1 /* $NetBSD: drm_ioc32.c,v 1.2 2018/08/27 04:58:19 riastradh Exp $ */ 2 3 /** 4 * \file drm_ioc32.c 5 * 6 * 32-bit ioctl compatibility routines for the DRM. 7 * 8 * \author Paul Mackerras <paulus@samba.org> 9 * 10 * Copyright (C) Paul Mackerras 2005. 11 * All Rights Reserved. 12 * 13 * Permission is hereby granted, free of charge, to any person obtaining a 14 * copy of this software and associated documentation files (the "Software"), 15 * to deal in the Software without restriction, including without limitation 16 * the rights to use, copy, modify, merge, publish, distribute, sublicense, 17 * and/or sell copies of the Software, and to permit persons to whom the 18 * Software is furnished to do so, subject to the following conditions: 19 * 20 * The above copyright notice and this permission notice (including the next 21 * paragraph) shall be included in all copies or substantial portions of the 22 * Software. 23 * 24 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 25 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 26 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 27 * THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, 28 * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 29 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS 30 * IN THE SOFTWARE. 31 */ 32 #include <sys/cdefs.h> 33 __KERNEL_RCSID(0, "$NetBSD: drm_ioc32.c,v 1.2 2018/08/27 04:58:19 riastradh Exp $"); 34 35 #include <linux/compat.h> 36 #include <linux/ratelimit.h> 37 #include <linux/export.h> 38 39 #include <drm/drmP.h> 40 #include <drm/drm_core.h> 41 42 #define DRM_IOCTL_VERSION32 DRM_IOWR(0x00, drm_version32_t) 43 #define DRM_IOCTL_GET_UNIQUE32 DRM_IOWR(0x01, drm_unique32_t) 44 #define DRM_IOCTL_GET_MAP32 DRM_IOWR(0x04, drm_map32_t) 45 #define DRM_IOCTL_GET_CLIENT32 DRM_IOWR(0x05, drm_client32_t) 46 #define DRM_IOCTL_GET_STATS32 DRM_IOR( 0x06, drm_stats32_t) 47 48 #define DRM_IOCTL_SET_UNIQUE32 DRM_IOW( 0x10, drm_unique32_t) 49 #define DRM_IOCTL_ADD_MAP32 DRM_IOWR(0x15, drm_map32_t) 50 #define DRM_IOCTL_ADD_BUFS32 DRM_IOWR(0x16, drm_buf_desc32_t) 51 #define DRM_IOCTL_MARK_BUFS32 DRM_IOW( 0x17, drm_buf_desc32_t) 52 #define DRM_IOCTL_INFO_BUFS32 DRM_IOWR(0x18, drm_buf_info32_t) 53 #define DRM_IOCTL_MAP_BUFS32 DRM_IOWR(0x19, drm_buf_map32_t) 54 #define DRM_IOCTL_FREE_BUFS32 DRM_IOW( 0x1a, drm_buf_free32_t) 55 56 #define DRM_IOCTL_RM_MAP32 DRM_IOW( 0x1b, drm_map32_t) 57 58 #define DRM_IOCTL_SET_SAREA_CTX32 DRM_IOW( 0x1c, drm_ctx_priv_map32_t) 59 #define DRM_IOCTL_GET_SAREA_CTX32 DRM_IOWR(0x1d, drm_ctx_priv_map32_t) 60 61 #define DRM_IOCTL_RES_CTX32 DRM_IOWR(0x26, drm_ctx_res32_t) 62 #define DRM_IOCTL_DMA32 DRM_IOWR(0x29, drm_dma32_t) 63 64 #define DRM_IOCTL_AGP_ENABLE32 DRM_IOW( 0x32, drm_agp_mode32_t) 65 #define DRM_IOCTL_AGP_INFO32 DRM_IOR( 0x33, drm_agp_info32_t) 66 #define DRM_IOCTL_AGP_ALLOC32 DRM_IOWR(0x34, drm_agp_buffer32_t) 67 #define DRM_IOCTL_AGP_FREE32 DRM_IOW( 0x35, drm_agp_buffer32_t) 68 #define DRM_IOCTL_AGP_BIND32 DRM_IOW( 0x36, drm_agp_binding32_t) 69 #define DRM_IOCTL_AGP_UNBIND32 DRM_IOW( 0x37, drm_agp_binding32_t) 70 71 #define DRM_IOCTL_SG_ALLOC32 DRM_IOW( 0x38, drm_scatter_gather32_t) 72 #define DRM_IOCTL_SG_FREE32 DRM_IOW( 0x39, drm_scatter_gather32_t) 73 74 #define DRM_IOCTL_UPDATE_DRAW32 DRM_IOW( 0x3f, drm_update_draw32_t) 75 76 #define DRM_IOCTL_WAIT_VBLANK32 DRM_IOWR(0x3a, drm_wait_vblank32_t) 77 78 #define DRM_IOCTL_MODE_ADDFB232 DRM_IOWR(0xb8, drm_mode_fb_cmd232_t) 79 80 typedef struct drm_version_32 { 81 int version_major; /**< Major version */ 82 int version_minor; /**< Minor version */ 83 int version_patchlevel; /**< Patch level */ 84 u32 name_len; /**< Length of name buffer */ 85 u32 name; /**< Name of driver */ 86 u32 date_len; /**< Length of date buffer */ 87 u32 date; /**< User-space buffer to hold date */ 88 u32 desc_len; /**< Length of desc buffer */ 89 u32 desc; /**< User-space buffer to hold desc */ 90 } drm_version32_t; 91 92 static int compat_drm_version(struct file *file, unsigned int cmd, 93 unsigned long arg) 94 { 95 drm_version32_t v32; 96 struct drm_version __user *version; 97 int err; 98 99 if (copy_from_user(&v32, (void __user *)arg, sizeof(v32))) 100 return -EFAULT; 101 102 version = compat_alloc_user_space(sizeof(*version)); 103 if (!version) 104 return -EFAULT; 105 if (__put_user(v32.name_len, &version->name_len) 106 || __put_user((void __user *)(unsigned long)v32.name, 107 &version->name) 108 || __put_user(v32.date_len, &version->date_len) 109 || __put_user((void __user *)(unsigned long)v32.date, 110 &version->date) 111 || __put_user(v32.desc_len, &version->desc_len) 112 || __put_user((void __user *)(unsigned long)v32.desc, 113 &version->desc)) 114 return -EFAULT; 115 116 err = drm_ioctl(file, 117 DRM_IOCTL_VERSION, (unsigned long)version); 118 if (err) 119 return err; 120 121 if (__get_user(v32.version_major, &version->version_major) 122 || __get_user(v32.version_minor, &version->version_minor) 123 || __get_user(v32.version_patchlevel, &version->version_patchlevel) 124 || __get_user(v32.name_len, &version->name_len) 125 || __get_user(v32.date_len, &version->date_len) 126 || __get_user(v32.desc_len, &version->desc_len)) 127 return -EFAULT; 128 129 if (copy_to_user((void __user *)arg, &v32, sizeof(v32))) 130 return -EFAULT; 131 return 0; 132 } 133 134 typedef struct drm_unique32 { 135 u32 unique_len; /**< Length of unique */ 136 u32 unique; /**< Unique name for driver instantiation */ 137 } drm_unique32_t; 138 139 static int compat_drm_getunique(struct file *file, unsigned int cmd, 140 unsigned long arg) 141 { 142 drm_unique32_t uq32; 143 struct drm_unique __user *u; 144 int err; 145 146 if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32))) 147 return -EFAULT; 148 149 u = compat_alloc_user_space(sizeof(*u)); 150 if (!u) 151 return -EFAULT; 152 if (__put_user(uq32.unique_len, &u->unique_len) 153 || __put_user((void __user *)(unsigned long)uq32.unique, 154 &u->unique)) 155 return -EFAULT; 156 157 err = drm_ioctl(file, DRM_IOCTL_GET_UNIQUE, (unsigned long)u); 158 if (err) 159 return err; 160 161 if (__get_user(uq32.unique_len, &u->unique_len)) 162 return -EFAULT; 163 if (copy_to_user((void __user *)arg, &uq32, sizeof(uq32))) 164 return -EFAULT; 165 return 0; 166 } 167 168 static int compat_drm_setunique(struct file *file, unsigned int cmd, 169 unsigned long arg) 170 { 171 drm_unique32_t uq32; 172 struct drm_unique __user *u; 173 174 if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32))) 175 return -EFAULT; 176 177 u = compat_alloc_user_space(sizeof(*u)); 178 if (!u) 179 return -EFAULT; 180 if (__put_user(uq32.unique_len, &u->unique_len) 181 || __put_user((void __user *)(unsigned long)uq32.unique, 182 &u->unique)) 183 return -EFAULT; 184 185 return drm_ioctl(file, DRM_IOCTL_SET_UNIQUE, (unsigned long)u); 186 } 187 188 typedef struct drm_map32 { 189 u32 offset; /**< Requested physical address (0 for SAREA)*/ 190 u32 size; /**< Requested physical size (bytes) */ 191 enum drm_map_type type; /**< Type of memory to map */ 192 enum drm_map_flags flags; /**< Flags */ 193 u32 handle; /**< User-space: "Handle" to pass to mmap() */ 194 int mtrr; /**< MTRR slot used */ 195 } drm_map32_t; 196 197 static int compat_drm_getmap(struct file *file, unsigned int cmd, 198 unsigned long arg) 199 { 200 drm_map32_t __user *argp = (void __user *)arg; 201 drm_map32_t m32; 202 struct drm_map __user *map; 203 int idx, err; 204 void *handle; 205 206 if (get_user(idx, &argp->offset)) 207 return -EFAULT; 208 209 map = compat_alloc_user_space(sizeof(*map)); 210 if (!map) 211 return -EFAULT; 212 if (__put_user(idx, &map->offset)) 213 return -EFAULT; 214 215 err = drm_ioctl(file, DRM_IOCTL_GET_MAP, (unsigned long)map); 216 if (err) 217 return err; 218 219 if (__get_user(m32.offset, &map->offset) 220 || __get_user(m32.size, &map->size) 221 || __get_user(m32.type, &map->type) 222 || __get_user(m32.flags, &map->flags) 223 || __get_user(handle, &map->handle) 224 || __get_user(m32.mtrr, &map->mtrr)) 225 return -EFAULT; 226 227 m32.handle = (unsigned long)handle; 228 if (copy_to_user(argp, &m32, sizeof(m32))) 229 return -EFAULT; 230 return 0; 231 232 } 233 234 static int compat_drm_addmap(struct file *file, unsigned int cmd, 235 unsigned long arg) 236 { 237 drm_map32_t __user *argp = (void __user *)arg; 238 drm_map32_t m32; 239 struct drm_map __user *map; 240 int err; 241 void *handle; 242 243 if (copy_from_user(&m32, argp, sizeof(m32))) 244 return -EFAULT; 245 246 map = compat_alloc_user_space(sizeof(*map)); 247 if (!map) 248 return -EFAULT; 249 if (__put_user(m32.offset, &map->offset) 250 || __put_user(m32.size, &map->size) 251 || __put_user(m32.type, &map->type) 252 || __put_user(m32.flags, &map->flags)) 253 return -EFAULT; 254 255 err = drm_ioctl(file, DRM_IOCTL_ADD_MAP, (unsigned long)map); 256 if (err) 257 return err; 258 259 if (__get_user(m32.offset, &map->offset) 260 || __get_user(m32.mtrr, &map->mtrr) 261 || __get_user(handle, &map->handle)) 262 return -EFAULT; 263 264 m32.handle = (unsigned long)handle; 265 if (m32.handle != (unsigned long)handle) 266 printk_ratelimited(KERN_ERR "compat_drm_addmap truncated handle" 267 " %p for type %d offset %x\n", 268 handle, m32.type, m32.offset); 269 270 if (copy_to_user(argp, &m32, sizeof(m32))) 271 return -EFAULT; 272 273 return 0; 274 } 275 276 static int compat_drm_rmmap(struct file *file, unsigned int cmd, 277 unsigned long arg) 278 { 279 drm_map32_t __user *argp = (void __user *)arg; 280 struct drm_map __user *map; 281 u32 handle; 282 283 if (get_user(handle, &argp->handle)) 284 return -EFAULT; 285 286 map = compat_alloc_user_space(sizeof(*map)); 287 if (!map) 288 return -EFAULT; 289 if (__put_user((void *)(unsigned long)handle, &map->handle)) 290 return -EFAULT; 291 292 return drm_ioctl(file, DRM_IOCTL_RM_MAP, (unsigned long)map); 293 } 294 295 typedef struct drm_client32 { 296 int idx; /**< Which client desired? */ 297 int auth; /**< Is client authenticated? */ 298 u32 pid; /**< Process ID */ 299 u32 uid; /**< User ID */ 300 u32 magic; /**< Magic */ 301 u32 iocs; /**< Ioctl count */ 302 } drm_client32_t; 303 304 static int compat_drm_getclient(struct file *file, unsigned int cmd, 305 unsigned long arg) 306 { 307 drm_client32_t c32; 308 drm_client32_t __user *argp = (void __user *)arg; 309 struct drm_client __user *client; 310 int idx, err; 311 312 if (get_user(idx, &argp->idx)) 313 return -EFAULT; 314 315 client = compat_alloc_user_space(sizeof(*client)); 316 if (!client) 317 return -EFAULT; 318 if (__put_user(idx, &client->idx)) 319 return -EFAULT; 320 321 err = drm_ioctl(file, DRM_IOCTL_GET_CLIENT, (unsigned long)client); 322 if (err) 323 return err; 324 325 if (__get_user(c32.idx, &client->idx) 326 || __get_user(c32.auth, &client->auth) 327 || __get_user(c32.pid, &client->pid) 328 || __get_user(c32.uid, &client->uid) 329 || __get_user(c32.magic, &client->magic) 330 || __get_user(c32.iocs, &client->iocs)) 331 return -EFAULT; 332 333 if (copy_to_user(argp, &c32, sizeof(c32))) 334 return -EFAULT; 335 return 0; 336 } 337 338 typedef struct drm_stats32 { 339 u32 count; 340 struct { 341 u32 value; 342 enum drm_stat_type type; 343 } data[15]; 344 } drm_stats32_t; 345 346 static int compat_drm_getstats(struct file *file, unsigned int cmd, 347 unsigned long arg) 348 { 349 drm_stats32_t s32; 350 drm_stats32_t __user *argp = (void __user *)arg; 351 struct drm_stats __user *stats; 352 int i, err; 353 354 stats = compat_alloc_user_space(sizeof(*stats)); 355 if (!stats) 356 return -EFAULT; 357 358 err = drm_ioctl(file, DRM_IOCTL_GET_STATS, (unsigned long)stats); 359 if (err) 360 return err; 361 362 if (__get_user(s32.count, &stats->count)) 363 return -EFAULT; 364 for (i = 0; i < 15; ++i) 365 if (__get_user(s32.data[i].value, &stats->data[i].value) 366 || __get_user(s32.data[i].type, &stats->data[i].type)) 367 return -EFAULT; 368 369 if (copy_to_user(argp, &s32, sizeof(s32))) 370 return -EFAULT; 371 return 0; 372 } 373 374 typedef struct drm_buf_desc32 { 375 int count; /**< Number of buffers of this size */ 376 int size; /**< Size in bytes */ 377 int low_mark; /**< Low water mark */ 378 int high_mark; /**< High water mark */ 379 int flags; 380 u32 agp_start; /**< Start address in the AGP aperture */ 381 } drm_buf_desc32_t; 382 383 static int compat_drm_addbufs(struct file *file, unsigned int cmd, 384 unsigned long arg) 385 { 386 drm_buf_desc32_t __user *argp = (void __user *)arg; 387 struct drm_buf_desc __user *buf; 388 int err; 389 unsigned long agp_start; 390 391 buf = compat_alloc_user_space(sizeof(*buf)); 392 if (!buf || !access_ok(VERIFY_WRITE, argp, sizeof(*argp))) 393 return -EFAULT; 394 395 if (__copy_in_user(buf, argp, offsetof(drm_buf_desc32_t, agp_start)) 396 || __get_user(agp_start, &argp->agp_start) 397 || __put_user(agp_start, &buf->agp_start)) 398 return -EFAULT; 399 400 err = drm_ioctl(file, DRM_IOCTL_ADD_BUFS, (unsigned long)buf); 401 if (err) 402 return err; 403 404 if (__copy_in_user(argp, buf, offsetof(drm_buf_desc32_t, agp_start)) 405 || __get_user(agp_start, &buf->agp_start) 406 || __put_user(agp_start, &argp->agp_start)) 407 return -EFAULT; 408 409 return 0; 410 } 411 412 static int compat_drm_markbufs(struct file *file, unsigned int cmd, 413 unsigned long arg) 414 { 415 drm_buf_desc32_t b32; 416 drm_buf_desc32_t __user *argp = (void __user *)arg; 417 struct drm_buf_desc __user *buf; 418 419 if (copy_from_user(&b32, argp, sizeof(b32))) 420 return -EFAULT; 421 422 buf = compat_alloc_user_space(sizeof(*buf)); 423 if (!buf) 424 return -EFAULT; 425 426 if (__put_user(b32.size, &buf->size) 427 || __put_user(b32.low_mark, &buf->low_mark) 428 || __put_user(b32.high_mark, &buf->high_mark)) 429 return -EFAULT; 430 431 return drm_ioctl(file, DRM_IOCTL_MARK_BUFS, (unsigned long)buf); 432 } 433 434 typedef struct drm_buf_info32 { 435 int count; /**< Entries in list */ 436 u32 list; 437 } drm_buf_info32_t; 438 439 static int compat_drm_infobufs(struct file *file, unsigned int cmd, 440 unsigned long arg) 441 { 442 drm_buf_info32_t req32; 443 drm_buf_info32_t __user *argp = (void __user *)arg; 444 drm_buf_desc32_t __user *to; 445 struct drm_buf_info __user *request; 446 struct drm_buf_desc __user *list; 447 size_t nbytes; 448 int i, err; 449 int count, actual; 450 451 if (copy_from_user(&req32, argp, sizeof(req32))) 452 return -EFAULT; 453 454 count = req32.count; 455 to = (drm_buf_desc32_t __user *) (unsigned long)req32.list; 456 if (count < 0) 457 count = 0; 458 if (count > 0 459 && !access_ok(VERIFY_WRITE, to, count * sizeof(drm_buf_desc32_t))) 460 return -EFAULT; 461 462 nbytes = sizeof(*request) + count * sizeof(struct drm_buf_desc); 463 request = compat_alloc_user_space(nbytes); 464 if (!request) 465 return -EFAULT; 466 list = (struct drm_buf_desc *) (request + 1); 467 468 if (__put_user(count, &request->count) 469 || __put_user(list, &request->list)) 470 return -EFAULT; 471 472 err = drm_ioctl(file, DRM_IOCTL_INFO_BUFS, (unsigned long)request); 473 if (err) 474 return err; 475 476 if (__get_user(actual, &request->count)) 477 return -EFAULT; 478 if (count >= actual) 479 for (i = 0; i < actual; ++i) 480 if (__copy_in_user(&to[i], &list[i], 481 offsetof(struct drm_buf_desc, flags))) 482 return -EFAULT; 483 484 if (__put_user(actual, &argp->count)) 485 return -EFAULT; 486 487 return 0; 488 } 489 490 typedef struct drm_buf_pub32 { 491 int idx; /**< Index into the master buffer list */ 492 int total; /**< Buffer size */ 493 int used; /**< Amount of buffer in use (for DMA) */ 494 u32 address; /**< Address of buffer */ 495 } drm_buf_pub32_t; 496 497 typedef struct drm_buf_map32 { 498 int count; /**< Length of the buffer list */ 499 u32 virtual; /**< Mmap'd area in user-virtual */ 500 u32 list; /**< Buffer information */ 501 } drm_buf_map32_t; 502 503 static int compat_drm_mapbufs(struct file *file, unsigned int cmd, 504 unsigned long arg) 505 { 506 drm_buf_map32_t __user *argp = (void __user *)arg; 507 drm_buf_map32_t req32; 508 drm_buf_pub32_t __user *list32; 509 struct drm_buf_map __user *request; 510 struct drm_buf_pub __user *list; 511 int i, err; 512 int count, actual; 513 size_t nbytes; 514 void __user *addr; 515 516 if (copy_from_user(&req32, argp, sizeof(req32))) 517 return -EFAULT; 518 count = req32.count; 519 list32 = (void __user *)(unsigned long)req32.list; 520 521 if (count < 0) 522 return -EINVAL; 523 nbytes = sizeof(*request) + count * sizeof(struct drm_buf_pub); 524 request = compat_alloc_user_space(nbytes); 525 if (!request) 526 return -EFAULT; 527 list = (struct drm_buf_pub *) (request + 1); 528 529 if (__put_user(count, &request->count) 530 || __put_user(list, &request->list)) 531 return -EFAULT; 532 533 err = drm_ioctl(file, DRM_IOCTL_MAP_BUFS, (unsigned long)request); 534 if (err) 535 return err; 536 537 if (__get_user(actual, &request->count)) 538 return -EFAULT; 539 if (count >= actual) 540 for (i = 0; i < actual; ++i) 541 if (__copy_in_user(&list32[i], &list[i], 542 offsetof(struct drm_buf_pub, address)) 543 || __get_user(addr, &list[i].address) 544 || __put_user((unsigned long)addr, 545 &list32[i].address)) 546 return -EFAULT; 547 548 if (__put_user(actual, &argp->count) 549 || __get_user(addr, &request->virtual) 550 || __put_user((unsigned long)addr, &argp->virtual)) 551 return -EFAULT; 552 553 return 0; 554 } 555 556 typedef struct drm_buf_free32 { 557 int count; 558 u32 list; 559 } drm_buf_free32_t; 560 561 static int compat_drm_freebufs(struct file *file, unsigned int cmd, 562 unsigned long arg) 563 { 564 drm_buf_free32_t req32; 565 struct drm_buf_free __user *request; 566 drm_buf_free32_t __user *argp = (void __user *)arg; 567 568 if (copy_from_user(&req32, argp, sizeof(req32))) 569 return -EFAULT; 570 571 request = compat_alloc_user_space(sizeof(*request)); 572 if (!request) 573 return -EFAULT; 574 if (__put_user(req32.count, &request->count) 575 || __put_user((int __user *)(unsigned long)req32.list, 576 &request->list)) 577 return -EFAULT; 578 579 return drm_ioctl(file, DRM_IOCTL_FREE_BUFS, (unsigned long)request); 580 } 581 582 typedef struct drm_ctx_priv_map32 { 583 unsigned int ctx_id; /**< Context requesting private mapping */ 584 u32 handle; /**< Handle of map */ 585 } drm_ctx_priv_map32_t; 586 587 static int compat_drm_setsareactx(struct file *file, unsigned int cmd, 588 unsigned long arg) 589 { 590 drm_ctx_priv_map32_t req32; 591 struct drm_ctx_priv_map __user *request; 592 drm_ctx_priv_map32_t __user *argp = (void __user *)arg; 593 594 if (copy_from_user(&req32, argp, sizeof(req32))) 595 return -EFAULT; 596 597 request = compat_alloc_user_space(sizeof(*request)); 598 if (!request) 599 return -EFAULT; 600 if (__put_user(req32.ctx_id, &request->ctx_id) 601 || __put_user((void *)(unsigned long)req32.handle, 602 &request->handle)) 603 return -EFAULT; 604 605 return drm_ioctl(file, DRM_IOCTL_SET_SAREA_CTX, (unsigned long)request); 606 } 607 608 static int compat_drm_getsareactx(struct file *file, unsigned int cmd, 609 unsigned long arg) 610 { 611 struct drm_ctx_priv_map __user *request; 612 drm_ctx_priv_map32_t __user *argp = (void __user *)arg; 613 int err; 614 unsigned int ctx_id; 615 void *handle; 616 617 if (!access_ok(VERIFY_WRITE, argp, sizeof(*argp)) 618 || __get_user(ctx_id, &argp->ctx_id)) 619 return -EFAULT; 620 621 request = compat_alloc_user_space(sizeof(*request)); 622 if (!request) 623 return -EFAULT; 624 if (__put_user(ctx_id, &request->ctx_id)) 625 return -EFAULT; 626 627 err = drm_ioctl(file, DRM_IOCTL_GET_SAREA_CTX, (unsigned long)request); 628 if (err) 629 return err; 630 631 if (__get_user(handle, &request->handle) 632 || __put_user((unsigned long)handle, &argp->handle)) 633 return -EFAULT; 634 635 return 0; 636 } 637 638 typedef struct drm_ctx_res32 { 639 int count; 640 u32 contexts; 641 } drm_ctx_res32_t; 642 643 static int compat_drm_resctx(struct file *file, unsigned int cmd, 644 unsigned long arg) 645 { 646 drm_ctx_res32_t __user *argp = (void __user *)arg; 647 drm_ctx_res32_t res32; 648 struct drm_ctx_res __user *res; 649 int err; 650 651 if (copy_from_user(&res32, argp, sizeof(res32))) 652 return -EFAULT; 653 654 res = compat_alloc_user_space(sizeof(*res)); 655 if (!res) 656 return -EFAULT; 657 if (__put_user(res32.count, &res->count) 658 || __put_user((struct drm_ctx __user *) (unsigned long)res32.contexts, 659 &res->contexts)) 660 return -EFAULT; 661 662 err = drm_ioctl(file, DRM_IOCTL_RES_CTX, (unsigned long)res); 663 if (err) 664 return err; 665 666 if (__get_user(res32.count, &res->count) 667 || __put_user(res32.count, &argp->count)) 668 return -EFAULT; 669 670 return 0; 671 } 672 673 typedef struct drm_dma32 { 674 int context; /**< Context handle */ 675 int send_count; /**< Number of buffers to send */ 676 u32 send_indices; /**< List of handles to buffers */ 677 u32 send_sizes; /**< Lengths of data to send */ 678 enum drm_dma_flags flags; /**< Flags */ 679 int request_count; /**< Number of buffers requested */ 680 int request_size; /**< Desired size for buffers */ 681 u32 request_indices; /**< Buffer information */ 682 u32 request_sizes; 683 int granted_count; /**< Number of buffers granted */ 684 } drm_dma32_t; 685 686 static int compat_drm_dma(struct file *file, unsigned int cmd, 687 unsigned long arg) 688 { 689 drm_dma32_t d32; 690 drm_dma32_t __user *argp = (void __user *)arg; 691 struct drm_dma __user *d; 692 int err; 693 694 if (copy_from_user(&d32, argp, sizeof(d32))) 695 return -EFAULT; 696 697 d = compat_alloc_user_space(sizeof(*d)); 698 if (!d) 699 return -EFAULT; 700 701 if (__put_user(d32.context, &d->context) 702 || __put_user(d32.send_count, &d->send_count) 703 || __put_user((int __user *)(unsigned long)d32.send_indices, 704 &d->send_indices) 705 || __put_user((int __user *)(unsigned long)d32.send_sizes, 706 &d->send_sizes) 707 || __put_user(d32.flags, &d->flags) 708 || __put_user(d32.request_count, &d->request_count) 709 || __put_user((int __user *)(unsigned long)d32.request_indices, 710 &d->request_indices) 711 || __put_user((int __user *)(unsigned long)d32.request_sizes, 712 &d->request_sizes)) 713 return -EFAULT; 714 715 err = drm_ioctl(file, DRM_IOCTL_DMA, (unsigned long)d); 716 if (err) 717 return err; 718 719 if (__get_user(d32.request_size, &d->request_size) 720 || __get_user(d32.granted_count, &d->granted_count) 721 || __put_user(d32.request_size, &argp->request_size) 722 || __put_user(d32.granted_count, &argp->granted_count)) 723 return -EFAULT; 724 725 return 0; 726 } 727 728 #if IS_ENABLED(CONFIG_AGP) 729 typedef struct drm_agp_mode32 { 730 u32 mode; /**< AGP mode */ 731 } drm_agp_mode32_t; 732 733 static int compat_drm_agp_enable(struct file *file, unsigned int cmd, 734 unsigned long arg) 735 { 736 drm_agp_mode32_t __user *argp = (void __user *)arg; 737 drm_agp_mode32_t m32; 738 struct drm_agp_mode __user *mode; 739 740 if (get_user(m32.mode, &argp->mode)) 741 return -EFAULT; 742 743 mode = compat_alloc_user_space(sizeof(*mode)); 744 if (put_user(m32.mode, &mode->mode)) 745 return -EFAULT; 746 747 return drm_ioctl(file, DRM_IOCTL_AGP_ENABLE, (unsigned long)mode); 748 } 749 750 typedef struct drm_agp_info32 { 751 int agp_version_major; 752 int agp_version_minor; 753 u32 mode; 754 u32 aperture_base; /* physical address */ 755 u32 aperture_size; /* bytes */ 756 u32 memory_allowed; /* bytes */ 757 u32 memory_used; 758 759 /* PCI information */ 760 unsigned short id_vendor; 761 unsigned short id_device; 762 } drm_agp_info32_t; 763 764 static int compat_drm_agp_info(struct file *file, unsigned int cmd, 765 unsigned long arg) 766 { 767 drm_agp_info32_t __user *argp = (void __user *)arg; 768 drm_agp_info32_t i32; 769 struct drm_agp_info __user *info; 770 int err; 771 772 info = compat_alloc_user_space(sizeof(*info)); 773 if (!info) 774 return -EFAULT; 775 776 err = drm_ioctl(file, DRM_IOCTL_AGP_INFO, (unsigned long)info); 777 if (err) 778 return err; 779 780 if (__get_user(i32.agp_version_major, &info->agp_version_major) 781 || __get_user(i32.agp_version_minor, &info->agp_version_minor) 782 || __get_user(i32.mode, &info->mode) 783 || __get_user(i32.aperture_base, &info->aperture_base) 784 || __get_user(i32.aperture_size, &info->aperture_size) 785 || __get_user(i32.memory_allowed, &info->memory_allowed) 786 || __get_user(i32.memory_used, &info->memory_used) 787 || __get_user(i32.id_vendor, &info->id_vendor) 788 || __get_user(i32.id_device, &info->id_device)) 789 return -EFAULT; 790 791 if (copy_to_user(argp, &i32, sizeof(i32))) 792 return -EFAULT; 793 794 return 0; 795 } 796 797 typedef struct drm_agp_buffer32 { 798 u32 size; /**< In bytes -- will round to page boundary */ 799 u32 handle; /**< Used for binding / unbinding */ 800 u32 type; /**< Type of memory to allocate */ 801 u32 physical; /**< Physical used by i810 */ 802 } drm_agp_buffer32_t; 803 804 static int compat_drm_agp_alloc(struct file *file, unsigned int cmd, 805 unsigned long arg) 806 { 807 drm_agp_buffer32_t __user *argp = (void __user *)arg; 808 drm_agp_buffer32_t req32; 809 struct drm_agp_buffer __user *request; 810 int err; 811 812 if (copy_from_user(&req32, argp, sizeof(req32))) 813 return -EFAULT; 814 815 request = compat_alloc_user_space(sizeof(*request)); 816 if (!request 817 || __put_user(req32.size, &request->size) 818 || __put_user(req32.type, &request->type)) 819 return -EFAULT; 820 821 err = drm_ioctl(file, DRM_IOCTL_AGP_ALLOC, (unsigned long)request); 822 if (err) 823 return err; 824 825 if (__get_user(req32.handle, &request->handle) 826 || __get_user(req32.physical, &request->physical) 827 || copy_to_user(argp, &req32, sizeof(req32))) { 828 drm_ioctl(file, DRM_IOCTL_AGP_FREE, (unsigned long)request); 829 return -EFAULT; 830 } 831 832 return 0; 833 } 834 835 static int compat_drm_agp_free(struct file *file, unsigned int cmd, 836 unsigned long arg) 837 { 838 drm_agp_buffer32_t __user *argp = (void __user *)arg; 839 struct drm_agp_buffer __user *request; 840 u32 handle; 841 842 request = compat_alloc_user_space(sizeof(*request)); 843 if (!request 844 || get_user(handle, &argp->handle) 845 || __put_user(handle, &request->handle)) 846 return -EFAULT; 847 848 return drm_ioctl(file, DRM_IOCTL_AGP_FREE, (unsigned long)request); 849 } 850 851 typedef struct drm_agp_binding32 { 852 u32 handle; /**< From drm_agp_buffer */ 853 u32 offset; /**< In bytes -- will round to page boundary */ 854 } drm_agp_binding32_t; 855 856 static int compat_drm_agp_bind(struct file *file, unsigned int cmd, 857 unsigned long arg) 858 { 859 drm_agp_binding32_t __user *argp = (void __user *)arg; 860 drm_agp_binding32_t req32; 861 struct drm_agp_binding __user *request; 862 863 if (copy_from_user(&req32, argp, sizeof(req32))) 864 return -EFAULT; 865 866 request = compat_alloc_user_space(sizeof(*request)); 867 if (!request 868 || __put_user(req32.handle, &request->handle) 869 || __put_user(req32.offset, &request->offset)) 870 return -EFAULT; 871 872 return drm_ioctl(file, DRM_IOCTL_AGP_BIND, (unsigned long)request); 873 } 874 875 static int compat_drm_agp_unbind(struct file *file, unsigned int cmd, 876 unsigned long arg) 877 { 878 drm_agp_binding32_t __user *argp = (void __user *)arg; 879 struct drm_agp_binding __user *request; 880 u32 handle; 881 882 request = compat_alloc_user_space(sizeof(*request)); 883 if (!request 884 || get_user(handle, &argp->handle) 885 || __put_user(handle, &request->handle)) 886 return -EFAULT; 887 888 return drm_ioctl(file, DRM_IOCTL_AGP_UNBIND, (unsigned long)request); 889 } 890 #endif /* CONFIG_AGP */ 891 892 typedef struct drm_scatter_gather32 { 893 u32 size; /**< In bytes -- will round to page boundary */ 894 u32 handle; /**< Used for mapping / unmapping */ 895 } drm_scatter_gather32_t; 896 897 static int compat_drm_sg_alloc(struct file *file, unsigned int cmd, 898 unsigned long arg) 899 { 900 drm_scatter_gather32_t __user *argp = (void __user *)arg; 901 struct drm_scatter_gather __user *request; 902 int err; 903 unsigned long x; 904 905 request = compat_alloc_user_space(sizeof(*request)); 906 if (!request || !access_ok(VERIFY_WRITE, argp, sizeof(*argp)) 907 || __get_user(x, &argp->size) 908 || __put_user(x, &request->size)) 909 return -EFAULT; 910 911 err = drm_ioctl(file, DRM_IOCTL_SG_ALLOC, (unsigned long)request); 912 if (err) 913 return err; 914 915 /* XXX not sure about the handle conversion here... */ 916 if (__get_user(x, &request->handle) 917 || __put_user(x >> PAGE_SHIFT, &argp->handle)) 918 return -EFAULT; 919 920 return 0; 921 } 922 923 static int compat_drm_sg_free(struct file *file, unsigned int cmd, 924 unsigned long arg) 925 { 926 drm_scatter_gather32_t __user *argp = (void __user *)arg; 927 struct drm_scatter_gather __user *request; 928 unsigned long x; 929 930 request = compat_alloc_user_space(sizeof(*request)); 931 if (!request || !access_ok(VERIFY_WRITE, argp, sizeof(*argp)) 932 || __get_user(x, &argp->handle) 933 || __put_user(x << PAGE_SHIFT, &request->handle)) 934 return -EFAULT; 935 936 return drm_ioctl(file, DRM_IOCTL_SG_FREE, (unsigned long)request); 937 } 938 939 #if defined(CONFIG_X86) || defined(CONFIG_IA64) 940 typedef struct drm_update_draw32 { 941 drm_drawable_t handle; 942 unsigned int type; 943 unsigned int num; 944 /* 64-bit version has a 32-bit pad here */ 945 u64 data; /**< Pointer */ 946 } __attribute__((packed)) drm_update_draw32_t; 947 948 static int compat_drm_update_draw(struct file *file, unsigned int cmd, 949 unsigned long arg) 950 { 951 drm_update_draw32_t update32; 952 struct drm_update_draw __user *request; 953 int err; 954 955 if (copy_from_user(&update32, (void __user *)arg, sizeof(update32))) 956 return -EFAULT; 957 958 request = compat_alloc_user_space(sizeof(*request)); 959 if (!request || 960 __put_user(update32.handle, &request->handle) || 961 __put_user(update32.type, &request->type) || 962 __put_user(update32.num, &request->num) || 963 __put_user(update32.data, &request->data)) 964 return -EFAULT; 965 966 err = drm_ioctl(file, DRM_IOCTL_UPDATE_DRAW, (unsigned long)request); 967 return err; 968 } 969 #endif 970 971 struct drm_wait_vblank_request32 { 972 enum drm_vblank_seq_type type; 973 unsigned int sequence; 974 u32 signal; 975 }; 976 977 struct drm_wait_vblank_reply32 { 978 enum drm_vblank_seq_type type; 979 unsigned int sequence; 980 s32 tval_sec; 981 s32 tval_usec; 982 }; 983 984 typedef union drm_wait_vblank32 { 985 struct drm_wait_vblank_request32 request; 986 struct drm_wait_vblank_reply32 reply; 987 } drm_wait_vblank32_t; 988 989 static int compat_drm_wait_vblank(struct file *file, unsigned int cmd, 990 unsigned long arg) 991 { 992 drm_wait_vblank32_t __user *argp = (void __user *)arg; 993 drm_wait_vblank32_t req32; 994 union drm_wait_vblank __user *request; 995 int err; 996 997 if (copy_from_user(&req32, argp, sizeof(req32))) 998 return -EFAULT; 999 1000 request = compat_alloc_user_space(sizeof(*request)); 1001 if (!request 1002 || __put_user(req32.request.type, &request->request.type) 1003 || __put_user(req32.request.sequence, &request->request.sequence) 1004 || __put_user(req32.request.signal, &request->request.signal)) 1005 return -EFAULT; 1006 1007 err = drm_ioctl(file, DRM_IOCTL_WAIT_VBLANK, (unsigned long)request); 1008 if (err) 1009 return err; 1010 1011 if (__get_user(req32.reply.type, &request->reply.type) 1012 || __get_user(req32.reply.sequence, &request->reply.sequence) 1013 || __get_user(req32.reply.tval_sec, &request->reply.tval_sec) 1014 || __get_user(req32.reply.tval_usec, &request->reply.tval_usec)) 1015 return -EFAULT; 1016 1017 if (copy_to_user(argp, &req32, sizeof(req32))) 1018 return -EFAULT; 1019 1020 return 0; 1021 } 1022 1023 #if defined(CONFIG_X86) || defined(CONFIG_IA64) 1024 typedef struct drm_mode_fb_cmd232 { 1025 u32 fb_id; 1026 u32 width; 1027 u32 height; 1028 u32 pixel_format; 1029 u32 flags; 1030 u32 handles[4]; 1031 u32 pitches[4]; 1032 u32 offsets[4]; 1033 u64 modifier[4]; 1034 } __attribute__((packed)) drm_mode_fb_cmd232_t; 1035 1036 static int compat_drm_mode_addfb2(struct file *file, unsigned int cmd, 1037 unsigned long arg) 1038 { 1039 struct drm_mode_fb_cmd232 __user *argp = (void __user *)arg; 1040 struct drm_mode_fb_cmd232 req32; 1041 struct drm_mode_fb_cmd2 __user *req64; 1042 int i; 1043 int err; 1044 1045 if (copy_from_user(&req32, argp, sizeof(req32))) 1046 return -EFAULT; 1047 1048 req64 = compat_alloc_user_space(sizeof(*req64)); 1049 1050 if (!access_ok(VERIFY_WRITE, req64, sizeof(*req64)) 1051 || __put_user(req32.width, &req64->width) 1052 || __put_user(req32.height, &req64->height) 1053 || __put_user(req32.pixel_format, &req64->pixel_format) 1054 || __put_user(req32.flags, &req64->flags)) 1055 return -EFAULT; 1056 1057 for (i = 0; i < 4; i++) { 1058 if (__put_user(req32.handles[i], &req64->handles[i])) 1059 return -EFAULT; 1060 if (__put_user(req32.pitches[i], &req64->pitches[i])) 1061 return -EFAULT; 1062 if (__put_user(req32.offsets[i], &req64->offsets[i])) 1063 return -EFAULT; 1064 if (__put_user(req32.modifier[i], &req64->modifier[i])) 1065 return -EFAULT; 1066 } 1067 1068 err = drm_ioctl(file, DRM_IOCTL_MODE_ADDFB2, (unsigned long)req64); 1069 if (err) 1070 return err; 1071 1072 if (__get_user(req32.fb_id, &req64->fb_id)) 1073 return -EFAULT; 1074 1075 if (copy_to_user(argp, &req32, sizeof(req32))) 1076 return -EFAULT; 1077 1078 return 0; 1079 } 1080 #endif 1081 1082 static drm_ioctl_compat_t *drm_compat_ioctls[] = { 1083 [DRM_IOCTL_NR(DRM_IOCTL_VERSION32)] = compat_drm_version, 1084 [DRM_IOCTL_NR(DRM_IOCTL_GET_UNIQUE32)] = compat_drm_getunique, 1085 [DRM_IOCTL_NR(DRM_IOCTL_GET_MAP32)] = compat_drm_getmap, 1086 [DRM_IOCTL_NR(DRM_IOCTL_GET_CLIENT32)] = compat_drm_getclient, 1087 [DRM_IOCTL_NR(DRM_IOCTL_GET_STATS32)] = compat_drm_getstats, 1088 [DRM_IOCTL_NR(DRM_IOCTL_SET_UNIQUE32)] = compat_drm_setunique, 1089 [DRM_IOCTL_NR(DRM_IOCTL_ADD_MAP32)] = compat_drm_addmap, 1090 [DRM_IOCTL_NR(DRM_IOCTL_ADD_BUFS32)] = compat_drm_addbufs, 1091 [DRM_IOCTL_NR(DRM_IOCTL_MARK_BUFS32)] = compat_drm_markbufs, 1092 [DRM_IOCTL_NR(DRM_IOCTL_INFO_BUFS32)] = compat_drm_infobufs, 1093 [DRM_IOCTL_NR(DRM_IOCTL_MAP_BUFS32)] = compat_drm_mapbufs, 1094 [DRM_IOCTL_NR(DRM_IOCTL_FREE_BUFS32)] = compat_drm_freebufs, 1095 [DRM_IOCTL_NR(DRM_IOCTL_RM_MAP32)] = compat_drm_rmmap, 1096 [DRM_IOCTL_NR(DRM_IOCTL_SET_SAREA_CTX32)] = compat_drm_setsareactx, 1097 [DRM_IOCTL_NR(DRM_IOCTL_GET_SAREA_CTX32)] = compat_drm_getsareactx, 1098 [DRM_IOCTL_NR(DRM_IOCTL_RES_CTX32)] = compat_drm_resctx, 1099 [DRM_IOCTL_NR(DRM_IOCTL_DMA32)] = compat_drm_dma, 1100 #if IS_ENABLED(CONFIG_AGP) 1101 [DRM_IOCTL_NR(DRM_IOCTL_AGP_ENABLE32)] = compat_drm_agp_enable, 1102 [DRM_IOCTL_NR(DRM_IOCTL_AGP_INFO32)] = compat_drm_agp_info, 1103 [DRM_IOCTL_NR(DRM_IOCTL_AGP_ALLOC32)] = compat_drm_agp_alloc, 1104 [DRM_IOCTL_NR(DRM_IOCTL_AGP_FREE32)] = compat_drm_agp_free, 1105 [DRM_IOCTL_NR(DRM_IOCTL_AGP_BIND32)] = compat_drm_agp_bind, 1106 [DRM_IOCTL_NR(DRM_IOCTL_AGP_UNBIND32)] = compat_drm_agp_unbind, 1107 #endif 1108 [DRM_IOCTL_NR(DRM_IOCTL_SG_ALLOC32)] = compat_drm_sg_alloc, 1109 [DRM_IOCTL_NR(DRM_IOCTL_SG_FREE32)] = compat_drm_sg_free, 1110 #if defined(CONFIG_X86) || defined(CONFIG_IA64) 1111 [DRM_IOCTL_NR(DRM_IOCTL_UPDATE_DRAW32)] = compat_drm_update_draw, 1112 #endif 1113 [DRM_IOCTL_NR(DRM_IOCTL_WAIT_VBLANK32)] = compat_drm_wait_vblank, 1114 #if defined(CONFIG_X86) || defined(CONFIG_IA64) 1115 [DRM_IOCTL_NR(DRM_IOCTL_MODE_ADDFB232)] = compat_drm_mode_addfb2, 1116 #endif 1117 }; 1118 1119 /** 1120 * Called whenever a 32-bit process running under a 64-bit kernel 1121 * performs an ioctl on /dev/drm. 1122 * 1123 * \param file_priv DRM file private. 1124 * \param cmd command. 1125 * \param arg user argument. 1126 * \return zero on success or negative number on failure. 1127 */ 1128 long drm_compat_ioctl(struct file *filp, unsigned int cmd, unsigned long arg) 1129 { 1130 unsigned int nr = DRM_IOCTL_NR(cmd); 1131 drm_ioctl_compat_t *fn; 1132 int ret; 1133 1134 /* Assume that ioctls without an explicit compat routine will just 1135 * work. This may not always be a good assumption, but it's better 1136 * than always failing. 1137 */ 1138 if (nr >= ARRAY_SIZE(drm_compat_ioctls)) 1139 return drm_ioctl(filp, cmd, arg); 1140 1141 fn = drm_compat_ioctls[nr]; 1142 1143 if (fn != NULL) 1144 ret = (*fn) (filp, cmd, arg); 1145 else 1146 ret = drm_ioctl(filp, cmd, arg); 1147 1148 return ret; 1149 } 1150 1151 EXPORT_SYMBOL(drm_compat_ioctl); 1152