nfs_srvsubs.c revision 13416
1/*
2 * Copyright (c) 1989, 1993
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * This code is derived from software contributed to Berkeley by
6 * Rick Macklem at The University of Guelph.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 *    notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 * 3. All advertising materials mentioning features or use of this software
17 *    must display the following acknowledgement:
18 *	This product includes software developed by the University of
19 *	California, Berkeley and its contributors.
20 * 4. Neither the name of the University nor the names of its contributors
21 *    may be used to endorse or promote products derived from this software
22 *    without specific prior written permission.
23 *
24 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
25 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
28 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 * SUCH DAMAGE.
35 *
36 *	@(#)nfs_subs.c	8.3 (Berkeley) 1/4/94
37 * $Id: nfs_subs.c,v 1.26 1995/12/17 21:12:30 phk Exp $
38 */
39
40/*
41 * These functions support the macros and help fiddle mbuf chains for
42 * the nfs op functions. They do things like create the rpc header and
43 * copy data between mbuf chains and uio lists.
44 */
45#include <sys/param.h>
46#include <sys/proc.h>
47#include <sys/systm.h>
48#include <sys/kernel.h>
49#include <sys/mount.h>
50#include <sys/vnode.h>
51#include <sys/namei.h>
52#include <sys/mbuf.h>
53#include <sys/socket.h>
54#include <sys/stat.h>
55#include <sys/malloc.h>
56#ifdef VFS_LKM
57#include <sys/sysent.h>
58#include <sys/syscall.h>
59#endif
60
61#include <vm/vm.h>
62#include <vm/vm_param.h>
63#include <vm/vm_object.h>
64#include <vm/vm_extern.h>
65#include <vm/vnode_pager.h>
66
67#include <nfs/rpcv2.h>
68#include <nfs/nfsproto.h>
69#include <nfs/nfsnode.h>
70#include <nfs/nfs.h>
71#include <nfs/xdr_subs.h>
72#include <nfs/nfsm_subs.h>
73#include <nfs/nfsmount.h>
74#include <nfs/nqnfs.h>
75#include <nfs/nfsrtt.h>
76
77#include <miscfs/specfs/specdev.h>
78
79#include <netinet/in.h>
80#ifdef ISO
81#include <netiso/iso.h>
82#endif
83
84/*
85 * Data items converted to xdr at startup, since they are constant
86 * This is kinda hokey, but may save a little time doing byte swaps
87 */
88u_long nfs_xdrneg1;
89u_long rpc_call, rpc_vers, rpc_reply, rpc_msgdenied, rpc_autherr,
90	rpc_mismatch, rpc_auth_unix, rpc_msgaccepted,
91	rpc_auth_kerb;
92u_long nfs_prog, nqnfs_prog, nfs_true, nfs_false;
93
94/* And other global data */
95static u_long nfs_xid = 0;
96static enum vtype nv2tov_type[8]= {
97	VNON, VREG, VDIR, VBLK, VCHR, VLNK, VNON,  VNON
98};
99enum vtype nv3tov_type[8]= {
100	VNON, VREG, VDIR, VBLK, VCHR, VLNK, VSOCK, VFIFO
101};
102
103int nfs_ticks;
104
105struct nfs_reqq nfs_reqq;
106struct nfssvc_sockhead nfssvc_sockhead;
107int nfssvc_sockhead_flag;
108struct nfsd_head nfsd_head;
109int nfsd_head_flag;
110struct nfs_bufq nfs_bufq;
111struct nqtimerhead nqtimerhead;
112struct nqfhhashhead *nqfhhashtbl;
113u_long nqfhhash;
114
115#ifndef NFS_NOSERVER
116/*
117 * Mapping of old NFS Version 2 RPC numbers to generic numbers.
118 */
119int nfsv3_procid[NFS_NPROCS] = {
120	NFSPROC_NULL,
121	NFSPROC_GETATTR,
122	NFSPROC_SETATTR,
123	NFSPROC_NOOP,
124	NFSPROC_LOOKUP,
125	NFSPROC_READLINK,
126	NFSPROC_READ,
127	NFSPROC_NOOP,
128	NFSPROC_WRITE,
129	NFSPROC_CREATE,
130	NFSPROC_REMOVE,
131	NFSPROC_RENAME,
132	NFSPROC_LINK,
133	NFSPROC_SYMLINK,
134	NFSPROC_MKDIR,
135	NFSPROC_RMDIR,
136	NFSPROC_READDIR,
137	NFSPROC_FSSTAT,
138	NFSPROC_NOOP,
139	NFSPROC_NOOP,
140	NFSPROC_NOOP,
141	NFSPROC_NOOP,
142	NFSPROC_NOOP,
143	NFSPROC_NOOP,
144	NFSPROC_NOOP,
145	NFSPROC_NOOP
146};
147
148#endif /* NFS_NOSERVER */
149/*
150 * and the reverse mapping from generic to Version 2 procedure numbers
151 */
152int nfsv2_procid[NFS_NPROCS] = {
153	NFSV2PROC_NULL,
154	NFSV2PROC_GETATTR,
155	NFSV2PROC_SETATTR,
156	NFSV2PROC_LOOKUP,
157	NFSV2PROC_NOOP,
158	NFSV2PROC_READLINK,
159	NFSV2PROC_READ,
160	NFSV2PROC_WRITE,
161	NFSV2PROC_CREATE,
162	NFSV2PROC_MKDIR,
163	NFSV2PROC_SYMLINK,
164	NFSV2PROC_CREATE,
165	NFSV2PROC_REMOVE,
166	NFSV2PROC_RMDIR,
167	NFSV2PROC_RENAME,
168	NFSV2PROC_LINK,
169	NFSV2PROC_READDIR,
170	NFSV2PROC_NOOP,
171	NFSV2PROC_STATFS,
172	NFSV2PROC_NOOP,
173	NFSV2PROC_NOOP,
174	NFSV2PROC_NOOP,
175	NFSV2PROC_NOOP,
176	NFSV2PROC_NOOP,
177	NFSV2PROC_NOOP,
178	NFSV2PROC_NOOP,
179};
180
181#ifndef NFS_NOSERVER
182/*
183 * Maps errno values to nfs error numbers.
184 * Use NFSERR_IO as the catch all for ones not specifically defined in
185 * RFC 1094.
186 */
187static u_char nfsrv_v2errmap[ELAST] = {
188  NFSERR_PERM,	NFSERR_NOENT,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
189  NFSERR_NXIO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
190  NFSERR_IO,	NFSERR_IO,	NFSERR_ACCES,	NFSERR_IO,	NFSERR_IO,
191  NFSERR_IO,	NFSERR_EXIST,	NFSERR_IO,	NFSERR_NODEV,	NFSERR_NOTDIR,
192  NFSERR_ISDIR,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
193  NFSERR_IO,	NFSERR_FBIG,	NFSERR_NOSPC,	NFSERR_IO,	NFSERR_ROFS,
194  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
195  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
196  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
197  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
198  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
199  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
200  NFSERR_IO,	NFSERR_IO,	NFSERR_NAMETOL,	NFSERR_IO,	NFSERR_IO,
201  NFSERR_NOTEMPTY, NFSERR_IO,	NFSERR_IO,	NFSERR_DQUOT,	NFSERR_STALE,
202  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
203  NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,	NFSERR_IO,
204  NFSERR_IO,
205};
206
207/*
208 * Maps errno values to nfs error numbers.
209 * Although it is not obvious whether or not NFS clients really care if
210 * a returned error value is in the specified list for the procedure, the
211 * safest thing to do is filter them appropriately. For Version 2, the
212 * X/Open XNFS document is the only specification that defines error values
213 * for each RPC (The RFC simply lists all possible error values for all RPCs),
214 * so I have decided to not do this for Version 2.
215 * The first entry is the default error return and the rest are the valid
216 * errors for that RPC in increasing numeric order.
217 */
218static short nfsv3err_null[] = {
219	0,
220	0,
221};
222
223static short nfsv3err_getattr[] = {
224	NFSERR_IO,
225	NFSERR_IO,
226	NFSERR_STALE,
227	NFSERR_BADHANDLE,
228	NFSERR_SERVERFAULT,
229	0,
230};
231
232static short nfsv3err_setattr[] = {
233	NFSERR_IO,
234	NFSERR_PERM,
235	NFSERR_IO,
236	NFSERR_ACCES,
237	NFSERR_INVAL,
238	NFSERR_NOSPC,
239	NFSERR_ROFS,
240	NFSERR_DQUOT,
241	NFSERR_STALE,
242	NFSERR_BADHANDLE,
243	NFSERR_NOT_SYNC,
244	NFSERR_SERVERFAULT,
245	0,
246};
247
248static short nfsv3err_lookup[] = {
249	NFSERR_IO,
250	NFSERR_NOENT,
251	NFSERR_IO,
252	NFSERR_ACCES,
253	NFSERR_NOTDIR,
254	NFSERR_NAMETOL,
255	NFSERR_STALE,
256	NFSERR_BADHANDLE,
257	NFSERR_SERVERFAULT,
258	0,
259};
260
261static short nfsv3err_access[] = {
262	NFSERR_IO,
263	NFSERR_IO,
264	NFSERR_STALE,
265	NFSERR_BADHANDLE,
266	NFSERR_SERVERFAULT,
267	0,
268};
269
270static short nfsv3err_readlink[] = {
271	NFSERR_IO,
272	NFSERR_IO,
273	NFSERR_ACCES,
274	NFSERR_INVAL,
275	NFSERR_STALE,
276	NFSERR_BADHANDLE,
277	NFSERR_NOTSUPP,
278	NFSERR_SERVERFAULT,
279	0,
280};
281
282static short nfsv3err_read[] = {
283	NFSERR_IO,
284	NFSERR_IO,
285	NFSERR_NXIO,
286	NFSERR_ACCES,
287	NFSERR_INVAL,
288	NFSERR_STALE,
289	NFSERR_BADHANDLE,
290	NFSERR_SERVERFAULT,
291	0,
292};
293
294static short nfsv3err_write[] = {
295	NFSERR_IO,
296	NFSERR_IO,
297	NFSERR_ACCES,
298	NFSERR_INVAL,
299	NFSERR_FBIG,
300	NFSERR_NOSPC,
301	NFSERR_ROFS,
302	NFSERR_DQUOT,
303	NFSERR_STALE,
304	NFSERR_BADHANDLE,
305	NFSERR_SERVERFAULT,
306	0,
307};
308
309static short nfsv3err_create[] = {
310	NFSERR_IO,
311	NFSERR_IO,
312	NFSERR_ACCES,
313	NFSERR_EXIST,
314	NFSERR_NOTDIR,
315	NFSERR_NOSPC,
316	NFSERR_ROFS,
317	NFSERR_NAMETOL,
318	NFSERR_DQUOT,
319	NFSERR_STALE,
320	NFSERR_BADHANDLE,
321	NFSERR_NOTSUPP,
322	NFSERR_SERVERFAULT,
323	0,
324};
325
326static short nfsv3err_mkdir[] = {
327	NFSERR_IO,
328	NFSERR_IO,
329	NFSERR_ACCES,
330	NFSERR_EXIST,
331	NFSERR_NOTDIR,
332	NFSERR_NOSPC,
333	NFSERR_ROFS,
334	NFSERR_NAMETOL,
335	NFSERR_DQUOT,
336	NFSERR_STALE,
337	NFSERR_BADHANDLE,
338	NFSERR_NOTSUPP,
339	NFSERR_SERVERFAULT,
340	0,
341};
342
343static short nfsv3err_symlink[] = {
344	NFSERR_IO,
345	NFSERR_IO,
346	NFSERR_ACCES,
347	NFSERR_EXIST,
348	NFSERR_NOTDIR,
349	NFSERR_NOSPC,
350	NFSERR_ROFS,
351	NFSERR_NAMETOL,
352	NFSERR_DQUOT,
353	NFSERR_STALE,
354	NFSERR_BADHANDLE,
355	NFSERR_NOTSUPP,
356	NFSERR_SERVERFAULT,
357	0,
358};
359
360static short nfsv3err_mknod[] = {
361	NFSERR_IO,
362	NFSERR_IO,
363	NFSERR_ACCES,
364	NFSERR_EXIST,
365	NFSERR_NOTDIR,
366	NFSERR_NOSPC,
367	NFSERR_ROFS,
368	NFSERR_NAMETOL,
369	NFSERR_DQUOT,
370	NFSERR_STALE,
371	NFSERR_BADHANDLE,
372	NFSERR_NOTSUPP,
373	NFSERR_SERVERFAULT,
374	NFSERR_BADTYPE,
375	0,
376};
377
378static short nfsv3err_remove[] = {
379	NFSERR_IO,
380	NFSERR_NOENT,
381	NFSERR_IO,
382	NFSERR_ACCES,
383	NFSERR_NOTDIR,
384	NFSERR_ROFS,
385	NFSERR_NAMETOL,
386	NFSERR_STALE,
387	NFSERR_BADHANDLE,
388	NFSERR_SERVERFAULT,
389	0,
390};
391
392static short nfsv3err_rmdir[] = {
393	NFSERR_IO,
394	NFSERR_NOENT,
395	NFSERR_IO,
396	NFSERR_ACCES,
397	NFSERR_EXIST,
398	NFSERR_NOTDIR,
399	NFSERR_INVAL,
400	NFSERR_ROFS,
401	NFSERR_NAMETOL,
402	NFSERR_NOTEMPTY,
403	NFSERR_STALE,
404	NFSERR_BADHANDLE,
405	NFSERR_NOTSUPP,
406	NFSERR_SERVERFAULT,
407	0,
408};
409
410static short nfsv3err_rename[] = {
411	NFSERR_IO,
412	NFSERR_NOENT,
413	NFSERR_IO,
414	NFSERR_ACCES,
415	NFSERR_EXIST,
416	NFSERR_XDEV,
417	NFSERR_NOTDIR,
418	NFSERR_ISDIR,
419	NFSERR_INVAL,
420	NFSERR_NOSPC,
421	NFSERR_ROFS,
422	NFSERR_MLINK,
423	NFSERR_NAMETOL,
424	NFSERR_NOTEMPTY,
425	NFSERR_DQUOT,
426	NFSERR_STALE,
427	NFSERR_BADHANDLE,
428	NFSERR_NOTSUPP,
429	NFSERR_SERVERFAULT,
430	0,
431};
432
433static short nfsv3err_link[] = {
434	NFSERR_IO,
435	NFSERR_IO,
436	NFSERR_ACCES,
437	NFSERR_EXIST,
438	NFSERR_XDEV,
439	NFSERR_NOTDIR,
440	NFSERR_INVAL,
441	NFSERR_NOSPC,
442	NFSERR_ROFS,
443	NFSERR_MLINK,
444	NFSERR_NAMETOL,
445	NFSERR_DQUOT,
446	NFSERR_STALE,
447	NFSERR_BADHANDLE,
448	NFSERR_NOTSUPP,
449	NFSERR_SERVERFAULT,
450	0,
451};
452
453static short nfsv3err_readdir[] = {
454	NFSERR_IO,
455	NFSERR_IO,
456	NFSERR_ACCES,
457	NFSERR_NOTDIR,
458	NFSERR_STALE,
459	NFSERR_BADHANDLE,
460	NFSERR_BAD_COOKIE,
461	NFSERR_TOOSMALL,
462	NFSERR_SERVERFAULT,
463	0,
464};
465
466static short nfsv3err_readdirplus[] = {
467	NFSERR_IO,
468	NFSERR_IO,
469	NFSERR_ACCES,
470	NFSERR_NOTDIR,
471	NFSERR_STALE,
472	NFSERR_BADHANDLE,
473	NFSERR_BAD_COOKIE,
474	NFSERR_NOTSUPP,
475	NFSERR_TOOSMALL,
476	NFSERR_SERVERFAULT,
477	0,
478};
479
480static short nfsv3err_fsstat[] = {
481	NFSERR_IO,
482	NFSERR_IO,
483	NFSERR_STALE,
484	NFSERR_BADHANDLE,
485	NFSERR_SERVERFAULT,
486	0,
487};
488
489static short nfsv3err_fsinfo[] = {
490	NFSERR_STALE,
491	NFSERR_STALE,
492	NFSERR_BADHANDLE,
493	NFSERR_SERVERFAULT,
494	0,
495};
496
497static short nfsv3err_pathconf[] = {
498	NFSERR_STALE,
499	NFSERR_STALE,
500	NFSERR_BADHANDLE,
501	NFSERR_SERVERFAULT,
502	0,
503};
504
505static short nfsv3err_commit[] = {
506	NFSERR_IO,
507	NFSERR_IO,
508	NFSERR_STALE,
509	NFSERR_BADHANDLE,
510	NFSERR_SERVERFAULT,
511	0,
512};
513
514static short *nfsrv_v3errmap[] = {
515	nfsv3err_null,
516	nfsv3err_getattr,
517	nfsv3err_setattr,
518	nfsv3err_lookup,
519	nfsv3err_access,
520	nfsv3err_readlink,
521	nfsv3err_read,
522	nfsv3err_write,
523	nfsv3err_create,
524	nfsv3err_mkdir,
525	nfsv3err_symlink,
526	nfsv3err_mknod,
527	nfsv3err_remove,
528	nfsv3err_rmdir,
529	nfsv3err_rename,
530	nfsv3err_link,
531	nfsv3err_readdir,
532	nfsv3err_readdirplus,
533	nfsv3err_fsstat,
534	nfsv3err_fsinfo,
535	nfsv3err_pathconf,
536	nfsv3err_commit,
537};
538
539#endif /* NFS_NOSERVER */
540
541extern struct proc *nfs_iodwant[NFS_MAXASYNCDAEMON];
542extern struct nfsrtt nfsrtt;
543extern time_t nqnfsstarttime;
544extern int nqsrv_clockskew;
545extern int nqsrv_writeslack;
546extern int nqsrv_maxlease;
547extern struct nfsstats nfsstats;
548extern int nqnfs_piggy[NFS_NPROCS];
549extern nfstype nfsv2_type[9];
550extern nfstype nfsv3_type[9];
551extern struct nfsnodehashhead *nfsnodehashtbl;
552extern u_long nfsnodehash;
553
554#ifdef VFS_LKM
555struct getfh_args;
556extern int getfh(struct proc *, struct getfh_args *, int *);
557struct nfssvc_args;
558extern int nfssvc(struct proc *, struct nfssvc_args *, int *);
559#endif
560
561LIST_HEAD(nfsnodehashhead, nfsnode);
562
563/*
564 * Create the header for an rpc request packet
565 * The hsiz is the size of the rest of the nfs request header.
566 * (just used to decide if a cluster is a good idea)
567 */
568struct mbuf *
569nfsm_reqh(vp, procid, hsiz, bposp)
570	struct vnode *vp;
571	u_long procid;
572	int hsiz;
573	caddr_t *bposp;
574{
575	register struct mbuf *mb;
576	register u_long *tl;
577	register caddr_t bpos;
578	struct mbuf *mb2;
579	struct nfsmount *nmp;
580	int nqflag;
581
582	MGET(mb, M_WAIT, MT_DATA);
583	if (hsiz >= MINCLSIZE)
584		MCLGET(mb, M_WAIT);
585	mb->m_len = 0;
586	bpos = mtod(mb, caddr_t);
587
588	/*
589	 * For NQNFS, add lease request.
590	 */
591	if (vp) {
592		nmp = VFSTONFS(vp->v_mount);
593		if (nmp->nm_flag & NFSMNT_NQNFS) {
594			nqflag = NQNFS_NEEDLEASE(vp, procid);
595			if (nqflag) {
596				nfsm_build(tl, u_long *, 2*NFSX_UNSIGNED);
597				*tl++ = txdr_unsigned(nqflag);
598				*tl = txdr_unsigned(nmp->nm_leaseterm);
599			} else {
600				nfsm_build(tl, u_long *, NFSX_UNSIGNED);
601				*tl = 0;
602			}
603		}
604	}
605	/* Finally, return values */
606	*bposp = bpos;
607	return (mb);
608}
609
610/*
611 * Build the RPC header and fill in the authorization info.
612 * The authorization string argument is only used when the credentials
613 * come from outside of the kernel.
614 * Returns the head of the mbuf list.
615 */
616struct mbuf *
617nfsm_rpchead(cr, nmflag, procid, auth_type, auth_len, auth_str, verf_len,
618	verf_str, mrest, mrest_len, mbp, xidp)
619	register struct ucred *cr;
620	int nmflag;
621	int procid;
622	int auth_type;
623	int auth_len;
624	char *auth_str;
625	int verf_len;
626	char *verf_str;
627	struct mbuf *mrest;
628	int mrest_len;
629	struct mbuf **mbp;
630	u_long *xidp;
631{
632	register struct mbuf *mb;
633	register u_long *tl;
634	register caddr_t bpos;
635	register int i;
636	struct mbuf *mreq, *mb2;
637	int siz, grpsiz, authsiz;
638
639	authsiz = nfsm_rndup(auth_len);
640	MGETHDR(mb, M_WAIT, MT_DATA);
641	if ((authsiz + 10 * NFSX_UNSIGNED) >= MINCLSIZE) {
642		MCLGET(mb, M_WAIT);
643	} else if ((authsiz + 10 * NFSX_UNSIGNED) < MHLEN) {
644		MH_ALIGN(mb, authsiz + 10 * NFSX_UNSIGNED);
645	} else {
646		MH_ALIGN(mb, 8 * NFSX_UNSIGNED);
647	}
648	mb->m_len = 0;
649	mreq = mb;
650	bpos = mtod(mb, caddr_t);
651
652	/*
653	 * First the RPC header.
654	 */
655	nfsm_build(tl, u_long *, 8 * NFSX_UNSIGNED);
656	if (++nfs_xid == 0)
657		nfs_xid++;
658	*tl++ = *xidp = txdr_unsigned(nfs_xid);
659	*tl++ = rpc_call;
660	*tl++ = rpc_vers;
661	if (nmflag & NFSMNT_NQNFS) {
662		*tl++ = txdr_unsigned(NQNFS_PROG);
663		*tl++ = txdr_unsigned(NQNFS_VER3);
664	} else {
665		*tl++ = txdr_unsigned(NFS_PROG);
666		if (nmflag & NFSMNT_NFSV3)
667			*tl++ = txdr_unsigned(NFS_VER3);
668		else
669			*tl++ = txdr_unsigned(NFS_VER2);
670	}
671	if (nmflag & NFSMNT_NFSV3)
672		*tl++ = txdr_unsigned(procid);
673	else
674		*tl++ = txdr_unsigned(nfsv2_procid[procid]);
675
676	/*
677	 * And then the authorization cred.
678	 */
679	*tl++ = txdr_unsigned(auth_type);
680	*tl = txdr_unsigned(authsiz);
681	switch (auth_type) {
682	case RPCAUTH_UNIX:
683		nfsm_build(tl, u_long *, auth_len);
684		*tl++ = 0;		/* stamp ?? */
685		*tl++ = 0;		/* NULL hostname */
686		*tl++ = txdr_unsigned(cr->cr_uid);
687		*tl++ = txdr_unsigned(cr->cr_groups[0]);
688		grpsiz = (auth_len >> 2) - 5;
689		*tl++ = txdr_unsigned(grpsiz);
690		for (i = 1; i <= grpsiz; i++)
691			*tl++ = txdr_unsigned(cr->cr_groups[i]);
692		break;
693	case RPCAUTH_KERB4:
694		siz = auth_len;
695		while (siz > 0) {
696			if (M_TRAILINGSPACE(mb) == 0) {
697				MGET(mb2, M_WAIT, MT_DATA);
698				if (siz >= MINCLSIZE)
699					MCLGET(mb2, M_WAIT);
700				mb->m_next = mb2;
701				mb = mb2;
702				mb->m_len = 0;
703				bpos = mtod(mb, caddr_t);
704			}
705			i = min(siz, M_TRAILINGSPACE(mb));
706			bcopy(auth_str, bpos, i);
707			mb->m_len += i;
708			auth_str += i;
709			bpos += i;
710			siz -= i;
711		}
712		if ((siz = (nfsm_rndup(auth_len) - auth_len)) > 0) {
713			for (i = 0; i < siz; i++)
714				*bpos++ = '\0';
715			mb->m_len += siz;
716		}
717		break;
718	};
719
720	/*
721	 * And the verifier...
722	 */
723	nfsm_build(tl, u_long *, 2 * NFSX_UNSIGNED);
724	if (verf_str) {
725		*tl++ = txdr_unsigned(RPCAUTH_KERB4);
726		*tl = txdr_unsigned(verf_len);
727		siz = verf_len;
728		while (siz > 0) {
729			if (M_TRAILINGSPACE(mb) == 0) {
730				MGET(mb2, M_WAIT, MT_DATA);
731				if (siz >= MINCLSIZE)
732					MCLGET(mb2, M_WAIT);
733				mb->m_next = mb2;
734				mb = mb2;
735				mb->m_len = 0;
736				bpos = mtod(mb, caddr_t);
737			}
738			i = min(siz, M_TRAILINGSPACE(mb));
739			bcopy(verf_str, bpos, i);
740			mb->m_len += i;
741			verf_str += i;
742			bpos += i;
743			siz -= i;
744		}
745		if ((siz = (nfsm_rndup(verf_len) - verf_len)) > 0) {
746			for (i = 0; i < siz; i++)
747				*bpos++ = '\0';
748			mb->m_len += siz;
749		}
750	} else {
751		*tl++ = txdr_unsigned(RPCAUTH_NULL);
752		*tl = 0;
753	}
754	mb->m_next = mrest;
755	mreq->m_pkthdr.len = authsiz + 10 * NFSX_UNSIGNED + mrest_len;
756	mreq->m_pkthdr.rcvif = (struct ifnet *)0;
757	*mbp = mb;
758	return (mreq);
759}
760
761/*
762 * copies mbuf chain to the uio scatter/gather list
763 */
764int
765nfsm_mbuftouio(mrep, uiop, siz, dpos)
766	struct mbuf **mrep;
767	register struct uio *uiop;
768	int siz;
769	caddr_t *dpos;
770{
771	register char *mbufcp, *uiocp;
772	register int xfer, left, len;
773	register struct mbuf *mp;
774	long uiosiz, rem;
775	int error = 0;
776
777	mp = *mrep;
778	mbufcp = *dpos;
779	len = mtod(mp, caddr_t)+mp->m_len-mbufcp;
780	rem = nfsm_rndup(siz)-siz;
781	while (siz > 0) {
782		if (uiop->uio_iovcnt <= 0 || uiop->uio_iov == NULL)
783			return (EFBIG);
784		left = uiop->uio_iov->iov_len;
785		uiocp = uiop->uio_iov->iov_base;
786		if (left > siz)
787			left = siz;
788		uiosiz = left;
789		while (left > 0) {
790			while (len == 0) {
791				mp = mp->m_next;
792				if (mp == NULL)
793					return (EBADRPC);
794				mbufcp = mtod(mp, caddr_t);
795				len = mp->m_len;
796			}
797			xfer = (left > len) ? len : left;
798#ifdef notdef
799			/* Not Yet.. */
800			if (uiop->uio_iov->iov_op != NULL)
801				(*(uiop->uio_iov->iov_op))
802				(mbufcp, uiocp, xfer);
803			else
804#endif
805			if (uiop->uio_segflg == UIO_SYSSPACE)
806				bcopy(mbufcp, uiocp, xfer);
807			else
808				copyout(mbufcp, uiocp, xfer);
809			left -= xfer;
810			len -= xfer;
811			mbufcp += xfer;
812			uiocp += xfer;
813			uiop->uio_offset += xfer;
814			uiop->uio_resid -= xfer;
815		}
816		if (uiop->uio_iov->iov_len <= siz) {
817			uiop->uio_iovcnt--;
818			uiop->uio_iov++;
819		} else {
820			uiop->uio_iov->iov_base += uiosiz;
821			uiop->uio_iov->iov_len -= uiosiz;
822		}
823		siz -= uiosiz;
824	}
825	*dpos = mbufcp;
826	*mrep = mp;
827	if (rem > 0) {
828		if (len < rem)
829			error = nfs_adv(mrep, dpos, rem, len);
830		else
831			*dpos += rem;
832	}
833	return (error);
834}
835
836/*
837 * copies a uio scatter/gather list to an mbuf chain...
838 */
839int
840nfsm_uiotombuf(uiop, mq, siz, bpos)
841	register struct uio *uiop;
842	struct mbuf **mq;
843	int siz;
844	caddr_t *bpos;
845{
846	register char *uiocp;
847	register struct mbuf *mp, *mp2;
848	register int xfer, left, mlen;
849	int uiosiz, clflg, rem;
850	char *cp;
851
852	if (siz > MLEN)		/* or should it >= MCLBYTES ?? */
853		clflg = 1;
854	else
855		clflg = 0;
856	rem = nfsm_rndup(siz)-siz;
857	mp = mp2 = *mq;
858	while (siz > 0) {
859		if (uiop->uio_iovcnt <= 0 || uiop->uio_iov == NULL)
860			return (EINVAL);
861		left = uiop->uio_iov->iov_len;
862		uiocp = uiop->uio_iov->iov_base;
863		if (left > siz)
864			left = siz;
865		uiosiz = left;
866		while (left > 0) {
867			mlen = M_TRAILINGSPACE(mp);
868			if (mlen == 0) {
869				MGET(mp, M_WAIT, MT_DATA);
870				if (clflg)
871					MCLGET(mp, M_WAIT);
872				mp->m_len = 0;
873				mp2->m_next = mp;
874				mp2 = mp;
875				mlen = M_TRAILINGSPACE(mp);
876			}
877			xfer = (left > mlen) ? mlen : left;
878#ifdef notdef
879			/* Not Yet.. */
880			if (uiop->uio_iov->iov_op != NULL)
881				(*(uiop->uio_iov->iov_op))
882				(uiocp, mtod(mp, caddr_t)+mp->m_len, xfer);
883			else
884#endif
885			if (uiop->uio_segflg == UIO_SYSSPACE)
886				bcopy(uiocp, mtod(mp, caddr_t)+mp->m_len, xfer);
887			else
888				copyin(uiocp, mtod(mp, caddr_t)+mp->m_len, xfer);
889			mp->m_len += xfer;
890			left -= xfer;
891			uiocp += xfer;
892			uiop->uio_offset += xfer;
893			uiop->uio_resid -= xfer;
894		}
895		if (uiop->uio_iov->iov_len <= siz) {
896			uiop->uio_iovcnt--;
897			uiop->uio_iov++;
898		} else {
899			uiop->uio_iov->iov_base += uiosiz;
900			uiop->uio_iov->iov_len -= uiosiz;
901		}
902		siz -= uiosiz;
903	}
904	if (rem > 0) {
905		if (rem > M_TRAILINGSPACE(mp)) {
906			MGET(mp, M_WAIT, MT_DATA);
907			mp->m_len = 0;
908			mp2->m_next = mp;
909		}
910		cp = mtod(mp, caddr_t)+mp->m_len;
911		for (left = 0; left < rem; left++)
912			*cp++ = '\0';
913		mp->m_len += rem;
914		*bpos = cp;
915	} else
916		*bpos = mtod(mp, caddr_t)+mp->m_len;
917	*mq = mp;
918	return (0);
919}
920
921/*
922 * Help break down an mbuf chain by setting the first siz bytes contiguous
923 * pointed to by returned val.
924 * This is used by the macros nfsm_dissect and nfsm_dissecton for tough
925 * cases. (The macros use the vars. dpos and dpos2)
926 */
927int
928nfsm_disct(mdp, dposp, siz, left, cp2)
929	struct mbuf **mdp;
930	caddr_t *dposp;
931	int siz;
932	int left;
933	caddr_t *cp2;
934{
935	register struct mbuf *mp, *mp2;
936	register int siz2, xfer;
937	register caddr_t p;
938
939	mp = *mdp;
940	while (left == 0) {
941		*mdp = mp = mp->m_next;
942		if (mp == NULL)
943			return (EBADRPC);
944		left = mp->m_len;
945		*dposp = mtod(mp, caddr_t);
946	}
947	if (left >= siz) {
948		*cp2 = *dposp;
949		*dposp += siz;
950	} else if (mp->m_next == NULL) {
951		return (EBADRPC);
952	} else if (siz > MHLEN) {
953		panic("nfs S too big");
954	} else {
955		MGET(mp2, M_WAIT, MT_DATA);
956		mp2->m_next = mp->m_next;
957		mp->m_next = mp2;
958		mp->m_len -= left;
959		mp = mp2;
960		*cp2 = p = mtod(mp, caddr_t);
961		bcopy(*dposp, p, left);		/* Copy what was left */
962		siz2 = siz-left;
963		p += left;
964		mp2 = mp->m_next;
965		/* Loop around copying up the siz2 bytes */
966		while (siz2 > 0) {
967			if (mp2 == NULL)
968				return (EBADRPC);
969			xfer = (siz2 > mp2->m_len) ? mp2->m_len : siz2;
970			if (xfer > 0) {
971				bcopy(mtod(mp2, caddr_t), p, xfer);
972				NFSMADV(mp2, xfer);
973				mp2->m_len -= xfer;
974				p += xfer;
975				siz2 -= xfer;
976			}
977			if (siz2 > 0)
978				mp2 = mp2->m_next;
979		}
980		mp->m_len = siz;
981		*mdp = mp2;
982		*dposp = mtod(mp2, caddr_t);
983	}
984	return (0);
985}
986
987/*
988 * Advance the position in the mbuf chain.
989 */
990int
991nfs_adv(mdp, dposp, offs, left)
992	struct mbuf **mdp;
993	caddr_t *dposp;
994	int offs;
995	int left;
996{
997	register struct mbuf *m;
998	register int s;
999
1000	m = *mdp;
1001	s = left;
1002	while (s < offs) {
1003		offs -= s;
1004		m = m->m_next;
1005		if (m == NULL)
1006			return (EBADRPC);
1007		s = m->m_len;
1008	}
1009	*mdp = m;
1010	*dposp = mtod(m, caddr_t)+offs;
1011	return (0);
1012}
1013
1014/*
1015 * Copy a string into mbufs for the hard cases...
1016 */
1017int
1018nfsm_strtmbuf(mb, bpos, cp, siz)
1019	struct mbuf **mb;
1020	char **bpos;
1021	char *cp;
1022	long siz;
1023{
1024	register struct mbuf *m1 = 0, *m2;
1025	long left, xfer, len, tlen;
1026	u_long *tl;
1027	int putsize;
1028
1029	putsize = 1;
1030	m2 = *mb;
1031	left = M_TRAILINGSPACE(m2);
1032	if (left > 0) {
1033		tl = ((u_long *)(*bpos));
1034		*tl++ = txdr_unsigned(siz);
1035		putsize = 0;
1036		left -= NFSX_UNSIGNED;
1037		m2->m_len += NFSX_UNSIGNED;
1038		if (left > 0) {
1039			bcopy(cp, (caddr_t) tl, left);
1040			siz -= left;
1041			cp += left;
1042			m2->m_len += left;
1043			left = 0;
1044		}
1045	}
1046	/* Loop around adding mbufs */
1047	while (siz > 0) {
1048		MGET(m1, M_WAIT, MT_DATA);
1049		if (siz > MLEN)
1050			MCLGET(m1, M_WAIT);
1051		m1->m_len = NFSMSIZ(m1);
1052		m2->m_next = m1;
1053		m2 = m1;
1054		tl = mtod(m1, u_long *);
1055		tlen = 0;
1056		if (putsize) {
1057			*tl++ = txdr_unsigned(siz);
1058			m1->m_len -= NFSX_UNSIGNED;
1059			tlen = NFSX_UNSIGNED;
1060			putsize = 0;
1061		}
1062		if (siz < m1->m_len) {
1063			len = nfsm_rndup(siz);
1064			xfer = siz;
1065			if (xfer < len)
1066				*(tl+(xfer>>2)) = 0;
1067		} else {
1068			xfer = len = m1->m_len;
1069		}
1070		bcopy(cp, (caddr_t) tl, xfer);
1071		m1->m_len = len+tlen;
1072		siz -= xfer;
1073		cp += xfer;
1074	}
1075	*mb = m1;
1076	*bpos = mtod(m1, caddr_t)+m1->m_len;
1077	return (0);
1078}
1079
1080/*
1081 * Called once to initialize data structures...
1082 */
1083int
1084nfs_init()
1085{
1086	register int i;
1087
1088	/*
1089	 * Check to see if major data structures haven't bloated.
1090	 */
1091	if (sizeof (struct nfsnode) > NFS_NODEALLOC) {
1092		printf("struct nfsnode bloated (> %dbytes)\n", NFS_NODEALLOC);
1093		printf("Try reducing NFS_SMALLFH\n");
1094	}
1095	if (sizeof (struct nfsmount) > NFS_MNTALLOC) {
1096		printf("struct nfsmount bloated (> %dbytes)\n", NFS_MNTALLOC);
1097		printf("Try reducing NFS_MUIDHASHSIZ\n");
1098	}
1099	if (sizeof (struct nfssvc_sock) > NFS_SVCALLOC) {
1100		printf("struct nfssvc_sock bloated (> %dbytes)\n",NFS_SVCALLOC);
1101		printf("Try reducing NFS_UIDHASHSIZ\n");
1102	}
1103	if (sizeof (struct nfsuid) > NFS_UIDALLOC) {
1104		printf("struct nfsuid bloated (> %dbytes)\n",NFS_UIDALLOC);
1105		printf("Try unionizing the nu_nickname and nu_flag fields\n");
1106	}
1107	nfsrtt.pos = 0;
1108	rpc_vers = txdr_unsigned(RPC_VER2);
1109	rpc_call = txdr_unsigned(RPC_CALL);
1110	rpc_reply = txdr_unsigned(RPC_REPLY);
1111	rpc_msgdenied = txdr_unsigned(RPC_MSGDENIED);
1112	rpc_msgaccepted = txdr_unsigned(RPC_MSGACCEPTED);
1113	rpc_mismatch = txdr_unsigned(RPC_MISMATCH);
1114	rpc_autherr = txdr_unsigned(RPC_AUTHERR);
1115	rpc_auth_unix = txdr_unsigned(RPCAUTH_UNIX);
1116	rpc_auth_kerb = txdr_unsigned(RPCAUTH_KERB4);
1117	nfs_prog = txdr_unsigned(NFS_PROG);
1118	nqnfs_prog = txdr_unsigned(NQNFS_PROG);
1119	nfs_true = txdr_unsigned(TRUE);
1120	nfs_false = txdr_unsigned(FALSE);
1121	nfs_xdrneg1 = txdr_unsigned(-1);
1122	nfs_ticks = (hz * NFS_TICKINTVL + 500) / 1000;
1123	if (nfs_ticks < 1)
1124		nfs_ticks = 1;
1125	/* Ensure async daemons disabled */
1126	for (i = 0; i < NFS_MAXASYNCDAEMON; i++)
1127		nfs_iodwant[i] = (struct proc *)0;
1128	TAILQ_INIT(&nfs_bufq);
1129	nfs_nhinit();			/* Init the nfsnode table */
1130#ifndef NFS_NOSERVER
1131	nfsrv_init(0);			/* Init server data structures */
1132	nfsrv_initcache();		/* Init the server request cache */
1133#endif
1134
1135	/*
1136	 * Initialize the nqnfs server stuff.
1137	 */
1138	if (nqnfsstarttime == 0) {
1139		nqnfsstarttime = boottime.tv_sec + nqsrv_maxlease
1140			+ nqsrv_clockskew + nqsrv_writeslack;
1141		NQLOADNOVRAM(nqnfsstarttime);
1142		CIRCLEQ_INIT(&nqtimerhead);
1143		nqfhhashtbl = hashinit(NQLCHSZ, M_NQLEASE, &nqfhhash);
1144	}
1145
1146	/*
1147	 * Initialize reply list and start timer
1148	 */
1149	TAILQ_INIT(&nfs_reqq);
1150#ifndef NFS_NOSERVER
1151	nfs_timer(0);
1152#endif
1153
1154#ifdef __FreeBSD__
1155	/*
1156	 * Set up lease_check and lease_updatetime so that other parts
1157	 * of the system can call us, if we are loadable.
1158	 */
1159#ifndef NFS_NOSERVER
1160	lease_check = nfs_lease_check;
1161#endif
1162	lease_updatetime = nfs_lease_updatetime;
1163	vfsconf[MOUNT_NFS]->vfc_refcount++; /* make us non-unloadable */
1164#ifdef VFS_LKM
1165	sysent[SYS_nfssvc].sy_narg = 2;
1166	sysent[SYS_nfssvc].sy_call = nfssvc;
1167#ifndef NFS_NOSERVER
1168	sysent[SYS_getfh].sy_narg = 2;
1169	sysent[SYS_getfh].sy_call = getfh;
1170#endif
1171#endif
1172#endif
1173
1174	return (0);
1175}
1176
1177/*
1178 * Attribute cache routines.
1179 * nfs_loadattrcache() - loads or updates the cache contents from attributes
1180 *	that are on the mbuf list
1181 * nfs_getattrcache() - returns valid attributes if found in cache, returns
1182 *	error otherwise
1183 */
1184
1185/*
1186 * Load the attribute cache (that lives in the nfsnode entry) with
1187 * the values on the mbuf list and
1188 * Iff vap not NULL
1189 *    copy the attributes to *vaper
1190 */
1191int
1192nfs_loadattrcache(vpp, mdp, dposp, vaper)
1193	struct vnode **vpp;
1194	struct mbuf **mdp;
1195	caddr_t *dposp;
1196	struct vattr *vaper;
1197{
1198	register struct vnode *vp = *vpp;
1199	register struct vattr *vap;
1200	register struct nfs_fattr *fp;
1201	register struct nfsnode *np;
1202	register struct nfsnodehashhead *nhpp;
1203	register long t1;
1204	caddr_t cp2;
1205	int error = 0, rdev;
1206	struct mbuf *md;
1207	enum vtype vtyp;
1208	u_short vmode;
1209	struct timespec mtime;
1210	struct vnode *nvp;
1211	int v3 = NFS_ISV3(vp);
1212
1213	md = *mdp;
1214	t1 = (mtod(md, caddr_t) + md->m_len) - *dposp;
1215	if (error = nfsm_disct(mdp, dposp, NFSX_FATTR(v3), t1, &cp2))
1216		return (error);
1217	fp = (struct nfs_fattr *)cp2;
1218	if (v3) {
1219		vtyp = nfsv3tov_type(fp->fa_type);
1220		vmode = fxdr_unsigned(u_short, fp->fa_mode);
1221		rdev = makedev(fxdr_unsigned(u_char, fp->fa3_rdev.specdata1),
1222			fxdr_unsigned(u_char, fp->fa3_rdev.specdata2));
1223		fxdr_nfsv3time(&fp->fa3_mtime, &mtime);
1224	} else {
1225		vtyp = nfsv2tov_type(fp->fa_type);
1226		vmode = fxdr_unsigned(u_short, fp->fa_mode);
1227		/*
1228		 * XXX
1229		 *
1230		 * The duplicate information returned in fa_type and fa_mode
1231		 * is an ambiguity in the NFS version 2 protocol.
1232		 *
1233		 * VREG should be taken literally as a regular file.  If a
1234		 * server intents to return some type information differently
1235		 * in the upper bits of the mode field (e.g. for sockets, or
1236		 * FIFOs), NFSv2 mandates fa_type to be VNON.  Anyway, we
1237		 * leave the examination of the mode bits even in the VREG
1238		 * case to avoid breakage for bogus servers, but we make sure
1239		 * that there are actually type bits set in the upper part of
1240		 * fa_mode (and failing that, trust the va_type field).
1241		 *
1242		 * NFSv3 cleared the issue, and requires fa_mode to not
1243		 * contain any type information (while also introduing sockets
1244		 * and FIFOs for fa_type).
1245		 */
1246		if (vtyp == VNON || (vtyp == VREG && (vmode & S_IFMT) != 0))
1247			vtyp = IFTOVT(vmode);
1248		rdev = fxdr_unsigned(long, fp->fa2_rdev);
1249		fxdr_nfsv2time(&fp->fa2_mtime, &mtime);
1250
1251		/*
1252		 * Really ugly NFSv2 kludge.
1253		 */
1254		if (vtyp == VCHR && rdev == 0xffffffff)
1255			vtyp = VFIFO;
1256	}
1257
1258	/*
1259	 * If v_type == VNON it is a new node, so fill in the v_type,
1260	 * n_mtime fields. Check to see if it represents a special
1261	 * device, and if so, check for a possible alias. Once the
1262	 * correct vnode has been obtained, fill in the rest of the
1263	 * information.
1264	 */
1265	np = VTONFS(vp);
1266	if (vp->v_type != vtyp) {
1267		/*
1268		 * If we had a lock and it turns out that the vnode
1269		 * is an object which we don't want to lock (e.g. VDIR)
1270		 * to avoid nasty hanging problems on a server crash,
1271		 * then release it here.
1272		 */
1273		if (vtyp != VREG && VOP_ISLOCKED(vp))
1274			VOP_UNLOCK(vp);
1275		vp->v_type = vtyp;
1276		if (vp->v_type == VFIFO) {
1277			vp->v_op = fifo_nfsv2nodeop_p;
1278		}
1279		if (vp->v_type == VCHR || vp->v_type == VBLK) {
1280			vp->v_op = spec_nfsv2nodeop_p;
1281			nvp = checkalias(vp, (dev_t)rdev, vp->v_mount);
1282			if (nvp) {
1283				/*
1284				 * Discard unneeded vnode, but save its nfsnode.
1285				 */
1286				LIST_REMOVE(np, n_hash);
1287				nvp->v_data = vp->v_data;
1288				vp->v_data = NULL;
1289				vp->v_op = spec_vnodeop_p;
1290				vrele(vp);
1291				vgone(vp);
1292				/*
1293				 * Reinitialize aliased node.
1294				 */
1295				np->n_vnode = nvp;
1296				nhpp = NFSNOHASH(nfs_hash(np->n_fhp, np->n_fhsize));
1297				LIST_INSERT_HEAD(nhpp, np, n_hash);
1298				*vpp = vp = nvp;
1299			}
1300		}
1301		np->n_mtime = mtime.ts_sec;
1302	}
1303	vap = &np->n_vattr;
1304	vap->va_type = vtyp;
1305	vap->va_mode = (vmode & 07777);
1306	vap->va_rdev = (dev_t)rdev;
1307	vap->va_mtime = mtime;
1308	vap->va_fsid = vp->v_mount->mnt_stat.f_fsid.val[0];
1309	if (v3) {
1310		vap->va_nlink = fxdr_unsigned(u_short, fp->fa_nlink);
1311		vap->va_uid = fxdr_unsigned(uid_t, fp->fa_uid);
1312		vap->va_gid = fxdr_unsigned(gid_t, fp->fa_gid);
1313		fxdr_hyper(&fp->fa3_size, &vap->va_size);
1314		vap->va_blocksize = NFS_FABLKSIZE;
1315		fxdr_hyper(&fp->fa3_used, &vap->va_bytes);
1316		vap->va_fileid = fxdr_unsigned(int, fp->fa3_fileid.nfsuquad[1]);
1317		fxdr_nfsv3time(&fp->fa3_atime, &vap->va_atime);
1318		fxdr_nfsv3time(&fp->fa3_ctime, &vap->va_ctime);
1319		vap->va_flags = 0;
1320		vap->va_filerev = 0;
1321	} else {
1322		vap->va_nlink = fxdr_unsigned(u_short, fp->fa_nlink);
1323		vap->va_uid = fxdr_unsigned(uid_t, fp->fa_uid);
1324		vap->va_gid = fxdr_unsigned(gid_t, fp->fa_gid);
1325		vap->va_size = fxdr_unsigned(u_long, fp->fa2_size);
1326		vap->va_blocksize = fxdr_unsigned(long, fp->fa2_blocksize);
1327		vap->va_bytes = fxdr_unsigned(long, fp->fa2_blocks) * NFS_FABLKSIZE;
1328		vap->va_fileid = fxdr_unsigned(long, fp->fa2_fileid);
1329		fxdr_nfsv2time(&fp->fa2_atime, &vap->va_atime);
1330		vap->va_flags = 0;
1331		vap->va_ctime.ts_sec = fxdr_unsigned(long, fp->fa2_ctime.nfsv2_sec);
1332		vap->va_ctime.ts_nsec = 0;
1333		vap->va_gen = fxdr_unsigned(u_long, fp->fa2_ctime.nfsv2_usec);
1334		vap->va_filerev = 0;
1335	}
1336	if (vap->va_size != np->n_size) {
1337		if (vap->va_type == VREG) {
1338			if (np->n_flag & NMODIFIED) {
1339				if (vap->va_size < np->n_size)
1340					vap->va_size = np->n_size;
1341				else
1342					np->n_size = vap->va_size;
1343			} else
1344				np->n_size = vap->va_size;
1345			vnode_pager_setsize(vp, (u_long)np->n_size);
1346		} else
1347			np->n_size = vap->va_size;
1348	}
1349	np->n_attrstamp = time.tv_sec;
1350	if (vaper != NULL) {
1351		bcopy((caddr_t)vap, (caddr_t)vaper, sizeof(*vap));
1352		if (np->n_flag & NCHG) {
1353			if (np->n_flag & NACC)
1354				vaper->va_atime = np->n_atim;
1355			if (np->n_flag & NUPD)
1356				vaper->va_mtime = np->n_mtim;
1357		}
1358	}
1359	return (0);
1360}
1361
1362/*
1363 * Check the time stamp
1364 * If the cache is valid, copy contents to *vap and return 0
1365 * otherwise return an error
1366 */
1367int
1368nfs_getattrcache(vp, vaper)
1369	register struct vnode *vp;
1370	struct vattr *vaper;
1371{
1372	register struct nfsnode *np = VTONFS(vp);
1373	register struct vattr *vap;
1374
1375	if ((time.tv_sec - np->n_attrstamp) >= NFS_ATTRTIMEO(np)) {
1376		nfsstats.attrcache_misses++;
1377		return (ENOENT);
1378	}
1379	nfsstats.attrcache_hits++;
1380	vap = &np->n_vattr;
1381	if (vap->va_size != np->n_size) {
1382		if (vap->va_type == VREG) {
1383			if (np->n_flag & NMODIFIED) {
1384				if (vap->va_size < np->n_size)
1385					vap->va_size = np->n_size;
1386				else
1387					np->n_size = vap->va_size;
1388			} else
1389				np->n_size = vap->va_size;
1390			vnode_pager_setsize(vp, (u_long)np->n_size);
1391		} else
1392			np->n_size = vap->va_size;
1393	}
1394	bcopy((caddr_t)vap, (caddr_t)vaper, sizeof(struct vattr));
1395	if (np->n_flag & NCHG) {
1396		if (np->n_flag & NACC)
1397			vaper->va_atime = np->n_atim;
1398		if (np->n_flag & NUPD)
1399			vaper->va_mtime = np->n_mtim;
1400	}
1401	return (0);
1402}
1403
1404#ifndef NFS_NOSERVER
1405/*
1406 * Set up nameidata for a lookup() call and do it
1407 */
1408int
1409nfs_namei(ndp, fhp, len, slp, nam, mdp, dposp, retdirp, p, kerbflag)
1410	register struct nameidata *ndp;
1411	fhandle_t *fhp;
1412	int len;
1413	struct nfssvc_sock *slp;
1414	struct mbuf *nam;
1415	struct mbuf **mdp;
1416	caddr_t *dposp;
1417	struct vnode **retdirp;
1418	struct proc *p;
1419	int kerbflag;
1420{
1421	register int i, rem;
1422	register struct mbuf *md;
1423	register char *fromcp, *tocp;
1424	struct vnode *dp;
1425	int error, rdonly;
1426	struct componentname *cnp = &ndp->ni_cnd;
1427
1428	*retdirp = (struct vnode *)0;
1429	MALLOC(cnp->cn_pnbuf, char *, len + 1, M_NAMEI, M_WAITOK);
1430	/*
1431	 * Copy the name from the mbuf list to ndp->ni_pnbuf
1432	 * and set the various ndp fields appropriately.
1433	 */
1434	fromcp = *dposp;
1435	tocp = cnp->cn_pnbuf;
1436	md = *mdp;
1437	rem = mtod(md, caddr_t) + md->m_len - fromcp;
1438	cnp->cn_hash = 0;
1439	for (i = 0; i < len; i++) {
1440		while (rem == 0) {
1441			md = md->m_next;
1442			if (md == NULL) {
1443				error = EBADRPC;
1444				goto out;
1445			}
1446			fromcp = mtod(md, caddr_t);
1447			rem = md->m_len;
1448		}
1449		if (*fromcp == '\0' || *fromcp == '/') {
1450			error = EACCES;
1451			goto out;
1452		}
1453		cnp->cn_hash += (unsigned char)*fromcp;
1454		*tocp++ = *fromcp++;
1455		rem--;
1456	}
1457	*tocp = '\0';
1458	*mdp = md;
1459	*dposp = fromcp;
1460	len = nfsm_rndup(len)-len;
1461	if (len > 0) {
1462		if (rem >= len)
1463			*dposp += len;
1464		else if (error = nfs_adv(mdp, dposp, len, rem))
1465			goto out;
1466	}
1467	ndp->ni_pathlen = tocp - cnp->cn_pnbuf;
1468	cnp->cn_nameptr = cnp->cn_pnbuf;
1469	/*
1470	 * Extract and set starting directory.
1471	 */
1472	if (error = nfsrv_fhtovp(fhp, FALSE, &dp, ndp->ni_cnd.cn_cred, slp,
1473	    nam, &rdonly, kerbflag))
1474		goto out;
1475	if (dp->v_type != VDIR) {
1476		nfsrv_vrele(dp);
1477		error = ENOTDIR;
1478		goto out;
1479	}
1480	VREF(dp);
1481	*retdirp = dp;
1482	ndp->ni_startdir = dp;
1483	if (rdonly)
1484		cnp->cn_flags |= (NOCROSSMOUNT | RDONLY);
1485	else
1486		cnp->cn_flags |= NOCROSSMOUNT;
1487	/*
1488	 * And call lookup() to do the real work
1489	 */
1490	cnp->cn_proc = p;
1491	if (error = lookup(ndp))
1492		goto out;
1493	/*
1494	 * Check for encountering a symbolic link
1495	 */
1496	if (cnp->cn_flags & ISSYMLINK) {
1497		if ((cnp->cn_flags & LOCKPARENT) && ndp->ni_pathlen == 1)
1498			vput(ndp->ni_dvp);
1499		else
1500			vrele(ndp->ni_dvp);
1501		vput(ndp->ni_vp);
1502		ndp->ni_vp = NULL;
1503		error = EINVAL;
1504		goto out;
1505	}
1506
1507	nfsrv_vmio(ndp->ni_vp);
1508
1509	/*
1510	 * Check for saved name request
1511	 */
1512	if (cnp->cn_flags & (SAVENAME | SAVESTART)) {
1513		cnp->cn_flags |= HASBUF;
1514		return (0);
1515	}
1516out:
1517	FREE(cnp->cn_pnbuf, M_NAMEI);
1518	return (error);
1519}
1520
1521/*
1522 * A fiddled version of m_adj() that ensures null fill to a long
1523 * boundary and only trims off the back end
1524 */
1525void
1526nfsm_adj(mp, len, nul)
1527	struct mbuf *mp;
1528	register int len;
1529	int nul;
1530{
1531	register struct mbuf *m;
1532	register int count, i;
1533	register char *cp;
1534
1535	/*
1536	 * Trim from tail.  Scan the mbuf chain,
1537	 * calculating its length and finding the last mbuf.
1538	 * If the adjustment only affects this mbuf, then just
1539	 * adjust and return.  Otherwise, rescan and truncate
1540	 * after the remaining size.
1541	 */
1542	count = 0;
1543	m = mp;
1544	for (;;) {
1545		count += m->m_len;
1546		if (m->m_next == (struct mbuf *)0)
1547			break;
1548		m = m->m_next;
1549	}
1550	if (m->m_len > len) {
1551		m->m_len -= len;
1552		if (nul > 0) {
1553			cp = mtod(m, caddr_t)+m->m_len-nul;
1554			for (i = 0; i < nul; i++)
1555				*cp++ = '\0';
1556		}
1557		return;
1558	}
1559	count -= len;
1560	if (count < 0)
1561		count = 0;
1562	/*
1563	 * Correct length for chain is "count".
1564	 * Find the mbuf with last data, adjust its length,
1565	 * and toss data from remaining mbufs on chain.
1566	 */
1567	for (m = mp; m; m = m->m_next) {
1568		if (m->m_len >= count) {
1569			m->m_len = count;
1570			if (nul > 0) {
1571				cp = mtod(m, caddr_t)+m->m_len-nul;
1572				for (i = 0; i < nul; i++)
1573					*cp++ = '\0';
1574			}
1575			break;
1576		}
1577		count -= m->m_len;
1578	}
1579	for (m = m->m_next;m;m = m->m_next)
1580		m->m_len = 0;
1581}
1582
1583/*
1584 * Make these functions instead of macros, so that the kernel text size
1585 * doesn't get too big...
1586 */
1587void
1588nfsm_srvwcc(nfsd, before_ret, before_vap, after_ret, after_vap, mbp, bposp)
1589	struct nfsrv_descript *nfsd;
1590	int before_ret;
1591	register struct vattr *before_vap;
1592	int after_ret;
1593	struct vattr *after_vap;
1594	struct mbuf **mbp;
1595	char **bposp;
1596{
1597	register struct mbuf *mb = *mbp, *mb2;
1598	register char *bpos = *bposp;
1599	register u_long *tl;
1600
1601	if (before_ret) {
1602		nfsm_build(tl, u_long *, NFSX_UNSIGNED);
1603		*tl = nfs_false;
1604	} else {
1605		nfsm_build(tl, u_long *, 7 * NFSX_UNSIGNED);
1606		*tl++ = nfs_true;
1607		txdr_hyper(&(before_vap->va_size), tl);
1608		tl += 2;
1609		txdr_nfsv3time(&(before_vap->va_mtime), tl);
1610		tl += 2;
1611		txdr_nfsv3time(&(before_vap->va_ctime), tl);
1612	}
1613	*bposp = bpos;
1614	*mbp = mb;
1615	nfsm_srvpostopattr(nfsd, after_ret, after_vap, mbp, bposp);
1616}
1617
1618void
1619nfsm_srvpostopattr(nfsd, after_ret, after_vap, mbp, bposp)
1620	struct nfsrv_descript *nfsd;
1621	int after_ret;
1622	struct vattr *after_vap;
1623	struct mbuf **mbp;
1624	char **bposp;
1625{
1626	register struct mbuf *mb = *mbp, *mb2;
1627	register char *bpos = *bposp;
1628	register u_long *tl;
1629	register struct nfs_fattr *fp;
1630
1631	if (after_ret) {
1632		nfsm_build(tl, u_long *, NFSX_UNSIGNED);
1633		*tl = nfs_false;
1634	} else {
1635		nfsm_build(tl, u_long *, NFSX_UNSIGNED + NFSX_V3FATTR);
1636		*tl++ = nfs_true;
1637		fp = (struct nfs_fattr *)tl;
1638		nfsm_srvfattr(nfsd, after_vap, fp);
1639	}
1640	*mbp = mb;
1641	*bposp = bpos;
1642}
1643
1644void
1645nfsm_srvfattr(nfsd, vap, fp)
1646	register struct nfsrv_descript *nfsd;
1647	register struct vattr *vap;
1648	register struct nfs_fattr *fp;
1649{
1650
1651	fp->fa_nlink = txdr_unsigned(vap->va_nlink);
1652	fp->fa_uid = txdr_unsigned(vap->va_uid);
1653	fp->fa_gid = txdr_unsigned(vap->va_gid);
1654	if (nfsd->nd_flag & ND_NFSV3) {
1655		fp->fa_type = vtonfsv3_type(vap->va_type);
1656		fp->fa_mode = vtonfsv3_mode(vap->va_mode);
1657		txdr_hyper(&vap->va_size, &fp->fa3_size);
1658		txdr_hyper(&vap->va_bytes, &fp->fa3_used);
1659		fp->fa3_rdev.specdata1 = txdr_unsigned(major(vap->va_rdev));
1660		fp->fa3_rdev.specdata2 = txdr_unsigned(minor(vap->va_rdev));
1661		fp->fa3_fsid.nfsuquad[0] = 0;
1662		fp->fa3_fsid.nfsuquad[1] = txdr_unsigned(vap->va_fsid);
1663		fp->fa3_fileid.nfsuquad[0] = 0;
1664		fp->fa3_fileid.nfsuquad[1] = txdr_unsigned(vap->va_fileid);
1665		txdr_nfsv3time(&vap->va_atime, &fp->fa3_atime);
1666		txdr_nfsv3time(&vap->va_mtime, &fp->fa3_mtime);
1667		txdr_nfsv3time(&vap->va_ctime, &fp->fa3_ctime);
1668	} else {
1669		fp->fa_type = vtonfsv2_type(vap->va_type);
1670		fp->fa_mode = vtonfsv2_mode(vap->va_type, vap->va_mode);
1671		fp->fa2_size = txdr_unsigned(vap->va_size);
1672		fp->fa2_blocksize = txdr_unsigned(vap->va_blocksize);
1673		if (vap->va_type == VFIFO)
1674			fp->fa2_rdev = 0xffffffff;
1675		else
1676			fp->fa2_rdev = txdr_unsigned(vap->va_rdev);
1677		fp->fa2_blocks = txdr_unsigned(vap->va_bytes / NFS_FABLKSIZE);
1678		fp->fa2_fsid = txdr_unsigned(vap->va_fsid);
1679		fp->fa2_fileid = txdr_unsigned(vap->va_fileid);
1680		txdr_nfsv2time(&vap->va_atime, &fp->fa2_atime);
1681		txdr_nfsv2time(&vap->va_mtime, &fp->fa2_mtime);
1682		txdr_nfsv2time(&vap->va_ctime, &fp->fa2_ctime);
1683	}
1684}
1685
1686/*
1687 * nfsrv_fhtovp() - convert a fh to a vnode ptr (optionally locked)
1688 * 	- look up fsid in mount list (if not found ret error)
1689 *	- get vp and export rights by calling VFS_FHTOVP()
1690 *	- if cred->cr_uid == 0 or MNT_EXPORTANON set it to credanon
1691 *	- if not lockflag unlock it with VOP_UNLOCK()
1692 */
1693int
1694nfsrv_fhtovp(fhp, lockflag, vpp, cred, slp, nam, rdonlyp, kerbflag)
1695	fhandle_t *fhp;
1696	int lockflag;
1697	struct vnode **vpp;
1698	struct ucred *cred;
1699	struct nfssvc_sock *slp;
1700	struct mbuf *nam;
1701	int *rdonlyp;
1702	int kerbflag;
1703{
1704	register struct mount *mp;
1705	register int i;
1706	struct ucred *credanon;
1707	int error, exflags;
1708
1709	*vpp = (struct vnode *)0;
1710	mp = getvfs(&fhp->fh_fsid);
1711	if (!mp)
1712		return (ESTALE);
1713	error = VFS_FHTOVP(mp, &fhp->fh_fid, nam, vpp, &exflags, &credanon);
1714	if (error)
1715		return (error);
1716	/*
1717	 * Check/setup credentials.
1718	 */
1719	if (exflags & MNT_EXKERB) {
1720		if (!kerbflag) {
1721			vput(*vpp);
1722			return (NFSERR_AUTHERR | AUTH_TOOWEAK);
1723		}
1724	} else if (kerbflag) {
1725		vput(*vpp);
1726		return (NFSERR_AUTHERR | AUTH_TOOWEAK);
1727	} else if (cred->cr_uid == 0 || (exflags & MNT_EXPORTANON)) {
1728		cred->cr_uid = credanon->cr_uid;
1729		for (i = 0; i < credanon->cr_ngroups && i < NGROUPS; i++)
1730			cred->cr_groups[i] = credanon->cr_groups[i];
1731		cred->cr_ngroups = i;
1732	}
1733	if (exflags & MNT_EXRDONLY)
1734		*rdonlyp = 1;
1735	else
1736		*rdonlyp = 0;
1737
1738	nfsrv_vmio(*vpp);
1739
1740	if (!lockflag)
1741		VOP_UNLOCK(*vpp);
1742	return (0);
1743}
1744
1745#endif /* NFS_NOSERVER */
1746/*
1747 * This function compares two net addresses by family and returns TRUE
1748 * if they are the same host.
1749 * If there is any doubt, return FALSE.
1750 * The AF_INET family is handled as a special case so that address mbufs
1751 * don't need to be saved to store "struct in_addr", which is only 4 bytes.
1752 */
1753int
1754netaddr_match(family, haddr, nam)
1755	int family;
1756	union nethostaddr *haddr;
1757	struct mbuf *nam;
1758{
1759	register struct sockaddr_in *inetaddr;
1760
1761	switch (family) {
1762	case AF_INET:
1763		inetaddr = mtod(nam, struct sockaddr_in *);
1764		if (inetaddr->sin_family == AF_INET &&
1765		    inetaddr->sin_addr.s_addr == haddr->had_inetaddr)
1766			return (1);
1767		break;
1768#ifdef ISO
1769	case AF_ISO:
1770	    {
1771		register struct sockaddr_iso *isoaddr1, *isoaddr2;
1772
1773		isoaddr1 = mtod(nam, struct sockaddr_iso *);
1774		isoaddr2 = mtod(haddr->had_nam, struct sockaddr_iso *);
1775		if (isoaddr1->siso_family == AF_ISO &&
1776		    isoaddr1->siso_nlen > 0 &&
1777		    isoaddr1->siso_nlen == isoaddr2->siso_nlen &&
1778		    SAME_ISOADDR(isoaddr1, isoaddr2))
1779			return (1);
1780		break;
1781	    }
1782#endif	/* ISO */
1783	default:
1784		break;
1785	};
1786	return (0);
1787}
1788
1789static nfsuint64 nfs_nullcookie = { 0, 0 };
1790/*
1791 * This function finds the directory cookie that corresponds to the
1792 * logical byte offset given.
1793 */
1794nfsuint64 *
1795nfs_getcookie(np, off, add)
1796	register struct nfsnode *np;
1797	off_t off;
1798	int add;
1799{
1800	register struct nfsdmap *dp, *dp2;
1801	register int pos;
1802
1803	pos = off / NFS_DIRBLKSIZ;
1804	if (pos == 0) {
1805#ifdef DIAGNOSTIC
1806		if (add)
1807			panic("nfs getcookie add at 0");
1808#endif
1809		return (&nfs_nullcookie);
1810	}
1811	pos--;
1812	dp = np->n_cookies.lh_first;
1813	if (!dp) {
1814		if (add) {
1815			MALLOC(dp, struct nfsdmap *, sizeof (struct nfsdmap),
1816				M_NFSDIROFF, M_WAITOK);
1817			dp->ndm_eocookie = 0;
1818			LIST_INSERT_HEAD(&np->n_cookies, dp, ndm_list);
1819		} else
1820			return ((nfsuint64 *)0);
1821	}
1822	while (pos >= NFSNUMCOOKIES) {
1823		pos -= NFSNUMCOOKIES;
1824		if (dp->ndm_list.le_next) {
1825			if (!add && dp->ndm_eocookie < NFSNUMCOOKIES &&
1826				pos >= dp->ndm_eocookie)
1827				return ((nfsuint64 *)0);
1828			dp = dp->ndm_list.le_next;
1829		} else if (add) {
1830			MALLOC(dp2, struct nfsdmap *, sizeof (struct nfsdmap),
1831				M_NFSDIROFF, M_WAITOK);
1832			dp2->ndm_eocookie = 0;
1833			LIST_INSERT_AFTER(dp, dp2, ndm_list);
1834			dp = dp2;
1835		} else
1836			return ((nfsuint64 *)0);
1837	}
1838	if (pos >= dp->ndm_eocookie) {
1839		if (add)
1840			dp->ndm_eocookie = pos + 1;
1841		else
1842			return ((nfsuint64 *)0);
1843	}
1844	return (&dp->ndm_cookies[pos]);
1845}
1846
1847/*
1848 * Invalidate cached directory information, except for the actual directory
1849 * blocks (which are invalidated separately).
1850 * Done mainly to avoid the use of stale offset cookies.
1851 */
1852void
1853nfs_invaldir(vp)
1854	register struct vnode *vp;
1855{
1856	register struct nfsnode *np = VTONFS(vp);
1857
1858#ifdef DIAGNOSTIC
1859	if (vp->v_type != VDIR)
1860		panic("nfs: invaldir not dir");
1861#endif
1862	np->n_direofoffset = 0;
1863	np->n_cookieverf.nfsuquad[0] = 0;
1864	np->n_cookieverf.nfsuquad[1] = 0;
1865	if (np->n_cookies.lh_first)
1866		np->n_cookies.lh_first->ndm_eocookie = 0;
1867}
1868
1869/*
1870 * The write verifier has changed (probably due to a server reboot), so all
1871 * B_NEEDCOMMIT blocks will have to be written again. Since they are on the
1872 * dirty block list as B_DELWRI, all this takes is clearing the B_NEEDCOMMIT
1873 * flag. Once done the new write verifier can be set for the mount point.
1874 */
1875void
1876nfs_clearcommit(mp)
1877	struct mount *mp;
1878{
1879	register struct vnode *vp, *nvp;
1880	register struct buf *bp, *nbp;
1881	int s;
1882
1883	s = splbio();
1884loop:
1885	for (vp = mp->mnt_vnodelist.lh_first; vp; vp = nvp) {
1886		if (vp->v_mount != mp)	/* Paranoia */
1887			goto loop;
1888		nvp = vp->v_mntvnodes.le_next;
1889		for (bp = vp->v_dirtyblkhd.lh_first; bp; bp = nbp) {
1890			nbp = bp->b_vnbufs.le_next;
1891			if ((bp->b_flags & (B_BUSY | B_DELWRI | B_NEEDCOMMIT))
1892				== (B_DELWRI | B_NEEDCOMMIT))
1893				bp->b_flags &= ~B_NEEDCOMMIT;
1894		}
1895	}
1896	splx(s);
1897}
1898
1899#ifndef NFS_NOSERVER
1900/*
1901 * Map errnos to NFS error numbers. For Version 3 also filter out error
1902 * numbers not specified for the associated procedure.
1903 */
1904int
1905nfsrv_errmap(nd, err)
1906	struct nfsrv_descript *nd;
1907	register int err;
1908{
1909	register short *defaulterrp, *errp;
1910
1911	if (nd->nd_flag & ND_NFSV3) {
1912	    if (nd->nd_procnum <= NFSPROC_COMMIT) {
1913		errp = defaulterrp = nfsrv_v3errmap[nd->nd_procnum];
1914		while (*++errp) {
1915			if (*errp == err)
1916				return (err);
1917			else if (*errp > err)
1918				break;
1919		}
1920		return ((int)*defaulterrp);
1921	    } else
1922		return (err & 0xffff);
1923	}
1924	if (err <= ELAST)
1925		return ((int)nfsrv_v2errmap[err - 1]);
1926	return (NFSERR_IO);
1927}
1928
1929int
1930nfsrv_vmio(struct vnode *vp) {
1931	vm_object_t object;
1932
1933	if ((vp == NULL) || (vp->v_type != VREG))
1934		return 1;
1935
1936retry:
1937	if ((vp->v_flag & VVMIO) == 0) {
1938		struct vattr vat;
1939		struct proc *p = curproc;
1940
1941		if (VOP_GETATTR(vp, &vat, p->p_ucred, p) != 0)
1942			panic("nfsrv_vmio: VOP_GETATTR failed");
1943
1944		(void) vnode_pager_alloc(vp, vat.va_size, 0, 0);
1945
1946		vp->v_flag |= VVMIO;
1947	} else {
1948		if ((object = vp->v_object) &&
1949			(object->flags & OBJ_DEAD)) {
1950			tsleep(object, PVM, "nfdead", 0);
1951			goto retry;
1952		}
1953		if (!object)
1954			panic("nfsrv_vmio: VMIO object missing");
1955		vm_object_reference(object);
1956	}
1957	return 0;
1958}
1959int
1960nfsrv_vput(struct vnode *vp) {
1961	if ((vp->v_flag & VVMIO) && vp->v_object) {
1962		vput(vp);
1963		vm_object_deallocate(vp->v_object);
1964	} else {
1965		vput(vp);
1966	}
1967	return 0;
1968}
1969int
1970nfsrv_vrele(struct vnode *vp) {
1971	if ((vp->v_flag & VVMIO) && vp->v_object) {
1972		vrele(vp);
1973		vm_object_deallocate(vp->v_object);
1974	} else {
1975		vrele(vp);
1976	}
1977	return 0;
1978}
1979#endif /* NFS_NOSERVER */
1980