nfsrv_dorec(slp, nfsd, ndp) 2433 struct nfssvc_sock *slp; 2434 struct nfsd *nfsd; 2435 struct nfsrv_descript **ndp; 2436 { 2437 struct mbuf *m, *nam; 2438 struct nfsrv_descript *nd; 2439 int error; 2440 2441 *ndp = NULL; 2442 2443 if (nfsdsock_lock(slp, true)) { 2444 return ENOBUFS; 2445 } 2446 m = slp->ns_rec; 2447 if (m == NULL) { 2448 nfsdsock_unlock(slp); 2449 return ENOBUFS; 2450 } 2451 slp->ns_rec = m->m_nextpkt; 2452 if (slp->ns_rec) 2453 m->m_nextpkt = NULL; 2454 else 2455 slp->ns_recend = NULL; 2456 nfsdsock_unlock(slp); 2457 2458 if (m->m_type == MT_SONAME) { 2459 nam = m; 2460 m = m->m_next; 2461 nam->m_next = NULL; 2462 } else 2463 nam = NULL; 2464 nd = nfsdreq_alloc(); 2465 nd->nd_md = nd->nd_mrep = m; 2466 nd->nd_nam2 = nam; 2467 nd->nd_dpos = mtod(m, void *); 2468 error = nfs_getreq(nd, nfsd, true); 2469 if (error) { 2470 m_freem(nam); 2471 nfsdreq_free(nd); 2472 return (error); 2473 } 2474 *ndp = nd; 2475 nfsd->nfsd_nd = nd; 2476 return (0); 2477 } 2478 2479 /* 2480 * Search for a sleeping nfsd and wake it up. 2481 * SIDE EFFECT: If none found, set NFSD_CHECKSLP flag, so that one of the 2482 * running nfsds will go look for the work in the nfssvc_sock list. 2483 */ 2484 void 2485 nfsrv_wakenfsd(slp) 2486 struct nfssvc_sock *slp; 2487 { 2488 struct nfsd *nd; 2489 2490 if ((slp->ns_flag & SLP_VALID) == 0) 2491 return; 2492 simple_lock(&nfsd_slock); 2493 if (slp->ns_flag & SLP_DOREC) { 2494 simple_unlock(&nfsd_slock); 2495 return; 2496 } 2497 nd = SLIST_FIRST(&nfsd_idle_head); 2498 if (nd) { 2499 SLIST_REMOVE_HEAD(&nfsd_idle_head, nfsd_idle); 2500 simple_unlock(&nfsd_slock); 2501 2502 if (nd->nfsd_slp) 2503 panic("nfsd wakeup"); 2504 slp->ns_sref++; 2505 nd->nfsd_slp = slp; 2506 wakeup(nd); 2507 return; 2508 } 2509 slp->ns_flag |= SLP_DOREC; 2510 nfsd_head_flag |= NFSD_CHECKSLP; 2511 TAILQ_INSERT_TAIL(&nfssvc_sockpending, slp, ns_pending); 2512 simple_unlock(&nfsd_slock); 2513 } 2514 2515 int 2516 nfsdsock_sendreply(struct nfssvc_sock *slp, struct nfsrv_descript *nd) 2517 { 2518 int error; 2519 2520 if (nd->nd_mrep != NULL) { 2521 m_freem(nd->nd_mrep); 2522 nd->nd_mrep = NULL; 2523 } 2524 2525 simple_lock(&slp->ns_lock); 2526 if ((slp->ns_flag & SLP_SENDING) != 0) { 2527 SIMPLEQ_INSERT_TAIL(&slp->ns_sendq, nd, nd_sendq); 2528 simple_unlock(&slp->ns_lock); 2529 return 0; 2530 } 2531 KASSERT(SIMPLEQ_EMPTY(&slp->ns_sendq)); 2532 slp->ns_flag |= SLP_SENDING; 2533 simple_unlock(&slp->ns_lock); 2534 2535 again: 2536 error = nfs_send(slp->ns_so, nd->nd_nam2, nd->nd_mreq, NULL, curlwp); 2537 if (nd->nd_nam2) { 2538 m_free(nd->nd_nam2); 2539 } 2540 nfsdreq_free(nd); 2541 2542 simple_lock(&slp->ns_lock); 2543 KASSERT((slp->ns_flag & SLP_SENDING) != 0); 2544 nd = SIMPLEQ_FIRST(&slp->ns_sendq); 2545 if (nd != NULL) { 2546 SIMPLEQ_REMOVE_HEAD(&slp->ns_sendq, nd_sendq); 2547 simple_unlock(&slp->ns_lock); 2548 goto again; 2549 } 2550 slp->ns_flag &= ~SLP_SENDING; 2551 simple_unlock(&slp->ns_lock); 2552 2553 return error; 2554 } 2555 #endif /* NFSSERVER */ 2556 2557 #if defined(NFSSERVER) || (defined(NFS) && !defined(NFS_V2_ONLY)) 2558 static struct pool nfs_srvdesc_pool; 2559 2560 void 2561 nfsdreq_init(void) 2562 { 2563 2564 pool_init(&nfs_srvdesc_pool, sizeof(struct nfsrv_descript), 2565 0, 0, 0, "nfsrvdescpl", &pool_allocator_nointr, IPL_NONE); 2566 } 2567 2568 struct nfsrv_descript * 2569 nfsdreq_alloc(void) 2570 { 2571 struct nfsrv_descript *nd; 2572 2573 nd = pool_get(&nfs_srvdesc_pool, PR_WAITOK); 2574 nd->nd_cr = NULL; 2575 return nd; 2576 } 2577 2578 void 2579 nfsdreq_free(struct nfsrv_descript *nd) 2580 { 2581 kauth_cred_t cr; 2582 2583 cr = nd->nd_cr; 2584 if (cr != NULL) { 2585 kauth_cred_free(cr); 2586 } 2587 pool_put(&nfs_srvdesc_pool, nd); 2588 } 2589 #endif /* defined(NFSSERVER) || (defined(NFS) && !defined(NFS_V2_ONLY)) */ 2590
Indexes created Sun Sep 21 16:09:51 GMT 2025