Merge tag 'kconfig-v4.21-2' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiro...
[linux-2.6-block.git] / lib / iov_iter.c
CommitLineData
4f18cd31 1#include <linux/export.h>
2f8b5444 2#include <linux/bvec.h>
4f18cd31
AV
3#include <linux/uio.h>
4#include <linux/pagemap.h>
91f79c43
AV
5#include <linux/slab.h>
6#include <linux/vmalloc.h>
241699cd 7#include <linux/splice.h>
a604ec7e 8#include <net/checksum.h>
d05f4435 9#include <linux/scatterlist.h>
4f18cd31 10
241699cd
AV
11#define PIPE_PARANOIA /* for now */
12
04a31165
AV
13#define iterate_iovec(i, n, __v, __p, skip, STEP) { \
14 size_t left; \
15 size_t wanted = n; \
16 __p = i->iov; \
17 __v.iov_len = min(n, __p->iov_len - skip); \
18 if (likely(__v.iov_len)) { \
19 __v.iov_base = __p->iov_base + skip; \
20 left = (STEP); \
21 __v.iov_len -= left; \
22 skip += __v.iov_len; \
23 n -= __v.iov_len; \
24 } else { \
25 left = 0; \
26 } \
27 while (unlikely(!left && n)) { \
28 __p++; \
29 __v.iov_len = min(n, __p->iov_len); \
30 if (unlikely(!__v.iov_len)) \
31 continue; \
32 __v.iov_base = __p->iov_base; \
33 left = (STEP); \
34 __v.iov_len -= left; \
35 skip = __v.iov_len; \
36 n -= __v.iov_len; \
37 } \
38 n = wanted - n; \
39}
40
a280455f
AV
41#define iterate_kvec(i, n, __v, __p, skip, STEP) { \
42 size_t wanted = n; \
43 __p = i->kvec; \
44 __v.iov_len = min(n, __p->iov_len - skip); \
45 if (likely(__v.iov_len)) { \
46 __v.iov_base = __p->iov_base + skip; \
47 (void)(STEP); \
48 skip += __v.iov_len; \
49 n -= __v.iov_len; \
50 } \
51 while (unlikely(n)) { \
52 __p++; \
53 __v.iov_len = min(n, __p->iov_len); \
54 if (unlikely(!__v.iov_len)) \
55 continue; \
56 __v.iov_base = __p->iov_base; \
57 (void)(STEP); \
58 skip = __v.iov_len; \
59 n -= __v.iov_len; \
60 } \
61 n = wanted; \
62}
63
1bdc76ae
ML
64#define iterate_bvec(i, n, __v, __bi, skip, STEP) { \
65 struct bvec_iter __start; \
66 __start.bi_size = n; \
67 __start.bi_bvec_done = skip; \
68 __start.bi_idx = 0; \
69 for_each_bvec(__v, i->bvec, __bi, __start) { \
70 if (!__v.bv_len) \
04a31165 71 continue; \
04a31165 72 (void)(STEP); \
04a31165 73 } \
04a31165
AV
74}
75
a280455f 76#define iterate_all_kinds(i, n, v, I, B, K) { \
33844e66
AV
77 if (likely(n)) { \
78 size_t skip = i->iov_offset; \
79 if (unlikely(i->type & ITER_BVEC)) { \
80 struct bio_vec v; \
81 struct bvec_iter __bi; \
82 iterate_bvec(i, n, v, __bi, skip, (B)) \
83 } else if (unlikely(i->type & ITER_KVEC)) { \
84 const struct kvec *kvec; \
85 struct kvec v; \
86 iterate_kvec(i, n, v, kvec, skip, (K)) \
9ea9ce04 87 } else if (unlikely(i->type & ITER_DISCARD)) { \
33844e66
AV
88 } else { \
89 const struct iovec *iov; \
90 struct iovec v; \
91 iterate_iovec(i, n, v, iov, skip, (I)) \
92 } \
04a31165
AV
93 } \
94}
95
a280455f 96#define iterate_and_advance(i, n, v, I, B, K) { \
dd254f5a
AV
97 if (unlikely(i->count < n)) \
98 n = i->count; \
19f18459 99 if (i->count) { \
dd254f5a
AV
100 size_t skip = i->iov_offset; \
101 if (unlikely(i->type & ITER_BVEC)) { \
1bdc76ae 102 const struct bio_vec *bvec = i->bvec; \
dd254f5a 103 struct bio_vec v; \
1bdc76ae
ML
104 struct bvec_iter __bi; \
105 iterate_bvec(i, n, v, __bi, skip, (B)) \
106 i->bvec = __bvec_iter_bvec(i->bvec, __bi); \
107 i->nr_segs -= i->bvec - bvec; \
108 skip = __bi.bi_bvec_done; \
dd254f5a
AV
109 } else if (unlikely(i->type & ITER_KVEC)) { \
110 const struct kvec *kvec; \
111 struct kvec v; \
112 iterate_kvec(i, n, v, kvec, skip, (K)) \
113 if (skip == kvec->iov_len) { \
114 kvec++; \
115 skip = 0; \
116 } \
117 i->nr_segs -= kvec - i->kvec; \
118 i->kvec = kvec; \
9ea9ce04
DH
119 } else if (unlikely(i->type & ITER_DISCARD)) { \
120 skip += n; \
dd254f5a
AV
121 } else { \
122 const struct iovec *iov; \
123 struct iovec v; \
124 iterate_iovec(i, n, v, iov, skip, (I)) \
125 if (skip == iov->iov_len) { \
126 iov++; \
127 skip = 0; \
128 } \
129 i->nr_segs -= iov - i->iov; \
130 i->iov = iov; \
7ce2a91e 131 } \
dd254f5a
AV
132 i->count -= n; \
133 i->iov_offset = skip; \
7ce2a91e 134 } \
7ce2a91e
AV
135}
136
09fc68dc
AV
137static int copyout(void __user *to, const void *from, size_t n)
138{
139 if (access_ok(VERIFY_WRITE, to, n)) {
140 kasan_check_read(from, n);
141 n = raw_copy_to_user(to, from, n);
142 }
143 return n;
144}
145
146static int copyin(void *to, const void __user *from, size_t n)
147{
148 if (access_ok(VERIFY_READ, from, n)) {
149 kasan_check_write(to, n);
150 n = raw_copy_from_user(to, from, n);
151 }
152 return n;
153}
154
62a8067a 155static size_t copy_page_to_iter_iovec(struct page *page, size_t offset, size_t bytes,
4f18cd31
AV
156 struct iov_iter *i)
157{
158 size_t skip, copy, left, wanted;
159 const struct iovec *iov;
160 char __user *buf;
161 void *kaddr, *from;
162
163 if (unlikely(bytes > i->count))
164 bytes = i->count;
165
166 if (unlikely(!bytes))
167 return 0;
168
09fc68dc 169 might_fault();
4f18cd31
AV
170 wanted = bytes;
171 iov = i->iov;
172 skip = i->iov_offset;
173 buf = iov->iov_base + skip;
174 copy = min(bytes, iov->iov_len - skip);
175
3fa6c507 176 if (IS_ENABLED(CONFIG_HIGHMEM) && !fault_in_pages_writeable(buf, copy)) {
4f18cd31
AV
177 kaddr = kmap_atomic(page);
178 from = kaddr + offset;
179
180 /* first chunk, usually the only one */
09fc68dc 181 left = copyout(buf, from, copy);
4f18cd31
AV
182 copy -= left;
183 skip += copy;
184 from += copy;
185 bytes -= copy;
186
187 while (unlikely(!left && bytes)) {
188 iov++;
189 buf = iov->iov_base;
190 copy = min(bytes, iov->iov_len);
09fc68dc 191 left = copyout(buf, from, copy);
4f18cd31
AV
192 copy -= left;
193 skip = copy;
194 from += copy;
195 bytes -= copy;
196 }
197 if (likely(!bytes)) {
198 kunmap_atomic(kaddr);
199 goto done;
200 }
201 offset = from - kaddr;
202 buf += copy;
203 kunmap_atomic(kaddr);
204 copy = min(bytes, iov->iov_len - skip);
205 }
206 /* Too bad - revert to non-atomic kmap */
3fa6c507 207
4f18cd31
AV
208 kaddr = kmap(page);
209 from = kaddr + offset;
09fc68dc 210 left = copyout(buf, from, copy);
4f18cd31
AV
211 copy -= left;
212 skip += copy;
213 from += copy;
214 bytes -= copy;
215 while (unlikely(!left && bytes)) {
216 iov++;
217 buf = iov->iov_base;
218 copy = min(bytes, iov->iov_len);
09fc68dc 219 left = copyout(buf, from, copy);
4f18cd31
AV
220 copy -= left;
221 skip = copy;
222 from += copy;
223 bytes -= copy;
224 }
225 kunmap(page);
3fa6c507 226
4f18cd31 227done:
81055e58
AV
228 if (skip == iov->iov_len) {
229 iov++;
230 skip = 0;
231 }
4f18cd31
AV
232 i->count -= wanted - bytes;
233 i->nr_segs -= iov - i->iov;
234 i->iov = iov;
235 i->iov_offset = skip;
236 return wanted - bytes;
237}
4f18cd31 238
62a8067a 239static size_t copy_page_from_iter_iovec(struct page *page, size_t offset, size_t bytes,
f0d1bec9
AV
240 struct iov_iter *i)
241{
242 size_t skip, copy, left, wanted;
243 const struct iovec *iov;
244 char __user *buf;
245 void *kaddr, *to;
246
247 if (unlikely(bytes > i->count))
248 bytes = i->count;
249
250 if (unlikely(!bytes))
251 return 0;
252
09fc68dc 253 might_fault();
f0d1bec9
AV
254 wanted = bytes;
255 iov = i->iov;
256 skip = i->iov_offset;
257 buf = iov->iov_base + skip;
258 copy = min(bytes, iov->iov_len - skip);
259
3fa6c507 260 if (IS_ENABLED(CONFIG_HIGHMEM) && !fault_in_pages_readable(buf, copy)) {
f0d1bec9
AV
261 kaddr = kmap_atomic(page);
262 to = kaddr + offset;
263
264 /* first chunk, usually the only one */
09fc68dc 265 left = copyin(to, buf, copy);
f0d1bec9
AV
266 copy -= left;
267 skip += copy;
268 to += copy;
269 bytes -= copy;
270
271 while (unlikely(!left && bytes)) {
272 iov++;
273 buf = iov->iov_base;
274 copy = min(bytes, iov->iov_len);
09fc68dc 275 left = copyin(to, buf, copy);
f0d1bec9
AV
276 copy -= left;
277 skip = copy;
278 to += copy;
279 bytes -= copy;
280 }
281 if (likely(!bytes)) {
282 kunmap_atomic(kaddr);
283 goto done;
284 }
285 offset = to - kaddr;
286 buf += copy;
287 kunmap_atomic(kaddr);
288 copy = min(bytes, iov->iov_len - skip);
289 }
290 /* Too bad - revert to non-atomic kmap */
3fa6c507 291
f0d1bec9
AV
292 kaddr = kmap(page);
293 to = kaddr + offset;
09fc68dc 294 left = copyin(to, buf, copy);
f0d1bec9
AV
295 copy -= left;
296 skip += copy;
297 to += copy;
298 bytes -= copy;
299 while (unlikely(!left && bytes)) {
300 iov++;
301 buf = iov->iov_base;
302 copy = min(bytes, iov->iov_len);
09fc68dc 303 left = copyin(to, buf, copy);
f0d1bec9
AV
304 copy -= left;
305 skip = copy;
306 to += copy;
307 bytes -= copy;
308 }
309 kunmap(page);
3fa6c507 310
f0d1bec9 311done:
81055e58
AV
312 if (skip == iov->iov_len) {
313 iov++;
314 skip = 0;
315 }
f0d1bec9
AV
316 i->count -= wanted - bytes;
317 i->nr_segs -= iov - i->iov;
318 i->iov = iov;
319 i->iov_offset = skip;
320 return wanted - bytes;
321}
f0d1bec9 322
241699cd
AV
323#ifdef PIPE_PARANOIA
324static bool sanity(const struct iov_iter *i)
325{
326 struct pipe_inode_info *pipe = i->pipe;
327 int idx = i->idx;
328 int next = pipe->curbuf + pipe->nrbufs;
329 if (i->iov_offset) {
330 struct pipe_buffer *p;
331 if (unlikely(!pipe->nrbufs))
332 goto Bad; // pipe must be non-empty
333 if (unlikely(idx != ((next - 1) & (pipe->buffers - 1))))
334 goto Bad; // must be at the last buffer...
335
336 p = &pipe->bufs[idx];
337 if (unlikely(p->offset + p->len != i->iov_offset))
338 goto Bad; // ... at the end of segment
339 } else {
340 if (idx != (next & (pipe->buffers - 1)))
341 goto Bad; // must be right after the last buffer
342 }
343 return true;
344Bad:
345 printk(KERN_ERR "idx = %d, offset = %zd\n", i->idx, i->iov_offset);
346 printk(KERN_ERR "curbuf = %d, nrbufs = %d, buffers = %d\n",
347 pipe->curbuf, pipe->nrbufs, pipe->buffers);
348 for (idx = 0; idx < pipe->buffers; idx++)
349 printk(KERN_ERR "[%p %p %d %d]\n",
350 pipe->bufs[idx].ops,
351 pipe->bufs[idx].page,
352 pipe->bufs[idx].offset,
353 pipe->bufs[idx].len);
354 WARN_ON(1);
355 return false;
356}
357#else
358#define sanity(i) true
359#endif
360
361static inline int next_idx(int idx, struct pipe_inode_info *pipe)
362{
363 return (idx + 1) & (pipe->buffers - 1);
364}
365
366static size_t copy_page_to_iter_pipe(struct page *page, size_t offset, size_t bytes,
367 struct iov_iter *i)
368{
369 struct pipe_inode_info *pipe = i->pipe;
370 struct pipe_buffer *buf;
371 size_t off;
372 int idx;
373
374 if (unlikely(bytes > i->count))
375 bytes = i->count;
376
377 if (unlikely(!bytes))
378 return 0;
379
380 if (!sanity(i))
381 return 0;
382
383 off = i->iov_offset;
384 idx = i->idx;
385 buf = &pipe->bufs[idx];
386 if (off) {
387 if (offset == off && buf->page == page) {
388 /* merge with the last one */
389 buf->len += bytes;
390 i->iov_offset += bytes;
391 goto out;
392 }
393 idx = next_idx(idx, pipe);
394 buf = &pipe->bufs[idx];
395 }
396 if (idx == pipe->curbuf && pipe->nrbufs)
397 return 0;
398 pipe->nrbufs++;
399 buf->ops = &page_cache_pipe_buf_ops;
400 get_page(buf->page = page);
401 buf->offset = offset;
402 buf->len = bytes;
403 i->iov_offset = offset + bytes;
404 i->idx = idx;
405out:
406 i->count -= bytes;
407 return bytes;
408}
409
171a0203
AA
410/*
411 * Fault in one or more iovecs of the given iov_iter, to a maximum length of
412 * bytes. For each iovec, fault in each page that constitutes the iovec.
413 *
414 * Return 0 on success, or non-zero if the memory could not be accessed (i.e.
415 * because it is an invalid address).
416 */
d4690f1e 417int iov_iter_fault_in_readable(struct iov_iter *i, size_t bytes)
171a0203
AA
418{
419 size_t skip = i->iov_offset;
420 const struct iovec *iov;
421 int err;
422 struct iovec v;
423
424 if (!(i->type & (ITER_BVEC|ITER_KVEC))) {
425 iterate_iovec(i, bytes, v, iov, skip, ({
4bce9f6e 426 err = fault_in_pages_readable(v.iov_base, v.iov_len);
171a0203
AA
427 if (unlikely(err))
428 return err;
429 0;}))
430 }
431 return 0;
432}
d4690f1e 433EXPORT_SYMBOL(iov_iter_fault_in_readable);
171a0203 434
aa563d7b 435void iov_iter_init(struct iov_iter *i, unsigned int direction,
71d8e532
AV
436 const struct iovec *iov, unsigned long nr_segs,
437 size_t count)
438{
aa563d7b
DH
439 WARN_ON(direction & ~(READ | WRITE));
440 direction &= READ | WRITE;
441
71d8e532 442 /* It will get better. Eventually... */
db68ce10 443 if (uaccess_kernel()) {
aa563d7b 444 i->type = ITER_KVEC | direction;
a280455f
AV
445 i->kvec = (struct kvec *)iov;
446 } else {
aa563d7b 447 i->type = ITER_IOVEC | direction;
a280455f
AV
448 i->iov = iov;
449 }
71d8e532
AV
450 i->nr_segs = nr_segs;
451 i->iov_offset = 0;
452 i->count = count;
453}
454EXPORT_SYMBOL(iov_iter_init);
7b2c99d1 455
62a8067a
AV
456static void memcpy_from_page(char *to, struct page *page, size_t offset, size_t len)
457{
458 char *from = kmap_atomic(page);
459 memcpy(to, from + offset, len);
460 kunmap_atomic(from);
461}
462
36f7a8a4 463static void memcpy_to_page(struct page *page, size_t offset, const char *from, size_t len)
62a8067a
AV
464{
465 char *to = kmap_atomic(page);
466 memcpy(to + offset, from, len);
467 kunmap_atomic(to);
468}
469
c35e0248
MW
470static void memzero_page(struct page *page, size_t offset, size_t len)
471{
472 char *addr = kmap_atomic(page);
473 memset(addr + offset, 0, len);
474 kunmap_atomic(addr);
475}
476
241699cd
AV
477static inline bool allocated(struct pipe_buffer *buf)
478{
479 return buf->ops == &default_pipe_buf_ops;
480}
481
482static inline void data_start(const struct iov_iter *i, int *idxp, size_t *offp)
483{
484 size_t off = i->iov_offset;
485 int idx = i->idx;
486 if (off && (!allocated(&i->pipe->bufs[idx]) || off == PAGE_SIZE)) {
487 idx = next_idx(idx, i->pipe);
488 off = 0;
489 }
490 *idxp = idx;
491 *offp = off;
492}
493
494static size_t push_pipe(struct iov_iter *i, size_t size,
495 int *idxp, size_t *offp)
496{
497 struct pipe_inode_info *pipe = i->pipe;
498 size_t off;
499 int idx;
500 ssize_t left;
501
502 if (unlikely(size > i->count))
503 size = i->count;
504 if (unlikely(!size))
505 return 0;
506
507 left = size;
508 data_start(i, &idx, &off);
509 *idxp = idx;
510 *offp = off;
511 if (off) {
512 left -= PAGE_SIZE - off;
513 if (left <= 0) {
514 pipe->bufs[idx].len += size;
515 return size;
516 }
517 pipe->bufs[idx].len = PAGE_SIZE;
518 idx = next_idx(idx, pipe);
519 }
520 while (idx != pipe->curbuf || !pipe->nrbufs) {
521 struct page *page = alloc_page(GFP_USER);
522 if (!page)
523 break;
524 pipe->nrbufs++;
525 pipe->bufs[idx].ops = &default_pipe_buf_ops;
526 pipe->bufs[idx].page = page;
527 pipe->bufs[idx].offset = 0;
528 if (left <= PAGE_SIZE) {
529 pipe->bufs[idx].len = left;
530 return size;
531 }
532 pipe->bufs[idx].len = PAGE_SIZE;
533 left -= PAGE_SIZE;
534 idx = next_idx(idx, pipe);
535 }
536 return size - left;
537}
538
539static size_t copy_pipe_to_iter(const void *addr, size_t bytes,
540 struct iov_iter *i)
541{
542 struct pipe_inode_info *pipe = i->pipe;
543 size_t n, off;
544 int idx;
545
546 if (!sanity(i))
547 return 0;
548
549 bytes = n = push_pipe(i, bytes, &idx, &off);
550 if (unlikely(!n))
551 return 0;
552 for ( ; n; idx = next_idx(idx, pipe), off = 0) {
553 size_t chunk = min_t(size_t, n, PAGE_SIZE - off);
554 memcpy_to_page(pipe->bufs[idx].page, off, addr, chunk);
555 i->idx = idx;
556 i->iov_offset = off + chunk;
557 n -= chunk;
558 addr += chunk;
559 }
560 i->count -= bytes;
561 return bytes;
562}
563
78e1f386
AV
564static size_t csum_and_copy_to_pipe_iter(const void *addr, size_t bytes,
565 __wsum *csum, struct iov_iter *i)
566{
567 struct pipe_inode_info *pipe = i->pipe;
568 size_t n, r;
569 size_t off = 0;
570 __wsum sum = *csum, next;
571 int idx;
572
573 if (!sanity(i))
574 return 0;
575
576 bytes = n = push_pipe(i, bytes, &idx, &r);
577 if (unlikely(!n))
578 return 0;
579 for ( ; n; idx = next_idx(idx, pipe), r = 0) {
580 size_t chunk = min_t(size_t, n, PAGE_SIZE - r);
581 char *p = kmap_atomic(pipe->bufs[idx].page);
582 next = csum_partial_copy_nocheck(addr, p + r, chunk, 0);
583 sum = csum_block_add(sum, next, off);
584 kunmap_atomic(p);
585 i->idx = idx;
586 i->iov_offset = r + chunk;
587 n -= chunk;
588 off += chunk;
589 addr += chunk;
590 }
591 i->count -= bytes;
592 *csum = sum;
593 return bytes;
594}
595
aa28de27 596size_t _copy_to_iter(const void *addr, size_t bytes, struct iov_iter *i)
62a8067a 597{
36f7a8a4 598 const char *from = addr;
00e23707 599 if (unlikely(iov_iter_is_pipe(i)))
241699cd 600 return copy_pipe_to_iter(addr, bytes, i);
09fc68dc
AV
601 if (iter_is_iovec(i))
602 might_fault();
3d4d3e48 603 iterate_and_advance(i, bytes, v,
09fc68dc 604 copyout(v.iov_base, (from += v.iov_len) - v.iov_len, v.iov_len),
3d4d3e48 605 memcpy_to_page(v.bv_page, v.bv_offset,
a280455f
AV
606 (from += v.bv_len) - v.bv_len, v.bv_len),
607 memcpy(v.iov_base, (from += v.iov_len) - v.iov_len, v.iov_len)
3d4d3e48 608 )
62a8067a 609
3d4d3e48 610 return bytes;
c35e0248 611}
aa28de27 612EXPORT_SYMBOL(_copy_to_iter);
c35e0248 613
8780356e
DW
614#ifdef CONFIG_ARCH_HAS_UACCESS_MCSAFE
615static int copyout_mcsafe(void __user *to, const void *from, size_t n)
616{
617 if (access_ok(VERIFY_WRITE, to, n)) {
618 kasan_check_read(from, n);
619 n = copy_to_user_mcsafe((__force void *) to, from, n);
620 }
621 return n;
622}
623
624static unsigned long memcpy_mcsafe_to_page(struct page *page, size_t offset,
625 const char *from, size_t len)
626{
627 unsigned long ret;
628 char *to;
629
630 to = kmap_atomic(page);
631 ret = memcpy_mcsafe(to + offset, from, len);
632 kunmap_atomic(to);
633
634 return ret;
635}
636
ca146f6f
DW
637static size_t copy_pipe_to_iter_mcsafe(const void *addr, size_t bytes,
638 struct iov_iter *i)
639{
640 struct pipe_inode_info *pipe = i->pipe;
641 size_t n, off, xfer = 0;
642 int idx;
643
644 if (!sanity(i))
645 return 0;
646
647 bytes = n = push_pipe(i, bytes, &idx, &off);
648 if (unlikely(!n))
649 return 0;
650 for ( ; n; idx = next_idx(idx, pipe), off = 0) {
651 size_t chunk = min_t(size_t, n, PAGE_SIZE - off);
652 unsigned long rem;
653
654 rem = memcpy_mcsafe_to_page(pipe->bufs[idx].page, off, addr,
655 chunk);
656 i->idx = idx;
657 i->iov_offset = off + chunk - rem;
658 xfer += chunk - rem;
659 if (rem)
660 break;
661 n -= chunk;
662 addr += chunk;
663 }
664 i->count -= xfer;
665 return xfer;
666}
667
bf3eeb9b
DW
668/**
669 * _copy_to_iter_mcsafe - copy to user with source-read error exception handling
670 * @addr: source kernel address
671 * @bytes: total transfer length
672 * @iter: destination iterator
673 *
674 * The pmem driver arranges for filesystem-dax to use this facility via
675 * dax_copy_to_iter() for protecting read/write to persistent memory.
676 * Unless / until an architecture can guarantee identical performance
677 * between _copy_to_iter_mcsafe() and _copy_to_iter() it would be a
678 * performance regression to switch more users to the mcsafe version.
679 *
680 * Otherwise, the main differences between this and typical _copy_to_iter().
681 *
682 * * Typical tail/residue handling after a fault retries the copy
683 * byte-by-byte until the fault happens again. Re-triggering machine
684 * checks is potentially fatal so the implementation uses source
685 * alignment and poison alignment assumptions to avoid re-triggering
686 * hardware exceptions.
687 *
688 * * ITER_KVEC, ITER_PIPE, and ITER_BVEC can return short copies.
689 * Compare to copy_to_iter() where only ITER_IOVEC attempts might return
690 * a short copy.
691 *
692 * See MCSAFE_TEST for self-test.
693 */
8780356e
DW
694size_t _copy_to_iter_mcsafe(const void *addr, size_t bytes, struct iov_iter *i)
695{
696 const char *from = addr;
697 unsigned long rem, curr_addr, s_addr = (unsigned long) addr;
698
00e23707 699 if (unlikely(iov_iter_is_pipe(i)))
ca146f6f 700 return copy_pipe_to_iter_mcsafe(addr, bytes, i);
8780356e
DW
701 if (iter_is_iovec(i))
702 might_fault();
703 iterate_and_advance(i, bytes, v,
704 copyout_mcsafe(v.iov_base, (from += v.iov_len) - v.iov_len, v.iov_len),
705 ({
706 rem = memcpy_mcsafe_to_page(v.bv_page, v.bv_offset,
707 (from += v.bv_len) - v.bv_len, v.bv_len);
708 if (rem) {
709 curr_addr = (unsigned long) from;
710 bytes = curr_addr - s_addr - rem;
711 return bytes;
712 }
713 }),
714 ({
715 rem = memcpy_mcsafe(v.iov_base, (from += v.iov_len) - v.iov_len,
716 v.iov_len);
717 if (rem) {
718 curr_addr = (unsigned long) from;
719 bytes = curr_addr - s_addr - rem;
720 return bytes;
721 }
722 })
723 )
724
725 return bytes;
726}
727EXPORT_SYMBOL_GPL(_copy_to_iter_mcsafe);
728#endif /* CONFIG_ARCH_HAS_UACCESS_MCSAFE */
729
aa28de27 730size_t _copy_from_iter(void *addr, size_t bytes, struct iov_iter *i)
c35e0248 731{
0dbca9a4 732 char *to = addr;
00e23707 733 if (unlikely(iov_iter_is_pipe(i))) {
241699cd
AV
734 WARN_ON(1);
735 return 0;
736 }
09fc68dc
AV
737 if (iter_is_iovec(i))
738 might_fault();
0dbca9a4 739 iterate_and_advance(i, bytes, v,
09fc68dc 740 copyin((to += v.iov_len) - v.iov_len, v.iov_base, v.iov_len),
0dbca9a4 741 memcpy_from_page((to += v.bv_len) - v.bv_len, v.bv_page,
a280455f
AV
742 v.bv_offset, v.bv_len),
743 memcpy((to += v.iov_len) - v.iov_len, v.iov_base, v.iov_len)
0dbca9a4
AV
744 )
745
746 return bytes;
c35e0248 747}
aa28de27 748EXPORT_SYMBOL(_copy_from_iter);
c35e0248 749
aa28de27 750bool _copy_from_iter_full(void *addr, size_t bytes, struct iov_iter *i)
cbbd26b8
AV
751{
752 char *to = addr;
00e23707 753 if (unlikely(iov_iter_is_pipe(i))) {
cbbd26b8
AV
754 WARN_ON(1);
755 return false;
756 }
33844e66 757 if (unlikely(i->count < bytes))
cbbd26b8
AV
758 return false;
759
09fc68dc
AV
760 if (iter_is_iovec(i))
761 might_fault();
cbbd26b8 762 iterate_all_kinds(i, bytes, v, ({
09fc68dc 763 if (copyin((to += v.iov_len) - v.iov_len,
cbbd26b8
AV
764 v.iov_base, v.iov_len))
765 return false;
766 0;}),
767 memcpy_from_page((to += v.bv_len) - v.bv_len, v.bv_page,
768 v.bv_offset, v.bv_len),
769 memcpy((to += v.iov_len) - v.iov_len, v.iov_base, v.iov_len)
770 )
771
772 iov_iter_advance(i, bytes);
773 return true;
774}
aa28de27 775EXPORT_SYMBOL(_copy_from_iter_full);
cbbd26b8 776
aa28de27 777size_t _copy_from_iter_nocache(void *addr, size_t bytes, struct iov_iter *i)
aa583096
AV
778{
779 char *to = addr;
00e23707 780 if (unlikely(iov_iter_is_pipe(i))) {
241699cd
AV
781 WARN_ON(1);
782 return 0;
783 }
aa583096 784 iterate_and_advance(i, bytes, v,
3f763453 785 __copy_from_user_inatomic_nocache((to += v.iov_len) - v.iov_len,
aa583096
AV
786 v.iov_base, v.iov_len),
787 memcpy_from_page((to += v.bv_len) - v.bv_len, v.bv_page,
788 v.bv_offset, v.bv_len),
789 memcpy((to += v.iov_len) - v.iov_len, v.iov_base, v.iov_len)
790 )
791
792 return bytes;
793}
aa28de27 794EXPORT_SYMBOL(_copy_from_iter_nocache);
aa583096 795
0aed55af 796#ifdef CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE
abd08d7d
DW
797/**
798 * _copy_from_iter_flushcache - write destination through cpu cache
799 * @addr: destination kernel address
800 * @bytes: total transfer length
801 * @iter: source iterator
802 *
803 * The pmem driver arranges for filesystem-dax to use this facility via
804 * dax_copy_from_iter() for ensuring that writes to persistent memory
805 * are flushed through the CPU cache. It is differentiated from
806 * _copy_from_iter_nocache() in that guarantees all data is flushed for
807 * all iterator types. The _copy_from_iter_nocache() only attempts to
808 * bypass the cache for the ITER_IOVEC case, and on some archs may use
809 * instructions that strand dirty-data in the cache.
810 */
6a37e940 811size_t _copy_from_iter_flushcache(void *addr, size_t bytes, struct iov_iter *i)
0aed55af
DW
812{
813 char *to = addr;
00e23707 814 if (unlikely(iov_iter_is_pipe(i))) {
0aed55af
DW
815 WARN_ON(1);
816 return 0;
817 }
818 iterate_and_advance(i, bytes, v,
819 __copy_from_user_flushcache((to += v.iov_len) - v.iov_len,
820 v.iov_base, v.iov_len),
821 memcpy_page_flushcache((to += v.bv_len) - v.bv_len, v.bv_page,
822 v.bv_offset, v.bv_len),
823 memcpy_flushcache((to += v.iov_len) - v.iov_len, v.iov_base,
824 v.iov_len)
825 )
826
827 return bytes;
828}
6a37e940 829EXPORT_SYMBOL_GPL(_copy_from_iter_flushcache);
0aed55af
DW
830#endif
831
aa28de27 832bool _copy_from_iter_full_nocache(void *addr, size_t bytes, struct iov_iter *i)
cbbd26b8
AV
833{
834 char *to = addr;
00e23707 835 if (unlikely(iov_iter_is_pipe(i))) {
cbbd26b8
AV
836 WARN_ON(1);
837 return false;
838 }
33844e66 839 if (unlikely(i->count < bytes))
cbbd26b8
AV
840 return false;
841 iterate_all_kinds(i, bytes, v, ({
3f763453 842 if (__copy_from_user_inatomic_nocache((to += v.iov_len) - v.iov_len,
cbbd26b8
AV
843 v.iov_base, v.iov_len))
844 return false;
845 0;}),
846 memcpy_from_page((to += v.bv_len) - v.bv_len, v.bv_page,
847 v.bv_offset, v.bv_len),
848 memcpy((to += v.iov_len) - v.iov_len, v.iov_base, v.iov_len)
849 )
850
851 iov_iter_advance(i, bytes);
852 return true;
853}
aa28de27 854EXPORT_SYMBOL(_copy_from_iter_full_nocache);
cbbd26b8 855
72e809ed
AV
856static inline bool page_copy_sane(struct page *page, size_t offset, size_t n)
857{
a90bcb86
PP
858 struct page *head = compound_head(page);
859 size_t v = n + offset + page_address(page) - page_address(head);
860
861 if (likely(n <= v && v <= (PAGE_SIZE << compound_order(head))))
72e809ed
AV
862 return true;
863 WARN_ON(1);
864 return false;
865}
cbbd26b8 866
62a8067a
AV
867size_t copy_page_to_iter(struct page *page, size_t offset, size_t bytes,
868 struct iov_iter *i)
869{
72e809ed
AV
870 if (unlikely(!page_copy_sane(page, offset, bytes)))
871 return 0;
d271524a
AV
872 if (i->type & (ITER_BVEC|ITER_KVEC)) {
873 void *kaddr = kmap_atomic(page);
874 size_t wanted = copy_to_iter(kaddr + offset, bytes, i);
875 kunmap_atomic(kaddr);
876 return wanted;
9ea9ce04
DH
877 } else if (unlikely(iov_iter_is_discard(i)))
878 return bytes;
879 else if (likely(!iov_iter_is_pipe(i)))
62a8067a 880 return copy_page_to_iter_iovec(page, offset, bytes, i);
241699cd
AV
881 else
882 return copy_page_to_iter_pipe(page, offset, bytes, i);
62a8067a
AV
883}
884EXPORT_SYMBOL(copy_page_to_iter);
885
886size_t copy_page_from_iter(struct page *page, size_t offset, size_t bytes,
887 struct iov_iter *i)
888{
72e809ed
AV
889 if (unlikely(!page_copy_sane(page, offset, bytes)))
890 return 0;
9ea9ce04 891 if (unlikely(iov_iter_is_pipe(i) || iov_iter_is_discard(i))) {
241699cd
AV
892 WARN_ON(1);
893 return 0;
894 }
a280455f 895 if (i->type & (ITER_BVEC|ITER_KVEC)) {
d271524a 896 void *kaddr = kmap_atomic(page);
aa28de27 897 size_t wanted = _copy_from_iter(kaddr + offset, bytes, i);
d271524a
AV
898 kunmap_atomic(kaddr);
899 return wanted;
900 } else
62a8067a
AV
901 return copy_page_from_iter_iovec(page, offset, bytes, i);
902}
903EXPORT_SYMBOL(copy_page_from_iter);
904
241699cd
AV
905static size_t pipe_zero(size_t bytes, struct iov_iter *i)
906{
907 struct pipe_inode_info *pipe = i->pipe;
908 size_t n, off;
909 int idx;
910
911 if (!sanity(i))
912 return 0;
913
914 bytes = n = push_pipe(i, bytes, &idx, &off);
915 if (unlikely(!n))
916 return 0;
917
918 for ( ; n; idx = next_idx(idx, pipe), off = 0) {
919 size_t chunk = min_t(size_t, n, PAGE_SIZE - off);
920 memzero_page(pipe->bufs[idx].page, off, chunk);
921 i->idx = idx;
922 i->iov_offset = off + chunk;
923 n -= chunk;
924 }
925 i->count -= bytes;
926 return bytes;
927}
928
c35e0248
MW
929size_t iov_iter_zero(size_t bytes, struct iov_iter *i)
930{
00e23707 931 if (unlikely(iov_iter_is_pipe(i)))
241699cd 932 return pipe_zero(bytes, i);
8442fa46 933 iterate_and_advance(i, bytes, v,
09fc68dc 934 clear_user(v.iov_base, v.iov_len),
a280455f
AV
935 memzero_page(v.bv_page, v.bv_offset, v.bv_len),
936 memset(v.iov_base, 0, v.iov_len)
8442fa46
AV
937 )
938
939 return bytes;
c35e0248
MW
940}
941EXPORT_SYMBOL(iov_iter_zero);
942
62a8067a
AV
943size_t iov_iter_copy_from_user_atomic(struct page *page,
944 struct iov_iter *i, unsigned long offset, size_t bytes)
945{
04a31165 946 char *kaddr = kmap_atomic(page), *p = kaddr + offset;
72e809ed
AV
947 if (unlikely(!page_copy_sane(page, offset, bytes))) {
948 kunmap_atomic(kaddr);
949 return 0;
950 }
9ea9ce04 951 if (unlikely(iov_iter_is_pipe(i) || iov_iter_is_discard(i))) {
241699cd
AV
952 kunmap_atomic(kaddr);
953 WARN_ON(1);
954 return 0;
955 }
04a31165 956 iterate_all_kinds(i, bytes, v,
09fc68dc 957 copyin((p += v.iov_len) - v.iov_len, v.iov_base, v.iov_len),
04a31165 958 memcpy_from_page((p += v.bv_len) - v.bv_len, v.bv_page,
a280455f
AV
959 v.bv_offset, v.bv_len),
960 memcpy((p += v.iov_len) - v.iov_len, v.iov_base, v.iov_len)
04a31165
AV
961 )
962 kunmap_atomic(kaddr);
963 return bytes;
62a8067a
AV
964}
965EXPORT_SYMBOL(iov_iter_copy_from_user_atomic);
966
b9dc6f65
AV
967static inline void pipe_truncate(struct iov_iter *i)
968{
969 struct pipe_inode_info *pipe = i->pipe;
970 if (pipe->nrbufs) {
971 size_t off = i->iov_offset;
972 int idx = i->idx;
973 int nrbufs = (idx - pipe->curbuf) & (pipe->buffers - 1);
974 if (off) {
975 pipe->bufs[idx].len = off - pipe->bufs[idx].offset;
976 idx = next_idx(idx, pipe);
977 nrbufs++;
978 }
979 while (pipe->nrbufs > nrbufs) {
980 pipe_buf_release(pipe, &pipe->bufs[idx]);
981 idx = next_idx(idx, pipe);
982 pipe->nrbufs--;
983 }
984 }
985}
986
241699cd
AV
987static void pipe_advance(struct iov_iter *i, size_t size)
988{
989 struct pipe_inode_info *pipe = i->pipe;
241699cd
AV
990 if (unlikely(i->count < size))
991 size = i->count;
241699cd 992 if (size) {
b9dc6f65
AV
993 struct pipe_buffer *buf;
994 size_t off = i->iov_offset, left = size;
995 int idx = i->idx;
241699cd 996 if (off) /* make it relative to the beginning of buffer */
b9dc6f65 997 left += off - pipe->bufs[idx].offset;
241699cd
AV
998 while (1) {
999 buf = &pipe->bufs[idx];
b9dc6f65 1000 if (left <= buf->len)
241699cd 1001 break;
b9dc6f65 1002 left -= buf->len;
241699cd
AV
1003 idx = next_idx(idx, pipe);
1004 }
241699cd 1005 i->idx = idx;
b9dc6f65 1006 i->iov_offset = buf->offset + left;
241699cd 1007 }
b9dc6f65
AV
1008 i->count -= size;
1009 /* ... and discard everything past that point */
1010 pipe_truncate(i);
241699cd
AV
1011}
1012
62a8067a
AV
1013void iov_iter_advance(struct iov_iter *i, size_t size)
1014{
00e23707 1015 if (unlikely(iov_iter_is_pipe(i))) {
241699cd
AV
1016 pipe_advance(i, size);
1017 return;
1018 }
9ea9ce04
DH
1019 if (unlikely(iov_iter_is_discard(i))) {
1020 i->count -= size;
1021 return;
1022 }
a280455f 1023 iterate_and_advance(i, size, v, 0, 0, 0)
62a8067a
AV
1024}
1025EXPORT_SYMBOL(iov_iter_advance);
1026
27c0e374
AV
1027void iov_iter_revert(struct iov_iter *i, size_t unroll)
1028{
1029 if (!unroll)
1030 return;
5b47d59a
AV
1031 if (WARN_ON(unroll > MAX_RW_COUNT))
1032 return;
27c0e374 1033 i->count += unroll;
00e23707 1034 if (unlikely(iov_iter_is_pipe(i))) {
27c0e374
AV
1035 struct pipe_inode_info *pipe = i->pipe;
1036 int idx = i->idx;
1037 size_t off = i->iov_offset;
1038 while (1) {
1039 size_t n = off - pipe->bufs[idx].offset;
1040 if (unroll < n) {
4fa55cef 1041 off -= unroll;
27c0e374
AV
1042 break;
1043 }
1044 unroll -= n;
1045 if (!unroll && idx == i->start_idx) {
1046 off = 0;
1047 break;
1048 }
1049 if (!idx--)
1050 idx = pipe->buffers - 1;
1051 off = pipe->bufs[idx].offset + pipe->bufs[idx].len;
1052 }
1053 i->iov_offset = off;
1054 i->idx = idx;
1055 pipe_truncate(i);
1056 return;
1057 }
9ea9ce04
DH
1058 if (unlikely(iov_iter_is_discard(i)))
1059 return;
27c0e374
AV
1060 if (unroll <= i->iov_offset) {
1061 i->iov_offset -= unroll;
1062 return;
1063 }
1064 unroll -= i->iov_offset;
00e23707 1065 if (iov_iter_is_bvec(i)) {
27c0e374
AV
1066 const struct bio_vec *bvec = i->bvec;
1067 while (1) {
1068 size_t n = (--bvec)->bv_len;
1069 i->nr_segs++;
1070 if (unroll <= n) {
1071 i->bvec = bvec;
1072 i->iov_offset = n - unroll;
1073 return;
1074 }
1075 unroll -= n;
1076 }
1077 } else { /* same logics for iovec and kvec */
1078 const struct iovec *iov = i->iov;
1079 while (1) {
1080 size_t n = (--iov)->iov_len;
1081 i->nr_segs++;
1082 if (unroll <= n) {
1083 i->iov = iov;
1084 i->iov_offset = n - unroll;
1085 return;
1086 }
1087 unroll -= n;
1088 }
1089 }
1090}
1091EXPORT_SYMBOL(iov_iter_revert);
1092
62a8067a
AV
1093/*
1094 * Return the count of just the current iov_iter segment.
1095 */
1096size_t iov_iter_single_seg_count(const struct iov_iter *i)
1097{
00e23707 1098 if (unlikely(iov_iter_is_pipe(i)))
241699cd 1099 return i->count; // it is a silly place, anyway
62a8067a
AV
1100 if (i->nr_segs == 1)
1101 return i->count;
9ea9ce04
DH
1102 if (unlikely(iov_iter_is_discard(i)))
1103 return i->count;
00e23707 1104 else if (iov_iter_is_bvec(i))
62a8067a 1105 return min(i->count, i->bvec->bv_len - i->iov_offset);
ad0eab92
PM
1106 else
1107 return min(i->count, i->iov->iov_len - i->iov_offset);
62a8067a
AV
1108}
1109EXPORT_SYMBOL(iov_iter_single_seg_count);
1110
aa563d7b 1111void iov_iter_kvec(struct iov_iter *i, unsigned int direction,
05afcb77 1112 const struct kvec *kvec, unsigned long nr_segs,
abb78f87
AV
1113 size_t count)
1114{
aa563d7b
DH
1115 WARN_ON(direction & ~(READ | WRITE));
1116 i->type = ITER_KVEC | (direction & (READ | WRITE));
05afcb77 1117 i->kvec = kvec;
abb78f87
AV
1118 i->nr_segs = nr_segs;
1119 i->iov_offset = 0;
1120 i->count = count;
1121}
1122EXPORT_SYMBOL(iov_iter_kvec);
1123
aa563d7b 1124void iov_iter_bvec(struct iov_iter *i, unsigned int direction,
05afcb77
AV
1125 const struct bio_vec *bvec, unsigned long nr_segs,
1126 size_t count)
1127{
aa563d7b
DH
1128 WARN_ON(direction & ~(READ | WRITE));
1129 i->type = ITER_BVEC | (direction & (READ | WRITE));
05afcb77
AV
1130 i->bvec = bvec;
1131 i->nr_segs = nr_segs;
1132 i->iov_offset = 0;
1133 i->count = count;
1134}
1135EXPORT_SYMBOL(iov_iter_bvec);
1136
aa563d7b 1137void iov_iter_pipe(struct iov_iter *i, unsigned int direction,
241699cd
AV
1138 struct pipe_inode_info *pipe,
1139 size_t count)
1140{
aa563d7b 1141 BUG_ON(direction != READ);
b9dc6f65 1142 WARN_ON(pipe->nrbufs == pipe->buffers);
aa563d7b 1143 i->type = ITER_PIPE | READ;
241699cd
AV
1144 i->pipe = pipe;
1145 i->idx = (pipe->curbuf + pipe->nrbufs) & (pipe->buffers - 1);
1146 i->iov_offset = 0;
1147 i->count = count;
27c0e374 1148 i->start_idx = i->idx;
241699cd
AV
1149}
1150EXPORT_SYMBOL(iov_iter_pipe);
1151
9ea9ce04
DH
1152/**
1153 * iov_iter_discard - Initialise an I/O iterator that discards data
1154 * @i: The iterator to initialise.
1155 * @direction: The direction of the transfer.
1156 * @count: The size of the I/O buffer in bytes.
1157 *
1158 * Set up an I/O iterator that just discards everything that's written to it.
1159 * It's only available as a READ iterator.
1160 */
1161void iov_iter_discard(struct iov_iter *i, unsigned int direction, size_t count)
1162{
1163 BUG_ON(direction != READ);
1164 i->type = ITER_DISCARD | READ;
1165 i->count = count;
1166 i->iov_offset = 0;
1167}
1168EXPORT_SYMBOL(iov_iter_discard);
1169
62a8067a
AV
1170unsigned long iov_iter_alignment(const struct iov_iter *i)
1171{
04a31165
AV
1172 unsigned long res = 0;
1173 size_t size = i->count;
1174
00e23707 1175 if (unlikely(iov_iter_is_pipe(i))) {
33844e66 1176 if (size && i->iov_offset && allocated(&i->pipe->bufs[i->idx]))
241699cd
AV
1177 return size | i->iov_offset;
1178 return size;
1179 }
04a31165
AV
1180 iterate_all_kinds(i, size, v,
1181 (res |= (unsigned long)v.iov_base | v.iov_len, 0),
a280455f
AV
1182 res |= v.bv_offset | v.bv_len,
1183 res |= (unsigned long)v.iov_base | v.iov_len
04a31165
AV
1184 )
1185 return res;
62a8067a
AV
1186}
1187EXPORT_SYMBOL(iov_iter_alignment);
1188
357f435d
AV
1189unsigned long iov_iter_gap_alignment(const struct iov_iter *i)
1190{
33844e66 1191 unsigned long res = 0;
357f435d 1192 size_t size = i->count;
357f435d 1193
9ea9ce04 1194 if (unlikely(iov_iter_is_pipe(i) || iov_iter_is_discard(i))) {
241699cd
AV
1195 WARN_ON(1);
1196 return ~0U;
1197 }
1198
357f435d
AV
1199 iterate_all_kinds(i, size, v,
1200 (res |= (!res ? 0 : (unsigned long)v.iov_base) |
1201 (size != v.iov_len ? size : 0), 0),
1202 (res |= (!res ? 0 : (unsigned long)v.bv_offset) |
1203 (size != v.bv_len ? size : 0)),
1204 (res |= (!res ? 0 : (unsigned long)v.iov_base) |
1205 (size != v.iov_len ? size : 0))
1206 );
33844e66 1207 return res;
357f435d
AV
1208}
1209EXPORT_SYMBOL(iov_iter_gap_alignment);
1210
e76b6312 1211static inline ssize_t __pipe_get_pages(struct iov_iter *i,
241699cd
AV
1212 size_t maxsize,
1213 struct page **pages,
1214 int idx,
1215 size_t *start)
1216{
1217 struct pipe_inode_info *pipe = i->pipe;
1689c73a 1218 ssize_t n = push_pipe(i, maxsize, &idx, start);
241699cd
AV
1219 if (!n)
1220 return -EFAULT;
1221
1222 maxsize = n;
1223 n += *start;
1689c73a 1224 while (n > 0) {
241699cd
AV
1225 get_page(*pages++ = pipe->bufs[idx].page);
1226 idx = next_idx(idx, pipe);
1227 n -= PAGE_SIZE;
1228 }
1229
1230 return maxsize;
1231}
1232
1233static ssize_t pipe_get_pages(struct iov_iter *i,
1234 struct page **pages, size_t maxsize, unsigned maxpages,
1235 size_t *start)
1236{
1237 unsigned npages;
1238 size_t capacity;
1239 int idx;
1240
33844e66
AV
1241 if (!maxsize)
1242 return 0;
1243
241699cd
AV
1244 if (!sanity(i))
1245 return -EFAULT;
1246
1247 data_start(i, &idx, start);
1248 /* some of this one + all after this one */
1249 npages = ((i->pipe->curbuf - idx - 1) & (i->pipe->buffers - 1)) + 1;
1250 capacity = min(npages,maxpages) * PAGE_SIZE - *start;
1251
1252 return __pipe_get_pages(i, min(maxsize, capacity), pages, idx, start);
1253}
1254
62a8067a 1255ssize_t iov_iter_get_pages(struct iov_iter *i,
2c80929c 1256 struct page **pages, size_t maxsize, unsigned maxpages,
62a8067a
AV
1257 size_t *start)
1258{
e5393fae
AV
1259 if (maxsize > i->count)
1260 maxsize = i->count;
1261
00e23707 1262 if (unlikely(iov_iter_is_pipe(i)))
241699cd 1263 return pipe_get_pages(i, pages, maxsize, maxpages, start);
9ea9ce04
DH
1264 if (unlikely(iov_iter_is_discard(i)))
1265 return -EFAULT;
1266
e5393fae
AV
1267 iterate_all_kinds(i, maxsize, v, ({
1268 unsigned long addr = (unsigned long)v.iov_base;
1269 size_t len = v.iov_len + (*start = addr & (PAGE_SIZE - 1));
1270 int n;
1271 int res;
1272
1273 if (len > maxpages * PAGE_SIZE)
1274 len = maxpages * PAGE_SIZE;
1275 addr &= ~(PAGE_SIZE - 1);
1276 n = DIV_ROUND_UP(len, PAGE_SIZE);
00e23707 1277 res = get_user_pages_fast(addr, n, iov_iter_rw(i) != WRITE, pages);
e5393fae
AV
1278 if (unlikely(res < 0))
1279 return res;
1280 return (res == n ? len : res * PAGE_SIZE) - *start;
1281 0;}),({
1282 /* can't be more than PAGE_SIZE */
1283 *start = v.bv_offset;
1284 get_page(*pages = v.bv_page);
1285 return v.bv_len;
a280455f
AV
1286 }),({
1287 return -EFAULT;
e5393fae
AV
1288 })
1289 )
1290 return 0;
62a8067a
AV
1291}
1292EXPORT_SYMBOL(iov_iter_get_pages);
1293
1b17f1f2
AV
1294static struct page **get_pages_array(size_t n)
1295{
752ade68 1296 return kvmalloc_array(n, sizeof(struct page *), GFP_KERNEL);
1b17f1f2
AV
1297}
1298
241699cd
AV
1299static ssize_t pipe_get_pages_alloc(struct iov_iter *i,
1300 struct page ***pages, size_t maxsize,
1301 size_t *start)
1302{
1303 struct page **p;
d7760d63 1304 ssize_t n;
241699cd
AV
1305 int idx;
1306 int npages;
1307
33844e66
AV
1308 if (!maxsize)
1309 return 0;
1310
241699cd
AV
1311 if (!sanity(i))
1312 return -EFAULT;
1313
1314 data_start(i, &idx, start);
1315 /* some of this one + all after this one */
1316 npages = ((i->pipe->curbuf - idx - 1) & (i->pipe->buffers - 1)) + 1;
1317 n = npages * PAGE_SIZE - *start;
1318 if (maxsize > n)
1319 maxsize = n;
1320 else
1321 npages = DIV_ROUND_UP(maxsize + *start, PAGE_SIZE);
1322 p = get_pages_array(npages);
1323 if (!p)
1324 return -ENOMEM;
1325 n = __pipe_get_pages(i, maxsize, p, idx, start);
1326 if (n > 0)
1327 *pages = p;
1328 else
1329 kvfree(p);
1330 return n;
1331}
1332
62a8067a
AV
1333ssize_t iov_iter_get_pages_alloc(struct iov_iter *i,
1334 struct page ***pages, size_t maxsize,
1335 size_t *start)
1336{
1b17f1f2
AV
1337 struct page **p;
1338
1339 if (maxsize > i->count)
1340 maxsize = i->count;
1341
00e23707 1342 if (unlikely(iov_iter_is_pipe(i)))
241699cd 1343 return pipe_get_pages_alloc(i, pages, maxsize, start);
9ea9ce04
DH
1344 if (unlikely(iov_iter_is_discard(i)))
1345 return -EFAULT;
1346
1b17f1f2
AV
1347 iterate_all_kinds(i, maxsize, v, ({
1348 unsigned long addr = (unsigned long)v.iov_base;
1349 size_t len = v.iov_len + (*start = addr & (PAGE_SIZE - 1));
1350 int n;
1351 int res;
1352
1353 addr &= ~(PAGE_SIZE - 1);
1354 n = DIV_ROUND_UP(len, PAGE_SIZE);
1355 p = get_pages_array(n);
1356 if (!p)
1357 return -ENOMEM;
00e23707 1358 res = get_user_pages_fast(addr, n, iov_iter_rw(i) != WRITE, p);
1b17f1f2
AV
1359 if (unlikely(res < 0)) {
1360 kvfree(p);
1361 return res;
1362 }
1363 *pages = p;
1364 return (res == n ? len : res * PAGE_SIZE) - *start;
1365 0;}),({
1366 /* can't be more than PAGE_SIZE */
1367 *start = v.bv_offset;
1368 *pages = p = get_pages_array(1);
1369 if (!p)
1370 return -ENOMEM;
1371 get_page(*p = v.bv_page);
1372 return v.bv_len;
a280455f
AV
1373 }),({
1374 return -EFAULT;
1b17f1f2
AV
1375 })
1376 )
1377 return 0;
62a8067a
AV
1378}
1379EXPORT_SYMBOL(iov_iter_get_pages_alloc);
1380
a604ec7e
AV
1381size_t csum_and_copy_from_iter(void *addr, size_t bytes, __wsum *csum,
1382 struct iov_iter *i)
1383{
1384 char *to = addr;
1385 __wsum sum, next;
1386 size_t off = 0;
a604ec7e 1387 sum = *csum;
9ea9ce04 1388 if (unlikely(iov_iter_is_pipe(i) || iov_iter_is_discard(i))) {
241699cd
AV
1389 WARN_ON(1);
1390 return 0;
1391 }
a604ec7e
AV
1392 iterate_and_advance(i, bytes, v, ({
1393 int err = 0;
cbbd26b8 1394 next = csum_and_copy_from_user(v.iov_base,
a604ec7e
AV
1395 (to += v.iov_len) - v.iov_len,
1396 v.iov_len, 0, &err);
1397 if (!err) {
1398 sum = csum_block_add(sum, next, off);
1399 off += v.iov_len;
1400 }
1401 err ? v.iov_len : 0;
1402 }), ({
1403 char *p = kmap_atomic(v.bv_page);
1404 next = csum_partial_copy_nocheck(p + v.bv_offset,
1405 (to += v.bv_len) - v.bv_len,
1406 v.bv_len, 0);
1407 kunmap_atomic(p);
1408 sum = csum_block_add(sum, next, off);
1409 off += v.bv_len;
1410 }),({
1411 next = csum_partial_copy_nocheck(v.iov_base,
1412 (to += v.iov_len) - v.iov_len,
1413 v.iov_len, 0);
1414 sum = csum_block_add(sum, next, off);
1415 off += v.iov_len;
1416 })
1417 )
1418 *csum = sum;
1419 return bytes;
1420}
1421EXPORT_SYMBOL(csum_and_copy_from_iter);
1422
cbbd26b8
AV
1423bool csum_and_copy_from_iter_full(void *addr, size_t bytes, __wsum *csum,
1424 struct iov_iter *i)
1425{
1426 char *to = addr;
1427 __wsum sum, next;
1428 size_t off = 0;
1429 sum = *csum;
9ea9ce04 1430 if (unlikely(iov_iter_is_pipe(i) || iov_iter_is_discard(i))) {
cbbd26b8
AV
1431 WARN_ON(1);
1432 return false;
1433 }
1434 if (unlikely(i->count < bytes))
1435 return false;
1436 iterate_all_kinds(i, bytes, v, ({
1437 int err = 0;
1438 next = csum_and_copy_from_user(v.iov_base,
1439 (to += v.iov_len) - v.iov_len,
1440 v.iov_len, 0, &err);
1441 if (err)
1442 return false;
1443 sum = csum_block_add(sum, next, off);
1444 off += v.iov_len;
1445 0;
1446 }), ({
1447 char *p = kmap_atomic(v.bv_page);
1448 next = csum_partial_copy_nocheck(p + v.bv_offset,
1449 (to += v.bv_len) - v.bv_len,
1450 v.bv_len, 0);
1451 kunmap_atomic(p);
1452 sum = csum_block_add(sum, next, off);
1453 off += v.bv_len;
1454 }),({
1455 next = csum_partial_copy_nocheck(v.iov_base,
1456 (to += v.iov_len) - v.iov_len,
1457 v.iov_len, 0);
1458 sum = csum_block_add(sum, next, off);
1459 off += v.iov_len;
1460 })
1461 )
1462 *csum = sum;
1463 iov_iter_advance(i, bytes);
1464 return true;
1465}
1466EXPORT_SYMBOL(csum_and_copy_from_iter_full);
1467
cb002d07 1468size_t csum_and_copy_to_iter(const void *addr, size_t bytes, void *csump,
a604ec7e
AV
1469 struct iov_iter *i)
1470{
36f7a8a4 1471 const char *from = addr;
cb002d07 1472 __wsum *csum = csump;
a604ec7e
AV
1473 __wsum sum, next;
1474 size_t off = 0;
78e1f386
AV
1475
1476 if (unlikely(iov_iter_is_pipe(i)))
1477 return csum_and_copy_to_pipe_iter(addr, bytes, csum, i);
1478
a604ec7e 1479 sum = *csum;
78e1f386 1480 if (unlikely(iov_iter_is_discard(i))) {
241699cd
AV
1481 WARN_ON(1); /* for now */
1482 return 0;
1483 }
a604ec7e
AV
1484 iterate_and_advance(i, bytes, v, ({
1485 int err = 0;
1486 next = csum_and_copy_to_user((from += v.iov_len) - v.iov_len,
cbbd26b8 1487 v.iov_base,
a604ec7e
AV
1488 v.iov_len, 0, &err);
1489 if (!err) {
1490 sum = csum_block_add(sum, next, off);
1491 off += v.iov_len;
1492 }
1493 err ? v.iov_len : 0;
1494 }), ({
1495 char *p = kmap_atomic(v.bv_page);
1496 next = csum_partial_copy_nocheck((from += v.bv_len) - v.bv_len,
1497 p + v.bv_offset,
1498 v.bv_len, 0);
1499 kunmap_atomic(p);
1500 sum = csum_block_add(sum, next, off);
1501 off += v.bv_len;
1502 }),({
1503 next = csum_partial_copy_nocheck((from += v.iov_len) - v.iov_len,
1504 v.iov_base,
1505 v.iov_len, 0);
1506 sum = csum_block_add(sum, next, off);
1507 off += v.iov_len;
1508 })
1509 )
1510 *csum = sum;
1511 return bytes;
1512}
1513EXPORT_SYMBOL(csum_and_copy_to_iter);
1514
d05f4435
SG
1515size_t hash_and_copy_to_iter(const void *addr, size_t bytes, void *hashp,
1516 struct iov_iter *i)
1517{
1518 struct ahash_request *hash = hashp;
1519 struct scatterlist sg;
1520 size_t copied;
1521
1522 copied = copy_to_iter(addr, bytes, i);
1523 sg_init_one(&sg, addr, copied);
1524 ahash_request_set_crypt(hash, &sg, NULL, copied);
1525 crypto_ahash_update(hash);
1526 return copied;
1527}
1528EXPORT_SYMBOL(hash_and_copy_to_iter);
1529
62a8067a
AV
1530int iov_iter_npages(const struct iov_iter *i, int maxpages)
1531{
e0f2dc40
AV
1532 size_t size = i->count;
1533 int npages = 0;
1534
1535 if (!size)
1536 return 0;
9ea9ce04
DH
1537 if (unlikely(iov_iter_is_discard(i)))
1538 return 0;
e0f2dc40 1539
00e23707 1540 if (unlikely(iov_iter_is_pipe(i))) {
241699cd
AV
1541 struct pipe_inode_info *pipe = i->pipe;
1542 size_t off;
1543 int idx;
1544
1545 if (!sanity(i))
1546 return 0;
1547
1548 data_start(i, &idx, &off);
1549 /* some of this one + all after this one */
1550 npages = ((pipe->curbuf - idx - 1) & (pipe->buffers - 1)) + 1;
1551 if (npages >= maxpages)
1552 return maxpages;
1553 } else iterate_all_kinds(i, size, v, ({
e0f2dc40
AV
1554 unsigned long p = (unsigned long)v.iov_base;
1555 npages += DIV_ROUND_UP(p + v.iov_len, PAGE_SIZE)
1556 - p / PAGE_SIZE;
1557 if (npages >= maxpages)
1558 return maxpages;
1559 0;}),({
1560 npages++;
1561 if (npages >= maxpages)
1562 return maxpages;
a280455f
AV
1563 }),({
1564 unsigned long p = (unsigned long)v.iov_base;
1565 npages += DIV_ROUND_UP(p + v.iov_len, PAGE_SIZE)
1566 - p / PAGE_SIZE;
1567 if (npages >= maxpages)
1568 return maxpages;
e0f2dc40
AV
1569 })
1570 )
1571 return npages;
62a8067a 1572}
f67da30c 1573EXPORT_SYMBOL(iov_iter_npages);
4b8164b9
AV
1574
1575const void *dup_iter(struct iov_iter *new, struct iov_iter *old, gfp_t flags)
1576{
1577 *new = *old;
00e23707 1578 if (unlikely(iov_iter_is_pipe(new))) {
241699cd
AV
1579 WARN_ON(1);
1580 return NULL;
1581 }
9ea9ce04
DH
1582 if (unlikely(iov_iter_is_discard(new)))
1583 return NULL;
00e23707 1584 if (iov_iter_is_bvec(new))
4b8164b9
AV
1585 return new->bvec = kmemdup(new->bvec,
1586 new->nr_segs * sizeof(struct bio_vec),
1587 flags);
1588 else
1589 /* iovec and kvec have identical layout */
1590 return new->iov = kmemdup(new->iov,
1591 new->nr_segs * sizeof(struct iovec),
1592 flags);
1593}
1594EXPORT_SYMBOL(dup_iter);
bc917be8 1595
ffecee4f
VN
1596/**
1597 * import_iovec() - Copy an array of &struct iovec from userspace
1598 * into the kernel, check that it is valid, and initialize a new
1599 * &struct iov_iter iterator to access it.
1600 *
1601 * @type: One of %READ or %WRITE.
1602 * @uvector: Pointer to the userspace array.
1603 * @nr_segs: Number of elements in userspace array.
1604 * @fast_segs: Number of elements in @iov.
1605 * @iov: (input and output parameter) Pointer to pointer to (usually small
1606 * on-stack) kernel array.
1607 * @i: Pointer to iterator that will be initialized on success.
1608 *
1609 * If the array pointed to by *@iov is large enough to hold all @nr_segs,
1610 * then this function places %NULL in *@iov on return. Otherwise, a new
1611 * array will be allocated and the result placed in *@iov. This means that
1612 * the caller may call kfree() on *@iov regardless of whether the small
1613 * on-stack array was used or not (and regardless of whether this function
1614 * returns an error or not).
1615 *
1616 * Return: 0 on success or negative error code on error.
1617 */
bc917be8
AV
1618int import_iovec(int type, const struct iovec __user * uvector,
1619 unsigned nr_segs, unsigned fast_segs,
1620 struct iovec **iov, struct iov_iter *i)
1621{
1622 ssize_t n;
1623 struct iovec *p;
1624 n = rw_copy_check_uvector(type, uvector, nr_segs, fast_segs,
1625 *iov, &p);
1626 if (n < 0) {
1627 if (p != *iov)
1628 kfree(p);
1629 *iov = NULL;
1630 return n;
1631 }
1632 iov_iter_init(i, type, p, nr_segs, n);
1633 *iov = p == *iov ? NULL : p;
1634 return 0;
1635}
1636EXPORT_SYMBOL(import_iovec);
1637
1638#ifdef CONFIG_COMPAT
1639#include <linux/compat.h>
1640
1641int compat_import_iovec(int type, const struct compat_iovec __user * uvector,
1642 unsigned nr_segs, unsigned fast_segs,
1643 struct iovec **iov, struct iov_iter *i)
1644{
1645 ssize_t n;
1646 struct iovec *p;
1647 n = compat_rw_copy_check_uvector(type, uvector, nr_segs, fast_segs,
1648 *iov, &p);
1649 if (n < 0) {
1650 if (p != *iov)
1651 kfree(p);
1652 *iov = NULL;
1653 return n;
1654 }
1655 iov_iter_init(i, type, p, nr_segs, n);
1656 *iov = p == *iov ? NULL : p;
1657 return 0;
1658}
1659#endif
1660
1661int import_single_range(int rw, void __user *buf, size_t len,
1662 struct iovec *iov, struct iov_iter *i)
1663{
1664 if (len > MAX_RW_COUNT)
1665 len = MAX_RW_COUNT;
1666 if (unlikely(!access_ok(!rw, buf, len)))
1667 return -EFAULT;
1668
1669 iov->iov_base = buf;
1670 iov->iov_len = len;
1671 iov_iter_init(i, rw, iov, 1, len);
1672 return 0;
1673}
e1267585 1674EXPORT_SYMBOL(import_single_range);
09cf698a
AV
1675
1676int iov_iter_for_each_range(struct iov_iter *i, size_t bytes,
1677 int (*f)(struct kvec *vec, void *context),
1678 void *context)
1679{
1680 struct kvec w;
1681 int err = -EINVAL;
1682 if (!bytes)
1683 return 0;
1684
1685 iterate_all_kinds(i, bytes, v, -EINVAL, ({
1686 w.iov_base = kmap(v.bv_page) + v.bv_offset;
1687 w.iov_len = v.bv_len;
1688 err = f(&w, context);
1689 kunmap(v.bv_page);
1690 err;}), ({
1691 w = v;
1692 err = f(&w, context);})
1693 )
1694 return err;
1695}
1696EXPORT_SYMBOL(iov_iter_for_each_range);