Lines Matching +full:ps +full:- +full:speed
1 // SPDX-License-Identifier: GPL-2.0+
5 * devio.c -- User space communication with USB devices.
7 * Copyright (C) 1999-2000 Thomas Sailer ([email protected])
18 * 30.09.2005 0.3 Fix user-triggerable oops in async URB delivery
19 * (CAN-2005-3055)
42 #include <linux/dma-mapping.h>
56 #define USB_SG_SIZE 16384 /* split-size for large txs */
58 /* Mutual exclusion for ps->list in resume vs. release and remove */
91 struct usb_dev_state *ps; member
96 struct usb_dev_state *ps; member
140 #define USBFS_XFER_MAX (UINT_MAX / 2 - 1000000)
159 ret = -ENOMEM; in usbfs_increase_memory_usage()
176 usbfs_memory_usage -= amount; in usbfs_decrease_memory_usage()
180 static int connected(struct usb_dev_state *ps) in connected() argument
182 return (!list_empty(&ps->list) && in connected()
183 ps->dev->state != USB_STATE_NOTATTACHED); in connected()
188 struct usb_dev_state *ps = usbm->ps; in dec_usb_memory_use_count() local
189 struct usb_hcd *hcd = bus_to_hcd(ps->dev->bus); in dec_usb_memory_use_count()
192 spin_lock_irqsave(&ps->lock, flags); in dec_usb_memory_use_count()
193 --*count; in dec_usb_memory_use_count()
194 if (usbm->urb_use_count == 0 && usbm->vma_use_count == 0) { in dec_usb_memory_use_count()
195 list_del(&usbm->memlist); in dec_usb_memory_use_count()
196 spin_unlock_irqrestore(&ps->lock, flags); in dec_usb_memory_use_count()
198 hcd_buffer_free_pages(hcd, usbm->size, in dec_usb_memory_use_count()
199 usbm->mem, usbm->dma_handle); in dec_usb_memory_use_count()
201 usbm->size + sizeof(struct usb_memory)); in dec_usb_memory_use_count()
204 spin_unlock_irqrestore(&ps->lock, flags); in dec_usb_memory_use_count()
210 struct usb_memory *usbm = vma->vm_private_data; in usbdev_vm_open()
213 spin_lock_irqsave(&usbm->ps->lock, flags); in usbdev_vm_open()
214 ++usbm->vma_use_count; in usbdev_vm_open()
215 spin_unlock_irqrestore(&usbm->ps->lock, flags); in usbdev_vm_open()
220 struct usb_memory *usbm = vma->vm_private_data; in usbdev_vm_close()
222 dec_usb_memory_use_count(usbm, &usbm->vma_use_count); in usbdev_vm_close()
233 struct usb_dev_state *ps = file->private_data; in usbdev_mmap() local
234 struct usb_hcd *hcd = bus_to_hcd(ps->dev->bus); in usbdev_mmap()
235 size_t size = vma->vm_end - vma->vm_start; in usbdev_mmap()
241 if (!(file->f_mode & FMODE_WRITE)) in usbdev_mmap()
242 return -EPERM; in usbdev_mmap()
250 ret = -ENOMEM; in usbdev_mmap()
257 ret = -ENOMEM; in usbdev_mmap()
263 usbm->mem = mem; in usbdev_mmap()
264 usbm->dma_handle = dma_handle; in usbdev_mmap()
265 usbm->size = size; in usbdev_mmap()
266 usbm->ps = ps; in usbdev_mmap()
267 usbm->vm_start = vma->vm_start; in usbdev_mmap()
268 usbm->vma_use_count = 1; in usbdev_mmap()
269 INIT_LIST_HEAD(&usbm->memlist); in usbdev_mmap()
272 * In DMA-unavailable cases, hcd_buffer_alloc_pages allocates in usbdev_mmap()
279 if (remap_pfn_range(vma, vma->vm_start, in usbdev_mmap()
280 virt_to_phys(usbm->mem) >> PAGE_SHIFT, in usbdev_mmap()
281 size, vma->vm_page_prot) < 0) { in usbdev_mmap()
282 dec_usb_memory_use_count(usbm, &usbm->vma_use_count); in usbdev_mmap()
283 return -EAGAIN; in usbdev_mmap()
286 if (dma_mmap_coherent(hcd->self.sysdev, vma, mem, dma_handle, in usbdev_mmap()
288 dec_usb_memory_use_count(usbm, &usbm->vma_use_count); in usbdev_mmap()
289 return -EAGAIN; in usbdev_mmap()
294 vma->vm_ops = &usbdev_vm_ops; in usbdev_mmap()
295 vma->vm_private_data = usbm; in usbdev_mmap()
297 spin_lock_irqsave(&ps->lock, flags); in usbdev_mmap()
298 list_add_tail(&usbm->memlist, &ps->memory_list); in usbdev_mmap()
299 spin_unlock_irqrestore(&ps->lock, flags); in usbdev_mmap()
314 struct usb_dev_state *ps = file->private_data; in usbdev_read() local
315 struct usb_device *dev = ps->dev; in usbdev_read()
323 if (!connected(ps)) { in usbdev_read()
324 ret = -ENODEV; in usbdev_read()
327 ret = -EINVAL; in usbdev_read()
332 /* 18 bytes - fits on the stack */ in usbdev_read()
335 memcpy(&temp_desc, &dev->descriptor, sizeof(dev->descriptor)); in usbdev_read()
341 len = sizeof(struct usb_device_descriptor) - pos; in usbdev_read()
345 ret = -EFAULT; in usbdev_read()
351 nbytes -= len; in usbdev_read()
356 for (i = 0; nbytes && i < dev->descriptor.bNumConfigurations; i++) { in usbdev_read()
358 (struct usb_config_descriptor *)dev->rawdescriptors[i]; in usbdev_read()
359 unsigned int length = le16_to_cpu(config->wTotalLength); in usbdev_read()
366 le16_to_cpu(dev->config[i].desc.wTotalLength); in usbdev_read()
368 len = length - (*ppos - pos); in usbdev_read()
373 if (alloclen > (*ppos - pos)) { in usbdev_read()
374 alloclen -= (*ppos - pos); in usbdev_read()
376 dev->rawdescriptors[i] + (*ppos - pos), in usbdev_read()
378 ret = -EFAULT; in usbdev_read()
385 nbytes -= len; in usbdev_read()
408 as->urb = usb_alloc_urb(numisoframes, GFP_KERNEL); in alloc_async()
409 if (!as->urb) { in alloc_async()
420 put_pid(as->pid); in free_async()
421 if (as->cred) in free_async()
422 put_cred(as->cred); in free_async()
423 for (i = 0; i < as->urb->num_sgs; i++) { in free_async()
424 if (sg_page(&as->urb->sg[i])) in free_async()
425 kfree(sg_virt(&as->urb->sg[i])); in free_async()
428 kfree(as->urb->sg); in free_async()
429 if (as->usbm == NULL) in free_async()
430 kfree(as->urb->transfer_buffer); in free_async()
432 dec_usb_memory_use_count(as->usbm, &as->usbm->urb_use_count); in free_async()
434 kfree(as->urb->setup_packet); in free_async()
435 usb_free_urb(as->urb); in free_async()
436 usbfs_decrease_memory_usage(as->mem_usage); in free_async()
442 struct usb_dev_state *ps = as->ps; in async_newpending() local
445 spin_lock_irqsave(&ps->lock, flags); in async_newpending()
446 list_add_tail(&as->asynclist, &ps->async_pending); in async_newpending()
447 spin_unlock_irqrestore(&ps->lock, flags); in async_newpending()
452 struct usb_dev_state *ps = as->ps; in async_removepending() local
455 spin_lock_irqsave(&ps->lock, flags); in async_removepending()
456 list_del_init(&as->asynclist); in async_removepending()
457 spin_unlock_irqrestore(&ps->lock, flags); in async_removepending()
460 static struct async *async_getcompleted(struct usb_dev_state *ps) in async_getcompleted() argument
465 spin_lock_irqsave(&ps->lock, flags); in async_getcompleted()
466 if (!list_empty(&ps->async_completed)) { in async_getcompleted()
467 as = list_entry(ps->async_completed.next, struct async, in async_getcompleted()
469 list_del_init(&as->asynclist); in async_getcompleted()
471 spin_unlock_irqrestore(&ps->lock, flags); in async_getcompleted()
475 static struct async *async_getpending(struct usb_dev_state *ps, in async_getpending() argument
480 list_for_each_entry(as, &ps->async_pending, asynclist) in async_getpending()
481 if (as->userurb == userurb) { in async_getpending()
482 list_del_init(&as->asynclist); in async_getpending()
508 dev_info(&udev->dev, "userurb %px, ep%d %s-%s, " in snoop_urb()
512 dev_info(&udev->dev, "userurb %px, ep%d %s-%s, " in snoop_urb()
518 dev_info(&udev->dev, "ep%d %s-%s, length %u, " in snoop_urb()
522 dev_info(&udev->dev, "ep%d %s-%s, actual_length %u, " in snoop_urb()
542 if (urb->num_sgs == 0) { in snoop_urb_data()
544 urb->transfer_buffer, len, 1); in snoop_urb_data()
548 for (i = 0; i < urb->num_sgs && len; i++) { in snoop_urb_data()
551 sg_virt(&urb->sg[i]), size, 1); in snoop_urb_data()
552 len -= size; in snoop_urb_data()
560 if (urb->number_of_packets > 0) /* Isochronous */ in copy_urb_data_to_user()
561 len = urb->transfer_buffer_length; in copy_urb_data_to_user()
562 else /* Non-Isoc */ in copy_urb_data_to_user()
563 len = urb->actual_length; in copy_urb_data_to_user()
565 if (urb->num_sgs == 0) { in copy_urb_data_to_user()
566 if (copy_to_user(userbuffer, urb->transfer_buffer, len)) in copy_urb_data_to_user()
567 return -EFAULT; in copy_urb_data_to_user()
571 for (i = 0; i < urb->num_sgs && len; i++) { in copy_urb_data_to_user()
573 if (copy_to_user(userbuffer, sg_virt(&urb->sg[i]), size)) in copy_urb_data_to_user()
574 return -EFAULT; in copy_urb_data_to_user()
576 len -= size; in copy_urb_data_to_user()
585 static void cancel_bulk_urbs(struct usb_dev_state *ps, unsigned bulk_addr) in cancel_bulk_urbs() argument
586 __releases(ps->lock) in cancel_bulk_urbs()
587 __acquires(ps->lock) in cancel_bulk_urbs()
597 list_for_each_entry(as, &ps->async_pending, asynclist) { in cancel_bulk_urbs()
598 if (as->bulk_addr == bulk_addr) { in cancel_bulk_urbs()
599 if (as->bulk_status != AS_CONTINUATION) in cancel_bulk_urbs()
601 as->bulk_status = AS_UNLINK; in cancel_bulk_urbs()
602 as->bulk_addr = 0; in cancel_bulk_urbs()
605 ps->disabled_bulk_eps |= (1 << bulk_addr); in cancel_bulk_urbs()
609 list_for_each_entry_reverse(as, &ps->async_pending, asynclist) { in cancel_bulk_urbs()
610 if (as->bulk_status == AS_UNLINK) { in cancel_bulk_urbs()
611 as->bulk_status = 0; /* Only once */ in cancel_bulk_urbs()
612 urb = as->urb; in cancel_bulk_urbs()
614 spin_unlock(&ps->lock); /* Allow completions */ in cancel_bulk_urbs()
617 spin_lock(&ps->lock); in cancel_bulk_urbs()
625 struct async *as = urb->context; in async_completed()
626 struct usb_dev_state *ps = as->ps; in async_completed() local
633 spin_lock_irqsave(&ps->lock, flags); in async_completed()
634 list_move_tail(&as->asynclist, &ps->async_completed); in async_completed()
635 as->status = urb->status; in async_completed()
636 signr = as->signr; in async_completed()
638 errno = as->status; in async_completed()
639 addr = as->userurb_sigval; in async_completed()
640 pid = get_pid(as->pid); in async_completed()
641 cred = get_cred(as->cred); in async_completed()
643 snoop(&urb->dev->dev, "urb complete\n"); in async_completed()
644 snoop_urb(urb->dev, as->userurb, urb->pipe, urb->actual_length, in async_completed()
645 as->status, COMPLETE, NULL, 0); in async_completed()
647 snoop_urb_data(urb, urb->actual_length); in async_completed()
649 if (as->status < 0 && as->bulk_addr && as->status != -ECONNRESET && in async_completed()
650 as->status != -ENOENT) in async_completed()
651 cancel_bulk_urbs(ps, as->bulk_addr); in async_completed()
653 wake_up(&ps->wait); in async_completed()
654 spin_unlock_irqrestore(&ps->lock, flags); in async_completed()
663 static void destroy_async(struct usb_dev_state *ps, struct list_head *list) in destroy_async() argument
669 spin_lock_irqsave(&ps->lock, flags); in destroy_async()
672 list_del_init(&as->asynclist); in destroy_async()
673 urb = as->urb; in destroy_async()
677 spin_unlock_irqrestore(&ps->lock, flags); in destroy_async()
680 spin_lock_irqsave(&ps->lock, flags); in destroy_async()
682 spin_unlock_irqrestore(&ps->lock, flags); in destroy_async()
685 static void destroy_async_on_interface(struct usb_dev_state *ps, in destroy_async_on_interface() argument
692 spin_lock_irqsave(&ps->lock, flags); in destroy_async_on_interface()
693 list_for_each_safe(p, q, &ps->async_pending) in destroy_async_on_interface()
694 if (ifnum == list_entry(p, struct async, asynclist)->ifnum) in destroy_async_on_interface()
696 spin_unlock_irqrestore(&ps->lock, flags); in destroy_async_on_interface()
697 destroy_async(ps, &hitlist); in destroy_async_on_interface()
700 static void destroy_all_async(struct usb_dev_state *ps) in destroy_all_async() argument
702 destroy_async(ps, &ps->async_pending); in destroy_all_async()
714 return -ENODEV; in driver_probe()
719 struct usb_dev_state *ps = usb_get_intfdata(intf); in driver_disconnect() local
720 unsigned int ifnum = intf->altsetting->desc.bInterfaceNumber; in driver_disconnect()
722 if (!ps) in driver_disconnect()
729 if (likely(ifnum < 8*sizeof(ps->ifclaimed))) in driver_disconnect()
730 clear_bit(ifnum, &ps->ifclaimed); in driver_disconnect()
732 dev_warn(&intf->dev, "interface number %u out of range\n", in driver_disconnect()
738 destroy_async_on_interface(ps, ifnum); in driver_disconnect()
761 struct usb_dev_state *ps; in usbfs_notify_resume() local
765 list_for_each_entry(ps, &udev->filelist, list) { in usbfs_notify_resume()
766 WRITE_ONCE(ps->not_yet_resumed, 0); in usbfs_notify_resume()
767 wake_up_all(&ps->wait_for_resume); in usbfs_notify_resume()
782 static int claimintf(struct usb_dev_state *ps, unsigned int ifnum) in claimintf() argument
784 struct usb_device *dev = ps->dev; in claimintf()
788 if (ifnum >= 8*sizeof(ps->ifclaimed)) in claimintf()
789 return -EINVAL; in claimintf()
791 if (test_bit(ifnum, &ps->ifclaimed)) in claimintf()
794 if (ps->privileges_dropped && in claimintf()
795 !test_bit(ifnum, &ps->interface_allowed_mask)) in claimintf()
796 return -EACCES; in claimintf()
800 err = -ENOENT; in claimintf()
805 old_suppress = dev_get_uevent_suppress(&intf->dev); in claimintf()
806 dev_set_uevent_suppress(&intf->dev, 1); in claimintf()
807 err = usb_driver_claim_interface(&usbfs_driver, intf, ps); in claimintf()
808 dev_set_uevent_suppress(&intf->dev, old_suppress); in claimintf()
811 set_bit(ifnum, &ps->ifclaimed); in claimintf()
815 static int releaseintf(struct usb_dev_state *ps, unsigned int ifnum) in releaseintf() argument
821 err = -EINVAL; in releaseintf()
822 if (ifnum >= 8*sizeof(ps->ifclaimed)) in releaseintf()
824 dev = ps->dev; in releaseintf()
827 err = -ENOENT; in releaseintf()
828 else if (test_and_clear_bit(ifnum, &ps->ifclaimed)) { in releaseintf()
832 old_suppress = dev_get_uevent_suppress(&intf->dev); in releaseintf()
833 dev_set_uevent_suppress(&intf->dev, 1); in releaseintf()
835 dev_set_uevent_suppress(&intf->dev, old_suppress); in releaseintf()
841 static int checkintf(struct usb_dev_state *ps, unsigned int ifnum) in checkintf() argument
843 if (ps->dev->state != USB_STATE_CONFIGURED) in checkintf()
844 return -EHOSTUNREACH; in checkintf()
845 if (ifnum >= 8*sizeof(ps->ifclaimed)) in checkintf()
846 return -EINVAL; in checkintf()
847 if (test_bit(ifnum, &ps->ifclaimed)) in checkintf()
850 dev_warn(&ps->dev->dev, "usbfs: process %d (%s) did not claim " in checkintf()
852 current->comm, ifnum); in checkintf()
853 return claimintf(ps, ifnum); in checkintf()
864 return -EINVAL; in findintfep()
865 if (!dev->actconfig) in findintfep()
866 return -ESRCH; in findintfep()
867 for (i = 0; i < dev->actconfig->desc.bNumInterfaces; i++) { in findintfep()
868 intf = dev->actconfig->interface[i]; in findintfep()
869 for (j = 0; j < intf->num_altsetting; j++) { in findintfep()
870 alts = &intf->altsetting[j]; in findintfep()
871 for (e = 0; e < alts->desc.bNumEndpoints; e++) { in findintfep()
872 endpt = &alts->endpoint[e].desc; in findintfep()
873 if (endpt->bEndpointAddress == ep) in findintfep()
874 return alts->desc.bInterfaceNumber; in findintfep()
878 return -ENOENT; in findintfep()
881 static int check_ctrlrecip(struct usb_dev_state *ps, unsigned int requesttype, in check_ctrlrecip() argument
887 if (ps->dev->state != USB_STATE_UNAUTHENTICATED in check_ctrlrecip()
888 && ps->dev->state != USB_STATE_ADDRESS in check_ctrlrecip()
889 && ps->dev->state != USB_STATE_CONFIGURED) in check_ctrlrecip()
890 return -EHOSTUNREACH; in check_ctrlrecip()
900 alt_setting = usb_find_alt_setting(ps->dev->actconfig, in check_ctrlrecip()
903 && alt_setting->desc.bInterfaceClass == USB_CLASS_PRINTER) in check_ctrlrecip()
912 ret = findintfep(ps->dev, index); in check_ctrlrecip()
922 ret = findintfep(ps->dev, index ^ 0x80); in check_ctrlrecip()
924 dev_info(&ps->dev->dev, in check_ctrlrecip()
927 current->comm, index, index ^ 0x80); in check_ctrlrecip()
930 ret = checkintf(ps, ret); in check_ctrlrecip()
934 ret = checkintf(ps, index); in check_ctrlrecip()
944 return dev->ep_in[ep & USB_ENDPOINT_NUMBER_MASK]; in ep_to_host_endpoint()
946 return dev->ep_out[ep & USB_ENDPOINT_NUMBER_MASK]; in ep_to_host_endpoint()
949 static int parse_usbdevfs_streams(struct usb_dev_state *ps, in parse_usbdevfs_streams() argument
962 if (get_user(num_streams, &streams->num_streams) || in parse_usbdevfs_streams()
963 get_user(num_eps, &streams->num_eps)) in parse_usbdevfs_streams()
964 return -EFAULT; in parse_usbdevfs_streams()
967 return -EINVAL; in parse_usbdevfs_streams()
971 return -EINVAL; in parse_usbdevfs_streams()
975 return -ENOMEM; in parse_usbdevfs_streams()
978 if (get_user(ep, &streams->eps[i])) { in parse_usbdevfs_streams()
979 ret = -EFAULT; in parse_usbdevfs_streams()
982 eps[i] = ep_to_host_endpoint(ps->dev, ep); in parse_usbdevfs_streams()
984 ret = -EINVAL; in parse_usbdevfs_streams()
989 ifnum = findintfep(ps->dev, ep); in parse_usbdevfs_streams()
996 ret = checkintf(ps, ifnum); in parse_usbdevfs_streams()
999 intf = usb_ifnum_to_if(ps->dev, ifnum); in parse_usbdevfs_streams()
1002 if (ifnum != intf->altsetting->desc.bInterfaceNumber) { in parse_usbdevfs_streams()
1003 ret = -EINVAL; in parse_usbdevfs_streams()
1038 struct usb_dev_state *ps; in usbdev_open() local
1041 ret = -ENOMEM; in usbdev_open()
1042 ps = kzalloc(sizeof(struct usb_dev_state), GFP_KERNEL); in usbdev_open()
1043 if (!ps) in usbdev_open()
1046 ret = -ENODEV; in usbdev_open()
1048 /* usbdev device-node */ in usbdev_open()
1050 dev = usbdev_lookup_by_devt(inode->i_rdev); in usbdev_open()
1055 if (dev->state == USB_STATE_NOTATTACHED) in usbdev_open()
1062 ps->dev = dev; in usbdev_open()
1063 ps->file = file; in usbdev_open()
1064 ps->interface_allowed_mask = 0xFFFFFFFF; /* 32 bits */ in usbdev_open()
1065 spin_lock_init(&ps->lock); in usbdev_open()
1066 INIT_LIST_HEAD(&ps->list); in usbdev_open()
1067 INIT_LIST_HEAD(&ps->async_pending); in usbdev_open()
1068 INIT_LIST_HEAD(&ps->async_completed); in usbdev_open()
1069 INIT_LIST_HEAD(&ps->memory_list); in usbdev_open()
1070 init_waitqueue_head(&ps->wait); in usbdev_open()
1071 init_waitqueue_head(&ps->wait_for_resume); in usbdev_open()
1072 ps->disc_pid = get_pid(task_pid(current)); in usbdev_open()
1073 ps->cred = get_current_cred(); in usbdev_open()
1077 list_add_tail(&ps->list, &dev->filelist); in usbdev_open()
1078 file->private_data = ps; in usbdev_open()
1080 snoop(&dev->dev, "opened by process %d: %s\n", task_pid_nr(current), in usbdev_open()
1081 current->comm); in usbdev_open()
1088 kfree(ps); in usbdev_open()
1094 struct usb_dev_state *ps = file->private_data; in usbdev_release() local
1095 struct usb_device *dev = ps->dev; in usbdev_release()
1100 usb_hub_release_all_ports(dev, ps); in usbdev_release()
1104 list_del_init(&ps->list); in usbdev_release()
1107 for (ifnum = 0; ps->ifclaimed && ifnum < 8*sizeof(ps->ifclaimed); in usbdev_release()
1109 if (test_bit(ifnum, &ps->ifclaimed)) in usbdev_release()
1110 releaseintf(ps, ifnum); in usbdev_release()
1112 destroy_all_async(ps); in usbdev_release()
1113 if (!ps->suspend_allowed) in usbdev_release()
1117 put_pid(ps->disc_pid); in usbdev_release()
1118 put_cred(ps->cred); in usbdev_release()
1120 as = async_getcompleted(ps); in usbdev_release()
1123 as = async_getcompleted(ps); in usbdev_release()
1126 kfree(ps); in usbdev_release()
1132 complete((struct completion *) urb->context); in usbfs_blocking_completion()
1146 urb->context = &ctx; in usbfs_start_wait_urb()
1147 urb->complete = usbfs_blocking_completion; in usbfs_start_wait_urb()
1157 *actlen = urb->actual_length; in usbfs_start_wait_urb()
1158 if (urb->status != -ENOENT) in usbfs_start_wait_urb()
1161 return -EINTR; in usbfs_start_wait_urb()
1163 return -ETIMEDOUT; in usbfs_start_wait_urb()
1165 *actlen = urb->actual_length; in usbfs_start_wait_urb()
1166 return urb->status; in usbfs_start_wait_urb()
1169 static int do_proc_control(struct usb_dev_state *ps, in do_proc_control() argument
1172 struct usb_device *dev = ps->dev; in do_proc_control()
1180 ret = check_ctrlrecip(ps, ctrl->bRequestType, ctrl->bRequest, in do_proc_control()
1181 ctrl->wIndex); in do_proc_control()
1184 wLength = ctrl->wLength; /* To suppress 64k PAGE_SIZE warning */ in do_proc_control()
1186 return -EINVAL; in do_proc_control()
1192 ret = -ENOMEM; in do_proc_control()
1203 dr->bRequestType = ctrl->bRequestType; in do_proc_control()
1204 dr->bRequest = ctrl->bRequest; in do_proc_control()
1205 dr->wValue = cpu_to_le16(ctrl->wValue); in do_proc_control()
1206 dr->wIndex = cpu_to_le16(ctrl->wIndex); in do_proc_control()
1207 dr->wLength = cpu_to_le16(ctrl->wLength); in do_proc_control()
1209 tmo = ctrl->timeout; in do_proc_control()
1210 snoop(&dev->dev, "control urb: bRequestType=%02x " in do_proc_control()
1213 ctrl->bRequestType, ctrl->bRequest, ctrl->wValue, in do_proc_control()
1214 ctrl->wIndex, ctrl->wLength); in do_proc_control()
1216 if ((ctrl->bRequestType & USB_DIR_IN) && wLength) { in do_proc_control()
1226 if (dev->quirks & USB_QUIRK_DELAY_CTRL_MSG) in do_proc_control()
1231 if (copy_to_user(ctrl->data, tbuf, actlen)) { in do_proc_control()
1232 ret = -EFAULT; in do_proc_control()
1238 if (copy_from_user(tbuf, ctrl->data, wLength)) { in do_proc_control()
1239 ret = -EFAULT; in do_proc_control()
1252 if (dev->quirks & USB_QUIRK_DELAY_CTRL_MSG) in do_proc_control()
1257 if (i < 0 && i != -EPIPE) { in do_proc_control()
1258 dev_printk(KERN_DEBUG, &dev->dev, "usbfs: USBDEVFS_CONTROL " in do_proc_control()
1260 current->comm, ctrl->bRequestType, ctrl->bRequest, in do_proc_control()
1261 ctrl->wLength, i); in do_proc_control()
1274 static int proc_control(struct usb_dev_state *ps, void __user *arg) in proc_control() argument
1279 return -EFAULT; in proc_control()
1280 return do_proc_control(ps, &ctrl); in proc_control()
1283 static int do_proc_bulk(struct usb_dev_state *ps, in do_proc_bulk() argument
1286 struct usb_device *dev = ps->dev; in do_proc_bulk()
1293 ret = findintfep(ps->dev, bulk->ep); in do_proc_bulk()
1296 ret = checkintf(ps, ret); in do_proc_bulk()
1300 len1 = bulk->len; in do_proc_bulk()
1301 if (len1 >= (INT_MAX - sizeof(struct urb))) in do_proc_bulk()
1302 return -EINVAL; in do_proc_bulk()
1304 if (bulk->ep & USB_DIR_IN) in do_proc_bulk()
1305 pipe = usb_rcvbulkpipe(dev, bulk->ep & 0x7f); in do_proc_bulk()
1307 pipe = usb_sndbulkpipe(dev, bulk->ep & 0x7f); in do_proc_bulk()
1309 if (!ep || !usb_endpoint_maxp(&ep->desc)) in do_proc_bulk()
1310 return -EINVAL; in do_proc_bulk()
1319 ret = -ENOMEM; in do_proc_bulk()
1327 if ((ep->desc.bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) == in do_proc_bulk()
1331 NULL, NULL, ep->desc.bInterval); in do_proc_bulk()
1336 tmo = bulk->timeout; in do_proc_bulk()
1337 if (bulk->ep & 0x80) { in do_proc_bulk()
1346 if (copy_to_user(bulk->data, tbuf, len2)) { in do_proc_bulk()
1347 ret = -EFAULT; in do_proc_bulk()
1353 if (copy_from_user(tbuf, bulk->data, len1)) { in do_proc_bulk()
1354 ret = -EFAULT; in do_proc_bulk()
1373 static int proc_bulk(struct usb_dev_state *ps, void __user *arg) in proc_bulk() argument
1378 return -EFAULT; in proc_bulk()
1379 return do_proc_bulk(ps, &bulk); in proc_bulk()
1388 eps = (epnum & USB_DIR_IN) ? udev->ep_in : udev->ep_out; in check_reset_of_active_ep()
1390 if (ep && !list_empty(&ep->urb_list)) in check_reset_of_active_ep()
1391 dev_warn(&udev->dev, "Process %d (%s) called USBDEVFS_%s for active endpoint 0x%02x\n", in check_reset_of_active_ep()
1392 task_pid_nr(current), current->comm, in check_reset_of_active_ep()
1396 static int proc_resetep(struct usb_dev_state *ps, void __user *arg) in proc_resetep() argument
1402 return -EFAULT; in proc_resetep()
1403 ret = findintfep(ps->dev, ep); in proc_resetep()
1406 ret = checkintf(ps, ret); in proc_resetep()
1409 check_reset_of_active_ep(ps->dev, ep, "RESETEP"); in proc_resetep()
1410 usb_reset_endpoint(ps->dev, ep); in proc_resetep()
1414 static int proc_clearhalt(struct usb_dev_state *ps, void __user *arg) in proc_clearhalt() argument
1421 return -EFAULT; in proc_clearhalt()
1422 ret = findintfep(ps->dev, ep); in proc_clearhalt()
1425 ret = checkintf(ps, ret); in proc_clearhalt()
1428 check_reset_of_active_ep(ps->dev, ep, "CLEAR_HALT"); in proc_clearhalt()
1430 pipe = usb_rcvbulkpipe(ps->dev, ep & 0x7f); in proc_clearhalt()
1432 pipe = usb_sndbulkpipe(ps->dev, ep & 0x7f); in proc_clearhalt()
1434 return usb_clear_halt(ps->dev, pipe); in proc_clearhalt()
1437 static int proc_getdriver(struct usb_dev_state *ps, void __user *arg) in proc_getdriver() argument
1444 return -EFAULT; in proc_getdriver()
1445 intf = usb_ifnum_to_if(ps->dev, gd.interface); in proc_getdriver()
1446 if (!intf || !intf->dev.driver) in proc_getdriver()
1447 ret = -ENODATA; in proc_getdriver()
1449 strscpy(gd.driver, intf->dev.driver->name, in proc_getdriver()
1451 ret = (copy_to_user(arg, &gd, sizeof(gd)) ? -EFAULT : 0); in proc_getdriver()
1456 static int proc_connectinfo(struct usb_dev_state *ps, void __user *arg) in proc_connectinfo() argument
1461 ci.devnum = ps->dev->devnum; in proc_connectinfo()
1462 ci.slow = ps->dev->speed == USB_SPEED_LOW; in proc_connectinfo()
1465 return -EFAULT; in proc_connectinfo()
1469 static int proc_conninfo_ex(struct usb_dev_state *ps, in proc_conninfo_ex() argument
1473 struct usb_device *udev = ps->dev; in proc_conninfo_ex()
1476 return -EINVAL; in proc_conninfo_ex()
1480 ci.busnum = udev->bus->busnum; in proc_conninfo_ex()
1481 ci.devnum = udev->devnum; in proc_conninfo_ex()
1482 ci.speed = udev->speed; in proc_conninfo_ex()
1484 while (udev && udev->portnum != 0) { in proc_conninfo_ex()
1486 ci.ports[ARRAY_SIZE(ci.ports) - ci.num_ports] = in proc_conninfo_ex()
1487 udev->portnum; in proc_conninfo_ex()
1488 udev = udev->parent; in proc_conninfo_ex()
1493 &ci.ports[ARRAY_SIZE(ci.ports) - ci.num_ports], in proc_conninfo_ex()
1497 return -EFAULT; in proc_conninfo_ex()
1502 static int proc_resetdevice(struct usb_dev_state *ps) in proc_resetdevice() argument
1504 struct usb_host_config *actconfig = ps->dev->actconfig; in proc_resetdevice()
1512 if (ps->privileges_dropped && actconfig) { in proc_resetdevice()
1513 for (i = 0; i < actconfig->desc.bNumInterfaces; ++i) { in proc_resetdevice()
1514 interface = actconfig->interface[i]; in proc_resetdevice()
1515 number = interface->cur_altsetting->desc.bInterfaceNumber; in proc_resetdevice()
1517 !test_bit(number, &ps->ifclaimed)) { in proc_resetdevice()
1518 dev_warn(&ps->dev->dev, in proc_resetdevice()
1520 number, interface->dev.driver->name, current->comm); in proc_resetdevice()
1521 return -EACCES; in proc_resetdevice()
1526 return usb_reset_device(ps->dev); in proc_resetdevice()
1529 static int proc_setintf(struct usb_dev_state *ps, void __user *arg) in proc_setintf() argument
1535 return -EFAULT; in proc_setintf()
1536 ret = checkintf(ps, setintf.interface); in proc_setintf()
1540 destroy_async_on_interface(ps, setintf.interface); in proc_setintf()
1542 return usb_set_interface(ps->dev, setintf.interface, in proc_setintf()
1546 static int proc_setconfig(struct usb_dev_state *ps, void __user *arg) in proc_setconfig() argument
1553 return -EFAULT; in proc_setconfig()
1555 actconfig = ps->dev->actconfig; in proc_setconfig()
1564 for (i = 0; i < actconfig->desc.bNumInterfaces; ++i) { in proc_setconfig()
1565 if (usb_interface_claimed(actconfig->interface[i])) { in proc_setconfig()
1566 dev_warn(&ps->dev->dev, in proc_setconfig()
1569 actconfig->interface[i] in proc_setconfig()
1570 ->cur_altsetting in proc_setconfig()
1571 ->desc.bInterfaceNumber, in proc_setconfig()
1572 actconfig->interface[i] in proc_setconfig()
1573 ->dev.driver->name, in proc_setconfig()
1574 current->comm, u); in proc_setconfig()
1575 status = -EBUSY; in proc_setconfig()
1585 if (actconfig && actconfig->desc.bConfigurationValue == u) in proc_setconfig()
1586 status = usb_reset_configuration(ps->dev); in proc_setconfig()
1588 status = usb_set_configuration(ps->dev, u); in proc_setconfig()
1595 find_memory_area(struct usb_dev_state *ps, const struct usbdevfs_urb *uurb) in find_memory_area() argument
1599 unsigned long uurb_start = (unsigned long)uurb->buffer; in find_memory_area()
1601 spin_lock_irqsave(&ps->lock, flags); in find_memory_area()
1602 list_for_each_entry(iter, &ps->memory_list, memlist) { in find_memory_area()
1603 if (uurb_start >= iter->vm_start && in find_memory_area()
1604 uurb_start < iter->vm_start + iter->size) { in find_memory_area()
1605 if (uurb->buffer_length > iter->vm_start + iter->size - in find_memory_area()
1607 usbm = ERR_PTR(-EINVAL); in find_memory_area()
1610 usbm->urb_use_count++; in find_memory_area()
1615 spin_unlock_irqrestore(&ps->lock, flags); in find_memory_area()
1619 static int proc_do_submiturb(struct usb_dev_state *ps, struct usbdevfs_urb *uurb, in proc_do_submiturb() argument
1628 int i, ret, num_sgs = 0, ifnum = -1; in proc_do_submiturb()
1641 if (uurb->type == USBDEVFS_URB_TYPE_ISO) in proc_do_submiturb()
1644 if (uurb->flags & ~mask) in proc_do_submiturb()
1645 return -EINVAL; in proc_do_submiturb()
1647 if ((unsigned int)uurb->buffer_length >= USBFS_XFER_MAX) in proc_do_submiturb()
1648 return -EINVAL; in proc_do_submiturb()
1649 if (uurb->buffer_length > 0 && !uurb->buffer) in proc_do_submiturb()
1650 return -EINVAL; in proc_do_submiturb()
1651 if (!(uurb->type == USBDEVFS_URB_TYPE_CONTROL && in proc_do_submiturb()
1652 (uurb->endpoint & ~USB_ENDPOINT_DIR_MASK) == 0)) { in proc_do_submiturb()
1653 ifnum = findintfep(ps->dev, uurb->endpoint); in proc_do_submiturb()
1656 ret = checkintf(ps, ifnum); in proc_do_submiturb()
1660 ep = ep_to_host_endpoint(ps->dev, uurb->endpoint); in proc_do_submiturb()
1662 return -ENOENT; in proc_do_submiturb()
1663 is_in = (uurb->endpoint & USB_ENDPOINT_DIR_MASK) != 0; in proc_do_submiturb()
1666 switch (uurb->type) { in proc_do_submiturb()
1668 if (!usb_endpoint_xfer_control(&ep->desc)) in proc_do_submiturb()
1669 return -EINVAL; in proc_do_submiturb()
1671 if (uurb->buffer_length < 8) in proc_do_submiturb()
1672 return -EINVAL; in proc_do_submiturb()
1675 return -ENOMEM; in proc_do_submiturb()
1676 if (copy_from_user(dr, uurb->buffer, 8)) { in proc_do_submiturb()
1677 ret = -EFAULT; in proc_do_submiturb()
1680 if (uurb->buffer_length < (le16_to_cpu(dr->wLength) + 8)) { in proc_do_submiturb()
1681 ret = -EINVAL; in proc_do_submiturb()
1684 ret = check_ctrlrecip(ps, dr->bRequestType, dr->bRequest, in proc_do_submiturb()
1685 le16_to_cpu(dr->wIndex)); in proc_do_submiturb()
1688 uurb->buffer_length = le16_to_cpu(dr->wLength); in proc_do_submiturb()
1689 uurb->buffer += 8; in proc_do_submiturb()
1690 if ((dr->bRequestType & USB_DIR_IN) && uurb->buffer_length) { in proc_do_submiturb()
1692 uurb->endpoint |= USB_DIR_IN; in proc_do_submiturb()
1695 uurb->endpoint &= ~USB_DIR_IN; in proc_do_submiturb()
1699 snoop(&ps->dev->dev, "control urb: bRequestType=%02x " in proc_do_submiturb()
1702 dr->bRequestType, dr->bRequest, in proc_do_submiturb()
1703 __le16_to_cpu(dr->wValue), in proc_do_submiturb()
1704 __le16_to_cpu(dr->wIndex), in proc_do_submiturb()
1705 __le16_to_cpu(dr->wLength)); in proc_do_submiturb()
1714 switch (usb_endpoint_type(&ep->desc)) { in proc_do_submiturb()
1717 return -EINVAL; in proc_do_submiturb()
1719 /* allow single-shot interrupt transfers */ in proc_do_submiturb()
1720 uurb->type = USBDEVFS_URB_TYPE_INTERRUPT; in proc_do_submiturb()
1723 num_sgs = DIV_ROUND_UP(uurb->buffer_length, USB_SG_SIZE); in proc_do_submiturb()
1724 if (num_sgs == 1 || num_sgs > ps->dev->bus->sg_tablesize) in proc_do_submiturb()
1726 if (ep->streams) in proc_do_submiturb()
1727 stream_id = uurb->stream_id; in proc_do_submiturb()
1731 if (!usb_endpoint_xfer_int(&ep->desc)) in proc_do_submiturb()
1732 return -EINVAL; in proc_do_submiturb()
1742 if (uurb->number_of_packets < 1 || in proc_do_submiturb()
1743 uurb->number_of_packets > 128) in proc_do_submiturb()
1744 return -EINVAL; in proc_do_submiturb()
1745 if (!usb_endpoint_xfer_isoc(&ep->desc)) in proc_do_submiturb()
1746 return -EINVAL; in proc_do_submiturb()
1747 number_of_packets = uurb->number_of_packets; in proc_do_submiturb()
1762 ret = -EINVAL; in proc_do_submiturb()
1768 uurb->buffer_length = totlen; in proc_do_submiturb()
1772 return -EINVAL; in proc_do_submiturb()
1775 if (uurb->buffer_length > 0 && in proc_do_submiturb()
1776 !access_ok(uurb->buffer, uurb->buffer_length)) { in proc_do_submiturb()
1777 ret = -EFAULT; in proc_do_submiturb()
1782 ret = -ENOMEM; in proc_do_submiturb()
1786 as->usbm = find_memory_area(ps, uurb); in proc_do_submiturb()
1787 if (IS_ERR(as->usbm)) { in proc_do_submiturb()
1788 ret = PTR_ERR(as->usbm); in proc_do_submiturb()
1789 as->usbm = NULL; in proc_do_submiturb()
1796 if (as->usbm) in proc_do_submiturb()
1800 (as->usbm ? 0 : uurb->buffer_length) + in proc_do_submiturb()
1805 as->mem_usage = u; in proc_do_submiturb()
1808 as->urb->sg = kmalloc_array(num_sgs, in proc_do_submiturb()
1811 if (!as->urb->sg) { in proc_do_submiturb()
1812 ret = -ENOMEM; in proc_do_submiturb()
1815 as->urb->num_sgs = num_sgs; in proc_do_submiturb()
1816 sg_init_table(as->urb->sg, as->urb->num_sgs); in proc_do_submiturb()
1818 totlen = uurb->buffer_length; in proc_do_submiturb()
1819 for (i = 0; i < as->urb->num_sgs; i++) { in proc_do_submiturb()
1823 ret = -ENOMEM; in proc_do_submiturb()
1826 sg_set_buf(&as->urb->sg[i], buf, u); in proc_do_submiturb()
1829 if (copy_from_user(buf, uurb->buffer, u)) { in proc_do_submiturb()
1830 ret = -EFAULT; in proc_do_submiturb()
1833 uurb->buffer += u; in proc_do_submiturb()
1835 totlen -= u; in proc_do_submiturb()
1837 } else if (uurb->buffer_length > 0) { in proc_do_submiturb()
1838 if (as->usbm) { in proc_do_submiturb()
1839 unsigned long uurb_start = (unsigned long)uurb->buffer; in proc_do_submiturb()
1841 as->urb->transfer_buffer = as->usbm->mem + in proc_do_submiturb()
1842 (uurb_start - as->usbm->vm_start); in proc_do_submiturb()
1844 as->urb->transfer_buffer = kmalloc(uurb->buffer_length, in proc_do_submiturb()
1846 if (!as->urb->transfer_buffer) { in proc_do_submiturb()
1847 ret = -ENOMEM; in proc_do_submiturb()
1851 if (copy_from_user(as->urb->transfer_buffer, in proc_do_submiturb()
1852 uurb->buffer, in proc_do_submiturb()
1853 uurb->buffer_length)) { in proc_do_submiturb()
1854 ret = -EFAULT; in proc_do_submiturb()
1857 } else if (uurb->type == USBDEVFS_URB_TYPE_ISO) { in proc_do_submiturb()
1864 memset(as->urb->transfer_buffer, 0, in proc_do_submiturb()
1865 uurb->buffer_length); in proc_do_submiturb()
1869 as->urb->dev = ps->dev; in proc_do_submiturb()
1870 as->urb->pipe = (uurb->type << 30) | in proc_do_submiturb()
1871 __create_pipe(ps->dev, uurb->endpoint & 0xf) | in proc_do_submiturb()
1872 (uurb->endpoint & USB_DIR_IN); in proc_do_submiturb()
1879 if (uurb->flags & USBDEVFS_URB_ISO_ASAP) in proc_do_submiturb()
1881 if (allow_short && uurb->flags & USBDEVFS_URB_SHORT_NOT_OK) in proc_do_submiturb()
1883 if (allow_zero && uurb->flags & USBDEVFS_URB_ZERO_PACKET) in proc_do_submiturb()
1885 if (uurb->flags & USBDEVFS_URB_NO_INTERRUPT) in proc_do_submiturb()
1887 as->urb->transfer_flags = u; in proc_do_submiturb()
1889 if (!allow_short && uurb->flags & USBDEVFS_URB_SHORT_NOT_OK) in proc_do_submiturb()
1890 dev_warn(&ps->dev->dev, "Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.\n"); in proc_do_submiturb()
1891 if (!allow_zero && uurb->flags & USBDEVFS_URB_ZERO_PACKET) in proc_do_submiturb()
1892 dev_warn(&ps->dev->dev, "Requested nonsensical USBDEVFS_URB_ZERO_PACKET.\n"); in proc_do_submiturb()
1894 as->urb->transfer_buffer_length = uurb->buffer_length; in proc_do_submiturb()
1895 as->urb->setup_packet = (unsigned char *)dr; in proc_do_submiturb()
1897 as->urb->start_frame = uurb->start_frame; in proc_do_submiturb()
1898 as->urb->number_of_packets = number_of_packets; in proc_do_submiturb()
1899 as->urb->stream_id = stream_id; in proc_do_submiturb()
1901 if (ep->desc.bInterval) { in proc_do_submiturb()
1902 if (uurb->type == USBDEVFS_URB_TYPE_ISO || in proc_do_submiturb()
1903 ps->dev->speed == USB_SPEED_HIGH || in proc_do_submiturb()
1904 ps->dev->speed >= USB_SPEED_SUPER) in proc_do_submiturb()
1905 as->urb->interval = 1 << in proc_do_submiturb()
1906 min(15, ep->desc.bInterval - 1); in proc_do_submiturb()
1908 as->urb->interval = ep->desc.bInterval; in proc_do_submiturb()
1911 as->urb->context = as; in proc_do_submiturb()
1912 as->urb->complete = async_completed; in proc_do_submiturb()
1914 as->urb->iso_frame_desc[u].offset = totlen; in proc_do_submiturb()
1915 as->urb->iso_frame_desc[u].length = isopkt[u].length; in proc_do_submiturb()
1920 as->ps = ps; in proc_do_submiturb()
1921 as->userurb = arg; in proc_do_submiturb()
1922 as->userurb_sigval = userurb_sigval; in proc_do_submiturb()
1923 if (as->usbm) { in proc_do_submiturb()
1924 unsigned long uurb_start = (unsigned long)uurb->buffer; in proc_do_submiturb()
1926 as->urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP; in proc_do_submiturb()
1927 as->urb->transfer_dma = as->usbm->dma_handle + in proc_do_submiturb()
1928 (uurb_start - as->usbm->vm_start); in proc_do_submiturb()
1929 } else if (is_in && uurb->buffer_length > 0) in proc_do_submiturb()
1930 as->userbuffer = uurb->buffer; in proc_do_submiturb()
1931 as->signr = uurb->signr; in proc_do_submiturb()
1932 as->ifnum = ifnum; in proc_do_submiturb()
1933 as->pid = get_pid(task_pid(current)); in proc_do_submiturb()
1934 as->cred = get_current_cred(); in proc_do_submiturb()
1935 snoop_urb(ps->dev, as->userurb, as->urb->pipe, in proc_do_submiturb()
1936 as->urb->transfer_buffer_length, 0, SUBMIT, in proc_do_submiturb()
1939 snoop_urb_data(as->urb, as->urb->transfer_buffer_length); in proc_do_submiturb()
1943 if (usb_endpoint_xfer_bulk(&ep->desc)) { in proc_do_submiturb()
1944 spin_lock_irq(&ps->lock); in proc_do_submiturb()
1950 as->bulk_addr = usb_endpoint_num(&ep->desc) | in proc_do_submiturb()
1951 ((ep->desc.bEndpointAddress & USB_ENDPOINT_DIR_MASK) in proc_do_submiturb()
1954 /* If this bulk URB is the start of a new transfer, re-enable in proc_do_submiturb()
1957 if (uurb->flags & USBDEVFS_URB_BULK_CONTINUATION) in proc_do_submiturb()
1958 as->bulk_status = AS_CONTINUATION; in proc_do_submiturb()
1960 ps->disabled_bulk_eps &= ~(1 << as->bulk_addr); in proc_do_submiturb()
1965 if (ps->disabled_bulk_eps & (1 << as->bulk_addr)) in proc_do_submiturb()
1966 ret = -EREMOTEIO; in proc_do_submiturb()
1968 ret = usb_submit_urb(as->urb, GFP_ATOMIC); in proc_do_submiturb()
1969 spin_unlock_irq(&ps->lock); in proc_do_submiturb()
1971 ret = usb_submit_urb(as->urb, GFP_KERNEL); in proc_do_submiturb()
1975 dev_printk(KERN_DEBUG, &ps->dev->dev, in proc_do_submiturb()
1977 snoop_urb(ps->dev, as->userurb, as->urb->pipe, in proc_do_submiturb()
1992 static int proc_submiturb(struct usb_dev_state *ps, void __user *arg) in proc_submiturb() argument
1998 return -EFAULT; in proc_submiturb()
2003 return proc_do_submiturb(ps, &uurb, in proc_submiturb()
2004 (((struct usbdevfs_urb __user *)arg)->iso_frame_desc), in proc_submiturb()
2008 static int proc_unlinkurb(struct usb_dev_state *ps, void __user *arg) in proc_unlinkurb() argument
2014 spin_lock_irqsave(&ps->lock, flags); in proc_unlinkurb()
2015 as = async_getpending(ps, arg); in proc_unlinkurb()
2017 spin_unlock_irqrestore(&ps->lock, flags); in proc_unlinkurb()
2018 return -EINVAL; in proc_unlinkurb()
2021 urb = as->urb; in proc_unlinkurb()
2023 spin_unlock_irqrestore(&ps->lock, flags); in proc_unlinkurb()
2035 if (urb->number_of_packets > 0) { in compute_isochronous_actual_length()
2036 urb->actual_length = 0; in compute_isochronous_actual_length()
2037 for (i = 0; i < urb->number_of_packets; i++) in compute_isochronous_actual_length()
2038 urb->actual_length += in compute_isochronous_actual_length()
2039 urb->iso_frame_desc[i].actual_length; in compute_isochronous_actual_length()
2045 struct urb *urb = as->urb; in processcompl()
2046 struct usbdevfs_urb __user *userurb = as->userurb; in processcompl()
2047 void __user *addr = as->userurb; in processcompl()
2051 if (as->userbuffer && urb->actual_length) { in processcompl()
2052 if (copy_urb_data_to_user(as->userbuffer, urb)) in processcompl()
2055 if (put_user(as->status, &userurb->status)) in processcompl()
2057 if (put_user(urb->actual_length, &userurb->actual_length)) in processcompl()
2059 if (put_user(urb->error_count, &userurb->error_count)) in processcompl()
2062 if (usb_endpoint_xfer_isoc(&urb->ep->desc)) { in processcompl()
2063 for (i = 0; i < urb->number_of_packets; i++) { in processcompl()
2064 if (put_user(urb->iso_frame_desc[i].actual_length, in processcompl()
2065 &userurb->iso_frame_desc[i].actual_length)) in processcompl()
2067 if (put_user(urb->iso_frame_desc[i].status, in processcompl()
2068 &userurb->iso_frame_desc[i].status)) in processcompl()
2074 return -EFAULT; in processcompl()
2078 return -EFAULT; in processcompl()
2081 static struct async *reap_as(struct usb_dev_state *ps) in reap_as() argument
2085 struct usb_device *dev = ps->dev; in reap_as()
2087 add_wait_queue(&ps->wait, &wait); in reap_as()
2090 as = async_getcompleted(ps); in reap_as()
2091 if (as || !connected(ps)) in reap_as()
2099 remove_wait_queue(&ps->wait, &wait); in reap_as()
2104 static int proc_reapurb(struct usb_dev_state *ps, void __user *arg) in proc_reapurb() argument
2106 struct async *as = reap_as(ps); in proc_reapurb()
2111 snoop(&ps->dev->dev, "reap %px\n", as->userurb); in proc_reapurb()
2117 return -EINTR; in proc_reapurb()
2118 return -ENODEV; in proc_reapurb()
2121 static int proc_reapurbnonblock(struct usb_dev_state *ps, void __user *arg) in proc_reapurbnonblock() argument
2126 as = async_getcompleted(ps); in proc_reapurbnonblock()
2128 snoop(&ps->dev->dev, "reap %px\n", as->userurb); in proc_reapurbnonblock()
2132 retval = (connected(ps) ? -EAGAIN : -ENODEV); in proc_reapurbnonblock()
2138 static int proc_control_compat(struct usb_dev_state *ps, in proc_control_compat() argument
2144 if (copy_from_user(&ctrl, p32, sizeof(*p32) - sizeof(compat_caddr_t)) || in proc_control_compat()
2145 get_user(udata, &p32->data)) in proc_control_compat()
2146 return -EFAULT; in proc_control_compat()
2148 return do_proc_control(ps, &ctrl); in proc_control_compat()
2151 static int proc_bulk_compat(struct usb_dev_state *ps, in proc_bulk_compat() argument
2157 if (get_user(bulk.ep, &p32->ep) || in proc_bulk_compat()
2158 get_user(bulk.len, &p32->len) || in proc_bulk_compat()
2159 get_user(bulk.timeout, &p32->timeout) || in proc_bulk_compat()
2160 get_user(addr, &p32->data)) in proc_bulk_compat()
2161 return -EFAULT; in proc_bulk_compat()
2163 return do_proc_bulk(ps, &bulk); in proc_bulk_compat()
2166 static int proc_disconnectsignal_compat(struct usb_dev_state *ps, void __user *arg) in proc_disconnectsignal_compat() argument
2171 return -EFAULT; in proc_disconnectsignal_compat()
2172 ps->discsignr = ds.signr; in proc_disconnectsignal_compat()
2173 ps->disccontext.sival_int = ds.context; in proc_disconnectsignal_compat()
2182 return -EFAULT; in get_urb32()
2183 kurb->type = urb32.type; in get_urb32()
2184 kurb->endpoint = urb32.endpoint; in get_urb32()
2185 kurb->status = urb32.status; in get_urb32()
2186 kurb->flags = urb32.flags; in get_urb32()
2187 kurb->buffer = compat_ptr(urb32.buffer); in get_urb32()
2188 kurb->buffer_length = urb32.buffer_length; in get_urb32()
2189 kurb->actual_length = urb32.actual_length; in get_urb32()
2190 kurb->start_frame = urb32.start_frame; in get_urb32()
2191 kurb->number_of_packets = urb32.number_of_packets; in get_urb32()
2192 kurb->error_count = urb32.error_count; in get_urb32()
2193 kurb->signr = urb32.signr; in get_urb32()
2194 kurb->usercontext = compat_ptr(urb32.usercontext); in get_urb32()
2198 static int proc_submiturb_compat(struct usb_dev_state *ps, void __user *arg) in proc_submiturb_compat() argument
2204 return -EFAULT; in proc_submiturb_compat()
2209 return proc_do_submiturb(ps, &uurb, in proc_submiturb_compat()
2210 ((struct usbdevfs_urb32 __user *)arg)->iso_frame_desc, in proc_submiturb_compat()
2216 struct urb *urb = as->urb; in processcompl_compat()
2217 struct usbdevfs_urb32 __user *userurb = as->userurb; in processcompl_compat()
2218 void __user *addr = as->userurb; in processcompl_compat()
2222 if (as->userbuffer && urb->actual_length) { in processcompl_compat()
2223 if (copy_urb_data_to_user(as->userbuffer, urb)) in processcompl_compat()
2224 return -EFAULT; in processcompl_compat()
2226 if (put_user(as->status, &userurb->status)) in processcompl_compat()
2227 return -EFAULT; in processcompl_compat()
2228 if (put_user(urb->actual_length, &userurb->actual_length)) in processcompl_compat()
2229 return -EFAULT; in processcompl_compat()
2230 if (put_user(urb->error_count, &userurb->error_count)) in processcompl_compat()
2231 return -EFAULT; in processcompl_compat()
2233 if (usb_endpoint_xfer_isoc(&urb->ep->desc)) { in processcompl_compat()
2234 for (i = 0; i < urb->number_of_packets; i++) { in processcompl_compat()
2235 if (put_user(urb->iso_frame_desc[i].actual_length, in processcompl_compat()
2236 &userurb->iso_frame_desc[i].actual_length)) in processcompl_compat()
2237 return -EFAULT; in processcompl_compat()
2238 if (put_user(urb->iso_frame_desc[i].status, in processcompl_compat()
2239 &userurb->iso_frame_desc[i].status)) in processcompl_compat()
2240 return -EFAULT; in processcompl_compat()
2245 return -EFAULT; in processcompl_compat()
2249 static int proc_reapurb_compat(struct usb_dev_state *ps, void __user *arg) in proc_reapurb_compat() argument
2251 struct async *as = reap_as(ps); in proc_reapurb_compat()
2256 snoop(&ps->dev->dev, "reap %px\n", as->userurb); in proc_reapurb_compat()
2262 return -EINTR; in proc_reapurb_compat()
2263 return -ENODEV; in proc_reapurb_compat()
2266 static int proc_reapurbnonblock_compat(struct usb_dev_state *ps, void __user *arg) in proc_reapurbnonblock_compat() argument
2271 as = async_getcompleted(ps); in proc_reapurbnonblock_compat()
2273 snoop(&ps->dev->dev, "reap %px\n", as->userurb); in proc_reapurbnonblock_compat()
2277 retval = (connected(ps) ? -EAGAIN : -ENODEV); in proc_reapurbnonblock_compat()
2285 static int proc_disconnectsignal(struct usb_dev_state *ps, void __user *arg) in proc_disconnectsignal() argument
2290 return -EFAULT; in proc_disconnectsignal()
2291 ps->discsignr = ds.signr; in proc_disconnectsignal()
2292 ps->disccontext.sival_ptr = ds.context; in proc_disconnectsignal()
2296 static int proc_claiminterface(struct usb_dev_state *ps, void __user *arg) in proc_claiminterface() argument
2301 return -EFAULT; in proc_claiminterface()
2302 return claimintf(ps, ifnum); in proc_claiminterface()
2305 static int proc_releaseinterface(struct usb_dev_state *ps, void __user *arg) in proc_releaseinterface() argument
2311 return -EFAULT; in proc_releaseinterface()
2312 ret = releaseintf(ps, ifnum); in proc_releaseinterface()
2315 destroy_async_on_interface(ps, ifnum); in proc_releaseinterface()
2319 static int proc_ioctl(struct usb_dev_state *ps, struct usbdevfs_ioctl *ctl) in proc_ioctl() argument
2327 if (ps->privileges_dropped) in proc_ioctl()
2328 return -EACCES; in proc_ioctl()
2330 if (!connected(ps)) in proc_ioctl()
2331 return -ENODEV; in proc_ioctl()
2334 size = _IOC_SIZE(ctl->ioctl_code); in proc_ioctl()
2338 return -ENOMEM; in proc_ioctl()
2339 if ((_IOC_DIR(ctl->ioctl_code) & _IOC_WRITE)) { in proc_ioctl()
2340 if (copy_from_user(buf, ctl->data, size)) { in proc_ioctl()
2342 return -EFAULT; in proc_ioctl()
2349 if (ps->dev->state != USB_STATE_CONFIGURED) in proc_ioctl()
2350 retval = -EHOSTUNREACH; in proc_ioctl()
2351 else if (!(intf = usb_ifnum_to_if(ps->dev, ctl->ifno))) in proc_ioctl()
2352 retval = -EINVAL; in proc_ioctl()
2353 else switch (ctl->ioctl_code) { in proc_ioctl()
2357 if (intf->dev.driver) { in proc_ioctl()
2358 driver = to_usb_driver(intf->dev.driver); in proc_ioctl()
2359 dev_dbg(&intf->dev, "disconnect by usbfs\n"); in proc_ioctl()
2362 retval = -ENODATA; in proc_ioctl()
2367 if (!intf->dev.driver) in proc_ioctl()
2368 retval = device_attach(&intf->dev); in proc_ioctl()
2370 retval = -EBUSY; in proc_ioctl()
2375 if (intf->dev.driver) in proc_ioctl()
2376 driver = to_usb_driver(intf->dev.driver); in proc_ioctl()
2377 if (driver == NULL || driver->unlocked_ioctl == NULL) { in proc_ioctl()
2378 retval = -ENOTTY; in proc_ioctl()
2380 retval = driver->unlocked_ioctl(intf, ctl->ioctl_code, buf); in proc_ioctl()
2381 if (retval == -ENOIOCTLCMD) in proc_ioctl()
2382 retval = -ENOTTY; in proc_ioctl()
2388 && (_IOC_DIR(ctl->ioctl_code) & _IOC_READ) != 0 in proc_ioctl()
2390 && copy_to_user(ctl->data, buf, size) != 0) in proc_ioctl()
2391 retval = -EFAULT; in proc_ioctl()
2397 static int proc_ioctl_default(struct usb_dev_state *ps, void __user *arg) in proc_ioctl_default() argument
2402 return -EFAULT; in proc_ioctl_default()
2403 return proc_ioctl(ps, &ctrl); in proc_ioctl_default()
2407 static int proc_ioctl_compat(struct usb_dev_state *ps, compat_uptr_t arg) in proc_ioctl_compat() argument
2413 return -EFAULT; in proc_ioctl_compat()
2417 return proc_ioctl(ps, &ctrl); in proc_ioctl_compat()
2421 static int proc_claim_port(struct usb_dev_state *ps, void __user *arg) in proc_claim_port() argument
2427 return -EFAULT; in proc_claim_port()
2428 rc = usb_hub_claim_port(ps->dev, portnum, ps); in proc_claim_port()
2430 snoop(&ps->dev->dev, "port %d claimed by process %d: %s\n", in proc_claim_port()
2431 portnum, task_pid_nr(current), current->comm); in proc_claim_port()
2435 static int proc_release_port(struct usb_dev_state *ps, void __user *arg) in proc_release_port() argument
2440 return -EFAULT; in proc_release_port()
2441 return usb_hub_release_port(ps->dev, portnum, ps); in proc_release_port()
2444 static int proc_get_capabilities(struct usb_dev_state *ps, void __user *arg) in proc_get_capabilities() argument
2452 if (!ps->dev->bus->no_stop_on_short) in proc_get_capabilities()
2454 if (ps->dev->bus->sg_tablesize) in proc_get_capabilities()
2458 return -EFAULT; in proc_get_capabilities()
2463 static int proc_disconnect_claim(struct usb_dev_state *ps, void __user *arg) in proc_disconnect_claim() argument
2469 return -EFAULT; in proc_disconnect_claim()
2471 intf = usb_ifnum_to_if(ps->dev, dc.interface); in proc_disconnect_claim()
2473 return -EINVAL; in proc_disconnect_claim()
2475 if (intf->dev.driver) { in proc_disconnect_claim()
2476 struct usb_driver *driver = to_usb_driver(intf->dev.driver); in proc_disconnect_claim()
2478 if (ps->privileges_dropped) in proc_disconnect_claim()
2479 return -EACCES; in proc_disconnect_claim()
2482 strncmp(dc.driver, intf->dev.driver->name, in proc_disconnect_claim()
2484 return -EBUSY; in proc_disconnect_claim()
2487 strncmp(dc.driver, intf->dev.driver->name, in proc_disconnect_claim()
2489 return -EBUSY; in proc_disconnect_claim()
2491 dev_dbg(&intf->dev, "disconnect by usbfs\n"); in proc_disconnect_claim()
2495 return claimintf(ps, dc.interface); in proc_disconnect_claim()
2498 static int proc_alloc_streams(struct usb_dev_state *ps, void __user *arg) in proc_alloc_streams() argument
2505 r = parse_usbdevfs_streams(ps, arg, &num_streams, &num_eps, in proc_alloc_streams()
2510 destroy_async_on_interface(ps, in proc_alloc_streams()
2511 intf->altsetting[0].desc.bInterfaceNumber); in proc_alloc_streams()
2518 static int proc_free_streams(struct usb_dev_state *ps, void __user *arg) in proc_free_streams() argument
2525 r = parse_usbdevfs_streams(ps, arg, NULL, &num_eps, &eps, &intf); in proc_free_streams()
2529 destroy_async_on_interface(ps, in proc_free_streams()
2530 intf->altsetting[0].desc.bInterfaceNumber); in proc_free_streams()
2537 static int proc_drop_privileges(struct usb_dev_state *ps, void __user *arg) in proc_drop_privileges() argument
2542 return -EFAULT; in proc_drop_privileges()
2548 ps->interface_allowed_mask &= data; in proc_drop_privileges()
2549 ps->privileges_dropped = true; in proc_drop_privileges()
2554 static int proc_forbid_suspend(struct usb_dev_state *ps) in proc_forbid_suspend() argument
2558 if (ps->suspend_allowed) { in proc_forbid_suspend()
2559 ret = usb_autoresume_device(ps->dev); in proc_forbid_suspend()
2561 ps->suspend_allowed = false; in proc_forbid_suspend()
2562 else if (ret != -ENODEV) in proc_forbid_suspend()
2563 ret = -EIO; in proc_forbid_suspend()
2568 static int proc_allow_suspend(struct usb_dev_state *ps) in proc_allow_suspend() argument
2570 if (!connected(ps)) in proc_allow_suspend()
2571 return -ENODEV; in proc_allow_suspend()
2573 WRITE_ONCE(ps->not_yet_resumed, 1); in proc_allow_suspend()
2574 if (!ps->suspend_allowed) { in proc_allow_suspend()
2575 usb_autosuspend_device(ps->dev); in proc_allow_suspend()
2576 ps->suspend_allowed = true; in proc_allow_suspend()
2581 static int proc_wait_for_resume(struct usb_dev_state *ps) in proc_wait_for_resume() argument
2585 usb_unlock_device(ps->dev); in proc_wait_for_resume()
2586 ret = wait_event_interruptible(ps->wait_for_resume, in proc_wait_for_resume()
2587 READ_ONCE(ps->not_yet_resumed) == 0); in proc_wait_for_resume()
2588 usb_lock_device(ps->dev); in proc_wait_for_resume()
2591 return -EINTR; in proc_wait_for_resume()
2592 return proc_forbid_suspend(ps); in proc_wait_for_resume()
2603 struct usb_dev_state *ps = file->private_data; in usbdev_do_ioctl() local
2605 struct usb_device *dev = ps->dev; in usbdev_do_ioctl()
2606 int ret = -ENOTTY; in usbdev_do_ioctl()
2608 if (!(file->f_mode & FMODE_WRITE)) in usbdev_do_ioctl()
2609 return -EPERM; in usbdev_do_ioctl()
2616 snoop(&dev->dev, "%s: REAPURB\n", __func__); in usbdev_do_ioctl()
2617 ret = proc_reapurb(ps, p); in usbdev_do_ioctl()
2621 snoop(&dev->dev, "%s: REAPURBNDELAY\n", __func__); in usbdev_do_ioctl()
2622 ret = proc_reapurbnonblock(ps, p); in usbdev_do_ioctl()
2627 snoop(&dev->dev, "%s: REAPURB32\n", __func__); in usbdev_do_ioctl()
2628 ret = proc_reapurb_compat(ps, p); in usbdev_do_ioctl()
2632 snoop(&dev->dev, "%s: REAPURBNDELAY32\n", __func__); in usbdev_do_ioctl()
2633 ret = proc_reapurbnonblock_compat(ps, p); in usbdev_do_ioctl()
2638 if (!connected(ps)) { in usbdev_do_ioctl()
2640 return -ENODEV; in usbdev_do_ioctl()
2645 snoop(&dev->dev, "%s: CONTROL\n", __func__); in usbdev_do_ioctl()
2646 ret = proc_control(ps, p); in usbdev_do_ioctl()
2653 snoop(&dev->dev, "%s: BULK\n", __func__); in usbdev_do_ioctl()
2654 ret = proc_bulk(ps, p); in usbdev_do_ioctl()
2661 snoop(&dev->dev, "%s: RESETEP\n", __func__); in usbdev_do_ioctl()
2662 ret = proc_resetep(ps, p); in usbdev_do_ioctl()
2669 snoop(&dev->dev, "%s: RESET\n", __func__); in usbdev_do_ioctl()
2670 ret = proc_resetdevice(ps); in usbdev_do_ioctl()
2674 snoop(&dev->dev, "%s: CLEAR_HALT\n", __func__); in usbdev_do_ioctl()
2675 ret = proc_clearhalt(ps, p); in usbdev_do_ioctl()
2682 snoop(&dev->dev, "%s: GETDRIVER\n", __func__); in usbdev_do_ioctl()
2683 ret = proc_getdriver(ps, p); in usbdev_do_ioctl()
2687 snoop(&dev->dev, "%s: CONNECTINFO\n", __func__); in usbdev_do_ioctl()
2688 ret = proc_connectinfo(ps, p); in usbdev_do_ioctl()
2692 snoop(&dev->dev, "%s: SETINTERFACE\n", __func__); in usbdev_do_ioctl()
2693 ret = proc_setintf(ps, p); in usbdev_do_ioctl()
2697 snoop(&dev->dev, "%s: SETCONFIGURATION\n", __func__); in usbdev_do_ioctl()
2698 ret = proc_setconfig(ps, p); in usbdev_do_ioctl()
2702 snoop(&dev->dev, "%s: SUBMITURB\n", __func__); in usbdev_do_ioctl()
2703 ret = proc_submiturb(ps, p); in usbdev_do_ioctl()
2711 snoop(&dev->dev, "%s: CONTROL32\n", __func__); in usbdev_do_ioctl()
2712 ret = proc_control_compat(ps, p); in usbdev_do_ioctl()
2719 snoop(&dev->dev, "%s: BULK32\n", __func__); in usbdev_do_ioctl()
2720 ret = proc_bulk_compat(ps, p); in usbdev_do_ioctl()
2727 snoop(&dev->dev, "%s: DISCSIGNAL32\n", __func__); in usbdev_do_ioctl()
2728 ret = proc_disconnectsignal_compat(ps, p); in usbdev_do_ioctl()
2732 snoop(&dev->dev, "%s: SUBMITURB32\n", __func__); in usbdev_do_ioctl()
2733 ret = proc_submiturb_compat(ps, p); in usbdev_do_ioctl()
2740 snoop(&dev->dev, "%s: IOCTL32\n", __func__); in usbdev_do_ioctl()
2741 ret = proc_ioctl_compat(ps, ptr_to_compat(p)); in usbdev_do_ioctl()
2746 snoop(&dev->dev, "%s: DISCARDURB %px\n", __func__, p); in usbdev_do_ioctl()
2747 ret = proc_unlinkurb(ps, p); in usbdev_do_ioctl()
2751 snoop(&dev->dev, "%s: DISCSIGNAL\n", __func__); in usbdev_do_ioctl()
2752 ret = proc_disconnectsignal(ps, p); in usbdev_do_ioctl()
2756 snoop(&dev->dev, "%s: CLAIMINTERFACE\n", __func__); in usbdev_do_ioctl()
2757 ret = proc_claiminterface(ps, p); in usbdev_do_ioctl()
2761 snoop(&dev->dev, "%s: RELEASEINTERFACE\n", __func__); in usbdev_do_ioctl()
2762 ret = proc_releaseinterface(ps, p); in usbdev_do_ioctl()
2766 snoop(&dev->dev, "%s: IOCTL\n", __func__); in usbdev_do_ioctl()
2767 ret = proc_ioctl_default(ps, p); in usbdev_do_ioctl()
2771 snoop(&dev->dev, "%s: CLAIM_PORT\n", __func__); in usbdev_do_ioctl()
2772 ret = proc_claim_port(ps, p); in usbdev_do_ioctl()
2776 snoop(&dev->dev, "%s: RELEASE_PORT\n", __func__); in usbdev_do_ioctl()
2777 ret = proc_release_port(ps, p); in usbdev_do_ioctl()
2780 ret = proc_get_capabilities(ps, p); in usbdev_do_ioctl()
2783 ret = proc_disconnect_claim(ps, p); in usbdev_do_ioctl()
2786 ret = proc_alloc_streams(ps, p); in usbdev_do_ioctl()
2789 ret = proc_free_streams(ps, p); in usbdev_do_ioctl()
2792 ret = proc_drop_privileges(ps, p); in usbdev_do_ioctl()
2795 ret = ps->dev->speed; in usbdev_do_ioctl()
2798 ret = proc_forbid_suspend(ps); in usbdev_do_ioctl()
2801 ret = proc_allow_suspend(ps); in usbdev_do_ioctl()
2804 ret = proc_wait_for_resume(ps); in usbdev_do_ioctl()
2808 /* Handle variable-length commands */ in usbdev_do_ioctl()
2811 ret = proc_conninfo_ex(ps, p, _IOC_SIZE(cmd)); in usbdev_do_ioctl()
2832 /* No kernel lock - fine */
2836 struct usb_dev_state *ps = file->private_data; in usbdev_poll() local
2839 poll_wait(file, &ps->wait, wait); in usbdev_poll()
2840 if (file->f_mode & FMODE_WRITE && !list_empty(&ps->async_completed)) in usbdev_poll()
2842 if (!connected(ps)) in usbdev_poll()
2844 if (list_empty(&ps->list)) in usbdev_poll()
2863 struct usb_dev_state *ps; in usbdev_remove() local
2867 while (!list_empty(&udev->filelist)) { in usbdev_remove()
2868 ps = list_entry(udev->filelist.next, struct usb_dev_state, list); in usbdev_remove()
2869 destroy_all_async(ps); in usbdev_remove()
2870 wake_up_all(&ps->wait); in usbdev_remove()
2871 WRITE_ONCE(ps->not_yet_resumed, 0); in usbdev_remove()
2872 wake_up_all(&ps->wait_for_resume); in usbdev_remove()
2873 list_del_init(&ps->list); in usbdev_remove()
2874 if (ps->discsignr) in usbdev_remove()
2875 kill_pid_usb_asyncio(ps->discsignr, EPIPE, ps->disccontext, in usbdev_remove()
2876 ps->disc_pid, ps->cred); in usbdev_remove()