https://source.android.com/docs/security/bulletin/2024-05-01 CVE-2023-4622 * tag 'ASB-2024-05-05_4.19-stable' of https://android.googlesource.com/kernel/common: Revert "timers: Rename del_timer_sync() to timer_delete_sync()" Revert "geneve: make sure to pull inner header in geneve_rx()" Linux 4.19.312 amdkfd: use calloc instead of kzalloc to avoid integer overflow initramfs: fix populate_initrd_image() section mismatch ip_gre: do not report erspan version on GRE interface erspan: Check IFLA_GRE_ERSPAN_VER is set. VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() Bluetooth: btintel: Fixe build regression x86/mm/pat: fix VM_PAT handling in COW mappings virtio: reenable config if freezing device failed drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc fbmon: prevent division by zero in fb_videomode_from_videomode() fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined tools: iio: replace seekdir() in iio_generic_buffer ktest: force $buildonly = 1 for 'make_warnings_file' test type Input: allocate keycode for Display refresh rate toggle block: prevent division by zero in blk_rq_stat_sum() SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int drm/amd/display: Fix nanosec stat overflow media: sta2x11: fix irq handler cast isofs: handle CDs with bad root inode but good Joliet root directory scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() sysv: don't call sb_bread() with pointers_lock held Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails Bluetooth: btintel: Fix null ptr deref in btintel_read_version btrfs: send: handle path ref underflow in header iterate_inode_ref() btrfs: export: handle invalid inode or root reference in btrfs_get_parent() btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() arm64: dts: rockchip: fix rk3399 hdmi ports node VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() wifi: ath9k: fix LNA selection in ath_ant_try_scan() ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone ata: sata_mv: Fix PCI device ID table declaration compilation warning ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw erspan: make sure erspan_base_hdr is present in skb->head erspan: Add type I version 0 support. init: open /initrd.image with O_LARGEFILE initramfs: switch initramfs unpacking to struct file based APIs fs: add a vfs_fchmod helper fs: add a vfs_fchown helper initramfs: factor out a helper to populate the initrd image staging: vc04_services: fix information leak in create_component() staging: vc04_services: changen strncpy() to strscpy_pad() staging: mmal-vchiq: Fix client_component for 64 bit kernel staging: mmal-vchiq: Allocate and free components as required staging: mmal-vchiq: Avoid use of bool in structures i40e: fix vf may be used uninitialized in this function warning ipv6: Fix infinite recursion in fib6_dump_done(). selftests: reuseaddr_conflict: add missing new line at the end of the output net: stmmac: fix rx queue priority assignment net/sched: act_skbmod: prevent kernel-infoleak netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." net/rds: fix possible cp null dereference netfilter: nf_tables: disallow timeout for anonymous sets Bluetooth: Fix TOCTOU in HCI debugfs implementation Bluetooth: hci_event: set the conn encrypted before conn establishes r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d tcp: properly terminate timers for kernel sockets mptcp: add sk_stop_timer_sync helper nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet USB: core: Fix deadlock in usb_deauthorize_interface() scsi: lpfc: Correct size for wqe for memset() x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled scsi: qla2xxx: Fix command flush on cable pull usb: udc: remove warning when queue disabled ep usb: dwc2: gadget: LPM flow fix usb: dwc2: host: Fix ISOC flow in DDMA mode usb: dwc2: host: Fix hibernation flow usb: dwc2: host: Fix remote wakeup from hibernation loop: loop_set_status_from_info() check before assignment loop: Check for overflow while configuring loop loop: Factor out configuring loop from status powerpc: xor_vmx: Add '-mhard-float' to CFLAGS efivarfs: Request at most 512 bytes for variable names perf/core: Fix reentry problem in perf_output_read_group() loop: properly observe rotational flag of underlying device loop: Refactor loop_set_status() size calculation loop: Factor out setting loop device size loop: Remove sector_t truncation checks loop: Call loop_config_discard() only after new config is applied Revert "loop: Check for overflow while configuring loop" btrfs: allocate btrfs_ioctl_defrag_range_args on stack printk: Update @console_may_schedule in console_trylock_spinning() fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs usb: cdc-wdm: close race between read and workqueue exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes mm/migrate: set swap entry values of THP tail pages properly. mm/memory-failure: fix an incorrect use of tail pages vt: fix memory overlapping when deleting chars in the buffer vt: fix unicode buffer corruption when deleting characters tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled usb: port: Don't try to peer unused USB ports based on location usb: gadget: ncm: Fix handling of zero block length packets USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform xfrm: Avoid clang fortify warning in copy_to_user_tmpl() netfilter: nf_tables: reject constant set with timeout netfilter: nf_tables: disallow anonymous set with timeout flag comedi: comedi_test: Prevent timers rescheduling during deletion ahci: asm1064: asm1166: don't limit reported ports ahci: asm1064: correct count of reported ports x86/CPU/AMD: Update the Zenbleed microcode revisions nilfs2: prevent kernel bug at submit_bh_wbc() nilfs2: use a more common logging style nilfs2: fix failure to detect DAT corruption in btree and direct mappings memtest: use {READ,WRITE}_ONCE in memory scanning drm/vc4: hdmi: do not return negative values from .get_modes() drm/imx/ipuv3: do not return negative values from .get_modes() s390/zcrypt: fix reference counting on zcrypt card objects soc: fsl: qbman: Use raw spinlock for cgr_lock soc: fsl: qbman: Add CGR update function soc: fsl: qbman: Add helper for sanity checking cgr ops soc: fsl: qbman: Always disable interrupts when taking cgr_lock vfio/platform: Disable virqfds on cleanup kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 speakup: Fix 8bit characters from direct synth slimbus: core: Remove usage of the deprecated ida_simple_xx() API ext4: fix corruption during on-line resize hwmon: (amc6821) add of_match table mmc: core: Fix switch on gp3 partition dm-raid: fix lockdep waring in "pers->hot_add_disk" Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" PCI/PM: Drain runtime-idle callbacks before driver removal PCI: Drop pci_device_remove() test of pci_dev->driver fuse: don't unhash root mmc: tmio: avoid concurrent runs of mmc_request_done() PM: sleep: wakeirq: fix wake irq warning in system suspend USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M USB: serial: option: add MeiG Smart SLM320 product USB: serial: cp210x: add ID for MGP Instruments PDS100 USB: serial: add device ID for VeriFone adapter USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB powerpc/fsl: Fix mfpmr build errors with newer binutils clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays PM: suspend: Set mem_sleep_current during kernel command line setup parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds parisc: Fix csum_ipv6_magic on 64-bit systems parisc: Fix csum_ipv6_magic on 32-bit systems parisc: Fix ip_fast_csum parisc: Do not hardcode registers in checksum functions ubi: correct the calculation of fastmap size ubi: Check for too small LEB size in VTBL code ubifs: Set page uptodate in the correct place fat: fix uninitialized field in nostale filehandles crypto: qat - resolve race condition during AER recovery crypto: qat - fix double free during reset sparc: vDSO: fix return value of __setup handler sparc64: NMI watchdog: fix return value of __setup handler KVM: Always flush async #PF workqueue when vCPU is being destroyed media: xc4000: Fix atomicity violation in xc4000_get_frequency arm: dts: marvell: Fix maxium->maxim typo in brownstone dts ARM: dts: mmp2-brownstone: Don't redeclare phandle references smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach timers: Rename del_timer_sync() to timer_delete_sync() timers: Use del_timer_sync() even on UP timers: Update kernel-doc for various functions timers: Prepare support for PREEMPT_RT timer/trace: Improve timer tracing timer/trace: Replace deprecated vsprintf pointer extension %pf by %ps x86/bugs: Use sysfs_emit() x86/cpu: Support AMD Automatic IBRS Documentation/hw-vuln: Update spectre doc Linux 4.19.311 crypto: af_alg - Work around empty control messages without MSG_MORE crypto: af_alg - Fix regression on empty requests spi: spi-mt65xx: Fix NULL pointer access in interrupt handler net/bnx2x: Prevent access to a freed page in page_pool hsr: Handle failures in module init rds: introduce acquire/release ordering in acquire/release_in_xmit() hsr: Fix uninit-value access in hsr_get_node() net: hsr: fix placement of logical operator in a multi-line statement usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin staging: greybus: fix get_channel_from_mode() failure path serial: 8250_exar: Don't remove GPIO device on suspend rtc: mt6397: select IRQ_DOMAIN instead of depending on it kconfig: fix infinite loop when expanding a macro at the end of file tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT serial: max310x: fix syntax error in IRQ error message clk: qcom: gdsc: Add support to update GDSC transition delay NFS: Fix an off by one in root_nfs_cat() net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn scsi: csiostor: Avoid function pointer casts ALSA: usb-audio: Stop parsing channels bits when all channels are found. sparc32: Fix section mismatch in leon_pci_grpci backlight: lp8788: Fully initialize backlight_properties during probe backlight: lm3639: Fully initialize backlight_properties during probe backlight: da9052: Fully initialize backlight_properties during probe backlight: lm3630a: Don't set bl->props.brightness in get_brightness backlight: lm3630a: Initialize backlight_properties on init powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip media: go7007: fix a memleak in go7007_load_encoder media: dvb-frontends: avoid stack overflow warnings with clang media: pvrusb2: fix uaf in pvr2_context_set_notify drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs mtd: rawnand: lpc32xx_mlc: fix irq handler prototype crypto: arm/sha - fix function cast warnings crypto: arm - Rename functions to avoid conflict with crypto/sha256.h mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref drm/tegra: put drm_gem_object ref on error in tegra_fb_create clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() PCI: Mark 3ware-9650SE Root Port Extended Tags as broken drm/mediatek: dsi: Fix DSI RGB666 formats and definitions clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times firmware: qcom: scm: Add WLAN VMID for Qualcomm SCM interface media: pvrusb2: fix pvr2_stream_callback casts media: go7007: add check of return value of go7007_read_addr() ALSA: seq: fix function cast warnings drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() quota: Fix rcu annotations of inode dquot pointers quota: Fix potential NULL pointer dereference quota: simplify drop_dquot_ref() quota: check time limit when back out space/inode change fs/quota: erase unused but set variable warning quota: code cleanup for __dquot_alloc_space() clk: qcom: reset: Ensure write completion on reset de/assertion clk: qcom: reset: Commonize the de/assert functions clk: qcom: reset: support resetting multiple bits clk: qcom: reset: Allow specifying custom reset delay media: edia: dvbdev: fix a use-after-free media: dvb-core: Fix use-after-free due to race at dvb_register_device() media: dvbdev: fix error logic at dvb_register_device() media: dvbdev: Fix memleak in dvb_register_device media: media/dvb: Use kmemdup rather than duplicating its implementation media: dvbdev: remove double-unlock media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity media: v4l2-tpg: fix some memleaks in tpg_alloc media: em28xx: annotate unchecked call to media_device_register() ABI: sysfs-bus-pci-devices-aer_stats uses an invalid tag perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() media: tc358743: register v4l2 async device only after successful setup drm/rockchip: lvds: do not print scary message when probing defer drm/rockchip: lvds: do not overwrite error code drm: Don't treat 0 as -1 in drm_fixp2int_ceil drm/rockchip: inno_hdmi: Fix video timing drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() drm/tegra: dsi: Make use of the helper function dev_err_probe() gpu: host1x: mipi: Update tegra_mipi_request() to be node based drm/tegra: dsi: Add missing check for of_find_device_by_node dm: call the resume method on internal suspend dm raid: fix false positive for requeue needed during reshape nfp: flower: handle acti_netdevs allocation failure net/x25: fix incorrect parameter validation in the x25_getsockopt() function net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function udp: fix incorrect parameter validation in the udp_lib_getsockopt() function l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function ipv6: fib6_rules: flush route cache when rule is changed bpf: Fix stackmap overflow check on 32-bit arches bpf: Fix hashtab overflow check on 32-bit arches sr9800: Add check for usbnet_get_endpoints Bluetooth: hci_core: Fix possible buffer overflow Bluetooth: Remove superfluous call to hci_conn_check_pending() igb: Fix missing time sync events igb: move PEROUT and EXTTS isr logic to separate functions mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function SUNRPC: fix some memleaks in gssx_dec_option_array x86, relocs: Ignore relocations in .notes section ACPI: scan: Fix device check notification handling ARM: dts: arm: realview: Fix development chip ROM compatible value wifi: brcmsmac: avoid function pointer casts iommu/amd: Mark interrupt as managed bus: tegra-aconnect: Update dependency to ARCH_TEGRA ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). sock_diag: annotate data-races around sock_diag_handlers[family] wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() wifi: b43: Disable QoS for bcm4331 wifi: b43: Stop correct queue in DMA worker when QoS is disabled b43: main: Fix use true/false for bool type wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled b43: dma: Fix use true/false for bool type variable wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() timekeeping: Fix cross-timestamp interpolation for non-x86 timekeeping: Fix cross-timestamp interpolation corner case decision timekeeping: Fix cross-timestamp interpolation on counter wrap aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts md: Don't clear MD_CLOSING when the raid is about to stop md: implement ->set_read_only to hook into BLKROSET processing block: add a new set_read_only method md: switch to ->check_events for media change notifications fs/select: rework stack allocation hack for clang do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak crypto: algif_aead - Only wake up when ctx->more is zero crypto: af_alg - make some functions static crypto: algif_aead - fix uninitialized ctx->init ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC Input: gpio_keys_polled - suppress deferred probe error for gpio ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet firewire: core: use long bus reset on gap count error Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security scsi: mpt3sas: Prevent sending diag_reset when the controller is ready dm-verity, dm-crypt: align "struct bvec_iter" correctly block: sed-opal: handle empty atoms when parsing response net/iucv: fix the allocation size of iucv_path_table array MIPS: Clear Cause.BD in instruction_pointer_set x86/xen: Add some null pointer checking to smp.c ASoC: rt5645: Make LattePanda board DMI match more precise Linux 4.19.310 selftests/vm: fix map_hugetlb length used for testing read and write selftests/vm: fix display of page size in map_hugetlb getrusage: use sig->stats_lock rather than lock_task_sighand() getrusage: use __for_each_thread() getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() getrusage: add the "signal_struct *sig" local variable y2038: rusage: use __kernel_old_timeval hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed hv_netvsc: use netif_is_bond_master() instead of open code hv_netvsc: Make netvsc/VF binding check both MAC and serial number Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU um: allow not setting extra rpaths in the linux binary selftests: mm: fix map_hugetlb failure on 64K page size systems tools/selftest/vm: allow choosing mem size and page size in map_hugetlb btrfs: ref-verify: free ref cache before clearing mount opt netrom: Fix data-races around sysctl_net_busy_read netrom: Fix a data-race around sysctl_netrom_link_fails_count netrom: Fix a data-race around sysctl_netrom_routing_control netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size netrom: Fix a data-race around sysctl_netrom_transport_busy_delay netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries netrom: Fix a data-race around sysctl_netrom_transport_timeout netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser netrom: Fix a data-race around sysctl_netrom_default_path_quality netfilter: nf_conntrack_h323: Add protection for bmp length out of range net/rds: fix WARNING in rds_conn_connect_if_down net/ipv6: avoid possible UAF in ip6_route_mpath_notify() geneve: make sure to pull inner header in geneve_rx() net: move definition of pcpu_lstats to header file net: lan78xx: fix runtime PM count underflow on link stop lan78xx: Fix race conditions in suspend/resume handling lan78xx: Fix partial packet errors on suspend/resume lan78xx: Add missing return code checks lan78xx: Fix white space and style issues net: usb: lan78xx: Remove lots of set but unused 'ret' variables Linux 4.19.309 gpio: 74x164: Enable output pins after registers are reset cachefiles: fix memory leak in cachefiles_add_cache() mmc: core: Fix eMMC initialization with 1-bit bus connection btrfs: dev-replace: properly validate device names wifi: nl80211: reject iftype change with mesh ID change gtp: fix use-after-free and null-ptr-deref in gtp_newlink() ALSA: Drop leftover snd-rtctimer stuff from Makefile power: supply: bq27xxx-i2c: Do not free non existing IRQ efi/capsule-loader: fix incorrect allocation size Bluetooth: Enforce validation on max value of connection interval Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST Bluetooth: Avoid potential use-after-free in hci_error_reset net: usb: dm9601: fix wrong return value in dm9601_mdio_read lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected tun: Fix xdp_rxq_info's queue_index when detaching netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter Linux 4.19.308 scripts/bpf: Fix xdp_md forward declaration typo fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() PCI/MSI: Prevent MSI hardware interrupt number truncation s390: use the correct count for __iowrite64_copy() packet: move from strlcpy with unused retval to strscpy ipv6: sr: fix possible use-after-free and null-ptr-deref nouveau: fix function cast warnings scsi: jazz_esp: Only build if SCSI core is builtin bpf, scripts: Correct GPL license name scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions RDMA/srpt: fix function pointer cast warnings RDMA/srpt: Make debug output more detailed RDMA/ulp: Use dev_name instead of ibdev->name RDMA/srpt: Support specifying the srpt_service_guid parameter RDMA/bnxt_re: Return error for SRQ resize IB/hfi1: Fix a memleak in init_credit_return usb: roles: don't get/set_role() when usb_role_switch is unregistered usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs ARM: ep93xx: Add terminator to gpiod_lookup_table l2tp: pass correct message length to ip6_append_data gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() dm-crypt: don't modify the data when using authenticated encryption mm: memcontrol: switch to rcu protection in drain_all_stock() IB/hfi1: Fix sdma.h tx->num_descs off-by-one error pmdomain: renesas: r8a77980-sysc: CR7 must be always on s390/qeth: Fix potential loss of L3-IP@ in case of network issues virtio-blk: Ensure no requests in virtqueues before deleting vqs. firewire: core: send bus reset promptly on gap count error hwmon: (coretemp) Enlarge per package core count limit regulator: pwm-regulator: Add validity checks in continuous .get_voltage ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() ahci: asm1166: correct count of reported ports fbdev: sis: Error out if pixclock equals zero fbdev: savage: Error out if pixclock equals zero wifi: mac80211: fix race condition on enabling fast-xmit wifi: cfg80211: fix missing interfaces when dumping dmaengine: shdma: increase size of 'dev_id' scsi: target: core: Add TMF to tmr_list handling sched/rt: Disallow writing invalid values to sched_rt_period_us sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset sched/rt: Fix sysctl_sched_rr_timeslice intial value userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb nilfs2: replace WARN_ONs for invalid DAT metadata block requests memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock() net: stmmac: fix notifier registration stmmac: no need to check return value of debugfs_create functions net/sched: Retire dsmark qdisc net/sched: Retire ATM qdisc net/sched: Retire CBQ qdisc Linux 4.19.307 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() lsm: new security_file_ioctl_compat() hook nilfs2: fix potential bug in end_buffer_async_write sched/membarrier: reduce the ability to hammer on sys_membarrier Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" pmdomain: core: Move the unused cleanup to a _sync initcall irqchip/irq-brcmstb-l2: Add write memory barrier before exit nfp: use correct macro for LengthSelect in BAR config nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() nilfs2: fix data corruption in dsync block recovery for small block sizes ALSA: hda/conexant: Add quirk for SWS JS201D x86/mm/ident_map: Use gbpages only where full GB page should be mapped. x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 serial: max310x: improve crystal stable clock detection serial: max310x: set default value when reading clock ready bit ring-buffer: Clean ring_buffer_poll_wait() error return staging: iio: ad5933: fix type mismatch regression ext4: fix double-free of blocks due to wrong extents moved_len binder: signal epoll threads of self-work xen-netback: properly sync TX responses nfc: nci: free rx_data_reassembly skb on NCI device cleanup firewire: core: correct documentation of fw_csr_string() kernel API scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" usb: f_mass_storage: forbid async queue when shutdown happen USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT HID: wacom: Do not register input devices until after hid_hw_start HID: wacom: generic: Avoid reporting a serial of '0' to userspace mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again tracing/trigger: Fix to return error if failed to alloc snapshot i40e: Fix waiting for queues of all VSIs to be disabled MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler net: sysfs: Fix /sys/class/net/<iface> path for statistics Documentation: net-sysfs: describe missing statistics ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() spi: ppc4xx: Drop write-only variable btrfs: send: return EOPNOTSUPP on unknown flags btrfs: forbid creating subvol qgroups hrtimer: Report offline hrtimer enqueue vhost: use kzalloc() instead of kmalloc() followed by memset() Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID USB: serial: cp210x: add ID for IMST iM871A-USB USB: serial: option: add Fibocom FM101-GL variant USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e net/af_iucv: clean up a try_then_request_module() netfilter: nft_compat: restrict match/target protocol to u16 netfilter: nft_compat: reject unused compat flag ppp_async: limit MRU to 64K tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() rxrpc: Fix response to PING RESPONSE ACKs to a dead call inet: read sk->sk_family once in inet_recv_error() hwmon: (coretemp) Fix bogus core_id to attr name mapping hwmon: (coretemp) Fix out-of-bounds memory access hwmon: (aspeed-pwm-tacho) mutex for tach reading atm: idt77252: fix a memleak in open_card_ubr0 phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV bonding: remove print in bond_verify_device_path HID: apple: Add 2021 magic keyboard FN key mapping HID: apple: Swap the Fn and Left Control keys on Apple keyboards HID: apple: Add support for the 2021 Magic Keyboard net: sysfs: Fix /sys/class/net/<iface> path af_unix: fix lockdep positive in sk_diag_dump_icons() net: ipv4: fix a memleak in ip_setup_cork netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger llc: call sock_orphan() at release time ipv6: Ensure natural alignment of const ipv6 loopback and router addresses ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() ixgbe: Refactor overtemp event handling ixgbe: Refactor returning internal error codes ixgbe: Remove non-inclusive language net: remove unneeded break scsi: isci: Fix an error code problem in isci_io_request_build() wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' ceph: fix deadlock or deadcode of misusing dget() blk-mq: fix IO hang from sbitmap wakeup race virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings libsubcmd: Fix memory leak in uniq() usb: hub: Replace hardcoded quirk value with BIT() macro PCI: Only override AMD USB controller if required mfd: ti_am335x_tscadc: Fix TI SoC dependencies um: net: Fix return type of uml_net_start_xmit() um: Don't use vfprintf() for os_info() um: Fix naming clash between UML and scheduler leds: trigger: panic: Don't register panic notifier if creating the trigger failed drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' drm/amdgpu: Let KFD sync with VM fences clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() drm/msm/dpu: Ratelimit framedone timeout msgs media: ddbridge: fix an error code problem in ddb_probe IB/ipoib: Fix mcast list locking drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time ALSA: hda: Intel: add HDA_ARL PCI ID support PCI: add INTEL_HDA_ARL to pci_ids.h media: rockchip: rga: fix swizzling for RGB formats media: stk1160: Fixed high volume of stk1160_dbg messages drm/mipi-dsi: Fix detach call without attach drm/framebuffer: Fix use of uninitialized variable drm/drm_file: fix use of uninitialized variable RDMA/IPoIB: Fix error code return in ipoib_mcast_join fast_dput(): handle underflows gracefully ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument f2fs: fix to check return value of f2fs_reserve_new_block() wifi: cfg80211: free beacon_ies when overridden from hidden BSS wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices md: Whenassemble the array, consult the superblock of the freshest device ARM: dts: imx23/28: Fix the DMA controller node name ARM: dts: imx23-sansa: Use preferred i2c-gpios properties ARM: dts: imx27-apf27dev: Fix LED name ARM: dts: imx1: Fix sram node ARM: dts: imx27: Fix sram node ARM: dts: imx: Use flash@0,0 pattern ARM: dts: imx25/27-eukrea: Fix RTC node name ARM: dts: rockchip: fix rk3036 hdmi ports node scsi: libfc: Fix up timeout error in fc_fcp_rec_error() scsi: libfc: Don't schedule abort twice bpf: Add map and need_defer parameters to .map_fd_put_ptr() wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() ARM: dts: imx7s: Fix nand-controller #size-cells ARM: dts: imx7s: Fix lcdif compatible bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk PCI: Add no PM reset quirk for NVIDIA Spectrum devices scsi: lpfc: Fix possible file string name overflow when updating firmware ext4: avoid online resizing failures due to oversized flex bg ext4: remove unnecessary check from alloc_flex_gd() ext4: unify the type of flexbg_size to unsigned int ext4: fix inconsistent between segment fstrim and full fstrim SUNRPC: Fix a suspicious RCU usage warning KVM: s390: fix setting of fpc register s390/ptrace: handle setting of fpc register correctly jfs: fix array-index-out-of-bounds in diNewExt rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() crypto: stm32/crc32 - fix parsing list of devices pstore/ram: Fix crash when setting number of cpus to an odd number jfs: fix uaf in jfs_evict_inode jfs: fix array-index-out-of-bounds in dbAdjTree jfs: fix slab-out-of-bounds Read in dtSearch UBSAN: array-index-out-of-bounds in dtSplitRoot FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree ACPI: extlog: fix NULL pointer dereference check PNP: ACPI: fix fortify warning ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop audit: Send netlink ACK before setting connection in auditd_set powerpc/lib: Validate size for vector operations powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() powerpc: Fix build error due to is_valid_bugaddr() powerpc/mm: Fix null-pointer dereference in pgtable_cache_add net/sched: cbs: Fix not adding cbs instance to list x86/entry/ia32: Ensure s32 is sign extended to s64 tick/sched: Preserve number of idle sleeps across CPU hotplug events mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan gpio: eic-sprd: Clear interrupt after set the interrupt type drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume drm/bridge: nxp-ptn3460: simplify some error checking drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking drm: Don't unref the same fb many times by mistake due to deadlock handling gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 netfilter: nf_tables: reject QUEUE/DROP verdict parameters btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args btrfs: don't warn if discard range is not aligned to sector net: fec: fix the unhandled context fault from smmu fjes: fix memleaks in fjes_hw_setup netfilter: nf_tables: restrict anonymous set and map names to 16 bytes net/mlx5e: fix a double-free in arfs_create_groups net/mlx5: Use kfree(ft->g) in arfs_create_groups() netlink: fix potential sleeping issue in mqueue_flush_file Conflicts: include/linux/fs.h include/linux/timer.h init/initramfs.c kernel/time/timer.c mm/memory-failure.c mm/page_alloc.c net/core/sock.c scripts/Makefile.extrawarn Change-Id: I0ccfce4c1a43240cfb997b426ef9fc59e61e3c55
1054 lines
25 KiB
C
1054 lines
25 KiB
C
/*
|
|
FUSE: Filesystem in Userspace
|
|
Copyright (C) 2001-2008 Miklos Szeredi <miklos@szeredi.hu>
|
|
|
|
This program can be distributed under the terms of the GNU GPL.
|
|
See the file COPYING.
|
|
*/
|
|
|
|
#ifndef _FS_FUSE_I_H
|
|
#define _FS_FUSE_I_H
|
|
|
|
#include <linux/fuse.h>
|
|
#include <linux/fs.h>
|
|
#include <linux/mount.h>
|
|
#include <linux/wait.h>
|
|
#include <linux/list.h>
|
|
#include <linux/spinlock.h>
|
|
#include <linux/mm.h>
|
|
#include <linux/backing-dev.h>
|
|
#include <linux/mutex.h>
|
|
#include <linux/rwsem.h>
|
|
#include <linux/rbtree.h>
|
|
#include <linux/poll.h>
|
|
#include <linux/workqueue.h>
|
|
#include <linux/kref.h>
|
|
#include <linux/xattr.h>
|
|
#include <linux/pid_namespace.h>
|
|
#include <linux/refcount.h>
|
|
#include <linux/user_namespace.h>
|
|
|
|
/** Max number of pages that can be used in a single read request */
|
|
#define FUSE_MAX_PAGES_PER_REQ 32
|
|
|
|
/** Bias for fi->writectr, meaning new writepages must not be sent */
|
|
#define FUSE_NOWRITE INT_MIN
|
|
|
|
/** It could be as large as PATH_MAX, but would that have any uses? */
|
|
#define FUSE_NAME_MAX 1024
|
|
|
|
/** Number of dentries for each connection in the control filesystem */
|
|
#define FUSE_CTL_NUM_DENTRIES 5
|
|
|
|
/** Number of page pointers embedded in fuse_req */
|
|
#define FUSE_REQ_INLINE_PAGES 1
|
|
|
|
/** List of active connections */
|
|
extern struct list_head fuse_conn_list;
|
|
|
|
/** Global mutex protecting fuse_conn_list and the control filesystem */
|
|
extern struct mutex fuse_mutex;
|
|
|
|
/** Module parameters */
|
|
extern unsigned max_user_bgreq;
|
|
extern unsigned max_user_congthresh;
|
|
|
|
/* One forget request */
|
|
struct fuse_forget_link {
|
|
struct fuse_forget_one forget_one;
|
|
struct fuse_forget_link *next;
|
|
};
|
|
|
|
/** FUSE inode */
|
|
struct fuse_inode {
|
|
/** Inode data */
|
|
struct inode inode;
|
|
|
|
/** Unique ID, which identifies the inode between userspace
|
|
* and kernel */
|
|
u64 nodeid;
|
|
|
|
/** Number of lookups on this inode */
|
|
u64 nlookup;
|
|
|
|
/** The request used for sending the FORGET message */
|
|
struct fuse_forget_link *forget;
|
|
|
|
/** Time in jiffies until the file attributes are valid */
|
|
u64 i_time;
|
|
|
|
/** The sticky bit in inode->i_mode may have been removed, so
|
|
preserve the original mode */
|
|
umode_t orig_i_mode;
|
|
|
|
/** 64 bit inode number */
|
|
u64 orig_ino;
|
|
|
|
/** Version of last attribute change */
|
|
u64 attr_version;
|
|
|
|
/** Files usable in writepage. Protected by fc->lock */
|
|
struct list_head write_files;
|
|
|
|
/** Writepages pending on truncate or fsync */
|
|
struct list_head queued_writes;
|
|
|
|
/** Number of sent writes, a negative bias (FUSE_NOWRITE)
|
|
* means more writes are blocked */
|
|
int writectr;
|
|
|
|
/** Waitq for writepage completion */
|
|
wait_queue_head_t page_waitq;
|
|
|
|
/** List of writepage requestst (pending or sent) */
|
|
struct list_head writepages;
|
|
|
|
/** Miscellaneous bits describing inode state */
|
|
unsigned long state;
|
|
|
|
/** Lock for serializing lookup and readdir for back compatibility*/
|
|
struct mutex mutex;
|
|
};
|
|
|
|
/** FUSE inode state bits */
|
|
enum {
|
|
/** Advise readdirplus */
|
|
FUSE_I_ADVISE_RDPLUS,
|
|
/** Initialized with readdirplus */
|
|
FUSE_I_INIT_RDPLUS,
|
|
/** An operation changing file size is in progress */
|
|
FUSE_I_SIZE_UNSTABLE,
|
|
/* Bad inode */
|
|
FUSE_I_BAD,
|
|
};
|
|
|
|
struct fuse_conn;
|
|
|
|
/**
|
|
* Reference to lower filesystem file for read/write operations handled in
|
|
* passthrough mode.
|
|
* This struct also tracks the credentials to be used for handling read/write
|
|
* operations.
|
|
*/
|
|
struct fuse_passthrough {
|
|
struct file *filp;
|
|
struct cred *cred;
|
|
};
|
|
|
|
/** FUSE specific file data */
|
|
struct fuse_file {
|
|
/** Fuse connection for this file */
|
|
struct fuse_conn *fc;
|
|
|
|
/** Request reserved for flush and release */
|
|
struct fuse_req *reserved_req;
|
|
|
|
/** Kernel file handle guaranteed to be unique */
|
|
u64 kh;
|
|
|
|
/** File handle used by userspace */
|
|
u64 fh;
|
|
|
|
/** Node id of this file */
|
|
u64 nodeid;
|
|
|
|
/** Refcount */
|
|
refcount_t count;
|
|
|
|
/** FOPEN_* flags returned by open */
|
|
u32 open_flags;
|
|
|
|
/** Entry on inode's write_files list */
|
|
struct list_head write_entry;
|
|
|
|
/** Container for data related to the passthrough functionality */
|
|
struct fuse_passthrough passthrough;
|
|
|
|
/** RB node to be linked on fuse_conn->polled_files */
|
|
struct rb_node polled_node;
|
|
|
|
/** Wait queue head for poll */
|
|
wait_queue_head_t poll_wait;
|
|
|
|
/** Has flock been performed on this file? */
|
|
bool flock:1;
|
|
};
|
|
|
|
/** One input argument of a request */
|
|
struct fuse_in_arg {
|
|
unsigned size;
|
|
const void *value;
|
|
};
|
|
|
|
/** The request input */
|
|
struct fuse_in {
|
|
/** The request header */
|
|
struct fuse_in_header h;
|
|
|
|
/** True if the data for the last argument is in req->pages */
|
|
unsigned argpages:1;
|
|
|
|
/** Number of arguments */
|
|
unsigned numargs;
|
|
|
|
/** Array of arguments */
|
|
struct fuse_in_arg args[3];
|
|
};
|
|
|
|
/** One output argument of a request */
|
|
struct fuse_arg {
|
|
unsigned size;
|
|
void *value;
|
|
};
|
|
|
|
/** The request output */
|
|
struct fuse_out {
|
|
/** Header returned from userspace */
|
|
struct fuse_out_header h;
|
|
|
|
/*
|
|
* The following bitfields are not changed during the request
|
|
* processing
|
|
*/
|
|
|
|
/** Last argument is variable length (can be shorter than
|
|
arg->size) */
|
|
unsigned argvar:1;
|
|
|
|
/** Last argument is a list of pages to copy data to */
|
|
unsigned argpages:1;
|
|
|
|
/** Zero partially or not copied pages */
|
|
unsigned page_zeroing:1;
|
|
|
|
/** Pages may be replaced with new ones */
|
|
unsigned page_replace:1;
|
|
|
|
/** Number or arguments */
|
|
unsigned numargs;
|
|
|
|
/** Array of arguments */
|
|
struct fuse_arg args[2];
|
|
|
|
/* Path used for completing d_canonical_path */
|
|
struct path *canonical_path;
|
|
};
|
|
|
|
/** FUSE page descriptor */
|
|
struct fuse_page_desc {
|
|
unsigned int length;
|
|
unsigned int offset;
|
|
};
|
|
|
|
struct fuse_args {
|
|
struct {
|
|
struct {
|
|
uint32_t opcode;
|
|
uint64_t nodeid;
|
|
} h;
|
|
unsigned numargs;
|
|
struct fuse_in_arg args[3];
|
|
|
|
} in;
|
|
struct {
|
|
unsigned argvar:1;
|
|
unsigned numargs;
|
|
struct fuse_arg args[2];
|
|
|
|
/* Path used for completing d_canonical_path */
|
|
struct path *canonical_path;
|
|
} out;
|
|
};
|
|
|
|
#define FUSE_ARGS(args) struct fuse_args args = {}
|
|
|
|
/** The request IO state (for asynchronous processing) */
|
|
struct fuse_io_priv {
|
|
struct kref refcnt;
|
|
int async;
|
|
spinlock_t lock;
|
|
unsigned reqs;
|
|
ssize_t bytes;
|
|
size_t size;
|
|
__u64 offset;
|
|
bool write;
|
|
bool should_dirty;
|
|
int err;
|
|
struct kiocb *iocb;
|
|
struct completion *done;
|
|
bool blocking;
|
|
};
|
|
|
|
#define FUSE_IO_PRIV_SYNC(i) \
|
|
{ \
|
|
.refcnt = KREF_INIT(1), \
|
|
.async = 0, \
|
|
.iocb = i, \
|
|
}
|
|
|
|
/**
|
|
* Request flags
|
|
*
|
|
* FR_ISREPLY: set if the request has reply
|
|
* FR_FORCE: force sending of the request even if interrupted
|
|
* FR_BACKGROUND: request is sent in the background
|
|
* FR_WAITING: request is counted as "waiting"
|
|
* FR_ABORTED: the request was aborted
|
|
* FR_INTERRUPTED: the request has been interrupted
|
|
* FR_LOCKED: data is being copied to/from the request
|
|
* FR_PENDING: request is not yet in userspace
|
|
* FR_SENT: request is in userspace, waiting for an answer
|
|
* FR_FINISHED: request is finished
|
|
* FR_PRIVATE: request is on private list
|
|
*/
|
|
enum fuse_req_flag {
|
|
FR_ISREPLY,
|
|
FR_FORCE,
|
|
FR_BACKGROUND,
|
|
FR_WAITING,
|
|
FR_ABORTED,
|
|
FR_INTERRUPTED,
|
|
FR_LOCKED,
|
|
FR_PENDING,
|
|
FR_SENT,
|
|
FR_FINISHED,
|
|
FR_PRIVATE,
|
|
};
|
|
|
|
/**
|
|
* A request to the client
|
|
*
|
|
* .waitq.lock protects the following fields:
|
|
* - FR_ABORTED
|
|
* - FR_LOCKED (may also be modified under fc->lock, tested under both)
|
|
*/
|
|
struct fuse_req {
|
|
/** This can be on either pending processing or io lists in
|
|
fuse_conn */
|
|
struct list_head list;
|
|
|
|
/** Entry on the interrupts list */
|
|
struct list_head intr_entry;
|
|
|
|
/** refcount */
|
|
refcount_t count;
|
|
|
|
bool user_pages;
|
|
|
|
/** Unique ID for the interrupt request */
|
|
u64 intr_unique;
|
|
|
|
/* Request flags, updated with test/set/clear_bit() */
|
|
unsigned long flags;
|
|
|
|
/** The request input */
|
|
struct fuse_in in;
|
|
|
|
/** The request output */
|
|
struct fuse_out out;
|
|
|
|
/** Used to wake up the task waiting for completion of request*/
|
|
wait_queue_head_t waitq;
|
|
|
|
/** Data for asynchronous requests */
|
|
union {
|
|
struct {
|
|
struct fuse_release_in in;
|
|
struct inode *inode;
|
|
} release;
|
|
struct fuse_init_in init_in;
|
|
struct fuse_init_out init_out;
|
|
struct cuse_init_in cuse_init_in;
|
|
struct {
|
|
struct fuse_read_in in;
|
|
u64 attr_ver;
|
|
} read;
|
|
struct {
|
|
struct fuse_write_in in;
|
|
struct fuse_write_out out;
|
|
struct fuse_req *next;
|
|
} write;
|
|
struct fuse_notify_retrieve_in retrieve_in;
|
|
} misc;
|
|
|
|
/** page vector */
|
|
struct page **pages;
|
|
|
|
/** page-descriptor vector */
|
|
struct fuse_page_desc *page_descs;
|
|
|
|
/** size of the 'pages' array */
|
|
unsigned max_pages;
|
|
|
|
/** inline page vector */
|
|
struct page *inline_pages[FUSE_REQ_INLINE_PAGES];
|
|
|
|
/** inline page-descriptor vector */
|
|
struct fuse_page_desc inline_page_descs[FUSE_REQ_INLINE_PAGES];
|
|
|
|
/** number of pages in vector */
|
|
unsigned num_pages;
|
|
|
|
/** File used in the request (or NULL) */
|
|
struct fuse_file *ff;
|
|
|
|
/** Inode used in the request or NULL */
|
|
struct inode *inode;
|
|
|
|
/** AIO control block */
|
|
struct fuse_io_priv *io;
|
|
|
|
/** Link on fi->writepages */
|
|
struct list_head writepages_entry;
|
|
|
|
/** Request completion callback */
|
|
void (*end)(struct fuse_conn *, struct fuse_req *);
|
|
|
|
/** Request is stolen from fuse_file->reserved_req */
|
|
struct file *stolen_file;
|
|
};
|
|
|
|
struct fuse_iqueue {
|
|
/** Connection established */
|
|
unsigned connected;
|
|
|
|
/** Lock protecting accesses to members of this structure */
|
|
spinlock_t lock;
|
|
|
|
/** Readers of the connection are waiting on this */
|
|
wait_queue_head_t waitq;
|
|
|
|
/** The next unique request id */
|
|
u64 reqctr;
|
|
|
|
/** The list of pending requests */
|
|
struct list_head pending;
|
|
|
|
/** Pending interrupts */
|
|
struct list_head interrupts;
|
|
|
|
/** Queue of pending forgets */
|
|
struct fuse_forget_link forget_list_head;
|
|
struct fuse_forget_link *forget_list_tail;
|
|
|
|
/** Batching of FORGET requests (positive indicates FORGET batch) */
|
|
int forget_batch;
|
|
|
|
/** O_ASYNC requests */
|
|
struct fasync_struct *fasync;
|
|
};
|
|
|
|
struct fuse_pqueue {
|
|
/** Connection established */
|
|
unsigned connected;
|
|
|
|
/** Lock protecting accessess to members of this structure */
|
|
spinlock_t lock;
|
|
|
|
/** The list of requests being processed */
|
|
struct list_head processing;
|
|
|
|
/** The list of requests under I/O */
|
|
struct list_head io;
|
|
};
|
|
|
|
/**
|
|
* Fuse device instance
|
|
*/
|
|
struct fuse_dev {
|
|
/** Fuse connection for this device */
|
|
struct fuse_conn *fc;
|
|
|
|
/** Processing queue */
|
|
struct fuse_pqueue pq;
|
|
|
|
/** list entry on fc->devices */
|
|
struct list_head entry;
|
|
};
|
|
|
|
/**
|
|
* A Fuse connection.
|
|
*
|
|
* This structure is created, when the filesystem is mounted, and is
|
|
* destroyed, when the client device is closed and the filesystem is
|
|
* unmounted.
|
|
*/
|
|
struct fuse_conn {
|
|
/** Lock protecting accessess to members of this structure */
|
|
spinlock_t lock;
|
|
|
|
/** Refcount */
|
|
refcount_t count;
|
|
|
|
/** Number of fuse_dev's */
|
|
atomic_t dev_count;
|
|
|
|
struct rcu_head rcu;
|
|
|
|
/** The user id for this mount */
|
|
kuid_t user_id;
|
|
|
|
/** The group id for this mount */
|
|
kgid_t group_id;
|
|
|
|
/** The pid namespace for this mount */
|
|
struct pid_namespace *pid_ns;
|
|
|
|
/** The user namespace for this mount */
|
|
struct user_namespace *user_ns;
|
|
|
|
/** Maximum read size */
|
|
unsigned max_read;
|
|
|
|
/** Maximum write size */
|
|
unsigned max_write;
|
|
|
|
/** Input queue */
|
|
struct fuse_iqueue iq;
|
|
|
|
/** The next unique kernel file handle */
|
|
u64 khctr;
|
|
|
|
/** rbtree of fuse_files waiting for poll events indexed by ph */
|
|
struct rb_root polled_files;
|
|
|
|
/** Maximum number of outstanding background requests */
|
|
unsigned max_background;
|
|
|
|
/** Number of background requests at which congestion starts */
|
|
unsigned congestion_threshold;
|
|
|
|
/** Number of requests currently in the background */
|
|
unsigned num_background;
|
|
|
|
/** Number of background requests currently queued for userspace */
|
|
unsigned active_background;
|
|
|
|
/** The list of background requests set aside for later queuing */
|
|
struct list_head bg_queue;
|
|
|
|
/** Flag indicating that INIT reply has been received. Allocating
|
|
* any fuse request will be suspended until the flag is set */
|
|
int initialized;
|
|
|
|
/** Flag indicating if connection is blocked. This will be
|
|
the case before the INIT reply is received, and if there
|
|
are too many outstading backgrounds requests */
|
|
int blocked;
|
|
|
|
/** waitq for blocked connection */
|
|
wait_queue_head_t blocked_waitq;
|
|
|
|
/** waitq for reserved requests */
|
|
wait_queue_head_t reserved_req_waitq;
|
|
|
|
/** Connection established, cleared on umount, connection
|
|
abort and device release */
|
|
unsigned connected;
|
|
|
|
/** Connection aborted via sysfs */
|
|
bool aborted;
|
|
|
|
/** Connection failed (version mismatch). Cannot race with
|
|
setting other bitfields since it is only set once in INIT
|
|
reply, before any other request, and never cleared */
|
|
unsigned conn_error:1;
|
|
|
|
/** Connection successful. Only set in INIT */
|
|
unsigned conn_init:1;
|
|
|
|
/** Do readpages asynchronously? Only set in INIT */
|
|
unsigned async_read:1;
|
|
|
|
/** Return an unique read error after abort. Only set in INIT */
|
|
unsigned abort_err:1;
|
|
|
|
/** Do not send separate SETATTR request before open(O_TRUNC) */
|
|
unsigned atomic_o_trunc:1;
|
|
|
|
/** Filesystem supports NFS exporting. Only set in INIT */
|
|
unsigned export_support:1;
|
|
|
|
/** write-back cache policy (default is write-through) */
|
|
unsigned writeback_cache:1;
|
|
|
|
/** allow parallel lookups and readdir (default is serialized) */
|
|
unsigned parallel_dirops:1;
|
|
|
|
/** handle fs handles killing suid/sgid/cap on write/chown/trunc */
|
|
unsigned handle_killpriv:1;
|
|
|
|
/*
|
|
* The following bitfields are only for optimization purposes
|
|
* and hence races in setting them will not cause malfunction
|
|
*/
|
|
|
|
/** Is open/release not implemented by fs? */
|
|
unsigned no_open:1;
|
|
|
|
/** Is fsync not implemented by fs? */
|
|
unsigned no_fsync:1;
|
|
|
|
/** Is fsyncdir not implemented by fs? */
|
|
unsigned no_fsyncdir:1;
|
|
|
|
/** Is flush not implemented by fs? */
|
|
unsigned no_flush:1;
|
|
|
|
/** Is setxattr not implemented by fs? */
|
|
unsigned no_setxattr:1;
|
|
|
|
/** Is getxattr not implemented by fs? */
|
|
unsigned no_getxattr:1;
|
|
|
|
/** Is listxattr not implemented by fs? */
|
|
unsigned no_listxattr:1;
|
|
|
|
/** Is removexattr not implemented by fs? */
|
|
unsigned no_removexattr:1;
|
|
|
|
/** Are posix file locking primitives not implemented by fs? */
|
|
unsigned no_lock:1;
|
|
|
|
/** Is access not implemented by fs? */
|
|
unsigned no_access:1;
|
|
|
|
/** Is create not implemented by fs? */
|
|
unsigned no_create:1;
|
|
|
|
/** Is interrupt not implemented by fs? */
|
|
unsigned no_interrupt:1;
|
|
|
|
/** Is bmap not implemented by fs? */
|
|
unsigned no_bmap:1;
|
|
|
|
/** Is poll not implemented by fs? */
|
|
unsigned no_poll:1;
|
|
|
|
/** Do multi-page cached writes */
|
|
unsigned big_writes:1;
|
|
|
|
/** Don't apply umask to creation modes */
|
|
unsigned dont_mask:1;
|
|
|
|
/** Are BSD file locking primitives not implemented by fs? */
|
|
unsigned no_flock:1;
|
|
|
|
/** Is fallocate not implemented by fs? */
|
|
unsigned no_fallocate:1;
|
|
|
|
/** Is rename with flags implemented by fs? */
|
|
unsigned no_rename2:1;
|
|
|
|
/** Use enhanced/automatic page cache invalidation. */
|
|
unsigned auto_inval_data:1;
|
|
|
|
/** Does the filesystem support readdirplus? */
|
|
unsigned do_readdirplus:1;
|
|
|
|
/** Does the filesystem want adaptive readdirplus? */
|
|
unsigned readdirplus_auto:1;
|
|
|
|
/** Does the filesystem support asynchronous direct-IO submission? */
|
|
unsigned async_dio:1;
|
|
|
|
/** Is lseek not implemented by fs? */
|
|
unsigned no_lseek:1;
|
|
|
|
/** Does the filesystem support posix acls? */
|
|
unsigned posix_acl:1;
|
|
|
|
/** Check permissions based on the file mode or not? */
|
|
unsigned default_permissions:1;
|
|
|
|
/** Allow other than the mounter user to access the filesystem ? */
|
|
unsigned allow_other:1;
|
|
|
|
/** Passthrough mode for read/write IO */
|
|
unsigned int passthrough:1;
|
|
|
|
/** The number of requests waiting for completion */
|
|
atomic_t num_waiting;
|
|
|
|
/** Negotiated minor version */
|
|
unsigned minor;
|
|
|
|
/** Entry on the fuse_conn_list */
|
|
struct list_head entry;
|
|
|
|
/** Device ID from super block */
|
|
dev_t dev;
|
|
|
|
/** Dentries in the control filesystem */
|
|
struct dentry *ctl_dentry[FUSE_CTL_NUM_DENTRIES];
|
|
|
|
/** number of dentries used in the above array */
|
|
int ctl_ndents;
|
|
|
|
/** Key for lock owner ID scrambling */
|
|
u32 scramble_key[4];
|
|
|
|
/** Reserved request for the DESTROY message */
|
|
struct fuse_req *destroy_req;
|
|
|
|
/** Version counter for attribute changes */
|
|
u64 attr_version;
|
|
|
|
/** Called on final put */
|
|
void (*release)(struct fuse_conn *);
|
|
|
|
/** Super block for this connection. */
|
|
struct super_block *sb;
|
|
|
|
/** Read/write semaphore to hold when accessing sb. */
|
|
struct rw_semaphore killsb;
|
|
|
|
/** List of device instances belonging to this connection */
|
|
struct list_head devices;
|
|
|
|
/** IDR for passthrough requests */
|
|
struct idr passthrough_req;
|
|
|
|
/** Protects passthrough_req */
|
|
spinlock_t passthrough_req_lock;
|
|
};
|
|
|
|
static inline struct fuse_conn *get_fuse_conn_super(struct super_block *sb)
|
|
{
|
|
return sb->s_fs_info;
|
|
}
|
|
|
|
static inline struct fuse_conn *get_fuse_conn(struct inode *inode)
|
|
{
|
|
return get_fuse_conn_super(inode->i_sb);
|
|
}
|
|
|
|
static inline struct fuse_inode *get_fuse_inode(struct inode *inode)
|
|
{
|
|
return container_of(inode, struct fuse_inode, inode);
|
|
}
|
|
|
|
static inline u64 get_node_id(struct inode *inode)
|
|
{
|
|
return get_fuse_inode(inode)->nodeid;
|
|
}
|
|
|
|
static inline void fuse_make_bad(struct inode *inode)
|
|
{
|
|
set_bit(FUSE_I_BAD, &get_fuse_inode(inode)->state);
|
|
}
|
|
|
|
static inline bool fuse_is_bad(struct inode *inode)
|
|
{
|
|
return unlikely(test_bit(FUSE_I_BAD, &get_fuse_inode(inode)->state));
|
|
}
|
|
|
|
/** Device operations */
|
|
extern const struct file_operations fuse_dev_operations;
|
|
|
|
extern const struct dentry_operations fuse_dentry_operations;
|
|
extern const struct dentry_operations fuse_root_dentry_operations;
|
|
|
|
/**
|
|
* Inode to nodeid comparison.
|
|
*/
|
|
int fuse_inode_eq(struct inode *inode, void *_nodeidp);
|
|
|
|
/**
|
|
* Get a filled in inode
|
|
*/
|
|
struct inode *fuse_iget(struct super_block *sb, u64 nodeid,
|
|
int generation, struct fuse_attr *attr,
|
|
u64 attr_valid, u64 attr_version);
|
|
|
|
int fuse_lookup_name(struct super_block *sb, u64 nodeid, const struct qstr *name,
|
|
struct fuse_entry_out *outarg, struct inode **inode);
|
|
|
|
/**
|
|
* Send FORGET command
|
|
*/
|
|
void fuse_queue_forget(struct fuse_conn *fc, struct fuse_forget_link *forget,
|
|
u64 nodeid, u64 nlookup);
|
|
|
|
struct fuse_forget_link *fuse_alloc_forget(void);
|
|
|
|
/* Used by READDIRPLUS */
|
|
void fuse_force_forget(struct file *file, u64 nodeid);
|
|
|
|
/**
|
|
* Initialize READ or READDIR request
|
|
*/
|
|
void fuse_read_fill(struct fuse_req *req, struct file *file,
|
|
loff_t pos, size_t count, int opcode);
|
|
|
|
/**
|
|
* Send OPEN or OPENDIR request
|
|
*/
|
|
int fuse_open_common(struct inode *inode, struct file *file, bool isdir);
|
|
|
|
struct fuse_file *fuse_file_alloc(struct fuse_conn *fc);
|
|
void fuse_file_free(struct fuse_file *ff);
|
|
void fuse_finish_open(struct inode *inode, struct file *file);
|
|
|
|
void fuse_sync_release(struct fuse_file *ff, int flags);
|
|
|
|
/**
|
|
* Send RELEASE or RELEASEDIR request
|
|
*/
|
|
void fuse_release_common(struct file *file, bool isdir);
|
|
|
|
/**
|
|
* Send FSYNC or FSYNCDIR request
|
|
*/
|
|
int fuse_fsync_common(struct file *file, loff_t start, loff_t end,
|
|
int datasync, int isdir);
|
|
|
|
/**
|
|
* Notify poll wakeup
|
|
*/
|
|
int fuse_notify_poll_wakeup(struct fuse_conn *fc,
|
|
struct fuse_notify_poll_wakeup_out *outarg);
|
|
|
|
/**
|
|
* Initialize file operations on a regular file
|
|
*/
|
|
void fuse_init_file_inode(struct inode *inode);
|
|
|
|
/**
|
|
* Initialize inode operations on regular files and special files
|
|
*/
|
|
void fuse_init_common(struct inode *inode);
|
|
|
|
/**
|
|
* Initialize inode and file operations on a directory
|
|
*/
|
|
void fuse_init_dir(struct inode *inode);
|
|
|
|
/**
|
|
* Initialize inode operations on a symlink
|
|
*/
|
|
void fuse_init_symlink(struct inode *inode);
|
|
|
|
/**
|
|
* Change attributes of an inode
|
|
*/
|
|
void fuse_change_attributes(struct inode *inode, struct fuse_attr *attr,
|
|
u64 attr_valid, u64 attr_version);
|
|
|
|
void fuse_change_attributes_common(struct inode *inode, struct fuse_attr *attr,
|
|
u64 attr_valid);
|
|
|
|
/**
|
|
* Initialize the client device
|
|
*/
|
|
int fuse_dev_init(void);
|
|
|
|
/**
|
|
* Cleanup the client device
|
|
*/
|
|
void fuse_dev_cleanup(void);
|
|
|
|
int fuse_ctl_init(void);
|
|
void __exit fuse_ctl_cleanup(void);
|
|
|
|
/**
|
|
* Allocate a request
|
|
*/
|
|
struct fuse_req *fuse_request_alloc(unsigned npages);
|
|
|
|
struct fuse_req *fuse_request_alloc_nofs(unsigned npages);
|
|
|
|
/**
|
|
* Free a request
|
|
*/
|
|
void fuse_request_free(struct fuse_req *req);
|
|
|
|
/**
|
|
* Get a request, may fail with -ENOMEM,
|
|
* caller should specify # elements in req->pages[] explicitly
|
|
*/
|
|
struct fuse_req *fuse_get_req(struct fuse_conn *fc, unsigned npages);
|
|
struct fuse_req *fuse_get_req_for_background(struct fuse_conn *fc,
|
|
unsigned npages);
|
|
|
|
/*
|
|
* Increment reference count on request
|
|
*/
|
|
void __fuse_get_request(struct fuse_req *req);
|
|
|
|
/**
|
|
* Gets a requests for a file operation, always succeeds
|
|
*/
|
|
struct fuse_req *fuse_get_req_nofail_nopages(struct fuse_conn *fc,
|
|
struct file *file);
|
|
|
|
/**
|
|
* Decrement reference count of a request. If count goes to zero free
|
|
* the request.
|
|
*/
|
|
void fuse_put_request(struct fuse_conn *fc, struct fuse_req *req);
|
|
|
|
/**
|
|
* Send a request (synchronous)
|
|
*/
|
|
void fuse_request_send(struct fuse_conn *fc, struct fuse_req *req);
|
|
|
|
/**
|
|
* Simple request sending that does request allocation and freeing
|
|
*/
|
|
ssize_t fuse_simple_request(struct fuse_conn *fc, struct fuse_args *args);
|
|
|
|
/**
|
|
* Send a request in the background
|
|
*/
|
|
void fuse_request_send_background(struct fuse_conn *fc, struct fuse_req *req);
|
|
|
|
void fuse_request_send_background_locked(struct fuse_conn *fc,
|
|
struct fuse_req *req);
|
|
|
|
/* Abort all requests */
|
|
void fuse_abort_conn(struct fuse_conn *fc, bool is_abort);
|
|
void fuse_wait_aborted(struct fuse_conn *fc);
|
|
|
|
/**
|
|
* Invalidate inode attributes
|
|
*/
|
|
void fuse_invalidate_attr(struct inode *inode);
|
|
|
|
void fuse_invalidate_entry_cache(struct dentry *entry);
|
|
|
|
void fuse_invalidate_atime(struct inode *inode);
|
|
|
|
/**
|
|
* Acquire reference to fuse_conn
|
|
*/
|
|
struct fuse_conn *fuse_conn_get(struct fuse_conn *fc);
|
|
|
|
/**
|
|
* Initialize fuse_conn
|
|
*/
|
|
void fuse_conn_init(struct fuse_conn *fc, struct user_namespace *user_ns);
|
|
|
|
/**
|
|
* Release reference to fuse_conn
|
|
*/
|
|
void fuse_conn_put(struct fuse_conn *fc);
|
|
|
|
struct fuse_dev *fuse_dev_alloc(struct fuse_conn *fc);
|
|
void fuse_dev_free(struct fuse_dev *fud);
|
|
|
|
/**
|
|
* Add connection to control filesystem
|
|
*/
|
|
int fuse_ctl_add_conn(struct fuse_conn *fc);
|
|
|
|
/**
|
|
* Remove connection from control filesystem
|
|
*/
|
|
void fuse_ctl_remove_conn(struct fuse_conn *fc);
|
|
|
|
/**
|
|
* Is file type valid?
|
|
*/
|
|
int fuse_valid_type(int m);
|
|
|
|
bool fuse_invalid_attr(struct fuse_attr *attr);
|
|
|
|
/**
|
|
* Is current process allowed to perform filesystem operation?
|
|
*/
|
|
int fuse_allow_current_process(struct fuse_conn *fc);
|
|
|
|
u64 fuse_lock_owner_id(struct fuse_conn *fc, fl_owner_t id);
|
|
|
|
void fuse_flush_time_update(struct inode *inode);
|
|
void fuse_update_ctime(struct inode *inode);
|
|
|
|
int fuse_update_attributes(struct inode *inode, struct file *file);
|
|
|
|
void fuse_flush_writepages(struct inode *inode);
|
|
|
|
void fuse_set_nowrite(struct inode *inode);
|
|
void fuse_release_nowrite(struct inode *inode);
|
|
|
|
u64 fuse_get_attr_version(struct fuse_conn *fc);
|
|
|
|
/**
|
|
* File-system tells the kernel to invalidate cache for the given node id.
|
|
*/
|
|
int fuse_reverse_inval_inode(struct super_block *sb, u64 nodeid,
|
|
loff_t offset, loff_t len);
|
|
|
|
/**
|
|
* File-system tells the kernel to invalidate parent attributes and
|
|
* the dentry matching parent/name.
|
|
*
|
|
* If the child_nodeid is non-zero and:
|
|
* - matches the inode number for the dentry matching parent/name,
|
|
* - is not a mount point
|
|
* - is a file or oan empty directory
|
|
* then the dentry is unhashed (d_delete()).
|
|
*/
|
|
int fuse_reverse_inval_entry(struct super_block *sb, u64 parent_nodeid,
|
|
u64 child_nodeid, struct qstr *name);
|
|
|
|
int fuse_do_open(struct fuse_conn *fc, u64 nodeid, struct file *file,
|
|
bool isdir);
|
|
|
|
/**
|
|
* fuse_direct_io() flags
|
|
*/
|
|
|
|
/** If set, it is WRITE; otherwise - READ */
|
|
#define FUSE_DIO_WRITE (1 << 0)
|
|
|
|
/** CUSE pass fuse_direct_io() a file which f_mapping->host is not from FUSE */
|
|
#define FUSE_DIO_CUSE (1 << 1)
|
|
|
|
ssize_t fuse_direct_io(struct fuse_io_priv *io, struct iov_iter *iter,
|
|
loff_t *ppos, int flags);
|
|
long fuse_do_ioctl(struct file *file, unsigned int cmd, unsigned long arg,
|
|
unsigned int flags);
|
|
long fuse_ioctl_common(struct file *file, unsigned int cmd,
|
|
unsigned long arg, unsigned int flags);
|
|
__poll_t fuse_file_poll(struct file *file, poll_table *wait);
|
|
int fuse_dev_release(struct inode *inode, struct file *file);
|
|
|
|
bool fuse_write_update_size(struct inode *inode, loff_t pos);
|
|
|
|
int fuse_flush_times(struct inode *inode, struct fuse_file *ff);
|
|
int fuse_write_inode(struct inode *inode, struct writeback_control *wbc);
|
|
|
|
int fuse_do_setattr(struct dentry *dentry, struct iattr *attr,
|
|
struct file *file);
|
|
|
|
void fuse_set_initialized(struct fuse_conn *fc);
|
|
|
|
void fuse_unlock_inode(struct inode *inode, bool locked);
|
|
bool fuse_lock_inode(struct inode *inode);
|
|
|
|
int fuse_setxattr(struct inode *inode, const char *name, const void *value,
|
|
size_t size, int flags);
|
|
ssize_t fuse_getxattr(struct inode *inode, const char *name, void *value,
|
|
size_t size);
|
|
ssize_t fuse_listxattr(struct dentry *entry, char *list, size_t size);
|
|
int fuse_removexattr(struct inode *inode, const char *name);
|
|
extern const struct xattr_handler *fuse_xattr_handlers[];
|
|
extern const struct xattr_handler *fuse_acl_xattr_handlers[];
|
|
extern const struct xattr_handler *fuse_no_acl_xattr_handlers[];
|
|
|
|
struct posix_acl;
|
|
struct posix_acl *fuse_get_acl(struct inode *inode, int type);
|
|
int fuse_set_acl(struct inode *inode, struct posix_acl *acl, int type);
|
|
|
|
/* passthrough.c */
|
|
int fuse_passthrough_open(struct fuse_dev *fud, u32 lower_fd);
|
|
int fuse_passthrough_setup(struct fuse_conn *fc, struct fuse_file *ff,
|
|
struct fuse_open_out *openarg);
|
|
void fuse_passthrough_release(struct fuse_passthrough *passthrough);
|
|
ssize_t fuse_passthrough_read_iter(struct kiocb *iocb, struct iov_iter *to);
|
|
ssize_t fuse_passthrough_write_iter(struct kiocb *iocb, struct iov_iter *from);
|
|
ssize_t fuse_passthrough_mmap(struct file *file, struct vm_area_struct *vma);
|
|
|
|
#endif /* _FS_FUSE_I_H */
|