dquot.c 74 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767
  1. /*
  2. * Implementation of the diskquota system for the LINUX operating system. QUOTA
  3. * is implemented using the BSD system call interface as the means of
  4. * communication with the user level. This file contains the generic routines
  5. * called by the different filesystems on allocation of an inode or block.
  6. * These routines take care of the administration needed to have a consistent
  7. * diskquota tracking system. The ideas of both user and group quotas are based
  8. * on the Melbourne quota system as used on BSD derived systems. The internal
  9. * implementation is based on one of the several variants of the LINUX
  10. * inode-subsystem with added complexity of the diskquota system.
  11. *
  12. * Author: Marco van Wieringen <mvw@planets.elm.net>
  13. *
  14. * Fixes: Dmitry Gorodchanin <pgmdsg@ibi.com>, 11 Feb 96
  15. *
  16. * Revised list management to avoid races
  17. * -- Bill Hawes, <whawes@star.net>, 9/98
  18. *
  19. * Fixed races in dquot_transfer(), dqget() and dquot_alloc_...().
  20. * As the consequence the locking was moved from dquot_decr_...(),
  21. * dquot_incr_...() to calling functions.
  22. * invalidate_dquots() now writes modified dquots.
  23. * Serialized quota_off() and quota_on() for mount point.
  24. * Fixed a few bugs in grow_dquots().
  25. * Fixed deadlock in write_dquot() - we no longer account quotas on
  26. * quota files
  27. * remove_dquot_ref() moved to inode.c - it now traverses through inodes
  28. * add_dquot_ref() restarts after blocking
  29. * Added check for bogus uid and fixed check for group in quotactl.
  30. * Jan Kara, <jack@suse.cz>, sponsored by SuSE CR, 10-11/99
  31. *
  32. * Used struct list_head instead of own list struct
  33. * Invalidation of referenced dquots is no longer possible
  34. * Improved free_dquots list management
  35. * Quota and i_blocks are now updated in one place to avoid races
  36. * Warnings are now delayed so we won't block in critical section
  37. * Write updated not to require dquot lock
  38. * Jan Kara, <jack@suse.cz>, 9/2000
  39. *
  40. * Added dynamic quota structure allocation
  41. * Jan Kara <jack@suse.cz> 12/2000
  42. *
  43. * Rewritten quota interface. Implemented new quota format and
  44. * formats registering.
  45. * Jan Kara, <jack@suse.cz>, 2001,2002
  46. *
  47. * New SMP locking.
  48. * Jan Kara, <jack@suse.cz>, 10/2002
  49. *
  50. * Added journalled quota support, fix lock inversion problems
  51. * Jan Kara, <jack@suse.cz>, 2003,2004
  52. *
  53. * (C) Copyright 1994 - 1997 Marco van Wieringen
  54. */
  55. #include <linux/errno.h>
  56. #include <linux/kernel.h>
  57. #include <linux/fs.h>
  58. #include <linux/mount.h>
  59. #include <linux/mm.h>
  60. #include <linux/time.h>
  61. #include <linux/types.h>
  62. #include <linux/string.h>
  63. #include <linux/fcntl.h>
  64. #include <linux/stat.h>
  65. #include <linux/tty.h>
  66. #include <linux/file.h>
  67. #include <linux/slab.h>
  68. #include <linux/sysctl.h>
  69. #include <linux/init.h>
  70. #include <linux/module.h>
  71. #include <linux/proc_fs.h>
  72. #include <linux/security.h>
  73. #include <linux/sched.h>
  74. #include <linux/kmod.h>
  75. #include <linux/namei.h>
  76. #include <linux/capability.h>
  77. #include <linux/quotaops.h>
  78. #include "../internal.h" /* ugh */
  79. #include <linux/uaccess.h>
  80. /*
  81. * There are three quota SMP locks. dq_list_lock protects all lists with quotas
  82. * and quota formats.
  83. * dq_data_lock protects data from dq_dqb and also mem_dqinfo structures and
  84. * also guards consistency of dquot->dq_dqb with inode->i_blocks, i_bytes.
  85. * i_blocks and i_bytes updates itself are guarded by i_lock acquired directly
  86. * in inode_add_bytes() and inode_sub_bytes(). dq_state_lock protects
  87. * modifications of quota state (on quotaon and quotaoff) and readers who care
  88. * about latest values take it as well.
  89. *
  90. * The spinlock ordering is hence: dq_data_lock > dq_list_lock > i_lock,
  91. * dq_list_lock > dq_state_lock
  92. *
  93. * Note that some things (eg. sb pointer, type, id) doesn't change during
  94. * the life of the dquot structure and so needn't to be protected by a lock
  95. *
  96. * Any operation working on dquots via inode pointers must hold dqptr_sem. If
  97. * operation is just reading pointers from inode (or not using them at all) the
  98. * read lock is enough. If pointers are altered function must hold write lock.
  99. * Special care needs to be taken about S_NOQUOTA inode flag (marking that
  100. * inode is a quota file). Functions adding pointers from inode to dquots have
  101. * to check this flag under dqptr_sem and then (if S_NOQUOTA is not set) they
  102. * have to do all pointer modifications before dropping dqptr_sem. This makes
  103. * sure they cannot race with quotaon which first sets S_NOQUOTA flag and
  104. * then drops all pointers to dquots from an inode.
  105. *
  106. * Each dquot has its dq_lock mutex. Locked dquots might not be referenced
  107. * from inodes (dquot_alloc_space() and such don't check the dq_lock).
  108. * Currently dquot is locked only when it is being read to memory (or space for
  109. * it is being allocated) on the first dqget() and when it is being released on
  110. * the last dqput(). The allocation and release oparations are serialized by
  111. * the dq_lock and by checking the use count in dquot_release(). Write
  112. * operations on dquots don't hold dq_lock as they copy data under dq_data_lock
  113. * spinlock to internal buffers before writing.
  114. *
  115. * Lock ordering (including related VFS locks) is the following:
  116. * dqonoff_mutex > i_mutex > journal_lock > dqptr_sem > dquot->dq_lock >
  117. * dqio_mutex
  118. * dqonoff_mutex > i_mutex comes from dquot_quota_sync, dquot_enable, etc.
  119. * The lock ordering of dqptr_sem imposed by quota code is only dqonoff_sem >
  120. * dqptr_sem. But filesystem has to count with the fact that functions such as
  121. * dquot_alloc_space() acquire dqptr_sem and they usually have to be called
  122. * from inside a transaction to keep filesystem consistency after a crash. Also
  123. * filesystems usually want to do some IO on dquot from ->mark_dirty which is
  124. * called with dqptr_sem held.
  125. */
  126. static __cacheline_aligned_in_smp DEFINE_SPINLOCK(dq_list_lock);
  127. static __cacheline_aligned_in_smp DEFINE_SPINLOCK(dq_state_lock);
  128. __cacheline_aligned_in_smp DEFINE_SPINLOCK(dq_data_lock);
  129. EXPORT_SYMBOL(dq_data_lock);
  130. void __quota_error(struct super_block *sb, const char *func,
  131. const char *fmt, ...)
  132. {
  133. if (printk_ratelimit()) {
  134. va_list args;
  135. struct va_format vaf;
  136. va_start(args, fmt);
  137. vaf.fmt = fmt;
  138. vaf.va = &args;
  139. printk(KERN_ERR "Quota error (device %s): %s: %pV\n",
  140. sb->s_id, func, &vaf);
  141. va_end(args);
  142. }
  143. }
  144. EXPORT_SYMBOL(__quota_error);
  145. #if defined(CONFIG_QUOTA_DEBUG) || defined(CONFIG_PRINT_QUOTA_WARNING)
  146. static char *quotatypes[] = INITQFNAMES;
  147. #endif
  148. static struct quota_format_type *quota_formats; /* List of registered formats */
  149. static struct quota_module_name module_names[] = INIT_QUOTA_MODULE_NAMES;
  150. /* SLAB cache for dquot structures */
  151. static struct kmem_cache *dquot_cachep;
  152. int register_quota_format(struct quota_format_type *fmt)
  153. {
  154. spin_lock(&dq_list_lock);
  155. fmt->qf_next = quota_formats;
  156. quota_formats = fmt;
  157. spin_unlock(&dq_list_lock);
  158. return 0;
  159. }
  160. EXPORT_SYMBOL(register_quota_format);
  161. void unregister_quota_format(struct quota_format_type *fmt)
  162. {
  163. struct quota_format_type **actqf;
  164. spin_lock(&dq_list_lock);
  165. for (actqf = &quota_formats; *actqf && *actqf != fmt;
  166. actqf = &(*actqf)->qf_next)
  167. ;
  168. if (*actqf)
  169. *actqf = (*actqf)->qf_next;
  170. spin_unlock(&dq_list_lock);
  171. }
  172. EXPORT_SYMBOL(unregister_quota_format);
  173. static struct quota_format_type *find_quota_format(int id)
  174. {
  175. struct quota_format_type *actqf;
  176. spin_lock(&dq_list_lock);
  177. for (actqf = quota_formats; actqf && actqf->qf_fmt_id != id;
  178. actqf = actqf->qf_next)
  179. ;
  180. if (!actqf || !try_module_get(actqf->qf_owner)) {
  181. int qm;
  182. spin_unlock(&dq_list_lock);
  183. for (qm = 0; module_names[qm].qm_fmt_id &&
  184. module_names[qm].qm_fmt_id != id; qm++)
  185. ;
  186. if (!module_names[qm].qm_fmt_id ||
  187. request_module(module_names[qm].qm_mod_name))
  188. return NULL;
  189. spin_lock(&dq_list_lock);
  190. for (actqf = quota_formats; actqf && actqf->qf_fmt_id != id;
  191. actqf = actqf->qf_next)
  192. ;
  193. if (actqf && !try_module_get(actqf->qf_owner))
  194. actqf = NULL;
  195. }
  196. spin_unlock(&dq_list_lock);
  197. return actqf;
  198. }
  199. static void put_quota_format(struct quota_format_type *fmt)
  200. {
  201. module_put(fmt->qf_owner);
  202. }
  203. /*
  204. * Dquot List Management:
  205. * The quota code uses three lists for dquot management: the inuse_list,
  206. * free_dquots, and dquot_hash[] array. A single dquot structure may be
  207. * on all three lists, depending on its current state.
  208. *
  209. * All dquots are placed to the end of inuse_list when first created, and this
  210. * list is used for invalidate operation, which must look at every dquot.
  211. *
  212. * Unused dquots (dq_count == 0) are added to the free_dquots list when freed,
  213. * and this list is searched whenever we need an available dquot. Dquots are
  214. * removed from the list as soon as they are used again, and
  215. * dqstats.free_dquots gives the number of dquots on the list. When
  216. * dquot is invalidated it's completely released from memory.
  217. *
  218. * Dquots with a specific identity (device, type and id) are placed on
  219. * one of the dquot_hash[] hash chains. The provides an efficient search
  220. * mechanism to locate a specific dquot.
  221. */
  222. static LIST_HEAD(inuse_list);
  223. static LIST_HEAD(free_dquots);
  224. static unsigned int dq_hash_bits, dq_hash_mask;
  225. static struct hlist_head *dquot_hash;
  226. struct dqstats dqstats;
  227. EXPORT_SYMBOL(dqstats);
  228. static qsize_t inode_get_rsv_space(struct inode *inode);
  229. static void __dquot_initialize(struct inode *inode, int type);
  230. static inline unsigned int
  231. hashfn(const struct super_block *sb, struct kqid qid)
  232. {
  233. unsigned int id = from_kqid(&init_user_ns, qid);
  234. int type = qid.type;
  235. unsigned long tmp;
  236. tmp = (((unsigned long)sb>>L1_CACHE_SHIFT) ^ id) * (MAXQUOTAS - type);
  237. return (tmp + (tmp >> dq_hash_bits)) & dq_hash_mask;
  238. }
  239. /*
  240. * Following list functions expect dq_list_lock to be held
  241. */
  242. static inline void insert_dquot_hash(struct dquot *dquot)
  243. {
  244. struct hlist_head *head;
  245. head = dquot_hash + hashfn(dquot->dq_sb, dquot->dq_id);
  246. hlist_add_head(&dquot->dq_hash, head);
  247. }
  248. static inline void remove_dquot_hash(struct dquot *dquot)
  249. {
  250. hlist_del_init(&dquot->dq_hash);
  251. }
  252. static struct dquot *find_dquot(unsigned int hashent, struct super_block *sb,
  253. struct kqid qid)
  254. {
  255. struct hlist_node *node;
  256. struct dquot *dquot;
  257. hlist_for_each (node, dquot_hash+hashent) {
  258. dquot = hlist_entry(node, struct dquot, dq_hash);
  259. if (dquot->dq_sb == sb && qid_eq(dquot->dq_id, qid))
  260. return dquot;
  261. }
  262. return NULL;
  263. }
  264. /* Add a dquot to the tail of the free list */
  265. static inline void put_dquot_last(struct dquot *dquot)
  266. {
  267. list_add_tail(&dquot->dq_free, &free_dquots);
  268. dqstats_inc(DQST_FREE_DQUOTS);
  269. }
  270. static inline void remove_free_dquot(struct dquot *dquot)
  271. {
  272. if (list_empty(&dquot->dq_free))
  273. return;
  274. list_del_init(&dquot->dq_free);
  275. dqstats_dec(DQST_FREE_DQUOTS);
  276. }
  277. static inline void put_inuse(struct dquot *dquot)
  278. {
  279. /* We add to the back of inuse list so we don't have to restart
  280. * when traversing this list and we block */
  281. list_add_tail(&dquot->dq_inuse, &inuse_list);
  282. dqstats_inc(DQST_ALLOC_DQUOTS);
  283. }
  284. static inline void remove_inuse(struct dquot *dquot)
  285. {
  286. dqstats_dec(DQST_ALLOC_DQUOTS);
  287. list_del(&dquot->dq_inuse);
  288. }
  289. /*
  290. * End of list functions needing dq_list_lock
  291. */
  292. static void wait_on_dquot(struct dquot *dquot)
  293. {
  294. mutex_lock(&dquot->dq_lock);
  295. mutex_unlock(&dquot->dq_lock);
  296. }
  297. static inline int dquot_dirty(struct dquot *dquot)
  298. {
  299. return test_bit(DQ_MOD_B, &dquot->dq_flags);
  300. }
  301. static inline int mark_dquot_dirty(struct dquot *dquot)
  302. {
  303. return dquot->dq_sb->dq_op->mark_dirty(dquot);
  304. }
  305. /* Mark dquot dirty in atomic manner, and return it's old dirty flag state */
  306. int dquot_mark_dquot_dirty(struct dquot *dquot)
  307. {
  308. int ret = 1;
  309. /* If quota is dirty already, we don't have to acquire dq_list_lock */
  310. if (test_bit(DQ_MOD_B, &dquot->dq_flags))
  311. return 1;
  312. spin_lock(&dq_list_lock);
  313. if (!test_and_set_bit(DQ_MOD_B, &dquot->dq_flags)) {
  314. list_add(&dquot->dq_dirty, &sb_dqopt(dquot->dq_sb)->
  315. info[dquot->dq_id.type].dqi_dirty_list);
  316. ret = 0;
  317. }
  318. spin_unlock(&dq_list_lock);
  319. return ret;
  320. }
  321. EXPORT_SYMBOL(dquot_mark_dquot_dirty);
  322. /* Dirtify all the dquots - this can block when journalling */
  323. static inline int mark_all_dquot_dirty(struct dquot * const *dquot)
  324. {
  325. int ret, err, cnt;
  326. ret = err = 0;
  327. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  328. if (dquot[cnt])
  329. /* Even in case of error we have to continue */
  330. ret = mark_dquot_dirty(dquot[cnt]);
  331. if (!err)
  332. err = ret;
  333. }
  334. return err;
  335. }
  336. static inline void dqput_all(struct dquot **dquot)
  337. {
  338. unsigned int cnt;
  339. for (cnt = 0; cnt < MAXQUOTAS; cnt++)
  340. dqput(dquot[cnt]);
  341. }
  342. /* This function needs dq_list_lock */
  343. static inline int clear_dquot_dirty(struct dquot *dquot)
  344. {
  345. if (!test_and_clear_bit(DQ_MOD_B, &dquot->dq_flags))
  346. return 0;
  347. list_del_init(&dquot->dq_dirty);
  348. return 1;
  349. }
  350. void mark_info_dirty(struct super_block *sb, int type)
  351. {
  352. set_bit(DQF_INFO_DIRTY_B, &sb_dqopt(sb)->info[type].dqi_flags);
  353. }
  354. EXPORT_SYMBOL(mark_info_dirty);
  355. /*
  356. * Read dquot from disk and alloc space for it
  357. */
  358. int dquot_acquire(struct dquot *dquot)
  359. {
  360. int ret = 0, ret2 = 0;
  361. struct quota_info *dqopt = sb_dqopt(dquot->dq_sb);
  362. mutex_lock(&dquot->dq_lock);
  363. mutex_lock(&dqopt->dqio_mutex);
  364. if (!test_bit(DQ_READ_B, &dquot->dq_flags))
  365. ret = dqopt->ops[dquot->dq_id.type]->read_dqblk(dquot);
  366. if (ret < 0)
  367. goto out_iolock;
  368. set_bit(DQ_READ_B, &dquot->dq_flags);
  369. /* Instantiate dquot if needed */
  370. if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags) && !dquot->dq_off) {
  371. ret = dqopt->ops[dquot->dq_id.type]->commit_dqblk(dquot);
  372. /* Write the info if needed */
  373. if (info_dirty(&dqopt->info[dquot->dq_id.type])) {
  374. ret2 = dqopt->ops[dquot->dq_id.type]->write_file_info(
  375. dquot->dq_sb, dquot->dq_id.type);
  376. }
  377. if (ret < 0)
  378. goto out_iolock;
  379. if (ret2 < 0) {
  380. ret = ret2;
  381. goto out_iolock;
  382. }
  383. }
  384. set_bit(DQ_ACTIVE_B, &dquot->dq_flags);
  385. out_iolock:
  386. mutex_unlock(&dqopt->dqio_mutex);
  387. mutex_unlock(&dquot->dq_lock);
  388. return ret;
  389. }
  390. EXPORT_SYMBOL(dquot_acquire);
  391. /*
  392. * Write dquot to disk
  393. */
  394. int dquot_commit(struct dquot *dquot)
  395. {
  396. int ret = 0;
  397. struct quota_info *dqopt = sb_dqopt(dquot->dq_sb);
  398. mutex_lock(&dqopt->dqio_mutex);
  399. spin_lock(&dq_list_lock);
  400. if (!clear_dquot_dirty(dquot)) {
  401. spin_unlock(&dq_list_lock);
  402. goto out_sem;
  403. }
  404. spin_unlock(&dq_list_lock);
  405. /* Inactive dquot can be only if there was error during read/init
  406. * => we have better not writing it */
  407. if (test_bit(DQ_ACTIVE_B, &dquot->dq_flags))
  408. ret = dqopt->ops[dquot->dq_id.type]->commit_dqblk(dquot);
  409. else
  410. ret = -EIO;
  411. out_sem:
  412. mutex_unlock(&dqopt->dqio_mutex);
  413. return ret;
  414. }
  415. EXPORT_SYMBOL(dquot_commit);
  416. /*
  417. * Release dquot
  418. */
  419. int dquot_release(struct dquot *dquot)
  420. {
  421. int ret = 0, ret2 = 0;
  422. struct quota_info *dqopt = sb_dqopt(dquot->dq_sb);
  423. mutex_lock(&dquot->dq_lock);
  424. /* Check whether we are not racing with some other dqget() */
  425. if (atomic_read(&dquot->dq_count) > 1)
  426. goto out_dqlock;
  427. mutex_lock(&dqopt->dqio_mutex);
  428. if (dqopt->ops[dquot->dq_id.type]->release_dqblk) {
  429. ret = dqopt->ops[dquot->dq_id.type]->release_dqblk(dquot);
  430. /* Write the info */
  431. if (info_dirty(&dqopt->info[dquot->dq_id.type])) {
  432. ret2 = dqopt->ops[dquot->dq_id.type]->write_file_info(
  433. dquot->dq_sb, dquot->dq_id.type);
  434. }
  435. if (ret >= 0)
  436. ret = ret2;
  437. }
  438. clear_bit(DQ_ACTIVE_B, &dquot->dq_flags);
  439. mutex_unlock(&dqopt->dqio_mutex);
  440. out_dqlock:
  441. mutex_unlock(&dquot->dq_lock);
  442. return ret;
  443. }
  444. EXPORT_SYMBOL(dquot_release);
  445. void dquot_destroy(struct dquot *dquot)
  446. {
  447. kmem_cache_free(dquot_cachep, dquot);
  448. }
  449. EXPORT_SYMBOL(dquot_destroy);
  450. static inline void do_destroy_dquot(struct dquot *dquot)
  451. {
  452. dquot->dq_sb->dq_op->destroy_dquot(dquot);
  453. }
  454. /* Invalidate all dquots on the list. Note that this function is called after
  455. * quota is disabled and pointers from inodes removed so there cannot be new
  456. * quota users. There can still be some users of quotas due to inodes being
  457. * just deleted or pruned by prune_icache() (those are not attached to any
  458. * list) or parallel quotactl call. We have to wait for such users.
  459. */
  460. static void invalidate_dquots(struct super_block *sb, int type)
  461. {
  462. struct dquot *dquot, *tmp;
  463. restart:
  464. spin_lock(&dq_list_lock);
  465. list_for_each_entry_safe(dquot, tmp, &inuse_list, dq_inuse) {
  466. if (dquot->dq_sb != sb)
  467. continue;
  468. if (dquot->dq_id.type != type)
  469. continue;
  470. /* Wait for dquot users */
  471. if (atomic_read(&dquot->dq_count)) {
  472. DEFINE_WAIT(wait);
  473. atomic_inc(&dquot->dq_count);
  474. prepare_to_wait(&dquot->dq_wait_unused, &wait,
  475. TASK_UNINTERRUPTIBLE);
  476. spin_unlock(&dq_list_lock);
  477. /* Once dqput() wakes us up, we know it's time to free
  478. * the dquot.
  479. * IMPORTANT: we rely on the fact that there is always
  480. * at most one process waiting for dquot to free.
  481. * Otherwise dq_count would be > 1 and we would never
  482. * wake up.
  483. */
  484. if (atomic_read(&dquot->dq_count) > 1)
  485. schedule();
  486. finish_wait(&dquot->dq_wait_unused, &wait);
  487. dqput(dquot);
  488. /* At this moment dquot() need not exist (it could be
  489. * reclaimed by prune_dqcache(). Hence we must
  490. * restart. */
  491. goto restart;
  492. }
  493. /*
  494. * Quota now has no users and it has been written on last
  495. * dqput()
  496. */
  497. remove_dquot_hash(dquot);
  498. remove_free_dquot(dquot);
  499. remove_inuse(dquot);
  500. do_destroy_dquot(dquot);
  501. }
  502. spin_unlock(&dq_list_lock);
  503. }
  504. /* Call callback for every active dquot on given filesystem */
  505. int dquot_scan_active(struct super_block *sb,
  506. int (*fn)(struct dquot *dquot, unsigned long priv),
  507. unsigned long priv)
  508. {
  509. struct dquot *dquot, *old_dquot = NULL;
  510. int ret = 0;
  511. mutex_lock(&sb_dqopt(sb)->dqonoff_mutex);
  512. spin_lock(&dq_list_lock);
  513. list_for_each_entry(dquot, &inuse_list, dq_inuse) {
  514. if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags))
  515. continue;
  516. if (dquot->dq_sb != sb)
  517. continue;
  518. /* Now we have active dquot so we can just increase use count */
  519. atomic_inc(&dquot->dq_count);
  520. spin_unlock(&dq_list_lock);
  521. dqstats_inc(DQST_LOOKUPS);
  522. dqput(old_dquot);
  523. old_dquot = dquot;
  524. ret = fn(dquot, priv);
  525. if (ret < 0)
  526. goto out;
  527. spin_lock(&dq_list_lock);
  528. /* We are safe to continue now because our dquot could not
  529. * be moved out of the inuse list while we hold the reference */
  530. }
  531. spin_unlock(&dq_list_lock);
  532. out:
  533. dqput(old_dquot);
  534. mutex_unlock(&sb_dqopt(sb)->dqonoff_mutex);
  535. return ret;
  536. }
  537. EXPORT_SYMBOL(dquot_scan_active);
  538. /* Write all dquot structures to quota files */
  539. int dquot_writeback_dquots(struct super_block *sb, int type)
  540. {
  541. struct list_head *dirty;
  542. struct dquot *dquot;
  543. struct quota_info *dqopt = sb_dqopt(sb);
  544. int cnt;
  545. int err, ret = 0;
  546. mutex_lock(&dqopt->dqonoff_mutex);
  547. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  548. if (type != -1 && cnt != type)
  549. continue;
  550. if (!sb_has_quota_active(sb, cnt))
  551. continue;
  552. spin_lock(&dq_list_lock);
  553. dirty = &dqopt->info[cnt].dqi_dirty_list;
  554. while (!list_empty(dirty)) {
  555. dquot = list_first_entry(dirty, struct dquot,
  556. dq_dirty);
  557. /* Dirty and inactive can be only bad dquot... */
  558. if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags)) {
  559. clear_dquot_dirty(dquot);
  560. continue;
  561. }
  562. /* Now we have active dquot from which someone is
  563. * holding reference so we can safely just increase
  564. * use count */
  565. atomic_inc(&dquot->dq_count);
  566. spin_unlock(&dq_list_lock);
  567. dqstats_inc(DQST_LOOKUPS);
  568. err = sb->dq_op->write_dquot(dquot);
  569. if (!ret && err)
  570. err = ret;
  571. dqput(dquot);
  572. spin_lock(&dq_list_lock);
  573. }
  574. spin_unlock(&dq_list_lock);
  575. }
  576. for (cnt = 0; cnt < MAXQUOTAS; cnt++)
  577. if ((cnt == type || type == -1) && sb_has_quota_active(sb, cnt)
  578. && info_dirty(&dqopt->info[cnt]))
  579. sb->dq_op->write_info(sb, cnt);
  580. dqstats_inc(DQST_SYNCS);
  581. mutex_unlock(&dqopt->dqonoff_mutex);
  582. return ret;
  583. }
  584. EXPORT_SYMBOL(dquot_writeback_dquots);
  585. /* Write all dquot structures to disk and make them visible from userspace */
  586. int dquot_quota_sync(struct super_block *sb, int type)
  587. {
  588. struct quota_info *dqopt = sb_dqopt(sb);
  589. int cnt;
  590. int ret;
  591. ret = dquot_writeback_dquots(sb, type);
  592. if (ret)
  593. return ret;
  594. if (dqopt->flags & DQUOT_QUOTA_SYS_FILE)
  595. return 0;
  596. /* This is not very clever (and fast) but currently I don't know about
  597. * any other simple way of getting quota data to disk and we must get
  598. * them there for userspace to be visible... */
  599. if (sb->s_op->sync_fs)
  600. sb->s_op->sync_fs(sb, 1);
  601. sync_blockdev(sb->s_bdev);
  602. /*
  603. * Now when everything is written we can discard the pagecache so
  604. * that userspace sees the changes.
  605. */
  606. mutex_lock(&dqopt->dqonoff_mutex);
  607. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  608. if (type != -1 && cnt != type)
  609. continue;
  610. if (!sb_has_quota_active(sb, cnt))
  611. continue;
  612. mutex_lock(&dqopt->files[cnt]->i_mutex);
  613. truncate_inode_pages(&dqopt->files[cnt]->i_data, 0);
  614. mutex_unlock(&dqopt->files[cnt]->i_mutex);
  615. }
  616. mutex_unlock(&dqopt->dqonoff_mutex);
  617. return 0;
  618. }
  619. EXPORT_SYMBOL(dquot_quota_sync);
  620. /* Free unused dquots from cache */
  621. static void prune_dqcache(int count)
  622. {
  623. struct list_head *head;
  624. struct dquot *dquot;
  625. head = free_dquots.prev;
  626. while (head != &free_dquots && count) {
  627. dquot = list_entry(head, struct dquot, dq_free);
  628. remove_dquot_hash(dquot);
  629. remove_free_dquot(dquot);
  630. remove_inuse(dquot);
  631. do_destroy_dquot(dquot);
  632. count--;
  633. head = free_dquots.prev;
  634. }
  635. }
  636. /*
  637. * This is called from kswapd when we think we need some
  638. * more memory
  639. */
  640. static int shrink_dqcache_memory(struct shrinker *shrink,
  641. struct shrink_control *sc)
  642. {
  643. int nr = sc->nr_to_scan;
  644. if (nr) {
  645. spin_lock(&dq_list_lock);
  646. prune_dqcache(nr);
  647. spin_unlock(&dq_list_lock);
  648. }
  649. return ((unsigned)
  650. percpu_counter_read_positive(&dqstats.counter[DQST_FREE_DQUOTS])
  651. /100) * sysctl_vfs_cache_pressure;
  652. }
  653. static struct shrinker dqcache_shrinker = {
  654. .shrink = shrink_dqcache_memory,
  655. .seeks = DEFAULT_SEEKS,
  656. };
  657. /*
  658. * Put reference to dquot
  659. * NOTE: If you change this function please check whether dqput_blocks() works right...
  660. */
  661. void dqput(struct dquot *dquot)
  662. {
  663. int ret;
  664. if (!dquot)
  665. return;
  666. #ifdef CONFIG_QUOTA_DEBUG
  667. if (!atomic_read(&dquot->dq_count)) {
  668. quota_error(dquot->dq_sb, "trying to free free dquot of %s %d",
  669. quotatypes[dquot->dq_id.type],
  670. from_kqid(&init_user_ns, dquot->dq_id));
  671. BUG();
  672. }
  673. #endif
  674. dqstats_inc(DQST_DROPS);
  675. we_slept:
  676. spin_lock(&dq_list_lock);
  677. if (atomic_read(&dquot->dq_count) > 1) {
  678. /* We have more than one user... nothing to do */
  679. atomic_dec(&dquot->dq_count);
  680. /* Releasing dquot during quotaoff phase? */
  681. if (!sb_has_quota_active(dquot->dq_sb, dquot->dq_id.type) &&
  682. atomic_read(&dquot->dq_count) == 1)
  683. wake_up(&dquot->dq_wait_unused);
  684. spin_unlock(&dq_list_lock);
  685. return;
  686. }
  687. /* Need to release dquot? */
  688. if (test_bit(DQ_ACTIVE_B, &dquot->dq_flags) && dquot_dirty(dquot)) {
  689. spin_unlock(&dq_list_lock);
  690. /* Commit dquot before releasing */
  691. ret = dquot->dq_sb->dq_op->write_dquot(dquot);
  692. if (ret < 0) {
  693. quota_error(dquot->dq_sb, "Can't write quota structure"
  694. " (error %d). Quota may get out of sync!",
  695. ret);
  696. /*
  697. * We clear dirty bit anyway, so that we avoid
  698. * infinite loop here
  699. */
  700. spin_lock(&dq_list_lock);
  701. clear_dquot_dirty(dquot);
  702. spin_unlock(&dq_list_lock);
  703. }
  704. goto we_slept;
  705. }
  706. /* Clear flag in case dquot was inactive (something bad happened) */
  707. clear_dquot_dirty(dquot);
  708. if (test_bit(DQ_ACTIVE_B, &dquot->dq_flags)) {
  709. spin_unlock(&dq_list_lock);
  710. dquot->dq_sb->dq_op->release_dquot(dquot);
  711. goto we_slept;
  712. }
  713. atomic_dec(&dquot->dq_count);
  714. #ifdef CONFIG_QUOTA_DEBUG
  715. /* sanity check */
  716. BUG_ON(!list_empty(&dquot->dq_free));
  717. #endif
  718. put_dquot_last(dquot);
  719. spin_unlock(&dq_list_lock);
  720. }
  721. EXPORT_SYMBOL(dqput);
  722. struct dquot *dquot_alloc(struct super_block *sb, int type)
  723. {
  724. return kmem_cache_zalloc(dquot_cachep, GFP_NOFS);
  725. }
  726. EXPORT_SYMBOL(dquot_alloc);
  727. static struct dquot *get_empty_dquot(struct super_block *sb, int type)
  728. {
  729. struct dquot *dquot;
  730. dquot = sb->dq_op->alloc_dquot(sb, type);
  731. if(!dquot)
  732. return NULL;
  733. mutex_init(&dquot->dq_lock);
  734. INIT_LIST_HEAD(&dquot->dq_free);
  735. INIT_LIST_HEAD(&dquot->dq_inuse);
  736. INIT_HLIST_NODE(&dquot->dq_hash);
  737. INIT_LIST_HEAD(&dquot->dq_dirty);
  738. init_waitqueue_head(&dquot->dq_wait_unused);
  739. dquot->dq_sb = sb;
  740. dquot->dq_id = make_kqid_invalid(type);
  741. atomic_set(&dquot->dq_count, 1);
  742. return dquot;
  743. }
  744. /*
  745. * Get reference to dquot
  746. *
  747. * Locking is slightly tricky here. We are guarded from parallel quotaoff()
  748. * destroying our dquot by:
  749. * a) checking for quota flags under dq_list_lock and
  750. * b) getting a reference to dquot before we release dq_list_lock
  751. */
  752. struct dquot *dqget(struct super_block *sb, struct kqid qid)
  753. {
  754. unsigned int hashent = hashfn(sb, qid);
  755. struct dquot *dquot = NULL, *empty = NULL;
  756. if (!sb_has_quota_active(sb, qid.type))
  757. return NULL;
  758. we_slept:
  759. spin_lock(&dq_list_lock);
  760. spin_lock(&dq_state_lock);
  761. if (!sb_has_quota_active(sb, qid.type)) {
  762. spin_unlock(&dq_state_lock);
  763. spin_unlock(&dq_list_lock);
  764. goto out;
  765. }
  766. spin_unlock(&dq_state_lock);
  767. dquot = find_dquot(hashent, sb, qid);
  768. if (!dquot) {
  769. if (!empty) {
  770. spin_unlock(&dq_list_lock);
  771. empty = get_empty_dquot(sb, qid.type);
  772. if (!empty)
  773. schedule(); /* Try to wait for a moment... */
  774. goto we_slept;
  775. }
  776. dquot = empty;
  777. empty = NULL;
  778. dquot->dq_id = qid;
  779. /* all dquots go on the inuse_list */
  780. put_inuse(dquot);
  781. /* hash it first so it can be found */
  782. insert_dquot_hash(dquot);
  783. spin_unlock(&dq_list_lock);
  784. dqstats_inc(DQST_LOOKUPS);
  785. } else {
  786. if (!atomic_read(&dquot->dq_count))
  787. remove_free_dquot(dquot);
  788. atomic_inc(&dquot->dq_count);
  789. spin_unlock(&dq_list_lock);
  790. dqstats_inc(DQST_CACHE_HITS);
  791. dqstats_inc(DQST_LOOKUPS);
  792. }
  793. /* Wait for dq_lock - after this we know that either dquot_release() is
  794. * already finished or it will be canceled due to dq_count > 1 test */
  795. wait_on_dquot(dquot);
  796. /* Read the dquot / allocate space in quota file */
  797. if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags) &&
  798. sb->dq_op->acquire_dquot(dquot) < 0) {
  799. dqput(dquot);
  800. dquot = NULL;
  801. goto out;
  802. }
  803. #ifdef CONFIG_QUOTA_DEBUG
  804. BUG_ON(!dquot->dq_sb); /* Has somebody invalidated entry under us? */
  805. #endif
  806. out:
  807. if (empty)
  808. do_destroy_dquot(empty);
  809. return dquot;
  810. }
  811. EXPORT_SYMBOL(dqget);
  812. static int dqinit_needed(struct inode *inode, int type)
  813. {
  814. int cnt;
  815. if (IS_NOQUOTA(inode))
  816. return 0;
  817. if (type != -1)
  818. return !inode->i_dquot[type];
  819. for (cnt = 0; cnt < MAXQUOTAS; cnt++)
  820. if (!inode->i_dquot[cnt])
  821. return 1;
  822. return 0;
  823. }
  824. /* This routine is guarded by dqonoff_mutex mutex */
  825. static void add_dquot_ref(struct super_block *sb, int type)
  826. {
  827. struct inode *inode, *old_inode = NULL;
  828. #ifdef CONFIG_QUOTA_DEBUG
  829. int reserved = 0;
  830. #endif
  831. spin_lock(&inode_sb_list_lock);
  832. list_for_each_entry(inode, &sb->s_inodes, i_sb_list) {
  833. spin_lock(&inode->i_lock);
  834. if ((inode->i_state & (I_FREEING|I_WILL_FREE|I_NEW)) ||
  835. !atomic_read(&inode->i_writecount) ||
  836. !dqinit_needed(inode, type)) {
  837. spin_unlock(&inode->i_lock);
  838. continue;
  839. }
  840. __iget(inode);
  841. spin_unlock(&inode->i_lock);
  842. spin_unlock(&inode_sb_list_lock);
  843. #ifdef CONFIG_QUOTA_DEBUG
  844. if (unlikely(inode_get_rsv_space(inode) > 0))
  845. reserved = 1;
  846. #endif
  847. iput(old_inode);
  848. __dquot_initialize(inode, type);
  849. /*
  850. * We hold a reference to 'inode' so it couldn't have been
  851. * removed from s_inodes list while we dropped the
  852. * inode_sb_list_lock We cannot iput the inode now as we can be
  853. * holding the last reference and we cannot iput it under
  854. * inode_sb_list_lock. So we keep the reference and iput it
  855. * later.
  856. */
  857. old_inode = inode;
  858. spin_lock(&inode_sb_list_lock);
  859. }
  860. spin_unlock(&inode_sb_list_lock);
  861. iput(old_inode);
  862. #ifdef CONFIG_QUOTA_DEBUG
  863. if (reserved) {
  864. quota_error(sb, "Writes happened before quota was turned on "
  865. "thus quota information is probably inconsistent. "
  866. "Please run quotacheck(8)");
  867. }
  868. #endif
  869. }
  870. /*
  871. * Return 0 if dqput() won't block.
  872. * (note that 1 doesn't necessarily mean blocking)
  873. */
  874. static inline int dqput_blocks(struct dquot *dquot)
  875. {
  876. if (atomic_read(&dquot->dq_count) <= 1)
  877. return 1;
  878. return 0;
  879. }
  880. /*
  881. * Remove references to dquots from inode and add dquot to list for freeing
  882. * if we have the last reference to dquot
  883. * We can't race with anybody because we hold dqptr_sem for writing...
  884. */
  885. static int remove_inode_dquot_ref(struct inode *inode, int type,
  886. struct list_head *tofree_head)
  887. {
  888. struct dquot *dquot = inode->i_dquot[type];
  889. inode->i_dquot[type] = NULL;
  890. if (dquot) {
  891. if (dqput_blocks(dquot)) {
  892. #ifdef CONFIG_QUOTA_DEBUG
  893. if (atomic_read(&dquot->dq_count) != 1)
  894. quota_error(inode->i_sb, "Adding dquot with "
  895. "dq_count %d to dispose list",
  896. atomic_read(&dquot->dq_count));
  897. #endif
  898. spin_lock(&dq_list_lock);
  899. /* As dquot must have currently users it can't be on
  900. * the free list... */
  901. list_add(&dquot->dq_free, tofree_head);
  902. spin_unlock(&dq_list_lock);
  903. return 1;
  904. }
  905. else
  906. dqput(dquot); /* We have guaranteed we won't block */
  907. }
  908. return 0;
  909. }
  910. /*
  911. * Free list of dquots
  912. * Dquots are removed from inodes and no new references can be got so we are
  913. * the only ones holding reference
  914. */
  915. static void put_dquot_list(struct list_head *tofree_head)
  916. {
  917. struct list_head *act_head;
  918. struct dquot *dquot;
  919. act_head = tofree_head->next;
  920. while (act_head != tofree_head) {
  921. dquot = list_entry(act_head, struct dquot, dq_free);
  922. act_head = act_head->next;
  923. /* Remove dquot from the list so we won't have problems... */
  924. list_del_init(&dquot->dq_free);
  925. dqput(dquot);
  926. }
  927. }
  928. static void remove_dquot_ref(struct super_block *sb, int type,
  929. struct list_head *tofree_head)
  930. {
  931. struct inode *inode;
  932. int reserved = 0;
  933. spin_lock(&inode_sb_list_lock);
  934. list_for_each_entry(inode, &sb->s_inodes, i_sb_list) {
  935. /*
  936. * We have to scan also I_NEW inodes because they can already
  937. * have quota pointer initialized. Luckily, we need to touch
  938. * only quota pointers and these have separate locking
  939. * (dqptr_sem).
  940. */
  941. if (!IS_NOQUOTA(inode)) {
  942. if (unlikely(inode_get_rsv_space(inode) > 0))
  943. reserved = 1;
  944. remove_inode_dquot_ref(inode, type, tofree_head);
  945. }
  946. }
  947. spin_unlock(&inode_sb_list_lock);
  948. #ifdef CONFIG_QUOTA_DEBUG
  949. if (reserved) {
  950. printk(KERN_WARNING "VFS (%s): Writes happened after quota"
  951. " was disabled thus quota information is probably "
  952. "inconsistent. Please run quotacheck(8).\n", sb->s_id);
  953. }
  954. #endif
  955. }
  956. /* Gather all references from inodes and drop them */
  957. static void drop_dquot_ref(struct super_block *sb, int type)
  958. {
  959. LIST_HEAD(tofree_head);
  960. if (sb->dq_op) {
  961. down_write(&sb_dqopt(sb)->dqptr_sem);
  962. remove_dquot_ref(sb, type, &tofree_head);
  963. up_write(&sb_dqopt(sb)->dqptr_sem);
  964. put_dquot_list(&tofree_head);
  965. }
  966. }
  967. static inline void dquot_incr_inodes(struct dquot *dquot, qsize_t number)
  968. {
  969. dquot->dq_dqb.dqb_curinodes += number;
  970. }
  971. static inline void dquot_incr_space(struct dquot *dquot, qsize_t number)
  972. {
  973. dquot->dq_dqb.dqb_curspace += number;
  974. }
  975. static inline void dquot_resv_space(struct dquot *dquot, qsize_t number)
  976. {
  977. dquot->dq_dqb.dqb_rsvspace += number;
  978. }
  979. /*
  980. * Claim reserved quota space
  981. */
  982. static void dquot_claim_reserved_space(struct dquot *dquot, qsize_t number)
  983. {
  984. if (dquot->dq_dqb.dqb_rsvspace < number) {
  985. WARN_ON_ONCE(1);
  986. number = dquot->dq_dqb.dqb_rsvspace;
  987. }
  988. dquot->dq_dqb.dqb_curspace += number;
  989. dquot->dq_dqb.dqb_rsvspace -= number;
  990. }
  991. static void dquot_reclaim_reserved_space(struct dquot *dquot, qsize_t number)
  992. {
  993. if (WARN_ON_ONCE(dquot->dq_dqb.dqb_curspace < number))
  994. number = dquot->dq_dqb.dqb_curspace;
  995. dquot->dq_dqb.dqb_rsvspace += number;
  996. dquot->dq_dqb.dqb_curspace -= number;
  997. }
  998. static inline
  999. void dquot_free_reserved_space(struct dquot *dquot, qsize_t number)
  1000. {
  1001. if (dquot->dq_dqb.dqb_rsvspace >= number)
  1002. dquot->dq_dqb.dqb_rsvspace -= number;
  1003. else {
  1004. WARN_ON_ONCE(1);
  1005. dquot->dq_dqb.dqb_rsvspace = 0;
  1006. }
  1007. }
  1008. static void dquot_decr_inodes(struct dquot *dquot, qsize_t number)
  1009. {
  1010. if (sb_dqopt(dquot->dq_sb)->flags & DQUOT_NEGATIVE_USAGE ||
  1011. dquot->dq_dqb.dqb_curinodes >= number)
  1012. dquot->dq_dqb.dqb_curinodes -= number;
  1013. else
  1014. dquot->dq_dqb.dqb_curinodes = 0;
  1015. if (dquot->dq_dqb.dqb_curinodes <= dquot->dq_dqb.dqb_isoftlimit)
  1016. dquot->dq_dqb.dqb_itime = (time_t) 0;
  1017. clear_bit(DQ_INODES_B, &dquot->dq_flags);
  1018. }
  1019. static void dquot_decr_space(struct dquot *dquot, qsize_t number)
  1020. {
  1021. if (sb_dqopt(dquot->dq_sb)->flags & DQUOT_NEGATIVE_USAGE ||
  1022. dquot->dq_dqb.dqb_curspace >= number)
  1023. dquot->dq_dqb.dqb_curspace -= number;
  1024. else
  1025. dquot->dq_dqb.dqb_curspace = 0;
  1026. if (dquot->dq_dqb.dqb_curspace <= dquot->dq_dqb.dqb_bsoftlimit)
  1027. dquot->dq_dqb.dqb_btime = (time_t) 0;
  1028. clear_bit(DQ_BLKS_B, &dquot->dq_flags);
  1029. }
  1030. struct dquot_warn {
  1031. struct super_block *w_sb;
  1032. struct kqid w_dq_id;
  1033. short w_type;
  1034. };
  1035. static int warning_issued(struct dquot *dquot, const int warntype)
  1036. {
  1037. int flag = (warntype == QUOTA_NL_BHARDWARN ||
  1038. warntype == QUOTA_NL_BSOFTLONGWARN) ? DQ_BLKS_B :
  1039. ((warntype == QUOTA_NL_IHARDWARN ||
  1040. warntype == QUOTA_NL_ISOFTLONGWARN) ? DQ_INODES_B : 0);
  1041. if (!flag)
  1042. return 0;
  1043. return test_and_set_bit(flag, &dquot->dq_flags);
  1044. }
  1045. #ifdef CONFIG_PRINT_QUOTA_WARNING
  1046. static int flag_print_warnings = 1;
  1047. static int need_print_warning(struct dquot_warn *warn)
  1048. {
  1049. if (!flag_print_warnings)
  1050. return 0;
  1051. switch (warn->w_dq_id.type) {
  1052. case USRQUOTA:
  1053. return uid_eq(current_fsuid(), warn->w_dq_id.uid);
  1054. case GRPQUOTA:
  1055. return in_group_p(warn->w_dq_id.gid);
  1056. case PRJQUOTA: /* Never taken... Just make gcc happy */
  1057. return 0;
  1058. }
  1059. return 0;
  1060. }
  1061. /* Print warning to user which exceeded quota */
  1062. static void print_warning(struct dquot_warn *warn)
  1063. {
  1064. char *msg = NULL;
  1065. struct tty_struct *tty;
  1066. int warntype = warn->w_type;
  1067. if (warntype == QUOTA_NL_IHARDBELOW ||
  1068. warntype == QUOTA_NL_ISOFTBELOW ||
  1069. warntype == QUOTA_NL_BHARDBELOW ||
  1070. warntype == QUOTA_NL_BSOFTBELOW || !need_print_warning(warn))
  1071. return;
  1072. tty = get_current_tty();
  1073. if (!tty)
  1074. return;
  1075. tty_write_message(tty, warn->w_sb->s_id);
  1076. if (warntype == QUOTA_NL_ISOFTWARN || warntype == QUOTA_NL_BSOFTWARN)
  1077. tty_write_message(tty, ": warning, ");
  1078. else
  1079. tty_write_message(tty, ": write failed, ");
  1080. tty_write_message(tty, quotatypes[warn->w_dq_id.type]);
  1081. switch (warntype) {
  1082. case QUOTA_NL_IHARDWARN:
  1083. msg = " file limit reached.\r\n";
  1084. break;
  1085. case QUOTA_NL_ISOFTLONGWARN:
  1086. msg = " file quota exceeded too long.\r\n";
  1087. break;
  1088. case QUOTA_NL_ISOFTWARN:
  1089. msg = " file quota exceeded.\r\n";
  1090. break;
  1091. case QUOTA_NL_BHARDWARN:
  1092. msg = " block limit reached.\r\n";
  1093. break;
  1094. case QUOTA_NL_BSOFTLONGWARN:
  1095. msg = " block quota exceeded too long.\r\n";
  1096. break;
  1097. case QUOTA_NL_BSOFTWARN:
  1098. msg = " block quota exceeded.\r\n";
  1099. break;
  1100. }
  1101. tty_write_message(tty, msg);
  1102. tty_kref_put(tty);
  1103. }
  1104. #endif
  1105. static void prepare_warning(struct dquot_warn *warn, struct dquot *dquot,
  1106. int warntype)
  1107. {
  1108. if (warning_issued(dquot, warntype))
  1109. return;
  1110. warn->w_type = warntype;
  1111. warn->w_sb = dquot->dq_sb;
  1112. warn->w_dq_id = dquot->dq_id;
  1113. }
  1114. /*
  1115. * Write warnings to the console and send warning messages over netlink.
  1116. *
  1117. * Note that this function can call into tty and networking code.
  1118. */
  1119. static void flush_warnings(struct dquot_warn *warn)
  1120. {
  1121. int i;
  1122. for (i = 0; i < MAXQUOTAS; i++) {
  1123. if (warn[i].w_type == QUOTA_NL_NOWARN)
  1124. continue;
  1125. #ifdef CONFIG_PRINT_QUOTA_WARNING
  1126. print_warning(&warn[i]);
  1127. #endif
  1128. quota_send_warning(warn[i].w_dq_id,
  1129. warn[i].w_sb->s_dev, warn[i].w_type);
  1130. }
  1131. }
  1132. static int ignore_hardlimit(struct dquot *dquot)
  1133. {
  1134. struct mem_dqinfo *info = &sb_dqopt(dquot->dq_sb)->info[dquot->dq_id.type];
  1135. return capable(CAP_SYS_RESOURCE) &&
  1136. (info->dqi_format->qf_fmt_id != QFMT_VFS_OLD ||
  1137. !(info->dqi_flags & V1_DQF_RSQUASH));
  1138. }
  1139. /* needs dq_data_lock */
  1140. static int check_idq(struct dquot *dquot, qsize_t inodes,
  1141. struct dquot_warn *warn)
  1142. {
  1143. qsize_t newinodes = dquot->dq_dqb.dqb_curinodes + inodes;
  1144. if (!sb_has_quota_limits_enabled(dquot->dq_sb, dquot->dq_id.type) ||
  1145. test_bit(DQ_FAKE_B, &dquot->dq_flags))
  1146. return 0;
  1147. if (dquot->dq_dqb.dqb_ihardlimit &&
  1148. newinodes > dquot->dq_dqb.dqb_ihardlimit &&
  1149. !ignore_hardlimit(dquot)) {
  1150. prepare_warning(warn, dquot, QUOTA_NL_IHARDWARN);
  1151. return -EDQUOT;
  1152. }
  1153. if (dquot->dq_dqb.dqb_isoftlimit &&
  1154. newinodes > dquot->dq_dqb.dqb_isoftlimit &&
  1155. dquot->dq_dqb.dqb_itime &&
  1156. get_seconds() >= dquot->dq_dqb.dqb_itime &&
  1157. !ignore_hardlimit(dquot)) {
  1158. prepare_warning(warn, dquot, QUOTA_NL_ISOFTLONGWARN);
  1159. return -EDQUOT;
  1160. }
  1161. if (dquot->dq_dqb.dqb_isoftlimit &&
  1162. newinodes > dquot->dq_dqb.dqb_isoftlimit &&
  1163. dquot->dq_dqb.dqb_itime == 0) {
  1164. prepare_warning(warn, dquot, QUOTA_NL_ISOFTWARN);
  1165. dquot->dq_dqb.dqb_itime = get_seconds() +
  1166. sb_dqopt(dquot->dq_sb)->info[dquot->dq_id.type].dqi_igrace;
  1167. }
  1168. return 0;
  1169. }
  1170. /* needs dq_data_lock */
  1171. static int check_bdq(struct dquot *dquot, qsize_t space, int prealloc,
  1172. struct dquot_warn *warn)
  1173. {
  1174. qsize_t tspace;
  1175. struct super_block *sb = dquot->dq_sb;
  1176. if (!sb_has_quota_limits_enabled(sb, dquot->dq_id.type) ||
  1177. test_bit(DQ_FAKE_B, &dquot->dq_flags))
  1178. return 0;
  1179. tspace = dquot->dq_dqb.dqb_curspace + dquot->dq_dqb.dqb_rsvspace
  1180. + space;
  1181. if (dquot->dq_dqb.dqb_bhardlimit &&
  1182. tspace > dquot->dq_dqb.dqb_bhardlimit &&
  1183. !ignore_hardlimit(dquot)) {
  1184. if (!prealloc)
  1185. prepare_warning(warn, dquot, QUOTA_NL_BHARDWARN);
  1186. return -EDQUOT;
  1187. }
  1188. if (dquot->dq_dqb.dqb_bsoftlimit &&
  1189. tspace > dquot->dq_dqb.dqb_bsoftlimit &&
  1190. dquot->dq_dqb.dqb_btime &&
  1191. get_seconds() >= dquot->dq_dqb.dqb_btime &&
  1192. !ignore_hardlimit(dquot)) {
  1193. if (!prealloc)
  1194. prepare_warning(warn, dquot, QUOTA_NL_BSOFTLONGWARN);
  1195. return -EDQUOT;
  1196. }
  1197. if (dquot->dq_dqb.dqb_bsoftlimit &&
  1198. tspace > dquot->dq_dqb.dqb_bsoftlimit &&
  1199. dquot->dq_dqb.dqb_btime == 0) {
  1200. if (!prealloc) {
  1201. prepare_warning(warn, dquot, QUOTA_NL_BSOFTWARN);
  1202. dquot->dq_dqb.dqb_btime = get_seconds() +
  1203. sb_dqopt(sb)->info[dquot->dq_id.type].dqi_bgrace;
  1204. }
  1205. else
  1206. /*
  1207. * We don't allow preallocation to exceed softlimit so exceeding will
  1208. * be always printed
  1209. */
  1210. return -EDQUOT;
  1211. }
  1212. return 0;
  1213. }
  1214. static int info_idq_free(struct dquot *dquot, qsize_t inodes)
  1215. {
  1216. qsize_t newinodes;
  1217. if (test_bit(DQ_FAKE_B, &dquot->dq_flags) ||
  1218. dquot->dq_dqb.dqb_curinodes <= dquot->dq_dqb.dqb_isoftlimit ||
  1219. !sb_has_quota_limits_enabled(dquot->dq_sb, dquot->dq_id.type))
  1220. return QUOTA_NL_NOWARN;
  1221. newinodes = dquot->dq_dqb.dqb_curinodes - inodes;
  1222. if (newinodes <= dquot->dq_dqb.dqb_isoftlimit)
  1223. return QUOTA_NL_ISOFTBELOW;
  1224. if (dquot->dq_dqb.dqb_curinodes >= dquot->dq_dqb.dqb_ihardlimit &&
  1225. newinodes < dquot->dq_dqb.dqb_ihardlimit)
  1226. return QUOTA_NL_IHARDBELOW;
  1227. return QUOTA_NL_NOWARN;
  1228. }
  1229. static int info_bdq_free(struct dquot *dquot, qsize_t space)
  1230. {
  1231. if (test_bit(DQ_FAKE_B, &dquot->dq_flags) ||
  1232. dquot->dq_dqb.dqb_curspace <= dquot->dq_dqb.dqb_bsoftlimit)
  1233. return QUOTA_NL_NOWARN;
  1234. if (dquot->dq_dqb.dqb_curspace - space <= dquot->dq_dqb.dqb_bsoftlimit)
  1235. return QUOTA_NL_BSOFTBELOW;
  1236. if (dquot->dq_dqb.dqb_curspace >= dquot->dq_dqb.dqb_bhardlimit &&
  1237. dquot->dq_dqb.dqb_curspace - space < dquot->dq_dqb.dqb_bhardlimit)
  1238. return QUOTA_NL_BHARDBELOW;
  1239. return QUOTA_NL_NOWARN;
  1240. }
  1241. static int dquot_active(const struct inode *inode)
  1242. {
  1243. struct super_block *sb = inode->i_sb;
  1244. if (IS_NOQUOTA(inode))
  1245. return 0;
  1246. return sb_any_quota_loaded(sb) & ~sb_any_quota_suspended(sb);
  1247. }
  1248. /*
  1249. * Initialize quota pointers in inode
  1250. *
  1251. * We do things in a bit complicated way but by that we avoid calling
  1252. * dqget() and thus filesystem callbacks under dqptr_sem.
  1253. *
  1254. * It is better to call this function outside of any transaction as it
  1255. * might need a lot of space in journal for dquot structure allocation.
  1256. */
  1257. static void __dquot_initialize(struct inode *inode, int type)
  1258. {
  1259. int cnt;
  1260. struct dquot *got[MAXQUOTAS];
  1261. struct super_block *sb = inode->i_sb;
  1262. qsize_t rsv;
  1263. /* First test before acquiring mutex - solves deadlocks when we
  1264. * re-enter the quota code and are already holding the mutex */
  1265. if (!dquot_active(inode))
  1266. return;
  1267. /* First get references to structures we might need. */
  1268. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1269. struct kqid qid;
  1270. got[cnt] = NULL;
  1271. if (type != -1 && cnt != type)
  1272. continue;
  1273. switch (cnt) {
  1274. case USRQUOTA:
  1275. qid = make_kqid_uid(inode->i_uid);
  1276. break;
  1277. case GRPQUOTA:
  1278. qid = make_kqid_gid(inode->i_gid);
  1279. break;
  1280. }
  1281. got[cnt] = dqget(sb, qid);
  1282. }
  1283. down_write(&sb_dqopt(sb)->dqptr_sem);
  1284. if (IS_NOQUOTA(inode))
  1285. goto out_err;
  1286. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1287. if (type != -1 && cnt != type)
  1288. continue;
  1289. /* Avoid races with quotaoff() */
  1290. if (!sb_has_quota_active(sb, cnt))
  1291. continue;
  1292. /* We could race with quotaon or dqget() could have failed */
  1293. if (!got[cnt])
  1294. continue;
  1295. if (!inode->i_dquot[cnt]) {
  1296. inode->i_dquot[cnt] = got[cnt];
  1297. got[cnt] = NULL;
  1298. /*
  1299. * Make quota reservation system happy if someone
  1300. * did a write before quota was turned on
  1301. */
  1302. rsv = inode_get_rsv_space(inode);
  1303. if (unlikely(rsv)) {
  1304. spin_lock(&dq_data_lock);
  1305. dquot_resv_space(inode->i_dquot[cnt], rsv);
  1306. spin_unlock(&dq_data_lock);
  1307. }
  1308. }
  1309. }
  1310. out_err:
  1311. up_write(&sb_dqopt(sb)->dqptr_sem);
  1312. /* Drop unused references */
  1313. dqput_all(got);
  1314. }
  1315. void dquot_initialize(struct inode *inode)
  1316. {
  1317. __dquot_initialize(inode, -1);
  1318. }
  1319. EXPORT_SYMBOL(dquot_initialize);
  1320. /*
  1321. * Release all quotas referenced by inode
  1322. */
  1323. static void __dquot_drop(struct inode *inode)
  1324. {
  1325. int cnt;
  1326. struct dquot *put[MAXQUOTAS];
  1327. down_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1328. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1329. put[cnt] = inode->i_dquot[cnt];
  1330. inode->i_dquot[cnt] = NULL;
  1331. }
  1332. up_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1333. dqput_all(put);
  1334. }
  1335. void dquot_drop(struct inode *inode)
  1336. {
  1337. int cnt;
  1338. if (IS_NOQUOTA(inode))
  1339. return;
  1340. /*
  1341. * Test before calling to rule out calls from proc and such
  1342. * where we are not allowed to block. Note that this is
  1343. * actually reliable test even without the lock - the caller
  1344. * must assure that nobody can come after the DQUOT_DROP and
  1345. * add quota pointers back anyway.
  1346. */
  1347. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1348. if (inode->i_dquot[cnt])
  1349. break;
  1350. }
  1351. if (cnt < MAXQUOTAS)
  1352. __dquot_drop(inode);
  1353. }
  1354. EXPORT_SYMBOL(dquot_drop);
  1355. /*
  1356. * inode_reserved_space is managed internally by quota, and protected by
  1357. * i_lock similar to i_blocks+i_bytes.
  1358. */
  1359. static qsize_t *inode_reserved_space(struct inode * inode)
  1360. {
  1361. /* Filesystem must explicitly define it's own method in order to use
  1362. * quota reservation interface */
  1363. BUG_ON(!inode->i_sb->dq_op->get_reserved_space);
  1364. return inode->i_sb->dq_op->get_reserved_space(inode);
  1365. }
  1366. void inode_add_rsv_space(struct inode *inode, qsize_t number)
  1367. {
  1368. spin_lock(&inode->i_lock);
  1369. *inode_reserved_space(inode) += number;
  1370. spin_unlock(&inode->i_lock);
  1371. }
  1372. EXPORT_SYMBOL(inode_add_rsv_space);
  1373. void inode_claim_rsv_space(struct inode *inode, qsize_t number)
  1374. {
  1375. spin_lock(&inode->i_lock);
  1376. *inode_reserved_space(inode) -= number;
  1377. __inode_add_bytes(inode, number);
  1378. spin_unlock(&inode->i_lock);
  1379. }
  1380. EXPORT_SYMBOL(inode_claim_rsv_space);
  1381. void inode_reclaim_rsv_space(struct inode *inode, qsize_t number)
  1382. {
  1383. spin_lock(&inode->i_lock);
  1384. *inode_reserved_space(inode) += number;
  1385. __inode_sub_bytes(inode, number);
  1386. spin_unlock(&inode->i_lock);
  1387. }
  1388. EXPORT_SYMBOL(inode_reclaim_rsv_space);
  1389. void inode_sub_rsv_space(struct inode *inode, qsize_t number)
  1390. {
  1391. spin_lock(&inode->i_lock);
  1392. *inode_reserved_space(inode) -= number;
  1393. spin_unlock(&inode->i_lock);
  1394. }
  1395. EXPORT_SYMBOL(inode_sub_rsv_space);
  1396. static qsize_t inode_get_rsv_space(struct inode *inode)
  1397. {
  1398. qsize_t ret;
  1399. if (!inode->i_sb->dq_op->get_reserved_space)
  1400. return 0;
  1401. spin_lock(&inode->i_lock);
  1402. ret = *inode_reserved_space(inode);
  1403. spin_unlock(&inode->i_lock);
  1404. return ret;
  1405. }
  1406. static void inode_incr_space(struct inode *inode, qsize_t number,
  1407. int reserve)
  1408. {
  1409. if (reserve)
  1410. inode_add_rsv_space(inode, number);
  1411. else
  1412. inode_add_bytes(inode, number);
  1413. }
  1414. static void inode_decr_space(struct inode *inode, qsize_t number, int reserve)
  1415. {
  1416. if (reserve)
  1417. inode_sub_rsv_space(inode, number);
  1418. else
  1419. inode_sub_bytes(inode, number);
  1420. }
  1421. /*
  1422. * This functions updates i_blocks+i_bytes fields and quota information
  1423. * (together with appropriate checks).
  1424. *
  1425. * NOTE: We absolutely rely on the fact that caller dirties the inode
  1426. * (usually helpers in quotaops.h care about this) and holds a handle for
  1427. * the current transaction so that dquot write and inode write go into the
  1428. * same transaction.
  1429. */
  1430. /*
  1431. * This operation can block, but only after everything is updated
  1432. */
  1433. int __dquot_alloc_space(struct inode *inode, qsize_t number, int flags)
  1434. {
  1435. int cnt, ret = 0;
  1436. struct dquot_warn warn[MAXQUOTAS];
  1437. struct dquot **dquots = inode->i_dquot;
  1438. int reserve = flags & DQUOT_SPACE_RESERVE;
  1439. /*
  1440. * First test before acquiring mutex - solves deadlocks when we
  1441. * re-enter the quota code and are already holding the mutex
  1442. */
  1443. if (!dquot_active(inode)) {
  1444. inode_incr_space(inode, number, reserve);
  1445. goto out;
  1446. }
  1447. for (cnt = 0; cnt < MAXQUOTAS; cnt++)
  1448. warn[cnt].w_type = QUOTA_NL_NOWARN;
  1449. down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1450. spin_lock(&dq_data_lock);
  1451. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1452. if (!dquots[cnt])
  1453. continue;
  1454. ret = check_bdq(dquots[cnt], number,
  1455. !(flags & DQUOT_SPACE_WARN), &warn[cnt]);
  1456. if (ret && !(flags & DQUOT_SPACE_NOFAIL)) {
  1457. spin_unlock(&dq_data_lock);
  1458. goto out_flush_warn;
  1459. }
  1460. }
  1461. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1462. if (!dquots[cnt])
  1463. continue;
  1464. if (reserve)
  1465. dquot_resv_space(dquots[cnt], number);
  1466. else
  1467. dquot_incr_space(dquots[cnt], number);
  1468. }
  1469. inode_incr_space(inode, number, reserve);
  1470. spin_unlock(&dq_data_lock);
  1471. if (reserve)
  1472. goto out_flush_warn;
  1473. mark_all_dquot_dirty(dquots);
  1474. out_flush_warn:
  1475. up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1476. flush_warnings(warn);
  1477. out:
  1478. return ret;
  1479. }
  1480. EXPORT_SYMBOL(__dquot_alloc_space);
  1481. /*
  1482. * This operation can block, but only after everything is updated
  1483. */
  1484. int dquot_alloc_inode(const struct inode *inode)
  1485. {
  1486. int cnt, ret = 0;
  1487. struct dquot_warn warn[MAXQUOTAS];
  1488. struct dquot * const *dquots = inode->i_dquot;
  1489. /* First test before acquiring mutex - solves deadlocks when we
  1490. * re-enter the quota code and are already holding the mutex */
  1491. if (!dquot_active(inode))
  1492. return 0;
  1493. for (cnt = 0; cnt < MAXQUOTAS; cnt++)
  1494. warn[cnt].w_type = QUOTA_NL_NOWARN;
  1495. down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1496. spin_lock(&dq_data_lock);
  1497. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1498. if (!dquots[cnt])
  1499. continue;
  1500. ret = check_idq(dquots[cnt], 1, &warn[cnt]);
  1501. if (ret)
  1502. goto warn_put_all;
  1503. }
  1504. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1505. if (!dquots[cnt])
  1506. continue;
  1507. dquot_incr_inodes(dquots[cnt], 1);
  1508. }
  1509. warn_put_all:
  1510. spin_unlock(&dq_data_lock);
  1511. if (ret == 0)
  1512. mark_all_dquot_dirty(dquots);
  1513. up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1514. flush_warnings(warn);
  1515. return ret;
  1516. }
  1517. EXPORT_SYMBOL(dquot_alloc_inode);
  1518. /*
  1519. * Convert in-memory reserved quotas to real consumed quotas
  1520. */
  1521. int dquot_claim_space_nodirty(struct inode *inode, qsize_t number)
  1522. {
  1523. int cnt;
  1524. if (!dquot_active(inode)) {
  1525. inode_claim_rsv_space(inode, number);
  1526. return 0;
  1527. }
  1528. down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1529. spin_lock(&dq_data_lock);
  1530. /* Claim reserved quotas to allocated quotas */
  1531. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1532. if (inode->i_dquot[cnt])
  1533. dquot_claim_reserved_space(inode->i_dquot[cnt],
  1534. number);
  1535. }
  1536. /* Update inode bytes */
  1537. inode_claim_rsv_space(inode, number);
  1538. spin_unlock(&dq_data_lock);
  1539. mark_all_dquot_dirty(inode->i_dquot);
  1540. up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1541. return 0;
  1542. }
  1543. EXPORT_SYMBOL(dquot_claim_space_nodirty);
  1544. /*
  1545. * Convert allocated space back to in-memory reserved quotas
  1546. */
  1547. void dquot_reclaim_space_nodirty(struct inode *inode, qsize_t number)
  1548. {
  1549. int cnt;
  1550. if (!dquot_active(inode)) {
  1551. inode_reclaim_rsv_space(inode, number);
  1552. return;
  1553. }
  1554. down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1555. spin_lock(&dq_data_lock);
  1556. /* Claim reserved quotas to allocated quotas */
  1557. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1558. if (inode->i_dquot[cnt])
  1559. dquot_reclaim_reserved_space(inode->i_dquot[cnt],
  1560. number);
  1561. }
  1562. /* Update inode bytes */
  1563. inode_reclaim_rsv_space(inode, number);
  1564. spin_unlock(&dq_data_lock);
  1565. mark_all_dquot_dirty(inode->i_dquot);
  1566. up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1567. return;
  1568. }
  1569. EXPORT_SYMBOL(dquot_reclaim_space_nodirty);
  1570. /*
  1571. * This operation can block, but only after everything is updated
  1572. */
  1573. void __dquot_free_space(struct inode *inode, qsize_t number, int flags)
  1574. {
  1575. unsigned int cnt;
  1576. struct dquot_warn warn[MAXQUOTAS];
  1577. struct dquot **dquots = inode->i_dquot;
  1578. int reserve = flags & DQUOT_SPACE_RESERVE;
  1579. /* First test before acquiring mutex - solves deadlocks when we
  1580. * re-enter the quota code and are already holding the mutex */
  1581. if (!dquot_active(inode)) {
  1582. inode_decr_space(inode, number, reserve);
  1583. return;
  1584. }
  1585. down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1586. spin_lock(&dq_data_lock);
  1587. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1588. int wtype;
  1589. warn[cnt].w_type = QUOTA_NL_NOWARN;
  1590. if (!dquots[cnt])
  1591. continue;
  1592. wtype = info_bdq_free(dquots[cnt], number);
  1593. if (wtype != QUOTA_NL_NOWARN)
  1594. prepare_warning(&warn[cnt], dquots[cnt], wtype);
  1595. if (reserve)
  1596. dquot_free_reserved_space(dquots[cnt], number);
  1597. else
  1598. dquot_decr_space(dquots[cnt], number);
  1599. }
  1600. inode_decr_space(inode, number, reserve);
  1601. spin_unlock(&dq_data_lock);
  1602. if (reserve)
  1603. goto out_unlock;
  1604. mark_all_dquot_dirty(dquots);
  1605. out_unlock:
  1606. up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1607. flush_warnings(warn);
  1608. }
  1609. EXPORT_SYMBOL(__dquot_free_space);
  1610. /*
  1611. * This operation can block, but only after everything is updated
  1612. */
  1613. void dquot_free_inode(const struct inode *inode)
  1614. {
  1615. unsigned int cnt;
  1616. struct dquot_warn warn[MAXQUOTAS];
  1617. struct dquot * const *dquots = inode->i_dquot;
  1618. /* First test before acquiring mutex - solves deadlocks when we
  1619. * re-enter the quota code and are already holding the mutex */
  1620. if (!dquot_active(inode))
  1621. return;
  1622. down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1623. spin_lock(&dq_data_lock);
  1624. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1625. int wtype;
  1626. warn[cnt].w_type = QUOTA_NL_NOWARN;
  1627. if (!dquots[cnt])
  1628. continue;
  1629. wtype = info_idq_free(dquots[cnt], 1);
  1630. if (wtype != QUOTA_NL_NOWARN)
  1631. prepare_warning(&warn[cnt], dquots[cnt], wtype);
  1632. dquot_decr_inodes(dquots[cnt], 1);
  1633. }
  1634. spin_unlock(&dq_data_lock);
  1635. mark_all_dquot_dirty(dquots);
  1636. up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1637. flush_warnings(warn);
  1638. }
  1639. EXPORT_SYMBOL(dquot_free_inode);
  1640. /*
  1641. * Transfer the number of inode and blocks from one diskquota to an other.
  1642. * On success, dquot references in transfer_to are consumed and references
  1643. * to original dquots that need to be released are placed there. On failure,
  1644. * references are kept untouched.
  1645. *
  1646. * This operation can block, but only after everything is updated
  1647. * A transaction must be started when entering this function.
  1648. *
  1649. */
  1650. int __dquot_transfer(struct inode *inode, struct dquot **transfer_to)
  1651. {
  1652. qsize_t space, cur_space;
  1653. qsize_t rsv_space = 0;
  1654. struct dquot *transfer_from[MAXQUOTAS] = {};
  1655. int cnt, ret = 0;
  1656. char is_valid[MAXQUOTAS] = {};
  1657. struct dquot_warn warn_to[MAXQUOTAS];
  1658. struct dquot_warn warn_from_inodes[MAXQUOTAS];
  1659. struct dquot_warn warn_from_space[MAXQUOTAS];
  1660. /* First test before acquiring mutex - solves deadlocks when we
  1661. * re-enter the quota code and are already holding the mutex */
  1662. if (IS_NOQUOTA(inode))
  1663. return 0;
  1664. /* Initialize the arrays */
  1665. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1666. warn_to[cnt].w_type = QUOTA_NL_NOWARN;
  1667. warn_from_inodes[cnt].w_type = QUOTA_NL_NOWARN;
  1668. warn_from_space[cnt].w_type = QUOTA_NL_NOWARN;
  1669. }
  1670. down_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1671. if (IS_NOQUOTA(inode)) { /* File without quota accounting? */
  1672. up_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1673. return 0;
  1674. }
  1675. spin_lock(&dq_data_lock);
  1676. cur_space = inode_get_bytes(inode);
  1677. rsv_space = inode_get_rsv_space(inode);
  1678. space = cur_space + rsv_space;
  1679. /* Build the transfer_from list and check the limits */
  1680. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1681. /*
  1682. * Skip changes for same uid or gid or for turned off quota-type.
  1683. */
  1684. if (!transfer_to[cnt])
  1685. continue;
  1686. /* Avoid races with quotaoff() */
  1687. if (!sb_has_quota_active(inode->i_sb, cnt))
  1688. continue;
  1689. is_valid[cnt] = 1;
  1690. transfer_from[cnt] = inode->i_dquot[cnt];
  1691. ret = check_idq(transfer_to[cnt], 1, &warn_to[cnt]);
  1692. if (ret)
  1693. goto over_quota;
  1694. ret = check_bdq(transfer_to[cnt], space, 0, &warn_to[cnt]);
  1695. if (ret)
  1696. goto over_quota;
  1697. }
  1698. /*
  1699. * Finally perform the needed transfer from transfer_from to transfer_to
  1700. */
  1701. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1702. if (!is_valid[cnt])
  1703. continue;
  1704. /* Due to IO error we might not have transfer_from[] structure */
  1705. if (transfer_from[cnt]) {
  1706. int wtype;
  1707. wtype = info_idq_free(transfer_from[cnt], 1);
  1708. if (wtype != QUOTA_NL_NOWARN)
  1709. prepare_warning(&warn_from_inodes[cnt],
  1710. transfer_from[cnt], wtype);
  1711. wtype = info_bdq_free(transfer_from[cnt], space);
  1712. if (wtype != QUOTA_NL_NOWARN)
  1713. prepare_warning(&warn_from_space[cnt],
  1714. transfer_from[cnt], wtype);
  1715. dquot_decr_inodes(transfer_from[cnt], 1);
  1716. dquot_decr_space(transfer_from[cnt], cur_space);
  1717. dquot_free_reserved_space(transfer_from[cnt],
  1718. rsv_space);
  1719. }
  1720. dquot_incr_inodes(transfer_to[cnt], 1);
  1721. dquot_incr_space(transfer_to[cnt], cur_space);
  1722. dquot_resv_space(transfer_to[cnt], rsv_space);
  1723. inode->i_dquot[cnt] = transfer_to[cnt];
  1724. }
  1725. spin_unlock(&dq_data_lock);
  1726. up_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1727. mark_all_dquot_dirty(transfer_from);
  1728. mark_all_dquot_dirty(transfer_to);
  1729. flush_warnings(warn_to);
  1730. flush_warnings(warn_from_inodes);
  1731. flush_warnings(warn_from_space);
  1732. /* Pass back references to put */
  1733. for (cnt = 0; cnt < MAXQUOTAS; cnt++)
  1734. if (is_valid[cnt])
  1735. transfer_to[cnt] = transfer_from[cnt];
  1736. return 0;
  1737. over_quota:
  1738. spin_unlock(&dq_data_lock);
  1739. up_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
  1740. flush_warnings(warn_to);
  1741. return ret;
  1742. }
  1743. EXPORT_SYMBOL(__dquot_transfer);
  1744. /* Wrapper for transferring ownership of an inode for uid/gid only
  1745. * Called from FSXXX_setattr()
  1746. */
  1747. int dquot_transfer(struct inode *inode, struct iattr *iattr)
  1748. {
  1749. struct dquot *transfer_to[MAXQUOTAS] = {};
  1750. struct super_block *sb = inode->i_sb;
  1751. int ret;
  1752. if (!dquot_active(inode))
  1753. return 0;
  1754. if (iattr->ia_valid & ATTR_UID && !uid_eq(iattr->ia_uid, inode->i_uid))
  1755. transfer_to[USRQUOTA] = dqget(sb, make_kqid_uid(iattr->ia_uid));
  1756. if (iattr->ia_valid & ATTR_GID && !gid_eq(iattr->ia_gid, inode->i_gid))
  1757. transfer_to[GRPQUOTA] = dqget(sb, make_kqid_gid(iattr->ia_gid));
  1758. ret = __dquot_transfer(inode, transfer_to);
  1759. dqput_all(transfer_to);
  1760. return ret;
  1761. }
  1762. EXPORT_SYMBOL(dquot_transfer);
  1763. /*
  1764. * Write info of quota file to disk
  1765. */
  1766. int dquot_commit_info(struct super_block *sb, int type)
  1767. {
  1768. int ret;
  1769. struct quota_info *dqopt = sb_dqopt(sb);
  1770. mutex_lock(&dqopt->dqio_mutex);
  1771. ret = dqopt->ops[type]->write_file_info(sb, type);
  1772. mutex_unlock(&dqopt->dqio_mutex);
  1773. return ret;
  1774. }
  1775. EXPORT_SYMBOL(dquot_commit_info);
  1776. /*
  1777. * Definitions of diskquota operations.
  1778. */
  1779. const struct dquot_operations dquot_operations = {
  1780. .write_dquot = dquot_commit,
  1781. .acquire_dquot = dquot_acquire,
  1782. .release_dquot = dquot_release,
  1783. .mark_dirty = dquot_mark_dquot_dirty,
  1784. .write_info = dquot_commit_info,
  1785. .alloc_dquot = dquot_alloc,
  1786. .destroy_dquot = dquot_destroy,
  1787. };
  1788. EXPORT_SYMBOL(dquot_operations);
  1789. /*
  1790. * Generic helper for ->open on filesystems supporting disk quotas.
  1791. */
  1792. int dquot_file_open(struct inode *inode, struct file *file)
  1793. {
  1794. int error;
  1795. error = generic_file_open(inode, file);
  1796. if (!error && (file->f_mode & FMODE_WRITE))
  1797. dquot_initialize(inode);
  1798. return error;
  1799. }
  1800. EXPORT_SYMBOL(dquot_file_open);
  1801. /*
  1802. * Turn quota off on a device. type == -1 ==> quotaoff for all types (umount)
  1803. */
  1804. int dquot_disable(struct super_block *sb, int type, unsigned int flags)
  1805. {
  1806. int cnt, ret = 0;
  1807. struct quota_info *dqopt = sb_dqopt(sb);
  1808. struct inode *toputinode[MAXQUOTAS];
  1809. /* Cannot turn off usage accounting without turning off limits, or
  1810. * suspend quotas and simultaneously turn quotas off. */
  1811. if ((flags & DQUOT_USAGE_ENABLED && !(flags & DQUOT_LIMITS_ENABLED))
  1812. || (flags & DQUOT_SUSPENDED && flags & (DQUOT_LIMITS_ENABLED |
  1813. DQUOT_USAGE_ENABLED)))
  1814. return -EINVAL;
  1815. /* We need to serialize quota_off() for device */
  1816. mutex_lock(&dqopt->dqonoff_mutex);
  1817. /*
  1818. * Skip everything if there's nothing to do. We have to do this because
  1819. * sometimes we are called when fill_super() failed and calling
  1820. * sync_fs() in such cases does no good.
  1821. */
  1822. if (!sb_any_quota_loaded(sb)) {
  1823. mutex_unlock(&dqopt->dqonoff_mutex);
  1824. return 0;
  1825. }
  1826. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  1827. toputinode[cnt] = NULL;
  1828. if (type != -1 && cnt != type)
  1829. continue;
  1830. if (!sb_has_quota_loaded(sb, cnt))
  1831. continue;
  1832. if (flags & DQUOT_SUSPENDED) {
  1833. spin_lock(&dq_state_lock);
  1834. dqopt->flags |=
  1835. dquot_state_flag(DQUOT_SUSPENDED, cnt);
  1836. spin_unlock(&dq_state_lock);
  1837. } else {
  1838. spin_lock(&dq_state_lock);
  1839. dqopt->flags &= ~dquot_state_flag(flags, cnt);
  1840. /* Turning off suspended quotas? */
  1841. if (!sb_has_quota_loaded(sb, cnt) &&
  1842. sb_has_quota_suspended(sb, cnt)) {
  1843. dqopt->flags &= ~dquot_state_flag(
  1844. DQUOT_SUSPENDED, cnt);
  1845. spin_unlock(&dq_state_lock);
  1846. iput(dqopt->files[cnt]);
  1847. dqopt->files[cnt] = NULL;
  1848. continue;
  1849. }
  1850. spin_unlock(&dq_state_lock);
  1851. }
  1852. /* We still have to keep quota loaded? */
  1853. if (sb_has_quota_loaded(sb, cnt) && !(flags & DQUOT_SUSPENDED))
  1854. continue;
  1855. /* Note: these are blocking operations */
  1856. drop_dquot_ref(sb, cnt);
  1857. invalidate_dquots(sb, cnt);
  1858. /*
  1859. * Now all dquots should be invalidated, all writes done so we
  1860. * should be only users of the info. No locks needed.
  1861. */
  1862. if (info_dirty(&dqopt->info[cnt]))
  1863. sb->dq_op->write_info(sb, cnt);
  1864. if (dqopt->ops[cnt]->free_file_info)
  1865. dqopt->ops[cnt]->free_file_info(sb, cnt);
  1866. put_quota_format(dqopt->info[cnt].dqi_format);
  1867. toputinode[cnt] = dqopt->files[cnt];
  1868. if (!sb_has_quota_loaded(sb, cnt))
  1869. dqopt->files[cnt] = NULL;
  1870. dqopt->info[cnt].dqi_flags = 0;
  1871. dqopt->info[cnt].dqi_igrace = 0;
  1872. dqopt->info[cnt].dqi_bgrace = 0;
  1873. dqopt->ops[cnt] = NULL;
  1874. }
  1875. mutex_unlock(&dqopt->dqonoff_mutex);
  1876. /* Skip syncing and setting flags if quota files are hidden */
  1877. if (dqopt->flags & DQUOT_QUOTA_SYS_FILE)
  1878. goto put_inodes;
  1879. /* Sync the superblock so that buffers with quota data are written to
  1880. * disk (and so userspace sees correct data afterwards). */
  1881. if (sb->s_op->sync_fs)
  1882. sb->s_op->sync_fs(sb, 1);
  1883. sync_blockdev(sb->s_bdev);
  1884. /* Now the quota files are just ordinary files and we can set the
  1885. * inode flags back. Moreover we discard the pagecache so that
  1886. * userspace sees the writes we did bypassing the pagecache. We
  1887. * must also discard the blockdev buffers so that we see the
  1888. * changes done by userspace on the next quotaon() */
  1889. for (cnt = 0; cnt < MAXQUOTAS; cnt++)
  1890. if (toputinode[cnt]) {
  1891. mutex_lock(&dqopt->dqonoff_mutex);
  1892. /* If quota was reenabled in the meantime, we have
  1893. * nothing to do */
  1894. if (!sb_has_quota_loaded(sb, cnt)) {
  1895. mutex_lock(&toputinode[cnt]->i_mutex);
  1896. toputinode[cnt]->i_flags &= ~(S_IMMUTABLE |
  1897. S_NOATIME | S_NOQUOTA);
  1898. truncate_inode_pages(&toputinode[cnt]->i_data,
  1899. 0);
  1900. mutex_unlock(&toputinode[cnt]->i_mutex);
  1901. mark_inode_dirty_sync(toputinode[cnt]);
  1902. }
  1903. mutex_unlock(&dqopt->dqonoff_mutex);
  1904. }
  1905. if (sb->s_bdev)
  1906. invalidate_bdev(sb->s_bdev);
  1907. put_inodes:
  1908. for (cnt = 0; cnt < MAXQUOTAS; cnt++)
  1909. if (toputinode[cnt]) {
  1910. /* On remount RO, we keep the inode pointer so that we
  1911. * can reenable quota on the subsequent remount RW. We
  1912. * have to check 'flags' variable and not use sb_has_
  1913. * function because another quotaon / quotaoff could
  1914. * change global state before we got here. We refuse
  1915. * to suspend quotas when there is pending delete on
  1916. * the quota file... */
  1917. if (!(flags & DQUOT_SUSPENDED))
  1918. iput(toputinode[cnt]);
  1919. else if (!toputinode[cnt]->i_nlink)
  1920. ret = -EBUSY;
  1921. }
  1922. return ret;
  1923. }
  1924. EXPORT_SYMBOL(dquot_disable);
  1925. int dquot_quota_off(struct super_block *sb, int type)
  1926. {
  1927. return dquot_disable(sb, type,
  1928. DQUOT_USAGE_ENABLED | DQUOT_LIMITS_ENABLED);
  1929. }
  1930. EXPORT_SYMBOL(dquot_quota_off);
  1931. /*
  1932. * Turn quotas on on a device
  1933. */
  1934. /*
  1935. * Helper function to turn quotas on when we already have the inode of
  1936. * quota file and no quota information is loaded.
  1937. */
  1938. static int vfs_load_quota_inode(struct inode *inode, int type, int format_id,
  1939. unsigned int flags)
  1940. {
  1941. struct quota_format_type *fmt = find_quota_format(format_id);
  1942. struct super_block *sb = inode->i_sb;
  1943. struct quota_info *dqopt = sb_dqopt(sb);
  1944. int error;
  1945. int oldflags = -1;
  1946. if (!fmt)
  1947. return -ESRCH;
  1948. if (!S_ISREG(inode->i_mode)) {
  1949. error = -EACCES;
  1950. goto out_fmt;
  1951. }
  1952. if (IS_RDONLY(inode)) {
  1953. error = -EROFS;
  1954. goto out_fmt;
  1955. }
  1956. if (!sb->s_op->quota_write || !sb->s_op->quota_read) {
  1957. error = -EINVAL;
  1958. goto out_fmt;
  1959. }
  1960. /* Usage always has to be set... */
  1961. if (!(flags & DQUOT_USAGE_ENABLED)) {
  1962. error = -EINVAL;
  1963. goto out_fmt;
  1964. }
  1965. if (!(dqopt->flags & DQUOT_QUOTA_SYS_FILE)) {
  1966. /* As we bypass the pagecache we must now flush all the
  1967. * dirty data and invalidate caches so that kernel sees
  1968. * changes from userspace. It is not enough to just flush
  1969. * the quota file since if blocksize < pagesize, invalidation
  1970. * of the cache could fail because of other unrelated dirty
  1971. * data */
  1972. sync_filesystem(sb);
  1973. invalidate_bdev(sb->s_bdev);
  1974. }
  1975. mutex_lock(&dqopt->dqonoff_mutex);
  1976. if (sb_has_quota_loaded(sb, type)) {
  1977. error = -EBUSY;
  1978. goto out_lock;
  1979. }
  1980. if (!(dqopt->flags & DQUOT_QUOTA_SYS_FILE)) {
  1981. /* We don't want quota and atime on quota files (deadlocks
  1982. * possible) Also nobody should write to the file - we use
  1983. * special IO operations which ignore the immutable bit. */
  1984. mutex_lock(&inode->i_mutex);
  1985. oldflags = inode->i_flags & (S_NOATIME | S_IMMUTABLE |
  1986. S_NOQUOTA);
  1987. inode->i_flags |= S_NOQUOTA | S_NOATIME | S_IMMUTABLE;
  1988. mutex_unlock(&inode->i_mutex);
  1989. /*
  1990. * When S_NOQUOTA is set, remove dquot references as no more
  1991. * references can be added
  1992. */
  1993. __dquot_drop(inode);
  1994. }
  1995. error = -EIO;
  1996. dqopt->files[type] = igrab(inode);
  1997. if (!dqopt->files[type])
  1998. goto out_lock;
  1999. error = -EINVAL;
  2000. if (!fmt->qf_ops->check_quota_file(sb, type))
  2001. goto out_file_init;
  2002. dqopt->ops[type] = fmt->qf_ops;
  2003. dqopt->info[type].dqi_format = fmt;
  2004. dqopt->info[type].dqi_fmt_id = format_id;
  2005. INIT_LIST_HEAD(&dqopt->info[type].dqi_dirty_list);
  2006. mutex_lock(&dqopt->dqio_mutex);
  2007. error = dqopt->ops[type]->read_file_info(sb, type);
  2008. if (error < 0) {
  2009. mutex_unlock(&dqopt->dqio_mutex);
  2010. goto out_file_init;
  2011. }
  2012. if (dqopt->flags & DQUOT_QUOTA_SYS_FILE)
  2013. dqopt->info[type].dqi_flags |= DQF_SYS_FILE;
  2014. mutex_unlock(&dqopt->dqio_mutex);
  2015. spin_lock(&dq_state_lock);
  2016. dqopt->flags |= dquot_state_flag(flags, type);
  2017. spin_unlock(&dq_state_lock);
  2018. add_dquot_ref(sb, type);
  2019. mutex_unlock(&dqopt->dqonoff_mutex);
  2020. return 0;
  2021. out_file_init:
  2022. dqopt->files[type] = NULL;
  2023. iput(inode);
  2024. out_lock:
  2025. if (oldflags != -1) {
  2026. mutex_lock(&inode->i_mutex);
  2027. /* Set the flags back (in the case of accidental quotaon()
  2028. * on a wrong file we don't want to mess up the flags) */
  2029. inode->i_flags &= ~(S_NOATIME | S_NOQUOTA | S_IMMUTABLE);
  2030. inode->i_flags |= oldflags;
  2031. mutex_unlock(&inode->i_mutex);
  2032. }
  2033. mutex_unlock(&dqopt->dqonoff_mutex);
  2034. out_fmt:
  2035. put_quota_format(fmt);
  2036. return error;
  2037. }
  2038. /* Reenable quotas on remount RW */
  2039. int dquot_resume(struct super_block *sb, int type)
  2040. {
  2041. struct quota_info *dqopt = sb_dqopt(sb);
  2042. struct inode *inode;
  2043. int ret = 0, cnt;
  2044. unsigned int flags;
  2045. for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
  2046. if (type != -1 && cnt != type)
  2047. continue;
  2048. mutex_lock(&dqopt->dqonoff_mutex);
  2049. if (!sb_has_quota_suspended(sb, cnt)) {
  2050. mutex_unlock(&dqopt->dqonoff_mutex);
  2051. continue;
  2052. }
  2053. inode = dqopt->files[cnt];
  2054. dqopt->files[cnt] = NULL;
  2055. spin_lock(&dq_state_lock);
  2056. flags = dqopt->flags & dquot_state_flag(DQUOT_USAGE_ENABLED |
  2057. DQUOT_LIMITS_ENABLED,
  2058. cnt);
  2059. dqopt->flags &= ~dquot_state_flag(DQUOT_STATE_FLAGS, cnt);
  2060. spin_unlock(&dq_state_lock);
  2061. mutex_unlock(&dqopt->dqonoff_mutex);
  2062. flags = dquot_generic_flag(flags, cnt);
  2063. ret = vfs_load_quota_inode(inode, cnt,
  2064. dqopt->info[cnt].dqi_fmt_id, flags);
  2065. iput(inode);
  2066. }
  2067. return ret;
  2068. }
  2069. EXPORT_SYMBOL(dquot_resume);
  2070. int dquot_quota_on(struct super_block *sb, int type, int format_id,
  2071. struct path *path)
  2072. {
  2073. int error = security_quota_on(path->dentry);
  2074. if (error)
  2075. return error;
  2076. /* Quota file not on the same filesystem? */
  2077. if (path->dentry->d_sb != sb)
  2078. error = -EXDEV;
  2079. else
  2080. error = vfs_load_quota_inode(path->dentry->d_inode, type,
  2081. format_id, DQUOT_USAGE_ENABLED |
  2082. DQUOT_LIMITS_ENABLED);
  2083. return error;
  2084. }
  2085. EXPORT_SYMBOL(dquot_quota_on);
  2086. /*
  2087. * More powerful function for turning on quotas allowing setting
  2088. * of individual quota flags
  2089. */
  2090. int dquot_enable(struct inode *inode, int type, int format_id,
  2091. unsigned int flags)
  2092. {
  2093. int ret = 0;
  2094. struct super_block *sb = inode->i_sb;
  2095. struct quota_info *dqopt = sb_dqopt(sb);
  2096. /* Just unsuspend quotas? */
  2097. BUG_ON(flags & DQUOT_SUSPENDED);
  2098. if (!flags)
  2099. return 0;
  2100. /* Just updating flags needed? */
  2101. if (sb_has_quota_loaded(sb, type)) {
  2102. mutex_lock(&dqopt->dqonoff_mutex);
  2103. /* Now do a reliable test... */
  2104. if (!sb_has_quota_loaded(sb, type)) {
  2105. mutex_unlock(&dqopt->dqonoff_mutex);
  2106. goto load_quota;
  2107. }
  2108. if (flags & DQUOT_USAGE_ENABLED &&
  2109. sb_has_quota_usage_enabled(sb, type)) {
  2110. ret = -EBUSY;
  2111. goto out_lock;
  2112. }
  2113. if (flags & DQUOT_LIMITS_ENABLED &&
  2114. sb_has_quota_limits_enabled(sb, type)) {
  2115. ret = -EBUSY;
  2116. goto out_lock;
  2117. }
  2118. spin_lock(&dq_state_lock);
  2119. sb_dqopt(sb)->flags |= dquot_state_flag(flags, type);
  2120. spin_unlock(&dq_state_lock);
  2121. out_lock:
  2122. mutex_unlock(&dqopt->dqonoff_mutex);
  2123. return ret;
  2124. }
  2125. load_quota:
  2126. return vfs_load_quota_inode(inode, type, format_id, flags);
  2127. }
  2128. EXPORT_SYMBOL(dquot_enable);
  2129. /*
  2130. * This function is used when filesystem needs to initialize quotas
  2131. * during mount time.
  2132. */
  2133. int dquot_quota_on_mount(struct super_block *sb, char *qf_name,
  2134. int format_id, int type)
  2135. {
  2136. struct dentry *dentry;
  2137. int error;
  2138. mutex_lock(&sb->s_root->d_inode->i_mutex);
  2139. dentry = lookup_one_len(qf_name, sb->s_root, strlen(qf_name));
  2140. mutex_unlock(&sb->s_root->d_inode->i_mutex);
  2141. if (IS_ERR(dentry))
  2142. return PTR_ERR(dentry);
  2143. if (!dentry->d_inode) {
  2144. error = -ENOENT;
  2145. goto out;
  2146. }
  2147. error = security_quota_on(dentry);
  2148. if (!error)
  2149. error = vfs_load_quota_inode(dentry->d_inode, type, format_id,
  2150. DQUOT_USAGE_ENABLED | DQUOT_LIMITS_ENABLED);
  2151. out:
  2152. dput(dentry);
  2153. return error;
  2154. }
  2155. EXPORT_SYMBOL(dquot_quota_on_mount);
  2156. static inline qsize_t qbtos(qsize_t blocks)
  2157. {
  2158. return blocks << QIF_DQBLKSIZE_BITS;
  2159. }
  2160. static inline qsize_t stoqb(qsize_t space)
  2161. {
  2162. return (space + QIF_DQBLKSIZE - 1) >> QIF_DQBLKSIZE_BITS;
  2163. }
  2164. /* Generic routine for getting common part of quota structure */
  2165. static void do_get_dqblk(struct dquot *dquot, struct fs_disk_quota *di)
  2166. {
  2167. struct mem_dqblk *dm = &dquot->dq_dqb;
  2168. memset(di, 0, sizeof(*di));
  2169. di->d_version = FS_DQUOT_VERSION;
  2170. di->d_flags = dquot->dq_id.type == USRQUOTA ?
  2171. FS_USER_QUOTA : FS_GROUP_QUOTA;
  2172. di->d_id = from_kqid_munged(current_user_ns(), dquot->dq_id);
  2173. spin_lock(&dq_data_lock);
  2174. di->d_blk_hardlimit = stoqb(dm->dqb_bhardlimit);
  2175. di->d_blk_softlimit = stoqb(dm->dqb_bsoftlimit);
  2176. di->d_ino_hardlimit = dm->dqb_ihardlimit;
  2177. di->d_ino_softlimit = dm->dqb_isoftlimit;
  2178. di->d_bcount = dm->dqb_curspace + dm->dqb_rsvspace;
  2179. di->d_icount = dm->dqb_curinodes;
  2180. di->d_btimer = dm->dqb_btime;
  2181. di->d_itimer = dm->dqb_itime;
  2182. spin_unlock(&dq_data_lock);
  2183. }
  2184. int dquot_get_dqblk(struct super_block *sb, struct kqid qid,
  2185. struct fs_disk_quota *di)
  2186. {
  2187. struct dquot *dquot;
  2188. dquot = dqget(sb, qid);
  2189. if (!dquot)
  2190. return -ESRCH;
  2191. do_get_dqblk(dquot, di);
  2192. dqput(dquot);
  2193. return 0;
  2194. }
  2195. EXPORT_SYMBOL(dquot_get_dqblk);
  2196. #define VFS_FS_DQ_MASK \
  2197. (FS_DQ_BCOUNT | FS_DQ_BSOFT | FS_DQ_BHARD | \
  2198. FS_DQ_ICOUNT | FS_DQ_ISOFT | FS_DQ_IHARD | \
  2199. FS_DQ_BTIMER | FS_DQ_ITIMER)
  2200. /* Generic routine for setting common part of quota structure */
  2201. static int do_set_dqblk(struct dquot *dquot, struct fs_disk_quota *di)
  2202. {
  2203. struct mem_dqblk *dm = &dquot->dq_dqb;
  2204. int check_blim = 0, check_ilim = 0;
  2205. struct mem_dqinfo *dqi = &sb_dqopt(dquot->dq_sb)->info[dquot->dq_id.type];
  2206. if (di->d_fieldmask & ~VFS_FS_DQ_MASK)
  2207. return -EINVAL;
  2208. if (((di->d_fieldmask & FS_DQ_BSOFT) &&
  2209. (di->d_blk_softlimit > dqi->dqi_maxblimit)) ||
  2210. ((di->d_fieldmask & FS_DQ_BHARD) &&
  2211. (di->d_blk_hardlimit > dqi->dqi_maxblimit)) ||
  2212. ((di->d_fieldmask & FS_DQ_ISOFT) &&
  2213. (di->d_ino_softlimit > dqi->dqi_maxilimit)) ||
  2214. ((di->d_fieldmask & FS_DQ_IHARD) &&
  2215. (di->d_ino_hardlimit > dqi->dqi_maxilimit)))
  2216. return -ERANGE;
  2217. spin_lock(&dq_data_lock);
  2218. if (di->d_fieldmask & FS_DQ_BCOUNT) {
  2219. dm->dqb_curspace = di->d_bcount - dm->dqb_rsvspace;
  2220. check_blim = 1;
  2221. set_bit(DQ_LASTSET_B + QIF_SPACE_B, &dquot->dq_flags);
  2222. }
  2223. if (di->d_fieldmask & FS_DQ_BSOFT)
  2224. dm->dqb_bsoftlimit = qbtos(di->d_blk_softlimit);
  2225. if (di->d_fieldmask & FS_DQ_BHARD)
  2226. dm->dqb_bhardlimit = qbtos(di->d_blk_hardlimit);
  2227. if (di->d_fieldmask & (FS_DQ_BSOFT | FS_DQ_BHARD)) {
  2228. check_blim = 1;
  2229. set_bit(DQ_LASTSET_B + QIF_BLIMITS_B, &dquot->dq_flags);
  2230. }
  2231. if (di->d_fieldmask & FS_DQ_ICOUNT) {
  2232. dm->dqb_curinodes = di->d_icount;
  2233. check_ilim = 1;
  2234. set_bit(DQ_LASTSET_B + QIF_INODES_B, &dquot->dq_flags);
  2235. }
  2236. if (di->d_fieldmask & FS_DQ_ISOFT)
  2237. dm->dqb_isoftlimit = di->d_ino_softlimit;
  2238. if (di->d_fieldmask & FS_DQ_IHARD)
  2239. dm->dqb_ihardlimit = di->d_ino_hardlimit;
  2240. if (di->d_fieldmask & (FS_DQ_ISOFT | FS_DQ_IHARD)) {
  2241. check_ilim = 1;
  2242. set_bit(DQ_LASTSET_B + QIF_ILIMITS_B, &dquot->dq_flags);
  2243. }
  2244. if (di->d_fieldmask & FS_DQ_BTIMER) {
  2245. dm->dqb_btime = di->d_btimer;
  2246. check_blim = 1;
  2247. set_bit(DQ_LASTSET_B + QIF_BTIME_B, &dquot->dq_flags);
  2248. }
  2249. if (di->d_fieldmask & FS_DQ_ITIMER) {
  2250. dm->dqb_itime = di->d_itimer;
  2251. check_ilim = 1;
  2252. set_bit(DQ_LASTSET_B + QIF_ITIME_B, &dquot->dq_flags);
  2253. }
  2254. if (check_blim) {
  2255. if (!dm->dqb_bsoftlimit ||
  2256. dm->dqb_curspace < dm->dqb_bsoftlimit) {
  2257. dm->dqb_btime = 0;
  2258. clear_bit(DQ_BLKS_B, &dquot->dq_flags);
  2259. } else if (!(di->d_fieldmask & FS_DQ_BTIMER))
  2260. /* Set grace only if user hasn't provided his own... */
  2261. dm->dqb_btime = get_seconds() + dqi->dqi_bgrace;
  2262. }
  2263. if (check_ilim) {
  2264. if (!dm->dqb_isoftlimit ||
  2265. dm->dqb_curinodes < dm->dqb_isoftlimit) {
  2266. dm->dqb_itime = 0;
  2267. clear_bit(DQ_INODES_B, &dquot->dq_flags);
  2268. } else if (!(di->d_fieldmask & FS_DQ_ITIMER))
  2269. /* Set grace only if user hasn't provided his own... */
  2270. dm->dqb_itime = get_seconds() + dqi->dqi_igrace;
  2271. }
  2272. if (dm->dqb_bhardlimit || dm->dqb_bsoftlimit || dm->dqb_ihardlimit ||
  2273. dm->dqb_isoftlimit)
  2274. clear_bit(DQ_FAKE_B, &dquot->dq_flags);
  2275. else
  2276. set_bit(DQ_FAKE_B, &dquot->dq_flags);
  2277. spin_unlock(&dq_data_lock);
  2278. mark_dquot_dirty(dquot);
  2279. return 0;
  2280. }
  2281. int dquot_set_dqblk(struct super_block *sb, struct kqid qid,
  2282. struct fs_disk_quota *di)
  2283. {
  2284. struct dquot *dquot;
  2285. int rc;
  2286. dquot = dqget(sb, qid);
  2287. if (!dquot) {
  2288. rc = -ESRCH;
  2289. goto out;
  2290. }
  2291. rc = do_set_dqblk(dquot, di);
  2292. dqput(dquot);
  2293. out:
  2294. return rc;
  2295. }
  2296. EXPORT_SYMBOL(dquot_set_dqblk);
  2297. /* Generic routine for getting common part of quota file information */
  2298. int dquot_get_dqinfo(struct super_block *sb, int type, struct if_dqinfo *ii)
  2299. {
  2300. struct mem_dqinfo *mi;
  2301. mutex_lock(&sb_dqopt(sb)->dqonoff_mutex);
  2302. if (!sb_has_quota_active(sb, type)) {
  2303. mutex_unlock(&sb_dqopt(sb)->dqonoff_mutex);
  2304. return -ESRCH;
  2305. }
  2306. mi = sb_dqopt(sb)->info + type;
  2307. spin_lock(&dq_data_lock);
  2308. ii->dqi_bgrace = mi->dqi_bgrace;
  2309. ii->dqi_igrace = mi->dqi_igrace;
  2310. ii->dqi_flags = mi->dqi_flags & DQF_GETINFO_MASK;
  2311. ii->dqi_valid = IIF_ALL;
  2312. spin_unlock(&dq_data_lock);
  2313. mutex_unlock(&sb_dqopt(sb)->dqonoff_mutex);
  2314. return 0;
  2315. }
  2316. EXPORT_SYMBOL(dquot_get_dqinfo);
  2317. /* Generic routine for setting common part of quota file information */
  2318. int dquot_set_dqinfo(struct super_block *sb, int type, struct if_dqinfo *ii)
  2319. {
  2320. struct mem_dqinfo *mi;
  2321. int err = 0;
  2322. mutex_lock(&sb_dqopt(sb)->dqonoff_mutex);
  2323. if (!sb_has_quota_active(sb, type)) {
  2324. err = -ESRCH;
  2325. goto out;
  2326. }
  2327. mi = sb_dqopt(sb)->info + type;
  2328. spin_lock(&dq_data_lock);
  2329. if (ii->dqi_valid & IIF_BGRACE)
  2330. mi->dqi_bgrace = ii->dqi_bgrace;
  2331. if (ii->dqi_valid & IIF_IGRACE)
  2332. mi->dqi_igrace = ii->dqi_igrace;
  2333. if (ii->dqi_valid & IIF_FLAGS)
  2334. mi->dqi_flags = (mi->dqi_flags & ~DQF_SETINFO_MASK) |
  2335. (ii->dqi_flags & DQF_SETINFO_MASK);
  2336. spin_unlock(&dq_data_lock);
  2337. mark_info_dirty(sb, type);
  2338. /* Force write to disk */
  2339. sb->dq_op->write_info(sb, type);
  2340. out:
  2341. mutex_unlock(&sb_dqopt(sb)->dqonoff_mutex);
  2342. return err;
  2343. }
  2344. EXPORT_SYMBOL(dquot_set_dqinfo);
  2345. const struct quotactl_ops dquot_quotactl_ops = {
  2346. .quota_on = dquot_quota_on,
  2347. .quota_off = dquot_quota_off,
  2348. .quota_sync = dquot_quota_sync,
  2349. .get_info = dquot_get_dqinfo,
  2350. .set_info = dquot_set_dqinfo,
  2351. .get_dqblk = dquot_get_dqblk,
  2352. .set_dqblk = dquot_set_dqblk
  2353. };
  2354. EXPORT_SYMBOL(dquot_quotactl_ops);
  2355. static int do_proc_dqstats(struct ctl_table *table, int write,
  2356. void __user *buffer, size_t *lenp, loff_t *ppos)
  2357. {
  2358. unsigned int type = (int *)table->data - dqstats.stat;
  2359. /* Update global table */
  2360. dqstats.stat[type] =
  2361. percpu_counter_sum_positive(&dqstats.counter[type]);
  2362. return proc_dointvec(table, write, buffer, lenp, ppos);
  2363. }
  2364. static struct ctl_table fs_dqstats_table[] = {
  2365. {
  2366. .procname = "lookups",
  2367. .data = &dqstats.stat[DQST_LOOKUPS],
  2368. .maxlen = sizeof(int),
  2369. .mode = 0444,
  2370. .proc_handler = do_proc_dqstats,
  2371. },
  2372. {
  2373. .procname = "drops",
  2374. .data = &dqstats.stat[DQST_DROPS],
  2375. .maxlen = sizeof(int),
  2376. .mode = 0444,
  2377. .proc_handler = do_proc_dqstats,
  2378. },
  2379. {
  2380. .procname = "reads",
  2381. .data = &dqstats.stat[DQST_READS],
  2382. .maxlen = sizeof(int),
  2383. .mode = 0444,
  2384. .proc_handler = do_proc_dqstats,
  2385. },
  2386. {
  2387. .procname = "writes",
  2388. .data = &dqstats.stat[DQST_WRITES],
  2389. .maxlen = sizeof(int),
  2390. .mode = 0444,
  2391. .proc_handler = do_proc_dqstats,
  2392. },
  2393. {
  2394. .procname = "cache_hits",
  2395. .data = &dqstats.stat[DQST_CACHE_HITS],
  2396. .maxlen = sizeof(int),
  2397. .mode = 0444,
  2398. .proc_handler = do_proc_dqstats,
  2399. },
  2400. {
  2401. .procname = "allocated_dquots",
  2402. .data = &dqstats.stat[DQST_ALLOC_DQUOTS],
  2403. .maxlen = sizeof(int),
  2404. .mode = 0444,
  2405. .proc_handler = do_proc_dqstats,
  2406. },
  2407. {
  2408. .procname = "free_dquots",
  2409. .data = &dqstats.stat[DQST_FREE_DQUOTS],
  2410. .maxlen = sizeof(int),
  2411. .mode = 0444,
  2412. .proc_handler = do_proc_dqstats,
  2413. },
  2414. {
  2415. .procname = "syncs",
  2416. .data = &dqstats.stat[DQST_SYNCS],
  2417. .maxlen = sizeof(int),
  2418. .mode = 0444,
  2419. .proc_handler = do_proc_dqstats,
  2420. },
  2421. #ifdef CONFIG_PRINT_QUOTA_WARNING
  2422. {
  2423. .procname = "warnings",
  2424. .data = &flag_print_warnings,
  2425. .maxlen = sizeof(int),
  2426. .mode = 0644,
  2427. .proc_handler = proc_dointvec,
  2428. },
  2429. #endif
  2430. { },
  2431. };
  2432. static struct ctl_table fs_table[] = {
  2433. {
  2434. .procname = "quota",
  2435. .mode = 0555,
  2436. .child = fs_dqstats_table,
  2437. },
  2438. { },
  2439. };
  2440. static struct ctl_table sys_table[] = {
  2441. {
  2442. .procname = "fs",
  2443. .mode = 0555,
  2444. .child = fs_table,
  2445. },
  2446. { },
  2447. };
  2448. static int __init dquot_init(void)
  2449. {
  2450. int i, ret;
  2451. unsigned long nr_hash, order;
  2452. printk(KERN_NOTICE "VFS: Disk quotas %s\n", __DQUOT_VERSION__);
  2453. register_sysctl_table(sys_table);
  2454. dquot_cachep = kmem_cache_create("dquot",
  2455. sizeof(struct dquot), sizeof(unsigned long) * 4,
  2456. (SLAB_HWCACHE_ALIGN|SLAB_RECLAIM_ACCOUNT|
  2457. SLAB_MEM_SPREAD|SLAB_PANIC),
  2458. NULL);
  2459. order = 0;
  2460. dquot_hash = (struct hlist_head *)__get_free_pages(GFP_ATOMIC, order);
  2461. if (!dquot_hash)
  2462. panic("Cannot create dquot hash table");
  2463. for (i = 0; i < _DQST_DQSTAT_LAST; i++) {
  2464. ret = percpu_counter_init(&dqstats.counter[i], 0);
  2465. if (ret)
  2466. panic("Cannot create dquot stat counters");
  2467. }
  2468. /* Find power-of-two hlist_heads which can fit into allocation */
  2469. nr_hash = (1UL << order) * PAGE_SIZE / sizeof(struct hlist_head);
  2470. dq_hash_bits = 0;
  2471. do {
  2472. dq_hash_bits++;
  2473. } while (nr_hash >> dq_hash_bits);
  2474. dq_hash_bits--;
  2475. nr_hash = 1UL << dq_hash_bits;
  2476. dq_hash_mask = nr_hash - 1;
  2477. for (i = 0; i < nr_hash; i++)
  2478. INIT_HLIST_HEAD(dquot_hash + i);
  2479. printk("Dquot-cache hash table entries: %ld (order %ld, %ld bytes)\n",
  2480. nr_hash, order, (PAGE_SIZE << order));
  2481. register_shrinker(&dqcache_shrinker);
  2482. return 0;
  2483. }
  2484. module_init(dquot_init);