Blame view

fs/readdir.c 6.86 KB
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
1
2
3
4
5
  /*
   *  linux/fs/readdir.c
   *
   *  Copyright (C) 1995  Linus Torvalds
   */
85c9fe8fc   Kevin Winchester   vfs: fix warning:...
6
  #include <linux/stddef.h>
022a16924   Milind Arun Choudhary   ROUND_UP macro cl...
7
  #include <linux/kernel.h>
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
8
9
10
11
12
13
  #include <linux/module.h>
  #include <linux/time.h>
  #include <linux/mm.h>
  #include <linux/errno.h>
  #include <linux/stat.h>
  #include <linux/file.h>
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
14
15
16
17
18
19
20
21
22
23
  #include <linux/fs.h>
  #include <linux/dirent.h>
  #include <linux/security.h>
  #include <linux/syscalls.h>
  #include <linux/unistd.h>
  
  #include <asm/uaccess.h>
  
  int vfs_readdir(struct file *file, filldir_t filler, void *buf)
  {
0f7fc9e4d   Josef "Jeff" Sipek   [PATCH] VFS: chan...
24
  	struct inode *inode = file->f_path.dentry->d_inode;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
25
26
27
28
29
30
31
  	int res = -ENOTDIR;
  	if (!file->f_op || !file->f_op->readdir)
  		goto out;
  
  	res = security_file_permission(file, MAY_READ);
  	if (res)
  		goto out;
da7845119   Liam R. Howlett   Use mutex_lock_ki...
32
33
34
  	res = mutex_lock_killable(&inode->i_mutex);
  	if (res)
  		goto out;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
35
36
37
38
39
  	res = -ENOENT;
  	if (!IS_DEADDIR(inode)) {
  		res = file->f_op->readdir(file, buf, filler);
  		file_accessed(file);
  	}
1b1dcc1b5   Jes Sorensen   [PATCH] mutex sub...
40
  	mutex_unlock(&inode->i_mutex);
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
41
42
43
44
45
46
47
48
49
50
51
52
53
54
  out:
  	return res;
  }
  
  EXPORT_SYMBOL(vfs_readdir);
  
  /*
   * Traditional linux readdir() handling..
   *
   * "count=1" is a special case, meaning that the buffer is one
   * dirent-structure in size and that the code can't handle more
   * anyway. Thus the special "fillonedir()" function for that
   * case (the low-level handlers don't need to care about this).
   */
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
  
  #ifdef __ARCH_WANT_OLD_READDIR
  
  struct old_linux_dirent {
  	unsigned long	d_ino;
  	unsigned long	d_offset;
  	unsigned short	d_namlen;
  	char		d_name[1];
  };
  
  struct readdir_callback {
  	struct old_linux_dirent __user * dirent;
  	int result;
  };
  
  static int fillonedir(void * __buf, const char * name, int namlen, loff_t offset,
afefdbb28   David Howells   [PATCH] VFS: Make...
71
  		      u64 ino, unsigned int d_type)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
72
73
74
  {
  	struct readdir_callback * buf = (struct readdir_callback *) __buf;
  	struct old_linux_dirent __user * dirent;
afefdbb28   David Howells   [PATCH] VFS: Make...
75
  	unsigned long d_ino;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
76
77
78
  
  	if (buf->result)
  		return -EINVAL;
afefdbb28   David Howells   [PATCH] VFS: Make...
79
  	d_ino = ino;
8f3f655da   Al Viro   [PATCH] fix regul...
80
81
  	if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) {
  		buf->result = -EOVERFLOW;
afefdbb28   David Howells   [PATCH] VFS: Make...
82
  		return -EOVERFLOW;
8f3f655da   Al Viro   [PATCH] fix regul...
83
  	}
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
84
85
86
87
88
89
  	buf->result++;
  	dirent = buf->dirent;
  	if (!access_ok(VERIFY_WRITE, dirent,
  			(unsigned long)(dirent->d_name + namlen + 1) -
  				(unsigned long)dirent))
  		goto efault;
afefdbb28   David Howells   [PATCH] VFS: Make...
90
  	if (	__put_user(d_ino, &dirent->d_ino) ||
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
91
92
93
94
95
96
97
98
99
100
  		__put_user(offset, &dirent->d_offset) ||
  		__put_user(namlen, &dirent->d_namlen) ||
  		__copy_to_user(dirent->d_name, name, namlen) ||
  		__put_user(0, dirent->d_name + namlen))
  		goto efault;
  	return 0;
  efault:
  	buf->result = -EFAULT;
  	return -EFAULT;
  }
d4e82042c   Heiko Carstens   [CVE-2009-0029] S...
101
102
  SYSCALL_DEFINE3(old_readdir, unsigned int, fd,
  		struct old_linux_dirent __user *, dirent, unsigned int, count)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
103
104
105
106
107
108
109
110
111
112
113
114
115
116
  {
  	int error;
  	struct file * file;
  	struct readdir_callback buf;
  
  	error = -EBADF;
  	file = fget(fd);
  	if (!file)
  		goto out;
  
  	buf.result = 0;
  	buf.dirent = dirent;
  
  	error = vfs_readdir(file, fillonedir, &buf);
53c9c5c0e   Al Viro   [PATCH] prepare v...
117
  	if (buf.result)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
  		error = buf.result;
  
  	fput(file);
  out:
  	return error;
  }
  
  #endif /* __ARCH_WANT_OLD_READDIR */
  
  /*
   * New, all-improved, singing, dancing, iBCS2-compliant getdents()
   * interface. 
   */
  struct linux_dirent {
  	unsigned long	d_ino;
  	unsigned long	d_off;
  	unsigned short	d_reclen;
  	char		d_name[1];
  };
  
  struct getdents_callback {
  	struct linux_dirent __user * current_dir;
  	struct linux_dirent __user * previous;
  	int count;
  	int error;
  };
  
  static int filldir(void * __buf, const char * name, int namlen, loff_t offset,
afefdbb28   David Howells   [PATCH] VFS: Make...
146
  		   u64 ino, unsigned int d_type)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
147
148
149
  {
  	struct linux_dirent __user * dirent;
  	struct getdents_callback * buf = (struct getdents_callback *) __buf;
afefdbb28   David Howells   [PATCH] VFS: Make...
150
  	unsigned long d_ino;
85c9fe8fc   Kevin Winchester   vfs: fix warning:...
151
152
  	int reclen = ALIGN(offsetof(struct linux_dirent, d_name) + namlen + 2,
  		sizeof(long));
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
153
154
155
156
  
  	buf->error = -EINVAL;	/* only used if we fail.. */
  	if (reclen > buf->count)
  		return -EINVAL;
afefdbb28   David Howells   [PATCH] VFS: Make...
157
  	d_ino = ino;
8f3f655da   Al Viro   [PATCH] fix regul...
158
159
  	if (sizeof(d_ino) < sizeof(ino) && d_ino != ino) {
  		buf->error = -EOVERFLOW;
afefdbb28   David Howells   [PATCH] VFS: Make...
160
  		return -EOVERFLOW;
8f3f655da   Al Viro   [PATCH] fix regul...
161
  	}
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
162
163
164
165
166
167
  	dirent = buf->previous;
  	if (dirent) {
  		if (__put_user(offset, &dirent->d_off))
  			goto efault;
  	}
  	dirent = buf->current_dir;
afefdbb28   David Howells   [PATCH] VFS: Make...
168
  	if (__put_user(d_ino, &dirent->d_ino))
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
  		goto efault;
  	if (__put_user(reclen, &dirent->d_reclen))
  		goto efault;
  	if (copy_to_user(dirent->d_name, name, namlen))
  		goto efault;
  	if (__put_user(0, dirent->d_name + namlen))
  		goto efault;
  	if (__put_user(d_type, (char __user *) dirent + reclen - 1))
  		goto efault;
  	buf->previous = dirent;
  	dirent = (void __user *)dirent + reclen;
  	buf->current_dir = dirent;
  	buf->count -= reclen;
  	return 0;
  efault:
  	buf->error = -EFAULT;
  	return -EFAULT;
  }
20f37034f   Heiko Carstens   [CVE-2009-0029] S...
187
188
  SYSCALL_DEFINE3(getdents, unsigned int, fd,
  		struct linux_dirent __user *, dirent, unsigned int, count)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
  {
  	struct file * file;
  	struct linux_dirent __user * lastdirent;
  	struct getdents_callback buf;
  	int error;
  
  	error = -EFAULT;
  	if (!access_ok(VERIFY_WRITE, dirent, count))
  		goto out;
  
  	error = -EBADF;
  	file = fget(fd);
  	if (!file)
  		goto out;
  
  	buf.current_dir = dirent;
  	buf.previous = NULL;
  	buf.count = count;
  	buf.error = 0;
  
  	error = vfs_readdir(file, filldir, &buf);
53c9c5c0e   Al Viro   [PATCH] prepare v...
210
211
  	if (error >= 0)
  		error = buf.error;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
212
213
214
215
216
217
218
  	lastdirent = buf.previous;
  	if (lastdirent) {
  		if (put_user(file->f_pos, &lastdirent->d_off))
  			error = -EFAULT;
  		else
  			error = count - buf.count;
  	}
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
219
220
221
222
  	fput(file);
  out:
  	return error;
  }
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
223
224
225
226
227
228
229
230
  struct getdents_callback64 {
  	struct linux_dirent64 __user * current_dir;
  	struct linux_dirent64 __user * previous;
  	int count;
  	int error;
  };
  
  static int filldir64(void * __buf, const char * name, int namlen, loff_t offset,
afefdbb28   David Howells   [PATCH] VFS: Make...
231
  		     u64 ino, unsigned int d_type)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
232
233
234
  {
  	struct linux_dirent64 __user *dirent;
  	struct getdents_callback64 * buf = (struct getdents_callback64 *) __buf;
85c9fe8fc   Kevin Winchester   vfs: fix warning:...
235
236
  	int reclen = ALIGN(offsetof(struct linux_dirent64, d_name) + namlen + 1,
  		sizeof(u64));
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
  
  	buf->error = -EINVAL;	/* only used if we fail.. */
  	if (reclen > buf->count)
  		return -EINVAL;
  	dirent = buf->previous;
  	if (dirent) {
  		if (__put_user(offset, &dirent->d_off))
  			goto efault;
  	}
  	dirent = buf->current_dir;
  	if (__put_user(ino, &dirent->d_ino))
  		goto efault;
  	if (__put_user(0, &dirent->d_off))
  		goto efault;
  	if (__put_user(reclen, &dirent->d_reclen))
  		goto efault;
  	if (__put_user(d_type, &dirent->d_type))
  		goto efault;
  	if (copy_to_user(dirent->d_name, name, namlen))
  		goto efault;
  	if (__put_user(0, dirent->d_name + namlen))
  		goto efault;
  	buf->previous = dirent;
  	dirent = (void __user *)dirent + reclen;
  	buf->current_dir = dirent;
  	buf->count -= reclen;
  	return 0;
  efault:
  	buf->error = -EFAULT;
  	return -EFAULT;
  }
20f37034f   Heiko Carstens   [CVE-2009-0029] S...
268
269
  SYSCALL_DEFINE3(getdents64, unsigned int, fd,
  		struct linux_dirent64 __user *, dirent, unsigned int, count)
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
  {
  	struct file * file;
  	struct linux_dirent64 __user * lastdirent;
  	struct getdents_callback64 buf;
  	int error;
  
  	error = -EFAULT;
  	if (!access_ok(VERIFY_WRITE, dirent, count))
  		goto out;
  
  	error = -EBADF;
  	file = fget(fd);
  	if (!file)
  		goto out;
  
  	buf.current_dir = dirent;
  	buf.previous = NULL;
  	buf.count = count;
  	buf.error = 0;
  
  	error = vfs_readdir(file, filldir64, &buf);
53c9c5c0e   Al Viro   [PATCH] prepare v...
291
292
  	if (error >= 0)
  		error = buf.error;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
293
294
295
  	lastdirent = buf.previous;
  	if (lastdirent) {
  		typeof(lastdirent->d_off) d_off = file->f_pos;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
296
  		if (__put_user(d_off, &lastdirent->d_off))
53c9c5c0e   Al Viro   [PATCH] prepare v...
297
298
299
  			error = -EFAULT;
  		else
  			error = count - buf.count;
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
300
  	}
1da177e4c   Linus Torvalds   Linux-2.6.12-rc2
301
302
303
304
  	fput(file);
  out:
  	return error;
  }