drm_ioctl.c 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760
  1. /*
  2. * Created: Fri Jan 8 09:01:26 1999 by faith@valinux.com
  3. *
  4. * Copyright 1999 Precision Insight, Inc., Cedar Park, Texas.
  5. * Copyright 2000 VA Linux Systems, Inc., Sunnyvale, California.
  6. * All Rights Reserved.
  7. *
  8. * Author Rickard E. (Rik) Faith <faith@valinux.com>
  9. * Author Gareth Hughes <gareth@valinux.com>
  10. *
  11. * Permission is hereby granted, free of charge, to any person obtaining a
  12. * copy of this software and associated documentation files (the "Software"),
  13. * to deal in the Software without restriction, including without limitation
  14. * the rights to use, copy, modify, merge, publish, distribute, sublicense,
  15. * and/or sell copies of the Software, and to permit persons to whom the
  16. * Software is furnished to do so, subject to the following conditions:
  17. *
  18. * The above copyright notice and this permission notice (including the next
  19. * paragraph) shall be included in all copies or substantial portions of the
  20. * Software.
  21. *
  22. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  23. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  24. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  25. * VA LINUX SYSTEMS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
  26. * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
  27. * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
  28. * OTHER DEALINGS IN THE SOFTWARE.
  29. */
  30. #include <drm/drmP.h>
  31. #include <drm/drm_core.h>
  32. #include "drm_legacy.h"
  33. #include "drm_internal.h"
  34. #include "drm_crtc_internal.h"
  35. #include <linux/pci.h>
  36. #include <linux/export.h>
  37. static int drm_version(struct drm_device *dev, void *data,
  38. struct drm_file *file_priv);
  39. /*
  40. * Get the bus id.
  41. *
  42. * \param inode device inode.
  43. * \param file_priv DRM file private.
  44. * \param cmd command.
  45. * \param arg user argument, pointing to a drm_unique structure.
  46. * \return zero on success or a negative number on failure.
  47. *
  48. * Copies the bus id from drm_device::unique into user space.
  49. */
  50. static int drm_getunique(struct drm_device *dev, void *data,
  51. struct drm_file *file_priv)
  52. {
  53. struct drm_unique *u = data;
  54. struct drm_master *master = file_priv->master;
  55. if (u->unique_len >= master->unique_len) {
  56. if (copy_to_user(u->unique, master->unique, master->unique_len))
  57. return -EFAULT;
  58. }
  59. u->unique_len = master->unique_len;
  60. return 0;
  61. }
  62. static void
  63. drm_unset_busid(struct drm_device *dev,
  64. struct drm_master *master)
  65. {
  66. kfree(master->unique);
  67. master->unique = NULL;
  68. master->unique_len = 0;
  69. }
  70. /*
  71. * Set the bus id.
  72. *
  73. * \param inode device inode.
  74. * \param file_priv DRM file private.
  75. * \param cmd command.
  76. * \param arg user argument, pointing to a drm_unique structure.
  77. * \return zero on success or a negative number on failure.
  78. *
  79. * Copies the bus id from userspace into drm_device::unique, and verifies that
  80. * it matches the device this DRM is attached to (EINVAL otherwise). Deprecated
  81. * in interface version 1.1 and will return EBUSY when setversion has requested
  82. * version 1.1 or greater. Also note that KMS is all version 1.1 and later and
  83. * UMS was only ever supported on pci devices.
  84. */
  85. static int drm_setunique(struct drm_device *dev, void *data,
  86. struct drm_file *file_priv)
  87. {
  88. struct drm_unique *u = data;
  89. struct drm_master *master = file_priv->master;
  90. int ret;
  91. if (master->unique_len || master->unique)
  92. return -EBUSY;
  93. if (!u->unique_len || u->unique_len > 1024)
  94. return -EINVAL;
  95. if (drm_core_check_feature(dev, DRIVER_MODESET))
  96. return 0;
  97. if (WARN_ON(!dev->pdev))
  98. return -EINVAL;
  99. ret = drm_pci_set_unique(dev, master, u);
  100. if (ret)
  101. goto err;
  102. return 0;
  103. err:
  104. drm_unset_busid(dev, master);
  105. return ret;
  106. }
  107. static int drm_set_busid(struct drm_device *dev, struct drm_file *file_priv)
  108. {
  109. struct drm_master *master = file_priv->master;
  110. int ret;
  111. if (master->unique != NULL)
  112. drm_unset_busid(dev, master);
  113. if (dev->driver->set_busid) {
  114. ret = dev->driver->set_busid(dev, master);
  115. if (ret) {
  116. drm_unset_busid(dev, master);
  117. return ret;
  118. }
  119. } else {
  120. WARN_ON(!dev->unique);
  121. master->unique = kstrdup(dev->unique, GFP_KERNEL);
  122. if (master->unique)
  123. master->unique_len = strlen(dev->unique);
  124. }
  125. return 0;
  126. }
  127. /*
  128. * Get client information.
  129. *
  130. * \param inode device inode.
  131. * \param file_priv DRM file private.
  132. * \param cmd command.
  133. * \param arg user argument, pointing to a drm_client structure.
  134. *
  135. * \return zero on success or a negative number on failure.
  136. *
  137. * Searches for the client with the specified index and copies its information
  138. * into userspace
  139. */
  140. static int drm_getclient(struct drm_device *dev, void *data,
  141. struct drm_file *file_priv)
  142. {
  143. struct drm_client *client = data;
  144. /*
  145. * Hollowed-out getclient ioctl to keep some dead old drm tests/tools
  146. * not breaking completely. Userspace tools stop enumerating one they
  147. * get -EINVAL, hence this is the return value we need to hand back for
  148. * no clients tracked.
  149. *
  150. * Unfortunately some clients (*cough* libva *cough*) use this in a fun
  151. * attempt to figure out whether they're authenticated or not. Since
  152. * that's the only thing they care about, give it to the directly
  153. * instead of walking one giant list.
  154. */
  155. if (client->idx == 0) {
  156. client->auth = file_priv->authenticated;
  157. client->pid = pid_vnr(file_priv->pid);
  158. client->uid = from_kuid_munged(current_user_ns(),
  159. file_priv->uid);
  160. client->magic = 0;
  161. client->iocs = 0;
  162. return 0;
  163. } else {
  164. return -EINVAL;
  165. }
  166. }
  167. /*
  168. * Get statistics information.
  169. *
  170. * \param inode device inode.
  171. * \param file_priv DRM file private.
  172. * \param cmd command.
  173. * \param arg user argument, pointing to a drm_stats structure.
  174. *
  175. * \return zero on success or a negative number on failure.
  176. */
  177. static int drm_getstats(struct drm_device *dev, void *data,
  178. struct drm_file *file_priv)
  179. {
  180. struct drm_stats *stats = data;
  181. /* Clear stats to prevent userspace from eating its stack garbage. */
  182. memset(stats, 0, sizeof(*stats));
  183. return 0;
  184. }
  185. /*
  186. * Get device/driver capabilities
  187. */
  188. static int drm_getcap(struct drm_device *dev, void *data, struct drm_file *file_priv)
  189. {
  190. struct drm_get_cap *req = data;
  191. req->value = 0;
  192. switch (req->capability) {
  193. case DRM_CAP_DUMB_BUFFER:
  194. if (dev->driver->dumb_create)
  195. req->value = 1;
  196. break;
  197. case DRM_CAP_VBLANK_HIGH_CRTC:
  198. req->value = 1;
  199. break;
  200. case DRM_CAP_DUMB_PREFERRED_DEPTH:
  201. req->value = dev->mode_config.preferred_depth;
  202. break;
  203. case DRM_CAP_DUMB_PREFER_SHADOW:
  204. req->value = dev->mode_config.prefer_shadow;
  205. break;
  206. case DRM_CAP_PRIME:
  207. req->value |= dev->driver->prime_fd_to_handle ? DRM_PRIME_CAP_IMPORT : 0;
  208. req->value |= dev->driver->prime_handle_to_fd ? DRM_PRIME_CAP_EXPORT : 0;
  209. break;
  210. case DRM_CAP_TIMESTAMP_MONOTONIC:
  211. req->value = drm_timestamp_monotonic;
  212. break;
  213. case DRM_CAP_ASYNC_PAGE_FLIP:
  214. req->value = dev->mode_config.async_page_flip;
  215. break;
  216. case DRM_CAP_CURSOR_WIDTH:
  217. if (dev->mode_config.cursor_width)
  218. req->value = dev->mode_config.cursor_width;
  219. else
  220. req->value = 64;
  221. break;
  222. case DRM_CAP_CURSOR_HEIGHT:
  223. if (dev->mode_config.cursor_height)
  224. req->value = dev->mode_config.cursor_height;
  225. else
  226. req->value = 64;
  227. break;
  228. case DRM_CAP_ADDFB2_MODIFIERS:
  229. req->value = dev->mode_config.allow_fb_modifiers;
  230. break;
  231. default:
  232. return -EINVAL;
  233. }
  234. return 0;
  235. }
  236. /*
  237. * Set device/driver capabilities
  238. */
  239. static int
  240. drm_setclientcap(struct drm_device *dev, void *data, struct drm_file *file_priv)
  241. {
  242. struct drm_set_client_cap *req = data;
  243. switch (req->capability) {
  244. case DRM_CLIENT_CAP_STEREO_3D:
  245. if (req->value > 1)
  246. return -EINVAL;
  247. file_priv->stereo_allowed = req->value;
  248. break;
  249. case DRM_CLIENT_CAP_UNIVERSAL_PLANES:
  250. if (req->value > 1)
  251. return -EINVAL;
  252. file_priv->universal_planes = req->value;
  253. break;
  254. case DRM_CLIENT_CAP_ATOMIC:
  255. if (!drm_core_check_feature(dev, DRIVER_ATOMIC))
  256. return -EINVAL;
  257. if (req->value > 1)
  258. return -EINVAL;
  259. file_priv->atomic = req->value;
  260. file_priv->universal_planes = req->value;
  261. break;
  262. default:
  263. return -EINVAL;
  264. }
  265. return 0;
  266. }
  267. /*
  268. * Setversion ioctl.
  269. *
  270. * \param inode device inode.
  271. * \param file_priv DRM file private.
  272. * \param cmd command.
  273. * \param arg user argument, pointing to a drm_lock structure.
  274. * \return zero on success or negative number on failure.
  275. *
  276. * Sets the requested interface version
  277. */
  278. static int drm_setversion(struct drm_device *dev, void *data, struct drm_file *file_priv)
  279. {
  280. struct drm_set_version *sv = data;
  281. int if_version, retcode = 0;
  282. if (sv->drm_di_major != -1) {
  283. if (sv->drm_di_major != DRM_IF_MAJOR ||
  284. sv->drm_di_minor < 0 || sv->drm_di_minor > DRM_IF_MINOR) {
  285. retcode = -EINVAL;
  286. goto done;
  287. }
  288. if_version = DRM_IF_VERSION(sv->drm_di_major,
  289. sv->drm_di_minor);
  290. dev->if_version = max(if_version, dev->if_version);
  291. if (sv->drm_di_minor >= 1) {
  292. /*
  293. * Version 1.1 includes tying of DRM to specific device
  294. * Version 1.4 has proper PCI domain support
  295. */
  296. retcode = drm_set_busid(dev, file_priv);
  297. if (retcode)
  298. goto done;
  299. }
  300. }
  301. if (sv->drm_dd_major != -1) {
  302. if (sv->drm_dd_major != dev->driver->major ||
  303. sv->drm_dd_minor < 0 || sv->drm_dd_minor >
  304. dev->driver->minor) {
  305. retcode = -EINVAL;
  306. goto done;
  307. }
  308. }
  309. done:
  310. sv->drm_di_major = DRM_IF_MAJOR;
  311. sv->drm_di_minor = DRM_IF_MINOR;
  312. sv->drm_dd_major = dev->driver->major;
  313. sv->drm_dd_minor = dev->driver->minor;
  314. return retcode;
  315. }
  316. /**
  317. * drm_noop - DRM no-op ioctl implemntation
  318. * @dev: DRM device for the ioctl
  319. * @data: data pointer for the ioctl
  320. * @file_priv: DRM file for the ioctl call
  321. *
  322. * This no-op implementation for drm ioctls is useful for deprecated
  323. * functionality where we can't return a failure code because existing userspace
  324. * checks the result of the ioctl, but doesn't care about the action.
  325. *
  326. * Always returns successfully with 0.
  327. */
  328. int drm_noop(struct drm_device *dev, void *data,
  329. struct drm_file *file_priv)
  330. {
  331. DRM_DEBUG("\n");
  332. return 0;
  333. }
  334. EXPORT_SYMBOL(drm_noop);
  335. /**
  336. * drm_invalid_op - DRM invalid ioctl implemntation
  337. * @dev: DRM device for the ioctl
  338. * @data: data pointer for the ioctl
  339. * @file_priv: DRM file for the ioctl call
  340. *
  341. * This no-op implementation for drm ioctls is useful for deprecated
  342. * functionality where we really don't want to allow userspace to call the ioctl
  343. * any more. This is the case for old ums interfaces for drivers that
  344. * transitioned to kms gradually and so kept the old legacy tables around. This
  345. * only applies to radeon and i915 kms drivers, other drivers shouldn't need to
  346. * use this function.
  347. *
  348. * Always fails with a return value of -EINVAL.
  349. */
  350. int drm_invalid_op(struct drm_device *dev, void *data,
  351. struct drm_file *file_priv)
  352. {
  353. return -EINVAL;
  354. }
  355. EXPORT_SYMBOL(drm_invalid_op);
  356. /*
  357. * Copy and IOCTL return string to user space
  358. */
  359. static int drm_copy_field(char __user *buf, size_t *buf_len, const char *value)
  360. {
  361. int len;
  362. /* don't overflow userbuf */
  363. len = strlen(value);
  364. if (len > *buf_len)
  365. len = *buf_len;
  366. /* let userspace know exact length of driver value (which could be
  367. * larger than the userspace-supplied buffer) */
  368. *buf_len = strlen(value);
  369. /* finally, try filling in the userbuf */
  370. if (len && buf)
  371. if (copy_to_user(buf, value, len))
  372. return -EFAULT;
  373. return 0;
  374. }
  375. /*
  376. * Get version information
  377. *
  378. * \param inode device inode.
  379. * \param filp file pointer.
  380. * \param cmd command.
  381. * \param arg user argument, pointing to a drm_version structure.
  382. * \return zero on success or negative number on failure.
  383. *
  384. * Fills in the version information in \p arg.
  385. */
  386. static int drm_version(struct drm_device *dev, void *data,
  387. struct drm_file *file_priv)
  388. {
  389. struct drm_version *version = data;
  390. int err;
  391. version->version_major = dev->driver->major;
  392. version->version_minor = dev->driver->minor;
  393. version->version_patchlevel = dev->driver->patchlevel;
  394. err = drm_copy_field(version->name, &version->name_len,
  395. dev->driver->name);
  396. if (!err)
  397. err = drm_copy_field(version->date, &version->date_len,
  398. dev->driver->date);
  399. if (!err)
  400. err = drm_copy_field(version->desc, &version->desc_len,
  401. dev->driver->desc);
  402. return err;
  403. }
  404. /*
  405. * drm_ioctl_permit - Check ioctl permissions against caller
  406. *
  407. * @flags: ioctl permission flags.
  408. * @file_priv: Pointer to struct drm_file identifying the caller.
  409. *
  410. * Checks whether the caller is allowed to run an ioctl with the
  411. * indicated permissions. If so, returns zero. Otherwise returns an
  412. * error code suitable for ioctl return.
  413. */
  414. int drm_ioctl_permit(u32 flags, struct drm_file *file_priv)
  415. {
  416. /* ROOT_ONLY is only for CAP_SYS_ADMIN */
  417. if (unlikely((flags & DRM_ROOT_ONLY) && !capable(CAP_SYS_ADMIN)))
  418. return -EACCES;
  419. /* AUTH is only for authenticated or render client */
  420. if (unlikely((flags & DRM_AUTH) && !drm_is_render_client(file_priv) &&
  421. !file_priv->authenticated))
  422. return -EACCES;
  423. /* MASTER is only for master or control clients */
  424. if (unlikely((flags & DRM_MASTER) && !file_priv->is_master &&
  425. !drm_is_control_client(file_priv)))
  426. return -EACCES;
  427. /* Control clients must be explicitly allowed */
  428. if (unlikely(!(flags & DRM_CONTROL_ALLOW) &&
  429. drm_is_control_client(file_priv)))
  430. return -EACCES;
  431. /* Render clients must be explicitly allowed */
  432. if (unlikely(!(flags & DRM_RENDER_ALLOW) &&
  433. drm_is_render_client(file_priv)))
  434. return -EACCES;
  435. return 0;
  436. }
  437. EXPORT_SYMBOL(drm_ioctl_permit);
  438. #define DRM_IOCTL_DEF(ioctl, _func, _flags) \
  439. [DRM_IOCTL_NR(ioctl)] = { \
  440. .cmd = ioctl, \
  441. .func = _func, \
  442. .flags = _flags, \
  443. .name = #ioctl \
  444. }
  445. /* Ioctl table */
  446. static const struct drm_ioctl_desc drm_ioctls[] = {
  447. DRM_IOCTL_DEF(DRM_IOCTL_VERSION, drm_version,
  448. DRM_UNLOCKED|DRM_RENDER_ALLOW|DRM_CONTROL_ALLOW),
  449. DRM_IOCTL_DEF(DRM_IOCTL_GET_UNIQUE, drm_getunique, 0),
  450. DRM_IOCTL_DEF(DRM_IOCTL_GET_MAGIC, drm_getmagic, DRM_UNLOCKED),
  451. DRM_IOCTL_DEF(DRM_IOCTL_IRQ_BUSID, drm_irq_by_busid, DRM_MASTER|DRM_ROOT_ONLY),
  452. DRM_IOCTL_DEF(DRM_IOCTL_GET_MAP, drm_legacy_getmap_ioctl, DRM_UNLOCKED),
  453. DRM_IOCTL_DEF(DRM_IOCTL_GET_CLIENT, drm_getclient, DRM_UNLOCKED),
  454. DRM_IOCTL_DEF(DRM_IOCTL_GET_STATS, drm_getstats, DRM_UNLOCKED),
  455. DRM_IOCTL_DEF(DRM_IOCTL_GET_CAP, drm_getcap, DRM_UNLOCKED|DRM_RENDER_ALLOW),
  456. DRM_IOCTL_DEF(DRM_IOCTL_SET_CLIENT_CAP, drm_setclientcap, 0),
  457. DRM_IOCTL_DEF(DRM_IOCTL_SET_VERSION, drm_setversion, DRM_MASTER),
  458. DRM_IOCTL_DEF(DRM_IOCTL_SET_UNIQUE, drm_setunique, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  459. DRM_IOCTL_DEF(DRM_IOCTL_BLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  460. DRM_IOCTL_DEF(DRM_IOCTL_UNBLOCK, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  461. DRM_IOCTL_DEF(DRM_IOCTL_AUTH_MAGIC, drm_authmagic, DRM_AUTH|DRM_UNLOCKED|DRM_MASTER),
  462. DRM_IOCTL_DEF(DRM_IOCTL_ADD_MAP, drm_legacy_addmap_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  463. DRM_IOCTL_DEF(DRM_IOCTL_RM_MAP, drm_legacy_rmmap_ioctl, DRM_AUTH),
  464. DRM_IOCTL_DEF(DRM_IOCTL_SET_SAREA_CTX, drm_legacy_setsareactx, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  465. DRM_IOCTL_DEF(DRM_IOCTL_GET_SAREA_CTX, drm_legacy_getsareactx, DRM_AUTH),
  466. DRM_IOCTL_DEF(DRM_IOCTL_SET_MASTER, drm_setmaster_ioctl, DRM_UNLOCKED|DRM_ROOT_ONLY),
  467. DRM_IOCTL_DEF(DRM_IOCTL_DROP_MASTER, drm_dropmaster_ioctl, DRM_UNLOCKED|DRM_ROOT_ONLY),
  468. DRM_IOCTL_DEF(DRM_IOCTL_ADD_CTX, drm_legacy_addctx, DRM_AUTH|DRM_ROOT_ONLY),
  469. DRM_IOCTL_DEF(DRM_IOCTL_RM_CTX, drm_legacy_rmctx, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  470. DRM_IOCTL_DEF(DRM_IOCTL_MOD_CTX, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  471. DRM_IOCTL_DEF(DRM_IOCTL_GET_CTX, drm_legacy_getctx, DRM_AUTH),
  472. DRM_IOCTL_DEF(DRM_IOCTL_SWITCH_CTX, drm_legacy_switchctx, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  473. DRM_IOCTL_DEF(DRM_IOCTL_NEW_CTX, drm_legacy_newctx, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  474. DRM_IOCTL_DEF(DRM_IOCTL_RES_CTX, drm_legacy_resctx, DRM_AUTH),
  475. DRM_IOCTL_DEF(DRM_IOCTL_ADD_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  476. DRM_IOCTL_DEF(DRM_IOCTL_RM_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  477. DRM_IOCTL_DEF(DRM_IOCTL_LOCK, drm_legacy_lock, DRM_AUTH),
  478. DRM_IOCTL_DEF(DRM_IOCTL_UNLOCK, drm_legacy_unlock, DRM_AUTH),
  479. DRM_IOCTL_DEF(DRM_IOCTL_FINISH, drm_noop, DRM_AUTH),
  480. DRM_IOCTL_DEF(DRM_IOCTL_ADD_BUFS, drm_legacy_addbufs, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  481. DRM_IOCTL_DEF(DRM_IOCTL_MARK_BUFS, drm_legacy_markbufs, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  482. DRM_IOCTL_DEF(DRM_IOCTL_INFO_BUFS, drm_legacy_infobufs, DRM_AUTH),
  483. DRM_IOCTL_DEF(DRM_IOCTL_MAP_BUFS, drm_legacy_mapbufs, DRM_AUTH),
  484. DRM_IOCTL_DEF(DRM_IOCTL_FREE_BUFS, drm_legacy_freebufs, DRM_AUTH),
  485. DRM_IOCTL_DEF(DRM_IOCTL_DMA, drm_legacy_dma_ioctl, DRM_AUTH),
  486. DRM_IOCTL_DEF(DRM_IOCTL_CONTROL, drm_control, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  487. #if IS_ENABLED(CONFIG_AGP)
  488. DRM_IOCTL_DEF(DRM_IOCTL_AGP_ACQUIRE, drm_agp_acquire_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  489. DRM_IOCTL_DEF(DRM_IOCTL_AGP_RELEASE, drm_agp_release_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  490. DRM_IOCTL_DEF(DRM_IOCTL_AGP_ENABLE, drm_agp_enable_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  491. DRM_IOCTL_DEF(DRM_IOCTL_AGP_INFO, drm_agp_info_ioctl, DRM_AUTH),
  492. DRM_IOCTL_DEF(DRM_IOCTL_AGP_ALLOC, drm_agp_alloc_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  493. DRM_IOCTL_DEF(DRM_IOCTL_AGP_FREE, drm_agp_free_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  494. DRM_IOCTL_DEF(DRM_IOCTL_AGP_BIND, drm_agp_bind_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  495. DRM_IOCTL_DEF(DRM_IOCTL_AGP_UNBIND, drm_agp_unbind_ioctl, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  496. #endif
  497. DRM_IOCTL_DEF(DRM_IOCTL_SG_ALLOC, drm_legacy_sg_alloc, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  498. DRM_IOCTL_DEF(DRM_IOCTL_SG_FREE, drm_legacy_sg_free, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  499. DRM_IOCTL_DEF(DRM_IOCTL_WAIT_VBLANK, drm_wait_vblank, DRM_UNLOCKED),
  500. DRM_IOCTL_DEF(DRM_IOCTL_MODESET_CTL, drm_modeset_ctl, 0),
  501. DRM_IOCTL_DEF(DRM_IOCTL_UPDATE_DRAW, drm_noop, DRM_AUTH|DRM_MASTER|DRM_ROOT_ONLY),
  502. DRM_IOCTL_DEF(DRM_IOCTL_GEM_CLOSE, drm_gem_close_ioctl, DRM_UNLOCKED|DRM_RENDER_ALLOW),
  503. DRM_IOCTL_DEF(DRM_IOCTL_GEM_FLINK, drm_gem_flink_ioctl, DRM_AUTH|DRM_UNLOCKED),
  504. DRM_IOCTL_DEF(DRM_IOCTL_GEM_OPEN, drm_gem_open_ioctl, DRM_AUTH|DRM_UNLOCKED),
  505. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETRESOURCES, drm_mode_getresources, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  506. DRM_IOCTL_DEF(DRM_IOCTL_PRIME_HANDLE_TO_FD, drm_prime_handle_to_fd_ioctl, DRM_AUTH|DRM_UNLOCKED|DRM_RENDER_ALLOW),
  507. DRM_IOCTL_DEF(DRM_IOCTL_PRIME_FD_TO_HANDLE, drm_prime_fd_to_handle_ioctl, DRM_AUTH|DRM_UNLOCKED|DRM_RENDER_ALLOW),
  508. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPLANERESOURCES, drm_mode_getplane_res, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  509. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETCRTC, drm_mode_getcrtc, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  510. DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETCRTC, drm_mode_setcrtc, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  511. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPLANE, drm_mode_getplane, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  512. DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETPLANE, drm_mode_setplane, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  513. DRM_IOCTL_DEF(DRM_IOCTL_MODE_CURSOR, drm_mode_cursor_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  514. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETGAMMA, drm_mode_gamma_get_ioctl, DRM_UNLOCKED),
  515. DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETGAMMA, drm_mode_gamma_set_ioctl, DRM_MASTER|DRM_UNLOCKED),
  516. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETENCODER, drm_mode_getencoder, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  517. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETCONNECTOR, drm_mode_getconnector, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  518. DRM_IOCTL_DEF(DRM_IOCTL_MODE_ATTACHMODE, drm_noop, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  519. DRM_IOCTL_DEF(DRM_IOCTL_MODE_DETACHMODE, drm_noop, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  520. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPROPERTY, drm_mode_getproperty_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  521. DRM_IOCTL_DEF(DRM_IOCTL_MODE_SETPROPERTY, drm_mode_connector_property_set_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  522. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETPROPBLOB, drm_mode_getblob_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  523. DRM_IOCTL_DEF(DRM_IOCTL_MODE_GETFB, drm_mode_getfb, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  524. DRM_IOCTL_DEF(DRM_IOCTL_MODE_ADDFB, drm_mode_addfb, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  525. DRM_IOCTL_DEF(DRM_IOCTL_MODE_ADDFB2, drm_mode_addfb2, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  526. DRM_IOCTL_DEF(DRM_IOCTL_MODE_RMFB, drm_mode_rmfb, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  527. DRM_IOCTL_DEF(DRM_IOCTL_MODE_PAGE_FLIP, drm_mode_page_flip_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  528. DRM_IOCTL_DEF(DRM_IOCTL_MODE_DIRTYFB, drm_mode_dirtyfb_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  529. DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATE_DUMB, drm_mode_create_dumb_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  530. DRM_IOCTL_DEF(DRM_IOCTL_MODE_MAP_DUMB, drm_mode_mmap_dumb_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  531. DRM_IOCTL_DEF(DRM_IOCTL_MODE_DESTROY_DUMB, drm_mode_destroy_dumb_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  532. DRM_IOCTL_DEF(DRM_IOCTL_MODE_OBJ_GETPROPERTIES, drm_mode_obj_get_properties_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  533. DRM_IOCTL_DEF(DRM_IOCTL_MODE_OBJ_SETPROPERTY, drm_mode_obj_set_property_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  534. DRM_IOCTL_DEF(DRM_IOCTL_MODE_CURSOR2, drm_mode_cursor2_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  535. DRM_IOCTL_DEF(DRM_IOCTL_MODE_ATOMIC, drm_mode_atomic_ioctl, DRM_MASTER|DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  536. DRM_IOCTL_DEF(DRM_IOCTL_MODE_CREATEPROPBLOB, drm_mode_createblob_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  537. DRM_IOCTL_DEF(DRM_IOCTL_MODE_DESTROYPROPBLOB, drm_mode_destroyblob_ioctl, DRM_CONTROL_ALLOW|DRM_UNLOCKED),
  538. };
  539. #define DRM_CORE_IOCTL_COUNT ARRAY_SIZE( drm_ioctls )
  540. /**
  541. * drm_ioctl - ioctl callback implementation for DRM drivers
  542. * @filp: file this ioctl is called on
  543. * @cmd: ioctl cmd number
  544. * @arg: user argument
  545. *
  546. * Looks up the ioctl function in the ::ioctls table, checking for root
  547. * previleges if so required, and dispatches to the respective function.
  548. *
  549. * Returns:
  550. * Zero on success, negative error code on failure.
  551. */
  552. long drm_ioctl(struct file *filp,
  553. unsigned int cmd, unsigned long arg)
  554. {
  555. struct drm_file *file_priv = filp->private_data;
  556. struct drm_device *dev;
  557. const struct drm_ioctl_desc *ioctl = NULL;
  558. drm_ioctl_t *func;
  559. unsigned int nr = DRM_IOCTL_NR(cmd);
  560. int retcode = -EINVAL;
  561. char stack_kdata[128];
  562. char *kdata = NULL;
  563. unsigned int usize, asize, drv_size;
  564. bool is_driver_ioctl;
  565. dev = file_priv->minor->dev;
  566. if (drm_device_is_unplugged(dev))
  567. return -ENODEV;
  568. is_driver_ioctl = nr >= DRM_COMMAND_BASE && nr < DRM_COMMAND_END;
  569. if (is_driver_ioctl) {
  570. /* driver ioctl */
  571. if (nr - DRM_COMMAND_BASE >= dev->driver->num_ioctls)
  572. goto err_i1;
  573. ioctl = &dev->driver->ioctls[nr - DRM_COMMAND_BASE];
  574. } else {
  575. /* core ioctl */
  576. if (nr >= DRM_CORE_IOCTL_COUNT)
  577. goto err_i1;
  578. ioctl = &drm_ioctls[nr];
  579. }
  580. drv_size = _IOC_SIZE(ioctl->cmd);
  581. usize = _IOC_SIZE(cmd);
  582. asize = max(usize, drv_size);
  583. cmd = ioctl->cmd;
  584. DRM_DEBUG("pid=%d, dev=0x%lx, auth=%d, %s\n",
  585. task_pid_nr(current),
  586. (long)old_encode_dev(file_priv->minor->kdev->devt),
  587. file_priv->authenticated, ioctl->name);
  588. /* Do not trust userspace, use our own definition */
  589. func = ioctl->func;
  590. if (unlikely(!func)) {
  591. DRM_DEBUG("no function\n");
  592. retcode = -EINVAL;
  593. goto err_i1;
  594. }
  595. retcode = drm_ioctl_permit(ioctl->flags, file_priv);
  596. if (unlikely(retcode))
  597. goto err_i1;
  598. if (cmd & (IOC_IN | IOC_OUT)) {
  599. if (asize <= sizeof(stack_kdata)) {
  600. kdata = stack_kdata;
  601. } else {
  602. kdata = kmalloc(asize, GFP_KERNEL);
  603. if (!kdata) {
  604. retcode = -ENOMEM;
  605. goto err_i1;
  606. }
  607. }
  608. if (asize > usize)
  609. memset(kdata + usize, 0, asize - usize);
  610. }
  611. if (cmd & IOC_IN) {
  612. if (copy_from_user(kdata, (void __user *)arg,
  613. usize) != 0) {
  614. retcode = -EFAULT;
  615. goto err_i1;
  616. }
  617. } else if (cmd & IOC_OUT) {
  618. memset(kdata, 0, usize);
  619. }
  620. /* Enforce sane locking for kms driver ioctls. Core ioctls are
  621. * too messy still. */
  622. if ((drm_core_check_feature(dev, DRIVER_MODESET) && is_driver_ioctl) ||
  623. (ioctl->flags & DRM_UNLOCKED))
  624. retcode = func(dev, kdata, file_priv);
  625. else {
  626. mutex_lock(&drm_global_mutex);
  627. retcode = func(dev, kdata, file_priv);
  628. mutex_unlock(&drm_global_mutex);
  629. }
  630. if (cmd & IOC_OUT) {
  631. if (copy_to_user((void __user *)arg, kdata,
  632. usize) != 0)
  633. retcode = -EFAULT;
  634. }
  635. err_i1:
  636. if (!ioctl)
  637. DRM_DEBUG("invalid ioctl: pid=%d, dev=0x%lx, auth=%d, cmd=0x%02x, nr=0x%02x\n",
  638. task_pid_nr(current),
  639. (long)old_encode_dev(file_priv->minor->kdev->devt),
  640. file_priv->authenticated, cmd, nr);
  641. if (kdata != stack_kdata)
  642. kfree(kdata);
  643. if (retcode)
  644. DRM_DEBUG("ret = %d\n", retcode);
  645. return retcode;
  646. }
  647. EXPORT_SYMBOL(drm_ioctl);
  648. /**
  649. * drm_ioctl_flags - Check for core ioctl and return ioctl permission flags
  650. * @nr: ioctl number
  651. * @flags: where to return the ioctl permission flags
  652. *
  653. * This ioctl is only used by the vmwgfx driver to augment the access checks
  654. * done by the drm core and insofar a pretty decent layering violation. This
  655. * shouldn't be used by any drivers.
  656. *
  657. * Returns:
  658. * True if the @nr corresponds to a DRM core ioctl numer, false otherwise.
  659. */
  660. bool drm_ioctl_flags(unsigned int nr, unsigned int *flags)
  661. {
  662. if (nr >= DRM_COMMAND_BASE && nr < DRM_COMMAND_END)
  663. return false;
  664. if (nr >= DRM_CORE_IOCTL_COUNT)
  665. return false;
  666. *flags = drm_ioctls[nr].flags;
  667. return true;
  668. }
  669. EXPORT_SYMBOL(drm_ioctl_flags);