Loading...
1/*
2 * IDE ioctls handling.
3 */
4
5#include <linux/hdreg.h>
6#include <linux/ide.h>
7#include <linux/slab.h>
8
9static const struct ide_ioctl_devset ide_ioctl_settings[] = {
10{ HDIO_GET_32BIT, HDIO_SET_32BIT, &ide_devset_io_32bit },
11{ HDIO_GET_KEEPSETTINGS, HDIO_SET_KEEPSETTINGS, &ide_devset_keepsettings },
12{ HDIO_GET_UNMASKINTR, HDIO_SET_UNMASKINTR, &ide_devset_unmaskirq },
13{ HDIO_GET_DMA, HDIO_SET_DMA, &ide_devset_using_dma },
14{ -1, HDIO_SET_PIO_MODE, &ide_devset_pio_mode },
15{ 0 }
16};
17
18int ide_setting_ioctl(ide_drive_t *drive, struct block_device *bdev,
19 unsigned int cmd, unsigned long arg,
20 const struct ide_ioctl_devset *s)
21{
22 const struct ide_devset *ds;
23 int err = -EOPNOTSUPP;
24
25 for (; (ds = s->setting); s++) {
26 if (ds->get && s->get_ioctl == cmd)
27 goto read_val;
28 else if (ds->set && s->set_ioctl == cmd)
29 goto set_val;
30 }
31
32 return err;
33
34read_val:
35 mutex_lock(&ide_setting_mtx);
36 err = ds->get(drive);
37 mutex_unlock(&ide_setting_mtx);
38 return err >= 0 ? put_user(err, (long __user *)arg) : err;
39
40set_val:
41 if (bdev != bdev->bd_contains)
42 err = -EINVAL;
43 else {
44 if (!capable(CAP_SYS_ADMIN))
45 err = -EACCES;
46 else {
47 mutex_lock(&ide_setting_mtx);
48 err = ide_devset_execute(drive, ds, arg);
49 mutex_unlock(&ide_setting_mtx);
50 }
51 }
52 return err;
53}
54EXPORT_SYMBOL_GPL(ide_setting_ioctl);
55
56static int ide_get_identity_ioctl(ide_drive_t *drive, unsigned int cmd,
57 unsigned long arg)
58{
59 u16 *id = NULL;
60 int size = (cmd == HDIO_GET_IDENTITY) ? (ATA_ID_WORDS * 2) : 142;
61 int rc = 0;
62
63 if ((drive->dev_flags & IDE_DFLAG_ID_READ) == 0) {
64 rc = -ENOMSG;
65 goto out;
66 }
67
68 /* ata_id_to_hd_driveid() relies on 'id' to be fully allocated. */
69 id = kmalloc(ATA_ID_WORDS * 2, GFP_KERNEL);
70 if (id == NULL) {
71 rc = -ENOMEM;
72 goto out;
73 }
74
75 memcpy(id, drive->id, size);
76 ata_id_to_hd_driveid(id);
77
78 if (copy_to_user((void __user *)arg, id, size))
79 rc = -EFAULT;
80
81 kfree(id);
82out:
83 return rc;
84}
85
86static int ide_get_nice_ioctl(ide_drive_t *drive, unsigned long arg)
87{
88 return put_user((!!(drive->dev_flags & IDE_DFLAG_DSC_OVERLAP)
89 << IDE_NICE_DSC_OVERLAP) |
90 (!!(drive->dev_flags & IDE_DFLAG_NICE1)
91 << IDE_NICE_1), (long __user *)arg);
92}
93
94static int ide_set_nice_ioctl(ide_drive_t *drive, unsigned long arg)
95{
96 if (arg != (arg & ((1 << IDE_NICE_DSC_OVERLAP) | (1 << IDE_NICE_1))))
97 return -EPERM;
98
99 if (((arg >> IDE_NICE_DSC_OVERLAP) & 1) &&
100 (drive->media != ide_tape))
101 return -EPERM;
102
103 if ((arg >> IDE_NICE_DSC_OVERLAP) & 1)
104 drive->dev_flags |= IDE_DFLAG_DSC_OVERLAP;
105 else
106 drive->dev_flags &= ~IDE_DFLAG_DSC_OVERLAP;
107
108 if ((arg >> IDE_NICE_1) & 1)
109 drive->dev_flags |= IDE_DFLAG_NICE1;
110 else
111 drive->dev_flags &= ~IDE_DFLAG_NICE1;
112
113 return 0;
114}
115
116static int ide_cmd_ioctl(ide_drive_t *drive, unsigned long arg)
117{
118 u8 *buf = NULL;
119 int bufsize = 0, err = 0;
120 u8 args[4], xfer_rate = 0;
121 struct ide_cmd cmd;
122 struct ide_taskfile *tf = &cmd.tf;
123
124 if (NULL == (void *) arg) {
125 struct request *rq;
126
127 rq = blk_get_request(drive->queue, READ, __GFP_WAIT);
128 rq->cmd_type = REQ_TYPE_ATA_TASKFILE;
129 err = blk_execute_rq(drive->queue, NULL, rq, 0);
130 blk_put_request(rq);
131
132 return err;
133 }
134
135 if (copy_from_user(args, (void __user *)arg, 4))
136 return -EFAULT;
137
138 memset(&cmd, 0, sizeof(cmd));
139 tf->feature = args[2];
140 if (args[0] == ATA_CMD_SMART) {
141 tf->nsect = args[3];
142 tf->lbal = args[1];
143 tf->lbam = 0x4f;
144 tf->lbah = 0xc2;
145 cmd.valid.out.tf = IDE_VALID_OUT_TF;
146 cmd.valid.in.tf = IDE_VALID_NSECT;
147 } else {
148 tf->nsect = args[1];
149 cmd.valid.out.tf = IDE_VALID_FEATURE | IDE_VALID_NSECT;
150 cmd.valid.in.tf = IDE_VALID_NSECT;
151 }
152 tf->command = args[0];
153 cmd.protocol = args[3] ? ATA_PROT_PIO : ATA_PROT_NODATA;
154
155 if (args[3]) {
156 cmd.tf_flags |= IDE_TFLAG_IO_16BIT;
157 bufsize = SECTOR_SIZE * args[3];
158 buf = kzalloc(bufsize, GFP_KERNEL);
159 if (buf == NULL)
160 return -ENOMEM;
161 }
162
163 if (tf->command == ATA_CMD_SET_FEATURES &&
164 tf->feature == SETFEATURES_XFER &&
165 tf->nsect >= XFER_SW_DMA_0) {
166 xfer_rate = ide_find_dma_mode(drive, tf->nsect);
167 if (xfer_rate != tf->nsect) {
168 err = -EINVAL;
169 goto abort;
170 }
171
172 cmd.tf_flags |= IDE_TFLAG_SET_XFER;
173 }
174
175 err = ide_raw_taskfile(drive, &cmd, buf, args[3]);
176
177 args[0] = tf->status;
178 args[1] = tf->error;
179 args[2] = tf->nsect;
180abort:
181 if (copy_to_user((void __user *)arg, &args, 4))
182 err = -EFAULT;
183 if (buf) {
184 if (copy_to_user((void __user *)(arg + 4), buf, bufsize))
185 err = -EFAULT;
186 kfree(buf);
187 }
188 return err;
189}
190
191static int ide_task_ioctl(ide_drive_t *drive, unsigned long arg)
192{
193 void __user *p = (void __user *)arg;
194 int err = 0;
195 u8 args[7];
196 struct ide_cmd cmd;
197
198 if (copy_from_user(args, p, 7))
199 return -EFAULT;
200
201 memset(&cmd, 0, sizeof(cmd));
202 memcpy(&cmd.tf.feature, &args[1], 6);
203 cmd.tf.command = args[0];
204 cmd.valid.out.tf = IDE_VALID_OUT_TF | IDE_VALID_DEVICE;
205 cmd.valid.in.tf = IDE_VALID_IN_TF | IDE_VALID_DEVICE;
206
207 err = ide_no_data_taskfile(drive, &cmd);
208
209 args[0] = cmd.tf.command;
210 memcpy(&args[1], &cmd.tf.feature, 6);
211
212 if (copy_to_user(p, args, 7))
213 err = -EFAULT;
214
215 return err;
216}
217
218static int generic_drive_reset(ide_drive_t *drive)
219{
220 struct request *rq;
221 int ret = 0;
222
223 rq = blk_get_request(drive->queue, READ, __GFP_WAIT);
224 rq->cmd_type = REQ_TYPE_SPECIAL;
225 rq->cmd_len = 1;
226 rq->cmd[0] = REQ_DRIVE_RESET;
227 if (blk_execute_rq(drive->queue, NULL, rq, 1))
228 ret = rq->errors;
229 blk_put_request(rq);
230 return ret;
231}
232
233int generic_ide_ioctl(ide_drive_t *drive, struct block_device *bdev,
234 unsigned int cmd, unsigned long arg)
235{
236 int err;
237
238 err = ide_setting_ioctl(drive, bdev, cmd, arg, ide_ioctl_settings);
239 if (err != -EOPNOTSUPP)
240 return err;
241
242 switch (cmd) {
243 case HDIO_OBSOLETE_IDENTITY:
244 case HDIO_GET_IDENTITY:
245 if (bdev != bdev->bd_contains)
246 return -EINVAL;
247 return ide_get_identity_ioctl(drive, cmd, arg);
248 case HDIO_GET_NICE:
249 return ide_get_nice_ioctl(drive, arg);
250 case HDIO_SET_NICE:
251 if (!capable(CAP_SYS_ADMIN))
252 return -EACCES;
253 return ide_set_nice_ioctl(drive, arg);
254#ifdef CONFIG_IDE_TASK_IOCTL
255 case HDIO_DRIVE_TASKFILE:
256 if (!capable(CAP_SYS_ADMIN) || !capable(CAP_SYS_RAWIO))
257 return -EACCES;
258 if (drive->media == ide_disk)
259 return ide_taskfile_ioctl(drive, arg);
260 return -ENOMSG;
261#endif
262 case HDIO_DRIVE_CMD:
263 if (!capable(CAP_SYS_RAWIO))
264 return -EACCES;
265 return ide_cmd_ioctl(drive, arg);
266 case HDIO_DRIVE_TASK:
267 if (!capable(CAP_SYS_RAWIO))
268 return -EACCES;
269 return ide_task_ioctl(drive, arg);
270 case HDIO_DRIVE_RESET:
271 if (!capable(CAP_SYS_ADMIN))
272 return -EACCES;
273 return generic_drive_reset(drive);
274 case HDIO_GET_BUSSTATE:
275 if (!capable(CAP_SYS_ADMIN))
276 return -EACCES;
277 if (put_user(BUSSTATE_ON, (long __user *)arg))
278 return -EFAULT;
279 return 0;
280 case HDIO_SET_BUSSTATE:
281 if (!capable(CAP_SYS_ADMIN))
282 return -EACCES;
283 return -EOPNOTSUPP;
284 default:
285 return -EINVAL;
286 }
287}
288EXPORT_SYMBOL(generic_ide_ioctl);
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * IDE ioctls handling.
4 */
5
6#include <linux/compat.h>
7#include <linux/export.h>
8#include <linux/hdreg.h>
9#include <linux/ide.h>
10#include <linux/slab.h>
11
12static int put_user_long(long val, unsigned long arg)
13{
14 if (in_compat_syscall())
15 return put_user(val, (compat_long_t __user *)compat_ptr(arg));
16
17 return put_user(val, (long __user *)arg);
18}
19
20static const struct ide_ioctl_devset ide_ioctl_settings[] = {
21{ HDIO_GET_32BIT, HDIO_SET_32BIT, &ide_devset_io_32bit },
22{ HDIO_GET_KEEPSETTINGS, HDIO_SET_KEEPSETTINGS, &ide_devset_keepsettings },
23{ HDIO_GET_UNMASKINTR, HDIO_SET_UNMASKINTR, &ide_devset_unmaskirq },
24{ HDIO_GET_DMA, HDIO_SET_DMA, &ide_devset_using_dma },
25{ -1, HDIO_SET_PIO_MODE, &ide_devset_pio_mode },
26{ 0 }
27};
28
29int ide_setting_ioctl(ide_drive_t *drive, struct block_device *bdev,
30 unsigned int cmd, unsigned long arg,
31 const struct ide_ioctl_devset *s)
32{
33 const struct ide_devset *ds;
34 int err = -EOPNOTSUPP;
35
36 for (; (ds = s->setting); s++) {
37 if (ds->get && s->get_ioctl == cmd)
38 goto read_val;
39 else if (ds->set && s->set_ioctl == cmd)
40 goto set_val;
41 }
42
43 return err;
44
45read_val:
46 mutex_lock(&ide_setting_mtx);
47 err = ds->get(drive);
48 mutex_unlock(&ide_setting_mtx);
49 return err >= 0 ? put_user_long(err, arg) : err;
50
51set_val:
52 if (bdev != bdev->bd_contains)
53 err = -EINVAL;
54 else {
55 if (!capable(CAP_SYS_ADMIN))
56 err = -EACCES;
57 else {
58 mutex_lock(&ide_setting_mtx);
59 err = ide_devset_execute(drive, ds, arg);
60 mutex_unlock(&ide_setting_mtx);
61 }
62 }
63 return err;
64}
65EXPORT_SYMBOL_GPL(ide_setting_ioctl);
66
67static int ide_get_identity_ioctl(ide_drive_t *drive, unsigned int cmd,
68 void __user *argp)
69{
70 u16 *id = NULL;
71 int size = (cmd == HDIO_GET_IDENTITY) ? (ATA_ID_WORDS * 2) : 142;
72 int rc = 0;
73
74 if ((drive->dev_flags & IDE_DFLAG_ID_READ) == 0) {
75 rc = -ENOMSG;
76 goto out;
77 }
78
79 /* ata_id_to_hd_driveid() relies on 'id' to be fully allocated. */
80 id = kmalloc(ATA_ID_WORDS * 2, GFP_KERNEL);
81 if (id == NULL) {
82 rc = -ENOMEM;
83 goto out;
84 }
85
86 memcpy(id, drive->id, size);
87 ata_id_to_hd_driveid(id);
88
89 if (copy_to_user(argp, id, size))
90 rc = -EFAULT;
91
92 kfree(id);
93out:
94 return rc;
95}
96
97static int ide_get_nice_ioctl(ide_drive_t *drive, unsigned long arg)
98{
99 return put_user_long((!!(drive->dev_flags & IDE_DFLAG_DSC_OVERLAP)
100 << IDE_NICE_DSC_OVERLAP) |
101 (!!(drive->dev_flags & IDE_DFLAG_NICE1)
102 << IDE_NICE_1), arg);
103}
104
105static int ide_set_nice_ioctl(ide_drive_t *drive, unsigned long arg)
106{
107 if (arg != (arg & ((1 << IDE_NICE_DSC_OVERLAP) | (1 << IDE_NICE_1))))
108 return -EPERM;
109
110 if (((arg >> IDE_NICE_DSC_OVERLAP) & 1) &&
111 (drive->media != ide_tape))
112 return -EPERM;
113
114 if ((arg >> IDE_NICE_DSC_OVERLAP) & 1)
115 drive->dev_flags |= IDE_DFLAG_DSC_OVERLAP;
116 else
117 drive->dev_flags &= ~IDE_DFLAG_DSC_OVERLAP;
118
119 if ((arg >> IDE_NICE_1) & 1)
120 drive->dev_flags |= IDE_DFLAG_NICE1;
121 else
122 drive->dev_flags &= ~IDE_DFLAG_NICE1;
123
124 return 0;
125}
126
127static int ide_cmd_ioctl(ide_drive_t *drive, void __user *argp)
128{
129 u8 *buf = NULL;
130 int bufsize = 0, err = 0;
131 u8 args[4], xfer_rate = 0;
132 struct ide_cmd cmd;
133 struct ide_taskfile *tf = &cmd.tf;
134
135 if (NULL == argp) {
136 struct request *rq;
137
138 rq = blk_get_request(drive->queue, REQ_OP_DRV_IN, 0);
139 ide_req(rq)->type = ATA_PRIV_TASKFILE;
140 blk_execute_rq(drive->queue, NULL, rq, 0);
141 err = scsi_req(rq)->result ? -EIO : 0;
142 blk_put_request(rq);
143
144 return err;
145 }
146
147 if (copy_from_user(args, argp, 4))
148 return -EFAULT;
149
150 memset(&cmd, 0, sizeof(cmd));
151 tf->feature = args[2];
152 if (args[0] == ATA_CMD_SMART) {
153 tf->nsect = args[3];
154 tf->lbal = args[1];
155 tf->lbam = ATA_SMART_LBAM_PASS;
156 tf->lbah = ATA_SMART_LBAH_PASS;
157 cmd.valid.out.tf = IDE_VALID_OUT_TF;
158 cmd.valid.in.tf = IDE_VALID_NSECT;
159 } else {
160 tf->nsect = args[1];
161 cmd.valid.out.tf = IDE_VALID_FEATURE | IDE_VALID_NSECT;
162 cmd.valid.in.tf = IDE_VALID_NSECT;
163 }
164 tf->command = args[0];
165 cmd.protocol = args[3] ? ATA_PROT_PIO : ATA_PROT_NODATA;
166
167 if (args[3]) {
168 cmd.tf_flags |= IDE_TFLAG_IO_16BIT;
169 bufsize = SECTOR_SIZE * args[3];
170 buf = kzalloc(bufsize, GFP_KERNEL);
171 if (buf == NULL)
172 return -ENOMEM;
173 }
174
175 if (tf->command == ATA_CMD_SET_FEATURES &&
176 tf->feature == SETFEATURES_XFER &&
177 tf->nsect >= XFER_SW_DMA_0) {
178 xfer_rate = ide_find_dma_mode(drive, tf->nsect);
179 if (xfer_rate != tf->nsect) {
180 err = -EINVAL;
181 goto abort;
182 }
183
184 cmd.tf_flags |= IDE_TFLAG_SET_XFER;
185 }
186
187 err = ide_raw_taskfile(drive, &cmd, buf, args[3]);
188
189 args[0] = tf->status;
190 args[1] = tf->error;
191 args[2] = tf->nsect;
192abort:
193 if (copy_to_user(argp, &args, 4))
194 err = -EFAULT;
195 if (buf) {
196 if (copy_to_user((argp + 4), buf, bufsize))
197 err = -EFAULT;
198 kfree(buf);
199 }
200 return err;
201}
202
203static int ide_task_ioctl(ide_drive_t *drive, void __user *p)
204{
205 int err = 0;
206 u8 args[7];
207 struct ide_cmd cmd;
208
209 if (copy_from_user(args, p, 7))
210 return -EFAULT;
211
212 memset(&cmd, 0, sizeof(cmd));
213 memcpy(&cmd.tf.feature, &args[1], 6);
214 cmd.tf.command = args[0];
215 cmd.valid.out.tf = IDE_VALID_OUT_TF | IDE_VALID_DEVICE;
216 cmd.valid.in.tf = IDE_VALID_IN_TF | IDE_VALID_DEVICE;
217
218 err = ide_no_data_taskfile(drive, &cmd);
219
220 args[0] = cmd.tf.command;
221 memcpy(&args[1], &cmd.tf.feature, 6);
222
223 if (copy_to_user(p, args, 7))
224 err = -EFAULT;
225
226 return err;
227}
228
229static int generic_drive_reset(ide_drive_t *drive)
230{
231 struct request *rq;
232 int ret = 0;
233
234 rq = blk_get_request(drive->queue, REQ_OP_DRV_IN, 0);
235 ide_req(rq)->type = ATA_PRIV_MISC;
236 scsi_req(rq)->cmd_len = 1;
237 scsi_req(rq)->cmd[0] = REQ_DRIVE_RESET;
238 blk_execute_rq(drive->queue, NULL, rq, 1);
239 ret = scsi_req(rq)->result;
240 blk_put_request(rq);
241 return ret;
242}
243
244int generic_ide_ioctl(ide_drive_t *drive, struct block_device *bdev,
245 unsigned int cmd, unsigned long arg)
246{
247 int err;
248 void __user *argp = (void __user *)arg;
249
250 if (in_compat_syscall())
251 argp = compat_ptr(arg);
252
253 err = ide_setting_ioctl(drive, bdev, cmd, arg, ide_ioctl_settings);
254 if (err != -EOPNOTSUPP)
255 return err;
256
257 switch (cmd) {
258 case HDIO_OBSOLETE_IDENTITY:
259 case HDIO_GET_IDENTITY:
260 if (bdev != bdev->bd_contains)
261 return -EINVAL;
262 return ide_get_identity_ioctl(drive, cmd, argp);
263 case HDIO_GET_NICE:
264 return ide_get_nice_ioctl(drive, arg);
265 case HDIO_SET_NICE:
266 if (!capable(CAP_SYS_ADMIN))
267 return -EACCES;
268 return ide_set_nice_ioctl(drive, arg);
269#ifdef CONFIG_IDE_TASK_IOCTL
270 case HDIO_DRIVE_TASKFILE:
271 if (!capable(CAP_SYS_ADMIN) || !capable(CAP_SYS_RAWIO))
272 return -EACCES;
273 /* missing compat handler for HDIO_DRIVE_TASKFILE */
274 if (in_compat_syscall())
275 return -ENOTTY;
276 if (drive->media == ide_disk)
277 return ide_taskfile_ioctl(drive, arg);
278 return -ENOMSG;
279#endif
280 case HDIO_DRIVE_CMD:
281 if (!capable(CAP_SYS_RAWIO))
282 return -EACCES;
283 return ide_cmd_ioctl(drive, argp);
284 case HDIO_DRIVE_TASK:
285 if (!capable(CAP_SYS_RAWIO))
286 return -EACCES;
287 return ide_task_ioctl(drive, argp);
288 case HDIO_DRIVE_RESET:
289 if (!capable(CAP_SYS_ADMIN))
290 return -EACCES;
291 return generic_drive_reset(drive);
292 case HDIO_GET_BUSSTATE:
293 if (!capable(CAP_SYS_ADMIN))
294 return -EACCES;
295 if (put_user_long(BUSSTATE_ON, arg))
296 return -EFAULT;
297 return 0;
298 case HDIO_SET_BUSSTATE:
299 if (!capable(CAP_SYS_ADMIN))
300 return -EACCES;
301 return -EOPNOTSUPP;
302 default:
303 return -EINVAL;
304 }
305}
306EXPORT_SYMBOL(generic_ide_ioctl);