xref: /openbmc/linux/drivers/media/usb/uvc/uvc_v4l2.c (revision 2c684d89)
1 /*
2  *      uvc_v4l2.c  --  USB Video Class driver - V4L2 API
3  *
4  *      Copyright (C) 2005-2010
5  *          Laurent Pinchart (laurent.pinchart@ideasonboard.com)
6  *
7  *      This program is free software; you can redistribute it and/or modify
8  *      it under the terms of the GNU General Public License as published by
9  *      the Free Software Foundation; either version 2 of the License, or
10  *      (at your option) any later version.
11  *
12  */
13 
14 #include <linux/compat.h>
15 #include <linux/kernel.h>
16 #include <linux/list.h>
17 #include <linux/module.h>
18 #include <linux/slab.h>
19 #include <linux/usb.h>
20 #include <linux/videodev2.h>
21 #include <linux/vmalloc.h>
22 #include <linux/mm.h>
23 #include <linux/wait.h>
24 #include <linux/atomic.h>
25 
26 #include <media/v4l2-common.h>
27 #include <media/v4l2-ctrls.h>
28 #include <media/v4l2-event.h>
29 #include <media/v4l2-ioctl.h>
30 
31 #include "uvcvideo.h"
32 
33 /* ------------------------------------------------------------------------
34  * UVC ioctls
35  */
36 static int uvc_ioctl_ctrl_map(struct uvc_video_chain *chain,
37 	struct uvc_xu_control_mapping *xmap)
38 {
39 	struct uvc_control_mapping *map;
40 	unsigned int size;
41 	int ret;
42 
43 	map = kzalloc(sizeof *map, GFP_KERNEL);
44 	if (map == NULL)
45 		return -ENOMEM;
46 
47 	map->id = xmap->id;
48 	memcpy(map->name, xmap->name, sizeof map->name);
49 	memcpy(map->entity, xmap->entity, sizeof map->entity);
50 	map->selector = xmap->selector;
51 	map->size = xmap->size;
52 	map->offset = xmap->offset;
53 	map->v4l2_type = xmap->v4l2_type;
54 	map->data_type = xmap->data_type;
55 
56 	switch (xmap->v4l2_type) {
57 	case V4L2_CTRL_TYPE_INTEGER:
58 	case V4L2_CTRL_TYPE_BOOLEAN:
59 	case V4L2_CTRL_TYPE_BUTTON:
60 		break;
61 
62 	case V4L2_CTRL_TYPE_MENU:
63 		/* Prevent excessive memory consumption, as well as integer
64 		 * overflows.
65 		 */
66 		if (xmap->menu_count == 0 ||
67 		    xmap->menu_count > UVC_MAX_CONTROL_MENU_ENTRIES) {
68 			ret = -EINVAL;
69 			goto done;
70 		}
71 
72 		size = xmap->menu_count * sizeof(*map->menu_info);
73 		map->menu_info = kmalloc(size, GFP_KERNEL);
74 		if (map->menu_info == NULL) {
75 			ret = -ENOMEM;
76 			goto done;
77 		}
78 
79 		if (copy_from_user(map->menu_info, xmap->menu_info, size)) {
80 			ret = -EFAULT;
81 			goto done;
82 		}
83 
84 		map->menu_count = xmap->menu_count;
85 		break;
86 
87 	default:
88 		uvc_trace(UVC_TRACE_CONTROL, "Unsupported V4L2 control type "
89 			  "%u.\n", xmap->v4l2_type);
90 		ret = -ENOTTY;
91 		goto done;
92 	}
93 
94 	ret = uvc_ctrl_add_mapping(chain, map);
95 
96 done:
97 	kfree(map->menu_info);
98 	kfree(map);
99 
100 	return ret;
101 }
102 
103 /* ------------------------------------------------------------------------
104  * V4L2 interface
105  */
106 
107 /*
108  * Find the frame interval closest to the requested frame interval for the
109  * given frame format and size. This should be done by the device as part of
110  * the Video Probe and Commit negotiation, but some hardware don't implement
111  * that feature.
112  */
113 static __u32 uvc_try_frame_interval(struct uvc_frame *frame, __u32 interval)
114 {
115 	unsigned int i;
116 
117 	if (frame->bFrameIntervalType) {
118 		__u32 best = -1, dist;
119 
120 		for (i = 0; i < frame->bFrameIntervalType; ++i) {
121 			dist = interval > frame->dwFrameInterval[i]
122 			     ? interval - frame->dwFrameInterval[i]
123 			     : frame->dwFrameInterval[i] - interval;
124 
125 			if (dist > best)
126 				break;
127 
128 			best = dist;
129 		}
130 
131 		interval = frame->dwFrameInterval[i-1];
132 	} else {
133 		const __u32 min = frame->dwFrameInterval[0];
134 		const __u32 max = frame->dwFrameInterval[1];
135 		const __u32 step = frame->dwFrameInterval[2];
136 
137 		interval = min + (interval - min + step/2) / step * step;
138 		if (interval > max)
139 			interval = max;
140 	}
141 
142 	return interval;
143 }
144 
145 static int uvc_v4l2_try_format(struct uvc_streaming *stream,
146 	struct v4l2_format *fmt, struct uvc_streaming_control *probe,
147 	struct uvc_format **uvc_format, struct uvc_frame **uvc_frame)
148 {
149 	struct uvc_format *format = NULL;
150 	struct uvc_frame *frame = NULL;
151 	__u16 rw, rh;
152 	unsigned int d, maxd;
153 	unsigned int i;
154 	__u32 interval;
155 	int ret = 0;
156 	__u8 *fcc;
157 
158 	if (fmt->type != stream->type)
159 		return -EINVAL;
160 
161 	fcc = (__u8 *)&fmt->fmt.pix.pixelformat;
162 	uvc_trace(UVC_TRACE_FORMAT, "Trying format 0x%08x (%c%c%c%c): %ux%u.\n",
163 			fmt->fmt.pix.pixelformat,
164 			fcc[0], fcc[1], fcc[2], fcc[3],
165 			fmt->fmt.pix.width, fmt->fmt.pix.height);
166 
167 	/* Check if the hardware supports the requested format, use the default
168 	 * format otherwise.
169 	 */
170 	for (i = 0; i < stream->nformats; ++i) {
171 		format = &stream->format[i];
172 		if (format->fcc == fmt->fmt.pix.pixelformat)
173 			break;
174 	}
175 
176 	if (i == stream->nformats) {
177 		format = stream->def_format;
178 		fmt->fmt.pix.pixelformat = format->fcc;
179 	}
180 
181 	/* Find the closest image size. The distance between image sizes is
182 	 * the size in pixels of the non-overlapping regions between the
183 	 * requested size and the frame-specified size.
184 	 */
185 	rw = fmt->fmt.pix.width;
186 	rh = fmt->fmt.pix.height;
187 	maxd = (unsigned int)-1;
188 
189 	for (i = 0; i < format->nframes; ++i) {
190 		__u16 w = format->frame[i].wWidth;
191 		__u16 h = format->frame[i].wHeight;
192 
193 		d = min(w, rw) * min(h, rh);
194 		d = w*h + rw*rh - 2*d;
195 		if (d < maxd) {
196 			maxd = d;
197 			frame = &format->frame[i];
198 		}
199 
200 		if (maxd == 0)
201 			break;
202 	}
203 
204 	if (frame == NULL) {
205 		uvc_trace(UVC_TRACE_FORMAT, "Unsupported size %ux%u.\n",
206 				fmt->fmt.pix.width, fmt->fmt.pix.height);
207 		return -EINVAL;
208 	}
209 
210 	/* Use the default frame interval. */
211 	interval = frame->dwDefaultFrameInterval;
212 	uvc_trace(UVC_TRACE_FORMAT, "Using default frame interval %u.%u us "
213 		"(%u.%u fps).\n", interval/10, interval%10, 10000000/interval,
214 		(100000000/interval)%10);
215 
216 	/* Set the format index, frame index and frame interval. */
217 	memset(probe, 0, sizeof *probe);
218 	probe->bmHint = 1;	/* dwFrameInterval */
219 	probe->bFormatIndex = format->index;
220 	probe->bFrameIndex = frame->bFrameIndex;
221 	probe->dwFrameInterval = uvc_try_frame_interval(frame, interval);
222 	/* Some webcams stall the probe control set request when the
223 	 * dwMaxVideoFrameSize field is set to zero. The UVC specification
224 	 * clearly states that the field is read-only from the host, so this
225 	 * is a webcam bug. Set dwMaxVideoFrameSize to the value reported by
226 	 * the webcam to work around the problem.
227 	 *
228 	 * The workaround could probably be enabled for all webcams, so the
229 	 * quirk can be removed if needed. It's currently useful to detect
230 	 * webcam bugs and fix them before they hit the market (providing
231 	 * developers test their webcams with the Linux driver as well as with
232 	 * the Windows driver).
233 	 */
234 	mutex_lock(&stream->mutex);
235 	if (stream->dev->quirks & UVC_QUIRK_PROBE_EXTRAFIELDS)
236 		probe->dwMaxVideoFrameSize =
237 			stream->ctrl.dwMaxVideoFrameSize;
238 
239 	/* Probe the device. */
240 	ret = uvc_probe_video(stream, probe);
241 	mutex_unlock(&stream->mutex);
242 	if (ret < 0)
243 		goto done;
244 
245 	fmt->fmt.pix.width = frame->wWidth;
246 	fmt->fmt.pix.height = frame->wHeight;
247 	fmt->fmt.pix.field = V4L2_FIELD_NONE;
248 	fmt->fmt.pix.bytesperline = format->bpp * frame->wWidth / 8;
249 	fmt->fmt.pix.sizeimage = probe->dwMaxVideoFrameSize;
250 	fmt->fmt.pix.colorspace = format->colorspace;
251 	fmt->fmt.pix.priv = 0;
252 
253 	if (uvc_format != NULL)
254 		*uvc_format = format;
255 	if (uvc_frame != NULL)
256 		*uvc_frame = frame;
257 
258 done:
259 	return ret;
260 }
261 
262 static int uvc_v4l2_get_format(struct uvc_streaming *stream,
263 	struct v4l2_format *fmt)
264 {
265 	struct uvc_format *format;
266 	struct uvc_frame *frame;
267 	int ret = 0;
268 
269 	if (fmt->type != stream->type)
270 		return -EINVAL;
271 
272 	mutex_lock(&stream->mutex);
273 	format = stream->cur_format;
274 	frame = stream->cur_frame;
275 
276 	if (format == NULL || frame == NULL) {
277 		ret = -EINVAL;
278 		goto done;
279 	}
280 
281 	fmt->fmt.pix.pixelformat = format->fcc;
282 	fmt->fmt.pix.width = frame->wWidth;
283 	fmt->fmt.pix.height = frame->wHeight;
284 	fmt->fmt.pix.field = V4L2_FIELD_NONE;
285 	fmt->fmt.pix.bytesperline = format->bpp * frame->wWidth / 8;
286 	fmt->fmt.pix.sizeimage = stream->ctrl.dwMaxVideoFrameSize;
287 	fmt->fmt.pix.colorspace = format->colorspace;
288 	fmt->fmt.pix.priv = 0;
289 
290 done:
291 	mutex_unlock(&stream->mutex);
292 	return ret;
293 }
294 
295 static int uvc_v4l2_set_format(struct uvc_streaming *stream,
296 	struct v4l2_format *fmt)
297 {
298 	struct uvc_streaming_control probe;
299 	struct uvc_format *format;
300 	struct uvc_frame *frame;
301 	int ret;
302 
303 	if (fmt->type != stream->type)
304 		return -EINVAL;
305 
306 	ret = uvc_v4l2_try_format(stream, fmt, &probe, &format, &frame);
307 	if (ret < 0)
308 		return ret;
309 
310 	mutex_lock(&stream->mutex);
311 
312 	if (uvc_queue_allocated(&stream->queue)) {
313 		ret = -EBUSY;
314 		goto done;
315 	}
316 
317 	stream->ctrl = probe;
318 	stream->cur_format = format;
319 	stream->cur_frame = frame;
320 
321 done:
322 	mutex_unlock(&stream->mutex);
323 	return ret;
324 }
325 
326 static int uvc_v4l2_get_streamparm(struct uvc_streaming *stream,
327 		struct v4l2_streamparm *parm)
328 {
329 	uint32_t numerator, denominator;
330 
331 	if (parm->type != stream->type)
332 		return -EINVAL;
333 
334 	mutex_lock(&stream->mutex);
335 	numerator = stream->ctrl.dwFrameInterval;
336 	mutex_unlock(&stream->mutex);
337 
338 	denominator = 10000000;
339 	uvc_simplify_fraction(&numerator, &denominator, 8, 333);
340 
341 	memset(parm, 0, sizeof *parm);
342 	parm->type = stream->type;
343 
344 	if (stream->type == V4L2_BUF_TYPE_VIDEO_CAPTURE) {
345 		parm->parm.capture.capability = V4L2_CAP_TIMEPERFRAME;
346 		parm->parm.capture.capturemode = 0;
347 		parm->parm.capture.timeperframe.numerator = numerator;
348 		parm->parm.capture.timeperframe.denominator = denominator;
349 		parm->parm.capture.extendedmode = 0;
350 		parm->parm.capture.readbuffers = 0;
351 	} else {
352 		parm->parm.output.capability = V4L2_CAP_TIMEPERFRAME;
353 		parm->parm.output.outputmode = 0;
354 		parm->parm.output.timeperframe.numerator = numerator;
355 		parm->parm.output.timeperframe.denominator = denominator;
356 	}
357 
358 	return 0;
359 }
360 
361 static int uvc_v4l2_set_streamparm(struct uvc_streaming *stream,
362 		struct v4l2_streamparm *parm)
363 {
364 	struct uvc_streaming_control probe;
365 	struct v4l2_fract timeperframe;
366 	uint32_t interval;
367 	int ret;
368 
369 	if (parm->type != stream->type)
370 		return -EINVAL;
371 
372 	if (parm->type == V4L2_BUF_TYPE_VIDEO_CAPTURE)
373 		timeperframe = parm->parm.capture.timeperframe;
374 	else
375 		timeperframe = parm->parm.output.timeperframe;
376 
377 	interval = uvc_fraction_to_interval(timeperframe.numerator,
378 		timeperframe.denominator);
379 	uvc_trace(UVC_TRACE_FORMAT, "Setting frame interval to %u/%u (%u).\n",
380 		timeperframe.numerator, timeperframe.denominator, interval);
381 
382 	mutex_lock(&stream->mutex);
383 
384 	if (uvc_queue_streaming(&stream->queue)) {
385 		mutex_unlock(&stream->mutex);
386 		return -EBUSY;
387 	}
388 
389 	probe = stream->ctrl;
390 	probe.dwFrameInterval =
391 		uvc_try_frame_interval(stream->cur_frame, interval);
392 
393 	/* Probe the device with the new settings. */
394 	ret = uvc_probe_video(stream, &probe);
395 	if (ret < 0) {
396 		mutex_unlock(&stream->mutex);
397 		return ret;
398 	}
399 
400 	stream->ctrl = probe;
401 	mutex_unlock(&stream->mutex);
402 
403 	/* Return the actual frame period. */
404 	timeperframe.numerator = probe.dwFrameInterval;
405 	timeperframe.denominator = 10000000;
406 	uvc_simplify_fraction(&timeperframe.numerator,
407 		&timeperframe.denominator, 8, 333);
408 
409 	if (parm->type == V4L2_BUF_TYPE_VIDEO_CAPTURE)
410 		parm->parm.capture.timeperframe = timeperframe;
411 	else
412 		parm->parm.output.timeperframe = timeperframe;
413 
414 	return 0;
415 }
416 
417 /* ------------------------------------------------------------------------
418  * Privilege management
419  */
420 
421 /*
422  * Privilege management is the multiple-open implementation basis. The current
423  * implementation is completely transparent for the end-user and doesn't
424  * require explicit use of the VIDIOC_G_PRIORITY and VIDIOC_S_PRIORITY ioctls.
425  * Those ioctls enable finer control on the device (by making possible for a
426  * user to request exclusive access to a device), but are not mature yet.
427  * Switching to the V4L2 priority mechanism might be considered in the future
428  * if this situation changes.
429  *
430  * Each open instance of a UVC device can either be in a privileged or
431  * unprivileged state. Only a single instance can be in a privileged state at
432  * a given time. Trying to perform an operation that requires privileges will
433  * automatically acquire the required privileges if possible, or return -EBUSY
434  * otherwise. Privileges are dismissed when closing the instance or when
435  * freeing the video buffers using VIDIOC_REQBUFS.
436  *
437  * Operations that require privileges are:
438  *
439  * - VIDIOC_S_INPUT
440  * - VIDIOC_S_PARM
441  * - VIDIOC_S_FMT
442  * - VIDIOC_REQBUFS
443  */
444 static int uvc_acquire_privileges(struct uvc_fh *handle)
445 {
446 	/* Always succeed if the handle is already privileged. */
447 	if (handle->state == UVC_HANDLE_ACTIVE)
448 		return 0;
449 
450 	/* Check if the device already has a privileged handle. */
451 	if (atomic_inc_return(&handle->stream->active) != 1) {
452 		atomic_dec(&handle->stream->active);
453 		return -EBUSY;
454 	}
455 
456 	handle->state = UVC_HANDLE_ACTIVE;
457 	return 0;
458 }
459 
460 static void uvc_dismiss_privileges(struct uvc_fh *handle)
461 {
462 	if (handle->state == UVC_HANDLE_ACTIVE)
463 		atomic_dec(&handle->stream->active);
464 
465 	handle->state = UVC_HANDLE_PASSIVE;
466 }
467 
468 static int uvc_has_privileges(struct uvc_fh *handle)
469 {
470 	return handle->state == UVC_HANDLE_ACTIVE;
471 }
472 
473 /* ------------------------------------------------------------------------
474  * V4L2 file operations
475  */
476 
477 static int uvc_v4l2_open(struct file *file)
478 {
479 	struct uvc_streaming *stream;
480 	struct uvc_fh *handle;
481 	int ret = 0;
482 
483 	uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_open\n");
484 	stream = video_drvdata(file);
485 
486 	ret = usb_autopm_get_interface(stream->dev->intf);
487 	if (ret < 0)
488 		return ret;
489 
490 	/* Create the device handle. */
491 	handle = kzalloc(sizeof *handle, GFP_KERNEL);
492 	if (handle == NULL) {
493 		usb_autopm_put_interface(stream->dev->intf);
494 		return -ENOMEM;
495 	}
496 
497 	mutex_lock(&stream->dev->lock);
498 	if (stream->dev->users == 0) {
499 		ret = uvc_status_start(stream->dev, GFP_KERNEL);
500 		if (ret < 0) {
501 			mutex_unlock(&stream->dev->lock);
502 			usb_autopm_put_interface(stream->dev->intf);
503 			kfree(handle);
504 			return ret;
505 		}
506 	}
507 
508 	stream->dev->users++;
509 	mutex_unlock(&stream->dev->lock);
510 
511 	v4l2_fh_init(&handle->vfh, &stream->vdev);
512 	v4l2_fh_add(&handle->vfh);
513 	handle->chain = stream->chain;
514 	handle->stream = stream;
515 	handle->state = UVC_HANDLE_PASSIVE;
516 	file->private_data = handle;
517 
518 	return 0;
519 }
520 
521 static int uvc_v4l2_release(struct file *file)
522 {
523 	struct uvc_fh *handle = file->private_data;
524 	struct uvc_streaming *stream = handle->stream;
525 
526 	uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_release\n");
527 
528 	/* Only free resources if this is a privileged handle. */
529 	if (uvc_has_privileges(handle))
530 		uvc_queue_release(&stream->queue);
531 
532 	/* Release the file handle. */
533 	uvc_dismiss_privileges(handle);
534 	v4l2_fh_del(&handle->vfh);
535 	v4l2_fh_exit(&handle->vfh);
536 	kfree(handle);
537 	file->private_data = NULL;
538 
539 	mutex_lock(&stream->dev->lock);
540 	if (--stream->dev->users == 0)
541 		uvc_status_stop(stream->dev);
542 	mutex_unlock(&stream->dev->lock);
543 
544 	usb_autopm_put_interface(stream->dev->intf);
545 	return 0;
546 }
547 
548 static int uvc_ioctl_querycap(struct file *file, void *fh,
549 			      struct v4l2_capability *cap)
550 {
551 	struct video_device *vdev = video_devdata(file);
552 	struct uvc_fh *handle = file->private_data;
553 	struct uvc_video_chain *chain = handle->chain;
554 	struct uvc_streaming *stream = handle->stream;
555 
556 	strlcpy(cap->driver, "uvcvideo", sizeof(cap->driver));
557 	strlcpy(cap->card, vdev->name, sizeof(cap->card));
558 	usb_make_path(stream->dev->udev, cap->bus_info, sizeof(cap->bus_info));
559 	cap->capabilities = V4L2_CAP_DEVICE_CAPS | V4L2_CAP_STREAMING
560 			  | chain->caps;
561 	if (stream->type == V4L2_BUF_TYPE_VIDEO_CAPTURE)
562 		cap->device_caps = V4L2_CAP_VIDEO_CAPTURE | V4L2_CAP_STREAMING;
563 	else
564 		cap->device_caps = V4L2_CAP_VIDEO_OUTPUT | V4L2_CAP_STREAMING;
565 
566 	return 0;
567 }
568 
569 static int uvc_ioctl_enum_fmt(struct uvc_streaming *stream,
570 			      struct v4l2_fmtdesc *fmt)
571 {
572 	struct uvc_format *format;
573 	enum v4l2_buf_type type = fmt->type;
574 	__u32 index = fmt->index;
575 
576 	if (fmt->type != stream->type || fmt->index >= stream->nformats)
577 		return -EINVAL;
578 
579 	memset(fmt, 0, sizeof(*fmt));
580 	fmt->index = index;
581 	fmt->type = type;
582 
583 	format = &stream->format[fmt->index];
584 	fmt->flags = 0;
585 	if (format->flags & UVC_FMT_FLAG_COMPRESSED)
586 		fmt->flags |= V4L2_FMT_FLAG_COMPRESSED;
587 	strlcpy(fmt->description, format->name, sizeof(fmt->description));
588 	fmt->description[sizeof(fmt->description) - 1] = 0;
589 	fmt->pixelformat = format->fcc;
590 	return 0;
591 }
592 
593 static int uvc_ioctl_enum_fmt_vid_cap(struct file *file, void *fh,
594 				      struct v4l2_fmtdesc *fmt)
595 {
596 	struct uvc_fh *handle = fh;
597 	struct uvc_streaming *stream = handle->stream;
598 
599 	return uvc_ioctl_enum_fmt(stream, fmt);
600 }
601 
602 static int uvc_ioctl_enum_fmt_vid_out(struct file *file, void *fh,
603 				      struct v4l2_fmtdesc *fmt)
604 {
605 	struct uvc_fh *handle = fh;
606 	struct uvc_streaming *stream = handle->stream;
607 
608 	return uvc_ioctl_enum_fmt(stream, fmt);
609 }
610 
611 static int uvc_ioctl_g_fmt_vid_cap(struct file *file, void *fh,
612 				   struct v4l2_format *fmt)
613 {
614 	struct uvc_fh *handle = fh;
615 	struct uvc_streaming *stream = handle->stream;
616 
617 	return uvc_v4l2_get_format(stream, fmt);
618 }
619 
620 static int uvc_ioctl_g_fmt_vid_out(struct file *file, void *fh,
621 				   struct v4l2_format *fmt)
622 {
623 	struct uvc_fh *handle = fh;
624 	struct uvc_streaming *stream = handle->stream;
625 
626 	return uvc_v4l2_get_format(stream, fmt);
627 }
628 
629 static int uvc_ioctl_s_fmt_vid_cap(struct file *file, void *fh,
630 				   struct v4l2_format *fmt)
631 {
632 	struct uvc_fh *handle = fh;
633 	struct uvc_streaming *stream = handle->stream;
634 	int ret;
635 
636 	ret = uvc_acquire_privileges(handle);
637 	if (ret < 0)
638 		return ret;
639 
640 	return uvc_v4l2_set_format(stream, fmt);
641 }
642 
643 static int uvc_ioctl_s_fmt_vid_out(struct file *file, void *fh,
644 				   struct v4l2_format *fmt)
645 {
646 	struct uvc_fh *handle = fh;
647 	struct uvc_streaming *stream = handle->stream;
648 	int ret;
649 
650 	ret = uvc_acquire_privileges(handle);
651 	if (ret < 0)
652 		return ret;
653 
654 	return uvc_v4l2_set_format(stream, fmt);
655 }
656 
657 static int uvc_ioctl_try_fmt_vid_cap(struct file *file, void *fh,
658 				     struct v4l2_format *fmt)
659 {
660 	struct uvc_fh *handle = fh;
661 	struct uvc_streaming *stream = handle->stream;
662 	struct uvc_streaming_control probe;
663 
664 	return uvc_v4l2_try_format(stream, fmt, &probe, NULL, NULL);
665 }
666 
667 static int uvc_ioctl_try_fmt_vid_out(struct file *file, void *fh,
668 				     struct v4l2_format *fmt)
669 {
670 	struct uvc_fh *handle = fh;
671 	struct uvc_streaming *stream = handle->stream;
672 	struct uvc_streaming_control probe;
673 
674 	return uvc_v4l2_try_format(stream, fmt, &probe, NULL, NULL);
675 }
676 
677 static int uvc_ioctl_reqbufs(struct file *file, void *fh,
678 			     struct v4l2_requestbuffers *rb)
679 {
680 	struct uvc_fh *handle = fh;
681 	struct uvc_streaming *stream = handle->stream;
682 	int ret;
683 
684 	ret = uvc_acquire_privileges(handle);
685 	if (ret < 0)
686 		return ret;
687 
688 	mutex_lock(&stream->mutex);
689 	ret = uvc_request_buffers(&stream->queue, rb);
690 	mutex_unlock(&stream->mutex);
691 	if (ret < 0)
692 		return ret;
693 
694 	if (ret == 0)
695 		uvc_dismiss_privileges(handle);
696 
697 	return 0;
698 }
699 
700 static int uvc_ioctl_querybuf(struct file *file, void *fh,
701 			      struct v4l2_buffer *buf)
702 {
703 	struct uvc_fh *handle = fh;
704 	struct uvc_streaming *stream = handle->stream;
705 
706 	if (!uvc_has_privileges(handle))
707 		return -EBUSY;
708 
709 	return uvc_query_buffer(&stream->queue, buf);
710 }
711 
712 static int uvc_ioctl_qbuf(struct file *file, void *fh, struct v4l2_buffer *buf)
713 {
714 	struct uvc_fh *handle = fh;
715 	struct uvc_streaming *stream = handle->stream;
716 
717 	if (!uvc_has_privileges(handle))
718 		return -EBUSY;
719 
720 	return uvc_queue_buffer(&stream->queue, buf);
721 }
722 
723 static int uvc_ioctl_expbuf(struct file *file, void *fh,
724 			    struct v4l2_exportbuffer *exp)
725 {
726 	struct uvc_fh *handle = fh;
727 	struct uvc_streaming *stream = handle->stream;
728 
729 	if (!uvc_has_privileges(handle))
730 		return -EBUSY;
731 
732 	return uvc_export_buffer(&stream->queue, exp);
733 }
734 
735 static int uvc_ioctl_dqbuf(struct file *file, void *fh, struct v4l2_buffer *buf)
736 {
737 	struct uvc_fh *handle = fh;
738 	struct uvc_streaming *stream = handle->stream;
739 
740 	if (!uvc_has_privileges(handle))
741 		return -EBUSY;
742 
743 	return uvc_dequeue_buffer(&stream->queue, buf,
744 				  file->f_flags & O_NONBLOCK);
745 }
746 
747 static int uvc_ioctl_create_bufs(struct file *file, void *fh,
748 				  struct v4l2_create_buffers *cb)
749 {
750 	struct uvc_fh *handle = fh;
751 	struct uvc_streaming *stream = handle->stream;
752 	int ret;
753 
754 	ret = uvc_acquire_privileges(handle);
755 	if (ret < 0)
756 		return ret;
757 
758 	return uvc_create_buffers(&stream->queue, cb);
759 }
760 
761 static int uvc_ioctl_streamon(struct file *file, void *fh,
762 			      enum v4l2_buf_type type)
763 {
764 	struct uvc_fh *handle = fh;
765 	struct uvc_streaming *stream = handle->stream;
766 	int ret;
767 
768 	if (!uvc_has_privileges(handle))
769 		return -EBUSY;
770 
771 	mutex_lock(&stream->mutex);
772 	ret = uvc_queue_streamon(&stream->queue, type);
773 	mutex_unlock(&stream->mutex);
774 
775 	return ret;
776 }
777 
778 static int uvc_ioctl_streamoff(struct file *file, void *fh,
779 			       enum v4l2_buf_type type)
780 {
781 	struct uvc_fh *handle = fh;
782 	struct uvc_streaming *stream = handle->stream;
783 
784 	if (!uvc_has_privileges(handle))
785 		return -EBUSY;
786 
787 	mutex_lock(&stream->mutex);
788 	uvc_queue_streamoff(&stream->queue, type);
789 	mutex_unlock(&stream->mutex);
790 
791 	return 0;
792 }
793 
794 static int uvc_ioctl_enum_input(struct file *file, void *fh,
795 				struct v4l2_input *input)
796 {
797 	struct uvc_fh *handle = fh;
798 	struct uvc_video_chain *chain = handle->chain;
799 	const struct uvc_entity *selector = chain->selector;
800 	struct uvc_entity *iterm = NULL;
801 	u32 index = input->index;
802 	int pin = 0;
803 
804 	if (selector == NULL ||
805 	    (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
806 		if (index != 0)
807 			return -EINVAL;
808 		list_for_each_entry(iterm, &chain->entities, chain) {
809 			if (UVC_ENTITY_IS_ITERM(iterm))
810 				break;
811 		}
812 		pin = iterm->id;
813 	} else if (index < selector->bNrInPins) {
814 		pin = selector->baSourceID[index];
815 		list_for_each_entry(iterm, &chain->entities, chain) {
816 			if (!UVC_ENTITY_IS_ITERM(iterm))
817 				continue;
818 			if (iterm->id == pin)
819 				break;
820 		}
821 	}
822 
823 	if (iterm == NULL || iterm->id != pin)
824 		return -EINVAL;
825 
826 	memset(input, 0, sizeof(*input));
827 	input->index = index;
828 	strlcpy(input->name, iterm->name, sizeof(input->name));
829 	if (UVC_ENTITY_TYPE(iterm) == UVC_ITT_CAMERA)
830 		input->type = V4L2_INPUT_TYPE_CAMERA;
831 
832 	return 0;
833 }
834 
835 static int uvc_ioctl_g_input(struct file *file, void *fh, unsigned int *input)
836 {
837 	struct uvc_fh *handle = fh;
838 	struct uvc_video_chain *chain = handle->chain;
839 	int ret;
840 	u8 i;
841 
842 	if (chain->selector == NULL ||
843 	    (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
844 		*input = 0;
845 		return 0;
846 	}
847 
848 	ret = uvc_query_ctrl(chain->dev, UVC_GET_CUR, chain->selector->id,
849 			     chain->dev->intfnum,  UVC_SU_INPUT_SELECT_CONTROL,
850 			     &i, 1);
851 	if (ret < 0)
852 		return ret;
853 
854 	*input = i - 1;
855 	return 0;
856 }
857 
858 static int uvc_ioctl_s_input(struct file *file, void *fh, unsigned int input)
859 {
860 	struct uvc_fh *handle = fh;
861 	struct uvc_video_chain *chain = handle->chain;
862 	int ret;
863 	u32 i;
864 
865 	ret = uvc_acquire_privileges(handle);
866 	if (ret < 0)
867 		return ret;
868 
869 	if (chain->selector == NULL ||
870 	    (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
871 		if (input)
872 			return -EINVAL;
873 		return 0;
874 	}
875 
876 	if (input >= chain->selector->bNrInPins)
877 		return -EINVAL;
878 
879 	i = input + 1;
880 	return uvc_query_ctrl(chain->dev, UVC_SET_CUR, chain->selector->id,
881 			      chain->dev->intfnum, UVC_SU_INPUT_SELECT_CONTROL,
882 			      &i, 1);
883 }
884 
885 static int uvc_ioctl_queryctrl(struct file *file, void *fh,
886 			       struct v4l2_queryctrl *qc)
887 {
888 	struct uvc_fh *handle = fh;
889 	struct uvc_video_chain *chain = handle->chain;
890 
891 	return uvc_query_v4l2_ctrl(chain, qc);
892 }
893 
894 static int uvc_ioctl_query_ext_ctrl(struct file *file, void *fh,
895 				    struct v4l2_query_ext_ctrl *qec)
896 {
897 	struct uvc_fh *handle = fh;
898 	struct uvc_video_chain *chain = handle->chain;
899 	struct v4l2_queryctrl qc = { qec->id };
900 	int ret;
901 
902 	ret = uvc_query_v4l2_ctrl(chain, &qc);
903 	if (ret)
904 		return ret;
905 
906 	qec->id = qc.id;
907 	qec->type = qc.type;
908 	strlcpy(qec->name, qc.name, sizeof(qec->name));
909 	qec->minimum = qc.minimum;
910 	qec->maximum = qc.maximum;
911 	qec->step = qc.step;
912 	qec->default_value = qc.default_value;
913 	qec->flags = qc.flags;
914 	qec->elem_size = 4;
915 	qec->elems = 1;
916 	qec->nr_of_dims = 0;
917 	memset(qec->dims, 0, sizeof(qec->dims));
918 	memset(qec->reserved, 0, sizeof(qec->reserved));
919 
920 	return 0;
921 }
922 
923 static int uvc_ioctl_g_ctrl(struct file *file, void *fh,
924 			    struct v4l2_control *ctrl)
925 {
926 	struct uvc_fh *handle = fh;
927 	struct uvc_video_chain *chain = handle->chain;
928 	struct v4l2_ext_control xctrl;
929 	int ret;
930 
931 	memset(&xctrl, 0, sizeof(xctrl));
932 	xctrl.id = ctrl->id;
933 
934 	ret = uvc_ctrl_begin(chain);
935 	if (ret < 0)
936 		return ret;
937 
938 	ret = uvc_ctrl_get(chain, &xctrl);
939 	uvc_ctrl_rollback(handle);
940 	if (ret < 0)
941 		return ret;
942 
943 	ctrl->value = xctrl.value;
944 	return 0;
945 }
946 
947 static int uvc_ioctl_s_ctrl(struct file *file, void *fh,
948 			    struct v4l2_control *ctrl)
949 {
950 	struct uvc_fh *handle = fh;
951 	struct uvc_video_chain *chain = handle->chain;
952 	struct v4l2_ext_control xctrl;
953 	int ret;
954 
955 	memset(&xctrl, 0, sizeof(xctrl));
956 	xctrl.id = ctrl->id;
957 	xctrl.value = ctrl->value;
958 
959 	ret = uvc_ctrl_begin(chain);
960 	if (ret < 0)
961 		return ret;
962 
963 	ret = uvc_ctrl_set(chain, &xctrl);
964 	if (ret < 0) {
965 		uvc_ctrl_rollback(handle);
966 		return ret;
967 	}
968 
969 	ret = uvc_ctrl_commit(handle, &xctrl, 1);
970 	if (ret < 0)
971 		return ret;
972 
973 	ctrl->value = xctrl.value;
974 	return 0;
975 }
976 
977 static int uvc_ioctl_g_ext_ctrls(struct file *file, void *fh,
978 				 struct v4l2_ext_controls *ctrls)
979 {
980 	struct uvc_fh *handle = fh;
981 	struct uvc_video_chain *chain = handle->chain;
982 	struct v4l2_ext_control *ctrl = ctrls->controls;
983 	unsigned int i;
984 	int ret;
985 
986 	ret = uvc_ctrl_begin(chain);
987 	if (ret < 0)
988 		return ret;
989 
990 	for (i = 0; i < ctrls->count; ++ctrl, ++i) {
991 		ret = uvc_ctrl_get(chain, ctrl);
992 		if (ret < 0) {
993 			uvc_ctrl_rollback(handle);
994 			ctrls->error_idx = i;
995 			return ret;
996 		}
997 	}
998 
999 	ctrls->error_idx = 0;
1000 
1001 	return uvc_ctrl_rollback(handle);
1002 }
1003 
1004 static int uvc_ioctl_s_try_ext_ctrls(struct uvc_fh *handle,
1005 				     struct v4l2_ext_controls *ctrls,
1006 				     bool commit)
1007 {
1008 	struct v4l2_ext_control *ctrl = ctrls->controls;
1009 	struct uvc_video_chain *chain = handle->chain;
1010 	unsigned int i;
1011 	int ret;
1012 
1013 	ret = uvc_ctrl_begin(chain);
1014 	if (ret < 0)
1015 		return ret;
1016 
1017 	for (i = 0; i < ctrls->count; ++ctrl, ++i) {
1018 		ret = uvc_ctrl_set(chain, ctrl);
1019 		if (ret < 0) {
1020 			uvc_ctrl_rollback(handle);
1021 			ctrls->error_idx = commit ? ctrls->count : i;
1022 			return ret;
1023 		}
1024 	}
1025 
1026 	ctrls->error_idx = 0;
1027 
1028 	if (commit)
1029 		return uvc_ctrl_commit(handle, ctrls->controls, ctrls->count);
1030 	else
1031 		return uvc_ctrl_rollback(handle);
1032 }
1033 
1034 static int uvc_ioctl_s_ext_ctrls(struct file *file, void *fh,
1035 				 struct v4l2_ext_controls *ctrls)
1036 {
1037 	struct uvc_fh *handle = fh;
1038 
1039 	return uvc_ioctl_s_try_ext_ctrls(handle, ctrls, true);
1040 }
1041 
1042 static int uvc_ioctl_try_ext_ctrls(struct file *file, void *fh,
1043 				   struct v4l2_ext_controls *ctrls)
1044 {
1045 	struct uvc_fh *handle = fh;
1046 
1047 	return uvc_ioctl_s_try_ext_ctrls(handle, ctrls, false);
1048 }
1049 
1050 static int uvc_ioctl_querymenu(struct file *file, void *fh,
1051 			       struct v4l2_querymenu *qm)
1052 {
1053 	struct uvc_fh *handle = fh;
1054 	struct uvc_video_chain *chain = handle->chain;
1055 
1056 	return uvc_query_v4l2_menu(chain, qm);
1057 }
1058 
1059 static int uvc_ioctl_g_selection(struct file *file, void *fh,
1060 				 struct v4l2_selection *sel)
1061 {
1062 	struct uvc_fh *handle = fh;
1063 	struct uvc_streaming *stream = handle->stream;
1064 
1065 	if (sel->type != stream->type)
1066 		return -EINVAL;
1067 
1068 	switch (sel->target) {
1069 	case V4L2_SEL_TGT_CROP_DEFAULT:
1070 	case V4L2_SEL_TGT_CROP_BOUNDS:
1071 		if (stream->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
1072 			return -EINVAL;
1073 		break;
1074 	case V4L2_SEL_TGT_COMPOSE_DEFAULT:
1075 	case V4L2_SEL_TGT_COMPOSE_BOUNDS:
1076 		if (stream->type != V4L2_BUF_TYPE_VIDEO_OUTPUT)
1077 			return -EINVAL;
1078 		break;
1079 	default:
1080 		return -EINVAL;
1081 	}
1082 
1083 	sel->r.left = 0;
1084 	sel->r.top = 0;
1085 	mutex_lock(&stream->mutex);
1086 	sel->r.width = stream->cur_frame->wWidth;
1087 	sel->r.height = stream->cur_frame->wHeight;
1088 	mutex_unlock(&stream->mutex);
1089 
1090 	return 0;
1091 }
1092 
1093 static int uvc_ioctl_g_parm(struct file *file, void *fh,
1094 			    struct v4l2_streamparm *parm)
1095 {
1096 	struct uvc_fh *handle = fh;
1097 	struct uvc_streaming *stream = handle->stream;
1098 
1099 	return uvc_v4l2_get_streamparm(stream, parm);
1100 }
1101 
1102 static int uvc_ioctl_s_parm(struct file *file, void *fh,
1103 			    struct v4l2_streamparm *parm)
1104 {
1105 	struct uvc_fh *handle = fh;
1106 	struct uvc_streaming *stream = handle->stream;
1107 	int ret;
1108 
1109 	ret = uvc_acquire_privileges(handle);
1110 	if (ret < 0)
1111 		return ret;
1112 
1113 	return uvc_v4l2_set_streamparm(stream, parm);
1114 }
1115 
1116 static int uvc_ioctl_enum_framesizes(struct file *file, void *fh,
1117 				     struct v4l2_frmsizeenum *fsize)
1118 {
1119 	struct uvc_fh *handle = fh;
1120 	struct uvc_streaming *stream = handle->stream;
1121 	struct uvc_format *format = NULL;
1122 	struct uvc_frame *frame;
1123 	int i;
1124 
1125 	/* Look for the given pixel format */
1126 	for (i = 0; i < stream->nformats; i++) {
1127 		if (stream->format[i].fcc == fsize->pixel_format) {
1128 			format = &stream->format[i];
1129 			break;
1130 		}
1131 	}
1132 	if (format == NULL)
1133 		return -EINVAL;
1134 
1135 	if (fsize->index >= format->nframes)
1136 		return -EINVAL;
1137 
1138 	frame = &format->frame[fsize->index];
1139 	fsize->type = V4L2_FRMSIZE_TYPE_DISCRETE;
1140 	fsize->discrete.width = frame->wWidth;
1141 	fsize->discrete.height = frame->wHeight;
1142 	return 0;
1143 }
1144 
1145 static int uvc_ioctl_enum_frameintervals(struct file *file, void *fh,
1146 					 struct v4l2_frmivalenum *fival)
1147 {
1148 	struct uvc_fh *handle = fh;
1149 	struct uvc_streaming *stream = handle->stream;
1150 	struct uvc_format *format = NULL;
1151 	struct uvc_frame *frame = NULL;
1152 	int i;
1153 
1154 	/* Look for the given pixel format and frame size */
1155 	for (i = 0; i < stream->nformats; i++) {
1156 		if (stream->format[i].fcc == fival->pixel_format) {
1157 			format = &stream->format[i];
1158 			break;
1159 		}
1160 	}
1161 	if (format == NULL)
1162 		return -EINVAL;
1163 
1164 	for (i = 0; i < format->nframes; i++) {
1165 		if (format->frame[i].wWidth == fival->width &&
1166 		    format->frame[i].wHeight == fival->height) {
1167 			frame = &format->frame[i];
1168 			break;
1169 		}
1170 	}
1171 	if (frame == NULL)
1172 		return -EINVAL;
1173 
1174 	if (frame->bFrameIntervalType) {
1175 		if (fival->index >= frame->bFrameIntervalType)
1176 			return -EINVAL;
1177 
1178 		fival->type = V4L2_FRMIVAL_TYPE_DISCRETE;
1179 		fival->discrete.numerator =
1180 			frame->dwFrameInterval[fival->index];
1181 		fival->discrete.denominator = 10000000;
1182 		uvc_simplify_fraction(&fival->discrete.numerator,
1183 			&fival->discrete.denominator, 8, 333);
1184 	} else {
1185 		if (fival->index)
1186 			return -EINVAL;
1187 
1188 		fival->type = V4L2_FRMIVAL_TYPE_STEPWISE;
1189 		fival->stepwise.min.numerator = frame->dwFrameInterval[0];
1190 		fival->stepwise.min.denominator = 10000000;
1191 		fival->stepwise.max.numerator = frame->dwFrameInterval[1];
1192 		fival->stepwise.max.denominator = 10000000;
1193 		fival->stepwise.step.numerator = frame->dwFrameInterval[2];
1194 		fival->stepwise.step.denominator = 10000000;
1195 		uvc_simplify_fraction(&fival->stepwise.min.numerator,
1196 			&fival->stepwise.min.denominator, 8, 333);
1197 		uvc_simplify_fraction(&fival->stepwise.max.numerator,
1198 			&fival->stepwise.max.denominator, 8, 333);
1199 		uvc_simplify_fraction(&fival->stepwise.step.numerator,
1200 			&fival->stepwise.step.denominator, 8, 333);
1201 	}
1202 
1203 	return 0;
1204 }
1205 
1206 static int uvc_ioctl_subscribe_event(struct v4l2_fh *fh,
1207 				     const struct v4l2_event_subscription *sub)
1208 {
1209 	switch (sub->type) {
1210 	case V4L2_EVENT_CTRL:
1211 		return v4l2_event_subscribe(fh, sub, 0, &uvc_ctrl_sub_ev_ops);
1212 	default:
1213 		return -EINVAL;
1214 	}
1215 }
1216 
1217 static long uvc_ioctl_default(struct file *file, void *fh, bool valid_prio,
1218 			      unsigned int cmd, void *arg)
1219 {
1220 	struct uvc_fh *handle = fh;
1221 	struct uvc_video_chain *chain = handle->chain;
1222 
1223 	switch (cmd) {
1224 	/* Dynamic controls. */
1225 	case UVCIOC_CTRL_MAP:
1226 		return uvc_ioctl_ctrl_map(chain, arg);
1227 
1228 	case UVCIOC_CTRL_QUERY:
1229 		return uvc_xu_ctrl_query(chain, arg);
1230 
1231 	default:
1232 		return -ENOTTY;
1233 	}
1234 }
1235 
1236 #ifdef CONFIG_COMPAT
1237 struct uvc_xu_control_mapping32 {
1238 	__u32 id;
1239 	__u8 name[32];
1240 	__u8 entity[16];
1241 	__u8 selector;
1242 
1243 	__u8 size;
1244 	__u8 offset;
1245 	__u32 v4l2_type;
1246 	__u32 data_type;
1247 
1248 	compat_caddr_t menu_info;
1249 	__u32 menu_count;
1250 
1251 	__u32 reserved[4];
1252 };
1253 
1254 static int uvc_v4l2_get_xu_mapping(struct uvc_xu_control_mapping *kp,
1255 			const struct uvc_xu_control_mapping32 __user *up)
1256 {
1257 	struct uvc_menu_info __user *umenus;
1258 	struct uvc_menu_info __user *kmenus;
1259 	compat_caddr_t p;
1260 
1261 	if (!access_ok(VERIFY_READ, up, sizeof(*up)) ||
1262 	    __copy_from_user(kp, up, offsetof(typeof(*up), menu_info)) ||
1263 	    __get_user(kp->menu_count, &up->menu_count))
1264 		return -EFAULT;
1265 
1266 	memset(kp->reserved, 0, sizeof(kp->reserved));
1267 
1268 	if (kp->menu_count == 0) {
1269 		kp->menu_info = NULL;
1270 		return 0;
1271 	}
1272 
1273 	if (__get_user(p, &up->menu_info))
1274 		return -EFAULT;
1275 	umenus = compat_ptr(p);
1276 	if (!access_ok(VERIFY_READ, umenus, kp->menu_count * sizeof(*umenus)))
1277 		return -EFAULT;
1278 
1279 	kmenus = compat_alloc_user_space(kp->menu_count * sizeof(*kmenus));
1280 	if (kmenus == NULL)
1281 		return -EFAULT;
1282 	kp->menu_info = kmenus;
1283 
1284 	if (copy_in_user(kmenus, umenus, kp->menu_count * sizeof(*umenus)))
1285 		return -EFAULT;
1286 
1287 	return 0;
1288 }
1289 
1290 static int uvc_v4l2_put_xu_mapping(const struct uvc_xu_control_mapping *kp,
1291 			struct uvc_xu_control_mapping32 __user *up)
1292 {
1293 	struct uvc_menu_info __user *umenus;
1294 	struct uvc_menu_info __user *kmenus = kp->menu_info;
1295 	compat_caddr_t p;
1296 
1297 	if (!access_ok(VERIFY_WRITE, up, sizeof(*up)) ||
1298 	    __copy_to_user(up, kp, offsetof(typeof(*up), menu_info)) ||
1299 	    __put_user(kp->menu_count, &up->menu_count))
1300 		return -EFAULT;
1301 
1302 	if (__clear_user(up->reserved, sizeof(up->reserved)))
1303 		return -EFAULT;
1304 
1305 	if (kp->menu_count == 0)
1306 		return 0;
1307 
1308 	if (get_user(p, &up->menu_info))
1309 		return -EFAULT;
1310 	umenus = compat_ptr(p);
1311 
1312 	if (copy_in_user(umenus, kmenus, kp->menu_count * sizeof(*umenus)))
1313 		return -EFAULT;
1314 
1315 	return 0;
1316 }
1317 
1318 struct uvc_xu_control_query32 {
1319 	__u8 unit;
1320 	__u8 selector;
1321 	__u8 query;
1322 	__u16 size;
1323 	compat_caddr_t data;
1324 };
1325 
1326 static int uvc_v4l2_get_xu_query(struct uvc_xu_control_query *kp,
1327 			const struct uvc_xu_control_query32 __user *up)
1328 {
1329 	u8 __user *udata;
1330 	u8 __user *kdata;
1331 	compat_caddr_t p;
1332 
1333 	if (!access_ok(VERIFY_READ, up, sizeof(*up)) ||
1334 	    __copy_from_user(kp, up, offsetof(typeof(*up), data)))
1335 		return -EFAULT;
1336 
1337 	if (kp->size == 0) {
1338 		kp->data = NULL;
1339 		return 0;
1340 	}
1341 
1342 	if (__get_user(p, &up->data))
1343 		return -EFAULT;
1344 	udata = compat_ptr(p);
1345 	if (!access_ok(VERIFY_READ, udata, kp->size))
1346 		return -EFAULT;
1347 
1348 	kdata = compat_alloc_user_space(kp->size);
1349 	if (kdata == NULL)
1350 		return -EFAULT;
1351 	kp->data = kdata;
1352 
1353 	if (copy_in_user(kdata, udata, kp->size))
1354 		return -EFAULT;
1355 
1356 	return 0;
1357 }
1358 
1359 static int uvc_v4l2_put_xu_query(const struct uvc_xu_control_query *kp,
1360 			struct uvc_xu_control_query32 __user *up)
1361 {
1362 	u8 __user *udata;
1363 	u8 __user *kdata = kp->data;
1364 	compat_caddr_t p;
1365 
1366 	if (!access_ok(VERIFY_WRITE, up, sizeof(*up)) ||
1367 	    __copy_to_user(up, kp, offsetof(typeof(*up), data)))
1368 		return -EFAULT;
1369 
1370 	if (kp->size == 0)
1371 		return 0;
1372 
1373 	if (get_user(p, &up->data))
1374 		return -EFAULT;
1375 	udata = compat_ptr(p);
1376 	if (!access_ok(VERIFY_READ, udata, kp->size))
1377 		return -EFAULT;
1378 
1379 	if (copy_in_user(udata, kdata, kp->size))
1380 		return -EFAULT;
1381 
1382 	return 0;
1383 }
1384 
1385 #define UVCIOC_CTRL_MAP32	_IOWR('u', 0x20, struct uvc_xu_control_mapping32)
1386 #define UVCIOC_CTRL_QUERY32	_IOWR('u', 0x21, struct uvc_xu_control_query32)
1387 
1388 static long uvc_v4l2_compat_ioctl32(struct file *file,
1389 		     unsigned int cmd, unsigned long arg)
1390 {
1391 	union {
1392 		struct uvc_xu_control_mapping xmap;
1393 		struct uvc_xu_control_query xqry;
1394 	} karg;
1395 	void __user *up = compat_ptr(arg);
1396 	mm_segment_t old_fs;
1397 	long ret;
1398 
1399 	switch (cmd) {
1400 	case UVCIOC_CTRL_MAP32:
1401 		cmd = UVCIOC_CTRL_MAP;
1402 		ret = uvc_v4l2_get_xu_mapping(&karg.xmap, up);
1403 		break;
1404 
1405 	case UVCIOC_CTRL_QUERY32:
1406 		cmd = UVCIOC_CTRL_QUERY;
1407 		ret = uvc_v4l2_get_xu_query(&karg.xqry, up);
1408 		break;
1409 
1410 	default:
1411 		return -ENOIOCTLCMD;
1412 	}
1413 
1414 	old_fs = get_fs();
1415 	set_fs(KERNEL_DS);
1416 	ret = video_ioctl2(file, cmd, (unsigned long)&karg);
1417 	set_fs(old_fs);
1418 
1419 	if (ret < 0)
1420 		return ret;
1421 
1422 	switch (cmd) {
1423 	case UVCIOC_CTRL_MAP:
1424 		ret = uvc_v4l2_put_xu_mapping(&karg.xmap, up);
1425 		break;
1426 
1427 	case UVCIOC_CTRL_QUERY:
1428 		ret = uvc_v4l2_put_xu_query(&karg.xqry, up);
1429 		break;
1430 	}
1431 
1432 	return ret;
1433 }
1434 #endif
1435 
1436 static ssize_t uvc_v4l2_read(struct file *file, char __user *data,
1437 		    size_t count, loff_t *ppos)
1438 {
1439 	uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_read: not implemented.\n");
1440 	return -EINVAL;
1441 }
1442 
1443 static int uvc_v4l2_mmap(struct file *file, struct vm_area_struct *vma)
1444 {
1445 	struct uvc_fh *handle = file->private_data;
1446 	struct uvc_streaming *stream = handle->stream;
1447 
1448 	uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_mmap\n");
1449 
1450 	return uvc_queue_mmap(&stream->queue, vma);
1451 }
1452 
1453 static unsigned int uvc_v4l2_poll(struct file *file, poll_table *wait)
1454 {
1455 	struct uvc_fh *handle = file->private_data;
1456 	struct uvc_streaming *stream = handle->stream;
1457 
1458 	uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_poll\n");
1459 
1460 	return uvc_queue_poll(&stream->queue, file, wait);
1461 }
1462 
1463 #ifndef CONFIG_MMU
1464 static unsigned long uvc_v4l2_get_unmapped_area(struct file *file,
1465 		unsigned long addr, unsigned long len, unsigned long pgoff,
1466 		unsigned long flags)
1467 {
1468 	struct uvc_fh *handle = file->private_data;
1469 	struct uvc_streaming *stream = handle->stream;
1470 
1471 	uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_get_unmapped_area\n");
1472 
1473 	return uvc_queue_get_unmapped_area(&stream->queue, pgoff);
1474 }
1475 #endif
1476 
1477 const struct v4l2_ioctl_ops uvc_ioctl_ops = {
1478 	.vidioc_querycap = uvc_ioctl_querycap,
1479 	.vidioc_enum_fmt_vid_cap = uvc_ioctl_enum_fmt_vid_cap,
1480 	.vidioc_enum_fmt_vid_out = uvc_ioctl_enum_fmt_vid_out,
1481 	.vidioc_g_fmt_vid_cap = uvc_ioctl_g_fmt_vid_cap,
1482 	.vidioc_g_fmt_vid_out = uvc_ioctl_g_fmt_vid_out,
1483 	.vidioc_s_fmt_vid_cap = uvc_ioctl_s_fmt_vid_cap,
1484 	.vidioc_s_fmt_vid_out = uvc_ioctl_s_fmt_vid_out,
1485 	.vidioc_try_fmt_vid_cap = uvc_ioctl_try_fmt_vid_cap,
1486 	.vidioc_try_fmt_vid_out = uvc_ioctl_try_fmt_vid_out,
1487 	.vidioc_reqbufs = uvc_ioctl_reqbufs,
1488 	.vidioc_querybuf = uvc_ioctl_querybuf,
1489 	.vidioc_qbuf = uvc_ioctl_qbuf,
1490 	.vidioc_expbuf = uvc_ioctl_expbuf,
1491 	.vidioc_dqbuf = uvc_ioctl_dqbuf,
1492 	.vidioc_create_bufs = uvc_ioctl_create_bufs,
1493 	.vidioc_streamon = uvc_ioctl_streamon,
1494 	.vidioc_streamoff = uvc_ioctl_streamoff,
1495 	.vidioc_enum_input = uvc_ioctl_enum_input,
1496 	.vidioc_g_input = uvc_ioctl_g_input,
1497 	.vidioc_s_input = uvc_ioctl_s_input,
1498 	.vidioc_queryctrl = uvc_ioctl_queryctrl,
1499 	.vidioc_query_ext_ctrl = uvc_ioctl_query_ext_ctrl,
1500 	.vidioc_g_ctrl = uvc_ioctl_g_ctrl,
1501 	.vidioc_s_ctrl = uvc_ioctl_s_ctrl,
1502 	.vidioc_g_ext_ctrls = uvc_ioctl_g_ext_ctrls,
1503 	.vidioc_s_ext_ctrls = uvc_ioctl_s_ext_ctrls,
1504 	.vidioc_try_ext_ctrls = uvc_ioctl_try_ext_ctrls,
1505 	.vidioc_querymenu = uvc_ioctl_querymenu,
1506 	.vidioc_g_selection = uvc_ioctl_g_selection,
1507 	.vidioc_g_parm = uvc_ioctl_g_parm,
1508 	.vidioc_s_parm = uvc_ioctl_s_parm,
1509 	.vidioc_enum_framesizes = uvc_ioctl_enum_framesizes,
1510 	.vidioc_enum_frameintervals = uvc_ioctl_enum_frameintervals,
1511 	.vidioc_subscribe_event = uvc_ioctl_subscribe_event,
1512 	.vidioc_unsubscribe_event = v4l2_event_unsubscribe,
1513 	.vidioc_default = uvc_ioctl_default,
1514 };
1515 
1516 const struct v4l2_file_operations uvc_fops = {
1517 	.owner		= THIS_MODULE,
1518 	.open		= uvc_v4l2_open,
1519 	.release	= uvc_v4l2_release,
1520 	.unlocked_ioctl	= video_ioctl2,
1521 #ifdef CONFIG_COMPAT
1522 	.compat_ioctl32	= uvc_v4l2_compat_ioctl32,
1523 #endif
1524 	.read		= uvc_v4l2_read,
1525 	.mmap		= uvc_v4l2_mmap,
1526 	.poll		= uvc_v4l2_poll,
1527 #ifndef CONFIG_MMU
1528 	.get_unmapped_area = uvc_v4l2_get_unmapped_area,
1529 #endif
1530 };
1531 
1532