[thirdparty/kernel/stable.git] / drivers / android / binder_alloc.h

/*
 * Copyright (C) 2017 Google, Inc.
 *
 * This software is licensed under the terms of the GNU General Public
 * License version 2, as published by the Free Software Foundation, and
 * may be copied, distributed, and modified under those terms.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 */

#ifndef _LINUX_BINDER_ALLOC_H
#define _LINUX_BINDER_ALLOC_H

#include <linux/rbtree.h>
#include <linux/list.h>
#include <linux/mm.h>
#include <linux/rtmutex.h>
#include <linux/vmalloc.h>
#include <linux/slab.h>
#include <linux/list_lru.h>
#include <uapi/linux/android/binder.h>

extern struct list_lru binder_alloc_lru;
struct binder_transaction;

/**
 * struct binder_buffer - buffer used for binder transactions
 * @entry:              entry alloc->buffers
 * @rb_node:            node for allocated_buffers/free_buffers rb trees
 * @free:               %true if buffer is free
 * @allow_user_free:    %true if user is allowed to free buffer
 * @async_transaction:  %true if buffer is in use for an async txn
 * @debug_id:           unique ID for debugging
 * @transaction:        pointer to associated struct binder_transaction
 * @target_node:        struct binder_node associated with this buffer
 * @data_size:          size of @transaction data
 * @offsets_size:       size of array of offsets
 * @extra_buffers_size: size of space for other objects (like sg lists)
 * @user_data:          user pointer to base of buffer space
 *
 * Bookkeeping structure for binder transaction buffers
 */
struct binder_buffer {
	struct list_head entry; /* free and allocated entries by address */
	struct rb_node rb_node; /* free entry by size or allocated entry */
				/* by address */
	unsigned free:1;
	unsigned allow_user_free:1;
	unsigned async_transaction:1;
	unsigned debug_id:29;

	struct binder_transaction *transaction;

	struct binder_node *target_node;
	size_t data_size;
	size_t offsets_size;
	size_t extra_buffers_size;
	void __user *user_data;
};

/**
 * struct binder_lru_page - page object used for binder shrinker
 * @page_ptr: pointer to physical page in mmap'd space
 * @lru:      entry in binder_alloc_lru
 * @alloc:    binder_alloc for a proc
 */
struct binder_lru_page {
	struct list_head lru;
	struct page *page_ptr;
	struct binder_alloc *alloc;
};

/**
 * struct binder_alloc - per-binder proc state for binder allocator
 * @vma:                vm_area_struct passed to mmap_handler
 *                      (invarient after mmap)
 * @tsk:                tid for task that called init for this proc
 *                      (invariant after init)
 * @vma_vm_mm:          copy of vma->vm_mm (invarient after mmap)
 * @buffer:             base of per-proc address space mapped via mmap
 * @buffers:            list of all buffers for this proc
 * @free_buffers:       rb tree of buffers available for allocation
 *                      sorted by size
 * @allocated_buffers:  rb tree of allocated buffers sorted by address
 * @free_async_space:   VA space available for async buffers. This is
 *                      initialized at mmap time to 1/2 the full VA space
 * @pages:              array of binder_lru_page
 * @buffer_size:        size of address space specified via mmap
 * @pid:                pid for associated binder_proc (invariant after init)
 * @pages_high:         high watermark of offset in @pages
 *
 * Bookkeeping structure for per-proc address space management for binder
 * buffers. It is normally initialized during binder_init() and binder_mmap()
 * calls. The address space is used for both user-visible buffers and for
 * struct binder_buffer objects used to track the user buffers
 */
struct binder_alloc {
	struct mutex mutex;
	struct vm_area_struct *vma;
	struct mm_struct *vma_vm_mm;
	void __user *buffer;
	struct list_head buffers;
	struct rb_root free_buffers;
	struct rb_root allocated_buffers;
	size_t free_async_space;
	struct binder_lru_page *pages;
	size_t buffer_size;
	uint32_t buffer_free;
	int pid;
	size_t pages_high;
};

#ifdef CONFIG_ANDROID_BINDER_IPC_SELFTEST
void binder_selftest_alloc(struct binder_alloc *alloc);
#else
static inline void binder_selftest_alloc(struct binder_alloc *alloc) {}
#endif
enum lru_status binder_alloc_free_page(struct list_head *item,
				       struct list_lru_one *lru,
				       spinlock_t *lock, void *cb_arg);
extern struct binder_buffer *binder_alloc_new_buf(struct binder_alloc *alloc,
						  size_t data_size,
						  size_t offsets_size,
						  size_t extra_buffers_size,
						  int is_async);
extern void binder_alloc_init(struct binder_alloc *alloc);
extern int binder_alloc_shrinker_init(void);
extern void binder_alloc_vma_close(struct binder_alloc *alloc);
extern struct binder_buffer *
binder_alloc_prepare_to_free(struct binder_alloc *alloc,
			     uintptr_t user_ptr);
extern void binder_alloc_free_buf(struct binder_alloc *alloc,
				  struct binder_buffer *buffer);
extern int binder_alloc_mmap_handler(struct binder_alloc *alloc,
				     struct vm_area_struct *vma);
extern void binder_alloc_deferred_release(struct binder_alloc *alloc);
extern int binder_alloc_get_allocated_count(struct binder_alloc *alloc);
extern void binder_alloc_print_allocated(struct seq_file *m,
					 struct binder_alloc *alloc);
void binder_alloc_print_pages(struct seq_file *m,
			      struct binder_alloc *alloc);

/**
 * binder_alloc_get_free_async_space() - get free space available for async
 * @alloc:	binder_alloc for this proc
 *
 * Return:	the bytes remaining in the address-space for async transactions
 */
static inline size_t
binder_alloc_get_free_async_space(struct binder_alloc *alloc)
{
	size_t free_async_space;

	mutex_lock(&alloc->mutex);
	free_async_space = alloc->free_async_space;
	mutex_unlock(&alloc->mutex);
	return free_async_space;
}

unsigned long
binder_alloc_copy_user_to_buffer(struct binder_alloc *alloc,
				 struct binder_buffer *buffer,
				 binder_size_t buffer_offset,
				 const void __user *from,
				 size_t bytes);

int binder_alloc_copy_to_buffer(struct binder_alloc *alloc,
				struct binder_buffer *buffer,
				binder_size_t buffer_offset,
				void *src,
				size_t bytes);

int binder_alloc_copy_from_buffer(struct binder_alloc *alloc,
				  void *dest,
				  struct binder_buffer *buffer,
				  binder_size_t buffer_offset,
				  size_t bytes);

#endif /* _LINUX_BINDER_ALLOC_H */
Commit	Line	Data
0c972a05 TK	1	/*
	2	* Copyright (C) 2017 Google, Inc.
	3	*
	4	* This software is licensed under the terms of the GNU General Public
	5	* License version 2, as published by the Free Software Foundation, and
	6	* may be copied, distributed, and modified under those terms.
	7	*
	8	* This program is distributed in the hope that it will be useful,
	9	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	10	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	11	* GNU General Public License for more details.
	12	*
	13	*/
	14
	15	#ifndef _LINUX_BINDER_ALLOC_H
	16	#define _LINUX_BINDER_ALLOC_H
	17
	18	#include <linux/rbtree.h>
	19	#include <linux/list.h>
	20	#include <linux/mm.h>
	21	#include <linux/rtmutex.h>
	22	#include <linux/vmalloc.h>
	23	#include <linux/slab.h>
f2517eb7	24	#include <linux/list_lru.h>
1a7c3d9b	25	#include <uapi/linux/android/binder.h>
0c972a05	26
f2517eb7	27	extern struct list_lru binder_alloc_lru;
0c972a05 TK	28	struct binder_transaction;
	29
	30	/**
	31	* struct binder_buffer - buffer used for binder transactions
	32	* @entry: entry alloc->buffers
	33	* @rb_node: node for allocated_buffers/free_buffers rb trees
7a2670a5 TK	34	* @free: %true if buffer is free
	35	* @allow_user_free: %true if user is allowed to free buffer
	36	* @async_transaction: %true if buffer is in use for an async txn
	37	* @debug_id: unique ID for debugging
	38	* @transaction: pointer to associated struct binder_transaction
	39	* @target_node: struct binder_node associated with this buffer
	40	* @data_size: size of @transaction data
	41	* @offsets_size: size of array of offsets
	42	* @extra_buffers_size: size of space for other objects (like sg lists)
bde4a19f	43	* @user_data: user pointer to base of buffer space
0c972a05 TK	44	*
	45	* Bookkeeping structure for binder transaction buffers
	46	*/
	47	struct binder_buffer {
	48	struct list_head entry; /* free and allocated entries by address */
	49	struct rb_node rb_node; /* free entry by size or allocated entry */
	50	/* by address */
	51	unsigned free:1;
	52	unsigned allow_user_free:1;
	53	unsigned async_transaction:1;
7bada55a	54	unsigned debug_id:29;
0c972a05 TK	55
	56	struct binder_transaction *transaction;
	57
	58	struct binder_node *target_node;
	59	size_t data_size;
	60	size_t offsets_size;
	61	size_t extra_buffers_size;
bde4a19f	62	void __user *user_data;
0c972a05 TK	63	};
0c972a05 TK	64
f2517eb7 SY	65	/**
	66	* struct binder_lru_page - page object used for binder shrinker
	67	* @page_ptr: pointer to physical page in mmap'd space
	68	* @lru: entry in binder_alloc_lru
	69	* @alloc: binder_alloc for a proc
	70	*/
	71	struct binder_lru_page {
	72	struct list_head lru;
	73	struct page *page_ptr;
	74	struct binder_alloc *alloc;
	75	};
	76
0c972a05 TK	77	/**
	78	* struct binder_alloc - per-binder proc state for binder allocator
	79	* @vma: vm_area_struct passed to mmap_handler
	80	* (invarient after mmap)
	81	* @tsk: tid for task that called init for this proc
	82	* (invariant after init)
	83	* @vma_vm_mm: copy of vma->vm_mm (invarient after mmap)
	84	* @buffer: base of per-proc address space mapped via mmap
0c972a05 TK	85	* @buffers: list of all buffers for this proc
	86	* @free_buffers: rb tree of buffers available for allocation
	87	* sorted by size
	88	* @allocated_buffers: rb tree of allocated buffers sorted by address
	89	* @free_async_space: VA space available for async buffers. This is
	90	* initialized at mmap time to 1/2 the full VA space
f2517eb7	91	* @pages: array of binder_lru_page
0c972a05 TK	92	* @buffer_size: size of address space specified via mmap
0c972a05 TK	93	* @pid: pid for associated binder_proc (invariant after init)
8d9a3ab6	94	* @pages_high: high watermark of offset in @pages
0c972a05 TK	95	*
	96	* Bookkeeping structure for per-proc address space management for binder
	97	* buffers. It is normally initialized during binder_init() and binder_mmap()
	98	* calls. The address space is used for both user-visible buffers and for
	99	* struct binder_buffer objects used to track the user buffers
	100	*/
	101	struct binder_alloc {
	102	struct mutex mutex;
0c972a05 TK	103	struct vm_area_struct *vma;
0c972a05 TK	104	struct mm_struct *vma_vm_mm;
bde4a19f	105	void __user *buffer;
0c972a05 TK	106	struct list_head buffers;
	107	struct rb_root free_buffers;
	108	struct rb_root allocated_buffers;
	109	size_t free_async_space;
f2517eb7	110	struct binder_lru_page *pages;
0c972a05 TK	111	size_t buffer_size;
	112	uint32_t buffer_free;
	113	int pid;
8d9a3ab6	114	size_t pages_high;
0c972a05 TK	115	};
0c972a05 TK	116
4175e2b4 SY	117	#ifdef CONFIG_ANDROID_BINDER_IPC_SELFTEST
	118	void binder_selftest_alloc(struct binder_alloc *alloc);
	119	#else
	120	static inline void binder_selftest_alloc(struct binder_alloc *alloc) {}
	121	#endif
f2517eb7 SY	122	enum lru_status binder_alloc_free_page(struct list_head *item,
	123	struct list_lru_one *lru,
	124	spinlock_t lock, void cb_arg);
0c972a05 TK	125	extern struct binder_buffer binder_alloc_new_buf(struct binder_alloc alloc,
	126	size_t data_size,
	127	size_t offsets_size,
	128	size_t extra_buffers_size,
	129	int is_async);
	130	extern void binder_alloc_init(struct binder_alloc *alloc);
533dfb25	131	extern int binder_alloc_shrinker_init(void);
0c972a05 TK	132	extern void binder_alloc_vma_close(struct binder_alloc *alloc);
0c972a05 TK	133	extern struct binder_buffer *
53d311cf TK	134	binder_alloc_prepare_to_free(struct binder_alloc *alloc,
53d311cf TK	135	uintptr_t user_ptr);
0c972a05 TK	136	extern void binder_alloc_free_buf(struct binder_alloc *alloc,
	137	struct binder_buffer *buffer);
	138	extern int binder_alloc_mmap_handler(struct binder_alloc *alloc,
	139	struct vm_area_struct *vma);
	140	extern void binder_alloc_deferred_release(struct binder_alloc *alloc);
	141	extern int binder_alloc_get_allocated_count(struct binder_alloc *alloc);
	142	extern void binder_alloc_print_allocated(struct seq_file *m,
	143	struct binder_alloc *alloc);
8ef4665a SY	144	void binder_alloc_print_pages(struct seq_file *m,
8ef4665a SY	145	struct binder_alloc *alloc);
0c972a05 TK	146
	147	/**
	148	* binder_alloc_get_free_async_space() - get free space available for async
	149	* @alloc: binder_alloc for this proc
	150	*
	151	* Return: the bytes remaining in the address-space for async transactions
	152	*/
	153	static inline size_t
	154	binder_alloc_get_free_async_space(struct binder_alloc *alloc)
	155	{
	156	size_t free_async_space;
	157
	158	mutex_lock(&alloc->mutex);
	159	free_async_space = alloc->free_async_space;
	160	mutex_unlock(&alloc->mutex);
	161	return free_async_space;
	162	}
	163
1a7c3d9b TK	164	unsigned long
	165	binder_alloc_copy_user_to_buffer(struct binder_alloc *alloc,
	166	struct binder_buffer *buffer,
	167	binder_size_t buffer_offset,
	168	const void __user *from,
	169	size_t bytes);
	170
9edfd065 TK	171	int binder_alloc_copy_to_buffer(struct binder_alloc *alloc,
	172	struct binder_buffer *buffer,
	173	binder_size_t buffer_offset,
	174	void *src,
	175	size_t bytes);
	176
	177	int binder_alloc_copy_from_buffer(struct binder_alloc *alloc,
	178	void *dest,
	179	struct binder_buffer *buffer,
	180	binder_size_t buffer_offset,
	181	size_t bytes);
8ced0c62	182
0c972a05 TK	183	#endif /* _LINUX_BINDER_ALLOC_H */
0c972a05 TK	184