MIPS: Yosemite, Emma: Fix off-by-two in arcs_cmdline buffer size check
[linux-2.6/linux-mips.git] / drivers / gpu / drm / r128 / r128_ioc32.c
blob51c99fc4dd3819959fe8cd1470c6ca18192cc558
1 /**
2 * \file r128_ioc32.c
4 * 32-bit ioctl compatibility routines for the R128 DRM.
6 * \author Dave Airlie <airlied@linux.ie> with code from patches by Egbert Eich
8 * Copyright (C) Paul Mackerras 2005
9 * Copyright (C) Egbert Eich 2003,2004
10 * Copyright (C) Dave Airlie 2005
11 * All Rights Reserved.
13 * Permission is hereby granted, free of charge, to any person obtaining a
14 * copy of this software and associated documentation files (the "Software"),
15 * to deal in the Software without restriction, including without limitation
16 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
17 * and/or sell copies of the Software, and to permit persons to whom the
18 * Software is furnished to do so, subject to the following conditions:
20 * The above copyright notice and this permission notice (including the next
21 * paragraph) shall be included in all copies or substantial portions of the
22 * Software.
24 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
25 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
26 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
27 * THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
28 * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
29 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
30 * IN THE SOFTWARE.
32 #include <linux/compat.h>
34 #include "drmP.h"
35 #include "drm.h"
36 #include "r128_drm.h"
38 typedef struct drm_r128_init32 {
39 int func;
40 unsigned int sarea_priv_offset;
41 int is_pci;
42 int cce_mode;
43 int cce_secure;
44 int ring_size;
45 int usec_timeout;
47 unsigned int fb_bpp;
48 unsigned int front_offset, front_pitch;
49 unsigned int back_offset, back_pitch;
50 unsigned int depth_bpp;
51 unsigned int depth_offset, depth_pitch;
52 unsigned int span_offset;
54 unsigned int fb_offset;
55 unsigned int mmio_offset;
56 unsigned int ring_offset;
57 unsigned int ring_rptr_offset;
58 unsigned int buffers_offset;
59 unsigned int agp_textures_offset;
60 } drm_r128_init32_t;
62 static int compat_r128_init(struct file *file, unsigned int cmd,
63 unsigned long arg)
65 drm_r128_init32_t init32;
66 drm_r128_init_t __user *init;
68 if (copy_from_user(&init32, (void __user *)arg, sizeof(init32)))
69 return -EFAULT;
71 init = compat_alloc_user_space(sizeof(*init));
72 if (!access_ok(VERIFY_WRITE, init, sizeof(*init))
73 || __put_user(init32.func, &init->func)
74 || __put_user(init32.sarea_priv_offset, &init->sarea_priv_offset)
75 || __put_user(init32.is_pci, &init->is_pci)
76 || __put_user(init32.cce_mode, &init->cce_mode)
77 || __put_user(init32.cce_secure, &init->cce_secure)
78 || __put_user(init32.ring_size, &init->ring_size)
79 || __put_user(init32.usec_timeout, &init->usec_timeout)
80 || __put_user(init32.fb_bpp, &init->fb_bpp)
81 || __put_user(init32.front_offset, &init->front_offset)
82 || __put_user(init32.front_pitch, &init->front_pitch)
83 || __put_user(init32.back_offset, &init->back_offset)
84 || __put_user(init32.back_pitch, &init->back_pitch)
85 || __put_user(init32.depth_bpp, &init->depth_bpp)
86 || __put_user(init32.depth_offset, &init->depth_offset)
87 || __put_user(init32.depth_pitch, &init->depth_pitch)
88 || __put_user(init32.span_offset, &init->span_offset)
89 || __put_user(init32.fb_offset, &init->fb_offset)
90 || __put_user(init32.mmio_offset, &init->mmio_offset)
91 || __put_user(init32.ring_offset, &init->ring_offset)
92 || __put_user(init32.ring_rptr_offset, &init->ring_rptr_offset)
93 || __put_user(init32.buffers_offset, &init->buffers_offset)
94 || __put_user(init32.agp_textures_offset,
95 &init->agp_textures_offset))
96 return -EFAULT;
98 return drm_ioctl(file, DRM_IOCTL_R128_INIT, (unsigned long)init);
101 typedef struct drm_r128_depth32 {
102 int func;
103 int n;
104 u32 x;
105 u32 y;
106 u32 buffer;
107 u32 mask;
108 } drm_r128_depth32_t;
110 static int compat_r128_depth(struct file *file, unsigned int cmd,
111 unsigned long arg)
113 drm_r128_depth32_t depth32;
114 drm_r128_depth_t __user *depth;
116 if (copy_from_user(&depth32, (void __user *)arg, sizeof(depth32)))
117 return -EFAULT;
119 depth = compat_alloc_user_space(sizeof(*depth));
120 if (!access_ok(VERIFY_WRITE, depth, sizeof(*depth))
121 || __put_user(depth32.func, &depth->func)
122 || __put_user(depth32.n, &depth->n)
123 || __put_user((int __user *)(unsigned long)depth32.x, &depth->x)
124 || __put_user((int __user *)(unsigned long)depth32.y, &depth->y)
125 || __put_user((unsigned int __user *)(unsigned long)depth32.buffer,
126 &depth->buffer)
127 || __put_user((unsigned char __user *)(unsigned long)depth32.mask,
128 &depth->mask))
129 return -EFAULT;
131 return drm_ioctl(file, DRM_IOCTL_R128_DEPTH, (unsigned long)depth);
135 typedef struct drm_r128_stipple32 {
136 u32 mask;
137 } drm_r128_stipple32_t;
139 static int compat_r128_stipple(struct file *file, unsigned int cmd,
140 unsigned long arg)
142 drm_r128_stipple32_t stipple32;
143 drm_r128_stipple_t __user *stipple;
145 if (copy_from_user(&stipple32, (void __user *)arg, sizeof(stipple32)))
146 return -EFAULT;
148 stipple = compat_alloc_user_space(sizeof(*stipple));
149 if (!access_ok(VERIFY_WRITE, stipple, sizeof(*stipple))
150 || __put_user((unsigned int __user *)(unsigned long)stipple32.mask,
151 &stipple->mask))
152 return -EFAULT;
154 return drm_ioctl(file, DRM_IOCTL_R128_STIPPLE, (unsigned long)stipple);
157 typedef struct drm_r128_getparam32 {
158 int param;
159 u32 value;
160 } drm_r128_getparam32_t;
162 static int compat_r128_getparam(struct file *file, unsigned int cmd,
163 unsigned long arg)
165 drm_r128_getparam32_t getparam32;
166 drm_r128_getparam_t __user *getparam;
168 if (copy_from_user(&getparam32, (void __user *)arg, sizeof(getparam32)))
169 return -EFAULT;
171 getparam = compat_alloc_user_space(sizeof(*getparam));
172 if (!access_ok(VERIFY_WRITE, getparam, sizeof(*getparam))
173 || __put_user(getparam32.param, &getparam->param)
174 || __put_user((void __user *)(unsigned long)getparam32.value,
175 &getparam->value))
176 return -EFAULT;
178 return drm_ioctl(file, DRM_IOCTL_R128_GETPARAM, (unsigned long)getparam);
181 drm_ioctl_compat_t *r128_compat_ioctls[] = {
182 [DRM_R128_INIT] = compat_r128_init,
183 [DRM_R128_DEPTH] = compat_r128_depth,
184 [DRM_R128_STIPPLE] = compat_r128_stipple,
185 [DRM_R128_GETPARAM] = compat_r128_getparam,
189 * Called whenever a 32-bit process running under a 64-bit kernel
190 * performs an ioctl on /dev/dri/card<n>.
192 * \param filp file pointer.
193 * \param cmd command.
194 * \param arg user argument.
195 * \return zero on success or negative number on failure.
197 long r128_compat_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
199 unsigned int nr = DRM_IOCTL_NR(cmd);
200 drm_ioctl_compat_t *fn = NULL;
201 int ret;
203 if (nr < DRM_COMMAND_BASE)
204 return drm_compat_ioctl(filp, cmd, arg);
206 if (nr < DRM_COMMAND_BASE + DRM_ARRAY_SIZE(r128_compat_ioctls))
207 fn = r128_compat_ioctls[nr - DRM_COMMAND_BASE];
209 if (fn != NULL)
210 ret = (*fn) (filp, cmd, arg);
211 else
212 ret = drm_ioctl(filp, cmd, arg);
214 return ret;