xref: /openbmc/linux/arch/um/drivers/ubd_kern.c (revision 36d46a59)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * Copyright (C) 2018 Cambridge Greys Ltd
4  * Copyright (C) 2015-2016 Anton Ivanov (aivanov@brocade.com)
5  * Copyright (C) 2000 Jeff Dike (jdike@karaya.com)
6  */
7 
8 /* 2001-09-28...2002-04-17
9  * Partition stuff by James_McMechan@hotmail.com
10  * old style ubd by setting UBD_SHIFT to 0
11  * 2002-09-27...2002-10-18 massive tinkering for 2.5
12  * partitions have changed in 2.5
13  * 2003-01-29 more tinkering for 2.5.59-1
14  * This should now address the sysfs problems and has
15  * the symlink for devfs to allow for booting with
16  * the common /dev/ubd/discX/... names rather than
17  * only /dev/ubdN/discN this version also has lots of
18  * clean ups preparing for ubd-many.
19  * James McMechan
20  */
21 
22 #define UBD_SHIFT 4
23 
24 #include <linux/module.h>
25 #include <linux/init.h>
26 #include <linux/blkdev.h>
27 #include <linux/blk-mq.h>
28 #include <linux/ata.h>
29 #include <linux/hdreg.h>
30 #include <linux/cdrom.h>
31 #include <linux/proc_fs.h>
32 #include <linux/seq_file.h>
33 #include <linux/ctype.h>
34 #include <linux/slab.h>
35 #include <linux/vmalloc.h>
36 #include <linux/platform_device.h>
37 #include <linux/scatterlist.h>
38 #include <asm/tlbflush.h>
39 #include <kern_util.h>
40 #include "mconsole_kern.h"
41 #include <init.h>
42 #include <irq_kern.h>
43 #include "ubd.h"
44 #include <os.h>
45 #include "cow.h"
46 
47 /* Max request size is determined by sector mask - 32K */
48 #define UBD_MAX_REQUEST (8 * sizeof(long))
49 
50 struct io_desc {
51 	char *buffer;
52 	unsigned long length;
53 	unsigned long sector_mask;
54 	unsigned long long cow_offset;
55 	unsigned long bitmap_words[2];
56 };
57 
58 struct io_thread_req {
59 	struct request *req;
60 	int fds[2];
61 	unsigned long offsets[2];
62 	unsigned long long offset;
63 	int sectorsize;
64 	int error;
65 
66 	int desc_cnt;
67 	/* io_desc has to be the last element of the struct */
68 	struct io_desc io_desc[];
69 };
70 
71 
72 static struct io_thread_req * (*irq_req_buffer)[];
73 static struct io_thread_req *irq_remainder;
74 static int irq_remainder_size;
75 
76 static struct io_thread_req * (*io_req_buffer)[];
77 static struct io_thread_req *io_remainder;
78 static int io_remainder_size;
79 
80 
81 
82 static inline int ubd_test_bit(__u64 bit, unsigned char *data)
83 {
84 	__u64 n;
85 	int bits, off;
86 
87 	bits = sizeof(data[0]) * 8;
88 	n = bit / bits;
89 	off = bit % bits;
90 	return (data[n] & (1 << off)) != 0;
91 }
92 
93 static inline void ubd_set_bit(__u64 bit, unsigned char *data)
94 {
95 	__u64 n;
96 	int bits, off;
97 
98 	bits = sizeof(data[0]) * 8;
99 	n = bit / bits;
100 	off = bit % bits;
101 	data[n] |= (1 << off);
102 }
103 /*End stuff from ubd_user.h*/
104 
105 #define DRIVER_NAME "uml-blkdev"
106 
107 static DEFINE_MUTEX(ubd_lock);
108 static DEFINE_MUTEX(ubd_mutex); /* replaces BKL, might not be needed */
109 
110 static int ubd_open(struct block_device *bdev, fmode_t mode);
111 static void ubd_release(struct gendisk *disk, fmode_t mode);
112 static int ubd_ioctl(struct block_device *bdev, fmode_t mode,
113 		     unsigned int cmd, unsigned long arg);
114 static int ubd_getgeo(struct block_device *bdev, struct hd_geometry *geo);
115 
116 #define MAX_DEV (16)
117 
118 static const struct block_device_operations ubd_blops = {
119         .owner		= THIS_MODULE,
120         .open		= ubd_open,
121         .release	= ubd_release,
122         .ioctl		= ubd_ioctl,
123         .compat_ioctl	= blkdev_compat_ptr_ioctl,
124 	.getgeo		= ubd_getgeo,
125 };
126 
127 /* Protected by ubd_lock */
128 static int fake_major = UBD_MAJOR;
129 static struct gendisk *ubd_gendisk[MAX_DEV];
130 static struct gendisk *fake_gendisk[MAX_DEV];
131 
132 #ifdef CONFIG_BLK_DEV_UBD_SYNC
133 #define OPEN_FLAGS ((struct openflags) { .r = 1, .w = 1, .s = 1, .c = 0, \
134 					 .cl = 1 })
135 #else
136 #define OPEN_FLAGS ((struct openflags) { .r = 1, .w = 1, .s = 0, .c = 0, \
137 					 .cl = 1 })
138 #endif
139 static struct openflags global_openflags = OPEN_FLAGS;
140 
141 struct cow {
142 	/* backing file name */
143 	char *file;
144 	/* backing file fd */
145 	int fd;
146 	unsigned long *bitmap;
147 	unsigned long bitmap_len;
148 	int bitmap_offset;
149 	int data_offset;
150 };
151 
152 #define MAX_SG 64
153 
154 struct ubd {
155 	/* name (and fd, below) of the file opened for writing, either the
156 	 * backing or the cow file. */
157 	char *file;
158 	char *serial;
159 	int count;
160 	int fd;
161 	__u64 size;
162 	struct openflags boot_openflags;
163 	struct openflags openflags;
164 	unsigned shared:1;
165 	unsigned no_cow:1;
166 	unsigned no_trim:1;
167 	struct cow cow;
168 	struct platform_device pdev;
169 	struct request_queue *queue;
170 	struct blk_mq_tag_set tag_set;
171 	spinlock_t lock;
172 };
173 
174 #define DEFAULT_COW { \
175 	.file =			NULL, \
176 	.fd =			-1,	\
177 	.bitmap =		NULL, \
178 	.bitmap_offset =	0, \
179 	.data_offset =		0, \
180 }
181 
182 #define DEFAULT_UBD { \
183 	.file = 		NULL, \
184 	.serial =		NULL, \
185 	.count =		0, \
186 	.fd =			-1, \
187 	.size =			-1, \
188 	.boot_openflags =	OPEN_FLAGS, \
189 	.openflags =		OPEN_FLAGS, \
190 	.no_cow =               0, \
191 	.no_trim =		0, \
192 	.shared =		0, \
193 	.cow =			DEFAULT_COW, \
194 	.lock =			__SPIN_LOCK_UNLOCKED(ubd_devs.lock), \
195 }
196 
197 /* Protected by ubd_lock */
198 static struct ubd ubd_devs[MAX_DEV] = { [0 ... MAX_DEV - 1] = DEFAULT_UBD };
199 
200 /* Only changed by fake_ide_setup which is a setup */
201 static int fake_ide = 0;
202 static struct proc_dir_entry *proc_ide_root = NULL;
203 static struct proc_dir_entry *proc_ide = NULL;
204 
205 static blk_status_t ubd_queue_rq(struct blk_mq_hw_ctx *hctx,
206 				 const struct blk_mq_queue_data *bd);
207 
208 static void make_proc_ide(void)
209 {
210 	proc_ide_root = proc_mkdir("ide", NULL);
211 	proc_ide = proc_mkdir("ide0", proc_ide_root);
212 }
213 
214 static int fake_ide_media_proc_show(struct seq_file *m, void *v)
215 {
216 	seq_puts(m, "disk\n");
217 	return 0;
218 }
219 
220 static void make_ide_entries(const char *dev_name)
221 {
222 	struct proc_dir_entry *dir, *ent;
223 	char name[64];
224 
225 	if(proc_ide_root == NULL) make_proc_ide();
226 
227 	dir = proc_mkdir(dev_name, proc_ide);
228 	if(!dir) return;
229 
230 	ent = proc_create_single("media", S_IRUGO, dir,
231 			fake_ide_media_proc_show);
232 	if(!ent) return;
233 	snprintf(name, sizeof(name), "ide0/%s", dev_name);
234 	proc_symlink(dev_name, proc_ide_root, name);
235 }
236 
237 static int fake_ide_setup(char *str)
238 {
239 	fake_ide = 1;
240 	return 1;
241 }
242 
243 __setup("fake_ide", fake_ide_setup);
244 
245 __uml_help(fake_ide_setup,
246 "fake_ide\n"
247 "    Create ide0 entries that map onto ubd devices.\n\n"
248 );
249 
250 static int parse_unit(char **ptr)
251 {
252 	char *str = *ptr, *end;
253 	int n = -1;
254 
255 	if(isdigit(*str)) {
256 		n = simple_strtoul(str, &end, 0);
257 		if(end == str)
258 			return -1;
259 		*ptr = end;
260 	}
261 	else if (('a' <= *str) && (*str <= 'z')) {
262 		n = *str - 'a';
263 		str++;
264 		*ptr = str;
265 	}
266 	return n;
267 }
268 
269 /* If *index_out == -1 at exit, the passed option was a general one;
270  * otherwise, the str pointer is used (and owned) inside ubd_devs array, so it
271  * should not be freed on exit.
272  */
273 static int ubd_setup_common(char *str, int *index_out, char **error_out)
274 {
275 	struct ubd *ubd_dev;
276 	struct openflags flags = global_openflags;
277 	char *file, *backing_file, *serial;
278 	int n, err = 0, i;
279 
280 	if(index_out) *index_out = -1;
281 	n = *str;
282 	if(n == '='){
283 		char *end;
284 		int major;
285 
286 		str++;
287 		if(!strcmp(str, "sync")){
288 			global_openflags = of_sync(global_openflags);
289 			return err;
290 		}
291 
292 		err = -EINVAL;
293 		major = simple_strtoul(str, &end, 0);
294 		if((*end != '\0') || (end == str)){
295 			*error_out = "Didn't parse major number";
296 			return err;
297 		}
298 
299 		mutex_lock(&ubd_lock);
300 		if (fake_major != UBD_MAJOR) {
301 			*error_out = "Can't assign a fake major twice";
302 			goto out1;
303 		}
304 
305 		fake_major = major;
306 
307 		printk(KERN_INFO "Setting extra ubd major number to %d\n",
308 		       major);
309 		err = 0;
310 	out1:
311 		mutex_unlock(&ubd_lock);
312 		return err;
313 	}
314 
315 	n = parse_unit(&str);
316 	if(n < 0){
317 		*error_out = "Couldn't parse device number";
318 		return -EINVAL;
319 	}
320 	if(n >= MAX_DEV){
321 		*error_out = "Device number out of range";
322 		return 1;
323 	}
324 
325 	err = -EBUSY;
326 	mutex_lock(&ubd_lock);
327 
328 	ubd_dev = &ubd_devs[n];
329 	if(ubd_dev->file != NULL){
330 		*error_out = "Device is already configured";
331 		goto out;
332 	}
333 
334 	if (index_out)
335 		*index_out = n;
336 
337 	err = -EINVAL;
338 	for (i = 0; i < sizeof("rscdt="); i++) {
339 		switch (*str) {
340 		case 'r':
341 			flags.w = 0;
342 			break;
343 		case 's':
344 			flags.s = 1;
345 			break;
346 		case 'd':
347 			ubd_dev->no_cow = 1;
348 			break;
349 		case 'c':
350 			ubd_dev->shared = 1;
351 			break;
352 		case 't':
353 			ubd_dev->no_trim = 1;
354 			break;
355 		case '=':
356 			str++;
357 			goto break_loop;
358 		default:
359 			*error_out = "Expected '=' or flag letter "
360 				"(r, s, c, t or d)";
361 			goto out;
362 		}
363 		str++;
364 	}
365 
366 	if (*str == '=')
367 		*error_out = "Too many flags specified";
368 	else
369 		*error_out = "Missing '='";
370 	goto out;
371 
372 break_loop:
373 	file = strsep(&str, ",:");
374 	if (*file == '\0')
375 		file = NULL;
376 
377 	backing_file = strsep(&str, ",:");
378 	if (*backing_file == '\0')
379 		backing_file = NULL;
380 
381 	serial = strsep(&str, ",:");
382 	if (*serial == '\0')
383 		serial = NULL;
384 
385 	if (backing_file && ubd_dev->no_cow) {
386 		*error_out = "Can't specify both 'd' and a cow file";
387 		goto out;
388 	}
389 
390 	err = 0;
391 	ubd_dev->file = file;
392 	ubd_dev->cow.file = backing_file;
393 	ubd_dev->serial = serial;
394 	ubd_dev->boot_openflags = flags;
395 out:
396 	mutex_unlock(&ubd_lock);
397 	return err;
398 }
399 
400 static int ubd_setup(char *str)
401 {
402 	char *error;
403 	int err;
404 
405 	err = ubd_setup_common(str, NULL, &error);
406 	if(err)
407 		printk(KERN_ERR "Failed to initialize device with \"%s\" : "
408 		       "%s\n", str, error);
409 	return 1;
410 }
411 
412 __setup("ubd", ubd_setup);
413 __uml_help(ubd_setup,
414 "ubd<n><flags>=<filename>[(:|,)<filename2>][(:|,)<serial>]\n"
415 "    This is used to associate a device with a file in the underlying\n"
416 "    filesystem. When specifying two filenames, the first one is the\n"
417 "    COW name and the second is the backing file name. As separator you can\n"
418 "    use either a ':' or a ',': the first one allows writing things like;\n"
419 "	ubd0=~/Uml/root_cow:~/Uml/root_backing_file\n"
420 "    while with a ',' the shell would not expand the 2nd '~'.\n"
421 "    When using only one filename, UML will detect whether to treat it like\n"
422 "    a COW file or a backing file. To override this detection, add the 'd'\n"
423 "    flag:\n"
424 "	ubd0d=BackingFile\n"
425 "    Usually, there is a filesystem in the file, but \n"
426 "    that's not required. Swap devices containing swap files can be\n"
427 "    specified like this. Also, a file which doesn't contain a\n"
428 "    filesystem can have its contents read in the virtual \n"
429 "    machine by running 'dd' on the device. <n> must be in the range\n"
430 "    0 to 7. Appending an 'r' to the number will cause that device\n"
431 "    to be mounted read-only. For example ubd1r=./ext_fs. Appending\n"
432 "    an 's' will cause data to be written to disk on the host immediately.\n"
433 "    'c' will cause the device to be treated as being shared between multiple\n"
434 "    UMLs and file locking will be turned off - this is appropriate for a\n"
435 "    cluster filesystem and inappropriate at almost all other times.\n\n"
436 "    't' will disable trim/discard support on the device (enabled by default).\n\n"
437 "    An optional device serial number can be exposed using the serial parameter\n"
438 "    on the cmdline which is exposed as a sysfs entry. This is particularly\n"
439 "    useful when a unique number should be given to the device. Note when\n"
440 "    specifying a label, the filename2 must be also presented. It can be\n"
441 "    an empty string, in which case the backing file is not used:\n"
442 "       ubd0=File,,Serial\n"
443 );
444 
445 static int udb_setup(char *str)
446 {
447 	printk("udb%s specified on command line is almost certainly a ubd -> "
448 	       "udb TYPO\n", str);
449 	return 1;
450 }
451 
452 __setup("udb", udb_setup);
453 __uml_help(udb_setup,
454 "udb\n"
455 "    This option is here solely to catch ubd -> udb typos, which can be\n"
456 "    to impossible to catch visually unless you specifically look for\n"
457 "    them.  The only result of any option starting with 'udb' is an error\n"
458 "    in the boot output.\n\n"
459 );
460 
461 /* Only changed by ubd_init, which is an initcall. */
462 static int thread_fd = -1;
463 
464 /* Function to read several request pointers at a time
465 * handling fractional reads if (and as) needed
466 */
467 
468 static int bulk_req_safe_read(
469 	int fd,
470 	struct io_thread_req * (*request_buffer)[],
471 	struct io_thread_req **remainder,
472 	int *remainder_size,
473 	int max_recs
474 	)
475 {
476 	int n = 0;
477 	int res = 0;
478 
479 	if (*remainder_size > 0) {
480 		memmove(
481 			(char *) request_buffer,
482 			(char *) remainder, *remainder_size
483 		);
484 		n = *remainder_size;
485 	}
486 
487 	res = os_read_file(
488 			fd,
489 			((char *) request_buffer) + *remainder_size,
490 			sizeof(struct io_thread_req *)*max_recs
491 				- *remainder_size
492 		);
493 	if (res > 0) {
494 		n += res;
495 		if ((n % sizeof(struct io_thread_req *)) > 0) {
496 			/*
497 			* Read somehow returned not a multiple of dword
498 			* theoretically possible, but never observed in the
499 			* wild, so read routine must be able to handle it
500 			*/
501 			*remainder_size = n % sizeof(struct io_thread_req *);
502 			WARN(*remainder_size > 0, "UBD IPC read returned a partial result");
503 			memmove(
504 				remainder,
505 				((char *) request_buffer) +
506 					(n/sizeof(struct io_thread_req *))*sizeof(struct io_thread_req *),
507 				*remainder_size
508 			);
509 			n = n - *remainder_size;
510 		}
511 	} else {
512 		n = res;
513 	}
514 	return n;
515 }
516 
517 /* Called without dev->lock held, and only in interrupt context. */
518 static void ubd_handler(void)
519 {
520 	int n;
521 	int count;
522 
523 	while(1){
524 		n = bulk_req_safe_read(
525 			thread_fd,
526 			irq_req_buffer,
527 			&irq_remainder,
528 			&irq_remainder_size,
529 			UBD_REQ_BUFFER_SIZE
530 		);
531 		if (n < 0) {
532 			if(n == -EAGAIN)
533 				break;
534 			printk(KERN_ERR "spurious interrupt in ubd_handler, "
535 			       "err = %d\n", -n);
536 			return;
537 		}
538 		for (count = 0; count < n/sizeof(struct io_thread_req *); count++) {
539 			struct io_thread_req *io_req = (*irq_req_buffer)[count];
540 
541 			if ((io_req->error == BLK_STS_NOTSUPP) && (req_op(io_req->req) == REQ_OP_DISCARD)) {
542 				blk_queue_max_discard_sectors(io_req->req->q, 0);
543 				blk_queue_max_write_zeroes_sectors(io_req->req->q, 0);
544 				blk_queue_flag_clear(QUEUE_FLAG_DISCARD, io_req->req->q);
545 			}
546 			blk_mq_end_request(io_req->req, io_req->error);
547 			kfree(io_req);
548 		}
549 	}
550 }
551 
552 static irqreturn_t ubd_intr(int irq, void *dev)
553 {
554 	ubd_handler();
555 	return IRQ_HANDLED;
556 }
557 
558 /* Only changed by ubd_init, which is an initcall. */
559 static int io_pid = -1;
560 
561 static void kill_io_thread(void)
562 {
563 	if(io_pid != -1)
564 		os_kill_process(io_pid, 1);
565 }
566 
567 __uml_exitcall(kill_io_thread);
568 
569 static inline int ubd_file_size(struct ubd *ubd_dev, __u64 *size_out)
570 {
571 	char *file;
572 	int fd;
573 	int err;
574 
575 	__u32 version;
576 	__u32 align;
577 	char *backing_file;
578 	time64_t mtime;
579 	unsigned long long size;
580 	int sector_size;
581 	int bitmap_offset;
582 
583 	if (ubd_dev->file && ubd_dev->cow.file) {
584 		file = ubd_dev->cow.file;
585 
586 		goto out;
587 	}
588 
589 	fd = os_open_file(ubd_dev->file, of_read(OPENFLAGS()), 0);
590 	if (fd < 0)
591 		return fd;
592 
593 	err = read_cow_header(file_reader, &fd, &version, &backing_file, \
594 		&mtime, &size, &sector_size, &align, &bitmap_offset);
595 	os_close_file(fd);
596 
597 	if(err == -EINVAL)
598 		file = ubd_dev->file;
599 	else
600 		file = backing_file;
601 
602 out:
603 	return os_file_size(file, size_out);
604 }
605 
606 static int read_cow_bitmap(int fd, void *buf, int offset, int len)
607 {
608 	int err;
609 
610 	err = os_pread_file(fd, buf, len, offset);
611 	if (err < 0)
612 		return err;
613 
614 	return 0;
615 }
616 
617 static int backing_file_mismatch(char *file, __u64 size, time64_t mtime)
618 {
619 	time64_t modtime;
620 	unsigned long long actual;
621 	int err;
622 
623 	err = os_file_modtime(file, &modtime);
624 	if (err < 0) {
625 		printk(KERN_ERR "Failed to get modification time of backing "
626 		       "file \"%s\", err = %d\n", file, -err);
627 		return err;
628 	}
629 
630 	err = os_file_size(file, &actual);
631 	if (err < 0) {
632 		printk(KERN_ERR "Failed to get size of backing file \"%s\", "
633 		       "err = %d\n", file, -err);
634 		return err;
635 	}
636 
637 	if (actual != size) {
638 		/*__u64 can be a long on AMD64 and with %lu GCC complains; so
639 		 * the typecast.*/
640 		printk(KERN_ERR "Size mismatch (%llu vs %llu) of COW header "
641 		       "vs backing file\n", (unsigned long long) size, actual);
642 		return -EINVAL;
643 	}
644 	if (modtime != mtime) {
645 		printk(KERN_ERR "mtime mismatch (%lld vs %lld) of COW header vs "
646 		       "backing file\n", mtime, modtime);
647 		return -EINVAL;
648 	}
649 	return 0;
650 }
651 
652 static int path_requires_switch(char *from_cmdline, char *from_cow, char *cow)
653 {
654 	struct uml_stat buf1, buf2;
655 	int err;
656 
657 	if (from_cmdline == NULL)
658 		return 0;
659 	if (!strcmp(from_cmdline, from_cow))
660 		return 0;
661 
662 	err = os_stat_file(from_cmdline, &buf1);
663 	if (err < 0) {
664 		printk(KERN_ERR "Couldn't stat '%s', err = %d\n", from_cmdline,
665 		       -err);
666 		return 0;
667 	}
668 	err = os_stat_file(from_cow, &buf2);
669 	if (err < 0) {
670 		printk(KERN_ERR "Couldn't stat '%s', err = %d\n", from_cow,
671 		       -err);
672 		return 1;
673 	}
674 	if ((buf1.ust_dev == buf2.ust_dev) && (buf1.ust_ino == buf2.ust_ino))
675 		return 0;
676 
677 	printk(KERN_ERR "Backing file mismatch - \"%s\" requested, "
678 	       "\"%s\" specified in COW header of \"%s\"\n",
679 	       from_cmdline, from_cow, cow);
680 	return 1;
681 }
682 
683 static int open_ubd_file(char *file, struct openflags *openflags, int shared,
684 		  char **backing_file_out, int *bitmap_offset_out,
685 		  unsigned long *bitmap_len_out, int *data_offset_out,
686 		  int *create_cow_out)
687 {
688 	time64_t mtime;
689 	unsigned long long size;
690 	__u32 version, align;
691 	char *backing_file;
692 	int fd, err, sectorsize, asked_switch, mode = 0644;
693 
694 	fd = os_open_file(file, *openflags, mode);
695 	if (fd < 0) {
696 		if ((fd == -ENOENT) && (create_cow_out != NULL))
697 			*create_cow_out = 1;
698 		if (!openflags->w ||
699 		    ((fd != -EROFS) && (fd != -EACCES)))
700 			return fd;
701 		openflags->w = 0;
702 		fd = os_open_file(file, *openflags, mode);
703 		if (fd < 0)
704 			return fd;
705 	}
706 
707 	if (shared)
708 		printk(KERN_INFO "Not locking \"%s\" on the host\n", file);
709 	else {
710 		err = os_lock_file(fd, openflags->w);
711 		if (err < 0) {
712 			printk(KERN_ERR "Failed to lock '%s', err = %d\n",
713 			       file, -err);
714 			goto out_close;
715 		}
716 	}
717 
718 	/* Successful return case! */
719 	if (backing_file_out == NULL)
720 		return fd;
721 
722 	err = read_cow_header(file_reader, &fd, &version, &backing_file, &mtime,
723 			      &size, &sectorsize, &align, bitmap_offset_out);
724 	if (err && (*backing_file_out != NULL)) {
725 		printk(KERN_ERR "Failed to read COW header from COW file "
726 		       "\"%s\", errno = %d\n", file, -err);
727 		goto out_close;
728 	}
729 	if (err)
730 		return fd;
731 
732 	asked_switch = path_requires_switch(*backing_file_out, backing_file,
733 					    file);
734 
735 	/* Allow switching only if no mismatch. */
736 	if (asked_switch && !backing_file_mismatch(*backing_file_out, size,
737 						   mtime)) {
738 		printk(KERN_ERR "Switching backing file to '%s'\n",
739 		       *backing_file_out);
740 		err = write_cow_header(file, fd, *backing_file_out,
741 				       sectorsize, align, &size);
742 		if (err) {
743 			printk(KERN_ERR "Switch failed, errno = %d\n", -err);
744 			goto out_close;
745 		}
746 	} else {
747 		*backing_file_out = backing_file;
748 		err = backing_file_mismatch(*backing_file_out, size, mtime);
749 		if (err)
750 			goto out_close;
751 	}
752 
753 	cow_sizes(version, size, sectorsize, align, *bitmap_offset_out,
754 		  bitmap_len_out, data_offset_out);
755 
756 	return fd;
757  out_close:
758 	os_close_file(fd);
759 	return err;
760 }
761 
762 static int create_cow_file(char *cow_file, char *backing_file,
763 		    struct openflags flags,
764 		    int sectorsize, int alignment, int *bitmap_offset_out,
765 		    unsigned long *bitmap_len_out, int *data_offset_out)
766 {
767 	int err, fd;
768 
769 	flags.c = 1;
770 	fd = open_ubd_file(cow_file, &flags, 0, NULL, NULL, NULL, NULL, NULL);
771 	if (fd < 0) {
772 		err = fd;
773 		printk(KERN_ERR "Open of COW file '%s' failed, errno = %d\n",
774 		       cow_file, -err);
775 		goto out;
776 	}
777 
778 	err = init_cow_file(fd, cow_file, backing_file, sectorsize, alignment,
779 			    bitmap_offset_out, bitmap_len_out,
780 			    data_offset_out);
781 	if (!err)
782 		return fd;
783 	os_close_file(fd);
784  out:
785 	return err;
786 }
787 
788 static void ubd_close_dev(struct ubd *ubd_dev)
789 {
790 	os_close_file(ubd_dev->fd);
791 	if(ubd_dev->cow.file == NULL)
792 		return;
793 
794 	os_close_file(ubd_dev->cow.fd);
795 	vfree(ubd_dev->cow.bitmap);
796 	ubd_dev->cow.bitmap = NULL;
797 }
798 
799 static int ubd_open_dev(struct ubd *ubd_dev)
800 {
801 	struct openflags flags;
802 	char **back_ptr;
803 	int err, create_cow, *create_ptr;
804 	int fd;
805 
806 	ubd_dev->openflags = ubd_dev->boot_openflags;
807 	create_cow = 0;
808 	create_ptr = (ubd_dev->cow.file != NULL) ? &create_cow : NULL;
809 	back_ptr = ubd_dev->no_cow ? NULL : &ubd_dev->cow.file;
810 
811 	fd = open_ubd_file(ubd_dev->file, &ubd_dev->openflags, ubd_dev->shared,
812 				back_ptr, &ubd_dev->cow.bitmap_offset,
813 				&ubd_dev->cow.bitmap_len, &ubd_dev->cow.data_offset,
814 				create_ptr);
815 
816 	if((fd == -ENOENT) && create_cow){
817 		fd = create_cow_file(ubd_dev->file, ubd_dev->cow.file,
818 					  ubd_dev->openflags, SECTOR_SIZE, PAGE_SIZE,
819 					  &ubd_dev->cow.bitmap_offset,
820 					  &ubd_dev->cow.bitmap_len,
821 					  &ubd_dev->cow.data_offset);
822 		if(fd >= 0){
823 			printk(KERN_INFO "Creating \"%s\" as COW file for "
824 			       "\"%s\"\n", ubd_dev->file, ubd_dev->cow.file);
825 		}
826 	}
827 
828 	if(fd < 0){
829 		printk("Failed to open '%s', errno = %d\n", ubd_dev->file,
830 		       -fd);
831 		return fd;
832 	}
833 	ubd_dev->fd = fd;
834 
835 	if(ubd_dev->cow.file != NULL){
836 		blk_queue_max_hw_sectors(ubd_dev->queue, 8 * sizeof(long));
837 
838 		err = -ENOMEM;
839 		ubd_dev->cow.bitmap = vmalloc(ubd_dev->cow.bitmap_len);
840 		if(ubd_dev->cow.bitmap == NULL){
841 			printk(KERN_ERR "Failed to vmalloc COW bitmap\n");
842 			goto error;
843 		}
844 		flush_tlb_kernel_vm();
845 
846 		err = read_cow_bitmap(ubd_dev->fd, ubd_dev->cow.bitmap,
847 				      ubd_dev->cow.bitmap_offset,
848 				      ubd_dev->cow.bitmap_len);
849 		if(err < 0)
850 			goto error;
851 
852 		flags = ubd_dev->openflags;
853 		flags.w = 0;
854 		err = open_ubd_file(ubd_dev->cow.file, &flags, ubd_dev->shared, NULL,
855 				    NULL, NULL, NULL, NULL);
856 		if(err < 0) goto error;
857 		ubd_dev->cow.fd = err;
858 	}
859 	if (ubd_dev->no_trim == 0) {
860 		ubd_dev->queue->limits.discard_granularity = SECTOR_SIZE;
861 		ubd_dev->queue->limits.discard_alignment = SECTOR_SIZE;
862 		blk_queue_max_discard_sectors(ubd_dev->queue, UBD_MAX_REQUEST);
863 		blk_queue_max_write_zeroes_sectors(ubd_dev->queue, UBD_MAX_REQUEST);
864 		blk_queue_flag_set(QUEUE_FLAG_DISCARD, ubd_dev->queue);
865 	}
866 	blk_queue_flag_set(QUEUE_FLAG_NONROT, ubd_dev->queue);
867 	return 0;
868  error:
869 	os_close_file(ubd_dev->fd);
870 	return err;
871 }
872 
873 static void ubd_device_release(struct device *dev)
874 {
875 	struct ubd *ubd_dev = dev_get_drvdata(dev);
876 
877 	blk_cleanup_queue(ubd_dev->queue);
878 	blk_mq_free_tag_set(&ubd_dev->tag_set);
879 	*ubd_dev = ((struct ubd) DEFAULT_UBD);
880 }
881 
882 static ssize_t serial_show(struct device *dev,
883 			   struct device_attribute *attr, char *buf)
884 {
885 	struct gendisk *disk = dev_to_disk(dev);
886 	struct ubd *ubd_dev = disk->private_data;
887 
888 	if (!ubd_dev)
889 		return 0;
890 
891 	return sprintf(buf, "%s", ubd_dev->serial);
892 }
893 
894 static DEVICE_ATTR_RO(serial);
895 
896 static struct attribute *ubd_attrs[] = {
897 	&dev_attr_serial.attr,
898 	NULL,
899 };
900 
901 static umode_t ubd_attrs_are_visible(struct kobject *kobj,
902 				     struct attribute *a, int n)
903 {
904 	return a->mode;
905 }
906 
907 static const struct attribute_group ubd_attr_group = {
908 	.attrs = ubd_attrs,
909 	.is_visible = ubd_attrs_are_visible,
910 };
911 
912 static const struct attribute_group *ubd_attr_groups[] = {
913 	&ubd_attr_group,
914 	NULL,
915 };
916 
917 static int ubd_disk_register(int major, u64 size, int unit,
918 			     struct gendisk **disk_out)
919 {
920 	struct device *parent = NULL;
921 	struct gendisk *disk;
922 
923 	disk = alloc_disk(1 << UBD_SHIFT);
924 	if(disk == NULL)
925 		return -ENOMEM;
926 
927 	disk->major = major;
928 	disk->first_minor = unit << UBD_SHIFT;
929 	disk->fops = &ubd_blops;
930 	set_capacity(disk, size / 512);
931 	if (major == UBD_MAJOR)
932 		sprintf(disk->disk_name, "ubd%c", 'a' + unit);
933 	else
934 		sprintf(disk->disk_name, "ubd_fake%d", unit);
935 
936 	/* sysfs register (not for ide fake devices) */
937 	if (major == UBD_MAJOR) {
938 		ubd_devs[unit].pdev.id   = unit;
939 		ubd_devs[unit].pdev.name = DRIVER_NAME;
940 		ubd_devs[unit].pdev.dev.release = ubd_device_release;
941 		dev_set_drvdata(&ubd_devs[unit].pdev.dev, &ubd_devs[unit]);
942 		platform_device_register(&ubd_devs[unit].pdev);
943 		parent = &ubd_devs[unit].pdev.dev;
944 	}
945 
946 	disk->private_data = &ubd_devs[unit];
947 	disk->queue = ubd_devs[unit].queue;
948 	device_add_disk(parent, disk, ubd_attr_groups);
949 
950 	*disk_out = disk;
951 	return 0;
952 }
953 
954 #define ROUND_BLOCK(n) ((n + (SECTOR_SIZE - 1)) & (-SECTOR_SIZE))
955 
956 static const struct blk_mq_ops ubd_mq_ops = {
957 	.queue_rq = ubd_queue_rq,
958 };
959 
960 static int ubd_add(int n, char **error_out)
961 {
962 	struct ubd *ubd_dev = &ubd_devs[n];
963 	int err = 0;
964 
965 	if(ubd_dev->file == NULL)
966 		goto out;
967 
968 	err = ubd_file_size(ubd_dev, &ubd_dev->size);
969 	if(err < 0){
970 		*error_out = "Couldn't determine size of device's file";
971 		goto out;
972 	}
973 
974 	ubd_dev->size = ROUND_BLOCK(ubd_dev->size);
975 
976 	ubd_dev->tag_set.ops = &ubd_mq_ops;
977 	ubd_dev->tag_set.queue_depth = 64;
978 	ubd_dev->tag_set.numa_node = NUMA_NO_NODE;
979 	ubd_dev->tag_set.flags = BLK_MQ_F_SHOULD_MERGE;
980 	ubd_dev->tag_set.driver_data = ubd_dev;
981 	ubd_dev->tag_set.nr_hw_queues = 1;
982 
983 	err = blk_mq_alloc_tag_set(&ubd_dev->tag_set);
984 	if (err)
985 		goto out;
986 
987 	ubd_dev->queue = blk_mq_init_queue(&ubd_dev->tag_set);
988 	if (IS_ERR(ubd_dev->queue)) {
989 		err = PTR_ERR(ubd_dev->queue);
990 		goto out_cleanup_tags;
991 	}
992 
993 	ubd_dev->queue->queuedata = ubd_dev;
994 	blk_queue_write_cache(ubd_dev->queue, true, false);
995 
996 	blk_queue_max_segments(ubd_dev->queue, MAX_SG);
997 	blk_queue_segment_boundary(ubd_dev->queue, PAGE_SIZE - 1);
998 	err = ubd_disk_register(UBD_MAJOR, ubd_dev->size, n, &ubd_gendisk[n]);
999 	if(err){
1000 		*error_out = "Failed to register device";
1001 		goto out_cleanup_tags;
1002 	}
1003 
1004 	if (fake_major != UBD_MAJOR)
1005 		ubd_disk_register(fake_major, ubd_dev->size, n,
1006 				  &fake_gendisk[n]);
1007 
1008 	/*
1009 	 * Perhaps this should also be under the "if (fake_major)" above
1010 	 * using the fake_disk->disk_name
1011 	 */
1012 	if (fake_ide)
1013 		make_ide_entries(ubd_gendisk[n]->disk_name);
1014 
1015 	err = 0;
1016 out:
1017 	return err;
1018 
1019 out_cleanup_tags:
1020 	blk_mq_free_tag_set(&ubd_dev->tag_set);
1021 	if (!(IS_ERR(ubd_dev->queue)))
1022 		blk_cleanup_queue(ubd_dev->queue);
1023 	goto out;
1024 }
1025 
1026 static int ubd_config(char *str, char **error_out)
1027 {
1028 	int n, ret;
1029 
1030 	/* This string is possibly broken up and stored, so it's only
1031 	 * freed if ubd_setup_common fails, or if only general options
1032 	 * were set.
1033 	 */
1034 	str = kstrdup(str, GFP_KERNEL);
1035 	if (str == NULL) {
1036 		*error_out = "Failed to allocate memory";
1037 		return -ENOMEM;
1038 	}
1039 
1040 	ret = ubd_setup_common(str, &n, error_out);
1041 	if (ret)
1042 		goto err_free;
1043 
1044 	if (n == -1) {
1045 		ret = 0;
1046 		goto err_free;
1047 	}
1048 
1049 	mutex_lock(&ubd_lock);
1050 	ret = ubd_add(n, error_out);
1051 	if (ret)
1052 		ubd_devs[n].file = NULL;
1053 	mutex_unlock(&ubd_lock);
1054 
1055 out:
1056 	return ret;
1057 
1058 err_free:
1059 	kfree(str);
1060 	goto out;
1061 }
1062 
1063 static int ubd_get_config(char *name, char *str, int size, char **error_out)
1064 {
1065 	struct ubd *ubd_dev;
1066 	int n, len = 0;
1067 
1068 	n = parse_unit(&name);
1069 	if((n >= MAX_DEV) || (n < 0)){
1070 		*error_out = "ubd_get_config : device number out of range";
1071 		return -1;
1072 	}
1073 
1074 	ubd_dev = &ubd_devs[n];
1075 	mutex_lock(&ubd_lock);
1076 
1077 	if(ubd_dev->file == NULL){
1078 		CONFIG_CHUNK(str, size, len, "", 1);
1079 		goto out;
1080 	}
1081 
1082 	CONFIG_CHUNK(str, size, len, ubd_dev->file, 0);
1083 
1084 	if(ubd_dev->cow.file != NULL){
1085 		CONFIG_CHUNK(str, size, len, ",", 0);
1086 		CONFIG_CHUNK(str, size, len, ubd_dev->cow.file, 1);
1087 	}
1088 	else CONFIG_CHUNK(str, size, len, "", 1);
1089 
1090  out:
1091 	mutex_unlock(&ubd_lock);
1092 	return len;
1093 }
1094 
1095 static int ubd_id(char **str, int *start_out, int *end_out)
1096 {
1097 	int n;
1098 
1099 	n = parse_unit(str);
1100 	*start_out = 0;
1101 	*end_out = MAX_DEV - 1;
1102 	return n;
1103 }
1104 
1105 static int ubd_remove(int n, char **error_out)
1106 {
1107 	struct gendisk *disk = ubd_gendisk[n];
1108 	struct ubd *ubd_dev;
1109 	int err = -ENODEV;
1110 
1111 	mutex_lock(&ubd_lock);
1112 
1113 	ubd_dev = &ubd_devs[n];
1114 
1115 	if(ubd_dev->file == NULL)
1116 		goto out;
1117 
1118 	/* you cannot remove a open disk */
1119 	err = -EBUSY;
1120 	if(ubd_dev->count > 0)
1121 		goto out;
1122 
1123 	ubd_gendisk[n] = NULL;
1124 	if(disk != NULL){
1125 		del_gendisk(disk);
1126 		put_disk(disk);
1127 	}
1128 
1129 	if(fake_gendisk[n] != NULL){
1130 		del_gendisk(fake_gendisk[n]);
1131 		put_disk(fake_gendisk[n]);
1132 		fake_gendisk[n] = NULL;
1133 	}
1134 
1135 	err = 0;
1136 	platform_device_unregister(&ubd_dev->pdev);
1137 out:
1138 	mutex_unlock(&ubd_lock);
1139 	return err;
1140 }
1141 
1142 /* All these are called by mconsole in process context and without
1143  * ubd-specific locks.  The structure itself is const except for .list.
1144  */
1145 static struct mc_device ubd_mc = {
1146 	.list		= LIST_HEAD_INIT(ubd_mc.list),
1147 	.name		= "ubd",
1148 	.config		= ubd_config,
1149 	.get_config	= ubd_get_config,
1150 	.id		= ubd_id,
1151 	.remove		= ubd_remove,
1152 };
1153 
1154 static int __init ubd_mc_init(void)
1155 {
1156 	mconsole_register_dev(&ubd_mc);
1157 	return 0;
1158 }
1159 
1160 __initcall(ubd_mc_init);
1161 
1162 static int __init ubd0_init(void)
1163 {
1164 	struct ubd *ubd_dev = &ubd_devs[0];
1165 
1166 	mutex_lock(&ubd_lock);
1167 	if(ubd_dev->file == NULL)
1168 		ubd_dev->file = "root_fs";
1169 	mutex_unlock(&ubd_lock);
1170 
1171 	return 0;
1172 }
1173 
1174 __initcall(ubd0_init);
1175 
1176 /* Used in ubd_init, which is an initcall */
1177 static struct platform_driver ubd_driver = {
1178 	.driver = {
1179 		.name  = DRIVER_NAME,
1180 	},
1181 };
1182 
1183 static int __init ubd_init(void)
1184 {
1185 	char *error;
1186 	int i, err;
1187 
1188 	if (register_blkdev(UBD_MAJOR, "ubd"))
1189 		return -1;
1190 
1191 	if (fake_major != UBD_MAJOR) {
1192 		char name[sizeof("ubd_nnn\0")];
1193 
1194 		snprintf(name, sizeof(name), "ubd_%d", fake_major);
1195 		if (register_blkdev(fake_major, "ubd"))
1196 			return -1;
1197 	}
1198 
1199 	irq_req_buffer = kmalloc_array(UBD_REQ_BUFFER_SIZE,
1200 				       sizeof(struct io_thread_req *),
1201 				       GFP_KERNEL
1202 		);
1203 	irq_remainder = 0;
1204 
1205 	if (irq_req_buffer == NULL) {
1206 		printk(KERN_ERR "Failed to initialize ubd buffering\n");
1207 		return -1;
1208 	}
1209 	io_req_buffer = kmalloc_array(UBD_REQ_BUFFER_SIZE,
1210 				      sizeof(struct io_thread_req *),
1211 				      GFP_KERNEL
1212 		);
1213 
1214 	io_remainder = 0;
1215 
1216 	if (io_req_buffer == NULL) {
1217 		printk(KERN_ERR "Failed to initialize ubd buffering\n");
1218 		return -1;
1219 	}
1220 	platform_driver_register(&ubd_driver);
1221 	mutex_lock(&ubd_lock);
1222 	for (i = 0; i < MAX_DEV; i++){
1223 		err = ubd_add(i, &error);
1224 		if(err)
1225 			printk(KERN_ERR "Failed to initialize ubd device %d :"
1226 			       "%s\n", i, error);
1227 	}
1228 	mutex_unlock(&ubd_lock);
1229 	return 0;
1230 }
1231 
1232 late_initcall(ubd_init);
1233 
1234 static int __init ubd_driver_init(void){
1235 	unsigned long stack;
1236 	int err;
1237 
1238 	/* Set by CONFIG_BLK_DEV_UBD_SYNC or ubd=sync.*/
1239 	if(global_openflags.s){
1240 		printk(KERN_INFO "ubd: Synchronous mode\n");
1241 		/* Letting ubd=sync be like using ubd#s= instead of ubd#= is
1242 		 * enough. So use anyway the io thread. */
1243 	}
1244 	stack = alloc_stack(0, 0);
1245 	io_pid = start_io_thread(stack + PAGE_SIZE - sizeof(void *),
1246 				 &thread_fd);
1247 	if(io_pid < 0){
1248 		printk(KERN_ERR
1249 		       "ubd : Failed to start I/O thread (errno = %d) - "
1250 		       "falling back to synchronous I/O\n", -io_pid);
1251 		io_pid = -1;
1252 		return 0;
1253 	}
1254 	err = um_request_irq(UBD_IRQ, thread_fd, IRQ_READ, ubd_intr,
1255 			     0, "ubd", ubd_devs);
1256 	if(err < 0)
1257 		printk(KERN_ERR "um_request_irq failed - errno = %d\n", -err);
1258 	return 0;
1259 }
1260 
1261 device_initcall(ubd_driver_init);
1262 
1263 static int ubd_open(struct block_device *bdev, fmode_t mode)
1264 {
1265 	struct gendisk *disk = bdev->bd_disk;
1266 	struct ubd *ubd_dev = disk->private_data;
1267 	int err = 0;
1268 
1269 	mutex_lock(&ubd_mutex);
1270 	if(ubd_dev->count == 0){
1271 		err = ubd_open_dev(ubd_dev);
1272 		if(err){
1273 			printk(KERN_ERR "%s: Can't open \"%s\": errno = %d\n",
1274 			       disk->disk_name, ubd_dev->file, -err);
1275 			goto out;
1276 		}
1277 	}
1278 	ubd_dev->count++;
1279 	set_disk_ro(disk, !ubd_dev->openflags.w);
1280 
1281 	/* This should no more be needed. And it didn't work anyway to exclude
1282 	 * read-write remounting of filesystems.*/
1283 	/*if((mode & FMODE_WRITE) && !ubd_dev->openflags.w){
1284 	        if(--ubd_dev->count == 0) ubd_close_dev(ubd_dev);
1285 	        err = -EROFS;
1286 	}*/
1287 out:
1288 	mutex_unlock(&ubd_mutex);
1289 	return err;
1290 }
1291 
1292 static void ubd_release(struct gendisk *disk, fmode_t mode)
1293 {
1294 	struct ubd *ubd_dev = disk->private_data;
1295 
1296 	mutex_lock(&ubd_mutex);
1297 	if(--ubd_dev->count == 0)
1298 		ubd_close_dev(ubd_dev);
1299 	mutex_unlock(&ubd_mutex);
1300 }
1301 
1302 static void cowify_bitmap(__u64 io_offset, int length, unsigned long *cow_mask,
1303 			  __u64 *cow_offset, unsigned long *bitmap,
1304 			  __u64 bitmap_offset, unsigned long *bitmap_words,
1305 			  __u64 bitmap_len)
1306 {
1307 	__u64 sector = io_offset >> SECTOR_SHIFT;
1308 	int i, update_bitmap = 0;
1309 
1310 	for (i = 0; i < length >> SECTOR_SHIFT; i++) {
1311 		if(cow_mask != NULL)
1312 			ubd_set_bit(i, (unsigned char *) cow_mask);
1313 		if(ubd_test_bit(sector + i, (unsigned char *) bitmap))
1314 			continue;
1315 
1316 		update_bitmap = 1;
1317 		ubd_set_bit(sector + i, (unsigned char *) bitmap);
1318 	}
1319 
1320 	if(!update_bitmap)
1321 		return;
1322 
1323 	*cow_offset = sector / (sizeof(unsigned long) * 8);
1324 
1325 	/* This takes care of the case where we're exactly at the end of the
1326 	 * device, and *cow_offset + 1 is off the end.  So, just back it up
1327 	 * by one word.  Thanks to Lynn Kerby for the fix and James McMechan
1328 	 * for the original diagnosis.
1329 	 */
1330 	if (*cow_offset == (DIV_ROUND_UP(bitmap_len,
1331 					 sizeof(unsigned long)) - 1))
1332 		(*cow_offset)--;
1333 
1334 	bitmap_words[0] = bitmap[*cow_offset];
1335 	bitmap_words[1] = bitmap[*cow_offset + 1];
1336 
1337 	*cow_offset *= sizeof(unsigned long);
1338 	*cow_offset += bitmap_offset;
1339 }
1340 
1341 static void cowify_req(struct io_thread_req *req, struct io_desc *segment,
1342 		       unsigned long offset, unsigned long *bitmap,
1343 		       __u64 bitmap_offset, __u64 bitmap_len)
1344 {
1345 	__u64 sector = offset >> SECTOR_SHIFT;
1346 	int i;
1347 
1348 	if (segment->length > (sizeof(segment->sector_mask) * 8) << SECTOR_SHIFT)
1349 		panic("Operation too long");
1350 
1351 	if (req_op(req->req) == REQ_OP_READ) {
1352 		for (i = 0; i < segment->length >> SECTOR_SHIFT; i++) {
1353 			if(ubd_test_bit(sector + i, (unsigned char *) bitmap))
1354 				ubd_set_bit(i, (unsigned char *)
1355 					    &segment->sector_mask);
1356 		}
1357 	} else {
1358 		cowify_bitmap(offset, segment->length, &segment->sector_mask,
1359 			      &segment->cow_offset, bitmap, bitmap_offset,
1360 			      segment->bitmap_words, bitmap_len);
1361 	}
1362 }
1363 
1364 static void ubd_map_req(struct ubd *dev, struct io_thread_req *io_req,
1365 			struct request *req)
1366 {
1367 	struct bio_vec bvec;
1368 	struct req_iterator iter;
1369 	int i = 0;
1370 	unsigned long byte_offset = io_req->offset;
1371 	int op = req_op(req);
1372 
1373 	if (op == REQ_OP_WRITE_ZEROES || op == REQ_OP_DISCARD) {
1374 		io_req->io_desc[0].buffer = NULL;
1375 		io_req->io_desc[0].length = blk_rq_bytes(req);
1376 	} else {
1377 		rq_for_each_segment(bvec, req, iter) {
1378 			BUG_ON(i >= io_req->desc_cnt);
1379 
1380 			io_req->io_desc[i].buffer =
1381 				page_address(bvec.bv_page) + bvec.bv_offset;
1382 			io_req->io_desc[i].length = bvec.bv_len;
1383 			i++;
1384 		}
1385 	}
1386 
1387 	if (dev->cow.file) {
1388 		for (i = 0; i < io_req->desc_cnt; i++) {
1389 			cowify_req(io_req, &io_req->io_desc[i], byte_offset,
1390 				   dev->cow.bitmap, dev->cow.bitmap_offset,
1391 				   dev->cow.bitmap_len);
1392 			byte_offset += io_req->io_desc[i].length;
1393 		}
1394 
1395 	}
1396 }
1397 
1398 static struct io_thread_req *ubd_alloc_req(struct ubd *dev, struct request *req,
1399 					   int desc_cnt)
1400 {
1401 	struct io_thread_req *io_req;
1402 	int i;
1403 
1404 	io_req = kmalloc(sizeof(*io_req) +
1405 			 (desc_cnt * sizeof(struct io_desc)),
1406 			 GFP_ATOMIC);
1407 	if (!io_req)
1408 		return NULL;
1409 
1410 	io_req->req = req;
1411 	if (dev->cow.file)
1412 		io_req->fds[0] = dev->cow.fd;
1413 	else
1414 		io_req->fds[0] = dev->fd;
1415 	io_req->error = 0;
1416 	io_req->sectorsize = SECTOR_SIZE;
1417 	io_req->fds[1] = dev->fd;
1418 	io_req->offset = (u64) blk_rq_pos(req) << SECTOR_SHIFT;
1419 	io_req->offsets[0] = 0;
1420 	io_req->offsets[1] = dev->cow.data_offset;
1421 
1422 	for (i = 0 ; i < desc_cnt; i++) {
1423 		io_req->io_desc[i].sector_mask = 0;
1424 		io_req->io_desc[i].cow_offset = -1;
1425 	}
1426 
1427 	return io_req;
1428 }
1429 
1430 static int ubd_submit_request(struct ubd *dev, struct request *req)
1431 {
1432 	int segs = 0;
1433 	struct io_thread_req *io_req;
1434 	int ret;
1435 	int op = req_op(req);
1436 
1437 	if (op == REQ_OP_FLUSH)
1438 		segs = 0;
1439 	else if (op == REQ_OP_WRITE_ZEROES || op == REQ_OP_DISCARD)
1440 		segs = 1;
1441 	else
1442 		segs = blk_rq_nr_phys_segments(req);
1443 
1444 	io_req = ubd_alloc_req(dev, req, segs);
1445 	if (!io_req)
1446 		return -ENOMEM;
1447 
1448 	io_req->desc_cnt = segs;
1449 	if (segs)
1450 		ubd_map_req(dev, io_req, req);
1451 
1452 	ret = os_write_file(thread_fd, &io_req, sizeof(io_req));
1453 	if (ret != sizeof(io_req)) {
1454 		if (ret != -EAGAIN)
1455 			pr_err("write to io thread failed: %d\n", -ret);
1456 		kfree(io_req);
1457 	}
1458 	return ret;
1459 }
1460 
1461 static blk_status_t ubd_queue_rq(struct blk_mq_hw_ctx *hctx,
1462 				 const struct blk_mq_queue_data *bd)
1463 {
1464 	struct ubd *ubd_dev = hctx->queue->queuedata;
1465 	struct request *req = bd->rq;
1466 	int ret = 0, res = BLK_STS_OK;
1467 
1468 	blk_mq_start_request(req);
1469 
1470 	spin_lock_irq(&ubd_dev->lock);
1471 
1472 	switch (req_op(req)) {
1473 	case REQ_OP_FLUSH:
1474 	case REQ_OP_READ:
1475 	case REQ_OP_WRITE:
1476 	case REQ_OP_DISCARD:
1477 	case REQ_OP_WRITE_ZEROES:
1478 		ret = ubd_submit_request(ubd_dev, req);
1479 		break;
1480 	default:
1481 		WARN_ON_ONCE(1);
1482 		res = BLK_STS_NOTSUPP;
1483 	}
1484 
1485 	spin_unlock_irq(&ubd_dev->lock);
1486 
1487 	if (ret < 0) {
1488 		if (ret == -ENOMEM)
1489 			res = BLK_STS_RESOURCE;
1490 		else
1491 			res = BLK_STS_DEV_RESOURCE;
1492 	}
1493 
1494 	return res;
1495 }
1496 
1497 static int ubd_getgeo(struct block_device *bdev, struct hd_geometry *geo)
1498 {
1499 	struct ubd *ubd_dev = bdev->bd_disk->private_data;
1500 
1501 	geo->heads = 128;
1502 	geo->sectors = 32;
1503 	geo->cylinders = ubd_dev->size / (128 * 32 * 512);
1504 	return 0;
1505 }
1506 
1507 static int ubd_ioctl(struct block_device *bdev, fmode_t mode,
1508 		     unsigned int cmd, unsigned long arg)
1509 {
1510 	struct ubd *ubd_dev = bdev->bd_disk->private_data;
1511 	u16 ubd_id[ATA_ID_WORDS];
1512 
1513 	switch (cmd) {
1514 		struct cdrom_volctrl volume;
1515 	case HDIO_GET_IDENTITY:
1516 		memset(&ubd_id, 0, ATA_ID_WORDS * 2);
1517 		ubd_id[ATA_ID_CYLS]	= ubd_dev->size / (128 * 32 * 512);
1518 		ubd_id[ATA_ID_HEADS]	= 128;
1519 		ubd_id[ATA_ID_SECTORS]	= 32;
1520 		if(copy_to_user((char __user *) arg, (char *) &ubd_id,
1521 				 sizeof(ubd_id)))
1522 			return -EFAULT;
1523 		return 0;
1524 
1525 	case CDROMVOLREAD:
1526 		if(copy_from_user(&volume, (char __user *) arg, sizeof(volume)))
1527 			return -EFAULT;
1528 		volume.channel0 = 255;
1529 		volume.channel1 = 255;
1530 		volume.channel2 = 255;
1531 		volume.channel3 = 255;
1532 		if(copy_to_user((char __user *) arg, &volume, sizeof(volume)))
1533 			return -EFAULT;
1534 		return 0;
1535 	}
1536 	return -EINVAL;
1537 }
1538 
1539 static int map_error(int error_code)
1540 {
1541 	switch (error_code) {
1542 	case 0:
1543 		return BLK_STS_OK;
1544 	case ENOSYS:
1545 	case EOPNOTSUPP:
1546 		return BLK_STS_NOTSUPP;
1547 	case ENOSPC:
1548 		return BLK_STS_NOSPC;
1549 	}
1550 	return BLK_STS_IOERR;
1551 }
1552 
1553 /*
1554  * Everything from here onwards *IS NOT PART OF THE KERNEL*
1555  *
1556  * The following functions are part of UML hypervisor code.
1557  * All functions from here onwards are executed as a helper
1558  * thread and are not allowed to execute any kernel functions.
1559  *
1560  * Any communication must occur strictly via shared memory and IPC.
1561  *
1562  * Do not add printks, locks, kernel memory operations, etc - it
1563  * will result in unpredictable behaviour and/or crashes.
1564  */
1565 
1566 static int update_bitmap(struct io_thread_req *req, struct io_desc *segment)
1567 {
1568 	int n;
1569 
1570 	if (segment->cow_offset == -1)
1571 		return map_error(0);
1572 
1573 	n = os_pwrite_file(req->fds[1], &segment->bitmap_words,
1574 			  sizeof(segment->bitmap_words), segment->cow_offset);
1575 	if (n != sizeof(segment->bitmap_words))
1576 		return map_error(-n);
1577 
1578 	return map_error(0);
1579 }
1580 
1581 static void do_io(struct io_thread_req *req, struct io_desc *desc)
1582 {
1583 	char *buf = NULL;
1584 	unsigned long len;
1585 	int n, nsectors, start, end, bit;
1586 	__u64 off;
1587 
1588 	/* FLUSH is really a special case, we cannot "case" it with others */
1589 
1590 	if (req_op(req->req) == REQ_OP_FLUSH) {
1591 		/* fds[0] is always either the rw image or our cow file */
1592 		req->error = map_error(-os_sync_file(req->fds[0]));
1593 		return;
1594 	}
1595 
1596 	nsectors = desc->length / req->sectorsize;
1597 	start = 0;
1598 	do {
1599 		bit = ubd_test_bit(start, (unsigned char *) &desc->sector_mask);
1600 		end = start;
1601 		while((end < nsectors) &&
1602 		      (ubd_test_bit(end, (unsigned char *) &desc->sector_mask) == bit))
1603 			end++;
1604 
1605 		off = req->offset + req->offsets[bit] +
1606 			start * req->sectorsize;
1607 		len = (end - start) * req->sectorsize;
1608 		if (desc->buffer != NULL)
1609 			buf = &desc->buffer[start * req->sectorsize];
1610 
1611 		switch (req_op(req->req)) {
1612 		case REQ_OP_READ:
1613 			n = 0;
1614 			do {
1615 				buf = &buf[n];
1616 				len -= n;
1617 				n = os_pread_file(req->fds[bit], buf, len, off);
1618 				if (n < 0) {
1619 					req->error = map_error(-n);
1620 					return;
1621 				}
1622 			} while((n < len) && (n != 0));
1623 			if (n < len) memset(&buf[n], 0, len - n);
1624 			break;
1625 		case REQ_OP_WRITE:
1626 			n = os_pwrite_file(req->fds[bit], buf, len, off);
1627 			if(n != len){
1628 				req->error = map_error(-n);
1629 				return;
1630 			}
1631 			break;
1632 		case REQ_OP_DISCARD:
1633 		case REQ_OP_WRITE_ZEROES:
1634 			n = os_falloc_punch(req->fds[bit], off, len);
1635 			if (n) {
1636 				req->error = map_error(-n);
1637 				return;
1638 			}
1639 			break;
1640 		default:
1641 			WARN_ON_ONCE(1);
1642 			req->error = BLK_STS_NOTSUPP;
1643 			return;
1644 		}
1645 
1646 		start = end;
1647 	} while(start < nsectors);
1648 
1649 	req->offset += len;
1650 	req->error = update_bitmap(req, desc);
1651 }
1652 
1653 /* Changed in start_io_thread, which is serialized by being called only
1654  * from ubd_init, which is an initcall.
1655  */
1656 int kernel_fd = -1;
1657 
1658 /* Only changed by the io thread. XXX: currently unused. */
1659 static int io_count = 0;
1660 
1661 int io_thread(void *arg)
1662 {
1663 	int n, count, written, res;
1664 
1665 	os_fix_helper_signals();
1666 
1667 	while(1){
1668 		n = bulk_req_safe_read(
1669 			kernel_fd,
1670 			io_req_buffer,
1671 			&io_remainder,
1672 			&io_remainder_size,
1673 			UBD_REQ_BUFFER_SIZE
1674 		);
1675 		if (n <= 0) {
1676 			if (n == -EAGAIN)
1677 				ubd_read_poll(-1);
1678 
1679 			continue;
1680 		}
1681 
1682 		for (count = 0; count < n/sizeof(struct io_thread_req *); count++) {
1683 			struct io_thread_req *req = (*io_req_buffer)[count];
1684 			int i;
1685 
1686 			io_count++;
1687 			for (i = 0; !req->error && i < req->desc_cnt; i++)
1688 				do_io(req, &(req->io_desc[i]));
1689 
1690 		}
1691 
1692 		written = 0;
1693 
1694 		do {
1695 			res = os_write_file(kernel_fd,
1696 					    ((char *) io_req_buffer) + written,
1697 					    n - written);
1698 			if (res >= 0) {
1699 				written += res;
1700 			}
1701 			if (written < n) {
1702 				ubd_write_poll(-1);
1703 			}
1704 		} while (written < n);
1705 	}
1706 
1707 	return 0;
1708 }
1709