/* $Id: ioctl32.c,v 1.5 2002/10/18 00:21:43 varenet Exp $ * ioctl32.c: Conversion between 32bit and 64bit native ioctls. * * Copyright (C) 1997-2000 Jakub Jelinek (jakub@redhat.com) * Copyright (C) 1998 Eddie C. Dost (ecd@skynet.be) * * These routines maintain argument size conversion between 32bit and 64bit * ioctls. */ #include <linux/config.h> #include <linux/compat.h> #include <linux/ioctl.h> #include <linux/ioctl32.h> #include <linux/kernel.h> #include <linux/sched.h> #include <linux/smp.h> #include <linux/smp_lock.h> #include <linux/ioctl.h> #include <linux/if.h> #include <linux/slab.h> #include <linux/hdreg.h> #include <linux/raid/md.h> #include <linux/kd.h> #include <linux/route.h> #include <linux/skbuff.h> #include <linux/netlink.h> #include <linux/vt.h> #include <linux/fs.h> #include <linux/file.h> #include <linux/fd.h> #include <linux/ppp_defs.h> #include <linux/if_ppp.h> #include <linux/if_pppox.h> #include <linux/if_tun.h> #include <linux/mtio.h> #include <linux/cdrom.h> #include <linux/loop.h> #include <linux/auto_fs4.h> #include <linux/devfs_fs.h> #include <linux/ncp_fs.h> #include <linux/tty.h> #include <linux/vt_kern.h> #include <linux/fb.h> #include <linux/ext2_fs.h> #include <linux/videodev.h> #include <linux/netdevice.h> #include <linux/raw.h> #include <linux/smb_fs.h> #include <linux/blkpg.h> #include <linux/blk.h> #include <linux/elevator.h> #include <linux/rtc.h> #include <linux/pci.h> #include <linux/serial.h> #include <linux/watchdog.h> #include <net/sock.h> /* siocdevprivate_ioctl */ #include <scsi/scsi.h> /* Ugly hack. */ #undef __KERNEL__ #include <scsi/scsi_ioctl.h> #define __KERNEL__ #include <scsi/sg.h> #include <linux/raid/md_u.h> #include <linux/dm-ioctl.h> #include <asm/types.h> #include <asm/uaccess.h> #include <asm/perf.h> #include <linux/ethtool.h> #include <linux/soundcard.h> #include <linux/lp.h> #include <linux/atm.h> #include <linux/atmarp.h> #include <linux/atmclip.h> #include <linux/atmdev.h> #include <linux/atmioc.h> #include <linux/atmlec.h> #include <linux/atmmpc.h> #include <linux/atmsvc.h> #include <linux/atm_tcp.h> #include <linux/sonet.h> #include <linux/atm_suni.h> #include <linux/mtd/mtd.h> #include <net/bluetooth/bluetooth.h> #include <net/bluetooth/hci.h> #include <linux/usb.h> #include <linux/usbdevice_fs.h> #include <linux/nbd.h> #include <linux/random.h> #include <asm/ioctls.h> /* Use this to get at 32-bit user passed pointers. See sys_sparc32.c for description about these. */ #define A(__x) ((unsigned long)(__x)) /* The same for use with copy_from_user() and copy_to_user(). */ #define B(__x) ((void *)(unsigned long)(__x)) /* Aiee. Someone does not find a difference between int and long */ #define EXT2_IOC32_GETFLAGS _IOR('f', 1, int) #define EXT2_IOC32_SETFLAGS _IOW('f', 2, int) #define EXT2_IOC32_GETVERSION _IOR('v', 1, int) #define EXT2_IOC32_SETVERSION _IOW('v', 2, int) static int w_long(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); int err; unsigned long val; set_fs (KERNEL_DS); err = sys_ioctl(fd, cmd, (unsigned long)&val); set_fs (old_fs); if (!err && put_user(val, (u32 *)arg)) return -EFAULT; return err; } static int rw_long(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); int err; unsigned long val; if(get_user(val, (u32 *)arg)) return -EFAULT; set_fs (KERNEL_DS); err = sys_ioctl(fd, cmd, (unsigned long)&val); set_fs (old_fs); if (!err && put_user(val, (u32 *)arg)) return -EFAULT; return err; } static int do_ext2_ioctl(unsigned int fd, unsigned int cmd, unsigned long arg) { /* These are just misnamed, they actually get/put from/to user an int */ switch (cmd) { case EXT2_IOC32_GETFLAGS: cmd = EXT2_IOC_GETFLAGS; break; case EXT2_IOC32_SETFLAGS: cmd = EXT2_IOC_SETFLAGS; break; case EXT2_IOC32_GETVERSION: cmd = EXT2_IOC_GETVERSION; break; case EXT2_IOC32_SETVERSION: cmd = EXT2_IOC_SETVERSION; break; } return sys_ioctl(fd, cmd, arg); } static int do_siocgstamp(unsigned int fd, unsigned int cmd, unsigned long arg) { struct compat_timeval *up = (struct compat_timeval *)arg; struct timeval ktv; mm_segment_t old_fs = get_fs(); int err; set_fs(KERNEL_DS); err = sys_ioctl(fd, cmd, (unsigned long)&ktv); set_fs(old_fs); if(!err) { err = put_user(ktv.tv_sec, &up->tv_sec); err |= __put_user(ktv.tv_usec, &up->tv_usec); } return err; } struct ifmap32 { u32 mem_start; u32 mem_end; unsigned short base_addr; unsigned char irq; unsigned char dma; unsigned char port; }; struct ifreq32 { #define IFHWADDRLEN 6 #define IFNAMSIZ 16 union { char ifrn_name[IFNAMSIZ]; /* if name, e.g. "en0" */ } ifr_ifrn; union { struct sockaddr ifru_addr; struct sockaddr ifru_dstaddr; struct sockaddr ifru_broadaddr; struct sockaddr ifru_netmask; struct sockaddr ifru_hwaddr; short ifru_flags; int ifru_ivalue; int ifru_mtu; struct ifmap32 ifru_map; char ifru_slave[IFNAMSIZ]; /* Just fits the size */ char ifru_newname[IFNAMSIZ]; compat_caddr_t ifru_data; } ifr_ifru; }; struct ifconf32 { int ifc_len; /* size of buffer */ compat_caddr_t ifcbuf; }; static int dev_ifname32(unsigned int fd, unsigned int cmd, unsigned long arg) { struct net_device *dev; struct ifreq32 ifr32; int err; if (copy_from_user(&ifr32, (struct ifreq32 *)arg, sizeof(struct ifreq32))) return -EFAULT; dev = dev_get_by_index(ifr32.ifr_ifindex); if (!dev) return -ENODEV; strcpy(ifr32.ifr_name, dev->name); dev_put(dev); err = copy_to_user((struct ifreq32 *)arg, &ifr32, sizeof(struct ifreq32)); return (err ? -EFAULT : 0); } static inline int dev_ifconf(unsigned int fd, unsigned int cmd, unsigned long arg) { struct ifconf32 ifc32; struct ifconf ifc; struct ifreq32 *ifr32; struct ifreq *ifr; mm_segment_t old_fs; unsigned int i, j; int err; if (copy_from_user(&ifc32, (struct ifconf32 *)arg, sizeof(struct ifconf32))) return -EFAULT; if(ifc32.ifcbuf == 0) { ifc32.ifc_len = 0; ifc.ifc_len = 0; ifc.ifc_buf = NULL; } else { ifc.ifc_len = ((ifc32.ifc_len / sizeof (struct ifreq32)) + 1) * sizeof (struct ifreq); ifc.ifc_buf = kmalloc (ifc.ifc_len, GFP_KERNEL); if (!ifc.ifc_buf) return -ENOMEM; } ifr = ifc.ifc_req; ifr32 = (struct ifreq32 *)A(ifc32.ifcbuf); for (i = 0; i < ifc32.ifc_len; i += sizeof (struct ifreq32)) { if (copy_from_user(ifr++, ifr32++, sizeof (struct ifreq32))) { kfree (ifc.ifc_buf); return -EFAULT; } } old_fs = get_fs(); set_fs (KERNEL_DS); err = sys_ioctl (fd, SIOCGIFCONF, (unsigned long)&ifc); set_fs (old_fs); if (!err) { ifr = ifc.ifc_req; ifr32 = (struct ifreq32 *)A(ifc32.ifcbuf); for (i = 0, j = 0; i < ifc32.ifc_len && j < ifc.ifc_len; i += sizeof (struct ifreq32), j += sizeof (struct ifreq)) { if (copy_to_user(ifr32++, ifr++, sizeof (struct ifreq32))) { err = -EFAULT; break; } } if (!err) { if (i <= ifc32.ifc_len) ifc32.ifc_len = i; else ifc32.ifc_len = i - sizeof (struct ifreq32); if (copy_to_user((struct ifconf32 *)arg, &ifc32, sizeof(struct ifconf32))) err = -EFAULT; } } if(ifc.ifc_buf != NULL) kfree (ifc.ifc_buf); return err; } static int dev_ifsioc(unsigned int fd, unsigned int cmd, unsigned long arg) { struct ifreq ifr; mm_segment_t old_fs; int err; switch (cmd) { case SIOCSIFMAP: err = copy_from_user(&ifr, (struct ifreq32 *)arg, sizeof(ifr.ifr_name)); err |= __get_user(ifr.ifr_map.mem_start, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.mem_start)); err |= __get_user(ifr.ifr_map.mem_end, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.mem_end)); err |= __get_user(ifr.ifr_map.base_addr, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.base_addr)); err |= __get_user(ifr.ifr_map.irq, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.irq)); err |= __get_user(ifr.ifr_map.dma, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.dma)); err |= __get_user(ifr.ifr_map.port, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.port)); if (err) return -EFAULT; break; case SIOCGPPPSTATS: case SIOCGPPPCSTATS: case SIOCGPPPVER: case SIOCETHTOOL: if (copy_from_user(&ifr, (struct ifreq32 *)arg, sizeof(struct ifreq32))) return -EFAULT; ifr.ifr_data = (__kernel_caddr_t)get_zeroed_page(GFP_KERNEL); if (!ifr.ifr_data) return -EAGAIN; if(cmd == SIOCETHTOOL) { u32 data; __get_user(data, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_data)); if(copy_from_user(ifr.ifr_data, (char *)A(data), sizeof(struct ethtool_cmd))) { free_page((unsigned long)ifr.ifr_data); return -EFAULT; } } break; default: if (copy_from_user(&ifr, (struct ifreq32 *)arg, sizeof(struct ifreq32))) return -EFAULT; break; } old_fs = get_fs(); set_fs (KERNEL_DS); err = sys_ioctl (fd, cmd, (unsigned long)&ifr); set_fs (old_fs); if (!err) { switch (cmd) { case SIOCGIFFLAGS: case SIOCGIFMETRIC: case SIOCGIFMTU: case SIOCGIFMEM: case SIOCGIFHWADDR: case SIOCGIFINDEX: case SIOCGIFADDR: case SIOCGIFBRDADDR: case SIOCGIFDSTADDR: case SIOCGIFNETMASK: case SIOCGIFTXQLEN: if (copy_to_user((struct ifreq32 *)arg, &ifr, sizeof(struct ifreq32))) return -EFAULT; break; case SIOCGPPPSTATS: case SIOCGPPPCSTATS: case SIOCGPPPVER: case SIOCETHTOOL: { u32 data; int len; __get_user(data, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_data)); if(cmd == SIOCETHTOOL) len = sizeof(struct ethtool_cmd); if(cmd == SIOCGPPPVER) len = strlen((char *)ifr.ifr_data) + 1; else if(cmd == SIOCGPPPCSTATS) len = sizeof(struct ppp_comp_stats); else len = sizeof(struct ppp_stats); len = copy_to_user((char *)A(data), ifr.ifr_data, len); free_page((unsigned long)ifr.ifr_data); if(len) return -EFAULT; break; } case SIOCGIFMAP: err = copy_to_user((struct ifreq32 *)arg, &ifr, sizeof(ifr.ifr_name)); err |= __put_user(ifr.ifr_map.mem_start, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.mem_start)); err |= __put_user(ifr.ifr_map.mem_end, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.mem_end)); err |= __put_user(ifr.ifr_map.base_addr, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.base_addr)); err |= __put_user(ifr.ifr_map.irq, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.irq)); err |= __put_user(ifr.ifr_map.dma, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.dma)); err |= __put_user(ifr.ifr_map.port, &(((struct ifreq32 *)arg)->ifr_ifru.ifru_map.port)); if (err) err = -EFAULT; break; } } return err; } struct rtentry32 { u32 rt_pad1; struct sockaddr rt_dst; /* target address */ struct sockaddr rt_gateway; /* gateway addr (RTF_GATEWAY) */ struct sockaddr rt_genmask; /* target network mask (IP) */ unsigned short rt_flags; short rt_pad2; u32 rt_pad3; unsigned char rt_tos; unsigned char rt_class; short rt_pad4; short rt_metric; /* +1 for binary compatibility! */ /* char * */ u32 rt_dev; /* forcing the device at add */ u32 rt_mtu; /* per route MTU/Window */ u32 rt_window; /* Window clamping */ unsigned short rt_irtt; /* Initial RTT */ }; static inline int routing_ioctl(unsigned int fd, unsigned int cmd, unsigned long arg) { struct rtentry r; char devname[16]; u32 rtdev; int ret; mm_segment_t old_fs = get_fs(); ret = copy_from_user (&r.rt_dst, &(((struct rtentry32 *)arg)->rt_dst), 3 * sizeof(struct sockaddr)); ret |= __get_user (r.rt_flags, &(((struct rtentry32 *)arg)->rt_flags)); ret |= __get_user (r.rt_metric, &(((struct rtentry32 *)arg)->rt_metric)); ret |= __get_user (r.rt_mtu, &(((struct rtentry32 *)arg)->rt_mtu)); ret |= __get_user (r.rt_window, &(((struct rtentry32 *)arg)->rt_window)); ret |= __get_user (r.rt_irtt, &(((struct rtentry32 *)arg)->rt_irtt)); ret |= __get_user (rtdev, &(((struct rtentry32 *)arg)->rt_dev)); if (rtdev) { ret |= copy_from_user (devname, (char *)A(rtdev), 15); r.rt_dev = devname; devname[15] = 0; } else r.rt_dev = 0; if (ret) return -EFAULT; set_fs (KERNEL_DS); ret = sys_ioctl (fd, cmd, (long)&r); set_fs (old_fs); return ret; } struct hd_geometry32 { unsigned char heads; unsigned char sectors; unsigned short cylinders; u32 start; }; static inline int hdio_getgeo(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); struct hd_geometry geo; int err; set_fs (KERNEL_DS); err = sys_ioctl(fd, HDIO_GETGEO, (unsigned long)&geo); set_fs (old_fs); if (!err) { err = copy_to_user ((struct hd_geometry32 *)arg, &geo, 4); err |= __put_user (geo.start, &(((struct hd_geometry32 *)arg)->start)); } return err ? -EFAULT : 0; } #if 0 /* looks like SPARC only - eg sbus video */ struct fbcmap32 { int index; /* first element (0 origin) */ int count; u32 red; u32 green; u32 blue; }; static inline int fbiogetputcmap(unsigned int fd, unsigned int cmd, unsigned long arg) { struct fbcmap f; int ret; char red[256], green[256], blue[256]; u32 r, g, b; mm_segment_t old_fs = get_fs(); ret = get_user(f.index, &(((struct fbcmap32 *)arg)->index)); ret |= __get_user(f.count, &(((struct fbcmap32 *)arg)->count)); ret |= __get_user(r, &(((struct fbcmap32 *)arg)->red)); ret |= __get_user(g, &(((struct fbcmap32 *)arg)->green)); ret |= __get_user(b, &(((struct fbcmap32 *)arg)->blue)); if (ret) return -EFAULT; if ((f.index < 0) || (f.index > 255)) return -EINVAL; if (f.index + f.count > 256) f.count = 256 - f.index; if (cmd == FBIOPUTCMAP32) { ret = copy_from_user (red, (char *)A(r), f.count); ret |= copy_from_user (green, (char *)A(g), f.count); ret |= copy_from_user (blue, (char *)A(b), f.count); if (ret) return -EFAULT; } f.red = red; f.green = green; f.blue = blue; set_fs (KERNEL_DS); ret = sys_ioctl (fd, (cmd == FBIOPUTCMAP32) ? FBIOPUTCMAP_SPARC : FBIOGETCMAP_SPARC, (long)&f); set_fs (old_fs); if (!ret && cmd == FBIOGETCMAP32) { ret = copy_to_user ((char *)A(r), red, f.count); ret |= copy_to_user ((char *)A(g), green, f.count); ret |= copy_to_user ((char *)A(b), blue, f.count); } return ret ? -EFAULT : 0; } struct fbcursor32 { short set; /* what to set, choose from the list above */ short enable; /* cursor on/off */ struct fbcurpos pos; /* cursor position */ struct fbcurpos hot; /* cursor hot spot */ struct fbcmap32 cmap; /* color map info */ struct fbcurpos size; /* cursor bit map size */ u32 image; /* cursor image bits */ u32 mask; /* cursor mask bits */ }; static inline int fbiogscursor(unsigned int fd, unsigned int cmd, unsigned long arg) { struct fbcursor f; int ret; char red[2], green[2], blue[2]; char image[128], mask[128]; u32 r, g, b; u32 m, i; mm_segment_t old_fs = get_fs(); ret = copy_from_user (&f, (struct fbcursor32 *)arg, 2 * sizeof (short) + 2 * sizeof(struct fbcurpos)); ret |= __get_user(f.size.fbx, &(((struct fbcursor32 *)arg)->size.fbx)); ret |= __get_user(f.size.fby, &(((struct fbcursor32 *)arg)->size.fby)); ret |= __get_user(f.cmap.index, &(((struct fbcursor32 *)arg)->cmap.index)); ret |= __get_user(f.cmap.count, &(((struct fbcursor32 *)arg)->cmap.count)); ret |= __get_user(r, &(((struct fbcursor32 *)arg)->cmap.red)); ret |= __get_user(g, &(((struct fbcursor32 *)arg)->cmap.green)); ret |= __get_user(b, &(((struct fbcursor32 *)arg)->cmap.blue)); ret |= __get_user(m, &(((struct fbcursor32 *)arg)->mask)); ret |= __get_user(i, &(((struct fbcursor32 *)arg)->image)); if (ret) return -EFAULT; if (f.set & FB_CUR_SETCMAP) { if ((uint) f.size.fby > 32) return -EINVAL; ret = copy_from_user (mask, (char *)A(m), f.size.fby * 4); ret |= copy_from_user (image, (char *)A(i), f.size.fby * 4); if (ret) return -EFAULT; f.image = image; f.mask = mask; } if (f.set & FB_CUR_SETCMAP) { ret = copy_from_user (red, (char *)A(r), 2); ret |= copy_from_user (green, (char *)A(g), 2); ret |= copy_from_user (blue, (char *)A(b), 2); if (ret) return -EFAULT; f.cmap.red = red; f.cmap.green = green; f.cmap.blue = blue; } set_fs (KERNEL_DS); ret = sys_ioctl (fd, FBIOSCURSOR, (long)&f); set_fs (old_fs); return ret; } #endif /* 0 */ struct fb_fix_screeninfo32 { char id[16]; compat_caddr_t smem_start; __u32 smem_len; __u32 type; __u32 type_aux; __u32 visual; __u16 xpanstep; __u16 ypanstep; __u16 ywrapstep; __u32 line_length; compat_caddr_t mmio_start; __u32 mmio_len; __u32 accel; __u16 reserved[3]; }; struct fb_cmap32 { __u32 start; __u32 len; compat_caddr_t red; compat_caddr_t green; compat_caddr_t blue; compat_caddr_t transp; }; static int fb_ioctl_trans(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); u32 red = 0, green = 0, blue = 0, transp = 0; struct fb_fix_screeninfo fix; struct fb_cmap cmap; void *karg; int err = 0; memset(&cmap, 0, sizeof(cmap)); switch (cmd) { case FBIOGET_FSCREENINFO: karg = &fix; break; case FBIOGETCMAP: case FBIOPUTCMAP: karg = &cmap; err = __get_user(cmap.start, &((struct fb_cmap32 *)arg)->start); err |= __get_user(cmap.len, &((struct fb_cmap32 *)arg)->len); err |= __get_user(red, &((struct fb_cmap32 *)arg)->red); err |= __get_user(green, &((struct fb_cmap32 *)arg)->green); err |= __get_user(blue, &((struct fb_cmap32 *)arg)->blue); err |= __get_user(transp, &((struct fb_cmap32 *)arg)->transp); if (err) { err = -EFAULT; goto out; } err = -ENOMEM; cmap.red = kmalloc(cmap.len * sizeof(__u16), GFP_KERNEL); if (!cmap.red) goto out; cmap.green = kmalloc(cmap.len * sizeof(__u16), GFP_KERNEL); if (!cmap.green) goto out; cmap.blue = kmalloc(cmap.len * sizeof(__u16), GFP_KERNEL); if (!cmap.blue) goto out; if (transp) { cmap.transp = kmalloc(cmap.len * sizeof(__u16), GFP_KERNEL); if (!cmap.transp) goto out; } if (cmd == FBIOGETCMAP) break; err = __copy_from_user(cmap.red, (char *)A(red), cmap.len * sizeof(__u16)); err |= __copy_from_user(cmap.green, (char *)A(green), cmap.len * sizeof(__u16)); err |= __copy_from_user(cmap.blue, (char *)A(blue), cmap.len * sizeof(__u16)); if (cmap.transp) err |= __copy_from_user(cmap.transp, (char *)A(transp), cmap.len * sizeof(__u16)); if (err) { err = -EFAULT; goto out; } break; default: do { static int count = 0; if (++count <= 20) printk(KERN_WARNING "%s: Unknown fb ioctl cmd fd(%d) " "cmd(%08x) arg(%08lx)\n", __FUNCTION__, fd, cmd, arg); } while(0); return -ENOSYS; } set_fs(KERNEL_DS); err = sys_ioctl(fd, cmd, (unsigned long)karg); set_fs(old_fs); if (err) goto out; switch (cmd) { struct fb_fix_screeninfo32 fix32; case FBIOGET_FSCREENINFO: memset(&fix32, 0, sizeof(fix32)); memcpy(fix32.id, fix.id, sizeof(fix32.id)); fix32.smem_start = (__u32)(unsigned long)fix.smem_start; fix32.smem_len = fix.smem_len; fix32.type = fix.type; fix32.type_aux = fix.type_aux; fix32.visual = fix.visual; fix32.xpanstep = fix.xpanstep; fix32.ypanstep = fix.ypanstep; fix32.ywrapstep = fix.ywrapstep; fix32.line_length = fix.line_length; fix32.mmio_start = (__u32)(unsigned long)fix.mmio_start; fix32.mmio_len = fix.mmio_len; fix32.accel = fix.accel; memcpy(fix32.reserved, fix.reserved, sizeof(fix32.reserved)); err = __copy_to_user((void *) arg, (const void *) &fix32, sizeof(fix32)); printk("fix : %lx %x %x %x %x %x %x %x %x %lx %x %x\n", fix.smem_start, fix.smem_len, fix.type, fix.type_aux, fix.visual, fix.xpanstep, fix.ypanstep, fix.ywrapstep, fix.line_length, fix.mmio_start, fix.mmio_len, fix.accel); printk("fix32: %x %x %x %x %x %x %x %x %x %x %x %x\n", fix32.smem_start, fix32.smem_len, fix32.type, fix32.type_aux, fix32.visual, fix32.xpanstep, fix32.ypanstep, fix32.ywrapstep, fix32.line_length, fix32.mmio_start, fix32.mmio_len, fix32.accel); break; case FBIOGETCMAP: err = __copy_to_user((char *)A(red), cmap.red, cmap.len * sizeof(__u16)); err |= __copy_to_user((char *)A(green), cmap.blue, cmap.len * sizeof(__u16)); err |= __copy_to_user((char *)A(blue), cmap.blue, cmap.len * sizeof(__u16)); if (cmap.transp) err |= __copy_to_user((char *)A(transp), cmap.transp, cmap.len * sizeof(__u16)); break; case FBIOPUTCMAP: break; } if (err) err = -EFAULT; out: if (cmap.red) kfree(cmap.red); if (cmap.green) kfree(cmap.green); if (cmap.blue) kfree(cmap.blue); if (cmap.transp) kfree(cmap.transp); return err; } static int hdio_ioctl_trans(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); unsigned long kval; unsigned int *uvp; int error; set_fs(KERNEL_DS); error = sys_ioctl(fd, cmd, (long)&kval); set_fs(old_fs); if(error == 0) { uvp = (unsigned int *)arg; if(put_user(kval, uvp)) error = -EFAULT; } return error; } struct floppy_struct32 { unsigned int size; unsigned int sect; unsigned int head; unsigned int track; unsigned int stretch; unsigned char gap; unsigned char rate; unsigned char spec1; unsigned char fmt_gap; const compat_caddr_t name; }; struct floppy_drive_params32 { char cmos; u32 max_dtr; u32 hlt; u32 hut; u32 srt; u32 spinup; u32 spindown; unsigned char spindown_offset; unsigned char select_delay; unsigned char rps; unsigned char tracks; u32 timeout; unsigned char interleave_sect; struct floppy_max_errors max_errors; char flags; char read_track; short autodetect[8]; int checkfreq; int native_format; }; struct floppy_drive_struct32 { signed char flags; u32 spinup_date; u32 select_date; u32 first_read_date; short probed_format; short track; short maxblock; short maxtrack; int generation; int keep_data; int fd_ref; int fd_device; int last_checked; compat_caddr_t dmabuf; int bufblocks; }; struct floppy_fdc_state32 { int spec1; int spec2; int dtr; unsigned char version; unsigned char dor; u32 address; unsigned int rawcmd:2; unsigned int reset:1; unsigned int need_configure:1; unsigned int perp_mode:2; unsigned int has_fifo:1; unsigned int driver_version; unsigned char track[4]; }; struct floppy_write_errors32 { unsigned int write_errors; u32 first_error_sector; int first_error_generation; u32 last_error_sector; int last_error_generation; unsigned int badness; }; #define FDSETPRM32 _IOW(2, 0x42, struct floppy_struct32) #define FDDEFPRM32 _IOW(2, 0x43, struct floppy_struct32) #define FDGETPRM32 _IOR(2, 0x04, struct floppy_struct32) #define FDSETDRVPRM32 _IOW(2, 0x90, struct floppy_drive_params32) #define FDGETDRVPRM32 _IOR(2, 0x11, struct floppy_drive_params32) #define FDGETDRVSTAT32 _IOR(2, 0x12, struct floppy_drive_struct32) #define FDPOLLDRVSTAT32 _IOR(2, 0x13, struct floppy_drive_struct32) #define FDGETFDCSTAT32 _IOR(2, 0x15, struct floppy_fdc_state32) #define FDWERRORGET32 _IOR(2, 0x17, struct floppy_write_errors32) static struct { unsigned int cmd32; unsigned int cmd; } fd_ioctl_trans_table[] = { { FDSETPRM32, FDSETPRM }, { FDDEFPRM32, FDDEFPRM }, { FDGETPRM32, FDGETPRM }, { FDSETDRVPRM32, FDSETDRVPRM }, { FDGETDRVPRM32, FDGETDRVPRM }, { FDGETDRVSTAT32, FDGETDRVSTAT }, { FDPOLLDRVSTAT32, FDPOLLDRVSTAT }, { FDGETFDCSTAT32, FDGETFDCSTAT }, { FDWERRORGET32, FDWERRORGET } }; #define NR_FD_IOCTL_TRANS (sizeof(fd_ioctl_trans_table)/sizeof(fd_ioctl_trans_table[0])) static int fd_ioctl_trans(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); void *karg = NULL; unsigned int kcmd = 0; int i, err; for (i = 0; i < NR_FD_IOCTL_TRANS; i++) if (cmd == fd_ioctl_trans_table[i].cmd32) { kcmd = fd_ioctl_trans_table[i].cmd; break; } if (!kcmd) return -EINVAL; switch (cmd) { case FDSETPRM32: case FDDEFPRM32: case FDGETPRM32: { struct floppy_struct *f; f = karg = kmalloc(sizeof(struct floppy_struct), GFP_KERNEL); if (!karg) return -ENOMEM; if (cmd == FDGETPRM32) break; err = __get_user(f->size, &((struct floppy_struct32 *)arg)->size); err |= __get_user(f->sect, &((struct floppy_struct32 *)arg)->sect); err |= __get_user(f->head, &((struct floppy_struct32 *)arg)->head); err |= __get_user(f->track, &((struct floppy_struct32 *)arg)->track); err |= __get_user(f->stretch, &((struct floppy_struct32 *)arg)->stretch); err |= __get_user(f->gap, &((struct floppy_struct32 *)arg)->gap); err |= __get_user(f->rate, &((struct floppy_struct32 *)arg)->rate); err |= __get_user(f->spec1, &((struct floppy_struct32 *)arg)->spec1); err |= __get_user(f->fmt_gap, &((struct floppy_struct32 *)arg)->fmt_gap); err |= __get_user((u64)f->name, &((struct floppy_struct32 *)arg)->name); if (err) { err = -EFAULT; goto out; } break; } case FDSETDRVPRM32: case FDGETDRVPRM32: { struct floppy_drive_params *f; f = karg = kmalloc(sizeof(struct floppy_drive_params), GFP_KERNEL); if (!karg) return -ENOMEM; if (cmd == FDGETDRVPRM32) break; err = __get_user(f->cmos, &((struct floppy_drive_params32 *)arg)->cmos); err |= __get_user(f->max_dtr, &((struct floppy_drive_params32 *)arg)->max_dtr); err |= __get_user(f->hlt, &((struct floppy_drive_params32 *)arg)->hlt); err |= __get_user(f->hut, &((struct floppy_drive_params32 *)arg)->hut); err |= __get_user(f->srt, &((struct floppy_drive_params32 *)arg)->srt); err |= __get_user(f->spinup, &((struct floppy_drive_params32 *)arg)->spinup); err |= __get_user(f->spindown, &((struct floppy_drive_params32 *)arg)->spindown); err |= __get_user(f->spindown_offset, &((struct floppy_drive_params32 *)arg)->spindown_offset); err |= __get_user(f->select_delay, &((struct floppy_drive_params32 *)arg)->select_delay); err |= __get_user(f->rps, &((struct floppy_drive_params32 *)arg)->rps); err |= __get_user(f->tracks, &((struct floppy_drive_params32 *)arg)->tracks); err |= __get_user(f->timeout, &((struct floppy_drive_params32 *)arg)->timeout); err |= __get_user(f->interleave_sect, &((struct floppy_drive_params32 *)arg)->interleave_sect); err |= __copy_from_user(&f->max_errors, &((struct floppy_drive_params32 *)arg)->max_errors, sizeof(f->max_errors)); err |= __get_user(f->flags, &((struct floppy_drive_params32 *)arg)->flags); err |= __get_user(f->read_track, &((struct floppy_drive_params32 *)arg)->read_track); err |= __copy_from_user(f->autodetect, ((struct floppy_drive_params32 *)arg)->autodetect, sizeof(f->autodetect)); err |= __get_user(f->checkfreq, &((struct floppy_drive_params32 *)arg)->checkfreq); err |= __get_user(f->native_format, &((struct floppy_drive_params32 *)arg)->native_format); if (err) { err = -EFAULT; goto out; } break; } case FDGETDRVSTAT32: case FDPOLLDRVSTAT32: karg = kmalloc(sizeof(struct floppy_drive_struct), GFP_KERNEL); if (!karg) return -ENOMEM; break; case FDGETFDCSTAT32: karg = kmalloc(sizeof(struct floppy_fdc_state), GFP_KERNEL); if (!karg) return -ENOMEM; break; case FDWERRORGET32: karg = kmalloc(sizeof(struct floppy_write_errors), GFP_KERNEL); if (!karg) return -ENOMEM; break; default: return -EINVAL; } set_fs (KERNEL_DS); err = sys_ioctl (fd, kcmd, (unsigned long)karg); set_fs (old_fs); if (err) goto out; switch (cmd) { case FDGETPRM32: { struct floppy_struct *f = karg; err = __put_user(f->size, &((struct floppy_struct32 *)arg)->size); err |= __put_user(f->sect, &((struct floppy_struct32 *)arg)->sect); err |= __put_user(f->head, &((struct floppy_struct32 *)arg)->head); err |= __put_user(f->track, &((struct floppy_struct32 *)arg)->track); err |= __put_user(f->stretch, &((struct floppy_struct32 *)arg)->stretch); err |= __put_user(f->gap, &((struct floppy_struct32 *)arg)->gap); err |= __put_user(f->rate, &((struct floppy_struct32 *)arg)->rate); err |= __put_user(f->spec1, &((struct floppy_struct32 *)arg)->spec1); err |= __put_user(f->fmt_gap, &((struct floppy_struct32 *)arg)->fmt_gap); err |= __put_user((u64)f->name, &((struct floppy_struct32 *)arg)->name); break; } case FDGETDRVPRM32: { struct floppy_drive_params *f = karg; err = __put_user(f->cmos, &((struct floppy_drive_params32 *)arg)->cmos); err |= __put_user(f->max_dtr, &((struct floppy_drive_params32 *)arg)->max_dtr); err |= __put_user(f->hlt, &((struct floppy_drive_params32 *)arg)->hlt); err |= __put_user(f->hut, &((struct floppy_drive_params32 *)arg)->hut); err |= __put_user(f->srt, &((struct floppy_drive_params32 *)arg)->srt); err |= __put_user(f->spinup, &((struct floppy_drive_params32 *)arg)->spinup); err |= __put_user(f->spindown, &((struct floppy_drive_params32 *)arg)->spindown); err |= __put_user(f->spindown_offset, &((struct floppy_drive_params32 *)arg)->spindown_offset); err |= __put_user(f->select_delay, &((struct floppy_drive_params32 *)arg)->select_delay); err |= __put_user(f->rps, &((struct floppy_drive_params32 *)arg)->rps); err |= __put_user(f->tracks, &((struct floppy_drive_params32 *)arg)->tracks); err |= __put_user(f->timeout, &((struct floppy_drive_params32 *)arg)->timeout); err |= __put_user(f->interleave_sect, &((struct floppy_drive_params32 *)arg)->interleave_sect); err |= __copy_to_user(&((struct floppy_drive_params32 *)arg)->max_errors, &f->max_errors, sizeof(f->max_errors)); err |= __put_user(f->flags, &((struct floppy_drive_params32 *)arg)->flags); err |= __put_user(f->read_track, &((struct floppy_drive_params32 *)arg)->read_track); err |= __copy_to_user(((struct floppy_drive_params32 *)arg)->autodetect, f->autodetect, sizeof(f->autodetect)); err |= __put_user(f->checkfreq, &((struct floppy_drive_params32 *)arg)->checkfreq); err |= __put_user(f->native_format, &((struct floppy_drive_params32 *)arg)->native_format); break; } case FDGETDRVSTAT32: case FDPOLLDRVSTAT32: { struct floppy_drive_struct *f = karg; err = __put_user(f->flags, &((struct floppy_drive_struct32 *)arg)->flags); err |= __put_user(f->spinup_date, &((struct floppy_drive_struct32 *)arg)->spinup_date); err |= __put_user(f->select_date, &((struct floppy_drive_struct32 *)arg)->select_date); err |= __put_user(f->first_read_date, &((struct floppy_drive_struct32 *)arg)->first_read_date); err |= __put_user(f->probed_format, &((struct floppy_drive_struct32 *)arg)->probed_format); err |= __put_user(f->track, &((struct floppy_drive_struct32 *)arg)->track); err |= __put_user(f->maxblock, &((struct floppy_drive_struct32 *)arg)->maxblock); err |= __put_user(f->maxtrack, &((struct floppy_drive_struct32 *)arg)->maxtrack); err |= __put_user(f->generation, &((struct floppy_drive_struct32 *)arg)->generation); err |= __put_user(f->keep_data, &((struct floppy_drive_struct32 *)arg)->keep_data); err |= __put_user(f->fd_ref, &((struct floppy_drive_struct32 *)arg)->fd_ref); err |= __put_user(f->fd_device, &((struct floppy_drive_struct32 *)arg)->fd_device); err |= __put_user(f->last_checked, &((struct floppy_drive_struct32 *)arg)->last_checked); err |= __put_user((u64)f->dmabuf, &((struct floppy_drive_struct32 *)arg)->dmabuf); err |= __put_user((u64)f->bufblocks, &((struct floppy_drive_struct32 *)arg)->bufblocks); break; } case FDGETFDCSTAT32: { struct floppy_fdc_state *f = karg; err = __put_user(f->spec1, &((struct floppy_fdc_state32 *)arg)->spec1); err |= __put_user(f->spec2, &((struct floppy_fdc_state32 *)arg)->spec2); err |= __put_user(f->dtr, &((struct floppy_fdc_state32 *)arg)->dtr); err |= __put_user(f->version, &((struct floppy_fdc_state32 *)arg)->version); err |= __put_user(f->dor, &((struct floppy_fdc_state32 *)arg)->dor); err |= __put_user(f->address, &((struct floppy_fdc_state32 *)arg)->address); err |= __copy_to_user((char *)&((struct floppy_fdc_state32 *)arg)->address + sizeof(((struct floppy_fdc_state32 *)arg)->address), (char *)&f->address + sizeof(f->address), sizeof(int)); err |= __put_user(f->driver_version, &((struct floppy_fdc_state32 *)arg)->driver_version); err |= __copy_to_user(((struct floppy_fdc_state32 *)arg)->track, f->track, sizeof(f->track)); break; } case FDWERRORGET32: { struct floppy_write_errors *f = karg; err = __put_user(f->write_errors, &((struct floppy_write_errors32 *)arg)->write_errors); err |= __put_user(f->first_error_sector, &((struct floppy_write_errors32 *)arg)->first_error_sector); err |= __put_user(f->first_error_generation, &((struct floppy_write_errors32 *)arg)->first_error_generation); err |= __put_user(f->last_error_sector, &((struct floppy_write_errors32 *)arg)->last_error_sector); err |= __put_user(f->last_error_generation, &((struct floppy_write_errors32 *)arg)->last_error_generation); err |= __put_user(f->badness, &((struct floppy_write_errors32 *)arg)->badness); break; } default: break; } if (err) err = -EFAULT; out: if (karg) kfree(karg); return err; } struct ppp_option_data32 { compat_caddr_t ptr; __u32 length; int transmit; }; #define PPPIOCSCOMPRESS32 _IOW('t', 77, struct ppp_option_data32) struct ppp_idle32 { compat_time_t xmit_idle; compat_time_t recv_idle; }; #define PPPIOCGIDLE32 _IOR('t', 63, struct ppp_idle32) static int ppp_ioctl_trans(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); struct ppp_option_data32 data32; struct ppp_option_data data; struct ppp_idle32 idle32; struct ppp_idle idle; unsigned int kcmd; void *karg; int err = 0; switch (cmd) { case PPPIOCGIDLE32: kcmd = PPPIOCGIDLE; karg = &idle; break; case PPPIOCSCOMPRESS32: if (copy_from_user(&data32, (struct ppp_option_data32 *)arg, sizeof(struct ppp_option_data32))) return -EFAULT; data.ptr = kmalloc (data32.length, GFP_KERNEL); if (!data.ptr) return -ENOMEM; if (copy_from_user(data.ptr, (__u8 *)A(data32.ptr), data32.length)) { kfree(data.ptr); return -EFAULT; } data.length = data32.length; data.transmit = data32.transmit; kcmd = PPPIOCSCOMPRESS; karg = &data; break; default: do { static int count = 0; if (++count <= 20) printk(KERN_WARNING "ppp_ioctl: Unknown cmd fd(%d) " "cmd(%08x) arg(%08x)\n", (int)fd, (unsigned int)cmd, (unsigned int)arg); } while(0); return -EINVAL; } set_fs (KERNEL_DS); err = sys_ioctl (fd, kcmd, (unsigned long)karg); set_fs (old_fs); switch (cmd) { case PPPIOCGIDLE32: if (err) return err; idle32.xmit_idle = idle.xmit_idle; idle32.recv_idle = idle.recv_idle; if (copy_to_user((struct ppp_idle32 *)arg, &idle32, sizeof(struct ppp_idle32))) return -EFAULT; break; case PPPIOCSCOMPRESS32: kfree(data.ptr); break; default: break; } return err; } struct mtget32 { __u32 mt_type; __u32 mt_resid; __u32 mt_dsreg; __u32 mt_gstat; __u32 mt_erreg; compat_daddr_t mt_fileno; compat_daddr_t mt_blkno; }; #define MTIOCGET32 _IOR('m', 2, struct mtget32) struct mtpos32 { __u32 mt_blkno; }; #define MTIOCPOS32 _IOR('m', 3, struct mtpos32) struct mtconfiginfo32 { __u32 mt_type; __u32 ifc_type; __u16 irqnr; __u16 dmanr; __u16 port; __u32 debug; __u32 have_dens:1; __u32 have_bsf:1; __u32 have_fsr:1; __u32 have_bsr:1; __u32 have_eod:1; __u32 have_seek:1; __u32 have_tell:1; __u32 have_ras1:1; __u32 have_ras2:1; __u32 have_ras3:1; __u32 have_qfa:1; __u32 pad1:5; char reserved[10]; }; #define MTIOCGETCONFIG32 _IOR('m', 4, struct mtconfiginfo32) #define MTIOCSETCONFIG32 _IOW('m', 5, struct mtconfiginfo32) static int mt_ioctl_trans(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); struct mtconfiginfo info; struct mtget get; struct mtpos pos; unsigned long kcmd; void *karg; int err = 0; switch(cmd) { case MTIOCPOS32: kcmd = MTIOCPOS; karg = &pos; break; case MTIOCGET32: kcmd = MTIOCGET; karg = &get; break; case MTIOCGETCONFIG32: kcmd = MTIOCGETCONFIG; karg = &info; break; case MTIOCSETCONFIG32: kcmd = MTIOCSETCONFIG; karg = &info; err = __get_user(info.mt_type, &((struct mtconfiginfo32 *)arg)->mt_type); err |= __get_user(info.ifc_type, &((struct mtconfiginfo32 *)arg)->ifc_type); err |= __get_user(info.irqnr, &((struct mtconfiginfo32 *)arg)->irqnr); err |= __get_user(info.dmanr, &((struct mtconfiginfo32 *)arg)->dmanr); err |= __get_user(info.port, &((struct mtconfiginfo32 *)arg)->port); err |= __get_user(info.debug, &((struct mtconfiginfo32 *)arg)->debug); err |= __copy_from_user((char *)&info.debug + sizeof(info.debug), (char *)&((struct mtconfiginfo32 *)arg)->debug + sizeof(((struct mtconfiginfo32 *)arg)->debug), sizeof(__u32)); if (err) return -EFAULT; break; default: do { static int count = 0; if (++count <= 20) printk(KERN_WARNING "mt_ioctl: Unknown cmd fd(%d) " "cmd(%08x) arg(%08x)\n", (int)fd, (unsigned int)cmd, (unsigned int)arg); } while(0); return -EINVAL; } set_fs (KERNEL_DS); err = sys_ioctl (fd, kcmd, (unsigned long)karg); set_fs (old_fs); if (err) return err; switch (cmd) { case MTIOCPOS32: err = __put_user(pos.mt_blkno, &((struct mtpos32 *)arg)->mt_blkno); break; case MTIOCGET32: err = __put_user(get.mt_type, &((struct mtget32 *)arg)->mt_type); err |= __put_user(get.mt_resid, &((struct mtget32 *)arg)->mt_resid); err |= __put_user(get.mt_dsreg, &((struct mtget32 *)arg)->mt_dsreg); err |= __put_user(get.mt_gstat, &((struct mtget32 *)arg)->mt_gstat); err |= __put_user(get.mt_erreg, &((struct mtget32 *)arg)->mt_erreg); err |= __put_user(get.mt_fileno, &((struct mtget32 *)arg)->mt_fileno); err |= __put_user(get.mt_blkno, &((struct mtget32 *)arg)->mt_blkno); break; case MTIOCGETCONFIG32: err = __put_user(info.mt_type, &((struct mtconfiginfo32 *)arg)->mt_type); err |= __put_user(info.ifc_type, &((struct mtconfiginfo32 *)arg)->ifc_type); err |= __put_user(info.irqnr, &((struct mtconfiginfo32 *)arg)->irqnr); err |= __put_user(info.dmanr, &((struct mtconfiginfo32 *)arg)->dmanr); err |= __put_user(info.port, &((struct mtconfiginfo32 *)arg)->port); err |= __put_user(info.debug, &((struct mtconfiginfo32 *)arg)->debug); err |= __copy_to_user((char *)&((struct mtconfiginfo32 *)arg)->debug + sizeof(((struct mtconfiginfo32 *)arg)->debug), (char *)&info.debug + sizeof(info.debug), sizeof(__u32)); break; case MTIOCSETCONFIG32: break; } return err ? -EFAULT: 0; } struct cdrom_read32 { int cdread_lba; compat_caddr_t cdread_bufaddr; int cdread_buflen; }; struct cdrom_read_audio32 { union cdrom_addr addr; u_char addr_format; int nframes; compat_caddr_t buf; }; struct cdrom_generic_command32 { unsigned char cmd[CDROM_PACKET_SIZE]; compat_caddr_t buffer; unsigned int buflen; int stat; compat_caddr_t sense; compat_caddr_t reserved[3]; }; static int cdrom_ioctl_trans(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); struct cdrom_read cdread; struct cdrom_read_audio cdreadaudio; struct cdrom_generic_command cgc; compat_caddr_t addr; char *data = 0; void *karg; int err = 0; switch(cmd) { case CDROMREADMODE2: case CDROMREADMODE1: case CDROMREADRAW: case CDROMREADCOOKED: karg = &cdread; err = __get_user(cdread.cdread_lba, &((struct cdrom_read32 *)arg)->cdread_lba); err |= __get_user(addr, &((struct cdrom_read32 *)arg)->cdread_bufaddr); err |= __get_user(cdread.cdread_buflen, &((struct cdrom_read32 *)arg)->cdread_buflen); if (err) return -EFAULT; data = kmalloc(cdread.cdread_buflen, GFP_KERNEL); if (!data) return -ENOMEM; cdread.cdread_bufaddr = data; break; case CDROMREADAUDIO: karg = &cdreadaudio; err = copy_from_user(&cdreadaudio.addr, &((struct cdrom_read_audio32 *)arg)->addr, sizeof(cdreadaudio.addr)); err |= __get_user(cdreadaudio.addr_format, &((struct cdrom_read_audio32 *)arg)->addr_format); err |= __get_user(cdreadaudio.nframes, &((struct cdrom_read_audio32 *)arg)->nframes); err |= __get_user(addr, &((struct cdrom_read_audio32 *)arg)->buf); if (err) return -EFAULT; data = kmalloc(cdreadaudio.nframes * 2352, GFP_KERNEL); if (!data) return -ENOMEM; cdreadaudio.buf = data; break; case CDROM_SEND_PACKET: karg = &cgc; err = copy_from_user(cgc.cmd, &((struct cdrom_generic_command32 *)arg)->cmd, sizeof(cgc.cmd)); err |= __get_user(addr, &((struct cdrom_generic_command32 *)arg)->buffer); err |= __get_user(cgc.buflen, &((struct cdrom_generic_command32 *)arg)->buflen); if (err) return -EFAULT; if ((data = kmalloc(cgc.buflen, GFP_KERNEL)) == NULL) return -ENOMEM; cgc.buffer = data; break; default: do { static int count = 0; if (++count <= 20) printk(KERN_WARNING "cdrom_ioctl: Unknown cmd fd(%d) " "cmd(%08x) arg(%08x)\n", (int)fd, (unsigned int)cmd, (unsigned int)arg); } while(0); return -EINVAL; } set_fs (KERNEL_DS); err = sys_ioctl (fd, cmd, (unsigned long)karg); set_fs (old_fs); if (err) goto out; switch (cmd) { case CDROMREADMODE2: case CDROMREADMODE1: case CDROMREADRAW: case CDROMREADCOOKED: err = copy_to_user((char *)A(addr), data, cdread.cdread_buflen); break; case CDROMREADAUDIO: err = copy_to_user((char *)A(addr), data, cdreadaudio.nframes * 2352); break; case CDROM_SEND_PACKET: err = copy_to_user((char *)A(addr), data, cgc.buflen); break; default: break; } out: if (data) kfree(data); return err ? -EFAULT : 0; } struct loop_info32 { int lo_number; /* ioctl r/o */ compat_dev_t lo_device; /* ioctl r/o */ unsigned int lo_inode; /* ioctl r/o */ compat_dev_t lo_rdevice; /* ioctl r/o */ int lo_offset; int lo_encrypt_type; int lo_encrypt_key_size; /* ioctl w/o */ int lo_flags; /* ioctl r/o */ char lo_name[LO_NAME_SIZE]; unsigned char lo_encrypt_key[LO_KEY_SIZE]; /* ioctl w/o */ unsigned int lo_init[2]; char reserved[4]; }; static int loop_status(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); struct loop_info l; int err = -EINVAL; switch(cmd) { case LOOP_SET_STATUS: err = get_user(l.lo_number, &((struct loop_info32 *)arg)->lo_number); err |= __get_user(l.lo_device, &((struct loop_info32 *)arg)->lo_device); err |= __get_user(l.lo_inode, &((struct loop_info32 *)arg)->lo_inode); err |= __get_user(l.lo_rdevice, &((struct loop_info32 *)arg)->lo_rdevice); err |= __copy_from_user((char *)&l.lo_offset, (char *)&((struct loop_info32 *)arg)->lo_offset, 8 + (unsigned long)l.lo_init - (unsigned long)&l.lo_offset); if (err) { err = -EFAULT; } else { set_fs (KERNEL_DS); err = sys_ioctl (fd, cmd, (unsigned long)&l); set_fs (old_fs); } break; case LOOP_GET_STATUS: set_fs (KERNEL_DS); err = sys_ioctl (fd, cmd, (unsigned long)&l); set_fs (old_fs); if (!err) { err = put_user(l.lo_number, &((struct loop_info32 *)arg)->lo_number); err |= __put_user(l.lo_device, &((struct loop_info32 *)arg)->lo_device); err |= __put_user(l.lo_inode, &((struct loop_info32 *)arg)->lo_inode); err |= __put_user(l.lo_rdevice, &((struct loop_info32 *)arg)->lo_rdevice); err |= __copy_to_user((char *)&((struct loop_info32 *)arg)->lo_offset, (char *)&l.lo_offset, (unsigned long)l.lo_init - (unsigned long)&l.lo_offset); if (err) err = -EFAULT; } break; default: { static int count = 0; if (++count <= 20) printk(KERN_WARNING "%s: Unknown loop ioctl cmd, fd(%d) " "cmd(%08x) arg(%08lx)\n", __FUNCTION__, fd, cmd, arg); } } return err; } #ifdef CONFIG_VT extern int tty_ioctl(struct inode * inode, struct file * file, unsigned int cmd, unsigned long arg); static int vt_check(struct file *file) { struct tty_struct *tty; struct inode *inode = file->f_dentry->d_inode; if (file->f_op->ioctl != tty_ioctl) return -EINVAL; tty = (struct tty_struct *)file->private_data; if (tty_paranoia_check(tty, inode->i_rdev, "tty_ioctl")) return -EINVAL; if (tty->driver->ioctl != vt_ioctl) return -EINVAL; /* * To have permissions to do most of the vt ioctls, we either have * to be the owner of the tty, or have CAP_SYS_TTY_CONFIG */ if (current->tty == tty || capable(CAP_SYS_TTY_CONFIG)) return 1; return 0; } struct consolefontdesc32 { unsigned short charcount; /* characters in font (256 or 512) */ unsigned short charheight; /* scan lines per character (1-32) */ u32 chardata; /* font data in expanded form */ }; static int do_fontx_ioctl(unsigned int fd, int cmd, struct consolefontdesc32 *user_cfd, struct file *file) { struct consolefontdesc cfdarg; struct console_font_op op; int i, perm; perm = vt_check(file); if (perm < 0) return perm; if (copy_from_user(&cfdarg, user_cfd, sizeof(struct consolefontdesc32))) return -EFAULT; cfdarg.chardata = (unsigned char *)A(((struct consolefontdesc32 *)&cfdarg)->chardata); switch (cmd) { case PIO_FONTX: if (!perm) return -EPERM; op.op = KD_FONT_OP_SET; op.flags = 0; op.width = 8; op.height = cfdarg.charheight; op.charcount = cfdarg.charcount; op.data = cfdarg.chardata; return con_font_op(fg_console, &op); case GIO_FONTX: if (!cfdarg.chardata) return 0; op.op = KD_FONT_OP_GET; op.flags = 0; op.width = 8; op.height = cfdarg.charheight; op.charcount = cfdarg.charcount; op.data = cfdarg.chardata; i = con_font_op(fg_console, &op); if (i) return i; cfdarg.charheight = op.height; cfdarg.charcount = op.charcount; ((struct consolefontdesc32 *)&cfdarg)->chardata = (unsigned long)cfdarg.chardata; if (copy_to_user(user_cfd, &cfdarg, sizeof(struct consolefontdesc32))) return -EFAULT; return 0; } return -EINVAL; } struct console_font_op32 { unsigned int op; /* operation code KD_FONT_OP_* */ unsigned int flags; /* KD_FONT_FLAG_* */ unsigned int width, height; /* font size */ unsigned int charcount; u32 data; /* font data with height fixed to 32 */ }; static int do_kdfontop_ioctl(unsigned int fd, unsigned int cmd, struct console_font_op32 *fontop, struct file *file) { struct console_font_op op; int perm = vt_check(file), i; struct vt_struct *vt; if (perm < 0) return perm; if (copy_from_user(&op, (void *) fontop, sizeof(struct console_font_op32))) return -EFAULT; if (!perm && op.op != KD_FONT_OP_GET) return -EPERM; op.data = (unsigned char *)A(((struct console_font_op32 *)&op)->data); op.flags |= KD_FONT_FLAG_OLD; vt = (struct vt_struct *)((struct tty_struct *)file->private_data)->driver_data; i = con_font_op(vt->vc_num, &op); if (i) return i; ((struct console_font_op32 *)&op)->data = (unsigned long)op.data; if (copy_to_user((void *) fontop, &op, sizeof(struct console_font_op32))) return -EFAULT; return 0; } struct unimapdesc32 { unsigned short entry_ct; u32 entries; }; static int do_unimap_ioctl(unsigned int fd, unsigned int cmd, struct unimapdesc32 *user_ud, struct file *file) { struct unimapdesc32 tmp; int perm = vt_check(file); if (perm < 0) return perm; if (copy_from_user(&tmp, user_ud, sizeof tmp)) return -EFAULT; switch (cmd) { case PIO_UNIMAP: if (!perm) return -EPERM; return con_set_unimap(fg_console, tmp.entry_ct, (struct unipair *)A(tmp.entries)); case GIO_UNIMAP: return con_get_unimap(fg_console, tmp.entry_ct, &(user_ud->entry_ct), (struct unipair *)A(tmp.entries)); } return 0; } #endif #if 0 static int do_smb_getmountuid(unsigned int fd, unsigned int cmd, unsigned long arg) { mm_segment_t old_fs = get_fs(); __kernel_uid_t kuid; int err; cmd = SMB_IOC_GETMOUNTUID; set_fs(KERNEL_DS); err = sys_ioctl(fd, cmd, (unsigned long)&kuid); set_fs(old_fs); if (err >= 0) err = put_user(kuid, (compat_uid_t *)arg); return err; } #endif struct atmif_sioc32 { int number; int length; compat_caddr_t arg; }; struct atm_iobuf32 { int length; compat_caddr_t buffer; }; #define ATM_GETLINKRATE32 _IOW('a', ATMIOC_ITF+1, struct atmif_sioc32) #define ATM_GETNAMES32 _IOW('a', ATMIOC_ITF+3, struct atm_iobuf32) #define ATM_GETTYPE32 _IOW('a', ATMIOC_ITF+4, struct atmif_sioc32) #define ATM_GETESI32 _IOW('a', ATMIOC_ITF+5, struct atmif_sioc32) #define ATM_GETADDR32 _IOW('a', ATMIOC_ITF+6, struct atmif_sioc32) #define ATM_RSTADDR32 _IOW('a', ATMIOC_ITF+7, struct atmif_sioc32) #define ATM_ADDADDR32 _IOW('a', ATMIOC_ITF+8, struct atmif_sioc32) #define ATM_DELADDR32 _IOW('a', ATMIOC_ITF+9, struct atmif_sioc32) #define ATM_GETCIRANGE32 _IOW('a', ATMIOC_ITF+10, struct atmif_sioc32) #define ATM_SETCIRANGE32 _IOW('a', ATMIOC_ITF+11, struct atmif_sioc32) #define ATM_SETESI32 _IOW('a', ATMIOC_ITF+12, struct atmif_sioc32) #define ATM_SETESIF32 _IOW('a', ATMIOC_ITF+13, struct atmif_sioc32) #define ATM_GETSTAT32 _IOW('a', ATMIOC_SARCOM+0, struct atmif_sioc32) #define ATM_GETSTATZ32 _IOW('a', ATMIOC_SARCOM+1, struct atmif_sioc32) #define ATM_GETLOOP32 _IOW('a', ATMIOC_SARCOM+2, struct atmif_sioc32) #define ATM_SETLOOP32 _IOW('a', ATMIOC_SARCOM+3, struct atmif_sioc32) #define ATM_QUERYLOOP32 _IOW('a', ATMIOC_SARCOM+4, struct atmif_sioc32) static struct { unsigned int cmd32; unsigned int cmd; } atm_ioctl_map[] = { { ATM_GETLINKRATE32, ATM_GETLINKRATE }, { ATM_GETNAMES32, ATM_GETNAMES }, { ATM_GETTYPE32, ATM_GETTYPE }, { ATM_GETESI32, ATM_GETESI }, { ATM_GETADDR32, ATM_GETADDR }, { ATM_RSTADDR32, ATM_RSTADDR }, { ATM_ADDADDR32, ATM_ADDADDR }, { ATM_DELADDR32, ATM_DELADDR }, { ATM_GETCIRANGE32, ATM_GETCIRANGE }, { ATM_SETCIRANGE32, ATM_SETCIRANGE }, { ATM_SETESI32, ATM_SETESI }, { ATM_SETESIF32, ATM_SETESIF }, { ATM_GETSTAT32, ATM_GETSTAT }, { ATM_GETSTATZ32, ATM_GETSTATZ }, { ATM_GETLOOP32, ATM_GETLOOP }, { ATM_SETLOOP32, ATM_SETLOOP }, { ATM_QUERYLOOP32, ATM_QUERYLOOP } }; #define NR_ATM_IOCTL (sizeof(atm_ioctl_map)/sizeof(atm_ioctl_map[0])) static int do_atm_iobuf(unsigned int fd, unsigned int cmd, unsigned long arg) { struct atm_iobuf32 iobuf32; struct atm_iobuf iobuf = { 0, NULL }; mm_segment_t old_fs; int err; err = copy_from_user(&iobuf32, (struct atm_iobuf32*)arg, sizeof(struct atm_iobuf32)); if (err) return -EFAULT; iobuf.length = iobuf32.length; if (iobuf32.buffer == (compat_caddr_t) NULL || iobuf32.length == 0) { iobuf.buffer = (void*)(unsigned long)iobuf32.buffer; } else { iobuf.buffer = kmalloc(iobuf.length, GFP_KERNEL); if (iobuf.buffer == NULL) { err = -ENOMEM; goto out; } err = copy_from_user(iobuf.buffer, B(iobuf32.buffer), iobuf.length); if (err) { err = -EFAULT; goto out; } } old_fs = get_fs(); set_fs (KERNEL_DS); err = sys_ioctl (fd, cmd, (unsigned long)&iobuf); set_fs (old_fs); if(err) goto out; if(iobuf.buffer && iobuf.length > 0) { err = copy_to_user(B(iobuf32.buffer), iobuf.buffer, iobuf.length); if (err) { err = -EFAULT; goto out; } } err = __put_user(iobuf.length, &(((struct atm_iobuf32*)arg)->length)); out: if(iobuf32.buffer && iobuf32.length > 0) kfree(iobuf.buffer); return err; } static int do_atmif_sioc(unsigned int fd, unsigned int cmd, unsigned long arg) { struct atmif_sioc32 sioc32; struct atmif_sioc sioc = { 0, 0, NULL }; mm_segment_t old_fs; int err; err = copy_from_user(&sioc32, (struct atmif_sioc32*)arg, sizeof(struct atmif_sioc32)); if (err) return -EFAULT; sioc.number = sioc32.number; sioc.length = sioc32.length; if (sioc32.arg == (compat_caddr_t) NULL || sioc32.length == 0) { sioc.arg = (void*)(unsigned long)sioc32.arg; } else { sioc.arg = kmalloc(sioc.length, GFP_KERNEL); if (sioc.arg == NULL) { err = -ENOMEM; goto out; } err = copy_from_user(sioc.arg, B(sioc32.arg), sioc32.length); if (err) { err = -EFAULT; goto out; } } old_fs = get_fs(); set_fs (KERNEL_DS); err = sys_ioctl (fd, cmd, (unsigned long)&sioc); set_fs (old_fs); if(err) { goto out; } if(sioc.arg && sioc.length > 0) { err = copy_to_user(B(sioc32.arg), sioc.arg, sioc.length); if (err) { err = -EFAULT; goto out; } } err = __put_user(sioc.length, &(((struct atmif_sioc32*)arg)->length)); out: if(sioc32.arg && sioc32.length > 0) kfree(sioc.arg); return err; } static int do_atm_ioctl(unsigned int fd, unsigned int cmd32, unsigned long arg) { int i; unsigned int cmd = 0; switch (cmd32) { case SONET_GETSTAT: case SONET_GETSTATZ: case SONET_GETDIAG: case SONET_SETDIAG: case SONET_CLRDIAG: case SONET_SETFRAMING: case SONET_GETFRAMING: case SONET_GETFRSENSE: return do_atmif_sioc(fd, cmd32, arg); } for (i = 0; i < NR_ATM_IOCTL; i++) { if (cmd32 == atm_ioctl_map[i].cmd32) { cmd = atm_ioctl_map[i].cmd; break; } } if (i == NR_ATM_IOCTL) { return -EINVAL; } switch (cmd) { case ATM_GETNAMES: return do_atm_iobuf(fd, cmd, arg); case ATM_GETLINKRATE: case ATM_GETTYPE: case ATM_GETESI: case ATM_GETADDR: case ATM_RSTADDR: case ATM_ADDADDR: case ATM_DELADDR: case ATM_GETCIRANGE: case ATM_SETCIRANGE: case ATM_SETESI: case ATM_SETESIF: case ATM_GETSTAT: case ATM_GETSTATZ: case ATM_GETLOOP: case ATM_SETLOOP: case ATM_QUERYLOOP: return do_atmif_sioc(fd, cmd, arg); } return -EINVAL; } #if defined(CONFIG_DRM) || defined(CONFIG_DRM_MODULE) /* This really belongs in include/linux/drm.h -DaveM */ #include "../../../drivers/char/drm/drm.h" typedef struct drm32_version { int version_major; /* Major version */ int version_minor; /* Minor version */ int version_patchlevel;/* Patch level */ int name_len; /* Length of name buffer */ u32 name; /* Name of driver */ int date_len; /* Length of date buffer */ u32 date; /* User-space buffer to hold date */ int desc_len; /* Length of desc buffer */ u32 desc; /* User-space buffer to hold desc */ } drm32_version_t; #define DRM32_IOCTL_VERSION DRM_IOWR(0x00, drm32_version_t) static int drm32_version(unsigned int fd, unsigned int cmd, unsigned long arg) { drm32_version_t *uversion = (drm32_version_t *)arg; char *name_ptr, *date_ptr, *desc_ptr; u32 tmp1, tmp2, tmp3; drm_version_t kversion; mm_segment_t old_fs; int ret; memset(&kversion, 0, sizeof(kversion)); if (get_user(kversion.name_len, &uversion->name_len) || get_user(kversion.date_len, &uversion->date_len) || get_user(kversion.desc_len, &uversion->desc_len) || get_user(tmp1, &uversion->name) || get_user(tmp2, &uversion->date) || get_user(tmp3, &uversion->desc)) return -EFAULT; name_ptr = (char *) A(tmp1); date_ptr = (char *) A(tmp2); desc_ptr = (char *) A(tmp3); ret = -ENOMEM; if (kversion.name_len && name_ptr) { kversion.name = kmalloc(kversion.name_len, GFP_KERNEL); if (!kversion.name) goto out; } if (kversion.date_len && date_ptr) { kversion.date = kmalloc(kversion.date_len, GFP_KERNEL); if (!kversion.date) goto out; } if (kversion.desc_len && desc_ptr) { kversion.desc = kmalloc(kversion.desc_len, GFP_KERNEL); if (!kversion.desc) goto out; } old_fs = get_fs(); set_fs(KERNEL_DS); ret = sys_ioctl (fd, DRM_IOCTL_VERSION, (unsigned long)&kversion); set_fs(old_fs); if (!ret) { if ((kversion.name && copy_to_user(name_ptr, kversion.name, kversion.name_len)) || (kversion.date && copy_to_user(date_ptr, kversion.date, kversion.date_len)) || (kversion.desc && copy_to_user(desc_ptr, kversion.desc, kversion.desc_len))) ret = -EFAULT; if (put_user(kversion.version_major, &uversion->version_major) || put_user(kversion.version_minor, &uversion->version_minor) || put_user(kversion.version_patchlevel, &uversion->version_patchlevel) || put_user(kversion.name_len, &uversion->name_len) || put_user(kversion.date_len, &uversion->date_len) || put_user(kversion.desc_len, &uversion->desc_len)) ret = -EFAULT; } out: if (kversion.name) kfree(kversion.name); if (kversion.date) kfree(kversion.date); if (kversion.desc) kfree(kversion.desc); return ret; } typedef struct drm32_unique { int unique_len; /* Length of unique */ u32 unique; /* Unique name for driver instantiation */ } drm32_unique_t; #define DRM32_IOCTL_GET_UNIQUE DRM_IOWR(0x01, drm32_unique_t) #define DRM32_IOCTL_SET_UNIQUE DRM_IOW( 0x10, drm32_unique_t) static int drm32_getsetunique(unsigned int fd, unsigned int cmd, unsigned long arg) { drm32_unique_t *uarg = (drm32_unique_t *)arg; drm_unique_t karg; mm_segment_t old_fs; char *uptr; u32 tmp; int ret; if (get_user(karg.unique_len, &uarg->unique_len)) return -EFAULT; karg.unique = NULL; if (get_user(tmp, &uarg->unique)) return -EFAULT; uptr = (char *) A(tmp); if (uptr) { karg.unique = kmalloc(karg.unique_len, GFP_KERNEL); if (!karg.unique) return -ENOMEM; if (cmd == DRM32_IOCTL_SET_UNIQUE && copy_from_user(karg.unique, uptr, karg.unique_len)) { kfree(karg.unique); return -EFAULT; } } old_fs = get_fs(); set_fs(KERNEL_DS); if (cmd == DRM32_IOCTL_GET_UNIQUE) ret = sys_ioctl (fd, DRM_IOCTL_GET_UNIQUE, (unsigned long)&karg); else ret = sys_ioctl (fd, DRM_IOCTL_SET_UNIQUE, (unsigned long)&karg); set_fs(old_fs); if (!ret) { if (cmd == DRM32_IOCTL_GET_UNIQUE && uptr != NULL && copy_to_user(uptr, karg.unique, karg.unique_len)) ret = -EFAULT; if (put_user(karg.unique_len, &uarg->unique_len)) ret = -EFAULT; } if (karg.unique != NULL) kfree(karg.unique); return ret; } typedef struct drm32_map { u32 offset; /* Requested physical address (0 for SAREA)*/ u32 size; /* Requested physical size (bytes) */ drm_map_type_t type; /* Type of memory to map */ drm_map_flags_t flags; /* Flags */ u32 handle; /* User-space: "Handle" to pass to mmap */ /* Kernel-space: kernel-virtual address */ int mtrr; /* MTRR slot used */ /* Private data */ } drm32_map_t; #define DRM32_IOCTL_ADD_MAP DRM_IOWR(0x15, drm32_map_t) static int drm32_addmap(unsigned int fd, unsigned int cmd, unsigned long arg) { drm32_map_t *uarg = (drm32_map_t *) arg; drm_map_t karg; mm_segment_t old_fs; u32 tmp; int ret; ret = get_user(karg.offset, &uarg->offset); ret |= get_user(karg.size, &uarg->size); ret |= get_user(karg.type, &uarg->type); ret |= get_user(karg.flags, &uarg->flags); ret |= get_user(tmp, &uarg->handle); ret |= get_user(karg.mtrr, &uarg->mtrr); if (ret) return -EFAULT; karg.handle = (void *) A(tmp); old_fs = get_fs(); set_fs(KERNEL_DS); ret = sys_ioctl(fd, DRM_IOCTL_ADD_MAP, (unsigned long) &karg); set_fs(old_fs); if (!ret) { ret = put_user(karg.offset, &uarg->offset); ret |= put_user(karg.size, &uarg->size); ret |= put_user(karg.type, &uarg->type); ret |= put_user(karg.flags, &uarg->flags); tmp = (u32) (long)karg.handle; ret |= put_user(tmp, &uarg->handle); ret |= put_user(karg.mtrr, &uarg->mtrr); if (ret) ret = -EFAULT; } return ret; } typedef struct drm32_buf_info { int count; /* Entries in list */ u32 list; /* (drm_buf_desc_t *) */ } drm32_buf_info_t; #define DRM32_IOCTL_INFO_BUFS DRM_IOWR(0x18, drm32_buf_info_t) static int drm32_info_bufs(unsigned int fd, unsigned int cmd, unsigned long arg) { drm32_buf_info_t *uarg = (drm32_buf_info_t *)arg; drm_buf_desc_t *ulist; drm_buf_info_t karg; mm_segment_t old_fs; int orig_count, ret; u32 tmp; if (get_user(karg.count, &uarg->count) || get_user(tmp, &uarg->list)) return -EFAULT; ulist = (drm_buf_desc_t *) A(tmp); orig_count = karg.count; karg.list = kmalloc(karg.count * sizeof(drm_buf_desc_t), GFP_KERNEL); if (!karg.list) return -EFAULT; old_fs = get_fs(); set_fs(KERNEL_DS); ret = sys_ioctl(fd, DRM_IOCTL_INFO_BUFS, (unsigned long) &karg); set_fs(old_fs); if (!ret) { if (karg.count <= orig_count && (copy_to_user(ulist, karg.list, karg.count * sizeof(drm_buf_desc_t)))) ret = -EFAULT; if (put_user(karg.count, &uarg->count)) ret = -EFAULT; } kfree(karg.list); return ret; } typedef struct drm32_buf_free { int count; u32 list; /* (int *) */ } drm32_buf_free_t; #define DRM32_IOCTL_FREE_BUFS DRM_IOW( 0x1a, drm32_buf_free_t) static int drm32_free_bufs(unsigned int fd, unsigned int cmd, unsigned long arg) { drm32_buf_free_t *uarg = (drm32_buf_free_t *)arg; drm_buf_free_t karg; mm_segment_t old_fs; int *ulist; int ret; u32 tmp; if (get_user(karg.count, &uarg->count) || get_user(tmp, &uarg->list)) return -EFAULT; ulist = (int *) A(tmp); karg.list = kmalloc(karg.count * sizeof(int), GFP_KERNEL); if (!karg.list) return -ENOMEM; ret = -EFAULT; if (copy_from_user(karg.list, ulist, (karg.count * sizeof(int)))) goto out; old_fs = get_fs(); set_fs(KERNEL_DS); ret = sys_ioctl(fd, DRM_IOCTL_FREE_BUFS, (unsigned long) &karg); set_fs(old_fs); out: kfree(karg.list); return ret; } typedef struct drm32_buf_pub { int idx; /* Index into master buflist */ int total; /* Buffer size */ int used; /* Amount of buffer in use (for DMA) */ u32 address; /* Address of buffer (void *) */ } drm32_buf_pub_t; typedef struct drm32_buf_map { int count; /* Length of buflist */ u32 virtual; /* Mmaped area in user-virtual (void *) */ u32 list; /* Buffer information (drm_buf_pub_t *) */ } drm32_buf_map_t; #define DRM32_IOCTL_MAP_BUFS DRM_IOWR(0x19, drm32_buf_map_t) static int drm32_map_bufs(unsigned int fd, unsigned int cmd, unsigned long arg) { drm32_buf_map_t *uarg = (drm32_buf_map_t *)arg; drm32_buf_pub_t *ulist; drm_buf_map_t karg; mm_segment_t old_fs; int orig_count, ret, i; u32 tmp1, tmp2; if (get_user(karg.count, &uarg->count) || get_user(tmp1, &uarg->virtual) || get_user(tmp2, &uarg->list)) return -EFAULT; karg.virtual = (void *) A(tmp1); ulist = (drm32_buf_pub_t *) A(tmp2); orig_count = karg.count; karg.list = kmalloc(karg.count * sizeof(drm_buf_pub_t), GFP_KERNEL); if (!karg.list) return -ENOMEM; ret = -EFAULT; for (i = 0; i < karg.count; i++) { if (get_user(karg.list[i].idx, &ulist[i].idx) || get_user(karg.list[i].total, &ulist[i].total) || get_user(karg.list[i].used, &ulist[i].used) || get_user(tmp1, &ulist[i].address)) goto out; karg.list[i].address = (void *) A(tmp1); } old_fs = get_fs(); set_fs(KERNEL_DS); ret = sys_ioctl(fd, DRM_IOCTL_MAP_BUFS, (unsigned long) &karg); set_fs(old_fs); if (!ret) { for (i = 0; i < orig_count; i++) { tmp1 = (u32) (long) karg.list[i].address; if (put_user(karg.list[i].idx, &ulist[i].idx) || put_user(karg.list[i].total, &ulist[i].total) || put_user(karg.list[i].used, &ulist[i].used) || put_user(tmp1, &ulist[i].address)) { ret = -EFAULT; goto out; } } if (put_user(karg.count, &uarg->count)) ret = -EFAULT; } out: kfree(karg.list); return ret; } typedef struct drm32_dma { /* Indices here refer to the offset into buflist in drm_buf_get_t. */ int context; /* Context handle */ int send_count; /* Number of buffers to send */ u32 send_indices; /* List of handles to buffers (int *) */ u32 send_sizes; /* Lengths of data to send (int *) */ drm_dma_flags_t flags; /* Flags */ int request_count; /* Number of buffers requested */ int request_size; /* Desired size for buffers */ u32 request_indices; /* Buffer information (int *) */ u32 request_sizes; /* (int *) */ int granted_count; /* Number of buffers granted */ } drm32_dma_t; #define DRM32_IOCTL_DMA DRM_IOWR(0x29, drm32_dma_t) /* RED PEN The DRM layer blindly dereferences the send/request * indice/size arrays even though they are userland * pointers. -DaveM */ static int drm32_dma(unsigned int fd, unsigned int cmd, unsigned long arg) { drm32_dma_t *uarg = (drm32_dma_t *) arg; int *u_si, *u_ss, *u_ri, *u_rs; drm_dma_t karg; mm_segment_t old_fs; int ret; u32 tmp1, tmp2, tmp3, tmp4; karg.send_indices = karg.send_sizes = NULL; karg.request_indices = karg.request_sizes = NULL; if (get_user(karg.context, &uarg->context) || get_user(karg.send_count, &uarg->send_count) || get_user(tmp1, &uarg->send_indices) || get_user(tmp2, &uarg->send_sizes) || get_user(karg.flags, &uarg->flags) || get_user(karg.request_count, &uarg->request_count) || get_user(karg.request_size, &uarg->request_size) || get_user(tmp3, &uarg->request_indices) || get_user(tmp4, &uarg->request_sizes) || get_user(karg.granted_count, &uarg->granted_count)) return -EFAULT; u_si = (int *) A(tmp1); u_ss = (int *) A(tmp2); u_ri = (int *) A(tmp3); u_rs = (int *) A(tmp4); if (karg.send_count) { karg.send_indices = kmalloc(karg.send_count * sizeof(int), GFP_KERNEL); karg.send_sizes = kmalloc(karg.send_count * sizeof(int), GFP_KERNEL); ret = -ENOMEM; if (!karg.send_indices || !karg.send_sizes) goto out; ret = -EFAULT; if (copy_from_user(karg.send_indices, u_si, (karg.send_count * sizeof(int))) || copy_from_user(karg.send_sizes, u_ss, (karg.send_count * sizeof(int)))) goto out; } if (karg.request_count) { karg.request_indices = kmalloc(karg.request_count * sizeof(int), GFP_KERNEL); karg.request_sizes = kmalloc(karg.request_count * sizeof(int), GFP_KERNEL); ret = -ENOMEM; if (!karg.request_indices || !karg.request_sizes) goto out; ret = -EFAULT; if (copy_from_user(karg.request_indices, u_ri, (karg.request_count * sizeof(int))) || copy_from_user(karg.request_sizes, u_rs, (karg.request_count * sizeof(int)))) goto out; } old_fs = get_fs(); set_fs(KERNEL_DS); ret = sys_ioctl(fd, DRM_IOCTL_DMA, (unsigned long) &karg); set_fs(old_fs); if (!ret) { if (put_user(karg.context, &uarg->context) || put_user(karg.send_count, &uarg->send_count) || put_user(karg.flags, &uarg->flags) || put_user(karg.request_count, &uarg->request_count) || put_user(karg.request_size, &uarg->request_size) || put_user(karg.granted_count, &uarg->granted_count)) ret = -EFAULT; if (karg.send_count) { if (copy_to_user(u_si, karg.send_indices, (karg.send_count * sizeof(int))) || copy_to_user(u_ss, karg.send_sizes, (karg.send_count * sizeof(int)))) ret = -EFAULT; } if (karg.request_count) { if (copy_to_user(u_ri, karg.request_indices, (karg.request_count * sizeof(int))) || copy_to_user(u_rs, karg.request_sizes, (karg.request_count * sizeof(int)))) ret = -EFAULT; } } out: if (karg.send_indices) kfree(karg.send_indices); if (karg.send_sizes) kfree(karg.send_sizes); if (karg.request_indices) kfree(karg.request_indices); if (karg.request_sizes) kfree(karg.request_sizes); return ret; } typedef struct drm32_ctx_res { int count; u32 contexts; /* (drm_ctx_t *) */ } drm32_ctx_res_t; #define DRM32_IOCTL_RES_CTX DRM_IOWR(0x26, drm32_ctx_res_t) static int drm32_res_ctx(unsigned int fd, unsigned int cmd, unsigned long arg) { drm32_ctx_res_t *uarg = (drm32_ctx_res_t *) arg; drm_ctx_t *ulist; drm_ctx_res_t karg; mm_segment_t old_fs; int orig_count, ret; u32 tmp; karg.contexts = NULL; if (get_user(karg.count, &uarg->count) || get_user(tmp, &uarg->contexts)) return -EFAULT; ulist = (drm_ctx_t *) A(tmp); orig_count = karg.count; if (karg.count && ulist) { karg.contexts = kmalloc((karg.count * sizeof(drm_ctx_t)), GFP_KERNEL); if (!karg.contexts) return -ENOMEM; if (copy_from_user(karg.contexts, ulist, (karg.count * sizeof(drm_ctx_t)))) { kfree(karg.contexts); return -EFAULT; } } old_fs = get_fs(); set_fs(KERNEL_DS); ret = sys_ioctl(fd, DRM_IOCTL_RES_CTX, (unsigned long) &karg); set_fs(old_fs); if (!ret) { if (orig_count) { if (copy_to_user(ulist, karg.contexts, (orig_count * sizeof(drm_ctx_t)))) ret = -EFAULT; } if (put_user(karg.count, &uarg->count)) ret = -EFAULT; } if (karg.contexts) kfree(karg.contexts); return ret; } #endif static int ret_einval(unsigned int fd, unsigned int cmd, unsigned long arg) { return -EINVAL; } static int broken_blkgetsize(unsigned int fd, unsigned int cmd, unsigned long arg) { /* The mkswap binary hard codes it to Intel value :-((( */ return w_long(fd, BLKGETSIZE, arg); } struct blkpg_ioctl_arg32 { int op; int flags; int datalen; u32 data; }; static int blkpg_ioctl_trans(unsigned int fd, unsigned int cmd, struct blkpg_ioctl_arg32 *arg) { struct blkpg_ioctl_arg a; struct blkpg_partition p; int err; mm_segment_t old_fs = get_fs(); err = get_user(a.op, &arg->op); err |= __get_user(a.flags, &arg->flags); err |= __get_user(a.datalen, &arg->datalen); err |= __get_user((long)a.data, &arg->data); if (err) return err; switch (a.op) { case BLKPG_ADD_PARTITION: case BLKPG_DEL_PARTITION: if (a.datalen < sizeof(struct blkpg_partition)) return -EINVAL; if (copy_from_user(&p, a.data, sizeof(struct blkpg_partition))) return -EFAULT; a.data = &p; set_fs (KERNEL_DS); err = sys_ioctl(fd, cmd, (unsigned long)&a); set_fs (old_fs); default: return -EINVAL; } return err; } /* Fix sizeof(sizeof()) breakage */ #define BLKBSZGET_32 _IOR(0x12,112,int) #define BLKBSZSET_32 _IOW(0x12,113,int) #define BLKGETSIZE64_32 _IOR(0x12,114,int) static int do_blkbszget(unsigned int fd, unsigned int cmd, unsigned long arg) { return sys_ioctl(fd, BLKBSZGET, arg); } static int do_blkbszset(unsigned int fd, unsigned int cmd, unsigned long arg) { return sys_ioctl(fd, BLKBSZSET, arg); } static int do_blkgetsize64(unsigned int fd, unsigned int cmd, unsigned long arg) { return sys_ioctl(fd, BLKGETSIZE64, arg); } static int ioc_settimeout(unsigned int fd, unsigned int cmd, unsigned long arg) { return rw_long(fd, AUTOFS_IOC_SETTIMEOUT, arg); } /* USB to be done */ struct serial_struct32 { int type; int line; unsigned int port; int irq; int flags; int xmit_fifo_size; int custom_divisor; int baud_base; unsigned short close_delay; char io_type; char reserved_char[1]; int hub6; unsigned short closing_wait; /* time to wait before closing */ unsigned short closing_wait2; /* no longer used... */ unsigned int iomem_base; /* char * really */ unsigned short iomem_reg_shift; unsigned int port_high; int reserved[1]; }; static int do_tiocgserial(unsigned int fd, unsigned int cmd, unsigned long arg) { struct serial_struct ss; int ret; struct serial_struct32 * uptr = (struct serial_struct32 *)arg; mm_segment_t old_fs = get_fs(); set_fs (KERNEL_DS); ret = sys_ioctl(fd, cmd, (unsigned long) &ss); set_fs(old_fs); if (!ret) { /* structs match up to iomem_base */ ret = copy_to_user(uptr, &ss, sizeof(struct serial_struct32)); ret |= put_user(ss.iomem_base, &uptr->iomem_base); ret |= put_user(ss.iomem_reg_shift, &uptr->iomem_reg_shift); ret |= put_user(ss.port_high, &uptr->port_high); if (ret) ret = -EFAULT; } return ret; } int siocdevprivate_ioctl(unsigned int fd, unsigned int cmd, unsigned long arg) { int err = sys_ioctl(fd, cmd, arg); if ((unsigned) err > -4095) printk(KERN_WARNING "ioctl(%d, 0x%x, %p) -- SIOCDEVPRIVATE-based ioctls aren't really\n" "supported, though some will work by accident.\n", fd, cmd, (void *)arg); return err; } #define HANDLE_IOCTL(cmd, handler) { cmd, (ioctl_trans_handler_t)handler, 0 }, #define COMPATIBLE_IOCTL(cmd) HANDLE_IOCTL(cmd, sys_ioctl) #define IOCTL_TABLE_START struct ioctl_trans ioctl_start[] = { #define IOCTL_TABLE_END }; struct ioctl_trans ioctl_end[0]; IOCTL_TABLE_START #include <linux/compat_ioctl.h> /* Might be moved to compat_ioctl.h with some ifdefs... */ COMPATIBLE_IOCTL(TIOCSTART) COMPATIBLE_IOCTL(TIOCSTOP) COMPATIBLE_IOCTL(TIOCSLTC) /* PA-specific ioctls */ COMPATIBLE_IOCTL(PA_PERF_ON) COMPATIBLE_IOCTL(PA_PERF_OFF) COMPATIBLE_IOCTL(PA_PERF_VERSION) /* And these ioctls need translation */ HANDLE_IOCTL(TIOCGSERIAL, do_tiocgserial) HANDLE_IOCTL(SIOCGIFNAME, dev_ifname32) HANDLE_IOCTL(SIOCGIFCONF, dev_ifconf) HANDLE_IOCTL(SIOCGIFFLAGS, dev_ifsioc) HANDLE_IOCTL(SIOCSIFFLAGS, dev_ifsioc) HANDLE_IOCTL(SIOCGIFMETRIC, dev_ifsioc) HANDLE_IOCTL(SIOCSIFMETRIC, dev_ifsioc) HANDLE_IOCTL(SIOCGIFMTU, dev_ifsioc) HANDLE_IOCTL(SIOCSIFMTU, dev_ifsioc) HANDLE_IOCTL(SIOCGIFMEM, dev_ifsioc) HANDLE_IOCTL(SIOCSIFMEM, dev_ifsioc) HANDLE_IOCTL(SIOCGIFHWADDR, dev_ifsioc) HANDLE_IOCTL(SIOCSIFHWADDR, dev_ifsioc) HANDLE_IOCTL(SIOCADDMULTI, dev_ifsioc) HANDLE_IOCTL(SIOCDELMULTI, dev_ifsioc) HANDLE_IOCTL(SIOCGIFINDEX, dev_ifsioc) HANDLE_IOCTL(SIOCGIFMAP, dev_ifsioc) HANDLE_IOCTL(SIOCSIFMAP, dev_ifsioc) HANDLE_IOCTL(SIOCGIFADDR, dev_ifsioc) HANDLE_IOCTL(SIOCSIFADDR, dev_ifsioc) HANDLE_IOCTL(SIOCGIFBRDADDR, dev_ifsioc) HANDLE_IOCTL(SIOCSIFBRDADDR, dev_ifsioc) HANDLE_IOCTL(SIOCGIFDSTADDR, dev_ifsioc) HANDLE_IOCTL(SIOCSIFDSTADDR, dev_ifsioc) HANDLE_IOCTL(SIOCGIFNETMASK, dev_ifsioc) HANDLE_IOCTL(SIOCSIFNETMASK, dev_ifsioc) HANDLE_IOCTL(SIOCSIFPFLAGS, dev_ifsioc) HANDLE_IOCTL(SIOCGIFPFLAGS, dev_ifsioc) HANDLE_IOCTL(SIOCGPPPSTATS, dev_ifsioc) HANDLE_IOCTL(SIOCGPPPCSTATS, dev_ifsioc) HANDLE_IOCTL(SIOCGPPPVER, dev_ifsioc) HANDLE_IOCTL(SIOCGIFTXQLEN, dev_ifsioc) HANDLE_IOCTL(SIOCSIFTXQLEN, dev_ifsioc) HANDLE_IOCTL(SIOCADDRT, routing_ioctl) HANDLE_IOCTL(SIOCDELRT, routing_ioctl) /* Note SIOCRTMSG is no longer, so this is safe and * the user would have seen just an -EINVAL anyways. */ HANDLE_IOCTL(SIOCRTMSG, ret_einval) HANDLE_IOCTL(SIOCGSTAMP, do_siocgstamp) HANDLE_IOCTL(HDIO_GETGEO, hdio_getgeo) HANDLE_IOCTL(BLKGETSIZE, w_long) HANDLE_IOCTL(0x1260, broken_blkgetsize) HANDLE_IOCTL(BLKSECTGET, w_long) HANDLE_IOCTL(BLKPG, blkpg_ioctl_trans) /* take care of sizeof(sizeof()) breakage */ /* block stuff */ HANDLE_IOCTL(BLKBSZGET_32, do_blkbszget) HANDLE_IOCTL(BLKBSZSET_32, do_blkbszset) HANDLE_IOCTL(BLKGETSIZE64_32, do_blkgetsize64) HANDLE_IOCTL(FBIOGET_FSCREENINFO, fb_ioctl_trans) HANDLE_IOCTL(FBIOGETCMAP, fb_ioctl_trans) HANDLE_IOCTL(FBIOPUTCMAP, fb_ioctl_trans) HANDLE_IOCTL(HDIO_GET_UNMASKINTR, hdio_ioctl_trans) HANDLE_IOCTL(HDIO_GET_DMA, hdio_ioctl_trans) HANDLE_IOCTL(HDIO_GET_32BIT, hdio_ioctl_trans) HANDLE_IOCTL(HDIO_GET_MULTCOUNT, hdio_ioctl_trans) HANDLE_IOCTL(HDIO_GET_NOWERR, hdio_ioctl_trans) HANDLE_IOCTL(HDIO_GET_NICE, hdio_ioctl_trans) HANDLE_IOCTL(FDSETPRM32, fd_ioctl_trans) HANDLE_IOCTL(FDDEFPRM32, fd_ioctl_trans) HANDLE_IOCTL(FDGETPRM32, fd_ioctl_trans) HANDLE_IOCTL(FDSETDRVPRM32, fd_ioctl_trans) HANDLE_IOCTL(FDGETDRVPRM32, fd_ioctl_trans) HANDLE_IOCTL(FDGETDRVSTAT32, fd_ioctl_trans) HANDLE_IOCTL(FDPOLLDRVSTAT32, fd_ioctl_trans) HANDLE_IOCTL(FDGETFDCSTAT32, fd_ioctl_trans) HANDLE_IOCTL(FDWERRORGET32, fd_ioctl_trans) HANDLE_IOCTL(PPPIOCGIDLE32, ppp_ioctl_trans) HANDLE_IOCTL(PPPIOCSCOMPRESS32, ppp_ioctl_trans) HANDLE_IOCTL(MTIOCGET32, mt_ioctl_trans) HANDLE_IOCTL(MTIOCPOS32, mt_ioctl_trans) HANDLE_IOCTL(MTIOCGETCONFIG32, mt_ioctl_trans) HANDLE_IOCTL(MTIOCSETCONFIG32, mt_ioctl_trans) HANDLE_IOCTL(CDROMREADMODE2, cdrom_ioctl_trans) HANDLE_IOCTL(CDROMREADMODE1, cdrom_ioctl_trans) HANDLE_IOCTL(CDROMREADRAW, cdrom_ioctl_trans) HANDLE_IOCTL(CDROMREADCOOKED, cdrom_ioctl_trans) HANDLE_IOCTL(CDROMREADAUDIO, cdrom_ioctl_trans) HANDLE_IOCTL(CDROMREADALL, cdrom_ioctl_trans) HANDLE_IOCTL(CDROM_SEND_PACKET, cdrom_ioctl_trans) HANDLE_IOCTL(LOOP_SET_STATUS, loop_status) HANDLE_IOCTL(LOOP_GET_STATUS, loop_status) #define AUTOFS_IOC_SETTIMEOUT32 _IOWR(0x93,0x64,unsigned int) HANDLE_IOCTL(AUTOFS_IOC_SETTIMEOUT32, ioc_settimeout) #ifdef CONFIG_VT HANDLE_IOCTL(PIO_FONTX, do_fontx_ioctl) HANDLE_IOCTL(GIO_FONTX, do_fontx_ioctl) HANDLE_IOCTL(PIO_UNIMAP, do_unimap_ioctl) HANDLE_IOCTL(GIO_UNIMAP, do_unimap_ioctl) HANDLE_IOCTL(KDFONTOP, do_kdfontop_ioctl) #endif HANDLE_IOCTL(EXT2_IOC32_GETFLAGS, do_ext2_ioctl) HANDLE_IOCTL(EXT2_IOC32_SETFLAGS, do_ext2_ioctl) HANDLE_IOCTL(EXT2_IOC32_GETVERSION, do_ext2_ioctl) HANDLE_IOCTL(EXT2_IOC32_SETVERSION, do_ext2_ioctl) #if 0 /* One SMB ioctl needs translations. */ #define SMB_IOC_GETMOUNTUID_32 _IOR('u', 1, compat_uid_t) HANDLE_IOCTL(SMB_IOC_GETMOUNTUID_32, do_smb_getmountuid) #endif HANDLE_IOCTL(ATM_GETLINKRATE32, do_atm_ioctl) HANDLE_IOCTL(ATM_GETNAMES32, do_atm_ioctl) HANDLE_IOCTL(ATM_GETTYPE32, do_atm_ioctl) HANDLE_IOCTL(ATM_GETESI32, do_atm_ioctl) HANDLE_IOCTL(ATM_GETADDR32, do_atm_ioctl) HANDLE_IOCTL(ATM_RSTADDR32, do_atm_ioctl) HANDLE_IOCTL(ATM_ADDADDR32, do_atm_ioctl) HANDLE_IOCTL(ATM_DELADDR32, do_atm_ioctl) HANDLE_IOCTL(ATM_GETCIRANGE32, do_atm_ioctl) HANDLE_IOCTL(ATM_SETCIRANGE32, do_atm_ioctl) HANDLE_IOCTL(ATM_SETESI32, do_atm_ioctl) HANDLE_IOCTL(ATM_SETESIF32, do_atm_ioctl) HANDLE_IOCTL(ATM_GETSTAT32, do_atm_ioctl) HANDLE_IOCTL(ATM_GETSTATZ32, do_atm_ioctl) HANDLE_IOCTL(ATM_GETLOOP32, do_atm_ioctl) HANDLE_IOCTL(ATM_SETLOOP32, do_atm_ioctl) HANDLE_IOCTL(ATM_QUERYLOOP32, do_atm_ioctl) HANDLE_IOCTL(SONET_GETSTAT, do_atm_ioctl) HANDLE_IOCTL(SONET_GETSTATZ, do_atm_ioctl) HANDLE_IOCTL(SONET_GETDIAG, do_atm_ioctl) HANDLE_IOCTL(SONET_SETDIAG, do_atm_ioctl) HANDLE_IOCTL(SONET_CLRDIAG, do_atm_ioctl) HANDLE_IOCTL(SONET_SETFRAMING, do_atm_ioctl) HANDLE_IOCTL(SONET_GETFRAMING, do_atm_ioctl) HANDLE_IOCTL(SONET_GETFRSENSE, do_atm_ioctl) #if defined(CONFIG_GEN_RTC) COMPATIBLE_IOCTL(RTC_AIE_ON) COMPATIBLE_IOCTL(RTC_AIE_OFF) COMPATIBLE_IOCTL(RTC_UIE_ON) COMPATIBLE_IOCTL(RTC_UIE_OFF) COMPATIBLE_IOCTL(RTC_PIE_ON) COMPATIBLE_IOCTL(RTC_PIE_OFF) COMPATIBLE_IOCTL(RTC_WIE_ON) COMPATIBLE_IOCTL(RTC_WIE_OFF) COMPATIBLE_IOCTL(RTC_ALM_SET) /* struct rtc_time only has ints */ COMPATIBLE_IOCTL(RTC_ALM_READ) /* struct rtc_time only has ints */ COMPATIBLE_IOCTL(RTC_RD_TIME) /* struct rtc_time only has ints */ COMPATIBLE_IOCTL(RTC_SET_TIME) /* struct rtc_time only has ints */ HANDLE_IOCTL(RTC_IRQP_READ, w_long) COMPATIBLE_IOCTL(RTC_IRQP_SET) HANDLE_IOCTL(RTC_EPOCH_READ, w_long) COMPATIBLE_IOCTL(RTC_EPOCH_SET) #endif #if defined(CONFIG_DRM) || defined(CONFIG_DRM_MODULE) HANDLE_IOCTL(DRM32_IOCTL_VERSION, drm32_version); HANDLE_IOCTL(DRM32_IOCTL_GET_UNIQUE, drm32_getsetunique); HANDLE_IOCTL(DRM32_IOCTL_SET_UNIQUE, drm32_getsetunique); HANDLE_IOCTL(DRM32_IOCTL_ADD_MAP, drm32_addmap); HANDLE_IOCTL(DRM32_IOCTL_INFO_BUFS, drm32_info_bufs); HANDLE_IOCTL(DRM32_IOCTL_FREE_BUFS, drm32_free_bufs); HANDLE_IOCTL(DRM32_IOCTL_MAP_BUFS, drm32_map_bufs); HANDLE_IOCTL(DRM32_IOCTL_DMA, drm32_dma); HANDLE_IOCTL(DRM32_IOCTL_RES_CTX, drm32_res_ctx); #endif /* DRM */ IOCTL_TABLE_END