xref: /openbmc/linux/sound/core/seq/seq_clientmgr.c (revision 680ef72a)
1 /*
2  *  ALSA sequencer Client Manager
3  *  Copyright (c) 1998-2001 by Frank van de Pol <fvdpol@coil.demon.nl>
4  *                             Jaroslav Kysela <perex@perex.cz>
5  *                             Takashi Iwai <tiwai@suse.de>
6  *
7  *
8  *   This program is free software; you can redistribute it and/or modify
9  *   it under the terms of the GNU General Public License as published by
10  *   the Free Software Foundation; either version 2 of the License, or
11  *   (at your option) any later version.
12  *
13  *   This program is distributed in the hope that it will be useful,
14  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
15  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16  *   GNU General Public License for more details.
17  *
18  *   You should have received a copy of the GNU General Public License
19  *   along with this program; if not, write to the Free Software
20  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA
21  *
22  */
23 
24 #include <linux/init.h>
25 #include <linux/export.h>
26 #include <linux/slab.h>
27 #include <sound/core.h>
28 #include <sound/minors.h>
29 #include <linux/kmod.h>
30 
31 #include <sound/seq_kernel.h>
32 #include "seq_clientmgr.h"
33 #include "seq_memory.h"
34 #include "seq_queue.h"
35 #include "seq_timer.h"
36 #include "seq_info.h"
37 #include "seq_system.h"
38 #include <sound/seq_device.h>
39 #ifdef CONFIG_COMPAT
40 #include <linux/compat.h>
41 #endif
42 
43 /* Client Manager
44 
45  * this module handles the connections of userland and kernel clients
46  *
47  */
48 
49 /*
50  * There are four ranges of client numbers (last two shared):
51  * 0..15: global clients
52  * 16..127: statically allocated client numbers for cards 0..27
53  * 128..191: dynamically allocated client numbers for cards 28..31
54  * 128..191: dynamically allocated client numbers for applications
55  */
56 
57 /* number of kernel non-card clients */
58 #define SNDRV_SEQ_GLOBAL_CLIENTS	16
59 /* clients per cards, for static clients */
60 #define SNDRV_SEQ_CLIENTS_PER_CARD	4
61 /* dynamically allocated client numbers (both kernel drivers and user space) */
62 #define SNDRV_SEQ_DYNAMIC_CLIENTS_BEGIN	128
63 
64 #define SNDRV_SEQ_LFLG_INPUT	0x0001
65 #define SNDRV_SEQ_LFLG_OUTPUT	0x0002
66 #define SNDRV_SEQ_LFLG_OPEN	(SNDRV_SEQ_LFLG_INPUT|SNDRV_SEQ_LFLG_OUTPUT)
67 
68 static DEFINE_SPINLOCK(clients_lock);
69 static DEFINE_MUTEX(register_mutex);
70 
71 /*
72  * client table
73  */
74 static char clienttablock[SNDRV_SEQ_MAX_CLIENTS];
75 static struct snd_seq_client *clienttab[SNDRV_SEQ_MAX_CLIENTS];
76 static struct snd_seq_usage client_usage;
77 
78 /*
79  * prototypes
80  */
81 static int bounce_error_event(struct snd_seq_client *client,
82 			      struct snd_seq_event *event,
83 			      int err, int atomic, int hop);
84 static int snd_seq_deliver_single_event(struct snd_seq_client *client,
85 					struct snd_seq_event *event,
86 					int filter, int atomic, int hop);
87 
88 /*
89  */
90 static inline unsigned short snd_seq_file_flags(struct file *file)
91 {
92         switch (file->f_mode & (FMODE_READ | FMODE_WRITE)) {
93         case FMODE_WRITE:
94                 return SNDRV_SEQ_LFLG_OUTPUT;
95         case FMODE_READ:
96                 return SNDRV_SEQ_LFLG_INPUT;
97         default:
98                 return SNDRV_SEQ_LFLG_OPEN;
99         }
100 }
101 
102 static inline int snd_seq_write_pool_allocated(struct snd_seq_client *client)
103 {
104 	return snd_seq_total_cells(client->pool) > 0;
105 }
106 
107 /* return pointer to client structure for specified id */
108 static struct snd_seq_client *clientptr(int clientid)
109 {
110 	if (clientid < 0 || clientid >= SNDRV_SEQ_MAX_CLIENTS) {
111 		pr_debug("ALSA: seq: oops. Trying to get pointer to client %d\n",
112 			   clientid);
113 		return NULL;
114 	}
115 	return clienttab[clientid];
116 }
117 
118 struct snd_seq_client *snd_seq_client_use_ptr(int clientid)
119 {
120 	unsigned long flags;
121 	struct snd_seq_client *client;
122 
123 	if (clientid < 0 || clientid >= SNDRV_SEQ_MAX_CLIENTS) {
124 		pr_debug("ALSA: seq: oops. Trying to get pointer to client %d\n",
125 			   clientid);
126 		return NULL;
127 	}
128 	spin_lock_irqsave(&clients_lock, flags);
129 	client = clientptr(clientid);
130 	if (client)
131 		goto __lock;
132 	if (clienttablock[clientid]) {
133 		spin_unlock_irqrestore(&clients_lock, flags);
134 		return NULL;
135 	}
136 	spin_unlock_irqrestore(&clients_lock, flags);
137 #ifdef CONFIG_MODULES
138 	if (!in_interrupt()) {
139 		static char client_requested[SNDRV_SEQ_GLOBAL_CLIENTS];
140 		static char card_requested[SNDRV_CARDS];
141 		if (clientid < SNDRV_SEQ_GLOBAL_CLIENTS) {
142 			int idx;
143 
144 			if (!client_requested[clientid]) {
145 				client_requested[clientid] = 1;
146 				for (idx = 0; idx < 15; idx++) {
147 					if (seq_client_load[idx] < 0)
148 						break;
149 					if (seq_client_load[idx] == clientid) {
150 						request_module("snd-seq-client-%i",
151 							       clientid);
152 						break;
153 					}
154 				}
155 			}
156 		} else if (clientid < SNDRV_SEQ_DYNAMIC_CLIENTS_BEGIN) {
157 			int card = (clientid - SNDRV_SEQ_GLOBAL_CLIENTS) /
158 				SNDRV_SEQ_CLIENTS_PER_CARD;
159 			if (card < snd_ecards_limit) {
160 				if (! card_requested[card]) {
161 					card_requested[card] = 1;
162 					snd_request_card(card);
163 				}
164 				snd_seq_device_load_drivers();
165 			}
166 		}
167 		spin_lock_irqsave(&clients_lock, flags);
168 		client = clientptr(clientid);
169 		if (client)
170 			goto __lock;
171 		spin_unlock_irqrestore(&clients_lock, flags);
172 	}
173 #endif
174 	return NULL;
175 
176       __lock:
177 	snd_use_lock_use(&client->use_lock);
178 	spin_unlock_irqrestore(&clients_lock, flags);
179 	return client;
180 }
181 
182 static void usage_alloc(struct snd_seq_usage *res, int num)
183 {
184 	res->cur += num;
185 	if (res->cur > res->peak)
186 		res->peak = res->cur;
187 }
188 
189 static void usage_free(struct snd_seq_usage *res, int num)
190 {
191 	res->cur -= num;
192 }
193 
194 /* initialise data structures */
195 int __init client_init_data(void)
196 {
197 	/* zap out the client table */
198 	memset(&clienttablock, 0, sizeof(clienttablock));
199 	memset(&clienttab, 0, sizeof(clienttab));
200 	return 0;
201 }
202 
203 
204 static struct snd_seq_client *seq_create_client1(int client_index, int poolsize)
205 {
206 	unsigned long flags;
207 	int c;
208 	struct snd_seq_client *client;
209 
210 	/* init client data */
211 	client = kzalloc(sizeof(*client), GFP_KERNEL);
212 	if (client == NULL)
213 		return NULL;
214 	client->pool = snd_seq_pool_new(poolsize);
215 	if (client->pool == NULL) {
216 		kfree(client);
217 		return NULL;
218 	}
219 	client->type = NO_CLIENT;
220 	snd_use_lock_init(&client->use_lock);
221 	rwlock_init(&client->ports_lock);
222 	mutex_init(&client->ports_mutex);
223 	INIT_LIST_HEAD(&client->ports_list_head);
224 
225 	/* find free slot in the client table */
226 	spin_lock_irqsave(&clients_lock, flags);
227 	if (client_index < 0) {
228 		for (c = SNDRV_SEQ_DYNAMIC_CLIENTS_BEGIN;
229 		     c < SNDRV_SEQ_MAX_CLIENTS;
230 		     c++) {
231 			if (clienttab[c] || clienttablock[c])
232 				continue;
233 			clienttab[client->number = c] = client;
234 			spin_unlock_irqrestore(&clients_lock, flags);
235 			return client;
236 		}
237 	} else {
238 		if (clienttab[client_index] == NULL && !clienttablock[client_index]) {
239 			clienttab[client->number = client_index] = client;
240 			spin_unlock_irqrestore(&clients_lock, flags);
241 			return client;
242 		}
243 	}
244 	spin_unlock_irqrestore(&clients_lock, flags);
245 	snd_seq_pool_delete(&client->pool);
246 	kfree(client);
247 	return NULL;	/* no free slot found or busy, return failure code */
248 }
249 
250 
251 static int seq_free_client1(struct snd_seq_client *client)
252 {
253 	unsigned long flags;
254 
255 	if (!client)
256 		return 0;
257 	snd_seq_delete_all_ports(client);
258 	snd_seq_queue_client_leave(client->number);
259 	spin_lock_irqsave(&clients_lock, flags);
260 	clienttablock[client->number] = 1;
261 	clienttab[client->number] = NULL;
262 	spin_unlock_irqrestore(&clients_lock, flags);
263 	snd_use_lock_sync(&client->use_lock);
264 	snd_seq_queue_client_termination(client->number);
265 	if (client->pool)
266 		snd_seq_pool_delete(&client->pool);
267 	spin_lock_irqsave(&clients_lock, flags);
268 	clienttablock[client->number] = 0;
269 	spin_unlock_irqrestore(&clients_lock, flags);
270 	return 0;
271 }
272 
273 
274 static void seq_free_client(struct snd_seq_client * client)
275 {
276 	mutex_lock(&register_mutex);
277 	switch (client->type) {
278 	case NO_CLIENT:
279 		pr_warn("ALSA: seq: Trying to free unused client %d\n",
280 			client->number);
281 		break;
282 	case USER_CLIENT:
283 	case KERNEL_CLIENT:
284 		seq_free_client1(client);
285 		usage_free(&client_usage, 1);
286 		break;
287 
288 	default:
289 		pr_err("ALSA: seq: Trying to free client %d with undefined type = %d\n",
290 			   client->number, client->type);
291 	}
292 	mutex_unlock(&register_mutex);
293 
294 	snd_seq_system_client_ev_client_exit(client->number);
295 }
296 
297 
298 
299 /* -------------------------------------------------------- */
300 
301 /* create a user client */
302 static int snd_seq_open(struct inode *inode, struct file *file)
303 {
304 	int c, mode;			/* client id */
305 	struct snd_seq_client *client;
306 	struct snd_seq_user_client *user;
307 	int err;
308 
309 	err = nonseekable_open(inode, file);
310 	if (err < 0)
311 		return err;
312 
313 	if (mutex_lock_interruptible(&register_mutex))
314 		return -ERESTARTSYS;
315 	client = seq_create_client1(-1, SNDRV_SEQ_DEFAULT_EVENTS);
316 	if (client == NULL) {
317 		mutex_unlock(&register_mutex);
318 		return -ENOMEM;	/* failure code */
319 	}
320 
321 	mode = snd_seq_file_flags(file);
322 	if (mode & SNDRV_SEQ_LFLG_INPUT)
323 		client->accept_input = 1;
324 	if (mode & SNDRV_SEQ_LFLG_OUTPUT)
325 		client->accept_output = 1;
326 
327 	user = &client->data.user;
328 	user->fifo = NULL;
329 	user->fifo_pool_size = 0;
330 
331 	if (mode & SNDRV_SEQ_LFLG_INPUT) {
332 		user->fifo_pool_size = SNDRV_SEQ_DEFAULT_CLIENT_EVENTS;
333 		user->fifo = snd_seq_fifo_new(user->fifo_pool_size);
334 		if (user->fifo == NULL) {
335 			seq_free_client1(client);
336 			kfree(client);
337 			mutex_unlock(&register_mutex);
338 			return -ENOMEM;
339 		}
340 	}
341 
342 	usage_alloc(&client_usage, 1);
343 	client->type = USER_CLIENT;
344 	mutex_unlock(&register_mutex);
345 
346 	c = client->number;
347 	file->private_data = client;
348 
349 	/* fill client data */
350 	user->file = file;
351 	sprintf(client->name, "Client-%d", c);
352 	client->data.user.owner = get_pid(task_pid(current));
353 
354 	/* make others aware this new client */
355 	snd_seq_system_client_ev_client_start(c);
356 
357 	return 0;
358 }
359 
360 /* delete a user client */
361 static int snd_seq_release(struct inode *inode, struct file *file)
362 {
363 	struct snd_seq_client *client = file->private_data;
364 
365 	if (client) {
366 		seq_free_client(client);
367 		if (client->data.user.fifo)
368 			snd_seq_fifo_delete(&client->data.user.fifo);
369 		put_pid(client->data.user.owner);
370 		kfree(client);
371 	}
372 
373 	return 0;
374 }
375 
376 
377 /* handle client read() */
378 /* possible error values:
379  *	-ENXIO	invalid client or file open mode
380  *	-ENOSPC	FIFO overflow (the flag is cleared after this error report)
381  *	-EINVAL	no enough user-space buffer to write the whole event
382  *	-EFAULT	seg. fault during copy to user space
383  */
384 static ssize_t snd_seq_read(struct file *file, char __user *buf, size_t count,
385 			    loff_t *offset)
386 {
387 	struct snd_seq_client *client = file->private_data;
388 	struct snd_seq_fifo *fifo;
389 	int err;
390 	long result = 0;
391 	struct snd_seq_event_cell *cell;
392 
393 	if (!(snd_seq_file_flags(file) & SNDRV_SEQ_LFLG_INPUT))
394 		return -ENXIO;
395 
396 	if (!access_ok(VERIFY_WRITE, buf, count))
397 		return -EFAULT;
398 
399 	/* check client structures are in place */
400 	if (snd_BUG_ON(!client))
401 		return -ENXIO;
402 
403 	if (!client->accept_input || (fifo = client->data.user.fifo) == NULL)
404 		return -ENXIO;
405 
406 	if (atomic_read(&fifo->overflow) > 0) {
407 		/* buffer overflow is detected */
408 		snd_seq_fifo_clear(fifo);
409 		/* return error code */
410 		return -ENOSPC;
411 	}
412 
413 	cell = NULL;
414 	err = 0;
415 	snd_seq_fifo_lock(fifo);
416 
417 	/* while data available in queue */
418 	while (count >= sizeof(struct snd_seq_event)) {
419 		int nonblock;
420 
421 		nonblock = (file->f_flags & O_NONBLOCK) || result > 0;
422 		if ((err = snd_seq_fifo_cell_out(fifo, &cell, nonblock)) < 0) {
423 			break;
424 		}
425 		if (snd_seq_ev_is_variable(&cell->event)) {
426 			struct snd_seq_event tmpev;
427 			tmpev = cell->event;
428 			tmpev.data.ext.len &= ~SNDRV_SEQ_EXT_MASK;
429 			if (copy_to_user(buf, &tmpev, sizeof(struct snd_seq_event))) {
430 				err = -EFAULT;
431 				break;
432 			}
433 			count -= sizeof(struct snd_seq_event);
434 			buf += sizeof(struct snd_seq_event);
435 			err = snd_seq_expand_var_event(&cell->event, count,
436 						       (char __force *)buf, 0,
437 						       sizeof(struct snd_seq_event));
438 			if (err < 0)
439 				break;
440 			result += err;
441 			count -= err;
442 			buf += err;
443 		} else {
444 			if (copy_to_user(buf, &cell->event, sizeof(struct snd_seq_event))) {
445 				err = -EFAULT;
446 				break;
447 			}
448 			count -= sizeof(struct snd_seq_event);
449 			buf += sizeof(struct snd_seq_event);
450 		}
451 		snd_seq_cell_free(cell);
452 		cell = NULL; /* to be sure */
453 		result += sizeof(struct snd_seq_event);
454 	}
455 
456 	if (err < 0) {
457 		if (cell)
458 			snd_seq_fifo_cell_putback(fifo, cell);
459 		if (err == -EAGAIN && result > 0)
460 			err = 0;
461 	}
462 	snd_seq_fifo_unlock(fifo);
463 
464 	return (err < 0) ? err : result;
465 }
466 
467 
468 /*
469  * check access permission to the port
470  */
471 static int check_port_perm(struct snd_seq_client_port *port, unsigned int flags)
472 {
473 	if ((port->capability & flags) != flags)
474 		return 0;
475 	return flags;
476 }
477 
478 /*
479  * check if the destination client is available, and return the pointer
480  * if filter is non-zero, client filter bitmap is tested.
481  */
482 static struct snd_seq_client *get_event_dest_client(struct snd_seq_event *event,
483 						    int filter)
484 {
485 	struct snd_seq_client *dest;
486 
487 	dest = snd_seq_client_use_ptr(event->dest.client);
488 	if (dest == NULL)
489 		return NULL;
490 	if (! dest->accept_input)
491 		goto __not_avail;
492 	if ((dest->filter & SNDRV_SEQ_FILTER_USE_EVENT) &&
493 	    ! test_bit(event->type, dest->event_filter))
494 		goto __not_avail;
495 	if (filter && !(dest->filter & filter))
496 		goto __not_avail;
497 
498 	return dest; /* ok - accessible */
499 __not_avail:
500 	snd_seq_client_unlock(dest);
501 	return NULL;
502 }
503 
504 
505 /*
506  * Return the error event.
507  *
508  * If the receiver client is a user client, the original event is
509  * encapsulated in SNDRV_SEQ_EVENT_BOUNCE as variable length event.  If
510  * the original event is also variable length, the external data is
511  * copied after the event record.
512  * If the receiver client is a kernel client, the original event is
513  * quoted in SNDRV_SEQ_EVENT_KERNEL_ERROR, since this requires no extra
514  * kmalloc.
515  */
516 static int bounce_error_event(struct snd_seq_client *client,
517 			      struct snd_seq_event *event,
518 			      int err, int atomic, int hop)
519 {
520 	struct snd_seq_event bounce_ev;
521 	int result;
522 
523 	if (client == NULL ||
524 	    ! (client->filter & SNDRV_SEQ_FILTER_BOUNCE) ||
525 	    ! client->accept_input)
526 		return 0; /* ignored */
527 
528 	/* set up quoted error */
529 	memset(&bounce_ev, 0, sizeof(bounce_ev));
530 	bounce_ev.type = SNDRV_SEQ_EVENT_KERNEL_ERROR;
531 	bounce_ev.flags = SNDRV_SEQ_EVENT_LENGTH_FIXED;
532 	bounce_ev.queue = SNDRV_SEQ_QUEUE_DIRECT;
533 	bounce_ev.source.client = SNDRV_SEQ_CLIENT_SYSTEM;
534 	bounce_ev.source.port = SNDRV_SEQ_PORT_SYSTEM_ANNOUNCE;
535 	bounce_ev.dest.client = client->number;
536 	bounce_ev.dest.port = event->source.port;
537 	bounce_ev.data.quote.origin = event->dest;
538 	bounce_ev.data.quote.event = event;
539 	bounce_ev.data.quote.value = -err; /* use positive value */
540 	result = snd_seq_deliver_single_event(NULL, &bounce_ev, 0, atomic, hop + 1);
541 	if (result < 0) {
542 		client->event_lost++;
543 		return result;
544 	}
545 
546 	return result;
547 }
548 
549 
550 /*
551  * rewrite the time-stamp of the event record with the curren time
552  * of the given queue.
553  * return non-zero if updated.
554  */
555 static int update_timestamp_of_queue(struct snd_seq_event *event,
556 				     int queue, int real_time)
557 {
558 	struct snd_seq_queue *q;
559 
560 	q = queueptr(queue);
561 	if (! q)
562 		return 0;
563 	event->queue = queue;
564 	event->flags &= ~SNDRV_SEQ_TIME_STAMP_MASK;
565 	if (real_time) {
566 		event->time.time = snd_seq_timer_get_cur_time(q->timer);
567 		event->flags |= SNDRV_SEQ_TIME_STAMP_REAL;
568 	} else {
569 		event->time.tick = snd_seq_timer_get_cur_tick(q->timer);
570 		event->flags |= SNDRV_SEQ_TIME_STAMP_TICK;
571 	}
572 	queuefree(q);
573 	return 1;
574 }
575 
576 
577 /*
578  * deliver an event to the specified destination.
579  * if filter is non-zero, client filter bitmap is tested.
580  *
581  *  RETURN VALUE: 0 : if succeeded
582  *		 <0 : error
583  */
584 static int snd_seq_deliver_single_event(struct snd_seq_client *client,
585 					struct snd_seq_event *event,
586 					int filter, int atomic, int hop)
587 {
588 	struct snd_seq_client *dest = NULL;
589 	struct snd_seq_client_port *dest_port = NULL;
590 	int result = -ENOENT;
591 	int direct;
592 
593 	direct = snd_seq_ev_is_direct(event);
594 
595 	dest = get_event_dest_client(event, filter);
596 	if (dest == NULL)
597 		goto __skip;
598 	dest_port = snd_seq_port_use_ptr(dest, event->dest.port);
599 	if (dest_port == NULL)
600 		goto __skip;
601 
602 	/* check permission */
603 	if (! check_port_perm(dest_port, SNDRV_SEQ_PORT_CAP_WRITE)) {
604 		result = -EPERM;
605 		goto __skip;
606 	}
607 
608 	if (dest_port->timestamping)
609 		update_timestamp_of_queue(event, dest_port->time_queue,
610 					  dest_port->time_real);
611 
612 	switch (dest->type) {
613 	case USER_CLIENT:
614 		if (dest->data.user.fifo)
615 			result = snd_seq_fifo_event_in(dest->data.user.fifo, event);
616 		break;
617 
618 	case KERNEL_CLIENT:
619 		if (dest_port->event_input == NULL)
620 			break;
621 		result = dest_port->event_input(event, direct,
622 						dest_port->private_data,
623 						atomic, hop);
624 		break;
625 	default:
626 		break;
627 	}
628 
629   __skip:
630 	if (dest_port)
631 		snd_seq_port_unlock(dest_port);
632 	if (dest)
633 		snd_seq_client_unlock(dest);
634 
635 	if (result < 0 && !direct) {
636 		result = bounce_error_event(client, event, result, atomic, hop);
637 	}
638 	return result;
639 }
640 
641 
642 /*
643  * send the event to all subscribers:
644  */
645 static int deliver_to_subscribers(struct snd_seq_client *client,
646 				  struct snd_seq_event *event,
647 				  int atomic, int hop)
648 {
649 	struct snd_seq_subscribers *subs;
650 	int err, result = 0, num_ev = 0;
651 	struct snd_seq_event event_saved;
652 	struct snd_seq_client_port *src_port;
653 	struct snd_seq_port_subs_info *grp;
654 
655 	src_port = snd_seq_port_use_ptr(client, event->source.port);
656 	if (src_port == NULL)
657 		return -EINVAL; /* invalid source port */
658 	/* save original event record */
659 	event_saved = *event;
660 	grp = &src_port->c_src;
661 
662 	/* lock list */
663 	if (atomic)
664 		read_lock(&grp->list_lock);
665 	else
666 		down_read_nested(&grp->list_mutex, hop);
667 	list_for_each_entry(subs, &grp->list_head, src_list) {
668 		/* both ports ready? */
669 		if (atomic_read(&subs->ref_count) != 2)
670 			continue;
671 		event->dest = subs->info.dest;
672 		if (subs->info.flags & SNDRV_SEQ_PORT_SUBS_TIMESTAMP)
673 			/* convert time according to flag with subscription */
674 			update_timestamp_of_queue(event, subs->info.queue,
675 						  subs->info.flags & SNDRV_SEQ_PORT_SUBS_TIME_REAL);
676 		err = snd_seq_deliver_single_event(client, event,
677 						   0, atomic, hop);
678 		if (err < 0) {
679 			/* save first error that occurs and continue */
680 			if (!result)
681 				result = err;
682 			continue;
683 		}
684 		num_ev++;
685 		/* restore original event record */
686 		*event = event_saved;
687 	}
688 	if (atomic)
689 		read_unlock(&grp->list_lock);
690 	else
691 		up_read(&grp->list_mutex);
692 	*event = event_saved; /* restore */
693 	snd_seq_port_unlock(src_port);
694 	return (result < 0) ? result : num_ev;
695 }
696 
697 
698 #ifdef SUPPORT_BROADCAST
699 /*
700  * broadcast to all ports:
701  */
702 static int port_broadcast_event(struct snd_seq_client *client,
703 				struct snd_seq_event *event,
704 				int atomic, int hop)
705 {
706 	int num_ev = 0, err, result = 0;
707 	struct snd_seq_client *dest_client;
708 	struct snd_seq_client_port *port;
709 
710 	dest_client = get_event_dest_client(event, SNDRV_SEQ_FILTER_BROADCAST);
711 	if (dest_client == NULL)
712 		return 0; /* no matching destination */
713 
714 	read_lock(&dest_client->ports_lock);
715 	list_for_each_entry(port, &dest_client->ports_list_head, list) {
716 		event->dest.port = port->addr.port;
717 		/* pass NULL as source client to avoid error bounce */
718 		err = snd_seq_deliver_single_event(NULL, event,
719 						   SNDRV_SEQ_FILTER_BROADCAST,
720 						   atomic, hop);
721 		if (err < 0) {
722 			/* save first error that occurs and continue */
723 			if (!result)
724 				result = err;
725 			continue;
726 		}
727 		num_ev++;
728 	}
729 	read_unlock(&dest_client->ports_lock);
730 	snd_seq_client_unlock(dest_client);
731 	event->dest.port = SNDRV_SEQ_ADDRESS_BROADCAST; /* restore */
732 	return (result < 0) ? result : num_ev;
733 }
734 
735 /*
736  * send the event to all clients:
737  * if destination port is also ADDRESS_BROADCAST, deliver to all ports.
738  */
739 static int broadcast_event(struct snd_seq_client *client,
740 			   struct snd_seq_event *event, int atomic, int hop)
741 {
742 	int err, result = 0, num_ev = 0;
743 	int dest;
744 	struct snd_seq_addr addr;
745 
746 	addr = event->dest; /* save */
747 
748 	for (dest = 0; dest < SNDRV_SEQ_MAX_CLIENTS; dest++) {
749 		/* don't send to itself */
750 		if (dest == client->number)
751 			continue;
752 		event->dest.client = dest;
753 		event->dest.port = addr.port;
754 		if (addr.port == SNDRV_SEQ_ADDRESS_BROADCAST)
755 			err = port_broadcast_event(client, event, atomic, hop);
756 		else
757 			/* pass NULL as source client to avoid error bounce */
758 			err = snd_seq_deliver_single_event(NULL, event,
759 							   SNDRV_SEQ_FILTER_BROADCAST,
760 							   atomic, hop);
761 		if (err < 0) {
762 			/* save first error that occurs and continue */
763 			if (!result)
764 				result = err;
765 			continue;
766 		}
767 		num_ev += err;
768 	}
769 	event->dest = addr; /* restore */
770 	return (result < 0) ? result : num_ev;
771 }
772 
773 
774 /* multicast - not supported yet */
775 static int multicast_event(struct snd_seq_client *client, struct snd_seq_event *event,
776 			   int atomic, int hop)
777 {
778 	pr_debug("ALSA: seq: multicast not supported yet.\n");
779 	return 0; /* ignored */
780 }
781 #endif /* SUPPORT_BROADCAST */
782 
783 
784 /* deliver an event to the destination port(s).
785  * if the event is to subscribers or broadcast, the event is dispatched
786  * to multiple targets.
787  *
788  * RETURN VALUE: n > 0  : the number of delivered events.
789  *               n == 0 : the event was not passed to any client.
790  *               n < 0  : error - event was not processed.
791  */
792 static int snd_seq_deliver_event(struct snd_seq_client *client, struct snd_seq_event *event,
793 				 int atomic, int hop)
794 {
795 	int result;
796 
797 	hop++;
798 	if (hop >= SNDRV_SEQ_MAX_HOPS) {
799 		pr_debug("ALSA: seq: too long delivery path (%d:%d->%d:%d)\n",
800 			   event->source.client, event->source.port,
801 			   event->dest.client, event->dest.port);
802 		return -EMLINK;
803 	}
804 
805 	if (snd_seq_ev_is_variable(event) &&
806 	    snd_BUG_ON(atomic && (event->data.ext.len & SNDRV_SEQ_EXT_USRPTR)))
807 		return -EINVAL;
808 
809 	if (event->queue == SNDRV_SEQ_ADDRESS_SUBSCRIBERS ||
810 	    event->dest.client == SNDRV_SEQ_ADDRESS_SUBSCRIBERS)
811 		result = deliver_to_subscribers(client, event, atomic, hop);
812 #ifdef SUPPORT_BROADCAST
813 	else if (event->queue == SNDRV_SEQ_ADDRESS_BROADCAST ||
814 		 event->dest.client == SNDRV_SEQ_ADDRESS_BROADCAST)
815 		result = broadcast_event(client, event, atomic, hop);
816 	else if (event->dest.client >= SNDRV_SEQ_MAX_CLIENTS)
817 		result = multicast_event(client, event, atomic, hop);
818 	else if (event->dest.port == SNDRV_SEQ_ADDRESS_BROADCAST)
819 		result = port_broadcast_event(client, event, atomic, hop);
820 #endif
821 	else
822 		result = snd_seq_deliver_single_event(client, event, 0, atomic, hop);
823 
824 	return result;
825 }
826 
827 /*
828  * dispatch an event cell:
829  * This function is called only from queue check routines in timer
830  * interrupts or after enqueued.
831  * The event cell shall be released or re-queued in this function.
832  *
833  * RETURN VALUE: n > 0  : the number of delivered events.
834  *		 n == 0 : the event was not passed to any client.
835  *		 n < 0  : error - event was not processed.
836  */
837 int snd_seq_dispatch_event(struct snd_seq_event_cell *cell, int atomic, int hop)
838 {
839 	struct snd_seq_client *client;
840 	int result;
841 
842 	if (snd_BUG_ON(!cell))
843 		return -EINVAL;
844 
845 	client = snd_seq_client_use_ptr(cell->event.source.client);
846 	if (client == NULL) {
847 		snd_seq_cell_free(cell); /* release this cell */
848 		return -EINVAL;
849 	}
850 
851 	if (cell->event.type == SNDRV_SEQ_EVENT_NOTE) {
852 		/* NOTE event:
853 		 * the event cell is re-used as a NOTE-OFF event and
854 		 * enqueued again.
855 		 */
856 		struct snd_seq_event tmpev, *ev;
857 
858 		/* reserve this event to enqueue note-off later */
859 		tmpev = cell->event;
860 		tmpev.type = SNDRV_SEQ_EVENT_NOTEON;
861 		result = snd_seq_deliver_event(client, &tmpev, atomic, hop);
862 
863 		/*
864 		 * This was originally a note event.  We now re-use the
865 		 * cell for the note-off event.
866 		 */
867 
868 		ev = &cell->event;
869 		ev->type = SNDRV_SEQ_EVENT_NOTEOFF;
870 		ev->flags |= SNDRV_SEQ_PRIORITY_HIGH;
871 
872 		/* add the duration time */
873 		switch (ev->flags & SNDRV_SEQ_TIME_STAMP_MASK) {
874 		case SNDRV_SEQ_TIME_STAMP_TICK:
875 			ev->time.tick += ev->data.note.duration;
876 			break;
877 		case SNDRV_SEQ_TIME_STAMP_REAL:
878 			/* unit for duration is ms */
879 			ev->time.time.tv_nsec += 1000000 * (ev->data.note.duration % 1000);
880 			ev->time.time.tv_sec += ev->data.note.duration / 1000 +
881 						ev->time.time.tv_nsec / 1000000000;
882 			ev->time.time.tv_nsec %= 1000000000;
883 			break;
884 		}
885 		ev->data.note.velocity = ev->data.note.off_velocity;
886 
887 		/* Now queue this cell as the note off event */
888 		if (snd_seq_enqueue_event(cell, atomic, hop) < 0)
889 			snd_seq_cell_free(cell); /* release this cell */
890 
891 	} else {
892 		/* Normal events:
893 		 * event cell is freed after processing the event
894 		 */
895 
896 		result = snd_seq_deliver_event(client, &cell->event, atomic, hop);
897 		snd_seq_cell_free(cell);
898 	}
899 
900 	snd_seq_client_unlock(client);
901 	return result;
902 }
903 
904 
905 /* Allocate a cell from client pool and enqueue it to queue:
906  * if pool is empty and blocking is TRUE, sleep until a new cell is
907  * available.
908  */
909 static int snd_seq_client_enqueue_event(struct snd_seq_client *client,
910 					struct snd_seq_event *event,
911 					struct file *file, int blocking,
912 					int atomic, int hop)
913 {
914 	struct snd_seq_event_cell *cell;
915 	int err;
916 
917 	/* special queue values - force direct passing */
918 	if (event->queue == SNDRV_SEQ_ADDRESS_SUBSCRIBERS) {
919 		event->dest.client = SNDRV_SEQ_ADDRESS_SUBSCRIBERS;
920 		event->queue = SNDRV_SEQ_QUEUE_DIRECT;
921 	} else
922 #ifdef SUPPORT_BROADCAST
923 		if (event->queue == SNDRV_SEQ_ADDRESS_BROADCAST) {
924 			event->dest.client = SNDRV_SEQ_ADDRESS_BROADCAST;
925 			event->queue = SNDRV_SEQ_QUEUE_DIRECT;
926 		}
927 #endif
928 	if (event->dest.client == SNDRV_SEQ_ADDRESS_SUBSCRIBERS) {
929 		/* check presence of source port */
930 		struct snd_seq_client_port *src_port = snd_seq_port_use_ptr(client, event->source.port);
931 		if (src_port == NULL)
932 			return -EINVAL;
933 		snd_seq_port_unlock(src_port);
934 	}
935 
936 	/* direct event processing without enqueued */
937 	if (snd_seq_ev_is_direct(event)) {
938 		if (event->type == SNDRV_SEQ_EVENT_NOTE)
939 			return -EINVAL; /* this event must be enqueued! */
940 		return snd_seq_deliver_event(client, event, atomic, hop);
941 	}
942 
943 	/* Not direct, normal queuing */
944 	if (snd_seq_queue_is_used(event->queue, client->number) <= 0)
945 		return -EINVAL;  /* invalid queue */
946 	if (! snd_seq_write_pool_allocated(client))
947 		return -ENXIO; /* queue is not allocated */
948 
949 	/* allocate an event cell */
950 	err = snd_seq_event_dup(client->pool, event, &cell, !blocking || atomic, file);
951 	if (err < 0)
952 		return err;
953 
954 	/* we got a cell. enqueue it. */
955 	if ((err = snd_seq_enqueue_event(cell, atomic, hop)) < 0) {
956 		snd_seq_cell_free(cell);
957 		return err;
958 	}
959 
960 	return 0;
961 }
962 
963 
964 /*
965  * check validity of event type and data length.
966  * return non-zero if invalid.
967  */
968 static int check_event_type_and_length(struct snd_seq_event *ev)
969 {
970 	switch (snd_seq_ev_length_type(ev)) {
971 	case SNDRV_SEQ_EVENT_LENGTH_FIXED:
972 		if (snd_seq_ev_is_variable_type(ev))
973 			return -EINVAL;
974 		break;
975 	case SNDRV_SEQ_EVENT_LENGTH_VARIABLE:
976 		if (! snd_seq_ev_is_variable_type(ev) ||
977 		    (ev->data.ext.len & ~SNDRV_SEQ_EXT_MASK) >= SNDRV_SEQ_MAX_EVENT_LEN)
978 			return -EINVAL;
979 		break;
980 	case SNDRV_SEQ_EVENT_LENGTH_VARUSR:
981 		if (! snd_seq_ev_is_direct(ev))
982 			return -EINVAL;
983 		break;
984 	}
985 	return 0;
986 }
987 
988 
989 /* handle write() */
990 /* possible error values:
991  *	-ENXIO	invalid client or file open mode
992  *	-ENOMEM	malloc failed
993  *	-EFAULT	seg. fault during copy from user space
994  *	-EINVAL	invalid event
995  *	-EAGAIN	no space in output pool
996  *	-EINTR	interrupts while sleep
997  *	-EMLINK	too many hops
998  *	others	depends on return value from driver callback
999  */
1000 static ssize_t snd_seq_write(struct file *file, const char __user *buf,
1001 			     size_t count, loff_t *offset)
1002 {
1003 	struct snd_seq_client *client = file->private_data;
1004 	int written = 0, len;
1005 	int err = -EINVAL;
1006 	struct snd_seq_event event;
1007 
1008 	if (!(snd_seq_file_flags(file) & SNDRV_SEQ_LFLG_OUTPUT))
1009 		return -ENXIO;
1010 
1011 	/* check client structures are in place */
1012 	if (snd_BUG_ON(!client))
1013 		return -ENXIO;
1014 
1015 	if (!client->accept_output || client->pool == NULL)
1016 		return -ENXIO;
1017 
1018 	/* allocate the pool now if the pool is not allocated yet */
1019 	if (client->pool->size > 0 && !snd_seq_write_pool_allocated(client)) {
1020 		if (snd_seq_pool_init(client->pool) < 0)
1021 			return -ENOMEM;
1022 	}
1023 
1024 	/* only process whole events */
1025 	while (count >= sizeof(struct snd_seq_event)) {
1026 		/* Read in the event header from the user */
1027 		len = sizeof(event);
1028 		if (copy_from_user(&event, buf, len)) {
1029 			err = -EFAULT;
1030 			break;
1031 		}
1032 		event.source.client = client->number;	/* fill in client number */
1033 		/* Check for extension data length */
1034 		if (check_event_type_and_length(&event)) {
1035 			err = -EINVAL;
1036 			break;
1037 		}
1038 
1039 		/* check for special events */
1040 		if (event.type == SNDRV_SEQ_EVENT_NONE)
1041 			goto __skip_event;
1042 		else if (snd_seq_ev_is_reserved(&event)) {
1043 			err = -EINVAL;
1044 			break;
1045 		}
1046 
1047 		if (snd_seq_ev_is_variable(&event)) {
1048 			int extlen = event.data.ext.len & ~SNDRV_SEQ_EXT_MASK;
1049 			if ((size_t)(extlen + len) > count) {
1050 				/* back out, will get an error this time or next */
1051 				err = -EINVAL;
1052 				break;
1053 			}
1054 			/* set user space pointer */
1055 			event.data.ext.len = extlen | SNDRV_SEQ_EXT_USRPTR;
1056 			event.data.ext.ptr = (char __force *)buf
1057 						+ sizeof(struct snd_seq_event);
1058 			len += extlen; /* increment data length */
1059 		} else {
1060 #ifdef CONFIG_COMPAT
1061 			if (client->convert32 && snd_seq_ev_is_varusr(&event)) {
1062 				void *ptr = (void __force *)compat_ptr(event.data.raw32.d[1]);
1063 				event.data.ext.ptr = ptr;
1064 			}
1065 #endif
1066 		}
1067 
1068 		/* ok, enqueue it */
1069 		err = snd_seq_client_enqueue_event(client, &event, file,
1070 						   !(file->f_flags & O_NONBLOCK),
1071 						   0, 0);
1072 		if (err < 0)
1073 			break;
1074 
1075 	__skip_event:
1076 		/* Update pointers and counts */
1077 		count -= len;
1078 		buf += len;
1079 		written += len;
1080 	}
1081 
1082 	return written ? written : err;
1083 }
1084 
1085 
1086 /*
1087  * handle polling
1088  */
1089 static __poll_t snd_seq_poll(struct file *file, poll_table * wait)
1090 {
1091 	struct snd_seq_client *client = file->private_data;
1092 	__poll_t mask = 0;
1093 
1094 	/* check client structures are in place */
1095 	if (snd_BUG_ON(!client))
1096 		return -ENXIO;
1097 
1098 	if ((snd_seq_file_flags(file) & SNDRV_SEQ_LFLG_INPUT) &&
1099 	    client->data.user.fifo) {
1100 
1101 		/* check if data is available in the outqueue */
1102 		if (snd_seq_fifo_poll_wait(client->data.user.fifo, file, wait))
1103 			mask |= POLLIN | POLLRDNORM;
1104 	}
1105 
1106 	if (snd_seq_file_flags(file) & SNDRV_SEQ_LFLG_OUTPUT) {
1107 
1108 		/* check if data is available in the pool */
1109 		if (!snd_seq_write_pool_allocated(client) ||
1110 		    snd_seq_pool_poll_wait(client->pool, file, wait))
1111 			mask |= POLLOUT | POLLWRNORM;
1112 	}
1113 
1114 	return mask;
1115 }
1116 
1117 
1118 /*-----------------------------------------------------*/
1119 
1120 static int snd_seq_ioctl_pversion(struct snd_seq_client *client, void *arg)
1121 {
1122 	int *pversion = arg;
1123 
1124 	*pversion = SNDRV_SEQ_VERSION;
1125 	return 0;
1126 }
1127 
1128 static int snd_seq_ioctl_client_id(struct snd_seq_client *client, void *arg)
1129 {
1130 	int *client_id = arg;
1131 
1132 	*client_id = client->number;
1133 	return 0;
1134 }
1135 
1136 /* SYSTEM_INFO ioctl() */
1137 static int snd_seq_ioctl_system_info(struct snd_seq_client *client, void *arg)
1138 {
1139 	struct snd_seq_system_info *info = arg;
1140 
1141 	memset(info, 0, sizeof(*info));
1142 	/* fill the info fields */
1143 	info->queues = SNDRV_SEQ_MAX_QUEUES;
1144 	info->clients = SNDRV_SEQ_MAX_CLIENTS;
1145 	info->ports = SNDRV_SEQ_MAX_PORTS;
1146 	info->channels = 256;	/* fixed limit */
1147 	info->cur_clients = client_usage.cur;
1148 	info->cur_queues = snd_seq_queue_get_cur_queues();
1149 
1150 	return 0;
1151 }
1152 
1153 
1154 /* RUNNING_MODE ioctl() */
1155 static int snd_seq_ioctl_running_mode(struct snd_seq_client *client, void  *arg)
1156 {
1157 	struct snd_seq_running_info *info = arg;
1158 	struct snd_seq_client *cptr;
1159 	int err = 0;
1160 
1161 	/* requested client number */
1162 	cptr = snd_seq_client_use_ptr(info->client);
1163 	if (cptr == NULL)
1164 		return -ENOENT;		/* don't change !!! */
1165 
1166 #ifdef SNDRV_BIG_ENDIAN
1167 	if (!info->big_endian) {
1168 		err = -EINVAL;
1169 		goto __err;
1170 	}
1171 #else
1172 	if (info->big_endian) {
1173 		err = -EINVAL;
1174 		goto __err;
1175 	}
1176 
1177 #endif
1178 	if (info->cpu_mode > sizeof(long)) {
1179 		err = -EINVAL;
1180 		goto __err;
1181 	}
1182 	cptr->convert32 = (info->cpu_mode < sizeof(long));
1183  __err:
1184 	snd_seq_client_unlock(cptr);
1185 	return err;
1186 }
1187 
1188 /* CLIENT_INFO ioctl() */
1189 static void get_client_info(struct snd_seq_client *cptr,
1190 			    struct snd_seq_client_info *info)
1191 {
1192 	info->client = cptr->number;
1193 
1194 	/* fill the info fields */
1195 	info->type = cptr->type;
1196 	strcpy(info->name, cptr->name);
1197 	info->filter = cptr->filter;
1198 	info->event_lost = cptr->event_lost;
1199 	memcpy(info->event_filter, cptr->event_filter, 32);
1200 	info->num_ports = cptr->num_ports;
1201 
1202 	if (cptr->type == USER_CLIENT)
1203 		info->pid = pid_vnr(cptr->data.user.owner);
1204 	else
1205 		info->pid = -1;
1206 
1207 	if (cptr->type == KERNEL_CLIENT)
1208 		info->card = cptr->data.kernel.card ? cptr->data.kernel.card->number : -1;
1209 	else
1210 		info->card = -1;
1211 
1212 	memset(info->reserved, 0, sizeof(info->reserved));
1213 }
1214 
1215 static int snd_seq_ioctl_get_client_info(struct snd_seq_client *client,
1216 					 void *arg)
1217 {
1218 	struct snd_seq_client_info *client_info = arg;
1219 	struct snd_seq_client *cptr;
1220 
1221 	/* requested client number */
1222 	cptr = snd_seq_client_use_ptr(client_info->client);
1223 	if (cptr == NULL)
1224 		return -ENOENT;		/* don't change !!! */
1225 
1226 	get_client_info(cptr, client_info);
1227 	snd_seq_client_unlock(cptr);
1228 
1229 	return 0;
1230 }
1231 
1232 
1233 /* CLIENT_INFO ioctl() */
1234 static int snd_seq_ioctl_set_client_info(struct snd_seq_client *client,
1235 					 void *arg)
1236 {
1237 	struct snd_seq_client_info *client_info = arg;
1238 
1239 	/* it is not allowed to set the info fields for an another client */
1240 	if (client->number != client_info->client)
1241 		return -EPERM;
1242 	/* also client type must be set now */
1243 	if (client->type != client_info->type)
1244 		return -EINVAL;
1245 
1246 	/* fill the info fields */
1247 	if (client_info->name[0])
1248 		strlcpy(client->name, client_info->name, sizeof(client->name));
1249 
1250 	client->filter = client_info->filter;
1251 	client->event_lost = client_info->event_lost;
1252 	memcpy(client->event_filter, client_info->event_filter, 32);
1253 
1254 	return 0;
1255 }
1256 
1257 
1258 /*
1259  * CREATE PORT ioctl()
1260  */
1261 static int snd_seq_ioctl_create_port(struct snd_seq_client *client, void *arg)
1262 {
1263 	struct snd_seq_port_info *info = arg;
1264 	struct snd_seq_client_port *port;
1265 	struct snd_seq_port_callback *callback;
1266 	int port_idx;
1267 
1268 	/* it is not allowed to create the port for an another client */
1269 	if (info->addr.client != client->number)
1270 		return -EPERM;
1271 
1272 	port = snd_seq_create_port(client, (info->flags & SNDRV_SEQ_PORT_FLG_GIVEN_PORT) ? info->addr.port : -1);
1273 	if (port == NULL)
1274 		return -ENOMEM;
1275 
1276 	if (client->type == USER_CLIENT && info->kernel) {
1277 		port_idx = port->addr.port;
1278 		snd_seq_port_unlock(port);
1279 		snd_seq_delete_port(client, port_idx);
1280 		return -EINVAL;
1281 	}
1282 	if (client->type == KERNEL_CLIENT) {
1283 		if ((callback = info->kernel) != NULL) {
1284 			if (callback->owner)
1285 				port->owner = callback->owner;
1286 			port->private_data = callback->private_data;
1287 			port->private_free = callback->private_free;
1288 			port->event_input = callback->event_input;
1289 			port->c_src.open = callback->subscribe;
1290 			port->c_src.close = callback->unsubscribe;
1291 			port->c_dest.open = callback->use;
1292 			port->c_dest.close = callback->unuse;
1293 		}
1294 	}
1295 
1296 	info->addr = port->addr;
1297 
1298 	snd_seq_set_port_info(port, info);
1299 	snd_seq_system_client_ev_port_start(port->addr.client, port->addr.port);
1300 	snd_seq_port_unlock(port);
1301 
1302 	return 0;
1303 }
1304 
1305 /*
1306  * DELETE PORT ioctl()
1307  */
1308 static int snd_seq_ioctl_delete_port(struct snd_seq_client *client, void *arg)
1309 {
1310 	struct snd_seq_port_info *info = arg;
1311 	int err;
1312 
1313 	/* it is not allowed to remove the port for an another client */
1314 	if (info->addr.client != client->number)
1315 		return -EPERM;
1316 
1317 	err = snd_seq_delete_port(client, info->addr.port);
1318 	if (err >= 0)
1319 		snd_seq_system_client_ev_port_exit(client->number, info->addr.port);
1320 	return err;
1321 }
1322 
1323 
1324 /*
1325  * GET_PORT_INFO ioctl() (on any client)
1326  */
1327 static int snd_seq_ioctl_get_port_info(struct snd_seq_client *client, void *arg)
1328 {
1329 	struct snd_seq_port_info *info = arg;
1330 	struct snd_seq_client *cptr;
1331 	struct snd_seq_client_port *port;
1332 
1333 	cptr = snd_seq_client_use_ptr(info->addr.client);
1334 	if (cptr == NULL)
1335 		return -ENXIO;
1336 
1337 	port = snd_seq_port_use_ptr(cptr, info->addr.port);
1338 	if (port == NULL) {
1339 		snd_seq_client_unlock(cptr);
1340 		return -ENOENT;			/* don't change */
1341 	}
1342 
1343 	/* get port info */
1344 	snd_seq_get_port_info(port, info);
1345 	snd_seq_port_unlock(port);
1346 	snd_seq_client_unlock(cptr);
1347 
1348 	return 0;
1349 }
1350 
1351 
1352 /*
1353  * SET_PORT_INFO ioctl() (only ports on this/own client)
1354  */
1355 static int snd_seq_ioctl_set_port_info(struct snd_seq_client *client, void *arg)
1356 {
1357 	struct snd_seq_port_info *info = arg;
1358 	struct snd_seq_client_port *port;
1359 
1360 	if (info->addr.client != client->number) /* only set our own ports ! */
1361 		return -EPERM;
1362 	port = snd_seq_port_use_ptr(client, info->addr.port);
1363 	if (port) {
1364 		snd_seq_set_port_info(port, info);
1365 		snd_seq_port_unlock(port);
1366 	}
1367 	return 0;
1368 }
1369 
1370 
1371 /*
1372  * port subscription (connection)
1373  */
1374 #define PERM_RD		(SNDRV_SEQ_PORT_CAP_READ|SNDRV_SEQ_PORT_CAP_SUBS_READ)
1375 #define PERM_WR		(SNDRV_SEQ_PORT_CAP_WRITE|SNDRV_SEQ_PORT_CAP_SUBS_WRITE)
1376 
1377 static int check_subscription_permission(struct snd_seq_client *client,
1378 					 struct snd_seq_client_port *sport,
1379 					 struct snd_seq_client_port *dport,
1380 					 struct snd_seq_port_subscribe *subs)
1381 {
1382 	if (client->number != subs->sender.client &&
1383 	    client->number != subs->dest.client) {
1384 		/* connection by third client - check export permission */
1385 		if (check_port_perm(sport, SNDRV_SEQ_PORT_CAP_NO_EXPORT))
1386 			return -EPERM;
1387 		if (check_port_perm(dport, SNDRV_SEQ_PORT_CAP_NO_EXPORT))
1388 			return -EPERM;
1389 	}
1390 
1391 	/* check read permission */
1392 	/* if sender or receiver is the subscribing client itself,
1393 	 * no permission check is necessary
1394 	 */
1395 	if (client->number != subs->sender.client) {
1396 		if (! check_port_perm(sport, PERM_RD))
1397 			return -EPERM;
1398 	}
1399 	/* check write permission */
1400 	if (client->number != subs->dest.client) {
1401 		if (! check_port_perm(dport, PERM_WR))
1402 			return -EPERM;
1403 	}
1404 	return 0;
1405 }
1406 
1407 /*
1408  * send an subscription notify event to user client:
1409  * client must be user client.
1410  */
1411 int snd_seq_client_notify_subscription(int client, int port,
1412 				       struct snd_seq_port_subscribe *info,
1413 				       int evtype)
1414 {
1415 	struct snd_seq_event event;
1416 
1417 	memset(&event, 0, sizeof(event));
1418 	event.type = evtype;
1419 	event.data.connect.dest = info->dest;
1420 	event.data.connect.sender = info->sender;
1421 
1422 	return snd_seq_system_notify(client, port, &event);  /* non-atomic */
1423 }
1424 
1425 
1426 /*
1427  * add to port's subscription list IOCTL interface
1428  */
1429 static int snd_seq_ioctl_subscribe_port(struct snd_seq_client *client,
1430 					void *arg)
1431 {
1432 	struct snd_seq_port_subscribe *subs = arg;
1433 	int result = -EINVAL;
1434 	struct snd_seq_client *receiver = NULL, *sender = NULL;
1435 	struct snd_seq_client_port *sport = NULL, *dport = NULL;
1436 
1437 	if ((receiver = snd_seq_client_use_ptr(subs->dest.client)) == NULL)
1438 		goto __end;
1439 	if ((sender = snd_seq_client_use_ptr(subs->sender.client)) == NULL)
1440 		goto __end;
1441 	if ((sport = snd_seq_port_use_ptr(sender, subs->sender.port)) == NULL)
1442 		goto __end;
1443 	if ((dport = snd_seq_port_use_ptr(receiver, subs->dest.port)) == NULL)
1444 		goto __end;
1445 
1446 	result = check_subscription_permission(client, sport, dport, subs);
1447 	if (result < 0)
1448 		goto __end;
1449 
1450 	/* connect them */
1451 	result = snd_seq_port_connect(client, sender, sport, receiver, dport, subs);
1452 	if (! result) /* broadcast announce */
1453 		snd_seq_client_notify_subscription(SNDRV_SEQ_ADDRESS_SUBSCRIBERS, 0,
1454 						   subs, SNDRV_SEQ_EVENT_PORT_SUBSCRIBED);
1455       __end:
1456       	if (sport)
1457 		snd_seq_port_unlock(sport);
1458 	if (dport)
1459 		snd_seq_port_unlock(dport);
1460 	if (sender)
1461 		snd_seq_client_unlock(sender);
1462 	if (receiver)
1463 		snd_seq_client_unlock(receiver);
1464 	return result;
1465 }
1466 
1467 
1468 /*
1469  * remove from port's subscription list
1470  */
1471 static int snd_seq_ioctl_unsubscribe_port(struct snd_seq_client *client,
1472 					  void *arg)
1473 {
1474 	struct snd_seq_port_subscribe *subs = arg;
1475 	int result = -ENXIO;
1476 	struct snd_seq_client *receiver = NULL, *sender = NULL;
1477 	struct snd_seq_client_port *sport = NULL, *dport = NULL;
1478 
1479 	if ((receiver = snd_seq_client_use_ptr(subs->dest.client)) == NULL)
1480 		goto __end;
1481 	if ((sender = snd_seq_client_use_ptr(subs->sender.client)) == NULL)
1482 		goto __end;
1483 	if ((sport = snd_seq_port_use_ptr(sender, subs->sender.port)) == NULL)
1484 		goto __end;
1485 	if ((dport = snd_seq_port_use_ptr(receiver, subs->dest.port)) == NULL)
1486 		goto __end;
1487 
1488 	result = check_subscription_permission(client, sport, dport, subs);
1489 	if (result < 0)
1490 		goto __end;
1491 
1492 	result = snd_seq_port_disconnect(client, sender, sport, receiver, dport, subs);
1493 	if (! result) /* broadcast announce */
1494 		snd_seq_client_notify_subscription(SNDRV_SEQ_ADDRESS_SUBSCRIBERS, 0,
1495 						   subs, SNDRV_SEQ_EVENT_PORT_UNSUBSCRIBED);
1496       __end:
1497       	if (sport)
1498 		snd_seq_port_unlock(sport);
1499 	if (dport)
1500 		snd_seq_port_unlock(dport);
1501 	if (sender)
1502 		snd_seq_client_unlock(sender);
1503 	if (receiver)
1504 		snd_seq_client_unlock(receiver);
1505 	return result;
1506 }
1507 
1508 
1509 /* CREATE_QUEUE ioctl() */
1510 static int snd_seq_ioctl_create_queue(struct snd_seq_client *client, void *arg)
1511 {
1512 	struct snd_seq_queue_info *info = arg;
1513 	struct snd_seq_queue *q;
1514 
1515 	q = snd_seq_queue_alloc(client->number, info->locked, info->flags);
1516 	if (IS_ERR(q))
1517 		return PTR_ERR(q);
1518 
1519 	info->queue = q->queue;
1520 	info->locked = q->locked;
1521 	info->owner = q->owner;
1522 
1523 	/* set queue name */
1524 	if (!info->name[0])
1525 		snprintf(info->name, sizeof(info->name), "Queue-%d", q->queue);
1526 	strlcpy(q->name, info->name, sizeof(q->name));
1527 	snd_use_lock_free(&q->use_lock);
1528 
1529 	return 0;
1530 }
1531 
1532 /* DELETE_QUEUE ioctl() */
1533 static int snd_seq_ioctl_delete_queue(struct snd_seq_client *client, void *arg)
1534 {
1535 	struct snd_seq_queue_info *info = arg;
1536 
1537 	return snd_seq_queue_delete(client->number, info->queue);
1538 }
1539 
1540 /* GET_QUEUE_INFO ioctl() */
1541 static int snd_seq_ioctl_get_queue_info(struct snd_seq_client *client,
1542 					void *arg)
1543 {
1544 	struct snd_seq_queue_info *info = arg;
1545 	struct snd_seq_queue *q;
1546 
1547 	q = queueptr(info->queue);
1548 	if (q == NULL)
1549 		return -EINVAL;
1550 
1551 	memset(info, 0, sizeof(*info));
1552 	info->queue = q->queue;
1553 	info->owner = q->owner;
1554 	info->locked = q->locked;
1555 	strlcpy(info->name, q->name, sizeof(info->name));
1556 	queuefree(q);
1557 
1558 	return 0;
1559 }
1560 
1561 /* SET_QUEUE_INFO ioctl() */
1562 static int snd_seq_ioctl_set_queue_info(struct snd_seq_client *client,
1563 					void *arg)
1564 {
1565 	struct snd_seq_queue_info *info = arg;
1566 	struct snd_seq_queue *q;
1567 
1568 	if (info->owner != client->number)
1569 		return -EINVAL;
1570 
1571 	/* change owner/locked permission */
1572 	if (snd_seq_queue_check_access(info->queue, client->number)) {
1573 		if (snd_seq_queue_set_owner(info->queue, client->number, info->locked) < 0)
1574 			return -EPERM;
1575 		if (info->locked)
1576 			snd_seq_queue_use(info->queue, client->number, 1);
1577 	} else {
1578 		return -EPERM;
1579 	}
1580 
1581 	q = queueptr(info->queue);
1582 	if (! q)
1583 		return -EINVAL;
1584 	if (q->owner != client->number) {
1585 		queuefree(q);
1586 		return -EPERM;
1587 	}
1588 	strlcpy(q->name, info->name, sizeof(q->name));
1589 	queuefree(q);
1590 
1591 	return 0;
1592 }
1593 
1594 /* GET_NAMED_QUEUE ioctl() */
1595 static int snd_seq_ioctl_get_named_queue(struct snd_seq_client *client,
1596 					 void *arg)
1597 {
1598 	struct snd_seq_queue_info *info = arg;
1599 	struct snd_seq_queue *q;
1600 
1601 	q = snd_seq_queue_find_name(info->name);
1602 	if (q == NULL)
1603 		return -EINVAL;
1604 	info->queue = q->queue;
1605 	info->owner = q->owner;
1606 	info->locked = q->locked;
1607 	queuefree(q);
1608 
1609 	return 0;
1610 }
1611 
1612 /* GET_QUEUE_STATUS ioctl() */
1613 static int snd_seq_ioctl_get_queue_status(struct snd_seq_client *client,
1614 					  void *arg)
1615 {
1616 	struct snd_seq_queue_status *status = arg;
1617 	struct snd_seq_queue *queue;
1618 	struct snd_seq_timer *tmr;
1619 
1620 	queue = queueptr(status->queue);
1621 	if (queue == NULL)
1622 		return -EINVAL;
1623 	memset(status, 0, sizeof(*status));
1624 	status->queue = queue->queue;
1625 
1626 	tmr = queue->timer;
1627 	status->events = queue->tickq->cells + queue->timeq->cells;
1628 
1629 	status->time = snd_seq_timer_get_cur_time(tmr);
1630 	status->tick = snd_seq_timer_get_cur_tick(tmr);
1631 
1632 	status->running = tmr->running;
1633 
1634 	status->flags = queue->flags;
1635 	queuefree(queue);
1636 
1637 	return 0;
1638 }
1639 
1640 
1641 /* GET_QUEUE_TEMPO ioctl() */
1642 static int snd_seq_ioctl_get_queue_tempo(struct snd_seq_client *client,
1643 					 void *arg)
1644 {
1645 	struct snd_seq_queue_tempo *tempo = arg;
1646 	struct snd_seq_queue *queue;
1647 	struct snd_seq_timer *tmr;
1648 
1649 	queue = queueptr(tempo->queue);
1650 	if (queue == NULL)
1651 		return -EINVAL;
1652 	memset(tempo, 0, sizeof(*tempo));
1653 	tempo->queue = queue->queue;
1654 
1655 	tmr = queue->timer;
1656 
1657 	tempo->tempo = tmr->tempo;
1658 	tempo->ppq = tmr->ppq;
1659 	tempo->skew_value = tmr->skew;
1660 	tempo->skew_base = tmr->skew_base;
1661 	queuefree(queue);
1662 
1663 	return 0;
1664 }
1665 
1666 
1667 /* SET_QUEUE_TEMPO ioctl() */
1668 int snd_seq_set_queue_tempo(int client, struct snd_seq_queue_tempo *tempo)
1669 {
1670 	if (!snd_seq_queue_check_access(tempo->queue, client))
1671 		return -EPERM;
1672 	return snd_seq_queue_timer_set_tempo(tempo->queue, client, tempo);
1673 }
1674 EXPORT_SYMBOL(snd_seq_set_queue_tempo);
1675 
1676 static int snd_seq_ioctl_set_queue_tempo(struct snd_seq_client *client,
1677 					 void *arg)
1678 {
1679 	struct snd_seq_queue_tempo *tempo = arg;
1680 	int result;
1681 
1682 	result = snd_seq_set_queue_tempo(client->number, tempo);
1683 	return result < 0 ? result : 0;
1684 }
1685 
1686 
1687 /* GET_QUEUE_TIMER ioctl() */
1688 static int snd_seq_ioctl_get_queue_timer(struct snd_seq_client *client,
1689 					 void *arg)
1690 {
1691 	struct snd_seq_queue_timer *timer = arg;
1692 	struct snd_seq_queue *queue;
1693 	struct snd_seq_timer *tmr;
1694 
1695 	queue = queueptr(timer->queue);
1696 	if (queue == NULL)
1697 		return -EINVAL;
1698 
1699 	if (mutex_lock_interruptible(&queue->timer_mutex)) {
1700 		queuefree(queue);
1701 		return -ERESTARTSYS;
1702 	}
1703 	tmr = queue->timer;
1704 	memset(timer, 0, sizeof(*timer));
1705 	timer->queue = queue->queue;
1706 
1707 	timer->type = tmr->type;
1708 	if (tmr->type == SNDRV_SEQ_TIMER_ALSA) {
1709 		timer->u.alsa.id = tmr->alsa_id;
1710 		timer->u.alsa.resolution = tmr->preferred_resolution;
1711 	}
1712 	mutex_unlock(&queue->timer_mutex);
1713 	queuefree(queue);
1714 
1715 	return 0;
1716 }
1717 
1718 
1719 /* SET_QUEUE_TIMER ioctl() */
1720 static int snd_seq_ioctl_set_queue_timer(struct snd_seq_client *client,
1721 					 void *arg)
1722 {
1723 	struct snd_seq_queue_timer *timer = arg;
1724 	int result = 0;
1725 
1726 	if (timer->type != SNDRV_SEQ_TIMER_ALSA)
1727 		return -EINVAL;
1728 
1729 	if (snd_seq_queue_check_access(timer->queue, client->number)) {
1730 		struct snd_seq_queue *q;
1731 		struct snd_seq_timer *tmr;
1732 
1733 		q = queueptr(timer->queue);
1734 		if (q == NULL)
1735 			return -ENXIO;
1736 		if (mutex_lock_interruptible(&q->timer_mutex)) {
1737 			queuefree(q);
1738 			return -ERESTARTSYS;
1739 		}
1740 		tmr = q->timer;
1741 		snd_seq_queue_timer_close(timer->queue);
1742 		tmr->type = timer->type;
1743 		if (tmr->type == SNDRV_SEQ_TIMER_ALSA) {
1744 			tmr->alsa_id = timer->u.alsa.id;
1745 			tmr->preferred_resolution = timer->u.alsa.resolution;
1746 		}
1747 		result = snd_seq_queue_timer_open(timer->queue);
1748 		mutex_unlock(&q->timer_mutex);
1749 		queuefree(q);
1750 	} else {
1751 		return -EPERM;
1752 	}
1753 
1754 	return result;
1755 }
1756 
1757 
1758 /* GET_QUEUE_CLIENT ioctl() */
1759 static int snd_seq_ioctl_get_queue_client(struct snd_seq_client *client,
1760 					  void *arg)
1761 {
1762 	struct snd_seq_queue_client *info = arg;
1763 	int used;
1764 
1765 	used = snd_seq_queue_is_used(info->queue, client->number);
1766 	if (used < 0)
1767 		return -EINVAL;
1768 	info->used = used;
1769 	info->client = client->number;
1770 
1771 	return 0;
1772 }
1773 
1774 
1775 /* SET_QUEUE_CLIENT ioctl() */
1776 static int snd_seq_ioctl_set_queue_client(struct snd_seq_client *client,
1777 					  void *arg)
1778 {
1779 	struct snd_seq_queue_client *info = arg;
1780 	int err;
1781 
1782 	if (info->used >= 0) {
1783 		err = snd_seq_queue_use(info->queue, client->number, info->used);
1784 		if (err < 0)
1785 			return err;
1786 	}
1787 
1788 	return snd_seq_ioctl_get_queue_client(client, arg);
1789 }
1790 
1791 
1792 /* GET_CLIENT_POOL ioctl() */
1793 static int snd_seq_ioctl_get_client_pool(struct snd_seq_client *client,
1794 					 void *arg)
1795 {
1796 	struct snd_seq_client_pool *info = arg;
1797 	struct snd_seq_client *cptr;
1798 
1799 	cptr = snd_seq_client_use_ptr(info->client);
1800 	if (cptr == NULL)
1801 		return -ENOENT;
1802 	memset(info, 0, sizeof(*info));
1803 	info->client = cptr->number;
1804 	info->output_pool = cptr->pool->size;
1805 	info->output_room = cptr->pool->room;
1806 	info->output_free = info->output_pool;
1807 	info->output_free = snd_seq_unused_cells(cptr->pool);
1808 	if (cptr->type == USER_CLIENT) {
1809 		info->input_pool = cptr->data.user.fifo_pool_size;
1810 		info->input_free = info->input_pool;
1811 		if (cptr->data.user.fifo)
1812 			info->input_free = snd_seq_unused_cells(cptr->data.user.fifo->pool);
1813 	} else {
1814 		info->input_pool = 0;
1815 		info->input_free = 0;
1816 	}
1817 	snd_seq_client_unlock(cptr);
1818 
1819 	return 0;
1820 }
1821 
1822 /* SET_CLIENT_POOL ioctl() */
1823 static int snd_seq_ioctl_set_client_pool(struct snd_seq_client *client,
1824 					 void *arg)
1825 {
1826 	struct snd_seq_client_pool *info = arg;
1827 	int rc;
1828 
1829 	if (client->number != info->client)
1830 		return -EINVAL; /* can't change other clients */
1831 
1832 	if (info->output_pool >= 1 && info->output_pool <= SNDRV_SEQ_MAX_EVENTS &&
1833 	    (! snd_seq_write_pool_allocated(client) ||
1834 	     info->output_pool != client->pool->size)) {
1835 		if (snd_seq_write_pool_allocated(client)) {
1836 			/* remove all existing cells */
1837 			snd_seq_pool_mark_closing(client->pool);
1838 			snd_seq_queue_client_leave_cells(client->number);
1839 			snd_seq_pool_done(client->pool);
1840 		}
1841 		client->pool->size = info->output_pool;
1842 		rc = snd_seq_pool_init(client->pool);
1843 		if (rc < 0)
1844 			return rc;
1845 	}
1846 	if (client->type == USER_CLIENT && client->data.user.fifo != NULL &&
1847 	    info->input_pool >= 1 &&
1848 	    info->input_pool <= SNDRV_SEQ_MAX_CLIENT_EVENTS &&
1849 	    info->input_pool != client->data.user.fifo_pool_size) {
1850 		/* change pool size */
1851 		rc = snd_seq_fifo_resize(client->data.user.fifo, info->input_pool);
1852 		if (rc < 0)
1853 			return rc;
1854 		client->data.user.fifo_pool_size = info->input_pool;
1855 	}
1856 	if (info->output_room >= 1 &&
1857 	    info->output_room <= client->pool->size) {
1858 		client->pool->room  = info->output_room;
1859 	}
1860 
1861 	return snd_seq_ioctl_get_client_pool(client, arg);
1862 }
1863 
1864 
1865 /* REMOVE_EVENTS ioctl() */
1866 static int snd_seq_ioctl_remove_events(struct snd_seq_client *client,
1867 				       void *arg)
1868 {
1869 	struct snd_seq_remove_events *info = arg;
1870 
1871 	/*
1872 	 * Input mostly not implemented XXX.
1873 	 */
1874 	if (info->remove_mode & SNDRV_SEQ_REMOVE_INPUT) {
1875 		/*
1876 		 * No restrictions so for a user client we can clear
1877 		 * the whole fifo
1878 		 */
1879 		if (client->type == USER_CLIENT && client->data.user.fifo)
1880 			snd_seq_fifo_clear(client->data.user.fifo);
1881 	}
1882 
1883 	if (info->remove_mode & SNDRV_SEQ_REMOVE_OUTPUT)
1884 		snd_seq_queue_remove_cells(client->number, info);
1885 
1886 	return 0;
1887 }
1888 
1889 
1890 /*
1891  * get subscription info
1892  */
1893 static int snd_seq_ioctl_get_subscription(struct snd_seq_client *client,
1894 					  void *arg)
1895 {
1896 	struct snd_seq_port_subscribe *subs = arg;
1897 	int result;
1898 	struct snd_seq_client *sender = NULL;
1899 	struct snd_seq_client_port *sport = NULL;
1900 	struct snd_seq_subscribers *p;
1901 
1902 	result = -EINVAL;
1903 	if ((sender = snd_seq_client_use_ptr(subs->sender.client)) == NULL)
1904 		goto __end;
1905 	if ((sport = snd_seq_port_use_ptr(sender, subs->sender.port)) == NULL)
1906 		goto __end;
1907 	p = snd_seq_port_get_subscription(&sport->c_src, &subs->dest);
1908 	if (p) {
1909 		result = 0;
1910 		*subs = p->info;
1911 	} else
1912 		result = -ENOENT;
1913 
1914       __end:
1915       	if (sport)
1916 		snd_seq_port_unlock(sport);
1917 	if (sender)
1918 		snd_seq_client_unlock(sender);
1919 
1920 	return result;
1921 }
1922 
1923 
1924 /*
1925  * get subscription info - check only its presence
1926  */
1927 static int snd_seq_ioctl_query_subs(struct snd_seq_client *client, void *arg)
1928 {
1929 	struct snd_seq_query_subs *subs = arg;
1930 	int result = -ENXIO;
1931 	struct snd_seq_client *cptr = NULL;
1932 	struct snd_seq_client_port *port = NULL;
1933 	struct snd_seq_port_subs_info *group;
1934 	struct list_head *p;
1935 	int i;
1936 
1937 	if ((cptr = snd_seq_client_use_ptr(subs->root.client)) == NULL)
1938 		goto __end;
1939 	if ((port = snd_seq_port_use_ptr(cptr, subs->root.port)) == NULL)
1940 		goto __end;
1941 
1942 	switch (subs->type) {
1943 	case SNDRV_SEQ_QUERY_SUBS_READ:
1944 		group = &port->c_src;
1945 		break;
1946 	case SNDRV_SEQ_QUERY_SUBS_WRITE:
1947 		group = &port->c_dest;
1948 		break;
1949 	default:
1950 		goto __end;
1951 	}
1952 
1953 	down_read(&group->list_mutex);
1954 	/* search for the subscriber */
1955 	subs->num_subs = group->count;
1956 	i = 0;
1957 	result = -ENOENT;
1958 	list_for_each(p, &group->list_head) {
1959 		if (i++ == subs->index) {
1960 			/* found! */
1961 			struct snd_seq_subscribers *s;
1962 			if (subs->type == SNDRV_SEQ_QUERY_SUBS_READ) {
1963 				s = list_entry(p, struct snd_seq_subscribers, src_list);
1964 				subs->addr = s->info.dest;
1965 			} else {
1966 				s = list_entry(p, struct snd_seq_subscribers, dest_list);
1967 				subs->addr = s->info.sender;
1968 			}
1969 			subs->flags = s->info.flags;
1970 			subs->queue = s->info.queue;
1971 			result = 0;
1972 			break;
1973 		}
1974 	}
1975 	up_read(&group->list_mutex);
1976 
1977       __end:
1978    	if (port)
1979 		snd_seq_port_unlock(port);
1980 	if (cptr)
1981 		snd_seq_client_unlock(cptr);
1982 
1983 	return result;
1984 }
1985 
1986 
1987 /*
1988  * query next client
1989  */
1990 static int snd_seq_ioctl_query_next_client(struct snd_seq_client *client,
1991 					   void *arg)
1992 {
1993 	struct snd_seq_client_info *info = arg;
1994 	struct snd_seq_client *cptr = NULL;
1995 
1996 	/* search for next client */
1997 	info->client++;
1998 	if (info->client < 0)
1999 		info->client = 0;
2000 	for (; info->client < SNDRV_SEQ_MAX_CLIENTS; info->client++) {
2001 		cptr = snd_seq_client_use_ptr(info->client);
2002 		if (cptr)
2003 			break; /* found */
2004 	}
2005 	if (cptr == NULL)
2006 		return -ENOENT;
2007 
2008 	get_client_info(cptr, info);
2009 	snd_seq_client_unlock(cptr);
2010 
2011 	return 0;
2012 }
2013 
2014 /*
2015  * query next port
2016  */
2017 static int snd_seq_ioctl_query_next_port(struct snd_seq_client *client,
2018 					 void *arg)
2019 {
2020 	struct snd_seq_port_info *info = arg;
2021 	struct snd_seq_client *cptr;
2022 	struct snd_seq_client_port *port = NULL;
2023 
2024 	cptr = snd_seq_client_use_ptr(info->addr.client);
2025 	if (cptr == NULL)
2026 		return -ENXIO;
2027 
2028 	/* search for next port */
2029 	info->addr.port++;
2030 	port = snd_seq_port_query_nearest(cptr, info);
2031 	if (port == NULL) {
2032 		snd_seq_client_unlock(cptr);
2033 		return -ENOENT;
2034 	}
2035 
2036 	/* get port info */
2037 	info->addr = port->addr;
2038 	snd_seq_get_port_info(port, info);
2039 	snd_seq_port_unlock(port);
2040 	snd_seq_client_unlock(cptr);
2041 
2042 	return 0;
2043 }
2044 
2045 /* -------------------------------------------------------- */
2046 
2047 static const struct ioctl_handler {
2048 	unsigned int cmd;
2049 	int (*func)(struct snd_seq_client *client, void *arg);
2050 } ioctl_handlers[] = {
2051 	{ SNDRV_SEQ_IOCTL_PVERSION, snd_seq_ioctl_pversion },
2052 	{ SNDRV_SEQ_IOCTL_CLIENT_ID, snd_seq_ioctl_client_id },
2053 	{ SNDRV_SEQ_IOCTL_SYSTEM_INFO, snd_seq_ioctl_system_info },
2054 	{ SNDRV_SEQ_IOCTL_RUNNING_MODE, snd_seq_ioctl_running_mode },
2055 	{ SNDRV_SEQ_IOCTL_GET_CLIENT_INFO, snd_seq_ioctl_get_client_info },
2056 	{ SNDRV_SEQ_IOCTL_SET_CLIENT_INFO, snd_seq_ioctl_set_client_info },
2057 	{ SNDRV_SEQ_IOCTL_CREATE_PORT, snd_seq_ioctl_create_port },
2058 	{ SNDRV_SEQ_IOCTL_DELETE_PORT, snd_seq_ioctl_delete_port },
2059 	{ SNDRV_SEQ_IOCTL_GET_PORT_INFO, snd_seq_ioctl_get_port_info },
2060 	{ SNDRV_SEQ_IOCTL_SET_PORT_INFO, snd_seq_ioctl_set_port_info },
2061 	{ SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT, snd_seq_ioctl_subscribe_port },
2062 	{ SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT, snd_seq_ioctl_unsubscribe_port },
2063 	{ SNDRV_SEQ_IOCTL_CREATE_QUEUE, snd_seq_ioctl_create_queue },
2064 	{ SNDRV_SEQ_IOCTL_DELETE_QUEUE, snd_seq_ioctl_delete_queue },
2065 	{ SNDRV_SEQ_IOCTL_GET_QUEUE_INFO, snd_seq_ioctl_get_queue_info },
2066 	{ SNDRV_SEQ_IOCTL_SET_QUEUE_INFO, snd_seq_ioctl_set_queue_info },
2067 	{ SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE, snd_seq_ioctl_get_named_queue },
2068 	{ SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS, snd_seq_ioctl_get_queue_status },
2069 	{ SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO, snd_seq_ioctl_get_queue_tempo },
2070 	{ SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO, snd_seq_ioctl_set_queue_tempo },
2071 	{ SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER, snd_seq_ioctl_get_queue_timer },
2072 	{ SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER, snd_seq_ioctl_set_queue_timer },
2073 	{ SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT, snd_seq_ioctl_get_queue_client },
2074 	{ SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT, snd_seq_ioctl_set_queue_client },
2075 	{ SNDRV_SEQ_IOCTL_GET_CLIENT_POOL, snd_seq_ioctl_get_client_pool },
2076 	{ SNDRV_SEQ_IOCTL_SET_CLIENT_POOL, snd_seq_ioctl_set_client_pool },
2077 	{ SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION, snd_seq_ioctl_get_subscription },
2078 	{ SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT, snd_seq_ioctl_query_next_client },
2079 	{ SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT, snd_seq_ioctl_query_next_port },
2080 	{ SNDRV_SEQ_IOCTL_REMOVE_EVENTS, snd_seq_ioctl_remove_events },
2081 	{ SNDRV_SEQ_IOCTL_QUERY_SUBS, snd_seq_ioctl_query_subs },
2082 	{ 0, NULL },
2083 };
2084 
2085 static long snd_seq_ioctl(struct file *file, unsigned int cmd,
2086 			  unsigned long arg)
2087 {
2088 	struct snd_seq_client *client = file->private_data;
2089 	/* To use kernel stack for ioctl data. */
2090 	union {
2091 		int pversion;
2092 		int client_id;
2093 		struct snd_seq_system_info	system_info;
2094 		struct snd_seq_running_info	running_info;
2095 		struct snd_seq_client_info	client_info;
2096 		struct snd_seq_port_info	port_info;
2097 		struct snd_seq_port_subscribe	port_subscribe;
2098 		struct snd_seq_queue_info	queue_info;
2099 		struct snd_seq_queue_status	queue_status;
2100 		struct snd_seq_queue_tempo	tempo;
2101 		struct snd_seq_queue_timer	queue_timer;
2102 		struct snd_seq_queue_client	queue_client;
2103 		struct snd_seq_client_pool	client_pool;
2104 		struct snd_seq_remove_events	remove_events;
2105 		struct snd_seq_query_subs	query_subs;
2106 	} buf;
2107 	const struct ioctl_handler *handler;
2108 	unsigned long size;
2109 	int err;
2110 
2111 	if (snd_BUG_ON(!client))
2112 		return -ENXIO;
2113 
2114 	for (handler = ioctl_handlers; handler->cmd > 0; ++handler) {
2115 		if (handler->cmd == cmd)
2116 			break;
2117 	}
2118 	if (handler->cmd == 0)
2119 		return -ENOTTY;
2120 
2121 	memset(&buf, 0, sizeof(buf));
2122 
2123 	/*
2124 	 * All of ioctl commands for ALSA sequencer get an argument of size
2125 	 * within 13 bits. We can safely pick up the size from the command.
2126 	 */
2127 	size = _IOC_SIZE(handler->cmd);
2128 	if (handler->cmd & IOC_IN) {
2129 		if (copy_from_user(&buf, (const void __user *)arg, size))
2130 			return -EFAULT;
2131 	}
2132 
2133 	err = handler->func(client, &buf);
2134 	if (err >= 0) {
2135 		/* Some commands includes a bug in 'dir' field. */
2136 		if (handler->cmd == SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT ||
2137 		    handler->cmd == SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ||
2138 		    (handler->cmd & IOC_OUT))
2139 			if (copy_to_user((void __user *)arg, &buf, size))
2140 				return -EFAULT;
2141 	}
2142 
2143 	return err;
2144 }
2145 
2146 #ifdef CONFIG_COMPAT
2147 #include "seq_compat.c"
2148 #else
2149 #define snd_seq_ioctl_compat	NULL
2150 #endif
2151 
2152 /* -------------------------------------------------------- */
2153 
2154 
2155 /* exported to kernel modules */
2156 int snd_seq_create_kernel_client(struct snd_card *card, int client_index,
2157 				 const char *name_fmt, ...)
2158 {
2159 	struct snd_seq_client *client;
2160 	va_list args;
2161 
2162 	if (snd_BUG_ON(in_interrupt()))
2163 		return -EBUSY;
2164 
2165 	if (card && client_index >= SNDRV_SEQ_CLIENTS_PER_CARD)
2166 		return -EINVAL;
2167 	if (card == NULL && client_index >= SNDRV_SEQ_GLOBAL_CLIENTS)
2168 		return -EINVAL;
2169 
2170 	if (mutex_lock_interruptible(&register_mutex))
2171 		return -ERESTARTSYS;
2172 
2173 	if (card) {
2174 		client_index += SNDRV_SEQ_GLOBAL_CLIENTS
2175 			+ card->number * SNDRV_SEQ_CLIENTS_PER_CARD;
2176 		if (client_index >= SNDRV_SEQ_DYNAMIC_CLIENTS_BEGIN)
2177 			client_index = -1;
2178 	}
2179 
2180 	/* empty write queue as default */
2181 	client = seq_create_client1(client_index, 0);
2182 	if (client == NULL) {
2183 		mutex_unlock(&register_mutex);
2184 		return -EBUSY;	/* failure code */
2185 	}
2186 	usage_alloc(&client_usage, 1);
2187 
2188 	client->accept_input = 1;
2189 	client->accept_output = 1;
2190 	client->data.kernel.card = card;
2191 
2192 	va_start(args, name_fmt);
2193 	vsnprintf(client->name, sizeof(client->name), name_fmt, args);
2194 	va_end(args);
2195 
2196 	client->type = KERNEL_CLIENT;
2197 	mutex_unlock(&register_mutex);
2198 
2199 	/* make others aware this new client */
2200 	snd_seq_system_client_ev_client_start(client->number);
2201 
2202 	/* return client number to caller */
2203 	return client->number;
2204 }
2205 EXPORT_SYMBOL(snd_seq_create_kernel_client);
2206 
2207 /* exported to kernel modules */
2208 int snd_seq_delete_kernel_client(int client)
2209 {
2210 	struct snd_seq_client *ptr;
2211 
2212 	if (snd_BUG_ON(in_interrupt()))
2213 		return -EBUSY;
2214 
2215 	ptr = clientptr(client);
2216 	if (ptr == NULL)
2217 		return -EINVAL;
2218 
2219 	seq_free_client(ptr);
2220 	kfree(ptr);
2221 	return 0;
2222 }
2223 EXPORT_SYMBOL(snd_seq_delete_kernel_client);
2224 
2225 /* skeleton to enqueue event, called from snd_seq_kernel_client_enqueue
2226  * and snd_seq_kernel_client_enqueue_blocking
2227  */
2228 static int kernel_client_enqueue(int client, struct snd_seq_event *ev,
2229 				 struct file *file, int blocking,
2230 				 int atomic, int hop)
2231 {
2232 	struct snd_seq_client *cptr;
2233 	int result;
2234 
2235 	if (snd_BUG_ON(!ev))
2236 		return -EINVAL;
2237 
2238 	if (ev->type == SNDRV_SEQ_EVENT_NONE)
2239 		return 0; /* ignore this */
2240 	if (ev->type == SNDRV_SEQ_EVENT_KERNEL_ERROR)
2241 		return -EINVAL; /* quoted events can't be enqueued */
2242 
2243 	/* fill in client number */
2244 	ev->source.client = client;
2245 
2246 	if (check_event_type_and_length(ev))
2247 		return -EINVAL;
2248 
2249 	cptr = snd_seq_client_use_ptr(client);
2250 	if (cptr == NULL)
2251 		return -EINVAL;
2252 
2253 	if (! cptr->accept_output)
2254 		result = -EPERM;
2255 	else /* send it */
2256 		result = snd_seq_client_enqueue_event(cptr, ev, file, blocking, atomic, hop);
2257 
2258 	snd_seq_client_unlock(cptr);
2259 	return result;
2260 }
2261 
2262 /*
2263  * exported, called by kernel clients to enqueue events (w/o blocking)
2264  *
2265  * RETURN VALUE: zero if succeed, negative if error
2266  */
2267 int snd_seq_kernel_client_enqueue(int client, struct snd_seq_event * ev,
2268 				  int atomic, int hop)
2269 {
2270 	return kernel_client_enqueue(client, ev, NULL, 0, atomic, hop);
2271 }
2272 EXPORT_SYMBOL(snd_seq_kernel_client_enqueue);
2273 
2274 /*
2275  * exported, called by kernel clients to enqueue events (with blocking)
2276  *
2277  * RETURN VALUE: zero if succeed, negative if error
2278  */
2279 int snd_seq_kernel_client_enqueue_blocking(int client, struct snd_seq_event * ev,
2280 					   struct file *file,
2281 					   int atomic, int hop)
2282 {
2283 	return kernel_client_enqueue(client, ev, file, 1, atomic, hop);
2284 }
2285 EXPORT_SYMBOL(snd_seq_kernel_client_enqueue_blocking);
2286 
2287 /*
2288  * exported, called by kernel clients to dispatch events directly to other
2289  * clients, bypassing the queues.  Event time-stamp will be updated.
2290  *
2291  * RETURN VALUE: negative = delivery failed,
2292  *		 zero, or positive: the number of delivered events
2293  */
2294 int snd_seq_kernel_client_dispatch(int client, struct snd_seq_event * ev,
2295 				   int atomic, int hop)
2296 {
2297 	struct snd_seq_client *cptr;
2298 	int result;
2299 
2300 	if (snd_BUG_ON(!ev))
2301 		return -EINVAL;
2302 
2303 	/* fill in client number */
2304 	ev->queue = SNDRV_SEQ_QUEUE_DIRECT;
2305 	ev->source.client = client;
2306 
2307 	if (check_event_type_and_length(ev))
2308 		return -EINVAL;
2309 
2310 	cptr = snd_seq_client_use_ptr(client);
2311 	if (cptr == NULL)
2312 		return -EINVAL;
2313 
2314 	if (!cptr->accept_output)
2315 		result = -EPERM;
2316 	else
2317 		result = snd_seq_deliver_event(cptr, ev, atomic, hop);
2318 
2319 	snd_seq_client_unlock(cptr);
2320 	return result;
2321 }
2322 EXPORT_SYMBOL(snd_seq_kernel_client_dispatch);
2323 
2324 /**
2325  * snd_seq_kernel_client_ctl - operate a command for a client with data in
2326  *			       kernel space.
2327  * @clientid:	A numerical ID for a client.
2328  * @cmd:	An ioctl(2) command for ALSA sequencer operation.
2329  * @arg:	A pointer to data in kernel space.
2330  *
2331  * Against its name, both kernel/application client can be handled by this
2332  * kernel API. A pointer of 'arg' argument should be in kernel space.
2333  *
2334  * Return: 0 at success. Negative error code at failure.
2335  */
2336 int snd_seq_kernel_client_ctl(int clientid, unsigned int cmd, void *arg)
2337 {
2338 	const struct ioctl_handler *handler;
2339 	struct snd_seq_client *client;
2340 
2341 	client = clientptr(clientid);
2342 	if (client == NULL)
2343 		return -ENXIO;
2344 
2345 	for (handler = ioctl_handlers; handler->cmd > 0; ++handler) {
2346 		if (handler->cmd == cmd)
2347 			return handler->func(client, arg);
2348 	}
2349 
2350 	pr_debug("ALSA: seq unknown ioctl() 0x%x (type='%c', number=0x%02x)\n",
2351 		 cmd, _IOC_TYPE(cmd), _IOC_NR(cmd));
2352 	return -ENOTTY;
2353 }
2354 EXPORT_SYMBOL(snd_seq_kernel_client_ctl);
2355 
2356 /* exported (for OSS emulator) */
2357 int snd_seq_kernel_client_write_poll(int clientid, struct file *file, poll_table *wait)
2358 {
2359 	struct snd_seq_client *client;
2360 
2361 	client = clientptr(clientid);
2362 	if (client == NULL)
2363 		return -ENXIO;
2364 
2365 	if (! snd_seq_write_pool_allocated(client))
2366 		return 1;
2367 	if (snd_seq_pool_poll_wait(client->pool, file, wait))
2368 		return 1;
2369 	return 0;
2370 }
2371 EXPORT_SYMBOL(snd_seq_kernel_client_write_poll);
2372 
2373 /*---------------------------------------------------------------------------*/
2374 
2375 #ifdef CONFIG_SND_PROC_FS
2376 /*
2377  *  /proc interface
2378  */
2379 static void snd_seq_info_dump_subscribers(struct snd_info_buffer *buffer,
2380 					  struct snd_seq_port_subs_info *group,
2381 					  int is_src, char *msg)
2382 {
2383 	struct list_head *p;
2384 	struct snd_seq_subscribers *s;
2385 	int count = 0;
2386 
2387 	down_read(&group->list_mutex);
2388 	if (list_empty(&group->list_head)) {
2389 		up_read(&group->list_mutex);
2390 		return;
2391 	}
2392 	snd_iprintf(buffer, msg);
2393 	list_for_each(p, &group->list_head) {
2394 		if (is_src)
2395 			s = list_entry(p, struct snd_seq_subscribers, src_list);
2396 		else
2397 			s = list_entry(p, struct snd_seq_subscribers, dest_list);
2398 		if (count++)
2399 			snd_iprintf(buffer, ", ");
2400 		snd_iprintf(buffer, "%d:%d",
2401 			    is_src ? s->info.dest.client : s->info.sender.client,
2402 			    is_src ? s->info.dest.port : s->info.sender.port);
2403 		if (s->info.flags & SNDRV_SEQ_PORT_SUBS_TIMESTAMP)
2404 			snd_iprintf(buffer, "[%c:%d]", ((s->info.flags & SNDRV_SEQ_PORT_SUBS_TIME_REAL) ? 'r' : 't'), s->info.queue);
2405 		if (group->exclusive)
2406 			snd_iprintf(buffer, "[ex]");
2407 	}
2408 	up_read(&group->list_mutex);
2409 	snd_iprintf(buffer, "\n");
2410 }
2411 
2412 #define FLAG_PERM_RD(perm) ((perm) & SNDRV_SEQ_PORT_CAP_READ ? ((perm) & SNDRV_SEQ_PORT_CAP_SUBS_READ ? 'R' : 'r') : '-')
2413 #define FLAG_PERM_WR(perm) ((perm) & SNDRV_SEQ_PORT_CAP_WRITE ? ((perm) & SNDRV_SEQ_PORT_CAP_SUBS_WRITE ? 'W' : 'w') : '-')
2414 #define FLAG_PERM_EX(perm) ((perm) & SNDRV_SEQ_PORT_CAP_NO_EXPORT ? '-' : 'e')
2415 
2416 #define FLAG_PERM_DUPLEX(perm) ((perm) & SNDRV_SEQ_PORT_CAP_DUPLEX ? 'X' : '-')
2417 
2418 static void snd_seq_info_dump_ports(struct snd_info_buffer *buffer,
2419 				    struct snd_seq_client *client)
2420 {
2421 	struct snd_seq_client_port *p;
2422 
2423 	mutex_lock(&client->ports_mutex);
2424 	list_for_each_entry(p, &client->ports_list_head, list) {
2425 		snd_iprintf(buffer, "  Port %3d : \"%s\" (%c%c%c%c)\n",
2426 			    p->addr.port, p->name,
2427 			    FLAG_PERM_RD(p->capability),
2428 			    FLAG_PERM_WR(p->capability),
2429 			    FLAG_PERM_EX(p->capability),
2430 			    FLAG_PERM_DUPLEX(p->capability));
2431 		snd_seq_info_dump_subscribers(buffer, &p->c_src, 1, "    Connecting To: ");
2432 		snd_seq_info_dump_subscribers(buffer, &p->c_dest, 0, "    Connected From: ");
2433 	}
2434 	mutex_unlock(&client->ports_mutex);
2435 }
2436 
2437 
2438 /* exported to seq_info.c */
2439 void snd_seq_info_clients_read(struct snd_info_entry *entry,
2440 			       struct snd_info_buffer *buffer)
2441 {
2442 	int c;
2443 	struct snd_seq_client *client;
2444 
2445 	snd_iprintf(buffer, "Client info\n");
2446 	snd_iprintf(buffer, "  cur  clients : %d\n", client_usage.cur);
2447 	snd_iprintf(buffer, "  peak clients : %d\n", client_usage.peak);
2448 	snd_iprintf(buffer, "  max  clients : %d\n", SNDRV_SEQ_MAX_CLIENTS);
2449 	snd_iprintf(buffer, "\n");
2450 
2451 	/* list the client table */
2452 	for (c = 0; c < SNDRV_SEQ_MAX_CLIENTS; c++) {
2453 		client = snd_seq_client_use_ptr(c);
2454 		if (client == NULL)
2455 			continue;
2456 		if (client->type == NO_CLIENT) {
2457 			snd_seq_client_unlock(client);
2458 			continue;
2459 		}
2460 
2461 		snd_iprintf(buffer, "Client %3d : \"%s\" [%s]\n",
2462 			    c, client->name,
2463 			    client->type == USER_CLIENT ? "User" : "Kernel");
2464 		snd_seq_info_dump_ports(buffer, client);
2465 		if (snd_seq_write_pool_allocated(client)) {
2466 			snd_iprintf(buffer, "  Output pool :\n");
2467 			snd_seq_info_pool(buffer, client->pool, "    ");
2468 		}
2469 		if (client->type == USER_CLIENT && client->data.user.fifo &&
2470 		    client->data.user.fifo->pool) {
2471 			snd_iprintf(buffer, "  Input pool :\n");
2472 			snd_seq_info_pool(buffer, client->data.user.fifo->pool, "    ");
2473 		}
2474 		snd_seq_client_unlock(client);
2475 	}
2476 }
2477 #endif /* CONFIG_SND_PROC_FS */
2478 
2479 /*---------------------------------------------------------------------------*/
2480 
2481 
2482 /*
2483  *  REGISTRATION PART
2484  */
2485 
2486 static const struct file_operations snd_seq_f_ops =
2487 {
2488 	.owner =	THIS_MODULE,
2489 	.read =		snd_seq_read,
2490 	.write =	snd_seq_write,
2491 	.open =		snd_seq_open,
2492 	.release =	snd_seq_release,
2493 	.llseek =	no_llseek,
2494 	.poll =		snd_seq_poll,
2495 	.unlocked_ioctl =	snd_seq_ioctl,
2496 	.compat_ioctl =	snd_seq_ioctl_compat,
2497 };
2498 
2499 static struct device seq_dev;
2500 
2501 /*
2502  * register sequencer device
2503  */
2504 int __init snd_sequencer_device_init(void)
2505 {
2506 	int err;
2507 
2508 	snd_device_initialize(&seq_dev, NULL);
2509 	dev_set_name(&seq_dev, "seq");
2510 
2511 	if (mutex_lock_interruptible(&register_mutex))
2512 		return -ERESTARTSYS;
2513 
2514 	err = snd_register_device(SNDRV_DEVICE_TYPE_SEQUENCER, NULL, 0,
2515 				  &snd_seq_f_ops, NULL, &seq_dev);
2516 	if (err < 0) {
2517 		mutex_unlock(&register_mutex);
2518 		put_device(&seq_dev);
2519 		return err;
2520 	}
2521 
2522 	mutex_unlock(&register_mutex);
2523 
2524 	return 0;
2525 }
2526 
2527 
2528 
2529 /*
2530  * unregister sequencer device
2531  */
2532 void __exit snd_sequencer_device_done(void)
2533 {
2534 	snd_unregister_device(&seq_dev);
2535 	put_device(&seq_dev);
2536 }
2537