root/fs/squashfs/xattr_id.c
// SPDX-License-Identifier: GPL-2.0-or-later
/*
 * Squashfs - a compressed read only filesystem for Linux
 *
 * Copyright (c) 2010
 * Phillip Lougher <phillip@squashfs.org.uk>
 *
 * xattr_id.c
 */

/*
 * This file implements code to map the 32-bit xattr id stored in the inode
 * into the on disk location of the xattr data.
 */

#include <linux/fs.h>
#include <linux/vfs.h>
#include <linux/slab.h>

#include "squashfs_fs.h"
#include "squashfs_fs_sb.h"
#include "squashfs.h"
#include "xattr.h"

/*
 * Map xattr id using the xattr id look up table
 */
int squashfs_xattr_lookup(struct super_block *sb, unsigned int index,
                int *count, unsigned int *size, unsigned long long *xattr)
{
        struct squashfs_sb_info *msblk = sb->s_fs_info;
        int block = SQUASHFS_XATTR_BLOCK(index);
        int offset = SQUASHFS_XATTR_BLOCK_OFFSET(index);
        u64 start_block;
        struct squashfs_xattr_id id;
        int err;

        if (index >= msblk->xattr_ids)
                return -EINVAL;

        start_block = le64_to_cpu(msblk->xattr_id_table[block]);

        err = squashfs_read_metadata(sb, &id, &start_block, &offset,
                                                        sizeof(id));
        if (err < 0)
                return err;

        *xattr = le64_to_cpu(id.xattr);
        *size = le32_to_cpu(id.size);
        *count = le32_to_cpu(id.count);
        return 0;
}


/*
 * Read uncompressed xattr id lookup table indexes from disk into memory
 */
__le64 *squashfs_read_xattr_id_table(struct super_block *sb, u64 table_start,
                u64 *xattr_table_start, unsigned int *xattr_ids)
{
        struct squashfs_sb_info *msblk = sb->s_fs_info;
        unsigned int len, indexes;
        struct squashfs_xattr_id_table *id_table;
        __le64 *table;
        u64 start, end;
        int n;

        id_table = squashfs_read_table(sb, table_start, sizeof(*id_table));
        if (IS_ERR(id_table))
                return (__le64 *) id_table;

        *xattr_table_start = le64_to_cpu(id_table->xattr_table_start);
        *xattr_ids = le32_to_cpu(id_table->xattr_ids);
        kfree(id_table);

        /* Sanity check values */

        /* there is always at least one xattr id */
        if (*xattr_ids == 0)
                return ERR_PTR(-EINVAL);

        len = SQUASHFS_XATTR_BLOCK_BYTES(*xattr_ids);
        indexes = SQUASHFS_XATTR_BLOCKS(*xattr_ids);

        /*
         * The computed size of the index table (len bytes) should exactly
         * match the table start and end points
         */
        start = table_start + sizeof(*id_table);
        end = msblk->bytes_used;

        if (len != (end - start))
                return ERR_PTR(-EINVAL);

        table = squashfs_read_table(sb, start, len);
        if (IS_ERR(table))
                return table;

        /* table[0], table[1], ... table[indexes - 1] store the locations
         * of the compressed xattr id blocks.  Each entry should be less than
         * the next (i.e. table[0] < table[1]), and the difference between them
         * should be SQUASHFS_METADATA_SIZE or less.  table[indexes - 1]
         * should be less than table_start, and again the difference
         * shouls be SQUASHFS_METADATA_SIZE or less.
         *
         * Finally xattr_table_start should be less than table[0].
         */
        for (n = 0; n < (indexes - 1); n++) {
                start = le64_to_cpu(table[n]);
                end = le64_to_cpu(table[n + 1]);

                if (start >= end || (end - start) >
                                (SQUASHFS_METADATA_SIZE + SQUASHFS_BLOCK_OFFSET)) {
                        kfree(table);
                        return ERR_PTR(-EINVAL);
                }
        }

        start = le64_to_cpu(table[indexes - 1]);
        if (start >= table_start || (table_start - start) >
                                (SQUASHFS_METADATA_SIZE + SQUASHFS_BLOCK_OFFSET)) {
                kfree(table);
                return ERR_PTR(-EINVAL);
        }

        if (*xattr_table_start >= le64_to_cpu(table[0])) {
                kfree(table);
                return ERR_PTR(-EINVAL);
        }

        return table;
}