[net-next-2.6.git] / drivers / sbus / char / openprom.c

/*
 * Linux/SPARC PROM Configuration Driver
 * Copyright (C) 1996 Thomas K. Dyas (tdyas@noc.rutgers.edu)
 * Copyright (C) 1996 Eddie C. Dost  (ecd@skynet.be)
 *
 * This character device driver allows user programs to access the
 * PROM device tree. It is compatible with the SunOS /dev/openprom
 * driver and the NetBSD /dev/openprom driver. The SunOS eeprom
 * utility works without any modifications.
 *
 * The driver uses a minor number under the misc device major. The
 * file read/write mode determines the type of access to the PROM.
 * Interrupts are disabled whenever the driver calls into the PROM for
 * sanity's sake.
 */

/* This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License as
 * published by the Free Software Foundation; either version 2 of the
 * License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 
 */

#include <linux/module.h>
#include <linux/kernel.h>
#include <linux/errno.h>
#include <linux/slab.h>
#include <linux/smp_lock.h>
#include <linux/string.h>
#include <linux/miscdevice.h>
#include <linux/init.h>
#include <linux/fs.h>
#include <asm/oplib.h>
#include <asm/prom.h>
#include <asm/system.h>
#include <asm/uaccess.h>
#include <asm/openpromio.h>
#ifdef CONFIG_PCI
#include <linux/pci.h>
#endif

MODULE_AUTHOR("Thomas K. Dyas (tdyas@noc.rutgers.edu) and Eddie C. Dost  (ecd@skynet.be)");
MODULE_DESCRIPTION("OPENPROM Configuration Driver");
MODULE_LICENSE("GPL");
MODULE_VERSION("1.0");
MODULE_ALIAS_MISCDEV(SUN_OPENPROM_MINOR);

/* Private data kept by the driver for each descriptor. */
typedef struct openprom_private_data
{
	struct device_node *current_node; /* Current node for SunOS ioctls. */
	struct device_node *lastnode; /* Last valid node used by BSD ioctls. */
} DATA;

/* ID of the PROM node containing all of the EEPROM options. */
static struct device_node *options_node;

/*
 * Copy an openpromio structure into kernel space from user space.
 * This routine does error checking to make sure that all memory
 * accesses are within bounds. A pointer to the allocated openpromio
 * structure will be placed in "*opp_p". Return value is the length
 * of the user supplied buffer.
 */
static int copyin(struct openpromio __user *info, struct openpromio **opp_p)
{
	unsigned int bufsize;

	if (!info || !opp_p)
		return -EFAULT;

	if (get_user(bufsize, &info->oprom_size))
		return -EFAULT;

	if (bufsize == 0)
		return -EINVAL;

	/* If the bufsize is too large, just limit it.
	 * Fix from Jason Rappleye.
	 */
	if (bufsize > OPROMMAXPARAM)
		bufsize = OPROMMAXPARAM;

	if (!(*opp_p = kzalloc(sizeof(int) + bufsize + 1, GFP_KERNEL)))
		return -ENOMEM;

	if (copy_from_user(&(*opp_p)->oprom_array,
			   &info->oprom_array, bufsize)) {
		kfree(*opp_p);
		return -EFAULT;
	}
	return bufsize;
}

static int getstrings(struct openpromio __user *info, struct openpromio **opp_p)
{
	int n, bufsize;
	char c;

	if (!info || !opp_p)
		return -EFAULT;

	if (!(*opp_p = kzalloc(sizeof(int) + OPROMMAXPARAM + 1, GFP_KERNEL)))
		return -ENOMEM;

	(*opp_p)->oprom_size = 0;

	n = bufsize = 0;
	while ((n < 2) && (bufsize < OPROMMAXPARAM)) {
		if (get_user(c, &info->oprom_array[bufsize])) {
			kfree(*opp_p);
			return -EFAULT;
		}
		if (c == '\0')
			n++;
		(*opp_p)->oprom_array[bufsize++] = c;
	}
	if (!n) {
		kfree(*opp_p);
		return -EINVAL;
	}
	return bufsize;
}

/*
 * Copy an openpromio structure in kernel space back to user space.
 */
static int copyout(void __user *info, struct openpromio *opp, int len)
{
	if (copy_to_user(info, opp, len))
		return -EFAULT;
	return 0;
}

static int opromgetprop(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize)
{
	const void *pval;
	int len;

	if (!dp ||
	    !(pval = of_get_property(dp, op->oprom_array, &len)) ||
	    len <= 0 || len > bufsize)
		return copyout(argp, op, sizeof(int));

	memcpy(op->oprom_array, pval, len);
	op->oprom_array[len] = '\0';
	op->oprom_size = len;

	return copyout(argp, op, sizeof(int) + bufsize);
}

static int opromnxtprop(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize)
{
	struct property *prop;
	int len;

	if (!dp)
		return copyout(argp, op, sizeof(int));
	if (op->oprom_array[0] == '\0') {
		prop = dp->properties;
		if (!prop)
			return copyout(argp, op, sizeof(int));
		len = strlen(prop->name);
	} else {
		prop = of_find_property(dp, op->oprom_array, NULL);

		if (!prop ||
		    !prop->next ||
		    (len = strlen(prop->next->name)) + 1 > bufsize)
			return copyout(argp, op, sizeof(int));

		prop = prop->next;
	}

	memcpy(op->oprom_array, prop->name, len);
	op->oprom_array[len] = '\0';
	op->oprom_size = ++len;

	return copyout(argp, op, sizeof(int) + bufsize);
}

static int opromsetopt(struct device_node *dp, struct openpromio *op, int bufsize)
{
	char *buf = op->oprom_array + strlen(op->oprom_array) + 1;
	int len = op->oprom_array + bufsize - buf;

	return of_set_property(options_node, op->oprom_array, buf, len);
}

static int opromnext(void __user *argp, unsigned int cmd, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)
{
	phandle ph;

	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));

	if (bufsize < sizeof(phandle))
		return -EINVAL;

	ph = *((int *) op->oprom_array);
	if (ph) {
		dp = of_find_node_by_phandle(ph);
		if (!dp)
			return -EINVAL;

		switch (cmd) {
		case OPROMNEXT:
			dp = dp->sibling;
			break;

		case OPROMCHILD:
			dp = dp->child;
			break;

		case OPROMSETCUR:
		default:
			break;
		};
	} else {
		/* Sibling of node zero is the root node.  */
		if (cmd != OPROMNEXT)
			return -EINVAL;

		dp = of_find_node_by_path("/");
	}

	ph = 0;
	if (dp)
		ph = dp->phandle;

	data->current_node = dp;
	*((int *) op->oprom_array) = ph;
	op->oprom_size = sizeof(phandle);

	return copyout(argp, op, bufsize + sizeof(int));
}

static int oprompci2node(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)
{
	int err = -EINVAL;

	if (bufsize >= 2*sizeof(int)) {
#ifdef CONFIG_PCI
		struct pci_dev *pdev;
		struct device_node *dp;

		pdev = pci_get_bus_and_slot (((int *) op->oprom_array)[0],
				      ((int *) op->oprom_array)[1]);

		dp = pci_device_to_OF_node(pdev);
		data->current_node = dp;
		*((int *)op->oprom_array) = dp->phandle;
		op->oprom_size = sizeof(int);
		err = copyout(argp, op, bufsize + sizeof(int));

		pci_dev_put(pdev);
#endif
	}

	return err;
}

static int oprompath2node(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)
{
	phandle ph = 0;

	dp = of_find_node_by_path(op->oprom_array);
	if (dp)
		ph = dp->phandle;
	data->current_node = dp;
	*((int *)op->oprom_array) = ph;
	op->oprom_size = sizeof(int);

	return copyout(argp, op, bufsize + sizeof(int));
}

static int opromgetbootargs(void __user *argp, struct openpromio *op, int bufsize)
{
	char *buf = saved_command_line;
	int len = strlen(buf);

	if (len > bufsize)
		return -EINVAL;

	strcpy(op->oprom_array, buf);
	op->oprom_size = len;

	return copyout(argp, op, bufsize + sizeof(int));
}

/*
 *	SunOS and Solaris /dev/openprom ioctl calls.
 */
static long openprom_sunos_ioctl(struct file * file,
				 unsigned int cmd, unsigned long arg,
				 struct device_node *dp)
{
	DATA *data = file->private_data;
	struct openpromio *opp = NULL;
	int bufsize, error = 0;
	static int cnt;
	void __user *argp = (void __user *)arg;

	if (cmd == OPROMSETOPT)
		bufsize = getstrings(argp, &opp);
	else
		bufsize = copyin(argp, &opp);

	if (bufsize < 0)
		return bufsize;

	lock_kernel();

	switch (cmd) {
	case OPROMGETOPT:
	case OPROMGETPROP:
		error = opromgetprop(argp, dp, opp, bufsize);
		break;

	case OPROMNXTOPT:
	case OPROMNXTPROP:
		error = opromnxtprop(argp, dp, opp, bufsize);
		break;

	case OPROMSETOPT:
	case OPROMSETOPT2:
		error = opromsetopt(dp, opp, bufsize);
		break;

	case OPROMNEXT:
	case OPROMCHILD:
	case OPROMSETCUR:
		error = opromnext(argp, cmd, dp, opp, bufsize, data);
		break;

	case OPROMPCI2NODE:
		error = oprompci2node(argp, dp, opp, bufsize, data);
		break;

	case OPROMPATH2NODE:
		error = oprompath2node(argp, dp, opp, bufsize, data);
		break;

	case OPROMGETBOOTARGS:
		error = opromgetbootargs(argp, opp, bufsize);
		break;

	case OPROMU2P:
	case OPROMGETCONS:
	case OPROMGETFBNAME:
		if (cnt++ < 10)
			printk(KERN_INFO "openprom_sunos_ioctl: unimplemented ioctl\n");
		error = -EINVAL;
		break;
	default:
		if (cnt++ < 10)
			printk(KERN_INFO "openprom_sunos_ioctl: cmd 0x%X, arg 0x%lX\n", cmd, arg);
		error = -EINVAL;
		break;
	}

	kfree(opp);
	unlock_kernel();

	return error;
}

static struct device_node *get_node(phandle n, DATA *data)
{
	struct device_node *dp = of_find_node_by_phandle(n);

	if (dp)
		data->lastnode = dp;

	return dp;
}

/* Copy in a whole string from userspace into kernelspace. */
static int copyin_string(char __user *user, size_t len, char **ptr)
{
	char *tmp;

	if ((ssize_t)len < 0 || (ssize_t)(len + 1) < 0)
		return -EINVAL;

	tmp = kmalloc(len + 1, GFP_KERNEL);
	if (!tmp)
		return -ENOMEM;

	if (copy_from_user(tmp, user, len)) {
		kfree(tmp);
		return -EFAULT;
	}

	tmp[len] = '\0';

	*ptr = tmp;

	return 0;
}

/*
 *	NetBSD /dev/openprom ioctl calls.
 */
static int opiocget(void __user *argp, DATA *data)
{
	struct opiocdesc op;
	struct device_node *dp;
	char *str;
	const void *pval;
	int err, len;

	if (copy_from_user(&op, argp, sizeof(op)))
		return -EFAULT;

	dp = get_node(op.op_nodeid, data);

	err = copyin_string(op.op_name, op.op_namelen, &str);
	if (err)
		return err;

	pval = of_get_property(dp, str, &len);
	err = 0;
	if (!pval || len > op.op_buflen) {
		err = -EINVAL;
	} else {
		op.op_buflen = len;
		if (copy_to_user(argp, &op, sizeof(op)) ||
		    copy_to_user(op.op_buf, pval, len))
			err = -EFAULT;
	}
	kfree(str);

	return err;
}

static int opiocnextprop(void __user *argp, DATA *data)
{
	struct opiocdesc op;
	struct device_node *dp;
	struct property *prop;
	char *str;
	int err, len;

	if (copy_from_user(&op, argp, sizeof(op)))
		return -EFAULT;

	dp = get_node(op.op_nodeid, data);
	if (!dp)
		return -EINVAL;

	err = copyin_string(op.op_name, op.op_namelen, &str);
	if (err)
		return err;

	if (str[0] == '\0') {
		prop = dp->properties;
	} else {
		prop = of_find_property(dp, str, NULL);
		if (prop)
			prop = prop->next;
	}
	kfree(str);

	if (!prop)
		len = 0;
	else
		len = prop->length;

	if (len > op.op_buflen)
		len = op.op_buflen;

	if (copy_to_user(argp, &op, sizeof(op)))
		return -EFAULT;

	if (len &&
	    copy_to_user(op.op_buf, prop->value, len))
		return -EFAULT;

	return 0;
}

static int opiocset(void __user *argp, DATA *data)
{
	struct opiocdesc op;
	struct device_node *dp;
	char *str, *tmp;
	int err;

	if (copy_from_user(&op, argp, sizeof(op)))
		return -EFAULT;

	dp = get_node(op.op_nodeid, data);
	if (!dp)
		return -EINVAL;

	err = copyin_string(op.op_name, op.op_namelen, &str);
	if (err)
		return err;

	err = copyin_string(op.op_buf, op.op_buflen, &tmp);
	if (err) {
		kfree(str);
		return err;
	}

	err = of_set_property(dp, str, tmp, op.op_buflen);

	kfree(str);
	kfree(tmp);

	return err;
}

static int opiocgetnext(unsigned int cmd, void __user *argp)
{
	struct device_node *dp;
	phandle nd;

	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));

	if (copy_from_user(&nd, argp, sizeof(phandle)))
		return -EFAULT;

	if (nd == 0) {
		if (cmd != OPIOCGETNEXT)
			return -EINVAL;
		dp = of_find_node_by_path("/");
	} else {
		dp = of_find_node_by_phandle(nd);
		nd = 0;
		if (dp) {
			if (cmd == OPIOCGETNEXT)
				dp = dp->sibling;
			else
				dp = dp->child;
		}
	}
	if (dp)
		nd = dp->phandle;
	if (copy_to_user(argp, &nd, sizeof(phandle)))
		return -EFAULT;

	return 0;
}

static int openprom_bsd_ioctl(struct file * file,
			      unsigned int cmd, unsigned long arg)
{
	DATA *data = file->private_data;
	void __user *argp = (void __user *)arg;
	int err;

	lock_kernel();
	switch (cmd) {
	case OPIOCGET:
		err = opiocget(argp, data);
		break;

	case OPIOCNEXTPROP:
		err = opiocnextprop(argp, data);
		break;

	case OPIOCSET:
		err = opiocset(argp, data);
		break;

	case OPIOCGETOPTNODE:
		BUILD_BUG_ON(sizeof(phandle) != sizeof(int));

		err = 0;
		if (copy_to_user(argp, &options_node->phandle, sizeof(phandle)))
			err = -EFAULT;
		break;

	case OPIOCGETNEXT:
	case OPIOCGETCHILD:
		err = opiocgetnext(cmd, argp);
		break;

	default:
		err = -EINVAL;
		break;
	};
	unlock_kernel();

	return err;
}


/*
 *	Handoff control to the correct ioctl handler.
 */
static long openprom_ioctl(struct file * file,
			   unsigned int cmd, unsigned long arg)
{
	DATA *data = file->private_data;

	switch (cmd) {
	case OPROMGETOPT:
	case OPROMNXTOPT:
		if ((file->f_mode & FMODE_READ) == 0)
			return -EPERM;
		return openprom_sunos_ioctl(file, cmd, arg,
					    options_node);

	case OPROMSETOPT:
	case OPROMSETOPT2:
		if ((file->f_mode & FMODE_WRITE) == 0)
			return -EPERM;
		return openprom_sunos_ioctl(file, cmd, arg,
					    options_node);

	case OPROMNEXT:
	case OPROMCHILD:
	case OPROMGETPROP:
	case OPROMNXTPROP:
		if ((file->f_mode & FMODE_READ) == 0)
			return -EPERM;
		return openprom_sunos_ioctl(file, cmd, arg,
					    data->current_node);

	case OPROMU2P:
	case OPROMGETCONS:
	case OPROMGETFBNAME:
	case OPROMGETBOOTARGS:
	case OPROMSETCUR:
	case OPROMPCI2NODE:
	case OPROMPATH2NODE:
		if ((file->f_mode & FMODE_READ) == 0)
			return -EPERM;
		return openprom_sunos_ioctl(file, cmd, arg, NULL);

	case OPIOCGET:
	case OPIOCNEXTPROP:
	case OPIOCGETOPTNODE:
	case OPIOCGETNEXT:
	case OPIOCGETCHILD:
		if ((file->f_mode & FMODE_READ) == 0)
			return -EBADF;
		return openprom_bsd_ioctl(file,cmd,arg);

	case OPIOCSET:
		if ((file->f_mode & FMODE_WRITE) == 0)
			return -EBADF;
		return openprom_bsd_ioctl(file,cmd,arg);

	default:
		return -EINVAL;
	};
}

static long openprom_compat_ioctl(struct file *file, unsigned int cmd,
		unsigned long arg)
{
	long rval = -ENOTTY;

	/*
	 * SunOS/Solaris only, the NetBSD one's have embedded pointers in
	 * the arg which we'd need to clean up...
	 */
	switch (cmd) {
	case OPROMGETOPT:
	case OPROMSETOPT:
	case OPROMNXTOPT:
	case OPROMSETOPT2:
	case OPROMNEXT:
	case OPROMCHILD:
	case OPROMGETPROP:
	case OPROMNXTPROP:
	case OPROMU2P:
	case OPROMGETCONS:
	case OPROMGETFBNAME:
	case OPROMGETBOOTARGS:
	case OPROMSETCUR:
	case OPROMPCI2NODE:
	case OPROMPATH2NODE:
		rval = openprom_ioctl(file, cmd, arg);
		break;
	}

	return rval;
}

static int openprom_open(struct inode * inode, struct file * file)
{
	DATA *data;

	data = kmalloc(sizeof(DATA), GFP_KERNEL);
	if (!data)
		return -ENOMEM;

	lock_kernel();
	data->current_node = of_find_node_by_path("/");
	data->lastnode = data->current_node;
	file->private_data = (void *) data;
	unlock_kernel();

	return 0;
}

static int openprom_release(struct inode * inode, struct file * file)
{
	kfree(file->private_data);
	return 0;
}

static const struct file_operations openprom_fops = {
	.owner =	THIS_MODULE,
	.llseek =	no_llseek,
	.unlocked_ioctl = openprom_ioctl,
	.compat_ioctl =	openprom_compat_ioctl,
	.open =		openprom_open,
	.release =	openprom_release,
};

static struct miscdevice openprom_dev = {
	.minor		= SUN_OPENPROM_MINOR,
	.name		= "openprom",
	.fops		= &openprom_fops,
};

static int __init openprom_init(void)
{
	struct device_node *dp;
	int err;

	err = misc_register(&openprom_dev);
	if (err)
		return err;

	dp = of_find_node_by_path("/");
	dp = dp->child;
	while (dp) {
		if (!strcmp(dp->name, "options"))
			break;
		dp = dp->sibling;
	}
	options_node = dp;

	if (!options_node) {
		misc_deregister(&openprom_dev);
		return -EIO;
	}

	return 0;
}

static void __exit openprom_cleanup(void)
{
	misc_deregister(&openprom_dev);
}

module_init(openprom_init);
module_exit(openprom_cleanup);
Commit	Line	Data
1da177e4 LT	1	/*
	2	* Linux/SPARC PROM Configuration Driver
	3	* Copyright (C) 1996 Thomas K. Dyas (tdyas@noc.rutgers.edu)
	4	* Copyright (C) 1996 Eddie C. Dost (ecd@skynet.be)
	5	*
	6	* This character device driver allows user programs to access the
	7	* PROM device tree. It is compatible with the SunOS /dev/openprom
	8	* driver and the NetBSD /dev/openprom driver. The SunOS eeprom
	9	* utility works without any modifications.
	10	*
	11	* The driver uses a minor number under the misc device major. The
	12	* file read/write mode determines the type of access to the PROM.
	13	* Interrupts are disabled whenever the driver calls into the PROM for
	14	* sanity's sake.
	15	*/
	16
	17	/* This program is free software; you can redistribute it and/or
	18	* modify it under the terms of the GNU General Public License as
	19	* published by the Free Software Foundation; either version 2 of the
	20	* License, or (at your option) any later version.
	21	*
	22	* This program is distributed in the hope that it will be useful, but
	23	* WITHOUT ANY WARRANTY; without even the implied warranty of
	24	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	25	* General Public License for more details.
	26	*
	27	* You should have received a copy of the GNU General Public License
	28	* along with this program; if not, write to the Free Software
	29	* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
	30	*/
	31
1da177e4 LT	32	#include <linux/module.h>
1da177e4 LT	33	#include <linux/kernel.h>
1da177e4 LT	34	#include <linux/errno.h>
1da177e4 LT	35	#include <linux/slab.h>
7bcc3209	36	#include <linux/smp_lock.h>
1da177e4 LT	37	#include <linux/string.h>
	38	#include <linux/miscdevice.h>
	39	#include <linux/init.h>
	40	#include <linux/fs.h>
	41	#include <asm/oplib.h>
8e48aec7	42	#include <asm/prom.h>
1da177e4 LT	43	#include <asm/system.h>
	44	#include <asm/uaccess.h>
	45	#include <asm/openpromio.h>
	46	#ifdef CONFIG_PCI
	47	#include <linux/pci.h>
1da177e4 LT	48	#endif
1da177e4 LT	49
8e48aec7 DM	50	MODULE_AUTHOR("Thomas K. Dyas (tdyas@noc.rutgers.edu) and Eddie C. Dost (ecd@skynet.be)");
	51	MODULE_DESCRIPTION("OPENPROM Configuration Driver");
	52	MODULE_LICENSE("GPL");
	53	MODULE_VERSION("1.0");
1c339eb1	54	MODULE_ALIAS_MISCDEV(SUN_OPENPROM_MINOR);
8e48aec7	55
1da177e4 LT	56	/* Private data kept by the driver for each descriptor. */
	57	typedef struct openprom_private_data
	58	{
8e48aec7 DM	59	struct device_node current_node; / Current node for SunOS ioctls. */
8e48aec7 DM	60	struct device_node lastnode; / Last valid node used by BSD ioctls. */
1da177e4 LT	61	} DATA;
	62
	63	/* ID of the PROM node containing all of the EEPROM options. */
8e48aec7	64	static struct device_node *options_node;
1da177e4 LT	65
	66	/*
	67	* Copy an openpromio structure into kernel space from user space.
	68	* This routine does error checking to make sure that all memory
	69	* accesses are within bounds. A pointer to the allocated openpromio
	70	* structure will be placed in "*opp_p". Return value is the length
	71	* of the user supplied buffer.
	72	*/
	73	static int copyin(struct openpromio __user info, struct openpromio *opp_p)
	74	{
	75	unsigned int bufsize;
	76
	77	if (!info \|\| !opp_p)
	78	return -EFAULT;
	79
	80	if (get_user(bufsize, &info->oprom_size))
	81	return -EFAULT;
	82
	83	if (bufsize == 0)
	84	return -EINVAL;
	85
	86	/* If the bufsize is too large, just limit it.
	87	* Fix from Jason Rappleye.
	88	*/
	89	if (bufsize > OPROMMAXPARAM)
	90	bufsize = OPROMMAXPARAM;
	91
8e48aec7	92	if (!(*opp_p = kzalloc(sizeof(int) + bufsize + 1, GFP_KERNEL)))
1da177e4	93	return -ENOMEM;
1da177e4 LT	94
	95	if (copy_from_user(&(*opp_p)->oprom_array,
	96	&info->oprom_array, bufsize)) {
	97	kfree(*opp_p);
	98	return -EFAULT;
	99	}
	100	return bufsize;
	101	}
	102
	103	static int getstrings(struct openpromio __user info, struct openpromio *opp_p)
	104	{
	105	int n, bufsize;
	106	char c;
	107
	108	if (!info \|\| !opp_p)
	109	return -EFAULT;
	110
8e48aec7	111	if (!(*opp_p = kzalloc(sizeof(int) + OPROMMAXPARAM + 1, GFP_KERNEL)))
1da177e4 LT	112	return -ENOMEM;
1da177e4 LT	113
1da177e4 LT	114	(*opp_p)->oprom_size = 0;
	115
	116	n = bufsize = 0;
	117	while ((n < 2) && (bufsize < OPROMMAXPARAM)) {
	118	if (get_user(c, &info->oprom_array[bufsize])) {
	119	kfree(*opp_p);
	120	return -EFAULT;
	121	}
	122	if (c == '\0')
	123	n++;
	124	(*opp_p)->oprom_array[bufsize++] = c;
	125	}
	126	if (!n) {
	127	kfree(*opp_p);
	128	return -EINVAL;
	129	}
	130	return bufsize;
	131	}
	132
	133	/*
	134	* Copy an openpromio structure in kernel space back to user space.
	135	*/
	136	static int copyout(void __user info, struct openpromio opp, int len)
	137	{
	138	if (copy_to_user(info, opp, len))
	139	return -EFAULT;
	140	return 0;
	141	}
	142
8e48aec7 DM	143	static int opromgetprop(void __user argp, struct device_node dp, struct openpromio *op, int bufsize)
8e48aec7 DM	144	{
ccf0dec6	145	const void *pval;
8e48aec7 DM	146	int len;
8e48aec7 DM	147
b9b64e6e DM	148	if (!dp \|\|
	149	!(pval = of_get_property(dp, op->oprom_array, &len)) \|\|
	150	len <= 0 \|\| len > bufsize)
8e48aec7 DM	151	return copyout(argp, op, sizeof(int));
	152
	153	memcpy(op->oprom_array, pval, len);
	154	op->oprom_array[len] = '\0';
	155	op->oprom_size = len;
	156
	157	return copyout(argp, op, sizeof(int) + bufsize);
	158	}
	159
	160	static int opromnxtprop(void __user argp, struct device_node dp, struct openpromio *op, int bufsize)
	161	{
	162	struct property *prop;
	163	int len;
	164
b9b64e6e DM	165	if (!dp)
b9b64e6e DM	166	return copyout(argp, op, sizeof(int));
8e48aec7 DM	167	if (op->oprom_array[0] == '\0') {
	168	prop = dp->properties;
	169	if (!prop)
	170	return copyout(argp, op, sizeof(int));
	171	len = strlen(prop->name);
	172	} else {
	173	prop = of_find_property(dp, op->oprom_array, NULL);
	174
	175	if (!prop \|\|
	176	!prop->next \|\|
	177	(len = strlen(prop->next->name)) + 1 > bufsize)
	178	return copyout(argp, op, sizeof(int));
	179
	180	prop = prop->next;
	181	}
	182
	183	memcpy(op->oprom_array, prop->name, len);
	184	op->oprom_array[len] = '\0';
	185	op->oprom_size = ++len;
	186
	187	return copyout(argp, op, sizeof(int) + bufsize);
	188	}
	189
	190	static int opromsetopt(struct device_node dp, struct openpromio op, int bufsize)
	191	{
	192	char *buf = op->oprom_array + strlen(op->oprom_array) + 1;
	193	int len = op->oprom_array + bufsize - buf;
	194
	195	return of_set_property(options_node, op->oprom_array, buf, len);
	196	}
	197
	198	static int opromnext(void __user argp, unsigned int cmd, struct device_node dp, struct openpromio op, int bufsize, DATA data)
	199	{
	200	phandle ph;
	201
	202	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));
	203
	204	if (bufsize < sizeof(phandle))
	205	return -EINVAL;
	206
	207	ph = ((int ) op->oprom_array);
	208	if (ph) {
	209	dp = of_find_node_by_phandle(ph);
	210	if (!dp)
	211	return -EINVAL;
	212
	213	switch (cmd) {
	214	case OPROMNEXT:
	215	dp = dp->sibling;
	216	break;
	217
	218	case OPROMCHILD:
	219	dp = dp->child;
	220	break;
	221
	222	case OPROMSETCUR:
	223	default:
	224	break;
	225	};
	226	} else {
	227	/* Sibling of node zero is the root node. */
	228	if (cmd != OPROMNEXT)
	229	return -EINVAL;
	230
231	dp = of_find_node_by_path("/");
232	}
233
234	ph = 0;
235	if (dp)
6016a363	236	ph = dp->phandle;
8e48aec7 DM	237
	238	data->current_node = dp;
	239	((int ) op->oprom_array) = ph;
	240	op->oprom_size = sizeof(phandle);
	241
	242	return copyout(argp, op, bufsize + sizeof(int));
	243	}
	244
	245	static int oprompci2node(void __user argp, struct device_node dp, struct openpromio op, int bufsize, DATA data)
	246	{
	247	int err = -EINVAL;
	248
	249	if (bufsize >= 2*sizeof(int)) {
	250	#ifdef CONFIG_PCI
	251	struct pci_dev *pdev;
fa449bd6 DM	252	struct device_node *dp;
fa449bd6 DM	253
7e9f3346	254	pdev = pci_get_bus_and_slot (((int *) op->oprom_array)[0],
8e48aec7 DM	255	((int *) op->oprom_array)[1]);
8e48aec7 DM	256
fa449bd6 DM	257	dp = pci_device_to_OF_node(pdev);
fa449bd6 DM	258	data->current_node = dp;
6016a363	259	((int )op->oprom_array) = dp->phandle;
fa449bd6 DM	260	op->oprom_size = sizeof(int);
	261	err = copyout(argp, op, bufsize + sizeof(int));
	262
7e9f3346	263	pci_dev_put(pdev);
8e48aec7 DM	264	#endif
	265	}
	266
	267	return err;
	268	}
	269
	270	static int oprompath2node(void __user argp, struct device_node dp, struct openpromio op, int bufsize, DATA data)
	271	{
b9b64e6e DM	272	phandle ph = 0;
b9b64e6e DM	273
8e48aec7	274	dp = of_find_node_by_path(op->oprom_array);
b9b64e6e	275	if (dp)
6016a363	276	ph = dp->phandle;
8e48aec7	277	data->current_node = dp;
b9b64e6e	278	((int )op->oprom_array) = ph;
8e48aec7 DM	279	op->oprom_size = sizeof(int);
	280
	281	return copyout(argp, op, bufsize + sizeof(int));
	282	}
	283
	284	static int opromgetbootargs(void __user argp, struct openpromio op, int bufsize)
	285	{
	286	char *buf = saved_command_line;
	287	int len = strlen(buf);
	288
	289	if (len > bufsize)
	290	return -EINVAL;
	291
	292	strcpy(op->oprom_array, buf);
	293	op->oprom_size = len;
	294
	295	return copyout(argp, op, bufsize + sizeof(int));
	296	}
	297
1da177e4 LT	298	/*
	299	* SunOS and Solaris /dev/openprom ioctl calls.
	300	*/
55929332 AB	301	static long openprom_sunos_ioctl(struct file * file,
	302	unsigned int cmd, unsigned long arg,
	303	struct device_node *dp)
1da177e4	304	{
8e48aec7	305	DATA *data = file->private_data;
32e5897d	306	struct openpromio *opp = NULL;
8e48aec7	307	int bufsize, error = 0;
1da177e4 LT	308	static int cnt;
	309	void __user argp = (void __user )arg;
	310
	311	if (cmd == OPROMSETOPT)
	312	bufsize = getstrings(argp, &opp);
	313	else
	314	bufsize = copyin(argp, &opp);
	315
	316	if (bufsize < 0)
	317	return bufsize;
	318
55929332 AB	319	lock_kernel();
55929332 AB	320
1da177e4 LT	321	switch (cmd) {
	322	case OPROMGETOPT:
	323	case OPROMGETPROP:
8e48aec7	324	error = opromgetprop(argp, dp, opp, bufsize);
1da177e4 LT	325	break;
	326
	327	case OPROMNXTOPT:
	328	case OPROMNXTPROP:
8e48aec7	329	error = opromnxtprop(argp, dp, opp, bufsize);
1da177e4 LT	330	break;
	331
	332	case OPROMSETOPT:
	333	case OPROMSETOPT2:
8e48aec7	334	error = opromsetopt(dp, opp, bufsize);
1da177e4 LT	335	break;
	336
	337	case OPROMNEXT:
	338	case OPROMCHILD:
	339	case OPROMSETCUR:
8e48aec7	340	error = opromnext(argp, cmd, dp, opp, bufsize, data);
1da177e4 LT	341	break;
	342
	343	case OPROMPCI2NODE:
8e48aec7	344	error = oprompci2node(argp, dp, opp, bufsize, data);
1da177e4 LT	345	break;
	346
	347	case OPROMPATH2NODE:
8e48aec7	348	error = oprompath2node(argp, dp, opp, bufsize, data);
1da177e4 LT	349	break;
	350
	351	case OPROMGETBOOTARGS:
8e48aec7	352	error = opromgetbootargs(argp, opp, bufsize);
1da177e4 LT	353	break;
	354
	355	case OPROMU2P:
	356	case OPROMGETCONS:
	357	case OPROMGETFBNAME:
	358	if (cnt++ < 10)
	359	printk(KERN_INFO "openprom_sunos_ioctl: unimplemented ioctl\n");
	360	error = -EINVAL;
	361	break;
	362	default:
	363	if (cnt++ < 10)
	364	printk(KERN_INFO "openprom_sunos_ioctl: cmd 0x%X, arg 0x%lX\n", cmd, arg);
	365	error = -EINVAL;
	366	break;
	367	}
	368
	369	kfree(opp);
55929332 AB	370	unlock_kernel();
55929332 AB	371
1da177e4 LT	372	return error;
	373	}
	374
8e48aec7	375	static struct device_node get_node(phandle n, DATA data)
1da177e4	376	{
8e48aec7	377	struct device_node *dp = of_find_node_by_phandle(n);
1da177e4	378
8e48aec7 DM	379	if (dp)
	380	data->lastnode = dp;
	381
	382	return dp;
1da177e4 LT	383	}
	384
	385	/* Copy in a whole string from userspace into kernelspace. */
	386	static int copyin_string(char __user user, size_t len, char *ptr)
	387	{
	388	char *tmp;
	389
	390	if ((ssize_t)len < 0 \|\| (ssize_t)(len + 1) < 0)
	391	return -EINVAL;
	392
	393	tmp = kmalloc(len + 1, GFP_KERNEL);
	394	if (!tmp)
	395	return -ENOMEM;
	396
8e48aec7	397	if (copy_from_user(tmp, user, len)) {
1da177e4 LT	398	kfree(tmp);
	399	return -EFAULT;
	400	}
	401
	402	tmp[len] = '\0';
	403
	404	*ptr = tmp;
	405
	406	return 0;
	407	}
	408
	409	/*
	410	* NetBSD /dev/openprom ioctl calls.
	411	*/
8e48aec7	412	static int opiocget(void __user argp, DATA data)
1da177e4	413	{
1da177e4	414	struct opiocdesc op;
8e48aec7 DM	415	struct device_node *dp;
8e48aec7 DM	416	char *str;
ccf0dec6	417	const void *pval;
8e48aec7	418	int err, len;
1da177e4	419
8e48aec7 DM	420	if (copy_from_user(&op, argp, sizeof(op)))
8e48aec7 DM	421	return -EFAULT;
1da177e4	422
8e48aec7	423	dp = get_node(op.op_nodeid, data);
1da177e4	424
8e48aec7 DM	425	err = copyin_string(op.op_name, op.op_namelen, &str);
	426	if (err)
	427	return err;
1da177e4	428
8e48aec7 DM	429	pval = of_get_property(dp, str, &len);
	430	err = 0;
	431	if (!pval \|\| len > op.op_buflen) {
	432	err = -EINVAL;
	433	} else {
1da177e4	434	op.op_buflen = len;
8e48aec7 DM	435	if (copy_to_user(argp, &op, sizeof(op)) \|\|
	436	copy_to_user(op.op_buf, pval, len))
	437	err = -EFAULT;
	438	}
	439	kfree(str);
1da177e4	440
8e48aec7 DM	441	return err;
8e48aec7 DM	442	}
1da177e4	443
8e48aec7 DM	444	static int opiocnextprop(void __user argp, DATA data)
	445	{
	446	struct opiocdesc op;
	447	struct device_node *dp;
	448	struct property *prop;
	449	char *str;
	450	int err, len;
1da177e4	451
8e48aec7 DM	452	if (copy_from_user(&op, argp, sizeof(op)))
8e48aec7 DM	453	return -EFAULT;
1da177e4	454
8e48aec7 DM	455	dp = get_node(op.op_nodeid, data);
	456	if (!dp)
	457	return -EINVAL;
1da177e4	458
8e48aec7 DM	459	err = copyin_string(op.op_name, op.op_namelen, &str);
	460	if (err)
	461	return err;
1da177e4	462
8e48aec7 DM	463	if (str[0] == '\0') {
	464	prop = dp->properties;
	465	} else {
	466	prop = of_find_property(dp, str, NULL);
	467	if (prop)
	468	prop = prop->next;
	469	}
	470	kfree(str);
1da177e4	471
8e48aec7 DM	472	if (!prop)
	473	len = 0;
	474	else
	475	len = prop->length;
1da177e4	476
8e48aec7 DM	477	if (len > op.op_buflen)
8e48aec7 DM	478	len = op.op_buflen;
1da177e4	479
8e48aec7 DM	480	if (copy_to_user(argp, &op, sizeof(op)))
8e48aec7 DM	481	return -EFAULT;
1da177e4	482
8e48aec7 DM	483	if (len &&
	484	copy_to_user(op.op_buf, prop->value, len))
	485	return -EFAULT;
1da177e4	486
8e48aec7 DM	487	return 0;
8e48aec7 DM	488	}
1da177e4	489
8e48aec7 DM	490	static int opiocset(void __user argp, DATA data)
	491	{
	492	struct opiocdesc op;
	493	struct device_node *dp;
	494	char str, tmp;
	495	int err;
1da177e4	496
8e48aec7 DM	497	if (copy_from_user(&op, argp, sizeof(op)))
	498	return -EFAULT;
	499
	500	dp = get_node(op.op_nodeid, data);
	501	if (!dp)
	502	return -EINVAL;
1da177e4	503
8e48aec7 DM	504	err = copyin_string(op.op_name, op.op_namelen, &str);
	505	if (err)
	506	return err;
1da177e4	507
8e48aec7 DM	508	err = copyin_string(op.op_buf, op.op_buflen, &tmp);
8e48aec7 DM	509	if (err) {
1da177e4	510	kfree(str);
8e48aec7 DM	511	return err;
8e48aec7 DM	512	}
1da177e4	513
8e48aec7	514	err = of_set_property(dp, str, tmp, op.op_buflen);
1da177e4	515
8e48aec7 DM	516	kfree(str);
8e48aec7 DM	517	kfree(tmp);
1da177e4	518
8e48aec7 DM	519	return err;
8e48aec7 DM	520	}
1da177e4	521
8e48aec7 DM	522	static int opiocgetnext(unsigned int cmd, void __user *argp)
	523	{
	524	struct device_node *dp;
	525	phandle nd;
1da177e4	526
8e48aec7	527	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));
1da177e4	528
8e48aec7 DM	529	if (copy_from_user(&nd, argp, sizeof(phandle)))
8e48aec7 DM	530	return -EFAULT;
1da177e4	531
8e48aec7 DM	532	if (nd == 0) {
8e48aec7 DM	533	if (cmd != OPIOCGETNEXT)
1da177e4	534	return -EINVAL;
8e48aec7 DM	535	dp = of_find_node_by_path("/");
	536	} else {
	537	dp = of_find_node_by_phandle(nd);
	538	nd = 0;
	539	if (dp) {
	540	if (cmd == OPIOCGETNEXT)
	541	dp = dp->sibling;
	542	else
	543	dp = dp->child;
	544	}
	545	}
	546	if (dp)
6016a363	547	nd = dp->phandle;
8e48aec7 DM	548	if (copy_to_user(argp, &nd, sizeof(phandle)))
8e48aec7 DM	549	return -EFAULT;
1da177e4	550
8e48aec7 DM	551	return 0;
8e48aec7 DM	552	}
1da177e4	553
55929332	554	static int openprom_bsd_ioctl(struct file * file,
8e48aec7 DM	555	unsigned int cmd, unsigned long arg)
8e48aec7 DM	556	{
33cfe65a	557	DATA *data = file->private_data;
8e48aec7 DM	558	void __user argp = (void __user )arg;
8e48aec7 DM	559	int err;
1da177e4	560
55929332	561	lock_kernel();
8e48aec7 DM	562	switch (cmd) {
	563	case OPIOCGET:
	564	err = opiocget(argp, data);
	565	break;
1da177e4	566
8e48aec7 DM	567	case OPIOCNEXTPROP:
	568	err = opiocnextprop(argp, data);
	569	break;
1da177e4	570
8e48aec7 DM	571	case OPIOCSET:
	572	err = opiocset(argp, data);
	573	break;
	574
	575	case OPIOCGETOPTNODE:
	576	BUILD_BUG_ON(sizeof(phandle) != sizeof(int));
1da177e4	577
55929332	578	err = 0;
6016a363	579	if (copy_to_user(argp, &options_node->phandle, sizeof(phandle)))
55929332 AB	580	err = -EFAULT;
55929332 AB	581	break;
1da177e4	582
8e48aec7 DM	583	case OPIOCGETNEXT:
	584	case OPIOCGETCHILD:
	585	err = opiocgetnext(cmd, argp);
	586	break;
	587
1da177e4	588	default:
55929332 AB	589	err = -EINVAL;
55929332 AB	590	break;
8e48aec7	591	};
55929332	592	unlock_kernel();
8e48aec7 DM	593
8e48aec7 DM	594	return err;
1da177e4 LT	595	}
	596
	597
	598	/*
	599	* Handoff control to the correct ioctl handler.
	600	*/
55929332 AB	601	static long openprom_ioctl(struct file * file,
55929332 AB	602	unsigned int cmd, unsigned long arg)
1da177e4	603	{
33cfe65a	604	DATA *data = file->private_data;
1da177e4 LT	605
	606	switch (cmd) {
	607	case OPROMGETOPT:
	608	case OPROMNXTOPT:
	609	if ((file->f_mode & FMODE_READ) == 0)
	610	return -EPERM;
55929332	611	return openprom_sunos_ioctl(file, cmd, arg,
1da177e4 LT	612	options_node);
	613
	614	case OPROMSETOPT:
	615	case OPROMSETOPT2:
	616	if ((file->f_mode & FMODE_WRITE) == 0)
	617	return -EPERM;
55929332	618	return openprom_sunos_ioctl(file, cmd, arg,
1da177e4 LT	619	options_node);
	620
	621	case OPROMNEXT:
	622	case OPROMCHILD:
	623	case OPROMGETPROP:
	624	case OPROMNXTPROP:
	625	if ((file->f_mode & FMODE_READ) == 0)
	626	return -EPERM;
55929332	627	return openprom_sunos_ioctl(file, cmd, arg,
1da177e4 LT	628	data->current_node);
	629
	630	case OPROMU2P:
	631	case OPROMGETCONS:
	632	case OPROMGETFBNAME:
	633	case OPROMGETBOOTARGS:
	634	case OPROMSETCUR:
	635	case OPROMPCI2NODE:
	636	case OPROMPATH2NODE:
	637	if ((file->f_mode & FMODE_READ) == 0)
	638	return -EPERM;
55929332	639	return openprom_sunos_ioctl(file, cmd, arg, NULL);
1da177e4 LT	640
	641	case OPIOCGET:
	642	case OPIOCNEXTPROP:
	643	case OPIOCGETOPTNODE:
	644	case OPIOCGETNEXT:
	645	case OPIOCGETCHILD:
	646	if ((file->f_mode & FMODE_READ) == 0)
	647	return -EBADF;
55929332	648	return openprom_bsd_ioctl(file,cmd,arg);
1da177e4 LT	649
	650	case OPIOCSET:
	651	if ((file->f_mode & FMODE_WRITE) == 0)
	652	return -EBADF;
55929332	653	return openprom_bsd_ioctl(file,cmd,arg);
1da177e4 LT	654
1da177e4 LT	655	default:
1da177e4	656	return -EINVAL;
8e48aec7	657	};
1da177e4 LT	658	}
1da177e4 LT	659
b31023fc CH	660	static long openprom_compat_ioctl(struct file *file, unsigned int cmd,
	661	unsigned long arg)
	662	{
	663	long rval = -ENOTTY;
	664
	665	/*
	666	* SunOS/Solaris only, the NetBSD one's have embedded pointers in
	667	* the arg which we'd need to clean up...
	668	*/
	669	switch (cmd) {
	670	case OPROMGETOPT:
	671	case OPROMSETOPT:
	672	case OPROMNXTOPT:
	673	case OPROMSETOPT2:
	674	case OPROMNEXT:
	675	case OPROMCHILD:
	676	case OPROMGETPROP:
	677	case OPROMNXTPROP:
	678	case OPROMU2P:
	679	case OPROMGETCONS:
	680	case OPROMGETFBNAME:
	681	case OPROMGETBOOTARGS:
	682	case OPROMSETCUR:
	683	case OPROMPCI2NODE:
	684	case OPROMPATH2NODE:
55929332	685	rval = openprom_ioctl(file, cmd, arg);
b31023fc CH	686	break;
b31023fc CH	687	}
d5a858bc DM	688
d5a858bc DM	689	return rval;
b31023fc CH	690	}
b31023fc CH	691
1da177e4 LT	692	static int openprom_open(struct inode * inode, struct file * file)
	693	{
	694	DATA *data;
	695
8e48aec7	696	data = kmalloc(sizeof(DATA), GFP_KERNEL);
1da177e4 LT	697	if (!data)
	698	return -ENOMEM;
	699
7bcc3209	700	lock_kernel();
8e48aec7 DM	701	data->current_node = of_find_node_by_path("/");
	702	data->lastnode = data->current_node;
	703	file->private_data = (void *) data;
7bcc3209	704	unlock_kernel();
1da177e4 LT	705
	706	return 0;
	707	}
	708
	709	static int openprom_release(struct inode * inode, struct file * file)
	710	{
	711	kfree(file->private_data);
	712	return 0;
	713	}
	714
00977a59	715	static const struct file_operations openprom_fops = {
1da177e4 LT	716	.owner = THIS_MODULE,
1da177e4 LT	717	.llseek = no_llseek,
55929332	718	.unlocked_ioctl = openprom_ioctl,
d5a858bc	719	.compat_ioctl = openprom_compat_ioctl,
1da177e4 LT	720	.open = openprom_open,
	721	.release = openprom_release,
	722	};
	723
	724	static struct miscdevice openprom_dev = {
8e48aec7 DM	725	.minor = SUN_OPENPROM_MINOR,
	726	.name = "openprom",
	727	.fops = &openprom_fops,
1da177e4 LT	728	};
	729
	730	static int __init openprom_init(void)
	731	{
8e48aec7 DM	732	struct device_node *dp;
8e48aec7 DM	733	int err;
1da177e4	734
8e48aec7 DM	735	err = misc_register(&openprom_dev);
	736	if (err)
	737	return err;
1da177e4	738
8e48aec7 DM	739	dp = of_find_node_by_path("/");
	740	dp = dp->child;
	741	while (dp) {
	742	if (!strcmp(dp->name, "options"))
	743	break;
	744	dp = dp->sibling;
	745	}
	746	options_node = dp;
1da177e4	747
8e48aec7	748	if (!options_node) {
1da177e4 LT	749	misc_deregister(&openprom_dev);
	750	return -EIO;
	751	}
	752
	753	return 0;
	754	}
	755
	756	static void __exit openprom_cleanup(void)
	757	{
	758	misc_deregister(&openprom_dev);
	759	}
	760
	761	module_init(openprom_init);
	762	module_exit(openprom_cleanup);