kernfs_node->parent and ->name are currently marked as "published"
indicating that kernfs users may access them directly; however, those
fields may get updated by kernfs_rename[_ns]() and unrestricted access
may lead to erroneous values or oops.
Protect ->parent and ->name updates with a irq-safe spinlock
kernfs_rename_lock and implement the following accessors for these
fields.
* kernfs_name()		- format the node's name into the specified buffer
* kernfs_path()		- format the node's path into the specified buffer
* pr_cont_kernfs_name()	- pr_cont a node's name (doesn't need buffer)
* pr_cont_kernfs_path()	- pr_cont a node's path (doesn't need buffer)
* kernfs_get_parent()	- pin and return a node's parent
All can be called under any context.  The recursive sysfs_pathname()
in fs/sysfs/dir.c is replaced with kernfs_path() and
sysfs_rename_dir_ns() is updated to use kernfs_get_parent() instead of
dereferencing parent directly.
v2: Dummy definition of kernfs_path() for !CONFIG_KERNFS was missing
    static inline making it cause a lot of build warnings.  Add it.
Signed-off-by: Tejun Heo <tj@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
		
	
			
		
			
				
	
	
		
			124 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			124 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * fs/sysfs/dir.c - sysfs core and dir operation implementation
 | |
|  *
 | |
|  * Copyright (c) 2001-3 Patrick Mochel
 | |
|  * Copyright (c) 2007 SUSE Linux Products GmbH
 | |
|  * Copyright (c) 2007 Tejun Heo <teheo@suse.de>
 | |
|  *
 | |
|  * This file is released under the GPLv2.
 | |
|  *
 | |
|  * Please see Documentation/filesystems/sysfs.txt for more information.
 | |
|  */
 | |
| 
 | |
| #undef DEBUG
 | |
| 
 | |
| #include <linux/fs.h>
 | |
| #include <linux/kobject.h>
 | |
| #include <linux/slab.h>
 | |
| #include "sysfs.h"
 | |
| 
 | |
| DEFINE_SPINLOCK(sysfs_symlink_target_lock);
 | |
| 
 | |
| void sysfs_warn_dup(struct kernfs_node *parent, const char *name)
 | |
| {
 | |
| 	char *buf, *path = NULL;
 | |
| 
 | |
| 	buf = kzalloc(PATH_MAX, GFP_KERNEL);
 | |
| 	if (buf)
 | |
| 		path = kernfs_path(parent, buf, PATH_MAX);
 | |
| 
 | |
| 	WARN(1, KERN_WARNING "sysfs: cannot create duplicate filename '%s/%s'\n",
 | |
| 	     path, name);
 | |
| 
 | |
| 	kfree(buf);
 | |
| }
 | |
| 
 | |
| /**
 | |
|  * sysfs_create_dir_ns - create a directory for an object with a namespace tag
 | |
|  * @kobj: object we're creating directory for
 | |
|  * @ns: the namespace tag to use
 | |
|  */
 | |
| int sysfs_create_dir_ns(struct kobject *kobj, const void *ns)
 | |
| {
 | |
| 	struct kernfs_node *parent, *kn;
 | |
| 
 | |
| 	BUG_ON(!kobj);
 | |
| 
 | |
| 	if (kobj->parent)
 | |
| 		parent = kobj->parent->sd;
 | |
| 	else
 | |
| 		parent = sysfs_root_kn;
 | |
| 
 | |
| 	if (!parent)
 | |
| 		return -ENOENT;
 | |
| 
 | |
| 	kn = kernfs_create_dir_ns(parent, kobject_name(kobj),
 | |
| 				  S_IRWXU | S_IRUGO | S_IXUGO, kobj, ns);
 | |
| 	if (IS_ERR(kn)) {
 | |
| 		if (PTR_ERR(kn) == -EEXIST)
 | |
| 			sysfs_warn_dup(parent, kobject_name(kobj));
 | |
| 		return PTR_ERR(kn);
 | |
| 	}
 | |
| 
 | |
| 	kobj->sd = kn;
 | |
| 	return 0;
 | |
| }
 | |
| 
 | |
| /**
 | |
|  *	sysfs_remove_dir - remove an object's directory.
 | |
|  *	@kobj:	object.
 | |
|  *
 | |
|  *	The only thing special about this is that we remove any files in
 | |
|  *	the directory before we remove the directory, and we've inlined
 | |
|  *	what used to be sysfs_rmdir() below, instead of calling separately.
 | |
|  */
 | |
| void sysfs_remove_dir(struct kobject *kobj)
 | |
| {
 | |
| 	struct kernfs_node *kn = kobj->sd;
 | |
| 
 | |
| 	/*
 | |
| 	 * In general, kboject owner is responsible for ensuring removal
 | |
| 	 * doesn't race with other operations and sysfs doesn't provide any
 | |
| 	 * protection; however, when @kobj is used as a symlink target, the
 | |
| 	 * symlinking entity usually doesn't own @kobj and thus has no
 | |
| 	 * control over removal.  @kobj->sd may be removed anytime
 | |
| 	 * and symlink code may end up dereferencing an already freed node.
 | |
| 	 *
 | |
| 	 * sysfs_symlink_target_lock synchronizes @kobj->sd
 | |
| 	 * disassociation against symlink operations so that symlink code
 | |
| 	 * can safely dereference @kobj->sd.
 | |
| 	 */
 | |
| 	spin_lock(&sysfs_symlink_target_lock);
 | |
| 	kobj->sd = NULL;
 | |
| 	spin_unlock(&sysfs_symlink_target_lock);
 | |
| 
 | |
| 	if (kn) {
 | |
| 		WARN_ON_ONCE(kernfs_type(kn) != KERNFS_DIR);
 | |
| 		kernfs_remove(kn);
 | |
| 	}
 | |
| }
 | |
| 
 | |
| int sysfs_rename_dir_ns(struct kobject *kobj, const char *new_name,
 | |
| 			const void *new_ns)
 | |
| {
 | |
| 	struct kernfs_node *parent;
 | |
| 	int ret;
 | |
| 
 | |
| 	parent = kernfs_get_parent(kobj->sd);
 | |
| 	ret = kernfs_rename_ns(kobj->sd, parent, new_name, new_ns);
 | |
| 	kernfs_put(parent);
 | |
| 	return ret;
 | |
| }
 | |
| 
 | |
| int sysfs_move_dir_ns(struct kobject *kobj, struct kobject *new_parent_kobj,
 | |
| 		      const void *new_ns)
 | |
| {
 | |
| 	struct kernfs_node *kn = kobj->sd;
 | |
| 	struct kernfs_node *new_parent;
 | |
| 
 | |
| 	new_parent = new_parent_kobj && new_parent_kobj->sd ?
 | |
| 		new_parent_kobj->sd : sysfs_root_kn;
 | |
| 
 | |
| 	return kernfs_rename_ns(kn, new_parent, kn->name, new_ns);
 | |
| }
 |