1 /*
2 * compat ioctls for control API
3 *
4 * Copyright (c) by Takashi Iwai <tiwai@suse.de>
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
19 */
20
21 /* this file included from control.c */
22
23 #include <linux/compat.h>
24 #include <linux/slab.h>
25
26 struct snd_ctl_elem_list32 {
27 u32 offset;
28 u32 space;
29 u32 used;
30 u32 count;
31 u32 pids;
32 unsigned char reserved[50];
33 } /* don't set packed attribute here */;
34
snd_ctl_elem_list_compat(struct snd_card * card,struct snd_ctl_elem_list32 __user * data32)35 static int snd_ctl_elem_list_compat(struct snd_card *card,
36 struct snd_ctl_elem_list32 __user *data32)
37 {
38 struct snd_ctl_elem_list __user *data;
39 compat_caddr_t ptr;
40 int err;
41
42 data = compat_alloc_user_space(sizeof(*data));
43
44 /* offset, space, used, count */
45 if (copy_in_user(data, data32, 4 * sizeof(u32)))
46 return -EFAULT;
47 /* pids */
48 if (get_user(ptr, &data32->pids) ||
49 put_user(compat_ptr(ptr), &data->pids))
50 return -EFAULT;
51 err = snd_ctl_elem_list(card, data);
52 if (err < 0)
53 return err;
54 /* copy the result */
55 if (copy_in_user(data32, data, 4 * sizeof(u32)))
56 return -EFAULT;
57 return 0;
58 }
59
60 /*
61 * control element info
62 * it uses union, so the things are not easy..
63 */
64
65 struct snd_ctl_elem_info32 {
66 struct snd_ctl_elem_id id; // the size of struct is same
67 s32 type;
68 u32 access;
69 u32 count;
70 s32 owner;
71 union {
72 struct {
73 s32 min;
74 s32 max;
75 s32 step;
76 } integer;
77 struct {
78 u64 min;
79 u64 max;
80 u64 step;
81 } integer64;
82 struct {
83 u32 items;
84 u32 item;
85 char name[64];
86 u64 names_ptr;
87 u32 names_length;
88 } enumerated;
89 unsigned char reserved[128];
90 } value;
91 unsigned char reserved[64];
92 } __attribute__((packed));
93
snd_ctl_elem_info_compat(struct snd_ctl_file * ctl,struct snd_ctl_elem_info32 __user * data32)94 static int snd_ctl_elem_info_compat(struct snd_ctl_file *ctl,
95 struct snd_ctl_elem_info32 __user *data32)
96 {
97 struct snd_ctl_elem_info *data;
98 int err;
99
100 data = kzalloc(sizeof(*data), GFP_KERNEL);
101 if (! data)
102 return -ENOMEM;
103
104 err = -EFAULT;
105 /* copy id */
106 if (copy_from_user(&data->id, &data32->id, sizeof(data->id)))
107 goto error;
108 /* we need to copy the item index.
109 * hope this doesn't break anything..
110 */
111 if (get_user(data->value.enumerated.item, &data32->value.enumerated.item))
112 goto error;
113
114 snd_power_lock(ctl->card);
115 err = snd_power_wait(ctl->card, SNDRV_CTL_POWER_D0);
116 if (err >= 0)
117 err = snd_ctl_elem_info(ctl, data);
118 snd_power_unlock(ctl->card);
119
120 if (err < 0)
121 goto error;
122 /* restore info to 32bit */
123 err = -EFAULT;
124 /* id, type, access, count */
125 if (copy_to_user(&data32->id, &data->id, sizeof(data->id)) ||
126 copy_to_user(&data32->type, &data->type, 3 * sizeof(u32)))
127 goto error;
128 if (put_user(data->owner, &data32->owner))
129 goto error;
130 switch (data->type) {
131 case SNDRV_CTL_ELEM_TYPE_BOOLEAN:
132 case SNDRV_CTL_ELEM_TYPE_INTEGER:
133 if (put_user(data->value.integer.min, &data32->value.integer.min) ||
134 put_user(data->value.integer.max, &data32->value.integer.max) ||
135 put_user(data->value.integer.step, &data32->value.integer.step))
136 goto error;
137 break;
138 case SNDRV_CTL_ELEM_TYPE_INTEGER64:
139 if (copy_to_user(&data32->value.integer64,
140 &data->value.integer64,
141 sizeof(data->value.integer64)))
142 goto error;
143 break;
144 case SNDRV_CTL_ELEM_TYPE_ENUMERATED:
145 if (copy_to_user(&data32->value.enumerated,
146 &data->value.enumerated,
147 sizeof(data->value.enumerated)))
148 goto error;
149 break;
150 default:
151 break;
152 }
153 err = 0;
154 error:
155 kfree(data);
156 return err;
157 }
158
159 /* read / write */
160 struct snd_ctl_elem_value32 {
161 struct snd_ctl_elem_id id;
162 unsigned int indirect; /* bit-field causes misalignment */
163 union {
164 s32 integer[128];
165 unsigned char data[512];
166 #ifndef CONFIG_X86_64
167 s64 integer64[64];
168 #endif
169 } value;
170 unsigned char reserved[128];
171 };
172
173 #ifdef CONFIG_X86_X32
174 /* x32 has a different alignment for 64bit values from ia32 */
175 struct snd_ctl_elem_value_x32 {
176 struct snd_ctl_elem_id id;
177 unsigned int indirect; /* bit-field causes misalignment */
178 union {
179 s32 integer[128];
180 unsigned char data[512];
181 s64 integer64[64];
182 } value;
183 unsigned char reserved[128];
184 };
185 #endif /* CONFIG_X86_X32 */
186
187 /* get the value type and count of the control */
get_ctl_type(struct snd_card * card,struct snd_ctl_elem_id * id,int * countp)188 static int get_ctl_type(struct snd_card *card, struct snd_ctl_elem_id *id,
189 int *countp)
190 {
191 struct snd_kcontrol *kctl;
192 struct snd_ctl_elem_info *info;
193 int err;
194
195 down_read(&card->controls_rwsem);
196 kctl = snd_ctl_find_id(card, id);
197 if (! kctl) {
198 up_read(&card->controls_rwsem);
199 return -ENXIO;
200 }
201 info = kzalloc(sizeof(*info), GFP_KERNEL);
202 if (info == NULL) {
203 up_read(&card->controls_rwsem);
204 return -ENOMEM;
205 }
206 info->id = *id;
207 err = kctl->info(kctl, info);
208 up_read(&card->controls_rwsem);
209 if (err >= 0) {
210 err = info->type;
211 *countp = info->count;
212 }
213 kfree(info);
214 return err;
215 }
216
get_elem_size(int type,int count)217 static int get_elem_size(int type, int count)
218 {
219 switch (type) {
220 case SNDRV_CTL_ELEM_TYPE_INTEGER64:
221 return sizeof(s64) * count;
222 case SNDRV_CTL_ELEM_TYPE_ENUMERATED:
223 return sizeof(int) * count;
224 case SNDRV_CTL_ELEM_TYPE_BYTES:
225 return 512;
226 case SNDRV_CTL_ELEM_TYPE_IEC958:
227 return sizeof(struct snd_aes_iec958);
228 default:
229 return -1;
230 }
231 }
232
copy_ctl_value_from_user(struct snd_card * card,struct snd_ctl_elem_value * data,void __user * userdata,void __user * valuep,int * typep,int * countp)233 static int copy_ctl_value_from_user(struct snd_card *card,
234 struct snd_ctl_elem_value *data,
235 void __user *userdata,
236 void __user *valuep,
237 int *typep, int *countp)
238 {
239 struct snd_ctl_elem_value32 __user *data32 = userdata;
240 int i, type, size;
241 int uninitialized_var(count);
242 unsigned int indirect;
243
244 if (copy_from_user(&data->id, &data32->id, sizeof(data->id)))
245 return -EFAULT;
246 if (get_user(indirect, &data32->indirect))
247 return -EFAULT;
248 if (indirect)
249 return -EINVAL;
250 type = get_ctl_type(card, &data->id, &count);
251 if (type < 0)
252 return type;
253
254 if (type == SNDRV_CTL_ELEM_TYPE_BOOLEAN ||
255 type == SNDRV_CTL_ELEM_TYPE_INTEGER) {
256 for (i = 0; i < count; i++) {
257 s32 __user *intp = valuep;
258 int val;
259 if (get_user(val, &intp[i]))
260 return -EFAULT;
261 data->value.integer.value[i] = val;
262 }
263 } else {
264 size = get_elem_size(type, count);
265 if (size < 0) {
266 dev_err(card->dev, "snd_ioctl32_ctl_elem_value: unknown type %d\n", type);
267 return -EINVAL;
268 }
269 if (copy_from_user(data->value.bytes.data, valuep, size))
270 return -EFAULT;
271 }
272
273 *typep = type;
274 *countp = count;
275 return 0;
276 }
277
278 /* restore the value to 32bit */
copy_ctl_value_to_user(void __user * userdata,void __user * valuep,struct snd_ctl_elem_value * data,int type,int count)279 static int copy_ctl_value_to_user(void __user *userdata,
280 void __user *valuep,
281 struct snd_ctl_elem_value *data,
282 int type, int count)
283 {
284 struct snd_ctl_elem_value32 __user *data32 = userdata;
285 int i, size;
286
287 if (type == SNDRV_CTL_ELEM_TYPE_BOOLEAN ||
288 type == SNDRV_CTL_ELEM_TYPE_INTEGER) {
289 for (i = 0; i < count; i++) {
290 s32 __user *intp = valuep;
291 int val;
292 val = data->value.integer.value[i];
293 if (put_user(val, &intp[i]))
294 return -EFAULT;
295 }
296 } else {
297 size = get_elem_size(type, count);
298 if (copy_to_user(valuep, data->value.bytes.data, size))
299 return -EFAULT;
300 }
301 if (copy_to_user(&data32->id, &data->id, sizeof(data32->id)))
302 return -EFAULT;
303 return 0;
304 }
305
ctl_elem_read_user(struct snd_card * card,void __user * userdata,void __user * valuep)306 static int ctl_elem_read_user(struct snd_card *card,
307 void __user *userdata, void __user *valuep)
308 {
309 struct snd_ctl_elem_value *data;
310 int err, type, count;
311
312 data = kzalloc(sizeof(*data), GFP_KERNEL);
313 if (data == NULL)
314 return -ENOMEM;
315
316 err = copy_ctl_value_from_user(card, data, userdata, valuep,
317 &type, &count);
318 if (err < 0)
319 goto error;
320
321 snd_power_lock(card);
322 err = snd_power_wait(card, SNDRV_CTL_POWER_D0);
323 if (err >= 0)
324 err = snd_ctl_elem_read(card, data);
325 snd_power_unlock(card);
326 if (err >= 0)
327 err = copy_ctl_value_to_user(userdata, valuep, data,
328 type, count);
329 error:
330 kfree(data);
331 return err;
332 }
333
ctl_elem_write_user(struct snd_ctl_file * file,void __user * userdata,void __user * valuep)334 static int ctl_elem_write_user(struct snd_ctl_file *file,
335 void __user *userdata, void __user *valuep)
336 {
337 struct snd_ctl_elem_value *data;
338 struct snd_card *card = file->card;
339 int err, type, count;
340
341 data = kzalloc(sizeof(*data), GFP_KERNEL);
342 if (data == NULL)
343 return -ENOMEM;
344
345 err = copy_ctl_value_from_user(card, data, userdata, valuep,
346 &type, &count);
347 if (err < 0)
348 goto error;
349
350 snd_power_lock(card);
351 err = snd_power_wait(card, SNDRV_CTL_POWER_D0);
352 if (err >= 0)
353 err = snd_ctl_elem_write(card, file, data);
354 snd_power_unlock(card);
355 if (err >= 0)
356 err = copy_ctl_value_to_user(userdata, valuep, data,
357 type, count);
358 error:
359 kfree(data);
360 return err;
361 }
362
snd_ctl_elem_read_user_compat(struct snd_card * card,struct snd_ctl_elem_value32 __user * data32)363 static int snd_ctl_elem_read_user_compat(struct snd_card *card,
364 struct snd_ctl_elem_value32 __user *data32)
365 {
366 return ctl_elem_read_user(card, data32, &data32->value);
367 }
368
snd_ctl_elem_write_user_compat(struct snd_ctl_file * file,struct snd_ctl_elem_value32 __user * data32)369 static int snd_ctl_elem_write_user_compat(struct snd_ctl_file *file,
370 struct snd_ctl_elem_value32 __user *data32)
371 {
372 return ctl_elem_write_user(file, data32, &data32->value);
373 }
374
375 #ifdef CONFIG_X86_X32
snd_ctl_elem_read_user_x32(struct snd_card * card,struct snd_ctl_elem_value_x32 __user * data32)376 static int snd_ctl_elem_read_user_x32(struct snd_card *card,
377 struct snd_ctl_elem_value_x32 __user *data32)
378 {
379 return ctl_elem_read_user(card, data32, &data32->value);
380 }
381
snd_ctl_elem_write_user_x32(struct snd_ctl_file * file,struct snd_ctl_elem_value_x32 __user * data32)382 static int snd_ctl_elem_write_user_x32(struct snd_ctl_file *file,
383 struct snd_ctl_elem_value_x32 __user *data32)
384 {
385 return ctl_elem_write_user(file, data32, &data32->value);
386 }
387 #endif /* CONFIG_X86_X32 */
388
389 /* add or replace a user control */
snd_ctl_elem_add_compat(struct snd_ctl_file * file,struct snd_ctl_elem_info32 __user * data32,int replace)390 static int snd_ctl_elem_add_compat(struct snd_ctl_file *file,
391 struct snd_ctl_elem_info32 __user *data32,
392 int replace)
393 {
394 struct snd_ctl_elem_info *data;
395 int err;
396
397 data = kzalloc(sizeof(*data), GFP_KERNEL);
398 if (! data)
399 return -ENOMEM;
400
401 err = -EFAULT;
402 /* id, type, access, count */ \
403 if (copy_from_user(&data->id, &data32->id, sizeof(data->id)) ||
404 copy_from_user(&data->type, &data32->type, 3 * sizeof(u32)))
405 goto error;
406 if (get_user(data->owner, &data32->owner))
407 goto error;
408 switch (data->type) {
409 case SNDRV_CTL_ELEM_TYPE_BOOLEAN:
410 case SNDRV_CTL_ELEM_TYPE_INTEGER:
411 if (get_user(data->value.integer.min, &data32->value.integer.min) ||
412 get_user(data->value.integer.max, &data32->value.integer.max) ||
413 get_user(data->value.integer.step, &data32->value.integer.step))
414 goto error;
415 break;
416 case SNDRV_CTL_ELEM_TYPE_INTEGER64:
417 if (copy_from_user(&data->value.integer64,
418 &data32->value.integer64,
419 sizeof(data->value.integer64)))
420 goto error;
421 break;
422 case SNDRV_CTL_ELEM_TYPE_ENUMERATED:
423 if (copy_from_user(&data->value.enumerated,
424 &data32->value.enumerated,
425 sizeof(data->value.enumerated)))
426 goto error;
427 data->value.enumerated.names_ptr =
428 (uintptr_t)compat_ptr(data->value.enumerated.names_ptr);
429 break;
430 default:
431 break;
432 }
433 err = snd_ctl_elem_add(file, data, replace);
434 error:
435 kfree(data);
436 return err;
437 }
438
439 enum {
440 SNDRV_CTL_IOCTL_ELEM_LIST32 = _IOWR('U', 0x10, struct snd_ctl_elem_list32),
441 SNDRV_CTL_IOCTL_ELEM_INFO32 = _IOWR('U', 0x11, struct snd_ctl_elem_info32),
442 SNDRV_CTL_IOCTL_ELEM_READ32 = _IOWR('U', 0x12, struct snd_ctl_elem_value32),
443 SNDRV_CTL_IOCTL_ELEM_WRITE32 = _IOWR('U', 0x13, struct snd_ctl_elem_value32),
444 SNDRV_CTL_IOCTL_ELEM_ADD32 = _IOWR('U', 0x17, struct snd_ctl_elem_info32),
445 SNDRV_CTL_IOCTL_ELEM_REPLACE32 = _IOWR('U', 0x18, struct snd_ctl_elem_info32),
446 #ifdef CONFIG_X86_X32
447 SNDRV_CTL_IOCTL_ELEM_READ_X32 = _IOWR('U', 0x12, struct snd_ctl_elem_value_x32),
448 SNDRV_CTL_IOCTL_ELEM_WRITE_X32 = _IOWR('U', 0x13, struct snd_ctl_elem_value_x32),
449 #endif /* CONFIG_X86_X32 */
450 };
451
snd_ctl_ioctl_compat(struct file * file,unsigned int cmd,unsigned long arg)452 static inline long snd_ctl_ioctl_compat(struct file *file, unsigned int cmd, unsigned long arg)
453 {
454 struct snd_ctl_file *ctl;
455 struct snd_kctl_ioctl *p;
456 void __user *argp = compat_ptr(arg);
457 int err;
458
459 ctl = file->private_data;
460 if (snd_BUG_ON(!ctl || !ctl->card))
461 return -ENXIO;
462
463 switch (cmd) {
464 case SNDRV_CTL_IOCTL_PVERSION:
465 case SNDRV_CTL_IOCTL_CARD_INFO:
466 case SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS:
467 case SNDRV_CTL_IOCTL_POWER:
468 case SNDRV_CTL_IOCTL_POWER_STATE:
469 case SNDRV_CTL_IOCTL_ELEM_LOCK:
470 case SNDRV_CTL_IOCTL_ELEM_UNLOCK:
471 case SNDRV_CTL_IOCTL_ELEM_REMOVE:
472 case SNDRV_CTL_IOCTL_TLV_READ:
473 case SNDRV_CTL_IOCTL_TLV_WRITE:
474 case SNDRV_CTL_IOCTL_TLV_COMMAND:
475 return snd_ctl_ioctl(file, cmd, (unsigned long)argp);
476 case SNDRV_CTL_IOCTL_ELEM_LIST32:
477 return snd_ctl_elem_list_compat(ctl->card, argp);
478 case SNDRV_CTL_IOCTL_ELEM_INFO32:
479 return snd_ctl_elem_info_compat(ctl, argp);
480 case SNDRV_CTL_IOCTL_ELEM_READ32:
481 return snd_ctl_elem_read_user_compat(ctl->card, argp);
482 case SNDRV_CTL_IOCTL_ELEM_WRITE32:
483 return snd_ctl_elem_write_user_compat(ctl, argp);
484 case SNDRV_CTL_IOCTL_ELEM_ADD32:
485 return snd_ctl_elem_add_compat(ctl, argp, 0);
486 case SNDRV_CTL_IOCTL_ELEM_REPLACE32:
487 return snd_ctl_elem_add_compat(ctl, argp, 1);
488 #ifdef CONFIG_X86_X32
489 case SNDRV_CTL_IOCTL_ELEM_READ_X32:
490 return snd_ctl_elem_read_user_x32(ctl->card, argp);
491 case SNDRV_CTL_IOCTL_ELEM_WRITE_X32:
492 return snd_ctl_elem_write_user_x32(ctl, argp);
493 #endif /* CONFIG_X86_X32 */
494 }
495
496 down_read(&snd_ioctl_rwsem);
497 list_for_each_entry(p, &snd_control_compat_ioctls, list) {
498 if (p->fioctl) {
499 err = p->fioctl(ctl->card, ctl, cmd, arg);
500 if (err != -ENOIOCTLCMD) {
501 up_read(&snd_ioctl_rwsem);
502 return err;
503 }
504 }
505 }
506 up_read(&snd_ioctl_rwsem);
507 return -ENOIOCTLCMD;
508 }
509