]> git.ipfire.org Git - people/ms/linux.git/blame - block/bsg.c
swiotlb: rework "fix info leak with DMA_FROM_DEVICE"
[people/ms/linux.git] / block / bsg.c
CommitLineData
8c16567d 1// SPDX-License-Identifier: GPL-2.0
3d6392cf 2/*
0c6a89ba 3 * bsg.c - block layer implementation of the sg v4 interface
3d6392cf 4 */
3d6392cf
JA
5#include <linux/module.h>
6#include <linux/init.h>
7#include <linux/file.h>
8#include <linux/blkdev.h>
3d6392cf 9#include <linux/cdev.h>
ad5ebd2f 10#include <linux/jiffies.h>
3d6392cf 11#include <linux/percpu.h>
598443a2 12#include <linux/idr.h>
3d6392cf 13#include <linux/bsg.h>
5a0e3ad6 14#include <linux/slab.h>
3d6392cf
JA
15
16#include <scsi/scsi.h>
17#include <scsi/scsi_ioctl.h>
3d6392cf
JA
18#include <scsi/sg.h>
19
0ed081ce
FT
20#define BSG_DESCRIPTION "Block layer SCSI generic (bsg) driver"
21#define BSG_VERSION "0.4"
3d6392cf 22
3d6392cf 23struct bsg_device {
165125e1 24 struct request_queue *queue;
ead09dd3
CH
25 struct device device;
26 struct cdev cdev;
3d6392cf 27 int max_queue;
1e61c1a8
CH
28 unsigned int timeout;
29 unsigned int reserved_size;
75ca5640 30 bsg_sg_io_fn *sg_io_fn;
3d6392cf
JA
31};
32
ead09dd3
CH
33static inline struct bsg_device *to_bsg_device(struct inode *inode)
34{
35 return container_of(inode->i_cdev, struct bsg_device, cdev);
36}
37
5309cb38 38#define BSG_DEFAULT_CMDS 64
292b7f27 39#define BSG_MAX_DEVS 32768
3d6392cf 40
ead09dd3 41static DEFINE_IDA(bsg_minor_ida);
3d6392cf 42static struct class *bsg_class;
46f6ef4a 43static int bsg_major;
3d6392cf 44
75ca5640
CH
45static unsigned int bsg_timeout(struct bsg_device *bd, struct sg_io_v4 *hdr)
46{
47 unsigned int timeout = BLK_DEFAULT_SG_TIMEOUT;
48
49 if (hdr->timeout)
50 timeout = msecs_to_jiffies(hdr->timeout);
51 else if (bd->timeout)
52 timeout = bd->timeout;
53
54 return max_t(unsigned int, timeout, BLK_MIN_SG_TIMEOUT);
55}
17cb960f 56
ead09dd3 57static int bsg_sg_io(struct bsg_device *bd, fmode_t mode, void __user *uarg)
3d6392cf 58{
ccf3209f 59 struct sg_io_v4 hdr;
aebf526b 60 int ret;
c7a841f3 61
ccf3209f
CH
62 if (copy_from_user(&hdr, uarg, sizeof(hdr)))
63 return -EFAULT;
ccf3209f
CH
64 if (hdr.guard != 'Q')
65 return -EINVAL;
75ca5640 66 ret = bd->sg_io_fn(bd->queue, &hdr, mode, bsg_timeout(bd, &hdr));
972248e9 67 if (!ret && copy_to_user(uarg, &hdr, sizeof(hdr)))
ccf3209f
CH
68 return -EFAULT;
69 return ret;
70e36ece
FT
70}
71
3d6392cf
JA
72static int bsg_open(struct inode *inode, struct file *file)
73{
ead09dd3
CH
74 if (!blk_get_queue(to_bsg_device(inode)->queue))
75 return -ENXIO;
3d6392cf
JA
76 return 0;
77}
78
79static int bsg_release(struct inode *inode, struct file *file)
80{
ead09dd3
CH
81 blk_put_queue(to_bsg_device(inode)->queue);
82 return 0;
3d6392cf
JA
83}
84
ccf3209f
CH
85static int bsg_get_command_q(struct bsg_device *bd, int __user *uarg)
86{
ead09dd3 87 return put_user(READ_ONCE(bd->max_queue), uarg);
ccf3209f
CH
88}
89
90static int bsg_set_command_q(struct bsg_device *bd, int __user *uarg)
91{
ead09dd3 92 int max_queue;
ccf3209f 93
ead09dd3 94 if (get_user(max_queue, uarg))
ccf3209f 95 return -EFAULT;
ead09dd3 96 if (max_queue < 1)
ccf3209f 97 return -EINVAL;
ead09dd3 98 WRITE_ONCE(bd->max_queue, max_queue);
ccf3209f
CH
99 return 0;
100}
101
25fd1643 102static long bsg_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
3d6392cf 103{
ead09dd3 104 struct bsg_device *bd = to_bsg_device(file_inode(file));
d52fe8f4 105 struct request_queue *q = bd->queue;
ccf3209f 106 void __user *uarg = (void __user *) arg;
d52fe8f4
CH
107 int __user *intp = uarg;
108 int val;
3d6392cf 109
3d6392cf 110 switch (cmd) {
ccf3209f
CH
111 /*
112 * Our own ioctls
113 */
3d6392cf 114 case SG_GET_COMMAND_Q:
ccf3209f
CH
115 return bsg_get_command_q(bd, uarg);
116 case SG_SET_COMMAND_Q:
117 return bsg_set_command_q(bd, uarg);
3d6392cf
JA
118
119 /*
120 * SCSI/sg ioctls
121 */
122 case SG_GET_VERSION_NUM:
d52fe8f4 123 return put_user(30527, intp);
3d6392cf 124 case SCSI_IOCTL_GET_IDLUN:
d52fe8f4 125 return put_user(0, intp);
3d6392cf 126 case SCSI_IOCTL_GET_BUS_NUMBER:
d52fe8f4 127 return put_user(0, intp);
3d6392cf 128 case SG_SET_TIMEOUT:
d52fe8f4
CH
129 if (get_user(val, intp))
130 return -EFAULT;
1e61c1a8 131 bd->timeout = clock_t_to_jiffies(val);
d52fe8f4 132 return 0;
3d6392cf 133 case SG_GET_TIMEOUT:
1e61c1a8 134 return jiffies_to_clock_t(bd->timeout);
3d6392cf 135 case SG_GET_RESERVED_SIZE:
1e61c1a8 136 return put_user(min(bd->reserved_size, queue_max_bytes(q)),
d52fe8f4 137 intp);
3d6392cf 138 case SG_SET_RESERVED_SIZE:
d52fe8f4
CH
139 if (get_user(val, intp))
140 return -EFAULT;
141 if (val < 0)
142 return -EINVAL;
1e61c1a8 143 bd->reserved_size =
d52fe8f4
CH
144 min_t(unsigned int, val, queue_max_bytes(q));
145 return 0;
3d6392cf 146 case SG_EMULATED_HOST:
d52fe8f4 147 return put_user(1, intp);
ccf3209f 148 case SG_IO:
ead09dd3 149 return bsg_sg_io(bd, file->f_mode, uarg);
beec64d0
CH
150 case SCSI_IOCTL_SEND_COMMAND:
151 pr_warn_ratelimited("%s: calling unsupported SCSI_IOCTL_SEND_COMMAND\n",
152 current->comm);
153 return -EINVAL;
3d6392cf 154 default:
3d6392cf 155 return -ENOTTY;
3d6392cf
JA
156 }
157}
158
7344be05 159static const struct file_operations bsg_fops = {
3d6392cf
JA
160 .open = bsg_open,
161 .release = bsg_release,
25fd1643 162 .unlocked_ioctl = bsg_ioctl,
fe0da4e5 163 .compat_ioctl = compat_ptr_ioctl,
3d6392cf 164 .owner = THIS_MODULE,
6038f373 165 .llseek = default_llseek,
3d6392cf
JA
166};
167
1a0db774
ZY
168static void bsg_device_release(struct device *dev)
169{
170 struct bsg_device *bd = container_of(dev, struct bsg_device, device);
171
172 ida_simple_remove(&bsg_minor_ida, MINOR(bd->device.devt));
173 kfree(bd);
174}
175
ead09dd3 176void bsg_unregister_queue(struct bsg_device *bd)
3d6392cf 177{
ead09dd3
CH
178 if (bd->queue->kobj.sd)
179 sysfs_remove_link(&bd->queue->kobj, "bsg");
180 cdev_device_del(&bd->cdev, &bd->device);
1a0db774 181 put_device(&bd->device);
3d6392cf 182}
4cf0723a 183EXPORT_SYMBOL_GPL(bsg_unregister_queue);
3d6392cf 184
ead09dd3 185struct bsg_device *bsg_register_queue(struct request_queue *q,
75ca5640 186 struct device *parent, const char *name, bsg_sg_io_fn *sg_io_fn)
3d6392cf 187{
ead09dd3 188 struct bsg_device *bd;
bab998d6 189 int ret;
3d6392cf 190
ead09dd3
CH
191 bd = kzalloc(sizeof(*bd), GFP_KERNEL);
192 if (!bd)
193 return ERR_PTR(-ENOMEM);
194 bd->max_queue = BSG_DEFAULT_CMDS;
1e61c1a8 195 bd->reserved_size = INT_MAX;
ead09dd3 196 bd->queue = q;
75ca5640 197 bd->sg_io_fn = sg_io_fn;
292b7f27 198
ead09dd3 199 ret = ida_simple_get(&bsg_minor_ida, 0, BSG_MAX_DEVS, GFP_KERNEL);
bab998d6 200 if (ret < 0) {
ead09dd3
CH
201 if (ret == -ENOSPC)
202 dev_err(parent, "bsg: too many bsg devices\n");
1a0db774
ZY
203 kfree(bd);
204 return ERR_PTR(ret);
4e2872d6 205 }
ead09dd3
CH
206 bd->device.devt = MKDEV(bsg_major, ret);
207 bd->device.class = bsg_class;
208 bd->device.parent = parent;
1a0db774 209 bd->device.release = bsg_device_release;
ead09dd3
CH
210 dev_set_name(&bd->device, "%s", name);
211 device_initialize(&bd->device);
212
213 cdev_init(&bd->cdev, &bsg_fops);
214 bd->cdev.owner = THIS_MODULE;
215 ret = cdev_device_add(&bd->cdev, &bd->device);
216 if (ret)
1a0db774 217 goto out_put_device;
4e2872d6 218
abce891a 219 if (q->kobj.sd) {
ead09dd3 220 ret = sysfs_create_link(&q->kobj, &bd->device.kobj, "bsg");
4e2872d6 221 if (ret)
ead09dd3 222 goto out_device_del;
4e2872d6
FT
223 }
224
ead09dd3 225 return bd;
6826ee4f 226
ead09dd3
CH
227out_device_del:
228 cdev_device_del(&bd->cdev, &bd->device);
1a0db774
ZY
229out_put_device:
230 put_device(&bd->device);
ead09dd3 231 return ERR_PTR(ret);
4e2872d6 232}
78011042 233EXPORT_SYMBOL_GPL(bsg_register_queue);
4e2872d6 234
2c9ede55 235static char *bsg_devnode(struct device *dev, umode_t *mode)
2bdf9149
KS
236{
237 return kasprintf(GFP_KERNEL, "bsg/%s", dev_name(dev));
238}
239
3d6392cf
JA
240static int __init bsg_init(void)
241{
46f6ef4a 242 dev_t devid;
ead09dd3 243 int ret;
3d6392cf
JA
244
245 bsg_class = class_create(THIS_MODULE, "bsg");
28519c89
CH
246 if (IS_ERR(bsg_class))
247 return PTR_ERR(bsg_class);
e454cea2 248 bsg_class->devnode = bsg_devnode;
3d6392cf 249
46f6ef4a 250 ret = alloc_chrdev_region(&devid, 0, BSG_MAX_DEVS, "bsg");
9b9f770c
FT
251 if (ret)
252 goto destroy_bsg_class;
46f6ef4a
JA
253 bsg_major = MAJOR(devid);
254
5d3a8cd3 255 printk(KERN_INFO BSG_DESCRIPTION " version " BSG_VERSION
0ed081ce 256 " loaded (major %d)\n", bsg_major);
3d6392cf 257 return 0;
ead09dd3 258
9b9f770c
FT
259destroy_bsg_class:
260 class_destroy(bsg_class);
9b9f770c 261 return ret;
3d6392cf
JA
262}
263
264MODULE_AUTHOR("Jens Axboe");
0ed081ce 265MODULE_DESCRIPTION(BSG_DESCRIPTION);
3d6392cf
JA
266MODULE_LICENSE("GPL");
267
4e2872d6 268device_initcall(bsg_init);