1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34#include <linux/completion.h>
35#include <linux/init.h>
36#include <linux/fs.h>
37#include <linux/module.h>
38#include <linux/device.h>
39#include <linux/err.h>
40#include <linux/poll.h>
41#include <linux/sched.h>
42#include <linux/file.h>
43#include <linux/mount.h>
44#include <linux/cdev.h>
45#include <linux/idr.h>
46#include <linux/mutex.h>
47#include <linux/slab.h>
48
49#include <linux/uaccess.h>
50
51#include <rdma/ib.h>
52#include <rdma/ib_cm.h>
53#include <rdma/ib_user_cm.h>
54#include <rdma/ib_marshall.h>
55
56MODULE_AUTHOR("Libor Michalek");
57MODULE_DESCRIPTION("InfiniBand userspace Connection Manager access");
58MODULE_LICENSE("Dual BSD/GPL");
59
60struct ib_ucm_device {
61 int devnum;
62 struct cdev cdev;
63 struct device dev;
64 struct ib_device *ib_dev;
65};
66
67struct ib_ucm_file {
68 struct mutex file_mutex;
69 struct file *filp;
70 struct ib_ucm_device *device;
71
72 struct list_head ctxs;
73 struct list_head events;
74 wait_queue_head_t poll_wait;
75};
76
77struct ib_ucm_context {
78 int id;
79 struct completion comp;
80 atomic_t ref;
81 int events_reported;
82
83 struct ib_ucm_file *file;
84 struct ib_cm_id *cm_id;
85 __u64 uid;
86
87 struct list_head events;
88 struct list_head file_list;
89};
90
91struct ib_ucm_event {
92 struct ib_ucm_context *ctx;
93 struct list_head file_list;
94 struct list_head ctx_list;
95
96 struct ib_cm_id *cm_id;
97 struct ib_ucm_event_resp resp;
98 void *data;
99 void *info;
100 int data_len;
101 int info_len;
102};
103
104enum {
105 IB_UCM_MAJOR = 231,
106 IB_UCM_BASE_MINOR = 224,
107 IB_UCM_MAX_DEVICES = 32
108};
109
110#define IB_UCM_BASE_DEV MKDEV(IB_UCM_MAJOR, IB_UCM_BASE_MINOR)
111
112static void ib_ucm_add_one(struct ib_device *device);
113static void ib_ucm_remove_one(struct ib_device *device, void *client_data);
114
115static struct ib_client ucm_client = {
116 .name = "ucm",
117 .add = ib_ucm_add_one,
118 .remove = ib_ucm_remove_one
119};
120
121static DEFINE_MUTEX(ctx_id_mutex);
122static DEFINE_IDR(ctx_id_table);
123static DECLARE_BITMAP(dev_map, IB_UCM_MAX_DEVICES);
124
125static struct ib_ucm_context *ib_ucm_ctx_get(struct ib_ucm_file *file, int id)
126{
127 struct ib_ucm_context *ctx;
128
129 mutex_lock(&ctx_id_mutex);
130 ctx = idr_find(&ctx_id_table, id);
131 if (!ctx)
132 ctx = ERR_PTR(-ENOENT);
133 else if (ctx->file != file)
134 ctx = ERR_PTR(-EINVAL);
135 else
136 atomic_inc(&ctx->ref);
137 mutex_unlock(&ctx_id_mutex);
138
139 return ctx;
140}
141
142static void ib_ucm_ctx_put(struct ib_ucm_context *ctx)
143{
144 if (atomic_dec_and_test(&ctx->ref))
145 complete(&ctx->comp);
146}
147
148static inline int ib_ucm_new_cm_id(int event)
149{
150 return event == IB_CM_REQ_RECEIVED || event == IB_CM_SIDR_REQ_RECEIVED;
151}
152
153static void ib_ucm_cleanup_events(struct ib_ucm_context *ctx)
154{
155 struct ib_ucm_event *uevent;
156
157 mutex_lock(&ctx->file->file_mutex);
158 list_del(&ctx->file_list);
159 while (!list_empty(&ctx->events)) {
160
161 uevent = list_entry(ctx->events.next,
162 struct ib_ucm_event, ctx_list);
163 list_del(&uevent->file_list);
164 list_del(&uevent->ctx_list);
165 mutex_unlock(&ctx->file->file_mutex);
166
167
168 if (ib_ucm_new_cm_id(uevent->resp.event))
169 ib_destroy_cm_id(uevent->cm_id);
170
171 kfree(uevent);
172 mutex_lock(&ctx->file->file_mutex);
173 }
174 mutex_unlock(&ctx->file->file_mutex);
175}
176
177static struct ib_ucm_context *ib_ucm_ctx_alloc(struct ib_ucm_file *file)
178{
179 struct ib_ucm_context *ctx;
180
181 ctx = kzalloc(sizeof *ctx, GFP_KERNEL);
182 if (!ctx)
183 return NULL;
184
185 atomic_set(&ctx->ref, 1);
186 init_completion(&ctx->comp);
187 ctx->file = file;
188 INIT_LIST_HEAD(&ctx->events);
189
190 mutex_lock(&ctx_id_mutex);
191 ctx->id = idr_alloc(&ctx_id_table, ctx, 0, 0, GFP_KERNEL);
192 mutex_unlock(&ctx_id_mutex);
193 if (ctx->id < 0)
194 goto error;
195
196 list_add_tail(&ctx->file_list, &file->ctxs);
197 return ctx;
198
199error:
200 kfree(ctx);
201 return NULL;
202}
203
204static void ib_ucm_event_req_get(struct ib_ucm_req_event_resp *ureq,
205 struct ib_cm_req_event_param *kreq)
206{
207 ureq->remote_ca_guid = kreq->remote_ca_guid;
208 ureq->remote_qkey = kreq->remote_qkey;
209 ureq->remote_qpn = kreq->remote_qpn;
210 ureq->qp_type = kreq->qp_type;
211 ureq->starting_psn = kreq->starting_psn;
212 ureq->responder_resources = kreq->responder_resources;
213 ureq->initiator_depth = kreq->initiator_depth;
214 ureq->local_cm_response_timeout = kreq->local_cm_response_timeout;
215 ureq->flow_control = kreq->flow_control;
216 ureq->remote_cm_response_timeout = kreq->remote_cm_response_timeout;
217 ureq->retry_count = kreq->retry_count;
218 ureq->rnr_retry_count = kreq->rnr_retry_count;
219 ureq->srq = kreq->srq;
220 ureq->port = kreq->port;
221
222 ib_copy_path_rec_to_user(&ureq->primary_path, kreq->primary_path);
223 if (kreq->alternate_path)
224 ib_copy_path_rec_to_user(&ureq->alternate_path,
225 kreq->alternate_path);
226}
227
228static void ib_ucm_event_rep_get(struct ib_ucm_rep_event_resp *urep,
229 struct ib_cm_rep_event_param *krep)
230{
231 urep->remote_ca_guid = krep->remote_ca_guid;
232 urep->remote_qkey = krep->remote_qkey;
233 urep->remote_qpn = krep->remote_qpn;
234 urep->starting_psn = krep->starting_psn;
235 urep->responder_resources = krep->responder_resources;
236 urep->initiator_depth = krep->initiator_depth;
237 urep->target_ack_delay = krep->target_ack_delay;
238 urep->failover_accepted = krep->failover_accepted;
239 urep->flow_control = krep->flow_control;
240 urep->rnr_retry_count = krep->rnr_retry_count;
241 urep->srq = krep->srq;
242}
243
244static void ib_ucm_event_sidr_rep_get(struct ib_ucm_sidr_rep_event_resp *urep,
245 struct ib_cm_sidr_rep_event_param *krep)
246{
247 urep->status = krep->status;
248 urep->qkey = krep->qkey;
249 urep->qpn = krep->qpn;
250};
251
252static int ib_ucm_event_process(struct ib_cm_event *evt,
253 struct ib_ucm_event *uvt)
254{
255 void *info = NULL;
256
257 switch (evt->event) {
258 case IB_CM_REQ_RECEIVED:
259 ib_ucm_event_req_get(&uvt->resp.u.req_resp,
260 &evt->param.req_rcvd);
261 uvt->data_len = IB_CM_REQ_PRIVATE_DATA_SIZE;
262 uvt->resp.present = IB_UCM_PRES_PRIMARY;
263 uvt->resp.present |= (evt->param.req_rcvd.alternate_path ?
264 IB_UCM_PRES_ALTERNATE : 0);
265 break;
266 case IB_CM_REP_RECEIVED:
267 ib_ucm_event_rep_get(&uvt->resp.u.rep_resp,
268 &evt->param.rep_rcvd);
269 uvt->data_len = IB_CM_REP_PRIVATE_DATA_SIZE;
270 break;
271 case IB_CM_RTU_RECEIVED:
272 uvt->data_len = IB_CM_RTU_PRIVATE_DATA_SIZE;
273 uvt->resp.u.send_status = evt->param.send_status;
274 break;
275 case IB_CM_DREQ_RECEIVED:
276 uvt->data_len = IB_CM_DREQ_PRIVATE_DATA_SIZE;
277 uvt->resp.u.send_status = evt->param.send_status;
278 break;
279 case IB_CM_DREP_RECEIVED:
280 uvt->data_len = IB_CM_DREP_PRIVATE_DATA_SIZE;
281 uvt->resp.u.send_status = evt->param.send_status;
282 break;
283 case IB_CM_MRA_RECEIVED:
284 uvt->resp.u.mra_resp.timeout =
285 evt->param.mra_rcvd.service_timeout;
286 uvt->data_len = IB_CM_MRA_PRIVATE_DATA_SIZE;
287 break;
288 case IB_CM_REJ_RECEIVED:
289 uvt->resp.u.rej_resp.reason = evt->param.rej_rcvd.reason;
290 uvt->data_len = IB_CM_REJ_PRIVATE_DATA_SIZE;
291 uvt->info_len = evt->param.rej_rcvd.ari_length;
292 info = evt->param.rej_rcvd.ari;
293 break;
294 case IB_CM_LAP_RECEIVED:
295 ib_copy_path_rec_to_user(&uvt->resp.u.lap_resp.path,
296 evt->param.lap_rcvd.alternate_path);
297 uvt->data_len = IB_CM_LAP_PRIVATE_DATA_SIZE;
298 uvt->resp.present = IB_UCM_PRES_ALTERNATE;
299 break;
300 case IB_CM_APR_RECEIVED:
301 uvt->resp.u.apr_resp.status = evt->param.apr_rcvd.ap_status;
302 uvt->data_len = IB_CM_APR_PRIVATE_DATA_SIZE;
303 uvt->info_len = evt->param.apr_rcvd.info_len;
304 info = evt->param.apr_rcvd.apr_info;
305 break;
306 case IB_CM_SIDR_REQ_RECEIVED:
307 uvt->resp.u.sidr_req_resp.pkey =
308 evt->param.sidr_req_rcvd.pkey;
309 uvt->resp.u.sidr_req_resp.port =
310 evt->param.sidr_req_rcvd.port;
311 uvt->data_len = IB_CM_SIDR_REQ_PRIVATE_DATA_SIZE;
312 break;
313 case IB_CM_SIDR_REP_RECEIVED:
314 ib_ucm_event_sidr_rep_get(&uvt->resp.u.sidr_rep_resp,
315 &evt->param.sidr_rep_rcvd);
316 uvt->data_len = IB_CM_SIDR_REP_PRIVATE_DATA_SIZE;
317 uvt->info_len = evt->param.sidr_rep_rcvd.info_len;
318 info = evt->param.sidr_rep_rcvd.info;
319 break;
320 default:
321 uvt->resp.u.send_status = evt->param.send_status;
322 break;
323 }
324
325 if (uvt->data_len) {
326 uvt->data = kmemdup(evt->private_data, uvt->data_len, GFP_KERNEL);
327 if (!uvt->data)
328 goto err1;
329
330 uvt->resp.present |= IB_UCM_PRES_DATA;
331 }
332
333 if (uvt->info_len) {
334 uvt->info = kmemdup(info, uvt->info_len, GFP_KERNEL);
335 if (!uvt->info)
336 goto err2;
337
338 uvt->resp.present |= IB_UCM_PRES_INFO;
339 }
340 return 0;
341
342err2:
343 kfree(uvt->data);
344err1:
345 return -ENOMEM;
346}
347
348static int ib_ucm_event_handler(struct ib_cm_id *cm_id,
349 struct ib_cm_event *event)
350{
351 struct ib_ucm_event *uevent;
352 struct ib_ucm_context *ctx;
353 int result = 0;
354
355 ctx = cm_id->context;
356
357 uevent = kzalloc(sizeof *uevent, GFP_KERNEL);
358 if (!uevent)
359 goto err1;
360
361 uevent->ctx = ctx;
362 uevent->cm_id = cm_id;
363 uevent->resp.uid = ctx->uid;
364 uevent->resp.id = ctx->id;
365 uevent->resp.event = event->event;
366
367 result = ib_ucm_event_process(event, uevent);
368 if (result)
369 goto err2;
370
371 mutex_lock(&ctx->file->file_mutex);
372 list_add_tail(&uevent->file_list, &ctx->file->events);
373 list_add_tail(&uevent->ctx_list, &ctx->events);
374 wake_up_interruptible(&ctx->file->poll_wait);
375 mutex_unlock(&ctx->file->file_mutex);
376 return 0;
377
378err2:
379 kfree(uevent);
380err1:
381
382 return ib_ucm_new_cm_id(event->event);
383}
384
385static ssize_t ib_ucm_event(struct ib_ucm_file *file,
386 const char __user *inbuf,
387 int in_len, int out_len)
388{
389 struct ib_ucm_context *ctx;
390 struct ib_ucm_event_get cmd;
391 struct ib_ucm_event *uevent;
392 int result = 0;
393
394 if (out_len < sizeof(struct ib_ucm_event_resp))
395 return -ENOSPC;
396
397 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
398 return -EFAULT;
399
400 mutex_lock(&file->file_mutex);
401 while (list_empty(&file->events)) {
402 mutex_unlock(&file->file_mutex);
403
404 if (file->filp->f_flags & O_NONBLOCK)
405 return -EAGAIN;
406
407 if (wait_event_interruptible(file->poll_wait,
408 !list_empty(&file->events)))
409 return -ERESTARTSYS;
410
411 mutex_lock(&file->file_mutex);
412 }
413
414 uevent = list_entry(file->events.next, struct ib_ucm_event, file_list);
415
416 if (ib_ucm_new_cm_id(uevent->resp.event)) {
417 ctx = ib_ucm_ctx_alloc(file);
418 if (!ctx) {
419 result = -ENOMEM;
420 goto done;
421 }
422
423 ctx->cm_id = uevent->cm_id;
424 ctx->cm_id->context = ctx;
425 uevent->resp.id = ctx->id;
426 }
427
428 if (copy_to_user((void __user *)(unsigned long)cmd.response,
429 &uevent->resp, sizeof(uevent->resp))) {
430 result = -EFAULT;
431 goto done;
432 }
433
434 if (uevent->data) {
435 if (cmd.data_len < uevent->data_len) {
436 result = -ENOMEM;
437 goto done;
438 }
439 if (copy_to_user((void __user *)(unsigned long)cmd.data,
440 uevent->data, uevent->data_len)) {
441 result = -EFAULT;
442 goto done;
443 }
444 }
445
446 if (uevent->info) {
447 if (cmd.info_len < uevent->info_len) {
448 result = -ENOMEM;
449 goto done;
450 }
451 if (copy_to_user((void __user *)(unsigned long)cmd.info,
452 uevent->info, uevent->info_len)) {
453 result = -EFAULT;
454 goto done;
455 }
456 }
457
458 list_del(&uevent->file_list);
459 list_del(&uevent->ctx_list);
460 uevent->ctx->events_reported++;
461
462 kfree(uevent->data);
463 kfree(uevent->info);
464 kfree(uevent);
465done:
466 mutex_unlock(&file->file_mutex);
467 return result;
468}
469
470static ssize_t ib_ucm_create_id(struct ib_ucm_file *file,
471 const char __user *inbuf,
472 int in_len, int out_len)
473{
474 struct ib_ucm_create_id cmd;
475 struct ib_ucm_create_id_resp resp;
476 struct ib_ucm_context *ctx;
477 int result;
478
479 if (out_len < sizeof(resp))
480 return -ENOSPC;
481
482 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
483 return -EFAULT;
484
485 mutex_lock(&file->file_mutex);
486 ctx = ib_ucm_ctx_alloc(file);
487 mutex_unlock(&file->file_mutex);
488 if (!ctx)
489 return -ENOMEM;
490
491 ctx->uid = cmd.uid;
492 ctx->cm_id = ib_create_cm_id(file->device->ib_dev,
493 ib_ucm_event_handler, ctx);
494 if (IS_ERR(ctx->cm_id)) {
495 result = PTR_ERR(ctx->cm_id);
496 goto err1;
497 }
498
499 resp.id = ctx->id;
500 if (copy_to_user((void __user *)(unsigned long)cmd.response,
501 &resp, sizeof(resp))) {
502 result = -EFAULT;
503 goto err2;
504 }
505 return 0;
506
507err2:
508 ib_destroy_cm_id(ctx->cm_id);
509err1:
510 mutex_lock(&ctx_id_mutex);
511 idr_remove(&ctx_id_table, ctx->id);
512 mutex_unlock(&ctx_id_mutex);
513 kfree(ctx);
514 return result;
515}
516
517static ssize_t ib_ucm_destroy_id(struct ib_ucm_file *file,
518 const char __user *inbuf,
519 int in_len, int out_len)
520{
521 struct ib_ucm_destroy_id cmd;
522 struct ib_ucm_destroy_id_resp resp;
523 struct ib_ucm_context *ctx;
524 int result = 0;
525
526 if (out_len < sizeof(resp))
527 return -ENOSPC;
528
529 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
530 return -EFAULT;
531
532 mutex_lock(&ctx_id_mutex);
533 ctx = idr_find(&ctx_id_table, cmd.id);
534 if (!ctx)
535 ctx = ERR_PTR(-ENOENT);
536 else if (ctx->file != file)
537 ctx = ERR_PTR(-EINVAL);
538 else
539 idr_remove(&ctx_id_table, ctx->id);
540 mutex_unlock(&ctx_id_mutex);
541
542 if (IS_ERR(ctx))
543 return PTR_ERR(ctx);
544
545 ib_ucm_ctx_put(ctx);
546 wait_for_completion(&ctx->comp);
547
548
549 ib_destroy_cm_id(ctx->cm_id);
550
551 ib_ucm_cleanup_events(ctx);
552
553 resp.events_reported = ctx->events_reported;
554 if (copy_to_user((void __user *)(unsigned long)cmd.response,
555 &resp, sizeof(resp)))
556 result = -EFAULT;
557
558 kfree(ctx);
559 return result;
560}
561
562static ssize_t ib_ucm_attr_id(struct ib_ucm_file *file,
563 const char __user *inbuf,
564 int in_len, int out_len)
565{
566 struct ib_ucm_attr_id_resp resp;
567 struct ib_ucm_attr_id cmd;
568 struct ib_ucm_context *ctx;
569 int result = 0;
570
571 if (out_len < sizeof(resp))
572 return -ENOSPC;
573
574 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
575 return -EFAULT;
576
577 ctx = ib_ucm_ctx_get(file, cmd.id);
578 if (IS_ERR(ctx))
579 return PTR_ERR(ctx);
580
581 resp.service_id = ctx->cm_id->service_id;
582 resp.service_mask = ctx->cm_id->service_mask;
583 resp.local_id = ctx->cm_id->local_id;
584 resp.remote_id = ctx->cm_id->remote_id;
585
586 if (copy_to_user((void __user *)(unsigned long)cmd.response,
587 &resp, sizeof(resp)))
588 result = -EFAULT;
589
590 ib_ucm_ctx_put(ctx);
591 return result;
592}
593
594static ssize_t ib_ucm_init_qp_attr(struct ib_ucm_file *file,
595 const char __user *inbuf,
596 int in_len, int out_len)
597{
598 struct ib_uverbs_qp_attr resp;
599 struct ib_ucm_init_qp_attr cmd;
600 struct ib_ucm_context *ctx;
601 struct ib_qp_attr qp_attr;
602 int result = 0;
603
604 if (out_len < sizeof(resp))
605 return -ENOSPC;
606
607 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
608 return -EFAULT;
609
610 ctx = ib_ucm_ctx_get(file, cmd.id);
611 if (IS_ERR(ctx))
612 return PTR_ERR(ctx);
613
614 resp.qp_attr_mask = 0;
615 memset(&qp_attr, 0, sizeof qp_attr);
616 qp_attr.qp_state = cmd.qp_state;
617 result = ib_cm_init_qp_attr(ctx->cm_id, &qp_attr, &resp.qp_attr_mask);
618 if (result)
619 goto out;
620
621 ib_copy_qp_attr_to_user(&resp, &qp_attr);
622
623 if (copy_to_user((void __user *)(unsigned long)cmd.response,
624 &resp, sizeof(resp)))
625 result = -EFAULT;
626
627out:
628 ib_ucm_ctx_put(ctx);
629 return result;
630}
631
632static int ucm_validate_listen(__be64 service_id, __be64 service_mask)
633{
634 service_id &= service_mask;
635
636 if (((service_id & IB_CMA_SERVICE_ID_MASK) == IB_CMA_SERVICE_ID) ||
637 ((service_id & IB_SDP_SERVICE_ID_MASK) == IB_SDP_SERVICE_ID))
638 return -EINVAL;
639
640 return 0;
641}
642
643static ssize_t ib_ucm_listen(struct ib_ucm_file *file,
644 const char __user *inbuf,
645 int in_len, int out_len)
646{
647 struct ib_ucm_listen cmd;
648 struct ib_ucm_context *ctx;
649 int result;
650
651 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
652 return -EFAULT;
653
654 ctx = ib_ucm_ctx_get(file, cmd.id);
655 if (IS_ERR(ctx))
656 return PTR_ERR(ctx);
657
658 result = ucm_validate_listen(cmd.service_id, cmd.service_mask);
659 if (result)
660 goto out;
661
662 result = ib_cm_listen(ctx->cm_id, cmd.service_id, cmd.service_mask);
663out:
664 ib_ucm_ctx_put(ctx);
665 return result;
666}
667
668static ssize_t ib_ucm_notify(struct ib_ucm_file *file,
669 const char __user *inbuf,
670 int in_len, int out_len)
671{
672 struct ib_ucm_notify cmd;
673 struct ib_ucm_context *ctx;
674 int result;
675
676 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
677 return -EFAULT;
678
679 ctx = ib_ucm_ctx_get(file, cmd.id);
680 if (IS_ERR(ctx))
681 return PTR_ERR(ctx);
682
683 result = ib_cm_notify(ctx->cm_id, (enum ib_event_type) cmd.event);
684 ib_ucm_ctx_put(ctx);
685 return result;
686}
687
688static int ib_ucm_alloc_data(const void **dest, u64 src, u32 len)
689{
690 void *data;
691
692 *dest = NULL;
693
694 if (!len)
695 return 0;
696
697 data = memdup_user((void __user *)(unsigned long)src, len);
698 if (IS_ERR(data))
699 return PTR_ERR(data);
700
701 *dest = data;
702 return 0;
703}
704
705static int ib_ucm_path_get(struct sa_path_rec **path, u64 src)
706{
707 struct ib_user_path_rec upath;
708 struct sa_path_rec *sa_path;
709
710 *path = NULL;
711
712 if (!src)
713 return 0;
714
715 sa_path = kmalloc(sizeof(*sa_path), GFP_KERNEL);
716 if (!sa_path)
717 return -ENOMEM;
718
719 if (copy_from_user(&upath, (void __user *)(unsigned long)src,
720 sizeof(upath))) {
721
722 kfree(sa_path);
723 return -EFAULT;
724 }
725
726 ib_copy_path_rec_from_user(sa_path, &upath);
727 *path = sa_path;
728 return 0;
729}
730
731static ssize_t ib_ucm_send_req(struct ib_ucm_file *file,
732 const char __user *inbuf,
733 int in_len, int out_len)
734{
735 struct ib_cm_req_param param;
736 struct ib_ucm_context *ctx;
737 struct ib_ucm_req cmd;
738 int result;
739
740 param.private_data = NULL;
741 param.primary_path = NULL;
742 param.alternate_path = NULL;
743
744 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
745 return -EFAULT;
746
747 result = ib_ucm_alloc_data(¶m.private_data, cmd.data, cmd.len);
748 if (result)
749 goto done;
750
751 result = ib_ucm_path_get(¶m.primary_path, cmd.primary_path);
752 if (result)
753 goto done;
754
755 result = ib_ucm_path_get(¶m.alternate_path, cmd.alternate_path);
756 if (result)
757 goto done;
758
759 param.private_data_len = cmd.len;
760 param.service_id = cmd.sid;
761 param.qp_num = cmd.qpn;
762 param.qp_type = cmd.qp_type;
763 param.starting_psn = cmd.psn;
764 param.peer_to_peer = cmd.peer_to_peer;
765 param.responder_resources = cmd.responder_resources;
766 param.initiator_depth = cmd.initiator_depth;
767 param.remote_cm_response_timeout = cmd.remote_cm_response_timeout;
768 param.flow_control = cmd.flow_control;
769 param.local_cm_response_timeout = cmd.local_cm_response_timeout;
770 param.retry_count = cmd.retry_count;
771 param.rnr_retry_count = cmd.rnr_retry_count;
772 param.max_cm_retries = cmd.max_cm_retries;
773 param.srq = cmd.srq;
774
775 ctx = ib_ucm_ctx_get(file, cmd.id);
776 if (!IS_ERR(ctx)) {
777 result = ib_send_cm_req(ctx->cm_id, ¶m);
778 ib_ucm_ctx_put(ctx);
779 } else
780 result = PTR_ERR(ctx);
781
782done:
783 kfree(param.private_data);
784 kfree(param.primary_path);
785 kfree(param.alternate_path);
786 return result;
787}
788
789static ssize_t ib_ucm_send_rep(struct ib_ucm_file *file,
790 const char __user *inbuf,
791 int in_len, int out_len)
792{
793 struct ib_cm_rep_param param;
794 struct ib_ucm_context *ctx;
795 struct ib_ucm_rep cmd;
796 int result;
797
798 param.private_data = NULL;
799
800 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
801 return -EFAULT;
802
803 result = ib_ucm_alloc_data(¶m.private_data, cmd.data, cmd.len);
804 if (result)
805 return result;
806
807 param.qp_num = cmd.qpn;
808 param.starting_psn = cmd.psn;
809 param.private_data_len = cmd.len;
810 param.responder_resources = cmd.responder_resources;
811 param.initiator_depth = cmd.initiator_depth;
812 param.failover_accepted = cmd.failover_accepted;
813 param.flow_control = cmd.flow_control;
814 param.rnr_retry_count = cmd.rnr_retry_count;
815 param.srq = cmd.srq;
816
817 ctx = ib_ucm_ctx_get(file, cmd.id);
818 if (!IS_ERR(ctx)) {
819 ctx->uid = cmd.uid;
820 result = ib_send_cm_rep(ctx->cm_id, ¶m);
821 ib_ucm_ctx_put(ctx);
822 } else
823 result = PTR_ERR(ctx);
824
825 kfree(param.private_data);
826 return result;
827}
828
829static ssize_t ib_ucm_send_private_data(struct ib_ucm_file *file,
830 const char __user *inbuf, int in_len,
831 int (*func)(struct ib_cm_id *cm_id,
832 const void *private_data,
833 u8 private_data_len))
834{
835 struct ib_ucm_private_data cmd;
836 struct ib_ucm_context *ctx;
837 const void *private_data = NULL;
838 int result;
839
840 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
841 return -EFAULT;
842
843 result = ib_ucm_alloc_data(&private_data, cmd.data, cmd.len);
844 if (result)
845 return result;
846
847 ctx = ib_ucm_ctx_get(file, cmd.id);
848 if (!IS_ERR(ctx)) {
849 result = func(ctx->cm_id, private_data, cmd.len);
850 ib_ucm_ctx_put(ctx);
851 } else
852 result = PTR_ERR(ctx);
853
854 kfree(private_data);
855 return result;
856}
857
858static ssize_t ib_ucm_send_rtu(struct ib_ucm_file *file,
859 const char __user *inbuf,
860 int in_len, int out_len)
861{
862 return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_rtu);
863}
864
865static ssize_t ib_ucm_send_dreq(struct ib_ucm_file *file,
866 const char __user *inbuf,
867 int in_len, int out_len)
868{
869 return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_dreq);
870}
871
872static ssize_t ib_ucm_send_drep(struct ib_ucm_file *file,
873 const char __user *inbuf,
874 int in_len, int out_len)
875{
876 return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_drep);
877}
878
879static ssize_t ib_ucm_send_info(struct ib_ucm_file *file,
880 const char __user *inbuf, int in_len,
881 int (*func)(struct ib_cm_id *cm_id,
882 int status,
883 const void *info,
884 u8 info_len,
885 const void *data,
886 u8 data_len))
887{
888 struct ib_ucm_context *ctx;
889 struct ib_ucm_info cmd;
890 const void *data = NULL;
891 const void *info = NULL;
892 int result;
893
894 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
895 return -EFAULT;
896
897 result = ib_ucm_alloc_data(&data, cmd.data, cmd.data_len);
898 if (result)
899 goto done;
900
901 result = ib_ucm_alloc_data(&info, cmd.info, cmd.info_len);
902 if (result)
903 goto done;
904
905 ctx = ib_ucm_ctx_get(file, cmd.id);
906 if (!IS_ERR(ctx)) {
907 result = func(ctx->cm_id, cmd.status, info, cmd.info_len,
908 data, cmd.data_len);
909 ib_ucm_ctx_put(ctx);
910 } else
911 result = PTR_ERR(ctx);
912
913done:
914 kfree(data);
915 kfree(info);
916 return result;
917}
918
919static ssize_t ib_ucm_send_rej(struct ib_ucm_file *file,
920 const char __user *inbuf,
921 int in_len, int out_len)
922{
923 return ib_ucm_send_info(file, inbuf, in_len, (void *)ib_send_cm_rej);
924}
925
926static ssize_t ib_ucm_send_apr(struct ib_ucm_file *file,
927 const char __user *inbuf,
928 int in_len, int out_len)
929{
930 return ib_ucm_send_info(file, inbuf, in_len, (void *)ib_send_cm_apr);
931}
932
933static ssize_t ib_ucm_send_mra(struct ib_ucm_file *file,
934 const char __user *inbuf,
935 int in_len, int out_len)
936{
937 struct ib_ucm_context *ctx;
938 struct ib_ucm_mra cmd;
939 const void *data = NULL;
940 int result;
941
942 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
943 return -EFAULT;
944
945 result = ib_ucm_alloc_data(&data, cmd.data, cmd.len);
946 if (result)
947 return result;
948
949 ctx = ib_ucm_ctx_get(file, cmd.id);
950 if (!IS_ERR(ctx)) {
951 result = ib_send_cm_mra(ctx->cm_id, cmd.timeout, data, cmd.len);
952 ib_ucm_ctx_put(ctx);
953 } else
954 result = PTR_ERR(ctx);
955
956 kfree(data);
957 return result;
958}
959
960static ssize_t ib_ucm_send_lap(struct ib_ucm_file *file,
961 const char __user *inbuf,
962 int in_len, int out_len)
963{
964 struct ib_ucm_context *ctx;
965 struct sa_path_rec *path = NULL;
966 struct ib_ucm_lap cmd;
967 const void *data = NULL;
968 int result;
969
970 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
971 return -EFAULT;
972
973 result = ib_ucm_alloc_data(&data, cmd.data, cmd.len);
974 if (result)
975 goto done;
976
977 result = ib_ucm_path_get(&path, cmd.path);
978 if (result)
979 goto done;
980
981 ctx = ib_ucm_ctx_get(file, cmd.id);
982 if (!IS_ERR(ctx)) {
983 result = ib_send_cm_lap(ctx->cm_id, path, data, cmd.len);
984 ib_ucm_ctx_put(ctx);
985 } else
986 result = PTR_ERR(ctx);
987
988done:
989 kfree(data);
990 kfree(path);
991 return result;
992}
993
994static ssize_t ib_ucm_send_sidr_req(struct ib_ucm_file *file,
995 const char __user *inbuf,
996 int in_len, int out_len)
997{
998 struct ib_cm_sidr_req_param param;
999 struct ib_ucm_context *ctx;
1000 struct ib_ucm_sidr_req cmd;
1001 int result;
1002
1003 param.private_data = NULL;
1004 param.path = NULL;
1005
1006 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
1007 return -EFAULT;
1008
1009 result = ib_ucm_alloc_data(¶m.private_data, cmd.data, cmd.len);
1010 if (result)
1011 goto done;
1012
1013 result = ib_ucm_path_get(¶m.path, cmd.path);
1014 if (result)
1015 goto done;
1016
1017 param.private_data_len = cmd.len;
1018 param.service_id = cmd.sid;
1019 param.timeout_ms = cmd.timeout;
1020 param.max_cm_retries = cmd.max_cm_retries;
1021
1022 ctx = ib_ucm_ctx_get(file, cmd.id);
1023 if (!IS_ERR(ctx)) {
1024 result = ib_send_cm_sidr_req(ctx->cm_id, ¶m);
1025 ib_ucm_ctx_put(ctx);
1026 } else
1027 result = PTR_ERR(ctx);
1028
1029done:
1030 kfree(param.private_data);
1031 kfree(param.path);
1032 return result;
1033}
1034
1035static ssize_t ib_ucm_send_sidr_rep(struct ib_ucm_file *file,
1036 const char __user *inbuf,
1037 int in_len, int out_len)
1038{
1039 struct ib_cm_sidr_rep_param param;
1040 struct ib_ucm_sidr_rep cmd;
1041 struct ib_ucm_context *ctx;
1042 int result;
1043
1044 param.info = NULL;
1045
1046 if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
1047 return -EFAULT;
1048
1049 result = ib_ucm_alloc_data(¶m.private_data,
1050 cmd.data, cmd.data_len);
1051 if (result)
1052 goto done;
1053
1054 result = ib_ucm_alloc_data(¶m.info, cmd.info, cmd.info_len);
1055 if (result)
1056 goto done;
1057
1058 param.qp_num = cmd.qpn;
1059 param.qkey = cmd.qkey;
1060 param.status = cmd.status;
1061 param.info_length = cmd.info_len;
1062 param.private_data_len = cmd.data_len;
1063
1064 ctx = ib_ucm_ctx_get(file, cmd.id);
1065 if (!IS_ERR(ctx)) {
1066 result = ib_send_cm_sidr_rep(ctx->cm_id, ¶m);
1067 ib_ucm_ctx_put(ctx);
1068 } else
1069 result = PTR_ERR(ctx);
1070
1071done:
1072 kfree(param.private_data);
1073 kfree(param.info);
1074 return result;
1075}
1076
1077static ssize_t (*ucm_cmd_table[])(struct ib_ucm_file *file,
1078 const char __user *inbuf,
1079 int in_len, int out_len) = {
1080 [IB_USER_CM_CMD_CREATE_ID] = ib_ucm_create_id,
1081 [IB_USER_CM_CMD_DESTROY_ID] = ib_ucm_destroy_id,
1082 [IB_USER_CM_CMD_ATTR_ID] = ib_ucm_attr_id,
1083 [IB_USER_CM_CMD_LISTEN] = ib_ucm_listen,
1084 [IB_USER_CM_CMD_NOTIFY] = ib_ucm_notify,
1085 [IB_USER_CM_CMD_SEND_REQ] = ib_ucm_send_req,
1086 [IB_USER_CM_CMD_SEND_REP] = ib_ucm_send_rep,
1087 [IB_USER_CM_CMD_SEND_RTU] = ib_ucm_send_rtu,
1088 [IB_USER_CM_CMD_SEND_DREQ] = ib_ucm_send_dreq,
1089 [IB_USER_CM_CMD_SEND_DREP] = ib_ucm_send_drep,
1090 [IB_USER_CM_CMD_SEND_REJ] = ib_ucm_send_rej,
1091 [IB_USER_CM_CMD_SEND_MRA] = ib_ucm_send_mra,
1092 [IB_USER_CM_CMD_SEND_LAP] = ib_ucm_send_lap,
1093 [IB_USER_CM_CMD_SEND_APR] = ib_ucm_send_apr,
1094 [IB_USER_CM_CMD_SEND_SIDR_REQ] = ib_ucm_send_sidr_req,
1095 [IB_USER_CM_CMD_SEND_SIDR_REP] = ib_ucm_send_sidr_rep,
1096 [IB_USER_CM_CMD_EVENT] = ib_ucm_event,
1097 [IB_USER_CM_CMD_INIT_QP_ATTR] = ib_ucm_init_qp_attr,
1098};
1099
1100static ssize_t ib_ucm_write(struct file *filp, const char __user *buf,
1101 size_t len, loff_t *pos)
1102{
1103 struct ib_ucm_file *file = filp->private_data;
1104 struct ib_ucm_cmd_hdr hdr;
1105 ssize_t result;
1106
1107 if (!ib_safe_file_access(filp)) {
1108 pr_err_once("ucm_write: process %d (%s) changed security contexts after opening file descriptor, this is not allowed.\n",
1109 task_tgid_vnr(current), current->comm);
1110 return -EACCES;
1111 }
1112
1113 if (len < sizeof(hdr))
1114 return -EINVAL;
1115
1116 if (copy_from_user(&hdr, buf, sizeof(hdr)))
1117 return -EFAULT;
1118
1119 if (hdr.cmd >= ARRAY_SIZE(ucm_cmd_table))
1120 return -EINVAL;
1121
1122 if (hdr.in + sizeof(hdr) > len)
1123 return -EINVAL;
1124
1125 result = ucm_cmd_table[hdr.cmd](file, buf + sizeof(hdr),
1126 hdr.in, hdr.out);
1127 if (!result)
1128 result = len;
1129
1130 return result;
1131}
1132
1133static unsigned int ib_ucm_poll(struct file *filp,
1134 struct poll_table_struct *wait)
1135{
1136 struct ib_ucm_file *file = filp->private_data;
1137 unsigned int mask = 0;
1138
1139 poll_wait(filp, &file->poll_wait, wait);
1140
1141 if (!list_empty(&file->events))
1142 mask = POLLIN | POLLRDNORM;
1143
1144 return mask;
1145}
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155static int ib_ucm_open(struct inode *inode, struct file *filp)
1156{
1157 struct ib_ucm_file *file;
1158
1159 file = kmalloc(sizeof(*file), GFP_KERNEL);
1160 if (!file)
1161 return -ENOMEM;
1162
1163 INIT_LIST_HEAD(&file->events);
1164 INIT_LIST_HEAD(&file->ctxs);
1165 init_waitqueue_head(&file->poll_wait);
1166
1167 mutex_init(&file->file_mutex);
1168
1169 filp->private_data = file;
1170 file->filp = filp;
1171 file->device = container_of(inode->i_cdev, struct ib_ucm_device, cdev);
1172
1173 return nonseekable_open(inode, filp);
1174}
1175
1176static int ib_ucm_close(struct inode *inode, struct file *filp)
1177{
1178 struct ib_ucm_file *file = filp->private_data;
1179 struct ib_ucm_context *ctx;
1180
1181 mutex_lock(&file->file_mutex);
1182 while (!list_empty(&file->ctxs)) {
1183 ctx = list_entry(file->ctxs.next,
1184 struct ib_ucm_context, file_list);
1185 mutex_unlock(&file->file_mutex);
1186
1187 mutex_lock(&ctx_id_mutex);
1188 idr_remove(&ctx_id_table, ctx->id);
1189 mutex_unlock(&ctx_id_mutex);
1190
1191 ib_destroy_cm_id(ctx->cm_id);
1192 ib_ucm_cleanup_events(ctx);
1193 kfree(ctx);
1194
1195 mutex_lock(&file->file_mutex);
1196 }
1197 mutex_unlock(&file->file_mutex);
1198 kfree(file);
1199 return 0;
1200}
1201
1202static DECLARE_BITMAP(overflow_map, IB_UCM_MAX_DEVICES);
1203static void ib_ucm_release_dev(struct device *dev)
1204{
1205 struct ib_ucm_device *ucm_dev;
1206
1207 ucm_dev = container_of(dev, struct ib_ucm_device, dev);
1208 kfree(ucm_dev);
1209}
1210
1211static void ib_ucm_free_dev(struct ib_ucm_device *ucm_dev)
1212{
1213 if (ucm_dev->devnum < IB_UCM_MAX_DEVICES)
1214 clear_bit(ucm_dev->devnum, dev_map);
1215 else
1216 clear_bit(ucm_dev->devnum - IB_UCM_MAX_DEVICES, overflow_map);
1217}
1218
1219static const struct file_operations ucm_fops = {
1220 .owner = THIS_MODULE,
1221 .open = ib_ucm_open,
1222 .release = ib_ucm_close,
1223 .write = ib_ucm_write,
1224 .poll = ib_ucm_poll,
1225 .llseek = no_llseek,
1226};
1227
1228static ssize_t show_ibdev(struct device *dev, struct device_attribute *attr,
1229 char *buf)
1230{
1231 struct ib_ucm_device *ucm_dev;
1232
1233 ucm_dev = container_of(dev, struct ib_ucm_device, dev);
1234 return sprintf(buf, "%s\n", ucm_dev->ib_dev->name);
1235}
1236static DEVICE_ATTR(ibdev, S_IRUGO, show_ibdev, NULL);
1237
1238static dev_t overflow_maj;
1239static int find_overflow_devnum(void)
1240{
1241 int ret;
1242
1243 if (!overflow_maj) {
1244 ret = alloc_chrdev_region(&overflow_maj, 0, IB_UCM_MAX_DEVICES,
1245 "infiniband_cm");
1246 if (ret) {
1247 pr_err("ucm: couldn't register dynamic device number\n");
1248 return ret;
1249 }
1250 }
1251
1252 ret = find_first_zero_bit(overflow_map, IB_UCM_MAX_DEVICES);
1253 if (ret >= IB_UCM_MAX_DEVICES)
1254 return -1;
1255
1256 return ret;
1257}
1258
1259static void ib_ucm_add_one(struct ib_device *device)
1260{
1261 int devnum;
1262 dev_t base;
1263 struct ib_ucm_device *ucm_dev;
1264
1265 if (!device->alloc_ucontext || !rdma_cap_ib_cm(device, 1))
1266 return;
1267
1268 ucm_dev = kzalloc(sizeof *ucm_dev, GFP_KERNEL);
1269 if (!ucm_dev)
1270 return;
1271
1272 device_initialize(&ucm_dev->dev);
1273 ucm_dev->ib_dev = device;
1274 ucm_dev->dev.release = ib_ucm_release_dev;
1275
1276 devnum = find_first_zero_bit(dev_map, IB_UCM_MAX_DEVICES);
1277 if (devnum >= IB_UCM_MAX_DEVICES) {
1278 devnum = find_overflow_devnum();
1279 if (devnum < 0)
1280 goto err;
1281
1282 ucm_dev->devnum = devnum + IB_UCM_MAX_DEVICES;
1283 base = devnum + overflow_maj;
1284 set_bit(devnum, overflow_map);
1285 } else {
1286 ucm_dev->devnum = devnum;
1287 base = devnum + IB_UCM_BASE_DEV;
1288 set_bit(devnum, dev_map);
1289 }
1290
1291 cdev_init(&ucm_dev->cdev, &ucm_fops);
1292 ucm_dev->cdev.owner = THIS_MODULE;
1293 kobject_set_name(&ucm_dev->cdev.kobj, "ucm%d", ucm_dev->devnum);
1294
1295 ucm_dev->dev.class = &cm_class;
1296 ucm_dev->dev.parent = device->dev.parent;
1297 ucm_dev->dev.devt = base;
1298
1299 dev_set_name(&ucm_dev->dev, "ucm%d", ucm_dev->devnum);
1300 if (cdev_device_add(&ucm_dev->cdev, &ucm_dev->dev))
1301 goto err_devnum;
1302
1303 if (device_create_file(&ucm_dev->dev, &dev_attr_ibdev))
1304 goto err_dev;
1305
1306 ib_set_client_data(device, &ucm_client, ucm_dev);
1307 return;
1308
1309err_dev:
1310 cdev_device_del(&ucm_dev->cdev, &ucm_dev->dev);
1311err_devnum:
1312 ib_ucm_free_dev(ucm_dev);
1313err:
1314 put_device(&ucm_dev->dev);
1315 return;
1316}
1317
1318static void ib_ucm_remove_one(struct ib_device *device, void *client_data)
1319{
1320 struct ib_ucm_device *ucm_dev = client_data;
1321
1322 if (!ucm_dev)
1323 return;
1324
1325 cdev_device_del(&ucm_dev->cdev, &ucm_dev->dev);
1326 ib_ucm_free_dev(ucm_dev);
1327 put_device(&ucm_dev->dev);
1328}
1329
1330static CLASS_ATTR_STRING(abi_version, S_IRUGO,
1331 __stringify(IB_USER_CM_ABI_VERSION));
1332
1333static int __init ib_ucm_init(void)
1334{
1335 int ret;
1336
1337 ret = register_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES,
1338 "infiniband_cm");
1339 if (ret) {
1340 pr_err("ucm: couldn't register device number\n");
1341 goto error1;
1342 }
1343
1344 ret = class_create_file(&cm_class, &class_attr_abi_version.attr);
1345 if (ret) {
1346 pr_err("ucm: couldn't create abi_version attribute\n");
1347 goto error2;
1348 }
1349
1350 ret = ib_register_client(&ucm_client);
1351 if (ret) {
1352 pr_err("ucm: couldn't register client\n");
1353 goto error3;
1354 }
1355 return 0;
1356
1357error3:
1358 class_remove_file(&cm_class, &class_attr_abi_version.attr);
1359error2:
1360 unregister_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES);
1361error1:
1362 return ret;
1363}
1364
1365static void __exit ib_ucm_cleanup(void)
1366{
1367 ib_unregister_client(&ucm_client);
1368 class_remove_file(&cm_class, &class_attr_abi_version.attr);
1369 unregister_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES);
1370 if (overflow_maj)
1371 unregister_chrdev_region(overflow_maj, IB_UCM_MAX_DEVICES);
1372 idr_destroy(&ctx_id_table);
1373}
1374
1375module_init(ib_ucm_init);
1376module_exit(ib_ucm_cleanup);
1377
