Linux Audio

Check our new training course

Loading...
v6.13.7
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/*
  3    i2c-dev.c - i2c-bus driver, char device interface
  4
  5    Copyright (C) 1995-97 Simon G. Vogl
  6    Copyright (C) 1998-99 Frodo Looijaard <frodol@dds.nl>
  7    Copyright (C) 2003 Greg Kroah-Hartman <greg@kroah.com>
  8
 
 
 
 
 
 
 
 
 
  9*/
 10
 11/* Note that this is a complete rewrite of Simon Vogl's i2c-dev module.
 12   But I have used so much of his original code and ideas that it seems
 13   only fair to recognize him as co-author -- Frodo */
 14
 15/* The I2C_RDWR ioctl code is written by Kolja Waschk <waschk@telos.de> */
 16
 17#define pr_fmt(fmt)	KBUILD_MODNAME ": " fmt
 18
 19#include <linux/cdev.h>
 20#include <linux/compat.h>
 21#include <linux/device.h>
 22#include <linux/fs.h>
 23#include <linux/i2c-dev.h>
 24#include <linux/i2c.h>
 25#include <linux/init.h>
 26#include <linux/jiffies.h>
 27#include <linux/kernel.h>
 28#include <linux/list.h>
 29#include <linux/module.h>
 30#include <linux/notifier.h>
 31#include <linux/slab.h>
 32#include <linux/uaccess.h>
 
 33
 34/*
 35 * An i2c_dev represents an i2c_adapter ... an I2C or SMBus master, not a
 36 * slave (i2c_client) with which messages will be exchanged.  It's coupled
 37 * with a character special file which is accessed by user mode drivers.
 38 *
 39 * The list of i2c_dev structures is parallel to the i2c_adapter lists
 40 * maintained by the driver model, and is updated using bus notifications.
 41 */
 42struct i2c_dev {
 43	struct list_head list;
 44	struct i2c_adapter *adap;
 45	struct device dev;
 46	struct cdev cdev;
 47};
 48
 49#define I2C_MINORS	(MINORMASK + 1)
 50static LIST_HEAD(i2c_dev_list);
 51static DEFINE_SPINLOCK(i2c_dev_list_lock);
 52
 53static struct i2c_dev *i2c_dev_get_by_minor(unsigned index)
 54{
 55	struct i2c_dev *i2c_dev;
 56
 57	spin_lock(&i2c_dev_list_lock);
 58	list_for_each_entry(i2c_dev, &i2c_dev_list, list) {
 59		if (i2c_dev->adap->nr == index)
 60			goto found;
 61	}
 62	i2c_dev = NULL;
 63found:
 64	spin_unlock(&i2c_dev_list_lock);
 65	return i2c_dev;
 66}
 67
 68static struct i2c_dev *get_free_i2c_dev(struct i2c_adapter *adap)
 69{
 70	struct i2c_dev *i2c_dev;
 71
 72	if (adap->nr >= I2C_MINORS) {
 73		pr_err("Out of device minors (%d)\n", adap->nr);
 
 74		return ERR_PTR(-ENODEV);
 75	}
 76
 77	i2c_dev = kzalloc(sizeof(*i2c_dev), GFP_KERNEL);
 78	if (!i2c_dev)
 79		return ERR_PTR(-ENOMEM);
 80	i2c_dev->adap = adap;
 81
 82	spin_lock(&i2c_dev_list_lock);
 83	list_add_tail(&i2c_dev->list, &i2c_dev_list);
 84	spin_unlock(&i2c_dev_list_lock);
 85	return i2c_dev;
 86}
 87
 88static void put_i2c_dev(struct i2c_dev *i2c_dev, bool del_cdev)
 89{
 90	spin_lock(&i2c_dev_list_lock);
 91	list_del(&i2c_dev->list);
 92	spin_unlock(&i2c_dev_list_lock);
 93	if (del_cdev)
 94		cdev_device_del(&i2c_dev->cdev, &i2c_dev->dev);
 95	put_device(&i2c_dev->dev);
 96}
 97
 98static ssize_t name_show(struct device *dev,
 99			 struct device_attribute *attr, char *buf)
100{
101	struct i2c_dev *i2c_dev = i2c_dev_get_by_minor(MINOR(dev->devt));
102
103	if (!i2c_dev)
104		return -ENODEV;
105	return sysfs_emit(buf, "%s\n", i2c_dev->adap->name);
106}
107static DEVICE_ATTR_RO(name);
108
109static struct attribute *i2c_attrs[] = {
110	&dev_attr_name.attr,
111	NULL,
112};
113ATTRIBUTE_GROUPS(i2c);
114
115/* ------------------------------------------------------------------------- */
116
117/*
118 * After opening an instance of this character special file, a file
119 * descriptor starts out associated only with an i2c_adapter (and bus).
120 *
121 * Using the I2C_RDWR ioctl(), you can then *immediately* issue i2c_msg
122 * traffic to any devices on the bus used by that adapter.  That's because
123 * the i2c_msg vectors embed all the addressing information they need, and
124 * are submitted directly to an i2c_adapter.  However, SMBus-only adapters
125 * don't support that interface.
126 *
127 * To use read()/write() system calls on that file descriptor, or to use
128 * SMBus interfaces (and work with SMBus-only hosts!), you must first issue
129 * an I2C_SLAVE (or I2C_SLAVE_FORCE) ioctl.  That configures an anonymous
130 * (never registered) i2c_client so it holds the addressing information
131 * needed by those system calls and by this SMBus interface.
132 */
133
134static ssize_t i2cdev_read(struct file *file, char __user *buf, size_t count,
135		loff_t *offset)
136{
137	char *tmp;
138	int ret;
139
140	struct i2c_client *client = file->private_data;
141
142	/* Adapter must support I2C transfers */
143	if (!i2c_check_functionality(client->adapter, I2C_FUNC_I2C))
144		return -EOPNOTSUPP;
145
146	if (count > 8192)
147		count = 8192;
148
149	tmp = kzalloc(count, GFP_KERNEL);
150	if (tmp == NULL)
151		return -ENOMEM;
152
153	pr_debug("i2c-%d reading %zu bytes.\n", iminor(file_inode(file)), count);
 
154
155	ret = i2c_master_recv(client, tmp, count);
156	if (ret >= 0)
157		if (copy_to_user(buf, tmp, ret))
158			ret = -EFAULT;
159	kfree(tmp);
160	return ret;
161}
162
163static ssize_t i2cdev_write(struct file *file, const char __user *buf,
164		size_t count, loff_t *offset)
165{
166	int ret;
167	char *tmp;
168	struct i2c_client *client = file->private_data;
169
170	/* Adapter must support I2C transfers */
171	if (!i2c_check_functionality(client->adapter, I2C_FUNC_I2C))
172		return -EOPNOTSUPP;
173
174	if (count > 8192)
175		count = 8192;
176
177	tmp = memdup_user(buf, count);
178	if (IS_ERR(tmp))
179		return PTR_ERR(tmp);
180
181	pr_debug("i2c-%d writing %zu bytes.\n", iminor(file_inode(file)), count);
 
182
183	ret = i2c_master_send(client, tmp, count);
184	kfree(tmp);
185	return ret;
186}
187
188static int i2cdev_check(struct device *dev, void *addrp)
189{
190	struct i2c_client *client = i2c_verify_client(dev);
191
192	if (!client || client->addr != *(unsigned int *)addrp)
193		return 0;
194
195	return dev->driver ? -EBUSY : 0;
196}
197
198/* walk up mux tree */
199static int i2cdev_check_mux_parents(struct i2c_adapter *adapter, int addr)
200{
201	struct i2c_adapter *parent = i2c_parent_is_i2c_adapter(adapter);
202	int result;
203
204	result = device_for_each_child(&adapter->dev, &addr, i2cdev_check);
205	if (!result && parent)
206		result = i2cdev_check_mux_parents(parent, addr);
207
208	return result;
209}
210
211/* recurse down mux tree */
212static int i2cdev_check_mux_children(struct device *dev, void *addrp)
213{
214	int result;
215
216	if (dev->type == &i2c_adapter_type)
217		result = device_for_each_child(dev, addrp,
218						i2cdev_check_mux_children);
219	else
220		result = i2cdev_check(dev, addrp);
221
222	return result;
223}
224
225/* This address checking function differs from the one in i2c-core
226   in that it considers an address with a registered device, but no
227   driver bound to it, as NOT busy. */
228static int i2cdev_check_addr(struct i2c_adapter *adapter, unsigned int addr)
229{
230	struct i2c_adapter *parent = i2c_parent_is_i2c_adapter(adapter);
231	int result = 0;
232
233	if (parent)
234		result = i2cdev_check_mux_parents(parent, addr);
235
236	if (!result)
237		result = device_for_each_child(&adapter->dev, &addr,
238						i2cdev_check_mux_children);
239
240	return result;
241}
242
243static noinline int i2cdev_ioctl_rdwr(struct i2c_client *client,
244		unsigned nmsgs, struct i2c_msg *msgs)
245{
246	u8 __user **data_ptrs;
247	int i, res;
248
249	/* Adapter must support I2C transfers */
250	if (!i2c_check_functionality(client->adapter, I2C_FUNC_I2C))
251		return -EOPNOTSUPP;
252
253	data_ptrs = kmalloc_array(nmsgs, sizeof(u8 __user *), GFP_KERNEL);
254	if (!data_ptrs)
255		return -ENOMEM;
 
256
257	res = 0;
258	for (i = 0; i < nmsgs; i++) {
259		/* Limit the size of the message to a sane amount */
260		if (msgs[i].len > 8192) {
261			res = -EINVAL;
262			break;
263		}
264
265		data_ptrs[i] = (u8 __user *)msgs[i].buf;
266		msgs[i].buf = memdup_user(data_ptrs[i], msgs[i].len);
267		if (IS_ERR(msgs[i].buf)) {
268			res = PTR_ERR(msgs[i].buf);
269			break;
270		}
271		/* memdup_user allocates with GFP_KERNEL, so DMA is ok */
272		msgs[i].flags |= I2C_M_DMA_SAFE;
273
274		/*
275		 * If the message length is received from the slave (similar
276		 * to SMBus block read), we must ensure that the buffer will
277		 * be large enough to cope with a message length of
278		 * I2C_SMBUS_BLOCK_MAX as this is the maximum underlying bus
279		 * drivers allow. The first byte in the buffer must be
280		 * pre-filled with the number of extra bytes, which must be
281		 * at least one to hold the message length, but can be
282		 * greater (for example to account for a checksum byte at
283		 * the end of the message.)
284		 */
285		if (msgs[i].flags & I2C_M_RECV_LEN) {
286			if (!(msgs[i].flags & I2C_M_RD) ||
287			    msgs[i].len < 1 || msgs[i].buf[0] < 1 ||
288			    msgs[i].len < msgs[i].buf[0] +
289					     I2C_SMBUS_BLOCK_MAX) {
290				i++;
291				res = -EINVAL;
292				break;
293			}
294
295			msgs[i].len = msgs[i].buf[0];
296		}
297	}
298	if (res < 0) {
299		int j;
300		for (j = 0; j < i; ++j)
301			kfree(msgs[j].buf);
302		kfree(data_ptrs);
 
303		return res;
304	}
305
306	res = i2c_transfer(client->adapter, msgs, nmsgs);
307	while (i-- > 0) {
308		if (res >= 0 && (msgs[i].flags & I2C_M_RD)) {
309			if (copy_to_user(data_ptrs[i], msgs[i].buf,
310					 msgs[i].len))
311				res = -EFAULT;
312		}
313		kfree(msgs[i].buf);
314	}
315	kfree(data_ptrs);
 
316	return res;
317}
318
319static noinline int i2cdev_ioctl_smbus(struct i2c_client *client,
320		u8 read_write, u8 command, u32 size,
321		union i2c_smbus_data __user *data)
322{
323	union i2c_smbus_data temp = {};
324	int datasize, res;
325
326	if ((size != I2C_SMBUS_BYTE) &&
327	    (size != I2C_SMBUS_QUICK) &&
328	    (size != I2C_SMBUS_BYTE_DATA) &&
329	    (size != I2C_SMBUS_WORD_DATA) &&
330	    (size != I2C_SMBUS_PROC_CALL) &&
331	    (size != I2C_SMBUS_BLOCK_DATA) &&
332	    (size != I2C_SMBUS_I2C_BLOCK_BROKEN) &&
333	    (size != I2C_SMBUS_I2C_BLOCK_DATA) &&
334	    (size != I2C_SMBUS_BLOCK_PROC_CALL)) {
335		dev_dbg(&client->adapter->dev,
336			"size out of range (%x) in ioctl I2C_SMBUS.\n",
337			size);
338		return -EINVAL;
339	}
340	/* Note that I2C_SMBUS_READ and I2C_SMBUS_WRITE are 0 and 1,
341	   so the check is valid if size==I2C_SMBUS_QUICK too. */
342	if ((read_write != I2C_SMBUS_READ) &&
343	    (read_write != I2C_SMBUS_WRITE)) {
344		dev_dbg(&client->adapter->dev,
345			"read_write out of range (%x) in ioctl I2C_SMBUS.\n",
346			read_write);
347		return -EINVAL;
348	}
349
350	/* Note that command values are always valid! */
351
352	if ((size == I2C_SMBUS_QUICK) ||
353	    ((size == I2C_SMBUS_BYTE) &&
354	    (read_write == I2C_SMBUS_WRITE)))
355		/* These are special: we do not use data */
356		return i2c_smbus_xfer(client->adapter, client->addr,
357				      client->flags, read_write,
358				      command, size, NULL);
359
360	if (data == NULL) {
361		dev_dbg(&client->adapter->dev,
362			"data is NULL pointer in ioctl I2C_SMBUS.\n");
363		return -EINVAL;
364	}
365
366	if ((size == I2C_SMBUS_BYTE_DATA) ||
367	    (size == I2C_SMBUS_BYTE))
368		datasize = sizeof(data->byte);
369	else if ((size == I2C_SMBUS_WORD_DATA) ||
370		 (size == I2C_SMBUS_PROC_CALL))
371		datasize = sizeof(data->word);
372	else /* size == smbus block, i2c block, or block proc. call */
373		datasize = sizeof(data->block);
374
375	if ((size == I2C_SMBUS_PROC_CALL) ||
376	    (size == I2C_SMBUS_BLOCK_PROC_CALL) ||
377	    (size == I2C_SMBUS_I2C_BLOCK_DATA) ||
378	    (read_write == I2C_SMBUS_WRITE)) {
379		if (copy_from_user(&temp, data, datasize))
380			return -EFAULT;
381	}
382	if (size == I2C_SMBUS_I2C_BLOCK_BROKEN) {
383		/* Convert old I2C block commands to the new
384		   convention. This preserves binary compatibility. */
385		size = I2C_SMBUS_I2C_BLOCK_DATA;
386		if (read_write == I2C_SMBUS_READ)
387			temp.block[0] = I2C_SMBUS_BLOCK_MAX;
388	}
389	res = i2c_smbus_xfer(client->adapter, client->addr, client->flags,
390	      read_write, command, size, &temp);
391	if (!res && ((size == I2C_SMBUS_PROC_CALL) ||
392		     (size == I2C_SMBUS_BLOCK_PROC_CALL) ||
393		     (read_write == I2C_SMBUS_READ))) {
394		if (copy_to_user(data, &temp, datasize))
395			return -EFAULT;
396	}
397	return res;
398}
399
400static long i2cdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
401{
402	struct i2c_client *client = file->private_data;
403	unsigned long funcs;
404
405	dev_dbg(&client->adapter->dev, "ioctl, cmd=0x%02x, arg=0x%02lx\n",
406		cmd, arg);
407
408	switch (cmd) {
409	case I2C_SLAVE:
410	case I2C_SLAVE_FORCE:
411		if ((arg > 0x3ff) ||
412		    (((client->flags & I2C_M_TEN) == 0) && arg > 0x7f))
413			return -EINVAL;
414		if (cmd == I2C_SLAVE && i2cdev_check_addr(client->adapter, arg))
415			return -EBUSY;
416		/* REVISIT: address could become busy later */
417		client->addr = arg;
418		return 0;
419	case I2C_TENBIT:
420		if (arg)
421			client->flags |= I2C_M_TEN;
422		else
423			client->flags &= ~I2C_M_TEN;
424		return 0;
425	case I2C_PEC:
426		/*
427		 * Setting the PEC flag here won't affect kernel drivers,
428		 * which will be using the i2c_client node registered with
429		 * the driver model core.  Likewise, when that client has
430		 * the PEC flag already set, the i2c-dev driver won't see
431		 * (or use) this setting.
432		 */
433		if (arg)
434			client->flags |= I2C_CLIENT_PEC;
435		else
436			client->flags &= ~I2C_CLIENT_PEC;
437		return 0;
438	case I2C_FUNCS:
439		funcs = i2c_get_functionality(client->adapter);
440		return put_user(funcs, (unsigned long __user *)arg);
441
442	case I2C_RDWR: {
443		struct i2c_rdwr_ioctl_data rdwr_arg;
444		struct i2c_msg *rdwr_pa;
445		int res;
446
447		if (copy_from_user(&rdwr_arg,
448				   (struct i2c_rdwr_ioctl_data __user *)arg,
449				   sizeof(rdwr_arg)))
450			return -EFAULT;
451
452		if (!rdwr_arg.msgs || rdwr_arg.nmsgs == 0)
453			return -EINVAL;
454
455		/*
456		 * Put an arbitrary limit on the number of messages that can
457		 * be sent at once
458		 */
459		if (rdwr_arg.nmsgs > I2C_RDWR_IOCTL_MAX_MSGS)
460			return -EINVAL;
461
462		rdwr_pa = memdup_array_user(rdwr_arg.msgs,
463					    rdwr_arg.nmsgs, sizeof(struct i2c_msg));
464		if (IS_ERR(rdwr_pa))
465			return PTR_ERR(rdwr_pa);
466
467		res = i2cdev_ioctl_rdwr(client, rdwr_arg.nmsgs, rdwr_pa);
468		kfree(rdwr_pa);
469		return res;
470	}
471
472	case I2C_SMBUS: {
473		struct i2c_smbus_ioctl_data data_arg;
474		if (copy_from_user(&data_arg,
475				   (struct i2c_smbus_ioctl_data __user *) arg,
476				   sizeof(struct i2c_smbus_ioctl_data)))
477			return -EFAULT;
478		return i2cdev_ioctl_smbus(client, data_arg.read_write,
479					  data_arg.command,
480					  data_arg.size,
481					  data_arg.data);
482	}
483	case I2C_RETRIES:
484		if (arg > INT_MAX)
485			return -EINVAL;
486
487		client->adapter->retries = arg;
488		break;
489	case I2C_TIMEOUT:
490		if (arg > INT_MAX)
491			return -EINVAL;
492
493		/* For historical reasons, user-space sets the timeout
494		 * value in units of 10 ms.
495		 */
496		client->adapter->timeout = msecs_to_jiffies(arg * 10);
497		break;
498	default:
499		/* NOTE:  returning a fault code here could cause trouble
500		 * in buggy userspace code.  Some old kernel bugs returned
501		 * zero in this case, and userspace code might accidentally
502		 * have depended on that bug.
503		 */
504		return -ENOTTY;
505	}
506	return 0;
507}
508
509#ifdef CONFIG_COMPAT
510
511struct i2c_smbus_ioctl_data32 {
512	u8 read_write;
513	u8 command;
514	u32 size;
515	compat_caddr_t data; /* union i2c_smbus_data *data */
516};
517
518struct i2c_msg32 {
519	u16 addr;
520	u16 flags;
521	u16 len;
522	compat_caddr_t buf;
523};
524
525struct i2c_rdwr_ioctl_data32 {
526	compat_caddr_t msgs; /* struct i2c_msg __user *msgs */
527	u32 nmsgs;
528};
529
530static long compat_i2cdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
531{
532	struct i2c_client *client = file->private_data;
533	unsigned long funcs;
534	switch (cmd) {
535	case I2C_FUNCS:
536		funcs = i2c_get_functionality(client->adapter);
537		return put_user(funcs, (compat_ulong_t __user *)arg);
538	case I2C_RDWR: {
539		struct i2c_rdwr_ioctl_data32 rdwr_arg;
540		struct i2c_msg32 __user *p;
541		struct i2c_msg *rdwr_pa;
542		int i, res;
543
544		if (copy_from_user(&rdwr_arg,
545				   (struct i2c_rdwr_ioctl_data32 __user *)arg,
546				   sizeof(rdwr_arg)))
547			return -EFAULT;
548
549		if (!rdwr_arg.msgs || rdwr_arg.nmsgs == 0)
550			return -EINVAL;
551
552		if (rdwr_arg.nmsgs > I2C_RDWR_IOCTL_MAX_MSGS)
553			return -EINVAL;
554
555		rdwr_pa = kmalloc_array(rdwr_arg.nmsgs, sizeof(struct i2c_msg),
556				      GFP_KERNEL);
557		if (!rdwr_pa)
558			return -ENOMEM;
559
560		p = compat_ptr(rdwr_arg.msgs);
561		for (i = 0; i < rdwr_arg.nmsgs; i++) {
562			struct i2c_msg32 umsg;
563			if (copy_from_user(&umsg, p + i, sizeof(umsg))) {
564				kfree(rdwr_pa);
565				return -EFAULT;
566			}
567			rdwr_pa[i] = (struct i2c_msg) {
568				.addr = umsg.addr,
569				.flags = umsg.flags,
570				.len = umsg.len,
571				.buf = (__force __u8 *)compat_ptr(umsg.buf),
572			};
573		}
574
575		res = i2cdev_ioctl_rdwr(client, rdwr_arg.nmsgs, rdwr_pa);
576		kfree(rdwr_pa);
577		return res;
578	}
579	case I2C_SMBUS: {
580		struct i2c_smbus_ioctl_data32	data32;
581		if (copy_from_user(&data32,
582				   (void __user *) arg,
583				   sizeof(data32)))
584			return -EFAULT;
585		return i2cdev_ioctl_smbus(client, data32.read_write,
586					  data32.command,
587					  data32.size,
588					  compat_ptr(data32.data));
589	}
590	default:
591		return i2cdev_ioctl(file, cmd, arg);
592	}
593}
594#else
595#define compat_i2cdev_ioctl NULL
596#endif
597
598static int i2cdev_open(struct inode *inode, struct file *file)
599{
600	unsigned int minor = iminor(inode);
601	struct i2c_client *client;
602	struct i2c_adapter *adap;
603
604	adap = i2c_get_adapter(minor);
605	if (!adap)
606		return -ENODEV;
607
608	/* This creates an anonymous i2c_client, which may later be
609	 * pointed to some address using I2C_SLAVE or I2C_SLAVE_FORCE.
610	 *
611	 * This client is ** NEVER REGISTERED ** with the driver model
612	 * or I2C core code!!  It just holds private copies of addressing
613	 * information and maybe a PEC flag.
614	 */
615	client = kzalloc(sizeof(*client), GFP_KERNEL);
616	if (!client) {
617		i2c_put_adapter(adap);
618		return -ENOMEM;
619	}
620	snprintf(client->name, I2C_NAME_SIZE, "i2c-dev %d", adap->nr);
621
622	client->adapter = adap;
623	file->private_data = client;
624
625	return 0;
626}
627
628static int i2cdev_release(struct inode *inode, struct file *file)
629{
630	struct i2c_client *client = file->private_data;
631
632	i2c_put_adapter(client->adapter);
633	kfree(client);
634	file->private_data = NULL;
635
636	return 0;
637}
638
639static const struct file_operations i2cdev_fops = {
640	.owner		= THIS_MODULE,
 
641	.read		= i2cdev_read,
642	.write		= i2cdev_write,
643	.unlocked_ioctl	= i2cdev_ioctl,
644	.compat_ioctl	= compat_i2cdev_ioctl,
645	.open		= i2cdev_open,
646	.release	= i2cdev_release,
647};
648
649/* ------------------------------------------------------------------------- */
650
651static const struct class i2c_dev_class = {
652	.name = "i2c-dev",
653	.dev_groups = i2c_groups,
654};
655
656static void i2cdev_dev_release(struct device *dev)
657{
658	struct i2c_dev *i2c_dev;
659
660	i2c_dev = container_of(dev, struct i2c_dev, dev);
661	kfree(i2c_dev);
662}
663
664static int i2cdev_attach_adapter(struct device *dev)
665{
666	struct i2c_adapter *adap;
667	struct i2c_dev *i2c_dev;
668	int res;
669
670	if (dev->type != &i2c_adapter_type)
671		return NOTIFY_DONE;
672	adap = to_i2c_adapter(dev);
673
674	i2c_dev = get_free_i2c_dev(adap);
675	if (IS_ERR(i2c_dev))
676		return NOTIFY_DONE;
677
678	cdev_init(&i2c_dev->cdev, &i2cdev_fops);
679	i2c_dev->cdev.owner = THIS_MODULE;
680
681	device_initialize(&i2c_dev->dev);
682	i2c_dev->dev.devt = MKDEV(I2C_MAJOR, adap->nr);
683	i2c_dev->dev.class = &i2c_dev_class;
684	i2c_dev->dev.parent = &adap->dev;
685	i2c_dev->dev.release = i2cdev_dev_release;
686
687	res = dev_set_name(&i2c_dev->dev, "i2c-%d", adap->nr);
688	if (res)
689		goto err_put_i2c_dev;
690
691	res = cdev_device_add(&i2c_dev->cdev, &i2c_dev->dev);
692	if (res)
693		goto err_put_i2c_dev;
694
695	pr_debug("adapter [%s] registered as minor %d\n", adap->name, adap->nr);
696	return NOTIFY_OK;
 
 
 
 
 
 
697
698err_put_i2c_dev:
699	put_i2c_dev(i2c_dev, false);
700	return NOTIFY_DONE;
 
 
 
 
 
701}
702
703static int i2cdev_detach_adapter(struct device *dev)
704{
705	struct i2c_adapter *adap;
706	struct i2c_dev *i2c_dev;
707
708	if (dev->type != &i2c_adapter_type)
709		return NOTIFY_DONE;
710	adap = to_i2c_adapter(dev);
711
712	i2c_dev = i2c_dev_get_by_minor(adap->nr);
713	if (!i2c_dev) /* attach_adapter must have failed */
714		return NOTIFY_DONE;
715
716	put_i2c_dev(i2c_dev, true);
 
 
717
718	pr_debug("adapter [%s] unregistered\n", adap->name);
719	return NOTIFY_OK;
720}
721
722static int i2cdev_notifier_call(struct notifier_block *nb, unsigned long action,
723			 void *data)
724{
725	struct device *dev = data;
726
727	switch (action) {
728	case BUS_NOTIFY_ADD_DEVICE:
729		return i2cdev_attach_adapter(dev);
730	case BUS_NOTIFY_DEL_DEVICE:
731		return i2cdev_detach_adapter(dev);
732	}
733
734	return NOTIFY_DONE;
735}
736
737static struct notifier_block i2cdev_notifier = {
738	.notifier_call = i2cdev_notifier_call,
739};
740
741/* ------------------------------------------------------------------------- */
742
743static int __init i2c_dev_attach_adapter(struct device *dev, void *dummy)
744{
745	i2cdev_attach_adapter(dev);
746	return 0;
747}
748
749static int __exit i2c_dev_detach_adapter(struct device *dev, void *dummy)
750{
751	i2cdev_detach_adapter(dev);
752	return 0;
753}
754
755/*
756 * module load/unload record keeping
757 */
758
759static int __init i2c_dev_init(void)
760{
761	int res;
762
763	pr_info("i2c /dev entries driver\n");
764
765	res = register_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS, "i2c");
766	if (res)
767		goto out;
768
769	res = class_register(&i2c_dev_class);
770	if (res)
 
771		goto out_unreg_chrdev;
 
 
772
773	/* Keep track of adapters which will be added or removed later */
774	res = bus_register_notifier(&i2c_bus_type, &i2cdev_notifier);
775	if (res)
776		goto out_unreg_class;
777
778	/* Bind to already existing adapters right away */
779	i2c_for_each_dev(NULL, i2c_dev_attach_adapter);
780
781	return 0;
782
783out_unreg_class:
784	class_unregister(&i2c_dev_class);
785out_unreg_chrdev:
786	unregister_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS);
787out:
788	pr_err("Driver Initialisation failed\n");
789	return res;
790}
791
792static void __exit i2c_dev_exit(void)
793{
794	bus_unregister_notifier(&i2c_bus_type, &i2cdev_notifier);
795	i2c_for_each_dev(NULL, i2c_dev_detach_adapter);
796	class_unregister(&i2c_dev_class);
797	unregister_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS);
798}
799
800MODULE_AUTHOR("Frodo Looijaard <frodol@dds.nl>");
801MODULE_AUTHOR("Simon G. Vogl <simon@tk.uni-linz.ac.at>");
802MODULE_DESCRIPTION("I2C /dev entries driver");
803MODULE_LICENSE("GPL");
804
805module_init(i2c_dev_init);
806module_exit(i2c_dev_exit);
v4.17
 
  1/*
  2    i2c-dev.c - i2c-bus driver, char device interface
  3
  4    Copyright (C) 1995-97 Simon G. Vogl
  5    Copyright (C) 1998-99 Frodo Looijaard <frodol@dds.nl>
  6    Copyright (C) 2003 Greg Kroah-Hartman <greg@kroah.com>
  7
  8    This program is free software; you can redistribute it and/or modify
  9    it under the terms of the GNU General Public License as published by
 10    the Free Software Foundation; either version 2 of the License, or
 11    (at your option) any later version.
 12
 13    This program is distributed in the hope that it will be useful,
 14    but WITHOUT ANY WARRANTY; without even the implied warranty of
 15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 16    GNU General Public License for more details.
 17*/
 18
 19/* Note that this is a complete rewrite of Simon Vogl's i2c-dev module.
 20   But I have used so much of his original code and ideas that it seems
 21   only fair to recognize him as co-author -- Frodo */
 22
 23/* The I2C_RDWR ioctl code is written by Kolja Waschk <waschk@telos.de> */
 24
 
 
 25#include <linux/cdev.h>
 
 26#include <linux/device.h>
 27#include <linux/fs.h>
 28#include <linux/i2c-dev.h>
 29#include <linux/i2c.h>
 30#include <linux/init.h>
 31#include <linux/jiffies.h>
 32#include <linux/kernel.h>
 33#include <linux/list.h>
 34#include <linux/module.h>
 35#include <linux/notifier.h>
 36#include <linux/slab.h>
 37#include <linux/uaccess.h>
 38#include <linux/compat.h>
 39
 40/*
 41 * An i2c_dev represents an i2c_adapter ... an I2C or SMBus master, not a
 42 * slave (i2c_client) with which messages will be exchanged.  It's coupled
 43 * with a character special file which is accessed by user mode drivers.
 44 *
 45 * The list of i2c_dev structures is parallel to the i2c_adapter lists
 46 * maintained by the driver model, and is updated using bus notifications.
 47 */
 48struct i2c_dev {
 49	struct list_head list;
 50	struct i2c_adapter *adap;
 51	struct device *dev;
 52	struct cdev cdev;
 53};
 54
 55#define I2C_MINORS	MINORMASK
 56static LIST_HEAD(i2c_dev_list);
 57static DEFINE_SPINLOCK(i2c_dev_list_lock);
 58
 59static struct i2c_dev *i2c_dev_get_by_minor(unsigned index)
 60{
 61	struct i2c_dev *i2c_dev;
 62
 63	spin_lock(&i2c_dev_list_lock);
 64	list_for_each_entry(i2c_dev, &i2c_dev_list, list) {
 65		if (i2c_dev->adap->nr == index)
 66			goto found;
 67	}
 68	i2c_dev = NULL;
 69found:
 70	spin_unlock(&i2c_dev_list_lock);
 71	return i2c_dev;
 72}
 73
 74static struct i2c_dev *get_free_i2c_dev(struct i2c_adapter *adap)
 75{
 76	struct i2c_dev *i2c_dev;
 77
 78	if (adap->nr >= I2C_MINORS) {
 79		printk(KERN_ERR "i2c-dev: Out of device minors (%d)\n",
 80		       adap->nr);
 81		return ERR_PTR(-ENODEV);
 82	}
 83
 84	i2c_dev = kzalloc(sizeof(*i2c_dev), GFP_KERNEL);
 85	if (!i2c_dev)
 86		return ERR_PTR(-ENOMEM);
 87	i2c_dev->adap = adap;
 88
 89	spin_lock(&i2c_dev_list_lock);
 90	list_add_tail(&i2c_dev->list, &i2c_dev_list);
 91	spin_unlock(&i2c_dev_list_lock);
 92	return i2c_dev;
 93}
 94
 95static void put_i2c_dev(struct i2c_dev *i2c_dev)
 96{
 97	spin_lock(&i2c_dev_list_lock);
 98	list_del(&i2c_dev->list);
 99	spin_unlock(&i2c_dev_list_lock);
100	kfree(i2c_dev);
 
 
101}
102
103static ssize_t name_show(struct device *dev,
104			 struct device_attribute *attr, char *buf)
105{
106	struct i2c_dev *i2c_dev = i2c_dev_get_by_minor(MINOR(dev->devt));
107
108	if (!i2c_dev)
109		return -ENODEV;
110	return sprintf(buf, "%s\n", i2c_dev->adap->name);
111}
112static DEVICE_ATTR_RO(name);
113
114static struct attribute *i2c_attrs[] = {
115	&dev_attr_name.attr,
116	NULL,
117};
118ATTRIBUTE_GROUPS(i2c);
119
120/* ------------------------------------------------------------------------- */
121
122/*
123 * After opening an instance of this character special file, a file
124 * descriptor starts out associated only with an i2c_adapter (and bus).
125 *
126 * Using the I2C_RDWR ioctl(), you can then *immediately* issue i2c_msg
127 * traffic to any devices on the bus used by that adapter.  That's because
128 * the i2c_msg vectors embed all the addressing information they need, and
129 * are submitted directly to an i2c_adapter.  However, SMBus-only adapters
130 * don't support that interface.
131 *
132 * To use read()/write() system calls on that file descriptor, or to use
133 * SMBus interfaces (and work with SMBus-only hosts!), you must first issue
134 * an I2C_SLAVE (or I2C_SLAVE_FORCE) ioctl.  That configures an anonymous
135 * (never registered) i2c_client so it holds the addressing information
136 * needed by those system calls and by this SMBus interface.
137 */
138
139static ssize_t i2cdev_read(struct file *file, char __user *buf, size_t count,
140		loff_t *offset)
141{
142	char *tmp;
143	int ret;
144
145	struct i2c_client *client = file->private_data;
146
 
 
 
 
147	if (count > 8192)
148		count = 8192;
149
150	tmp = kmalloc(count, GFP_KERNEL);
151	if (tmp == NULL)
152		return -ENOMEM;
153
154	pr_debug("i2c-dev: i2c-%d reading %zu bytes.\n",
155		iminor(file_inode(file)), count);
156
157	ret = i2c_master_recv(client, tmp, count);
158	if (ret >= 0)
159		ret = copy_to_user(buf, tmp, count) ? -EFAULT : ret;
 
160	kfree(tmp);
161	return ret;
162}
163
164static ssize_t i2cdev_write(struct file *file, const char __user *buf,
165		size_t count, loff_t *offset)
166{
167	int ret;
168	char *tmp;
169	struct i2c_client *client = file->private_data;
170
 
 
 
 
171	if (count > 8192)
172		count = 8192;
173
174	tmp = memdup_user(buf, count);
175	if (IS_ERR(tmp))
176		return PTR_ERR(tmp);
177
178	pr_debug("i2c-dev: i2c-%d writing %zu bytes.\n",
179		iminor(file_inode(file)), count);
180
181	ret = i2c_master_send(client, tmp, count);
182	kfree(tmp);
183	return ret;
184}
185
186static int i2cdev_check(struct device *dev, void *addrp)
187{
188	struct i2c_client *client = i2c_verify_client(dev);
189
190	if (!client || client->addr != *(unsigned int *)addrp)
191		return 0;
192
193	return dev->driver ? -EBUSY : 0;
194}
195
196/* walk up mux tree */
197static int i2cdev_check_mux_parents(struct i2c_adapter *adapter, int addr)
198{
199	struct i2c_adapter *parent = i2c_parent_is_i2c_adapter(adapter);
200	int result;
201
202	result = device_for_each_child(&adapter->dev, &addr, i2cdev_check);
203	if (!result && parent)
204		result = i2cdev_check_mux_parents(parent, addr);
205
206	return result;
207}
208
209/* recurse down mux tree */
210static int i2cdev_check_mux_children(struct device *dev, void *addrp)
211{
212	int result;
213
214	if (dev->type == &i2c_adapter_type)
215		result = device_for_each_child(dev, addrp,
216						i2cdev_check_mux_children);
217	else
218		result = i2cdev_check(dev, addrp);
219
220	return result;
221}
222
223/* This address checking function differs from the one in i2c-core
224   in that it considers an address with a registered device, but no
225   driver bound to it, as NOT busy. */
226static int i2cdev_check_addr(struct i2c_adapter *adapter, unsigned int addr)
227{
228	struct i2c_adapter *parent = i2c_parent_is_i2c_adapter(adapter);
229	int result = 0;
230
231	if (parent)
232		result = i2cdev_check_mux_parents(parent, addr);
233
234	if (!result)
235		result = device_for_each_child(&adapter->dev, &addr,
236						i2cdev_check_mux_children);
237
238	return result;
239}
240
241static noinline int i2cdev_ioctl_rdwr(struct i2c_client *client,
242		unsigned nmsgs, struct i2c_msg *msgs)
243{
244	u8 __user **data_ptrs;
245	int i, res;
246
247	data_ptrs = kmalloc(nmsgs * sizeof(u8 __user *), GFP_KERNEL);
248	if (data_ptrs == NULL) {
249		kfree(msgs);
 
 
 
250		return -ENOMEM;
251	}
252
253	res = 0;
254	for (i = 0; i < nmsgs; i++) {
255		/* Limit the size of the message to a sane amount */
256		if (msgs[i].len > 8192) {
257			res = -EINVAL;
258			break;
259		}
260
261		data_ptrs[i] = (u8 __user *)msgs[i].buf;
262		msgs[i].buf = memdup_user(data_ptrs[i], msgs[i].len);
263		if (IS_ERR(msgs[i].buf)) {
264			res = PTR_ERR(msgs[i].buf);
265			break;
266		}
267		/* memdup_user allocates with GFP_KERNEL, so DMA is ok */
268		msgs[i].flags |= I2C_M_DMA_SAFE;
269
270		/*
271		 * If the message length is received from the slave (similar
272		 * to SMBus block read), we must ensure that the buffer will
273		 * be large enough to cope with a message length of
274		 * I2C_SMBUS_BLOCK_MAX as this is the maximum underlying bus
275		 * drivers allow. The first byte in the buffer must be
276		 * pre-filled with the number of extra bytes, which must be
277		 * at least one to hold the message length, but can be
278		 * greater (for example to account for a checksum byte at
279		 * the end of the message.)
280		 */
281		if (msgs[i].flags & I2C_M_RECV_LEN) {
282			if (!(msgs[i].flags & I2C_M_RD) ||
283			    msgs[i].len < 1 || msgs[i].buf[0] < 1 ||
284			    msgs[i].len < msgs[i].buf[0] +
285					     I2C_SMBUS_BLOCK_MAX) {
 
286				res = -EINVAL;
287				break;
288			}
289
290			msgs[i].len = msgs[i].buf[0];
291		}
292	}
293	if (res < 0) {
294		int j;
295		for (j = 0; j < i; ++j)
296			kfree(msgs[j].buf);
297		kfree(data_ptrs);
298		kfree(msgs);
299		return res;
300	}
301
302	res = i2c_transfer(client->adapter, msgs, nmsgs);
303	while (i-- > 0) {
304		if (res >= 0 && (msgs[i].flags & I2C_M_RD)) {
305			if (copy_to_user(data_ptrs[i], msgs[i].buf,
306					 msgs[i].len))
307				res = -EFAULT;
308		}
309		kfree(msgs[i].buf);
310	}
311	kfree(data_ptrs);
312	kfree(msgs);
313	return res;
314}
315
316static noinline int i2cdev_ioctl_smbus(struct i2c_client *client,
317		u8 read_write, u8 command, u32 size,
318		union i2c_smbus_data __user *data)
319{
320	union i2c_smbus_data temp = {};
321	int datasize, res;
322
323	if ((size != I2C_SMBUS_BYTE) &&
324	    (size != I2C_SMBUS_QUICK) &&
325	    (size != I2C_SMBUS_BYTE_DATA) &&
326	    (size != I2C_SMBUS_WORD_DATA) &&
327	    (size != I2C_SMBUS_PROC_CALL) &&
328	    (size != I2C_SMBUS_BLOCK_DATA) &&
329	    (size != I2C_SMBUS_I2C_BLOCK_BROKEN) &&
330	    (size != I2C_SMBUS_I2C_BLOCK_DATA) &&
331	    (size != I2C_SMBUS_BLOCK_PROC_CALL)) {
332		dev_dbg(&client->adapter->dev,
333			"size out of range (%x) in ioctl I2C_SMBUS.\n",
334			size);
335		return -EINVAL;
336	}
337	/* Note that I2C_SMBUS_READ and I2C_SMBUS_WRITE are 0 and 1,
338	   so the check is valid if size==I2C_SMBUS_QUICK too. */
339	if ((read_write != I2C_SMBUS_READ) &&
340	    (read_write != I2C_SMBUS_WRITE)) {
341		dev_dbg(&client->adapter->dev,
342			"read_write out of range (%x) in ioctl I2C_SMBUS.\n",
343			read_write);
344		return -EINVAL;
345	}
346
347	/* Note that command values are always valid! */
348
349	if ((size == I2C_SMBUS_QUICK) ||
350	    ((size == I2C_SMBUS_BYTE) &&
351	    (read_write == I2C_SMBUS_WRITE)))
352		/* These are special: we do not use data */
353		return i2c_smbus_xfer(client->adapter, client->addr,
354				      client->flags, read_write,
355				      command, size, NULL);
356
357	if (data == NULL) {
358		dev_dbg(&client->adapter->dev,
359			"data is NULL pointer in ioctl I2C_SMBUS.\n");
360		return -EINVAL;
361	}
362
363	if ((size == I2C_SMBUS_BYTE_DATA) ||
364	    (size == I2C_SMBUS_BYTE))
365		datasize = sizeof(data->byte);
366	else if ((size == I2C_SMBUS_WORD_DATA) ||
367		 (size == I2C_SMBUS_PROC_CALL))
368		datasize = sizeof(data->word);
369	else /* size == smbus block, i2c block, or block proc. call */
370		datasize = sizeof(data->block);
371
372	if ((size == I2C_SMBUS_PROC_CALL) ||
373	    (size == I2C_SMBUS_BLOCK_PROC_CALL) ||
374	    (size == I2C_SMBUS_I2C_BLOCK_DATA) ||
375	    (read_write == I2C_SMBUS_WRITE)) {
376		if (copy_from_user(&temp, data, datasize))
377			return -EFAULT;
378	}
379	if (size == I2C_SMBUS_I2C_BLOCK_BROKEN) {
380		/* Convert old I2C block commands to the new
381		   convention. This preserves binary compatibility. */
382		size = I2C_SMBUS_I2C_BLOCK_DATA;
383		if (read_write == I2C_SMBUS_READ)
384			temp.block[0] = I2C_SMBUS_BLOCK_MAX;
385	}
386	res = i2c_smbus_xfer(client->adapter, client->addr, client->flags,
387	      read_write, command, size, &temp);
388	if (!res && ((size == I2C_SMBUS_PROC_CALL) ||
389		     (size == I2C_SMBUS_BLOCK_PROC_CALL) ||
390		     (read_write == I2C_SMBUS_READ))) {
391		if (copy_to_user(data, &temp, datasize))
392			return -EFAULT;
393	}
394	return res;
395}
396
397static long i2cdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
398{
399	struct i2c_client *client = file->private_data;
400	unsigned long funcs;
401
402	dev_dbg(&client->adapter->dev, "ioctl, cmd=0x%02x, arg=0x%02lx\n",
403		cmd, arg);
404
405	switch (cmd) {
406	case I2C_SLAVE:
407	case I2C_SLAVE_FORCE:
408		if ((arg > 0x3ff) ||
409		    (((client->flags & I2C_M_TEN) == 0) && arg > 0x7f))
410			return -EINVAL;
411		if (cmd == I2C_SLAVE && i2cdev_check_addr(client->adapter, arg))
412			return -EBUSY;
413		/* REVISIT: address could become busy later */
414		client->addr = arg;
415		return 0;
416	case I2C_TENBIT:
417		if (arg)
418			client->flags |= I2C_M_TEN;
419		else
420			client->flags &= ~I2C_M_TEN;
421		return 0;
422	case I2C_PEC:
423		/*
424		 * Setting the PEC flag here won't affect kernel drivers,
425		 * which will be using the i2c_client node registered with
426		 * the driver model core.  Likewise, when that client has
427		 * the PEC flag already set, the i2c-dev driver won't see
428		 * (or use) this setting.
429		 */
430		if (arg)
431			client->flags |= I2C_CLIENT_PEC;
432		else
433			client->flags &= ~I2C_CLIENT_PEC;
434		return 0;
435	case I2C_FUNCS:
436		funcs = i2c_get_functionality(client->adapter);
437		return put_user(funcs, (unsigned long __user *)arg);
438
439	case I2C_RDWR: {
440		struct i2c_rdwr_ioctl_data rdwr_arg;
441		struct i2c_msg *rdwr_pa;
 
442
443		if (copy_from_user(&rdwr_arg,
444				   (struct i2c_rdwr_ioctl_data __user *)arg,
445				   sizeof(rdwr_arg)))
446			return -EFAULT;
447
448		/* Put an arbitrary limit on the number of messages that can
449		 * be sent at once */
 
 
 
 
 
450		if (rdwr_arg.nmsgs > I2C_RDWR_IOCTL_MAX_MSGS)
451			return -EINVAL;
452
453		rdwr_pa = memdup_user(rdwr_arg.msgs,
454				      rdwr_arg.nmsgs * sizeof(struct i2c_msg));
455		if (IS_ERR(rdwr_pa))
456			return PTR_ERR(rdwr_pa);
457
458		return i2cdev_ioctl_rdwr(client, rdwr_arg.nmsgs, rdwr_pa);
 
 
459	}
460
461	case I2C_SMBUS: {
462		struct i2c_smbus_ioctl_data data_arg;
463		if (copy_from_user(&data_arg,
464				   (struct i2c_smbus_ioctl_data __user *) arg,
465				   sizeof(struct i2c_smbus_ioctl_data)))
466			return -EFAULT;
467		return i2cdev_ioctl_smbus(client, data_arg.read_write,
468					  data_arg.command,
469					  data_arg.size,
470					  data_arg.data);
471	}
472	case I2C_RETRIES:
 
 
 
473		client->adapter->retries = arg;
474		break;
475	case I2C_TIMEOUT:
 
 
 
476		/* For historical reasons, user-space sets the timeout
477		 * value in units of 10 ms.
478		 */
479		client->adapter->timeout = msecs_to_jiffies(arg * 10);
480		break;
481	default:
482		/* NOTE:  returning a fault code here could cause trouble
483		 * in buggy userspace code.  Some old kernel bugs returned
484		 * zero in this case, and userspace code might accidentally
485		 * have depended on that bug.
486		 */
487		return -ENOTTY;
488	}
489	return 0;
490}
491
492#ifdef CONFIG_COMPAT
493
494struct i2c_smbus_ioctl_data32 {
495	u8 read_write;
496	u8 command;
497	u32 size;
498	compat_caddr_t data; /* union i2c_smbus_data *data */
499};
500
501struct i2c_msg32 {
502	u16 addr;
503	u16 flags;
504	u16 len;
505	compat_caddr_t buf;
506};
507
508struct i2c_rdwr_ioctl_data32 {
509	compat_caddr_t msgs; /* struct i2c_msg __user *msgs */
510	u32 nmsgs;
511};
512
513static long compat_i2cdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
514{
515	struct i2c_client *client = file->private_data;
516	unsigned long funcs;
517	switch (cmd) {
518	case I2C_FUNCS:
519		funcs = i2c_get_functionality(client->adapter);
520		return put_user(funcs, (compat_ulong_t __user *)arg);
521	case I2C_RDWR: {
522		struct i2c_rdwr_ioctl_data32 rdwr_arg;
523		struct i2c_msg32 *p;
524		struct i2c_msg *rdwr_pa;
525		int i;
526
527		if (copy_from_user(&rdwr_arg,
528				   (struct i2c_rdwr_ioctl_data32 __user *)arg,
529				   sizeof(rdwr_arg)))
530			return -EFAULT;
531
 
 
 
532		if (rdwr_arg.nmsgs > I2C_RDWR_IOCTL_MAX_MSGS)
533			return -EINVAL;
534
535		rdwr_pa = kmalloc_array(rdwr_arg.nmsgs, sizeof(struct i2c_msg),
536				      GFP_KERNEL);
537		if (!rdwr_pa)
538			return -ENOMEM;
539
540		p = compat_ptr(rdwr_arg.msgs);
541		for (i = 0; i < rdwr_arg.nmsgs; i++) {
542			struct i2c_msg32 umsg;
543			if (copy_from_user(&umsg, p + i, sizeof(umsg))) {
544				kfree(rdwr_pa);
545				return -EFAULT;
546			}
547			rdwr_pa[i] = (struct i2c_msg) {
548				.addr = umsg.addr,
549				.flags = umsg.flags,
550				.len = umsg.len,
551				.buf = compat_ptr(umsg.buf)
552			};
553		}
554
555		return i2cdev_ioctl_rdwr(client, rdwr_arg.nmsgs, rdwr_pa);
 
 
556	}
557	case I2C_SMBUS: {
558		struct i2c_smbus_ioctl_data32	data32;
559		if (copy_from_user(&data32,
560				   (void __user *) arg,
561				   sizeof(data32)))
562			return -EFAULT;
563		return i2cdev_ioctl_smbus(client, data32.read_write,
564					  data32.command,
565					  data32.size,
566					  compat_ptr(data32.data));
567	}
568	default:
569		return i2cdev_ioctl(file, cmd, arg);
570	}
571}
572#else
573#define compat_i2cdev_ioctl NULL
574#endif
575
576static int i2cdev_open(struct inode *inode, struct file *file)
577{
578	unsigned int minor = iminor(inode);
579	struct i2c_client *client;
580	struct i2c_adapter *adap;
581
582	adap = i2c_get_adapter(minor);
583	if (!adap)
584		return -ENODEV;
585
586	/* This creates an anonymous i2c_client, which may later be
587	 * pointed to some address using I2C_SLAVE or I2C_SLAVE_FORCE.
588	 *
589	 * This client is ** NEVER REGISTERED ** with the driver model
590	 * or I2C core code!!  It just holds private copies of addressing
591	 * information and maybe a PEC flag.
592	 */
593	client = kzalloc(sizeof(*client), GFP_KERNEL);
594	if (!client) {
595		i2c_put_adapter(adap);
596		return -ENOMEM;
597	}
598	snprintf(client->name, I2C_NAME_SIZE, "i2c-dev %d", adap->nr);
599
600	client->adapter = adap;
601	file->private_data = client;
602
603	return 0;
604}
605
606static int i2cdev_release(struct inode *inode, struct file *file)
607{
608	struct i2c_client *client = file->private_data;
609
610	i2c_put_adapter(client->adapter);
611	kfree(client);
612	file->private_data = NULL;
613
614	return 0;
615}
616
617static const struct file_operations i2cdev_fops = {
618	.owner		= THIS_MODULE,
619	.llseek		= no_llseek,
620	.read		= i2cdev_read,
621	.write		= i2cdev_write,
622	.unlocked_ioctl	= i2cdev_ioctl,
623	.compat_ioctl	= compat_i2cdev_ioctl,
624	.open		= i2cdev_open,
625	.release	= i2cdev_release,
626};
627
628/* ------------------------------------------------------------------------- */
629
630static struct class *i2c_dev_class;
 
 
 
631
632static int i2cdev_attach_adapter(struct device *dev, void *dummy)
 
 
 
 
 
 
 
 
633{
634	struct i2c_adapter *adap;
635	struct i2c_dev *i2c_dev;
636	int res;
637
638	if (dev->type != &i2c_adapter_type)
639		return 0;
640	adap = to_i2c_adapter(dev);
641
642	i2c_dev = get_free_i2c_dev(adap);
643	if (IS_ERR(i2c_dev))
644		return PTR_ERR(i2c_dev);
645
646	cdev_init(&i2c_dev->cdev, &i2cdev_fops);
647	i2c_dev->cdev.owner = THIS_MODULE;
648	res = cdev_add(&i2c_dev->cdev, MKDEV(I2C_MAJOR, adap->nr), 1);
 
 
 
 
 
 
 
 
 
 
 
649	if (res)
650		goto error_cdev;
651
652	/* register this i2c device with the driver core */
653	i2c_dev->dev = device_create(i2c_dev_class, &adap->dev,
654				     MKDEV(I2C_MAJOR, adap->nr), NULL,
655				     "i2c-%d", adap->nr);
656	if (IS_ERR(i2c_dev->dev)) {
657		res = PTR_ERR(i2c_dev->dev);
658		goto error;
659	}
660
661	pr_debug("i2c-dev: adapter [%s] registered as minor %d\n",
662		 adap->name, adap->nr);
663	return 0;
664error:
665	cdev_del(&i2c_dev->cdev);
666error_cdev:
667	put_i2c_dev(i2c_dev);
668	return res;
669}
670
671static int i2cdev_detach_adapter(struct device *dev, void *dummy)
672{
673	struct i2c_adapter *adap;
674	struct i2c_dev *i2c_dev;
675
676	if (dev->type != &i2c_adapter_type)
677		return 0;
678	adap = to_i2c_adapter(dev);
679
680	i2c_dev = i2c_dev_get_by_minor(adap->nr);
681	if (!i2c_dev) /* attach_adapter must have failed */
682		return 0;
683
684	cdev_del(&i2c_dev->cdev);
685	put_i2c_dev(i2c_dev);
686	device_destroy(i2c_dev_class, MKDEV(I2C_MAJOR, adap->nr));
687
688	pr_debug("i2c-dev: adapter [%s] unregistered\n", adap->name);
689	return 0;
690}
691
692static int i2cdev_notifier_call(struct notifier_block *nb, unsigned long action,
693			 void *data)
694{
695	struct device *dev = data;
696
697	switch (action) {
698	case BUS_NOTIFY_ADD_DEVICE:
699		return i2cdev_attach_adapter(dev, NULL);
700	case BUS_NOTIFY_DEL_DEVICE:
701		return i2cdev_detach_adapter(dev, NULL);
702	}
703
704	return 0;
705}
706
707static struct notifier_block i2cdev_notifier = {
708	.notifier_call = i2cdev_notifier_call,
709};
710
711/* ------------------------------------------------------------------------- */
712
 
 
 
 
 
 
 
 
 
 
 
 
713/*
714 * module load/unload record keeping
715 */
716
717static int __init i2c_dev_init(void)
718{
719	int res;
720
721	printk(KERN_INFO "i2c /dev entries driver\n");
722
723	res = register_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS, "i2c");
724	if (res)
725		goto out;
726
727	i2c_dev_class = class_create(THIS_MODULE, "i2c-dev");
728	if (IS_ERR(i2c_dev_class)) {
729		res = PTR_ERR(i2c_dev_class);
730		goto out_unreg_chrdev;
731	}
732	i2c_dev_class->dev_groups = i2c_groups;
733
734	/* Keep track of adapters which will be added or removed later */
735	res = bus_register_notifier(&i2c_bus_type, &i2cdev_notifier);
736	if (res)
737		goto out_unreg_class;
738
739	/* Bind to already existing adapters right away */
740	i2c_for_each_dev(NULL, i2cdev_attach_adapter);
741
742	return 0;
743
744out_unreg_class:
745	class_destroy(i2c_dev_class);
746out_unreg_chrdev:
747	unregister_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS);
748out:
749	printk(KERN_ERR "%s: Driver Initialisation failed\n", __FILE__);
750	return res;
751}
752
753static void __exit i2c_dev_exit(void)
754{
755	bus_unregister_notifier(&i2c_bus_type, &i2cdev_notifier);
756	i2c_for_each_dev(NULL, i2cdev_detach_adapter);
757	class_destroy(i2c_dev_class);
758	unregister_chrdev_region(MKDEV(I2C_MAJOR, 0), I2C_MINORS);
759}
760
761MODULE_AUTHOR("Frodo Looijaard <frodol@dds.nl> and "
762		"Simon G. Vogl <simon@tk.uni-linz.ac.at>");
763MODULE_DESCRIPTION("I2C /dev entries driver");
764MODULE_LICENSE("GPL");
765
766module_init(i2c_dev_init);
767module_exit(i2c_dev_exit);