| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* | 
 | 2 |  * Copyright (C) 2001 Jens Axboe <axboe@suse.de> | 
 | 3 |  * | 
 | 4 |  * This program is free software; you can redistribute it and/or modify | 
 | 5 |  * it under the terms of the GNU General Public License version 2 as | 
 | 6 |  * published by the Free Software Foundation. | 
 | 7 |  * | 
 | 8 |  * This program is distributed in the hope that it will be useful, | 
 | 9 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of | 
 | 10 |  * | 
 | 11 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the | 
 | 12 |  * GNU General Public License for more details. | 
 | 13 |  * | 
 | 14 |  * You should have received a copy of the GNU General Public Licens | 
 | 15 |  * along with this program; if not, write to the Free Software | 
 | 16 |  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111- | 
 | 17 |  * | 
 | 18 |  */ | 
 | 19 | #include <linux/kernel.h> | 
 | 20 | #include <linux/errno.h> | 
 | 21 | #include <linux/string.h> | 
 | 22 | #include <linux/module.h> | 
 | 23 | #include <linux/blkdev.h> | 
| Randy.Dunlap | c59ede7 | 2006-01-11 12:17:46 -0800 | [diff] [blame] | 24 | #include <linux/capability.h> | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 25 | #include <linux/completion.h> | 
 | 26 | #include <linux/cdrom.h> | 
| Paolo Bonzini | 0bfc96c | 2012-01-12 16:01:28 +0100 | [diff] [blame] | 27 | #include <linux/ratelimit.h> | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 28 | #include <linux/slab.h> | 
 | 29 | #include <linux/times.h> | 
| Kent Overstreet | a27bb33 | 2013-05-07 16:19:08 -0700 | [diff] [blame] | 30 | #include <linux/uio.h> | 
| Linus Torvalds | 7c0f6ba | 2016-12-24 11:46:01 -0800 | [diff] [blame] | 31 | #include <linux/uaccess.h> | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 32 |  | 
 | 33 | #include <scsi/scsi.h> | 
 | 34 | #include <scsi/scsi_ioctl.h> | 
 | 35 | #include <scsi/scsi_cmnd.h> | 
 | 36 |  | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 37 | struct blk_cmd_filter { | 
 | 38 | 	unsigned long read_ok[BLK_SCSI_CMD_PER_LONG]; | 
 | 39 | 	unsigned long write_ok[BLK_SCSI_CMD_PER_LONG]; | 
| H Hartley Sweeten | 476d42f | 2009-11-04 09:10:33 +0100 | [diff] [blame] | 40 | }; | 
 | 41 |  | 
 | 42 | static struct blk_cmd_filter blk_default_cmd_filter; | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 43 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 44 | /* Command group 3 is reserved and should never be used.  */ | 
| Boaz Harrosh | db4742d | 2008-04-30 11:27:26 +0300 | [diff] [blame] | 45 | const unsigned char scsi_command_size_tbl[8] = | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 46 | { | 
 | 47 | 	6, 10, 10, 12, | 
 | 48 | 	16, 12, 10, 10 | 
 | 49 | }; | 
| Boaz Harrosh | db4742d | 2008-04-30 11:27:26 +0300 | [diff] [blame] | 50 | EXPORT_SYMBOL(scsi_command_size_tbl); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 51 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 52 | #include <scsi/sg.h> | 
 | 53 |  | 
 | 54 | static int sg_get_version(int __user *p) | 
 | 55 | { | 
| Arjan van de Ven | 6410009 | 2006-01-06 09:46:02 +0100 | [diff] [blame] | 56 | 	static const int sg_version_num = 30527; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 57 | 	return put_user(sg_version_num, p); | 
 | 58 | } | 
 | 59 |  | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 60 | static int scsi_get_idlun(struct request_queue *q, int __user *p) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 61 | { | 
 | 62 | 	return put_user(0, p); | 
 | 63 | } | 
 | 64 |  | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 65 | static int scsi_get_bus(struct request_queue *q, int __user *p) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 66 | { | 
 | 67 | 	return put_user(0, p); | 
 | 68 | } | 
 | 69 |  | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 70 | static int sg_get_timeout(struct request_queue *q) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 71 | { | 
| Milton Miller | 2b91baf | 2008-11-17 13:10:34 +0100 | [diff] [blame] | 72 | 	return jiffies_to_clock_t(q->sg_timeout); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 73 | } | 
 | 74 |  | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 75 | static int sg_set_timeout(struct request_queue *q, int __user *p) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 76 | { | 
 | 77 | 	int timeout, err = get_user(timeout, p); | 
 | 78 |  | 
 | 79 | 	if (!err) | 
| Milton Miller | 2b91baf | 2008-11-17 13:10:34 +0100 | [diff] [blame] | 80 | 		q->sg_timeout = clock_t_to_jiffies(timeout); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 81 |  | 
 | 82 | 	return err; | 
 | 83 | } | 
 | 84 |  | 
| Akinobu Mita | 9b4231b | 2014-05-25 21:43:34 +0900 | [diff] [blame] | 85 | static int max_sectors_bytes(struct request_queue *q) | 
 | 86 | { | 
 | 87 | 	unsigned int max_sectors = queue_max_sectors(q); | 
 | 88 |  | 
 | 89 | 	max_sectors = min_t(unsigned int, max_sectors, INT_MAX >> 9); | 
 | 90 |  | 
 | 91 | 	return max_sectors << 9; | 
 | 92 | } | 
 | 93 |  | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 94 | static int sg_get_reserved_size(struct request_queue *q, int __user *p) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 95 | { | 
| Akinobu Mita | 9b4231b | 2014-05-25 21:43:34 +0900 | [diff] [blame] | 96 | 	int val = min_t(int, q->sg_reserved_size, max_sectors_bytes(q)); | 
| Alan Stern | 44ec954 | 2007-02-20 11:01:57 -0500 | [diff] [blame] | 97 |  | 
 | 98 | 	return put_user(val, p); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 99 | } | 
 | 100 |  | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 101 | static int sg_set_reserved_size(struct request_queue *q, int __user *p) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 102 | { | 
 | 103 | 	int size, err = get_user(size, p); | 
 | 104 |  | 
 | 105 | 	if (err) | 
 | 106 | 		return err; | 
 | 107 |  | 
 | 108 | 	if (size < 0) | 
 | 109 | 		return -EINVAL; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 110 |  | 
| Akinobu Mita | 9b4231b | 2014-05-25 21:43:34 +0900 | [diff] [blame] | 111 | 	q->sg_reserved_size = min(size, max_sectors_bytes(q)); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 112 | 	return 0; | 
 | 113 | } | 
 | 114 |  | 
 | 115 | /* | 
 | 116 |  * will always return that we are ATAPI even for a real SCSI drive, I'm not | 
 | 117 |  * so sure this is worth doing anything about (why would you care??) | 
 | 118 |  */ | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 119 | static int sg_emulated_host(struct request_queue *q, int __user *p) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 120 | { | 
 | 121 | 	return put_user(1, p); | 
 | 122 | } | 
 | 123 |  | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 124 | static void blk_set_cmd_filter_defaults(struct blk_cmd_filter *filter) | 
| FUJITA Tomonori | abf5439 | 2008-08-16 14:10:05 +0900 | [diff] [blame] | 125 | { | 
 | 126 | 	/* Basic read-only commands */ | 
 | 127 | 	__set_bit(TEST_UNIT_READY, filter->read_ok); | 
 | 128 | 	__set_bit(REQUEST_SENSE, filter->read_ok); | 
 | 129 | 	__set_bit(READ_6, filter->read_ok); | 
 | 130 | 	__set_bit(READ_10, filter->read_ok); | 
 | 131 | 	__set_bit(READ_12, filter->read_ok); | 
 | 132 | 	__set_bit(READ_16, filter->read_ok); | 
 | 133 | 	__set_bit(READ_BUFFER, filter->read_ok); | 
 | 134 | 	__set_bit(READ_DEFECT_DATA, filter->read_ok); | 
 | 135 | 	__set_bit(READ_CAPACITY, filter->read_ok); | 
 | 136 | 	__set_bit(READ_LONG, filter->read_ok); | 
 | 137 | 	__set_bit(INQUIRY, filter->read_ok); | 
 | 138 | 	__set_bit(MODE_SENSE, filter->read_ok); | 
 | 139 | 	__set_bit(MODE_SENSE_10, filter->read_ok); | 
 | 140 | 	__set_bit(LOG_SENSE, filter->read_ok); | 
 | 141 | 	__set_bit(START_STOP, filter->read_ok); | 
 | 142 | 	__set_bit(GPCMD_VERIFY_10, filter->read_ok); | 
 | 143 | 	__set_bit(VERIFY_16, filter->read_ok); | 
 | 144 | 	__set_bit(REPORT_LUNS, filter->read_ok); | 
| Hannes Reinecke | eb846d9 | 2014-11-17 14:25:19 +0100 | [diff] [blame] | 145 | 	__set_bit(SERVICE_ACTION_IN_16, filter->read_ok); | 
| FUJITA Tomonori | abf5439 | 2008-08-16 14:10:05 +0900 | [diff] [blame] | 146 | 	__set_bit(RECEIVE_DIAGNOSTIC, filter->read_ok); | 
 | 147 | 	__set_bit(MAINTENANCE_IN, filter->read_ok); | 
 | 148 | 	__set_bit(GPCMD_READ_BUFFER_CAPACITY, filter->read_ok); | 
 | 149 |  | 
 | 150 | 	/* Audio CD commands */ | 
 | 151 | 	__set_bit(GPCMD_PLAY_CD, filter->read_ok); | 
 | 152 | 	__set_bit(GPCMD_PLAY_AUDIO_10, filter->read_ok); | 
 | 153 | 	__set_bit(GPCMD_PLAY_AUDIO_MSF, filter->read_ok); | 
 | 154 | 	__set_bit(GPCMD_PLAY_AUDIO_TI, filter->read_ok); | 
 | 155 | 	__set_bit(GPCMD_PAUSE_RESUME, filter->read_ok); | 
 | 156 |  | 
 | 157 | 	/* CD/DVD data reading */ | 
 | 158 | 	__set_bit(GPCMD_READ_CD, filter->read_ok); | 
 | 159 | 	__set_bit(GPCMD_READ_CD_MSF, filter->read_ok); | 
 | 160 | 	__set_bit(GPCMD_READ_DISC_INFO, filter->read_ok); | 
 | 161 | 	__set_bit(GPCMD_READ_CDVD_CAPACITY, filter->read_ok); | 
 | 162 | 	__set_bit(GPCMD_READ_DVD_STRUCTURE, filter->read_ok); | 
 | 163 | 	__set_bit(GPCMD_READ_HEADER, filter->read_ok); | 
 | 164 | 	__set_bit(GPCMD_READ_TRACK_RZONE_INFO, filter->read_ok); | 
 | 165 | 	__set_bit(GPCMD_READ_SUBCHANNEL, filter->read_ok); | 
 | 166 | 	__set_bit(GPCMD_READ_TOC_PMA_ATIP, filter->read_ok); | 
 | 167 | 	__set_bit(GPCMD_REPORT_KEY, filter->read_ok); | 
 | 168 | 	__set_bit(GPCMD_SCAN, filter->read_ok); | 
 | 169 | 	__set_bit(GPCMD_GET_CONFIGURATION, filter->read_ok); | 
 | 170 | 	__set_bit(GPCMD_READ_FORMAT_CAPACITIES, filter->read_ok); | 
 | 171 | 	__set_bit(GPCMD_GET_EVENT_STATUS_NOTIFICATION, filter->read_ok); | 
 | 172 | 	__set_bit(GPCMD_GET_PERFORMANCE, filter->read_ok); | 
 | 173 | 	__set_bit(GPCMD_SEEK, filter->read_ok); | 
 | 174 | 	__set_bit(GPCMD_STOP_PLAY_SCAN, filter->read_ok); | 
 | 175 |  | 
 | 176 | 	/* Basic writing commands */ | 
 | 177 | 	__set_bit(WRITE_6, filter->write_ok); | 
 | 178 | 	__set_bit(WRITE_10, filter->write_ok); | 
 | 179 | 	__set_bit(WRITE_VERIFY, filter->write_ok); | 
 | 180 | 	__set_bit(WRITE_12, filter->write_ok); | 
 | 181 | 	__set_bit(WRITE_VERIFY_12, filter->write_ok); | 
 | 182 | 	__set_bit(WRITE_16, filter->write_ok); | 
 | 183 | 	__set_bit(WRITE_LONG, filter->write_ok); | 
 | 184 | 	__set_bit(WRITE_LONG_2, filter->write_ok); | 
| Mauricio Faria de Oliveira | 25cdb64 | 2016-12-15 11:48:18 -0600 | [diff] [blame] | 185 | 	__set_bit(WRITE_SAME, filter->write_ok); | 
 | 186 | 	__set_bit(WRITE_SAME_16, filter->write_ok); | 
 | 187 | 	__set_bit(WRITE_SAME_32, filter->write_ok); | 
| FUJITA Tomonori | abf5439 | 2008-08-16 14:10:05 +0900 | [diff] [blame] | 188 | 	__set_bit(ERASE, filter->write_ok); | 
 | 189 | 	__set_bit(GPCMD_MODE_SELECT_10, filter->write_ok); | 
 | 190 | 	__set_bit(MODE_SELECT, filter->write_ok); | 
 | 191 | 	__set_bit(LOG_SELECT, filter->write_ok); | 
 | 192 | 	__set_bit(GPCMD_BLANK, filter->write_ok); | 
 | 193 | 	__set_bit(GPCMD_CLOSE_TRACK, filter->write_ok); | 
 | 194 | 	__set_bit(GPCMD_FLUSH_CACHE, filter->write_ok); | 
 | 195 | 	__set_bit(GPCMD_FORMAT_UNIT, filter->write_ok); | 
 | 196 | 	__set_bit(GPCMD_REPAIR_RZONE_TRACK, filter->write_ok); | 
 | 197 | 	__set_bit(GPCMD_RESERVE_RZONE_TRACK, filter->write_ok); | 
 | 198 | 	__set_bit(GPCMD_SEND_DVD_STRUCTURE, filter->write_ok); | 
 | 199 | 	__set_bit(GPCMD_SEND_EVENT, filter->write_ok); | 
 | 200 | 	__set_bit(GPCMD_SEND_KEY, filter->write_ok); | 
 | 201 | 	__set_bit(GPCMD_SEND_OPC, filter->write_ok); | 
 | 202 | 	__set_bit(GPCMD_SEND_CUE_SHEET, filter->write_ok); | 
 | 203 | 	__set_bit(GPCMD_SET_SPEED, filter->write_ok); | 
 | 204 | 	__set_bit(GPCMD_PREVENT_ALLOW_MEDIUM_REMOVAL, filter->write_ok); | 
 | 205 | 	__set_bit(GPCMD_LOAD_UNLOAD, filter->write_ok); | 
 | 206 | 	__set_bit(GPCMD_SET_STREAMING, filter->write_ok); | 
| xiphmont@xiph.org | 35e396c | 2008-08-22 11:12:21 +0200 | [diff] [blame] | 207 | 	__set_bit(GPCMD_SET_READ_AHEAD, filter->write_ok); | 
| FUJITA Tomonori | abf5439 | 2008-08-16 14:10:05 +0900 | [diff] [blame] | 208 | } | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 209 |  | 
| Christoph Hellwig | f00c4d8 | 2017-11-05 10:36:31 +0300 | [diff] [blame] | 210 | int blk_verify_command(unsigned char *cmd, fmode_t mode) | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 211 | { | 
 | 212 | 	struct blk_cmd_filter *filter = &blk_default_cmd_filter; | 
 | 213 |  | 
 | 214 | 	/* root can do any command. */ | 
 | 215 | 	if (capable(CAP_SYS_RAWIO)) | 
 | 216 | 		return 0; | 
 | 217 |  | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 218 | 	/* Anybody who can open the device can do a read-safe command */ | 
 | 219 | 	if (test_bit(cmd[0], filter->read_ok)) | 
 | 220 | 		return 0; | 
 | 221 |  | 
 | 222 | 	/* Write-safe commands require a writable open */ | 
| Christoph Hellwig | f00c4d8 | 2017-11-05 10:36:31 +0300 | [diff] [blame] | 223 | 	if (test_bit(cmd[0], filter->write_ok) && (mode & FMODE_WRITE)) | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 224 | 		return 0; | 
 | 225 |  | 
 | 226 | 	return -EPERM; | 
 | 227 | } | 
 | 228 | EXPORT_SYMBOL(blk_verify_command); | 
| FUJITA Tomonori | abf5439 | 2008-08-16 14:10:05 +0900 | [diff] [blame] | 229 |  | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 230 | static int blk_fill_sghdr_rq(struct request_queue *q, struct request *rq, | 
| Al Viro | 5842e51 | 2008-09-02 16:35:55 -0400 | [diff] [blame] | 231 | 			     struct sg_io_hdr *hdr, fmode_t mode) | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 232 | { | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 233 | 	struct scsi_request *req = scsi_req(rq); | 
 | 234 |  | 
 | 235 | 	if (copy_from_user(req->cmd, hdr->cmdp, hdr->cmd_len)) | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 236 | 		return -EFAULT; | 
| Christoph Hellwig | f00c4d8 | 2017-11-05 10:36:31 +0300 | [diff] [blame] | 237 | 	if (blk_verify_command(req->cmd, mode)) | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 238 | 		return -EPERM; | 
 | 239 |  | 
 | 240 | 	/* | 
 | 241 | 	 * fill in request structure | 
 | 242 | 	 */ | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 243 | 	req->cmd_len = hdr->cmd_len; | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 244 |  | 
| Tejun Heo | 24bb8fb | 2007-12-05 21:28:24 +0100 | [diff] [blame] | 245 | 	rq->timeout = msecs_to_jiffies(hdr->timeout); | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 246 | 	if (!rq->timeout) | 
 | 247 | 		rq->timeout = q->sg_timeout; | 
 | 248 | 	if (!rq->timeout) | 
 | 249 | 		rq->timeout = BLK_DEFAULT_SG_TIMEOUT; | 
| Linus Torvalds | f2f1fa7 | 2008-12-05 14:49:18 -0800 | [diff] [blame] | 250 | 	if (rq->timeout < BLK_MIN_SG_TIMEOUT) | 
 | 251 | 		rq->timeout = BLK_MIN_SG_TIMEOUT; | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 252 |  | 
 | 253 | 	return 0; | 
 | 254 | } | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 255 |  | 
| FUJITA Tomonori | 41e1703 | 2007-07-22 10:06:50 +0900 | [diff] [blame] | 256 | static int blk_complete_sghdr_rq(struct request *rq, struct sg_io_hdr *hdr, | 
 | 257 | 				 struct bio *bio) | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 258 | { | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 259 | 	struct scsi_request *req = scsi_req(rq); | 
| FUJITA Tomonori | 91e463c | 2009-04-13 20:03:10 +0200 | [diff] [blame] | 260 | 	int r, ret = 0; | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 261 |  | 
 | 262 | 	/* | 
 | 263 | 	 * fill in all the output members | 
 | 264 | 	 */ | 
| Christoph Hellwig | 17d5363 | 2017-04-20 16:03:01 +0200 | [diff] [blame] | 265 | 	hdr->status = req->result & 0xff; | 
 | 266 | 	hdr->masked_status = status_byte(req->result); | 
 | 267 | 	hdr->msg_status = msg_byte(req->result); | 
 | 268 | 	hdr->host_status = host_byte(req->result); | 
 | 269 | 	hdr->driver_status = driver_byte(req->result); | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 270 | 	hdr->info = 0; | 
 | 271 | 	if (hdr->masked_status || hdr->host_status || hdr->driver_status) | 
 | 272 | 		hdr->info |= SG_INFO_CHECK; | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 273 | 	hdr->resid = req->resid_len; | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 274 | 	hdr->sb_len_wr = 0; | 
 | 275 |  | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 276 | 	if (req->sense_len && hdr->sbp) { | 
 | 277 | 		int len = min((unsigned int) hdr->mx_sb_len, req->sense_len); | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 278 |  | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 279 | 		if (!copy_to_user(hdr->sbp, req->sense, len)) | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 280 | 			hdr->sb_len_wr = len; | 
 | 281 | 		else | 
 | 282 | 			ret = -EFAULT; | 
 | 283 | 	} | 
 | 284 |  | 
| FUJITA Tomonori | 91e463c | 2009-04-13 20:03:10 +0200 | [diff] [blame] | 285 | 	r = blk_rq_unmap_user(bio); | 
 | 286 | 	if (!ret) | 
 | 287 | 		ret = r; | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 288 |  | 
| Boaz Harrosh | 1cd96c2 | 2009-03-24 12:35:07 +0100 | [diff] [blame] | 289 | 	return ret; | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 290 | } | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 291 |  | 
| Al Viro | 5842e51 | 2008-09-02 16:35:55 -0400 | [diff] [blame] | 292 | static int sg_io(struct request_queue *q, struct gendisk *bd_disk, | 
 | 293 | 		struct sg_io_hdr *hdr, fmode_t mode) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 294 | { | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 295 | 	unsigned long start_time; | 
| Kent Overstreet | e0ce0ea | 2013-08-07 14:20:17 -0700 | [diff] [blame] | 296 | 	ssize_t ret = 0; | 
 | 297 | 	int writing = 0; | 
| Douglas Gilbert | d151561 | 2014-07-01 10:48:05 -0600 | [diff] [blame] | 298 | 	int at_head = 0; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 299 | 	struct request *rq; | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 300 | 	struct scsi_request *req; | 
| FUJITA Tomonori | 77d172c | 2006-12-11 10:01:34 +0100 | [diff] [blame] | 301 | 	struct bio *bio; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 302 |  | 
 | 303 | 	if (hdr->interface_id != 'S') | 
 | 304 | 		return -EINVAL; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 305 |  | 
| Martin K. Petersen | ae03bf6 | 2009-05-22 17:17:50 -0400 | [diff] [blame] | 306 | 	if (hdr->dxfer_len > (queue_max_hw_sectors(q) << 9)) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 307 | 		return -EIO; | 
 | 308 |  | 
| James Bottomley  | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 309 | 	if (hdr->dxfer_len) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 310 | 		switch (hdr->dxfer_direction) { | 
 | 311 | 		default: | 
 | 312 | 			return -EINVAL; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 313 | 		case SG_DXFER_TO_DEV: | 
 | 314 | 			writing = 1; | 
 | 315 | 			break; | 
| Jens Axboe | 616e8a0 | 2006-11-13 18:04:59 +0100 | [diff] [blame] | 316 | 		case SG_DXFER_TO_FROM_DEV: | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 317 | 		case SG_DXFER_FROM_DEV: | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 318 | 			break; | 
 | 319 | 		} | 
| Douglas Gilbert | d151561 | 2014-07-01 10:48:05 -0600 | [diff] [blame] | 320 | 	if (hdr->flags & SG_FLAG_Q_AT_HEAD) | 
 | 321 | 		at_head = 1; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 322 |  | 
| Christoph Hellwig | a57821c | 2014-08-21 20:39:53 -0500 | [diff] [blame] | 323 | 	ret = -ENOMEM; | 
| Christoph Hellwig | ff005a0 | 2018-05-09 09:54:05 +0200 | [diff] [blame] | 324 | 	rq = blk_get_request(q, writing ? REQ_OP_SCSI_OUT : REQ_OP_SCSI_IN, 0); | 
| Joe Lawrence | a492f07 | 2014-08-28 08:15:21 -0600 | [diff] [blame] | 325 | 	if (IS_ERR(rq)) | 
 | 326 | 		return PTR_ERR(rq); | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 327 | 	req = scsi_req(rq); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 328 |  | 
| Christoph Hellwig | a57821c | 2014-08-21 20:39:53 -0500 | [diff] [blame] | 329 | 	if (hdr->cmd_len > BLK_MAX_CDB) { | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 330 | 		req->cmd = kzalloc(hdr->cmd_len, GFP_KERNEL); | 
 | 331 | 		if (!req->cmd) | 
| Christoph Hellwig | a57821c | 2014-08-21 20:39:53 -0500 | [diff] [blame] | 332 | 			goto out_put_request; | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 333 | 	} | 
| Mike Christie | 0e75f90 | 2006-12-01 10:40:55 +0100 | [diff] [blame] | 334 |  | 
| Paolo Bonzini | 2c4cffe | 2015-06-26 11:44:46 +0200 | [diff] [blame] | 335 | 	ret = blk_fill_sghdr_rq(q, rq, hdr, mode); | 
 | 336 | 	if (ret < 0) | 
| Christoph Hellwig | a57821c | 2014-08-21 20:39:53 -0500 | [diff] [blame] | 337 | 		goto out_free_cdb; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 338 |  | 
| Sabrina Dubroca | d19d744 | 2014-08-26 16:14:02 +0200 | [diff] [blame] | 339 | 	ret = 0; | 
| James Bottomley  | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 340 | 	if (hdr->iovec_count) { | 
| Kent Overstreet | 26e49cf | 2015-01-18 16:16:31 +0100 | [diff] [blame] | 341 | 		struct iov_iter i; | 
| Christian Engelmayer | 17a05cc | 2014-01-19 02:08:49 +0100 | [diff] [blame] | 342 | 		struct iovec *iov = NULL; | 
| James Bottomley  | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 343 |  | 
| Al Viro | e272b89 | 2015-03-21 20:02:55 -0400 | [diff] [blame] | 344 | 		ret = import_iovec(rq_data_dir(rq), | 
 | 345 | 				   hdr->dxferp, hdr->iovec_count, | 
 | 346 | 				   0, &iov, &i); | 
 | 347 | 		if (ret < 0) | 
| Christoph Hellwig | a57821c | 2014-08-21 20:39:53 -0500 | [diff] [blame] | 348 | 			goto out_free_cdb; | 
| James Bottomley  | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 349 |  | 
| Tejun Heo | 25636e2 | 2009-04-15 22:10:24 +0900 | [diff] [blame] | 350 | 		/* SG_IO howto says that the shorter of the two wins */ | 
| Al Viro | e272b89 | 2015-03-21 20:02:55 -0400 | [diff] [blame] | 351 | 		iov_iter_truncate(&i, hdr->dxfer_len); | 
| Tejun Heo | 25636e2 | 2009-04-15 22:10:24 +0900 | [diff] [blame] | 352 |  | 
| Kent Overstreet | 26e49cf | 2015-01-18 16:16:31 +0100 | [diff] [blame] | 353 | 		ret = blk_rq_map_user_iov(q, rq, NULL, &i, GFP_KERNEL); | 
| Kent Overstreet | e0ce0ea | 2013-08-07 14:20:17 -0700 | [diff] [blame] | 354 | 		kfree(iov); | 
| James Bottomley  | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 355 | 	} else if (hdr->dxfer_len) | 
| FUJITA Tomonori | 152e283 | 2008-08-28 16:17:06 +0900 | [diff] [blame] | 356 | 		ret = blk_rq_map_user(q, rq, NULL, hdr->dxferp, hdr->dxfer_len, | 
| FUJITA Tomonori | a3bce90 | 2008-08-28 16:17:05 +0900 | [diff] [blame] | 357 | 				      GFP_KERNEL); | 
| James Bottomley  | f1970ba | 2005-06-20 14:06:52 +0200 | [diff] [blame] | 358 |  | 
 | 359 | 	if (ret) | 
| Christoph Hellwig | a57821c | 2014-08-21 20:39:53 -0500 | [diff] [blame] | 360 | 		goto out_free_cdb; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 361 |  | 
| FUJITA Tomonori | 77d172c | 2006-12-11 10:01:34 +0100 | [diff] [blame] | 362 | 	bio = rq->bio; | 
| Christoph Hellwig | 64c7f1d | 2017-04-05 19:18:12 +0200 | [diff] [blame] | 363 | 	req->retries = 0; | 
| Jens Axboe | 01840f9 | 2006-02-03 08:37:08 +0100 | [diff] [blame] | 364 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 365 | 	start_time = jiffies; | 
 | 366 |  | 
 | 367 | 	/* ignore return value. All information is passed back to caller | 
 | 368 | 	 * (if he doesn't check that is his problem). | 
 | 369 | 	 * N.B. a non-zero SCSI status is _not_ necessarily an error. | 
 | 370 | 	 */ | 
| Douglas Gilbert | d151561 | 2014-07-01 10:48:05 -0600 | [diff] [blame] | 371 | 	blk_execute_rq(q, bd_disk, rq, at_head); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 372 |  | 
| Tejun Heo | 24bb8fb | 2007-12-05 21:28:24 +0100 | [diff] [blame] | 373 | 	hdr->duration = jiffies_to_msecs(jiffies - start_time); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 374 |  | 
| Christoph Hellwig | 2cada58 | 2014-08-21 20:38:27 -0500 | [diff] [blame] | 375 | 	ret = blk_complete_sghdr_rq(rq, hdr, bio); | 
| Christoph Hellwig | a57821c | 2014-08-21 20:39:53 -0500 | [diff] [blame] | 376 |  | 
 | 377 | out_free_cdb: | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 378 | 	scsi_req_free_cmd(req); | 
| Christoph Hellwig | a57821c | 2014-08-21 20:39:53 -0500 | [diff] [blame] | 379 | out_put_request: | 
| Jens Axboe | dd1cab9 | 2005-06-20 14:06:01 +0200 | [diff] [blame] | 380 | 	blk_put_request(rq); | 
 | 381 | 	return ret; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 382 | } | 
 | 383 |  | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 384 | /** | 
 | 385 |  * sg_scsi_ioctl  --  handle deprecated SCSI_IOCTL_SEND_COMMAND ioctl | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 386 |  * @q:		request queue to send scsi commands down | 
 | 387 |  * @disk:	gendisk to operate on (option) | 
| Bart Van Assche | aa98192 | 2018-01-09 10:11:00 -0800 | [diff] [blame] | 388 |  * @mode:	mode used to open the file through which the ioctl has been | 
 | 389 |  *		submitted | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 390 |  * @sic:	userspace structure describing the command to perform | 
 | 391 |  * | 
 | 392 |  * Send down the scsi command described by @sic to the device below | 
 | 393 |  * the request queue @q.  If @file is non-NULL it's used to perform | 
 | 394 |  * fine-grained permission checks that allow users to send down | 
 | 395 |  * non-destructive SCSI commands.  If the caller has a struct gendisk | 
 | 396 |  * available it should be passed in as @disk to allow the low level | 
 | 397 |  * driver to use the information contained in it.  A non-NULL @disk | 
 | 398 |  * is only allowed if the caller knows that the low level driver doesn't | 
 | 399 |  * need it (e.g. in the scsi subsystem). | 
 | 400 |  * | 
 | 401 |  * Notes: | 
 | 402 |  *   -  This interface is deprecated - users should use the SG_IO | 
 | 403 |  *      interface instead, as this is a more flexible approach to | 
 | 404 |  *      performing SCSI commands on a device. | 
 | 405 |  *   -  The SCSI command length is determined by examining the 1st byte | 
 | 406 |  *      of the given command. There is no way to override this. | 
 | 407 |  *   -  Data transfers are limited to PAGE_SIZE | 
 | 408 |  *   -  The length (x + y) must be at least OMAX_SB_LEN bytes long to | 
 | 409 |  *      accommodate the sense buffer when an error occurs. | 
 | 410 |  *      The sense buffer is truncated to OMAX_SB_LEN (16) bytes so that | 
 | 411 |  *      old code will not be surprised. | 
 | 412 |  *   -  If a Unix error occurs (e.g. ENOMEM) then the user will receive | 
 | 413 |  *      a negative return and the Unix error code in 'errno'. | 
 | 414 |  *      If the SCSI command succeeds then 0 is returned. | 
 | 415 |  *      Positive numbers returned are the compacted SCSI error codes (4 | 
 | 416 |  *      bytes in one int) where the lowest byte is the SCSI status. | 
 | 417 |  */ | 
| Al Viro | e915e87 | 2008-09-02 17:16:41 -0400 | [diff] [blame] | 418 | int sg_scsi_ioctl(struct request_queue *q, struct gendisk *disk, fmode_t mode, | 
 | 419 | 		struct scsi_ioctl_command __user *sic) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 420 | { | 
| Bart Van Assche | aa98192 | 2018-01-09 10:11:00 -0800 | [diff] [blame] | 421 | 	enum { OMAX_SB_LEN = 16 };	/* For backward compatibility */ | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 422 | 	struct request *rq; | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 423 | 	struct scsi_request *req; | 
| Al Viro | aeb5d72 | 2008-09-02 15:28:45 -0400 | [diff] [blame] | 424 | 	int err; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 425 | 	unsigned int in_len, out_len, bytes, opcode, cmdlen; | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 426 | 	char *buffer = NULL; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 427 |  | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 428 | 	if (!sic) | 
 | 429 | 		return -EINVAL; | 
 | 430 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 431 | 	/* | 
 | 432 | 	 * get in an out lengths, verify they don't exceed a page worth of data | 
 | 433 | 	 */ | 
 | 434 | 	if (get_user(in_len, &sic->inlen)) | 
 | 435 | 		return -EFAULT; | 
 | 436 | 	if (get_user(out_len, &sic->outlen)) | 
 | 437 | 		return -EFAULT; | 
 | 438 | 	if (in_len > PAGE_SIZE || out_len > PAGE_SIZE) | 
 | 439 | 		return -EINVAL; | 
 | 440 | 	if (get_user(opcode, sic->data)) | 
 | 441 | 		return -EFAULT; | 
 | 442 |  | 
 | 443 | 	bytes = max(in_len, out_len); | 
 | 444 | 	if (bytes) { | 
| Yoann Padioleau | dd00cc4 | 2007-07-19 01:49:03 -0700 | [diff] [blame] | 445 | 		buffer = kzalloc(bytes, q->bounce_gfp | GFP_USER| __GFP_NOWARN); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 446 | 		if (!buffer) | 
 | 447 | 			return -ENOMEM; | 
 | 448 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 449 | 	} | 
 | 450 |  | 
| Christoph Hellwig | ff005a0 | 2018-05-09 09:54:05 +0200 | [diff] [blame] | 451 | 	rq = blk_get_request(q, in_len ? REQ_OP_SCSI_OUT : REQ_OP_SCSI_IN, 0); | 
| Joe Lawrence | a492f07 | 2014-08-28 08:15:21 -0600 | [diff] [blame] | 452 | 	if (IS_ERR(rq)) { | 
 | 453 | 		err = PTR_ERR(rq); | 
| Tony Battersby | 92697dc | 2014-11-10 17:40:02 -0500 | [diff] [blame] | 454 | 		goto error_free_buffer; | 
| Joe Lawrence | eb571ee | 2014-07-02 15:35:16 -0400 | [diff] [blame] | 455 | 	} | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 456 | 	req = scsi_req(rq); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 457 |  | 
 | 458 | 	cmdlen = COMMAND_SIZE(opcode); | 
 | 459 |  | 
 | 460 | 	/* | 
 | 461 | 	 * get command and data to send to device, if any | 
 | 462 | 	 */ | 
 | 463 | 	err = -EFAULT; | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 464 | 	req->cmd_len = cmdlen; | 
 | 465 | 	if (copy_from_user(req->cmd, sic->data, cmdlen)) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 466 | 		goto error; | 
 | 467 |  | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 468 | 	if (in_len && copy_from_user(buffer, sic->data + cmdlen, in_len)) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 469 | 		goto error; | 
 | 470 |  | 
| Christoph Hellwig | f00c4d8 | 2017-11-05 10:36:31 +0300 | [diff] [blame] | 471 | 	err = blk_verify_command(req->cmd, mode); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 472 | 	if (err) | 
 | 473 | 		goto error; | 
 | 474 |  | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 475 | 	/* default.  possible overriden later */ | 
| Christoph Hellwig | 64c7f1d | 2017-04-05 19:18:12 +0200 | [diff] [blame] | 476 | 	req->retries = 5; | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 477 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 478 | 	switch (opcode) { | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 479 | 	case SEND_DIAGNOSTIC: | 
 | 480 | 	case FORMAT_UNIT: | 
 | 481 | 		rq->timeout = FORMAT_UNIT_TIMEOUT; | 
| Christoph Hellwig | 64c7f1d | 2017-04-05 19:18:12 +0200 | [diff] [blame] | 482 | 		req->retries = 1; | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 483 | 		break; | 
 | 484 | 	case START_STOP: | 
 | 485 | 		rq->timeout = START_STOP_TIMEOUT; | 
 | 486 | 		break; | 
 | 487 | 	case MOVE_MEDIUM: | 
 | 488 | 		rq->timeout = MOVE_MEDIUM_TIMEOUT; | 
 | 489 | 		break; | 
 | 490 | 	case READ_ELEMENT_STATUS: | 
 | 491 | 		rq->timeout = READ_ELEMENT_STATUS_TIMEOUT; | 
 | 492 | 		break; | 
 | 493 | 	case READ_DEFECT_DATA: | 
 | 494 | 		rq->timeout = READ_DEFECT_DATA_TIMEOUT; | 
| Christoph Hellwig | 64c7f1d | 2017-04-05 19:18:12 +0200 | [diff] [blame] | 495 | 		req->retries = 1; | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 496 | 		break; | 
 | 497 | 	default: | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 498 | 		rq->timeout = BLK_DEFAULT_SG_TIMEOUT; | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 499 | 		break; | 
 | 500 | 	} | 
 | 501 |  | 
| Christoph Hellwig | 0eb0b63 | 2018-05-09 09:54:08 +0200 | [diff] [blame] | 502 | 	if (bytes && blk_rq_map_kern(q, rq, buffer, bytes, GFP_NOIO)) { | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 503 | 		err = DRIVER_ERROR << 24; | 
| Jan Kara | 84ce0f0 | 2014-10-22 20:13:39 -0600 | [diff] [blame] | 504 | 		goto error; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 505 | 	} | 
 | 506 |  | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 507 | 	blk_execute_rq(q, disk, rq, 0); | 
 | 508 |  | 
| Christoph Hellwig | 17d5363 | 2017-04-20 16:03:01 +0200 | [diff] [blame] | 509 | 	err = req->result & 0xff;	/* only 8 bit SCSI status */ | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 510 | 	if (err) { | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 511 | 		if (req->sense_len && req->sense) { | 
 | 512 | 			bytes = (OMAX_SB_LEN > req->sense_len) ? | 
 | 513 | 				req->sense_len : OMAX_SB_LEN; | 
 | 514 | 			if (copy_to_user(sic->data, req->sense, bytes)) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 515 | 				err = -EFAULT; | 
 | 516 | 		} | 
 | 517 | 	} else { | 
 | 518 | 		if (copy_to_user(sic->data, buffer, out_len)) | 
 | 519 | 			err = -EFAULT; | 
 | 520 | 	} | 
 | 521 | 	 | 
 | 522 | error: | 
| Tony Battersby | 92697dc | 2014-11-10 17:40:02 -0500 | [diff] [blame] | 523 | 	blk_put_request(rq); | 
 | 524 |  | 
 | 525 | error_free_buffer: | 
| Joe Lawrence | eb571ee | 2014-07-02 15:35:16 -0400 | [diff] [blame] | 526 | 	kfree(buffer); | 
| Tony Battersby | 92697dc | 2014-11-10 17:40:02 -0500 | [diff] [blame] | 527 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 528 | 	return err; | 
 | 529 | } | 
| Christoph Hellwig | 21b2f0c | 2006-03-22 17:52:04 +0100 | [diff] [blame] | 530 | EXPORT_SYMBOL_GPL(sg_scsi_ioctl); | 
| Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 531 |  | 
 | 532 | /* Send basic block requests */ | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 533 | static int __blk_send_generic(struct request_queue *q, struct gendisk *bd_disk, | 
 | 534 | 			      int cmd, int data) | 
| Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 535 | { | 
 | 536 | 	struct request *rq; | 
 | 537 | 	int err; | 
 | 538 |  | 
| Christoph Hellwig | ff005a0 | 2018-05-09 09:54:05 +0200 | [diff] [blame] | 539 | 	rq = blk_get_request(q, REQ_OP_SCSI_OUT, 0); | 
| Joe Lawrence | a492f07 | 2014-08-28 08:15:21 -0600 | [diff] [blame] | 540 | 	if (IS_ERR(rq)) | 
 | 541 | 		return PTR_ERR(rq); | 
| Jens Axboe | 3d6392c | 2007-07-09 12:38:05 +0200 | [diff] [blame] | 542 | 	rq->timeout = BLK_DEFAULT_SG_TIMEOUT; | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 543 | 	scsi_req(rq)->cmd[0] = cmd; | 
 | 544 | 	scsi_req(rq)->cmd[4] = data; | 
 | 545 | 	scsi_req(rq)->cmd_len = 6; | 
| Christoph Hellwig | b7819b9 | 2017-04-20 16:02:55 +0200 | [diff] [blame] | 546 | 	blk_execute_rq(q, bd_disk, rq, 0); | 
| Christoph Hellwig | 17d5363 | 2017-04-20 16:03:01 +0200 | [diff] [blame] | 547 | 	err = scsi_req(rq)->result ? -EIO : 0; | 
| Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 548 | 	blk_put_request(rq); | 
 | 549 |  | 
 | 550 | 	return err; | 
 | 551 | } | 
 | 552 |  | 
| Jens Axboe | 165125e | 2007-07-24 09:28:11 +0200 | [diff] [blame] | 553 | static inline int blk_send_start_stop(struct request_queue *q, | 
 | 554 | 				      struct gendisk *bd_disk, int data) | 
| Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 555 | { | 
 | 556 | 	return __blk_send_generic(q, bd_disk, GPCMD_START_STOP_UNIT, data); | 
 | 557 | } | 
 | 558 |  | 
| Al Viro | 74f3c8a | 2007-08-27 15:38:10 -0400 | [diff] [blame] | 559 | int scsi_cmd_ioctl(struct request_queue *q, struct gendisk *bd_disk, fmode_t mode, | 
 | 560 | 		   unsigned int cmd, void __user *arg) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 561 | { | 
| Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 562 | 	int err; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 563 |  | 
| Tejun Heo | 315fcee | 2011-10-19 14:31:25 +0200 | [diff] [blame] | 564 | 	if (!q) | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 565 | 		return -ENXIO; | 
 | 566 |  | 
 | 567 | 	switch (cmd) { | 
 | 568 | 		/* | 
 | 569 | 		 * new sgv3 interface | 
 | 570 | 		 */ | 
 | 571 | 		case SG_GET_VERSION_NUM: | 
 | 572 | 			err = sg_get_version(arg); | 
 | 573 | 			break; | 
 | 574 | 		case SCSI_IOCTL_GET_IDLUN: | 
 | 575 | 			err = scsi_get_idlun(q, arg); | 
 | 576 | 			break; | 
 | 577 | 		case SCSI_IOCTL_GET_BUS_NUMBER: | 
 | 578 | 			err = scsi_get_bus(q, arg); | 
 | 579 | 			break; | 
 | 580 | 		case SG_SET_TIMEOUT: | 
 | 581 | 			err = sg_set_timeout(q, arg); | 
 | 582 | 			break; | 
 | 583 | 		case SG_GET_TIMEOUT: | 
 | 584 | 			err = sg_get_timeout(q); | 
 | 585 | 			break; | 
 | 586 | 		case SG_GET_RESERVED_SIZE: | 
 | 587 | 			err = sg_get_reserved_size(q, arg); | 
 | 588 | 			break; | 
 | 589 | 		case SG_SET_RESERVED_SIZE: | 
 | 590 | 			err = sg_set_reserved_size(q, arg); | 
 | 591 | 			break; | 
 | 592 | 		case SG_EMULATED_HOST: | 
 | 593 | 			err = sg_emulated_host(q, arg); | 
 | 594 | 			break; | 
 | 595 | 		case SG_IO: { | 
 | 596 | 			struct sg_io_hdr hdr; | 
 | 597 |  | 
 | 598 | 			err = -EFAULT; | 
 | 599 | 			if (copy_from_user(&hdr, arg, sizeof(hdr))) | 
 | 600 | 				break; | 
| Al Viro | 74f3c8a | 2007-08-27 15:38:10 -0400 | [diff] [blame] | 601 | 			err = sg_io(q, bd_disk, &hdr, mode); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 602 | 			if (err == -EFAULT) | 
 | 603 | 				break; | 
 | 604 |  | 
 | 605 | 			if (copy_to_user(arg, &hdr, sizeof(hdr))) | 
 | 606 | 				err = -EFAULT; | 
 | 607 | 			break; | 
 | 608 | 		} | 
 | 609 | 		case CDROM_SEND_PACKET: { | 
 | 610 | 			struct cdrom_generic_command cgc; | 
 | 611 | 			struct sg_io_hdr hdr; | 
 | 612 |  | 
 | 613 | 			err = -EFAULT; | 
 | 614 | 			if (copy_from_user(&cgc, arg, sizeof(cgc))) | 
 | 615 | 				break; | 
 | 616 | 			cgc.timeout = clock_t_to_jiffies(cgc.timeout); | 
 | 617 | 			memset(&hdr, 0, sizeof(hdr)); | 
 | 618 | 			hdr.interface_id = 'S'; | 
 | 619 | 			hdr.cmd_len = sizeof(cgc.cmd); | 
 | 620 | 			hdr.dxfer_len = cgc.buflen; | 
 | 621 | 			err = 0; | 
 | 622 | 			switch (cgc.data_direction) { | 
 | 623 | 				case CGC_DATA_UNKNOWN: | 
 | 624 | 					hdr.dxfer_direction = SG_DXFER_UNKNOWN; | 
 | 625 | 					break; | 
 | 626 | 				case CGC_DATA_WRITE: | 
 | 627 | 					hdr.dxfer_direction = SG_DXFER_TO_DEV; | 
 | 628 | 					break; | 
 | 629 | 				case CGC_DATA_READ: | 
 | 630 | 					hdr.dxfer_direction = SG_DXFER_FROM_DEV; | 
 | 631 | 					break; | 
 | 632 | 				case CGC_DATA_NONE: | 
 | 633 | 					hdr.dxfer_direction = SG_DXFER_NONE; | 
 | 634 | 					break; | 
 | 635 | 				default: | 
 | 636 | 					err = -EINVAL; | 
 | 637 | 			} | 
 | 638 | 			if (err) | 
 | 639 | 				break; | 
 | 640 |  | 
 | 641 | 			hdr.dxferp = cgc.buffer; | 
 | 642 | 			hdr.sbp = cgc.sense; | 
 | 643 | 			if (hdr.sbp) | 
 | 644 | 				hdr.mx_sb_len = sizeof(struct request_sense); | 
| Tim Wright | ad33759 | 2008-07-27 17:50:38 -0700 | [diff] [blame] | 645 | 			hdr.timeout = jiffies_to_msecs(cgc.timeout); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 646 | 			hdr.cmdp = ((struct cdrom_generic_command __user*) arg)->cmd; | 
 | 647 | 			hdr.cmd_len = sizeof(cgc.cmd); | 
 | 648 |  | 
| Al Viro | 74f3c8a | 2007-08-27 15:38:10 -0400 | [diff] [blame] | 649 | 			err = sg_io(q, bd_disk, &hdr, mode); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 650 | 			if (err == -EFAULT) | 
 | 651 | 				break; | 
 | 652 |  | 
 | 653 | 			if (hdr.status) | 
 | 654 | 				err = -EIO; | 
 | 655 |  | 
 | 656 | 			cgc.stat = err; | 
 | 657 | 			cgc.buflen = hdr.resid; | 
 | 658 | 			if (copy_to_user(arg, &cgc, sizeof(cgc))) | 
 | 659 | 				err = -EFAULT; | 
 | 660 |  | 
 | 661 | 			break; | 
 | 662 | 		} | 
 | 663 |  | 
 | 664 | 		/* | 
 | 665 | 		 * old junk scsi send command ioctl | 
 | 666 | 		 */ | 
 | 667 | 		case SCSI_IOCTL_SEND_COMMAND: | 
 | 668 | 			printk(KERN_WARNING "program %s is using a deprecated SCSI ioctl, please convert it to SG_IO\n", current->comm); | 
 | 669 | 			err = -EINVAL; | 
 | 670 | 			if (!arg) | 
 | 671 | 				break; | 
 | 672 |  | 
| Al Viro | 74f3c8a | 2007-08-27 15:38:10 -0400 | [diff] [blame] | 673 | 			err = sg_scsi_ioctl(q, bd_disk, mode, arg); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 674 | 			break; | 
 | 675 | 		case CDROMCLOSETRAY: | 
| Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 676 | 			err = blk_send_start_stop(q, bd_disk, 0x03); | 
 | 677 | 			break; | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 678 | 		case CDROMEJECT: | 
| Ben Collins | f98d2df | 2005-12-19 11:49:24 -0800 | [diff] [blame] | 679 | 			err = blk_send_start_stop(q, bd_disk, 0x02); | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 680 | 			break; | 
 | 681 | 		default: | 
 | 682 | 			err = -ENOTTY; | 
 | 683 | 	} | 
 | 684 |  | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 685 | 	return err; | 
 | 686 | } | 
| Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 687 | EXPORT_SYMBOL(scsi_cmd_ioctl); | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 688 |  | 
| Paolo Bonzini | 0bfc96c | 2012-01-12 16:01:28 +0100 | [diff] [blame] | 689 | int scsi_verify_blk_ioctl(struct block_device *bd, unsigned int cmd) | 
 | 690 | { | 
 | 691 | 	if (bd && bd == bd->bd_contains) | 
 | 692 | 		return 0; | 
 | 693 |  | 
| Jan Kara | 6d93592 | 2012-06-15 12:52:46 +0200 | [diff] [blame] | 694 | 	if (capable(CAP_SYS_RAWIO)) | 
 | 695 | 		return 0; | 
 | 696 |  | 
| Jan Kara | 6d93592 | 2012-06-15 12:52:46 +0200 | [diff] [blame] | 697 | 	return -ENOIOCTLCMD; | 
| Paolo Bonzini | 0bfc96c | 2012-01-12 16:01:28 +0100 | [diff] [blame] | 698 | } | 
 | 699 | EXPORT_SYMBOL(scsi_verify_blk_ioctl); | 
 | 700 |  | 
| Paolo Bonzini | 577ebb3 | 2012-01-12 16:01:27 +0100 | [diff] [blame] | 701 | int scsi_cmd_blk_ioctl(struct block_device *bd, fmode_t mode, | 
 | 702 | 		       unsigned int cmd, void __user *arg) | 
 | 703 | { | 
| Paolo Bonzini | 0bfc96c | 2012-01-12 16:01:28 +0100 | [diff] [blame] | 704 | 	int ret; | 
 | 705 |  | 
 | 706 | 	ret = scsi_verify_blk_ioctl(bd, cmd); | 
 | 707 | 	if (ret < 0) | 
 | 708 | 		return ret; | 
 | 709 |  | 
| Paolo Bonzini | 577ebb3 | 2012-01-12 16:01:27 +0100 | [diff] [blame] | 710 | 	return scsi_cmd_ioctl(bd->bd_disk->queue, bd->bd_disk, mode, cmd, arg); | 
 | 711 | } | 
 | 712 | EXPORT_SYMBOL(scsi_cmd_blk_ioctl); | 
 | 713 |  | 
| Bart Van Assche | c8d9cf2 | 2017-06-20 11:15:42 -0700 | [diff] [blame] | 714 | /** | 
 | 715 |  * scsi_req_init - initialize certain fields of a scsi_request structure | 
 | 716 |  * @req: Pointer to a scsi_request structure. | 
 | 717 |  * Initializes .__cmd[], .cmd, .cmd_len and .sense_len but no other members | 
 | 718 |  * of struct scsi_request. | 
 | 719 |  */ | 
 | 720 | void scsi_req_init(struct scsi_request *req) | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 721 | { | 
| Christoph Hellwig | 82ed4db | 2017-01-27 09:46:29 +0100 | [diff] [blame] | 722 | 	memset(req->__cmd, 0, sizeof(req->__cmd)); | 
 | 723 | 	req->cmd = req->__cmd; | 
 | 724 | 	req->cmd_len = BLK_MAX_CDB; | 
 | 725 | 	req->sense_len = 0; | 
 | 726 | } | 
 | 727 | EXPORT_SYMBOL(scsi_req_init); | 
 | 728 |  | 
| H Hartley Sweeten | 476d42f | 2009-11-04 09:10:33 +0100 | [diff] [blame] | 729 | static int __init blk_scsi_ioctl_init(void) | 
| Jens Axboe | 018e044 | 2009-06-26 16:27:10 +0200 | [diff] [blame] | 730 | { | 
 | 731 | 	blk_set_cmd_filter_defaults(&blk_default_cmd_filter); | 
 | 732 | 	return 0; | 
 | 733 | } | 
| FUJITA Tomonori | 76da034 | 2009-07-09 09:48:28 +0200 | [diff] [blame] | 734 | fs_initcall(blk_scsi_ioctl_init); |