1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * Copyright (c) 2016, Linaro Ltd.
4 * Copyright (c) 2012, Michal Simek <monstr@monstr.eu>
5 * Copyright (c) 2012, PetaLogix
6 * Copyright (c) 2011, Texas Instruments, Inc.
7 * Copyright (c) 2011, Google, Inc.
8 *
9 * Based on rpmsg performance statistics driver by Michal Simek, which in turn
10 * was based on TI & Google OMX rpmsg driver.
11 */
12 #include <linux/cdev.h>
13 #include <linux/device.h>
14 #include <linux/fs.h>
15 #include <linux/idr.h>
16 #include <linux/kernel.h>
17 #include <linux/module.h>
18 #include <linux/poll.h>
19 #include <linux/rpmsg.h>
20 #include <linux/skbuff.h>
21 #include <linux/slab.h>
22 #include <linux/uaccess.h>
23 #include <uapi/linux/rpmsg.h>
24
25 #include "rpmsg_internal.h"
26
27 #define RPMSG_DEV_MAX (MINORMASK + 1)
28
29 static dev_t rpmsg_major;
30 static struct class *rpmsg_class;
31
32 static DEFINE_IDA(rpmsg_ctrl_ida);
33 static DEFINE_IDA(rpmsg_ept_ida);
34 static DEFINE_IDA(rpmsg_minor_ida);
35
36 #define dev_to_eptdev(dev) container_of(dev, struct rpmsg_eptdev, dev)
37 #define cdev_to_eptdev(i_cdev) container_of(i_cdev, struct rpmsg_eptdev, cdev)
38
39 #define dev_to_ctrldev(dev) container_of(dev, struct rpmsg_ctrldev, dev)
40 #define cdev_to_ctrldev(i_cdev) container_of(i_cdev, struct rpmsg_ctrldev, cdev)
41
42 /**
43 * struct rpmsg_ctrldev - control device for instantiating endpoint devices
44 * @rpdev: underlaying rpmsg device
45 * @cdev: cdev for the ctrl device
46 * @dev: device for the ctrl device
47 */
48 struct rpmsg_ctrldev {
49 struct rpmsg_device *rpdev;
50 struct cdev cdev;
51 struct device dev;
52 };
53
54 /**
55 * struct rpmsg_eptdev - endpoint device context
56 * @dev: endpoint device
57 * @cdev: cdev for the endpoint device
58 * @rpdev: underlaying rpmsg device
59 * @chinfo: info used to open the endpoint
60 * @ept_lock: synchronization of @ept modifications
61 * @ept: rpmsg endpoint reference, when open
62 * @queue_lock: synchronization of @queue operations
63 * @queue: incoming message queue
64 * @readq: wait object for incoming queue
65 */
66 struct rpmsg_eptdev {
67 struct device dev;
68 struct cdev cdev;
69
70 struct rpmsg_device *rpdev;
71 struct rpmsg_channel_info chinfo;
72
73 struct mutex ept_lock;
74 struct rpmsg_endpoint *ept;
75
76 spinlock_t queue_lock;
77 struct sk_buff_head queue;
78 wait_queue_head_t readq;
79 };
80
rpmsg_eptdev_destroy(struct device * dev,void * data)81 static int rpmsg_eptdev_destroy(struct device *dev, void *data)
82 {
83 struct rpmsg_eptdev *eptdev = dev_to_eptdev(dev);
84
85 mutex_lock(&eptdev->ept_lock);
86 if (eptdev->ept) {
87 rpmsg_destroy_ept(eptdev->ept);
88 eptdev->ept = NULL;
89 }
90 mutex_unlock(&eptdev->ept_lock);
91
92 /* wake up any blocked readers */
93 wake_up_interruptible(&eptdev->readq);
94
95 cdev_device_del(&eptdev->cdev, &eptdev->dev);
96 put_device(&eptdev->dev);
97
98 return 0;
99 }
100
rpmsg_ept_cb(struct rpmsg_device * rpdev,void * buf,int len,void * priv,u32 addr)101 static int rpmsg_ept_cb(struct rpmsg_device *rpdev, void *buf, int len,
102 void *priv, u32 addr)
103 {
104 struct rpmsg_eptdev *eptdev = priv;
105 struct sk_buff *skb;
106
107 skb = alloc_skb(len, GFP_ATOMIC);
108 if (!skb)
109 return -ENOMEM;
110
111 skb_put_data(skb, buf, len);
112
113 spin_lock(&eptdev->queue_lock);
114 skb_queue_tail(&eptdev->queue, skb);
115 spin_unlock(&eptdev->queue_lock);
116
117 /* wake up any blocking processes, waiting for new data */
118 wake_up_interruptible(&eptdev->readq);
119
120 return 0;
121 }
122
rpmsg_eptdev_open(struct inode * inode,struct file * filp)123 static int rpmsg_eptdev_open(struct inode *inode, struct file *filp)
124 {
125 struct rpmsg_eptdev *eptdev = cdev_to_eptdev(inode->i_cdev);
126 struct rpmsg_endpoint *ept;
127 struct rpmsg_device *rpdev = eptdev->rpdev;
128 struct device *dev = &eptdev->dev;
129
130 get_device(dev);
131
132 ept = rpmsg_create_ept(rpdev, rpmsg_ept_cb, eptdev, eptdev->chinfo);
133 if (!ept) {
134 dev_err(dev, "failed to open %s\n", eptdev->chinfo.name);
135 put_device(dev);
136 return -EINVAL;
137 }
138
139 eptdev->ept = ept;
140 filp->private_data = eptdev;
141
142 return 0;
143 }
144
rpmsg_eptdev_release(struct inode * inode,struct file * filp)145 static int rpmsg_eptdev_release(struct inode *inode, struct file *filp)
146 {
147 struct rpmsg_eptdev *eptdev = cdev_to_eptdev(inode->i_cdev);
148 struct device *dev = &eptdev->dev;
149 struct sk_buff *skb;
150
151 /* Close the endpoint, if it's not already destroyed by the parent */
152 mutex_lock(&eptdev->ept_lock);
153 if (eptdev->ept) {
154 rpmsg_destroy_ept(eptdev->ept);
155 eptdev->ept = NULL;
156 }
157 mutex_unlock(&eptdev->ept_lock);
158
159 /* Discard all SKBs */
160 while (!skb_queue_empty(&eptdev->queue)) {
161 skb = skb_dequeue(&eptdev->queue);
162 kfree_skb(skb);
163 }
164
165 put_device(dev);
166
167 return 0;
168 }
169
rpmsg_eptdev_read_iter(struct kiocb * iocb,struct iov_iter * to)170 static ssize_t rpmsg_eptdev_read_iter(struct kiocb *iocb, struct iov_iter *to)
171 {
172 struct file *filp = iocb->ki_filp;
173 struct rpmsg_eptdev *eptdev = filp->private_data;
174 unsigned long flags;
175 struct sk_buff *skb;
176 int use;
177
178 if (!eptdev->ept)
179 return -EPIPE;
180
181 spin_lock_irqsave(&eptdev->queue_lock, flags);
182
183 /* Wait for data in the queue */
184 if (skb_queue_empty(&eptdev->queue)) {
185 spin_unlock_irqrestore(&eptdev->queue_lock, flags);
186
187 if (filp->f_flags & O_NONBLOCK)
188 return -EAGAIN;
189
190 /* Wait until we get data or the endpoint goes away */
191 if (wait_event_interruptible(eptdev->readq,
192 !skb_queue_empty(&eptdev->queue) ||
193 !eptdev->ept))
194 return -ERESTARTSYS;
195
196 /* We lost the endpoint while waiting */
197 if (!eptdev->ept)
198 return -EPIPE;
199
200 spin_lock_irqsave(&eptdev->queue_lock, flags);
201 }
202
203 skb = skb_dequeue(&eptdev->queue);
204 spin_unlock_irqrestore(&eptdev->queue_lock, flags);
205 if (!skb)
206 return -EFAULT;
207
208 use = min_t(size_t, iov_iter_count(to), skb->len);
209 if (copy_to_iter(skb->data, use, to) != use)
210 use = -EFAULT;
211
212 kfree_skb(skb);
213
214 return use;
215 }
216
rpmsg_eptdev_write_iter(struct kiocb * iocb,struct iov_iter * from)217 static ssize_t rpmsg_eptdev_write_iter(struct kiocb *iocb,
218 struct iov_iter *from)
219 {
220 struct file *filp = iocb->ki_filp;
221 struct rpmsg_eptdev *eptdev = filp->private_data;
222 size_t len = iov_iter_count(from);
223 void *kbuf;
224 int ret;
225
226 kbuf = kzalloc(len, GFP_KERNEL);
227 if (!kbuf)
228 return -ENOMEM;
229
230 if (!copy_from_iter_full(kbuf, len, from)) {
231 ret = -EFAULT;
232 goto free_kbuf;
233 }
234
235 if (mutex_lock_interruptible(&eptdev->ept_lock)) {
236 ret = -ERESTARTSYS;
237 goto free_kbuf;
238 }
239
240 if (!eptdev->ept) {
241 ret = -EPIPE;
242 goto unlock_eptdev;
243 }
244
245 if (filp->f_flags & O_NONBLOCK)
246 ret = rpmsg_trysend(eptdev->ept, kbuf, len);
247 else
248 ret = rpmsg_send(eptdev->ept, kbuf, len);
249
250 unlock_eptdev:
251 mutex_unlock(&eptdev->ept_lock);
252
253 free_kbuf:
254 kfree(kbuf);
255 return ret < 0 ? ret : len;
256 }
257
rpmsg_eptdev_poll(struct file * filp,poll_table * wait)258 static __poll_t rpmsg_eptdev_poll(struct file *filp, poll_table *wait)
259 {
260 struct rpmsg_eptdev *eptdev = filp->private_data;
261 __poll_t mask = 0;
262
263 if (!eptdev->ept)
264 return EPOLLERR;
265
266 poll_wait(filp, &eptdev->readq, wait);
267
268 if (!skb_queue_empty(&eptdev->queue))
269 mask |= EPOLLIN | EPOLLRDNORM;
270
271 mask |= rpmsg_poll(eptdev->ept, filp, wait);
272
273 return mask;
274 }
275
rpmsg_eptdev_ioctl(struct file * fp,unsigned int cmd,unsigned long arg)276 static long rpmsg_eptdev_ioctl(struct file *fp, unsigned int cmd,
277 unsigned long arg)
278 {
279 struct rpmsg_eptdev *eptdev = fp->private_data;
280
281 if (cmd != RPMSG_DESTROY_EPT_IOCTL)
282 return -EINVAL;
283
284 return rpmsg_eptdev_destroy(&eptdev->dev, NULL);
285 }
286
287 static const struct file_operations rpmsg_eptdev_fops = {
288 .owner = THIS_MODULE,
289 .open = rpmsg_eptdev_open,
290 .release = rpmsg_eptdev_release,
291 .read_iter = rpmsg_eptdev_read_iter,
292 .write_iter = rpmsg_eptdev_write_iter,
293 .poll = rpmsg_eptdev_poll,
294 .unlocked_ioctl = rpmsg_eptdev_ioctl,
295 .compat_ioctl = rpmsg_eptdev_ioctl,
296 };
297
name_show(struct device * dev,struct device_attribute * attr,char * buf)298 static ssize_t name_show(struct device *dev, struct device_attribute *attr,
299 char *buf)
300 {
301 struct rpmsg_eptdev *eptdev = dev_get_drvdata(dev);
302
303 return sprintf(buf, "%s\n", eptdev->chinfo.name);
304 }
305 static DEVICE_ATTR_RO(name);
306
src_show(struct device * dev,struct device_attribute * attr,char * buf)307 static ssize_t src_show(struct device *dev, struct device_attribute *attr,
308 char *buf)
309 {
310 struct rpmsg_eptdev *eptdev = dev_get_drvdata(dev);
311
312 return sprintf(buf, "%d\n", eptdev->chinfo.src);
313 }
314 static DEVICE_ATTR_RO(src);
315
dst_show(struct device * dev,struct device_attribute * attr,char * buf)316 static ssize_t dst_show(struct device *dev, struct device_attribute *attr,
317 char *buf)
318 {
319 struct rpmsg_eptdev *eptdev = dev_get_drvdata(dev);
320
321 return sprintf(buf, "%d\n", eptdev->chinfo.dst);
322 }
323 static DEVICE_ATTR_RO(dst);
324
325 static struct attribute *rpmsg_eptdev_attrs[] = {
326 &dev_attr_name.attr,
327 &dev_attr_src.attr,
328 &dev_attr_dst.attr,
329 NULL
330 };
331 ATTRIBUTE_GROUPS(rpmsg_eptdev);
332
rpmsg_eptdev_release_device(struct device * dev)333 static void rpmsg_eptdev_release_device(struct device *dev)
334 {
335 struct rpmsg_eptdev *eptdev = dev_to_eptdev(dev);
336
337 ida_simple_remove(&rpmsg_ept_ida, dev->id);
338 ida_simple_remove(&rpmsg_minor_ida, MINOR(eptdev->dev.devt));
339 kfree(eptdev);
340 }
341
rpmsg_eptdev_create(struct rpmsg_ctrldev * ctrldev,struct rpmsg_channel_info chinfo)342 static int rpmsg_eptdev_create(struct rpmsg_ctrldev *ctrldev,
343 struct rpmsg_channel_info chinfo)
344 {
345 struct rpmsg_device *rpdev = ctrldev->rpdev;
346 struct rpmsg_eptdev *eptdev;
347 struct device *dev;
348 int ret;
349
350 eptdev = kzalloc(sizeof(*eptdev), GFP_KERNEL);
351 if (!eptdev)
352 return -ENOMEM;
353
354 dev = &eptdev->dev;
355 eptdev->rpdev = rpdev;
356 eptdev->chinfo = chinfo;
357
358 mutex_init(&eptdev->ept_lock);
359 spin_lock_init(&eptdev->queue_lock);
360 skb_queue_head_init(&eptdev->queue);
361 init_waitqueue_head(&eptdev->readq);
362
363 device_initialize(dev);
364 dev->class = rpmsg_class;
365 dev->parent = &ctrldev->dev;
366 dev->groups = rpmsg_eptdev_groups;
367 dev_set_drvdata(dev, eptdev);
368
369 cdev_init(&eptdev->cdev, &rpmsg_eptdev_fops);
370 eptdev->cdev.owner = THIS_MODULE;
371
372 ret = ida_simple_get(&rpmsg_minor_ida, 0, RPMSG_DEV_MAX, GFP_KERNEL);
373 if (ret < 0)
374 goto free_eptdev;
375 dev->devt = MKDEV(MAJOR(rpmsg_major), ret);
376
377 ret = ida_simple_get(&rpmsg_ept_ida, 0, 0, GFP_KERNEL);
378 if (ret < 0)
379 goto free_minor_ida;
380 dev->id = ret;
381 dev_set_name(dev, "rpmsg%d", ret);
382
383 ret = cdev_device_add(&eptdev->cdev, &eptdev->dev);
384 if (ret)
385 goto free_ept_ida;
386
387 /* We can now rely on the release function for cleanup */
388 dev->release = rpmsg_eptdev_release_device;
389
390 return ret;
391
392 free_ept_ida:
393 ida_simple_remove(&rpmsg_ept_ida, dev->id);
394 free_minor_ida:
395 ida_simple_remove(&rpmsg_minor_ida, MINOR(dev->devt));
396 free_eptdev:
397 put_device(dev);
398 kfree(eptdev);
399
400 return ret;
401 }
402
rpmsg_ctrldev_open(struct inode * inode,struct file * filp)403 static int rpmsg_ctrldev_open(struct inode *inode, struct file *filp)
404 {
405 struct rpmsg_ctrldev *ctrldev = cdev_to_ctrldev(inode->i_cdev);
406
407 get_device(&ctrldev->dev);
408 filp->private_data = ctrldev;
409
410 return 0;
411 }
412
rpmsg_ctrldev_release(struct inode * inode,struct file * filp)413 static int rpmsg_ctrldev_release(struct inode *inode, struct file *filp)
414 {
415 struct rpmsg_ctrldev *ctrldev = cdev_to_ctrldev(inode->i_cdev);
416
417 put_device(&ctrldev->dev);
418
419 return 0;
420 }
421
rpmsg_ctrldev_ioctl(struct file * fp,unsigned int cmd,unsigned long arg)422 static long rpmsg_ctrldev_ioctl(struct file *fp, unsigned int cmd,
423 unsigned long arg)
424 {
425 struct rpmsg_ctrldev *ctrldev = fp->private_data;
426 void __user *argp = (void __user *)arg;
427 struct rpmsg_endpoint_info eptinfo;
428 struct rpmsg_channel_info chinfo;
429
430 if (cmd != RPMSG_CREATE_EPT_IOCTL)
431 return -EINVAL;
432
433 if (copy_from_user(&eptinfo, argp, sizeof(eptinfo)))
434 return -EFAULT;
435
436 memcpy(chinfo.name, eptinfo.name, RPMSG_NAME_SIZE);
437 chinfo.name[RPMSG_NAME_SIZE-1] = '\0';
438 chinfo.src = eptinfo.src;
439 chinfo.dst = eptinfo.dst;
440
441 return rpmsg_eptdev_create(ctrldev, chinfo);
442 };
443
444 static const struct file_operations rpmsg_ctrldev_fops = {
445 .owner = THIS_MODULE,
446 .open = rpmsg_ctrldev_open,
447 .release = rpmsg_ctrldev_release,
448 .unlocked_ioctl = rpmsg_ctrldev_ioctl,
449 .compat_ioctl = rpmsg_ctrldev_ioctl,
450 };
451
rpmsg_ctrldev_release_device(struct device * dev)452 static void rpmsg_ctrldev_release_device(struct device *dev)
453 {
454 struct rpmsg_ctrldev *ctrldev = dev_to_ctrldev(dev);
455
456 ida_simple_remove(&rpmsg_ctrl_ida, dev->id);
457 ida_simple_remove(&rpmsg_minor_ida, MINOR(dev->devt));
458 kfree(ctrldev);
459 }
460
rpmsg_chrdev_probe(struct rpmsg_device * rpdev)461 static int rpmsg_chrdev_probe(struct rpmsg_device *rpdev)
462 {
463 struct rpmsg_ctrldev *ctrldev;
464 struct device *dev;
465 int ret;
466
467 ctrldev = kzalloc(sizeof(*ctrldev), GFP_KERNEL);
468 if (!ctrldev)
469 return -ENOMEM;
470
471 ctrldev->rpdev = rpdev;
472
473 dev = &ctrldev->dev;
474 device_initialize(dev);
475 dev->parent = &rpdev->dev;
476 dev->class = rpmsg_class;
477
478 cdev_init(&ctrldev->cdev, &rpmsg_ctrldev_fops);
479 ctrldev->cdev.owner = THIS_MODULE;
480
481 ret = ida_simple_get(&rpmsg_minor_ida, 0, RPMSG_DEV_MAX, GFP_KERNEL);
482 if (ret < 0)
483 goto free_ctrldev;
484 dev->devt = MKDEV(MAJOR(rpmsg_major), ret);
485
486 ret = ida_simple_get(&rpmsg_ctrl_ida, 0, 0, GFP_KERNEL);
487 if (ret < 0)
488 goto free_minor_ida;
489 dev->id = ret;
490 dev_set_name(&ctrldev->dev, "rpmsg_ctrl%d", ret);
491
492 ret = cdev_device_add(&ctrldev->cdev, &ctrldev->dev);
493 if (ret)
494 goto free_ctrl_ida;
495
496 /* We can now rely on the release function for cleanup */
497 dev->release = rpmsg_ctrldev_release_device;
498
499 dev_set_drvdata(&rpdev->dev, ctrldev);
500
501 return ret;
502
503 free_ctrl_ida:
504 ida_simple_remove(&rpmsg_ctrl_ida, dev->id);
505 free_minor_ida:
506 ida_simple_remove(&rpmsg_minor_ida, MINOR(dev->devt));
507 free_ctrldev:
508 put_device(dev);
509 kfree(ctrldev);
510
511 return ret;
512 }
513
rpmsg_chrdev_remove(struct rpmsg_device * rpdev)514 static void rpmsg_chrdev_remove(struct rpmsg_device *rpdev)
515 {
516 struct rpmsg_ctrldev *ctrldev = dev_get_drvdata(&rpdev->dev);
517 int ret;
518
519 /* Destroy all endpoints */
520 ret = device_for_each_child(&ctrldev->dev, NULL, rpmsg_eptdev_destroy);
521 if (ret)
522 dev_warn(&rpdev->dev, "failed to nuke endpoints: %d\n", ret);
523
524 cdev_device_del(&ctrldev->cdev, &ctrldev->dev);
525 put_device(&ctrldev->dev);
526 }
527
528 static struct rpmsg_driver rpmsg_chrdev_driver = {
529 .probe = rpmsg_chrdev_probe,
530 .remove = rpmsg_chrdev_remove,
531 .drv = {
532 .name = "rpmsg_chrdev",
533 },
534 };
535
rpmsg_char_init(void)536 static int rpmsg_char_init(void)
537 {
538 int ret;
539
540 ret = alloc_chrdev_region(&rpmsg_major, 0, RPMSG_DEV_MAX, "rpmsg");
541 if (ret < 0) {
542 pr_err("rpmsg: failed to allocate char dev region\n");
543 return ret;
544 }
545
546 rpmsg_class = class_create(THIS_MODULE, "rpmsg");
547 if (IS_ERR(rpmsg_class)) {
548 pr_err("failed to create rpmsg class\n");
549 unregister_chrdev_region(rpmsg_major, RPMSG_DEV_MAX);
550 return PTR_ERR(rpmsg_class);
551 }
552
553 ret = register_rpmsg_driver(&rpmsg_chrdev_driver);
554 if (ret < 0) {
555 pr_err("rpmsgchr: failed to register rpmsg driver\n");
556 class_destroy(rpmsg_class);
557 unregister_chrdev_region(rpmsg_major, RPMSG_DEV_MAX);
558 }
559
560 return ret;
561 }
562 postcore_initcall(rpmsg_char_init);
563
rpmsg_chrdev_exit(void)564 static void rpmsg_chrdev_exit(void)
565 {
566 unregister_rpmsg_driver(&rpmsg_chrdev_driver);
567 class_destroy(rpmsg_class);
568 unregister_chrdev_region(rpmsg_major, RPMSG_DEV_MAX);
569 }
570 module_exit(rpmsg_chrdev_exit);
571
572 MODULE_ALIAS("rpmsg:rpmsg_chrdev");
573 MODULE_LICENSE("GPL v2");
574