xref: /openbmc/linux/drivers/block/loop.c (revision 476a4813)
11da177e4SLinus Torvalds /*
21da177e4SLinus Torvalds  *  linux/drivers/block/loop.c
31da177e4SLinus Torvalds  *
41da177e4SLinus Torvalds  *  Written by Theodore Ts'o, 3/29/93
51da177e4SLinus Torvalds  *
61da177e4SLinus Torvalds  * Copyright 1993 by Theodore Ts'o.  Redistribution of this file is
71da177e4SLinus Torvalds  * permitted under the GNU General Public License.
81da177e4SLinus Torvalds  *
91da177e4SLinus Torvalds  * DES encryption plus some minor changes by Werner Almesberger, 30-MAY-1993
101da177e4SLinus Torvalds  * more DES encryption plus IDEA encryption by Nicholas J. Leon, June 20, 1996
111da177e4SLinus Torvalds  *
121da177e4SLinus Torvalds  * Modularized and updated for 1.1.16 kernel - Mitch Dsouza 28th May 1994
131da177e4SLinus Torvalds  * Adapted for 1.3.59 kernel - Andries Brouwer, 1 Feb 1996
141da177e4SLinus Torvalds  *
151da177e4SLinus Torvalds  * Fixed do_loop_request() re-entrancy - Vincent.Renardias@waw.com Mar 20, 1997
161da177e4SLinus Torvalds  *
171da177e4SLinus Torvalds  * Added devfs support - Richard Gooch <rgooch@atnf.csiro.au> 16-Jan-1998
181da177e4SLinus Torvalds  *
191da177e4SLinus Torvalds  * Handle sparse backing files correctly - Kenn Humborg, Jun 28, 1998
201da177e4SLinus Torvalds  *
211da177e4SLinus Torvalds  * Loadable modules and other fixes by AK, 1998
221da177e4SLinus Torvalds  *
231da177e4SLinus Torvalds  * Make real block number available to downstream transfer functions, enables
241da177e4SLinus Torvalds  * CBC (and relatives) mode encryption requiring unique IVs per data block.
251da177e4SLinus Torvalds  * Reed H. Petty, rhp@draper.net
261da177e4SLinus Torvalds  *
271da177e4SLinus Torvalds  * Maximum number of loop devices now dynamic via max_loop module parameter.
281da177e4SLinus Torvalds  * Russell Kroll <rkroll@exploits.org> 19990701
291da177e4SLinus Torvalds  *
301da177e4SLinus Torvalds  * Maximum number of loop devices when compiled-in now selectable by passing
311da177e4SLinus Torvalds  * max_loop=<1-255> to the kernel on boot.
3296de0e25SJan Engelhardt  * Erik I. Bolsø, <eriki@himolde.no>, Oct 31, 1999
331da177e4SLinus Torvalds  *
341da177e4SLinus Torvalds  * Completely rewrite request handling to be make_request_fn style and
351da177e4SLinus Torvalds  * non blocking, pushing work to a helper thread. Lots of fixes from
361da177e4SLinus Torvalds  * Al Viro too.
371da177e4SLinus Torvalds  * Jens Axboe <axboe@suse.de>, Nov 2000
381da177e4SLinus Torvalds  *
391da177e4SLinus Torvalds  * Support up to 256 loop devices
401da177e4SLinus Torvalds  * Heinz Mauelshagen <mge@sistina.com>, Feb 2002
411da177e4SLinus Torvalds  *
421da177e4SLinus Torvalds  * Support for falling back on the write file operation when the address space
431da177e4SLinus Torvalds  * operations prepare_write and/or commit_write are not available on the
441da177e4SLinus Torvalds  * backing filesystem.
451da177e4SLinus Torvalds  * Anton Altaparmakov, 16 Feb 2005
461da177e4SLinus Torvalds  *
471da177e4SLinus Torvalds  * Still To Fix:
481da177e4SLinus Torvalds  * - Advisory locking is ignored here.
491da177e4SLinus Torvalds  * - Should use an own CAP_* category instead of CAP_SYS_ADMIN
501da177e4SLinus Torvalds  *
511da177e4SLinus Torvalds  */
521da177e4SLinus Torvalds 
531da177e4SLinus Torvalds #include <linux/module.h>
541da177e4SLinus Torvalds #include <linux/moduleparam.h>
551da177e4SLinus Torvalds #include <linux/sched.h>
561da177e4SLinus Torvalds #include <linux/fs.h>
571da177e4SLinus Torvalds #include <linux/file.h>
581da177e4SLinus Torvalds #include <linux/stat.h>
591da177e4SLinus Torvalds #include <linux/errno.h>
601da177e4SLinus Torvalds #include <linux/major.h>
611da177e4SLinus Torvalds #include <linux/wait.h>
621da177e4SLinus Torvalds #include <linux/blkdev.h>
631da177e4SLinus Torvalds #include <linux/blkpg.h>
641da177e4SLinus Torvalds #include <linux/init.h>
651da177e4SLinus Torvalds #include <linux/smp_lock.h>
661da177e4SLinus Torvalds #include <linux/swap.h>
671da177e4SLinus Torvalds #include <linux/slab.h>
681da177e4SLinus Torvalds #include <linux/loop.h>
69863d5b82SDavid Howells #include <linux/compat.h>
701da177e4SLinus Torvalds #include <linux/suspend.h>
7183144186SRafael J. Wysocki #include <linux/freezer.h>
721da177e4SLinus Torvalds #include <linux/writeback.h>
731da177e4SLinus Torvalds #include <linux/buffer_head.h>		/* for invalidate_bdev() */
741da177e4SLinus Torvalds #include <linux/completion.h>
751da177e4SLinus Torvalds #include <linux/highmem.h>
761da177e4SLinus Torvalds #include <linux/gfp.h>
776c997918SSerge E. Hallyn #include <linux/kthread.h>
78d6b29d7cSJens Axboe #include <linux/splice.h>
791da177e4SLinus Torvalds 
801da177e4SLinus Torvalds #include <asm/uaccess.h>
811da177e4SLinus Torvalds 
8273285082SKen Chen static LIST_HEAD(loop_devices);
8373285082SKen Chen static DEFINE_MUTEX(loop_devices_mutex);
841da177e4SLinus Torvalds 
85476a4813SLaurent Vivier static int max_part;
86476a4813SLaurent Vivier static int part_shift;
87476a4813SLaurent Vivier 
881da177e4SLinus Torvalds /*
891da177e4SLinus Torvalds  * Transfer functions
901da177e4SLinus Torvalds  */
911da177e4SLinus Torvalds static int transfer_none(struct loop_device *lo, int cmd,
921da177e4SLinus Torvalds 			 struct page *raw_page, unsigned raw_off,
931da177e4SLinus Torvalds 			 struct page *loop_page, unsigned loop_off,
941da177e4SLinus Torvalds 			 int size, sector_t real_block)
951da177e4SLinus Torvalds {
961da177e4SLinus Torvalds 	char *raw_buf = kmap_atomic(raw_page, KM_USER0) + raw_off;
971da177e4SLinus Torvalds 	char *loop_buf = kmap_atomic(loop_page, KM_USER1) + loop_off;
981da177e4SLinus Torvalds 
991da177e4SLinus Torvalds 	if (cmd == READ)
1001da177e4SLinus Torvalds 		memcpy(loop_buf, raw_buf, size);
1011da177e4SLinus Torvalds 	else
1021da177e4SLinus Torvalds 		memcpy(raw_buf, loop_buf, size);
1031da177e4SLinus Torvalds 
1041da177e4SLinus Torvalds 	kunmap_atomic(raw_buf, KM_USER0);
1051da177e4SLinus Torvalds 	kunmap_atomic(loop_buf, KM_USER1);
1061da177e4SLinus Torvalds 	cond_resched();
1071da177e4SLinus Torvalds 	return 0;
1081da177e4SLinus Torvalds }
1091da177e4SLinus Torvalds 
1101da177e4SLinus Torvalds static int transfer_xor(struct loop_device *lo, int cmd,
1111da177e4SLinus Torvalds 			struct page *raw_page, unsigned raw_off,
1121da177e4SLinus Torvalds 			struct page *loop_page, unsigned loop_off,
1131da177e4SLinus Torvalds 			int size, sector_t real_block)
1141da177e4SLinus Torvalds {
1151da177e4SLinus Torvalds 	char *raw_buf = kmap_atomic(raw_page, KM_USER0) + raw_off;
1161da177e4SLinus Torvalds 	char *loop_buf = kmap_atomic(loop_page, KM_USER1) + loop_off;
1171da177e4SLinus Torvalds 	char *in, *out, *key;
1181da177e4SLinus Torvalds 	int i, keysize;
1191da177e4SLinus Torvalds 
1201da177e4SLinus Torvalds 	if (cmd == READ) {
1211da177e4SLinus Torvalds 		in = raw_buf;
1221da177e4SLinus Torvalds 		out = loop_buf;
1231da177e4SLinus Torvalds 	} else {
1241da177e4SLinus Torvalds 		in = loop_buf;
1251da177e4SLinus Torvalds 		out = raw_buf;
1261da177e4SLinus Torvalds 	}
1271da177e4SLinus Torvalds 
1281da177e4SLinus Torvalds 	key = lo->lo_encrypt_key;
1291da177e4SLinus Torvalds 	keysize = lo->lo_encrypt_key_size;
1301da177e4SLinus Torvalds 	for (i = 0; i < size; i++)
1311da177e4SLinus Torvalds 		*out++ = *in++ ^ key[(i & 511) % keysize];
1321da177e4SLinus Torvalds 
1331da177e4SLinus Torvalds 	kunmap_atomic(raw_buf, KM_USER0);
1341da177e4SLinus Torvalds 	kunmap_atomic(loop_buf, KM_USER1);
1351da177e4SLinus Torvalds 	cond_resched();
1361da177e4SLinus Torvalds 	return 0;
1371da177e4SLinus Torvalds }
1381da177e4SLinus Torvalds 
1391da177e4SLinus Torvalds static int xor_init(struct loop_device *lo, const struct loop_info64 *info)
1401da177e4SLinus Torvalds {
1411da177e4SLinus Torvalds 	if (unlikely(info->lo_encrypt_key_size <= 0))
1421da177e4SLinus Torvalds 		return -EINVAL;
1431da177e4SLinus Torvalds 	return 0;
1441da177e4SLinus Torvalds }
1451da177e4SLinus Torvalds 
1461da177e4SLinus Torvalds static struct loop_func_table none_funcs = {
1471da177e4SLinus Torvalds 	.number = LO_CRYPT_NONE,
1481da177e4SLinus Torvalds 	.transfer = transfer_none,
1491da177e4SLinus Torvalds };
1501da177e4SLinus Torvalds 
1511da177e4SLinus Torvalds static struct loop_func_table xor_funcs = {
1521da177e4SLinus Torvalds 	.number = LO_CRYPT_XOR,
1531da177e4SLinus Torvalds 	.transfer = transfer_xor,
1541da177e4SLinus Torvalds 	.init = xor_init
1551da177e4SLinus Torvalds };
1561da177e4SLinus Torvalds 
1571da177e4SLinus Torvalds /* xfer_funcs[0] is special - its release function is never called */
1581da177e4SLinus Torvalds static struct loop_func_table *xfer_funcs[MAX_LO_CRYPT] = {
1591da177e4SLinus Torvalds 	&none_funcs,
1601da177e4SLinus Torvalds 	&xor_funcs
1611da177e4SLinus Torvalds };
1621da177e4SLinus Torvalds 
1631da177e4SLinus Torvalds static loff_t get_loop_size(struct loop_device *lo, struct file *file)
1641da177e4SLinus Torvalds {
1651da177e4SLinus Torvalds 	loff_t size, offset, loopsize;
1661da177e4SLinus Torvalds 
1671da177e4SLinus Torvalds 	/* Compute loopsize in bytes */
1681da177e4SLinus Torvalds 	size = i_size_read(file->f_mapping->host);
1691da177e4SLinus Torvalds 	offset = lo->lo_offset;
1701da177e4SLinus Torvalds 	loopsize = size - offset;
1711da177e4SLinus Torvalds 	if (lo->lo_sizelimit > 0 && lo->lo_sizelimit < loopsize)
1721da177e4SLinus Torvalds 		loopsize = lo->lo_sizelimit;
1731da177e4SLinus Torvalds 
1741da177e4SLinus Torvalds 	/*
1751da177e4SLinus Torvalds 	 * Unfortunately, if we want to do I/O on the device,
1761da177e4SLinus Torvalds 	 * the number of 512-byte sectors has to fit into a sector_t.
1771da177e4SLinus Torvalds 	 */
1781da177e4SLinus Torvalds 	return loopsize >> 9;
1791da177e4SLinus Torvalds }
1801da177e4SLinus Torvalds 
1811da177e4SLinus Torvalds static int
1821da177e4SLinus Torvalds figure_loop_size(struct loop_device *lo)
1831da177e4SLinus Torvalds {
1841da177e4SLinus Torvalds 	loff_t size = get_loop_size(lo, lo->lo_backing_file);
1851da177e4SLinus Torvalds 	sector_t x = (sector_t)size;
1861da177e4SLinus Torvalds 
1871da177e4SLinus Torvalds 	if (unlikely((loff_t)x != size))
1881da177e4SLinus Torvalds 		return -EFBIG;
1891da177e4SLinus Torvalds 
19073285082SKen Chen 	set_capacity(lo->lo_disk, x);
1911da177e4SLinus Torvalds 	return 0;
1921da177e4SLinus Torvalds }
1931da177e4SLinus Torvalds 
1941da177e4SLinus Torvalds static inline int
1951da177e4SLinus Torvalds lo_do_transfer(struct loop_device *lo, int cmd,
1961da177e4SLinus Torvalds 	       struct page *rpage, unsigned roffs,
1971da177e4SLinus Torvalds 	       struct page *lpage, unsigned loffs,
1981da177e4SLinus Torvalds 	       int size, sector_t rblock)
1991da177e4SLinus Torvalds {
2001da177e4SLinus Torvalds 	if (unlikely(!lo->transfer))
2011da177e4SLinus Torvalds 		return 0;
2021da177e4SLinus Torvalds 
2031da177e4SLinus Torvalds 	return lo->transfer(lo, cmd, rpage, roffs, lpage, loffs, size, rblock);
2041da177e4SLinus Torvalds }
2051da177e4SLinus Torvalds 
2061da177e4SLinus Torvalds /**
2071da177e4SLinus Torvalds  * do_lo_send_aops - helper for writing data to a loop device
2081da177e4SLinus Torvalds  *
2091da177e4SLinus Torvalds  * This is the fast version for backing filesystems which implement the address
210afddba49SNick Piggin  * space operations write_begin and write_end.
2111da177e4SLinus Torvalds  */
2121da177e4SLinus Torvalds static int do_lo_send_aops(struct loop_device *lo, struct bio_vec *bvec,
213afddba49SNick Piggin 		int bsize, loff_t pos, struct page *unused)
2141da177e4SLinus Torvalds {
2151da177e4SLinus Torvalds 	struct file *file = lo->lo_backing_file; /* kudos to NFsckingS */
2161da177e4SLinus Torvalds 	struct address_space *mapping = file->f_mapping;
2171da177e4SLinus Torvalds 	pgoff_t index;
2181da177e4SLinus Torvalds 	unsigned offset, bv_offs;
219994fc28cSZach Brown 	int len, ret;
2201da177e4SLinus Torvalds 
2211b1dcc1bSJes Sorensen 	mutex_lock(&mapping->host->i_mutex);
2221da177e4SLinus Torvalds 	index = pos >> PAGE_CACHE_SHIFT;
2231da177e4SLinus Torvalds 	offset = pos & ((pgoff_t)PAGE_CACHE_SIZE - 1);
2241da177e4SLinus Torvalds 	bv_offs = bvec->bv_offset;
2251da177e4SLinus Torvalds 	len = bvec->bv_len;
2261da177e4SLinus Torvalds 	while (len > 0) {
2271da177e4SLinus Torvalds 		sector_t IV;
228afddba49SNick Piggin 		unsigned size, copied;
2291da177e4SLinus Torvalds 		int transfer_result;
230afddba49SNick Piggin 		struct page *page;
231afddba49SNick Piggin 		void *fsdata;
2321da177e4SLinus Torvalds 
2331da177e4SLinus Torvalds 		IV = ((sector_t)index << (PAGE_CACHE_SHIFT - 9))+(offset >> 9);
2341da177e4SLinus Torvalds 		size = PAGE_CACHE_SIZE - offset;
2351da177e4SLinus Torvalds 		if (size > len)
2361da177e4SLinus Torvalds 			size = len;
237afddba49SNick Piggin 
238afddba49SNick Piggin 		ret = pagecache_write_begin(file, mapping, pos, size, 0,
239afddba49SNick Piggin 							&page, &fsdata);
240afddba49SNick Piggin 		if (ret)
2411da177e4SLinus Torvalds 			goto fail;
242afddba49SNick Piggin 
2431da177e4SLinus Torvalds 		transfer_result = lo_do_transfer(lo, WRITE, page, offset,
2441da177e4SLinus Torvalds 				bvec->bv_page, bv_offs, size, IV);
245afddba49SNick Piggin 		copied = size;
2461da177e4SLinus Torvalds 		if (unlikely(transfer_result))
247afddba49SNick Piggin 			copied = 0;
248afddba49SNick Piggin 
249afddba49SNick Piggin 		ret = pagecache_write_end(file, mapping, pos, size, copied,
250afddba49SNick Piggin 							page, fsdata);
2518268f5a7SDmitry Monakhov 		if (ret < 0 || ret != copied)
252afddba49SNick Piggin 			goto fail;
253afddba49SNick Piggin 
254afddba49SNick Piggin 		if (unlikely(transfer_result))
255afddba49SNick Piggin 			goto fail;
256afddba49SNick Piggin 
257afddba49SNick Piggin 		bv_offs += copied;
258afddba49SNick Piggin 		len -= copied;
2591da177e4SLinus Torvalds 		offset = 0;
2601da177e4SLinus Torvalds 		index++;
261afddba49SNick Piggin 		pos += copied;
2621da177e4SLinus Torvalds 	}
263994fc28cSZach Brown 	ret = 0;
2641da177e4SLinus Torvalds out:
2651b1dcc1bSJes Sorensen 	mutex_unlock(&mapping->host->i_mutex);
2661da177e4SLinus Torvalds 	return ret;
2671da177e4SLinus Torvalds fail:
2681da177e4SLinus Torvalds 	ret = -1;
2691da177e4SLinus Torvalds 	goto out;
2701da177e4SLinus Torvalds }
2711da177e4SLinus Torvalds 
2721da177e4SLinus Torvalds /**
2731da177e4SLinus Torvalds  * __do_lo_send_write - helper for writing data to a loop device
2741da177e4SLinus Torvalds  *
2751da177e4SLinus Torvalds  * This helper just factors out common code between do_lo_send_direct_write()
2761da177e4SLinus Torvalds  * and do_lo_send_write().
2771da177e4SLinus Torvalds  */
278858119e1SArjan van de Ven static int __do_lo_send_write(struct file *file,
27998ae6ccdSAl Viro 		u8 *buf, const int len, loff_t pos)
2801da177e4SLinus Torvalds {
2811da177e4SLinus Torvalds 	ssize_t bw;
2821da177e4SLinus Torvalds 	mm_segment_t old_fs = get_fs();
2831da177e4SLinus Torvalds 
2841da177e4SLinus Torvalds 	set_fs(get_ds());
2851da177e4SLinus Torvalds 	bw = file->f_op->write(file, buf, len, &pos);
2861da177e4SLinus Torvalds 	set_fs(old_fs);
2871da177e4SLinus Torvalds 	if (likely(bw == len))
2881da177e4SLinus Torvalds 		return 0;
2891da177e4SLinus Torvalds 	printk(KERN_ERR "loop: Write error at byte offset %llu, length %i.\n",
2901da177e4SLinus Torvalds 			(unsigned long long)pos, len);
2911da177e4SLinus Torvalds 	if (bw >= 0)
2921da177e4SLinus Torvalds 		bw = -EIO;
2931da177e4SLinus Torvalds 	return bw;
2941da177e4SLinus Torvalds }
2951da177e4SLinus Torvalds 
2961da177e4SLinus Torvalds /**
2971da177e4SLinus Torvalds  * do_lo_send_direct_write - helper for writing data to a loop device
2981da177e4SLinus Torvalds  *
2991da177e4SLinus Torvalds  * This is the fast, non-transforming version for backing filesystems which do
300afddba49SNick Piggin  * not implement the address space operations write_begin and write_end.
3011da177e4SLinus Torvalds  * It uses the write file operation which should be present on all writeable
3021da177e4SLinus Torvalds  * filesystems.
3031da177e4SLinus Torvalds  */
3041da177e4SLinus Torvalds static int do_lo_send_direct_write(struct loop_device *lo,
3051da177e4SLinus Torvalds 		struct bio_vec *bvec, int bsize, loff_t pos, struct page *page)
3061da177e4SLinus Torvalds {
3071da177e4SLinus Torvalds 	ssize_t bw = __do_lo_send_write(lo->lo_backing_file,
30898ae6ccdSAl Viro 			kmap(bvec->bv_page) + bvec->bv_offset,
3091da177e4SLinus Torvalds 			bvec->bv_len, pos);
3101da177e4SLinus Torvalds 	kunmap(bvec->bv_page);
3111da177e4SLinus Torvalds 	cond_resched();
3121da177e4SLinus Torvalds 	return bw;
3131da177e4SLinus Torvalds }
3141da177e4SLinus Torvalds 
3151da177e4SLinus Torvalds /**
3161da177e4SLinus Torvalds  * do_lo_send_write - helper for writing data to a loop device
3171da177e4SLinus Torvalds  *
3181da177e4SLinus Torvalds  * This is the slow, transforming version for filesystems which do not
319afddba49SNick Piggin  * implement the address space operations write_begin and write_end.  It
3201da177e4SLinus Torvalds  * uses the write file operation which should be present on all writeable
3211da177e4SLinus Torvalds  * filesystems.
3221da177e4SLinus Torvalds  *
3231da177e4SLinus Torvalds  * Using fops->write is slower than using aops->{prepare,commit}_write in the
3241da177e4SLinus Torvalds  * transforming case because we need to double buffer the data as we cannot do
3251da177e4SLinus Torvalds  * the transformations in place as we do not have direct access to the
3261da177e4SLinus Torvalds  * destination pages of the backing file.
3271da177e4SLinus Torvalds  */
3281da177e4SLinus Torvalds static int do_lo_send_write(struct loop_device *lo, struct bio_vec *bvec,
3291da177e4SLinus Torvalds 		int bsize, loff_t pos, struct page *page)
3301da177e4SLinus Torvalds {
3311da177e4SLinus Torvalds 	int ret = lo_do_transfer(lo, WRITE, page, 0, bvec->bv_page,
3321da177e4SLinus Torvalds 			bvec->bv_offset, bvec->bv_len, pos >> 9);
3331da177e4SLinus Torvalds 	if (likely(!ret))
3341da177e4SLinus Torvalds 		return __do_lo_send_write(lo->lo_backing_file,
33598ae6ccdSAl Viro 				page_address(page), bvec->bv_len,
3361da177e4SLinus Torvalds 				pos);
3371da177e4SLinus Torvalds 	printk(KERN_ERR "loop: Transfer error at byte offset %llu, "
3381da177e4SLinus Torvalds 			"length %i.\n", (unsigned long long)pos, bvec->bv_len);
3391da177e4SLinus Torvalds 	if (ret > 0)
3401da177e4SLinus Torvalds 		ret = -EIO;
3411da177e4SLinus Torvalds 	return ret;
3421da177e4SLinus Torvalds }
3431da177e4SLinus Torvalds 
3441da177e4SLinus Torvalds static int lo_send(struct loop_device *lo, struct bio *bio, int bsize,
3451da177e4SLinus Torvalds 		loff_t pos)
3461da177e4SLinus Torvalds {
3471da177e4SLinus Torvalds 	int (*do_lo_send)(struct loop_device *, struct bio_vec *, int, loff_t,
3481da177e4SLinus Torvalds 			struct page *page);
3491da177e4SLinus Torvalds 	struct bio_vec *bvec;
3501da177e4SLinus Torvalds 	struct page *page = NULL;
3511da177e4SLinus Torvalds 	int i, ret = 0;
3521da177e4SLinus Torvalds 
3531da177e4SLinus Torvalds 	do_lo_send = do_lo_send_aops;
3541da177e4SLinus Torvalds 	if (!(lo->lo_flags & LO_FLAGS_USE_AOPS)) {
3551da177e4SLinus Torvalds 		do_lo_send = do_lo_send_direct_write;
3561da177e4SLinus Torvalds 		if (lo->transfer != transfer_none) {
3571da177e4SLinus Torvalds 			page = alloc_page(GFP_NOIO | __GFP_HIGHMEM);
3581da177e4SLinus Torvalds 			if (unlikely(!page))
3591da177e4SLinus Torvalds 				goto fail;
3601da177e4SLinus Torvalds 			kmap(page);
3611da177e4SLinus Torvalds 			do_lo_send = do_lo_send_write;
3621da177e4SLinus Torvalds 		}
3631da177e4SLinus Torvalds 	}
3641da177e4SLinus Torvalds 	bio_for_each_segment(bvec, bio, i) {
3651da177e4SLinus Torvalds 		ret = do_lo_send(lo, bvec, bsize, pos, page);
3661da177e4SLinus Torvalds 		if (ret < 0)
3671da177e4SLinus Torvalds 			break;
3681da177e4SLinus Torvalds 		pos += bvec->bv_len;
3691da177e4SLinus Torvalds 	}
3701da177e4SLinus Torvalds 	if (page) {
3711da177e4SLinus Torvalds 		kunmap(page);
3721da177e4SLinus Torvalds 		__free_page(page);
3731da177e4SLinus Torvalds 	}
3741da177e4SLinus Torvalds out:
3751da177e4SLinus Torvalds 	return ret;
3761da177e4SLinus Torvalds fail:
3771da177e4SLinus Torvalds 	printk(KERN_ERR "loop: Failed to allocate temporary page for write.\n");
3781da177e4SLinus Torvalds 	ret = -ENOMEM;
3791da177e4SLinus Torvalds 	goto out;
3801da177e4SLinus Torvalds }
3811da177e4SLinus Torvalds 
3821da177e4SLinus Torvalds struct lo_read_data {
3831da177e4SLinus Torvalds 	struct loop_device *lo;
3841da177e4SLinus Torvalds 	struct page *page;
3851da177e4SLinus Torvalds 	unsigned offset;
3861da177e4SLinus Torvalds 	int bsize;
3871da177e4SLinus Torvalds };
3881da177e4SLinus Torvalds 
3891da177e4SLinus Torvalds static int
390fd582140SJens Axboe lo_splice_actor(struct pipe_inode_info *pipe, struct pipe_buffer *buf,
391fd582140SJens Axboe 		struct splice_desc *sd)
3921da177e4SLinus Torvalds {
393fd582140SJens Axboe 	struct lo_read_data *p = sd->u.data;
3941da177e4SLinus Torvalds 	struct loop_device *lo = p->lo;
395fd582140SJens Axboe 	struct page *page = buf->page;
3961da177e4SLinus Torvalds 	sector_t IV;
397fd582140SJens Axboe 	size_t size;
398fd582140SJens Axboe 	int ret;
3991da177e4SLinus Torvalds 
400cac36bb0SJens Axboe 	ret = buf->ops->confirm(pipe, buf);
401fd582140SJens Axboe 	if (unlikely(ret))
402fd582140SJens Axboe 		return ret;
4031da177e4SLinus Torvalds 
404fd582140SJens Axboe 	IV = ((sector_t) page->index << (PAGE_CACHE_SHIFT - 9)) +
405fd582140SJens Axboe 							(buf->offset >> 9);
406fd582140SJens Axboe 	size = sd->len;
407fd582140SJens Axboe 	if (size > p->bsize)
408fd582140SJens Axboe 		size = p->bsize;
4091da177e4SLinus Torvalds 
410fd582140SJens Axboe 	if (lo_do_transfer(lo, READ, page, buf->offset, p->page, p->offset, size, IV)) {
4111da177e4SLinus Torvalds 		printk(KERN_ERR "loop: transfer error block %ld\n",
4121da177e4SLinus Torvalds 		       page->index);
413fd582140SJens Axboe 		size = -EINVAL;
4141da177e4SLinus Torvalds 	}
4151da177e4SLinus Torvalds 
4161da177e4SLinus Torvalds 	flush_dcache_page(p->page);
4171da177e4SLinus Torvalds 
418fd582140SJens Axboe 	if (size > 0)
4191da177e4SLinus Torvalds 		p->offset += size;
420fd582140SJens Axboe 
4211da177e4SLinus Torvalds 	return size;
4221da177e4SLinus Torvalds }
4231da177e4SLinus Torvalds 
4241da177e4SLinus Torvalds static int
425fd582140SJens Axboe lo_direct_splice_actor(struct pipe_inode_info *pipe, struct splice_desc *sd)
426fd582140SJens Axboe {
427fd582140SJens Axboe 	return __splice_from_pipe(pipe, sd, lo_splice_actor);
428fd582140SJens Axboe }
429fd582140SJens Axboe 
430fd582140SJens Axboe static int
4311da177e4SLinus Torvalds do_lo_receive(struct loop_device *lo,
4321da177e4SLinus Torvalds 	      struct bio_vec *bvec, int bsize, loff_t pos)
4331da177e4SLinus Torvalds {
4341da177e4SLinus Torvalds 	struct lo_read_data cookie;
435fd582140SJens Axboe 	struct splice_desc sd;
4361da177e4SLinus Torvalds 	struct file *file;
437fd582140SJens Axboe 	long retval;
4381da177e4SLinus Torvalds 
4391da177e4SLinus Torvalds 	cookie.lo = lo;
4401da177e4SLinus Torvalds 	cookie.page = bvec->bv_page;
4411da177e4SLinus Torvalds 	cookie.offset = bvec->bv_offset;
4421da177e4SLinus Torvalds 	cookie.bsize = bsize;
443fd582140SJens Axboe 
444fd582140SJens Axboe 	sd.len = 0;
445fd582140SJens Axboe 	sd.total_len = bvec->bv_len;
446fd582140SJens Axboe 	sd.flags = 0;
447fd582140SJens Axboe 	sd.pos = pos;
448fd582140SJens Axboe 	sd.u.data = &cookie;
449fd582140SJens Axboe 
4501da177e4SLinus Torvalds 	file = lo->lo_backing_file;
451fd582140SJens Axboe 	retval = splice_direct_to_actor(file, &sd, lo_direct_splice_actor);
452fd582140SJens Axboe 
453fd582140SJens Axboe 	if (retval < 0)
454fd582140SJens Axboe 		return retval;
455fd582140SJens Axboe 
456fd582140SJens Axboe 	return 0;
4571da177e4SLinus Torvalds }
4581da177e4SLinus Torvalds 
4591da177e4SLinus Torvalds static int
4601da177e4SLinus Torvalds lo_receive(struct loop_device *lo, struct bio *bio, int bsize, loff_t pos)
4611da177e4SLinus Torvalds {
4621da177e4SLinus Torvalds 	struct bio_vec *bvec;
4631da177e4SLinus Torvalds 	int i, ret = 0;
4641da177e4SLinus Torvalds 
4651da177e4SLinus Torvalds 	bio_for_each_segment(bvec, bio, i) {
4661da177e4SLinus Torvalds 		ret = do_lo_receive(lo, bvec, bsize, pos);
4671da177e4SLinus Torvalds 		if (ret < 0)
4681da177e4SLinus Torvalds 			break;
4691da177e4SLinus Torvalds 		pos += bvec->bv_len;
4701da177e4SLinus Torvalds 	}
4711da177e4SLinus Torvalds 	return ret;
4721da177e4SLinus Torvalds }
4731da177e4SLinus Torvalds 
4741da177e4SLinus Torvalds static int do_bio_filebacked(struct loop_device *lo, struct bio *bio)
4751da177e4SLinus Torvalds {
4761da177e4SLinus Torvalds 	loff_t pos;
4771da177e4SLinus Torvalds 	int ret;
4781da177e4SLinus Torvalds 
4791da177e4SLinus Torvalds 	pos = ((loff_t) bio->bi_sector << 9) + lo->lo_offset;
4801da177e4SLinus Torvalds 	if (bio_rw(bio) == WRITE)
4811da177e4SLinus Torvalds 		ret = lo_send(lo, bio, lo->lo_blocksize, pos);
4821da177e4SLinus Torvalds 	else
4831da177e4SLinus Torvalds 		ret = lo_receive(lo, bio, lo->lo_blocksize, pos);
4841da177e4SLinus Torvalds 	return ret;
4851da177e4SLinus Torvalds }
4861da177e4SLinus Torvalds 
4871da177e4SLinus Torvalds /*
4881da177e4SLinus Torvalds  * Add bio to back of pending list
4891da177e4SLinus Torvalds  */
4901da177e4SLinus Torvalds static void loop_add_bio(struct loop_device *lo, struct bio *bio)
4911da177e4SLinus Torvalds {
4921da177e4SLinus Torvalds 	if (lo->lo_biotail) {
4931da177e4SLinus Torvalds 		lo->lo_biotail->bi_next = bio;
4941da177e4SLinus Torvalds 		lo->lo_biotail = bio;
4951da177e4SLinus Torvalds 	} else
4961da177e4SLinus Torvalds 		lo->lo_bio = lo->lo_biotail = bio;
4971da177e4SLinus Torvalds }
4981da177e4SLinus Torvalds 
4991da177e4SLinus Torvalds /*
5001da177e4SLinus Torvalds  * Grab first pending buffer
5011da177e4SLinus Torvalds  */
5021da177e4SLinus Torvalds static struct bio *loop_get_bio(struct loop_device *lo)
5031da177e4SLinus Torvalds {
5041da177e4SLinus Torvalds 	struct bio *bio;
5051da177e4SLinus Torvalds 
5061da177e4SLinus Torvalds 	if ((bio = lo->lo_bio)) {
5071da177e4SLinus Torvalds 		if (bio == lo->lo_biotail)
5081da177e4SLinus Torvalds 			lo->lo_biotail = NULL;
5091da177e4SLinus Torvalds 		lo->lo_bio = bio->bi_next;
5101da177e4SLinus Torvalds 		bio->bi_next = NULL;
5111da177e4SLinus Torvalds 	}
5121da177e4SLinus Torvalds 
5131da177e4SLinus Torvalds 	return bio;
5141da177e4SLinus Torvalds }
5151da177e4SLinus Torvalds 
516165125e1SJens Axboe static int loop_make_request(struct request_queue *q, struct bio *old_bio)
5171da177e4SLinus Torvalds {
5181da177e4SLinus Torvalds 	struct loop_device *lo = q->queuedata;
5191da177e4SLinus Torvalds 	int rw = bio_rw(old_bio);
5201da177e4SLinus Torvalds 
52135a82d1aSNick Piggin 	if (rw == READA)
52235a82d1aSNick Piggin 		rw = READ;
52335a82d1aSNick Piggin 
52435a82d1aSNick Piggin 	BUG_ON(!lo || (rw != READ && rw != WRITE));
5251da177e4SLinus Torvalds 
5261da177e4SLinus Torvalds 	spin_lock_irq(&lo->lo_lock);
5271da177e4SLinus Torvalds 	if (lo->lo_state != Lo_bound)
52835a82d1aSNick Piggin 		goto out;
52935a82d1aSNick Piggin 	if (unlikely(rw == WRITE && (lo->lo_flags & LO_FLAGS_READ_ONLY)))
53035a82d1aSNick Piggin 		goto out;
5311da177e4SLinus Torvalds 	loop_add_bio(lo, old_bio);
5326c997918SSerge E. Hallyn 	wake_up(&lo->lo_event);
53335a82d1aSNick Piggin 	spin_unlock_irq(&lo->lo_lock);
53435a82d1aSNick Piggin 	return 0;
53535a82d1aSNick Piggin 
5361da177e4SLinus Torvalds out:
53735a82d1aSNick Piggin 	spin_unlock_irq(&lo->lo_lock);
5386712ecf8SNeilBrown 	bio_io_error(old_bio);
5391da177e4SLinus Torvalds 	return 0;
5401da177e4SLinus Torvalds }
5411da177e4SLinus Torvalds 
5421da177e4SLinus Torvalds /*
5431da177e4SLinus Torvalds  * kick off io on the underlying address space
5441da177e4SLinus Torvalds  */
545165125e1SJens Axboe static void loop_unplug(struct request_queue *q)
5461da177e4SLinus Torvalds {
5471da177e4SLinus Torvalds 	struct loop_device *lo = q->queuedata;
5481da177e4SLinus Torvalds 
5491da177e4SLinus Torvalds 	clear_bit(QUEUE_FLAG_PLUGGED, &q->queue_flags);
5501da177e4SLinus Torvalds 	blk_run_address_space(lo->lo_backing_file->f_mapping);
5511da177e4SLinus Torvalds }
5521da177e4SLinus Torvalds 
5531da177e4SLinus Torvalds struct switch_request {
5541da177e4SLinus Torvalds 	struct file *file;
5551da177e4SLinus Torvalds 	struct completion wait;
5561da177e4SLinus Torvalds };
5571da177e4SLinus Torvalds 
5581da177e4SLinus Torvalds static void do_loop_switch(struct loop_device *, struct switch_request *);
5591da177e4SLinus Torvalds 
5601da177e4SLinus Torvalds static inline void loop_handle_bio(struct loop_device *lo, struct bio *bio)
5611da177e4SLinus Torvalds {
5621da177e4SLinus Torvalds 	if (unlikely(!bio->bi_bdev)) {
5631da177e4SLinus Torvalds 		do_loop_switch(lo, bio->bi_private);
5641da177e4SLinus Torvalds 		bio_put(bio);
5651da177e4SLinus Torvalds 	} else {
56635a82d1aSNick Piggin 		int ret = do_bio_filebacked(lo, bio);
5676712ecf8SNeilBrown 		bio_endio(bio, ret);
5681da177e4SLinus Torvalds 	}
5691da177e4SLinus Torvalds }
5701da177e4SLinus Torvalds 
5711da177e4SLinus Torvalds /*
5721da177e4SLinus Torvalds  * worker thread that handles reads/writes to file backed loop devices,
5731da177e4SLinus Torvalds  * to avoid blocking in our make_request_fn. it also does loop decrypting
5741da177e4SLinus Torvalds  * on reads for block backed loop, as that is too heavy to do from
5751da177e4SLinus Torvalds  * b_end_io context where irqs may be disabled.
5766c997918SSerge E. Hallyn  *
5776c997918SSerge E. Hallyn  * Loop explanation:  loop_clr_fd() sets lo_state to Lo_rundown before
5786c997918SSerge E. Hallyn  * calling kthread_stop().  Therefore once kthread_should_stop() is
5796c997918SSerge E. Hallyn  * true, make_request will not place any more requests.  Therefore
5806c997918SSerge E. Hallyn  * once kthread_should_stop() is true and lo_bio is NULL, we are
5816c997918SSerge E. Hallyn  * done with the loop.
5821da177e4SLinus Torvalds  */
5831da177e4SLinus Torvalds static int loop_thread(void *data)
5841da177e4SLinus Torvalds {
5851da177e4SLinus Torvalds 	struct loop_device *lo = data;
5861da177e4SLinus Torvalds 	struct bio *bio;
5871da177e4SLinus Torvalds 
5881da177e4SLinus Torvalds 	set_user_nice(current, -20);
5891da177e4SLinus Torvalds 
5906c997918SSerge E. Hallyn 	while (!kthread_should_stop() || lo->lo_bio) {
5911da177e4SLinus Torvalds 
5926c997918SSerge E. Hallyn 		wait_event_interruptible(lo->lo_event,
5936c997918SSerge E. Hallyn 				lo->lo_bio || kthread_should_stop());
59409c0dc68SLinus Torvalds 
5956c997918SSerge E. Hallyn 		if (!lo->lo_bio)
59635a82d1aSNick Piggin 			continue;
59735a82d1aSNick Piggin 		spin_lock_irq(&lo->lo_lock);
5981da177e4SLinus Torvalds 		bio = loop_get_bio(lo);
59935a82d1aSNick Piggin 		spin_unlock_irq(&lo->lo_lock);
60035a82d1aSNick Piggin 
60135a82d1aSNick Piggin 		BUG_ON(!bio);
6021da177e4SLinus Torvalds 		loop_handle_bio(lo, bio);
6031da177e4SLinus Torvalds 	}
6041da177e4SLinus Torvalds 
6051da177e4SLinus Torvalds 	return 0;
6061da177e4SLinus Torvalds }
6071da177e4SLinus Torvalds 
6081da177e4SLinus Torvalds /*
6091da177e4SLinus Torvalds  * loop_switch performs the hard work of switching a backing store.
6101da177e4SLinus Torvalds  * First it needs to flush existing IO, it does this by sending a magic
6111da177e4SLinus Torvalds  * BIO down the pipe. The completion of this BIO does the actual switch.
6121da177e4SLinus Torvalds  */
6131da177e4SLinus Torvalds static int loop_switch(struct loop_device *lo, struct file *file)
6141da177e4SLinus Torvalds {
6151da177e4SLinus Torvalds 	struct switch_request w;
616a24eab1eSJens Axboe 	struct bio *bio = bio_alloc(GFP_KERNEL, 0);
6171da177e4SLinus Torvalds 	if (!bio)
6181da177e4SLinus Torvalds 		return -ENOMEM;
6191da177e4SLinus Torvalds 	init_completion(&w.wait);
6201da177e4SLinus Torvalds 	w.file = file;
6211da177e4SLinus Torvalds 	bio->bi_private = &w;
6221da177e4SLinus Torvalds 	bio->bi_bdev = NULL;
6231da177e4SLinus Torvalds 	loop_make_request(lo->lo_queue, bio);
6241da177e4SLinus Torvalds 	wait_for_completion(&w.wait);
6251da177e4SLinus Torvalds 	return 0;
6261da177e4SLinus Torvalds }
6271da177e4SLinus Torvalds 
6281da177e4SLinus Torvalds /*
6291da177e4SLinus Torvalds  * Do the actual switch; called from the BIO completion routine
6301da177e4SLinus Torvalds  */
6311da177e4SLinus Torvalds static void do_loop_switch(struct loop_device *lo, struct switch_request *p)
6321da177e4SLinus Torvalds {
6331da177e4SLinus Torvalds 	struct file *file = p->file;
6341da177e4SLinus Torvalds 	struct file *old_file = lo->lo_backing_file;
6351da177e4SLinus Torvalds 	struct address_space *mapping = file->f_mapping;
6361da177e4SLinus Torvalds 
6371da177e4SLinus Torvalds 	mapping_set_gfp_mask(old_file->f_mapping, lo->old_gfp_mask);
6381da177e4SLinus Torvalds 	lo->lo_backing_file = file;
639ba52de12STheodore Ts'o 	lo->lo_blocksize = S_ISBLK(mapping->host->i_mode) ?
640ba52de12STheodore Ts'o 		mapping->host->i_bdev->bd_block_size : PAGE_SIZE;
6411da177e4SLinus Torvalds 	lo->old_gfp_mask = mapping_gfp_mask(mapping);
6421da177e4SLinus Torvalds 	mapping_set_gfp_mask(mapping, lo->old_gfp_mask & ~(__GFP_IO|__GFP_FS));
6431da177e4SLinus Torvalds 	complete(&p->wait);
6441da177e4SLinus Torvalds }
6451da177e4SLinus Torvalds 
6461da177e4SLinus Torvalds 
6471da177e4SLinus Torvalds /*
6481da177e4SLinus Torvalds  * loop_change_fd switched the backing store of a loopback device to
6491da177e4SLinus Torvalds  * a new file. This is useful for operating system installers to free up
6501da177e4SLinus Torvalds  * the original file and in High Availability environments to switch to
6511da177e4SLinus Torvalds  * an alternative location for the content in case of server meltdown.
6521da177e4SLinus Torvalds  * This can only work if the loop device is used read-only, and if the
6531da177e4SLinus Torvalds  * new backing store is the same size and type as the old backing store.
6541da177e4SLinus Torvalds  */
6551da177e4SLinus Torvalds static int loop_change_fd(struct loop_device *lo, struct file *lo_file,
6561da177e4SLinus Torvalds 		       struct block_device *bdev, unsigned int arg)
6571da177e4SLinus Torvalds {
6581da177e4SLinus Torvalds 	struct file	*file, *old_file;
6591da177e4SLinus Torvalds 	struct inode	*inode;
6601da177e4SLinus Torvalds 	int		error;
6611da177e4SLinus Torvalds 
6621da177e4SLinus Torvalds 	error = -ENXIO;
6631da177e4SLinus Torvalds 	if (lo->lo_state != Lo_bound)
6641da177e4SLinus Torvalds 		goto out;
6651da177e4SLinus Torvalds 
6661da177e4SLinus Torvalds 	/* the loop device has to be read-only */
6671da177e4SLinus Torvalds 	error = -EINVAL;
6681da177e4SLinus Torvalds 	if (!(lo->lo_flags & LO_FLAGS_READ_ONLY))
6691da177e4SLinus Torvalds 		goto out;
6701da177e4SLinus Torvalds 
6711da177e4SLinus Torvalds 	error = -EBADF;
6721da177e4SLinus Torvalds 	file = fget(arg);
6731da177e4SLinus Torvalds 	if (!file)
6741da177e4SLinus Torvalds 		goto out;
6751da177e4SLinus Torvalds 
6761da177e4SLinus Torvalds 	inode = file->f_mapping->host;
6771da177e4SLinus Torvalds 	old_file = lo->lo_backing_file;
6781da177e4SLinus Torvalds 
6791da177e4SLinus Torvalds 	error = -EINVAL;
6801da177e4SLinus Torvalds 
6811da177e4SLinus Torvalds 	if (!S_ISREG(inode->i_mode) && !S_ISBLK(inode->i_mode))
6821da177e4SLinus Torvalds 		goto out_putf;
6831da177e4SLinus Torvalds 
684fd582140SJens Axboe 	/* new backing store needs to support loop (eg splice_read) */
685fd582140SJens Axboe 	if (!inode->i_fop->splice_read)
6861da177e4SLinus Torvalds 		goto out_putf;
6871da177e4SLinus Torvalds 
6881da177e4SLinus Torvalds 	/* size of the new backing store needs to be the same */
6891da177e4SLinus Torvalds 	if (get_loop_size(lo, file) != get_loop_size(lo, old_file))
6901da177e4SLinus Torvalds 		goto out_putf;
6911da177e4SLinus Torvalds 
6921da177e4SLinus Torvalds 	/* and ... switch */
6931da177e4SLinus Torvalds 	error = loop_switch(lo, file);
6941da177e4SLinus Torvalds 	if (error)
6951da177e4SLinus Torvalds 		goto out_putf;
6961da177e4SLinus Torvalds 
6971da177e4SLinus Torvalds 	fput(old_file);
698476a4813SLaurent Vivier 	if (max_part > 0)
699476a4813SLaurent Vivier 		ioctl_by_bdev(bdev, BLKRRPART, 0);
7001da177e4SLinus Torvalds 	return 0;
7011da177e4SLinus Torvalds 
7021da177e4SLinus Torvalds  out_putf:
7031da177e4SLinus Torvalds 	fput(file);
7041da177e4SLinus Torvalds  out:
7051da177e4SLinus Torvalds 	return error;
7061da177e4SLinus Torvalds }
7071da177e4SLinus Torvalds 
7081da177e4SLinus Torvalds static inline int is_loop_device(struct file *file)
7091da177e4SLinus Torvalds {
7101da177e4SLinus Torvalds 	struct inode *i = file->f_mapping->host;
7111da177e4SLinus Torvalds 
7121da177e4SLinus Torvalds 	return i && S_ISBLK(i->i_mode) && MAJOR(i->i_rdev) == LOOP_MAJOR;
7131da177e4SLinus Torvalds }
7141da177e4SLinus Torvalds 
7151da177e4SLinus Torvalds static int loop_set_fd(struct loop_device *lo, struct file *lo_file,
7161da177e4SLinus Torvalds 		       struct block_device *bdev, unsigned int arg)
7171da177e4SLinus Torvalds {
7181da177e4SLinus Torvalds 	struct file	*file, *f;
7191da177e4SLinus Torvalds 	struct inode	*inode;
7201da177e4SLinus Torvalds 	struct address_space *mapping;
7211da177e4SLinus Torvalds 	unsigned lo_blocksize;
7221da177e4SLinus Torvalds 	int		lo_flags = 0;
7231da177e4SLinus Torvalds 	int		error;
7241da177e4SLinus Torvalds 	loff_t		size;
7251da177e4SLinus Torvalds 
7261da177e4SLinus Torvalds 	/* This is safe, since we have a reference from open(). */
7271da177e4SLinus Torvalds 	__module_get(THIS_MODULE);
7281da177e4SLinus Torvalds 
7291da177e4SLinus Torvalds 	error = -EBADF;
7301da177e4SLinus Torvalds 	file = fget(arg);
7311da177e4SLinus Torvalds 	if (!file)
7321da177e4SLinus Torvalds 		goto out;
7331da177e4SLinus Torvalds 
7341da177e4SLinus Torvalds 	error = -EBUSY;
7351da177e4SLinus Torvalds 	if (lo->lo_state != Lo_unbound)
7361da177e4SLinus Torvalds 		goto out_putf;
7371da177e4SLinus Torvalds 
7381da177e4SLinus Torvalds 	/* Avoid recursion */
7391da177e4SLinus Torvalds 	f = file;
7401da177e4SLinus Torvalds 	while (is_loop_device(f)) {
7411da177e4SLinus Torvalds 		struct loop_device *l;
7421da177e4SLinus Torvalds 
7431da177e4SLinus Torvalds 		if (f->f_mapping->host->i_rdev == lo_file->f_mapping->host->i_rdev)
7441da177e4SLinus Torvalds 			goto out_putf;
7451da177e4SLinus Torvalds 
7461da177e4SLinus Torvalds 		l = f->f_mapping->host->i_bdev->bd_disk->private_data;
7471da177e4SLinus Torvalds 		if (l->lo_state == Lo_unbound) {
7481da177e4SLinus Torvalds 			error = -EINVAL;
7491da177e4SLinus Torvalds 			goto out_putf;
7501da177e4SLinus Torvalds 		}
7511da177e4SLinus Torvalds 		f = l->lo_backing_file;
7521da177e4SLinus Torvalds 	}
7531da177e4SLinus Torvalds 
7541da177e4SLinus Torvalds 	mapping = file->f_mapping;
7551da177e4SLinus Torvalds 	inode = mapping->host;
7561da177e4SLinus Torvalds 
7571da177e4SLinus Torvalds 	if (!(file->f_mode & FMODE_WRITE))
7581da177e4SLinus Torvalds 		lo_flags |= LO_FLAGS_READ_ONLY;
7591da177e4SLinus Torvalds 
7601da177e4SLinus Torvalds 	error = -EINVAL;
7611da177e4SLinus Torvalds 	if (S_ISREG(inode->i_mode) || S_ISBLK(inode->i_mode)) {
762f5e54d6eSChristoph Hellwig 		const struct address_space_operations *aops = mapping->a_ops;
7631da177e4SLinus Torvalds 		/*
7641da177e4SLinus Torvalds 		 * If we can't read - sorry. If we only can't write - well,
7651da177e4SLinus Torvalds 		 * it's going to be read-only.
7661da177e4SLinus Torvalds 		 */
767fd582140SJens Axboe 		if (!file->f_op->splice_read)
7681da177e4SLinus Torvalds 			goto out_putf;
769afddba49SNick Piggin 		if (aops->prepare_write || aops->write_begin)
7701da177e4SLinus Torvalds 			lo_flags |= LO_FLAGS_USE_AOPS;
7711da177e4SLinus Torvalds 		if (!(lo_flags & LO_FLAGS_USE_AOPS) && !file->f_op->write)
7721da177e4SLinus Torvalds 			lo_flags |= LO_FLAGS_READ_ONLY;
7731da177e4SLinus Torvalds 
774ba52de12STheodore Ts'o 		lo_blocksize = S_ISBLK(inode->i_mode) ?
775ba52de12STheodore Ts'o 			inode->i_bdev->bd_block_size : PAGE_SIZE;
776ba52de12STheodore Ts'o 
7771da177e4SLinus Torvalds 		error = 0;
7781da177e4SLinus Torvalds 	} else {
7791da177e4SLinus Torvalds 		goto out_putf;
7801da177e4SLinus Torvalds 	}
7811da177e4SLinus Torvalds 
7821da177e4SLinus Torvalds 	size = get_loop_size(lo, file);
7831da177e4SLinus Torvalds 
7841da177e4SLinus Torvalds 	if ((loff_t)(sector_t)size != size) {
7851da177e4SLinus Torvalds 		error = -EFBIG;
7861da177e4SLinus Torvalds 		goto out_putf;
7871da177e4SLinus Torvalds 	}
7881da177e4SLinus Torvalds 
7891da177e4SLinus Torvalds 	if (!(lo_file->f_mode & FMODE_WRITE))
7901da177e4SLinus Torvalds 		lo_flags |= LO_FLAGS_READ_ONLY;
7911da177e4SLinus Torvalds 
7921da177e4SLinus Torvalds 	set_device_ro(bdev, (lo_flags & LO_FLAGS_READ_ONLY) != 0);
7931da177e4SLinus Torvalds 
7941da177e4SLinus Torvalds 	lo->lo_blocksize = lo_blocksize;
7951da177e4SLinus Torvalds 	lo->lo_device = bdev;
7961da177e4SLinus Torvalds 	lo->lo_flags = lo_flags;
7971da177e4SLinus Torvalds 	lo->lo_backing_file = file;
798eefe85eeSConstantine Sapuntzakis 	lo->transfer = transfer_none;
7991da177e4SLinus Torvalds 	lo->ioctl = NULL;
8001da177e4SLinus Torvalds 	lo->lo_sizelimit = 0;
8011da177e4SLinus Torvalds 	lo->old_gfp_mask = mapping_gfp_mask(mapping);
8021da177e4SLinus Torvalds 	mapping_set_gfp_mask(mapping, lo->old_gfp_mask & ~(__GFP_IO|__GFP_FS));
8031da177e4SLinus Torvalds 
8041da177e4SLinus Torvalds 	lo->lo_bio = lo->lo_biotail = NULL;
8051da177e4SLinus Torvalds 
8061da177e4SLinus Torvalds 	/*
8071da177e4SLinus Torvalds 	 * set queue make_request_fn, and add limits based on lower level
8081da177e4SLinus Torvalds 	 * device
8091da177e4SLinus Torvalds 	 */
8101da177e4SLinus Torvalds 	blk_queue_make_request(lo->lo_queue, loop_make_request);
8111da177e4SLinus Torvalds 	lo->lo_queue->queuedata = lo;
8121da177e4SLinus Torvalds 	lo->lo_queue->unplug_fn = loop_unplug;
8131da177e4SLinus Torvalds 
81473285082SKen Chen 	set_capacity(lo->lo_disk, size);
8151da177e4SLinus Torvalds 	bd_set_size(bdev, size << 9);
8161da177e4SLinus Torvalds 
8171da177e4SLinus Torvalds 	set_blocksize(bdev, lo_blocksize);
8181da177e4SLinus Torvalds 
8196c997918SSerge E. Hallyn 	lo->lo_thread = kthread_create(loop_thread, lo, "loop%d",
8206c997918SSerge E. Hallyn 						lo->lo_number);
8216c997918SSerge E. Hallyn 	if (IS_ERR(lo->lo_thread)) {
8226c997918SSerge E. Hallyn 		error = PTR_ERR(lo->lo_thread);
823a7422bf8SSerge E. Hallyn 		goto out_clr;
8246c997918SSerge E. Hallyn 	}
8256c997918SSerge E. Hallyn 	lo->lo_state = Lo_bound;
8266c997918SSerge E. Hallyn 	wake_up_process(lo->lo_thread);
827476a4813SLaurent Vivier 	if (max_part > 0)
828476a4813SLaurent Vivier 		ioctl_by_bdev(bdev, BLKRRPART, 0);
8291da177e4SLinus Torvalds 	return 0;
8301da177e4SLinus Torvalds 
831a7422bf8SSerge E. Hallyn out_clr:
832a7422bf8SSerge E. Hallyn 	lo->lo_thread = NULL;
833a7422bf8SSerge E. Hallyn 	lo->lo_device = NULL;
834a7422bf8SSerge E. Hallyn 	lo->lo_backing_file = NULL;
835a7422bf8SSerge E. Hallyn 	lo->lo_flags = 0;
83673285082SKen Chen 	set_capacity(lo->lo_disk, 0);
837f98393a6SPeter Zijlstra 	invalidate_bdev(bdev);
838a7422bf8SSerge E. Hallyn 	bd_set_size(bdev, 0);
839a7422bf8SSerge E. Hallyn 	mapping_set_gfp_mask(mapping, lo->old_gfp_mask);
840a7422bf8SSerge E. Hallyn 	lo->lo_state = Lo_unbound;
8411da177e4SLinus Torvalds  out_putf:
8421da177e4SLinus Torvalds 	fput(file);
8431da177e4SLinus Torvalds  out:
8441da177e4SLinus Torvalds 	/* This is safe: open() is still holding a reference. */
8451da177e4SLinus Torvalds 	module_put(THIS_MODULE);
8461da177e4SLinus Torvalds 	return error;
8471da177e4SLinus Torvalds }
8481da177e4SLinus Torvalds 
8491da177e4SLinus Torvalds static int
8501da177e4SLinus Torvalds loop_release_xfer(struct loop_device *lo)
8511da177e4SLinus Torvalds {
8521da177e4SLinus Torvalds 	int err = 0;
8531da177e4SLinus Torvalds 	struct loop_func_table *xfer = lo->lo_encryption;
8541da177e4SLinus Torvalds 
8551da177e4SLinus Torvalds 	if (xfer) {
8561da177e4SLinus Torvalds 		if (xfer->release)
8571da177e4SLinus Torvalds 			err = xfer->release(lo);
8581da177e4SLinus Torvalds 		lo->transfer = NULL;
8591da177e4SLinus Torvalds 		lo->lo_encryption = NULL;
8601da177e4SLinus Torvalds 		module_put(xfer->owner);
8611da177e4SLinus Torvalds 	}
8621da177e4SLinus Torvalds 	return err;
8631da177e4SLinus Torvalds }
8641da177e4SLinus Torvalds 
8651da177e4SLinus Torvalds static int
8661da177e4SLinus Torvalds loop_init_xfer(struct loop_device *lo, struct loop_func_table *xfer,
8671da177e4SLinus Torvalds 	       const struct loop_info64 *i)
8681da177e4SLinus Torvalds {
8691da177e4SLinus Torvalds 	int err = 0;
8701da177e4SLinus Torvalds 
8711da177e4SLinus Torvalds 	if (xfer) {
8721da177e4SLinus Torvalds 		struct module *owner = xfer->owner;
8731da177e4SLinus Torvalds 
8741da177e4SLinus Torvalds 		if (!try_module_get(owner))
8751da177e4SLinus Torvalds 			return -EINVAL;
8761da177e4SLinus Torvalds 		if (xfer->init)
8771da177e4SLinus Torvalds 			err = xfer->init(lo, i);
8781da177e4SLinus Torvalds 		if (err)
8791da177e4SLinus Torvalds 			module_put(owner);
8801da177e4SLinus Torvalds 		else
8811da177e4SLinus Torvalds 			lo->lo_encryption = xfer;
8821da177e4SLinus Torvalds 	}
8831da177e4SLinus Torvalds 	return err;
8841da177e4SLinus Torvalds }
8851da177e4SLinus Torvalds 
8861da177e4SLinus Torvalds static int loop_clr_fd(struct loop_device *lo, struct block_device *bdev)
8871da177e4SLinus Torvalds {
8881da177e4SLinus Torvalds 	struct file *filp = lo->lo_backing_file;
889b4e3ca1aSAl Viro 	gfp_t gfp = lo->old_gfp_mask;
8901da177e4SLinus Torvalds 
8911da177e4SLinus Torvalds 	if (lo->lo_state != Lo_bound)
8921da177e4SLinus Torvalds 		return -ENXIO;
8931da177e4SLinus Torvalds 
8941da177e4SLinus Torvalds 	if (lo->lo_refcnt > 1)	/* we needed one fd for the ioctl */
8951da177e4SLinus Torvalds 		return -EBUSY;
8961da177e4SLinus Torvalds 
8971da177e4SLinus Torvalds 	if (filp == NULL)
8981da177e4SLinus Torvalds 		return -EINVAL;
8991da177e4SLinus Torvalds 
9001da177e4SLinus Torvalds 	spin_lock_irq(&lo->lo_lock);
9011da177e4SLinus Torvalds 	lo->lo_state = Lo_rundown;
9021da177e4SLinus Torvalds 	spin_unlock_irq(&lo->lo_lock);
9031da177e4SLinus Torvalds 
9046c997918SSerge E. Hallyn 	kthread_stop(lo->lo_thread);
9051da177e4SLinus Torvalds 
9061da177e4SLinus Torvalds 	lo->lo_backing_file = NULL;
9071da177e4SLinus Torvalds 
9081da177e4SLinus Torvalds 	loop_release_xfer(lo);
9091da177e4SLinus Torvalds 	lo->transfer = NULL;
9101da177e4SLinus Torvalds 	lo->ioctl = NULL;
9111da177e4SLinus Torvalds 	lo->lo_device = NULL;
9121da177e4SLinus Torvalds 	lo->lo_encryption = NULL;
9131da177e4SLinus Torvalds 	lo->lo_offset = 0;
9141da177e4SLinus Torvalds 	lo->lo_sizelimit = 0;
9151da177e4SLinus Torvalds 	lo->lo_encrypt_key_size = 0;
9161da177e4SLinus Torvalds 	lo->lo_flags = 0;
9176c997918SSerge E. Hallyn 	lo->lo_thread = NULL;
9181da177e4SLinus Torvalds 	memset(lo->lo_encrypt_key, 0, LO_KEY_SIZE);
9191da177e4SLinus Torvalds 	memset(lo->lo_crypt_name, 0, LO_NAME_SIZE);
9201da177e4SLinus Torvalds 	memset(lo->lo_file_name, 0, LO_NAME_SIZE);
921f98393a6SPeter Zijlstra 	invalidate_bdev(bdev);
92273285082SKen Chen 	set_capacity(lo->lo_disk, 0);
9231da177e4SLinus Torvalds 	bd_set_size(bdev, 0);
9241da177e4SLinus Torvalds 	mapping_set_gfp_mask(filp->f_mapping, gfp);
9251da177e4SLinus Torvalds 	lo->lo_state = Lo_unbound;
9261da177e4SLinus Torvalds 	fput(filp);
9271da177e4SLinus Torvalds 	/* This is safe: open() is still holding a reference. */
9281da177e4SLinus Torvalds 	module_put(THIS_MODULE);
929476a4813SLaurent Vivier 	if (max_part > 0)
930476a4813SLaurent Vivier 		ioctl_by_bdev(bdev, BLKRRPART, 0);
9311da177e4SLinus Torvalds 	return 0;
9321da177e4SLinus Torvalds }
9331da177e4SLinus Torvalds 
9341da177e4SLinus Torvalds static int
9351da177e4SLinus Torvalds loop_set_status(struct loop_device *lo, const struct loop_info64 *info)
9361da177e4SLinus Torvalds {
9371da177e4SLinus Torvalds 	int err;
9381da177e4SLinus Torvalds 	struct loop_func_table *xfer;
9391da177e4SLinus Torvalds 
9401da177e4SLinus Torvalds 	if (lo->lo_encrypt_key_size && lo->lo_key_owner != current->uid &&
9411da177e4SLinus Torvalds 	    !capable(CAP_SYS_ADMIN))
9421da177e4SLinus Torvalds 		return -EPERM;
9431da177e4SLinus Torvalds 	if (lo->lo_state != Lo_bound)
9441da177e4SLinus Torvalds 		return -ENXIO;
9451da177e4SLinus Torvalds 	if ((unsigned int) info->lo_encrypt_key_size > LO_KEY_SIZE)
9461da177e4SLinus Torvalds 		return -EINVAL;
9471da177e4SLinus Torvalds 
9481da177e4SLinus Torvalds 	err = loop_release_xfer(lo);
9491da177e4SLinus Torvalds 	if (err)
9501da177e4SLinus Torvalds 		return err;
9511da177e4SLinus Torvalds 
9521da177e4SLinus Torvalds 	if (info->lo_encrypt_type) {
9531da177e4SLinus Torvalds 		unsigned int type = info->lo_encrypt_type;
9541da177e4SLinus Torvalds 
9551da177e4SLinus Torvalds 		if (type >= MAX_LO_CRYPT)
9561da177e4SLinus Torvalds 			return -EINVAL;
9571da177e4SLinus Torvalds 		xfer = xfer_funcs[type];
9581da177e4SLinus Torvalds 		if (xfer == NULL)
9591da177e4SLinus Torvalds 			return -EINVAL;
9601da177e4SLinus Torvalds 	} else
9611da177e4SLinus Torvalds 		xfer = NULL;
9621da177e4SLinus Torvalds 
9631da177e4SLinus Torvalds 	err = loop_init_xfer(lo, xfer, info);
9641da177e4SLinus Torvalds 	if (err)
9651da177e4SLinus Torvalds 		return err;
9661da177e4SLinus Torvalds 
9671da177e4SLinus Torvalds 	if (lo->lo_offset != info->lo_offset ||
9681da177e4SLinus Torvalds 	    lo->lo_sizelimit != info->lo_sizelimit) {
9691da177e4SLinus Torvalds 		lo->lo_offset = info->lo_offset;
9701da177e4SLinus Torvalds 		lo->lo_sizelimit = info->lo_sizelimit;
9711da177e4SLinus Torvalds 		if (figure_loop_size(lo))
9721da177e4SLinus Torvalds 			return -EFBIG;
9731da177e4SLinus Torvalds 	}
9741da177e4SLinus Torvalds 
9751da177e4SLinus Torvalds 	memcpy(lo->lo_file_name, info->lo_file_name, LO_NAME_SIZE);
9761da177e4SLinus Torvalds 	memcpy(lo->lo_crypt_name, info->lo_crypt_name, LO_NAME_SIZE);
9771da177e4SLinus Torvalds 	lo->lo_file_name[LO_NAME_SIZE-1] = 0;
9781da177e4SLinus Torvalds 	lo->lo_crypt_name[LO_NAME_SIZE-1] = 0;
9791da177e4SLinus Torvalds 
9801da177e4SLinus Torvalds 	if (!xfer)
9811da177e4SLinus Torvalds 		xfer = &none_funcs;
9821da177e4SLinus Torvalds 	lo->transfer = xfer->transfer;
9831da177e4SLinus Torvalds 	lo->ioctl = xfer->ioctl;
9841da177e4SLinus Torvalds 
98596c58655SDavid Woodhouse 	if ((lo->lo_flags & LO_FLAGS_AUTOCLEAR) !=
98696c58655SDavid Woodhouse 	     (info->lo_flags & LO_FLAGS_AUTOCLEAR))
98796c58655SDavid Woodhouse 		lo->lo_flags ^= LO_FLAGS_AUTOCLEAR;
98896c58655SDavid Woodhouse 
9891da177e4SLinus Torvalds 	lo->lo_encrypt_key_size = info->lo_encrypt_key_size;
9901da177e4SLinus Torvalds 	lo->lo_init[0] = info->lo_init[0];
9911da177e4SLinus Torvalds 	lo->lo_init[1] = info->lo_init[1];
9921da177e4SLinus Torvalds 	if (info->lo_encrypt_key_size) {
9931da177e4SLinus Torvalds 		memcpy(lo->lo_encrypt_key, info->lo_encrypt_key,
9941da177e4SLinus Torvalds 		       info->lo_encrypt_key_size);
9951da177e4SLinus Torvalds 		lo->lo_key_owner = current->uid;
9961da177e4SLinus Torvalds 	}
9971da177e4SLinus Torvalds 
9981da177e4SLinus Torvalds 	return 0;
9991da177e4SLinus Torvalds }
10001da177e4SLinus Torvalds 
10011da177e4SLinus Torvalds static int
10021da177e4SLinus Torvalds loop_get_status(struct loop_device *lo, struct loop_info64 *info)
10031da177e4SLinus Torvalds {
10041da177e4SLinus Torvalds 	struct file *file = lo->lo_backing_file;
10051da177e4SLinus Torvalds 	struct kstat stat;
10061da177e4SLinus Torvalds 	int error;
10071da177e4SLinus Torvalds 
10081da177e4SLinus Torvalds 	if (lo->lo_state != Lo_bound)
10091da177e4SLinus Torvalds 		return -ENXIO;
10106c648be6SJosef Sipek 	error = vfs_getattr(file->f_path.mnt, file->f_path.dentry, &stat);
10111da177e4SLinus Torvalds 	if (error)
10121da177e4SLinus Torvalds 		return error;
10131da177e4SLinus Torvalds 	memset(info, 0, sizeof(*info));
10141da177e4SLinus Torvalds 	info->lo_number = lo->lo_number;
10151da177e4SLinus Torvalds 	info->lo_device = huge_encode_dev(stat.dev);
10161da177e4SLinus Torvalds 	info->lo_inode = stat.ino;
10171da177e4SLinus Torvalds 	info->lo_rdevice = huge_encode_dev(lo->lo_device ? stat.rdev : stat.dev);
10181da177e4SLinus Torvalds 	info->lo_offset = lo->lo_offset;
10191da177e4SLinus Torvalds 	info->lo_sizelimit = lo->lo_sizelimit;
10201da177e4SLinus Torvalds 	info->lo_flags = lo->lo_flags;
10211da177e4SLinus Torvalds 	memcpy(info->lo_file_name, lo->lo_file_name, LO_NAME_SIZE);
10221da177e4SLinus Torvalds 	memcpy(info->lo_crypt_name, lo->lo_crypt_name, LO_NAME_SIZE);
10231da177e4SLinus Torvalds 	info->lo_encrypt_type =
10241da177e4SLinus Torvalds 		lo->lo_encryption ? lo->lo_encryption->number : 0;
10251da177e4SLinus Torvalds 	if (lo->lo_encrypt_key_size && capable(CAP_SYS_ADMIN)) {
10261da177e4SLinus Torvalds 		info->lo_encrypt_key_size = lo->lo_encrypt_key_size;
10271da177e4SLinus Torvalds 		memcpy(info->lo_encrypt_key, lo->lo_encrypt_key,
10281da177e4SLinus Torvalds 		       lo->lo_encrypt_key_size);
10291da177e4SLinus Torvalds 	}
10301da177e4SLinus Torvalds 	return 0;
10311da177e4SLinus Torvalds }
10321da177e4SLinus Torvalds 
10331da177e4SLinus Torvalds static void
10341da177e4SLinus Torvalds loop_info64_from_old(const struct loop_info *info, struct loop_info64 *info64)
10351da177e4SLinus Torvalds {
10361da177e4SLinus Torvalds 	memset(info64, 0, sizeof(*info64));
10371da177e4SLinus Torvalds 	info64->lo_number = info->lo_number;
10381da177e4SLinus Torvalds 	info64->lo_device = info->lo_device;
10391da177e4SLinus Torvalds 	info64->lo_inode = info->lo_inode;
10401da177e4SLinus Torvalds 	info64->lo_rdevice = info->lo_rdevice;
10411da177e4SLinus Torvalds 	info64->lo_offset = info->lo_offset;
10421da177e4SLinus Torvalds 	info64->lo_sizelimit = 0;
10431da177e4SLinus Torvalds 	info64->lo_encrypt_type = info->lo_encrypt_type;
10441da177e4SLinus Torvalds 	info64->lo_encrypt_key_size = info->lo_encrypt_key_size;
10451da177e4SLinus Torvalds 	info64->lo_flags = info->lo_flags;
10461da177e4SLinus Torvalds 	info64->lo_init[0] = info->lo_init[0];
10471da177e4SLinus Torvalds 	info64->lo_init[1] = info->lo_init[1];
10481da177e4SLinus Torvalds 	if (info->lo_encrypt_type == LO_CRYPT_CRYPTOAPI)
10491da177e4SLinus Torvalds 		memcpy(info64->lo_crypt_name, info->lo_name, LO_NAME_SIZE);
10501da177e4SLinus Torvalds 	else
10511da177e4SLinus Torvalds 		memcpy(info64->lo_file_name, info->lo_name, LO_NAME_SIZE);
10521da177e4SLinus Torvalds 	memcpy(info64->lo_encrypt_key, info->lo_encrypt_key, LO_KEY_SIZE);
10531da177e4SLinus Torvalds }
10541da177e4SLinus Torvalds 
10551da177e4SLinus Torvalds static int
10561da177e4SLinus Torvalds loop_info64_to_old(const struct loop_info64 *info64, struct loop_info *info)
10571da177e4SLinus Torvalds {
10581da177e4SLinus Torvalds 	memset(info, 0, sizeof(*info));
10591da177e4SLinus Torvalds 	info->lo_number = info64->lo_number;
10601da177e4SLinus Torvalds 	info->lo_device = info64->lo_device;
10611da177e4SLinus Torvalds 	info->lo_inode = info64->lo_inode;
10621da177e4SLinus Torvalds 	info->lo_rdevice = info64->lo_rdevice;
10631da177e4SLinus Torvalds 	info->lo_offset = info64->lo_offset;
10641da177e4SLinus Torvalds 	info->lo_encrypt_type = info64->lo_encrypt_type;
10651da177e4SLinus Torvalds 	info->lo_encrypt_key_size = info64->lo_encrypt_key_size;
10661da177e4SLinus Torvalds 	info->lo_flags = info64->lo_flags;
10671da177e4SLinus Torvalds 	info->lo_init[0] = info64->lo_init[0];
10681da177e4SLinus Torvalds 	info->lo_init[1] = info64->lo_init[1];
10691da177e4SLinus Torvalds 	if (info->lo_encrypt_type == LO_CRYPT_CRYPTOAPI)
10701da177e4SLinus Torvalds 		memcpy(info->lo_name, info64->lo_crypt_name, LO_NAME_SIZE);
10711da177e4SLinus Torvalds 	else
10721da177e4SLinus Torvalds 		memcpy(info->lo_name, info64->lo_file_name, LO_NAME_SIZE);
10731da177e4SLinus Torvalds 	memcpy(info->lo_encrypt_key, info64->lo_encrypt_key, LO_KEY_SIZE);
10741da177e4SLinus Torvalds 
10751da177e4SLinus Torvalds 	/* error in case values were truncated */
10761da177e4SLinus Torvalds 	if (info->lo_device != info64->lo_device ||
10771da177e4SLinus Torvalds 	    info->lo_rdevice != info64->lo_rdevice ||
10781da177e4SLinus Torvalds 	    info->lo_inode != info64->lo_inode ||
10791da177e4SLinus Torvalds 	    info->lo_offset != info64->lo_offset)
10801da177e4SLinus Torvalds 		return -EOVERFLOW;
10811da177e4SLinus Torvalds 
10821da177e4SLinus Torvalds 	return 0;
10831da177e4SLinus Torvalds }
10841da177e4SLinus Torvalds 
10851da177e4SLinus Torvalds static int
10861da177e4SLinus Torvalds loop_set_status_old(struct loop_device *lo, const struct loop_info __user *arg)
10871da177e4SLinus Torvalds {
10881da177e4SLinus Torvalds 	struct loop_info info;
10891da177e4SLinus Torvalds 	struct loop_info64 info64;
10901da177e4SLinus Torvalds 
10911da177e4SLinus Torvalds 	if (copy_from_user(&info, arg, sizeof (struct loop_info)))
10921da177e4SLinus Torvalds 		return -EFAULT;
10931da177e4SLinus Torvalds 	loop_info64_from_old(&info, &info64);
10941da177e4SLinus Torvalds 	return loop_set_status(lo, &info64);
10951da177e4SLinus Torvalds }
10961da177e4SLinus Torvalds 
10971da177e4SLinus Torvalds static int
10981da177e4SLinus Torvalds loop_set_status64(struct loop_device *lo, const struct loop_info64 __user *arg)
10991da177e4SLinus Torvalds {
11001da177e4SLinus Torvalds 	struct loop_info64 info64;
11011da177e4SLinus Torvalds 
11021da177e4SLinus Torvalds 	if (copy_from_user(&info64, arg, sizeof (struct loop_info64)))
11031da177e4SLinus Torvalds 		return -EFAULT;
11041da177e4SLinus Torvalds 	return loop_set_status(lo, &info64);
11051da177e4SLinus Torvalds }
11061da177e4SLinus Torvalds 
11071da177e4SLinus Torvalds static int
11081da177e4SLinus Torvalds loop_get_status_old(struct loop_device *lo, struct loop_info __user *arg) {
11091da177e4SLinus Torvalds 	struct loop_info info;
11101da177e4SLinus Torvalds 	struct loop_info64 info64;
11111da177e4SLinus Torvalds 	int err = 0;
11121da177e4SLinus Torvalds 
11131da177e4SLinus Torvalds 	if (!arg)
11141da177e4SLinus Torvalds 		err = -EINVAL;
11151da177e4SLinus Torvalds 	if (!err)
11161da177e4SLinus Torvalds 		err = loop_get_status(lo, &info64);
11171da177e4SLinus Torvalds 	if (!err)
11181da177e4SLinus Torvalds 		err = loop_info64_to_old(&info64, &info);
11191da177e4SLinus Torvalds 	if (!err && copy_to_user(arg, &info, sizeof(info)))
11201da177e4SLinus Torvalds 		err = -EFAULT;
11211da177e4SLinus Torvalds 
11221da177e4SLinus Torvalds 	return err;
11231da177e4SLinus Torvalds }
11241da177e4SLinus Torvalds 
11251da177e4SLinus Torvalds static int
11261da177e4SLinus Torvalds loop_get_status64(struct loop_device *lo, struct loop_info64 __user *arg) {
11271da177e4SLinus Torvalds 	struct loop_info64 info64;
11281da177e4SLinus Torvalds 	int err = 0;
11291da177e4SLinus Torvalds 
11301da177e4SLinus Torvalds 	if (!arg)
11311da177e4SLinus Torvalds 		err = -EINVAL;
11321da177e4SLinus Torvalds 	if (!err)
11331da177e4SLinus Torvalds 		err = loop_get_status(lo, &info64);
11341da177e4SLinus Torvalds 	if (!err && copy_to_user(arg, &info64, sizeof(info64)))
11351da177e4SLinus Torvalds 		err = -EFAULT;
11361da177e4SLinus Torvalds 
11371da177e4SLinus Torvalds 	return err;
11381da177e4SLinus Torvalds }
11391da177e4SLinus Torvalds 
11401da177e4SLinus Torvalds static int lo_ioctl(struct inode * inode, struct file * file,
11411da177e4SLinus Torvalds 	unsigned int cmd, unsigned long arg)
11421da177e4SLinus Torvalds {
11431da177e4SLinus Torvalds 	struct loop_device *lo = inode->i_bdev->bd_disk->private_data;
11441da177e4SLinus Torvalds 	int err;
11451da177e4SLinus Torvalds 
1146f85221ddSIngo Molnar 	mutex_lock(&lo->lo_ctl_mutex);
11471da177e4SLinus Torvalds 	switch (cmd) {
11481da177e4SLinus Torvalds 	case LOOP_SET_FD:
11491da177e4SLinus Torvalds 		err = loop_set_fd(lo, file, inode->i_bdev, arg);
11501da177e4SLinus Torvalds 		break;
11511da177e4SLinus Torvalds 	case LOOP_CHANGE_FD:
11521da177e4SLinus Torvalds 		err = loop_change_fd(lo, file, inode->i_bdev, arg);
11531da177e4SLinus Torvalds 		break;
11541da177e4SLinus Torvalds 	case LOOP_CLR_FD:
11551da177e4SLinus Torvalds 		err = loop_clr_fd(lo, inode->i_bdev);
11561da177e4SLinus Torvalds 		break;
11571da177e4SLinus Torvalds 	case LOOP_SET_STATUS:
11581da177e4SLinus Torvalds 		err = loop_set_status_old(lo, (struct loop_info __user *) arg);
11591da177e4SLinus Torvalds 		break;
11601da177e4SLinus Torvalds 	case LOOP_GET_STATUS:
11611da177e4SLinus Torvalds 		err = loop_get_status_old(lo, (struct loop_info __user *) arg);
11621da177e4SLinus Torvalds 		break;
11631da177e4SLinus Torvalds 	case LOOP_SET_STATUS64:
11641da177e4SLinus Torvalds 		err = loop_set_status64(lo, (struct loop_info64 __user *) arg);
11651da177e4SLinus Torvalds 		break;
11661da177e4SLinus Torvalds 	case LOOP_GET_STATUS64:
11671da177e4SLinus Torvalds 		err = loop_get_status64(lo, (struct loop_info64 __user *) arg);
11681da177e4SLinus Torvalds 		break;
11691da177e4SLinus Torvalds 	default:
11701da177e4SLinus Torvalds 		err = lo->ioctl ? lo->ioctl(lo, cmd, arg) : -EINVAL;
11711da177e4SLinus Torvalds 	}
1172f85221ddSIngo Molnar 	mutex_unlock(&lo->lo_ctl_mutex);
11731da177e4SLinus Torvalds 	return err;
11741da177e4SLinus Torvalds }
11751da177e4SLinus Torvalds 
1176863d5b82SDavid Howells #ifdef CONFIG_COMPAT
1177863d5b82SDavid Howells struct compat_loop_info {
1178863d5b82SDavid Howells 	compat_int_t	lo_number;      /* ioctl r/o */
1179863d5b82SDavid Howells 	compat_dev_t	lo_device;      /* ioctl r/o */
1180863d5b82SDavid Howells 	compat_ulong_t	lo_inode;       /* ioctl r/o */
1181863d5b82SDavid Howells 	compat_dev_t	lo_rdevice;     /* ioctl r/o */
1182863d5b82SDavid Howells 	compat_int_t	lo_offset;
1183863d5b82SDavid Howells 	compat_int_t	lo_encrypt_type;
1184863d5b82SDavid Howells 	compat_int_t	lo_encrypt_key_size;    /* ioctl w/o */
1185863d5b82SDavid Howells 	compat_int_t	lo_flags;       /* ioctl r/o */
1186863d5b82SDavid Howells 	char		lo_name[LO_NAME_SIZE];
1187863d5b82SDavid Howells 	unsigned char	lo_encrypt_key[LO_KEY_SIZE]; /* ioctl w/o */
1188863d5b82SDavid Howells 	compat_ulong_t	lo_init[2];
1189863d5b82SDavid Howells 	char		reserved[4];
1190863d5b82SDavid Howells };
1191863d5b82SDavid Howells 
1192863d5b82SDavid Howells /*
1193863d5b82SDavid Howells  * Transfer 32-bit compatibility structure in userspace to 64-bit loop info
1194863d5b82SDavid Howells  * - noinlined to reduce stack space usage in main part of driver
1195863d5b82SDavid Howells  */
1196863d5b82SDavid Howells static noinline int
1197ba674cfcSAl Viro loop_info64_from_compat(const struct compat_loop_info __user *arg,
1198863d5b82SDavid Howells 			struct loop_info64 *info64)
1199863d5b82SDavid Howells {
1200863d5b82SDavid Howells 	struct compat_loop_info info;
1201863d5b82SDavid Howells 
1202863d5b82SDavid Howells 	if (copy_from_user(&info, arg, sizeof(info)))
1203863d5b82SDavid Howells 		return -EFAULT;
1204863d5b82SDavid Howells 
1205863d5b82SDavid Howells 	memset(info64, 0, sizeof(*info64));
1206863d5b82SDavid Howells 	info64->lo_number = info.lo_number;
1207863d5b82SDavid Howells 	info64->lo_device = info.lo_device;
1208863d5b82SDavid Howells 	info64->lo_inode = info.lo_inode;
1209863d5b82SDavid Howells 	info64->lo_rdevice = info.lo_rdevice;
1210863d5b82SDavid Howells 	info64->lo_offset = info.lo_offset;
1211863d5b82SDavid Howells 	info64->lo_sizelimit = 0;
1212863d5b82SDavid Howells 	info64->lo_encrypt_type = info.lo_encrypt_type;
1213863d5b82SDavid Howells 	info64->lo_encrypt_key_size = info.lo_encrypt_key_size;
1214863d5b82SDavid Howells 	info64->lo_flags = info.lo_flags;
1215863d5b82SDavid Howells 	info64->lo_init[0] = info.lo_init[0];
1216863d5b82SDavid Howells 	info64->lo_init[1] = info.lo_init[1];
1217863d5b82SDavid Howells 	if (info.lo_encrypt_type == LO_CRYPT_CRYPTOAPI)
1218863d5b82SDavid Howells 		memcpy(info64->lo_crypt_name, info.lo_name, LO_NAME_SIZE);
1219863d5b82SDavid Howells 	else
1220863d5b82SDavid Howells 		memcpy(info64->lo_file_name, info.lo_name, LO_NAME_SIZE);
1221863d5b82SDavid Howells 	memcpy(info64->lo_encrypt_key, info.lo_encrypt_key, LO_KEY_SIZE);
1222863d5b82SDavid Howells 	return 0;
1223863d5b82SDavid Howells }
1224863d5b82SDavid Howells 
1225863d5b82SDavid Howells /*
1226863d5b82SDavid Howells  * Transfer 64-bit loop info to 32-bit compatibility structure in userspace
1227863d5b82SDavid Howells  * - noinlined to reduce stack space usage in main part of driver
1228863d5b82SDavid Howells  */
1229863d5b82SDavid Howells static noinline int
1230863d5b82SDavid Howells loop_info64_to_compat(const struct loop_info64 *info64,
1231863d5b82SDavid Howells 		      struct compat_loop_info __user *arg)
1232863d5b82SDavid Howells {
1233863d5b82SDavid Howells 	struct compat_loop_info info;
1234863d5b82SDavid Howells 
1235863d5b82SDavid Howells 	memset(&info, 0, sizeof(info));
1236863d5b82SDavid Howells 	info.lo_number = info64->lo_number;
1237863d5b82SDavid Howells 	info.lo_device = info64->lo_device;
1238863d5b82SDavid Howells 	info.lo_inode = info64->lo_inode;
1239863d5b82SDavid Howells 	info.lo_rdevice = info64->lo_rdevice;
1240863d5b82SDavid Howells 	info.lo_offset = info64->lo_offset;
1241863d5b82SDavid Howells 	info.lo_encrypt_type = info64->lo_encrypt_type;
1242863d5b82SDavid Howells 	info.lo_encrypt_key_size = info64->lo_encrypt_key_size;
1243863d5b82SDavid Howells 	info.lo_flags = info64->lo_flags;
1244863d5b82SDavid Howells 	info.lo_init[0] = info64->lo_init[0];
1245863d5b82SDavid Howells 	info.lo_init[1] = info64->lo_init[1];
1246863d5b82SDavid Howells 	if (info.lo_encrypt_type == LO_CRYPT_CRYPTOAPI)
1247863d5b82SDavid Howells 		memcpy(info.lo_name, info64->lo_crypt_name, LO_NAME_SIZE);
1248863d5b82SDavid Howells 	else
1249863d5b82SDavid Howells 		memcpy(info.lo_name, info64->lo_file_name, LO_NAME_SIZE);
1250863d5b82SDavid Howells 	memcpy(info.lo_encrypt_key, info64->lo_encrypt_key, LO_KEY_SIZE);
1251863d5b82SDavid Howells 
1252863d5b82SDavid Howells 	/* error in case values were truncated */
1253863d5b82SDavid Howells 	if (info.lo_device != info64->lo_device ||
1254863d5b82SDavid Howells 	    info.lo_rdevice != info64->lo_rdevice ||
1255863d5b82SDavid Howells 	    info.lo_inode != info64->lo_inode ||
1256863d5b82SDavid Howells 	    info.lo_offset != info64->lo_offset ||
1257863d5b82SDavid Howells 	    info.lo_init[0] != info64->lo_init[0] ||
1258863d5b82SDavid Howells 	    info.lo_init[1] != info64->lo_init[1])
1259863d5b82SDavid Howells 		return -EOVERFLOW;
1260863d5b82SDavid Howells 
1261863d5b82SDavid Howells 	if (copy_to_user(arg, &info, sizeof(info)))
1262863d5b82SDavid Howells 		return -EFAULT;
1263863d5b82SDavid Howells 	return 0;
1264863d5b82SDavid Howells }
1265863d5b82SDavid Howells 
1266863d5b82SDavid Howells static int
1267863d5b82SDavid Howells loop_set_status_compat(struct loop_device *lo,
1268863d5b82SDavid Howells 		       const struct compat_loop_info __user *arg)
1269863d5b82SDavid Howells {
1270863d5b82SDavid Howells 	struct loop_info64 info64;
1271863d5b82SDavid Howells 	int ret;
1272863d5b82SDavid Howells 
1273863d5b82SDavid Howells 	ret = loop_info64_from_compat(arg, &info64);
1274863d5b82SDavid Howells 	if (ret < 0)
1275863d5b82SDavid Howells 		return ret;
1276863d5b82SDavid Howells 	return loop_set_status(lo, &info64);
1277863d5b82SDavid Howells }
1278863d5b82SDavid Howells 
1279863d5b82SDavid Howells static int
1280863d5b82SDavid Howells loop_get_status_compat(struct loop_device *lo,
1281863d5b82SDavid Howells 		       struct compat_loop_info __user *arg)
1282863d5b82SDavid Howells {
1283863d5b82SDavid Howells 	struct loop_info64 info64;
1284863d5b82SDavid Howells 	int err = 0;
1285863d5b82SDavid Howells 
1286863d5b82SDavid Howells 	if (!arg)
1287863d5b82SDavid Howells 		err = -EINVAL;
1288863d5b82SDavid Howells 	if (!err)
1289863d5b82SDavid Howells 		err = loop_get_status(lo, &info64);
1290863d5b82SDavid Howells 	if (!err)
1291863d5b82SDavid Howells 		err = loop_info64_to_compat(&info64, arg);
1292863d5b82SDavid Howells 	return err;
1293863d5b82SDavid Howells }
1294863d5b82SDavid Howells 
1295863d5b82SDavid Howells static long lo_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1296863d5b82SDavid Howells {
12976c648be6SJosef Sipek 	struct inode *inode = file->f_path.dentry->d_inode;
1298863d5b82SDavid Howells 	struct loop_device *lo = inode->i_bdev->bd_disk->private_data;
1299863d5b82SDavid Howells 	int err;
1300863d5b82SDavid Howells 
1301863d5b82SDavid Howells 	switch(cmd) {
1302863d5b82SDavid Howells 	case LOOP_SET_STATUS:
1303863d5b82SDavid Howells 		mutex_lock(&lo->lo_ctl_mutex);
1304863d5b82SDavid Howells 		err = loop_set_status_compat(
1305863d5b82SDavid Howells 			lo, (const struct compat_loop_info __user *) arg);
1306863d5b82SDavid Howells 		mutex_unlock(&lo->lo_ctl_mutex);
1307863d5b82SDavid Howells 		break;
1308863d5b82SDavid Howells 	case LOOP_GET_STATUS:
1309863d5b82SDavid Howells 		mutex_lock(&lo->lo_ctl_mutex);
1310863d5b82SDavid Howells 		err = loop_get_status_compat(
1311863d5b82SDavid Howells 			lo, (struct compat_loop_info __user *) arg);
1312863d5b82SDavid Howells 		mutex_unlock(&lo->lo_ctl_mutex);
1313863d5b82SDavid Howells 		break;
1314863d5b82SDavid Howells 	case LOOP_CLR_FD:
1315863d5b82SDavid Howells 	case LOOP_GET_STATUS64:
1316863d5b82SDavid Howells 	case LOOP_SET_STATUS64:
1317863d5b82SDavid Howells 		arg = (unsigned long) compat_ptr(arg);
1318863d5b82SDavid Howells 	case LOOP_SET_FD:
1319863d5b82SDavid Howells 	case LOOP_CHANGE_FD:
1320863d5b82SDavid Howells 		err = lo_ioctl(inode, file, cmd, arg);
1321863d5b82SDavid Howells 		break;
1322863d5b82SDavid Howells 	default:
1323863d5b82SDavid Howells 		err = -ENOIOCTLCMD;
1324863d5b82SDavid Howells 		break;
1325863d5b82SDavid Howells 	}
1326863d5b82SDavid Howells 	return err;
1327863d5b82SDavid Howells }
1328863d5b82SDavid Howells #endif
1329863d5b82SDavid Howells 
13301da177e4SLinus Torvalds static int lo_open(struct inode *inode, struct file *file)
13311da177e4SLinus Torvalds {
13321da177e4SLinus Torvalds 	struct loop_device *lo = inode->i_bdev->bd_disk->private_data;
13331da177e4SLinus Torvalds 
1334f85221ddSIngo Molnar 	mutex_lock(&lo->lo_ctl_mutex);
13351da177e4SLinus Torvalds 	lo->lo_refcnt++;
1336f85221ddSIngo Molnar 	mutex_unlock(&lo->lo_ctl_mutex);
13371da177e4SLinus Torvalds 
13381da177e4SLinus Torvalds 	return 0;
13391da177e4SLinus Torvalds }
13401da177e4SLinus Torvalds 
13411da177e4SLinus Torvalds static int lo_release(struct inode *inode, struct file *file)
13421da177e4SLinus Torvalds {
13431da177e4SLinus Torvalds 	struct loop_device *lo = inode->i_bdev->bd_disk->private_data;
13441da177e4SLinus Torvalds 
1345f85221ddSIngo Molnar 	mutex_lock(&lo->lo_ctl_mutex);
13461da177e4SLinus Torvalds 	--lo->lo_refcnt;
134796c58655SDavid Woodhouse 
134896c58655SDavid Woodhouse 	if ((lo->lo_flags & LO_FLAGS_AUTOCLEAR) && !lo->lo_refcnt)
134996c58655SDavid Woodhouse 		loop_clr_fd(lo, inode->i_bdev);
135096c58655SDavid Woodhouse 
1351f85221ddSIngo Molnar 	mutex_unlock(&lo->lo_ctl_mutex);
13521da177e4SLinus Torvalds 
13531da177e4SLinus Torvalds 	return 0;
13541da177e4SLinus Torvalds }
13551da177e4SLinus Torvalds 
13561da177e4SLinus Torvalds static struct block_device_operations lo_fops = {
13571da177e4SLinus Torvalds 	.owner =	THIS_MODULE,
13581da177e4SLinus Torvalds 	.open =		lo_open,
13591da177e4SLinus Torvalds 	.release =	lo_release,
13601da177e4SLinus Torvalds 	.ioctl =	lo_ioctl,
1361863d5b82SDavid Howells #ifdef CONFIG_COMPAT
1362863d5b82SDavid Howells 	.compat_ioctl =	lo_compat_ioctl,
1363863d5b82SDavid Howells #endif
13641da177e4SLinus Torvalds };
13651da177e4SLinus Torvalds 
13661da177e4SLinus Torvalds /*
13671da177e4SLinus Torvalds  * And now the modules code and kernel interface.
13681da177e4SLinus Torvalds  */
136973285082SKen Chen static int max_loop;
13701da177e4SLinus Torvalds module_param(max_loop, int, 0);
1371a47653fcSKen Chen MODULE_PARM_DESC(max_loop, "Maximum number of loop devices");
1372476a4813SLaurent Vivier module_param(max_part, int, 0);
1373476a4813SLaurent Vivier MODULE_PARM_DESC(max_part, "Maximum number of partitions per loop device");
13741da177e4SLinus Torvalds MODULE_LICENSE("GPL");
13751da177e4SLinus Torvalds MODULE_ALIAS_BLOCKDEV_MAJOR(LOOP_MAJOR);
13761da177e4SLinus Torvalds 
13771da177e4SLinus Torvalds int loop_register_transfer(struct loop_func_table *funcs)
13781da177e4SLinus Torvalds {
13791da177e4SLinus Torvalds 	unsigned int n = funcs->number;
13801da177e4SLinus Torvalds 
13811da177e4SLinus Torvalds 	if (n >= MAX_LO_CRYPT || xfer_funcs[n])
13821da177e4SLinus Torvalds 		return -EINVAL;
13831da177e4SLinus Torvalds 	xfer_funcs[n] = funcs;
13841da177e4SLinus Torvalds 	return 0;
13851da177e4SLinus Torvalds }
13861da177e4SLinus Torvalds 
13871da177e4SLinus Torvalds int loop_unregister_transfer(int number)
13881da177e4SLinus Torvalds {
13891da177e4SLinus Torvalds 	unsigned int n = number;
13901da177e4SLinus Torvalds 	struct loop_device *lo;
13911da177e4SLinus Torvalds 	struct loop_func_table *xfer;
13921da177e4SLinus Torvalds 
13931da177e4SLinus Torvalds 	if (n == 0 || n >= MAX_LO_CRYPT || (xfer = xfer_funcs[n]) == NULL)
13941da177e4SLinus Torvalds 		return -EINVAL;
13951da177e4SLinus Torvalds 
13961da177e4SLinus Torvalds 	xfer_funcs[n] = NULL;
13971da177e4SLinus Torvalds 
139873285082SKen Chen 	list_for_each_entry(lo, &loop_devices, lo_list) {
1399f85221ddSIngo Molnar 		mutex_lock(&lo->lo_ctl_mutex);
14001da177e4SLinus Torvalds 
14011da177e4SLinus Torvalds 		if (lo->lo_encryption == xfer)
14021da177e4SLinus Torvalds 			loop_release_xfer(lo);
14031da177e4SLinus Torvalds 
1404f85221ddSIngo Molnar 		mutex_unlock(&lo->lo_ctl_mutex);
14051da177e4SLinus Torvalds 	}
14061da177e4SLinus Torvalds 
14071da177e4SLinus Torvalds 	return 0;
14081da177e4SLinus Torvalds }
14091da177e4SLinus Torvalds 
14101da177e4SLinus Torvalds EXPORT_SYMBOL(loop_register_transfer);
14111da177e4SLinus Torvalds EXPORT_SYMBOL(loop_unregister_transfer);
14121da177e4SLinus Torvalds 
1413a47653fcSKen Chen static struct loop_device *loop_alloc(int i)
14141da177e4SLinus Torvalds {
141573285082SKen Chen 	struct loop_device *lo;
141673285082SKen Chen 	struct gendisk *disk;
14171da177e4SLinus Torvalds 
141873285082SKen Chen 	lo = kzalloc(sizeof(*lo), GFP_KERNEL);
141973285082SKen Chen 	if (!lo)
142073285082SKen Chen 		goto out;
14211da177e4SLinus Torvalds 
14221da177e4SLinus Torvalds 	lo->lo_queue = blk_alloc_queue(GFP_KERNEL);
14231da177e4SLinus Torvalds 	if (!lo->lo_queue)
142473285082SKen Chen 		goto out_free_dev;
142573285082SKen Chen 
1426476a4813SLaurent Vivier 	disk = lo->lo_disk = alloc_disk(1 << part_shift);
142773285082SKen Chen 	if (!disk)
142873285082SKen Chen 		goto out_free_queue;
142973285082SKen Chen 
1430f85221ddSIngo Molnar 	mutex_init(&lo->lo_ctl_mutex);
14311da177e4SLinus Torvalds 	lo->lo_number		= i;
14326c997918SSerge E. Hallyn 	lo->lo_thread		= NULL;
14336c997918SSerge E. Hallyn 	init_waitqueue_head(&lo->lo_event);
14341da177e4SLinus Torvalds 	spin_lock_init(&lo->lo_lock);
14351da177e4SLinus Torvalds 	disk->major		= LOOP_MAJOR;
1436476a4813SLaurent Vivier 	disk->first_minor	= i << part_shift;
14371da177e4SLinus Torvalds 	disk->fops		= &lo_fops;
14381da177e4SLinus Torvalds 	disk->private_data	= lo;
14391da177e4SLinus Torvalds 	disk->queue		= lo->lo_queue;
144073285082SKen Chen 	sprintf(disk->disk_name, "loop%d", i);
144173285082SKen Chen 	return lo;
144273285082SKen Chen 
144373285082SKen Chen out_free_queue:
144473285082SKen Chen 	blk_cleanup_queue(lo->lo_queue);
144573285082SKen Chen out_free_dev:
144673285082SKen Chen 	kfree(lo);
144773285082SKen Chen out:
144807002e99SAl Viro 	return NULL;
14491da177e4SLinus Torvalds }
14501da177e4SLinus Torvalds 
1451a47653fcSKen Chen static void loop_free(struct loop_device *lo)
145273285082SKen Chen {
145373285082SKen Chen 	blk_cleanup_queue(lo->lo_queue);
145473285082SKen Chen 	put_disk(lo->lo_disk);
145573285082SKen Chen 	list_del(&lo->lo_list);
145673285082SKen Chen 	kfree(lo);
145773285082SKen Chen }
145873285082SKen Chen 
1459a47653fcSKen Chen static struct loop_device *loop_init_one(int i)
1460a47653fcSKen Chen {
1461a47653fcSKen Chen 	struct loop_device *lo;
1462a47653fcSKen Chen 
1463a47653fcSKen Chen 	list_for_each_entry(lo, &loop_devices, lo_list) {
1464a47653fcSKen Chen 		if (lo->lo_number == i)
1465a47653fcSKen Chen 			return lo;
1466a47653fcSKen Chen 	}
1467a47653fcSKen Chen 
1468a47653fcSKen Chen 	lo = loop_alloc(i);
1469a47653fcSKen Chen 	if (lo) {
1470a47653fcSKen Chen 		add_disk(lo->lo_disk);
1471a47653fcSKen Chen 		list_add_tail(&lo->lo_list, &loop_devices);
1472a47653fcSKen Chen 	}
1473a47653fcSKen Chen 	return lo;
1474a47653fcSKen Chen }
1475a47653fcSKen Chen 
1476a47653fcSKen Chen static void loop_del_one(struct loop_device *lo)
1477a47653fcSKen Chen {
1478a47653fcSKen Chen 	del_gendisk(lo->lo_disk);
1479a47653fcSKen Chen 	loop_free(lo);
1480a47653fcSKen Chen }
1481a47653fcSKen Chen 
148273285082SKen Chen static struct kobject *loop_probe(dev_t dev, int *part, void *data)
148373285082SKen Chen {
1484705962ccSAl Viro 	struct loop_device *lo;
148507002e99SAl Viro 	struct kobject *kobj;
148673285082SKen Chen 
1487705962ccSAl Viro 	mutex_lock(&loop_devices_mutex);
1488705962ccSAl Viro 	lo = loop_init_one(dev & MINORMASK);
148907002e99SAl Viro 	kobj = lo ? get_disk(lo->lo_disk) : ERR_PTR(-ENOMEM);
149073285082SKen Chen 	mutex_unlock(&loop_devices_mutex);
149173285082SKen Chen 
149273285082SKen Chen 	*part = 0;
149307002e99SAl Viro 	return kobj;
149473285082SKen Chen }
149573285082SKen Chen 
149673285082SKen Chen static int __init loop_init(void)
149773285082SKen Chen {
1498a47653fcSKen Chen 	int i, nr;
1499a47653fcSKen Chen 	unsigned long range;
1500a47653fcSKen Chen 	struct loop_device *lo, *next;
1501a47653fcSKen Chen 
1502a47653fcSKen Chen 	/*
1503a47653fcSKen Chen 	 * loop module now has a feature to instantiate underlying device
1504a47653fcSKen Chen 	 * structure on-demand, provided that there is an access dev node.
1505a47653fcSKen Chen 	 * However, this will not work well with user space tool that doesn't
1506a47653fcSKen Chen 	 * know about such "feature".  In order to not break any existing
1507a47653fcSKen Chen 	 * tool, we do the following:
1508a47653fcSKen Chen 	 *
1509a47653fcSKen Chen 	 * (1) if max_loop is specified, create that many upfront, and this
1510a47653fcSKen Chen 	 *     also becomes a hard limit.
1511a47653fcSKen Chen 	 * (2) if max_loop is not specified, create 8 loop device on module
1512a47653fcSKen Chen 	 *     load, user can further extend loop device by create dev node
1513a47653fcSKen Chen 	 *     themselves and have kernel automatically instantiate actual
1514a47653fcSKen Chen 	 *     device on-demand.
1515a47653fcSKen Chen 	 */
1516476a4813SLaurent Vivier 
1517476a4813SLaurent Vivier 	part_shift = 0;
1518476a4813SLaurent Vivier 	if (max_part > 0)
1519476a4813SLaurent Vivier 		part_shift = fls(max_part);
1520476a4813SLaurent Vivier 
1521476a4813SLaurent Vivier 	if (max_loop > 1UL << (MINORBITS - part_shift))
1522a47653fcSKen Chen 		return -EINVAL;
152373285082SKen Chen 
152473285082SKen Chen 	if (max_loop) {
1525a47653fcSKen Chen 		nr = max_loop;
1526a47653fcSKen Chen 		range = max_loop;
1527a47653fcSKen Chen 	} else {
1528a47653fcSKen Chen 		nr = 8;
1529476a4813SLaurent Vivier 		range = 1UL << (MINORBITS - part_shift);
153073285082SKen Chen 	}
1531a47653fcSKen Chen 
1532a47653fcSKen Chen 	if (register_blkdev(LOOP_MAJOR, "loop"))
1533a47653fcSKen Chen 		return -EIO;
1534a47653fcSKen Chen 
1535a47653fcSKen Chen 	for (i = 0; i < nr; i++) {
1536a47653fcSKen Chen 		lo = loop_alloc(i);
1537a47653fcSKen Chen 		if (!lo)
1538a47653fcSKen Chen 			goto Enomem;
1539a47653fcSKen Chen 		list_add_tail(&lo->lo_list, &loop_devices);
1540a47653fcSKen Chen 	}
1541a47653fcSKen Chen 
1542a47653fcSKen Chen 	/* point of no return */
1543a47653fcSKen Chen 
1544a47653fcSKen Chen 	list_for_each_entry(lo, &loop_devices, lo_list)
1545a47653fcSKen Chen 		add_disk(lo->lo_disk);
1546a47653fcSKen Chen 
1547a47653fcSKen Chen 	blk_register_region(MKDEV(LOOP_MAJOR, 0), range,
1548a47653fcSKen Chen 				  THIS_MODULE, loop_probe, NULL, NULL);
1549a47653fcSKen Chen 
155073285082SKen Chen 	printk(KERN_INFO "loop: module loaded\n");
15511da177e4SLinus Torvalds 	return 0;
1552a47653fcSKen Chen 
1553a47653fcSKen Chen Enomem:
1554a47653fcSKen Chen 	printk(KERN_INFO "loop: out of memory\n");
1555a47653fcSKen Chen 
1556a47653fcSKen Chen 	list_for_each_entry_safe(lo, next, &loop_devices, lo_list)
1557a47653fcSKen Chen 		loop_free(lo);
1558a47653fcSKen Chen 
1559a47653fcSKen Chen 	unregister_blkdev(LOOP_MAJOR, "loop");
1560a47653fcSKen Chen 	return -ENOMEM;
15611da177e4SLinus Torvalds }
15621da177e4SLinus Torvalds 
156373285082SKen Chen static void __exit loop_exit(void)
15641da177e4SLinus Torvalds {
1565a47653fcSKen Chen 	unsigned long range;
156673285082SKen Chen 	struct loop_device *lo, *next;
15671da177e4SLinus Torvalds 
1568476a4813SLaurent Vivier 	range = max_loop ? max_loop :  1UL << (MINORBITS - part_shift);
1569a47653fcSKen Chen 
157073285082SKen Chen 	list_for_each_entry_safe(lo, next, &loop_devices, lo_list)
157173285082SKen Chen 		loop_del_one(lo);
157273285082SKen Chen 
1573a47653fcSKen Chen 	blk_unregister_region(MKDEV(LOOP_MAJOR, 0), range);
157400d59405SAkinobu Mita 	unregister_blkdev(LOOP_MAJOR, "loop");
15751da177e4SLinus Torvalds }
15761da177e4SLinus Torvalds 
15771da177e4SLinus Torvalds module_init(loop_init);
15781da177e4SLinus Torvalds module_exit(loop_exit);
15791da177e4SLinus Torvalds 
15801da177e4SLinus Torvalds #ifndef MODULE
15811da177e4SLinus Torvalds static int __init max_loop_setup(char *str)
15821da177e4SLinus Torvalds {
15831da177e4SLinus Torvalds 	max_loop = simple_strtol(str, NULL, 0);
15841da177e4SLinus Torvalds 	return 1;
15851da177e4SLinus Torvalds }
15861da177e4SLinus Torvalds 
15871da177e4SLinus Torvalds __setup("max_loop=", max_loop_setup);
15881da177e4SLinus Torvalds #endif
1589