1 /**
2 * \file drm_ioc32.c
3 *
4 * 32-bit ioctl compatibility routines for the DRM.
5 *
6 * \author Paul Mackerras <paulus@samba.org>
7 *
8 * Copyright (C) Paul Mackerras 2005.
9 * All Rights Reserved.
10 *
11 * Permission is hereby granted, free of charge, to any person obtaining a
12 * copy of this software and associated documentation files (the "Software"),
13 * to deal in the Software without restriction, including without limitation
14 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
15 * and/or sell copies of the Software, and to permit persons to whom the
16 * Software is furnished to do so, subject to the following conditions:
17 *
18 * The above copyright notice and this permission notice (including the next
19 * paragraph) shall be included in all copies or substantial portions of the
20 * Software.
21 *
22 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
23 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
24 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
25 * THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
26 * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
27 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
28 * IN THE SOFTWARE.
29 */
30 #include <linux/compat.h>
31 #include <linux/ratelimit.h>
32 #include <linux/export.h>
33
34 #include <drm/drmP.h>
35
36 #define DRM_IOCTL_VERSION32 DRM_IOWR(0x00, drm_version32_t)
37 #define DRM_IOCTL_GET_UNIQUE32 DRM_IOWR(0x01, drm_unique32_t)
38 #define DRM_IOCTL_GET_MAP32 DRM_IOWR(0x04, drm_map32_t)
39 #define DRM_IOCTL_GET_CLIENT32 DRM_IOWR(0x05, drm_client32_t)
40 #define DRM_IOCTL_GET_STATS32 DRM_IOR( 0x06, drm_stats32_t)
41
42 #define DRM_IOCTL_SET_UNIQUE32 DRM_IOW( 0x10, drm_unique32_t)
43 #define DRM_IOCTL_ADD_MAP32 DRM_IOWR(0x15, drm_map32_t)
44 #define DRM_IOCTL_ADD_BUFS32 DRM_IOWR(0x16, drm_buf_desc32_t)
45 #define DRM_IOCTL_MARK_BUFS32 DRM_IOW( 0x17, drm_buf_desc32_t)
46 #define DRM_IOCTL_INFO_BUFS32 DRM_IOWR(0x18, drm_buf_info32_t)
47 #define DRM_IOCTL_MAP_BUFS32 DRM_IOWR(0x19, drm_buf_map32_t)
48 #define DRM_IOCTL_FREE_BUFS32 DRM_IOW( 0x1a, drm_buf_free32_t)
49
50 #define DRM_IOCTL_RM_MAP32 DRM_IOW( 0x1b, drm_map32_t)
51
52 #define DRM_IOCTL_SET_SAREA_CTX32 DRM_IOW( 0x1c, drm_ctx_priv_map32_t)
53 #define DRM_IOCTL_GET_SAREA_CTX32 DRM_IOWR(0x1d, drm_ctx_priv_map32_t)
54
55 #define DRM_IOCTL_RES_CTX32 DRM_IOWR(0x26, drm_ctx_res32_t)
56 #define DRM_IOCTL_DMA32 DRM_IOWR(0x29, drm_dma32_t)
57
58 #define DRM_IOCTL_AGP_ENABLE32 DRM_IOW( 0x32, drm_agp_mode32_t)
59 #define DRM_IOCTL_AGP_INFO32 DRM_IOR( 0x33, drm_agp_info32_t)
60 #define DRM_IOCTL_AGP_ALLOC32 DRM_IOWR(0x34, drm_agp_buffer32_t)
61 #define DRM_IOCTL_AGP_FREE32 DRM_IOW( 0x35, drm_agp_buffer32_t)
62 #define DRM_IOCTL_AGP_BIND32 DRM_IOW( 0x36, drm_agp_binding32_t)
63 #define DRM_IOCTL_AGP_UNBIND32 DRM_IOW( 0x37, drm_agp_binding32_t)
64
65 #define DRM_IOCTL_SG_ALLOC32 DRM_IOW( 0x38, drm_scatter_gather32_t)
66 #define DRM_IOCTL_SG_FREE32 DRM_IOW( 0x39, drm_scatter_gather32_t)
67
68 #define DRM_IOCTL_UPDATE_DRAW32 DRM_IOW( 0x3f, drm_update_draw32_t)
69
70 #define DRM_IOCTL_WAIT_VBLANK32 DRM_IOWR(0x3a, drm_wait_vblank32_t)
71
72 #define DRM_IOCTL_MODE_ADDFB232 DRM_IOWR(0xb8, drm_mode_fb_cmd232_t)
73
74 typedef struct drm_version_32 {
75 int version_major; /**< Major version */
76 int version_minor; /**< Minor version */
77 int version_patchlevel; /**< Patch level */
78 u32 name_len; /**< Length of name buffer */
79 u32 name; /**< Name of driver */
80 u32 date_len; /**< Length of date buffer */
81 u32 date; /**< User-space buffer to hold date */
82 u32 desc_len; /**< Length of desc buffer */
83 u32 desc; /**< User-space buffer to hold desc */
84 } drm_version32_t;
85
compat_drm_version(struct file * file,unsigned int cmd,unsigned long arg)86 static int compat_drm_version(struct file *file, unsigned int cmd,
87 unsigned long arg)
88 {
89 drm_version32_t v32;
90 struct drm_version __user *version;
91 int err;
92
93 if (copy_from_user(&v32, (void __user *)arg, sizeof(v32)))
94 return -EFAULT;
95
96 version = compat_alloc_user_space(sizeof(*version));
97 if (!version)
98 return -EFAULT;
99 if (__put_user(v32.name_len, &version->name_len)
100 || __put_user((void __user *)(unsigned long)v32.name,
101 &version->name)
102 || __put_user(v32.date_len, &version->date_len)
103 || __put_user((void __user *)(unsigned long)v32.date,
104 &version->date)
105 || __put_user(v32.desc_len, &version->desc_len)
106 || __put_user((void __user *)(unsigned long)v32.desc,
107 &version->desc))
108 return -EFAULT;
109
110 err = drm_ioctl(file,
111 DRM_IOCTL_VERSION, (unsigned long)version);
112 if (err)
113 return err;
114
115 if (__get_user(v32.version_major, &version->version_major)
116 || __get_user(v32.version_minor, &version->version_minor)
117 || __get_user(v32.version_patchlevel, &version->version_patchlevel)
118 || __get_user(v32.name_len, &version->name_len)
119 || __get_user(v32.date_len, &version->date_len)
120 || __get_user(v32.desc_len, &version->desc_len))
121 return -EFAULT;
122
123 if (copy_to_user((void __user *)arg, &v32, sizeof(v32)))
124 return -EFAULT;
125 return 0;
126 }
127
128 typedef struct drm_unique32 {
129 u32 unique_len; /**< Length of unique */
130 u32 unique; /**< Unique name for driver instantiation */
131 } drm_unique32_t;
132
compat_drm_getunique(struct file * file,unsigned int cmd,unsigned long arg)133 static int compat_drm_getunique(struct file *file, unsigned int cmd,
134 unsigned long arg)
135 {
136 drm_unique32_t uq32;
137 struct drm_unique __user *u;
138 int err;
139
140 if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32)))
141 return -EFAULT;
142
143 u = compat_alloc_user_space(sizeof(*u));
144 if (!u)
145 return -EFAULT;
146 if (__put_user(uq32.unique_len, &u->unique_len)
147 || __put_user((void __user *)(unsigned long)uq32.unique,
148 &u->unique))
149 return -EFAULT;
150
151 err = drm_ioctl(file, DRM_IOCTL_GET_UNIQUE, (unsigned long)u);
152 if (err)
153 return err;
154
155 if (__get_user(uq32.unique_len, &u->unique_len))
156 return -EFAULT;
157 if (copy_to_user((void __user *)arg, &uq32, sizeof(uq32)))
158 return -EFAULT;
159 return 0;
160 }
161
compat_drm_setunique(struct file * file,unsigned int cmd,unsigned long arg)162 static int compat_drm_setunique(struct file *file, unsigned int cmd,
163 unsigned long arg)
164 {
165 drm_unique32_t uq32;
166 struct drm_unique __user *u;
167
168 if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32)))
169 return -EFAULT;
170
171 u = compat_alloc_user_space(sizeof(*u));
172 if (!u)
173 return -EFAULT;
174 if (__put_user(uq32.unique_len, &u->unique_len)
175 || __put_user((void __user *)(unsigned long)uq32.unique,
176 &u->unique))
177 return -EFAULT;
178
179 return drm_ioctl(file, DRM_IOCTL_SET_UNIQUE, (unsigned long)u);
180 }
181
182 typedef struct drm_map32 {
183 u32 offset; /**< Requested physical address (0 for SAREA)*/
184 u32 size; /**< Requested physical size (bytes) */
185 enum drm_map_type type; /**< Type of memory to map */
186 enum drm_map_flags flags; /**< Flags */
187 u32 handle; /**< User-space: "Handle" to pass to mmap() */
188 int mtrr; /**< MTRR slot used */
189 } drm_map32_t;
190
compat_drm_getmap(struct file * file,unsigned int cmd,unsigned long arg)191 static int compat_drm_getmap(struct file *file, unsigned int cmd,
192 unsigned long arg)
193 {
194 drm_map32_t __user *argp = (void __user *)arg;
195 drm_map32_t m32;
196 struct drm_map __user *map;
197 int idx, err;
198 void *handle;
199
200 if (get_user(idx, &argp->offset))
201 return -EFAULT;
202
203 map = compat_alloc_user_space(sizeof(*map));
204 if (!map)
205 return -EFAULT;
206 if (__put_user(idx, &map->offset))
207 return -EFAULT;
208
209 err = drm_ioctl(file, DRM_IOCTL_GET_MAP, (unsigned long)map);
210 if (err)
211 return err;
212
213 if (__get_user(m32.offset, &map->offset)
214 || __get_user(m32.size, &map->size)
215 || __get_user(m32.type, &map->type)
216 || __get_user(m32.flags, &map->flags)
217 || __get_user(handle, &map->handle)
218 || __get_user(m32.mtrr, &map->mtrr))
219 return -EFAULT;
220
221 m32.handle = (unsigned long)handle;
222 if (copy_to_user(argp, &m32, sizeof(m32)))
223 return -EFAULT;
224 return 0;
225
226 }
227
compat_drm_addmap(struct file * file,unsigned int cmd,unsigned long arg)228 static int compat_drm_addmap(struct file *file, unsigned int cmd,
229 unsigned long arg)
230 {
231 drm_map32_t __user *argp = (void __user *)arg;
232 drm_map32_t m32;
233 struct drm_map __user *map;
234 int err;
235 void *handle;
236
237 if (copy_from_user(&m32, argp, sizeof(m32)))
238 return -EFAULT;
239
240 map = compat_alloc_user_space(sizeof(*map));
241 if (!map)
242 return -EFAULT;
243 if (__put_user(m32.offset, &map->offset)
244 || __put_user(m32.size, &map->size)
245 || __put_user(m32.type, &map->type)
246 || __put_user(m32.flags, &map->flags))
247 return -EFAULT;
248
249 err = drm_ioctl(file, DRM_IOCTL_ADD_MAP, (unsigned long)map);
250 if (err)
251 return err;
252
253 if (__get_user(m32.offset, &map->offset)
254 || __get_user(m32.mtrr, &map->mtrr)
255 || __get_user(handle, &map->handle))
256 return -EFAULT;
257
258 m32.handle = (unsigned long)handle;
259 if (m32.handle != (unsigned long)handle)
260 printk_ratelimited(KERN_ERR "compat_drm_addmap truncated handle"
261 " %p for type %d offset %x\n",
262 handle, m32.type, m32.offset);
263
264 if (copy_to_user(argp, &m32, sizeof(m32)))
265 return -EFAULT;
266
267 return 0;
268 }
269
compat_drm_rmmap(struct file * file,unsigned int cmd,unsigned long arg)270 static int compat_drm_rmmap(struct file *file, unsigned int cmd,
271 unsigned long arg)
272 {
273 drm_map32_t __user *argp = (void __user *)arg;
274 struct drm_map __user *map;
275 u32 handle;
276
277 if (get_user(handle, &argp->handle))
278 return -EFAULT;
279
280 map = compat_alloc_user_space(sizeof(*map));
281 if (!map)
282 return -EFAULT;
283 if (__put_user((void *)(unsigned long)handle, &map->handle))
284 return -EFAULT;
285
286 return drm_ioctl(file, DRM_IOCTL_RM_MAP, (unsigned long)map);
287 }
288
289 typedef struct drm_client32 {
290 int idx; /**< Which client desired? */
291 int auth; /**< Is client authenticated? */
292 u32 pid; /**< Process ID */
293 u32 uid; /**< User ID */
294 u32 magic; /**< Magic */
295 u32 iocs; /**< Ioctl count */
296 } drm_client32_t;
297
compat_drm_getclient(struct file * file,unsigned int cmd,unsigned long arg)298 static int compat_drm_getclient(struct file *file, unsigned int cmd,
299 unsigned long arg)
300 {
301 drm_client32_t c32;
302 drm_client32_t __user *argp = (void __user *)arg;
303 struct drm_client __user *client;
304 int idx, err;
305
306 if (get_user(idx, &argp->idx))
307 return -EFAULT;
308
309 client = compat_alloc_user_space(sizeof(*client));
310 if (!client)
311 return -EFAULT;
312 if (__put_user(idx, &client->idx))
313 return -EFAULT;
314
315 err = drm_ioctl(file, DRM_IOCTL_GET_CLIENT, (unsigned long)client);
316 if (err)
317 return err;
318
319 if (__get_user(c32.idx, &client->idx)
320 || __get_user(c32.auth, &client->auth)
321 || __get_user(c32.pid, &client->pid)
322 || __get_user(c32.uid, &client->uid)
323 || __get_user(c32.magic, &client->magic)
324 || __get_user(c32.iocs, &client->iocs))
325 return -EFAULT;
326
327 if (copy_to_user(argp, &c32, sizeof(c32)))
328 return -EFAULT;
329 return 0;
330 }
331
332 typedef struct drm_stats32 {
333 u32 count;
334 struct {
335 u32 value;
336 enum drm_stat_type type;
337 } data[15];
338 } drm_stats32_t;
339
compat_drm_getstats(struct file * file,unsigned int cmd,unsigned long arg)340 static int compat_drm_getstats(struct file *file, unsigned int cmd,
341 unsigned long arg)
342 {
343 drm_stats32_t s32;
344 drm_stats32_t __user *argp = (void __user *)arg;
345 struct drm_stats __user *stats;
346 int i, err;
347
348 memset(&s32, 0, sizeof(drm_stats32_t));
349 stats = compat_alloc_user_space(sizeof(*stats));
350 if (!stats)
351 return -EFAULT;
352
353 err = drm_ioctl(file, DRM_IOCTL_GET_STATS, (unsigned long)stats);
354 if (err)
355 return err;
356
357 if (__get_user(s32.count, &stats->count))
358 return -EFAULT;
359 for (i = 0; i < 15; ++i)
360 if (__get_user(s32.data[i].value, &stats->data[i].value)
361 || __get_user(s32.data[i].type, &stats->data[i].type))
362 return -EFAULT;
363
364 if (copy_to_user(argp, &s32, sizeof(s32)))
365 return -EFAULT;
366 return 0;
367 }
368
369 typedef struct drm_buf_desc32 {
370 int count; /**< Number of buffers of this size */
371 int size; /**< Size in bytes */
372 int low_mark; /**< Low water mark */
373 int high_mark; /**< High water mark */
374 int flags;
375 u32 agp_start; /**< Start address in the AGP aperture */
376 } drm_buf_desc32_t;
377
compat_drm_addbufs(struct file * file,unsigned int cmd,unsigned long arg)378 static int compat_drm_addbufs(struct file *file, unsigned int cmd,
379 unsigned long arg)
380 {
381 drm_buf_desc32_t __user *argp = (void __user *)arg;
382 struct drm_buf_desc __user *buf;
383 int err;
384 unsigned long agp_start;
385
386 buf = compat_alloc_user_space(sizeof(*buf));
387 if (!buf || !access_ok(VERIFY_WRITE, argp, sizeof(*argp)))
388 return -EFAULT;
389
390 if (__copy_in_user(buf, argp, offsetof(drm_buf_desc32_t, agp_start))
391 || __get_user(agp_start, &argp->agp_start)
392 || __put_user(agp_start, &buf->agp_start))
393 return -EFAULT;
394
395 err = drm_ioctl(file, DRM_IOCTL_ADD_BUFS, (unsigned long)buf);
396 if (err)
397 return err;
398
399 if (__copy_in_user(argp, buf, offsetof(drm_buf_desc32_t, agp_start))
400 || __get_user(agp_start, &buf->agp_start)
401 || __put_user(agp_start, &argp->agp_start))
402 return -EFAULT;
403
404 return 0;
405 }
406
compat_drm_markbufs(struct file * file,unsigned int cmd,unsigned long arg)407 static int compat_drm_markbufs(struct file *file, unsigned int cmd,
408 unsigned long arg)
409 {
410 drm_buf_desc32_t b32;
411 drm_buf_desc32_t __user *argp = (void __user *)arg;
412 struct drm_buf_desc __user *buf;
413
414 if (copy_from_user(&b32, argp, sizeof(b32)))
415 return -EFAULT;
416
417 buf = compat_alloc_user_space(sizeof(*buf));
418 if (!buf)
419 return -EFAULT;
420
421 if (__put_user(b32.size, &buf->size)
422 || __put_user(b32.low_mark, &buf->low_mark)
423 || __put_user(b32.high_mark, &buf->high_mark))
424 return -EFAULT;
425
426 return drm_ioctl(file, DRM_IOCTL_MARK_BUFS, (unsigned long)buf);
427 }
428
429 typedef struct drm_buf_info32 {
430 int count; /**< Entries in list */
431 u32 list;
432 } drm_buf_info32_t;
433
compat_drm_infobufs(struct file * file,unsigned int cmd,unsigned long arg)434 static int compat_drm_infobufs(struct file *file, unsigned int cmd,
435 unsigned long arg)
436 {
437 drm_buf_info32_t req32;
438 drm_buf_info32_t __user *argp = (void __user *)arg;
439 drm_buf_desc32_t __user *to;
440 struct drm_buf_info __user *request;
441 struct drm_buf_desc __user *list;
442 size_t nbytes;
443 int i, err;
444 int count, actual;
445
446 if (copy_from_user(&req32, argp, sizeof(req32)))
447 return -EFAULT;
448
449 count = req32.count;
450 to = (drm_buf_desc32_t __user *) (unsigned long)req32.list;
451 if (count < 0)
452 count = 0;
453 if (count > 0
454 && !access_ok(VERIFY_WRITE, to, count * sizeof(drm_buf_desc32_t)))
455 return -EFAULT;
456
457 nbytes = sizeof(*request) + count * sizeof(struct drm_buf_desc);
458 request = compat_alloc_user_space(nbytes);
459 if (!request)
460 return -EFAULT;
461 list = (struct drm_buf_desc *) (request + 1);
462
463 if (__put_user(count, &request->count)
464 || __put_user(list, &request->list))
465 return -EFAULT;
466
467 err = drm_ioctl(file, DRM_IOCTL_INFO_BUFS, (unsigned long)request);
468 if (err)
469 return err;
470
471 if (__get_user(actual, &request->count))
472 return -EFAULT;
473 if (count >= actual)
474 for (i = 0; i < actual; ++i)
475 if (__copy_in_user(&to[i], &list[i],
476 offsetof(struct drm_buf_desc, flags)))
477 return -EFAULT;
478
479 if (__put_user(actual, &argp->count))
480 return -EFAULT;
481
482 return 0;
483 }
484
485 typedef struct drm_buf_pub32 {
486 int idx; /**< Index into the master buffer list */
487 int total; /**< Buffer size */
488 int used; /**< Amount of buffer in use (for DMA) */
489 u32 address; /**< Address of buffer */
490 } drm_buf_pub32_t;
491
492 typedef struct drm_buf_map32 {
493 int count; /**< Length of the buffer list */
494 u32 virtual; /**< Mmap'd area in user-virtual */
495 u32 list; /**< Buffer information */
496 } drm_buf_map32_t;
497
compat_drm_mapbufs(struct file * file,unsigned int cmd,unsigned long arg)498 static int compat_drm_mapbufs(struct file *file, unsigned int cmd,
499 unsigned long arg)
500 {
501 drm_buf_map32_t __user *argp = (void __user *)arg;
502 drm_buf_map32_t req32;
503 drm_buf_pub32_t __user *list32;
504 struct drm_buf_map __user *request;
505 struct drm_buf_pub __user *list;
506 int i, err;
507 int count, actual;
508 size_t nbytes;
509 void __user *addr;
510
511 if (copy_from_user(&req32, argp, sizeof(req32)))
512 return -EFAULT;
513 count = req32.count;
514 list32 = (void __user *)(unsigned long)req32.list;
515
516 if (count < 0)
517 return -EINVAL;
518 nbytes = sizeof(*request) + count * sizeof(struct drm_buf_pub);
519 request = compat_alloc_user_space(nbytes);
520 if (!request)
521 return -EFAULT;
522 list = (struct drm_buf_pub *) (request + 1);
523
524 if (__put_user(count, &request->count)
525 || __put_user(list, &request->list))
526 return -EFAULT;
527
528 err = drm_ioctl(file, DRM_IOCTL_MAP_BUFS, (unsigned long)request);
529 if (err)
530 return err;
531
532 if (__get_user(actual, &request->count))
533 return -EFAULT;
534 if (count >= actual)
535 for (i = 0; i < actual; ++i)
536 if (__copy_in_user(&list32[i], &list[i],
537 offsetof(struct drm_buf_pub, address))
538 || __get_user(addr, &list[i].address)
539 || __put_user((unsigned long)addr,
540 &list32[i].address))
541 return -EFAULT;
542
543 if (__put_user(actual, &argp->count)
544 || __get_user(addr, &request->virtual)
545 || __put_user((unsigned long)addr, &argp->virtual))
546 return -EFAULT;
547
548 return 0;
549 }
550
551 typedef struct drm_buf_free32 {
552 int count;
553 u32 list;
554 } drm_buf_free32_t;
555
compat_drm_freebufs(struct file * file,unsigned int cmd,unsigned long arg)556 static int compat_drm_freebufs(struct file *file, unsigned int cmd,
557 unsigned long arg)
558 {
559 drm_buf_free32_t req32;
560 struct drm_buf_free __user *request;
561 drm_buf_free32_t __user *argp = (void __user *)arg;
562
563 if (copy_from_user(&req32, argp, sizeof(req32)))
564 return -EFAULT;
565
566 request = compat_alloc_user_space(sizeof(*request));
567 if (!request)
568 return -EFAULT;
569 if (__put_user(req32.count, &request->count)
570 || __put_user((int __user *)(unsigned long)req32.list,
571 &request->list))
572 return -EFAULT;
573
574 return drm_ioctl(file, DRM_IOCTL_FREE_BUFS, (unsigned long)request);
575 }
576
577 typedef struct drm_ctx_priv_map32 {
578 unsigned int ctx_id; /**< Context requesting private mapping */
579 u32 handle; /**< Handle of map */
580 } drm_ctx_priv_map32_t;
581
compat_drm_setsareactx(struct file * file,unsigned int cmd,unsigned long arg)582 static int compat_drm_setsareactx(struct file *file, unsigned int cmd,
583 unsigned long arg)
584 {
585 drm_ctx_priv_map32_t req32;
586 struct drm_ctx_priv_map __user *request;
587 drm_ctx_priv_map32_t __user *argp = (void __user *)arg;
588
589 if (copy_from_user(&req32, argp, sizeof(req32)))
590 return -EFAULT;
591
592 request = compat_alloc_user_space(sizeof(*request));
593 if (!request)
594 return -EFAULT;
595 if (__put_user(req32.ctx_id, &request->ctx_id)
596 || __put_user((void *)(unsigned long)req32.handle,
597 &request->handle))
598 return -EFAULT;
599
600 return drm_ioctl(file, DRM_IOCTL_SET_SAREA_CTX, (unsigned long)request);
601 }
602
compat_drm_getsareactx(struct file * file,unsigned int cmd,unsigned long arg)603 static int compat_drm_getsareactx(struct file *file, unsigned int cmd,
604 unsigned long arg)
605 {
606 struct drm_ctx_priv_map __user *request;
607 drm_ctx_priv_map32_t __user *argp = (void __user *)arg;
608 int err;
609 unsigned int ctx_id;
610 void *handle;
611
612 if (!access_ok(VERIFY_WRITE, argp, sizeof(*argp))
613 || __get_user(ctx_id, &argp->ctx_id))
614 return -EFAULT;
615
616 request = compat_alloc_user_space(sizeof(*request));
617 if (!request)
618 return -EFAULT;
619 if (__put_user(ctx_id, &request->ctx_id))
620 return -EFAULT;
621
622 err = drm_ioctl(file, DRM_IOCTL_GET_SAREA_CTX, (unsigned long)request);
623 if (err)
624 return err;
625
626 if (__get_user(handle, &request->handle)
627 || __put_user((unsigned long)handle, &argp->handle))
628 return -EFAULT;
629
630 return 0;
631 }
632
633 typedef struct drm_ctx_res32 {
634 int count;
635 u32 contexts;
636 } drm_ctx_res32_t;
637
compat_drm_resctx(struct file * file,unsigned int cmd,unsigned long arg)638 static int compat_drm_resctx(struct file *file, unsigned int cmd,
639 unsigned long arg)
640 {
641 drm_ctx_res32_t __user *argp = (void __user *)arg;
642 drm_ctx_res32_t res32;
643 struct drm_ctx_res __user *res;
644 int err;
645
646 if (copy_from_user(&res32, argp, sizeof(res32)))
647 return -EFAULT;
648
649 res = compat_alloc_user_space(sizeof(*res));
650 if (!res)
651 return -EFAULT;
652 if (__put_user(res32.count, &res->count)
653 || __put_user((struct drm_ctx __user *) (unsigned long)res32.contexts,
654 &res->contexts))
655 return -EFAULT;
656
657 err = drm_ioctl(file, DRM_IOCTL_RES_CTX, (unsigned long)res);
658 if (err)
659 return err;
660
661 if (__get_user(res32.count, &res->count)
662 || __put_user(res32.count, &argp->count))
663 return -EFAULT;
664
665 return 0;
666 }
667
668 typedef struct drm_dma32 {
669 int context; /**< Context handle */
670 int send_count; /**< Number of buffers to send */
671 u32 send_indices; /**< List of handles to buffers */
672 u32 send_sizes; /**< Lengths of data to send */
673 enum drm_dma_flags flags; /**< Flags */
674 int request_count; /**< Number of buffers requested */
675 int request_size; /**< Desired size for buffers */
676 u32 request_indices; /**< Buffer information */
677 u32 request_sizes;
678 int granted_count; /**< Number of buffers granted */
679 } drm_dma32_t;
680
compat_drm_dma(struct file * file,unsigned int cmd,unsigned long arg)681 static int compat_drm_dma(struct file *file, unsigned int cmd,
682 unsigned long arg)
683 {
684 drm_dma32_t d32;
685 drm_dma32_t __user *argp = (void __user *)arg;
686 struct drm_dma __user *d;
687 int err;
688
689 if (copy_from_user(&d32, argp, sizeof(d32)))
690 return -EFAULT;
691
692 d = compat_alloc_user_space(sizeof(*d));
693 if (!d)
694 return -EFAULT;
695
696 if (__put_user(d32.context, &d->context)
697 || __put_user(d32.send_count, &d->send_count)
698 || __put_user((int __user *)(unsigned long)d32.send_indices,
699 &d->send_indices)
700 || __put_user((int __user *)(unsigned long)d32.send_sizes,
701 &d->send_sizes)
702 || __put_user(d32.flags, &d->flags)
703 || __put_user(d32.request_count, &d->request_count)
704 || __put_user((int __user *)(unsigned long)d32.request_indices,
705 &d->request_indices)
706 || __put_user((int __user *)(unsigned long)d32.request_sizes,
707 &d->request_sizes))
708 return -EFAULT;
709
710 err = drm_ioctl(file, DRM_IOCTL_DMA, (unsigned long)d);
711 if (err)
712 return err;
713
714 if (__get_user(d32.request_size, &d->request_size)
715 || __get_user(d32.granted_count, &d->granted_count)
716 || __put_user(d32.request_size, &argp->request_size)
717 || __put_user(d32.granted_count, &argp->granted_count))
718 return -EFAULT;
719
720 return 0;
721 }
722
723 #if IS_ENABLED(CONFIG_AGP)
724 typedef struct drm_agp_mode32 {
725 u32 mode; /**< AGP mode */
726 } drm_agp_mode32_t;
727
compat_drm_agp_enable(struct file * file,unsigned int cmd,unsigned long arg)728 static int compat_drm_agp_enable(struct file *file, unsigned int cmd,
729 unsigned long arg)
730 {
731 drm_agp_mode32_t __user *argp = (void __user *)arg;
732 drm_agp_mode32_t m32;
733 struct drm_agp_mode __user *mode;
734
735 if (get_user(m32.mode, &argp->mode))
736 return -EFAULT;
737
738 mode = compat_alloc_user_space(sizeof(*mode));
739 if (put_user(m32.mode, &mode->mode))
740 return -EFAULT;
741
742 return drm_ioctl(file, DRM_IOCTL_AGP_ENABLE, (unsigned long)mode);
743 }
744
745 typedef struct drm_agp_info32 {
746 int agp_version_major;
747 int agp_version_minor;
748 u32 mode;
749 u32 aperture_base; /* physical address */
750 u32 aperture_size; /* bytes */
751 u32 memory_allowed; /* bytes */
752 u32 memory_used;
753
754 /* PCI information */
755 unsigned short id_vendor;
756 unsigned short id_device;
757 } drm_agp_info32_t;
758
compat_drm_agp_info(struct file * file,unsigned int cmd,unsigned long arg)759 static int compat_drm_agp_info(struct file *file, unsigned int cmd,
760 unsigned long arg)
761 {
762 drm_agp_info32_t __user *argp = (void __user *)arg;
763 drm_agp_info32_t i32;
764 struct drm_agp_info __user *info;
765 int err;
766
767 info = compat_alloc_user_space(sizeof(*info));
768 if (!info)
769 return -EFAULT;
770
771 err = drm_ioctl(file, DRM_IOCTL_AGP_INFO, (unsigned long)info);
772 if (err)
773 return err;
774
775 if (__get_user(i32.agp_version_major, &info->agp_version_major)
776 || __get_user(i32.agp_version_minor, &info->agp_version_minor)
777 || __get_user(i32.mode, &info->mode)
778 || __get_user(i32.aperture_base, &info->aperture_base)
779 || __get_user(i32.aperture_size, &info->aperture_size)
780 || __get_user(i32.memory_allowed, &info->memory_allowed)
781 || __get_user(i32.memory_used, &info->memory_used)
782 || __get_user(i32.id_vendor, &info->id_vendor)
783 || __get_user(i32.id_device, &info->id_device))
784 return -EFAULT;
785
786 if (copy_to_user(argp, &i32, sizeof(i32)))
787 return -EFAULT;
788
789 return 0;
790 }
791
792 typedef struct drm_agp_buffer32 {
793 u32 size; /**< In bytes -- will round to page boundary */
794 u32 handle; /**< Used for binding / unbinding */
795 u32 type; /**< Type of memory to allocate */
796 u32 physical; /**< Physical used by i810 */
797 } drm_agp_buffer32_t;
798
compat_drm_agp_alloc(struct file * file,unsigned int cmd,unsigned long arg)799 static int compat_drm_agp_alloc(struct file *file, unsigned int cmd,
800 unsigned long arg)
801 {
802 drm_agp_buffer32_t __user *argp = (void __user *)arg;
803 drm_agp_buffer32_t req32;
804 struct drm_agp_buffer __user *request;
805 int err;
806
807 if (copy_from_user(&req32, argp, sizeof(req32)))
808 return -EFAULT;
809
810 request = compat_alloc_user_space(sizeof(*request));
811 if (!request
812 || __put_user(req32.size, &request->size)
813 || __put_user(req32.type, &request->type))
814 return -EFAULT;
815
816 err = drm_ioctl(file, DRM_IOCTL_AGP_ALLOC, (unsigned long)request);
817 if (err)
818 return err;
819
820 if (__get_user(req32.handle, &request->handle)
821 || __get_user(req32.physical, &request->physical)
822 || copy_to_user(argp, &req32, sizeof(req32))) {
823 drm_ioctl(file, DRM_IOCTL_AGP_FREE, (unsigned long)request);
824 return -EFAULT;
825 }
826
827 return 0;
828 }
829
compat_drm_agp_free(struct file * file,unsigned int cmd,unsigned long arg)830 static int compat_drm_agp_free(struct file *file, unsigned int cmd,
831 unsigned long arg)
832 {
833 drm_agp_buffer32_t __user *argp = (void __user *)arg;
834 struct drm_agp_buffer __user *request;
835 u32 handle;
836
837 request = compat_alloc_user_space(sizeof(*request));
838 if (!request
839 || get_user(handle, &argp->handle)
840 || __put_user(handle, &request->handle))
841 return -EFAULT;
842
843 return drm_ioctl(file, DRM_IOCTL_AGP_FREE, (unsigned long)request);
844 }
845
846 typedef struct drm_agp_binding32 {
847 u32 handle; /**< From drm_agp_buffer */
848 u32 offset; /**< In bytes -- will round to page boundary */
849 } drm_agp_binding32_t;
850
compat_drm_agp_bind(struct file * file,unsigned int cmd,unsigned long arg)851 static int compat_drm_agp_bind(struct file *file, unsigned int cmd,
852 unsigned long arg)
853 {
854 drm_agp_binding32_t __user *argp = (void __user *)arg;
855 drm_agp_binding32_t req32;
856 struct drm_agp_binding __user *request;
857
858 if (copy_from_user(&req32, argp, sizeof(req32)))
859 return -EFAULT;
860
861 request = compat_alloc_user_space(sizeof(*request));
862 if (!request
863 || __put_user(req32.handle, &request->handle)
864 || __put_user(req32.offset, &request->offset))
865 return -EFAULT;
866
867 return drm_ioctl(file, DRM_IOCTL_AGP_BIND, (unsigned long)request);
868 }
869
compat_drm_agp_unbind(struct file * file,unsigned int cmd,unsigned long arg)870 static int compat_drm_agp_unbind(struct file *file, unsigned int cmd,
871 unsigned long arg)
872 {
873 drm_agp_binding32_t __user *argp = (void __user *)arg;
874 struct drm_agp_binding __user *request;
875 u32 handle;
876
877 request = compat_alloc_user_space(sizeof(*request));
878 if (!request
879 || get_user(handle, &argp->handle)
880 || __put_user(handle, &request->handle))
881 return -EFAULT;
882
883 return drm_ioctl(file, DRM_IOCTL_AGP_UNBIND, (unsigned long)request);
884 }
885 #endif /* CONFIG_AGP */
886
887 typedef struct drm_scatter_gather32 {
888 u32 size; /**< In bytes -- will round to page boundary */
889 u32 handle; /**< Used for mapping / unmapping */
890 } drm_scatter_gather32_t;
891
compat_drm_sg_alloc(struct file * file,unsigned int cmd,unsigned long arg)892 static int compat_drm_sg_alloc(struct file *file, unsigned int cmd,
893 unsigned long arg)
894 {
895 drm_scatter_gather32_t __user *argp = (void __user *)arg;
896 struct drm_scatter_gather __user *request;
897 int err;
898 unsigned long x;
899
900 request = compat_alloc_user_space(sizeof(*request));
901 if (!request || !access_ok(VERIFY_WRITE, argp, sizeof(*argp))
902 || __get_user(x, &argp->size)
903 || __put_user(x, &request->size))
904 return -EFAULT;
905
906 err = drm_ioctl(file, DRM_IOCTL_SG_ALLOC, (unsigned long)request);
907 if (err)
908 return err;
909
910 /* XXX not sure about the handle conversion here... */
911 if (__get_user(x, &request->handle)
912 || __put_user(x >> PAGE_SHIFT, &argp->handle))
913 return -EFAULT;
914
915 return 0;
916 }
917
compat_drm_sg_free(struct file * file,unsigned int cmd,unsigned long arg)918 static int compat_drm_sg_free(struct file *file, unsigned int cmd,
919 unsigned long arg)
920 {
921 drm_scatter_gather32_t __user *argp = (void __user *)arg;
922 struct drm_scatter_gather __user *request;
923 unsigned long x;
924
925 request = compat_alloc_user_space(sizeof(*request));
926 if (!request || !access_ok(VERIFY_WRITE, argp, sizeof(*argp))
927 || __get_user(x, &argp->handle)
928 || __put_user(x << PAGE_SHIFT, &request->handle))
929 return -EFAULT;
930
931 return drm_ioctl(file, DRM_IOCTL_SG_FREE, (unsigned long)request);
932 }
933
934 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
935 typedef struct drm_update_draw32 {
936 drm_drawable_t handle;
937 unsigned int type;
938 unsigned int num;
939 /* 64-bit version has a 32-bit pad here */
940 u64 data; /**< Pointer */
941 } __attribute__((packed)) drm_update_draw32_t;
942
compat_drm_update_draw(struct file * file,unsigned int cmd,unsigned long arg)943 static int compat_drm_update_draw(struct file *file, unsigned int cmd,
944 unsigned long arg)
945 {
946 drm_update_draw32_t update32;
947 struct drm_update_draw __user *request;
948 int err;
949
950 if (copy_from_user(&update32, (void __user *)arg, sizeof(update32)))
951 return -EFAULT;
952
953 request = compat_alloc_user_space(sizeof(*request));
954 if (!request ||
955 __put_user(update32.handle, &request->handle) ||
956 __put_user(update32.type, &request->type) ||
957 __put_user(update32.num, &request->num) ||
958 __put_user(update32.data, &request->data))
959 return -EFAULT;
960
961 err = drm_ioctl(file, DRM_IOCTL_UPDATE_DRAW, (unsigned long)request);
962 return err;
963 }
964 #endif
965
966 struct drm_wait_vblank_request32 {
967 enum drm_vblank_seq_type type;
968 unsigned int sequence;
969 u32 signal;
970 };
971
972 struct drm_wait_vblank_reply32 {
973 enum drm_vblank_seq_type type;
974 unsigned int sequence;
975 s32 tval_sec;
976 s32 tval_usec;
977 };
978
979 typedef union drm_wait_vblank32 {
980 struct drm_wait_vblank_request32 request;
981 struct drm_wait_vblank_reply32 reply;
982 } drm_wait_vblank32_t;
983
compat_drm_wait_vblank(struct file * file,unsigned int cmd,unsigned long arg)984 static int compat_drm_wait_vblank(struct file *file, unsigned int cmd,
985 unsigned long arg)
986 {
987 drm_wait_vblank32_t __user *argp = (void __user *)arg;
988 drm_wait_vblank32_t req32;
989 union drm_wait_vblank __user *request;
990 int err;
991
992 if (copy_from_user(&req32, argp, sizeof(req32)))
993 return -EFAULT;
994
995 request = compat_alloc_user_space(sizeof(*request));
996 if (!request
997 || __put_user(req32.request.type, &request->request.type)
998 || __put_user(req32.request.sequence, &request->request.sequence)
999 || __put_user(req32.request.signal, &request->request.signal))
1000 return -EFAULT;
1001
1002 err = drm_ioctl(file, DRM_IOCTL_WAIT_VBLANK, (unsigned long)request);
1003 if (err)
1004 return err;
1005
1006 if (__get_user(req32.reply.type, &request->reply.type)
1007 || __get_user(req32.reply.sequence, &request->reply.sequence)
1008 || __get_user(req32.reply.tval_sec, &request->reply.tval_sec)
1009 || __get_user(req32.reply.tval_usec, &request->reply.tval_usec))
1010 return -EFAULT;
1011
1012 if (copy_to_user(argp, &req32, sizeof(req32)))
1013 return -EFAULT;
1014
1015 return 0;
1016 }
1017
1018 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
1019 typedef struct drm_mode_fb_cmd232 {
1020 u32 fb_id;
1021 u32 width;
1022 u32 height;
1023 u32 pixel_format;
1024 u32 flags;
1025 u32 handles[4];
1026 u32 pitches[4];
1027 u32 offsets[4];
1028 u64 modifier[4];
1029 } __attribute__((packed)) drm_mode_fb_cmd232_t;
1030
compat_drm_mode_addfb2(struct file * file,unsigned int cmd,unsigned long arg)1031 static int compat_drm_mode_addfb2(struct file *file, unsigned int cmd,
1032 unsigned long arg)
1033 {
1034 struct drm_mode_fb_cmd232 __user *argp = (void __user *)arg;
1035 struct drm_mode_fb_cmd232 req32;
1036 struct drm_mode_fb_cmd2 __user *req64;
1037 int i;
1038 int err;
1039
1040 if (copy_from_user(&req32, argp, sizeof(req32)))
1041 return -EFAULT;
1042
1043 req64 = compat_alloc_user_space(sizeof(*req64));
1044
1045 if (!access_ok(VERIFY_WRITE, req64, sizeof(*req64))
1046 || __put_user(req32.width, &req64->width)
1047 || __put_user(req32.height, &req64->height)
1048 || __put_user(req32.pixel_format, &req64->pixel_format)
1049 || __put_user(req32.flags, &req64->flags))
1050 return -EFAULT;
1051
1052 for (i = 0; i < 4; i++) {
1053 if (__put_user(req32.handles[i], &req64->handles[i]))
1054 return -EFAULT;
1055 if (__put_user(req32.pitches[i], &req64->pitches[i]))
1056 return -EFAULT;
1057 if (__put_user(req32.offsets[i], &req64->offsets[i]))
1058 return -EFAULT;
1059 if (__put_user(req32.modifier[i], &req64->modifier[i]))
1060 return -EFAULT;
1061 }
1062
1063 err = drm_ioctl(file, DRM_IOCTL_MODE_ADDFB2, (unsigned long)req64);
1064 if (err)
1065 return err;
1066
1067 if (__get_user(req32.fb_id, &req64->fb_id))
1068 return -EFAULT;
1069
1070 if (copy_to_user(argp, &req32, sizeof(req32)))
1071 return -EFAULT;
1072
1073 return 0;
1074 }
1075 #endif
1076
1077 static drm_ioctl_compat_t *drm_compat_ioctls[] = {
1078 [DRM_IOCTL_NR(DRM_IOCTL_VERSION32)] = compat_drm_version,
1079 [DRM_IOCTL_NR(DRM_IOCTL_GET_UNIQUE32)] = compat_drm_getunique,
1080 [DRM_IOCTL_NR(DRM_IOCTL_GET_MAP32)] = compat_drm_getmap,
1081 [DRM_IOCTL_NR(DRM_IOCTL_GET_CLIENT32)] = compat_drm_getclient,
1082 [DRM_IOCTL_NR(DRM_IOCTL_GET_STATS32)] = compat_drm_getstats,
1083 [DRM_IOCTL_NR(DRM_IOCTL_SET_UNIQUE32)] = compat_drm_setunique,
1084 [DRM_IOCTL_NR(DRM_IOCTL_ADD_MAP32)] = compat_drm_addmap,
1085 [DRM_IOCTL_NR(DRM_IOCTL_ADD_BUFS32)] = compat_drm_addbufs,
1086 [DRM_IOCTL_NR(DRM_IOCTL_MARK_BUFS32)] = compat_drm_markbufs,
1087 [DRM_IOCTL_NR(DRM_IOCTL_INFO_BUFS32)] = compat_drm_infobufs,
1088 [DRM_IOCTL_NR(DRM_IOCTL_MAP_BUFS32)] = compat_drm_mapbufs,
1089 [DRM_IOCTL_NR(DRM_IOCTL_FREE_BUFS32)] = compat_drm_freebufs,
1090 [DRM_IOCTL_NR(DRM_IOCTL_RM_MAP32)] = compat_drm_rmmap,
1091 [DRM_IOCTL_NR(DRM_IOCTL_SET_SAREA_CTX32)] = compat_drm_setsareactx,
1092 [DRM_IOCTL_NR(DRM_IOCTL_GET_SAREA_CTX32)] = compat_drm_getsareactx,
1093 [DRM_IOCTL_NR(DRM_IOCTL_RES_CTX32)] = compat_drm_resctx,
1094 [DRM_IOCTL_NR(DRM_IOCTL_DMA32)] = compat_drm_dma,
1095 #if IS_ENABLED(CONFIG_AGP)
1096 [DRM_IOCTL_NR(DRM_IOCTL_AGP_ENABLE32)] = compat_drm_agp_enable,
1097 [DRM_IOCTL_NR(DRM_IOCTL_AGP_INFO32)] = compat_drm_agp_info,
1098 [DRM_IOCTL_NR(DRM_IOCTL_AGP_ALLOC32)] = compat_drm_agp_alloc,
1099 [DRM_IOCTL_NR(DRM_IOCTL_AGP_FREE32)] = compat_drm_agp_free,
1100 [DRM_IOCTL_NR(DRM_IOCTL_AGP_BIND32)] = compat_drm_agp_bind,
1101 [DRM_IOCTL_NR(DRM_IOCTL_AGP_UNBIND32)] = compat_drm_agp_unbind,
1102 #endif
1103 [DRM_IOCTL_NR(DRM_IOCTL_SG_ALLOC32)] = compat_drm_sg_alloc,
1104 [DRM_IOCTL_NR(DRM_IOCTL_SG_FREE32)] = compat_drm_sg_free,
1105 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
1106 [DRM_IOCTL_NR(DRM_IOCTL_UPDATE_DRAW32)] = compat_drm_update_draw,
1107 #endif
1108 [DRM_IOCTL_NR(DRM_IOCTL_WAIT_VBLANK32)] = compat_drm_wait_vblank,
1109 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
1110 [DRM_IOCTL_NR(DRM_IOCTL_MODE_ADDFB232)] = compat_drm_mode_addfb2,
1111 #endif
1112 };
1113
1114 /**
1115 * Called whenever a 32-bit process running under a 64-bit kernel
1116 * performs an ioctl on /dev/drm.
1117 *
1118 * \param file_priv DRM file private.
1119 * \param cmd command.
1120 * \param arg user argument.
1121 * \return zero on success or negative number on failure.
1122 */
drm_compat_ioctl(struct file * filp,unsigned int cmd,unsigned long arg)1123 long drm_compat_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
1124 {
1125 unsigned int nr = DRM_IOCTL_NR(cmd);
1126 drm_ioctl_compat_t *fn;
1127 int ret;
1128
1129 /* Assume that ioctls without an explicit compat routine will just
1130 * work. This may not always be a good assumption, but it's better
1131 * than always failing.
1132 */
1133 if (nr >= ARRAY_SIZE(drm_compat_ioctls))
1134 return drm_ioctl(filp, cmd, arg);
1135
1136 fn = drm_compat_ioctls[nr];
1137
1138 if (fn != NULL)
1139 ret = (*fn) (filp, cmd, arg);
1140 else
1141 ret = drm_ioctl(filp, cmd, arg);
1142
1143 return ret;
1144 }
1145
1146 EXPORT_SYMBOL(drm_compat_ioctl);
1147