filemap.c 66 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507
  1. /*
  2. * linux/mm/filemap.c
  3. *
  4. * Copyright (C) 1994-1999 Linus Torvalds
  5. */
  6. /*
  7. * This file handles the generic file mmap semantics used by
  8. * most "normal" filesystems (but you don't /have/ to use this:
  9. * the NFS filesystem used to do this differently, for example)
  10. */
  11. #include <linux/module.h>
  12. #include <linux/slab.h>
  13. #include <linux/compiler.h>
  14. #include <linux/fs.h>
  15. #include <linux/uaccess.h>
  16. #include <linux/aio.h>
  17. #include <linux/capability.h>
  18. #include <linux/kernel_stat.h>
  19. #include <linux/mm.h>
  20. #include <linux/swap.h>
  21. #include <linux/mman.h>
  22. #include <linux/pagemap.h>
  23. #include <linux/file.h>
  24. #include <linux/uio.h>
  25. #include <linux/hash.h>
  26. #include <linux/writeback.h>
  27. #include <linux/backing-dev.h>
  28. #include <linux/pagevec.h>
  29. #include <linux/blkdev.h>
  30. #include <linux/security.h>
  31. #include <linux/syscalls.h>
  32. #include <linux/cpuset.h>
  33. #include <linux/hardirq.h> /* for BUG_ON(!in_atomic()) only */
  34. #include <linux/memcontrol.h>
  35. #include <linux/mm_inline.h> /* for page_is_file_cache() */
  36. #include "internal.h"
  37. /*
  38. * FIXME: remove all knowledge of the buffer layer from the core VM
  39. */
  40. #include <linux/buffer_head.h> /* for generic_osync_inode */
  41. #include <asm/mman.h>
  42. /*
  43. * Shared mappings implemented 30.11.1994. It's not fully working yet,
  44. * though.
  45. *
  46. * Shared mappings now work. 15.8.1995 Bruno.
  47. *
  48. * finished 'unifying' the page and buffer cache and SMP-threaded the
  49. * page-cache, 21.05.1999, Ingo Molnar <mingo@redhat.com>
  50. *
  51. * SMP-threaded pagemap-LRU 1999, Andrea Arcangeli <andrea@suse.de>
  52. */
  53. /*
  54. * Lock ordering:
  55. *
  56. * ->i_mmap_lock (vmtruncate)
  57. * ->private_lock (__free_pte->__set_page_dirty_buffers)
  58. * ->swap_lock (exclusive_swap_page, others)
  59. * ->mapping->tree_lock
  60. *
  61. * ->i_mutex
  62. * ->i_mmap_lock (truncate->unmap_mapping_range)
  63. *
  64. * ->mmap_sem
  65. * ->i_mmap_lock
  66. * ->page_table_lock or pte_lock (various, mainly in memory.c)
  67. * ->mapping->tree_lock (arch-dependent flush_dcache_mmap_lock)
  68. *
  69. * ->mmap_sem
  70. * ->lock_page (access_process_vm)
  71. *
  72. * ->i_mutex (generic_file_buffered_write)
  73. * ->mmap_sem (fault_in_pages_readable->do_page_fault)
  74. *
  75. * ->i_mutex
  76. * ->i_alloc_sem (various)
  77. *
  78. * ->inode_lock
  79. * ->sb_lock (fs/fs-writeback.c)
  80. * ->mapping->tree_lock (__sync_single_inode)
  81. *
  82. * ->i_mmap_lock
  83. * ->anon_vma.lock (vma_adjust)
  84. *
  85. * ->anon_vma.lock
  86. * ->page_table_lock or pte_lock (anon_vma_prepare and various)
  87. *
  88. * ->page_table_lock or pte_lock
  89. * ->swap_lock (try_to_unmap_one)
  90. * ->private_lock (try_to_unmap_one)
  91. * ->tree_lock (try_to_unmap_one)
  92. * ->zone.lru_lock (follow_page->mark_page_accessed)
  93. * ->zone.lru_lock (check_pte_range->isolate_lru_page)
  94. * ->private_lock (page_remove_rmap->set_page_dirty)
  95. * ->tree_lock (page_remove_rmap->set_page_dirty)
  96. * ->inode_lock (page_remove_rmap->set_page_dirty)
  97. * ->inode_lock (zap_pte_range->set_page_dirty)
  98. * ->private_lock (zap_pte_range->__set_page_dirty_buffers)
  99. *
  100. * ->task->proc_lock
  101. * ->dcache_lock (proc_pid_lookup)
  102. */
  103. /*
  104. * Remove a page from the page cache and free it. Caller has to make
  105. * sure the page is locked and that nobody else uses it - or that usage
  106. * is safe. The caller must hold the mapping's tree_lock.
  107. */
  108. void __remove_from_page_cache(struct page *page)
  109. {
  110. struct address_space *mapping = page->mapping;
  111. radix_tree_delete(&mapping->page_tree, page->index);
  112. page->mapping = NULL;
  113. mapping->nrpages--;
  114. __dec_zone_page_state(page, NR_FILE_PAGES);
  115. BUG_ON(page_mapped(page));
  116. mem_cgroup_uncharge_cache_page(page);
  117. /*
  118. * Some filesystems seem to re-dirty the page even after
  119. * the VM has canceled the dirty bit (eg ext3 journaling).
  120. *
  121. * Fix it up by doing a final dirty accounting check after
  122. * having removed the page entirely.
  123. */
  124. if (PageDirty(page) && mapping_cap_account_dirty(mapping)) {
  125. dec_zone_page_state(page, NR_FILE_DIRTY);
  126. dec_bdi_stat(mapping->backing_dev_info, BDI_RECLAIMABLE);
  127. }
  128. }
  129. void remove_from_page_cache(struct page *page)
  130. {
  131. struct address_space *mapping = page->mapping;
  132. BUG_ON(!PageLocked(page));
  133. spin_lock_irq(&mapping->tree_lock);
  134. __remove_from_page_cache(page);
  135. spin_unlock_irq(&mapping->tree_lock);
  136. }
  137. static int sync_page(void *word)
  138. {
  139. struct address_space *mapping;
  140. struct page *page;
  141. page = container_of((unsigned long *)word, struct page, flags);
  142. /*
  143. * page_mapping() is being called without PG_locked held.
  144. * Some knowledge of the state and use of the page is used to
  145. * reduce the requirements down to a memory barrier.
  146. * The danger here is of a stale page_mapping() return value
  147. * indicating a struct address_space different from the one it's
  148. * associated with when it is associated with one.
  149. * After smp_mb(), it's either the correct page_mapping() for
  150. * the page, or an old page_mapping() and the page's own
  151. * page_mapping() has gone NULL.
  152. * The ->sync_page() address_space operation must tolerate
  153. * page_mapping() going NULL. By an amazing coincidence,
  154. * this comes about because none of the users of the page
  155. * in the ->sync_page() methods make essential use of the
  156. * page_mapping(), merely passing the page down to the backing
  157. * device's unplug functions when it's non-NULL, which in turn
  158. * ignore it for all cases but swap, where only page_private(page) is
  159. * of interest. When page_mapping() does go NULL, the entire
  160. * call stack gracefully ignores the page and returns.
  161. * -- wli
  162. */
  163. smp_mb();
  164. mapping = page_mapping(page);
  165. if (mapping && mapping->a_ops && mapping->a_ops->sync_page)
  166. mapping->a_ops->sync_page(page);
  167. io_schedule();
  168. return 0;
  169. }
  170. static int sync_page_killable(void *word)
  171. {
  172. sync_page(word);
  173. return fatal_signal_pending(current) ? -EINTR : 0;
  174. }
  175. /**
  176. * __filemap_fdatawrite_range - start writeback on mapping dirty pages in range
  177. * @mapping: address space structure to write
  178. * @start: offset in bytes where the range starts
  179. * @end: offset in bytes where the range ends (inclusive)
  180. * @sync_mode: enable synchronous operation
  181. *
  182. * Start writeback against all of a mapping's dirty pages that lie
  183. * within the byte offsets <start, end> inclusive.
  184. *
  185. * If sync_mode is WB_SYNC_ALL then this is a "data integrity" operation, as
  186. * opposed to a regular memory cleansing writeback. The difference between
  187. * these two operations is that if a dirty page/buffer is encountered, it must
  188. * be waited upon, and not just skipped over.
  189. */
  190. int __filemap_fdatawrite_range(struct address_space *mapping, loff_t start,
  191. loff_t end, int sync_mode)
  192. {
  193. int ret;
  194. struct writeback_control wbc = {
  195. .sync_mode = sync_mode,
  196. .nr_to_write = LONG_MAX,
  197. .range_start = start,
  198. .range_end = end,
  199. };
  200. if (!mapping_cap_writeback_dirty(mapping))
  201. return 0;
  202. ret = do_writepages(mapping, &wbc);
  203. return ret;
  204. }
  205. static inline int __filemap_fdatawrite(struct address_space *mapping,
  206. int sync_mode)
  207. {
  208. return __filemap_fdatawrite_range(mapping, 0, LLONG_MAX, sync_mode);
  209. }
  210. int filemap_fdatawrite(struct address_space *mapping)
  211. {
  212. return __filemap_fdatawrite(mapping, WB_SYNC_ALL);
  213. }
  214. EXPORT_SYMBOL(filemap_fdatawrite);
  215. int filemap_fdatawrite_range(struct address_space *mapping, loff_t start,
  216. loff_t end)
  217. {
  218. return __filemap_fdatawrite_range(mapping, start, end, WB_SYNC_ALL);
  219. }
  220. EXPORT_SYMBOL(filemap_fdatawrite_range);
  221. /**
  222. * filemap_flush - mostly a non-blocking flush
  223. * @mapping: target address_space
  224. *
  225. * This is a mostly non-blocking flush. Not suitable for data-integrity
  226. * purposes - I/O may not be started against all dirty pages.
  227. */
  228. int filemap_flush(struct address_space *mapping)
  229. {
  230. return __filemap_fdatawrite(mapping, WB_SYNC_NONE);
  231. }
  232. EXPORT_SYMBOL(filemap_flush);
  233. /**
  234. * wait_on_page_writeback_range - wait for writeback to complete
  235. * @mapping: target address_space
  236. * @start: beginning page index
  237. * @end: ending page index
  238. *
  239. * Wait for writeback to complete against pages indexed by start->end
  240. * inclusive
  241. */
  242. int wait_on_page_writeback_range(struct address_space *mapping,
  243. pgoff_t start, pgoff_t end)
  244. {
  245. struct pagevec pvec;
  246. int nr_pages;
  247. int ret = 0;
  248. pgoff_t index;
  249. if (end < start)
  250. return 0;
  251. pagevec_init(&pvec, 0);
  252. index = start;
  253. while ((index <= end) &&
  254. (nr_pages = pagevec_lookup_tag(&pvec, mapping, &index,
  255. PAGECACHE_TAG_WRITEBACK,
  256. min(end - index, (pgoff_t)PAGEVEC_SIZE-1) + 1)) != 0) {
  257. unsigned i;
  258. for (i = 0; i < nr_pages; i++) {
  259. struct page *page = pvec.pages[i];
  260. /* until radix tree lookup accepts end_index */
  261. if (page->index > end)
  262. continue;
  263. wait_on_page_writeback(page);
  264. if (PageError(page))
  265. ret = -EIO;
  266. }
  267. pagevec_release(&pvec);
  268. cond_resched();
  269. }
  270. /* Check for outstanding write errors */
  271. if (test_and_clear_bit(AS_ENOSPC, &mapping->flags))
  272. ret = -ENOSPC;
  273. if (test_and_clear_bit(AS_EIO, &mapping->flags))
  274. ret = -EIO;
  275. return ret;
  276. }
  277. /**
  278. * sync_page_range - write and wait on all pages in the passed range
  279. * @inode: target inode
  280. * @mapping: target address_space
  281. * @pos: beginning offset in pages to write
  282. * @count: number of bytes to write
  283. *
  284. * Write and wait upon all the pages in the passed range. This is a "data
  285. * integrity" operation. It waits upon in-flight writeout before starting and
  286. * waiting upon new writeout. If there was an IO error, return it.
  287. *
  288. * We need to re-take i_mutex during the generic_osync_inode list walk because
  289. * it is otherwise livelockable.
  290. */
  291. int sync_page_range(struct inode *inode, struct address_space *mapping,
  292. loff_t pos, loff_t count)
  293. {
  294. pgoff_t start = pos >> PAGE_CACHE_SHIFT;
  295. pgoff_t end = (pos + count - 1) >> PAGE_CACHE_SHIFT;
  296. int ret;
  297. if (!mapping_cap_writeback_dirty(mapping) || !count)
  298. return 0;
  299. ret = filemap_fdatawrite_range(mapping, pos, pos + count - 1);
  300. if (ret == 0) {
  301. mutex_lock(&inode->i_mutex);
  302. ret = generic_osync_inode(inode, mapping, OSYNC_METADATA);
  303. mutex_unlock(&inode->i_mutex);
  304. }
  305. if (ret == 0)
  306. ret = wait_on_page_writeback_range(mapping, start, end);
  307. return ret;
  308. }
  309. EXPORT_SYMBOL(sync_page_range);
  310. /**
  311. * sync_page_range_nolock - write & wait on all pages in the passed range without locking
  312. * @inode: target inode
  313. * @mapping: target address_space
  314. * @pos: beginning offset in pages to write
  315. * @count: number of bytes to write
  316. *
  317. * Note: Holding i_mutex across sync_page_range_nolock() is not a good idea
  318. * as it forces O_SYNC writers to different parts of the same file
  319. * to be serialised right until io completion.
  320. */
  321. int sync_page_range_nolock(struct inode *inode, struct address_space *mapping,
  322. loff_t pos, loff_t count)
  323. {
  324. pgoff_t start = pos >> PAGE_CACHE_SHIFT;
  325. pgoff_t end = (pos + count - 1) >> PAGE_CACHE_SHIFT;
  326. int ret;
  327. if (!mapping_cap_writeback_dirty(mapping) || !count)
  328. return 0;
  329. ret = filemap_fdatawrite_range(mapping, pos, pos + count - 1);
  330. if (ret == 0)
  331. ret = generic_osync_inode(inode, mapping, OSYNC_METADATA);
  332. if (ret == 0)
  333. ret = wait_on_page_writeback_range(mapping, start, end);
  334. return ret;
  335. }
  336. EXPORT_SYMBOL(sync_page_range_nolock);
  337. /**
  338. * filemap_fdatawait - wait for all under-writeback pages to complete
  339. * @mapping: address space structure to wait for
  340. *
  341. * Walk the list of under-writeback pages of the given address space
  342. * and wait for all of them.
  343. */
  344. int filemap_fdatawait(struct address_space *mapping)
  345. {
  346. loff_t i_size = i_size_read(mapping->host);
  347. if (i_size == 0)
  348. return 0;
  349. return wait_on_page_writeback_range(mapping, 0,
  350. (i_size - 1) >> PAGE_CACHE_SHIFT);
  351. }
  352. EXPORT_SYMBOL(filemap_fdatawait);
  353. int filemap_write_and_wait(struct address_space *mapping)
  354. {
  355. int err = 0;
  356. if (mapping->nrpages) {
  357. err = filemap_fdatawrite(mapping);
  358. /*
  359. * Even if the above returned error, the pages may be
  360. * written partially (e.g. -ENOSPC), so we wait for it.
  361. * But the -EIO is special case, it may indicate the worst
  362. * thing (e.g. bug) happened, so we avoid waiting for it.
  363. */
  364. if (err != -EIO) {
  365. int err2 = filemap_fdatawait(mapping);
  366. if (!err)
  367. err = err2;
  368. }
  369. }
  370. return err;
  371. }
  372. EXPORT_SYMBOL(filemap_write_and_wait);
  373. /**
  374. * filemap_write_and_wait_range - write out & wait on a file range
  375. * @mapping: the address_space for the pages
  376. * @lstart: offset in bytes where the range starts
  377. * @lend: offset in bytes where the range ends (inclusive)
  378. *
  379. * Write out and wait upon file offsets lstart->lend, inclusive.
  380. *
  381. * Note that `lend' is inclusive (describes the last byte to be written) so
  382. * that this function can be used to write to the very end-of-file (end = -1).
  383. */
  384. int filemap_write_and_wait_range(struct address_space *mapping,
  385. loff_t lstart, loff_t lend)
  386. {
  387. int err = 0;
  388. if (mapping->nrpages) {
  389. err = __filemap_fdatawrite_range(mapping, lstart, lend,
  390. WB_SYNC_ALL);
  391. /* See comment of filemap_write_and_wait() */
  392. if (err != -EIO) {
  393. int err2 = wait_on_page_writeback_range(mapping,
  394. lstart >> PAGE_CACHE_SHIFT,
  395. lend >> PAGE_CACHE_SHIFT);
  396. if (!err)
  397. err = err2;
  398. }
  399. }
  400. return err;
  401. }
  402. EXPORT_SYMBOL(filemap_write_and_wait_range);
  403. /**
  404. * add_to_page_cache_locked - add a locked page to the pagecache
  405. * @page: page to add
  406. * @mapping: the page's address_space
  407. * @offset: page index
  408. * @gfp_mask: page allocation mode
  409. *
  410. * This function is used to add a page to the pagecache. It must be locked.
  411. * This function does not add the page to the LRU. The caller must do that.
  412. */
  413. int add_to_page_cache_locked(struct page *page, struct address_space *mapping,
  414. pgoff_t offset, gfp_t gfp_mask)
  415. {
  416. int error;
  417. VM_BUG_ON(!PageLocked(page));
  418. error = mem_cgroup_cache_charge(page, current->mm,
  419. gfp_mask & GFP_RECLAIM_MASK);
  420. if (error)
  421. goto out;
  422. error = radix_tree_preload(gfp_mask & ~__GFP_HIGHMEM);
  423. if (error == 0) {
  424. page_cache_get(page);
  425. page->mapping = mapping;
  426. page->index = offset;
  427. spin_lock_irq(&mapping->tree_lock);
  428. error = radix_tree_insert(&mapping->page_tree, offset, page);
  429. if (likely(!error)) {
  430. mapping->nrpages++;
  431. __inc_zone_page_state(page, NR_FILE_PAGES);
  432. } else {
  433. page->mapping = NULL;
  434. mem_cgroup_uncharge_cache_page(page);
  435. page_cache_release(page);
  436. }
  437. spin_unlock_irq(&mapping->tree_lock);
  438. radix_tree_preload_end();
  439. } else
  440. mem_cgroup_uncharge_cache_page(page);
  441. out:
  442. return error;
  443. }
  444. EXPORT_SYMBOL(add_to_page_cache_locked);
  445. int add_to_page_cache_lru(struct page *page, struct address_space *mapping,
  446. pgoff_t offset, gfp_t gfp_mask)
  447. {
  448. int ret;
  449. /*
  450. * Splice_read and readahead add shmem/tmpfs pages into the page cache
  451. * before shmem_readpage has a chance to mark them as SwapBacked: they
  452. * need to go on the active_anon lru below, and mem_cgroup_cache_charge
  453. * (called in add_to_page_cache) needs to know where they're going too.
  454. */
  455. if (mapping_cap_swap_backed(mapping))
  456. SetPageSwapBacked(page);
  457. ret = add_to_page_cache(page, mapping, offset, gfp_mask);
  458. if (ret == 0) {
  459. if (page_is_file_cache(page))
  460. lru_cache_add_file(page);
  461. else
  462. lru_cache_add_active_anon(page);
  463. }
  464. return ret;
  465. }
  466. EXPORT_SYMBOL_GPL(add_to_page_cache_lru);
  467. #ifdef CONFIG_NUMA
  468. struct page *__page_cache_alloc(gfp_t gfp)
  469. {
  470. if (cpuset_do_page_mem_spread()) {
  471. int n = cpuset_mem_spread_node();
  472. return alloc_pages_node(n, gfp, 0);
  473. }
  474. return alloc_pages(gfp, 0);
  475. }
  476. EXPORT_SYMBOL(__page_cache_alloc);
  477. #endif
  478. static int __sleep_on_page_lock(void *word)
  479. {
  480. io_schedule();
  481. return 0;
  482. }
  483. /*
  484. * In order to wait for pages to become available there must be
  485. * waitqueues associated with pages. By using a hash table of
  486. * waitqueues where the bucket discipline is to maintain all
  487. * waiters on the same queue and wake all when any of the pages
  488. * become available, and for the woken contexts to check to be
  489. * sure the appropriate page became available, this saves space
  490. * at a cost of "thundering herd" phenomena during rare hash
  491. * collisions.
  492. */
  493. static wait_queue_head_t *page_waitqueue(struct page *page)
  494. {
  495. const struct zone *zone = page_zone(page);
  496. return &zone->wait_table[hash_ptr(page, zone->wait_table_bits)];
  497. }
  498. static inline void wake_up_page(struct page *page, int bit)
  499. {
  500. __wake_up_bit(page_waitqueue(page), &page->flags, bit);
  501. }
  502. void wait_on_page_bit(struct page *page, int bit_nr)
  503. {
  504. DEFINE_WAIT_BIT(wait, &page->flags, bit_nr);
  505. if (test_bit(bit_nr, &page->flags))
  506. __wait_on_bit(page_waitqueue(page), &wait, sync_page,
  507. TASK_UNINTERRUPTIBLE);
  508. }
  509. EXPORT_SYMBOL(wait_on_page_bit);
  510. /**
  511. * add_page_wait_queue - Add an arbitrary waiter to a page's wait queue
  512. * @page: Page defining the wait queue of interest
  513. * @waiter: Waiter to add to the queue
  514. *
  515. * Add an arbitrary @waiter to the wait queue for the nominated @page.
  516. */
  517. void add_page_wait_queue(struct page *page, wait_queue_t *waiter)
  518. {
  519. wait_queue_head_t *q = page_waitqueue(page);
  520. unsigned long flags;
  521. spin_lock_irqsave(&q->lock, flags);
  522. __add_wait_queue(q, waiter);
  523. spin_unlock_irqrestore(&q->lock, flags);
  524. }
  525. EXPORT_SYMBOL_GPL(add_page_wait_queue);
  526. /**
  527. * unlock_page - unlock a locked page
  528. * @page: the page
  529. *
  530. * Unlocks the page and wakes up sleepers in ___wait_on_page_locked().
  531. * Also wakes sleepers in wait_on_page_writeback() because the wakeup
  532. * mechananism between PageLocked pages and PageWriteback pages is shared.
  533. * But that's OK - sleepers in wait_on_page_writeback() just go back to sleep.
  534. *
  535. * The mb is necessary to enforce ordering between the clear_bit and the read
  536. * of the waitqueue (to avoid SMP races with a parallel wait_on_page_locked()).
  537. */
  538. void unlock_page(struct page *page)
  539. {
  540. VM_BUG_ON(!PageLocked(page));
  541. clear_bit_unlock(PG_locked, &page->flags);
  542. smp_mb__after_clear_bit();
  543. wake_up_page(page, PG_locked);
  544. }
  545. EXPORT_SYMBOL(unlock_page);
  546. /**
  547. * end_page_writeback - end writeback against a page
  548. * @page: the page
  549. */
  550. void end_page_writeback(struct page *page)
  551. {
  552. if (TestClearPageReclaim(page))
  553. rotate_reclaimable_page(page);
  554. if (!test_clear_page_writeback(page))
  555. BUG();
  556. smp_mb__after_clear_bit();
  557. wake_up_page(page, PG_writeback);
  558. }
  559. EXPORT_SYMBOL(end_page_writeback);
  560. /**
  561. * __lock_page - get a lock on the page, assuming we need to sleep to get it
  562. * @page: the page to lock
  563. *
  564. * Ugly. Running sync_page() in state TASK_UNINTERRUPTIBLE is scary. If some
  565. * random driver's requestfn sets TASK_RUNNING, we could busywait. However
  566. * chances are that on the second loop, the block layer's plug list is empty,
  567. * so sync_page() will then return in state TASK_UNINTERRUPTIBLE.
  568. */
  569. void __lock_page(struct page *page)
  570. {
  571. DEFINE_WAIT_BIT(wait, &page->flags, PG_locked);
  572. __wait_on_bit_lock(page_waitqueue(page), &wait, sync_page,
  573. TASK_UNINTERRUPTIBLE);
  574. }
  575. EXPORT_SYMBOL(__lock_page);
  576. int __lock_page_killable(struct page *page)
  577. {
  578. DEFINE_WAIT_BIT(wait, &page->flags, PG_locked);
  579. return __wait_on_bit_lock(page_waitqueue(page), &wait,
  580. sync_page_killable, TASK_KILLABLE);
  581. }
  582. EXPORT_SYMBOL_GPL(__lock_page_killable);
  583. /**
  584. * __lock_page_nosync - get a lock on the page, without calling sync_page()
  585. * @page: the page to lock
  586. *
  587. * Variant of lock_page that does not require the caller to hold a reference
  588. * on the page's mapping.
  589. */
  590. void __lock_page_nosync(struct page *page)
  591. {
  592. DEFINE_WAIT_BIT(wait, &page->flags, PG_locked);
  593. __wait_on_bit_lock(page_waitqueue(page), &wait, __sleep_on_page_lock,
  594. TASK_UNINTERRUPTIBLE);
  595. }
  596. /**
  597. * find_get_page - find and get a page reference
  598. * @mapping: the address_space to search
  599. * @offset: the page index
  600. *
  601. * Is there a pagecache struct page at the given (mapping, offset) tuple?
  602. * If yes, increment its refcount and return it; if no, return NULL.
  603. */
  604. struct page *find_get_page(struct address_space *mapping, pgoff_t offset)
  605. {
  606. void **pagep;
  607. struct page *page;
  608. rcu_read_lock();
  609. repeat:
  610. page = NULL;
  611. pagep = radix_tree_lookup_slot(&mapping->page_tree, offset);
  612. if (pagep) {
  613. page = radix_tree_deref_slot(pagep);
  614. if (unlikely(!page || page == RADIX_TREE_RETRY))
  615. goto repeat;
  616. if (!page_cache_get_speculative(page))
  617. goto repeat;
  618. /*
  619. * Has the page moved?
  620. * This is part of the lockless pagecache protocol. See
  621. * include/linux/pagemap.h for details.
  622. */
  623. if (unlikely(page != *pagep)) {
  624. page_cache_release(page);
  625. goto repeat;
  626. }
  627. }
  628. rcu_read_unlock();
  629. return page;
  630. }
  631. EXPORT_SYMBOL(find_get_page);
  632. /**
  633. * find_lock_page - locate, pin and lock a pagecache page
  634. * @mapping: the address_space to search
  635. * @offset: the page index
  636. *
  637. * Locates the desired pagecache page, locks it, increments its reference
  638. * count and returns its address.
  639. *
  640. * Returns zero if the page was not present. find_lock_page() may sleep.
  641. */
  642. struct page *find_lock_page(struct address_space *mapping, pgoff_t offset)
  643. {
  644. struct page *page;
  645. repeat:
  646. page = find_get_page(mapping, offset);
  647. if (page) {
  648. lock_page(page);
  649. /* Has the page been truncated? */
  650. if (unlikely(page->mapping != mapping)) {
  651. unlock_page(page);
  652. page_cache_release(page);
  653. goto repeat;
  654. }
  655. VM_BUG_ON(page->index != offset);
  656. }
  657. return page;
  658. }
  659. EXPORT_SYMBOL(find_lock_page);
  660. /**
  661. * find_or_create_page - locate or add a pagecache page
  662. * @mapping: the page's address_space
  663. * @index: the page's index into the mapping
  664. * @gfp_mask: page allocation mode
  665. *
  666. * Locates a page in the pagecache. If the page is not present, a new page
  667. * is allocated using @gfp_mask and is added to the pagecache and to the VM's
  668. * LRU list. The returned page is locked and has its reference count
  669. * incremented.
  670. *
  671. * find_or_create_page() may sleep, even if @gfp_flags specifies an atomic
  672. * allocation!
  673. *
  674. * find_or_create_page() returns the desired page's address, or zero on
  675. * memory exhaustion.
  676. */
  677. struct page *find_or_create_page(struct address_space *mapping,
  678. pgoff_t index, gfp_t gfp_mask)
  679. {
  680. struct page *page;
  681. int err;
  682. repeat:
  683. page = find_lock_page(mapping, index);
  684. if (!page) {
  685. page = __page_cache_alloc(gfp_mask);
  686. if (!page)
  687. return NULL;
  688. /*
  689. * We want a regular kernel memory (not highmem or DMA etc)
  690. * allocation for the radix tree nodes, but we need to honour
  691. * the context-specific requirements the caller has asked for.
  692. * GFP_RECLAIM_MASK collects those requirements.
  693. */
  694. err = add_to_page_cache_lru(page, mapping, index,
  695. (gfp_mask & GFP_RECLAIM_MASK));
  696. if (unlikely(err)) {
  697. page_cache_release(page);
  698. page = NULL;
  699. if (err == -EEXIST)
  700. goto repeat;
  701. }
  702. }
  703. return page;
  704. }
  705. EXPORT_SYMBOL(find_or_create_page);
  706. /**
  707. * find_get_pages - gang pagecache lookup
  708. * @mapping: The address_space to search
  709. * @start: The starting page index
  710. * @nr_pages: The maximum number of pages
  711. * @pages: Where the resulting pages are placed
  712. *
  713. * find_get_pages() will search for and return a group of up to
  714. * @nr_pages pages in the mapping. The pages are placed at @pages.
  715. * find_get_pages() takes a reference against the returned pages.
  716. *
  717. * The search returns a group of mapping-contiguous pages with ascending
  718. * indexes. There may be holes in the indices due to not-present pages.
  719. *
  720. * find_get_pages() returns the number of pages which were found.
  721. */
  722. unsigned find_get_pages(struct address_space *mapping, pgoff_t start,
  723. unsigned int nr_pages, struct page **pages)
  724. {
  725. unsigned int i;
  726. unsigned int ret;
  727. unsigned int nr_found;
  728. rcu_read_lock();
  729. restart:
  730. nr_found = radix_tree_gang_lookup_slot(&mapping->page_tree,
  731. (void ***)pages, start, nr_pages);
  732. ret = 0;
  733. for (i = 0; i < nr_found; i++) {
  734. struct page *page;
  735. repeat:
  736. page = radix_tree_deref_slot((void **)pages[i]);
  737. if (unlikely(!page))
  738. continue;
  739. /*
  740. * this can only trigger if nr_found == 1, making livelock
  741. * a non issue.
  742. */
  743. if (unlikely(page == RADIX_TREE_RETRY))
  744. goto restart;
  745. if (!page_cache_get_speculative(page))
  746. goto repeat;
  747. /* Has the page moved? */
  748. if (unlikely(page != *((void **)pages[i]))) {
  749. page_cache_release(page);
  750. goto repeat;
  751. }
  752. pages[ret] = page;
  753. ret++;
  754. }
  755. rcu_read_unlock();
  756. return ret;
  757. }
  758. /**
  759. * find_get_pages_contig - gang contiguous pagecache lookup
  760. * @mapping: The address_space to search
  761. * @index: The starting page index
  762. * @nr_pages: The maximum number of pages
  763. * @pages: Where the resulting pages are placed
  764. *
  765. * find_get_pages_contig() works exactly like find_get_pages(), except
  766. * that the returned number of pages are guaranteed to be contiguous.
  767. *
  768. * find_get_pages_contig() returns the number of pages which were found.
  769. */
  770. unsigned find_get_pages_contig(struct address_space *mapping, pgoff_t index,
  771. unsigned int nr_pages, struct page **pages)
  772. {
  773. unsigned int i;
  774. unsigned int ret;
  775. unsigned int nr_found;
  776. rcu_read_lock();
  777. restart:
  778. nr_found = radix_tree_gang_lookup_slot(&mapping->page_tree,
  779. (void ***)pages, index, nr_pages);
  780. ret = 0;
  781. for (i = 0; i < nr_found; i++) {
  782. struct page *page;
  783. repeat:
  784. page = radix_tree_deref_slot((void **)pages[i]);
  785. if (unlikely(!page))
  786. continue;
  787. /*
  788. * this can only trigger if nr_found == 1, making livelock
  789. * a non issue.
  790. */
  791. if (unlikely(page == RADIX_TREE_RETRY))
  792. goto restart;
  793. if (page->mapping == NULL || page->index != index)
  794. break;
  795. if (!page_cache_get_speculative(page))
  796. goto repeat;
  797. /* Has the page moved? */
  798. if (unlikely(page != *((void **)pages[i]))) {
  799. page_cache_release(page);
  800. goto repeat;
  801. }
  802. pages[ret] = page;
  803. ret++;
  804. index++;
  805. }
  806. rcu_read_unlock();
  807. return ret;
  808. }
  809. EXPORT_SYMBOL(find_get_pages_contig);
  810. /**
  811. * find_get_pages_tag - find and return pages that match @tag
  812. * @mapping: the address_space to search
  813. * @index: the starting page index
  814. * @tag: the tag index
  815. * @nr_pages: the maximum number of pages
  816. * @pages: where the resulting pages are placed
  817. *
  818. * Like find_get_pages, except we only return pages which are tagged with
  819. * @tag. We update @index to index the next page for the traversal.
  820. */
  821. unsigned find_get_pages_tag(struct address_space *mapping, pgoff_t *index,
  822. int tag, unsigned int nr_pages, struct page **pages)
  823. {
  824. unsigned int i;
  825. unsigned int ret;
  826. unsigned int nr_found;
  827. rcu_read_lock();
  828. restart:
  829. nr_found = radix_tree_gang_lookup_tag_slot(&mapping->page_tree,
  830. (void ***)pages, *index, nr_pages, tag);
  831. ret = 0;
  832. for (i = 0; i < nr_found; i++) {
  833. struct page *page;
  834. repeat:
  835. page = radix_tree_deref_slot((void **)pages[i]);
  836. if (unlikely(!page))
  837. continue;
  838. /*
  839. * this can only trigger if nr_found == 1, making livelock
  840. * a non issue.
  841. */
  842. if (unlikely(page == RADIX_TREE_RETRY))
  843. goto restart;
  844. if (!page_cache_get_speculative(page))
  845. goto repeat;
  846. /* Has the page moved? */
  847. if (unlikely(page != *((void **)pages[i]))) {
  848. page_cache_release(page);
  849. goto repeat;
  850. }
  851. pages[ret] = page;
  852. ret++;
  853. }
  854. rcu_read_unlock();
  855. if (ret)
  856. *index = pages[ret - 1]->index + 1;
  857. return ret;
  858. }
  859. EXPORT_SYMBOL(find_get_pages_tag);
  860. /**
  861. * grab_cache_page_nowait - returns locked page at given index in given cache
  862. * @mapping: target address_space
  863. * @index: the page index
  864. *
  865. * Same as grab_cache_page(), but do not wait if the page is unavailable.
  866. * This is intended for speculative data generators, where the data can
  867. * be regenerated if the page couldn't be grabbed. This routine should
  868. * be safe to call while holding the lock for another page.
  869. *
  870. * Clear __GFP_FS when allocating the page to avoid recursion into the fs
  871. * and deadlock against the caller's locked page.
  872. */
  873. struct page *
  874. grab_cache_page_nowait(struct address_space *mapping, pgoff_t index)
  875. {
  876. struct page *page = find_get_page(mapping, index);
  877. if (page) {
  878. if (trylock_page(page))
  879. return page;
  880. page_cache_release(page);
  881. return NULL;
  882. }
  883. page = __page_cache_alloc(mapping_gfp_mask(mapping) & ~__GFP_FS);
  884. if (page && add_to_page_cache_lru(page, mapping, index, GFP_NOFS)) {
  885. page_cache_release(page);
  886. page = NULL;
  887. }
  888. return page;
  889. }
  890. EXPORT_SYMBOL(grab_cache_page_nowait);
  891. /*
  892. * CD/DVDs are error prone. When a medium error occurs, the driver may fail
  893. * a _large_ part of the i/o request. Imagine the worst scenario:
  894. *
  895. * ---R__________________________________________B__________
  896. * ^ reading here ^ bad block(assume 4k)
  897. *
  898. * read(R) => miss => readahead(R...B) => media error => frustrating retries
  899. * => failing the whole request => read(R) => read(R+1) =>
  900. * readahead(R+1...B+1) => bang => read(R+2) => read(R+3) =>
  901. * readahead(R+3...B+2) => bang => read(R+3) => read(R+4) =>
  902. * readahead(R+4...B+3) => bang => read(R+4) => read(R+5) => ......
  903. *
  904. * It is going insane. Fix it by quickly scaling down the readahead size.
  905. */
  906. static void shrink_readahead_size_eio(struct file *filp,
  907. struct file_ra_state *ra)
  908. {
  909. if (!ra->ra_pages)
  910. return;
  911. ra->ra_pages /= 4;
  912. }
  913. /**
  914. * do_generic_file_read - generic file read routine
  915. * @filp: the file to read
  916. * @ppos: current file position
  917. * @desc: read_descriptor
  918. * @actor: read method
  919. *
  920. * This is a generic file read routine, and uses the
  921. * mapping->a_ops->readpage() function for the actual low-level stuff.
  922. *
  923. * This is really ugly. But the goto's actually try to clarify some
  924. * of the logic when it comes to error handling etc.
  925. */
  926. static void do_generic_file_read(struct file *filp, loff_t *ppos,
  927. read_descriptor_t *desc, read_actor_t actor)
  928. {
  929. struct address_space *mapping = filp->f_mapping;
  930. struct inode *inode = mapping->host;
  931. struct file_ra_state *ra = &filp->f_ra;
  932. pgoff_t index;
  933. pgoff_t last_index;
  934. pgoff_t prev_index;
  935. unsigned long offset; /* offset into pagecache page */
  936. unsigned int prev_offset;
  937. int error;
  938. index = *ppos >> PAGE_CACHE_SHIFT;
  939. prev_index = ra->prev_pos >> PAGE_CACHE_SHIFT;
  940. prev_offset = ra->prev_pos & (PAGE_CACHE_SIZE-1);
  941. last_index = (*ppos + desc->count + PAGE_CACHE_SIZE-1) >> PAGE_CACHE_SHIFT;
  942. offset = *ppos & ~PAGE_CACHE_MASK;
  943. for (;;) {
  944. struct page *page;
  945. pgoff_t end_index;
  946. loff_t isize;
  947. unsigned long nr, ret;
  948. cond_resched();
  949. find_page:
  950. page = find_get_page(mapping, index);
  951. if (!page) {
  952. page_cache_sync_readahead(mapping,
  953. ra, filp,
  954. index, last_index - index);
  955. page = find_get_page(mapping, index);
  956. if (unlikely(page == NULL))
  957. goto no_cached_page;
  958. }
  959. if (PageReadahead(page)) {
  960. page_cache_async_readahead(mapping,
  961. ra, filp, page,
  962. index, last_index - index);
  963. }
  964. if (!PageUptodate(page)) {
  965. if (inode->i_blkbits == PAGE_CACHE_SHIFT ||
  966. !mapping->a_ops->is_partially_uptodate)
  967. goto page_not_up_to_date;
  968. if (!trylock_page(page))
  969. goto page_not_up_to_date;
  970. if (!mapping->a_ops->is_partially_uptodate(page,
  971. desc, offset))
  972. goto page_not_up_to_date_locked;
  973. unlock_page(page);
  974. }
  975. page_ok:
  976. /*
  977. * i_size must be checked after we know the page is Uptodate.
  978. *
  979. * Checking i_size after the check allows us to calculate
  980. * the correct value for "nr", which means the zero-filled
  981. * part of the page is not copied back to userspace (unless
  982. * another truncate extends the file - this is desired though).
  983. */
  984. isize = i_size_read(inode);
  985. end_index = (isize - 1) >> PAGE_CACHE_SHIFT;
  986. if (unlikely(!isize || index > end_index)) {
  987. page_cache_release(page);
  988. goto out;
  989. }
  990. /* nr is the maximum number of bytes to copy from this page */
  991. nr = PAGE_CACHE_SIZE;
  992. if (index == end_index) {
  993. nr = ((isize - 1) & ~PAGE_CACHE_MASK) + 1;
  994. if (nr <= offset) {
  995. page_cache_release(page);
  996. goto out;
  997. }
  998. }
  999. nr = nr - offset;
  1000. /* If users can be writing to this page using arbitrary
  1001. * virtual addresses, take care about potential aliasing
  1002. * before reading the page on the kernel side.
  1003. */
  1004. if (mapping_writably_mapped(mapping))
  1005. flush_dcache_page(page);
  1006. /*
  1007. * When a sequential read accesses a page several times,
  1008. * only mark it as accessed the first time.
  1009. */
  1010. if (prev_index != index || offset != prev_offset)
  1011. mark_page_accessed(page);
  1012. prev_index = index;
  1013. /*
  1014. * Ok, we have the page, and it's up-to-date, so
  1015. * now we can copy it to user space...
  1016. *
  1017. * The actor routine returns how many bytes were actually used..
  1018. * NOTE! This may not be the same as how much of a user buffer
  1019. * we filled up (we may be padding etc), so we can only update
  1020. * "pos" here (the actor routine has to update the user buffer
  1021. * pointers and the remaining count).
  1022. */
  1023. ret = actor(desc, page, offset, nr);
  1024. offset += ret;
  1025. index += offset >> PAGE_CACHE_SHIFT;
  1026. offset &= ~PAGE_CACHE_MASK;
  1027. prev_offset = offset;
  1028. page_cache_release(page);
  1029. if (ret == nr && desc->count)
  1030. continue;
  1031. goto out;
  1032. page_not_up_to_date:
  1033. /* Get exclusive access to the page ... */
  1034. error = lock_page_killable(page);
  1035. if (unlikely(error))
  1036. goto readpage_error;
  1037. page_not_up_to_date_locked:
  1038. /* Did it get truncated before we got the lock? */
  1039. if (!page->mapping) {
  1040. unlock_page(page);
  1041. page_cache_release(page);
  1042. continue;
  1043. }
  1044. /* Did somebody else fill it already? */
  1045. if (PageUptodate(page)) {
  1046. unlock_page(page);
  1047. goto page_ok;
  1048. }
  1049. readpage:
  1050. /* Start the actual read. The read will unlock the page. */
  1051. error = mapping->a_ops->readpage(filp, page);
  1052. if (unlikely(error)) {
  1053. if (error == AOP_TRUNCATED_PAGE) {
  1054. page_cache_release(page);
  1055. goto find_page;
  1056. }
  1057. goto readpage_error;
  1058. }
  1059. if (!PageUptodate(page)) {
  1060. error = lock_page_killable(page);
  1061. if (unlikely(error))
  1062. goto readpage_error;
  1063. if (!PageUptodate(page)) {
  1064. if (page->mapping == NULL) {
  1065. /*
  1066. * invalidate_inode_pages got it
  1067. */
  1068. unlock_page(page);
  1069. page_cache_release(page);
  1070. goto find_page;
  1071. }
  1072. unlock_page(page);
  1073. shrink_readahead_size_eio(filp, ra);
  1074. error = -EIO;
  1075. goto readpage_error;
  1076. }
  1077. unlock_page(page);
  1078. }
  1079. goto page_ok;
  1080. readpage_error:
  1081. /* UHHUH! A synchronous read error occurred. Report it */
  1082. desc->error = error;
  1083. page_cache_release(page);
  1084. goto out;
  1085. no_cached_page:
  1086. /*
  1087. * Ok, it wasn't cached, so we need to create a new
  1088. * page..
  1089. */
  1090. page = page_cache_alloc_cold(mapping);
  1091. if (!page) {
  1092. desc->error = -ENOMEM;
  1093. goto out;
  1094. }
  1095. error = add_to_page_cache_lru(page, mapping,
  1096. index, GFP_KERNEL);
  1097. if (error) {
  1098. page_cache_release(page);
  1099. if (error == -EEXIST)
  1100. goto find_page;
  1101. desc->error = error;
  1102. goto out;
  1103. }
  1104. goto readpage;
  1105. }
  1106. out:
  1107. ra->prev_pos = prev_index;
  1108. ra->prev_pos <<= PAGE_CACHE_SHIFT;
  1109. ra->prev_pos |= prev_offset;
  1110. *ppos = ((loff_t)index << PAGE_CACHE_SHIFT) + offset;
  1111. file_accessed(filp);
  1112. }
  1113. int file_read_actor(read_descriptor_t *desc, struct page *page,
  1114. unsigned long offset, unsigned long size)
  1115. {
  1116. char *kaddr;
  1117. unsigned long left, count = desc->count;
  1118. if (size > count)
  1119. size = count;
  1120. /*
  1121. * Faults on the destination of a read are common, so do it before
  1122. * taking the kmap.
  1123. */
  1124. if (!fault_in_pages_writeable(desc->arg.buf, size)) {
  1125. kaddr = kmap_atomic(page, KM_USER0);
  1126. left = __copy_to_user_inatomic(desc->arg.buf,
  1127. kaddr + offset, size);
  1128. kunmap_atomic(kaddr, KM_USER0);
  1129. if (left == 0)
  1130. goto success;
  1131. }
  1132. /* Do it the slow way */
  1133. kaddr = kmap(page);
  1134. left = __copy_to_user(desc->arg.buf, kaddr + offset, size);
  1135. kunmap(page);
  1136. if (left) {
  1137. size -= left;
  1138. desc->error = -EFAULT;
  1139. }
  1140. success:
  1141. desc->count = count - size;
  1142. desc->written += size;
  1143. desc->arg.buf += size;
  1144. return size;
  1145. }
  1146. /*
  1147. * Performs necessary checks before doing a write
  1148. * @iov: io vector request
  1149. * @nr_segs: number of segments in the iovec
  1150. * @count: number of bytes to write
  1151. * @access_flags: type of access: %VERIFY_READ or %VERIFY_WRITE
  1152. *
  1153. * Adjust number of segments and amount of bytes to write (nr_segs should be
  1154. * properly initialized first). Returns appropriate error code that caller
  1155. * should return or zero in case that write should be allowed.
  1156. */
  1157. int generic_segment_checks(const struct iovec *iov,
  1158. unsigned long *nr_segs, size_t *count, int access_flags)
  1159. {
  1160. unsigned long seg;
  1161. size_t cnt = 0;
  1162. for (seg = 0; seg < *nr_segs; seg++) {
  1163. const struct iovec *iv = &iov[seg];
  1164. /*
  1165. * If any segment has a negative length, or the cumulative
  1166. * length ever wraps negative then return -EINVAL.
  1167. */
  1168. cnt += iv->iov_len;
  1169. if (unlikely((ssize_t)(cnt|iv->iov_len) < 0))
  1170. return -EINVAL;
  1171. if (access_ok(access_flags, iv->iov_base, iv->iov_len))
  1172. continue;
  1173. if (seg == 0)
  1174. return -EFAULT;
  1175. *nr_segs = seg;
  1176. cnt -= iv->iov_len; /* This segment is no good */
  1177. break;
  1178. }
  1179. *count = cnt;
  1180. return 0;
  1181. }
  1182. EXPORT_SYMBOL(generic_segment_checks);
  1183. /**
  1184. * generic_file_aio_read - generic filesystem read routine
  1185. * @iocb: kernel I/O control block
  1186. * @iov: io vector request
  1187. * @nr_segs: number of segments in the iovec
  1188. * @pos: current file position
  1189. *
  1190. * This is the "read()" routine for all filesystems
  1191. * that can use the page cache directly.
  1192. */
  1193. ssize_t
  1194. generic_file_aio_read(struct kiocb *iocb, const struct iovec *iov,
  1195. unsigned long nr_segs, loff_t pos)
  1196. {
  1197. struct file *filp = iocb->ki_filp;
  1198. ssize_t retval;
  1199. unsigned long seg;
  1200. size_t count;
  1201. loff_t *ppos = &iocb->ki_pos;
  1202. count = 0;
  1203. retval = generic_segment_checks(iov, &nr_segs, &count, VERIFY_WRITE);
  1204. if (retval)
  1205. return retval;
  1206. /* coalesce the iovecs and go direct-to-BIO for O_DIRECT */
  1207. if (filp->f_flags & O_DIRECT) {
  1208. loff_t size;
  1209. struct address_space *mapping;
  1210. struct inode *inode;
  1211. mapping = filp->f_mapping;
  1212. inode = mapping->host;
  1213. if (!count)
  1214. goto out; /* skip atime */
  1215. size = i_size_read(inode);
  1216. if (pos < size) {
  1217. retval = filemap_write_and_wait_range(mapping, pos,
  1218. pos + iov_length(iov, nr_segs) - 1);
  1219. if (!retval) {
  1220. retval = mapping->a_ops->direct_IO(READ, iocb,
  1221. iov, pos, nr_segs);
  1222. }
  1223. if (retval > 0)
  1224. *ppos = pos + retval;
  1225. if (retval) {
  1226. file_accessed(filp);
  1227. goto out;
  1228. }
  1229. }
  1230. }
  1231. for (seg = 0; seg < nr_segs; seg++) {
  1232. read_descriptor_t desc;
  1233. desc.written = 0;
  1234. desc.arg.buf = iov[seg].iov_base;
  1235. desc.count = iov[seg].iov_len;
  1236. if (desc.count == 0)
  1237. continue;
  1238. desc.error = 0;
  1239. do_generic_file_read(filp, ppos, &desc, file_read_actor);
  1240. retval += desc.written;
  1241. if (desc.error) {
  1242. retval = retval ?: desc.error;
  1243. break;
  1244. }
  1245. if (desc.count > 0)
  1246. break;
  1247. }
  1248. out:
  1249. return retval;
  1250. }
  1251. EXPORT_SYMBOL(generic_file_aio_read);
  1252. static ssize_t
  1253. do_readahead(struct address_space *mapping, struct file *filp,
  1254. pgoff_t index, unsigned long nr)
  1255. {
  1256. if (!mapping || !mapping->a_ops || !mapping->a_ops->readpage)
  1257. return -EINVAL;
  1258. force_page_cache_readahead(mapping, filp, index,
  1259. max_sane_readahead(nr));
  1260. return 0;
  1261. }
  1262. SYSCALL_DEFINE(readahead)(int fd, loff_t offset, size_t count)
  1263. {
  1264. ssize_t ret;
  1265. struct file *file;
  1266. ret = -EBADF;
  1267. file = fget(fd);
  1268. if (file) {
  1269. if (file->f_mode & FMODE_READ) {
  1270. struct address_space *mapping = file->f_mapping;
  1271. pgoff_t start = offset >> PAGE_CACHE_SHIFT;
  1272. pgoff_t end = (offset + count - 1) >> PAGE_CACHE_SHIFT;
  1273. unsigned long len = end - start + 1;
  1274. ret = do_readahead(mapping, file, start, len);
  1275. }
  1276. fput(file);
  1277. }
  1278. return ret;
  1279. }
  1280. #ifdef CONFIG_HAVE_SYSCALL_WRAPPERS
  1281. asmlinkage long SyS_readahead(long fd, loff_t offset, long count)
  1282. {
  1283. return SYSC_readahead((int) fd, offset, (size_t) count);
  1284. }
  1285. SYSCALL_ALIAS(sys_readahead, SyS_readahead);
  1286. #endif
  1287. #ifdef CONFIG_MMU
  1288. /**
  1289. * page_cache_read - adds requested page to the page cache if not already there
  1290. * @file: file to read
  1291. * @offset: page index
  1292. *
  1293. * This adds the requested page to the page cache if it isn't already there,
  1294. * and schedules an I/O to read in its contents from disk.
  1295. */
  1296. static int page_cache_read(struct file *file, pgoff_t offset)
  1297. {
  1298. struct address_space *mapping = file->f_mapping;
  1299. struct page *page;
  1300. int ret;
  1301. do {
  1302. page = page_cache_alloc_cold(mapping);
  1303. if (!page)
  1304. return -ENOMEM;
  1305. ret = add_to_page_cache_lru(page, mapping, offset, GFP_KERNEL);
  1306. if (ret == 0)
  1307. ret = mapping->a_ops->readpage(file, page);
  1308. else if (ret == -EEXIST)
  1309. ret = 0; /* losing race to add is OK */
  1310. page_cache_release(page);
  1311. } while (ret == AOP_TRUNCATED_PAGE);
  1312. return ret;
  1313. }
  1314. #define MMAP_LOTSAMISS (100)
  1315. /**
  1316. * filemap_fault - read in file data for page fault handling
  1317. * @vma: vma in which the fault was taken
  1318. * @vmf: struct vm_fault containing details of the fault
  1319. *
  1320. * filemap_fault() is invoked via the vma operations vector for a
  1321. * mapped memory region to read in file data during a page fault.
  1322. *
  1323. * The goto's are kind of ugly, but this streamlines the normal case of having
  1324. * it in the page cache, and handles the special cases reasonably without
  1325. * having a lot of duplicated code.
  1326. */
  1327. int filemap_fault(struct vm_area_struct *vma, struct vm_fault *vmf)
  1328. {
  1329. int error;
  1330. struct file *file = vma->vm_file;
  1331. struct address_space *mapping = file->f_mapping;
  1332. struct file_ra_state *ra = &file->f_ra;
  1333. struct inode *inode = mapping->host;
  1334. struct page *page;
  1335. pgoff_t size;
  1336. int did_readaround = 0;
  1337. int ret = 0;
  1338. size = (i_size_read(inode) + PAGE_CACHE_SIZE - 1) >> PAGE_CACHE_SHIFT;
  1339. if (vmf->pgoff >= size)
  1340. return VM_FAULT_SIGBUS;
  1341. /* If we don't want any read-ahead, don't bother */
  1342. if (VM_RandomReadHint(vma))
  1343. goto no_cached_page;
  1344. /*
  1345. * Do we have something in the page cache already?
  1346. */
  1347. retry_find:
  1348. page = find_lock_page(mapping, vmf->pgoff);
  1349. /*
  1350. * For sequential accesses, we use the generic readahead logic.
  1351. */
  1352. if (VM_SequentialReadHint(vma)) {
  1353. if (!page) {
  1354. page_cache_sync_readahead(mapping, ra, file,
  1355. vmf->pgoff, 1);
  1356. page = find_lock_page(mapping, vmf->pgoff);
  1357. if (!page)
  1358. goto no_cached_page;
  1359. }
  1360. if (PageReadahead(page)) {
  1361. page_cache_async_readahead(mapping, ra, file, page,
  1362. vmf->pgoff, 1);
  1363. }
  1364. }
  1365. if (!page) {
  1366. unsigned long ra_pages;
  1367. ra->mmap_miss++;
  1368. /*
  1369. * Do we miss much more than hit in this file? If so,
  1370. * stop bothering with read-ahead. It will only hurt.
  1371. */
  1372. if (ra->mmap_miss > MMAP_LOTSAMISS)
  1373. goto no_cached_page;
  1374. /*
  1375. * To keep the pgmajfault counter straight, we need to
  1376. * check did_readaround, as this is an inner loop.
  1377. */
  1378. if (!did_readaround) {
  1379. ret = VM_FAULT_MAJOR;
  1380. count_vm_event(PGMAJFAULT);
  1381. }
  1382. did_readaround = 1;
  1383. ra_pages = max_sane_readahead(file->f_ra.ra_pages);
  1384. if (ra_pages) {
  1385. pgoff_t start = 0;
  1386. if (vmf->pgoff > ra_pages / 2)
  1387. start = vmf->pgoff - ra_pages / 2;
  1388. do_page_cache_readahead(mapping, file, start, ra_pages);
  1389. }
  1390. page = find_lock_page(mapping, vmf->pgoff);
  1391. if (!page)
  1392. goto no_cached_page;
  1393. }
  1394. if (!did_readaround)
  1395. ra->mmap_miss--;
  1396. /*
  1397. * We have a locked page in the page cache, now we need to check
  1398. * that it's up-to-date. If not, it is going to be due to an error.
  1399. */
  1400. if (unlikely(!PageUptodate(page)))
  1401. goto page_not_uptodate;
  1402. /* Must recheck i_size under page lock */
  1403. size = (i_size_read(inode) + PAGE_CACHE_SIZE - 1) >> PAGE_CACHE_SHIFT;
  1404. if (unlikely(vmf->pgoff >= size)) {
  1405. unlock_page(page);
  1406. page_cache_release(page);
  1407. return VM_FAULT_SIGBUS;
  1408. }
  1409. /*
  1410. * Found the page and have a reference on it.
  1411. */
  1412. ra->prev_pos = (loff_t)page->index << PAGE_CACHE_SHIFT;
  1413. vmf->page = page;
  1414. return ret | VM_FAULT_LOCKED;
  1415. no_cached_page:
  1416. /*
  1417. * We're only likely to ever get here if MADV_RANDOM is in
  1418. * effect.
  1419. */
  1420. error = page_cache_read(file, vmf->pgoff);
  1421. /*
  1422. * The page we want has now been added to the page cache.
  1423. * In the unlikely event that someone removed it in the
  1424. * meantime, we'll just come back here and read it again.
  1425. */
  1426. if (error >= 0)
  1427. goto retry_find;
  1428. /*
  1429. * An error return from page_cache_read can result if the
  1430. * system is low on memory, or a problem occurs while trying
  1431. * to schedule I/O.
  1432. */
  1433. if (error == -ENOMEM)
  1434. return VM_FAULT_OOM;
  1435. return VM_FAULT_SIGBUS;
  1436. page_not_uptodate:
  1437. /* IO error path */
  1438. if (!did_readaround) {
  1439. ret = VM_FAULT_MAJOR;
  1440. count_vm_event(PGMAJFAULT);
  1441. }
  1442. /*
  1443. * Umm, take care of errors if the page isn't up-to-date.
  1444. * Try to re-read it _once_. We do this synchronously,
  1445. * because there really aren't any performance issues here
  1446. * and we need to check for errors.
  1447. */
  1448. ClearPageError(page);
  1449. error = mapping->a_ops->readpage(file, page);
  1450. if (!error) {
  1451. wait_on_page_locked(page);
  1452. if (!PageUptodate(page))
  1453. error = -EIO;
  1454. }
  1455. page_cache_release(page);
  1456. if (!error || error == AOP_TRUNCATED_PAGE)
  1457. goto retry_find;
  1458. /* Things didn't work out. Return zero to tell the mm layer so. */
  1459. shrink_readahead_size_eio(file, ra);
  1460. return VM_FAULT_SIGBUS;
  1461. }
  1462. EXPORT_SYMBOL(filemap_fault);
  1463. struct vm_operations_struct generic_file_vm_ops = {
  1464. .fault = filemap_fault,
  1465. };
  1466. /* This is used for a general mmap of a disk file */
  1467. int generic_file_mmap(struct file * file, struct vm_area_struct * vma)
  1468. {
  1469. struct address_space *mapping = file->f_mapping;
  1470. if (!mapping->a_ops->readpage)
  1471. return -ENOEXEC;
  1472. file_accessed(file);
  1473. vma->vm_ops = &generic_file_vm_ops;
  1474. vma->vm_flags |= VM_CAN_NONLINEAR;
  1475. return 0;
  1476. }
  1477. /*
  1478. * This is for filesystems which do not implement ->writepage.
  1479. */
  1480. int generic_file_readonly_mmap(struct file *file, struct vm_area_struct *vma)
  1481. {
  1482. if ((vma->vm_flags & VM_SHARED) && (vma->vm_flags & VM_MAYWRITE))
  1483. return -EINVAL;
  1484. return generic_file_mmap(file, vma);
  1485. }
  1486. #else
  1487. int generic_file_mmap(struct file * file, struct vm_area_struct * vma)
  1488. {
  1489. return -ENOSYS;
  1490. }
  1491. int generic_file_readonly_mmap(struct file * file, struct vm_area_struct * vma)
  1492. {
  1493. return -ENOSYS;
  1494. }
  1495. #endif /* CONFIG_MMU */
  1496. EXPORT_SYMBOL(generic_file_mmap);
  1497. EXPORT_SYMBOL(generic_file_readonly_mmap);
  1498. static struct page *__read_cache_page(struct address_space *mapping,
  1499. pgoff_t index,
  1500. int (*filler)(void *,struct page*),
  1501. void *data)
  1502. {
  1503. struct page *page;
  1504. int err;
  1505. repeat:
  1506. page = find_get_page(mapping, index);
  1507. if (!page) {
  1508. page = page_cache_alloc_cold(mapping);
  1509. if (!page)
  1510. return ERR_PTR(-ENOMEM);
  1511. err = add_to_page_cache_lru(page, mapping, index, GFP_KERNEL);
  1512. if (unlikely(err)) {
  1513. page_cache_release(page);
  1514. if (err == -EEXIST)
  1515. goto repeat;
  1516. /* Presumably ENOMEM for radix tree node */
  1517. return ERR_PTR(err);
  1518. }
  1519. err = filler(data, page);
  1520. if (err < 0) {
  1521. page_cache_release(page);
  1522. page = ERR_PTR(err);
  1523. }
  1524. }
  1525. return page;
  1526. }
  1527. /**
  1528. * read_cache_page_async - read into page cache, fill it if needed
  1529. * @mapping: the page's address_space
  1530. * @index: the page index
  1531. * @filler: function to perform the read
  1532. * @data: destination for read data
  1533. *
  1534. * Same as read_cache_page, but don't wait for page to become unlocked
  1535. * after submitting it to the filler.
  1536. *
  1537. * Read into the page cache. If a page already exists, and PageUptodate() is
  1538. * not set, try to fill the page but don't wait for it to become unlocked.
  1539. *
  1540. * If the page does not get brought uptodate, return -EIO.
  1541. */
  1542. struct page *read_cache_page_async(struct address_space *mapping,
  1543. pgoff_t index,
  1544. int (*filler)(void *,struct page*),
  1545. void *data)
  1546. {
  1547. struct page *page;
  1548. int err;
  1549. retry:
  1550. page = __read_cache_page(mapping, index, filler, data);
  1551. if (IS_ERR(page))
  1552. return page;
  1553. if (PageUptodate(page))
  1554. goto out;
  1555. lock_page(page);
  1556. if (!page->mapping) {
  1557. unlock_page(page);
  1558. page_cache_release(page);
  1559. goto retry;
  1560. }
  1561. if (PageUptodate(page)) {
  1562. unlock_page(page);
  1563. goto out;
  1564. }
  1565. err = filler(data, page);
  1566. if (err < 0) {
  1567. page_cache_release(page);
  1568. return ERR_PTR(err);
  1569. }
  1570. out:
  1571. mark_page_accessed(page);
  1572. return page;
  1573. }
  1574. EXPORT_SYMBOL(read_cache_page_async);
  1575. /**
  1576. * read_cache_page - read into page cache, fill it if needed
  1577. * @mapping: the page's address_space
  1578. * @index: the page index
  1579. * @filler: function to perform the read
  1580. * @data: destination for read data
  1581. *
  1582. * Read into the page cache. If a page already exists, and PageUptodate() is
  1583. * not set, try to fill the page then wait for it to become unlocked.
  1584. *
  1585. * If the page does not get brought uptodate, return -EIO.
  1586. */
  1587. struct page *read_cache_page(struct address_space *mapping,
  1588. pgoff_t index,
  1589. int (*filler)(void *,struct page*),
  1590. void *data)
  1591. {
  1592. struct page *page;
  1593. page = read_cache_page_async(mapping, index, filler, data);
  1594. if (IS_ERR(page))
  1595. goto out;
  1596. wait_on_page_locked(page);
  1597. if (!PageUptodate(page)) {
  1598. page_cache_release(page);
  1599. page = ERR_PTR(-EIO);
  1600. }
  1601. out:
  1602. return page;
  1603. }
  1604. EXPORT_SYMBOL(read_cache_page);
  1605. /*
  1606. * The logic we want is
  1607. *
  1608. * if suid or (sgid and xgrp)
  1609. * remove privs
  1610. */
  1611. int should_remove_suid(struct dentry *dentry)
  1612. {
  1613. mode_t mode = dentry->d_inode->i_mode;
  1614. int kill = 0;
  1615. /* suid always must be killed */
  1616. if (unlikely(mode & S_ISUID))
  1617. kill = ATTR_KILL_SUID;
  1618. /*
  1619. * sgid without any exec bits is just a mandatory locking mark; leave
  1620. * it alone. If some exec bits are set, it's a real sgid; kill it.
  1621. */
  1622. if (unlikely((mode & S_ISGID) && (mode & S_IXGRP)))
  1623. kill |= ATTR_KILL_SGID;
  1624. if (unlikely(kill && !capable(CAP_FSETID) && S_ISREG(mode)))
  1625. return kill;
  1626. return 0;
  1627. }
  1628. EXPORT_SYMBOL(should_remove_suid);
  1629. static int __remove_suid(struct dentry *dentry, int kill)
  1630. {
  1631. struct iattr newattrs;
  1632. newattrs.ia_valid = ATTR_FORCE | kill;
  1633. return notify_change(dentry, &newattrs);
  1634. }
  1635. int file_remove_suid(struct file *file)
  1636. {
  1637. struct dentry *dentry = file->f_path.dentry;
  1638. int killsuid = should_remove_suid(dentry);
  1639. int killpriv = security_inode_need_killpriv(dentry);
  1640. int error = 0;
  1641. if (killpriv < 0)
  1642. return killpriv;
  1643. if (killpriv)
  1644. error = security_inode_killpriv(dentry);
  1645. if (!error && killsuid)
  1646. error = __remove_suid(dentry, killsuid);
  1647. return error;
  1648. }
  1649. EXPORT_SYMBOL(file_remove_suid);
  1650. static size_t __iovec_copy_from_user_inatomic(char *vaddr,
  1651. const struct iovec *iov, size_t base, size_t bytes)
  1652. {
  1653. size_t copied = 0, left = 0;
  1654. while (bytes) {
  1655. char __user *buf = iov->iov_base + base;
  1656. int copy = min(bytes, iov->iov_len - base);
  1657. base = 0;
  1658. left = __copy_from_user_inatomic(vaddr, buf, copy);
  1659. copied += copy;
  1660. bytes -= copy;
  1661. vaddr += copy;
  1662. iov++;
  1663. if (unlikely(left))
  1664. break;
  1665. }
  1666. return copied - left;
  1667. }
  1668. /*
  1669. * Copy as much as we can into the page and return the number of bytes which
  1670. * were sucessfully copied. If a fault is encountered then return the number of
  1671. * bytes which were copied.
  1672. */
  1673. size_t iov_iter_copy_from_user_atomic(struct page *page,
  1674. struct iov_iter *i, unsigned long offset, size_t bytes)
  1675. {
  1676. char *kaddr;
  1677. size_t copied;
  1678. BUG_ON(!in_atomic());
  1679. kaddr = kmap_atomic(page, KM_USER0);
  1680. if (likely(i->nr_segs == 1)) {
  1681. int left;
  1682. char __user *buf = i->iov->iov_base + i->iov_offset;
  1683. left = __copy_from_user_inatomic(kaddr + offset, buf, bytes);
  1684. copied = bytes - left;
  1685. } else {
  1686. copied = __iovec_copy_from_user_inatomic(kaddr + offset,
  1687. i->iov, i->iov_offset, bytes);
  1688. }
  1689. kunmap_atomic(kaddr, KM_USER0);
  1690. return copied;
  1691. }
  1692. EXPORT_SYMBOL(iov_iter_copy_from_user_atomic);
  1693. /*
  1694. * This has the same sideeffects and return value as
  1695. * iov_iter_copy_from_user_atomic().
  1696. * The difference is that it attempts to resolve faults.
  1697. * Page must not be locked.
  1698. */
  1699. size_t iov_iter_copy_from_user(struct page *page,
  1700. struct iov_iter *i, unsigned long offset, size_t bytes)
  1701. {
  1702. char *kaddr;
  1703. size_t copied;
  1704. kaddr = kmap(page);
  1705. if (likely(i->nr_segs == 1)) {
  1706. int left;
  1707. char __user *buf = i->iov->iov_base + i->iov_offset;
  1708. left = __copy_from_user(kaddr + offset, buf, bytes);
  1709. copied = bytes - left;
  1710. } else {
  1711. copied = __iovec_copy_from_user_inatomic(kaddr + offset,
  1712. i->iov, i->iov_offset, bytes);
  1713. }
  1714. kunmap(page);
  1715. return copied;
  1716. }
  1717. EXPORT_SYMBOL(iov_iter_copy_from_user);
  1718. void iov_iter_advance(struct iov_iter *i, size_t bytes)
  1719. {
  1720. BUG_ON(i->count < bytes);
  1721. if (likely(i->nr_segs == 1)) {
  1722. i->iov_offset += bytes;
  1723. i->count -= bytes;
  1724. } else {
  1725. const struct iovec *iov = i->iov;
  1726. size_t base = i->iov_offset;
  1727. /*
  1728. * The !iov->iov_len check ensures we skip over unlikely
  1729. * zero-length segments (without overruning the iovec).
  1730. */
  1731. while (bytes || unlikely(i->count && !iov->iov_len)) {
  1732. int copy;
  1733. copy = min(bytes, iov->iov_len - base);
  1734. BUG_ON(!i->count || i->count < copy);
  1735. i->count -= copy;
  1736. bytes -= copy;
  1737. base += copy;
  1738. if (iov->iov_len == base) {
  1739. iov++;
  1740. base = 0;
  1741. }
  1742. }
  1743. i->iov = iov;
  1744. i->iov_offset = base;
  1745. }
  1746. }
  1747. EXPORT_SYMBOL(iov_iter_advance);
  1748. /*
  1749. * Fault in the first iovec of the given iov_iter, to a maximum length
  1750. * of bytes. Returns 0 on success, or non-zero if the memory could not be
  1751. * accessed (ie. because it is an invalid address).
  1752. *
  1753. * writev-intensive code may want this to prefault several iovecs -- that
  1754. * would be possible (callers must not rely on the fact that _only_ the
  1755. * first iovec will be faulted with the current implementation).
  1756. */
  1757. int iov_iter_fault_in_readable(struct iov_iter *i, size_t bytes)
  1758. {
  1759. char __user *buf = i->iov->iov_base + i->iov_offset;
  1760. bytes = min(bytes, i->iov->iov_len - i->iov_offset);
  1761. return fault_in_pages_readable(buf, bytes);
  1762. }
  1763. EXPORT_SYMBOL(iov_iter_fault_in_readable);
  1764. /*
  1765. * Return the count of just the current iov_iter segment.
  1766. */
  1767. size_t iov_iter_single_seg_count(struct iov_iter *i)
  1768. {
  1769. const struct iovec *iov = i->iov;
  1770. if (i->nr_segs == 1)
  1771. return i->count;
  1772. else
  1773. return min(i->count, iov->iov_len - i->iov_offset);
  1774. }
  1775. EXPORT_SYMBOL(iov_iter_single_seg_count);
  1776. /*
  1777. * Performs necessary checks before doing a write
  1778. *
  1779. * Can adjust writing position or amount of bytes to write.
  1780. * Returns appropriate error code that caller should return or
  1781. * zero in case that write should be allowed.
  1782. */
  1783. inline int generic_write_checks(struct file *file, loff_t *pos, size_t *count, int isblk)
  1784. {
  1785. struct inode *inode = file->f_mapping->host;
  1786. unsigned long limit = current->signal->rlim[RLIMIT_FSIZE].rlim_cur;
  1787. if (unlikely(*pos < 0))
  1788. return -EINVAL;
  1789. if (!isblk) {
  1790. /* FIXME: this is for backwards compatibility with 2.4 */
  1791. if (file->f_flags & O_APPEND)
  1792. *pos = i_size_read(inode);
  1793. if (limit != RLIM_INFINITY) {
  1794. if (*pos >= limit) {
  1795. send_sig(SIGXFSZ, current, 0);
  1796. return -EFBIG;
  1797. }
  1798. if (*count > limit - (typeof(limit))*pos) {
  1799. *count = limit - (typeof(limit))*pos;
  1800. }
  1801. }
  1802. }
  1803. /*
  1804. * LFS rule
  1805. */
  1806. if (unlikely(*pos + *count > MAX_NON_LFS &&
  1807. !(file->f_flags & O_LARGEFILE))) {
  1808. if (*pos >= MAX_NON_LFS) {
  1809. return -EFBIG;
  1810. }
  1811. if (*count > MAX_NON_LFS - (unsigned long)*pos) {
  1812. *count = MAX_NON_LFS - (unsigned long)*pos;
  1813. }
  1814. }
  1815. /*
  1816. * Are we about to exceed the fs block limit ?
  1817. *
  1818. * If we have written data it becomes a short write. If we have
  1819. * exceeded without writing data we send a signal and return EFBIG.
  1820. * Linus frestrict idea will clean these up nicely..
  1821. */
  1822. if (likely(!isblk)) {
  1823. if (unlikely(*pos >= inode->i_sb->s_maxbytes)) {
  1824. if (*count || *pos > inode->i_sb->s_maxbytes) {
  1825. return -EFBIG;
  1826. }
  1827. /* zero-length writes at ->s_maxbytes are OK */
  1828. }
  1829. if (unlikely(*pos + *count > inode->i_sb->s_maxbytes))
  1830. *count = inode->i_sb->s_maxbytes - *pos;
  1831. } else {
  1832. #ifdef CONFIG_BLOCK
  1833. loff_t isize;
  1834. if (bdev_read_only(I_BDEV(inode)))
  1835. return -EPERM;
  1836. isize = i_size_read(inode);
  1837. if (*pos >= isize) {
  1838. if (*count || *pos > isize)
  1839. return -ENOSPC;
  1840. }
  1841. if (*pos + *count > isize)
  1842. *count = isize - *pos;
  1843. #else
  1844. return -EPERM;
  1845. #endif
  1846. }
  1847. return 0;
  1848. }
  1849. EXPORT_SYMBOL(generic_write_checks);
  1850. int pagecache_write_begin(struct file *file, struct address_space *mapping,
  1851. loff_t pos, unsigned len, unsigned flags,
  1852. struct page **pagep, void **fsdata)
  1853. {
  1854. const struct address_space_operations *aops = mapping->a_ops;
  1855. return aops->write_begin(file, mapping, pos, len, flags,
  1856. pagep, fsdata);
  1857. }
  1858. EXPORT_SYMBOL(pagecache_write_begin);
  1859. int pagecache_write_end(struct file *file, struct address_space *mapping,
  1860. loff_t pos, unsigned len, unsigned copied,
  1861. struct page *page, void *fsdata)
  1862. {
  1863. const struct address_space_operations *aops = mapping->a_ops;
  1864. mark_page_accessed(page);
  1865. return aops->write_end(file, mapping, pos, len, copied, page, fsdata);
  1866. }
  1867. EXPORT_SYMBOL(pagecache_write_end);
  1868. ssize_t
  1869. generic_file_direct_write(struct kiocb *iocb, const struct iovec *iov,
  1870. unsigned long *nr_segs, loff_t pos, loff_t *ppos,
  1871. size_t count, size_t ocount)
  1872. {
  1873. struct file *file = iocb->ki_filp;
  1874. struct address_space *mapping = file->f_mapping;
  1875. struct inode *inode = mapping->host;
  1876. ssize_t written;
  1877. size_t write_len;
  1878. pgoff_t end;
  1879. if (count != ocount)
  1880. *nr_segs = iov_shorten((struct iovec *)iov, *nr_segs, count);
  1881. write_len = iov_length(iov, *nr_segs);
  1882. end = (pos + write_len - 1) >> PAGE_CACHE_SHIFT;
  1883. written = filemap_write_and_wait_range(mapping, pos, pos + write_len - 1);
  1884. if (written)
  1885. goto out;
  1886. /*
  1887. * After a write we want buffered reads to be sure to go to disk to get
  1888. * the new data. We invalidate clean cached page from the region we're
  1889. * about to write. We do this *before* the write so that we can return
  1890. * without clobbering -EIOCBQUEUED from ->direct_IO().
  1891. */
  1892. if (mapping->nrpages) {
  1893. written = invalidate_inode_pages2_range(mapping,
  1894. pos >> PAGE_CACHE_SHIFT, end);
  1895. /*
  1896. * If a page can not be invalidated, return 0 to fall back
  1897. * to buffered write.
  1898. */
  1899. if (written) {
  1900. if (written == -EBUSY)
  1901. return 0;
  1902. goto out;
  1903. }
  1904. }
  1905. written = mapping->a_ops->direct_IO(WRITE, iocb, iov, pos, *nr_segs);
  1906. /*
  1907. * Finally, try again to invalidate clean pages which might have been
  1908. * cached by non-direct readahead, or faulted in by get_user_pages()
  1909. * if the source of the write was an mmap'ed region of the file
  1910. * we're writing. Either one is a pretty crazy thing to do,
  1911. * so we don't support it 100%. If this invalidation
  1912. * fails, tough, the write still worked...
  1913. */
  1914. if (mapping->nrpages) {
  1915. invalidate_inode_pages2_range(mapping,
  1916. pos >> PAGE_CACHE_SHIFT, end);
  1917. }
  1918. if (written > 0) {
  1919. loff_t end = pos + written;
  1920. if (end > i_size_read(inode) && !S_ISBLK(inode->i_mode)) {
  1921. i_size_write(inode, end);
  1922. mark_inode_dirty(inode);
  1923. }
  1924. *ppos = end;
  1925. }
  1926. /*
  1927. * Sync the fs metadata but not the minor inode changes and
  1928. * of course not the data as we did direct DMA for the IO.
  1929. * i_mutex is held, which protects generic_osync_inode() from
  1930. * livelocking. AIO O_DIRECT ops attempt to sync metadata here.
  1931. */
  1932. out:
  1933. if ((written >= 0 || written == -EIOCBQUEUED) &&
  1934. ((file->f_flags & O_SYNC) || IS_SYNC(inode))) {
  1935. int err = generic_osync_inode(inode, mapping, OSYNC_METADATA);
  1936. if (err < 0)
  1937. written = err;
  1938. }
  1939. return written;
  1940. }
  1941. EXPORT_SYMBOL(generic_file_direct_write);
  1942. /*
  1943. * Find or create a page at the given pagecache position. Return the locked
  1944. * page. This function is specifically for buffered writes.
  1945. */
  1946. struct page *grab_cache_page_write_begin(struct address_space *mapping,
  1947. pgoff_t index, unsigned flags)
  1948. {
  1949. int status;
  1950. struct page *page;
  1951. gfp_t gfp_notmask = 0;
  1952. if (flags & AOP_FLAG_NOFS)
  1953. gfp_notmask = __GFP_FS;
  1954. repeat:
  1955. page = find_lock_page(mapping, index);
  1956. if (likely(page))
  1957. return page;
  1958. page = __page_cache_alloc(mapping_gfp_mask(mapping) & ~gfp_notmask);
  1959. if (!page)
  1960. return NULL;
  1961. status = add_to_page_cache_lru(page, mapping, index,
  1962. GFP_KERNEL & ~gfp_notmask);
  1963. if (unlikely(status)) {
  1964. page_cache_release(page);
  1965. if (status == -EEXIST)
  1966. goto repeat;
  1967. return NULL;
  1968. }
  1969. return page;
  1970. }
  1971. EXPORT_SYMBOL(grab_cache_page_write_begin);
  1972. static ssize_t generic_perform_write(struct file *file,
  1973. struct iov_iter *i, loff_t pos)
  1974. {
  1975. struct address_space *mapping = file->f_mapping;
  1976. const struct address_space_operations *a_ops = mapping->a_ops;
  1977. long status = 0;
  1978. ssize_t written = 0;
  1979. unsigned int flags = 0;
  1980. /*
  1981. * Copies from kernel address space cannot fail (NFSD is a big user).
  1982. */
  1983. if (segment_eq(get_fs(), KERNEL_DS))
  1984. flags |= AOP_FLAG_UNINTERRUPTIBLE;
  1985. do {
  1986. struct page *page;
  1987. pgoff_t index; /* Pagecache index for current page */
  1988. unsigned long offset; /* Offset into pagecache page */
  1989. unsigned long bytes; /* Bytes to write to page */
  1990. size_t copied; /* Bytes copied from user */
  1991. void *fsdata;
  1992. offset = (pos & (PAGE_CACHE_SIZE - 1));
  1993. index = pos >> PAGE_CACHE_SHIFT;
  1994. bytes = min_t(unsigned long, PAGE_CACHE_SIZE - offset,
  1995. iov_iter_count(i));
  1996. again:
  1997. /*
  1998. * Bring in the user page that we will copy from _first_.
  1999. * Otherwise there's a nasty deadlock on copying from the
  2000. * same page as we're writing to, without it being marked
  2001. * up-to-date.
  2002. *
  2003. * Not only is this an optimisation, but it is also required
  2004. * to check that the address is actually valid, when atomic
  2005. * usercopies are used, below.
  2006. */
  2007. if (unlikely(iov_iter_fault_in_readable(i, bytes))) {
  2008. status = -EFAULT;
  2009. break;
  2010. }
  2011. status = a_ops->write_begin(file, mapping, pos, bytes, flags,
  2012. &page, &fsdata);
  2013. if (unlikely(status))
  2014. break;
  2015. pagefault_disable();
  2016. copied = iov_iter_copy_from_user_atomic(page, i, offset, bytes);
  2017. pagefault_enable();
  2018. flush_dcache_page(page);
  2019. status = a_ops->write_end(file, mapping, pos, bytes, copied,
  2020. page, fsdata);
  2021. if (unlikely(status < 0))
  2022. break;
  2023. copied = status;
  2024. cond_resched();
  2025. iov_iter_advance(i, copied);
  2026. if (unlikely(copied == 0)) {
  2027. /*
  2028. * If we were unable to copy any data at all, we must
  2029. * fall back to a single segment length write.
  2030. *
  2031. * If we didn't fallback here, we could livelock
  2032. * because not all segments in the iov can be copied at
  2033. * once without a pagefault.
  2034. */
  2035. bytes = min_t(unsigned long, PAGE_CACHE_SIZE - offset,
  2036. iov_iter_single_seg_count(i));
  2037. goto again;
  2038. }
  2039. pos += copied;
  2040. written += copied;
  2041. balance_dirty_pages_ratelimited(mapping);
  2042. } while (iov_iter_count(i));
  2043. return written ? written : status;
  2044. }
  2045. ssize_t
  2046. generic_file_buffered_write(struct kiocb *iocb, const struct iovec *iov,
  2047. unsigned long nr_segs, loff_t pos, loff_t *ppos,
  2048. size_t count, ssize_t written)
  2049. {
  2050. struct file *file = iocb->ki_filp;
  2051. struct address_space *mapping = file->f_mapping;
  2052. const struct address_space_operations *a_ops = mapping->a_ops;
  2053. struct inode *inode = mapping->host;
  2054. ssize_t status;
  2055. struct iov_iter i;
  2056. iov_iter_init(&i, iov, nr_segs, count, written);
  2057. status = generic_perform_write(file, &i, pos);
  2058. if (likely(status >= 0)) {
  2059. written += status;
  2060. *ppos = pos + status;
  2061. /*
  2062. * For now, when the user asks for O_SYNC, we'll actually give
  2063. * O_DSYNC
  2064. */
  2065. if (unlikely((file->f_flags & O_SYNC) || IS_SYNC(inode))) {
  2066. if (!a_ops->writepage || !is_sync_kiocb(iocb))
  2067. status = generic_osync_inode(inode, mapping,
  2068. OSYNC_METADATA|OSYNC_DATA);
  2069. }
  2070. }
  2071. /*
  2072. * If we get here for O_DIRECT writes then we must have fallen through
  2073. * to buffered writes (block instantiation inside i_size). So we sync
  2074. * the file data here, to try to honour O_DIRECT expectations.
  2075. */
  2076. if (unlikely(file->f_flags & O_DIRECT) && written)
  2077. status = filemap_write_and_wait_range(mapping,
  2078. pos, pos + written - 1);
  2079. return written ? written : status;
  2080. }
  2081. EXPORT_SYMBOL(generic_file_buffered_write);
  2082. static ssize_t
  2083. __generic_file_aio_write_nolock(struct kiocb *iocb, const struct iovec *iov,
  2084. unsigned long nr_segs, loff_t *ppos)
  2085. {
  2086. struct file *file = iocb->ki_filp;
  2087. struct address_space * mapping = file->f_mapping;
  2088. size_t ocount; /* original count */
  2089. size_t count; /* after file limit checks */
  2090. struct inode *inode = mapping->host;
  2091. loff_t pos;
  2092. ssize_t written;
  2093. ssize_t err;
  2094. ocount = 0;
  2095. err = generic_segment_checks(iov, &nr_segs, &ocount, VERIFY_READ);
  2096. if (err)
  2097. return err;
  2098. count = ocount;
  2099. pos = *ppos;
  2100. vfs_check_frozen(inode->i_sb, SB_FREEZE_WRITE);
  2101. /* We can write back this queue in page reclaim */
  2102. current->backing_dev_info = mapping->backing_dev_info;
  2103. written = 0;
  2104. err = generic_write_checks(file, &pos, &count, S_ISBLK(inode->i_mode));
  2105. if (err)
  2106. goto out;
  2107. if (count == 0)
  2108. goto out;
  2109. err = file_remove_suid(file);
  2110. if (err)
  2111. goto out;
  2112. file_update_time(file);
  2113. /* coalesce the iovecs and go direct-to-BIO for O_DIRECT */
  2114. if (unlikely(file->f_flags & O_DIRECT)) {
  2115. loff_t endbyte;
  2116. ssize_t written_buffered;
  2117. written = generic_file_direct_write(iocb, iov, &nr_segs, pos,
  2118. ppos, count, ocount);
  2119. if (written < 0 || written == count)
  2120. goto out;
  2121. /*
  2122. * direct-io write to a hole: fall through to buffered I/O
  2123. * for completing the rest of the request.
  2124. */
  2125. pos += written;
  2126. count -= written;
  2127. written_buffered = generic_file_buffered_write(iocb, iov,
  2128. nr_segs, pos, ppos, count,
  2129. written);
  2130. /*
  2131. * If generic_file_buffered_write() retuned a synchronous error
  2132. * then we want to return the number of bytes which were
  2133. * direct-written, or the error code if that was zero. Note
  2134. * that this differs from normal direct-io semantics, which
  2135. * will return -EFOO even if some bytes were written.
  2136. */
  2137. if (written_buffered < 0) {
  2138. err = written_buffered;
  2139. goto out;
  2140. }
  2141. /*
  2142. * We need to ensure that the page cache pages are written to
  2143. * disk and invalidated to preserve the expected O_DIRECT
  2144. * semantics.
  2145. */
  2146. endbyte = pos + written_buffered - written - 1;
  2147. err = do_sync_mapping_range(file->f_mapping, pos, endbyte,
  2148. SYNC_FILE_RANGE_WAIT_BEFORE|
  2149. SYNC_FILE_RANGE_WRITE|
  2150. SYNC_FILE_RANGE_WAIT_AFTER);
  2151. if (err == 0) {
  2152. written = written_buffered;
  2153. invalidate_mapping_pages(mapping,
  2154. pos >> PAGE_CACHE_SHIFT,
  2155. endbyte >> PAGE_CACHE_SHIFT);
  2156. } else {
  2157. /*
  2158. * We don't know how much we wrote, so just return
  2159. * the number of bytes which were direct-written
  2160. */
  2161. }
  2162. } else {
  2163. written = generic_file_buffered_write(iocb, iov, nr_segs,
  2164. pos, ppos, count, written);
  2165. }
  2166. out:
  2167. current->backing_dev_info = NULL;
  2168. return written ? written : err;
  2169. }
  2170. ssize_t generic_file_aio_write_nolock(struct kiocb *iocb,
  2171. const struct iovec *iov, unsigned long nr_segs, loff_t pos)
  2172. {
  2173. struct file *file = iocb->ki_filp;
  2174. struct address_space *mapping = file->f_mapping;
  2175. struct inode *inode = mapping->host;
  2176. ssize_t ret;
  2177. BUG_ON(iocb->ki_pos != pos);
  2178. ret = __generic_file_aio_write_nolock(iocb, iov, nr_segs,
  2179. &iocb->ki_pos);
  2180. if (ret > 0 && ((file->f_flags & O_SYNC) || IS_SYNC(inode))) {
  2181. ssize_t err;
  2182. err = sync_page_range_nolock(inode, mapping, pos, ret);
  2183. if (err < 0)
  2184. ret = err;
  2185. }
  2186. return ret;
  2187. }
  2188. EXPORT_SYMBOL(generic_file_aio_write_nolock);
  2189. ssize_t generic_file_aio_write(struct kiocb *iocb, const struct iovec *iov,
  2190. unsigned long nr_segs, loff_t pos)
  2191. {
  2192. struct file *file = iocb->ki_filp;
  2193. struct address_space *mapping = file->f_mapping;
  2194. struct inode *inode = mapping->host;
  2195. ssize_t ret;
  2196. BUG_ON(iocb->ki_pos != pos);
  2197. mutex_lock(&inode->i_mutex);
  2198. ret = __generic_file_aio_write_nolock(iocb, iov, nr_segs,
  2199. &iocb->ki_pos);
  2200. mutex_unlock(&inode->i_mutex);
  2201. if (ret > 0 && ((file->f_flags & O_SYNC) || IS_SYNC(inode))) {
  2202. ssize_t err;
  2203. err = sync_page_range(inode, mapping, pos, ret);
  2204. if (err < 0)
  2205. ret = err;
  2206. }
  2207. return ret;
  2208. }
  2209. EXPORT_SYMBOL(generic_file_aio_write);
  2210. /**
  2211. * try_to_release_page() - release old fs-specific metadata on a page
  2212. *
  2213. * @page: the page which the kernel is trying to free
  2214. * @gfp_mask: memory allocation flags (and I/O mode)
  2215. *
  2216. * The address_space is to try to release any data against the page
  2217. * (presumably at page->private). If the release was successful, return `1'.
  2218. * Otherwise return zero.
  2219. *
  2220. * This may also be called if PG_fscache is set on a page, indicating that the
  2221. * page is known to the local caching routines.
  2222. *
  2223. * The @gfp_mask argument specifies whether I/O may be performed to release
  2224. * this page (__GFP_IO), and whether the call may block (__GFP_WAIT & __GFP_FS).
  2225. *
  2226. */
  2227. int try_to_release_page(struct page *page, gfp_t gfp_mask)
  2228. {
  2229. struct address_space * const mapping = page->mapping;
  2230. BUG_ON(!PageLocked(page));
  2231. if (PageWriteback(page))
  2232. return 0;
  2233. if (mapping && mapping->a_ops->releasepage)
  2234. return mapping->a_ops->releasepage(page, gfp_mask);
  2235. return try_to_free_buffers(page);
  2236. }
  2237. EXPORT_SYMBOL(try_to_release_page);