sys/fs/nfsserver/nfs_nfsdsubs.c

   1 /*-
   2  * Copyright (c) 1989, 1993
   3  *      The Regents of the University of California.  All rights reserved.
   4  *
   5  * This code is derived from software contributed to Berkeley by
   6  * Rick Macklem at The University of Guelph.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  * 1. Redistributions of source code must retain the above copyright
  12  *    notice, this list of conditions and the following disclaimer.
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  * 4. Neither the name of the University nor the names of its contributors
  17  *    may be used to endorse or promote products derived from this software
  18  *    without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  30  * SUCH DAMAGE.
  31  *
  32  */
  33
  34 #include <sys/cdefs.h>
  35 __FBSDID("$FreeBSD$");
  36
  37 #ifndef APPLEKEXT
  38 /*
  39  * These functions support the macros and help fiddle mbuf chains for
  40  * the nfs op functions. They do things like create the rpc header and
  41  * copy data between mbuf chains and uio lists.
  42  */
  43 #include <fs/nfs/nfsport.h>
  44
  45 extern u_int32_t newnfs_true, newnfs_false;
  46 extern int nfs_pubfhset;
  47 extern struct nfsclienthashhead nfsclienthash[NFSCLIENTHASHSIZE];
  48 extern struct nfslockhashhead nfslockhash[NFSLOCKHASHSIZE];
  49 extern int nfsrv_useacl;
  50 extern uid_t nfsrv_defaultuid;
  51 extern gid_t nfsrv_defaultgid;
  52
  53 char nfs_v2pubfh[NFSX_V2FH];
  54 static nfstype newnfsv2_type[9] = { NFNON, NFREG, NFDIR, NFBLK, NFCHR, NFLNK,
  55     NFNON, NFCHR, NFNON };
  56 extern nfstype nfsv34_type[9];
  57 #endif  /* !APPLEKEXT */
  58
  59 SYSCTL_DECL(_vfs_nfsd);
  60
  61 static int      disable_checkutf8 = 0;
  62 SYSCTL_INT(_vfs_nfsd, OID_AUTO, disable_checkutf8, CTLFLAG_RW,
  63     &disable_checkutf8, 0,
  64     "Disable the NFSv4 check for a UTF8 compliant name");
  65
  66 static char nfsrv_hexdigit(char, int *);
  67
  68 /*
  69  * Maps errno values to nfs error numbers.
  70  * Use NFSERR_IO as the catch all for ones not specifically defined in
  71  * RFC 1094.
  72  */
  73 static u_char nfsrv_v2errmap[ELAST] = {
  74   NFSERR_PERM,  NFSERR_NOENT,   NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  75   NFSERR_NXIO,  NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  76   NFSERR_IO,    NFSERR_IO,      NFSERR_ACCES,   NFSERR_IO,      NFSERR_IO,
  77   NFSERR_IO,    NFSERR_EXIST,   NFSERR_IO,      NFSERR_NODEV,   NFSERR_NOTDIR,
  78   NFSERR_ISDIR, NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  79   NFSERR_IO,    NFSERR_FBIG,    NFSERR_NOSPC,   NFSERR_IO,      NFSERR_ROFS,
  80   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  81   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  82   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  83   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  84   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  85   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  86   NFSERR_IO,    NFSERR_IO,      NFSERR_NAMETOL, NFSERR_IO,      NFSERR_IO,
  87   NFSERR_NOTEMPTY, NFSERR_IO,   NFSERR_IO,      NFSERR_DQUOT,   NFSERR_STALE,
  88   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  89   NFSERR_IO,    NFSERR_IO,      NFSERR_IO,      NFSERR_IO,      NFSERR_IO,
  90   NFSERR_IO,
  91 };
  92
  93 /*
  94  * Maps errno values to nfs error numbers.
  95  * Although it is not obvious whether or not NFS clients really care if
  96  * a returned error value is in the specified list for the procedure, the
  97  * safest thing to do is filter them appropriately. For Version 2, the
  98  * X/Open XNFS document is the only specification that defines error values
  99  * for each RPC (The RFC simply lists all possible error values for all RPCs),
 100  * so I have decided to not do this for Version 2.
 101  * The first entry is the default error return and the rest are the valid
 102  * errors for that RPC in increasing numeric order.
 103  */
 104 static short nfsv3err_null[] = {
 105         0,
 106         0,
 107 };
 108
 109 static short nfsv3err_getattr[] = {
 110         NFSERR_IO,
 111         NFSERR_IO,
 112         NFSERR_STALE,
 113         NFSERR_BADHANDLE,
 114         NFSERR_SERVERFAULT,
 115         NFSERR_DELAY,
 116         0,
 117 };
 118
 119 static short nfsv3err_setattr[] = {
 120         NFSERR_IO,
 121         NFSERR_ACCES,
 122         NFSERR_PERM,
 123         NFSERR_IO,
 124         NFSERR_INVAL,
 125         NFSERR_NOSPC,
 126         NFSERR_ROFS,
 127         NFSERR_DQUOT,
 128         NFSERR_STALE,
 129         NFSERR_BADHANDLE,
 130         NFSERR_NOT_SYNC,
 131         NFSERR_SERVERFAULT,
 132         NFSERR_DELAY,
 133         0,
 134 };
 135
 136 static short nfsv3err_lookup[] = {
 137         NFSERR_IO,
 138         NFSERR_NOENT,
 139         NFSERR_ACCES,
 140         NFSERR_NAMETOL,
 141         NFSERR_IO,
 142         NFSERR_NOTDIR,
 143         NFSERR_STALE,
 144         NFSERR_BADHANDLE,
 145         NFSERR_SERVERFAULT,
 146         NFSERR_DELAY,
 147         0,
 148 };
 149
 150 static short nfsv3err_access[] = {
 151         NFSERR_IO,
 152         NFSERR_IO,
 153         NFSERR_STALE,
 154         NFSERR_BADHANDLE,
 155         NFSERR_SERVERFAULT,
 156         NFSERR_DELAY,
 157         0,
 158 };
 159
 160 static short nfsv3err_readlink[] = {
 161         NFSERR_IO,
 162         NFSERR_IO,
 163         NFSERR_ACCES,
 164         NFSERR_INVAL,
 165         NFSERR_STALE,
 166         NFSERR_BADHANDLE,
 167         NFSERR_NOTSUPP,
 168         NFSERR_SERVERFAULT,
 169         NFSERR_DELAY,
 170         0,
 171 };
 172
 173 static short nfsv3err_read[] = {
 174         NFSERR_IO,
 175         NFSERR_IO,
 176         NFSERR_NXIO,
 177         NFSERR_ACCES,
 178         NFSERR_INVAL,
 179         NFSERR_STALE,
 180         NFSERR_BADHANDLE,
 181         NFSERR_SERVERFAULT,
 182         NFSERR_DELAY,
 183         0,
 184 };
 185
 186 static short nfsv3err_write[] = {
 187         NFSERR_IO,
 188         NFSERR_IO,
 189         NFSERR_ACCES,
 190         NFSERR_NOSPC,
 191         NFSERR_INVAL,
 192         NFSERR_FBIG,
 193         NFSERR_ROFS,
 194         NFSERR_DQUOT,
 195         NFSERR_STALE,
 196         NFSERR_BADHANDLE,
 197         NFSERR_SERVERFAULT,
 198         NFSERR_DELAY,
 199         0,
 200 };
 201
 202 static short nfsv3err_create[] = {
 203         NFSERR_IO,
 204         NFSERR_EXIST,
 205         NFSERR_NAMETOL,
 206         NFSERR_ACCES,
 207         NFSERR_IO,
 208         NFSERR_NOTDIR,
 209         NFSERR_NOSPC,
 210         NFSERR_ROFS,
 211         NFSERR_DQUOT,
 212         NFSERR_STALE,
 213         NFSERR_BADHANDLE,
 214         NFSERR_NOTSUPP,
 215         NFSERR_SERVERFAULT,
 216         NFSERR_DELAY,
 217         0,
 218 };
 219
 220 static short nfsv3err_mkdir[] = {
 221         NFSERR_IO,
 222         NFSERR_EXIST,
 223         NFSERR_ACCES,
 224         NFSERR_NAMETOL,
 225         NFSERR_IO,
 226         NFSERR_NOTDIR,
 227         NFSERR_NOSPC,
 228         NFSERR_ROFS,
 229         NFSERR_DQUOT,
 230         NFSERR_STALE,
 231         NFSERR_BADHANDLE,
 232         NFSERR_NOTSUPP,
 233         NFSERR_SERVERFAULT,
 234         NFSERR_DELAY,
 235         0,
 236 };
 237
 238 static short nfsv3err_symlink[] = {
 239         NFSERR_IO,
 240         NFSERR_ACCES,
 241         NFSERR_EXIST,
 242         NFSERR_NAMETOL,
 243         NFSERR_NOSPC,
 244         NFSERR_IO,
 245         NFSERR_NOTDIR,
 246         NFSERR_ROFS,
 247         NFSERR_DQUOT,
 248         NFSERR_STALE,
 249         NFSERR_BADHANDLE,
 250         NFSERR_NOTSUPP,
 251         NFSERR_SERVERFAULT,
 252         NFSERR_DELAY,
 253         0,
 254 };
 255
 256 static short nfsv3err_mknod[] = {
 257         NFSERR_IO,
 258         NFSERR_ACCES,
 259         NFSERR_EXIST,
 260         NFSERR_NAMETOL,
 261         NFSERR_NOSPC,
 262         NFSERR_IO,
 263         NFSERR_NOTDIR,
 264         NFSERR_ROFS,
 265         NFSERR_DQUOT,
 266         NFSERR_STALE,
 267         NFSERR_BADHANDLE,
 268         NFSERR_NOTSUPP,
 269         NFSERR_SERVERFAULT,
 270         NFSERR_DELAY,
 271         NFSERR_BADTYPE,
 272         0,
 273 };
 274
 275 static short nfsv3err_remove[] = {
 276         NFSERR_IO,
 277         NFSERR_NOENT,
 278         NFSERR_ACCES,
 279         NFSERR_NAMETOL,
 280         NFSERR_IO,
 281         NFSERR_NOTDIR,
 282         NFSERR_ROFS,
 283         NFSERR_STALE,
 284         NFSERR_BADHANDLE,
 285         NFSERR_SERVERFAULT,
 286         NFSERR_DELAY,
 287         0,
 288 };
 289
 290 static short nfsv3err_rmdir[] = {
 291         NFSERR_IO,
 292         NFSERR_NOENT,
 293         NFSERR_ACCES,
 294         NFSERR_NOTDIR,
 295         NFSERR_NAMETOL,
 296         NFSERR_IO,
 297         NFSERR_EXIST,
 298         NFSERR_INVAL,
 299         NFSERR_ROFS,
 300         NFSERR_NOTEMPTY,
 301         NFSERR_STALE,
 302         NFSERR_BADHANDLE,
 303         NFSERR_NOTSUPP,
 304         NFSERR_SERVERFAULT,
 305         NFSERR_DELAY,
 306         0,
 307 };
 308
 309 static short nfsv3err_rename[] = {
 310         NFSERR_IO,
 311         NFSERR_NOENT,
 312         NFSERR_ACCES,
 313         NFSERR_EXIST,
 314         NFSERR_NAMETOL,
 315         NFSERR_XDEV,
 316         NFSERR_IO,
 317         NFSERR_NOTDIR,
 318         NFSERR_ISDIR,
 319         NFSERR_INVAL,
 320         NFSERR_NOSPC,
 321         NFSERR_ROFS,
 322         NFSERR_MLINK,
 323         NFSERR_NOTEMPTY,
 324         NFSERR_DQUOT,
 325         NFSERR_STALE,
 326         NFSERR_BADHANDLE,
 327         NFSERR_NOTSUPP,
 328         NFSERR_SERVERFAULT,
 329         NFSERR_DELAY,
 330         0,
 331 };
 332
 333 static short nfsv3err_link[] = {
 334         NFSERR_IO,
 335         NFSERR_ACCES,
 336         NFSERR_EXIST,
 337         NFSERR_NAMETOL,
 338         NFSERR_IO,
 339         NFSERR_XDEV,
 340         NFSERR_NOTDIR,
 341         NFSERR_INVAL,
 342         NFSERR_NOSPC,
 343         NFSERR_ROFS,
 344         NFSERR_MLINK,
 345         NFSERR_DQUOT,
 346         NFSERR_STALE,
 347         NFSERR_BADHANDLE,
 348         NFSERR_NOTSUPP,
 349         NFSERR_SERVERFAULT,
 350         NFSERR_DELAY,
 351         0,
 352 };
 353
 354 static short nfsv3err_readdir[] = {
 355         NFSERR_IO,
 356         NFSERR_ACCES,
 357         NFSERR_NOTDIR,
 358         NFSERR_IO,
 359         NFSERR_STALE,
 360         NFSERR_BADHANDLE,
 361         NFSERR_BAD_COOKIE,
 362         NFSERR_TOOSMALL,
 363         NFSERR_SERVERFAULT,
 364         NFSERR_DELAY,
 365         0,
 366 };
 367
 368 static short nfsv3err_readdirplus[] = {
 369         NFSERR_IO,
 370         NFSERR_ACCES,
 371         NFSERR_NOTDIR,
 372         NFSERR_IO,
 373         NFSERR_STALE,
 374         NFSERR_BADHANDLE,
 375         NFSERR_BAD_COOKIE,
 376         NFSERR_NOTSUPP,
 377         NFSERR_TOOSMALL,
 378         NFSERR_SERVERFAULT,
 379         NFSERR_DELAY,
 380         0,
 381 };
 382
 383 static short nfsv3err_fsstat[] = {
 384         NFSERR_IO,
 385         NFSERR_IO,
 386         NFSERR_STALE,
 387         NFSERR_BADHANDLE,
 388         NFSERR_SERVERFAULT,
 389         NFSERR_DELAY,
 390         0,
 391 };
 392
 393 static short nfsv3err_fsinfo[] = {
 394         NFSERR_STALE,
 395         NFSERR_STALE,
 396         NFSERR_BADHANDLE,
 397         NFSERR_SERVERFAULT,
 398         NFSERR_DELAY,
 399         0,
 400 };
 401
 402 static short nfsv3err_pathconf[] = {
 403         NFSERR_STALE,
 404         NFSERR_STALE,
 405         NFSERR_BADHANDLE,
 406         NFSERR_SERVERFAULT,
 407         NFSERR_DELAY,
 408         0,
 409 };
 410
 411 static short nfsv3err_commit[] = {
 412         NFSERR_IO,
 413         NFSERR_IO,
 414         NFSERR_STALE,
 415         NFSERR_BADHANDLE,
 416         NFSERR_SERVERFAULT,
 417         NFSERR_DELAY,
 418         0,
 419 };
 420
 421 static short *nfsrv_v3errmap[] = {
 422         nfsv3err_null,
 423         nfsv3err_getattr,
 424         nfsv3err_setattr,
 425         nfsv3err_lookup,
 426         nfsv3err_access,
 427         nfsv3err_readlink,
 428         nfsv3err_read,
 429         nfsv3err_write,
 430         nfsv3err_create,
 431         nfsv3err_mkdir,
 432         nfsv3err_symlink,
 433         nfsv3err_mknod,
 434         nfsv3err_remove,
 435         nfsv3err_rmdir,
 436         nfsv3err_rename,
 437         nfsv3err_link,
 438         nfsv3err_readdir,
 439         nfsv3err_readdirplus,
 440         nfsv3err_fsstat,
 441         nfsv3err_fsinfo,
 442         nfsv3err_pathconf,
 443         nfsv3err_commit,
 444 };
 445
 446 /*
 447  * And the same for V4.
 448  */
 449 static short nfsv4err_null[] = {
 450         0,
 451         0,
 452 };
 453
 454 static short nfsv4err_access[] = {
 455         NFSERR_IO,
 456         NFSERR_ACCES,
 457         NFSERR_BADHANDLE,
 458         NFSERR_BADXDR,
 459         NFSERR_DELAY,
 460         NFSERR_FHEXPIRED,
 461         NFSERR_INVAL,
 462         NFSERR_IO,
 463         NFSERR_MOVED,
 464         NFSERR_NOFILEHANDLE,
 465         NFSERR_RESOURCE,
 466         NFSERR_SERVERFAULT,
 467         NFSERR_STALE,
 468         0,
 469 };
 470
 471 static short nfsv4err_close[] = {
 472         NFSERR_EXPIRED,
 473         NFSERR_ADMINREVOKED,
 474         NFSERR_BADHANDLE,
 475         NFSERR_BADSEQID,
 476         NFSERR_BADSTATEID,
 477         NFSERR_BADXDR,
 478         NFSERR_DELAY,
 479         NFSERR_EXPIRED,
 480         NFSERR_FHEXPIRED,
 481         NFSERR_INVAL,
 482         NFSERR_ISDIR,
 483         NFSERR_LEASEMOVED,
 484         NFSERR_LOCKSHELD,
 485         NFSERR_MOVED,
 486         NFSERR_NOFILEHANDLE,
 487         NFSERR_OLDSTATEID,
 488         NFSERR_RESOURCE,
 489         NFSERR_SERVERFAULT,
 490         NFSERR_STALE,
 491         NFSERR_STALESTATEID,
 492         0,
 493 };
 494
 495 static short nfsv4err_commit[] = {
 496         NFSERR_IO,
 497         NFSERR_ACCES,
 498         NFSERR_BADHANDLE,
 499         NFSERR_BADXDR,
 500         NFSERR_FHEXPIRED,
 501         NFSERR_INVAL,
 502         NFSERR_IO,
 503         NFSERR_ISDIR,
 504         NFSERR_MOVED,
 505         NFSERR_NOFILEHANDLE,
 506         NFSERR_RESOURCE,
 507         NFSERR_ROFS,
 508         NFSERR_SERVERFAULT,
 509         NFSERR_STALE,
 510         0,
 511 };
 512
 513 static short nfsv4err_create[] = {
 514         NFSERR_IO,
 515         NFSERR_ACCES,
 516         NFSERR_ATTRNOTSUPP,
 517         NFSERR_BADCHAR,
 518         NFSERR_BADHANDLE,
 519         NFSERR_BADNAME,
 520         NFSERR_BADOWNER,
 521         NFSERR_BADTYPE,
 522         NFSERR_BADXDR,
 523         NFSERR_DELAY,
 524         NFSERR_DQUOT,
 525         NFSERR_EXIST,
 526         NFSERR_FHEXPIRED,
 527         NFSERR_INVAL,
 528         NFSERR_IO,
 529         NFSERR_MOVED,
 530         NFSERR_NAMETOL,
 531         NFSERR_NOFILEHANDLE,
 532         NFSERR_NOSPC,
 533         NFSERR_NOTDIR,
 534         NFSERR_PERM,
 535         NFSERR_RESOURCE,
 536         NFSERR_ROFS,
 537         NFSERR_SERVERFAULT,
 538         NFSERR_STALE,
 539         0,
 540 };
 541
 542 static short nfsv4err_delegpurge[] = {
 543         NFSERR_SERVERFAULT,
 544         NFSERR_BADXDR,
 545         NFSERR_NOTSUPP,
 546         NFSERR_LEASEMOVED,
 547         NFSERR_MOVED,
 548         NFSERR_RESOURCE,
 549         NFSERR_SERVERFAULT,
 550         NFSERR_STALECLIENTID,
 551         0,
 552 };
 553
 554 static short nfsv4err_delegreturn[] = {
 555         NFSERR_SERVERFAULT,
 556         NFSERR_ADMINREVOKED,
 557         NFSERR_BADSTATEID,
 558         NFSERR_BADXDR,
 559         NFSERR_EXPIRED,
 560         NFSERR_INVAL,
 561         NFSERR_LEASEMOVED,
 562         NFSERR_MOVED,
 563         NFSERR_NOFILEHANDLE,
 564         NFSERR_NOTSUPP,
 565         NFSERR_OLDSTATEID,
 566         NFSERR_RESOURCE,
 567         NFSERR_SERVERFAULT,
 568         NFSERR_STALE,
 569         NFSERR_STALESTATEID,
 570         0,
 571 };
 572
 573 static short nfsv4err_getattr[] = {
 574         NFSERR_IO,
 575         NFSERR_ACCES,
 576         NFSERR_BADHANDLE,
 577         NFSERR_BADXDR,
 578         NFSERR_DELAY,
 579         NFSERR_FHEXPIRED,
 580         NFSERR_INVAL,
 581         NFSERR_IO,
 582         NFSERR_MOVED,
 583         NFSERR_NOFILEHANDLE,
 584         NFSERR_RESOURCE,
 585         NFSERR_SERVERFAULT,
 586         NFSERR_STALE,
 587         0,
 588 };
 589
 590 static short nfsv4err_getfh[] = {
 591         NFSERR_BADHANDLE,
 592         NFSERR_BADHANDLE,
 593         NFSERR_FHEXPIRED,
 594         NFSERR_MOVED,
 595         NFSERR_NOFILEHANDLE,
 596         NFSERR_RESOURCE,
 597         NFSERR_SERVERFAULT,
 598         NFSERR_STALE,
 599         0,
 600 };
 601
 602 static short nfsv4err_link[] = {
 603         NFSERR_IO,
 604         NFSERR_ACCES,
 605         NFSERR_BADCHAR,
 606         NFSERR_BADHANDLE,
 607         NFSERR_BADNAME,
 608         NFSERR_BADXDR,
 609         NFSERR_DELAY,
 610         NFSERR_DQUOT,
 611         NFSERR_EXIST,
 612         NFSERR_FHEXPIRED,
 613         NFSERR_FILEOPEN,
 614         NFSERR_INVAL,
 615         NFSERR_IO,
 616         NFSERR_ISDIR,
 617         NFSERR_MLINK,
 618         NFSERR_MOVED,
 619         NFSERR_NAMETOL,
 620         NFSERR_NOENT,
 621         NFSERR_NOFILEHANDLE,
 622         NFSERR_NOSPC,
 623         NFSERR_NOTDIR,
 624         NFSERR_NOTSUPP,
 625         NFSERR_RESOURCE,
 626         NFSERR_ROFS,
 627         NFSERR_SERVERFAULT,
 628         NFSERR_STALE,
 629         NFSERR_WRONGSEC,
 630         NFSERR_XDEV,
 631         0,
 632 };
 633
 634 static short nfsv4err_lock[] = {
 635         NFSERR_SERVERFAULT,
 636         NFSERR_ACCES,
 637         NFSERR_ADMINREVOKED,
 638         NFSERR_BADHANDLE,
 639         NFSERR_BADRANGE,
 640         NFSERR_BADSEQID,
 641         NFSERR_BADSTATEID,
 642         NFSERR_BADXDR,
 643         NFSERR_DEADLOCK,
 644         NFSERR_DELAY,
 645         NFSERR_DENIED,
 646         NFSERR_EXPIRED,
 647         NFSERR_FHEXPIRED,
 648         NFSERR_GRACE,
 649         NFSERR_INVAL,
 650         NFSERR_ISDIR,
 651         NFSERR_LEASEMOVED,
 652         NFSERR_LOCKNOTSUPP,
 653         NFSERR_LOCKRANGE,
 654         NFSERR_MOVED,
 655         NFSERR_NOFILEHANDLE,
 656         NFSERR_NOGRACE,
 657         NFSERR_OLDSTATEID,
 658         NFSERR_OPENMODE,
 659         NFSERR_RECLAIMBAD,
 660         NFSERR_RECLAIMCONFLICT,
 661         NFSERR_RESOURCE,
 662         NFSERR_SERVERFAULT,
 663         NFSERR_STALE,
 664         NFSERR_STALECLIENTID,
 665         NFSERR_STALESTATEID,
 666         0,
 667 };
 668
 669 static short nfsv4err_lockt[] = {
 670         NFSERR_SERVERFAULT,
 671         NFSERR_ACCES,
 672         NFSERR_BADHANDLE,
 673         NFSERR_BADRANGE,
 674         NFSERR_BADXDR,
 675         NFSERR_DELAY,
 676         NFSERR_DENIED,
 677         NFSERR_FHEXPIRED,
 678         NFSERR_GRACE,
 679         NFSERR_INVAL,
 680         NFSERR_ISDIR,
 681         NFSERR_LEASEMOVED,
 682         NFSERR_LOCKRANGE,
 683         NFSERR_MOVED,
 684         NFSERR_NOFILEHANDLE,
 685         NFSERR_RESOURCE,
 686         NFSERR_SERVERFAULT,
 687         NFSERR_STALE,
 688         NFSERR_STALECLIENTID,
 689         0,
 690 };
 691
 692 static short nfsv4err_locku[] = {
 693         NFSERR_SERVERFAULT,
 694         NFSERR_ACCES,
 695         NFSERR_ADMINREVOKED,
 696         NFSERR_BADHANDLE,
 697         NFSERR_BADRANGE,
 698         NFSERR_BADSEQID,
 699         NFSERR_BADSTATEID,
 700         NFSERR_BADXDR,
 701         NFSERR_EXPIRED,
 702         NFSERR_FHEXPIRED,
 703         NFSERR_GRACE,
 704         NFSERR_INVAL,
 705         NFSERR_ISDIR,
 706         NFSERR_LEASEMOVED,
 707         NFSERR_LOCKRANGE,
 708         NFSERR_MOVED,
 709         NFSERR_NOFILEHANDLE,
 710         NFSERR_OLDSTATEID,
 711         NFSERR_RESOURCE,
 712         NFSERR_SERVERFAULT,
 713         NFSERR_STALE,
 714         NFSERR_STALESTATEID,
 715         0,
 716 };
 717
 718 static short nfsv4err_lookup[] = {
 719         NFSERR_IO,
 720         NFSERR_ACCES,
 721         NFSERR_BADCHAR,
 722         NFSERR_BADHANDLE,
 723         NFSERR_BADNAME,
 724         NFSERR_BADXDR,
 725         NFSERR_FHEXPIRED,
 726         NFSERR_INVAL,
 727         NFSERR_IO,
 728         NFSERR_MOVED,
 729         NFSERR_NAMETOL,
 730         NFSERR_NOENT,
 731         NFSERR_NOFILEHANDLE,
 732         NFSERR_NOTDIR,
 733         NFSERR_RESOURCE,
 734         NFSERR_SERVERFAULT,
 735         NFSERR_STALE,
 736         NFSERR_SYMLINK,
 737         NFSERR_WRONGSEC,
 738         0,
 739 };
 740
 741 static short nfsv4err_lookupp[] = {
 742         NFSERR_IO,
 743         NFSERR_ACCES,
 744         NFSERR_BADHANDLE,
 745         NFSERR_FHEXPIRED,
 746         NFSERR_IO,
 747         NFSERR_MOVED,
 748         NFSERR_NOENT,
 749         NFSERR_NOFILEHANDLE,
 750         NFSERR_NOTDIR,
 751         NFSERR_RESOURCE,
 752         NFSERR_SERVERFAULT,
 753         NFSERR_STALE,
 754         0,
 755 };
 756
 757 static short nfsv4err_nverify[] = {
 758         NFSERR_IO,
 759         NFSERR_ACCES,
 760         NFSERR_ATTRNOTSUPP,
 761         NFSERR_BADCHAR,
 762         NFSERR_BADHANDLE,
 763         NFSERR_BADXDR,
 764         NFSERR_DELAY,
 765         NFSERR_FHEXPIRED,
 766         NFSERR_INVAL,
 767         NFSERR_IO,
 768         NFSERR_MOVED,
 769         NFSERR_NOFILEHANDLE,
 770         NFSERR_RESOURCE,
 771         NFSERR_SAME,
 772         NFSERR_SERVERFAULT,
 773         NFSERR_STALE,
 774         0,
 775 };
 776
 777 static short nfsv4err_open[] = {
 778         NFSERR_IO,
 779         NFSERR_ACCES,
 780         NFSERR_ADMINREVOKED,
 781         NFSERR_ATTRNOTSUPP,
 782         NFSERR_BADCHAR,
 783         NFSERR_BADHANDLE,
 784         NFSERR_BADNAME,
 785         NFSERR_BADOWNER,
 786         NFSERR_BADSEQID,
 787         NFSERR_BADXDR,
 788         NFSERR_DELAY,
 789         NFSERR_DQUOT,
 790         NFSERR_EXIST,
 791         NFSERR_EXPIRED,
 792         NFSERR_FHEXPIRED,
 793         NFSERR_GRACE,
 794         NFSERR_IO,
 795         NFSERR_INVAL,
 796         NFSERR_ISDIR,
 797         NFSERR_LEASEMOVED,
 798         NFSERR_MOVED,
 799         NFSERR_NAMETOL,
 800         NFSERR_NOENT,
 801         NFSERR_NOFILEHANDLE,
 802         NFSERR_NOGRACE,
 803         NFSERR_NOSPC,
 804         NFSERR_NOTDIR,
 805         NFSERR_NOTSUPP,
 806         NFSERR_PERM,
 807         NFSERR_RECLAIMBAD,
 808         NFSERR_RECLAIMCONFLICT,
 809         NFSERR_RESOURCE,
 810         NFSERR_ROFS,
 811         NFSERR_SERVERFAULT,
 812         NFSERR_SHAREDENIED,
 813         NFSERR_STALE,
 814         NFSERR_STALECLIENTID,
 815         NFSERR_SYMLINK,
 816         NFSERR_WRONGSEC,
 817         0,
 818 };
 819
 820 static short nfsv4err_openattr[] = {
 821         NFSERR_IO,
 822         NFSERR_ACCES,
 823         NFSERR_BADHANDLE,
 824         NFSERR_BADXDR,
 825         NFSERR_DELAY,
 826         NFSERR_DQUOT,
 827         NFSERR_FHEXPIRED,
 828         NFSERR_IO,
 829         NFSERR_MOVED,
 830         NFSERR_NOENT,
 831         NFSERR_NOFILEHANDLE,
 832         NFSERR_NOSPC,
 833         NFSERR_NOTSUPP,
 834         NFSERR_RESOURCE,
 835         NFSERR_ROFS,
 836         NFSERR_SERVERFAULT,
 837         NFSERR_STALE,
 838         0,
 839 };
 840
 841 static short nfsv4err_openconfirm[] = {
 842         NFSERR_SERVERFAULT,
 843         NFSERR_ADMINREVOKED,
 844         NFSERR_BADHANDLE,
 845         NFSERR_BADSEQID,
 846         NFSERR_BADSTATEID,
 847         NFSERR_BADXDR,
 848         NFSERR_EXPIRED,
 849         NFSERR_FHEXPIRED,
 850         NFSERR_INVAL,
 851         NFSERR_ISDIR,
 852         NFSERR_MOVED,
 853         NFSERR_NOFILEHANDLE,
 854         NFSERR_OLDSTATEID,
 855         NFSERR_RESOURCE,
 856         NFSERR_SERVERFAULT,
 857         NFSERR_STALE,
 858         NFSERR_STALESTATEID,
 859         0,
 860 };
 861
 862 static short nfsv4err_opendowngrade[] = {
 863         NFSERR_SERVERFAULT,
 864         NFSERR_ADMINREVOKED,
 865         NFSERR_BADHANDLE,
 866         NFSERR_BADSEQID,
 867         NFSERR_BADSTATEID,
 868         NFSERR_BADXDR,
 869         NFSERR_EXPIRED,
 870         NFSERR_FHEXPIRED,
 871         NFSERR_INVAL,
 872         NFSERR_MOVED,
 873         NFSERR_NOFILEHANDLE,
 874         NFSERR_OLDSTATEID,
 875         NFSERR_RESOURCE,
 876         NFSERR_SERVERFAULT,
 877         NFSERR_STALE,
 878         NFSERR_STALESTATEID,
 879         0,
 880 };
 881
 882 static short nfsv4err_putfh[] = {
 883         NFSERR_SERVERFAULT,
 884         NFSERR_BADHANDLE,
 885         NFSERR_BADXDR,
 886         NFSERR_FHEXPIRED,
 887         NFSERR_MOVED,
 888         NFSERR_RESOURCE,
 889         NFSERR_SERVERFAULT,
 890         NFSERR_STALE,
 891         NFSERR_WRONGSEC,
 892         0,
 893 };
 894
 895 static short nfsv4err_putpubfh[] = {
 896         NFSERR_SERVERFAULT,
 897         NFSERR_RESOURCE,
 898         NFSERR_SERVERFAULT,
 899         NFSERR_WRONGSEC,
 900         0,
 901 };
 902
 903 static short nfsv4err_putrootfh[] = {
 904         NFSERR_SERVERFAULT,
 905         NFSERR_RESOURCE,
 906         NFSERR_SERVERFAULT,
 907         NFSERR_WRONGSEC,
 908         0,
 909 };
 910
 911 static short nfsv4err_read[] = {
 912         NFSERR_IO,
 913         NFSERR_ACCES,
 914         NFSERR_ADMINREVOKED,
 915         NFSERR_BADHANDLE,
 916         NFSERR_BADSTATEID,
 917         NFSERR_BADXDR,
 918         NFSERR_DELAY,
 919         NFSERR_EXPIRED,
 920         NFSERR_FHEXPIRED,
 921         NFSERR_GRACE,
 922         NFSERR_IO,
 923         NFSERR_INVAL,
 924         NFSERR_ISDIR,
 925         NFSERR_LEASEMOVED,
 926         NFSERR_LOCKED,
 927         NFSERR_MOVED,
 928         NFSERR_NOFILEHANDLE,
 929         NFSERR_NXIO,
 930         NFSERR_OLDSTATEID,
 931         NFSERR_OPENMODE,
 932         NFSERR_RESOURCE,
 933         NFSERR_SERVERFAULT,
 934         NFSERR_STALE,
 935         NFSERR_STALESTATEID,
 936         0,
 937 };
 938
 939 static short nfsv4err_readdir[] = {
 940         NFSERR_IO,
 941         NFSERR_ACCES,
 942         NFSERR_BADHANDLE,
 943         NFSERR_BAD_COOKIE,
 944         NFSERR_BADXDR,
 945         NFSERR_DELAY,
 946         NFSERR_FHEXPIRED,
 947         NFSERR_INVAL,
 948         NFSERR_IO,
 949         NFSERR_MOVED,
 950         NFSERR_NOFILEHANDLE,
 951         NFSERR_NOTDIR,
 952         NFSERR_NOTSAME,
 953         NFSERR_RESOURCE,
 954         NFSERR_SERVERFAULT,
 955         NFSERR_STALE,
 956         NFSERR_TOOSMALL,
 957         0,
 958 };
 959
 960 static short nfsv4err_readlink[] = {
 961         NFSERR_IO,
 962         NFSERR_ACCES,
 963         NFSERR_BADHANDLE,
 964         NFSERR_DELAY,
 965         NFSERR_FHEXPIRED,
 966         NFSERR_INVAL,
 967         NFSERR_IO,
 968         NFSERR_ISDIR,
 969         NFSERR_MOVED,
 970         NFSERR_NOFILEHANDLE,
 971         NFSERR_NOTSUPP,
 972         NFSERR_RESOURCE,
 973         NFSERR_SERVERFAULT,
 974         NFSERR_STALE,
 975         0,
 976 };
 977
 978 static short nfsv4err_remove[] = {
 979         NFSERR_IO,
 980         NFSERR_ACCES,
 981         NFSERR_BADCHAR,
 982         NFSERR_BADHANDLE,
 983         NFSERR_BADNAME,
 984         NFSERR_BADXDR,
 985         NFSERR_DELAY,
 986         NFSERR_FHEXPIRED,
 987         NFSERR_FILEOPEN,
 988         NFSERR_INVAL,
 989         NFSERR_IO,
 990         NFSERR_MOVED,
 991         NFSERR_NAMETOL,
 992         NFSERR_NOENT,
 993         NFSERR_NOFILEHANDLE,
 994         NFSERR_NOTDIR,
 995         NFSERR_NOTEMPTY,
 996         NFSERR_RESOURCE,
 997         NFSERR_ROFS,
 998         NFSERR_SERVERFAULT,
 999         NFSERR_STALE,
1000         0,
1001 };
1002
1003 static short nfsv4err_rename[] = {
1004         NFSERR_IO,
1005         NFSERR_ACCES,
1006         NFSERR_BADCHAR,
1007         NFSERR_BADHANDLE,
1008         NFSERR_BADNAME,
1009         NFSERR_BADXDR,
1010         NFSERR_DELAY,
1011         NFSERR_DQUOT,
1012         NFSERR_EXIST,
1013         NFSERR_FHEXPIRED,
1014         NFSERR_FILEOPEN,
1015         NFSERR_INVAL,
1016         NFSERR_IO,
1017         NFSERR_MOVED,
1018         NFSERR_NAMETOL,
1019         NFSERR_NOENT,
1020         NFSERR_NOFILEHANDLE,
1021         NFSERR_NOSPC,
1022         NFSERR_NOTDIR,
1023         NFSERR_NOTEMPTY,
1024         NFSERR_RESOURCE,
1025         NFSERR_ROFS,
1026         NFSERR_SERVERFAULT,
1027         NFSERR_STALE,
1028         NFSERR_WRONGSEC,
1029         NFSERR_XDEV,
1030         0,
1031 };
1032
1033 static short nfsv4err_renew[] = {
1034         NFSERR_SERVERFAULT,
1035         NFSERR_ACCES,
1036         NFSERR_ADMINREVOKED,
1037         NFSERR_BADXDR,
1038         NFSERR_CBPATHDOWN,
1039         NFSERR_EXPIRED,
1040         NFSERR_LEASEMOVED,
1041         NFSERR_RESOURCE,
1042         NFSERR_SERVERFAULT,
1043         NFSERR_STALECLIENTID,
1044         0,
1045 };
1046
1047 static short nfsv4err_restorefh[] = {
1048         NFSERR_SERVERFAULT,
1049         NFSERR_BADHANDLE,
1050         NFSERR_FHEXPIRED,
1051         NFSERR_MOVED,
1052         NFSERR_RESOURCE,
1053         NFSERR_RESTOREFH,
1054         NFSERR_SERVERFAULT,
1055         NFSERR_STALE,
1056         NFSERR_WRONGSEC,
1057         0,
1058 };
1059
1060 static short nfsv4err_savefh[] = {
1061         NFSERR_SERVERFAULT,
1062         NFSERR_BADHANDLE,
1063         NFSERR_FHEXPIRED,
1064         NFSERR_MOVED,
1065         NFSERR_NOFILEHANDLE,
1066         NFSERR_RESOURCE,
1067         NFSERR_SERVERFAULT,
1068         NFSERR_STALE,
1069         0,
1070 };
1071
1072 static short nfsv4err_secinfo[] = {
1073         NFSERR_SERVERFAULT,
1074         NFSERR_ACCES,
1075         NFSERR_BADCHAR,
1076         NFSERR_BADHANDLE,
1077         NFSERR_BADNAME,
1078         NFSERR_BADXDR,
1079         NFSERR_FHEXPIRED,
1080         NFSERR_INVAL,
1081         NFSERR_MOVED,
1082         NFSERR_NAMETOL,
1083         NFSERR_NOENT,
1084         NFSERR_NOFILEHANDLE,
1085         NFSERR_NOTDIR,
1086         NFSERR_RESOURCE,
1087         NFSERR_SERVERFAULT,
1088         NFSERR_STALE,
1089         0,
1090 };
1091
1092 static short nfsv4err_setattr[] = {
1093         NFSERR_IO,
1094         NFSERR_ACCES,
1095         NFSERR_ADMINREVOKED,
1096         NFSERR_ATTRNOTSUPP,
1097         NFSERR_BADCHAR,
1098         NFSERR_BADHANDLE,
1099         NFSERR_BADOWNER,
1100         NFSERR_BADSTATEID,
1101         NFSERR_BADXDR,
1102         NFSERR_DELAY,
1103         NFSERR_DQUOT,
1104         NFSERR_EXPIRED,
1105         NFSERR_FBIG,
1106         NFSERR_FHEXPIRED,
1107         NFSERR_GRACE,
1108         NFSERR_INVAL,
1109         NFSERR_IO,
1110         NFSERR_ISDIR,
1111         NFSERR_LOCKED,
1112         NFSERR_MOVED,
1113         NFSERR_NOFILEHANDLE,
1114         NFSERR_NOSPC,
1115         NFSERR_OLDSTATEID,
1116         NFSERR_OPENMODE,
1117         NFSERR_PERM,
1118         NFSERR_RESOURCE,
1119         NFSERR_ROFS,
1120         NFSERR_SERVERFAULT,
1121         NFSERR_STALE,
1122         NFSERR_STALESTATEID,
1123         0,
1124 };
1125
1126 static short nfsv4err_setclientid[] = {
1127         NFSERR_SERVERFAULT,
1128         NFSERR_BADXDR,
1129         NFSERR_CLIDINUSE,
1130         NFSERR_INVAL,
1131         NFSERR_RESOURCE,
1132         NFSERR_SERVERFAULT,
1133         0,
1134 };
1135
1136 static short nfsv4err_setclientidconfirm[] = {
1137         NFSERR_SERVERFAULT,
1138         NFSERR_BADXDR,
1139         NFSERR_CLIDINUSE,
1140         NFSERR_RESOURCE,
1141         NFSERR_SERVERFAULT,
1142         NFSERR_STALECLIENTID,
1143         0,
1144 };
1145
1146 static short nfsv4err_verify[] = {
1147         NFSERR_SERVERFAULT,
1148         NFSERR_ACCES,
1149         NFSERR_ATTRNOTSUPP,
1150         NFSERR_BADCHAR,
1151         NFSERR_BADHANDLE,
1152         NFSERR_BADXDR,
1153         NFSERR_DELAY,
1154         NFSERR_FHEXPIRED,
1155         NFSERR_INVAL,
1156         NFSERR_MOVED,
1157         NFSERR_NOFILEHANDLE,
1158         NFSERR_NOTSAME,
1159         NFSERR_RESOURCE,
1160         NFSERR_SERVERFAULT,
1161         NFSERR_STALE,
1162         0,
1163 };
1164
1165 static short nfsv4err_write[] = {
1166         NFSERR_IO,
1167         NFSERR_ACCES,
1168         NFSERR_ADMINREVOKED,
1169         NFSERR_BADHANDLE,
1170         NFSERR_BADSTATEID,
1171         NFSERR_BADXDR,
1172         NFSERR_DELAY,
1173         NFSERR_DQUOT,
1174         NFSERR_EXPIRED,
1175         NFSERR_FBIG,
1176         NFSERR_FHEXPIRED,
1177         NFSERR_GRACE,
1178         NFSERR_INVAL,
1179         NFSERR_IO,
1180         NFSERR_ISDIR,
1181         NFSERR_LEASEMOVED,
1182         NFSERR_LOCKED,
1183         NFSERR_MOVED,
1184         NFSERR_NOFILEHANDLE,
1185         NFSERR_NOSPC,
1186         NFSERR_NXIO,
1187         NFSERR_OLDSTATEID,
1188         NFSERR_OPENMODE,
1189         NFSERR_RESOURCE,
1190         NFSERR_ROFS,
1191         NFSERR_SERVERFAULT,
1192         NFSERR_STALE,
1193         NFSERR_STALESTATEID,
1194         0,
1195 };
1196
1197 static short nfsv4err_releaselockowner[] = {
1198         NFSERR_SERVERFAULT,
1199         NFSERR_ADMINREVOKED,
1200         NFSERR_BADXDR,
1201         NFSERR_EXPIRED,
1202         NFSERR_LEASEMOVED,
1203         NFSERR_LOCKSHELD,
1204         NFSERR_RESOURCE,
1205         NFSERR_SERVERFAULT,
1206         NFSERR_STALECLIENTID,
1207         0,
1208 };
1209
1210 static short *nfsrv_v4errmap[] = {
1211         nfsv4err_null,
1212         nfsv4err_null,
1213         nfsv4err_null,
1214         nfsv4err_access,
1215         nfsv4err_close,
1216         nfsv4err_commit,
1217         nfsv4err_create,
1218         nfsv4err_delegpurge,
1219         nfsv4err_delegreturn,
1220         nfsv4err_getattr,
1221         nfsv4err_getfh,
1222         nfsv4err_link,
1223         nfsv4err_lock,
1224         nfsv4err_lockt,
1225         nfsv4err_locku,
1226         nfsv4err_lookup,
1227         nfsv4err_lookupp,
1228         nfsv4err_nverify,
1229         nfsv4err_open,
1230         nfsv4err_openattr,
1231         nfsv4err_openconfirm,
1232         nfsv4err_opendowngrade,
1233         nfsv4err_putfh,
1234         nfsv4err_putpubfh,
1235         nfsv4err_putrootfh,
1236         nfsv4err_read,
1237         nfsv4err_readdir,
1238         nfsv4err_readlink,
1239         nfsv4err_remove,
1240         nfsv4err_rename,
1241         nfsv4err_renew,
1242         nfsv4err_restorefh,
1243         nfsv4err_savefh,
1244         nfsv4err_secinfo,
1245         nfsv4err_setattr,
1246         nfsv4err_setclientid,
1247         nfsv4err_setclientidconfirm,
1248         nfsv4err_verify,
1249         nfsv4err_write,
1250         nfsv4err_releaselockowner,
1251 };
1252
1253 /*
1254  * A fiddled version of m_adj() that ensures null fill to a long
1255  * boundary and only trims off the back end
1256  */
1257 APPLESTATIC void
1258 nfsrv_adj(mbuf_t mp, int len, int nul)
1259 {
1260         mbuf_t m;
1261         int count, i;
1262         char *cp;
1263
1264         /*
1265          * Trim from tail.  Scan the mbuf chain,
1266          * calculating its length and finding the last mbuf.
1267          * If the adjustment only affects this mbuf, then just
1268          * adjust and return.  Otherwise, rescan and truncate
1269          * after the remaining size.
1270          */
1271         count = 0;
1272         m = mp;
1273         for (;;) {
1274                 count += mbuf_len(m);
1275                 if (mbuf_next(m) == NULL)
1276                         break;
1277                 m = mbuf_next(m);
1278         }
1279         if (mbuf_len(m) > len) {
1280                 mbuf_setlen(m, mbuf_len(m) - len);
1281                 if (nul > 0) {
1282                         cp = NFSMTOD(m, caddr_t) + mbuf_len(m) - nul;
1283                         for (i = 0; i < nul; i++)
1284                                 *cp++ = '\0';
1285                 }
1286                 return;
1287         }
1288         count -= len;
1289         if (count < 0)
1290                 count = 0;
1291         /*
1292          * Correct length for chain is "count".
1293          * Find the mbuf with last data, adjust its length,
1294          * and toss data from remaining mbufs on chain.
1295          */
1296         for (m = mp; m; m = mbuf_next(m)) {
1297                 if (mbuf_len(m) >= count) {
1298                         mbuf_setlen(m, count);
1299                         if (nul > 0) {
1300                                 cp = NFSMTOD(m, caddr_t) + mbuf_len(m) - nul;
1301                                 for (i = 0; i < nul; i++)
1302                                         *cp++ = '\0';
1303                         }
1304                         break;
1305                 }
1306                 count -= mbuf_len(m);
1307         }
1308         for (m = mbuf_next(m); m; m = mbuf_next(m))
1309                 mbuf_setlen(m, 0);
1310 }
1311
1312 /*
1313  * Make these functions instead of macros, so that the kernel text size
1314  * doesn't get too big...
1315  */
1316 APPLESTATIC void
1317 nfsrv_wcc(struct nfsrv_descript *nd, int before_ret,
1318     struct nfsvattr *before_nvap, int after_ret, struct nfsvattr *after_nvap)
1319 {
1320         u_int32_t *tl;
1321
1322         if (before_ret) {
1323                 NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1324                 *tl = newnfs_false;
1325         } else {
1326                 NFSM_BUILD(tl, u_int32_t *, 7 * NFSX_UNSIGNED);
1327                 *tl++ = newnfs_true;
1328                 txdr_hyper(before_nvap->na_size, tl);
1329                 tl += 2;
1330                 txdr_nfsv3time(&(before_nvap->na_mtime), tl);
1331                 tl += 2;
1332                 txdr_nfsv3time(&(before_nvap->na_ctime), tl);
1333         }
1334         nfsrv_postopattr(nd, after_ret, after_nvap);
1335 }
1336
1337 APPLESTATIC void
1338 nfsrv_postopattr(struct nfsrv_descript *nd, int after_ret,
1339     struct nfsvattr *after_nvap)
1340 {
1341         u_int32_t *tl;
1342
1343         NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1344         if (after_ret)
1345                 *tl = newnfs_false;
1346         else {
1347                 *tl = newnfs_true;
1348                 nfsrv_fillattr(nd, after_nvap);
1349         }
1350 }
1351
1352 /*
1353  * Fill in file attributes for V2 and 3. For V4, call a separate
1354  * routine that sifts through all the attribute bits.
1355  */
1356 APPLESTATIC void
1357 nfsrv_fillattr(struct nfsrv_descript *nd, struct nfsvattr *nvap)
1358 {
1359         struct nfs_fattr *fp;
1360         int fattr_size;
1361
1362         /*
1363          * Build space for the attribute structure.
1364          */
1365         if (nd->nd_flag & ND_NFSV3)
1366                 fattr_size = NFSX_V3FATTR;
1367         else
1368                 fattr_size = NFSX_V2FATTR;
1369         NFSM_BUILD(fp, struct nfs_fattr *, fattr_size);
1370
1371         /*
1372          * Now just fill it all in.
1373          */
1374         fp->fa_nlink = txdr_unsigned(nvap->na_nlink);
1375         fp->fa_uid = txdr_unsigned(nvap->na_uid);
1376         fp->fa_gid = txdr_unsigned(nvap->na_gid);
1377         if (nd->nd_flag & ND_NFSV3) {
1378                 fp->fa_type = vtonfsv34_type(nvap->na_type);
1379                 fp->fa_mode = vtonfsv34_mode(nvap->na_mode);
1380                 txdr_hyper(nvap->na_size, &fp->fa3_size);
1381                 txdr_hyper(nvap->na_bytes, &fp->fa3_used);
1382                 fp->fa3_rdev.specdata1 = txdr_unsigned(NFSMAJOR(nvap->na_rdev));
1383                 fp->fa3_rdev.specdata2 = txdr_unsigned(NFSMINOR(nvap->na_rdev));
1384                 fp->fa3_fsid.nfsuquad[0] = 0;
1385                 fp->fa3_fsid.nfsuquad[1] = txdr_unsigned(nvap->na_fsid);
1386                 fp->fa3_fileid.nfsuquad[0] = 0;
1387                 fp->fa3_fileid.nfsuquad[1] = txdr_unsigned(nvap->na_fileid);
1388                 txdr_nfsv3time(&nvap->na_atime, &fp->fa3_atime);
1389                 txdr_nfsv3time(&nvap->na_mtime, &fp->fa3_mtime);
1390                 txdr_nfsv3time(&nvap->na_ctime, &fp->fa3_ctime);
1391         } else {
1392                 fp->fa_type = vtonfsv2_type(nvap->na_type);
1393                 fp->fa_mode = vtonfsv2_mode(nvap->na_type, nvap->na_mode);
1394                 fp->fa2_size = txdr_unsigned(nvap->na_size);
1395                 fp->fa2_blocksize = txdr_unsigned(nvap->na_blocksize);
1396                 if (nvap->na_type == VFIFO)
1397                         fp->fa2_rdev = 0xffffffff;
1398                 else
1399                         fp->fa2_rdev = txdr_unsigned(nvap->na_rdev);
1400                 fp->fa2_blocks = txdr_unsigned(nvap->na_bytes / NFS_FABLKSIZE);
1401                 fp->fa2_fsid = txdr_unsigned(nvap->na_fsid);
1402                 fp->fa2_fileid = txdr_unsigned(nvap->na_fileid);
1403                 txdr_nfsv2time(&nvap->na_atime, &fp->fa2_atime);
1404                 txdr_nfsv2time(&nvap->na_mtime, &fp->fa2_mtime);
1405                 txdr_nfsv2time(&nvap->na_ctime, &fp->fa2_ctime);
1406         }
1407 }
1408
1409 /*
1410  * This function gets a file handle out of an mbuf list.
1411  * It returns 0 for success, EBADRPC otherwise.
1412  * If sets the third flagp argument to 1 if the file handle is
1413  * the public file handle.
1414  * For NFSv4, if the length is incorrect, set nd_repstat == NFSERR_BADHANDLE
1415  */
1416 APPLESTATIC int
1417 nfsrv_mtofh(struct nfsrv_descript *nd, struct nfsrvfh *fhp)
1418 {
1419         u_int32_t *tl;
1420         int error = 0, len, copylen;
1421
1422         if (nd->nd_flag & (ND_NFSV3 | ND_NFSV4)) {
1423                 NFSM_DISSECT(tl, u_int32_t *, NFSX_UNSIGNED);
1424                 len = fxdr_unsigned(int, *tl);
1425                 if (len == 0 && nfs_pubfhset && (nd->nd_flag & ND_NFSV3) &&
1426                     nd->nd_procnum == NFSPROC_LOOKUP) {
1427                         nd->nd_flag |= ND_PUBLOOKUP;
1428                         goto nfsmout;
1429                 }
1430                 if (len < NFSRV_MINFH || len > NFSRV_MAXFH) {
1431                         if (nd->nd_flag & ND_NFSV4) {
1432                             if (len > 0 && len <= NFSX_V4FHMAX) {
1433                                 error = nfsm_advance(nd, NFSM_RNDUP(len), -1);
1434                                 if (error)
1435                                         goto nfsmout;
1436                                 nd->nd_repstat = NFSERR_BADHANDLE;
1437                                 goto nfsmout;
1438                             } else {
1439                                     error = EBADRPC;
1440                                     goto nfsmout;
1441                             }
1442                         } else {
1443                                 error = EBADRPC;
1444                                 goto nfsmout;
1445                         }
1446                 }
1447                 copylen = len;
1448         } else {
1449                 /*
1450                  * For NFSv2, the file handle is always 32 bytes on the
1451                  * wire, but this server only cares about the first
1452                  * NFSRV_MAXFH bytes.
1453                  */
1454                 len = NFSX_V2FH;
1455                 copylen = NFSRV_MAXFH;
1456         }
1457         NFSM_DISSECT(tl, u_int32_t *, len);
1458         if ((nd->nd_flag & ND_NFSV2) && nfs_pubfhset &&
1459             nd->nd_procnum == NFSPROC_LOOKUP &&
1460             !NFSBCMP((caddr_t)tl, nfs_v2pubfh, NFSX_V2FH)) {
1461                 nd->nd_flag |= ND_PUBLOOKUP;
1462                 goto nfsmout;
1463         }
1464         NFSBCOPY(tl, (caddr_t)fhp->nfsrvfh_data, copylen);
1465         fhp->nfsrvfh_len = copylen;
1466 nfsmout:
1467         NFSEXITCODE2(error, nd);
1468         return (error);
1469 }
1470
1471 /*
1472  * Map errnos to NFS error numbers. For Version 3 and 4 also filter out error
1473  * numbers not specified for the associated procedure.
1474  * NFSPROC_NOOP is a special case, where the high order bits of nd_repstat
1475  * should be cleared. NFSPROC_NOOP is used to return errors when a valid
1476  * RPC procedure is not involved.
1477  * Returns the error number in XDR.
1478  */
1479 APPLESTATIC int
1480 nfsd_errmap(struct nfsrv_descript *nd)
1481 {
1482         short *defaulterrp, *errp;
1483
1484         if (!nd->nd_repstat)
1485                 return (0);
1486         if (nd->nd_flag & (ND_NFSV3 | ND_NFSV4)) {
1487                 if (nd->nd_procnum == NFSPROC_NOOP)
1488                         return (txdr_unsigned(nd->nd_repstat & 0xffff));
1489                 if (nd->nd_flag & ND_NFSV3)
1490                     errp = defaulterrp = nfsrv_v3errmap[nd->nd_procnum];
1491                 else if (nd->nd_repstat == EBADRPC)
1492                         return (txdr_unsigned(NFSERR_BADXDR));
1493                 else if (nd->nd_repstat == NFSERR_MINORVERMISMATCH ||
1494                          nd->nd_repstat == NFSERR_OPILLEGAL)
1495                         return (txdr_unsigned(nd->nd_repstat));
1496                 else
1497                     errp = defaulterrp = nfsrv_v4errmap[nd->nd_procnum];
1498                 while (*++errp)
1499                         if (*errp == nd->nd_repstat)
1500                                 return (txdr_unsigned(nd->nd_repstat));
1501                 return (txdr_unsigned(*defaulterrp));
1502         }
1503         if (nd->nd_repstat <= ELAST)
1504                 return (txdr_unsigned(nfsrv_v2errmap[nd->nd_repstat - 1]));
1505         return (txdr_unsigned(NFSERR_IO));
1506 }
1507
1508 /*
1509  * Check to see if setting a uid/gid is permitted when creating a new
1510  * file object. (Called when uid and/or gid is specified in the
1511  * settable attributes for V4.
1512  */
1513 APPLESTATIC int
1514 nfsrv_checkuidgid(struct nfsrv_descript *nd, struct nfsvattr *nvap)
1515 {
1516         int error = 0;
1517
1518         /*
1519          * If not setting either uid nor gid, it's OK.
1520          */
1521         if (NFSVNO_NOTSETUID(nvap) && NFSVNO_NOTSETGID(nvap))
1522                 goto out;
1523         if ((NFSVNO_ISSETUID(nvap) && nvap->na_uid == nfsrv_defaultuid)
1524             || (NFSVNO_ISSETGID(nvap) && nvap->na_gid == nfsrv_defaultgid)) {
1525                 error = NFSERR_BADOWNER;
1526                 goto out;
1527         }
1528         if (nd->nd_cred->cr_uid == 0)
1529                 goto out;
1530         if ((NFSVNO_ISSETUID(nvap) && nvap->na_uid != nd->nd_cred->cr_uid) ||
1531             (NFSVNO_ISSETGID(nvap) && nvap->na_gid != nd->nd_cred->cr_gid &&
1532             !groupmember(nvap->na_gid, nd->nd_cred)))
1533                 error = NFSERR_PERM;
1534
1535 out:
1536         NFSEXITCODE2(error, nd);
1537         return (error);
1538 }
1539
1540 /*
1541  * and this routine fixes up the settable attributes for V4 if allowed
1542  * by nfsrv_checkuidgid().
1543  */
1544 APPLESTATIC void
1545 nfsrv_fixattr(struct nfsrv_descript *nd, vnode_t vp,
1546     struct nfsvattr *nvap, NFSACL_T *aclp, NFSPROC_T *p, nfsattrbit_t *attrbitp,
1547     struct nfsexstuff *exp)
1548 {
1549         int change = 0;
1550         struct nfsvattr nva;
1551         uid_t tuid;
1552         int error;
1553         nfsattrbit_t nattrbits;
1554
1555         /*
1556          * Maybe this should be done for V2 and 3 but it never has been
1557          * and nobody seems to be upset, so I think it's best not to change
1558          * the V2 and 3 semantics.
1559          */
1560         if ((nd->nd_flag & ND_NFSV4) == 0)
1561                 goto out;
1562         NFSVNO_ATTRINIT(&nva);
1563         NFSZERO_ATTRBIT(&nattrbits);
1564         tuid = nd->nd_cred->cr_uid;
1565         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_OWNER) &&
1566             NFSVNO_ISSETUID(nvap) &&
1567             nvap->na_uid != nd->nd_cred->cr_uid) {
1568                 if (nd->nd_cred->cr_uid == 0) {
1569                         nva.na_uid = nvap->na_uid;
1570                         change++;
1571                         NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_OWNER);
1572                 } else {
1573                         NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_OWNER);
1574                 }
1575         }
1576         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_TIMEACCESSSET) &&
1577             NFSVNO_ISSETATIME(nvap)) {
1578                 nva.na_atime = nvap->na_atime;
1579                 change++;
1580                 NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_TIMEACCESSSET);
1581         }
1582         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_TIMEMODIFYSET) &&
1583             NFSVNO_ISSETMTIME(nvap)) {
1584                 nva.na_mtime = nvap->na_mtime;
1585                 change++;
1586                 NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_TIMEMODIFYSET);
1587         }
1588         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_OWNERGROUP) &&
1589             NFSVNO_ISSETGID(nvap)) {
1590                 if (nvap->na_gid == nd->nd_cred->cr_gid ||
1591                     groupmember(nvap->na_gid, nd->nd_cred)) {
1592                         nd->nd_cred->cr_uid = 0;
1593                         nva.na_gid = nvap->na_gid;
1594                         change++;
1595                         NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_OWNERGROUP);
1596                 } else {
1597                         NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_OWNERGROUP);
1598                 }
1599         }
1600         if (change) {
1601                 error = nfsvno_setattr(vp, &nva, nd->nd_cred, p, exp);
1602                 if (error) {
1603                         NFSCLRALL_ATTRBIT(attrbitp, &nattrbits);
1604                 }
1605         }
1606         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_SIZE) &&
1607             NFSVNO_ISSETSIZE(nvap) && nvap->na_size != (u_quad_t)0) {
1608                 NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_SIZE);
1609         }
1610 #ifdef NFS4_ACL_EXTATTR_NAME
1611         if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_ACL) &&
1612             nfsrv_useacl != 0 && aclp != NULL) {
1613                 if (aclp->acl_cnt > 0) {
1614                         error = nfsrv_setacl(vp, aclp, nd->nd_cred, p);
1615                         if (error) {
1616                                 NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_ACL);
1617                         }
1618                 }
1619         } else
1620 #endif
1621         NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_ACL);
1622         nd->nd_cred->cr_uid = tuid;
1623
1624 out:
1625         NFSEXITCODE2(0, nd);
1626 }
1627
1628 /*
1629  * Translate an ASCII hex digit to it's binary value. Return -1 if the
1630  * char isn't a hex digit.
1631  */
1632 static char
1633 nfsrv_hexdigit(char c, int *err)
1634 {
1635
1636         *err = 0;
1637         if (c >= '0' && c <= '9')
1638                 return (c - '0');
1639         if (c >= 'a' && c <= 'f')
1640                 return (c - 'a' + ((char)10));
1641         if (c >= 'A' && c <= 'F')
1642                 return (c - 'A' + ((char)10));
1643         /* Not valid ! */
1644         *err = 1;
1645         return (1);     /* BOGUS */
1646 }
1647
1648 /*
1649  * Check to see if NFSERR_MOVED can be returned for this op. Return 1 iff
1650  * it can be.
1651  */
1652 APPLESTATIC int
1653 nfsrv_errmoved(int op)
1654 {
1655         short *errp;
1656
1657         errp = nfsrv_v4errmap[op];
1658         while (*errp != 0) {
1659                 if (*errp == NFSERR_MOVED)
1660                         return (1);
1661                 errp++;
1662         }
1663         return (0);
1664 }
1665
1666 /*
1667  * Fill in attributes for a Referral.
1668  * (Return the number of bytes of XDR created.)
1669  */
1670 APPLESTATIC int
1671 nfsrv_putreferralattr(struct nfsrv_descript *nd, nfsattrbit_t *retbitp,
1672     struct nfsreferral *refp, int getattr, int *reterrp)
1673 {
1674         u_int32_t *tl, *retnump;
1675         u_char *cp, *cp2;
1676         int prefixnum, retnum = 0, i, len, bitpos, rderrbit = 0, nonrefbit = 0;
1677         int fslocationsbit = 0;
1678         nfsattrbit_t tmpbits, refbits;
1679
1680         NFSREFERRAL_ATTRBIT(&refbits);
1681         if (getattr)
1682                 NFSCLRBIT_ATTRBIT(&refbits, NFSATTRBIT_RDATTRERROR);
1683         else if (NFSISSET_ATTRBIT(retbitp, NFSATTRBIT_RDATTRERROR))
1684                 rderrbit = 1;
1685         if (NFSISSET_ATTRBIT(retbitp, NFSATTRBIT_FSLOCATIONS))
1686                 fslocationsbit = 1;
1687
1688         /*
1689          * Check for the case where unsupported referral attributes are
1690          * requested.
1691          */
1692         NFSSET_ATTRBIT(&tmpbits, retbitp);
1693         NFSCLRALL_ATTRBIT(&tmpbits, &refbits);
1694         if (NFSNONZERO_ATTRBIT(&tmpbits))
1695                 nonrefbit = 1;
1696
1697         if (nonrefbit && !fslocationsbit && (getattr || !rderrbit)) {
1698                 *reterrp = NFSERR_MOVED;
1699                 return (0);
1700         }
1701
1702         /*
1703          * Now we can fill in the attributes.
1704          */
1705         NFSSET_ATTRBIT(&tmpbits, retbitp);
1706         NFSCLRNOT_ATTRBIT(&tmpbits, &refbits);
1707
1708         /*
1709          * Put out the attribute bitmap for the ones being filled in
1710          * and get the field for the number of attributes returned.
1711          */
1712         prefixnum = nfsrv_putattrbit(nd, &tmpbits);
1713         NFSM_BUILD(retnump, u_int32_t *, NFSX_UNSIGNED);
1714         prefixnum += NFSX_UNSIGNED;
1715
1716         /*
1717          * Now, loop around filling in the attributes for each bit set.
1718          */
1719         for (bitpos = 0; bitpos < NFSATTRBIT_MAX; bitpos++) {
1720             if (NFSISSET_ATTRBIT(&tmpbits, bitpos)) {
1721                 switch (bitpos) {
1722                 case NFSATTRBIT_TYPE:
1723                         NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1724                         *tl = txdr_unsigned(NFDIR);
1725                         retnum += NFSX_UNSIGNED;
1726                         break;
1727                 case NFSATTRBIT_FSID:
1728                         NFSM_BUILD(tl, u_int32_t *, NFSX_V4FSID);
1729                         *tl++ = 0;
1730                         *tl++ = txdr_unsigned(NFSV4ROOT_FSID0);
1731                         *tl++ = 0;
1732                         *tl = txdr_unsigned(NFSV4ROOT_REFERRAL);
1733                         retnum += NFSX_V4FSID;
1734                         break;
1735                 case NFSATTRBIT_RDATTRERROR:
1736                         NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1737                         if (nonrefbit)
1738                                 *tl = txdr_unsigned(NFSERR_MOVED);
1739                         else
1740                                 *tl = 0;
1741                         retnum += NFSX_UNSIGNED;
1742                         break;
1743                 case NFSATTRBIT_FSLOCATIONS:
1744                         retnum += nfsm_strtom(nd, "/", 1);
1745                         NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1746                         *tl = txdr_unsigned(refp->nfr_srvcnt);
1747                         retnum += NFSX_UNSIGNED;
1748                         cp = refp->nfr_srvlist;
1749                         for (i = 0; i < refp->nfr_srvcnt; i++) {
1750                                 NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1751                                 *tl = txdr_unsigned(1);
1752                                 retnum += NFSX_UNSIGNED;
1753                                 cp2 = STRCHR(cp, ':');
1754                                 if (cp2 != NULL)
1755                                         len = cp2 - cp;
1756                                 else
1757                                         len = 1;
1758                                 retnum += nfsm_strtom(nd, cp, len);
1759                                 if (cp2 != NULL)
1760                                         cp = cp2 + 1;
1761                                 cp2 = STRCHR(cp, ',');
1762                                 if (cp2 != NULL)
1763                                         len = cp2 - cp;
1764                                 else
1765                                         len = strlen(cp);
1766                                 retnum += nfsm_strtom(nd, cp, len);
1767                                 if (cp2 != NULL)
1768                                         cp = cp2 + 1;
1769                         }
1770                         break;
1771                 case NFSATTRBIT_MOUNTEDONFILEID:
1772                         NFSM_BUILD(tl, u_int32_t *, NFSX_HYPER);
1773                         *tl++ = 0;
1774                         *tl = txdr_unsigned(refp->nfr_dfileno);
1775                         retnum += NFSX_HYPER;
1776                         break;
1777                 default:
1778                         printf("EEK! Bad V4 refattr bitpos=%d\n", bitpos);
1779                 };
1780             }
1781         }
1782         *retnump = txdr_unsigned(retnum);
1783         return (retnum + prefixnum);
1784 }
1785
1786 /*
1787  * Parse a file name out of a request.
1788  */
1789 APPLESTATIC int
1790 nfsrv_parsename(struct nfsrv_descript *nd, char *bufp, u_long *hashp,
1791     NFSPATHLEN_T *outlenp)
1792 {
1793         char *fromcp, *tocp, val = '\0';
1794         mbuf_t md;
1795         int i;
1796         int rem, len, error = 0, pubtype = 0, outlen = 0, percent = 0;
1797         char digit;
1798         u_int32_t *tl;
1799         u_long hash = 0;
1800
1801         if (hashp != NULL)
1802                 *hashp = 0;
1803         tocp = bufp;
1804         /*
1805          * For V4, check for lookup parent.
1806          * Otherwise, get the component name.
1807          */
1808         if ((nd->nd_flag & ND_NFSV4) && nd->nd_procnum == NFSV4OP_LOOKUPP) {
1809             *tocp++ = '.';
1810             hash += ((u_char)'.');
1811             *tocp++ = '.';
1812             hash += ((u_char)'.');
1813             outlen = 2;
1814         } else {
1815             /*
1816              * First, get the name length.
1817              */
1818             NFSM_DISSECT(tl, u_int32_t *, NFSX_UNSIGNED);
1819             len = fxdr_unsigned(int, *tl);
1820             if (len > NFS_MAXNAMLEN) {
1821                 nd->nd_repstat = NFSERR_NAMETOL;
1822                 error = 0;
1823                 goto nfsmout;
1824             } else if (len <= 0) {
1825                 nd->nd_repstat = NFSERR_INVAL;
1826                 error = 0;
1827                 goto nfsmout;
1828             }
1829
1830             /*
1831              * Now, copy the component name into the buffer.
1832              */
1833             fromcp = nd->nd_dpos;
1834             md = nd->nd_md;
1835             rem = NFSMTOD(md, caddr_t) + mbuf_len(md) - fromcp;
1836             for (i = 0; i < len; i++) {
1837                 while (rem == 0) {
1838                         md = mbuf_next(md);
1839                         if (md == NULL) {
1840                                 error = EBADRPC;
1841                                 goto nfsmout;
1842                         }
1843                         fromcp = NFSMTOD(md, caddr_t);
1844                         rem = mbuf_len(md);
1845                 }
1846                 if (*fromcp == '\0') {
1847                         nd->nd_repstat = EACCES;
1848                         error = 0;
1849                         goto nfsmout;
1850                 }
1851                 /*
1852                  * For lookups on the public filehandle, do some special
1853                  * processing on the name. (The public file handle is the
1854                  * root of the public file system for this server.)
1855                  */
1856                 if (nd->nd_flag & ND_PUBLOOKUP) {
1857                         /*
1858                          * If the first char is ASCII, it is a canonical
1859                          * path, otherwise it is a native path. (RFC2054
1860                          * doesn't actually state what it is if the first
1861                          * char isn't ASCII or 0x80, so I assume native.)
1862                          * pubtype == 1 -> native path
1863                          * pubtype == 2 -> canonical path
1864                          */
1865                         if (i == 0) {
1866                                 if (*fromcp & 0x80) {
1867                                         /*
1868                                          * Since RFC2054 doesn't indicate
1869                                          * that a native path of just 0x80
1870                                          * isn't allowed, I'll replace the
1871                                          * 0x80 with '/' instead of just
1872                                          * throwing it away.
1873                                          */
1874                                         *fromcp = '/';
1875                                         pubtype = 1;
1876                                 } else {
1877                                         pubtype = 2;
1878                                 }
1879                         }
1880                         /*
1881                          * '/' only allowed in a native path
1882                          */
1883                         if (*fromcp == '/' && pubtype != 1) {
1884                                 nd->nd_repstat = EACCES;
1885                                 error = 0;
1886                                 goto nfsmout;
1887                         }
1888
1889                         /*
1890                          * For the special case of 2 hex digits after a
1891                          * '%' in an absolute path, calculate the value.
1892                          * percent == 1 -> indicates "get first hex digit"
1893                          * percent == 2 -> indicates "get second hex digit"
1894                          */
1895                         if (percent > 0) {
1896                                 digit = nfsrv_hexdigit(*fromcp, &error);
1897                                 if (error) {
1898                                         nd->nd_repstat = EACCES;
1899                                         error = 0;
1900                                         goto nfsmout;
1901                                 }
1902                                 if (percent == 1) {
1903                                         val = (digit << 4);
1904                                         percent = 2;
1905                                 } else {
1906                                         val += digit;
1907                                         percent = 0;
1908                                         *tocp++ = val;
1909                                         hash += ((u_char)val);
1910                                         outlen++;
1911                                 }
1912                         } else {
1913                                 if (*fromcp == '%' && pubtype == 2) {
1914                                         /*
1915                                          * Must be followed by 2 hex digits
1916                                          */
1917                                         if ((len - i) < 3) {
1918                                                 nd->nd_repstat = EACCES;
1919                                                 error = 0;
1920                                                 goto nfsmout;
1921                                         }
1922                                         percent = 1;
1923                                 } else {
1924                                         *tocp++ = *fromcp;
1925                                         hash += ((u_char)*fromcp);
1926                                         outlen++;
1927                                 }
1928                         }
1929                 } else {
1930                         /*
1931                          * Normal, non lookup on public, name.
1932                          */
1933                         if (*fromcp == '/') {
1934                                 if (nd->nd_flag & ND_NFSV4)
1935                                         nd->nd_repstat = NFSERR_BADNAME;
1936                                 else
1937                                         nd->nd_repstat = EACCES;
1938                                 error = 0;
1939                                 goto nfsmout;
1940                         }
1941                         hash += ((u_char)*fromcp);
1942                         *tocp++ = *fromcp;
1943                         outlen++;
1944                 }
1945                 fromcp++;
1946                 rem--;
1947             }
1948             nd->nd_md = md;
1949             nd->nd_dpos = fromcp;
1950             i = NFSM_RNDUP(len) - len;
1951             if (i > 0) {
1952                 if (rem >= i) {
1953                         nd->nd_dpos += i;
1954                 } else {
1955                         error = nfsm_advance(nd, i, rem);
1956                         if (error)
1957                                 goto nfsmout;
1958                 }
1959             }
1960
1961             /*
1962              * For v4, don't allow lookups of '.' or '..' and
1963              * also check for non-utf8 strings.
1964              */
1965             if (nd->nd_flag & ND_NFSV4) {
1966                 if ((outlen == 1 && bufp[0] == '.') ||
1967                     (outlen == 2 && bufp[0] == '.' &&
1968                      bufp[1] == '.')) {
1969                     nd->nd_repstat = NFSERR_BADNAME;
1970                     error = 0;
1971                     goto nfsmout;
1972                 }
1973                 if (disable_checkutf8 == 0 &&
1974                     nfsrv_checkutf8((u_int8_t *)bufp, outlen)) {
1975                     nd->nd_repstat = NFSERR_INVAL;
1976                     error = 0;
1977                     goto nfsmout;
1978                 }
1979             }
1980         }
1981         *tocp = '\0';
1982         *outlenp = (size_t)outlen;
1983         if (hashp != NULL)
1984                 *hashp = hash;
1985 nfsmout:
1986         NFSEXITCODE2(error, nd);
1987         return (error);
1988 }
1989
1990 /*
1991  * Check the tcp socket sequence number has been acknowledged.
1992  */
1993 int
1994 nfsrv_checksockseqnum(struct socket *so, tcp_seq tcpseqval)
1995 {
1996         tcp_seq maxseq, unaseq;
1997         int error, ret;
1998
1999         error = nfsrv_getsocksndseq(so, &maxseq, &unaseq);
2000         if (error)
2001                 return (0);
2002         ret = SEQ_GEQ(unaseq, tcpseqval);
2003         return (ret);
2004 }
2005
2006 /*
2007  * Get the tcp sequence number to be acknowledged.
2008  */
2009 int
2010 nfsrv_getsockseqnum(struct socket *so, tcp_seq *tcpseqp)
2011 {
2012         tcp_seq maxseq, unaseq;
2013         u_int sbcc;
2014         int error;
2015
2016         sbcc = so->so_snd.sb_cc;
2017         error = nfsrv_getsocksndseq(so, &maxseq, &unaseq);
2018         if (error)
2019                 return (0);
2020         /*
2021          * Set the seq# to a value that will
2022          * be at least the end of the reply.
2023          * When this sequence# is acknowledged
2024          * by the client, the client has received
2025          * the reply.
2026          */
2027         *tcpseqp = sbcc + maxseq;
2028         return (1);
2029 }
2030
2031 void
2032 nfsd_init(void)
2033 {
2034         int i;
2035         static int inited = 0;
2036
2037         if (inited)
2038                 return;
2039         inited = 1;
2040
2041         /*
2042          * Initialize client queues. Don't free/reinitialize
2043          * them when nfsds are restarted.
2044          */
2045         for (i = 0; i < NFSCLIENTHASHSIZE; i++)
2046                 LIST_INIT(&nfsclienthash[i]);
2047         for (i = 0; i < NFSLOCKHASHSIZE; i++)
2048                 LIST_INIT(&nfslockhash[i]);
2049
2050         /* and the v2 pubfh should be all zeros */
2051         NFSBZERO(nfs_v2pubfh, NFSX_V2FH);
2052 }
2053
2054 /*
2055  * Check the v4 root exports.
2056  * Return 0 if ok, 1 otherwise.
2057  */
2058 int
2059 nfsd_checkrootexp(struct nfsrv_descript *nd)
2060 {
2061
2062         if ((nd->nd_flag & (ND_GSS | ND_EXAUTHSYS)) == ND_EXAUTHSYS)
2063                 return (0);
2064         if ((nd->nd_flag & (ND_GSSINTEGRITY | ND_EXGSSINTEGRITY)) ==
2065             (ND_GSSINTEGRITY | ND_EXGSSINTEGRITY))
2066                 return (0);
2067         if ((nd->nd_flag & (ND_GSSPRIVACY | ND_EXGSSPRIVACY)) ==
2068             (ND_GSSPRIVACY | ND_EXGSSPRIVACY))
2069                 return (0);
2070         if ((nd->nd_flag & (ND_GSS | ND_GSSINTEGRITY | ND_GSSPRIVACY |
2071              ND_EXGSS)) == (ND_GSS | ND_EXGSS))
2072                 return (0);
2073         return (1);
2074 }
2075