super: fix calculation of shrinkable objects for small numbers
[firefly-linux-kernel-4.4.55.git] / fs / quota / dquot.c
1 /*
2  * Implementation of the diskquota system for the LINUX operating system. QUOTA
3  * is implemented using the BSD system call interface as the means of
4  * communication with the user level. This file contains the generic routines
5  * called by the different filesystems on allocation of an inode or block.
6  * These routines take care of the administration needed to have a consistent
7  * diskquota tracking system. The ideas of both user and group quotas are based
8  * on the Melbourne quota system as used on BSD derived systems. The internal
9  * implementation is based on one of the several variants of the LINUX
10  * inode-subsystem with added complexity of the diskquota system.
11  * 
12  * Author:      Marco van Wieringen <mvw@planets.elm.net>
13  *
14  * Fixes:   Dmitry Gorodchanin <pgmdsg@ibi.com>, 11 Feb 96
15  *
16  *              Revised list management to avoid races
17  *              -- Bill Hawes, <whawes@star.net>, 9/98
18  *
19  *              Fixed races in dquot_transfer(), dqget() and dquot_alloc_...().
20  *              As the consequence the locking was moved from dquot_decr_...(),
21  *              dquot_incr_...() to calling functions.
22  *              invalidate_dquots() now writes modified dquots.
23  *              Serialized quota_off() and quota_on() for mount point.
24  *              Fixed a few bugs in grow_dquots().
25  *              Fixed deadlock in write_dquot() - we no longer account quotas on
26  *              quota files
27  *              remove_dquot_ref() moved to inode.c - it now traverses through inodes
28  *              add_dquot_ref() restarts after blocking
29  *              Added check for bogus uid and fixed check for group in quotactl.
30  *              Jan Kara, <jack@suse.cz>, sponsored by SuSE CR, 10-11/99
31  *
32  *              Used struct list_head instead of own list struct
33  *              Invalidation of referenced dquots is no longer possible
34  *              Improved free_dquots list management
35  *              Quota and i_blocks are now updated in one place to avoid races
36  *              Warnings are now delayed so we won't block in critical section
37  *              Write updated not to require dquot lock
38  *              Jan Kara, <jack@suse.cz>, 9/2000
39  *
40  *              Added dynamic quota structure allocation
41  *              Jan Kara <jack@suse.cz> 12/2000
42  *
43  *              Rewritten quota interface. Implemented new quota format and
44  *              formats registering.
45  *              Jan Kara, <jack@suse.cz>, 2001,2002
46  *
47  *              New SMP locking.
48  *              Jan Kara, <jack@suse.cz>, 10/2002
49  *
50  *              Added journalled quota support, fix lock inversion problems
51  *              Jan Kara, <jack@suse.cz>, 2003,2004
52  *
53  * (C) Copyright 1994 - 1997 Marco van Wieringen 
54  */
55
56 #include <linux/errno.h>
57 #include <linux/kernel.h>
58 #include <linux/fs.h>
59 #include <linux/mount.h>
60 #include <linux/mm.h>
61 #include <linux/time.h>
62 #include <linux/types.h>
63 #include <linux/string.h>
64 #include <linux/fcntl.h>
65 #include <linux/stat.h>
66 #include <linux/tty.h>
67 #include <linux/file.h>
68 #include <linux/slab.h>
69 #include <linux/sysctl.h>
70 #include <linux/init.h>
71 #include <linux/module.h>
72 #include <linux/proc_fs.h>
73 #include <linux/security.h>
74 #include <linux/sched.h>
75 #include <linux/kmod.h>
76 #include <linux/namei.h>
77 #include <linux/capability.h>
78 #include <linux/quotaops.h>
79 #include "../internal.h" /* ugh */
80
81 #include <linux/uaccess.h>
82
83 /*
84  * There are three quota SMP locks. dq_list_lock protects all lists with quotas
85  * and quota formats.
86  * dq_data_lock protects data from dq_dqb and also mem_dqinfo structures and
87  * also guards consistency of dquot->dq_dqb with inode->i_blocks, i_bytes.
88  * i_blocks and i_bytes updates itself are guarded by i_lock acquired directly
89  * in inode_add_bytes() and inode_sub_bytes(). dq_state_lock protects
90  * modifications of quota state (on quotaon and quotaoff) and readers who care
91  * about latest values take it as well.
92  *
93  * The spinlock ordering is hence: dq_data_lock > dq_list_lock > i_lock,
94  *   dq_list_lock > dq_state_lock
95  *
96  * Note that some things (eg. sb pointer, type, id) doesn't change during
97  * the life of the dquot structure and so needn't to be protected by a lock
98  *
99  * Any operation working on dquots via inode pointers must hold dqptr_sem.  If
100  * operation is just reading pointers from inode (or not using them at all) the
101  * read lock is enough. If pointers are altered function must hold write lock.
102  * Special care needs to be taken about S_NOQUOTA inode flag (marking that
103  * inode is a quota file). Functions adding pointers from inode to dquots have
104  * to check this flag under dqptr_sem and then (if S_NOQUOTA is not set) they
105  * have to do all pointer modifications before dropping dqptr_sem. This makes
106  * sure they cannot race with quotaon which first sets S_NOQUOTA flag and
107  * then drops all pointers to dquots from an inode.
108  *
109  * Each dquot has its dq_lock mutex. Locked dquots might not be referenced
110  * from inodes (dquot_alloc_space() and such don't check the dq_lock).
111  * Currently dquot is locked only when it is being read to memory (or space for
112  * it is being allocated) on the first dqget() and when it is being released on
113  * the last dqput(). The allocation and release oparations are serialized by
114  * the dq_lock and by checking the use count in dquot_release().  Write
115  * operations on dquots don't hold dq_lock as they copy data under dq_data_lock
116  * spinlock to internal buffers before writing.
117  *
118  * Lock ordering (including related VFS locks) is the following:
119  *   dqonoff_mutex > i_mutex > journal_lock > dqptr_sem > dquot->dq_lock >
120  *   dqio_mutex
121  * dqonoff_mutex > i_mutex comes from dquot_quota_sync, dquot_enable, etc.
122  * The lock ordering of dqptr_sem imposed by quota code is only dqonoff_sem >
123  * dqptr_sem. But filesystem has to count with the fact that functions such as
124  * dquot_alloc_space() acquire dqptr_sem and they usually have to be called
125  * from inside a transaction to keep filesystem consistency after a crash. Also
126  * filesystems usually want to do some IO on dquot from ->mark_dirty which is
127  * called with dqptr_sem held.
128  */
129
130 static __cacheline_aligned_in_smp DEFINE_SPINLOCK(dq_list_lock);
131 static __cacheline_aligned_in_smp DEFINE_SPINLOCK(dq_state_lock);
132 __cacheline_aligned_in_smp DEFINE_SPINLOCK(dq_data_lock);
133 EXPORT_SYMBOL(dq_data_lock);
134
135 void __quota_error(struct super_block *sb, const char *func,
136                    const char *fmt, ...)
137 {
138         if (printk_ratelimit()) {
139                 va_list args;
140                 struct va_format vaf;
141
142                 va_start(args, fmt);
143
144                 vaf.fmt = fmt;
145                 vaf.va = &args;
146
147                 printk(KERN_ERR "Quota error (device %s): %s: %pV\n",
148                        sb->s_id, func, &vaf);
149
150                 va_end(args);
151         }
152 }
153 EXPORT_SYMBOL(__quota_error);
154
155 #if defined(CONFIG_QUOTA_DEBUG) || defined(CONFIG_PRINT_QUOTA_WARNING)
156 static char *quotatypes[] = INITQFNAMES;
157 #endif
158 static struct quota_format_type *quota_formats; /* List of registered formats */
159 static struct quota_module_name module_names[] = INIT_QUOTA_MODULE_NAMES;
160
161 /* SLAB cache for dquot structures */
162 static struct kmem_cache *dquot_cachep;
163
164 int register_quota_format(struct quota_format_type *fmt)
165 {
166         spin_lock(&dq_list_lock);
167         fmt->qf_next = quota_formats;
168         quota_formats = fmt;
169         spin_unlock(&dq_list_lock);
170         return 0;
171 }
172 EXPORT_SYMBOL(register_quota_format);
173
174 void unregister_quota_format(struct quota_format_type *fmt)
175 {
176         struct quota_format_type **actqf;
177
178         spin_lock(&dq_list_lock);
179         for (actqf = &quota_formats; *actqf && *actqf != fmt;
180              actqf = &(*actqf)->qf_next)
181                 ;
182         if (*actqf)
183                 *actqf = (*actqf)->qf_next;
184         spin_unlock(&dq_list_lock);
185 }
186 EXPORT_SYMBOL(unregister_quota_format);
187
188 static struct quota_format_type *find_quota_format(int id)
189 {
190         struct quota_format_type *actqf;
191
192         spin_lock(&dq_list_lock);
193         for (actqf = quota_formats; actqf && actqf->qf_fmt_id != id;
194              actqf = actqf->qf_next)
195                 ;
196         if (!actqf || !try_module_get(actqf->qf_owner)) {
197                 int qm;
198
199                 spin_unlock(&dq_list_lock);
200                 
201                 for (qm = 0; module_names[qm].qm_fmt_id &&
202                              module_names[qm].qm_fmt_id != id; qm++)
203                         ;
204                 if (!module_names[qm].qm_fmt_id ||
205                     request_module(module_names[qm].qm_mod_name))
206                         return NULL;
207
208                 spin_lock(&dq_list_lock);
209                 for (actqf = quota_formats; actqf && actqf->qf_fmt_id != id;
210                      actqf = actqf->qf_next)
211                         ;
212                 if (actqf && !try_module_get(actqf->qf_owner))
213                         actqf = NULL;
214         }
215         spin_unlock(&dq_list_lock);
216         return actqf;
217 }
218
219 static void put_quota_format(struct quota_format_type *fmt)
220 {
221         module_put(fmt->qf_owner);
222 }
223
224 /*
225  * Dquot List Management:
226  * The quota code uses three lists for dquot management: the inuse_list,
227  * free_dquots, and dquot_hash[] array. A single dquot structure may be
228  * on all three lists, depending on its current state.
229  *
230  * All dquots are placed to the end of inuse_list when first created, and this
231  * list is used for invalidate operation, which must look at every dquot.
232  *
233  * Unused dquots (dq_count == 0) are added to the free_dquots list when freed,
234  * and this list is searched whenever we need an available dquot.  Dquots are
235  * removed from the list as soon as they are used again, and
236  * dqstats.free_dquots gives the number of dquots on the list. When
237  * dquot is invalidated it's completely released from memory.
238  *
239  * Dquots with a specific identity (device, type and id) are placed on
240  * one of the dquot_hash[] hash chains. The provides an efficient search
241  * mechanism to locate a specific dquot.
242  */
243
244 static LIST_HEAD(inuse_list);
245 static LIST_HEAD(free_dquots);
246 static unsigned int dq_hash_bits, dq_hash_mask;
247 static struct hlist_head *dquot_hash;
248
249 struct dqstats dqstats;
250 EXPORT_SYMBOL(dqstats);
251
252 static qsize_t inode_get_rsv_space(struct inode *inode);
253 static void __dquot_initialize(struct inode *inode, int type);
254
255 static inline unsigned int
256 hashfn(const struct super_block *sb, struct kqid qid)
257 {
258         unsigned int id = from_kqid(&init_user_ns, qid);
259         int type = qid.type;
260         unsigned long tmp;
261
262         tmp = (((unsigned long)sb>>L1_CACHE_SHIFT) ^ id) * (MAXQUOTAS - type);
263         return (tmp + (tmp >> dq_hash_bits)) & dq_hash_mask;
264 }
265
266 /*
267  * Following list functions expect dq_list_lock to be held
268  */
269 static inline void insert_dquot_hash(struct dquot *dquot)
270 {
271         struct hlist_head *head;
272         head = dquot_hash + hashfn(dquot->dq_sb, dquot->dq_id);
273         hlist_add_head(&dquot->dq_hash, head);
274 }
275
276 static inline void remove_dquot_hash(struct dquot *dquot)
277 {
278         hlist_del_init(&dquot->dq_hash);
279 }
280
281 static struct dquot *find_dquot(unsigned int hashent, struct super_block *sb,
282                                 struct kqid qid)
283 {
284         struct hlist_node *node;
285         struct dquot *dquot;
286
287         hlist_for_each (node, dquot_hash+hashent) {
288                 dquot = hlist_entry(node, struct dquot, dq_hash);
289                 if (dquot->dq_sb == sb && qid_eq(dquot->dq_id, qid))
290                         return dquot;
291         }
292         return NULL;
293 }
294
295 /* Add a dquot to the tail of the free list */
296 static inline void put_dquot_last(struct dquot *dquot)
297 {
298         list_add_tail(&dquot->dq_free, &free_dquots);
299         dqstats_inc(DQST_FREE_DQUOTS);
300 }
301
302 static inline void remove_free_dquot(struct dquot *dquot)
303 {
304         if (list_empty(&dquot->dq_free))
305                 return;
306         list_del_init(&dquot->dq_free);
307         dqstats_dec(DQST_FREE_DQUOTS);
308 }
309
310 static inline void put_inuse(struct dquot *dquot)
311 {
312         /* We add to the back of inuse list so we don't have to restart
313          * when traversing this list and we block */
314         list_add_tail(&dquot->dq_inuse, &inuse_list);
315         dqstats_inc(DQST_ALLOC_DQUOTS);
316 }
317
318 static inline void remove_inuse(struct dquot *dquot)
319 {
320         dqstats_dec(DQST_ALLOC_DQUOTS);
321         list_del(&dquot->dq_inuse);
322 }
323 /*
324  * End of list functions needing dq_list_lock
325  */
326
327 static void wait_on_dquot(struct dquot *dquot)
328 {
329         mutex_lock(&dquot->dq_lock);
330         mutex_unlock(&dquot->dq_lock);
331 }
332
333 static inline int dquot_dirty(struct dquot *dquot)
334 {
335         return test_bit(DQ_MOD_B, &dquot->dq_flags);
336 }
337
338 static inline int mark_dquot_dirty(struct dquot *dquot)
339 {
340         return dquot->dq_sb->dq_op->mark_dirty(dquot);
341 }
342
343 /* Mark dquot dirty in atomic manner, and return it's old dirty flag state */
344 int dquot_mark_dquot_dirty(struct dquot *dquot)
345 {
346         int ret = 1;
347
348         /* If quota is dirty already, we don't have to acquire dq_list_lock */
349         if (test_bit(DQ_MOD_B, &dquot->dq_flags))
350                 return 1;
351
352         spin_lock(&dq_list_lock);
353         if (!test_and_set_bit(DQ_MOD_B, &dquot->dq_flags)) {
354                 list_add(&dquot->dq_dirty, &sb_dqopt(dquot->dq_sb)->
355                                 info[dquot->dq_id.type].dqi_dirty_list);
356                 ret = 0;
357         }
358         spin_unlock(&dq_list_lock);
359         return ret;
360 }
361 EXPORT_SYMBOL(dquot_mark_dquot_dirty);
362
363 /* Dirtify all the dquots - this can block when journalling */
364 static inline int mark_all_dquot_dirty(struct dquot * const *dquot)
365 {
366         int ret, err, cnt;
367
368         ret = err = 0;
369         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
370                 if (dquot[cnt])
371                         /* Even in case of error we have to continue */
372                         ret = mark_dquot_dirty(dquot[cnt]);
373                 if (!err)
374                         err = ret;
375         }
376         return err;
377 }
378
379 static inline void dqput_all(struct dquot **dquot)
380 {
381         unsigned int cnt;
382
383         for (cnt = 0; cnt < MAXQUOTAS; cnt++)
384                 dqput(dquot[cnt]);
385 }
386
387 /* This function needs dq_list_lock */
388 static inline int clear_dquot_dirty(struct dquot *dquot)
389 {
390         if (!test_and_clear_bit(DQ_MOD_B, &dquot->dq_flags))
391                 return 0;
392         list_del_init(&dquot->dq_dirty);
393         return 1;
394 }
395
396 void mark_info_dirty(struct super_block *sb, int type)
397 {
398         set_bit(DQF_INFO_DIRTY_B, &sb_dqopt(sb)->info[type].dqi_flags);
399 }
400 EXPORT_SYMBOL(mark_info_dirty);
401
402 /*
403  *      Read dquot from disk and alloc space for it
404  */
405
406 int dquot_acquire(struct dquot *dquot)
407 {
408         int ret = 0, ret2 = 0;
409         struct quota_info *dqopt = sb_dqopt(dquot->dq_sb);
410
411         mutex_lock(&dquot->dq_lock);
412         mutex_lock(&dqopt->dqio_mutex);
413         if (!test_bit(DQ_READ_B, &dquot->dq_flags))
414                 ret = dqopt->ops[dquot->dq_id.type]->read_dqblk(dquot);
415         if (ret < 0)
416                 goto out_iolock;
417         set_bit(DQ_READ_B, &dquot->dq_flags);
418         /* Instantiate dquot if needed */
419         if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags) && !dquot->dq_off) {
420                 ret = dqopt->ops[dquot->dq_id.type]->commit_dqblk(dquot);
421                 /* Write the info if needed */
422                 if (info_dirty(&dqopt->info[dquot->dq_id.type])) {
423                         ret2 = dqopt->ops[dquot->dq_id.type]->write_file_info(
424                                         dquot->dq_sb, dquot->dq_id.type);
425                 }
426                 if (ret < 0)
427                         goto out_iolock;
428                 if (ret2 < 0) {
429                         ret = ret2;
430                         goto out_iolock;
431                 }
432         }
433         set_bit(DQ_ACTIVE_B, &dquot->dq_flags);
434 out_iolock:
435         mutex_unlock(&dqopt->dqio_mutex);
436         mutex_unlock(&dquot->dq_lock);
437         return ret;
438 }
439 EXPORT_SYMBOL(dquot_acquire);
440
441 /*
442  *      Write dquot to disk
443  */
444 int dquot_commit(struct dquot *dquot)
445 {
446         int ret = 0;
447         struct quota_info *dqopt = sb_dqopt(dquot->dq_sb);
448
449         mutex_lock(&dqopt->dqio_mutex);
450         spin_lock(&dq_list_lock);
451         if (!clear_dquot_dirty(dquot)) {
452                 spin_unlock(&dq_list_lock);
453                 goto out_sem;
454         }
455         spin_unlock(&dq_list_lock);
456         /* Inactive dquot can be only if there was error during read/init
457          * => we have better not writing it */
458         if (test_bit(DQ_ACTIVE_B, &dquot->dq_flags))
459                 ret = dqopt->ops[dquot->dq_id.type]->commit_dqblk(dquot);
460         else
461                 ret = -EIO;
462 out_sem:
463         mutex_unlock(&dqopt->dqio_mutex);
464         return ret;
465 }
466 EXPORT_SYMBOL(dquot_commit);
467
468 /*
469  *      Release dquot
470  */
471 int dquot_release(struct dquot *dquot)
472 {
473         int ret = 0, ret2 = 0;
474         struct quota_info *dqopt = sb_dqopt(dquot->dq_sb);
475
476         mutex_lock(&dquot->dq_lock);
477         /* Check whether we are not racing with some other dqget() */
478         if (atomic_read(&dquot->dq_count) > 1)
479                 goto out_dqlock;
480         mutex_lock(&dqopt->dqio_mutex);
481         if (dqopt->ops[dquot->dq_id.type]->release_dqblk) {
482                 ret = dqopt->ops[dquot->dq_id.type]->release_dqblk(dquot);
483                 /* Write the info */
484                 if (info_dirty(&dqopt->info[dquot->dq_id.type])) {
485                         ret2 = dqopt->ops[dquot->dq_id.type]->write_file_info(
486                                                 dquot->dq_sb, dquot->dq_id.type);
487                 }
488                 if (ret >= 0)
489                         ret = ret2;
490         }
491         clear_bit(DQ_ACTIVE_B, &dquot->dq_flags);
492         mutex_unlock(&dqopt->dqio_mutex);
493 out_dqlock:
494         mutex_unlock(&dquot->dq_lock);
495         return ret;
496 }
497 EXPORT_SYMBOL(dquot_release);
498
499 void dquot_destroy(struct dquot *dquot)
500 {
501         kmem_cache_free(dquot_cachep, dquot);
502 }
503 EXPORT_SYMBOL(dquot_destroy);
504
505 static inline void do_destroy_dquot(struct dquot *dquot)
506 {
507         dquot->dq_sb->dq_op->destroy_dquot(dquot);
508 }
509
510 /* Invalidate all dquots on the list. Note that this function is called after
511  * quota is disabled and pointers from inodes removed so there cannot be new
512  * quota users. There can still be some users of quotas due to inodes being
513  * just deleted or pruned by prune_icache() (those are not attached to any
514  * list) or parallel quotactl call. We have to wait for such users.
515  */
516 static void invalidate_dquots(struct super_block *sb, int type)
517 {
518         struct dquot *dquot, *tmp;
519
520 restart:
521         spin_lock(&dq_list_lock);
522         list_for_each_entry_safe(dquot, tmp, &inuse_list, dq_inuse) {
523                 if (dquot->dq_sb != sb)
524                         continue;
525                 if (dquot->dq_id.type != type)
526                         continue;
527                 /* Wait for dquot users */
528                 if (atomic_read(&dquot->dq_count)) {
529                         DEFINE_WAIT(wait);
530
531                         atomic_inc(&dquot->dq_count);
532                         prepare_to_wait(&dquot->dq_wait_unused, &wait,
533                                         TASK_UNINTERRUPTIBLE);
534                         spin_unlock(&dq_list_lock);
535                         /* Once dqput() wakes us up, we know it's time to free
536                          * the dquot.
537                          * IMPORTANT: we rely on the fact that there is always
538                          * at most one process waiting for dquot to free.
539                          * Otherwise dq_count would be > 1 and we would never
540                          * wake up.
541                          */
542                         if (atomic_read(&dquot->dq_count) > 1)
543                                 schedule();
544                         finish_wait(&dquot->dq_wait_unused, &wait);
545                         dqput(dquot);
546                         /* At this moment dquot() need not exist (it could be
547                          * reclaimed by prune_dqcache(). Hence we must
548                          * restart. */
549                         goto restart;
550                 }
551                 /*
552                  * Quota now has no users and it has been written on last
553                  * dqput()
554                  */
555                 remove_dquot_hash(dquot);
556                 remove_free_dquot(dquot);
557                 remove_inuse(dquot);
558                 do_destroy_dquot(dquot);
559         }
560         spin_unlock(&dq_list_lock);
561 }
562
563 /* Call callback for every active dquot on given filesystem */
564 int dquot_scan_active(struct super_block *sb,
565                       int (*fn)(struct dquot *dquot, unsigned long priv),
566                       unsigned long priv)
567 {
568         struct dquot *dquot, *old_dquot = NULL;
569         int ret = 0;
570
571         mutex_lock(&sb_dqopt(sb)->dqonoff_mutex);
572         spin_lock(&dq_list_lock);
573         list_for_each_entry(dquot, &inuse_list, dq_inuse) {
574                 if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags))
575                         continue;
576                 if (dquot->dq_sb != sb)
577                         continue;
578                 /* Now we have active dquot so we can just increase use count */
579                 atomic_inc(&dquot->dq_count);
580                 spin_unlock(&dq_list_lock);
581                 dqstats_inc(DQST_LOOKUPS);
582                 dqput(old_dquot);
583                 old_dquot = dquot;
584                 ret = fn(dquot, priv);
585                 if (ret < 0)
586                         goto out;
587                 spin_lock(&dq_list_lock);
588                 /* We are safe to continue now because our dquot could not
589                  * be moved out of the inuse list while we hold the reference */
590         }
591         spin_unlock(&dq_list_lock);
592 out:
593         dqput(old_dquot);
594         mutex_unlock(&sb_dqopt(sb)->dqonoff_mutex);
595         return ret;
596 }
597 EXPORT_SYMBOL(dquot_scan_active);
598
599 /* Write all dquot structures to quota files */
600 int dquot_writeback_dquots(struct super_block *sb, int type)
601 {
602         struct list_head *dirty;
603         struct dquot *dquot;
604         struct quota_info *dqopt = sb_dqopt(sb);
605         int cnt;
606         int err, ret = 0;
607
608         mutex_lock(&dqopt->dqonoff_mutex);
609         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
610                 if (type != -1 && cnt != type)
611                         continue;
612                 if (!sb_has_quota_active(sb, cnt))
613                         continue;
614                 spin_lock(&dq_list_lock);
615                 dirty = &dqopt->info[cnt].dqi_dirty_list;
616                 while (!list_empty(dirty)) {
617                         dquot = list_first_entry(dirty, struct dquot,
618                                                  dq_dirty);
619                         /* Dirty and inactive can be only bad dquot... */
620                         if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags)) {
621                                 clear_dquot_dirty(dquot);
622                                 continue;
623                         }
624                         /* Now we have active dquot from which someone is
625                          * holding reference so we can safely just increase
626                          * use count */
627                         atomic_inc(&dquot->dq_count);
628                         spin_unlock(&dq_list_lock);
629                         dqstats_inc(DQST_LOOKUPS);
630                         err = sb->dq_op->write_dquot(dquot);
631                         if (!ret && err)
632                                 err = ret;
633                         dqput(dquot);
634                         spin_lock(&dq_list_lock);
635                 }
636                 spin_unlock(&dq_list_lock);
637         }
638
639         for (cnt = 0; cnt < MAXQUOTAS; cnt++)
640                 if ((cnt == type || type == -1) && sb_has_quota_active(sb, cnt)
641                     && info_dirty(&dqopt->info[cnt]))
642                         sb->dq_op->write_info(sb, cnt);
643         dqstats_inc(DQST_SYNCS);
644         mutex_unlock(&dqopt->dqonoff_mutex);
645
646         return ret;
647 }
648 EXPORT_SYMBOL(dquot_writeback_dquots);
649
650 /* Write all dquot structures to disk and make them visible from userspace */
651 int dquot_quota_sync(struct super_block *sb, int type)
652 {
653         struct quota_info *dqopt = sb_dqopt(sb);
654         int cnt;
655         int ret;
656
657         ret = dquot_writeback_dquots(sb, type);
658         if (ret)
659                 return ret;
660         if (dqopt->flags & DQUOT_QUOTA_SYS_FILE)
661                 return 0;
662
663         /* This is not very clever (and fast) but currently I don't know about
664          * any other simple way of getting quota data to disk and we must get
665          * them there for userspace to be visible... */
666         if (sb->s_op->sync_fs)
667                 sb->s_op->sync_fs(sb, 1);
668         sync_blockdev(sb->s_bdev);
669
670         /*
671          * Now when everything is written we can discard the pagecache so
672          * that userspace sees the changes.
673          */
674         mutex_lock(&dqopt->dqonoff_mutex);
675         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
676                 if (type != -1 && cnt != type)
677                         continue;
678                 if (!sb_has_quota_active(sb, cnt))
679                         continue;
680                 mutex_lock(&dqopt->files[cnt]->i_mutex);
681                 truncate_inode_pages(&dqopt->files[cnt]->i_data, 0);
682                 mutex_unlock(&dqopt->files[cnt]->i_mutex);
683         }
684         mutex_unlock(&dqopt->dqonoff_mutex);
685
686         return 0;
687 }
688 EXPORT_SYMBOL(dquot_quota_sync);
689
690 /* Free unused dquots from cache */
691 static void prune_dqcache(int count)
692 {
693         struct list_head *head;
694         struct dquot *dquot;
695
696         head = free_dquots.prev;
697         while (head != &free_dquots && count) {
698                 dquot = list_entry(head, struct dquot, dq_free);
699                 remove_dquot_hash(dquot);
700                 remove_free_dquot(dquot);
701                 remove_inuse(dquot);
702                 do_destroy_dquot(dquot);
703                 count--;
704                 head = free_dquots.prev;
705         }
706 }
707
708 /*
709  * This is called from kswapd when we think we need some
710  * more memory
711  */
712 static int shrink_dqcache_memory(struct shrinker *shrink,
713                                  struct shrink_control *sc)
714 {
715         int nr = sc->nr_to_scan;
716
717         if (nr) {
718                 spin_lock(&dq_list_lock);
719                 prune_dqcache(nr);
720                 spin_unlock(&dq_list_lock);
721         }
722         return vfs_pressure_ratio(
723         percpu_counter_read_positive(&dqstats.counter[DQST_FREE_DQUOTS]));
724 }
725
726 static struct shrinker dqcache_shrinker = {
727         .shrink = shrink_dqcache_memory,
728         .seeks = DEFAULT_SEEKS,
729 };
730
731 /*
732  * Put reference to dquot
733  * NOTE: If you change this function please check whether dqput_blocks() works right...
734  */
735 void dqput(struct dquot *dquot)
736 {
737         int ret;
738
739         if (!dquot)
740                 return;
741 #ifdef CONFIG_QUOTA_DEBUG
742         if (!atomic_read(&dquot->dq_count)) {
743                 quota_error(dquot->dq_sb, "trying to free free dquot of %s %d",
744                             quotatypes[dquot->dq_id.type],
745                             from_kqid(&init_user_ns, dquot->dq_id));
746                 BUG();
747         }
748 #endif
749         dqstats_inc(DQST_DROPS);
750 we_slept:
751         spin_lock(&dq_list_lock);
752         if (atomic_read(&dquot->dq_count) > 1) {
753                 /* We have more than one user... nothing to do */
754                 atomic_dec(&dquot->dq_count);
755                 /* Releasing dquot during quotaoff phase? */
756                 if (!sb_has_quota_active(dquot->dq_sb, dquot->dq_id.type) &&
757                     atomic_read(&dquot->dq_count) == 1)
758                         wake_up(&dquot->dq_wait_unused);
759                 spin_unlock(&dq_list_lock);
760                 return;
761         }
762         /* Need to release dquot? */
763         if (test_bit(DQ_ACTIVE_B, &dquot->dq_flags) && dquot_dirty(dquot)) {
764                 spin_unlock(&dq_list_lock);
765                 /* Commit dquot before releasing */
766                 ret = dquot->dq_sb->dq_op->write_dquot(dquot);
767                 if (ret < 0) {
768                         quota_error(dquot->dq_sb, "Can't write quota structure"
769                                     " (error %d). Quota may get out of sync!",
770                                     ret);
771                         /*
772                          * We clear dirty bit anyway, so that we avoid
773                          * infinite loop here
774                          */
775                         spin_lock(&dq_list_lock);
776                         clear_dquot_dirty(dquot);
777                         spin_unlock(&dq_list_lock);
778                 }
779                 goto we_slept;
780         }
781         /* Clear flag in case dquot was inactive (something bad happened) */
782         clear_dquot_dirty(dquot);
783         if (test_bit(DQ_ACTIVE_B, &dquot->dq_flags)) {
784                 spin_unlock(&dq_list_lock);
785                 dquot->dq_sb->dq_op->release_dquot(dquot);
786                 goto we_slept;
787         }
788         atomic_dec(&dquot->dq_count);
789 #ifdef CONFIG_QUOTA_DEBUG
790         /* sanity check */
791         BUG_ON(!list_empty(&dquot->dq_free));
792 #endif
793         put_dquot_last(dquot);
794         spin_unlock(&dq_list_lock);
795 }
796 EXPORT_SYMBOL(dqput);
797
798 struct dquot *dquot_alloc(struct super_block *sb, int type)
799 {
800         return kmem_cache_zalloc(dquot_cachep, GFP_NOFS);
801 }
802 EXPORT_SYMBOL(dquot_alloc);
803
804 static struct dquot *get_empty_dquot(struct super_block *sb, int type)
805 {
806         struct dquot *dquot;
807
808         dquot = sb->dq_op->alloc_dquot(sb, type);
809         if(!dquot)
810                 return NULL;
811
812         mutex_init(&dquot->dq_lock);
813         INIT_LIST_HEAD(&dquot->dq_free);
814         INIT_LIST_HEAD(&dquot->dq_inuse);
815         INIT_HLIST_NODE(&dquot->dq_hash);
816         INIT_LIST_HEAD(&dquot->dq_dirty);
817         init_waitqueue_head(&dquot->dq_wait_unused);
818         dquot->dq_sb = sb;
819         dquot->dq_id = make_kqid_invalid(type);
820         atomic_set(&dquot->dq_count, 1);
821
822         return dquot;
823 }
824
825 /*
826  * Get reference to dquot
827  *
828  * Locking is slightly tricky here. We are guarded from parallel quotaoff()
829  * destroying our dquot by:
830  *   a) checking for quota flags under dq_list_lock and
831  *   b) getting a reference to dquot before we release dq_list_lock
832  */
833 struct dquot *dqget(struct super_block *sb, struct kqid qid)
834 {
835         unsigned int hashent = hashfn(sb, qid);
836         struct dquot *dquot = NULL, *empty = NULL;
837
838         if (!sb_has_quota_active(sb, qid.type))
839                 return NULL;
840 we_slept:
841         spin_lock(&dq_list_lock);
842         spin_lock(&dq_state_lock);
843         if (!sb_has_quota_active(sb, qid.type)) {
844                 spin_unlock(&dq_state_lock);
845                 spin_unlock(&dq_list_lock);
846                 goto out;
847         }
848         spin_unlock(&dq_state_lock);
849
850         dquot = find_dquot(hashent, sb, qid);
851         if (!dquot) {
852                 if (!empty) {
853                         spin_unlock(&dq_list_lock);
854                         empty = get_empty_dquot(sb, qid.type);
855                         if (!empty)
856                                 schedule();     /* Try to wait for a moment... */
857                         goto we_slept;
858                 }
859                 dquot = empty;
860                 empty = NULL;
861                 dquot->dq_id = qid;
862                 /* all dquots go on the inuse_list */
863                 put_inuse(dquot);
864                 /* hash it first so it can be found */
865                 insert_dquot_hash(dquot);
866                 spin_unlock(&dq_list_lock);
867                 dqstats_inc(DQST_LOOKUPS);
868         } else {
869                 if (!atomic_read(&dquot->dq_count))
870                         remove_free_dquot(dquot);
871                 atomic_inc(&dquot->dq_count);
872                 spin_unlock(&dq_list_lock);
873                 dqstats_inc(DQST_CACHE_HITS);
874                 dqstats_inc(DQST_LOOKUPS);
875         }
876         /* Wait for dq_lock - after this we know that either dquot_release() is
877          * already finished or it will be canceled due to dq_count > 1 test */
878         wait_on_dquot(dquot);
879         /* Read the dquot / allocate space in quota file */
880         if (!test_bit(DQ_ACTIVE_B, &dquot->dq_flags) &&
881             sb->dq_op->acquire_dquot(dquot) < 0) {
882                 dqput(dquot);
883                 dquot = NULL;
884                 goto out;
885         }
886 #ifdef CONFIG_QUOTA_DEBUG
887         BUG_ON(!dquot->dq_sb);  /* Has somebody invalidated entry under us? */
888 #endif
889 out:
890         if (empty)
891                 do_destroy_dquot(empty);
892
893         return dquot;
894 }
895 EXPORT_SYMBOL(dqget);
896
897 static int dqinit_needed(struct inode *inode, int type)
898 {
899         int cnt;
900
901         if (IS_NOQUOTA(inode))
902                 return 0;
903         if (type != -1)
904                 return !inode->i_dquot[type];
905         for (cnt = 0; cnt < MAXQUOTAS; cnt++)
906                 if (!inode->i_dquot[cnt])
907                         return 1;
908         return 0;
909 }
910
911 /* This routine is guarded by dqonoff_mutex mutex */
912 static void add_dquot_ref(struct super_block *sb, int type)
913 {
914         struct inode *inode, *old_inode = NULL;
915 #ifdef CONFIG_QUOTA_DEBUG
916         int reserved = 0;
917 #endif
918
919         spin_lock(&inode_sb_list_lock);
920         list_for_each_entry(inode, &sb->s_inodes, i_sb_list) {
921                 spin_lock(&inode->i_lock);
922                 if ((inode->i_state & (I_FREEING|I_WILL_FREE|I_NEW)) ||
923                     !atomic_read(&inode->i_writecount) ||
924                     !dqinit_needed(inode, type)) {
925                         spin_unlock(&inode->i_lock);
926                         continue;
927                 }
928                 __iget(inode);
929                 spin_unlock(&inode->i_lock);
930                 spin_unlock(&inode_sb_list_lock);
931
932 #ifdef CONFIG_QUOTA_DEBUG
933                 if (unlikely(inode_get_rsv_space(inode) > 0))
934                         reserved = 1;
935 #endif
936                 iput(old_inode);
937                 __dquot_initialize(inode, type);
938
939                 /*
940                  * We hold a reference to 'inode' so it couldn't have been
941                  * removed from s_inodes list while we dropped the
942                  * inode_sb_list_lock We cannot iput the inode now as we can be
943                  * holding the last reference and we cannot iput it under
944                  * inode_sb_list_lock. So we keep the reference and iput it
945                  * later.
946                  */
947                 old_inode = inode;
948                 spin_lock(&inode_sb_list_lock);
949         }
950         spin_unlock(&inode_sb_list_lock);
951         iput(old_inode);
952
953 #ifdef CONFIG_QUOTA_DEBUG
954         if (reserved) {
955                 quota_error(sb, "Writes happened before quota was turned on "
956                         "thus quota information is probably inconsistent. "
957                         "Please run quotacheck(8)");
958         }
959 #endif
960 }
961
962 /*
963  * Return 0 if dqput() won't block.
964  * (note that 1 doesn't necessarily mean blocking)
965  */
966 static inline int dqput_blocks(struct dquot *dquot)
967 {
968         if (atomic_read(&dquot->dq_count) <= 1)
969                 return 1;
970         return 0;
971 }
972
973 /*
974  * Remove references to dquots from inode and add dquot to list for freeing
975  * if we have the last reference to dquot
976  * We can't race with anybody because we hold dqptr_sem for writing...
977  */
978 static int remove_inode_dquot_ref(struct inode *inode, int type,
979                                   struct list_head *tofree_head)
980 {
981         struct dquot *dquot = inode->i_dquot[type];
982
983         inode->i_dquot[type] = NULL;
984         if (dquot) {
985                 if (dqput_blocks(dquot)) {
986 #ifdef CONFIG_QUOTA_DEBUG
987                         if (atomic_read(&dquot->dq_count) != 1)
988                                 quota_error(inode->i_sb, "Adding dquot with "
989                                             "dq_count %d to dispose list",
990                                             atomic_read(&dquot->dq_count));
991 #endif
992                         spin_lock(&dq_list_lock);
993                         /* As dquot must have currently users it can't be on
994                          * the free list... */
995                         list_add(&dquot->dq_free, tofree_head);
996                         spin_unlock(&dq_list_lock);
997                         return 1;
998                 }
999                 else
1000                         dqput(dquot);   /* We have guaranteed we won't block */
1001         }
1002         return 0;
1003 }
1004
1005 /*
1006  * Free list of dquots
1007  * Dquots are removed from inodes and no new references can be got so we are
1008  * the only ones holding reference
1009  */
1010 static void put_dquot_list(struct list_head *tofree_head)
1011 {
1012         struct list_head *act_head;
1013         struct dquot *dquot;
1014
1015         act_head = tofree_head->next;
1016         while (act_head != tofree_head) {
1017                 dquot = list_entry(act_head, struct dquot, dq_free);
1018                 act_head = act_head->next;
1019                 /* Remove dquot from the list so we won't have problems... */
1020                 list_del_init(&dquot->dq_free);
1021                 dqput(dquot);
1022         }
1023 }
1024
1025 static void remove_dquot_ref(struct super_block *sb, int type,
1026                 struct list_head *tofree_head)
1027 {
1028         struct inode *inode;
1029         int reserved = 0;
1030
1031         spin_lock(&inode_sb_list_lock);
1032         list_for_each_entry(inode, &sb->s_inodes, i_sb_list) {
1033                 /*
1034                  *  We have to scan also I_NEW inodes because they can already
1035                  *  have quota pointer initialized. Luckily, we need to touch
1036                  *  only quota pointers and these have separate locking
1037                  *  (dqptr_sem).
1038                  */
1039                 if (!IS_NOQUOTA(inode)) {
1040                         if (unlikely(inode_get_rsv_space(inode) > 0))
1041                                 reserved = 1;
1042                         remove_inode_dquot_ref(inode, type, tofree_head);
1043                 }
1044         }
1045         spin_unlock(&inode_sb_list_lock);
1046 #ifdef CONFIG_QUOTA_DEBUG
1047         if (reserved) {
1048                 printk(KERN_WARNING "VFS (%s): Writes happened after quota"
1049                         " was disabled thus quota information is probably "
1050                         "inconsistent. Please run quotacheck(8).\n", sb->s_id);
1051         }
1052 #endif
1053 }
1054
1055 /* Gather all references from inodes and drop them */
1056 static void drop_dquot_ref(struct super_block *sb, int type)
1057 {
1058         LIST_HEAD(tofree_head);
1059
1060         if (sb->dq_op) {
1061                 down_write(&sb_dqopt(sb)->dqptr_sem);
1062                 remove_dquot_ref(sb, type, &tofree_head);
1063                 up_write(&sb_dqopt(sb)->dqptr_sem);
1064                 put_dquot_list(&tofree_head);
1065         }
1066 }
1067
1068 static inline void dquot_incr_inodes(struct dquot *dquot, qsize_t number)
1069 {
1070         dquot->dq_dqb.dqb_curinodes += number;
1071 }
1072
1073 static inline void dquot_incr_space(struct dquot *dquot, qsize_t number)
1074 {
1075         dquot->dq_dqb.dqb_curspace += number;
1076 }
1077
1078 static inline void dquot_resv_space(struct dquot *dquot, qsize_t number)
1079 {
1080         dquot->dq_dqb.dqb_rsvspace += number;
1081 }
1082
1083 /*
1084  * Claim reserved quota space
1085  */
1086 static void dquot_claim_reserved_space(struct dquot *dquot, qsize_t number)
1087 {
1088         if (dquot->dq_dqb.dqb_rsvspace < number) {
1089                 WARN_ON_ONCE(1);
1090                 number = dquot->dq_dqb.dqb_rsvspace;
1091         }
1092         dquot->dq_dqb.dqb_curspace += number;
1093         dquot->dq_dqb.dqb_rsvspace -= number;
1094 }
1095
1096 static void dquot_reclaim_reserved_space(struct dquot *dquot, qsize_t number)
1097 {
1098         if (WARN_ON_ONCE(dquot->dq_dqb.dqb_curspace < number))
1099                 number = dquot->dq_dqb.dqb_curspace;
1100         dquot->dq_dqb.dqb_rsvspace += number;
1101         dquot->dq_dqb.dqb_curspace -= number;
1102 }
1103
1104 static inline
1105 void dquot_free_reserved_space(struct dquot *dquot, qsize_t number)
1106 {
1107         if (dquot->dq_dqb.dqb_rsvspace >= number)
1108                 dquot->dq_dqb.dqb_rsvspace -= number;
1109         else {
1110                 WARN_ON_ONCE(1);
1111                 dquot->dq_dqb.dqb_rsvspace = 0;
1112         }
1113 }
1114
1115 static void dquot_decr_inodes(struct dquot *dquot, qsize_t number)
1116 {
1117         if (sb_dqopt(dquot->dq_sb)->flags & DQUOT_NEGATIVE_USAGE ||
1118             dquot->dq_dqb.dqb_curinodes >= number)
1119                 dquot->dq_dqb.dqb_curinodes -= number;
1120         else
1121                 dquot->dq_dqb.dqb_curinodes = 0;
1122         if (dquot->dq_dqb.dqb_curinodes <= dquot->dq_dqb.dqb_isoftlimit)
1123                 dquot->dq_dqb.dqb_itime = (time_t) 0;
1124         clear_bit(DQ_INODES_B, &dquot->dq_flags);
1125 }
1126
1127 static void dquot_decr_space(struct dquot *dquot, qsize_t number)
1128 {
1129         if (sb_dqopt(dquot->dq_sb)->flags & DQUOT_NEGATIVE_USAGE ||
1130             dquot->dq_dqb.dqb_curspace >= number)
1131                 dquot->dq_dqb.dqb_curspace -= number;
1132         else
1133                 dquot->dq_dqb.dqb_curspace = 0;
1134         if (dquot->dq_dqb.dqb_curspace <= dquot->dq_dqb.dqb_bsoftlimit)
1135                 dquot->dq_dqb.dqb_btime = (time_t) 0;
1136         clear_bit(DQ_BLKS_B, &dquot->dq_flags);
1137 }
1138
1139 struct dquot_warn {
1140         struct super_block *w_sb;
1141         struct kqid w_dq_id;
1142         short w_type;
1143 };
1144
1145 static int warning_issued(struct dquot *dquot, const int warntype)
1146 {
1147         int flag = (warntype == QUOTA_NL_BHARDWARN ||
1148                 warntype == QUOTA_NL_BSOFTLONGWARN) ? DQ_BLKS_B :
1149                 ((warntype == QUOTA_NL_IHARDWARN ||
1150                 warntype == QUOTA_NL_ISOFTLONGWARN) ? DQ_INODES_B : 0);
1151
1152         if (!flag)
1153                 return 0;
1154         return test_and_set_bit(flag, &dquot->dq_flags);
1155 }
1156
1157 #ifdef CONFIG_PRINT_QUOTA_WARNING
1158 static int flag_print_warnings = 1;
1159
1160 static int need_print_warning(struct dquot_warn *warn)
1161 {
1162         if (!flag_print_warnings)
1163                 return 0;
1164
1165         switch (warn->w_dq_id.type) {
1166                 case USRQUOTA:
1167                         return uid_eq(current_fsuid(), warn->w_dq_id.uid);
1168                 case GRPQUOTA:
1169                         return in_group_p(warn->w_dq_id.gid);
1170                 case PRJQUOTA:  /* Never taken... Just make gcc happy */
1171                         return 0;
1172         }
1173         return 0;
1174 }
1175
1176 /* Print warning to user which exceeded quota */
1177 static void print_warning(struct dquot_warn *warn)
1178 {
1179         char *msg = NULL;
1180         struct tty_struct *tty;
1181         int warntype = warn->w_type;
1182
1183         if (warntype == QUOTA_NL_IHARDBELOW ||
1184             warntype == QUOTA_NL_ISOFTBELOW ||
1185             warntype == QUOTA_NL_BHARDBELOW ||
1186             warntype == QUOTA_NL_BSOFTBELOW || !need_print_warning(warn))
1187                 return;
1188
1189         tty = get_current_tty();
1190         if (!tty)
1191                 return;
1192         tty_write_message(tty, warn->w_sb->s_id);
1193         if (warntype == QUOTA_NL_ISOFTWARN || warntype == QUOTA_NL_BSOFTWARN)
1194                 tty_write_message(tty, ": warning, ");
1195         else
1196                 tty_write_message(tty, ": write failed, ");
1197         tty_write_message(tty, quotatypes[warn->w_dq_id.type]);
1198         switch (warntype) {
1199                 case QUOTA_NL_IHARDWARN:
1200                         msg = " file limit reached.\r\n";
1201                         break;
1202                 case QUOTA_NL_ISOFTLONGWARN:
1203                         msg = " file quota exceeded too long.\r\n";
1204                         break;
1205                 case QUOTA_NL_ISOFTWARN:
1206                         msg = " file quota exceeded.\r\n";
1207                         break;
1208                 case QUOTA_NL_BHARDWARN:
1209                         msg = " block limit reached.\r\n";
1210                         break;
1211                 case QUOTA_NL_BSOFTLONGWARN:
1212                         msg = " block quota exceeded too long.\r\n";
1213                         break;
1214                 case QUOTA_NL_BSOFTWARN:
1215                         msg = " block quota exceeded.\r\n";
1216                         break;
1217         }
1218         tty_write_message(tty, msg);
1219         tty_kref_put(tty);
1220 }
1221 #endif
1222
1223 static void prepare_warning(struct dquot_warn *warn, struct dquot *dquot,
1224                             int warntype)
1225 {
1226         if (warning_issued(dquot, warntype))
1227                 return;
1228         warn->w_type = warntype;
1229         warn->w_sb = dquot->dq_sb;
1230         warn->w_dq_id = dquot->dq_id;
1231 }
1232
1233 /*
1234  * Write warnings to the console and send warning messages over netlink.
1235  *
1236  * Note that this function can call into tty and networking code.
1237  */
1238 static void flush_warnings(struct dquot_warn *warn)
1239 {
1240         int i;
1241
1242         for (i = 0; i < MAXQUOTAS; i++) {
1243                 if (warn[i].w_type == QUOTA_NL_NOWARN)
1244                         continue;
1245 #ifdef CONFIG_PRINT_QUOTA_WARNING
1246                 print_warning(&warn[i]);
1247 #endif
1248                 quota_send_warning(warn[i].w_dq_id,
1249                                    warn[i].w_sb->s_dev, warn[i].w_type);
1250         }
1251 }
1252
1253 static int ignore_hardlimit(struct dquot *dquot)
1254 {
1255         struct mem_dqinfo *info = &sb_dqopt(dquot->dq_sb)->info[dquot->dq_id.type];
1256
1257         return capable(CAP_SYS_RESOURCE) &&
1258                (info->dqi_format->qf_fmt_id != QFMT_VFS_OLD ||
1259                 !(info->dqi_flags & V1_DQF_RSQUASH));
1260 }
1261
1262 /* needs dq_data_lock */
1263 static int check_idq(struct dquot *dquot, qsize_t inodes,
1264                      struct dquot_warn *warn)
1265 {
1266         qsize_t newinodes = dquot->dq_dqb.dqb_curinodes + inodes;
1267
1268         if (!sb_has_quota_limits_enabled(dquot->dq_sb, dquot->dq_id.type) ||
1269             test_bit(DQ_FAKE_B, &dquot->dq_flags))
1270                 return 0;
1271
1272         if (dquot->dq_dqb.dqb_ihardlimit &&
1273             newinodes > dquot->dq_dqb.dqb_ihardlimit &&
1274             !ignore_hardlimit(dquot)) {
1275                 prepare_warning(warn, dquot, QUOTA_NL_IHARDWARN);
1276                 return -EDQUOT;
1277         }
1278
1279         if (dquot->dq_dqb.dqb_isoftlimit &&
1280             newinodes > dquot->dq_dqb.dqb_isoftlimit &&
1281             dquot->dq_dqb.dqb_itime &&
1282             get_seconds() >= dquot->dq_dqb.dqb_itime &&
1283             !ignore_hardlimit(dquot)) {
1284                 prepare_warning(warn, dquot, QUOTA_NL_ISOFTLONGWARN);
1285                 return -EDQUOT;
1286         }
1287
1288         if (dquot->dq_dqb.dqb_isoftlimit &&
1289             newinodes > dquot->dq_dqb.dqb_isoftlimit &&
1290             dquot->dq_dqb.dqb_itime == 0) {
1291                 prepare_warning(warn, dquot, QUOTA_NL_ISOFTWARN);
1292                 dquot->dq_dqb.dqb_itime = get_seconds() +
1293                     sb_dqopt(dquot->dq_sb)->info[dquot->dq_id.type].dqi_igrace;
1294         }
1295
1296         return 0;
1297 }
1298
1299 /* needs dq_data_lock */
1300 static int check_bdq(struct dquot *dquot, qsize_t space, int prealloc,
1301                      struct dquot_warn *warn)
1302 {
1303         qsize_t tspace;
1304         struct super_block *sb = dquot->dq_sb;
1305
1306         if (!sb_has_quota_limits_enabled(sb, dquot->dq_id.type) ||
1307             test_bit(DQ_FAKE_B, &dquot->dq_flags))
1308                 return 0;
1309
1310         tspace = dquot->dq_dqb.dqb_curspace + dquot->dq_dqb.dqb_rsvspace
1311                 + space;
1312
1313         if (dquot->dq_dqb.dqb_bhardlimit &&
1314             tspace > dquot->dq_dqb.dqb_bhardlimit &&
1315             !ignore_hardlimit(dquot)) {
1316                 if (!prealloc)
1317                         prepare_warning(warn, dquot, QUOTA_NL_BHARDWARN);
1318                 return -EDQUOT;
1319         }
1320
1321         if (dquot->dq_dqb.dqb_bsoftlimit &&
1322             tspace > dquot->dq_dqb.dqb_bsoftlimit &&
1323             dquot->dq_dqb.dqb_btime &&
1324             get_seconds() >= dquot->dq_dqb.dqb_btime &&
1325             !ignore_hardlimit(dquot)) {
1326                 if (!prealloc)
1327                         prepare_warning(warn, dquot, QUOTA_NL_BSOFTLONGWARN);
1328                 return -EDQUOT;
1329         }
1330
1331         if (dquot->dq_dqb.dqb_bsoftlimit &&
1332             tspace > dquot->dq_dqb.dqb_bsoftlimit &&
1333             dquot->dq_dqb.dqb_btime == 0) {
1334                 if (!prealloc) {
1335                         prepare_warning(warn, dquot, QUOTA_NL_BSOFTWARN);
1336                         dquot->dq_dqb.dqb_btime = get_seconds() +
1337                             sb_dqopt(sb)->info[dquot->dq_id.type].dqi_bgrace;
1338                 }
1339                 else
1340                         /*
1341                          * We don't allow preallocation to exceed softlimit so exceeding will
1342                          * be always printed
1343                          */
1344                         return -EDQUOT;
1345         }
1346
1347         return 0;
1348 }
1349
1350 static int info_idq_free(struct dquot *dquot, qsize_t inodes)
1351 {
1352         qsize_t newinodes;
1353
1354         if (test_bit(DQ_FAKE_B, &dquot->dq_flags) ||
1355             dquot->dq_dqb.dqb_curinodes <= dquot->dq_dqb.dqb_isoftlimit ||
1356             !sb_has_quota_limits_enabled(dquot->dq_sb, dquot->dq_id.type))
1357                 return QUOTA_NL_NOWARN;
1358
1359         newinodes = dquot->dq_dqb.dqb_curinodes - inodes;
1360         if (newinodes <= dquot->dq_dqb.dqb_isoftlimit)
1361                 return QUOTA_NL_ISOFTBELOW;
1362         if (dquot->dq_dqb.dqb_curinodes >= dquot->dq_dqb.dqb_ihardlimit &&
1363             newinodes < dquot->dq_dqb.dqb_ihardlimit)
1364                 return QUOTA_NL_IHARDBELOW;
1365         return QUOTA_NL_NOWARN;
1366 }
1367
1368 static int info_bdq_free(struct dquot *dquot, qsize_t space)
1369 {
1370         if (test_bit(DQ_FAKE_B, &dquot->dq_flags) ||
1371             dquot->dq_dqb.dqb_curspace <= dquot->dq_dqb.dqb_bsoftlimit)
1372                 return QUOTA_NL_NOWARN;
1373
1374         if (dquot->dq_dqb.dqb_curspace - space <= dquot->dq_dqb.dqb_bsoftlimit)
1375                 return QUOTA_NL_BSOFTBELOW;
1376         if (dquot->dq_dqb.dqb_curspace >= dquot->dq_dqb.dqb_bhardlimit &&
1377             dquot->dq_dqb.dqb_curspace - space < dquot->dq_dqb.dqb_bhardlimit)
1378                 return QUOTA_NL_BHARDBELOW;
1379         return QUOTA_NL_NOWARN;
1380 }
1381
1382 static int dquot_active(const struct inode *inode)
1383 {
1384         struct super_block *sb = inode->i_sb;
1385
1386         if (IS_NOQUOTA(inode))
1387                 return 0;
1388         return sb_any_quota_loaded(sb) & ~sb_any_quota_suspended(sb);
1389 }
1390
1391 /*
1392  * Initialize quota pointers in inode
1393  *
1394  * We do things in a bit complicated way but by that we avoid calling
1395  * dqget() and thus filesystem callbacks under dqptr_sem.
1396  *
1397  * It is better to call this function outside of any transaction as it
1398  * might need a lot of space in journal for dquot structure allocation.
1399  */
1400 static void __dquot_initialize(struct inode *inode, int type)
1401 {
1402         int cnt;
1403         struct dquot *got[MAXQUOTAS];
1404         struct super_block *sb = inode->i_sb;
1405         qsize_t rsv;
1406
1407         /* First test before acquiring mutex - solves deadlocks when we
1408          * re-enter the quota code and are already holding the mutex */
1409         if (!dquot_active(inode))
1410                 return;
1411
1412         /* First get references to structures we might need. */
1413         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1414                 struct kqid qid;
1415                 got[cnt] = NULL;
1416                 if (type != -1 && cnt != type)
1417                         continue;
1418                 switch (cnt) {
1419                 case USRQUOTA:
1420                         qid = make_kqid_uid(inode->i_uid);
1421                         break;
1422                 case GRPQUOTA:
1423                         qid = make_kqid_gid(inode->i_gid);
1424                         break;
1425                 }
1426                 got[cnt] = dqget(sb, qid);
1427         }
1428
1429         down_write(&sb_dqopt(sb)->dqptr_sem);
1430         if (IS_NOQUOTA(inode))
1431                 goto out_err;
1432         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1433                 if (type != -1 && cnt != type)
1434                         continue;
1435                 /* Avoid races with quotaoff() */
1436                 if (!sb_has_quota_active(sb, cnt))
1437                         continue;
1438                 /* We could race with quotaon or dqget() could have failed */
1439                 if (!got[cnt])
1440                         continue;
1441                 if (!inode->i_dquot[cnt]) {
1442                         inode->i_dquot[cnt] = got[cnt];
1443                         got[cnt] = NULL;
1444                         /*
1445                          * Make quota reservation system happy if someone
1446                          * did a write before quota was turned on
1447                          */
1448                         rsv = inode_get_rsv_space(inode);
1449                         if (unlikely(rsv)) {
1450                                 spin_lock(&dq_data_lock);
1451                                 dquot_resv_space(inode->i_dquot[cnt], rsv);
1452                                 spin_unlock(&dq_data_lock);
1453                         }
1454                 }
1455         }
1456 out_err:
1457         up_write(&sb_dqopt(sb)->dqptr_sem);
1458         /* Drop unused references */
1459         dqput_all(got);
1460 }
1461
1462 void dquot_initialize(struct inode *inode)
1463 {
1464         __dquot_initialize(inode, -1);
1465 }
1466 EXPORT_SYMBOL(dquot_initialize);
1467
1468 /*
1469  *      Release all quotas referenced by inode
1470  */
1471 static void __dquot_drop(struct inode *inode)
1472 {
1473         int cnt;
1474         struct dquot *put[MAXQUOTAS];
1475
1476         down_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
1477         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1478                 put[cnt] = inode->i_dquot[cnt];
1479                 inode->i_dquot[cnt] = NULL;
1480         }
1481         up_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
1482         dqput_all(put);
1483 }
1484
1485 void dquot_drop(struct inode *inode)
1486 {
1487         int cnt;
1488
1489         if (IS_NOQUOTA(inode))
1490                 return;
1491
1492         /*
1493          * Test before calling to rule out calls from proc and such
1494          * where we are not allowed to block. Note that this is
1495          * actually reliable test even without the lock - the caller
1496          * must assure that nobody can come after the DQUOT_DROP and
1497          * add quota pointers back anyway.
1498          */
1499         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1500                 if (inode->i_dquot[cnt])
1501                         break;
1502         }
1503
1504         if (cnt < MAXQUOTAS)
1505                 __dquot_drop(inode);
1506 }
1507 EXPORT_SYMBOL(dquot_drop);
1508
1509 /*
1510  * inode_reserved_space is managed internally by quota, and protected by
1511  * i_lock similar to i_blocks+i_bytes.
1512  */
1513 static qsize_t *inode_reserved_space(struct inode * inode)
1514 {
1515         /* Filesystem must explicitly define it's own method in order to use
1516          * quota reservation interface */
1517         BUG_ON(!inode->i_sb->dq_op->get_reserved_space);
1518         return inode->i_sb->dq_op->get_reserved_space(inode);
1519 }
1520
1521 void inode_add_rsv_space(struct inode *inode, qsize_t number)
1522 {
1523         spin_lock(&inode->i_lock);
1524         *inode_reserved_space(inode) += number;
1525         spin_unlock(&inode->i_lock);
1526 }
1527 EXPORT_SYMBOL(inode_add_rsv_space);
1528
1529 void inode_claim_rsv_space(struct inode *inode, qsize_t number)
1530 {
1531         spin_lock(&inode->i_lock);
1532         *inode_reserved_space(inode) -= number;
1533         __inode_add_bytes(inode, number);
1534         spin_unlock(&inode->i_lock);
1535 }
1536 EXPORT_SYMBOL(inode_claim_rsv_space);
1537
1538 void inode_reclaim_rsv_space(struct inode *inode, qsize_t number)
1539 {
1540         spin_lock(&inode->i_lock);
1541         *inode_reserved_space(inode) += number;
1542         __inode_sub_bytes(inode, number);
1543         spin_unlock(&inode->i_lock);
1544 }
1545 EXPORT_SYMBOL(inode_reclaim_rsv_space);
1546
1547 void inode_sub_rsv_space(struct inode *inode, qsize_t number)
1548 {
1549         spin_lock(&inode->i_lock);
1550         *inode_reserved_space(inode) -= number;
1551         spin_unlock(&inode->i_lock);
1552 }
1553 EXPORT_SYMBOL(inode_sub_rsv_space);
1554
1555 static qsize_t inode_get_rsv_space(struct inode *inode)
1556 {
1557         qsize_t ret;
1558
1559         if (!inode->i_sb->dq_op->get_reserved_space)
1560                 return 0;
1561         spin_lock(&inode->i_lock);
1562         ret = *inode_reserved_space(inode);
1563         spin_unlock(&inode->i_lock);
1564         return ret;
1565 }
1566
1567 static void inode_incr_space(struct inode *inode, qsize_t number,
1568                                 int reserve)
1569 {
1570         if (reserve)
1571                 inode_add_rsv_space(inode, number);
1572         else
1573                 inode_add_bytes(inode, number);
1574 }
1575
1576 static void inode_decr_space(struct inode *inode, qsize_t number, int reserve)
1577 {
1578         if (reserve)
1579                 inode_sub_rsv_space(inode, number);
1580         else
1581                 inode_sub_bytes(inode, number);
1582 }
1583
1584 /*
1585  * This functions updates i_blocks+i_bytes fields and quota information
1586  * (together with appropriate checks).
1587  *
1588  * NOTE: We absolutely rely on the fact that caller dirties the inode
1589  * (usually helpers in quotaops.h care about this) and holds a handle for
1590  * the current transaction so that dquot write and inode write go into the
1591  * same transaction.
1592  */
1593
1594 /*
1595  * This operation can block, but only after everything is updated
1596  */
1597 int __dquot_alloc_space(struct inode *inode, qsize_t number, int flags)
1598 {
1599         int cnt, ret = 0;
1600         struct dquot_warn warn[MAXQUOTAS];
1601         struct dquot **dquots = inode->i_dquot;
1602         int reserve = flags & DQUOT_SPACE_RESERVE;
1603
1604         /*
1605          * First test before acquiring mutex - solves deadlocks when we
1606          * re-enter the quota code and are already holding the mutex
1607          */
1608         if (!dquot_active(inode)) {
1609                 inode_incr_space(inode, number, reserve);
1610                 goto out;
1611         }
1612
1613         for (cnt = 0; cnt < MAXQUOTAS; cnt++)
1614                 warn[cnt].w_type = QUOTA_NL_NOWARN;
1615
1616         down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1617         spin_lock(&dq_data_lock);
1618         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1619                 if (!dquots[cnt])
1620                         continue;
1621                 ret = check_bdq(dquots[cnt], number,
1622                                 !(flags & DQUOT_SPACE_WARN), &warn[cnt]);
1623                 if (ret && !(flags & DQUOT_SPACE_NOFAIL)) {
1624                         spin_unlock(&dq_data_lock);
1625                         goto out_flush_warn;
1626                 }
1627         }
1628         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1629                 if (!dquots[cnt])
1630                         continue;
1631                 if (reserve)
1632                         dquot_resv_space(dquots[cnt], number);
1633                 else
1634                         dquot_incr_space(dquots[cnt], number);
1635         }
1636         inode_incr_space(inode, number, reserve);
1637         spin_unlock(&dq_data_lock);
1638
1639         if (reserve)
1640                 goto out_flush_warn;
1641         mark_all_dquot_dirty(dquots);
1642 out_flush_warn:
1643         up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1644         flush_warnings(warn);
1645 out:
1646         return ret;
1647 }
1648 EXPORT_SYMBOL(__dquot_alloc_space);
1649
1650 /*
1651  * This operation can block, but only after everything is updated
1652  */
1653 int dquot_alloc_inode(const struct inode *inode)
1654 {
1655         int cnt, ret = 0;
1656         struct dquot_warn warn[MAXQUOTAS];
1657         struct dquot * const *dquots = inode->i_dquot;
1658
1659         /* First test before acquiring mutex - solves deadlocks when we
1660          * re-enter the quota code and are already holding the mutex */
1661         if (!dquot_active(inode))
1662                 return 0;
1663         for (cnt = 0; cnt < MAXQUOTAS; cnt++)
1664                 warn[cnt].w_type = QUOTA_NL_NOWARN;
1665         down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1666         spin_lock(&dq_data_lock);
1667         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1668                 if (!dquots[cnt])
1669                         continue;
1670                 ret = check_idq(dquots[cnt], 1, &warn[cnt]);
1671                 if (ret)
1672                         goto warn_put_all;
1673         }
1674
1675         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1676                 if (!dquots[cnt])
1677                         continue;
1678                 dquot_incr_inodes(dquots[cnt], 1);
1679         }
1680
1681 warn_put_all:
1682         spin_unlock(&dq_data_lock);
1683         if (ret == 0)
1684                 mark_all_dquot_dirty(dquots);
1685         up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1686         flush_warnings(warn);
1687         return ret;
1688 }
1689 EXPORT_SYMBOL(dquot_alloc_inode);
1690
1691 /*
1692  * Convert in-memory reserved quotas to real consumed quotas
1693  */
1694 int dquot_claim_space_nodirty(struct inode *inode, qsize_t number)
1695 {
1696         int cnt;
1697
1698         if (!dquot_active(inode)) {
1699                 inode_claim_rsv_space(inode, number);
1700                 return 0;
1701         }
1702
1703         down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1704         spin_lock(&dq_data_lock);
1705         /* Claim reserved quotas to allocated quotas */
1706         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1707                 if (inode->i_dquot[cnt])
1708                         dquot_claim_reserved_space(inode->i_dquot[cnt],
1709                                                         number);
1710         }
1711         /* Update inode bytes */
1712         inode_claim_rsv_space(inode, number);
1713         spin_unlock(&dq_data_lock);
1714         mark_all_dquot_dirty(inode->i_dquot);
1715         up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1716         return 0;
1717 }
1718 EXPORT_SYMBOL(dquot_claim_space_nodirty);
1719
1720 /*
1721  * Convert allocated space back to in-memory reserved quotas
1722  */
1723 void dquot_reclaim_space_nodirty(struct inode *inode, qsize_t number)
1724 {
1725         int cnt;
1726
1727         if (!dquot_active(inode)) {
1728                 inode_reclaim_rsv_space(inode, number);
1729                 return;
1730         }
1731
1732         down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1733         spin_lock(&dq_data_lock);
1734         /* Claim reserved quotas to allocated quotas */
1735         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1736                 if (inode->i_dquot[cnt])
1737                         dquot_reclaim_reserved_space(inode->i_dquot[cnt],
1738                                                      number);
1739         }
1740         /* Update inode bytes */
1741         inode_reclaim_rsv_space(inode, number);
1742         spin_unlock(&dq_data_lock);
1743         mark_all_dquot_dirty(inode->i_dquot);
1744         up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1745         return;
1746 }
1747 EXPORT_SYMBOL(dquot_reclaim_space_nodirty);
1748
1749 /*
1750  * This operation can block, but only after everything is updated
1751  */
1752 void __dquot_free_space(struct inode *inode, qsize_t number, int flags)
1753 {
1754         unsigned int cnt;
1755         struct dquot_warn warn[MAXQUOTAS];
1756         struct dquot **dquots = inode->i_dquot;
1757         int reserve = flags & DQUOT_SPACE_RESERVE;
1758
1759         /* First test before acquiring mutex - solves deadlocks when we
1760          * re-enter the quota code and are already holding the mutex */
1761         if (!dquot_active(inode)) {
1762                 inode_decr_space(inode, number, reserve);
1763                 return;
1764         }
1765
1766         down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1767         spin_lock(&dq_data_lock);
1768         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1769                 int wtype;
1770
1771                 warn[cnt].w_type = QUOTA_NL_NOWARN;
1772                 if (!dquots[cnt])
1773                         continue;
1774                 wtype = info_bdq_free(dquots[cnt], number);
1775                 if (wtype != QUOTA_NL_NOWARN)
1776                         prepare_warning(&warn[cnt], dquots[cnt], wtype);
1777                 if (reserve)
1778                         dquot_free_reserved_space(dquots[cnt], number);
1779                 else
1780                         dquot_decr_space(dquots[cnt], number);
1781         }
1782         inode_decr_space(inode, number, reserve);
1783         spin_unlock(&dq_data_lock);
1784
1785         if (reserve)
1786                 goto out_unlock;
1787         mark_all_dquot_dirty(dquots);
1788 out_unlock:
1789         up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1790         flush_warnings(warn);
1791 }
1792 EXPORT_SYMBOL(__dquot_free_space);
1793
1794 /*
1795  * This operation can block, but only after everything is updated
1796  */
1797 void dquot_free_inode(const struct inode *inode)
1798 {
1799         unsigned int cnt;
1800         struct dquot_warn warn[MAXQUOTAS];
1801         struct dquot * const *dquots = inode->i_dquot;
1802
1803         /* First test before acquiring mutex - solves deadlocks when we
1804          * re-enter the quota code and are already holding the mutex */
1805         if (!dquot_active(inode))
1806                 return;
1807
1808         down_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1809         spin_lock(&dq_data_lock);
1810         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1811                 int wtype;
1812
1813                 warn[cnt].w_type = QUOTA_NL_NOWARN;
1814                 if (!dquots[cnt])
1815                         continue;
1816                 wtype = info_idq_free(dquots[cnt], 1);
1817                 if (wtype != QUOTA_NL_NOWARN)
1818                         prepare_warning(&warn[cnt], dquots[cnt], wtype);
1819                 dquot_decr_inodes(dquots[cnt], 1);
1820         }
1821         spin_unlock(&dq_data_lock);
1822         mark_all_dquot_dirty(dquots);
1823         up_read(&sb_dqopt(inode->i_sb)->dqptr_sem);
1824         flush_warnings(warn);
1825 }
1826 EXPORT_SYMBOL(dquot_free_inode);
1827
1828 /*
1829  * Transfer the number of inode and blocks from one diskquota to an other.
1830  * On success, dquot references in transfer_to are consumed and references
1831  * to original dquots that need to be released are placed there. On failure,
1832  * references are kept untouched.
1833  *
1834  * This operation can block, but only after everything is updated
1835  * A transaction must be started when entering this function.
1836  *
1837  */
1838 int __dquot_transfer(struct inode *inode, struct dquot **transfer_to)
1839 {
1840         qsize_t space, cur_space;
1841         qsize_t rsv_space = 0;
1842         struct dquot *transfer_from[MAXQUOTAS] = {};
1843         int cnt, ret = 0;
1844         char is_valid[MAXQUOTAS] = {};
1845         struct dquot_warn warn_to[MAXQUOTAS];
1846         struct dquot_warn warn_from_inodes[MAXQUOTAS];
1847         struct dquot_warn warn_from_space[MAXQUOTAS];
1848
1849         /* First test before acquiring mutex - solves deadlocks when we
1850          * re-enter the quota code and are already holding the mutex */
1851         if (IS_NOQUOTA(inode))
1852                 return 0;
1853         /* Initialize the arrays */
1854         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1855                 warn_to[cnt].w_type = QUOTA_NL_NOWARN;
1856                 warn_from_inodes[cnt].w_type = QUOTA_NL_NOWARN;
1857                 warn_from_space[cnt].w_type = QUOTA_NL_NOWARN;
1858         }
1859         down_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
1860         if (IS_NOQUOTA(inode)) {        /* File without quota accounting? */
1861                 up_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
1862                 return 0;
1863         }
1864         spin_lock(&dq_data_lock);
1865         cur_space = inode_get_bytes(inode);
1866         rsv_space = inode_get_rsv_space(inode);
1867         space = cur_space + rsv_space;
1868         /* Build the transfer_from list and check the limits */
1869         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1870                 /*
1871                  * Skip changes for same uid or gid or for turned off quota-type.
1872                  */
1873                 if (!transfer_to[cnt])
1874                         continue;
1875                 /* Avoid races with quotaoff() */
1876                 if (!sb_has_quota_active(inode->i_sb, cnt))
1877                         continue;
1878                 is_valid[cnt] = 1;
1879                 transfer_from[cnt] = inode->i_dquot[cnt];
1880                 ret = check_idq(transfer_to[cnt], 1, &warn_to[cnt]);
1881                 if (ret)
1882                         goto over_quota;
1883                 ret = check_bdq(transfer_to[cnt], space, 0, &warn_to[cnt]);
1884                 if (ret)
1885                         goto over_quota;
1886         }
1887
1888         /*
1889          * Finally perform the needed transfer from transfer_from to transfer_to
1890          */
1891         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
1892                 if (!is_valid[cnt])
1893                         continue;
1894                 /* Due to IO error we might not have transfer_from[] structure */
1895                 if (transfer_from[cnt]) {
1896                         int wtype;
1897                         wtype = info_idq_free(transfer_from[cnt], 1);
1898                         if (wtype != QUOTA_NL_NOWARN)
1899                                 prepare_warning(&warn_from_inodes[cnt],
1900                                                 transfer_from[cnt], wtype);
1901                         wtype = info_bdq_free(transfer_from[cnt], space);
1902                         if (wtype != QUOTA_NL_NOWARN)
1903                                 prepare_warning(&warn_from_space[cnt],
1904                                                 transfer_from[cnt], wtype);
1905                         dquot_decr_inodes(transfer_from[cnt], 1);
1906                         dquot_decr_space(transfer_from[cnt], cur_space);
1907                         dquot_free_reserved_space(transfer_from[cnt],
1908                                                   rsv_space);
1909                 }
1910
1911                 dquot_incr_inodes(transfer_to[cnt], 1);
1912                 dquot_incr_space(transfer_to[cnt], cur_space);
1913                 dquot_resv_space(transfer_to[cnt], rsv_space);
1914
1915                 inode->i_dquot[cnt] = transfer_to[cnt];
1916         }
1917         spin_unlock(&dq_data_lock);
1918         up_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
1919
1920         mark_all_dquot_dirty(transfer_from);
1921         mark_all_dquot_dirty(transfer_to);
1922         flush_warnings(warn_to);
1923         flush_warnings(warn_from_inodes);
1924         flush_warnings(warn_from_space);
1925         /* Pass back references to put */
1926         for (cnt = 0; cnt < MAXQUOTAS; cnt++)
1927                 if (is_valid[cnt])
1928                         transfer_to[cnt] = transfer_from[cnt];
1929         return 0;
1930 over_quota:
1931         spin_unlock(&dq_data_lock);
1932         up_write(&sb_dqopt(inode->i_sb)->dqptr_sem);
1933         flush_warnings(warn_to);
1934         return ret;
1935 }
1936 EXPORT_SYMBOL(__dquot_transfer);
1937
1938 /* Wrapper for transferring ownership of an inode for uid/gid only
1939  * Called from FSXXX_setattr()
1940  */
1941 int dquot_transfer(struct inode *inode, struct iattr *iattr)
1942 {
1943         struct dquot *transfer_to[MAXQUOTAS] = {};
1944         struct super_block *sb = inode->i_sb;
1945         int ret;
1946
1947         if (!dquot_active(inode))
1948                 return 0;
1949
1950         if (iattr->ia_valid & ATTR_UID && !uid_eq(iattr->ia_uid, inode->i_uid))
1951                 transfer_to[USRQUOTA] = dqget(sb, make_kqid_uid(iattr->ia_uid));
1952         if (iattr->ia_valid & ATTR_GID && !gid_eq(iattr->ia_gid, inode->i_gid))
1953                 transfer_to[GRPQUOTA] = dqget(sb, make_kqid_gid(iattr->ia_gid));
1954
1955         ret = __dquot_transfer(inode, transfer_to);
1956         dqput_all(transfer_to);
1957         return ret;
1958 }
1959 EXPORT_SYMBOL(dquot_transfer);
1960
1961 /*
1962  * Write info of quota file to disk
1963  */
1964 int dquot_commit_info(struct super_block *sb, int type)
1965 {
1966         int ret;
1967         struct quota_info *dqopt = sb_dqopt(sb);
1968
1969         mutex_lock(&dqopt->dqio_mutex);
1970         ret = dqopt->ops[type]->write_file_info(sb, type);
1971         mutex_unlock(&dqopt->dqio_mutex);
1972         return ret;
1973 }
1974 EXPORT_SYMBOL(dquot_commit_info);
1975
1976 /*
1977  * Definitions of diskquota operations.
1978  */
1979 const struct dquot_operations dquot_operations = {
1980         .write_dquot    = dquot_commit,
1981         .acquire_dquot  = dquot_acquire,
1982         .release_dquot  = dquot_release,
1983         .mark_dirty     = dquot_mark_dquot_dirty,
1984         .write_info     = dquot_commit_info,
1985         .alloc_dquot    = dquot_alloc,
1986         .destroy_dquot  = dquot_destroy,
1987 };
1988 EXPORT_SYMBOL(dquot_operations);
1989
1990 /*
1991  * Generic helper for ->open on filesystems supporting disk quotas.
1992  */
1993 int dquot_file_open(struct inode *inode, struct file *file)
1994 {
1995         int error;
1996
1997         error = generic_file_open(inode, file);
1998         if (!error && (file->f_mode & FMODE_WRITE))
1999                 dquot_initialize(inode);
2000         return error;
2001 }
2002 EXPORT_SYMBOL(dquot_file_open);
2003
2004 /*
2005  * Turn quota off on a device. type == -1 ==> quotaoff for all types (umount)
2006  */
2007 int dquot_disable(struct super_block *sb, int type, unsigned int flags)
2008 {
2009         int cnt, ret = 0;
2010         struct quota_info *dqopt = sb_dqopt(sb);
2011         struct inode *toputinode[MAXQUOTAS];
2012
2013         /* Cannot turn off usage accounting without turning off limits, or
2014          * suspend quotas and simultaneously turn quotas off. */
2015         if ((flags & DQUOT_USAGE_ENABLED && !(flags & DQUOT_LIMITS_ENABLED))
2016             || (flags & DQUOT_SUSPENDED && flags & (DQUOT_LIMITS_ENABLED |
2017             DQUOT_USAGE_ENABLED)))
2018                 return -EINVAL;
2019
2020         /* We need to serialize quota_off() for device */
2021         mutex_lock(&dqopt->dqonoff_mutex);
2022
2023         /*
2024          * Skip everything if there's nothing to do. We have to do this because
2025          * sometimes we are called when fill_super() failed and calling
2026          * sync_fs() in such cases does no good.
2027          */
2028         if (!sb_any_quota_loaded(sb)) {
2029                 mutex_unlock(&dqopt->dqonoff_mutex);
2030                 return 0;
2031         }
2032         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
2033                 toputinode[cnt] = NULL;
2034                 if (type != -1 && cnt != type)
2035                         continue;
2036                 if (!sb_has_quota_loaded(sb, cnt))
2037                         continue;
2038
2039                 if (flags & DQUOT_SUSPENDED) {
2040                         spin_lock(&dq_state_lock);
2041                         dqopt->flags |=
2042                                 dquot_state_flag(DQUOT_SUSPENDED, cnt);
2043                         spin_unlock(&dq_state_lock);
2044                 } else {
2045                         spin_lock(&dq_state_lock);
2046                         dqopt->flags &= ~dquot_state_flag(flags, cnt);
2047                         /* Turning off suspended quotas? */
2048                         if (!sb_has_quota_loaded(sb, cnt) &&
2049                             sb_has_quota_suspended(sb, cnt)) {
2050                                 dqopt->flags &= ~dquot_state_flag(
2051                                                         DQUOT_SUSPENDED, cnt);
2052                                 spin_unlock(&dq_state_lock);
2053                                 iput(dqopt->files[cnt]);
2054                                 dqopt->files[cnt] = NULL;
2055                                 continue;
2056                         }
2057                         spin_unlock(&dq_state_lock);
2058                 }
2059
2060                 /* We still have to keep quota loaded? */
2061                 if (sb_has_quota_loaded(sb, cnt) && !(flags & DQUOT_SUSPENDED))
2062                         continue;
2063
2064                 /* Note: these are blocking operations */
2065                 drop_dquot_ref(sb, cnt);
2066                 invalidate_dquots(sb, cnt);
2067                 /*
2068                  * Now all dquots should be invalidated, all writes done so we
2069                  * should be only users of the info. No locks needed.
2070                  */
2071                 if (info_dirty(&dqopt->info[cnt]))
2072                         sb->dq_op->write_info(sb, cnt);
2073                 if (dqopt->ops[cnt]->free_file_info)
2074                         dqopt->ops[cnt]->free_file_info(sb, cnt);
2075                 put_quota_format(dqopt->info[cnt].dqi_format);
2076
2077                 toputinode[cnt] = dqopt->files[cnt];
2078                 if (!sb_has_quota_loaded(sb, cnt))
2079                         dqopt->files[cnt] = NULL;
2080                 dqopt->info[cnt].dqi_flags = 0;
2081                 dqopt->info[cnt].dqi_igrace = 0;
2082                 dqopt->info[cnt].dqi_bgrace = 0;
2083                 dqopt->ops[cnt] = NULL;
2084         }
2085         mutex_unlock(&dqopt->dqonoff_mutex);
2086
2087         /* Skip syncing and setting flags if quota files are hidden */
2088         if (dqopt->flags & DQUOT_QUOTA_SYS_FILE)
2089                 goto put_inodes;
2090
2091         /* Sync the superblock so that buffers with quota data are written to
2092          * disk (and so userspace sees correct data afterwards). */
2093         if (sb->s_op->sync_fs)
2094                 sb->s_op->sync_fs(sb, 1);
2095         sync_blockdev(sb->s_bdev);
2096         /* Now the quota files are just ordinary files and we can set the
2097          * inode flags back. Moreover we discard the pagecache so that
2098          * userspace sees the writes we did bypassing the pagecache. We
2099          * must also discard the blockdev buffers so that we see the
2100          * changes done by userspace on the next quotaon() */
2101         for (cnt = 0; cnt < MAXQUOTAS; cnt++)
2102                 if (toputinode[cnt]) {
2103                         mutex_lock(&dqopt->dqonoff_mutex);
2104                         /* If quota was reenabled in the meantime, we have
2105                          * nothing to do */
2106                         if (!sb_has_quota_loaded(sb, cnt)) {
2107                                 mutex_lock(&toputinode[cnt]->i_mutex);
2108                                 toputinode[cnt]->i_flags &= ~(S_IMMUTABLE |
2109                                   S_NOATIME | S_NOQUOTA);
2110                                 truncate_inode_pages(&toputinode[cnt]->i_data,
2111                                                      0);
2112                                 mutex_unlock(&toputinode[cnt]->i_mutex);
2113                                 mark_inode_dirty_sync(toputinode[cnt]);
2114                         }
2115                         mutex_unlock(&dqopt->dqonoff_mutex);
2116                 }
2117         if (sb->s_bdev)
2118                 invalidate_bdev(sb->s_bdev);
2119 put_inodes:
2120         for (cnt = 0; cnt < MAXQUOTAS; cnt++)
2121                 if (toputinode[cnt]) {
2122                         /* On remount RO, we keep the inode pointer so that we
2123                          * can reenable quota on the subsequent remount RW. We
2124                          * have to check 'flags' variable and not use sb_has_
2125                          * function because another quotaon / quotaoff could
2126                          * change global state before we got here. We refuse
2127                          * to suspend quotas when there is pending delete on
2128                          * the quota file... */
2129                         if (!(flags & DQUOT_SUSPENDED))
2130                                 iput(toputinode[cnt]);
2131                         else if (!toputinode[cnt]->i_nlink)
2132                                 ret = -EBUSY;
2133                 }
2134         return ret;
2135 }
2136 EXPORT_SYMBOL(dquot_disable);
2137
2138 int dquot_quota_off(struct super_block *sb, int type)
2139 {
2140         return dquot_disable(sb, type,
2141                              DQUOT_USAGE_ENABLED | DQUOT_LIMITS_ENABLED);
2142 }
2143 EXPORT_SYMBOL(dquot_quota_off);
2144
2145 /*
2146  *      Turn quotas on on a device
2147  */
2148
2149 /*
2150  * Helper function to turn quotas on when we already have the inode of
2151  * quota file and no quota information is loaded.
2152  */
2153 static int vfs_load_quota_inode(struct inode *inode, int type, int format_id,
2154         unsigned int flags)
2155 {
2156         struct quota_format_type *fmt = find_quota_format(format_id);
2157         struct super_block *sb = inode->i_sb;
2158         struct quota_info *dqopt = sb_dqopt(sb);
2159         int error;
2160         int oldflags = -1;
2161
2162         if (!fmt)
2163                 return -ESRCH;
2164         if (!S_ISREG(inode->i_mode)) {
2165                 error = -EACCES;
2166                 goto out_fmt;
2167         }
2168         if (IS_RDONLY(inode)) {
2169                 error = -EROFS;
2170                 goto out_fmt;
2171         }
2172         if (!sb->s_op->quota_write || !sb->s_op->quota_read) {
2173                 error = -EINVAL;
2174                 goto out_fmt;
2175         }
2176         /* Usage always has to be set... */
2177         if (!(flags & DQUOT_USAGE_ENABLED)) {
2178                 error = -EINVAL;
2179                 goto out_fmt;
2180         }
2181
2182         if (!(dqopt->flags & DQUOT_QUOTA_SYS_FILE)) {
2183                 /* As we bypass the pagecache we must now flush all the
2184                  * dirty data and invalidate caches so that kernel sees
2185                  * changes from userspace. It is not enough to just flush
2186                  * the quota file since if blocksize < pagesize, invalidation
2187                  * of the cache could fail because of other unrelated dirty
2188                  * data */
2189                 sync_filesystem(sb);
2190                 invalidate_bdev(sb->s_bdev);
2191         }
2192         mutex_lock(&dqopt->dqonoff_mutex);
2193         if (sb_has_quota_loaded(sb, type)) {
2194                 error = -EBUSY;
2195                 goto out_lock;
2196         }
2197
2198         if (!(dqopt->flags & DQUOT_QUOTA_SYS_FILE)) {
2199                 /* We don't want quota and atime on quota files (deadlocks
2200                  * possible) Also nobody should write to the file - we use
2201                  * special IO operations which ignore the immutable bit. */
2202                 mutex_lock(&inode->i_mutex);
2203                 oldflags = inode->i_flags & (S_NOATIME | S_IMMUTABLE |
2204                                              S_NOQUOTA);
2205                 inode->i_flags |= S_NOQUOTA | S_NOATIME | S_IMMUTABLE;
2206                 mutex_unlock(&inode->i_mutex);
2207                 /*
2208                  * When S_NOQUOTA is set, remove dquot references as no more
2209                  * references can be added
2210                  */
2211                 __dquot_drop(inode);
2212         }
2213
2214         error = -EIO;
2215         dqopt->files[type] = igrab(inode);
2216         if (!dqopt->files[type])
2217                 goto out_lock;
2218         error = -EINVAL;
2219         if (!fmt->qf_ops->check_quota_file(sb, type))
2220                 goto out_file_init;
2221
2222         dqopt->ops[type] = fmt->qf_ops;
2223         dqopt->info[type].dqi_format = fmt;
2224         dqopt->info[type].dqi_fmt_id = format_id;
2225         INIT_LIST_HEAD(&dqopt->info[type].dqi_dirty_list);
2226         mutex_lock(&dqopt->dqio_mutex);
2227         error = dqopt->ops[type]->read_file_info(sb, type);
2228         if (error < 0) {
2229                 mutex_unlock(&dqopt->dqio_mutex);
2230                 goto out_file_init;
2231         }
2232         if (dqopt->flags & DQUOT_QUOTA_SYS_FILE)
2233                 dqopt->info[type].dqi_flags |= DQF_SYS_FILE;
2234         mutex_unlock(&dqopt->dqio_mutex);
2235         spin_lock(&dq_state_lock);
2236         dqopt->flags |= dquot_state_flag(flags, type);
2237         spin_unlock(&dq_state_lock);
2238
2239         add_dquot_ref(sb, type);
2240         mutex_unlock(&dqopt->dqonoff_mutex);
2241
2242         return 0;
2243
2244 out_file_init:
2245         dqopt->files[type] = NULL;
2246         iput(inode);
2247 out_lock:
2248         if (oldflags != -1) {
2249                 mutex_lock(&inode->i_mutex);
2250                 /* Set the flags back (in the case of accidental quotaon()
2251                  * on a wrong file we don't want to mess up the flags) */
2252                 inode->i_flags &= ~(S_NOATIME | S_NOQUOTA | S_IMMUTABLE);
2253                 inode->i_flags |= oldflags;
2254                 mutex_unlock(&inode->i_mutex);
2255         }
2256         mutex_unlock(&dqopt->dqonoff_mutex);
2257 out_fmt:
2258         put_quota_format(fmt);
2259
2260         return error; 
2261 }
2262
2263 /* Reenable quotas on remount RW */
2264 int dquot_resume(struct super_block *sb, int type)
2265 {
2266         struct quota_info *dqopt = sb_dqopt(sb);
2267         struct inode *inode;
2268         int ret = 0, cnt;
2269         unsigned int flags;
2270
2271         for (cnt = 0; cnt < MAXQUOTAS; cnt++) {
2272                 if (type != -1 && cnt != type)
2273                         continue;
2274
2275                 mutex_lock(&dqopt->dqonoff_mutex);
2276                 if (!sb_has_quota_suspended(sb, cnt)) {
2277                         mutex_unlock(&dqopt->dqonoff_mutex);
2278                         continue;
2279                 }
2280                 inode = dqopt->files[cnt];
2281                 dqopt->files[cnt] = NULL;
2282                 spin_lock(&dq_state_lock);
2283                 flags = dqopt->flags & dquot_state_flag(DQUOT_USAGE_ENABLED |
2284                                                         DQUOT_LIMITS_ENABLED,
2285                                                         cnt);
2286                 dqopt->flags &= ~dquot_state_flag(DQUOT_STATE_FLAGS, cnt);
2287                 spin_unlock(&dq_state_lock);
2288                 mutex_unlock(&dqopt->dqonoff_mutex);
2289
2290                 flags = dquot_generic_flag(flags, cnt);
2291                 ret = vfs_load_quota_inode(inode, cnt,
2292                                 dqopt->info[cnt].dqi_fmt_id, flags);
2293                 iput(inode);
2294         }
2295
2296         return ret;
2297 }
2298 EXPORT_SYMBOL(dquot_resume);
2299
2300 int dquot_quota_on(struct super_block *sb, int type, int format_id,
2301                    struct path *path)
2302 {
2303         int error = security_quota_on(path->dentry);
2304         if (error)
2305                 return error;
2306         /* Quota file not on the same filesystem? */
2307         if (path->dentry->d_sb != sb)
2308                 error = -EXDEV;
2309         else
2310                 error = vfs_load_quota_inode(path->dentry->d_inode, type,
2311                                              format_id, DQUOT_USAGE_ENABLED |
2312                                              DQUOT_LIMITS_ENABLED);
2313         return error;
2314 }
2315 EXPORT_SYMBOL(dquot_quota_on);
2316
2317 /*
2318  * More powerful function for turning on quotas allowing setting
2319  * of individual quota flags
2320  */
2321 int dquot_enable(struct inode *inode, int type, int format_id,
2322                  unsigned int flags)
2323 {
2324         int ret = 0;
2325         struct super_block *sb = inode->i_sb;
2326         struct quota_info *dqopt = sb_dqopt(sb);
2327
2328         /* Just unsuspend quotas? */
2329         BUG_ON(flags & DQUOT_SUSPENDED);
2330
2331         if (!flags)
2332                 return 0;
2333         /* Just updating flags needed? */
2334         if (sb_has_quota_loaded(sb, type)) {
2335                 mutex_lock(&dqopt->dqonoff_mutex);
2336                 /* Now do a reliable test... */
2337                 if (!sb_has_quota_loaded(sb, type)) {
2338                         mutex_unlock(&dqopt->dqonoff_mutex);
2339                         goto load_quota;
2340                 }
2341                 if (flags & DQUOT_USAGE_ENABLED &&
2342                     sb_has_quota_usage_enabled(sb, type)) {
2343                         ret = -EBUSY;
2344                         goto out_lock;
2345                 }
2346                 if (flags & DQUOT_LIMITS_ENABLED &&
2347                     sb_has_quota_limits_enabled(sb, type)) {
2348                         ret = -EBUSY;
2349                         goto out_lock;
2350                 }
2351                 spin_lock(&dq_state_lock);
2352                 sb_dqopt(sb)->flags |= dquot_state_flag(flags, type);
2353                 spin_unlock(&dq_state_lock);
2354 out_lock:
2355                 mutex_unlock(&dqopt->dqonoff_mutex);
2356                 return ret;
2357         }
2358
2359 load_quota:
2360         return vfs_load_quota_inode(inode, type, format_id, flags);
2361 }
2362 EXPORT_SYMBOL(dquot_enable);
2363
2364 /*
2365  * This function is used when filesystem needs to initialize quotas
2366  * during mount time.
2367  */
2368 int dquot_quota_on_mount(struct super_block *sb, char *qf_name,
2369                 int format_id, int type)
2370 {
2371         struct dentry *dentry;
2372         int error;
2373
2374         mutex_lock(&sb->s_root->d_inode->i_mutex);
2375         dentry = lookup_one_len(qf_name, sb->s_root, strlen(qf_name));
2376         mutex_unlock(&sb->s_root->d_inode->i_mutex);
2377         if (IS_ERR(dentry))
2378                 return PTR_ERR(dentry);
2379
2380         if (!dentry->d_inode) {
2381                 error = -ENOENT;
2382                 goto out;
2383         }
2384
2385         error = security_quota_on(dentry);
2386         if (!error)
2387                 error = vfs_load_quota_inode(dentry->d_inode, type, format_id,
2388                                 DQUOT_USAGE_ENABLED | DQUOT_LIMITS_ENABLED);
2389
2390 out:
2391         dput(dentry);
2392         return error;
2393 }
2394 EXPORT_SYMBOL(dquot_quota_on_mount);
2395
2396 static inline qsize_t qbtos(qsize_t blocks)
2397 {
2398         return blocks << QIF_DQBLKSIZE_BITS;
2399 }
2400
2401 static inline qsize_t stoqb(qsize_t space)
2402 {
2403         return (space + QIF_DQBLKSIZE - 1) >> QIF_DQBLKSIZE_BITS;
2404 }
2405
2406 /* Generic routine for getting common part of quota structure */
2407 static void do_get_dqblk(struct dquot *dquot, struct fs_disk_quota *di)
2408 {
2409         struct mem_dqblk *dm = &dquot->dq_dqb;
2410
2411         memset(di, 0, sizeof(*di));
2412         di->d_version = FS_DQUOT_VERSION;
2413         di->d_flags = dquot->dq_id.type == USRQUOTA ?
2414                         FS_USER_QUOTA : FS_GROUP_QUOTA;
2415         di->d_id = from_kqid_munged(current_user_ns(), dquot->dq_id);
2416
2417         spin_lock(&dq_data_lock);
2418         di->d_blk_hardlimit = stoqb(dm->dqb_bhardlimit);
2419         di->d_blk_softlimit = stoqb(dm->dqb_bsoftlimit);
2420         di->d_ino_hardlimit = dm->dqb_ihardlimit;
2421         di->d_ino_softlimit = dm->dqb_isoftlimit;
2422         di->d_bcount = dm->dqb_curspace + dm->dqb_rsvspace;
2423         di->d_icount = dm->dqb_curinodes;
2424         di->d_btimer = dm->dqb_btime;
2425         di->d_itimer = dm->dqb_itime;
2426         spin_unlock(&dq_data_lock);
2427 }
2428
2429 int dquot_get_dqblk(struct super_block *sb, struct kqid qid,
2430                     struct fs_disk_quota *di)
2431 {
2432         struct dquot *dquot;
2433
2434         dquot = dqget(sb, qid);
2435         if (!dquot)
2436                 return -ESRCH;
2437         do_get_dqblk(dquot, di);
2438         dqput(dquot);
2439
2440         return 0;
2441 }
2442 EXPORT_SYMBOL(dquot_get_dqblk);
2443
2444 #define VFS_FS_DQ_MASK \
2445         (FS_DQ_BCOUNT | FS_DQ_BSOFT | FS_DQ_BHARD | \
2446          FS_DQ_ICOUNT | FS_DQ_ISOFT | FS_DQ_IHARD | \
2447          FS_DQ_BTIMER | FS_DQ_ITIMER)
2448
2449 /* Generic routine for setting common part of quota structure */
2450 static int do_set_dqblk(struct dquot *dquot, struct fs_disk_quota *di)
2451 {
2452         struct mem_dqblk *dm = &dquot->dq_dqb;
2453         int check_blim = 0, check_ilim = 0;
2454         struct mem_dqinfo *dqi = &sb_dqopt(dquot->dq_sb)->info[dquot->dq_id.type];
2455
2456         if (di->d_fieldmask & ~VFS_FS_DQ_MASK)
2457                 return -EINVAL;
2458
2459         if (((di->d_fieldmask & FS_DQ_BSOFT) &&
2460              (di->d_blk_softlimit > dqi->dqi_maxblimit)) ||
2461             ((di->d_fieldmask & FS_DQ_BHARD) &&
2462              (di->d_blk_hardlimit > dqi->dqi_maxblimit)) ||
2463             ((di->d_fieldmask & FS_DQ_ISOFT) &&
2464              (di->d_ino_softlimit > dqi->dqi_maxilimit)) ||
2465             ((di->d_fieldmask & FS_DQ_IHARD) &&
2466              (di->d_ino_hardlimit > dqi->dqi_maxilimit)))
2467                 return -ERANGE;
2468
2469         spin_lock(&dq_data_lock);
2470         if (di->d_fieldmask & FS_DQ_BCOUNT) {
2471                 dm->dqb_curspace = di->d_bcount - dm->dqb_rsvspace;
2472                 check_blim = 1;
2473                 set_bit(DQ_LASTSET_B + QIF_SPACE_B, &dquot->dq_flags);
2474         }
2475
2476         if (di->d_fieldmask & FS_DQ_BSOFT)
2477                 dm->dqb_bsoftlimit = qbtos(di->d_blk_softlimit);
2478         if (di->d_fieldmask & FS_DQ_BHARD)
2479                 dm->dqb_bhardlimit = qbtos(di->d_blk_hardlimit);
2480         if (di->d_fieldmask & (FS_DQ_BSOFT | FS_DQ_BHARD)) {
2481                 check_blim = 1;
2482                 set_bit(DQ_LASTSET_B + QIF_BLIMITS_B, &dquot->dq_flags);
2483         }
2484
2485         if (di->d_fieldmask & FS_DQ_ICOUNT) {
2486                 dm->dqb_curinodes = di->d_icount;
2487                 check_ilim = 1;
2488                 set_bit(DQ_LASTSET_B + QIF_INODES_B, &dquot->dq_flags);
2489         }
2490
2491         if (di->d_fieldmask & FS_DQ_ISOFT)
2492                 dm->dqb_isoftlimit = di->d_ino_softlimit;
2493         if (di->d_fieldmask & FS_DQ_IHARD)
2494                 dm->dqb_ihardlimit = di->d_ino_hardlimit;
2495         if (di->d_fieldmask & (FS_DQ_ISOFT | FS_DQ_IHARD)) {
2496                 check_ilim = 1;
2497                 set_bit(DQ_LASTSET_B + QIF_ILIMITS_B, &dquot->dq_flags);
2498         }
2499
2500         if (di->d_fieldmask & FS_DQ_BTIMER) {
2501                 dm->dqb_btime = di->d_btimer;
2502                 check_blim = 1;
2503                 set_bit(DQ_LASTSET_B + QIF_BTIME_B, &dquot->dq_flags);
2504         }
2505
2506         if (di->d_fieldmask & FS_DQ_ITIMER) {
2507                 dm->dqb_itime = di->d_itimer;
2508                 check_ilim = 1;
2509                 set_bit(DQ_LASTSET_B + QIF_ITIME_B, &dquot->dq_flags);
2510         }
2511
2512         if (check_blim) {
2513                 if (!dm->dqb_bsoftlimit ||
2514                     dm->dqb_curspace < dm->dqb_bsoftlimit) {
2515                         dm->dqb_btime = 0;
2516                         clear_bit(DQ_BLKS_B, &dquot->dq_flags);
2517                 } else if (!(di->d_fieldmask & FS_DQ_BTIMER))
2518                         /* Set grace only if user hasn't provided his own... */
2519                         dm->dqb_btime = get_seconds() + dqi->dqi_bgrace;
2520         }
2521         if (check_ilim) {
2522                 if (!dm->dqb_isoftlimit ||
2523                     dm->dqb_curinodes < dm->dqb_isoftlimit) {
2524                         dm->dqb_itime = 0;
2525                         clear_bit(DQ_INODES_B, &dquot->dq_flags);
2526                 } else if (!(di->d_fieldmask & FS_DQ_ITIMER))
2527                         /* Set grace only if user hasn't provided his own... */
2528                         dm->dqb_itime = get_seconds() + dqi->dqi_igrace;
2529         }
2530         if (dm->dqb_bhardlimit || dm->dqb_bsoftlimit || dm->dqb_ihardlimit ||
2531             dm->dqb_isoftlimit)
2532                 clear_bit(DQ_FAKE_B, &dquot->dq_flags);
2533         else
2534                 set_bit(DQ_FAKE_B, &dquot->dq_flags);
2535         spin_unlock(&dq_data_lock);
2536         mark_dquot_dirty(dquot);
2537
2538         return 0;
2539 }
2540
2541 int dquot_set_dqblk(struct super_block *sb, struct kqid qid,
2542                   struct fs_disk_quota *di)
2543 {
2544         struct dquot *dquot;
2545         int rc;
2546
2547         dquot = dqget(sb, qid);
2548         if (!dquot) {
2549                 rc = -ESRCH;
2550                 goto out;
2551         }
2552         rc = do_set_dqblk(dquot, di);
2553         dqput(dquot);
2554 out:
2555         return rc;
2556 }
2557 EXPORT_SYMBOL(dquot_set_dqblk);
2558
2559 /* Generic routine for getting common part of quota file information */
2560 int dquot_get_dqinfo(struct super_block *sb, int type, struct if_dqinfo *ii)
2561 {
2562         struct mem_dqinfo *mi;
2563   
2564         mutex_lock(&sb_dqopt(sb)->dqonoff_mutex);
2565         if (!sb_has_quota_active(sb, type)) {
2566                 mutex_unlock(&sb_dqopt(sb)->dqonoff_mutex);
2567                 return -ESRCH;
2568         }
2569         mi = sb_dqopt(sb)->info + type;
2570         spin_lock(&dq_data_lock);
2571         ii->dqi_bgrace = mi->dqi_bgrace;
2572         ii->dqi_igrace = mi->dqi_igrace;
2573         ii->dqi_flags = mi->dqi_flags & DQF_GETINFO_MASK;
2574         ii->dqi_valid = IIF_ALL;
2575         spin_unlock(&dq_data_lock);
2576         mutex_unlock(&sb_dqopt(sb)->dqonoff_mutex);
2577         return 0;
2578 }
2579 EXPORT_SYMBOL(dquot_get_dqinfo);
2580
2581 /* Generic routine for setting common part of quota file information */
2582 int dquot_set_dqinfo(struct super_block *sb, int type, struct if_dqinfo *ii)
2583 {
2584         struct mem_dqinfo *mi;
2585         int err = 0;
2586
2587         mutex_lock(&sb_dqopt(sb)->dqonoff_mutex);
2588         if (!sb_has_quota_active(sb, type)) {
2589                 err = -ESRCH;
2590                 goto out;
2591         }
2592         mi = sb_dqopt(sb)->info + type;
2593         spin_lock(&dq_data_lock);
2594         if (ii->dqi_valid & IIF_BGRACE)
2595                 mi->dqi_bgrace = ii->dqi_bgrace;
2596         if (ii->dqi_valid & IIF_IGRACE)
2597                 mi->dqi_igrace = ii->dqi_igrace;
2598         if (ii->dqi_valid & IIF_FLAGS)
2599                 mi->dqi_flags = (mi->dqi_flags & ~DQF_SETINFO_MASK) |
2600                                 (ii->dqi_flags & DQF_SETINFO_MASK);
2601         spin_unlock(&dq_data_lock);
2602         mark_info_dirty(sb, type);
2603         /* Force write to disk */
2604         sb->dq_op->write_info(sb, type);
2605 out:
2606         mutex_unlock(&sb_dqopt(sb)->dqonoff_mutex);
2607         return err;
2608 }
2609 EXPORT_SYMBOL(dquot_set_dqinfo);
2610
2611 const struct quotactl_ops dquot_quotactl_ops = {
2612         .quota_on       = dquot_quota_on,
2613         .quota_off      = dquot_quota_off,
2614         .quota_sync     = dquot_quota_sync,
2615         .get_info       = dquot_get_dqinfo,
2616         .set_info       = dquot_set_dqinfo,
2617         .get_dqblk      = dquot_get_dqblk,
2618         .set_dqblk      = dquot_set_dqblk
2619 };
2620 EXPORT_SYMBOL(dquot_quotactl_ops);
2621
2622 static int do_proc_dqstats(struct ctl_table *table, int write,
2623                      void __user *buffer, size_t *lenp, loff_t *ppos)
2624 {
2625         unsigned int type = (int *)table->data - dqstats.stat;
2626
2627         /* Update global table */
2628         dqstats.stat[type] =
2629                         percpu_counter_sum_positive(&dqstats.counter[type]);
2630         return proc_dointvec(table, write, buffer, lenp, ppos);
2631 }
2632
2633 static struct ctl_table fs_dqstats_table[] = {
2634         {
2635                 .procname       = "lookups",
2636                 .data           = &dqstats.stat[DQST_LOOKUPS],
2637                 .maxlen         = sizeof(int),
2638                 .mode           = 0444,
2639                 .proc_handler   = do_proc_dqstats,
2640         },
2641         {
2642                 .procname       = "drops",
2643                 .data           = &dqstats.stat[DQST_DROPS],
2644                 .maxlen         = sizeof(int),
2645                 .mode           = 0444,
2646                 .proc_handler   = do_proc_dqstats,
2647         },
2648         {
2649                 .procname       = "reads",
2650                 .data           = &dqstats.stat[DQST_READS],
2651                 .maxlen         = sizeof(int),
2652                 .mode           = 0444,
2653                 .proc_handler   = do_proc_dqstats,
2654         },
2655         {
2656                 .procname       = "writes",
2657                 .data           = &dqstats.stat[DQST_WRITES],
2658                 .maxlen         = sizeof(int),
2659                 .mode           = 0444,
2660                 .proc_handler   = do_proc_dqstats,
2661         },
2662         {
2663                 .procname       = "cache_hits",
2664                 .data           = &dqstats.stat[DQST_CACHE_HITS],
2665                 .maxlen         = sizeof(int),
2666                 .mode           = 0444,
2667                 .proc_handler   = do_proc_dqstats,
2668         },
2669         {
2670                 .procname       = "allocated_dquots",
2671                 .data           = &dqstats.stat[DQST_ALLOC_DQUOTS],
2672                 .maxlen         = sizeof(int),
2673                 .mode           = 0444,
2674                 .proc_handler   = do_proc_dqstats,
2675         },
2676         {
2677                 .procname       = "free_dquots",
2678                 .data           = &dqstats.stat[DQST_FREE_DQUOTS],
2679                 .maxlen         = sizeof(int),
2680                 .mode           = 0444,
2681                 .proc_handler   = do_proc_dqstats,
2682         },
2683         {
2684                 .procname       = "syncs",
2685                 .data           = &dqstats.stat[DQST_SYNCS],
2686                 .maxlen         = sizeof(int),
2687                 .mode           = 0444,
2688                 .proc_handler   = do_proc_dqstats,
2689         },
2690 #ifdef CONFIG_PRINT_QUOTA_WARNING
2691         {
2692                 .procname       = "warnings",
2693                 .data           = &flag_print_warnings,
2694                 .maxlen         = sizeof(int),
2695                 .mode           = 0644,
2696                 .proc_handler   = proc_dointvec,
2697         },
2698 #endif
2699         { },
2700 };
2701
2702 static struct ctl_table fs_table[] = {
2703         {
2704                 .procname       = "quota",
2705                 .mode           = 0555,
2706                 .child          = fs_dqstats_table,
2707         },
2708         { },
2709 };
2710
2711 static struct ctl_table sys_table[] = {
2712         {
2713                 .procname       = "fs",
2714                 .mode           = 0555,
2715                 .child          = fs_table,
2716         },
2717         { },
2718 };
2719
2720 static int __init dquot_init(void)
2721 {
2722         int i, ret;
2723         unsigned long nr_hash, order;
2724
2725         printk(KERN_NOTICE "VFS: Disk quotas %s\n", __DQUOT_VERSION__);
2726
2727         register_sysctl_table(sys_table);
2728
2729         dquot_cachep = kmem_cache_create("dquot",
2730                         sizeof(struct dquot), sizeof(unsigned long) * 4,
2731                         (SLAB_HWCACHE_ALIGN|SLAB_RECLAIM_ACCOUNT|
2732                                 SLAB_MEM_SPREAD|SLAB_PANIC),
2733                         NULL);
2734
2735         order = 0;
2736         dquot_hash = (struct hlist_head *)__get_free_pages(GFP_ATOMIC, order);
2737         if (!dquot_hash)
2738                 panic("Cannot create dquot hash table");
2739
2740         for (i = 0; i < _DQST_DQSTAT_LAST; i++) {
2741                 ret = percpu_counter_init(&dqstats.counter[i], 0);
2742                 if (ret)
2743                         panic("Cannot create dquot stat counters");
2744         }
2745
2746         /* Find power-of-two hlist_heads which can fit into allocation */
2747         nr_hash = (1UL << order) * PAGE_SIZE / sizeof(struct hlist_head);
2748         dq_hash_bits = 0;
2749         do {
2750                 dq_hash_bits++;
2751         } while (nr_hash >> dq_hash_bits);
2752         dq_hash_bits--;
2753
2754         nr_hash = 1UL << dq_hash_bits;
2755         dq_hash_mask = nr_hash - 1;
2756         for (i = 0; i < nr_hash; i++)
2757                 INIT_HLIST_HEAD(dquot_hash + i);
2758
2759         printk("Dquot-cache hash table entries: %ld (order %ld, %ld bytes)\n",
2760                         nr_hash, order, (PAGE_SIZE << order));
2761
2762         register_shrinker(&dqcache_shrinker);
2763
2764         return 0;
2765 }
2766 module_init(dquot_init);