summaryrefslogtreecommitdiff
path: root/drivers/char/adsprpc.c
diff options
context:
space:
mode:
Diffstat (limited to 'drivers/char/adsprpc.c')
-rw-r--r--drivers/char/adsprpc.c3113
1 files changed, 3113 insertions, 0 deletions
diff --git a/drivers/char/adsprpc.c b/drivers/char/adsprpc.c
new file mode 100644
index 000000000000..aba9010c5aa2
--- /dev/null
+++ b/drivers/char/adsprpc.c
@@ -0,0 +1,3113 @@
+/*
+ * Copyright (c) 2012-2017, The Linux Foundation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 and
+ * only version 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ */
+#include <linux/dma-buf.h>
+#include <linux/dma-mapping.h>
+#include <linux/slab.h>
+#include <linux/completion.h>
+#include <linux/pagemap.h>
+#include <linux/mm.h>
+#include <linux/fs.h>
+#include <linux/sched.h>
+#include <linux/module.h>
+#include <linux/cdev.h>
+#include <linux/list.h>
+#include <linux/hash.h>
+#include <linux/msm_ion.h>
+#include <soc/qcom/secure_buffer.h>
+#include <soc/qcom/smd.h>
+#include <soc/qcom/glink.h>
+#include <soc/qcom/subsystem_notif.h>
+#include <soc/qcom/subsystem_restart.h>
+#include <linux/scatterlist.h>
+#include <linux/fs.h>
+#include <linux/uaccess.h>
+#include <linux/device.h>
+#include <linux/of.h>
+#include <linux/of_address.h>
+#include <linux/of_platform.h>
+#include <linux/dma-contiguous.h>
+#include <linux/cma.h>
+#include <linux/iommu.h>
+#include <linux/qcom_iommu.h>
+#include <linux/kref.h>
+#include <linux/sort.h>
+#include <linux/msm_dma_iommu_mapping.h>
+#include <asm/dma-iommu.h>
+#include <soc/qcom/scm.h>
+#include "adsprpc_compat.h"
+#include "adsprpc_shared.h"
+#include <soc/qcom/ramdump.h>
+#include <linux/debugfs.h>
+
+#define TZ_PIL_PROTECT_MEM_SUBSYS_ID 0x0C
+#define TZ_PIL_CLEAR_PROTECT_MEM_SUBSYS_ID 0x0D
+#define TZ_PIL_AUTH_QDSP6_PROC 1
+#define ADSP_MMAP_HEAP_ADDR 4
+#define ADSP_MMAP_REMOTE_HEAP_ADDR 8
+#define FASTRPC_ENOSUCH 39
+#define VMID_SSC_Q6 5
+#define VMID_ADSP_Q6 6
+#define AC_VM_ADSP_HEAP_SHARED 33
+#define DEBUGFS_SIZE 1024
+
+#define RPC_TIMEOUT (5 * HZ)
+#define BALIGN 128
+#define NUM_CHANNELS 4 /* adsp,sdsp,mdsp,cdsp */
+#define NUM_SESSIONS 9 /*8 compute, 1 cpz*/
+
+#define IS_CACHE_ALIGNED(x) (((x) & ((L1_CACHE_BYTES)-1)) == 0)
+
+#define FASTRPC_LINK_STATE_DOWN (0x0)
+#define FASTRPC_LINK_STATE_UP (0x1)
+#define FASTRPC_LINK_DISCONNECTED (0x0)
+#define FASTRPC_LINK_CONNECTING (0x1)
+#define FASTRPC_LINK_CONNECTED (0x3)
+#define FASTRPC_LINK_DISCONNECTING (0x7)
+
+#define PERF_KEYS "count:flush:map:copy:glink:getargs:putargs:invalidate:invoke"
+#define FASTRPC_STATIC_HANDLE_LISTENER (3)
+#define FASTRPC_STATIC_HANDLE_MAX (20)
+
+#define PERF_END (void)0
+
+#define PERF(enb, cnt, ff) \
+ {\
+ struct timespec startT = {0};\
+ if (enb) {\
+ getnstimeofday(&startT);\
+ } \
+ ff ;\
+ if (enb) {\
+ cnt += getnstimediff(&startT);\
+ } \
+ }
+
+static int fastrpc_glink_open(int cid);
+static void fastrpc_glink_close(void *chan, int cid);
+static struct dentry *debugfs_root;
+static struct dentry *debugfs_global_file;
+
+static inline uint64_t buf_page_start(uint64_t buf)
+{
+ uint64_t start = (uint64_t) buf & PAGE_MASK;
+ return start;
+}
+
+static inline uint64_t buf_page_offset(uint64_t buf)
+{
+ uint64_t offset = (uint64_t) buf & (PAGE_SIZE - 1);
+ return offset;
+}
+
+static inline int buf_num_pages(uint64_t buf, ssize_t len)
+{
+ uint64_t start = buf_page_start(buf) >> PAGE_SHIFT;
+ uint64_t end = (((uint64_t) buf + len - 1) & PAGE_MASK) >> PAGE_SHIFT;
+ int nPages = end - start + 1;
+ return nPages;
+}
+
+static inline uint64_t buf_page_size(uint32_t size)
+{
+ uint64_t sz = (size + (PAGE_SIZE - 1)) & PAGE_MASK;
+ return sz > PAGE_SIZE ? sz : PAGE_SIZE;
+}
+
+static inline void *uint64_to_ptr(uint64_t addr)
+{
+ void *ptr = (void *)((uintptr_t)addr);
+ return ptr;
+}
+
+static inline uint64_t ptr_to_uint64(void *ptr)
+{
+ uint64_t addr = (uint64_t)((uintptr_t)ptr);
+ return addr;
+}
+
+struct fastrpc_file;
+
+struct fastrpc_buf {
+ struct hlist_node hn;
+ struct fastrpc_file *fl;
+ void *virt;
+ uint64_t phys;
+ ssize_t size;
+};
+
+struct fastrpc_ctx_lst;
+
+struct overlap {
+ uintptr_t start;
+ uintptr_t end;
+ int raix;
+ uintptr_t mstart;
+ uintptr_t mend;
+ uintptr_t offset;
+};
+
+struct smq_invoke_ctx {
+ struct hlist_node hn;
+ struct completion work;
+ int retval;
+ int pid;
+ int tgid;
+ remote_arg_t *lpra;
+ remote_arg64_t *rpra;
+ int *fds;
+ unsigned *attrs;
+ struct fastrpc_mmap **maps;
+ struct fastrpc_buf *buf;
+ ssize_t used;
+ struct fastrpc_file *fl;
+ uint32_t sc;
+ struct overlap *overs;
+ struct overlap **overps;
+ struct smq_msg msg;
+};
+
+struct fastrpc_ctx_lst {
+ struct hlist_head pending;
+ struct hlist_head interrupted;
+};
+
+struct fastrpc_smmu {
+ struct device *dev;
+ struct dma_iommu_mapping *mapping;
+ int cb;
+ int enabled;
+ int faults;
+ int secure;
+ int coherent;
+};
+
+struct fastrpc_session_ctx {
+ struct device *dev;
+ struct fastrpc_smmu smmu;
+ int used;
+};
+
+struct fastrpc_glink_info {
+ int link_state;
+ int port_state;
+ struct glink_open_config cfg;
+ struct glink_link_info link_info;
+ void *link_notify_handle;
+};
+
+struct fastrpc_channel_ctx {
+ char *name;
+ char *subsys;
+ void *chan;
+ struct device *dev;
+ struct fastrpc_session_ctx session[NUM_SESSIONS];
+ struct completion work;
+ struct completion workport;
+ struct notifier_block nb;
+ struct kref kref;
+ int channel;
+ int sesscount;
+ int ssrcount;
+ void *handle;
+ int prevssrcount;
+ int issubsystemup;
+ int vmid;
+ int heap_vmid;
+ int ramdumpenabled;
+ void *remoteheap_ramdump_dev;
+ struct fastrpc_glink_info link;
+};
+
+struct fastrpc_apps {
+ struct fastrpc_channel_ctx *channel;
+ struct cdev cdev;
+ struct class *class;
+ struct mutex smd_mutex;
+ struct smq_phy_page range;
+ struct hlist_head maps;
+ uint32_t staticpd_flags;
+ dev_t dev_no;
+ int compat;
+ struct hlist_head drivers;
+ spinlock_t hlock;
+ struct ion_client *client;
+ struct device *dev;
+ bool glink;
+};
+
+struct fastrpc_mmap {
+ struct hlist_node hn;
+ struct fastrpc_file *fl;
+ struct fastrpc_apps *apps;
+ int fd;
+ uint32_t flags;
+ struct dma_buf *buf;
+ struct sg_table *table;
+ struct dma_buf_attachment *attach;
+ struct ion_handle *handle;
+ uint64_t phys;
+ ssize_t size;
+ uintptr_t va;
+ ssize_t len;
+ int refs;
+ uintptr_t raddr;
+ int uncached;
+ int secure;
+ uintptr_t attr;
+};
+
+struct fastrpc_perf {
+ int64_t count;
+ int64_t flush;
+ int64_t map;
+ int64_t copy;
+ int64_t link;
+ int64_t getargs;
+ int64_t putargs;
+ int64_t invargs;
+ int64_t invoke;
+};
+
+struct fastrpc_file {
+ struct hlist_node hn;
+ spinlock_t hlock;
+ struct hlist_head maps;
+ struct hlist_head bufs;
+ struct fastrpc_ctx_lst clst;
+ struct fastrpc_session_ctx *sctx;
+ struct fastrpc_session_ctx *secsctx;
+ uint32_t mode;
+ uint32_t profile;
+ int tgid;
+ int cid;
+ int ssrcount;
+ int pd;
+ int file_close;
+ struct fastrpc_apps *apps;
+ struct fastrpc_perf perf;
+ struct dentry *debugfs_file;
+};
+
+static struct fastrpc_apps gfa;
+
+static struct fastrpc_channel_ctx gcinfo[NUM_CHANNELS] = {
+ {
+ .name = "adsprpc-smd",
+ .subsys = "adsp",
+ .channel = SMD_APPS_QDSP,
+ .link.link_info.edge = "lpass",
+ .link.link_info.transport = "smem",
+ },
+ {
+ .name = "mdsprpc-smd",
+ .subsys = "modem",
+ .channel = SMD_APPS_MODEM,
+ .link.link_info.edge = "mpss",
+ .link.link_info.transport = "smem",
+ },
+ {
+ .name = "sdsprpc-smd",
+ .subsys = "slpi",
+ .channel = SMD_APPS_DSPS,
+ .link.link_info.edge = "dsps",
+ .link.link_info.transport = "smem",
+ .vmid = VMID_SSC_Q6,
+ },
+ {
+ .name = "cdsprpc-smd",
+ .subsys = "cdsp",
+ .link.link_info.edge = "cdsp",
+ .link.link_info.transport = "smem",
+ },
+};
+
+static inline int64_t getnstimediff(struct timespec *start)
+{
+ int64_t ns;
+ struct timespec ts, b;
+
+ getnstimeofday(&ts);
+ b = timespec_sub(ts, *start);
+ ns = timespec_to_ns(&b);
+ return ns;
+}
+
+static void fastrpc_buf_free(struct fastrpc_buf *buf, int cache)
+{
+ struct fastrpc_file *fl = buf == 0 ? 0 : buf->fl;
+ int vmid;
+
+ if (!fl)
+ return;
+ if (cache) {
+ spin_lock(&fl->hlock);
+ hlist_add_head(&buf->hn, &fl->bufs);
+ spin_unlock(&fl->hlock);
+ return;
+ }
+ if (!IS_ERR_OR_NULL(buf->virt)) {
+ int destVM[1] = {VMID_HLOS};
+ int destVMperm[1] = {PERM_READ | PERM_WRITE | PERM_EXEC};
+
+ if (fl->sctx->smmu.cb)
+ buf->phys &= ~((uint64_t)fl->sctx->smmu.cb << 32);
+ vmid = fl->apps->channel[fl->cid].vmid;
+ if (vmid) {
+ int srcVM[2] = {VMID_HLOS, vmid};
+
+ hyp_assign_phys(buf->phys, buf_page_size(buf->size),
+ srcVM, 2, destVM, destVMperm, 1);
+ }
+ dma_free_coherent(fl->sctx->smmu.dev, buf->size, buf->virt,
+ buf->phys);
+ }
+ kfree(buf);
+}
+
+static void fastrpc_buf_list_free(struct fastrpc_file *fl)
+{
+ struct fastrpc_buf *buf, *free;
+ do {
+ struct hlist_node *n;
+ free = 0;
+ spin_lock(&fl->hlock);
+ hlist_for_each_entry_safe(buf, n, &fl->bufs, hn) {
+ hlist_del_init(&buf->hn);
+ free = buf;
+ break;
+ }
+ spin_unlock(&fl->hlock);
+ if (free)
+ fastrpc_buf_free(free, 0);
+ } while (free);
+}
+
+static void fastrpc_mmap_add(struct fastrpc_mmap *map)
+{
+ if (map->flags == ADSP_MMAP_HEAP_ADDR ||
+ map->flags == ADSP_MMAP_REMOTE_HEAP_ADDR) {
+ struct fastrpc_apps *me = &gfa;
+
+ spin_lock(&me->hlock);
+ hlist_add_head(&map->hn, &me->maps);
+ spin_unlock(&me->hlock);
+ } else {
+ struct fastrpc_file *fl = map->fl;
+
+ spin_lock(&fl->hlock);
+ hlist_add_head(&map->hn, &fl->maps);
+ spin_unlock(&fl->hlock);
+ }
+}
+
+static int fastrpc_mmap_find(struct fastrpc_file *fl, int fd, uintptr_t va,
+ ssize_t len, int mflags, struct fastrpc_mmap **ppmap)
+{
+ struct fastrpc_apps *me = &gfa;
+ struct fastrpc_mmap *match = 0, *map;
+ struct hlist_node *n;
+ if (mflags == ADSP_MMAP_HEAP_ADDR ||
+ mflags == ADSP_MMAP_REMOTE_HEAP_ADDR) {
+ spin_lock(&me->hlock);
+ hlist_for_each_entry_safe(map, n, &me->maps, hn) {
+ if (va >= map->va &&
+ va + len <= map->va + map->len &&
+ map->fd == fd) {
+ map->refs++;
+ match = map;
+ break;
+ }
+ }
+ spin_unlock(&me->hlock);
+ } else {
+ spin_lock(&fl->hlock);
+ hlist_for_each_entry_safe(map, n, &fl->maps, hn) {
+ if (va >= map->va &&
+ va + len <= map->va + map->len &&
+ map->fd == fd) {
+ map->refs++;
+ match = map;
+ break;
+ }
+ }
+ spin_unlock(&fl->hlock);
+ }
+ if (match) {
+ *ppmap = match;
+ return 0;
+ }
+ return -ENOTTY;
+}
+
+static int dma_alloc_memory(phys_addr_t *region_start, ssize_t size)
+{
+ struct fastrpc_apps *me = &gfa;
+ void *vaddr = 0;
+ DEFINE_DMA_ATTRS(attrs);
+
+ if (me->dev == NULL) {
+ pr_err("device adsprpc-mem is not initialized\n");
+ return -ENODEV;
+ }
+ dma_set_attr(DMA_ATTR_SKIP_ZEROING, &attrs);
+ dma_set_attr(DMA_ATTR_NO_KERNEL_MAPPING, &attrs);
+ vaddr = dma_alloc_attrs(me->dev, size, region_start, GFP_KERNEL,
+ &attrs);
+ if (!vaddr) {
+ pr_err("ADSPRPC: Failed to allocate %x remote heap memory\n",
+ (unsigned int)size);
+ return -ENOMEM;
+ }
+ return 0;
+}
+
+static int fastrpc_mmap_remove(struct fastrpc_file *fl, uintptr_t va,
+ ssize_t len, struct fastrpc_mmap **ppmap)
+{
+ struct fastrpc_mmap *match = 0, *map;
+ struct hlist_node *n;
+ struct fastrpc_apps *me = &gfa;
+
+ spin_lock(&me->hlock);
+ hlist_for_each_entry_safe(map, n, &me->maps, hn) {
+ if (map->raddr == va &&
+ map->raddr + map->len == va + len &&
+ map->refs == 1) {
+ match = map;
+ hlist_del_init(&map->hn);
+ break;
+ }
+ }
+ spin_unlock(&me->hlock);
+ if (match) {
+ *ppmap = match;
+ return 0;
+ }
+ spin_lock(&fl->hlock);
+ hlist_for_each_entry_safe(map, n, &fl->maps, hn) {
+ if (map->raddr == va &&
+ map->raddr + map->len == va + len &&
+ map->refs == 1) {
+ match = map;
+ hlist_del_init(&map->hn);
+ break;
+ }
+ }
+ spin_unlock(&fl->hlock);
+ if (match) {
+ *ppmap = match;
+ return 0;
+ }
+ return -ENOTTY;
+}
+
+static void fastrpc_mmap_free(struct fastrpc_mmap *map)
+{
+ struct fastrpc_apps *me = &gfa;
+ struct fastrpc_file *fl;
+ int vmid;
+ struct fastrpc_session_ctx *sess;
+
+ if (!map)
+ return;
+ fl = map->fl;
+ if (map->flags == ADSP_MMAP_HEAP_ADDR ||
+ map->flags == ADSP_MMAP_REMOTE_HEAP_ADDR) {
+ spin_lock(&me->hlock);
+ map->refs--;
+ if (!map->refs)
+ hlist_del_init(&map->hn);
+ spin_unlock(&me->hlock);
+ } else {
+ spin_lock(&fl->hlock);
+ map->refs--;
+ if (!map->refs)
+ hlist_del_init(&map->hn);
+ spin_unlock(&fl->hlock);
+ }
+ if (map->refs > 0)
+ return;
+ if (map->flags == ADSP_MMAP_HEAP_ADDR ||
+ map->flags == ADSP_MMAP_REMOTE_HEAP_ADDR) {
+ DEFINE_DMA_ATTRS(attrs);
+
+ if (me->dev == NULL) {
+ pr_err("failed to free remote heap allocation\n");
+ return;
+ }
+ if (map->phys) {
+ dma_set_attr(DMA_ATTR_SKIP_ZEROING, &attrs);
+ dma_set_attr(DMA_ATTR_NO_KERNEL_MAPPING, &attrs);
+ dma_free_attrs(me->dev, map->size,
+ &(map->va), map->phys, &attrs);
+ }
+ } else {
+ int destVM[1] = {VMID_HLOS};
+ int destVMperm[1] = {PERM_READ | PERM_WRITE | PERM_EXEC};
+
+ if (map->secure)
+ sess = fl->secsctx;
+ else
+ sess = fl->sctx;
+
+ if (!IS_ERR_OR_NULL(map->handle))
+ ion_free(fl->apps->client, map->handle);
+ if (sess && sess->smmu.enabled) {
+ if (map->size || map->phys)
+ msm_dma_unmap_sg(sess->smmu.dev,
+ map->table->sgl,
+ map->table->nents, DMA_BIDIRECTIONAL,
+ map->buf);
+ }
+ vmid = fl->apps->channel[fl->cid].vmid;
+ if (vmid && map->phys) {
+ int srcVM[2] = {VMID_HLOS, vmid};
+
+ hyp_assign_phys(map->phys, buf_page_size(map->size),
+ srcVM, 2, destVM, destVMperm, 1);
+ }
+
+ if (!IS_ERR_OR_NULL(map->table))
+ dma_buf_unmap_attachment(map->attach, map->table,
+ DMA_BIDIRECTIONAL);
+ if (!IS_ERR_OR_NULL(map->attach))
+ dma_buf_detach(map->buf, map->attach);
+ if (!IS_ERR_OR_NULL(map->buf))
+ dma_buf_put(map->buf);
+ }
+ kfree(map);
+}
+
+static int fastrpc_session_alloc(struct fastrpc_channel_ctx *chan, int secure,
+ struct fastrpc_session_ctx **session);
+
+static int fastrpc_mmap_create(struct fastrpc_file *fl, int fd, unsigned attr,
+ uintptr_t va, ssize_t len, int mflags, struct fastrpc_mmap **ppmap)
+{
+ struct fastrpc_apps *me = &gfa;
+ struct fastrpc_session_ctx *sess;
+ struct fastrpc_apps *apps = fl->apps;
+ int cid = fl->cid;
+ struct fastrpc_channel_ctx *chan = &apps->channel[cid];
+ struct fastrpc_mmap *map = 0;
+ struct dma_attrs attrs;
+ phys_addr_t region_start = 0;
+ unsigned long flags;
+ int err = 0, vmid;
+
+ if (!fastrpc_mmap_find(fl, fd, va, len, mflags, ppmap))
+ return 0;
+ map = kzalloc(sizeof(*map), GFP_KERNEL);
+ VERIFY(err, !IS_ERR_OR_NULL(map));
+ if (err)
+ goto bail;
+ INIT_HLIST_NODE(&map->hn);
+ map->flags = mflags;
+ map->refs = 1;
+ map->fl = fl;
+ map->fd = fd;
+ map->attr = attr;
+ if (mflags == ADSP_MMAP_HEAP_ADDR ||
+ mflags == ADSP_MMAP_REMOTE_HEAP_ADDR) {
+ map->apps = me;
+ map->fl = 0;
+ VERIFY(err, !dma_alloc_memory(&region_start, len));
+ if (err)
+ goto bail;
+ map->phys = (uintptr_t)region_start;
+ map->size = len;
+ map->va = map->phys;
+ } else {
+ VERIFY(err, !IS_ERR_OR_NULL(map->handle =
+ ion_import_dma_buf(fl->apps->client, fd)));
+ if (err)
+ goto bail;
+ VERIFY(err, !ion_handle_get_flags(fl->apps->client, map->handle,
+ &flags));
+ if (err)
+ goto bail;
+
+ map->uncached = !ION_IS_CACHED(flags);
+ if (map->attr & FASTRPC_ATTR_NOVA)
+ map->uncached = 1;
+
+ map->secure = flags & ION_FLAG_SECURE;
+ if (map->secure) {
+ if (!fl->secsctx)
+ err = fastrpc_session_alloc(chan, 1,
+ &fl->secsctx);
+ if (err)
+ goto bail;
+ }
+ if (map->secure)
+ sess = fl->secsctx;
+ else
+ sess = fl->sctx;
+
+ VERIFY(err, !IS_ERR_OR_NULL(sess));
+ if (err)
+ goto bail;
+ VERIFY(err, !IS_ERR_OR_NULL(map->buf = dma_buf_get(fd)));
+ if (err)
+ goto bail;
+ VERIFY(err, !IS_ERR_OR_NULL(map->attach =
+ dma_buf_attach(map->buf, sess->smmu.dev)));
+ if (err)
+ goto bail;
+ VERIFY(err, !IS_ERR_OR_NULL(map->table =
+ dma_buf_map_attachment(map->attach,
+ DMA_BIDIRECTIONAL)));
+ if (err)
+ goto bail;
+ if (sess->smmu.enabled) {
+ init_dma_attrs(&attrs);
+ dma_set_attr(DMA_ATTR_EXEC_MAPPING, &attrs);
+
+ if ((map->attr & FASTRPC_ATTR_NON_COHERENT) ||
+ (sess->smmu.coherent && map->uncached))
+ dma_set_attr(DMA_ATTR_FORCE_NON_COHERENT,
+ &attrs);
+ else if (map->attr & FASTRPC_ATTR_COHERENT)
+ dma_set_attr(DMA_ATTR_FORCE_COHERENT, &attrs);
+
+ VERIFY(err, map->table->nents ==
+ msm_dma_map_sg_attrs(sess->smmu.dev,
+ map->table->sgl, map->table->nents,
+ DMA_BIDIRECTIONAL, map->buf, &attrs));
+ if (err)
+ goto bail;
+ } else {
+ VERIFY(err, map->table->nents == 1);
+ if (err)
+ goto bail;
+ }
+ map->phys = sg_dma_address(map->table->sgl);
+ if (sess->smmu.cb) {
+ map->phys += ((uint64_t)sess->smmu.cb << 32);
+ map->size = sg_dma_len(map->table->sgl);
+ } else {
+ map->size = buf_page_size(len);
+ }
+ vmid = fl->apps->channel[fl->cid].vmid;
+ if (vmid) {
+ int srcVM[1] = {VMID_HLOS};
+ int destVM[2] = {VMID_HLOS, vmid};
+ int destVMperm[2] = {PERM_READ | PERM_WRITE | PERM_EXEC,
+ PERM_READ | PERM_WRITE | PERM_EXEC};
+
+ VERIFY(err, !hyp_assign_phys(map->phys,
+ buf_page_size(map->size),
+ srcVM, 1, destVM, destVMperm, 2));
+ if (err)
+ goto bail;
+ }
+ map->va = va;
+ }
+ map->len = len;
+
+ fastrpc_mmap_add(map);
+ *ppmap = map;
+
+bail:
+ if (err && map)
+ fastrpc_mmap_free(map);
+ return err;
+}
+
+static int fastrpc_buf_alloc(struct fastrpc_file *fl, ssize_t size,
+ struct fastrpc_buf **obuf)
+{
+ int err = 0, vmid;
+ struct fastrpc_buf *buf = 0, *fr = 0;
+ struct hlist_node *n;
+
+ VERIFY(err, size > 0);
+ if (err)
+ goto bail;
+
+ /* find the smallest buffer that fits in the cache */
+ spin_lock(&fl->hlock);
+ hlist_for_each_entry_safe(buf, n, &fl->bufs, hn) {
+ if (buf->size >= size && (!fr || fr->size > buf->size))
+ fr = buf;
+ }
+ if (fr)
+ hlist_del_init(&fr->hn);
+ spin_unlock(&fl->hlock);
+ if (fr) {
+ *obuf = fr;
+ return 0;
+ }
+ buf = 0;
+ VERIFY(err, buf = kzalloc(sizeof(*buf), GFP_KERNEL));
+ if (err)
+ goto bail;
+ INIT_HLIST_NODE(&buf->hn);
+ buf->fl = fl;
+ buf->virt = 0;
+ buf->phys = 0;
+ buf->size = size;
+ buf->virt = dma_alloc_coherent(fl->sctx->smmu.dev, buf->size,
+ (void *)&buf->phys, GFP_KERNEL);
+ if (IS_ERR_OR_NULL(buf->virt)) {
+ /* free cache and retry */
+ fastrpc_buf_list_free(fl);
+ buf->virt = dma_alloc_coherent(fl->sctx->smmu.dev, buf->size,
+ (void *)&buf->phys, GFP_KERNEL);
+ VERIFY(err, !IS_ERR_OR_NULL(buf->virt));
+ }
+ if (err)
+ goto bail;
+ if (fl->sctx->smmu.cb)
+ buf->phys += ((uint64_t)fl->sctx->smmu.cb << 32);
+ vmid = fl->apps->channel[fl->cid].vmid;
+ if (vmid) {
+ int srcVM[1] = {VMID_HLOS};
+ int destVM[2] = {VMID_HLOS, vmid};
+ int destVMperm[2] = {PERM_READ | PERM_WRITE | PERM_EXEC,
+ PERM_READ | PERM_WRITE | PERM_EXEC};
+
+ VERIFY(err, !hyp_assign_phys(buf->phys, buf_page_size(size),
+ srcVM, 1, destVM, destVMperm, 2));
+ if (err)
+ goto bail;
+ }
+
+ *obuf = buf;
+ bail:
+ if (err && buf)
+ fastrpc_buf_free(buf, 0);
+ return err;
+}
+
+
+static int context_restore_interrupted(struct fastrpc_file *fl,
+ struct fastrpc_ioctl_invoke_attrs *inv,
+ struct smq_invoke_ctx **po)
+{
+ int err = 0;
+ struct smq_invoke_ctx *ctx = 0, *ictx = 0;
+ struct hlist_node *n;
+ struct fastrpc_ioctl_invoke *invoke = &inv->inv;
+ spin_lock(&fl->hlock);
+ hlist_for_each_entry_safe(ictx, n, &fl->clst.interrupted, hn) {
+ if (ictx->pid == current->pid) {
+ if (invoke->sc != ictx->sc || ictx->fl != fl)
+ err = -1;
+ else {
+ ctx = ictx;
+ hlist_del_init(&ctx->hn);
+ hlist_add_head(&ctx->hn, &fl->clst.pending);
+ }
+ break;
+ }
+ }
+ spin_unlock(&fl->hlock);
+ if (ctx)
+ *po = ctx;
+ return err;
+}
+
+#define CMP(aa, bb) ((aa) == (bb) ? 0 : (aa) < (bb) ? -1 : 1)
+static int overlap_ptr_cmp(const void *a, const void *b)
+{
+ struct overlap *pa = *((struct overlap **)a);
+ struct overlap *pb = *((struct overlap **)b);
+ /* sort with lowest starting buffer first */
+ int st = CMP(pa->start, pb->start);
+ /* sort with highest ending buffer first */
+ int ed = CMP(pb->end, pa->end);
+ return st == 0 ? ed : st;
+}
+
+static int context_build_overlap(struct smq_invoke_ctx *ctx)
+{
+ int i, err = 0;
+ remote_arg_t *lpra = ctx->lpra;
+ int inbufs = REMOTE_SCALARS_INBUFS(ctx->sc);
+ int outbufs = REMOTE_SCALARS_OUTBUFS(ctx->sc);
+ int nbufs = inbufs + outbufs;
+ struct overlap max;
+ for (i = 0; i < nbufs; ++i) {
+ ctx->overs[i].start = (uintptr_t)lpra[i].buf.pv;
+ ctx->overs[i].end = ctx->overs[i].start + lpra[i].buf.len;
+ if (lpra[i].buf.len) {
+ VERIFY(err, ctx->overs[i].end > ctx->overs[i].start);
+ if (err)
+ goto bail;
+ }
+ ctx->overs[i].raix = i;
+ ctx->overps[i] = &ctx->overs[i];
+ }
+ sort(ctx->overps, nbufs, sizeof(*ctx->overps), overlap_ptr_cmp, 0);
+ max.start = 0;
+ max.end = 0;
+ for (i = 0; i < nbufs; ++i) {
+ if (ctx->overps[i]->start < max.end) {
+ ctx->overps[i]->mstart = max.end;
+ ctx->overps[i]->mend = ctx->overps[i]->end;
+ ctx->overps[i]->offset = max.end -
+ ctx->overps[i]->start;
+ if (ctx->overps[i]->end > max.end) {
+ max.end = ctx->overps[i]->end;
+ } else {
+ ctx->overps[i]->mend = 0;
+ ctx->overps[i]->mstart = 0;
+ }
+ } else {
+ ctx->overps[i]->mend = ctx->overps[i]->end;
+ ctx->overps[i]->mstart = ctx->overps[i]->start;
+ ctx->overps[i]->offset = 0;
+ max = *ctx->overps[i];
+ }
+ }
+bail:
+ return err;
+}
+
+#define K_COPY_FROM_USER(err, kernel, dst, src, size) \
+ do {\
+ if (!(kernel))\
+ VERIFY(err, 0 == copy_from_user((dst), (src),\
+ (size)));\
+ else\
+ memmove((dst), (src), (size));\
+ } while (0)
+
+#define K_COPY_TO_USER(err, kernel, dst, src, size) \
+ do {\
+ if (!(kernel))\
+ VERIFY(err, 0 == copy_to_user((dst), (src),\
+ (size)));\
+ else\
+ memmove((dst), (src), (size));\
+ } while (0)
+
+
+static void context_free(struct smq_invoke_ctx *ctx);
+
+static int context_alloc(struct fastrpc_file *fl, uint32_t kernel,
+ struct fastrpc_ioctl_invoke_attrs *invokefd,
+ struct smq_invoke_ctx **po)
+{
+ int err = 0, bufs, size = 0;
+ struct smq_invoke_ctx *ctx = 0;
+ struct fastrpc_ctx_lst *clst = &fl->clst;
+ struct fastrpc_ioctl_invoke *invoke = &invokefd->inv;
+
+ bufs = REMOTE_SCALARS_LENGTH(invoke->sc);
+ size = bufs * sizeof(*ctx->lpra) + bufs * sizeof(*ctx->maps) +
+ sizeof(*ctx->fds) * (bufs) +
+ sizeof(*ctx->attrs) * (bufs) +
+ sizeof(*ctx->overs) * (bufs) +
+ sizeof(*ctx->overps) * (bufs);
+
+ VERIFY(err, ctx = kzalloc(sizeof(*ctx) + size, GFP_KERNEL));
+ if (err)
+ goto bail;
+
+ INIT_HLIST_NODE(&ctx->hn);
+ hlist_add_fake(&ctx->hn);
+ ctx->fl = fl;
+ ctx->maps = (struct fastrpc_mmap **)(&ctx[1]);
+ ctx->lpra = (remote_arg_t *)(&ctx->maps[bufs]);
+ ctx->fds = (int *)(&ctx->lpra[bufs]);
+ ctx->attrs = (unsigned *)(&ctx->fds[bufs]);
+ ctx->overs = (struct overlap *)(&ctx->attrs[bufs]);
+ ctx->overps = (struct overlap **)(&ctx->overs[bufs]);
+
+ K_COPY_FROM_USER(err, kernel, ctx->lpra, invoke->pra,
+ bufs * sizeof(*ctx->lpra));
+ if (err)
+ goto bail;
+
+ if (invokefd->fds) {
+ K_COPY_FROM_USER(err, kernel, ctx->fds, invokefd->fds,
+ bufs * sizeof(*ctx->fds));
+ if (err)
+ goto bail;
+ }
+ if (invokefd->attrs) {
+ K_COPY_FROM_USER(err, kernel, ctx->attrs, invokefd->attrs,
+ bufs * sizeof(*ctx->attrs));
+ if (err)
+ goto bail;
+ }
+
+ ctx->sc = invoke->sc;
+ if (bufs) {
+ VERIFY(err, 0 == context_build_overlap(ctx));
+ if (err)
+ goto bail;
+ }
+ ctx->retval = -1;
+ ctx->pid = current->pid;
+ ctx->tgid = current->tgid;
+ init_completion(&ctx->work);
+
+ spin_lock(&fl->hlock);
+ hlist_add_head(&ctx->hn, &clst->pending);
+ spin_unlock(&fl->hlock);
+
+ *po = ctx;
+bail:
+ if (ctx && err)
+ context_free(ctx);
+ return err;
+}
+
+static void context_save_interrupted(struct smq_invoke_ctx *ctx)
+{
+ struct fastrpc_ctx_lst *clst = &ctx->fl->clst;
+ spin_lock(&ctx->fl->hlock);
+ hlist_del_init(&ctx->hn);
+ hlist_add_head(&ctx->hn, &clst->interrupted);
+ spin_unlock(&ctx->fl->hlock);
+ /* free the cache on power collapse */
+ fastrpc_buf_list_free(ctx->fl);
+}
+
+static void context_free(struct smq_invoke_ctx *ctx)
+{
+ int i;
+ int nbufs = REMOTE_SCALARS_INBUFS(ctx->sc) +
+ REMOTE_SCALARS_OUTBUFS(ctx->sc);
+ spin_lock(&ctx->fl->hlock);
+ hlist_del_init(&ctx->hn);
+ spin_unlock(&ctx->fl->hlock);
+ for (i = 0; i < nbufs; ++i)
+ fastrpc_mmap_free(ctx->maps[i]);
+ fastrpc_buf_free(ctx->buf, 1);
+ kfree(ctx);
+}
+
+static void context_notify_user(struct smq_invoke_ctx *ctx, int retval)
+{
+ ctx->retval = retval;
+ complete(&ctx->work);
+}
+
+
+static void fastrpc_notify_users(struct fastrpc_file *me)
+{
+ struct smq_invoke_ctx *ictx;
+ struct hlist_node *n;
+ spin_lock(&me->hlock);
+ hlist_for_each_entry_safe(ictx, n, &me->clst.pending, hn) {
+ complete(&ictx->work);
+ }
+ hlist_for_each_entry_safe(ictx, n, &me->clst.interrupted, hn) {
+ complete(&ictx->work);
+ }
+ spin_unlock(&me->hlock);
+
+}
+
+static void fastrpc_notify_drivers(struct fastrpc_apps *me, int cid)
+{
+ struct fastrpc_file *fl;
+ struct hlist_node *n;
+ spin_lock(&me->hlock);
+ hlist_for_each_entry_safe(fl, n, &me->drivers, hn) {
+ if (fl->cid == cid)
+ fastrpc_notify_users(fl);
+ }
+ spin_unlock(&me->hlock);
+
+}
+static void context_list_ctor(struct fastrpc_ctx_lst *me)
+{
+ INIT_HLIST_HEAD(&me->interrupted);
+ INIT_HLIST_HEAD(&me->pending);
+}
+
+static void fastrpc_context_list_dtor(struct fastrpc_file *fl)
+{
+ struct fastrpc_ctx_lst *clst = &fl->clst;
+ struct smq_invoke_ctx *ictx = 0, *ctxfree;
+ struct hlist_node *n;
+ do {
+ ctxfree = 0;
+ spin_lock(&fl->hlock);
+ hlist_for_each_entry_safe(ictx, n, &clst->interrupted, hn) {
+ hlist_del_init(&ictx->hn);
+ ctxfree = ictx;
+ break;
+ }
+ spin_unlock(&fl->hlock);
+ if (ctxfree)
+ context_free(ctxfree);
+ } while (ctxfree);
+ do {
+ ctxfree = 0;
+ spin_lock(&fl->hlock);
+ hlist_for_each_entry_safe(ictx, n, &clst->pending, hn) {
+ hlist_del_init(&ictx->hn);
+ ctxfree = ictx;
+ break;
+ }
+ spin_unlock(&fl->hlock);
+ if (ctxfree)
+ context_free(ctxfree);
+ } while (ctxfree);
+}
+
+static int fastrpc_file_free(struct fastrpc_file *fl);
+static void fastrpc_file_list_dtor(struct fastrpc_apps *me)
+{
+ struct fastrpc_file *fl, *free;
+ struct hlist_node *n;
+ do {
+ free = 0;
+ spin_lock(&me->hlock);
+ hlist_for_each_entry_safe(fl, n, &me->drivers, hn) {
+ hlist_del_init(&fl->hn);
+ free = fl;
+ break;
+ }
+ spin_unlock(&me->hlock);
+ if (free)
+ fastrpc_file_free(free);
+ } while (free);
+}
+
+static int get_args(uint32_t kernel, struct smq_invoke_ctx *ctx)
+{
+ remote_arg64_t *rpra;
+ remote_arg_t *lpra = ctx->lpra;
+ struct smq_invoke_buf *list;
+ struct smq_phy_page *pages, *ipage;
+ uint32_t sc = ctx->sc;
+ int inbufs = REMOTE_SCALARS_INBUFS(sc);
+ int outbufs = REMOTE_SCALARS_OUTBUFS(sc);
+ int bufs = inbufs + outbufs;
+ uintptr_t args;
+ ssize_t rlen = 0, copylen = 0, metalen = 0;
+ int i, inh, oix;
+ int err = 0;
+ int mflags = 0;
+
+ /* calculate size of the metadata */
+ rpra = 0;
+ list = smq_invoke_buf_start(rpra, sc);
+ pages = smq_phy_page_start(sc, list);
+ ipage = pages;
+
+ for (i = 0; i < bufs; ++i) {
+ uintptr_t buf = (uintptr_t)lpra[i].buf.pv;
+ ssize_t len = lpra[i].buf.len;
+
+ if (ctx->fds[i] && (ctx->fds[i] != -1))
+ fastrpc_mmap_create(ctx->fl, ctx->fds[i],
+ ctx->attrs[i], buf, len,
+ mflags, &ctx->maps[i]);
+ ipage += 1;
+ }
+ metalen = copylen = (ssize_t)&ipage[0];
+ /* calculate len requreed for copying */
+ for (oix = 0; oix < inbufs + outbufs; ++oix) {
+ int i = ctx->overps[oix]->raix;
+ uintptr_t mstart, mend;
+ ssize_t len = lpra[i].buf.len;
+ if (!len)
+ continue;
+ if (ctx->maps[i])
+ continue;
+ if (ctx->overps[oix]->offset == 0)
+ copylen = ALIGN(copylen, BALIGN);
+ mstart = ctx->overps[oix]->mstart;
+ mend = ctx->overps[oix]->mend;
+ VERIFY(err, (mend - mstart) <= LONG_MAX);
+ if (err)
+ goto bail;
+ copylen += mend - mstart;
+ VERIFY(err, copylen >= 0);
+ if (err)
+ goto bail;
+ }
+ ctx->used = copylen;
+
+ /* allocate new buffer */
+ if (copylen) {
+ VERIFY(err, !fastrpc_buf_alloc(ctx->fl, copylen, &ctx->buf));
+ if (err)
+ goto bail;
+ }
+ if (ctx->buf->virt && metalen <= copylen)
+ memset(ctx->buf->virt, 0, metalen);
+
+ /* copy metadata */
+ rpra = ctx->buf->virt;
+ ctx->rpra = rpra;
+ list = smq_invoke_buf_start(rpra, sc);
+ pages = smq_phy_page_start(sc, list);
+ ipage = pages;
+ args = (uintptr_t)ctx->buf->virt + metalen;
+ for (i = 0; i < bufs; ++i) {
+ ssize_t len = lpra[i].buf.len;
+ list[i].num = 0;
+ list[i].pgidx = 0;
+ if (!len)
+ continue;
+ list[i].num = 1;
+ list[i].pgidx = ipage - pages;
+ ipage++;
+ }
+ /* map ion buffers */
+ PERF(ctx->fl->profile, ctx->fl->perf.map,
+ for (i = 0; i < inbufs + outbufs; ++i) {
+ struct fastrpc_mmap *map = ctx->maps[i];
+ uint64_t buf = ptr_to_uint64(lpra[i].buf.pv);
+ ssize_t len = lpra[i].buf.len;
+ rpra[i].buf.pv = 0;
+ rpra[i].buf.len = len;
+ if (!len)
+ continue;
+ if (map) {
+ struct vm_area_struct *vma;
+ uintptr_t offset;
+ int num = buf_num_pages(buf, len);
+ int idx = list[i].pgidx;
+
+ if (map->attr & FASTRPC_ATTR_NOVA) {
+ offset = 0;
+ } else {
+ down_read(&current->mm->mmap_sem);
+ VERIFY(err, NULL != (vma = find_vma(current->mm,
+ map->va)));
+ if (err) {
+ up_read(&current->mm->mmap_sem);
+ goto bail;
+ }
+ offset = buf_page_start(buf) - vma->vm_start;
+ up_read(&current->mm->mmap_sem);
+ VERIFY(err, offset < (uintptr_t)map->size);
+ if (err)
+ goto bail;
+ }
+ pages[idx].addr = map->phys + offset;
+ pages[idx].size = num << PAGE_SHIFT;
+ }
+ rpra[i].buf.pv = buf;
+ }
+ PERF_END);
+
+ /* copy non ion buffers */
+ PERF(ctx->fl->profile, ctx->fl->perf.copy,
+ rlen = copylen - metalen;
+ for (oix = 0; oix < inbufs + outbufs; ++oix) {
+ int i = ctx->overps[oix]->raix;
+ struct fastrpc_mmap *map = ctx->maps[i];
+ ssize_t mlen;
+ uint64_t buf;
+ ssize_t len = lpra[i].buf.len;
+ if (!len)
+ continue;
+ if (map)
+ continue;
+ if (ctx->overps[oix]->offset == 0) {
+ rlen -= ALIGN(args, BALIGN) - args;
+ args = ALIGN(args, BALIGN);
+ }
+ mlen = ctx->overps[oix]->mend - ctx->overps[oix]->mstart;
+ VERIFY(err, rlen >= mlen);
+ if (err)
+ goto bail;
+ rpra[i].buf.pv = (args - ctx->overps[oix]->offset);
+ pages[list[i].pgidx].addr = ctx->buf->phys -
+ ctx->overps[oix]->offset +
+ (copylen - rlen);
+ pages[list[i].pgidx].addr =
+ buf_page_start(pages[list[i].pgidx].addr);
+ buf = rpra[i].buf.pv;
+ pages[list[i].pgidx].size = buf_num_pages(buf, len) * PAGE_SIZE;
+ if (i < inbufs) {
+ K_COPY_FROM_USER(err, kernel, uint64_to_ptr(buf),
+ lpra[i].buf.pv, len);
+ if (err)
+ goto bail;
+ }
+ args = args + mlen;
+ rlen -= mlen;
+ }
+ PERF_END);
+
+ PERF(ctx->fl->profile, ctx->fl->perf.flush,
+ for (oix = 0; oix < inbufs + outbufs; ++oix) {
+ int i = ctx->overps[oix]->raix;
+ struct fastrpc_mmap *map = ctx->maps[i];
+
+ if (map && map->uncached)
+ continue;
+ if (ctx->fl->sctx->smmu.coherent &&
+ !(map && (map->attr & FASTRPC_ATTR_NON_COHERENT)))
+ continue;
+ if (map && (map->attr & FASTRPC_ATTR_COHERENT))
+ continue;
+
+ if (rpra[i].buf.len && ctx->overps[oix]->mstart)
+ dmac_flush_range(uint64_to_ptr(rpra[i].buf.pv),
+ uint64_to_ptr(rpra[i].buf.pv + rpra[i].buf.len));
+ }
+ PERF_END);
+
+ inh = inbufs + outbufs;
+ for (i = 0; i < REMOTE_SCALARS_INHANDLES(sc); i++) {
+ rpra[inh + i].buf.pv = ptr_to_uint64(ctx->lpra[inh + i].buf.pv);
+ rpra[inh + i].buf.len = ctx->lpra[inh + i].buf.len;
+ rpra[inh + i].h = ctx->lpra[inh + i].h;
+ }
+
+ if (!ctx->fl->sctx->smmu.coherent) {
+ PERF(ctx->fl->profile, ctx->fl->perf.flush,
+ dmac_flush_range((char *)rpra, (char *)rpra + ctx->used);
+ PERF_END);
+ }
+ bail:
+ return err;
+}
+
+static int put_args(uint32_t kernel, struct smq_invoke_ctx *ctx,
+ remote_arg_t *upra)
+{
+ uint32_t sc = ctx->sc;
+ remote_arg64_t *rpra = ctx->rpra;
+ int i, inbufs, outbufs, outh, size;
+ int err = 0;
+
+ inbufs = REMOTE_SCALARS_INBUFS(sc);
+ outbufs = REMOTE_SCALARS_OUTBUFS(sc);
+ for (i = inbufs; i < inbufs + outbufs; ++i) {
+ if (!ctx->maps[i]) {
+ K_COPY_TO_USER(err, kernel,
+ ctx->lpra[i].buf.pv,
+ uint64_to_ptr(rpra[i].buf.pv),
+ rpra[i].buf.len);
+ if (err)
+ goto bail;
+ } else {
+ fastrpc_mmap_free(ctx->maps[i]);
+ ctx->maps[i] = 0;
+ }
+ }
+ size = sizeof(*rpra) * REMOTE_SCALARS_OUTHANDLES(sc);
+ if (size) {
+ outh = inbufs + outbufs + REMOTE_SCALARS_INHANDLES(sc);
+ K_COPY_TO_USER(err, kernel, &upra[outh], &rpra[outh], size);
+ if (err)
+ goto bail;
+ }
+ bail:
+ return err;
+}
+
+static void inv_args_pre(struct smq_invoke_ctx *ctx)
+{
+ int i, inbufs, outbufs;
+ uint32_t sc = ctx->sc;
+ remote_arg64_t *rpra = ctx->rpra;
+ uintptr_t end;
+
+ inbufs = REMOTE_SCALARS_INBUFS(sc);
+ outbufs = REMOTE_SCALARS_OUTBUFS(sc);
+ for (i = inbufs; i < inbufs + outbufs; ++i) {
+ struct fastrpc_mmap *map = ctx->maps[i];
+
+ if (map && map->uncached)
+ continue;
+ if (!rpra[i].buf.len)
+ continue;
+ if (ctx->fl->sctx->smmu.coherent &&
+ !(map && (map->attr & FASTRPC_ATTR_NON_COHERENT)))
+ continue;
+ if (map && (map->attr & FASTRPC_ATTR_COHERENT))
+ continue;
+
+ if (buf_page_start(ptr_to_uint64((void *)rpra)) ==
+ buf_page_start(rpra[i].buf.pv))
+ continue;
+ if (!IS_CACHE_ALIGNED((uintptr_t)uint64_to_ptr(rpra[i].buf.pv)))
+ dmac_flush_range(uint64_to_ptr(rpra[i].buf.pv),
+ (char *)(uint64_to_ptr(rpra[i].buf.pv + 1)));
+ end = (uintptr_t)uint64_to_ptr(rpra[i].buf.pv +
+ rpra[i].buf.len);
+ if (!IS_CACHE_ALIGNED(end))
+ dmac_flush_range((char *)end,
+ (char *)end + 1);
+ }
+}
+
+static void inv_args(struct smq_invoke_ctx *ctx)
+{
+ int i, inbufs, outbufs;
+ uint32_t sc = ctx->sc;
+ remote_arg64_t *rpra = ctx->rpra;
+ int used = ctx->used;
+ int inv = 0;
+
+ inbufs = REMOTE_SCALARS_INBUFS(sc);
+ outbufs = REMOTE_SCALARS_OUTBUFS(sc);
+ for (i = inbufs; i < inbufs + outbufs; ++i) {
+ struct fastrpc_mmap *map = ctx->maps[i];
+
+ if (map && map->uncached)
+ continue;
+ if (!rpra[i].buf.len)
+ continue;
+ if (ctx->fl->sctx->smmu.coherent &&
+ !(map && (map->attr & FASTRPC_ATTR_NON_COHERENT)))
+ continue;
+ if (map && (map->attr & FASTRPC_ATTR_COHERENT))
+ continue;
+
+ if (buf_page_start(ptr_to_uint64((void *)rpra)) ==
+ buf_page_start(rpra[i].buf.pv)) {
+ inv = 1;
+ continue;
+ }
+ if (map && map->handle)
+ msm_ion_do_cache_op(ctx->fl->apps->client, map->handle,
+ (char *)uint64_to_ptr(rpra[i].buf.pv),
+ rpra[i].buf.len, ION_IOC_INV_CACHES);
+ else
+ dmac_inv_range((char *)uint64_to_ptr(rpra[i].buf.pv),
+ (char *)uint64_to_ptr(rpra[i].buf.pv
+ + rpra[i].buf.len));
+ }
+
+ if (inv || REMOTE_SCALARS_OUTHANDLES(sc))
+ dmac_inv_range(rpra, (char *)rpra + used);
+}
+
+static int fastrpc_invoke_send(struct smq_invoke_ctx *ctx,
+ uint32_t kernel, uint32_t handle)
+{
+ struct smq_msg *msg = &ctx->msg;
+ struct fastrpc_file *fl = ctx->fl;
+ struct fastrpc_channel_ctx *channel_ctx = &fl->apps->channel[fl->cid];
+ int err = 0, len;
+
+ VERIFY(err, 0 != channel_ctx->chan);
+ if (err)
+ goto bail;
+ msg->pid = current->tgid;
+ msg->tid = current->pid;
+ if (kernel)
+ msg->pid = 0;
+ msg->invoke.header.ctx = ptr_to_uint64(ctx) | fl->pd;
+ msg->invoke.header.handle = handle;
+ msg->invoke.header.sc = ctx->sc;
+ msg->invoke.page.addr = ctx->buf ? ctx->buf->phys : 0;
+ msg->invoke.page.size = buf_page_size(ctx->used);
+
+ if (fl->apps->glink) {
+ if (fl->ssrcount != channel_ctx->ssrcount) {
+ err = -ECONNRESET;
+ goto bail;
+ }
+ VERIFY(err, channel_ctx->link.port_state ==
+ FASTRPC_LINK_CONNECTED);
+ if (err)
+ goto bail;
+ err = glink_tx(channel_ctx->chan,
+ (void *)&fl->apps->channel[fl->cid], msg, sizeof(*msg),
+ GLINK_TX_REQ_INTENT);
+ } else {
+ spin_lock(&fl->apps->hlock);
+ len = smd_write((smd_channel_t *)
+ channel_ctx->chan,
+ msg, sizeof(*msg));
+ spin_unlock(&fl->apps->hlock);
+ VERIFY(err, len == sizeof(*msg));
+ }
+ bail:
+ return err;
+}
+
+static void fastrpc_smd_read_handler(int cid)
+{
+ struct fastrpc_apps *me = &gfa;
+ struct smq_invoke_rsp rsp = {0};
+ int ret = 0;
+
+ do {
+ ret = smd_read_from_cb(me->channel[cid].chan, &rsp,
+ sizeof(rsp));
+ if (ret != sizeof(rsp))
+ break;
+ rsp.ctx = rsp.ctx & ~1;
+ context_notify_user(uint64_to_ptr(rsp.ctx), rsp.retval);
+ } while (ret == sizeof(rsp));
+}
+
+static void smd_event_handler(void *priv, unsigned event)
+{
+ struct fastrpc_apps *me = &gfa;
+ int cid = (int)(uintptr_t)priv;
+
+ switch (event) {
+ case SMD_EVENT_OPEN:
+ complete(&me->channel[cid].workport);
+ break;
+ case SMD_EVENT_CLOSE:
+ fastrpc_notify_drivers(me, cid);
+ break;
+ case SMD_EVENT_DATA:
+ fastrpc_smd_read_handler(cid);
+ break;
+ }
+}
+
+static void fastrpc_init(struct fastrpc_apps *me)
+{
+ int i;
+ INIT_HLIST_HEAD(&me->drivers);
+ INIT_HLIST_HEAD(&me->maps);
+ spin_lock_init(&me->hlock);
+ mutex_init(&me->smd_mutex);
+ me->channel = &gcinfo[0];
+ for (i = 0; i < NUM_CHANNELS; i++) {
+ init_completion(&me->channel[i].work);
+ init_completion(&me->channel[i].workport);
+ me->channel[i].sesscount = 0;
+ }
+}
+
+static int fastrpc_release_current_dsp_process(struct fastrpc_file *fl);
+
+static int fastrpc_internal_invoke(struct fastrpc_file *fl, uint32_t mode,
+ uint32_t kernel,
+ struct fastrpc_ioctl_invoke_attrs *inv)
+{
+ struct smq_invoke_ctx *ctx = 0;
+ struct fastrpc_ioctl_invoke *invoke = &inv->inv;
+ int cid = fl->cid;
+ int interrupted = 0;
+ int err = 0;
+ struct timespec invoket;
+
+ if (fl->profile)
+ getnstimeofday(&invoket);
+
+ VERIFY(err, fl->sctx);
+ if (err)
+ goto bail;
+ VERIFY(err, fl->cid >= 0 && fl->cid < NUM_CHANNELS);
+ if (err)
+ goto bail;
+ if (!kernel) {
+ VERIFY(err, 0 == context_restore_interrupted(fl, inv,
+ &ctx));
+ if (err)
+ goto bail;
+ if (fl->sctx->smmu.faults)
+ err = FASTRPC_ENOSUCH;
+ if (err)
+ goto bail;
+ if (ctx)
+ goto wait;
+ }
+
+ VERIFY(err, 0 == context_alloc(fl, kernel, inv, &ctx));
+ if (err)
+ goto bail;
+
+ if (REMOTE_SCALARS_LENGTH(ctx->sc)) {
+ PERF(fl->profile, fl->perf.getargs,
+ VERIFY(err, 0 == get_args(kernel, ctx));
+ PERF_END);
+ if (err)
+ goto bail;
+ }
+
+ PERF(fl->profile, fl->perf.invargs,
+ inv_args_pre(ctx);
+ if (mode == FASTRPC_MODE_SERIAL)
+ inv_args(ctx);
+ PERF_END);
+
+ PERF(fl->profile, fl->perf.link,
+ VERIFY(err, 0 == fastrpc_invoke_send(ctx, kernel, invoke->handle));
+ PERF_END);
+
+ if (err)
+ goto bail;
+
+ PERF(fl->profile, fl->perf.invargs,
+ if (mode == FASTRPC_MODE_PARALLEL)
+ inv_args(ctx);
+ PERF_END);
+ wait:
+ if (kernel)
+ wait_for_completion(&ctx->work);
+ else {
+ interrupted = wait_for_completion_interruptible(&ctx->work);
+ VERIFY(err, 0 == (err = interrupted));
+ if (err)
+ goto bail;
+ }
+ VERIFY(err, 0 == (err = ctx->retval));
+ if (err)
+ goto bail;
+
+ PERF(fl->profile, fl->perf.putargs,
+ VERIFY(err, 0 == put_args(kernel, ctx, invoke->pra));
+ PERF_END);
+ if (err)
+ goto bail;
+ bail:
+ if (ctx && interrupted == -ERESTARTSYS)
+ context_save_interrupted(ctx);
+ else if (ctx)
+ context_free(ctx);
+ if (fl->ssrcount != fl->apps->channel[cid].ssrcount)
+ err = ECONNRESET;
+
+ if (fl->profile && !interrupted) {
+ if (invoke->handle != FASTRPC_STATIC_HANDLE_LISTENER)
+ fl->perf.invoke += getnstimediff(&invoket);
+ if (!(invoke->handle >= 0 &&
+ invoke->handle <= FASTRPC_STATIC_HANDLE_MAX))
+ fl->perf.count++;
+ }
+ return err;
+}
+
+static int fastrpc_channel_open(struct fastrpc_file *fl);
+static int fastrpc_init_process(struct fastrpc_file *fl,
+ struct fastrpc_ioctl_init_attrs *uproc)
+{
+ int err = 0;
+ struct fastrpc_apps *me = &gfa;
+ struct fastrpc_ioctl_invoke_attrs ioctl;
+ struct fastrpc_ioctl_init *init = &uproc->init;
+ struct smq_phy_page pages[1];
+ struct fastrpc_mmap *file = 0, *mem = 0;
+ char *proc_name = NULL;
+ int srcVM[1] = {VMID_HLOS};
+ int destVM[1] = {gcinfo[0].heap_vmid};
+ int destVMperm[1] = {PERM_READ | PERM_WRITE | PERM_EXEC};
+ int hlosVMperm[1] = {PERM_READ | PERM_WRITE | PERM_EXEC};
+
+ VERIFY(err, !fastrpc_channel_open(fl));
+ if (err)
+ goto bail;
+ if (init->flags == FASTRPC_INIT_ATTACH) {
+ remote_arg_t ra[1];
+ int tgid = current->tgid;
+ ra[0].buf.pv = (void *)&tgid;
+ ra[0].buf.len = sizeof(tgid);
+ ioctl.inv.handle = 1;
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(0, 1, 0);
+ ioctl.inv.pra = ra;
+ ioctl.fds = 0;
+ ioctl.attrs = 0;
+ fl->pd = 0;
+ VERIFY(err, !(err = fastrpc_internal_invoke(fl,
+ FASTRPC_MODE_PARALLEL, 1, &ioctl)));
+ if (err)
+ goto bail;
+ } else if (init->flags == FASTRPC_INIT_CREATE) {
+ remote_arg_t ra[6];
+ int fds[6];
+ int mflags = 0;
+ struct {
+ int pgid;
+ int namelen;
+ int filelen;
+ int pageslen;
+ int attrs;
+ int siglen;
+ } inbuf;
+ inbuf.pgid = current->tgid;
+ inbuf.namelen = strlen(current->comm) + 1;
+ inbuf.filelen = init->filelen;
+ fl->pd = 1;
+ if (init->filelen) {
+ VERIFY(err, !fastrpc_mmap_create(fl, init->filefd, 0,
+ init->file, init->filelen, mflags, &file));
+ if (err)
+ goto bail;
+ }
+ inbuf.pageslen = 1;
+ VERIFY(err, !fastrpc_mmap_create(fl, init->memfd, 0,
+ init->mem, init->memlen, mflags, &mem));
+ if (err)
+ goto bail;
+ inbuf.pageslen = 1;
+ ra[0].buf.pv = (void *)&inbuf;
+ ra[0].buf.len = sizeof(inbuf);
+ fds[0] = 0;
+
+ ra[1].buf.pv = (void *)current->comm;
+ ra[1].buf.len = inbuf.namelen;
+ fds[1] = 0;
+
+ ra[2].buf.pv = (void *)init->file;
+ ra[2].buf.len = inbuf.filelen;
+ fds[2] = init->filefd;
+
+ pages[0].addr = mem->phys;
+ pages[0].size = mem->size;
+ ra[3].buf.pv = (void *)pages;
+ ra[3].buf.len = 1 * sizeof(*pages);
+ fds[3] = 0;
+
+ inbuf.attrs = uproc->attrs;
+ ra[4].buf.pv = (void *)&(inbuf.attrs);
+ ra[4].buf.len = sizeof(inbuf.attrs);
+ fds[4] = 0;
+
+ inbuf.siglen = uproc->siglen;
+ ra[5].buf.pv = (void *)&(inbuf.siglen);
+ ra[5].buf.len = sizeof(inbuf.siglen);
+ fds[5] = 0;
+
+ ioctl.inv.handle = 1;
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(6, 4, 0);
+ if (uproc->attrs)
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(7, 6, 0);
+ ioctl.inv.pra = ra;
+ ioctl.fds = fds;
+ ioctl.attrs = 0;
+ VERIFY(err, !(err = fastrpc_internal_invoke(fl,
+ FASTRPC_MODE_PARALLEL, 1, &ioctl)));
+ if (err)
+ goto bail;
+ } else if (init->flags == FASTRPC_INIT_CREATE_STATIC) {
+ remote_arg_t ra[3];
+ uint64_t phys = 0;
+ ssize_t size = 0;
+ int fds[3];
+ struct {
+ int pgid;
+ int namelen;
+ int pageslen;
+ } inbuf;
+
+ if (!init->filelen)
+ goto bail;
+ VERIFY(err, proc_name = kzalloc(init->filelen, GFP_KERNEL));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == copy_from_user(proc_name,
+ (unsigned char *)init->file, init->filelen));
+ if (err)
+ goto bail;
+ inbuf.pgid = current->tgid;
+ inbuf.namelen = init->filelen;
+ inbuf.pageslen = 0;
+ if (!me->staticpd_flags) {
+ inbuf.pageslen = 1;
+ VERIFY(err, !fastrpc_mmap_create(fl, -1, 0, init->mem,
+ init->memlen, ADSP_MMAP_REMOTE_HEAP_ADDR,
+ &mem));
+ if (err)
+ goto bail;
+ phys = mem->phys;
+ size = mem->size;
+ VERIFY(err, !hyp_assign_phys(phys, (uint64_t)size,
+ srcVM, 1, destVM, destVMperm, 1));
+ if (err) {
+ pr_err("ADSPRPC: hyp_assign_phys fail err %d",
+ err);
+ pr_err("map->phys %llx, map->size %d\n",
+ phys, (int)size);
+ goto bail;
+ }
+ me->staticpd_flags = 1;
+ }
+
+ ra[0].buf.pv = (void *)&inbuf;
+ ra[0].buf.len = sizeof(inbuf);
+ fds[0] = 0;
+
+ ra[1].buf.pv = (void *)proc_name;
+ ra[1].buf.len = inbuf.namelen;
+ fds[1] = 0;
+
+ pages[0].addr = phys;
+ pages[0].size = size;
+
+ ra[2].buf.pv = (void *)pages;
+ ra[2].buf.len = sizeof(*pages);
+ fds[2] = 0;
+ ioctl.inv.handle = 1;
+
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(8, 3, 0);
+ ioctl.inv.pra = ra;
+ ioctl.fds = 0;
+ ioctl.attrs = 0;
+ VERIFY(err, !(err = fastrpc_internal_invoke(fl,
+ FASTRPC_MODE_PARALLEL, 1, &ioctl)));
+ if (err)
+ goto bail;
+ } else {
+ err = -ENOTTY;
+ }
+bail:
+ kfree(proc_name);
+ if (err && (init->flags == FASTRPC_INIT_CREATE_STATIC))
+ me->staticpd_flags = 0;
+ if (mem && err) {
+ if (mem->flags == ADSP_MMAP_REMOTE_HEAP_ADDR)
+ hyp_assign_phys(mem->phys, (uint64_t)mem->size,
+ destVM, 1, srcVM, hlosVMperm, 1);
+ fastrpc_mmap_free(mem);
+ }
+ if (file)
+ fastrpc_mmap_free(file);
+ return err;
+}
+
+static int fastrpc_release_current_dsp_process(struct fastrpc_file *fl)
+{
+ int err = 0;
+ struct fastrpc_ioctl_invoke_attrs ioctl;
+ remote_arg_t ra[1];
+ int tgid = 0;
+
+ VERIFY(err, fl->cid >= 0 && fl->cid < NUM_CHANNELS);
+ if (err)
+ goto bail;
+ VERIFY(err, fl->apps->channel[fl->cid].chan != 0);
+ if (err)
+ goto bail;
+ tgid = fl->tgid;
+ ra[0].buf.pv = (void *)&tgid;
+ ra[0].buf.len = sizeof(tgid);
+ ioctl.inv.handle = 1;
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(1, 1, 0);
+ ioctl.inv.pra = ra;
+ ioctl.fds = 0;
+ ioctl.attrs = 0;
+ VERIFY(err, 0 == (err = fastrpc_internal_invoke(fl,
+ FASTRPC_MODE_PARALLEL, 1, &ioctl)));
+bail:
+ return err;
+}
+
+static int fastrpc_mmap_on_dsp(struct fastrpc_file *fl, uint32_t flags,
+ struct fastrpc_mmap *map)
+{
+ struct fastrpc_ioctl_invoke_attrs ioctl;
+ struct smq_phy_page page;
+ int num = 1;
+ remote_arg_t ra[3];
+ int err = 0;
+ struct {
+ int pid;
+ uint32_t flags;
+ uintptr_t vaddrin;
+ int num;
+ } inargs;
+
+ struct {
+ uintptr_t vaddrout;
+ } routargs;
+ inargs.pid = current->tgid;
+ inargs.vaddrin = (uintptr_t)map->va;
+ inargs.flags = flags;
+ inargs.num = fl->apps->compat ? num * sizeof(page) : num;
+ ra[0].buf.pv = (void *)&inargs;
+ ra[0].buf.len = sizeof(inargs);
+ page.addr = map->phys;
+ page.size = map->size;
+ ra[1].buf.pv = (void *)&page;
+ ra[1].buf.len = num * sizeof(page);
+
+ ra[2].buf.pv = (void *)&routargs;
+ ra[2].buf.len = sizeof(routargs);
+
+ ioctl.inv.handle = 1;
+ if (fl->apps->compat)
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(4, 2, 1);
+ else
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(2, 2, 1);
+ ioctl.inv.pra = ra;
+ ioctl.fds = 0;
+ ioctl.attrs = 0;
+ VERIFY(err, 0 == (err = fastrpc_internal_invoke(fl,
+ FASTRPC_MODE_PARALLEL, 1, &ioctl)));
+ map->raddr = (uintptr_t)routargs.vaddrout;
+ if (err)
+ goto bail;
+ if (flags == ADSP_MMAP_HEAP_ADDR) {
+ struct scm_desc desc = {0};
+
+ desc.args[0] = TZ_PIL_AUTH_QDSP6_PROC;
+ desc.args[1] = map->phys;
+ desc.args[2] = map->size;
+ desc.arginfo = SCM_ARGS(3);
+ err = scm_call2(SCM_SIP_FNID(SCM_SVC_PIL,
+ TZ_PIL_PROTECT_MEM_SUBSYS_ID), &desc);
+ } else if (flags == ADSP_MMAP_REMOTE_HEAP_ADDR) {
+
+ int srcVM[1] = {VMID_HLOS};
+ int destVM[1] = {gcinfo[0].heap_vmid};
+ int destVMperm[1] = {PERM_READ | PERM_WRITE | PERM_EXEC};
+
+ VERIFY(err, !hyp_assign_phys(map->phys, (uint64_t)map->size,
+ srcVM, 1, destVM, destVMperm, 1));
+ if (err)
+ goto bail;
+ }
+bail:
+ return err;
+}
+
+static int fastrpc_munmap_on_dsp_rh(struct fastrpc_file *fl,
+ struct fastrpc_mmap *map)
+{
+ int err = 0;
+ int srcVM[1] = {gcinfo[0].heap_vmid};
+ int destVM[1] = {VMID_HLOS};
+ int destVMperm[1] = {PERM_READ | PERM_WRITE | PERM_EXEC};
+
+ if (map->flags == ADSP_MMAP_HEAP_ADDR) {
+ struct fastrpc_ioctl_invoke_attrs ioctl;
+ struct scm_desc desc = {0};
+ remote_arg_t ra[1];
+ int err = 0;
+ struct {
+ uint8_t skey;
+ } routargs;
+
+ ra[0].buf.pv = (void *)&routargs;
+ ra[0].buf.len = sizeof(routargs);
+
+ ioctl.inv.handle = 1;
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(7, 0, 1);
+ ioctl.inv.pra = ra;
+ ioctl.fds = 0;
+ ioctl.attrs = 0;
+ if (fl == NULL)
+ goto bail;
+
+ VERIFY(err, 0 == (err = fastrpc_internal_invoke(fl,
+ FASTRPC_MODE_PARALLEL, 1, &ioctl)));
+ if (err)
+ goto bail;
+ desc.args[0] = TZ_PIL_AUTH_QDSP6_PROC;
+ desc.args[1] = map->phys;
+ desc.args[2] = map->size;
+ desc.args[3] = routargs.skey;
+ desc.arginfo = SCM_ARGS(4);
+ err = scm_call2(SCM_SIP_FNID(SCM_SVC_PIL,
+ TZ_PIL_CLEAR_PROTECT_MEM_SUBSYS_ID), &desc);
+ } else if (map->flags == ADSP_MMAP_REMOTE_HEAP_ADDR) {
+ VERIFY(err, !hyp_assign_phys(map->phys, (uint64_t)map->size,
+ srcVM, 1, destVM, destVMperm, 1));
+ if (err)
+ goto bail;
+ }
+
+bail:
+ return err;
+}
+
+static int fastrpc_munmap_on_dsp(struct fastrpc_file *fl,
+ struct fastrpc_mmap *map)
+{
+ struct fastrpc_ioctl_invoke_attrs ioctl;
+ remote_arg_t ra[1];
+ int err = 0;
+ struct {
+ int pid;
+ uintptr_t vaddrout;
+ ssize_t size;
+ } inargs;
+
+ inargs.pid = current->tgid;
+ inargs.size = map->size;
+ inargs.vaddrout = map->raddr;
+ ra[0].buf.pv = (void *)&inargs;
+ ra[0].buf.len = sizeof(inargs);
+
+ ioctl.inv.handle = 1;
+ if (fl->apps->compat)
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(5, 1, 0);
+ else
+ ioctl.inv.sc = REMOTE_SCALARS_MAKE(3, 1, 0);
+ ioctl.inv.pra = ra;
+ ioctl.fds = 0;
+ ioctl.attrs = 0;
+ VERIFY(err, 0 == (err = fastrpc_internal_invoke(fl,
+ FASTRPC_MODE_PARALLEL, 1, &ioctl)));
+ if (err)
+ goto bail;
+ if (map->flags == ADSP_MMAP_HEAP_ADDR ||
+ map->flags == ADSP_MMAP_REMOTE_HEAP_ADDR) {
+ VERIFY(err, !fastrpc_munmap_on_dsp_rh(fl, map));
+ if (err)
+ goto bail;
+ }
+bail:
+ return err;
+}
+
+static int fastrpc_mmap_remove_ssr(struct fastrpc_file *fl)
+{
+ struct fastrpc_mmap *match = 0, *map = NULL;
+ struct hlist_node *n = NULL;
+ int err = 0, ret = 0;
+ struct fastrpc_apps *me = &gfa;
+ struct ramdump_segment *ramdump_segments_rh = NULL;
+ do {
+ match = 0;
+ spin_lock(&me->hlock);
+ hlist_for_each_entry_safe(map, n, &me->maps, hn) {
+ match = map;
+ hlist_del_init(&map->hn);
+ break;
+ }
+ spin_unlock(&me->hlock);
+
+ if (match) {
+ VERIFY(err, !fastrpc_munmap_on_dsp_rh(fl, match));
+ if (err)
+ goto bail;
+ if (me->channel[0].ramdumpenabled) {
+ ramdump_segments_rh = kcalloc(1,
+ sizeof(struct ramdump_segment), GFP_KERNEL);
+ if (ramdump_segments_rh) {
+ ramdump_segments_rh->address =
+ match->phys;
+ ramdump_segments_rh->size = match->size;
+ ret = do_elf_ramdump(
+ me->channel[0].remoteheap_ramdump_dev,
+ ramdump_segments_rh, 1);
+ if (ret < 0)
+ pr_err("ADSPRPC: unable to dump heap");
+ kfree(ramdump_segments_rh);
+ }
+ }
+ fastrpc_mmap_free(match);
+ }
+ } while (match);
+bail:
+ if (err && match)
+ fastrpc_mmap_add(match);
+ return err;
+}
+
+static int fastrpc_mmap_remove(struct fastrpc_file *fl, uintptr_t va,
+ ssize_t len, struct fastrpc_mmap **ppmap);
+
+static void fastrpc_mmap_add(struct fastrpc_mmap *map);
+
+static int fastrpc_internal_munmap(struct fastrpc_file *fl,
+ struct fastrpc_ioctl_munmap *ud)
+{
+ int err = 0;
+ struct fastrpc_mmap *map = 0;
+
+ VERIFY(err, !fastrpc_mmap_remove(fl, ud->vaddrout, ud->size, &map));
+ if (err)
+ goto bail;
+ VERIFY(err, !fastrpc_munmap_on_dsp(fl, map));
+ if (err)
+ goto bail;
+ fastrpc_mmap_free(map);
+bail:
+ if (err && map)
+ fastrpc_mmap_add(map);
+ return err;
+}
+
+static int fastrpc_internal_mmap(struct fastrpc_file *fl,
+ struct fastrpc_ioctl_mmap *ud)
+{
+
+ struct fastrpc_mmap *map = 0;
+ int err = 0;
+ if (!fastrpc_mmap_find(fl, ud->fd, (uintptr_t)ud->vaddrin, ud->size,
+ ud->flags, &map))
+ return 0;
+
+ VERIFY(err, !fastrpc_mmap_create(fl, ud->fd, 0,
+ (uintptr_t)ud->vaddrin, ud->size, ud->flags, &map));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == fastrpc_mmap_on_dsp(fl, ud->flags, map));
+ if (err)
+ goto bail;
+ ud->vaddrout = map->raddr;
+ bail:
+ if (err && map)
+ fastrpc_mmap_free(map);
+ return err;
+}
+
+static void fastrpc_channel_close(struct kref *kref)
+{
+ struct fastrpc_apps *me = &gfa;
+ struct fastrpc_channel_ctx *ctx;
+ int cid;
+
+ ctx = container_of(kref, struct fastrpc_channel_ctx, kref);
+ cid = ctx - &gcinfo[0];
+ if (!me->glink)
+ smd_close(ctx->chan);
+ else
+ fastrpc_glink_close(ctx->chan, cid);
+
+ ctx->chan = 0;
+ mutex_unlock(&me->smd_mutex);
+ pr_info("'closed /dev/%s c %d %d'\n", gcinfo[cid].name,
+ MAJOR(me->dev_no), cid);
+}
+
+static void fastrpc_context_list_dtor(struct fastrpc_file *fl);
+
+static int fastrpc_session_alloc_locked(struct fastrpc_channel_ctx *chan,
+ int secure, struct fastrpc_session_ctx **session)
+{
+ struct fastrpc_apps *me = &gfa;
+ int idx = 0, err = 0;
+
+ if (chan->sesscount) {
+ for (idx = 0; idx < chan->sesscount; ++idx) {
+ if (!chan->session[idx].used &&
+ chan->session[idx].smmu.secure == secure) {
+ chan->session[idx].used = 1;
+ break;
+ }
+ }
+ VERIFY(err, idx < chan->sesscount);
+ if (err)
+ goto bail;
+ chan->session[idx].smmu.faults = 0;
+ } else {
+ VERIFY(err, me->dev != NULL);
+ if (err)
+ goto bail;
+ chan->session[0].dev = me->dev;
+ chan->session[0].smmu.dev = me->dev;
+ }
+
+ *session = &chan->session[idx];
+ bail:
+ return err;
+}
+
+bool fastrpc_glink_notify_rx_intent_req(void *h, const void *priv, size_t size)
+{
+ if (glink_queue_rx_intent(h, NULL, size))
+ return false;
+ return true;
+}
+
+void fastrpc_glink_notify_tx_done(void *handle, const void *priv,
+ const void *pkt_priv, const void *ptr)
+{
+}
+
+void fastrpc_glink_notify_rx(void *handle, const void *priv,
+ const void *pkt_priv, const void *ptr, size_t size)
+{
+ struct smq_invoke_rsp *rsp = (struct smq_invoke_rsp *)ptr;
+ int len = size;
+
+ while (len >= sizeof(*rsp) && rsp) {
+ rsp->ctx = rsp->ctx & ~1;
+ context_notify_user(uint64_to_ptr(rsp->ctx), rsp->retval);
+ rsp++;
+ len = len - sizeof(*rsp);
+ }
+ glink_rx_done(handle, ptr, true);
+}
+
+void fastrpc_glink_notify_state(void *handle, const void *priv, unsigned event)
+{
+ struct fastrpc_apps *me = &gfa;
+ int cid = (int)(uintptr_t)priv;
+ struct fastrpc_glink_info *link;
+
+ if (cid < 0 || cid >= NUM_CHANNELS)
+ return;
+ link = &me->channel[cid].link;
+ switch (event) {
+ case GLINK_CONNECTED:
+ link->port_state = FASTRPC_LINK_CONNECTED;
+ complete(&me->channel[cid].workport);
+ break;
+ case GLINK_LOCAL_DISCONNECTED:
+ link->port_state = FASTRPC_LINK_DISCONNECTED;
+ break;
+ case GLINK_REMOTE_DISCONNECTED:
+ if (me->channel[cid].chan) {
+ fastrpc_glink_close(me->channel[cid].chan, cid);
+ me->channel[cid].chan = 0;
+ }
+ break;
+ default:
+ break;
+ }
+}
+
+static int fastrpc_session_alloc(struct fastrpc_channel_ctx *chan, int secure,
+ struct fastrpc_session_ctx **session)
+{
+ int err = 0;
+ struct fastrpc_apps *me = &gfa;
+
+ mutex_lock(&me->smd_mutex);
+ if (!*session)
+ err = fastrpc_session_alloc_locked(chan, secure, session);
+ mutex_unlock(&me->smd_mutex);
+ return err;
+}
+
+static void fastrpc_session_free(struct fastrpc_channel_ctx *chan,
+ struct fastrpc_session_ctx *session)
+{
+ struct fastrpc_apps *me = &gfa;
+
+ mutex_lock(&me->smd_mutex);
+ session->used = 0;
+ mutex_unlock(&me->smd_mutex);
+}
+
+static int fastrpc_file_free(struct fastrpc_file *fl)
+{
+ struct hlist_node *n;
+ struct fastrpc_mmap *map = 0;
+ int cid;
+
+ if (!fl)
+ return 0;
+ cid = fl->cid;
+
+ spin_lock(&fl->apps->hlock);
+ hlist_del_init(&fl->hn);
+ spin_unlock(&fl->apps->hlock);
+
+ if (!fl->sctx) {
+ kfree(fl);
+ return 0;
+ }
+ (void)fastrpc_release_current_dsp_process(fl);
+ spin_lock(&fl->hlock);
+ fl->file_close = 1;
+ spin_unlock(&fl->hlock);
+ fastrpc_context_list_dtor(fl);
+ fastrpc_buf_list_free(fl);
+ hlist_for_each_entry_safe(map, n, &fl->maps, hn) {
+ fastrpc_mmap_free(map);
+ }
+ if (fl->ssrcount == fl->apps->channel[cid].ssrcount)
+ kref_put_mutex(&fl->apps->channel[cid].kref,
+ fastrpc_channel_close, &fl->apps->smd_mutex);
+ if (fl->sctx)
+ fastrpc_session_free(&fl->apps->channel[cid], fl->sctx);
+ if (fl->secsctx)
+ fastrpc_session_free(&fl->apps->channel[cid], fl->secsctx);
+ kfree(fl);
+ return 0;
+}
+
+static int fastrpc_device_release(struct inode *inode, struct file *file)
+{
+ struct fastrpc_file *fl = (struct fastrpc_file *)file->private_data;
+
+ if (fl) {
+ if (fl->debugfs_file != NULL)
+ debugfs_remove(fl->debugfs_file);
+ fastrpc_file_free(fl);
+ file->private_data = 0;
+ }
+ return 0;
+}
+
+static void fastrpc_link_state_handler(struct glink_link_state_cb_info *cb_info,
+ void *priv)
+{
+ struct fastrpc_apps *me = &gfa;
+ int cid = (int)((uintptr_t)priv);
+ struct fastrpc_glink_info *link;
+
+ if (cid < 0 || cid >= NUM_CHANNELS)
+ return;
+
+ link = &me->channel[cid].link;
+ switch (cb_info->link_state) {
+ case GLINK_LINK_STATE_UP:
+ link->link_state = FASTRPC_LINK_STATE_UP;
+ complete(&me->channel[cid].work);
+ break;
+ case GLINK_LINK_STATE_DOWN:
+ link->link_state = FASTRPC_LINK_STATE_DOWN;
+ break;
+ default:
+ pr_err("adsprpc: unknown link state %d\n", cb_info->link_state);
+ break;
+ }
+}
+
+static int fastrpc_glink_register(int cid, struct fastrpc_apps *me)
+{
+ int err = 0;
+ struct fastrpc_glink_info *link;
+
+ VERIFY(err, (cid >= 0 && cid < NUM_CHANNELS));
+ if (err)
+ goto bail;
+
+ link = &me->channel[cid].link;
+ if (link->link_notify_handle != NULL)
+ goto bail;
+
+ link->link_info.glink_link_state_notif_cb = fastrpc_link_state_handler;
+ link->link_notify_handle = glink_register_link_state_cb(
+ &link->link_info,
+ (void *)((uintptr_t)cid));
+ VERIFY(err, !IS_ERR_OR_NULL(me->channel[cid].link.link_notify_handle));
+ if (err) {
+ link->link_notify_handle = NULL;
+ goto bail;
+ }
+ VERIFY(err, wait_for_completion_timeout(&me->channel[cid].work,
+ RPC_TIMEOUT));
+bail:
+ return err;
+}
+
+static void fastrpc_glink_close(void *chan, int cid)
+{
+ int err = 0;
+ struct fastrpc_glink_info *link;
+
+ VERIFY(err, (cid >= 0 && cid < NUM_CHANNELS));
+ if (err)
+ return;
+ link = &gfa.channel[cid].link;
+
+ if (link->port_state == FASTRPC_LINK_CONNECTED) {
+ link->port_state = FASTRPC_LINK_DISCONNECTING;
+ glink_close(chan);
+ }
+}
+
+static int fastrpc_glink_open(int cid)
+{
+ int err = 0;
+ void *handle = NULL;
+ struct fastrpc_apps *me = &gfa;
+ struct glink_open_config *cfg;
+ struct fastrpc_glink_info *link;
+
+ VERIFY(err, (cid >= 0 && cid < NUM_CHANNELS));
+ if (err)
+ goto bail;
+ link = &me->channel[cid].link;
+ cfg = &me->channel[cid].link.cfg;
+ VERIFY(err, (link->link_state == FASTRPC_LINK_STATE_UP));
+ if (err)
+ goto bail;
+
+ VERIFY(err, (link->port_state == FASTRPC_LINK_DISCONNECTED));
+ if (err)
+ goto bail;
+
+ link->port_state = FASTRPC_LINK_CONNECTING;
+ cfg->priv = (void *)(uintptr_t)cid;
+ cfg->edge = gcinfo[cid].link.link_info.edge;
+ cfg->transport = gcinfo[cid].link.link_info.transport;
+ cfg->name = FASTRPC_GLINK_GUID;
+ cfg->notify_rx = fastrpc_glink_notify_rx;
+ cfg->notify_tx_done = fastrpc_glink_notify_tx_done;
+ cfg->notify_state = fastrpc_glink_notify_state;
+ cfg->notify_rx_intent_req = fastrpc_glink_notify_rx_intent_req;
+ handle = glink_open(cfg);
+ VERIFY(err, !IS_ERR_OR_NULL(handle));
+ if (err)
+ goto bail;
+ me->channel[cid].chan = handle;
+bail:
+ return err;
+}
+
+static int fastrpc_debugfs_open(struct inode *inode, struct file *filp)
+{
+ filp->private_data = inode->i_private;
+ return 0;
+}
+
+static ssize_t fastrpc_debugfs_read(struct file *filp, char __user *buffer,
+ size_t count, loff_t *position)
+{
+ struct fastrpc_file *fl = filp->private_data;
+ struct hlist_node *n;
+ struct fastrpc_buf *buf = 0;
+ struct fastrpc_mmap *map = 0;
+ struct smq_invoke_ctx *ictx = 0;
+ struct fastrpc_channel_ctx *chan;
+ struct fastrpc_session_ctx *sess;
+ unsigned int len = 0;
+ int i, j, ret = 0;
+ char *fileinfo = NULL;
+
+ fileinfo = kzalloc(DEBUGFS_SIZE, GFP_KERNEL);
+ if (!fileinfo)
+ goto bail;
+ if (fl == NULL) {
+ for (i = 0; i < NUM_CHANNELS; i++) {
+ chan = &gcinfo[i];
+ len += scnprintf(fileinfo + len,
+ DEBUGFS_SIZE - len, "%s\n\n",
+ chan->name);
+ len += scnprintf(fileinfo + len,
+ DEBUGFS_SIZE - len, "%s %d\n",
+ "sesscount:", chan->sesscount);
+ for (j = 0; j < chan->sesscount; j++) {
+ sess = &chan->session[j];
+ len += scnprintf(fileinfo + len,
+ DEBUGFS_SIZE - len,
+ "%s%d\n\n", "SESSION", j);
+ len += scnprintf(fileinfo + len,
+ DEBUGFS_SIZE - len,
+ "%s %d\n", "sid:",
+ sess->smmu.cb);
+ len += scnprintf(fileinfo + len,
+ DEBUGFS_SIZE - len,
+ "%s %d\n", "SECURE:",
+ sess->smmu.secure);
+ }
+ }
+ } else {
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "%s %d\n\n",
+ "PROCESS_ID:", fl->tgid);
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "%s %d\n\n",
+ "CHANNEL_ID:", fl->cid);
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "%s %d\n\n",
+ "SSRCOUNT:", fl->ssrcount);
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "%s\n",
+ "LIST OF BUFS:");
+ spin_lock(&fl->hlock);
+ hlist_for_each_entry_safe(buf, n, &fl->bufs, hn) {
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "%s %pK %s %pK %s %llx\n", "buf:",
+ buf, "buf->virt:", buf->virt,
+ "buf->phys:", buf->phys);
+ }
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "\n%s\n",
+ "LIST OF MAPS:");
+ hlist_for_each_entry_safe(map, n, &fl->maps, hn) {
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "%s %pK %s %lx %s %llx\n",
+ "map:", map,
+ "map->va:", map->va,
+ "map->phys:", map->phys);
+ }
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "\n%s\n",
+ "LIST OF PENDING SMQCONTEXTS:");
+ hlist_for_each_entry_safe(ictx, n, &fl->clst.pending, hn) {
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "%s %pK %s %u %s %u %s %u\n",
+ "smqcontext:", ictx,
+ "sc:", ictx->sc,
+ "tid:", ictx->pid,
+ "handle", ictx->rpra->h);
+ }
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "\n%s\n",
+ "LIST OF INTERRUPTED SMQCONTEXTS:");
+ hlist_for_each_entry_safe(ictx, n, &fl->clst.interrupted, hn) {
+ len += scnprintf(fileinfo + len, DEBUGFS_SIZE - len,
+ "%s %pK %s %u %s %u %s %u\n",
+ "smqcontext:", ictx,
+ "sc:", ictx->sc,
+ "tid:", ictx->pid,
+ "handle", ictx->rpra->h);
+ }
+ spin_unlock(&fl->hlock);
+ }
+ if (len > DEBUGFS_SIZE)
+ len = DEBUGFS_SIZE;
+ ret = simple_read_from_buffer(buffer, count, position, fileinfo, len);
+ kfree(fileinfo);
+bail:
+ return ret;
+}
+
+static const struct file_operations debugfs_fops = {
+ .open = fastrpc_debugfs_open,
+ .read = fastrpc_debugfs_read,
+};
+static int fastrpc_channel_open(struct fastrpc_file *fl)
+{
+ struct fastrpc_apps *me = &gfa;
+ int cid, err = 0;
+
+ mutex_lock(&me->smd_mutex);
+
+ VERIFY(err, fl && fl->sctx);
+ if (err)
+ goto bail;
+ cid = fl->cid;
+ VERIFY(err, cid >= 0 && cid < NUM_CHANNELS);
+ if (err)
+ goto bail;
+ if (me->channel[cid].ssrcount !=
+ me->channel[cid].prevssrcount) {
+ if (!me->channel[cid].issubsystemup) {
+ VERIFY(err, 0);
+ if (err)
+ goto bail;
+ }
+ }
+ fl->ssrcount = me->channel[cid].ssrcount;
+ if ((kref_get_unless_zero(&me->channel[cid].kref) == 0) ||
+ (me->channel[cid].chan == 0)) {
+ if (me->glink) {
+ VERIFY(err, 0 == fastrpc_glink_register(cid, me));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == fastrpc_glink_open(cid));
+ } else {
+ VERIFY(err, !smd_named_open_on_edge(FASTRPC_SMD_GUID,
+ gcinfo[cid].channel,
+ (smd_channel_t **)&me->channel[cid].chan,
+ (void *)(uintptr_t)cid,
+ smd_event_handler));
+ }
+ if (err)
+ goto bail;
+
+ VERIFY(err,
+ wait_for_completion_timeout(&me->channel[cid].workport,
+ RPC_TIMEOUT));
+ if (err) {
+ me->channel[cid].chan = 0;
+ goto bail;
+ }
+ kref_init(&me->channel[cid].kref);
+ pr_info("'opened /dev/%s c %d %d'\n", gcinfo[cid].name,
+ MAJOR(me->dev_no), cid);
+ err = glink_queue_rx_intent(me->channel[cid].chan, NULL, 64);
+ if (err)
+ pr_info("adsprpc: initial intent failed for %d\n", cid);
+ if (cid == 0 && me->channel[cid].ssrcount !=
+ me->channel[cid].prevssrcount) {
+ if (fastrpc_mmap_remove_ssr(fl))
+ pr_err("ADSPRPC: SSR: Failed to unmap remote heap\n");
+ me->channel[cid].prevssrcount =
+ me->channel[cid].ssrcount;
+ }
+ }
+
+bail:
+ mutex_unlock(&me->smd_mutex);
+ return err;
+}
+
+static int fastrpc_device_open(struct inode *inode, struct file *filp)
+{
+ int err = 0;
+ struct dentry *debugfs_file;
+ struct fastrpc_file *fl = 0;
+ struct fastrpc_apps *me = &gfa;
+
+ VERIFY(err, fl = kzalloc(sizeof(*fl), GFP_KERNEL));
+ if (err)
+ return err;
+ debugfs_file = debugfs_create_file(current->comm, 0644, debugfs_root,
+ fl, &debugfs_fops);
+ context_list_ctor(&fl->clst);
+ spin_lock_init(&fl->hlock);
+ INIT_HLIST_HEAD(&fl->maps);
+ INIT_HLIST_HEAD(&fl->bufs);
+ INIT_HLIST_NODE(&fl->hn);
+ fl->tgid = current->tgid;
+ fl->apps = me;
+ fl->mode = FASTRPC_MODE_SERIAL;
+ fl->cid = -1;
+ if (debugfs_file != NULL)
+ fl->debugfs_file = debugfs_file;
+ memset(&fl->perf, 0, sizeof(fl->perf));
+ filp->private_data = fl;
+ spin_lock(&me->hlock);
+ hlist_add_head(&fl->hn, &me->drivers);
+ spin_unlock(&me->hlock);
+ return 0;
+}
+
+static int fastrpc_get_info(struct fastrpc_file *fl, uint32_t *info)
+{
+ int err = 0;
+ uint32_t cid;
+
+ VERIFY(err, fl != 0);
+ if (err)
+ goto bail;
+ if (fl->cid == -1) {
+ cid = *info;
+ VERIFY(err, cid < NUM_CHANNELS);
+ if (err)
+ goto bail;
+ fl->cid = cid;
+ fl->ssrcount = fl->apps->channel[cid].ssrcount;
+ VERIFY(err, !fastrpc_session_alloc_locked(
+ &fl->apps->channel[cid], 0, &fl->sctx));
+ if (err)
+ goto bail;
+ }
+ if (fl->sctx)
+ *info = (fl->sctx->smmu.enabled ? 1 : 0);
+bail:
+ return err;
+}
+
+static long fastrpc_device_ioctl(struct file *file, unsigned int ioctl_num,
+ unsigned long ioctl_param)
+{
+ union {
+ struct fastrpc_ioctl_invoke_attrs inv;
+ struct fastrpc_ioctl_mmap mmap;
+ struct fastrpc_ioctl_munmap munmap;
+ struct fastrpc_ioctl_init_attrs init;
+ struct fastrpc_ioctl_perf perf;
+ } p;
+ void *param = (char *)ioctl_param;
+ struct fastrpc_file *fl = (struct fastrpc_file *)file->private_data;
+ int size = 0, err = 0;
+ uint32_t info;
+
+ p.inv.fds = 0;
+ p.inv.attrs = 0;
+ spin_lock(&fl->hlock);
+ if (fl->file_close == 1) {
+ err = EBADF;
+ pr_warn("ADSPRPC: fastrpc_device_release is happening, So not sending any new requests to DSP");
+ spin_unlock(&fl->hlock);
+ goto bail;
+ }
+ spin_unlock(&fl->hlock);
+
+ switch (ioctl_num) {
+ case FASTRPC_IOCTL_INVOKE:
+ size = sizeof(struct fastrpc_ioctl_invoke);
+ case FASTRPC_IOCTL_INVOKE_FD:
+ if (!size)
+ size = sizeof(struct fastrpc_ioctl_invoke_fd);
+ /* fall through */
+ case FASTRPC_IOCTL_INVOKE_ATTRS:
+ if (!size)
+ size = sizeof(struct fastrpc_ioctl_invoke_attrs);
+ VERIFY(err, 0 == copy_from_user(&p.inv, param, size));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == (err = fastrpc_internal_invoke(fl, fl->mode,
+ 0, &p.inv)));
+ if (err)
+ goto bail;
+ break;
+ case FASTRPC_IOCTL_MMAP:
+ VERIFY(err, 0 == copy_from_user(&p.mmap, param,
+ sizeof(p.mmap)));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == (err = fastrpc_internal_mmap(fl, &p.mmap)));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == copy_to_user(param, &p.mmap, sizeof(p.mmap)));
+ if (err)
+ goto bail;
+ break;
+ case FASTRPC_IOCTL_MUNMAP:
+ VERIFY(err, 0 == copy_from_user(&p.munmap, param,
+ sizeof(p.munmap)));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == (err = fastrpc_internal_munmap(fl,
+ &p.munmap)));
+ if (err)
+ goto bail;
+ break;
+ case FASTRPC_IOCTL_SETMODE:
+ switch ((uint32_t)ioctl_param) {
+ case FASTRPC_MODE_PARALLEL:
+ case FASTRPC_MODE_SERIAL:
+ fl->mode = (uint32_t)ioctl_param;
+ break;
+ case FASTRPC_MODE_PROFILE:
+ fl->profile = (uint32_t)ioctl_param;
+ break;
+ default:
+ err = -ENOTTY;
+ break;
+ }
+ break;
+ case FASTRPC_IOCTL_GETPERF:
+ VERIFY(err, 0 == copy_from_user(&p.perf,
+ param, sizeof(p.perf)));
+ if (err)
+ goto bail;
+ p.perf.numkeys = sizeof(struct fastrpc_perf)/sizeof(int64_t);
+ if (p.perf.keys) {
+ char *keys = PERF_KEYS;
+
+ VERIFY(err, 0 == copy_to_user((char *)p.perf.keys,
+ keys, strlen(keys)+1));
+ if (err)
+ goto bail;
+ }
+ if (p.perf.data) {
+ VERIFY(err, 0 == copy_to_user((int64_t *)p.perf.data,
+ &fl->perf, sizeof(fl->perf)));
+ }
+ VERIFY(err, 0 == copy_to_user(param, &p.perf, sizeof(p.perf)));
+ if (err)
+ goto bail;
+ break;
+ case FASTRPC_IOCTL_GETINFO:
+ VERIFY(err, 0 == copy_from_user(&info, param, sizeof(info)));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == (err = fastrpc_get_info(fl, &info)));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == copy_to_user(param, &info, sizeof(info)));
+ if (err)
+ goto bail;
+ break;
+ case FASTRPC_IOCTL_INIT:
+ p.init.attrs = 0;
+ p.init.siglen = 0;
+ size = sizeof(struct fastrpc_ioctl_init);
+ /* fall through */
+ case FASTRPC_IOCTL_INIT_ATTRS:
+ if (!size)
+ size = sizeof(struct fastrpc_ioctl_init_attrs);
+ VERIFY(err, 0 == copy_from_user(&p.init, param, size));
+ if (err)
+ goto bail;
+ VERIFY(err, p.init.init.filelen >= 0 &&
+ p.init.init.memlen >= 0);
+ if (err)
+ goto bail;
+ VERIFY(err, 0 == fastrpc_init_process(fl, &p.init));
+ if (err)
+ goto bail;
+ break;
+
+ default:
+ err = -ENOTTY;
+ pr_info("bad ioctl: %d\n", ioctl_num);
+ break;
+ }
+ bail:
+ return err;
+}
+
+static int fastrpc_restart_notifier_cb(struct notifier_block *nb,
+ unsigned long code,
+ void *data)
+{
+ struct fastrpc_apps *me = &gfa;
+ struct fastrpc_channel_ctx *ctx;
+ struct notif_data *notifdata = data;
+ int cid;
+
+ ctx = container_of(nb, struct fastrpc_channel_ctx, nb);
+ cid = ctx - &me->channel[0];
+ if (code == SUBSYS_BEFORE_SHUTDOWN) {
+ mutex_lock(&me->smd_mutex);
+ ctx->ssrcount++;
+ ctx->issubsystemup = 0;
+ if (ctx->chan) {
+ if (me->glink)
+ fastrpc_glink_close(ctx->chan, cid);
+ else
+ smd_close(ctx->chan);
+
+ ctx->chan = 0;
+ pr_info("'restart notifier: closed /dev/%s c %d %d'\n",
+ gcinfo[cid].name, MAJOR(me->dev_no), cid);
+ }
+ mutex_unlock(&me->smd_mutex);
+ if (cid == 0)
+ me->staticpd_flags = 0;
+ fastrpc_notify_drivers(me, cid);
+ } else if (code == SUBSYS_RAMDUMP_NOTIFICATION) {
+ if (me->channel[0].remoteheap_ramdump_dev &&
+ notifdata->enable_ramdump) {
+ me->channel[0].ramdumpenabled = 1;
+ }
+ } else if (code == SUBSYS_AFTER_POWERUP) {
+ ctx->issubsystemup = 1;
+ }
+
+ return NOTIFY_DONE;
+}
+
+static int fastrpc_smmu_fault_handler(struct iommu_domain *domain,
+ struct device *dev, unsigned long iova, int flags, void *token)
+{
+ struct fastrpc_session_ctx *sess = (struct fastrpc_session_ctx *)token;
+ int err = 0;
+
+ VERIFY(err, sess != NULL);
+ if (err)
+ return err;
+ sess->smmu.faults++;
+ dev_err(dev, "ADSPRPC context fault: iova=0x%08lx, cb = %d, faults=%d",
+ iova, sess->smmu.cb, sess->smmu.faults);
+ return 0;
+}
+
+static const struct file_operations fops = {
+ .open = fastrpc_device_open,
+ .release = fastrpc_device_release,
+ .unlocked_ioctl = fastrpc_device_ioctl,
+ .compat_ioctl = compat_fastrpc_device_ioctl,
+};
+
+static struct of_device_id fastrpc_match_table[] = {
+ { .compatible = "qcom,msm-fastrpc-adsp", },
+ { .compatible = "qcom,msm-fastrpc-compute-cb", },
+ { .compatible = "qcom,msm-fastrpc-legacy-compute-cb", },
+ { .compatible = "qcom,msm-adsprpc-mem-region", },
+ {}
+};
+
+static int fastrpc_cb_probe(struct device *dev)
+{
+ struct fastrpc_channel_ctx *chan;
+ struct fastrpc_session_ctx *sess;
+ struct of_phandle_args iommuspec;
+ const char *name;
+ unsigned int start = 0x80000000;
+ int err = 0, i;
+ int secure_vmid = VMID_CP_PIXEL;
+
+ VERIFY(err, 0 != (name = of_get_property(dev->of_node, "label", NULL)));
+ if (err)
+ goto bail;
+ for (i = 0; i < NUM_CHANNELS; i++) {
+ if (!gcinfo[i].name)
+ continue;
+ if (!strcmp(name, gcinfo[i].name))
+ break;
+ }
+ VERIFY(err, i < NUM_CHANNELS);
+ if (err)
+ goto bail;
+ chan = &gcinfo[i];
+ VERIFY(err, chan->sesscount < NUM_SESSIONS);
+ if (err)
+ goto bail;
+
+ VERIFY(err, !of_parse_phandle_with_args(dev->of_node, "iommus",
+ "#iommu-cells", 0, &iommuspec));
+ if (err)
+ goto bail;
+ sess = &chan->session[chan->sesscount];
+ sess->smmu.cb = iommuspec.args[0];
+ sess->used = 0;
+ sess->smmu.coherent = of_property_read_bool(dev->of_node,
+ "dma-coherent");
+ sess->smmu.secure = of_property_read_bool(dev->of_node,
+ "qcom,secure-context-bank");
+ if (sess->smmu.secure)
+ start = 0x60000000;
+ VERIFY(err, !IS_ERR_OR_NULL(sess->smmu.mapping =
+ arm_iommu_create_mapping(&platform_bus_type,
+ start, 0x70000000)));
+ if (err)
+ goto bail;
+ iommu_set_fault_handler(sess->smmu.mapping->domain,
+ fastrpc_smmu_fault_handler, sess);
+ if (sess->smmu.secure)
+ iommu_domain_set_attr(sess->smmu.mapping->domain,
+ DOMAIN_ATTR_SECURE_VMID,
+ &secure_vmid);
+
+ VERIFY(err, !arm_iommu_attach_device(dev, sess->smmu.mapping));
+ if (err)
+ goto bail;
+ sess->smmu.dev = dev;
+ sess->smmu.enabled = 1;
+ chan->sesscount++;
+ debugfs_global_file = debugfs_create_file("global", 0644, debugfs_root,
+ NULL, &debugfs_fops);
+
+bail:
+ return err;
+}
+
+static int fastrpc_cb_legacy_probe(struct device *dev)
+{
+ struct device_node *domains_child_node = NULL;
+ struct device_node *ctx_node = NULL;
+ struct fastrpc_channel_ctx *chan;
+ struct fastrpc_session_ctx *first_sess, *sess;
+ const char *name;
+ unsigned int *range = 0, range_size = 0;
+ unsigned int *sids = 0, sids_size = 0;
+ int err = 0, ret = 0, i;
+
+ VERIFY(err, 0 != (domains_child_node = of_get_child_by_name(
+ dev->of_node,
+ "qcom,msm_fastrpc_compute_cb")));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 != (ctx_node = of_parse_phandle(
+ domains_child_node,
+ "qcom,adsp-shared-phandle", 0)));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 != of_get_property(domains_child_node,
+ "qcom,adsp-shared-sids", &sids_size));
+ if (err)
+ goto bail;
+ VERIFY(err, sids = kzalloc(sids_size, GFP_KERNEL));
+ if (err)
+ goto bail;
+ ret = of_property_read_u32_array(domains_child_node,
+ "qcom,adsp-shared-sids",
+ sids,
+ sids_size/sizeof(unsigned int));
+ if (ret)
+ goto bail;
+ VERIFY(err, 0 != (name = of_get_property(ctx_node, "label", NULL)));
+ if (err)
+ goto bail;
+ VERIFY(err, 0 != of_get_property(domains_child_node,
+ "qcom,virtual-addr-pool", &range_size));
+ if (err)
+ goto bail;
+ VERIFY(err, range = kzalloc(range_size, GFP_KERNEL));
+ if (err)
+ goto bail;
+ ret = of_property_read_u32_array(domains_child_node,
+ "qcom,virtual-addr-pool",
+ range,
+ range_size/sizeof(unsigned int));
+ if (ret)
+ goto bail;
+
+ chan = &gcinfo[0];
+ VERIFY(err, chan->sesscount < NUM_SESSIONS);
+ if (err)
+ goto bail;
+ first_sess = &chan->session[chan->sesscount];
+ first_sess->smmu.dev = msm_iommu_get_ctx(name);
+ VERIFY(err, !IS_ERR_OR_NULL(first_sess->smmu.mapping =
+ arm_iommu_create_mapping(
+ msm_iommu_get_bus(first_sess->smmu.dev),
+ range[0], range[1])));
+ if (err)
+ goto bail;
+ VERIFY(err, !arm_iommu_attach_device(first_sess->dev,
+ first_sess->smmu.mapping));
+ if (err)
+ goto bail;
+ for (i = 0; i < sids_size/sizeof(unsigned int); i++) {
+ VERIFY(err, chan->sesscount < NUM_SESSIONS);
+ if (err)
+ goto bail;
+ sess = &chan->session[chan->sesscount];
+ sess->smmu.cb = sids[i];
+ sess->smmu.dev = first_sess->smmu.dev;
+ sess->smmu.enabled = 1;
+ sess->smmu.mapping = first_sess->smmu.mapping;
+ chan->sesscount++;
+ }
+bail:
+ kfree(sids);
+ kfree(range);
+ return err;
+}
+
+static int fastrpc_probe(struct platform_device *pdev)
+{
+ int err = 0;
+ struct fastrpc_apps *me = &gfa;
+ struct device *dev = &pdev->dev;
+
+ if (of_device_is_compatible(dev->of_node,
+ "qcom,msm-fastrpc-compute-cb"))
+ return fastrpc_cb_probe(dev);
+
+ if (of_device_is_compatible(dev->of_node,
+ "qcom,msm-fastrpc-legacy-compute-cb"))
+ return fastrpc_cb_legacy_probe(dev);
+
+ if (of_device_is_compatible(dev->of_node,
+ "qcom,msm-adsprpc-mem-region")) {
+ me->dev = dev;
+ me->channel[0].remoteheap_ramdump_dev =
+ create_ramdump_device("adsp_rh", dev);
+ if (IS_ERR_OR_NULL(me->channel[0].remoteheap_ramdump_dev)) {
+ pr_err("ADSPRPC: Unable to create adsp-remoteheap ramdump device.\n");
+ me->channel[0].remoteheap_ramdump_dev = NULL;
+ }
+ return 0;
+ }
+ if (of_property_read_bool(dev->of_node,
+ "qcom,fastrpc-vmid-heap-shared"))
+ gcinfo[0].heap_vmid = AC_VM_ADSP_HEAP_SHARED;
+ else
+ gcinfo[0].heap_vmid = VMID_ADSP_Q6;
+ pr_info("ADSPRPC: gcinfo[0].heap_vmid %d\n", gcinfo[0].heap_vmid);
+ me->glink = of_property_read_bool(dev->of_node, "qcom,fastrpc-glink");
+ VERIFY(err, !of_platform_populate(pdev->dev.of_node,
+ fastrpc_match_table,
+ NULL, &pdev->dev));
+ if (err)
+ goto bail;
+bail:
+ return err;
+}
+
+static void fastrpc_deinit(void)
+{
+ struct fastrpc_apps *me = &gfa;
+ struct fastrpc_channel_ctx *chan = gcinfo;
+ int i, j;
+
+ for (i = 0; i < NUM_CHANNELS; i++, chan++) {
+ if (chan->chan) {
+ kref_put_mutex(&chan->kref,
+ fastrpc_channel_close, &me->smd_mutex);
+ chan->chan = 0;
+ }
+ for (j = 0; j < NUM_SESSIONS; j++) {
+ struct fastrpc_session_ctx *sess = &chan->session[j];
+ if (sess->smmu.dev) {
+ arm_iommu_detach_device(sess->smmu.dev);
+ sess->smmu.dev = 0;
+ }
+ if (sess->smmu.mapping) {
+ arm_iommu_release_mapping(sess->smmu.mapping);
+ sess->smmu.mapping = 0;
+ }
+ }
+ }
+}
+
+static struct platform_driver fastrpc_driver = {
+ .probe = fastrpc_probe,
+ .driver = {
+ .name = "fastrpc",
+ .owner = THIS_MODULE,
+ .of_match_table = fastrpc_match_table,
+ },
+};
+
+static int __init fastrpc_device_init(void)
+{
+ struct fastrpc_apps *me = &gfa;
+ struct device *dev = 0;
+ int err = 0, i;
+
+ memset(me, 0, sizeof(*me));
+
+ fastrpc_init(me);
+ me->dev = NULL;
+ VERIFY(err, 0 == platform_driver_register(&fastrpc_driver));
+ if (err)
+ goto register_bail;
+ VERIFY(err, 0 == alloc_chrdev_region(&me->dev_no, 0, NUM_CHANNELS,
+ DEVICE_NAME));
+ if (err)
+ goto alloc_chrdev_bail;
+ cdev_init(&me->cdev, &fops);
+ me->cdev.owner = THIS_MODULE;
+ VERIFY(err, 0 == cdev_add(&me->cdev, MKDEV(MAJOR(me->dev_no), 0),
+ 1));
+ if (err)
+ goto cdev_init_bail;
+ me->class = class_create(THIS_MODULE, "fastrpc");
+ VERIFY(err, !IS_ERR(me->class));
+ if (err)
+ goto class_create_bail;
+ me->compat = (NULL == fops.compat_ioctl) ? 0 : 1;
+ dev = device_create(me->class, NULL,
+ MKDEV(MAJOR(me->dev_no), 0),
+ NULL, gcinfo[0].name);
+ VERIFY(err, !IS_ERR_OR_NULL(dev));
+ if (err)
+ goto device_create_bail;
+ for (i = 0; i < NUM_CHANNELS; i++) {
+ me->channel[i].dev = dev;
+ me->channel[i].ssrcount = 0;
+ me->channel[i].prevssrcount = 0;
+ me->channel[i].issubsystemup = 1;
+ me->channel[i].ramdumpenabled = 0;
+ me->channel[i].remoteheap_ramdump_dev = 0;
+ me->channel[i].nb.notifier_call = fastrpc_restart_notifier_cb;
+ me->channel[i].handle = subsys_notif_register_notifier(
+ gcinfo[i].subsys,
+ &me->channel[i].nb);
+ }
+
+ me->client = msm_ion_client_create(DEVICE_NAME);
+ VERIFY(err, !IS_ERR_OR_NULL(me->client));
+ if (err)
+ goto device_create_bail;
+ debugfs_root = debugfs_create_dir("adsprpc", NULL);
+ return 0;
+device_create_bail:
+ for (i = 0; i < NUM_CHANNELS; i++) {
+ if (me->channel[i].handle)
+ subsys_notif_unregister_notifier(me->channel[i].handle,
+ &me->channel[i].nb);
+ }
+ if (!IS_ERR_OR_NULL(dev))
+ device_destroy(me->class, MKDEV(MAJOR(me->dev_no), 0));
+ class_destroy(me->class);
+class_create_bail:
+ cdev_del(&me->cdev);
+cdev_init_bail:
+ unregister_chrdev_region(me->dev_no, NUM_CHANNELS);
+alloc_chrdev_bail:
+register_bail:
+ fastrpc_deinit();
+ return err;
+}
+
+static void __exit fastrpc_device_exit(void)
+{
+ struct fastrpc_apps *me = &gfa;
+ int i;
+
+ fastrpc_file_list_dtor(me);
+ fastrpc_deinit();
+ for (i = 0; i < NUM_CHANNELS; i++) {
+ if (!gcinfo[i].name)
+ continue;
+ device_destroy(me->class, MKDEV(MAJOR(me->dev_no), i));
+ subsys_notif_unregister_notifier(me->channel[i].handle,
+ &me->channel[i].nb);
+ }
+ class_destroy(me->class);
+ cdev_del(&me->cdev);
+ unregister_chrdev_region(me->dev_no, NUM_CHANNELS);
+ ion_client_destroy(me->client);
+ debugfs_remove_recursive(debugfs_root);
+}
+
+late_initcall(fastrpc_device_init);
+module_exit(fastrpc_device_exit);
+
+MODULE_LICENSE("GPL v2");
generated by cgit v1.2.3 (git 2.25.1) at 2025-10-23 21:54:02 +0000