isofs: Fix unbounded recursion when processing relocated directories
[linux/fpc-iii.git] / fs / isofs / rock.c
blob6fa4a86f73bf60e6218fac1dd71efbf6f4759f18
1 /*
2 * linux/fs/isofs/rock.c
4 * (C) 1992, 1993 Eric Youngdale
6 * Rock Ridge Extensions to iso9660
7 */
9 #include <linux/slab.h>
10 #include <linux/pagemap.h>
11 #include <linux/smp_lock.h>
13 #include "isofs.h"
14 #include "rock.h"
17 * These functions are designed to read the system areas of a directory record
18 * and extract relevant information. There are different functions provided
19 * depending upon what information we need at the time. One function fills
20 * out an inode structure, a second one extracts a filename, a third one
21 * returns a symbolic link name, and a fourth one returns the extent number
22 * for the file.
25 #define SIG(A,B) ((A) | ((B) << 8)) /* isonum_721() */
27 struct rock_state {
28 void *buffer;
29 unsigned char *chr;
30 int len;
31 int cont_size;
32 int cont_extent;
33 int cont_offset;
34 struct inode *inode;
38 * This is a way of ensuring that we have something in the system
39 * use fields that is compatible with Rock Ridge. Return zero on success.
42 static int check_sp(struct rock_ridge *rr, struct inode *inode)
44 if (rr->u.SP.magic[0] != 0xbe)
45 return -1;
46 if (rr->u.SP.magic[1] != 0xef)
47 return -1;
48 ISOFS_SB(inode->i_sb)->s_rock_offset = rr->u.SP.skip;
49 return 0;
52 static void setup_rock_ridge(struct iso_directory_record *de,
53 struct inode *inode, struct rock_state *rs)
55 rs->len = sizeof(struct iso_directory_record) + de->name_len[0];
56 if (rs->len & 1)
57 (rs->len)++;
58 rs->chr = (unsigned char *)de + rs->len;
59 rs->len = *((unsigned char *)de) - rs->len;
60 if (rs->len < 0)
61 rs->len = 0;
63 if (ISOFS_SB(inode->i_sb)->s_rock_offset != -1) {
64 rs->len -= ISOFS_SB(inode->i_sb)->s_rock_offset;
65 rs->chr += ISOFS_SB(inode->i_sb)->s_rock_offset;
66 if (rs->len < 0)
67 rs->len = 0;
71 static void init_rock_state(struct rock_state *rs, struct inode *inode)
73 memset(rs, 0, sizeof(*rs));
74 rs->inode = inode;
78 * Returns 0 if the caller should continue scanning, 1 if the scan must end
79 * and -ve on error.
81 static int rock_continue(struct rock_state *rs)
83 int ret = 1;
84 int blocksize = 1 << rs->inode->i_blkbits;
85 const int min_de_size = offsetof(struct rock_ridge, u);
87 kfree(rs->buffer);
88 rs->buffer = NULL;
90 if ((unsigned)rs->cont_offset > blocksize - min_de_size ||
91 (unsigned)rs->cont_size > blocksize ||
92 (unsigned)(rs->cont_offset + rs->cont_size) > blocksize) {
93 printk(KERN_NOTICE "rock: corrupted directory entry. "
94 "extent=%d, offset=%d, size=%d\n",
95 rs->cont_extent, rs->cont_offset, rs->cont_size);
96 ret = -EIO;
97 goto out;
100 if (rs->cont_extent) {
101 struct buffer_head *bh;
103 rs->buffer = kmalloc(rs->cont_size, GFP_KERNEL);
104 if (!rs->buffer) {
105 ret = -ENOMEM;
106 goto out;
108 ret = -EIO;
109 bh = sb_bread(rs->inode->i_sb, rs->cont_extent);
110 if (bh) {
111 memcpy(rs->buffer, bh->b_data + rs->cont_offset,
112 rs->cont_size);
113 put_bh(bh);
114 rs->chr = rs->buffer;
115 rs->len = rs->cont_size;
116 rs->cont_extent = 0;
117 rs->cont_size = 0;
118 rs->cont_offset = 0;
119 return 0;
121 printk("Unable to read rock-ridge attributes\n");
123 out:
124 kfree(rs->buffer);
125 rs->buffer = NULL;
126 return ret;
130 * We think there's a record of type `sig' at rs->chr. Parse the signature
131 * and make sure that there's really room for a record of that type.
133 static int rock_check_overflow(struct rock_state *rs, int sig)
135 int len;
137 switch (sig) {
138 case SIG('S', 'P'):
139 len = sizeof(struct SU_SP_s);
140 break;
141 case SIG('C', 'E'):
142 len = sizeof(struct SU_CE_s);
143 break;
144 case SIG('E', 'R'):
145 len = sizeof(struct SU_ER_s);
146 break;
147 case SIG('R', 'R'):
148 len = sizeof(struct RR_RR_s);
149 break;
150 case SIG('P', 'X'):
151 len = sizeof(struct RR_PX_s);
152 break;
153 case SIG('P', 'N'):
154 len = sizeof(struct RR_PN_s);
155 break;
156 case SIG('S', 'L'):
157 len = sizeof(struct RR_SL_s);
158 break;
159 case SIG('N', 'M'):
160 len = sizeof(struct RR_NM_s);
161 break;
162 case SIG('C', 'L'):
163 len = sizeof(struct RR_CL_s);
164 break;
165 case SIG('P', 'L'):
166 len = sizeof(struct RR_PL_s);
167 break;
168 case SIG('T', 'F'):
169 len = sizeof(struct RR_TF_s);
170 break;
171 case SIG('Z', 'F'):
172 len = sizeof(struct RR_ZF_s);
173 break;
174 default:
175 len = 0;
176 break;
178 len += offsetof(struct rock_ridge, u);
179 if (len > rs->len) {
180 printk(KERN_NOTICE "rock: directory entry would overflow "
181 "storage\n");
182 printk(KERN_NOTICE "rock: sig=0x%02x, size=%d, remaining=%d\n",
183 sig, len, rs->len);
184 return -EIO;
186 return 0;
190 * return length of name field; 0: not found, -1: to be ignored
192 int get_rock_ridge_filename(struct iso_directory_record *de,
193 char *retname, struct inode *inode)
195 struct rock_state rs;
196 struct rock_ridge *rr;
197 int sig;
198 int retnamlen = 0;
199 int truncate = 0;
200 int ret = 0;
202 if (!ISOFS_SB(inode->i_sb)->s_rock)
203 return 0;
204 *retname = 0;
206 init_rock_state(&rs, inode);
207 setup_rock_ridge(de, inode, &rs);
208 repeat:
210 while (rs.len > 2) { /* There may be one byte for padding somewhere */
211 rr = (struct rock_ridge *)rs.chr;
213 * Ignore rock ridge info if rr->len is out of range, but
214 * don't return -EIO because that would make the file
215 * invisible.
217 if (rr->len < 3)
218 goto out; /* Something got screwed up here */
219 sig = isonum_721(rs.chr);
220 if (rock_check_overflow(&rs, sig))
221 goto eio;
222 rs.chr += rr->len;
223 rs.len -= rr->len;
225 * As above, just ignore the rock ridge info if rr->len
226 * is bogus.
228 if (rs.len < 0)
229 goto out; /* Something got screwed up here */
231 switch (sig) {
232 case SIG('R', 'R'):
233 if ((rr->u.RR.flags[0] & RR_NM) == 0)
234 goto out;
235 break;
236 case SIG('S', 'P'):
237 if (check_sp(rr, inode))
238 goto out;
239 break;
240 case SIG('C', 'E'):
241 rs.cont_extent = isonum_733(rr->u.CE.extent);
242 rs.cont_offset = isonum_733(rr->u.CE.offset);
243 rs.cont_size = isonum_733(rr->u.CE.size);
244 break;
245 case SIG('N', 'M'):
246 if (truncate)
247 break;
248 if (rr->len < 5)
249 break;
251 * If the flags are 2 or 4, this indicates '.' or '..'.
252 * We don't want to do anything with this, because it
253 * screws up the code that calls us. We don't really
254 * care anyways, since we can just use the non-RR
255 * name.
257 if (rr->u.NM.flags & 6)
258 break;
260 if (rr->u.NM.flags & ~1) {
261 printk("Unsupported NM flag settings (%d)\n",
262 rr->u.NM.flags);
263 break;
265 if ((strlen(retname) + rr->len - 5) >= 254) {
266 truncate = 1;
267 break;
269 strncat(retname, rr->u.NM.name, rr->len - 5);
270 retnamlen += rr->len - 5;
271 break;
272 case SIG('R', 'E'):
273 kfree(rs.buffer);
274 return -1;
275 default:
276 break;
279 ret = rock_continue(&rs);
280 if (ret == 0)
281 goto repeat;
282 if (ret == 1)
283 return retnamlen; /* If 0, this file did not have a NM field */
284 out:
285 kfree(rs.buffer);
286 return ret;
287 eio:
288 ret = -EIO;
289 goto out;
292 #define RR_REGARD_XA 1
293 #define RR_RELOC_DE 2
295 static int
296 parse_rock_ridge_inode_internal(struct iso_directory_record *de,
297 struct inode *inode, int flags)
299 int symlink_len = 0;
300 int cnt, sig;
301 unsigned int reloc_block;
302 struct inode *reloc;
303 struct rock_ridge *rr;
304 int rootflag;
305 struct rock_state rs;
306 int ret = 0;
308 if (!ISOFS_SB(inode->i_sb)->s_rock)
309 return 0;
311 init_rock_state(&rs, inode);
312 setup_rock_ridge(de, inode, &rs);
313 if (flags & RR_REGARD_XA) {
314 rs.chr += 14;
315 rs.len -= 14;
316 if (rs.len < 0)
317 rs.len = 0;
320 repeat:
321 while (rs.len > 2) { /* There may be one byte for padding somewhere */
322 rr = (struct rock_ridge *)rs.chr;
324 * Ignore rock ridge info if rr->len is out of range, but
325 * don't return -EIO because that would make the file
326 * invisible.
328 if (rr->len < 3)
329 goto out; /* Something got screwed up here */
330 sig = isonum_721(rs.chr);
331 if (rock_check_overflow(&rs, sig))
332 goto eio;
333 rs.chr += rr->len;
334 rs.len -= rr->len;
336 * As above, just ignore the rock ridge info if rr->len
337 * is bogus.
339 if (rs.len < 0)
340 goto out; /* Something got screwed up here */
342 switch (sig) {
343 #ifndef CONFIG_ZISOFS /* No flag for SF or ZF */
344 case SIG('R', 'R'):
345 if ((rr->u.RR.flags[0] &
346 (RR_PX | RR_TF | RR_SL | RR_CL)) == 0)
347 goto out;
348 break;
349 #endif
350 case SIG('S', 'P'):
351 if (check_sp(rr, inode))
352 goto out;
353 break;
354 case SIG('C', 'E'):
355 rs.cont_extent = isonum_733(rr->u.CE.extent);
356 rs.cont_offset = isonum_733(rr->u.CE.offset);
357 rs.cont_size = isonum_733(rr->u.CE.size);
358 break;
359 case SIG('E', 'R'):
360 ISOFS_SB(inode->i_sb)->s_rock = 1;
361 printk(KERN_DEBUG "ISO 9660 Extensions: ");
363 int p;
364 for (p = 0; p < rr->u.ER.len_id; p++)
365 printk("%c", rr->u.ER.data[p]);
367 printk("\n");
368 break;
369 case SIG('P', 'X'):
370 inode->i_mode = isonum_733(rr->u.PX.mode);
371 inode->i_nlink = isonum_733(rr->u.PX.n_links);
372 inode->i_uid = isonum_733(rr->u.PX.uid);
373 inode->i_gid = isonum_733(rr->u.PX.gid);
374 break;
375 case SIG('P', 'N'):
377 int high, low;
378 high = isonum_733(rr->u.PN.dev_high);
379 low = isonum_733(rr->u.PN.dev_low);
381 * The Rock Ridge standard specifies that if
382 * sizeof(dev_t) <= 4, then the high field is
383 * unused, and the device number is completely
384 * stored in the low field. Some writers may
385 * ignore this subtlety,
386 * and as a result we test to see if the entire
387 * device number is
388 * stored in the low field, and use that.
390 if ((low & ~0xff) && high == 0) {
391 inode->i_rdev =
392 MKDEV(low >> 8, low & 0xff);
393 } else {
394 inode->i_rdev =
395 MKDEV(high, low);
398 break;
399 case SIG('T', 'F'):
401 * Some RRIP writers incorrectly place ctime in the
402 * TF_CREATE field. Try to handle this correctly for
403 * either case.
405 /* Rock ridge never appears on a High Sierra disk */
406 cnt = 0;
407 if (rr->u.TF.flags & TF_CREATE) {
408 inode->i_ctime.tv_sec =
409 iso_date(rr->u.TF.times[cnt++].time,
411 inode->i_ctime.tv_nsec = 0;
413 if (rr->u.TF.flags & TF_MODIFY) {
414 inode->i_mtime.tv_sec =
415 iso_date(rr->u.TF.times[cnt++].time,
417 inode->i_mtime.tv_nsec = 0;
419 if (rr->u.TF.flags & TF_ACCESS) {
420 inode->i_atime.tv_sec =
421 iso_date(rr->u.TF.times[cnt++].time,
423 inode->i_atime.tv_nsec = 0;
425 if (rr->u.TF.flags & TF_ATTRIBUTES) {
426 inode->i_ctime.tv_sec =
427 iso_date(rr->u.TF.times[cnt++].time,
429 inode->i_ctime.tv_nsec = 0;
431 break;
432 case SIG('S', 'L'):
434 int slen;
435 struct SL_component *slp;
436 struct SL_component *oldslp;
437 slen = rr->len - 5;
438 slp = &rr->u.SL.link;
439 inode->i_size = symlink_len;
440 while (slen > 1) {
441 rootflag = 0;
442 switch (slp->flags & ~1) {
443 case 0:
444 inode->i_size +=
445 slp->len;
446 break;
447 case 2:
448 inode->i_size += 1;
449 break;
450 case 4:
451 inode->i_size += 2;
452 break;
453 case 8:
454 rootflag = 1;
455 inode->i_size += 1;
456 break;
457 default:
458 printk("Symlink component flag "
459 "not implemented\n");
461 slen -= slp->len + 2;
462 oldslp = slp;
463 slp = (struct SL_component *)
464 (((char *)slp) + slp->len + 2);
466 if (slen < 2) {
467 if (((rr->u.SL.
468 flags & 1) != 0)
470 ((oldslp->
471 flags & 1) == 0))
472 inode->i_size +=
474 break;
478 * If this component record isn't
479 * continued, then append a '/'.
481 if (!rootflag
482 && (oldslp->flags & 1) == 0)
483 inode->i_size += 1;
486 symlink_len = inode->i_size;
487 break;
488 case SIG('R', 'E'):
489 printk(KERN_WARNING "Attempt to read inode for "
490 "relocated directory\n");
491 goto out;
492 case SIG('C', 'L'):
493 if (flags & RR_RELOC_DE) {
494 printk(KERN_ERR
495 "ISOFS: Recursive directory relocation "
496 "is not supported\n");
497 goto eio;
499 reloc_block = isonum_733(rr->u.CL.location);
500 if (reloc_block == ISOFS_I(inode)->i_iget5_block &&
501 ISOFS_I(inode)->i_iget5_offset == 0) {
502 printk(KERN_ERR
503 "ISOFS: Directory relocation points to "
504 "itself\n");
505 goto eio;
507 ISOFS_I(inode)->i_first_extent = reloc_block;
508 reloc = isofs_iget_reloc(inode->i_sb, reloc_block, 0);
509 if (IS_ERR(reloc)) {
510 ret = PTR_ERR(reloc);
511 goto out;
513 inode->i_mode = reloc->i_mode;
514 inode->i_nlink = reloc->i_nlink;
515 inode->i_uid = reloc->i_uid;
516 inode->i_gid = reloc->i_gid;
517 inode->i_rdev = reloc->i_rdev;
518 inode->i_size = reloc->i_size;
519 inode->i_blocks = reloc->i_blocks;
520 inode->i_atime = reloc->i_atime;
521 inode->i_ctime = reloc->i_ctime;
522 inode->i_mtime = reloc->i_mtime;
523 iput(reloc);
524 break;
525 #ifdef CONFIG_ZISOFS
526 case SIG('Z', 'F'): {
527 int algo;
529 if (ISOFS_SB(inode->i_sb)->s_nocompress)
530 break;
531 algo = isonum_721(rr->u.ZF.algorithm);
532 if (algo == SIG('p', 'z')) {
533 int block_shift =
534 isonum_711(&rr->u.ZF.parms[1]);
535 if (block_shift < PAGE_CACHE_SHIFT
536 || block_shift > 17) {
537 printk(KERN_WARNING "isofs: "
538 "Can't handle ZF block "
539 "size of 2^%d\n",
540 block_shift);
541 } else {
543 * Note: we don't change
544 * i_blocks here
546 ISOFS_I(inode)->i_file_format =
547 isofs_file_compressed;
549 * Parameters to compression
550 * algorithm (header size,
551 * block size)
553 ISOFS_I(inode)->i_format_parm[0] =
554 isonum_711(&rr->u.ZF.parms[0]);
555 ISOFS_I(inode)->i_format_parm[1] =
556 isonum_711(&rr->u.ZF.parms[1]);
557 inode->i_size =
558 isonum_733(rr->u.ZF.
559 real_size);
561 } else {
562 printk(KERN_WARNING
563 "isofs: Unknown ZF compression "
564 "algorithm: %c%c\n",
565 rr->u.ZF.algorithm[0],
566 rr->u.ZF.algorithm[1]);
568 break;
570 #endif
571 default:
572 break;
575 ret = rock_continue(&rs);
576 if (ret == 0)
577 goto repeat;
578 if (ret == 1)
579 ret = 0;
580 out:
581 kfree(rs.buffer);
582 return ret;
583 eio:
584 ret = -EIO;
585 goto out;
588 static char *get_symlink_chunk(char *rpnt, struct rock_ridge *rr, char *plimit)
590 int slen;
591 int rootflag;
592 struct SL_component *oldslp;
593 struct SL_component *slp;
594 slen = rr->len - 5;
595 slp = &rr->u.SL.link;
596 while (slen > 1) {
597 rootflag = 0;
598 switch (slp->flags & ~1) {
599 case 0:
600 if (slp->len > plimit - rpnt)
601 return NULL;
602 memcpy(rpnt, slp->text, slp->len);
603 rpnt += slp->len;
604 break;
605 case 2:
606 if (rpnt >= plimit)
607 return NULL;
608 *rpnt++ = '.';
609 break;
610 case 4:
611 if (2 > plimit - rpnt)
612 return NULL;
613 *rpnt++ = '.';
614 *rpnt++ = '.';
615 break;
616 case 8:
617 if (rpnt >= plimit)
618 return NULL;
619 rootflag = 1;
620 *rpnt++ = '/';
621 break;
622 default:
623 printk("Symlink component flag not implemented (%d)\n",
624 slp->flags);
626 slen -= slp->len + 2;
627 oldslp = slp;
628 slp = (struct SL_component *)((char *)slp + slp->len + 2);
630 if (slen < 2) {
632 * If there is another SL record, and this component
633 * record isn't continued, then add a slash.
635 if ((!rootflag) && (rr->u.SL.flags & 1) &&
636 !(oldslp->flags & 1)) {
637 if (rpnt >= plimit)
638 return NULL;
639 *rpnt++ = '/';
641 break;
645 * If this component record isn't continued, then append a '/'.
647 if (!rootflag && !(oldslp->flags & 1)) {
648 if (rpnt >= plimit)
649 return NULL;
650 *rpnt++ = '/';
653 return rpnt;
656 int parse_rock_ridge_inode(struct iso_directory_record *de, struct inode *inode,
657 int relocated)
659 int flags = relocated ? RR_RELOC_DE : 0;
660 int result = parse_rock_ridge_inode_internal(de, inode, flags);
663 * if rockridge flag was reset and we didn't look for attributes
664 * behind eventual XA attributes, have a look there
666 if ((ISOFS_SB(inode->i_sb)->s_rock_offset == -1)
667 && (ISOFS_SB(inode->i_sb)->s_rock == 2)) {
668 result = parse_rock_ridge_inode_internal(de, inode,
669 flags | RR_REGARD_XA);
671 return result;
675 * readpage() for symlinks: reads symlink contents into the page and either
676 * makes it uptodate and returns 0 or returns error (-EIO)
678 static int rock_ridge_symlink_readpage(struct file *file, struct page *page)
680 struct inode *inode = page->mapping->host;
681 struct iso_inode_info *ei = ISOFS_I(inode);
682 char *link = kmap(page);
683 unsigned long bufsize = ISOFS_BUFFER_SIZE(inode);
684 struct buffer_head *bh;
685 char *rpnt = link;
686 unsigned char *pnt;
687 struct iso_directory_record *raw_de;
688 unsigned long block, offset;
689 int sig;
690 struct rock_ridge *rr;
691 struct rock_state rs;
692 int ret;
694 if (!ISOFS_SB(inode->i_sb)->s_rock)
695 goto error;
697 init_rock_state(&rs, inode);
698 block = ei->i_iget5_block;
699 lock_kernel();
700 bh = sb_bread(inode->i_sb, block);
701 if (!bh)
702 goto out_noread;
704 offset = ei->i_iget5_offset;
705 pnt = (unsigned char *)bh->b_data + offset;
707 raw_de = (struct iso_directory_record *)pnt;
710 * If we go past the end of the buffer, there is some sort of error.
712 if (offset + *pnt > bufsize)
713 goto out_bad_span;
716 * Now test for possible Rock Ridge extensions which will override
717 * some of these numbers in the inode structure.
720 setup_rock_ridge(raw_de, inode, &rs);
722 repeat:
723 while (rs.len > 2) { /* There may be one byte for padding somewhere */
724 rr = (struct rock_ridge *)rs.chr;
725 if (rr->len < 3)
726 goto out; /* Something got screwed up here */
727 sig = isonum_721(rs.chr);
728 if (rock_check_overflow(&rs, sig))
729 goto out;
730 rs.chr += rr->len;
731 rs.len -= rr->len;
732 if (rs.len < 0)
733 goto out; /* corrupted isofs */
735 switch (sig) {
736 case SIG('R', 'R'):
737 if ((rr->u.RR.flags[0] & RR_SL) == 0)
738 goto out;
739 break;
740 case SIG('S', 'P'):
741 if (check_sp(rr, inode))
742 goto out;
743 break;
744 case SIG('S', 'L'):
745 rpnt = get_symlink_chunk(rpnt, rr,
746 link + (PAGE_SIZE - 1));
747 if (rpnt == NULL)
748 goto out;
749 break;
750 case SIG('C', 'E'):
751 /* This tells is if there is a continuation record */
752 rs.cont_extent = isonum_733(rr->u.CE.extent);
753 rs.cont_offset = isonum_733(rr->u.CE.offset);
754 rs.cont_size = isonum_733(rr->u.CE.size);
755 default:
756 break;
759 ret = rock_continue(&rs);
760 if (ret == 0)
761 goto repeat;
762 if (ret < 0)
763 goto fail;
765 if (rpnt == link)
766 goto fail;
767 brelse(bh);
768 *rpnt = '\0';
769 unlock_kernel();
770 SetPageUptodate(page);
771 kunmap(page);
772 unlock_page(page);
773 return 0;
775 /* error exit from macro */
776 out:
777 kfree(rs.buffer);
778 goto fail;
779 out_noread:
780 printk("unable to read i-node block");
781 goto fail;
782 out_bad_span:
783 printk("symlink spans iso9660 blocks\n");
784 fail:
785 brelse(bh);
786 unlock_kernel();
787 error:
788 SetPageError(page);
789 kunmap(page);
790 unlock_page(page);
791 return -EIO;
794 const struct address_space_operations isofs_symlink_aops = {
795 .readpage = rock_ridge_symlink_readpage