]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blame - drivers/infiniband/core/ucma.c
RDMA/ucma: Fix struct ucma_event leak when backlog is full
[mirror_ubuntu-jammy-kernel.git] / drivers / infiniband / core / ucma.c
CommitLineData
75216638
SH
1/*
2 * Copyright (c) 2005-2006 Intel Corporation. All rights reserved.
3 *
4 * This software is available to you under a choice of one of two
5 * licenses. You may choose to be licensed under the terms of the GNU
6 * General Public License (GPL) Version 2, available from the file
7 * COPYING in the main directory of this source tree, or the
8 * OpenIB.org BSD license below:
9 *
10 * Redistribution and use in source and binary forms, with or
11 * without modification, are permitted provided that the following
12 * conditions are met:
13 *
14 * - Redistributions of source code must retain the above
15 * copyright notice, this list of conditions and the following
16 * disclaimer.
17 *
18 * - Redistributions in binary form must reproduce the above
19 * copyright notice, this list of conditions and the following
20 * disclaimer in the documentation and/or other materials
21 * provided with the distribution.
22 *
23 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
27 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
28 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
29 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
30 * SOFTWARE.
31 */
32
33#include <linux/completion.h>
34#include <linux/mutex.h>
35#include <linux/poll.h>
36#include <linux/idr.h>
37#include <linux/in.h>
38#include <linux/in6.h>
39#include <linux/miscdevice.h>
40
41#include <rdma/rdma_user_cm.h>
42#include <rdma/ib_marshall.h>
43#include <rdma/rdma_cm.h>
44
45MODULE_AUTHOR("Sean Hefty");
46MODULE_DESCRIPTION("RDMA Userspace Connection Manager Access");
47MODULE_LICENSE("Dual BSD/GPL");
48
49enum {
50 UCMA_MAX_BACKLOG = 128
51};
52
53struct ucma_file {
54 struct mutex mut;
55 struct file *filp;
56 struct list_head ctx_list;
57 struct list_head event_list;
58 wait_queue_head_t poll_wait;
59};
60
61struct ucma_context {
62 int id;
63 struct completion comp;
64 atomic_t ref;
65 int events_reported;
66 int backlog;
67
68 struct ucma_file *file;
69 struct rdma_cm_id *cm_id;
70 u64 uid;
71
72 struct list_head list;
73};
74
75struct ucma_event {
76 struct ucma_context *ctx;
77 struct list_head list;
78 struct rdma_cm_id *cm_id;
79 struct rdma_ucm_event_resp resp;
80};
81
82static DEFINE_MUTEX(mut);
83static DEFINE_IDR(ctx_idr);
84
85static inline struct ucma_context *_ucma_find_context(int id,
86 struct ucma_file *file)
87{
88 struct ucma_context *ctx;
89
90 ctx = idr_find(&ctx_idr, id);
91 if (!ctx)
92 ctx = ERR_PTR(-ENOENT);
93 else if (ctx->file != file)
94 ctx = ERR_PTR(-EINVAL);
95 return ctx;
96}
97
98static struct ucma_context *ucma_get_ctx(struct ucma_file *file, int id)
99{
100 struct ucma_context *ctx;
101
102 mutex_lock(&mut);
103 ctx = _ucma_find_context(id, file);
104 if (!IS_ERR(ctx))
105 atomic_inc(&ctx->ref);
106 mutex_unlock(&mut);
107 return ctx;
108}
109
110static void ucma_put_ctx(struct ucma_context *ctx)
111{
112 if (atomic_dec_and_test(&ctx->ref))
113 complete(&ctx->comp);
114}
115
116static struct ucma_context *ucma_alloc_ctx(struct ucma_file *file)
117{
118 struct ucma_context *ctx;
119 int ret;
120
121 ctx = kzalloc(sizeof(*ctx), GFP_KERNEL);
122 if (!ctx)
123 return NULL;
124
125 atomic_set(&ctx->ref, 1);
126 init_completion(&ctx->comp);
127 ctx->file = file;
128
129 do {
130 ret = idr_pre_get(&ctx_idr, GFP_KERNEL);
131 if (!ret)
132 goto error;
133
134 mutex_lock(&mut);
135 ret = idr_get_new(&ctx_idr, ctx, &ctx->id);
136 mutex_unlock(&mut);
137 } while (ret == -EAGAIN);
138
139 if (ret)
140 goto error;
141
142 list_add_tail(&ctx->list, &file->ctx_list);
143 return ctx;
144
145error:
146 kfree(ctx);
147 return NULL;
148}
149
150static void ucma_copy_conn_event(struct rdma_ucm_conn_param *dst,
151 struct rdma_conn_param *src)
152{
153 if (src->private_data_len)
154 memcpy(dst->private_data, src->private_data,
155 src->private_data_len);
156 dst->private_data_len = src->private_data_len;
157 dst->responder_resources =src->responder_resources;
158 dst->initiator_depth = src->initiator_depth;
159 dst->flow_control = src->flow_control;
160 dst->retry_count = src->retry_count;
161 dst->rnr_retry_count = src->rnr_retry_count;
162 dst->srq = src->srq;
163 dst->qp_num = src->qp_num;
164}
165
166static void ucma_copy_ud_event(struct rdma_ucm_ud_param *dst,
167 struct rdma_ud_param *src)
168{
169 if (src->private_data_len)
170 memcpy(dst->private_data, src->private_data,
171 src->private_data_len);
172 dst->private_data_len = src->private_data_len;
173 ib_copy_ah_attr_to_user(&dst->ah_attr, &src->ah_attr);
174 dst->qp_num = src->qp_num;
175 dst->qkey = src->qkey;
176}
177
178static void ucma_set_event_context(struct ucma_context *ctx,
179 struct rdma_cm_event *event,
180 struct ucma_event *uevent)
181{
182 uevent->ctx = ctx;
183 uevent->resp.uid = ctx->uid;
184 uevent->resp.id = ctx->id;
185}
186
187static int ucma_event_handler(struct rdma_cm_id *cm_id,
188 struct rdma_cm_event *event)
189{
190 struct ucma_event *uevent;
191 struct ucma_context *ctx = cm_id->context;
192 int ret = 0;
193
194 uevent = kzalloc(sizeof(*uevent), GFP_KERNEL);
195 if (!uevent)
196 return event->event == RDMA_CM_EVENT_CONNECT_REQUEST;
197
198 uevent->cm_id = cm_id;
199 ucma_set_event_context(ctx, event, uevent);
200 uevent->resp.event = event->event;
201 uevent->resp.status = event->status;
202 if (cm_id->ps == RDMA_PS_UDP)
203 ucma_copy_ud_event(&uevent->resp.param.ud, &event->param.ud);
204 else
205 ucma_copy_conn_event(&uevent->resp.param.conn,
206 &event->param.conn);
207
208 mutex_lock(&ctx->file->mut);
209 if (event->event == RDMA_CM_EVENT_CONNECT_REQUEST) {
210 if (!ctx->backlog) {
211 ret = -EDQUOT;
30a5ec98 212 kfree(uevent);
75216638
SH
213 goto out;
214 }
215 ctx->backlog--;
216 }
217 list_add_tail(&uevent->list, &ctx->file->event_list);
218 wake_up_interruptible(&ctx->file->poll_wait);
219out:
220 mutex_unlock(&ctx->file->mut);
221 return ret;
222}
223
224static ssize_t ucma_get_event(struct ucma_file *file, const char __user *inbuf,
225 int in_len, int out_len)
226{
227 struct ucma_context *ctx;
228 struct rdma_ucm_get_event cmd;
229 struct ucma_event *uevent;
230 int ret = 0;
231 DEFINE_WAIT(wait);
232
233 if (out_len < sizeof uevent->resp)
234 return -ENOSPC;
235
236 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
237 return -EFAULT;
238
239 mutex_lock(&file->mut);
240 while (list_empty(&file->event_list)) {
241 if (file->filp->f_flags & O_NONBLOCK) {
242 ret = -EAGAIN;
243 break;
244 }
245
246 if (signal_pending(current)) {
247 ret = -ERESTARTSYS;
248 break;
249 }
250
251 prepare_to_wait(&file->poll_wait, &wait, TASK_INTERRUPTIBLE);
252 mutex_unlock(&file->mut);
253 schedule();
254 mutex_lock(&file->mut);
255 finish_wait(&file->poll_wait, &wait);
256 }
257
258 if (ret)
259 goto done;
260
261 uevent = list_entry(file->event_list.next, struct ucma_event, list);
262
263 if (uevent->resp.event == RDMA_CM_EVENT_CONNECT_REQUEST) {
264 ctx = ucma_alloc_ctx(file);
265 if (!ctx) {
266 ret = -ENOMEM;
267 goto done;
268 }
269 uevent->ctx->backlog++;
270 ctx->cm_id = uevent->cm_id;
271 ctx->cm_id->context = ctx;
272 uevent->resp.id = ctx->id;
273 }
274
275 if (copy_to_user((void __user *)(unsigned long)cmd.response,
276 &uevent->resp, sizeof uevent->resp)) {
277 ret = -EFAULT;
278 goto done;
279 }
280
281 list_del(&uevent->list);
282 uevent->ctx->events_reported++;
283 kfree(uevent);
284done:
285 mutex_unlock(&file->mut);
286 return ret;
287}
288
289static ssize_t ucma_create_id(struct ucma_file *file,
290 const char __user *inbuf,
291 int in_len, int out_len)
292{
293 struct rdma_ucm_create_id cmd;
294 struct rdma_ucm_create_id_resp resp;
295 struct ucma_context *ctx;
296 int ret;
297
298 if (out_len < sizeof(resp))
299 return -ENOSPC;
300
301 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
302 return -EFAULT;
303
304 mutex_lock(&file->mut);
305 ctx = ucma_alloc_ctx(file);
306 mutex_unlock(&file->mut);
307 if (!ctx)
308 return -ENOMEM;
309
310 ctx->uid = cmd.uid;
311 ctx->cm_id = rdma_create_id(ucma_event_handler, ctx, cmd.ps);
312 if (IS_ERR(ctx->cm_id)) {
313 ret = PTR_ERR(ctx->cm_id);
314 goto err1;
315 }
316
317 resp.id = ctx->id;
318 if (copy_to_user((void __user *)(unsigned long)cmd.response,
319 &resp, sizeof(resp))) {
320 ret = -EFAULT;
321 goto err2;
322 }
323 return 0;
324
325err2:
326 rdma_destroy_id(ctx->cm_id);
327err1:
328 mutex_lock(&mut);
329 idr_remove(&ctx_idr, ctx->id);
330 mutex_unlock(&mut);
331 kfree(ctx);
332 return ret;
333}
334
335static void ucma_cleanup_events(struct ucma_context *ctx)
336{
337 struct ucma_event *uevent, *tmp;
338
339 list_for_each_entry_safe(uevent, tmp, &ctx->file->event_list, list) {
340 if (uevent->ctx != ctx)
341 continue;
342
343 list_del(&uevent->list);
344
345 /* clear incoming connections. */
346 if (uevent->resp.event == RDMA_CM_EVENT_CONNECT_REQUEST)
347 rdma_destroy_id(uevent->cm_id);
348
349 kfree(uevent);
350 }
351}
352
353static int ucma_free_ctx(struct ucma_context *ctx)
354{
355 int events_reported;
356
357 /* No new events will be generated after destroying the id. */
358 rdma_destroy_id(ctx->cm_id);
359
360 /* Cleanup events not yet reported to the user. */
361 mutex_lock(&ctx->file->mut);
362 ucma_cleanup_events(ctx);
363 list_del(&ctx->list);
364 mutex_unlock(&ctx->file->mut);
365
366 events_reported = ctx->events_reported;
367 kfree(ctx);
368 return events_reported;
369}
370
371static ssize_t ucma_destroy_id(struct ucma_file *file, const char __user *inbuf,
372 int in_len, int out_len)
373{
374 struct rdma_ucm_destroy_id cmd;
375 struct rdma_ucm_destroy_id_resp resp;
376 struct ucma_context *ctx;
377 int ret = 0;
378
379 if (out_len < sizeof(resp))
380 return -ENOSPC;
381
382 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
383 return -EFAULT;
384
385 mutex_lock(&mut);
386 ctx = _ucma_find_context(cmd.id, file);
387 if (!IS_ERR(ctx))
388 idr_remove(&ctx_idr, ctx->id);
389 mutex_unlock(&mut);
390
391 if (IS_ERR(ctx))
392 return PTR_ERR(ctx);
393
394 ucma_put_ctx(ctx);
395 wait_for_completion(&ctx->comp);
396 resp.events_reported = ucma_free_ctx(ctx);
397
398 if (copy_to_user((void __user *)(unsigned long)cmd.response,
399 &resp, sizeof(resp)))
400 ret = -EFAULT;
401
402 return ret;
403}
404
405static ssize_t ucma_bind_addr(struct ucma_file *file, const char __user *inbuf,
406 int in_len, int out_len)
407{
408 struct rdma_ucm_bind_addr cmd;
409 struct ucma_context *ctx;
410 int ret;
411
412 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
413 return -EFAULT;
414
415 ctx = ucma_get_ctx(file, cmd.id);
416 if (IS_ERR(ctx))
417 return PTR_ERR(ctx);
418
419 ret = rdma_bind_addr(ctx->cm_id, (struct sockaddr *) &cmd.addr);
420 ucma_put_ctx(ctx);
421 return ret;
422}
423
424static ssize_t ucma_resolve_addr(struct ucma_file *file,
425 const char __user *inbuf,
426 int in_len, int out_len)
427{
428 struct rdma_ucm_resolve_addr cmd;
429 struct ucma_context *ctx;
430 int ret;
431
432 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
433 return -EFAULT;
434
435 ctx = ucma_get_ctx(file, cmd.id);
436 if (IS_ERR(ctx))
437 return PTR_ERR(ctx);
438
439 ret = rdma_resolve_addr(ctx->cm_id, (struct sockaddr *) &cmd.src_addr,
440 (struct sockaddr *) &cmd.dst_addr,
441 cmd.timeout_ms);
442 ucma_put_ctx(ctx);
443 return ret;
444}
445
446static ssize_t ucma_resolve_route(struct ucma_file *file,
447 const char __user *inbuf,
448 int in_len, int out_len)
449{
450 struct rdma_ucm_resolve_route cmd;
451 struct ucma_context *ctx;
452 int ret;
453
454 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
455 return -EFAULT;
456
457 ctx = ucma_get_ctx(file, cmd.id);
458 if (IS_ERR(ctx))
459 return PTR_ERR(ctx);
460
461 ret = rdma_resolve_route(ctx->cm_id, cmd.timeout_ms);
462 ucma_put_ctx(ctx);
463 return ret;
464}
465
466static void ucma_copy_ib_route(struct rdma_ucm_query_route_resp *resp,
467 struct rdma_route *route)
468{
469 struct rdma_dev_addr *dev_addr;
470
471 resp->num_paths = route->num_paths;
472 switch (route->num_paths) {
473 case 0:
474 dev_addr = &route->addr.dev_addr;
475 ib_addr_get_dgid(dev_addr,
476 (union ib_gid *) &resp->ib_route[0].dgid);
477 ib_addr_get_sgid(dev_addr,
478 (union ib_gid *) &resp->ib_route[0].sgid);
479 resp->ib_route[0].pkey = cpu_to_be16(ib_addr_get_pkey(dev_addr));
480 break;
481 case 2:
482 ib_copy_path_rec_to_user(&resp->ib_route[1],
483 &route->path_rec[1]);
484 /* fall through */
485 case 1:
486 ib_copy_path_rec_to_user(&resp->ib_route[0],
487 &route->path_rec[0]);
488 break;
489 default:
490 break;
491 }
492}
493
494static ssize_t ucma_query_route(struct ucma_file *file,
495 const char __user *inbuf,
496 int in_len, int out_len)
497{
498 struct rdma_ucm_query_route cmd;
499 struct rdma_ucm_query_route_resp resp;
500 struct ucma_context *ctx;
501 struct sockaddr *addr;
502 int ret = 0;
503
504 if (out_len < sizeof(resp))
505 return -ENOSPC;
506
507 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
508 return -EFAULT;
509
510 ctx = ucma_get_ctx(file, cmd.id);
511 if (IS_ERR(ctx))
512 return PTR_ERR(ctx);
513
514 memset(&resp, 0, sizeof resp);
515 addr = &ctx->cm_id->route.addr.src_addr;
516 memcpy(&resp.src_addr, addr, addr->sa_family == AF_INET ?
517 sizeof(struct sockaddr_in) :
518 sizeof(struct sockaddr_in6));
519 addr = &ctx->cm_id->route.addr.dst_addr;
520 memcpy(&resp.dst_addr, addr, addr->sa_family == AF_INET ?
521 sizeof(struct sockaddr_in) :
522 sizeof(struct sockaddr_in6));
523 if (!ctx->cm_id->device)
524 goto out;
525
526 resp.node_guid = ctx->cm_id->device->node_guid;
527 resp.port_num = ctx->cm_id->port_num;
528 switch (rdma_node_get_transport(ctx->cm_id->device->node_type)) {
529 case RDMA_TRANSPORT_IB:
530 ucma_copy_ib_route(&resp, &ctx->cm_id->route);
531 break;
532 default:
533 break;
534 }
535
536out:
537 if (copy_to_user((void __user *)(unsigned long)cmd.response,
538 &resp, sizeof(resp)))
539 ret = -EFAULT;
540
541 ucma_put_ctx(ctx);
542 return ret;
543}
544
545static void ucma_copy_conn_param(struct rdma_conn_param *dst,
546 struct rdma_ucm_conn_param *src)
547{
548 dst->private_data = src->private_data;
549 dst->private_data_len = src->private_data_len;
550 dst->responder_resources =src->responder_resources;
551 dst->initiator_depth = src->initiator_depth;
552 dst->flow_control = src->flow_control;
553 dst->retry_count = src->retry_count;
554 dst->rnr_retry_count = src->rnr_retry_count;
555 dst->srq = src->srq;
556 dst->qp_num = src->qp_num;
557}
558
559static ssize_t ucma_connect(struct ucma_file *file, const char __user *inbuf,
560 int in_len, int out_len)
561{
562 struct rdma_ucm_connect cmd;
563 struct rdma_conn_param conn_param;
564 struct ucma_context *ctx;
565 int ret;
566
567 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
568 return -EFAULT;
569
570 if (!cmd.conn_param.valid)
571 return -EINVAL;
572
573 ctx = ucma_get_ctx(file, cmd.id);
574 if (IS_ERR(ctx))
575 return PTR_ERR(ctx);
576
577 ucma_copy_conn_param(&conn_param, &cmd.conn_param);
578 ret = rdma_connect(ctx->cm_id, &conn_param);
579 ucma_put_ctx(ctx);
580 return ret;
581}
582
583static ssize_t ucma_listen(struct ucma_file *file, const char __user *inbuf,
584 int in_len, int out_len)
585{
586 struct rdma_ucm_listen cmd;
587 struct ucma_context *ctx;
588 int ret;
589
590 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
591 return -EFAULT;
592
593 ctx = ucma_get_ctx(file, cmd.id);
594 if (IS_ERR(ctx))
595 return PTR_ERR(ctx);
596
597 ctx->backlog = cmd.backlog > 0 && cmd.backlog < UCMA_MAX_BACKLOG ?
598 cmd.backlog : UCMA_MAX_BACKLOG;
599 ret = rdma_listen(ctx->cm_id, ctx->backlog);
600 ucma_put_ctx(ctx);
601 return ret;
602}
603
604static ssize_t ucma_accept(struct ucma_file *file, const char __user *inbuf,
605 int in_len, int out_len)
606{
607 struct rdma_ucm_accept cmd;
608 struct rdma_conn_param conn_param;
609 struct ucma_context *ctx;
610 int ret;
611
612 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
613 return -EFAULT;
614
615 ctx = ucma_get_ctx(file, cmd.id);
616 if (IS_ERR(ctx))
617 return PTR_ERR(ctx);
618
619 if (cmd.conn_param.valid) {
620 ctx->uid = cmd.uid;
621 ucma_copy_conn_param(&conn_param, &cmd.conn_param);
622 ret = rdma_accept(ctx->cm_id, &conn_param);
623 } else
624 ret = rdma_accept(ctx->cm_id, NULL);
625
626 ucma_put_ctx(ctx);
627 return ret;
628}
629
630static ssize_t ucma_reject(struct ucma_file *file, const char __user *inbuf,
631 int in_len, int out_len)
632{
633 struct rdma_ucm_reject cmd;
634 struct ucma_context *ctx;
635 int ret;
636
637 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
638 return -EFAULT;
639
640 ctx = ucma_get_ctx(file, cmd.id);
641 if (IS_ERR(ctx))
642 return PTR_ERR(ctx);
643
644 ret = rdma_reject(ctx->cm_id, cmd.private_data, cmd.private_data_len);
645 ucma_put_ctx(ctx);
646 return ret;
647}
648
649static ssize_t ucma_disconnect(struct ucma_file *file, const char __user *inbuf,
650 int in_len, int out_len)
651{
652 struct rdma_ucm_disconnect cmd;
653 struct ucma_context *ctx;
654 int ret;
655
656 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
657 return -EFAULT;
658
659 ctx = ucma_get_ctx(file, cmd.id);
660 if (IS_ERR(ctx))
661 return PTR_ERR(ctx);
662
663 ret = rdma_disconnect(ctx->cm_id);
664 ucma_put_ctx(ctx);
665 return ret;
666}
667
668static ssize_t ucma_init_qp_attr(struct ucma_file *file,
669 const char __user *inbuf,
670 int in_len, int out_len)
671{
672 struct rdma_ucm_init_qp_attr cmd;
673 struct ib_uverbs_qp_attr resp;
674 struct ucma_context *ctx;
675 struct ib_qp_attr qp_attr;
676 int ret;
677
678 if (out_len < sizeof(resp))
679 return -ENOSPC;
680
681 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
682 return -EFAULT;
683
684 ctx = ucma_get_ctx(file, cmd.id);
685 if (IS_ERR(ctx))
686 return PTR_ERR(ctx);
687
688 resp.qp_attr_mask = 0;
689 memset(&qp_attr, 0, sizeof qp_attr);
690 qp_attr.qp_state = cmd.qp_state;
691 ret = rdma_init_qp_attr(ctx->cm_id, &qp_attr, &resp.qp_attr_mask);
692 if (ret)
693 goto out;
694
695 ib_copy_qp_attr_to_user(&resp, &qp_attr);
696 if (copy_to_user((void __user *)(unsigned long)cmd.response,
697 &resp, sizeof(resp)))
698 ret = -EFAULT;
699
700out:
701 ucma_put_ctx(ctx);
702 return ret;
703}
704
705static ssize_t ucma_notify(struct ucma_file *file, const char __user *inbuf,
706 int in_len, int out_len)
707{
708 struct rdma_ucm_notify cmd;
709 struct ucma_context *ctx;
710 int ret;
711
712 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
713 return -EFAULT;
714
715 ctx = ucma_get_ctx(file, cmd.id);
716 if (IS_ERR(ctx))
717 return PTR_ERR(ctx);
718
719 ret = rdma_notify(ctx->cm_id, (enum ib_event_type) cmd.event);
720 ucma_put_ctx(ctx);
721 return ret;
722}
723
724static ssize_t (*ucma_cmd_table[])(struct ucma_file *file,
725 const char __user *inbuf,
726 int in_len, int out_len) = {
727 [RDMA_USER_CM_CMD_CREATE_ID] = ucma_create_id,
728 [RDMA_USER_CM_CMD_DESTROY_ID] = ucma_destroy_id,
729 [RDMA_USER_CM_CMD_BIND_ADDR] = ucma_bind_addr,
730 [RDMA_USER_CM_CMD_RESOLVE_ADDR] = ucma_resolve_addr,
731 [RDMA_USER_CM_CMD_RESOLVE_ROUTE]= ucma_resolve_route,
732 [RDMA_USER_CM_CMD_QUERY_ROUTE] = ucma_query_route,
733 [RDMA_USER_CM_CMD_CONNECT] = ucma_connect,
734 [RDMA_USER_CM_CMD_LISTEN] = ucma_listen,
735 [RDMA_USER_CM_CMD_ACCEPT] = ucma_accept,
736 [RDMA_USER_CM_CMD_REJECT] = ucma_reject,
737 [RDMA_USER_CM_CMD_DISCONNECT] = ucma_disconnect,
738 [RDMA_USER_CM_CMD_INIT_QP_ATTR] = ucma_init_qp_attr,
739 [RDMA_USER_CM_CMD_GET_EVENT] = ucma_get_event,
740 [RDMA_USER_CM_CMD_GET_OPTION] = NULL,
741 [RDMA_USER_CM_CMD_SET_OPTION] = NULL,
742 [RDMA_USER_CM_CMD_NOTIFY] = ucma_notify,
743};
744
745static ssize_t ucma_write(struct file *filp, const char __user *buf,
746 size_t len, loff_t *pos)
747{
748 struct ucma_file *file = filp->private_data;
749 struct rdma_ucm_cmd_hdr hdr;
750 ssize_t ret;
751
752 if (len < sizeof(hdr))
753 return -EINVAL;
754
755 if (copy_from_user(&hdr, buf, sizeof(hdr)))
756 return -EFAULT;
757
758 if (hdr.cmd < 0 || hdr.cmd >= ARRAY_SIZE(ucma_cmd_table))
759 return -EINVAL;
760
761 if (hdr.in + sizeof(hdr) > len)
762 return -EINVAL;
763
764 if (!ucma_cmd_table[hdr.cmd])
765 return -ENOSYS;
766
767 ret = ucma_cmd_table[hdr.cmd](file, buf + sizeof(hdr), hdr.in, hdr.out);
768 if (!ret)
769 ret = len;
770
771 return ret;
772}
773
774static unsigned int ucma_poll(struct file *filp, struct poll_table_struct *wait)
775{
776 struct ucma_file *file = filp->private_data;
777 unsigned int mask = 0;
778
779 poll_wait(filp, &file->poll_wait, wait);
780
781 if (!list_empty(&file->event_list))
782 mask = POLLIN | POLLRDNORM;
783
784 return mask;
785}
786
787static int ucma_open(struct inode *inode, struct file *filp)
788{
789 struct ucma_file *file;
790
791 file = kmalloc(sizeof *file, GFP_KERNEL);
792 if (!file)
793 return -ENOMEM;
794
795 INIT_LIST_HEAD(&file->event_list);
796 INIT_LIST_HEAD(&file->ctx_list);
797 init_waitqueue_head(&file->poll_wait);
798 mutex_init(&file->mut);
799
800 filp->private_data = file;
801 file->filp = filp;
802 return 0;
803}
804
805static int ucma_close(struct inode *inode, struct file *filp)
806{
807 struct ucma_file *file = filp->private_data;
808 struct ucma_context *ctx, *tmp;
809
810 mutex_lock(&file->mut);
811 list_for_each_entry_safe(ctx, tmp, &file->ctx_list, list) {
812 mutex_unlock(&file->mut);
813
814 mutex_lock(&mut);
815 idr_remove(&ctx_idr, ctx->id);
816 mutex_unlock(&mut);
817
818 ucma_free_ctx(ctx);
819 mutex_lock(&file->mut);
820 }
821 mutex_unlock(&file->mut);
822 kfree(file);
823 return 0;
824}
825
826static struct file_operations ucma_fops = {
827 .owner = THIS_MODULE,
828 .open = ucma_open,
829 .release = ucma_close,
830 .write = ucma_write,
831 .poll = ucma_poll,
832};
833
834static struct miscdevice ucma_misc = {
835 .minor = MISC_DYNAMIC_MINOR,
836 .name = "rdma_cm",
837 .fops = &ucma_fops,
838};
839
840static ssize_t show_abi_version(struct device *dev,
841 struct device_attribute *attr,
842 char *buf)
843{
844 return sprintf(buf, "%d\n", RDMA_USER_CM_ABI_VERSION);
845}
846static DEVICE_ATTR(abi_version, S_IRUGO, show_abi_version, NULL);
847
848static int __init ucma_init(void)
849{
850 int ret;
851
852 ret = misc_register(&ucma_misc);
853 if (ret)
854 return ret;
855
856 ret = device_create_file(ucma_misc.this_device, &dev_attr_abi_version);
857 if (ret) {
858 printk(KERN_ERR "rdma_ucm: couldn't create abi_version attr\n");
859 goto err;
860 }
861 return 0;
862err:
863 misc_deregister(&ucma_misc);
864 return ret;
865}
866
867static void __exit ucma_cleanup(void)
868{
869 device_remove_file(ucma_misc.this_device, &dev_attr_abi_version);
870 misc_deregister(&ucma_misc);
871 idr_destroy(&ctx_idr);
872}
873
874module_init(ucma_init);
875module_exit(ucma_cleanup);