Avoid beyond bounds copy while caching ACL
[zen-stable.git] / drivers / media / dvb / dvb-core / dvb_ringbuffer.c
bloba5712cd7c65ff084845cc86599d63f802ac81722
1 /*
3 * dvb_ringbuffer.c: ring buffer implementation for the dvb driver
5 * Copyright (C) 2003 Oliver Endriss
6 * Copyright (C) 2004 Andrew de Quincey
8 * based on code originally found in av7110.c & dvb_ci.c:
9 * Copyright (C) 1999-2003 Ralph Metzler
10 * & Marcus Metzler for convergence integrated media GmbH
12 * This program is free software; you can redistribute it and/or
13 * modify it under the terms of the GNU Lesser General Public License
14 * as published by the Free Software Foundation; either version 2.1
15 * of the License, or (at your option) any later version.
17 * This program is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 * GNU Lesser General Public License for more details.
22 * You should have received a copy of the GNU Lesser General Public License
23 * along with this program; if not, write to the Free Software
24 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
29 #include <linux/errno.h>
30 #include <linux/kernel.h>
31 #include <linux/module.h>
32 #include <linux/sched.h>
33 #include <linux/string.h>
34 #include <asm/uaccess.h>
36 #include "dvb_ringbuffer.h"
38 #define PKT_READY 0
39 #define PKT_DISPOSED 1
42 void dvb_ringbuffer_init(struct dvb_ringbuffer *rbuf, void *data, size_t len)
44 rbuf->pread=rbuf->pwrite=0;
45 rbuf->data=data;
46 rbuf->size=len;
47 rbuf->error=0;
49 init_waitqueue_head(&rbuf->queue);
51 spin_lock_init(&(rbuf->lock));
56 int dvb_ringbuffer_empty(struct dvb_ringbuffer *rbuf)
58 return (rbuf->pread==rbuf->pwrite);
63 ssize_t dvb_ringbuffer_free(struct dvb_ringbuffer *rbuf)
65 ssize_t free;
67 free = rbuf->pread - rbuf->pwrite;
68 if (free <= 0)
69 free += rbuf->size;
70 return free-1;
75 ssize_t dvb_ringbuffer_avail(struct dvb_ringbuffer *rbuf)
77 ssize_t avail;
79 avail = rbuf->pwrite - rbuf->pread;
80 if (avail < 0)
81 avail += rbuf->size;
82 return avail;
87 void dvb_ringbuffer_flush(struct dvb_ringbuffer *rbuf)
89 rbuf->pread = rbuf->pwrite;
90 rbuf->error = 0;
92 EXPORT_SYMBOL(dvb_ringbuffer_flush);
94 void dvb_ringbuffer_reset(struct dvb_ringbuffer *rbuf)
96 rbuf->pread = rbuf->pwrite = 0;
97 rbuf->error = 0;
100 void dvb_ringbuffer_flush_spinlock_wakeup(struct dvb_ringbuffer *rbuf)
102 unsigned long flags;
104 spin_lock_irqsave(&rbuf->lock, flags);
105 dvb_ringbuffer_flush(rbuf);
106 spin_unlock_irqrestore(&rbuf->lock, flags);
108 wake_up(&rbuf->queue);
111 ssize_t dvb_ringbuffer_read_user(struct dvb_ringbuffer *rbuf, u8 __user *buf, size_t len)
113 size_t todo = len;
114 size_t split;
116 split = (rbuf->pread + len > rbuf->size) ? rbuf->size - rbuf->pread : 0;
117 if (split > 0) {
118 if (copy_to_user(buf, rbuf->data+rbuf->pread, split))
119 return -EFAULT;
120 buf += split;
121 todo -= split;
122 rbuf->pread = 0;
124 if (copy_to_user(buf, rbuf->data+rbuf->pread, todo))
125 return -EFAULT;
127 rbuf->pread = (rbuf->pread + todo) % rbuf->size;
129 return len;
132 void dvb_ringbuffer_read(struct dvb_ringbuffer *rbuf, u8 *buf, size_t len)
134 size_t todo = len;
135 size_t split;
137 split = (rbuf->pread + len > rbuf->size) ? rbuf->size - rbuf->pread : 0;
138 if (split > 0) {
139 memcpy(buf, rbuf->data+rbuf->pread, split);
140 buf += split;
141 todo -= split;
142 rbuf->pread = 0;
144 memcpy(buf, rbuf->data+rbuf->pread, todo);
146 rbuf->pread = (rbuf->pread + todo) % rbuf->size;
150 ssize_t dvb_ringbuffer_write(struct dvb_ringbuffer *rbuf, const u8 *buf, size_t len)
152 size_t todo = len;
153 size_t split;
155 split = (rbuf->pwrite + len > rbuf->size) ? rbuf->size - rbuf->pwrite : 0;
157 if (split > 0) {
158 memcpy(rbuf->data+rbuf->pwrite, buf, split);
159 buf += split;
160 todo -= split;
161 rbuf->pwrite = 0;
163 memcpy(rbuf->data+rbuf->pwrite, buf, todo);
164 rbuf->pwrite = (rbuf->pwrite + todo) % rbuf->size;
166 return len;
169 ssize_t dvb_ringbuffer_pkt_write(struct dvb_ringbuffer *rbuf, u8* buf, size_t len)
171 int status;
172 ssize_t oldpwrite = rbuf->pwrite;
174 DVB_RINGBUFFER_WRITE_BYTE(rbuf, len >> 8);
175 DVB_RINGBUFFER_WRITE_BYTE(rbuf, len & 0xff);
176 DVB_RINGBUFFER_WRITE_BYTE(rbuf, PKT_READY);
177 status = dvb_ringbuffer_write(rbuf, buf, len);
179 if (status < 0) rbuf->pwrite = oldpwrite;
180 return status;
183 ssize_t dvb_ringbuffer_pkt_read_user(struct dvb_ringbuffer *rbuf, size_t idx,
184 int offset, u8 __user *buf, size_t len)
186 size_t todo;
187 size_t split;
188 size_t pktlen;
190 pktlen = rbuf->data[idx] << 8;
191 pktlen |= rbuf->data[(idx + 1) % rbuf->size];
192 if (offset > pktlen) return -EINVAL;
193 if ((offset + len) > pktlen) len = pktlen - offset;
195 idx = (idx + DVB_RINGBUFFER_PKTHDRSIZE + offset) % rbuf->size;
196 todo = len;
197 split = ((idx + len) > rbuf->size) ? rbuf->size - idx : 0;
198 if (split > 0) {
199 if (copy_to_user(buf, rbuf->data+idx, split))
200 return -EFAULT;
201 buf += split;
202 todo -= split;
203 idx = 0;
205 if (copy_to_user(buf, rbuf->data+idx, todo))
206 return -EFAULT;
208 return len;
211 ssize_t dvb_ringbuffer_pkt_read(struct dvb_ringbuffer *rbuf, size_t idx,
212 int offset, u8* buf, size_t len)
214 size_t todo;
215 size_t split;
216 size_t pktlen;
218 pktlen = rbuf->data[idx] << 8;
219 pktlen |= rbuf->data[(idx + 1) % rbuf->size];
220 if (offset > pktlen) return -EINVAL;
221 if ((offset + len) > pktlen) len = pktlen - offset;
223 idx = (idx + DVB_RINGBUFFER_PKTHDRSIZE + offset) % rbuf->size;
224 todo = len;
225 split = ((idx + len) > rbuf->size) ? rbuf->size - idx : 0;
226 if (split > 0) {
227 memcpy(buf, rbuf->data+idx, split);
228 buf += split;
229 todo -= split;
230 idx = 0;
232 memcpy(buf, rbuf->data+idx, todo);
233 return len;
236 void dvb_ringbuffer_pkt_dispose(struct dvb_ringbuffer *rbuf, size_t idx)
238 size_t pktlen;
240 rbuf->data[(idx + 2) % rbuf->size] = PKT_DISPOSED;
242 // clean up disposed packets
243 while(dvb_ringbuffer_avail(rbuf) > DVB_RINGBUFFER_PKTHDRSIZE) {
244 if (DVB_RINGBUFFER_PEEK(rbuf, 2) == PKT_DISPOSED) {
245 pktlen = DVB_RINGBUFFER_PEEK(rbuf, 0) << 8;
246 pktlen |= DVB_RINGBUFFER_PEEK(rbuf, 1);
247 DVB_RINGBUFFER_SKIP(rbuf, pktlen + DVB_RINGBUFFER_PKTHDRSIZE);
248 } else {
249 // first packet is not disposed, so we stop cleaning now
250 break;
255 ssize_t dvb_ringbuffer_pkt_next(struct dvb_ringbuffer *rbuf, size_t idx, size_t* pktlen)
257 int consumed;
258 int curpktlen;
259 int curpktstatus;
261 if (idx == -1) {
262 idx = rbuf->pread;
263 } else {
264 curpktlen = rbuf->data[idx] << 8;
265 curpktlen |= rbuf->data[(idx + 1) % rbuf->size];
266 idx = (idx + curpktlen + DVB_RINGBUFFER_PKTHDRSIZE) % rbuf->size;
269 consumed = (idx - rbuf->pread) % rbuf->size;
271 while((dvb_ringbuffer_avail(rbuf) - consumed) > DVB_RINGBUFFER_PKTHDRSIZE) {
273 curpktlen = rbuf->data[idx] << 8;
274 curpktlen |= rbuf->data[(idx + 1) % rbuf->size];
275 curpktstatus = rbuf->data[(idx + 2) % rbuf->size];
277 if (curpktstatus == PKT_READY) {
278 *pktlen = curpktlen;
279 return idx;
282 consumed += curpktlen + DVB_RINGBUFFER_PKTHDRSIZE;
283 idx = (idx + curpktlen + DVB_RINGBUFFER_PKTHDRSIZE) % rbuf->size;
286 // no packets available
287 return -1;
292 EXPORT_SYMBOL(dvb_ringbuffer_init);
293 EXPORT_SYMBOL(dvb_ringbuffer_empty);
294 EXPORT_SYMBOL(dvb_ringbuffer_free);
295 EXPORT_SYMBOL(dvb_ringbuffer_avail);
296 EXPORT_SYMBOL(dvb_ringbuffer_flush_spinlock_wakeup);
297 EXPORT_SYMBOL(dvb_ringbuffer_read_user);
298 EXPORT_SYMBOL(dvb_ringbuffer_read);
299 EXPORT_SYMBOL(dvb_ringbuffer_write);