xref: /netbsd-src/sys/fs/tmpfs/tmpfs_vnops.c (revision 2d48ac808c43ea6701ba8f33cfc3645685301f79)
1 /*	$NetBSD: tmpfs_vnops.c,v 1.62 2009/09/03 04:45:28 elad Exp $	*/
2 
3 /*
4  * Copyright (c) 2005, 2006, 2007 The NetBSD Foundation, Inc.
5  * All rights reserved.
6  *
7  * This code is derived from software contributed to The NetBSD Foundation
8  * by Julio M. Merino Vidal, developed as part of Google's Summer of Code
9  * 2005 program.
10  *
11  * Redistribution and use in source and binary forms, with or without
12  * modification, are permitted provided that the following conditions
13  * are met:
14  * 1. Redistributions of source code must retain the above copyright
15  *    notice, this list of conditions and the following disclaimer.
16  * 2. Redistributions in binary form must reproduce the above copyright
17  *    notice, this list of conditions and the following disclaimer in the
18  *    documentation and/or other materials provided with the distribution.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
21  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
22  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
23  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
24  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
30  * POSSIBILITY OF SUCH DAMAGE.
31  */
32 
33 /*
34  * tmpfs vnode interface.
35  */
36 
37 #include <sys/cdefs.h>
38 __KERNEL_RCSID(0, "$NetBSD: tmpfs_vnops.c,v 1.62 2009/09/03 04:45:28 elad Exp $");
39 
40 #include <sys/param.h>
41 #include <sys/dirent.h>
42 #include <sys/fcntl.h>
43 #include <sys/event.h>
44 #include <sys/malloc.h>
45 #include <sys/namei.h>
46 #include <sys/proc.h>
47 #include <sys/stat.h>
48 #include <sys/uio.h>
49 #include <sys/unistd.h>
50 #include <sys/vnode.h>
51 #include <sys/lockf.h>
52 #include <sys/kauth.h>
53 
54 #include <uvm/uvm.h>
55 
56 #include <miscfs/fifofs/fifo.h>
57 #include <miscfs/genfs/genfs.h>
58 #include <fs/tmpfs/tmpfs_vnops.h>
59 #include <fs/tmpfs/tmpfs.h>
60 
61 /* --------------------------------------------------------------------- */
62 
63 /*
64  * vnode operations vector used for files stored in a tmpfs file system.
65  */
66 int (**tmpfs_vnodeop_p)(void *);
67 const struct vnodeopv_entry_desc tmpfs_vnodeop_entries[] = {
68 	{ &vop_default_desc,		vn_default_error },
69 	{ &vop_lookup_desc,		tmpfs_lookup },
70 	{ &vop_create_desc,		tmpfs_create },
71 	{ &vop_mknod_desc,		tmpfs_mknod },
72 	{ &vop_open_desc,		tmpfs_open },
73 	{ &vop_close_desc,		tmpfs_close },
74 	{ &vop_access_desc,		tmpfs_access },
75 	{ &vop_getattr_desc,		tmpfs_getattr },
76 	{ &vop_setattr_desc,		tmpfs_setattr },
77 	{ &vop_read_desc,		tmpfs_read },
78 	{ &vop_write_desc,		tmpfs_write },
79 	{ &vop_ioctl_desc,		tmpfs_ioctl },
80 	{ &vop_fcntl_desc,		tmpfs_fcntl },
81 	{ &vop_poll_desc,		tmpfs_poll },
82 	{ &vop_kqfilter_desc,		tmpfs_kqfilter },
83 	{ &vop_revoke_desc,		tmpfs_revoke },
84 	{ &vop_mmap_desc,		tmpfs_mmap },
85 	{ &vop_fsync_desc,		tmpfs_fsync },
86 	{ &vop_seek_desc,		tmpfs_seek },
87 	{ &vop_remove_desc,		tmpfs_remove },
88 	{ &vop_link_desc,		tmpfs_link },
89 	{ &vop_rename_desc,		tmpfs_rename },
90 	{ &vop_mkdir_desc,		tmpfs_mkdir },
91 	{ &vop_rmdir_desc,		tmpfs_rmdir },
92 	{ &vop_symlink_desc,		tmpfs_symlink },
93 	{ &vop_readdir_desc,		tmpfs_readdir },
94 	{ &vop_readlink_desc,		tmpfs_readlink },
95 	{ &vop_abortop_desc,		tmpfs_abortop },
96 	{ &vop_inactive_desc,		tmpfs_inactive },
97 	{ &vop_reclaim_desc,		tmpfs_reclaim },
98 	{ &vop_lock_desc,		tmpfs_lock },
99 	{ &vop_unlock_desc,		tmpfs_unlock },
100 	{ &vop_bmap_desc,		tmpfs_bmap },
101 	{ &vop_strategy_desc,		tmpfs_strategy },
102 	{ &vop_print_desc,		tmpfs_print },
103 	{ &vop_pathconf_desc,		tmpfs_pathconf },
104 	{ &vop_islocked_desc,		tmpfs_islocked },
105 	{ &vop_advlock_desc,		tmpfs_advlock },
106 	{ &vop_bwrite_desc,		tmpfs_bwrite },
107 	{ &vop_getpages_desc,		tmpfs_getpages },
108 	{ &vop_putpages_desc,		tmpfs_putpages },
109 	{ NULL, NULL }
110 };
111 const struct vnodeopv_desc tmpfs_vnodeop_opv_desc =
112 	{ &tmpfs_vnodeop_p, tmpfs_vnodeop_entries };
113 
114 /* --------------------------------------------------------------------- */
115 
116 int
117 tmpfs_lookup(void *v)
118 {
119 	struct vnode *dvp = ((struct vop_lookup_args *)v)->a_dvp;
120 	struct vnode **vpp = ((struct vop_lookup_args *)v)->a_vpp;
121 	struct componentname *cnp = ((struct vop_lookup_args *)v)->a_cnp;
122 
123 	int error;
124 	struct tmpfs_dirent *de;
125 	struct tmpfs_node *dnode;
126 
127 	KASSERT(VOP_ISLOCKED(dvp));
128 
129 	dnode = VP_TO_TMPFS_DIR(dvp);
130 	*vpp = NULL;
131 
132 	/* Check accessibility of requested node as a first step. */
133 	error = VOP_ACCESS(dvp, VEXEC, cnp->cn_cred);
134 	if (error != 0)
135 		goto out;
136 
137 	/* If requesting the last path component on a read-only file system
138 	 * with a write operation, deny it. */
139 	if ((cnp->cn_flags & ISLASTCN) &&
140 	    (dvp->v_mount->mnt_flag & MNT_RDONLY) &&
141 	    (cnp->cn_nameiop == DELETE || cnp->cn_nameiop == RENAME)) {
142 		error = EROFS;
143 		goto out;
144 	}
145 
146 	/* Avoid doing a linear scan of the directory if the requested
147 	 * directory/name couple is already in the cache. */
148 	error = cache_lookup(dvp, vpp, cnp);
149 	if (error >= 0)
150 		goto out;
151 
152 	/* We cannot be requesting the parent directory of the root node. */
153 	KASSERT(IMPLIES(dnode->tn_type == VDIR &&
154 	    dnode->tn_spec.tn_dir.tn_parent == dnode,
155 	    !(cnp->cn_flags & ISDOTDOT)));
156 
157 	if (cnp->cn_flags & ISDOTDOT) {
158 		VOP_UNLOCK(dvp, 0);
159 
160 		/* Allocate a new vnode on the matching entry. */
161 		error = tmpfs_alloc_vp(dvp->v_mount,
162 		    dnode->tn_spec.tn_dir.tn_parent, vpp);
163 
164 		vn_lock(dvp, LK_EXCLUSIVE | LK_RETRY);
165 	} else if (cnp->cn_namelen == 1 && cnp->cn_nameptr[0] == '.') {
166 		VREF(dvp);
167 		*vpp = dvp;
168 		error = 0;
169 	} else {
170 		de = tmpfs_dir_lookup(dnode, cnp);
171 		if (de == NULL) {
172 			/* The entry was not found in the directory.
173 			 * This is OK iff we are creating or renaming an
174 			 * entry and are working on the last component of
175 			 * the path name. */
176 			if ((cnp->cn_flags & ISLASTCN) &&
177 			    (cnp->cn_nameiop == CREATE || \
178 			    cnp->cn_nameiop == RENAME)) {
179 				error = VOP_ACCESS(dvp, VWRITE, cnp->cn_cred);
180 				if (error != 0)
181 					goto out;
182 
183 				/* Keep the component name in the buffer for
184 				 * future uses. */
185 				cnp->cn_flags |= SAVENAME;
186 
187 				error = EJUSTRETURN;
188 			} else
189 				error = ENOENT;
190 		} else {
191 			struct tmpfs_node *tnode;
192 
193 			/* The entry was found, so get its associated
194 			 * tmpfs_node. */
195 			tnode = de->td_node;
196 
197 			/* If we are not at the last path component and
198 			 * found a non-directory or non-link entry (which
199 			 * may itself be pointing to a directory), raise
200 			 * an error. */
201 			if ((tnode->tn_type != VDIR &&
202 			    tnode->tn_type != VLNK) &&
203 			    !(cnp->cn_flags & ISLASTCN)) {
204 				error = ENOTDIR;
205 				goto out;
206 			}
207 
208 			/* Check permissions */
209 			if ((cnp->cn_flags & ISLASTCN) &&
210 			    (cnp->cn_nameiop == DELETE ||
211 			    cnp->cn_nameiop == RENAME)) {
212 				kauth_action_t action = 0;
213 
214 				/* This is the file-system's decision. */
215 				if ((dnode->tn_mode & S_ISTXT) != 0 &&
216 				    kauth_cred_geteuid(cnp->cn_cred) != dnode->tn_uid &&
217 				    kauth_cred_geteuid(cnp->cn_cred) != tnode->tn_uid)
218 					error = EPERM;
219 				else
220 					error = 0;
221 
222 				/* Only bother if we're not already failing it. */
223 				if (!error) {
224 					error = VOP_ACCESS(dvp, VWRITE, cnp->cn_cred);
225 				}
226 
227 				if (cnp->cn_nameiop == DELETE)
228 					action |= KAUTH_VNODE_DELETE;
229 				else /* if (cnp->cn_nameiop == RENAME) */
230 					action |= KAUTH_VNODE_RENAME;
231 
232 				error = kauth_authorize_vnode(cnp->cn_cred,
233 				    action, *vpp, dvp, error);
234 				if (error != 0)
235 					goto out;
236 
237 				cnp->cn_flags |= SAVENAME;
238 			} else
239 				de = NULL;
240 
241 			/* Allocate a new vnode on the matching entry. */
242 			error = tmpfs_alloc_vp(dvp->v_mount, tnode, vpp);
243 		}
244 	}
245 
246 	/* Store the result of this lookup in the cache.  Avoid this if the
247 	 * request was for creation, as it does not improve timings on
248 	 * emprical tests. */
249 	if ((cnp->cn_flags & MAKEENTRY) && cnp->cn_nameiop != CREATE &&
250 	    (cnp->cn_flags & ISDOTDOT) == 0)
251 		cache_enter(dvp, *vpp, cnp);
252 
253 out:
254 	/* If there were no errors, *vpp cannot be null and it must be
255 	 * locked. */
256 	KASSERT(IFF(error == 0, *vpp != NULL && VOP_ISLOCKED(*vpp)));
257 
258 	/* dvp must always be locked. */
259 	KASSERT(VOP_ISLOCKED(dvp));
260 
261 	return error;
262 }
263 
264 /* --------------------------------------------------------------------- */
265 
266 int
267 tmpfs_create(void *v)
268 {
269 	struct vnode *dvp = ((struct vop_create_args *)v)->a_dvp;
270 	struct vnode **vpp = ((struct vop_create_args *)v)->a_vpp;
271 	struct componentname *cnp = ((struct vop_create_args *)v)->a_cnp;
272 	struct vattr *vap = ((struct vop_create_args *)v)->a_vap;
273 
274 	KASSERT(vap->va_type == VREG || vap->va_type == VSOCK);
275 
276 	return tmpfs_alloc_file(dvp, vpp, vap, cnp, NULL);
277 }
278 /* --------------------------------------------------------------------- */
279 
280 int
281 tmpfs_mknod(void *v)
282 {
283 	struct vnode *dvp = ((struct vop_mknod_args *)v)->a_dvp;
284 	struct vnode **vpp = ((struct vop_mknod_args *)v)->a_vpp;
285 	struct componentname *cnp = ((struct vop_mknod_args *)v)->a_cnp;
286 	struct vattr *vap = ((struct vop_mknod_args *)v)->a_vap;
287 
288 	if (vap->va_type != VBLK && vap->va_type != VCHR &&
289 	    vap->va_type != VFIFO) {
290 		vput(dvp);
291 		return EINVAL;
292 	}
293 
294 	return tmpfs_alloc_file(dvp, vpp, vap, cnp, NULL);
295 }
296 
297 /* --------------------------------------------------------------------- */
298 
299 int
300 tmpfs_open(void *v)
301 {
302 	struct vnode *vp = ((struct vop_open_args *)v)->a_vp;
303 	int mode = ((struct vop_open_args *)v)->a_mode;
304 
305 	int error;
306 	struct tmpfs_node *node;
307 
308 	KASSERT(VOP_ISLOCKED(vp));
309 
310 	node = VP_TO_TMPFS_NODE(vp);
311 
312 	/* The file is still active but all its names have been removed
313 	 * (e.g. by a "rmdir $(pwd)").  It cannot be opened any more as
314 	 * it is about to die. */
315 	if (node->tn_links < 1) {
316 		error = ENOENT;
317 		goto out;
318 	}
319 
320 	/* If the file is marked append-only, deny write requests. */
321 	if (node->tn_flags & APPEND && (mode & (FWRITE | O_APPEND)) == FWRITE)
322 		error = EPERM;
323 	else
324 		error = 0;
325 
326 out:
327 	KASSERT(VOP_ISLOCKED(vp));
328 
329 	return error;
330 }
331 
332 /* --------------------------------------------------------------------- */
333 
334 int
335 tmpfs_close(void *v)
336 {
337 	struct vnode *vp = ((struct vop_close_args *)v)->a_vp;
338 
339 	struct tmpfs_node *node;
340 
341 	KASSERT(VOP_ISLOCKED(vp));
342 
343 	node = VP_TO_TMPFS_NODE(vp);
344 
345 	if (node->tn_links > 0) {
346 		/* Update node times.  No need to do it if the node has
347 		 * been deleted, because it will vanish after we return. */
348 		tmpfs_update(vp, NULL, NULL, NULL, UPDATE_CLOSE);
349 	}
350 
351 	return 0;
352 }
353 
354 /* --------------------------------------------------------------------- */
355 
356 static int
357 tmpfs_check_possible(struct vnode *vp, struct tmpfs_node *node, mode_t mode)
358 {
359 	int error = 0;
360 
361 	switch (vp->v_type) {
362 	case VDIR:
363 		/* FALLTHROUGH */
364 	case VLNK:
365 		/* FALLTHROUGH */
366 	case VREG:
367 		if (mode & VWRITE && vp->v_mount->mnt_flag & MNT_RDONLY) {
368 			error = EROFS;
369 			goto out;
370 		}
371 		break;
372 
373 	case VBLK:
374 		/* FALLTHROUGH */
375 	case VCHR:
376 		/* FALLTHROUGH */
377 	case VSOCK:
378 		/* FALLTHROUGH */
379 	case VFIFO:
380 		break;
381 
382 	default:
383 		error = EINVAL;
384 		goto out;
385 	}
386 
387 	if (mode & VWRITE && node->tn_flags & IMMUTABLE) {
388 		error = EPERM;
389 		goto out;
390 	}
391 
392  out:
393 	return error;
394 }
395 
396 static int
397 tmpfs_check_permitted(struct vnode *vp, struct tmpfs_node *node, mode_t mode,
398     kauth_cred_t cred)
399 {
400 
401 	return genfs_can_access(vp->v_type, node->tn_mode, node->tn_uid,
402 	    node->tn_gid, mode, cred);
403 }
404 
405 int
406 tmpfs_access(void *v)
407 {
408 	struct vnode *vp = ((struct vop_access_args *)v)->a_vp;
409 	int mode = ((struct vop_access_args *)v)->a_mode;
410 	kauth_cred_t cred = ((struct vop_access_args *)v)->a_cred;
411 
412 	int error;
413 	struct tmpfs_node *node;
414 
415 	KASSERT(VOP_ISLOCKED(vp));
416 
417 	node = VP_TO_TMPFS_NODE(vp);
418 
419 	error = tmpfs_check_possible(vp, node, mode);
420 	if (error)
421 		goto out;
422 
423 	error = tmpfs_check_permitted(vp, node, mode, cred);
424 
425 	error = kauth_authorize_vnode(cred, kauth_mode_to_action(mode), vp,
426 	    NULL, error);
427 
428 out:
429 	KASSERT(VOP_ISLOCKED(vp));
430 
431 	return error;
432 }
433 
434 /* --------------------------------------------------------------------- */
435 
436 int
437 tmpfs_getattr(void *v)
438 {
439 	struct vnode *vp = ((struct vop_getattr_args *)v)->a_vp;
440 	struct vattr *vap = ((struct vop_getattr_args *)v)->a_vap;
441 
442 	struct tmpfs_node *node;
443 
444 	node = VP_TO_TMPFS_NODE(vp);
445 
446 	VATTR_NULL(vap);
447 
448 	tmpfs_itimes(vp, NULL, NULL, NULL);
449 
450 	vap->va_type = vp->v_type;
451 	vap->va_mode = node->tn_mode;
452 	vap->va_nlink = node->tn_links;
453 	vap->va_uid = node->tn_uid;
454 	vap->va_gid = node->tn_gid;
455 	vap->va_fsid = vp->v_mount->mnt_stat.f_fsidx.__fsid_val[0];
456 	vap->va_fileid = node->tn_id;
457 	vap->va_size = node->tn_size;
458 	vap->va_blocksize = PAGE_SIZE;
459 	vap->va_atime = node->tn_atime;
460 	vap->va_mtime = node->tn_mtime;
461 	vap->va_ctime = node->tn_ctime;
462 	vap->va_birthtime = node->tn_birthtime;
463 	vap->va_gen = node->tn_gen;
464 	vap->va_flags = node->tn_flags;
465 	vap->va_rdev = (vp->v_type == VBLK || vp->v_type == VCHR) ?
466 		node->tn_spec.tn_dev.tn_rdev : VNOVAL;
467 	vap->va_bytes = round_page(node->tn_size);
468 	vap->va_filerev = VNOVAL;
469 	vap->va_vaflags = 0;
470 	vap->va_spare = VNOVAL; /* XXX */
471 
472 	return 0;
473 }
474 
475 /* --------------------------------------------------------------------- */
476 
477 #define GOODTIME(tv)	((tv)->tv_sec != VNOVAL || (tv)->tv_nsec != VNOVAL)
478 /* XXX Should this operation be atomic?  I think it should, but code in
479  * XXX other places (e.g., ufs) doesn't seem to be... */
480 int
481 tmpfs_setattr(void *v)
482 {
483 	struct vnode *vp = ((struct vop_setattr_args *)v)->a_vp;
484 	struct vattr *vap = ((struct vop_setattr_args *)v)->a_vap;
485 	kauth_cred_t cred = ((struct vop_setattr_args *)v)->a_cred;
486 	struct lwp *l = curlwp;
487 
488 	int error;
489 
490 	KASSERT(VOP_ISLOCKED(vp));
491 
492 	error = 0;
493 
494 	/* Abort if any unsettable attribute is given. */
495 	if (vap->va_type != VNON ||
496 	    vap->va_nlink != VNOVAL ||
497 	    vap->va_fsid != VNOVAL ||
498 	    vap->va_fileid != VNOVAL ||
499 	    vap->va_blocksize != VNOVAL ||
500 	    GOODTIME(&vap->va_ctime) ||
501 	    vap->va_gen != VNOVAL ||
502 	    vap->va_rdev != VNOVAL ||
503 	    vap->va_bytes != VNOVAL)
504 		error = EINVAL;
505 
506 	if (error == 0 && (vap->va_flags != VNOVAL))
507 		error = tmpfs_chflags(vp, vap->va_flags, cred, l);
508 
509 	if (error == 0 && (vap->va_size != VNOVAL))
510 		error = tmpfs_chsize(vp, vap->va_size, cred, l);
511 
512 	if (error == 0 && (vap->va_uid != VNOVAL || vap->va_gid != VNOVAL))
513 		error = tmpfs_chown(vp, vap->va_uid, vap->va_gid, cred, l);
514 
515 	if (error == 0 && (vap->va_mode != VNOVAL))
516 		error = tmpfs_chmod(vp, vap->va_mode, cred, l);
517 
518 	if (error == 0 && (GOODTIME(&vap->va_atime) || GOODTIME(&vap->va_mtime)
519 	    || GOODTIME(&vap->va_birthtime)))
520 		if ((error = tmpfs_chtimes(vp, &vap->va_atime, &vap->va_mtime,
521 		    &vap->va_birthtime, vap->va_vaflags, cred, l)) == 0)
522 			return 0;
523 
524 	/* Update the node times.  We give preference to the error codes
525 	 * generated by this function rather than the ones that may arise
526 	 * from tmpfs_update. */
527 	tmpfs_update(vp, NULL, NULL, NULL, 0);
528 
529 	KASSERT(VOP_ISLOCKED(vp));
530 
531 	return error;
532 }
533 
534 /* --------------------------------------------------------------------- */
535 
536 int
537 tmpfs_read(void *v)
538 {
539 	struct vnode *vp = ((struct vop_read_args *)v)->a_vp;
540 	struct uio *uio = ((struct vop_read_args *)v)->a_uio;
541 	int ioflag = ((struct vop_read_args *)v)->a_ioflag;
542 
543 	int error;
544 	struct tmpfs_node *node;
545 	struct uvm_object *uobj;
546 
547 	KASSERT(VOP_ISLOCKED(vp));
548 
549 	node = VP_TO_TMPFS_NODE(vp);
550 
551 	if (vp->v_type != VREG) {
552 		error = EISDIR;
553 		goto out;
554 	}
555 
556 	if (uio->uio_offset < 0) {
557 		error = EINVAL;
558 		goto out;
559 	}
560 
561 	node->tn_status |= TMPFS_NODE_ACCESSED;
562 
563 	uobj = node->tn_spec.tn_reg.tn_aobj;
564 	error = 0;
565 	while (error == 0 && uio->uio_resid > 0) {
566 		vsize_t len;
567 
568 		if (node->tn_size <= uio->uio_offset)
569 			break;
570 
571 		len = MIN(node->tn_size - uio->uio_offset, uio->uio_resid);
572 		if (len == 0)
573 			break;
574 
575 		error = ubc_uiomove(uobj, uio, len, IO_ADV_DECODE(ioflag),
576 		    UBC_READ | UBC_PARTIALOK | UBC_UNMAP_FLAG(vp));
577 	}
578 
579 out:
580 	KASSERT(VOP_ISLOCKED(vp));
581 
582 	return error;
583 }
584 
585 /* --------------------------------------------------------------------- */
586 
587 int
588 tmpfs_write(void *v)
589 {
590 	struct vnode *vp = ((struct vop_write_args *)v)->a_vp;
591 	struct uio *uio = ((struct vop_write_args *)v)->a_uio;
592 	int ioflag = ((struct vop_write_args *)v)->a_ioflag;
593 
594 	bool extended;
595 	int error;
596 	off_t oldsize;
597 	struct tmpfs_node *node;
598 	struct uvm_object *uobj;
599 
600 	KASSERT(VOP_ISLOCKED(vp));
601 
602 	node = VP_TO_TMPFS_NODE(vp);
603 	oldsize = node->tn_size;
604 
605 	if (uio->uio_offset < 0 || vp->v_type != VREG) {
606 		error = EINVAL;
607 		goto out;
608 	}
609 
610 	if (uio->uio_resid == 0) {
611 		error = 0;
612 		goto out;
613 	}
614 
615 	if (ioflag & IO_APPEND)
616 		uio->uio_offset = node->tn_size;
617 
618 	extended = uio->uio_offset + uio->uio_resid > node->tn_size;
619 	if (extended) {
620 		error = tmpfs_reg_resize(vp, uio->uio_offset + uio->uio_resid);
621 		if (error != 0)
622 			goto out;
623 	}
624 
625 	uobj = node->tn_spec.tn_reg.tn_aobj;
626 	error = 0;
627 	while (error == 0 && uio->uio_resid > 0) {
628 		vsize_t len;
629 
630 		len = MIN(node->tn_size - uio->uio_offset, uio->uio_resid);
631 		if (len == 0)
632 			break;
633 
634 		error = ubc_uiomove(uobj, uio, len, IO_ADV_DECODE(ioflag),
635 		    UBC_WRITE | UBC_UNMAP_FLAG(vp));
636 	}
637 
638 	node->tn_status |= TMPFS_NODE_ACCESSED | TMPFS_NODE_MODIFIED |
639 	    (extended ? TMPFS_NODE_CHANGED : 0);
640 
641 	if (error != 0)
642 		(void)tmpfs_reg_resize(vp, oldsize);
643 
644 	VN_KNOTE(vp, NOTE_WRITE);
645 
646 out:
647 	KASSERT(VOP_ISLOCKED(vp));
648 	KASSERT(IMPLIES(error == 0, uio->uio_resid == 0));
649 	KASSERT(IMPLIES(error != 0, oldsize == node->tn_size));
650 
651 	return error;
652 }
653 
654 /* --------------------------------------------------------------------- */
655 
656 int
657 tmpfs_fsync(void *v)
658 {
659 	struct vnode *vp = ((struct vop_fsync_args *)v)->a_vp;
660 
661 	KASSERT(VOP_ISLOCKED(vp));
662 
663 	tmpfs_update(vp, NULL, NULL, NULL, 0);
664 
665 	return 0;
666 }
667 
668 /* --------------------------------------------------------------------- */
669 
670 int
671 tmpfs_remove(void *v)
672 {
673 	struct vnode *dvp = ((struct vop_remove_args *)v)->a_dvp;
674 	struct vnode *vp = ((struct vop_remove_args *)v)->a_vp;
675 	struct componentname *cnp = (((struct vop_remove_args *)v)->a_cnp);
676 
677 	int error;
678 	struct tmpfs_dirent *de;
679 	struct tmpfs_mount *tmp;
680 	struct tmpfs_node *dnode;
681 	struct tmpfs_node *node;
682 
683 	KASSERT(VOP_ISLOCKED(dvp));
684 	KASSERT(VOP_ISLOCKED(vp));
685 
686 	if (vp->v_type == VDIR) {
687 		error = EPERM;
688 		goto out;
689 	}
690 
691 	dnode = VP_TO_TMPFS_DIR(dvp);
692 	node = VP_TO_TMPFS_NODE(vp);
693 	tmp = VFS_TO_TMPFS(vp->v_mount);
694 	de = tmpfs_dir_lookup(dnode, cnp);
695 	KASSERT(de);
696 	KASSERT(de->td_node == node);
697 
698 	/* Files marked as immutable or append-only cannot be deleted. */
699 	if (node->tn_flags & (IMMUTABLE | APPEND)) {
700 		error = EPERM;
701 		goto out;
702 	}
703 
704 	/* Remove the entry from the directory; as it is a file, we do not
705 	 * have to change the number of hard links of the directory. */
706 	tmpfs_dir_detach(dvp, de);
707 
708 	/* Free the directory entry we just deleted.  Note that the node
709 	 * referred by it will not be removed until the vnode is really
710 	 * reclaimed. */
711 	tmpfs_free_dirent(tmp, de, true);
712 
713 	error = 0;
714 
715 out:
716 	vput(vp);
717 	if (dvp == vp)
718 		vrele(dvp);
719 	else
720 		vput(dvp);
721 	PNBUF_PUT(cnp->cn_pnbuf);
722 
723 	return error;
724 }
725 
726 /* --------------------------------------------------------------------- */
727 
728 int
729 tmpfs_link(void *v)
730 {
731 	struct vnode *dvp = ((struct vop_link_args *)v)->a_dvp;
732 	struct vnode *vp = ((struct vop_link_args *)v)->a_vp;
733 	struct componentname *cnp = ((struct vop_link_args *)v)->a_cnp;
734 
735 	int error;
736 	struct tmpfs_dirent *de;
737 	struct tmpfs_node *dnode;
738 	struct tmpfs_node *node;
739 
740 	KASSERT(VOP_ISLOCKED(dvp));
741 	KASSERT(cnp->cn_flags & HASBUF);
742 	KASSERT(dvp != vp); /* XXX When can this be false? */
743 
744 	dnode = VP_TO_TMPFS_DIR(dvp);
745 	node = VP_TO_TMPFS_NODE(vp);
746 
747 	/* Lock vp because we will need to run tmpfs_update over it, which
748 	 * needs the vnode to be locked. */
749 	error = vn_lock(vp, LK_EXCLUSIVE | LK_RETRY);
750 	if (error != 0)
751 		goto out1;
752 
753 	/* XXX: Why aren't the following two tests done by the caller? */
754 
755 	/* Hard links of directories are forbidden. */
756 	if (vp->v_type == VDIR) {
757 		error = EPERM;
758 		goto out;
759 	}
760 
761 	/* Cannot create cross-device links. */
762 	if (dvp->v_mount != vp->v_mount) {
763 		error = EXDEV;
764 		goto out;
765 	}
766 
767 	/* Ensure that we do not overflow the maximum number of links imposed
768 	 * by the system. */
769 	KASSERT(node->tn_links <= LINK_MAX);
770 	if (node->tn_links == LINK_MAX) {
771 		error = EMLINK;
772 		goto out;
773 	}
774 
775 	/* We cannot create links of files marked immutable or append-only. */
776 	if (node->tn_flags & (IMMUTABLE | APPEND)) {
777 		error = EPERM;
778 		goto out;
779 	}
780 
781 	/* Allocate a new directory entry to represent the node. */
782 	error = tmpfs_alloc_dirent(VFS_TO_TMPFS(vp->v_mount), node,
783 	    cnp->cn_nameptr, cnp->cn_namelen, &de);
784 	if (error != 0)
785 		goto out;
786 
787 	/* Insert the new directory entry into the appropriate directory. */
788 	tmpfs_dir_attach(dvp, de);
789 
790 	/* vp link count has changed, so update node times. */
791 	node->tn_status |= TMPFS_NODE_CHANGED;
792 	tmpfs_update(vp, NULL, NULL, NULL, 0);
793 
794 	error = 0;
795 
796 out:
797 	VOP_UNLOCK(vp, 0);
798 out1:
799 	PNBUF_PUT(cnp->cn_pnbuf);
800 
801 	vput(dvp);
802 
803 	return error;
804 }
805 
806 /* --------------------------------------------------------------------- */
807 
808 int
809 tmpfs_rename(void *v)
810 {
811 	struct vnode *fdvp = ((struct vop_rename_args *)v)->a_fdvp;
812 	struct vnode *fvp = ((struct vop_rename_args *)v)->a_fvp;
813 	struct componentname *fcnp = ((struct vop_rename_args *)v)->a_fcnp;
814 	struct vnode *tdvp = ((struct vop_rename_args *)v)->a_tdvp;
815 	struct vnode *tvp = ((struct vop_rename_args *)v)->a_tvp;
816 	struct componentname *tcnp = ((struct vop_rename_args *)v)->a_tcnp;
817 
818 	char *newname;
819 	int error;
820 	struct tmpfs_dirent *de, *de2;
821 	struct tmpfs_mount *tmp;
822 	struct tmpfs_node *fdnode;
823 	struct tmpfs_node *fnode;
824 	struct tmpfs_node *tnode;
825 	struct tmpfs_node *tdnode;
826 	size_t namelen;
827 
828 	KASSERT(VOP_ISLOCKED(tdvp));
829 	KASSERT(IMPLIES(tvp != NULL, VOP_ISLOCKED(tvp) == LK_EXCLUSIVE));
830 	KASSERT(fcnp->cn_flags & HASBUF);
831 	KASSERT(tcnp->cn_flags & HASBUF);
832 
833 	newname = NULL;
834 	namelen = 0;
835 	tmp = NULL;
836 
837 	/* Disallow cross-device renames. */
838 	if (fvp->v_mount != tdvp->v_mount ||
839 	    (tvp != NULL && fvp->v_mount != tvp->v_mount)) {
840 		error = EXDEV;
841 		goto out_unlocked;
842 	}
843 
844 	fnode = VP_TO_TMPFS_NODE(fvp);
845 	fdnode = VP_TO_TMPFS_DIR(fdvp);
846 	tnode = (tvp == NULL) ? NULL : VP_TO_TMPFS_NODE(tvp);
847 	tdnode = VP_TO_TMPFS_DIR(tdvp);
848 	tmp = VFS_TO_TMPFS(tdvp->v_mount);
849 
850 	if (fdvp == tvp) {
851 		error = 0;
852 		goto out_unlocked;
853 	}
854 
855 	/* If we need to move the directory between entries, lock the
856 	 * source so that we can safely operate on it. */
857 
858 	/* XXX: this is a potential locking order violation! */
859 	if (fdnode != tdnode) {
860 		error = vn_lock(fdvp, LK_EXCLUSIVE | LK_RETRY);
861 		if (error != 0)
862 			goto out_unlocked;
863 	}
864 
865 	/*
866 	 * If the node we were renaming has scarpered, just give up.
867 	 */
868 	de = tmpfs_dir_lookup(fdnode, fcnp);
869 	if (de == NULL || de->td_node != fnode) {
870 		error = ENOENT;
871 		goto out;
872 	}
873 
874 	/* If source and target are the same file, there is nothing to do. */
875 	if (fvp == tvp) {
876 		error = 0;
877 		goto out;
878 	}
879 
880 	/* If replacing an existing entry, ensure we can do the operation. */
881 	if (tvp != NULL) {
882 		KASSERT(tnode != NULL);
883 		if (fnode->tn_type == VDIR && tnode->tn_type == VDIR) {
884 			if (tnode->tn_size > 0) {
885 				error = ENOTEMPTY;
886 				goto out;
887 			}
888 		} else if (fnode->tn_type == VDIR && tnode->tn_type != VDIR) {
889 			error = ENOTDIR;
890 			goto out;
891 		} else if (fnode->tn_type != VDIR && tnode->tn_type == VDIR) {
892 			error = EISDIR;
893 			goto out;
894 		} else {
895 			KASSERT(fnode->tn_type != VDIR &&
896 			        tnode->tn_type != VDIR);
897 		}
898 	}
899 
900 	/* Ensure that we have enough memory to hold the new name, if it
901 	 * has to be changed. */
902 	namelen = tcnp->cn_namelen;
903 	if (fcnp->cn_namelen != tcnp->cn_namelen ||
904 	    memcmp(fcnp->cn_nameptr, tcnp->cn_nameptr, fcnp->cn_namelen) != 0) {
905 		newname = tmpfs_str_pool_get(&tmp->tm_str_pool, namelen, 0);
906 		if (newname == NULL) {
907 			error = ENOSPC;
908 			goto out;
909 		}
910 	}
911 
912 	/* If the node is being moved to another directory, we have to do
913 	 * the move. */
914 	if (fdnode != tdnode) {
915 		/* In case we are moving a directory, we have to adjust its
916 		 * parent to point to the new parent. */
917 		if (de->td_node->tn_type == VDIR) {
918 			struct tmpfs_node *n;
919 
920 			/* Ensure the target directory is not a child of the
921 			 * directory being moved.  Otherwise, we'd end up
922 			 * with stale nodes. */
923 			n = tdnode;
924 			while (n != n->tn_spec.tn_dir.tn_parent) {
925 				if (n == fnode) {
926 					error = EINVAL;
927 					goto out;
928 				}
929 				n = n->tn_spec.tn_dir.tn_parent;
930 			}
931 
932 			/* Adjust the parent pointer. */
933 			TMPFS_VALIDATE_DIR(fnode);
934 			de->td_node->tn_spec.tn_dir.tn_parent = tdnode;
935 
936 			/* As a result of changing the target of the '..'
937 			 * entry, the link count of the source and target
938 			 * directories has to be adjusted. */
939 			fdnode->tn_links--;
940 			tdnode->tn_links++;
941 		}
942 
943 		/* Do the move: just remove the entry from the source directory
944 		 * and insert it into the target one. */
945 		tmpfs_dir_detach(fdvp, de);
946 		tmpfs_dir_attach(tdvp, de);
947 
948 		/* Notify listeners of fdvp about the change in the directory.
949 		 * We can do it at this point because we aren't touching fdvp
950 		 * any more below. */
951 		VN_KNOTE(fdvp, NOTE_WRITE);
952 	}
953 
954 	/* If we are overwriting an entry, we have to remove the old one
955 	 * from the target directory. */
956 	if (tvp != NULL) {
957 		KASSERT(tnode != NULL);
958 
959 		/* Remove the old entry from the target directory.
960 		 * Note! This relies on tmpfs_dir_attach() putting the new
961 		 * node on the end of the target's node list. */
962 		de2 = tmpfs_dir_lookup(tdnode, tcnp);
963 		KASSERT(de2 != NULL);
964 		KASSERT(de2->td_node == tnode);
965 		tmpfs_dir_detach(tdvp, de2);
966 
967 		/* Free the directory entry we just deleted.  Note that the
968 		 * node referred by it will not be removed until the vnode is
969 		 * really reclaimed. */
970 		tmpfs_free_dirent(VFS_TO_TMPFS(tvp->v_mount), de2, true);
971 	}
972 
973 	/* If the name has changed, we need to make it effective by changing
974 	 * it in the directory entry. */
975 	if (newname != NULL) {
976 		KASSERT(tcnp->cn_namelen < MAXNAMLEN);
977 		KASSERT(tcnp->cn_namelen < 0xffff);
978 
979 		tmpfs_str_pool_put(&tmp->tm_str_pool, de->td_name,
980 		    de->td_namelen);
981 		de->td_namelen = (uint16_t)namelen;
982 		memcpy(newname, tcnp->cn_nameptr, namelen);
983 		de->td_name = newname;
984 		newname = NULL;
985 
986 		fnode->tn_status |= TMPFS_NODE_CHANGED;
987 		tdnode->tn_status |= TMPFS_NODE_MODIFIED;
988 	}
989 
990 	/* Notify listeners of tdvp about the change in the directory (either
991 	 * because a new entry was added or because one was removed) and
992 	 * listeners of fvp about the rename. */
993 	VN_KNOTE(tdvp, NOTE_WRITE);
994 	VN_KNOTE(fvp, NOTE_RENAME);
995 
996 	error = 0;
997 
998  out:
999 	if (fdnode != tdnode)
1000 		VOP_UNLOCK(fdvp, 0);
1001 
1002  out_unlocked:
1003 	/* Release target nodes. */
1004 	if (tdvp == tvp)
1005 		vrele(tdvp);
1006 	else
1007 		vput(tdvp);
1008 	if (tvp != NULL)
1009 		vput(tvp);
1010 
1011 	/* Release source nodes. */
1012 	vrele(fdvp);
1013 	vrele(fvp);
1014 
1015 	if (newname != NULL)
1016 		tmpfs_str_pool_put(&tmp->tm_str_pool, newname, namelen);
1017 
1018 	return error;
1019 }
1020 
1021 /* --------------------------------------------------------------------- */
1022 
1023 int
1024 tmpfs_mkdir(void *v)
1025 {
1026 	struct vnode *dvp = ((struct vop_mkdir_args *)v)->a_dvp;
1027 	struct vnode **vpp = ((struct vop_mkdir_args *)v)->a_vpp;
1028 	struct componentname *cnp = ((struct vop_mkdir_args *)v)->a_cnp;
1029 	struct vattr *vap = ((struct vop_mkdir_args *)v)->a_vap;
1030 
1031 	KASSERT(vap->va_type == VDIR);
1032 
1033 	return tmpfs_alloc_file(dvp, vpp, vap, cnp, NULL);
1034 }
1035 
1036 /* --------------------------------------------------------------------- */
1037 
1038 int
1039 tmpfs_rmdir(void *v)
1040 {
1041 	struct vnode *dvp = ((struct vop_rmdir_args *)v)->a_dvp;
1042 	struct vnode *vp = ((struct vop_rmdir_args *)v)->a_vp;
1043 	struct componentname *cnp = ((struct vop_rmdir_args *)v)->a_cnp;
1044 
1045 	int error;
1046 	struct tmpfs_dirent *de;
1047 	struct tmpfs_mount *tmp;
1048 	struct tmpfs_node *dnode;
1049 	struct tmpfs_node *node;
1050 
1051 	KASSERT(VOP_ISLOCKED(dvp));
1052 	KASSERT(VOP_ISLOCKED(vp));
1053 
1054 	tmp = VFS_TO_TMPFS(dvp->v_mount);
1055 	dnode = VP_TO_TMPFS_DIR(dvp);
1056 	node = VP_TO_TMPFS_DIR(vp);
1057 	error = 0;
1058 
1059 	/* Directories with more than two entries ('.' and '..') cannot be
1060 	 * removed. */
1061 	if (node->tn_size > 0) {
1062 		error = ENOTEMPTY;
1063 		goto out;
1064 	}
1065 
1066 	/* This invariant holds only if we are not trying to remove "..".
1067 	 * We checked for that above so this is safe now. */
1068 	KASSERT(node->tn_spec.tn_dir.tn_parent == dnode);
1069 
1070 	/* Get the directory entry associated with node (vp). */
1071 	de = tmpfs_dir_lookup(dnode, cnp);
1072 	KASSERT(de);
1073 	KASSERT(de->td_node == node);
1074 
1075 	/* Check flags to see if we are allowed to remove the directory. */
1076 	if (dnode->tn_flags & APPEND || node->tn_flags & (IMMUTABLE | APPEND)) {
1077 		error = EPERM;
1078 		goto out;
1079 	}
1080 
1081 	/* Detach the directory entry from the directory (dnode). */
1082 	tmpfs_dir_detach(dvp, de);
1083 
1084 	node->tn_links--;
1085 	node->tn_status |= TMPFS_NODE_ACCESSED | TMPFS_NODE_CHANGED | \
1086 	    TMPFS_NODE_MODIFIED;
1087 	node->tn_spec.tn_dir.tn_parent->tn_links--;
1088 	node->tn_spec.tn_dir.tn_parent->tn_status |= TMPFS_NODE_ACCESSED | \
1089 	    TMPFS_NODE_CHANGED | TMPFS_NODE_MODIFIED;
1090 
1091 	/* Release the parent. */
1092 	cache_purge(dvp); /* XXX Is this needed? */
1093 
1094 	/* Free the directory entry we just deleted.  Note that the node
1095 	 * referred by it will not be removed until the vnode is really
1096 	 * reclaimed. */
1097 	tmpfs_free_dirent(tmp, de, true);
1098 
1099 	KASSERT(node->tn_links == 0);
1100  out:
1101 	/* Release the nodes. */
1102 	vput(dvp);
1103 	vput(vp);
1104 	PNBUF_PUT(cnp->cn_pnbuf);
1105 
1106 	return error;
1107 }
1108 
1109 /* --------------------------------------------------------------------- */
1110 
1111 int
1112 tmpfs_symlink(void *v)
1113 {
1114 	struct vnode *dvp = ((struct vop_symlink_args *)v)->a_dvp;
1115 	struct vnode **vpp = ((struct vop_symlink_args *)v)->a_vpp;
1116 	struct componentname *cnp = ((struct vop_symlink_args *)v)->a_cnp;
1117 	struct vattr *vap = ((struct vop_symlink_args *)v)->a_vap;
1118 	char *target = ((struct vop_symlink_args *)v)->a_target;
1119 
1120 	KASSERT(vap->va_type == VLNK);
1121 
1122 	return tmpfs_alloc_file(dvp, vpp, vap, cnp, target);
1123 }
1124 
1125 /* --------------------------------------------------------------------- */
1126 
1127 int
1128 tmpfs_readdir(void *v)
1129 {
1130 	struct vnode *vp = ((struct vop_readdir_args *)v)->a_vp;
1131 	struct uio *uio = ((struct vop_readdir_args *)v)->a_uio;
1132 	int *eofflag = ((struct vop_readdir_args *)v)->a_eofflag;
1133 	off_t **cookies = ((struct vop_readdir_args *)v)->a_cookies;
1134 	int *ncookies = ((struct vop_readdir_args *)v)->a_ncookies;
1135 
1136 	int error;
1137 	off_t startoff;
1138 	off_t cnt;
1139 	struct tmpfs_node *node;
1140 
1141 	KASSERT(VOP_ISLOCKED(vp));
1142 
1143 	/* This operation only makes sense on directory nodes. */
1144 	if (vp->v_type != VDIR) {
1145 		error = ENOTDIR;
1146 		goto out;
1147 	}
1148 
1149 	node = VP_TO_TMPFS_DIR(vp);
1150 
1151 	startoff = uio->uio_offset;
1152 
1153 	cnt = 0;
1154 	if (uio->uio_offset == TMPFS_DIRCOOKIE_DOT) {
1155 		error = tmpfs_dir_getdotdent(node, uio);
1156 		if (error == -1) {
1157 			error = 0;
1158 			goto outok;
1159 		} else if (error != 0)
1160 			goto outok;
1161 		cnt++;
1162 	}
1163 
1164 	if (uio->uio_offset == TMPFS_DIRCOOKIE_DOTDOT) {
1165 		error = tmpfs_dir_getdotdotdent(node, uio);
1166 		if (error == -1) {
1167 			error = 0;
1168 			goto outok;
1169 		} else if (error != 0)
1170 			goto outok;
1171 		cnt++;
1172 	}
1173 
1174 	error = tmpfs_dir_getdents(node, uio, &cnt);
1175 	if (error == -1)
1176 		error = 0;
1177 	KASSERT(error >= 0);
1178 
1179 outok:
1180 	/* This label assumes that startoff has been
1181 	 * initialized.  If the compiler didn't spit out warnings, we'd
1182 	 * simply make this one be 'out' and drop 'outok'. */
1183 
1184 	if (eofflag != NULL)
1185 		*eofflag =
1186 		    (error == 0 && uio->uio_offset == TMPFS_DIRCOOKIE_EOF);
1187 
1188 	/* Update NFS-related variables. */
1189 	if (error == 0 && cookies != NULL && ncookies != NULL) {
1190 		off_t i;
1191 		off_t off = startoff;
1192 		struct tmpfs_dirent *de = NULL;
1193 
1194 		*ncookies = cnt;
1195 		*cookies = malloc(cnt * sizeof(off_t), M_TEMP, M_WAITOK);
1196 
1197 		for (i = 0; i < cnt; i++) {
1198 			KASSERT(off != TMPFS_DIRCOOKIE_EOF);
1199 			if (off == TMPFS_DIRCOOKIE_DOT) {
1200 				off = TMPFS_DIRCOOKIE_DOTDOT;
1201 			} else {
1202 				if (off == TMPFS_DIRCOOKIE_DOTDOT) {
1203 					de = TAILQ_FIRST(&node->tn_spec.
1204 					    tn_dir.tn_dir);
1205 				} else if (de != NULL) {
1206 					de = TAILQ_NEXT(de, td_entries);
1207 				} else {
1208 					de = tmpfs_dir_lookupbycookie(node,
1209 					    off);
1210 					KASSERT(de != NULL);
1211 					de = TAILQ_NEXT(de, td_entries);
1212 				}
1213 				if (de == NULL) {
1214 					off = TMPFS_DIRCOOKIE_EOF;
1215 				} else {
1216 					off = tmpfs_dircookie(de);
1217 				}
1218 			}
1219 
1220 			(*cookies)[i] = off;
1221 		}
1222 		KASSERT(uio->uio_offset == off);
1223 	}
1224 
1225 out:
1226 	KASSERT(VOP_ISLOCKED(vp));
1227 
1228 	return error;
1229 }
1230 
1231 /* --------------------------------------------------------------------- */
1232 
1233 int
1234 tmpfs_readlink(void *v)
1235 {
1236 	struct vnode *vp = ((struct vop_readlink_args *)v)->a_vp;
1237 	struct uio *uio = ((struct vop_readlink_args *)v)->a_uio;
1238 
1239 	int error;
1240 	struct tmpfs_node *node;
1241 
1242 	KASSERT(VOP_ISLOCKED(vp));
1243 	KASSERT(uio->uio_offset == 0);
1244 	KASSERT(vp->v_type == VLNK);
1245 
1246 	node = VP_TO_TMPFS_NODE(vp);
1247 
1248 	error = uiomove(node->tn_spec.tn_lnk.tn_link,
1249 	    MIN(node->tn_size, uio->uio_resid), uio);
1250 	node->tn_status |= TMPFS_NODE_ACCESSED;
1251 
1252 	KASSERT(VOP_ISLOCKED(vp));
1253 
1254 	return error;
1255 }
1256 
1257 /* --------------------------------------------------------------------- */
1258 
1259 int
1260 tmpfs_inactive(void *v)
1261 {
1262 	struct vnode *vp = ((struct vop_inactive_args *)v)->a_vp;
1263 
1264 	struct tmpfs_node *node;
1265 
1266 	KASSERT(VOP_ISLOCKED(vp));
1267 
1268 	node = VP_TO_TMPFS_NODE(vp);
1269 	*((struct vop_inactive_args *)v)->a_recycle = (node->tn_links == 0);
1270 	VOP_UNLOCK(vp, 0);
1271 
1272 	return 0;
1273 }
1274 
1275 /* --------------------------------------------------------------------- */
1276 
1277 int
1278 tmpfs_reclaim(void *v)
1279 {
1280 	struct vnode *vp = ((struct vop_reclaim_args *)v)->a_vp;
1281 
1282 	struct tmpfs_mount *tmp;
1283 	struct tmpfs_node *node;
1284 
1285 	node = VP_TO_TMPFS_NODE(vp);
1286 	tmp = VFS_TO_TMPFS(vp->v_mount);
1287 
1288 	cache_purge(vp);
1289 	tmpfs_free_vp(vp);
1290 
1291 	/* If the node referenced by this vnode was deleted by the user,
1292 	 * we must free its associated data structures (now that the vnode
1293 	 * is being reclaimed). */
1294 	if (node->tn_links == 0)
1295 		tmpfs_free_node(tmp, node);
1296 
1297 	KASSERT(vp->v_data == NULL);
1298 
1299 	return 0;
1300 }
1301 
1302 /* --------------------------------------------------------------------- */
1303 
1304 int
1305 tmpfs_print(void *v)
1306 {
1307 	struct vnode *vp = ((struct vop_print_args *)v)->a_vp;
1308 
1309 	struct tmpfs_node *node;
1310 
1311 	node = VP_TO_TMPFS_NODE(vp);
1312 
1313 	printf("tag VT_TMPFS, tmpfs_node %p, flags 0x%x, links %d\n",
1314 	    node, node->tn_flags, node->tn_links);
1315 	printf("\tmode 0%o, owner %d, group %d, size %" PRIdMAX
1316 	    ", status 0x%x\n",
1317 	    node->tn_mode, node->tn_uid, node->tn_gid,
1318 	    (uintmax_t)node->tn_size, node->tn_status);
1319 	if (vp->v_type == VFIFO)
1320 		fifo_printinfo(vp);
1321 	printf("\n");
1322 
1323 	return 0;
1324 }
1325 
1326 /* --------------------------------------------------------------------- */
1327 
1328 int
1329 tmpfs_pathconf(void *v)
1330 {
1331 	int name = ((struct vop_pathconf_args *)v)->a_name;
1332 	register_t *retval = ((struct vop_pathconf_args *)v)->a_retval;
1333 
1334 	int error;
1335 
1336 	error = 0;
1337 
1338 	switch (name) {
1339 	case _PC_LINK_MAX:
1340 		*retval = LINK_MAX;
1341 		break;
1342 
1343 	case _PC_NAME_MAX:
1344 		*retval = NAME_MAX;
1345 		break;
1346 
1347 	case _PC_PATH_MAX:
1348 		*retval = PATH_MAX;
1349 		break;
1350 
1351 	case _PC_PIPE_BUF:
1352 		*retval = PIPE_BUF;
1353 		break;
1354 
1355 	case _PC_CHOWN_RESTRICTED:
1356 		*retval = 1;
1357 		break;
1358 
1359 	case _PC_NO_TRUNC:
1360 		*retval = 1;
1361 		break;
1362 
1363 	case _PC_SYNC_IO:
1364 		*retval = 1;
1365 		break;
1366 
1367 	case _PC_FILESIZEBITS:
1368 		*retval = 0; /* XXX Don't know which value should I return. */
1369 		break;
1370 
1371 	default:
1372 		error = EINVAL;
1373 	}
1374 
1375 	return error;
1376 }
1377 
1378 /* --------------------------------------------------------------------- */
1379 
1380 int
1381 tmpfs_advlock(void *v)
1382 {
1383 	struct vnode *vp = ((struct vop_advlock_args *)v)->a_vp;
1384 
1385 	struct tmpfs_node *node;
1386 
1387 	node = VP_TO_TMPFS_NODE(vp);
1388 
1389 	return lf_advlock(v, &node->tn_lockf, node->tn_size);
1390 }
1391 
1392 /* --------------------------------------------------------------------- */
1393 
1394 int
1395 tmpfs_getpages(void *v)
1396 {
1397 	struct vnode *vp = ((struct vop_getpages_args *)v)->a_vp;
1398 	voff_t offset = ((struct vop_getpages_args *)v)->a_offset;
1399 	struct vm_page **m = ((struct vop_getpages_args *)v)->a_m;
1400 	int *count = ((struct vop_getpages_args *)v)->a_count;
1401 	int centeridx = ((struct vop_getpages_args *)v)->a_centeridx;
1402 	vm_prot_t access_type = ((struct vop_getpages_args *)v)->a_access_type;
1403 	int advice = ((struct vop_getpages_args *)v)->a_advice;
1404 	int flags = ((struct vop_getpages_args *)v)->a_flags;
1405 
1406 	int error;
1407 	int i;
1408 	struct tmpfs_node *node;
1409 	struct uvm_object *uobj;
1410 	int npages = *count;
1411 
1412 	KASSERT(vp->v_type == VREG);
1413 	KASSERT(mutex_owned(&vp->v_interlock));
1414 
1415 	node = VP_TO_TMPFS_NODE(vp);
1416 	uobj = node->tn_spec.tn_reg.tn_aobj;
1417 
1418 	/* We currently don't rely on PGO_PASTEOF. */
1419 
1420 	if (vp->v_size <= offset + (centeridx << PAGE_SHIFT)) {
1421 		if ((flags & PGO_LOCKED) == 0)
1422 			mutex_exit(&vp->v_interlock);
1423 		return EINVAL;
1424 	}
1425 
1426 	if (vp->v_size < offset + (npages << PAGE_SHIFT)) {
1427 		npages = (round_page(vp->v_size) - offset) >> PAGE_SHIFT;
1428 	}
1429 
1430 	if ((flags & PGO_LOCKED) != 0)
1431 		return EBUSY;
1432 
1433 	if ((flags & PGO_NOTIMESTAMP) == 0) {
1434 		if ((vp->v_mount->mnt_flag & MNT_NOATIME) == 0)
1435 			node->tn_status |= TMPFS_NODE_ACCESSED;
1436 
1437 		if ((access_type & VM_PROT_WRITE) != 0)
1438 			node->tn_status |= TMPFS_NODE_MODIFIED;
1439 	}
1440 
1441 	mutex_exit(&vp->v_interlock);
1442 
1443 	/*
1444 	 * Make sure that the array on which we will store the
1445 	 * gotten pages is clean.  Otherwise uao_get (pointed to by
1446 	 * the pgo_get below) gets confused and does not return the
1447 	 * appropriate pages.
1448 	 *
1449 	 * XXX This shall be revisited when kern/32166 is addressed
1450 	 * because the loop to clean m[i] will most likely be redundant
1451 	 * as well as the PGO_ALLPAGES flag.
1452 	 */
1453 	if (m != NULL)
1454 		for (i = 0; i < npages; i++)
1455 			m[i] = NULL;
1456 	mutex_enter(&uobj->vmobjlock);
1457 	error = (*uobj->pgops->pgo_get)(uobj, offset, m, &npages, centeridx,
1458 	    access_type, advice, flags | PGO_ALLPAGES);
1459 #if defined(DEBUG)
1460 	{
1461 		/* Make sure that all the pages we return are valid. */
1462 		int dbgi;
1463 		if (error == 0 && m != NULL)
1464 			for (dbgi = 0; dbgi < npages; dbgi++)
1465 				KASSERT(m[dbgi] != NULL);
1466 	}
1467 #endif
1468 
1469 	return error;
1470 }
1471 
1472 /* --------------------------------------------------------------------- */
1473 
1474 int
1475 tmpfs_putpages(void *v)
1476 {
1477 	struct vnode *vp = ((struct vop_putpages_args *)v)->a_vp;
1478 	voff_t offlo = ((struct vop_putpages_args *)v)->a_offlo;
1479 	voff_t offhi = ((struct vop_putpages_args *)v)->a_offhi;
1480 	int flags = ((struct vop_putpages_args *)v)->a_flags;
1481 
1482 	int error;
1483 	struct tmpfs_node *node;
1484 	struct uvm_object *uobj;
1485 
1486 	KASSERT(mutex_owned(&vp->v_interlock));
1487 
1488 	node = VP_TO_TMPFS_NODE(vp);
1489 
1490 	if (vp->v_type != VREG) {
1491 		mutex_exit(&vp->v_interlock);
1492 		return 0;
1493 	}
1494 
1495 	uobj = node->tn_spec.tn_reg.tn_aobj;
1496 	mutex_exit(&vp->v_interlock);
1497 
1498 	mutex_enter(&uobj->vmobjlock);
1499 	error = (*uobj->pgops->pgo_put)(uobj, offlo, offhi, flags);
1500 
1501 	/* XXX mtime */
1502 
1503 	return error;
1504 }
1505