Merge tag 'iio-fixes-for-3.18a' of git://git.kernel.org/pub/scm/linux/kernel/git...
[deliverable/linux.git] / drivers / staging / comedi / comedi_fops.c
1 /*
2 comedi/comedi_fops.c
3 comedi kernel module
4
5 COMEDI - Linux Control and Measurement Device Interface
6 Copyright (C) 1997-2000 David A. Schleef <ds@schleef.org>
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17 */
18
19 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
20
21 #include "comedi_compat32.h"
22
23 #include <linux/module.h>
24 #include <linux/errno.h>
25 #include <linux/kernel.h>
26 #include <linux/sched.h>
27 #include <linux/fcntl.h>
28 #include <linux/delay.h>
29 #include <linux/mm.h>
30 #include <linux/slab.h>
31 #include <linux/kmod.h>
32 #include <linux/poll.h>
33 #include <linux/init.h>
34 #include <linux/device.h>
35 #include <linux/vmalloc.h>
36 #include <linux/fs.h>
37 #include "comedidev.h"
38 #include <linux/cdev.h>
39 #include <linux/stat.h>
40
41 #include <linux/io.h>
42 #include <linux/uaccess.h>
43
44 #include "comedi_internal.h"
45
46 #define COMEDI_NUM_MINORS 0x100
47 #define COMEDI_NUM_SUBDEVICE_MINORS \
48 (COMEDI_NUM_MINORS - COMEDI_NUM_BOARD_MINORS)
49
50 static int comedi_num_legacy_minors;
51 module_param(comedi_num_legacy_minors, int, S_IRUGO);
52 MODULE_PARM_DESC(comedi_num_legacy_minors,
53 "number of comedi minor devices to reserve for non-auto-configured devices (default 0)"
54 );
55
56 unsigned int comedi_default_buf_size_kb = CONFIG_COMEDI_DEFAULT_BUF_SIZE_KB;
57 module_param(comedi_default_buf_size_kb, uint, S_IRUGO | S_IWUSR);
58 MODULE_PARM_DESC(comedi_default_buf_size_kb,
59 "default asynchronous buffer size in KiB (default "
60 __MODULE_STRING(CONFIG_COMEDI_DEFAULT_BUF_SIZE_KB) ")");
61
62 unsigned int comedi_default_buf_maxsize_kb
63 = CONFIG_COMEDI_DEFAULT_BUF_MAXSIZE_KB;
64 module_param(comedi_default_buf_maxsize_kb, uint, S_IRUGO | S_IWUSR);
65 MODULE_PARM_DESC(comedi_default_buf_maxsize_kb,
66 "default maximum size of asynchronous buffer in KiB (default "
67 __MODULE_STRING(CONFIG_COMEDI_DEFAULT_BUF_MAXSIZE_KB) ")");
68
69 static DEFINE_MUTEX(comedi_board_minor_table_lock);
70 static struct comedi_device
71 *comedi_board_minor_table[COMEDI_NUM_BOARD_MINORS];
72
73 static DEFINE_MUTEX(comedi_subdevice_minor_table_lock);
74 /* Note: indexed by minor - COMEDI_NUM_BOARD_MINORS. */
75 static struct comedi_subdevice
76 *comedi_subdevice_minor_table[COMEDI_NUM_SUBDEVICE_MINORS];
77
78 static struct class *comedi_class;
79 static struct cdev comedi_cdev;
80
81 static void comedi_device_init(struct comedi_device *dev)
82 {
83 kref_init(&dev->refcount);
84 spin_lock_init(&dev->spinlock);
85 mutex_init(&dev->mutex);
86 init_rwsem(&dev->attach_lock);
87 dev->minor = -1;
88 }
89
90 static void comedi_dev_kref_release(struct kref *kref)
91 {
92 struct comedi_device *dev =
93 container_of(kref, struct comedi_device, refcount);
94
95 mutex_destroy(&dev->mutex);
96 put_device(dev->class_dev);
97 kfree(dev);
98 }
99
100 int comedi_dev_put(struct comedi_device *dev)
101 {
102 if (dev)
103 return kref_put(&dev->refcount, comedi_dev_kref_release);
104 return 1;
105 }
106 EXPORT_SYMBOL_GPL(comedi_dev_put);
107
108 static struct comedi_device *comedi_dev_get(struct comedi_device *dev)
109 {
110 if (dev)
111 kref_get(&dev->refcount);
112 return dev;
113 }
114
115 static void comedi_device_cleanup(struct comedi_device *dev)
116 {
117 struct module *driver_module = NULL;
118
119 if (dev == NULL)
120 return;
121 mutex_lock(&dev->mutex);
122 if (dev->attached)
123 driver_module = dev->driver->module;
124 comedi_device_detach(dev);
125 if (driver_module && dev->use_count)
126 module_put(driver_module);
127 mutex_unlock(&dev->mutex);
128 }
129
130 static bool comedi_clear_board_dev(struct comedi_device *dev)
131 {
132 unsigned int i = dev->minor;
133 bool cleared = false;
134
135 mutex_lock(&comedi_board_minor_table_lock);
136 if (dev == comedi_board_minor_table[i]) {
137 comedi_board_minor_table[i] = NULL;
138 cleared = true;
139 }
140 mutex_unlock(&comedi_board_minor_table_lock);
141 return cleared;
142 }
143
144 static struct comedi_device *comedi_clear_board_minor(unsigned minor)
145 {
146 struct comedi_device *dev;
147
148 mutex_lock(&comedi_board_minor_table_lock);
149 dev = comedi_board_minor_table[minor];
150 comedi_board_minor_table[minor] = NULL;
151 mutex_unlock(&comedi_board_minor_table_lock);
152 return dev;
153 }
154
155 static void comedi_free_board_dev(struct comedi_device *dev)
156 {
157 if (dev) {
158 comedi_device_cleanup(dev);
159 if (dev->class_dev) {
160 device_destroy(comedi_class,
161 MKDEV(COMEDI_MAJOR, dev->minor));
162 }
163 comedi_dev_put(dev);
164 }
165 }
166
167 static struct comedi_subdevice
168 *comedi_subdevice_from_minor(const struct comedi_device *dev, unsigned minor)
169 {
170 struct comedi_subdevice *s;
171 unsigned int i = minor - COMEDI_NUM_BOARD_MINORS;
172
173 BUG_ON(i >= COMEDI_NUM_SUBDEVICE_MINORS);
174 mutex_lock(&comedi_subdevice_minor_table_lock);
175 s = comedi_subdevice_minor_table[i];
176 if (s && s->device != dev)
177 s = NULL;
178 mutex_unlock(&comedi_subdevice_minor_table_lock);
179 return s;
180 }
181
182 static struct comedi_device *comedi_dev_get_from_board_minor(unsigned minor)
183 {
184 struct comedi_device *dev;
185
186 BUG_ON(minor >= COMEDI_NUM_BOARD_MINORS);
187 mutex_lock(&comedi_board_minor_table_lock);
188 dev = comedi_dev_get(comedi_board_minor_table[minor]);
189 mutex_unlock(&comedi_board_minor_table_lock);
190 return dev;
191 }
192
193 static struct comedi_device *comedi_dev_get_from_subdevice_minor(unsigned minor)
194 {
195 struct comedi_device *dev;
196 struct comedi_subdevice *s;
197 unsigned int i = minor - COMEDI_NUM_BOARD_MINORS;
198
199 BUG_ON(i >= COMEDI_NUM_SUBDEVICE_MINORS);
200 mutex_lock(&comedi_subdevice_minor_table_lock);
201 s = comedi_subdevice_minor_table[i];
202 dev = comedi_dev_get(s ? s->device : NULL);
203 mutex_unlock(&comedi_subdevice_minor_table_lock);
204 return dev;
205 }
206
207 struct comedi_device *comedi_dev_get_from_minor(unsigned minor)
208 {
209 if (minor < COMEDI_NUM_BOARD_MINORS)
210 return comedi_dev_get_from_board_minor(minor);
211
212 return comedi_dev_get_from_subdevice_minor(minor);
213 }
214 EXPORT_SYMBOL_GPL(comedi_dev_get_from_minor);
215
216 static struct comedi_subdevice *
217 comedi_read_subdevice(const struct comedi_device *dev, unsigned int minor)
218 {
219 struct comedi_subdevice *s;
220
221 if (minor >= COMEDI_NUM_BOARD_MINORS) {
222 s = comedi_subdevice_from_minor(dev, minor);
223 if (s == NULL || (s->subdev_flags & SDF_CMD_READ))
224 return s;
225 }
226 return dev->read_subdev;
227 }
228
229 static struct comedi_subdevice *
230 comedi_write_subdevice(const struct comedi_device *dev, unsigned int minor)
231 {
232 struct comedi_subdevice *s;
233
234 if (minor >= COMEDI_NUM_BOARD_MINORS) {
235 s = comedi_subdevice_from_minor(dev, minor);
236 if (s == NULL || (s->subdev_flags & SDF_CMD_WRITE))
237 return s;
238 }
239 return dev->write_subdev;
240 }
241
242 static int resize_async_buffer(struct comedi_device *dev,
243 struct comedi_subdevice *s, unsigned new_size)
244 {
245 struct comedi_async *async = s->async;
246 int retval;
247
248 if (new_size > async->max_bufsize)
249 return -EPERM;
250
251 if (s->busy) {
252 dev_dbg(dev->class_dev,
253 "subdevice is busy, cannot resize buffer\n");
254 return -EBUSY;
255 }
256 if (comedi_buf_is_mmapped(s)) {
257 dev_dbg(dev->class_dev,
258 "subdevice is mmapped, cannot resize buffer\n");
259 return -EBUSY;
260 }
261
262 /* make sure buffer is an integral number of pages
263 * (we round up) */
264 new_size = (new_size + PAGE_SIZE - 1) & PAGE_MASK;
265
266 retval = comedi_buf_alloc(dev, s, new_size);
267 if (retval < 0)
268 return retval;
269
270 if (s->buf_change) {
271 retval = s->buf_change(dev, s);
272 if (retval < 0)
273 return retval;
274 }
275
276 dev_dbg(dev->class_dev, "subd %d buffer resized to %i bytes\n",
277 s->index, async->prealloc_bufsz);
278 return 0;
279 }
280
281 /* sysfs attribute files */
282
283 static ssize_t max_read_buffer_kb_show(struct device *csdev,
284 struct device_attribute *attr, char *buf)
285 {
286 unsigned int minor = MINOR(csdev->devt);
287 struct comedi_device *dev;
288 struct comedi_subdevice *s;
289 unsigned int size = 0;
290
291 dev = comedi_dev_get_from_minor(minor);
292 if (!dev)
293 return -ENODEV;
294
295 mutex_lock(&dev->mutex);
296 s = comedi_read_subdevice(dev, minor);
297 if (s && (s->subdev_flags & SDF_CMD_READ) && s->async)
298 size = s->async->max_bufsize / 1024;
299 mutex_unlock(&dev->mutex);
300
301 comedi_dev_put(dev);
302 return snprintf(buf, PAGE_SIZE, "%u\n", size);
303 }
304
305 static ssize_t max_read_buffer_kb_store(struct device *csdev,
306 struct device_attribute *attr,
307 const char *buf, size_t count)
308 {
309 unsigned int minor = MINOR(csdev->devt);
310 struct comedi_device *dev;
311 struct comedi_subdevice *s;
312 unsigned int size;
313 int err;
314
315 err = kstrtouint(buf, 10, &size);
316 if (err)
317 return err;
318 if (size > (UINT_MAX / 1024))
319 return -EINVAL;
320 size *= 1024;
321
322 dev = comedi_dev_get_from_minor(minor);
323 if (!dev)
324 return -ENODEV;
325
326 mutex_lock(&dev->mutex);
327 s = comedi_read_subdevice(dev, minor);
328 if (s && (s->subdev_flags & SDF_CMD_READ) && s->async)
329 s->async->max_bufsize = size;
330 else
331 err = -EINVAL;
332 mutex_unlock(&dev->mutex);
333
334 comedi_dev_put(dev);
335 return err ? err : count;
336 }
337 static DEVICE_ATTR_RW(max_read_buffer_kb);
338
339 static ssize_t read_buffer_kb_show(struct device *csdev,
340 struct device_attribute *attr, char *buf)
341 {
342 unsigned int minor = MINOR(csdev->devt);
343 struct comedi_device *dev;
344 struct comedi_subdevice *s;
345 unsigned int size = 0;
346
347 dev = comedi_dev_get_from_minor(minor);
348 if (!dev)
349 return -ENODEV;
350
351 mutex_lock(&dev->mutex);
352 s = comedi_read_subdevice(dev, minor);
353 if (s && (s->subdev_flags & SDF_CMD_READ) && s->async)
354 size = s->async->prealloc_bufsz / 1024;
355 mutex_unlock(&dev->mutex);
356
357 comedi_dev_put(dev);
358 return snprintf(buf, PAGE_SIZE, "%u\n", size);
359 }
360
361 static ssize_t read_buffer_kb_store(struct device *csdev,
362 struct device_attribute *attr,
363 const char *buf, size_t count)
364 {
365 unsigned int minor = MINOR(csdev->devt);
366 struct comedi_device *dev;
367 struct comedi_subdevice *s;
368 unsigned int size;
369 int err;
370
371 err = kstrtouint(buf, 10, &size);
372 if (err)
373 return err;
374 if (size > (UINT_MAX / 1024))
375 return -EINVAL;
376 size *= 1024;
377
378 dev = comedi_dev_get_from_minor(minor);
379 if (!dev)
380 return -ENODEV;
381
382 mutex_lock(&dev->mutex);
383 s = comedi_read_subdevice(dev, minor);
384 if (s && (s->subdev_flags & SDF_CMD_READ) && s->async)
385 err = resize_async_buffer(dev, s, size);
386 else
387 err = -EINVAL;
388 mutex_unlock(&dev->mutex);
389
390 comedi_dev_put(dev);
391 return err ? err : count;
392 }
393 static DEVICE_ATTR_RW(read_buffer_kb);
394
395 static ssize_t max_write_buffer_kb_show(struct device *csdev,
396 struct device_attribute *attr,
397 char *buf)
398 {
399 unsigned int minor = MINOR(csdev->devt);
400 struct comedi_device *dev;
401 struct comedi_subdevice *s;
402 unsigned int size = 0;
403
404 dev = comedi_dev_get_from_minor(minor);
405 if (!dev)
406 return -ENODEV;
407
408 mutex_lock(&dev->mutex);
409 s = comedi_write_subdevice(dev, minor);
410 if (s && (s->subdev_flags & SDF_CMD_WRITE) && s->async)
411 size = s->async->max_bufsize / 1024;
412 mutex_unlock(&dev->mutex);
413
414 comedi_dev_put(dev);
415 return snprintf(buf, PAGE_SIZE, "%u\n", size);
416 }
417
418 static ssize_t max_write_buffer_kb_store(struct device *csdev,
419 struct device_attribute *attr,
420 const char *buf, size_t count)
421 {
422 unsigned int minor = MINOR(csdev->devt);
423 struct comedi_device *dev;
424 struct comedi_subdevice *s;
425 unsigned int size;
426 int err;
427
428 err = kstrtouint(buf, 10, &size);
429 if (err)
430 return err;
431 if (size > (UINT_MAX / 1024))
432 return -EINVAL;
433 size *= 1024;
434
435 dev = comedi_dev_get_from_minor(minor);
436 if (!dev)
437 return -ENODEV;
438
439 mutex_lock(&dev->mutex);
440 s = comedi_write_subdevice(dev, minor);
441 if (s && (s->subdev_flags & SDF_CMD_WRITE) && s->async)
442 s->async->max_bufsize = size;
443 else
444 err = -EINVAL;
445 mutex_unlock(&dev->mutex);
446
447 comedi_dev_put(dev);
448 return err ? err : count;
449 }
450 static DEVICE_ATTR_RW(max_write_buffer_kb);
451
452 static ssize_t write_buffer_kb_show(struct device *csdev,
453 struct device_attribute *attr, char *buf)
454 {
455 unsigned int minor = MINOR(csdev->devt);
456 struct comedi_device *dev;
457 struct comedi_subdevice *s;
458 unsigned int size = 0;
459
460 dev = comedi_dev_get_from_minor(minor);
461 if (!dev)
462 return -ENODEV;
463
464 mutex_lock(&dev->mutex);
465 s = comedi_write_subdevice(dev, minor);
466 if (s && (s->subdev_flags & SDF_CMD_WRITE) && s->async)
467 size = s->async->prealloc_bufsz / 1024;
468 mutex_unlock(&dev->mutex);
469
470 comedi_dev_put(dev);
471 return snprintf(buf, PAGE_SIZE, "%u\n", size);
472 }
473
474 static ssize_t write_buffer_kb_store(struct device *csdev,
475 struct device_attribute *attr,
476 const char *buf, size_t count)
477 {
478 unsigned int minor = MINOR(csdev->devt);
479 struct comedi_device *dev;
480 struct comedi_subdevice *s;
481 unsigned int size;
482 int err;
483
484 err = kstrtouint(buf, 10, &size);
485 if (err)
486 return err;
487 if (size > (UINT_MAX / 1024))
488 return -EINVAL;
489 size *= 1024;
490
491 dev = comedi_dev_get_from_minor(minor);
492 if (!dev)
493 return -ENODEV;
494
495 mutex_lock(&dev->mutex);
496 s = comedi_write_subdevice(dev, minor);
497 if (s && (s->subdev_flags & SDF_CMD_WRITE) && s->async)
498 err = resize_async_buffer(dev, s, size);
499 else
500 err = -EINVAL;
501 mutex_unlock(&dev->mutex);
502
503 comedi_dev_put(dev);
504 return err ? err : count;
505 }
506 static DEVICE_ATTR_RW(write_buffer_kb);
507
508 static struct attribute *comedi_dev_attrs[] = {
509 &dev_attr_max_read_buffer_kb.attr,
510 &dev_attr_read_buffer_kb.attr,
511 &dev_attr_max_write_buffer_kb.attr,
512 &dev_attr_write_buffer_kb.attr,
513 NULL,
514 };
515 ATTRIBUTE_GROUPS(comedi_dev);
516
517 static void comedi_set_subdevice_runflags(struct comedi_subdevice *s,
518 unsigned mask, unsigned bits)
519 {
520 unsigned long flags;
521
522 spin_lock_irqsave(&s->spin_lock, flags);
523 s->runflags &= ~mask;
524 s->runflags |= (bits & mask);
525 spin_unlock_irqrestore(&s->spin_lock, flags);
526 }
527
528 static unsigned comedi_get_subdevice_runflags(struct comedi_subdevice *s)
529 {
530 unsigned long flags;
531 unsigned runflags;
532
533 spin_lock_irqsave(&s->spin_lock, flags);
534 runflags = s->runflags;
535 spin_unlock_irqrestore(&s->spin_lock, flags);
536 return runflags;
537 }
538
539 bool comedi_is_subdevice_running(struct comedi_subdevice *s)
540 {
541 unsigned runflags = comedi_get_subdevice_runflags(s);
542
543 return (runflags & SRF_RUNNING) ? true : false;
544 }
545 EXPORT_SYMBOL_GPL(comedi_is_subdevice_running);
546
547 static bool comedi_is_subdevice_in_error(struct comedi_subdevice *s)
548 {
549 unsigned runflags = comedi_get_subdevice_runflags(s);
550
551 return (runflags & SRF_ERROR) ? true : false;
552 }
553
554 static bool comedi_is_subdevice_idle(struct comedi_subdevice *s)
555 {
556 unsigned runflags = comedi_get_subdevice_runflags(s);
557
558 return (runflags & (SRF_ERROR | SRF_RUNNING)) ? false : true;
559 }
560
561 /**
562 * comedi_alloc_spriv() - Allocate memory for the subdevice private data.
563 * @s: comedi_subdevice struct
564 * @size: size of the memory to allocate
565 *
566 * This also sets the subdevice runflags to allow the core to automatically
567 * free the private data during the detach.
568 */
569 void *comedi_alloc_spriv(struct comedi_subdevice *s, size_t size)
570 {
571 s->private = kzalloc(size, GFP_KERNEL);
572 if (s->private)
573 s->runflags |= SRF_FREE_SPRIV;
574 return s->private;
575 }
576 EXPORT_SYMBOL_GPL(comedi_alloc_spriv);
577
578 /*
579 This function restores a subdevice to an idle state.
580 */
581 static void do_become_nonbusy(struct comedi_device *dev,
582 struct comedi_subdevice *s)
583 {
584 struct comedi_async *async = s->async;
585
586 comedi_set_subdevice_runflags(s, SRF_RUNNING, 0);
587 if (async) {
588 comedi_buf_reset(s);
589 async->inttrig = NULL;
590 kfree(async->cmd.chanlist);
591 async->cmd.chanlist = NULL;
592 s->busy = NULL;
593 wake_up_interruptible_all(&s->async->wait_head);
594 } else {
595 dev_err(dev->class_dev,
596 "BUG: (?) do_become_nonbusy called with async=NULL\n");
597 s->busy = NULL;
598 }
599 }
600
601 static int do_cancel(struct comedi_device *dev, struct comedi_subdevice *s)
602 {
603 int ret = 0;
604
605 if (comedi_is_subdevice_running(s) && s->cancel)
606 ret = s->cancel(dev, s);
607
608 do_become_nonbusy(dev, s);
609
610 return ret;
611 }
612
613 void comedi_device_cancel_all(struct comedi_device *dev)
614 {
615 struct comedi_subdevice *s;
616 int i;
617
618 if (!dev->attached)
619 return;
620
621 for (i = 0; i < dev->n_subdevices; i++) {
622 s = &dev->subdevices[i];
623 if (s->async)
624 do_cancel(dev, s);
625 }
626 }
627
628 static int is_device_busy(struct comedi_device *dev)
629 {
630 struct comedi_subdevice *s;
631 int i;
632
633 if (!dev->attached)
634 return 0;
635
636 for (i = 0; i < dev->n_subdevices; i++) {
637 s = &dev->subdevices[i];
638 if (s->busy)
639 return 1;
640 if (s->async && comedi_buf_is_mmapped(s))
641 return 1;
642 }
643
644 return 0;
645 }
646
647 /*
648 COMEDI_DEVCONFIG
649 device config ioctl
650
651 arg:
652 pointer to devconfig structure
653
654 reads:
655 devconfig structure at arg
656
657 writes:
658 none
659 */
660 static int do_devconfig_ioctl(struct comedi_device *dev,
661 struct comedi_devconfig __user *arg)
662 {
663 struct comedi_devconfig it;
664
665 if (!capable(CAP_SYS_ADMIN))
666 return -EPERM;
667
668 if (arg == NULL) {
669 if (is_device_busy(dev))
670 return -EBUSY;
671 if (dev->attached) {
672 struct module *driver_module = dev->driver->module;
673
674 comedi_device_detach(dev);
675 module_put(driver_module);
676 }
677 return 0;
678 }
679
680 if (copy_from_user(&it, arg, sizeof(it)))
681 return -EFAULT;
682
683 it.board_name[COMEDI_NAMELEN - 1] = 0;
684
685 if (it.options[COMEDI_DEVCONF_AUX_DATA_LENGTH]) {
686 dev_warn(dev->class_dev,
687 "comedi_config --init_data is deprecated\n");
688 return -EINVAL;
689 }
690
691 if (dev->minor >= comedi_num_legacy_minors)
692 /* don't re-use dynamically allocated comedi devices */
693 return -EBUSY;
694
695 /* This increments the driver module count on success. */
696 return comedi_device_attach(dev, &it);
697 }
698
699 /*
700 COMEDI_BUFCONFIG
701 buffer configuration ioctl
702
703 arg:
704 pointer to bufconfig structure
705
706 reads:
707 bufconfig at arg
708
709 writes:
710 modified bufconfig at arg
711
712 */
713 static int do_bufconfig_ioctl(struct comedi_device *dev,
714 struct comedi_bufconfig __user *arg)
715 {
716 struct comedi_bufconfig bc;
717 struct comedi_async *async;
718 struct comedi_subdevice *s;
719 int retval = 0;
720
721 if (copy_from_user(&bc, arg, sizeof(bc)))
722 return -EFAULT;
723
724 if (bc.subdevice >= dev->n_subdevices)
725 return -EINVAL;
726
727 s = &dev->subdevices[bc.subdevice];
728 async = s->async;
729
730 if (!async) {
731 dev_dbg(dev->class_dev,
732 "subdevice does not have async capability\n");
733 bc.size = 0;
734 bc.maximum_size = 0;
735 goto copyback;
736 }
737
738 if (bc.maximum_size) {
739 if (!capable(CAP_SYS_ADMIN))
740 return -EPERM;
741
742 async->max_bufsize = bc.maximum_size;
743 }
744
745 if (bc.size) {
746 retval = resize_async_buffer(dev, s, bc.size);
747 if (retval < 0)
748 return retval;
749 }
750
751 bc.size = async->prealloc_bufsz;
752 bc.maximum_size = async->max_bufsize;
753
754 copyback:
755 if (copy_to_user(arg, &bc, sizeof(bc)))
756 return -EFAULT;
757
758 return 0;
759 }
760
761 /*
762 COMEDI_DEVINFO
763 device info ioctl
764
765 arg:
766 pointer to devinfo structure
767
768 reads:
769 none
770
771 writes:
772 devinfo structure
773
774 */
775 static int do_devinfo_ioctl(struct comedi_device *dev,
776 struct comedi_devinfo __user *arg,
777 struct file *file)
778 {
779 const unsigned minor = iminor(file_inode(file));
780 struct comedi_subdevice *s;
781 struct comedi_devinfo devinfo;
782
783 memset(&devinfo, 0, sizeof(devinfo));
784
785 /* fill devinfo structure */
786 devinfo.version_code = COMEDI_VERSION_CODE;
787 devinfo.n_subdevs = dev->n_subdevices;
788 strlcpy(devinfo.driver_name, dev->driver->driver_name, COMEDI_NAMELEN);
789 strlcpy(devinfo.board_name, dev->board_name, COMEDI_NAMELEN);
790
791 s = comedi_read_subdevice(dev, minor);
792 if (s)
793 devinfo.read_subdevice = s->index;
794 else
795 devinfo.read_subdevice = -1;
796
797 s = comedi_write_subdevice(dev, minor);
798 if (s)
799 devinfo.write_subdevice = s->index;
800 else
801 devinfo.write_subdevice = -1;
802
803 if (copy_to_user(arg, &devinfo, sizeof(devinfo)))
804 return -EFAULT;
805
806 return 0;
807 }
808
809 /*
810 COMEDI_SUBDINFO
811 subdevice info ioctl
812
813 arg:
814 pointer to array of subdevice info structures
815
816 reads:
817 none
818
819 writes:
820 array of subdevice info structures at arg
821
822 */
823 static int do_subdinfo_ioctl(struct comedi_device *dev,
824 struct comedi_subdinfo __user *arg, void *file)
825 {
826 int ret, i;
827 struct comedi_subdinfo *tmp, *us;
828 struct comedi_subdevice *s;
829
830 tmp = kcalloc(dev->n_subdevices, sizeof(*tmp), GFP_KERNEL);
831 if (!tmp)
832 return -ENOMEM;
833
834 /* fill subdinfo structs */
835 for (i = 0; i < dev->n_subdevices; i++) {
836 s = &dev->subdevices[i];
837 us = tmp + i;
838
839 us->type = s->type;
840 us->n_chan = s->n_chan;
841 us->subd_flags = s->subdev_flags;
842 if (comedi_is_subdevice_running(s))
843 us->subd_flags |= SDF_RUNNING;
844 #define TIMER_nanosec 5 /* backwards compatibility */
845 us->timer_type = TIMER_nanosec;
846 us->len_chanlist = s->len_chanlist;
847 us->maxdata = s->maxdata;
848 if (s->range_table) {
849 us->range_type =
850 (i << 24) | (0 << 16) | (s->range_table->length);
851 } else {
852 us->range_type = 0; /* XXX */
853 }
854
855 if (s->busy)
856 us->subd_flags |= SDF_BUSY;
857 if (s->busy == file)
858 us->subd_flags |= SDF_BUSY_OWNER;
859 if (s->lock)
860 us->subd_flags |= SDF_LOCKED;
861 if (s->lock == file)
862 us->subd_flags |= SDF_LOCK_OWNER;
863 if (!s->maxdata && s->maxdata_list)
864 us->subd_flags |= SDF_MAXDATA;
865 if (s->range_table_list)
866 us->subd_flags |= SDF_RANGETYPE;
867 if (s->do_cmd)
868 us->subd_flags |= SDF_CMD;
869
870 if (s->insn_bits != &insn_inval)
871 us->insn_bits_support = COMEDI_SUPPORTED;
872 else
873 us->insn_bits_support = COMEDI_UNSUPPORTED;
874 }
875
876 ret = copy_to_user(arg, tmp, dev->n_subdevices * sizeof(*tmp));
877
878 kfree(tmp);
879
880 return ret ? -EFAULT : 0;
881 }
882
883 /*
884 COMEDI_CHANINFO
885 subdevice info ioctl
886
887 arg:
888 pointer to chaninfo structure
889
890 reads:
891 chaninfo structure at arg
892
893 writes:
894 arrays at elements of chaninfo structure
895
896 */
897 static int do_chaninfo_ioctl(struct comedi_device *dev,
898 struct comedi_chaninfo __user *arg)
899 {
900 struct comedi_subdevice *s;
901 struct comedi_chaninfo it;
902
903 if (copy_from_user(&it, arg, sizeof(it)))
904 return -EFAULT;
905
906 if (it.subdev >= dev->n_subdevices)
907 return -EINVAL;
908 s = &dev->subdevices[it.subdev];
909
910 if (it.maxdata_list) {
911 if (s->maxdata || !s->maxdata_list)
912 return -EINVAL;
913 if (copy_to_user(it.maxdata_list, s->maxdata_list,
914 s->n_chan * sizeof(unsigned int)))
915 return -EFAULT;
916 }
917
918 if (it.flaglist)
919 return -EINVAL; /* flaglist not supported */
920
921 if (it.rangelist) {
922 int i;
923
924 if (!s->range_table_list)
925 return -EINVAL;
926 for (i = 0; i < s->n_chan; i++) {
927 int x;
928
929 x = (dev->minor << 28) | (it.subdev << 24) | (i << 16) |
930 (s->range_table_list[i]->length);
931 if (put_user(x, it.rangelist + i))
932 return -EFAULT;
933 }
934 #if 0
935 if (copy_to_user(it.rangelist, s->range_type_list,
936 s->n_chan * sizeof(unsigned int)))
937 return -EFAULT;
938 #endif
939 }
940
941 return 0;
942 }
943
944 /*
945 COMEDI_BUFINFO
946 buffer information ioctl
947
948 arg:
949 pointer to bufinfo structure
950
951 reads:
952 bufinfo at arg
953
954 writes:
955 modified bufinfo at arg
956
957 */
958 static int do_bufinfo_ioctl(struct comedi_device *dev,
959 struct comedi_bufinfo __user *arg, void *file)
960 {
961 struct comedi_bufinfo bi;
962 struct comedi_subdevice *s;
963 struct comedi_async *async;
964
965 if (copy_from_user(&bi, arg, sizeof(bi)))
966 return -EFAULT;
967
968 if (bi.subdevice >= dev->n_subdevices)
969 return -EINVAL;
970
971 s = &dev->subdevices[bi.subdevice];
972
973 async = s->async;
974
975 if (!async) {
976 dev_dbg(dev->class_dev,
977 "subdevice does not have async capability\n");
978 bi.buf_write_ptr = 0;
979 bi.buf_read_ptr = 0;
980 bi.buf_write_count = 0;
981 bi.buf_read_count = 0;
982 bi.bytes_read = 0;
983 bi.bytes_written = 0;
984 goto copyback;
985 }
986 if (!s->busy) {
987 bi.bytes_read = 0;
988 bi.bytes_written = 0;
989 goto copyback_position;
990 }
991 if (s->busy != file)
992 return -EACCES;
993
994 if (bi.bytes_read && (s->subdev_flags & SDF_CMD_READ)) {
995 bi.bytes_read = comedi_buf_read_alloc(s, bi.bytes_read);
996 comedi_buf_read_free(s, bi.bytes_read);
997
998 if (comedi_is_subdevice_idle(s) &&
999 comedi_buf_n_bytes_ready(s) == 0) {
1000 do_become_nonbusy(dev, s);
1001 }
1002 }
1003
1004 if (bi.bytes_written && (s->subdev_flags & SDF_CMD_WRITE)) {
1005 bi.bytes_written =
1006 comedi_buf_write_alloc(s, bi.bytes_written);
1007 comedi_buf_write_free(s, bi.bytes_written);
1008 }
1009
1010 copyback_position:
1011 bi.buf_write_count = async->buf_write_count;
1012 bi.buf_write_ptr = async->buf_write_ptr;
1013 bi.buf_read_count = async->buf_read_count;
1014 bi.buf_read_ptr = async->buf_read_ptr;
1015
1016 copyback:
1017 if (copy_to_user(arg, &bi, sizeof(bi)))
1018 return -EFAULT;
1019
1020 return 0;
1021 }
1022
1023 static int check_insn_config_length(struct comedi_insn *insn,
1024 unsigned int *data)
1025 {
1026 if (insn->n < 1)
1027 return -EINVAL;
1028
1029 switch (data[0]) {
1030 case INSN_CONFIG_DIO_OUTPUT:
1031 case INSN_CONFIG_DIO_INPUT:
1032 case INSN_CONFIG_DISARM:
1033 case INSN_CONFIG_RESET:
1034 if (insn->n == 1)
1035 return 0;
1036 break;
1037 case INSN_CONFIG_ARM:
1038 case INSN_CONFIG_DIO_QUERY:
1039 case INSN_CONFIG_BLOCK_SIZE:
1040 case INSN_CONFIG_FILTER:
1041 case INSN_CONFIG_SERIAL_CLOCK:
1042 case INSN_CONFIG_BIDIRECTIONAL_DATA:
1043 case INSN_CONFIG_ALT_SOURCE:
1044 case INSN_CONFIG_SET_COUNTER_MODE:
1045 case INSN_CONFIG_8254_READ_STATUS:
1046 case INSN_CONFIG_SET_ROUTING:
1047 case INSN_CONFIG_GET_ROUTING:
1048 case INSN_CONFIG_GET_PWM_STATUS:
1049 case INSN_CONFIG_PWM_SET_PERIOD:
1050 case INSN_CONFIG_PWM_GET_PERIOD:
1051 if (insn->n == 2)
1052 return 0;
1053 break;
1054 case INSN_CONFIG_SET_GATE_SRC:
1055 case INSN_CONFIG_GET_GATE_SRC:
1056 case INSN_CONFIG_SET_CLOCK_SRC:
1057 case INSN_CONFIG_GET_CLOCK_SRC:
1058 case INSN_CONFIG_SET_OTHER_SRC:
1059 case INSN_CONFIG_GET_COUNTER_STATUS:
1060 case INSN_CONFIG_PWM_SET_H_BRIDGE:
1061 case INSN_CONFIG_PWM_GET_H_BRIDGE:
1062 case INSN_CONFIG_GET_HARDWARE_BUFFER_SIZE:
1063 if (insn->n == 3)
1064 return 0;
1065 break;
1066 case INSN_CONFIG_PWM_OUTPUT:
1067 case INSN_CONFIG_ANALOG_TRIG:
1068 if (insn->n == 5)
1069 return 0;
1070 break;
1071 case INSN_CONFIG_DIGITAL_TRIG:
1072 if (insn->n == 6)
1073 return 0;
1074 break;
1075 /* by default we allow the insn since we don't have checks for
1076 * all possible cases yet */
1077 default:
1078 pr_warn("No check for data length of config insn id %i is implemented\n",
1079 data[0]);
1080 pr_warn("Add a check to %s in %s\n", __func__, __FILE__);
1081 pr_warn("Assuming n=%i is correct\n", insn->n);
1082 return 0;
1083 }
1084 return -EINVAL;
1085 }
1086
1087 static int parse_insn(struct comedi_device *dev, struct comedi_insn *insn,
1088 unsigned int *data, void *file)
1089 {
1090 struct comedi_subdevice *s;
1091 int ret = 0;
1092 int i;
1093
1094 if (insn->insn & INSN_MASK_SPECIAL) {
1095 /* a non-subdevice instruction */
1096
1097 switch (insn->insn) {
1098 case INSN_GTOD:
1099 {
1100 struct timeval tv;
1101
1102 if (insn->n != 2) {
1103 ret = -EINVAL;
1104 break;
1105 }
1106
1107 do_gettimeofday(&tv);
1108 data[0] = tv.tv_sec;
1109 data[1] = tv.tv_usec;
1110 ret = 2;
1111
1112 break;
1113 }
1114 case INSN_WAIT:
1115 if (insn->n != 1 || data[0] >= 100000) {
1116 ret = -EINVAL;
1117 break;
1118 }
1119 udelay(data[0] / 1000);
1120 ret = 1;
1121 break;
1122 case INSN_INTTRIG:
1123 if (insn->n != 1) {
1124 ret = -EINVAL;
1125 break;
1126 }
1127 if (insn->subdev >= dev->n_subdevices) {
1128 dev_dbg(dev->class_dev,
1129 "%d not usable subdevice\n",
1130 insn->subdev);
1131 ret = -EINVAL;
1132 break;
1133 }
1134 s = &dev->subdevices[insn->subdev];
1135 if (!s->async) {
1136 dev_dbg(dev->class_dev, "no async\n");
1137 ret = -EINVAL;
1138 break;
1139 }
1140 if (!s->async->inttrig) {
1141 dev_dbg(dev->class_dev, "no inttrig\n");
1142 ret = -EAGAIN;
1143 break;
1144 }
1145 ret = s->async->inttrig(dev, s, data[0]);
1146 if (ret >= 0)
1147 ret = 1;
1148 break;
1149 default:
1150 dev_dbg(dev->class_dev, "invalid insn\n");
1151 ret = -EINVAL;
1152 break;
1153 }
1154 } else {
1155 /* a subdevice instruction */
1156 unsigned int maxdata;
1157
1158 if (insn->subdev >= dev->n_subdevices) {
1159 dev_dbg(dev->class_dev, "subdevice %d out of range\n",
1160 insn->subdev);
1161 ret = -EINVAL;
1162 goto out;
1163 }
1164 s = &dev->subdevices[insn->subdev];
1165
1166 if (s->type == COMEDI_SUBD_UNUSED) {
1167 dev_dbg(dev->class_dev, "%d not usable subdevice\n",
1168 insn->subdev);
1169 ret = -EIO;
1170 goto out;
1171 }
1172
1173 /* are we locked? (ioctl lock) */
1174 if (s->lock && s->lock != file) {
1175 dev_dbg(dev->class_dev, "device locked\n");
1176 ret = -EACCES;
1177 goto out;
1178 }
1179
1180 ret = comedi_check_chanlist(s, 1, &insn->chanspec);
1181 if (ret < 0) {
1182 ret = -EINVAL;
1183 dev_dbg(dev->class_dev, "bad chanspec\n");
1184 goto out;
1185 }
1186
1187 if (s->busy) {
1188 ret = -EBUSY;
1189 goto out;
1190 }
1191 /* This looks arbitrary. It is. */
1192 s->busy = &parse_insn;
1193 switch (insn->insn) {
1194 case INSN_READ:
1195 ret = s->insn_read(dev, s, insn, data);
1196 if (ret == -ETIMEDOUT) {
1197 dev_dbg(dev->class_dev,
1198 "subdevice %d read instruction timed out\n",
1199 s->index);
1200 }
1201 break;
1202 case INSN_WRITE:
1203 maxdata = s->maxdata_list
1204 ? s->maxdata_list[CR_CHAN(insn->chanspec)]
1205 : s->maxdata;
1206 for (i = 0; i < insn->n; ++i) {
1207 if (data[i] > maxdata) {
1208 ret = -EINVAL;
1209 dev_dbg(dev->class_dev,
1210 "bad data value(s)\n");
1211 break;
1212 }
1213 }
1214 if (ret == 0) {
1215 ret = s->insn_write(dev, s, insn, data);
1216 if (ret == -ETIMEDOUT) {
1217 dev_dbg(dev->class_dev,
1218 "subdevice %d write instruction timed out\n",
1219 s->index);
1220 }
1221 }
1222 break;
1223 case INSN_BITS:
1224 if (insn->n != 2) {
1225 ret = -EINVAL;
1226 } else {
1227 /* Most drivers ignore the base channel in
1228 * insn->chanspec. Fix this here if
1229 * the subdevice has <= 32 channels. */
1230 unsigned int orig_mask = data[0];
1231 unsigned int shift = 0;
1232
1233 if (s->n_chan <= 32) {
1234 shift = CR_CHAN(insn->chanspec);
1235 if (shift > 0) {
1236 insn->chanspec = 0;
1237 data[0] <<= shift;
1238 data[1] <<= shift;
1239 }
1240 }
1241 ret = s->insn_bits(dev, s, insn, data);
1242 data[0] = orig_mask;
1243 if (shift > 0)
1244 data[1] >>= shift;
1245 }
1246 break;
1247 case INSN_CONFIG:
1248 ret = check_insn_config_length(insn, data);
1249 if (ret)
1250 break;
1251 ret = s->insn_config(dev, s, insn, data);
1252 break;
1253 default:
1254 ret = -EINVAL;
1255 break;
1256 }
1257
1258 s->busy = NULL;
1259 }
1260
1261 out:
1262 return ret;
1263 }
1264
1265 /*
1266 * COMEDI_INSNLIST
1267 * synchronous instructions
1268 *
1269 * arg:
1270 * pointer to sync cmd structure
1271 *
1272 * reads:
1273 * sync cmd struct at arg
1274 * instruction list
1275 * data (for writes)
1276 *
1277 * writes:
1278 * data (for reads)
1279 */
1280 /* arbitrary limits */
1281 #define MAX_SAMPLES 256
1282 static int do_insnlist_ioctl(struct comedi_device *dev,
1283 struct comedi_insnlist __user *arg, void *file)
1284 {
1285 struct comedi_insnlist insnlist;
1286 struct comedi_insn *insns = NULL;
1287 unsigned int *data = NULL;
1288 int i = 0;
1289 int ret = 0;
1290
1291 if (copy_from_user(&insnlist, arg, sizeof(insnlist)))
1292 return -EFAULT;
1293
1294 data = kmalloc_array(MAX_SAMPLES, sizeof(unsigned int), GFP_KERNEL);
1295 if (!data) {
1296 ret = -ENOMEM;
1297 goto error;
1298 }
1299
1300 insns = kcalloc(insnlist.n_insns, sizeof(*insns), GFP_KERNEL);
1301 if (!insns) {
1302 ret = -ENOMEM;
1303 goto error;
1304 }
1305
1306 if (copy_from_user(insns, insnlist.insns,
1307 sizeof(*insns) * insnlist.n_insns)) {
1308 dev_dbg(dev->class_dev, "copy_from_user failed\n");
1309 ret = -EFAULT;
1310 goto error;
1311 }
1312
1313 for (i = 0; i < insnlist.n_insns; i++) {
1314 if (insns[i].n > MAX_SAMPLES) {
1315 dev_dbg(dev->class_dev,
1316 "number of samples too large\n");
1317 ret = -EINVAL;
1318 goto error;
1319 }
1320 if (insns[i].insn & INSN_MASK_WRITE) {
1321 if (copy_from_user(data, insns[i].data,
1322 insns[i].n * sizeof(unsigned int))) {
1323 dev_dbg(dev->class_dev,
1324 "copy_from_user failed\n");
1325 ret = -EFAULT;
1326 goto error;
1327 }
1328 }
1329 ret = parse_insn(dev, insns + i, data, file);
1330 if (ret < 0)
1331 goto error;
1332 if (insns[i].insn & INSN_MASK_READ) {
1333 if (copy_to_user(insns[i].data, data,
1334 insns[i].n * sizeof(unsigned int))) {
1335 dev_dbg(dev->class_dev,
1336 "copy_to_user failed\n");
1337 ret = -EFAULT;
1338 goto error;
1339 }
1340 }
1341 if (need_resched())
1342 schedule();
1343 }
1344
1345 error:
1346 kfree(insns);
1347 kfree(data);
1348
1349 if (ret < 0)
1350 return ret;
1351 return i;
1352 }
1353
1354 /*
1355 * COMEDI_INSN
1356 * synchronous instructions
1357 *
1358 * arg:
1359 * pointer to insn
1360 *
1361 * reads:
1362 * struct comedi_insn struct at arg
1363 * data (for writes)
1364 *
1365 * writes:
1366 * data (for reads)
1367 */
1368 static int do_insn_ioctl(struct comedi_device *dev,
1369 struct comedi_insn __user *arg, void *file)
1370 {
1371 struct comedi_insn insn;
1372 unsigned int *data = NULL;
1373 int ret = 0;
1374
1375 data = kmalloc_array(MAX_SAMPLES, sizeof(unsigned int), GFP_KERNEL);
1376 if (!data) {
1377 ret = -ENOMEM;
1378 goto error;
1379 }
1380
1381 if (copy_from_user(&insn, arg, sizeof(insn))) {
1382 ret = -EFAULT;
1383 goto error;
1384 }
1385
1386 /* This is where the behavior of insn and insnlist deviate. */
1387 if (insn.n > MAX_SAMPLES)
1388 insn.n = MAX_SAMPLES;
1389 if (insn.insn & INSN_MASK_WRITE) {
1390 if (copy_from_user(data,
1391 insn.data,
1392 insn.n * sizeof(unsigned int))) {
1393 ret = -EFAULT;
1394 goto error;
1395 }
1396 }
1397 ret = parse_insn(dev, &insn, data, file);
1398 if (ret < 0)
1399 goto error;
1400 if (insn.insn & INSN_MASK_READ) {
1401 if (copy_to_user(insn.data,
1402 data,
1403 insn.n * sizeof(unsigned int))) {
1404 ret = -EFAULT;
1405 goto error;
1406 }
1407 }
1408 ret = insn.n;
1409
1410 error:
1411 kfree(data);
1412
1413 return ret;
1414 }
1415
1416 static int __comedi_get_user_cmd(struct comedi_device *dev,
1417 struct comedi_cmd __user *arg,
1418 struct comedi_cmd *cmd)
1419 {
1420 struct comedi_subdevice *s;
1421
1422 if (copy_from_user(cmd, arg, sizeof(*cmd))) {
1423 dev_dbg(dev->class_dev, "bad cmd address\n");
1424 return -EFAULT;
1425 }
1426
1427 if (cmd->subdev >= dev->n_subdevices) {
1428 dev_dbg(dev->class_dev, "%d no such subdevice\n", cmd->subdev);
1429 return -ENODEV;
1430 }
1431
1432 s = &dev->subdevices[cmd->subdev];
1433
1434 if (s->type == COMEDI_SUBD_UNUSED) {
1435 dev_dbg(dev->class_dev, "%d not valid subdevice\n",
1436 cmd->subdev);
1437 return -EIO;
1438 }
1439
1440 if (!s->do_cmd || !s->do_cmdtest || !s->async) {
1441 dev_dbg(dev->class_dev,
1442 "subdevice %d does not support commands\n",
1443 cmd->subdev);
1444 return -EIO;
1445 }
1446
1447 /* make sure channel/gain list isn't too long */
1448 if (cmd->chanlist_len > s->len_chanlist) {
1449 dev_dbg(dev->class_dev, "channel/gain list too long %d > %d\n",
1450 cmd->chanlist_len, s->len_chanlist);
1451 return -EINVAL;
1452 }
1453
1454 return 0;
1455 }
1456
1457 static int __comedi_get_user_chanlist(struct comedi_device *dev,
1458 struct comedi_subdevice *s,
1459 unsigned int __user *user_chanlist,
1460 struct comedi_cmd *cmd)
1461 {
1462 unsigned int *chanlist;
1463 int ret;
1464
1465 chanlist = memdup_user(user_chanlist,
1466 cmd->chanlist_len * sizeof(unsigned int));
1467 if (IS_ERR(chanlist))
1468 return PTR_ERR(chanlist);
1469
1470 /* make sure each element in channel/gain list is valid */
1471 ret = comedi_check_chanlist(s, cmd->chanlist_len, chanlist);
1472 if (ret < 0) {
1473 kfree(chanlist);
1474 return ret;
1475 }
1476
1477 cmd->chanlist = chanlist;
1478
1479 return 0;
1480 }
1481
1482 static int do_cmd_ioctl(struct comedi_device *dev,
1483 struct comedi_cmd __user *arg, void *file)
1484 {
1485 struct comedi_cmd cmd;
1486 struct comedi_subdevice *s;
1487 struct comedi_async *async;
1488 unsigned int __user *user_chanlist;
1489 int ret;
1490
1491 /* get the user's cmd and do some simple validation */
1492 ret = __comedi_get_user_cmd(dev, arg, &cmd);
1493 if (ret)
1494 return ret;
1495
1496 /* save user's chanlist pointer so it can be restored later */
1497 user_chanlist = (unsigned int __user *)cmd.chanlist;
1498
1499 s = &dev->subdevices[cmd.subdev];
1500 async = s->async;
1501
1502 /* are we locked? (ioctl lock) */
1503 if (s->lock && s->lock != file) {
1504 dev_dbg(dev->class_dev, "subdevice locked\n");
1505 return -EACCES;
1506 }
1507
1508 /* are we busy? */
1509 if (s->busy) {
1510 dev_dbg(dev->class_dev, "subdevice busy\n");
1511 return -EBUSY;
1512 }
1513
1514 /* make sure channel/gain list isn't too short */
1515 if (cmd.chanlist_len < 1) {
1516 dev_dbg(dev->class_dev, "channel/gain list too short %u < 1\n",
1517 cmd.chanlist_len);
1518 return -EINVAL;
1519 }
1520
1521 async->cmd = cmd;
1522 async->cmd.data = NULL;
1523
1524 /* load channel/gain list */
1525 ret = __comedi_get_user_chanlist(dev, s, user_chanlist, &async->cmd);
1526 if (ret)
1527 goto cleanup;
1528
1529 ret = s->do_cmdtest(dev, s, &async->cmd);
1530
1531 if (async->cmd.flags & CMDF_BOGUS || ret) {
1532 dev_dbg(dev->class_dev, "test returned %d\n", ret);
1533 cmd = async->cmd;
1534 /* restore chanlist pointer before copying back */
1535 cmd.chanlist = (unsigned int __force *)user_chanlist;
1536 cmd.data = NULL;
1537 if (copy_to_user(arg, &cmd, sizeof(cmd))) {
1538 dev_dbg(dev->class_dev, "fault writing cmd\n");
1539 ret = -EFAULT;
1540 goto cleanup;
1541 }
1542 ret = -EAGAIN;
1543 goto cleanup;
1544 }
1545
1546 if (!async->prealloc_bufsz) {
1547 ret = -ENOMEM;
1548 dev_dbg(dev->class_dev, "no buffer (?)\n");
1549 goto cleanup;
1550 }
1551
1552 comedi_buf_reset(s);
1553
1554 async->cb_mask =
1555 COMEDI_CB_EOA | COMEDI_CB_BLOCK | COMEDI_CB_ERROR |
1556 COMEDI_CB_OVERFLOW;
1557 if (async->cmd.flags & CMDF_WAKE_EOS)
1558 async->cb_mask |= COMEDI_CB_EOS;
1559
1560 comedi_set_subdevice_runflags(s, SRF_ERROR | SRF_RUNNING, SRF_RUNNING);
1561
1562 /* set s->busy _after_ setting SRF_RUNNING flag to avoid race with
1563 * comedi_read() or comedi_write() */
1564 s->busy = file;
1565 ret = s->do_cmd(dev, s);
1566 if (ret == 0)
1567 return 0;
1568
1569 cleanup:
1570 do_become_nonbusy(dev, s);
1571
1572 return ret;
1573 }
1574
1575 /*
1576 COMEDI_CMDTEST
1577 command testing ioctl
1578
1579 arg:
1580 pointer to cmd structure
1581
1582 reads:
1583 cmd structure at arg
1584 channel/range list
1585
1586 writes:
1587 modified cmd structure at arg
1588
1589 */
1590 static int do_cmdtest_ioctl(struct comedi_device *dev,
1591 struct comedi_cmd __user *arg, void *file)
1592 {
1593 struct comedi_cmd cmd;
1594 struct comedi_subdevice *s;
1595 unsigned int __user *user_chanlist;
1596 int ret;
1597
1598 /* get the user's cmd and do some simple validation */
1599 ret = __comedi_get_user_cmd(dev, arg, &cmd);
1600 if (ret)
1601 return ret;
1602
1603 /* save user's chanlist pointer so it can be restored later */
1604 user_chanlist = (unsigned int __user *)cmd.chanlist;
1605
1606 s = &dev->subdevices[cmd.subdev];
1607
1608 /* user_chanlist can be NULL for COMEDI_CMDTEST ioctl */
1609 if (user_chanlist) {
1610 /* load channel/gain list */
1611 ret = __comedi_get_user_chanlist(dev, s, user_chanlist, &cmd);
1612 if (ret)
1613 return ret;
1614 }
1615
1616 ret = s->do_cmdtest(dev, s, &cmd);
1617
1618 /* restore chanlist pointer before copying back */
1619 cmd.chanlist = (unsigned int __force *)user_chanlist;
1620
1621 if (copy_to_user(arg, &cmd, sizeof(cmd))) {
1622 dev_dbg(dev->class_dev, "bad cmd address\n");
1623 ret = -EFAULT;
1624 }
1625
1626 return ret;
1627 }
1628
1629 /*
1630 COMEDI_LOCK
1631 lock subdevice
1632
1633 arg:
1634 subdevice number
1635
1636 reads:
1637 none
1638
1639 writes:
1640 none
1641
1642 */
1643
1644 static int do_lock_ioctl(struct comedi_device *dev, unsigned int arg,
1645 void *file)
1646 {
1647 int ret = 0;
1648 unsigned long flags;
1649 struct comedi_subdevice *s;
1650
1651 if (arg >= dev->n_subdevices)
1652 return -EINVAL;
1653 s = &dev->subdevices[arg];
1654
1655 spin_lock_irqsave(&s->spin_lock, flags);
1656 if (s->busy || s->lock)
1657 ret = -EBUSY;
1658 else
1659 s->lock = file;
1660 spin_unlock_irqrestore(&s->spin_lock, flags);
1661
1662 return ret;
1663 }
1664
1665 /*
1666 COMEDI_UNLOCK
1667 unlock subdevice
1668
1669 arg:
1670 subdevice number
1671
1672 reads:
1673 none
1674
1675 writes:
1676 none
1677
1678 This function isn't protected by the semaphore, since
1679 we already own the lock.
1680 */
1681 static int do_unlock_ioctl(struct comedi_device *dev, unsigned int arg,
1682 void *file)
1683 {
1684 struct comedi_subdevice *s;
1685
1686 if (arg >= dev->n_subdevices)
1687 return -EINVAL;
1688 s = &dev->subdevices[arg];
1689
1690 if (s->busy)
1691 return -EBUSY;
1692
1693 if (s->lock && s->lock != file)
1694 return -EACCES;
1695
1696 if (s->lock == file)
1697 s->lock = NULL;
1698
1699 return 0;
1700 }
1701
1702 /*
1703 COMEDI_CANCEL
1704 cancel acquisition ioctl
1705
1706 arg:
1707 subdevice number
1708
1709 reads:
1710 nothing
1711
1712 writes:
1713 nothing
1714
1715 */
1716 static int do_cancel_ioctl(struct comedi_device *dev, unsigned int arg,
1717 void *file)
1718 {
1719 struct comedi_subdevice *s;
1720 int ret;
1721
1722 if (arg >= dev->n_subdevices)
1723 return -EINVAL;
1724 s = &dev->subdevices[arg];
1725 if (s->async == NULL)
1726 return -EINVAL;
1727
1728 if (!s->busy)
1729 return 0;
1730
1731 if (s->busy != file)
1732 return -EBUSY;
1733
1734 ret = do_cancel(dev, s);
1735
1736 return ret;
1737 }
1738
1739 /*
1740 COMEDI_POLL ioctl
1741 instructs driver to synchronize buffers
1742
1743 arg:
1744 subdevice number
1745
1746 reads:
1747 nothing
1748
1749 writes:
1750 nothing
1751
1752 */
1753 static int do_poll_ioctl(struct comedi_device *dev, unsigned int arg,
1754 void *file)
1755 {
1756 struct comedi_subdevice *s;
1757
1758 if (arg >= dev->n_subdevices)
1759 return -EINVAL;
1760 s = &dev->subdevices[arg];
1761
1762 if (!s->busy)
1763 return 0;
1764
1765 if (s->busy != file)
1766 return -EBUSY;
1767
1768 if (s->poll)
1769 return s->poll(dev, s);
1770
1771 return -EINVAL;
1772 }
1773
1774 static long comedi_unlocked_ioctl(struct file *file, unsigned int cmd,
1775 unsigned long arg)
1776 {
1777 const unsigned minor = iminor(file_inode(file));
1778 struct comedi_device *dev = file->private_data;
1779 int rc;
1780
1781 mutex_lock(&dev->mutex);
1782
1783 /* Device config is special, because it must work on
1784 * an unconfigured device. */
1785 if (cmd == COMEDI_DEVCONFIG) {
1786 if (minor >= COMEDI_NUM_BOARD_MINORS) {
1787 /* Device config not appropriate on non-board minors. */
1788 rc = -ENOTTY;
1789 goto done;
1790 }
1791 rc = do_devconfig_ioctl(dev,
1792 (struct comedi_devconfig __user *)arg);
1793 if (rc == 0) {
1794 if (arg == 0 &&
1795 dev->minor >= comedi_num_legacy_minors) {
1796 /* Successfully unconfigured a dynamically
1797 * allocated device. Try and remove it. */
1798 if (comedi_clear_board_dev(dev)) {
1799 mutex_unlock(&dev->mutex);
1800 comedi_free_board_dev(dev);
1801 return rc;
1802 }
1803 }
1804 }
1805 goto done;
1806 }
1807
1808 if (!dev->attached) {
1809 dev_dbg(dev->class_dev, "no driver attached\n");
1810 rc = -ENODEV;
1811 goto done;
1812 }
1813
1814 switch (cmd) {
1815 case COMEDI_BUFCONFIG:
1816 rc = do_bufconfig_ioctl(dev,
1817 (struct comedi_bufconfig __user *)arg);
1818 break;
1819 case COMEDI_DEVINFO:
1820 rc = do_devinfo_ioctl(dev, (struct comedi_devinfo __user *)arg,
1821 file);
1822 break;
1823 case COMEDI_SUBDINFO:
1824 rc = do_subdinfo_ioctl(dev,
1825 (struct comedi_subdinfo __user *)arg,
1826 file);
1827 break;
1828 case COMEDI_CHANINFO:
1829 rc = do_chaninfo_ioctl(dev, (void __user *)arg);
1830 break;
1831 case COMEDI_RANGEINFO:
1832 rc = do_rangeinfo_ioctl(dev, (void __user *)arg);
1833 break;
1834 case COMEDI_BUFINFO:
1835 rc = do_bufinfo_ioctl(dev,
1836 (struct comedi_bufinfo __user *)arg,
1837 file);
1838 break;
1839 case COMEDI_LOCK:
1840 rc = do_lock_ioctl(dev, arg, file);
1841 break;
1842 case COMEDI_UNLOCK:
1843 rc = do_unlock_ioctl(dev, arg, file);
1844 break;
1845 case COMEDI_CANCEL:
1846 rc = do_cancel_ioctl(dev, arg, file);
1847 break;
1848 case COMEDI_CMD:
1849 rc = do_cmd_ioctl(dev, (struct comedi_cmd __user *)arg, file);
1850 break;
1851 case COMEDI_CMDTEST:
1852 rc = do_cmdtest_ioctl(dev, (struct comedi_cmd __user *)arg,
1853 file);
1854 break;
1855 case COMEDI_INSNLIST:
1856 rc = do_insnlist_ioctl(dev,
1857 (struct comedi_insnlist __user *)arg,
1858 file);
1859 break;
1860 case COMEDI_INSN:
1861 rc = do_insn_ioctl(dev, (struct comedi_insn __user *)arg,
1862 file);
1863 break;
1864 case COMEDI_POLL:
1865 rc = do_poll_ioctl(dev, arg, file);
1866 break;
1867 default:
1868 rc = -ENOTTY;
1869 break;
1870 }
1871
1872 done:
1873 mutex_unlock(&dev->mutex);
1874 return rc;
1875 }
1876
1877 static void comedi_vm_open(struct vm_area_struct *area)
1878 {
1879 struct comedi_buf_map *bm;
1880
1881 bm = area->vm_private_data;
1882 comedi_buf_map_get(bm);
1883 }
1884
1885 static void comedi_vm_close(struct vm_area_struct *area)
1886 {
1887 struct comedi_buf_map *bm;
1888
1889 bm = area->vm_private_data;
1890 comedi_buf_map_put(bm);
1891 }
1892
1893 static struct vm_operations_struct comedi_vm_ops = {
1894 .open = comedi_vm_open,
1895 .close = comedi_vm_close,
1896 };
1897
1898 static int comedi_mmap(struct file *file, struct vm_area_struct *vma)
1899 {
1900 const unsigned minor = iminor(file_inode(file));
1901 struct comedi_device *dev = file->private_data;
1902 struct comedi_subdevice *s;
1903 struct comedi_async *async;
1904 struct comedi_buf_map *bm = NULL;
1905 unsigned long start = vma->vm_start;
1906 unsigned long size;
1907 int n_pages;
1908 int i;
1909 int retval;
1910
1911 /*
1912 * 'trylock' avoids circular dependency with current->mm->mmap_sem
1913 * and down-reading &dev->attach_lock should normally succeed without
1914 * contention unless the device is in the process of being attached
1915 * or detached.
1916 */
1917 if (!down_read_trylock(&dev->attach_lock))
1918 return -EAGAIN;
1919
1920 if (!dev->attached) {
1921 dev_dbg(dev->class_dev, "no driver attached\n");
1922 retval = -ENODEV;
1923 goto done;
1924 }
1925
1926 if (vma->vm_flags & VM_WRITE)
1927 s = comedi_write_subdevice(dev, minor);
1928 else
1929 s = comedi_read_subdevice(dev, minor);
1930 if (!s) {
1931 retval = -EINVAL;
1932 goto done;
1933 }
1934
1935 async = s->async;
1936 if (!async) {
1937 retval = -EINVAL;
1938 goto done;
1939 }
1940
1941 if (vma->vm_pgoff != 0) {
1942 dev_dbg(dev->class_dev, "mmap() offset must be 0.\n");
1943 retval = -EINVAL;
1944 goto done;
1945 }
1946
1947 size = vma->vm_end - vma->vm_start;
1948 if (size > async->prealloc_bufsz) {
1949 retval = -EFAULT;
1950 goto done;
1951 }
1952 if (size & (~PAGE_MASK)) {
1953 retval = -EFAULT;
1954 goto done;
1955 }
1956
1957 n_pages = size >> PAGE_SHIFT;
1958
1959 /* get reference to current buf map (if any) */
1960 bm = comedi_buf_map_from_subdev_get(s);
1961 if (!bm || n_pages > bm->n_pages) {
1962 retval = -EINVAL;
1963 goto done;
1964 }
1965 for (i = 0; i < n_pages; ++i) {
1966 struct comedi_buf_page *buf = &bm->page_list[i];
1967
1968 if (remap_pfn_range(vma, start,
1969 page_to_pfn(virt_to_page(buf->virt_addr)),
1970 PAGE_SIZE, PAGE_SHARED)) {
1971 retval = -EAGAIN;
1972 goto done;
1973 }
1974 start += PAGE_SIZE;
1975 }
1976
1977 vma->vm_ops = &comedi_vm_ops;
1978 vma->vm_private_data = bm;
1979
1980 vma->vm_ops->open(vma);
1981
1982 retval = 0;
1983 done:
1984 up_read(&dev->attach_lock);
1985 comedi_buf_map_put(bm); /* put reference to buf map - okay if NULL */
1986 return retval;
1987 }
1988
1989 static unsigned int comedi_poll(struct file *file, poll_table *wait)
1990 {
1991 unsigned int mask = 0;
1992 const unsigned minor = iminor(file_inode(file));
1993 struct comedi_device *dev = file->private_data;
1994 struct comedi_subdevice *s;
1995
1996 mutex_lock(&dev->mutex);
1997
1998 if (!dev->attached) {
1999 dev_dbg(dev->class_dev, "no driver attached\n");
2000 goto done;
2001 }
2002
2003 s = comedi_read_subdevice(dev, minor);
2004 if (s && s->async) {
2005 poll_wait(file, &s->async->wait_head, wait);
2006 if (!s->busy || !comedi_is_subdevice_running(s) ||
2007 comedi_buf_read_n_available(s) > 0)
2008 mask |= POLLIN | POLLRDNORM;
2009 }
2010
2011 s = comedi_write_subdevice(dev, minor);
2012 if (s && s->async) {
2013 unsigned int bps = bytes_per_sample(s);
2014
2015 poll_wait(file, &s->async->wait_head, wait);
2016 comedi_buf_write_alloc(s, s->async->prealloc_bufsz);
2017 if (!s->busy || !comedi_is_subdevice_running(s) ||
2018 comedi_buf_write_n_allocated(s) >= bps)
2019 mask |= POLLOUT | POLLWRNORM;
2020 }
2021
2022 done:
2023 mutex_unlock(&dev->mutex);
2024 return mask;
2025 }
2026
2027 static ssize_t comedi_write(struct file *file, const char __user *buf,
2028 size_t nbytes, loff_t *offset)
2029 {
2030 struct comedi_subdevice *s;
2031 struct comedi_async *async;
2032 int n, m, count = 0, retval = 0;
2033 DECLARE_WAITQUEUE(wait, current);
2034 const unsigned minor = iminor(file_inode(file));
2035 struct comedi_device *dev = file->private_data;
2036 bool on_wait_queue = false;
2037 bool attach_locked;
2038 unsigned int old_detach_count;
2039
2040 /* Protect against device detachment during operation. */
2041 down_read(&dev->attach_lock);
2042 attach_locked = true;
2043 old_detach_count = dev->detach_count;
2044
2045 if (!dev->attached) {
2046 dev_dbg(dev->class_dev, "no driver attached\n");
2047 retval = -ENODEV;
2048 goto out;
2049 }
2050
2051 s = comedi_write_subdevice(dev, minor);
2052 if (!s || !s->async) {
2053 retval = -EIO;
2054 goto out;
2055 }
2056
2057 async = s->async;
2058
2059 if (!s->busy || !nbytes)
2060 goto out;
2061 if (s->busy != file) {
2062 retval = -EACCES;
2063 goto out;
2064 }
2065
2066 add_wait_queue(&async->wait_head, &wait);
2067 on_wait_queue = true;
2068 while (nbytes > 0 && !retval) {
2069 set_current_state(TASK_INTERRUPTIBLE);
2070
2071 if (!comedi_is_subdevice_running(s)) {
2072 if (count == 0) {
2073 struct comedi_subdevice *new_s;
2074
2075 if (comedi_is_subdevice_in_error(s))
2076 retval = -EPIPE;
2077 else
2078 retval = 0;
2079 /*
2080 * To avoid deadlock, cannot acquire dev->mutex
2081 * while dev->attach_lock is held. Need to
2082 * remove task from the async wait queue before
2083 * releasing dev->attach_lock, as it might not
2084 * be valid afterwards.
2085 */
2086 remove_wait_queue(&async->wait_head, &wait);
2087 on_wait_queue = false;
2088 up_read(&dev->attach_lock);
2089 attach_locked = false;
2090 mutex_lock(&dev->mutex);
2091 /*
2092 * Become non-busy unless things have changed
2093 * behind our back. Checking dev->detach_count
2094 * is unchanged ought to be sufficient (unless
2095 * there have been 2**32 detaches in the
2096 * meantime!), but check the subdevice pointer
2097 * as well just in case.
2098 */
2099 new_s = comedi_write_subdevice(dev, minor);
2100 if (dev->attached &&
2101 old_detach_count == dev->detach_count &&
2102 s == new_s && new_s->async == async)
2103 do_become_nonbusy(dev, s);
2104 mutex_unlock(&dev->mutex);
2105 }
2106 break;
2107 }
2108
2109 n = nbytes;
2110
2111 m = n;
2112 if (async->buf_write_ptr + m > async->prealloc_bufsz)
2113 m = async->prealloc_bufsz - async->buf_write_ptr;
2114 comedi_buf_write_alloc(s, async->prealloc_bufsz);
2115 if (m > comedi_buf_write_n_allocated(s))
2116 m = comedi_buf_write_n_allocated(s);
2117 if (m < n)
2118 n = m;
2119
2120 if (n == 0) {
2121 if (file->f_flags & O_NONBLOCK) {
2122 retval = -EAGAIN;
2123 break;
2124 }
2125 schedule();
2126 if (signal_pending(current)) {
2127 retval = -ERESTARTSYS;
2128 break;
2129 }
2130 if (!s->busy)
2131 break;
2132 if (s->busy != file) {
2133 retval = -EACCES;
2134 break;
2135 }
2136 continue;
2137 }
2138
2139 m = copy_from_user(async->prealloc_buf + async->buf_write_ptr,
2140 buf, n);
2141 if (m) {
2142 n -= m;
2143 retval = -EFAULT;
2144 }
2145 comedi_buf_write_free(s, n);
2146
2147 count += n;
2148 nbytes -= n;
2149
2150 buf += n;
2151 break; /* makes device work like a pipe */
2152 }
2153 out:
2154 if (on_wait_queue)
2155 remove_wait_queue(&async->wait_head, &wait);
2156 set_current_state(TASK_RUNNING);
2157 if (attach_locked)
2158 up_read(&dev->attach_lock);
2159
2160 return count ? count : retval;
2161 }
2162
2163 static ssize_t comedi_read(struct file *file, char __user *buf, size_t nbytes,
2164 loff_t *offset)
2165 {
2166 struct comedi_subdevice *s;
2167 struct comedi_async *async;
2168 int n, m, count = 0, retval = 0;
2169 DECLARE_WAITQUEUE(wait, current);
2170 const unsigned minor = iminor(file_inode(file));
2171 struct comedi_device *dev = file->private_data;
2172 unsigned int old_detach_count;
2173 bool become_nonbusy = false;
2174 bool attach_locked;
2175
2176 /* Protect against device detachment during operation. */
2177 down_read(&dev->attach_lock);
2178 attach_locked = true;
2179 old_detach_count = dev->detach_count;
2180
2181 if (!dev->attached) {
2182 dev_dbg(dev->class_dev, "no driver attached\n");
2183 retval = -ENODEV;
2184 goto out;
2185 }
2186
2187 s = comedi_read_subdevice(dev, minor);
2188 if (!s || !s->async) {
2189 retval = -EIO;
2190 goto out;
2191 }
2192
2193 async = s->async;
2194 if (!s->busy || !nbytes)
2195 goto out;
2196 if (s->busy != file) {
2197 retval = -EACCES;
2198 goto out;
2199 }
2200
2201 add_wait_queue(&async->wait_head, &wait);
2202 while (nbytes > 0 && !retval) {
2203 set_current_state(TASK_INTERRUPTIBLE);
2204
2205 n = nbytes;
2206
2207 m = comedi_buf_read_n_available(s);
2208 if (async->buf_read_ptr + m > async->prealloc_bufsz)
2209 m = async->prealloc_bufsz - async->buf_read_ptr;
2210 if (m < n)
2211 n = m;
2212
2213 if (n == 0) {
2214 if (!comedi_is_subdevice_running(s)) {
2215 if (comedi_is_subdevice_in_error(s))
2216 retval = -EPIPE;
2217 else
2218 retval = 0;
2219 become_nonbusy = true;
2220 break;
2221 }
2222 if (file->f_flags & O_NONBLOCK) {
2223 retval = -EAGAIN;
2224 break;
2225 }
2226 schedule();
2227 if (signal_pending(current)) {
2228 retval = -ERESTARTSYS;
2229 break;
2230 }
2231 if (!s->busy) {
2232 retval = 0;
2233 break;
2234 }
2235 if (s->busy != file) {
2236 retval = -EACCES;
2237 break;
2238 }
2239 continue;
2240 }
2241 m = copy_to_user(buf, async->prealloc_buf +
2242 async->buf_read_ptr, n);
2243 if (m) {
2244 n -= m;
2245 retval = -EFAULT;
2246 }
2247
2248 comedi_buf_read_alloc(s, n);
2249 comedi_buf_read_free(s, n);
2250
2251 count += n;
2252 nbytes -= n;
2253
2254 buf += n;
2255 break; /* makes device work like a pipe */
2256 }
2257 remove_wait_queue(&async->wait_head, &wait);
2258 set_current_state(TASK_RUNNING);
2259 if (become_nonbusy || comedi_is_subdevice_idle(s)) {
2260 struct comedi_subdevice *new_s;
2261
2262 /*
2263 * To avoid deadlock, cannot acquire dev->mutex
2264 * while dev->attach_lock is held.
2265 */
2266 up_read(&dev->attach_lock);
2267 attach_locked = false;
2268 mutex_lock(&dev->mutex);
2269 /*
2270 * Check device hasn't become detached behind our back.
2271 * Checking dev->detach_count is unchanged ought to be
2272 * sufficient (unless there have been 2**32 detaches in the
2273 * meantime!), but check the subdevice pointer as well just in
2274 * case.
2275 */
2276 new_s = comedi_read_subdevice(dev, minor);
2277 if (dev->attached && old_detach_count == dev->detach_count &&
2278 s == new_s && new_s->async == async) {
2279 if (become_nonbusy || comedi_buf_n_bytes_ready(s) == 0)
2280 do_become_nonbusy(dev, s);
2281 }
2282 mutex_unlock(&dev->mutex);
2283 }
2284 out:
2285 if (attach_locked)
2286 up_read(&dev->attach_lock);
2287
2288 return count ? count : retval;
2289 }
2290
2291 static int comedi_open(struct inode *inode, struct file *file)
2292 {
2293 const unsigned minor = iminor(inode);
2294 struct comedi_device *dev = comedi_dev_get_from_minor(minor);
2295 int rc;
2296
2297 if (!dev) {
2298 pr_debug("invalid minor number\n");
2299 return -ENODEV;
2300 }
2301
2302 mutex_lock(&dev->mutex);
2303 if (!dev->attached && !capable(CAP_NET_ADMIN)) {
2304 dev_dbg(dev->class_dev, "not attached and not CAP_NET_ADMIN\n");
2305 rc = -ENODEV;
2306 goto out;
2307 }
2308 if (dev->attached && dev->use_count == 0) {
2309 if (!try_module_get(dev->driver->module)) {
2310 rc = -ENOSYS;
2311 goto out;
2312 }
2313 if (dev->open) {
2314 rc = dev->open(dev);
2315 if (rc < 0) {
2316 module_put(dev->driver->module);
2317 goto out;
2318 }
2319 }
2320 }
2321
2322 dev->use_count++;
2323 file->private_data = dev;
2324 rc = 0;
2325
2326 out:
2327 mutex_unlock(&dev->mutex);
2328 if (rc)
2329 comedi_dev_put(dev);
2330 return rc;
2331 }
2332
2333 static int comedi_fasync(int fd, struct file *file, int on)
2334 {
2335 struct comedi_device *dev = file->private_data;
2336
2337 return fasync_helper(fd, file, on, &dev->async_queue);
2338 }
2339
2340 static int comedi_close(struct inode *inode, struct file *file)
2341 {
2342 struct comedi_device *dev = file->private_data;
2343 struct comedi_subdevice *s = NULL;
2344 int i;
2345
2346 mutex_lock(&dev->mutex);
2347
2348 if (dev->subdevices) {
2349 for (i = 0; i < dev->n_subdevices; i++) {
2350 s = &dev->subdevices[i];
2351
2352 if (s->busy == file)
2353 do_cancel(dev, s);
2354 if (s->lock == file)
2355 s->lock = NULL;
2356 }
2357 }
2358 if (dev->attached && dev->use_count == 1) {
2359 if (dev->close)
2360 dev->close(dev);
2361 module_put(dev->driver->module);
2362 }
2363
2364 dev->use_count--;
2365
2366 mutex_unlock(&dev->mutex);
2367 comedi_dev_put(dev);
2368
2369 return 0;
2370 }
2371
2372 static const struct file_operations comedi_fops = {
2373 .owner = THIS_MODULE,
2374 .unlocked_ioctl = comedi_unlocked_ioctl,
2375 .compat_ioctl = comedi_compat_ioctl,
2376 .open = comedi_open,
2377 .release = comedi_close,
2378 .read = comedi_read,
2379 .write = comedi_write,
2380 .mmap = comedi_mmap,
2381 .poll = comedi_poll,
2382 .fasync = comedi_fasync,
2383 .llseek = noop_llseek,
2384 };
2385
2386 void comedi_event(struct comedi_device *dev, struct comedi_subdevice *s)
2387 {
2388 struct comedi_async *async = s->async;
2389 unsigned runflags = 0;
2390 unsigned runflags_mask = 0;
2391
2392 if (!comedi_is_subdevice_running(s))
2393 return;
2394
2395 if (s->
2396 async->events & (COMEDI_CB_EOA | COMEDI_CB_ERROR |
2397 COMEDI_CB_OVERFLOW)) {
2398 runflags_mask |= SRF_RUNNING;
2399 }
2400 /* remember if an error event has occurred, so an error
2401 * can be returned the next time the user does a read() */
2402 if (s->async->events & (COMEDI_CB_ERROR | COMEDI_CB_OVERFLOW)) {
2403 runflags_mask |= SRF_ERROR;
2404 runflags |= SRF_ERROR;
2405 }
2406 if (runflags_mask) {
2407 /*sets SRF_ERROR and SRF_RUNNING together atomically */
2408 comedi_set_subdevice_runflags(s, runflags_mask, runflags);
2409 }
2410
2411 if (async->cb_mask & s->async->events) {
2412 wake_up_interruptible(&async->wait_head);
2413 if (s->subdev_flags & SDF_CMD_READ)
2414 kill_fasync(&dev->async_queue, SIGIO, POLL_IN);
2415 if (s->subdev_flags & SDF_CMD_WRITE)
2416 kill_fasync(&dev->async_queue, SIGIO, POLL_OUT);
2417 }
2418 s->async->events = 0;
2419 }
2420 EXPORT_SYMBOL_GPL(comedi_event);
2421
2422 /* Note: the ->mutex is pre-locked on successful return */
2423 struct comedi_device *comedi_alloc_board_minor(struct device *hardware_device)
2424 {
2425 struct comedi_device *dev;
2426 struct device *csdev;
2427 unsigned i;
2428
2429 dev = kzalloc(sizeof(*dev), GFP_KERNEL);
2430 if (dev == NULL)
2431 return ERR_PTR(-ENOMEM);
2432 comedi_device_init(dev);
2433 comedi_set_hw_dev(dev, hardware_device);
2434 mutex_lock(&dev->mutex);
2435 mutex_lock(&comedi_board_minor_table_lock);
2436 for (i = hardware_device ? comedi_num_legacy_minors : 0;
2437 i < COMEDI_NUM_BOARD_MINORS; ++i) {
2438 if (comedi_board_minor_table[i] == NULL) {
2439 comedi_board_minor_table[i] = dev;
2440 break;
2441 }
2442 }
2443 mutex_unlock(&comedi_board_minor_table_lock);
2444 if (i == COMEDI_NUM_BOARD_MINORS) {
2445 mutex_unlock(&dev->mutex);
2446 comedi_device_cleanup(dev);
2447 comedi_dev_put(dev);
2448 pr_err("ran out of minor numbers for board device files\n");
2449 return ERR_PTR(-EBUSY);
2450 }
2451 dev->minor = i;
2452 csdev = device_create(comedi_class, hardware_device,
2453 MKDEV(COMEDI_MAJOR, i), NULL, "comedi%i", i);
2454 if (!IS_ERR(csdev))
2455 dev->class_dev = get_device(csdev);
2456
2457 /* Note: dev->mutex needs to be unlocked by the caller. */
2458 return dev;
2459 }
2460
2461 static void comedi_free_board_minor(unsigned minor)
2462 {
2463 BUG_ON(minor >= COMEDI_NUM_BOARD_MINORS);
2464 comedi_free_board_dev(comedi_clear_board_minor(minor));
2465 }
2466
2467 void comedi_release_hardware_device(struct device *hardware_device)
2468 {
2469 int minor;
2470 struct comedi_device *dev;
2471
2472 for (minor = comedi_num_legacy_minors; minor < COMEDI_NUM_BOARD_MINORS;
2473 minor++) {
2474 mutex_lock(&comedi_board_minor_table_lock);
2475 dev = comedi_board_minor_table[minor];
2476 if (dev && dev->hw_dev == hardware_device) {
2477 comedi_board_minor_table[minor] = NULL;
2478 mutex_unlock(&comedi_board_minor_table_lock);
2479 comedi_free_board_dev(dev);
2480 break;
2481 }
2482 mutex_unlock(&comedi_board_minor_table_lock);
2483 }
2484 }
2485
2486 int comedi_alloc_subdevice_minor(struct comedi_subdevice *s)
2487 {
2488 struct comedi_device *dev = s->device;
2489 struct device *csdev;
2490 unsigned i;
2491
2492 mutex_lock(&comedi_subdevice_minor_table_lock);
2493 for (i = 0; i < COMEDI_NUM_SUBDEVICE_MINORS; ++i) {
2494 if (comedi_subdevice_minor_table[i] == NULL) {
2495 comedi_subdevice_minor_table[i] = s;
2496 break;
2497 }
2498 }
2499 mutex_unlock(&comedi_subdevice_minor_table_lock);
2500 if (i == COMEDI_NUM_SUBDEVICE_MINORS) {
2501 pr_err("ran out of minor numbers for subdevice files\n");
2502 return -EBUSY;
2503 }
2504 i += COMEDI_NUM_BOARD_MINORS;
2505 s->minor = i;
2506 csdev = device_create(comedi_class, dev->class_dev,
2507 MKDEV(COMEDI_MAJOR, i), NULL, "comedi%i_subd%i",
2508 dev->minor, s->index);
2509 if (!IS_ERR(csdev))
2510 s->class_dev = csdev;
2511
2512 return 0;
2513 }
2514
2515 void comedi_free_subdevice_minor(struct comedi_subdevice *s)
2516 {
2517 unsigned int i;
2518
2519 if (s == NULL)
2520 return;
2521 if (s->minor < 0)
2522 return;
2523
2524 BUG_ON(s->minor >= COMEDI_NUM_MINORS);
2525 BUG_ON(s->minor < COMEDI_NUM_BOARD_MINORS);
2526
2527 i = s->minor - COMEDI_NUM_BOARD_MINORS;
2528 mutex_lock(&comedi_subdevice_minor_table_lock);
2529 if (s == comedi_subdevice_minor_table[i])
2530 comedi_subdevice_minor_table[i] = NULL;
2531 mutex_unlock(&comedi_subdevice_minor_table_lock);
2532 if (s->class_dev) {
2533 device_destroy(comedi_class, MKDEV(COMEDI_MAJOR, s->minor));
2534 s->class_dev = NULL;
2535 }
2536 }
2537
2538 static void comedi_cleanup_board_minors(void)
2539 {
2540 unsigned i;
2541
2542 for (i = 0; i < COMEDI_NUM_BOARD_MINORS; i++)
2543 comedi_free_board_minor(i);
2544 }
2545
2546 static int __init comedi_init(void)
2547 {
2548 int i;
2549 int retval;
2550
2551 pr_info("version " COMEDI_RELEASE " - http://www.comedi.org\n");
2552
2553 if (comedi_num_legacy_minors < 0 ||
2554 comedi_num_legacy_minors > COMEDI_NUM_BOARD_MINORS) {
2555 pr_err("invalid value for module parameter \"comedi_num_legacy_minors\". Valid values are 0 through %i.\n",
2556 COMEDI_NUM_BOARD_MINORS);
2557 return -EINVAL;
2558 }
2559
2560 retval = register_chrdev_region(MKDEV(COMEDI_MAJOR, 0),
2561 COMEDI_NUM_MINORS, "comedi");
2562 if (retval)
2563 return -EIO;
2564 cdev_init(&comedi_cdev, &comedi_fops);
2565 comedi_cdev.owner = THIS_MODULE;
2566
2567 retval = kobject_set_name(&comedi_cdev.kobj, "comedi");
2568 if (retval) {
2569 unregister_chrdev_region(MKDEV(COMEDI_MAJOR, 0),
2570 COMEDI_NUM_MINORS);
2571 return retval;
2572 }
2573
2574 if (cdev_add(&comedi_cdev, MKDEV(COMEDI_MAJOR, 0), COMEDI_NUM_MINORS)) {
2575 unregister_chrdev_region(MKDEV(COMEDI_MAJOR, 0),
2576 COMEDI_NUM_MINORS);
2577 return -EIO;
2578 }
2579 comedi_class = class_create(THIS_MODULE, "comedi");
2580 if (IS_ERR(comedi_class)) {
2581 pr_err("failed to create class\n");
2582 cdev_del(&comedi_cdev);
2583 unregister_chrdev_region(MKDEV(COMEDI_MAJOR, 0),
2584 COMEDI_NUM_MINORS);
2585 return PTR_ERR(comedi_class);
2586 }
2587
2588 comedi_class->dev_groups = comedi_dev_groups;
2589
2590 /* XXX requires /proc interface */
2591 comedi_proc_init();
2592
2593 /* create devices files for legacy/manual use */
2594 for (i = 0; i < comedi_num_legacy_minors; i++) {
2595 struct comedi_device *dev;
2596
2597 dev = comedi_alloc_board_minor(NULL);
2598 if (IS_ERR(dev)) {
2599 comedi_cleanup_board_minors();
2600 cdev_del(&comedi_cdev);
2601 unregister_chrdev_region(MKDEV(COMEDI_MAJOR, 0),
2602 COMEDI_NUM_MINORS);
2603 return PTR_ERR(dev);
2604 }
2605 /* comedi_alloc_board_minor() locked the mutex */
2606 mutex_unlock(&dev->mutex);
2607 }
2608
2609 return 0;
2610 }
2611 module_init(comedi_init);
2612
2613 static void __exit comedi_cleanup(void)
2614 {
2615 int i;
2616
2617 comedi_cleanup_board_minors();
2618 for (i = 0; i < COMEDI_NUM_BOARD_MINORS; ++i)
2619 BUG_ON(comedi_board_minor_table[i]);
2620 for (i = 0; i < COMEDI_NUM_SUBDEVICE_MINORS; ++i)
2621 BUG_ON(comedi_subdevice_minor_table[i]);
2622
2623 class_destroy(comedi_class);
2624 cdev_del(&comedi_cdev);
2625 unregister_chrdev_region(MKDEV(COMEDI_MAJOR, 0), COMEDI_NUM_MINORS);
2626
2627 comedi_proc_cleanup();
2628 }
2629 module_exit(comedi_cleanup);
2630
2631 MODULE_AUTHOR("http://www.comedi.org");
2632 MODULE_DESCRIPTION("Comedi core module");
2633 MODULE_LICENSE("GPL");
This page took 0.081672 seconds and 6 git commands to generate.