From: Mike Snitzer <snitzer@kernel.org>
To: Chuck Lever <chuck.lever@oracle.com>,
Jeff Layton <jlayton@kernel.org>,
Trond Myklebust <trond.myklebust@hammerspace.com>,
Anna Schumaker <anna.schumaker@oracle.com>
Cc: linux-nfs@vger.kernel.org
Subject: [RFC PATCH 04/11] NFSD: prepare to support SETACL nfs4_acl passthru
Date: Thu, 19 Feb 2026 17:13:45 -0500 [thread overview]
Message-ID: <20260219221352.40554-5-snitzer@kernel.org> (raw)
In-Reply-To: <20260219221352.40554-1-snitzer@kernel.org>
From: Mike Snitzer <snitzer@hammerspace.com>
Use a separate xdr_buf and xdr_stream in both nfsd4_decode_acl() and
nfsd4_decode_nfsace4().
This prepares for nfsd4_decode_acl() to save off the xdr_buf
associated with the ACL payload so that deferred decode is possible
when nfs4_acl passthru is needed (in next commit).
Signed-off-by: Mike Snitzer <snitzer@hammerspace.com>
---
fs/nfsd/nfs4xdr.c | 57 ++++++++++++++++++++++++++++++-----------------
1 file changed, 37 insertions(+), 20 deletions(-)
diff --git a/fs/nfsd/nfs4xdr.c b/fs/nfsd/nfs4xdr.c
index f048245b8592..cacdd6285e90 100644
--- a/fs/nfsd/nfs4xdr.c
+++ b/fs/nfsd/nfs4xdr.c
@@ -288,31 +288,32 @@ nfsd4_decode_bitmap4(struct nfsd4_compoundargs *argp, u32 *bmval, u32 bmlen)
}
static __be32
-nfsd4_decode_nfsace4(struct nfsd4_compoundargs *argp, struct nfs4_ace *ace)
+nfsd4_decode_nfsace4(struct xdr_stream *xdr, struct svc_rqst *rqstp,
+ struct nfs4_ace *ace)
{
__be32 *p, status;
u32 length;
- if (xdr_stream_decode_u32(argp->xdr, &ace->type) < 0)
+ if (xdr_stream_decode_u32(xdr, &ace->type) < 0)
return nfserr_bad_xdr;
- if (xdr_stream_decode_u32(argp->xdr, &ace->flag) < 0)
+ if (xdr_stream_decode_u32(xdr, &ace->flag) < 0)
return nfserr_bad_xdr;
- if (xdr_stream_decode_u32(argp->xdr, &ace->access_mask) < 0)
+ if (xdr_stream_decode_u32(xdr, &ace->access_mask) < 0)
return nfserr_bad_xdr;
- if (xdr_stream_decode_u32(argp->xdr, &length) < 0)
+ if (xdr_stream_decode_u32(xdr, &length) < 0)
return nfserr_bad_xdr;
- p = xdr_inline_decode(argp->xdr, length);
+ p = xdr_inline_decode(xdr, length);
if (!p)
return nfserr_bad_xdr;
ace->whotype = nfs4_acl_get_whotype((char *)p, length);
if (ace->whotype != NFS4_ACL_WHO_NAMED)
status = nfs_ok;
else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
- status = nfsd_map_name_to_gid(argp->rqstp,
+ status = nfsd_map_name_to_gid(rqstp,
(char *)p, length, &ace->who_gid);
else
- status = nfsd_map_name_to_uid(argp->rqstp,
+ status = nfsd_map_name_to_uid(rqstp,
(char *)p, length, &ace->who_uid);
return status;
@@ -320,35 +321,51 @@ nfsd4_decode_nfsace4(struct nfsd4_compoundargs *argp, struct nfs4_ace *ace)
/* A counted array of nfsace4's */
static noinline __be32
-nfsd4_decode_acl(struct nfsd4_compoundargs *argp, struct nfs4_acl **acl)
+nfsd4_decode_acl(struct nfsd4_compoundargs *argp, struct nfs4_acl **acl,
+ u32 acl_len)
{
+
+ struct xdr_buf payload;
+ struct xdr_stream xdr;
struct nfs4_ace *ace;
- __be32 status;
+ __be32 status = nfs_ok;
u32 count;
- if (xdr_stream_decode_u32(argp->xdr, &count) < 0)
+ if (!xdr_stream_subsegment(argp->xdr, &payload, acl_len))
return nfserr_bad_xdr;
- if (count > xdr_stream_remaining(argp->xdr) / 20)
+ xdr_init_decode(&xdr, &payload, payload.head[0].iov_base, NULL);
+
+ if (xdr_stream_decode_u32(&xdr, &count) < 0) {
+ status = nfserr_bad_xdr;
+ goto out;
+ }
+
+ if (count > xdr_stream_remaining(&xdr) / 20) {
/*
* Even with 4-byte names there wouldn't be
* space for that many aces; something fishy is
* going on:
*/
- return nfserr_fbig;
+ status = nfserr_fbig;
+ goto out;
+ }
*acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(count));
- if (*acl == NULL)
- return nfserr_jukebox;
+ if (*acl == NULL) {
+ status = nfserr_jukebox;
+ goto out;
+ }
(*acl)->naces = count;
for (ace = (*acl)->aces; ace < (*acl)->aces + count; ace++) {
- status = nfsd4_decode_nfsace4(argp, ace);
+ status = nfsd4_decode_nfsace4(&xdr, argp->rqstp, ace);
if (status)
- return status;
+ goto out;
}
-
- return nfs_ok;
+out:
+ xdr_finish_decode(&xdr);
+ return status;
}
static noinline __be32
@@ -514,7 +531,7 @@ nfsd4_decode_fattr4(struct nfsd4_compoundargs *argp, u32 *bmval, u32 bmlen,
iattr->ia_valid |= ATTR_SIZE;
}
if (bmval[0] & FATTR4_WORD0_ACL) {
- status = nfsd4_decode_acl(argp, acl);
+ status = nfsd4_decode_acl(argp, acl, attrlist4_count);
if (status)
return status;
} else
--
2.44.0
next prev parent reply other threads:[~2026-02-19 22:13 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-02-19 22:13 [RFC PATCH 00/11] NFS/NFSD: nfs4_acl passthru for NFSv4 reexport Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 01/11] exportfs: add ability to advertise NFSv4 ACL passthru support Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 02/11] NFSD: factor out nfsd_supports_nfs4_acl() to nfsd/acl.h Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 03/11] NFS/NFSD: data structure enablement for nfs4_acl passthru support Mike Snitzer
2026-02-19 22:13 ` Mike Snitzer [this message]
2026-02-19 22:13 ` [RFC PATCH 05/11] NFSD: add NFS4 reexport support for SETACL nfs4_acl passthru Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 06/11] NFSD: add NFS4 reexport support for GETACL " Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 07/11] NFSD: add NFS4ACL_DACL and NFS4ACL_SACL passthru support Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 08/11] NFSD: avoid extra nfs4_acl passthru work unless needed Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 09/11] NFSv4: add reexport support for SETACL nfs4_acl passthru Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 10/11] NFSv4: add reexport support for GETACL " Mike Snitzer
2026-02-19 22:13 ` [RFC PATCH 11/11] NFSv4: set EXPORT_OP_NFSV4_ACL_PASSTHRU flag Mike Snitzer
2026-02-19 22:21 ` [RFC PATCH 00/11] NFS/NFSD: nfs4_acl passthru for NFSv4 reexport Chuck Lever
2026-02-19 23:07 ` Mike Snitzer
2026-02-20 15:46 ` Chuck Lever
2026-02-19 23:57 ` Trond Myklebust
2026-02-20 15:33 ` Chuck Lever
2026-02-22 17:53 ` Chuck Lever
2026-02-22 19:39 ` Mike Snitzer
2026-02-22 20:31 ` Chuck Lever
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260219221352.40554-5-snitzer@kernel.org \
--to=snitzer@kernel.org \
--cc=anna.schumaker@oracle.com \
--cc=chuck.lever@oracle.com \
--cc=jlayton@kernel.org \
--cc=linux-nfs@vger.kernel.org \
--cc=trond.myklebust@hammerspace.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.