xref: /freebsd/sys/fs/nfsclient/nfs_clport.c (revision 076ad2f8)
1 /*-
2  * Copyright (c) 1989, 1993
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * This code is derived from software contributed to Berkeley by
6  * Rick Macklem at The University of Guelph.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  * 1. Redistributions of source code must retain the above copyright
12  *    notice, this list of conditions and the following disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  *    notice, this list of conditions and the following disclaimer in the
15  *    documentation and/or other materials provided with the distribution.
16  * 3. Neither the name of the University nor the names of its contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  *
32  */
33 
34 #include <sys/cdefs.h>
35 __FBSDID("$FreeBSD$");
36 
37 #include "opt_inet.h"
38 #include "opt_inet6.h"
39 
40 #include <sys/capsicum.h>
41 
42 /*
43  * generally, I don't like #includes inside .h files, but it seems to
44  * be the easiest way to handle the port.
45  */
46 #include <sys/fail.h>
47 #include <sys/hash.h>
48 #include <sys/sysctl.h>
49 #include <fs/nfs/nfsport.h>
50 #include <netinet/in_fib.h>
51 #include <netinet/if_ether.h>
52 #include <netinet6/ip6_var.h>
53 #include <net/if_types.h>
54 
55 #include <fs/nfsclient/nfs_kdtrace.h>
56 
57 #ifdef KDTRACE_HOOKS
58 dtrace_nfsclient_attrcache_flush_probe_func_t
59 		dtrace_nfscl_attrcache_flush_done_probe;
60 uint32_t	nfscl_attrcache_flush_done_id;
61 
62 dtrace_nfsclient_attrcache_get_hit_probe_func_t
63 		dtrace_nfscl_attrcache_get_hit_probe;
64 uint32_t	nfscl_attrcache_get_hit_id;
65 
66 dtrace_nfsclient_attrcache_get_miss_probe_func_t
67 		dtrace_nfscl_attrcache_get_miss_probe;
68 uint32_t	nfscl_attrcache_get_miss_id;
69 
70 dtrace_nfsclient_attrcache_load_probe_func_t
71 		dtrace_nfscl_attrcache_load_done_probe;
72 uint32_t	nfscl_attrcache_load_done_id;
73 #endif /* !KDTRACE_HOOKS */
74 
75 extern u_int32_t newnfs_true, newnfs_false, newnfs_xdrneg1;
76 extern struct vop_vector newnfs_vnodeops;
77 extern struct vop_vector newnfs_fifoops;
78 extern uma_zone_t newnfsnode_zone;
79 extern struct buf_ops buf_ops_newnfs;
80 extern int ncl_pbuf_freecnt;
81 extern short nfsv4_cbport;
82 extern int nfscl_enablecallb;
83 extern int nfs_numnfscbd;
84 extern int nfscl_inited;
85 struct mtx ncl_iod_mutex;
86 NFSDLOCKMUTEX;
87 
88 extern void (*ncl_call_invalcaches)(struct vnode *);
89 
90 SYSCTL_DECL(_vfs_nfs);
91 static int ncl_fileid_maxwarnings = 10;
92 SYSCTL_INT(_vfs_nfs, OID_AUTO, fileid_maxwarnings, CTLFLAG_RWTUN,
93     &ncl_fileid_maxwarnings, 0,
94     "Limit fileid corruption warnings; 0 is off; -1 is unlimited");
95 static volatile int ncl_fileid_nwarnings;
96 
97 static void nfscl_warn_fileid(struct nfsmount *, struct nfsvattr *,
98     struct nfsvattr *);
99 
100 /*
101  * Comparison function for vfs_hash functions.
102  */
103 int
104 newnfs_vncmpf(struct vnode *vp, void *arg)
105 {
106 	struct nfsfh *nfhp = (struct nfsfh *)arg;
107 	struct nfsnode *np = VTONFS(vp);
108 
109 	if (np->n_fhp->nfh_len != nfhp->nfh_len ||
110 	    NFSBCMP(np->n_fhp->nfh_fh, nfhp->nfh_fh, nfhp->nfh_len))
111 		return (1);
112 	return (0);
113 }
114 
115 /*
116  * Look up a vnode/nfsnode by file handle.
117  * Callers must check for mount points!!
118  * In all cases, a pointer to a
119  * nfsnode structure is returned.
120  * This variant takes a "struct nfsfh *" as second argument and uses
121  * that structure up, either by hanging off the nfsnode or FREEing it.
122  */
123 int
124 nfscl_nget(struct mount *mntp, struct vnode *dvp, struct nfsfh *nfhp,
125     struct componentname *cnp, struct thread *td, struct nfsnode **npp,
126     void *stuff, int lkflags)
127 {
128 	struct nfsnode *np, *dnp;
129 	struct vnode *vp, *nvp;
130 	struct nfsv4node *newd, *oldd;
131 	int error;
132 	u_int hash;
133 	struct nfsmount *nmp;
134 
135 	nmp = VFSTONFS(mntp);
136 	dnp = VTONFS(dvp);
137 	*npp = NULL;
138 
139 	hash = fnv_32_buf(nfhp->nfh_fh, nfhp->nfh_len, FNV1_32_INIT);
140 
141 	error = vfs_hash_get(mntp, hash, lkflags,
142 	    td, &nvp, newnfs_vncmpf, nfhp);
143 	if (error == 0 && nvp != NULL) {
144 		/*
145 		 * I believe there is a slight chance that vgonel() could
146 		 * get called on this vnode between when NFSVOPLOCK() drops
147 		 * the VI_LOCK() and vget() acquires it again, so that it
148 		 * hasn't yet had v_usecount incremented. If this were to
149 		 * happen, the VI_DOOMED flag would be set, so check for
150 		 * that here. Since we now have the v_usecount incremented,
151 		 * we should be ok until we vrele() it, if the VI_DOOMED
152 		 * flag isn't set now.
153 		 */
154 		VI_LOCK(nvp);
155 		if ((nvp->v_iflag & VI_DOOMED)) {
156 			VI_UNLOCK(nvp);
157 			vrele(nvp);
158 			error = ENOENT;
159 		} else {
160 			VI_UNLOCK(nvp);
161 		}
162 	}
163 	if (error) {
164 		FREE((caddr_t)nfhp, M_NFSFH);
165 		return (error);
166 	}
167 	if (nvp != NULL) {
168 		np = VTONFS(nvp);
169 		/*
170 		 * For NFSv4, check to see if it is the same name and
171 		 * replace the name, if it is different.
172 		 */
173 		oldd = newd = NULL;
174 		if ((nmp->nm_flag & NFSMNT_NFSV4) && np->n_v4 != NULL &&
175 		    nvp->v_type == VREG &&
176 		    (np->n_v4->n4_namelen != cnp->cn_namelen ||
177 		     NFSBCMP(cnp->cn_nameptr, NFS4NODENAME(np->n_v4),
178 		     cnp->cn_namelen) ||
179 		     dnp->n_fhp->nfh_len != np->n_v4->n4_fhlen ||
180 		     NFSBCMP(dnp->n_fhp->nfh_fh, np->n_v4->n4_data,
181 		     dnp->n_fhp->nfh_len))) {
182 		    MALLOC(newd, struct nfsv4node *,
183 			sizeof (struct nfsv4node) + dnp->n_fhp->nfh_len +
184 			+ cnp->cn_namelen - 1, M_NFSV4NODE, M_WAITOK);
185 		    NFSLOCKNODE(np);
186 		    if (newd != NULL && np->n_v4 != NULL && nvp->v_type == VREG
187 			&& (np->n_v4->n4_namelen != cnp->cn_namelen ||
188 			 NFSBCMP(cnp->cn_nameptr, NFS4NODENAME(np->n_v4),
189 			 cnp->cn_namelen) ||
190 			 dnp->n_fhp->nfh_len != np->n_v4->n4_fhlen ||
191 			 NFSBCMP(dnp->n_fhp->nfh_fh, np->n_v4->n4_data,
192 			 dnp->n_fhp->nfh_len))) {
193 			oldd = np->n_v4;
194 			np->n_v4 = newd;
195 			newd = NULL;
196 			np->n_v4->n4_fhlen = dnp->n_fhp->nfh_len;
197 			np->n_v4->n4_namelen = cnp->cn_namelen;
198 			NFSBCOPY(dnp->n_fhp->nfh_fh, np->n_v4->n4_data,
199 			    dnp->n_fhp->nfh_len);
200 			NFSBCOPY(cnp->cn_nameptr, NFS4NODENAME(np->n_v4),
201 			    cnp->cn_namelen);
202 		    }
203 		    NFSUNLOCKNODE(np);
204 		}
205 		if (newd != NULL)
206 			FREE((caddr_t)newd, M_NFSV4NODE);
207 		if (oldd != NULL)
208 			FREE((caddr_t)oldd, M_NFSV4NODE);
209 		*npp = np;
210 		FREE((caddr_t)nfhp, M_NFSFH);
211 		return (0);
212 	}
213 	np = uma_zalloc(newnfsnode_zone, M_WAITOK | M_ZERO);
214 
215 	error = getnewvnode(nfs_vnode_tag, mntp, &newnfs_vnodeops, &nvp);
216 	if (error) {
217 		uma_zfree(newnfsnode_zone, np);
218 		FREE((caddr_t)nfhp, M_NFSFH);
219 		return (error);
220 	}
221 	vp = nvp;
222 	KASSERT(vp->v_bufobj.bo_bsize != 0, ("nfscl_nget: bo_bsize == 0"));
223 	vp->v_bufobj.bo_ops = &buf_ops_newnfs;
224 	vp->v_data = np;
225 	np->n_vnode = vp;
226 	/*
227 	 * Initialize the mutex even if the vnode is going to be a loser.
228 	 * This simplifies the logic in reclaim, which can then unconditionally
229 	 * destroy the mutex (in the case of the loser, or if hash_insert
230 	 * happened to return an error no special casing is needed).
231 	 */
232 	mtx_init(&np->n_mtx, "NEWNFSnode lock", NULL, MTX_DEF | MTX_DUPOK);
233 
234 	/*
235 	 * Are we getting the root? If so, make sure the vnode flags
236 	 * are correct
237 	 */
238 	if ((nfhp->nfh_len == nmp->nm_fhsize) &&
239 	    !bcmp(nfhp->nfh_fh, nmp->nm_fh, nfhp->nfh_len)) {
240 		if (vp->v_type == VNON)
241 			vp->v_type = VDIR;
242 		vp->v_vflag |= VV_ROOT;
243 	}
244 
245 	np->n_fhp = nfhp;
246 	/*
247 	 * For NFSv4, we have to attach the directory file handle and
248 	 * file name, so that Open Ops can be done later.
249 	 */
250 	if (nmp->nm_flag & NFSMNT_NFSV4) {
251 		MALLOC(np->n_v4, struct nfsv4node *, sizeof (struct nfsv4node)
252 		    + dnp->n_fhp->nfh_len + cnp->cn_namelen - 1, M_NFSV4NODE,
253 		    M_WAITOK);
254 		np->n_v4->n4_fhlen = dnp->n_fhp->nfh_len;
255 		np->n_v4->n4_namelen = cnp->cn_namelen;
256 		NFSBCOPY(dnp->n_fhp->nfh_fh, np->n_v4->n4_data,
257 		    dnp->n_fhp->nfh_len);
258 		NFSBCOPY(cnp->cn_nameptr, NFS4NODENAME(np->n_v4),
259 		    cnp->cn_namelen);
260 	} else {
261 		np->n_v4 = NULL;
262 	}
263 
264 	/*
265 	 * NFS supports recursive and shared locking.
266 	 */
267 	lockmgr(vp->v_vnlock, LK_EXCLUSIVE | LK_NOWITNESS, NULL);
268 	VN_LOCK_AREC(vp);
269 	VN_LOCK_ASHARE(vp);
270 	error = insmntque(vp, mntp);
271 	if (error != 0) {
272 		*npp = NULL;
273 		mtx_destroy(&np->n_mtx);
274 		FREE((caddr_t)nfhp, M_NFSFH);
275 		if (np->n_v4 != NULL)
276 			FREE((caddr_t)np->n_v4, M_NFSV4NODE);
277 		uma_zfree(newnfsnode_zone, np);
278 		return (error);
279 	}
280 	error = vfs_hash_insert(vp, hash, lkflags,
281 	    td, &nvp, newnfs_vncmpf, nfhp);
282 	if (error)
283 		return (error);
284 	if (nvp != NULL) {
285 		*npp = VTONFS(nvp);
286 		/* vfs_hash_insert() vput()'s the losing vnode */
287 		return (0);
288 	}
289 	*npp = np;
290 
291 	return (0);
292 }
293 
294 /*
295  * Another variant of nfs_nget(). This one is only used by reopen. It
296  * takes almost the same args as nfs_nget(), but only succeeds if an entry
297  * exists in the cache. (Since files should already be "open" with a
298  * vnode ref cnt on the node when reopen calls this, it should always
299  * succeed.)
300  * Also, don't get a vnode lock, since it may already be locked by some
301  * other process that is handling it. This is ok, since all other threads
302  * on the client are blocked by the nfsc_lock being exclusively held by the
303  * caller of this function.
304  */
305 int
306 nfscl_ngetreopen(struct mount *mntp, u_int8_t *fhp, int fhsize,
307     struct thread *td, struct nfsnode **npp)
308 {
309 	struct vnode *nvp;
310 	u_int hash;
311 	struct nfsfh *nfhp;
312 	int error;
313 
314 	*npp = NULL;
315 	/* For forced dismounts, just return error. */
316 	if ((mntp->mnt_kern_flag & MNTK_UNMOUNTF))
317 		return (EINTR);
318 	MALLOC(nfhp, struct nfsfh *, sizeof (struct nfsfh) + fhsize,
319 	    M_NFSFH, M_WAITOK);
320 	bcopy(fhp, &nfhp->nfh_fh[0], fhsize);
321 	nfhp->nfh_len = fhsize;
322 
323 	hash = fnv_32_buf(fhp, fhsize, FNV1_32_INIT);
324 
325 	/*
326 	 * First, try to get the vnode locked, but don't block for the lock.
327 	 */
328 	error = vfs_hash_get(mntp, hash, (LK_EXCLUSIVE | LK_NOWAIT), td, &nvp,
329 	    newnfs_vncmpf, nfhp);
330 	if (error == 0 && nvp != NULL) {
331 		NFSVOPUNLOCK(nvp, 0);
332 	} else if (error == EBUSY) {
333 		/*
334 		 * It is safe so long as a vflush() with
335 		 * FORCECLOSE has not been done. Since the Renew thread is
336 		 * stopped and the MNTK_UNMOUNTF flag is set before doing
337 		 * a vflush() with FORCECLOSE, we should be ok here.
338 		 */
339 		if ((mntp->mnt_kern_flag & MNTK_UNMOUNTF))
340 			error = EINTR;
341 		else {
342 			vfs_hash_ref(mntp, hash, td, &nvp, newnfs_vncmpf, nfhp);
343 			if (nvp == NULL) {
344 				error = ENOENT;
345 			} else if ((nvp->v_iflag & VI_DOOMED) != 0) {
346 				error = ENOENT;
347 				vrele(nvp);
348 			} else {
349 				error = 0;
350 			}
351 		}
352 	}
353 	FREE(nfhp, M_NFSFH);
354 	if (error)
355 		return (error);
356 	if (nvp != NULL) {
357 		*npp = VTONFS(nvp);
358 		return (0);
359 	}
360 	return (EINVAL);
361 }
362 
363 static void
364 nfscl_warn_fileid(struct nfsmount *nmp, struct nfsvattr *oldnap,
365     struct nfsvattr *newnap)
366 {
367 	int off;
368 
369 	if (ncl_fileid_maxwarnings >= 0 &&
370 	    ncl_fileid_nwarnings >= ncl_fileid_maxwarnings)
371 		return;
372 	off = 0;
373 	if (ncl_fileid_maxwarnings >= 0) {
374 		if (++ncl_fileid_nwarnings >= ncl_fileid_maxwarnings)
375 			off = 1;
376 	}
377 
378 	printf("newnfs: server '%s' error: fileid changed. "
379 	    "fsid %jx:%jx: expected fileid %#jx, got %#jx. "
380 	    "(BROKEN NFS SERVER OR MIDDLEWARE)\n",
381 	    nmp->nm_com.nmcom_hostname,
382 	    (uintmax_t)nmp->nm_fsid[0],
383 	    (uintmax_t)nmp->nm_fsid[1],
384 	    (uintmax_t)oldnap->na_fileid,
385 	    (uintmax_t)newnap->na_fileid);
386 
387 	if (off)
388 		printf("newnfs: Logged %d times about fileid corruption; "
389 		    "going quiet to avoid spamming logs excessively. (Limit "
390 		    "is: %d).\n", ncl_fileid_nwarnings,
391 		    ncl_fileid_maxwarnings);
392 }
393 
394 /*
395  * Load the attribute cache (that lives in the nfsnode entry) with
396  * the attributes of the second argument and
397  * Iff vaper not NULL
398  *    copy the attributes to *vaper
399  * Similar to nfs_loadattrcache(), except the attributes are passed in
400  * instead of being parsed out of the mbuf list.
401  */
402 int
403 nfscl_loadattrcache(struct vnode **vpp, struct nfsvattr *nap, void *nvaper,
404     void *stuff, int writeattr, int dontshrink)
405 {
406 	struct vnode *vp = *vpp;
407 	struct vattr *vap, *nvap = &nap->na_vattr, *vaper = nvaper;
408 	struct nfsnode *np;
409 	struct nfsmount *nmp;
410 	struct timespec mtime_save;
411 	u_quad_t nsize;
412 	int setnsize, error, force_fid_err;
413 
414 	error = 0;
415 	setnsize = 0;
416 	nsize = 0;
417 
418 	/*
419 	 * If v_type == VNON it is a new node, so fill in the v_type,
420 	 * n_mtime fields. Check to see if it represents a special
421 	 * device, and if so, check for a possible alias. Once the
422 	 * correct vnode has been obtained, fill in the rest of the
423 	 * information.
424 	 */
425 	np = VTONFS(vp);
426 	NFSLOCKNODE(np);
427 	if (vp->v_type != nvap->va_type) {
428 		vp->v_type = nvap->va_type;
429 		if (vp->v_type == VFIFO)
430 			vp->v_op = &newnfs_fifoops;
431 		np->n_mtime = nvap->va_mtime;
432 	}
433 	nmp = VFSTONFS(vp->v_mount);
434 	vap = &np->n_vattr.na_vattr;
435 	mtime_save = vap->va_mtime;
436 	if (writeattr) {
437 		np->n_vattr.na_filerev = nap->na_filerev;
438 		np->n_vattr.na_size = nap->na_size;
439 		np->n_vattr.na_mtime = nap->na_mtime;
440 		np->n_vattr.na_ctime = nap->na_ctime;
441 		np->n_vattr.na_fsid = nap->na_fsid;
442 		np->n_vattr.na_mode = nap->na_mode;
443 	} else {
444 		force_fid_err = 0;
445 		KFAIL_POINT_ERROR(DEBUG_FP, nfscl_force_fileid_warning,
446 		    force_fid_err);
447 		/*
448 		 * BROKEN NFS SERVER OR MIDDLEWARE
449 		 *
450 		 * Certain NFS servers (certain old proprietary filers ca.
451 		 * 2006) or broken middleboxes (e.g. WAN accelerator products)
452 		 * will respond to GETATTR requests with results for a
453 		 * different fileid.
454 		 *
455 		 * The WAN accelerator we've observed not only serves stale
456 		 * cache results for a given file, it also occasionally serves
457 		 * results for wholly different files.  This causes surprising
458 		 * problems; for example the cached size attribute of a file
459 		 * may truncate down and then back up, resulting in zero
460 		 * regions in file contents read by applications.  We observed
461 		 * this reliably with Clang and .c files during parallel build.
462 		 * A pcap revealed packet fragmentation and GETATTR RPC
463 		 * responses with wholly wrong fileids.
464 		 */
465 		if ((np->n_vattr.na_fileid != 0 &&
466 		     np->n_vattr.na_fileid != nap->na_fileid) ||
467 		    force_fid_err) {
468 			nfscl_warn_fileid(nmp, &np->n_vattr, nap);
469 			error = EIDRM;
470 			goto out;
471 		}
472 		NFSBCOPY((caddr_t)nap, (caddr_t)&np->n_vattr,
473 		    sizeof (struct nfsvattr));
474 	}
475 
476 	/*
477 	 * For NFSv4, if the node's fsid is not equal to the mount point's
478 	 * fsid, return the low order 32bits of the node's fsid. This
479 	 * allows getcwd(3) to work. There is a chance that the fsid might
480 	 * be the same as a local fs, but since this is in an NFS mount
481 	 * point, I don't think that will cause any problems?
482 	 */
483 	if (NFSHASNFSV4(nmp) && NFSHASHASSETFSID(nmp) &&
484 	    (nmp->nm_fsid[0] != np->n_vattr.na_filesid[0] ||
485 	     nmp->nm_fsid[1] != np->n_vattr.na_filesid[1])) {
486 		/*
487 		 * va_fsid needs to be set to some value derived from
488 		 * np->n_vattr.na_filesid that is not equal
489 		 * vp->v_mount->mnt_stat.f_fsid[0], so that it changes
490 		 * from the value used for the top level server volume
491 		 * in the mounted subtree.
492 		 */
493 		if (vp->v_mount->mnt_stat.f_fsid.val[0] !=
494 		    (uint32_t)np->n_vattr.na_filesid[0])
495 			vap->va_fsid = (uint32_t)np->n_vattr.na_filesid[0];
496 		else
497 			vap->va_fsid = (uint32_t)hash32_buf(
498 			    np->n_vattr.na_filesid, 2 * sizeof(uint64_t), 0);
499 	} else
500 		vap->va_fsid = vp->v_mount->mnt_stat.f_fsid.val[0];
501 	np->n_attrstamp = time_second;
502 	if (vap->va_size != np->n_size) {
503 		if (vap->va_type == VREG) {
504 			if (dontshrink && vap->va_size < np->n_size) {
505 				/*
506 				 * We've been told not to shrink the file;
507 				 * zero np->n_attrstamp to indicate that
508 				 * the attributes are stale.
509 				 */
510 				vap->va_size = np->n_size;
511 				np->n_attrstamp = 0;
512 				KDTRACE_NFS_ATTRCACHE_FLUSH_DONE(vp);
513 				vnode_pager_setsize(vp, np->n_size);
514 			} else if (np->n_flag & NMODIFIED) {
515 				/*
516 				 * We've modified the file: Use the larger
517 				 * of our size, and the server's size.
518 				 */
519 				if (vap->va_size < np->n_size) {
520 					vap->va_size = np->n_size;
521 				} else {
522 					np->n_size = vap->va_size;
523 					np->n_flag |= NSIZECHANGED;
524 				}
525 				vnode_pager_setsize(vp, np->n_size);
526 			} else if (vap->va_size < np->n_size) {
527 				/*
528 				 * When shrinking the size, the call to
529 				 * vnode_pager_setsize() cannot be done
530 				 * with the mutex held, so delay it until
531 				 * after the mtx_unlock call.
532 				 */
533 				nsize = np->n_size = vap->va_size;
534 				np->n_flag |= NSIZECHANGED;
535 				setnsize = 1;
536 			} else {
537 				np->n_size = vap->va_size;
538 				np->n_flag |= NSIZECHANGED;
539 				vnode_pager_setsize(vp, np->n_size);
540 			}
541 		} else {
542 			np->n_size = vap->va_size;
543 		}
544 	}
545 	/*
546 	 * The following checks are added to prevent a race between (say)
547 	 * a READDIR+ and a WRITE.
548 	 * READDIR+, WRITE requests sent out.
549 	 * READDIR+ resp, WRITE resp received on client.
550 	 * However, the WRITE resp was handled before the READDIR+ resp
551 	 * causing the post op attrs from the write to be loaded first
552 	 * and the attrs from the READDIR+ to be loaded later. If this
553 	 * happens, we have stale attrs loaded into the attrcache.
554 	 * We detect this by for the mtime moving back. We invalidate the
555 	 * attrcache when this happens.
556 	 */
557 	if (timespeccmp(&mtime_save, &vap->va_mtime, >)) {
558 		/* Size changed or mtime went backwards */
559 		np->n_attrstamp = 0;
560 		KDTRACE_NFS_ATTRCACHE_FLUSH_DONE(vp);
561 	}
562 	if (vaper != NULL) {
563 		NFSBCOPY((caddr_t)vap, (caddr_t)vaper, sizeof(*vap));
564 		if (np->n_flag & NCHG) {
565 			if (np->n_flag & NACC)
566 				vaper->va_atime = np->n_atim;
567 			if (np->n_flag & NUPD)
568 				vaper->va_mtime = np->n_mtim;
569 		}
570 	}
571 
572 out:
573 #ifdef KDTRACE_HOOKS
574 	if (np->n_attrstamp != 0)
575 		KDTRACE_NFS_ATTRCACHE_LOAD_DONE(vp, vap, error);
576 #endif
577 	NFSUNLOCKNODE(np);
578 	if (setnsize)
579 		vnode_pager_setsize(vp, nsize);
580 	return (error);
581 }
582 
583 /*
584  * Fill in the client id name. For these bytes:
585  * 1 - they must be unique
586  * 2 - they should be persistent across client reboots
587  * 1 is more critical than 2
588  * Use the mount point's unique id plus either the uuid or, if that
589  * isn't set, random junk.
590  */
591 void
592 nfscl_fillclid(u_int64_t clval, char *uuid, u_int8_t *cp, u_int16_t idlen)
593 {
594 	int uuidlen;
595 
596 	/*
597 	 * First, put in the 64bit mount point identifier.
598 	 */
599 	if (idlen >= sizeof (u_int64_t)) {
600 		NFSBCOPY((caddr_t)&clval, cp, sizeof (u_int64_t));
601 		cp += sizeof (u_int64_t);
602 		idlen -= sizeof (u_int64_t);
603 	}
604 
605 	/*
606 	 * If uuid is non-zero length, use it.
607 	 */
608 	uuidlen = strlen(uuid);
609 	if (uuidlen > 0 && idlen >= uuidlen) {
610 		NFSBCOPY(uuid, cp, uuidlen);
611 		cp += uuidlen;
612 		idlen -= uuidlen;
613 	}
614 
615 	/*
616 	 * This only normally happens if the uuid isn't set.
617 	 */
618 	while (idlen > 0) {
619 		*cp++ = (u_int8_t)(arc4random() % 256);
620 		idlen--;
621 	}
622 }
623 
624 /*
625  * Fill in a lock owner name. For now, pid + the process's creation time.
626  */
627 void
628 nfscl_filllockowner(void *id, u_int8_t *cp, int flags)
629 {
630 	union {
631 		u_int32_t	lval;
632 		u_int8_t	cval[4];
633 	} tl;
634 	struct proc *p;
635 
636 	if (id == NULL) {
637 		printf("NULL id\n");
638 		bzero(cp, NFSV4CL_LOCKNAMELEN);
639 		return;
640 	}
641 	if ((flags & F_POSIX) != 0) {
642 		p = (struct proc *)id;
643 		tl.lval = p->p_pid;
644 		*cp++ = tl.cval[0];
645 		*cp++ = tl.cval[1];
646 		*cp++ = tl.cval[2];
647 		*cp++ = tl.cval[3];
648 		tl.lval = p->p_stats->p_start.tv_sec;
649 		*cp++ = tl.cval[0];
650 		*cp++ = tl.cval[1];
651 		*cp++ = tl.cval[2];
652 		*cp++ = tl.cval[3];
653 		tl.lval = p->p_stats->p_start.tv_usec;
654 		*cp++ = tl.cval[0];
655 		*cp++ = tl.cval[1];
656 		*cp++ = tl.cval[2];
657 		*cp = tl.cval[3];
658 	} else if ((flags & F_FLOCK) != 0) {
659 		bcopy(&id, cp, sizeof(id));
660 		bzero(&cp[sizeof(id)], NFSV4CL_LOCKNAMELEN - sizeof(id));
661 	} else {
662 		printf("nfscl_filllockowner: not F_POSIX or F_FLOCK\n");
663 		bzero(cp, NFSV4CL_LOCKNAMELEN);
664 	}
665 }
666 
667 /*
668  * Find the parent process for the thread passed in as an argument.
669  * If none exists, return NULL, otherwise return a thread for the parent.
670  * (Can be any of the threads, since it is only used for td->td_proc.)
671  */
672 NFSPROC_T *
673 nfscl_getparent(struct thread *td)
674 {
675 	struct proc *p;
676 	struct thread *ptd;
677 
678 	if (td == NULL)
679 		return (NULL);
680 	p = td->td_proc;
681 	if (p->p_pid == 0)
682 		return (NULL);
683 	p = p->p_pptr;
684 	if (p == NULL)
685 		return (NULL);
686 	ptd = TAILQ_FIRST(&p->p_threads);
687 	return (ptd);
688 }
689 
690 /*
691  * Start up the renew kernel thread.
692  */
693 static void
694 start_nfscl(void *arg)
695 {
696 	struct nfsclclient *clp;
697 	struct thread *td;
698 
699 	clp = (struct nfsclclient *)arg;
700 	td = TAILQ_FIRST(&clp->nfsc_renewthread->p_threads);
701 	nfscl_renewthread(clp, td);
702 	kproc_exit(0);
703 }
704 
705 void
706 nfscl_start_renewthread(struct nfsclclient *clp)
707 {
708 
709 	kproc_create(start_nfscl, (void *)clp, &clp->nfsc_renewthread, 0, 0,
710 	    "nfscl");
711 }
712 
713 /*
714  * Handle wcc_data.
715  * For NFSv4, it assumes that nfsv4_wccattr() was used to set up the getattr
716  * as the first Op after PutFH.
717  * (For NFSv4, the postop attributes are after the Op, so they can't be
718  *  parsed here. A separate call to nfscl_postop_attr() is required.)
719  */
720 int
721 nfscl_wcc_data(struct nfsrv_descript *nd, struct vnode *vp,
722     struct nfsvattr *nap, int *flagp, int *wccflagp, void *stuff)
723 {
724 	u_int32_t *tl;
725 	struct nfsnode *np = VTONFS(vp);
726 	struct nfsvattr nfsva;
727 	int error = 0;
728 
729 	if (wccflagp != NULL)
730 		*wccflagp = 0;
731 	if (nd->nd_flag & ND_NFSV3) {
732 		*flagp = 0;
733 		NFSM_DISSECT(tl, u_int32_t *, NFSX_UNSIGNED);
734 		if (*tl == newnfs_true) {
735 			NFSM_DISSECT(tl, u_int32_t *, 6 * NFSX_UNSIGNED);
736 			if (wccflagp != NULL) {
737 				mtx_lock(&np->n_mtx);
738 				*wccflagp = (np->n_mtime.tv_sec ==
739 				    fxdr_unsigned(u_int32_t, *(tl + 2)) &&
740 				    np->n_mtime.tv_nsec ==
741 				    fxdr_unsigned(u_int32_t, *(tl + 3)));
742 				mtx_unlock(&np->n_mtx);
743 			}
744 		}
745 		error = nfscl_postop_attr(nd, nap, flagp, stuff);
746 	} else if ((nd->nd_flag & (ND_NOMOREDATA | ND_NFSV4 | ND_V4WCCATTR))
747 	    == (ND_NFSV4 | ND_V4WCCATTR)) {
748 		error = nfsv4_loadattr(nd, NULL, &nfsva, NULL,
749 		    NULL, 0, NULL, NULL, NULL, NULL, NULL, 0,
750 		    NULL, NULL, NULL, NULL, NULL);
751 		if (error)
752 			return (error);
753 		/*
754 		 * Get rid of Op# and status for next op.
755 		 */
756 		NFSM_DISSECT(tl, u_int32_t *, 2 * NFSX_UNSIGNED);
757 		if (*++tl)
758 			nd->nd_flag |= ND_NOMOREDATA;
759 		if (wccflagp != NULL &&
760 		    nfsva.na_vattr.va_mtime.tv_sec != 0) {
761 			mtx_lock(&np->n_mtx);
762 			*wccflagp = (np->n_mtime.tv_sec ==
763 			    nfsva.na_vattr.va_mtime.tv_sec &&
764 			    np->n_mtime.tv_nsec ==
765 			    nfsva.na_vattr.va_mtime.tv_sec);
766 			mtx_unlock(&np->n_mtx);
767 		}
768 	}
769 nfsmout:
770 	return (error);
771 }
772 
773 /*
774  * Get postop attributes.
775  */
776 int
777 nfscl_postop_attr(struct nfsrv_descript *nd, struct nfsvattr *nap, int *retp,
778     void *stuff)
779 {
780 	u_int32_t *tl;
781 	int error = 0;
782 
783 	*retp = 0;
784 	if (nd->nd_flag & ND_NOMOREDATA)
785 		return (error);
786 	if (nd->nd_flag & ND_NFSV3) {
787 		NFSM_DISSECT(tl, u_int32_t *, NFSX_UNSIGNED);
788 		*retp = fxdr_unsigned(int, *tl);
789 	} else if (nd->nd_flag & ND_NFSV4) {
790 		/*
791 		 * For NFSv4, the postop attr are at the end, so no point
792 		 * in looking if nd_repstat != 0.
793 		 */
794 		if (!nd->nd_repstat) {
795 			NFSM_DISSECT(tl, u_int32_t *, 2 * NFSX_UNSIGNED);
796 			if (*(tl + 1))
797 				/* should never happen since nd_repstat != 0 */
798 				nd->nd_flag |= ND_NOMOREDATA;
799 			else
800 				*retp = 1;
801 		}
802 	} else if (!nd->nd_repstat) {
803 		/* For NFSv2, the attributes are here iff nd_repstat == 0 */
804 		*retp = 1;
805 	}
806 	if (*retp) {
807 		error = nfsm_loadattr(nd, nap);
808 		if (error)
809 			*retp = 0;
810 	}
811 nfsmout:
812 	return (error);
813 }
814 
815 /*
816  * Fill in the setable attributes. The full argument indicates whether
817  * to fill in them all or just mode and time.
818  */
819 void
820 nfscl_fillsattr(struct nfsrv_descript *nd, struct vattr *vap,
821     struct vnode *vp, int flags, u_int32_t rdev)
822 {
823 	u_int32_t *tl;
824 	struct nfsv2_sattr *sp;
825 	nfsattrbit_t attrbits;
826 
827 	switch (nd->nd_flag & (ND_NFSV2 | ND_NFSV3 | ND_NFSV4)) {
828 	case ND_NFSV2:
829 		NFSM_BUILD(sp, struct nfsv2_sattr *, NFSX_V2SATTR);
830 		if (vap->va_mode == (mode_t)VNOVAL)
831 			sp->sa_mode = newnfs_xdrneg1;
832 		else
833 			sp->sa_mode = vtonfsv2_mode(vap->va_type, vap->va_mode);
834 		if (vap->va_uid == (uid_t)VNOVAL)
835 			sp->sa_uid = newnfs_xdrneg1;
836 		else
837 			sp->sa_uid = txdr_unsigned(vap->va_uid);
838 		if (vap->va_gid == (gid_t)VNOVAL)
839 			sp->sa_gid = newnfs_xdrneg1;
840 		else
841 			sp->sa_gid = txdr_unsigned(vap->va_gid);
842 		if (flags & NFSSATTR_SIZE0)
843 			sp->sa_size = 0;
844 		else if (flags & NFSSATTR_SIZENEG1)
845 			sp->sa_size = newnfs_xdrneg1;
846 		else if (flags & NFSSATTR_SIZERDEV)
847 			sp->sa_size = txdr_unsigned(rdev);
848 		else
849 			sp->sa_size = txdr_unsigned(vap->va_size);
850 		txdr_nfsv2time(&vap->va_atime, &sp->sa_atime);
851 		txdr_nfsv2time(&vap->va_mtime, &sp->sa_mtime);
852 		break;
853 	case ND_NFSV3:
854 		if (vap->va_mode != (mode_t)VNOVAL) {
855 			NFSM_BUILD(tl, u_int32_t *, 2 * NFSX_UNSIGNED);
856 			*tl++ = newnfs_true;
857 			*tl = txdr_unsigned(vap->va_mode);
858 		} else {
859 			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
860 			*tl = newnfs_false;
861 		}
862 		if ((flags & NFSSATTR_FULL) && vap->va_uid != (uid_t)VNOVAL) {
863 			NFSM_BUILD(tl, u_int32_t *, 2 * NFSX_UNSIGNED);
864 			*tl++ = newnfs_true;
865 			*tl = txdr_unsigned(vap->va_uid);
866 		} else {
867 			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
868 			*tl = newnfs_false;
869 		}
870 		if ((flags & NFSSATTR_FULL) && vap->va_gid != (gid_t)VNOVAL) {
871 			NFSM_BUILD(tl, u_int32_t *, 2 * NFSX_UNSIGNED);
872 			*tl++ = newnfs_true;
873 			*tl = txdr_unsigned(vap->va_gid);
874 		} else {
875 			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
876 			*tl = newnfs_false;
877 		}
878 		if ((flags & NFSSATTR_FULL) && vap->va_size != VNOVAL) {
879 			NFSM_BUILD(tl, u_int32_t *, 3 * NFSX_UNSIGNED);
880 			*tl++ = newnfs_true;
881 			txdr_hyper(vap->va_size, tl);
882 		} else {
883 			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
884 			*tl = newnfs_false;
885 		}
886 		if (vap->va_atime.tv_sec != VNOVAL) {
887 			if ((vap->va_vaflags & VA_UTIMES_NULL) == 0) {
888 				NFSM_BUILD(tl, u_int32_t *, 3 * NFSX_UNSIGNED);
889 				*tl++ = txdr_unsigned(NFSV3SATTRTIME_TOCLIENT);
890 				txdr_nfsv3time(&vap->va_atime, tl);
891 			} else {
892 				NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
893 				*tl = txdr_unsigned(NFSV3SATTRTIME_TOSERVER);
894 			}
895 		} else {
896 			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
897 			*tl = txdr_unsigned(NFSV3SATTRTIME_DONTCHANGE);
898 		}
899 		if (vap->va_mtime.tv_sec != VNOVAL) {
900 			if ((vap->va_vaflags & VA_UTIMES_NULL) == 0) {
901 				NFSM_BUILD(tl, u_int32_t *, 3 * NFSX_UNSIGNED);
902 				*tl++ = txdr_unsigned(NFSV3SATTRTIME_TOCLIENT);
903 				txdr_nfsv3time(&vap->va_mtime, tl);
904 			} else {
905 				NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
906 				*tl = txdr_unsigned(NFSV3SATTRTIME_TOSERVER);
907 			}
908 		} else {
909 			NFSM_BUILD(tl, u_int32_t *, NFSX_UNSIGNED);
910 			*tl = txdr_unsigned(NFSV3SATTRTIME_DONTCHANGE);
911 		}
912 		break;
913 	case ND_NFSV4:
914 		NFSZERO_ATTRBIT(&attrbits);
915 		if (vap->va_mode != (mode_t)VNOVAL)
916 			NFSSETBIT_ATTRBIT(&attrbits, NFSATTRBIT_MODE);
917 		if ((flags & NFSSATTR_FULL) && vap->va_uid != (uid_t)VNOVAL)
918 			NFSSETBIT_ATTRBIT(&attrbits, NFSATTRBIT_OWNER);
919 		if ((flags & NFSSATTR_FULL) && vap->va_gid != (gid_t)VNOVAL)
920 			NFSSETBIT_ATTRBIT(&attrbits, NFSATTRBIT_OWNERGROUP);
921 		if ((flags & NFSSATTR_FULL) && vap->va_size != VNOVAL)
922 			NFSSETBIT_ATTRBIT(&attrbits, NFSATTRBIT_SIZE);
923 		if (vap->va_atime.tv_sec != VNOVAL)
924 			NFSSETBIT_ATTRBIT(&attrbits, NFSATTRBIT_TIMEACCESSSET);
925 		if (vap->va_mtime.tv_sec != VNOVAL)
926 			NFSSETBIT_ATTRBIT(&attrbits, NFSATTRBIT_TIMEMODIFYSET);
927 		(void) nfsv4_fillattr(nd, vp->v_mount, vp, NULL, vap, NULL, 0,
928 		    &attrbits, NULL, NULL, 0, 0, 0, 0, (uint64_t)0);
929 		break;
930 	}
931 }
932 
933 /*
934  * nfscl_request() - mostly a wrapper for newnfs_request().
935  */
936 int
937 nfscl_request(struct nfsrv_descript *nd, struct vnode *vp, NFSPROC_T *p,
938     struct ucred *cred, void *stuff)
939 {
940 	int ret, vers;
941 	struct nfsmount *nmp;
942 
943 	nmp = VFSTONFS(vp->v_mount);
944 	if (nd->nd_flag & ND_NFSV4)
945 		vers = NFS_VER4;
946 	else if (nd->nd_flag & ND_NFSV3)
947 		vers = NFS_VER3;
948 	else
949 		vers = NFS_VER2;
950 	ret = newnfs_request(nd, nmp, NULL, &nmp->nm_sockreq, vp, p, cred,
951 		NFS_PROG, vers, NULL, 1, NULL, NULL);
952 	return (ret);
953 }
954 
955 /*
956  * fill in this bsden's variant of statfs using nfsstatfs.
957  */
958 void
959 nfscl_loadsbinfo(struct nfsmount *nmp, struct nfsstatfs *sfp, void *statfs)
960 {
961 	struct statfs *sbp = (struct statfs *)statfs;
962 
963 	if (nmp->nm_flag & (NFSMNT_NFSV3 | NFSMNT_NFSV4)) {
964 		sbp->f_bsize = NFS_FABLKSIZE;
965 		sbp->f_blocks = sfp->sf_tbytes / NFS_FABLKSIZE;
966 		sbp->f_bfree = sfp->sf_fbytes / NFS_FABLKSIZE;
967 		/*
968 		 * Although sf_abytes is uint64_t and f_bavail is int64_t,
969 		 * the value after dividing by NFS_FABLKSIZE is small
970 		 * enough that it will fit in 63bits, so it is ok to
971 		 * assign it to f_bavail without fear that it will become
972 		 * negative.
973 		 */
974 		sbp->f_bavail = sfp->sf_abytes / NFS_FABLKSIZE;
975 		sbp->f_files = sfp->sf_tfiles;
976 		/* Since f_ffree is int64_t, clip it to 63bits. */
977 		if (sfp->sf_ffiles > INT64_MAX)
978 			sbp->f_ffree = INT64_MAX;
979 		else
980 			sbp->f_ffree = sfp->sf_ffiles;
981 	} else if ((nmp->nm_flag & NFSMNT_NFSV4) == 0) {
982 		/*
983 		 * The type casts to (int32_t) ensure that this code is
984 		 * compatible with the old NFS client, in that it will
985 		 * propagate bit31 to the high order bits. This may or may
986 		 * not be correct for NFSv2, but since it is a legacy
987 		 * environment, I'd rather retain backwards compatibility.
988 		 */
989 		sbp->f_bsize = (int32_t)sfp->sf_bsize;
990 		sbp->f_blocks = (int32_t)sfp->sf_blocks;
991 		sbp->f_bfree = (int32_t)sfp->sf_bfree;
992 		sbp->f_bavail = (int32_t)sfp->sf_bavail;
993 		sbp->f_files = 0;
994 		sbp->f_ffree = 0;
995 	}
996 }
997 
998 /*
999  * Use the fsinfo stuff to update the mount point.
1000  */
1001 void
1002 nfscl_loadfsinfo(struct nfsmount *nmp, struct nfsfsinfo *fsp)
1003 {
1004 
1005 	if ((nmp->nm_wsize == 0 || fsp->fs_wtpref < nmp->nm_wsize) &&
1006 	    fsp->fs_wtpref >= NFS_FABLKSIZE)
1007 		nmp->nm_wsize = (fsp->fs_wtpref + NFS_FABLKSIZE - 1) &
1008 		    ~(NFS_FABLKSIZE - 1);
1009 	if (fsp->fs_wtmax < nmp->nm_wsize && fsp->fs_wtmax > 0) {
1010 		nmp->nm_wsize = fsp->fs_wtmax & ~(NFS_FABLKSIZE - 1);
1011 		if (nmp->nm_wsize == 0)
1012 			nmp->nm_wsize = fsp->fs_wtmax;
1013 	}
1014 	if (nmp->nm_wsize < NFS_FABLKSIZE)
1015 		nmp->nm_wsize = NFS_FABLKSIZE;
1016 	if ((nmp->nm_rsize == 0 || fsp->fs_rtpref < nmp->nm_rsize) &&
1017 	    fsp->fs_rtpref >= NFS_FABLKSIZE)
1018 		nmp->nm_rsize = (fsp->fs_rtpref + NFS_FABLKSIZE - 1) &
1019 		    ~(NFS_FABLKSIZE - 1);
1020 	if (fsp->fs_rtmax < nmp->nm_rsize && fsp->fs_rtmax > 0) {
1021 		nmp->nm_rsize = fsp->fs_rtmax & ~(NFS_FABLKSIZE - 1);
1022 		if (nmp->nm_rsize == 0)
1023 			nmp->nm_rsize = fsp->fs_rtmax;
1024 	}
1025 	if (nmp->nm_rsize < NFS_FABLKSIZE)
1026 		nmp->nm_rsize = NFS_FABLKSIZE;
1027 	if ((nmp->nm_readdirsize == 0 || fsp->fs_dtpref < nmp->nm_readdirsize)
1028 	    && fsp->fs_dtpref >= NFS_DIRBLKSIZ)
1029 		nmp->nm_readdirsize = (fsp->fs_dtpref + NFS_DIRBLKSIZ - 1) &
1030 		    ~(NFS_DIRBLKSIZ - 1);
1031 	if (fsp->fs_rtmax < nmp->nm_readdirsize && fsp->fs_rtmax > 0) {
1032 		nmp->nm_readdirsize = fsp->fs_rtmax & ~(NFS_DIRBLKSIZ - 1);
1033 		if (nmp->nm_readdirsize == 0)
1034 			nmp->nm_readdirsize = fsp->fs_rtmax;
1035 	}
1036 	if (nmp->nm_readdirsize < NFS_DIRBLKSIZ)
1037 		nmp->nm_readdirsize = NFS_DIRBLKSIZ;
1038 	if (fsp->fs_maxfilesize > 0 &&
1039 	    fsp->fs_maxfilesize < nmp->nm_maxfilesize)
1040 		nmp->nm_maxfilesize = fsp->fs_maxfilesize;
1041 	nmp->nm_mountp->mnt_stat.f_iosize = newnfs_iosize(nmp);
1042 	nmp->nm_state |= NFSSTA_GOTFSINFO;
1043 }
1044 
1045 /*
1046  * Lookups source address which should be used to communicate with
1047  * @nmp and stores it inside @pdst.
1048  *
1049  * Returns 0 on success.
1050  */
1051 u_int8_t *
1052 nfscl_getmyip(struct nfsmount *nmp, struct in6_addr *paddr, int *isinet6p)
1053 {
1054 #if defined(INET6) || defined(INET)
1055 	int error, fibnum;
1056 
1057 	fibnum = curthread->td_proc->p_fibnum;
1058 #endif
1059 #ifdef INET
1060 	if (nmp->nm_nam->sa_family == AF_INET) {
1061 		struct sockaddr_in *sin;
1062 		struct nhop4_extended nh_ext;
1063 
1064 		sin = (struct sockaddr_in *)nmp->nm_nam;
1065 		CURVNET_SET(CRED_TO_VNET(nmp->nm_sockreq.nr_cred));
1066 		error = fib4_lookup_nh_ext(fibnum, sin->sin_addr, 0, 0,
1067 		    &nh_ext);
1068 		CURVNET_RESTORE();
1069 		if (error != 0)
1070 			return (NULL);
1071 
1072 		if ((ntohl(nh_ext.nh_src.s_addr) >> IN_CLASSA_NSHIFT) ==
1073 		    IN_LOOPBACKNET) {
1074 			/* Ignore loopback addresses */
1075 			return (NULL);
1076 		}
1077 
1078 		*isinet6p = 0;
1079 		*((struct in_addr *)paddr) = nh_ext.nh_src;
1080 
1081 		return (u_int8_t *)paddr;
1082 	}
1083 #endif
1084 #ifdef INET6
1085 	if (nmp->nm_nam->sa_family == AF_INET6) {
1086 		struct sockaddr_in6 *sin6;
1087 
1088 		sin6 = (struct sockaddr_in6 *)nmp->nm_nam;
1089 
1090 		CURVNET_SET(CRED_TO_VNET(nmp->nm_sockreq.nr_cred));
1091 		error = in6_selectsrc_addr(fibnum, &sin6->sin6_addr,
1092 		    sin6->sin6_scope_id, NULL, paddr, NULL);
1093 		CURVNET_RESTORE();
1094 		if (error != 0)
1095 			return (NULL);
1096 
1097 		if (IN6_IS_ADDR_LOOPBACK(paddr))
1098 			return (NULL);
1099 
1100 		/* Scope is embedded in */
1101 		*isinet6p = 1;
1102 
1103 		return (u_int8_t *)paddr;
1104 	}
1105 #endif
1106 	return (NULL);
1107 }
1108 
1109 /*
1110  * Copy NFS uid, gids from the cred structure.
1111  */
1112 void
1113 newnfs_copyincred(struct ucred *cr, struct nfscred *nfscr)
1114 {
1115 	int i;
1116 
1117 	KASSERT(cr->cr_ngroups >= 0,
1118 	    ("newnfs_copyincred: negative cr_ngroups"));
1119 	nfscr->nfsc_uid = cr->cr_uid;
1120 	nfscr->nfsc_ngroups = MIN(cr->cr_ngroups, NFS_MAXGRPS + 1);
1121 	for (i = 0; i < nfscr->nfsc_ngroups; i++)
1122 		nfscr->nfsc_groups[i] = cr->cr_groups[i];
1123 }
1124 
1125 
1126 /*
1127  * Do any client specific initialization.
1128  */
1129 void
1130 nfscl_init(void)
1131 {
1132 	static int inited = 0;
1133 
1134 	if (inited)
1135 		return;
1136 	inited = 1;
1137 	nfscl_inited = 1;
1138 	ncl_pbuf_freecnt = nswbuf / 2 + 1;
1139 }
1140 
1141 /*
1142  * Check each of the attributes to be set, to ensure they aren't already
1143  * the correct value. Disable setting ones already correct.
1144  */
1145 int
1146 nfscl_checksattr(struct vattr *vap, struct nfsvattr *nvap)
1147 {
1148 
1149 	if (vap->va_mode != (mode_t)VNOVAL) {
1150 		if (vap->va_mode == nvap->na_mode)
1151 			vap->va_mode = (mode_t)VNOVAL;
1152 	}
1153 	if (vap->va_uid != (uid_t)VNOVAL) {
1154 		if (vap->va_uid == nvap->na_uid)
1155 			vap->va_uid = (uid_t)VNOVAL;
1156 	}
1157 	if (vap->va_gid != (gid_t)VNOVAL) {
1158 		if (vap->va_gid == nvap->na_gid)
1159 			vap->va_gid = (gid_t)VNOVAL;
1160 	}
1161 	if (vap->va_size != VNOVAL) {
1162 		if (vap->va_size == nvap->na_size)
1163 			vap->va_size = VNOVAL;
1164 	}
1165 
1166 	/*
1167 	 * We are normally called with only a partially initialized
1168 	 * VAP.  Since the NFSv3 spec says that server may use the
1169 	 * file attributes to store the verifier, the spec requires
1170 	 * us to do a SETATTR RPC. FreeBSD servers store the verifier
1171 	 * in atime, but we can't really assume that all servers will
1172 	 * so we ensure that our SETATTR sets both atime and mtime.
1173 	 * Set the VA_UTIMES_NULL flag for this case, so that
1174 	 * the server's time will be used.  This is needed to
1175 	 * work around a bug in some Solaris servers, where
1176 	 * setting the time TOCLIENT causes the Setattr RPC
1177 	 * to return NFS_OK, but not set va_mode.
1178 	 */
1179 	if (vap->va_mtime.tv_sec == VNOVAL) {
1180 		vfs_timestamp(&vap->va_mtime);
1181 		vap->va_vaflags |= VA_UTIMES_NULL;
1182 	}
1183 	if (vap->va_atime.tv_sec == VNOVAL)
1184 		vap->va_atime = vap->va_mtime;
1185 	return (1);
1186 }
1187 
1188 /*
1189  * Map nfsv4 errors to errno.h errors.
1190  * The uid and gid arguments are only used for NFSERR_BADOWNER and that
1191  * error should only be returned for the Open, Create and Setattr Ops.
1192  * As such, most calls can just pass in 0 for those arguments.
1193  */
1194 APPLESTATIC int
1195 nfscl_maperr(struct thread *td, int error, uid_t uid, gid_t gid)
1196 {
1197 	struct proc *p;
1198 
1199 	if (error < 10000)
1200 		return (error);
1201 	if (td != NULL)
1202 		p = td->td_proc;
1203 	else
1204 		p = NULL;
1205 	switch (error) {
1206 	case NFSERR_BADOWNER:
1207 		tprintf(p, LOG_INFO,
1208 		    "No name and/or group mapping for uid,gid:(%d,%d)\n",
1209 		    uid, gid);
1210 		return (EPERM);
1211 	case NFSERR_BADNAME:
1212 	case NFSERR_BADCHAR:
1213 		printf("nfsv4 char/name not handled by server\n");
1214 		return (ENOENT);
1215 	case NFSERR_STALECLIENTID:
1216 	case NFSERR_STALESTATEID:
1217 	case NFSERR_EXPIRED:
1218 	case NFSERR_BADSTATEID:
1219 	case NFSERR_BADSESSION:
1220 		printf("nfsv4 recover err returned %d\n", error);
1221 		return (EIO);
1222 	case NFSERR_BADHANDLE:
1223 	case NFSERR_SERVERFAULT:
1224 	case NFSERR_BADTYPE:
1225 	case NFSERR_FHEXPIRED:
1226 	case NFSERR_RESOURCE:
1227 	case NFSERR_MOVED:
1228 	case NFSERR_NOFILEHANDLE:
1229 	case NFSERR_MINORVERMISMATCH:
1230 	case NFSERR_OLDSTATEID:
1231 	case NFSERR_BADSEQID:
1232 	case NFSERR_LEASEMOVED:
1233 	case NFSERR_RECLAIMBAD:
1234 	case NFSERR_BADXDR:
1235 	case NFSERR_OPILLEGAL:
1236 		printf("nfsv4 client/server protocol prob err=%d\n",
1237 		    error);
1238 		return (EIO);
1239 	default:
1240 		tprintf(p, LOG_INFO, "nfsv4 err=%d\n", error);
1241 		return (EIO);
1242 	};
1243 }
1244 
1245 /*
1246  * Check to see if the process for this owner exists. Return 1 if it doesn't
1247  * and 0 otherwise.
1248  */
1249 int
1250 nfscl_procdoesntexist(u_int8_t *own)
1251 {
1252 	union {
1253 		u_int32_t	lval;
1254 		u_int8_t	cval[4];
1255 	} tl;
1256 	struct proc *p;
1257 	pid_t pid;
1258 	int ret = 0;
1259 
1260 	tl.cval[0] = *own++;
1261 	tl.cval[1] = *own++;
1262 	tl.cval[2] = *own++;
1263 	tl.cval[3] = *own++;
1264 	pid = tl.lval;
1265 	p = pfind_locked(pid);
1266 	if (p == NULL)
1267 		return (1);
1268 	if (p->p_stats == NULL) {
1269 		PROC_UNLOCK(p);
1270 		return (0);
1271 	}
1272 	tl.cval[0] = *own++;
1273 	tl.cval[1] = *own++;
1274 	tl.cval[2] = *own++;
1275 	tl.cval[3] = *own++;
1276 	if (tl.lval != p->p_stats->p_start.tv_sec) {
1277 		ret = 1;
1278 	} else {
1279 		tl.cval[0] = *own++;
1280 		tl.cval[1] = *own++;
1281 		tl.cval[2] = *own++;
1282 		tl.cval[3] = *own;
1283 		if (tl.lval != p->p_stats->p_start.tv_usec)
1284 			ret = 1;
1285 	}
1286 	PROC_UNLOCK(p);
1287 	return (ret);
1288 }
1289 
1290 /*
1291  * - nfs pseudo system call for the client
1292  */
1293 /*
1294  * MPSAFE
1295  */
1296 static int
1297 nfssvc_nfscl(struct thread *td, struct nfssvc_args *uap)
1298 {
1299 	struct file *fp;
1300 	struct nfscbd_args nfscbdarg;
1301 	struct nfsd_nfscbd_args nfscbdarg2;
1302 	struct nameidata nd;
1303 	struct nfscl_dumpmntopts dumpmntopts;
1304 	cap_rights_t rights;
1305 	char *buf;
1306 	int error;
1307 
1308 	if (uap->flag & NFSSVC_CBADDSOCK) {
1309 		error = copyin(uap->argp, (caddr_t)&nfscbdarg, sizeof(nfscbdarg));
1310 		if (error)
1311 			return (error);
1312 		/*
1313 		 * Since we don't know what rights might be required,
1314 		 * pretend that we need them all. It is better to be too
1315 		 * careful than too reckless.
1316 		 */
1317 		error = fget(td, nfscbdarg.sock,
1318 		    cap_rights_init(&rights, CAP_SOCK_CLIENT), &fp);
1319 		if (error)
1320 			return (error);
1321 		if (fp->f_type != DTYPE_SOCKET) {
1322 			fdrop(fp, td);
1323 			return (EPERM);
1324 		}
1325 		error = nfscbd_addsock(fp);
1326 		fdrop(fp, td);
1327 		if (!error && nfscl_enablecallb == 0) {
1328 			nfsv4_cbport = nfscbdarg.port;
1329 			nfscl_enablecallb = 1;
1330 		}
1331 	} else if (uap->flag & NFSSVC_NFSCBD) {
1332 		if (uap->argp == NULL)
1333 			return (EINVAL);
1334 		error = copyin(uap->argp, (caddr_t)&nfscbdarg2,
1335 		    sizeof(nfscbdarg2));
1336 		if (error)
1337 			return (error);
1338 		error = nfscbd_nfsd(td, &nfscbdarg2);
1339 	} else if (uap->flag & NFSSVC_DUMPMNTOPTS) {
1340 		error = copyin(uap->argp, &dumpmntopts, sizeof(dumpmntopts));
1341 		if (error == 0 && (dumpmntopts.ndmnt_blen < 256 ||
1342 		    dumpmntopts.ndmnt_blen > 1024))
1343 			error = EINVAL;
1344 		if (error == 0)
1345 			error = nfsrv_lookupfilename(&nd,
1346 			    dumpmntopts.ndmnt_fname, td);
1347 		if (error == 0 && strcmp(nd.ni_vp->v_mount->mnt_vfc->vfc_name,
1348 		    "nfs") != 0) {
1349 			vput(nd.ni_vp);
1350 			error = EINVAL;
1351 		}
1352 		if (error == 0) {
1353 			buf = malloc(dumpmntopts.ndmnt_blen, M_TEMP, M_WAITOK);
1354 			nfscl_retopts(VFSTONFS(nd.ni_vp->v_mount), buf,
1355 			    dumpmntopts.ndmnt_blen);
1356 			vput(nd.ni_vp);
1357 			error = copyout(buf, dumpmntopts.ndmnt_buf,
1358 			    dumpmntopts.ndmnt_blen);
1359 			free(buf, M_TEMP);
1360 		}
1361 	} else {
1362 		error = EINVAL;
1363 	}
1364 	return (error);
1365 }
1366 
1367 extern int (*nfsd_call_nfscl)(struct thread *, struct nfssvc_args *);
1368 
1369 /*
1370  * Called once to initialize data structures...
1371  */
1372 static int
1373 nfscl_modevent(module_t mod, int type, void *data)
1374 {
1375 	int error = 0;
1376 	static int loaded = 0;
1377 
1378 	switch (type) {
1379 	case MOD_LOAD:
1380 		if (loaded)
1381 			return (0);
1382 		newnfs_portinit();
1383 		mtx_init(&ncl_iod_mutex, "ncl_iod_mutex", NULL, MTX_DEF);
1384 		nfscl_init();
1385 		NFSD_LOCK();
1386 		nfsrvd_cbinit(0);
1387 		NFSD_UNLOCK();
1388 		ncl_call_invalcaches = ncl_invalcaches;
1389 		nfsd_call_nfscl = nfssvc_nfscl;
1390 		loaded = 1;
1391 		break;
1392 
1393 	case MOD_UNLOAD:
1394 		if (nfs_numnfscbd != 0) {
1395 			error = EBUSY;
1396 			break;
1397 		}
1398 
1399 		/*
1400 		 * XXX: Unloading of nfscl module is unsupported.
1401 		 */
1402 #if 0
1403 		ncl_call_invalcaches = NULL;
1404 		nfsd_call_nfscl = NULL;
1405 		/* and get rid of the mutexes */
1406 		mtx_destroy(&ncl_iod_mutex);
1407 		loaded = 0;
1408 		break;
1409 #else
1410 		/* FALLTHROUGH */
1411 #endif
1412 	default:
1413 		error = EOPNOTSUPP;
1414 		break;
1415 	}
1416 	return error;
1417 }
1418 static moduledata_t nfscl_mod = {
1419 	"nfscl",
1420 	nfscl_modevent,
1421 	NULL,
1422 };
1423 DECLARE_MODULE(nfscl, nfscl_mod, SI_SUB_VFS, SI_ORDER_FIRST);
1424 
1425 /* So that loader and kldload(2) can find us, wherever we are.. */
1426 MODULE_VERSION(nfscl, 1);
1427 MODULE_DEPEND(nfscl, nfscommon, 1, 1, 1);
1428 MODULE_DEPEND(nfscl, krpc, 1, 1, 1);
1429 MODULE_DEPEND(nfscl, nfssvc, 1, 1, 1);
1430 MODULE_DEPEND(nfscl, nfslock, 1, 1, 1);
1431 
1432