blob: 3dbf811d3c517232e4ebbff5f6970d34d8f518ca [file] [log] [blame]
Roland Dreiereb8ffbf2005-07-07 17:57:14 -07001/*
2 * Copyright (c) 2005 Topspin Communications. All rights reserved.
3 * Copyright (c) 2005 Cisco Systems. All rights reserved.
Roland Dreier2a1d9b72005-08-10 23:03:10 -07004 * Copyright (c) 2005 Mellanox Technologies. All rights reserved.
Roland Dreiereb8ffbf2005-07-07 17:57:14 -07005 *
6 * This software is available to you under a choice of one of two
7 * licenses. You may choose to be licensed under the terms of the GNU
8 * General Public License (GPL) Version 2, available from the file
9 * COPYING in the main directory of this source tree, or the
10 * OpenIB.org BSD license below:
11 *
12 * Redistribution and use in source and binary forms, with or
13 * without modification, are permitted provided that the following
14 * conditions are met:
15 *
16 * - Redistributions of source code must retain the above
17 * copyright notice, this list of conditions and the following
18 * disclaimer.
19 *
20 * - Redistributions in binary form must reproduce the above
21 * copyright notice, this list of conditions and the following
22 * disclaimer in the documentation and/or other materials
23 * provided with the distribution.
24 *
25 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
26 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
27 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
28 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
29 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
30 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
31 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
32 * SOFTWARE.
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070033 */
34
35#include <linux/mm.h>
36#include <linux/dma-mapping.h>
Ingo Molnar3f07c012017-02-08 18:51:30 +010037#include <linux/sched/signal.h>
Ingo Molnar6e84f312017-02-08 18:51:29 +010038#include <linux/sched/mm.h>
Paul Gortmakerb108d972011-05-27 15:29:33 -040039#include <linux/export.h>
Joachim Fenkesc8d8bee2007-09-13 18:15:28 +020040#include <linux/hugetlb.h>
Tejun Heo5a0e3ad2010-03-24 17:04:11 +090041#include <linux/slab.h>
Shachar Raindel8ada2c12014-12-11 17:04:17 +020042#include <rdma/ib_umem_odp.h>
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070043
44#include "uverbs.h"
45
Dotan Barak92ddc442007-08-01 13:33:56 +030046
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070047static void __ib_umem_release(struct ib_device *dev, struct ib_umem *umem, int dirty)
48{
Yishai Hadaseeb84612014-01-28 13:40:15 +020049 struct scatterlist *sg;
50 struct page *page;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070051 int i;
52
Yishai Hadaseeb84612014-01-28 13:40:15 +020053 if (umem->nmap > 0)
54 ib_dma_unmap_sg(dev, umem->sg_head.sgl,
Sebastian Ott17069d32016-12-02 14:45:26 +010055 umem->npages,
Yishai Hadaseeb84612014-01-28 13:40:15 +020056 DMA_BIDIRECTIONAL);
Jens Axboe45711f12007-10-22 21:19:53 +020057
Yishai Hadaseeb84612014-01-28 13:40:15 +020058 for_each_sg(umem->sg_head.sgl, sg, umem->npages, i) {
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070059
Yishai Hadaseeb84612014-01-28 13:40:15 +020060 page = sg_page(sg);
61 if (umem->writable && dirty)
62 set_page_dirty_lock(page);
63 put_page(page);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070064 }
Yishai Hadaseeb84612014-01-28 13:40:15 +020065
66 sg_free_table(&umem->sg_head);
67 return;
68
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070069}
70
Roland Dreierf7c6a7b2007-03-04 16:15:11 -080071/**
72 * ib_umem_get - Pin and DMA map userspace memory.
Shachar Raindel8ada2c12014-12-11 17:04:17 +020073 *
74 * If access flags indicate ODP memory, avoid pinning. Instead, stores
Haggai Eran882214e2014-12-11 17:04:18 +020075 * the mm for future page fault handling in conjunction with MMU notifiers.
Shachar Raindel8ada2c12014-12-11 17:04:17 +020076 *
Roland Dreierf7c6a7b2007-03-04 16:15:11 -080077 * @context: userspace context to pin memory for
78 * @addr: userspace virtual address to start at
79 * @size: length of region to pin
80 * @access: IB_ACCESS_xxx flags for memory being pinned
Arthur Kepnercb9fbc52008-04-29 01:00:34 -070081 * @dmasync: flush in-flight DMA when the memory region is written
Roland Dreierf7c6a7b2007-03-04 16:15:11 -080082 */
83struct ib_umem *ib_umem_get(struct ib_ucontext *context, unsigned long addr,
Arthur Kepnercb9fbc52008-04-29 01:00:34 -070084 size_t size, int access, int dmasync)
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070085{
Roland Dreierf7c6a7b2007-03-04 16:15:11 -080086 struct ib_umem *umem;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070087 struct page **page_list;
Joachim Fenkesc8d8bee2007-09-13 18:15:28 +020088 struct vm_area_struct **vma_list;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070089 unsigned long locked;
90 unsigned long lock_limit;
91 unsigned long cur_base;
92 unsigned long npages;
Roland Dreierf7c6a7b2007-03-04 16:15:11 -080093 int ret;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -070094 int i;
Krzysztof Kozlowski00085f12016-08-03 13:46:00 -070095 unsigned long dma_attrs = 0;
Yishai Hadaseeb84612014-01-28 13:40:15 +020096 struct scatterlist *sg, *sg_list_start;
97 int need_release = 0;
Lorenzo Stoakes768ae302016-10-13 01:20:16 +010098 unsigned int gup_flags = FOLL_WRITE;
Arthur Kepnercb9fbc52008-04-29 01:00:34 -070099
100 if (dmasync)
Krzysztof Kozlowski00085f12016-08-03 13:46:00 -0700101 dma_attrs |= DMA_ATTR_WRITE_BARRIER;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700102
Shachar Raindel84940572015-03-18 17:39:08 +0000103 /*
104 * If the combination of the addr and size requested for this memory
105 * region causes an integer overflow, return error.
106 */
Yann Droneaud66578b02015-04-13 14:56:23 +0200107 if (((addr + size) < addr) ||
108 PAGE_ALIGN(addr + size) < (addr + size))
Shachar Raindel84940572015-03-18 17:39:08 +0000109 return ERR_PTR(-EINVAL);
110
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700111 if (!can_do_mlock())
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800112 return ERR_PTR(-EPERM);
113
Yishai Hadaseeb84612014-01-28 13:40:15 +0200114 umem = kzalloc(sizeof *umem, GFP_KERNEL);
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800115 if (!umem)
116 return ERR_PTR(-ENOMEM);
117
Artemy Kovalyov3e7e1192017-04-05 09:23:50 +0300118 umem->context = context;
119 umem->length = size;
120 umem->address = addr;
121 umem->page_shift = PAGE_SHIFT;
122 umem->pid = get_task_pid(current, PIDTYPE_PID);
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800123 /*
Sagi Grimberg860f10a2014-12-11 17:04:16 +0200124 * We ask for writable memory if any of the following
125 * access flags are set. "Local write" and "remote write"
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800126 * obviously require write access. "Remote atomic" can do
127 * things like fetch and add, which will modify memory, and
128 * "MW bind" can change permissions by binding a window.
129 */
Sagi Grimberg860f10a2014-12-11 17:04:16 +0200130 umem->writable = !!(access &
131 (IB_ACCESS_LOCAL_WRITE | IB_ACCESS_REMOTE_WRITE |
132 IB_ACCESS_REMOTE_ATOMIC | IB_ACCESS_MW_BIND));
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800133
Shachar Raindel8ada2c12014-12-11 17:04:17 +0200134 if (access & IB_ACCESS_ON_DEMAND) {
Kenneth Lee828f6fa2017-01-05 15:00:05 +0800135 put_pid(umem->pid);
Artemy Kovalyov0008b842017-04-05 09:23:57 +0300136 ret = ib_umem_odp_get(context, umem, access);
Shachar Raindel8ada2c12014-12-11 17:04:17 +0200137 if (ret) {
138 kfree(umem);
139 return ERR_PTR(ret);
140 }
141 return umem;
142 }
143
144 umem->odp_data = NULL;
145
Joachim Fenkesc8d8bee2007-09-13 18:15:28 +0200146 /* We assume the memory is from hugetlb until proved otherwise */
147 umem->hugetlb = 1;
148
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700149 page_list = (struct page **) __get_free_page(GFP_KERNEL);
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800150 if (!page_list) {
Kenneth Lee828f6fa2017-01-05 15:00:05 +0800151 put_pid(umem->pid);
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800152 kfree(umem);
153 return ERR_PTR(-ENOMEM);
154 }
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700155
Joachim Fenkesc8d8bee2007-09-13 18:15:28 +0200156 /*
157 * if we can't alloc the vma_list, it's not so bad;
158 * just assume the memory is not hugetlb memory
159 */
160 vma_list = (struct vm_area_struct **) __get_free_page(GFP_KERNEL);
161 if (!vma_list)
162 umem->hugetlb = 0;
163
Haggai Eran406f9e52014-12-11 17:04:12 +0200164 npages = ib_umem_num_pages(umem);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700165
166 down_write(&current->mm->mmap_sem);
167
Christoph Lameterbc3e53f2011-10-31 17:07:30 -0700168 locked = npages + current->mm->pinned_vm;
Jiri Slabyccbe9f02010-02-11 15:40:48 -0800169 lock_limit = rlimit(RLIMIT_MEMLOCK) >> PAGE_SHIFT;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700170
171 if ((locked > lock_limit) && !capable(CAP_IPC_LOCK)) {
172 ret = -ENOMEM;
173 goto out;
174 }
175
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800176 cur_base = addr & PAGE_MASK;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700177
Mark Bloch3c7ba572016-10-27 16:36:31 +0300178 if (npages == 0 || npages > UINT_MAX) {
Yishai Hadaseeb84612014-01-28 13:40:15 +0200179 ret = -EINVAL;
180 goto out;
181 }
182
183 ret = sg_alloc_table(&umem->sg_head, npages, GFP_KERNEL);
184 if (ret)
185 goto out;
186
Lorenzo Stoakes768ae302016-10-13 01:20:16 +0100187 if (!umem->writable)
188 gup_flags |= FOLL_FORCE;
189
Yishai Hadaseeb84612014-01-28 13:40:15 +0200190 need_release = 1;
191 sg_list_start = umem->sg_head.sgl;
192
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700193 while (npages) {
Dave Hansend4edcf02016-02-12 13:01:56 -0800194 ret = get_user_pages(cur_base,
Roland Dreier8079ffa2008-06-06 21:38:37 -0700195 min_t(unsigned long, npages,
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700196 PAGE_SIZE / sizeof (struct page *)),
Lorenzo Stoakes768ae302016-10-13 01:20:16 +0100197 gup_flags, page_list, vma_list);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700198
199 if (ret < 0)
200 goto out;
201
Yishai Hadaseeb84612014-01-28 13:40:15 +0200202 umem->npages += ret;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700203 cur_base += ret * PAGE_SIZE;
204 npages -= ret;
205
Yishai Hadaseeb84612014-01-28 13:40:15 +0200206 for_each_sg(sg_list_start, sg, ret, i) {
207 if (vma_list && !is_vm_hugetlb_page(vma_list[i]))
208 umem->hugetlb = 0;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700209
Yishai Hadaseeb84612014-01-28 13:40:15 +0200210 sg_set_page(sg, page_list[i], PAGE_SIZE, 0);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700211 }
212
Yishai Hadaseeb84612014-01-28 13:40:15 +0200213 /* preparing for next loop */
214 sg_list_start = sg;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700215 }
216
Yishai Hadaseeb84612014-01-28 13:40:15 +0200217 umem->nmap = ib_dma_map_sg_attrs(context->device,
218 umem->sg_head.sgl,
219 umem->npages,
220 DMA_BIDIRECTIONAL,
Krzysztof Kozlowski00085f12016-08-03 13:46:00 -0700221 dma_attrs);
Yishai Hadaseeb84612014-01-28 13:40:15 +0200222
223 if (umem->nmap <= 0) {
224 ret = -ENOMEM;
225 goto out;
226 }
227
228 ret = 0;
229
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700230out:
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800231 if (ret < 0) {
Yishai Hadaseeb84612014-01-28 13:40:15 +0200232 if (need_release)
233 __ib_umem_release(context->device, umem, 0);
Shawn Bohrer87773dd2014-09-03 12:13:57 -0500234 put_pid(umem->pid);
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800235 kfree(umem);
236 } else
Christoph Lameterbc3e53f2011-10-31 17:07:30 -0700237 current->mm->pinned_vm = locked;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700238
239 up_write(&current->mm->mmap_sem);
Joachim Fenkesc8d8bee2007-09-13 18:15:28 +0200240 if (vma_list)
241 free_page((unsigned long) vma_list);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700242 free_page((unsigned long) page_list);
243
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800244 return ret < 0 ? ERR_PTR(ret) : umem;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700245}
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800246EXPORT_SYMBOL(ib_umem_get);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700247
Roland Dreier1bf66a32007-04-18 20:20:28 -0700248static void ib_umem_account(struct work_struct *work)
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700249{
Roland Dreier1bf66a32007-04-18 20:20:28 -0700250 struct ib_umem *umem = container_of(work, struct ib_umem, work);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700251
Roland Dreier1bf66a32007-04-18 20:20:28 -0700252 down_write(&umem->mm->mmap_sem);
Christoph Lameterbc3e53f2011-10-31 17:07:30 -0700253 umem->mm->pinned_vm -= umem->diff;
Roland Dreier1bf66a32007-04-18 20:20:28 -0700254 up_write(&umem->mm->mmap_sem);
255 mmput(umem->mm);
256 kfree(umem);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700257}
258
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800259/**
260 * ib_umem_release - release memory pinned with ib_umem_get
261 * @umem: umem struct to release
262 */
263void ib_umem_release(struct ib_umem *umem)
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700264{
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800265 struct ib_ucontext *context = umem->context;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700266 struct mm_struct *mm;
Shawn Bohrer87773dd2014-09-03 12:13:57 -0500267 struct task_struct *task;
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800268 unsigned long diff;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700269
Shachar Raindel8ada2c12014-12-11 17:04:17 +0200270 if (umem->odp_data) {
271 ib_umem_odp_release(umem);
272 return;
273 }
274
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800275 __ib_umem_release(umem->context->device, umem, 1);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700276
Shawn Bohrer87773dd2014-09-03 12:13:57 -0500277 task = get_pid_task(umem->pid, PIDTYPE_PID);
278 put_pid(umem->pid);
279 if (!task)
280 goto out;
281 mm = get_task_mm(task);
282 put_task_struct(task);
283 if (!mm)
284 goto out;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700285
Haggai Eran406f9e52014-12-11 17:04:12 +0200286 diff = ib_umem_num_pages(umem);
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800287
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700288 /*
289 * We may be called with the mm's mmap_sem already held. This
290 * can happen when a userspace munmap() is the call that drops
291 * the last reference to our file and calls our release
292 * method. If there are memory regions to destroy, we'll end
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800293 * up here and not be able to take the mmap_sem. In that case
294 * we defer the vm_locked accounting to the system workqueue.
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700295 */
Roland Dreier24bce502007-06-21 11:05:58 -0700296 if (context->closing) {
297 if (!down_write_trylock(&mm->mmap_sem)) {
298 INIT_WORK(&umem->work, ib_umem_account);
299 umem->mm = mm;
300 umem->diff = diff;
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700301
Tejun Heof0626712010-10-19 15:24:36 +0000302 queue_work(ib_wq, &umem->work);
Roland Dreier24bce502007-06-21 11:05:58 -0700303 return;
304 }
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800305 } else
306 down_write(&mm->mmap_sem);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700307
Shawn Bohrer87773dd2014-09-03 12:13:57 -0500308 mm->pinned_vm -= diff;
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800309 up_write(&mm->mmap_sem);
310 mmput(mm);
Shawn Bohrer87773dd2014-09-03 12:13:57 -0500311out:
Roland Dreier1bf66a32007-04-18 20:20:28 -0700312 kfree(umem);
Roland Dreiereb8ffbf2005-07-07 17:57:14 -0700313}
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800314EXPORT_SYMBOL(ib_umem_release);
315
316int ib_umem_page_count(struct ib_umem *umem)
317{
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800318 int i;
319 int n;
Yishai Hadaseeb84612014-01-28 13:40:15 +0200320 struct scatterlist *sg;
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800321
Shachar Raindel8ada2c12014-12-11 17:04:17 +0200322 if (umem->odp_data)
323 return ib_umem_num_pages(umem);
324
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800325 n = 0;
Yishai Hadaseeb84612014-01-28 13:40:15 +0200326 for_each_sg(umem->sg_head.sgl, sg, umem->nmap, i)
Artemy Kovalyov3e7e1192017-04-05 09:23:50 +0300327 n += sg_dma_len(sg) >> umem->page_shift;
Roland Dreierf7c6a7b2007-03-04 16:15:11 -0800328
329 return n;
330}
331EXPORT_SYMBOL(ib_umem_page_count);
Haggai Eranc5d76f12014-12-11 17:04:13 +0200332
333/*
334 * Copy from the given ib_umem's pages to the given buffer.
335 *
336 * umem - the umem to copy from
337 * offset - offset to start copying from
338 * dst - destination buffer
339 * length - buffer length
340 *
341 * Returns 0 on success, or an error code.
342 */
343int ib_umem_copy_from(void *dst, struct ib_umem *umem, size_t offset,
344 size_t length)
345{
346 size_t end = offset + length;
347 int ret;
348
349 if (offset > umem->length || length > umem->length - offset) {
350 pr_err("ib_umem_copy_from not in range. offset: %zd umem length: %zd end: %zd\n",
351 offset, umem->length, end);
352 return -EINVAL;
353 }
354
355 ret = sg_pcopy_to_buffer(umem->sg_head.sgl, umem->nmap, dst, length,
356 offset + ib_umem_offset(umem));
357
358 if (ret < 0)
359 return ret;
360 else if (ret != length)
361 return -EINVAL;
362 else
363 return 0;
364}
365EXPORT_SYMBOL(ib_umem_copy_from);