Commit | Line | Data |
---|---|---|
1da177e4 LT |
1 | /* |
2 | * Created: Fri Jan 8 09:01:26 1999 by faith@valinux.com | |
3 | * | |
4 | * Copyright 1999 Precision Insight, Inc., Cedar Park, Texas. | |
5 | * Copyright 2000 VA Linux Systems, Inc., Sunnyvale, California. | |
6 | * All Rights Reserved. | |
7 | * | |
ec8f112d DH |
8 | * Author Rickard E. (Rik) Faith <faith@valinux.com> |
9 | * Author Gareth Hughes <gareth@valinux.com> | |
10 | * | |
1da177e4 LT |
11 | * Permission is hereby granted, free of charge, to any person obtaining a |
12 | * copy of this software and associated documentation files (the "Software"), | |
13 | * to deal in the Software without restriction, including without limitation | |
14 | * the rights to use, copy, modify, merge, publish, distribute, sublicense, | |
15 | * and/or sell copies of the Software, and to permit persons to whom the | |
16 | * Software is furnished to do so, subject to the following conditions: | |
17 | * | |
18 | * The above copyright notice and this permission notice (including the next | |
19 | * paragraph) shall be included in all copies or substantial portions of the | |
20 | * Software. | |
21 | * | |
22 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | |
23 | * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | |
24 | * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | |
25 | * VA LINUX SYSTEMS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR | |
26 | * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, | |
27 | * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR | |
28 | * OTHER DEALINGS IN THE SOFTWARE. | |
29 | */ | |
30 | ||
760285e7 | 31 | #include <linux/export.h> |
505b5240 | 32 | #include <linux/nospec.h> |
0500c04e SR |
33 | #include <linux/pci.h> |
34 | #include <linux/uaccess.h> | |
35 | ||
0500c04e SR |
36 | #include <drm/drm_auth.h> |
37 | #include <drm/drm_crtc.h> | |
38 | #include <drm/drm_drv.h> | |
39 | #include <drm/drm_file.h> | |
40 | #include <drm/drm_ioctl.h> | |
41 | #include <drm/drm_print.h> | |
42 | ||
43 | #include "drm_crtc_internal.h" | |
44 | #include "drm_internal.h" | |
1da177e4 | 45 | |
a3257256 DV |
46 | /** |
47 | * DOC: getunique and setversion story | |
48 | * | |
49 | * BEWARE THE DRAGONS! MIND THE TRAPDOORS! | |
50 | * | |
51 | * In an attempt to warn anyone else who's trying to figure out what's going | |
52 | * on here, I'll try to summarize the story. First things first, let's clear up | |
53 | * the names, because the kernel internals, libdrm and the ioctls are all named | |
54 | * differently: | |
55 | * | |
56 | * - GET_UNIQUE ioctl, implemented by drm_getunique is wrapped up in libdrm | |
57 | * through the drmGetBusid function. | |
58 | * - The libdrm drmSetBusid function is backed by the SET_UNIQUE ioctl. All | |
59 | * that code is nerved in the kernel with drm_invalid_op(). | |
60 | * - The internal set_busid kernel functions and driver callbacks are | |
61 | * exclusively use by the SET_VERSION ioctl, because only drm 1.0 (which is | |
62 | * nerved) allowed userspace to set the busid through the above ioctl. | |
63 | * - Other ioctls and functions involved are named consistently. | |
64 | * | |
65 | * For anyone wondering what's the difference between drm 1.1 and 1.4: Correctly | |
66 | * handling pci domains in the busid on ppc. Doing this correctly was only | |
67 | * implemented in libdrm in 2010, hence can't be nerved yet. No one knows what's | |
68 | * special with drm 1.2 and 1.3. | |
69 | * | |
70 | * Now the actual horror story of how device lookup in drm works. At large, | |
71 | * there's 2 different ways, either by busid, or by device driver name. | |
72 | * | |
73 | * Opening by busid is fairly simple: | |
74 | * | |
75 | * 1. First call SET_VERSION to make sure pci domains are handled properly. As a | |
76 | * side-effect this fills out the unique name in the master structure. | |
77 | * 2. Call GET_UNIQUE to read out the unique name from the master structure, | |
78 | * which matches the busid thanks to step 1. If it doesn't, proceed to try | |
79 | * the next device node. | |
80 | * | |
81 | * Opening by name is slightly different: | |
82 | * | |
83 | * 1. Directly call VERSION to get the version and to match against the driver | |
84 | * name returned by that ioctl. Note that SET_VERSION is not called, which | |
62a4ddcb | 85 | * means the unique name for the master node just opening is _not_ filled |
a3257256 DV |
86 | * out. This despite that with current drm device nodes are always bound to |
87 | * one device, and can't be runtime assigned like with drm 1.0. | |
88 | * 2. Match driver name. If it mismatches, proceed to the next device node. | |
89 | * 3. Call GET_UNIQUE, and check whether the unique name has length zero (by | |
90 | * checking that the first byte in the string is 0). If that's not the case | |
91 | * libdrm skips and proceeds to the next device node. Probably this is just | |
92 | * copypasta from drm 1.0 times where a set unique name meant that the driver | |
93 | * was in use already, but that's just conjecture. | |
94 | * | |
95 | * Long story short: To keep the open by name logic working, GET_UNIQUE must | |
96 | * _not_ return a unique string when SET_VERSION hasn't been called yet, | |
97 | * otherwise libdrm breaks. Even when that unique string can't ever change, and | |
98 | * is totally irrelevant for actually opening the device because runtime | |
99 | * assignable device instances were only support in drm 1.0, which is long dead. | |
100 | * But the libdrm code in drmOpenByName somehow survived, hence this can't be | |
101 | * broken. | |
102 | */ | |
103 | ||
0aaf20cf | 104 | /* |
1da177e4 | 105 | * Get the bus id. |
b5e89ed5 | 106 | * |
1da177e4 | 107 | * \param inode device inode. |
6c340eac | 108 | * \param file_priv DRM file private. |
1da177e4 LT |
109 | * \param cmd command. |
110 | * \param arg user argument, pointing to a drm_unique structure. | |
111 | * \return zero on success or a negative number on failure. | |
112 | * | |
113 | * Copies the bus id from drm_device::unique into user space. | |
114 | */ | |
17e3dade | 115 | int drm_getunique(struct drm_device *dev, void *data, |
c153f45f | 116 | struct drm_file *file_priv) |
1da177e4 | 117 | { |
c153f45f | 118 | struct drm_unique *u = data; |
b436acd1 | 119 | struct drm_master *master; |
1da177e4 | 120 | |
b436acd1 DCZX |
121 | mutex_lock(&dev->master_mutex); |
122 | master = file_priv->master; | |
7c1c2871 | 123 | if (u->unique_len >= master->unique_len) { |
5acc614a | 124 | if (copy_to_user(u->unique, master->unique, master->unique_len)) { |
b436acd1 | 125 | mutex_unlock(&dev->master_mutex); |
1da177e4 | 126 | return -EFAULT; |
5acc614a | 127 | } |
1da177e4 | 128 | } |
7c1c2871 | 129 | u->unique_len = master->unique_len; |
b436acd1 | 130 | mutex_unlock(&dev->master_mutex); |
c153f45f | 131 | |
1da177e4 LT |
132 | return 0; |
133 | } | |
134 | ||
3fb688fd CW |
135 | static void |
136 | drm_unset_busid(struct drm_device *dev, | |
137 | struct drm_master *master) | |
138 | { | |
3fb688fd CW |
139 | kfree(master->unique); |
140 | master->unique = NULL; | |
141 | master->unique_len = 0; | |
3fb688fd CW |
142 | } |
143 | ||
7c1c2871 | 144 | static int drm_set_busid(struct drm_device *dev, struct drm_file *file_priv) |
1da177e4 | 145 | { |
7c1c2871 | 146 | struct drm_master *master = file_priv->master; |
8410ea3b | 147 | int ret; |
3fb688fd CW |
148 | |
149 | if (master->unique != NULL) | |
150 | drm_unset_busid(dev, master); | |
fe34765b | 151 | |
22a884cf | 152 | if (dev->dev && dev_is_pci(dev->dev)) { |
5c484cee | 153 | ret = drm_pci_set_busid(dev, master); |
915b4d11 DH |
154 | if (ret) { |
155 | drm_unset_busid(dev, master); | |
156 | return ret; | |
157 | } | |
ca8e2ad7 | 158 | } else { |
5079c464 | 159 | WARN_ON(!dev->unique); |
ca8e2ad7 TR |
160 | master->unique = kstrdup(dev->unique, GFP_KERNEL); |
161 | if (master->unique) | |
162 | master->unique_len = strlen(dev->unique); | |
163 | } | |
164 | ||
1da177e4 LT |
165 | return 0; |
166 | } | |
167 | ||
0aaf20cf | 168 | /* |
1da177e4 LT |
169 | * Get client information. |
170 | * | |
171 | * \param inode device inode. | |
6c340eac | 172 | * \param file_priv DRM file private. |
1da177e4 LT |
173 | * \param cmd command. |
174 | * \param arg user argument, pointing to a drm_client structure. | |
b5e89ed5 | 175 | * |
1da177e4 LT |
176 | * \return zero on success or a negative number on failure. |
177 | * | |
178 | * Searches for the client with the specified index and copies its information | |
179 | * into userspace | |
180 | */ | |
9e92662d | 181 | int drm_getclient(struct drm_device *dev, void *data, |
c153f45f | 182 | struct drm_file *file_priv) |
1da177e4 | 183 | { |
c153f45f | 184 | struct drm_client *client = data; |
09b4ea47 | 185 | |
719524df DV |
186 | /* |
187 | * Hollowed-out getclient ioctl to keep some dead old drm tests/tools | |
188 | * not breaking completely. Userspace tools stop enumerating one they | |
189 | * get -EINVAL, hence this is the return value we need to hand back for | |
190 | * no clients tracked. | |
191 | * | |
192 | * Unfortunately some clients (*cough* libva *cough*) use this in a fun | |
193 | * attempt to figure out whether they're authenticated or not. Since | |
194 | * that's the only thing they care about, give it to the directly | |
195 | * instead of walking one giant list. | |
196 | */ | |
197 | if (client->idx == 0) { | |
198 | client->auth = file_priv->authenticated; | |
a8c79818 DH |
199 | client->pid = task_pid_vnr(current); |
200 | client->uid = overflowuid; | |
719524df DV |
201 | client->magic = 0; |
202 | client->iocs = 0; | |
203 | ||
204 | return 0; | |
205 | } else { | |
206 | return -EINVAL; | |
bd1b331f | 207 | } |
1da177e4 LT |
208 | } |
209 | ||
0aaf20cf | 210 | /* |
b5e89ed5 DA |
211 | * Get statistics information. |
212 | * | |
1da177e4 | 213 | * \param inode device inode. |
6c340eac | 214 | * \param file_priv DRM file private. |
1da177e4 LT |
215 | * \param cmd command. |
216 | * \param arg user argument, pointing to a drm_stats structure. | |
b5e89ed5 | 217 | * |
1da177e4 LT |
218 | * \return zero on success or a negative number on failure. |
219 | */ | |
78238757 | 220 | static int drm_getstats(struct drm_device *dev, void *data, |
c153f45f | 221 | struct drm_file *file_priv) |
1da177e4 | 222 | { |
c153f45f | 223 | struct drm_stats *stats = data; |
1da177e4 | 224 | |
d79cdc83 | 225 | /* Clear stats to prevent userspace from eating its stack garbage. */ |
246a3d18 | 226 | memset(stats, 0, sizeof(*stats)); |
b5e89ed5 | 227 | |
1da177e4 LT |
228 | return 0; |
229 | } | |
230 | ||
0aaf20cf | 231 | /* |
9f35421e BS |
232 | * Get device/driver capabilities |
233 | */ | |
78238757 | 234 | static int drm_getcap(struct drm_device *dev, void *data, struct drm_file *file_priv) |
9f35421e BS |
235 | { |
236 | struct drm_get_cap *req = data; | |
f837297a | 237 | struct drm_crtc *crtc; |
9f35421e BS |
238 | |
239 | req->value = 0; | |
d5264ed3 | 240 | |
f3f4c4d6 DV |
241 | /* Only some caps make sense with UMS/render-only drivers. */ |
242 | switch (req->capability) { | |
243 | case DRM_CAP_TIMESTAMP_MONOTONIC: | |
25e1a798 | 244 | req->value = 1; |
d5264ed3 | 245 | return 0; |
f3f4c4d6 | 246 | case DRM_CAP_PRIME: |
6b85aa68 | 247 | req->value = DRM_PRIME_CAP_IMPORT | DRM_PRIME_CAP_EXPORT; |
f3f4c4d6 | 248 | return 0; |
e9083420 DA |
249 | case DRM_CAP_SYNCOBJ: |
250 | req->value = drm_core_check_feature(dev, DRIVER_SYNCOBJ); | |
251 | return 0; | |
060cebb2 LL |
252 | case DRM_CAP_SYNCOBJ_TIMELINE: |
253 | req->value = drm_core_check_feature(dev, DRIVER_SYNCOBJ_TIMELINE); | |
254 | return 0; | |
d5264ed3 MD |
255 | } |
256 | ||
257 | /* Other caps only work with KMS drivers */ | |
258 | if (!drm_core_check_feature(dev, DRIVER_MODESET)) | |
69fdf420 | 259 | return -EOPNOTSUPP; |
d5264ed3 | 260 | |
e73f88af DA |
261 | switch (req->capability) { |
262 | case DRM_CAP_DUMB_BUFFER: | |
263 | if (dev->driver->dumb_create) | |
264 | req->value = 1; | |
265 | break; | |
51eab416 | 266 | case DRM_CAP_VBLANK_HIGH_CRTC: |
19b01b5f IH |
267 | req->value = 1; |
268 | break; | |
019d96cb DA |
269 | case DRM_CAP_DUMB_PREFERRED_DEPTH: |
270 | req->value = dev->mode_config.preferred_depth; | |
271 | break; | |
272 | case DRM_CAP_DUMB_PREFER_SHADOW: | |
273 | req->value = dev->mode_config.prefer_shadow; | |
274 | break; | |
62f2104f KP |
275 | case DRM_CAP_ASYNC_PAGE_FLIP: |
276 | req->value = dev->mode_config.async_page_flip; | |
277 | break; | |
f837297a | 278 | case DRM_CAP_PAGE_FLIP_TARGET: |
d5264ed3 MD |
279 | req->value = 1; |
280 | drm_for_each_crtc(crtc, dev) { | |
281 | if (!crtc->funcs->page_flip_target) | |
282 | req->value = 0; | |
f837297a MD |
283 | } |
284 | break; | |
8716ed4e AD |
285 | case DRM_CAP_CURSOR_WIDTH: |
286 | if (dev->mode_config.cursor_width) | |
287 | req->value = dev->mode_config.cursor_width; | |
288 | else | |
289 | req->value = 64; | |
290 | break; | |
291 | case DRM_CAP_CURSOR_HEIGHT: | |
292 | if (dev->mode_config.cursor_height) | |
293 | req->value = dev->mode_config.cursor_height; | |
294 | else | |
295 | req->value = 64; | |
296 | break; | |
e3eb3250 | 297 | case DRM_CAP_ADDFB2_MODIFIERS: |
2af10429 | 298 | req->value = !dev->mode_config.fb_modifiers_not_supported; |
e3eb3250 | 299 | break; |
5db06a8a ACO |
300 | case DRM_CAP_CRTC_IN_VBLANK_EVENT: |
301 | req->value = 1; | |
302 | break; | |
e4d983ac SS |
303 | case DRM_CAP_ATOMIC_ASYNC_PAGE_FLIP: |
304 | req->value = drm_core_check_feature(dev, DRIVER_ATOMIC) && | |
305 | dev->mode_config.async_page_flip; | |
306 | break; | |
e73f88af DA |
307 | default: |
308 | return -EINVAL; | |
309 | } | |
9f35421e BS |
310 | return 0; |
311 | } | |
312 | ||
0aaf20cf | 313 | /* |
1c0814fe DL |
314 | * Set device/driver capabilities |
315 | */ | |
78238757 | 316 | static int |
1c0814fe DL |
317 | drm_setclientcap(struct drm_device *dev, void *data, struct drm_file *file_priv) |
318 | { | |
61d8e328 DL |
319 | struct drm_set_client_cap *req = data; |
320 | ||
adbc8208 JRS |
321 | /* No render-only settable capabilities for now */ |
322 | ||
323 | /* Below caps that only works with KMS drivers */ | |
324 | if (!drm_core_check_feature(dev, DRIVER_MODESET)) | |
325 | return -EOPNOTSUPP; | |
326 | ||
61d8e328 DL |
327 | switch (req->capability) { |
328 | case DRM_CLIENT_CAP_STEREO_3D: | |
329 | if (req->value > 1) | |
330 | return -EINVAL; | |
331 | file_priv->stereo_allowed = req->value; | |
332 | break; | |
681e7ec7 | 333 | case DRM_CLIENT_CAP_UNIVERSAL_PLANES: |
681e7ec7 MR |
334 | if (req->value > 1) |
335 | return -EINVAL; | |
336 | file_priv->universal_planes = req->value; | |
337 | break; | |
88a48e29 | 338 | case DRM_CLIENT_CAP_ATOMIC: |
88a48e29 | 339 | if (!drm_core_check_feature(dev, DRIVER_ATOMIC)) |
69fdf420 | 340 | return -EOPNOTSUPP; |
26b1d3b5 DV |
341 | /* The modesetting DDX has a totally broken idea of atomic. */ |
342 | if (current->comm[0] == 'X' && req->value == 1) { | |
343 | pr_info("broken atomic modeset userspace detected, disabling atomic\n"); | |
344 | return -EOPNOTSUPP; | |
345 | } | |
346 | if (req->value > 2) | |
88a48e29 RC |
347 | return -EINVAL; |
348 | file_priv->atomic = req->value; | |
179f158c | 349 | file_priv->universal_planes = req->value; |
7595bda2 AN |
350 | /* |
351 | * No atomic user-space blows up on aspect ratio mode bits. | |
352 | */ | |
353 | file_priv->aspect_ratio_allowed = req->value; | |
354 | break; | |
355 | case DRM_CLIENT_CAP_ASPECT_RATIO: | |
356 | if (req->value > 1) | |
357 | return -EINVAL; | |
358 | file_priv->aspect_ratio_allowed = req->value; | |
88a48e29 | 359 | break; |
d67b6a20 LD |
360 | case DRM_CLIENT_CAP_WRITEBACK_CONNECTORS: |
361 | if (!file_priv->atomic) | |
362 | return -EINVAL; | |
363 | if (req->value > 1) | |
364 | return -EINVAL; | |
365 | file_priv->writeback_connectors = req->value; | |
366 | break; | |
9724ed6c ZR |
367 | case DRM_CLIENT_CAP_CURSOR_PLANE_HOTSPOT: |
368 | if (!drm_core_check_feature(dev, DRIVER_CURSOR_HOTSPOT)) | |
369 | return -EOPNOTSUPP; | |
370 | if (!file_priv->atomic) | |
371 | return -EINVAL; | |
372 | if (req->value > 1) | |
373 | return -EINVAL; | |
374 | file_priv->supports_virtualized_cursor_plane = req->value; | |
375 | break; | |
61d8e328 DL |
376 | default: |
377 | return -EINVAL; | |
378 | } | |
379 | ||
380 | return 0; | |
1c0814fe DL |
381 | } |
382 | ||
0aaf20cf | 383 | /* |
1da177e4 LT |
384 | * Setversion ioctl. |
385 | * | |
386 | * \param inode device inode. | |
6c340eac | 387 | * \param file_priv DRM file private. |
1da177e4 LT |
388 | * \param cmd command. |
389 | * \param arg user argument, pointing to a drm_lock structure. | |
390 | * \return zero on success or negative number on failure. | |
391 | * | |
392 | * Sets the requested interface version | |
393 | */ | |
78238757 | 394 | static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *file_priv) |
1da177e4 | 395 | { |
c153f45f EA |
396 | struct drm_set_version *sv = data; |
397 | int if_version, retcode = 0; | |
398 | ||
5acc614a | 399 | mutex_lock(&dev->master_mutex); |
c153f45f EA |
400 | if (sv->drm_di_major != -1) { |
401 | if (sv->drm_di_major != DRM_IF_MAJOR || | |
402 | sv->drm_di_minor < 0 || sv->drm_di_minor > DRM_IF_MINOR) { | |
403 | retcode = -EINVAL; | |
404 | goto done; | |
405 | } | |
406 | if_version = DRM_IF_VERSION(sv->drm_di_major, | |
407 | sv->drm_di_minor); | |
3d77461e | 408 | dev->if_version = max(if_version, dev->if_version); |
c153f45f | 409 | if (sv->drm_di_minor >= 1) { |
1da177e4 LT |
410 | /* |
411 | * Version 1.1 includes tying of DRM to specific device | |
c17c2f89 | 412 | * Version 1.4 has proper PCI domain support |
1da177e4 | 413 | */ |
3fb688fd CW |
414 | retcode = drm_set_busid(dev, file_priv); |
415 | if (retcode) | |
416 | goto done; | |
1da177e4 LT |
417 | } |
418 | } | |
419 | ||
c153f45f EA |
420 | if (sv->drm_dd_major != -1) { |
421 | if (sv->drm_dd_major != dev->driver->major || | |
422 | sv->drm_dd_minor < 0 || sv->drm_dd_minor > | |
423 | dev->driver->minor) { | |
424 | retcode = -EINVAL; | |
425 | goto done; | |
426 | } | |
1da177e4 | 427 | } |
c153f45f EA |
428 | |
429 | done: | |
430 | sv->drm_di_major = DRM_IF_MAJOR; | |
431 | sv->drm_di_minor = DRM_IF_MINOR; | |
432 | sv->drm_dd_major = dev->driver->major; | |
433 | sv->drm_dd_minor = dev->driver->minor; | |
5acc614a | 434 | mutex_unlock(&dev->master_mutex); |
c153f45f EA |
435 | |
436 | return retcode; | |
1da177e4 LT |
437 | } |
438 | ||
0aaf20cf | 439 | /** |
0ae865ef | 440 | * drm_noop - DRM no-op ioctl implementation |
0aaf20cf DV |
441 | * @dev: DRM device for the ioctl |
442 | * @data: data pointer for the ioctl | |
443 | * @file_priv: DRM file for the ioctl call | |
444 | * | |
445 | * This no-op implementation for drm ioctls is useful for deprecated | |
446 | * functionality where we can't return a failure code because existing userspace | |
447 | * checks the result of the ioctl, but doesn't care about the action. | |
448 | * | |
449 | * Always returns successfully with 0. | |
450 | */ | |
c153f45f EA |
451 | int drm_noop(struct drm_device *dev, void *data, |
452 | struct drm_file *file_priv) | |
1da177e4 | 453 | { |
723dad97 | 454 | drm_dbg_core(dev, "\n"); |
1da177e4 LT |
455 | return 0; |
456 | } | |
b2c606fe | 457 | EXPORT_SYMBOL(drm_noop); |
ec8f112d | 458 | |
0aaf20cf | 459 | /** |
0ae865ef | 460 | * drm_invalid_op - DRM invalid ioctl implementation |
0aaf20cf DV |
461 | * @dev: DRM device for the ioctl |
462 | * @data: data pointer for the ioctl | |
463 | * @file_priv: DRM file for the ioctl call | |
464 | * | |
465 | * This no-op implementation for drm ioctls is useful for deprecated | |
466 | * functionality where we really don't want to allow userspace to call the ioctl | |
467 | * any more. This is the case for old ums interfaces for drivers that | |
468 | * transitioned to kms gradually and so kept the old legacy tables around. This | |
469 | * only applies to radeon and i915 kms drivers, other drivers shouldn't need to | |
470 | * use this function. | |
471 | * | |
472 | * Always fails with a return value of -EINVAL. | |
473 | */ | |
4b63539b DV |
474 | int drm_invalid_op(struct drm_device *dev, void *data, |
475 | struct drm_file *file_priv) | |
476 | { | |
477 | return -EINVAL; | |
478 | } | |
479 | EXPORT_SYMBOL(drm_invalid_op); | |
480 | ||
0aaf20cf | 481 | /* |
ec8f112d DH |
482 | * Copy and IOCTL return string to user space |
483 | */ | |
484 | static int drm_copy_field(char __user *buf, size_t *buf_len, const char *value) | |
485 | { | |
94dc3471 | 486 | size_t len; |
ec8f112d | 487 | |
f6ee3040 JMC |
488 | /* don't attempt to copy a NULL pointer */ |
489 | if (WARN_ONCE(!value, "BUG: the value to copy was not set!")) { | |
490 | *buf_len = 0; | |
491 | return 0; | |
492 | } | |
493 | ||
ec8f112d DH |
494 | /* don't overflow userbuf */ |
495 | len = strlen(value); | |
496 | if (len > *buf_len) | |
497 | len = *buf_len; | |
498 | ||
499 | /* let userspace know exact length of driver value (which could be | |
500 | * larger than the userspace-supplied buffer) */ | |
501 | *buf_len = strlen(value); | |
502 | ||
503 | /* finally, try filling in the userbuf */ | |
504 | if (len && buf) | |
505 | if (copy_to_user(buf, value, len)) | |
506 | return -EFAULT; | |
507 | return 0; | |
508 | } | |
509 | ||
0aaf20cf | 510 | /* |
ec8f112d DH |
511 | * Get version information |
512 | * | |
513 | * \param inode device inode. | |
514 | * \param filp file pointer. | |
515 | * \param cmd command. | |
516 | * \param arg user argument, pointing to a drm_version structure. | |
517 | * \return zero on success or negative number on failure. | |
518 | * | |
519 | * Fills in the version information in \p arg. | |
520 | */ | |
012c6741 | 521 | int drm_version(struct drm_device *dev, void *data, |
ec8f112d DH |
522 | struct drm_file *file_priv) |
523 | { | |
524 | struct drm_version *version = data; | |
525 | int err; | |
526 | ||
527 | version->version_major = dev->driver->major; | |
528 | version->version_minor = dev->driver->minor; | |
529 | version->version_patchlevel = dev->driver->patchlevel; | |
530 | err = drm_copy_field(version->name, &version->name_len, | |
531 | dev->driver->name); | |
532 | if (!err) | |
533 | err = drm_copy_field(version->date, &version->date_len, | |
534 | dev->driver->date); | |
535 | if (!err) | |
536 | err = drm_copy_field(version->desc, &version->desc_len, | |
537 | dev->driver->desc); | |
538 | ||
539 | return err; | |
540 | } | |
541 | ||
7b812171 | 542 | static int drm_ioctl_permit(u32 flags, struct drm_file *file_priv) |
ec8f112d DH |
543 | { |
544 | /* ROOT_ONLY is only for CAP_SYS_ADMIN */ | |
545 | if (unlikely((flags & DRM_ROOT_ONLY) && !capable(CAP_SYS_ADMIN))) | |
546 | return -EACCES; | |
547 | ||
dbb92471 DA |
548 | /* AUTH is only for authenticated or render client */ |
549 | if (unlikely((flags & DRM_AUTH) && !drm_is_render_client(file_priv) && | |
550 | !file_priv->authenticated)) | |
551 | return -EACCES; | |
ec8f112d DH |
552 | |
553 | /* MASTER is only for master or control clients */ | |
937f3acc | 554 | if (unlikely((flags & DRM_MASTER) && |
0d49f303 | 555 | !drm_is_current_master(file_priv))) |
ec8f112d DH |
556 | return -EACCES; |
557 | ||
558 | /* Render clients must be explicitly allowed */ | |
559 | if (unlikely(!(flags & DRM_RENDER_ALLOW) && | |
560 | drm_is_render_client(file_priv))) | |
561 | return -EACCES; | |
562 | ||
563 | return 0; | |
564 | } | |
565 | ||
066626d5 EV |
566 | #define DRM_IOCTL_DEF(ioctl, _func, _flags) \ |
567 | [DRM_IOCTL_NR(ioctl)] = { \ | |
568 | .cmd = ioctl, \ | |
569 | .func = _func, \ | |
570 | .flags = _flags, \ | |
571 | .name = #ioctl \ | |
572 | } | |
78238757 | 573 | |
0aaf20cf | 574 | /* Ioctl table */ |
78238757 | 575 | static const struct drm_ioctl_desc drm_ioctls[] = { |
75426367 DV |
576 | DRM_IOCTL_DEF(DRM_IOCTL_VERSION, drm_version, DRM_RENDER_ALLOW), |
577 | DRM_IOCTL_DEF(DRM_IOCTL_GET_UNIQUE, drm_getunique, 0), | |
578 | DRM_IOCTL_DEF(DRM_IOCTL_GET_MAGIC, drm_getmagic, 0), | |
61ae2270 | 579 | |
75426367 DV |
580 | DRM_IOCTL_DEF(DRM_IOCTL_GET_CLIENT, drm_getclient, 0), |
581 | DRM_IOCTL_DEF(DRM_IOCTL_GET_STATS, drm_getstats, 0), | |
582 | DRM_IOCTL_DEF(DRM_IOCTL_GET_CAP, drm_getcap, DRM_RENDER_ALLOW), | |
583 | DRM_IOCTL_DEF(DRM_IOCTL_SET_CLIENT_CAP, drm_setclientcap, 0), | |
584 | DRM_IOCTL_DEF(DRM_IOCTL_SET_VERSION, drm_setversion, DRM_MASTER), | |
78238757 | 585 | |
46bfdf9a | 586 | DRM_IOCTL_DEF(DRM_IOCTL_SET_UNIQUE, drm_invalid_op, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY), |
78238757 DV |
587 | DRM_IOCTL_DEF(DRM_IOCTL_BLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY), |
588 | DRM_IOCTL_DEF(DRM_IOCTL_UNBLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY), | |
75426367 | 589 | DRM_IOCTL_DEF(DRM_IOCTL_AUTH_MAGIC, drm_authmagic, DRM_MASTER), |
78238757 | 590 | |
45bc3d26 EV |
591 | DRM_IOCTL_DEF(DRM_IOCTL_SET_MASTER, drm_setmaster_ioctl, 0), |
592 | DRM_IOCTL_DEF(DRM_IOCTL_DROP_MASTER, drm_dropmaster_ioctl, 0), | |
78238757 | 593 | |
78238757 DV |
594 | DRM_IOCTL_DEF(DRM_IOCTL_ADD_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY), |
595 | DRM_IOCTL_DEF(DRM_IOCTL_RM_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY), | |
596 | ||
78238757 DV |
597 | DRM_IOCTL_DEF(DRM_IOCTL_FINISH, drm_noop, DRM_AUTH), |
598 | ||
2798ffcc | 599 | DRM_IOCTL_DEF(DRM_IOCTL_WAIT_VBLANK, drm_wait_vblank_ioctl, 0), |
78238757 | 600 | |
78238757 DV |
601 | DRM_IOCTL_DEF(DRM_IOCTL_UPDATE_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY), |
602 | ||
75426367 DV |
603 | DRM_IOCTL_DEF(DRM_IOCTL_GEM_CLOSE, drm_gem_close_ioctl, DRM_RENDER_ALLOW), |
604 | DRM_IOCTL_DEF(DRM_IOCTL_GEM_FLINK, drm_gem_flink_ioctl, DRM_AUTH), | |
605 | DRM_IOCTL_DEF(DRM_IOCTL_GEM_OPEN, drm_gem_open_ioctl, DRM_AUTH), | |
606 | ||
607 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETRESOURCES, drm_mode_getresources, 0), | |
608 | ||
30a95852 EV |
609 | DRM_IOCTL_DEF(DRM_IOCTL_PRIME_HANDLE_TO_FD, drm_prime_handle_to_fd_ioctl, DRM_RENDER_ALLOW), |
610 | DRM_IOCTL_DEF(DRM_IOCTL_PRIME_FD_TO_HANDLE, drm_prime_fd_to_handle_ioctl, DRM_RENDER_ALLOW), | |
75426367 DV |
611 | |
612 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPLANERESOURCES, drm_mode_getplane_res, 0), | |
613 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETCRTC, drm_mode_getcrtc, 0), | |
614 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETCRTC, drm_mode_setcrtc, DRM_MASTER), | |
615 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPLANE, drm_mode_getplane, 0), | |
616 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETPLANE, drm_mode_setplane, DRM_MASTER), | |
617 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_CURSOR, drm_mode_cursor_ioctl, DRM_MASTER), | |
618 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETGAMMA, drm_mode_gamma_get_ioctl, 0), | |
619 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETGAMMA, drm_mode_gamma_set_ioctl, DRM_MASTER), | |
620 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETENCODER, drm_mode_getencoder, 0), | |
621 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETCONNECTOR, drm_mode_getconnector, 0), | |
622 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_ATTACHMODE, drm_noop, DRM_MASTER), | |
623 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_DETACHMODE, drm_noop, DRM_MASTER), | |
624 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPROPERTY, drm_mode_getproperty_ioctl, 0), | |
625 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETPROPERTY, drm_connector_property_set_ioctl, DRM_MASTER), | |
626 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPROPBLOB, drm_mode_getblob_ioctl, 0), | |
627 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETFB, drm_mode_getfb, 0), | |
455e00f1 | 628 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETFB2, drm_mode_getfb2_ioctl, 0), |
75426367 DV |
629 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_ADDFB, drm_mode_addfb_ioctl, 0), |
630 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_ADDFB2, drm_mode_addfb2_ioctl, 0), | |
631 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_RMFB, drm_mode_rmfb_ioctl, 0), | |
d208d875 | 632 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_CLOSEFB, drm_mode_closefb_ioctl, 0), |
75426367 DV |
633 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_PAGE_FLIP, drm_mode_page_flip_ioctl, DRM_MASTER), |
634 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_DIRTYFB, drm_mode_dirtyfb_ioctl, DRM_MASTER), | |
635 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATE_DUMB, drm_mode_create_dumb_ioctl, 0), | |
636 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_MAP_DUMB, drm_mode_mmap_dumb_ioctl, 0), | |
637 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_DESTROY_DUMB, drm_mode_destroy_dumb_ioctl, 0), | |
638 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_OBJ_GETPROPERTIES, drm_mode_obj_get_properties_ioctl, 0), | |
639 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_OBJ_SETPROPERTY, drm_mode_obj_set_property_ioctl, DRM_MASTER), | |
640 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_CURSOR2, drm_mode_cursor2_ioctl, DRM_MASTER), | |
641 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_ATOMIC, drm_mode_atomic_ioctl, DRM_MASTER), | |
642 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATEPROPBLOB, drm_mode_createblob_ioctl, 0), | |
643 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_DESTROYPROPBLOB, drm_mode_destroyblob_ioctl, 0), | |
e9083420 DA |
644 | |
645 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_CREATE, drm_syncobj_create_ioctl, | |
75426367 | 646 | DRM_RENDER_ALLOW), |
e9083420 | 647 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_DESTROY, drm_syncobj_destroy_ioctl, |
75426367 | 648 | DRM_RENDER_ALLOW), |
e9083420 | 649 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD, drm_syncobj_handle_to_fd_ioctl, |
75426367 | 650 | DRM_RENDER_ALLOW), |
e9083420 | 651 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE, drm_syncobj_fd_to_handle_ioctl, |
75426367 | 652 | DRM_RENDER_ALLOW), |
ea569910 | 653 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_TRANSFER, drm_syncobj_transfer_ioctl, |
75426367 | 654 | DRM_RENDER_ALLOW), |
5e60a10e | 655 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_WAIT, drm_syncobj_wait_ioctl, |
75426367 | 656 | DRM_RENDER_ALLOW), |
01d6c357 | 657 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT, drm_syncobj_timeline_wait_ioctl, |
75426367 | 658 | DRM_RENDER_ALLOW), |
c7a47229 SS |
659 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_EVENTFD, drm_syncobj_eventfd_ioctl, |
660 | DRM_RENDER_ALLOW), | |
aa4035d2 | 661 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_RESET, drm_syncobj_reset_ioctl, |
75426367 | 662 | DRM_RENDER_ALLOW), |
ffa9443f | 663 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_SIGNAL, drm_syncobj_signal_ioctl, |
75426367 | 664 | DRM_RENDER_ALLOW), |
50d1ebef | 665 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL, drm_syncobj_timeline_signal_ioctl, |
75426367 | 666 | DRM_RENDER_ALLOW), |
27b575a9 | 667 | DRM_IOCTL_DEF(DRM_IOCTL_SYNCOBJ_QUERY, drm_syncobj_query_ioctl, |
75426367 DV |
668 | DRM_RENDER_ALLOW), |
669 | DRM_IOCTL_DEF(DRM_IOCTL_CRTC_GET_SEQUENCE, drm_crtc_get_sequence_ioctl, 0), | |
670 | DRM_IOCTL_DEF(DRM_IOCTL_CRTC_QUEUE_SEQUENCE, drm_crtc_queue_sequence_ioctl, 0), | |
671 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATE_LEASE, drm_mode_create_lease_ioctl, DRM_MASTER), | |
672 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_LIST_LESSEES, drm_mode_list_lessees_ioctl, DRM_MASTER), | |
673 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_GET_LEASE, drm_mode_get_lease_ioctl, DRM_MASTER), | |
674 | DRM_IOCTL_DEF(DRM_IOCTL_MODE_REVOKE_LEASE, drm_mode_revoke_lease_ioctl, DRM_MASTER), | |
78238757 DV |
675 | }; |
676 | ||
da8ac4bf | 677 | #define DRM_CORE_IOCTL_COUNT ARRAY_SIZE(drm_ioctls) |
78238757 | 678 | |
2640981f DV |
679 | /** |
680 | * DOC: driver specific ioctls | |
681 | * | |
682 | * First things first, driver private IOCTLs should only be needed for drivers | |
683 | * supporting rendering. Kernel modesetting is all standardized, and extended | |
684 | * through properties. There are a few exceptions in some existing drivers, | |
685 | * which define IOCTL for use by the display DRM master, but they all predate | |
686 | * properties. | |
687 | * | |
688 | * Now if you do have a render driver you always have to support it through | |
689 | * driver private properties. There's a few steps needed to wire all the things | |
690 | * up. | |
691 | * | |
692 | * First you need to define the structure for your IOCTL in your driver private | |
693 | * UAPI header in ``include/uapi/drm/my_driver_drm.h``:: | |
694 | * | |
695 | * struct my_driver_operation { | |
696 | * u32 some_thing; | |
697 | * u32 another_thing; | |
698 | * }; | |
699 | * | |
700 | * Please make sure that you follow all the best practices from | |
72ef5e52 | 701 | * ``Documentation/process/botching-up-ioctls.rst``. Note that drm_ioctl() |
2640981f DV |
702 | * automatically zero-extends structures, hence make sure you can add more stuff |
703 | * at the end, i.e. don't put a variable sized array there. | |
704 | * | |
705 | * Then you need to define your IOCTL number, using one of DRM_IO(), DRM_IOR(), | |
706 | * DRM_IOW() or DRM_IOWR(). It must start with the DRM_IOCTL\_ prefix:: | |
707 | * | |
708 | * ##define DRM_IOCTL_MY_DRIVER_OPERATION \ | |
709 | * DRM_IOW(DRM_COMMAND_BASE, struct my_driver_operation) | |
937f3acc | 710 | * |
2640981f DV |
711 | * DRM driver private IOCTL must be in the range from DRM_COMMAND_BASE to |
712 | * DRM_COMMAND_END. Finally you need an array of &struct drm_ioctl_desc to wire | |
bb2eaba6 | 713 | * up the handlers and set the access rights:: |
2640981f DV |
714 | * |
715 | * static const struct drm_ioctl_desc my_driver_ioctls[] = { | |
716 | * DRM_IOCTL_DEF_DRV(MY_DRIVER_OPERATION, my_driver_operation, | |
717 | * DRM_AUTH|DRM_RENDER_ALLOW), | |
718 | * }; | |
719 | * | |
720 | * And then assign this to the &drm_driver.ioctls field in your driver | |
721 | * structure. | |
bb2eaba6 DV |
722 | * |
723 | * See the separate chapter on :ref:`file operations<drm_driver_fops>` for how | |
724 | * the driver-specific IOCTLs are wired up. | |
2640981f DV |
725 | */ |
726 | ||
7f0dfc16 AV |
727 | long drm_ioctl_kernel(struct file *file, drm_ioctl_t *func, void *kdata, |
728 | u32 flags) | |
729 | { | |
730 | struct drm_file *file_priv = file->private_data; | |
731 | struct drm_device *dev = file_priv->minor->dev; | |
2798ffcc | 732 | int ret; |
7f0dfc16 | 733 | |
1c7a387f TU |
734 | /* Update drm_file owner if fd was passed along. */ |
735 | drm_file_update_pid(file_priv); | |
736 | ||
c07dcd61 | 737 | if (drm_dev_is_unplugged(dev)) |
7f0dfc16 AV |
738 | return -ENODEV; |
739 | ||
2798ffcc TZ |
740 | ret = drm_ioctl_permit(flags, file_priv); |
741 | if (unlikely(ret)) | |
742 | return ret; | |
743 | ||
744 | return func(dev, kdata, file_priv); | |
7f0dfc16 | 745 | } |
aeba0390 | 746 | EXPORT_SYMBOL(drm_ioctl_kernel); |
7f0dfc16 | 747 | |
ec8f112d | 748 | /** |
0aaf20cf DV |
749 | * drm_ioctl - ioctl callback implementation for DRM drivers |
750 | * @filp: file this ioctl is called on | |
751 | * @cmd: ioctl cmd number | |
752 | * @arg: user argument | |
ec8f112d | 753 | * |
2640981f DV |
754 | * Looks up the ioctl function in the DRM core and the driver dispatch table, |
755 | * stored in &drm_driver.ioctls. It checks for necessary permission by calling | |
756 | * drm_ioctl_permit(), and dispatches to the respective function. | |
0aaf20cf DV |
757 | * |
758 | * Returns: | |
759 | * Zero on success, negative error code on failure. | |
ec8f112d DH |
760 | */ |
761 | long drm_ioctl(struct file *filp, | |
762 | unsigned int cmd, unsigned long arg) | |
763 | { | |
764 | struct drm_file *file_priv = filp->private_data; | |
765 | struct drm_device *dev; | |
766 | const struct drm_ioctl_desc *ioctl = NULL; | |
767 | drm_ioctl_t *func; | |
768 | unsigned int nr = DRM_IOCTL_NR(cmd); | |
769 | int retcode = -EINVAL; | |
770 | char stack_kdata[128]; | |
771 | char *kdata = NULL; | |
01d3434a | 772 | unsigned int in_size, out_size, drv_size, ksize; |
ea487835 | 773 | bool is_driver_ioctl; |
ec8f112d DH |
774 | |
775 | dev = file_priv->minor->dev; | |
776 | ||
c07dcd61 | 777 | if (drm_dev_is_unplugged(dev)) |
ec8f112d DH |
778 | return -ENODEV; |
779 | ||
da8ac4bf S |
780 | if (DRM_IOCTL_TYPE(cmd) != DRM_IOCTL_BASE) |
781 | return -ENOTTY; | |
3abab27c | 782 | |
ea487835 DV |
783 | is_driver_ioctl = nr >= DRM_COMMAND_BASE && nr < DRM_COMMAND_END; |
784 | ||
785 | if (is_driver_ioctl) { | |
83be0038 | 786 | /* driver ioctl */ |
505b5240 GS |
787 | unsigned int index = nr - DRM_COMMAND_BASE; |
788 | ||
789 | if (index >= dev->driver->num_ioctls) | |
83be0038 | 790 | goto err_i1; |
505b5240 GS |
791 | index = array_index_nospec(index, dev->driver->num_ioctls); |
792 | ioctl = &dev->driver->ioctls[index]; | |
83be0038 VS |
793 | } else { |
794 | /* core ioctl */ | |
795 | if (nr >= DRM_CORE_IOCTL_COUNT) | |
796 | goto err_i1; | |
505b5240 | 797 | nr = array_index_nospec(nr, DRM_CORE_IOCTL_COUNT); |
ec8f112d | 798 | ioctl = &drm_ioctls[nr]; |
83be0038 | 799 | } |
ec8f112d | 800 | |
83be0038 | 801 | drv_size = _IOC_SIZE(ioctl->cmd); |
01d3434a CW |
802 | out_size = in_size = _IOC_SIZE(cmd); |
803 | if ((cmd & ioctl->cmd & IOC_IN) == 0) | |
804 | in_size = 0; | |
805 | if ((cmd & ioctl->cmd & IOC_OUT) == 0) | |
806 | out_size = 0; | |
807 | ksize = max(max(in_size, out_size), drv_size); | |
ec8f112d | 808 | |
723dad97 TU |
809 | drm_dbg_core(dev, "comm=\"%s\" pid=%d, dev=0x%lx, auth=%d, %s\n", |
810 | current->comm, task_pid_nr(current), | |
811 | (long)old_encode_dev(file_priv->minor->kdev->devt), | |
812 | file_priv->authenticated, ioctl->name); | |
ec8f112d DH |
813 | |
814 | /* Do not trust userspace, use our own definition */ | |
815 | func = ioctl->func; | |
816 | ||
817 | if (unlikely(!func)) { | |
723dad97 | 818 | drm_dbg_core(dev, "no function\n"); |
ec8f112d DH |
819 | retcode = -EINVAL; |
820 | goto err_i1; | |
821 | } | |
822 | ||
01d3434a CW |
823 | if (ksize <= sizeof(stack_kdata)) { |
824 | kdata = stack_kdata; | |
825 | } else { | |
826 | kdata = kmalloc(ksize, GFP_KERNEL); | |
827 | if (!kdata) { | |
828 | retcode = -ENOMEM; | |
829 | goto err_i1; | |
ec8f112d | 830 | } |
ec8f112d DH |
831 | } |
832 | ||
01d3434a CW |
833 | if (copy_from_user(kdata, (void __user *)arg, in_size) != 0) { |
834 | retcode = -EFAULT; | |
835 | goto err_i1; | |
ec8f112d DH |
836 | } |
837 | ||
01d3434a CW |
838 | if (ksize > in_size) |
839 | memset(kdata + in_size, 0, ksize - in_size); | |
840 | ||
7f0dfc16 | 841 | retcode = drm_ioctl_kernel(filp, func, kdata, ioctl->flags); |
01d3434a CW |
842 | if (copy_to_user((void __user *)arg, kdata, out_size) != 0) |
843 | retcode = -EFAULT; | |
ec8f112d DH |
844 | |
845 | err_i1: | |
846 | if (!ioctl) | |
723dad97 TU |
847 | drm_dbg_core(dev, |
848 | "invalid ioctl: comm=\"%s\", pid=%d, dev=0x%lx, auth=%d, cmd=0x%02x, nr=0x%02x\n", | |
849 | current->comm, task_pid_nr(current), | |
850 | (long)old_encode_dev(file_priv->minor->kdev->devt), | |
851 | file_priv->authenticated, cmd, nr); | |
ec8f112d DH |
852 | |
853 | if (kdata != stack_kdata) | |
854 | kfree(kdata); | |
855 | if (retcode) | |
723dad97 TU |
856 | drm_dbg_core(dev, "comm=\"%s\", pid=%d, ret=%d\n", |
857 | current->comm, task_pid_nr(current), retcode); | |
ec8f112d DH |
858 | return retcode; |
859 | } | |
860 | EXPORT_SYMBOL(drm_ioctl); | |
861 | ||
862 | /** | |
863 | * drm_ioctl_flags - Check for core ioctl and return ioctl permission flags | |
0aaf20cf DV |
864 | * @nr: ioctl number |
865 | * @flags: where to return the ioctl permission flags | |
866 | * | |
867 | * This ioctl is only used by the vmwgfx driver to augment the access checks | |
868 | * done by the drm core and insofar a pretty decent layering violation. This | |
869 | * shouldn't be used by any drivers. | |
ec8f112d | 870 | * |
0aaf20cf | 871 | * Returns: |
2ae99588 | 872 | * True if the @nr corresponds to a DRM core ioctl number, false otherwise. |
ec8f112d DH |
873 | */ |
874 | bool drm_ioctl_flags(unsigned int nr, unsigned int *flags) | |
875 | { | |
7ef5f82b VS |
876 | if (nr >= DRM_COMMAND_BASE && nr < DRM_COMMAND_END) |
877 | return false; | |
878 | ||
879 | if (nr >= DRM_CORE_IOCTL_COUNT) | |
880 | return false; | |
505b5240 | 881 | nr = array_index_nospec(nr, DRM_CORE_IOCTL_COUNT); |
ec8f112d | 882 | |
7ef5f82b VS |
883 | *flags = drm_ioctls[nr].flags; |
884 | return true; | |
ec8f112d DH |
885 | } |
886 | EXPORT_SYMBOL(drm_ioctl_flags); |