| // SPDX-License-Identifier: GPL-2.0 |
| /* |
| * linux/fs/read_write.c |
| * |
| * Copyright (C) 1991, 1992 Linus Torvalds |
| */ |
| |
| #include <linux/slab.h> |
| #include <linux/stat.h> |
| #include <linux/sched/xacct.h> |
| #include <linux/fcntl.h> |
| #include <linux/file.h> |
| #include <linux/uio.h> |
| #include <linux/fsnotify.h> |
| #include <linux/security.h> |
| #include <linux/export.h> |
| #include <linux/syscalls.h> |
| #include <linux/pagemap.h> |
| #include <linux/splice.h> |
| #include <linux/compat.h> |
| #include <linux/mount.h> |
| #include <linux/fs.h> |
| #include "internal.h" |
| |
| #include <linux/uaccess.h> |
| #include <asm/unistd.h> |
| |
| const struct file_operations generic_ro_fops = { |
| .llseek = generic_file_llseek, |
| .read_iter = generic_file_read_iter, |
| .mmap = generic_file_readonly_mmap, |
| .splice_read = filemap_splice_read, |
| }; |
| |
| EXPORT_SYMBOL(generic_ro_fops); |
| |
| static inline bool unsigned_offsets(struct file *file) |
| { |
| return file->f_mode & FMODE_UNSIGNED_OFFSET; |
| } |
| |
| /** |
| * vfs_setpos - update the file offset for lseek |
| * @file: file structure in question |
| * @offset: file offset to seek to |
| * @maxsize: maximum file size |
| * |
| * This is a low-level filesystem helper for updating the file offset to |
| * the value specified by @offset if the given offset is valid and it is |
| * not equal to the current file offset. |
| * |
| * Return the specified offset on success and -EINVAL on invalid offset. |
| */ |
| loff_t vfs_setpos(struct file *file, loff_t offset, loff_t maxsize) |
| { |
| if (offset < 0 && !unsigned_offsets(file)) |
| return -EINVAL; |
| if (offset > maxsize) |
| return -EINVAL; |
| |
| if (offset != file->f_pos) { |
| file->f_pos = offset; |
| file->f_version = 0; |
| } |
| return offset; |
| } |
| EXPORT_SYMBOL(vfs_setpos); |
| |
| /** |
| * generic_file_llseek_size - generic llseek implementation for regular files |
| * @file: file structure to seek on |
| * @offset: file offset to seek to |
| * @whence: type of seek |
| * @size: max size of this file in file system |
| * @eof: offset used for SEEK_END position |
| * |
| * This is a variant of generic_file_llseek that allows passing in a custom |
| * maximum file size and a custom EOF position, for e.g. hashed directories |
| * |
| * Synchronization: |
| * SEEK_SET and SEEK_END are unsynchronized (but atomic on 64bit platforms) |
| * SEEK_CUR is synchronized against other SEEK_CURs, but not read/writes. |
| * read/writes behave like SEEK_SET against seeks. |
| */ |
| loff_t |
| generic_file_llseek_size(struct file *file, loff_t offset, int whence, |
| loff_t maxsize, loff_t eof) |
| { |
| switch (whence) { |
| case SEEK_END: |
| offset += eof; |
| break; |
| case SEEK_CUR: |
| /* |
| * Here we special-case the lseek(fd, 0, SEEK_CUR) |
| * position-querying operation. Avoid rewriting the "same" |
| * f_pos value back to the file because a concurrent read(), |
| * write() or lseek() might have altered it |
| */ |
| if (offset == 0) |
| return file->f_pos; |
| /* |
| * f_lock protects against read/modify/write race with other |
| * SEEK_CURs. Note that parallel writes and reads behave |
| * like SEEK_SET. |
| */ |
| spin_lock(&file->f_lock); |
| offset = vfs_setpos(file, file->f_pos + offset, maxsize); |
| spin_unlock(&file->f_lock); |
| return offset; |
| case SEEK_DATA: |
| /* |
| * In the generic case the entire file is data, so as long as |
| * offset isn't at the end of the file then the offset is data. |
| */ |
| if ((unsigned long long)offset >= eof) |
| return -ENXIO; |
| break; |
| case SEEK_HOLE: |
| /* |
| * There is a virtual hole at the end of the file, so as long as |
| * offset isn't i_size or larger, return i_size. |
| */ |
| if ((unsigned long long)offset >= eof) |
| return -ENXIO; |
| offset = eof; |
| break; |
| } |
| |
| return vfs_setpos(file, offset, maxsize); |
| } |
| EXPORT_SYMBOL(generic_file_llseek_size); |
| |
| /** |
| * generic_file_llseek - generic llseek implementation for regular files |
| * @file: file structure to seek on |
| * @offset: file offset to seek to |
| * @whence: type of seek |
| * |
| * This is a generic implemenation of ->llseek useable for all normal local |
| * filesystems. It just updates the file offset to the value specified by |
| * @offset and @whence. |
| */ |
| loff_t generic_file_llseek(struct file *file, loff_t offset, int whence) |
| { |
| struct inode *inode = file->f_mapping->host; |
| |
| return generic_file_llseek_size(file, offset, whence, |
| inode->i_sb->s_maxbytes, |
| i_size_read(inode)); |
| } |
| EXPORT_SYMBOL(generic_file_llseek); |
| |
| /** |
| * fixed_size_llseek - llseek implementation for fixed-sized devices |
| * @file: file structure to seek on |
| * @offset: file offset to seek to |
| * @whence: type of seek |
| * @size: size of the file |
| * |
| */ |
| loff_t fixed_size_llseek(struct file *file, loff_t offset, int whence, loff_t size) |
| { |
| switch (whence) { |
| case SEEK_SET: case SEEK_CUR: case SEEK_END: |
| return generic_file_llseek_size(file, offset, whence, |
| size, size); |
| default: |
| return -EINVAL; |
| } |
| } |
| EXPORT_SYMBOL(fixed_size_llseek); |
| |
| /** |
| * no_seek_end_llseek - llseek implementation for fixed-sized devices |
| * @file: file structure to seek on |
| * @offset: file offset to seek to |
| * @whence: type of seek |
| * |
| */ |
| loff_t no_seek_end_llseek(struct file *file, loff_t offset, int whence) |
| { |
| switch (whence) { |
| case SEEK_SET: case SEEK_CUR: |
| return generic_file_llseek_size(file, offset, whence, |
| OFFSET_MAX, 0); |
| default: |
| return -EINVAL; |
| } |
| } |
| EXPORT_SYMBOL(no_seek_end_llseek); |
| |
| /** |
| * no_seek_end_llseek_size - llseek implementation for fixed-sized devices |
| * @file: file structure to seek on |
| * @offset: file offset to seek to |
| * @whence: type of seek |
| * @size: maximal offset allowed |
| * |
| */ |
| loff_t no_seek_end_llseek_size(struct file *file, loff_t offset, int whence, loff_t size) |
| { |
| switch (whence) { |
| case SEEK_SET: case SEEK_CUR: |
| return generic_file_llseek_size(file, offset, whence, |
| size, 0); |
| default: |
| return -EINVAL; |
| } |
| } |
| EXPORT_SYMBOL(no_seek_end_llseek_size); |
| |
| /** |
| * noop_llseek - No Operation Performed llseek implementation |
| * @file: file structure to seek on |
| * @offset: file offset to seek to |
| * @whence: type of seek |
| * |
| * This is an implementation of ->llseek useable for the rare special case when |
| * userspace expects the seek to succeed but the (device) file is actually not |
| * able to perform the seek. In this case you use noop_llseek() instead of |
| * falling back to the default implementation of ->llseek. |
| */ |
| loff_t noop_llseek(struct file *file, loff_t offset, int whence) |
| { |
| return file->f_pos; |
| } |
| EXPORT_SYMBOL(noop_llseek); |
| |
| loff_t default_llseek(struct file *file, loff_t offset, int whence) |
| { |
| struct inode *inode = file_inode(file); |
| loff_t retval; |
| |
| inode_lock(inode); |
| switch (whence) { |
| case SEEK_END: |
| offset += i_size_read(inode); |
| break; |
| case SEEK_CUR: |
| if (offset == 0) { |
| retval = file->f_pos; |
| goto out; |
| } |
| offset += file->f_pos; |
| break; |
| case SEEK_DATA: |
| /* |
| * In the generic case the entire file is data, so as |
| * long as offset isn't at the end of the file then the |
| * offset is data. |
| */ |
| if (offset >= inode->i_size) { |
| retval = -ENXIO; |
| goto out; |
| } |
| break; |
| case SEEK_HOLE: |
| /* |
| * There is a virtual hole at the end of the file, so |
| * as long as offset isn't i_size or larger, return |
| * i_size. |
| */ |
| if (offset >= inode->i_size) { |
| retval = -ENXIO; |
| goto out; |
| } |
| offset = inode->i_size; |
| break; |
| } |
| retval = -EINVAL; |
| if (offset >= 0 || unsigned_offsets(file)) { |
| if (offset != file->f_pos) { |
| file->f_pos = offset; |
| file->f_version = 0; |
| } |
| retval = offset; |
| } |
| out: |
| inode_unlock(inode); |
| return retval; |
| } |
| EXPORT_SYMBOL(default_llseek); |
| |
| loff_t vfs_llseek(struct file *file, loff_t offset, int whence) |
| { |
| if (!(file->f_mode & FMODE_LSEEK)) |
| return -ESPIPE; |
| return file->f_op->llseek(file, offset, whence); |
| } |
| EXPORT_SYMBOL(vfs_llseek); |
| |
| static off_t ksys_lseek(unsigned int fd, off_t offset, unsigned int whence) |
| { |
| off_t retval; |
| struct fd f = fdget_pos(fd); |
| if (!f.file) |
| return -EBADF; |
| |
| retval = -EINVAL; |
| if (whence <= SEEK_MAX) { |
| loff_t res = vfs_llseek(f.file, offset, whence); |
| retval = res; |
| if (res != (loff_t)retval) |
| retval = -EOVERFLOW; /* LFS: should only happen on 32 bit platforms */ |
| } |
| fdput_pos(f); |
| return retval; |
| } |
| |
| SYSCALL_DEFINE3(lseek, unsigned int, fd, off_t, offset, unsigned int, whence) |
| { |
| return ksys_lseek(fd, offset, whence); |
| } |
| |
| #ifdef CONFIG_COMPAT |
| COMPAT_SYSCALL_DEFINE3(lseek, unsigned int, fd, compat_off_t, offset, unsigned int, whence) |
| { |
| return ksys_lseek(fd, offset, whence); |
| } |
| #endif |
| |
| #if !defined(CONFIG_64BIT) || defined(CONFIG_COMPAT) || \ |
| defined(__ARCH_WANT_SYS_LLSEEK) |
| SYSCALL_DEFINE5(llseek, unsigned int, fd, unsigned long, offset_high, |
| unsigned long, offset_low, loff_t __user *, result, |
| unsigned int, whence) |
| { |
| int retval; |
| struct fd f = fdget_pos(fd); |
| loff_t offset; |
| |
| if (!f.file) |
| return -EBADF; |
| |
| retval = -EINVAL; |
| if (whence > SEEK_MAX) |
| goto out_putf; |
| |
| offset = vfs_llseek(f.file, ((loff_t) offset_high << 32) | offset_low, |
| whence); |
| |
| retval = (int)offset; |
| if (offset >= 0) { |
| retval = -EFAULT; |
| if (!copy_to_user(result, &offset, sizeof(offset))) |
| retval = 0; |
| } |
| out_putf: |
| fdput_pos(f); |
| return retval; |
| } |
| #endif |
| |
| int rw_verify_area(int read_write, struct file *file, const loff_t *ppos, size_t count) |
| { |
| if (unlikely((ssize_t) count < 0)) |
| return -EINVAL; |
| |
| if (ppos) { |
| loff_t pos = *ppos; |
| |
| if (unlikely(pos < 0)) { |
| if (!unsigned_offsets(file)) |
| return -EINVAL; |
| if (count >= -pos) /* both values are in 0..LLONG_MAX */ |
| return -EOVERFLOW; |
| } else if (unlikely((loff_t) (pos + count) < 0)) { |
| if (!unsigned_offsets(file)) |
| return -EINVAL; |
| } |
| } |
| |
| return security_file_permission(file, |
| read_write == READ ? MAY_READ : MAY_WRITE); |
| } |
| EXPORT_SYMBOL(rw_verify_area); |
| |
| static ssize_t new_sync_read(struct file *filp, char __user *buf, size_t len, loff_t *ppos) |
| { |
| struct kiocb kiocb; |
| struct iov_iter iter; |
| ssize_t ret; |
| |
| init_sync_kiocb(&kiocb, filp); |
| kiocb.ki_pos = (ppos ? *ppos : 0); |
| iov_iter_ubuf(&iter, ITER_DEST, buf, len); |
| |
| ret = call_read_iter(filp, &kiocb, &iter); |
| BUG_ON(ret == -EIOCBQUEUED); |
| if (ppos) |
| *ppos = kiocb.ki_pos; |
| return ret; |
| } |
| |
| static int warn_unsupported(struct file *file, const char *op) |
| { |
| pr_warn_ratelimited( |
| "kernel %s not supported for file %pD4 (pid: %d comm: %.20s)\n", |
| op, file, current->pid, current->comm); |
| return -EINVAL; |
| } |
| |
| ssize_t __kernel_read(struct file *file, void *buf, size_t count, loff_t *pos) |
| { |
| struct kvec iov = { |
| .iov_base = buf, |
| .iov_len = min_t(size_t, count, MAX_RW_COUNT), |
| }; |
| struct kiocb kiocb; |
| struct iov_iter iter; |
| ssize_t ret; |
| |
| if (WARN_ON_ONCE(!(file->f_mode & FMODE_READ))) |
| return -EINVAL; |
| if (!(file->f_mode & FMODE_CAN_READ)) |
| return -EINVAL; |
| /* |
| * Also fail if ->read_iter and ->read are both wired up as that |
| * implies very convoluted semantics. |
| */ |
| if (unlikely(!file->f_op->read_iter || file->f_op->read)) |
| return warn_unsupported(file, "read"); |
| |
| init_sync_kiocb(&kiocb, file); |
| kiocb.ki_pos = pos ? *pos : 0; |
| iov_iter_kvec(&iter, ITER_DEST, &iov, 1, iov.iov_len); |
| ret = file->f_op->read_iter(&kiocb, &iter); |
| if (ret > 0) { |
| if (pos) |
| *pos = kiocb.ki_pos; |
| fsnotify_access(file); |
| add_rchar(current, ret); |
| } |
| inc_syscr(current); |
| return ret; |
| } |
| |
| ssize_t kernel_read(struct file *file, void *buf, size_t count, loff_t *pos) |
| { |
| ssize_t ret; |
| |
| ret = rw_verify_area(READ, file, pos, count); |
| if (ret) |
| return ret; |
| return __kernel_read(file, buf, count, pos); |
| } |
| EXPORT_SYMBOL(kernel_read); |
| |
| ssize_t vfs_read(struct file *file, char __user *buf, size_t count, loff_t *pos) |
| { |
| ssize_t ret; |
| |
| if (!(file->f_mode & FMODE_READ)) |
| return -EBADF; |
| if (!(file->f_mode & FMODE_CAN_READ)) |
| return -EINVAL; |
| if (unlikely(!access_ok(buf, count))) |
| return -EFAULT; |
| |
| ret = rw_verify_area(READ, file, pos, count); |
| if (ret) |
| return ret; |
| if (count > MAX_RW_COUNT) |
| count = MAX_RW_COUNT; |
| |
| if (file->f_op->read) |
| ret = file->f_op->read(file, buf, count, pos); |
| else if (file->f_op->read_iter) |
| ret = new_sync_read(file, buf, count, pos); |
| else |
| ret = -EINVAL; |
| if (ret > 0) { |
| fsnotify_access(file); |
| add_rchar(current, ret); |
| } |
| inc_syscr(current); |
| return ret; |
| } |
| |
| static ssize_t new_sync_write(struct file *filp, const char __user *buf, size_t len, loff_t *ppos) |
| { |
| struct kiocb kiocb; |
| struct iov_iter iter; |
| ssize_t ret; |
| |
| init_sync_kiocb(&kiocb, filp); |
| kiocb.ki_pos = (ppos ? *ppos : 0); |
| iov_iter_ubuf(&iter, ITER_SOURCE, (void __user *)buf, len); |
| |
| ret = call_write_iter(filp, &kiocb, &iter); |
| BUG_ON(ret == -EIOCBQUEUED); |
| if (ret > 0 && ppos) |
| *ppos = kiocb.ki_pos; |
| return ret; |
| } |
| |
| /* caller is responsible for file_start_write/file_end_write */ |
| ssize_t __kernel_write_iter(struct file *file, struct iov_iter *from, loff_t *pos) |
| { |
| struct kiocb kiocb; |
| ssize_t ret; |
| |
| if (WARN_ON_ONCE(!(file->f_mode & FMODE_WRITE))) |
| return -EBADF; |
| if (!(file->f_mode & FMODE_CAN_WRITE)) |
| return -EINVAL; |
| /* |
| * Also fail if ->write_iter and ->write are both wired up as that |
| * implies very convoluted semantics. |
| */ |
| if (unlikely(!file->f_op->write_iter || file->f_op->write)) |
| return warn_unsupported(file, "write"); |
| |
| init_sync_kiocb(&kiocb, file); |
| kiocb.ki_pos = pos ? *pos : 0; |
| ret = file->f_op->write_iter(&kiocb, from); |
| if (ret > 0) { |
| if (pos) |
| *pos = kiocb.ki_pos; |
| fsnotify_modify(file); |
| add_wchar(current, ret); |
| } |
| inc_syscw(current); |
| return ret; |
| } |
| |
| /* caller is responsible for file_start_write/file_end_write */ |
| ssize_t __kernel_write(struct file *file, const void *buf, size_t count, loff_t *pos) |
| { |
| struct kvec iov = { |
| .iov_base = (void *)buf, |
| .iov_len = min_t(size_t, count, MAX_RW_COUNT), |
| }; |
| struct iov_iter iter; |
| iov_iter_kvec(&iter, ITER_SOURCE, &iov, 1, iov.iov_len); |
| return __kernel_write_iter(file, &iter, pos); |
| } |
| /* |
| * This "EXPORT_SYMBOL_GPL()" is more of a "EXPORT_SYMBOL_DONTUSE()", |
| * but autofs is one of the few internal kernel users that actually |
| * wants this _and_ can be built as a module. So we need to export |
| * this symbol for autofs, even though it really isn't appropriate |
| * for any other kernel modules. |
| */ |
| EXPORT_SYMBOL_GPL(__kernel_write); |
| |
| ssize_t kernel_write(struct file *file, const void *buf, size_t count, |
| loff_t *pos) |
| { |
| ssize_t ret; |
| |
| ret = rw_verify_area(WRITE, file, pos, count); |
| if (ret) |
| return ret; |
| |
| file_start_write(file); |
| ret = __kernel_write(file, buf, count, pos); |
| file_end_write(file); |
| return ret; |
| } |
| EXPORT_SYMBOL(kernel_write); |
| |
| ssize_t vfs_write(struct file *file, const char __user *buf, size_t count, loff_t *pos) |
| { |
| ssize_t ret; |
| |
| if (!(file->f_mode & FMODE_WRITE)) |
| return -EBADF; |
| if (!(file->f_mode & FMODE_CAN_WRITE)) |
| return -EINVAL; |
| if (unlikely(!access_ok(buf, count))) |
| return -EFAULT; |
| |
| ret = rw_verify_area(WRITE, file, pos, count); |
| if (ret) |
| return ret; |
| if (count > MAX_RW_COUNT) |
| count = MAX_RW_COUNT; |
| file_start_write(file); |
| if (file->f_op->write) |
| ret = file->f_op->write(file, buf, count, pos); |
| else if (file->f_op->write_iter) |
| ret = new_sync_write(file, buf, count, pos); |
| else |
| ret = -EINVAL; |
| if (ret > 0) { |
| fsnotify_modify(file); |
| add_wchar(current, ret); |
| } |
| inc_syscw(current); |
| file_end_write(file); |
| return ret; |
| } |
| |
| /* file_ppos returns &file->f_pos or NULL if file is stream */ |
| static inline loff_t *file_ppos(struct file *file) |
| { |
| return file->f_mode & FMODE_STREAM ? NULL : &file->f_pos; |
| } |
| |
| ssize_t ksys_read(unsigned int fd, char __user *buf, size_t count) |
| { |
| struct fd f = fdget_pos(fd); |
| ssize_t ret = -EBADF; |
| |
| if (f.file) { |
| loff_t pos, *ppos = file_ppos(f.file); |
| if (ppos) { |
| pos = *ppos; |
| ppos = &pos; |
| } |
| ret = vfs_read(f.file, buf, count, ppos); |
| if (ret >= 0 && ppos) |
| f.file->f_pos = pos; |
| fdput_pos(f); |
| } |
| return ret; |
| } |
| |
| SYSCALL_DEFINE3(read, unsigned int, fd, char __user *, buf, size_t, count) |
| { |
| return ksys_read(fd, buf, count); |
| } |
| |
| ssize_t ksys_write(unsigned int fd, const char __user *buf, size_t count) |
| { |
| struct fd f = fdget_pos(fd); |
| ssize_t ret = -EBADF; |
| |
| if (f.file) { |
| loff_t pos, *ppos = file_ppos(f.file); |
| if (ppos) { |
| pos = *ppos; |
| ppos = &pos; |
| } |
| ret = vfs_write(f.file, buf, count, ppos); |
| if (ret >= 0 && ppos) |
| f.file->f_pos = pos; |
| fdput_pos(f); |
| } |
| |
| return ret; |
| } |
| |
| SYSCALL_DEFINE3(write, unsigned int, fd, const char __user *, buf, |
| size_t, count) |
| { |
| return ksys_write(fd, buf, count); |
| } |
| |
| ssize_t ksys_pread64(unsigned int fd, char __user *buf, size_t count, |
| loff_t pos) |
| { |
| struct fd f; |
| ssize_t ret = -EBADF; |
| |
| if (pos < 0) |
| return -EINVAL; |
| |
| f = fdget(fd); |
| if (f.file) { |
| ret = -ESPIPE; |
| if (f.file->f_mode & FMODE_PREAD) |
| ret = vfs_read(f.file, buf, count, &pos); |
| fdput(f); |
| } |
| |
| return ret; |
| } |
| |
| SYSCALL_DEFINE4(pread64, unsigned int, fd, char __user *, buf, |
| size_t, count, loff_t, pos) |
| { |
| return ksys_pread64(fd, buf, count, pos); |
| } |
| |
| #if defined(CONFIG_COMPAT) && defined(__ARCH_WANT_COMPAT_PREAD64) |
| COMPAT_SYSCALL_DEFINE5(pread64, unsigned int, fd, char __user *, buf, |
| size_t, count, compat_arg_u64_dual(pos)) |
| { |
| return ksys_pread64(fd, buf, count, compat_arg_u64_glue(pos)); |
| } |
| #endif |
| |
| ssize_t ksys_pwrite64(unsigned int fd, const char __user *buf, |
| size_t count, loff_t pos) |
| { |
| struct fd f; |
| ssize_t ret = -EBADF; |
| |
| if (pos < 0) |
| return -EINVAL; |
| |
| f = fdget(fd); |
| if (f.file) { |
| ret = -ESPIPE; |
| if (f.file->f_mode & FMODE_PWRITE) |
| ret = vfs_write(f.file, buf, count, &pos); |
| fdput(f); |
| } |
| |
| return ret; |
| } |
| |
| SYSCALL_DEFINE4(pwrite64, unsigned int, fd, const char __user *, buf, |
| size_t, count, loff_t, pos) |
| { |
| return ksys_pwrite64(fd, buf, count, pos); |
| } |
| |
| #if defined(CONFIG_COMPAT) && defined(__ARCH_WANT_COMPAT_PWRITE64) |
| COMPAT_SYSCALL_DEFINE5(pwrite64, unsigned int, fd, const char __user *, buf, |
| size_t, count, compat_arg_u64_dual(pos)) |
| { |
| return ksys_pwrite64(fd, buf, count, compat_arg_u64_glue(pos)); |
| } |
| #endif |
| |
| static ssize_t do_iter_readv_writev(struct file *filp, struct iov_iter *iter, |
| loff_t *ppos, int type, rwf_t flags) |
| { |
| struct kiocb kiocb; |
| ssize_t ret; |
| |
| init_sync_kiocb(&kiocb, filp); |
| ret = kiocb_set_rw_flags(&kiocb, flags); |
| if (ret) |
| return ret; |
| kiocb.ki_pos = (ppos ? *ppos : 0); |
| |
| if (type == READ) |
| ret = call_read_iter(filp, &kiocb, iter); |
| else |
| ret = call_write_iter(filp, &kiocb, iter); |
| BUG_ON(ret == -EIOCBQUEUED); |
| if (ppos) |
| *ppos = kiocb.ki_pos; |
| return ret; |
| } |
| |
| /* Do it by hand, with file-ops */ |
| static ssize_t do_loop_readv_writev(struct file *filp, struct iov_iter *iter, |
| loff_t *ppos, int type, rwf_t flags) |
| { |
| ssize_t ret = 0; |
| |
| if (flags & ~RWF_HIPRI) |
| return -EOPNOTSUPP; |
| |
| while (iov_iter_count(iter)) { |
| ssize_t nr; |
| |
| if (type == READ) { |
| nr = filp->f_op->read(filp, iter_iov_addr(iter), |
| iter_iov_len(iter), ppos); |
| } else { |
| nr = filp->f_op->write(filp, iter_iov_addr(iter), |
| iter_iov_len(iter), ppos); |
| } |
| |
| if (nr < 0) { |
| if (!ret) |
| ret = nr; |
| break; |
| } |
| ret += nr; |
| if (nr != iter_iov_len(iter)) |
| break; |
| iov_iter_advance(iter, nr); |
| } |
| |
| return ret; |
| } |
| |
| static ssize_t do_iter_read(struct file *file, struct iov_iter *iter, |
| loff_t *pos, rwf_t flags) |
| { |
| size_t tot_len; |
| ssize_t ret = 0; |
| |
| if (!(file->f_mode & FMODE_READ)) |
| return -EBADF; |
| if (!(file->f_mode & FMODE_CAN_READ)) |
| return -EINVAL; |
| |
| tot_len = iov_iter_count(iter); |
| if (!tot_len) |
| goto out; |
| ret = rw_verify_area(READ, file, pos, tot_len); |
| if (ret < 0) |
| return ret; |
| |
| if (file->f_op->read_iter) |
| ret = do_iter_readv_writev(file, iter, pos, READ, flags); |
| else |
| ret = do_loop_readv_writev(file, iter, pos, READ, flags); |
| out: |
| if (ret >= 0) |
| fsnotify_access(file); |
| return ret; |
| } |
| |
| ssize_t vfs_iocb_iter_read(struct file *file, struct kiocb *iocb, |
| struct iov_iter *iter) |
| { |
| size_t tot_len; |
| ssize_t ret = 0; |
| |
| if (!file->f_op->read_iter) |
| return -EINVAL; |
| if (!(file->f_mode & FMODE_READ)) |
| return -EBADF; |
| if (!(file->f_mode & FMODE_CAN_READ)) |
| return -EINVAL; |
| |
| tot_len = iov_iter_count(iter); |
| if (!tot_len) |
| goto out; |
| ret = rw_verify_area(READ, file, &iocb->ki_pos, tot_len); |
| if (ret < 0) |
| return ret; |
| |
| ret = call_read_iter(file, iocb, iter); |
| out: |
| if (ret >= 0) |
| fsnotify_access(file); |
| return ret; |
| } |
| EXPORT_SYMBOL(vfs_iocb_iter_read); |
| |
| ssize_t vfs_iter_read(struct file *file, struct iov_iter *iter, loff_t *ppos, |
| rwf_t flags) |
| { |
| if (!file->f_op->read_iter) |
| return -EINVAL; |
| return do_iter_read(file, iter, ppos, flags); |
| } |
| EXPORT_SYMBOL(vfs_iter_read); |
| |
| static ssize_t do_iter_write(struct file *file, struct iov_iter *iter, |
| loff_t *pos, rwf_t flags) |
| { |
| size_t tot_len; |
| ssize_t ret = 0; |
| |
| if (!(file->f_mode & FMODE_WRITE)) |
| return -EBADF; |
| if (!(file->f_mode & FMODE_CAN_WRITE)) |
| return -EINVAL; |
| |
| tot_len = iov_iter_count(iter); |
| if (!tot_len) |
| return 0; |
| ret = rw_verify_area(WRITE, file, pos, tot_len); |
| if (ret < 0) |
| return ret; |
| |
| if (file->f_op->write_iter) |
| ret = do_iter_readv_writev(file, iter, pos, WRITE, flags); |
| else |
| ret = do_loop_readv_writev(file, iter, pos, WRITE, flags); |
| if (ret > 0) |
| fsnotify_modify(file); |
| return ret; |
| } |
| |
| ssize_t vfs_iocb_iter_write(struct file *file, struct kiocb *iocb, |
| struct iov_iter *iter) |
| { |
| size_t tot_len; |
| ssize_t ret = 0; |
| |
| if (!file->f_op->write_iter) |
| return -EINVAL; |
| if (!(file->f_mode & FMODE_WRITE)) |
| return -EBADF; |
| if (!(file->f_mode & FMODE_CAN_WRITE)) |
| return -EINVAL; |
| |
| tot_len = iov_iter_count(iter); |
| if (!tot_len) |
| return 0; |
| ret = rw_verify_area(WRITE, file, &iocb->ki_pos, tot_len); |
| if (ret < 0) |
| return ret; |
| |
| ret = call_write_iter(file, iocb, iter); |
| if (ret > 0) |
| fsnotify_modify(file); |
| |
| return ret; |
| } |
| EXPORT_SYMBOL(vfs_iocb_iter_write); |
| |
| ssize_t vfs_iter_write(struct file *file, struct iov_iter *iter, loff_t *ppos, |
| rwf_t flags) |
| { |
| if (!file->f_op->write_iter) |
| return -EINVAL; |
| return do_iter_write(file, iter, ppos, flags); |
| } |
| EXPORT_SYMBOL(vfs_iter_write); |
| |
| static ssize_t vfs_readv(struct file *file, const struct iovec __user *vec, |
| unsigned long vlen, loff_t *pos, rwf_t flags) |
| { |
| struct iovec iovstack[UIO_FASTIOV]; |
| struct iovec *iov = iovstack; |
| struct iov_iter iter; |
| ssize_t ret; |
| |
| ret = import_iovec(ITER_DEST, vec, vlen, ARRAY_SIZE(iovstack), &iov, &iter); |
| if (ret >= 0) { |
| ret = do_iter_read(file, &iter, pos, flags); |
| kfree(iov); |
| } |
| |
| return ret; |
| } |
| |
| static ssize_t vfs_writev(struct file *file, const struct iovec __user *vec, |
| unsigned long vlen, loff_t *pos, rwf_t flags) |
| { |
| struct iovec iovstack[UIO_FASTIOV]; |
| struct iovec *iov = iovstack; |
| struct iov_iter iter; |
| ssize_t ret; |
| |
| ret = import_iovec(ITER_SOURCE, vec, vlen, ARRAY_SIZE(iovstack), &iov, &iter); |
| if (ret >= 0) { |
| file_start_write(file); |
| ret = do_iter_write(file, &iter, pos, flags); |
| file_end_write(file); |
| kfree(iov); |
| } |
| return ret; |
| } |
| |
| static ssize_t do_readv(unsigned long fd, const struct iovec __user *vec, |
| unsigned long vlen, rwf_t flags) |
| { |
| struct fd f = fdget_pos(fd); |
| ssize_t ret = -EBADF; |
| |
| if (f.file) { |
| loff_t pos, *ppos = file_ppos(f.file); |
| if (ppos) { |
| pos = *ppos; |
| ppos = &pos; |
| } |
| ret = vfs_readv(f.file, vec, vlen, ppos, flags); |
| if (ret >= 0 && ppos) |
| f.file->f_pos = pos; |
| fdput_pos(f); |
| } |
| |
| if (ret > 0) |
| add_rchar(current, ret); |
| inc_syscr(current); |
| return ret; |
| } |
| |
| static ssize_t do_writev(unsigned long fd, const struct iovec __user *vec, |
| unsigned long vlen, rwf_t flags) |
| { |
| struct fd f = fdget_pos(fd); |
| ssize_t ret = -EBADF; |
| |
| if (f.file) { |
| loff_t pos, *ppos = file_ppos(f.file); |
| if (ppos) { |
| pos = *ppos; |
| ppos = &pos; |
| } |
| ret = vfs_writev(f.file, vec, vlen, ppos, flags); |
| if (ret >= 0 && ppos) |
| f.file->f_pos = pos; |
| fdput_pos(f); |
| } |
| |
| if (ret > 0) |
| add_wchar(current, ret); |
| inc_syscw(current); |
| return ret; |
| } |
| |
| static inline loff_t pos_from_hilo(unsigned long high, unsigned long low) |
| { |
| #define HALF_LONG_BITS (BITS_PER_LONG / 2) |
| return (((loff_t)high << HALF_LONG_BITS) << HALF_LONG_BITS) | low; |
| } |
| |
| static ssize_t do_preadv(unsigned long fd, const struct iovec __user *vec, |
| unsigned long vlen, loff_t pos, rwf_t flags) |
| { |
| struct fd f; |
| ssize_t ret = -EBADF; |
| |
| if (pos < 0) |
| return -EINVAL; |
| |
| f = fdget(fd); |
| if (f.file) { |
| ret = -ESPIPE; |
| if (f.file->f_mode & FMODE_PREAD) |
| ret = vfs_readv(f.file, vec, vlen, &pos, flags); |
| fdput(f); |
| } |
| |
| if (ret > 0) |
| add_rchar(current, ret); |
| inc_syscr(current); |
| return ret; |
| } |
| |
| static ssize_t do_pwritev(unsigned long fd, const struct iovec __user *vec, |
| unsigned long vlen, loff_t pos, rwf_t flags) |
| { |
| struct fd f; |
| ssize_t ret = -EBADF; |
| |
| if (pos < 0) |
| return -EINVAL; |
| |
| f = fdget(fd); |
| if (f.file) { |
| ret = -ESPIPE; |
| if (f.file->f_mode & FMODE_PWRITE) |
| ret = vfs_writev(f.file, vec, vlen, &pos, flags); |
| fdput(f); |
| } |
| |
| if (ret > 0) |
| add_wchar(current, ret); |
| inc_syscw(current); |
| return ret; |
| } |
| |
| SYSCALL_DEFINE3(readv, unsigned long, fd, const struct iovec __user *, vec, |
| unsigned long, vlen) |
| { |
| return do_readv(fd, vec, vlen, 0); |
| } |
| |
| SYSCALL_DEFINE3(writev, unsigned long, fd, const struct iovec __user *, vec, |
| unsigned long, vlen) |
| { |
| return do_writev(fd, vec, vlen, 0); |
| } |
| |
| SYSCALL_DEFINE5(preadv, unsigned long, fd, const struct iovec __user *, vec, |
| unsigned long, vlen, unsigned long, pos_l, unsigned long, pos_h) |
| { |
| loff_t pos = pos_from_hilo(pos_h, pos_l); |
| |
| return do_preadv(fd, vec, vlen, pos, 0); |
| } |
| |
| SYSCALL_DEFINE6(preadv2, unsigned long, fd, const struct iovec __user *, vec, |
| unsigned long, vlen, unsigned long, pos_l, unsigned long, pos_h, |
| rwf_t, flags) |
| { |
| loff_t pos = pos_from_hilo(pos_h, pos_l); |
| |
| if (pos == -1) |
| return do_readv(fd, vec, vlen, flags); |
| |
| return do_preadv(fd, vec, vlen, pos, flags); |
| } |
| |
| SYSCALL_DEFINE5(pwritev, unsigned long, fd, const struct iovec __user *, vec, |
| unsigned long, vlen, unsigned long, pos_l, unsigned long, pos_h) |
| { |
| loff_t pos = pos_from_hilo(pos_h, pos_l); |
| |
| return do_pwritev(fd, vec, vlen, pos, 0); |
| } |
| |
| SYSCALL_DEFINE6(pwritev2, unsigned long, fd, const struct iovec __user *, vec, |
| unsigned long, vlen, unsigned long, pos_l, unsigned long, pos_h, |
| rwf_t, flags) |
| { |
| loff_t pos = pos_from_hilo(pos_h, pos_l); |
| |
| if (pos == -1) |
| return do_writev(fd, vec, vlen, flags); |
| |
| return do_pwritev(fd, vec, vlen, pos, flags); |
| } |
| |
| /* |
| * Various compat syscalls. Note that they all pretend to take a native |
| * iovec - import_iovec will properly treat those as compat_iovecs based on |
| * in_compat_syscall(). |
| */ |
| #ifdef CONFIG_COMPAT |
| #ifdef __ARCH_WANT_COMPAT_SYS_PREADV64 |
| COMPAT_SYSCALL_DEFINE4(preadv64, unsigned long, fd, |
| const struct iovec __user *, vec, |
| unsigned long, vlen, loff_t, pos) |
| { |
| return do_preadv(fd, vec, vlen, pos, 0); |
| } |
| #endif |
| |
| COMPAT_SYSCALL_DEFINE5(preadv, compat_ulong_t, fd, |
| const struct iovec __user *, vec, |
| compat_ulong_t, vlen, u32, pos_low, u32, pos_high) |
| { |
| loff_t pos = ((loff_t)pos_high << 32) | pos_low; |
| |
| return do_preadv(fd, vec, vlen, pos, 0); |
| } |
| |
| #ifdef __ARCH_WANT_COMPAT_SYS_PREADV64V2 |
| COMPAT_SYSCALL_DEFINE5(preadv64v2, unsigned long, fd, |
| const struct iovec __user *, vec, |
| unsigned long, vlen, loff_t, pos, rwf_t, flags) |
| { |
| if (pos == -1) |
| return do_readv(fd, vec, vlen, flags); |
| return do_preadv(fd, vec, vlen, pos, flags); |
| } |
| #endif |
| |
| COMPAT_SYSCALL_DEFINE6(preadv2, compat_ulong_t, fd, |
| const struct iovec __user *, vec, |
| compat_ulong_t, vlen, u32, pos_low, u32, pos_high, |
| rwf_t, flags) |
| { |
| loff_t pos = ((loff_t)pos_high << 32) | pos_low; |
| |
| if (pos == -1) |
| return do_readv(fd, vec, vlen, flags); |
| return do_preadv(fd, vec, vlen, pos, flags); |
| } |
| |
| #ifdef __ARCH_WANT_COMPAT_SYS_PWRITEV64 |
| COMPAT_SYSCALL_DEFINE4(pwritev64, unsigned long, fd, |
| const struct iovec __user *, vec, |
| unsigned long, vlen, loff_t, pos) |
| { |
| return do_pwritev(fd, vec, vlen, pos, 0); |
| } |
| #endif |
| |
| COMPAT_SYSCALL_DEFINE5(pwritev, compat_ulong_t, fd, |
| const struct iovec __user *,vec, |
| compat_ulong_t, vlen, u32, pos_low, u32, pos_high) |
| { |
| loff_t pos = ((loff_t)pos_high << 32) | pos_low; |
| |
| return do_pwritev(fd, vec, vlen, pos, 0); |
| } |
| |
| #ifdef __ARCH_WANT_COMPAT_SYS_PWRITEV64V2 |
| COMPAT_SYSCALL_DEFINE5(pwritev64v2, unsigned long, fd, |
| const struct iovec __user *, vec, |
| unsigned long, vlen, loff_t, pos, rwf_t, flags) |
| { |
| if (pos == -1) |
| return do_writev(fd, vec, vlen, flags); |
| return do_pwritev(fd, vec, vlen, pos, flags); |
| } |
| #endif |
| |
| COMPAT_SYSCALL_DEFINE6(pwritev2, compat_ulong_t, fd, |
| const struct iovec __user *,vec, |
| compat_ulong_t, vlen, u32, pos_low, u32, pos_high, rwf_t, flags) |
| { |
| loff_t pos = ((loff_t)pos_high << 32) | pos_low; |
| |
| if (pos == -1) |
| return do_writev(fd, vec, vlen, flags); |
| return do_pwritev(fd, vec, vlen, pos, flags); |
| } |
| #endif /* CONFIG_COMPAT */ |
| |
| static ssize_t do_sendfile(int out_fd, int in_fd, loff_t *ppos, |
| size_t count, loff_t max) |
| { |
| struct fd in, out; |
| struct inode *in_inode, *out_inode; |
| struct pipe_inode_info *opipe; |
| loff_t pos; |
| loff_t out_pos; |
| ssize_t retval; |
| int fl; |
| |
| /* |
| * Get input file, and verify that it is ok.. |
| */ |
| retval = -EBADF; |
| in = fdget(in_fd); |
| if (!in.file) |
| goto out; |
| if (!(in.file->f_mode & FMODE_READ)) |
| goto fput_in; |
| retval = -ESPIPE; |
| if (!ppos) { |
| pos = in.file->f_pos; |
| } else { |
| pos = *ppos; |
| if (!(in.file->f_mode & FMODE_PREAD)) |
| goto fput_in; |
| } |
| retval = rw_verify_area(READ, in.file, &pos, count); |
| if (retval < 0) |
| goto fput_in; |
| if (count > MAX_RW_COUNT) |
| count = MAX_RW_COUNT; |
| |
| /* |
| * Get output file, and verify that it is ok.. |
| */ |
| retval = -EBADF; |
| out = fdget(out_fd); |
| if (!out.file) |
| goto fput_in; |
| if (!(out.file->f_mode & FMODE_WRITE)) |
| goto fput_out; |
| in_inode = file_inode(in.file); |
| out_inode = file_inode(out.file); |
| out_pos = out.file->f_pos; |
| |
| if (!max) |
| max = min(in_inode->i_sb->s_maxbytes, out_inode->i_sb->s_maxbytes); |
| |
| if (unlikely(pos + count > max)) { |
| retval = -EOVERFLOW; |
| if (pos >= max) |
| goto fput_out; |
| count = max - pos; |
| } |
| |
| fl = 0; |
| #if 0 |
| /* |
| * We need to debate whether we can enable this or not. The |
| * man page documents EAGAIN return for the output at least, |
| * and the application is arguably buggy if it doesn't expect |
| * EAGAIN on a non-blocking file descriptor. |
| */ |
| if (in.file->f_flags & O_NONBLOCK) |
| fl = SPLICE_F_NONBLOCK; |
| #endif |
| opipe = get_pipe_info(out.file, true); |
| if (!opipe) { |
| retval = rw_verify_area(WRITE, out.file, &out_pos, count); |
| if (retval < 0) |
| goto fput_out; |
| file_start_write(out.file); |
| retval = do_splice_direct(in.file, &pos, out.file, &out_pos, |
| count, fl); |
| file_end_write(out.file); |
| } else { |
| if (out.file->f_flags & O_NONBLOCK) |
| fl |= SPLICE_F_NONBLOCK; |
| |
| retval = splice_file_to_pipe(in.file, opipe, &pos, count, fl); |
| } |
| |
| if (retval > 0) { |
| add_rchar(current, retval); |
| add_wchar(current, retval); |
| fsnotify_access(in.file); |
| fsnotify_modify(out.file); |
| out.file->f_pos = out_pos; |
| if (ppos) |
| *ppos = pos; |
| else |
| in.file->f_pos = pos; |
| } |
| |
| inc_syscr(current); |
| inc_syscw(current); |
| if (pos > max) |
| retval = -EOVERFLOW; |
| |
| fput_out: |
| fdput(out); |
| fput_in: |
| fdput(in); |
| out: |
| return retval; |
| } |
| |
| SYSCALL_DEFINE4(sendfile, int, out_fd, int, in_fd, off_t __user *, offset, size_t, count) |
| { |
| loff_t pos; |
| off_t off; |
| ssize_t ret; |
| |
| if (offset) { |
| if (unlikely(get_user(off, offset))) |
| return -EFAULT; |
| pos = off; |
| ret = do_sendfile(out_fd, in_fd, &pos, count, MAX_NON_LFS); |
| if (unlikely(put_user(pos, offset))) |
| return -EFAULT; |
| return ret; |
| } |
| |
| return do_sendfile(out_fd, in_fd, NULL, count, 0); |
| } |
| |
| SYSCALL_DEFINE4(sendfile64, int, out_fd, int, in_fd, loff_t __user *, offset, size_t, count) |
| { |
| loff_t pos; |
| ssize_t ret; |
| |
| if (offset) { |
| if (unlikely(copy_from_user(&pos, offset, sizeof(loff_t)))) |
| return -EFAULT; |
| ret = do_sendfile(out_fd, in_fd, &pos, count, 0); |
| if (unlikely(put_user(pos, offset))) |
| return -EFAULT; |
| return ret; |
| } |
| |
| return do_sendfile(out_fd, in_fd, NULL, count, 0); |
| } |
| |
| #ifdef CONFIG_COMPAT |
| COMPAT_SYSCALL_DEFINE4(sendfile, int, out_fd, int, in_fd, |
| compat_off_t __user *, offset, compat_size_t, count) |
| { |
| loff_t pos; |
| off_t off; |
| ssize_t ret; |
| |
| if (offset) { |
| if (unlikely(get_user(off, offset))) |
| return -EFAULT; |
| pos = off; |
| ret = do_sendfile(out_fd, in_fd, &pos, count, MAX_NON_LFS); |
| if (unlikely(put_user(pos, offset))) |
| return -EFAULT; |
| return ret; |
| } |
| |
| return do_sendfile(out_fd, in_fd, NULL, count, 0); |
| } |
| |
| COMPAT_SYSCALL_DEFINE4(sendfile64, int, out_fd, int, in_fd, |
| compat_loff_t __user *, offset, compat_size_t, count) |
| { |
| loff_t pos; |
| ssize_t ret; |
| |
| if (offset) { |
| if (unlikely(copy_from_user(&pos, offset, sizeof(loff_t)))) |
| return -EFAULT; |
| ret = do_sendfile(out_fd, in_fd, &pos, count, 0); |
| if (unlikely(put_user(pos, offset))) |
| return -EFAULT; |
| return ret; |
| } |
| |
| return do_sendfile(out_fd, in_fd, NULL, count, 0); |
| } |
| #endif |
| |
| /** |
| * generic_copy_file_range - copy data between two files |
| * @file_in: file structure to read from |
| * @pos_in: file offset to read from |
| * @file_out: file structure to write data to |
| * @pos_out: file offset to write data to |
| * @len: amount of data to copy |
| * @flags: copy flags |
| * |
| * This is a generic filesystem helper to copy data from one file to another. |
| * It has no constraints on the source or destination file owners - the files |
| * can belong to different superblocks and different filesystem types. Short |
| * copies are allowed. |
| * |
| * This should be called from the @file_out filesystem, as per the |
| * ->copy_file_range() method. |
| * |
| * Returns the number of bytes copied or a negative error indicating the |
| * failure. |
| */ |
| |
| ssize_t generic_copy_file_range(struct file *file_in, loff_t pos_in, |
| struct file *file_out, loff_t pos_out, |
| size_t len, unsigned int flags) |
| { |
| lockdep_assert(sb_write_started(file_inode(file_out)->i_sb)); |
| |
| return do_splice_direct(file_in, &pos_in, file_out, &pos_out, |
| len > MAX_RW_COUNT ? MAX_RW_COUNT : len, 0); |
| } |
| EXPORT_SYMBOL(generic_copy_file_range); |
| |
| /* |
| * Performs necessary checks before doing a file copy |
| * |
| * Can adjust amount of bytes to copy via @req_count argument. |
| * Returns appropriate error code that caller should return or |
| * zero in case the copy should be allowed. |
| */ |
| static int generic_copy_file_checks(struct file *file_in, loff_t pos_in, |
| struct file *file_out, loff_t pos_out, |
| size_t *req_count, unsigned int flags) |
| { |
| struct inode *inode_in = file_inode(file_in); |
| struct inode *inode_out = file_inode(file_out); |
| uint64_t count = *req_count; |
| loff_t size_in; |
| int ret; |
| |
| ret = generic_file_rw_checks(file_in, file_out); |
| if (ret) |
| return ret; |
| |
| /* |
| * We allow some filesystems to handle cross sb copy, but passing |
| * a file of the wrong filesystem type to filesystem driver can result |
| * in an attempt to dereference the wrong type of ->private_data, so |
| * avoid doing that until we really have a good reason. |
| * |
| * nfs and cifs define several different file_system_type structures |
| * and several different sets of file_operations, but they all end up |
| * using the same ->copy_file_range() function pointer. |
| */ |
| if (flags & COPY_FILE_SPLICE) { |
| /* cross sb splice is allowed */ |
| } else if (file_out->f_op->copy_file_range) { |
| if (file_in->f_op->copy_file_range != |
| file_out->f_op->copy_file_range) |
| return -EXDEV; |
| } else if (file_inode(file_in)->i_sb != file_inode(file_out)->i_sb) { |
| return -EXDEV; |
| } |
| |
| /* Don't touch certain kinds of inodes */ |
| if (IS_IMMUTABLE(inode_out)) |
| return -EPERM; |
| |
| if (IS_SWAPFILE(inode_in) || IS_SWAPFILE(inode_out)) |
| return -ETXTBSY; |
| |
| /* Ensure offsets don't wrap. */ |
| if (pos_in + count < pos_in || pos_out + count < pos_out) |
| return -EOVERFLOW; |
| |
| /* Shorten the copy to EOF */ |
| size_in = i_size_read(inode_in); |
| if (pos_in >= size_in) |
| count = 0; |
| else |
| count = min(count, size_in - (uint64_t)pos_in); |
| |
| ret = generic_write_check_limits(file_out, pos_out, &count); |
| if (ret) |
| return ret; |
| |
| /* Don't allow overlapped copying within the same file. */ |
| if (inode_in == inode_out && |
| pos_out + count > pos_in && |
| pos_out < pos_in + count) |
| return -EINVAL; |
| |
| *req_count = count; |
| return 0; |
| } |
| |
| /* |
| * copy_file_range() differs from regular file read and write in that it |
| * specifically allows return partial success. When it does so is up to |
| * the copy_file_range method. |
| */ |
| ssize_t vfs_copy_file_range(struct file *file_in, loff_t pos_in, |
| struct file *file_out, loff_t pos_out, |
| size_t len, unsigned int flags) |
| { |
| ssize_t ret; |
| bool splice = flags & COPY_FILE_SPLICE; |
| |
| if (flags & ~COPY_FILE_SPLICE) |
| return -EINVAL; |
| |
| ret = generic_copy_file_checks(file_in, pos_in, file_out, pos_out, &len, |
| flags); |
| if (unlikely(ret)) |
| return ret; |
| |
| ret = rw_verify_area(READ, file_in, &pos_in, len); |
| if (unlikely(ret)) |
| return ret; |
| |
| ret = rw_verify_area(WRITE, file_out, &pos_out, len); |
| if (unlikely(ret)) |
| return ret; |
| |
| if (len == 0) |
| return 0; |
| |
| file_start_write(file_out); |
| |
| /* |
| * Cloning is supported by more file systems, so we implement copy on |
| * same sb using clone, but for filesystems where both clone and copy |
| * are supported (e.g. nfs,cifs), we only call the copy method. |
| */ |
| if (!splice && file_out->f_op->copy_file_range) { |
| ret = file_out->f_op->copy_file_range(file_in, pos_in, |
| file_out, pos_out, |
| len, flags); |
| goto done; |
| } |
| |
| if (!splice && file_in->f_op->remap_file_range && |
| file_inode(file_in)->i_sb == file_inode(file_out)->i_sb) { |
| ret = file_in->f_op->remap_file_range(file_in, pos_in, |
| file_out, pos_out, |
| min_t(loff_t, MAX_RW_COUNT, len), |
| REMAP_FILE_CAN_SHORTEN); |
| if (ret > 0) |
| goto done; |
| } |
| |
| /* |
| * We can get here for same sb copy of filesystems that do not implement |
| * ->copy_file_range() in case filesystem does not support clone or in |
| * case filesystem supports clone but rejected the clone request (e.g. |
| * because it was not block aligned). |
| * |
| * In both cases, fall back to kernel copy so we are able to maintain a |
| * consistent story about which filesystems support copy_file_range() |
| * and which filesystems do not, that will allow userspace tools to |
| * make consistent desicions w.r.t using copy_file_range(). |
| * |
| * We also get here if caller (e.g. nfsd) requested COPY_FILE_SPLICE. |
| */ |
| ret = generic_copy_file_range(file_in, pos_in, file_out, pos_out, len, |
| flags); |
| |
| done: |
| if (ret > 0) { |
| fsnotify_access(file_in); |
| add_rchar(current, ret); |
| fsnotify_modify(file_out); |
| add_wchar(current, ret); |
| } |
| |
| inc_syscr(current); |
| inc_syscw(current); |
| |
| file_end_write(file_out); |
| |
| return ret; |
| } |
| EXPORT_SYMBOL(vfs_copy_file_range); |
| |
| SYSCALL_DEFINE6(copy_file_range, int, fd_in, loff_t __user *, off_in, |
| int, fd_out, loff_t __user *, off_out, |
| size_t, len, unsigned int, flags) |
| { |
| loff_t pos_in; |
| loff_t pos_out; |
| struct fd f_in; |
| struct fd f_out; |
| ssize_t ret = -EBADF; |
| |
| f_in = fdget(fd_in); |
| if (!f_in.file) |
| goto out2; |
| |
| f_out = fdget(fd_out); |
| if (!f_out.file) |
| goto out1; |
| |
| ret = -EFAULT; |
| if (off_in) { |
| if (copy_from_user(&pos_in, off_in, sizeof(loff_t))) |
| goto out; |
| } else { |
| pos_in = f_in.file->f_pos; |
| } |
| |
| if (off_out) { |
| if (copy_from_user(&pos_out, off_out, sizeof(loff_t))) |
| goto out; |
| } else { |
| pos_out = f_out.file->f_pos; |
| } |
| |
| ret = -EINVAL; |
| if (flags != 0) |
| goto out; |
| |
| ret = vfs_copy_file_range(f_in.file, pos_in, f_out.file, pos_out, len, |
| flags); |
| if (ret > 0) { |
| pos_in += ret; |
| pos_out += ret; |
| |
| if (off_in) { |
| if (copy_to_user(off_in, &pos_in, sizeof(loff_t))) |
| ret = -EFAULT; |
| } else { |
| f_in.file->f_pos = pos_in; |
| } |
| |
| if (off_out) { |
| if (copy_to_user(off_out, &pos_out, sizeof(loff_t))) |
| ret = -EFAULT; |
| } else { |
| f_out.file->f_pos = pos_out; |
| } |
| } |
| |
| out: |
| fdput(f_out); |
| out1: |
| fdput(f_in); |
| out2: |
| return ret; |
| } |
| |
| /* |
| * Don't operate on ranges the page cache doesn't support, and don't exceed the |
| * LFS limits. If pos is under the limit it becomes a short access. If it |
| * exceeds the limit we return -EFBIG. |
| */ |
| int generic_write_check_limits(struct file *file, loff_t pos, loff_t *count) |
| { |
| struct inode *inode = file->f_mapping->host; |
| loff_t max_size = inode->i_sb->s_maxbytes; |
| loff_t limit = rlimit(RLIMIT_FSIZE); |
| |
| if (limit != RLIM_INFINITY) { |
| if (pos >= limit) { |
| send_sig(SIGXFSZ, current, 0); |
| return -EFBIG; |
| } |
| *count = min(*count, limit - pos); |
| } |
| |
| if (!(file->f_flags & O_LARGEFILE)) |
| max_size = MAX_NON_LFS; |
| |
| if (unlikely(pos >= max_size)) |
| return -EFBIG; |
| |
| *count = min(*count, max_size - pos); |
| |
| return 0; |
| } |
| |
| /* Like generic_write_checks(), but takes size of write instead of iter. */ |
| int generic_write_checks_count(struct kiocb *iocb, loff_t *count) |
| { |
| struct file *file = iocb->ki_filp; |
| struct inode *inode = file->f_mapping->host; |
| |
| if (IS_SWAPFILE(inode)) |
| return -ETXTBSY; |
| |
| if (!*count) |
| return 0; |
| |
| if (iocb->ki_flags & IOCB_APPEND) |
| iocb->ki_pos = i_size_read(inode); |
| |
| if ((iocb->ki_flags & IOCB_NOWAIT) && |
| !((iocb->ki_flags & IOCB_DIRECT) || |
| (file->f_mode & FMODE_BUF_WASYNC))) |
| return -EINVAL; |
| |
| return generic_write_check_limits(iocb->ki_filp, iocb->ki_pos, count); |
| } |
| EXPORT_SYMBOL(generic_write_checks_count); |
| |
| /* |
| * Performs necessary checks before doing a write |
| * |
| * Can adjust writing position or amount of bytes to write. |
| * Returns appropriate error code that caller should return or |
| * zero in case that write should be allowed. |
| */ |
| ssize_t generic_write_checks(struct kiocb *iocb, struct iov_iter *from) |
| { |
| loff_t count = iov_iter_count(from); |
| int ret; |
| |
| ret = generic_write_checks_count(iocb, &count); |
| if (ret) |
| return ret; |
| |
| iov_iter_truncate(from, count); |
| return iov_iter_count(from); |
| } |
| EXPORT_SYMBOL(generic_write_checks); |
| |
| /* |
| * Performs common checks before doing a file copy/clone |
| * from @file_in to @file_out. |
| */ |
| int generic_file_rw_checks(struct file *file_in, struct file *file_out) |
| { |
| struct inode *inode_in = file_inode(file_in); |
| struct inode *inode_out = file_inode(file_out); |
| |
| /* Don't copy dirs, pipes, sockets... */ |
| if (S_ISDIR(inode_in->i_mode) || S_ISDIR(inode_out->i_mode)) |
| return -EISDIR; |
| if (!S_ISREG(inode_in->i_mode) || !S_ISREG(inode_out->i_mode)) |
| return -EINVAL; |
| |
| if (!(file_in->f_mode & FMODE_READ) || |
| !(file_out->f_mode & FMODE_WRITE) || |
| (file_out->f_flags & O_APPEND)) |
| return -EBADF; |
| |
| return 0; |
| } |