1 /*
2  * In-kernel rpcbind client supporting versions 2, 3, and 4 of the rpcbind
3  * protocol
4  *
5  * Based on RFC 1833: "Binding Protocols for ONC RPC Version 2" and
6  * RFC 3530: "Network File System (NFS) version 4 Protocol"
7  *
8  * Original: Gilles Quillard, Bull Open Source, 2005 <gilles.quillard@bull.net>
9  * Updated: Chuck Lever, Oracle Corporation, 2007 <chuck.lever@oracle.com>
10  *
11  * Descended from net/sunrpc/pmap_clnt.c,
12  *  Copyright (C) 1996, Olaf Kirch <okir@monad.swb.de>
13  */
14 
15 #include <linux/module.h>
16 
17 #include <linux/types.h>
18 #include <linux/socket.h>
19 #include <linux/un.h>
20 #include <linux/in.h>
21 #include <linux/in6.h>
22 #include <linux/kernel.h>
23 #include <linux/errno.h>
24 #include <linux/mutex.h>
25 #include <linux/slab.h>
26 #include <net/ipv6.h>
27 
28 #include <linux/sunrpc/clnt.h>
29 #include <linux/sunrpc/addr.h>
30 #include <linux/sunrpc/sched.h>
31 #include <linux/sunrpc/xprtsock.h>
32 
33 #include "netns.h"
34 
35 #if IS_ENABLED(CONFIG_SUNRPC_DEBUG)
36 # define RPCDBG_FACILITY	RPCDBG_BIND
37 #endif
38 
39 #define RPCBIND_SOCK_PATHNAME	"/var/run/rpcbind.sock"
40 
41 #define RPCBIND_PROGRAM		(100000u)
42 #define RPCBIND_PORT		(111u)
43 
44 #define RPCBVERS_2		(2u)
45 #define RPCBVERS_3		(3u)
46 #define RPCBVERS_4		(4u)
47 
48 enum {
49 	RPCBPROC_NULL,
50 	RPCBPROC_SET,
51 	RPCBPROC_UNSET,
52 	RPCBPROC_GETPORT,
53 	RPCBPROC_GETADDR = 3,		/* alias for GETPORT */
54 	RPCBPROC_DUMP,
55 	RPCBPROC_CALLIT,
56 	RPCBPROC_BCAST = 5,		/* alias for CALLIT */
57 	RPCBPROC_GETTIME,
58 	RPCBPROC_UADDR2TADDR,
59 	RPCBPROC_TADDR2UADDR,
60 	RPCBPROC_GETVERSADDR,
61 	RPCBPROC_INDIRECT,
62 	RPCBPROC_GETADDRLIST,
63 	RPCBPROC_GETSTAT,
64 };
65 
66 /*
67  * r_owner
68  *
69  * The "owner" is allowed to unset a service in the rpcbind database.
70  *
71  * For AF_LOCAL SET/UNSET requests, rpcbind treats this string as a
72  * UID which it maps to a local user name via a password lookup.
73  * In all other cases it is ignored.
74  *
75  * For SET/UNSET requests, user space provides a value, even for
76  * network requests, and GETADDR uses an empty string.  We follow
77  * those precedents here.
78  */
79 #define RPCB_OWNER_STRING	"0"
80 #define RPCB_MAXOWNERLEN	sizeof(RPCB_OWNER_STRING)
81 
82 /*
83  * XDR data type sizes
84  */
85 #define RPCB_program_sz		(1)
86 #define RPCB_version_sz		(1)
87 #define RPCB_protocol_sz	(1)
88 #define RPCB_port_sz		(1)
89 #define RPCB_boolean_sz		(1)
90 
91 #define RPCB_netid_sz		(1 + XDR_QUADLEN(RPCBIND_MAXNETIDLEN))
92 #define RPCB_addr_sz		(1 + XDR_QUADLEN(RPCBIND_MAXUADDRLEN))
93 #define RPCB_ownerstring_sz	(1 + XDR_QUADLEN(RPCB_MAXOWNERLEN))
94 
95 /*
96  * XDR argument and result sizes
97  */
98 #define RPCB_mappingargs_sz	(RPCB_program_sz + RPCB_version_sz + \
99 				RPCB_protocol_sz + RPCB_port_sz)
100 #define RPCB_getaddrargs_sz	(RPCB_program_sz + RPCB_version_sz + \
101 				RPCB_netid_sz + RPCB_addr_sz + \
102 				RPCB_ownerstring_sz)
103 
104 #define RPCB_getportres_sz	RPCB_port_sz
105 #define RPCB_setres_sz		RPCB_boolean_sz
106 
107 /*
108  * Note that RFC 1833 does not put any size restrictions on the
109  * address string returned by the remote rpcbind database.
110  */
111 #define RPCB_getaddrres_sz	RPCB_addr_sz
112 
113 static void			rpcb_getport_done(struct rpc_task *, void *);
114 static void			rpcb_map_release(void *data);
115 static const struct rpc_program	rpcb_program;
116 
117 struct rpcbind_args {
118 	struct rpc_xprt *	r_xprt;
119 
120 	u32			r_prog;
121 	u32			r_vers;
122 	u32			r_prot;
123 	unsigned short		r_port;
124 	const char *		r_netid;
125 	const char *		r_addr;
126 	const char *		r_owner;
127 
128 	int			r_status;
129 };
130 
131 static const struct rpc_procinfo rpcb_procedures2[];
132 static const struct rpc_procinfo rpcb_procedures3[];
133 static const struct rpc_procinfo rpcb_procedures4[];
134 
135 struct rpcb_info {
136 	u32			rpc_vers;
137 	const struct rpc_procinfo *rpc_proc;
138 };
139 
140 static const struct rpcb_info rpcb_next_version[];
141 static const struct rpcb_info rpcb_next_version6[];
142 
143 static const struct rpc_call_ops rpcb_getport_ops = {
144 	.rpc_call_done		= rpcb_getport_done,
145 	.rpc_release		= rpcb_map_release,
146 };
147 
rpcb_wake_rpcbind_waiters(struct rpc_xprt * xprt,int status)148 static void rpcb_wake_rpcbind_waiters(struct rpc_xprt *xprt, int status)
149 {
150 	xprt_clear_binding(xprt);
151 	rpc_wake_up_status(&xprt->binding, status);
152 }
153 
rpcb_map_release(void * data)154 static void rpcb_map_release(void *data)
155 {
156 	struct rpcbind_args *map = data;
157 
158 	rpcb_wake_rpcbind_waiters(map->r_xprt, map->r_status);
159 	xprt_put(map->r_xprt);
160 	kfree(map->r_addr);
161 	kfree(map);
162 }
163 
rpcb_get_local(struct net * net)164 static int rpcb_get_local(struct net *net)
165 {
166 	int cnt;
167 	struct sunrpc_net *sn = net_generic(net, sunrpc_net_id);
168 
169 	spin_lock(&sn->rpcb_clnt_lock);
170 	if (sn->rpcb_users)
171 		sn->rpcb_users++;
172 	cnt = sn->rpcb_users;
173 	spin_unlock(&sn->rpcb_clnt_lock);
174 
175 	return cnt;
176 }
177 
rpcb_put_local(struct net * net)178 void rpcb_put_local(struct net *net)
179 {
180 	struct sunrpc_net *sn = net_generic(net, sunrpc_net_id);
181 	struct rpc_clnt *clnt = sn->rpcb_local_clnt;
182 	struct rpc_clnt *clnt4 = sn->rpcb_local_clnt4;
183 	int shutdown = 0;
184 
185 	spin_lock(&sn->rpcb_clnt_lock);
186 	if (sn->rpcb_users) {
187 		if (--sn->rpcb_users == 0) {
188 			sn->rpcb_local_clnt = NULL;
189 			sn->rpcb_local_clnt4 = NULL;
190 		}
191 		shutdown = !sn->rpcb_users;
192 	}
193 	spin_unlock(&sn->rpcb_clnt_lock);
194 
195 	if (shutdown) {
196 		/*
197 		 * cleanup_rpcb_clnt - remove xprtsock's sysctls, unregister
198 		 */
199 		if (clnt4)
200 			rpc_shutdown_client(clnt4);
201 		if (clnt)
202 			rpc_shutdown_client(clnt);
203 	}
204 }
205 
rpcb_set_local(struct net * net,struct rpc_clnt * clnt,struct rpc_clnt * clnt4,bool is_af_local)206 static void rpcb_set_local(struct net *net, struct rpc_clnt *clnt,
207 			struct rpc_clnt *clnt4,
208 			bool is_af_local)
209 {
210 	struct sunrpc_net *sn = net_generic(net, sunrpc_net_id);
211 
212 	/* Protected by rpcb_create_local_mutex */
213 	sn->rpcb_local_clnt = clnt;
214 	sn->rpcb_local_clnt4 = clnt4;
215 	sn->rpcb_is_af_local = is_af_local ? 1 : 0;
216 	smp_wmb();
217 	sn->rpcb_users = 1;
218 	dprintk("RPC:       created new rpcb local clients (rpcb_local_clnt: "
219 		"%p, rpcb_local_clnt4: %p) for net %x%s\n",
220 		sn->rpcb_local_clnt, sn->rpcb_local_clnt4,
221 		net->ns.inum, (net == &init_net) ? " (init_net)" : "");
222 }
223 
224 /*
225  * Returns zero on success, otherwise a negative errno value
226  * is returned.
227  */
rpcb_create_local_unix(struct net * net)228 static int rpcb_create_local_unix(struct net *net)
229 {
230 	static const struct sockaddr_un rpcb_localaddr_rpcbind = {
231 		.sun_family		= AF_LOCAL,
232 		.sun_path		= RPCBIND_SOCK_PATHNAME,
233 	};
234 	struct rpc_create_args args = {
235 		.net		= net,
236 		.protocol	= XPRT_TRANSPORT_LOCAL,
237 		.address	= (struct sockaddr *)&rpcb_localaddr_rpcbind,
238 		.addrsize	= sizeof(rpcb_localaddr_rpcbind),
239 		.servername	= "localhost",
240 		.program	= &rpcb_program,
241 		.version	= RPCBVERS_2,
242 		.authflavor	= RPC_AUTH_NULL,
243 		/*
244 		 * We turn off the idle timeout to prevent the kernel
245 		 * from automatically disconnecting the socket.
246 		 * Otherwise, we'd have to cache the mount namespace
247 		 * of the caller and somehow pass that to the socket
248 		 * reconnect code.
249 		 */
250 		.flags		= RPC_CLNT_CREATE_NO_IDLE_TIMEOUT,
251 	};
252 	struct rpc_clnt *clnt, *clnt4;
253 	int result = 0;
254 
255 	/*
256 	 * Because we requested an RPC PING at transport creation time,
257 	 * this works only if the user space portmapper is rpcbind, and
258 	 * it's listening on AF_LOCAL on the named socket.
259 	 */
260 	clnt = rpc_create(&args);
261 	if (IS_ERR(clnt)) {
262 		dprintk("RPC:       failed to create AF_LOCAL rpcbind "
263 				"client (errno %ld).\n", PTR_ERR(clnt));
264 		result = PTR_ERR(clnt);
265 		goto out;
266 	}
267 
268 	clnt4 = rpc_bind_new_program(clnt, &rpcb_program, RPCBVERS_4);
269 	if (IS_ERR(clnt4)) {
270 		dprintk("RPC:       failed to bind second program to "
271 				"rpcbind v4 client (errno %ld).\n",
272 				PTR_ERR(clnt4));
273 		clnt4 = NULL;
274 	}
275 
276 	rpcb_set_local(net, clnt, clnt4, true);
277 
278 out:
279 	return result;
280 }
281 
282 /*
283  * Returns zero on success, otherwise a negative errno value
284  * is returned.
285  */
rpcb_create_local_net(struct net * net)286 static int rpcb_create_local_net(struct net *net)
287 {
288 	static const struct sockaddr_in rpcb_inaddr_loopback = {
289 		.sin_family		= AF_INET,
290 		.sin_addr.s_addr	= htonl(INADDR_LOOPBACK),
291 		.sin_port		= htons(RPCBIND_PORT),
292 	};
293 	struct rpc_create_args args = {
294 		.net		= net,
295 		.protocol	= XPRT_TRANSPORT_TCP,
296 		.address	= (struct sockaddr *)&rpcb_inaddr_loopback,
297 		.addrsize	= sizeof(rpcb_inaddr_loopback),
298 		.servername	= "localhost",
299 		.program	= &rpcb_program,
300 		.version	= RPCBVERS_2,
301 		.authflavor	= RPC_AUTH_UNIX,
302 		.flags		= RPC_CLNT_CREATE_NOPING,
303 	};
304 	struct rpc_clnt *clnt, *clnt4;
305 	int result = 0;
306 
307 	clnt = rpc_create(&args);
308 	if (IS_ERR(clnt)) {
309 		dprintk("RPC:       failed to create local rpcbind "
310 				"client (errno %ld).\n", PTR_ERR(clnt));
311 		result = PTR_ERR(clnt);
312 		goto out;
313 	}
314 
315 	/*
316 	 * This results in an RPC ping.  On systems running portmapper,
317 	 * the v4 ping will fail.  Proceed anyway, but disallow rpcb
318 	 * v4 upcalls.
319 	 */
320 	clnt4 = rpc_bind_new_program(clnt, &rpcb_program, RPCBVERS_4);
321 	if (IS_ERR(clnt4)) {
322 		dprintk("RPC:       failed to bind second program to "
323 				"rpcbind v4 client (errno %ld).\n",
324 				PTR_ERR(clnt4));
325 		clnt4 = NULL;
326 	}
327 
328 	rpcb_set_local(net, clnt, clnt4, false);
329 
330 out:
331 	return result;
332 }
333 
334 /*
335  * Returns zero on success, otherwise a negative errno value
336  * is returned.
337  */
rpcb_create_local(struct net * net)338 int rpcb_create_local(struct net *net)
339 {
340 	static DEFINE_MUTEX(rpcb_create_local_mutex);
341 	int result = 0;
342 
343 	if (rpcb_get_local(net))
344 		return result;
345 
346 	mutex_lock(&rpcb_create_local_mutex);
347 	if (rpcb_get_local(net))
348 		goto out;
349 
350 	if (rpcb_create_local_unix(net) != 0)
351 		result = rpcb_create_local_net(net);
352 
353 out:
354 	mutex_unlock(&rpcb_create_local_mutex);
355 	return result;
356 }
357 
rpcb_create(struct net * net,const char * nodename,const char * hostname,struct sockaddr * srvaddr,size_t salen,int proto,u32 version)358 static struct rpc_clnt *rpcb_create(struct net *net, const char *nodename,
359 				    const char *hostname,
360 				    struct sockaddr *srvaddr, size_t salen,
361 				    int proto, u32 version)
362 {
363 	struct rpc_create_args args = {
364 		.net		= net,
365 		.protocol	= proto,
366 		.address	= srvaddr,
367 		.addrsize	= salen,
368 		.servername	= hostname,
369 		.nodename	= nodename,
370 		.program	= &rpcb_program,
371 		.version	= version,
372 		.authflavor	= RPC_AUTH_UNIX,
373 		.flags		= (RPC_CLNT_CREATE_NOPING |
374 					RPC_CLNT_CREATE_NONPRIVPORT),
375 	};
376 
377 	switch (srvaddr->sa_family) {
378 	case AF_INET:
379 		((struct sockaddr_in *)srvaddr)->sin_port = htons(RPCBIND_PORT);
380 		break;
381 	case AF_INET6:
382 		((struct sockaddr_in6 *)srvaddr)->sin6_port = htons(RPCBIND_PORT);
383 		break;
384 	default:
385 		return ERR_PTR(-EAFNOSUPPORT);
386 	}
387 
388 	return rpc_create(&args);
389 }
390 
rpcb_register_call(struct sunrpc_net * sn,struct rpc_clnt * clnt,struct rpc_message * msg,bool is_set)391 static int rpcb_register_call(struct sunrpc_net *sn, struct rpc_clnt *clnt, struct rpc_message *msg, bool is_set)
392 {
393 	int flags = RPC_TASK_NOCONNECT;
394 	int error, result = 0;
395 
396 	if (is_set || !sn->rpcb_is_af_local)
397 		flags = RPC_TASK_SOFTCONN;
398 	msg->rpc_resp = &result;
399 
400 	error = rpc_call_sync(clnt, msg, flags);
401 	if (error < 0) {
402 		dprintk("RPC:       failed to contact local rpcbind "
403 				"server (errno %d).\n", -error);
404 		return error;
405 	}
406 
407 	if (!result)
408 		return -EACCES;
409 	return 0;
410 }
411 
412 /**
413  * rpcb_register - set or unset a port registration with the local rpcbind svc
414  * @net: target network namespace
415  * @prog: RPC program number to bind
416  * @vers: RPC version number to bind
417  * @prot: transport protocol to register
418  * @port: port value to register
419  *
420  * Returns zero if the registration request was dispatched successfully
421  * and the rpcbind daemon returned success.  Otherwise, returns an errno
422  * value that reflects the nature of the error (request could not be
423  * dispatched, timed out, or rpcbind returned an error).
424  *
425  * RPC services invoke this function to advertise their contact
426  * information via the system's rpcbind daemon.  RPC services
427  * invoke this function once for each [program, version, transport]
428  * tuple they wish to advertise.
429  *
430  * Callers may also unregister RPC services that are no longer
431  * available by setting the passed-in port to zero.  This removes
432  * all registered transports for [program, version] from the local
433  * rpcbind database.
434  *
435  * This function uses rpcbind protocol version 2 to contact the
436  * local rpcbind daemon.
437  *
438  * Registration works over both AF_INET and AF_INET6, and services
439  * registered via this function are advertised as available for any
440  * address.  If the local rpcbind daemon is listening on AF_INET6,
441  * services registered via this function will be advertised on
442  * IN6ADDR_ANY (ie available for all AF_INET and AF_INET6
443  * addresses).
444  */
rpcb_register(struct net * net,u32 prog,u32 vers,int prot,unsigned short port)445 int rpcb_register(struct net *net, u32 prog, u32 vers, int prot, unsigned short port)
446 {
447 	struct rpcbind_args map = {
448 		.r_prog		= prog,
449 		.r_vers		= vers,
450 		.r_prot		= prot,
451 		.r_port		= port,
452 	};
453 	struct rpc_message msg = {
454 		.rpc_argp	= &map,
455 	};
456 	struct sunrpc_net *sn = net_generic(net, sunrpc_net_id);
457 	bool is_set = false;
458 
459 	dprintk("RPC:       %sregistering (%u, %u, %d, %u) with local "
460 			"rpcbind\n", (port ? "" : "un"),
461 			prog, vers, prot, port);
462 
463 	msg.rpc_proc = &rpcb_procedures2[RPCBPROC_UNSET];
464 	if (port != 0) {
465 		msg.rpc_proc = &rpcb_procedures2[RPCBPROC_SET];
466 		is_set = true;
467 	}
468 
469 	return rpcb_register_call(sn, sn->rpcb_local_clnt, &msg, is_set);
470 }
471 
472 /*
473  * Fill in AF_INET family-specific arguments to register
474  */
rpcb_register_inet4(struct sunrpc_net * sn,const struct sockaddr * sap,struct rpc_message * msg)475 static int rpcb_register_inet4(struct sunrpc_net *sn,
476 			       const struct sockaddr *sap,
477 			       struct rpc_message *msg)
478 {
479 	const struct sockaddr_in *sin = (const struct sockaddr_in *)sap;
480 	struct rpcbind_args *map = msg->rpc_argp;
481 	unsigned short port = ntohs(sin->sin_port);
482 	bool is_set = false;
483 	int result;
484 
485 	map->r_addr = rpc_sockaddr2uaddr(sap, GFP_KERNEL);
486 
487 	dprintk("RPC:       %sregistering [%u, %u, %s, '%s'] with "
488 		"local rpcbind\n", (port ? "" : "un"),
489 			map->r_prog, map->r_vers,
490 			map->r_addr, map->r_netid);
491 
492 	msg->rpc_proc = &rpcb_procedures4[RPCBPROC_UNSET];
493 	if (port != 0) {
494 		msg->rpc_proc = &rpcb_procedures4[RPCBPROC_SET];
495 		is_set = true;
496 	}
497 
498 	result = rpcb_register_call(sn, sn->rpcb_local_clnt4, msg, is_set);
499 	kfree(map->r_addr);
500 	return result;
501 }
502 
503 /*
504  * Fill in AF_INET6 family-specific arguments to register
505  */
rpcb_register_inet6(struct sunrpc_net * sn,const struct sockaddr * sap,struct rpc_message * msg)506 static int rpcb_register_inet6(struct sunrpc_net *sn,
507 			       const struct sockaddr *sap,
508 			       struct rpc_message *msg)
509 {
510 	const struct sockaddr_in6 *sin6 = (const struct sockaddr_in6 *)sap;
511 	struct rpcbind_args *map = msg->rpc_argp;
512 	unsigned short port = ntohs(sin6->sin6_port);
513 	bool is_set = false;
514 	int result;
515 
516 	map->r_addr = rpc_sockaddr2uaddr(sap, GFP_KERNEL);
517 
518 	dprintk("RPC:       %sregistering [%u, %u, %s, '%s'] with "
519 		"local rpcbind\n", (port ? "" : "un"),
520 			map->r_prog, map->r_vers,
521 			map->r_addr, map->r_netid);
522 
523 	msg->rpc_proc = &rpcb_procedures4[RPCBPROC_UNSET];
524 	if (port != 0) {
525 		msg->rpc_proc = &rpcb_procedures4[RPCBPROC_SET];
526 		is_set = true;
527 	}
528 
529 	result = rpcb_register_call(sn, sn->rpcb_local_clnt4, msg, is_set);
530 	kfree(map->r_addr);
531 	return result;
532 }
533 
rpcb_unregister_all_protofamilies(struct sunrpc_net * sn,struct rpc_message * msg)534 static int rpcb_unregister_all_protofamilies(struct sunrpc_net *sn,
535 					     struct rpc_message *msg)
536 {
537 	struct rpcbind_args *map = msg->rpc_argp;
538 
539 	dprintk("RPC:       unregistering [%u, %u, '%s'] with "
540 		"local rpcbind\n",
541 			map->r_prog, map->r_vers, map->r_netid);
542 
543 	map->r_addr = "";
544 	msg->rpc_proc = &rpcb_procedures4[RPCBPROC_UNSET];
545 
546 	return rpcb_register_call(sn, sn->rpcb_local_clnt4, msg, false);
547 }
548 
549 /**
550  * rpcb_v4_register - set or unset a port registration with the local rpcbind
551  * @net: target network namespace
552  * @program: RPC program number of service to (un)register
553  * @version: RPC version number of service to (un)register
554  * @address: address family, IP address, and port to (un)register
555  * @netid: netid of transport protocol to (un)register
556  *
557  * Returns zero if the registration request was dispatched successfully
558  * and the rpcbind daemon returned success.  Otherwise, returns an errno
559  * value that reflects the nature of the error (request could not be
560  * dispatched, timed out, or rpcbind returned an error).
561  *
562  * RPC services invoke this function to advertise their contact
563  * information via the system's rpcbind daemon.  RPC services
564  * invoke this function once for each [program, version, address,
565  * netid] tuple they wish to advertise.
566  *
567  * Callers may also unregister RPC services that are registered at a
568  * specific address by setting the port number in @address to zero.
569  * They may unregister all registered protocol families at once for
570  * a service by passing a NULL @address argument.  If @netid is ""
571  * then all netids for [program, version, address] are unregistered.
572  *
573  * This function uses rpcbind protocol version 4 to contact the
574  * local rpcbind daemon.  The local rpcbind daemon must support
575  * version 4 of the rpcbind protocol in order for these functions
576  * to register a service successfully.
577  *
578  * Supported netids include "udp" and "tcp" for UDP and TCP over
579  * IPv4, and "udp6" and "tcp6" for UDP and TCP over IPv6,
580  * respectively.
581  *
582  * The contents of @address determine the address family and the
583  * port to be registered.  The usual practice is to pass INADDR_ANY
584  * as the raw address, but specifying a non-zero address is also
585  * supported by this API if the caller wishes to advertise an RPC
586  * service on a specific network interface.
587  *
588  * Note that passing in INADDR_ANY does not create the same service
589  * registration as IN6ADDR_ANY.  The former advertises an RPC
590  * service on any IPv4 address, but not on IPv6.  The latter
591  * advertises the service on all IPv4 and IPv6 addresses.
592  */
rpcb_v4_register(struct net * net,const u32 program,const u32 version,const struct sockaddr * address,const char * netid)593 int rpcb_v4_register(struct net *net, const u32 program, const u32 version,
594 		     const struct sockaddr *address, const char *netid)
595 {
596 	struct rpcbind_args map = {
597 		.r_prog		= program,
598 		.r_vers		= version,
599 		.r_netid	= netid,
600 		.r_owner	= RPCB_OWNER_STRING,
601 	};
602 	struct rpc_message msg = {
603 		.rpc_argp	= &map,
604 	};
605 	struct sunrpc_net *sn = net_generic(net, sunrpc_net_id);
606 
607 	if (sn->rpcb_local_clnt4 == NULL)
608 		return -EPROTONOSUPPORT;
609 
610 	if (address == NULL)
611 		return rpcb_unregister_all_protofamilies(sn, &msg);
612 
613 	switch (address->sa_family) {
614 	case AF_INET:
615 		return rpcb_register_inet4(sn, address, &msg);
616 	case AF_INET6:
617 		return rpcb_register_inet6(sn, address, &msg);
618 	}
619 
620 	return -EAFNOSUPPORT;
621 }
622 
rpcb_call_async(struct rpc_clnt * rpcb_clnt,struct rpcbind_args * map,const struct rpc_procinfo * proc)623 static struct rpc_task *rpcb_call_async(struct rpc_clnt *rpcb_clnt,
624 		struct rpcbind_args *map, const struct rpc_procinfo *proc)
625 {
626 	struct rpc_message msg = {
627 		.rpc_proc = proc,
628 		.rpc_argp = map,
629 		.rpc_resp = map,
630 	};
631 	struct rpc_task_setup task_setup_data = {
632 		.rpc_client = rpcb_clnt,
633 		.rpc_message = &msg,
634 		.callback_ops = &rpcb_getport_ops,
635 		.callback_data = map,
636 		.flags = RPC_TASK_ASYNC | RPC_TASK_SOFTCONN,
637 	};
638 
639 	return rpc_run_task(&task_setup_data);
640 }
641 
642 /*
643  * In the case where rpc clients have been cloned, we want to make
644  * sure that we use the program number/version etc of the actual
645  * owner of the xprt. To do so, we walk back up the tree of parents
646  * to find whoever created the transport and/or whoever has the
647  * autobind flag set.
648  */
rpcb_find_transport_owner(struct rpc_clnt * clnt)649 static struct rpc_clnt *rpcb_find_transport_owner(struct rpc_clnt *clnt)
650 {
651 	struct rpc_clnt *parent = clnt->cl_parent;
652 	struct rpc_xprt_switch *xps = rcu_access_pointer(clnt->cl_xpi.xpi_xpswitch);
653 
654 	while (parent != clnt) {
655 		if (rcu_access_pointer(parent->cl_xpi.xpi_xpswitch) != xps)
656 			break;
657 		if (clnt->cl_autobind)
658 			break;
659 		clnt = parent;
660 		parent = parent->cl_parent;
661 	}
662 	return clnt;
663 }
664 
665 /**
666  * rpcb_getport_async - obtain the port for a given RPC service on a given host
667  * @task: task that is waiting for portmapper request
668  *
669  * This one can be called for an ongoing RPC request, and can be used in
670  * an async (rpciod) context.
671  */
rpcb_getport_async(struct rpc_task * task)672 void rpcb_getport_async(struct rpc_task *task)
673 {
674 	struct rpc_clnt *clnt;
675 	const struct rpc_procinfo *proc;
676 	u32 bind_version;
677 	struct rpc_xprt *xprt;
678 	struct rpc_clnt	*rpcb_clnt;
679 	struct rpcbind_args *map;
680 	struct rpc_task	*child;
681 	struct sockaddr_storage addr;
682 	struct sockaddr *sap = (struct sockaddr *)&addr;
683 	size_t salen;
684 	int status;
685 
686 	rcu_read_lock();
687 	clnt = rpcb_find_transport_owner(task->tk_client);
688 	rcu_read_unlock();
689 	xprt = xprt_get(task->tk_xprt);
690 
691 	dprintk("RPC: %5u %s(%s, %u, %u, %d)\n",
692 		task->tk_pid, __func__,
693 		xprt->servername, clnt->cl_prog, clnt->cl_vers, xprt->prot);
694 
695 	/* Put self on the wait queue to ensure we get notified if
696 	 * some other task is already attempting to bind the port */
697 	rpc_sleep_on(&xprt->binding, task, NULL);
698 
699 	if (xprt_test_and_set_binding(xprt)) {
700 		dprintk("RPC: %5u %s: waiting for another binder\n",
701 			task->tk_pid, __func__);
702 		xprt_put(xprt);
703 		return;
704 	}
705 
706 	/* Someone else may have bound if we slept */
707 	if (xprt_bound(xprt)) {
708 		status = 0;
709 		dprintk("RPC: %5u %s: already bound\n",
710 			task->tk_pid, __func__);
711 		goto bailout_nofree;
712 	}
713 
714 	/* Parent transport's destination address */
715 	salen = rpc_peeraddr(clnt, sap, sizeof(addr));
716 
717 	/* Don't ever use rpcbind v2 for AF_INET6 requests */
718 	switch (sap->sa_family) {
719 	case AF_INET:
720 		proc = rpcb_next_version[xprt->bind_index].rpc_proc;
721 		bind_version = rpcb_next_version[xprt->bind_index].rpc_vers;
722 		break;
723 	case AF_INET6:
724 		proc = rpcb_next_version6[xprt->bind_index].rpc_proc;
725 		bind_version = rpcb_next_version6[xprt->bind_index].rpc_vers;
726 		break;
727 	default:
728 		status = -EAFNOSUPPORT;
729 		dprintk("RPC: %5u %s: bad address family\n",
730 				task->tk_pid, __func__);
731 		goto bailout_nofree;
732 	}
733 	if (proc == NULL) {
734 		xprt->bind_index = 0;
735 		status = -EPFNOSUPPORT;
736 		dprintk("RPC: %5u %s: no more getport versions available\n",
737 			task->tk_pid, __func__);
738 		goto bailout_nofree;
739 	}
740 
741 	dprintk("RPC: %5u %s: trying rpcbind version %u\n",
742 		task->tk_pid, __func__, bind_version);
743 
744 	rpcb_clnt = rpcb_create(xprt->xprt_net,
745 				clnt->cl_nodename,
746 				xprt->servername, sap, salen,
747 				xprt->prot, bind_version);
748 	if (IS_ERR(rpcb_clnt)) {
749 		status = PTR_ERR(rpcb_clnt);
750 		dprintk("RPC: %5u %s: rpcb_create failed, error %ld\n",
751 			task->tk_pid, __func__, PTR_ERR(rpcb_clnt));
752 		goto bailout_nofree;
753 	}
754 
755 	map = kzalloc(sizeof(struct rpcbind_args), GFP_ATOMIC);
756 	if (!map) {
757 		status = -ENOMEM;
758 		dprintk("RPC: %5u %s: no memory available\n",
759 			task->tk_pid, __func__);
760 		goto bailout_release_client;
761 	}
762 	map->r_prog = clnt->cl_prog;
763 	map->r_vers = clnt->cl_vers;
764 	map->r_prot = xprt->prot;
765 	map->r_port = 0;
766 	map->r_xprt = xprt;
767 	map->r_status = -EIO;
768 
769 	switch (bind_version) {
770 	case RPCBVERS_4:
771 	case RPCBVERS_3:
772 		map->r_netid = xprt->address_strings[RPC_DISPLAY_NETID];
773 		map->r_addr = rpc_sockaddr2uaddr(sap, GFP_ATOMIC);
774 		map->r_owner = "";
775 		break;
776 	case RPCBVERS_2:
777 		map->r_addr = NULL;
778 		break;
779 	default:
780 		BUG();
781 	}
782 
783 	child = rpcb_call_async(rpcb_clnt, map, proc);
784 	rpc_release_client(rpcb_clnt);
785 	if (IS_ERR(child)) {
786 		/* rpcb_map_release() has freed the arguments */
787 		dprintk("RPC: %5u %s: rpc_run_task failed\n",
788 			task->tk_pid, __func__);
789 		return;
790 	}
791 
792 	xprt->stat.bind_count++;
793 	rpc_put_task(child);
794 	return;
795 
796 bailout_release_client:
797 	rpc_release_client(rpcb_clnt);
798 bailout_nofree:
799 	rpcb_wake_rpcbind_waiters(xprt, status);
800 	task->tk_status = status;
801 	xprt_put(xprt);
802 }
803 EXPORT_SYMBOL_GPL(rpcb_getport_async);
804 
805 /*
806  * Rpcbind child task calls this callback via tk_exit.
807  */
rpcb_getport_done(struct rpc_task * child,void * data)808 static void rpcb_getport_done(struct rpc_task *child, void *data)
809 {
810 	struct rpcbind_args *map = data;
811 	struct rpc_xprt *xprt = map->r_xprt;
812 	int status = child->tk_status;
813 
814 	/* Garbage reply: retry with a lesser rpcbind version */
815 	if (status == -EIO)
816 		status = -EPROTONOSUPPORT;
817 
818 	/* rpcbind server doesn't support this rpcbind protocol version */
819 	if (status == -EPROTONOSUPPORT)
820 		xprt->bind_index++;
821 
822 	if (status < 0) {
823 		/* rpcbind server not available on remote host? */
824 		xprt->ops->set_port(xprt, 0);
825 	} else if (map->r_port == 0) {
826 		/* Requested RPC service wasn't registered on remote host */
827 		xprt->ops->set_port(xprt, 0);
828 		status = -EACCES;
829 	} else {
830 		/* Succeeded */
831 		xprt->ops->set_port(xprt, map->r_port);
832 		xprt_set_bound(xprt);
833 		status = 0;
834 	}
835 
836 	dprintk("RPC: %5u rpcb_getport_done(status %d, port %u)\n",
837 			child->tk_pid, status, map->r_port);
838 
839 	map->r_status = status;
840 }
841 
842 /*
843  * XDR functions for rpcbind
844  */
845 
rpcb_enc_mapping(struct rpc_rqst * req,struct xdr_stream * xdr,const void * data)846 static void rpcb_enc_mapping(struct rpc_rqst *req, struct xdr_stream *xdr,
847 			     const void *data)
848 {
849 	const struct rpcbind_args *rpcb = data;
850 	__be32 *p;
851 
852 	dprintk("RPC: %5u encoding PMAP_%s call (%u, %u, %d, %u)\n",
853 			req->rq_task->tk_pid,
854 			req->rq_task->tk_msg.rpc_proc->p_name,
855 			rpcb->r_prog, rpcb->r_vers, rpcb->r_prot, rpcb->r_port);
856 
857 	p = xdr_reserve_space(xdr, RPCB_mappingargs_sz << 2);
858 	*p++ = cpu_to_be32(rpcb->r_prog);
859 	*p++ = cpu_to_be32(rpcb->r_vers);
860 	*p++ = cpu_to_be32(rpcb->r_prot);
861 	*p   = cpu_to_be32(rpcb->r_port);
862 }
863 
rpcb_dec_getport(struct rpc_rqst * req,struct xdr_stream * xdr,void * data)864 static int rpcb_dec_getport(struct rpc_rqst *req, struct xdr_stream *xdr,
865 			    void *data)
866 {
867 	struct rpcbind_args *rpcb = data;
868 	unsigned long port;
869 	__be32 *p;
870 
871 	rpcb->r_port = 0;
872 
873 	p = xdr_inline_decode(xdr, 4);
874 	if (unlikely(p == NULL))
875 		return -EIO;
876 
877 	port = be32_to_cpup(p);
878 	dprintk("RPC: %5u PMAP_%s result: %lu\n", req->rq_task->tk_pid,
879 			req->rq_task->tk_msg.rpc_proc->p_name, port);
880 	if (unlikely(port > USHRT_MAX))
881 		return -EIO;
882 
883 	rpcb->r_port = port;
884 	return 0;
885 }
886 
rpcb_dec_set(struct rpc_rqst * req,struct xdr_stream * xdr,void * data)887 static int rpcb_dec_set(struct rpc_rqst *req, struct xdr_stream *xdr,
888 			void *data)
889 {
890 	unsigned int *boolp = data;
891 	__be32 *p;
892 
893 	p = xdr_inline_decode(xdr, 4);
894 	if (unlikely(p == NULL))
895 		return -EIO;
896 
897 	*boolp = 0;
898 	if (*p != xdr_zero)
899 		*boolp = 1;
900 
901 	dprintk("RPC: %5u RPCB_%s call %s\n",
902 			req->rq_task->tk_pid,
903 			req->rq_task->tk_msg.rpc_proc->p_name,
904 			(*boolp ? "succeeded" : "failed"));
905 	return 0;
906 }
907 
encode_rpcb_string(struct xdr_stream * xdr,const char * string,const u32 maxstrlen)908 static void encode_rpcb_string(struct xdr_stream *xdr, const char *string,
909 			       const u32 maxstrlen)
910 {
911 	__be32 *p;
912 	u32 len;
913 
914 	len = strlen(string);
915 	WARN_ON_ONCE(len > maxstrlen);
916 	if (len > maxstrlen)
917 		/* truncate and hope for the best */
918 		len = maxstrlen;
919 	p = xdr_reserve_space(xdr, 4 + len);
920 	xdr_encode_opaque(p, string, len);
921 }
922 
rpcb_enc_getaddr(struct rpc_rqst * req,struct xdr_stream * xdr,const void * data)923 static void rpcb_enc_getaddr(struct rpc_rqst *req, struct xdr_stream *xdr,
924 			     const void *data)
925 {
926 	const struct rpcbind_args *rpcb = data;
927 	__be32 *p;
928 
929 	dprintk("RPC: %5u encoding RPCB_%s call (%u, %u, '%s', '%s')\n",
930 			req->rq_task->tk_pid,
931 			req->rq_task->tk_msg.rpc_proc->p_name,
932 			rpcb->r_prog, rpcb->r_vers,
933 			rpcb->r_netid, rpcb->r_addr);
934 
935 	p = xdr_reserve_space(xdr, (RPCB_program_sz + RPCB_version_sz) << 2);
936 	*p++ = cpu_to_be32(rpcb->r_prog);
937 	*p = cpu_to_be32(rpcb->r_vers);
938 
939 	encode_rpcb_string(xdr, rpcb->r_netid, RPCBIND_MAXNETIDLEN);
940 	encode_rpcb_string(xdr, rpcb->r_addr, RPCBIND_MAXUADDRLEN);
941 	encode_rpcb_string(xdr, rpcb->r_owner, RPCB_MAXOWNERLEN);
942 }
943 
rpcb_dec_getaddr(struct rpc_rqst * req,struct xdr_stream * xdr,void * data)944 static int rpcb_dec_getaddr(struct rpc_rqst *req, struct xdr_stream *xdr,
945 			    void *data)
946 {
947 	struct rpcbind_args *rpcb = data;
948 	struct sockaddr_storage address;
949 	struct sockaddr *sap = (struct sockaddr *)&address;
950 	__be32 *p;
951 	u32 len;
952 
953 	rpcb->r_port = 0;
954 
955 	p = xdr_inline_decode(xdr, 4);
956 	if (unlikely(p == NULL))
957 		goto out_fail;
958 	len = be32_to_cpup(p);
959 
960 	/*
961 	 * If the returned universal address is a null string,
962 	 * the requested RPC service was not registered.
963 	 */
964 	if (len == 0) {
965 		dprintk("RPC: %5u RPCB reply: program not registered\n",
966 				req->rq_task->tk_pid);
967 		return 0;
968 	}
969 
970 	if (unlikely(len > RPCBIND_MAXUADDRLEN))
971 		goto out_fail;
972 
973 	p = xdr_inline_decode(xdr, len);
974 	if (unlikely(p == NULL))
975 		goto out_fail;
976 	dprintk("RPC: %5u RPCB_%s reply: %s\n", req->rq_task->tk_pid,
977 			req->rq_task->tk_msg.rpc_proc->p_name, (char *)p);
978 
979 	if (rpc_uaddr2sockaddr(req->rq_xprt->xprt_net, (char *)p, len,
980 				sap, sizeof(address)) == 0)
981 		goto out_fail;
982 	rpcb->r_port = rpc_get_port(sap);
983 
984 	return 0;
985 
986 out_fail:
987 	dprintk("RPC: %5u malformed RPCB_%s reply\n",
988 			req->rq_task->tk_pid,
989 			req->rq_task->tk_msg.rpc_proc->p_name);
990 	return -EIO;
991 }
992 
993 /*
994  * Not all rpcbind procedures described in RFC 1833 are implemented
995  * since the Linux kernel RPC code requires only these.
996  */
997 
998 static const struct rpc_procinfo rpcb_procedures2[] = {
999 	[RPCBPROC_SET] = {
1000 		.p_proc		= RPCBPROC_SET,
1001 		.p_encode	= rpcb_enc_mapping,
1002 		.p_decode	= rpcb_dec_set,
1003 		.p_arglen	= RPCB_mappingargs_sz,
1004 		.p_replen	= RPCB_setres_sz,
1005 		.p_statidx	= RPCBPROC_SET,
1006 		.p_timer	= 0,
1007 		.p_name		= "SET",
1008 	},
1009 	[RPCBPROC_UNSET] = {
1010 		.p_proc		= RPCBPROC_UNSET,
1011 		.p_encode	= rpcb_enc_mapping,
1012 		.p_decode	= rpcb_dec_set,
1013 		.p_arglen	= RPCB_mappingargs_sz,
1014 		.p_replen	= RPCB_setres_sz,
1015 		.p_statidx	= RPCBPROC_UNSET,
1016 		.p_timer	= 0,
1017 		.p_name		= "UNSET",
1018 	},
1019 	[RPCBPROC_GETPORT] = {
1020 		.p_proc		= RPCBPROC_GETPORT,
1021 		.p_encode	= rpcb_enc_mapping,
1022 		.p_decode	= rpcb_dec_getport,
1023 		.p_arglen	= RPCB_mappingargs_sz,
1024 		.p_replen	= RPCB_getportres_sz,
1025 		.p_statidx	= RPCBPROC_GETPORT,
1026 		.p_timer	= 0,
1027 		.p_name		= "GETPORT",
1028 	},
1029 };
1030 
1031 static const struct rpc_procinfo rpcb_procedures3[] = {
1032 	[RPCBPROC_SET] = {
1033 		.p_proc		= RPCBPROC_SET,
1034 		.p_encode	= rpcb_enc_getaddr,
1035 		.p_decode	= rpcb_dec_set,
1036 		.p_arglen	= RPCB_getaddrargs_sz,
1037 		.p_replen	= RPCB_setres_sz,
1038 		.p_statidx	= RPCBPROC_SET,
1039 		.p_timer	= 0,
1040 		.p_name		= "SET",
1041 	},
1042 	[RPCBPROC_UNSET] = {
1043 		.p_proc		= RPCBPROC_UNSET,
1044 		.p_encode	= rpcb_enc_getaddr,
1045 		.p_decode	= rpcb_dec_set,
1046 		.p_arglen	= RPCB_getaddrargs_sz,
1047 		.p_replen	= RPCB_setres_sz,
1048 		.p_statidx	= RPCBPROC_UNSET,
1049 		.p_timer	= 0,
1050 		.p_name		= "UNSET",
1051 	},
1052 	[RPCBPROC_GETADDR] = {
1053 		.p_proc		= RPCBPROC_GETADDR,
1054 		.p_encode	= rpcb_enc_getaddr,
1055 		.p_decode	= rpcb_dec_getaddr,
1056 		.p_arglen	= RPCB_getaddrargs_sz,
1057 		.p_replen	= RPCB_getaddrres_sz,
1058 		.p_statidx	= RPCBPROC_GETADDR,
1059 		.p_timer	= 0,
1060 		.p_name		= "GETADDR",
1061 	},
1062 };
1063 
1064 static const struct rpc_procinfo rpcb_procedures4[] = {
1065 	[RPCBPROC_SET] = {
1066 		.p_proc		= RPCBPROC_SET,
1067 		.p_encode	= rpcb_enc_getaddr,
1068 		.p_decode	= rpcb_dec_set,
1069 		.p_arglen	= RPCB_getaddrargs_sz,
1070 		.p_replen	= RPCB_setres_sz,
1071 		.p_statidx	= RPCBPROC_SET,
1072 		.p_timer	= 0,
1073 		.p_name		= "SET",
1074 	},
1075 	[RPCBPROC_UNSET] = {
1076 		.p_proc		= RPCBPROC_UNSET,
1077 		.p_encode	= rpcb_enc_getaddr,
1078 		.p_decode	= rpcb_dec_set,
1079 		.p_arglen	= RPCB_getaddrargs_sz,
1080 		.p_replen	= RPCB_setres_sz,
1081 		.p_statidx	= RPCBPROC_UNSET,
1082 		.p_timer	= 0,
1083 		.p_name		= "UNSET",
1084 	},
1085 	[RPCBPROC_GETADDR] = {
1086 		.p_proc		= RPCBPROC_GETADDR,
1087 		.p_encode	= rpcb_enc_getaddr,
1088 		.p_decode	= rpcb_dec_getaddr,
1089 		.p_arglen	= RPCB_getaddrargs_sz,
1090 		.p_replen	= RPCB_getaddrres_sz,
1091 		.p_statidx	= RPCBPROC_GETADDR,
1092 		.p_timer	= 0,
1093 		.p_name		= "GETADDR",
1094 	},
1095 };
1096 
1097 static const struct rpcb_info rpcb_next_version[] = {
1098 	{
1099 		.rpc_vers	= RPCBVERS_2,
1100 		.rpc_proc	= &rpcb_procedures2[RPCBPROC_GETPORT],
1101 	},
1102 	{
1103 		.rpc_proc	= NULL,
1104 	},
1105 };
1106 
1107 static const struct rpcb_info rpcb_next_version6[] = {
1108 	{
1109 		.rpc_vers	= RPCBVERS_4,
1110 		.rpc_proc	= &rpcb_procedures4[RPCBPROC_GETADDR],
1111 	},
1112 	{
1113 		.rpc_vers	= RPCBVERS_3,
1114 		.rpc_proc	= &rpcb_procedures3[RPCBPROC_GETADDR],
1115 	},
1116 	{
1117 		.rpc_proc	= NULL,
1118 	},
1119 };
1120 
1121 static unsigned int rpcb_version2_counts[ARRAY_SIZE(rpcb_procedures2)];
1122 static const struct rpc_version rpcb_version2 = {
1123 	.number		= RPCBVERS_2,
1124 	.nrprocs	= ARRAY_SIZE(rpcb_procedures2),
1125 	.procs		= rpcb_procedures2,
1126 	.counts		= rpcb_version2_counts,
1127 };
1128 
1129 static unsigned int rpcb_version3_counts[ARRAY_SIZE(rpcb_procedures3)];
1130 static const struct rpc_version rpcb_version3 = {
1131 	.number		= RPCBVERS_3,
1132 	.nrprocs	= ARRAY_SIZE(rpcb_procedures3),
1133 	.procs		= rpcb_procedures3,
1134 	.counts		= rpcb_version3_counts,
1135 };
1136 
1137 static unsigned int rpcb_version4_counts[ARRAY_SIZE(rpcb_procedures4)];
1138 static const struct rpc_version rpcb_version4 = {
1139 	.number		= RPCBVERS_4,
1140 	.nrprocs	= ARRAY_SIZE(rpcb_procedures4),
1141 	.procs		= rpcb_procedures4,
1142 	.counts		= rpcb_version4_counts,
1143 };
1144 
1145 static const struct rpc_version *rpcb_version[] = {
1146 	NULL,
1147 	NULL,
1148 	&rpcb_version2,
1149 	&rpcb_version3,
1150 	&rpcb_version4
1151 };
1152 
1153 static struct rpc_stat rpcb_stats;
1154 
1155 static const struct rpc_program rpcb_program = {
1156 	.name		= "rpcbind",
1157 	.number		= RPCBIND_PROGRAM,
1158 	.nrvers		= ARRAY_SIZE(rpcb_version),
1159 	.version	= rpcb_version,
1160 	.stats		= &rpcb_stats,
1161 };
1162