sys/fs/nfsserver/nfs_nfsdsubs.c

   1 /*-
   2  * Copyright (c) 1989, 1993
   3  *      The Regents of the University of California.  All rights reserved.
   4  *
   5  * This code is derived from software contributed to Berkeley by
   6  * Rick Macklem at The University of Guelph.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  * 1. Redistributions of source code must retain the above copyright
  12  *    notice, this list of conditions and the following disclaimer.
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  * 4. Neither the name of the University nor the names of its contributors
  17  *    may be used to endorse or promote products derived from this software
  18  *    without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  30  * SUCH DAMAGE.
  31  *
  32  */
  33
  34 #include <sys/cdefs.h>
  35 __FBSDID("$FreeBSD$");
  36
  37 #ifndef APPLEKEXT
  38 /*
  39  * These functions support the macros and help fiddle mbuf chains for
  40  * the nfs op functions. They do things like create the rpc header and
  41  * copy data between mbuf chains and uio lists.
  42  */
  43 #include <fs/nfs/nfsport.h>
  44
  45 extern u_int32_t newnfs_true, newnfs_false;
  46 extern int nfs_pubfhset;
  47 extern struct nfsclienthashhead nfsclienthash[NFSCLIENTHASHSIZE];
  48 extern struct nfslockhashhead nfslockhash[NFSLOCKHASHSIZE];
  49 extern struct nfssessionhash nfssessionhash[NFSSESSIONHASHSIZE];
  50 extern int nfsrv_useacl;
  51 extern uid_t nfsrv_defaultuid;
  52 extern gid_t nfsrv_defaultgid;
  53
  54 char nfs_v2pubfh[NFSX_V2FH];
  55 static nfstype newnfsv2_type[9] = { NFNON, NFREG, NFDIR, NFBLK, NFCHR, NFLNK,
  56     NFNON, NFCHR, NFNON };
  57 extern nfstype nfsv34_type[9];
  58 #endif  /* !APPLEKEXT */
  59
  60 static u_int32_t nfsrv_isannfserr(u_int32_t);
  61
  62 SYSCTL_DECL(_vfs_nfsd);
  63
  64 static int      enable_checkutf8 = 1;
  65 SYSCTL_INT(_vfs_nfsd, OID_AUTO, enable_checkutf8, CTLFLAG_RW,
  66     &enable_checkutf8, 0,
  67     "Enable the NFSv4 check for the UTF8 compliant name required by rfc3530");
  68
  69 static int    enable_nobodycheck = 1;
  70 SYSCTL_INT(_vfs_nfsd, OID_AUTO, enable_nobodycheck, CTLFLAG_RW,
  71     &enable_nobodycheck, 0,
  72     "Enable the NFSv4 check when setting user nobody as owner");
  73
  74 static int    enable_nogroupcheck = 1;
  75 SYSCTL_INT(_vfs_nfsd, OID_AUTO, enable_nogroupcheck, CTLFLAG_RW,
  76     &enable_nogroupcheck, 0,
  77     "Enable the NFSv4 check when setting group nogroup as owner");
  78
  79 static char nfsrv_hexdigit(char, int *);
  80
  81 /*
  82  * Maps errno values to nfs error numbers.
  83  * Use NFSERR_IO as the catch all for ones not specifically defined in
  84  * RFC 1094. (It now includes the errors added for NFSv3.)
  85  */
  86 static u_char nfsrv_v2errmap[NFSERR_REMOTE] = {
  87   NFSERR_PERM,  NFSERR_NOENT,   NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  88   NFSERR_NXIO,  NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  89   NFSERR_IO,    NFSERR_IO,      NFSERR_ACCES,   NFSERR_IO,      NFSERR_IO,
  90   NFSERR_IO,    NFSERR_EXIST,   NFSERR_XDEV,    NFSERR_NODEV,   NFSERR_NOTDIR,
  91   NFSERR_ISDIR, NFSERR_INVAL,   NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  92   NFSERR_IO,    NFSERR_FBIG,    NFSERR_NOSPC,   NFSERR_IO,      NFSERR_ROFS,
  93   NFSERR_MLINK, NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  94   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  95   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  96   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  97   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  98   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  99   NFSERR_IO,    NFSERR_IO,      NFSERR_NAMETOL, NFSERR_IO,      NFSERR_IO,
 100   NFSERR_NOTEMPTY, NFSERR_IO,   NFSERR_IO,      NFSERR_DQUOT,   NFSERR_STALE,
 101   NFSERR_REMOTE,
 102 };
 103
 104 /*
 105  * Maps errno values to nfs error numbers.
 106  * Although it is not obvious whether or not NFS clients really care if
 107  * a returned error value is in the specified list for the procedure, the
 108  * safest thing to do is filter them appropriately. For Version 2, the
 109  * X/Open XNFS document is the only specification that defines error values
 110  * for each RPC (The RFC simply lists all possible error values for all RPCs),
 111  * so I have decided to not do this for Version 2.
 112  * The first entry is the default error return and the rest are the valid
 113  * errors for that RPC in increasing numeric order.
 114  */
 115 static short nfsv3err_null[] = {
 116         0,
 117         0,
 118 };
 119
 120 static short nfsv3err_getattr[] = {
 121         NFSERR_IO,
 122         NFSERR_IO,
 123         NFSERR_STALE,
 124         NFSERR_BADHANDLE,
 125         NFSERR_SERVERFAULT,
 126         NFSERR_DELAY,
 127         0,
 128 };
 129
 130 static short nfsv3err_setattr[] = {
 131         NFSERR_IO,
 132         NFSERR_ACCES,
 133         NFSERR_PERM,
 134         NFSERR_IO,
 135         NFSERR_INVAL,
 136         NFSERR_NOSPC,
 137         NFSERR_ROFS,
 138         NFSERR_DQUOT,
 139         NFSERR_STALE,
 140         NFSERR_BADHANDLE,
 141         NFSERR_NOT_SYNC,
 142         NFSERR_SERVERFAULT,
 143         NFSERR_DELAY,
 144         0,
 145 };
 146
 147 static short nfsv3err_lookup[] = {
 148         NFSERR_IO,
 149         NFSERR_NOENT,
 150         NFSERR_ACCES,
 151         NFSERR_NAMETOL,
 152         NFSERR_IO,
 153         NFSERR_NOTDIR,
 154         NFSERR_STALE,
 155         NFSERR_BADHANDLE,
 156         NFSERR_SERVERFAULT,
 157         NFSERR_DELAY,
 158         0,
 159 };
 160
 161 static short nfsv3err_access[] = {
 162         NFSERR_IO,
 163         NFSERR_IO,
 164         NFSERR_STALE,
 165         NFSERR_BADHANDLE,
 166         NFSERR_SERVERFAULT,
 167         NFSERR_DELAY,
 168         0,
 169 };
 170
 171 static short nfsv3err_readlink[] = {
 172         NFSERR_IO,
 173         NFSERR_IO,
 174         NFSERR_ACCES,
 175         NFSERR_INVAL,
 176         NFSERR_STALE,
 177         NFSERR_BADHANDLE,
 178         NFSERR_NOTSUPP,
 179         NFSERR_SERVERFAULT,
 180         NFSERR_DELAY,
 181         0,
 182 };
 183
 184 static short nfsv3err_read[] = {
 185         NFSERR_IO,
 186         NFSERR_IO,
 187         NFSERR_NXIO,
 188         NFSERR_ACCES,
 189         NFSERR_INVAL,
 190         NFSERR_STALE,
 191         NFSERR_BADHANDLE,
 192         NFSERR_SERVERFAULT,
 193         NFSERR_DELAY,
 194         0,
 195 };
 196
 197 static short nfsv3err_write[] = {
 198         NFSERR_IO,
 199         NFSERR_IO,
 200         NFSERR_ACCES,
 201         NFSERR_NOSPC,
 202         NFSERR_INVAL,
 203         NFSERR_FBIG,
 204         NFSERR_ROFS,
 205         NFSERR_DQUOT,
 206         NFSERR_STALE,
 207         NFSERR_BADHANDLE,
 208         NFSERR_SERVERFAULT,
 209         NFSERR_DELAY,
 210         0,
 211 };
 212
 213 static short nfsv3err_create[] = {
 214         NFSERR_IO,
 215         NFSERR_EXIST,
 216         NFSERR_NAMETOL,
 217         NFSERR_ACCES,
 218         NFSERR_IO,
 219         NFSERR_NOTDIR,
 220         NFSERR_NOSPC,
 221         NFSERR_ROFS,
 222         NFSERR_DQUOT,
 223         NFSERR_STALE,
 224         NFSERR_BADHANDLE,
 225         NFSERR_NOTSUPP,
 226         NFSERR_SERVERFAULT,
 227         NFSERR_DELAY,
 228         0,
 229 };
 230
 231 static short nfsv3err_mkdir[] = {
 232         NFSERR_IO,
 233         NFSERR_EXIST,
 234         NFSERR_ACCES,
 235         NFSERR_NAMETOL,
 236         NFSERR_IO,
 237         NFSERR_NOTDIR,
 238         NFSERR_NOSPC,
 239         NFSERR_ROFS,
 240         NFSERR_DQUOT,
 241         NFSERR_STALE,
 242         NFSERR_BADHANDLE,
 243         NFSERR_NOTSUPP,
 244         NFSERR_SERVERFAULT,
 245         NFSERR_DELAY,
 246         0,
 247 };
 248
 249 static short nfsv3err_symlink[] = {
 250         NFSERR_IO,
 251         NFSERR_ACCES,
 252         NFSERR_EXIST,
 253         NFSERR_NAMETOL,
 254         NFSERR_NOSPC,
 255         NFSERR_IO,
 256         NFSERR_NOTDIR,
 257         NFSERR_ROFS,
 258         NFSERR_DQUOT,
 259         NFSERR_STALE,
 260         NFSERR_BADHANDLE,
 261         NFSERR_NOTSUPP,
 262         NFSERR_SERVERFAULT,
 263         NFSERR_DELAY,
 264         0,
 265 };
 266
 267 static short nfsv3err_mknod[] = {
 268         NFSERR_IO,
 269         NFSERR_ACCES,
 270         NFSERR_EXIST,
 271         NFSERR_NAMETOL,
 272         NFSERR_NOSPC,
 273         NFSERR_IO,
 274         NFSERR_NOTDIR,
 275         NFSERR_ROFS,
 276         NFSERR_DQUOT,
 277         NFSERR_STALE,
 278         NFSERR_BADHANDLE,
 279         NFSERR_NOTSUPP,
 280         NFSERR_SERVERFAULT,
 281         NFSERR_DELAY,
 282         NFSERR_BADTYPE,
 283         0,
 284 };
 285
 286 static short nfsv3err_remove[] = {
 287         NFSERR_IO,
 288         NFSERR_NOENT,
 289         NFSERR_ACCES,
 290         NFSERR_NAMETOL,
 291         NFSERR_IO,
 292         NFSERR_NOTDIR,
 293         NFSERR_ROFS,
 294         NFSERR_STALE,
 295         NFSERR_BADHANDLE,
 296         NFSERR_SERVERFAULT,
 297         NFSERR_DELAY,
 298         0,
 299 };
 300
 301 static short nfsv3err_rmdir[] = {
 302         NFSERR_IO,
 303         NFSERR_NOENT,
 304         NFSERR_ACCES,
 305         NFSERR_NOTDIR,
 306         NFSERR_NAMETOL,
 307         NFSERR_IO,
 308         NFSERR_EXIST,
 309         NFSERR_INVAL,
 310         NFSERR_ROFS,
 311         NFSERR_NOTEMPTY,
 312         NFSERR_STALE,
 313         NFSERR_BADHANDLE,
 314         NFSERR_NOTSUPP,
 315         NFSERR_SERVERFAULT,
 316         NFSERR_DELAY,
 317         0,
 318 };
 319
 320 static short nfsv3err_rename[] = {
 321         NFSERR_IO,
 322         NFSERR_NOENT,
 323         NFSERR_ACCES,
 324         NFSERR_EXIST,
 325         NFSERR_NAMETOL,
 326         NFSERR_XDEV,
 327         NFSERR_IO,
 328         NFSERR_NOTDIR,
 329         NFSERR_ISDIR,
 330         NFSERR_INVAL,
 331         NFSERR_NOSPC,
 332         NFSERR_ROFS,
 333         NFSERR_MLINK,
 334         NFSERR_NOTEMPTY,
 335         NFSERR_DQUOT,
 336         NFSERR_STALE,
 337         NFSERR_BADHANDLE,
 338         NFSERR_NOTSUPP,
 339         NFSERR_SERVERFAULT,
 340         NFSERR_DELAY,
 341         0,
 342 };
 343
 344 static short nfsv3err_link[] = {
 345         NFSERR_IO,
 346         NFSERR_ACCES,
 347         NFSERR_EXIST,
 348         NFSERR_NAMETOL,
 349         NFSERR_IO,
 350         NFSERR_XDEV,
 351         NFSERR_NOTDIR,
 352         NFSERR_INVAL,
 353         NFSERR_NOSPC,
 354         NFSERR_ROFS,
 355         NFSERR_MLINK,
 356         NFSERR_DQUOT,
 357         NFSERR_STALE,
 358         NFSERR_BADHANDLE,
 359         NFSERR_NOTSUPP,
 360         NFSERR_SERVERFAULT,
 361         NFSERR_DELAY,
 362         0,
 363 };
 364
 365 static short nfsv3err_readdir[] = {
 366         NFSERR_IO,
 367         NFSERR_ACCES,
 368         NFSERR_NOTDIR,
 369         NFSERR_IO,
 370         NFSERR_STALE,
 371         NFSERR_BADHANDLE,
 372         NFSERR_BAD_COOKIE,
 373         NFSERR_TOOSMALL,
 374         NFSERR_SERVERFAULT,
 375         NFSERR_DELAY,
 376         0,
 377 };
 378
 379 static short nfsv3err_readdirplus[] = {
 380         NFSERR_IO,
 381         NFSERR_ACCES,
 382         NFSERR_NOTDIR,
 383         NFSERR_IO,
 384         NFSERR_STALE,
 385         NFSERR_BADHANDLE,
 386         NFSERR_BAD_COOKIE,
 387         NFSERR_NOTSUPP,
 388         NFSERR_TOOSMALL,
 389         NFSERR_SERVERFAULT,
 390         NFSERR_DELAY,
 391         0,
 392 };
 393
 394 static short nfsv3err_fsstat[] = {
 395         NFSERR_IO,
 396         NFSERR_IO,
 397         NFSERR_STALE,
 398         NFSERR_BADHANDLE,
 399         NFSERR_SERVERFAULT,
 400         NFSERR_DELAY,
 401         0,
 402 };
 403
 404 static short nfsv3err_fsinfo[] = {
 405         NFSERR_STALE,
 406         NFSERR_STALE,
 407         NFSERR_BADHANDLE,
 408         NFSERR_SERVERFAULT,
 409         NFSERR_DELAY,
 410         0,
 411 };
 412
 413 static short nfsv3err_pathconf[] = {
 414         NFSERR_STALE,
 415         NFSERR_STALE,
 416         NFSERR_BADHANDLE,
 417         NFSERR_SERVERFAULT,
 418         NFSERR_DELAY,
 419         0,
 420 };
 421
 422 static short nfsv3err_commit[] = {
 423         NFSERR_IO,
 424         NFSERR_IO,
 425         NFSERR_STALE,
 426         NFSERR_BADHANDLE,
 427         NFSERR_SERVERFAULT,
 428         NFSERR_DELAY,
 429         0,
 430 };
 431
 432 static short *nfsrv_v3errmap[] = {
 433         nfsv3err_null,
 434         nfsv3err_getattr,
 435         nfsv3err_setattr,
 436         nfsv3err_lookup,
 437         nfsv3err_access,
 438         nfsv3err_readlink,
 439         nfsv3err_read,
 440         nfsv3err_write,
 441         nfsv3err_create,
 442         nfsv3err_mkdir,
 443         nfsv3err_symlink,
 444         nfsv3err_mknod,
 445         nfsv3err_remove,
 446         nfsv3err_rmdir,
 447         nfsv3err_rename,
 448         nfsv3err_link,
 449         nfsv3err_readdir,
 450         nfsv3err_readdirplus,
 451         nfsv3err_fsstat,
 452         nfsv3err_fsinfo,
 453         nfsv3err_pathconf,
 454         nfsv3err_commit,
 455 };
 456
 457 /*
 458  * And the same for V4.
 459  */
 460 static short nfsv4err_null[] = {
 461         0,
 462         0,
 463 };
 464
 465 static short nfsv4err_access[] = {
 466         NFSERR_IO,
 467         NFSERR_ACCES,
 468         NFSERR_BADHANDLE,
 469         NFSERR_BADXDR,
 470         NFSERR_DELAY,
 471         NFSERR_FHEXPIRED,
 472         NFSERR_INVAL,
 473         NFSERR_IO,
 474         NFSERR_MOVED,
 475         NFSERR_NOFILEHANDLE,
 476         NFSERR_RESOURCE,
 477         NFSERR_SERVERFAULT,
 478         NFSERR_STALE,
 479         0,
 480 };
 481
 482 static short nfsv4err_close[] = {
 483         NFSERR_EXPIRED,
 484         NFSERR_ADMINREVOKED,
 485         NFSERR_BADHANDLE,
 486         NFSERR_BADSEQID,
 487         NFSERR_BADSTATEID,
 488         NFSERR_BADXDR,
 489         NFSERR_DELAY,
 490         NFSERR_EXPIRED,
 491         NFSERR_FHEXPIRED,
 492         NFSERR_INVAL,
 493         NFSERR_ISDIR,
 494         NFSERR_LEASEMOVED,
 495         NFSERR_LOCKSHELD,
 496         NFSERR_MOVED,
 497         NFSERR_NOFILEHANDLE,
 498         NFSERR_OLDSTATEID,
 499         NFSERR_RESOURCE,
 500         NFSERR_SERVERFAULT,
 501         NFSERR_STALE,
 502         NFSERR_STALESTATEID,
 503         0,
 504 };
 505
 506 static short nfsv4err_commit[] = {
 507         NFSERR_IO,
 508         NFSERR_ACCES,
 509         NFSERR_BADHANDLE,
 510         NFSERR_BADXDR,
 511         NFSERR_FHEXPIRED,
 512         NFSERR_INVAL,
 513         NFSERR_IO,
 514         NFSERR_ISDIR,
 515         NFSERR_MOVED,
 516         NFSERR_NOFILEHANDLE,
 517         NFSERR_RESOURCE,
 518         NFSERR_ROFS,
 519         NFSERR_SERVERFAULT,
 520         NFSERR_STALE,
 521         0,
 522 };
 523
 524 static short nfsv4err_create[] = {
 525         NFSERR_IO,
 526         NFSERR_ACCES,
 527         NFSERR_ATTRNOTSUPP,
 528         NFSERR_BADCHAR,
 529         NFSERR_BADHANDLE,
 530         NFSERR_BADNAME,
 531         NFSERR_BADOWNER,
 532         NFSERR_BADTYPE,
 533         NFSERR_BADXDR,
 534         NFSERR_DELAY,
 535         NFSERR_DQUOT,
 536         NFSERR_EXIST,
 537         NFSERR_FHEXPIRED,
 538         NFSERR_INVAL,
 539         NFSERR_IO,
 540         NFSERR_MOVED,
 541         NFSERR_NAMETOL,
 542         NFSERR_NOFILEHANDLE,
 543         NFSERR_NOSPC,
 544         NFSERR_NOTDIR,
 545         NFSERR_PERM,
 546         NFSERR_RESOURCE,
 547         NFSERR_ROFS,
 548         NFSERR_SERVERFAULT,
 549         NFSERR_STALE,
 550         0,
 551 };
 552
 553 static short nfsv4err_delegpurge[] = {
 554         NFSERR_SERVERFAULT,
 555         NFSERR_BADXDR,
 556         NFSERR_NOTSUPP,
 557         NFSERR_LEASEMOVED,
 558         NFSERR_MOVED,
 559         NFSERR_RESOURCE,
 560         NFSERR_SERVERFAULT,
 561         NFSERR_STALECLIENTID,
 562         0,
 563 };
 564
 565 static short nfsv4err_delegreturn[] = {
 566         NFSERR_SERVERFAULT,
 567         NFSERR_ADMINREVOKED,
 568         NFSERR_BADSTATEID,
 569         NFSERR_BADXDR,
 570         NFSERR_EXPIRED,
 571         NFSERR_INVAL,
 572         NFSERR_LEASEMOVED,
 573         NFSERR_MOVED,
 574         NFSERR_NOFILEHANDLE,
 575         NFSERR_NOTSUPP,
 576         NFSERR_OLDSTATEID,
 577         NFSERR_RESOURCE,
 578         NFSERR_SERVERFAULT,
 579         NFSERR_STALE,
 580         NFSERR_STALESTATEID,
 581         0,
 582 };
 583
 584 static short nfsv4err_getattr[] = {
 585         NFSERR_IO,
 586         NFSERR_ACCES,
 587         NFSERR_BADHANDLE,
 588         NFSERR_BADXDR,
 589         NFSERR_DELAY,
 590         NFSERR_FHEXPIRED,
 591         NFSERR_INVAL,
 592         NFSERR_IO,
 593         NFSERR_MOVED,
 594         NFSERR_NOFILEHANDLE,
 595         NFSERR_RESOURCE,
 596         NFSERR_SERVERFAULT,
 597         NFSERR_STALE,
 598         0,
 599 };
 600
 601 static short nfsv4err_getfh[] = {
 602         NFSERR_BADHANDLE,
 603         NFSERR_BADHANDLE,
 604         NFSERR_FHEXPIRED,
 605         NFSERR_MOVED,
 606         NFSERR_NOFILEHANDLE,
 607         NFSERR_RESOURCE,
 608         NFSERR_SERVERFAULT,
 609         NFSERR_STALE,
 610         0,
 611 };
 612
 613 static short nfsv4err_link[] = {
 614         NFSERR_IO,
 615         NFSERR_ACCES,
 616         NFSERR_BADCHAR,
 617         NFSERR_BADHANDLE,
 618         NFSERR_BADNAME,
 619         NFSERR_BADXDR,
 620         NFSERR_DELAY,
 621         NFSERR_DQUOT,
 622         NFSERR_EXIST,
 623         NFSERR_FHEXPIRED,
 624         NFSERR_FILEOPEN,
 625         NFSERR_INVAL,
 626         NFSERR_IO,
 627         NFSERR_ISDIR,
 628         NFSERR_MLINK,
 629         NFSERR_MOVED,
 630         NFSERR_NAMETOL,
 631         NFSERR_NOENT,
 632         NFSERR_NOFILEHANDLE,
 633         NFSERR_NOSPC,
 634         NFSERR_NOTDIR,
 635         NFSERR_NOTSUPP,
 636         NFSERR_RESOURCE,
 637         NFSERR_ROFS,
 638         NFSERR_SERVERFAULT,
 639         NFSERR_STALE,
 640         NFSERR_WRONGSEC,
 641         NFSERR_XDEV,
 642         0,
 643 };
 644
 645 static short nfsv4err_lock[] = {
 646         NFSERR_SERVERFAULT,
 647         NFSERR_ACCES,
 648         NFSERR_ADMINREVOKED,
 649         NFSERR_BADHANDLE,
 650         NFSERR_BADRANGE,
 651         NFSERR_BADSEQID,
 652         NFSERR_BADSTATEID,
 653         NFSERR_BADXDR,
 654         NFSERR_DEADLOCK,
 655         NFSERR_DELAY,
 656         NFSERR_DENIED,
 657         NFSERR_EXPIRED,
 658         NFSERR_FHEXPIRED,
 659         NFSERR_GRACE,
 660         NFSERR_INVAL,
 661         NFSERR_ISDIR,
 662         NFSERR_LEASEMOVED,
 663         NFSERR_LOCKNOTSUPP,
 664         NFSERR_LOCKRANGE,
 665         NFSERR_MOVED,
 666         NFSERR_NOFILEHANDLE,
 667         NFSERR_NOGRACE,
 668         NFSERR_OLDSTATEID,
 669         NFSERR_OPENMODE,
 670         NFSERR_RECLAIMBAD,
 671         NFSERR_RECLAIMCONFLICT,
 672         NFSERR_RESOURCE,
 673         NFSERR_SERVERFAULT,
 674         NFSERR_STALE,
 675         NFSERR_STALECLIENTID,
 676         NFSERR_STALESTATEID,
 677         0,
 678 };
 679
 680 static short nfsv4err_lockt[] = {
 681         NFSERR_SERVERFAULT,
 682         NFSERR_ACCES,
 683         NFSERR_BADHANDLE,
 684         NFSERR_BADRANGE,
 685         NFSERR_BADXDR,
 686         NFSERR_DELAY,
 687         NFSERR_DENIED,
 688         NFSERR_FHEXPIRED,
 689         NFSERR_GRACE,
 690         NFSERR_INVAL,
 691         NFSERR_ISDIR,
 692         NFSERR_LEASEMOVED,
 693         NFSERR_LOCKRANGE,
 694         NFSERR_MOVED,
 695         NFSERR_NOFILEHANDLE,
 696         NFSERR_RESOURCE,
 697         NFSERR_SERVERFAULT,
 698         NFSERR_STALE,
 699         NFSERR_STALECLIENTID,
 700         0,
 701 };
 702
 703 static short nfsv4err_locku[] = {
 704         NFSERR_SERVERFAULT,
 705         NFSERR_ACCES,
 706         NFSERR_ADMINREVOKED,
 707         NFSERR_BADHANDLE,
 708         NFSERR_BADRANGE,
 709         NFSERR_BADSEQID,
 710         NFSERR_BADSTATEID,
 711         NFSERR_BADXDR,
 712         NFSERR_EXPIRED,
 713         NFSERR_FHEXPIRED,
 714         NFSERR_GRACE,
 715         NFSERR_INVAL,
 716         NFSERR_ISDIR,
 717         NFSERR_LEASEMOVED,
 718         NFSERR_LOCKRANGE,
 719         NFSERR_MOVED,
 720         NFSERR_NOFILEHANDLE,
 721         NFSERR_OLDSTATEID,
 722         NFSERR_RESOURCE,
 723         NFSERR_SERVERFAULT,
 724         NFSERR_STALE,
 725         NFSERR_STALESTATEID,
 726         0,
 727 };
 728
 729 static short nfsv4err_lookup[] = {
 730         NFSERR_IO,
 731         NFSERR_ACCES,
 732         NFSERR_BADCHAR,
 733         NFSERR_BADHANDLE,
 734         NFSERR_BADNAME,
 735         NFSERR_BADXDR,
 736         NFSERR_FHEXPIRED,
 737         NFSERR_INVAL,
 738         NFSERR_IO,
 739         NFSERR_MOVED,
 740         NFSERR_NAMETOL,
 741         NFSERR_NOENT,
 742         NFSERR_NOFILEHANDLE,
 743         NFSERR_NOTDIR,
 744         NFSERR_RESOURCE,
 745         NFSERR_SERVERFAULT,
 746         NFSERR_STALE,
 747         NFSERR_SYMLINK,
 748         NFSERR_WRONGSEC,
 749         0,
 750 };
 751
 752 static short nfsv4err_lookupp[] = {
 753         NFSERR_IO,
 754         NFSERR_ACCES,
 755         NFSERR_BADHANDLE,
 756         NFSERR_FHEXPIRED,
 757         NFSERR_IO,
 758         NFSERR_MOVED,
 759         NFSERR_NOENT,
 760         NFSERR_NOFILEHANDLE,
 761         NFSERR_NOTDIR,
 762         NFSERR_RESOURCE,
 763         NFSERR_SERVERFAULT,
 764         NFSERR_STALE,
 765         0,
 766 };
 767
 768 static short nfsv4err_nverify[] = {
 769         NFSERR_IO,
 770         NFSERR_ACCES,
 771         NFSERR_ATTRNOTSUPP,
 772         NFSERR_BADCHAR,
 773         NFSERR_BADHANDLE,
 774         NFSERR_BADXDR,
 775         NFSERR_DELAY,
 776         NFSERR_FHEXPIRED,
 777         NFSERR_INVAL,
 778         NFSERR_IO,
 779         NFSERR_MOVED,
 780         NFSERR_NOFILEHANDLE,
 781         NFSERR_RESOURCE,
 782         NFSERR_SAME,
 783         NFSERR_SERVERFAULT,
 784         NFSERR_STALE,
 785         0,
 786 };
 787
 788 static short nfsv4err_open[] = {
 789         NFSERR_IO,
 790         NFSERR_ACCES,
 791         NFSERR_ADMINREVOKED,
 792         NFSERR_ATTRNOTSUPP,
 793         NFSERR_BADCHAR,
 794         NFSERR_BADHANDLE,
 795         NFSERR_BADNAME,
 796         NFSERR_BADOWNER,
 797         NFSERR_BADSEQID,
 798         NFSERR_BADXDR,
 799         NFSERR_DELAY,
 800         NFSERR_DQUOT,
 801         NFSERR_EXIST,
 802         NFSERR_EXPIRED,
 803         NFSERR_FHEXPIRED,
 804         NFSERR_GRACE,
 805         NFSERR_IO,
 806         NFSERR_INVAL,
 807         NFSERR_ISDIR,
 808         NFSERR_LEASEMOVED,
 809         NFSERR_MOVED,
 810         NFSERR_NAMETOL,
 811         NFSERR_NOENT,
 812         NFSERR_NOFILEHANDLE,
 813         NFSERR_NOGRACE,
 814         NFSERR_NOSPC,
 815         NFSERR_NOTDIR,
 816         NFSERR_NOTSUPP,
 817         NFSERR_PERM,
 818         NFSERR_RECLAIMBAD,
 819         NFSERR_RECLAIMCONFLICT,
 820         NFSERR_RESOURCE,
 821         NFSERR_ROFS,
 822         NFSERR_SERVERFAULT,
 823         NFSERR_SHAREDENIED,
 824         NFSERR_STALE,
 825         NFSERR_STALECLIENTID,
 826         NFSERR_SYMLINK,
 827         NFSERR_WRONGSEC,
 828         0,
 829 };
 830
 831 static short nfsv4err_openattr[] = {
 832         NFSERR_IO,
 833         NFSERR_ACCES,
 834         NFSERR_BADHANDLE,
 835         NFSERR_BADXDR,
 836         NFSERR_DELAY,
 837         NFSERR_DQUOT,
 838         NFSERR_FHEXPIRED,
 839         NFSERR_IO,
 840         NFSERR_MOVED,
 841         NFSERR_NOENT,
 842         NFSERR_NOFILEHANDLE,
 843         NFSERR_NOSPC,
 844         NFSERR_NOTSUPP,
 845         NFSERR_RESOURCE,
 846         NFSERR_ROFS,
 847         NFSERR_SERVERFAULT,
 848         NFSERR_STALE,
 849         0,
 850 };
 851
 852 static short nfsv4err_openconfirm[] = {
 853         NFSERR_SERVERFAULT,
 854         NFSERR_ADMINREVOKED,
 855         NFSERR_BADHANDLE,
 856         NFSERR_BADSEQID,
 857         NFSERR_BADSTATEID,
 858         NFSERR_BADXDR,
 859         NFSERR_EXPIRED,
 860         NFSERR_FHEXPIRED,
 861         NFSERR_INVAL,
 862         NFSERR_ISDIR,
 863         NFSERR_MOVED,
 864         NFSERR_NOFILEHANDLE,
 865         NFSERR_OLDSTATEID,
 866         NFSERR_RESOURCE,
 867         NFSERR_SERVERFAULT,
 868         NFSERR_STALE,
 869         NFSERR_STALESTATEID,
 870         0,
 871 };
 872
 873 static short nfsv4err_opendowngrade[] = {
 874         NFSERR_SERVERFAULT,
 875         NFSERR_ADMINREVOKED,
 876         NFSERR_BADHANDLE,
 877         NFSERR_BADSEQID,
 878         NFSERR_BADSTATEID,
 879         NFSERR_BADXDR,
 880         NFSERR_EXPIRED,
 881         NFSERR_FHEXPIRED,
 882         NFSERR_INVAL,
 883         NFSERR_MOVED,
 884         NFSERR_NOFILEHANDLE,
 885         NFSERR_OLDSTATEID,
 886         NFSERR_RESOURCE,
 887         NFSERR_SERVERFAULT,
 888         NFSERR_STALE,
 889         NFSERR_STALESTATEID,
 890         0,
 891 };
 892
 893 static short nfsv4err_putfh[] = {
 894         NFSERR_SERVERFAULT,
 895         NFSERR_BADHANDLE,
 896         NFSERR_BADXDR,
 897         NFSERR_FHEXPIRED,
 898         NFSERR_MOVED,
 899         NFSERR_RESOURCE,
 900         NFSERR_SERVERFAULT,
 901         NFSERR_STALE,
 902         NFSERR_WRONGSEC,
 903         0,
 904 };
 905
 906 static short nfsv4err_putpubfh[] = {
 907         NFSERR_SERVERFAULT,
 908         NFSERR_RESOURCE,
 909         NFSERR_SERVERFAULT,
 910         NFSERR_WRONGSEC,
 911         0,
 912 };
 913
 914 static short nfsv4err_putrootfh[] = {
 915         NFSERR_SERVERFAULT,
 916         NFSERR_RESOURCE,
 917         NFSERR_SERVERFAULT,
 918         NFSERR_WRONGSEC,
 919         0,
 920 };
 921
 922 static short nfsv4err_read[] = {
 923         NFSERR_IO,
 924         NFSERR_ACCES,
 925         NFSERR_ADMINREVOKED,
 926         NFSERR_BADHANDLE,
 927         NFSERR_BADSTATEID,
 928         NFSERR_BADXDR,
 929         NFSERR_DELAY,
 930         NFSERR_EXPIRED,
 931         NFSERR_FHEXPIRED,
 932         NFSERR_GRACE,
 933         NFSERR_IO,
 934         NFSERR_INVAL,
 935         NFSERR_ISDIR,
 936         NFSERR_LEASEMOVED,
 937         NFSERR_LOCKED,
 938         NFSERR_MOVED,
 939         NFSERR_NOFILEHANDLE,
 940         NFSERR_NXIO,
 941         NFSERR_OLDSTATEID,
 942         NFSERR_OPENMODE,
 943         NFSERR_RESOURCE,
 944         NFSERR_SERVERFAULT,
 945         NFSERR_STALE,
 946         NFSERR_STALESTATEID,
 947         0,
 948 };
 949
 950 static short nfsv4err_readdir[] = {
 951         NFSERR_IO,
 952         NFSERR_ACCES,
 953         NFSERR_BADHANDLE,
 954         NFSERR_BAD_COOKIE,
 955         NFSERR_BADXDR,
 956         NFSERR_DELAY,
 957         NFSERR_FHEXPIRED,
 958         NFSERR_INVAL,
 959         NFSERR_IO,
 960         NFSERR_MOVED,
 961         NFSERR_NOFILEHANDLE,
 962         NFSERR_NOTDIR,
 963         NFSERR_NOTSAME,
 964         NFSERR_RESOURCE,
 965         NFSERR_SERVERFAULT,
 966         NFSERR_STALE,
 967         NFSERR_TOOSMALL,
 968         0,
 969 };
 970
 971 static short nfsv4err_readlink[] = {
 972         NFSERR_IO,
 973         NFSERR_ACCES,
 974         NFSERR_BADHANDLE,
 975         NFSERR_DELAY,
 976         NFSERR_FHEXPIRED,
 977         NFSERR_INVAL,
 978         NFSERR_IO,
 979         NFSERR_ISDIR,
 980         NFSERR_MOVED,
 981         NFSERR_NOFILEHANDLE,
 982         NFSERR_NOTSUPP,
 983         NFSERR_RESOURCE,
 984         NFSERR_SERVERFAULT,
 985         NFSERR_STALE,
 986         0,
 987 };
 988
 989 static short nfsv4err_remove[] = {
 990         NFSERR_IO,
 991         NFSERR_ACCES,
 992         NFSERR_BADCHAR,
 993         NFSERR_BADHANDLE,
 994         NFSERR_BADNAME,
 995         NFSERR_BADXDR,
 996         NFSERR_DELAY,
 997         NFSERR_FHEXPIRED,
 998         NFSERR_FILEOPEN,
 999         NFSERR_INVAL,
1000         NFSERR_IO,
1001         NFSERR_MOVED,
1002         NFSERR_NAMETOL,
1003         NFSERR_NOENT,
1004         NFSERR_NOFILEHANDLE,
1005         NFSERR_NOTDIR,
1006         NFSERR_NOTEMPTY,
1007         NFSERR_RESOURCE,
1008         NFSERR_ROFS,
1009         NFSERR_SERVERFAULT,
1010         NFSERR_STALE,
1011         0,
1012 };
1013
1014 static short nfsv4err_rename[] = {
1015         NFSERR_IO,
1016         NFSERR_ACCES,
1017         NFSERR_BADCHAR,
1018         NFSERR_BADHANDLE,
1019         NFSERR_BADNAME,
1020         NFSERR_BADXDR,
1021         NFSERR_DELAY,
1022         NFSERR_DQUOT,
1023         NFSERR_EXIST,
1024         NFSERR_FHEXPIRED,
1025         NFSERR_FILEOPEN,
1026         NFSERR_INVAL,
1027         NFSERR_IO,
1028         NFSERR_MOVED,
1029         NFSERR_NAMETOL,
1030         NFSERR_NOENT,
1031         NFSERR_NOFILEHANDLE,
1032         NFSERR_NOSPC,
1033         NFSERR_NOTDIR,
1034         NFSERR_NOTEMPTY,
1035         NFSERR_RESOURCE,
1036         NFSERR_ROFS,
1037         NFSERR_SERVERFAULT,
1038         NFSERR_STALE,
1039         NFSERR_WRONGSEC,
1040         NFSERR_XDEV,
1041         0,
1042 };
1043
1044 static short nfsv4err_renew[] = {
1045         NFSERR_SERVERFAULT,
1046         NFSERR_ACCES,
1047         NFSERR_ADMINREVOKED,
1048         NFSERR_BADXDR,
1049         NFSERR_CBPATHDOWN,
1050         NFSERR_EXPIRED,
1051         NFSERR_LEASEMOVED,
1052         NFSERR_RESOURCE,
1053         NFSERR_SERVERFAULT,
1054         NFSERR_STALECLIENTID,
1055         0,
1056 };
1057
1058 static short nfsv4err_restorefh[] = {
1059         NFSERR_SERVERFAULT,
1060         NFSERR_BADHANDLE,
1061         NFSERR_FHEXPIRED,
1062         NFSERR_MOVED,
1063         NFSERR_RESOURCE,
1064         NFSERR_RESTOREFH,
1065         NFSERR_SERVERFAULT,
1066         NFSERR_STALE,
1067         NFSERR_WRONGSEC,
1068         0,
1069 };
1070
1071 static short nfsv4err_savefh[] = {
1072         NFSERR_SERVERFAULT,
1073         NFSERR_BADHANDLE,
1074         NFSERR_FHEXPIRED,
1075         NFSERR_MOVED,
1076         NFSERR_NOFILEHANDLE,
1077         NFSERR_RESOURCE,
1078         NFSERR_SERVERFAULT,
1079         NFSERR_STALE,
1080         0,
1081 };
1082
1083 static short nfsv4err_secinfo[] = {
1084         NFSERR_SERVERFAULT,
1085         NFSERR_ACCES,
1086         NFSERR_BADCHAR,
1087         NFSERR_BADHANDLE,
1088         NFSERR_BADNAME,
1089         NFSERR_BADXDR,
1090         NFSERR_FHEXPIRED,
1091         NFSERR_INVAL,
1092         NFSERR_MOVED,
1093         NFSERR_NAMETOL,
1094         NFSERR_NOENT,
1095         NFSERR_NOFILEHANDLE,
1096         NFSERR_NOTDIR,
1097         NFSERR_RESOURCE,
1098         NFSERR_SERVERFAULT,
1099         NFSERR_STALE,
1100         0,
1101 };
1102
1103 static short nfsv4err_setattr[] = {
1104         NFSERR_IO,
1105         NFSERR_ACCES,
1106         NFSERR_ADMINREVOKED,
1107         NFSERR_ATTRNOTSUPP,
1108         NFSERR_BADCHAR,
1109         NFSERR_BADHANDLE,
1110         NFSERR_BADOWNER,
1111         NFSERR_BADSTATEID,
1112         NFSERR_BADXDR,
1113         NFSERR_DELAY,
1114         NFSERR_DQUOT,
1115         NFSERR_EXPIRED,
1116         NFSERR_FBIG,
1117         NFSERR_FHEXPIRED,
1118         NFSERR_GRACE,
1119         NFSERR_INVAL,
1120         NFSERR_IO,
1121         NFSERR_ISDIR,
1122         NFSERR_LOCKED,
1123         NFSERR_MOVED,
1124         NFSERR_NOFILEHANDLE,
1125         NFSERR_NOSPC,
1126         NFSERR_OLDSTATEID,
1127         NFSERR_OPENMODE,
1128         NFSERR_PERM,
1129         NFSERR_RESOURCE,
1130         NFSERR_ROFS,
1131         NFSERR_SERVERFAULT,
1132         NFSERR_STALE,
1133         NFSERR_STALESTATEID,
1134         0,
1135 };
1136
1137 static short nfsv4err_setclientid[] = {
1138         NFSERR_SERVERFAULT,
1139         NFSERR_BADXDR,
1140         NFSERR_CLIDINUSE,
1141         NFSERR_INVAL,
1142         NFSERR_RESOURCE,
1143         NFSERR_SERVERFAULT,
1144         0,
1145 };
1146
1147 static short nfsv4err_setclientidconfirm[] = {
1148         NFSERR_SERVERFAULT,
1149         NFSERR_BADXDR,
1150         NFSERR_CLIDINUSE,
1151         NFSERR_RESOURCE,
1152         NFSERR_SERVERFAULT,
1153         NFSERR_STALECLIENTID,
1154         0,
1155 };
1156
1157 static short nfsv4err_verify[] = {
1158         NFSERR_SERVERFAULT,
1159         NFSERR_ACCES,
1160         NFSERR_ATTRNOTSUPP,
1161         NFSERR_BADCHAR,
1162         NFSERR_BADHANDLE,
1163         NFSERR_BADXDR,
1164         NFSERR_DELAY,
1165         NFSERR_FHEXPIRED,
1166         NFSERR_INVAL,
1167         NFSERR_MOVED,
1168         NFSERR_NOFILEHANDLE,
1169         NFSERR_NOTSAME,
1170         NFSERR_RESOURCE,
1171         NFSERR_SERVERFAULT,
1172         NFSERR_STALE,
1173         0,
1174 };
1175
1176 static short nfsv4err_write[] = {
1177         NFSERR_IO,
1178         NFSERR_ACCES,
1179         NFSERR_ADMINREVOKED,
1180         NFSERR_BADHANDLE,
1181         NFSERR_BADSTATEID,
1182         NFSERR_BADXDR,
1183         NFSERR_DELAY,
1184         NFSERR_DQUOT,
1185         NFSERR_EXPIRED,
1186         NFSERR_FBIG,
1187         NFSERR_FHEXPIRED,
1188         NFSERR_GRACE,
1189         NFSERR_INVAL,
1190         NFSERR_IO,
1191         NFSERR_ISDIR,
1192         NFSERR_LEASEMOVED,
1193         NFSERR_LOCKED,
1194         NFSERR_MOVED,
1195         NFSERR_NOFILEHANDLE,
1196         NFSERR_NOSPC,
1197         NFSERR_NXIO,
1198         NFSERR_OLDSTATEID,
1199         NFSERR_OPENMODE,
1200         NFSERR_RESOURCE,
1201         NFSERR_ROFS,
1202         NFSERR_SERVERFAULT,
1203         NFSERR_STALE,
1204         NFSERR_STALESTATEID,
1205         0,
1206 };
1207
1208 static short nfsv4err_releaselockowner[] = {
1209         NFSERR_SERVERFAULT,
1210         NFSERR_ADMINREVOKED,
1211         NFSERR_BADXDR,
1212         NFSERR_EXPIRED,
1213         NFSERR_LEASEMOVED,
1214         NFSERR_LOCKSHELD,
1215         NFSERR_RESOURCE,
1216         NFSERR_SERVERFAULT,
1217         NFSERR_STALECLIENTID,
1218         0,
1219 };
1220
1221 static short *nfsrv_v4errmap[] = {
1222         nfsv4err_null,
1223         nfsv4err_null,
1224         nfsv4err_null,
1225         nfsv4err_access,
1226         nfsv4err_close,
1227         nfsv4err_commit,
1228         nfsv4err_create,
1229         nfsv4err_delegpurge,
1230         nfsv4err_delegreturn,
1231         nfsv4err_getattr,
1232         nfsv4err_getfh,
1233         nfsv4err_link,
1234         nfsv4err_lock,
1235         nfsv4err_lockt,
1236         nfsv4err_locku,
1237         nfsv4err_lookup,
1238         nfsv4err_lookupp,
1239         nfsv4err_nverify,
1240         nfsv4err_open,
1241         nfsv4err_openattr,
1242         nfsv4err_openconfirm,
1243         nfsv4err_opendowngrade,
1244         nfsv4err_putfh,
1245         nfsv4err_putpubfh,
1246         nfsv4err_putrootfh,
1247         nfsv4err_read,
1248         nfsv4err_readdir,
1249         nfsv4err_readlink,
1250         nfsv4err_remove,
1251         nfsv4err_rename,
1252         nfsv4err_renew,
1253         nfsv4err_restorefh,
1254         nfsv4err_savefh,
1255         nfsv4err_secinfo,
1256         nfsv4err_setattr,
1257         nfsv4err_setclientid,
1258         nfsv4err_setclientidconfirm,
1259         nfsv4err_verify,
1260         nfsv4err_write,
1261         nfsv4err_releaselockowner,
1262 };
1263
1264 /*
1265  * A fiddled version of m_adj() that ensures null fill to a long
1266  * boundary and only trims off the back end
1267  */
1268 APPLESTATIC void
1269 nfsrv_adj(mbuf_t mp, int len, int nul)
1270 {
1271         mbuf_t m;
1272         int count, i;
1273         char *cp;
1274
1275         /*
1276          * Trim from tail.  Scan the mbuf chain,
1277          * calculating its length and finding the last mbuf.
1278          * If the adjustment only affects this mbuf, then just
1279          * adjust and return.  Otherwise, rescan and truncate
1280          * after the remaining size.
1281          */
1282         count = 0;
1283         m = mp;
1284         for (;;) {
1285                 count += mbuf_len(m);
1286                 if (mbuf_next(m) == NULL)
1287                         break;
1288                 m = mbuf_next(m);
1289         }
1290         if (mbuf_len(m) > len) {
1291                 mbuf_setlen(m, mbuf_len(m) - len);
1292                 if (nul > 0) {
1293                         cp = NFSMTOD(m, caddr_t) + mbuf_len(m) - nul;
1294                         for (i = 0; i < nul; i++)
1295                                 *cp++ = '\0';
1296                 }
1297                 return;
1298         }
1299         count -= len;
1300         if (count < 0)
1301                 count = 0;
1302         /*
1303          * Correct length for chain is "count".
1304          * Find the mbuf with last data, adjust its length,
1305          * and toss data from remaining mbufs on chain.
1306          */
1307         for (m = mp; m; m = mbuf_next(m)) {
1308                 if (mbuf_len(m) >= count) {
1309                         mbuf_setlen(m, count);
1310                         if (nul > 0) {
1311                                 cp = NFSMTOD(m, caddr_t) + mbuf_len(m) - nul;
1312                                 for (i = 0; i < nul; i++)
1313                                         *cp++ = '\0';
1314                         }
1315                         break;
1316                 }
1317                 count -= mbuf_len(m);
1318         }
1319         for (m = mbuf_next(m); m; m = mbuf_next(m))
1320                 mbuf_setlen(m, 0);
1321 }
1322
1323 /*
1324  * Make these functions instead of macros, so that the kernel text size
1325  * doesn't get too big...
1326  */
1327 APPLESTATIC void
1328 nfsrv_wcc(struct nfsrv_descript *nd, int before_ret,
1329     struct nfsvattr *before_nvap, int after_ret, struct nfsvattr *after_nvap)
1330 {
1331         u_int32_t *tl;
1332
1333         if (before_ret) {
1334                 NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1335                 *tl = newnfs_false;
1336         } else {
1337                 NFSM_BUILD(tl, u_int32_t *, 7 * NFSX_UNSIGNED);
1338                 *tl++ = newnfs_true;
1339                 txdr_hyper(before_nvap->na_size, tl);
1340                 tl += 2;
1341                 txdr_nfsv3time(&(before_nvap->na_mtime), tl);
1342                 tl += 2;
1343                 txdr_nfsv3time(&(before_nvap->na_ctime), tl);
1344         }
1345         nfsrv_postopattr(nd, after_ret, after_nvap);
1346 }
1347
1348 APPLESTATIC void
1349 nfsrv_postopattr(struct nfsrv_descript *nd, int after_ret,
1350     struct nfsvattr *after_nvap)
1351 {
1352         u_int32_t *tl;
1353
1354         NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1355         if (after_ret)
1356                 *tl = newnfs_false;
1357         else {
1358                 *tl = newnfs_true;
1359                 nfsrv_fillattr(nd, after_nvap);
1360         }
1361 }
1362
1363 /*
1364  * Fill in file attributes for V2 and 3. For V4, call a separate
1365  * routine that sifts through all the attribute bits.
1366  */
1367 APPLESTATIC void
1368 nfsrv_fillattr(struct nfsrv_descript *nd, struct nfsvattr *nvap)
1369 {
1370         struct nfs_fattr *fp;
1371         int fattr_size;
1372
1373         /*
1374          * Build space for the attribute structure.
1375          */
1376         if (nd->nd_flag & ND_NFSV3)
1377                 fattr_size = NFSX_V3FATTR;
1378         else
1379                 fattr_size = NFSX_V2FATTR;
1380         NFSM_BUILD(fp, struct nfs_fattr *, fattr_size);
1381
1382         /*
1383          * Now just fill it all in.
1384          */
1385         fp->fa_nlink = txdr_unsigned(nvap->na_nlink);
1386         fp->fa_uid = txdr_unsigned(nvap->na_uid);
1387         fp->fa_gid = txdr_unsigned(nvap->na_gid);
1388         if (nd->nd_flag & ND_NFSV3) {
1389                 fp->fa_type = vtonfsv34_type(nvap->na_type);
1390                 fp->fa_mode = vtonfsv34_mode(nvap->na_mode);
1391                 txdr_hyper(nvap->na_size, &fp->fa3_size);
1392                 txdr_hyper(nvap->na_bytes, &fp->fa3_used);
1393                 fp->fa3_rdev.specdata1 = txdr_unsigned(NFSMAJOR(nvap->na_rdev));
1394                 fp->fa3_rdev.specdata2 = txdr_unsigned(NFSMINOR(nvap->na_rdev));
1395                 fp->fa3_fsid.nfsuquad[0] = 0;
1396                 fp->fa3_fsid.nfsuquad[1] = txdr_unsigned(nvap->na_fsid);
1397                 fp->fa3_fileid.nfsuquad[0] = 0;
1398                 fp->fa3_fileid.nfsuquad[1] = txdr_unsigned(nvap->na_fileid);
1399                 txdr_nfsv3time(&nvap->na_atime, &fp->fa3_atime);
1400                 txdr_nfsv3time(&nvap->na_mtime, &fp->fa3_mtime);
1401                 txdr_nfsv3time(&nvap->na_ctime, &fp->fa3_ctime);
1402         } else {
1403                 fp->fa_type = vtonfsv2_type(nvap->na_type);
1404                 fp->fa_mode = vtonfsv2_mode(nvap->na_type, nvap->na_mode);
1405                 fp->fa2_size = txdr_unsigned(nvap->na_size);
1406                 fp->fa2_blocksize = txdr_unsigned(nvap->na_blocksize);
1407                 if (nvap->na_type == VFIFO)
1408                         fp->fa2_rdev = 0xffffffff;
1409                 else
1410                         fp->fa2_rdev = txdr_unsigned(nvap->na_rdev);
1411                 fp->fa2_blocks = txdr_unsigned(nvap->na_bytes / NFS_FABLKSIZE);
1412                 fp->fa2_fsid = txdr_unsigned(nvap->na_fsid);
1413                 fp->fa2_fileid = txdr_unsigned(nvap->na_fileid);
1414                 txdr_nfsv2time(&nvap->na_atime, &fp->fa2_atime);
1415                 txdr_nfsv2time(&nvap->na_mtime, &fp->fa2_mtime);
1416                 txdr_nfsv2time(&nvap->na_ctime, &fp->fa2_ctime);
1417         }
1418 }
1419
1420 /*
1421  * This function gets a file handle out of an mbuf list.
1422  * It returns 0 for success, EBADRPC otherwise.
1423  * If sets the third flagp argument to 1 if the file handle is
1424  * the public file handle.
1425  * For NFSv4, if the length is incorrect, set nd_repstat == NFSERR_BADHANDLE
1426  */
1427 APPLESTATIC int
1428 nfsrv_mtofh(struct nfsrv_descript *nd, struct nfsrvfh *fhp)
1429 {
1430         u_int32_t *tl;
1431         int error = 0, len, copylen;
1432
1433         if (nd->nd_flag & (ND_NFSV3 | ND_NFSV4)) {
1434                 NFSM_DISSECT(tl, u_int32_t *, NFSX_UNSIGNED);
1435                 len = fxdr_unsigned(int, *tl);
1436                 if (len == 0 && nfs_pubfhset && (nd->nd_flag & ND_NFSV3) &&
1437                     nd->nd_procnum == NFSPROC_LOOKUP) {
1438                         nd->nd_flag |= ND_PUBLOOKUP;
1439                         goto nfsmout;
1440                 }
1441                 if (len < NFSRV_MINFH || len > NFSRV_MAXFH) {
1442                         if (nd->nd_flag & ND_NFSV4) {
1443                             if (len > 0 && len <= NFSX_V4FHMAX) {
1444                                 error = nfsm_advance(nd, NFSM_RNDUP(len), -1);
1445                                 if (error)
1446                                         goto nfsmout;
1447                                 nd->nd_repstat = NFSERR_BADHANDLE;
1448                                 goto nfsmout;
1449                             } else {
1450                                     error = EBADRPC;
1451                                     goto nfsmout;
1452                             }
1453                         } else {
1454                                 error = EBADRPC;
1455                                 goto nfsmout;
1456                         }
1457                 }
1458                 copylen = len;
1459         } else {
1460                 /*
1461                  * For NFSv2, the file handle is always 32 bytes on the
1462                  * wire, but this server only cares about the first
1463                  * NFSRV_MAXFH bytes.
1464                  */
1465                 len = NFSX_V2FH;
1466                 copylen = NFSRV_MAXFH;
1467         }
1468         NFSM_DISSECT(tl, u_int32_t *, len);
1469         if ((nd->nd_flag & ND_NFSV2) && nfs_pubfhset &&
1470             nd->nd_procnum == NFSPROC_LOOKUP &&
1471             !NFSBCMP((caddr_t)tl, nfs_v2pubfh, NFSX_V2FH)) {
1472                 nd->nd_flag |= ND_PUBLOOKUP;
1473                 goto nfsmout;
1474         }
1475         NFSBCOPY(tl, (caddr_t)fhp->nfsrvfh_data, copylen);
1476         fhp->nfsrvfh_len = copylen;
1477 nfsmout:
1478         NFSEXITCODE2(error, nd);
1479         return (error);
1480 }
1481
1482 /*
1483  * Map errnos to NFS error numbers. For Version 3 and 4 also filter out error
1484  * numbers not specified for the associated procedure.
1485  * NFSPROC_NOOP is a special case, where the high order bits of nd_repstat
1486  * should be cleared. NFSPROC_NOOP is used to return errors when a valid
1487  * RPC procedure is not involved.
1488  * Returns the error number in XDR.
1489  */
1490 APPLESTATIC int
1491 nfsd_errmap(struct nfsrv_descript *nd)
1492 {
1493         short *defaulterrp, *errp;
1494
1495         if (!nd->nd_repstat)
1496                 return (0);
1497         if (nd->nd_flag & (ND_NFSV3 | ND_NFSV4)) {
1498                 if (nd->nd_procnum == NFSPROC_NOOP)
1499                         return (txdr_unsigned(nd->nd_repstat & 0xffff));
1500                 if (nd->nd_flag & ND_NFSV3)
1501                     errp = defaulterrp = nfsrv_v3errmap[nd->nd_procnum];
1502                 else if (nd->nd_repstat == EBADRPC)
1503                         return (txdr_unsigned(NFSERR_BADXDR));
1504                 else if (nd->nd_repstat == NFSERR_MINORVERMISMATCH ||
1505                          nd->nd_repstat == NFSERR_OPILLEGAL)
1506                         return (txdr_unsigned(nd->nd_repstat));
1507                 else if ((nd->nd_flag & ND_NFSV41) != 0) {
1508                         if (nd->nd_repstat == EOPNOTSUPP)
1509                                 nd->nd_repstat = NFSERR_NOTSUPP;
1510                         nd->nd_repstat = nfsrv_isannfserr(nd->nd_repstat);
1511                         return (txdr_unsigned(nd->nd_repstat));
1512                 } else
1513                     errp = defaulterrp = nfsrv_v4errmap[nd->nd_procnum];
1514                 while (*++errp)
1515                         if (*errp == nd->nd_repstat)
1516                                 return (txdr_unsigned(nd->nd_repstat));
1517                 return (txdr_unsigned(*defaulterrp));
1518         }
1519         if (nd->nd_repstat <= NFSERR_REMOTE)
1520                 return (txdr_unsigned(nfsrv_v2errmap[nd->nd_repstat - 1]));
1521         return (txdr_unsigned(NFSERR_IO));
1522 }
1523
1524 /*
1525  * Check to see if the error is a valid NFS one. If not, replace it with
1526  * NFSERR_IO.
1527  */
1528 static u_int32_t
1529 nfsrv_isannfserr(u_int32_t errval)
1530 {
1531
1532         if (errval == NFSERR_OK)
1533                 return (errval);
1534         if (errval >= NFSERR_BADHANDLE && errval <= NFSERR_DELEGREVOKED)
1535                 return (errval);
1536         if (errval > 0 && errval <= NFSERR_REMOTE)
1537                 return (nfsrv_v2errmap[errval - 1]);
1538         return (NFSERR_IO);
1539 }
1540
1541 /*
1542  * Check to see if setting a uid/gid is permitted when creating a new
1543  * file object. (Called when uid and/or gid is specified in the
1544  * settable attributes for V4.
1545  */
1546 APPLESTATIC int
1547 nfsrv_checkuidgid(struct nfsrv_descript *nd, struct nfsvattr *nvap)
1548 {
1549         int error = 0;
1550
1551         /*
1552          * If not setting either uid nor gid, it's OK.
1553          */
1554         if (NFSVNO_NOTSETUID(nvap) && NFSVNO_NOTSETGID(nvap))
1555                 goto out;
1556         if ((NFSVNO_ISSETUID(nvap) && nvap->na_uid == nfsrv_defaultuid &&
1557            enable_nobodycheck == 1)
1558             || (NFSVNO_ISSETGID(nvap) && nvap->na_gid == nfsrv_defaultgid &&
1559            enable_nogroupcheck == 1)) {
1560                 error = NFSERR_BADOWNER;
1561                 goto out;
1562         }
1563         if (nd->nd_cred->cr_uid == 0)
1564                 goto out;
1565         if ((NFSVNO_ISSETUID(nvap) && nvap->na_uid != nd->nd_cred->cr_uid) ||
1566             (NFSVNO_ISSETGID(nvap) && nvap->na_gid != nd->nd_cred->cr_gid &&
1567             !groupmember(nvap->na_gid, nd->nd_cred)))
1568                 error = NFSERR_PERM;
1569
1570 out:
1571         NFSEXITCODE2(error, nd);
1572         return (error);
1573 }
1574
1575 /*
1576  * and this routine fixes up the settable attributes for V4 if allowed
1577  * by nfsrv_checkuidgid().
1578  */
1579 APPLESTATIC void
1580 nfsrv_fixattr(struct nfsrv_descript *nd, vnode_t vp,
1581     struct nfsvattr *nvap, NFSACL_T *aclp, NFSPROC_T *p, nfsattrbit_t *attrbitp,
1582     struct nfsexstuff *exp)
1583 {
1584         int change = 0;
1585         struct nfsvattr nva;
1586         uid_t tuid;
1587         int error;
1588         nfsattrbit_t nattrbits;
1589
1590         /*
1591          * Maybe this should be done for V2 and 3 but it never has been
1592          * and nobody seems to be upset, so I think it's best not to change
1593          * the V2 and 3 semantics.
1594          */
1595         if ((nd->nd_flag & ND_NFSV4) == 0)
1596                 goto out;
1597         NFSVNO_ATTRINIT(&nva);
1598         NFSZERO_ATTRBIT(&nattrbits);
1599         tuid = nd->nd_cred->cr_uid;
1600         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_OWNER) &&
1601             NFSVNO_ISSETUID(nvap) &&
1602             nvap->na_uid != nd->nd_cred->cr_uid) {
1603                 if (nd->nd_cred->cr_uid == 0) {
1604                         nva.na_uid = nvap->na_uid;
1605                         change++;
1606                         NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_OWNER);
1607                 } else {
1608                         NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_OWNER);
1609                 }
1610         }
1611         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_TIMEACCESSSET) &&
1612             NFSVNO_ISSETATIME(nvap)) {
1613                 nva.na_atime = nvap->na_atime;
1614                 change++;
1615                 NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_TIMEACCESSSET);
1616         }
1617         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_TIMEMODIFYSET) &&
1618             NFSVNO_ISSETMTIME(nvap)) {
1619                 nva.na_mtime = nvap->na_mtime;
1620                 change++;
1621                 NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_TIMEMODIFYSET);
1622         }
1623         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_OWNERGROUP) &&
1624             NFSVNO_ISSETGID(nvap)) {
1625                 if (nvap->na_gid == nd->nd_cred->cr_gid ||
1626                     groupmember(nvap->na_gid, nd->nd_cred)) {
1627                         nd->nd_cred->cr_uid = 0;
1628                         nva.na_gid = nvap->na_gid;
1629                         change++;
1630                         NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_OWNERGROUP);
1631                 } else {
1632                         NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_OWNERGROUP);
1633                 }
1634         }
1635         if (change) {
1636                 error = nfsvno_setattr(vp, &nva, nd->nd_cred, p, exp);
1637                 if (error) {
1638                         NFSCLRALL_ATTRBIT(attrbitp, &nattrbits);
1639                 }
1640         }
1641         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_SIZE) &&
1642             NFSVNO_ISSETSIZE(nvap) && nvap->na_size != (u_quad_t)0) {
1643                 NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_SIZE);
1644         }
1645 #ifdef NFS4_ACL_EXTATTR_NAME
1646         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_ACL) &&
1647             nfsrv_useacl != 0 && aclp != NULL) {
1648                 if (aclp->acl_cnt > 0) {
1649                         error = nfsrv_setacl(vp, aclp, nd->nd_cred, p);
1650                         if (error) {
1651                                 NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_ACL);
1652                         }
1653                 }
1654         } else
1655 #endif
1656         NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_ACL);
1657         nd->nd_cred->cr_uid = tuid;
1658
1659 out:
1660         NFSEXITCODE2(0, nd);
1661 }
1662
1663 /*
1664  * Translate an ASCII hex digit to it's binary value. Return -1 if the
1665  * char isn't a hex digit.
1666  */
1667 static char
1668 nfsrv_hexdigit(char c, int *err)
1669 {
1670
1671         *err = 0;
1672         if (c >= '0' && c <= '9')
1673                 return (c - '0');
1674         if (c >= 'a' && c <= 'f')
1675                 return (c - 'a' + ((char)10));
1676         if (c >= 'A' && c <= 'F')
1677                 return (c - 'A' + ((char)10));
1678         /* Not valid ! */
1679         *err = 1;
1680         return (1);     /* BOGUS */
1681 }
1682
1683 /*
1684  * Check to see if NFSERR_MOVED can be returned for this op. Return 1 iff
1685  * it can be.
1686  */
1687 APPLESTATIC int
1688 nfsrv_errmoved(int op)
1689 {
1690         short *errp;
1691
1692         errp = nfsrv_v4errmap[op];
1693         while (*errp != 0) {
1694                 if (*errp == NFSERR_MOVED)
1695                         return (1);
1696                 errp++;
1697         }
1698         return (0);
1699 }
1700
1701 /*
1702  * Fill in attributes for a Referral.
1703  * (Return the number of bytes of XDR created.)
1704  */
1705 APPLESTATIC int
1706 nfsrv_putreferralattr(struct nfsrv_descript *nd, nfsattrbit_t *retbitp,
1707     struct nfsreferral *refp, int getattr, int *reterrp)
1708 {
1709         u_int32_t *tl, *retnump;
1710         u_char *cp, *cp2;
1711         int prefixnum, retnum = 0, i, len, bitpos, rderrbit = 0, nonrefbit = 0;
1712         int fslocationsbit = 0;
1713         nfsattrbit_t tmpbits, refbits;
1714
1715         NFSREFERRAL_ATTRBIT(&refbits);
1716         if (getattr)
1717                 NFSCLRBIT_ATTRBIT(&refbits, NFSATTRBIT_RDATTRERROR);
1718         else if (NFSISSET_ATTRBIT(retbitp, NFSATTRBIT_RDATTRERROR))
1719                 rderrbit = 1;
1720         if (NFSISSET_ATTRBIT(retbitp, NFSATTRBIT_FSLOCATIONS))
1721                 fslocationsbit = 1;
1722
1723         /*
1724          * Check for the case where unsupported referral attributes are
1725          * requested.
1726          */
1727         NFSSET_ATTRBIT(&tmpbits, retbitp);
1728         NFSCLRALL_ATTRBIT(&tmpbits, &refbits);
1729         if (NFSNONZERO_ATTRBIT(&tmpbits))
1730                 nonrefbit = 1;
1731
1732         if (nonrefbit && !fslocationsbit && (getattr || !rderrbit)) {
1733                 *reterrp = NFSERR_MOVED;
1734                 return (0);
1735         }
1736
1737         /*
1738          * Now we can fill in the attributes.
1739          */
1740         NFSSET_ATTRBIT(&tmpbits, retbitp);
1741         NFSCLRNOT_ATTRBIT(&tmpbits, &refbits);
1742
1743         /*
1744          * Put out the attribute bitmap for the ones being filled in
1745          * and get the field for the number of attributes returned.
1746          */
1747         prefixnum = nfsrv_putattrbit(nd, &tmpbits);
1748         NFSM_BUILD(retnump, u_int32_t *, NFSX_UNSIGNED);
1749         prefixnum += NFSX_UNSIGNED;
1750
1751         /*
1752          * Now, loop around filling in the attributes for each bit set.
1753          */
1754         for (bitpos = 0; bitpos < NFSATTRBIT_MAX; bitpos++) {
1755             if (NFSISSET_ATTRBIT(&tmpbits, bitpos)) {
1756                 switch (bitpos) {
1757                 case NFSATTRBIT_TYPE:
1758                         NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1759                         *tl = txdr_unsigned(NFDIR);
1760                         retnum += NFSX_UNSIGNED;
1761                         break;
1762                 case NFSATTRBIT_FSID:
1763                         NFSM_BUILD(tl, u_int32_t *, NFSX_V4FSID);
1764                         *tl++ = 0;
1765                         *tl++ = txdr_unsigned(NFSV4ROOT_FSID0);
1766                         *tl++ = 0;
1767                         *tl = txdr_unsigned(NFSV4ROOT_REFERRAL);
1768                         retnum += NFSX_V4FSID;
1769                         break;
1770                 case NFSATTRBIT_RDATTRERROR:
1771                         NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1772                         if (nonrefbit)
1773                                 *tl = txdr_unsigned(NFSERR_MOVED);
1774                         else
1775                                 *tl = 0;
1776                         retnum += NFSX_UNSIGNED;
1777                         break;
1778                 case NFSATTRBIT_FSLOCATIONS:
1779                         retnum += nfsm_strtom(nd, "/", 1);
1780                         NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1781                         *tl = txdr_unsigned(refp->nfr_srvcnt);
1782                         retnum += NFSX_UNSIGNED;
1783                         cp = refp->nfr_srvlist;
1784                         for (i = 0; i < refp->nfr_srvcnt; i++) {
1785                                 NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1786                                 *tl = txdr_unsigned(1);
1787                                 retnum += NFSX_UNSIGNED;
1788                                 cp2 = STRCHR(cp, ':');
1789                                 if (cp2 != NULL)
1790                                         len = cp2 - cp;
1791                                 else
1792                                         len = 1;
1793                                 retnum += nfsm_strtom(nd, cp, len);
1794                                 if (cp2 != NULL)
1795                                         cp = cp2 + 1;
1796                                 cp2 = STRCHR(cp, ',');
1797                                 if (cp2 != NULL)
1798                                         len = cp2 - cp;
1799                                 else
1800                                         len = strlen(cp);
1801                                 retnum += nfsm_strtom(nd, cp, len);
1802                                 if (cp2 != NULL)
1803                                         cp = cp2 + 1;
1804                         }
1805                         break;
1806                 case NFSATTRBIT_MOUNTEDONFILEID:
1807                         NFSM_BUILD(tl, u_int32_t *, NFSX_HYPER);
1808                         *tl++ = 0;
1809                         *tl = txdr_unsigned(refp->nfr_dfileno);
1810                         retnum += NFSX_HYPER;
1811                         break;
1812                 default:
1813                         printf("EEK! Bad V4 refattr bitpos=%d\n", bitpos);
1814                 };
1815             }
1816         }
1817         *retnump = txdr_unsigned(retnum);
1818         return (retnum + prefixnum);
1819 }
1820
1821 /*
1822  * Parse a file name out of a request.
1823  */
1824 APPLESTATIC int
1825 nfsrv_parsename(struct nfsrv_descript *nd, char *bufp, u_long *hashp,
1826     NFSPATHLEN_T *outlenp)
1827 {
1828         char *fromcp, *tocp, val = '\0';
1829         mbuf_t md;
1830         int i;
1831         int rem, len, error = 0, pubtype = 0, outlen = 0, percent = 0;
1832         char digit;
1833         u_int32_t *tl;
1834         u_long hash = 0;
1835
1836         if (hashp != NULL)
1837                 *hashp = 0;
1838         tocp = bufp;
1839         /*
1840          * For V4, check for lookup parent.
1841          * Otherwise, get the component name.
1842          */
1843         if ((nd->nd_flag & ND_NFSV4) && nd->nd_procnum == NFSV4OP_LOOKUPP) {
1844             *tocp++ = '.';
1845             hash += ((u_char)'.');
1846             *tocp++ = '.';
1847             hash += ((u_char)'.');
1848             outlen = 2;
1849         } else {
1850             /*
1851              * First, get the name length.
1852              */
1853             NFSM_DISSECT(tl, u_int32_t *, NFSX_UNSIGNED);
1854             len = fxdr_unsigned(int, *tl);
1855             if (len > NFS_MAXNAMLEN) {
1856                 nd->nd_repstat = NFSERR_NAMETOL;
1857                 error = 0;
1858                 goto nfsmout;
1859             } else if (len <= 0) {
1860                 nd->nd_repstat = NFSERR_INVAL;
1861                 error = 0;
1862                 goto nfsmout;
1863             }
1864
1865             /*
1866              * Now, copy the component name into the buffer.
1867              */
1868             fromcp = nd->nd_dpos;
1869             md = nd->nd_md;
1870             rem = NFSMTOD(md, caddr_t) + mbuf_len(md) - fromcp;
1871             for (i = 0; i < len; i++) {
1872                 while (rem == 0) {
1873                         md = mbuf_next(md);
1874                         if (md == NULL) {
1875                                 error = EBADRPC;
1876                                 goto nfsmout;
1877                         }
1878                         fromcp = NFSMTOD(md, caddr_t);
1879                         rem = mbuf_len(md);
1880                 }
1881                 if (*fromcp == '\0') {
1882                         nd->nd_repstat = EACCES;
1883                         error = 0;
1884                         goto nfsmout;
1885                 }
1886                 /*
1887                  * For lookups on the public filehandle, do some special
1888                  * processing on the name. (The public file handle is the
1889                  * root of the public file system for this server.)
1890                  */
1891                 if (nd->nd_flag & ND_PUBLOOKUP) {
1892                         /*
1893                          * If the first char is ASCII, it is a canonical
1894                          * path, otherwise it is a native path. (RFC2054
1895                          * doesn't actually state what it is if the first
1896                          * char isn't ASCII or 0x80, so I assume native.)
1897                          * pubtype == 1 -> native path
1898                          * pubtype == 2 -> canonical path
1899                          */
1900                         if (i == 0) {
1901                                 if (*fromcp & 0x80) {
1902                                         /*
1903                                          * Since RFC2054 doesn't indicate
1904                                          * that a native path of just 0x80
1905                                          * isn't allowed, I'll replace the
1906                                          * 0x80 with '/' instead of just
1907                                          * throwing it away.
1908                                          */
1909                                         *fromcp = '/';
1910                                         pubtype = 1;
1911                                 } else {
1912                                         pubtype = 2;
1913                                 }
1914                         }
1915                         /*
1916                          * '/' only allowed in a native path
1917                          */
1918                         if (*fromcp == '/' && pubtype != 1) {
1919                                 nd->nd_repstat = EACCES;
1920                                 error = 0;
1921                                 goto nfsmout;
1922                         }
1923
1924                         /*
1925                          * For the special case of 2 hex digits after a
1926                          * '%' in an absolute path, calculate the value.
1927                          * percent == 1 -> indicates "get first hex digit"
1928                          * percent == 2 -> indicates "get second hex digit"
1929                          */
1930                         if (percent > 0) {
1931                                 digit = nfsrv_hexdigit(*fromcp, &error);
1932                                 if (error) {
1933                                         nd->nd_repstat = EACCES;
1934                                         error = 0;
1935                                         goto nfsmout;
1936                                 }
1937                                 if (percent == 1) {
1938                                         val = (digit << 4);
1939                                         percent = 2;
1940                                 } else {
1941                                         val += digit;
1942                                         percent = 0;
1943                                         *tocp++ = val;
1944                                         hash += ((u_char)val);
1945                                         outlen++;
1946                                 }
1947                         } else {
1948                                 if (*fromcp == '%' && pubtype == 2) {
1949                                         /*
1950                                          * Must be followed by 2 hex digits
1951                                          */
1952                                         if ((len - i) < 3) {
1953                                                 nd->nd_repstat = EACCES;
1954                                                 error = 0;
1955                                                 goto nfsmout;
1956                                         }
1957                                         percent = 1;
1958                                 } else {
1959                                         *tocp++ = *fromcp;
1960                                         hash += ((u_char)*fromcp);
1961                                         outlen++;
1962                                 }
1963                         }
1964                 } else {
1965                         /*
1966                          * Normal, non lookup on public, name.
1967                          */
1968                         if (*fromcp == '/') {
1969                                 if (nd->nd_flag & ND_NFSV4)
1970                                         nd->nd_repstat = NFSERR_BADNAME;
1971                                 else
1972                                         nd->nd_repstat = EACCES;
1973                                 error = 0;
1974                                 goto nfsmout;
1975                         }
1976                         hash += ((u_char)*fromcp);
1977                         *tocp++ = *fromcp;
1978                         outlen++;
1979                 }
1980                 fromcp++;
1981                 rem--;
1982             }
1983             nd->nd_md = md;
1984             nd->nd_dpos = fromcp;
1985             i = NFSM_RNDUP(len) - len;
1986             if (i > 0) {
1987                 if (rem >= i) {
1988                         nd->nd_dpos += i;
1989                 } else {
1990                         error = nfsm_advance(nd, i, rem);
1991                         if (error)
1992                                 goto nfsmout;
1993                 }
1994             }
1995
1996             /*
1997              * For v4, don't allow lookups of '.' or '..' and
1998              * also check for non-utf8 strings.
1999              */
2000             if (nd->nd_flag & ND_NFSV4) {
2001                 if ((outlen == 1 && bufp[0] == '.') ||
2002                     (outlen == 2 && bufp[0] == '.' &&
2003                      bufp[1] == '.')) {
2004                     nd->nd_repstat = NFSERR_BADNAME;
2005                     error = 0;
2006                     goto nfsmout;
2007                 }
2008                 if (enable_checkutf8 == 1 &&
2009                     nfsrv_checkutf8((u_int8_t *)bufp, outlen)) {
2010                     nd->nd_repstat = NFSERR_INVAL;
2011                     error = 0;
2012                     goto nfsmout;
2013                 }
2014             }
2015         }
2016         *tocp = '\0';
2017         *outlenp = (size_t)outlen;
2018         if (hashp != NULL)
2019                 *hashp = hash;
2020 nfsmout:
2021         NFSEXITCODE2(error, nd);
2022         return (error);
2023 }
2024
2025 void
2026 nfsd_init(void)
2027 {
2028         int i;
2029         static int inited = 0;
2030
2031         if (inited)
2032                 return;
2033         inited = 1;
2034
2035         /*
2036          * Initialize client queues. Don't free/reinitialize
2037          * them when nfsds are restarted.
2038          */
2039         for (i = 0; i < NFSCLIENTHASHSIZE; i++)
2040                 LIST_INIT(&nfsclienthash[i]);
2041         for (i = 0; i < NFSLOCKHASHSIZE; i++)
2042                 LIST_INIT(&nfslockhash[i]);
2043         for (i = 0; i < NFSSESSIONHASHSIZE; i++)
2044                 LIST_INIT(&nfssessionhash[i].list);
2045
2046         /* and the v2 pubfh should be all zeros */
2047         NFSBZERO(nfs_v2pubfh, NFSX_V2FH);
2048 }
2049
2050 /*
2051  * Check the v4 root exports.
2052  * Return 0 if ok, 1 otherwise.
2053  */
2054 int
2055 nfsd_checkrootexp(struct nfsrv_descript *nd)
2056 {
2057
2058         if ((nd->nd_flag & (ND_GSS | ND_EXAUTHSYS)) == ND_EXAUTHSYS)
2059                 return (0);
2060         if ((nd->nd_flag & (ND_GSSINTEGRITY | ND_EXGSSINTEGRITY)) ==
2061             (ND_GSSINTEGRITY | ND_EXGSSINTEGRITY))
2062                 return (0);
2063         if ((nd->nd_flag & (ND_GSSPRIVACY | ND_EXGSSPRIVACY)) ==
2064             (ND_GSSPRIVACY | ND_EXGSSPRIVACY))
2065                 return (0);
2066         if ((nd->nd_flag & (ND_GSS | ND_GSSINTEGRITY | ND_GSSPRIVACY |
2067              ND_EXGSS)) == (ND_GSS | ND_EXGSS))
2068                 return (0);
2069         return (1);
2070 }
2071
2072 /*
2073  * Parse the first part of an NFSv4 compound to find out what the minor
2074  * version# is.
2075  */
2076 void
2077 nfsd_getminorvers(struct nfsrv_descript *nd, u_char *tag, u_char **tagstrp,
2078     int *taglenp, u_int32_t *minversp)
2079 {
2080         uint32_t *tl;
2081         int error = 0, taglen = -1;
2082         u_char *tagstr = NULL;
2083
2084         NFSM_DISSECT(tl, uint32_t *, NFSX_UNSIGNED);
2085         taglen = fxdr_unsigned(int, *tl);
2086         if (taglen < 0 || taglen > NFSV4_OPAQUELIMIT) {
2087                 error = EBADRPC;
2088                 goto nfsmout;
2089         }
2090         if (taglen <= NFSV4_SMALLSTR)
2091                 tagstr = tag;
2092         else
2093                 tagstr = malloc(taglen + 1, M_TEMP, M_WAITOK);
2094         error = nfsrv_mtostr(nd, tagstr, taglen);
2095         if (error != 0)
2096                 goto nfsmout;
2097         NFSM_DISSECT(tl, uint32_t *, NFSX_UNSIGNED);
2098         *minversp = fxdr_unsigned(u_int32_t, *tl);
2099         *tagstrp = tagstr;
2100         if (*minversp == NFSV41_MINORVERSION)
2101                 nd->nd_flag |= ND_NFSV41;
2102 nfsmout:
2103         if (error != 0) {
2104                 if (tagstr != NULL && taglen > NFSV4_SMALLSTR)
2105                         free(tagstr, M_TEMP);
2106                 taglen = -1;
2107         }
2108         *taglenp = taglen;
2109 }
2110