nfs_nfsdsubs.c revision 261055 
1/*-
2 * Copyright (c) 1989, 1993
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * This code is derived from software contributed to Berkeley by
6 * Rick Macklem at The University of Guelph.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 *    notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 * 4. Neither the name of the University nor the names of its contributors
17 *    may be used to endorse or promote products derived from this software
18 *    without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * SUCH DAMAGE.
31 *
32 */
33
34#include <sys/cdefs.h>
35__FBSDID("$FreeBSD: stable/10/sys/fs/nfsserver/nfs_nfsdsubs.c 261055 2014-01-22 23:55:25Z mav $");
36
37#ifndef APPLEKEXT
38/*
39 * These functions support the macros and help fiddle mbuf chains for
40 * the nfs op functions. They do things like create the rpc header and
41 * copy data between mbuf chains and uio lists.
42 */
43#include <fs/nfs/nfsport.h>
44
45extern u_int32_t newnfs_true, newnfs_false;
46extern int nfs_pubfhset;
47extern struct nfsclienthashhead nfsclienthash[NFSCLIENTHASHSIZE];
48extern struct nfslockhashhead nfslockhash[NFSLOCKHASHSIZE];
49extern int nfsrv_useacl;
50extern uid_t nfsrv_defaultuid;
51extern gid_t nfsrv_defaultgid;
52
53char nfs_v2pubfh[NFSX_V2FH];
54static nfstype newnfsv2_type[9] = { NFNON, NFREG, NFDIR, NFBLK, NFCHR, NFLNK,
55    NFNON, NFCHR, NFNON };
56extern nfstype nfsv34_type[9];
57#endif	/* !APPLEKEXT */
58
59SYSCTL_DECL(_vfs_nfsd);
60
61static int	disable_checkutf8 = 0;
62SYSCTL_INT(_vfs_nfsd, OID_AUTO, disable_checkutf8, CTLFLAG_RW,
63    &disable_checkutf8, 0,
64    "Disable the NFSv4 check for a UTF8 compliant name");
65
66static char nfsrv_hexdigit(char, int *);
67
68/*
69 * Maps errno values to nfs error numbers.
70 * Use NFSERR_IO as the catch all for ones not specifically defined in
71 * RFC 1094.
72 */
73static u_char nfsrv_v2errmap[ELAST] = {
74  NFSERR_PERM,	NFSERR_NOENT,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
75  NFSERR_NXIO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
76  NFSERR_IO,	NFSERR_IO,	NFSERR_ACCES,	NFSERR_IO,	NFSERR_IO,
77  NFSERR_IO,	NFSERR_EXIST,	NFSERR_IO,	NFSERR_NODEV,	NFSERR_NOTDIR,
78  NFSERR_ISDIR,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
79  NFSERR_IO,	NFSERR_FBIG,	NFSERR_NOSPC,	NFSERR_IO,	NFSERR_ROFS,
80  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
81  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
82  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
83  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
84  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
85  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
86  NFSERR_IO,	NFSERR_IO,	NFSERR_NAMETOL,	NFSERR_IO,	NFSERR_IO,
87  NFSERR_NOTEMPTY, NFSERR_IO,	NFSERR_IO,	NFSERR_DQUOT,	NFSERR_STALE,
88  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
89  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
90  NFSERR_IO,
91};
92
93/*
94 * Maps errno values to nfs error numbers.
95 * Although it is not obvious whether or not NFS clients really care if
96 * a returned error value is in the specified list for the procedure, the
97 * safest thing to do is filter them appropriately. For Version 2, the
98 * X/Open XNFS document is the only specification that defines error values
99 * for each RPC (The RFC simply lists all possible error values for all RPCs),
100 * so I have decided to not do this for Version 2.
101 * The first entry is the default error return and the rest are the valid
102 * errors for that RPC in increasing numeric order.
103 */
104static short nfsv3err_null[] = {
105	0,
106	0,
107};
108
109static short nfsv3err_getattr[] = {
110	NFSERR_IO,
111	NFSERR_IO,
112	NFSERR_STALE,
113	NFSERR_BADHANDLE,
114	NFSERR_SERVERFAULT,
115	NFSERR_DELAY,
116	0,
117};
118
119static short nfsv3err_setattr[] = {
120	NFSERR_IO,
121	NFSERR_ACCES,
122	NFSERR_PERM,
123	NFSERR_IO,
124	NFSERR_INVAL,
125	NFSERR_NOSPC,
126	NFSERR_ROFS,
127	NFSERR_DQUOT,
128	NFSERR_STALE,
129	NFSERR_BADHANDLE,
130	NFSERR_NOT_SYNC,
131	NFSERR_SERVERFAULT,
132	NFSERR_DELAY,
133	0,
134};
135
136static short nfsv3err_lookup[] = {
137	NFSERR_IO,
138	NFSERR_NOENT,
139	NFSERR_ACCES,
140	NFSERR_NAMETOL,
141	NFSERR_IO,
142	NFSERR_NOTDIR,
143	NFSERR_STALE,
144	NFSERR_BADHANDLE,
145	NFSERR_SERVERFAULT,
146	NFSERR_DELAY,
147	0,
148};
149
150static short nfsv3err_access[] = {
151	NFSERR_IO,
152	NFSERR_IO,
153	NFSERR_STALE,
154	NFSERR_BADHANDLE,
155	NFSERR_SERVERFAULT,
156	NFSERR_DELAY,
157	0,
158};
159
160static short nfsv3err_readlink[] = {
161	NFSERR_IO,
162	NFSERR_IO,
163	NFSERR_ACCES,
164	NFSERR_INVAL,
165	NFSERR_STALE,
166	NFSERR_BADHANDLE,
167	NFSERR_NOTSUPP,
168	NFSERR_SERVERFAULT,
169	NFSERR_DELAY,
170	0,
171};
172
173static short nfsv3err_read[] = {
174	NFSERR_IO,
175	NFSERR_IO,
176	NFSERR_NXIO,
177	NFSERR_ACCES,
178	NFSERR_INVAL,
179	NFSERR_STALE,
180	NFSERR_BADHANDLE,
181	NFSERR_SERVERFAULT,
182	NFSERR_DELAY,
183	0,
184};
185
186static short nfsv3err_write[] = {
187	NFSERR_IO,
188	NFSERR_IO,
189	NFSERR_ACCES,
190	NFSERR_NOSPC,
191	NFSERR_INVAL,
192	NFSERR_FBIG,
193	NFSERR_ROFS,
194	NFSERR_DQUOT,
195	NFSERR_STALE,
196	NFSERR_BADHANDLE,
197	NFSERR_SERVERFAULT,
198	NFSERR_DELAY,
199	0,
200};
201
202static short nfsv3err_create[] = {
203	NFSERR_IO,
204	NFSERR_EXIST,
205	NFSERR_NAMETOL,
206	NFSERR_ACCES,
207	NFSERR_IO,
208	NFSERR_NOTDIR,
209	NFSERR_NOSPC,
210	NFSERR_ROFS,
211	NFSERR_DQUOT,
212	NFSERR_STALE,
213	NFSERR_BADHANDLE,
214	NFSERR_NOTSUPP,
215	NFSERR_SERVERFAULT,
216	NFSERR_DELAY,
217	0,
218};
219
220static short nfsv3err_mkdir[] = {
221	NFSERR_IO,
222	NFSERR_EXIST,
223	NFSERR_ACCES,
224	NFSERR_NAMETOL,
225	NFSERR_IO,
226	NFSERR_NOTDIR,
227	NFSERR_NOSPC,
228	NFSERR_ROFS,
229	NFSERR_DQUOT,
230	NFSERR_STALE,
231	NFSERR_BADHANDLE,
232	NFSERR_NOTSUPP,
233	NFSERR_SERVERFAULT,
234	NFSERR_DELAY,
235	0,
236};
237
238static short nfsv3err_symlink[] = {
239	NFSERR_IO,
240	NFSERR_ACCES,
241	NFSERR_EXIST,
242	NFSERR_NAMETOL,
243	NFSERR_NOSPC,
244	NFSERR_IO,
245	NFSERR_NOTDIR,
246	NFSERR_ROFS,
247	NFSERR_DQUOT,
248	NFSERR_STALE,
249	NFSERR_BADHANDLE,
250	NFSERR_NOTSUPP,
251	NFSERR_SERVERFAULT,
252	NFSERR_DELAY,
253	0,
254};
255
256static short nfsv3err_mknod[] = {
257	NFSERR_IO,
258	NFSERR_ACCES,
259	NFSERR_EXIST,
260	NFSERR_NAMETOL,
261	NFSERR_NOSPC,
262	NFSERR_IO,
263	NFSERR_NOTDIR,
264	NFSERR_ROFS,
265	NFSERR_DQUOT,
266	NFSERR_STALE,
267	NFSERR_BADHANDLE,
268	NFSERR_NOTSUPP,
269	NFSERR_SERVERFAULT,
270	NFSERR_DELAY,
271	NFSERR_BADTYPE,
272	0,
273};
274
275static short nfsv3err_remove[] = {
276	NFSERR_IO,
277	NFSERR_NOENT,
278	NFSERR_ACCES,
279	NFSERR_NAMETOL,
280	NFSERR_IO,
281	NFSERR_NOTDIR,
282	NFSERR_ROFS,
283	NFSERR_STALE,
284	NFSERR_BADHANDLE,
285	NFSERR_SERVERFAULT,
286	NFSERR_DELAY,
287	0,
288};
289
290static short nfsv3err_rmdir[] = {
291	NFSERR_IO,
292	NFSERR_NOENT,
293	NFSERR_ACCES,
294	NFSERR_NOTDIR,
295	NFSERR_NAMETOL,
296	NFSERR_IO,
297	NFSERR_EXIST,
298	NFSERR_INVAL,
299	NFSERR_ROFS,
300	NFSERR_NOTEMPTY,
301	NFSERR_STALE,
302	NFSERR_BADHANDLE,
303	NFSERR_NOTSUPP,
304	NFSERR_SERVERFAULT,
305	NFSERR_DELAY,
306	0,
307};
308
309static short nfsv3err_rename[] = {
310	NFSERR_IO,
311	NFSERR_NOENT,
312	NFSERR_ACCES,
313	NFSERR_EXIST,
314	NFSERR_NAMETOL,
315	NFSERR_XDEV,
316	NFSERR_IO,
317	NFSERR_NOTDIR,
318	NFSERR_ISDIR,
319	NFSERR_INVAL,
320	NFSERR_NOSPC,
321	NFSERR_ROFS,
322	NFSERR_MLINK,
323	NFSERR_NOTEMPTY,
324	NFSERR_DQUOT,
325	NFSERR_STALE,
326	NFSERR_BADHANDLE,
327	NFSERR_NOTSUPP,
328	NFSERR_SERVERFAULT,
329	NFSERR_DELAY,
330	0,
331};
332
333static short nfsv3err_link[] = {
334	NFSERR_IO,
335	NFSERR_ACCES,
336	NFSERR_EXIST,
337	NFSERR_NAMETOL,
338	NFSERR_IO,
339	NFSERR_XDEV,
340	NFSERR_NOTDIR,
341	NFSERR_INVAL,
342	NFSERR_NOSPC,
343	NFSERR_ROFS,
344	NFSERR_MLINK,
345	NFSERR_DQUOT,
346	NFSERR_STALE,
347	NFSERR_BADHANDLE,
348	NFSERR_NOTSUPP,
349	NFSERR_SERVERFAULT,
350	NFSERR_DELAY,
351	0,
352};
353
354static short nfsv3err_readdir[] = {
355	NFSERR_IO,
356	NFSERR_ACCES,
357	NFSERR_NOTDIR,
358	NFSERR_IO,
359	NFSERR_STALE,
360	NFSERR_BADHANDLE,
361	NFSERR_BAD_COOKIE,
362	NFSERR_TOOSMALL,
363	NFSERR_SERVERFAULT,
364	NFSERR_DELAY,
365	0,
366};
367
368static short nfsv3err_readdirplus[] = {
369	NFSERR_IO,
370	NFSERR_ACCES,
371	NFSERR_NOTDIR,
372	NFSERR_IO,
373	NFSERR_STALE,
374	NFSERR_BADHANDLE,
375	NFSERR_BAD_COOKIE,
376	NFSERR_NOTSUPP,
377	NFSERR_TOOSMALL,
378	NFSERR_SERVERFAULT,
379	NFSERR_DELAY,
380	0,
381};
382
383static short nfsv3err_fsstat[] = {
384	NFSERR_IO,
385	NFSERR_IO,
386	NFSERR_STALE,
387	NFSERR_BADHANDLE,
388	NFSERR_SERVERFAULT,
389	NFSERR_DELAY,
390	0,
391};
392
393static short nfsv3err_fsinfo[] = {
394	NFSERR_STALE,
395	NFSERR_STALE,
396	NFSERR_BADHANDLE,
397	NFSERR_SERVERFAULT,
398	NFSERR_DELAY,
399	0,
400};
401
402static short nfsv3err_pathconf[] = {
403	NFSERR_STALE,
404	NFSERR_STALE,
405	NFSERR_BADHANDLE,
406	NFSERR_SERVERFAULT,
407	NFSERR_DELAY,
408	0,
409};
410
411static short nfsv3err_commit[] = {
412	NFSERR_IO,
413	NFSERR_IO,
414	NFSERR_STALE,
415	NFSERR_BADHANDLE,
416	NFSERR_SERVERFAULT,
417	NFSERR_DELAY,
418	0,
419};
420
421static short *nfsrv_v3errmap[] = {
422	nfsv3err_null,
423	nfsv3err_getattr,
424	nfsv3err_setattr,
425	nfsv3err_lookup,
426	nfsv3err_access,
427	nfsv3err_readlink,
428	nfsv3err_read,
429	nfsv3err_write,
430	nfsv3err_create,
431	nfsv3err_mkdir,
432	nfsv3err_symlink,
433	nfsv3err_mknod,
434	nfsv3err_remove,
435	nfsv3err_rmdir,
436	nfsv3err_rename,
437	nfsv3err_link,
438	nfsv3err_readdir,
439	nfsv3err_readdirplus,
440	nfsv3err_fsstat,
441	nfsv3err_fsinfo,
442	nfsv3err_pathconf,
443	nfsv3err_commit,
444};
445
446/*
447 * And the same for V4.
448 */
449static short nfsv4err_null[] = {
450	0,
451	0,
452};
453
454static short nfsv4err_access[] = {
455	NFSERR_IO,
456	NFSERR_ACCES,
457	NFSERR_BADHANDLE,
458	NFSERR_BADXDR,
459	NFSERR_DELAY,
460	NFSERR_FHEXPIRED,
461	NFSERR_INVAL,
462	NFSERR_IO,
463	NFSERR_MOVED,
464	NFSERR_NOFILEHANDLE,
465	NFSERR_RESOURCE,
466	NFSERR_SERVERFAULT,
467	NFSERR_STALE,
468	0,
469};
470
471static short nfsv4err_close[] = {
472	NFSERR_EXPIRED,
473	NFSERR_ADMINREVOKED,
474	NFSERR_BADHANDLE,
475	NFSERR_BADSEQID,
476	NFSERR_BADSTATEID,
477	NFSERR_BADXDR,
478	NFSERR_DELAY,
479	NFSERR_EXPIRED,
480	NFSERR_FHEXPIRED,
481	NFSERR_INVAL,
482	NFSERR_ISDIR,
483	NFSERR_LEASEMOVED,
484	NFSERR_LOCKSHELD,
485	NFSERR_MOVED,
486	NFSERR_NOFILEHANDLE,
487	NFSERR_OLDSTATEID,
488	NFSERR_RESOURCE,
489	NFSERR_SERVERFAULT,
490	NFSERR_STALE,
491	NFSERR_STALESTATEID,
492	0,
493};
494
495static short nfsv4err_commit[] = {
496	NFSERR_IO,
497	NFSERR_ACCES,
498	NFSERR_BADHANDLE,
499	NFSERR_BADXDR,
500	NFSERR_FHEXPIRED,
501	NFSERR_INVAL,
502	NFSERR_IO,
503	NFSERR_ISDIR,
504	NFSERR_MOVED,
505	NFSERR_NOFILEHANDLE,
506	NFSERR_RESOURCE,
507	NFSERR_ROFS,
508	NFSERR_SERVERFAULT,
509	NFSERR_STALE,
510	0,
511};
512
513static short nfsv4err_create[] = {
514	NFSERR_IO,
515	NFSERR_ACCES,
516	NFSERR_ATTRNOTSUPP,
517	NFSERR_BADCHAR,
518	NFSERR_BADHANDLE,
519	NFSERR_BADNAME,
520	NFSERR_BADOWNER,
521	NFSERR_BADTYPE,
522	NFSERR_BADXDR,
523	NFSERR_DELAY,
524	NFSERR_DQUOT,
525	NFSERR_EXIST,
526	NFSERR_FHEXPIRED,
527	NFSERR_INVAL,
528	NFSERR_IO,
529	NFSERR_MOVED,
530	NFSERR_NAMETOL,
531	NFSERR_NOFILEHANDLE,
532	NFSERR_NOSPC,
533	NFSERR_NOTDIR,
534	NFSERR_PERM,
535	NFSERR_RESOURCE,
536	NFSERR_ROFS,
537	NFSERR_SERVERFAULT,
538	NFSERR_STALE,
539	0,
540};
541
542static short nfsv4err_delegpurge[] = {
543	NFSERR_SERVERFAULT,
544	NFSERR_BADXDR,
545	NFSERR_NOTSUPP,
546	NFSERR_LEASEMOVED,
547	NFSERR_MOVED,
548	NFSERR_RESOURCE,
549	NFSERR_SERVERFAULT,
550	NFSERR_STALECLIENTID,
551	0,
552};
553
554static short nfsv4err_delegreturn[] = {
555	NFSERR_SERVERFAULT,
556	NFSERR_ADMINREVOKED,
557	NFSERR_BADSTATEID,
558	NFSERR_BADXDR,
559	NFSERR_EXPIRED,
560	NFSERR_INVAL,
561	NFSERR_LEASEMOVED,
562	NFSERR_MOVED,
563	NFSERR_NOFILEHANDLE,
564	NFSERR_NOTSUPP,
565	NFSERR_OLDSTATEID,
566	NFSERR_RESOURCE,
567	NFSERR_SERVERFAULT,
568	NFSERR_STALE,
569	NFSERR_STALESTATEID,
570	0,
571};
572
573static short nfsv4err_getattr[] = {
574	NFSERR_IO,
575	NFSERR_ACCES,
576	NFSERR_BADHANDLE,
577	NFSERR_BADXDR,
578	NFSERR_DELAY,
579	NFSERR_FHEXPIRED,
580	NFSERR_INVAL,
581	NFSERR_IO,
582	NFSERR_MOVED,
583	NFSERR_NOFILEHANDLE,
584	NFSERR_RESOURCE,
585	NFSERR_SERVERFAULT,
586	NFSERR_STALE,
587	0,
588};
589
590static short nfsv4err_getfh[] = {
591	NFSERR_BADHANDLE,
592	NFSERR_BADHANDLE,
593	NFSERR_FHEXPIRED,
594	NFSERR_MOVED,
595	NFSERR_NOFILEHANDLE,
596	NFSERR_RESOURCE,
597	NFSERR_SERVERFAULT,
598	NFSERR_STALE,
599	0,
600};
601
602static short nfsv4err_link[] = {
603	NFSERR_IO,
604	NFSERR_ACCES,
605	NFSERR_BADCHAR,
606	NFSERR_BADHANDLE,
607	NFSERR_BADNAME,
608	NFSERR_BADXDR,
609	NFSERR_DELAY,
610	NFSERR_DQUOT,
611	NFSERR_EXIST,
612	NFSERR_FHEXPIRED,
613	NFSERR_FILEOPEN,
614	NFSERR_INVAL,
615	NFSERR_IO,
616	NFSERR_ISDIR,
617	NFSERR_MLINK,
618	NFSERR_MOVED,
619	NFSERR_NAMETOL,
620	NFSERR_NOENT,
621	NFSERR_NOFILEHANDLE,
622	NFSERR_NOSPC,
623	NFSERR_NOTDIR,
624	NFSERR_NOTSUPP,
625	NFSERR_RESOURCE,
626	NFSERR_ROFS,
627	NFSERR_SERVERFAULT,
628	NFSERR_STALE,
629	NFSERR_WRONGSEC,
630	NFSERR_XDEV,
631	0,
632};
633
634static short nfsv4err_lock[] = {
635	NFSERR_SERVERFAULT,
636	NFSERR_ACCES,
637	NFSERR_ADMINREVOKED,
638	NFSERR_BADHANDLE,
639	NFSERR_BADRANGE,
640	NFSERR_BADSEQID,
641	NFSERR_BADSTATEID,
642	NFSERR_BADXDR,
643	NFSERR_DEADLOCK,
644	NFSERR_DELAY,
645	NFSERR_DENIED,
646	NFSERR_EXPIRED,
647	NFSERR_FHEXPIRED,
648	NFSERR_GRACE,
649	NFSERR_INVAL,
650	NFSERR_ISDIR,
651	NFSERR_LEASEMOVED,
652	NFSERR_LOCKNOTSUPP,
653	NFSERR_LOCKRANGE,
654	NFSERR_MOVED,
655	NFSERR_NOFILEHANDLE,
656	NFSERR_NOGRACE,
657	NFSERR_OLDSTATEID,
658	NFSERR_OPENMODE,
659	NFSERR_RECLAIMBAD,
660	NFSERR_RECLAIMCONFLICT,
661	NFSERR_RESOURCE,
662	NFSERR_SERVERFAULT,
663	NFSERR_STALE,
664	NFSERR_STALECLIENTID,
665	NFSERR_STALESTATEID,
666	0,
667};
668
669static short nfsv4err_lockt[] = {
670	NFSERR_SERVERFAULT,
671	NFSERR_ACCES,
672	NFSERR_BADHANDLE,
673	NFSERR_BADRANGE,
674	NFSERR_BADXDR,
675	NFSERR_DELAY,
676	NFSERR_DENIED,
677	NFSERR_FHEXPIRED,
678	NFSERR_GRACE,
679	NFSERR_INVAL,
680	NFSERR_ISDIR,
681	NFSERR_LEASEMOVED,
682	NFSERR_LOCKRANGE,
683	NFSERR_MOVED,
684	NFSERR_NOFILEHANDLE,
685	NFSERR_RESOURCE,
686	NFSERR_SERVERFAULT,
687	NFSERR_STALE,
688	NFSERR_STALECLIENTID,
689	0,
690};
691
692static short nfsv4err_locku[] = {
693	NFSERR_SERVERFAULT,
694	NFSERR_ACCES,
695	NFSERR_ADMINREVOKED,
696	NFSERR_BADHANDLE,
697	NFSERR_BADRANGE,
698	NFSERR_BADSEQID,
699	NFSERR_BADSTATEID,
700	NFSERR_BADXDR,
701	NFSERR_EXPIRED,
702	NFSERR_FHEXPIRED,
703	NFSERR_GRACE,
704	NFSERR_INVAL,
705	NFSERR_ISDIR,
706	NFSERR_LEASEMOVED,
707	NFSERR_LOCKRANGE,
708	NFSERR_MOVED,
709	NFSERR_NOFILEHANDLE,
710	NFSERR_OLDSTATEID,
711	NFSERR_RESOURCE,
712	NFSERR_SERVERFAULT,
713	NFSERR_STALE,
714	NFSERR_STALESTATEID,
715	0,
716};
717
718static short nfsv4err_lookup[] = {
719	NFSERR_IO,
720	NFSERR_ACCES,
721	NFSERR_BADCHAR,
722	NFSERR_BADHANDLE,
723	NFSERR_BADNAME,
724	NFSERR_BADXDR,
725	NFSERR_FHEXPIRED,
726	NFSERR_INVAL,
727	NFSERR_IO,
728	NFSERR_MOVED,
729	NFSERR_NAMETOL,
730	NFSERR_NOENT,
731	NFSERR_NOFILEHANDLE,
732	NFSERR_NOTDIR,
733	NFSERR_RESOURCE,
734	NFSERR_SERVERFAULT,
735	NFSERR_STALE,
736	NFSERR_SYMLINK,
737	NFSERR_WRONGSEC,
738	0,
739};
740
741static short nfsv4err_lookupp[] = {
742	NFSERR_IO,
743	NFSERR_ACCES,
744	NFSERR_BADHANDLE,
745	NFSERR_FHEXPIRED,
746	NFSERR_IO,
747	NFSERR_MOVED,
748	NFSERR_NOENT,
749	NFSERR_NOFILEHANDLE,
750	NFSERR_NOTDIR,
751	NFSERR_RESOURCE,
752	NFSERR_SERVERFAULT,
753	NFSERR_STALE,
754	0,
755};
756
757static short nfsv4err_nverify[] = {
758	NFSERR_IO,
759	NFSERR_ACCES,
760	NFSERR_ATTRNOTSUPP,
761	NFSERR_BADCHAR,
762	NFSERR_BADHANDLE,
763	NFSERR_BADXDR,
764	NFSERR_DELAY,
765	NFSERR_FHEXPIRED,
766	NFSERR_INVAL,
767	NFSERR_IO,
768	NFSERR_MOVED,
769	NFSERR_NOFILEHANDLE,
770	NFSERR_RESOURCE,
771	NFSERR_SAME,
772	NFSERR_SERVERFAULT,
773	NFSERR_STALE,
774	0,
775};
776
777static short nfsv4err_open[] = {
778	NFSERR_IO,
779	NFSERR_ACCES,
780	NFSERR_ADMINREVOKED,
781	NFSERR_ATTRNOTSUPP,
782	NFSERR_BADCHAR,
783	NFSERR_BADHANDLE,
784	NFSERR_BADNAME,
785	NFSERR_BADOWNER,
786	NFSERR_BADSEQID,
787	NFSERR_BADXDR,
788	NFSERR_DELAY,
789	NFSERR_DQUOT,
790	NFSERR_EXIST,
791	NFSERR_EXPIRED,
792	NFSERR_FHEXPIRED,
793	NFSERR_GRACE,
794	NFSERR_IO,
795	NFSERR_INVAL,
796	NFSERR_ISDIR,
797	NFSERR_LEASEMOVED,
798	NFSERR_MOVED,
799	NFSERR_NAMETOL,
800	NFSERR_NOENT,
801	NFSERR_NOFILEHANDLE,
802	NFSERR_NOGRACE,
803	NFSERR_NOSPC,
804	NFSERR_NOTDIR,
805	NFSERR_NOTSUPP,
806	NFSERR_PERM,
807	NFSERR_RECLAIMBAD,
808	NFSERR_RECLAIMCONFLICT,
809	NFSERR_RESOURCE,
810	NFSERR_ROFS,
811	NFSERR_SERVERFAULT,
812	NFSERR_SHAREDENIED,
813	NFSERR_STALE,
814	NFSERR_STALECLIENTID,
815	NFSERR_SYMLINK,
816	NFSERR_WRONGSEC,
817	0,
818};
819
820static short nfsv4err_openattr[] = {
821	NFSERR_IO,
822	NFSERR_ACCES,
823	NFSERR_BADHANDLE,
824	NFSERR_BADXDR,
825	NFSERR_DELAY,
826	NFSERR_DQUOT,
827	NFSERR_FHEXPIRED,
828	NFSERR_IO,
829	NFSERR_MOVED,
830	NFSERR_NOENT,
831	NFSERR_NOFILEHANDLE,
832	NFSERR_NOSPC,
833	NFSERR_NOTSUPP,
834	NFSERR_RESOURCE,
835	NFSERR_ROFS,
836	NFSERR_SERVERFAULT,
837	NFSERR_STALE,
838	0,
839};
840
841static short nfsv4err_openconfirm[] = {
842	NFSERR_SERVERFAULT,
843	NFSERR_ADMINREVOKED,
844	NFSERR_BADHANDLE,
845	NFSERR_BADSEQID,
846	NFSERR_BADSTATEID,
847	NFSERR_BADXDR,
848	NFSERR_EXPIRED,
849	NFSERR_FHEXPIRED,
850	NFSERR_INVAL,
851	NFSERR_ISDIR,
852	NFSERR_MOVED,
853	NFSERR_NOFILEHANDLE,
854	NFSERR_OLDSTATEID,
855	NFSERR_RESOURCE,
856	NFSERR_SERVERFAULT,
857	NFSERR_STALE,
858	NFSERR_STALESTATEID,
859	0,
860};
861
862static short nfsv4err_opendowngrade[] = {
863	NFSERR_SERVERFAULT,
864	NFSERR_ADMINREVOKED,
865	NFSERR_BADHANDLE,
866	NFSERR_BADSEQID,
867	NFSERR_BADSTATEID,
868	NFSERR_BADXDR,
869	NFSERR_EXPIRED,
870	NFSERR_FHEXPIRED,
871	NFSERR_INVAL,
872	NFSERR_MOVED,
873	NFSERR_NOFILEHANDLE,
874	NFSERR_OLDSTATEID,
875	NFSERR_RESOURCE,
876	NFSERR_SERVERFAULT,
877	NFSERR_STALE,
878	NFSERR_STALESTATEID,
879	0,
880};
881
882static short nfsv4err_putfh[] = {
883	NFSERR_SERVERFAULT,
884	NFSERR_BADHANDLE,
885	NFSERR_BADXDR,
886	NFSERR_FHEXPIRED,
887	NFSERR_MOVED,
888	NFSERR_RESOURCE,
889	NFSERR_SERVERFAULT,
890	NFSERR_STALE,
891	NFSERR_WRONGSEC,
892	0,
893};
894
895static short nfsv4err_putpubfh[] = {
896	NFSERR_SERVERFAULT,
897	NFSERR_RESOURCE,
898	NFSERR_SERVERFAULT,
899	NFSERR_WRONGSEC,
900	0,
901};
902
903static short nfsv4err_putrootfh[] = {
904	NFSERR_SERVERFAULT,
905	NFSERR_RESOURCE,
906	NFSERR_SERVERFAULT,
907	NFSERR_WRONGSEC,
908	0,
909};
910
911static short nfsv4err_read[] = {
912	NFSERR_IO,
913	NFSERR_ACCES,
914	NFSERR_ADMINREVOKED,
915	NFSERR_BADHANDLE,
916	NFSERR_BADSTATEID,
917	NFSERR_BADXDR,
918	NFSERR_DELAY,
919	NFSERR_EXPIRED,
920	NFSERR_FHEXPIRED,
921	NFSERR_GRACE,
922	NFSERR_IO,
923	NFSERR_INVAL,
924	NFSERR_ISDIR,
925	NFSERR_LEASEMOVED,
926	NFSERR_LOCKED,
927	NFSERR_MOVED,
928	NFSERR_NOFILEHANDLE,
929	NFSERR_NXIO,
930	NFSERR_OLDSTATEID,
931	NFSERR_OPENMODE,
932	NFSERR_RESOURCE,
933	NFSERR_SERVERFAULT,
934	NFSERR_STALE,
935	NFSERR_STALESTATEID,
936	0,
937};
938
939static short nfsv4err_readdir[] = {
940	NFSERR_IO,
941	NFSERR_ACCES,
942	NFSERR_BADHANDLE,
943	NFSERR_BAD_COOKIE,
944	NFSERR_BADXDR,
945	NFSERR_DELAY,
946	NFSERR_FHEXPIRED,
947	NFSERR_INVAL,
948	NFSERR_IO,
949	NFSERR_MOVED,
950	NFSERR_NOFILEHANDLE,
951	NFSERR_NOTDIR,
952	NFSERR_NOTSAME,
953	NFSERR_RESOURCE,
954	NFSERR_SERVERFAULT,
955	NFSERR_STALE,
956	NFSERR_TOOSMALL,
957	0,
958};
959
960static short nfsv4err_readlink[] = {
961	NFSERR_IO,
962	NFSERR_ACCES,
963	NFSERR_BADHANDLE,
964	NFSERR_DELAY,
965	NFSERR_FHEXPIRED,
966	NFSERR_INVAL,
967	NFSERR_IO,
968	NFSERR_ISDIR,
969	NFSERR_MOVED,
970	NFSERR_NOFILEHANDLE,
971	NFSERR_NOTSUPP,
972	NFSERR_RESOURCE,
973	NFSERR_SERVERFAULT,
974	NFSERR_STALE,
975	0,
976};
977
978static short nfsv4err_remove[] = {
979	NFSERR_IO,
980	NFSERR_ACCES,
981	NFSERR_BADCHAR,
982	NFSERR_BADHANDLE,
983	NFSERR_BADNAME,
984	NFSERR_BADXDR,
985	NFSERR_DELAY,
986	NFSERR_FHEXPIRED,
987	NFSERR_FILEOPEN,
988	NFSERR_INVAL,
989	NFSERR_IO,
990	NFSERR_MOVED,
991	NFSERR_NAMETOL,
992	NFSERR_NOENT,
993	NFSERR_NOFILEHANDLE,
994	NFSERR_NOTDIR,
995	NFSERR_NOTEMPTY,
996	NFSERR_RESOURCE,
997	NFSERR_ROFS,
998	NFSERR_SERVERFAULT,
999	NFSERR_STALE,
1000	0,
1001};
1002
1003static short nfsv4err_rename[] = {
1004	NFSERR_IO,
1005	NFSERR_ACCES,
1006	NFSERR_BADCHAR,
1007	NFSERR_BADHANDLE,
1008	NFSERR_BADNAME,
1009	NFSERR_BADXDR,
1010	NFSERR_DELAY,
1011	NFSERR_DQUOT,
1012	NFSERR_EXIST,
1013	NFSERR_FHEXPIRED,
1014	NFSERR_FILEOPEN,
1015	NFSERR_INVAL,
1016	NFSERR_IO,
1017	NFSERR_MOVED,
1018	NFSERR_NAMETOL,
1019	NFSERR_NOENT,
1020	NFSERR_NOFILEHANDLE,
1021	NFSERR_NOSPC,
1022	NFSERR_NOTDIR,
1023	NFSERR_NOTEMPTY,
1024	NFSERR_RESOURCE,
1025	NFSERR_ROFS,
1026	NFSERR_SERVERFAULT,
1027	NFSERR_STALE,
1028	NFSERR_WRONGSEC,
1029	NFSERR_XDEV,
1030	0,
1031};
1032
1033static short nfsv4err_renew[] = {
1034	NFSERR_SERVERFAULT,
1035	NFSERR_ACCES,
1036	NFSERR_ADMINREVOKED,
1037	NFSERR_BADXDR,
1038	NFSERR_CBPATHDOWN,
1039	NFSERR_EXPIRED,
1040	NFSERR_LEASEMOVED,
1041	NFSERR_RESOURCE,
1042	NFSERR_SERVERFAULT,
1043	NFSERR_STALECLIENTID,
1044	0,
1045};
1046
1047static short nfsv4err_restorefh[] = {
1048	NFSERR_SERVERFAULT,
1049	NFSERR_BADHANDLE,
1050	NFSERR_FHEXPIRED,
1051	NFSERR_MOVED,
1052	NFSERR_RESOURCE,
1053	NFSERR_RESTOREFH,
1054	NFSERR_SERVERFAULT,
1055	NFSERR_STALE,
1056	NFSERR_WRONGSEC,
1057	0,
1058};
1059
1060static short nfsv4err_savefh[] = {
1061	NFSERR_SERVERFAULT,
1062	NFSERR_BADHANDLE,
1063	NFSERR_FHEXPIRED,
1064	NFSERR_MOVED,
1065	NFSERR_NOFILEHANDLE,
1066	NFSERR_RESOURCE,
1067	NFSERR_SERVERFAULT,
1068	NFSERR_STALE,
1069	0,
1070};
1071
1072static short nfsv4err_secinfo[] = {
1073	NFSERR_SERVERFAULT,
1074	NFSERR_ACCES,
1075	NFSERR_BADCHAR,
1076	NFSERR_BADHANDLE,
1077	NFSERR_BADNAME,
1078	NFSERR_BADXDR,
1079	NFSERR_FHEXPIRED,
1080	NFSERR_INVAL,
1081	NFSERR_MOVED,
1082	NFSERR_NAMETOL,
1083	NFSERR_NOENT,
1084	NFSERR_NOFILEHANDLE,
1085	NFSERR_NOTDIR,
1086	NFSERR_RESOURCE,
1087	NFSERR_SERVERFAULT,
1088	NFSERR_STALE,
1089	0,
1090};
1091
1092static short nfsv4err_setattr[] = {
1093	NFSERR_IO,
1094	NFSERR_ACCES,
1095	NFSERR_ADMINREVOKED,
1096	NFSERR_ATTRNOTSUPP,
1097	NFSERR_BADCHAR,
1098	NFSERR_BADHANDLE,
1099	NFSERR_BADOWNER,
1100	NFSERR_BADSTATEID,
1101	NFSERR_BADXDR,
1102	NFSERR_DELAY,
1103	NFSERR_DQUOT,
1104	NFSERR_EXPIRED,
1105	NFSERR_FBIG,
1106	NFSERR_FHEXPIRED,
1107	NFSERR_GRACE,
1108	NFSERR_INVAL,
1109	NFSERR_IO,
1110	NFSERR_ISDIR,
1111	NFSERR_LOCKED,
1112	NFSERR_MOVED,
1113	NFSERR_NOFILEHANDLE,
1114	NFSERR_NOSPC,
1115	NFSERR_OLDSTATEID,
1116	NFSERR_OPENMODE,
1117	NFSERR_PERM,
1118	NFSERR_RESOURCE,
1119	NFSERR_ROFS,
1120	NFSERR_SERVERFAULT,
1121	NFSERR_STALE,
1122	NFSERR_STALESTATEID,
1123	0,
1124};
1125
1126static short nfsv4err_setclientid[] = {
1127	NFSERR_SERVERFAULT,
1128	NFSERR_BADXDR,
1129	NFSERR_CLIDINUSE,
1130	NFSERR_INVAL,
1131	NFSERR_RESOURCE,
1132	NFSERR_SERVERFAULT,
1133	0,
1134};
1135
1136static short nfsv4err_setclientidconfirm[] = {
1137	NFSERR_SERVERFAULT,
1138	NFSERR_BADXDR,
1139	NFSERR_CLIDINUSE,
1140	NFSERR_RESOURCE,
1141	NFSERR_SERVERFAULT,
1142	NFSERR_STALECLIENTID,
1143	0,
1144};
1145
1146static short nfsv4err_verify[] = {
1147	NFSERR_SERVERFAULT,
1148	NFSERR_ACCES,
1149	NFSERR_ATTRNOTSUPP,
1150	NFSERR_BADCHAR,
1151	NFSERR_BADHANDLE,
1152	NFSERR_BADXDR,
1153	NFSERR_DELAY,
1154	NFSERR_FHEXPIRED,
1155	NFSERR_INVAL,
1156	NFSERR_MOVED,
1157	NFSERR_NOFILEHANDLE,
1158	NFSERR_NOTSAME,
1159	NFSERR_RESOURCE,
1160	NFSERR_SERVERFAULT,
1161	NFSERR_STALE,
1162	0,
1163};
1164
1165static short nfsv4err_write[] = {
1166	NFSERR_IO,
1167	NFSERR_ACCES,
1168	NFSERR_ADMINREVOKED,
1169	NFSERR_BADHANDLE,
1170	NFSERR_BADSTATEID,
1171	NFSERR_BADXDR,
1172	NFSERR_DELAY,
1173	NFSERR_DQUOT,
1174	NFSERR_EXPIRED,
1175	NFSERR_FBIG,
1176	NFSERR_FHEXPIRED,
1177	NFSERR_GRACE,
1178	NFSERR_INVAL,
1179	NFSERR_IO,
1180	NFSERR_ISDIR,
1181	NFSERR_LEASEMOVED,
1182	NFSERR_LOCKED,
1183	NFSERR_MOVED,
1184	NFSERR_NOFILEHANDLE,
1185	NFSERR_NOSPC,
1186	NFSERR_NXIO,
1187	NFSERR_OLDSTATEID,
1188	NFSERR_OPENMODE,
1189	NFSERR_RESOURCE,
1190	NFSERR_ROFS,
1191	NFSERR_SERVERFAULT,
1192	NFSERR_STALE,
1193	NFSERR_STALESTATEID,
1194	0,
1195};
1196
1197static short nfsv4err_releaselockowner[] = {
1198	NFSERR_SERVERFAULT,
1199	NFSERR_ADMINREVOKED,
1200	NFSERR_BADXDR,
1201	NFSERR_EXPIRED,
1202	NFSERR_LEASEMOVED,
1203	NFSERR_LOCKSHELD,
1204	NFSERR_RESOURCE,
1205	NFSERR_SERVERFAULT,
1206	NFSERR_STALECLIENTID,
1207	0,
1208};
1209
1210static short *nfsrv_v4errmap[] = {
1211	nfsv4err_null,
1212	nfsv4err_null,
1213	nfsv4err_null,
1214	nfsv4err_access,
1215	nfsv4err_close,
1216	nfsv4err_commit,
1217	nfsv4err_create,
1218	nfsv4err_delegpurge,
1219	nfsv4err_delegreturn,
1220	nfsv4err_getattr,
1221	nfsv4err_getfh,
1222	nfsv4err_link,
1223	nfsv4err_lock,
1224	nfsv4err_lockt,
1225	nfsv4err_locku,
1226	nfsv4err_lookup,
1227	nfsv4err_lookupp,
1228	nfsv4err_nverify,
1229	nfsv4err_open,
1230	nfsv4err_openattr,
1231	nfsv4err_openconfirm,
1232	nfsv4err_opendowngrade,
1233	nfsv4err_putfh,
1234	nfsv4err_putpubfh,
1235	nfsv4err_putrootfh,
1236	nfsv4err_read,
1237	nfsv4err_readdir,
1238	nfsv4err_readlink,
1239	nfsv4err_remove,
1240	nfsv4err_rename,
1241	nfsv4err_renew,
1242	nfsv4err_restorefh,
1243	nfsv4err_savefh,
1244	nfsv4err_secinfo,
1245	nfsv4err_setattr,
1246	nfsv4err_setclientid,
1247	nfsv4err_setclientidconfirm,
1248	nfsv4err_verify,
1249	nfsv4err_write,
1250	nfsv4err_releaselockowner,
1251};
1252
1253/*
1254 * A fiddled version of m_adj() that ensures null fill to a long
1255 * boundary and only trims off the back end
1256 */
1257APPLESTATIC void
1258nfsrv_adj(mbuf_t mp, int len, int nul)
1259{
1260	mbuf_t m;
1261	int count, i;
1262	char *cp;
1263
1264	/*
1265	 * Trim from tail.  Scan the mbuf chain,
1266	 * calculating its length and finding the last mbuf.
1267	 * If the adjustment only affects this mbuf, then just
1268	 * adjust and return.  Otherwise, rescan and truncate
1269	 * after the remaining size.
1270	 */
1271	count = 0;
1272	m = mp;
1273	for (;;) {
1274		count += mbuf_len(m);
1275		if (mbuf_next(m) == NULL)
1276			break;
1277		m = mbuf_next(m);
1278	}
1279	if (mbuf_len(m) > len) {
1280		mbuf_setlen(m, mbuf_len(m) - len);
1281		if (nul > 0) {
1282			cp = NFSMTOD(m, caddr_t) + mbuf_len(m) - nul;
1283			for (i = 0; i < nul; i++)
1284				*cp++ = '\0';
1285		}
1286		return;
1287	}
1288	count -= len;
1289	if (count < 0)
1290		count = 0;
1291	/*
1292	 * Correct length for chain is "count".
1293	 * Find the mbuf with last data, adjust its length,
1294	 * and toss data from remaining mbufs on chain.
1295	 */
1296	for (m = mp; m; m = mbuf_next(m)) {
1297		if (mbuf_len(m) >= count) {
1298			mbuf_setlen(m, count);
1299			if (nul > 0) {
1300				cp = NFSMTOD(m, caddr_t) + mbuf_len(m) - nul;
1301				for (i = 0; i < nul; i++)
1302					*cp++ = '\0';
1303			}
1304			break;
1305		}
1306		count -= mbuf_len(m);
1307	}
1308	for (m = mbuf_next(m); m; m = mbuf_next(m))
1309		mbuf_setlen(m, 0);
1310}
1311
1312/*
1313 * Make these functions instead of macros, so that the kernel text size
1314 * doesn't get too big...
1315 */
1316APPLESTATIC void
1317nfsrv_wcc(struct nfsrv_descript *nd, int before_ret,
1318    struct nfsvattr *before_nvap, int after_ret, struct nfsvattr *after_nvap)
1319{
1320	u_int32_t *tl;
1321
1322	if (before_ret) {
1323		NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1324		*tl = newnfs_false;
1325	} else {
1326		NFSM_BUILD(tl, u_int32_t *, 7 * NFSX_UNSIGNED);
1327		*tl++ = newnfs_true;
1328		txdr_hyper(before_nvap->na_size, tl);
1329		tl += 2;
1330		txdr_nfsv3time(&(before_nvap->na_mtime), tl);
1331		tl += 2;
1332		txdr_nfsv3time(&(before_nvap->na_ctime), tl);
1333	}
1334	nfsrv_postopattr(nd, after_ret, after_nvap);
1335}
1336
1337APPLESTATIC void
1338nfsrv_postopattr(struct nfsrv_descript *nd, int after_ret,
1339    struct nfsvattr *after_nvap)
1340{
1341	u_int32_t *tl;
1342
1343	NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1344	if (after_ret)
1345		*tl = newnfs_false;
1346	else {
1347		*tl = newnfs_true;
1348		nfsrv_fillattr(nd, after_nvap);
1349	}
1350}
1351
1352/*
1353 * Fill in file attributes for V2 and 3. For V4, call a separate
1354 * routine that sifts through all the attribute bits.
1355 */
1356APPLESTATIC void
1357nfsrv_fillattr(struct nfsrv_descript *nd, struct nfsvattr *nvap)
1358{
1359	struct nfs_fattr *fp;
1360	int fattr_size;
1361
1362	/*
1363	 * Build space for the attribute structure.
1364	 */
1365	if (nd->nd_flag & ND_NFSV3)
1366		fattr_size = NFSX_V3FATTR;
1367	else
1368		fattr_size = NFSX_V2FATTR;
1369	NFSM_BUILD(fp, struct nfs_fattr *, fattr_size);
1370
1371	/*
1372	 * Now just fill it all in.
1373	 */
1374	fp->fa_nlink = txdr_unsigned(nvap->na_nlink);
1375	fp->fa_uid = txdr_unsigned(nvap->na_uid);
1376	fp->fa_gid = txdr_unsigned(nvap->na_gid);
1377	if (nd->nd_flag & ND_NFSV3) {
1378		fp->fa_type = vtonfsv34_type(nvap->na_type);
1379		fp->fa_mode = vtonfsv34_mode(nvap->na_mode);
1380		txdr_hyper(nvap->na_size, &fp->fa3_size);
1381		txdr_hyper(nvap->na_bytes, &fp->fa3_used);
1382		fp->fa3_rdev.specdata1 = txdr_unsigned(NFSMAJOR(nvap->na_rdev));
1383		fp->fa3_rdev.specdata2 = txdr_unsigned(NFSMINOR(nvap->na_rdev));
1384		fp->fa3_fsid.nfsuquad[0] = 0;
1385		fp->fa3_fsid.nfsuquad[1] = txdr_unsigned(nvap->na_fsid);
1386		fp->fa3_fileid.nfsuquad[0] = 0;
1387		fp->fa3_fileid.nfsuquad[1] = txdr_unsigned(nvap->na_fileid);
1388		txdr_nfsv3time(&nvap->na_atime, &fp->fa3_atime);
1389		txdr_nfsv3time(&nvap->na_mtime, &fp->fa3_mtime);
1390		txdr_nfsv3time(&nvap->na_ctime, &fp->fa3_ctime);
1391	} else {
1392		fp->fa_type = vtonfsv2_type(nvap->na_type);
1393		fp->fa_mode = vtonfsv2_mode(nvap->na_type, nvap->na_mode);
1394		fp->fa2_size = txdr_unsigned(nvap->na_size);
1395		fp->fa2_blocksize = txdr_unsigned(nvap->na_blocksize);
1396		if (nvap->na_type == VFIFO)
1397			fp->fa2_rdev = 0xffffffff;
1398		else
1399			fp->fa2_rdev = txdr_unsigned(nvap->na_rdev);
1400		fp->fa2_blocks = txdr_unsigned(nvap->na_bytes / NFS_FABLKSIZE);
1401		fp->fa2_fsid = txdr_unsigned(nvap->na_fsid);
1402		fp->fa2_fileid = txdr_unsigned(nvap->na_fileid);
1403		txdr_nfsv2time(&nvap->na_atime, &fp->fa2_atime);
1404		txdr_nfsv2time(&nvap->na_mtime, &fp->fa2_mtime);
1405		txdr_nfsv2time(&nvap->na_ctime, &fp->fa2_ctime);
1406	}
1407}
1408
1409/*
1410 * This function gets a file handle out of an mbuf list.
1411 * It returns 0 for success, EBADRPC otherwise.
1412 * If sets the third flagp argument to 1 if the file handle is
1413 * the public file handle.
1414 * For NFSv4, if the length is incorrect, set nd_repstat == NFSERR_BADHANDLE
1415 */
1416APPLESTATIC int
1417nfsrv_mtofh(struct nfsrv_descript *nd, struct nfsrvfh *fhp)
1418{
1419	u_int32_t *tl;
1420	int error = 0, len, copylen;
1421
1422	if (nd->nd_flag & (ND_NFSV3 | ND_NFSV4)) {
1423		NFSM_DISSECT(tl, u_int32_t *, NFSX_UNSIGNED);
1424		len = fxdr_unsigned(int, *tl);
1425		if (len == 0 && nfs_pubfhset && (nd->nd_flag & ND_NFSV3) &&
1426		    nd->nd_procnum == NFSPROC_LOOKUP) {
1427			nd->nd_flag |= ND_PUBLOOKUP;
1428			goto nfsmout;
1429		}
1430		if (len < NFSRV_MINFH || len > NFSRV_MAXFH) {
1431			if (nd->nd_flag & ND_NFSV4) {
1432			    if (len > 0 && len <= NFSX_V4FHMAX) {
1433				error = nfsm_advance(nd, NFSM_RNDUP(len), -1);
1434				if (error)
1435					goto nfsmout;
1436				nd->nd_repstat = NFSERR_BADHANDLE;
1437				goto nfsmout;
1438			    } else {
1439				    error = EBADRPC;
1440				    goto nfsmout;
1441			    }
1442			} else {
1443				error = EBADRPC;
1444				goto nfsmout;
1445			}
1446		}
1447		copylen = len;
1448	} else {
1449		/*
1450		 * For NFSv2, the file handle is always 32 bytes on the
1451		 * wire, but this server only cares about the first
1452		 * NFSRV_MAXFH bytes.
1453		 */
1454		len = NFSX_V2FH;
1455		copylen = NFSRV_MAXFH;
1456	}
1457	NFSM_DISSECT(tl, u_int32_t *, len);
1458	if ((nd->nd_flag & ND_NFSV2) && nfs_pubfhset &&
1459	    nd->nd_procnum == NFSPROC_LOOKUP &&
1460	    !NFSBCMP((caddr_t)tl, nfs_v2pubfh, NFSX_V2FH)) {
1461		nd->nd_flag |= ND_PUBLOOKUP;
1462		goto nfsmout;
1463	}
1464	NFSBCOPY(tl, (caddr_t)fhp->nfsrvfh_data, copylen);
1465	fhp->nfsrvfh_len = copylen;
1466nfsmout:
1467	NFSEXITCODE2(error, nd);
1468	return (error);
1469}
1470
1471/*
1472 * Map errnos to NFS error numbers. For Version 3 and 4 also filter out error
1473 * numbers not specified for the associated procedure.
1474 * NFSPROC_NOOP is a special case, where the high order bits of nd_repstat
1475 * should be cleared. NFSPROC_NOOP is used to return errors when a valid
1476 * RPC procedure is not involved.
1477 * Returns the error number in XDR.
1478 */
1479APPLESTATIC int
1480nfsd_errmap(struct nfsrv_descript *nd)
1481{
1482	short *defaulterrp, *errp;
1483
1484	if (!nd->nd_repstat)
1485		return (0);
1486	if (nd->nd_flag & (ND_NFSV3 | ND_NFSV4)) {
1487		if (nd->nd_procnum == NFSPROC_NOOP)
1488			return (txdr_unsigned(nd->nd_repstat & 0xffff));
1489		if (nd->nd_flag & ND_NFSV3)
1490		    errp = defaulterrp = nfsrv_v3errmap[nd->nd_procnum];
1491		else if (nd->nd_repstat == EBADRPC)
1492			return (txdr_unsigned(NFSERR_BADXDR));
1493		else if (nd->nd_repstat == NFSERR_MINORVERMISMATCH ||
1494			 nd->nd_repstat == NFSERR_OPILLEGAL)
1495			return (txdr_unsigned(nd->nd_repstat));
1496		else
1497		    errp = defaulterrp = nfsrv_v4errmap[nd->nd_procnum];
1498		while (*++errp)
1499			if (*errp == nd->nd_repstat)
1500				return (txdr_unsigned(nd->nd_repstat));
1501		return (txdr_unsigned(*defaulterrp));
1502	}
1503	if (nd->nd_repstat <= ELAST)
1504		return (txdr_unsigned(nfsrv_v2errmap[nd->nd_repstat - 1]));
1505	return (txdr_unsigned(NFSERR_IO));
1506}
1507
1508/*
1509 * Check to see if setting a uid/gid is permitted when creating a new
1510 * file object. (Called when uid and/or gid is specified in the
1511 * settable attributes for V4.
1512 */
1513APPLESTATIC int
1514nfsrv_checkuidgid(struct nfsrv_descript *nd, struct nfsvattr *nvap)
1515{
1516	int error = 0;
1517
1518	/*
1519	 * If not setting either uid nor gid, it's OK.
1520	 */
1521	if (NFSVNO_NOTSETUID(nvap) && NFSVNO_NOTSETGID(nvap))
1522		goto out;
1523	if ((NFSVNO_ISSETUID(nvap) && nvap->na_uid == nfsrv_defaultuid)
1524	    || (NFSVNO_ISSETGID(nvap) && nvap->na_gid == nfsrv_defaultgid)) {
1525		error = NFSERR_BADOWNER;
1526		goto out;
1527	}
1528	if (nd->nd_cred->cr_uid == 0)
1529		goto out;
1530	if ((NFSVNO_ISSETUID(nvap) && nvap->na_uid != nd->nd_cred->cr_uid) ||
1531	    (NFSVNO_ISSETGID(nvap) && nvap->na_gid != nd->nd_cred->cr_gid &&
1532	    !groupmember(nvap->na_gid, nd->nd_cred)))
1533		error = NFSERR_PERM;
1534
1535out:
1536	NFSEXITCODE2(error, nd);
1537	return (error);
1538}
1539
1540/*
1541 * and this routine fixes up the settable attributes for V4 if allowed
1542 * by nfsrv_checkuidgid().
1543 */
1544APPLESTATIC void
1545nfsrv_fixattr(struct nfsrv_descript *nd, vnode_t vp,
1546    struct nfsvattr *nvap, NFSACL_T *aclp, NFSPROC_T *p, nfsattrbit_t *attrbitp,
1547    struct nfsexstuff *exp)
1548{
1549	int change = 0;
1550	struct nfsvattr nva;
1551	uid_t tuid;
1552	int error;
1553	nfsattrbit_t nattrbits;
1554
1555	/*
1556	 * Maybe this should be done for V2 and 3 but it never has been
1557	 * and nobody seems to be upset, so I think it's best not to change
1558	 * the V2 and 3 semantics.
1559	 */
1560	if ((nd->nd_flag & ND_NFSV4) == 0)
1561		goto out;
1562	NFSVNO_ATTRINIT(&nva);
1563	NFSZERO_ATTRBIT(&nattrbits);
1564	tuid = nd->nd_cred->cr_uid;
1565	if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_OWNER) &&
1566	    NFSVNO_ISSETUID(nvap) &&
1567	    nvap->na_uid != nd->nd_cred->cr_uid) {
1568		if (nd->nd_cred->cr_uid == 0) {
1569			nva.na_uid = nvap->na_uid;
1570			change++;
1571			NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_OWNER);
1572		} else {
1573			NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_OWNER);
1574		}
1575	}
1576	if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_TIMEACCESSSET) &&
1577	    NFSVNO_ISSETATIME(nvap)) {
1578		nva.na_atime = nvap->na_atime;
1579		change++;
1580		NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_TIMEACCESSSET);
1581	}
1582	if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_TIMEMODIFYSET) &&
1583	    NFSVNO_ISSETMTIME(nvap)) {
1584		nva.na_mtime = nvap->na_mtime;
1585		change++;
1586		NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_TIMEMODIFYSET);
1587	}
1588	if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_OWNERGROUP) &&
1589	    NFSVNO_ISSETGID(nvap)) {
1590		if (nvap->na_gid == nd->nd_cred->cr_gid ||
1591		    groupmember(nvap->na_gid, nd->nd_cred)) {
1592			nd->nd_cred->cr_uid = 0;
1593			nva.na_gid = nvap->na_gid;
1594			change++;
1595			NFSSETBIT_ATTRBIT(&nattrbits, NFSATTRBIT_OWNERGROUP);
1596		} else {
1597			NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_OWNERGROUP);
1598		}
1599	}
1600	if (change) {
1601		error = nfsvno_setattr(vp, &nva, nd->nd_cred, p, exp);
1602		if (error) {
1603			NFSCLRALL_ATTRBIT(attrbitp, &nattrbits);
1604		}
1605	}
1606	if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_SIZE) &&
1607	    NFSVNO_ISSETSIZE(nvap) && nvap->na_size != (u_quad_t)0) {
1608		NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_SIZE);
1609	}
1610#ifdef NFS4_ACL_EXTATTR_NAME
1611	if (NFSISSET_ATTRBIT(attrbitp, NFSATTRBIT_ACL) &&
1612	    nfsrv_useacl != 0 && aclp != NULL) {
1613		if (aclp->acl_cnt > 0) {
1614			error = nfsrv_setacl(vp, aclp, nd->nd_cred, p);
1615			if (error) {
1616				NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_ACL);
1617			}
1618		}
1619	} else
1620#endif
1621	NFSCLRBIT_ATTRBIT(attrbitp, NFSATTRBIT_ACL);
1622	nd->nd_cred->cr_uid = tuid;
1623
1624out:
1625	NFSEXITCODE2(0, nd);
1626}
1627
1628/*
1629 * Translate an ASCII hex digit to it's binary value. Return -1 if the
1630 * char isn't a hex digit.
1631 */
1632static char
1633nfsrv_hexdigit(char c, int *err)
1634{
1635
1636	*err = 0;
1637	if (c >= '0' && c <= '9')
1638		return (c - '0');
1639	if (c >= 'a' && c <= 'f')
1640		return (c - 'a' + ((char)10));
1641	if (c >= 'A' && c <= 'F')
1642		return (c - 'A' + ((char)10));
1643	/* Not valid ! */
1644	*err = 1;
1645	return (1);	/* BOGUS */
1646}
1647
1648/*
1649 * Check to see if NFSERR_MOVED can be returned for this op. Return 1 iff
1650 * it can be.
1651 */
1652APPLESTATIC int
1653nfsrv_errmoved(int op)
1654{
1655	short *errp;
1656
1657	errp = nfsrv_v4errmap[op];
1658	while (*errp != 0) {
1659		if (*errp == NFSERR_MOVED)
1660			return (1);
1661		errp++;
1662	}
1663	return (0);
1664}
1665
1666/*
1667 * Fill in attributes for a Referral.
1668 * (Return the number of bytes of XDR created.)
1669 */
1670APPLESTATIC int
1671nfsrv_putreferralattr(struct nfsrv_descript *nd, nfsattrbit_t *retbitp,
1672    struct nfsreferral *refp, int getattr, int *reterrp)
1673{
1674	u_int32_t *tl, *retnump;
1675	u_char *cp, *cp2;
1676	int prefixnum, retnum = 0, i, len, bitpos, rderrbit = 0, nonrefbit = 0;
1677	int fslocationsbit = 0;
1678	nfsattrbit_t tmpbits, refbits;
1679
1680	NFSREFERRAL_ATTRBIT(&refbits);
1681	if (getattr)
1682		NFSCLRBIT_ATTRBIT(&refbits, NFSATTRBIT_RDATTRERROR);
1683	else if (NFSISSET_ATTRBIT(retbitp, NFSATTRBIT_RDATTRERROR))
1684		rderrbit = 1;
1685	if (NFSISSET_ATTRBIT(retbitp, NFSATTRBIT_FSLOCATIONS))
1686		fslocationsbit = 1;
1687
1688	/*
1689	 * Check for the case where unsupported referral attributes are
1690	 * requested.
1691	 */
1692	NFSSET_ATTRBIT(&tmpbits, retbitp);
1693	NFSCLRALL_ATTRBIT(&tmpbits, &refbits);
1694	if (NFSNONZERO_ATTRBIT(&tmpbits))
1695		nonrefbit = 1;
1696
1697	if (nonrefbit && !fslocationsbit && (getattr || !rderrbit)) {
1698		*reterrp = NFSERR_MOVED;
1699		return (0);
1700	}
1701
1702	/*
1703	 * Now we can fill in the attributes.
1704	 */
1705	NFSSET_ATTRBIT(&tmpbits, retbitp);
1706	NFSCLRNOT_ATTRBIT(&tmpbits, &refbits);
1707
1708	/*
1709	 * Put out the attribute bitmap for the ones being filled in
1710	 * and get the field for the number of attributes returned.
1711	 */
1712	prefixnum = nfsrv_putattrbit(nd, &tmpbits);
1713	NFSM_BUILD(retnump, u_int32_t *, NFSX_UNSIGNED);
1714	prefixnum += NFSX_UNSIGNED;
1715
1716	/*
1717	 * Now, loop around filling in the attributes for each bit set.
1718	 */
1719	for (bitpos = 0; bitpos < NFSATTRBIT_MAX; bitpos++) {
1720	    if (NFSISSET_ATTRBIT(&tmpbits, bitpos)) {
1721		switch (bitpos) {
1722		case NFSATTRBIT_TYPE:
1723			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1724			*tl = txdr_unsigned(NFDIR);
1725			retnum += NFSX_UNSIGNED;
1726			break;
1727		case NFSATTRBIT_FSID:
1728			NFSM_BUILD(tl, u_int32_t *, NFSX_V4FSID);
1729			*tl++ = 0;
1730			*tl++ = txdr_unsigned(NFSV4ROOT_FSID0);
1731			*tl++ = 0;
1732			*tl = txdr_unsigned(NFSV4ROOT_REFERRAL);
1733			retnum += NFSX_V4FSID;
1734			break;
1735		case NFSATTRBIT_RDATTRERROR:
1736			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1737			if (nonrefbit)
1738				*tl = txdr_unsigned(NFSERR_MOVED);
1739			else
1740				*tl = 0;
1741			retnum += NFSX_UNSIGNED;
1742			break;
1743		case NFSATTRBIT_FSLOCATIONS:
1744			retnum += nfsm_strtom(nd, "/", 1);
1745			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1746			*tl = txdr_unsigned(refp->nfr_srvcnt);
1747			retnum += NFSX_UNSIGNED;
1748			cp = refp->nfr_srvlist;
1749			for (i = 0; i < refp->nfr_srvcnt; i++) {
1750				NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
1751				*tl = txdr_unsigned(1);
1752				retnum += NFSX_UNSIGNED;
1753				cp2 = STRCHR(cp, ':');
1754				if (cp2 != NULL)
1755					len = cp2 - cp;
1756				else
1757					len = 1;
1758				retnum += nfsm_strtom(nd, cp, len);
1759				if (cp2 != NULL)
1760					cp = cp2 + 1;
1761				cp2 = STRCHR(cp, ',');
1762				if (cp2 != NULL)
1763					len = cp2 - cp;
1764				else
1765					len = strlen(cp);
1766				retnum += nfsm_strtom(nd, cp, len);
1767				if (cp2 != NULL)
1768					cp = cp2 + 1;
1769			}
1770			break;
1771		case NFSATTRBIT_MOUNTEDONFILEID:
1772			NFSM_BUILD(tl, u_int32_t *, NFSX_HYPER);
1773			*tl++ = 0;
1774			*tl = txdr_unsigned(refp->nfr_dfileno);
1775			retnum += NFSX_HYPER;
1776			break;
1777		default:
1778			printf("EEK! Bad V4 refattr bitpos=%d\n", bitpos);
1779		};
1780	    }
1781	}
1782	*retnump = txdr_unsigned(retnum);
1783	return (retnum + prefixnum);
1784}
1785
1786/*
1787 * Parse a file name out of a request.
1788 */
1789APPLESTATIC int
1790nfsrv_parsename(struct nfsrv_descript *nd, char *bufp, u_long *hashp,
1791    NFSPATHLEN_T *outlenp)
1792{
1793	char *fromcp, *tocp, val = '\0';
1794	mbuf_t md;
1795	int i;
1796	int rem, len, error = 0, pubtype = 0, outlen = 0, percent = 0;
1797	char digit;
1798	u_int32_t *tl;
1799	u_long hash = 0;
1800
1801	if (hashp != NULL)
1802		*hashp = 0;
1803	tocp = bufp;
1804	/*
1805	 * For V4, check for lookup parent.
1806	 * Otherwise, get the component name.
1807	 */
1808	if ((nd->nd_flag & ND_NFSV4) && nd->nd_procnum == NFSV4OP_LOOKUPP) {
1809	    *tocp++ = '.';
1810	    hash += ((u_char)'.');
1811	    *tocp++ = '.';
1812	    hash += ((u_char)'.');
1813	    outlen = 2;
1814	} else {
1815	    /*
1816	     * First, get the name length.
1817	     */
1818	    NFSM_DISSECT(tl, u_int32_t *, NFSX_UNSIGNED);
1819	    len = fxdr_unsigned(int, *tl);
1820	    if (len > NFS_MAXNAMLEN) {
1821		nd->nd_repstat = NFSERR_NAMETOL;
1822		error = 0;
1823		goto nfsmout;
1824	    } else if (len <= 0) {
1825		nd->nd_repstat = NFSERR_INVAL;
1826		error = 0;
1827		goto nfsmout;
1828	    }
1829
1830	    /*
1831	     * Now, copy the component name into the buffer.
1832	     */
1833	    fromcp = nd->nd_dpos;
1834	    md = nd->nd_md;
1835	    rem = NFSMTOD(md, caddr_t) + mbuf_len(md) - fromcp;
1836	    for (i = 0; i < len; i++) {
1837		while (rem == 0) {
1838			md = mbuf_next(md);
1839			if (md == NULL) {
1840				error = EBADRPC;
1841				goto nfsmout;
1842			}
1843			fromcp = NFSMTOD(md, caddr_t);
1844			rem = mbuf_len(md);
1845		}
1846		if (*fromcp == '\0') {
1847			nd->nd_repstat = EACCES;
1848			error = 0;
1849			goto nfsmout;
1850		}
1851		/*
1852		 * For lookups on the public filehandle, do some special
1853		 * processing on the name. (The public file handle is the
1854		 * root of the public file system for this server.)
1855		 */
1856		if (nd->nd_flag & ND_PUBLOOKUP) {
1857			/*
1858			 * If the first char is ASCII, it is a canonical
1859			 * path, otherwise it is a native path. (RFC2054
1860			 * doesn't actually state what it is if the first
1861			 * char isn't ASCII or 0x80, so I assume native.)
1862			 * pubtype == 1 -> native path
1863			 * pubtype == 2 -> canonical path
1864			 */
1865			if (i == 0) {
1866				if (*fromcp & 0x80) {
1867					/*
1868					 * Since RFC2054 doesn't indicate
1869					 * that a native path of just 0x80
1870					 * isn't allowed, I'll replace the
1871					 * 0x80 with '/' instead of just
1872					 * throwing it away.
1873					 */
1874					*fromcp = '/';
1875					pubtype = 1;
1876				} else {
1877					pubtype = 2;
1878				}
1879			}
1880			/*
1881			 * '/' only allowed in a native path
1882			 */
1883			if (*fromcp == '/' && pubtype != 1) {
1884				nd->nd_repstat = EACCES;
1885				error = 0;
1886				goto nfsmout;
1887			}
1888
1889			/*
1890			 * For the special case of 2 hex digits after a
1891			 * '%' in an absolute path, calculate the value.
1892			 * percent == 1 -> indicates "get first hex digit"
1893			 * percent == 2 -> indicates "get second hex digit"
1894			 */
1895			if (percent > 0) {
1896				digit = nfsrv_hexdigit(*fromcp, &error);
1897				if (error) {
1898					nd->nd_repstat = EACCES;
1899					error = 0;
1900					goto nfsmout;
1901				}
1902				if (percent == 1) {
1903					val = (digit << 4);
1904					percent = 2;
1905				} else {
1906					val += digit;
1907					percent = 0;
1908					*tocp++ = val;
1909					hash += ((u_char)val);
1910					outlen++;
1911				}
1912			} else {
1913				if (*fromcp == '%' && pubtype == 2) {
1914					/*
1915					 * Must be followed by 2 hex digits
1916					 */
1917					if ((len - i) < 3) {
1918						nd->nd_repstat = EACCES;
1919						error = 0;
1920						goto nfsmout;
1921					}
1922					percent = 1;
1923				} else {
1924					*tocp++ = *fromcp;
1925					hash += ((u_char)*fromcp);
1926					outlen++;
1927				}
1928			}
1929		} else {
1930			/*
1931			 * Normal, non lookup on public, name.
1932			 */
1933			if (*fromcp == '/') {
1934				if (nd->nd_flag & ND_NFSV4)
1935					nd->nd_repstat = NFSERR_BADNAME;
1936				else
1937					nd->nd_repstat = EACCES;
1938				error = 0;
1939				goto nfsmout;
1940			}
1941			hash += ((u_char)*fromcp);
1942			*tocp++ = *fromcp;
1943			outlen++;
1944		}
1945		fromcp++;
1946		rem--;
1947	    }
1948	    nd->nd_md = md;
1949	    nd->nd_dpos = fromcp;
1950	    i = NFSM_RNDUP(len) - len;
1951	    if (i > 0) {
1952		if (rem >= i) {
1953			nd->nd_dpos += i;
1954		} else {
1955			error = nfsm_advance(nd, i, rem);
1956			if (error)
1957				goto nfsmout;
1958		}
1959	    }
1960
1961	    /*
1962	     * For v4, don't allow lookups of '.' or '..' and
1963	     * also check for non-utf8 strings.
1964	     */
1965	    if (nd->nd_flag & ND_NFSV4) {
1966		if ((outlen == 1 && bufp[0] == '.') ||
1967		    (outlen == 2 && bufp[0] == '.' &&
1968		     bufp[1] == '.')) {
1969		    nd->nd_repstat = NFSERR_BADNAME;
1970		    error = 0;
1971		    goto nfsmout;
1972		}
1973		if (disable_checkutf8 == 0 &&
1974		    nfsrv_checkutf8((u_int8_t *)bufp, outlen)) {
1975		    nd->nd_repstat = NFSERR_INVAL;
1976		    error = 0;
1977		    goto nfsmout;
1978		}
1979	    }
1980	}
1981	*tocp = '\0';
1982	*outlenp = (size_t)outlen;
1983	if (hashp != NULL)
1984		*hashp = hash;
1985nfsmout:
1986	NFSEXITCODE2(error, nd);
1987	return (error);
1988}
1989
1990void
1991nfsd_init(void)
1992{
1993	int i;
1994	static int inited = 0;
1995
1996	if (inited)
1997		return;
1998	inited = 1;
1999
2000	/*
2001	 * Initialize client queues. Don't free/reinitialize
2002	 * them when nfsds are restarted.
2003	 */
2004	for (i = 0; i < NFSCLIENTHASHSIZE; i++)
2005		LIST_INIT(&nfsclienthash[i]);
2006	for (i = 0; i < NFSLOCKHASHSIZE; i++)
2007		LIST_INIT(&nfslockhash[i]);
2008
2009	/* and the v2 pubfh should be all zeros */
2010	NFSBZERO(nfs_v2pubfh, NFSX_V2FH);
2011}
2012
2013/*
2014 * Check the v4 root exports.
2015 * Return 0 if ok, 1 otherwise.
2016 */
2017int
2018nfsd_checkrootexp(struct nfsrv_descript *nd)
2019{
2020
2021	if ((nd->nd_flag & (ND_GSS | ND_EXAUTHSYS)) == ND_EXAUTHSYS)
2022		return (0);
2023	if ((nd->nd_flag & (ND_GSSINTEGRITY | ND_EXGSSINTEGRITY)) ==
2024	    (ND_GSSINTEGRITY | ND_EXGSSINTEGRITY))
2025		return (0);
2026	if ((nd->nd_flag & (ND_GSSPRIVACY | ND_EXGSSPRIVACY)) ==
2027	    (ND_GSSPRIVACY | ND_EXGSSPRIVACY))
2028		return (0);
2029	if ((nd->nd_flag & (ND_GSS | ND_GSSINTEGRITY | ND_GSSPRIVACY |
2030	     ND_EXGSS)) == (ND_GSS | ND_EXGSS))
2031		return (0);
2032	return (1);
2033}
2034
2035