[funini.com] -> [kei@sodan] -> Kernel Reading

root/fs/ncpfs/ioctl.c

/* [<][>][^][v][top][bottom][index][help] */

DEFINITIONS

This source file includes following definitions.
  1. ncp_get_fs_info
  2. ncp_get_fs_info_v2
  3. ncp_get_compat_fs_info_v2
  4. ncp_set_charsets
  5. ncp_get_charsets
  6. __ncp_ioctl
  7. ncp_ioctl_need_write
  8. ncp_ioctl
  9. ncp_compat_ioctl

/*
 *  ioctl.c
 *
 *  Copyright (C) 1995, 1996 by Volker Lendecke
 *  Modified 1997 Peter Waltenberg, Bill Hawes, David Woodhouse for 2.1 dcache
 *  Modified 1998, 1999 Wolfram Pienkoss for NLS
 *
 */

#include <linux/capability.h>
#include <linux/compat.h>
#include <linux/errno.h>
#include <linux/fs.h>
#include <linux/ioctl.h>
#include <linux/time.h>
#include <linux/mm.h>
#include <linux/mount.h>
#include <linux/highuid.h>
#include <linux/smp_lock.h>
#include <linux/vmalloc.h>
#include <linux/sched.h>

#include <linux/ncp_fs.h>

#include <asm/uaccess.h>

#include "ncplib_kernel.h"

/* maximum limit for ncp_objectname_ioctl */
#define NCP_OBJECT_NAME_MAX_LEN 4096
/* maximum limit for ncp_privatedata_ioctl */
#define NCP_PRIVATE_DATA_MAX_LEN 8192
/* maximum negotiable packet size */
#define NCP_PACKET_SIZE_INTERNAL 65536

static int
ncp_get_fs_info(struct ncp_server * server, struct file *file,
                struct ncp_fs_info __user *arg)
{
        struct inode *inode = file->f_path.dentry->d_inode;
        struct ncp_fs_info info;

        if ((file_permission(file, MAY_WRITE) != 0)
            && (current->uid != server->m.mounted_uid)) {
                return -EACCES;
        }
        if (copy_from_user(&info, arg, sizeof(info)))
                return -EFAULT;

        if (info.version != NCP_GET_FS_INFO_VERSION) {
                DPRINTK("info.version invalid: %d\n", info.version);
                return -EINVAL;
        }
        /* TODO: info.addr = server->m.serv_addr; */
        SET_UID(info.mounted_uid, server->m.mounted_uid);
        info.connection         = server->connection;
        info.buffer_size        = server->buffer_size;
        info.volume_number      = NCP_FINFO(inode)->volNumber;
        info.directory_id       = NCP_FINFO(inode)->DosDirNum;

        if (copy_to_user(arg, &info, sizeof(info)))
                return -EFAULT;
        return 0;
}

static int
ncp_get_fs_info_v2(struct ncp_server * server, struct file *file,
                   struct ncp_fs_info_v2 __user * arg)
{
        struct inode *inode = file->f_path.dentry->d_inode;
        struct ncp_fs_info_v2 info2;

        if ((file_permission(file, MAY_WRITE) != 0)
            && (current->uid != server->m.mounted_uid)) {
                return -EACCES;
        }
        if (copy_from_user(&info2, arg, sizeof(info2)))
                return -EFAULT;

        if (info2.version != NCP_GET_FS_INFO_VERSION_V2) {
                DPRINTK("info.version invalid: %d\n", info2.version);
                return -EINVAL;
        }
        info2.mounted_uid   = server->m.mounted_uid;
        info2.connection    = server->connection;
        info2.buffer_size   = server->buffer_size;
        info2.volume_number = NCP_FINFO(inode)->volNumber;
        info2.directory_id  = NCP_FINFO(inode)->DosDirNum;
        info2.dummy1 = info2.dummy2 = info2.dummy3 = 0;

        if (copy_to_user(arg, &info2, sizeof(info2)))
                return -EFAULT;
        return 0;
}

#ifdef CONFIG_COMPAT
struct compat_ncp_objectname_ioctl
{
        s32             auth_type;
        u32             object_name_len;
        compat_caddr_t  object_name;    /* an userspace data, in most cases user name */
};

struct compat_ncp_fs_info_v2 {
        s32 version;
        u32 mounted_uid;
        u32 connection;
        u32 buffer_size;

        u32 volume_number;
        u32 directory_id;

        u32 dummy1;
        u32 dummy2;
        u32 dummy3;
};

struct compat_ncp_ioctl_request {
        u32 function;
        u32 size;
        compat_caddr_t data;
};

struct compat_ncp_privatedata_ioctl
{
        u32             len;
        compat_caddr_t  data;           /* ~1000 for NDS */
};

#define NCP_IOC_GET_FS_INFO_V2_32       _IOWR('n', 4, struct compat_ncp_fs_info_v2)
#define NCP_IOC_NCPREQUEST_32           _IOR('n', 1, struct compat_ncp_ioctl_request)
#define NCP_IOC_GETOBJECTNAME_32        _IOWR('n', 9, struct compat_ncp_objectname_ioctl)
#define NCP_IOC_SETOBJECTNAME_32        _IOR('n', 9, struct compat_ncp_objectname_ioctl)
#define NCP_IOC_GETPRIVATEDATA_32       _IOWR('n', 10, struct compat_ncp_privatedata_ioctl)
#define NCP_IOC_SETPRIVATEDATA_32       _IOR('n', 10, struct compat_ncp_privatedata_ioctl)

static int
ncp_get_compat_fs_info_v2(struct ncp_server * server, struct file *file,
                   struct compat_ncp_fs_info_v2 __user * arg)
{
        struct inode *inode = file->f_path.dentry->d_inode;
        struct compat_ncp_fs_info_v2 info2;

        if ((file_permission(file, MAY_WRITE) != 0)
            && (current->uid != server->m.mounted_uid)) {
                return -EACCES;
        }
        if (copy_from_user(&info2, arg, sizeof(info2)))
                return -EFAULT;

        if (info2.version != NCP_GET_FS_INFO_VERSION_V2) {
                DPRINTK("info.version invalid: %d\n", info2.version);
                return -EINVAL;
        }
        info2.mounted_uid   = server->m.mounted_uid;
        info2.connection    = server->connection;
        info2.buffer_size   = server->buffer_size;
        info2.volume_number = NCP_FINFO(inode)->volNumber;
        info2.directory_id  = NCP_FINFO(inode)->DosDirNum;
        info2.dummy1 = info2.dummy2 = info2.dummy3 = 0;

        if (copy_to_user(arg, &info2, sizeof(info2)))
                return -EFAULT;
        return 0;
}
#endif

#define NCP_IOC_GETMOUNTUID16           _IOW('n', 2, u16)
#define NCP_IOC_GETMOUNTUID32           _IOW('n', 2, u32)
#define NCP_IOC_GETMOUNTUID64           _IOW('n', 2, u64)

#ifdef CONFIG_NCPFS_NLS
/* Here we are select the iocharset and the codepage for NLS.
 * Thanks Petr Vandrovec for idea and many hints.
 */
static int
ncp_set_charsets(struct ncp_server* server, struct ncp_nls_ioctl __user *arg)
{
        struct ncp_nls_ioctl user;
        struct nls_table *codepage;
        struct nls_table *iocharset;
        struct nls_table *oldset_io;
        struct nls_table *oldset_cp;

        if (!capable(CAP_SYS_ADMIN))
                return -EACCES;
        if (server->root_setuped)
                return -EBUSY;

        if (copy_from_user(&user, arg, sizeof(user)))
                return -EFAULT;

        codepage = NULL;
        user.codepage[NCP_IOCSNAME_LEN] = 0;
        if (!user.codepage[0] || !strcmp(user.codepage, "default"))
                codepage = load_nls_default();
        else {
                codepage = load_nls(user.codepage);
                if (!codepage) {
                        return -EBADRQC;
                }
        }

        iocharset = NULL;
        user.iocharset[NCP_IOCSNAME_LEN] = 0;
        if (!user.iocharset[0] || !strcmp(user.iocharset, "default")) {
                iocharset = load_nls_default();
                NCP_CLR_FLAG(server, NCP_FLAG_UTF8);
        } else if (!strcmp(user.iocharset, "utf8")) {
                iocharset = load_nls_default();
                NCP_SET_FLAG(server, NCP_FLAG_UTF8);
        } else {
                iocharset = load_nls(user.iocharset);
                if (!iocharset) {
                        unload_nls(codepage);
                        return -EBADRQC;
                }
                NCP_CLR_FLAG(server, NCP_FLAG_UTF8);
        }

        oldset_cp = server->nls_vol;
        server->nls_vol = codepage;
        oldset_io = server->nls_io;
        server->nls_io = iocharset;

        if (oldset_cp)
                unload_nls(oldset_cp);
        if (oldset_io)
                unload_nls(oldset_io);

        return 0;
}

static int
ncp_get_charsets(struct ncp_server* server, struct ncp_nls_ioctl __user *arg)
{
        struct ncp_nls_ioctl user;
        int len;

        memset(&user, 0, sizeof(user));
        if (server->nls_vol && server->nls_vol->charset) {
                len = strlen(server->nls_vol->charset);
                if (len > NCP_IOCSNAME_LEN)
                        len = NCP_IOCSNAME_LEN;
                strncpy(user.codepage, server->nls_vol->charset, len);
                user.codepage[len] = 0;
        }

        if (NCP_IS_FLAG(server, NCP_FLAG_UTF8))
                strcpy(user.iocharset, "utf8");
        else if (server->nls_io && server->nls_io->charset) {
                len = strlen(server->nls_io->charset);
                if (len > NCP_IOCSNAME_LEN)
                        len = NCP_IOCSNAME_LEN;
                strncpy(user.iocharset, server->nls_io->charset, len);
                user.iocharset[len] = 0;
        }

        if (copy_to_user(arg, &user, sizeof(user)))
                return -EFAULT;
        return 0;
}
#endif /* CONFIG_NCPFS_NLS */

static int __ncp_ioctl(struct inode *inode, struct file *filp,
              unsigned int cmd, unsigned long arg)
{
        struct ncp_server *server = NCP_SERVER(inode);
        int result;
        struct ncp_ioctl_request request;
        char* bouncebuffer;
        void __user *argp = (void __user *)arg;

        switch (cmd) {
#ifdef CONFIG_COMPAT
        case NCP_IOC_NCPREQUEST_32:
#endif
        case NCP_IOC_NCPREQUEST:
                if ((file_permission(filp, MAY_WRITE) != 0)
                    && (current->uid != server->m.mounted_uid)) {
                        return -EACCES;
                }
#ifdef CONFIG_COMPAT
                if (cmd == NCP_IOC_NCPREQUEST_32) {
                        struct compat_ncp_ioctl_request request32;
                        if (copy_from_user(&request32, argp, sizeof(request32)))
                                return -EFAULT;
                        request.function = request32.function;
                        request.size = request32.size;
                        request.data = compat_ptr(request32.data);
                } else
#endif
                if (copy_from_user(&request, argp, sizeof(request)))
                        return -EFAULT;

                if ((request.function > 255)
                    || (request.size >
                  NCP_PACKET_SIZE - sizeof(struct ncp_request_header))) {
                        return -EINVAL;
                }
                bouncebuffer = vmalloc(NCP_PACKET_SIZE_INTERNAL);
                if (!bouncebuffer)
                        return -ENOMEM;
                if (copy_from_user(bouncebuffer, request.data, request.size)) {
                        vfree(bouncebuffer);
                        return -EFAULT;
                }
                ncp_lock_server(server);

                /* FIXME: We hack around in the server's structures
                   here to be able to use ncp_request */

                server->has_subfunction = 0;
                server->current_size = request.size;
                memcpy(server->packet, bouncebuffer, request.size);

                result = ncp_request2(server, request.function, 
                        bouncebuffer, NCP_PACKET_SIZE_INTERNAL);
                if (result < 0)
                        result = -EIO;
                else
                        result = server->reply_size;
                ncp_unlock_server(server);
                DPRINTK("ncp_ioctl: copy %d bytes\n",
                        result);
                if (result >= 0)
                        if (copy_to_user(request.data, bouncebuffer, result))
                                result = -EFAULT;
                vfree(bouncebuffer);
                return result;

        case NCP_IOC_CONN_LOGGED_IN:

                if (!capable(CAP_SYS_ADMIN))
                        return -EACCES;
                if (!(server->m.int_flags & NCP_IMOUNT_LOGGEDIN_POSSIBLE))
                        return -EINVAL;
                if (server->root_setuped)
                        return -EBUSY;
                server->root_setuped = 1;
                return ncp_conn_logged_in(inode->i_sb);

        case NCP_IOC_GET_FS_INFO:
                return ncp_get_fs_info(server, filp, argp);

        case NCP_IOC_GET_FS_INFO_V2:
                return ncp_get_fs_info_v2(server, filp, argp);

#ifdef CONFIG_COMPAT
        case NCP_IOC_GET_FS_INFO_V2_32:
                return ncp_get_compat_fs_info_v2(server, filp, argp);
#endif
        /* we have too many combinations of CONFIG_COMPAT,
         * CONFIG_64BIT and CONFIG_UID16, so just handle
         * any of the possible ioctls */
        case NCP_IOC_GETMOUNTUID16:
        case NCP_IOC_GETMOUNTUID32:
        case NCP_IOC_GETMOUNTUID64:
                if ((file_permission(filp, MAY_READ) != 0)
                        && (current->uid != server->m.mounted_uid)) {
                        return -EACCES;
                }
                if (cmd == NCP_IOC_GETMOUNTUID16) {
                        u16 uid;
                        SET_UID(uid, server->m.mounted_uid);
                        if (put_user(uid, (u16 __user *)argp))
                                return -EFAULT;
                } else if (cmd == NCP_IOC_GETMOUNTUID32) {
                        if (put_user(server->m.mounted_uid,
                                                (u32 __user *)argp))
                                return -EFAULT;
                } else {
                        if (put_user(server->m.mounted_uid,
                                                (u64 __user *)argp))
                                return -EFAULT;
                }
                return 0;

        case NCP_IOC_GETROOT:
                {
                        struct ncp_setroot_ioctl sr;

                        if ((file_permission(filp, MAY_READ) != 0)
                            && (current->uid != server->m.mounted_uid))
                        {
                                return -EACCES;
                        }
                        if (server->m.mounted_vol[0]) {
                                struct dentry* dentry = inode->i_sb->s_root;

                                if (dentry) {
                                        struct inode* s_inode = dentry->d_inode;
                                
                                        if (s_inode) {
                                                sr.volNumber = NCP_FINFO(s_inode)->volNumber;
                                                sr.dirEntNum = NCP_FINFO(s_inode)->dirEntNum;
                                                sr.namespace = server->name_space[sr.volNumber];
                                        } else
                                                DPRINTK("ncpfs: s_root->d_inode==NULL\n");
                                } else
                                        DPRINTK("ncpfs: s_root==NULL\n");
                        } else {
                                sr.volNumber = -1;
                                sr.namespace = 0;
                                sr.dirEntNum = 0;
                        }
                        if (copy_to_user(argp, &sr, sizeof(sr)))
                                return -EFAULT;
                        return 0;
                }
        case NCP_IOC_SETROOT:
                {
                        struct ncp_setroot_ioctl sr;
                        __u32 vnum;
                        __le32 de;
                        __le32 dosde;
                        struct dentry* dentry;

                        if (!capable(CAP_SYS_ADMIN))
                        {
                                return -EACCES;
                        }
                        if (server->root_setuped) return -EBUSY;
                        if (copy_from_user(&sr, argp, sizeof(sr)))
                                return -EFAULT;
                        if (sr.volNumber < 0) {
                                server->m.mounted_vol[0] = 0;
                                vnum = NCP_NUMBER_OF_VOLUMES;
                                de = 0;
                                dosde = 0;
                        } else if (sr.volNumber >= NCP_NUMBER_OF_VOLUMES) {
                                return -EINVAL;
                        } else if (ncp_mount_subdir(server, sr.volNumber,
                                                sr.namespace, sr.dirEntNum,
                                                &vnum, &de, &dosde)) {
                                return -ENOENT;
                        }
                        
                        dentry = inode->i_sb->s_root;
                        server->root_setuped = 1;
                        if (dentry) {
                                struct inode* s_inode = dentry->d_inode;
                                
                                if (inode) {
                                        NCP_FINFO(s_inode)->volNumber = vnum;
                                        NCP_FINFO(s_inode)->dirEntNum = de;
                                        NCP_FINFO(s_inode)->DosDirNum = dosde;
                                } else
                                        DPRINTK("ncpfs: s_root->d_inode==NULL\n");
                        } else
                                DPRINTK("ncpfs: s_root==NULL\n");

                        return 0;
                }

#ifdef CONFIG_NCPFS_PACKET_SIGNING      
        case NCP_IOC_SIGN_INIT:
                if ((file_permission(filp, MAY_WRITE) != 0)
                    && (current->uid != server->m.mounted_uid))
                {
                        return -EACCES;
                }
                if (argp) {
                        if (server->sign_wanted)
                        {
                                struct ncp_sign_init sign;

                                if (copy_from_user(&sign, argp, sizeof(sign)))
                                        return -EFAULT;
                                memcpy(server->sign_root,sign.sign_root,8);
                                memcpy(server->sign_last,sign.sign_last,16);
                                server->sign_active = 1;
                        }
                        /* ignore when signatures not wanted */
                } else {
                        server->sign_active = 0;
                }
                return 0;               
                
        case NCP_IOC_SIGN_WANTED:
                if ((file_permission(filp, MAY_READ) != 0)
                    && (current->uid != server->m.mounted_uid))
                {
                        return -EACCES;
                }
                
                if (put_user(server->sign_wanted, (int __user *)argp))
                        return -EFAULT;
                return 0;
        case NCP_IOC_SET_SIGN_WANTED:
                {
                        int newstate;

                        if ((file_permission(filp, MAY_WRITE) != 0)
                            && (current->uid != server->m.mounted_uid))
                        {
                                return -EACCES;
                        }
                        /* get only low 8 bits... */
                        if (get_user(newstate, (unsigned char __user *)argp))
                                return -EFAULT;
                        if (server->sign_active) {
                                /* cannot turn signatures OFF when active */
                                if (!newstate) return -EINVAL;
                        } else {
                                server->sign_wanted = newstate != 0;
                        }
                        return 0;
                }

#endif /* CONFIG_NCPFS_PACKET_SIGNING */

#ifdef CONFIG_NCPFS_IOCTL_LOCKING
        case NCP_IOC_LOCKUNLOCK:
                if ((file_permission(filp, MAY_WRITE) != 0)
                    && (current->uid != server->m.mounted_uid))
                {
                        return -EACCES;
                }
                {
                        struct ncp_lock_ioctl    rqdata;

                        if (copy_from_user(&rqdata, argp, sizeof(rqdata)))
                                return -EFAULT;
                        if (rqdata.origin != 0)
                                return -EINVAL;
                        /* check for cmd */
                        switch (rqdata.cmd) {
                                case NCP_LOCK_EX:
                                case NCP_LOCK_SH:
                                                if (rqdata.timeout == 0)
                                                        rqdata.timeout = NCP_LOCK_DEFAULT_TIMEOUT;
                                                else if (rqdata.timeout > NCP_LOCK_MAX_TIMEOUT)
                                                        rqdata.timeout = NCP_LOCK_MAX_TIMEOUT;
                                                break;
                                case NCP_LOCK_LOG:
                                                rqdata.timeout = NCP_LOCK_DEFAULT_TIMEOUT;      /* has no effect */
                                case NCP_LOCK_CLEAR:
                                                break;
                                default:
                                                return -EINVAL;
                        }
                        /* locking needs both read and write access */
                        if ((result = ncp_make_open(inode, O_RDWR)) != 0)
                        {
                                return result;
                        }
                        result = -EIO;
                        if (!ncp_conn_valid(server))
                                goto outrel;
                        result = -EISDIR;
                        if (!S_ISREG(inode->i_mode))
                                goto outrel;
                        if (rqdata.cmd == NCP_LOCK_CLEAR)
                        {
                                result = ncp_ClearPhysicalRecord(NCP_SERVER(inode),
                                                        NCP_FINFO(inode)->file_handle, 
                                                        rqdata.offset,
                                                        rqdata.length);
                                if (result > 0) result = 0;     /* no such lock */
                        }
                        else
                        {
                                int lockcmd;

                                switch (rqdata.cmd)
                                {
                                        case NCP_LOCK_EX:  lockcmd=1; break;
                                        case NCP_LOCK_SH:  lockcmd=3; break;
                                        default:           lockcmd=0; break;
                                }
                                result = ncp_LogPhysicalRecord(NCP_SERVER(inode),
                                                        NCP_FINFO(inode)->file_handle,
                                                        lockcmd,
                                                        rqdata.offset,
                                                        rqdata.length,
                                                        rqdata.timeout);
                                if (result > 0) result = -EAGAIN;
                        }
outrel:                 
                        ncp_inode_close(inode);
                        return result;
                }
#endif  /* CONFIG_NCPFS_IOCTL_LOCKING */

#ifdef CONFIG_COMPAT
        case NCP_IOC_GETOBJECTNAME_32:
                if (current->uid != server->m.mounted_uid) {
                        return -EACCES;
                }
                {
                        struct compat_ncp_objectname_ioctl user;
                        size_t outl;

                        if (copy_from_user(&user, argp, sizeof(user)))
                                return -EFAULT;
                        user.auth_type = server->auth.auth_type;
                        outl = user.object_name_len;
                        user.object_name_len = server->auth.object_name_len;
                        if (outl > user.object_name_len)
                                outl = user.object_name_len;
                        if (outl) {
                                if (copy_to_user(compat_ptr(user.object_name),
                                                 server->auth.object_name,
                                                 outl)) return -EFAULT;
                        }
                        if (copy_to_user(argp, &user, sizeof(user)))
                                return -EFAULT;
                        return 0;
                }
#endif
        case NCP_IOC_GETOBJECTNAME:
                if (current->uid != server->m.mounted_uid) {
                        return -EACCES;
                }
                {
                        struct ncp_objectname_ioctl user;
                        size_t outl;

                        if (copy_from_user(&user, argp, sizeof(user)))
                                return -EFAULT;
                        user.auth_type = server->auth.auth_type;
                        outl = user.object_name_len;
                        user.object_name_len = server->auth.object_name_len;
                        if (outl > user.object_name_len)
                                outl = user.object_name_len;
                        if (outl) {
                                if (copy_to_user(user.object_name,
                                                 server->auth.object_name,
                                                 outl)) return -EFAULT;
                        }
                        if (copy_to_user(argp, &user, sizeof(user)))
                                return -EFAULT;
                        return 0;
                }
#ifdef CONFIG_COMPAT
        case NCP_IOC_SETOBJECTNAME_32:
#endif
        case NCP_IOC_SETOBJECTNAME:
                if (current->uid != server->m.mounted_uid) {
                        return -EACCES;
                }
                {
                        struct ncp_objectname_ioctl user;
                        void* newname;
                        void* oldname;
                        size_t oldnamelen;
                        void* oldprivate;
                        size_t oldprivatelen;

#ifdef CONFIG_COMPAT
                        if (cmd == NCP_IOC_SETOBJECTNAME_32) {
                                struct compat_ncp_objectname_ioctl user32;
                                if (copy_from_user(&user32, argp, sizeof(user32)))
                                        return -EFAULT;
                                user.auth_type = user32.auth_type;
                                user.object_name_len = user32.object_name_len;
                                user.object_name = compat_ptr(user32.object_name);
                        } else
#endif
                        if (copy_from_user(&user, argp, sizeof(user)))
                                return -EFAULT;

                        if (user.object_name_len > NCP_OBJECT_NAME_MAX_LEN)
                                return -ENOMEM;
                        if (user.object_name_len) {
                                newname = kmalloc(user.object_name_len, GFP_USER);
                                if (!newname)
                                        return -ENOMEM;
                                if (copy_from_user(newname, user.object_name, user.object_name_len)) {
                                        kfree(newname);
                                        return -EFAULT;
                                }
                        } else {
                                newname = NULL;
                        }
                        /* enter critical section */
                        /* maybe that kfree can sleep so do that this way */
                        /* it is at least more SMP friendly (in future...) */
                        oldname = server->auth.object_name;
                        oldnamelen = server->auth.object_name_len;
                        oldprivate = server->priv.data;
                        oldprivatelen = server->priv.len;
                        server->auth.auth_type = user.auth_type;
                        server->auth.object_name_len = user.object_name_len;
                        server->auth.object_name = newname;
                        server->priv.len = 0;
                        server->priv.data = NULL;
                        /* leave critical section */
                        kfree(oldprivate);
                        kfree(oldname);
                        return 0;
                }
#ifdef CONFIG_COMPAT
        case NCP_IOC_GETPRIVATEDATA_32:
#endif
        case NCP_IOC_GETPRIVATEDATA:
                if (current->uid != server->m.mounted_uid) {
                        return -EACCES;
                }
                {
                        struct ncp_privatedata_ioctl user;
                        size_t outl;

#ifdef CONFIG_COMPAT
                        if (cmd == NCP_IOC_GETPRIVATEDATA_32) {
                                struct compat_ncp_privatedata_ioctl user32;
                                if (copy_from_user(&user32, argp, sizeof(user32)))
                                        return -EFAULT;
                                user.len = user32.len;
                                user.data = compat_ptr(user32.data);
                        } else
#endif
                        if (copy_from_user(&user, argp, sizeof(user)))
                                return -EFAULT;

                        outl = user.len;
                        user.len = server->priv.len;
                        if (outl > user.len) outl = user.len;
                        if (outl) {
                                if (copy_to_user(user.data,
                                                 server->priv.data,
                                                 outl)) return -EFAULT;
                        }
#ifdef CONFIG_COMPAT
                        if (cmd == NCP_IOC_GETPRIVATEDATA_32) {
                                struct compat_ncp_privatedata_ioctl user32;
                                user32.len = user.len;
                                user32.data = (unsigned long) user.data;
                                if (copy_to_user(argp, &user32, sizeof(user32)))
                                        return -EFAULT;
                        } else
#endif
                        if (copy_to_user(argp, &user, sizeof(user)))
                                return -EFAULT;

                        return 0;
                }
#ifdef CONFIG_COMPAT
        case NCP_IOC_SETPRIVATEDATA_32:
#endif
        case NCP_IOC_SETPRIVATEDATA:
                if (current->uid != server->m.mounted_uid) {
                        return -EACCES;
                }
                {
                        struct ncp_privatedata_ioctl user;
                        void* new;
                        void* old;
                        size_t oldlen;

#ifdef CONFIG_COMPAT
                        if (cmd == NCP_IOC_SETPRIVATEDATA_32) {
                                struct compat_ncp_privatedata_ioctl user32;
                                if (copy_from_user(&user32, argp, sizeof(user32)))
                                        return -EFAULT;
                                user.len = user32.len;
                                user.data = compat_ptr(user32.data);
                        } else
#endif
                        if (copy_from_user(&user, argp, sizeof(user)))
                                return -EFAULT;

                        if (user.len > NCP_PRIVATE_DATA_MAX_LEN)
                                return -ENOMEM;
                        if (user.len) {
                                new = kmalloc(user.len, GFP_USER);
                                if (!new)
                                        return -ENOMEM;
                                if (copy_from_user(new, user.data, user.len)) {
                                        kfree(new);
                                        return -EFAULT;
                                }
                        } else {
                                new = NULL;
                        }
                        /* enter critical section */
                        old = server->priv.data;
                        oldlen = server->priv.len;
                        server->priv.len = user.len;
                        server->priv.data = new;
                        /* leave critical section */
                        kfree(old);
                        return 0;
                }

#ifdef CONFIG_NCPFS_NLS
        case NCP_IOC_SETCHARSETS:
                return ncp_set_charsets(server, argp);
                
        case NCP_IOC_GETCHARSETS:
                return ncp_get_charsets(server, argp);

#endif /* CONFIG_NCPFS_NLS */

        case NCP_IOC_SETDENTRYTTL:
                if ((file_permission(filp, MAY_WRITE) != 0) &&
                                 (current->uid != server->m.mounted_uid))
                        return -EACCES;
                {
                        u_int32_t user;

                        if (copy_from_user(&user, argp, sizeof(user)))
                                return -EFAULT;
                        /* 20 secs at most... */
                        if (user > 20000)
                                return -EINVAL;
                        user = (user * HZ) / 1000;
                        server->dentry_ttl = user;
                        return 0;
                }
                
        case NCP_IOC_GETDENTRYTTL:
                {
                        u_int32_t user = (server->dentry_ttl * 1000) / HZ;
                        if (copy_to_user(argp, &user, sizeof(user)))
                                return -EFAULT;
                        return 0;
                }

        }
        return -EINVAL;
}

static int ncp_ioctl_need_write(unsigned int cmd)
{
        switch (cmd) {
        case NCP_IOC_GET_FS_INFO:
        case NCP_IOC_GET_FS_INFO_V2:
        case NCP_IOC_NCPREQUEST:
        case NCP_IOC_SETDENTRYTTL:
        case NCP_IOC_SIGN_INIT:
        case NCP_IOC_LOCKUNLOCK:
        case NCP_IOC_SET_SIGN_WANTED:
                return 1;
        case NCP_IOC_GETOBJECTNAME:
        case NCP_IOC_SETOBJECTNAME:
        case NCP_IOC_GETPRIVATEDATA:
        case NCP_IOC_SETPRIVATEDATA:
        case NCP_IOC_SETCHARSETS:
        case NCP_IOC_GETCHARSETS:
        case NCP_IOC_CONN_LOGGED_IN:
        case NCP_IOC_GETDENTRYTTL:
        case NCP_IOC_GETMOUNTUID2:
        case NCP_IOC_SIGN_WANTED:
        case NCP_IOC_GETROOT:
        case NCP_IOC_SETROOT:
                return 0;
        default:
                /* unkown IOCTL command, assume write */
                return 1;
        }
}

int ncp_ioctl(struct inode *inode, struct file *filp,
              unsigned int cmd, unsigned long arg)
{
        int ret;

        if (ncp_ioctl_need_write(cmd)) {
                /*
                 * inside the ioctl(), any failures which
                 * are because of file_permission() are
                 * -EACCESS, so it seems consistent to keep
                 *  that here.
                 */
                if (mnt_want_write(filp->f_path.mnt))
                        return -EACCES;
        }
        ret = __ncp_ioctl(inode, filp, cmd, arg);
        if (ncp_ioctl_need_write(cmd))
                mnt_drop_write(filp->f_path.mnt);
        return ret;
}

#ifdef CONFIG_COMPAT
long ncp_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
{
        struct inode *inode = file->f_path.dentry->d_inode;
        int ret;

        lock_kernel();
        arg = (unsigned long) compat_ptr(arg);
        ret = ncp_ioctl(inode, file, cmd, arg);
        unlock_kernel();
        return ret;
}
#endif

/* [<][>][^][v][top][bottom][index][help] */

[funini.com] -> [kei@sodan] -> Kernel Reading