[mirror_ubuntu-bionic-kernel.git] / drivers / misc / mei / iorw.c

/*
 *
 * Intel Management Engine Interface (Intel MEI) Linux driver
 * Copyright (c) 2003-2012, Intel Corporation.
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 */


#include <linux/kernel.h>
#include <linux/fs.h>
#include <linux/errno.h>
#include <linux/types.h>
#include <linux/fcntl.h>
#include <linux/aio.h>
#include <linux/pci.h>
#include <linux/init.h>
#include <linux/ioctl.h>
#include <linux/cdev.h>
#include <linux/list.h>
#include <linux/delay.h>
#include <linux/sched.h>
#include <linux/uuid.h>
#include <linux/jiffies.h>
#include <linux/uaccess.h>


#include <linux/mei.h>

#include "mei_dev.h"
#include "interface.h"

/**
 * mei_io_cb_free - free mei_cb_private related memory
 *
 * @cb: mei callback struct
 */
void mei_io_cb_free(struct mei_cl_cb *cb)
{
	if (cb == NULL)
		return;

	kfree(cb->request_buffer.data);
	kfree(cb->response_buffer.data);
	kfree(cb);
}
/**
 * mei_io_cb_init - allocate and initialize io callback
 *
 * @cl - mei client
 * @file: pointer to file structure
 *
 * returns mei_cl_cb pointer or NULL;
 */
struct mei_cl_cb *mei_io_cb_init(struct mei_cl *cl, struct file *fp)
{
	struct mei_cl_cb *cb;

	cb = kzalloc(sizeof(struct mei_cl_cb), GFP_KERNEL);
	if (!cb)
		return NULL;

	mei_io_list_init(cb);

	cb->file_object = fp;
	cb->cl = cl;
	cb->buf_idx = 0;
	return cb;
}


/**
 * mei_io_cb_alloc_req_buf - allocate request buffer
 *
 * @cb -  io callback structure
 * @size: size of the buffer
 *
 * returns 0 on success
 *         -EINVAL if cb is NULL
 *         -ENOMEM if allocation failed
 */
int mei_io_cb_alloc_req_buf(struct mei_cl_cb *cb, size_t length)
{
	if (!cb)
		return -EINVAL;

	if (length == 0)
		return 0;

	cb->request_buffer.data = kmalloc(length, GFP_KERNEL);
	if (!cb->request_buffer.data)
		return -ENOMEM;
	cb->request_buffer.size = length;
	return 0;
}
/**
 * mei_io_cb_alloc_req_buf - allocate respose buffer
 *
 * @cb -  io callback structure
 * @size: size of the buffer
 *
 * returns 0 on success
 *         -EINVAL if cb is NULL
 *         -ENOMEM if allocation failed
 */
int mei_io_cb_alloc_resp_buf(struct mei_cl_cb *cb, size_t length)
{
	if (!cb)
		return -EINVAL;

	if (length == 0)
		return 0;

	cb->response_buffer.data = kmalloc(length, GFP_KERNEL);
	if (!cb->response_buffer.data)
		return -ENOMEM;
	cb->response_buffer.size = length;
	return 0;
}


/**
 * mei_me_cl_by_id return index to me_clients for client_id
 *
 * @dev: the device structure
 * @client_id: me client id
 *
 * Locking: called under "dev->device_lock" lock
 *
 * returns index on success, -ENOENT on failure.
 */

int mei_me_cl_by_id(struct mei_device *dev, u8 client_id)
{
	int i;
	for (i = 0; i < dev->me_clients_num; i++)
		if (dev->me_clients[i].client_id == client_id)
			break;
	if (WARN_ON(dev->me_clients[i].client_id != client_id))
		return -ENOENT;

	if (i == dev->me_clients_num)
		return -ENOENT;

	return i;
}

/**
 * mei_ioctl_connect_client - the connect to fw client IOCTL function
 *
 * @dev: the device structure
 * @data: IOCTL connect data, input and output parameters
 * @file: private data of the file object
 *
 * Locking: called under "dev->device_lock" lock
 *
 * returns 0 on success, <0 on failure.
 */
int mei_ioctl_connect_client(struct file *file,
			struct mei_connect_client_data *data)
{
	struct mei_device *dev;
	struct mei_cl_cb *cb;
	struct mei_client *client;
	struct mei_cl *cl;
	long timeout = mei_secs_to_jiffies(MEI_CL_CONNECT_TIMEOUT);
	int i;
	int err;
	int rets;

	cl = file->private_data;
	if (WARN_ON(!cl || !cl->dev))
		return -ENODEV;

	dev = cl->dev;

	dev_dbg(&dev->pdev->dev, "mei_ioctl_connect_client() Entry\n");

	/* buffered ioctl cb */
	cb = mei_io_cb_init(cl, file);
	if (!cb) {
		rets = -ENOMEM;
		goto end;
	}

	cb->fop_type = MEI_FOP_IOCTL;

	if (dev->dev_state != MEI_DEV_ENABLED) {
		rets = -ENODEV;
		goto end;
	}
	if (cl->state != MEI_FILE_INITIALIZING &&
	    cl->state != MEI_FILE_DISCONNECTED) {
		rets = -EBUSY;
		goto end;
	}

	/* find ME client we're trying to connect to */
	i = mei_me_cl_by_uuid(dev, &data->in_client_uuid);
	if (i >= 0 && !dev->me_clients[i].props.fixed_address) {
		cl->me_client_id = dev->me_clients[i].client_id;
		cl->state = MEI_FILE_CONNECTING;
	}

	dev_dbg(&dev->pdev->dev, "Connect to FW Client ID = %d\n",
			cl->me_client_id);
	dev_dbg(&dev->pdev->dev, "FW Client - Protocol Version = %d\n",
			dev->me_clients[i].props.protocol_version);
	dev_dbg(&dev->pdev->dev, "FW Client - Max Msg Len = %d\n",
			dev->me_clients[i].props.max_msg_length);

	/* if we're connecting to amthi client then we will use the
	 * existing connection
	 */
	if (uuid_le_cmp(data->in_client_uuid, mei_amthi_guid) == 0) {
		dev_dbg(&dev->pdev->dev, "FW Client is amthi\n");
		if (dev->iamthif_cl.state != MEI_FILE_CONNECTED) {
			rets = -ENODEV;
			goto end;
		}
		clear_bit(cl->host_client_id, dev->host_clients_map);
		mei_me_cl_unlink(dev, cl);

		kfree(cl);
		cl = NULL;
		file->private_data = &dev->iamthif_cl;

		client = &data->out_client_properties;
		client->max_msg_length =
			dev->me_clients[i].props.max_msg_length;
		client->protocol_version =
			dev->me_clients[i].props.protocol_version;
		rets = dev->iamthif_cl.status;

		goto end;
	}

	if (cl->state != MEI_FILE_CONNECTING) {
		rets = -ENODEV;
		goto end;
	}


	/* prepare the output buffer */
	client = &data->out_client_properties;
	client->max_msg_length = dev->me_clients[i].props.max_msg_length;
	client->protocol_version = dev->me_clients[i].props.protocol_version;
	dev_dbg(&dev->pdev->dev, "Can connect?\n");
	if (dev->mei_host_buffer_is_empty
	    && !mei_other_client_is_connecting(dev, cl)) {
		dev_dbg(&dev->pdev->dev, "Sending Connect Message\n");
		dev->mei_host_buffer_is_empty = false;
		if (mei_hbm_cl_connect_req(dev, cl)) {
			dev_dbg(&dev->pdev->dev, "Sending connect message - failed\n");
			rets = -ENODEV;
			goto end;
		} else {
			dev_dbg(&dev->pdev->dev, "Sending connect message - succeeded\n");
			cl->timer_count = MEI_CONNECT_TIMEOUT;
			list_add_tail(&cb->list, &dev->ctrl_rd_list.list);
		}


	} else {
		dev_dbg(&dev->pdev->dev, "Queuing the connect request due to device busy\n");
		dev_dbg(&dev->pdev->dev, "add connect cb to control write list.\n");
		list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
	}
	mutex_unlock(&dev->device_lock);
	err = wait_event_timeout(dev->wait_recvd_msg,
			(MEI_FILE_CONNECTED == cl->state ||
			 MEI_FILE_DISCONNECTED == cl->state), timeout);

	mutex_lock(&dev->device_lock);
	if (MEI_FILE_CONNECTED == cl->state) {
		dev_dbg(&dev->pdev->dev, "successfully connected to FW client.\n");
		rets = cl->status;
		goto end;
	} else {
		dev_dbg(&dev->pdev->dev, "failed to connect to FW client.cl->state = %d.\n",
		    cl->state);
		if (!err) {
			dev_dbg(&dev->pdev->dev,
				"wait_event_interruptible_timeout failed on client"
				" connect message fw response message.\n");
		}
		rets = -EFAULT;

		mei_io_list_flush(&dev->ctrl_rd_list, cl);
		mei_io_list_flush(&dev->ctrl_wr_list, cl);
		goto end;
	}
	rets = 0;
end:
	dev_dbg(&dev->pdev->dev, "free connect cb memory.");
	mei_io_cb_free(cb);
	return rets;
}

/**
 * mei_start_read - the start read client message function.
 *
 * @dev: the device structure
 * @if_num:  minor number
 * @cl: private data of the file object
 *
 * returns 0 on success, <0 on failure.
 */
int mei_start_read(struct mei_device *dev, struct mei_cl *cl)
{
	struct mei_cl_cb *cb;
	int rets;
	int i;

	if (cl->state != MEI_FILE_CONNECTED)
		return -ENODEV;

	if (dev->dev_state != MEI_DEV_ENABLED)
		return -ENODEV;

	if (cl->read_pending || cl->read_cb) {
		dev_dbg(&dev->pdev->dev, "read is pending.\n");
		return -EBUSY;
	}
	i = mei_me_cl_by_id(dev, cl->me_client_id);
	if (i < 0) {
		dev_err(&dev->pdev->dev, "no such me client %d\n",
			cl->me_client_id);
		return  -ENODEV;
	}

	cb = mei_io_cb_init(cl, NULL);
	if (!cb)
		return -ENOMEM;

	rets = mei_io_cb_alloc_resp_buf(cb,
			dev->me_clients[i].props.max_msg_length);
	if (rets)
		goto err;

	cb->fop_type = MEI_FOP_READ;
	cl->read_cb = cb;
	if (dev->mei_host_buffer_is_empty) {
		dev->mei_host_buffer_is_empty = false;
		if (mei_hbm_cl_flow_control_req(dev, cl)) {
			rets = -ENODEV;
			goto err;
		}
		list_add_tail(&cb->list, &dev->read_list.list);
	} else {
		list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
	}
	return rets;
err:
	mei_io_cb_free(cb);
	return rets;
}
Commit	Line	Data
ab841160 OW	1	/*
	2	*
	3	* Intel Management Engine Interface (Intel MEI) Linux driver
733ba91c	4	* Copyright (c) 2003-2012, Intel Corporation.
ab841160 OW	5	*
	6	* This program is free software; you can redistribute it and/or modify it
	7	* under the terms and conditions of the GNU General Public License,
	8	* version 2, as published by the Free Software Foundation.
	9	*
	10	* This program is distributed in the hope it will be useful, but WITHOUT
	11	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	12	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
	13	* more details.
	14	*
	15	*/
	16
	17
	18	#include <linux/kernel.h>
	19	#include <linux/fs.h>
	20	#include <linux/errno.h>
	21	#include <linux/types.h>
	22	#include <linux/fcntl.h>
	23	#include <linux/aio.h>
	24	#include <linux/pci.h>
	25	#include <linux/init.h>
	26	#include <linux/ioctl.h>
	27	#include <linux/cdev.h>
	28	#include <linux/list.h>
	29	#include <linux/delay.h>
	30	#include <linux/sched.h>
	31	#include <linux/uuid.h>
	32	#include <linux/jiffies.h>
	33	#include <linux/uaccess.h>
	34
	35
4f3afe1d	36	#include <linux/mei.h>
47a73801 TW	37
47a73801 TW	38	#include "mei_dev.h"
ab841160	39	#include "interface.h"
ab841160	40
601a1efa TW	41	/**
	42	* mei_io_cb_free - free mei_cb_private related memory
	43	*
	44	* @cb: mei callback struct
	45	*/
	46	void mei_io_cb_free(struct mei_cl_cb *cb)
	47	{
	48	if (cb == NULL)
	49	return;
	50
	51	kfree(cb->request_buffer.data);
	52	kfree(cb->response_buffer.data);
	53	kfree(cb);
	54	}
664df38b TW	55	/**
	56	* mei_io_cb_init - allocate and initialize io callback
	57	*
	58	* @cl - mei client
	59	* @file: pointer to file structure
	60	*
	61	* returns mei_cl_cb pointer or NULL;
	62	*/
	63	struct mei_cl_cb mei_io_cb_init(struct mei_cl cl, struct file *fp)
	64	{
	65	struct mei_cl_cb *cb;
	66
	67	cb = kzalloc(sizeof(struct mei_cl_cb), GFP_KERNEL);
	68	if (!cb)
	69	return NULL;
	70
	71	mei_io_list_init(cb);
	72
	73	cb->file_object = fp;
db3ed431	74	cb->cl = cl;
664df38b TW	75	cb->buf_idx = 0;
	76	return cb;
	77	}
	78
	79
	80	/**
	81	* mei_io_cb_alloc_req_buf - allocate request buffer
	82	*
	83	* @cb - io callback structure
	84	* @size: size of the buffer
	85	*
	86	* returns 0 on success
	87	* -EINVAL if cb is NULL
	88	* -ENOMEM if allocation failed
	89	*/
	90	int mei_io_cb_alloc_req_buf(struct mei_cl_cb *cb, size_t length)
	91	{
	92	if (!cb)
	93	return -EINVAL;
	94
	95	if (length == 0)
	96	return 0;
	97
	98	cb->request_buffer.data = kmalloc(length, GFP_KERNEL);
	99	if (!cb->request_buffer.data)
	100	return -ENOMEM;
	101	cb->request_buffer.size = length;
	102	return 0;
	103	}
	104	/**
	105	* mei_io_cb_alloc_req_buf - allocate respose buffer
	106	*
	107	* @cb - io callback structure
	108	* @size: size of the buffer
	109	*
	110	* returns 0 on success
	111	* -EINVAL if cb is NULL
	112	* -ENOMEM if allocation failed
	113	*/
	114	int mei_io_cb_alloc_resp_buf(struct mei_cl_cb *cb, size_t length)
	115	{
	116	if (!cb)
	117	return -EINVAL;
	118
	119	if (length == 0)
	120	return 0;
	121
	122	cb->response_buffer.data = kmalloc(length, GFP_KERNEL);
	123	if (!cb->response_buffer.data)
	124	return -ENOMEM;
	125	cb->response_buffer.size = length;
	126	return 0;
	127	}
	128
601a1efa	129
07b509b7 TW	130	/**
	131	* mei_me_cl_by_id return index to me_clients for client_id
	132	*
	133	* @dev: the device structure
	134	* @client_id: me client id
	135	*
	136	* Locking: called under "dev->device_lock" lock
	137	*
	138	* returns index on success, -ENOENT on failure.
	139	*/
ab841160	140
07b509b7 TW	141	int mei_me_cl_by_id(struct mei_device *dev, u8 client_id)
	142	{
	143	int i;
	144	for (i = 0; i < dev->me_clients_num; i++)
	145	if (dev->me_clients[i].client_id == client_id)
	146	break;
	147	if (WARN_ON(dev->me_clients[i].client_id != client_id))
	148	return -ENOENT;
	149
	150	if (i == dev->me_clients_num)
	151	return -ENOENT;
	152
	153	return i;
	154	}
ab841160 OW	155
	156	/**
	157	* mei_ioctl_connect_client - the connect to fw client IOCTL function
	158	*
	159	* @dev: the device structure
	160	* @data: IOCTL connect data, input and output parameters
	161	* @file: private data of the file object
	162	*
	163	* Locking: called under "dev->device_lock" lock
	164	*
	165	* returns 0 on success, <0 on failure.
	166	*/
	167	int mei_ioctl_connect_client(struct file *file,
	168	struct mei_connect_client_data *data)
	169	{
	170	struct mei_device *dev;
	171	struct mei_cl_cb *cb;
	172	struct mei_client *client;
	173	struct mei_cl *cl;
3870c320	174	long timeout = mei_secs_to_jiffies(MEI_CL_CONNECT_TIMEOUT);
ab841160 OW	175	int i;
	176	int err;
	177	int rets;
	178
	179	cl = file->private_data;
	180	if (WARN_ON(!cl \|\| !cl->dev))
	181	return -ENODEV;
	182
	183	dev = cl->dev;
	184
	185	dev_dbg(&dev->pdev->dev, "mei_ioctl_connect_client() Entry\n");
	186
ab841160	187	/* buffered ioctl cb */
664df38b	188	cb = mei_io_cb_init(cl, file);
ab841160 OW	189	if (!cb) {
	190	rets = -ENOMEM;
	191	goto end;
	192	}
ab841160	193
4b8960b4	194	cb->fop_type = MEI_FOP_IOCTL;
ab841160	195
b210d750	196	if (dev->dev_state != MEI_DEV_ENABLED) {
ab841160 OW	197	rets = -ENODEV;
	198	goto end;
	199	}
	200	if (cl->state != MEI_FILE_INITIALIZING &&
	201	cl->state != MEI_FILE_DISCONNECTED) {
	202	rets = -EBUSY;
	203	goto end;
	204	}
	205
	206	/* find ME client we're trying to connect to */
07b509b7	207	i = mei_me_cl_by_uuid(dev, &data->in_client_uuid);
ab841160 OW	208	if (i >= 0 && !dev->me_clients[i].props.fixed_address) {
	209	cl->me_client_id = dev->me_clients[i].client_id;
	210	cl->state = MEI_FILE_CONNECTING;
	211	}
	212
	213	dev_dbg(&dev->pdev->dev, "Connect to FW Client ID = %d\n",
	214	cl->me_client_id);
	215	dev_dbg(&dev->pdev->dev, "FW Client - Protocol Version = %d\n",
	216	dev->me_clients[i].props.protocol_version);
	217	dev_dbg(&dev->pdev->dev, "FW Client - Max Msg Len = %d\n",
	218	dev->me_clients[i].props.max_msg_length);
	219
5f9092f3 JM	220	/* if we're connecting to amthi client then we will use the
5f9092f3 JM	221	* existing connection
ab841160 OW	222	*/
	223	if (uuid_le_cmp(data->in_client_uuid, mei_amthi_guid) == 0) {
	224	dev_dbg(&dev->pdev->dev, "FW Client is amthi\n");
	225	if (dev->iamthif_cl.state != MEI_FILE_CONNECTED) {
	226	rets = -ENODEV;
	227	goto end;
	228	}
	229	clear_bit(cl->host_client_id, dev->host_clients_map);
ff8b2f4e	230	mei_me_cl_unlink(dev, cl);
ab841160	231
ab841160	232	kfree(cl);
ab841160 OW	233	cl = NULL;
	234	file->private_data = &dev->iamthif_cl;
	235
	236	client = &data->out_client_properties;
	237	client->max_msg_length =
	238	dev->me_clients[i].props.max_msg_length;
	239	client->protocol_version =
	240	dev->me_clients[i].props.protocol_version;
	241	rets = dev->iamthif_cl.status;
	242
	243	goto end;
	244	}
	245
	246	if (cl->state != MEI_FILE_CONNECTING) {
	247	rets = -ENODEV;
	248	goto end;
	249	}
	250
	251
	252	/* prepare the output buffer */
	253	client = &data->out_client_properties;
	254	client->max_msg_length = dev->me_clients[i].props.max_msg_length;
	255	client->protocol_version = dev->me_clients[i].props.protocol_version;
	256	dev_dbg(&dev->pdev->dev, "Can connect?\n");
	257	if (dev->mei_host_buffer_is_empty
	258	&& !mei_other_client_is_connecting(dev, cl)) {
	259	dev_dbg(&dev->pdev->dev, "Sending Connect Message\n");
eb9af0ac	260	dev->mei_host_buffer_is_empty = false;
8120e720	261	if (mei_hbm_cl_connect_req(dev, cl)) {
ab841160 OW	262	dev_dbg(&dev->pdev->dev, "Sending connect message - failed\n");
	263	rets = -ENODEV;
	264	goto end;
	265	} else {
	266	dev_dbg(&dev->pdev->dev, "Sending connect message - succeeded\n");
	267	cl->timer_count = MEI_CONNECT_TIMEOUT;
fb601adb	268	list_add_tail(&cb->list, &dev->ctrl_rd_list.list);
ab841160 OW	269	}
	270
	271
	272	} else {
	273	dev_dbg(&dev->pdev->dev, "Queuing the connect request due to device busy\n");
ab841160	274	dev_dbg(&dev->pdev->dev, "add connect cb to control write list.\n");
fb601adb	275	list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
ab841160 OW	276	}
	277	mutex_unlock(&dev->device_lock);
	278	err = wait_event_timeout(dev->wait_recvd_msg,
	279	(MEI_FILE_CONNECTED == cl->state \|\|
3870c320	280	MEI_FILE_DISCONNECTED == cl->state), timeout);
ab841160 OW	281
	282	mutex_lock(&dev->device_lock);
	283	if (MEI_FILE_CONNECTED == cl->state) {
	284	dev_dbg(&dev->pdev->dev, "successfully connected to FW client.\n");
	285	rets = cl->status;
	286	goto end;
	287	} else {
	288	dev_dbg(&dev->pdev->dev, "failed to connect to FW client.cl->state = %d.\n",
	289	cl->state);
	290	if (!err) {
	291	dev_dbg(&dev->pdev->dev,
	292	"wait_event_interruptible_timeout failed on client"
	293	" connect message fw response message.\n");
	294	}
	295	rets = -EFAULT;
	296
0288c7c9 TW	297	mei_io_list_flush(&dev->ctrl_rd_list, cl);
0288c7c9 TW	298	mei_io_list_flush(&dev->ctrl_wr_list, cl);
ab841160 OW	299	goto end;
	300	}
	301	rets = 0;
	302	end:
	303	dev_dbg(&dev->pdev->dev, "free connect cb memory.");
601a1efa	304	mei_io_cb_free(cb);
ab841160 OW	305	return rets;
	306	}
	307
ab841160 OW	308	/**
	309	* mei_start_read - the start read client message function.
	310	*
	311	* @dev: the device structure
	312	* @if_num: minor number
	313	* @cl: private data of the file object
	314	*
	315	* returns 0 on success, <0 on failure.
	316	*/
	317	int mei_start_read(struct mei_device dev, struct mei_cl cl)
	318	{
	319	struct mei_cl_cb *cb;
664df38b	320	int rets;
ab841160 OW	321	int i;
	322
	323	if (cl->state != MEI_FILE_CONNECTED)
	324	return -ENODEV;
	325
b210d750	326	if (dev->dev_state != MEI_DEV_ENABLED)
ab841160 OW	327	return -ENODEV;
ab841160 OW	328
ab841160 OW	329	if (cl->read_pending \|\| cl->read_cb) {
	330	dev_dbg(&dev->pdev->dev, "read is pending.\n");
	331	return -EBUSY;
	332	}
664df38b TW	333	i = mei_me_cl_by_id(dev, cl->me_client_id);
	334	if (i < 0) {
	335	dev_err(&dev->pdev->dev, "no such me client %d\n",
	336	cl->me_client_id);
	337	return -ENODEV;
	338	}
ab841160	339
664df38b	340	cb = mei_io_cb_init(cl, NULL);
ab841160 OW	341	if (!cb)
	342	return -ENOMEM;
	343
664df38b TW	344	rets = mei_io_cb_alloc_resp_buf(cb,
	345	dev->me_clients[i].props.max_msg_length);
	346	if (rets)
	347	goto err;
ab841160	348
4b8960b4	349	cb->fop_type = MEI_FOP_READ;
ab841160 OW	350	cl->read_cb = cb;
ab841160 OW	351	if (dev->mei_host_buffer_is_empty) {
eb9af0ac	352	dev->mei_host_buffer_is_empty = false;
8120e720	353	if (mei_hbm_cl_flow_control_req(dev, cl)) {
ab841160	354	rets = -ENODEV;
664df38b	355	goto err;
ab841160	356	}
fb601adb	357	list_add_tail(&cb->list, &dev->read_list.list);
ab841160	358	} else {
fb601adb	359	list_add_tail(&cb->list, &dev->ctrl_wr_list.list);
ab841160 OW	360	}
ab841160 OW	361	return rets;
664df38b	362	err:
601a1efa	363	mei_io_cb_free(cb);
ab841160 OW	364	return rets;
	365	}
	366