Linux Audio

Check our new training course

Loading...
Note: File does not exist in v4.6.
   1/*
   2 * I2O Configuration Interface Driver
   3 *
   4 * (C) Copyright 1999-2002  Red Hat
   5 *
   6 * Written by Alan Cox, Building Number Three Ltd
   7 *
   8 * Fixes/additions:
   9 *	Deepak Saxena (04/20/1999):
  10 *		Added basic ioctl() support
  11 *	Deepak Saxena (06/07/1999):
  12 *		Added software download ioctl (still testing)
  13 *	Auvo Häkkinen (09/10/1999):
  14 *		Changes to i2o_cfg_reply(), ioctl_parms()
  15 *		Added ioct_validate()
  16 *	Taneli Vähäkangas (09/30/1999):
  17 *		Fixed ioctl_swdl()
  18 *	Taneli Vähäkangas (10/04/1999):
  19 *		Changed ioctl_swdl(), implemented ioctl_swul() and ioctl_swdel()
  20 *	Deepak Saxena (11/18/1999):
  21 *		Added event managmenet support
  22 *	Alan Cox <alan@lxorguk.ukuu.org.uk>:
  23 *		2.4 rewrite ported to 2.5
  24 *	Markus Lidel <Markus.Lidel@shadowconnect.com>:
  25 *		Added pass-thru support for Adaptec's raidutils
  26 *
  27 * This program is free software; you can redistribute it and/or
  28 * modify it under the terms of the GNU General Public License
  29 * as published by the Free Software Foundation; either version
  30 * 2 of the License, or (at your option) any later version.
  31 */
  32
  33#include <linux/miscdevice.h>
  34#include <linux/mutex.h>
  35#include <linux/compat.h>
  36#include <linux/slab.h>
  37
  38#include <asm/uaccess.h>
  39
  40#include "core.h"
  41
  42#define SG_TABLESIZE		30
  43
  44static DEFINE_MUTEX(i2o_cfg_mutex);
  45static long i2o_cfg_ioctl(struct file *, unsigned int, unsigned long);
  46
  47static spinlock_t i2o_config_lock;
  48
  49#define MODINC(x,y) ((x) = ((x) + 1) % (y))
  50
  51struct sg_simple_element {
  52	u32 flag_count;
  53	u32 addr_bus;
  54};
  55
  56struct i2o_cfg_info {
  57	struct file *fp;
  58	struct fasync_struct *fasync;
  59	struct i2o_evt_info event_q[I2O_EVT_Q_LEN];
  60	u16 q_in;		// Queue head index
  61	u16 q_out;		// Queue tail index
  62	u16 q_len;		// Queue length
  63	u16 q_lost;		// Number of lost events
  64	ulong q_id;		// Event queue ID...used as tx_context
  65	struct i2o_cfg_info *next;
  66};
  67static struct i2o_cfg_info *open_files = NULL;
  68static ulong i2o_cfg_info_id = 0;
  69
  70static int i2o_cfg_getiops(unsigned long arg)
  71{
  72	struct i2o_controller *c;
  73	u8 __user *user_iop_table = (void __user *)arg;
  74	u8 tmp[MAX_I2O_CONTROLLERS];
  75	int ret = 0;
  76
  77	memset(tmp, 0, MAX_I2O_CONTROLLERS);
  78
  79	list_for_each_entry(c, &i2o_controllers, list)
  80	    tmp[c->unit] = 1;
  81
  82	if (copy_to_user(user_iop_table, tmp, MAX_I2O_CONTROLLERS))
  83		ret = -EFAULT;
  84
  85	return ret;
  86};
  87
  88static int i2o_cfg_gethrt(unsigned long arg)
  89{
  90	struct i2o_controller *c;
  91	struct i2o_cmd_hrtlct __user *cmd = (struct i2o_cmd_hrtlct __user *)arg;
  92	struct i2o_cmd_hrtlct kcmd;
  93	i2o_hrt *hrt;
  94	int len;
  95	u32 reslen;
  96	int ret = 0;
  97
  98	if (copy_from_user(&kcmd, cmd, sizeof(struct i2o_cmd_hrtlct)))
  99		return -EFAULT;
 100
 101	if (get_user(reslen, kcmd.reslen) < 0)
 102		return -EFAULT;
 103
 104	if (kcmd.resbuf == NULL)
 105		return -EFAULT;
 106
 107	c = i2o_find_iop(kcmd.iop);
 108	if (!c)
 109		return -ENXIO;
 110
 111	hrt = (i2o_hrt *) c->hrt.virt;
 112
 113	len = 8 + ((hrt->entry_len * hrt->num_entries) << 2);
 114
 115	if (put_user(len, kcmd.reslen))
 116		ret = -EFAULT;
 117	else if (len > reslen)
 118		ret = -ENOBUFS;
 119	else if (copy_to_user(kcmd.resbuf, (void *)hrt, len))
 120		ret = -EFAULT;
 121
 122	return ret;
 123};
 124
 125static int i2o_cfg_getlct(unsigned long arg)
 126{
 127	struct i2o_controller *c;
 128	struct i2o_cmd_hrtlct __user *cmd = (struct i2o_cmd_hrtlct __user *)arg;
 129	struct i2o_cmd_hrtlct kcmd;
 130	i2o_lct *lct;
 131	int len;
 132	int ret = 0;
 133	u32 reslen;
 134
 135	if (copy_from_user(&kcmd, cmd, sizeof(struct i2o_cmd_hrtlct)))
 136		return -EFAULT;
 137
 138	if (get_user(reslen, kcmd.reslen) < 0)
 139		return -EFAULT;
 140
 141	if (kcmd.resbuf == NULL)
 142		return -EFAULT;
 143
 144	c = i2o_find_iop(kcmd.iop);
 145	if (!c)
 146		return -ENXIO;
 147
 148	lct = (i2o_lct *) c->lct;
 149
 150	len = (unsigned int)lct->table_size << 2;
 151	if (put_user(len, kcmd.reslen))
 152		ret = -EFAULT;
 153	else if (len > reslen)
 154		ret = -ENOBUFS;
 155	else if (copy_to_user(kcmd.resbuf, lct, len))
 156		ret = -EFAULT;
 157
 158	return ret;
 159};
 160
 161static int i2o_cfg_parms(unsigned long arg, unsigned int type)
 162{
 163	int ret = 0;
 164	struct i2o_controller *c;
 165	struct i2o_device *dev;
 166	struct i2o_cmd_psetget __user *cmd =
 167	    (struct i2o_cmd_psetget __user *)arg;
 168	struct i2o_cmd_psetget kcmd;
 169	u32 reslen;
 170	u8 *ops;
 171	u8 *res;
 172	int len = 0;
 173
 174	u32 i2o_cmd = (type == I2OPARMGET ?
 175		       I2O_CMD_UTIL_PARAMS_GET : I2O_CMD_UTIL_PARAMS_SET);
 176
 177	if (copy_from_user(&kcmd, cmd, sizeof(struct i2o_cmd_psetget)))
 178		return -EFAULT;
 179
 180	if (get_user(reslen, kcmd.reslen))
 181		return -EFAULT;
 182
 183	c = i2o_find_iop(kcmd.iop);
 184	if (!c)
 185		return -ENXIO;
 186
 187	dev = i2o_iop_find_device(c, kcmd.tid);
 188	if (!dev)
 189		return -ENXIO;
 190
 191	ops = memdup_user(kcmd.opbuf, kcmd.oplen);
 192	if (IS_ERR(ops))
 193		return PTR_ERR(ops);
 194
 195	/*
 196	 * It's possible to have a _very_ large table
 197	 * and that the user asks for all of it at once...
 198	 */
 199	res = kmalloc(65536, GFP_KERNEL);
 200	if (!res) {
 201		kfree(ops);
 202		return -ENOMEM;
 203	}
 204
 205	len = i2o_parm_issue(dev, i2o_cmd, ops, kcmd.oplen, res, 65536);
 206	kfree(ops);
 207
 208	if (len < 0) {
 209		kfree(res);
 210		return -EAGAIN;
 211	}
 212
 213	if (put_user(len, kcmd.reslen))
 214		ret = -EFAULT;
 215	else if (len > reslen)
 216		ret = -ENOBUFS;
 217	else if (copy_to_user(kcmd.resbuf, res, len))
 218		ret = -EFAULT;
 219
 220	kfree(res);
 221
 222	return ret;
 223};
 224
 225static int i2o_cfg_swdl(unsigned long arg)
 226{
 227	struct i2o_sw_xfer kxfer;
 228	struct i2o_sw_xfer __user *pxfer = (struct i2o_sw_xfer __user *)arg;
 229	unsigned char maxfrag = 0, curfrag = 1;
 230	struct i2o_dma buffer;
 231	struct i2o_message *msg;
 232	unsigned int status = 0, swlen = 0, fragsize = 8192;
 233	struct i2o_controller *c;
 234
 235	if (copy_from_user(&kxfer, pxfer, sizeof(struct i2o_sw_xfer)))
 236		return -EFAULT;
 237
 238	if (get_user(swlen, kxfer.swlen) < 0)
 239		return -EFAULT;
 240
 241	if (get_user(maxfrag, kxfer.maxfrag) < 0)
 242		return -EFAULT;
 243
 244	if (get_user(curfrag, kxfer.curfrag) < 0)
 245		return -EFAULT;
 246
 247	if (curfrag == maxfrag)
 248		fragsize = swlen - (maxfrag - 1) * 8192;
 249
 250	if (!kxfer.buf || !access_ok(VERIFY_READ, kxfer.buf, fragsize))
 251		return -EFAULT;
 252
 253	c = i2o_find_iop(kxfer.iop);
 254	if (!c)
 255		return -ENXIO;
 256
 257	msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
 258	if (IS_ERR(msg))
 259		return PTR_ERR(msg);
 260
 261	if (i2o_dma_alloc(&c->pdev->dev, &buffer, fragsize)) {
 262		i2o_msg_nop(c, msg);
 263		return -ENOMEM;
 264	}
 265
 266	if (__copy_from_user(buffer.virt, kxfer.buf, fragsize)) {
 267		i2o_msg_nop(c, msg);
 268		i2o_dma_free(&c->pdev->dev, &buffer);
 269		return -EFAULT;
 270	}
 271
 272	msg->u.head[0] = cpu_to_le32(NINE_WORD_MSG_SIZE | SGL_OFFSET_7);
 273	msg->u.head[1] =
 274	    cpu_to_le32(I2O_CMD_SW_DOWNLOAD << 24 | HOST_TID << 12 |
 275			ADAPTER_TID);
 276	msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
 277	msg->u.head[3] = cpu_to_le32(0);
 278	msg->body[0] =
 279	    cpu_to_le32((((u32) kxfer.flags) << 24) | (((u32) kxfer.
 280							sw_type) << 16) |
 281			(((u32) maxfrag) << 8) | (((u32) curfrag)));
 282	msg->body[1] = cpu_to_le32(swlen);
 283	msg->body[2] = cpu_to_le32(kxfer.sw_id);
 284	msg->body[3] = cpu_to_le32(0xD0000000 | fragsize);
 285	msg->body[4] = cpu_to_le32(buffer.phys);
 286
 287	osm_debug("swdl frag %d/%d (size %d)\n", curfrag, maxfrag, fragsize);
 288	status = i2o_msg_post_wait_mem(c, msg, 60, &buffer);
 289
 290	if (status != -ETIMEDOUT)
 291		i2o_dma_free(&c->pdev->dev, &buffer);
 292
 293	if (status != I2O_POST_WAIT_OK) {
 294		// it fails if you try and send frags out of order
 295		// and for some yet unknown reasons too
 296		osm_info("swdl failed, DetailedStatus = %d\n", status);
 297		return status;
 298	}
 299
 300	return 0;
 301};
 302
 303static int i2o_cfg_swul(unsigned long arg)
 304{
 305	struct i2o_sw_xfer kxfer;
 306	struct i2o_sw_xfer __user *pxfer = (struct i2o_sw_xfer __user *)arg;
 307	unsigned char maxfrag = 0, curfrag = 1;
 308	struct i2o_dma buffer;
 309	struct i2o_message *msg;
 310	unsigned int status = 0, swlen = 0, fragsize = 8192;
 311	struct i2o_controller *c;
 312	int ret = 0;
 313
 314	if (copy_from_user(&kxfer, pxfer, sizeof(struct i2o_sw_xfer)))
 315		return -EFAULT;
 316
 317	if (get_user(swlen, kxfer.swlen) < 0)
 318		return -EFAULT;
 319
 320	if (get_user(maxfrag, kxfer.maxfrag) < 0)
 321		return -EFAULT;
 322
 323	if (get_user(curfrag, kxfer.curfrag) < 0)
 324		return -EFAULT;
 325
 326	if (curfrag == maxfrag)
 327		fragsize = swlen - (maxfrag - 1) * 8192;
 328
 329	if (!kxfer.buf)
 330		return -EFAULT;
 331
 332	c = i2o_find_iop(kxfer.iop);
 333	if (!c)
 334		return -ENXIO;
 335
 336	msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
 337	if (IS_ERR(msg))
 338		return PTR_ERR(msg);
 339
 340	if (i2o_dma_alloc(&c->pdev->dev, &buffer, fragsize)) {
 341		i2o_msg_nop(c, msg);
 342		return -ENOMEM;
 343	}
 344
 345	msg->u.head[0] = cpu_to_le32(NINE_WORD_MSG_SIZE | SGL_OFFSET_7);
 346	msg->u.head[1] =
 347	    cpu_to_le32(I2O_CMD_SW_UPLOAD << 24 | HOST_TID << 12 | ADAPTER_TID);
 348	msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
 349	msg->u.head[3] = cpu_to_le32(0);
 350	msg->body[0] =
 351	    cpu_to_le32((u32) kxfer.flags << 24 | (u32) kxfer.
 352			sw_type << 16 | (u32) maxfrag << 8 | (u32) curfrag);
 353	msg->body[1] = cpu_to_le32(swlen);
 354	msg->body[2] = cpu_to_le32(kxfer.sw_id);
 355	msg->body[3] = cpu_to_le32(0xD0000000 | fragsize);
 356	msg->body[4] = cpu_to_le32(buffer.phys);
 357
 358	osm_debug("swul frag %d/%d (size %d)\n", curfrag, maxfrag, fragsize);
 359	status = i2o_msg_post_wait_mem(c, msg, 60, &buffer);
 360
 361	if (status != I2O_POST_WAIT_OK) {
 362		if (status != -ETIMEDOUT)
 363			i2o_dma_free(&c->pdev->dev, &buffer);
 364
 365		osm_info("swul failed, DetailedStatus = %d\n", status);
 366		return status;
 367	}
 368
 369	if (copy_to_user(kxfer.buf, buffer.virt, fragsize))
 370		ret = -EFAULT;
 371
 372	i2o_dma_free(&c->pdev->dev, &buffer);
 373
 374	return ret;
 375}
 376
 377static int i2o_cfg_swdel(unsigned long arg)
 378{
 379	struct i2o_controller *c;
 380	struct i2o_sw_xfer kxfer;
 381	struct i2o_sw_xfer __user *pxfer = (struct i2o_sw_xfer __user *)arg;
 382	struct i2o_message *msg;
 383	unsigned int swlen;
 384	int token;
 385
 386	if (copy_from_user(&kxfer, pxfer, sizeof(struct i2o_sw_xfer)))
 387		return -EFAULT;
 388
 389	if (get_user(swlen, kxfer.swlen) < 0)
 390		return -EFAULT;
 391
 392	c = i2o_find_iop(kxfer.iop);
 393	if (!c)
 394		return -ENXIO;
 395
 396	msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
 397	if (IS_ERR(msg))
 398		return PTR_ERR(msg);
 399
 400	msg->u.head[0] = cpu_to_le32(SEVEN_WORD_MSG_SIZE | SGL_OFFSET_0);
 401	msg->u.head[1] =
 402	    cpu_to_le32(I2O_CMD_SW_REMOVE << 24 | HOST_TID << 12 | ADAPTER_TID);
 403	msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
 404	msg->u.head[3] = cpu_to_le32(0);
 405	msg->body[0] =
 406	    cpu_to_le32((u32) kxfer.flags << 24 | (u32) kxfer.sw_type << 16);
 407	msg->body[1] = cpu_to_le32(swlen);
 408	msg->body[2] = cpu_to_le32(kxfer.sw_id);
 409
 410	token = i2o_msg_post_wait(c, msg, 10);
 411
 412	if (token != I2O_POST_WAIT_OK) {
 413		osm_info("swdel failed, DetailedStatus = %d\n", token);
 414		return -ETIMEDOUT;
 415	}
 416
 417	return 0;
 418};
 419
 420static int i2o_cfg_validate(unsigned long arg)
 421{
 422	int token;
 423	int iop = (int)arg;
 424	struct i2o_message *msg;
 425	struct i2o_controller *c;
 426
 427	c = i2o_find_iop(iop);
 428	if (!c)
 429		return -ENXIO;
 430
 431	msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
 432	if (IS_ERR(msg))
 433		return PTR_ERR(msg);
 434
 435	msg->u.head[0] = cpu_to_le32(FOUR_WORD_MSG_SIZE | SGL_OFFSET_0);
 436	msg->u.head[1] =
 437	    cpu_to_le32(I2O_CMD_CONFIG_VALIDATE << 24 | HOST_TID << 12 | iop);
 438	msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
 439	msg->u.head[3] = cpu_to_le32(0);
 440
 441	token = i2o_msg_post_wait(c, msg, 10);
 442
 443	if (token != I2O_POST_WAIT_OK) {
 444		osm_info("Can't validate configuration, ErrorStatus = %d\n",
 445			 token);
 446		return -ETIMEDOUT;
 447	}
 448
 449	return 0;
 450};
 451
 452static int i2o_cfg_evt_reg(unsigned long arg, struct file *fp)
 453{
 454	struct i2o_message *msg;
 455	struct i2o_evt_id __user *pdesc = (struct i2o_evt_id __user *)arg;
 456	struct i2o_evt_id kdesc;
 457	struct i2o_controller *c;
 458	struct i2o_device *d;
 459
 460	if (copy_from_user(&kdesc, pdesc, sizeof(struct i2o_evt_id)))
 461		return -EFAULT;
 462
 463	/* IOP exists? */
 464	c = i2o_find_iop(kdesc.iop);
 465	if (!c)
 466		return -ENXIO;
 467
 468	/* Device exists? */
 469	d = i2o_iop_find_device(c, kdesc.tid);
 470	if (!d)
 471		return -ENODEV;
 472
 473	msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
 474	if (IS_ERR(msg))
 475		return PTR_ERR(msg);
 476
 477	msg->u.head[0] = cpu_to_le32(FOUR_WORD_MSG_SIZE | SGL_OFFSET_0);
 478	msg->u.head[1] =
 479	    cpu_to_le32(I2O_CMD_UTIL_EVT_REGISTER << 24 | HOST_TID << 12 |
 480			kdesc.tid);
 481	msg->u.head[2] = cpu_to_le32(i2o_config_driver.context);
 482	msg->u.head[3] = cpu_to_le32(i2o_cntxt_list_add(c, fp->private_data));
 483	msg->body[0] = cpu_to_le32(kdesc.evt_mask);
 484
 485	i2o_msg_post(c, msg);
 486
 487	return 0;
 488}
 489
 490static int i2o_cfg_evt_get(unsigned long arg, struct file *fp)
 491{
 492	struct i2o_cfg_info *p = NULL;
 493	struct i2o_evt_get __user *uget = (struct i2o_evt_get __user *)arg;
 494	struct i2o_evt_get kget;
 495	unsigned long flags;
 496
 497	for (p = open_files; p; p = p->next)
 498		if (p->q_id == (ulong) fp->private_data)
 499			break;
 500
 501	if (!p->q_len)
 502		return -ENOENT;
 503
 504	memcpy(&kget.info, &p->event_q[p->q_out], sizeof(struct i2o_evt_info));
 505	MODINC(p->q_out, I2O_EVT_Q_LEN);
 506	spin_lock_irqsave(&i2o_config_lock, flags);
 507	p->q_len--;
 508	kget.pending = p->q_len;
 509	kget.lost = p->q_lost;
 510	spin_unlock_irqrestore(&i2o_config_lock, flags);
 511
 512	if (copy_to_user(uget, &kget, sizeof(struct i2o_evt_get)))
 513		return -EFAULT;
 514	return 0;
 515}
 516
 517#ifdef CONFIG_COMPAT
 518static int i2o_cfg_passthru32(struct file *file, unsigned cmnd,
 519			      unsigned long arg)
 520{
 521	struct i2o_cmd_passthru32 __user *cmd;
 522	struct i2o_controller *c;
 523	u32 __user *user_msg;
 524	u32 *reply = NULL;
 525	u32 __user *user_reply = NULL;
 526	u32 size = 0;
 527	u32 reply_size = 0;
 528	u32 rcode = 0;
 529	struct i2o_dma sg_list[SG_TABLESIZE];
 530	u32 sg_offset = 0;
 531	u32 sg_count = 0;
 532	u32 i = 0;
 533	u32 sg_index = 0;
 534	i2o_status_block *sb;
 535	struct i2o_message *msg;
 536	unsigned int iop;
 537
 538	cmd = (struct i2o_cmd_passthru32 __user *)arg;
 539
 540	if (get_user(iop, &cmd->iop) || get_user(i, &cmd->msg))
 541		return -EFAULT;
 542
 543	user_msg = compat_ptr(i);
 544
 545	c = i2o_find_iop(iop);
 546	if (!c) {
 547		osm_debug("controller %d not found\n", iop);
 548		return -ENXIO;
 549	}
 550
 551	sb = c->status_block.virt;
 552
 553	if (get_user(size, &user_msg[0])) {
 554		osm_warn("unable to get size!\n");
 555		return -EFAULT;
 556	}
 557	size = size >> 16;
 558
 559	if (size > sb->inbound_frame_size) {
 560		osm_warn("size of message > inbound_frame_size");
 561		return -EFAULT;
 562	}
 563
 564	user_reply = &user_msg[size];
 565
 566	size <<= 2;		// Convert to bytes
 567
 568	msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
 569	if (IS_ERR(msg))
 570		return PTR_ERR(msg);
 571
 572	rcode = -EFAULT;
 573	/* Copy in the user's I2O command */
 574	if (copy_from_user(msg, user_msg, size)) {
 575		osm_warn("unable to copy user message\n");
 576		goto out;
 577	}
 578	i2o_dump_message(msg);
 579
 580	if (get_user(reply_size, &user_reply[0]) < 0)
 581		goto out;
 582
 583	reply_size >>= 16;
 584	reply_size <<= 2;
 585
 586	rcode = -ENOMEM;
 587	reply = kzalloc(reply_size, GFP_KERNEL);
 588	if (!reply) {
 589		printk(KERN_WARNING "%s: Could not allocate reply buffer\n",
 590		       c->name);
 591		goto out;
 592	}
 593
 594	sg_offset = (msg->u.head[0] >> 4) & 0x0f;
 595
 596	memset(sg_list, 0, sizeof(sg_list[0]) * SG_TABLESIZE);
 597	if (sg_offset) {
 598		struct sg_simple_element *sg;
 599
 600		if (sg_offset * 4 >= size) {
 601			rcode = -EFAULT;
 602			goto cleanup;
 603		}
 604		// TODO 64bit fix
 605		sg = (struct sg_simple_element *)((&msg->u.head[0]) +
 606						  sg_offset);
 607		sg_count =
 608		    (size - sg_offset * 4) / sizeof(struct sg_simple_element);
 609		if (sg_count > SG_TABLESIZE) {
 610			printk(KERN_DEBUG "%s:IOCTL SG List too large (%u)\n",
 611			       c->name, sg_count);
 612			rcode = -EINVAL;
 613			goto cleanup;
 614		}
 615
 616		for (i = 0; i < sg_count; i++) {
 617			int sg_size;
 618			struct i2o_dma *p;
 619
 620			if (!(sg[i].flag_count & 0x10000000
 621			      /*I2O_SGL_FLAGS_SIMPLE_ADDRESS_ELEMENT */ )) {
 622				printk(KERN_DEBUG
 623				       "%s:Bad SG element %d - not simple (%x)\n",
 624				       c->name, i, sg[i].flag_count);
 625				rcode = -EINVAL;
 626				goto cleanup;
 627			}
 628			sg_size = sg[i].flag_count & 0xffffff;
 629			p = &(sg_list[sg_index]);
 630			/* Allocate memory for the transfer */
 631			if (i2o_dma_alloc(&c->pdev->dev, p, sg_size)) {
 632				printk(KERN_DEBUG
 633				       "%s: Could not allocate SG buffer - size = %d buffer number %d of %d\n",
 634				       c->name, sg_size, i, sg_count);
 635				rcode = -ENOMEM;
 636				goto sg_list_cleanup;
 637			}
 638			sg_index++;
 639			/* Copy in the user's SG buffer if necessary */
 640			if (sg[i].
 641			    flag_count & 0x04000000 /*I2O_SGL_FLAGS_DIR */ ) {
 642				// TODO 64bit fix
 643				if (copy_from_user
 644				    (p->virt,
 645				     (void __user *)(unsigned long)sg[i].
 646				     addr_bus, sg_size)) {
 647					printk(KERN_DEBUG
 648					       "%s: Could not copy SG buf %d FROM user\n",
 649					       c->name, i);
 650					rcode = -EFAULT;
 651					goto sg_list_cleanup;
 652				}
 653			}
 654			//TODO 64bit fix
 655			sg[i].addr_bus = (u32) p->phys;
 656		}
 657	}
 658
 659	rcode = i2o_msg_post_wait(c, msg, 60);
 660	msg = NULL;
 661	if (rcode) {
 662		reply[4] = ((u32) rcode) << 24;
 663		goto sg_list_cleanup;
 664	}
 665
 666	if (sg_offset) {
 667		u32 rmsg[I2O_OUTBOUND_MSG_FRAME_SIZE];
 668		/* Copy back the Scatter Gather buffers back to user space */
 669		u32 j;
 670		// TODO 64bit fix
 671		struct sg_simple_element *sg;
 672		int sg_size;
 673
 674		// re-acquire the original message to handle correctly the sg copy operation
 675		memset(&rmsg, 0, I2O_OUTBOUND_MSG_FRAME_SIZE * 4);
 676		// get user msg size in u32s
 677		if (get_user(size, &user_msg[0])) {
 678			rcode = -EFAULT;
 679			goto sg_list_cleanup;
 680		}
 681		size = size >> 16;
 682		size *= 4;
 683		/* Copy in the user's I2O command */
 684		if (copy_from_user(rmsg, user_msg, size)) {
 685			rcode = -EFAULT;
 686			goto sg_list_cleanup;
 687		}
 688		sg_count =
 689		    (size - sg_offset * 4) / sizeof(struct sg_simple_element);
 690
 691		// TODO 64bit fix
 692		sg = (struct sg_simple_element *)(rmsg + sg_offset);
 693		for (j = 0; j < sg_count; j++) {
 694			/* Copy out the SG list to user's buffer if necessary */
 695			if (!
 696			    (sg[j].
 697			     flag_count & 0x4000000 /*I2O_SGL_FLAGS_DIR */ )) {
 698				sg_size = sg[j].flag_count & 0xffffff;
 699				// TODO 64bit fix
 700				if (copy_to_user
 701				    ((void __user *)(u64) sg[j].addr_bus,
 702				     sg_list[j].virt, sg_size)) {
 703					printk(KERN_WARNING
 704					       "%s: Could not copy %p TO user %x\n",
 705					       c->name, sg_list[j].virt,
 706					       sg[j].addr_bus);
 707					rcode = -EFAULT;
 708					goto sg_list_cleanup;
 709				}
 710			}
 711		}
 712	}
 713
 714sg_list_cleanup:
 715	/* Copy back the reply to user space */
 716	if (reply_size) {
 717		// we wrote our own values for context - now restore the user supplied ones
 718		if (copy_from_user(reply + 2, user_msg + 2, sizeof(u32) * 2)) {
 719			printk(KERN_WARNING
 720			       "%s: Could not copy message context FROM user\n",
 721			       c->name);
 722			rcode = -EFAULT;
 723		}
 724		if (copy_to_user(user_reply, reply, reply_size)) {
 725			printk(KERN_WARNING
 726			       "%s: Could not copy reply TO user\n", c->name);
 727			rcode = -EFAULT;
 728		}
 729	}
 730	for (i = 0; i < sg_index; i++)
 731		i2o_dma_free(&c->pdev->dev, &sg_list[i]);
 732
 733cleanup:
 734	kfree(reply);
 735out:
 736	if (msg)
 737		i2o_msg_nop(c, msg);
 738	return rcode;
 739}
 740
 741static long i2o_cfg_compat_ioctl(struct file *file, unsigned cmd,
 742				 unsigned long arg)
 743{
 744	int ret;
 745	mutex_lock(&i2o_cfg_mutex);
 746	switch (cmd) {
 747	case I2OGETIOPS:
 748		ret = i2o_cfg_ioctl(file, cmd, arg);
 749		break;
 750	case I2OPASSTHRU32:
 751		ret = i2o_cfg_passthru32(file, cmd, arg);
 752		break;
 753	default:
 754		ret = -ENOIOCTLCMD;
 755		break;
 756	}
 757	mutex_unlock(&i2o_cfg_mutex);
 758	return ret;
 759}
 760
 761#endif
 762
 763#ifdef CONFIG_I2O_EXT_ADAPTEC
 764static int i2o_cfg_passthru(unsigned long arg)
 765{
 766	struct i2o_cmd_passthru __user *cmd =
 767	    (struct i2o_cmd_passthru __user *)arg;
 768	struct i2o_controller *c;
 769	u32 __user *user_msg;
 770	u32 *reply = NULL;
 771	u32 __user *user_reply = NULL;
 772	u32 size = 0;
 773	u32 reply_size = 0;
 774	u32 rcode = 0;
 775	struct i2o_dma sg_list[SG_TABLESIZE];
 776	u32 sg_offset = 0;
 777	u32 sg_count = 0;
 778	int sg_index = 0;
 779	u32 i = 0;
 780	i2o_status_block *sb;
 781	struct i2o_message *msg;
 782	unsigned int iop;
 783
 784	if (get_user(iop, &cmd->iop) || get_user(user_msg, &cmd->msg))
 785		return -EFAULT;
 786
 787	c = i2o_find_iop(iop);
 788	if (!c) {
 789		osm_warn("controller %d not found\n", iop);
 790		return -ENXIO;
 791	}
 792
 793	sb = c->status_block.virt;
 794
 795	if (get_user(size, &user_msg[0]))
 796		return -EFAULT;
 797	size = size >> 16;
 798
 799	if (size > sb->inbound_frame_size) {
 800		osm_warn("size of message > inbound_frame_size");
 801		return -EFAULT;
 802	}
 803
 804	user_reply = &user_msg[size];
 805
 806	size <<= 2;		// Convert to bytes
 807
 808	msg = i2o_msg_get_wait(c, I2O_TIMEOUT_MESSAGE_GET);
 809	if (IS_ERR(msg))
 810		return PTR_ERR(msg);
 811
 812	rcode = -EFAULT;
 813	/* Copy in the user's I2O command */
 814	if (copy_from_user(msg, user_msg, size))
 815		goto out;
 816
 817	if (get_user(reply_size, &user_reply[0]) < 0)
 818		goto out;
 819
 820	reply_size >>= 16;
 821	reply_size <<= 2;
 822
 823	reply = kzalloc(reply_size, GFP_KERNEL);
 824	if (!reply) {
 825		printk(KERN_WARNING "%s: Could not allocate reply buffer\n",
 826		       c->name);
 827		rcode = -ENOMEM;
 828		goto out;
 829	}
 830
 831	sg_offset = (msg->u.head[0] >> 4) & 0x0f;
 832
 833	memset(sg_list, 0, sizeof(sg_list[0]) * SG_TABLESIZE);
 834	if (sg_offset) {
 835		struct sg_simple_element *sg;
 836		struct i2o_dma *p;
 837
 838		if (sg_offset * 4 >= size) {
 839			rcode = -EFAULT;
 840			goto cleanup;
 841		}
 842		// TODO 64bit fix
 843		sg = (struct sg_simple_element *)((&msg->u.head[0]) +
 844						  sg_offset);
 845		sg_count =
 846		    (size - sg_offset * 4) / sizeof(struct sg_simple_element);
 847		if (sg_count > SG_TABLESIZE) {
 848			printk(KERN_DEBUG "%s:IOCTL SG List too large (%u)\n",
 849			       c->name, sg_count);
 850			rcode = -EINVAL;
 851			goto cleanup;
 852		}
 853
 854		for (i = 0; i < sg_count; i++) {
 855			int sg_size;
 856
 857			if (!(sg[i].flag_count & 0x10000000
 858			      /*I2O_SGL_FLAGS_SIMPLE_ADDRESS_ELEMENT */ )) {
 859				printk(KERN_DEBUG
 860				       "%s:Bad SG element %d - not simple (%x)\n",
 861				       c->name, i, sg[i].flag_count);
 862				rcode = -EINVAL;
 863				goto sg_list_cleanup;
 864			}
 865			sg_size = sg[i].flag_count & 0xffffff;
 866			p = &(sg_list[sg_index]);
 867			if (i2o_dma_alloc(&c->pdev->dev, p, sg_size)) {
 868			/* Allocate memory for the transfer */
 869				printk(KERN_DEBUG
 870				       "%s: Could not allocate SG buffer - size = %d buffer number %d of %d\n",
 871				       c->name, sg_size, i, sg_count);
 872				rcode = -ENOMEM;
 873				goto sg_list_cleanup;
 874			}
 875			sg_index++;
 876			/* Copy in the user's SG buffer if necessary */
 877			if (sg[i].
 878			    flag_count & 0x04000000 /*I2O_SGL_FLAGS_DIR */ ) {
 879				// TODO 64bit fix
 880				if (copy_from_user
 881				    (p->virt, (void __user *)sg[i].addr_bus,
 882				     sg_size)) {
 883					printk(KERN_DEBUG
 884					       "%s: Could not copy SG buf %d FROM user\n",
 885					       c->name, i);
 886					rcode = -EFAULT;
 887					goto sg_list_cleanup;
 888				}
 889			}
 890			sg[i].addr_bus = p->phys;
 891		}
 892	}
 893
 894	rcode = i2o_msg_post_wait(c, msg, 60);
 895	msg = NULL;
 896	if (rcode) {
 897		reply[4] = ((u32) rcode) << 24;
 898		goto sg_list_cleanup;
 899	}
 900
 901	if (sg_offset) {
 902		u32 rmsg[I2O_OUTBOUND_MSG_FRAME_SIZE];
 903		/* Copy back the Scatter Gather buffers back to user space */
 904		u32 j;
 905		// TODO 64bit fix
 906		struct sg_simple_element *sg;
 907		int sg_size;
 908
 909		// re-acquire the original message to handle correctly the sg copy operation
 910		memset(&rmsg, 0, I2O_OUTBOUND_MSG_FRAME_SIZE * 4);
 911		// get user msg size in u32s
 912		if (get_user(size, &user_msg[0])) {
 913			rcode = -EFAULT;
 914			goto sg_list_cleanup;
 915		}
 916		size = size >> 16;
 917		size *= 4;
 918		/* Copy in the user's I2O command */
 919		if (copy_from_user(rmsg, user_msg, size)) {
 920			rcode = -EFAULT;
 921			goto sg_list_cleanup;
 922		}
 923		sg_count =
 924		    (size - sg_offset * 4) / sizeof(struct sg_simple_element);
 925
 926		// TODO 64bit fix
 927		sg = (struct sg_simple_element *)(rmsg + sg_offset);
 928		for (j = 0; j < sg_count; j++) {
 929			/* Copy out the SG list to user's buffer if necessary */
 930			if (!
 931			    (sg[j].
 932			     flag_count & 0x4000000 /*I2O_SGL_FLAGS_DIR */ )) {
 933				sg_size = sg[j].flag_count & 0xffffff;
 934				// TODO 64bit fix
 935				if (copy_to_user
 936				    ((void __user *)sg[j].addr_bus, sg_list[j].virt,
 937				     sg_size)) {
 938					printk(KERN_WARNING
 939					       "%s: Could not copy %p TO user %x\n",
 940					       c->name, sg_list[j].virt,
 941					       sg[j].addr_bus);
 942					rcode = -EFAULT;
 943					goto sg_list_cleanup;
 944				}
 945			}
 946		}
 947	}
 948
 949sg_list_cleanup:
 950	/* Copy back the reply to user space */
 951	if (reply_size) {
 952		// we wrote our own values for context - now restore the user supplied ones
 953		if (copy_from_user(reply + 2, user_msg + 2, sizeof(u32) * 2)) {
 954			printk(KERN_WARNING
 955			       "%s: Could not copy message context FROM user\n",
 956			       c->name);
 957			rcode = -EFAULT;
 958		}
 959		if (copy_to_user(user_reply, reply, reply_size)) {
 960			printk(KERN_WARNING
 961			       "%s: Could not copy reply TO user\n", c->name);
 962			rcode = -EFAULT;
 963		}
 964	}
 965
 966	for (i = 0; i < sg_index; i++)
 967		i2o_dma_free(&c->pdev->dev, &sg_list[i]);
 968
 969cleanup:
 970	kfree(reply);
 971out:
 972	if (msg)
 973		i2o_msg_nop(c, msg);
 974	return rcode;
 975}
 976#endif
 977
 978/*
 979 * IOCTL Handler
 980 */
 981static long i2o_cfg_ioctl(struct file *fp, unsigned int cmd, unsigned long arg)
 982{
 983	int ret;
 984
 985	mutex_lock(&i2o_cfg_mutex);
 986	switch (cmd) {
 987	case I2OGETIOPS:
 988		ret = i2o_cfg_getiops(arg);
 989		break;
 990
 991	case I2OHRTGET:
 992		ret = i2o_cfg_gethrt(arg);
 993		break;
 994
 995	case I2OLCTGET:
 996		ret = i2o_cfg_getlct(arg);
 997		break;
 998
 999	case I2OPARMSET:
1000		ret = i2o_cfg_parms(arg, I2OPARMSET);
1001		break;
1002
1003	case I2OPARMGET:
1004		ret = i2o_cfg_parms(arg, I2OPARMGET);
1005		break;
1006
1007	case I2OSWDL:
1008		ret = i2o_cfg_swdl(arg);
1009		break;
1010
1011	case I2OSWUL:
1012		ret = i2o_cfg_swul(arg);
1013		break;
1014
1015	case I2OSWDEL:
1016		ret = i2o_cfg_swdel(arg);
1017		break;
1018
1019	case I2OVALIDATE:
1020		ret = i2o_cfg_validate(arg);
1021		break;
1022
1023	case I2OEVTREG:
1024		ret = i2o_cfg_evt_reg(arg, fp);
1025		break;
1026
1027	case I2OEVTGET:
1028		ret = i2o_cfg_evt_get(arg, fp);
1029		break;
1030
1031#ifdef CONFIG_I2O_EXT_ADAPTEC
1032	case I2OPASSTHRU:
1033		ret = i2o_cfg_passthru(arg);
1034		break;
1035#endif
1036
1037	default:
1038		osm_debug("unknown ioctl called!\n");
1039		ret = -EINVAL;
1040	}
1041	mutex_unlock(&i2o_cfg_mutex);
1042	return ret;
1043}
1044
1045static int cfg_open(struct inode *inode, struct file *file)
1046{
1047	struct i2o_cfg_info *tmp = kmalloc(sizeof(struct i2o_cfg_info),
1048					   GFP_KERNEL);
1049	unsigned long flags;
1050
1051	if (!tmp)
1052		return -ENOMEM;
1053
1054	mutex_lock(&i2o_cfg_mutex);
1055	file->private_data = (void *)(i2o_cfg_info_id++);
1056	tmp->fp = file;
1057	tmp->fasync = NULL;
1058	tmp->q_id = (ulong) file->private_data;
1059	tmp->q_len = 0;
1060	tmp->q_in = 0;
1061	tmp->q_out = 0;
1062	tmp->q_lost = 0;
1063	tmp->next = open_files;
1064
1065	spin_lock_irqsave(&i2o_config_lock, flags);
1066	open_files = tmp;
1067	spin_unlock_irqrestore(&i2o_config_lock, flags);
1068	mutex_unlock(&i2o_cfg_mutex);
1069
1070	return 0;
1071}
1072
1073static int cfg_fasync(int fd, struct file *fp, int on)
1074{
1075	ulong id = (ulong) fp->private_data;
1076	struct i2o_cfg_info *p;
1077	int ret = -EBADF;
1078
1079	mutex_lock(&i2o_cfg_mutex);
1080	for (p = open_files; p; p = p->next)
1081		if (p->q_id == id)
1082			break;
1083
1084	if (p)
1085		ret = fasync_helper(fd, fp, on, &p->fasync);
1086	mutex_unlock(&i2o_cfg_mutex);
1087	return ret;
1088}
1089
1090static int cfg_release(struct inode *inode, struct file *file)
1091{
1092	ulong id = (ulong) file->private_data;
1093	struct i2o_cfg_info *p, **q;
1094	unsigned long flags;
1095
1096	mutex_lock(&i2o_cfg_mutex);
1097	spin_lock_irqsave(&i2o_config_lock, flags);
1098	for (q = &open_files; (p = *q) != NULL; q = &p->next) {
1099		if (p->q_id == id) {
1100			*q = p->next;
1101			kfree(p);
1102			break;
1103		}
1104	}
1105	spin_unlock_irqrestore(&i2o_config_lock, flags);
1106	mutex_unlock(&i2o_cfg_mutex);
1107
1108	return 0;
1109}
1110
1111static const struct file_operations config_fops = {
1112	.owner = THIS_MODULE,
1113	.llseek = no_llseek,
1114	.unlocked_ioctl = i2o_cfg_ioctl,
1115#ifdef CONFIG_COMPAT
1116	.compat_ioctl = i2o_cfg_compat_ioctl,
1117#endif
1118	.open = cfg_open,
1119	.release = cfg_release,
1120	.fasync = cfg_fasync,
1121};
1122
1123static struct miscdevice i2o_miscdev = {
1124	I2O_MINOR,
1125	"i2octl",
1126	&config_fops
1127};
1128
1129static int __init i2o_config_old_init(void)
1130{
1131	spin_lock_init(&i2o_config_lock);
1132
1133	if (misc_register(&i2o_miscdev) < 0) {
1134		osm_err("can't register device.\n");
1135		return -EBUSY;
1136	}
1137
1138	return 0;
1139}
1140
1141static void i2o_config_old_exit(void)
1142{
1143	misc_deregister(&i2o_miscdev);
1144}
1145
1146MODULE_AUTHOR("Red Hat Software");