X-Git-Url: http://www.aleph1.co.uk/gitweb/?p=yaffs2.git;a=blobdiff_plain;f=direct%2Fyaffsfs.c;h=f32808d758829d4893a175f753a7a6fd01ea727f;hp=28af2806ea2b3176cef5adc8be3e5fc30aec743f;hb=7b53d290e92e619a315399ba49aadf6b40e13660;hpb=de55d14d486fdf4069153df3aba0957e62745490

diff --git a/direct/yaffsfs.c b/direct/yaffsfs.c
index 28af280..f32808d 100644
--- a/direct/yaffsfs.c
+++ b/direct/yaffsfs.c
@@ -32,7 +32,10 @@
 
 /* Some forward references */
 static struct yaffs_obj *yaffsfs_FindObject(struct yaffs_obj *relativeDirectory,
-			const YCHAR *path, int symDepth, int getEquiv);
+			const YCHAR *path,
+			int symDepth, int getEquiv,
+			struct yaffs_obj **dirOut);
+
 static void yaffsfs_RemoveObjectCallback(struct yaffs_obj *obj);
 
 unsigned int yaffs_wr_attempts;
@@ -208,8 +211,10 @@ static void yaffsfs_PutInode(int inodeId)
 	if(inodeId >= 0 && inodeId < YAFFSFS_N_HANDLES){
 		yaffsfs_Inode *in = & yaffsfs_inode[inodeId];
 		in->count--;
-		if(in->count <= 0)
+		if(in->count <= 0){
 			yaffsfs_ReleaseInode(in);
+			in->count = 0;
+		}
 	}	
 }
 
@@ -274,6 +279,22 @@ static int yaffsfs_PutHandle(int handle)
 	return 0;
 }
 
+static void yaffsfs_BreakDeviceHandles(struct yaffs_dev *dev)
+{
+	yaffsfs_Handle *h;
+	struct yaffs_obj *obj;
+	int i;
+	for(i = 0; i < YAFFSFS_N_HANDLES; i++){
+		h = yaffsfs_GetHandlePointer(i);
+		obj = yaffsfs_GetHandleObject(i);
+		if(h && h->useCount>0 && obj && obj->my_dev == dev){
+			h->useCount = 0;
+			yaffsfs_PutInode(h->inodeId);
+			h->inodeId = -1;
+		}
+	}
+}
+
 
 
 
@@ -323,7 +344,7 @@ LIST_HEAD(yaffsfs_deviceList);
 /*
  * yaffsfs_FindDevice
  * yaffsfs_FindRoot
- * Scan the configuration list to find the root.
+ * Scan the configuration list to find the device
  * Curveballs: Should match paths that end in '/' too
  * Curveball2 Might have "/x/ and "/x/y". Need to return the longest match
  */
@@ -398,6 +419,32 @@ static struct yaffs_dev *yaffsfs_FindDevice(const YCHAR *path, YCHAR **restOfPat
 	return retval;
 }
 
+static int yaffsfs_CheckPath(const YCHAR *path)
+{
+	int n=0;
+	int divs=0;
+	while(*path && n < YAFFS_MAX_NAME_LENGTH && divs < 100){
+		if(yaffsfs_IsPathDivider(*path)){
+			n=0;
+			divs++;
+		} else
+			n++;
+		path++;
+	}
+	
+	return (*path) ? -1 : 0;
+}
+
+/* FindMountPoint only returns a dev entry if the path is a mount point */
+static struct yaffs_dev *yaffsfs_FindMountPoint(const YCHAR *path)
+{
+	struct yaffs_dev *dev;
+	YCHAR *restOfPath=NULL;
+	dev = yaffsfs_FindDevice(path,&restOfPath);
+	if(dev && restOfPath && *restOfPath)
+		dev = NULL;
+	return dev;
+}
 
 static struct yaffs_obj *yaffsfs_FindRoot(const YCHAR *path, YCHAR **restOfPath)
 {
@@ -422,10 +469,10 @@ static struct yaffs_obj *yaffsfs_FollowLink(struct yaffs_obj *obj,int symDepth)
 
 		if(yaffsfs_IsPathDivider(*alias))
 			/* Starts with a /, need to scan from root up */
-			obj = yaffsfs_FindObject(NULL,alias,symDepth++,1);
+			obj = yaffsfs_FindObject(NULL,alias,symDepth++,1,NULL);
 		else
 			/* Relative to here, so use the parent of the symlink as a start */
-			obj = yaffsfs_FindObject(obj->parent,alias,symDepth++,1);
+			obj = yaffsfs_FindObject(obj->parent,alias,symDepth++,1,NULL);
 	}
 	return obj;
 }
@@ -509,7 +556,9 @@ static struct yaffs_obj *yaffsfs_FindDirectory(struct yaffs_obj *relativeDirecto
 /*
  * yaffsfs_FindObject turns a path for an existing object into the object
  */
-static struct yaffs_obj *yaffsfs_FindObject(struct yaffs_obj *relativeDirectory, const YCHAR *path,int symDepth, int getEquiv)
+static struct yaffs_obj *yaffsfs_FindObject(struct yaffs_obj *relativeDirectory,
+			const YCHAR *path,int symDepth, int getEquiv,
+			struct yaffs_obj **dirOut)
 {
 	struct yaffs_obj *dir;
 	struct yaffs_obj *obj;
@@ -517,6 +566,9 @@ static struct yaffs_obj *yaffsfs_FindObject(struct yaffs_obj *relativeDirectory,
 
 	dir = yaffsfs_FindDirectory(relativeDirectory,path,&name,symDepth);
 
+	if(dirOut)
+		*dirOut =  dir;
+
 	if(dir && *name)
 		obj = yaffs_find_by_name(dir,name);
 	else
@@ -579,6 +631,11 @@ int yaffs_open_sharing(const YCHAR *path, int oflag, int mode, int sharing)
 	u8 readRequested;
 	u8 writeRequested;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	/* O_EXCL only has meaning if O_CREAT is specified */
 	if(!(oflag & O_CREAT))
 		oflag &= ~(O_EXCL);
@@ -606,7 +663,7 @@ int yaffs_open_sharing(const YCHAR *path, int oflag, int mode, int sharing)
 		yh = yaffsfs_GetHandlePointer(handle);
 
 		/* try to find the exisiting object */
-		obj = yaffsfs_FindObject(NULL,path,0,1);
+		obj = yaffsfs_FindObject(NULL,path,0,1,NULL);
 
 		obj = yaffsfs_FollowLink(obj,symDepth++);
 
@@ -830,6 +887,7 @@ int yaffsfs_do_read(int fd, void *vbuf, unsigned int nbyte, int isPread, int off
 	struct yaffs_obj *obj = NULL;
 	int pos = 0;
 	int startPos = 0;
+	int endPos = 0;
 	int nRead = 0;
 	int nToRead = 0;
 	int totalRead = 0;
@@ -848,6 +906,9 @@ int yaffsfs_do_read(int fd, void *vbuf, unsigned int nbyte, int isPread, int off
 		/* Not a reading handle */
 		yaffsfs_SetError(-EINVAL);
 		totalRead = -1;
+	} else if(nbyte > YAFFS_MAX_FILE_SIZE){
+		yaffsfs_SetError(-EINVAL);
+		totalRead = -1;
 	} else {
 		if(isPread)
 			startPos = offset;
@@ -867,6 +928,15 @@ int yaffsfs_do_read(int fd, void *vbuf, unsigned int nbyte, int isPread, int off
 
 		yaffsfs_GetHandle(fd);
 
+		endPos = pos + nbyte;
+
+		if(pos < 0 || pos > YAFFS_MAX_FILE_SIZE ||
+			nbyte > YAFFS_MAX_FILE_SIZE ||
+			endPos < 0 || endPos > YAFFS_MAX_FILE_SIZE){
+			totalRead = -1;
+			nbyte = 0;
+		}
+
 		while(nbyte > 0) {
 			nToRead = YAFFSFS_RW_SIZE - (pos & (YAFFSFS_RW_SIZE -1));
 			if(nToRead > nbyte)
@@ -906,9 +976,8 @@ int yaffsfs_do_read(int fd, void *vbuf, unsigned int nbyte, int isPread, int off
 		if(!isPread) {
 			if(totalRead >= 0)
 				h->position = startPos + totalRead;
-			else {
-					/* todo error */
-			}
+			else
+				yaffsfs_SetError(-EINVAL);
 		}
 
 	}
@@ -935,6 +1004,7 @@ int yaffsfs_do_write(int fd, const void *vbuf, unsigned int nbyte, int isPwrite,
 	struct yaffs_obj *obj = NULL;
 	int pos = 0;
 	int startPos = 0;
+	int endPos;
 	int nWritten = 0;
 	int totalWritten = 0;
 	int write_trhrough = 0;
@@ -962,6 +1032,15 @@ int yaffsfs_do_write(int fd, const void *vbuf, unsigned int nbyte, int isPwrite,
 
 		yaffsfs_GetHandle(fd);
 		pos = startPos;
+		endPos = pos + nbyte;
+
+		if(pos < 0 || pos > YAFFS_MAX_FILE_SIZE ||
+			nbyte > YAFFS_MAX_FILE_SIZE ||
+			endPos < 0 || endPos > YAFFS_MAX_FILE_SIZE){
+			totalWritten = -1;
+			nbyte = 0;
+		}
+
 		while(nbyte > 0) {
 
 			nToWrite = YAFFSFS_RW_SIZE - (pos & (YAFFSFS_RW_SIZE -1));
@@ -1005,9 +1084,8 @@ int yaffsfs_do_write(int fd, const void *vbuf, unsigned int nbyte, int isPwrite,
 		if(!isPwrite){
 			if(totalWritten > 0)
 				h->position = startPos + totalWritten;
-			else {
-				/* todo error */
-			}
+			else
+				yaffsfs_SetError(-EINVAL);
 		}
 	}
 
@@ -1030,13 +1108,21 @@ int yaffs_pwrite(int fd, const void *buf, unsigned int nbyte, unsigned int offse
 int yaffs_truncate(const YCHAR *path,off_t new_size)
 {
 	struct yaffs_obj *obj = NULL;
+	struct yaffs_obj *dir = NULL;
 	int result = YAFFS_FAIL;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1,&dir);
 
-	if(!obj)
+	if(!dir)
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj)
 		yaffsfs_SetError(-ENOENT);
 	else if(obj->variant_type != YAFFS_OBJECT_TYPE_FILE)
 		yaffsfs_SetError(-EISDIR);
@@ -1089,10 +1175,11 @@ off_t yaffs_lseek(int fd, off_t offset, int whence)
 	h = yaffsfs_GetHandlePointer(fd);
 	obj = yaffsfs_GetHandleObject(fd);
 
-	if(!h || !obj){
-		/* bad handle */
+	if(!h || !obj)
 		yaffsfs_SetError(-EBADF);
-	} else {
+	else if(offset > YAFFS_MAX_FILE_SIZE)
+		yaffsfs_SetError(-EINVAL);
+	else {
 		if(whence == SEEK_SET){
 			if(offset >= 0)
 				pos = offset;
@@ -1105,10 +1192,12 @@ off_t yaffs_lseek(int fd, off_t offset, int whence)
 				pos = fSize + offset;
 		} 
 
-		if(pos >= 0)
+		if(pos >= 0 && pos <= YAFFS_MAX_FILE_SIZE)
 			h->position = pos;
-		else
+		else{
 			yaffsfs_SetError(-EINVAL);
+			pos = -1;
+		}
 	}
 
 	yaffsfs_Unlock();
@@ -1124,10 +1213,16 @@ int yaffsfs_DoUnlink(const YCHAR *path,int isDirectory)
 	YCHAR *name;
 	int result = YAFFS_FAIL;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,0);
+	obj = yaffsfs_FindObject(NULL,path,0,0,NULL);
 	dir = yaffsfs_FindDirectory(NULL,path,&name,0);
+
 	if(!dir)
 		yaffsfs_SetError(-ENOTDIR);
 	else if(!obj)
@@ -1153,11 +1248,6 @@ int yaffsfs_DoUnlink(const YCHAR *path,int isDirectory)
 }
 
 
-int yaffs_rmdir(const YCHAR *path)
-{
-	return yaffsfs_DoUnlink(path,1);
-}
-
 int yaffs_unlink(const YCHAR *path)
 {
 	return yaffsfs_DoUnlink(path,0);
@@ -1175,16 +1265,23 @@ int yaffs_rename(const YCHAR *oldPath, const YCHAR *newPath)
 
 	yaffsfs_Lock();
 
+	if(yaffsfs_CheckPath(newPath) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	olddir = yaffsfs_FindDirectory(NULL,oldPath,&oldname,0);
 	newdir = yaffsfs_FindDirectory(NULL,newPath,&newname,0);
-	obj = yaffsfs_FindObject(NULL,oldPath,0,0);
+	obj = yaffsfs_FindObject(NULL,oldPath,0,0,NULL);
 
-	if(!olddir || !newdir || !obj) {
-		/* bad file */
-		yaffsfs_SetError(-EBADF);
+	if(!olddir || !newdir) {
+		yaffsfs_SetError(-ENOTDIR);
+		rename_allowed = 0;
+	} else if(!obj) {
+		yaffsfs_SetError(-ENOENT);
 		rename_allowed = 0;
 	} else if(obj->my_dev->read_only){
-		yaffsfs_SetError(-EINVAL);
+		yaffsfs_SetError(-EROFS);
 		rename_allowed = 0;
 	} else if(olddir->my_dev != newdir->my_dev) {
 		/* Rename must be on same device */
@@ -1205,7 +1302,7 @@ int yaffs_rename(const YCHAR *oldPath, const YCHAR *newPath)
 			xx = xx->parent;
 		}
 		if(!rename_allowed)
-			yaffsfs_SetError(-EACCES);
+			yaffsfs_SetError(-EINVAL);
 	}
 
 	if(rename_allowed)
@@ -1261,22 +1358,29 @@ static int yaffsfs_DoStat(struct yaffs_obj *obj,struct yaffs_stat *buf)
 
 static int yaffsfs_DoStatOrLStat(const YCHAR *path, struct yaffs_stat *buf,int doLStat)
 {
-	struct yaffs_obj *obj;
+	struct yaffs_obj *obj=NULL;
+	struct yaffs_obj *dir=NULL;
 
 	int retVal = -1;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1,&dir);
 
 	if(!doLStat && obj)
 		obj = yaffsfs_FollowLink(obj,0);
 
-	if(obj)
-		retVal = yaffsfs_DoStat(obj,buf);
-	else
-		/* todo error not found */
+	if(!dir)
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj)
 		yaffsfs_SetError(-ENOENT);
+	else
+		retVal = yaffsfs_DoStat(obj,buf);
 
 	yaffsfs_Unlock();
 
@@ -1321,25 +1425,33 @@ int yaffs_fstat(int fd, struct yaffs_stat *buf)
 static int yaffs_do_setxattr(const YCHAR *path, const char *name, const void *data, int size, int flags, int follow)
 {
 	struct yaffs_obj *obj;
+	struct yaffs_obj *dir;
 
 	int retVal = -1;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1,&dir);
 
 	if(follow)
 		obj = yaffsfs_FollowLink(obj,0);
 
-	if(obj) {
+	if(!dir) 
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj) 
+		yaffsfs_SetError(-ENOENT);
+	else {
 		retVal = yaffs_set_xattrib(obj,name,data,size,flags);
 		if(retVal< 0){
 			yaffsfs_SetError(retVal);
 			retVal = -1;
 		}
-	} else
-		/* todo error not found */
-		yaffsfs_SetError(-ENOENT);
+	}
 
 	yaffsfs_Unlock();
 
@@ -1368,15 +1480,15 @@ int yaffs_fsetxattr(int fd, const char *name, const void *data, int size, int fl
 	yaffsfs_Lock();
 	obj = yaffsfs_GetHandleObject(fd);
 
-	if(obj) {
+	if(!obj) 
+		yaffsfs_SetError(-EBADF);
+	else {
 		retVal = yaffs_set_xattrib(obj,name,data,size,flags);
 		if(retVal< 0){
 			yaffsfs_SetError(retVal);
 			retVal = -1;
 		}
-	} else
-		/* bad handle */
-		yaffsfs_SetError(-EBADF);
+	}
 
 	yaffsfs_Unlock();
 
@@ -1386,26 +1498,33 @@ int yaffs_fsetxattr(int fd, const char *name, const void *data, int size, int fl
 static int yaffs_do_getxattr(const YCHAR *path, const char *name, void *data, int size, int follow)
 {
 	struct yaffs_obj *obj;
+	struct yaffs_obj *dir;
 
 	int retVal = -1;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1,&dir);
 
 	if(follow)
 		obj = yaffsfs_FollowLink(obj,0);
 
-	if(obj) {
+	if(!dir) 
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj) 
+		yaffsfs_SetError(-ENOENT);
+	else {
 		retVal = yaffs_get_xattrib(obj,name,data,size);
 		if(retVal< 0){
 			yaffsfs_SetError(retVal);
 			retVal = -1;
 		}
-	} else
-		/* todo error not found */
-		yaffsfs_SetError(-ENOENT);
-
+	}
 	yaffsfs_Unlock();
 
 	return retVal;
@@ -1449,26 +1568,34 @@ int yaffs_fgetxattr(int fd, const char *name, void *data, int size)
 
 static int yaffs_do_listxattr(const YCHAR *path, char *data, int size, int follow)
 {
-	struct yaffs_obj *obj;
+	struct yaffs_obj *obj=NULL;
+	struct yaffs_obj *dir=NULL;
 
 	int retVal = -1;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1,&dir);
 
 	if(follow)
 		obj = yaffsfs_FollowLink(obj,0);
 
-	if(obj) {
+	if(!dir) 
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj) 
+		yaffsfs_SetError(-ENOENT);
+	else {
 		retVal = yaffs_list_xattrib(obj, data,size);
 		if(retVal< 0){
 			yaffsfs_SetError(retVal);
 			retVal = -1;
 		}
-	} else
-		/* todo error not found */
-		yaffsfs_SetError(-ENOENT);
+	}
 
 	yaffsfs_Unlock();
 
@@ -1512,26 +1639,34 @@ int yaffs_flistxattr(int fd, char *data, int size)
 
 static int yaffs_do_removexattr(const YCHAR *path, const char *name, int follow)
 {
-	struct yaffs_obj *obj;
+	struct yaffs_obj *obj=NULL;
+	struct yaffs_obj *dir=NULL;
 
 	int retVal = -1;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1, &dir);
 
 	if(follow)
 		obj = yaffsfs_FollowLink(obj,0);
 
-	if(obj) {
+	if(!dir) 
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj) 
+		yaffsfs_SetError(-ENOENT);
+	else {
 		retVal = yaffs_remove_xattrib(obj,name);
 		if(retVal< 0){
 			yaffsfs_SetError(retVal);
 			retVal = -1;
 		}
-	} else
-		/* todo error not found */
-		yaffsfs_SetError(-ENOENT);
+	}
 
 	yaffsfs_Unlock();
 
@@ -1672,9 +1807,15 @@ static int yaffsfs_DoChMod(struct yaffs_obj *obj,mode_t mode)
 
 int yaffs_access(const YCHAR *path, int amode)
 {
-	struct yaffs_obj *obj;
+	struct yaffs_obj *obj=NULL;
+	struct yaffs_obj *dir=NULL;
 
-	int retval = 0;
+	int retval = -1;
+
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
 
 	if(amode & ~(R_OK | W_OK | X_OK)){
 		yaffsfs_SetError(-EINVAL);
@@ -1683,9 +1824,13 @@ int yaffs_access(const YCHAR *path, int amode)
 
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1, &dir);
 
-	if(obj)	{
+	if(!dir) 
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj) 
+		yaffsfs_SetError(-ENOENT);
+	else {
 		int access_ok = 1;
 
 		if((amode & R_OK) && !(obj->yst_mode & S_IREAD))
@@ -1695,14 +1840,10 @@ int yaffs_access(const YCHAR *path, int amode)
 		if((amode & X_OK) && !(obj->yst_mode & S_IEXEC))
 			access_ok = 0;
 
-		if(!access_ok) {
+		if(!access_ok)
 			yaffsfs_SetError(-EACCES);
-			retval = -1;
-		}
-	} else {
-		/* todo error not found */
-		yaffsfs_SetError(-ENOENT);
-		retval = -1;
+		else
+			retval = 0;
 	}
 
 	yaffsfs_Unlock();
@@ -1714,18 +1855,30 @@ int yaffs_access(const YCHAR *path, int amode)
 
 int yaffs_chmod(const YCHAR *path, mode_t mode)
 {
-	struct yaffs_obj *obj;
-
+	struct yaffs_obj *obj=NULL;
+	struct yaffs_obj *dir=NULL;
 	int retVal = -1;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
+	if(mode & ~(0777)){
+		yaffsfs_SetError(-EINVAL);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1, &dir);
 
-	if(!obj)
+	if(!dir) 
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj) 
 		yaffsfs_SetError(-ENOENT);
 	else if(obj->my_dev->read_only)
-		yaffsfs_SetError(-EINVAL);
+		yaffsfs_SetError(-EROFS);
 	else
 		retVal = yaffsfs_DoChMod(obj,mode);
 
@@ -1739,16 +1892,20 @@ int yaffs_chmod(const YCHAR *path, mode_t mode)
 int yaffs_fchmod(int fd, mode_t mode)
 {
 	struct yaffs_obj *obj;
-
 	int retVal = -1;
 
+	if(mode & ~(0777)){
+		yaffsfs_SetError(-EINVAL);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 	obj = yaffsfs_GetHandleObject(fd);
 
 	if(!obj)
-		yaffsfs_SetError(-ENOENT);
+		yaffsfs_SetError(-EBADF);
 	else if(obj->my_dev->read_only)
-		yaffsfs_SetError(-EINVAL);
+		yaffsfs_SetError(-EROFS);
 	else
 		retVal = yaffsfs_DoChMod(obj,mode);
 
@@ -1758,22 +1915,17 @@ int yaffs_fchmod(int fd, mode_t mode)
 }
 
 
-int yaffs_mkdir(const YCHAR *path, mode_t mode)
+static int yaffsfs_alt_dir_path(const YCHAR *path, YCHAR **ret_path)
 {
-	struct yaffs_obj *parent = NULL;
-	struct yaffs_obj *dir = NULL;
-	YCHAR *name;
-	YCHAR *use_path = NULL;
-	int path_length = 0;
-	int retVal= -1;
+	YCHAR *alt_path = NULL;
+	int path_length;
 	int i;
 
-
 	/*
 	 * We don't have a definition for max path length.
 	 * We will use 3 * max name length instead.
 	 */
-	
+	*ret_path = NULL;
 	path_length = strnlen(path,(YAFFS_MAX_NAME_LENGTH+1)*3 +1);
 
 	/* If the last character is a path divider, then we need to
@@ -1784,50 +1936,89 @@ int yaffs_mkdir(const YCHAR *path, mode_t mode)
 	 */
 	if(path_length > 0 && 
 		yaffsfs_IsPathDivider(path[path_length-1])){
-		use_path = YMALLOC(path_length + 1);
-		if(!use_path){
-			yaffsfs_SetError(-ENOMEM);
+		alt_path = YMALLOC(path_length + 1);
+		if(!alt_path)
 			return -1;
-		}
-		strcpy(use_path, path);
+		strcpy(alt_path, path);
 		for(i = path_length-1;
-			i >= 0 && yaffsfs_IsPathDivider(use_path[i]);
+			i >= 0 && yaffsfs_IsPathDivider(alt_path[i]);
 			i--)
-			use_path[i] = (YCHAR) 0;
-		path = use_path;
+			alt_path[i] = (YCHAR) 0;
 	}
+	*ret_path = alt_path;
+	return 0;
+}
+
+int yaffs_mkdir(const YCHAR *path, mode_t mode)
+{
+	struct yaffs_obj *parent = NULL;
+	struct yaffs_obj *dir = NULL;
+	YCHAR *name;
+	YCHAR *alt_path = NULL;
+	int retVal= -1;
+
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
+	if(yaffsfs_alt_dir_path(path, &alt_path) < 0){
+		yaffsfs_SetError(-ENOMEM);
+		return -1;
+	}
+	if(alt_path)
+		path = alt_path;
 	
 	yaffsfs_Lock();
 	parent = yaffsfs_FindDirectory(NULL,path,&name,0);
-	if(parent && yaffs_strnlen(name,5) == 0){
+	if(!parent)
+		yaffsfs_SetError(-ENOTDIR);
+	else if(parent && yaffs_strnlen(name,5) == 0){
 		/* Trying to make the root itself */
 		yaffsfs_SetError(-EEXIST);
-	} else if(parent && parent->my_dev->read_only){
-		yaffsfs_SetError(-EINVAL);
-	} else {
-		if(parent)
-			dir = yaffs_create_dir(parent,name,mode,0,0);
+	} else if(parent && parent->my_dev->read_only)
+		yaffsfs_SetError(-EROFS);
+	else {
+		dir = yaffs_create_dir(parent,name,mode,0,0);
 		if(dir)
 			retVal = 0;
-		else {
-			if(!parent)
-				yaffsfs_SetError(-ENOENT); /* missing path */
-			else if (yaffs_find_by_name(parent,name))
-				yaffsfs_SetError(-EEXIST); /* the name already exists */
-			else
-				yaffsfs_SetError(-ENOSPC); /* just assume no space */
-			retVal = -1;
-		}
+		else if (yaffs_find_by_name(parent,name))
+			yaffsfs_SetError(-EEXIST); /* the name already exists */
+		else
+			yaffsfs_SetError(-ENOSPC); /* just assume no space */
 	}
 
 	yaffsfs_Unlock();
 
-	if(use_path)
-		YFREE(use_path);
+	if(alt_path)
+		YFREE(alt_path);
 
 	return retVal;
 }
 
+int yaffs_rmdir(const YCHAR *path)
+{
+	int result;
+	YCHAR *alt_path;
+
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
+	if(yaffsfs_alt_dir_path(path, &alt_path) < 0){
+		yaffsfs_SetError(-ENOMEM);
+		return -1;
+	}
+	if(alt_path)
+		path = alt_path;
+	result =  yaffsfs_DoUnlink(path,1);
+	if(alt_path)
+		YFREE(alt_path);
+	return result;
+}
+
+
 void * yaffs_getdev(const YCHAR *path)
 {
 	struct yaffs_dev *dev=NULL;
@@ -1841,16 +2032,20 @@ int yaffs_mount2(const YCHAR *path,int read_only)
 	int retVal=-1;
 	int result=YAFFS_FAIL;
 	struct yaffs_dev *dev=NULL;
-	YCHAR *restOfPath;
 
 	T(YAFFS_TRACE_MOUNT,(TSTR("yaffs: Mounting %s" TENDSTR),path));
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
 	yaffsfs_InitHandles();
 
-	dev = yaffsfs_FindDevice(path,&restOfPath);
-	if(dev && !(*restOfPath)){
+	dev = yaffsfs_FindMountPoint(path);
+	if(dev){
 		if(!dev->is_mounted){
 			dev->read_only = read_only ? 1 : 0;
 			result = yaffs_guts_initialise(dev);
@@ -1882,6 +2077,11 @@ int yaffs_sync(const YCHAR *path)
         int retVal=-1;
         struct yaffs_dev *dev=NULL;
         YCHAR *dummy;
+
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
         
         yaffsfs_Lock();
         dev = yaffsfs_FindDevice(path,&dummy);
@@ -1909,10 +2109,15 @@ int yaffs_remount(const YCHAR *path, int force, int read_only)
 {
         int retVal=-1;
 	struct yaffs_dev *dev=NULL;
-	YCHAR *dummy;
+	yaffsfs_Handle *yh;
+
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
 
 	yaffsfs_Lock();
-	dev = yaffsfs_FindDevice(path,&dummy);
+	dev = yaffsfs_FindMountPoint(path);
 	if(dev){
 		if(dev->is_mounted){
 			int i;
@@ -1921,7 +2126,9 @@ int yaffs_remount(const YCHAR *path, int force, int read_only)
 			yaffs_flush_whole_cache(dev);
 
 			for(i = inUse = 0; i < YAFFSFS_N_HANDLES && !inUse && !force; i++){
-				if(yaffsfs_handle[i].useCount>0 && yaffsfs_inode[yaffsfs_handle[i].inodeId].iObj->my_dev == dev)
+				yh = & yaffsfs_handle[i];
+				if(yh->useCount>0 && 
+					yaffsfs_inode[yh->inodeId].iObj->my_dev == dev)
 					inUse = 1; /* the device is in use, can't unmount */
 			}
 
@@ -1949,10 +2156,14 @@ int yaffs_unmount2(const YCHAR *path, int force)
 {
         int retVal=-1;
 	struct yaffs_dev *dev=NULL;
-	YCHAR *dummy;
+
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
 
 	yaffsfs_Lock();
-	dev = yaffsfs_FindDevice(path,&dummy);
+	dev = yaffsfs_FindMountPoint(path);
 	if(dev){
 		if(dev->is_mounted){
 			int i;
@@ -1968,6 +2179,8 @@ int yaffs_unmount2(const YCHAR *path, int force)
 			}
 
 			if(!inUse || force){
+				if(inUse)
+					yaffsfs_BreakDeviceHandles(dev);
 				yaffs_deinitialise(dev);
 
 				retVal = 0;
@@ -1979,8 +2192,7 @@ int yaffs_unmount2(const YCHAR *path, int force)
 			/* todo error - not mounted. */
 			yaffsfs_SetError(-EINVAL);
 
-	}
-	else
+	} else
 		/* todo error - no device */
 		yaffsfs_SetError(-ENODEV);
 
@@ -2000,6 +2212,11 @@ loff_t yaffs_freespace(const YCHAR *path)
 	struct yaffs_dev *dev=NULL;
 	YCHAR *dummy;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 	dev = yaffsfs_FindDevice(path,&dummy);
 	if(dev  && dev->is_mounted){
@@ -2019,10 +2236,16 @@ loff_t yaffs_totalspace(const YCHAR *path)
 	struct yaffs_dev *dev=NULL;
 	YCHAR *dummy;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 	dev = yaffsfs_FindDevice(path,&dummy);
 	if(dev  && dev->is_mounted){
-		retVal = (dev->param.end_block - dev->param.start_block + 1) - dev->param.n_reserved_blocks;
+		retVal = (dev->param.end_block - dev->param.start_block + 1) - 
+			dev->param.n_reserved_blocks;
 		retVal *= dev->param.chunks_per_block;
 		retVal *= dev->data_bytes_per_chunk;
 
@@ -2039,6 +2262,11 @@ int yaffs_inodecount(const YCHAR *path)
 	struct yaffs_dev *dev=NULL;
 	YCHAR *dummy;
 
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 	dev = yaffsfs_FindDevice(path,&dummy);
 	if(dev  && dev->is_mounted) {
@@ -2169,9 +2397,14 @@ yaffs_DIR *yaffs_opendir(const YCHAR *dirname)
  	struct yaffs_obj *obj = NULL;
 	yaffsfs_DirectorySearchContext *dsc = NULL;
 
+	if(yaffsfs_CheckPath(dirname) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,dirname,0,1);
+	obj = yaffsfs_FindObject(NULL,dirname,0,1,NULL);
 
 	if(obj && obj->variant_type == YAFFS_OBJECT_TYPE_DIRECTORY){
 
@@ -2268,21 +2501,26 @@ int yaffs_symlink(const YCHAR *oldpath, const YCHAR *newpath)
 	int retVal= -1;
 	int mode = 0; /* ignore for now */
 
+	if(yaffsfs_CheckPath(newpath) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
 	yaffsfs_Lock();
 	parent = yaffsfs_FindDirectory(NULL,newpath,&name,0);
-	if(parent && parent->my_dev->read_only)
-		yaffsfs_SetError(-EINVAL);
+	if(!parent)
+		yaffsfs_SetError(-ENOTDIR);
+	else if( strlen(name) < 1)
+		yaffsfs_SetError(-ENOENT);
+	else if(parent->my_dev->read_only)
+		yaffsfs_SetError(-EROFS);
 	else if(parent){
 		obj = yaffs_create_symlink(parent,name,mode,0,0,oldpath);
 		if(obj)
 			retVal = 0;
-		else{
-			yaffsfs_SetError(-ENOSPC); /* just assume no space for now */
-			retVal = -1;
-		}
-	} else {
-		yaffsfs_SetError(-EINVAL);
-		retVal = -1;
+		else if (yaffsfs_FindObject(NULL,newpath,0,0, NULL))
+			yaffsfs_SetError(-EEXIST);
+		else
+			yaffsfs_SetError(-ENOSPC);
 	}
 
 	yaffsfs_Unlock();
@@ -2294,19 +2532,20 @@ int yaffs_symlink(const YCHAR *oldpath, const YCHAR *newpath)
 int yaffs_readlink(const YCHAR *path, YCHAR *buf, int bufsiz)
 {
 	struct yaffs_obj *obj = NULL;
-	int retVal;
+	struct yaffs_obj *dir = NULL;
+	int retVal= -1;
 
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	obj = yaffsfs_FindObject(NULL,path,0,1, &dir);
 
-	if(!obj) {
+	if(!dir) 
+		yaffsfs_SetError(-ENOTDIR);
+	else if(!obj) 
 		yaffsfs_SetError(-ENOENT);
-		retVal = -1;
-	} else if(obj->variant_type != YAFFS_OBJECT_TYPE_SYMLINK) {
+	else if(obj->variant_type != YAFFS_OBJECT_TYPE_SYMLINK)
 		yaffsfs_SetError(-EINVAL);
-		retVal = -1;
-	} else {
+	else {
 		YCHAR *alias = obj->variant.symlink_variant.alias;
 		memset(buf,0,bufsiz);
 		yaffs_strncpy(buf,alias,bufsiz - 1);
@@ -2316,42 +2555,41 @@ int yaffs_readlink(const YCHAR *path, YCHAR *buf, int bufsiz)
 	return retVal;
 }
 
-int yaffs_link(const YCHAR *oldpath, const YCHAR *newpath)
+int yaffs_link(const YCHAR *oldpath, const YCHAR *linkpath)
 {
 	/* Creates a link called newpath to existing oldpath */
 	struct yaffs_obj *obj = NULL;
-	struct yaffs_obj *target = NULL;
-	int retVal = 0;
+	struct yaffs_obj *lnk = NULL;
+	int retVal = -1;
+
+	if(yaffsfs_CheckPath(linkpath) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
 
 	yaffsfs_Lock();
 
-	obj = yaffsfs_FindObject(NULL,oldpath,0,1);
-	target = yaffsfs_FindObject(NULL,newpath,0,0);
+	obj = yaffsfs_FindObject(NULL,oldpath,0,1,NULL);
+	lnk = yaffsfs_FindObject(NULL,linkpath,0,0,NULL);
 
-	if(!obj) {
+	if(!obj)
 		yaffsfs_SetError(-ENOENT);
-		retVal = -1;
-	} else if(obj->my_dev->read_only){
+	else if(obj->my_dev->read_only)
 		yaffsfs_SetError(-EINVAL);
-		retVal= -1;
-	} else if(target) {
+	else if(lnk)
 		yaffsfs_SetError(-EEXIST);
-		retVal = -1;
-	} else {
+	else {
 		struct yaffs_obj *newdir = NULL;
 		struct yaffs_obj *link = NULL;
 
 		YCHAR *newname;
 
-		newdir = yaffsfs_FindDirectory(NULL,newpath,&newname,0);
+		newdir = yaffsfs_FindDirectory(NULL,linkpath,&newname,0);
 
-		if(!newdir){
+		if(!newdir)
 			yaffsfs_SetError(-ENOTDIR);
-			retVal = -1;
-		}else if(newdir->my_dev != obj->my_dev){
+		else if(newdir->my_dev != obj->my_dev)
 			yaffsfs_SetError(-EXDEV);
-			retVal = -1;
-		}
 		
 		retVal = yaffsfs_CheckNameLength(newname);
 		
@@ -2373,6 +2611,11 @@ int yaffs_link(const YCHAR *oldpath, const YCHAR *newpath)
 
 int yaffs_mknod(const YCHAR *pathname, mode_t mode, dev_t dev)
 {
+	pathname=pathname;
+	mode=mode;
+	dev=dev;
+
+	yaffsfs_SetError(-EINVAL);
 	return -1;
 }
 
@@ -2386,9 +2629,17 @@ int yaffs_n_handles(const YCHAR *path)
 {
 	struct yaffs_obj *obj;
 
-	obj = yaffsfs_FindObject(NULL,path,0,1);
+	if(yaffsfs_CheckPath(path) < 0){
+		yaffsfs_SetError(-ENAMETOOLONG);
+		return -1;
+	}
+
+	obj = yaffsfs_FindObject(NULL,path,0,1,NULL);
 
-	return yaffsfs_CountHandles(obj);
+	if(obj)
+		return yaffsfs_CountHandles(obj);
+	else
+		return -1;
 }
 
 int yaffs_get_error(void)
@@ -2405,7 +2656,9 @@ int yaffs_set_error(int error)
 
 int yaffs_dump_dev(const YCHAR *path)
 {
-#if 0
+#if 1
+	path=path;
+#else
 	YCHAR *rest;
 
 	struct yaffs_obj *obj = yaffsfs_FindRoot(path,&rest);