?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
x86: cpa: move clflush_cache_range()
[wrt350n-kernel.git] / drivers / message / i2o / i2o_config.c
blobc0fb77dc19bb1da39d4c969d60691fc634a63235
1 /*
2 * I2O Configuration Interface Driver
3 *
4 * (C) Copyright 1999-2002 Red Hat
5 *
6 * Written by Alan Cox, Building Number Three Ltd
7 *
8 * Fixes/additions:
9 * Deepak Saxena (04/20/1999):
10 * Added basic ioctl() support
11 * Deepak Saxena (06/07/1999):
12 * Added software download ioctl (still testing)
13 * Auvo Häkkinen (09/10/1999):
14 * Changes to i2o_cfg_reply(), ioctl_parms()
15 * Added ioct_validate()
16 * Taneli Vähäkangas (09/30/1999):
17 * Fixed ioctl_swdl()
18 * Taneli Vähäkangas (10/04/1999):
19 * Changed ioctl_swdl(), implemented ioctl_swul() and ioctl_swdel()
20 * Deepak Saxena (11/18/1999):
21 * Added event managmenet support
22 * Alan Cox <alan@redhat.com>:
23 * 2.4 rewrite ported to 2.5
24 * Markus Lidel <Markus.Lidel@shadowconnect.com>:
25 * Added pass-thru support for Adaptec's raidutils
26 *
27 * This program is free software; you can redistribute it and/or
28 * modify it under the terms of the GNU General Public License
29 * as published by the Free Software Foundation; either version
30 * 2 of the License, or (at your option) any later version.
31 */
32
33 #include <linux/miscdevice.h>
34 #include <linux/smp_lock.h>
35 #include <linux/compat.h>
36
37 #include <asm/uaccess.h>
38
39 #include "core.h"
40
41 #define SG_TABLESIZE 30
42
43 static int i2o_cfg_ioctl(struct inode *, struct file *, unsigned int,
44 unsigned long);
45
46 static spinlock_t i2o_config_lock;
47
48 #define MODINC(x,y) ((x) = ((x) + 1) % (y))
49
50 struct sg_simple_element {
51 u32 flag_count;
52 u32 addr_bus;
53 };
54
55 struct i2o_cfg_info {
56 struct file *fp;
57 struct fasync_struct *fasync;
58 struct i2o_evt_info event_q[I2O_EVT_Q_LEN];
59 u16 q_in; // Queue head index
60 u16 q_out; // Queue tail index
61 u16 q_len; // Queue length
62 u16 q_lost; // Number of lost events
63 ulong q_id; // Event queue ID...used as tx_context
64 struct i2o_cfg_info *next;
65 };
66 static struct i2o_cfg_info *open_files = NULL;
67 static ulong i2o_cfg_info_id = 0;
68
69 static int i2o_cfg_getiops(unsigned long arg)
70 {
71 struct i2o_controller *c;
72 u8 __user *user_iop_table = (void __user *)arg;
73 u8 tmp[MAX_I2O_CONTROLLERS];
74 int ret = 0;
75
76 memset(tmp, 0, MAX_I2O_CONTROLLERS);
77
78 list_for_each_entry(c, &i2o_controllers, list)
79 tmp[c->unit] = 1;
80
81 if (copy_to_user(user_iop_table, tmp, MAX_I2O_CONTROLLERS))
82 ret = -EFAULT;
83
84 return ret;
85 };
86
87 static int i2o_cfg_gethrt(unsigned long arg)
88 {
89 struct i2o_controller *c;
90 struct i2o_cmd_hrtlct __user *cmd = (struct i2o_cmd_hrtlct __user *)arg;
91 struct i2o_cmd_hrtlct kcmd;
92 i2o_hrt *hrt;
93 int len;
94 u32 reslen;
95 int ret = 0;
96
97 if (copy_from_user(&kcmd, cmd, sizeof(struct i2o_cmd_hrtlct)))
98 return -EFAULT;
99
100 if (get_user(reslen, kcmd.reslen) < 0)
101 return -EFAULT;
102
103 if (kcmd.resbuf == NULL)
104 return -EFAULT;
105
106 c = i2o_find_iop(kcmd.iop);
107 if (!c)
108 return -ENXIO;
109
110 hrt = (i2o_hrt *) c->hrt.virt;
111
112 len = 8 + ((hrt->entry_len * hrt->num_entries) << 2);
113
114 /* We did a get user...so assuming mem is ok...is this bad? */
115 put_user(len, kcmd.reslen);
116 if (len > reslen)
117 ret = -ENOBUFS;
118 if (copy_to_user(kcmd.resbuf, (void *)hrt, len))
119 ret = -EFAULT;
120
121 return ret;
122 };
123
124 static int i2o_cfg_getlct(unsigned long arg)
125 {
126 struct i2o_controller *c;
127 struct i2o_cmd_hrtlct __user *cmd = (struct i2o_cmd_hrtlct __user *)arg;
128 struct i2o_cmd_hrtlct kcmd;
129 i2o_lct *lct;
130 int len;
131 int ret = 0;
132 u32 reslen;
133
134 if (copy_from_user(&kcmd, cmd, sizeof(struct i2o_cmd_hrtlct)))
135 return -EFAULT;
136
137 if (get_user(reslen, kcmd.reslen) < 0)
138 return -EFAULT;
139
140 if (kcmd.resbuf == NULL)
141 return -EFAULT;
142
143 c = i2o_find_iop(kcmd.iop);
144 if (!c)
145 return -ENXIO;
146
147 lct = (i2o_lct *) c->lct;
148
149 len = (unsigned int)lct->table_size << 2;
150 put_user(len, kcmd.reslen);
151 if (len > reslen)
152 ret = -ENOBUFS;
153 else if (copy_to_user(kcmd.resbuf, lct, len))
154 ret = -EFAULT;
155
156 return ret;
157 };
158
159 static int i2o_cfg_parms(unsigned long arg, unsigned int type)
160 {
161 int ret = 0;
162 struct i2o_controller *c;
163 struct i2o_device *dev;
164 struct i2o_cmd_psetget __user *cmd =
165 (struct i2o_cmd_psetget __user *)arg;
166 struct i2o_cmd_psetget kcmd;
167 u32 reslen;
168 u8 *ops;
169 u8 *res;
170 int len = 0;
171
172 u32 i2o_cmd = (type == I2OPARMGET ?
173 I2O_CMD_UTIL_PARAMS_GET : I2O_CMD_UTIL_PARAMS_SET);
174
175 if (copy_from_user(&kcmd, cmd, sizeof(struct i2o_cmd_psetget)))
176 return -EFAULT;
177
178 if (get_user(reslen, kcmd.reslen))
179 return -EFAULT;
180
181 c = i2o_find_iop(kcmd.iop);
182 if (!c)
183 return -ENXIO;
184
185 dev = i2o_iop_find_device(c, kcmd.tid);
186 if (!dev)
187 return -ENXIO;
188
189 ops = kmalloc(kcmd.oplen, GFP_KERNEL);
190 if (!ops)
191 return -ENOMEM;
192
193 if (copy_from_user(ops, kcmd.opbuf, kcmd.oplen)) {
194 kfree(ops);
195 return -EFAULT;
196 }
197
198 /*
199 * It's possible to have a _very_ large table
200 * and that the user asks for all of it at once...
201 */
202 res = kmalloc(65536, GFP_KERNEL);
203 if (!res) {
204 kfree(ops);
205 return -ENOMEM;
206 }
207
208 len = i2o_parm_issue(dev, i2o_cmd, ops, kcmd.oplen, res, 65536);
209 kfree(ops);
210
211 if (len < 0) {
212 kfree(res);
213 return -EAGAIN;
214 }
215
216 put_user(len, kcmd.reslen);
217 if (len > reslen)
218 ret = -ENOBUFS;
219 else if (copy_to_user(kcmd.resbuf, res, len))
220 ret = -EFAULT;
221
222 kfree(res);
223
224 return ret;
225 };
226
227 static int i2o_cfg_swdl(unsigned long arg)
228 {
229 struct i2o_sw_xfer kxfer;
230 struct i2o_sw_xfer __user *pxfer = (struct i2o_sw_xfer __user *)arg;
231 unsigned char maxfrag = 0, curfrag = 1;
232 struct i2o_dma buffer;
233 struct i2o_message *msg;
234 unsigned int status = 0, swlen = 0, fragsize = 8192;
235 struct i2o_controller *c;
236
237 if (copy_from_user(&kxfer, pxfer, sizeof(struct i2o_sw_xfer)))
238 return -EFAULT;
239
240 if (get_user(swlen, kxfer.swlen) < 0)
241 return -EFAULT;
242
243 if (get_user(maxfrag, kxfer.maxfrag) < 0)
244 return -EFAULT;
245
246 if (get_user(curfrag, kxfer.curfrag) < 0)
247 return -EFAULT;
248
249 if (curfrag == maxfrag)
250 fragsize = swlen - (maxfrag - 1) * 8192;
251
252 if (!kxfer.buf || !access_ok(VERIFY_READ, kxfer.buf, fragsize))
253 return -EFAULT;
254
255 c = i2o_find_iop(kxfer.iop);
256 if (!c)
257 return -ENXIO;
258
259 msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
260 if (IS_ERR(msg))
261 return PTR_ERR(msg);
262
263 if (i2o_dma_alloc(&c->pdev->dev, &buffer, fragsize, GFP_KERNEL)) {
264 i2o_msg_nop(c, msg);
265 return -ENOMEM;
266 }
267
268 if (__copy_from_user(buffer.virt, kxfer.buf, fragsize)) {
269 i2o_msg_nop(c, msg);
270 i2o_dma_free(&c->pdev->dev, &buffer);
271 return -EFAULT;
272 }
273
274 msg->u.head[0] = cpu_to_le32(NINE_WORD_MSG_SIZE | SGL_OFFSET_7);
275 msg->u.head[1] =
276 cpu_to_le32(I2O_CMD_SW_DOWNLOAD << 24 | HOST_TID << 12 |
277 ADAPTER_TID);
278 msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
279 msg->u.head[3] = cpu_to_le32(0);
280 msg->body[0] =
281 cpu_to_le32((((u32) kxfer.flags) << 24) | (((u32) kxfer.
282 sw_type) << 16) |
283 (((u32) maxfrag) << 8) | (((u32) curfrag)));
284 msg->body[1] = cpu_to_le32(swlen);
285 msg->body[2] = cpu_to_le32(kxfer.sw_id);
286 msg->body[3] = cpu_to_le32(0xD0000000 | fragsize);
287 msg->body[4] = cpu_to_le32(buffer.phys);
288
289 osm_debug("swdl frag %d/%d (size %d)\n", curfrag, maxfrag, fragsize);
290 status = i2o_msg_post_wait_mem(c, msg, 60, &buffer);
291
292 if (status != -ETIMEDOUT)
293 i2o_dma_free(&c->pdev->dev, &buffer);
294
295 if (status != I2O_POST_WAIT_OK) {
296 // it fails if you try and send frags out of order
297 // and for some yet unknown reasons too
298 osm_info("swdl failed, DetailedStatus = %d\n", status);
299 return status;
300 }
301
302 return 0;
303 };
304
305 static int i2o_cfg_swul(unsigned long arg)
306 {
307 struct i2o_sw_xfer kxfer;
308 struct i2o_sw_xfer __user *pxfer = (struct i2o_sw_xfer __user *)arg;
309 unsigned char maxfrag = 0, curfrag = 1;
310 struct i2o_dma buffer;
311 struct i2o_message *msg;
312 unsigned int status = 0, swlen = 0, fragsize = 8192;
313 struct i2o_controller *c;
314 int ret = 0;
315
316 if (copy_from_user(&kxfer, pxfer, sizeof(struct i2o_sw_xfer)))
317 goto return_fault;
318
319 if (get_user(swlen, kxfer.swlen) < 0)
320 goto return_fault;
321
322 if (get_user(maxfrag, kxfer.maxfrag) < 0)
323 goto return_fault;
324
325 if (get_user(curfrag, kxfer.curfrag) < 0)
326 goto return_fault;
327
328 if (curfrag == maxfrag)
329 fragsize = swlen - (maxfrag - 1) * 8192;
330
331 if (!kxfer.buf)
332 goto return_fault;
333
334 c = i2o_find_iop(kxfer.iop);
335 if (!c)
336 return -ENXIO;
337
338 msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
339 if (IS_ERR(msg))
340 return PTR_ERR(msg);
341
342 if (i2o_dma_alloc(&c->pdev->dev, &buffer, fragsize, GFP_KERNEL)) {
343 i2o_msg_nop(c, msg);
344 return -ENOMEM;
345 }
346
347 msg->u.head[0] = cpu_to_le32(NINE_WORD_MSG_SIZE | SGL_OFFSET_7);
348 msg->u.head[1] =
349 cpu_to_le32(I2O_CMD_SW_UPLOAD << 24 | HOST_TID << 12 | ADAPTER_TID);
350 msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
351 msg->u.head[3] = cpu_to_le32(0);
352 msg->body[0] =
353 cpu_to_le32((u32) kxfer.flags << 24 | (u32) kxfer.
354 sw_type << 16 | (u32) maxfrag << 8 | (u32) curfrag);
355 msg->body[1] = cpu_to_le32(swlen);
356 msg->body[2] = cpu_to_le32(kxfer.sw_id);
357 msg->body[3] = cpu_to_le32(0xD0000000 | fragsize);
358 msg->body[4] = cpu_to_le32(buffer.phys);
359
360 osm_debug("swul frag %d/%d (size %d)\n", curfrag, maxfrag, fragsize);
361 status = i2o_msg_post_wait_mem(c, msg, 60, &buffer);
362
363 if (status != I2O_POST_WAIT_OK) {
364 if (status != -ETIMEDOUT)
365 i2o_dma_free(&c->pdev->dev, &buffer);
366
367 osm_info("swul failed, DetailedStatus = %d\n", status);
368 return status;
369 }
370
371 if (copy_to_user(kxfer.buf, buffer.virt, fragsize))
372 ret = -EFAULT;
373
374 i2o_dma_free(&c->pdev->dev, &buffer);
375
376 return_ret:
377 return ret;
378 return_fault:
379 ret = -EFAULT;
380 goto return_ret;
381 };
382
383 static int i2o_cfg_swdel(unsigned long arg)
384 {
385 struct i2o_controller *c;
386 struct i2o_sw_xfer kxfer;
387 struct i2o_sw_xfer __user *pxfer = (struct i2o_sw_xfer __user *)arg;
388 struct i2o_message *msg;
389 unsigned int swlen;
390 int token;
391
392 if (copy_from_user(&kxfer, pxfer, sizeof(struct i2o_sw_xfer)))
393 return -EFAULT;
394
395 if (get_user(swlen, kxfer.swlen) < 0)
396 return -EFAULT;
397
398 c = i2o_find_iop(kxfer.iop);
399 if (!c)
400 return -ENXIO;
401
402 msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
403 if (IS_ERR(msg))
404 return PTR_ERR(msg);
405
406 msg->u.head[0] = cpu_to_le32(SEVEN_WORD_MSG_SIZE | SGL_OFFSET_0);
407 msg->u.head[1] =
408 cpu_to_le32(I2O_CMD_SW_REMOVE << 24 | HOST_TID << 12 | ADAPTER_TID);
409 msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
410 msg->u.head[3] = cpu_to_le32(0);
411 msg->body[0] =
412 cpu_to_le32((u32) kxfer.flags << 24 | (u32) kxfer.sw_type << 16);
413 msg->body[1] = cpu_to_le32(swlen);
414 msg->body[2] = cpu_to_le32(kxfer.sw_id);
415
416 token = i2o_msg_post_wait(c, msg, 10);
417
418 if (token != I2O_POST_WAIT_OK) {
419 osm_info("swdel failed, DetailedStatus = %d\n", token);
420 return -ETIMEDOUT;
421 }
422
423 return 0;
424 };
425
426 static int i2o_cfg_validate(unsigned long arg)
427 {
428 int token;
429 int iop = (int)arg;
430 struct i2o_message *msg;
431 struct i2o_controller *c;
432
433 c = i2o_find_iop(iop);
434 if (!c)
435 return -ENXIO;
436
437 msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
438 if (IS_ERR(msg))
439 return PTR_ERR(msg);
440
441 msg->u.head[0] = cpu_to_le32(FOUR_WORD_MSG_SIZE | SGL_OFFSET_0);
442 msg->u.head[1] =
443 cpu_to_le32(I2O_CMD_CONFIG_VALIDATE << 24 | HOST_TID << 12 | iop);
444 msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
445 msg->u.head[3] = cpu_to_le32(0);
446
447 token = i2o_msg_post_wait(c, msg, 10);
448
449 if (token != I2O_POST_WAIT_OK) {
450 osm_info("Can't validate configuration, ErrorStatus = %d\n",
451 token);
452 return -ETIMEDOUT;
453 }
454
455 return 0;
456 };
457
458 static int i2o_cfg_evt_reg(unsigned long arg, struct file *fp)
459 {
460 struct i2o_message *msg;
461 struct i2o_evt_id __user *pdesc = (struct i2o_evt_id __user *)arg;
462 struct i2o_evt_id kdesc;
463 struct i2o_controller *c;
464 struct i2o_device *d;
465
466 if (copy_from_user(&kdesc, pdesc, sizeof(struct i2o_evt_id)))
467 return -EFAULT;
468
469 /* IOP exists? */
470 c = i2o_find_iop(kdesc.iop);
471 if (!c)
472 return -ENXIO;
473
474 /* Device exists? */
475 d = i2o_iop_find_device(c, kdesc.tid);
476 if (!d)
477 return -ENODEV;
478
479 msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
480 if (IS_ERR(msg))
481 return PTR_ERR(msg);
482
483 msg->u.head[0] = cpu_to_le32(FOUR_WORD_MSG_SIZE | SGL_OFFSET_0);
484 msg->u.head[1] =
485 cpu_to_le32(I2O_CMD_UTIL_EVT_REGISTER << 24 | HOST_TID << 12 |
486 kdesc.tid);
487 msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
488 msg->u.head[3] = cpu_to_le32(i2o_cntxt_list_add(c, fp->private_data));
489 msg->body[0] = cpu_to_le32(kdesc.evt_mask);
490
491 i2o_msg_post(c, msg);
492
493 return 0;
494 }
495
496 static int i2o_cfg_evt_get(unsigned long arg, struct file *fp)
497 {
498 struct i2o_cfg_info *p = NULL;
499 struct i2o_evt_get __user *uget = (struct i2o_evt_get __user *)arg;
500 struct i2o_evt_get kget;
501 unsigned long flags;
502
503 for (p = open_files; p; p = p->next)
504 if (p->q_id == (ulong) fp->private_data)
505 break;
506
507 if (!p->q_len)
508 return -ENOENT;
509
510 memcpy(&kget.info, &p->event_q[p->q_out], sizeof(struct i2o_evt_info));
511 MODINC(p->q_out, I2O_EVT_Q_LEN);
512 spin_lock_irqsave(&i2o_config_lock, flags);
513 p->q_len--;
514 kget.pending = p->q_len;
515 kget.lost = p->q_lost;
516 spin_unlock_irqrestore(&i2o_config_lock, flags);
517
518 if (copy_to_user(uget, &kget, sizeof(struct i2o_evt_get)))
519 return -EFAULT;
520 return 0;
521 }
522
523 #ifdef CONFIG_COMPAT
524 static int i2o_cfg_passthru32(struct file *file, unsigned cmnd,
525 unsigned long arg)
526 {
527 struct i2o_cmd_passthru32 __user *cmd;
528 struct i2o_controller *c;
529 u32 __user *user_msg;
530 u32 *reply = NULL;
531 u32 __user *user_reply = NULL;
532 u32 size = 0;
533 u32 reply_size = 0;
534 u32 rcode = 0;
535 struct i2o_dma sg_list[SG_TABLESIZE];
536 u32 sg_offset = 0;
537 u32 sg_count = 0;
538 u32 i = 0;
539 u32 sg_index = 0;
540 i2o_status_block *sb;
541 struct i2o_message *msg;
542 unsigned int iop;
543
544 cmd = (struct i2o_cmd_passthru32 __user *)arg;
545
546 if (get_user(iop, &cmd->iop) || get_user(i, &cmd->msg))
547 return -EFAULT;
548
549 user_msg = compat_ptr(i);
550
551 c = i2o_find_iop(iop);
552 if (!c) {
553 osm_debug("controller %d not found\n", iop);
554 return -ENXIO;
555 }
556
557 sb = c->status_block.virt;
558
559 if (get_user(size, &user_msg[0])) {
560 osm_warn("unable to get size!\n");
561 return -EFAULT;
562 }
563 size = size >> 16;
564
565 if (size > sb->inbound_frame_size) {
566 osm_warn("size of message > inbound_frame_size");
567 return -EFAULT;
568 }
569
570 user_reply = &user_msg[size];
571
572 size <<= 2; // Convert to bytes
573
574 msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
575 if (IS_ERR(msg))
576 return PTR_ERR(msg);
577
578 rcode = -EFAULT;
579 /* Copy in the user's I2O command */
580 if (copy_from_user(msg, user_msg, size)) {
581 osm_warn("unable to copy user message\n");
582 goto out;
583 }
584 i2o_dump_message(msg);
585
586 if (get_user(reply_size, &user_reply[0]) < 0)
587 goto out;
588
589 reply_size >>= 16;
590 reply_size <<= 2;
591
592 rcode = -ENOMEM;
593 reply = kzalloc(reply_size, GFP_KERNEL);
594 if (!reply) {
595 printk(KERN_WARNING "%s: Could not allocate reply buffer\n",
596 c->name);
597 goto out;
598 }
599
600 sg_offset = (msg->u.head[0] >> 4) & 0x0f;
601
602 memset(sg_list, 0, sizeof(sg_list[0]) * SG_TABLESIZE);
603 if (sg_offset) {
604 struct sg_simple_element *sg;
605
606 if (sg_offset * 4 >= size) {
607 rcode = -EFAULT;
608 goto cleanup;
609 }
610 // TODO 64bit fix
611 sg = (struct sg_simple_element *)((&msg->u.head[0]) +
612 sg_offset);
613 sg_count =
614 (size - sg_offset * 4) / sizeof(struct sg_simple_element);
615 if (sg_count > SG_TABLESIZE) {
616 printk(KERN_DEBUG "%s:IOCTL SG List too large (%u)\n",
617 c->name, sg_count);
618 rcode = -EINVAL;
619 goto cleanup;
620 }
621
622 for (i = 0; i < sg_count; i++) {
623 int sg_size;
624 struct i2o_dma *p;
625
626 if (!(sg[i].flag_count & 0x10000000
627 /*I2O_SGL_FLAGS_SIMPLE_ADDRESS_ELEMENT */ )) {
628 printk(KERN_DEBUG
629 "%s:Bad SG element %d - not simple (%x)\n",
630 c->name, i, sg[i].flag_count);
631 rcode = -EINVAL;
632 goto cleanup;
633 }
634 sg_size = sg[i].flag_count & 0xffffff;
635 p = &(sg_list[sg_index]);
636 /* Allocate memory for the transfer */
637 if (i2o_dma_alloc
638 (&c->pdev->dev, p, sg_size,
639 PCI_DMA_BIDIRECTIONAL)) {
640 printk(KERN_DEBUG
641 "%s: Could not allocate SG buffer - size = %d buffer number %d of %d\n",
642 c->name, sg_size, i, sg_count);
643 rcode = -ENOMEM;
644 goto sg_list_cleanup;
645 }
646 sg_index++;
647 /* Copy in the user's SG buffer if necessary */
648 if (sg[i].
649 flag_count & 0x04000000 /*I2O_SGL_FLAGS_DIR */ ) {
650 // TODO 64bit fix
651 if (copy_from_user
652 (p->virt,
653 (void __user *)(unsigned long)sg[i].
654 addr_bus, sg_size)) {
655 printk(KERN_DEBUG
656 "%s: Could not copy SG buf %d FROM user\n",
657 c->name, i);
658 rcode = -EFAULT;
659 goto sg_list_cleanup;
660 }
661 }
662 //TODO 64bit fix
663 sg[i].addr_bus = (u32) p->phys;
664 }
665 }
666
667 rcode = i2o_msg_post_wait(c, msg, 60);
668 msg = NULL;
669 if (rcode) {
670 reply[4] = ((u32) rcode) << 24;
671 goto sg_list_cleanup;
672 }
673
674 if (sg_offset) {
675 u32 rmsg[I2O_OUTBOUND_MSG_FRAME_SIZE];
676 /* Copy back the Scatter Gather buffers back to user space */
677 u32 j;
678 // TODO 64bit fix
679 struct sg_simple_element *sg;
680 int sg_size;
681
682 // re-acquire the original message to handle correctly the sg copy operation
683 memset(&rmsg, 0, I2O_OUTBOUND_MSG_FRAME_SIZE * 4);
684 // get user msg size in u32s
685 if (get_user(size, &user_msg[0])) {
686 rcode = -EFAULT;
687 goto sg_list_cleanup;
688 }
689 size = size >> 16;
690 size *= 4;
691 /* Copy in the user's I2O command */
692 if (copy_from_user(rmsg, user_msg, size)) {
693 rcode = -EFAULT;
694 goto sg_list_cleanup;
695 }
696 sg_count =
697 (size - sg_offset * 4) / sizeof(struct sg_simple_element);
698
699 // TODO 64bit fix
700 sg = (struct sg_simple_element *)(rmsg + sg_offset);
701 for (j = 0; j < sg_count; j++) {
702 /* Copy out the SG list to user's buffer if necessary */
703 if (!
704 (sg[j].
705 flag_count & 0x4000000 /*I2O_SGL_FLAGS_DIR */ )) {
706 sg_size = sg[j].flag_count & 0xffffff;
707 // TODO 64bit fix
708 if (copy_to_user
709 ((void __user *)(u64) sg[j].addr_bus,
710 sg_list[j].virt, sg_size)) {
711 printk(KERN_WARNING
712 "%s: Could not copy %p TO user %x\n",
713 c->name, sg_list[j].virt,
714 sg[j].addr_bus);
715 rcode = -EFAULT;
716 goto sg_list_cleanup;
717 }
718 }
719 }
720 }
721
722 sg_list_cleanup:
723 /* Copy back the reply to user space */
724 if (reply_size) {
725 // we wrote our own values for context - now restore the user supplied ones
726 if (copy_from_user(reply + 2, user_msg + 2, sizeof(u32) * 2)) {
727 printk(KERN_WARNING
728 "%s: Could not copy message context FROM user\n",
729 c->name);
730 rcode = -EFAULT;
731 }
732 if (copy_to_user(user_reply, reply, reply_size)) {
733 printk(KERN_WARNING
734 "%s: Could not copy reply TO user\n", c->name);
735 rcode = -EFAULT;
736 }
737 }
738 for (i = 0; i < sg_index; i++)
739 i2o_dma_free(&c->pdev->dev, &sg_list[i]);
740
741 cleanup:
742 kfree(reply);
743 out:
744 if (msg)
745 i2o_msg_nop(c, msg);
746 return rcode;
747 }
748
749 static long i2o_cfg_compat_ioctl(struct file *file, unsigned cmd,
750 unsigned long arg)
751 {
752 int ret;
753 lock_kernel();
754 switch (cmd) {
755 case I2OGETIOPS:
756 ret = i2o_cfg_ioctl(NULL, file, cmd, arg);
757 break;
758 case I2OPASSTHRU32:
759 ret = i2o_cfg_passthru32(file, cmd, arg);
760 break;
761 default:
762 ret = -ENOIOCTLCMD;
763 break;
764 }
765 unlock_kernel();
766 return ret;
767 }
768
769 #endif
770
771 #ifdef CONFIG_I2O_EXT_ADAPTEC
772 static int i2o_cfg_passthru(unsigned long arg)
773 {
774 struct i2o_cmd_passthru __user *cmd =
775 (struct i2o_cmd_passthru __user *)arg;
776 struct i2o_controller *c;
777 u32 __user *user_msg;
778 u32 *reply = NULL;
779 u32 __user *user_reply = NULL;
780 u32 size = 0;
781 u32 reply_size = 0;
782 u32 rcode = 0;
783 void *sg_list[SG_TABLESIZE];
784 u32 sg_offset = 0;
785 u32 sg_count = 0;
786 int sg_index = 0;
787 u32 i = 0;
788 void *p = NULL;
789 i2o_status_block *sb;
790 struct i2o_message *msg;
791 unsigned int iop;
792
793 if (get_user(iop, &cmd->iop) || get_user(user_msg, &cmd->msg))
794 return -EFAULT;
795
796 c = i2o_find_iop(iop);
797 if (!c) {
798 osm_warn("controller %d not found\n", iop);
799 return -ENXIO;
800 }
801
802 sb = c->status_block.virt;
803
804 if (get_user(size, &user_msg[0]))
805 return -EFAULT;
806 size = size >> 16;
807
808 if (size > sb->inbound_frame_size) {
809 osm_warn("size of message > inbound_frame_size");
810 return -EFAULT;
811 }
812
813 user_reply = &user_msg[size];
814
815 size <<= 2; // Convert to bytes
816
817 msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
818 if (IS_ERR(msg))
819 return PTR_ERR(msg);
820
821 rcode = -EFAULT;
822 /* Copy in the user's I2O command */
823 if (copy_from_user(msg, user_msg, size))
824 goto out;
825
826 if (get_user(reply_size, &user_reply[0]) < 0)
827 goto out;
828
829 reply_size >>= 16;
830 reply_size <<= 2;
831
832 reply = kzalloc(reply_size, GFP_KERNEL);
833 if (!reply) {
834 printk(KERN_WARNING "%s: Could not allocate reply buffer\n",
835 c->name);
836 rcode = -ENOMEM;
837 goto out;
838 }
839
840 sg_offset = (msg->u.head[0] >> 4) & 0x0f;
841
842 memset(sg_list, 0, sizeof(sg_list[0]) * SG_TABLESIZE);
843 if (sg_offset) {
844 struct sg_simple_element *sg;
845
846 if (sg_offset * 4 >= size) {
847 rcode = -EFAULT;
848 goto cleanup;
849 }
850 // TODO 64bit fix
851 sg = (struct sg_simple_element *)((&msg->u.head[0]) +
852 sg_offset);
853 sg_count =
854 (size - sg_offset * 4) / sizeof(struct sg_simple_element);
855 if (sg_count > SG_TABLESIZE) {
856 printk(KERN_DEBUG "%s:IOCTL SG List too large (%u)\n",
857 c->name, sg_count);
858 rcode = -EINVAL;
859 goto cleanup;
860 }
861
862 for (i = 0; i < sg_count; i++) {
863 int sg_size;
864
865 if (!(sg[i].flag_count & 0x10000000
866 /*I2O_SGL_FLAGS_SIMPLE_ADDRESS_ELEMENT */ )) {
867 printk(KERN_DEBUG
868 "%s:Bad SG element %d - not simple (%x)\n",
869 c->name, i, sg[i].flag_count);
870 rcode = -EINVAL;
871 goto sg_list_cleanup;
872 }
873 sg_size = sg[i].flag_count & 0xffffff;
874 /* Allocate memory for the transfer */
875 p = kmalloc(sg_size, GFP_KERNEL);
876 if (!p) {
877 printk(KERN_DEBUG
878 "%s: Could not allocate SG buffer - size = %d buffer number %d of %d\n",
879 c->name, sg_size, i, sg_count);
880 rcode = -ENOMEM;
881 goto sg_list_cleanup;
882 }
883 sg_list[sg_index++] = p; // sglist indexed with input frame, not our internal frame.
884 /* Copy in the user's SG buffer if necessary */
885 if (sg[i].
886 flag_count & 0x04000000 /*I2O_SGL_FLAGS_DIR */ ) {
887 // TODO 64bit fix
888 if (copy_from_user
889 (p, (void __user *)sg[i].addr_bus,
890 sg_size)) {
891 printk(KERN_DEBUG
892 "%s: Could not copy SG buf %d FROM user\n",
893 c->name, i);
894 rcode = -EFAULT;
895 goto sg_list_cleanup;
896 }
897 }
898 //TODO 64bit fix
899 sg[i].addr_bus = virt_to_bus(p);
900 }
901 }
902
903 rcode = i2o_msg_post_wait(c, msg, 60);
904 msg = NULL;
905 if (rcode) {
906 reply[4] = ((u32) rcode) << 24;
907 goto sg_list_cleanup;
908 }
909
910 if (sg_offset) {
911 u32 rmsg[128];
912 /* Copy back the Scatter Gather buffers back to user space */
913 u32 j;
914 // TODO 64bit fix
915 struct sg_simple_element *sg;
916 int sg_size;
917
918 // re-acquire the original message to handle correctly the sg copy operation
919 memset(&rmsg, 0, I2O_OUTBOUND_MSG_FRAME_SIZE * 4);
920 // get user msg size in u32s
921 if (get_user(size, &user_msg[0])) {
922 rcode = -EFAULT;
923 goto sg_list_cleanup;
924 }
925 size = size >> 16;
926 size *= 4;
927 /* Copy in the user's I2O command */
928 if (copy_from_user(rmsg, user_msg, size)) {
929 rcode = -EFAULT;
930 goto sg_list_cleanup;
931 }
932 sg_count =
933 (size - sg_offset * 4) / sizeof(struct sg_simple_element);
934
935 // TODO 64bit fix
936 sg = (struct sg_simple_element *)(rmsg + sg_offset);
937 for (j = 0; j < sg_count; j++) {
938 /* Copy out the SG list to user's buffer if necessary */
939 if (!
940 (sg[j].
941 flag_count & 0x4000000 /*I2O_SGL_FLAGS_DIR */ )) {
942 sg_size = sg[j].flag_count & 0xffffff;
943 // TODO 64bit fix
944 if (copy_to_user
945 ((void __user *)sg[j].addr_bus, sg_list[j],
946 sg_size)) {
947 printk(KERN_WARNING
948 "%s: Could not copy %p TO user %x\n",
949 c->name, sg_list[j],
950 sg[j].addr_bus);
951 rcode = -EFAULT;
952 goto sg_list_cleanup;
953 }
954 }
955 }
956 }
957
958 sg_list_cleanup:
959 /* Copy back the reply to user space */
960 if (reply_size) {
961 // we wrote our own values for context - now restore the user supplied ones
962 if (copy_from_user(reply + 2, user_msg + 2, sizeof(u32) * 2)) {
963 printk(KERN_WARNING
964 "%s: Could not copy message context FROM user\n",
965 c->name);
966 rcode = -EFAULT;
967 }
968 if (copy_to_user(user_reply, reply, reply_size)) {
969 printk(KERN_WARNING
970 "%s: Could not copy reply TO user\n", c->name);
971 rcode = -EFAULT;
972 }
973 }
974
975 for (i = 0; i < sg_index; i++)
976 kfree(sg_list[i]);
977
978 cleanup:
979 kfree(reply);
980 out:
981 if (msg)
982 i2o_msg_nop(c, msg);
983 return rcode;
984 }
985 #endif
986
987 /*
988 * IOCTL Handler
989 */
990 static int i2o_cfg_ioctl(struct inode *inode, struct file *fp, unsigned int cmd,
991 unsigned long arg)
992 {
993 int ret;
994
995 switch (cmd) {
996 case I2OGETIOPS:
997 ret = i2o_cfg_getiops(arg);
998 break;
999
1000 case I2OHRTGET:
1001 ret = i2o_cfg_gethrt(arg);
1002 break;
1003
1004 case I2OLCTGET:
1005 ret = i2o_cfg_getlct(arg);
1006 break;
1007
1008 case I2OPARMSET:
1009 ret = i2o_cfg_parms(arg, I2OPARMSET);
1010 break;
1011
1012 case I2OPARMGET:
1013 ret = i2o_cfg_parms(arg, I2OPARMGET);
1014 break;
1015
1016 case I2OSWDL:
1017 ret = i2o_cfg_swdl(arg);
1018 break;
1019
1020 case I2OSWUL:
1021 ret = i2o_cfg_swul(arg);
1022 break;
1023
1024 case I2OSWDEL:
1025 ret = i2o_cfg_swdel(arg);
1026 break;
1027
1028 case I2OVALIDATE:
1029 ret = i2o_cfg_validate(arg);
1030 break;
1031
1032 case I2OEVTREG:
1033 ret = i2o_cfg_evt_reg(arg, fp);
1034 break;
1035
1036 case I2OEVTGET:
1037 ret = i2o_cfg_evt_get(arg, fp);
1038 break;
1039
1040 #ifdef CONFIG_I2O_EXT_ADAPTEC
1041 case I2OPASSTHRU:
1042 ret = i2o_cfg_passthru(arg);
1043 break;
1044 #endif
1045
1046 default:
1047 osm_debug("unknown ioctl called!\n");
1048 ret = -EINVAL;
1049 }
1050
1051 return ret;
1052 }
1053
1054 static int cfg_open(struct inode *inode, struct file *file)
1055 {
1056 struct i2o_cfg_info *tmp =
1057 (struct i2o_cfg_info *)kmalloc(sizeof(struct i2o_cfg_info),
1058 GFP_KERNEL);
1059 unsigned long flags;
1060
1061 if (!tmp)
1062 return -ENOMEM;
1063
1064 file->private_data = (void *)(i2o_cfg_info_id++);
1065 tmp->fp = file;
1066 tmp->fasync = NULL;
1067 tmp->q_id = (ulong) file->private_data;
1068 tmp->q_len = 0;
1069 tmp->q_in = 0;
1070 tmp->q_out = 0;
1071 tmp->q_lost = 0;
1072 tmp->next = open_files;
1073
1074 spin_lock_irqsave(&i2o_config_lock, flags);
1075 open_files = tmp;
1076 spin_unlock_irqrestore(&i2o_config_lock, flags);
1077
1078 return 0;
1079 }
1080
1081 static int cfg_fasync(int fd, struct file *fp, int on)
1082 {
1083 ulong id = (ulong) fp->private_data;
1084 struct i2o_cfg_info *p;
1085
1086 for (p = open_files; p; p = p->next)
1087 if (p->q_id == id)
1088 break;
1089
1090 if (!p)
1091 return -EBADF;
1092
1093 return fasync_helper(fd, fp, on, &p->fasync);
1094 }
1095
1096 static int cfg_release(struct inode *inode, struct file *file)
1097 {
1098 ulong id = (ulong) file->private_data;
1099 struct i2o_cfg_info *p1, *p2;
1100 unsigned long flags;
1101
1102 lock_kernel();
1103 p1 = p2 = NULL;
1104
1105 spin_lock_irqsave(&i2o_config_lock, flags);
1106 for (p1 = open_files; p1;) {
1107 if (p1->q_id == id) {
1108
1109 if (p1->fasync)
1110 cfg_fasync(-1, file, 0);
1111 if (p2)
1112 p2->next = p1->next;
1113 else
1114 open_files = p1->next;
1115
1116 kfree(p1);
1117 break;
1118 }
1119 p2 = p1;
1120 p1 = p1->next;
1121 }
1122 spin_unlock_irqrestore(&i2o_config_lock, flags);
1123 unlock_kernel();
1124
1125 return 0;
1126 }
1127
1128 static const struct file_operations config_fops = {
1129 .owner = THIS_MODULE,
1130 .llseek = no_llseek,
1131 .ioctl = i2o_cfg_ioctl,
1132 #ifdef CONFIG_COMPAT
1133 .compat_ioctl = i2o_cfg_compat_ioctl,
1134 #endif
1135 .open = cfg_open,
1136 .release = cfg_release,
1137 .fasync = cfg_fasync,
1138 };
1139
1140 static struct miscdevice i2o_miscdev = {
1141 I2O_MINOR,
1142 "i2octl",
1143 &config_fops
1144 };
1145
1146 static int __init i2o_config_old_init(void)
1147 {
1148 spin_lock_init(&i2o_config_lock);
1149
1150 if (misc_register(&i2o_miscdev) < 0) {
1151 osm_err("can't register device.\n");
1152 return -EBUSY;
1153 }
1154
1155 return 0;
1156 }
1157
1158 static void i2o_config_old_exit(void)
1159 {
1160 misc_deregister(&i2o_miscdev);
1161 }
1162
1163 MODULE_AUTHOR("Red Hat Software");
WRT350N Kernel Patches