Merge tag 'for-linville-20140717' of git://github.com/kvalo/ath
[firefly-linux-kernel-4.4.55.git] / fs / nfsd / nfs4xdr.c
index 18881f34737ad89e8259042fd33ee5d6a9c26edc..2d305a121f3793685e81475c7b51b308d7af2dc4 100644 (file)
@@ -98,11 +98,6 @@ xdr_error:                                   \
        status = nfserr_bad_xdr;                \
        goto out
 
-#define READ32(x)         (x) = ntohl(*p++)
-#define READ64(x)         do {                 \
-       (x) = (u64)ntohl(*p++) << 32;           \
-       (x) |= ntohl(*p++);                     \
-} while (0)
 #define READMEM(x,nbytes) do {                 \
        x = (char *)p;                          \
        p += XDR_QUADLEN(nbytes);               \
@@ -248,17 +243,17 @@ nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval)
        bmval[2] = 0;
 
        READ_BUF(4);
-       READ32(bmlen);
+       bmlen = be32_to_cpup(p++);
        if (bmlen > 1000)
                goto xdr_error;
 
        READ_BUF(bmlen << 2);
        if (bmlen > 0)
-               READ32(bmval[0]);
+               bmval[0] = be32_to_cpup(p++);
        if (bmlen > 1)
-               READ32(bmval[1]);
+               bmval[1] = be32_to_cpup(p++);
        if (bmlen > 2)
-               READ32(bmval[2]);
+               bmval[2] = be32_to_cpup(p++);
 
        DECODE_TAIL;
 }
@@ -270,6 +265,7 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
 {
        int expected_len, len = 0;
        u32 dummy32;
+       u64 sec;
        char *buf;
 
        DECODE_HEAD;
@@ -278,12 +274,12 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
                return status;
 
        READ_BUF(4);
-       READ32(expected_len);
+       expected_len = be32_to_cpup(p++);
 
        if (bmval[0] & FATTR4_WORD0_SIZE) {
                READ_BUF(8);
                len += 8;
-               READ64(iattr->ia_size);
+               p = xdr_decode_hyper(p, &iattr->ia_size);
                iattr->ia_valid |= ATTR_SIZE;
        }
        if (bmval[0] & FATTR4_WORD0_ACL) {
@@ -291,7 +287,7 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
                struct nfs4_ace *ace;
 
                READ_BUF(4); len += 4;
-               READ32(nace);
+               nace = be32_to_cpup(p++);
 
                if (nace > NFS4_ACL_MAX)
                        return nfserr_fbig;
@@ -305,10 +301,10 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
                (*acl)->naces = nace;
                for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) {
                        READ_BUF(16); len += 16;
-                       READ32(ace->type);
-                       READ32(ace->flag);
-                       READ32(ace->access_mask);
-                       READ32(dummy32);
+                       ace->type = be32_to_cpup(p++);
+                       ace->flag = be32_to_cpup(p++);
+                       ace->access_mask = be32_to_cpup(p++);
+                       dummy32 = be32_to_cpup(p++);
                        READ_BUF(dummy32);
                        len += XDR_QUADLEN(dummy32) << 2;
                        READMEM(buf, dummy32);
@@ -330,14 +326,14 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
        if (bmval[1] & FATTR4_WORD1_MODE) {
                READ_BUF(4);
                len += 4;
-               READ32(iattr->ia_mode);
+               iattr->ia_mode = be32_to_cpup(p++);
                iattr->ia_mode &= (S_IFMT | S_IALLUGO);
                iattr->ia_valid |= ATTR_MODE;
        }
        if (bmval[1] & FATTR4_WORD1_OWNER) {
                READ_BUF(4);
                len += 4;
-               READ32(dummy32);
+               dummy32 = be32_to_cpup(p++);
                READ_BUF(dummy32);
                len += (XDR_QUADLEN(dummy32) << 2);
                READMEM(buf, dummy32);
@@ -348,7 +344,7 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
        if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
                READ_BUF(4);
                len += 4;
-               READ32(dummy32);
+               dummy32 = be32_to_cpup(p++);
                READ_BUF(dummy32);
                len += (XDR_QUADLEN(dummy32) << 2);
                READMEM(buf, dummy32);
@@ -359,15 +355,16 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
        if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
                READ_BUF(4);
                len += 4;
-               READ32(dummy32);
+               dummy32 = be32_to_cpup(p++);
                switch (dummy32) {
                case NFS4_SET_TO_CLIENT_TIME:
                        /* We require the high 32 bits of 'seconds' to be 0, and we ignore
                           all 32 bits of 'nseconds'. */
                        READ_BUF(12);
                        len += 12;
-                       READ64(iattr->ia_atime.tv_sec);
-                       READ32(iattr->ia_atime.tv_nsec);
+                       p = xdr_decode_hyper(p, &sec);
+                       iattr->ia_atime.tv_sec = (time_t)sec;
+                       iattr->ia_atime.tv_nsec = be32_to_cpup(p++);
                        if (iattr->ia_atime.tv_nsec >= (u32)1000000000)
                                return nfserr_inval;
                        iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
@@ -382,15 +379,16 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
        if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
                READ_BUF(4);
                len += 4;
-               READ32(dummy32);
+               dummy32 = be32_to_cpup(p++);
                switch (dummy32) {
                case NFS4_SET_TO_CLIENT_TIME:
                        /* We require the high 32 bits of 'seconds' to be 0, and we ignore
                           all 32 bits of 'nseconds'. */
                        READ_BUF(12);
                        len += 12;
-                       READ64(iattr->ia_mtime.tv_sec);
-                       READ32(iattr->ia_mtime.tv_nsec);
+                       p = xdr_decode_hyper(p, &sec);
+                       iattr->ia_mtime.tv_sec = sec;
+                       iattr->ia_mtime.tv_nsec = be32_to_cpup(p++);
                        if (iattr->ia_mtime.tv_nsec >= (u32)1000000000)
                                return nfserr_inval;
                        iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
@@ -408,13 +406,13 @@ nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
        if (bmval[2] & FATTR4_WORD2_SECURITY_LABEL) {
                READ_BUF(4);
                len += 4;
-               READ32(dummy32); /* lfs: we don't use it */
+               dummy32 = be32_to_cpup(p++); /* lfs: we don't use it */
                READ_BUF(4);
                len += 4;
-               READ32(dummy32); /* pi: we don't use it either */
+               dummy32 = be32_to_cpup(p++); /* pi: we don't use it either */
                READ_BUF(4);
                len += 4;
-               READ32(dummy32);
+               dummy32 = be32_to_cpup(p++);
                READ_BUF(dummy32);
                if (dummy32 > NFSD4_MAX_SEC_LABEL_LEN)
                        return nfserr_badlabel;
@@ -445,7 +443,7 @@ nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid)
        DECODE_HEAD;
 
        READ_BUF(sizeof(stateid_t));
-       READ32(sid->si_generation);
+       sid->si_generation = be32_to_cpup(p++);
        COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
 
        DECODE_TAIL;
@@ -457,7 +455,7 @@ nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(access->ac_req_access);
+       access->ac_req_access = be32_to_cpup(p++);
 
        DECODE_TAIL;
 }
@@ -472,7 +470,7 @@ static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_
 
        /* callback_sec_params4 */
        READ_BUF(4);
-       READ32(nr_secflavs);
+       nr_secflavs = be32_to_cpup(p++);
        if (nr_secflavs)
                cbs->flavor = (u32)(-1);
        else
@@ -480,7 +478,7 @@ static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_
                cbs->flavor = 0;
        for (i = 0; i < nr_secflavs; ++i) {
                READ_BUF(4);
-               READ32(dummy);
+               dummy = be32_to_cpup(p++);
                switch (dummy) {
                case RPC_AUTH_NULL:
                        /* Nothing to read */
@@ -490,21 +488,21 @@ static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_
                case RPC_AUTH_UNIX:
                        READ_BUF(8);
                        /* stamp */
-                       READ32(dummy);
+                       dummy = be32_to_cpup(p++);
 
                        /* machine name */
-                       READ32(dummy);
+                       dummy = be32_to_cpup(p++);
                        READ_BUF(dummy);
                        SAVEMEM(machine_name, dummy);
 
                        /* uid, gid */
                        READ_BUF(8);
-                       READ32(uid);
-                       READ32(gid);
+                       uid = be32_to_cpup(p++);
+                       gid = be32_to_cpup(p++);
 
                        /* more gids */
                        READ_BUF(4);
-                       READ32(dummy);
+                       dummy = be32_to_cpup(p++);
                        READ_BUF(dummy * 4);
                        if (cbs->flavor == (u32)(-1)) {
                                kuid_t kuid = make_kuid(&init_user_ns, uid);
@@ -524,14 +522,14 @@ static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_
                                "not supported!\n");
                        READ_BUF(8);
                        /* gcbp_service */
-                       READ32(dummy);
+                       dummy = be32_to_cpup(p++);
                        /* gcbp_handle_from_server */
-                       READ32(dummy);
+                       dummy = be32_to_cpup(p++);
                        READ_BUF(dummy);
                        p += XDR_QUADLEN(dummy);
                        /* gcbp_handle_from_client */
                        READ_BUF(4);
-                       READ32(dummy);
+                       dummy = be32_to_cpup(p++);
                        READ_BUF(dummy);
                        break;
                default:
@@ -547,7 +545,7 @@ static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, stru
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(bc->bc_cb_program);
+       bc->bc_cb_program = be32_to_cpup(p++);
        nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec);
 
        DECODE_TAIL;
@@ -559,7 +557,7 @@ static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp,
 
        READ_BUF(NFS4_MAX_SESSIONID_LEN + 8);
        COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
-       READ32(bcts->dir);
+       bcts->dir = be32_to_cpup(p++);
        /* XXX: skipping ctsa_use_conn_in_rdma_mode.  Perhaps Tom Tucker
         * could help us figure out we should be using it. */
        DECODE_TAIL;
@@ -571,7 +569,7 @@ nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(close->cl_seqid);
+       close->cl_seqid = be32_to_cpup(p++);
        return nfsd4_decode_stateid(argp, &close->cl_stateid);
 
        DECODE_TAIL;
@@ -584,8 +582,8 @@ nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit
        DECODE_HEAD;
 
        READ_BUF(12);
-       READ64(commit->co_offset);
-       READ32(commit->co_count);
+       p = xdr_decode_hyper(p, &commit->co_offset);
+       commit->co_count = be32_to_cpup(p++);
 
        DECODE_TAIL;
 }
@@ -596,19 +594,19 @@ nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(create->cr_type);
+       create->cr_type = be32_to_cpup(p++);
        switch (create->cr_type) {
        case NF4LNK:
                READ_BUF(4);
-               READ32(create->cr_linklen);
+               create->cr_linklen = be32_to_cpup(p++);
                READ_BUF(create->cr_linklen);
                SAVEMEM(create->cr_linkname, create->cr_linklen);
                break;
        case NF4BLK:
        case NF4CHR:
                READ_BUF(8);
-               READ32(create->cr_specdata1);
-               READ32(create->cr_specdata2);
+               create->cr_specdata1 = be32_to_cpup(p++);
+               create->cr_specdata2 = be32_to_cpup(p++);
                break;
        case NF4SOCK:
        case NF4FIFO:
@@ -618,7 +616,7 @@ nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create
        }
 
        READ_BUF(4);
-       READ32(create->cr_namelen);
+       create->cr_namelen = be32_to_cpup(p++);
        READ_BUF(create->cr_namelen);
        SAVEMEM(create->cr_name, create->cr_namelen);
        if ((status = check_filename(create->cr_name, create->cr_namelen)))
@@ -650,7 +648,7 @@ nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(link->li_namelen);
+       link->li_namelen = be32_to_cpup(p++);
        READ_BUF(link->li_namelen);
        SAVEMEM(link->li_name, link->li_namelen);
        if ((status = check_filename(link->li_name, link->li_namelen)))
@@ -668,24 +666,24 @@ nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
        * type, reclaim(boolean), offset, length, new_lock_owner(boolean)
        */
        READ_BUF(28);
-       READ32(lock->lk_type);
+       lock->lk_type = be32_to_cpup(p++);
        if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
                goto xdr_error;
-       READ32(lock->lk_reclaim);
-       READ64(lock->lk_offset);
-       READ64(lock->lk_length);
-       READ32(lock->lk_is_new);
+       lock->lk_reclaim = be32_to_cpup(p++);
+       p = xdr_decode_hyper(p, &lock->lk_offset);
+       p = xdr_decode_hyper(p, &lock->lk_length);
+       lock->lk_is_new = be32_to_cpup(p++);
 
        if (lock->lk_is_new) {
                READ_BUF(4);
-               READ32(lock->lk_new_open_seqid);
+               lock->lk_new_open_seqid = be32_to_cpup(p++);
                status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid);
                if (status)
                        return status;
                READ_BUF(8 + sizeof(clientid_t));
-               READ32(lock->lk_new_lock_seqid);
+               lock->lk_new_lock_seqid = be32_to_cpup(p++);
                COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t));
-               READ32(lock->lk_new_owner.len);
+               lock->lk_new_owner.len = be32_to_cpup(p++);
                READ_BUF(lock->lk_new_owner.len);
                READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len);
        } else {
@@ -693,7 +691,7 @@ nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
                if (status)
                        return status;
                READ_BUF(4);
-               READ32(lock->lk_old_lock_seqid);
+               lock->lk_old_lock_seqid = be32_to_cpup(p++);
        }
 
        DECODE_TAIL;
@@ -705,13 +703,13 @@ nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
        DECODE_HEAD;
                        
        READ_BUF(32);
-       READ32(lockt->lt_type);
+       lockt->lt_type = be32_to_cpup(p++);
        if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
                goto xdr_error;
-       READ64(lockt->lt_offset);
-       READ64(lockt->lt_length);
+       p = xdr_decode_hyper(p, &lockt->lt_offset);
+       p = xdr_decode_hyper(p, &lockt->lt_length);
        COPYMEM(&lockt->lt_clientid, 8);
-       READ32(lockt->lt_owner.len);
+       lockt->lt_owner.len = be32_to_cpup(p++);
        READ_BUF(lockt->lt_owner.len);
        READMEM(lockt->lt_owner.data, lockt->lt_owner.len);
 
@@ -724,16 +722,16 @@ nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
        DECODE_HEAD;
 
        READ_BUF(8);
-       READ32(locku->lu_type);
+       locku->lu_type = be32_to_cpup(p++);
        if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
                goto xdr_error;
-       READ32(locku->lu_seqid);
+       locku->lu_seqid = be32_to_cpup(p++);
        status = nfsd4_decode_stateid(argp, &locku->lu_stateid);
        if (status)
                return status;
        READ_BUF(16);
-       READ64(locku->lu_offset);
-       READ64(locku->lu_length);
+       p = xdr_decode_hyper(p, &locku->lu_offset);
+       p = xdr_decode_hyper(p, &locku->lu_length);
 
        DECODE_TAIL;
 }
@@ -744,7 +742,7 @@ nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(lookup->lo_len);
+       lookup->lo_len = be32_to_cpup(p++);
        READ_BUF(lookup->lo_len);
        SAVEMEM(lookup->lo_name, lookup->lo_len);
        if ((status = check_filename(lookup->lo_name, lookup->lo_len)))
@@ -759,7 +757,7 @@ static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *sh
        u32 w;
 
        READ_BUF(4);
-       READ32(w);
+       w = be32_to_cpup(p++);
        *share_access = w & NFS4_SHARE_ACCESS_MASK;
        *deleg_want = w & NFS4_SHARE_WANT_MASK;
        if (deleg_when)
@@ -811,7 +809,7 @@ static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
        __be32 *p;
 
        READ_BUF(4);
-       READ32(*x);
+       *x = be32_to_cpup(p++);
        /* Note: unlinke access bits, deny bits may be zero. */
        if (*x & ~NFS4_SHARE_DENY_BOTH)
                return nfserr_bad_xdr;
@@ -825,7 +823,7 @@ static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_ne
        __be32 *p;
 
        READ_BUF(4);
-       READ32(o->len);
+       o->len = be32_to_cpup(p++);
 
        if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT)
                return nfserr_bad_xdr;
@@ -850,7 +848,7 @@ nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
        open->op_xdr_error = 0;
        /* seqid, share_access, share_deny, clientid, ownerlen */
        READ_BUF(4);
-       READ32(open->op_seqid);
+       open->op_seqid = be32_to_cpup(p++);
        /* decode, yet ignore deleg_when until supported */
        status = nfsd4_decode_share_access(argp, &open->op_share_access,
                                           &open->op_deleg_want, &dummy);
@@ -865,13 +863,13 @@ nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
        if (status)
                goto xdr_error;
        READ_BUF(4);
-       READ32(open->op_create);
+       open->op_create = be32_to_cpup(p++);
        switch (open->op_create) {
        case NFS4_OPEN_NOCREATE:
                break;
        case NFS4_OPEN_CREATE:
                READ_BUF(4);
-               READ32(open->op_createmode);
+               open->op_createmode = be32_to_cpup(p++);
                switch (open->op_createmode) {
                case NFS4_CREATE_UNCHECKED:
                case NFS4_CREATE_GUARDED:
@@ -904,12 +902,12 @@ nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
 
        /* open_claim */
        READ_BUF(4);
-       READ32(open->op_claim_type);
+       open->op_claim_type = be32_to_cpup(p++);
        switch (open->op_claim_type) {
        case NFS4_OPEN_CLAIM_NULL:
        case NFS4_OPEN_CLAIM_DELEGATE_PREV:
                READ_BUF(4);
-               READ32(open->op_fname.len);
+               open->op_fname.len = be32_to_cpup(p++);
                READ_BUF(open->op_fname.len);
                SAVEMEM(open->op_fname.data, open->op_fname.len);
                if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
@@ -917,14 +915,14 @@ nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
                break;
        case NFS4_OPEN_CLAIM_PREVIOUS:
                READ_BUF(4);
-               READ32(open->op_delegate_type);
+               open->op_delegate_type = be32_to_cpup(p++);
                break;
        case NFS4_OPEN_CLAIM_DELEGATE_CUR:
                status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
                if (status)
                        return status;
                READ_BUF(4);
-               READ32(open->op_fname.len);
+               open->op_fname.len = be32_to_cpup(p++);
                READ_BUF(open->op_fname.len);
                SAVEMEM(open->op_fname.data, open->op_fname.len);
                if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
@@ -962,7 +960,7 @@ nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_con
        if (status)
                return status;
        READ_BUF(4);
-       READ32(open_conf->oc_seqid);
+       open_conf->oc_seqid = be32_to_cpup(p++);
 
        DECODE_TAIL;
 }
@@ -976,7 +974,7 @@ nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_d
        if (status)
                return status;
        READ_BUF(4);
-       READ32(open_down->od_seqid);
+       open_down->od_seqid = be32_to_cpup(p++);
        status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
                                           &open_down->od_deleg_want, NULL);
        if (status)
@@ -993,7 +991,7 @@ nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(putfh->pf_fhlen);
+       putfh->pf_fhlen = be32_to_cpup(p++);
        if (putfh->pf_fhlen > NFS4_FHSIZE)
                goto xdr_error;
        READ_BUF(putfh->pf_fhlen);
@@ -1019,8 +1017,8 @@ nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
        if (status)
                return status;
        READ_BUF(12);
-       READ64(read->rd_offset);
-       READ32(read->rd_length);
+       p = xdr_decode_hyper(p, &read->rd_offset);
+       read->rd_length = be32_to_cpup(p++);
 
        DECODE_TAIL;
 }
@@ -1031,10 +1029,10 @@ nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *read
        DECODE_HEAD;
 
        READ_BUF(24);
-       READ64(readdir->rd_cookie);
+       p = xdr_decode_hyper(p, &readdir->rd_cookie);
        COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data));
-       READ32(readdir->rd_dircount);    /* just in case you needed a useless field... */
-       READ32(readdir->rd_maxcount);
+       readdir->rd_dircount = be32_to_cpup(p++);
+       readdir->rd_maxcount = be32_to_cpup(p++);
        if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval)))
                goto out;
 
@@ -1047,7 +1045,7 @@ nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(remove->rm_namelen);
+       remove->rm_namelen = be32_to_cpup(p++);
        READ_BUF(remove->rm_namelen);
        SAVEMEM(remove->rm_name, remove->rm_namelen);
        if ((status = check_filename(remove->rm_name, remove->rm_namelen)))
@@ -1062,10 +1060,10 @@ nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(rename->rn_snamelen);
+       rename->rn_snamelen = be32_to_cpup(p++);
        READ_BUF(rename->rn_snamelen + 4);
        SAVEMEM(rename->rn_sname, rename->rn_snamelen);
-       READ32(rename->rn_tnamelen);
+       rename->rn_tnamelen = be32_to_cpup(p++);
        READ_BUF(rename->rn_tnamelen);
        SAVEMEM(rename->rn_tname, rename->rn_tnamelen);
        if ((status = check_filename(rename->rn_sname, rename->rn_snamelen)))
@@ -1097,7 +1095,7 @@ nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(secinfo->si_namelen);
+       secinfo->si_namelen = be32_to_cpup(p++);
        READ_BUF(secinfo->si_namelen);
        SAVEMEM(secinfo->si_name, secinfo->si_namelen);
        status = check_filename(secinfo->si_name, secinfo->si_namelen);
@@ -1113,7 +1111,7 @@ nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(sin->sin_style);
+       sin->sin_style = be32_to_cpup(p++);
        DECODE_TAIL;
 }
 
@@ -1144,16 +1142,16 @@ nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclient
        if (status)
                return nfserr_bad_xdr;
        READ_BUF(8);
-       READ32(setclientid->se_callback_prog);
-       READ32(setclientid->se_callback_netid_len);
+       setclientid->se_callback_prog = be32_to_cpup(p++);
+       setclientid->se_callback_netid_len = be32_to_cpup(p++);
 
        READ_BUF(setclientid->se_callback_netid_len + 4);
        SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len);
-       READ32(setclientid->se_callback_addr_len);
+       setclientid->se_callback_addr_len = be32_to_cpup(p++);
 
        READ_BUF(setclientid->se_callback_addr_len + 4);
        SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len);
-       READ32(setclientid->se_callback_ident);
+       setclientid->se_callback_ident = be32_to_cpup(p++);
 
        DECODE_TAIL;
 }
@@ -1186,7 +1184,7 @@ nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify
         * nfsd4_proc_verify */
 
        READ_BUF(4);
-       READ32(verify->ve_attrlen);
+       verify->ve_attrlen = be32_to_cpup(p++);
        READ_BUF(verify->ve_attrlen);
        SAVEMEM(verify->ve_attrval, verify->ve_attrlen);
 
@@ -1204,11 +1202,11 @@ nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
        if (status)
                return status;
        READ_BUF(16);
-       READ64(write->wr_offset);
-       READ32(write->wr_stable_how);
+       p = xdr_decode_hyper(p, &write->wr_offset);
+       write->wr_stable_how = be32_to_cpup(p++);
        if (write->wr_stable_how > 2)
                goto xdr_error;
-       READ32(write->wr_buflen);
+       write->wr_buflen = be32_to_cpup(p++);
 
        /* Sorry .. no magic macros for this.. *
         * READ_BUF(write->wr_buflen);
@@ -1254,7 +1252,7 @@ nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_rel
 
        READ_BUF(12);
        COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t));
-       READ32(rlockowner->rl_owner.len);
+       rlockowner->rl_owner.len = be32_to_cpup(p++);
        READ_BUF(rlockowner->rl_owner.len);
        READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len);
 
@@ -1278,63 +1276,63 @@ nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
                return nfserr_bad_xdr;
 
        READ_BUF(4);
-       READ32(exid->flags);
+       exid->flags = be32_to_cpup(p++);
 
        /* Ignore state_protect4_a */
        READ_BUF(4);
-       READ32(exid->spa_how);
+       exid->spa_how = be32_to_cpup(p++);
        switch (exid->spa_how) {
        case SP4_NONE:
                break;
        case SP4_MACH_CRED:
                /* spo_must_enforce */
                READ_BUF(4);
-               READ32(dummy);
+               dummy = be32_to_cpup(p++);
                READ_BUF(dummy * 4);
                p += dummy;
 
                /* spo_must_allow */
                READ_BUF(4);
-               READ32(dummy);
+               dummy = be32_to_cpup(p++);
                READ_BUF(dummy * 4);
                p += dummy;
                break;
        case SP4_SSV:
                /* ssp_ops */
                READ_BUF(4);
-               READ32(dummy);
+               dummy = be32_to_cpup(p++);
                READ_BUF(dummy * 4);
                p += dummy;
 
                READ_BUF(4);
-               READ32(dummy);
+               dummy = be32_to_cpup(p++);
                READ_BUF(dummy * 4);
                p += dummy;
 
                /* ssp_hash_algs<> */
                READ_BUF(4);
-               READ32(tmp);
+               tmp = be32_to_cpup(p++);
                while (tmp--) {
                        READ_BUF(4);
-                       READ32(dummy);
+                       dummy = be32_to_cpup(p++);
                        READ_BUF(dummy);
                        p += XDR_QUADLEN(dummy);
                }
 
                /* ssp_encr_algs<> */
                READ_BUF(4);
-               READ32(tmp);
+               tmp = be32_to_cpup(p++);
                while (tmp--) {
                        READ_BUF(4);
-                       READ32(dummy);
+                       dummy = be32_to_cpup(p++);
                        READ_BUF(dummy);
                        p += XDR_QUADLEN(dummy);
                }
 
                /* ssp_window and ssp_num_gss_handles */
                READ_BUF(8);
-               READ32(dummy);
-               READ32(dummy);
+               dummy = be32_to_cpup(p++);
+               dummy = be32_to_cpup(p++);
                break;
        default:
                goto xdr_error;
@@ -1342,7 +1340,7 @@ nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
 
        /* Ignore Implementation ID */
        READ_BUF(4);    /* nfs_impl_id4 array length */
-       READ32(dummy);
+       dummy = be32_to_cpup(p++);
 
        if (dummy > 1)
                goto xdr_error;
@@ -1350,13 +1348,13 @@ nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
        if (dummy == 1) {
                /* nii_domain */
                READ_BUF(4);
-               READ32(dummy);
+               dummy = be32_to_cpup(p++);
                READ_BUF(dummy);
                p += XDR_QUADLEN(dummy);
 
                /* nii_name */
                READ_BUF(4);
-               READ32(dummy);
+               dummy = be32_to_cpup(p++);
                READ_BUF(dummy);
                p += XDR_QUADLEN(dummy);
 
@@ -1376,21 +1374,21 @@ nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
 
        READ_BUF(16);
        COPYMEM(&sess->clientid, 8);
-       READ32(sess->seqid);
-       READ32(sess->flags);
+       sess->seqid = be32_to_cpup(p++);
+       sess->flags = be32_to_cpup(p++);
 
        /* Fore channel attrs */
        READ_BUF(28);
-       READ32(dummy); /* headerpadsz is always 0 */
-       READ32(sess->fore_channel.maxreq_sz);
-       READ32(sess->fore_channel.maxresp_sz);
-       READ32(sess->fore_channel.maxresp_cached);
-       READ32(sess->fore_channel.maxops);
-       READ32(sess->fore_channel.maxreqs);
-       READ32(sess->fore_channel.nr_rdma_attrs);
+       dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */
+       sess->fore_channel.maxreq_sz = be32_to_cpup(p++);
+       sess->fore_channel.maxresp_sz = be32_to_cpup(p++);
+       sess->fore_channel.maxresp_cached = be32_to_cpup(p++);
+       sess->fore_channel.maxops = be32_to_cpup(p++);
+       sess->fore_channel.maxreqs = be32_to_cpup(p++);
+       sess->fore_channel.nr_rdma_attrs = be32_to_cpup(p++);
        if (sess->fore_channel.nr_rdma_attrs == 1) {
                READ_BUF(4);
-               READ32(sess->fore_channel.rdma_attrs);
+               sess->fore_channel.rdma_attrs = be32_to_cpup(p++);
        } else if (sess->fore_channel.nr_rdma_attrs > 1) {
                dprintk("Too many fore channel attr bitmaps!\n");
                goto xdr_error;
@@ -1398,23 +1396,23 @@ nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
 
        /* Back channel attrs */
        READ_BUF(28);
-       READ32(dummy); /* headerpadsz is always 0 */
-       READ32(sess->back_channel.maxreq_sz);
-       READ32(sess->back_channel.maxresp_sz);
-       READ32(sess->back_channel.maxresp_cached);
-       READ32(sess->back_channel.maxops);
-       READ32(sess->back_channel.maxreqs);
-       READ32(sess->back_channel.nr_rdma_attrs);
+       dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */
+       sess->back_channel.maxreq_sz = be32_to_cpup(p++);
+       sess->back_channel.maxresp_sz = be32_to_cpup(p++);
+       sess->back_channel.maxresp_cached = be32_to_cpup(p++);
+       sess->back_channel.maxops = be32_to_cpup(p++);
+       sess->back_channel.maxreqs = be32_to_cpup(p++);
+       sess->back_channel.nr_rdma_attrs = be32_to_cpup(p++);
        if (sess->back_channel.nr_rdma_attrs == 1) {
                READ_BUF(4);
-               READ32(sess->back_channel.rdma_attrs);
+               sess->back_channel.rdma_attrs = be32_to_cpup(p++);
        } else if (sess->back_channel.nr_rdma_attrs > 1) {
                dprintk("Too many back channel attr bitmaps!\n");
                goto xdr_error;
        }
 
        READ_BUF(4);
-       READ32(sess->callback_prog);
+       sess->callback_prog = be32_to_cpup(p++);
        nfsd4_decode_cb_sec(argp, &sess->cb_sec);
        DECODE_TAIL;
 }
@@ -1437,7 +1435,7 @@ nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
        DECODE_HEAD;
 
        READ_BUF(sizeof(stateid_t));
-       READ32(free_stateid->fr_stateid.si_generation);
+       free_stateid->fr_stateid.si_generation = be32_to_cpup(p++);
        COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t));
 
        DECODE_TAIL;
@@ -1451,10 +1449,10 @@ nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
 
        READ_BUF(NFS4_MAX_SESSIONID_LEN + 16);
        COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
-       READ32(seq->seqid);
-       READ32(seq->slotid);
-       READ32(seq->maxslots);
-       READ32(seq->cachethis);
+       seq->seqid = be32_to_cpup(p++);
+       seq->slotid = be32_to_cpup(p++);
+       seq->maxslots = be32_to_cpup(p++);
+       seq->cachethis = be32_to_cpup(p++);
 
        DECODE_TAIL;
 }
@@ -1511,7 +1509,7 @@ static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, str
        DECODE_HEAD;
 
        READ_BUF(4);
-       READ32(rc->rca_one_fs);
+       rc->rca_one_fs = be32_to_cpup(p++);
 
        DECODE_TAIL;
 }
@@ -1605,47 +1603,25 @@ nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op)
        return true;
 }
 
-/*
- * Return a rough estimate of the maximum possible reply size.  Note the
- * estimate includes rpc headers so is meant to be passed to
- * svc_reserve, not svc_reserve_auth.
- *
- * Also note the current compound encoding permits only one operation to
- * use pages beyond the first one, so the maximum possible length is the
- * maximum over these values, not the sum.
- */
-static int nfsd4_max_reply(u32 opnum)
-{
-       switch (opnum) {
-       case OP_READLINK:
-       case OP_READDIR:
-               /*
-                * Both of these ops take a single page for data and put
-                * the head and tail in another page:
-                */
-               return 2 * PAGE_SIZE;
-       case OP_READ:
-               return INT_MAX;
-       default:
-               return PAGE_SIZE;
-       }
-}
-
 static __be32
 nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
 {
        DECODE_HEAD;
        struct nfsd4_op *op;
        bool cachethis = false;
-       int max_reply = PAGE_SIZE;
+       int auth_slack= argp->rqstp->rq_auth_slack;
+       int max_reply = auth_slack + 8; /* opcnt, status */
+       int readcount = 0;
+       int readbytes = 0;
        int i;
 
        READ_BUF(4);
-       READ32(argp->taglen);
+       argp->taglen = be32_to_cpup(p++);
        READ_BUF(argp->taglen + 8);
        SAVEMEM(argp->tag, argp->taglen);
-       READ32(argp->minorversion);
-       READ32(argp->opcnt);
+       argp->minorversion = be32_to_cpup(p++);
+       argp->opcnt = be32_to_cpup(p++);
+       max_reply += 4 + (XDR_QUADLEN(argp->taglen) << 2);
 
        if (argp->taglen > NFSD4_MAX_TAGLEN)
                goto xdr_error;
@@ -1669,7 +1645,7 @@ nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
                op->replay = NULL;
 
                READ_BUF(4);
-               READ32(op->opnum);
+               op->opnum = be32_to_cpup(p++);
 
                if (nfsd4_opnum_in_range(argp, op))
                        op->status = nfsd4_dec_ops[op->opnum](argp, &op->u);
@@ -1677,97 +1653,82 @@ nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
                        op->opnum = OP_ILLEGAL;
                        op->status = nfserr_op_illegal;
                }
-
-               if (op->status) {
-                       argp->opcnt = i+1;
-                       break;
-               }
                /*
                 * We'll try to cache the result in the DRC if any one
                 * op in the compound wants to be cached:
                 */
                cachethis |= nfsd4_cache_this_op(op);
 
-               max_reply = max(max_reply, nfsd4_max_reply(op->opnum));
+               if (op->opnum == OP_READ) {
+                       readcount++;
+                       readbytes += nfsd4_max_reply(argp->rqstp, op);
+               } else
+                       max_reply += nfsd4_max_reply(argp->rqstp, op);
+
+               if (op->status) {
+                       argp->opcnt = i+1;
+                       break;
+               }
        }
        /* Sessions make the DRC unnecessary: */
        if (argp->minorversion)
                cachethis = false;
-       if (max_reply != INT_MAX)
-               svc_reserve(argp->rqstp, max_reply);
+       svc_reserve(argp->rqstp, max_reply + readbytes);
        argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
 
-       DECODE_TAIL;
-}
-
-#define WRITE32(n)               *p++ = htonl(n)
-#define WRITE64(n)               do {                          \
-       *p++ = htonl((u32)((n) >> 32));                         \
-       *p++ = htonl((u32)(n));                                 \
-} while (0)
-#define WRITEMEM(ptr,nbytes)     do { if (nbytes > 0) {                \
-       *(p + XDR_QUADLEN(nbytes) -1) = 0;                      \
-       memcpy(p, ptr, nbytes);                                 \
-       p += XDR_QUADLEN(nbytes);                               \
-}} while (0)
-
-static void write32(__be32 **p, u32 n)
-{
-       *(*p)++ = htonl(n);
-}
+       if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack)
+               argp->rqstp->rq_splice_ok = false;
 
-static void write64(__be32 **p, u64 n)
-{
-       write32(p, (n >> 32));
-       write32(p, (u32)n);
+       DECODE_TAIL;
 }
 
-static void write_change(__be32 **p, struct kstat *stat, struct inode *inode)
+static __be32 *encode_change(__be32 *p, struct kstat *stat, struct inode *inode)
 {
        if (IS_I_VERSION(inode)) {
-               write64(p, inode->i_version);
+               p = xdr_encode_hyper(p, inode->i_version);
        } else {
-               write32(p, stat->ctime.tv_sec);
-               write32(p, stat->ctime.tv_nsec);
+               *p++ = cpu_to_be32(stat->ctime.tv_sec);
+               *p++ = cpu_to_be32(stat->ctime.tv_nsec);
        }
+       return p;
 }
 
-static void write_cinfo(__be32 **p, struct nfsd4_change_info *c)
+static __be32 *encode_cinfo(__be32 *p, struct nfsd4_change_info *c)
 {
-       write32(p, c->atomic);
+       *p++ = cpu_to_be32(c->atomic);
        if (c->change_supported) {
-               write64(p, c->before_change);
-               write64(p, c->after_change);
+               p = xdr_encode_hyper(p, c->before_change);
+               p = xdr_encode_hyper(p, c->after_change);
        } else {
-               write32(p, c->before_ctime_sec);
-               write32(p, c->before_ctime_nsec);
-               write32(p, c->after_ctime_sec);
-               write32(p, c->after_ctime_nsec);
+               *p++ = cpu_to_be32(c->before_ctime_sec);
+               *p++ = cpu_to_be32(c->before_ctime_nsec);
+               *p++ = cpu_to_be32(c->after_ctime_sec);
+               *p++ = cpu_to_be32(c->after_ctime_nsec);
        }
+       return p;
 }
 
-#define RESERVE_SPACE(nbytes)  do {                            \
-       p = resp->p;                                            \
-       BUG_ON(p + XDR_QUADLEN(nbytes) > resp->end);            \
-} while (0)
-#define ADJUST_ARGS()          resp->p = p
-
 /* Encode as an array of strings the string given with components
  * separated @sep, escaped with esc_enter and esc_exit.
  */
-static __be32 nfsd4_encode_components_esc(char sep, char *components,
-                                  __be32 **pp, int *buflen,
-                                  char esc_enter, char esc_exit)
+static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep,
+                                         char *components, char esc_enter,
+                                         char esc_exit)
 {
-       __be32 *p = *pp;
-       __be32 *countp = p;
+       __be32 *p;
+       __be32 pathlen;
+       int pathlen_offset;
        int strlen, count=0;
        char *str, *end, *next;
 
        dprintk("nfsd4_encode_components(%s)\n", components);
-       if ((*buflen -= 4) < 0)
+
+       pathlen_offset = xdr->buf->len;
+       p = xdr_reserve_space(xdr, 4);
+       if (!p)
                return nfserr_resource;
-       WRITE32(0); /* We will fill this in with @count later */
+       p++; /* We will fill this in with @count later */
+
        end = str = components;
        while (*end) {
                bool found_esc = false;
@@ -1789,59 +1750,57 @@ static __be32 nfsd4_encode_components_esc(char sep, char *components,
 
                strlen = end - str;
                if (strlen) {
-                       if ((*buflen -= ((XDR_QUADLEN(strlen) << 2) + 4)) < 0)
+                       p = xdr_reserve_space(xdr, strlen + 4);
+                       if (!p)
                                return nfserr_resource;
-                       WRITE32(strlen);
-                       WRITEMEM(str, strlen);
+                       p = xdr_encode_opaque(p, str, strlen);
                        count++;
                }
                else
                        end++;
                str = end;
        }
-       *pp = p;
-       p = countp;
-       WRITE32(count);
+       pathlen = htonl(xdr->buf->len - pathlen_offset);
+       write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4);
        return 0;
 }
 
 /* Encode as an array of strings the string given with components
  * separated @sep.
  */
-static __be32 nfsd4_encode_components(char sep, char *components,
-                                  __be32 **pp, int *buflen)
+static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep,
+                                     char *components)
 {
-       return nfsd4_encode_components_esc(sep, components, pp, buflen, 0, 0);
+       return nfsd4_encode_components_esc(xdr, sep, components, 0, 0);
 }
 
 /*
  * encode a location element of a fs_locations structure
  */
-static __be32 nfsd4_encode_fs_location4(struct nfsd4_fs_location *location,
-                                   __be32 **pp, int *buflen)
+static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr,
+                                       struct nfsd4_fs_location *location)
 {
        __be32 status;
-       __be32 *p = *pp;
 
-       status = nfsd4_encode_components_esc(':', location->hosts, &p, buflen,
+       status = nfsd4_encode_components_esc(xdr, ':', location->hosts,
                                                '[', ']');
        if (status)
                return status;
-       status = nfsd4_encode_components('/', location->path, &p, buflen);
+       status = nfsd4_encode_components(xdr, '/', location->path);
        if (status)
                return status;
-       *pp = p;
        return 0;
 }
 
 /*
  * Encode a path in RFC3530 'pathname4' format
  */
-static __be32 nfsd4_encode_path(const struct path *root,
-               const struct path *path, __be32 **pp, int *buflen)
+static __be32 nfsd4_encode_path(struct xdr_stream *xdr,
+                               const struct path *root,
+                               const struct path *path)
 {
        struct path cur = *path;
-       __be32 *p = *pp;
+       __be32 *p;
        struct dentry **components = NULL;
        unsigned int ncomponents = 0;
        __be32 err = nfserr_jukebox;
@@ -1872,11 +1831,11 @@ static __be32 nfsd4_encode_path(const struct path *root,
                components[ncomponents++] = cur.dentry;
                cur.dentry = dget_parent(cur.dentry);
        }
-
-       *buflen -= 4;
-       if (*buflen < 0)
+       err = nfserr_resource;
+       p = xdr_reserve_space(xdr, 4);
+       if (!p)
                goto out_free;
-       WRITE32(ncomponents);
+       *p++ = cpu_to_be32(ncomponents);
 
        while (ncomponents) {
                struct dentry *dentry = components[ncomponents - 1];
@@ -1884,20 +1843,18 @@ static __be32 nfsd4_encode_path(const struct path *root,
 
                spin_lock(&dentry->d_lock);
                len = dentry->d_name.len;
-               *buflen -= 4 + (XDR_QUADLEN(len) << 2);
-               if (*buflen < 0) {
+               p = xdr_reserve_space(xdr, len + 4);
+               if (!p) {
                        spin_unlock(&dentry->d_lock);
                        goto out_free;
                }
-               WRITE32(len);
-               WRITEMEM(dentry->d_name.name, len);
+               p = xdr_encode_opaque(p, dentry->d_name.name, len);
                dprintk("/%s", dentry->d_name.name);
                spin_unlock(&dentry->d_lock);
                dput(dentry);
                ncomponents--;
        }
 
-       *pp = p;
        err = 0;
 out_free:
        dprintk(")\n");
@@ -1908,8 +1865,8 @@ out_free:
        return err;
 }
 
-static __be32 nfsd4_encode_fsloc_fsroot(struct svc_rqst *rqstp,
-               const struct path *path, __be32 **pp, int *buflen)
+static __be32 nfsd4_encode_fsloc_fsroot(struct xdr_stream *xdr,
+                       struct svc_rqst *rqstp, const struct path *path)
 {
        struct svc_export *exp_ps;
        __be32 res;
@@ -1917,7 +1874,7 @@ static __be32 nfsd4_encode_fsloc_fsroot(struct svc_rqst *rqstp,
        exp_ps = rqst_find_fsidzero_export(rqstp);
        if (IS_ERR(exp_ps))
                return nfserrno(PTR_ERR(exp_ps));
-       res = nfsd4_encode_path(&exp_ps->ex_path, path, pp, buflen);
+       res = nfsd4_encode_path(xdr, &exp_ps->ex_path, path);
        exp_put(exp_ps);
        return res;
 }
@@ -1925,28 +1882,26 @@ static __be32 nfsd4_encode_fsloc_fsroot(struct svc_rqst *rqstp,
 /*
  *  encode a fs_locations structure
  */
-static __be32 nfsd4_encode_fs_locations(struct svc_rqst *rqstp,
-                                    struct svc_export *exp,
-                                    __be32 **pp, int *buflen)
+static __be32 nfsd4_encode_fs_locations(struct xdr_stream *xdr,
+                       struct svc_rqst *rqstp, struct svc_export *exp)
 {
        __be32 status;
        int i;
-       __be32 *p = *pp;
+       __be32 *p;
        struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
 
-       status = nfsd4_encode_fsloc_fsroot(rqstp, &exp->ex_path, &p, buflen);
+       status = nfsd4_encode_fsloc_fsroot(xdr, rqstp, &exp->ex_path);
        if (status)
                return status;
-       if ((*buflen -= 4) < 0)
+       p = xdr_reserve_space(xdr, 4);
+       if (!p)
                return nfserr_resource;
-       WRITE32(fslocs->locations_count);
+       *p++ = cpu_to_be32(fslocs->locations_count);
        for (i=0; i<fslocs->locations_count; i++) {
-               status = nfsd4_encode_fs_location4(&fslocs->locations[i],
-                                                  &p, buflen);
+               status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]);
                if (status)
                        return status;
        }
-       *pp = p;
        return 0;
 }
 
@@ -1965,15 +1920,15 @@ static u32 nfs4_file_type(umode_t mode)
 }
 
 static inline __be32
-nfsd4_encode_aclname(struct svc_rqst *rqstp, struct nfs4_ace *ace,
-               __be32 **p, int *buflen)
+nfsd4_encode_aclname(struct xdr_stream *xdr, struct svc_rqst *rqstp,
+                    struct nfs4_ace *ace)
 {
        if (ace->whotype != NFS4_ACL_WHO_NAMED)
-               return nfs4_acl_write_who(ace->whotype, p, buflen);
+               return nfs4_acl_write_who(xdr, ace->whotype);
        else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
-               return nfsd4_encode_group(rqstp, ace->who_gid, p, buflen);
+               return nfsd4_encode_group(xdr, rqstp, ace->who_gid);
        else
-               return nfsd4_encode_user(rqstp, ace->who_uid, p, buflen);
+               return nfsd4_encode_user(xdr, rqstp, ace->who_uid);
 }
 
 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
@@ -1982,31 +1937,28 @@ nfsd4_encode_aclname(struct svc_rqst *rqstp, struct nfs4_ace *ace,
 
 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
 static inline __be32
-nfsd4_encode_security_label(struct svc_rqst *rqstp, void *context, int len, __be32 **pp, int *buflen)
+nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
+                           void *context, int len)
 {
-       __be32 *p = *pp;
+       __be32 *p;
 
-       if (*buflen < ((XDR_QUADLEN(len) << 2) + 4 + 4 + 4))
+       p = xdr_reserve_space(xdr, len + 4 + 4 + 4);
+       if (!p)
                return nfserr_resource;
 
        /*
         * For now we use a 0 here to indicate the null translation; in
         * the future we may place a call to translation code here.
         */
-       if ((*buflen -= 8) < 0)
-               return nfserr_resource;
-
-       WRITE32(0); /* lfs */
-       WRITE32(0); /* pi */
+       *p++ = cpu_to_be32(0); /* lfs */
+       *p++ = cpu_to_be32(0); /* pi */
        p = xdr_encode_opaque(p, context, len);
-       *buflen -= (XDR_QUADLEN(len) << 2) + 4;
-
-       *pp = p;
        return 0;
 }
 #else
 static inline __be32
-nfsd4_encode_security_label(struct svc_rqst *rqstp, void *context, int len, __be32 **pp, int *buflen)
+nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
+                           void *context, int len)
 { return 0; }
 #endif
 
@@ -2045,12 +1997,11 @@ static int get_parent_attributes(struct svc_export *exp, struct kstat *stat)
 /*
  * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
  * ourselves.
- *
- * countp is the buffer size in _words_
  */
-__be32
-nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
-               struct dentry *dentry, __be32 **buffer, int count, u32 *bmval,
+static __be32
+nfsd4_encode_fattr(struct xdr_stream *xdr, struct svc_fh *fhp,
+               struct svc_export *exp,
+               struct dentry *dentry, u32 *bmval,
                struct svc_rqst *rqstp, int ignore_crossmnt)
 {
        u32 bmval0 = bmval[0];
@@ -2059,12 +2010,13 @@ nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
        struct kstat stat;
        struct svc_fh *tempfh = NULL;
        struct kstatfs statfs;
-       int buflen = count << 2;
-       __be32 *attrlenp;
+       __be32 *p;
+       int starting_len = xdr->buf->len;
+       int attrlen_offset;
+       __be32 attrlen;
        u32 dummy;
        u64 dummy64;
        u32 rdattr_err = 0;
-       __be32 *p = *buffer;
        __be32 status;
        int err;
        int aclsupport = 0;
@@ -2095,8 +2047,8 @@ nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
        err = vfs_getattr(&path, &stat);
        if (err)
                goto out_nfserr;
-       if ((bmval0 & (FATTR4_WORD0_FILES_FREE | FATTR4_WORD0_FILES_TOTAL |
-                       FATTR4_WORD0_MAXNAME)) ||
+       if ((bmval0 & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE |
+                       FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) ||
            (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
                       FATTR4_WORD1_SPACE_TOTAL))) {
                err = vfs_statfs(&path, &statfs);
@@ -2145,25 +2097,33 @@ nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
 
        if (bmval2) {
-               if ((buflen -= 16) < 0)
+               p = xdr_reserve_space(xdr, 16);
+               if (!p)
                        goto out_resource;
-               WRITE32(3);
-               WRITE32(bmval0);
-               WRITE32(bmval1);
-               WRITE32(bmval2);
+               *p++ = cpu_to_be32(3);
+               *p++ = cpu_to_be32(bmval0);
+               *p++ = cpu_to_be32(bmval1);
+               *p++ = cpu_to_be32(bmval2);
        } else if (bmval1) {
-               if ((buflen -= 12) < 0)
+               p = xdr_reserve_space(xdr, 12);
+               if (!p)
                        goto out_resource;
-               WRITE32(2);
-               WRITE32(bmval0);
-               WRITE32(bmval1);
+               *p++ = cpu_to_be32(2);
+               *p++ = cpu_to_be32(bmval0);
+               *p++ = cpu_to_be32(bmval1);
        } else {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE32(1);
-               WRITE32(bmval0);
+               *p++ = cpu_to_be32(1);
+               *p++ = cpu_to_be32(bmval0);
        }
-       attrlenp = p++;                /* to be backfilled later */
+
+       attrlen_offset = xdr->buf->len;
+       p = xdr_reserve_space(xdr, 4);
+       if (!p)
+               goto out_resource;
+       p++;                /* to be backfilled later */
 
        if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
                u32 word0 = nfsd_suppattrs0(minorversion);
@@ -2175,296 +2135,343 @@ nfsd4_encode_fattr(struct svc_fh *fhp, struct svc_export *exp,
                if (!contextsupport)
                        word2 &= ~FATTR4_WORD2_SECURITY_LABEL;
                if (!word2) {
-                       if ((buflen -= 12) < 0)
+                       p = xdr_reserve_space(xdr, 12);
+                       if (!p)
                                goto out_resource;
-                       WRITE32(2);
-                       WRITE32(word0);
-                       WRITE32(word1);
+                       *p++ = cpu_to_be32(2);
+                       *p++ = cpu_to_be32(word0);
+                       *p++ = cpu_to_be32(word1);
                } else {
-                       if ((buflen -= 16) < 0)
+                       p = xdr_reserve_space(xdr, 16);
+                       if (!p)
                                goto out_resource;
-                       WRITE32(3);
-                       WRITE32(word0);
-                       WRITE32(word1);
-                       WRITE32(word2);
+                       *p++ = cpu_to_be32(3);
+                       *p++ = cpu_to_be32(word0);
+                       *p++ = cpu_to_be32(word1);
+                       *p++ = cpu_to_be32(word2);
                }
        }
        if (bmval0 & FATTR4_WORD0_TYPE) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
                dummy = nfs4_file_type(stat.mode);
                if (dummy == NF4BAD) {
                        status = nfserr_serverfault;
                        goto out;
                }
-               WRITE32(dummy);
+               *p++ = cpu_to_be32(dummy);
        }
        if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
                if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
-                       WRITE32(NFS4_FH_PERSISTENT);
+                       *p++ = cpu_to_be32(NFS4_FH_PERSISTENT);
                else
-                       WRITE32(NFS4_FH_PERSISTENT|NFS4_FH_VOL_RENAME);
+                       *p++ = cpu_to_be32(NFS4_FH_PERSISTENT|
+                                               NFS4_FH_VOL_RENAME);
        }
        if (bmval0 & FATTR4_WORD0_CHANGE) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               write_change(&p, &stat, dentry->d_inode);
+               p = encode_change(p, &stat, dentry->d_inode);
        }
        if (bmval0 & FATTR4_WORD0_SIZE) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE64(stat.size);
+               p = xdr_encode_hyper(p, stat.size);
        }
        if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(1);
+               *p++ = cpu_to_be32(1);
        }
        if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(1);
+               *p++ = cpu_to_be32(1);
        }
        if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(0);
+               *p++ = cpu_to_be32(0);
        }
        if (bmval0 & FATTR4_WORD0_FSID) {
-               if ((buflen -= 16) < 0)
+               p = xdr_reserve_space(xdr, 16);
+               if (!p)
                        goto out_resource;
                if (exp->ex_fslocs.migrated) {
-                       WRITE64(NFS4_REFERRAL_FSID_MAJOR);
-                       WRITE64(NFS4_REFERRAL_FSID_MINOR);
+                       p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR);
+                       p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR);
                } else switch(fsid_source(fhp)) {
                case FSIDSOURCE_FSID:
-                       WRITE64((u64)exp->ex_fsid);
-                       WRITE64((u64)0);
+                       p = xdr_encode_hyper(p, (u64)exp->ex_fsid);
+                       p = xdr_encode_hyper(p, (u64)0);
                        break;
                case FSIDSOURCE_DEV:
-                       WRITE32(0);
-                       WRITE32(MAJOR(stat.dev));
-                       WRITE32(0);
-                       WRITE32(MINOR(stat.dev));
+                       *p++ = cpu_to_be32(0);
+                       *p++ = cpu_to_be32(MAJOR(stat.dev));
+                       *p++ = cpu_to_be32(0);
+                       *p++ = cpu_to_be32(MINOR(stat.dev));
                        break;
                case FSIDSOURCE_UUID:
-                       WRITEMEM(exp->ex_uuid, 16);
+                       p = xdr_encode_opaque_fixed(p, exp->ex_uuid,
+                                                               EX_UUID_LEN);
                        break;
                }
        }
        if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(0);
+               *p++ = cpu_to_be32(0);
        }
        if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(nn->nfsd4_lease);
+               *p++ = cpu_to_be32(nn->nfsd4_lease);
        }
        if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(rdattr_err);
+               *p++ = cpu_to_be32(rdattr_err);
        }
        if (bmval0 & FATTR4_WORD0_ACL) {
                struct nfs4_ace *ace;
 
                if (acl == NULL) {
-                       if ((buflen -= 4) < 0)
+                       p = xdr_reserve_space(xdr, 4);
+                       if (!p)
                                goto out_resource;
 
-                       WRITE32(0);
+                       *p++ = cpu_to_be32(0);
                        goto out_acl;
                }
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(acl->naces);
+               *p++ = cpu_to_be32(acl->naces);
 
                for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
-                       if ((buflen -= 4*3) < 0)
+                       p = xdr_reserve_space(xdr, 4*3);
+                       if (!p)
                                goto out_resource;
-                       WRITE32(ace->type);
-                       WRITE32(ace->flag);
-                       WRITE32(ace->access_mask & NFS4_ACE_MASK_ALL);
-                       status = nfsd4_encode_aclname(rqstp, ace, &p, &buflen);
+                       *p++ = cpu_to_be32(ace->type);
+                       *p++ = cpu_to_be32(ace->flag);
+                       *p++ = cpu_to_be32(ace->access_mask &
+                                                       NFS4_ACE_MASK_ALL);
+                       status = nfsd4_encode_aclname(xdr, rqstp, ace);
                        if (status)
                                goto out;
                }
        }
 out_acl:
        if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(aclsupport ?
+               *p++ = cpu_to_be32(aclsupport ?
                        ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
        }
        if (bmval0 & FATTR4_WORD0_CANSETTIME) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(1);
+               *p++ = cpu_to_be32(1);
        }
        if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(0);
+               *p++ = cpu_to_be32(0);
        }
        if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(1);
+               *p++ = cpu_to_be32(1);
        }
        if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(1);
+               *p++ = cpu_to_be32(1);
        }
        if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
-               buflen -= (XDR_QUADLEN(fhp->fh_handle.fh_size) << 2) + 4;
-               if (buflen < 0)
+               p = xdr_reserve_space(xdr, fhp->fh_handle.fh_size + 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(fhp->fh_handle.fh_size);
-               WRITEMEM(&fhp->fh_handle.fh_base, fhp->fh_handle.fh_size);
+               p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base,
+                                       fhp->fh_handle.fh_size);
        }
        if (bmval0 & FATTR4_WORD0_FILEID) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE64(stat.ino);
+               p = xdr_encode_hyper(p, stat.ino);
        }
        if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE64((u64) statfs.f_ffree);
+               p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
        }
        if (bmval0 & FATTR4_WORD0_FILES_FREE) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE64((u64) statfs.f_ffree);
+               p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
        }
        if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE64((u64) statfs.f_files);
+               p = xdr_encode_hyper(p, (u64) statfs.f_files);
        }
        if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
-               status = nfsd4_encode_fs_locations(rqstp, exp, &p, &buflen);
+               status = nfsd4_encode_fs_locations(xdr, rqstp, exp);
                if (status)
                        goto out;
        }
        if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(1);
+               *p++ = cpu_to_be32(1);
        }
        if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE64(exp->ex_path.mnt->mnt_sb->s_maxbytes);
+               p = xdr_encode_hyper(p, exp->ex_path.mnt->mnt_sb->s_maxbytes);
        }
        if (bmval0 & FATTR4_WORD0_MAXLINK) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(255);
+               *p++ = cpu_to_be32(255);
        }
        if (bmval0 & FATTR4_WORD0_MAXNAME) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(statfs.f_namelen);
+               *p++ = cpu_to_be32(statfs.f_namelen);
        }
        if (bmval0 & FATTR4_WORD0_MAXREAD) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE64((u64) svc_max_payload(rqstp));
+               p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
        }
        if (bmval0 & FATTR4_WORD0_MAXWRITE) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE64((u64) svc_max_payload(rqstp));
+               p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
        }
        if (bmval1 & FATTR4_WORD1_MODE) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(stat.mode & S_IALLUGO);
+               *p++ = cpu_to_be32(stat.mode & S_IALLUGO);
        }
        if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(1);
+               *p++ = cpu_to_be32(1);
        }
        if (bmval1 & FATTR4_WORD1_NUMLINKS) {
-               if ((buflen -= 4) < 0)
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
                        goto out_resource;
-               WRITE32(stat.nlink);
+               *p++ = cpu_to_be32(stat.nlink);
        }
        if (bmval1 & FATTR4_WORD1_OWNER) {
-               status = nfsd4_encode_user(rqstp, stat.uid, &p, &buflen);
+               status = nfsd4_encode_user(xdr, rqstp, stat.uid);
                if (status)
                        goto out;
        }
        if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
-               status = nfsd4_encode_group(rqstp, stat.gid, &p, &buflen);
+               status = nfsd4_encode_group(xdr, rqstp, stat.gid);
                if (status)
                        goto out;
        }
        if (bmval1 & FATTR4_WORD1_RAWDEV) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
-               WRITE32((u32) MAJOR(stat.rdev));
-               WRITE32((u32) MINOR(stat.rdev));
+               *p++ = cpu_to_be32((u32) MAJOR(stat.rdev));
+               *p++ = cpu_to_be32((u32) MINOR(stat.rdev));
        }
        if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
                dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
-               WRITE64(dummy64);
+               p = xdr_encode_hyper(p, dummy64);
        }
        if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
                dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
-               WRITE64(dummy64);
+               p = xdr_encode_hyper(p, dummy64);
        }
        if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
                dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
-               WRITE64(dummy64);
+               p = xdr_encode_hyper(p, dummy64);
        }
        if (bmval1 & FATTR4_WORD1_SPACE_USED) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
                dummy64 = (u64)stat.blocks << 9;
-               WRITE64(dummy64);
+               p = xdr_encode_hyper(p, dummy64);
        }
        if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
-               if ((buflen -= 12) < 0)
+               p = xdr_reserve_space(xdr, 12);
+               if (!p)
                        goto out_resource;
-               WRITE64((s64)stat.atime.tv_sec);
-               WRITE32(stat.atime.tv_nsec);
+               p = xdr_encode_hyper(p, (s64)stat.atime.tv_sec);
+               *p++ = cpu_to_be32(stat.atime.tv_nsec);
        }
        if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
-               if ((buflen -= 12) < 0)
+               p = xdr_reserve_space(xdr, 12);
+               if (!p)
                        goto out_resource;
-               WRITE32(0);
-               WRITE32(1);
-               WRITE32(0);
+               *p++ = cpu_to_be32(0);
+               *p++ = cpu_to_be32(1);
+               *p++ = cpu_to_be32(0);
        }
        if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
-               if ((buflen -= 12) < 0)
+               p = xdr_reserve_space(xdr, 12);
+               if (!p)
                        goto out_resource;
-               WRITE64((s64)stat.ctime.tv_sec);
-               WRITE32(stat.ctime.tv_nsec);
+               p = xdr_encode_hyper(p, (s64)stat.ctime.tv_sec);
+               *p++ = cpu_to_be32(stat.ctime.tv_nsec);
        }
        if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
-               if ((buflen -= 12) < 0)
+               p = xdr_reserve_space(xdr, 12);
+               if (!p)
                        goto out_resource;
-               WRITE64((s64)stat.mtime.tv_sec);
-               WRITE32(stat.mtime.tv_nsec);
+               p = xdr_encode_hyper(p, (s64)stat.mtime.tv_sec);
+               *p++ = cpu_to_be32(stat.mtime.tv_nsec);
        }
        if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
-               if ((buflen -= 8) < 0)
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
                        goto out_resource;
                /*
                 * Get parent's attributes if not ignoring crossmount
@@ -2473,25 +2480,26 @@ out_acl:
                if (ignore_crossmnt == 0 &&
                    dentry == exp->ex_path.mnt->mnt_root)
                        get_parent_attributes(exp, &stat);
-               WRITE64(stat.ino);
+               p = xdr_encode_hyper(p, stat.ino);
        }
        if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
-               status = nfsd4_encode_security_label(rqstp, context,
-                               contextlen, &p, &buflen);
+               status = nfsd4_encode_security_label(xdr, rqstp, context,
+                                                               contextlen);
                if (status)
                        goto out;
        }
        if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
-               if ((buflen -= 16) < 0)
+               p = xdr_reserve_space(xdr, 16);
+               if (!p)
                        goto out_resource;
-               WRITE32(3);
-               WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD0);
-               WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD1);
-               WRITE32(NFSD_SUPPATTR_EXCLCREAT_WORD2);
+               *p++ = cpu_to_be32(3);
+               *p++ = cpu_to_be32(NFSD_SUPPATTR_EXCLCREAT_WORD0);
+               *p++ = cpu_to_be32(NFSD_SUPPATTR_EXCLCREAT_WORD1);
+               *p++ = cpu_to_be32(NFSD_SUPPATTR_EXCLCREAT_WORD2);
        }
 
-       *attrlenp = htonl((char *)p - (char *)attrlenp - 4);
-       *buffer = p;
+       attrlen = htonl(xdr->buf->len - attrlen_offset - 4);
+       write_bytes_to_xdr_buf(xdr->buf, attrlen_offset, &attrlen, 4);
        status = nfs_ok;
 
 out:
@@ -2504,6 +2512,8 @@ out:
                fh_put(tempfh);
                kfree(tempfh);
        }
+       if (status)
+               xdr_truncate_encode(xdr, starting_len);
        return status;
 out_nfserr:
        status = nfserrno(err);
@@ -2513,6 +2523,37 @@ out_resource:
        goto out;
 }
 
+static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr,
+                               struct xdr_buf *buf, __be32 *p, int bytes)
+{
+       xdr->scratch.iov_len = 0;
+       memset(buf, 0, sizeof(struct xdr_buf));
+       buf->head[0].iov_base = p;
+       buf->head[0].iov_len = 0;
+       buf->len = 0;
+       xdr->buf = buf;
+       xdr->iov = buf->head;
+       xdr->p = p;
+       xdr->end = (void *)p + bytes;
+       buf->buflen = bytes;
+}
+
+__be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words,
+                       struct svc_fh *fhp, struct svc_export *exp,
+                       struct dentry *dentry, u32 *bmval,
+                       struct svc_rqst *rqstp, int ignore_crossmnt)
+{
+       struct xdr_buf dummy;
+       struct xdr_stream xdr;
+       __be32 ret;
+
+       svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2);
+       ret = nfsd4_encode_fattr(&xdr, fhp, exp, dentry, bmval, rqstp,
+                                                       ignore_crossmnt);
+       *p = xdr.p;
+       return ret;
+}
+
 static inline int attributes_need_mount(u32 *bmval)
 {
        if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
@@ -2523,8 +2564,8 @@ static inline int attributes_need_mount(u32 *bmval)
 }
 
 static __be32
-nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd,
-               const char *name, int namlen, __be32 **p, int buflen)
+nfsd4_encode_dirent_fattr(struct xdr_stream *xdr, struct nfsd4_readdir *cd,
+                       const char *name, int namlen)
 {
        struct svc_export *exp = cd->rd_fhp->fh_export;
        struct dentry *dentry;
@@ -2576,7 +2617,7 @@ nfsd4_encode_dirent_fattr(struct nfsd4_readdir *cd,
 
        }
 out_encode:
-       nfserr = nfsd4_encode_fattr(NULL, exp, dentry, p, buflen, cd->rd_bmval,
+       nfserr = nfsd4_encode_fattr(xdr, NULL, exp, dentry, cd->rd_bmval,
                                        cd->rd_rqstp, ignore_crossmnt);
 out_put:
        dput(dentry);
@@ -2585,9 +2626,12 @@ out_put:
 }
 
 static __be32 *
-nfsd4_encode_rdattr_error(__be32 *p, int buflen, __be32 nfserr)
+nfsd4_encode_rdattr_error(struct xdr_stream *xdr, __be32 nfserr)
 {
-       if (buflen < 6)
+       __be32 *p;
+
+       p = xdr_reserve_space(xdr, 6);
+       if (!p)
                return NULL;
        *p++ = htonl(2);
        *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
@@ -2604,10 +2648,13 @@ nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
 {
        struct readdir_cd *ccd = ccdv;
        struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
-       int buflen;
-       __be32 *p = cd->buffer;
-       __be32 *cookiep;
+       struct xdr_stream *xdr = cd->xdr;
+       int start_offset = xdr->buf->len;
+       int cookie_offset;
+       int entry_bytes;
        __be32 nfserr = nfserr_toosmall;
+       __be64 wire_offset;
+       __be32 *p;
 
        /* In nfsv4, "." and ".." never make it onto the wire.. */
        if (name && isdotent(name, namlen)) {
@@ -2615,19 +2662,24 @@ nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
                return 0;
        }
 
-       if (cd->offset)
-               xdr_encode_hyper(cd->offset, (u64) offset);
+       if (cd->cookie_offset) {
+               wire_offset = cpu_to_be64(offset);
+               write_bytes_to_xdr_buf(xdr->buf, cd->cookie_offset,
+                                                       &wire_offset, 8);
+       }
 
-       buflen = cd->buflen - 4 - XDR_QUADLEN(namlen);
-       if (buflen < 0)
+       p = xdr_reserve_space(xdr, 4);
+       if (!p)
                goto fail;
-
        *p++ = xdr_one;                             /* mark entry present */
-       cookiep = p;
+       cookie_offset = xdr->buf->len;
+       p = xdr_reserve_space(xdr, 3*4 + namlen);
+       if (!p)
+               goto fail;
        p = xdr_encode_hyper(p, NFS_OFFSET_MAX);    /* offset of next entry */
        p = xdr_encode_array(p, name, namlen);      /* name length & name */
 
-       nfserr = nfsd4_encode_dirent_fattr(cd, name, namlen, &p, buflen);
+       nfserr = nfsd4_encode_dirent_fattr(xdr, cd, name, namlen);
        switch (nfserr) {
        case nfs_ok:
                break;
@@ -2646,59 +2698,74 @@ nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
                 */
                if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
                        goto fail;
-               p = nfsd4_encode_rdattr_error(p, buflen, nfserr);
+               p = nfsd4_encode_rdattr_error(xdr, nfserr);
                if (p == NULL) {
                        nfserr = nfserr_toosmall;
                        goto fail;
                }
        }
-       cd->buflen -= (p - cd->buffer);
-       cd->buffer = p;
-       cd->offset = cookiep;
+       nfserr = nfserr_toosmall;
+       entry_bytes = xdr->buf->len - start_offset;
+       if (entry_bytes > cd->rd_maxcount)
+               goto fail;
+       cd->rd_maxcount -= entry_bytes;
+       if (!cd->rd_dircount)
+               goto fail;
+       cd->rd_dircount--;
+       cd->cookie_offset = cookie_offset;
 skip_entry:
        cd->common.err = nfs_ok;
        return 0;
 fail:
+       xdr_truncate_encode(xdr, start_offset);
        cd->common.err = nfserr;
        return -EINVAL;
 }
 
-static void
-nfsd4_encode_stateid(struct nfsd4_compoundres *resp, stateid_t *sid)
+static __be32
+nfsd4_encode_stateid(struct xdr_stream *xdr, stateid_t *sid)
 {
        __be32 *p;
 
-       RESERVE_SPACE(sizeof(stateid_t));
-       WRITE32(sid->si_generation);
-       WRITEMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
-       ADJUST_ARGS();
+       p = xdr_reserve_space(xdr, sizeof(stateid_t));
+       if (!p)
+               return nfserr_resource;
+       *p++ = cpu_to_be32(sid->si_generation);
+       p = xdr_encode_opaque_fixed(p, &sid->si_opaque,
+                                       sizeof(stateid_opaque_t));
+       return 0;
 }
 
 static __be32
 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(8);
-               WRITE32(access->ac_supported);
-               WRITE32(access->ac_resp_access);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
+                       return nfserr_resource;
+               *p++ = cpu_to_be32(access->ac_supported);
+               *p++ = cpu_to_be32(access->ac_resp_access);
        }
        return nfserr;
 }
 
 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 8);
-               WRITEMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
-               WRITE32(bcts->dir);
+               p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 8);
+               if (!p)
+                       return nfserr_resource;
+               p = xdr_encode_opaque_fixed(p, bcts->sessionid.data,
+                                               NFS4_MAX_SESSIONID_LEN);
+               *p++ = cpu_to_be32(bcts->dir);
                /* Sorry, we do not yet support RDMA over 4.1: */
-               WRITE32(0);
-               ADJUST_ARGS();
+               *p++ = cpu_to_be32(0);
        }
        return nfserr;
 }
@@ -2706,8 +2773,10 @@ static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp,
 static __be32
 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
 {
+       struct xdr_stream *xdr = &resp->xdr;
+
        if (!nfserr)
-               nfsd4_encode_stateid(resp, &close->cl_stateid);
+               nfserr = nfsd4_encode_stateid(xdr, &close->cl_stateid);
 
        return nfserr;
 }
@@ -2716,12 +2785,15 @@ nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_c
 static __be32
 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(NFS4_VERIFIER_SIZE);
-               WRITEMEM(commit->co_verf.data, NFS4_VERIFIER_SIZE);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
+               if (!p)
+                       return nfserr_resource;
+               p = xdr_encode_opaque_fixed(p, commit->co_verf.data,
+                                               NFS4_VERIFIER_SIZE);
        }
        return nfserr;
 }
@@ -2729,15 +2801,17 @@ nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_
 static __be32
 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(32);
-               write_cinfo(&p, &create->cr_cinfo);
-               WRITE32(2);
-               WRITE32(create->cr_bmval[0]);
-               WRITE32(create->cr_bmval[1]);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 32);
+               if (!p)
+                       return nfserr_resource;
+               p = encode_cinfo(p, &create->cr_cinfo);
+               *p++ = cpu_to_be32(2);
+               *p++ = cpu_to_be32(create->cr_bmval[0]);
+               *p++ = cpu_to_be32(create->cr_bmval[1]);
        }
        return nfserr;
 }
@@ -2746,14 +2820,13 @@ static __be32
 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
 {
        struct svc_fh *fhp = getattr->ga_fhp;
-       int buflen;
+       struct xdr_stream *xdr = &resp->xdr;
 
        if (nfserr)
                return nfserr;
 
-       buflen = resp->end - resp->p - (COMPOUND_ERR_SLACK_SPACE >> 2);
-       nfserr = nfsd4_encode_fattr(fhp, fhp->fh_export, fhp->fh_dentry,
-                                   &resp->p, buflen, getattr->ga_bmval,
+       nfserr = nfsd4_encode_fattr(xdr, fhp, fhp->fh_export, fhp->fh_dentry,
+                                   getattr->ga_bmval,
                                    resp->rqstp, 0);
        return nfserr;
 }
@@ -2761,16 +2834,17 @@ nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4
 static __be32
 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        struct svc_fh *fhp = *fhpp;
        unsigned int len;
        __be32 *p;
 
        if (!nfserr) {
                len = fhp->fh_handle.fh_size;
-               RESERVE_SPACE(len + 4);
-               WRITE32(len);
-               WRITEMEM(&fhp->fh_handle.fh_base, len);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, len + 4);
+               if (!p)
+                       return nfserr_resource;
+               p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, len);
        }
        return nfserr;
 }
@@ -2779,52 +2853,69 @@ nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh
 * Including all fields other than the name, a LOCK4denied structure requires
 *   8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
 */
-static void
-nfsd4_encode_lock_denied(struct nfsd4_compoundres *resp, struct nfsd4_lock_denied *ld)
+static __be32
+nfsd4_encode_lock_denied(struct xdr_stream *xdr, struct nfsd4_lock_denied *ld)
 {
        struct xdr_netobj *conf = &ld->ld_owner;
        __be32 *p;
 
-       RESERVE_SPACE(32 + XDR_LEN(conf->len));
-       WRITE64(ld->ld_start);
-       WRITE64(ld->ld_length);
-       WRITE32(ld->ld_type);
+again:
+       p = xdr_reserve_space(xdr, 32 + XDR_LEN(conf->len));
+       if (!p) {
+               /*
+                * Don't fail to return the result just because we can't
+                * return the conflicting open:
+                */
+               if (conf->len) {
+                       conf->len = 0;
+                       conf->data = NULL;
+                       goto again;
+               }
+               return nfserr_resource;
+       }
+       p = xdr_encode_hyper(p, ld->ld_start);
+       p = xdr_encode_hyper(p, ld->ld_length);
+       *p++ = cpu_to_be32(ld->ld_type);
        if (conf->len) {
-               WRITEMEM(&ld->ld_clientid, 8);
-               WRITE32(conf->len);
-               WRITEMEM(conf->data, conf->len);
-               kfree(conf->data);
+               p = xdr_encode_opaque_fixed(p, &ld->ld_clientid, 8);
+               p = xdr_encode_opaque(p, conf->data, conf->len);
        }  else {  /* non - nfsv4 lock in conflict, no clientid nor owner */
-               WRITE64((u64)0); /* clientid */
-               WRITE32(0); /* length of owner name */
+               p = xdr_encode_hyper(p, (u64)0); /* clientid */
+               *p++ = cpu_to_be32(0); /* length of owner name */
        }
-       ADJUST_ARGS();
+       return nfserr_denied;
 }
 
 static __be32
 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
 {
+       struct xdr_stream *xdr = &resp->xdr;
+
        if (!nfserr)
-               nfsd4_encode_stateid(resp, &lock->lk_resp_stateid);
+               nfserr = nfsd4_encode_stateid(xdr, &lock->lk_resp_stateid);
        else if (nfserr == nfserr_denied)
-               nfsd4_encode_lock_denied(resp, &lock->lk_denied);
-
+               nfserr = nfsd4_encode_lock_denied(xdr, &lock->lk_denied);
+       kfree(lock->lk_denied.ld_owner.data);
        return nfserr;
 }
 
 static __be32
 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
 {
+       struct xdr_stream *xdr = &resp->xdr;
+
        if (nfserr == nfserr_denied)
-               nfsd4_encode_lock_denied(resp, &lockt->lt_denied);
+               nfsd4_encode_lock_denied(xdr, &lockt->lt_denied);
        return nfserr;
 }
 
 static __be32
 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
 {
+       struct xdr_stream *xdr = &resp->xdr;
+
        if (!nfserr)
-               nfsd4_encode_stateid(resp, &locku->lu_stateid);
+               nfserr = nfsd4_encode_stateid(xdr, &locku->lu_stateid);
 
        return nfserr;
 }
@@ -2833,12 +2924,14 @@ nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_l
 static __be32
 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(20);
-               write_cinfo(&p, &link->li_cinfo);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 20);
+               if (!p)
+                       return nfserr_resource;
+               p = encode_cinfo(p, &link->li_cinfo);
        }
        return nfserr;
 }
@@ -2847,72 +2940,86 @@ nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_li
 static __be32
 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (nfserr)
                goto out;
 
-       nfsd4_encode_stateid(resp, &open->op_stateid);
-       RESERVE_SPACE(40);
-       write_cinfo(&p, &open->op_cinfo);
-       WRITE32(open->op_rflags);
-       WRITE32(2);
-       WRITE32(open->op_bmval[0]);
-       WRITE32(open->op_bmval[1]);
-       WRITE32(open->op_delegate_type);
-       ADJUST_ARGS();
+       nfserr = nfsd4_encode_stateid(xdr, &open->op_stateid);
+       if (nfserr)
+               goto out;
+       p = xdr_reserve_space(xdr, 40);
+       if (!p)
+               return nfserr_resource;
+       p = encode_cinfo(p, &open->op_cinfo);
+       *p++ = cpu_to_be32(open->op_rflags);
+       *p++ = cpu_to_be32(2);
+       *p++ = cpu_to_be32(open->op_bmval[0]);
+       *p++ = cpu_to_be32(open->op_bmval[1]);
+       *p++ = cpu_to_be32(open->op_delegate_type);
 
        switch (open->op_delegate_type) {
        case NFS4_OPEN_DELEGATE_NONE:
                break;
        case NFS4_OPEN_DELEGATE_READ:
-               nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
-               RESERVE_SPACE(20);
-               WRITE32(open->op_recall);
+               nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
+               if (nfserr)
+                       return nfserr;
+               p = xdr_reserve_space(xdr, 20);
+               if (!p)
+                       return nfserr_resource;
+               *p++ = cpu_to_be32(open->op_recall);
 
                /*
                 * TODO: ACE's in delegations
                 */
-               WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
-               WRITE32(0);
-               WRITE32(0);
-               WRITE32(0);   /* XXX: is NULL principal ok? */
-               ADJUST_ARGS();
+               *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
+               *p++ = cpu_to_be32(0);
+               *p++ = cpu_to_be32(0);
+               *p++ = cpu_to_be32(0);   /* XXX: is NULL principal ok? */
                break;
        case NFS4_OPEN_DELEGATE_WRITE:
-               nfsd4_encode_stateid(resp, &open->op_delegate_stateid);
-               RESERVE_SPACE(32);
-               WRITE32(0);
+               nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
+               if (nfserr)
+                       return nfserr;
+               p = xdr_reserve_space(xdr, 32);
+               if (!p)
+                       return nfserr_resource;
+               *p++ = cpu_to_be32(0);
 
                /*
                 * TODO: space_limit's in delegations
                 */
-               WRITE32(NFS4_LIMIT_SIZE);
-               WRITE32(~(u32)0);
-               WRITE32(~(u32)0);
+               *p++ = cpu_to_be32(NFS4_LIMIT_SIZE);
+               *p++ = cpu_to_be32(~(u32)0);
+               *p++ = cpu_to_be32(~(u32)0);
 
                /*
                 * TODO: ACE's in delegations
                 */
-               WRITE32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
-               WRITE32(0);
-               WRITE32(0);
-               WRITE32(0);   /* XXX: is NULL principal ok? */
-               ADJUST_ARGS();
+               *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
+               *p++ = cpu_to_be32(0);
+               *p++ = cpu_to_be32(0);
+               *p++ = cpu_to_be32(0);   /* XXX: is NULL principal ok? */
                break;
        case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */
                switch (open->op_why_no_deleg) {
                case WND4_CONTENTION:
                case WND4_RESOURCE:
-                       RESERVE_SPACE(8);
-                       WRITE32(open->op_why_no_deleg);
-                       WRITE32(0);     /* deleg signaling not supported yet */
+                       p = xdr_reserve_space(xdr, 8);
+                       if (!p)
+                               return nfserr_resource;
+                       *p++ = cpu_to_be32(open->op_why_no_deleg);
+                       /* deleg signaling not supported yet: */
+                       *p++ = cpu_to_be32(0);
                        break;
                default:
-                       RESERVE_SPACE(4);
-                       WRITE32(open->op_why_no_deleg);
+                       p = xdr_reserve_space(xdr, 4);
+                       if (!p)
+                               return nfserr_resource;
+                       *p++ = cpu_to_be32(open->op_why_no_deleg);
                }
-               ADJUST_ARGS();
                break;
        default:
                BUG();
@@ -2925,8 +3032,10 @@ out:
 static __be32
 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
 {
+       struct xdr_stream *xdr = &resp->xdr;
+
        if (!nfserr)
-               nfsd4_encode_stateid(resp, &oc->oc_resp_stateid);
+               nfserr = nfsd4_encode_stateid(xdr, &oc->oc_resp_stateid);
 
        return nfserr;
 }
@@ -2934,127 +3043,233 @@ nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct
 static __be32
 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
 {
+       struct xdr_stream *xdr = &resp->xdr;
+
        if (!nfserr)
-               nfsd4_encode_stateid(resp, &od->od_stateid);
+               nfserr = nfsd4_encode_stateid(xdr, &od->od_stateid);
 
        return nfserr;
 }
 
-static __be32
-nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
-                 struct nfsd4_read *read)
+static __be32 nfsd4_encode_splice_read(
+                               struct nfsd4_compoundres *resp,
+                               struct nfsd4_read *read,
+                               struct file *file, unsigned long maxcount)
 {
+       struct xdr_stream *xdr = &resp->xdr;
+       struct xdr_buf *buf = xdr->buf;
        u32 eof;
-       int v;
-       struct page *page;
-       unsigned long maxcount; 
-       long len;
-       __be32 *p;
+       int space_left;
+       __be32 nfserr;
+       __be32 *p = xdr->p - 2;
 
-       if (nfserr)
-               return nfserr;
-       if (resp->xbuf->page_len)
+       /*
+        * Don't inline pages unless we know there's room for eof,
+        * count, and possible padding:
+        */
+       if (xdr->end - xdr->p < 3)
                return nfserr_resource;
 
-       RESERVE_SPACE(8); /* eof flag and byte count */
+       nfserr = nfsd_splice_read(read->rd_rqstp, file,
+                                 read->rd_offset, &maxcount);
+       if (nfserr) {
+               /*
+                * nfsd_splice_actor may have already messed with the
+                * page length; reset it so as not to confuse
+                * xdr_truncate_encode:
+                */
+               buf->page_len = 0;
+               return nfserr;
+       }
 
-       maxcount = svc_max_payload(resp->rqstp);
-       if (maxcount > read->rd_length)
-               maxcount = read->rd_length;
+       eof = (read->rd_offset + maxcount >=
+              read->rd_fhp->fh_dentry->d_inode->i_size);
+
+       *(p++) = htonl(eof);
+       *(p++) = htonl(maxcount);
+
+       buf->page_len = maxcount;
+       buf->len += maxcount;
+       xdr->page_ptr += (maxcount + PAGE_SIZE - 1) / PAGE_SIZE;
+
+       /* Use rest of head for padding and remaining ops: */
+       buf->tail[0].iov_base = xdr->p;
+       buf->tail[0].iov_len = 0;
+       xdr->iov = buf->tail;
+       if (maxcount&3) {
+               int pad = 4 - (maxcount&3);
+
+               *(xdr->p++) = 0;
+
+               buf->tail[0].iov_base += maxcount&3;
+               buf->tail[0].iov_len = pad;
+               buf->len += pad;
+       }
+
+       space_left = min_t(int, (void *)xdr->end - (void *)xdr->p,
+                               buf->buflen - buf->len);
+       buf->buflen = buf->len + space_left;
+       xdr->end = (__be32 *)((void *)xdr->end + space_left);
+
+       return 0;
+}
+
+static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp,
+                                struct nfsd4_read *read,
+                                struct file *file, unsigned long maxcount)
+{
+       struct xdr_stream *xdr = &resp->xdr;
+       u32 eof;
+       int v;
+       int starting_len = xdr->buf->len - 8;
+       long len;
+       int thislen;
+       __be32 nfserr;
+       __be32 tmp;
+       __be32 *p;
+       u32 zzz = 0;
+       int pad;
 
        len = maxcount;
        v = 0;
-       while (len > 0) {
-               page = *(resp->rqstp->rq_next_page);
-               if (!page) { /* ran out of pages */
-                       maxcount -= len;
-                       break;
-               }
-               resp->rqstp->rq_vec[v].iov_base = page_address(page);
-               resp->rqstp->rq_vec[v].iov_len =
-                       len < PAGE_SIZE ? len : PAGE_SIZE;
-               resp->rqstp->rq_next_page++;
+
+       thislen = (void *)xdr->end - (void *)xdr->p;
+       if (len < thislen)
+               thislen = len;
+       p = xdr_reserve_space(xdr, (thislen+3)&~3);
+       WARN_ON_ONCE(!p);
+       resp->rqstp->rq_vec[v].iov_base = p;
+       resp->rqstp->rq_vec[v].iov_len = thislen;
+       v++;
+       len -= thislen;
+
+       while (len) {
+               thislen = min_t(long, len, PAGE_SIZE);
+               p = xdr_reserve_space(xdr, (thislen+3)&~3);
+               WARN_ON_ONCE(!p);
+               resp->rqstp->rq_vec[v].iov_base = p;
+               resp->rqstp->rq_vec[v].iov_len = thislen;
                v++;
-               len -= PAGE_SIZE;
+               len -= thislen;
        }
        read->rd_vlen = v;
 
-       nfserr = nfsd_read_file(read->rd_rqstp, read->rd_fhp, read->rd_filp,
-                       read->rd_offset, resp->rqstp->rq_vec, read->rd_vlen,
-                       &maxcount);
-
+       nfserr = nfsd_readv(file, read->rd_offset, resp->rqstp->rq_vec,
+                       read->rd_vlen, &maxcount);
        if (nfserr)
                return nfserr;
+       xdr_truncate_encode(xdr, starting_len + 8 + ((maxcount+3)&~3));
+
        eof = (read->rd_offset + maxcount >=
               read->rd_fhp->fh_dentry->d_inode->i_size);
 
-       WRITE32(eof);
-       WRITE32(maxcount);
-       ADJUST_ARGS();
-       resp->xbuf->head[0].iov_len = (char*)p
-                                       - (char*)resp->xbuf->head[0].iov_base;
-       resp->xbuf->page_len = maxcount;
+       tmp = htonl(eof);
+       write_bytes_to_xdr_buf(xdr->buf, starting_len    , &tmp, 4);
+       tmp = htonl(maxcount);
+       write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4);
 
-       /* Use rest of head for padding and remaining ops: */
-       resp->xbuf->tail[0].iov_base = p;
-       resp->xbuf->tail[0].iov_len = 0;
-       if (maxcount&3) {
-               RESERVE_SPACE(4);
-               WRITE32(0);
-               resp->xbuf->tail[0].iov_base += maxcount&3;
-               resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
-               ADJUST_ARGS();
-       }
+       pad = (maxcount&3) ? 4 - (maxcount&3) : 0;
+       write_bytes_to_xdr_buf(xdr->buf, starting_len + 8 + maxcount,
+                                                               &zzz, pad);
        return 0;
+
 }
 
 static __be32
-nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
+nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
+                 struct nfsd4_read *read)
 {
-       int maxcount;
-       char *page;
+       unsigned long maxcount;
+       struct xdr_stream *xdr = &resp->xdr;
+       struct file *file = read->rd_filp;
+       int starting_len = xdr->buf->len;
+       struct raparms *ra;
        __be32 *p;
+       __be32 err;
 
        if (nfserr)
                return nfserr;
-       if (resp->xbuf->page_len)
+
+       p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */
+       if (!p) {
+               WARN_ON_ONCE(resp->rqstp->rq_splice_ok);
                return nfserr_resource;
-       if (!*resp->rqstp->rq_next_page)
+       }
+       if (resp->xdr.buf->page_len && resp->rqstp->rq_splice_ok) {
+               WARN_ON_ONCE(1);
                return nfserr_resource;
+       }
+       xdr_commit_encode(xdr);
+
+       maxcount = svc_max_payload(resp->rqstp);
+       if (maxcount > xdr->buf->buflen - xdr->buf->len)
+               maxcount = xdr->buf->buflen - xdr->buf->len;
+       if (maxcount > read->rd_length)
+               maxcount = read->rd_length;
+
+       if (!read->rd_filp) {
+               err = nfsd_get_tmp_read_open(resp->rqstp, read->rd_fhp,
+                                               &file, &ra);
+               if (err)
+                       goto err_truncate;
+       }
+
+       if (file->f_op->splice_read && resp->rqstp->rq_splice_ok)
+               err = nfsd4_encode_splice_read(resp, read, file, maxcount);
+       else
+               err = nfsd4_encode_readv(resp, read, file, maxcount);
+
+       if (!read->rd_filp)
+               nfsd_put_tmp_read_open(file, ra);
+
+err_truncate:
+       if (err)
+               xdr_truncate_encode(xdr, starting_len);
+       return err;
+}
+
+static __be32
+nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
+{
+       int maxcount;
+       __be32 wire_count;
+       int zero = 0;
+       struct xdr_stream *xdr = &resp->xdr;
+       int length_offset = xdr->buf->len;
+       __be32 *p;
 
-       page = page_address(*(resp->rqstp->rq_next_page++));
+       if (nfserr)
+               return nfserr;
 
+       p = xdr_reserve_space(xdr, 4);
+       if (!p)
+               return nfserr_resource;
        maxcount = PAGE_SIZE;
-       RESERVE_SPACE(4);
 
+       p = xdr_reserve_space(xdr, maxcount);
+       if (!p)
+               return nfserr_resource;
        /*
         * XXX: By default, the ->readlink() VFS op will truncate symlinks
         * if they would overflow the buffer.  Is this kosher in NFSv4?  If
         * not, one easy fix is: if ->readlink() precisely fills the buffer,
         * assume that truncation occurred, and return NFS4ERR_RESOURCE.
         */
-       nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp, page, &maxcount);
+       nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp,
+                                               (char *)p, &maxcount);
        if (nfserr == nfserr_isdir)
-               return nfserr_inval;
-       if (nfserr)
+               nfserr = nfserr_inval;
+       if (nfserr) {
+               xdr_truncate_encode(xdr, length_offset);
                return nfserr;
-
-       WRITE32(maxcount);
-       ADJUST_ARGS();
-       resp->xbuf->head[0].iov_len = (char*)p
-                               - (char*)resp->xbuf->head[0].iov_base;
-       resp->xbuf->page_len = maxcount;
-
-       /* Use rest of head for padding and remaining ops: */
-       resp->xbuf->tail[0].iov_base = p;
-       resp->xbuf->tail[0].iov_len = 0;
-       if (maxcount&3) {
-               RESERVE_SPACE(4);
-               WRITE32(0);
-               resp->xbuf->tail[0].iov_base += maxcount&3;
-               resp->xbuf->tail[0].iov_len = 4 - (maxcount&3);
-               ADJUST_ARGS();
        }
+
+       wire_count = htonl(maxcount);
+       write_bytes_to_xdr_buf(xdr->buf, length_offset, &wire_count, 4);
+       xdr_truncate_encode(xdr, length_offset + 4 + maxcount);
+       if (maxcount & 3)
+               write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount,
+                                               &zero, 4 - (maxcount&3));
        return 0;
 }
 
@@ -3062,47 +3277,52 @@ static __be32
 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
 {
        int maxcount;
+       int bytes_left;
        loff_t offset;
-       __be32 *page, *savep, *tailbase;
+       __be64 wire_offset;
+       struct xdr_stream *xdr = &resp->xdr;
+       int starting_len = xdr->buf->len;
        __be32 *p;
 
        if (nfserr)
                return nfserr;
-       if (resp->xbuf->page_len)
-               return nfserr_resource;
-       if (!*resp->rqstp->rq_next_page)
-               return nfserr_resource;
 
-       RESERVE_SPACE(NFS4_VERIFIER_SIZE);
-       savep = p;
+       p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
+       if (!p)
+               return nfserr_resource;
 
        /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
-       WRITE32(0);
-       WRITE32(0);
-       ADJUST_ARGS();
-       resp->xbuf->head[0].iov_len = ((char*)resp->p) - (char*)resp->xbuf->head[0].iov_base;
-       tailbase = p;
-
-       maxcount = PAGE_SIZE;
-       if (maxcount > readdir->rd_maxcount)
-               maxcount = readdir->rd_maxcount;
+       *p++ = cpu_to_be32(0);
+       *p++ = cpu_to_be32(0);
+       resp->xdr.buf->head[0].iov_len = ((char *)resp->xdr.p)
+                               - (char *)resp->xdr.buf->head[0].iov_base;
 
        /*
-        * Convert from bytes to words, account for the two words already
-        * written, make sure to leave two words at the end for the next
-        * pointer and eof field.
+        * Number of bytes left for directory entries allowing for the
+        * final 8 bytes of the readdir and a following failed op:
+        */
+       bytes_left = xdr->buf->buflen - xdr->buf->len
+                       - COMPOUND_ERR_SLACK_SPACE - 8;
+       if (bytes_left < 0) {
+               nfserr = nfserr_resource;
+               goto err_no_verf;
+       }
+       maxcount = min_t(u32, readdir->rd_maxcount, INT_MAX);
+       /*
+        * Note the rfc defines rd_maxcount as the size of the
+        * READDIR4resok structure, which includes the verifier above
+        * and the 8 bytes encoded at the end of this function:
         */
-       maxcount = (maxcount >> 2) - 4;
-       if (maxcount < 0) {
-               nfserr =  nfserr_toosmall;
+       if (maxcount < 16) {
+               nfserr = nfserr_toosmall;
                goto err_no_verf;
        }
+       maxcount = min_t(int, maxcount-16, bytes_left);
 
-       page = page_address(*(resp->rqstp->rq_next_page++));
+       readdir->xdr = xdr;
+       readdir->rd_maxcount = maxcount;
        readdir->common.err = 0;
-       readdir->buflen = maxcount;
-       readdir->buffer = page;
-       readdir->offset = NULL;
+       readdir->cookie_offset = 0;
 
        offset = readdir->rd_cookie;
        nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
@@ -3110,42 +3330,49 @@ nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4
                              &readdir->common, nfsd4_encode_dirent);
        if (nfserr == nfs_ok &&
            readdir->common.err == nfserr_toosmall &&
-           readdir->buffer == page) 
-               nfserr = nfserr_toosmall;
+           xdr->buf->len == starting_len + 8) {
+               /* nothing encoded; which limit did we hit?: */
+               if (maxcount - 16 < bytes_left)
+                       /* It was the fault of rd_maxcount: */
+                       nfserr = nfserr_toosmall;
+               else
+                       /* We ran out of buffer space: */
+                       nfserr = nfserr_resource;
+       }
        if (nfserr)
                goto err_no_verf;
 
-       if (readdir->offset)
-               xdr_encode_hyper(readdir->offset, offset);
+       if (readdir->cookie_offset) {
+               wire_offset = cpu_to_be64(offset);
+               write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset,
+                                                       &wire_offset, 8);
+       }
 
-       p = readdir->buffer;
+       p = xdr_reserve_space(xdr, 8);
+       if (!p) {
+               WARN_ON_ONCE(1);
+               goto err_no_verf;
+       }
        *p++ = 0;       /* no more entries */
        *p++ = htonl(readdir->common.err == nfserr_eof);
-       resp->xbuf->page_len = ((char*)p) -
-               (char*)page_address(*(resp->rqstp->rq_next_page-1));
-
-       /* Use rest of head for padding and remaining ops: */
-       resp->xbuf->tail[0].iov_base = tailbase;
-       resp->xbuf->tail[0].iov_len = 0;
-       resp->p = resp->xbuf->tail[0].iov_base;
-       resp->end = resp->p + (PAGE_SIZE - resp->xbuf->head[0].iov_len)/4;
 
        return 0;
 err_no_verf:
-       p = savep;
-       ADJUST_ARGS();
+       xdr_truncate_encode(xdr, starting_len);
        return nfserr;
 }
 
 static __be32
 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(20);
-               write_cinfo(&p, &remove->rm_cinfo);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 20);
+               if (!p)
+                       return nfserr_resource;
+               p = encode_cinfo(p, &remove->rm_cinfo);
        }
        return nfserr;
 }
@@ -3153,19 +3380,21 @@ nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_
 static __be32
 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(40);
-               write_cinfo(&p, &rename->rn_sinfo);
-               write_cinfo(&p, &rename->rn_tinfo);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 40);
+               if (!p)
+                       return nfserr_resource;
+               p = encode_cinfo(p, &rename->rn_sinfo);
+               p = encode_cinfo(p, &rename->rn_tinfo);
        }
        return nfserr;
 }
 
 static __be32
-nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp,
+nfsd4_do_encode_secinfo(struct xdr_stream *xdr,
                         __be32 nfserr, struct svc_export *exp)
 {
        u32 i, nflavs, supported;
@@ -3176,6 +3405,7 @@ nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp,
 
        if (nfserr)
                goto out;
+       nfserr = nfserr_resource;
        if (exp->ex_nflavors) {
                flavs = exp->ex_flavors;
                nflavs = exp->ex_nflavors;
@@ -3197,9 +3427,10 @@ nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp,
        }
 
        supported = 0;
-       RESERVE_SPACE(4);
+       p = xdr_reserve_space(xdr, 4);
+       if (!p)
+               goto out;
        flavorsp = p++;         /* to be backfilled later */
-       ADJUST_ARGS();
 
        for (i = 0; i < nflavs; i++) {
                rpc_authflavor_t pf = flavs[i].pseudoflavor;
@@ -3207,18 +3438,20 @@ nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp,
 
                if (rpcauth_get_gssinfo(pf, &info) == 0) {
                        supported++;
-                       RESERVE_SPACE(4 + 4 + XDR_LEN(info.oid.len) + 4 + 4);
-                       WRITE32(RPC_AUTH_GSS);
-                       WRITE32(info.oid.len);
-                       WRITEMEM(info.oid.data, info.oid.len);
-                       WRITE32(info.qop);
-                       WRITE32(info.service);
-                       ADJUST_ARGS();
+                       p = xdr_reserve_space(xdr, 4 + 4 +
+                                             XDR_LEN(info.oid.len) + 4 + 4);
+                       if (!p)
+                               goto out;
+                       *p++ = cpu_to_be32(RPC_AUTH_GSS);
+                       p = xdr_encode_opaque(p,  info.oid.data, info.oid.len);
+                       *p++ = cpu_to_be32(info.qop);
+                       *p++ = cpu_to_be32(info.service);
                } else if (pf < RPC_AUTH_MAXFLAVOR) {
                        supported++;
-                       RESERVE_SPACE(4);
-                       WRITE32(pf);
-                       ADJUST_ARGS();
+                       p = xdr_reserve_space(xdr, 4);
+                       if (!p)
+                               goto out;
+                       *p++ = cpu_to_be32(pf);
                } else {
                        if (report)
                                pr_warn("NFS: SECINFO: security flavor %u "
@@ -3229,7 +3462,7 @@ nfsd4_do_encode_secinfo(struct nfsd4_compoundres *resp,
        if (nflavs != supported)
                report = false;
        *flavorsp = htonl(supported);
-
+       nfserr = 0;
 out:
        if (exp)
                exp_put(exp);
@@ -3240,14 +3473,18 @@ static __be32
 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
                     struct nfsd4_secinfo *secinfo)
 {
-       return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->si_exp);
+       struct xdr_stream *xdr = &resp->xdr;
+
+       return nfsd4_do_encode_secinfo(xdr, nfserr, secinfo->si_exp);
 }
 
 static __be32
 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
                     struct nfsd4_secinfo_no_name *secinfo)
 {
-       return nfsd4_do_encode_secinfo(resp, nfserr, secinfo->sin_exp);
+       struct xdr_stream *xdr = &resp->xdr;
+
+       return nfsd4_do_encode_secinfo(xdr, nfserr, secinfo->sin_exp);
 }
 
 /*
@@ -3257,41 +3494,47 @@ nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
 static __be32
 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
-       RESERVE_SPACE(16);
+       p = xdr_reserve_space(xdr, 16);
+       if (!p)
+               return nfserr_resource;
        if (nfserr) {
-               WRITE32(3);
-               WRITE32(0);
-               WRITE32(0);
-               WRITE32(0);
+               *p++ = cpu_to_be32(3);
+               *p++ = cpu_to_be32(0);
+               *p++ = cpu_to_be32(0);
+               *p++ = cpu_to_be32(0);
        }
        else {
-               WRITE32(3);
-               WRITE32(setattr->sa_bmval[0]);
-               WRITE32(setattr->sa_bmval[1]);
-               WRITE32(setattr->sa_bmval[2]);
+               *p++ = cpu_to_be32(3);
+               *p++ = cpu_to_be32(setattr->sa_bmval[0]);
+               *p++ = cpu_to_be32(setattr->sa_bmval[1]);
+               *p++ = cpu_to_be32(setattr->sa_bmval[2]);
        }
-       ADJUST_ARGS();
        return nfserr;
 }
 
 static __be32
 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(8 + NFS4_VERIFIER_SIZE);
-               WRITEMEM(&scd->se_clientid, 8);
-               WRITEMEM(&scd->se_confirm, NFS4_VERIFIER_SIZE);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 8 + NFS4_VERIFIER_SIZE);
+               if (!p)
+                       return nfserr_resource;
+               p = xdr_encode_opaque_fixed(p, &scd->se_clientid, 8);
+               p = xdr_encode_opaque_fixed(p, &scd->se_confirm,
+                                               NFS4_VERIFIER_SIZE);
        }
        else if (nfserr == nfserr_clid_inuse) {
-               RESERVE_SPACE(8);
-               WRITE32(0);
-               WRITE32(0);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 8);
+               if (!p)
+                       return nfserr_resource;
+               *p++ = cpu_to_be32(0);
+               *p++ = cpu_to_be32(0);
        }
        return nfserr;
 }
@@ -3299,14 +3542,17 @@ nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct n
 static __be32
 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (!nfserr) {
-               RESERVE_SPACE(16);
-               WRITE32(write->wr_bytes_written);
-               WRITE32(write->wr_how_written);
-               WRITEMEM(write->wr_verifier.data, NFS4_VERIFIER_SIZE);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 16);
+               if (!p)
+                       return nfserr_resource;
+               *p++ = cpu_to_be32(write->wr_bytes_written);
+               *p++ = cpu_to_be32(write->wr_how_written);
+               p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
+                                                       NFS4_VERIFIER_SIZE);
        }
        return nfserr;
 }
@@ -3323,6 +3569,7 @@ static __be32
 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
                         struct nfsd4_exchange_id *exid)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
        char *major_id;
        char *server_scope;
@@ -3338,60 +3585,61 @@ nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
        server_scope = utsname()->nodename;
        server_scope_sz = strlen(server_scope);
 
-       RESERVE_SPACE(
+       p = xdr_reserve_space(xdr,
                8 /* eir_clientid */ +
                4 /* eir_sequenceid */ +
                4 /* eir_flags */ +
                4 /* spr_how */);
+       if (!p)
+               return nfserr_resource;
 
-       WRITEMEM(&exid->clientid, 8);
-       WRITE32(exid->seqid);
-       WRITE32(exid->flags);
+       p = xdr_encode_opaque_fixed(p, &exid->clientid, 8);
+       *p++ = cpu_to_be32(exid->seqid);
+       *p++ = cpu_to_be32(exid->flags);
 
-       WRITE32(exid->spa_how);
-       ADJUST_ARGS();
+       *p++ = cpu_to_be32(exid->spa_how);
 
        switch (exid->spa_how) {
        case SP4_NONE:
                break;
        case SP4_MACH_CRED:
                /* spo_must_enforce, spo_must_allow */
-               RESERVE_SPACE(16);
+               p = xdr_reserve_space(xdr, 16);
+               if (!p)
+                       return nfserr_resource;
 
                /* spo_must_enforce bitmap: */
-               WRITE32(2);
-               WRITE32(nfs4_minimal_spo_must_enforce[0]);
-               WRITE32(nfs4_minimal_spo_must_enforce[1]);
+               *p++ = cpu_to_be32(2);
+               *p++ = cpu_to_be32(nfs4_minimal_spo_must_enforce[0]);
+               *p++ = cpu_to_be32(nfs4_minimal_spo_must_enforce[1]);
                /* empty spo_must_allow bitmap: */
-               WRITE32(0);
+               *p++ = cpu_to_be32(0);
 
-               ADJUST_ARGS();
                break;
        default:
                WARN_ON_ONCE(1);
        }
 
-       RESERVE_SPACE(
+       p = xdr_reserve_space(xdr,
                8 /* so_minor_id */ +
                4 /* so_major_id.len */ +
                (XDR_QUADLEN(major_id_sz) * 4) +
                4 /* eir_server_scope.len */ +
                (XDR_QUADLEN(server_scope_sz) * 4) +
                4 /* eir_server_impl_id.count (0) */);
+       if (!p)
+               return nfserr_resource;
 
        /* The server_owner struct */
-       WRITE64(minor_id);      /* Minor id */
+       p = xdr_encode_hyper(p, minor_id);      /* Minor id */
        /* major id */
-       WRITE32(major_id_sz);
-       WRITEMEM(major_id, major_id_sz);
+       p = xdr_encode_opaque(p, major_id, major_id_sz);
 
        /* Server scope */
-       WRITE32(server_scope_sz);
-       WRITEMEM(server_scope, server_scope_sz);
+       p = xdr_encode_opaque(p, server_scope, server_scope_sz);
 
        /* Implementation id */
-       WRITE32(0);     /* zero length nfs_impl_id4 array */
-       ADJUST_ARGS();
+       *p++ = cpu_to_be32(0);  /* zero length nfs_impl_id4 array */
        return 0;
 }
 
@@ -3399,47 +3647,54 @@ static __be32
 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
                            struct nfsd4_create_session *sess)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (nfserr)
                return nfserr;
 
-       RESERVE_SPACE(24);
-       WRITEMEM(sess->sessionid.data, NFS4_MAX_SESSIONID_LEN);
-       WRITE32(sess->seqid);
-       WRITE32(sess->flags);
-       ADJUST_ARGS();
-
-       RESERVE_SPACE(28);
-       WRITE32(0); /* headerpadsz */
-       WRITE32(sess->fore_channel.maxreq_sz);
-       WRITE32(sess->fore_channel.maxresp_sz);
-       WRITE32(sess->fore_channel.maxresp_cached);
-       WRITE32(sess->fore_channel.maxops);
-       WRITE32(sess->fore_channel.maxreqs);
-       WRITE32(sess->fore_channel.nr_rdma_attrs);
-       ADJUST_ARGS();
+       p = xdr_reserve_space(xdr, 24);
+       if (!p)
+               return nfserr_resource;
+       p = xdr_encode_opaque_fixed(p, sess->sessionid.data,
+                                       NFS4_MAX_SESSIONID_LEN);
+       *p++ = cpu_to_be32(sess->seqid);
+       *p++ = cpu_to_be32(sess->flags);
+
+       p = xdr_reserve_space(xdr, 28);
+       if (!p)
+               return nfserr_resource;
+       *p++ = cpu_to_be32(0); /* headerpadsz */
+       *p++ = cpu_to_be32(sess->fore_channel.maxreq_sz);
+       *p++ = cpu_to_be32(sess->fore_channel.maxresp_sz);
+       *p++ = cpu_to_be32(sess->fore_channel.maxresp_cached);
+       *p++ = cpu_to_be32(sess->fore_channel.maxops);
+       *p++ = cpu_to_be32(sess->fore_channel.maxreqs);
+       *p++ = cpu_to_be32(sess->fore_channel.nr_rdma_attrs);
 
        if (sess->fore_channel.nr_rdma_attrs) {
-               RESERVE_SPACE(4);
-               WRITE32(sess->fore_channel.rdma_attrs);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
+                       return nfserr_resource;
+               *p++ = cpu_to_be32(sess->fore_channel.rdma_attrs);
        }
 
-       RESERVE_SPACE(28);
-       WRITE32(0); /* headerpadsz */
-       WRITE32(sess->back_channel.maxreq_sz);
-       WRITE32(sess->back_channel.maxresp_sz);
-       WRITE32(sess->back_channel.maxresp_cached);
-       WRITE32(sess->back_channel.maxops);
-       WRITE32(sess->back_channel.maxreqs);
-       WRITE32(sess->back_channel.nr_rdma_attrs);
-       ADJUST_ARGS();
+       p = xdr_reserve_space(xdr, 28);
+       if (!p)
+               return nfserr_resource;
+       *p++ = cpu_to_be32(0); /* headerpadsz */
+       *p++ = cpu_to_be32(sess->back_channel.maxreq_sz);
+       *p++ = cpu_to_be32(sess->back_channel.maxresp_sz);
+       *p++ = cpu_to_be32(sess->back_channel.maxresp_cached);
+       *p++ = cpu_to_be32(sess->back_channel.maxops);
+       *p++ = cpu_to_be32(sess->back_channel.maxreqs);
+       *p++ = cpu_to_be32(sess->back_channel.nr_rdma_attrs);
 
        if (sess->back_channel.nr_rdma_attrs) {
-               RESERVE_SPACE(4);
-               WRITE32(sess->back_channel.rdma_attrs);
-               ADJUST_ARGS();
+               p = xdr_reserve_space(xdr, 4);
+               if (!p)
+                       return nfserr_resource;
+               *p++ = cpu_to_be32(sess->back_channel.rdma_attrs);
        }
        return 0;
 }
@@ -3448,22 +3703,25 @@ static __be32
 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
                      struct nfsd4_sequence *seq)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        __be32 *p;
 
        if (nfserr)
                return nfserr;
 
-       RESERVE_SPACE(NFS4_MAX_SESSIONID_LEN + 20);
-       WRITEMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
-       WRITE32(seq->seqid);
-       WRITE32(seq->slotid);
+       p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 20);
+       if (!p)
+               return nfserr_resource;
+       p = xdr_encode_opaque_fixed(p, seq->sessionid.data,
+                                       NFS4_MAX_SESSIONID_LEN);
+       *p++ = cpu_to_be32(seq->seqid);
+       *p++ = cpu_to_be32(seq->slotid);
        /* Note slotid's are numbered from zero: */
-       WRITE32(seq->maxslots - 1); /* sr_highest_slotid */
-       WRITE32(seq->maxslots - 1); /* sr_target_highest_slotid */
-       WRITE32(seq->status_flags);
+       *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_highest_slotid */
+       *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_target_highest_slotid */
+       *p++ = cpu_to_be32(seq->status_flags);
 
-       ADJUST_ARGS();
-       resp->cstate.datap = p; /* DRC cache data pointer */
+       resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */
        return 0;
 }
 
@@ -3471,20 +3729,22 @@ static __be32
 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
                          struct nfsd4_test_stateid *test_stateid)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        struct nfsd4_test_stateid_id *stateid, *next;
        __be32 *p;
 
        if (nfserr)
                return nfserr;
 
-       RESERVE_SPACE(4 + (4 * test_stateid->ts_num_ids));
+       p = xdr_reserve_space(xdr, 4 + (4 * test_stateid->ts_num_ids));
+       if (!p)
+               return nfserr_resource;
        *p++ = htonl(test_stateid->ts_num_ids);
 
        list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) {
                *p++ = stateid->ts_id_status;
        }
 
-       ADJUST_ARGS();
        return nfserr;
 }
 
@@ -3563,81 +3823,99 @@ static nfsd4_enc nfsd4_enc_ops[] = {
 };
 
 /*
- * Calculate the total amount of memory that the compound response has taken
- * after encoding the current operation with pad.
- *
- * pad: if operation is non-idempotent, pad was calculate by op_rsize_bop()
- *      which was specified at nfsd4_operation, else pad is zero.
- *
- * Compare this length to the session se_fmaxresp_sz and se_fmaxresp_cached.
+ * Calculate whether we still have space to encode repsize bytes.
+ * There are two considerations:
+ *     - For NFS versions >=4.1, the size of the reply must stay within
+ *       session limits
+ *     - For all NFS versions, we must stay within limited preallocated
+ *       buffer space.
  *
- * Our se_fmaxresp_cached will always be a multiple of PAGE_SIZE, and so
- * will be at least a page and will therefore hold the xdr_buf head.
+ * This is called before the operation is processed, so can only provide
+ * an upper estimate.  For some nonidempotent operations (such as
+ * getattr), it's not necessarily a problem if that estimate is wrong,
+ * as we can fail it after processing without significant side effects.
  */
-__be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 pad)
+__be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize)
 {
-       struct xdr_buf *xb = &resp->rqstp->rq_res;
-       struct nfsd4_session *session = NULL;
+       struct xdr_buf *buf = &resp->rqstp->rq_res;
        struct nfsd4_slot *slot = resp->cstate.slot;
-       u32 length, tlen = 0;
 
+       if (buf->len + respsize <= buf->buflen)
+               return nfs_ok;
        if (!nfsd4_has_session(&resp->cstate))
-               return 0;
-
-       session = resp->cstate.session;
-
-       if (xb->page_len == 0) {
-               length = (char *)resp->p - (char *)xb->head[0].iov_base + pad;
-       } else {
-               if (xb->tail[0].iov_base && xb->tail[0].iov_len > 0)
-                       tlen = (char *)resp->p - (char *)xb->tail[0].iov_base;
-
-               length = xb->head[0].iov_len + xb->page_len + tlen + pad;
-       }
-       dprintk("%s length %u, xb->page_len %u tlen %u pad %u\n", __func__,
-               length, xb->page_len, tlen, pad);
-
-       if (length > session->se_fchannel.maxresp_sz)
-               return nfserr_rep_too_big;
-
-       if ((slot->sl_flags & NFSD4_SLOT_CACHETHIS) &&
-           length > session->se_fchannel.maxresp_cached)
+               return nfserr_resource;
+       if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) {
+               WARN_ON_ONCE(1);
                return nfserr_rep_too_big_to_cache;
-
-       return 0;
+       }
+       return nfserr_rep_too_big;
 }
 
 void
 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
 {
+       struct xdr_stream *xdr = &resp->xdr;
        struct nfs4_stateowner *so = resp->cstate.replay_owner;
-       __be32 *statp;
+       struct svc_rqst *rqstp = resp->rqstp;
+       int post_err_offset;
+       nfsd4_enc encoder;
        __be32 *p;
 
-       RESERVE_SPACE(8);
-       WRITE32(op->opnum);
-       statp = p++;    /* to be backfilled at the end */
-       ADJUST_ARGS();
+       p = xdr_reserve_space(xdr, 8);
+       if (!p) {
+               WARN_ON_ONCE(1);
+               return;
+       }
+       *p++ = cpu_to_be32(op->opnum);
+       post_err_offset = xdr->buf->len;
 
        if (op->opnum == OP_ILLEGAL)
                goto status;
        BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
               !nfsd4_enc_ops[op->opnum]);
-       op->status = nfsd4_enc_ops[op->opnum](resp, op->status, &op->u);
+       encoder = nfsd4_enc_ops[op->opnum];
+       op->status = encoder(resp, op->status, &op->u);
+       xdr_commit_encode(xdr);
+
        /* nfsd4_check_resp_size guarantees enough room for error status */
-       if (!op->status)
-               op->status = nfsd4_check_resp_size(resp, 0);
+       if (!op->status) {
+               int space_needed = 0;
+               if (!nfsd4_last_compound_op(rqstp))
+                       space_needed = COMPOUND_ERR_SLACK_SPACE;
+               op->status = nfsd4_check_resp_size(resp, space_needed);
+       }
+       if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) {
+               struct nfsd4_slot *slot = resp->cstate.slot;
+
+               if (slot->sl_flags & NFSD4_SLOT_CACHETHIS)
+                       op->status = nfserr_rep_too_big_to_cache;
+               else
+                       op->status = nfserr_rep_too_big;
+       }
+       if (op->status == nfserr_resource ||
+           op->status == nfserr_rep_too_big ||
+           op->status == nfserr_rep_too_big_to_cache) {
+               /*
+                * The operation may have already been encoded or
+                * partially encoded.  No op returns anything additional
+                * in the case of one of these three errors, so we can
+                * just truncate back to after the status.  But it's a
+                * bug if we had to do this on a non-idempotent op:
+                */
+               warn_on_nonidempotent_op(op);
+               xdr_truncate_encode(xdr, post_err_offset);
+       }
        if (so) {
+               int len = xdr->buf->len - post_err_offset;
+
                so->so_replay.rp_status = op->status;
-               so->so_replay.rp_buflen = (char *)resp->p - (char *)(statp+1);
-               memcpy(so->so_replay.rp_buf, statp+1, so->so_replay.rp_buflen);
+               so->so_replay.rp_buflen = len;
+               read_bytes_from_xdr_buf(xdr->buf, post_err_offset,
+                                               so->so_replay.rp_buf, len);
        }
 status:
-       /*
-        * Note: We write the status directly, instead of using WRITE32(),
-        * since it is already in network byte order.
-        */
-       *statp = op->status;
+       /* Note that op->status is already in network byte order: */
+       write_bytes_to_xdr_buf(xdr->buf, post_err_offset - 4, &op->status, 4);
 }
 
 /* 
@@ -3649,21 +3927,22 @@ status:
  * called with nfs4_lock_state() held
  */
 void
-nfsd4_encode_replay(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
+nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op)
 {
        __be32 *p;
        struct nfs4_replay *rp = op->replay;
 
        BUG_ON(!rp);
 
-       RESERVE_SPACE(8);
-       WRITE32(op->opnum);
+       p = xdr_reserve_space(xdr, 8 + rp->rp_buflen);
+       if (!p) {
+               WARN_ON_ONCE(1);
+               return;
+       }
+       *p++ = cpu_to_be32(op->opnum);
        *p++ = rp->rp_status;  /* already xdr'ed */
-       ADJUST_ARGS();
 
-       RESERVE_SPACE(rp->rp_buflen);
-       WRITEMEM(rp->rp_buf, rp->rp_buflen);
-       ADJUST_ARGS();
+       p = xdr_encode_opaque_fixed(p, rp->rp_buf, rp->rp_buflen);
 }
 
 int
@@ -3720,19 +3999,19 @@ nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p, struct nfsd4_compo
         * All that remains is to write the tag and operation count...
         */
        struct nfsd4_compound_state *cs = &resp->cstate;
-       struct kvec *iov;
+       struct xdr_buf *buf = resp->xdr.buf;
+
+       WARN_ON_ONCE(buf->len != buf->head[0].iov_len + buf->page_len +
+                                buf->tail[0].iov_len);
+
+       rqstp->rq_next_page = resp->xdr.page_ptr + 1;
+
        p = resp->tagp;
        *p++ = htonl(resp->taglen);
        memcpy(p, resp->tag, resp->taglen);
        p += XDR_QUADLEN(resp->taglen);
        *p++ = htonl(resp->opcnt);
 
-       if (rqstp->rq_res.page_len) 
-               iov = &rqstp->rq_res.tail[0];
-       else
-               iov = &rqstp->rq_res.head[0];
-       iov->iov_len = ((char*)resp->p) - (char*)iov->iov_base;
-       BUG_ON(iov->iov_len > PAGE_SIZE);
        if (nfsd4_has_session(cs)) {
                struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
                struct nfs4_client *clp = cs->session->se_client;