Commit | Line | Data |
---|---|---|
ab841160 OW |
1 | /* |
2 | * | |
3 | * Intel Management Engine Interface (Intel MEI) Linux driver | |
733ba91c | 4 | * Copyright (c) 2003-2012, Intel Corporation. |
ab841160 OW |
5 | * |
6 | * This program is free software; you can redistribute it and/or modify it | |
7 | * under the terms and conditions of the GNU General Public License, | |
8 | * version 2, as published by the Free Software Foundation. | |
9 | * | |
10 | * This program is distributed in the hope it will be useful, but WITHOUT | |
11 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or | |
12 | * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for | |
13 | * more details. | |
14 | * | |
15 | */ | |
16 | ||
2f3d2b49 TW |
17 | #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt |
18 | ||
ab841160 OW |
19 | #include <linux/module.h> |
20 | #include <linux/moduleparam.h> | |
21 | #include <linux/kernel.h> | |
22 | #include <linux/device.h> | |
23 | #include <linux/fs.h> | |
24 | #include <linux/errno.h> | |
25 | #include <linux/types.h> | |
26 | #include <linux/fcntl.h> | |
27 | #include <linux/aio.h> | |
28 | #include <linux/pci.h> | |
29 | #include <linux/poll.h> | |
30 | #include <linux/init.h> | |
31 | #include <linux/ioctl.h> | |
32 | #include <linux/cdev.h> | |
ab841160 OW |
33 | #include <linux/sched.h> |
34 | #include <linux/uuid.h> | |
35 | #include <linux/compat.h> | |
36 | #include <linux/jiffies.h> | |
37 | #include <linux/interrupt.h> | |
5b881e3c | 38 | #include <linux/miscdevice.h> |
ab841160 | 39 | |
4f3afe1d | 40 | #include <linux/mei.h> |
47a73801 TW |
41 | |
42 | #include "mei_dev.h" | |
9dc64d6a | 43 | #include "hw-me.h" |
90e0b5f1 | 44 | #include "client.h" |
ab841160 | 45 | |
ab841160 OW |
46 | /** |
47 | * mei_open - the open function | |
48 | * | |
49 | * @inode: pointer to inode structure | |
50 | * @file: pointer to file structure | |
51 | * | |
52 | * returns 0 on success, <0 on error | |
53 | */ | |
54 | static int mei_open(struct inode *inode, struct file *file) | |
55 | { | |
2703d4b2 TW |
56 | struct miscdevice *misc = file->private_data; |
57 | struct pci_dev *pdev; | |
ab841160 | 58 | struct mei_cl *cl; |
ab841160 | 59 | struct mei_device *dev; |
2703d4b2 | 60 | |
6f37aca8 | 61 | int err; |
ab841160 OW |
62 | |
63 | err = -ENODEV; | |
2703d4b2 | 64 | if (!misc->parent) |
ab841160 OW |
65 | goto out; |
66 | ||
2703d4b2 TW |
67 | pdev = container_of(misc->parent, struct pci_dev, dev); |
68 | ||
69 | dev = pci_get_drvdata(pdev); | |
5b881e3c | 70 | if (!dev) |
ab841160 OW |
71 | goto out; |
72 | ||
73 | mutex_lock(&dev->device_lock); | |
74 | err = -ENOMEM; | |
c95efb74 | 75 | cl = mei_cl_allocate(dev); |
ab841160 | 76 | if (!cl) |
303dfbf5 | 77 | goto out_unlock; |
ab841160 OW |
78 | |
79 | err = -ENODEV; | |
b210d750 TW |
80 | if (dev->dev_state != MEI_DEV_ENABLED) { |
81 | dev_dbg(&dev->pdev->dev, "dev_state != MEI_ENABLED dev_state = %s\n", | |
82 | mei_dev_state_str(dev->dev_state)); | |
ab841160 OW |
83 | goto out_unlock; |
84 | } | |
85 | err = -EMFILE; | |
1b812947 TW |
86 | if (dev->open_handle_count >= MEI_MAX_OPEN_HANDLE_COUNT) { |
87 | dev_err(&dev->pdev->dev, "open_handle_count exceded %d", | |
88 | MEI_MAX_OPEN_HANDLE_COUNT); | |
ab841160 | 89 | goto out_unlock; |
1b812947 | 90 | } |
ab841160 | 91 | |
781d0d89 TW |
92 | err = mei_cl_link(cl, MEI_HOST_CLIENT_ID_ANY); |
93 | if (err) | |
ab841160 | 94 | goto out_unlock; |
ab841160 OW |
95 | |
96 | file->private_data = cl; | |
97 | mutex_unlock(&dev->device_lock); | |
98 | ||
5b881e3c | 99 | return nonseekable_open(inode, file); |
ab841160 OW |
100 | |
101 | out_unlock: | |
102 | mutex_unlock(&dev->device_lock); | |
103 | kfree(cl); | |
104 | out: | |
105 | return err; | |
106 | } | |
107 | ||
108 | /** | |
109 | * mei_release - the release function | |
110 | * | |
111 | * @inode: pointer to inode structure | |
112 | * @file: pointer to file structure | |
113 | * | |
114 | * returns 0 on success, <0 on error | |
115 | */ | |
116 | static int mei_release(struct inode *inode, struct file *file) | |
117 | { | |
118 | struct mei_cl *cl = file->private_data; | |
119 | struct mei_cl_cb *cb; | |
120 | struct mei_device *dev; | |
121 | int rets = 0; | |
122 | ||
123 | if (WARN_ON(!cl || !cl->dev)) | |
124 | return -ENODEV; | |
125 | ||
126 | dev = cl->dev; | |
127 | ||
128 | mutex_lock(&dev->device_lock); | |
a562d5c2 TW |
129 | if (cl == &dev->iamthif_cl) { |
130 | rets = mei_amthif_release(dev, file); | |
131 | goto out; | |
132 | } | |
133 | if (cl->state == MEI_FILE_CONNECTED) { | |
134 | cl->state = MEI_FILE_DISCONNECTING; | |
135 | dev_dbg(&dev->pdev->dev, | |
136 | "disconnecting client host client = %d, " | |
137 | "ME client = %d\n", | |
ab841160 OW |
138 | cl->host_client_id, |
139 | cl->me_client_id); | |
90e0b5f1 | 140 | rets = mei_cl_disconnect(cl); |
a562d5c2 TW |
141 | } |
142 | mei_cl_flush_queues(cl); | |
143 | dev_dbg(&dev->pdev->dev, "remove client host client = %d, ME client = %d\n", | |
144 | cl->host_client_id, | |
145 | cl->me_client_id); | |
146 | ||
147 | if (dev->open_handle_count > 0) { | |
148 | clear_bit(cl->host_client_id, dev->host_clients_map); | |
149 | dev->open_handle_count--; | |
150 | } | |
90e0b5f1 | 151 | mei_cl_unlink(cl); |
a562d5c2 | 152 | |
781d0d89 | 153 | |
a562d5c2 TW |
154 | /* free read cb */ |
155 | cb = NULL; | |
156 | if (cl->read_cb) { | |
90e0b5f1 | 157 | cb = mei_cl_find_read_cb(cl); |
a562d5c2 TW |
158 | /* Remove entry from read list */ |
159 | if (cb) | |
160 | list_del(&cb->list); | |
161 | ||
162 | cb = cl->read_cb; | |
163 | cl->read_cb = NULL; | |
164 | } | |
ab841160 | 165 | |
a562d5c2 | 166 | file->private_data = NULL; |
ab841160 | 167 | |
a562d5c2 TW |
168 | if (cb) { |
169 | mei_io_cb_free(cb); | |
ab841160 | 170 | cb = NULL; |
ab841160 | 171 | } |
a562d5c2 TW |
172 | |
173 | kfree(cl); | |
174 | out: | |
ab841160 OW |
175 | mutex_unlock(&dev->device_lock); |
176 | return rets; | |
177 | } | |
178 | ||
179 | ||
180 | /** | |
181 | * mei_read - the read function. | |
182 | * | |
183 | * @file: pointer to file structure | |
184 | * @ubuf: pointer to user buffer | |
185 | * @length: buffer length | |
186 | * @offset: data offset in buffer | |
187 | * | |
188 | * returns >=0 data length on success , <0 on error | |
189 | */ | |
190 | static ssize_t mei_read(struct file *file, char __user *ubuf, | |
441ab50f | 191 | size_t length, loff_t *offset) |
ab841160 OW |
192 | { |
193 | struct mei_cl *cl = file->private_data; | |
194 | struct mei_cl_cb *cb_pos = NULL; | |
195 | struct mei_cl_cb *cb = NULL; | |
196 | struct mei_device *dev; | |
197 | int i; | |
198 | int rets; | |
199 | int err; | |
200 | ||
201 | ||
202 | if (WARN_ON(!cl || !cl->dev)) | |
203 | return -ENODEV; | |
204 | ||
205 | dev = cl->dev; | |
206 | ||
207 | mutex_lock(&dev->device_lock); | |
b210d750 | 208 | if (dev->dev_state != MEI_DEV_ENABLED) { |
ab841160 OW |
209 | rets = -ENODEV; |
210 | goto out; | |
211 | } | |
212 | ||
213 | if ((cl->sm_state & MEI_WD_STATE_INDEPENDENCE_MSG_SENT) == 0) { | |
214 | /* Do not allow to read watchdog client */ | |
07b509b7 | 215 | i = mei_me_cl_by_uuid(dev, &mei_wd_guid); |
ab841160 OW |
216 | if (i >= 0) { |
217 | struct mei_me_client *me_client = &dev->me_clients[i]; | |
ab841160 OW |
218 | if (cl->me_client_id == me_client->client_id) { |
219 | rets = -EBADF; | |
220 | goto out; | |
221 | } | |
222 | } | |
223 | } else { | |
224 | cl->sm_state &= ~MEI_WD_STATE_INDEPENDENCE_MSG_SENT; | |
225 | } | |
226 | ||
227 | if (cl == &dev->iamthif_cl) { | |
19838fb8 | 228 | rets = mei_amthif_read(dev, file, ubuf, length, offset); |
ab841160 OW |
229 | goto out; |
230 | } | |
231 | ||
ebb108ef | 232 | if (cl->read_cb && cl->read_cb->buf_idx > *offset) { |
ab841160 OW |
233 | cb = cl->read_cb; |
234 | goto copy_buffer; | |
ebb108ef TW |
235 | } else if (cl->read_cb && cl->read_cb->buf_idx > 0 && |
236 | cl->read_cb->buf_idx <= *offset) { | |
ab841160 OW |
237 | cb = cl->read_cb; |
238 | rets = 0; | |
239 | goto free; | |
ebb108ef | 240 | } else if ((!cl->read_cb || !cl->read_cb->buf_idx) && *offset > 0) { |
5f9092f3 | 241 | /*Offset needs to be cleaned for contiguous reads*/ |
ab841160 OW |
242 | *offset = 0; |
243 | rets = 0; | |
244 | goto out; | |
245 | } | |
246 | ||
90e0b5f1 | 247 | err = mei_cl_read_start(cl); |
ab841160 OW |
248 | if (err && err != -EBUSY) { |
249 | dev_dbg(&dev->pdev->dev, | |
250 | "mei start read failure with status = %d\n", err); | |
251 | rets = err; | |
252 | goto out; | |
253 | } | |
254 | ||
255 | if (MEI_READ_COMPLETE != cl->reading_state && | |
256 | !waitqueue_active(&cl->rx_wait)) { | |
257 | if (file->f_flags & O_NONBLOCK) { | |
258 | rets = -EAGAIN; | |
259 | goto out; | |
260 | } | |
261 | ||
262 | mutex_unlock(&dev->device_lock); | |
263 | ||
264 | if (wait_event_interruptible(cl->rx_wait, | |
265 | (MEI_READ_COMPLETE == cl->reading_state || | |
266 | MEI_FILE_INITIALIZING == cl->state || | |
267 | MEI_FILE_DISCONNECTED == cl->state || | |
268 | MEI_FILE_DISCONNECTING == cl->state))) { | |
269 | if (signal_pending(current)) | |
270 | return -EINTR; | |
271 | return -ERESTARTSYS; | |
272 | } | |
273 | ||
274 | mutex_lock(&dev->device_lock); | |
275 | if (MEI_FILE_INITIALIZING == cl->state || | |
276 | MEI_FILE_DISCONNECTED == cl->state || | |
277 | MEI_FILE_DISCONNECTING == cl->state) { | |
278 | rets = -EBUSY; | |
279 | goto out; | |
280 | } | |
281 | } | |
282 | ||
283 | cb = cl->read_cb; | |
284 | ||
285 | if (!cb) { | |
286 | rets = -ENODEV; | |
287 | goto out; | |
288 | } | |
289 | if (cl->reading_state != MEI_READ_COMPLETE) { | |
290 | rets = 0; | |
291 | goto out; | |
292 | } | |
293 | /* now copy the data to user space */ | |
294 | copy_buffer: | |
295 | dev_dbg(&dev->pdev->dev, "cb->response_buffer size - %d\n", | |
296 | cb->response_buffer.size); | |
ebb108ef TW |
297 | dev_dbg(&dev->pdev->dev, "cb->buf_idx - %lu\n", cb->buf_idx); |
298 | if (length == 0 || ubuf == NULL || *offset > cb->buf_idx) { | |
ab841160 OW |
299 | rets = -EMSGSIZE; |
300 | goto free; | |
301 | } | |
302 | ||
ebb108ef TW |
303 | /* length is being truncated to PAGE_SIZE, |
304 | * however buf_idx may point beyond that */ | |
305 | length = min_t(size_t, length, cb->buf_idx - *offset); | |
ab841160 | 306 | |
441ab50f | 307 | if (copy_to_user(ubuf, cb->response_buffer.data + *offset, length)) { |
ab841160 OW |
308 | rets = -EFAULT; |
309 | goto free; | |
310 | } | |
311 | ||
312 | rets = length; | |
313 | *offset += length; | |
ebb108ef | 314 | if ((unsigned long)*offset < cb->buf_idx) |
ab841160 OW |
315 | goto out; |
316 | ||
317 | free: | |
90e0b5f1 | 318 | cb_pos = mei_cl_find_read_cb(cl); |
ab841160 OW |
319 | /* Remove entry from read list */ |
320 | if (cb_pos) | |
fb601adb | 321 | list_del(&cb_pos->list); |
601a1efa | 322 | mei_io_cb_free(cb); |
ab841160 OW |
323 | cl->reading_state = MEI_IDLE; |
324 | cl->read_cb = NULL; | |
ab841160 OW |
325 | out: |
326 | dev_dbg(&dev->pdev->dev, "end mei read rets= %d\n", rets); | |
327 | mutex_unlock(&dev->device_lock); | |
328 | return rets; | |
329 | } | |
ab841160 OW |
330 | /** |
331 | * mei_write - the write function. | |
332 | * | |
333 | * @file: pointer to file structure | |
334 | * @ubuf: pointer to user buffer | |
335 | * @length: buffer length | |
336 | * @offset: data offset in buffer | |
337 | * | |
338 | * returns >=0 data length on success , <0 on error | |
339 | */ | |
340 | static ssize_t mei_write(struct file *file, const char __user *ubuf, | |
441ab50f | 341 | size_t length, loff_t *offset) |
ab841160 OW |
342 | { |
343 | struct mei_cl *cl = file->private_data; | |
344 | struct mei_cl_cb *write_cb = NULL; | |
345 | struct mei_msg_hdr mei_hdr; | |
346 | struct mei_device *dev; | |
347 | unsigned long timeout = 0; | |
348 | int rets; | |
349 | int i; | |
350 | ||
351 | if (WARN_ON(!cl || !cl->dev)) | |
352 | return -ENODEV; | |
353 | ||
354 | dev = cl->dev; | |
355 | ||
356 | mutex_lock(&dev->device_lock); | |
357 | ||
b210d750 | 358 | if (dev->dev_state != MEI_DEV_ENABLED) { |
75f0ee15 | 359 | rets = -ENODEV; |
b0d0cf77 | 360 | goto err; |
ab841160 OW |
361 | } |
362 | ||
75f0ee15 TW |
363 | i = mei_me_cl_by_id(dev, cl->me_client_id); |
364 | if (i < 0) { | |
365 | rets = -ENODEV; | |
b0d0cf77 | 366 | goto err; |
75f0ee15 TW |
367 | } |
368 | if (length > dev->me_clients[i].props.max_msg_length || length <= 0) { | |
369 | rets = -EMSGSIZE; | |
b0d0cf77 | 370 | goto err; |
75f0ee15 TW |
371 | } |
372 | ||
373 | if (cl->state != MEI_FILE_CONNECTED) { | |
374 | rets = -ENODEV; | |
375 | dev_err(&dev->pdev->dev, "host client = %d, is not connected to ME client = %d", | |
376 | cl->host_client_id, cl->me_client_id); | |
b0d0cf77 | 377 | goto err; |
75f0ee15 | 378 | } |
ab841160 | 379 | if (cl == &dev->iamthif_cl) { |
19838fb8 | 380 | write_cb = mei_amthif_find_read_list_entry(dev, file); |
ab841160 OW |
381 | |
382 | if (write_cb) { | |
383 | timeout = write_cb->read_time + | |
3870c320 | 384 | mei_secs_to_jiffies(MEI_IAMTHIF_READ_TIMER); |
ab841160 OW |
385 | |
386 | if (time_after(jiffies, timeout) || | |
75f0ee15 TW |
387 | cl->reading_state == MEI_READ_COMPLETE) { |
388 | *offset = 0; | |
fb601adb | 389 | list_del(&write_cb->list); |
601a1efa | 390 | mei_io_cb_free(write_cb); |
75f0ee15 | 391 | write_cb = NULL; |
ab841160 OW |
392 | } |
393 | } | |
394 | } | |
395 | ||
396 | /* free entry used in read */ | |
397 | if (cl->reading_state == MEI_READ_COMPLETE) { | |
398 | *offset = 0; | |
90e0b5f1 | 399 | write_cb = mei_cl_find_read_cb(cl); |
ab841160 | 400 | if (write_cb) { |
fb601adb | 401 | list_del(&write_cb->list); |
601a1efa | 402 | mei_io_cb_free(write_cb); |
ab841160 OW |
403 | write_cb = NULL; |
404 | cl->reading_state = MEI_IDLE; | |
405 | cl->read_cb = NULL; | |
ab841160 | 406 | } |
d91aaed3 | 407 | } else if (cl->reading_state == MEI_IDLE) |
ab841160 OW |
408 | *offset = 0; |
409 | ||
410 | ||
33d28c92 | 411 | write_cb = mei_io_cb_init(cl, file); |
ab841160 | 412 | if (!write_cb) { |
33d28c92 TW |
413 | dev_err(&dev->pdev->dev, "write cb allocation failed\n"); |
414 | rets = -ENOMEM; | |
b0d0cf77 | 415 | goto err; |
ab841160 | 416 | } |
33d28c92 TW |
417 | rets = mei_io_cb_alloc_req_buf(write_cb, length); |
418 | if (rets) | |
b0d0cf77 | 419 | goto err; |
ab841160 | 420 | |
33d28c92 | 421 | dev_dbg(&dev->pdev->dev, "cb request size = %zd\n", length); |
ab841160 | 422 | |
75f0ee15 TW |
423 | rets = copy_from_user(write_cb->request_buffer.data, ubuf, length); |
424 | if (rets) | |
b0d0cf77 | 425 | goto err; |
ab841160 OW |
426 | |
427 | cl->sm_state = 0; | |
428 | if (length == 4 && | |
429 | ((memcmp(mei_wd_state_independence_msg[0], | |
430 | write_cb->request_buffer.data, 4) == 0) || | |
431 | (memcmp(mei_wd_state_independence_msg[1], | |
432 | write_cb->request_buffer.data, 4) == 0) || | |
433 | (memcmp(mei_wd_state_independence_msg[2], | |
434 | write_cb->request_buffer.data, 4) == 0))) | |
435 | cl->sm_state |= MEI_WD_STATE_INDEPENDENCE_MSG_SENT; | |
436 | ||
ab841160 | 437 | if (cl == &dev->iamthif_cl) { |
ab5c4a56 | 438 | rets = mei_amthif_write(dev, write_cb); |
ab841160 | 439 | |
ab5c4a56 TW |
440 | if (rets) { |
441 | dev_err(&dev->pdev->dev, | |
1a1aca42 | 442 | "amthif write failed with status = %d\n", rets); |
ab5c4a56 | 443 | goto err; |
ab841160 OW |
444 | } |
445 | mutex_unlock(&dev->device_lock); | |
75f0ee15 | 446 | return length; |
ab841160 OW |
447 | } |
448 | ||
4b8960b4 | 449 | write_cb->fop_type = MEI_FOP_WRITE; |
ab841160 OW |
450 | |
451 | dev_dbg(&dev->pdev->dev, "host client = %d, ME client = %d\n", | |
452 | cl->host_client_id, cl->me_client_id); | |
90e0b5f1 | 453 | rets = mei_cl_flow_ctrl_creds(cl); |
ab841160 | 454 | if (rets < 0) |
b0d0cf77 | 455 | goto err; |
ab841160 | 456 | |
330dd7da | 457 | if (rets == 0 || !dev->hbuf_is_ready) { |
b0d0cf77 TW |
458 | write_cb->buf_idx = 0; |
459 | mei_hdr.msg_complete = 0; | |
ab841160 | 460 | cl->writing_state = MEI_WRITING; |
b0d0cf77 TW |
461 | goto out; |
462 | } | |
ab841160 | 463 | |
330dd7da | 464 | dev->hbuf_is_ready = false; |
827eef51 TW |
465 | if (length > mei_hbuf_max_len(dev)) { |
466 | mei_hdr.length = mei_hbuf_max_len(dev); | |
b0d0cf77 | 467 | mei_hdr.msg_complete = 0; |
ab841160 | 468 | } else { |
b0d0cf77 TW |
469 | mei_hdr.length = length; |
470 | mei_hdr.msg_complete = 1; | |
471 | } | |
472 | mei_hdr.host_addr = cl->host_client_id; | |
473 | mei_hdr.me_addr = cl->me_client_id; | |
474 | mei_hdr.reserved = 0; | |
15d4acc5 TW |
475 | |
476 | dev_dbg(&dev->pdev->dev, "write " MEI_HDR_FMT "\n", | |
477 | MEI_HDR_PRM(&mei_hdr)); | |
438763f3 | 478 | if (mei_write_message(dev, &mei_hdr, write_cb->request_buffer.data)) { |
b0d0cf77 TW |
479 | rets = -ENODEV; |
480 | goto err; | |
481 | } | |
482 | cl->writing_state = MEI_WRITING; | |
483 | write_cb->buf_idx = mei_hdr.length; | |
ab841160 | 484 | |
b0d0cf77 TW |
485 | out: |
486 | if (mei_hdr.msg_complete) { | |
90e0b5f1 | 487 | if (mei_cl_flow_ctrl_reduce(cl)) { |
b0d0cf77 TW |
488 | rets = -ENODEV; |
489 | goto err; | |
490 | } | |
491 | list_add_tail(&write_cb->list, &dev->write_waiting_list.list); | |
492 | } else { | |
fb601adb | 493 | list_add_tail(&write_cb->list, &dev->write_list.list); |
ab841160 | 494 | } |
b0d0cf77 | 495 | |
ab841160 OW |
496 | mutex_unlock(&dev->device_lock); |
497 | return length; | |
498 | ||
b0d0cf77 | 499 | err: |
ab841160 | 500 | mutex_unlock(&dev->device_lock); |
601a1efa | 501 | mei_io_cb_free(write_cb); |
ab841160 OW |
502 | return rets; |
503 | } | |
504 | ||
9f81abda TW |
505 | /** |
506 | * mei_ioctl_connect_client - the connect to fw client IOCTL function | |
507 | * | |
508 | * @dev: the device structure | |
509 | * @data: IOCTL connect data, input and output parameters | |
510 | * @file: private data of the file object | |
511 | * | |
512 | * Locking: called under "dev->device_lock" lock | |
513 | * | |
514 | * returns 0 on success, <0 on failure. | |
515 | */ | |
516 | static int mei_ioctl_connect_client(struct file *file, | |
517 | struct mei_connect_client_data *data) | |
518 | { | |
519 | struct mei_device *dev; | |
520 | struct mei_client *client; | |
521 | struct mei_cl *cl; | |
522 | int i; | |
523 | int rets; | |
524 | ||
525 | cl = file->private_data; | |
526 | if (WARN_ON(!cl || !cl->dev)) | |
527 | return -ENODEV; | |
528 | ||
529 | dev = cl->dev; | |
530 | ||
531 | if (dev->dev_state != MEI_DEV_ENABLED) { | |
532 | rets = -ENODEV; | |
533 | goto end; | |
534 | } | |
535 | ||
536 | if (cl->state != MEI_FILE_INITIALIZING && | |
537 | cl->state != MEI_FILE_DISCONNECTED) { | |
538 | rets = -EBUSY; | |
539 | goto end; | |
540 | } | |
541 | ||
542 | /* find ME client we're trying to connect to */ | |
543 | i = mei_me_cl_by_uuid(dev, &data->in_client_uuid); | |
544 | if (i >= 0 && !dev->me_clients[i].props.fixed_address) { | |
545 | cl->me_client_id = dev->me_clients[i].client_id; | |
546 | cl->state = MEI_FILE_CONNECTING; | |
547 | } | |
548 | ||
549 | dev_dbg(&dev->pdev->dev, "Connect to FW Client ID = %d\n", | |
550 | cl->me_client_id); | |
551 | dev_dbg(&dev->pdev->dev, "FW Client - Protocol Version = %d\n", | |
552 | dev->me_clients[i].props.protocol_version); | |
553 | dev_dbg(&dev->pdev->dev, "FW Client - Max Msg Len = %d\n", | |
554 | dev->me_clients[i].props.max_msg_length); | |
555 | ||
1a1aca42 | 556 | /* if we're connecting to amthif client then we will use the |
9f81abda TW |
557 | * existing connection |
558 | */ | |
1a1aca42 | 559 | if (uuid_le_cmp(data->in_client_uuid, mei_amthif_guid) == 0) { |
9f81abda TW |
560 | dev_dbg(&dev->pdev->dev, "FW Client is amthi\n"); |
561 | if (dev->iamthif_cl.state != MEI_FILE_CONNECTED) { | |
562 | rets = -ENODEV; | |
563 | goto end; | |
564 | } | |
565 | clear_bit(cl->host_client_id, dev->host_clients_map); | |
566 | mei_cl_unlink(cl); | |
567 | ||
568 | kfree(cl); | |
569 | cl = NULL; | |
570 | file->private_data = &dev->iamthif_cl; | |
571 | ||
572 | client = &data->out_client_properties; | |
573 | client->max_msg_length = | |
574 | dev->me_clients[i].props.max_msg_length; | |
575 | client->protocol_version = | |
576 | dev->me_clients[i].props.protocol_version; | |
577 | rets = dev->iamthif_cl.status; | |
578 | ||
579 | goto end; | |
580 | } | |
581 | ||
582 | if (cl->state != MEI_FILE_CONNECTING) { | |
583 | rets = -ENODEV; | |
584 | goto end; | |
585 | } | |
586 | ||
587 | ||
588 | /* prepare the output buffer */ | |
589 | client = &data->out_client_properties; | |
590 | client->max_msg_length = dev->me_clients[i].props.max_msg_length; | |
591 | client->protocol_version = dev->me_clients[i].props.protocol_version; | |
592 | dev_dbg(&dev->pdev->dev, "Can connect?\n"); | |
593 | ||
594 | ||
595 | rets = mei_cl_connect(cl, file); | |
596 | ||
597 | end: | |
598 | dev_dbg(&dev->pdev->dev, "free connect cb memory."); | |
599 | return rets; | |
600 | } | |
601 | ||
ab841160 OW |
602 | |
603 | /** | |
604 | * mei_ioctl - the IOCTL function | |
605 | * | |
606 | * @file: pointer to file structure | |
607 | * @cmd: ioctl command | |
608 | * @data: pointer to mei message structure | |
609 | * | |
610 | * returns 0 on success , <0 on error | |
611 | */ | |
612 | static long mei_ioctl(struct file *file, unsigned int cmd, unsigned long data) | |
613 | { | |
614 | struct mei_device *dev; | |
615 | struct mei_cl *cl = file->private_data; | |
616 | struct mei_connect_client_data *connect_data = NULL; | |
617 | int rets; | |
618 | ||
619 | if (cmd != IOCTL_MEI_CONNECT_CLIENT) | |
620 | return -EINVAL; | |
621 | ||
622 | if (WARN_ON(!cl || !cl->dev)) | |
623 | return -ENODEV; | |
624 | ||
625 | dev = cl->dev; | |
626 | ||
627 | dev_dbg(&dev->pdev->dev, "IOCTL cmd = 0x%x", cmd); | |
628 | ||
629 | mutex_lock(&dev->device_lock); | |
b210d750 | 630 | if (dev->dev_state != MEI_DEV_ENABLED) { |
ab841160 OW |
631 | rets = -ENODEV; |
632 | goto out; | |
633 | } | |
634 | ||
635 | dev_dbg(&dev->pdev->dev, ": IOCTL_MEI_CONNECT_CLIENT.\n"); | |
636 | ||
637 | connect_data = kzalloc(sizeof(struct mei_connect_client_data), | |
638 | GFP_KERNEL); | |
639 | if (!connect_data) { | |
640 | rets = -ENOMEM; | |
641 | goto out; | |
642 | } | |
643 | dev_dbg(&dev->pdev->dev, "copy connect data from user\n"); | |
644 | if (copy_from_user(connect_data, (char __user *)data, | |
645 | sizeof(struct mei_connect_client_data))) { | |
646 | dev_dbg(&dev->pdev->dev, "failed to copy data from userland\n"); | |
647 | rets = -EFAULT; | |
648 | goto out; | |
649 | } | |
9f81abda | 650 | |
ab841160 OW |
651 | rets = mei_ioctl_connect_client(file, connect_data); |
652 | ||
653 | /* if all is ok, copying the data back to user. */ | |
654 | if (rets) | |
655 | goto out; | |
656 | ||
657 | dev_dbg(&dev->pdev->dev, "copy connect data to user\n"); | |
658 | if (copy_to_user((char __user *)data, connect_data, | |
659 | sizeof(struct mei_connect_client_data))) { | |
660 | dev_dbg(&dev->pdev->dev, "failed to copy data to userland\n"); | |
661 | rets = -EFAULT; | |
662 | goto out; | |
663 | } | |
664 | ||
665 | out: | |
666 | kfree(connect_data); | |
667 | mutex_unlock(&dev->device_lock); | |
668 | return rets; | |
669 | } | |
670 | ||
671 | /** | |
672 | * mei_compat_ioctl - the compat IOCTL function | |
673 | * | |
674 | * @file: pointer to file structure | |
675 | * @cmd: ioctl command | |
676 | * @data: pointer to mei message structure | |
677 | * | |
678 | * returns 0 on success , <0 on error | |
679 | */ | |
680 | #ifdef CONFIG_COMPAT | |
681 | static long mei_compat_ioctl(struct file *file, | |
441ab50f | 682 | unsigned int cmd, unsigned long data) |
ab841160 OW |
683 | { |
684 | return mei_ioctl(file, cmd, (unsigned long)compat_ptr(data)); | |
685 | } | |
686 | #endif | |
687 | ||
688 | ||
689 | /** | |
690 | * mei_poll - the poll function | |
691 | * | |
692 | * @file: pointer to file structure | |
693 | * @wait: pointer to poll_table structure | |
694 | * | |
695 | * returns poll mask | |
696 | */ | |
697 | static unsigned int mei_poll(struct file *file, poll_table *wait) | |
698 | { | |
699 | struct mei_cl *cl = file->private_data; | |
700 | struct mei_device *dev; | |
701 | unsigned int mask = 0; | |
702 | ||
703 | if (WARN_ON(!cl || !cl->dev)) | |
704 | return mask; | |
705 | ||
706 | dev = cl->dev; | |
707 | ||
708 | mutex_lock(&dev->device_lock); | |
709 | ||
b210d750 | 710 | if (dev->dev_state != MEI_DEV_ENABLED) |
ab841160 OW |
711 | goto out; |
712 | ||
713 | ||
714 | if (cl == &dev->iamthif_cl) { | |
744f0f2f | 715 | mask = mei_amthif_poll(dev, file, wait); |
ab841160 OW |
716 | goto out; |
717 | } | |
718 | ||
719 | mutex_unlock(&dev->device_lock); | |
720 | poll_wait(file, &cl->tx_wait, wait); | |
721 | mutex_lock(&dev->device_lock); | |
722 | if (MEI_WRITE_COMPLETE == cl->writing_state) | |
723 | mask |= (POLLIN | POLLRDNORM); | |
724 | ||
725 | out: | |
726 | mutex_unlock(&dev->device_lock); | |
727 | return mask; | |
728 | } | |
729 | ||
5b881e3c OW |
730 | /* |
731 | * file operations structure will be used for mei char device. | |
732 | */ | |
733 | static const struct file_operations mei_fops = { | |
734 | .owner = THIS_MODULE, | |
735 | .read = mei_read, | |
736 | .unlocked_ioctl = mei_ioctl, | |
737 | #ifdef CONFIG_COMPAT | |
738 | .compat_ioctl = mei_compat_ioctl, | |
739 | #endif | |
740 | .open = mei_open, | |
741 | .release = mei_release, | |
742 | .write = mei_write, | |
743 | .poll = mei_poll, | |
744 | .llseek = no_llseek | |
745 | }; | |
746 | ||
5b881e3c OW |
747 | /* |
748 | * Misc Device Struct | |
749 | */ | |
750 | static struct miscdevice mei_misc_device = { | |
c38ea24e | 751 | .name = "mei", |
5b881e3c OW |
752 | .fops = &mei_fops, |
753 | .minor = MISC_DYNAMIC_MINOR, | |
754 | }; | |
755 | ||
2703d4b2 | 756 | int mei_register(struct device *dev) |
9a123f19 | 757 | { |
2703d4b2 TW |
758 | mei_misc_device.parent = dev; |
759 | return misc_register(&mei_misc_device); | |
5b881e3c OW |
760 | } |
761 | ||
2703d4b2 | 762 | void mei_deregister(void) |
5b881e3c | 763 | { |
a44cab4a | 764 | misc_deregister(&mei_misc_device); |
2703d4b2 | 765 | mei_misc_device.parent = NULL; |
5b881e3c | 766 | } |
ab841160 | 767 | |
827eef51 | 768 | MODULE_LICENSE("GPL v2"); |
ab841160 | 769 |