xref: /openbmc/linux/drivers/gpu/drm/drm_ioc32.c (revision a89988a6)
1 /*
2  * \file drm_ioc32.c
3  *
4  * 32-bit ioctl compatibility routines for the DRM.
5  *
6  * \author Paul Mackerras <paulus@samba.org>
7  *
8  * Copyright (C) Paul Mackerras 2005.
9  * All Rights Reserved.
10  *
11  * Permission is hereby granted, free of charge, to any person obtaining a
12  * copy of this software and associated documentation files (the "Software"),
13  * to deal in the Software without restriction, including without limitation
14  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
15  * and/or sell copies of the Software, and to permit persons to whom the
16  * Software is furnished to do so, subject to the following conditions:
17  *
18  * The above copyright notice and this permission notice (including the next
19  * paragraph) shall be included in all copies or substantial portions of the
20  * Software.
21  *
22  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
23  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
24  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
25  * THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
26  * WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
27  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
28  * IN THE SOFTWARE.
29  */
30 #include <linux/compat.h>
31 #include <linux/ratelimit.h>
32 #include <linux/export.h>
33 
34 #include <drm/drmP.h>
35 
36 #define DRM_IOCTL_VERSION32		DRM_IOWR(0x00, drm_version32_t)
37 #define DRM_IOCTL_GET_UNIQUE32		DRM_IOWR(0x01, drm_unique32_t)
38 #define DRM_IOCTL_GET_MAP32		DRM_IOWR(0x04, drm_map32_t)
39 #define DRM_IOCTL_GET_CLIENT32		DRM_IOWR(0x05, drm_client32_t)
40 #define DRM_IOCTL_GET_STATS32		DRM_IOR( 0x06, drm_stats32_t)
41 
42 #define DRM_IOCTL_SET_UNIQUE32		DRM_IOW( 0x10, drm_unique32_t)
43 #define DRM_IOCTL_ADD_MAP32		DRM_IOWR(0x15, drm_map32_t)
44 #define DRM_IOCTL_ADD_BUFS32		DRM_IOWR(0x16, drm_buf_desc32_t)
45 #define DRM_IOCTL_MARK_BUFS32		DRM_IOW( 0x17, drm_buf_desc32_t)
46 #define DRM_IOCTL_INFO_BUFS32		DRM_IOWR(0x18, drm_buf_info32_t)
47 #define DRM_IOCTL_MAP_BUFS32		DRM_IOWR(0x19, drm_buf_map32_t)
48 #define DRM_IOCTL_FREE_BUFS32		DRM_IOW( 0x1a, drm_buf_free32_t)
49 
50 #define DRM_IOCTL_RM_MAP32		DRM_IOW( 0x1b, drm_map32_t)
51 
52 #define DRM_IOCTL_SET_SAREA_CTX32	DRM_IOW( 0x1c, drm_ctx_priv_map32_t)
53 #define DRM_IOCTL_GET_SAREA_CTX32	DRM_IOWR(0x1d, drm_ctx_priv_map32_t)
54 
55 #define DRM_IOCTL_RES_CTX32		DRM_IOWR(0x26, drm_ctx_res32_t)
56 #define DRM_IOCTL_DMA32			DRM_IOWR(0x29, drm_dma32_t)
57 
58 #define DRM_IOCTL_AGP_ENABLE32		DRM_IOW( 0x32, drm_agp_mode32_t)
59 #define DRM_IOCTL_AGP_INFO32		DRM_IOR( 0x33, drm_agp_info32_t)
60 #define DRM_IOCTL_AGP_ALLOC32		DRM_IOWR(0x34, drm_agp_buffer32_t)
61 #define DRM_IOCTL_AGP_FREE32		DRM_IOW( 0x35, drm_agp_buffer32_t)
62 #define DRM_IOCTL_AGP_BIND32		DRM_IOW( 0x36, drm_agp_binding32_t)
63 #define DRM_IOCTL_AGP_UNBIND32		DRM_IOW( 0x37, drm_agp_binding32_t)
64 
65 #define DRM_IOCTL_SG_ALLOC32		DRM_IOW( 0x38, drm_scatter_gather32_t)
66 #define DRM_IOCTL_SG_FREE32		DRM_IOW( 0x39, drm_scatter_gather32_t)
67 
68 #define DRM_IOCTL_UPDATE_DRAW32		DRM_IOW( 0x3f, drm_update_draw32_t)
69 
70 #define DRM_IOCTL_WAIT_VBLANK32		DRM_IOWR(0x3a, drm_wait_vblank32_t)
71 
72 #define DRM_IOCTL_MODE_ADDFB232		DRM_IOWR(0xb8, drm_mode_fb_cmd232_t)
73 
74 typedef struct drm_version_32 {
75 	int version_major;	  /* Major version */
76 	int version_minor;	  /* Minor version */
77 	int version_patchlevel;	   /* Patch level */
78 	u32 name_len;		  /* Length of name buffer */
79 	u32 name;		  /* Name of driver */
80 	u32 date_len;		  /* Length of date buffer */
81 	u32 date;		  /* User-space buffer to hold date */
82 	u32 desc_len;		  /* Length of desc buffer */
83 	u32 desc;		  /* User-space buffer to hold desc */
84 } drm_version32_t;
85 
86 static int compat_drm_version(struct file *file, unsigned int cmd,
87 			      unsigned long arg)
88 {
89 	drm_version32_t v32;
90 	struct drm_version __user *version;
91 	int err;
92 
93 	if (copy_from_user(&v32, (void __user *)arg, sizeof(v32)))
94 		return -EFAULT;
95 
96 	version = compat_alloc_user_space(sizeof(*version));
97 	if (!version)
98 		return -EFAULT;
99 	if (__put_user(v32.name_len, &version->name_len)
100 	    || __put_user((void __user *)(unsigned long)v32.name,
101 			  &version->name)
102 	    || __put_user(v32.date_len, &version->date_len)
103 	    || __put_user((void __user *)(unsigned long)v32.date,
104 			  &version->date)
105 	    || __put_user(v32.desc_len, &version->desc_len)
106 	    || __put_user((void __user *)(unsigned long)v32.desc,
107 			  &version->desc))
108 		return -EFAULT;
109 
110 	err = drm_ioctl(file,
111 			DRM_IOCTL_VERSION, (unsigned long)version);
112 	if (err)
113 		return err;
114 
115 	if (__get_user(v32.version_major, &version->version_major)
116 	    || __get_user(v32.version_minor, &version->version_minor)
117 	    || __get_user(v32.version_patchlevel, &version->version_patchlevel)
118 	    || __get_user(v32.name_len, &version->name_len)
119 	    || __get_user(v32.date_len, &version->date_len)
120 	    || __get_user(v32.desc_len, &version->desc_len))
121 		return -EFAULT;
122 
123 	if (copy_to_user((void __user *)arg, &v32, sizeof(v32)))
124 		return -EFAULT;
125 	return 0;
126 }
127 
128 typedef struct drm_unique32 {
129 	u32 unique_len;	/* Length of unique */
130 	u32 unique;	/* Unique name for driver instantiation */
131 } drm_unique32_t;
132 
133 static int compat_drm_getunique(struct file *file, unsigned int cmd,
134 				unsigned long arg)
135 {
136 	drm_unique32_t uq32;
137 	struct drm_unique __user *u;
138 	int err;
139 
140 	if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32)))
141 		return -EFAULT;
142 
143 	u = compat_alloc_user_space(sizeof(*u));
144 	if (!u)
145 		return -EFAULT;
146 	if (__put_user(uq32.unique_len, &u->unique_len)
147 	    || __put_user((void __user *)(unsigned long)uq32.unique,
148 			  &u->unique))
149 		return -EFAULT;
150 
151 	err = drm_ioctl(file, DRM_IOCTL_GET_UNIQUE, (unsigned long)u);
152 	if (err)
153 		return err;
154 
155 	if (__get_user(uq32.unique_len, &u->unique_len))
156 		return -EFAULT;
157 	if (copy_to_user((void __user *)arg, &uq32, sizeof(uq32)))
158 		return -EFAULT;
159 	return 0;
160 }
161 
162 static int compat_drm_setunique(struct file *file, unsigned int cmd,
163 				unsigned long arg)
164 {
165 	drm_unique32_t uq32;
166 	struct drm_unique __user *u;
167 
168 	if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32)))
169 		return -EFAULT;
170 
171 	u = compat_alloc_user_space(sizeof(*u));
172 	if (!u)
173 		return -EFAULT;
174 	if (__put_user(uq32.unique_len, &u->unique_len)
175 	    || __put_user((void __user *)(unsigned long)uq32.unique,
176 			  &u->unique))
177 		return -EFAULT;
178 
179 	return drm_ioctl(file, DRM_IOCTL_SET_UNIQUE, (unsigned long)u);
180 }
181 
182 typedef struct drm_map32 {
183 	u32 offset;		/* Requested physical address (0 for SAREA) */
184 	u32 size;		/* Requested physical size (bytes) */
185 	enum drm_map_type type;	/* Type of memory to map */
186 	enum drm_map_flags flags;	/* Flags */
187 	u32 handle;		/* User-space: "Handle" to pass to mmap() */
188 	int mtrr;		/* MTRR slot used */
189 } drm_map32_t;
190 
191 static int compat_drm_getmap(struct file *file, unsigned int cmd,
192 			     unsigned long arg)
193 {
194 	drm_map32_t __user *argp = (void __user *)arg;
195 	drm_map32_t m32;
196 	struct drm_map __user *map;
197 	int idx, err;
198 	void *handle;
199 
200 	if (get_user(idx, &argp->offset))
201 		return -EFAULT;
202 
203 	map = compat_alloc_user_space(sizeof(*map));
204 	if (!map)
205 		return -EFAULT;
206 	if (__put_user(idx, &map->offset))
207 		return -EFAULT;
208 
209 	err = drm_ioctl(file, DRM_IOCTL_GET_MAP, (unsigned long)map);
210 	if (err)
211 		return err;
212 
213 	if (__get_user(m32.offset, &map->offset)
214 	    || __get_user(m32.size, &map->size)
215 	    || __get_user(m32.type, &map->type)
216 	    || __get_user(m32.flags, &map->flags)
217 	    || __get_user(handle, &map->handle)
218 	    || __get_user(m32.mtrr, &map->mtrr))
219 		return -EFAULT;
220 
221 	m32.handle = (unsigned long)handle;
222 	if (copy_to_user(argp, &m32, sizeof(m32)))
223 		return -EFAULT;
224 	return 0;
225 
226 }
227 
228 static int compat_drm_addmap(struct file *file, unsigned int cmd,
229 			     unsigned long arg)
230 {
231 	drm_map32_t __user *argp = (void __user *)arg;
232 	drm_map32_t m32;
233 	struct drm_map __user *map;
234 	int err;
235 	void *handle;
236 
237 	if (copy_from_user(&m32, argp, sizeof(m32)))
238 		return -EFAULT;
239 
240 	map = compat_alloc_user_space(sizeof(*map));
241 	if (!map)
242 		return -EFAULT;
243 	if (__put_user(m32.offset, &map->offset)
244 	    || __put_user(m32.size, &map->size)
245 	    || __put_user(m32.type, &map->type)
246 	    || __put_user(m32.flags, &map->flags))
247 		return -EFAULT;
248 
249 	err = drm_ioctl(file, DRM_IOCTL_ADD_MAP, (unsigned long)map);
250 	if (err)
251 		return err;
252 
253 	if (__get_user(m32.offset, &map->offset)
254 	    || __get_user(m32.mtrr, &map->mtrr)
255 	    || __get_user(handle, &map->handle))
256 		return -EFAULT;
257 
258 	m32.handle = (unsigned long)handle;
259 	if (m32.handle != (unsigned long)handle)
260 		pr_err_ratelimited("compat_drm_addmap truncated handle %p for type %d offset %x\n",
261 				   handle, m32.type, m32.offset);
262 
263 	if (copy_to_user(argp, &m32, sizeof(m32)))
264 		return -EFAULT;
265 
266 	return 0;
267 }
268 
269 static int compat_drm_rmmap(struct file *file, unsigned int cmd,
270 			    unsigned long arg)
271 {
272 	drm_map32_t __user *argp = (void __user *)arg;
273 	struct drm_map __user *map;
274 	u32 handle;
275 
276 	if (get_user(handle, &argp->handle))
277 		return -EFAULT;
278 
279 	map = compat_alloc_user_space(sizeof(*map));
280 	if (!map)
281 		return -EFAULT;
282 	if (__put_user((void *)(unsigned long)handle, &map->handle))
283 		return -EFAULT;
284 
285 	return drm_ioctl(file, DRM_IOCTL_RM_MAP, (unsigned long)map);
286 }
287 
288 typedef struct drm_client32 {
289 	int idx;	/* Which client desired? */
290 	int auth;	/* Is client authenticated? */
291 	u32 pid;	/* Process ID */
292 	u32 uid;	/* User ID */
293 	u32 magic;	/* Magic */
294 	u32 iocs;	/* Ioctl count */
295 } drm_client32_t;
296 
297 static int compat_drm_getclient(struct file *file, unsigned int cmd,
298 				unsigned long arg)
299 {
300 	drm_client32_t c32;
301 	drm_client32_t __user *argp = (void __user *)arg;
302 	struct drm_client __user *client;
303 	int idx, err;
304 
305 	if (get_user(idx, &argp->idx))
306 		return -EFAULT;
307 
308 	client = compat_alloc_user_space(sizeof(*client));
309 	if (!client)
310 		return -EFAULT;
311 	if (__put_user(idx, &client->idx))
312 		return -EFAULT;
313 
314 	err = drm_ioctl(file, DRM_IOCTL_GET_CLIENT, (unsigned long)client);
315 	if (err)
316 		return err;
317 
318 	if (__get_user(c32.idx, &client->idx)
319 	    || __get_user(c32.auth, &client->auth)
320 	    || __get_user(c32.pid, &client->pid)
321 	    || __get_user(c32.uid, &client->uid)
322 	    || __get_user(c32.magic, &client->magic)
323 	    || __get_user(c32.iocs, &client->iocs))
324 		return -EFAULT;
325 
326 	if (copy_to_user(argp, &c32, sizeof(c32)))
327 		return -EFAULT;
328 	return 0;
329 }
330 
331 typedef struct drm_stats32 {
332 	u32 count;
333 	struct {
334 		u32 value;
335 		enum drm_stat_type type;
336 	} data[15];
337 } drm_stats32_t;
338 
339 static int compat_drm_getstats(struct file *file, unsigned int cmd,
340 			       unsigned long arg)
341 {
342 	drm_stats32_t s32;
343 	drm_stats32_t __user *argp = (void __user *)arg;
344 	struct drm_stats __user *stats;
345 	int i, err;
346 
347 	memset(&s32, 0, sizeof(drm_stats32_t));
348 	stats = compat_alloc_user_space(sizeof(*stats));
349 	if (!stats)
350 		return -EFAULT;
351 
352 	err = drm_ioctl(file, DRM_IOCTL_GET_STATS, (unsigned long)stats);
353 	if (err)
354 		return err;
355 
356 	if (__get_user(s32.count, &stats->count))
357 		return -EFAULT;
358 	for (i = 0; i < 15; ++i)
359 		if (__get_user(s32.data[i].value, &stats->data[i].value)
360 		    || __get_user(s32.data[i].type, &stats->data[i].type))
361 			return -EFAULT;
362 
363 	if (copy_to_user(argp, &s32, sizeof(s32)))
364 		return -EFAULT;
365 	return 0;
366 }
367 
368 typedef struct drm_buf_desc32 {
369 	int count;		 /* Number of buffers of this size */
370 	int size;		 /* Size in bytes */
371 	int low_mark;		 /* Low water mark */
372 	int high_mark;		 /* High water mark */
373 	int flags;
374 	u32 agp_start;		 /* Start address in the AGP aperture */
375 } drm_buf_desc32_t;
376 
377 static int compat_drm_addbufs(struct file *file, unsigned int cmd,
378 			      unsigned long arg)
379 {
380 	drm_buf_desc32_t __user *argp = (void __user *)arg;
381 	struct drm_buf_desc __user *buf;
382 	int err;
383 	unsigned long agp_start;
384 
385 	buf = compat_alloc_user_space(sizeof(*buf));
386 	if (!buf || !access_ok(VERIFY_WRITE, argp, sizeof(*argp)))
387 		return -EFAULT;
388 
389 	if (__copy_in_user(buf, argp, offsetof(drm_buf_desc32_t, agp_start))
390 	    || __get_user(agp_start, &argp->agp_start)
391 	    || __put_user(agp_start, &buf->agp_start))
392 		return -EFAULT;
393 
394 	err = drm_ioctl(file, DRM_IOCTL_ADD_BUFS, (unsigned long)buf);
395 	if (err)
396 		return err;
397 
398 	if (__copy_in_user(argp, buf, offsetof(drm_buf_desc32_t, agp_start))
399 	    || __get_user(agp_start, &buf->agp_start)
400 	    || __put_user(agp_start, &argp->agp_start))
401 		return -EFAULT;
402 
403 	return 0;
404 }
405 
406 static int compat_drm_markbufs(struct file *file, unsigned int cmd,
407 			       unsigned long arg)
408 {
409 	drm_buf_desc32_t b32;
410 	drm_buf_desc32_t __user *argp = (void __user *)arg;
411 	struct drm_buf_desc __user *buf;
412 
413 	if (copy_from_user(&b32, argp, sizeof(b32)))
414 		return -EFAULT;
415 
416 	buf = compat_alloc_user_space(sizeof(*buf));
417 	if (!buf)
418 		return -EFAULT;
419 
420 	if (__put_user(b32.size, &buf->size)
421 	    || __put_user(b32.low_mark, &buf->low_mark)
422 	    || __put_user(b32.high_mark, &buf->high_mark))
423 		return -EFAULT;
424 
425 	return drm_ioctl(file, DRM_IOCTL_MARK_BUFS, (unsigned long)buf);
426 }
427 
428 typedef struct drm_buf_info32 {
429 	int count;		/**< Entries in list */
430 	u32 list;
431 } drm_buf_info32_t;
432 
433 static int compat_drm_infobufs(struct file *file, unsigned int cmd,
434 			       unsigned long arg)
435 {
436 	drm_buf_info32_t req32;
437 	drm_buf_info32_t __user *argp = (void __user *)arg;
438 	drm_buf_desc32_t __user *to;
439 	struct drm_buf_info __user *request;
440 	struct drm_buf_desc __user *list;
441 	size_t nbytes;
442 	int i, err;
443 	int count, actual;
444 
445 	if (copy_from_user(&req32, argp, sizeof(req32)))
446 		return -EFAULT;
447 
448 	count = req32.count;
449 	to = (drm_buf_desc32_t __user *) (unsigned long)req32.list;
450 	if (count < 0)
451 		count = 0;
452 	if (count > 0
453 	    && !access_ok(VERIFY_WRITE, to, count * sizeof(drm_buf_desc32_t)))
454 		return -EFAULT;
455 
456 	nbytes = sizeof(*request) + count * sizeof(struct drm_buf_desc);
457 	request = compat_alloc_user_space(nbytes);
458 	if (!request)
459 		return -EFAULT;
460 	list = (struct drm_buf_desc *) (request + 1);
461 
462 	if (__put_user(count, &request->count)
463 	    || __put_user(list, &request->list))
464 		return -EFAULT;
465 
466 	err = drm_ioctl(file, DRM_IOCTL_INFO_BUFS, (unsigned long)request);
467 	if (err)
468 		return err;
469 
470 	if (__get_user(actual, &request->count))
471 		return -EFAULT;
472 	if (count >= actual)
473 		for (i = 0; i < actual; ++i)
474 			if (__copy_in_user(&to[i], &list[i],
475 					   offsetof(struct drm_buf_desc, flags)))
476 				return -EFAULT;
477 
478 	if (__put_user(actual, &argp->count))
479 		return -EFAULT;
480 
481 	return 0;
482 }
483 
484 typedef struct drm_buf_pub32 {
485 	int idx;		/**< Index into the master buffer list */
486 	int total;		/**< Buffer size */
487 	int used;		/**< Amount of buffer in use (for DMA) */
488 	u32 address;		/**< Address of buffer */
489 } drm_buf_pub32_t;
490 
491 typedef struct drm_buf_map32 {
492 	int count;		/**< Length of the buffer list */
493 	u32 virtual;		/**< Mmap'd area in user-virtual */
494 	u32 list;		/**< Buffer information */
495 } drm_buf_map32_t;
496 
497 static int compat_drm_mapbufs(struct file *file, unsigned int cmd,
498 			      unsigned long arg)
499 {
500 	drm_buf_map32_t __user *argp = (void __user *)arg;
501 	drm_buf_map32_t req32;
502 	drm_buf_pub32_t __user *list32;
503 	struct drm_buf_map __user *request;
504 	struct drm_buf_pub __user *list;
505 	int i, err;
506 	int count, actual;
507 	size_t nbytes;
508 	void __user *addr;
509 
510 	if (copy_from_user(&req32, argp, sizeof(req32)))
511 		return -EFAULT;
512 	count = req32.count;
513 	list32 = (void __user *)(unsigned long)req32.list;
514 
515 	if (count < 0)
516 		return -EINVAL;
517 	nbytes = sizeof(*request) + count * sizeof(struct drm_buf_pub);
518 	request = compat_alloc_user_space(nbytes);
519 	if (!request)
520 		return -EFAULT;
521 	list = (struct drm_buf_pub *) (request + 1);
522 
523 	if (__put_user(count, &request->count)
524 	    || __put_user(list, &request->list))
525 		return -EFAULT;
526 
527 	err = drm_ioctl(file, DRM_IOCTL_MAP_BUFS, (unsigned long)request);
528 	if (err)
529 		return err;
530 
531 	if (__get_user(actual, &request->count))
532 		return -EFAULT;
533 	if (count >= actual)
534 		for (i = 0; i < actual; ++i)
535 			if (__copy_in_user(&list32[i], &list[i],
536 					   offsetof(struct drm_buf_pub, address))
537 			    || __get_user(addr, &list[i].address)
538 			    || __put_user((unsigned long)addr,
539 					  &list32[i].address))
540 				return -EFAULT;
541 
542 	if (__put_user(actual, &argp->count)
543 	    || __get_user(addr, &request->virtual)
544 	    || __put_user((unsigned long)addr, &argp->virtual))
545 		return -EFAULT;
546 
547 	return 0;
548 }
549 
550 typedef struct drm_buf_free32 {
551 	int count;
552 	u32 list;
553 } drm_buf_free32_t;
554 
555 static int compat_drm_freebufs(struct file *file, unsigned int cmd,
556 			       unsigned long arg)
557 {
558 	drm_buf_free32_t req32;
559 	struct drm_buf_free __user *request;
560 	drm_buf_free32_t __user *argp = (void __user *)arg;
561 
562 	if (copy_from_user(&req32, argp, sizeof(req32)))
563 		return -EFAULT;
564 
565 	request = compat_alloc_user_space(sizeof(*request));
566 	if (!request)
567 		return -EFAULT;
568 	if (__put_user(req32.count, &request->count)
569 	    || __put_user((int __user *)(unsigned long)req32.list,
570 			  &request->list))
571 		return -EFAULT;
572 
573 	return drm_ioctl(file, DRM_IOCTL_FREE_BUFS, (unsigned long)request);
574 }
575 
576 typedef struct drm_ctx_priv_map32 {
577 	unsigned int ctx_id;	 /**< Context requesting private mapping */
578 	u32 handle;		/**< Handle of map */
579 } drm_ctx_priv_map32_t;
580 
581 static int compat_drm_setsareactx(struct file *file, unsigned int cmd,
582 				  unsigned long arg)
583 {
584 	drm_ctx_priv_map32_t req32;
585 	struct drm_ctx_priv_map __user *request;
586 	drm_ctx_priv_map32_t __user *argp = (void __user *)arg;
587 
588 	if (copy_from_user(&req32, argp, sizeof(req32)))
589 		return -EFAULT;
590 
591 	request = compat_alloc_user_space(sizeof(*request));
592 	if (!request)
593 		return -EFAULT;
594 	if (__put_user(req32.ctx_id, &request->ctx_id)
595 	    || __put_user((void *)(unsigned long)req32.handle,
596 			  &request->handle))
597 		return -EFAULT;
598 
599 	return drm_ioctl(file, DRM_IOCTL_SET_SAREA_CTX, (unsigned long)request);
600 }
601 
602 static int compat_drm_getsareactx(struct file *file, unsigned int cmd,
603 				  unsigned long arg)
604 {
605 	struct drm_ctx_priv_map __user *request;
606 	drm_ctx_priv_map32_t __user *argp = (void __user *)arg;
607 	int err;
608 	unsigned int ctx_id;
609 	void *handle;
610 
611 	if (!access_ok(VERIFY_WRITE, argp, sizeof(*argp))
612 	    || __get_user(ctx_id, &argp->ctx_id))
613 		return -EFAULT;
614 
615 	request = compat_alloc_user_space(sizeof(*request));
616 	if (!request)
617 		return -EFAULT;
618 	if (__put_user(ctx_id, &request->ctx_id))
619 		return -EFAULT;
620 
621 	err = drm_ioctl(file, DRM_IOCTL_GET_SAREA_CTX, (unsigned long)request);
622 	if (err)
623 		return err;
624 
625 	if (__get_user(handle, &request->handle)
626 	    || __put_user((unsigned long)handle, &argp->handle))
627 		return -EFAULT;
628 
629 	return 0;
630 }
631 
632 typedef struct drm_ctx_res32 {
633 	int count;
634 	u32 contexts;
635 } drm_ctx_res32_t;
636 
637 static int compat_drm_resctx(struct file *file, unsigned int cmd,
638 			     unsigned long arg)
639 {
640 	drm_ctx_res32_t __user *argp = (void __user *)arg;
641 	drm_ctx_res32_t res32;
642 	struct drm_ctx_res __user *res;
643 	int err;
644 
645 	if (copy_from_user(&res32, argp, sizeof(res32)))
646 		return -EFAULT;
647 
648 	res = compat_alloc_user_space(sizeof(*res));
649 	if (!res)
650 		return -EFAULT;
651 	if (__put_user(res32.count, &res->count)
652 	    || __put_user((struct drm_ctx __user *) (unsigned long)res32.contexts,
653 			  &res->contexts))
654 		return -EFAULT;
655 
656 	err = drm_ioctl(file, DRM_IOCTL_RES_CTX, (unsigned long)res);
657 	if (err)
658 		return err;
659 
660 	if (__get_user(res32.count, &res->count)
661 	    || __put_user(res32.count, &argp->count))
662 		return -EFAULT;
663 
664 	return 0;
665 }
666 
667 typedef struct drm_dma32 {
668 	int context;		  /**< Context handle */
669 	int send_count;		  /**< Number of buffers to send */
670 	u32 send_indices;	  /**< List of handles to buffers */
671 	u32 send_sizes;		  /**< Lengths of data to send */
672 	enum drm_dma_flags flags;		  /**< Flags */
673 	int request_count;	  /**< Number of buffers requested */
674 	int request_size;	  /**< Desired size for buffers */
675 	u32 request_indices;	  /**< Buffer information */
676 	u32 request_sizes;
677 	int granted_count;	  /**< Number of buffers granted */
678 } drm_dma32_t;
679 
680 static int compat_drm_dma(struct file *file, unsigned int cmd,
681 			  unsigned long arg)
682 {
683 	drm_dma32_t d32;
684 	drm_dma32_t __user *argp = (void __user *)arg;
685 	struct drm_dma __user *d;
686 	int err;
687 
688 	if (copy_from_user(&d32, argp, sizeof(d32)))
689 		return -EFAULT;
690 
691 	d = compat_alloc_user_space(sizeof(*d));
692 	if (!d)
693 		return -EFAULT;
694 
695 	if (__put_user(d32.context, &d->context)
696 	    || __put_user(d32.send_count, &d->send_count)
697 	    || __put_user((int __user *)(unsigned long)d32.send_indices,
698 			  &d->send_indices)
699 	    || __put_user((int __user *)(unsigned long)d32.send_sizes,
700 			  &d->send_sizes)
701 	    || __put_user(d32.flags, &d->flags)
702 	    || __put_user(d32.request_count, &d->request_count)
703 	    || __put_user((int __user *)(unsigned long)d32.request_indices,
704 			  &d->request_indices)
705 	    || __put_user((int __user *)(unsigned long)d32.request_sizes,
706 			  &d->request_sizes))
707 		return -EFAULT;
708 
709 	err = drm_ioctl(file, DRM_IOCTL_DMA, (unsigned long)d);
710 	if (err)
711 		return err;
712 
713 	if (__get_user(d32.request_size, &d->request_size)
714 	    || __get_user(d32.granted_count, &d->granted_count)
715 	    || __put_user(d32.request_size, &argp->request_size)
716 	    || __put_user(d32.granted_count, &argp->granted_count))
717 		return -EFAULT;
718 
719 	return 0;
720 }
721 
722 #if IS_ENABLED(CONFIG_AGP)
723 typedef struct drm_agp_mode32 {
724 	u32 mode;	/**< AGP mode */
725 } drm_agp_mode32_t;
726 
727 static int compat_drm_agp_enable(struct file *file, unsigned int cmd,
728 				 unsigned long arg)
729 {
730 	drm_agp_mode32_t __user *argp = (void __user *)arg;
731 	drm_agp_mode32_t m32;
732 	struct drm_agp_mode __user *mode;
733 
734 	if (get_user(m32.mode, &argp->mode))
735 		return -EFAULT;
736 
737 	mode = compat_alloc_user_space(sizeof(*mode));
738 	if (put_user(m32.mode, &mode->mode))
739 		return -EFAULT;
740 
741 	return drm_ioctl(file, DRM_IOCTL_AGP_ENABLE, (unsigned long)mode);
742 }
743 
744 typedef struct drm_agp_info32 {
745 	int agp_version_major;
746 	int agp_version_minor;
747 	u32 mode;
748 	u32 aperture_base;	/* physical address */
749 	u32 aperture_size;	/* bytes */
750 	u32 memory_allowed;	/* bytes */
751 	u32 memory_used;
752 
753 	/* PCI information */
754 	unsigned short id_vendor;
755 	unsigned short id_device;
756 } drm_agp_info32_t;
757 
758 static int compat_drm_agp_info(struct file *file, unsigned int cmd,
759 			       unsigned long arg)
760 {
761 	drm_agp_info32_t __user *argp = (void __user *)arg;
762 	drm_agp_info32_t i32;
763 	struct drm_agp_info __user *info;
764 	int err;
765 
766 	info = compat_alloc_user_space(sizeof(*info));
767 	if (!info)
768 		return -EFAULT;
769 
770 	err = drm_ioctl(file, DRM_IOCTL_AGP_INFO, (unsigned long)info);
771 	if (err)
772 		return err;
773 
774 	if (__get_user(i32.agp_version_major, &info->agp_version_major)
775 	    || __get_user(i32.agp_version_minor, &info->agp_version_minor)
776 	    || __get_user(i32.mode, &info->mode)
777 	    || __get_user(i32.aperture_base, &info->aperture_base)
778 	    || __get_user(i32.aperture_size, &info->aperture_size)
779 	    || __get_user(i32.memory_allowed, &info->memory_allowed)
780 	    || __get_user(i32.memory_used, &info->memory_used)
781 	    || __get_user(i32.id_vendor, &info->id_vendor)
782 	    || __get_user(i32.id_device, &info->id_device))
783 		return -EFAULT;
784 
785 	if (copy_to_user(argp, &i32, sizeof(i32)))
786 		return -EFAULT;
787 
788 	return 0;
789 }
790 
791 typedef struct drm_agp_buffer32 {
792 	u32 size;	/**< In bytes -- will round to page boundary */
793 	u32 handle;	/**< Used for binding / unbinding */
794 	u32 type;	/**< Type of memory to allocate */
795 	u32 physical;	/**< Physical used by i810 */
796 } drm_agp_buffer32_t;
797 
798 static int compat_drm_agp_alloc(struct file *file, unsigned int cmd,
799 				unsigned long arg)
800 {
801 	drm_agp_buffer32_t __user *argp = (void __user *)arg;
802 	drm_agp_buffer32_t req32;
803 	struct drm_agp_buffer __user *request;
804 	int err;
805 
806 	if (copy_from_user(&req32, argp, sizeof(req32)))
807 		return -EFAULT;
808 
809 	request = compat_alloc_user_space(sizeof(*request));
810 	if (!request
811 	    || __put_user(req32.size, &request->size)
812 	    || __put_user(req32.type, &request->type))
813 		return -EFAULT;
814 
815 	err = drm_ioctl(file, DRM_IOCTL_AGP_ALLOC, (unsigned long)request);
816 	if (err)
817 		return err;
818 
819 	if (__get_user(req32.handle, &request->handle)
820 	    || __get_user(req32.physical, &request->physical)
821 	    || copy_to_user(argp, &req32, sizeof(req32))) {
822 		drm_ioctl(file, DRM_IOCTL_AGP_FREE, (unsigned long)request);
823 		return -EFAULT;
824 	}
825 
826 	return 0;
827 }
828 
829 static int compat_drm_agp_free(struct file *file, unsigned int cmd,
830 			       unsigned long arg)
831 {
832 	drm_agp_buffer32_t __user *argp = (void __user *)arg;
833 	struct drm_agp_buffer __user *request;
834 	u32 handle;
835 
836 	request = compat_alloc_user_space(sizeof(*request));
837 	if (!request
838 	    || get_user(handle, &argp->handle)
839 	    || __put_user(handle, &request->handle))
840 		return -EFAULT;
841 
842 	return drm_ioctl(file, DRM_IOCTL_AGP_FREE, (unsigned long)request);
843 }
844 
845 typedef struct drm_agp_binding32 {
846 	u32 handle;	/**< From drm_agp_buffer */
847 	u32 offset;	/**< In bytes -- will round to page boundary */
848 } drm_agp_binding32_t;
849 
850 static int compat_drm_agp_bind(struct file *file, unsigned int cmd,
851 			       unsigned long arg)
852 {
853 	drm_agp_binding32_t __user *argp = (void __user *)arg;
854 	drm_agp_binding32_t req32;
855 	struct drm_agp_binding __user *request;
856 
857 	if (copy_from_user(&req32, argp, sizeof(req32)))
858 		return -EFAULT;
859 
860 	request = compat_alloc_user_space(sizeof(*request));
861 	if (!request
862 	    || __put_user(req32.handle, &request->handle)
863 	    || __put_user(req32.offset, &request->offset))
864 		return -EFAULT;
865 
866 	return drm_ioctl(file, DRM_IOCTL_AGP_BIND, (unsigned long)request);
867 }
868 
869 static int compat_drm_agp_unbind(struct file *file, unsigned int cmd,
870 				 unsigned long arg)
871 {
872 	drm_agp_binding32_t __user *argp = (void __user *)arg;
873 	struct drm_agp_binding __user *request;
874 	u32 handle;
875 
876 	request = compat_alloc_user_space(sizeof(*request));
877 	if (!request
878 	    || get_user(handle, &argp->handle)
879 	    || __put_user(handle, &request->handle))
880 		return -EFAULT;
881 
882 	return drm_ioctl(file, DRM_IOCTL_AGP_UNBIND, (unsigned long)request);
883 }
884 #endif /* CONFIG_AGP */
885 
886 typedef struct drm_scatter_gather32 {
887 	u32 size;	/**< In bytes -- will round to page boundary */
888 	u32 handle;	/**< Used for mapping / unmapping */
889 } drm_scatter_gather32_t;
890 
891 static int compat_drm_sg_alloc(struct file *file, unsigned int cmd,
892 			       unsigned long arg)
893 {
894 	drm_scatter_gather32_t __user *argp = (void __user *)arg;
895 	struct drm_scatter_gather __user *request;
896 	int err;
897 	unsigned long x;
898 
899 	request = compat_alloc_user_space(sizeof(*request));
900 	if (!request || !access_ok(VERIFY_WRITE, argp, sizeof(*argp))
901 	    || __get_user(x, &argp->size)
902 	    || __put_user(x, &request->size))
903 		return -EFAULT;
904 
905 	err = drm_ioctl(file, DRM_IOCTL_SG_ALLOC, (unsigned long)request);
906 	if (err)
907 		return err;
908 
909 	/* XXX not sure about the handle conversion here... */
910 	if (__get_user(x, &request->handle)
911 	    || __put_user(x >> PAGE_SHIFT, &argp->handle))
912 		return -EFAULT;
913 
914 	return 0;
915 }
916 
917 static int compat_drm_sg_free(struct file *file, unsigned int cmd,
918 			      unsigned long arg)
919 {
920 	drm_scatter_gather32_t __user *argp = (void __user *)arg;
921 	struct drm_scatter_gather __user *request;
922 	unsigned long x;
923 
924 	request = compat_alloc_user_space(sizeof(*request));
925 	if (!request || !access_ok(VERIFY_WRITE, argp, sizeof(*argp))
926 	    || __get_user(x, &argp->handle)
927 	    || __put_user(x << PAGE_SHIFT, &request->handle))
928 		return -EFAULT;
929 
930 	return drm_ioctl(file, DRM_IOCTL_SG_FREE, (unsigned long)request);
931 }
932 
933 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
934 typedef struct drm_update_draw32 {
935 	drm_drawable_t handle;
936 	unsigned int type;
937 	unsigned int num;
938 	/* 64-bit version has a 32-bit pad here */
939 	u64 data;	/**< Pointer */
940 } __attribute__((packed)) drm_update_draw32_t;
941 
942 static int compat_drm_update_draw(struct file *file, unsigned int cmd,
943 				  unsigned long arg)
944 {
945 	drm_update_draw32_t update32;
946 	struct drm_update_draw __user *request;
947 	int err;
948 
949 	if (copy_from_user(&update32, (void __user *)arg, sizeof(update32)))
950 		return -EFAULT;
951 
952 	request = compat_alloc_user_space(sizeof(*request));
953 	if (!request ||
954 	    __put_user(update32.handle, &request->handle) ||
955 	    __put_user(update32.type, &request->type) ||
956 	    __put_user(update32.num, &request->num) ||
957 	    __put_user(update32.data, &request->data))
958 		return -EFAULT;
959 
960 	err = drm_ioctl(file, DRM_IOCTL_UPDATE_DRAW, (unsigned long)request);
961 	return err;
962 }
963 #endif
964 
965 struct drm_wait_vblank_request32 {
966 	enum drm_vblank_seq_type type;
967 	unsigned int sequence;
968 	u32 signal;
969 };
970 
971 struct drm_wait_vblank_reply32 {
972 	enum drm_vblank_seq_type type;
973 	unsigned int sequence;
974 	s32 tval_sec;
975 	s32 tval_usec;
976 };
977 
978 typedef union drm_wait_vblank32 {
979 	struct drm_wait_vblank_request32 request;
980 	struct drm_wait_vblank_reply32 reply;
981 } drm_wait_vblank32_t;
982 
983 static int compat_drm_wait_vblank(struct file *file, unsigned int cmd,
984 				  unsigned long arg)
985 {
986 	drm_wait_vblank32_t __user *argp = (void __user *)arg;
987 	drm_wait_vblank32_t req32;
988 	union drm_wait_vblank __user *request;
989 	int err;
990 
991 	if (copy_from_user(&req32, argp, sizeof(req32)))
992 		return -EFAULT;
993 
994 	request = compat_alloc_user_space(sizeof(*request));
995 	if (!request
996 	    || __put_user(req32.request.type, &request->request.type)
997 	    || __put_user(req32.request.sequence, &request->request.sequence)
998 	    || __put_user(req32.request.signal, &request->request.signal))
999 		return -EFAULT;
1000 
1001 	err = drm_ioctl(file, DRM_IOCTL_WAIT_VBLANK, (unsigned long)request);
1002 	if (err)
1003 		return err;
1004 
1005 	if (__get_user(req32.reply.type, &request->reply.type)
1006 	    || __get_user(req32.reply.sequence, &request->reply.sequence)
1007 	    || __get_user(req32.reply.tval_sec, &request->reply.tval_sec)
1008 	    || __get_user(req32.reply.tval_usec, &request->reply.tval_usec))
1009 		return -EFAULT;
1010 
1011 	if (copy_to_user(argp, &req32, sizeof(req32)))
1012 		return -EFAULT;
1013 
1014 	return 0;
1015 }
1016 
1017 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
1018 typedef struct drm_mode_fb_cmd232 {
1019 	u32 fb_id;
1020 	u32 width;
1021 	u32 height;
1022 	u32 pixel_format;
1023 	u32 flags;
1024 	u32 handles[4];
1025 	u32 pitches[4];
1026 	u32 offsets[4];
1027 	u64 modifier[4];
1028 } __attribute__((packed)) drm_mode_fb_cmd232_t;
1029 
1030 static int compat_drm_mode_addfb2(struct file *file, unsigned int cmd,
1031 				  unsigned long arg)
1032 {
1033 	struct drm_mode_fb_cmd232 __user *argp = (void __user *)arg;
1034 	struct drm_mode_fb_cmd232 req32;
1035 	struct drm_mode_fb_cmd2 __user *req64;
1036 	int i;
1037 	int err;
1038 
1039 	if (copy_from_user(&req32, argp, sizeof(req32)))
1040 		return -EFAULT;
1041 
1042 	req64 = compat_alloc_user_space(sizeof(*req64));
1043 
1044 	if (!access_ok(VERIFY_WRITE, req64, sizeof(*req64))
1045 	    || __put_user(req32.width, &req64->width)
1046 	    || __put_user(req32.height, &req64->height)
1047 	    || __put_user(req32.pixel_format, &req64->pixel_format)
1048 	    || __put_user(req32.flags, &req64->flags))
1049 		return -EFAULT;
1050 
1051 	for (i = 0; i < 4; i++) {
1052 		if (__put_user(req32.handles[i], &req64->handles[i]))
1053 			return -EFAULT;
1054 		if (__put_user(req32.pitches[i], &req64->pitches[i]))
1055 			return -EFAULT;
1056 		if (__put_user(req32.offsets[i], &req64->offsets[i]))
1057 			return -EFAULT;
1058 		if (__put_user(req32.modifier[i], &req64->modifier[i]))
1059 			return -EFAULT;
1060 	}
1061 
1062 	err = drm_ioctl(file, DRM_IOCTL_MODE_ADDFB2, (unsigned long)req64);
1063 	if (err)
1064 		return err;
1065 
1066 	if (__get_user(req32.fb_id, &req64->fb_id))
1067 		return -EFAULT;
1068 
1069 	if (copy_to_user(argp, &req32, sizeof(req32)))
1070 		return -EFAULT;
1071 
1072 	return 0;
1073 }
1074 #endif
1075 
1076 static drm_ioctl_compat_t *drm_compat_ioctls[] = {
1077 	[DRM_IOCTL_NR(DRM_IOCTL_VERSION32)] = compat_drm_version,
1078 	[DRM_IOCTL_NR(DRM_IOCTL_GET_UNIQUE32)] = compat_drm_getunique,
1079 	[DRM_IOCTL_NR(DRM_IOCTL_GET_MAP32)] = compat_drm_getmap,
1080 	[DRM_IOCTL_NR(DRM_IOCTL_GET_CLIENT32)] = compat_drm_getclient,
1081 	[DRM_IOCTL_NR(DRM_IOCTL_GET_STATS32)] = compat_drm_getstats,
1082 	[DRM_IOCTL_NR(DRM_IOCTL_SET_UNIQUE32)] = compat_drm_setunique,
1083 	[DRM_IOCTL_NR(DRM_IOCTL_ADD_MAP32)] = compat_drm_addmap,
1084 	[DRM_IOCTL_NR(DRM_IOCTL_ADD_BUFS32)] = compat_drm_addbufs,
1085 	[DRM_IOCTL_NR(DRM_IOCTL_MARK_BUFS32)] = compat_drm_markbufs,
1086 	[DRM_IOCTL_NR(DRM_IOCTL_INFO_BUFS32)] = compat_drm_infobufs,
1087 	[DRM_IOCTL_NR(DRM_IOCTL_MAP_BUFS32)] = compat_drm_mapbufs,
1088 	[DRM_IOCTL_NR(DRM_IOCTL_FREE_BUFS32)] = compat_drm_freebufs,
1089 	[DRM_IOCTL_NR(DRM_IOCTL_RM_MAP32)] = compat_drm_rmmap,
1090 	[DRM_IOCTL_NR(DRM_IOCTL_SET_SAREA_CTX32)] = compat_drm_setsareactx,
1091 	[DRM_IOCTL_NR(DRM_IOCTL_GET_SAREA_CTX32)] = compat_drm_getsareactx,
1092 	[DRM_IOCTL_NR(DRM_IOCTL_RES_CTX32)] = compat_drm_resctx,
1093 	[DRM_IOCTL_NR(DRM_IOCTL_DMA32)] = compat_drm_dma,
1094 #if IS_ENABLED(CONFIG_AGP)
1095 	[DRM_IOCTL_NR(DRM_IOCTL_AGP_ENABLE32)] = compat_drm_agp_enable,
1096 	[DRM_IOCTL_NR(DRM_IOCTL_AGP_INFO32)] = compat_drm_agp_info,
1097 	[DRM_IOCTL_NR(DRM_IOCTL_AGP_ALLOC32)] = compat_drm_agp_alloc,
1098 	[DRM_IOCTL_NR(DRM_IOCTL_AGP_FREE32)] = compat_drm_agp_free,
1099 	[DRM_IOCTL_NR(DRM_IOCTL_AGP_BIND32)] = compat_drm_agp_bind,
1100 	[DRM_IOCTL_NR(DRM_IOCTL_AGP_UNBIND32)] = compat_drm_agp_unbind,
1101 #endif
1102 	[DRM_IOCTL_NR(DRM_IOCTL_SG_ALLOC32)] = compat_drm_sg_alloc,
1103 	[DRM_IOCTL_NR(DRM_IOCTL_SG_FREE32)] = compat_drm_sg_free,
1104 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
1105 	[DRM_IOCTL_NR(DRM_IOCTL_UPDATE_DRAW32)] = compat_drm_update_draw,
1106 #endif
1107 	[DRM_IOCTL_NR(DRM_IOCTL_WAIT_VBLANK32)] = compat_drm_wait_vblank,
1108 #if defined(CONFIG_X86) || defined(CONFIG_IA64)
1109 	[DRM_IOCTL_NR(DRM_IOCTL_MODE_ADDFB232)] = compat_drm_mode_addfb2,
1110 #endif
1111 };
1112 
1113 /**
1114  * drm_compat_ioctl - 32bit IOCTL compatibility handler for DRM drivers
1115  * @filp: file this ioctl is called on
1116  * @cmd: ioctl cmd number
1117  * @arg: user argument
1118  *
1119  * Compatibility handler for 32 bit userspace running on 64 kernels. All actual
1120  * IOCTL handling is forwarded to drm_ioctl(), while marshalling structures as
1121  * appropriate. Note that this only handles DRM core IOCTLs, if the driver has
1122  * botched IOCTL itself, it must handle those by wrapping this function.
1123  *
1124  * Returns:
1125  * Zero on success, negative error code on failure.
1126  */
1127 long drm_compat_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
1128 {
1129 	unsigned int nr = DRM_IOCTL_NR(cmd);
1130 	drm_ioctl_compat_t *fn;
1131 	int ret;
1132 
1133 	/* Assume that ioctls without an explicit compat routine will just
1134 	 * work.  This may not always be a good assumption, but it's better
1135 	 * than always failing.
1136 	 */
1137 	if (nr >= ARRAY_SIZE(drm_compat_ioctls))
1138 		return drm_ioctl(filp, cmd, arg);
1139 
1140 	fn = drm_compat_ioctls[nr];
1141 
1142 	if (fn != NULL)
1143 		ret = (*fn) (filp, cmd, arg);
1144 	else
1145 		ret = drm_ioctl(filp, cmd, arg);
1146 
1147 	return ret;
1148 }
1149 EXPORT_SYMBOL(drm_compat_ioctl);
1150