2019-05-27 14:55:06 +08:00
|
|
|
// SPDX-License-Identifier: GPL-2.0-or-later
|
2005-04-17 06:20:36 +08:00
|
|
|
/*
|
2006-12-11 04:21:31 +08:00
|
|
|
i2c-dev.c - i2c-bus driver, char device interface
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
Copyright (C) 1995-97 Simon G. Vogl
|
|
|
|
Copyright (C) 1998-99 Frodo Looijaard <frodol@dds.nl>
|
|
|
|
Copyright (C) 2003 Greg Kroah-Hartman <greg@kroah.com>
|
|
|
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
/* Note that this is a complete rewrite of Simon Vogl's i2c-dev module.
|
|
|
|
But I have used so much of his original code and ideas that it seems
|
|
|
|
only fair to recognize him as co-author -- Frodo */
|
|
|
|
|
|
|
|
/* The I2C_RDWR ioctl code is written by Kolja Waschk <waschk@telos.de> */
|
|
|
|
|
2021-07-12 22:23:22 +08:00
|
|
|
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
|
|
|
|
|
2016-05-04 02:45:43 +08:00
|
|
|
#include <linux/cdev.h>
|
2020-01-31 04:23:12 +08:00
|
|
|
#include <linux/compat.h>
|
2011-03-20 21:50:52 +08:00
|
|
|
#include <linux/device.h>
|
2005-04-17 06:20:36 +08:00
|
|
|
#include <linux/fs.h>
|
|
|
|
#include <linux/i2c-dev.h>
|
2016-02-21 06:33:38 +08:00
|
|
|
#include <linux/i2c.h>
|
|
|
|
#include <linux/init.h>
|
2009-02-25 02:19:49 +08:00
|
|
|
#include <linux/jiffies.h>
|
2016-02-21 06:33:38 +08:00
|
|
|
#include <linux/kernel.h>
|
|
|
|
#include <linux/list.h>
|
|
|
|
#include <linux/module.h>
|
|
|
|
#include <linux/notifier.h>
|
|
|
|
#include <linux/slab.h>
|
2010-05-22 00:40:59 +08:00
|
|
|
#include <linux/uaccess.h>
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-11-16 02:24:01 +08:00
|
|
|
/*
|
|
|
|
* An i2c_dev represents an i2c_adapter ... an I2C or SMBus master, not a
|
|
|
|
* slave (i2c_client) with which messages will be exchanged. It's coupled
|
|
|
|
* with a character special file which is accessed by user mode drivers.
|
|
|
|
*
|
|
|
|
* The list of i2c_dev structures is parallel to the i2c_adapter lists
|
2011-03-20 21:50:52 +08:00
|
|
|
* maintained by the driver model, and is updated using bus notifications.
|
2007-11-16 02:24:01 +08:00
|
|
|
*/
|
2005-04-17 06:20:36 +08:00
|
|
|
struct i2c_dev {
|
2006-07-01 23:17:38 +08:00
|
|
|
struct list_head list;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct i2c_adapter *adap;
|
2019-10-11 23:00:14 +08:00
|
|
|
struct device dev;
|
2016-05-04 02:45:43 +08:00
|
|
|
struct cdev cdev;
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
2019-02-12 14:06:57 +08:00
|
|
|
#define I2C_MINORS (MINORMASK + 1)
|
2006-07-01 23:17:38 +08:00
|
|
|
static LIST_HEAD(i2c_dev_list);
|
|
|
|
static DEFINE_SPINLOCK(i2c_dev_list_lock);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
static struct i2c_dev *i2c_dev_get_by_minor(unsigned index)
|
|
|
|
{
|
|
|
|
struct i2c_dev *i2c_dev;
|
|
|
|
|
2006-07-01 23:17:38 +08:00
|
|
|
spin_lock(&i2c_dev_list_lock);
|
|
|
|
list_for_each_entry(i2c_dev, &i2c_dev_list, list) {
|
|
|
|
if (i2c_dev->adap->nr == index)
|
|
|
|
goto found;
|
|
|
|
}
|
|
|
|
i2c_dev = NULL;
|
|
|
|
found:
|
|
|
|
spin_unlock(&i2c_dev_list_lock);
|
2005-04-17 06:20:36 +08:00
|
|
|
return i2c_dev;
|
|
|
|
}
|
|
|
|
|
|
|
|
static struct i2c_dev *get_free_i2c_dev(struct i2c_adapter *adap)
|
|
|
|
{
|
|
|
|
struct i2c_dev *i2c_dev;
|
|
|
|
|
2006-07-01 23:17:38 +08:00
|
|
|
if (adap->nr >= I2C_MINORS) {
|
2021-07-12 22:23:22 +08:00
|
|
|
pr_err("Out of device minors (%d)\n", adap->nr);
|
2006-07-01 23:17:38 +08:00
|
|
|
return ERR_PTR(-ENODEV);
|
|
|
|
}
|
|
|
|
|
2005-10-18 05:09:43 +08:00
|
|
|
i2c_dev = kzalloc(sizeof(*i2c_dev), GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!i2c_dev)
|
|
|
|
return ERR_PTR(-ENOMEM);
|
2006-07-01 23:16:57 +08:00
|
|
|
i2c_dev->adap = adap;
|
2006-07-01 23:17:38 +08:00
|
|
|
|
|
|
|
spin_lock(&i2c_dev_list_lock);
|
|
|
|
list_add_tail(&i2c_dev->list, &i2c_dev_list);
|
|
|
|
spin_unlock(&i2c_dev_list_lock);
|
2005-04-17 06:20:36 +08:00
|
|
|
return i2c_dev;
|
|
|
|
}
|
|
|
|
|
2019-10-11 23:00:14 +08:00
|
|
|
static void put_i2c_dev(struct i2c_dev *i2c_dev, bool del_cdev)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2006-07-01 23:17:38 +08:00
|
|
|
spin_lock(&i2c_dev_list_lock);
|
|
|
|
list_del(&i2c_dev->list);
|
|
|
|
spin_unlock(&i2c_dev_list_lock);
|
2019-10-11 23:00:14 +08:00
|
|
|
if (del_cdev)
|
|
|
|
cdev_device_del(&i2c_dev->cdev, &i2c_dev->dev);
|
|
|
|
put_device(&i2c_dev->dev);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
2013-09-27 10:36:11 +08:00
|
|
|
static ssize_t name_show(struct device *dev,
|
|
|
|
struct device_attribute *attr, char *buf)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2006-07-04 04:46:24 +08:00
|
|
|
struct i2c_dev *i2c_dev = i2c_dev_get_by_minor(MINOR(dev->devt));
|
2005-12-07 07:33:15 +08:00
|
|
|
|
|
|
|
if (!i2c_dev)
|
|
|
|
return -ENODEV;
|
2021-07-12 22:23:23 +08:00
|
|
|
return sysfs_emit(buf, "%s\n", i2c_dev->adap->name);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
2013-09-27 10:36:11 +08:00
|
|
|
static DEVICE_ATTR_RO(name);
|
|
|
|
|
|
|
|
static struct attribute *i2c_attrs[] = {
|
|
|
|
&dev_attr_name.attr,
|
|
|
|
NULL,
|
|
|
|
};
|
|
|
|
ATTRIBUTE_GROUPS(i2c);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-11-16 02:24:01 +08:00
|
|
|
/* ------------------------------------------------------------------------- */
|
|
|
|
|
|
|
|
/*
|
|
|
|
* After opening an instance of this character special file, a file
|
|
|
|
* descriptor starts out associated only with an i2c_adapter (and bus).
|
|
|
|
*
|
|
|
|
* Using the I2C_RDWR ioctl(), you can then *immediately* issue i2c_msg
|
|
|
|
* traffic to any devices on the bus used by that adapter. That's because
|
|
|
|
* the i2c_msg vectors embed all the addressing information they need, and
|
|
|
|
* are submitted directly to an i2c_adapter. However, SMBus-only adapters
|
|
|
|
* don't support that interface.
|
|
|
|
*
|
|
|
|
* To use read()/write() system calls on that file descriptor, or to use
|
|
|
|
* SMBus interfaces (and work with SMBus-only hosts!), you must first issue
|
|
|
|
* an I2C_SLAVE (or I2C_SLAVE_FORCE) ioctl. That configures an anonymous
|
|
|
|
* (never registered) i2c_client so it holds the addressing information
|
|
|
|
* needed by those system calls and by this SMBus interface.
|
|
|
|
*/
|
|
|
|
|
2010-05-22 00:40:59 +08:00
|
|
|
static ssize_t i2cdev_read(struct file *file, char __user *buf, size_t count,
|
|
|
|
loff_t *offset)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
char *tmp;
|
|
|
|
int ret;
|
|
|
|
|
2010-05-22 00:40:57 +08:00
|
|
|
struct i2c_client *client = file->private_data;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
if (count > 8192)
|
|
|
|
count = 8192;
|
|
|
|
|
2021-07-29 22:35:32 +08:00
|
|
|
tmp = kzalloc(count, GFP_KERNEL);
|
2010-05-22 00:40:59 +08:00
|
|
|
if (tmp == NULL)
|
2005-04-17 06:20:36 +08:00
|
|
|
return -ENOMEM;
|
|
|
|
|
2021-07-12 22:23:22 +08:00
|
|
|
pr_debug("i2c-%d reading %zu bytes.\n", iminor(file_inode(file)), count);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2010-05-22 00:40:59 +08:00
|
|
|
ret = i2c_master_recv(client, tmp, count);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (ret >= 0)
|
2021-07-29 22:35:32 +08:00
|
|
|
if (copy_to_user(buf, tmp, ret))
|
|
|
|
ret = -EFAULT;
|
2005-04-17 06:20:36 +08:00
|
|
|
kfree(tmp);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2010-05-22 00:40:59 +08:00
|
|
|
static ssize_t i2cdev_write(struct file *file, const char __user *buf,
|
|
|
|
size_t count, loff_t *offset)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
int ret;
|
|
|
|
char *tmp;
|
2010-05-22 00:40:57 +08:00
|
|
|
struct i2c_client *client = file->private_data;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
if (count > 8192)
|
|
|
|
count = 8192;
|
|
|
|
|
i2c-dev: Use memdup_user
Use memdup_user when user data is immediately copied into the allocated
region. Note that in the second case, the ++i is no longer necessary, as
the last value is already freed if needed by the call to memdup_user.
The semantic patch that makes this change is as follows:
(http://coccinelle.lip6.fr/)
// <smpl>
@@
expression from,to,size,flag;
position p;
identifier l1,l2;
@@
- to = \(kmalloc@p\|kzalloc@p\)(size,flag);
+ to = memdup_user(from,size);
if (
- to==NULL
+ IS_ERR(to)
|| ...) {
<+... when != goto l1;
- -ENOMEM
+ PTR_ERR(to)
...+>
}
- if (copy_from_user(to, from, size) != 0) {
- <+... when != goto l2;
- -EFAULT
- ...+>
- }
// </smpl>
Signed-off-by: Julia Lawall <julia@diku.dk>
Signed-off-by: Jean Delvare <khali@linux-fr.org>
2010-08-12 00:20:55 +08:00
|
|
|
tmp = memdup_user(buf, count);
|
|
|
|
if (IS_ERR(tmp))
|
|
|
|
return PTR_ERR(tmp);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2021-07-12 22:23:22 +08:00
|
|
|
pr_debug("i2c-%d writing %zu bytes.\n", iminor(file_inode(file)), count);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2010-05-22 00:40:59 +08:00
|
|
|
ret = i2c_master_send(client, tmp, count);
|
2005-04-17 06:20:36 +08:00
|
|
|
kfree(tmp);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
2008-01-28 01:14:51 +08:00
|
|
|
static int i2cdev_check(struct device *dev, void *addrp)
|
|
|
|
{
|
|
|
|
struct i2c_client *client = i2c_verify_client(dev);
|
|
|
|
|
|
|
|
if (!client || client->addr != *(unsigned int *)addrp)
|
|
|
|
return 0;
|
|
|
|
|
|
|
|
return dev->driver ? -EBUSY : 0;
|
|
|
|
}
|
|
|
|
|
2010-08-12 00:21:02 +08:00
|
|
|
/* walk up mux tree */
|
|
|
|
static int i2cdev_check_mux_parents(struct i2c_adapter *adapter, int addr)
|
|
|
|
{
|
2010-10-25 00:16:57 +08:00
|
|
|
struct i2c_adapter *parent = i2c_parent_is_i2c_adapter(adapter);
|
2010-08-12 00:21:02 +08:00
|
|
|
int result;
|
|
|
|
|
|
|
|
result = device_for_each_child(&adapter->dev, &addr, i2cdev_check);
|
2010-10-25 00:16:57 +08:00
|
|
|
if (!result && parent)
|
|
|
|
result = i2cdev_check_mux_parents(parent, addr);
|
2010-08-12 00:21:02 +08:00
|
|
|
|
|
|
|
return result;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* recurse down mux tree */
|
|
|
|
static int i2cdev_check_mux_children(struct device *dev, void *addrp)
|
|
|
|
{
|
|
|
|
int result;
|
|
|
|
|
|
|
|
if (dev->type == &i2c_adapter_type)
|
|
|
|
result = device_for_each_child(dev, addrp,
|
|
|
|
i2cdev_check_mux_children);
|
|
|
|
else
|
|
|
|
result = i2cdev_check(dev, addrp);
|
|
|
|
|
|
|
|
return result;
|
|
|
|
}
|
|
|
|
|
2007-11-16 02:24:01 +08:00
|
|
|
/* This address checking function differs from the one in i2c-core
|
|
|
|
in that it considers an address with a registered device, but no
|
2008-01-28 01:14:51 +08:00
|
|
|
driver bound to it, as NOT busy. */
|
2007-11-16 02:24:01 +08:00
|
|
|
static int i2cdev_check_addr(struct i2c_adapter *adapter, unsigned int addr)
|
|
|
|
{
|
2010-10-25 00:16:57 +08:00
|
|
|
struct i2c_adapter *parent = i2c_parent_is_i2c_adapter(adapter);
|
2010-08-12 00:21:02 +08:00
|
|
|
int result = 0;
|
|
|
|
|
2010-10-25 00:16:57 +08:00
|
|
|
if (parent)
|
|
|
|
result = i2cdev_check_mux_parents(parent, addr);
|
2010-08-12 00:21:02 +08:00
|
|
|
|
|
|
|
if (!result)
|
|
|
|
result = device_for_each_child(&adapter->dev, &addr,
|
|
|
|
i2cdev_check_mux_children);
|
|
|
|
|
|
|
|
return result;
|
2007-11-16 02:24:01 +08:00
|
|
|
}
|
|
|
|
|
2015-09-08 17:05:49 +08:00
|
|
|
static noinline int i2cdev_ioctl_rdwr(struct i2c_client *client,
|
2017-09-20 13:02:27 +08:00
|
|
|
unsigned nmsgs, struct i2c_msg *msgs)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
|
|
|
u8 __user **data_ptrs;
|
2008-04-23 04:16:47 +08:00
|
|
|
int i, res;
|
|
|
|
|
treewide: kmalloc() -> kmalloc_array()
The kmalloc() function has a 2-factor argument form, kmalloc_array(). This
patch replaces cases of:
kmalloc(a * b, gfp)
with:
kmalloc_array(a * b, gfp)
as well as handling cases of:
kmalloc(a * b * c, gfp)
with:
kmalloc(array3_size(a, b, c), gfp)
as it's slightly less ugly than:
kmalloc_array(array_size(a, b), c, gfp)
This does, however, attempt to ignore constant size factors like:
kmalloc(4 * 1024, gfp)
though any constants defined via macros get caught up in the conversion.
Any factors with a sizeof() of "unsigned char", "char", and "u8" were
dropped, since they're redundant.
The tools/ directory was manually excluded, since it has its own
implementation of kmalloc().
The Coccinelle script used for this was:
// Fix redundant parens around sizeof().
@@
type TYPE;
expression THING, E;
@@
(
kmalloc(
- (sizeof(TYPE)) * E
+ sizeof(TYPE) * E
, ...)
|
kmalloc(
- (sizeof(THING)) * E
+ sizeof(THING) * E
, ...)
)
// Drop single-byte sizes and redundant parens.
@@
expression COUNT;
typedef u8;
typedef __u8;
@@
(
kmalloc(
- sizeof(u8) * (COUNT)
+ COUNT
, ...)
|
kmalloc(
- sizeof(__u8) * (COUNT)
+ COUNT
, ...)
|
kmalloc(
- sizeof(char) * (COUNT)
+ COUNT
, ...)
|
kmalloc(
- sizeof(unsigned char) * (COUNT)
+ COUNT
, ...)
|
kmalloc(
- sizeof(u8) * COUNT
+ COUNT
, ...)
|
kmalloc(
- sizeof(__u8) * COUNT
+ COUNT
, ...)
|
kmalloc(
- sizeof(char) * COUNT
+ COUNT
, ...)
|
kmalloc(
- sizeof(unsigned char) * COUNT
+ COUNT
, ...)
)
// 2-factor product with sizeof(type/expression) and identifier or constant.
@@
type TYPE;
expression THING;
identifier COUNT_ID;
constant COUNT_CONST;
@@
(
- kmalloc
+ kmalloc_array
(
- sizeof(TYPE) * (COUNT_ID)
+ COUNT_ID, sizeof(TYPE)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(TYPE) * COUNT_ID
+ COUNT_ID, sizeof(TYPE)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(TYPE) * (COUNT_CONST)
+ COUNT_CONST, sizeof(TYPE)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(TYPE) * COUNT_CONST
+ COUNT_CONST, sizeof(TYPE)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(THING) * (COUNT_ID)
+ COUNT_ID, sizeof(THING)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(THING) * COUNT_ID
+ COUNT_ID, sizeof(THING)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(THING) * (COUNT_CONST)
+ COUNT_CONST, sizeof(THING)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(THING) * COUNT_CONST
+ COUNT_CONST, sizeof(THING)
, ...)
)
// 2-factor product, only identifiers.
@@
identifier SIZE, COUNT;
@@
- kmalloc
+ kmalloc_array
(
- SIZE * COUNT
+ COUNT, SIZE
, ...)
// 3-factor product with 1 sizeof(type) or sizeof(expression), with
// redundant parens removed.
@@
expression THING;
identifier STRIDE, COUNT;
type TYPE;
@@
(
kmalloc(
- sizeof(TYPE) * (COUNT) * (STRIDE)
+ array3_size(COUNT, STRIDE, sizeof(TYPE))
, ...)
|
kmalloc(
- sizeof(TYPE) * (COUNT) * STRIDE
+ array3_size(COUNT, STRIDE, sizeof(TYPE))
, ...)
|
kmalloc(
- sizeof(TYPE) * COUNT * (STRIDE)
+ array3_size(COUNT, STRIDE, sizeof(TYPE))
, ...)
|
kmalloc(
- sizeof(TYPE) * COUNT * STRIDE
+ array3_size(COUNT, STRIDE, sizeof(TYPE))
, ...)
|
kmalloc(
- sizeof(THING) * (COUNT) * (STRIDE)
+ array3_size(COUNT, STRIDE, sizeof(THING))
, ...)
|
kmalloc(
- sizeof(THING) * (COUNT) * STRIDE
+ array3_size(COUNT, STRIDE, sizeof(THING))
, ...)
|
kmalloc(
- sizeof(THING) * COUNT * (STRIDE)
+ array3_size(COUNT, STRIDE, sizeof(THING))
, ...)
|
kmalloc(
- sizeof(THING) * COUNT * STRIDE
+ array3_size(COUNT, STRIDE, sizeof(THING))
, ...)
)
// 3-factor product with 2 sizeof(variable), with redundant parens removed.
@@
expression THING1, THING2;
identifier COUNT;
type TYPE1, TYPE2;
@@
(
kmalloc(
- sizeof(TYPE1) * sizeof(TYPE2) * COUNT
+ array3_size(COUNT, sizeof(TYPE1), sizeof(TYPE2))
, ...)
|
kmalloc(
- sizeof(TYPE1) * sizeof(THING2) * (COUNT)
+ array3_size(COUNT, sizeof(TYPE1), sizeof(TYPE2))
, ...)
|
kmalloc(
- sizeof(THING1) * sizeof(THING2) * COUNT
+ array3_size(COUNT, sizeof(THING1), sizeof(THING2))
, ...)
|
kmalloc(
- sizeof(THING1) * sizeof(THING2) * (COUNT)
+ array3_size(COUNT, sizeof(THING1), sizeof(THING2))
, ...)
|
kmalloc(
- sizeof(TYPE1) * sizeof(THING2) * COUNT
+ array3_size(COUNT, sizeof(TYPE1), sizeof(THING2))
, ...)
|
kmalloc(
- sizeof(TYPE1) * sizeof(THING2) * (COUNT)
+ array3_size(COUNT, sizeof(TYPE1), sizeof(THING2))
, ...)
)
// 3-factor product, only identifiers, with redundant parens removed.
@@
identifier STRIDE, SIZE, COUNT;
@@
(
kmalloc(
- (COUNT) * STRIDE * SIZE
+ array3_size(COUNT, STRIDE, SIZE)
, ...)
|
kmalloc(
- COUNT * (STRIDE) * SIZE
+ array3_size(COUNT, STRIDE, SIZE)
, ...)
|
kmalloc(
- COUNT * STRIDE * (SIZE)
+ array3_size(COUNT, STRIDE, SIZE)
, ...)
|
kmalloc(
- (COUNT) * (STRIDE) * SIZE
+ array3_size(COUNT, STRIDE, SIZE)
, ...)
|
kmalloc(
- COUNT * (STRIDE) * (SIZE)
+ array3_size(COUNT, STRIDE, SIZE)
, ...)
|
kmalloc(
- (COUNT) * STRIDE * (SIZE)
+ array3_size(COUNT, STRIDE, SIZE)
, ...)
|
kmalloc(
- (COUNT) * (STRIDE) * (SIZE)
+ array3_size(COUNT, STRIDE, SIZE)
, ...)
|
kmalloc(
- COUNT * STRIDE * SIZE
+ array3_size(COUNT, STRIDE, SIZE)
, ...)
)
// Any remaining multi-factor products, first at least 3-factor products,
// when they're not all constants...
@@
expression E1, E2, E3;
constant C1, C2, C3;
@@
(
kmalloc(C1 * C2 * C3, ...)
|
kmalloc(
- (E1) * E2 * E3
+ array3_size(E1, E2, E3)
, ...)
|
kmalloc(
- (E1) * (E2) * E3
+ array3_size(E1, E2, E3)
, ...)
|
kmalloc(
- (E1) * (E2) * (E3)
+ array3_size(E1, E2, E3)
, ...)
|
kmalloc(
- E1 * E2 * E3
+ array3_size(E1, E2, E3)
, ...)
)
// And then all remaining 2 factors products when they're not all constants,
// keeping sizeof() as the second factor argument.
@@
expression THING, E1, E2;
type TYPE;
constant C1, C2, C3;
@@
(
kmalloc(sizeof(THING) * C2, ...)
|
kmalloc(sizeof(TYPE) * C2, ...)
|
kmalloc(C1 * C2 * C3, ...)
|
kmalloc(C1 * C2, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(TYPE) * (E2)
+ E2, sizeof(TYPE)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(TYPE) * E2
+ E2, sizeof(TYPE)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(THING) * (E2)
+ E2, sizeof(THING)
, ...)
|
- kmalloc
+ kmalloc_array
(
- sizeof(THING) * E2
+ E2, sizeof(THING)
, ...)
|
- kmalloc
+ kmalloc_array
(
- (E1) * E2
+ E1, E2
, ...)
|
- kmalloc
+ kmalloc_array
(
- (E1) * (E2)
+ E1, E2
, ...)
|
- kmalloc
+ kmalloc_array
(
- E1 * E2
+ E1, E2
, ...)
)
Signed-off-by: Kees Cook <keescook@chromium.org>
2018-06-13 04:55:00 +08:00
|
|
|
data_ptrs = kmalloc_array(nmsgs, sizeof(u8 __user *), GFP_KERNEL);
|
2008-04-23 04:16:47 +08:00
|
|
|
if (data_ptrs == NULL) {
|
2017-09-20 13:02:27 +08:00
|
|
|
kfree(msgs);
|
2008-04-23 04:16:47 +08:00
|
|
|
return -ENOMEM;
|
|
|
|
}
|
|
|
|
|
|
|
|
res = 0;
|
2017-09-20 13:02:27 +08:00
|
|
|
for (i = 0; i < nmsgs; i++) {
|
2012-05-30 16:55:34 +08:00
|
|
|
/* Limit the size of the message to a sane amount */
|
2017-09-20 13:02:27 +08:00
|
|
|
if (msgs[i].len > 8192) {
|
2008-04-23 04:16:47 +08:00
|
|
|
res = -EINVAL;
|
|
|
|
break;
|
|
|
|
}
|
2012-05-30 16:55:34 +08:00
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
data_ptrs[i] = (u8 __user *)msgs[i].buf;
|
|
|
|
msgs[i].buf = memdup_user(data_ptrs[i], msgs[i].len);
|
|
|
|
if (IS_ERR(msgs[i].buf)) {
|
|
|
|
res = PTR_ERR(msgs[i].buf);
|
2008-04-23 04:16:47 +08:00
|
|
|
break;
|
|
|
|
}
|
2017-11-05 04:20:03 +08:00
|
|
|
/* memdup_user allocates with GFP_KERNEL, so DMA is ok */
|
|
|
|
msgs[i].flags |= I2C_M_DMA_SAFE;
|
2012-05-30 16:55:34 +08:00
|
|
|
|
|
|
|
/*
|
|
|
|
* If the message length is received from the slave (similar
|
|
|
|
* to SMBus block read), we must ensure that the buffer will
|
|
|
|
* be large enough to cope with a message length of
|
|
|
|
* I2C_SMBUS_BLOCK_MAX as this is the maximum underlying bus
|
|
|
|
* drivers allow. The first byte in the buffer must be
|
|
|
|
* pre-filled with the number of extra bytes, which must be
|
|
|
|
* at least one to hold the message length, but can be
|
|
|
|
* greater (for example to account for a checksum byte at
|
|
|
|
* the end of the message.)
|
|
|
|
*/
|
2017-09-20 13:02:27 +08:00
|
|
|
if (msgs[i].flags & I2C_M_RECV_LEN) {
|
|
|
|
if (!(msgs[i].flags & I2C_M_RD) ||
|
2018-04-19 20:29:22 +08:00
|
|
|
msgs[i].len < 1 || msgs[i].buf[0] < 1 ||
|
2017-09-20 13:02:27 +08:00
|
|
|
msgs[i].len < msgs[i].buf[0] +
|
2012-05-30 16:55:34 +08:00
|
|
|
I2C_SMBUS_BLOCK_MAX) {
|
2019-05-07 22:20:32 +08:00
|
|
|
i++;
|
2012-05-30 16:55:34 +08:00
|
|
|
res = -EINVAL;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
msgs[i].len = msgs[i].buf[0];
|
2012-05-30 16:55:34 +08:00
|
|
|
}
|
2008-04-23 04:16:47 +08:00
|
|
|
}
|
|
|
|
if (res < 0) {
|
|
|
|
int j;
|
|
|
|
for (j = 0; j < i; ++j)
|
2017-09-20 13:02:27 +08:00
|
|
|
kfree(msgs[j].buf);
|
2008-04-23 04:16:47 +08:00
|
|
|
kfree(data_ptrs);
|
2017-09-20 13:02:27 +08:00
|
|
|
kfree(msgs);
|
2008-04-23 04:16:47 +08:00
|
|
|
return res;
|
|
|
|
}
|
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
res = i2c_transfer(client->adapter, msgs, nmsgs);
|
2008-04-23 04:16:47 +08:00
|
|
|
while (i-- > 0) {
|
2017-09-20 13:02:27 +08:00
|
|
|
if (res >= 0 && (msgs[i].flags & I2C_M_RD)) {
|
|
|
|
if (copy_to_user(data_ptrs[i], msgs[i].buf,
|
|
|
|
msgs[i].len))
|
2008-04-23 04:16:47 +08:00
|
|
|
res = -EFAULT;
|
|
|
|
}
|
2017-09-20 13:02:27 +08:00
|
|
|
kfree(msgs[i].buf);
|
2008-04-23 04:16:47 +08:00
|
|
|
}
|
|
|
|
kfree(data_ptrs);
|
2017-09-20 13:02:27 +08:00
|
|
|
kfree(msgs);
|
2008-04-23 04:16:47 +08:00
|
|
|
return res;
|
|
|
|
}
|
|
|
|
|
|
|
|
static noinline int i2cdev_ioctl_smbus(struct i2c_client *client,
|
2017-09-20 13:02:27 +08:00
|
|
|
u8 read_write, u8 command, u32 size,
|
|
|
|
union i2c_smbus_data __user *data)
|
2008-04-23 04:16:47 +08:00
|
|
|
{
|
2017-01-09 23:53:36 +08:00
|
|
|
union i2c_smbus_data temp = {};
|
2008-04-23 04:16:47 +08:00
|
|
|
int datasize, res;
|
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
if ((size != I2C_SMBUS_BYTE) &&
|
|
|
|
(size != I2C_SMBUS_QUICK) &&
|
|
|
|
(size != I2C_SMBUS_BYTE_DATA) &&
|
|
|
|
(size != I2C_SMBUS_WORD_DATA) &&
|
|
|
|
(size != I2C_SMBUS_PROC_CALL) &&
|
|
|
|
(size != I2C_SMBUS_BLOCK_DATA) &&
|
|
|
|
(size != I2C_SMBUS_I2C_BLOCK_BROKEN) &&
|
|
|
|
(size != I2C_SMBUS_I2C_BLOCK_DATA) &&
|
|
|
|
(size != I2C_SMBUS_BLOCK_PROC_CALL)) {
|
2008-04-23 04:16:47 +08:00
|
|
|
dev_dbg(&client->adapter->dev,
|
|
|
|
"size out of range (%x) in ioctl I2C_SMBUS.\n",
|
2017-09-20 13:02:27 +08:00
|
|
|
size);
|
2008-04-23 04:16:47 +08:00
|
|
|
return -EINVAL;
|
|
|
|
}
|
|
|
|
/* Note that I2C_SMBUS_READ and I2C_SMBUS_WRITE are 0 and 1,
|
|
|
|
so the check is valid if size==I2C_SMBUS_QUICK too. */
|
2017-09-20 13:02:27 +08:00
|
|
|
if ((read_write != I2C_SMBUS_READ) &&
|
|
|
|
(read_write != I2C_SMBUS_WRITE)) {
|
2008-04-23 04:16:47 +08:00
|
|
|
dev_dbg(&client->adapter->dev,
|
|
|
|
"read_write out of range (%x) in ioctl I2C_SMBUS.\n",
|
2017-09-20 13:02:27 +08:00
|
|
|
read_write);
|
2008-04-23 04:16:47 +08:00
|
|
|
return -EINVAL;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Note that command values are always valid! */
|
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
if ((size == I2C_SMBUS_QUICK) ||
|
|
|
|
((size == I2C_SMBUS_BYTE) &&
|
|
|
|
(read_write == I2C_SMBUS_WRITE)))
|
2008-04-23 04:16:47 +08:00
|
|
|
/* These are special: we do not use data */
|
|
|
|
return i2c_smbus_xfer(client->adapter, client->addr,
|
2017-09-20 13:02:27 +08:00
|
|
|
client->flags, read_write,
|
|
|
|
command, size, NULL);
|
2008-04-23 04:16:47 +08:00
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
if (data == NULL) {
|
2008-04-23 04:16:47 +08:00
|
|
|
dev_dbg(&client->adapter->dev,
|
|
|
|
"data is NULL pointer in ioctl I2C_SMBUS.\n");
|
|
|
|
return -EINVAL;
|
|
|
|
}
|
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
if ((size == I2C_SMBUS_BYTE_DATA) ||
|
|
|
|
(size == I2C_SMBUS_BYTE))
|
|
|
|
datasize = sizeof(data->byte);
|
|
|
|
else if ((size == I2C_SMBUS_WORD_DATA) ||
|
|
|
|
(size == I2C_SMBUS_PROC_CALL))
|
|
|
|
datasize = sizeof(data->word);
|
2008-04-23 04:16:47 +08:00
|
|
|
else /* size == smbus block, i2c block, or block proc. call */
|
2017-09-20 13:02:27 +08:00
|
|
|
datasize = sizeof(data->block);
|
2008-04-23 04:16:47 +08:00
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
if ((size == I2C_SMBUS_PROC_CALL) ||
|
|
|
|
(size == I2C_SMBUS_BLOCK_PROC_CALL) ||
|
|
|
|
(size == I2C_SMBUS_I2C_BLOCK_DATA) ||
|
|
|
|
(read_write == I2C_SMBUS_WRITE)) {
|
|
|
|
if (copy_from_user(&temp, data, datasize))
|
2008-04-23 04:16:47 +08:00
|
|
|
return -EFAULT;
|
|
|
|
}
|
2017-09-20 13:02:27 +08:00
|
|
|
if (size == I2C_SMBUS_I2C_BLOCK_BROKEN) {
|
2008-04-23 04:16:47 +08:00
|
|
|
/* Convert old I2C block commands to the new
|
|
|
|
convention. This preserves binary compatibility. */
|
2017-09-20 13:02:27 +08:00
|
|
|
size = I2C_SMBUS_I2C_BLOCK_DATA;
|
|
|
|
if (read_write == I2C_SMBUS_READ)
|
2008-04-23 04:16:47 +08:00
|
|
|
temp.block[0] = I2C_SMBUS_BLOCK_MAX;
|
|
|
|
}
|
|
|
|
res = i2c_smbus_xfer(client->adapter, client->addr, client->flags,
|
2017-09-20 13:02:27 +08:00
|
|
|
read_write, command, size, &temp);
|
|
|
|
if (!res && ((size == I2C_SMBUS_PROC_CALL) ||
|
|
|
|
(size == I2C_SMBUS_BLOCK_PROC_CALL) ||
|
|
|
|
(read_write == I2C_SMBUS_READ))) {
|
|
|
|
if (copy_to_user(data, &temp, datasize))
|
2008-04-23 04:16:47 +08:00
|
|
|
return -EFAULT;
|
|
|
|
}
|
|
|
|
return res;
|
|
|
|
}
|
|
|
|
|
2008-07-15 04:38:27 +08:00
|
|
|
static long i2cdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
|
2008-04-23 04:16:47 +08:00
|
|
|
{
|
2010-05-22 00:40:57 +08:00
|
|
|
struct i2c_client *client = file->private_data;
|
2005-04-17 06:20:36 +08:00
|
|
|
unsigned long funcs;
|
|
|
|
|
2005-10-08 05:06:27 +08:00
|
|
|
dev_dbg(&client->adapter->dev, "ioctl, cmd=0x%02x, arg=0x%02lx\n",
|
|
|
|
cmd, arg);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2010-05-22 00:40:59 +08:00
|
|
|
switch (cmd) {
|
2005-04-17 06:20:36 +08:00
|
|
|
case I2C_SLAVE:
|
|
|
|
case I2C_SLAVE_FORCE:
|
2006-12-11 04:21:31 +08:00
|
|
|
if ((arg > 0x3ff) ||
|
2005-04-17 06:20:36 +08:00
|
|
|
(((client->flags & I2C_M_TEN) == 0) && arg > 0x7f))
|
|
|
|
return -EINVAL;
|
2007-11-16 02:24:01 +08:00
|
|
|
if (cmd == I2C_SLAVE && i2cdev_check_addr(client->adapter, arg))
|
2005-04-17 06:20:36 +08:00
|
|
|
return -EBUSY;
|
2007-11-16 02:24:01 +08:00
|
|
|
/* REVISIT: address could become busy later */
|
2005-04-17 06:20:36 +08:00
|
|
|
client->addr = arg;
|
|
|
|
return 0;
|
|
|
|
case I2C_TENBIT:
|
|
|
|
if (arg)
|
|
|
|
client->flags |= I2C_M_TEN;
|
|
|
|
else
|
|
|
|
client->flags &= ~I2C_M_TEN;
|
|
|
|
return 0;
|
|
|
|
case I2C_PEC:
|
2015-09-11 17:27:18 +08:00
|
|
|
/*
|
|
|
|
* Setting the PEC flag here won't affect kernel drivers,
|
|
|
|
* which will be using the i2c_client node registered with
|
|
|
|
* the driver model core. Likewise, when that client has
|
|
|
|
* the PEC flag already set, the i2c-dev driver won't see
|
|
|
|
* (or use) this setting.
|
|
|
|
*/
|
2005-04-17 06:20:36 +08:00
|
|
|
if (arg)
|
|
|
|
client->flags |= I2C_CLIENT_PEC;
|
|
|
|
else
|
|
|
|
client->flags &= ~I2C_CLIENT_PEC;
|
|
|
|
return 0;
|
|
|
|
case I2C_FUNCS:
|
|
|
|
funcs = i2c_get_functionality(client->adapter);
|
2006-12-11 04:21:30 +08:00
|
|
|
return put_user(funcs, (unsigned long __user *)arg);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
case I2C_RDWR: {
|
|
|
|
struct i2c_rdwr_ioctl_data rdwr_arg;
|
|
|
|
struct i2c_msg *rdwr_pa;
|
|
|
|
|
|
|
|
if (copy_from_user(&rdwr_arg,
|
|
|
|
(struct i2c_rdwr_ioctl_data __user *)arg,
|
|
|
|
sizeof(rdwr_arg)))
|
|
|
|
return -EFAULT;
|
|
|
|
|
2021-03-12 19:57:34 +08:00
|
|
|
if (!rdwr_arg.msgs || rdwr_arg.nmsgs == 0)
|
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Put an arbitrary limit on the number of messages that can
|
|
|
|
* be sent at once
|
|
|
|
*/
|
2017-09-20 13:02:27 +08:00
|
|
|
if (rdwr_arg.nmsgs > I2C_RDWR_IOCTL_MAX_MSGS)
|
|
|
|
return -EINVAL;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
rdwr_pa = memdup_user(rdwr_arg.msgs,
|
|
|
|
rdwr_arg.nmsgs * sizeof(struct i2c_msg));
|
|
|
|
if (IS_ERR(rdwr_pa))
|
|
|
|
return PTR_ERR(rdwr_pa);
|
|
|
|
|
|
|
|
return i2cdev_ioctl_rdwr(client, rdwr_arg.nmsgs, rdwr_pa);
|
|
|
|
}
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
case I2C_SMBUS: {
|
|
|
|
struct i2c_smbus_ioctl_data data_arg;
|
|
|
|
if (copy_from_user(&data_arg,
|
|
|
|
(struct i2c_smbus_ioctl_data __user *) arg,
|
|
|
|
sizeof(struct i2c_smbus_ioctl_data)))
|
|
|
|
return -EFAULT;
|
|
|
|
return i2cdev_ioctl_smbus(client, data_arg.read_write,
|
|
|
|
data_arg.command,
|
|
|
|
data_arg.size,
|
|
|
|
data_arg.data);
|
|
|
|
}
|
2007-10-14 05:56:32 +08:00
|
|
|
case I2C_RETRIES:
|
2019-01-09 15:33:07 +08:00
|
|
|
if (arg > INT_MAX)
|
|
|
|
return -EINVAL;
|
|
|
|
|
2007-10-14 05:56:32 +08:00
|
|
|
client->adapter->retries = arg;
|
|
|
|
break;
|
|
|
|
case I2C_TIMEOUT:
|
2019-01-09 15:33:07 +08:00
|
|
|
if (arg > INT_MAX)
|
|
|
|
return -EINVAL;
|
|
|
|
|
2009-02-25 02:19:49 +08:00
|
|
|
/* For historical reasons, user-space sets the timeout
|
|
|
|
* value in units of 10 ms.
|
|
|
|
*/
|
|
|
|
client->adapter->timeout = msecs_to_jiffies(arg * 10);
|
2007-10-14 05:56:32 +08:00
|
|
|
break;
|
2005-04-17 06:20:36 +08:00
|
|
|
default:
|
2007-10-14 05:56:32 +08:00
|
|
|
/* NOTE: returning a fault code here could cause trouble
|
|
|
|
* in buggy userspace code. Some old kernel bugs returned
|
|
|
|
* zero in this case, and userspace code might accidentally
|
|
|
|
* have depended on that bug.
|
|
|
|
*/
|
|
|
|
return -ENOTTY;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
#ifdef CONFIG_COMPAT
|
|
|
|
|
|
|
|
struct i2c_smbus_ioctl_data32 {
|
|
|
|
u8 read_write;
|
|
|
|
u8 command;
|
|
|
|
u32 size;
|
|
|
|
compat_caddr_t data; /* union i2c_smbus_data *data */
|
|
|
|
};
|
|
|
|
|
|
|
|
struct i2c_msg32 {
|
|
|
|
u16 addr;
|
|
|
|
u16 flags;
|
|
|
|
u16 len;
|
|
|
|
compat_caddr_t buf;
|
|
|
|
};
|
|
|
|
|
|
|
|
struct i2c_rdwr_ioctl_data32 {
|
|
|
|
compat_caddr_t msgs; /* struct i2c_msg __user *msgs */
|
|
|
|
u32 nmsgs;
|
|
|
|
};
|
|
|
|
|
|
|
|
static long compat_i2cdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
|
|
|
|
{
|
|
|
|
struct i2c_client *client = file->private_data;
|
|
|
|
unsigned long funcs;
|
|
|
|
switch (cmd) {
|
|
|
|
case I2C_FUNCS:
|
|
|
|
funcs = i2c_get_functionality(client->adapter);
|
|
|
|
return put_user(funcs, (compat_ulong_t __user *)arg);
|
|
|
|
case I2C_RDWR: {
|
|
|
|
struct i2c_rdwr_ioctl_data32 rdwr_arg;
|
2021-06-24 23:25:35 +08:00
|
|
|
struct i2c_msg32 __user *p;
|
2017-09-20 13:02:27 +08:00
|
|
|
struct i2c_msg *rdwr_pa;
|
|
|
|
int i;
|
|
|
|
|
|
|
|
if (copy_from_user(&rdwr_arg,
|
|
|
|
(struct i2c_rdwr_ioctl_data32 __user *)arg,
|
|
|
|
sizeof(rdwr_arg)))
|
|
|
|
return -EFAULT;
|
|
|
|
|
2021-12-31 06:47:50 +08:00
|
|
|
if (!rdwr_arg.msgs || rdwr_arg.nmsgs == 0)
|
|
|
|
return -EINVAL;
|
|
|
|
|
2017-09-20 13:02:27 +08:00
|
|
|
if (rdwr_arg.nmsgs > I2C_RDWR_IOCTL_MAX_MSGS)
|
|
|
|
return -EINVAL;
|
|
|
|
|
|
|
|
rdwr_pa = kmalloc_array(rdwr_arg.nmsgs, sizeof(struct i2c_msg),
|
|
|
|
GFP_KERNEL);
|
|
|
|
if (!rdwr_pa)
|
|
|
|
return -ENOMEM;
|
|
|
|
|
|
|
|
p = compat_ptr(rdwr_arg.msgs);
|
|
|
|
for (i = 0; i < rdwr_arg.nmsgs; i++) {
|
|
|
|
struct i2c_msg32 umsg;
|
|
|
|
if (copy_from_user(&umsg, p + i, sizeof(umsg))) {
|
|
|
|
kfree(rdwr_pa);
|
|
|
|
return -EFAULT;
|
|
|
|
}
|
|
|
|
rdwr_pa[i] = (struct i2c_msg) {
|
|
|
|
.addr = umsg.addr,
|
|
|
|
.flags = umsg.flags,
|
|
|
|
.len = umsg.len,
|
2022-04-12 02:07:52 +08:00
|
|
|
.buf = (__force __u8 *)compat_ptr(umsg.buf),
|
2017-09-20 13:02:27 +08:00
|
|
|
};
|
|
|
|
}
|
|
|
|
|
|
|
|
return i2cdev_ioctl_rdwr(client, rdwr_arg.nmsgs, rdwr_pa);
|
|
|
|
}
|
|
|
|
case I2C_SMBUS: {
|
|
|
|
struct i2c_smbus_ioctl_data32 data32;
|
|
|
|
if (copy_from_user(&data32,
|
|
|
|
(void __user *) arg,
|
|
|
|
sizeof(data32)))
|
|
|
|
return -EFAULT;
|
|
|
|
return i2cdev_ioctl_smbus(client, data32.read_write,
|
|
|
|
data32.command,
|
|
|
|
data32.size,
|
|
|
|
compat_ptr(data32.data));
|
|
|
|
}
|
|
|
|
default:
|
|
|
|
return i2cdev_ioctl(file, cmd, arg);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
#define compat_i2cdev_ioctl NULL
|
|
|
|
#endif
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
static int i2cdev_open(struct inode *inode, struct file *file)
|
|
|
|
{
|
|
|
|
unsigned int minor = iminor(inode);
|
|
|
|
struct i2c_client *client;
|
|
|
|
struct i2c_adapter *adap;
|
|
|
|
|
2016-07-06 10:57:06 +08:00
|
|
|
adap = i2c_get_adapter(minor);
|
2009-12-07 00:06:26 +08:00
|
|
|
if (!adap)
|
|
|
|
return -ENODEV;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2007-11-16 02:24:01 +08:00
|
|
|
/* This creates an anonymous i2c_client, which may later be
|
|
|
|
* pointed to some address using I2C_SLAVE or I2C_SLAVE_FORCE.
|
|
|
|
*
|
|
|
|
* This client is ** NEVER REGISTERED ** with the driver model
|
|
|
|
* or I2C core code!! It just holds private copies of addressing
|
|
|
|
* information and maybe a PEC flag.
|
|
|
|
*/
|
2006-07-01 23:20:57 +08:00
|
|
|
client = kzalloc(sizeof(*client), GFP_KERNEL);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (!client) {
|
|
|
|
i2c_put_adapter(adap);
|
2009-12-07 00:06:26 +08:00
|
|
|
return -ENOMEM;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
2006-07-01 23:20:57 +08:00
|
|
|
snprintf(client->name, I2C_NAME_SIZE, "i2c-dev %d", adap->nr);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
|
|
|
client->adapter = adap;
|
|
|
|
file->private_data = client;
|
|
|
|
|
2009-12-07 00:06:26 +08:00
|
|
|
return 0;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
static int i2cdev_release(struct inode *inode, struct file *file)
|
|
|
|
{
|
|
|
|
struct i2c_client *client = file->private_data;
|
|
|
|
|
|
|
|
i2c_put_adapter(client->adapter);
|
|
|
|
kfree(client);
|
|
|
|
file->private_data = NULL;
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2007-02-12 16:55:32 +08:00
|
|
|
static const struct file_operations i2cdev_fops = {
|
2005-04-17 06:20:36 +08:00
|
|
|
.owner = THIS_MODULE,
|
|
|
|
.llseek = no_llseek,
|
|
|
|
.read = i2cdev_read,
|
|
|
|
.write = i2cdev_write,
|
2008-07-15 04:38:27 +08:00
|
|
|
.unlocked_ioctl = i2cdev_ioctl,
|
2017-09-20 13:02:27 +08:00
|
|
|
.compat_ioctl = compat_i2cdev_ioctl,
|
2005-04-17 06:20:36 +08:00
|
|
|
.open = i2cdev_open,
|
|
|
|
.release = i2cdev_release,
|
|
|
|
};
|
|
|
|
|
2007-11-16 02:24:01 +08:00
|
|
|
/* ------------------------------------------------------------------------- */
|
|
|
|
|
2005-12-07 07:33:15 +08:00
|
|
|
static struct class *i2c_dev_class;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2019-10-11 23:00:14 +08:00
|
|
|
static void i2cdev_dev_release(struct device *dev)
|
|
|
|
{
|
|
|
|
struct i2c_dev *i2c_dev;
|
|
|
|
|
|
|
|
i2c_dev = container_of(dev, struct i2c_dev, dev);
|
|
|
|
kfree(i2c_dev);
|
|
|
|
}
|
|
|
|
|
i2c: dev: Fix bus callback return values
The i2cdev_{at,de}tach_adapter() callbacks are used for two purposes:
1. As notifier callbacks, when (un)registering I2C adapters created or
destroyed after i2c_dev_init(),
2. As bus iterator callbacks, for registering already existing
adapters from i2c_dev_init(), and for cleanup.
Unfortunately both use cases expect different return values: the former
expects NOTIFY_* return codes, while the latter expects zero or error
codes, and aborts in case of error.
Hence in case 2, as soon as i2cdev_{at,de}tach_adapter() returns
(non-zero) NOTIFY_OK, the bus iterator aborts. This causes (a) only the
first already existing adapter to be registered, leading to missing
/dev/i2c-* entries, and (b) a failure to unregister all but the first
I2C adapter during cleanup.
Fix this by introducing separate callbacks for the bus iterator,
wrapping the notifier functions, and always returning succes.
Any errors inside these callback functions are unlikely to happen, and
are fatal anyway.
Fixes: cddf70d0bce71c2a ("i2c: dev: fix notifier return values")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
2023-03-09 15:45:46 +08:00
|
|
|
static int i2cdev_attach_adapter(struct device *dev)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2011-03-20 21:50:52 +08:00
|
|
|
struct i2c_adapter *adap;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct i2c_dev *i2c_dev;
|
2006-08-16 00:30:24 +08:00
|
|
|
int res;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2011-03-20 21:50:52 +08:00
|
|
|
if (dev->type != &i2c_adapter_type)
|
2022-12-30 00:00:44 +08:00
|
|
|
return NOTIFY_DONE;
|
2011-03-20 21:50:52 +08:00
|
|
|
adap = to_i2c_adapter(dev);
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
i2c_dev = get_free_i2c_dev(adap);
|
|
|
|
if (IS_ERR(i2c_dev))
|
2022-12-30 00:00:44 +08:00
|
|
|
return NOTIFY_DONE;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2016-05-04 02:45:43 +08:00
|
|
|
cdev_init(&i2c_dev->cdev, &i2cdev_fops);
|
|
|
|
i2c_dev->cdev.owner = THIS_MODULE;
|
2019-10-11 23:00:14 +08:00
|
|
|
|
|
|
|
device_initialize(&i2c_dev->dev);
|
|
|
|
i2c_dev->dev.devt = MKDEV(I2C_MAJOR, adap->nr);
|
|
|
|
i2c_dev->dev.class = i2c_dev_class;
|
|
|
|
i2c_dev->dev.parent = &adap->dev;
|
|
|
|
i2c_dev->dev.release = i2cdev_dev_release;
|
2022-04-12 02:07:51 +08:00
|
|
|
|
|
|
|
res = dev_set_name(&i2c_dev->dev, "i2c-%d", adap->nr);
|
|
|
|
if (res)
|
|
|
|
goto err_put_i2c_dev;
|
2019-10-11 23:00:14 +08:00
|
|
|
|
|
|
|
res = cdev_device_add(&i2c_dev->cdev, &i2c_dev->dev);
|
2022-04-12 02:07:51 +08:00
|
|
|
if (res)
|
|
|
|
goto err_put_i2c_dev;
|
2006-09-04 04:19:25 +08:00
|
|
|
|
2021-07-12 22:23:22 +08:00
|
|
|
pr_debug("adapter [%s] registered as minor %d\n", adap->name, adap->nr);
|
2022-12-30 00:00:44 +08:00
|
|
|
return NOTIFY_OK;
|
2022-04-12 02:07:51 +08:00
|
|
|
|
|
|
|
err_put_i2c_dev:
|
|
|
|
put_i2c_dev(i2c_dev, false);
|
2022-12-30 00:00:44 +08:00
|
|
|
return NOTIFY_DONE;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
i2c: dev: Fix bus callback return values
The i2cdev_{at,de}tach_adapter() callbacks are used for two purposes:
1. As notifier callbacks, when (un)registering I2C adapters created or
destroyed after i2c_dev_init(),
2. As bus iterator callbacks, for registering already existing
adapters from i2c_dev_init(), and for cleanup.
Unfortunately both use cases expect different return values: the former
expects NOTIFY_* return codes, while the latter expects zero or error
codes, and aborts in case of error.
Hence in case 2, as soon as i2cdev_{at,de}tach_adapter() returns
(non-zero) NOTIFY_OK, the bus iterator aborts. This causes (a) only the
first already existing adapter to be registered, leading to missing
/dev/i2c-* entries, and (b) a failure to unregister all but the first
I2C adapter during cleanup.
Fix this by introducing separate callbacks for the bus iterator,
wrapping the notifier functions, and always returning succes.
Any errors inside these callback functions are unlikely to happen, and
are fatal anyway.
Fixes: cddf70d0bce71c2a ("i2c: dev: fix notifier return values")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
2023-03-09 15:45:46 +08:00
|
|
|
static int i2cdev_detach_adapter(struct device *dev)
|
2005-04-17 06:20:36 +08:00
|
|
|
{
|
2011-03-20 21:50:52 +08:00
|
|
|
struct i2c_adapter *adap;
|
2005-04-17 06:20:36 +08:00
|
|
|
struct i2c_dev *i2c_dev;
|
|
|
|
|
2011-03-20 21:50:52 +08:00
|
|
|
if (dev->type != &i2c_adapter_type)
|
2022-12-30 00:00:44 +08:00
|
|
|
return NOTIFY_DONE;
|
2011-03-20 21:50:52 +08:00
|
|
|
adap = to_i2c_adapter(dev);
|
|
|
|
|
2006-07-01 23:16:57 +08:00
|
|
|
i2c_dev = i2c_dev_get_by_minor(adap->nr);
|
2006-09-04 04:19:25 +08:00
|
|
|
if (!i2c_dev) /* attach_adapter must have failed */
|
2022-12-30 00:00:44 +08:00
|
|
|
return NOTIFY_DONE;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2019-10-11 23:00:14 +08:00
|
|
|
put_i2c_dev(i2c_dev, true);
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2021-07-12 22:23:22 +08:00
|
|
|
pr_debug("adapter [%s] unregistered\n", adap->name);
|
2022-12-30 00:00:44 +08:00
|
|
|
return NOTIFY_OK;
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
2011-11-23 18:33:07 +08:00
|
|
|
static int i2cdev_notifier_call(struct notifier_block *nb, unsigned long action,
|
2011-03-20 21:50:52 +08:00
|
|
|
void *data)
|
|
|
|
{
|
|
|
|
struct device *dev = data;
|
|
|
|
|
|
|
|
switch (action) {
|
|
|
|
case BUS_NOTIFY_ADD_DEVICE:
|
i2c: dev: Fix bus callback return values
The i2cdev_{at,de}tach_adapter() callbacks are used for two purposes:
1. As notifier callbacks, when (un)registering I2C adapters created or
destroyed after i2c_dev_init(),
2. As bus iterator callbacks, for registering already existing
adapters from i2c_dev_init(), and for cleanup.
Unfortunately both use cases expect different return values: the former
expects NOTIFY_* return codes, while the latter expects zero or error
codes, and aborts in case of error.
Hence in case 2, as soon as i2cdev_{at,de}tach_adapter() returns
(non-zero) NOTIFY_OK, the bus iterator aborts. This causes (a) only the
first already existing adapter to be registered, leading to missing
/dev/i2c-* entries, and (b) a failure to unregister all but the first
I2C adapter during cleanup.
Fix this by introducing separate callbacks for the bus iterator,
wrapping the notifier functions, and always returning succes.
Any errors inside these callback functions are unlikely to happen, and
are fatal anyway.
Fixes: cddf70d0bce71c2a ("i2c: dev: fix notifier return values")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
2023-03-09 15:45:46 +08:00
|
|
|
return i2cdev_attach_adapter(dev);
|
2011-03-20 21:50:52 +08:00
|
|
|
case BUS_NOTIFY_DEL_DEVICE:
|
i2c: dev: Fix bus callback return values
The i2cdev_{at,de}tach_adapter() callbacks are used for two purposes:
1. As notifier callbacks, when (un)registering I2C adapters created or
destroyed after i2c_dev_init(),
2. As bus iterator callbacks, for registering already existing
adapters from i2c_dev_init(), and for cleanup.
Unfortunately both use cases expect different return values: the former
expects NOTIFY_* return codes, while the latter expects zero or error
codes, and aborts in case of error.
Hence in case 2, as soon as i2cdev_{at,de}tach_adapter() returns
(non-zero) NOTIFY_OK, the bus iterator aborts. This causes (a) only the
first already existing adapter to be registered, leading to missing
/dev/i2c-* entries, and (b) a failure to unregister all but the first
I2C adapter during cleanup.
Fix this by introducing separate callbacks for the bus iterator,
wrapping the notifier functions, and always returning succes.
Any errors inside these callback functions are unlikely to happen, and
are fatal anyway.
Fixes: cddf70d0bce71c2a ("i2c: dev: fix notifier return values")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
2023-03-09 15:45:46 +08:00
|
|
|
return i2cdev_detach_adapter(dev);
|
2011-03-20 21:50:52 +08:00
|
|
|
}
|
|
|
|
|
2022-12-30 00:00:44 +08:00
|
|
|
return NOTIFY_DONE;
|
2011-03-20 21:50:52 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
static struct notifier_block i2cdev_notifier = {
|
|
|
|
.notifier_call = i2cdev_notifier_call,
|
2005-04-17 06:20:36 +08:00
|
|
|
};
|
|
|
|
|
2007-11-16 02:24:01 +08:00
|
|
|
/* ------------------------------------------------------------------------- */
|
|
|
|
|
i2c: dev: Fix bus callback return values
The i2cdev_{at,de}tach_adapter() callbacks are used for two purposes:
1. As notifier callbacks, when (un)registering I2C adapters created or
destroyed after i2c_dev_init(),
2. As bus iterator callbacks, for registering already existing
adapters from i2c_dev_init(), and for cleanup.
Unfortunately both use cases expect different return values: the former
expects NOTIFY_* return codes, while the latter expects zero or error
codes, and aborts in case of error.
Hence in case 2, as soon as i2cdev_{at,de}tach_adapter() returns
(non-zero) NOTIFY_OK, the bus iterator aborts. This causes (a) only the
first already existing adapter to be registered, leading to missing
/dev/i2c-* entries, and (b) a failure to unregister all but the first
I2C adapter during cleanup.
Fix this by introducing separate callbacks for the bus iterator,
wrapping the notifier functions, and always returning succes.
Any errors inside these callback functions are unlikely to happen, and
are fatal anyway.
Fixes: cddf70d0bce71c2a ("i2c: dev: fix notifier return values")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
2023-03-09 15:45:46 +08:00
|
|
|
static int __init i2c_dev_attach_adapter(struct device *dev, void *dummy)
|
|
|
|
{
|
|
|
|
i2cdev_attach_adapter(dev);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int __exit i2c_dev_detach_adapter(struct device *dev, void *dummy)
|
|
|
|
{
|
|
|
|
i2cdev_detach_adapter(dev);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
2007-11-16 02:24:01 +08:00
|
|
|
/*
|
|
|
|
* module load/unload record keeping
|
|
|
|
*/
|
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
static int __init i2c_dev_init(void)
|
|
|
|
{
|
|
|
|
int res;
|
|
|
|
|
2021-07-12 22:23:22 +08:00
|
|
|
pr_info("i2c /dev entries driver\n");
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2016-05-04 02:45:43 +08:00
|
|
|
res = register_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS, "i2c");
|
2005-04-17 06:20:36 +08:00
|
|
|
if (res)
|
|
|
|
goto out;
|
|
|
|
|
2023-03-14 02:18:35 +08:00
|
|
|
i2c_dev_class = class_create("i2c-dev");
|
2008-09-24 19:39:21 +08:00
|
|
|
if (IS_ERR(i2c_dev_class)) {
|
|
|
|
res = PTR_ERR(i2c_dev_class);
|
2005-04-17 06:20:36 +08:00
|
|
|
goto out_unreg_chrdev;
|
2008-09-24 19:39:21 +08:00
|
|
|
}
|
2013-09-27 10:36:11 +08:00
|
|
|
i2c_dev_class->dev_groups = i2c_groups;
|
2005-04-17 06:20:36 +08:00
|
|
|
|
2011-03-20 21:50:52 +08:00
|
|
|
/* Keep track of adapters which will be added or removed later */
|
|
|
|
res = bus_register_notifier(&i2c_bus_type, &i2cdev_notifier);
|
2005-04-17 06:20:36 +08:00
|
|
|
if (res)
|
|
|
|
goto out_unreg_class;
|
|
|
|
|
2011-03-20 21:50:52 +08:00
|
|
|
/* Bind to already existing adapters right away */
|
i2c: dev: Fix bus callback return values
The i2cdev_{at,de}tach_adapter() callbacks are used for two purposes:
1. As notifier callbacks, when (un)registering I2C adapters created or
destroyed after i2c_dev_init(),
2. As bus iterator callbacks, for registering already existing
adapters from i2c_dev_init(), and for cleanup.
Unfortunately both use cases expect different return values: the former
expects NOTIFY_* return codes, while the latter expects zero or error
codes, and aborts in case of error.
Hence in case 2, as soon as i2cdev_{at,de}tach_adapter() returns
(non-zero) NOTIFY_OK, the bus iterator aborts. This causes (a) only the
first already existing adapter to be registered, leading to missing
/dev/i2c-* entries, and (b) a failure to unregister all but the first
I2C adapter during cleanup.
Fix this by introducing separate callbacks for the bus iterator,
wrapping the notifier functions, and always returning succes.
Any errors inside these callback functions are unlikely to happen, and
are fatal anyway.
Fixes: cddf70d0bce71c2a ("i2c: dev: fix notifier return values")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
2023-03-09 15:45:46 +08:00
|
|
|
i2c_for_each_dev(NULL, i2c_dev_attach_adapter);
|
2011-03-20 21:50:52 +08:00
|
|
|
|
2005-04-17 06:20:36 +08:00
|
|
|
return 0;
|
|
|
|
|
|
|
|
out_unreg_class:
|
2005-12-07 07:33:15 +08:00
|
|
|
class_destroy(i2c_dev_class);
|
2005-04-17 06:20:36 +08:00
|
|
|
out_unreg_chrdev:
|
2016-05-04 02:45:43 +08:00
|
|
|
unregister_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS);
|
2005-04-17 06:20:36 +08:00
|
|
|
out:
|
2021-07-12 22:23:22 +08:00
|
|
|
pr_err("Driver Initialisation failed\n");
|
2005-04-17 06:20:36 +08:00
|
|
|
return res;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void __exit i2c_dev_exit(void)
|
|
|
|
{
|
2011-03-20 21:50:52 +08:00
|
|
|
bus_unregister_notifier(&i2c_bus_type, &i2cdev_notifier);
|
i2c: dev: Fix bus callback return values
The i2cdev_{at,de}tach_adapter() callbacks are used for two purposes:
1. As notifier callbacks, when (un)registering I2C adapters created or
destroyed after i2c_dev_init(),
2. As bus iterator callbacks, for registering already existing
adapters from i2c_dev_init(), and for cleanup.
Unfortunately both use cases expect different return values: the former
expects NOTIFY_* return codes, while the latter expects zero or error
codes, and aborts in case of error.
Hence in case 2, as soon as i2cdev_{at,de}tach_adapter() returns
(non-zero) NOTIFY_OK, the bus iterator aborts. This causes (a) only the
first already existing adapter to be registered, leading to missing
/dev/i2c-* entries, and (b) a failure to unregister all but the first
I2C adapter during cleanup.
Fix this by introducing separate callbacks for the bus iterator,
wrapping the notifier functions, and always returning succes.
Any errors inside these callback functions are unlikely to happen, and
are fatal anyway.
Fixes: cddf70d0bce71c2a ("i2c: dev: fix notifier return values")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Reviewed-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
2023-03-09 15:45:46 +08:00
|
|
|
i2c_for_each_dev(NULL, i2c_dev_detach_adapter);
|
2005-12-07 07:33:15 +08:00
|
|
|
class_destroy(i2c_dev_class);
|
2016-05-04 02:45:43 +08:00
|
|
|
unregister_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS);
|
2005-04-17 06:20:36 +08:00
|
|
|
}
|
|
|
|
|
2020-06-11 19:05:34 +08:00
|
|
|
MODULE_AUTHOR("Frodo Looijaard <frodol@dds.nl>");
|
|
|
|
MODULE_AUTHOR("Simon G. Vogl <simon@tk.uni-linz.ac.at>");
|
2005-04-17 06:20:36 +08:00
|
|
|
MODULE_DESCRIPTION("I2C /dev entries driver");
|
|
|
|
MODULE_LICENSE("GPL");
|
|
|
|
|
|
|
|
module_init(i2c_dev_init);
|
|
|
|
module_exit(i2c_dev_exit);
|