xref: /openbmc/linux/drivers/s390/cio/vfio_ccw_cp.c (revision 2904337fd981217784c2820abdee537aa0c70330)
1b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0
20a19e61eSDong Jia Shi /*
30a19e61eSDong Jia Shi  * channel program interfaces
40a19e61eSDong Jia Shi  *
50a19e61eSDong Jia Shi  * Copyright IBM Corp. 2017
60a19e61eSDong Jia Shi  *
70a19e61eSDong Jia Shi  * Author(s): Dong Jia Shi <bjsdjshi@linux.vnet.ibm.com>
80a19e61eSDong Jia Shi  *            Xiao Feng Ren <renxiaof@linux.vnet.ibm.com>
90a19e61eSDong Jia Shi  */
100a19e61eSDong Jia Shi 
110a19e61eSDong Jia Shi #include <linux/mm.h>
120a19e61eSDong Jia Shi #include <linux/slab.h>
130a19e61eSDong Jia Shi #include <linux/iommu.h>
140a19e61eSDong Jia Shi #include <linux/vfio.h>
150a19e61eSDong Jia Shi #include <asm/idals.h>
160a19e61eSDong Jia Shi 
170a19e61eSDong Jia Shi #include "vfio_ccw_cp.h"
180a19e61eSDong Jia Shi 
190a19e61eSDong Jia Shi /*
200a19e61eSDong Jia Shi  * Max length for ccw chain.
210a19e61eSDong Jia Shi  * XXX: Limit to 256, need to check more?
220a19e61eSDong Jia Shi  */
230a19e61eSDong Jia Shi #define CCWCHAIN_LEN_MAX	256
240a19e61eSDong Jia Shi 
250a19e61eSDong Jia Shi struct pfn_array {
2680c57f7aSDong Jia Shi 	/* Starting guest physical I/O address. */
270a19e61eSDong Jia Shi 	unsigned long		pa_iova;
2880c57f7aSDong Jia Shi 	/* Array that stores PFNs of the pages need to pin. */
290a19e61eSDong Jia Shi 	unsigned long		*pa_iova_pfn;
3080c57f7aSDong Jia Shi 	/* Array that receives PFNs of the pages pinned. */
310a19e61eSDong Jia Shi 	unsigned long		*pa_pfn;
325c1cfb1cSDong Jia Shi 	/* Number of pages pinned from @pa_iova. */
330a19e61eSDong Jia Shi 	int			pa_nr;
340a19e61eSDong Jia Shi };
350a19e61eSDong Jia Shi 
360a19e61eSDong Jia Shi struct pfn_array_table {
370a19e61eSDong Jia Shi 	struct pfn_array	*pat_pa;
380a19e61eSDong Jia Shi 	int			pat_nr;
390a19e61eSDong Jia Shi };
400a19e61eSDong Jia Shi 
410a19e61eSDong Jia Shi struct ccwchain {
420a19e61eSDong Jia Shi 	struct list_head	next;
430a19e61eSDong Jia Shi 	struct ccw1		*ch_ccw;
440a19e61eSDong Jia Shi 	/* Guest physical address of the current chain. */
450a19e61eSDong Jia Shi 	u64			ch_iova;
460a19e61eSDong Jia Shi 	/* Count of the valid ccws in chain. */
470a19e61eSDong Jia Shi 	int			ch_len;
480a19e61eSDong Jia Shi 	/* Pinned PAGEs for the original data. */
490a19e61eSDong Jia Shi 	struct pfn_array_table	*ch_pat;
500a19e61eSDong Jia Shi };
510a19e61eSDong Jia Shi 
520a19e61eSDong Jia Shi /*
535c1cfb1cSDong Jia Shi  * pfn_array_alloc_pin() - alloc memory for PFNs, then pin user pages in memory
540a19e61eSDong Jia Shi  * @pa: pfn_array on which to perform the operation
550a19e61eSDong Jia Shi  * @mdev: the mediated device to perform pin/unpin operations
565c1cfb1cSDong Jia Shi  * @iova: target guest physical address
575c1cfb1cSDong Jia Shi  * @len: number of bytes that should be pinned from @iova
580a19e61eSDong Jia Shi  *
595c1cfb1cSDong Jia Shi  * Attempt to allocate memory for PFNs, and pin user pages in memory.
600a19e61eSDong Jia Shi  *
610a19e61eSDong Jia Shi  * Usage of pfn_array:
625c1cfb1cSDong Jia Shi  * We expect (pa_nr == 0) and (pa_iova_pfn == NULL), any field in
635c1cfb1cSDong Jia Shi  * this structure will be filled in by this function.
640a19e61eSDong Jia Shi  *
650a19e61eSDong Jia Shi  * Returns:
660a19e61eSDong Jia Shi  *   Number of pages pinned on success.
675c1cfb1cSDong Jia Shi  *   If @pa->pa_nr is not 0, or @pa->pa_iova_pfn is not NULL initially,
685c1cfb1cSDong Jia Shi  *   returns -EINVAL.
690a19e61eSDong Jia Shi  *   If no pages were pinned, returns -errno.
700a19e61eSDong Jia Shi  */
710a19e61eSDong Jia Shi static int pfn_array_alloc_pin(struct pfn_array *pa, struct device *mdev,
720a19e61eSDong Jia Shi 			       u64 iova, unsigned int len)
730a19e61eSDong Jia Shi {
745c1cfb1cSDong Jia Shi 	int i, ret = 0;
750a19e61eSDong Jia Shi 
764cebc5d6SDong Jia Shi 	if (!len)
774cebc5d6SDong Jia Shi 		return 0;
784cebc5d6SDong Jia Shi 
795c1cfb1cSDong Jia Shi 	if (pa->pa_nr || pa->pa_iova_pfn)
800a19e61eSDong Jia Shi 		return -EINVAL;
810a19e61eSDong Jia Shi 
820a19e61eSDong Jia Shi 	pa->pa_iova = iova;
830a19e61eSDong Jia Shi 
840a19e61eSDong Jia Shi 	pa->pa_nr = ((iova & ~PAGE_MASK) + len + (PAGE_SIZE - 1)) >> PAGE_SHIFT;
850a19e61eSDong Jia Shi 	if (!pa->pa_nr)
860a19e61eSDong Jia Shi 		return -EINVAL;
870a19e61eSDong Jia Shi 
880a19e61eSDong Jia Shi 	pa->pa_iova_pfn = kcalloc(pa->pa_nr,
890a19e61eSDong Jia Shi 				  sizeof(*pa->pa_iova_pfn) +
900a19e61eSDong Jia Shi 				  sizeof(*pa->pa_pfn),
910a19e61eSDong Jia Shi 				  GFP_KERNEL);
920a19e61eSDong Jia Shi 	if (unlikely(!pa->pa_iova_pfn))
930a19e61eSDong Jia Shi 		return -ENOMEM;
940a19e61eSDong Jia Shi 	pa->pa_pfn = pa->pa_iova_pfn + pa->pa_nr;
950a19e61eSDong Jia Shi 
965c1cfb1cSDong Jia Shi 	pa->pa_iova_pfn[0] = pa->pa_iova >> PAGE_SHIFT;
975c1cfb1cSDong Jia Shi 	for (i = 1; i < pa->pa_nr; i++)
985c1cfb1cSDong Jia Shi 		pa->pa_iova_pfn[i] = pa->pa_iova_pfn[i - 1] + 1;
990a19e61eSDong Jia Shi 
1005c1cfb1cSDong Jia Shi 	ret = vfio_pin_pages(mdev, pa->pa_iova_pfn, pa->pa_nr,
1015c1cfb1cSDong Jia Shi 			     IOMMU_READ | IOMMU_WRITE, pa->pa_pfn);
1025c1cfb1cSDong Jia Shi 
1035c1cfb1cSDong Jia Shi 	if (ret < 0) {
1045c1cfb1cSDong Jia Shi 		goto err_out;
1055c1cfb1cSDong Jia Shi 	} else if (ret > 0 && ret != pa->pa_nr) {
1065c1cfb1cSDong Jia Shi 		vfio_unpin_pages(mdev, pa->pa_iova_pfn, ret);
1070a19e61eSDong Jia Shi 		ret = -EINVAL;
1085c1cfb1cSDong Jia Shi 		goto err_out;
1095c1cfb1cSDong Jia Shi 	}
1100a19e61eSDong Jia Shi 
1110a19e61eSDong Jia Shi 	return ret;
1125c1cfb1cSDong Jia Shi 
1135c1cfb1cSDong Jia Shi err_out:
1145c1cfb1cSDong Jia Shi 	pa->pa_nr = 0;
1155c1cfb1cSDong Jia Shi 	kfree(pa->pa_iova_pfn);
1165c1cfb1cSDong Jia Shi 	pa->pa_iova_pfn = NULL;
1175c1cfb1cSDong Jia Shi 
1185c1cfb1cSDong Jia Shi 	return ret;
1195c1cfb1cSDong Jia Shi }
1205c1cfb1cSDong Jia Shi 
1215c1cfb1cSDong Jia Shi /* Unpin the pages before releasing the memory. */
1225c1cfb1cSDong Jia Shi static void pfn_array_unpin_free(struct pfn_array *pa, struct device *mdev)
1235c1cfb1cSDong Jia Shi {
1245c1cfb1cSDong Jia Shi 	vfio_unpin_pages(mdev, pa->pa_iova_pfn, pa->pa_nr);
1255c1cfb1cSDong Jia Shi 	pa->pa_nr = 0;
1265c1cfb1cSDong Jia Shi 	kfree(pa->pa_iova_pfn);
1270a19e61eSDong Jia Shi }
1280a19e61eSDong Jia Shi 
1290a19e61eSDong Jia Shi static int pfn_array_table_init(struct pfn_array_table *pat, int nr)
1300a19e61eSDong Jia Shi {
1310a19e61eSDong Jia Shi 	pat->pat_pa = kcalloc(nr, sizeof(*pat->pat_pa), GFP_KERNEL);
1320a19e61eSDong Jia Shi 	if (unlikely(ZERO_OR_NULL_PTR(pat->pat_pa))) {
1330a19e61eSDong Jia Shi 		pat->pat_nr = 0;
1340a19e61eSDong Jia Shi 		return -ENOMEM;
1350a19e61eSDong Jia Shi 	}
1360a19e61eSDong Jia Shi 
1370a19e61eSDong Jia Shi 	pat->pat_nr = nr;
1380a19e61eSDong Jia Shi 
1390a19e61eSDong Jia Shi 	return 0;
1400a19e61eSDong Jia Shi }
1410a19e61eSDong Jia Shi 
1420a19e61eSDong Jia Shi static void pfn_array_table_unpin_free(struct pfn_array_table *pat,
1430a19e61eSDong Jia Shi 				       struct device *mdev)
1440a19e61eSDong Jia Shi {
1450a19e61eSDong Jia Shi 	int i;
1460a19e61eSDong Jia Shi 
1470a19e61eSDong Jia Shi 	for (i = 0; i < pat->pat_nr; i++)
1480a19e61eSDong Jia Shi 		pfn_array_unpin_free(pat->pat_pa + i, mdev);
1490a19e61eSDong Jia Shi 
1500a19e61eSDong Jia Shi 	if (pat->pat_nr) {
1510a19e61eSDong Jia Shi 		kfree(pat->pat_pa);
1520a19e61eSDong Jia Shi 		pat->pat_pa = NULL;
1530a19e61eSDong Jia Shi 		pat->pat_nr = 0;
1540a19e61eSDong Jia Shi 	}
1550a19e61eSDong Jia Shi }
1560a19e61eSDong Jia Shi 
1570a19e61eSDong Jia Shi static bool pfn_array_table_iova_pinned(struct pfn_array_table *pat,
1580a19e61eSDong Jia Shi 					unsigned long iova)
1590a19e61eSDong Jia Shi {
1600a19e61eSDong Jia Shi 	struct pfn_array *pa = pat->pat_pa;
1610a19e61eSDong Jia Shi 	unsigned long iova_pfn = iova >> PAGE_SHIFT;
1620a19e61eSDong Jia Shi 	int i, j;
1630a19e61eSDong Jia Shi 
1640a19e61eSDong Jia Shi 	for (i = 0; i < pat->pat_nr; i++, pa++)
1650a19e61eSDong Jia Shi 		for (j = 0; j < pa->pa_nr; j++)
16624abf290SEric Farman 			if (pa->pa_iova_pfn[j] == iova_pfn)
1670a19e61eSDong Jia Shi 				return true;
1680a19e61eSDong Jia Shi 
1690a19e61eSDong Jia Shi 	return false;
1700a19e61eSDong Jia Shi }
1710a19e61eSDong Jia Shi /* Create the list idal words for a pfn_array_table. */
1720a19e61eSDong Jia Shi static inline void pfn_array_table_idal_create_words(
1730a19e61eSDong Jia Shi 	struct pfn_array_table *pat,
1740a19e61eSDong Jia Shi 	unsigned long *idaws)
1750a19e61eSDong Jia Shi {
1760a19e61eSDong Jia Shi 	struct pfn_array *pa;
1770a19e61eSDong Jia Shi 	int i, j, k;
1780a19e61eSDong Jia Shi 
1790a19e61eSDong Jia Shi 	/*
1800a19e61eSDong Jia Shi 	 * Idal words (execept the first one) rely on the memory being 4k
1810a19e61eSDong Jia Shi 	 * aligned. If a user virtual address is 4K aligned, then it's
1820a19e61eSDong Jia Shi 	 * corresponding kernel physical address will also be 4K aligned. Thus
1830a19e61eSDong Jia Shi 	 * there will be no problem here to simply use the phys to create an
1840a19e61eSDong Jia Shi 	 * idaw.
1850a19e61eSDong Jia Shi 	 */
1860a19e61eSDong Jia Shi 	k = 0;
1870a19e61eSDong Jia Shi 	for (i = 0; i < pat->pat_nr; i++) {
1880a19e61eSDong Jia Shi 		pa = pat->pat_pa + i;
1890a19e61eSDong Jia Shi 		for (j = 0; j < pa->pa_nr; j++) {
1900a19e61eSDong Jia Shi 			idaws[k] = pa->pa_pfn[j] << PAGE_SHIFT;
1910a19e61eSDong Jia Shi 			if (k == 0)
1920a19e61eSDong Jia Shi 				idaws[k] += pa->pa_iova & (PAGE_SIZE - 1);
1930a19e61eSDong Jia Shi 			k++;
1940a19e61eSDong Jia Shi 		}
1950a19e61eSDong Jia Shi 	}
1960a19e61eSDong Jia Shi }
1970a19e61eSDong Jia Shi 
1980a19e61eSDong Jia Shi 
1990a19e61eSDong Jia Shi /*
2000a19e61eSDong Jia Shi  * Within the domain (@mdev), copy @n bytes from a guest physical
2010a19e61eSDong Jia Shi  * address (@iova) to a host physical address (@to).
2020a19e61eSDong Jia Shi  */
2030a19e61eSDong Jia Shi static long copy_from_iova(struct device *mdev,
2040a19e61eSDong Jia Shi 			   void *to, u64 iova,
2050a19e61eSDong Jia Shi 			   unsigned long n)
2060a19e61eSDong Jia Shi {
2070a19e61eSDong Jia Shi 	struct pfn_array pa = {0};
2080a19e61eSDong Jia Shi 	u64 from;
2090a19e61eSDong Jia Shi 	int i, ret;
2100a19e61eSDong Jia Shi 	unsigned long l, m;
2110a19e61eSDong Jia Shi 
2120a19e61eSDong Jia Shi 	ret = pfn_array_alloc_pin(&pa, mdev, iova, n);
2130a19e61eSDong Jia Shi 	if (ret <= 0)
2140a19e61eSDong Jia Shi 		return ret;
2150a19e61eSDong Jia Shi 
2160a19e61eSDong Jia Shi 	l = n;
2170a19e61eSDong Jia Shi 	for (i = 0; i < pa.pa_nr; i++) {
2180a19e61eSDong Jia Shi 		from = pa.pa_pfn[i] << PAGE_SHIFT;
2190a19e61eSDong Jia Shi 		m = PAGE_SIZE;
2200a19e61eSDong Jia Shi 		if (i == 0) {
2210a19e61eSDong Jia Shi 			from += iova & (PAGE_SIZE - 1);
2220a19e61eSDong Jia Shi 			m -= iova & (PAGE_SIZE - 1);
2230a19e61eSDong Jia Shi 		}
2240a19e61eSDong Jia Shi 
2250a19e61eSDong Jia Shi 		m = min(l, m);
2260a19e61eSDong Jia Shi 		memcpy(to + (n - l), (void *)from, m);
2270a19e61eSDong Jia Shi 
2280a19e61eSDong Jia Shi 		l -= m;
2290a19e61eSDong Jia Shi 		if (l == 0)
2300a19e61eSDong Jia Shi 			break;
2310a19e61eSDong Jia Shi 	}
2320a19e61eSDong Jia Shi 
2330a19e61eSDong Jia Shi 	pfn_array_unpin_free(&pa, mdev);
2340a19e61eSDong Jia Shi 
2350a19e61eSDong Jia Shi 	return l;
2360a19e61eSDong Jia Shi }
2370a19e61eSDong Jia Shi 
2380a19e61eSDong Jia Shi static long copy_ccw_from_iova(struct channel_program *cp,
2390a19e61eSDong Jia Shi 			       struct ccw1 *to, u64 iova,
2400a19e61eSDong Jia Shi 			       unsigned long len)
2410a19e61eSDong Jia Shi {
242d686f21aSDong Jia Shi 	struct ccw0 ccw0;
243d686f21aSDong Jia Shi 	struct ccw1 *pccw1;
244d686f21aSDong Jia Shi 	int ret;
245d686f21aSDong Jia Shi 	int i;
246d686f21aSDong Jia Shi 
247d686f21aSDong Jia Shi 	ret = copy_from_iova(cp->mdev, to, iova, len * sizeof(struct ccw1));
248d686f21aSDong Jia Shi 	if (ret)
249d686f21aSDong Jia Shi 		return ret;
250d686f21aSDong Jia Shi 
251d686f21aSDong Jia Shi 	if (!cp->orb.cmd.fmt) {
252d686f21aSDong Jia Shi 		pccw1 = to;
253d686f21aSDong Jia Shi 		for (i = 0; i < len; i++) {
254d686f21aSDong Jia Shi 			ccw0 = *(struct ccw0 *)pccw1;
255d686f21aSDong Jia Shi 			if ((pccw1->cmd_code & 0x0f) == CCW_CMD_TIC) {
256d686f21aSDong Jia Shi 				pccw1->cmd_code = CCW_CMD_TIC;
257d686f21aSDong Jia Shi 				pccw1->flags = 0;
258d686f21aSDong Jia Shi 				pccw1->count = 0;
259d686f21aSDong Jia Shi 			} else {
260d686f21aSDong Jia Shi 				pccw1->cmd_code = ccw0.cmd_code;
261d686f21aSDong Jia Shi 				pccw1->flags = ccw0.flags;
262d686f21aSDong Jia Shi 				pccw1->count = ccw0.count;
263d686f21aSDong Jia Shi 			}
264d686f21aSDong Jia Shi 			pccw1->cda = ccw0.cda;
265d686f21aSDong Jia Shi 			pccw1++;
266d686f21aSDong Jia Shi 		}
267d686f21aSDong Jia Shi 	}
268d686f21aSDong Jia Shi 
269d686f21aSDong Jia Shi 	return ret;
2700a19e61eSDong Jia Shi }
2710a19e61eSDong Jia Shi 
2720a19e61eSDong Jia Shi /*
2730a19e61eSDong Jia Shi  * Helpers to operate ccwchain.
2740a19e61eSDong Jia Shi  */
2750a19e61eSDong Jia Shi #define ccw_is_test(_ccw) (((_ccw)->cmd_code & 0x0F) == 0)
2760a19e61eSDong Jia Shi 
2770a19e61eSDong Jia Shi #define ccw_is_noop(_ccw) ((_ccw)->cmd_code == CCW_CMD_NOOP)
2780a19e61eSDong Jia Shi 
2790a19e61eSDong Jia Shi #define ccw_is_tic(_ccw) ((_ccw)->cmd_code == CCW_CMD_TIC)
2800a19e61eSDong Jia Shi 
2810a19e61eSDong Jia Shi #define ccw_is_idal(_ccw) ((_ccw)->flags & CCW_FLAG_IDA)
2820a19e61eSDong Jia Shi 
2830a19e61eSDong Jia Shi 
2840a19e61eSDong Jia Shi #define ccw_is_chain(_ccw) ((_ccw)->flags & (CCW_FLAG_CC | CCW_FLAG_DC))
2850a19e61eSDong Jia Shi 
28648bd0eeeSEric Farman /*
28748bd0eeeSEric Farman  * is_cpa_within_range()
28848bd0eeeSEric Farman  *
28948bd0eeeSEric Farman  * @cpa: channel program address being questioned
29048bd0eeeSEric Farman  * @head: address of the beginning of a CCW chain
29148bd0eeeSEric Farman  * @len: number of CCWs within the chain
29248bd0eeeSEric Farman  *
29348bd0eeeSEric Farman  * Determine whether the address of a CCW (whether a new chain,
29448bd0eeeSEric Farman  * or the target of a TIC) falls within a range (including the end points).
29548bd0eeeSEric Farman  *
29648bd0eeeSEric Farman  * Returns 1 if yes, 0 if no.
29748bd0eeeSEric Farman  */
29848bd0eeeSEric Farman static inline int is_cpa_within_range(u32 cpa, u32 head, int len)
29948bd0eeeSEric Farman {
30048bd0eeeSEric Farman 	u32 tail = head + (len - 1) * sizeof(struct ccw1);
30148bd0eeeSEric Farman 
30248bd0eeeSEric Farman 	return (head <= cpa && cpa <= tail);
30348bd0eeeSEric Farman }
30448bd0eeeSEric Farman 
30548bd0eeeSEric Farman static inline int is_tic_within_range(struct ccw1 *ccw, u32 head, int len)
30648bd0eeeSEric Farman {
30748bd0eeeSEric Farman 	if (!ccw_is_tic(ccw))
30848bd0eeeSEric Farman 		return 0;
30948bd0eeeSEric Farman 
31048bd0eeeSEric Farman 	return is_cpa_within_range(ccw->cda, head, len);
31148bd0eeeSEric Farman }
31248bd0eeeSEric Farman 
3130a19e61eSDong Jia Shi static struct ccwchain *ccwchain_alloc(struct channel_program *cp, int len)
3140a19e61eSDong Jia Shi {
3150a19e61eSDong Jia Shi 	struct ccwchain *chain;
3160a19e61eSDong Jia Shi 	void *data;
3170a19e61eSDong Jia Shi 	size_t size;
3180a19e61eSDong Jia Shi 
3190a19e61eSDong Jia Shi 	/* Make ccw address aligned to 8. */
3200a19e61eSDong Jia Shi 	size = ((sizeof(*chain) + 7L) & -8L) +
3210a19e61eSDong Jia Shi 		sizeof(*chain->ch_ccw) * len +
3220a19e61eSDong Jia Shi 		sizeof(*chain->ch_pat) * len;
3230a19e61eSDong Jia Shi 	chain = kzalloc(size, GFP_DMA | GFP_KERNEL);
3240a19e61eSDong Jia Shi 	if (!chain)
3250a19e61eSDong Jia Shi 		return NULL;
3260a19e61eSDong Jia Shi 
3270a19e61eSDong Jia Shi 	data = (u8 *)chain + ((sizeof(*chain) + 7L) & -8L);
3280a19e61eSDong Jia Shi 	chain->ch_ccw = (struct ccw1 *)data;
3290a19e61eSDong Jia Shi 
3300a19e61eSDong Jia Shi 	data = (u8 *)(chain->ch_ccw) + sizeof(*chain->ch_ccw) * len;
3310a19e61eSDong Jia Shi 	chain->ch_pat = (struct pfn_array_table *)data;
3320a19e61eSDong Jia Shi 
3330a19e61eSDong Jia Shi 	chain->ch_len = len;
3340a19e61eSDong Jia Shi 
3350a19e61eSDong Jia Shi 	list_add_tail(&chain->next, &cp->ccwchain_list);
3360a19e61eSDong Jia Shi 
3370a19e61eSDong Jia Shi 	return chain;
3380a19e61eSDong Jia Shi }
3390a19e61eSDong Jia Shi 
3400a19e61eSDong Jia Shi static void ccwchain_free(struct ccwchain *chain)
3410a19e61eSDong Jia Shi {
3420a19e61eSDong Jia Shi 	list_del(&chain->next);
3430a19e61eSDong Jia Shi 	kfree(chain);
3440a19e61eSDong Jia Shi }
3450a19e61eSDong Jia Shi 
3460a19e61eSDong Jia Shi /* Free resource for a ccw that allocated memory for its cda. */
3470a19e61eSDong Jia Shi static void ccwchain_cda_free(struct ccwchain *chain, int idx)
3480a19e61eSDong Jia Shi {
3490a19e61eSDong Jia Shi 	struct ccw1 *ccw = chain->ch_ccw + idx;
3500a19e61eSDong Jia Shi 
351408358b5SJason J. Herne 	if (ccw_is_test(ccw) || ccw_is_noop(ccw) || ccw_is_tic(ccw))
352408358b5SJason J. Herne 		return;
3530a19e61eSDong Jia Shi 	if (!ccw->count)
3540a19e61eSDong Jia Shi 		return;
3550a19e61eSDong Jia Shi 
3560a19e61eSDong Jia Shi 	kfree((void *)(u64)ccw->cda);
3570a19e61eSDong Jia Shi }
3580a19e61eSDong Jia Shi 
3590a19e61eSDong Jia Shi /* Unpin the pages then free the memory resources. */
3600a19e61eSDong Jia Shi static void cp_unpin_free(struct channel_program *cp)
3610a19e61eSDong Jia Shi {
3620a19e61eSDong Jia Shi 	struct ccwchain *chain, *temp;
3630a19e61eSDong Jia Shi 	int i;
3640a19e61eSDong Jia Shi 
3650a19e61eSDong Jia Shi 	list_for_each_entry_safe(chain, temp, &cp->ccwchain_list, next) {
3660a19e61eSDong Jia Shi 		for (i = 0; i < chain->ch_len; i++) {
3670a19e61eSDong Jia Shi 			pfn_array_table_unpin_free(chain->ch_pat + i,
3680a19e61eSDong Jia Shi 						   cp->mdev);
3690a19e61eSDong Jia Shi 			ccwchain_cda_free(chain, i);
3700a19e61eSDong Jia Shi 		}
3710a19e61eSDong Jia Shi 		ccwchain_free(chain);
3720a19e61eSDong Jia Shi 	}
3730a19e61eSDong Jia Shi }
3740a19e61eSDong Jia Shi 
3750a19e61eSDong Jia Shi /**
3760a19e61eSDong Jia Shi  * ccwchain_calc_length - calculate the length of the ccw chain.
3770a19e61eSDong Jia Shi  * @iova: guest physical address of the target ccw chain
3780a19e61eSDong Jia Shi  * @cp: channel_program on which to perform the operation
3790a19e61eSDong Jia Shi  *
3800a19e61eSDong Jia Shi  * This is the chain length not considering any TICs.
3810a19e61eSDong Jia Shi  * You need to do a new round for each TIC target.
3820a19e61eSDong Jia Shi  *
383fb9e7880SHalil Pasic  * The program is also validated for absence of not yet supported
384fb9e7880SHalil Pasic  * indirect data addressing scenarios.
385fb9e7880SHalil Pasic  *
3860a19e61eSDong Jia Shi  * Returns: the length of the ccw chain or -errno.
3870a19e61eSDong Jia Shi  */
3880a19e61eSDong Jia Shi static int ccwchain_calc_length(u64 iova, struct channel_program *cp)
3890a19e61eSDong Jia Shi {
3900a19e61eSDong Jia Shi 	struct ccw1 *ccw, *p;
3910a19e61eSDong Jia Shi 	int cnt;
3920a19e61eSDong Jia Shi 
3930a19e61eSDong Jia Shi 	/*
3940a19e61eSDong Jia Shi 	 * Copy current chain from guest to host kernel.
3950a19e61eSDong Jia Shi 	 * Currently the chain length is limited to CCWCHAIN_LEN_MAX (256).
3960a19e61eSDong Jia Shi 	 * So copying 2K is enough (safe).
3970a19e61eSDong Jia Shi 	 */
3980a19e61eSDong Jia Shi 	p = ccw = kcalloc(CCWCHAIN_LEN_MAX, sizeof(*ccw), GFP_KERNEL);
3990a19e61eSDong Jia Shi 	if (!ccw)
4000a19e61eSDong Jia Shi 		return -ENOMEM;
4010a19e61eSDong Jia Shi 
4020a19e61eSDong Jia Shi 	cnt = copy_ccw_from_iova(cp, ccw, iova, CCWCHAIN_LEN_MAX);
4030a19e61eSDong Jia Shi 	if (cnt) {
4040a19e61eSDong Jia Shi 		kfree(ccw);
4050a19e61eSDong Jia Shi 		return cnt;
4060a19e61eSDong Jia Shi 	}
4070a19e61eSDong Jia Shi 
4080a19e61eSDong Jia Shi 	cnt = 0;
4090a19e61eSDong Jia Shi 	do {
4100a19e61eSDong Jia Shi 		cnt++;
4110a19e61eSDong Jia Shi 
412fb9e7880SHalil Pasic 		/*
413fb9e7880SHalil Pasic 		 * As we don't want to fail direct addressing even if the
414fb9e7880SHalil Pasic 		 * orb specified one of the unsupported formats, we defer
415fb9e7880SHalil Pasic 		 * checking for IDAWs in unsupported formats to here.
416fb9e7880SHalil Pasic 		 */
417b89e242eSEric Farman 		if ((!cp->orb.cmd.c64 || cp->orb.cmd.i2k) && ccw_is_idal(ccw)) {
418b89e242eSEric Farman 			kfree(p);
419fb9e7880SHalil Pasic 			return -EOPNOTSUPP;
420b89e242eSEric Farman 		}
421fb9e7880SHalil Pasic 
42248bd0eeeSEric Farman 		/*
42348bd0eeeSEric Farman 		 * We want to keep counting if the current CCW has the
42448bd0eeeSEric Farman 		 * command-chaining flag enabled, or if it is a TIC CCW
42548bd0eeeSEric Farman 		 * that loops back into the current chain.  The latter
42648bd0eeeSEric Farman 		 * is used for device orientation, where the CCW PRIOR to
42748bd0eeeSEric Farman 		 * the TIC can either jump to the TIC or a CCW immediately
42848bd0eeeSEric Farman 		 * after the TIC, depending on the results of its operation.
42948bd0eeeSEric Farman 		 */
43048bd0eeeSEric Farman 		if (!ccw_is_chain(ccw) && !is_tic_within_range(ccw, iova, cnt))
4310a19e61eSDong Jia Shi 			break;
4320a19e61eSDong Jia Shi 
4330a19e61eSDong Jia Shi 		ccw++;
4340a19e61eSDong Jia Shi 	} while (cnt < CCWCHAIN_LEN_MAX + 1);
4350a19e61eSDong Jia Shi 
4360a19e61eSDong Jia Shi 	if (cnt == CCWCHAIN_LEN_MAX + 1)
4370a19e61eSDong Jia Shi 		cnt = -EINVAL;
4380a19e61eSDong Jia Shi 
4390a19e61eSDong Jia Shi 	kfree(p);
4400a19e61eSDong Jia Shi 	return cnt;
4410a19e61eSDong Jia Shi }
4420a19e61eSDong Jia Shi 
4430a19e61eSDong Jia Shi static int tic_target_chain_exists(struct ccw1 *tic, struct channel_program *cp)
4440a19e61eSDong Jia Shi {
4450a19e61eSDong Jia Shi 	struct ccwchain *chain;
446*2904337fSEric Farman 	u32 ccw_head;
4470a19e61eSDong Jia Shi 
4480a19e61eSDong Jia Shi 	list_for_each_entry(chain, &cp->ccwchain_list, next) {
4490a19e61eSDong Jia Shi 		ccw_head = chain->ch_iova;
450*2904337fSEric Farman 		if (is_cpa_within_range(tic->cda, ccw_head, chain->ch_len))
4510a19e61eSDong Jia Shi 			return 1;
4520a19e61eSDong Jia Shi 	}
4530a19e61eSDong Jia Shi 
4540a19e61eSDong Jia Shi 	return 0;
4550a19e61eSDong Jia Shi }
4560a19e61eSDong Jia Shi 
4570a19e61eSDong Jia Shi static int ccwchain_loop_tic(struct ccwchain *chain,
4580a19e61eSDong Jia Shi 			     struct channel_program *cp);
4590a19e61eSDong Jia Shi 
4600a19e61eSDong Jia Shi static int ccwchain_handle_tic(struct ccw1 *tic, struct channel_program *cp)
4610a19e61eSDong Jia Shi {
4620a19e61eSDong Jia Shi 	struct ccwchain *chain;
4630a19e61eSDong Jia Shi 	int len, ret;
4640a19e61eSDong Jia Shi 
4650a19e61eSDong Jia Shi 	/* May transfer to an existing chain. */
4660a19e61eSDong Jia Shi 	if (tic_target_chain_exists(tic, cp))
4670a19e61eSDong Jia Shi 		return 0;
4680a19e61eSDong Jia Shi 
4690a19e61eSDong Jia Shi 	/* Get chain length. */
4700a19e61eSDong Jia Shi 	len = ccwchain_calc_length(tic->cda, cp);
4710a19e61eSDong Jia Shi 	if (len < 0)
4720a19e61eSDong Jia Shi 		return len;
4730a19e61eSDong Jia Shi 
4740a19e61eSDong Jia Shi 	/* Need alloc a new chain for this one. */
4750a19e61eSDong Jia Shi 	chain = ccwchain_alloc(cp, len);
4760a19e61eSDong Jia Shi 	if (!chain)
4770a19e61eSDong Jia Shi 		return -ENOMEM;
4780a19e61eSDong Jia Shi 	chain->ch_iova = tic->cda;
4790a19e61eSDong Jia Shi 
4800a19e61eSDong Jia Shi 	/* Copy the new chain from user. */
4810a19e61eSDong Jia Shi 	ret = copy_ccw_from_iova(cp, chain->ch_ccw, tic->cda, len);
4820a19e61eSDong Jia Shi 	if (ret) {
4830a19e61eSDong Jia Shi 		ccwchain_free(chain);
4840a19e61eSDong Jia Shi 		return ret;
4850a19e61eSDong Jia Shi 	}
4860a19e61eSDong Jia Shi 
4870a19e61eSDong Jia Shi 	/* Loop for tics on this new chain. */
4880a19e61eSDong Jia Shi 	return ccwchain_loop_tic(chain, cp);
4890a19e61eSDong Jia Shi }
4900a19e61eSDong Jia Shi 
4910a19e61eSDong Jia Shi /* Loop for TICs. */
4920a19e61eSDong Jia Shi static int ccwchain_loop_tic(struct ccwchain *chain, struct channel_program *cp)
4930a19e61eSDong Jia Shi {
4940a19e61eSDong Jia Shi 	struct ccw1 *tic;
4950a19e61eSDong Jia Shi 	int i, ret;
4960a19e61eSDong Jia Shi 
4970a19e61eSDong Jia Shi 	for (i = 0; i < chain->ch_len; i++) {
4980a19e61eSDong Jia Shi 		tic = chain->ch_ccw + i;
4990a19e61eSDong Jia Shi 
5000a19e61eSDong Jia Shi 		if (!ccw_is_tic(tic))
5010a19e61eSDong Jia Shi 			continue;
5020a19e61eSDong Jia Shi 
5030a19e61eSDong Jia Shi 		ret = ccwchain_handle_tic(tic, cp);
5040a19e61eSDong Jia Shi 		if (ret)
5050a19e61eSDong Jia Shi 			return ret;
5060a19e61eSDong Jia Shi 	}
5070a19e61eSDong Jia Shi 
5080a19e61eSDong Jia Shi 	return 0;
5090a19e61eSDong Jia Shi }
5100a19e61eSDong Jia Shi 
5110a19e61eSDong Jia Shi static int ccwchain_fetch_tic(struct ccwchain *chain,
5120a19e61eSDong Jia Shi 			      int idx,
5130a19e61eSDong Jia Shi 			      struct channel_program *cp)
5140a19e61eSDong Jia Shi {
5150a19e61eSDong Jia Shi 	struct ccw1 *ccw = chain->ch_ccw + idx;
5160a19e61eSDong Jia Shi 	struct ccwchain *iter;
517*2904337fSEric Farman 	u32 ccw_head;
5180a19e61eSDong Jia Shi 
5190a19e61eSDong Jia Shi 	list_for_each_entry(iter, &cp->ccwchain_list, next) {
5200a19e61eSDong Jia Shi 		ccw_head = iter->ch_iova;
521*2904337fSEric Farman 		if (is_cpa_within_range(ccw->cda, ccw_head, iter->ch_len)) {
522c389377cSJason J. Herne 			ccw->cda = (__u32) (addr_t) (((char *)iter->ch_ccw) +
5230a19e61eSDong Jia Shi 						     (ccw->cda - ccw_head));
5240a19e61eSDong Jia Shi 			return 0;
5250a19e61eSDong Jia Shi 		}
5260a19e61eSDong Jia Shi 	}
5270a19e61eSDong Jia Shi 
5280a19e61eSDong Jia Shi 	return -EFAULT;
5290a19e61eSDong Jia Shi }
5300a19e61eSDong Jia Shi 
5310a19e61eSDong Jia Shi static int ccwchain_fetch_direct(struct ccwchain *chain,
5320a19e61eSDong Jia Shi 				 int idx,
5330a19e61eSDong Jia Shi 				 struct channel_program *cp)
5340a19e61eSDong Jia Shi {
5350a19e61eSDong Jia Shi 	struct ccw1 *ccw;
5360a19e61eSDong Jia Shi 	struct pfn_array_table *pat;
5370a19e61eSDong Jia Shi 	unsigned long *idaws;
5386238f921SDong Jia Shi 	int ret;
5390a19e61eSDong Jia Shi 
5400a19e61eSDong Jia Shi 	ccw = chain->ch_ccw + idx;
5410a19e61eSDong Jia Shi 
5424cebc5d6SDong Jia Shi 	if (!ccw->count) {
5434cebc5d6SDong Jia Shi 		/*
5444cebc5d6SDong Jia Shi 		 * We just want the translation result of any direct ccw
5454cebc5d6SDong Jia Shi 		 * to be an IDA ccw, so let's add the IDA flag for it.
5464cebc5d6SDong Jia Shi 		 * Although the flag will be ignored by firmware.
5474cebc5d6SDong Jia Shi 		 */
5484cebc5d6SDong Jia Shi 		ccw->flags |= CCW_FLAG_IDA;
5494cebc5d6SDong Jia Shi 		return 0;
5504cebc5d6SDong Jia Shi 	}
5514cebc5d6SDong Jia Shi 
5520a19e61eSDong Jia Shi 	/*
5530a19e61eSDong Jia Shi 	 * Pin data page(s) in memory.
5540a19e61eSDong Jia Shi 	 * The number of pages actually is the count of the idaws which will be
5550a19e61eSDong Jia Shi 	 * needed when translating a direct ccw to a idal ccw.
5560a19e61eSDong Jia Shi 	 */
5570a19e61eSDong Jia Shi 	pat = chain->ch_pat + idx;
5586238f921SDong Jia Shi 	ret = pfn_array_table_init(pat, 1);
5596238f921SDong Jia Shi 	if (ret)
5606238f921SDong Jia Shi 		goto out_init;
5616238f921SDong Jia Shi 
5626238f921SDong Jia Shi 	ret = pfn_array_alloc_pin(pat->pat_pa, cp->mdev, ccw->cda, ccw->count);
5636238f921SDong Jia Shi 	if (ret < 0)
564806212f9SEric Farman 		goto out_unpin;
5650a19e61eSDong Jia Shi 
5660a19e61eSDong Jia Shi 	/* Translate this direct ccw to a idal ccw. */
5676238f921SDong Jia Shi 	idaws = kcalloc(ret, sizeof(*idaws), GFP_DMA | GFP_KERNEL);
5680a19e61eSDong Jia Shi 	if (!idaws) {
5696238f921SDong Jia Shi 		ret = -ENOMEM;
5706238f921SDong Jia Shi 		goto out_unpin;
5710a19e61eSDong Jia Shi 	}
5720a19e61eSDong Jia Shi 	ccw->cda = (__u32) virt_to_phys(idaws);
5730a19e61eSDong Jia Shi 	ccw->flags |= CCW_FLAG_IDA;
5740a19e61eSDong Jia Shi 
5750a19e61eSDong Jia Shi 	pfn_array_table_idal_create_words(pat, idaws);
5760a19e61eSDong Jia Shi 
5770a19e61eSDong Jia Shi 	return 0;
5786238f921SDong Jia Shi 
5796238f921SDong Jia Shi out_unpin:
5806238f921SDong Jia Shi 	pfn_array_table_unpin_free(pat, cp->mdev);
5816238f921SDong Jia Shi out_init:
5826238f921SDong Jia Shi 	ccw->cda = 0;
5836238f921SDong Jia Shi 	return ret;
5840a19e61eSDong Jia Shi }
5850a19e61eSDong Jia Shi 
5860a19e61eSDong Jia Shi static int ccwchain_fetch_idal(struct ccwchain *chain,
5870a19e61eSDong Jia Shi 			       int idx,
5880a19e61eSDong Jia Shi 			       struct channel_program *cp)
5890a19e61eSDong Jia Shi {
5900a19e61eSDong Jia Shi 	struct ccw1 *ccw;
5910a19e61eSDong Jia Shi 	struct pfn_array_table *pat;
5920a19e61eSDong Jia Shi 	unsigned long *idaws;
5930a19e61eSDong Jia Shi 	u64 idaw_iova;
5940a19e61eSDong Jia Shi 	unsigned int idaw_nr, idaw_len;
5950a19e61eSDong Jia Shi 	int i, ret;
5960a19e61eSDong Jia Shi 
5970a19e61eSDong Jia Shi 	ccw = chain->ch_ccw + idx;
5980a19e61eSDong Jia Shi 
5994cebc5d6SDong Jia Shi 	if (!ccw->count)
6004cebc5d6SDong Jia Shi 		return 0;
6014cebc5d6SDong Jia Shi 
6020a19e61eSDong Jia Shi 	/* Calculate size of idaws. */
6030a19e61eSDong Jia Shi 	ret = copy_from_iova(cp->mdev, &idaw_iova, ccw->cda, sizeof(idaw_iova));
6040a19e61eSDong Jia Shi 	if (ret)
6050a19e61eSDong Jia Shi 		return ret;
6060a19e61eSDong Jia Shi 	idaw_nr = idal_nr_words((void *)(idaw_iova), ccw->count);
6070a19e61eSDong Jia Shi 	idaw_len = idaw_nr * sizeof(*idaws);
6080a19e61eSDong Jia Shi 
6090a19e61eSDong Jia Shi 	/* Pin data page(s) in memory. */
6100a19e61eSDong Jia Shi 	pat = chain->ch_pat + idx;
6110a19e61eSDong Jia Shi 	ret = pfn_array_table_init(pat, idaw_nr);
6120a19e61eSDong Jia Shi 	if (ret)
6136238f921SDong Jia Shi 		goto out_init;
6140a19e61eSDong Jia Shi 
6150a19e61eSDong Jia Shi 	/* Translate idal ccw to use new allocated idaws. */
6160a19e61eSDong Jia Shi 	idaws = kzalloc(idaw_len, GFP_DMA | GFP_KERNEL);
6170a19e61eSDong Jia Shi 	if (!idaws) {
6180a19e61eSDong Jia Shi 		ret = -ENOMEM;
6190a19e61eSDong Jia Shi 		goto out_unpin;
6200a19e61eSDong Jia Shi 	}
6210a19e61eSDong Jia Shi 
6220a19e61eSDong Jia Shi 	ret = copy_from_iova(cp->mdev, idaws, ccw->cda, idaw_len);
6230a19e61eSDong Jia Shi 	if (ret)
6240a19e61eSDong Jia Shi 		goto out_free_idaws;
6250a19e61eSDong Jia Shi 
6260a19e61eSDong Jia Shi 	ccw->cda = virt_to_phys(idaws);
6270a19e61eSDong Jia Shi 
6280a19e61eSDong Jia Shi 	for (i = 0; i < idaw_nr; i++) {
6290a19e61eSDong Jia Shi 		idaw_iova = *(idaws + i);
6300a19e61eSDong Jia Shi 
6310a19e61eSDong Jia Shi 		ret = pfn_array_alloc_pin(pat->pat_pa + i, cp->mdev,
6320a19e61eSDong Jia Shi 					  idaw_iova, 1);
6330a19e61eSDong Jia Shi 		if (ret < 0)
6340a19e61eSDong Jia Shi 			goto out_free_idaws;
6350a19e61eSDong Jia Shi 	}
6360a19e61eSDong Jia Shi 
6370a19e61eSDong Jia Shi 	pfn_array_table_idal_create_words(pat, idaws);
6380a19e61eSDong Jia Shi 
6390a19e61eSDong Jia Shi 	return 0;
6400a19e61eSDong Jia Shi 
6410a19e61eSDong Jia Shi out_free_idaws:
6420a19e61eSDong Jia Shi 	kfree(idaws);
6430a19e61eSDong Jia Shi out_unpin:
6440a19e61eSDong Jia Shi 	pfn_array_table_unpin_free(pat, cp->mdev);
6456238f921SDong Jia Shi out_init:
6466238f921SDong Jia Shi 	ccw->cda = 0;
6470a19e61eSDong Jia Shi 	return ret;
6480a19e61eSDong Jia Shi }
6490a19e61eSDong Jia Shi 
6500a19e61eSDong Jia Shi /*
6510a19e61eSDong Jia Shi  * Fetch one ccw.
6520a19e61eSDong Jia Shi  * To reduce memory copy, we'll pin the cda page in memory,
6530a19e61eSDong Jia Shi  * and to get rid of the cda 2G limitiaion of ccw1, we'll translate
6540a19e61eSDong Jia Shi  * direct ccws to idal ccws.
6550a19e61eSDong Jia Shi  */
6560a19e61eSDong Jia Shi static int ccwchain_fetch_one(struct ccwchain *chain,
6570a19e61eSDong Jia Shi 			      int idx,
6580a19e61eSDong Jia Shi 			      struct channel_program *cp)
6590a19e61eSDong Jia Shi {
6600a19e61eSDong Jia Shi 	struct ccw1 *ccw = chain->ch_ccw + idx;
6610a19e61eSDong Jia Shi 
6620a19e61eSDong Jia Shi 	if (ccw_is_test(ccw) || ccw_is_noop(ccw))
6630a19e61eSDong Jia Shi 		return 0;
6640a19e61eSDong Jia Shi 
6650a19e61eSDong Jia Shi 	if (ccw_is_tic(ccw))
6660a19e61eSDong Jia Shi 		return ccwchain_fetch_tic(chain, idx, cp);
6670a19e61eSDong Jia Shi 
6680a19e61eSDong Jia Shi 	if (ccw_is_idal(ccw))
6690a19e61eSDong Jia Shi 		return ccwchain_fetch_idal(chain, idx, cp);
6700a19e61eSDong Jia Shi 
6710a19e61eSDong Jia Shi 	return ccwchain_fetch_direct(chain, idx, cp);
6720a19e61eSDong Jia Shi }
6730a19e61eSDong Jia Shi 
6740a19e61eSDong Jia Shi /**
6750a19e61eSDong Jia Shi  * cp_init() - allocate ccwchains for a channel program.
6760a19e61eSDong Jia Shi  * @cp: channel_program on which to perform the operation
6770a19e61eSDong Jia Shi  * @mdev: the mediated device to perform pin/unpin operations
6780a19e61eSDong Jia Shi  * @orb: control block for the channel program from the guest
6790a19e61eSDong Jia Shi  *
6800a19e61eSDong Jia Shi  * This creates one or more ccwchain(s), and copies the raw data of
6810a19e61eSDong Jia Shi  * the target channel program from @orb->cmd.iova to the new ccwchain(s).
6820a19e61eSDong Jia Shi  *
6830a19e61eSDong Jia Shi  * Limitations:
6840a19e61eSDong Jia Shi  * 1. Supports only prefetch enabled mode.
6850a19e61eSDong Jia Shi  * 2. Supports idal(c64) ccw chaining.
6860a19e61eSDong Jia Shi  * 3. Supports 4k idaw.
6870a19e61eSDong Jia Shi  *
6880a19e61eSDong Jia Shi  * Returns:
6890a19e61eSDong Jia Shi  *   %0 on success and a negative error value on failure.
6900a19e61eSDong Jia Shi  */
6910a19e61eSDong Jia Shi int cp_init(struct channel_program *cp, struct device *mdev, union orb *orb)
6920a19e61eSDong Jia Shi {
6930a19e61eSDong Jia Shi 	u64 iova = orb->cmd.cpa;
6940a19e61eSDong Jia Shi 	struct ccwchain *chain;
6950a19e61eSDong Jia Shi 	int len, ret;
6960a19e61eSDong Jia Shi 
6970a19e61eSDong Jia Shi 	/*
6980a19e61eSDong Jia Shi 	 * XXX:
6990a19e61eSDong Jia Shi 	 * Only support prefetch enable mode now.
7000a19e61eSDong Jia Shi 	 */
701fb9e7880SHalil Pasic 	if (!orb->cmd.pfch)
7020a19e61eSDong Jia Shi 		return -EOPNOTSUPP;
7030a19e61eSDong Jia Shi 
7040a19e61eSDong Jia Shi 	INIT_LIST_HEAD(&cp->ccwchain_list);
7050a19e61eSDong Jia Shi 	memcpy(&cp->orb, orb, sizeof(*orb));
7060a19e61eSDong Jia Shi 	cp->mdev = mdev;
7070a19e61eSDong Jia Shi 
7080a19e61eSDong Jia Shi 	/* Get chain length. */
7090a19e61eSDong Jia Shi 	len = ccwchain_calc_length(iova, cp);
7100a19e61eSDong Jia Shi 	if (len < 0)
7110a19e61eSDong Jia Shi 		return len;
7120a19e61eSDong Jia Shi 
7130a19e61eSDong Jia Shi 	/* Alloc mem for the head chain. */
7140a19e61eSDong Jia Shi 	chain = ccwchain_alloc(cp, len);
7150a19e61eSDong Jia Shi 	if (!chain)
7160a19e61eSDong Jia Shi 		return -ENOMEM;
7170a19e61eSDong Jia Shi 	chain->ch_iova = iova;
7180a19e61eSDong Jia Shi 
7190a19e61eSDong Jia Shi 	/* Copy the head chain from guest. */
7200a19e61eSDong Jia Shi 	ret = copy_ccw_from_iova(cp, chain->ch_ccw, iova, len);
7210a19e61eSDong Jia Shi 	if (ret) {
7220a19e61eSDong Jia Shi 		ccwchain_free(chain);
7230a19e61eSDong Jia Shi 		return ret;
7240a19e61eSDong Jia Shi 	}
7250a19e61eSDong Jia Shi 
7260a19e61eSDong Jia Shi 	/* Now loop for its TICs. */
7270a19e61eSDong Jia Shi 	ret = ccwchain_loop_tic(chain, cp);
7280a19e61eSDong Jia Shi 	if (ret)
7290a19e61eSDong Jia Shi 		cp_unpin_free(cp);
730fb9e7880SHalil Pasic 	/* It is safe to force: if not set but idals used
731fb9e7880SHalil Pasic 	 * ccwchain_calc_length returns an error.
732fb9e7880SHalil Pasic 	 */
733fb9e7880SHalil Pasic 	cp->orb.cmd.c64 = 1;
7340a19e61eSDong Jia Shi 
7350a19e61eSDong Jia Shi 	return ret;
7360a19e61eSDong Jia Shi }
7370a19e61eSDong Jia Shi 
7380a19e61eSDong Jia Shi 
7390a19e61eSDong Jia Shi /**
7400a19e61eSDong Jia Shi  * cp_free() - free resources for channel program.
7410a19e61eSDong Jia Shi  * @cp: channel_program on which to perform the operation
7420a19e61eSDong Jia Shi  *
7430a19e61eSDong Jia Shi  * This unpins the memory pages and frees the memory space occupied by
7440a19e61eSDong Jia Shi  * @cp, which must have been returned by a previous call to cp_init().
7450a19e61eSDong Jia Shi  * Otherwise, undefined behavior occurs.
7460a19e61eSDong Jia Shi  */
7470a19e61eSDong Jia Shi void cp_free(struct channel_program *cp)
7480a19e61eSDong Jia Shi {
7490a19e61eSDong Jia Shi 	cp_unpin_free(cp);
7500a19e61eSDong Jia Shi }
7510a19e61eSDong Jia Shi 
7520a19e61eSDong Jia Shi /**
7530a19e61eSDong Jia Shi  * cp_prefetch() - translate a guest physical address channel program to
7540a19e61eSDong Jia Shi  *                 a real-device runnable channel program.
7550a19e61eSDong Jia Shi  * @cp: channel_program on which to perform the operation
7560a19e61eSDong Jia Shi  *
7570a19e61eSDong Jia Shi  * This function translates the guest-physical-address channel program
7580a19e61eSDong Jia Shi  * and stores the result to ccwchain list. @cp must have been
7590a19e61eSDong Jia Shi  * initialized by a previous call with cp_init(). Otherwise, undefined
7600a19e61eSDong Jia Shi  * behavior occurs.
761d66a7355SHalil Pasic  * For each chain composing the channel program:
762d66a7355SHalil Pasic  * - On entry ch_len holds the count of CCWs to be translated.
763d66a7355SHalil Pasic  * - On exit ch_len is adjusted to the count of successfully translated CCWs.
764d66a7355SHalil Pasic  * This allows cp_free to find in ch_len the count of CCWs to free in a chain.
7650a19e61eSDong Jia Shi  *
7660a19e61eSDong Jia Shi  * The S/390 CCW Translation APIS (prefixed by 'cp_') are introduced
7670a19e61eSDong Jia Shi  * as helpers to do ccw chain translation inside the kernel. Basically
7680a19e61eSDong Jia Shi  * they accept a channel program issued by a virtual machine, and
7690a19e61eSDong Jia Shi  * translate the channel program to a real-device runnable channel
7700a19e61eSDong Jia Shi  * program.
7710a19e61eSDong Jia Shi  *
7720a19e61eSDong Jia Shi  * These APIs will copy the ccws into kernel-space buffers, and update
7730a19e61eSDong Jia Shi  * the guest phsical addresses with their corresponding host physical
7740a19e61eSDong Jia Shi  * addresses.  Then channel I/O device drivers could issue the
7750a19e61eSDong Jia Shi  * translated channel program to real devices to perform an I/O
7760a19e61eSDong Jia Shi  * operation.
7770a19e61eSDong Jia Shi  *
7780a19e61eSDong Jia Shi  * These interfaces are designed to support translation only for
7790a19e61eSDong Jia Shi  * channel programs, which are generated and formatted by a
7800a19e61eSDong Jia Shi  * guest. Thus this will make it possible for things like VFIO to
7810a19e61eSDong Jia Shi  * leverage the interfaces to passthrough a channel I/O mediated
7820a19e61eSDong Jia Shi  * device in QEMU.
7830a19e61eSDong Jia Shi  *
7840a19e61eSDong Jia Shi  * We support direct ccw chaining by translating them to idal ccws.
7850a19e61eSDong Jia Shi  *
7860a19e61eSDong Jia Shi  * Returns:
7870a19e61eSDong Jia Shi  *   %0 on success and a negative error value on failure.
7880a19e61eSDong Jia Shi  */
7890a19e61eSDong Jia Shi int cp_prefetch(struct channel_program *cp)
7900a19e61eSDong Jia Shi {
7910a19e61eSDong Jia Shi 	struct ccwchain *chain;
7920a19e61eSDong Jia Shi 	int len, idx, ret;
7930a19e61eSDong Jia Shi 
7940a19e61eSDong Jia Shi 	list_for_each_entry(chain, &cp->ccwchain_list, next) {
7950a19e61eSDong Jia Shi 		len = chain->ch_len;
7960a19e61eSDong Jia Shi 		for (idx = 0; idx < len; idx++) {
7970a19e61eSDong Jia Shi 			ret = ccwchain_fetch_one(chain, idx, cp);
7980a19e61eSDong Jia Shi 			if (ret)
799d66a7355SHalil Pasic 				goto out_err;
8000a19e61eSDong Jia Shi 		}
8010a19e61eSDong Jia Shi 	}
8020a19e61eSDong Jia Shi 
8030a19e61eSDong Jia Shi 	return 0;
804d66a7355SHalil Pasic out_err:
805d66a7355SHalil Pasic 	/* Only cleanup the chain elements that were actually translated. */
806d66a7355SHalil Pasic 	chain->ch_len = idx;
807d66a7355SHalil Pasic 	list_for_each_entry_continue(chain, &cp->ccwchain_list, next) {
808d66a7355SHalil Pasic 		chain->ch_len = 0;
809d66a7355SHalil Pasic 	}
810d66a7355SHalil Pasic 	return ret;
8110a19e61eSDong Jia Shi }
8120a19e61eSDong Jia Shi 
8130a19e61eSDong Jia Shi /**
8140a19e61eSDong Jia Shi  * cp_get_orb() - get the orb of the channel program
8150a19e61eSDong Jia Shi  * @cp: channel_program on which to perform the operation
8160a19e61eSDong Jia Shi  * @intparm: new intparm for the returned orb
8170a19e61eSDong Jia Shi  * @lpm: candidate value of the logical-path mask for the returned orb
8180a19e61eSDong Jia Shi  *
8190a19e61eSDong Jia Shi  * This function returns the address of the updated orb of the channel
8200a19e61eSDong Jia Shi  * program. Channel I/O device drivers could use this orb to issue a
8210a19e61eSDong Jia Shi  * ssch.
8220a19e61eSDong Jia Shi  */
8230a19e61eSDong Jia Shi union orb *cp_get_orb(struct channel_program *cp, u32 intparm, u8 lpm)
8240a19e61eSDong Jia Shi {
8250a19e61eSDong Jia Shi 	union orb *orb;
8260a19e61eSDong Jia Shi 	struct ccwchain *chain;
8270a19e61eSDong Jia Shi 	struct ccw1 *cpa;
8280a19e61eSDong Jia Shi 
8290a19e61eSDong Jia Shi 	orb = &cp->orb;
8300a19e61eSDong Jia Shi 
8310a19e61eSDong Jia Shi 	orb->cmd.intparm = intparm;
8320a19e61eSDong Jia Shi 	orb->cmd.fmt = 1;
8330a19e61eSDong Jia Shi 	orb->cmd.key = PAGE_DEFAULT_KEY >> 4;
8340a19e61eSDong Jia Shi 
8350a19e61eSDong Jia Shi 	if (orb->cmd.lpm == 0)
8360a19e61eSDong Jia Shi 		orb->cmd.lpm = lpm;
8370a19e61eSDong Jia Shi 
8380a19e61eSDong Jia Shi 	chain = list_first_entry(&cp->ccwchain_list, struct ccwchain, next);
8390a19e61eSDong Jia Shi 	cpa = chain->ch_ccw;
8400a19e61eSDong Jia Shi 	orb->cmd.cpa = (__u32) __pa(cpa);
8410a19e61eSDong Jia Shi 
8420a19e61eSDong Jia Shi 	return orb;
8430a19e61eSDong Jia Shi }
8440a19e61eSDong Jia Shi 
8450a19e61eSDong Jia Shi /**
8460a19e61eSDong Jia Shi  * cp_update_scsw() - update scsw for a channel program.
8470a19e61eSDong Jia Shi  * @cp: channel_program on which to perform the operation
8480a19e61eSDong Jia Shi  * @scsw: I/O results of the channel program and also the target to be
8490a19e61eSDong Jia Shi  *        updated
8500a19e61eSDong Jia Shi  *
8510a19e61eSDong Jia Shi  * @scsw contains the I/O results of the channel program that pointed
8520a19e61eSDong Jia Shi  * to by @cp. However what @scsw->cpa stores is a host physical
8530a19e61eSDong Jia Shi  * address, which is meaningless for the guest, which is waiting for
8540a19e61eSDong Jia Shi  * the I/O results.
8550a19e61eSDong Jia Shi  *
8560a19e61eSDong Jia Shi  * This function updates @scsw->cpa to its coressponding guest physical
8570a19e61eSDong Jia Shi  * address.
8580a19e61eSDong Jia Shi  */
8590a19e61eSDong Jia Shi void cp_update_scsw(struct channel_program *cp, union scsw *scsw)
8600a19e61eSDong Jia Shi {
8610a19e61eSDong Jia Shi 	struct ccwchain *chain;
8620a19e61eSDong Jia Shi 	u32 cpa = scsw->cmd.cpa;
863*2904337fSEric Farman 	u32 ccw_head;
8640a19e61eSDong Jia Shi 
8650a19e61eSDong Jia Shi 	/*
8660a19e61eSDong Jia Shi 	 * LATER:
8670a19e61eSDong Jia Shi 	 * For now, only update the cmd.cpa part. We may need to deal with
8680a19e61eSDong Jia Shi 	 * other portions of the schib as well, even if we don't return them
8690a19e61eSDong Jia Shi 	 * in the ioctl directly. Path status changes etc.
8700a19e61eSDong Jia Shi 	 */
8710a19e61eSDong Jia Shi 	list_for_each_entry(chain, &cp->ccwchain_list, next) {
8720a19e61eSDong Jia Shi 		ccw_head = (u32)(u64)chain->ch_ccw;
873*2904337fSEric Farman 		if (is_cpa_within_range(cpa, ccw_head, chain->ch_len)) {
8740a19e61eSDong Jia Shi 			/*
8750a19e61eSDong Jia Shi 			 * (cpa - ccw_head) is the offset value of the host
8760a19e61eSDong Jia Shi 			 * physical ccw to its chain head.
8770a19e61eSDong Jia Shi 			 * Adding this value to the guest physical ccw chain
8780a19e61eSDong Jia Shi 			 * head gets us the guest cpa.
8790a19e61eSDong Jia Shi 			 */
8800a19e61eSDong Jia Shi 			cpa = chain->ch_iova + (cpa - ccw_head);
8810a19e61eSDong Jia Shi 			break;
8820a19e61eSDong Jia Shi 		}
8830a19e61eSDong Jia Shi 	}
8840a19e61eSDong Jia Shi 
8850a19e61eSDong Jia Shi 	scsw->cmd.cpa = cpa;
8860a19e61eSDong Jia Shi }
8870a19e61eSDong Jia Shi 
8880a19e61eSDong Jia Shi /**
8890a19e61eSDong Jia Shi  * cp_iova_pinned() - check if an iova is pinned for a ccw chain.
890364e3f90SSebastian Ott  * @cp: channel_program on which to perform the operation
8910a19e61eSDong Jia Shi  * @iova: the iova to check
8920a19e61eSDong Jia Shi  *
8930a19e61eSDong Jia Shi  * If the @iova is currently pinned for the ccw chain, return true;
8940a19e61eSDong Jia Shi  * else return false.
8950a19e61eSDong Jia Shi  */
8960a19e61eSDong Jia Shi bool cp_iova_pinned(struct channel_program *cp, u64 iova)
8970a19e61eSDong Jia Shi {
8980a19e61eSDong Jia Shi 	struct ccwchain *chain;
8990a19e61eSDong Jia Shi 	int i;
9000a19e61eSDong Jia Shi 
9010a19e61eSDong Jia Shi 	list_for_each_entry(chain, &cp->ccwchain_list, next) {
9020a19e61eSDong Jia Shi 		for (i = 0; i < chain->ch_len; i++)
9030a19e61eSDong Jia Shi 			if (pfn_array_table_iova_pinned(chain->ch_pat + i,
9040a19e61eSDong Jia Shi 							iova))
9050a19e61eSDong Jia Shi 				return true;
9060a19e61eSDong Jia Shi 	}
9070a19e61eSDong Jia Shi 
9080a19e61eSDong Jia Shi 	return false;
9090a19e61eSDong Jia Shi }
910