Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2001 Jens Axboe <axboe@suse.de> |
| 3 | * |
| 4 | * This program is free software; you can redistribute it and/or modify |
| 5 | * it under the terms of the GNU General Public License version 2 as |
| 6 | * published by the Free Software Foundation. |
| 7 | * |
| 8 | * This program is distributed in the hope that it will be useful, |
| 9 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 10 | * |
| 11 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 12 | * GNU General Public License for more details. |
| 13 | * |
| 14 | * You should have received a copy of the GNU General Public Licens |
| 15 | * along with this program; if not, write to the Free Software |
| 16 | * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111- |
| 17 | * |
| 18 | */ |
| 19 | #include <linux/kernel.h> |
| 20 | #include <linux/errno.h> |
| 21 | #include <linux/string.h> |
| 22 | #include <linux/module.h> |
| 23 | #include <linux/blkdev.h> |
Randy.Dunlap | c59ede7 | 2006-01-11 12:17:46 -0800 | [diff] [blame] | 24 | #include <linux/capability.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 25 | #include <linux/completion.h> |
| 26 | #include <linux/cdrom.h> |
| 27 | #include <linux/slab.h> |
| 28 | #include <linux/times.h> |
| 29 | #include <asm/uaccess.h> |
| 30 | |
| 31 | #include <scsi/scsi.h> |
| 32 | #include <scsi/scsi_ioctl.h> |
| 33 | #include <scsi/scsi_cmnd.h> |
| 34 | |
| 35 | /* Command group 3 is reserved and should never be used. */ |
Boaz Harrosh | db4742d | 2008-04-30 11:27:26 +0300 | [diff] [blame^] | 36 | const unsigned char scsi_command_size_tbl[8] = |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 37 | { |
| 38 | 6, 10, 10, 12, |
| 39 | 16, 12, 10, 10 |
| 40 | }; |
Boaz Harrosh | db4742d | 2008-04-30 11:27:26 +0300 | [diff] [blame^] | 41 | EXPORT_SYMBOL(scsi_command_size_tbl); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 42 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 43 | #include <scsi/sg.h> |
| 44 | |
| 45 | static int sg_get_version(int __user *p) |
| 46 | { |
Arjan van de Ven | 6410009 | 2006-01-06 09:46:02 +0100 | [diff] [blame] | 47 | static const int sg_version_num = 30527; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 48 | return put_user(sg_version_num, p); |
| 49 | } |
| 50 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 51 | static int scsi_get_idlun(struct request_queue *q, int __user *p) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 52 | { |
| 53 | return put_user(0, p); |
| 54 | } |
| 55 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 56 | static int scsi_get_bus(struct request_queue *q, int __user *p) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 57 | { |
| 58 | return put_user(0, p); |
| 59 | } |
| 60 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 61 | static int sg_get_timeout(struct request_queue *q) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 62 | { |
| 63 | return q->sg_timeout / (HZ / USER_HZ); |
| 64 | } |
| 65 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 66 | static int sg_set_timeout(struct request_queue *q, int __user *p) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 67 | { |
| 68 | int timeout, err = get_user(timeout, p); |
| 69 | |
| 70 | if (!err) |
| 71 | q->sg_timeout = timeout * (HZ / USER_HZ); |
| 72 | |
| 73 | return err; |
| 74 | } |
| 75 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 76 | static int sg_get_reserved_size(struct request_queue *q, int __user *p) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 77 | { |
Alan Stern | 44ec954 | 2007-02-20 11:01:57 -0500 | [diff] [blame] | 78 | unsigned val = min(q->sg_reserved_size, q->max_sectors << 9); |
| 79 | |
| 80 | return put_user(val, p); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 81 | } |
| 82 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 83 | static int sg_set_reserved_size(struct request_queue *q, int __user *p) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 84 | { |
| 85 | int size, err = get_user(size, p); |
| 86 | |
| 87 | if (err) |
| 88 | return err; |
| 89 | |
| 90 | if (size < 0) |
| 91 | return -EINVAL; |
| 92 | if (size > (q->max_sectors << 9)) |
| 93 | size = q->max_sectors << 9; |
| 94 | |
| 95 | q->sg_reserved_size = size; |
| 96 | return 0; |
| 97 | } |
| 98 | |
| 99 | /* |
| 100 | * will always return that we are ATAPI even for a real SCSI drive, I'm not |
| 101 | * so sure this is worth doing anything about (why would you care??) |
| 102 | */ |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 103 | static int sg_emulated_host(struct request_queue *q, int __user *p) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 104 | { |
| 105 | return put_user(1, p); |
| 106 | } |
| 107 | |
| 108 | #define CMD_READ_SAFE 0x01 |
| 109 | #define CMD_WRITE_SAFE 0x02 |
| 110 | #define CMD_WARNED 0x04 |
| 111 | #define safe_for_read(cmd) [cmd] = CMD_READ_SAFE |
| 112 | #define safe_for_write(cmd) [cmd] = CMD_WRITE_SAFE |
| 113 | |
FUJITA Tomonori | 337ad41d | 2006-12-20 11:18:54 +0100 | [diff] [blame] | 114 | int blk_verify_command(unsigned char *cmd, int has_write_perm) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 115 | { |
| 116 | static unsigned char cmd_type[256] = { |
| 117 | |
| 118 | /* Basic read-only commands */ |
| 119 | safe_for_read(TEST_UNIT_READY), |
| 120 | safe_for_read(REQUEST_SENSE), |
| 121 | safe_for_read(READ_6), |
| 122 | safe_for_read(READ_10), |
| 123 | safe_for_read(READ_12), |
| 124 | safe_for_read(READ_16), |
| 125 | safe_for_read(READ_BUFFER), |
Douglas Gilbert | 942fc2f | 2005-09-09 20:07:32 +1000 | [diff] [blame] | 126 | safe_for_read(READ_DEFECT_DATA), |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 127 | safe_for_read(READ_LONG), |
| 128 | safe_for_read(INQUIRY), |
| 129 | safe_for_read(MODE_SENSE), |
| 130 | safe_for_read(MODE_SENSE_10), |
| 131 | safe_for_read(LOG_SENSE), |
| 132 | safe_for_read(START_STOP), |
| 133 | safe_for_read(GPCMD_VERIFY_10), |
| 134 | safe_for_read(VERIFY_16), |
| 135 | |
| 136 | /* Audio CD commands */ |
| 137 | safe_for_read(GPCMD_PLAY_CD), |
| 138 | safe_for_read(GPCMD_PLAY_AUDIO_10), |
| 139 | safe_for_read(GPCMD_PLAY_AUDIO_MSF), |
| 140 | safe_for_read(GPCMD_PLAY_AUDIO_TI), |
| 141 | safe_for_read(GPCMD_PAUSE_RESUME), |
| 142 | |
| 143 | /* CD/DVD data reading */ |
| 144 | safe_for_read(GPCMD_READ_BUFFER_CAPACITY), |
| 145 | safe_for_read(GPCMD_READ_CD), |
| 146 | safe_for_read(GPCMD_READ_CD_MSF), |
| 147 | safe_for_read(GPCMD_READ_DISC_INFO), |
| 148 | safe_for_read(GPCMD_READ_CDVD_CAPACITY), |
| 149 | safe_for_read(GPCMD_READ_DVD_STRUCTURE), |
| 150 | safe_for_read(GPCMD_READ_HEADER), |
| 151 | safe_for_read(GPCMD_READ_TRACK_RZONE_INFO), |
| 152 | safe_for_read(GPCMD_READ_SUBCHANNEL), |
| 153 | safe_for_read(GPCMD_READ_TOC_PMA_ATIP), |
| 154 | safe_for_read(GPCMD_REPORT_KEY), |
| 155 | safe_for_read(GPCMD_SCAN), |
| 156 | safe_for_read(GPCMD_GET_CONFIGURATION), |
| 157 | safe_for_read(GPCMD_READ_FORMAT_CAPACITIES), |
| 158 | safe_for_read(GPCMD_GET_EVENT_STATUS_NOTIFICATION), |
| 159 | safe_for_read(GPCMD_GET_PERFORMANCE), |
| 160 | safe_for_read(GPCMD_SEEK), |
| 161 | safe_for_read(GPCMD_STOP_PLAY_SCAN), |
| 162 | |
| 163 | /* Basic writing commands */ |
| 164 | safe_for_write(WRITE_6), |
| 165 | safe_for_write(WRITE_10), |
| 166 | safe_for_write(WRITE_VERIFY), |
| 167 | safe_for_write(WRITE_12), |
| 168 | safe_for_write(WRITE_VERIFY_12), |
| 169 | safe_for_write(WRITE_16), |
| 170 | safe_for_write(WRITE_LONG), |
Thomas Maguin | 0faf3d3 | 2005-09-16 19:27:58 -0700 | [diff] [blame] | 171 | safe_for_write(WRITE_LONG_2), |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 172 | safe_for_write(ERASE), |
| 173 | safe_for_write(GPCMD_MODE_SELECT_10), |
| 174 | safe_for_write(MODE_SELECT), |
| 175 | safe_for_write(LOG_SELECT), |
| 176 | safe_for_write(GPCMD_BLANK), |
| 177 | safe_for_write(GPCMD_CLOSE_TRACK), |
| 178 | safe_for_write(GPCMD_FLUSH_CACHE), |
| 179 | safe_for_write(GPCMD_FORMAT_UNIT), |
| 180 | safe_for_write(GPCMD_REPAIR_RZONE_TRACK), |
| 181 | safe_for_write(GPCMD_RESERVE_RZONE_TRACK), |
| 182 | safe_for_write(GPCMD_SEND_DVD_STRUCTURE), |
| 183 | safe_for_write(GPCMD_SEND_EVENT), |
| 184 | safe_for_write(GPCMD_SEND_KEY), |
| 185 | safe_for_write(GPCMD_SEND_OPC), |
| 186 | safe_for_write(GPCMD_SEND_CUE_SHEET), |
| 187 | safe_for_write(GPCMD_SET_SPEED), |
| 188 | safe_for_write(GPCMD_PREVENT_ALLOW_MEDIUM_REMOVAL), |
| 189 | safe_for_write(GPCMD_LOAD_UNLOAD), |
| 190 | safe_for_write(GPCMD_SET_STREAMING), |
| 191 | }; |
| 192 | unsigned char type = cmd_type[cmd[0]]; |
| 193 | |
| 194 | /* Anybody who can open the device can do a read-safe command */ |
| 195 | if (type & CMD_READ_SAFE) |
| 196 | return 0; |
| 197 | |
| 198 | /* Write-safe commands just require a writable open.. */ |
Jens Axboe | 5a57be8 | 2006-01-09 14:52:21 +0100 | [diff] [blame] | 199 | if ((type & CMD_WRITE_SAFE) && has_write_perm) |
| 200 | return 0; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 201 | |
Jens Axboe | 3b0e77b | 2005-10-07 19:41:34 +0200 | [diff] [blame] | 202 | /* And root can do any command.. */ |
| 203 | if (capable(CAP_SYS_RAWIO)) |
| 204 | return 0; |
| 205 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 206 | if (!type) { |
| 207 | cmd_type[cmd[0]] = CMD_WARNED; |
| 208 | printk(KERN_WARNING "scsi: unknown opcode 0x%02x\n", cmd[0]); |
| 209 | } |
| 210 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 211 | /* Otherwise fail it with an "Operation not permitted" */ |
| 212 | return -EPERM; |
| 213 | } |
FUJITA Tomonori | 337ad41d | 2006-12-20 11:18:54 +0100 | [diff] [blame] | 214 | EXPORT_SYMBOL_GPL(blk_verify_command); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 215 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 216 | static int blk_fill_sghdr_rq(struct request_queue *q, struct request *rq, |
FUJITA Tomonori | 41e1703 | 2007-07-22 10:06:50 +0900 | [diff] [blame] | 217 | struct sg_io_hdr *hdr, int has_write_perm) |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 218 | { |
| 219 | memset(rq->cmd, 0, BLK_MAX_CDB); /* ATAPI hates garbage after CDB */ |
| 220 | |
| 221 | if (copy_from_user(rq->cmd, hdr->cmdp, hdr->cmd_len)) |
| 222 | return -EFAULT; |
FUJITA Tomonori | 337ad41d | 2006-12-20 11:18:54 +0100 | [diff] [blame] | 223 | if (blk_verify_command(rq->cmd, has_write_perm)) |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 224 | return -EPERM; |
| 225 | |
| 226 | /* |
| 227 | * fill in request structure |
| 228 | */ |
| 229 | rq->cmd_len = hdr->cmd_len; |
| 230 | rq->cmd_type = REQ_TYPE_BLOCK_PC; |
| 231 | |
Tejun Heo | 24bb8fb | 2007-12-05 21:28:24 +0100 | [diff] [blame] | 232 | rq->timeout = msecs_to_jiffies(hdr->timeout); |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 233 | if (!rq->timeout) |
| 234 | rq->timeout = q->sg_timeout; |
| 235 | if (!rq->timeout) |
| 236 | rq->timeout = BLK_DEFAULT_SG_TIMEOUT; |
| 237 | |
| 238 | return 0; |
| 239 | } |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 240 | |
| 241 | /* |
| 242 | * unmap a request that was previously mapped to this sg_io_hdr. handles |
| 243 | * both sg and non-sg sg_io_hdr. |
| 244 | */ |
FUJITA Tomonori | 41e1703 | 2007-07-22 10:06:50 +0900 | [diff] [blame] | 245 | static int blk_unmap_sghdr_rq(struct request *rq, struct sg_io_hdr *hdr) |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 246 | { |
FUJITA Tomonori | ac6b91b | 2006-12-20 11:17:43 +0100 | [diff] [blame] | 247 | blk_rq_unmap_user(rq->bio); |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 248 | blk_put_request(rq); |
| 249 | return 0; |
| 250 | } |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 251 | |
FUJITA Tomonori | 41e1703 | 2007-07-22 10:06:50 +0900 | [diff] [blame] | 252 | static int blk_complete_sghdr_rq(struct request *rq, struct sg_io_hdr *hdr, |
| 253 | struct bio *bio) |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 254 | { |
| 255 | int r, ret = 0; |
| 256 | |
| 257 | /* |
| 258 | * fill in all the output members |
| 259 | */ |
| 260 | hdr->status = rq->errors & 0xff; |
| 261 | hdr->masked_status = status_byte(rq->errors); |
| 262 | hdr->msg_status = msg_byte(rq->errors); |
| 263 | hdr->host_status = host_byte(rq->errors); |
| 264 | hdr->driver_status = driver_byte(rq->errors); |
| 265 | hdr->info = 0; |
| 266 | if (hdr->masked_status || hdr->host_status || hdr->driver_status) |
| 267 | hdr->info |= SG_INFO_CHECK; |
FUJITA Tomonori | 7a85f88 | 2008-03-04 11:17:11 +0100 | [diff] [blame] | 268 | hdr->resid = rq->data_len; |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 269 | hdr->sb_len_wr = 0; |
| 270 | |
| 271 | if (rq->sense_len && hdr->sbp) { |
| 272 | int len = min((unsigned int) hdr->mx_sb_len, rq->sense_len); |
| 273 | |
| 274 | if (!copy_to_user(hdr->sbp, rq->sense, len)) |
| 275 | hdr->sb_len_wr = len; |
| 276 | else |
| 277 | ret = -EFAULT; |
| 278 | } |
| 279 | |
| 280 | rq->bio = bio; |
| 281 | r = blk_unmap_sghdr_rq(rq, hdr); |
| 282 | if (ret) |
| 283 | r = ret; |
| 284 | |
| 285 | return r; |
| 286 | } |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 287 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 288 | static int sg_io(struct file *file, struct request_queue *q, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 289 | struct gendisk *bd_disk, struct sg_io_hdr *hdr) |
| 290 | { |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 291 | unsigned long start_time; |
| 292 | int writing = 0, ret = 0, has_write_perm = 0; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 293 | struct request *rq; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 294 | char sense[SCSI_SENSE_BUFFERSIZE]; |
FUJITA Tomonori | 77d172c | 2006-12-11 10:01:34 +0100 | [diff] [blame] | 295 | struct bio *bio; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 296 | |
| 297 | if (hdr->interface_id != 'S') |
| 298 | return -EINVAL; |
| 299 | if (hdr->cmd_len > BLK_MAX_CDB) |
| 300 | return -EINVAL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 301 | |
Mike Christie | defd94b | 2005-12-05 02:37:06 -0600 | [diff] [blame] | 302 | if (hdr->dxfer_len > (q->max_hw_sectors << 9)) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 303 | return -EIO; |
| 304 | |
James Bottomley | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 305 | if (hdr->dxfer_len) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 306 | switch (hdr->dxfer_direction) { |
| 307 | default: |
| 308 | return -EINVAL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 309 | case SG_DXFER_TO_DEV: |
| 310 | writing = 1; |
| 311 | break; |
Jens Axboe | 616e8a0 | 2006-11-13 18:04:59 +0100 | [diff] [blame] | 312 | case SG_DXFER_TO_FROM_DEV: |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 313 | case SG_DXFER_FROM_DEV: |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 314 | break; |
| 315 | } |
| 316 | |
Jens Axboe | dd1cab9 | 2005-06-20 14:06:01 +0200 | [diff] [blame] | 317 | rq = blk_get_request(q, writing ? WRITE : READ, GFP_KERNEL); |
| 318 | if (!rq) |
| 319 | return -ENOMEM; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 320 | |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 321 | if (file) |
| 322 | has_write_perm = file->f_mode & FMODE_WRITE; |
Mike Christie | 0e75f90 | 2006-12-01 10:40:55 +0100 | [diff] [blame] | 323 | |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 324 | if (blk_fill_sghdr_rq(q, rq, hdr, has_write_perm)) { |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 325 | blk_put_request(rq); |
| 326 | return -EFAULT; |
| 327 | } |
Mike Christie | 0e75f90 | 2006-12-01 10:40:55 +0100 | [diff] [blame] | 328 | |
James Bottomley | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 329 | if (hdr->iovec_count) { |
| 330 | const int size = sizeof(struct sg_iovec) * hdr->iovec_count; |
| 331 | struct sg_iovec *iov; |
| 332 | |
| 333 | iov = kmalloc(size, GFP_KERNEL); |
| 334 | if (!iov) { |
| 335 | ret = -ENOMEM; |
Jens Axboe | dd1cab9 | 2005-06-20 14:06:01 +0200 | [diff] [blame] | 336 | goto out; |
James Bottomley | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 337 | } |
| 338 | |
| 339 | if (copy_from_user(iov, hdr->dxferp, size)) { |
| 340 | kfree(iov); |
| 341 | ret = -EFAULT; |
| 342 | goto out; |
| 343 | } |
| 344 | |
Mike Christie | 0e75f90 | 2006-12-01 10:40:55 +0100 | [diff] [blame] | 345 | ret = blk_rq_map_user_iov(q, rq, iov, hdr->iovec_count, |
| 346 | hdr->dxfer_len); |
James Bottomley | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 347 | kfree(iov); |
| 348 | } else if (hdr->dxfer_len) |
| 349 | ret = blk_rq_map_user(q, rq, hdr->dxferp, hdr->dxfer_len); |
| 350 | |
| 351 | if (ret) |
| 352 | goto out; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 353 | |
FUJITA Tomonori | 77d172c | 2006-12-11 10:01:34 +0100 | [diff] [blame] | 354 | bio = rq->bio; |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 355 | memset(sense, 0, sizeof(sense)); |
| 356 | rq->sense = sense; |
| 357 | rq->sense_len = 0; |
Jens Axboe | 01840f9 | 2006-02-03 08:37:08 +0100 | [diff] [blame] | 358 | rq->retries = 0; |
| 359 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 360 | start_time = jiffies; |
| 361 | |
| 362 | /* ignore return value. All information is passed back to caller |
| 363 | * (if he doesn't check that is his problem). |
| 364 | * N.B. a non-zero SCSI status is _not_ necessarily an error. |
| 365 | */ |
James Bottomley | 994ca9a | 2005-06-20 14:11:09 +0200 | [diff] [blame] | 366 | blk_execute_rq(q, bd_disk, rq, 0); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 367 | |
Tejun Heo | 24bb8fb | 2007-12-05 21:28:24 +0100 | [diff] [blame] | 368 | hdr->duration = jiffies_to_msecs(jiffies - start_time); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 369 | |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 370 | return blk_complete_sghdr_rq(rq, hdr, bio); |
Jens Axboe | dd1cab9 | 2005-06-20 14:06:01 +0200 | [diff] [blame] | 371 | out: |
| 372 | blk_put_request(rq); |
| 373 | return ret; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 374 | } |
| 375 | |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 376 | /** |
| 377 | * sg_scsi_ioctl -- handle deprecated SCSI_IOCTL_SEND_COMMAND ioctl |
| 378 | * @file: file this ioctl operates on (optional) |
| 379 | * @q: request queue to send scsi commands down |
| 380 | * @disk: gendisk to operate on (option) |
| 381 | * @sic: userspace structure describing the command to perform |
| 382 | * |
| 383 | * Send down the scsi command described by @sic to the device below |
| 384 | * the request queue @q. If @file is non-NULL it's used to perform |
| 385 | * fine-grained permission checks that allow users to send down |
| 386 | * non-destructive SCSI commands. If the caller has a struct gendisk |
| 387 | * available it should be passed in as @disk to allow the low level |
| 388 | * driver to use the information contained in it. A non-NULL @disk |
| 389 | * is only allowed if the caller knows that the low level driver doesn't |
| 390 | * need it (e.g. in the scsi subsystem). |
| 391 | * |
| 392 | * Notes: |
| 393 | * - This interface is deprecated - users should use the SG_IO |
| 394 | * interface instead, as this is a more flexible approach to |
| 395 | * performing SCSI commands on a device. |
| 396 | * - The SCSI command length is determined by examining the 1st byte |
| 397 | * of the given command. There is no way to override this. |
| 398 | * - Data transfers are limited to PAGE_SIZE |
| 399 | * - The length (x + y) must be at least OMAX_SB_LEN bytes long to |
| 400 | * accommodate the sense buffer when an error occurs. |
| 401 | * The sense buffer is truncated to OMAX_SB_LEN (16) bytes so that |
| 402 | * old code will not be surprised. |
| 403 | * - If a Unix error occurs (e.g. ENOMEM) then the user will receive |
| 404 | * a negative return and the Unix error code in 'errno'. |
| 405 | * If the SCSI command succeeds then 0 is returned. |
| 406 | * Positive numbers returned are the compacted SCSI error codes (4 |
| 407 | * bytes in one int) where the lowest byte is the SCSI status. |
| 408 | */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 409 | #define OMAX_SB_LEN 16 /* For backward compatibility */ |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 410 | int sg_scsi_ioctl(struct file *file, struct request_queue *q, |
| 411 | struct gendisk *disk, struct scsi_ioctl_command __user *sic) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 412 | { |
| 413 | struct request *rq; |
| 414 | int err; |
| 415 | unsigned int in_len, out_len, bytes, opcode, cmdlen; |
| 416 | char *buffer = NULL, sense[SCSI_SENSE_BUFFERSIZE]; |
| 417 | |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 418 | if (!sic) |
| 419 | return -EINVAL; |
| 420 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 421 | /* |
| 422 | * get in an out lengths, verify they don't exceed a page worth of data |
| 423 | */ |
| 424 | if (get_user(in_len, &sic->inlen)) |
| 425 | return -EFAULT; |
| 426 | if (get_user(out_len, &sic->outlen)) |
| 427 | return -EFAULT; |
| 428 | if (in_len > PAGE_SIZE || out_len > PAGE_SIZE) |
| 429 | return -EINVAL; |
| 430 | if (get_user(opcode, sic->data)) |
| 431 | return -EFAULT; |
| 432 | |
| 433 | bytes = max(in_len, out_len); |
| 434 | if (bytes) { |
Yoann Padioleau | dd00cc4 | 2007-07-19 01:49:03 -0700 | [diff] [blame] | 435 | buffer = kzalloc(bytes, q->bounce_gfp | GFP_USER| __GFP_NOWARN); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 436 | if (!buffer) |
| 437 | return -ENOMEM; |
| 438 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 439 | } |
| 440 | |
| 441 | rq = blk_get_request(q, in_len ? WRITE : READ, __GFP_WAIT); |
| 442 | |
| 443 | cmdlen = COMMAND_SIZE(opcode); |
| 444 | |
| 445 | /* |
| 446 | * get command and data to send to device, if any |
| 447 | */ |
| 448 | err = -EFAULT; |
| 449 | rq->cmd_len = cmdlen; |
| 450 | if (copy_from_user(rq->cmd, sic->data, cmdlen)) |
| 451 | goto error; |
| 452 | |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 453 | if (in_len && copy_from_user(buffer, sic->data + cmdlen, in_len)) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 454 | goto error; |
| 455 | |
FUJITA Tomonori | 337ad41d | 2006-12-20 11:18:54 +0100 | [diff] [blame] | 456 | err = blk_verify_command(rq->cmd, file->f_mode & FMODE_WRITE); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 457 | if (err) |
| 458 | goto error; |
| 459 | |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 460 | /* default. possible overriden later */ |
| 461 | rq->retries = 5; |
| 462 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 463 | switch (opcode) { |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 464 | case SEND_DIAGNOSTIC: |
| 465 | case FORMAT_UNIT: |
| 466 | rq->timeout = FORMAT_UNIT_TIMEOUT; |
| 467 | rq->retries = 1; |
| 468 | break; |
| 469 | case START_STOP: |
| 470 | rq->timeout = START_STOP_TIMEOUT; |
| 471 | break; |
| 472 | case MOVE_MEDIUM: |
| 473 | rq->timeout = MOVE_MEDIUM_TIMEOUT; |
| 474 | break; |
| 475 | case READ_ELEMENT_STATUS: |
| 476 | rq->timeout = READ_ELEMENT_STATUS_TIMEOUT; |
| 477 | break; |
| 478 | case READ_DEFECT_DATA: |
| 479 | rq->timeout = READ_DEFECT_DATA_TIMEOUT; |
| 480 | rq->retries = 1; |
| 481 | break; |
| 482 | default: |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 483 | rq->timeout = BLK_DEFAULT_SG_TIMEOUT; |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 484 | break; |
| 485 | } |
| 486 | |
| 487 | if (bytes && blk_rq_map_kern(q, rq, buffer, bytes, __GFP_WAIT)) { |
| 488 | err = DRIVER_ERROR << 24; |
| 489 | goto out; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 490 | } |
| 491 | |
| 492 | memset(sense, 0, sizeof(sense)); |
| 493 | rq->sense = sense; |
| 494 | rq->sense_len = 0; |
Jens Axboe | 4aff5e2 | 2006-08-10 08:44:47 +0200 | [diff] [blame] | 495 | rq->cmd_type = REQ_TYPE_BLOCK_PC; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 496 | |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 497 | blk_execute_rq(q, disk, rq, 0); |
| 498 | |
| 499 | out: |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 500 | err = rq->errors & 0xff; /* only 8 bit SCSI status */ |
| 501 | if (err) { |
| 502 | if (rq->sense_len && rq->sense) { |
| 503 | bytes = (OMAX_SB_LEN > rq->sense_len) ? |
| 504 | rq->sense_len : OMAX_SB_LEN; |
| 505 | if (copy_to_user(sic->data, rq->sense, bytes)) |
| 506 | err = -EFAULT; |
| 507 | } |
| 508 | } else { |
| 509 | if (copy_to_user(sic->data, buffer, out_len)) |
| 510 | err = -EFAULT; |
| 511 | } |
| 512 | |
| 513 | error: |
| 514 | kfree(buffer); |
| 515 | blk_put_request(rq); |
| 516 | return err; |
| 517 | } |
Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 518 | EXPORT_SYMBOL_GPL(sg_scsi_ioctl); |
Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 519 | |
| 520 | /* Send basic block requests */ |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 521 | static int __blk_send_generic(struct request_queue *q, struct gendisk *bd_disk, |
| 522 | int cmd, int data) |
Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 523 | { |
| 524 | struct request *rq; |
| 525 | int err; |
| 526 | |
| 527 | rq = blk_get_request(q, WRITE, __GFP_WAIT); |
Jens Axboe | 4aff5e2 | 2006-08-10 08:44:47 +0200 | [diff] [blame] | 528 | rq->cmd_type = REQ_TYPE_BLOCK_PC; |
Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 529 | rq->data = NULL; |
| 530 | rq->data_len = 0; |
FUJITA Tomonori | 7a85f88 | 2008-03-04 11:17:11 +0100 | [diff] [blame] | 531 | rq->extra_len = 0; |
Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 532 | rq->timeout = BLK_DEFAULT_SG_TIMEOUT; |
Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 533 | memset(rq->cmd, 0, sizeof(rq->cmd)); |
| 534 | rq->cmd[0] = cmd; |
| 535 | rq->cmd[4] = data; |
| 536 | rq->cmd_len = 6; |
| 537 | err = blk_execute_rq(q, bd_disk, rq, 0); |
| 538 | blk_put_request(rq); |
| 539 | |
| 540 | return err; |
| 541 | } |
| 542 | |
Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 543 | static inline int blk_send_start_stop(struct request_queue *q, |
| 544 | struct gendisk *bd_disk, int data) |
Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 545 | { |
| 546 | return __blk_send_generic(q, bd_disk, GPCMD_START_STOP_UNIT, data); |
| 547 | } |
| 548 | |
FUJITA Tomonori | 45e79a3 | 2007-07-09 12:39:20 +0200 | [diff] [blame] | 549 | int scsi_cmd_ioctl(struct file *file, struct request_queue *q, |
| 550 | struct gendisk *bd_disk, unsigned int cmd, void __user *arg) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 551 | { |
Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 552 | int err; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 553 | |
FUJITA Tomonori | 45e79a3 | 2007-07-09 12:39:20 +0200 | [diff] [blame] | 554 | if (!q || blk_get_queue(q)) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 555 | return -ENXIO; |
| 556 | |
| 557 | switch (cmd) { |
| 558 | /* |
| 559 | * new sgv3 interface |
| 560 | */ |
| 561 | case SG_GET_VERSION_NUM: |
| 562 | err = sg_get_version(arg); |
| 563 | break; |
| 564 | case SCSI_IOCTL_GET_IDLUN: |
| 565 | err = scsi_get_idlun(q, arg); |
| 566 | break; |
| 567 | case SCSI_IOCTL_GET_BUS_NUMBER: |
| 568 | err = scsi_get_bus(q, arg); |
| 569 | break; |
| 570 | case SG_SET_TIMEOUT: |
| 571 | err = sg_set_timeout(q, arg); |
| 572 | break; |
| 573 | case SG_GET_TIMEOUT: |
| 574 | err = sg_get_timeout(q); |
| 575 | break; |
| 576 | case SG_GET_RESERVED_SIZE: |
| 577 | err = sg_get_reserved_size(q, arg); |
| 578 | break; |
| 579 | case SG_SET_RESERVED_SIZE: |
| 580 | err = sg_set_reserved_size(q, arg); |
| 581 | break; |
| 582 | case SG_EMULATED_HOST: |
| 583 | err = sg_emulated_host(q, arg); |
| 584 | break; |
| 585 | case SG_IO: { |
| 586 | struct sg_io_hdr hdr; |
| 587 | |
| 588 | err = -EFAULT; |
| 589 | if (copy_from_user(&hdr, arg, sizeof(hdr))) |
| 590 | break; |
| 591 | err = sg_io(file, q, bd_disk, &hdr); |
| 592 | if (err == -EFAULT) |
| 593 | break; |
| 594 | |
| 595 | if (copy_to_user(arg, &hdr, sizeof(hdr))) |
| 596 | err = -EFAULT; |
| 597 | break; |
| 598 | } |
| 599 | case CDROM_SEND_PACKET: { |
| 600 | struct cdrom_generic_command cgc; |
| 601 | struct sg_io_hdr hdr; |
| 602 | |
| 603 | err = -EFAULT; |
| 604 | if (copy_from_user(&cgc, arg, sizeof(cgc))) |
| 605 | break; |
| 606 | cgc.timeout = clock_t_to_jiffies(cgc.timeout); |
| 607 | memset(&hdr, 0, sizeof(hdr)); |
| 608 | hdr.interface_id = 'S'; |
| 609 | hdr.cmd_len = sizeof(cgc.cmd); |
| 610 | hdr.dxfer_len = cgc.buflen; |
| 611 | err = 0; |
| 612 | switch (cgc.data_direction) { |
| 613 | case CGC_DATA_UNKNOWN: |
| 614 | hdr.dxfer_direction = SG_DXFER_UNKNOWN; |
| 615 | break; |
| 616 | case CGC_DATA_WRITE: |
| 617 | hdr.dxfer_direction = SG_DXFER_TO_DEV; |
| 618 | break; |
| 619 | case CGC_DATA_READ: |
| 620 | hdr.dxfer_direction = SG_DXFER_FROM_DEV; |
| 621 | break; |
| 622 | case CGC_DATA_NONE: |
| 623 | hdr.dxfer_direction = SG_DXFER_NONE; |
| 624 | break; |
| 625 | default: |
| 626 | err = -EINVAL; |
| 627 | } |
| 628 | if (err) |
| 629 | break; |
| 630 | |
| 631 | hdr.dxferp = cgc.buffer; |
| 632 | hdr.sbp = cgc.sense; |
| 633 | if (hdr.sbp) |
| 634 | hdr.mx_sb_len = sizeof(struct request_sense); |
| 635 | hdr.timeout = cgc.timeout; |
| 636 | hdr.cmdp = ((struct cdrom_generic_command __user*) arg)->cmd; |
| 637 | hdr.cmd_len = sizeof(cgc.cmd); |
| 638 | |
| 639 | err = sg_io(file, q, bd_disk, &hdr); |
| 640 | if (err == -EFAULT) |
| 641 | break; |
| 642 | |
| 643 | if (hdr.status) |
| 644 | err = -EIO; |
| 645 | |
| 646 | cgc.stat = err; |
| 647 | cgc.buflen = hdr.resid; |
| 648 | if (copy_to_user(arg, &cgc, sizeof(cgc))) |
| 649 | err = -EFAULT; |
| 650 | |
| 651 | break; |
| 652 | } |
| 653 | |
| 654 | /* |
| 655 | * old junk scsi send command ioctl |
| 656 | */ |
| 657 | case SCSI_IOCTL_SEND_COMMAND: |
| 658 | printk(KERN_WARNING "program %s is using a deprecated SCSI ioctl, please convert it to SG_IO\n", current->comm); |
| 659 | err = -EINVAL; |
| 660 | if (!arg) |
| 661 | break; |
| 662 | |
| 663 | err = sg_scsi_ioctl(file, q, bd_disk, arg); |
| 664 | break; |
| 665 | case CDROMCLOSETRAY: |
Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 666 | err = blk_send_start_stop(q, bd_disk, 0x03); |
| 667 | break; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 668 | case CDROMEJECT: |
Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 669 | err = blk_send_start_stop(q, bd_disk, 0x02); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 670 | break; |
| 671 | default: |
| 672 | err = -ENOTTY; |
| 673 | } |
| 674 | |
| 675 | blk_put_queue(q); |
| 676 | return err; |
| 677 | } |
| 678 | |
| 679 | EXPORT_SYMBOL(scsi_cmd_ioctl); |