Linux Audio

Check our new training course

Loading...
Note: File does not exist in v6.8.
   1/*
   2 * Copyright (c) 2005 Topspin Communications.  All rights reserved.
   3 * Copyright (c) 2005 Intel Corporation.  All rights reserved.
   4 *
   5 * This software is available to you under a choice of one of two
   6 * licenses.  You may choose to be licensed under the terms of the GNU
   7 * General Public License (GPL) Version 2, available from the file
   8 * COPYING in the main directory of this source tree, or the
   9 * OpenIB.org BSD license below:
  10 *
  11 *     Redistribution and use in source and binary forms, with or
  12 *     without modification, are permitted provided that the following
  13 *     conditions are met:
  14 *
  15 *      - Redistributions of source code must retain the above
  16 *	copyright notice, this list of conditions and the following
  17 *	disclaimer.
  18 *
  19 *      - Redistributions in binary form must reproduce the above
  20 *	copyright notice, this list of conditions and the following
  21 *	disclaimer in the documentation and/or other materials
  22 *	provided with the distribution.
  23 *
  24 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  25 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  26 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  27 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
  28 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
  29 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
  30 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  31 * SOFTWARE.
  32 */
  33
  34#include <linux/completion.h>
  35#include <linux/init.h>
  36#include <linux/fs.h>
  37#include <linux/module.h>
  38#include <linux/device.h>
  39#include <linux/err.h>
  40#include <linux/poll.h>
  41#include <linux/sched.h>
  42#include <linux/file.h>
  43#include <linux/mount.h>
  44#include <linux/cdev.h>
  45#include <linux/idr.h>
  46#include <linux/mutex.h>
  47#include <linux/slab.h>
  48
  49#include <linux/uaccess.h>
  50
  51#include <rdma/ib.h>
  52#include <rdma/ib_cm.h>
  53#include <rdma/ib_user_cm.h>
  54#include <rdma/ib_marshall.h>
  55
  56MODULE_AUTHOR("Libor Michalek");
  57MODULE_DESCRIPTION("InfiniBand userspace Connection Manager access");
  58MODULE_LICENSE("Dual BSD/GPL");
  59
  60struct ib_ucm_device {
  61	int			devnum;
  62	struct cdev		cdev;
  63	struct device		dev;
  64	struct ib_device	*ib_dev;
  65};
  66
  67struct ib_ucm_file {
  68	struct mutex file_mutex;
  69	struct file *filp;
  70	struct ib_ucm_device *device;
  71
  72	struct list_head  ctxs;
  73	struct list_head  events;
  74	wait_queue_head_t poll_wait;
  75};
  76
  77struct ib_ucm_context {
  78	int                 id;
  79	struct completion   comp;
  80	atomic_t            ref;
  81	int		    events_reported;
  82
  83	struct ib_ucm_file *file;
  84	struct ib_cm_id    *cm_id;
  85	__u64		   uid;
  86
  87	struct list_head    events;    /* list of pending events. */
  88	struct list_head    file_list; /* member in file ctx list */
  89};
  90
  91struct ib_ucm_event {
  92	struct ib_ucm_context *ctx;
  93	struct list_head file_list; /* member in file event list */
  94	struct list_head ctx_list;  /* member in ctx event list */
  95
  96	struct ib_cm_id *cm_id;
  97	struct ib_ucm_event_resp resp;
  98	void *data;
  99	void *info;
 100	int data_len;
 101	int info_len;
 102};
 103
 104enum {
 105	IB_UCM_MAJOR = 231,
 106	IB_UCM_BASE_MINOR = 224,
 107	IB_UCM_MAX_DEVICES = 32
 108};
 109
 110#define IB_UCM_BASE_DEV MKDEV(IB_UCM_MAJOR, IB_UCM_BASE_MINOR)
 111
 112static void ib_ucm_add_one(struct ib_device *device);
 113static void ib_ucm_remove_one(struct ib_device *device, void *client_data);
 114
 115static struct ib_client ucm_client = {
 116	.name   = "ucm",
 117	.add    = ib_ucm_add_one,
 118	.remove = ib_ucm_remove_one
 119};
 120
 121static DEFINE_MUTEX(ctx_id_mutex);
 122static DEFINE_IDR(ctx_id_table);
 123static DECLARE_BITMAP(dev_map, IB_UCM_MAX_DEVICES);
 124
 125static struct ib_ucm_context *ib_ucm_ctx_get(struct ib_ucm_file *file, int id)
 126{
 127	struct ib_ucm_context *ctx;
 128
 129	mutex_lock(&ctx_id_mutex);
 130	ctx = idr_find(&ctx_id_table, id);
 131	if (!ctx)
 132		ctx = ERR_PTR(-ENOENT);
 133	else if (ctx->file != file)
 134		ctx = ERR_PTR(-EINVAL);
 135	else
 136		atomic_inc(&ctx->ref);
 137	mutex_unlock(&ctx_id_mutex);
 138
 139	return ctx;
 140}
 141
 142static void ib_ucm_ctx_put(struct ib_ucm_context *ctx)
 143{
 144	if (atomic_dec_and_test(&ctx->ref))
 145		complete(&ctx->comp);
 146}
 147
 148static inline int ib_ucm_new_cm_id(int event)
 149{
 150	return event == IB_CM_REQ_RECEIVED || event == IB_CM_SIDR_REQ_RECEIVED;
 151}
 152
 153static void ib_ucm_cleanup_events(struct ib_ucm_context *ctx)
 154{
 155	struct ib_ucm_event *uevent;
 156
 157	mutex_lock(&ctx->file->file_mutex);
 158	list_del(&ctx->file_list);
 159	while (!list_empty(&ctx->events)) {
 160
 161		uevent = list_entry(ctx->events.next,
 162				    struct ib_ucm_event, ctx_list);
 163		list_del(&uevent->file_list);
 164		list_del(&uevent->ctx_list);
 165		mutex_unlock(&ctx->file->file_mutex);
 166
 167		/* clear incoming connections. */
 168		if (ib_ucm_new_cm_id(uevent->resp.event))
 169			ib_destroy_cm_id(uevent->cm_id);
 170
 171		kfree(uevent);
 172		mutex_lock(&ctx->file->file_mutex);
 173	}
 174	mutex_unlock(&ctx->file->file_mutex);
 175}
 176
 177static struct ib_ucm_context *ib_ucm_ctx_alloc(struct ib_ucm_file *file)
 178{
 179	struct ib_ucm_context *ctx;
 180
 181	ctx = kzalloc(sizeof *ctx, GFP_KERNEL);
 182	if (!ctx)
 183		return NULL;
 184
 185	atomic_set(&ctx->ref, 1);
 186	init_completion(&ctx->comp);
 187	ctx->file = file;
 188	INIT_LIST_HEAD(&ctx->events);
 189
 190	mutex_lock(&ctx_id_mutex);
 191	ctx->id = idr_alloc(&ctx_id_table, ctx, 0, 0, GFP_KERNEL);
 192	mutex_unlock(&ctx_id_mutex);
 193	if (ctx->id < 0)
 194		goto error;
 195
 196	list_add_tail(&ctx->file_list, &file->ctxs);
 197	return ctx;
 198
 199error:
 200	kfree(ctx);
 201	return NULL;
 202}
 203
 204static void ib_ucm_event_req_get(struct ib_ucm_req_event_resp *ureq,
 205				 struct ib_cm_req_event_param *kreq)
 206{
 207	ureq->remote_ca_guid             = kreq->remote_ca_guid;
 208	ureq->remote_qkey                = kreq->remote_qkey;
 209	ureq->remote_qpn                 = kreq->remote_qpn;
 210	ureq->qp_type                    = kreq->qp_type;
 211	ureq->starting_psn               = kreq->starting_psn;
 212	ureq->responder_resources        = kreq->responder_resources;
 213	ureq->initiator_depth            = kreq->initiator_depth;
 214	ureq->local_cm_response_timeout  = kreq->local_cm_response_timeout;
 215	ureq->flow_control               = kreq->flow_control;
 216	ureq->remote_cm_response_timeout = kreq->remote_cm_response_timeout;
 217	ureq->retry_count                = kreq->retry_count;
 218	ureq->rnr_retry_count            = kreq->rnr_retry_count;
 219	ureq->srq                        = kreq->srq;
 220	ureq->port			 = kreq->port;
 221
 222	ib_copy_path_rec_to_user(&ureq->primary_path, kreq->primary_path);
 223	if (kreq->alternate_path)
 224		ib_copy_path_rec_to_user(&ureq->alternate_path,
 225					 kreq->alternate_path);
 226}
 227
 228static void ib_ucm_event_rep_get(struct ib_ucm_rep_event_resp *urep,
 229				 struct ib_cm_rep_event_param *krep)
 230{
 231	urep->remote_ca_guid      = krep->remote_ca_guid;
 232	urep->remote_qkey         = krep->remote_qkey;
 233	urep->remote_qpn          = krep->remote_qpn;
 234	urep->starting_psn        = krep->starting_psn;
 235	urep->responder_resources = krep->responder_resources;
 236	urep->initiator_depth     = krep->initiator_depth;
 237	urep->target_ack_delay    = krep->target_ack_delay;
 238	urep->failover_accepted   = krep->failover_accepted;
 239	urep->flow_control        = krep->flow_control;
 240	urep->rnr_retry_count     = krep->rnr_retry_count;
 241	urep->srq                 = krep->srq;
 242}
 243
 244static void ib_ucm_event_sidr_rep_get(struct ib_ucm_sidr_rep_event_resp *urep,
 245				      struct ib_cm_sidr_rep_event_param *krep)
 246{
 247	urep->status = krep->status;
 248	urep->qkey   = krep->qkey;
 249	urep->qpn    = krep->qpn;
 250};
 251
 252static int ib_ucm_event_process(struct ib_cm_event *evt,
 253				struct ib_ucm_event *uvt)
 254{
 255	void *info = NULL;
 256
 257	switch (evt->event) {
 258	case IB_CM_REQ_RECEIVED:
 259		ib_ucm_event_req_get(&uvt->resp.u.req_resp,
 260				     &evt->param.req_rcvd);
 261		uvt->data_len      = IB_CM_REQ_PRIVATE_DATA_SIZE;
 262		uvt->resp.present  = IB_UCM_PRES_PRIMARY;
 263		uvt->resp.present |= (evt->param.req_rcvd.alternate_path ?
 264				      IB_UCM_PRES_ALTERNATE : 0);
 265		break;
 266	case IB_CM_REP_RECEIVED:
 267		ib_ucm_event_rep_get(&uvt->resp.u.rep_resp,
 268				     &evt->param.rep_rcvd);
 269		uvt->data_len = IB_CM_REP_PRIVATE_DATA_SIZE;
 270		break;
 271	case IB_CM_RTU_RECEIVED:
 272		uvt->data_len = IB_CM_RTU_PRIVATE_DATA_SIZE;
 273		uvt->resp.u.send_status = evt->param.send_status;
 274		break;
 275	case IB_CM_DREQ_RECEIVED:
 276		uvt->data_len = IB_CM_DREQ_PRIVATE_DATA_SIZE;
 277		uvt->resp.u.send_status = evt->param.send_status;
 278		break;
 279	case IB_CM_DREP_RECEIVED:
 280		uvt->data_len = IB_CM_DREP_PRIVATE_DATA_SIZE;
 281		uvt->resp.u.send_status = evt->param.send_status;
 282		break;
 283	case IB_CM_MRA_RECEIVED:
 284		uvt->resp.u.mra_resp.timeout =
 285					evt->param.mra_rcvd.service_timeout;
 286		uvt->data_len = IB_CM_MRA_PRIVATE_DATA_SIZE;
 287		break;
 288	case IB_CM_REJ_RECEIVED:
 289		uvt->resp.u.rej_resp.reason = evt->param.rej_rcvd.reason;
 290		uvt->data_len = IB_CM_REJ_PRIVATE_DATA_SIZE;
 291		uvt->info_len = evt->param.rej_rcvd.ari_length;
 292		info	      = evt->param.rej_rcvd.ari;
 293		break;
 294	case IB_CM_LAP_RECEIVED:
 295		ib_copy_path_rec_to_user(&uvt->resp.u.lap_resp.path,
 296					 evt->param.lap_rcvd.alternate_path);
 297		uvt->data_len = IB_CM_LAP_PRIVATE_DATA_SIZE;
 298		uvt->resp.present = IB_UCM_PRES_ALTERNATE;
 299		break;
 300	case IB_CM_APR_RECEIVED:
 301		uvt->resp.u.apr_resp.status = evt->param.apr_rcvd.ap_status;
 302		uvt->data_len = IB_CM_APR_PRIVATE_DATA_SIZE;
 303		uvt->info_len = evt->param.apr_rcvd.info_len;
 304		info	      = evt->param.apr_rcvd.apr_info;
 305		break;
 306	case IB_CM_SIDR_REQ_RECEIVED:
 307		uvt->resp.u.sidr_req_resp.pkey =
 308					evt->param.sidr_req_rcvd.pkey;
 309		uvt->resp.u.sidr_req_resp.port =
 310					evt->param.sidr_req_rcvd.port;
 311		uvt->data_len = IB_CM_SIDR_REQ_PRIVATE_DATA_SIZE;
 312		break;
 313	case IB_CM_SIDR_REP_RECEIVED:
 314		ib_ucm_event_sidr_rep_get(&uvt->resp.u.sidr_rep_resp,
 315					  &evt->param.sidr_rep_rcvd);
 316		uvt->data_len = IB_CM_SIDR_REP_PRIVATE_DATA_SIZE;
 317		uvt->info_len = evt->param.sidr_rep_rcvd.info_len;
 318		info	      = evt->param.sidr_rep_rcvd.info;
 319		break;
 320	default:
 321		uvt->resp.u.send_status = evt->param.send_status;
 322		break;
 323	}
 324
 325	if (uvt->data_len) {
 326		uvt->data = kmemdup(evt->private_data, uvt->data_len, GFP_KERNEL);
 327		if (!uvt->data)
 328			goto err1;
 329
 330		uvt->resp.present |= IB_UCM_PRES_DATA;
 331	}
 332
 333	if (uvt->info_len) {
 334		uvt->info = kmemdup(info, uvt->info_len, GFP_KERNEL);
 335		if (!uvt->info)
 336			goto err2;
 337
 338		uvt->resp.present |= IB_UCM_PRES_INFO;
 339	}
 340	return 0;
 341
 342err2:
 343	kfree(uvt->data);
 344err1:
 345	return -ENOMEM;
 346}
 347
 348static int ib_ucm_event_handler(struct ib_cm_id *cm_id,
 349				struct ib_cm_event *event)
 350{
 351	struct ib_ucm_event *uevent;
 352	struct ib_ucm_context *ctx;
 353	int result = 0;
 354
 355	ctx = cm_id->context;
 356
 357	uevent = kzalloc(sizeof *uevent, GFP_KERNEL);
 358	if (!uevent)
 359		goto err1;
 360
 361	uevent->ctx = ctx;
 362	uevent->cm_id = cm_id;
 363	uevent->resp.uid = ctx->uid;
 364	uevent->resp.id = ctx->id;
 365	uevent->resp.event = event->event;
 366
 367	result = ib_ucm_event_process(event, uevent);
 368	if (result)
 369		goto err2;
 370
 371	mutex_lock(&ctx->file->file_mutex);
 372	list_add_tail(&uevent->file_list, &ctx->file->events);
 373	list_add_tail(&uevent->ctx_list, &ctx->events);
 374	wake_up_interruptible(&ctx->file->poll_wait);
 375	mutex_unlock(&ctx->file->file_mutex);
 376	return 0;
 377
 378err2:
 379	kfree(uevent);
 380err1:
 381	/* Destroy new cm_id's */
 382	return ib_ucm_new_cm_id(event->event);
 383}
 384
 385static ssize_t ib_ucm_event(struct ib_ucm_file *file,
 386			    const char __user *inbuf,
 387			    int in_len, int out_len)
 388{
 389	struct ib_ucm_context *ctx;
 390	struct ib_ucm_event_get cmd;
 391	struct ib_ucm_event *uevent;
 392	int result = 0;
 393
 394	if (out_len < sizeof(struct ib_ucm_event_resp))
 395		return -ENOSPC;
 396
 397	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 398		return -EFAULT;
 399
 400	mutex_lock(&file->file_mutex);
 401	while (list_empty(&file->events)) {
 402		mutex_unlock(&file->file_mutex);
 403
 404		if (file->filp->f_flags & O_NONBLOCK)
 405			return -EAGAIN;
 406
 407		if (wait_event_interruptible(file->poll_wait,
 408					     !list_empty(&file->events)))
 409			return -ERESTARTSYS;
 410
 411		mutex_lock(&file->file_mutex);
 412	}
 413
 414	uevent = list_entry(file->events.next, struct ib_ucm_event, file_list);
 415
 416	if (ib_ucm_new_cm_id(uevent->resp.event)) {
 417		ctx = ib_ucm_ctx_alloc(file);
 418		if (!ctx) {
 419			result = -ENOMEM;
 420			goto done;
 421		}
 422
 423		ctx->cm_id = uevent->cm_id;
 424		ctx->cm_id->context = ctx;
 425		uevent->resp.id = ctx->id;
 426	}
 427
 428	if (copy_to_user((void __user *)(unsigned long)cmd.response,
 429			 &uevent->resp, sizeof(uevent->resp))) {
 430		result = -EFAULT;
 431		goto done;
 432	}
 433
 434	if (uevent->data) {
 435		if (cmd.data_len < uevent->data_len) {
 436			result = -ENOMEM;
 437			goto done;
 438		}
 439		if (copy_to_user((void __user *)(unsigned long)cmd.data,
 440				 uevent->data, uevent->data_len)) {
 441			result = -EFAULT;
 442			goto done;
 443		}
 444	}
 445
 446	if (uevent->info) {
 447		if (cmd.info_len < uevent->info_len) {
 448			result = -ENOMEM;
 449			goto done;
 450		}
 451		if (copy_to_user((void __user *)(unsigned long)cmd.info,
 452				 uevent->info, uevent->info_len)) {
 453			result = -EFAULT;
 454			goto done;
 455		}
 456	}
 457
 458	list_del(&uevent->file_list);
 459	list_del(&uevent->ctx_list);
 460	uevent->ctx->events_reported++;
 461
 462	kfree(uevent->data);
 463	kfree(uevent->info);
 464	kfree(uevent);
 465done:
 466	mutex_unlock(&file->file_mutex);
 467	return result;
 468}
 469
 470static ssize_t ib_ucm_create_id(struct ib_ucm_file *file,
 471				const char __user *inbuf,
 472				int in_len, int out_len)
 473{
 474	struct ib_ucm_create_id cmd;
 475	struct ib_ucm_create_id_resp resp;
 476	struct ib_ucm_context *ctx;
 477	int result;
 478
 479	if (out_len < sizeof(resp))
 480		return -ENOSPC;
 481
 482	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 483		return -EFAULT;
 484
 485	mutex_lock(&file->file_mutex);
 486	ctx = ib_ucm_ctx_alloc(file);
 487	mutex_unlock(&file->file_mutex);
 488	if (!ctx)
 489		return -ENOMEM;
 490
 491	ctx->uid = cmd.uid;
 492	ctx->cm_id = ib_create_cm_id(file->device->ib_dev,
 493				     ib_ucm_event_handler, ctx);
 494	if (IS_ERR(ctx->cm_id)) {
 495		result = PTR_ERR(ctx->cm_id);
 496		goto err1;
 497	}
 498
 499	resp.id = ctx->id;
 500	if (copy_to_user((void __user *)(unsigned long)cmd.response,
 501			 &resp, sizeof(resp))) {
 502		result = -EFAULT;
 503		goto err2;
 504	}
 505	return 0;
 506
 507err2:
 508	ib_destroy_cm_id(ctx->cm_id);
 509err1:
 510	mutex_lock(&ctx_id_mutex);
 511	idr_remove(&ctx_id_table, ctx->id);
 512	mutex_unlock(&ctx_id_mutex);
 513	kfree(ctx);
 514	return result;
 515}
 516
 517static ssize_t ib_ucm_destroy_id(struct ib_ucm_file *file,
 518				 const char __user *inbuf,
 519				 int in_len, int out_len)
 520{
 521	struct ib_ucm_destroy_id cmd;
 522	struct ib_ucm_destroy_id_resp resp;
 523	struct ib_ucm_context *ctx;
 524	int result = 0;
 525
 526	if (out_len < sizeof(resp))
 527		return -ENOSPC;
 528
 529	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 530		return -EFAULT;
 531
 532	mutex_lock(&ctx_id_mutex);
 533	ctx = idr_find(&ctx_id_table, cmd.id);
 534	if (!ctx)
 535		ctx = ERR_PTR(-ENOENT);
 536	else if (ctx->file != file)
 537		ctx = ERR_PTR(-EINVAL);
 538	else
 539		idr_remove(&ctx_id_table, ctx->id);
 540	mutex_unlock(&ctx_id_mutex);
 541
 542	if (IS_ERR(ctx))
 543		return PTR_ERR(ctx);
 544
 545	ib_ucm_ctx_put(ctx);
 546	wait_for_completion(&ctx->comp);
 547
 548	/* No new events will be generated after destroying the cm_id. */
 549	ib_destroy_cm_id(ctx->cm_id);
 550	/* Cleanup events not yet reported to the user. */
 551	ib_ucm_cleanup_events(ctx);
 552
 553	resp.events_reported = ctx->events_reported;
 554	if (copy_to_user((void __user *)(unsigned long)cmd.response,
 555			 &resp, sizeof(resp)))
 556		result = -EFAULT;
 557
 558	kfree(ctx);
 559	return result;
 560}
 561
 562static ssize_t ib_ucm_attr_id(struct ib_ucm_file *file,
 563			      const char __user *inbuf,
 564			      int in_len, int out_len)
 565{
 566	struct ib_ucm_attr_id_resp resp;
 567	struct ib_ucm_attr_id cmd;
 568	struct ib_ucm_context *ctx;
 569	int result = 0;
 570
 571	if (out_len < sizeof(resp))
 572		return -ENOSPC;
 573
 574	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 575		return -EFAULT;
 576
 577	ctx = ib_ucm_ctx_get(file, cmd.id);
 578	if (IS_ERR(ctx))
 579		return PTR_ERR(ctx);
 580
 581	resp.service_id   = ctx->cm_id->service_id;
 582	resp.service_mask = ctx->cm_id->service_mask;
 583	resp.local_id     = ctx->cm_id->local_id;
 584	resp.remote_id    = ctx->cm_id->remote_id;
 585
 586	if (copy_to_user((void __user *)(unsigned long)cmd.response,
 587			 &resp, sizeof(resp)))
 588		result = -EFAULT;
 589
 590	ib_ucm_ctx_put(ctx);
 591	return result;
 592}
 593
 594static ssize_t ib_ucm_init_qp_attr(struct ib_ucm_file *file,
 595				   const char __user *inbuf,
 596				   int in_len, int out_len)
 597{
 598	struct ib_uverbs_qp_attr resp;
 599	struct ib_ucm_init_qp_attr cmd;
 600	struct ib_ucm_context *ctx;
 601	struct ib_qp_attr qp_attr;
 602	int result = 0;
 603
 604	if (out_len < sizeof(resp))
 605		return -ENOSPC;
 606
 607	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 608		return -EFAULT;
 609
 610	ctx = ib_ucm_ctx_get(file, cmd.id);
 611	if (IS_ERR(ctx))
 612		return PTR_ERR(ctx);
 613
 614	resp.qp_attr_mask = 0;
 615	memset(&qp_attr, 0, sizeof qp_attr);
 616	qp_attr.qp_state = cmd.qp_state;
 617	result = ib_cm_init_qp_attr(ctx->cm_id, &qp_attr, &resp.qp_attr_mask);
 618	if (result)
 619		goto out;
 620
 621	ib_copy_qp_attr_to_user(&resp, &qp_attr);
 622
 623	if (copy_to_user((void __user *)(unsigned long)cmd.response,
 624			 &resp, sizeof(resp)))
 625		result = -EFAULT;
 626
 627out:
 628	ib_ucm_ctx_put(ctx);
 629	return result;
 630}
 631
 632static int ucm_validate_listen(__be64 service_id, __be64 service_mask)
 633{
 634	service_id &= service_mask;
 635
 636	if (((service_id & IB_CMA_SERVICE_ID_MASK) == IB_CMA_SERVICE_ID) ||
 637	    ((service_id & IB_SDP_SERVICE_ID_MASK) == IB_SDP_SERVICE_ID))
 638		return -EINVAL;
 639
 640	return 0;
 641}
 642
 643static ssize_t ib_ucm_listen(struct ib_ucm_file *file,
 644			     const char __user *inbuf,
 645			     int in_len, int out_len)
 646{
 647	struct ib_ucm_listen cmd;
 648	struct ib_ucm_context *ctx;
 649	int result;
 650
 651	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 652		return -EFAULT;
 653
 654	ctx = ib_ucm_ctx_get(file, cmd.id);
 655	if (IS_ERR(ctx))
 656		return PTR_ERR(ctx);
 657
 658	result = ucm_validate_listen(cmd.service_id, cmd.service_mask);
 659	if (result)
 660		goto out;
 661
 662	result = ib_cm_listen(ctx->cm_id, cmd.service_id, cmd.service_mask);
 663out:
 664	ib_ucm_ctx_put(ctx);
 665	return result;
 666}
 667
 668static ssize_t ib_ucm_notify(struct ib_ucm_file *file,
 669			     const char __user *inbuf,
 670			     int in_len, int out_len)
 671{
 672	struct ib_ucm_notify cmd;
 673	struct ib_ucm_context *ctx;
 674	int result;
 675
 676	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 677		return -EFAULT;
 678
 679	ctx = ib_ucm_ctx_get(file, cmd.id);
 680	if (IS_ERR(ctx))
 681		return PTR_ERR(ctx);
 682
 683	result = ib_cm_notify(ctx->cm_id, (enum ib_event_type) cmd.event);
 684	ib_ucm_ctx_put(ctx);
 685	return result;
 686}
 687
 688static int ib_ucm_alloc_data(const void **dest, u64 src, u32 len)
 689{
 690	void *data;
 691
 692	*dest = NULL;
 693
 694	if (!len)
 695		return 0;
 696
 697	data = memdup_user((void __user *)(unsigned long)src, len);
 698	if (IS_ERR(data))
 699		return PTR_ERR(data);
 700
 701	*dest = data;
 702	return 0;
 703}
 704
 705static int ib_ucm_path_get(struct ib_sa_path_rec **path, u64 src)
 706{
 707	struct ib_user_path_rec upath;
 708	struct ib_sa_path_rec  *sa_path;
 709
 710	*path = NULL;
 711
 712	if (!src)
 713		return 0;
 714
 715	sa_path = kmalloc(sizeof(*sa_path), GFP_KERNEL);
 716	if (!sa_path)
 717		return -ENOMEM;
 718
 719	if (copy_from_user(&upath, (void __user *)(unsigned long)src,
 720			   sizeof(upath))) {
 721
 722		kfree(sa_path);
 723		return -EFAULT;
 724	}
 725
 726	ib_copy_path_rec_from_user(sa_path, &upath);
 727	*path = sa_path;
 728	return 0;
 729}
 730
 731static ssize_t ib_ucm_send_req(struct ib_ucm_file *file,
 732			       const char __user *inbuf,
 733			       int in_len, int out_len)
 734{
 735	struct ib_cm_req_param param;
 736	struct ib_ucm_context *ctx;
 737	struct ib_ucm_req cmd;
 738	int result;
 739
 740	param.private_data   = NULL;
 741	param.primary_path   = NULL;
 742	param.alternate_path = NULL;
 743
 744	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 745		return -EFAULT;
 746
 747	result = ib_ucm_alloc_data(&param.private_data, cmd.data, cmd.len);
 748	if (result)
 749		goto done;
 750
 751	result = ib_ucm_path_get(&param.primary_path, cmd.primary_path);
 752	if (result)
 753		goto done;
 754
 755	result = ib_ucm_path_get(&param.alternate_path, cmd.alternate_path);
 756	if (result)
 757		goto done;
 758
 759	param.private_data_len           = cmd.len;
 760	param.service_id                 = cmd.sid;
 761	param.qp_num                     = cmd.qpn;
 762	param.qp_type                    = cmd.qp_type;
 763	param.starting_psn               = cmd.psn;
 764	param.peer_to_peer               = cmd.peer_to_peer;
 765	param.responder_resources        = cmd.responder_resources;
 766	param.initiator_depth            = cmd.initiator_depth;
 767	param.remote_cm_response_timeout = cmd.remote_cm_response_timeout;
 768	param.flow_control               = cmd.flow_control;
 769	param.local_cm_response_timeout  = cmd.local_cm_response_timeout;
 770	param.retry_count                = cmd.retry_count;
 771	param.rnr_retry_count            = cmd.rnr_retry_count;
 772	param.max_cm_retries             = cmd.max_cm_retries;
 773	param.srq                        = cmd.srq;
 774
 775	ctx = ib_ucm_ctx_get(file, cmd.id);
 776	if (!IS_ERR(ctx)) {
 777		result = ib_send_cm_req(ctx->cm_id, &param);
 778		ib_ucm_ctx_put(ctx);
 779	} else
 780		result = PTR_ERR(ctx);
 781
 782done:
 783	kfree(param.private_data);
 784	kfree(param.primary_path);
 785	kfree(param.alternate_path);
 786	return result;
 787}
 788
 789static ssize_t ib_ucm_send_rep(struct ib_ucm_file *file,
 790			       const char __user *inbuf,
 791			       int in_len, int out_len)
 792{
 793	struct ib_cm_rep_param param;
 794	struct ib_ucm_context *ctx;
 795	struct ib_ucm_rep cmd;
 796	int result;
 797
 798	param.private_data = NULL;
 799
 800	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 801		return -EFAULT;
 802
 803	result = ib_ucm_alloc_data(&param.private_data, cmd.data, cmd.len);
 804	if (result)
 805		return result;
 806
 807	param.qp_num              = cmd.qpn;
 808	param.starting_psn        = cmd.psn;
 809	param.private_data_len    = cmd.len;
 810	param.responder_resources = cmd.responder_resources;
 811	param.initiator_depth     = cmd.initiator_depth;
 812	param.failover_accepted   = cmd.failover_accepted;
 813	param.flow_control        = cmd.flow_control;
 814	param.rnr_retry_count     = cmd.rnr_retry_count;
 815	param.srq                 = cmd.srq;
 816
 817	ctx = ib_ucm_ctx_get(file, cmd.id);
 818	if (!IS_ERR(ctx)) {
 819		ctx->uid = cmd.uid;
 820		result = ib_send_cm_rep(ctx->cm_id, &param);
 821		ib_ucm_ctx_put(ctx);
 822	} else
 823		result = PTR_ERR(ctx);
 824
 825	kfree(param.private_data);
 826	return result;
 827}
 828
 829static ssize_t ib_ucm_send_private_data(struct ib_ucm_file *file,
 830					const char __user *inbuf, int in_len,
 831					int (*func)(struct ib_cm_id *cm_id,
 832						    const void *private_data,
 833						    u8 private_data_len))
 834{
 835	struct ib_ucm_private_data cmd;
 836	struct ib_ucm_context *ctx;
 837	const void *private_data = NULL;
 838	int result;
 839
 840	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 841		return -EFAULT;
 842
 843	result = ib_ucm_alloc_data(&private_data, cmd.data, cmd.len);
 844	if (result)
 845		return result;
 846
 847	ctx = ib_ucm_ctx_get(file, cmd.id);
 848	if (!IS_ERR(ctx)) {
 849		result = func(ctx->cm_id, private_data, cmd.len);
 850		ib_ucm_ctx_put(ctx);
 851	} else
 852		result = PTR_ERR(ctx);
 853
 854	kfree(private_data);
 855	return result;
 856}
 857
 858static ssize_t ib_ucm_send_rtu(struct ib_ucm_file *file,
 859			       const char __user *inbuf,
 860			       int in_len, int out_len)
 861{
 862	return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_rtu);
 863}
 864
 865static ssize_t ib_ucm_send_dreq(struct ib_ucm_file *file,
 866				const char __user *inbuf,
 867				int in_len, int out_len)
 868{
 869	return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_dreq);
 870}
 871
 872static ssize_t ib_ucm_send_drep(struct ib_ucm_file *file,
 873				const char __user *inbuf,
 874				int in_len, int out_len)
 875{
 876	return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_drep);
 877}
 878
 879static ssize_t ib_ucm_send_info(struct ib_ucm_file *file,
 880				const char __user *inbuf, int in_len,
 881				int (*func)(struct ib_cm_id *cm_id,
 882					    int status,
 883					    const void *info,
 884					    u8 info_len,
 885					    const void *data,
 886					    u8 data_len))
 887{
 888	struct ib_ucm_context *ctx;
 889	struct ib_ucm_info cmd;
 890	const void *data = NULL;
 891	const void *info = NULL;
 892	int result;
 893
 894	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 895		return -EFAULT;
 896
 897	result = ib_ucm_alloc_data(&data, cmd.data, cmd.data_len);
 898	if (result)
 899		goto done;
 900
 901	result = ib_ucm_alloc_data(&info, cmd.info, cmd.info_len);
 902	if (result)
 903		goto done;
 904
 905	ctx = ib_ucm_ctx_get(file, cmd.id);
 906	if (!IS_ERR(ctx)) {
 907		result = func(ctx->cm_id, cmd.status, info, cmd.info_len,
 908			      data, cmd.data_len);
 909		ib_ucm_ctx_put(ctx);
 910	} else
 911		result = PTR_ERR(ctx);
 912
 913done:
 914	kfree(data);
 915	kfree(info);
 916	return result;
 917}
 918
 919static ssize_t ib_ucm_send_rej(struct ib_ucm_file *file,
 920			       const char __user *inbuf,
 921			       int in_len, int out_len)
 922{
 923	return ib_ucm_send_info(file, inbuf, in_len, (void *)ib_send_cm_rej);
 924}
 925
 926static ssize_t ib_ucm_send_apr(struct ib_ucm_file *file,
 927			       const char __user *inbuf,
 928			       int in_len, int out_len)
 929{
 930	return ib_ucm_send_info(file, inbuf, in_len, (void *)ib_send_cm_apr);
 931}
 932
 933static ssize_t ib_ucm_send_mra(struct ib_ucm_file *file,
 934			       const char __user *inbuf,
 935			       int in_len, int out_len)
 936{
 937	struct ib_ucm_context *ctx;
 938	struct ib_ucm_mra cmd;
 939	const void *data = NULL;
 940	int result;
 941
 942	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 943		return -EFAULT;
 944
 945	result = ib_ucm_alloc_data(&data, cmd.data, cmd.len);
 946	if (result)
 947		return result;
 948
 949	ctx = ib_ucm_ctx_get(file, cmd.id);
 950	if (!IS_ERR(ctx)) {
 951		result = ib_send_cm_mra(ctx->cm_id, cmd.timeout, data, cmd.len);
 952		ib_ucm_ctx_put(ctx);
 953	} else
 954		result = PTR_ERR(ctx);
 955
 956	kfree(data);
 957	return result;
 958}
 959
 960static ssize_t ib_ucm_send_lap(struct ib_ucm_file *file,
 961			       const char __user *inbuf,
 962			       int in_len, int out_len)
 963{
 964	struct ib_ucm_context *ctx;
 965	struct ib_sa_path_rec *path = NULL;
 966	struct ib_ucm_lap cmd;
 967	const void *data = NULL;
 968	int result;
 969
 970	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
 971		return -EFAULT;
 972
 973	result = ib_ucm_alloc_data(&data, cmd.data, cmd.len);
 974	if (result)
 975		goto done;
 976
 977	result = ib_ucm_path_get(&path, cmd.path);
 978	if (result)
 979		goto done;
 980
 981	ctx = ib_ucm_ctx_get(file, cmd.id);
 982	if (!IS_ERR(ctx)) {
 983		result = ib_send_cm_lap(ctx->cm_id, path, data, cmd.len);
 984		ib_ucm_ctx_put(ctx);
 985	} else
 986		result = PTR_ERR(ctx);
 987
 988done:
 989	kfree(data);
 990	kfree(path);
 991	return result;
 992}
 993
 994static ssize_t ib_ucm_send_sidr_req(struct ib_ucm_file *file,
 995				    const char __user *inbuf,
 996				    int in_len, int out_len)
 997{
 998	struct ib_cm_sidr_req_param param;
 999	struct ib_ucm_context *ctx;
1000	struct ib_ucm_sidr_req cmd;
1001	int result;
1002
1003	param.private_data = NULL;
1004	param.path = NULL;
1005
1006	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
1007		return -EFAULT;
1008
1009	result = ib_ucm_alloc_data(&param.private_data, cmd.data, cmd.len);
1010	if (result)
1011		goto done;
1012
1013	result = ib_ucm_path_get(&param.path, cmd.path);
1014	if (result)
1015		goto done;
1016
1017	param.private_data_len = cmd.len;
1018	param.service_id       = cmd.sid;
1019	param.timeout_ms       = cmd.timeout;
1020	param.max_cm_retries   = cmd.max_cm_retries;
1021
1022	ctx = ib_ucm_ctx_get(file, cmd.id);
1023	if (!IS_ERR(ctx)) {
1024		result = ib_send_cm_sidr_req(ctx->cm_id, &param);
1025		ib_ucm_ctx_put(ctx);
1026	} else
1027		result = PTR_ERR(ctx);
1028
1029done:
1030	kfree(param.private_data);
1031	kfree(param.path);
1032	return result;
1033}
1034
1035static ssize_t ib_ucm_send_sidr_rep(struct ib_ucm_file *file,
1036				    const char __user *inbuf,
1037				    int in_len, int out_len)
1038{
1039	struct ib_cm_sidr_rep_param param;
1040	struct ib_ucm_sidr_rep cmd;
1041	struct ib_ucm_context *ctx;
1042	int result;
1043
1044	param.info = NULL;
1045
1046	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
1047		return -EFAULT;
1048
1049	result = ib_ucm_alloc_data(&param.private_data,
1050				   cmd.data, cmd.data_len);
1051	if (result)
1052		goto done;
1053
1054	result = ib_ucm_alloc_data(&param.info, cmd.info, cmd.info_len);
1055	if (result)
1056		goto done;
1057
1058	param.qp_num		= cmd.qpn;
1059	param.qkey		= cmd.qkey;
1060	param.status		= cmd.status;
1061	param.info_length	= cmd.info_len;
1062	param.private_data_len	= cmd.data_len;
1063
1064	ctx = ib_ucm_ctx_get(file, cmd.id);
1065	if (!IS_ERR(ctx)) {
1066		result = ib_send_cm_sidr_rep(ctx->cm_id, &param);
1067		ib_ucm_ctx_put(ctx);
1068	} else
1069		result = PTR_ERR(ctx);
1070
1071done:
1072	kfree(param.private_data);
1073	kfree(param.info);
1074	return result;
1075}
1076
1077static ssize_t (*ucm_cmd_table[])(struct ib_ucm_file *file,
1078				  const char __user *inbuf,
1079				  int in_len, int out_len) = {
1080	[IB_USER_CM_CMD_CREATE_ID]     = ib_ucm_create_id,
1081	[IB_USER_CM_CMD_DESTROY_ID]    = ib_ucm_destroy_id,
1082	[IB_USER_CM_CMD_ATTR_ID]       = ib_ucm_attr_id,
1083	[IB_USER_CM_CMD_LISTEN]        = ib_ucm_listen,
1084	[IB_USER_CM_CMD_NOTIFY]        = ib_ucm_notify,
1085	[IB_USER_CM_CMD_SEND_REQ]      = ib_ucm_send_req,
1086	[IB_USER_CM_CMD_SEND_REP]      = ib_ucm_send_rep,
1087	[IB_USER_CM_CMD_SEND_RTU]      = ib_ucm_send_rtu,
1088	[IB_USER_CM_CMD_SEND_DREQ]     = ib_ucm_send_dreq,
1089	[IB_USER_CM_CMD_SEND_DREP]     = ib_ucm_send_drep,
1090	[IB_USER_CM_CMD_SEND_REJ]      = ib_ucm_send_rej,
1091	[IB_USER_CM_CMD_SEND_MRA]      = ib_ucm_send_mra,
1092	[IB_USER_CM_CMD_SEND_LAP]      = ib_ucm_send_lap,
1093	[IB_USER_CM_CMD_SEND_APR]      = ib_ucm_send_apr,
1094	[IB_USER_CM_CMD_SEND_SIDR_REQ] = ib_ucm_send_sidr_req,
1095	[IB_USER_CM_CMD_SEND_SIDR_REP] = ib_ucm_send_sidr_rep,
1096	[IB_USER_CM_CMD_EVENT]	       = ib_ucm_event,
1097	[IB_USER_CM_CMD_INIT_QP_ATTR]  = ib_ucm_init_qp_attr,
1098};
1099
1100static ssize_t ib_ucm_write(struct file *filp, const char __user *buf,
1101			    size_t len, loff_t *pos)
1102{
1103	struct ib_ucm_file *file = filp->private_data;
1104	struct ib_ucm_cmd_hdr hdr;
1105	ssize_t result;
1106
1107	if (!ib_safe_file_access(filp)) {
1108		pr_err_once("ucm_write: process %d (%s) changed security contexts after opening file descriptor, this is not allowed.\n",
1109			    task_tgid_vnr(current), current->comm);
1110		return -EACCES;
1111	}
1112
1113	if (len < sizeof(hdr))
1114		return -EINVAL;
1115
1116	if (copy_from_user(&hdr, buf, sizeof(hdr)))
1117		return -EFAULT;
1118
1119	if (hdr.cmd >= ARRAY_SIZE(ucm_cmd_table))
1120		return -EINVAL;
1121
1122	if (hdr.in + sizeof(hdr) > len)
1123		return -EINVAL;
1124
1125	result = ucm_cmd_table[hdr.cmd](file, buf + sizeof(hdr),
1126					hdr.in, hdr.out);
1127	if (!result)
1128		result = len;
1129
1130	return result;
1131}
1132
1133static unsigned int ib_ucm_poll(struct file *filp,
1134				struct poll_table_struct *wait)
1135{
1136	struct ib_ucm_file *file = filp->private_data;
1137	unsigned int mask = 0;
1138
1139	poll_wait(filp, &file->poll_wait, wait);
1140
1141	if (!list_empty(&file->events))
1142		mask = POLLIN | POLLRDNORM;
1143
1144	return mask;
1145}
1146
1147/*
1148 * ib_ucm_open() does not need the BKL:
1149 *
1150 *  - no global state is referred to;
1151 *  - there is no ioctl method to race against;
1152 *  - no further module initialization is required for open to work
1153 *    after the device is registered.
1154 */
1155static int ib_ucm_open(struct inode *inode, struct file *filp)
1156{
1157	struct ib_ucm_file *file;
1158
1159	file = kmalloc(sizeof(*file), GFP_KERNEL);
1160	if (!file)
1161		return -ENOMEM;
1162
1163	INIT_LIST_HEAD(&file->events);
1164	INIT_LIST_HEAD(&file->ctxs);
1165	init_waitqueue_head(&file->poll_wait);
1166
1167	mutex_init(&file->file_mutex);
1168
1169	filp->private_data = file;
1170	file->filp = filp;
1171	file->device = container_of(inode->i_cdev, struct ib_ucm_device, cdev);
1172
1173	return nonseekable_open(inode, filp);
1174}
1175
1176static int ib_ucm_close(struct inode *inode, struct file *filp)
1177{
1178	struct ib_ucm_file *file = filp->private_data;
1179	struct ib_ucm_context *ctx;
1180
1181	mutex_lock(&file->file_mutex);
1182	while (!list_empty(&file->ctxs)) {
1183		ctx = list_entry(file->ctxs.next,
1184				 struct ib_ucm_context, file_list);
1185		mutex_unlock(&file->file_mutex);
1186
1187		mutex_lock(&ctx_id_mutex);
1188		idr_remove(&ctx_id_table, ctx->id);
1189		mutex_unlock(&ctx_id_mutex);
1190
1191		ib_destroy_cm_id(ctx->cm_id);
1192		ib_ucm_cleanup_events(ctx);
1193		kfree(ctx);
1194
1195		mutex_lock(&file->file_mutex);
1196	}
1197	mutex_unlock(&file->file_mutex);
1198	kfree(file);
1199	return 0;
1200}
1201
1202static DECLARE_BITMAP(overflow_map, IB_UCM_MAX_DEVICES);
1203static void ib_ucm_release_dev(struct device *dev)
1204{
1205	struct ib_ucm_device *ucm_dev;
1206
1207	ucm_dev = container_of(dev, struct ib_ucm_device, dev);
1208	cdev_del(&ucm_dev->cdev);
1209	if (ucm_dev->devnum < IB_UCM_MAX_DEVICES)
1210		clear_bit(ucm_dev->devnum, dev_map);
1211	else
1212		clear_bit(ucm_dev->devnum - IB_UCM_MAX_DEVICES, overflow_map);
1213	kfree(ucm_dev);
1214}
1215
1216static const struct file_operations ucm_fops = {
1217	.owner	 = THIS_MODULE,
1218	.open	 = ib_ucm_open,
1219	.release = ib_ucm_close,
1220	.write	 = ib_ucm_write,
1221	.poll    = ib_ucm_poll,
1222	.llseek	 = no_llseek,
1223};
1224
1225static ssize_t show_ibdev(struct device *dev, struct device_attribute *attr,
1226			  char *buf)
1227{
1228	struct ib_ucm_device *ucm_dev;
1229
1230	ucm_dev = container_of(dev, struct ib_ucm_device, dev);
1231	return sprintf(buf, "%s\n", ucm_dev->ib_dev->name);
1232}
1233static DEVICE_ATTR(ibdev, S_IRUGO, show_ibdev, NULL);
1234
1235static dev_t overflow_maj;
1236static int find_overflow_devnum(void)
1237{
1238	int ret;
1239
1240	if (!overflow_maj) {
1241		ret = alloc_chrdev_region(&overflow_maj, 0, IB_UCM_MAX_DEVICES,
1242					  "infiniband_cm");
1243		if (ret) {
1244			pr_err("ucm: couldn't register dynamic device number\n");
1245			return ret;
1246		}
1247	}
1248
1249	ret = find_first_zero_bit(overflow_map, IB_UCM_MAX_DEVICES);
1250	if (ret >= IB_UCM_MAX_DEVICES)
1251		return -1;
1252
1253	return ret;
1254}
1255
1256static void ib_ucm_add_one(struct ib_device *device)
1257{
1258	int devnum;
1259	dev_t base;
1260	struct ib_ucm_device *ucm_dev;
1261
1262	if (!device->alloc_ucontext || !rdma_cap_ib_cm(device, 1))
1263		return;
1264
1265	ucm_dev = kzalloc(sizeof *ucm_dev, GFP_KERNEL);
1266	if (!ucm_dev)
1267		return;
1268
1269	ucm_dev->ib_dev = device;
1270
1271	devnum = find_first_zero_bit(dev_map, IB_UCM_MAX_DEVICES);
1272	if (devnum >= IB_UCM_MAX_DEVICES) {
1273		devnum = find_overflow_devnum();
1274		if (devnum < 0)
1275			goto err;
1276
1277		ucm_dev->devnum = devnum + IB_UCM_MAX_DEVICES;
1278		base = devnum + overflow_maj;
1279		set_bit(devnum, overflow_map);
1280	} else {
1281		ucm_dev->devnum = devnum;
1282		base = devnum + IB_UCM_BASE_DEV;
1283		set_bit(devnum, dev_map);
1284	}
1285
1286	cdev_init(&ucm_dev->cdev, &ucm_fops);
1287	ucm_dev->cdev.owner = THIS_MODULE;
1288	kobject_set_name(&ucm_dev->cdev.kobj, "ucm%d", ucm_dev->devnum);
1289	if (cdev_add(&ucm_dev->cdev, base, 1))
1290		goto err;
1291
1292	ucm_dev->dev.class = &cm_class;
1293	ucm_dev->dev.parent = device->dma_device;
1294	ucm_dev->dev.devt = ucm_dev->cdev.dev;
1295	ucm_dev->dev.release = ib_ucm_release_dev;
1296	dev_set_name(&ucm_dev->dev, "ucm%d", ucm_dev->devnum);
1297	if (device_register(&ucm_dev->dev))
1298		goto err_cdev;
1299
1300	if (device_create_file(&ucm_dev->dev, &dev_attr_ibdev))
1301		goto err_dev;
1302
1303	ib_set_client_data(device, &ucm_client, ucm_dev);
1304	return;
1305
1306err_dev:
1307	device_unregister(&ucm_dev->dev);
1308err_cdev:
1309	cdev_del(&ucm_dev->cdev);
1310	if (ucm_dev->devnum < IB_UCM_MAX_DEVICES)
1311		clear_bit(devnum, dev_map);
1312	else
1313		clear_bit(devnum, overflow_map);
1314err:
1315	kfree(ucm_dev);
1316	return;
1317}
1318
1319static void ib_ucm_remove_one(struct ib_device *device, void *client_data)
1320{
1321	struct ib_ucm_device *ucm_dev = client_data;
1322
1323	if (!ucm_dev)
1324		return;
1325
1326	device_unregister(&ucm_dev->dev);
1327}
1328
1329static CLASS_ATTR_STRING(abi_version, S_IRUGO,
1330			 __stringify(IB_USER_CM_ABI_VERSION));
1331
1332static int __init ib_ucm_init(void)
1333{
1334	int ret;
1335
1336	ret = register_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES,
1337				     "infiniband_cm");
1338	if (ret) {
1339		pr_err("ucm: couldn't register device number\n");
1340		goto error1;
1341	}
1342
1343	ret = class_create_file(&cm_class, &class_attr_abi_version.attr);
1344	if (ret) {
1345		pr_err("ucm: couldn't create abi_version attribute\n");
1346		goto error2;
1347	}
1348
1349	ret = ib_register_client(&ucm_client);
1350	if (ret) {
1351		pr_err("ucm: couldn't register client\n");
1352		goto error3;
1353	}
1354	return 0;
1355
1356error3:
1357	class_remove_file(&cm_class, &class_attr_abi_version.attr);
1358error2:
1359	unregister_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES);
1360error1:
1361	return ret;
1362}
1363
1364static void __exit ib_ucm_cleanup(void)
1365{
1366	ib_unregister_client(&ucm_client);
1367	class_remove_file(&cm_class, &class_attr_abi_version.attr);
1368	unregister_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES);
1369	if (overflow_maj)
1370		unregister_chrdev_region(overflow_maj, IB_UCM_MAX_DEVICES);
1371	idr_destroy(&ctx_id_table);
1372}
1373
1374module_init(ib_ucm_init);
1375module_exit(ib_ucm_cleanup);