staging: alarm-dev: information leak in alarm_ioctl()
[deliverable/linux.git] / drivers / staging / android / alarm-dev.c
CommitLineData
841cb11c
AH
1/* drivers/rtc/alarm-dev.c
2 *
3 * Copyright (C) 2007-2009 Google, Inc.
4 *
5 * This software is licensed under the terms of the GNU General Public
6 * License version 2, as published by the Free Software Foundation, and
7 * may be copied, distributed, and modified under those terms.
8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 */
15
d47908b2 16#include <linux/time.h>
bf647ea7 17#include <linux/module.h>
841cb11c
AH
18#include <linux/device.h>
19#include <linux/miscdevice.h>
20#include <linux/fs.h>
21#include <linux/platform_device.h>
22#include <linux/sched.h>
23#include <linux/spinlock.h>
841cb11c 24#include <linux/uaccess.h>
b8793260 25#include <linux/alarmtimer.h>
841cb11c
AH
26#include "android_alarm.h"
27
28#define ANDROID_ALARM_PRINT_INFO (1U << 0)
29#define ANDROID_ALARM_PRINT_IO (1U << 1)
30#define ANDROID_ALARM_PRINT_INT (1U << 2)
31
32static int debug_mask = ANDROID_ALARM_PRINT_INFO;
33module_param_named(debug_mask, debug_mask, int, S_IRUGO | S_IWUSR | S_IWGRP);
34
8a7245ea
JP
35#define alarm_dbg(debug_level_mask, fmt, ...) \
36do { \
37 if (debug_mask & ANDROID_ALARM_PRINT_##debug_level_mask) \
38 pr_info(fmt, ##__VA_ARGS__); \
39} while (0)
841cb11c
AH
40
41#define ANDROID_ALARM_WAKEUP_MASK ( \
42 ANDROID_ALARM_RTC_WAKEUP_MASK | \
43 ANDROID_ALARM_ELAPSED_REALTIME_WAKEUP_MASK)
44
841cb11c
AH
45static int alarm_opened;
46static DEFINE_SPINLOCK(alarm_slock);
a180c0d6 47static struct wakeup_source alarm_wake_lock;
841cb11c
AH
48static DECLARE_WAIT_QUEUE_HEAD(alarm_wait_queue);
49static uint32_t alarm_pending;
50static uint32_t alarm_enabled;
51static uint32_t wait_pending;
52
b8793260
JS
53struct devalarm {
54 union {
55 struct hrtimer hrt;
56 struct alarm alrm;
57 } u;
58 enum android_alarm_type type;
59};
60
61static struct devalarm alarms[ANDROID_ALARM_TYPE_COUNT];
62
63
64static int is_wakeup(enum android_alarm_type type)
65{
147cd165
DK
66 return (type == ANDROID_ALARM_RTC_WAKEUP ||
67 type == ANDROID_ALARM_ELAPSED_REALTIME_WAKEUP);
b8793260
JS
68}
69
70
71static void devalarm_start(struct devalarm *alrm, ktime_t exp)
72{
73 if (is_wakeup(alrm->type))
74 alarm_start(&alrm->u.alrm, exp);
75 else
76 hrtimer_start(&alrm->u.hrt, exp, HRTIMER_MODE_ABS);
77}
78
79
80static int devalarm_try_to_cancel(struct devalarm *alrm)
81{
b8793260 82 if (is_wakeup(alrm->type))
147cd165
DK
83 return alarm_try_to_cancel(&alrm->u.alrm);
84 return hrtimer_try_to_cancel(&alrm->u.hrt);
b8793260
JS
85}
86
87static void devalarm_cancel(struct devalarm *alrm)
88{
89 if (is_wakeup(alrm->type))
90 alarm_cancel(&alrm->u.alrm);
91 else
92 hrtimer_cancel(&alrm->u.hrt);
93}
94
cec8bb73
JS
95static void alarm_clear(enum android_alarm_type alarm_type)
96{
97 uint32_t alarm_type_mask = 1U << alarm_type;
98 unsigned long flags;
841cb11c 99
cec8bb73
JS
100 spin_lock_irqsave(&alarm_slock, flags);
101 alarm_dbg(IO, "alarm %d clear\n", alarm_type);
102 devalarm_try_to_cancel(&alarms[alarm_type]);
103 if (alarm_pending) {
104 alarm_pending &= ~alarm_type_mask;
105 if (!alarm_pending && !wait_pending)
106 __pm_relax(&alarm_wake_lock);
107 }
108 alarm_enabled &= ~alarm_type_mask;
109 spin_unlock_irqrestore(&alarm_slock, flags);
110
111}
112
113static void alarm_set(enum android_alarm_type alarm_type,
114 struct timespec *ts)
841cb11c 115{
cec8bb73 116 uint32_t alarm_type_mask = 1U << alarm_type;
841cb11c 117 unsigned long flags;
cec8bb73
JS
118
119 spin_lock_irqsave(&alarm_slock, flags);
120 alarm_dbg(IO, "alarm %d set %ld.%09ld\n",
121 alarm_type, ts->tv_sec, ts->tv_nsec);
122 alarm_enabled |= alarm_type_mask;
123 devalarm_start(&alarms[alarm_type], timespec_to_ktime(*ts));
124 spin_unlock_irqrestore(&alarm_slock, flags);
125}
126
127static int alarm_wait(void)
128{
129 unsigned long flags;
130 int rv = 0;
131
132 spin_lock_irqsave(&alarm_slock, flags);
133 alarm_dbg(IO, "alarm wait\n");
134 if (!alarm_pending && wait_pending) {
135 __pm_relax(&alarm_wake_lock);
136 wait_pending = 0;
137 }
138 spin_unlock_irqrestore(&alarm_slock, flags);
139
140 rv = wait_event_interruptible(alarm_wait_queue, alarm_pending);
141 if (rv)
142 return rv;
143
144 spin_lock_irqsave(&alarm_slock, flags);
145 rv = alarm_pending;
146 wait_pending = 1;
147 alarm_pending = 0;
148 spin_unlock_irqrestore(&alarm_slock, flags);
149
150 return rv;
151}
152
153static int alarm_set_rtc(struct timespec *ts)
154{
b8793260
JS
155 struct rtc_time new_rtc_tm;
156 struct rtc_device *rtc_dev;
cec8bb73
JS
157 unsigned long flags;
158 int rv = 0;
159
160 rtc_time_to_tm(ts->tv_sec, &new_rtc_tm);
161 rtc_dev = alarmtimer_get_rtcdev();
162 rv = do_settimeofday(ts);
163 if (rv < 0)
164 return rv;
165 if (rtc_dev)
166 rv = rtc_set_time(rtc_dev, &new_rtc_tm);
167
168 spin_lock_irqsave(&alarm_slock, flags);
169 alarm_pending |= ANDROID_ALARM_TIME_CHANGE_MASK;
170 wake_up(&alarm_wait_queue);
171 spin_unlock_irqrestore(&alarm_slock, flags);
172
173 return rv;
174}
175
176static int alarm_get_time(enum android_alarm_type alarm_type,
177 struct timespec *ts)
178{
179 int rv = 0;
180
181 switch (alarm_type) {
182 case ANDROID_ALARM_RTC_WAKEUP:
183 case ANDROID_ALARM_RTC:
184 getnstimeofday(ts);
185 break;
186 case ANDROID_ALARM_ELAPSED_REALTIME_WAKEUP:
187 case ANDROID_ALARM_ELAPSED_REALTIME:
188 get_monotonic_boottime(ts);
189 break;
190 case ANDROID_ALARM_SYSTEMTIME:
191 ktime_get_ts(ts);
192 break;
193 default:
194 rv = -EINVAL;
195 }
196 return rv;
197}
198
199static long alarm_do_ioctl(struct file *file, unsigned int cmd,
200 struct timespec *ts)
201{
202 int rv = 0;
203 unsigned long flags;
841cb11c 204 enum android_alarm_type alarm_type = ANDROID_ALARM_IOCTL_TO_TYPE(cmd);
841cb11c
AH
205
206 if (alarm_type >= ANDROID_ALARM_TYPE_COUNT)
207 return -EINVAL;
208
209 if (ANDROID_ALARM_BASE_CMD(cmd) != ANDROID_ALARM_GET_TIME(0)) {
210 if ((file->f_flags & O_ACCMODE) == O_RDONLY)
211 return -EPERM;
212 if (file->private_data == NULL &&
213 cmd != ANDROID_ALARM_SET_RTC) {
214 spin_lock_irqsave(&alarm_slock, flags);
215 if (alarm_opened) {
216 spin_unlock_irqrestore(&alarm_slock, flags);
217 return -EBUSY;
218 }
219 alarm_opened = 1;
220 file->private_data = (void *)1;
221 spin_unlock_irqrestore(&alarm_slock, flags);
222 }
223 }
224
225 switch (ANDROID_ALARM_BASE_CMD(cmd)) {
226 case ANDROID_ALARM_CLEAR(0):
cec8bb73 227 alarm_clear(alarm_type);
841cb11c 228 break;
841cb11c 229 case ANDROID_ALARM_SET(0):
cec8bb73
JS
230 alarm_set(alarm_type, ts);
231 break;
232 case ANDROID_ALARM_SET_AND_WAIT(0):
233 alarm_set(alarm_type, ts);
841cb11c
AH
234 /* fall though */
235 case ANDROID_ALARM_WAIT:
cec8bb73 236 rv = alarm_wait();
841cb11c
AH
237 break;
238 case ANDROID_ALARM_SET_RTC:
cec8bb73 239 rv = alarm_set_rtc(ts);
841cb11c
AH
240 break;
241 case ANDROID_ALARM_GET_TIME(0):
cec8bb73 242 rv = alarm_get_time(alarm_type, ts);
841cb11c
AH
243 break;
244
245 default:
246 rv = -EINVAL;
841cb11c 247 }
cec8bb73
JS
248 return rv;
249}
250
251static long alarm_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
252{
253
254 struct timespec ts;
255 int rv;
256
257 switch (ANDROID_ALARM_BASE_CMD(cmd)) {
258 case ANDROID_ALARM_SET_AND_WAIT(0):
259 case ANDROID_ALARM_SET(0):
260 case ANDROID_ALARM_SET_RTC:
261 if (copy_from_user(&ts, (void __user *)arg, sizeof(ts)))
262 return -EFAULT;
263 break;
264 }
265
266 rv = alarm_do_ioctl(file, cmd, &ts);
e919b86c
DC
267 if (rv)
268 return rv;
cec8bb73
JS
269
270 switch (ANDROID_ALARM_BASE_CMD(cmd)) {
271 case ANDROID_ALARM_GET_TIME(0):
272 if (copy_to_user((void __user *)arg, &ts, sizeof(ts)))
273 return -EFAULT;
274 break;
275 }
276
e919b86c 277 return 0;
841cb11c 278}
532572b9
JS
279#ifdef CONFIG_COMPAT
280static long alarm_compat_ioctl(struct file *file, unsigned int cmd,
281 unsigned long arg)
282{
283
284 struct timespec ts;
285 int rv;
286
287 switch (ANDROID_ALARM_BASE_CMD(cmd)) {
288 case ANDROID_ALARM_SET_AND_WAIT_COMPAT(0):
289 case ANDROID_ALARM_SET_COMPAT(0):
290 case ANDROID_ALARM_SET_RTC_COMPAT:
291 if (compat_get_timespec(&ts, (void __user *)arg))
292 return -EFAULT;
293 /* fall through */
294 case ANDROID_ALARM_GET_TIME_COMPAT(0):
295 cmd = ANDROID_ALARM_COMPAT_TO_NORM(cmd);
296 break;
297 }
298
299 rv = alarm_do_ioctl(file, cmd, &ts);
300
301 switch (ANDROID_ALARM_BASE_CMD(cmd)) {
302 case ANDROID_ALARM_GET_TIME(0): /* NOTE: we modified cmd above */
303 if (compat_put_timespec(&ts, (void __user *)arg))
304 return -EFAULT;
305 break;
306 }
307
308 return rv;
309}
310#endif
841cb11c
AH
311
312static int alarm_open(struct inode *inode, struct file *file)
313{
314 file->private_data = NULL;
315 return 0;
316}
317
318static int alarm_release(struct inode *inode, struct file *file)
319{
320 int i;
321 unsigned long flags;
322
323 spin_lock_irqsave(&alarm_slock, flags);
592314e9 324 if (file->private_data) {
841cb11c
AH
325 for (i = 0; i < ANDROID_ALARM_TYPE_COUNT; i++) {
326 uint32_t alarm_type_mask = 1U << i;
327 if (alarm_enabled & alarm_type_mask) {
8a7245ea
JP
328 alarm_dbg(INFO,
329 "%s: clear alarm, pending %d\n",
330 __func__,
331 !!(alarm_pending & alarm_type_mask));
841cb11c
AH
332 alarm_enabled &= ~alarm_type_mask;
333 }
334 spin_unlock_irqrestore(&alarm_slock, flags);
b8793260 335 devalarm_cancel(&alarms[i]);
841cb11c
AH
336 spin_lock_irqsave(&alarm_slock, flags);
337 }
338 if (alarm_pending | wait_pending) {
339 if (alarm_pending)
8a7245ea
JP
340 alarm_dbg(INFO, "%s: clear pending alarms %x\n",
341 __func__, alarm_pending);
a180c0d6 342 __pm_relax(&alarm_wake_lock);
841cb11c
AH
343 wait_pending = 0;
344 alarm_pending = 0;
345 }
346 alarm_opened = 0;
347 }
348 spin_unlock_irqrestore(&alarm_slock, flags);
349 return 0;
350}
351
b8793260 352static void devalarm_triggered(struct devalarm *alarm)
841cb11c
AH
353{
354 unsigned long flags;
355 uint32_t alarm_type_mask = 1U << alarm->type;
356
8a7245ea 357 alarm_dbg(INT, "%s: type %d\n", __func__, alarm->type);
841cb11c
AH
358 spin_lock_irqsave(&alarm_slock, flags);
359 if (alarm_enabled & alarm_type_mask) {
a180c0d6 360 __pm_wakeup_event(&alarm_wake_lock, 5000); /* 5secs */
841cb11c
AH
361 alarm_enabled &= ~alarm_type_mask;
362 alarm_pending |= alarm_type_mask;
363 wake_up(&alarm_wait_queue);
364 }
365 spin_unlock_irqrestore(&alarm_slock, flags);
366}
367
b8793260
JS
368
369static enum hrtimer_restart devalarm_hrthandler(struct hrtimer *hrt)
370{
371 struct devalarm *devalrm = container_of(hrt, struct devalarm, u.hrt);
372
373 devalarm_triggered(devalrm);
374 return HRTIMER_NORESTART;
375}
376
377static enum alarmtimer_restart devalarm_alarmhandler(struct alarm *alrm,
378 ktime_t now)
379{
380 struct devalarm *devalrm = container_of(alrm, struct devalarm, u.alrm);
381
382 devalarm_triggered(devalrm);
383 return ALARMTIMER_NORESTART;
384}
385
386
841cb11c
AH
387static const struct file_operations alarm_fops = {
388 .owner = THIS_MODULE,
389 .unlocked_ioctl = alarm_ioctl,
390 .open = alarm_open,
391 .release = alarm_release,
532572b9
JS
392#ifdef CONFIG_COMPAT
393 .compat_ioctl = alarm_compat_ioctl,
394#endif
841cb11c
AH
395};
396
397static struct miscdevice alarm_device = {
398 .minor = MISC_DYNAMIC_MINOR,
399 .name = "alarm",
400 .fops = &alarm_fops,
401};
402
403static int __init alarm_dev_init(void)
404{
405 int err;
406 int i;
407
408 err = misc_register(&alarm_device);
409 if (err)
410 return err;
411
b8793260
JS
412 alarm_init(&alarms[ANDROID_ALARM_RTC_WAKEUP].u.alrm,
413 ALARM_REALTIME, devalarm_alarmhandler);
414 hrtimer_init(&alarms[ANDROID_ALARM_RTC].u.hrt,
415 CLOCK_REALTIME, HRTIMER_MODE_ABS);
416 alarm_init(&alarms[ANDROID_ALARM_ELAPSED_REALTIME_WAKEUP].u.alrm,
417 ALARM_BOOTTIME, devalarm_alarmhandler);
418 hrtimer_init(&alarms[ANDROID_ALARM_ELAPSED_REALTIME].u.hrt,
419 CLOCK_BOOTTIME, HRTIMER_MODE_ABS);
420 hrtimer_init(&alarms[ANDROID_ALARM_SYSTEMTIME].u.hrt,
421 CLOCK_MONOTONIC, HRTIMER_MODE_ABS);
422
423 for (i = 0; i < ANDROID_ALARM_TYPE_COUNT; i++) {
424 alarms[i].type = i;
425 if (!is_wakeup(i))
426 alarms[i].u.hrt.function = devalarm_hrthandler;
427 }
428
a180c0d6 429 wakeup_source_init(&alarm_wake_lock, "alarm");
841cb11c
AH
430 return 0;
431}
432
433static void __exit alarm_dev_exit(void)
434{
435 misc_deregister(&alarm_device);
a180c0d6 436 wakeup_source_trash(&alarm_wake_lock);
841cb11c
AH
437}
438
439module_init(alarm_dev_init);
440module_exit(alarm_dev_exit);
441
This page took 0.163445 seconds and 5 git commands to generate.