[mirror_ubuntu-artful-kernel.git] / drivers / sbus / char / openprom.c

/*
 * Linux/SPARC PROM Configuration Driver
 * Copyright (C) 1996 Thomas K. Dyas (tdyas@noc.rutgers.edu)
 * Copyright (C) 1996 Eddie C. Dost  (ecd@skynet.be)
 *
 * This character device driver allows user programs to access the
 * PROM device tree. It is compatible with the SunOS /dev/openprom
 * driver and the NetBSD /dev/openprom driver. The SunOS eeprom
 * utility works without any modifications.
 *
 * The driver uses a minor number under the misc device major. The
 * file read/write mode determines the type of access to the PROM.
 * Interrupts are disabled whenever the driver calls into the PROM for
 * sanity's sake.
 */

/* This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License as
 * published by the Free Software Foundation; either version 2 of the
 * License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 
 */

#include <linux/module.h>
#include <linux/kernel.h>
#include <linux/errno.h>
#include <linux/slab.h>
#include <linux/smp_lock.h>
#include <linux/string.h>
#include <linux/miscdevice.h>
#include <linux/init.h>
#include <linux/fs.h>
#include <asm/oplib.h>
#include <asm/prom.h>
#include <asm/system.h>
#include <asm/uaccess.h>
#include <asm/openpromio.h>
#ifdef CONFIG_PCI
#include <linux/pci.h>
#endif

MODULE_AUTHOR("Thomas K. Dyas (tdyas@noc.rutgers.edu) and Eddie C. Dost  (ecd@skynet.be)");
MODULE_DESCRIPTION("OPENPROM Configuration Driver");
MODULE_LICENSE("GPL");
MODULE_VERSION("1.0");
MODULE_ALIAS_MISCDEV(SUN_OPENPROM_MINOR);

/* Private data kept by the driver for each descriptor. */
typedef struct openprom_private_data
{
	struct device_node *current_node; /* Current node for SunOS ioctls. */
	struct device_node *lastnode; /* Last valid node used by BSD ioctls. */
} DATA;

/* ID of the PROM node containing all of the EEPROM options. */
static struct device_node *options_node;

/*
 * Copy an openpromio structure into kernel space from user space.
 * This routine does error checking to make sure that all memory
 * accesses are within bounds. A pointer to the allocated openpromio
 * structure will be placed in "*opp_p". Return value is the length
 * of the user supplied buffer.
 */
static int copyin(struct openpromio __user *info, struct openpromio **opp_p)
{
	unsigned int bufsize;

	if (!info || !opp_p)
		return -EFAULT;

	if (get_user(bufsize, &info->oprom_size))
		return -EFAULT;

	if (bufsize == 0)
		return -EINVAL;

	/* If the bufsize is too large, just limit it.
	 * Fix from Jason Rappleye.
	 */
	if (bufsize > OPROMMAXPARAM)
		bufsize = OPROMMAXPARAM;

	if (!(*opp_p = kzalloc(sizeof(int) + bufsize + 1, GFP_KERNEL)))
		return -ENOMEM;

	if (copy_from_user(&(*opp_p)->oprom_array,
			   &info->oprom_array, bufsize)) {
		kfree(*opp_p);
		return -EFAULT;
	}
	return bufsize;
}

static int getstrings(struct openpromio __user *info, struct openpromio **opp_p)
{
	int n, bufsize;
	char c;

	if (!info || !opp_p)
		return -EFAULT;

	if (!(*opp_p = kzalloc(sizeof(int) + OPROMMAXPARAM + 1, GFP_KERNEL)))
		return -ENOMEM;

	(*opp_p)->oprom_size = 0;

	n = bufsize = 0;
	while ((n < 2) && (bufsize < OPROMMAXPARAM)) {
		if (get_user(c, &info->oprom_array[bufsize])) {
			kfree(*opp_p);
			return -EFAULT;
		}
		if (c == '\0')
			n++;
		(*opp_p)->oprom_array[bufsize++] = c;
	}
	if (!n) {
		kfree(*opp_p);
		return -EINVAL;
	}
	return bufsize;
}

/*
 * Copy an openpromio structure in kernel space back to user space.
 */
static int copyout(void __user *info, struct openpromio *opp, int len)
{
	if (copy_to_user(info, opp, len))
		return -EFAULT;
	return 0;
}

static int opromgetprop(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize)
{
	const void *pval;
	int len;

	if (!dp ||
	    !(pval = of_get_property(dp, op->oprom_array, &len)) ||
	    len <= 0 || len > bufsize)
		return copyout(argp, op, sizeof(int));

	memcpy(op->oprom_array, pval, len);
	op->oprom_array[len] = '\0';
	op->oprom_size = len;

	return copyout(argp, op, sizeof(int) + bufsize);
}

static int opromnxtprop(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize)
{
	struct property *prop;
	int len;

	if (!dp)
		return copyout(argp, op, sizeof(int));
	if (op->oprom_array[0] == '\0') {
		prop = dp->properties;
		if (!prop)
			return copyout(argp, op, sizeof(int));
		len = strlen(prop->name);
	} else {
		prop = of_find_property(dp, op->oprom_array, NULL);

		if (!prop ||
		    !prop->next ||
		    (len = strlen(prop->next->name)) + 1 > bufsize)
			return copyout(argp, op, sizeof(int));

		prop = prop->next;
	}

	memcpy(op->oprom_array, prop->name, len);
	op->oprom_array[len] = '\0';
	op->oprom_size = ++len;

	return copyout(argp, op, sizeof(int) + bufsize);
}

static int opromsetopt(struct device_node *dp, struct openpromio *op, int bufsize)
{
	char *buf = op->oprom_array + strlen(op->oprom_array) + 1;
	int len = op->oprom_array + bufsize - buf;

	return of_set_property(options_node, op->oprom_array, buf, len);
}

static int opromnext(void __user *argp, unsigned int cmd, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)
{
	phandle ph;

	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));

	if (bufsize < sizeof(phandle))
		return -EINVAL;

	ph = *((int *) op->oprom_array);
	if (ph) {
		dp = of_find_node_by_phandle(ph);
		if (!dp)
			return -EINVAL;

		switch (cmd) {
		case OPROMNEXT:
			dp = dp->sibling;
			break;

		case OPROMCHILD:
			dp = dp->child;
			break;

		case OPROMSETCUR:
		default:
			break;
		};
	} else {
		/* Sibling of node zero is the root node.  */
		if (cmd != OPROMNEXT)
			return -EINVAL;

		dp = of_find_node_by_path("/");
	}

	ph = 0;
	if (dp)
		ph = dp->phandle;

	data->current_node = dp;
	*((int *) op->oprom_array) = ph;
	op->oprom_size = sizeof(phandle);

	return copyout(argp, op, bufsize + sizeof(int));
}

static int oprompci2node(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)
{
	int err = -EINVAL;

	if (bufsize >= 2*sizeof(int)) {
#ifdef CONFIG_PCI
		struct pci_dev *pdev;
		struct device_node *dp;

		pdev = pci_get_bus_and_slot (((int *) op->oprom_array)[0],
				      ((int *) op->oprom_array)[1]);

		dp = pci_device_to_OF_node(pdev);
		data->current_node = dp;
		*((int *)op->oprom_array) = dp->phandle;
		op->oprom_size = sizeof(int);
		err = copyout(argp, op, bufsize + sizeof(int));

		pci_dev_put(pdev);
#endif
	}

	return err;
}

static int oprompath2node(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)
{
	phandle ph = 0;

	dp = of_find_node_by_path(op->oprom_array);
	if (dp)
		ph = dp->phandle;
	data->current_node = dp;
	*((int *)op->oprom_array) = ph;
	op->oprom_size = sizeof(int);

	return copyout(argp, op, bufsize + sizeof(int));
}

static int opromgetbootargs(void __user *argp, struct openpromio *op, int bufsize)
{
	char *buf = saved_command_line;
	int len = strlen(buf);

	if (len > bufsize)
		return -EINVAL;

	strcpy(op->oprom_array, buf);
	op->oprom_size = len;

	return copyout(argp, op, bufsize + sizeof(int));
}

/*
 *	SunOS and Solaris /dev/openprom ioctl calls.
 */
static int openprom_sunos_ioctl(struct inode * inode, struct file * file,
				unsigned int cmd, unsigned long arg,
				struct device_node *dp)
{
	DATA *data = file->private_data;
	struct openpromio *opp = NULL;
	int bufsize, error = 0;
	static int cnt;
	void __user *argp = (void __user *)arg;

	if (cmd == OPROMSETOPT)
		bufsize = getstrings(argp, &opp);
	else
		bufsize = copyin(argp, &opp);

	if (bufsize < 0)
		return bufsize;

	switch (cmd) {
	case OPROMGETOPT:
	case OPROMGETPROP:
		error = opromgetprop(argp, dp, opp, bufsize);
		break;

	case OPROMNXTOPT:
	case OPROMNXTPROP:
		error = opromnxtprop(argp, dp, opp, bufsize);
		break;

	case OPROMSETOPT:
	case OPROMSETOPT2:
		error = opromsetopt(dp, opp, bufsize);
		break;

	case OPROMNEXT:
	case OPROMCHILD:
	case OPROMSETCUR:
		error = opromnext(argp, cmd, dp, opp, bufsize, data);
		break;

	case OPROMPCI2NODE:
		error = oprompci2node(argp, dp, opp, bufsize, data);
		break;

	case OPROMPATH2NODE:
		error = oprompath2node(argp, dp, opp, bufsize, data);
		break;

	case OPROMGETBOOTARGS:
		error = opromgetbootargs(argp, opp, bufsize);
		break;

	case OPROMU2P:
	case OPROMGETCONS:
	case OPROMGETFBNAME:
		if (cnt++ < 10)
			printk(KERN_INFO "openprom_sunos_ioctl: unimplemented ioctl\n");
		error = -EINVAL;
		break;
	default:
		if (cnt++ < 10)
			printk(KERN_INFO "openprom_sunos_ioctl: cmd 0x%X, arg 0x%lX\n", cmd, arg);
		error = -EINVAL;
		break;
	}

	kfree(opp);
	return error;
}

static struct device_node *get_node(phandle n, DATA *data)
{
	struct device_node *dp = of_find_node_by_phandle(n);

	if (dp)
		data->lastnode = dp;

	return dp;
}

/* Copy in a whole string from userspace into kernelspace. */
static int copyin_string(char __user *user, size_t len, char **ptr)
{
	char *tmp;

	if ((ssize_t)len < 0 || (ssize_t)(len + 1) < 0)
		return -EINVAL;

	tmp = kmalloc(len + 1, GFP_KERNEL);
	if (!tmp)
		return -ENOMEM;

	if (copy_from_user(tmp, user, len)) {
		kfree(tmp);
		return -EFAULT;
	}

	tmp[len] = '\0';

	*ptr = tmp;

	return 0;
}

/*
 *	NetBSD /dev/openprom ioctl calls.
 */
static int opiocget(void __user *argp, DATA *data)
{
	struct opiocdesc op;
	struct device_node *dp;
	char *str;
	const void *pval;
	int err, len;

	if (copy_from_user(&op, argp, sizeof(op)))
		return -EFAULT;

	dp = get_node(op.op_nodeid, data);

	err = copyin_string(op.op_name, op.op_namelen, &str);
	if (err)
		return err;

	pval = of_get_property(dp, str, &len);
	err = 0;
	if (!pval || len > op.op_buflen) {
		err = -EINVAL;
	} else {
		op.op_buflen = len;
		if (copy_to_user(argp, &op, sizeof(op)) ||
		    copy_to_user(op.op_buf, pval, len))
			err = -EFAULT;
	}
	kfree(str);

	return err;
}

static int opiocnextprop(void __user *argp, DATA *data)
{
	struct opiocdesc op;
	struct device_node *dp;
	struct property *prop;
	char *str;
	int err, len;

	if (copy_from_user(&op, argp, sizeof(op)))
		return -EFAULT;

	dp = get_node(op.op_nodeid, data);
	if (!dp)
		return -EINVAL;

	err = copyin_string(op.op_name, op.op_namelen, &str);
	if (err)
		return err;

	if (str[0] == '\0') {
		prop = dp->properties;
	} else {
		prop = of_find_property(dp, str, NULL);
		if (prop)
			prop = prop->next;
	}
	kfree(str);

	if (!prop)
		len = 0;
	else
		len = prop->length;

	if (len > op.op_buflen)
		len = op.op_buflen;

	if (copy_to_user(argp, &op, sizeof(op)))
		return -EFAULT;

	if (len &&
	    copy_to_user(op.op_buf, prop->value, len))
		return -EFAULT;

	return 0;
}

static int opiocset(void __user *argp, DATA *data)
{
	struct opiocdesc op;
	struct device_node *dp;
	char *str, *tmp;
	int err;

	if (copy_from_user(&op, argp, sizeof(op)))
		return -EFAULT;

	dp = get_node(op.op_nodeid, data);
	if (!dp)
		return -EINVAL;

	err = copyin_string(op.op_name, op.op_namelen, &str);
	if (err)
		return err;

	err = copyin_string(op.op_buf, op.op_buflen, &tmp);
	if (err) {
		kfree(str);
		return err;
	}

	err = of_set_property(dp, str, tmp, op.op_buflen);

	kfree(str);
	kfree(tmp);

	return err;
}

static int opiocgetnext(unsigned int cmd, void __user *argp)
{
	struct device_node *dp;
	phandle nd;

	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));

	if (copy_from_user(&nd, argp, sizeof(phandle)))
		return -EFAULT;

	if (nd == 0) {
		if (cmd != OPIOCGETNEXT)
			return -EINVAL;
		dp = of_find_node_by_path("/");
	} else {
		dp = of_find_node_by_phandle(nd);
		nd = 0;
		if (dp) {
			if (cmd == OPIOCGETNEXT)
				dp = dp->sibling;
			else
				dp = dp->child;
		}
	}
	if (dp)
		nd = dp->phandle;
	if (copy_to_user(argp, &nd, sizeof(phandle)))
		return -EFAULT;

	return 0;
}

static int openprom_bsd_ioctl(struct inode * inode, struct file * file,
			      unsigned int cmd, unsigned long arg)
{
	DATA *data = (DATA *) file->private_data;
	void __user *argp = (void __user *)arg;
	int err;

	switch (cmd) {
	case OPIOCGET:
		err = opiocget(argp, data);
		break;

	case OPIOCNEXTPROP:
		err = opiocnextprop(argp, data);
		break;

	case OPIOCSET:
		err = opiocset(argp, data);
		break;

	case OPIOCGETOPTNODE:
		BUILD_BUG_ON(sizeof(phandle) != sizeof(int));

		if (copy_to_user(argp, &options_node->phandle, sizeof(phandle)))
			return -EFAULT;

		return 0;

	case OPIOCGETNEXT:
	case OPIOCGETCHILD:
		err = opiocgetnext(cmd, argp);
		break;

	default:
		return -EINVAL;

	};

	return err;
}


/*
 *	Handoff control to the correct ioctl handler.
 */
static int openprom_ioctl(struct inode * inode, struct file * file,
			  unsigned int cmd, unsigned long arg)
{
	DATA *data = (DATA *) file->private_data;

	switch (cmd) {
	case OPROMGETOPT:
	case OPROMNXTOPT:
		if ((file->f_mode & FMODE_READ) == 0)
			return -EPERM;
		return openprom_sunos_ioctl(inode, file, cmd, arg,
					    options_node);

	case OPROMSETOPT:
	case OPROMSETOPT2:
		if ((file->f_mode & FMODE_WRITE) == 0)
			return -EPERM;
		return openprom_sunos_ioctl(inode, file, cmd, arg,
					    options_node);

	case OPROMNEXT:
	case OPROMCHILD:
	case OPROMGETPROP:
	case OPROMNXTPROP:
		if ((file->f_mode & FMODE_READ) == 0)
			return -EPERM;
		return openprom_sunos_ioctl(inode, file, cmd, arg,
					    data->current_node);

	case OPROMU2P:
	case OPROMGETCONS:
	case OPROMGETFBNAME:
	case OPROMGETBOOTARGS:
	case OPROMSETCUR:
	case OPROMPCI2NODE:
	case OPROMPATH2NODE:
		if ((file->f_mode & FMODE_READ) == 0)
			return -EPERM;
		return openprom_sunos_ioctl(inode, file, cmd, arg, NULL);

	case OPIOCGET:
	case OPIOCNEXTPROP:
	case OPIOCGETOPTNODE:
	case OPIOCGETNEXT:
	case OPIOCGETCHILD:
		if ((file->f_mode & FMODE_READ) == 0)
			return -EBADF;
		return openprom_bsd_ioctl(inode,file,cmd,arg);

	case OPIOCSET:
		if ((file->f_mode & FMODE_WRITE) == 0)
			return -EBADF;
		return openprom_bsd_ioctl(inode,file,cmd,arg);

	default:
		return -EINVAL;
	};
}

static long openprom_compat_ioctl(struct file *file, unsigned int cmd,
		unsigned long arg)
{
	long rval = -ENOTTY;

	/*
	 * SunOS/Solaris only, the NetBSD one's have embedded pointers in
	 * the arg which we'd need to clean up...
	 */
	switch (cmd) {
	case OPROMGETOPT:
	case OPROMSETOPT:
	case OPROMNXTOPT:
	case OPROMSETOPT2:
	case OPROMNEXT:
	case OPROMCHILD:
	case OPROMGETPROP:
	case OPROMNXTPROP:
	case OPROMU2P:
	case OPROMGETCONS:
	case OPROMGETFBNAME:
	case OPROMGETBOOTARGS:
	case OPROMSETCUR:
	case OPROMPCI2NODE:
	case OPROMPATH2NODE:
		rval = openprom_ioctl(file->f_path.dentry->d_inode, file, cmd, arg);
		break;
	}

	return rval;
}

static int openprom_open(struct inode * inode, struct file * file)
{
	DATA *data;

	data = kmalloc(sizeof(DATA), GFP_KERNEL);
	if (!data)
		return -ENOMEM;

	lock_kernel();
	data->current_node = of_find_node_by_path("/");
	data->lastnode = data->current_node;
	file->private_data = (void *) data;
	unlock_kernel();

	return 0;
}

static int openprom_release(struct inode * inode, struct file * file)
{
	kfree(file->private_data);
	return 0;
}

static const struct file_operations openprom_fops = {
	.owner =	THIS_MODULE,
	.llseek =	no_llseek,
	.ioctl =	openprom_ioctl,
	.compat_ioctl =	openprom_compat_ioctl,
	.open =		openprom_open,
	.release =	openprom_release,
};

static struct miscdevice openprom_dev = {
	.minor		= SUN_OPENPROM_MINOR,
	.name		= "openprom",
	.fops		= &openprom_fops,
};

static int __init openprom_init(void)
{
	struct device_node *dp;
	int err;

	err = misc_register(&openprom_dev);
	if (err)
		return err;

	dp = of_find_node_by_path("/");
	dp = dp->child;
	while (dp) {
		if (!strcmp(dp->name, "options"))
			break;
		dp = dp->sibling;
	}
	options_node = dp;

	if (!options_node) {
		misc_deregister(&openprom_dev);
		return -EIO;
	}

	return 0;
}

static void __exit openprom_cleanup(void)
{
	misc_deregister(&openprom_dev);
}

module_init(openprom_init);
module_exit(openprom_cleanup);
Commit	Line	Data
1da177e4 LT	1	/*
	2	* Linux/SPARC PROM Configuration Driver
	3	* Copyright (C) 1996 Thomas K. Dyas (tdyas@noc.rutgers.edu)
	4	* Copyright (C) 1996 Eddie C. Dost (ecd@skynet.be)
	5	*
	6	* This character device driver allows user programs to access the
	7	* PROM device tree. It is compatible with the SunOS /dev/openprom
	8	* driver and the NetBSD /dev/openprom driver. The SunOS eeprom
	9	* utility works without any modifications.
	10	*
	11	* The driver uses a minor number under the misc device major. The
	12	* file read/write mode determines the type of access to the PROM.
	13	* Interrupts are disabled whenever the driver calls into the PROM for
	14	* sanity's sake.
	15	*/
	16
	17	/* This program is free software; you can redistribute it and/or
	18	* modify it under the terms of the GNU General Public License as
	19	* published by the Free Software Foundation; either version 2 of the
	20	* License, or (at your option) any later version.
	21	*
	22	* This program is distributed in the hope that it will be useful, but
	23	* WITHOUT ANY WARRANTY; without even the implied warranty of
	24	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	25	* General Public License for more details.
	26	*
	27	* You should have received a copy of the GNU General Public License
	28	* along with this program; if not, write to the Free Software
	29	* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
	30	*/
	31
1da177e4 LT	32	#include <linux/module.h>
1da177e4 LT	33	#include <linux/kernel.h>
1da177e4 LT	34	#include <linux/errno.h>
1da177e4 LT	35	#include <linux/slab.h>
7bcc3209	36	#include <linux/smp_lock.h>
1da177e4 LT	37	#include <linux/string.h>
	38	#include <linux/miscdevice.h>
	39	#include <linux/init.h>
	40	#include <linux/fs.h>
	41	#include <asm/oplib.h>
8e48aec7	42	#include <asm/prom.h>
1da177e4 LT	43	#include <asm/system.h>
	44	#include <asm/uaccess.h>
	45	#include <asm/openpromio.h>
	46	#ifdef CONFIG_PCI
	47	#include <linux/pci.h>
1da177e4 LT	48	#endif
1da177e4 LT	49
8e48aec7 DM	50	MODULE_AUTHOR("Thomas K. Dyas (tdyas@noc.rutgers.edu) and Eddie C. Dost (ecd@skynet.be)");
	51	MODULE_DESCRIPTION("OPENPROM Configuration Driver");
	52	MODULE_LICENSE("GPL");
	53	MODULE_VERSION("1.0");
1c339eb1	54	MODULE_ALIAS_MISCDEV(SUN_OPENPROM_MINOR);
8e48aec7	55
1da177e4 LT	56	/* Private data kept by the driver for each descriptor. */
	57	typedef struct openprom_private_data
	58	{
8e48aec7 DM	59	struct device_node current_node; / Current node for SunOS ioctls. */
8e48aec7 DM	60	struct device_node lastnode; / Last valid node used by BSD ioctls. */
1da177e4 LT	61	} DATA;
	62
	63	/* ID of the PROM node containing all of the EEPROM options. */
8e48aec7	64	static struct device_node *options_node;
1da177e4 LT	65
	66	/*
	67	* Copy an openpromio structure into kernel space from user space.
	68	* This routine does error checking to make sure that all memory
	69	* accesses are within bounds. A pointer to the allocated openpromio
	70	* structure will be placed in "*opp_p". Return value is the length
	71	* of the user supplied buffer.
	72	*/
	73	static int copyin(struct openpromio __user info, struct openpromio *opp_p)
	74	{
	75	unsigned int bufsize;
	76
	77	if (!info \|\| !opp_p)
	78	return -EFAULT;
	79
	80	if (get_user(bufsize, &info->oprom_size))
	81	return -EFAULT;
	82
	83	if (bufsize == 0)
	84	return -EINVAL;
	85
	86	/* If the bufsize is too large, just limit it.
	87	* Fix from Jason Rappleye.
	88	*/
	89	if (bufsize > OPROMMAXPARAM)
	90	bufsize = OPROMMAXPARAM;
	91
8e48aec7	92	if (!(*opp_p = kzalloc(sizeof(int) + bufsize + 1, GFP_KERNEL)))
1da177e4	93	return -ENOMEM;
1da177e4 LT	94
	95	if (copy_from_user(&(*opp_p)->oprom_array,
	96	&info->oprom_array, bufsize)) {
	97	kfree(*opp_p);
	98	return -EFAULT;
	99	}
	100	return bufsize;
	101	}
	102
	103	static int getstrings(struct openpromio __user info, struct openpromio *opp_p)
	104	{
	105	int n, bufsize;
	106	char c;
	107
	108	if (!info \|\| !opp_p)
	109	return -EFAULT;
	110
8e48aec7	111	if (!(*opp_p = kzalloc(sizeof(int) + OPROMMAXPARAM + 1, GFP_KERNEL)))
1da177e4 LT	112	return -ENOMEM;
1da177e4 LT	113
1da177e4 LT	114	(*opp_p)->oprom_size = 0;
	115
	116	n = bufsize = 0;
	117	while ((n < 2) && (bufsize < OPROMMAXPARAM)) {
	118	if (get_user(c, &info->oprom_array[bufsize])) {
	119	kfree(*opp_p);
	120	return -EFAULT;
	121	}
	122	if (c == '\0')
	123	n++;
	124	(*opp_p)->oprom_array[bufsize++] = c;
	125	}
	126	if (!n) {
	127	kfree(*opp_p);
	128	return -EINVAL;
	129	}
	130	return bufsize;
	131	}
	132
	133	/*
	134	* Copy an openpromio structure in kernel space back to user space.
	135	*/
	136	static int copyout(void __user info, struct openpromio opp, int len)
	137	{
	138	if (copy_to_user(info, opp, len))
	139	return -EFAULT;
	140	return 0;
	141	}
	142
8e48aec7 DM	143	static int opromgetprop(void __user argp, struct device_node dp, struct openpromio *op, int bufsize)
8e48aec7 DM	144	{
ccf0dec6	145	const void *pval;
8e48aec7 DM	146	int len;
8e48aec7 DM	147
b9b64e6e DM	148	if (!dp \|\|
	149	!(pval = of_get_property(dp, op->oprom_array, &len)) \|\|
	150	len <= 0 \|\| len > bufsize)
8e48aec7 DM	151	return copyout(argp, op, sizeof(int));
	152
	153	memcpy(op->oprom_array, pval, len);
	154	op->oprom_array[len] = '\0';
	155	op->oprom_size = len;
	156
	157	return copyout(argp, op, sizeof(int) + bufsize);
	158	}
	159
	160	static int opromnxtprop(void __user argp, struct device_node dp, struct openpromio *op, int bufsize)
	161	{
	162	struct property *prop;
	163	int len;
	164
b9b64e6e DM	165	if (!dp)
b9b64e6e DM	166	return copyout(argp, op, sizeof(int));
8e48aec7 DM	167	if (op->oprom_array[0] == '\0') {
	168	prop = dp->properties;
	169	if (!prop)
	170	return copyout(argp, op, sizeof(int));
	171	len = strlen(prop->name);
	172	} else {
	173	prop = of_find_property(dp, op->oprom_array, NULL);
	174
	175	if (!prop \|\|
	176	!prop->next \|\|
	177	(len = strlen(prop->next->name)) + 1 > bufsize)
	178	return copyout(argp, op, sizeof(int));
	179
	180	prop = prop->next;
	181	}
	182
	183	memcpy(op->oprom_array, prop->name, len);
	184	op->oprom_array[len] = '\0';
	185	op->oprom_size = ++len;
	186
	187	return copyout(argp, op, sizeof(int) + bufsize);
	188	}
	189
	190	static int opromsetopt(struct device_node dp, struct openpromio op, int bufsize)
	191	{
	192	char *buf = op->oprom_array + strlen(op->oprom_array) + 1;
	193	int len = op->oprom_array + bufsize - buf;
	194
	195	return of_set_property(options_node, op->oprom_array, buf, len);
	196	}
	197
	198	static int opromnext(void __user argp, unsigned int cmd, struct device_node dp, struct openpromio op, int bufsize, DATA data)
	199	{
	200	phandle ph;
	201
	202	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));
	203
	204	if (bufsize < sizeof(phandle))
	205	return -EINVAL;
	206
	207	ph = ((int ) op->oprom_array);
	208	if (ph) {
	209	dp = of_find_node_by_phandle(ph);
	210	if (!dp)
	211	return -EINVAL;
	212
	213	switch (cmd) {
	214	case OPROMNEXT:
	215	dp = dp->sibling;
	216	break;
	217
	218	case OPROMCHILD:
	219	dp = dp->child;
	220	break;
	221
	222	case OPROMSETCUR:
	223	default:
	224	break;
	225	};
	226	} else {
	227	/* Sibling of node zero is the root node. */
	228	if (cmd != OPROMNEXT)
	229	return -EINVAL;
	230
231	dp = of_find_node_by_path("/");
232	}
233
234	ph = 0;
235	if (dp)
6016a363	236	ph = dp->phandle;
8e48aec7 DM	237
	238	data->current_node = dp;
	239	((int ) op->oprom_array) = ph;
	240	op->oprom_size = sizeof(phandle);
	241
	242	return copyout(argp, op, bufsize + sizeof(int));
	243	}
	244
	245	static int oprompci2node(void __user argp, struct device_node dp, struct openpromio op, int bufsize, DATA data)
	246	{
	247	int err = -EINVAL;
	248
	249	if (bufsize >= 2*sizeof(int)) {
	250	#ifdef CONFIG_PCI
	251	struct pci_dev *pdev;
fa449bd6 DM	252	struct device_node *dp;
fa449bd6 DM	253
7e9f3346	254	pdev = pci_get_bus_and_slot (((int *) op->oprom_array)[0],
8e48aec7 DM	255	((int *) op->oprom_array)[1]);
8e48aec7 DM	256
fa449bd6 DM	257	dp = pci_device_to_OF_node(pdev);
fa449bd6 DM	258	data->current_node = dp;
6016a363	259	((int )op->oprom_array) = dp->phandle;
fa449bd6 DM	260	op->oprom_size = sizeof(int);
	261	err = copyout(argp, op, bufsize + sizeof(int));
	262
7e9f3346	263	pci_dev_put(pdev);
8e48aec7 DM	264	#endif
	265	}
	266
	267	return err;
	268	}
	269
	270	static int oprompath2node(void __user argp, struct device_node dp, struct openpromio op, int bufsize, DATA data)
	271	{
b9b64e6e DM	272	phandle ph = 0;
b9b64e6e DM	273
8e48aec7	274	dp = of_find_node_by_path(op->oprom_array);
b9b64e6e	275	if (dp)
6016a363	276	ph = dp->phandle;
8e48aec7	277	data->current_node = dp;
b9b64e6e	278	((int )op->oprom_array) = ph;
8e48aec7 DM	279	op->oprom_size = sizeof(int);
	280
	281	return copyout(argp, op, bufsize + sizeof(int));
	282	}
	283
	284	static int opromgetbootargs(void __user argp, struct openpromio op, int bufsize)
	285	{
	286	char *buf = saved_command_line;
	287	int len = strlen(buf);
	288
	289	if (len > bufsize)
	290	return -EINVAL;
	291
	292	strcpy(op->oprom_array, buf);
	293	op->oprom_size = len;
	294
	295	return copyout(argp, op, bufsize + sizeof(int));
	296	}
	297
1da177e4 LT	298	/*
	299	* SunOS and Solaris /dev/openprom ioctl calls.
	300	*/
	301	static int openprom_sunos_ioctl(struct inode * inode, struct file * file,
8e48aec7 DM	302	unsigned int cmd, unsigned long arg,
8e48aec7 DM	303	struct device_node *dp)
1da177e4	304	{
8e48aec7	305	DATA *data = file->private_data;
32e5897d	306	struct openpromio *opp = NULL;
8e48aec7	307	int bufsize, error = 0;
1da177e4 LT	308	static int cnt;
	309	void __user argp = (void __user )arg;
	310
	311	if (cmd == OPROMSETOPT)
	312	bufsize = getstrings(argp, &opp);
	313	else
	314	bufsize = copyin(argp, &opp);
	315
	316	if (bufsize < 0)
	317	return bufsize;
	318
	319	switch (cmd) {
	320	case OPROMGETOPT:
	321	case OPROMGETPROP:
8e48aec7	322	error = opromgetprop(argp, dp, opp, bufsize);
1da177e4 LT	323	break;
	324
	325	case OPROMNXTOPT:
	326	case OPROMNXTPROP:
8e48aec7	327	error = opromnxtprop(argp, dp, opp, bufsize);
1da177e4 LT	328	break;
	329
	330	case OPROMSETOPT:
	331	case OPROMSETOPT2:
8e48aec7	332	error = opromsetopt(dp, opp, bufsize);
1da177e4 LT	333	break;
	334
	335	case OPROMNEXT:
	336	case OPROMCHILD:
	337	case OPROMSETCUR:
8e48aec7	338	error = opromnext(argp, cmd, dp, opp, bufsize, data);
1da177e4 LT	339	break;
	340
	341	case OPROMPCI2NODE:
8e48aec7	342	error = oprompci2node(argp, dp, opp, bufsize, data);
1da177e4 LT	343	break;
	344
	345	case OPROMPATH2NODE:
8e48aec7	346	error = oprompath2node(argp, dp, opp, bufsize, data);
1da177e4 LT	347	break;
	348
	349	case OPROMGETBOOTARGS:
8e48aec7	350	error = opromgetbootargs(argp, opp, bufsize);
1da177e4 LT	351	break;
	352
	353	case OPROMU2P:
	354	case OPROMGETCONS:
	355	case OPROMGETFBNAME:
	356	if (cnt++ < 10)
	357	printk(KERN_INFO "openprom_sunos_ioctl: unimplemented ioctl\n");
	358	error = -EINVAL;
	359	break;
	360	default:
	361	if (cnt++ < 10)
	362	printk(KERN_INFO "openprom_sunos_ioctl: cmd 0x%X, arg 0x%lX\n", cmd, arg);
	363	error = -EINVAL;
	364	break;
	365	}
	366
	367	kfree(opp);
	368	return error;
	369	}
	370
8e48aec7	371	static struct device_node get_node(phandle n, DATA data)
1da177e4	372	{
8e48aec7	373	struct device_node *dp = of_find_node_by_phandle(n);
1da177e4	374
8e48aec7 DM	375	if (dp)
	376	data->lastnode = dp;
	377
	378	return dp;
1da177e4 LT	379	}
	380
	381	/* Copy in a whole string from userspace into kernelspace. */
	382	static int copyin_string(char __user user, size_t len, char *ptr)
	383	{
	384	char *tmp;
	385
	386	if ((ssize_t)len < 0 \|\| (ssize_t)(len + 1) < 0)
	387	return -EINVAL;
	388
	389	tmp = kmalloc(len + 1, GFP_KERNEL);
	390	if (!tmp)
	391	return -ENOMEM;
	392
8e48aec7	393	if (copy_from_user(tmp, user, len)) {
1da177e4 LT	394	kfree(tmp);
	395	return -EFAULT;
	396	}
	397
	398	tmp[len] = '\0';
	399
	400	*ptr = tmp;
	401
	402	return 0;
	403	}
	404
	405	/*
	406	* NetBSD /dev/openprom ioctl calls.
	407	*/
8e48aec7	408	static int opiocget(void __user argp, DATA data)
1da177e4	409	{
1da177e4	410	struct opiocdesc op;
8e48aec7 DM	411	struct device_node *dp;
8e48aec7 DM	412	char *str;
ccf0dec6	413	const void *pval;
8e48aec7	414	int err, len;
1da177e4	415
8e48aec7 DM	416	if (copy_from_user(&op, argp, sizeof(op)))
8e48aec7 DM	417	return -EFAULT;
1da177e4	418
8e48aec7	419	dp = get_node(op.op_nodeid, data);
1da177e4	420
8e48aec7 DM	421	err = copyin_string(op.op_name, op.op_namelen, &str);
	422	if (err)
	423	return err;
1da177e4	424
8e48aec7 DM	425	pval = of_get_property(dp, str, &len);
	426	err = 0;
	427	if (!pval \|\| len > op.op_buflen) {
	428	err = -EINVAL;
	429	} else {
1da177e4	430	op.op_buflen = len;
8e48aec7 DM	431	if (copy_to_user(argp, &op, sizeof(op)) \|\|
	432	copy_to_user(op.op_buf, pval, len))
	433	err = -EFAULT;
	434	}
	435	kfree(str);
1da177e4	436
8e48aec7 DM	437	return err;
8e48aec7 DM	438	}
1da177e4	439
8e48aec7 DM	440	static int opiocnextprop(void __user argp, DATA data)
	441	{
	442	struct opiocdesc op;
	443	struct device_node *dp;
	444	struct property *prop;
	445	char *str;
	446	int err, len;
1da177e4	447
8e48aec7 DM	448	if (copy_from_user(&op, argp, sizeof(op)))
8e48aec7 DM	449	return -EFAULT;
1da177e4	450
8e48aec7 DM	451	dp = get_node(op.op_nodeid, data);
	452	if (!dp)
	453	return -EINVAL;
1da177e4	454
8e48aec7 DM	455	err = copyin_string(op.op_name, op.op_namelen, &str);
	456	if (err)
	457	return err;
1da177e4	458
8e48aec7 DM	459	if (str[0] == '\0') {
	460	prop = dp->properties;
	461	} else {
	462	prop = of_find_property(dp, str, NULL);
	463	if (prop)
	464	prop = prop->next;
	465	}
	466	kfree(str);
1da177e4	467
8e48aec7 DM	468	if (!prop)
	469	len = 0;
	470	else
	471	len = prop->length;
1da177e4	472
8e48aec7 DM	473	if (len > op.op_buflen)
8e48aec7 DM	474	len = op.op_buflen;
1da177e4	475
8e48aec7 DM	476	if (copy_to_user(argp, &op, sizeof(op)))
8e48aec7 DM	477	return -EFAULT;
1da177e4	478
8e48aec7 DM	479	if (len &&
	480	copy_to_user(op.op_buf, prop->value, len))
	481	return -EFAULT;
1da177e4	482
8e48aec7 DM	483	return 0;
8e48aec7 DM	484	}
1da177e4	485
8e48aec7 DM	486	static int opiocset(void __user argp, DATA data)
	487	{
	488	struct opiocdesc op;
	489	struct device_node *dp;
	490	char str, tmp;
	491	int err;
1da177e4	492
8e48aec7 DM	493	if (copy_from_user(&op, argp, sizeof(op)))
	494	return -EFAULT;
	495
	496	dp = get_node(op.op_nodeid, data);
	497	if (!dp)
	498	return -EINVAL;
1da177e4	499
8e48aec7 DM	500	err = copyin_string(op.op_name, op.op_namelen, &str);
	501	if (err)
	502	return err;
1da177e4	503
8e48aec7 DM	504	err = copyin_string(op.op_buf, op.op_buflen, &tmp);
8e48aec7 DM	505	if (err) {
1da177e4	506	kfree(str);
8e48aec7 DM	507	return err;
8e48aec7 DM	508	}
1da177e4	509
8e48aec7	510	err = of_set_property(dp, str, tmp, op.op_buflen);
1da177e4	511
8e48aec7 DM	512	kfree(str);
8e48aec7 DM	513	kfree(tmp);
1da177e4	514
8e48aec7 DM	515	return err;
8e48aec7 DM	516	}
1da177e4	517
8e48aec7 DM	518	static int opiocgetnext(unsigned int cmd, void __user *argp)
	519	{
	520	struct device_node *dp;
	521	phandle nd;
1da177e4	522
8e48aec7	523	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));
1da177e4	524
8e48aec7 DM	525	if (copy_from_user(&nd, argp, sizeof(phandle)))
8e48aec7 DM	526	return -EFAULT;
1da177e4	527
8e48aec7 DM	528	if (nd == 0) {
8e48aec7 DM	529	if (cmd != OPIOCGETNEXT)
1da177e4	530	return -EINVAL;
8e48aec7 DM	531	dp = of_find_node_by_path("/");
	532	} else {
	533	dp = of_find_node_by_phandle(nd);
	534	nd = 0;
	535	if (dp) {
	536	if (cmd == OPIOCGETNEXT)
	537	dp = dp->sibling;
	538	else
	539	dp = dp->child;
	540	}
	541	}
	542	if (dp)
6016a363	543	nd = dp->phandle;
8e48aec7 DM	544	if (copy_to_user(argp, &nd, sizeof(phandle)))
8e48aec7 DM	545	return -EFAULT;
1da177e4	546
8e48aec7 DM	547	return 0;
8e48aec7 DM	548	}
1da177e4	549
8e48aec7 DM	550	static int openprom_bsd_ioctl(struct inode * inode, struct file * file,
	551	unsigned int cmd, unsigned long arg)
	552	{
	553	DATA data = (DATA ) file->private_data;
	554	void __user argp = (void __user )arg;
	555	int err;
1da177e4	556
8e48aec7 DM	557	switch (cmd) {
	558	case OPIOCGET:
	559	err = opiocget(argp, data);
	560	break;
1da177e4	561
8e48aec7 DM	562	case OPIOCNEXTPROP:
	563	err = opiocnextprop(argp, data);
	564	break;
1da177e4	565
8e48aec7 DM	566	case OPIOCSET:
	567	err = opiocset(argp, data);
	568	break;
	569
	570	case OPIOCGETOPTNODE:
	571	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));
1da177e4	572
6016a363	573	if (copy_to_user(argp, &options_node->phandle, sizeof(phandle)))
1da177e4 LT	574	return -EFAULT;
	575
	576	return 0;
	577
8e48aec7 DM	578	case OPIOCGETNEXT:
	579	case OPIOCGETCHILD:
	580	err = opiocgetnext(cmd, argp);
	581	break;
	582
1da177e4	583	default:
1da177e4 LT	584	return -EINVAL;
1da177e4 LT	585
8e48aec7 DM	586	};
	587
	588	return err;
1da177e4 LT	589	}
	590
	591
	592	/*
	593	* Handoff control to the correct ioctl handler.
	594	*/
	595	static int openprom_ioctl(struct inode * inode, struct file * file,
	596	unsigned int cmd, unsigned long arg)
	597	{
	598	DATA data = (DATA ) file->private_data;
1da177e4 LT	599
	600	switch (cmd) {
	601	case OPROMGETOPT:
	602	case OPROMNXTOPT:
	603	if ((file->f_mode & FMODE_READ) == 0)
	604	return -EPERM;
	605	return openprom_sunos_ioctl(inode, file, cmd, arg,
	606	options_node);
	607
	608	case OPROMSETOPT:
	609	case OPROMSETOPT2:
	610	if ((file->f_mode & FMODE_WRITE) == 0)
	611	return -EPERM;
	612	return openprom_sunos_ioctl(inode, file, cmd, arg,
	613	options_node);
	614
	615	case OPROMNEXT:
	616	case OPROMCHILD:
	617	case OPROMGETPROP:
	618	case OPROMNXTPROP:
	619	if ((file->f_mode & FMODE_READ) == 0)
	620	return -EPERM;
	621	return openprom_sunos_ioctl(inode, file, cmd, arg,
	622	data->current_node);
	623
	624	case OPROMU2P:
	625	case OPROMGETCONS:
	626	case OPROMGETFBNAME:
	627	case OPROMGETBOOTARGS:
	628	case OPROMSETCUR:
	629	case OPROMPCI2NODE:
	630	case OPROMPATH2NODE:
	631	if ((file->f_mode & FMODE_READ) == 0)
	632	return -EPERM;
a6ded1b0	633	return openprom_sunos_ioctl(inode, file, cmd, arg, NULL);
1da177e4 LT	634
	635	case OPIOCGET:
	636	case OPIOCNEXTPROP:
	637	case OPIOCGETOPTNODE:
	638	case OPIOCGETNEXT:
	639	case OPIOCGETCHILD:
	640	if ((file->f_mode & FMODE_READ) == 0)
	641	return -EBADF;
	642	return openprom_bsd_ioctl(inode,file,cmd,arg);
	643
	644	case OPIOCSET:
	645	if ((file->f_mode & FMODE_WRITE) == 0)
	646	return -EBADF;
	647	return openprom_bsd_ioctl(inode,file,cmd,arg);
	648
	649	default:
1da177e4	650	return -EINVAL;
8e48aec7	651	};
1da177e4 LT	652	}
1da177e4 LT	653
b31023fc CH	654	static long openprom_compat_ioctl(struct file *file, unsigned int cmd,
	655	unsigned long arg)
	656	{
	657	long rval = -ENOTTY;
	658
	659	/*
	660	* SunOS/Solaris only, the NetBSD one's have embedded pointers in
	661	* the arg which we'd need to clean up...
	662	*/
	663	switch (cmd) {
	664	case OPROMGETOPT:
	665	case OPROMSETOPT:
	666	case OPROMNXTOPT:
	667	case OPROMSETOPT2:
	668	case OPROMNEXT:
	669	case OPROMCHILD:
	670	case OPROMGETPROP:
	671	case OPROMNXTPROP:
	672	case OPROMU2P:
	673	case OPROMGETCONS:
	674	case OPROMGETFBNAME:
	675	case OPROMGETBOOTARGS:
	676	case OPROMSETCUR:
	677	case OPROMPCI2NODE:
	678	case OPROMPATH2NODE:
7fa95f72	679	rval = openprom_ioctl(file->f_path.dentry->d_inode, file, cmd, arg);
b31023fc CH	680	break;
b31023fc CH	681	}
d5a858bc DM	682
d5a858bc DM	683	return rval;
b31023fc CH	684	}
b31023fc CH	685
1da177e4 LT	686	static int openprom_open(struct inode * inode, struct file * file)
	687	{
	688	DATA *data;
	689
8e48aec7	690	data = kmalloc(sizeof(DATA), GFP_KERNEL);
1da177e4 LT	691	if (!data)
	692	return -ENOMEM;
	693
7bcc3209	694	lock_kernel();
8e48aec7 DM	695	data->current_node = of_find_node_by_path("/");
	696	data->lastnode = data->current_node;
	697	file->private_data = (void *) data;
7bcc3209	698	unlock_kernel();
1da177e4 LT	699
	700	return 0;
	701	}
	702
	703	static int openprom_release(struct inode * inode, struct file * file)
	704	{
	705	kfree(file->private_data);
	706	return 0;
	707	}
	708
00977a59	709	static const struct file_operations openprom_fops = {
1da177e4 LT	710	.owner = THIS_MODULE,
	711	.llseek = no_llseek,
	712	.ioctl = openprom_ioctl,
d5a858bc	713	.compat_ioctl = openprom_compat_ioctl,
1da177e4 LT	714	.open = openprom_open,
	715	.release = openprom_release,
	716	};
	717
	718	static struct miscdevice openprom_dev = {
8e48aec7 DM	719	.minor = SUN_OPENPROM_MINOR,
	720	.name = "openprom",
	721	.fops = &openprom_fops,
1da177e4 LT	722	};
	723
	724	static int __init openprom_init(void)
	725	{
8e48aec7 DM	726	struct device_node *dp;
8e48aec7 DM	727	int err;
1da177e4	728
8e48aec7 DM	729	err = misc_register(&openprom_dev);
	730	if (err)
	731	return err;
1da177e4	732
8e48aec7 DM	733	dp = of_find_node_by_path("/");
	734	dp = dp->child;
	735	while (dp) {
	736	if (!strcmp(dp->name, "options"))
	737	break;
	738	dp = dp->sibling;
	739	}
	740	options_node = dp;
1da177e4	741
8e48aec7	742	if (!options_node) {
1da177e4 LT	743	misc_deregister(&openprom_dev);
	744	return -EIO;
	745	}
	746
	747	return 0;
	748	}
	749
	750	static void __exit openprom_cleanup(void)
	751	{
	752	misc_deregister(&openprom_dev);
	753	}
	754
	755	module_init(openprom_init);
	756	module_exit(openprom_cleanup);