• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * \file drm_ioc32.c
3  *
4  * 32-bit ioctl compatibility routines for the DRM.
5  *
6  * \author Paul Mackerras <paulus@samba.org>
7  *
8  * Copyright (C) Paul Mackerras 2005.
9  * All Rights Reserved.
10  *
11  * Permission is hereby granted, free of charge, to any person obtaining a
12  * copy of this software and associated documentation files (the "Software"),
13  * to deal in the Software without restriction, including without limitation
14  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
15  * and/or sell copies of the Software, and to permit persons to whom the
16  * Software is furnished to do so, subject to the following conditions:
17  *
18  * The above copyright notice and this permission notice (including the next
19  * paragraph) shall be included in all copies or substantial portions of the
20  * Software.
21  *
22  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
23  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
24  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
25  * THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
26  * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
27  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
28  * IN THE SOFTWARE.
29  */
30 #include <linux/compat.h>
31 #include <linux/ratelimit.h>
32 #include <linux/export.h>
33 
34 #include <drm/drmP.h>
35 #include "drm_legacy.h"
36 #include "drm_internal.h"
37 #include "drm_crtc_internal.h"
38 
39 #define DRM_IOCTL_VERSION32		DRM_IOWR(0x00, drm_version32_t)
40 #define DRM_IOCTL_GET_UNIQUE32		DRM_IOWR(0x01, drm_unique32_t)
41 #define DRM_IOCTL_GET_MAP32		DRM_IOWR(0x04, drm_map32_t)
42 #define DRM_IOCTL_GET_CLIENT32		DRM_IOWR(0x05, drm_client32_t)
43 #define DRM_IOCTL_GET_STATS32		DRM_IOR( 0x06, drm_stats32_t)
44 
45 #define DRM_IOCTL_SET_UNIQUE32		DRM_IOW( 0x10, drm_unique32_t)
46 #define DRM_IOCTL_ADD_MAP32		DRM_IOWR(0x15, drm_map32_t)
47 #define DRM_IOCTL_ADD_BUFS32		DRM_IOWR(0x16, drm_buf_desc32_t)
48 #define DRM_IOCTL_MARK_BUFS32		DRM_IOW( 0x17, drm_buf_desc32_t)
49 #define DRM_IOCTL_INFO_BUFS32		DRM_IOWR(0x18, drm_buf_info32_t)
50 #define DRM_IOCTL_MAP_BUFS32		DRM_IOWR(0x19, drm_buf_map32_t)
51 #define DRM_IOCTL_FREE_BUFS32		DRM_IOW( 0x1a, drm_buf_free32_t)
52 
53 #define DRM_IOCTL_RM_MAP32		DRM_IOW( 0x1b, drm_map32_t)
54 
55 #define DRM_IOCTL_SET_SAREA_CTX32	DRM_IOW( 0x1c, drm_ctx_priv_map32_t)
56 #define DRM_IOCTL_GET_SAREA_CTX32	DRM_IOWR(0x1d, drm_ctx_priv_map32_t)
57 
58 #define DRM_IOCTL_RES_CTX32		DRM_IOWR(0x26, drm_ctx_res32_t)
59 #define DRM_IOCTL_DMA32			DRM_IOWR(0x29, drm_dma32_t)
60 
61 #define DRM_IOCTL_AGP_ENABLE32		DRM_IOW( 0x32, drm_agp_mode32_t)
62 #define DRM_IOCTL_AGP_INFO32		DRM_IOR( 0x33, drm_agp_info32_t)
63 #define DRM_IOCTL_AGP_ALLOC32		DRM_IOWR(0x34, drm_agp_buffer32_t)
64 #define DRM_IOCTL_AGP_FREE32		DRM_IOW( 0x35, drm_agp_buffer32_t)
65 #define DRM_IOCTL_AGP_BIND32		DRM_IOW( 0x36, drm_agp_binding32_t)
66 #define DRM_IOCTL_AGP_UNBIND32		DRM_IOW( 0x37, drm_agp_binding32_t)
67 
68 #define DRM_IOCTL_SG_ALLOC32		DRM_IOW( 0x38, drm_scatter_gather32_t)
69 #define DRM_IOCTL_SG_FREE32		DRM_IOW( 0x39, drm_scatter_gather32_t)
70 
71 #define DRM_IOCTL_UPDATE_DRAW32		DRM_IOW( 0x3f, drm_update_draw32_t)
72 
73 #define DRM_IOCTL_WAIT_VBLANK32		DRM_IOWR(0x3a, drm_wait_vblank32_t)
74 
75 #define DRM_IOCTL_MODE_ADDFB232		DRM_IOWR(0xb8, drm_mode_fb_cmd232_t)
76 
77 typedef struct drm_version_32 {
78 	int version_major;	  /* Major version */
79 	int version_minor;	  /* Minor version */
80 	int version_patchlevel;	   /* Patch level */
81 	u32 name_len;		  /* Length of name buffer */
82 	u32 name;		  /* Name of driver */
83 	u32 date_len;		  /* Length of date buffer */
84 	u32 date;		  /* User-space buffer to hold date */
85 	u32 desc_len;		  /* Length of desc buffer */
86 	u32 desc;		  /* User-space buffer to hold desc */
87 } drm_version32_t;
88 
compat_drm_version(struct file * file,unsigned int cmd,unsigned long arg)89 static int compat_drm_version(struct file *file, unsigned int cmd,
90 			      unsigned long arg)
91 {
92 	drm_version32_t v32;
93 	struct drm_version v;
94 	int err;
95 
96 	if (copy_from_user(&v32, (void __user *)arg, sizeof(v32)))
97 		return -EFAULT;
98 
99 	v = (struct drm_version) {
100 		.name_len = v32.name_len,
101 		.name = compat_ptr(v32.name),
102 		.date_len = v32.date_len,
103 		.date = compat_ptr(v32.date),
104 		.desc_len = v32.desc_len,
105 		.desc = compat_ptr(v32.desc),
106 	};
107 	err = drm_ioctl_kernel(file, drm_version, &v,
108 			DRM_UNLOCKED|DRM_RENDER_ALLOW|DRM_CONTROL_ALLOW);
109 	if (err)
110 		return err;
111 
112 	v32.version_major = v.version_major;
113 	v32.version_minor = v.version_minor;
114 	v32.version_patchlevel = v.version_patchlevel;
115 	v32.name_len = v.name_len;
116 	v32.date_len = v.date_len;
117 	v32.desc_len = v.desc_len;
118 	if (copy_to_user((void __user *)arg, &v32, sizeof(v32)))
119 		return -EFAULT;
120 	return 0;
121 }
122 
123 typedef struct drm_unique32 {
124 	u32 unique_len;	/* Length of unique */
125 	u32 unique;	/* Unique name for driver instantiation */
126 } drm_unique32_t;
127 
compat_drm_getunique(struct file * file,unsigned int cmd,unsigned long arg)128 static int compat_drm_getunique(struct file *file, unsigned int cmd,
129 				unsigned long arg)
130 {
131 	drm_unique32_t uq32;
132 	struct drm_unique uq;
133 	int err;
134 
135 	if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32)))
136 		return -EFAULT;
137 	uq = (struct drm_unique){
138 		.unique_len = uq32.unique_len,
139 		.unique = compat_ptr(uq32.unique),
140 	};
141 
142 	err = drm_ioctl_kernel(file, drm_getunique, &uq, DRM_UNLOCKED);
143 	if (err)
144 		return err;
145 
146 	uq32.unique_len = uq.unique_len;
147 	if (copy_to_user((void __user *)arg, &uq32, sizeof(uq32)))
148 		return -EFAULT;
149 	return 0;
150 }
151 
compat_drm_setunique(struct file * file,unsigned int cmd,unsigned long arg)152 static int compat_drm_setunique(struct file *file, unsigned int cmd,
153 				unsigned long arg)
154 {
155 	/* it's dead */
156 	return -EINVAL;
157 }
158 
159 typedef struct drm_map32 {
160 	u32 offset;		/* Requested physical address (0 for SAREA) */
161 	u32 size;		/* Requested physical size (bytes) */
162 	enum drm_map_type type;	/* Type of memory to map */
163 	enum drm_map_flags flags;	/* Flags */
164 	u32 handle;		/* User-space: "Handle" to pass to mmap() */
165 	int mtrr;		/* MTRR slot used */
166 } drm_map32_t;
167 
compat_drm_getmap(struct file * file,unsigned int cmd,unsigned long arg)168 static int compat_drm_getmap(struct file *file, unsigned int cmd,
169 			     unsigned long arg)
170 {
171 	drm_map32_t __user *argp = (void __user *)arg;
172 	drm_map32_t m32;
173 	struct drm_map map;
174 	int err;
175 
176 	if (copy_from_user(&m32, argp, sizeof(m32)))
177 		return -EFAULT;
178 
179 	map.offset = m32.offset;
180 	err = drm_ioctl_kernel(file, drm_legacy_getmap_ioctl, &map, DRM_UNLOCKED);
181 	if (err)
182 		return err;
183 
184 	m32.offset = map.offset;
185 	m32.size = map.size;
186 	m32.type = map.type;
187 	m32.flags = map.flags;
188 	m32.handle = ptr_to_compat(map.handle);
189 	m32.mtrr = map.mtrr;
190 	if (copy_to_user(argp, &m32, sizeof(m32)))
191 		return -EFAULT;
192 	return 0;
193 
194 }
195 
compat_drm_addmap(struct file * file,unsigned int cmd,unsigned long arg)196 static int compat_drm_addmap(struct file *file, unsigned int cmd,
197 			     unsigned long arg)
198 {
199 	drm_map32_t __user *argp = (void __user *)arg;
200 	drm_map32_t m32;
201 	struct drm_map map;
202 	int err;
203 
204 	if (copy_from_user(&m32, argp, sizeof(m32)))
205 		return -EFAULT;
206 
207 	map.offset = m32.offset;
208 	map.size = m32.size;
209 	map.type = m32.type;
210 	map.flags = m32.flags;
211 
212 	err = drm_ioctl_kernel(file, drm_legacy_addmap_ioctl, &map,
213 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
214 	if (err)
215 		return err;
216 
217 	m32.offset = map.offset;
218 	m32.mtrr = map.mtrr;
219 	m32.handle = ptr_to_compat(map.handle);
220 	if (map.handle != compat_ptr(m32.handle))
221 		pr_err_ratelimited("compat_drm_addmap truncated handle %p for type %d offset %x\n",
222 				   map.handle, m32.type, m32.offset);
223 
224 	if (copy_to_user(argp, &m32, sizeof(m32)))
225 		return -EFAULT;
226 
227 	return 0;
228 }
229 
compat_drm_rmmap(struct file * file,unsigned int cmd,unsigned long arg)230 static int compat_drm_rmmap(struct file *file, unsigned int cmd,
231 			    unsigned long arg)
232 {
233 	drm_map32_t __user *argp = (void __user *)arg;
234 	struct drm_map map;
235 	u32 handle;
236 
237 	if (get_user(handle, &argp->handle))
238 		return -EFAULT;
239 	map.handle = compat_ptr(handle);
240 	return drm_ioctl_kernel(file, drm_legacy_rmmap_ioctl, &map, DRM_AUTH);
241 }
242 
243 typedef struct drm_client32 {
244 	int idx;	/* Which client desired? */
245 	int auth;	/* Is client authenticated? */
246 	u32 pid;	/* Process ID */
247 	u32 uid;	/* User ID */
248 	u32 magic;	/* Magic */
249 	u32 iocs;	/* Ioctl count */
250 } drm_client32_t;
251 
compat_drm_getclient(struct file * file,unsigned int cmd,unsigned long arg)252 static int compat_drm_getclient(struct file *file, unsigned int cmd,
253 				unsigned long arg)
254 {
255 	drm_client32_t c32;
256 	drm_client32_t __user *argp = (void __user *)arg;
257 	struct drm_client client;
258 	int err;
259 
260 	if (copy_from_user(&c32, argp, sizeof(c32)))
261 		return -EFAULT;
262 
263 	client.idx = c32.idx;
264 
265 	err = drm_ioctl_kernel(file, drm_getclient, &client, DRM_UNLOCKED);
266 	if (err)
267 		return err;
268 
269 	c32.idx = client.idx;
270 	c32.auth = client.auth;
271 	c32.pid = client.pid;
272 	c32.uid = client.uid;
273 	c32.magic = client.magic;
274 	c32.iocs = client.iocs;
275 
276 	if (copy_to_user(argp, &c32, sizeof(c32)))
277 		return -EFAULT;
278 	return 0;
279 }
280 
281 typedef struct drm_stats32 {
282 	u32 count;
283 	struct {
284 		u32 value;
285 		enum drm_stat_type type;
286 	} data[15];
287 } drm_stats32_t;
288 
compat_drm_getstats(struct file * file,unsigned int cmd,unsigned long arg)289 static int compat_drm_getstats(struct file *file, unsigned int cmd,
290 			       unsigned long arg)
291 {
292 	drm_stats32_t __user *argp = (void __user *)arg;
293 	int err;
294 
295 	err = drm_ioctl_kernel(file, drm_noop, NULL, DRM_UNLOCKED);
296 	if (err)
297 		return err;
298 
299 	if (clear_user(argp, sizeof(drm_stats32_t)))
300 		return -EFAULT;
301 	return 0;
302 }
303 
304 typedef struct drm_buf_desc32 {
305 	int count;		 /* Number of buffers of this size */
306 	int size;		 /* Size in bytes */
307 	int low_mark;		 /* Low water mark */
308 	int high_mark;		 /* High water mark */
309 	int flags;
310 	u32 agp_start;		 /* Start address in the AGP aperture */
311 } drm_buf_desc32_t;
312 
compat_drm_addbufs(struct file * file,unsigned int cmd,unsigned long arg)313 static int compat_drm_addbufs(struct file *file, unsigned int cmd,
314 			      unsigned long arg)
315 {
316 	drm_buf_desc32_t __user *argp = (void __user *)arg;
317 	drm_buf_desc32_t desc32;
318 	struct drm_buf_desc desc;
319 	int err;
320 
321 	if (copy_from_user(&desc32, argp, sizeof(drm_buf_desc32_t)))
322 		return -EFAULT;
323 
324 	desc = (struct drm_buf_desc){
325 		desc32.count, desc32.size, desc32.low_mark, desc32.high_mark,
326 		desc32.flags, desc32.agp_start
327 	};
328 
329 	err = drm_ioctl_kernel(file, drm_legacy_addbufs, &desc,
330 				   DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
331 	if (err)
332 		return err;
333 
334 	desc32 = (drm_buf_desc32_t){
335 		desc.count, desc.size, desc.low_mark, desc.high_mark,
336 		desc.flags, desc.agp_start
337 	};
338 	if (copy_to_user(argp, &desc32, sizeof(drm_buf_desc32_t)))
339 		return -EFAULT;
340 
341 	return 0;
342 }
343 
compat_drm_markbufs(struct file * file,unsigned int cmd,unsigned long arg)344 static int compat_drm_markbufs(struct file *file, unsigned int cmd,
345 			       unsigned long arg)
346 {
347 	drm_buf_desc32_t b32;
348 	drm_buf_desc32_t __user *argp = (void __user *)arg;
349 	struct drm_buf_desc buf;
350 
351 	if (copy_from_user(&b32, argp, sizeof(b32)))
352 		return -EFAULT;
353 
354 	buf.size = b32.size;
355 	buf.low_mark = b32.low_mark;
356 	buf.high_mark = b32.high_mark;
357 
358 	return drm_ioctl_kernel(file, drm_legacy_markbufs, &buf,
359 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
360 }
361 
362 typedef struct drm_buf_info32 {
363 	int count;		/**< Entries in list */
364 	u32 list;
365 } drm_buf_info32_t;
366 
copy_one_buf32(void * data,int count,struct drm_buf_entry * from)367 static int copy_one_buf32(void *data, int count, struct drm_buf_entry *from)
368 {
369 	drm_buf_info32_t *request = data;
370 	drm_buf_desc32_t __user *to = compat_ptr(request->list);
371 	drm_buf_desc32_t v = {.count = from->buf_count,
372 			      .size = from->buf_size,
373 			      .low_mark = from->low_mark,
374 			      .high_mark = from->high_mark};
375 
376 	if (copy_to_user(to + count, &v, offsetof(drm_buf_desc32_t, flags)))
377 		return -EFAULT;
378 	return 0;
379 }
380 
drm_legacy_infobufs32(struct drm_device * dev,void * data,struct drm_file * file_priv)381 static int drm_legacy_infobufs32(struct drm_device *dev, void *data,
382 			struct drm_file *file_priv)
383 {
384 	drm_buf_info32_t *request = data;
385 	return __drm_legacy_infobufs(dev, data, &request->count, copy_one_buf32);
386 }
387 
compat_drm_infobufs(struct file * file,unsigned int cmd,unsigned long arg)388 static int compat_drm_infobufs(struct file *file, unsigned int cmd,
389 			       unsigned long arg)
390 {
391 	drm_buf_info32_t req32;
392 	drm_buf_info32_t __user *argp = (void __user *)arg;
393 	int err;
394 
395 	if (copy_from_user(&req32, argp, sizeof(req32)))
396 		return -EFAULT;
397 
398 	if (req32.count < 0)
399 		req32.count = 0;
400 
401 	err = drm_ioctl_kernel(file, drm_legacy_infobufs32, &req32, DRM_AUTH);
402 	if (err)
403 		return err;
404 
405 	if (put_user(req32.count, &argp->count))
406 		return -EFAULT;
407 
408 	return 0;
409 }
410 
411 typedef struct drm_buf_pub32 {
412 	int idx;		/**< Index into the master buffer list */
413 	int total;		/**< Buffer size */
414 	int used;		/**< Amount of buffer in use (for DMA) */
415 	u32 address;		/**< Address of buffer */
416 } drm_buf_pub32_t;
417 
418 typedef struct drm_buf_map32 {
419 	int count;		/**< Length of the buffer list */
420 	u32 virtual;		/**< Mmap'd area in user-virtual */
421 	u32 list;		/**< Buffer information */
422 } drm_buf_map32_t;
423 
map_one_buf32(void * data,int idx,unsigned long virtual,struct drm_buf * buf)424 static int map_one_buf32(void *data, int idx, unsigned long virtual,
425 			struct drm_buf *buf)
426 {
427 	drm_buf_map32_t *request = data;
428 	drm_buf_pub32_t __user *to = compat_ptr(request->list) + idx;
429 	drm_buf_pub32_t v;
430 
431 	v.idx = buf->idx;
432 	v.total = buf->total;
433 	v.used = 0;
434 	v.address = virtual + buf->offset;
435 	if (copy_to_user(to, &v, sizeof(v)))
436 		return -EFAULT;
437 	return 0;
438 }
439 
drm_legacy_mapbufs32(struct drm_device * dev,void * data,struct drm_file * file_priv)440 static int drm_legacy_mapbufs32(struct drm_device *dev, void *data,
441 		       struct drm_file *file_priv)
442 {
443 	drm_buf_map32_t *request = data;
444 	void __user *v;
445 	int err = __drm_legacy_mapbufs(dev, data, &request->count,
446 				    &v, map_one_buf32,
447 				    file_priv);
448 	request->virtual = ptr_to_compat(v);
449 	return err;
450 }
451 
compat_drm_mapbufs(struct file * file,unsigned int cmd,unsigned long arg)452 static int compat_drm_mapbufs(struct file *file, unsigned int cmd,
453 			      unsigned long arg)
454 {
455 	drm_buf_map32_t __user *argp = (void __user *)arg;
456 	drm_buf_map32_t req32;
457 	int err;
458 
459 	if (copy_from_user(&req32, argp, sizeof(req32)))
460 		return -EFAULT;
461 	if (req32.count < 0)
462 		return -EINVAL;
463 
464 	err = drm_ioctl_kernel(file, drm_legacy_mapbufs32, &req32, DRM_AUTH);
465 	if (err)
466 		return err;
467 
468 	if (put_user(req32.count, &argp->count)
469 	    || put_user(req32.virtual, &argp->virtual))
470 		return -EFAULT;
471 
472 	return 0;
473 }
474 
475 typedef struct drm_buf_free32 {
476 	int count;
477 	u32 list;
478 } drm_buf_free32_t;
479 
compat_drm_freebufs(struct file * file,unsigned int cmd,unsigned long arg)480 static int compat_drm_freebufs(struct file *file, unsigned int cmd,
481 			       unsigned long arg)
482 {
483 	drm_buf_free32_t req32;
484 	struct drm_buf_free request;
485 	drm_buf_free32_t __user *argp = (void __user *)arg;
486 
487 	if (copy_from_user(&req32, argp, sizeof(req32)))
488 		return -EFAULT;
489 
490 	request.count = req32.count;
491 	request.list = compat_ptr(req32.list);
492 	return drm_ioctl_kernel(file, drm_legacy_freebufs, &request, DRM_AUTH);
493 }
494 
495 typedef struct drm_ctx_priv_map32 {
496 	unsigned int ctx_id;	 /**< Context requesting private mapping */
497 	u32 handle;		/**< Handle of map */
498 } drm_ctx_priv_map32_t;
499 
compat_drm_setsareactx(struct file * file,unsigned int cmd,unsigned long arg)500 static int compat_drm_setsareactx(struct file *file, unsigned int cmd,
501 				  unsigned long arg)
502 {
503 	drm_ctx_priv_map32_t req32;
504 	struct drm_ctx_priv_map request;
505 	drm_ctx_priv_map32_t __user *argp = (void __user *)arg;
506 
507 	if (copy_from_user(&req32, argp, sizeof(req32)))
508 		return -EFAULT;
509 
510 	request.ctx_id = req32.ctx_id;
511 	request.handle = compat_ptr(req32.handle);
512 	return drm_ioctl_kernel(file, drm_legacy_setsareactx, &request,
513 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
514 }
515 
compat_drm_getsareactx(struct file * file,unsigned int cmd,unsigned long arg)516 static int compat_drm_getsareactx(struct file *file, unsigned int cmd,
517 				  unsigned long arg)
518 {
519 	struct drm_ctx_priv_map req;
520 	drm_ctx_priv_map32_t req32;
521 	drm_ctx_priv_map32_t __user *argp = (void __user *)arg;
522 	int err;
523 
524 	if (copy_from_user(&req32, argp, sizeof(req32)))
525 		return -EFAULT;
526 
527 	req.ctx_id = req32.ctx_id;
528 	err = drm_ioctl_kernel(file, drm_legacy_getsareactx, &req, DRM_AUTH);
529 	if (err)
530 		return err;
531 
532 	req32.handle = ptr_to_compat(req.handle);
533 	if (copy_to_user(argp, &req32, sizeof(req32)))
534 		return -EFAULT;
535 
536 	return 0;
537 }
538 
539 typedef struct drm_ctx_res32 {
540 	int count;
541 	u32 contexts;
542 } drm_ctx_res32_t;
543 
compat_drm_resctx(struct file * file,unsigned int cmd,unsigned long arg)544 static int compat_drm_resctx(struct file *file, unsigned int cmd,
545 			     unsigned long arg)
546 {
547 	drm_ctx_res32_t __user *argp = (void __user *)arg;
548 	drm_ctx_res32_t res32;
549 	struct drm_ctx_res res;
550 	int err;
551 
552 	if (copy_from_user(&res32, argp, sizeof(res32)))
553 		return -EFAULT;
554 
555 	res.count = res32.count;
556 	res.contexts = compat_ptr(res32.contexts);
557 	err = drm_ioctl_kernel(file, drm_legacy_resctx, &res, DRM_AUTH);
558 	if (err)
559 		return err;
560 
561 	res32.count = res.count;
562 	if (copy_to_user(argp, &res32, sizeof(res32)))
563 		return -EFAULT;
564 
565 	return 0;
566 }
567 
568 typedef struct drm_dma32 {
569 	int context;		  /**< Context handle */
570 	int send_count;		  /**< Number of buffers to send */
571 	u32 send_indices;	  /**< List of handles to buffers */
572 	u32 send_sizes;		  /**< Lengths of data to send */
573 	enum drm_dma_flags flags;		  /**< Flags */
574 	int request_count;	  /**< Number of buffers requested */
575 	int request_size;	  /**< Desired size for buffers */
576 	u32 request_indices;	  /**< Buffer information */
577 	u32 request_sizes;
578 	int granted_count;	  /**< Number of buffers granted */
579 } drm_dma32_t;
580 
compat_drm_dma(struct file * file,unsigned int cmd,unsigned long arg)581 static int compat_drm_dma(struct file *file, unsigned int cmd,
582 			  unsigned long arg)
583 {
584 	drm_dma32_t d32;
585 	drm_dma32_t __user *argp = (void __user *)arg;
586 	struct drm_dma d;
587 	int err;
588 
589 	if (copy_from_user(&d32, argp, sizeof(d32)))
590 		return -EFAULT;
591 
592 	d.context = d32.context;
593 	d.send_count = d32.send_count;
594 	d.send_indices = compat_ptr(d32.send_indices);
595 	d.send_sizes = compat_ptr(d32.send_sizes);
596 	d.flags = d32.flags;
597 	d.request_count = d32.request_count;
598 	d.request_indices = compat_ptr(d32.request_indices);
599 	d.request_sizes = compat_ptr(d32.request_sizes);
600 	err = drm_ioctl_kernel(file, drm_legacy_dma_ioctl, &d, DRM_AUTH);
601 	if (err)
602 		return err;
603 
604 	if (put_user(d.request_size, &argp->request_size)
605 	    || put_user(d.granted_count, &argp->granted_count))
606 		return -EFAULT;
607 
608 	return 0;
609 }
610 
611 #if IS_ENABLED(CONFIG_AGP)
612 typedef struct drm_agp_mode32 {
613 	u32 mode;	/**< AGP mode */
614 } drm_agp_mode32_t;
615 
compat_drm_agp_enable(struct file * file,unsigned int cmd,unsigned long arg)616 static int compat_drm_agp_enable(struct file *file, unsigned int cmd,
617 				 unsigned long arg)
618 {
619 	drm_agp_mode32_t __user *argp = (void __user *)arg;
620 	struct drm_agp_mode mode;
621 
622 	if (get_user(mode.mode, &argp->mode))
623 		return -EFAULT;
624 
625 	return drm_ioctl_kernel(file,  drm_agp_enable_ioctl, &mode,
626 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
627 }
628 
629 typedef struct drm_agp_info32 {
630 	int agp_version_major;
631 	int agp_version_minor;
632 	u32 mode;
633 	u32 aperture_base;	/* physical address */
634 	u32 aperture_size;	/* bytes */
635 	u32 memory_allowed;	/* bytes */
636 	u32 memory_used;
637 
638 	/* PCI information */
639 	unsigned short id_vendor;
640 	unsigned short id_device;
641 } drm_agp_info32_t;
642 
compat_drm_agp_info(struct file * file,unsigned int cmd,unsigned long arg)643 static int compat_drm_agp_info(struct file *file, unsigned int cmd,
644 			       unsigned long arg)
645 {
646 	drm_agp_info32_t __user *argp = (void __user *)arg;
647 	drm_agp_info32_t i32;
648 	struct drm_agp_info info;
649 	int err;
650 
651 	err = drm_ioctl_kernel(file, drm_agp_info_ioctl, &info, DRM_AUTH);
652 	if (err)
653 		return err;
654 
655 	i32.agp_version_major = info.agp_version_major;
656 	i32.agp_version_minor = info.agp_version_minor;
657 	i32.mode = info.mode;
658 	i32.aperture_base = info.aperture_base;
659 	i32.aperture_size = info.aperture_size;
660 	i32.memory_allowed = info.memory_allowed;
661 	i32.memory_used = info.memory_used;
662 	i32.id_vendor = info.id_vendor;
663 	i32.id_device = info.id_device;
664 	if (copy_to_user(argp, &i32, sizeof(i32)))
665 		return -EFAULT;
666 
667 	return 0;
668 }
669 
670 typedef struct drm_agp_buffer32 {
671 	u32 size;	/**< In bytes -- will round to page boundary */
672 	u32 handle;	/**< Used for binding / unbinding */
673 	u32 type;	/**< Type of memory to allocate */
674 	u32 physical;	/**< Physical used by i810 */
675 } drm_agp_buffer32_t;
676 
compat_drm_agp_alloc(struct file * file,unsigned int cmd,unsigned long arg)677 static int compat_drm_agp_alloc(struct file *file, unsigned int cmd,
678 				unsigned long arg)
679 {
680 	drm_agp_buffer32_t __user *argp = (void __user *)arg;
681 	drm_agp_buffer32_t req32;
682 	struct drm_agp_buffer request;
683 	int err;
684 
685 	if (copy_from_user(&req32, argp, sizeof(req32)))
686 		return -EFAULT;
687 
688 	request.size = req32.size;
689 	request.type = req32.type;
690 	err = drm_ioctl_kernel(file, drm_agp_alloc_ioctl, &request,
691 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
692 	if (err)
693 		return err;
694 
695 	req32.handle = request.handle;
696 	req32.physical = request.physical;
697 	if (copy_to_user(argp, &req32, sizeof(req32))) {
698 		drm_ioctl_kernel(file, drm_agp_free_ioctl, &request,
699 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
700 		return -EFAULT;
701 	}
702 
703 	return 0;
704 }
705 
compat_drm_agp_free(struct file * file,unsigned int cmd,unsigned long arg)706 static int compat_drm_agp_free(struct file *file, unsigned int cmd,
707 			       unsigned long arg)
708 {
709 	drm_agp_buffer32_t __user *argp = (void __user *)arg;
710 	struct drm_agp_buffer request;
711 
712 	if (get_user(request.handle, &argp->handle))
713 		return -EFAULT;
714 
715 	return drm_ioctl_kernel(file, drm_agp_free_ioctl, &request,
716 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
717 }
718 
719 typedef struct drm_agp_binding32 {
720 	u32 handle;	/**< From drm_agp_buffer */
721 	u32 offset;	/**< In bytes -- will round to page boundary */
722 } drm_agp_binding32_t;
723 
compat_drm_agp_bind(struct file * file,unsigned int cmd,unsigned long arg)724 static int compat_drm_agp_bind(struct file *file, unsigned int cmd,
725 			       unsigned long arg)
726 {
727 	drm_agp_binding32_t __user *argp = (void __user *)arg;
728 	drm_agp_binding32_t req32;
729 	struct drm_agp_binding request;
730 
731 	if (copy_from_user(&req32, argp, sizeof(req32)))
732 		return -EFAULT;
733 
734 	request.handle = req32.handle;
735 	request.offset = req32.offset;
736 	return drm_ioctl_kernel(file, drm_agp_bind_ioctl, &request,
737 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
738 }
739 
compat_drm_agp_unbind(struct file * file,unsigned int cmd,unsigned long arg)740 static int compat_drm_agp_unbind(struct file *file, unsigned int cmd,
741 				 unsigned long arg)
742 {
743 	drm_agp_binding32_t __user *argp = (void __user *)arg;
744 	struct drm_agp_binding request;
745 
746 	if (get_user(request.handle, &argp->handle))
747 		return -EFAULT;
748 
749 	return drm_ioctl_kernel(file, drm_agp_unbind_ioctl, &request,
750 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
751 }
752 #endif /* CONFIG_AGP */
753 
754 typedef struct drm_scatter_gather32 {
755 	u32 size;	/**< In bytes -- will round to page boundary */
756 	u32 handle;	/**< Used for mapping / unmapping */
757 } drm_scatter_gather32_t;
758 
compat_drm_sg_alloc(struct file * file,unsigned int cmd,unsigned long arg)759 static int compat_drm_sg_alloc(struct file *file, unsigned int cmd,
760 			       unsigned long arg)
761 {
762 	drm_scatter_gather32_t __user *argp = (void __user *)arg;
763 	struct drm_scatter_gather request;
764 	int err;
765 
766 	if (get_user(request.size, &argp->size))
767 		return -EFAULT;
768 
769 	err = drm_ioctl_kernel(file, drm_legacy_sg_alloc, &request,
770 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
771 	if (err)
772 		return err;
773 
774 	/* XXX not sure about the handle conversion here... */
775 	if (put_user(request.handle >> PAGE_SHIFT, &argp->handle))
776 		return -EFAULT;
777 
778 	return 0;
779 }
780 
compat_drm_sg_free(struct file * file,unsigned int cmd,unsigned long arg)781 static int compat_drm_sg_free(struct file *file, unsigned int cmd,
782 			      unsigned long arg)
783 {
784 	drm_scatter_gather32_t __user *argp = (void __user *)arg;
785 	struct drm_scatter_gather request;
786 	unsigned long x;
787 
788 	if (get_user(x, &argp->handle))
789 		return -EFAULT;
790 	request.handle = x << PAGE_SHIFT;
791 	return drm_ioctl_kernel(file, drm_legacy_sg_free, &request,
792 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
793 }
794 
795 #if defined(CONFIG_X86)
796 typedef struct drm_update_draw32 {
797 	drm_drawable_t handle;
798 	unsigned int type;
799 	unsigned int num;
800 	/* 64-bit version has a 32-bit pad here */
801 	u64 data;	/**< Pointer */
802 } __attribute__((packed)) drm_update_draw32_t;
803 
compat_drm_update_draw(struct file * file,unsigned int cmd,unsigned long arg)804 static int compat_drm_update_draw(struct file *file, unsigned int cmd,
805 				  unsigned long arg)
806 {
807 	drm_update_draw32_t update32;
808 	if (copy_from_user(&update32, (void __user *)arg, sizeof(update32)))
809 		return -EFAULT;
810 
811 	return drm_ioctl_kernel(file, drm_noop, NULL,
812 				DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY);
813 }
814 #endif
815 
816 struct drm_wait_vblank_request32 {
817 	enum drm_vblank_seq_type type;
818 	unsigned int sequence;
819 	u32 signal;
820 };
821 
822 struct drm_wait_vblank_reply32 {
823 	enum drm_vblank_seq_type type;
824 	unsigned int sequence;
825 	s32 tval_sec;
826 	s32 tval_usec;
827 };
828 
829 typedef union drm_wait_vblank32 {
830 	struct drm_wait_vblank_request32 request;
831 	struct drm_wait_vblank_reply32 reply;
832 } drm_wait_vblank32_t;
833 
compat_drm_wait_vblank(struct file * file,unsigned int cmd,unsigned long arg)834 static int compat_drm_wait_vblank(struct file *file, unsigned int cmd,
835 				  unsigned long arg)
836 {
837 	drm_wait_vblank32_t __user *argp = (void __user *)arg;
838 	drm_wait_vblank32_t req32;
839 	union drm_wait_vblank req;
840 	int err;
841 
842 	if (copy_from_user(&req32, argp, sizeof(req32)))
843 		return -EFAULT;
844 
845 	req.request.type = req32.request.type;
846 	req.request.sequence = req32.request.sequence;
847 	req.request.signal = req32.request.signal;
848 	err = drm_ioctl_kernel(file, drm_wait_vblank_ioctl, &req, DRM_UNLOCKED);
849 	if (err)
850 		return err;
851 
852 	req32.reply.type = req.reply.type;
853 	req32.reply.sequence = req.reply.sequence;
854 	req32.reply.tval_sec = req.reply.tval_sec;
855 	req32.reply.tval_usec = req.reply.tval_usec;
856 	if (copy_to_user(argp, &req32, sizeof(req32)))
857 		return -EFAULT;
858 
859 	return 0;
860 }
861 
862 #if defined(CONFIG_X86)
863 typedef struct drm_mode_fb_cmd232 {
864 	u32 fb_id;
865 	u32 width;
866 	u32 height;
867 	u32 pixel_format;
868 	u32 flags;
869 	u32 handles[4];
870 	u32 pitches[4];
871 	u32 offsets[4];
872 	u64 modifier[4];
873 } __attribute__((packed)) drm_mode_fb_cmd232_t;
874 
compat_drm_mode_addfb2(struct file * file,unsigned int cmd,unsigned long arg)875 static int compat_drm_mode_addfb2(struct file *file, unsigned int cmd,
876 				  unsigned long arg)
877 {
878 	struct drm_mode_fb_cmd232 __user *argp = (void __user *)arg;
879 	struct drm_mode_fb_cmd2 req64;
880 	int err;
881 
882 	if (copy_from_user(&req64, argp,
883 			   offsetof(drm_mode_fb_cmd232_t, modifier)))
884 		return -EFAULT;
885 
886 	if (copy_from_user(&req64.modifier, &argp->modifier,
887 			   sizeof(req64.modifier)))
888 		return -EFAULT;
889 
890 	err = drm_ioctl_kernel(file, drm_mode_addfb2, &req64,
891 				DRM_CONTROL_ALLOW|DRM_UNLOCKED);
892 	if (err)
893 		return err;
894 
895 	if (put_user(req64.fb_id, &argp->fb_id))
896 		return -EFAULT;
897 
898 	return 0;
899 }
900 #endif
901 
902 static struct {
903 	drm_ioctl_compat_t *fn;
904 	char *name;
905 } drm_compat_ioctls[] = {
906 #define DRM_IOCTL32_DEF(n, f) [DRM_IOCTL_NR(n##32)] = {.fn = f, .name = #n}
907 	DRM_IOCTL32_DEF(DRM_IOCTL_VERSION, compat_drm_version),
908 	DRM_IOCTL32_DEF(DRM_IOCTL_GET_UNIQUE, compat_drm_getunique),
909 	DRM_IOCTL32_DEF(DRM_IOCTL_GET_MAP, compat_drm_getmap),
910 	DRM_IOCTL32_DEF(DRM_IOCTL_GET_CLIENT, compat_drm_getclient),
911 	DRM_IOCTL32_DEF(DRM_IOCTL_GET_STATS, compat_drm_getstats),
912 	DRM_IOCTL32_DEF(DRM_IOCTL_SET_UNIQUE, compat_drm_setunique),
913 	DRM_IOCTL32_DEF(DRM_IOCTL_ADD_MAP, compat_drm_addmap),
914 	DRM_IOCTL32_DEF(DRM_IOCTL_ADD_BUFS, compat_drm_addbufs),
915 	DRM_IOCTL32_DEF(DRM_IOCTL_MARK_BUFS, compat_drm_markbufs),
916 	DRM_IOCTL32_DEF(DRM_IOCTL_INFO_BUFS, compat_drm_infobufs),
917 	DRM_IOCTL32_DEF(DRM_IOCTL_MAP_BUFS, compat_drm_mapbufs),
918 	DRM_IOCTL32_DEF(DRM_IOCTL_FREE_BUFS, compat_drm_freebufs),
919 	DRM_IOCTL32_DEF(DRM_IOCTL_RM_MAP, compat_drm_rmmap),
920 	DRM_IOCTL32_DEF(DRM_IOCTL_SET_SAREA_CTX, compat_drm_setsareactx),
921 	DRM_IOCTL32_DEF(DRM_IOCTL_GET_SAREA_CTX, compat_drm_getsareactx),
922 	DRM_IOCTL32_DEF(DRM_IOCTL_RES_CTX, compat_drm_resctx),
923 	DRM_IOCTL32_DEF(DRM_IOCTL_DMA, compat_drm_dma),
924 #if IS_ENABLED(CONFIG_AGP)
925 	DRM_IOCTL32_DEF(DRM_IOCTL_AGP_ENABLE, compat_drm_agp_enable),
926 	DRM_IOCTL32_DEF(DRM_IOCTL_AGP_INFO, compat_drm_agp_info),
927 	DRM_IOCTL32_DEF(DRM_IOCTL_AGP_ALLOC, compat_drm_agp_alloc),
928 	DRM_IOCTL32_DEF(DRM_IOCTL_AGP_FREE, compat_drm_agp_free),
929 	DRM_IOCTL32_DEF(DRM_IOCTL_AGP_BIND, compat_drm_agp_bind),
930 	DRM_IOCTL32_DEF(DRM_IOCTL_AGP_UNBIND, compat_drm_agp_unbind),
931 #endif
932 	DRM_IOCTL32_DEF(DRM_IOCTL_SG_ALLOC, compat_drm_sg_alloc),
933 	DRM_IOCTL32_DEF(DRM_IOCTL_SG_FREE, compat_drm_sg_free),
934 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
935 	DRM_IOCTL32_DEF(DRM_IOCTL_UPDATE_DRAW, compat_drm_update_draw),
936 #endif
937 	DRM_IOCTL32_DEF(DRM_IOCTL_WAIT_VBLANK, compat_drm_wait_vblank),
938 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
939 	DRM_IOCTL32_DEF(DRM_IOCTL_MODE_ADDFB2, compat_drm_mode_addfb2),
940 #endif
941 };
942 
943 /**
944  * drm_compat_ioctl - 32bit IOCTL compatibility handler for DRM drivers
945  * @filp: file this ioctl is called on
946  * @cmd: ioctl cmd number
947  * @arg: user argument
948  *
949  * Compatibility handler for 32 bit userspace running on 64 kernels. All actual
950  * IOCTL handling is forwarded to drm_ioctl(), while marshalling structures as
951  * appropriate. Note that this only handles DRM core IOCTLs, if the driver has
952  * botched IOCTL itself, it must handle those by wrapping this function.
953  *
954  * Returns:
955  * Zero on success, negative error code on failure.
956  */
drm_compat_ioctl(struct file * filp,unsigned int cmd,unsigned long arg)957 long drm_compat_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
958 {
959 	unsigned int nr = DRM_IOCTL_NR(cmd);
960 	struct drm_file *file_priv = filp->private_data;
961 	drm_ioctl_compat_t *fn;
962 	int ret;
963 
964 	/* Assume that ioctls without an explicit compat routine will just
965 	 * work.  This may not always be a good assumption, but it's better
966 	 * than always failing.
967 	 */
968 	if (nr >= ARRAY_SIZE(drm_compat_ioctls))
969 		return drm_ioctl(filp, cmd, arg);
970 
971 	fn = drm_compat_ioctls[nr].fn;
972 	if (!fn)
973 		return drm_ioctl(filp, cmd, arg);
974 
975 	DRM_DEBUG("pid=%d, dev=0x%lx, auth=%d, %s\n",
976 		  task_pid_nr(current),
977 		  (long)old_encode_dev(file_priv->minor->kdev->devt),
978 		  file_priv->authenticated,
979 		  drm_compat_ioctls[nr].name);
980 	ret = (*fn)(filp, cmd, arg);
981 	if (ret)
982 		DRM_DEBUG("ret = %d\n", ret);
983 	return ret;
984 }
985 EXPORT_SYMBOL(drm_compat_ioctl);
986