ALSA: asihpi - Don't leak firmware if mem alloc fails
[deliverable/linux.git] / sound / pci / asihpi / hpioctl.c
CommitLineData
719f82d3
EB
1/*******************************************************************************
2
3 AudioScience HPI driver
1c073b67 4 Copyright (C) 1997-2011 AudioScience Inc. <support@audioscience.com>
719f82d3
EB
5
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of version 2 of the GNU General Public License as
8 published by the Free Software Foundation;
9
10 This program is distributed in the hope that it will be useful,
11 but WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 GNU General Public License for more details.
14
15 You should have received a copy of the GNU General Public License
16 along with this program; if not, write to the Free Software
17 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
18
19Common Linux HPI ioctl and module probe/remove functions
20*******************************************************************************/
21#define SOURCEFILE_NAME "hpioctl.c"
22
23#include "hpi_internal.h"
24#include "hpimsginit.h"
25#include "hpidebug.h"
26#include "hpimsgx.h"
27#include "hpioctl.h"
6d0b898e 28#include "hpicmn.h"
719f82d3
EB
29
30#include <linux/fs.h>
31#include <linux/slab.h>
32#include <linux/moduleparam.h>
33#include <asm/uaccess.h>
3285ea10 34#include <linux/pci.h>
719f82d3
EB
35#include <linux/stringify.h>
36
37#ifdef MODULE_FIRMWARE
38MODULE_FIRMWARE("asihpi/dsp5000.bin");
39MODULE_FIRMWARE("asihpi/dsp6200.bin");
40MODULE_FIRMWARE("asihpi/dsp6205.bin");
41MODULE_FIRMWARE("asihpi/dsp6400.bin");
42MODULE_FIRMWARE("asihpi/dsp6600.bin");
43MODULE_FIRMWARE("asihpi/dsp8700.bin");
44MODULE_FIRMWARE("asihpi/dsp8900.bin");
45#endif
46
47static int prealloc_stream_buf;
48module_param(prealloc_stream_buf, int, S_IRUGO);
49MODULE_PARM_DESC(prealloc_stream_buf,
3285ea10 50 "Preallocate size for per-adapter stream buffer");
719f82d3
EB
51
52/* Allow the debug level to be changed after module load.
53 E.g. echo 2 > /sys/module/asihpi/parameters/hpiDebugLevel
54*/
55module_param(hpi_debug_level, int, S_IRUGO | S_IWUSR);
56MODULE_PARM_DESC(hpi_debug_level, "debug verbosity 0..5");
57
58/* List of adapters found */
59static struct hpi_adapter adapters[HPI_MAX_ADAPTERS];
60
61/* Wrapper function to HPI_Message to enable dumping of the
62 message and response types.
63*/
64static void hpi_send_recv_f(struct hpi_message *phm, struct hpi_response *phr,
65 struct file *file)
66{
67 int adapter = phm->adapter_index;
68
69 if ((adapter >= HPI_MAX_ADAPTERS || adapter < 0)
70 && (phm->object != HPI_OBJ_SUBSYSTEM))
71 phr->error = HPI_ERROR_INVALID_OBJ_INDEX;
72 else
73 hpi_send_recv_ex(phm, phr, file);
74}
75
76/* This is called from hpifunc.c functions, called by ALSA
77 * (or other kernel process) In this case there is no file descriptor
78 * available for the message cache code
79 */
80void hpi_send_recv(struct hpi_message *phm, struct hpi_response *phr)
81{
82 hpi_send_recv_f(phm, phr, HOWNER_KERNEL);
83}
84
85EXPORT_SYMBOL(hpi_send_recv);
86/* for radio-asihpi */
87
88int asihpi_hpi_release(struct file *file)
89{
90 struct hpi_message hm;
91 struct hpi_response hr;
92
93/* HPI_DEBUG_LOG(INFO,"hpi_release file %p, pid %d\n", file, current->pid); */
94 /* close the subsystem just in case the application forgot to. */
95 hpi_init_message_response(&hm, &hr, HPI_OBJ_SUBSYSTEM,
96 HPI_SUBSYS_CLOSE);
97 hpi_send_recv_ex(&hm, &hr, file);
98 return 0;
99}
100
101long asihpi_hpi_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
102{
103 struct hpi_ioctl_linux __user *phpi_ioctl_data;
104 void __user *puhm;
105 void __user *puhr;
106 union hpi_message_buffer_v1 *hm;
107 union hpi_response_buffer_v1 *hr;
108 u16 res_max_size;
109 u32 uncopied_bytes;
719f82d3
EB
110 int err = 0;
111
112 if (cmd != HPI_IOCTL_LINUX)
113 return -EINVAL;
114
115 hm = kmalloc(sizeof(*hm), GFP_KERNEL);
116 hr = kmalloc(sizeof(*hr), GFP_KERNEL);
117 if (!hm || !hr) {
118 err = -ENOMEM;
119 goto out;
120 }
121
122 phpi_ioctl_data = (struct hpi_ioctl_linux __user *)arg;
123
124 /* Read the message and response pointers from user space. */
3285ea10
EB
125 if (get_user(puhm, &phpi_ioctl_data->phm)
126 || get_user(puhr, &phpi_ioctl_data->phr)) {
ec9d04b2
KV
127 err = -EFAULT;
128 goto out;
129 }
719f82d3
EB
130
131 /* Now read the message size and data from user space. */
ec9d04b2
KV
132 if (get_user(hm->h.size, (u16 __user *)puhm)) {
133 err = -EFAULT;
134 goto out;
135 }
719f82d3
EB
136 if (hm->h.size > sizeof(*hm))
137 hm->h.size = sizeof(*hm);
138
3285ea10 139 /* printk(KERN_INFO "message size %d\n", hm->h.wSize); */
719f82d3
EB
140
141 uncopied_bytes = copy_from_user(hm, puhm, hm->h.size);
142 if (uncopied_bytes) {
143 HPI_DEBUG_LOG(ERROR, "uncopied bytes %d\n", uncopied_bytes);
144 err = -EFAULT;
145 goto out;
146 }
147
ec9d04b2
KV
148 if (get_user(res_max_size, (u16 __user *)puhr)) {
149 err = -EFAULT;
150 goto out;
151 }
719f82d3
EB
152 /* printk(KERN_INFO "user response size %d\n", res_max_size); */
153 if (res_max_size < sizeof(struct hpi_response_header)) {
154 HPI_DEBUG_LOG(WARNING, "small res size %d\n", res_max_size);
155 err = -EFAULT;
156 goto out;
157 }
158
6d0b898e
EB
159 switch (hm->h.function) {
160 case HPI_SUBSYS_CREATE_ADAPTER:
161 case HPI_ADAPTER_DELETE:
162 /* Application must not use these functions! */
163 hr->h.size = sizeof(hr->h);
164 hr->h.error = HPI_ERROR_INVALID_OPERATION;
165 hr->h.function = hm->h.function;
166 uncopied_bytes = copy_to_user(puhr, hr, hr->h.size);
167 if (uncopied_bytes)
168 err = -EFAULT;
169 else
170 err = 0;
171 goto out;
172 }
173
3285ea10 174 hr->h.size = res_max_size;
719f82d3 175 if (hm->h.object == HPI_OBJ_SUBSYSTEM) {
6d0b898e 176 hpi_send_recv_f(&hm->m0, &hr->r0, file);
719f82d3
EB
177 } else {
178 u16 __user *ptr = NULL;
179 u32 size = 0;
180
181 /* -1=no data 0=read from user mem, 1=write to user mem */
182 int wrflag = -1;
183 u32 adapter = hm->h.adapter_index;
767cd365 184 struct hpi_adapter *pa = &adapters[adapter];
719f82d3 185
ae6ff61e 186 if ((adapter >= HPI_MAX_ADAPTERS) || (!pa->type)) {
719f82d3
EB
187 hpi_init_response(&hr->r0, HPI_OBJ_ADAPTER,
188 HPI_ADAPTER_OPEN,
189 HPI_ERROR_BAD_ADAPTER_NUMBER);
190
191 uncopied_bytes =
192 copy_to_user(puhr, hr, sizeof(hr->h));
193 if (uncopied_bytes)
194 err = -EFAULT;
195 else
196 err = 0;
197 goto out;
198 }
199
767cd365 200 if (mutex_lock_interruptible(&pa->mutex)) {
719f82d3
EB
201 err = -EINTR;
202 goto out;
203 }
204
205 /* Dig out any pointers embedded in the message. */
206 switch (hm->h.function) {
207 case HPI_OSTREAM_WRITE:
208 case HPI_ISTREAM_READ:{
209 /* Yes, sparse, this is correct. */
210 ptr = (u16 __user *)hm->m0.u.d.u.data.pb_data;
211 size = hm->m0.u.d.u.data.data_size;
212
213 /* Allocate buffer according to application request.
214 ?Is it better to alloc/free for the duration
215 of the transaction?
216 */
217 if (pa->buffer_size < size) {
218 HPI_DEBUG_LOG(DEBUG,
3285ea10 219 "Realloc adapter %d stream "
719f82d3
EB
220 "buffer from %zd to %d\n",
221 hm->h.adapter_index,
222 pa->buffer_size, size);
223 if (pa->p_buffer) {
224 pa->buffer_size = 0;
225 vfree(pa->p_buffer);
226 }
227 pa->p_buffer = vmalloc(size);
228 if (pa->p_buffer)
229 pa->buffer_size = size;
230 else {
231 HPI_DEBUG_LOG(ERROR,
232 "HPI could not allocate "
233 "stream buffer size %d\n",
234 size);
235
767cd365 236 mutex_unlock(&pa->mutex);
719f82d3
EB
237 err = -EINVAL;
238 goto out;
239 }
240 }
241
242 hm->m0.u.d.u.data.pb_data = pa->p_buffer;
243 if (hm->h.function == HPI_ISTREAM_READ)
244 /* from card, WRITE to user mem */
245 wrflag = 1;
246 else
247 wrflag = 0;
248 break;
249 }
250
251 default:
252 size = 0;
253 break;
254 }
255
256 if (size && (wrflag == 0)) {
257 uncopied_bytes =
258 copy_from_user(pa->p_buffer, ptr, size);
259 if (uncopied_bytes)
260 HPI_DEBUG_LOG(WARNING,
3285ea10 261 "Missed %d of %d "
719f82d3
EB
262 "bytes from user\n", uncopied_bytes,
263 size);
264 }
265
266 hpi_send_recv_f(&hm->m0, &hr->r0, file);
267
268 if (size && (wrflag == 1)) {
269 uncopied_bytes =
270 copy_to_user(ptr, pa->p_buffer, size);
271 if (uncopied_bytes)
272 HPI_DEBUG_LOG(WARNING,
3285ea10 273 "Missed %d of %d " "bytes to user\n",
719f82d3
EB
274 uncopied_bytes, size);
275 }
276
767cd365 277 mutex_unlock(&pa->mutex);
719f82d3
EB
278 }
279
280 /* on return response size must be set */
281 /*printk(KERN_INFO "response size %d\n", hr->h.wSize); */
282
283 if (!hr->h.size) {
284 HPI_DEBUG_LOG(ERROR, "response zero size\n");
285 err = -EFAULT;
286 goto out;
287 }
288
289 if (hr->h.size > res_max_size) {
290 HPI_DEBUG_LOG(ERROR, "response too big %d %d\n", hr->h.size,
291 res_max_size);
3285ea10
EB
292 hr->h.error = HPI_ERROR_RESPONSE_BUFFER_TOO_SMALL;
293 hr->h.specific_error = hr->h.size;
294 hr->h.size = sizeof(hr->h);
719f82d3
EB
295 }
296
297 uncopied_bytes = copy_to_user(puhr, hr, hr->h.size);
298 if (uncopied_bytes) {
299 HPI_DEBUG_LOG(ERROR, "uncopied bytes %d\n", uncopied_bytes);
300 err = -EFAULT;
301 goto out;
302 }
303
304out:
305 kfree(hm);
306 kfree(hr);
307 return err;
308}
309
310int __devinit asihpi_adapter_probe(struct pci_dev *pci_dev,
311 const struct pci_device_id *pci_id)
312{
42258dab 313 int idx, nm;
719f82d3
EB
314 unsigned int memlen;
315 struct hpi_message hm;
316 struct hpi_response hr;
317 struct hpi_adapter adapter;
318 struct hpi_pci pci;
319
320 memset(&adapter, 0, sizeof(adapter));
321
3285ea10
EB
322 dev_printk(KERN_DEBUG, &pci_dev->dev,
323 "probe %04x:%04x,%04x:%04x,%04x\n", pci_dev->vendor,
324 pci_dev->device, pci_dev->subsystem_vendor,
719f82d3
EB
325 pci_dev->subsystem_device, pci_dev->devfn);
326
3285ea10
EB
327 if (pci_enable_device(pci_dev) < 0) {
328 dev_printk(KERN_ERR, &pci_dev->dev,
329 "pci_enable_device failed, disabling device\n");
330 return -EIO;
331 }
332
333 pci_set_master(pci_dev); /* also sets latency timer if < 16 */
334
719f82d3
EB
335 hpi_init_message_response(&hm, &hr, HPI_OBJ_SUBSYSTEM,
336 HPI_SUBSYS_CREATE_ADAPTER);
337 hpi_init_response(&hr, HPI_OBJ_SUBSYSTEM, HPI_SUBSYS_CREATE_ADAPTER,
338 HPI_ERROR_PROCESSING_MESSAGE);
339
3285ea10 340 hm.adapter_index = HPI_ADAPTER_INDEX_INVALID;
719f82d3 341
719f82d3
EB
342 adapter.pci = pci_dev;
343
344 nm = HPI_MAX_ADAPTER_MEM_SPACES;
345
346 for (idx = 0; idx < nm; idx++) {
42258dab
EB
347 HPI_DEBUG_LOG(INFO, "resource %d %pR\n", idx,
348 &pci_dev->resource[idx]);
719f82d3
EB
349
350 if (pci_resource_flags(pci_dev, idx) & IORESOURCE_MEM) {
351 memlen = pci_resource_len(pci_dev, idx);
352 adapter.ap_remapped_mem_base[idx] =
353 ioremap(pci_resource_start(pci_dev, idx),
354 memlen);
355 if (!adapter.ap_remapped_mem_base[idx]) {
356 HPI_DEBUG_LOG(ERROR,
357 "ioremap failed, aborting\n");
358 /* unmap previously mapped pci mem space */
359 goto err;
360 }
361 }
362
363 pci.ap_mem_base[idx] = adapter.ap_remapped_mem_base[idx];
364 }
365
3285ea10 366 pci.pci_dev = pci_dev;
719f82d3
EB
367 hm.u.s.resource.bus_type = HPI_BUS_PCI;
368 hm.u.s.resource.r.pci = &pci;
369
370 /* call CreateAdapterObject on the relevant hpi module */
371 hpi_send_recv_ex(&hm, &hr, HOWNER_KERNEL);
372 if (hr.error)
373 goto err;
374
375 if (prealloc_stream_buf) {
376 adapter.p_buffer = vmalloc(prealloc_stream_buf);
377 if (!adapter.p_buffer) {
378 HPI_DEBUG_LOG(ERROR,
379 "HPI could not allocate "
380 "kernel buffer size %d\n",
381 prealloc_stream_buf);
382 goto err;
383 }
384 }
385
386 adapter.index = hr.u.s.adapter_index;
2f918a64 387 adapter.type = hr.u.s.adapter_type;
6d0b898e
EB
388
389 hpi_init_message_response(&hm, &hr, HPI_OBJ_ADAPTER,
390 HPI_ADAPTER_OPEN);
719f82d3 391 hm.adapter_index = adapter.index;
6d0b898e 392 hpi_send_recv_ex(&hm, &hr, HOWNER_KERNEL);
719f82d3 393
6d0b898e 394 if (hr.error)
719f82d3
EB
395 goto err;
396
397 adapter.snd_card_asihpi = NULL;
398 /* WARNING can't init mutex in 'adapter'
399 * and then copy it to adapters[] ?!?!
400 */
6d0b898e 401 adapters[adapter.index] = adapter;
719f82d3
EB
402 mutex_init(&adapters[adapter.index].mutex);
403 pci_set_drvdata(pci_dev, &adapters[adapter.index]);
404
3285ea10
EB
405 dev_printk(KERN_INFO, &pci_dev->dev,
406 "probe succeeded for ASI%04X HPI index %d\n", adapter.type,
407 adapter.index);
719f82d3
EB
408
409 return 0;
410
411err:
412 for (idx = 0; idx < HPI_MAX_ADAPTER_MEM_SPACES; idx++) {
413 if (adapter.ap_remapped_mem_base[idx]) {
414 iounmap(adapter.ap_remapped_mem_base[idx]);
415 adapter.ap_remapped_mem_base[idx] = NULL;
416 }
417 }
418
419 if (adapter.p_buffer) {
420 adapter.buffer_size = 0;
421 vfree(adapter.p_buffer);
422 }
423
424 HPI_DEBUG_LOG(ERROR, "adapter_probe failed\n");
425 return -ENODEV;
426}
427
428void __devexit asihpi_adapter_remove(struct pci_dev *pci_dev)
429{
430 int idx;
431 struct hpi_message hm;
432 struct hpi_response hr;
433 struct hpi_adapter *pa;
5dbea6b1 434 pa = pci_get_drvdata(pci_dev);
719f82d3 435
6d0b898e
EB
436 hpi_init_message_response(&hm, &hr, HPI_OBJ_ADAPTER,
437 HPI_ADAPTER_DELETE);
438 hm.adapter_index = pa->index;
719f82d3
EB
439 hpi_send_recv_ex(&hm, &hr, HOWNER_KERNEL);
440
441 /* unmap PCI memory space, mapped during device init. */
442 for (idx = 0; idx < HPI_MAX_ADAPTER_MEM_SPACES; idx++) {
443 if (pa->ap_remapped_mem_base[idx]) {
444 iounmap(pa->ap_remapped_mem_base[idx]);
445 pa->ap_remapped_mem_base[idx] = NULL;
446 }
447 }
448
c188dec3 449 if (pa->p_buffer)
719f82d3 450 vfree(pa->p_buffer);
719f82d3
EB
451
452 pci_set_drvdata(pci_dev, NULL);
3285ea10
EB
453 if (1)
454 dev_printk(KERN_INFO, &pci_dev->dev,
455 "remove %04x:%04x,%04x:%04x,%04x," " HPI index %d.\n",
456 pci_dev->vendor, pci_dev->device,
457 pci_dev->subsystem_vendor, pci_dev->subsystem_device,
458 pci_dev->devfn, pa->index);
c188dec3
EB
459
460 memset(pa, 0, sizeof(*pa));
719f82d3
EB
461}
462
463void __init asihpi_init(void)
464{
465 struct hpi_message hm;
466 struct hpi_response hr;
467
468 memset(adapters, 0, sizeof(adapters));
469
1dd6aaaa 470 printk(KERN_INFO "ASIHPI driver " HPI_VER_STRING "\n");
719f82d3
EB
471
472 hpi_init_message_response(&hm, &hr, HPI_OBJ_SUBSYSTEM,
473 HPI_SUBSYS_DRIVER_LOAD);
474 hpi_send_recv_ex(&hm, &hr, HOWNER_KERNEL);
475}
476
477void asihpi_exit(void)
478{
479 struct hpi_message hm;
480 struct hpi_response hr;
481
482 hpi_init_message_response(&hm, &hr, HPI_OBJ_SUBSYSTEM,
483 HPI_SUBSYS_DRIVER_UNLOAD);
484 hpi_send_recv_ex(&hm, &hr, HOWNER_KERNEL);
485}
This page took 0.086177 seconds and 5 git commands to generate.