1 // SPDX-License-Identifier: GPL-2.0
2 #include <linux/kernel.h>
3 #include <linux/errno.h>
4 #include <linux/fs.h>
5 #include <linux/file.h>
6 #include <linux/mm.h>
7 #include <linux/slab.h>
8 #include <linux/namei.h>
9 #include <linux/io_uring.h>
10 
11 #include <uapi/linux/io_uring.h>
12 
13 #include "../fs/internal.h"
14 
15 #include "io_uring.h"
16 #include "fs.h"
17 
18 struct io_rename {
19 	struct file			*file;
20 	int				old_dfd;
21 	int				new_dfd;
22 	struct filename			*oldpath;
23 	struct filename			*newpath;
24 	int				flags;
25 };
26 
27 struct io_unlink {
28 	struct file			*file;
29 	int				dfd;
30 	int				flags;
31 	struct filename			*filename;
32 };
33 
34 struct io_mkdir {
35 	struct file			*file;
36 	int				dfd;
37 	umode_t				mode;
38 	struct filename			*filename;
39 };
40 
41 struct io_link {
42 	struct file			*file;
43 	int				old_dfd;
44 	int				new_dfd;
45 	struct filename			*oldpath;
46 	struct filename			*newpath;
47 	int				flags;
48 };
49 
io_renameat_prep(struct io_kiocb * req,const struct io_uring_sqe * sqe)50 int io_renameat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe)
51 {
52 	struct io_rename *ren = io_kiocb_to_cmd(req, struct io_rename);
53 	const char __user *oldf, *newf;
54 
55 	if (sqe->buf_index || sqe->splice_fd_in)
56 		return -EINVAL;
57 	if (unlikely(req->flags & REQ_F_FIXED_FILE))
58 		return -EBADF;
59 
60 	ren->old_dfd = READ_ONCE(sqe->fd);
61 	oldf = u64_to_user_ptr(READ_ONCE(sqe->addr));
62 	newf = u64_to_user_ptr(READ_ONCE(sqe->addr2));
63 	ren->new_dfd = READ_ONCE(sqe->len);
64 	ren->flags = READ_ONCE(sqe->rename_flags);
65 
66 	ren->oldpath = getname(oldf);
67 	if (IS_ERR(ren->oldpath))
68 		return PTR_ERR(ren->oldpath);
69 
70 	ren->newpath = getname(newf);
71 	if (IS_ERR(ren->newpath)) {
72 		putname(ren->oldpath);
73 		return PTR_ERR(ren->newpath);
74 	}
75 
76 	req->flags |= REQ_F_NEED_CLEANUP;
77 	return 0;
78 }
79 
io_renameat(struct io_kiocb * req,unsigned int issue_flags)80 int io_renameat(struct io_kiocb *req, unsigned int issue_flags)
81 {
82 	struct io_rename *ren = io_kiocb_to_cmd(req, struct io_rename);
83 	int ret;
84 
85 	if (issue_flags & IO_URING_F_NONBLOCK)
86 		return -EAGAIN;
87 
88 	ret = do_renameat2(ren->old_dfd, ren->oldpath, ren->new_dfd,
89 				ren->newpath, ren->flags);
90 
91 	req->flags &= ~REQ_F_NEED_CLEANUP;
92 	io_req_set_res(req, ret, 0);
93 	return IOU_OK;
94 }
95 
io_renameat_cleanup(struct io_kiocb * req)96 void io_renameat_cleanup(struct io_kiocb *req)
97 {
98 	struct io_rename *ren = io_kiocb_to_cmd(req, struct io_rename);
99 
100 	putname(ren->oldpath);
101 	putname(ren->newpath);
102 }
103 
io_unlinkat_prep(struct io_kiocb * req,const struct io_uring_sqe * sqe)104 int io_unlinkat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe)
105 {
106 	struct io_unlink *un = io_kiocb_to_cmd(req, struct io_unlink);
107 	const char __user *fname;
108 
109 	if (sqe->off || sqe->len || sqe->buf_index || sqe->splice_fd_in)
110 		return -EINVAL;
111 	if (unlikely(req->flags & REQ_F_FIXED_FILE))
112 		return -EBADF;
113 
114 	un->dfd = READ_ONCE(sqe->fd);
115 
116 	un->flags = READ_ONCE(sqe->unlink_flags);
117 	if (un->flags & ~AT_REMOVEDIR)
118 		return -EINVAL;
119 
120 	fname = u64_to_user_ptr(READ_ONCE(sqe->addr));
121 	un->filename = getname(fname);
122 	if (IS_ERR(un->filename))
123 		return PTR_ERR(un->filename);
124 
125 	req->flags |= REQ_F_NEED_CLEANUP;
126 	return 0;
127 }
128 
io_unlinkat(struct io_kiocb * req,unsigned int issue_flags)129 int io_unlinkat(struct io_kiocb *req, unsigned int issue_flags)
130 {
131 	struct io_unlink *un = io_kiocb_to_cmd(req, struct io_unlink);
132 	int ret;
133 
134 	if (issue_flags & IO_URING_F_NONBLOCK)
135 		return -EAGAIN;
136 
137 	if (un->flags & AT_REMOVEDIR)
138 		ret = do_rmdir(un->dfd, un->filename);
139 	else
140 		ret = do_unlinkat(un->dfd, un->filename);
141 
142 	req->flags &= ~REQ_F_NEED_CLEANUP;
143 	io_req_set_res(req, ret, 0);
144 	return IOU_OK;
145 }
146 
io_unlinkat_cleanup(struct io_kiocb * req)147 void io_unlinkat_cleanup(struct io_kiocb *req)
148 {
149 	struct io_unlink *ul = io_kiocb_to_cmd(req, struct io_unlink);
150 
151 	putname(ul->filename);
152 }
153 
io_mkdirat_prep(struct io_kiocb * req,const struct io_uring_sqe * sqe)154 int io_mkdirat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe)
155 {
156 	struct io_mkdir *mkd = io_kiocb_to_cmd(req, struct io_mkdir);
157 	const char __user *fname;
158 
159 	if (sqe->off || sqe->rw_flags || sqe->buf_index || sqe->splice_fd_in)
160 		return -EINVAL;
161 	if (unlikely(req->flags & REQ_F_FIXED_FILE))
162 		return -EBADF;
163 
164 	mkd->dfd = READ_ONCE(sqe->fd);
165 	mkd->mode = READ_ONCE(sqe->len);
166 
167 	fname = u64_to_user_ptr(READ_ONCE(sqe->addr));
168 	mkd->filename = getname(fname);
169 	if (IS_ERR(mkd->filename))
170 		return PTR_ERR(mkd->filename);
171 
172 	req->flags |= REQ_F_NEED_CLEANUP;
173 	return 0;
174 }
175 
io_mkdirat(struct io_kiocb * req,unsigned int issue_flags)176 int io_mkdirat(struct io_kiocb *req, unsigned int issue_flags)
177 {
178 	struct io_mkdir *mkd = io_kiocb_to_cmd(req, struct io_mkdir);
179 	int ret;
180 
181 	if (issue_flags & IO_URING_F_NONBLOCK)
182 		return -EAGAIN;
183 
184 	ret = do_mkdirat(mkd->dfd, mkd->filename, mkd->mode);
185 
186 	req->flags &= ~REQ_F_NEED_CLEANUP;
187 	io_req_set_res(req, ret, 0);
188 	return IOU_OK;
189 }
190 
io_mkdirat_cleanup(struct io_kiocb * req)191 void io_mkdirat_cleanup(struct io_kiocb *req)
192 {
193 	struct io_mkdir *md = io_kiocb_to_cmd(req, struct io_mkdir);
194 
195 	putname(md->filename);
196 }
197 
io_symlinkat_prep(struct io_kiocb * req,const struct io_uring_sqe * sqe)198 int io_symlinkat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe)
199 {
200 	struct io_link *sl = io_kiocb_to_cmd(req, struct io_link);
201 	const char __user *oldpath, *newpath;
202 
203 	if (sqe->len || sqe->rw_flags || sqe->buf_index || sqe->splice_fd_in)
204 		return -EINVAL;
205 	if (unlikely(req->flags & REQ_F_FIXED_FILE))
206 		return -EBADF;
207 
208 	sl->new_dfd = READ_ONCE(sqe->fd);
209 	oldpath = u64_to_user_ptr(READ_ONCE(sqe->addr));
210 	newpath = u64_to_user_ptr(READ_ONCE(sqe->addr2));
211 
212 	sl->oldpath = getname(oldpath);
213 	if (IS_ERR(sl->oldpath))
214 		return PTR_ERR(sl->oldpath);
215 
216 	sl->newpath = getname(newpath);
217 	if (IS_ERR(sl->newpath)) {
218 		putname(sl->oldpath);
219 		return PTR_ERR(sl->newpath);
220 	}
221 
222 	req->flags |= REQ_F_NEED_CLEANUP;
223 	return 0;
224 }
225 
io_symlinkat(struct io_kiocb * req,unsigned int issue_flags)226 int io_symlinkat(struct io_kiocb *req, unsigned int issue_flags)
227 {
228 	struct io_link *sl = io_kiocb_to_cmd(req, struct io_link);
229 	int ret;
230 
231 	if (issue_flags & IO_URING_F_NONBLOCK)
232 		return -EAGAIN;
233 
234 	ret = do_symlinkat(sl->oldpath, sl->new_dfd, sl->newpath);
235 
236 	req->flags &= ~REQ_F_NEED_CLEANUP;
237 	io_req_set_res(req, ret, 0);
238 	return IOU_OK;
239 }
240 
io_linkat_prep(struct io_kiocb * req,const struct io_uring_sqe * sqe)241 int io_linkat_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe)
242 {
243 	struct io_link *lnk = io_kiocb_to_cmd(req, struct io_link);
244 	const char __user *oldf, *newf;
245 
246 	if (sqe->rw_flags || sqe->buf_index || sqe->splice_fd_in)
247 		return -EINVAL;
248 	if (unlikely(req->flags & REQ_F_FIXED_FILE))
249 		return -EBADF;
250 
251 	lnk->old_dfd = READ_ONCE(sqe->fd);
252 	lnk->new_dfd = READ_ONCE(sqe->len);
253 	oldf = u64_to_user_ptr(READ_ONCE(sqe->addr));
254 	newf = u64_to_user_ptr(READ_ONCE(sqe->addr2));
255 	lnk->flags = READ_ONCE(sqe->hardlink_flags);
256 
257 	lnk->oldpath = getname(oldf);
258 	if (IS_ERR(lnk->oldpath))
259 		return PTR_ERR(lnk->oldpath);
260 
261 	lnk->newpath = getname(newf);
262 	if (IS_ERR(lnk->newpath)) {
263 		putname(lnk->oldpath);
264 		return PTR_ERR(lnk->newpath);
265 	}
266 
267 	req->flags |= REQ_F_NEED_CLEANUP;
268 	return 0;
269 }
270 
io_linkat(struct io_kiocb * req,unsigned int issue_flags)271 int io_linkat(struct io_kiocb *req, unsigned int issue_flags)
272 {
273 	struct io_link *lnk = io_kiocb_to_cmd(req, struct io_link);
274 	int ret;
275 
276 	if (issue_flags & IO_URING_F_NONBLOCK)
277 		return -EAGAIN;
278 
279 	ret = do_linkat(lnk->old_dfd, lnk->oldpath, lnk->new_dfd,
280 				lnk->newpath, lnk->flags);
281 
282 	req->flags &= ~REQ_F_NEED_CLEANUP;
283 	io_req_set_res(req, ret, 0);
284 	return IOU_OK;
285 }
286 
io_link_cleanup(struct io_kiocb * req)287 void io_link_cleanup(struct io_kiocb *req)
288 {
289 	struct io_link *sl = io_kiocb_to_cmd(req, struct io_link);
290 
291 	putname(sl->oldpath);
292 	putname(sl->newpath);
293 }
294