uverbs_main.c 37.2 KB
Newer Older
1 2
/*
 * Copyright (c) 2005 Topspin Communications.  All rights reserved.
3
 * Copyright (c) 2005, 2006 Cisco Systems.  All rights reserved.
4 5
 * Copyright (c) 2005 Mellanox Technologies. All rights reserved.
 * Copyright (c) 2005 Voltaire, Inc. All rights reserved.
6
 * Copyright (c) 2005 PathScale, Inc. All rights reserved.
7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42
 *
 * This software is available to you under a choice of one of two
 * licenses.  You may choose to be licensed under the terms of the GNU
 * General Public License (GPL) Version 2, available from the file
 * COPYING in the main directory of this source tree, or the
 * OpenIB.org BSD license below:
 *
 *     Redistribution and use in source and binary forms, with or
 *     without modification, are permitted provided that the following
 *     conditions are met:
 *
 *      - Redistributions of source code must retain the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer.
 *
 *      - Redistributions in binary form must reproduce the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer in the documentation and/or other materials
 *        provided with the distribution.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 * SOFTWARE.
 */

#include <linux/module.h>
#include <linux/init.h>
#include <linux/device.h>
#include <linux/err.h>
#include <linux/fs.h>
#include <linux/poll.h>
43
#include <linux/sched.h>
44
#include <linux/file.h>
45
#include <linux/cdev.h>
46
#include <linux/anon_inodes.h>
47
#include <linux/slab.h>
48

49
#include <linux/uaccess.h>
50

51 52
#include <rdma/ib.h>

53
#include "uverbs.h"
54
#include "core_priv.h"
55 56 57 58 59 60 61 62 63 64 65 66 67

MODULE_AUTHOR("Roland Dreier");
MODULE_DESCRIPTION("InfiniBand userspace verbs access");
MODULE_LICENSE("Dual BSD/GPL");

enum {
	IB_UVERBS_MAJOR       = 231,
	IB_UVERBS_BASE_MINOR  = 192,
	IB_UVERBS_MAX_DEVICES = 32
};

#define IB_UVERBS_BASE_DEV	MKDEV(IB_UVERBS_MAJOR, IB_UVERBS_BASE_MINOR)

68 69
static struct class *uverbs_class;

70
static DEFINE_SPINLOCK(map_lock);
71 72 73
static DECLARE_BITMAP(dev_map, IB_UVERBS_MAX_DEVICES);

static ssize_t (*uverbs_cmd_table[])(struct ib_uverbs_file *file,
74
				     struct ib_device *ib_dev,
75 76
				     const char __user *buf, int in_len,
				     int out_len) = {
A
Alexander Chiang 已提交
77 78 79 80 81 82
	[IB_USER_VERBS_CMD_GET_CONTEXT]		= ib_uverbs_get_context,
	[IB_USER_VERBS_CMD_QUERY_DEVICE]	= ib_uverbs_query_device,
	[IB_USER_VERBS_CMD_QUERY_PORT]		= ib_uverbs_query_port,
	[IB_USER_VERBS_CMD_ALLOC_PD]		= ib_uverbs_alloc_pd,
	[IB_USER_VERBS_CMD_DEALLOC_PD]		= ib_uverbs_dealloc_pd,
	[IB_USER_VERBS_CMD_REG_MR]		= ib_uverbs_reg_mr,
83
	[IB_USER_VERBS_CMD_REREG_MR]		= ib_uverbs_rereg_mr,
A
Alexander Chiang 已提交
84
	[IB_USER_VERBS_CMD_DEREG_MR]		= ib_uverbs_dereg_mr,
85 86
	[IB_USER_VERBS_CMD_ALLOC_MW]		= ib_uverbs_alloc_mw,
	[IB_USER_VERBS_CMD_DEALLOC_MW]		= ib_uverbs_dealloc_mw,
87
	[IB_USER_VERBS_CMD_CREATE_COMP_CHANNEL] = ib_uverbs_create_comp_channel,
A
Alexander Chiang 已提交
88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107
	[IB_USER_VERBS_CMD_CREATE_CQ]		= ib_uverbs_create_cq,
	[IB_USER_VERBS_CMD_RESIZE_CQ]		= ib_uverbs_resize_cq,
	[IB_USER_VERBS_CMD_POLL_CQ]		= ib_uverbs_poll_cq,
	[IB_USER_VERBS_CMD_REQ_NOTIFY_CQ]	= ib_uverbs_req_notify_cq,
	[IB_USER_VERBS_CMD_DESTROY_CQ]		= ib_uverbs_destroy_cq,
	[IB_USER_VERBS_CMD_CREATE_QP]		= ib_uverbs_create_qp,
	[IB_USER_VERBS_CMD_QUERY_QP]		= ib_uverbs_query_qp,
	[IB_USER_VERBS_CMD_MODIFY_QP]		= ib_uverbs_modify_qp,
	[IB_USER_VERBS_CMD_DESTROY_QP]		= ib_uverbs_destroy_qp,
	[IB_USER_VERBS_CMD_POST_SEND]		= ib_uverbs_post_send,
	[IB_USER_VERBS_CMD_POST_RECV]		= ib_uverbs_post_recv,
	[IB_USER_VERBS_CMD_POST_SRQ_RECV]	= ib_uverbs_post_srq_recv,
	[IB_USER_VERBS_CMD_CREATE_AH]		= ib_uverbs_create_ah,
	[IB_USER_VERBS_CMD_DESTROY_AH]		= ib_uverbs_destroy_ah,
	[IB_USER_VERBS_CMD_ATTACH_MCAST]	= ib_uverbs_attach_mcast,
	[IB_USER_VERBS_CMD_DETACH_MCAST]	= ib_uverbs_detach_mcast,
	[IB_USER_VERBS_CMD_CREATE_SRQ]		= ib_uverbs_create_srq,
	[IB_USER_VERBS_CMD_MODIFY_SRQ]		= ib_uverbs_modify_srq,
	[IB_USER_VERBS_CMD_QUERY_SRQ]		= ib_uverbs_query_srq,
	[IB_USER_VERBS_CMD_DESTROY_SRQ]		= ib_uverbs_destroy_srq,
108 109
	[IB_USER_VERBS_CMD_OPEN_XRCD]		= ib_uverbs_open_xrcd,
	[IB_USER_VERBS_CMD_CLOSE_XRCD]		= ib_uverbs_close_xrcd,
110
	[IB_USER_VERBS_CMD_CREATE_XSRQ]		= ib_uverbs_create_xsrq,
111
	[IB_USER_VERBS_CMD_OPEN_QP]		= ib_uverbs_open_qp,
112 113 114
};

static int (*uverbs_ex_cmd_table[])(struct ib_uverbs_file *file,
115
				    struct ib_device *ib_dev,
116 117 118
				    struct ib_udata *ucore,
				    struct ib_udata *uhw) = {
	[IB_USER_VERBS_EX_CMD_CREATE_FLOW]	= ib_uverbs_ex_create_flow,
119
	[IB_USER_VERBS_EX_CMD_DESTROY_FLOW]	= ib_uverbs_ex_destroy_flow,
120
	[IB_USER_VERBS_EX_CMD_QUERY_DEVICE]	= ib_uverbs_ex_query_device,
121
	[IB_USER_VERBS_EX_CMD_CREATE_CQ]	= ib_uverbs_ex_create_cq,
122
	[IB_USER_VERBS_EX_CMD_CREATE_QP]        = ib_uverbs_ex_create_qp,
Y
Yishai Hadas 已提交
123 124 125
	[IB_USER_VERBS_EX_CMD_CREATE_WQ]        = ib_uverbs_ex_create_wq,
	[IB_USER_VERBS_EX_CMD_MODIFY_WQ]        = ib_uverbs_ex_modify_wq,
	[IB_USER_VERBS_EX_CMD_DESTROY_WQ]       = ib_uverbs_ex_destroy_wq,
126 127
	[IB_USER_VERBS_EX_CMD_CREATE_RWQ_IND_TBL] = ib_uverbs_ex_create_rwq_ind_table,
	[IB_USER_VERBS_EX_CMD_DESTROY_RWQ_IND_TBL] = ib_uverbs_ex_destroy_rwq_ind_table,
128
	[IB_USER_VERBS_EX_CMD_MODIFY_QP]        = ib_uverbs_ex_modify_qp,
129 130 131
};

static void ib_uverbs_add_one(struct ib_device *device);
132
static void ib_uverbs_remove_one(struct ib_device *device, void *client_data);
133

134 135 136 137 138 139 140 141 142 143 144
int uverbs_dealloc_mw(struct ib_mw *mw)
{
	struct ib_pd *pd = mw->pd;
	int ret;

	ret = mw->device->dealloc_mw(mw);
	if (!ret)
		atomic_dec(&pd->usecnt);
	return ret;
}

145
static void ib_uverbs_release_dev(struct kobject *kobj)
146 147
{
	struct ib_uverbs_device *dev =
148
		container_of(kobj, struct ib_uverbs_device, kobj);
149

150
	cleanup_srcu_struct(&dev->disassociate_srcu);
151
	kfree(dev);
152 153
}

154 155 156 157
static struct kobj_type ib_uverbs_dev_ktype = {
	.release = ib_uverbs_release_dev,
};

158 159 160 161 162 163 164 165
static void ib_uverbs_release_event_file(struct kref *ref)
{
	struct ib_uverbs_event_file *file =
		container_of(ref, struct ib_uverbs_event_file, ref);

	kfree(file);
}

166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203
void ib_uverbs_release_ucq(struct ib_uverbs_file *file,
			  struct ib_uverbs_event_file *ev_file,
			  struct ib_ucq_object *uobj)
{
	struct ib_uverbs_event *evt, *tmp;

	if (ev_file) {
		spin_lock_irq(&ev_file->lock);
		list_for_each_entry_safe(evt, tmp, &uobj->comp_list, obj_list) {
			list_del(&evt->list);
			kfree(evt);
		}
		spin_unlock_irq(&ev_file->lock);

		kref_put(&ev_file->ref, ib_uverbs_release_event_file);
	}

	spin_lock_irq(&file->async_file->lock);
	list_for_each_entry_safe(evt, tmp, &uobj->async_list, obj_list) {
		list_del(&evt->list);
		kfree(evt);
	}
	spin_unlock_irq(&file->async_file->lock);
}

void ib_uverbs_release_uevent(struct ib_uverbs_file *file,
			      struct ib_uevent_object *uobj)
{
	struct ib_uverbs_event *evt, *tmp;

	spin_lock_irq(&file->async_file->lock);
	list_for_each_entry_safe(evt, tmp, &uobj->event_list, obj_list) {
		list_del(&evt->list);
		kfree(evt);
	}
	spin_unlock_irq(&file->async_file->lock);
}

204 205 206 207 208 209 210 211 212 213 214 215
static void ib_uverbs_detach_umcast(struct ib_qp *qp,
				    struct ib_uqp_object *uobj)
{
	struct ib_uverbs_mcast_entry *mcast, *tmp;

	list_for_each_entry_safe(mcast, tmp, &uobj->mcast_list, list) {
		ib_detach_mcast(qp, &mcast->gid, mcast->lid);
		list_del(&mcast->list);
		kfree(mcast);
	}
}

216 217
static int ib_uverbs_cleanup_ucontext(struct ib_uverbs_file *file,
				      struct ib_ucontext *context)
218 219 220
{
	struct ib_uobject *uobj, *tmp;

221 222
	context->closing = 1;

223
	list_for_each_entry_safe(uobj, tmp, &context->ah_list, list) {
224 225
		struct ib_ah *ah = uobj->object;

226
		idr_remove_uobj(uobj);
227
		ib_destroy_ah(ah);
228 229
		ib_rdmacg_uncharge(&uobj->cg_obj, context->device,
				   RDMACG_RESOURCE_HCA_OBJECT);
230 231
		kfree(uobj);
	}
232

233 234 235 236
	/* Remove MWs before QPs, in order to support type 2A MWs. */
	list_for_each_entry_safe(uobj, tmp, &context->mw_list, list) {
		struct ib_mw *mw = uobj->object;

237
		idr_remove_uobj(uobj);
238
		uverbs_dealloc_mw(mw);
239 240
		ib_rdmacg_uncharge(&uobj->cg_obj, context->device,
				   RDMACG_RESOURCE_HCA_OBJECT);
241 242 243
		kfree(uobj);
	}

244 245 246
	list_for_each_entry_safe(uobj, tmp, &context->rule_list, list) {
		struct ib_flow *flow_id = uobj->object;

247
		idr_remove_uobj(uobj);
248
		ib_destroy_flow(flow_id);
249 250
		ib_rdmacg_uncharge(&uobj->cg_obj, context->device,
				   RDMACG_RESOURCE_HCA_OBJECT);
251 252 253
		kfree(uobj);
	}

254
	list_for_each_entry_safe(uobj, tmp, &context->qp_list, list) {
255
		struct ib_qp *qp = uobj->object;
256 257
		struct ib_uqp_object *uqp =
			container_of(uobj, struct ib_uqp_object, uevent.uobject);
258

259
		idr_remove_uobj(uobj);
260
		if (qp == qp->real_qp)
261
			ib_uverbs_detach_umcast(qp, uqp);
262
		ib_destroy_qp(qp);
263 264
		ib_rdmacg_uncharge(&uobj->cg_obj, context->device,
				   RDMACG_RESOURCE_HCA_OBJECT);
265 266
		ib_uverbs_release_uevent(file, &uqp->uevent);
		kfree(uqp);
267 268
	}

269 270 271 272
	list_for_each_entry_safe(uobj, tmp, &context->rwq_ind_tbl_list, list) {
		struct ib_rwq_ind_table *rwq_ind_tbl = uobj->object;
		struct ib_wq **ind_tbl = rwq_ind_tbl->ind_tbl;

273
		idr_remove_uobj(uobj);
274 275 276 277 278
		ib_destroy_rwq_ind_table(rwq_ind_tbl);
		kfree(ind_tbl);
		kfree(uobj);
	}

Y
Yishai Hadas 已提交
279 280 281 282 283
	list_for_each_entry_safe(uobj, tmp, &context->wq_list, list) {
		struct ib_wq *wq = uobj->object;
		struct ib_uwq_object *uwq =
			container_of(uobj, struct ib_uwq_object, uevent.uobject);

284
		idr_remove_uobj(uobj);
Y
Yishai Hadas 已提交
285 286 287 288 289
		ib_destroy_wq(wq);
		ib_uverbs_release_uevent(file, &uwq->uevent);
		kfree(uwq);
	}

290 291 292 293 294
	list_for_each_entry_safe(uobj, tmp, &context->srq_list, list) {
		struct ib_srq *srq = uobj->object;
		struct ib_uevent_object *uevent =
			container_of(uobj, struct ib_uevent_object, uobject);

295
		idr_remove_uobj(uobj);
296
		ib_destroy_srq(srq);
297 298
		ib_rdmacg_uncharge(&uobj->cg_obj, context->device,
				   RDMACG_RESOURCE_HCA_OBJECT);
299 300 301 302
		ib_uverbs_release_uevent(file, uevent);
		kfree(uevent);
	}

303
	list_for_each_entry_safe(uobj, tmp, &context->cq_list, list) {
304
		struct ib_cq *cq = uobj->object;
305 306 307
		struct ib_uverbs_event_file *ev_file = cq->cq_context;
		struct ib_ucq_object *ucq =
			container_of(uobj, struct ib_ucq_object, uobject);
308

309
		idr_remove_uobj(uobj);
310
		ib_destroy_cq(cq);
311 312
		ib_rdmacg_uncharge(&uobj->cg_obj, context->device,
				   RDMACG_RESOURCE_HCA_OBJECT);
313 314
		ib_uverbs_release_ucq(file, ev_file, ucq);
		kfree(ucq);
315 316 317
	}

	list_for_each_entry_safe(uobj, tmp, &context->mr_list, list) {
318
		struct ib_mr *mr = uobj->object;
319

320
		idr_remove_uobj(uobj);
321
		ib_dereg_mr(mr);
322 323
		ib_rdmacg_uncharge(&uobj->cg_obj, context->device,
				   RDMACG_RESOURCE_HCA_OBJECT);
324
		kfree(uobj);
325 326
	}

327 328 329 330 331 332
	mutex_lock(&file->device->xrcd_tree_mutex);
	list_for_each_entry_safe(uobj, tmp, &context->xrcd_list, list) {
		struct ib_xrcd *xrcd = uobj->object;
		struct ib_uxrcd_object *uxrcd =
			container_of(uobj, struct ib_uxrcd_object, uobject);

333
		idr_remove_uobj(uobj);
334 335 336 337 338
		ib_uverbs_dealloc_xrcd(file->device, xrcd);
		kfree(uxrcd);
	}
	mutex_unlock(&file->device->xrcd_tree_mutex);

339
	list_for_each_entry_safe(uobj, tmp, &context->pd_list, list) {
340 341
		struct ib_pd *pd = uobj->object;

342
		idr_remove_uobj(uobj);
343
		ib_dealloc_pd(pd);
344 345
		ib_rdmacg_uncharge(&uobj->cg_obj, context->device,
				   RDMACG_RESOURCE_HCA_OBJECT);
346 347 348
		kfree(uobj);
	}

349 350
	put_pid(context->tgid);

351 352 353
	ib_rdmacg_uncharge(&context->cg_obj, context->device,
			   RDMACG_RESOURCE_HCA_HANDLE);

354 355 356
	return context->device->dealloc_ucontext(context);
}

357 358 359 360 361
static void ib_uverbs_comp_dev(struct ib_uverbs_device *dev)
{
	complete(&dev->comp);
}

362 363 364 365
static void ib_uverbs_release_file(struct kref *ref)
{
	struct ib_uverbs_file *file =
		container_of(ref, struct ib_uverbs_file, ref);
366 367 368 369 370 371 372 373 374
	struct ib_device *ib_dev;
	int srcu_key;

	srcu_key = srcu_read_lock(&file->device->disassociate_srcu);
	ib_dev = srcu_dereference(file->device->ib_dev,
				  &file->device->disassociate_srcu);
	if (ib_dev && !ib_dev->disassociate_ucontext)
		module_put(ib_dev->owner);
	srcu_read_unlock(&file->device->disassociate_srcu, srcu_key);
375

376 377
	if (atomic_dec_and_test(&file->device->refcount))
		ib_uverbs_comp_dev(file->device);
378

379 380 381 382 383 384 385
	kfree(file);
}

static ssize_t ib_uverbs_event_read(struct file *filp, char __user *buf,
				    size_t count, loff_t *pos)
{
	struct ib_uverbs_event_file *file = filp->private_data;
386
	struct ib_uverbs_event *event;
387 388 389 390 391
	int eventsz;
	int ret = 0;

	spin_lock_irq(&file->lock);

392
	while (list_empty(&file->event_list)) {
393 394 395 396 397 398
		spin_unlock_irq(&file->lock);

		if (filp->f_flags & O_NONBLOCK)
			return -EAGAIN;

		if (wait_event_interruptible(file->poll_wait,
399 400 401 402 403 404
					     (!list_empty(&file->event_list) ||
			/* The barriers built into wait_event_interruptible()
			 * and wake_up() guarentee this will see the null set
			 * without using RCU
			 */
					     !file->uverbs_file->device->ib_dev)))
405 406
			return -ERESTARTSYS;

407 408 409 410 411
		/* If device was disassociated and no event exists set an error */
		if (list_empty(&file->event_list) &&
		    !file->uverbs_file->device->ib_dev)
			return -EIO;

412 413 414
		spin_lock_irq(&file->lock);
	}

415 416 417
	event = list_entry(file->event_list.next, struct ib_uverbs_event, list);

	if (file->is_async)
418
		eventsz = sizeof (struct ib_uverbs_async_event_desc);
419
	else
420 421 422 423 424
		eventsz = sizeof (struct ib_uverbs_comp_event_desc);

	if (eventsz > count) {
		ret   = -EINVAL;
		event = NULL;
425
	} else {
426
		list_del(file->event_list.next);
427 428 429 430 431
		if (event->counter) {
			++(*event->counter);
			list_del(&event->obj_list);
		}
	}
432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455

	spin_unlock_irq(&file->lock);

	if (event) {
		if (copy_to_user(buf, event, eventsz))
			ret = -EFAULT;
		else
			ret = eventsz;
	}

	kfree(event);

	return ret;
}

static unsigned int ib_uverbs_event_poll(struct file *filp,
					 struct poll_table_struct *wait)
{
	unsigned int pollflags = 0;
	struct ib_uverbs_event_file *file = filp->private_data;

	poll_wait(filp, &file->poll_wait, wait);

	spin_lock_irq(&file->lock);
456
	if (!list_empty(&file->event_list))
457 458 459 460 461 462
		pollflags = POLLIN | POLLRDNORM;
	spin_unlock_irq(&file->lock);

	return pollflags;
}

G
Gleb Natapov 已提交
463 464 465 466 467 468 469
static int ib_uverbs_event_fasync(int fd, struct file *filp, int on)
{
	struct ib_uverbs_event_file *file = filp->private_data;

	return fasync_helper(fd, filp, on, &file->async_queue);
}

470 471 472
static int ib_uverbs_event_close(struct inode *inode, struct file *filp)
{
	struct ib_uverbs_event_file *file = filp->private_data;
473
	struct ib_uverbs_event *entry, *tmp;
474
	int closed_already = 0;
475

476
	mutex_lock(&file->uverbs_file->device->lists_mutex);
477
	spin_lock_irq(&file->lock);
478
	closed_already = file->is_closed;
479
	file->is_closed = 1;
480 481 482 483 484 485
	list_for_each_entry_safe(entry, tmp, &file->event_list, list) {
		if (entry->counter)
			list_del(&entry->obj_list);
		kfree(entry);
	}
	spin_unlock_irq(&file->lock);
486 487 488 489 490 491 492
	if (!closed_already) {
		list_del(&file->list);
		if (file->is_async)
			ib_unregister_event_handler(&file->uverbs_file->
				event_handler);
	}
	mutex_unlock(&file->uverbs_file->device->lists_mutex);
493

494
	kref_put(&file->uverbs_file->ref, ib_uverbs_release_file);
495
	kref_put(&file->ref, ib_uverbs_release_event_file);
496 497 498 499

	return 0;
}

500
static const struct file_operations uverbs_event_fops = {
501
	.owner	 = THIS_MODULE,
A
Alexander Chiang 已提交
502
	.read	 = ib_uverbs_event_read,
503
	.poll    = ib_uverbs_event_poll,
G
Gleb Natapov 已提交
504
	.release = ib_uverbs_event_close,
505 506
	.fasync  = ib_uverbs_event_fasync,
	.llseek	 = no_llseek,
507 508 509 510
};

void ib_uverbs_comp_handler(struct ib_cq *cq, void *cq_context)
{
511 512 513 514 515 516 517 518 519
	struct ib_uverbs_event_file    *file = cq_context;
	struct ib_ucq_object	       *uobj;
	struct ib_uverbs_event	       *entry;
	unsigned long			flags;

	if (!file)
		return;

	spin_lock_irqsave(&file->lock, flags);
520
	if (file->is_closed) {
521 522 523
		spin_unlock_irqrestore(&file->lock, flags);
		return;
	}
524 525

	entry = kmalloc(sizeof *entry, GFP_ATOMIC);
526 527
	if (!entry) {
		spin_unlock_irqrestore(&file->lock, flags);
528
		return;
529
	}
530

531 532 533 534
	uobj = container_of(cq->uobject, struct ib_ucq_object, uobject);

	entry->desc.comp.cq_handle = cq->uobject->user_handle;
	entry->counter		   = &uobj->comp_events_reported;
535

536
	list_add_tail(&entry->list, &file->event_list);
537
	list_add_tail(&entry->obj_list, &uobj->comp_list);
538
	spin_unlock_irqrestore(&file->lock, flags);
539

540 541
	wake_up_interruptible(&file->poll_wait);
	kill_fasync(&file->async_queue, SIGIO, POLL_IN);
542 543 544
}

static void ib_uverbs_async_handler(struct ib_uverbs_file *file,
545 546 547
				    __u64 element, __u64 event,
				    struct list_head *obj_list,
				    u32 *counter)
548
{
549
	struct ib_uverbs_event *entry;
550 551
	unsigned long flags;

552
	spin_lock_irqsave(&file->async_file->lock, flags);
553
	if (file->async_file->is_closed) {
554 555 556 557
		spin_unlock_irqrestore(&file->async_file->lock, flags);
		return;
	}

558
	entry = kmalloc(sizeof *entry, GFP_ATOMIC);
559 560
	if (!entry) {
		spin_unlock_irqrestore(&file->async_file->lock, flags);
561
		return;
562
	}
563

564 565
	entry->desc.async.element    = element;
	entry->desc.async.event_type = event;
566
	entry->desc.async.reserved   = 0;
567
	entry->counter               = counter;
568

569
	list_add_tail(&entry->list, &file->async_file->event_list);
570 571
	if (obj_list)
		list_add_tail(&entry->obj_list, obj_list);
572
	spin_unlock_irqrestore(&file->async_file->lock, flags);
573

574 575
	wake_up_interruptible(&file->async_file->poll_wait);
	kill_fasync(&file->async_file->async_queue, SIGIO, POLL_IN);
576 577 578 579
}

void ib_uverbs_cq_event_handler(struct ib_event *event, void *context_ptr)
{
580 581
	struct ib_ucq_object *uobj = container_of(event->element.cq->uobject,
						  struct ib_ucq_object, uobject);
582

583
	ib_uverbs_async_handler(uobj->uverbs_file, uobj->uobject.user_handle,
584 585
				event->event, &uobj->async_list,
				&uobj->async_events_reported);
586 587 588 589
}

void ib_uverbs_qp_event_handler(struct ib_event *event, void *context_ptr)
{
590 591
	struct ib_uevent_object *uobj;

592 593 594 595
	/* for XRC target qp's, check that qp is live */
	if (!event->element.qp->uobject || !event->element.qp->uobject->live)
		return;

596 597 598 599 600 601
	uobj = container_of(event->element.qp->uobject,
			    struct ib_uevent_object, uobject);

	ib_uverbs_async_handler(context_ptr, uobj->uobject.user_handle,
				event->event, &uobj->event_list,
				&uobj->events_reported);
602 603
}

Y
Yishai Hadas 已提交
604 605 606 607 608 609 610 611 612 613
void ib_uverbs_wq_event_handler(struct ib_event *event, void *context_ptr)
{
	struct ib_uevent_object *uobj = container_of(event->element.wq->uobject,
						  struct ib_uevent_object, uobject);

	ib_uverbs_async_handler(context_ptr, uobj->uobject.user_handle,
				event->event, &uobj->event_list,
				&uobj->events_reported);
}

614 615
void ib_uverbs_srq_event_handler(struct ib_event *event, void *context_ptr)
{
616 617 618 619 620 621 622 623
	struct ib_uevent_object *uobj;

	uobj = container_of(event->element.srq->uobject,
			    struct ib_uevent_object, uobject);

	ib_uverbs_async_handler(context_ptr, uobj->uobject.user_handle,
				event->event, &uobj->event_list,
				&uobj->events_reported);
624 625
}

626 627
void ib_uverbs_event_handler(struct ib_event_handler *handler,
			     struct ib_event *event)
628 629 630 631
{
	struct ib_uverbs_file *file =
		container_of(handler, struct ib_uverbs_file, event_handler);

632 633
	ib_uverbs_async_handler(file, event->element.port_num, event->event,
				NULL, NULL);
634 635
}

636 637 638 639 640 641
void ib_uverbs_free_async_event_file(struct ib_uverbs_file *file)
{
	kref_put(&file->async_file->ref, ib_uverbs_release_event_file);
	file->async_file = NULL;
}

642
struct file *ib_uverbs_alloc_event_file(struct ib_uverbs_file *uverbs_file,
643
					struct ib_device	*ib_dev,
644
					int is_async)
645
{
646
	struct ib_uverbs_event_file *ev_file;
647
	struct file *filp;
648
	int ret;
649

650
	ev_file = kzalloc(sizeof(*ev_file), GFP_KERNEL);
651 652 653 654 655 656 657 658
	if (!ev_file)
		return ERR_PTR(-ENOMEM);

	kref_init(&ev_file->ref);
	spin_lock_init(&ev_file->lock);
	INIT_LIST_HEAD(&ev_file->event_list);
	init_waitqueue_head(&ev_file->poll_wait);
	ev_file->uverbs_file = uverbs_file;
659
	kref_get(&ev_file->uverbs_file->ref);
660
	ev_file->async_queue = NULL;
661
	ev_file->is_closed   = 0;
662

663
	filp = anon_inode_getfile("[infinibandevent]", &uverbs_event_fops,
664
				  ev_file, O_RDONLY);
665
	if (IS_ERR(filp))
666 667
		goto err_put_refs;

668 669 670 671 672
	mutex_lock(&uverbs_file->device->lists_mutex);
	list_add_tail(&ev_file->list,
		      &uverbs_file->device->uverbs_events_file_list);
	mutex_unlock(&uverbs_file->device->lists_mutex);

673 674 675 676 677
	if (is_async) {
		WARN_ON(uverbs_file->async_file);
		uverbs_file->async_file = ev_file;
		kref_get(&uverbs_file->async_file->ref);
		INIT_IB_EVENT_HANDLER(&uverbs_file->event_handler,
678
				      ib_dev,
679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694
				      ib_uverbs_event_handler);
		ret = ib_register_event_handler(&uverbs_file->event_handler);
		if (ret)
			goto err_put_file;

		/* At that point async file stuff was fully set */
		ev_file->is_async = 1;
	}

	return filp;

err_put_file:
	fput(filp);
	kref_put(&uverbs_file->async_file->ref, ib_uverbs_release_event_file);
	uverbs_file->async_file = NULL;
	return ERR_PTR(ret);
695

696 697 698
err_put_refs:
	kref_put(&ev_file->uverbs_file->ref, ib_uverbs_release_file);
	kref_put(&ev_file->ref, ib_uverbs_release_event_file);
699 700 701 702 703 704 705 706 707 708 709
	return filp;
}

/*
 * Look up a completion event file by FD.  If lookup is successful,
 * takes a ref to the event file struct that it returns; if
 * unsuccessful, returns NULL.
 */
struct ib_uverbs_event_file *ib_uverbs_lookup_comp_file(int fd)
{
	struct ib_uverbs_event_file *ev_file = NULL;
710
	struct fd f = fdget(fd);
711

712
	if (!f.file)
713 714
		return NULL;

715
	if (f.file->f_op != &uverbs_event_fops)
716 717
		goto out;

718
	ev_file = f.file->private_data;
719 720 721 722 723 724 725 726
	if (ev_file->is_async) {
		ev_file = NULL;
		goto out;
	}

	kref_get(&ev_file->ref);

out:
727
	fdput(f);
728
	return ev_file;
729 730
}

731 732 733 734 735 736 737 738 739 740 741 742 743 744 745
static int verify_command_mask(struct ib_device *ib_dev, __u32 command)
{
	u64 mask;

	if (command <= IB_USER_VERBS_CMD_OPEN_QP)
		mask = ib_dev->uverbs_cmd_mask;
	else
		mask = ib_dev->uverbs_ex_cmd_mask;

	if (mask & ((u64)1 << command))
		return 0;

	return -1;
}

746 747 748 749
static ssize_t ib_uverbs_write(struct file *filp, const char __user *buf,
			     size_t count, loff_t *pos)
{
	struct ib_uverbs_file *file = filp->private_data;
750
	struct ib_device *ib_dev;
751
	struct ib_uverbs_cmd_hdr hdr;
E
Eli Cohen 已提交
752
	__u32 command;
753
	__u32 flags;
754 755
	int srcu_key;
	ssize_t ret;
756

757 758 759
	if (!ib_safe_file_access(filp)) {
		pr_err_once("uverbs_write: process %d (%s) changed security contexts after opening file descriptor, this is not allowed.\n",
			    task_tgid_vnr(current), current->comm);
760
		return -EACCES;
761
	}
762

763 764 765 766 767 768
	if (count < sizeof hdr)
		return -EINVAL;

	if (copy_from_user(&hdr, buf, sizeof hdr))
		return -EFAULT;

769 770 771 772 773 774 775 776
	srcu_key = srcu_read_lock(&file->device->disassociate_srcu);
	ib_dev = srcu_dereference(file->device->ib_dev,
				  &file->device->disassociate_srcu);
	if (!ib_dev) {
		ret = -EIO;
		goto out;
	}

E
Eli Cohen 已提交
777 778 779 780 781 782 783
	if (hdr.command & ~(__u32)(IB_USER_VERBS_CMD_FLAGS_MASK |
				   IB_USER_VERBS_CMD_COMMAND_MASK)) {
		ret = -EINVAL;
		goto out;
	}

	command = hdr.command & IB_USER_VERBS_CMD_COMMAND_MASK;
784 785 786 787
	if (verify_command_mask(ib_dev, command)) {
		ret = -EOPNOTSUPP;
		goto out;
	}
E
Eli Cohen 已提交
788

789 790 791 792 793 794
	if (!file->ucontext &&
	    command != IB_USER_VERBS_CMD_GET_CONTEXT) {
		ret = -EINVAL;
		goto out;
	}

795 796
	flags = (hdr.command &
		 IB_USER_VERBS_CMD_FLAGS_MASK) >> IB_USER_VERBS_CMD_FLAGS_SHIFT;
797

798 799
	if (!flags) {
		if (command >= ARRAY_SIZE(uverbs_cmd_table) ||
800 801 802 803
		    !uverbs_cmd_table[command]) {
			ret = -EINVAL;
			goto out;
		}
804

805 806 807 808
		if (hdr.in_words * 4 != count) {
			ret = -EINVAL;
			goto out;
		}
809

810
		ret = uverbs_cmd_table[command](file, ib_dev,
811 812 813 814 815 816 817 818 819 820 821
						 buf + sizeof(hdr),
						 hdr.in_words * 4,
						 hdr.out_words * 4);

	} else if (flags == IB_USER_VERBS_CMD_FLAG_EXTENDED) {
		struct ib_uverbs_ex_cmd_hdr ex_hdr;
		struct ib_udata ucore;
		struct ib_udata uhw;
		size_t written_count = count;

		if (command >= ARRAY_SIZE(uverbs_ex_cmd_table) ||
822 823 824 825
		    !uverbs_ex_cmd_table[command]) {
			ret = -ENOSYS;
			goto out;
		}
826

827 828 829 830
		if (!file->ucontext) {
			ret = -EINVAL;
			goto out;
		}
831

832 833 834 835
		if (count < (sizeof(hdr) + sizeof(ex_hdr))) {
			ret = -EINVAL;
			goto out;
		}
836

837 838 839 840
		if (copy_from_user(&ex_hdr, buf + sizeof(hdr), sizeof(ex_hdr))) {
			ret = -EFAULT;
			goto out;
		}
841 842 843 844

		count -= sizeof(hdr) + sizeof(ex_hdr);
		buf += sizeof(hdr) + sizeof(ex_hdr);

845 846 847 848
		if ((hdr.in_words + ex_hdr.provider_in_words) * 8 != count) {
			ret = -EINVAL;
			goto out;
		}
849

850 851 852 853
		if (ex_hdr.cmd_hdr_reserved) {
			ret = -EINVAL;
			goto out;
		}
854

855
		if (ex_hdr.response) {
856 857 858 859
			if (!hdr.out_words && !ex_hdr.provider_out_words) {
				ret = -EINVAL;
				goto out;
			}
860 861 862

			if (!access_ok(VERIFY_WRITE,
				       (void __user *) (unsigned long) ex_hdr.response,
863 864 865 866
				       (hdr.out_words + ex_hdr.provider_out_words) * 8)) {
				ret = -EFAULT;
				goto out;
			}
867
		} else {
868 869 870 871
			if (hdr.out_words || ex_hdr.provider_out_words) {
				ret = -EINVAL;
				goto out;
			}
872 873
		}

874 875 876 877 878 879 880 881
		INIT_UDATA_BUF_OR_NULL(&ucore, buf, (unsigned long) ex_hdr.response,
				       hdr.in_words * 8, hdr.out_words * 8);

		INIT_UDATA_BUF_OR_NULL(&uhw,
				       buf + ucore.inlen,
				       (unsigned long) ex_hdr.response + ucore.outlen,
				       ex_hdr.provider_in_words * 8,
				       ex_hdr.provider_out_words * 8);
882

883
		ret = uverbs_ex_cmd_table[command](file,
884
						   ib_dev,
885 886
						   &ucore,
						   &uhw);
887 888 889 890
		if (!ret)
			ret = written_count;
	} else {
		ret = -ENOSYS;
891
	}
892

893 894 895
out:
	srcu_read_unlock(&file->device->disassociate_srcu, srcu_key);
	return ret;
896 897 898 899 900
}

static int ib_uverbs_mmap(struct file *filp, struct vm_area_struct *vma)
{
	struct ib_uverbs_file *file = filp->private_data;
901 902 903
	struct ib_device *ib_dev;
	int ret = 0;
	int srcu_key;
904

905 906 907 908 909 910 911 912 913 914
	srcu_key = srcu_read_lock(&file->device->disassociate_srcu);
	ib_dev = srcu_dereference(file->device->ib_dev,
				  &file->device->disassociate_srcu);
	if (!ib_dev) {
		ret = -EIO;
		goto out;
	}

	if (!file->ucontext)
		ret = -ENODEV;
915
	else
916 917 918 919
		ret = ib_dev->mmap(file->ucontext, vma);
out:
	srcu_read_unlock(&file->device->disassociate_srcu, srcu_key);
	return ret;
920 921
}

922 923 924
/*
 * ib_uverbs_open() does not need the BKL:
 *
A
Alexander Chiang 已提交
925
 *  - the ib_uverbs_device structures are properly reference counted and
926 927 928
 *    everything else is purely local to the file being created, so
 *    races against other open calls are not a problem;
 *  - there is no ioctl method to race against;
A
Alexander Chiang 已提交
929 930
 *  - the open method will either immediately run -ENXIO, or all
 *    required initialization will be done.
931
 */
932 933
static int ib_uverbs_open(struct inode *inode, struct file *filp)
{
934
	struct ib_uverbs_device *dev;
935
	struct ib_uverbs_file *file;
936
	struct ib_device *ib_dev;
937
	int ret;
938 939
	int module_dependent;
	int srcu_key;
940

A
Alexander Chiang 已提交
941
	dev = container_of(inode->i_cdev, struct ib_uverbs_device, cdev);
942
	if (!atomic_inc_not_zero(&dev->refcount))
943 944
		return -ENXIO;

945 946 947 948 949 950
	srcu_key = srcu_read_lock(&dev->disassociate_srcu);
	mutex_lock(&dev->lists_mutex);
	ib_dev = srcu_dereference(dev->ib_dev,
				  &dev->disassociate_srcu);
	if (!ib_dev) {
		ret = -EIO;
951 952
		goto err;
	}
953

954 955 956 957 958 959 960 961 962 963 964 965 966
	/* In case IB device supports disassociate ucontext, there is no hard
	 * dependency between uverbs device and its low level device.
	 */
	module_dependent = !(ib_dev->disassociate_ucontext);

	if (module_dependent) {
		if (!try_module_get(ib_dev->owner)) {
			ret = -ENODEV;
			goto err;
		}
	}

	file = kzalloc(sizeof(*file), GFP_KERNEL);
967
	if (!file) {
968
		ret = -ENOMEM;
969 970 971 972
		if (module_dependent)
			goto err_module;

		goto err;
973
	}
974

975
	file->device	 = dev;
976 977
	spin_lock_init(&file->idr_lock);
	idr_init(&file->idr);
978 979
	file->ucontext	 = NULL;
	file->async_file = NULL;
980
	kref_init(&file->ref);
981
	mutex_init(&file->mutex);
982
	mutex_init(&file->cleanup_mutex);
983 984

	filp->private_data = file;
985
	kobject_get(&dev->kobj);
986 987 988
	list_add_tail(&file->list, &dev->uverbs_file_list);
	mutex_unlock(&dev->lists_mutex);
	srcu_read_unlock(&dev->disassociate_srcu, srcu_key);
989

990
	return nonseekable_open(inode, filp);
991 992

err_module:
993
	module_put(ib_dev->owner);
994 995

err:
996 997
	mutex_unlock(&dev->lists_mutex);
	srcu_read_unlock(&dev->disassociate_srcu, srcu_key);
998 999 1000
	if (atomic_dec_and_test(&dev->refcount))
		ib_uverbs_comp_dev(dev);

1001
	return ret;
1002 1003 1004 1005 1006
}

static int ib_uverbs_close(struct inode *inode, struct file *filp)
{
	struct ib_uverbs_file *file = filp->private_data;
1007
	struct ib_uverbs_device *dev = file->device;
1008 1009 1010 1011 1012 1013 1014

	mutex_lock(&file->cleanup_mutex);
	if (file->ucontext) {
		ib_uverbs_cleanup_ucontext(file, file->ucontext);
		file->ucontext = NULL;
	}
	mutex_unlock(&file->cleanup_mutex);
1015
	idr_destroy(&file->idr);
1016 1017 1018 1019 1020 1021 1022

	mutex_lock(&file->device->lists_mutex);
	if (!file->is_closed) {
		list_del(&file->list);
		file->is_closed = 1;
	}
	mutex_unlock(&file->device->lists_mutex);
1023 1024 1025

	if (file->async_file)
		kref_put(&file->async_file->ref, ib_uverbs_release_event_file);
1026 1027

	kref_put(&file->ref, ib_uverbs_release_file);
1028
	kobject_put(&dev->kobj);
1029 1030 1031 1032

	return 0;
}

1033
static const struct file_operations uverbs_fops = {
A
Alexander Chiang 已提交
1034 1035 1036
	.owner	 = THIS_MODULE,
	.write	 = ib_uverbs_write,
	.open	 = ib_uverbs_open,
1037 1038
	.release = ib_uverbs_close,
	.llseek	 = no_llseek,
1039 1040
};

1041
static const struct file_operations uverbs_mmap_fops = {
A
Alexander Chiang 已提交
1042 1043
	.owner	 = THIS_MODULE,
	.write	 = ib_uverbs_write,
1044
	.mmap    = ib_uverbs_mmap,
A
Alexander Chiang 已提交
1045
	.open	 = ib_uverbs_open,
1046 1047
	.release = ib_uverbs_close,
	.llseek	 = no_llseek,
1048 1049 1050 1051 1052 1053 1054 1055
};

static struct ib_client uverbs_client = {
	.name   = "uverbs",
	.add    = ib_uverbs_add_one,
	.remove = ib_uverbs_remove_one
};

1056 1057
static ssize_t show_ibdev(struct device *device, struct device_attribute *attr,
			  char *buf)
1058
{
1059 1060
	int ret = -ENODEV;
	int srcu_key;
1061
	struct ib_uverbs_device *dev = dev_get_drvdata(device);
1062
	struct ib_device *ib_dev;
1063 1064 1065

	if (!dev)
		return -ENODEV;
1066

1067 1068 1069 1070 1071 1072 1073
	srcu_key = srcu_read_lock(&dev->disassociate_srcu);
	ib_dev = srcu_dereference(dev->ib_dev, &dev->disassociate_srcu);
	if (ib_dev)
		ret = sprintf(buf, "%s\n", ib_dev->name);
	srcu_read_unlock(&dev->disassociate_srcu, srcu_key);

	return ret;
1074
}
1075
static DEVICE_ATTR(ibdev, S_IRUGO, show_ibdev, NULL);
1076

1077 1078
static ssize_t show_dev_abi_version(struct device *device,
				    struct device_attribute *attr, char *buf)
1079
{
1080
	struct ib_uverbs_device *dev = dev_get_drvdata(device);
1081 1082 1083
	int ret = -ENODEV;
	int srcu_key;
	struct ib_device *ib_dev;
1084 1085 1086

	if (!dev)
		return -ENODEV;
1087 1088 1089 1090 1091
	srcu_key = srcu_read_lock(&dev->disassociate_srcu);
	ib_dev = srcu_dereference(dev->ib_dev, &dev->disassociate_srcu);
	if (ib_dev)
		ret = sprintf(buf, "%d\n", ib_dev->uverbs_abi_ver);
	srcu_read_unlock(&dev->disassociate_srcu, srcu_key);
1092

1093
	return ret;
1094
}
1095
static DEVICE_ATTR(abi_version, S_IRUGO, show_dev_abi_version, NULL);
1096

1097 1098
static CLASS_ATTR_STRING(abi_version, S_IRUGO,
			 __stringify(IB_USER_VERBS_ABI_VERSION));
1099

1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115
static dev_t overflow_maj;
static DECLARE_BITMAP(overflow_map, IB_UVERBS_MAX_DEVICES);

/*
 * If we have more than IB_UVERBS_MAX_DEVICES, dynamically overflow by
 * requesting a new major number and doubling the number of max devices we
 * support. It's stupid, but simple.
 */
static int find_overflow_devnum(void)
{
	int ret;

	if (!overflow_maj) {
		ret = alloc_chrdev_region(&overflow_maj, 0, IB_UVERBS_MAX_DEVICES,
					  "infiniband_verbs");
		if (ret) {
P
Parav Pandit 已提交
1116
			pr_err("user_verbs: couldn't register dynamic device number\n");
1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127
			return ret;
		}
	}

	ret = find_first_zero_bit(overflow_map, IB_UVERBS_MAX_DEVICES);
	if (ret >= IB_UVERBS_MAX_DEVICES)
		return -1;

	return ret;
}

1128 1129
static void ib_uverbs_add_one(struct ib_device *device)
{
1130
	int devnum;
1131
	dev_t base;
1132
	struct ib_uverbs_device *uverbs_dev;
1133
	int ret;
1134 1135 1136 1137

	if (!device->alloc_ucontext)
		return;

R
Roland Dreier 已提交
1138
	uverbs_dev = kzalloc(sizeof *uverbs_dev, GFP_KERNEL);
1139 1140 1141
	if (!uverbs_dev)
		return;

1142 1143 1144 1145 1146 1147
	ret = init_srcu_struct(&uverbs_dev->disassociate_srcu);
	if (ret) {
		kfree(uverbs_dev);
		return;
	}

1148
	atomic_set(&uverbs_dev->refcount, 1);
1149
	init_completion(&uverbs_dev->comp);
1150 1151
	uverbs_dev->xrcd_tree = RB_ROOT;
	mutex_init(&uverbs_dev->xrcd_tree_mutex);
1152
	kobject_init(&uverbs_dev->kobj, &ib_uverbs_dev_ktype);
1153 1154 1155
	mutex_init(&uverbs_dev->lists_mutex);
	INIT_LIST_HEAD(&uverbs_dev->uverbs_file_list);
	INIT_LIST_HEAD(&uverbs_dev->uverbs_events_file_list);
1156

1157
	spin_lock(&map_lock);
1158 1159
	devnum = find_first_zero_bit(dev_map, IB_UVERBS_MAX_DEVICES);
	if (devnum >= IB_UVERBS_MAX_DEVICES) {
1160
		spin_unlock(&map_lock);
1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172
		devnum = find_overflow_devnum();
		if (devnum < 0)
			goto err;

		spin_lock(&map_lock);
		uverbs_dev->devnum = devnum + IB_UVERBS_MAX_DEVICES;
		base = devnum + overflow_maj;
		set_bit(devnum, overflow_map);
	} else {
		uverbs_dev->devnum = devnum;
		base = devnum + IB_UVERBS_BASE_DEV;
		set_bit(devnum, dev_map);
1173 1174 1175
	}
	spin_unlock(&map_lock);

1176
	rcu_assign_pointer(uverbs_dev->ib_dev, device);
1177
	uverbs_dev->num_comp_vectors = device->num_comp_vectors;
1178

1179 1180 1181
	cdev_init(&uverbs_dev->cdev, NULL);
	uverbs_dev->cdev.owner = THIS_MODULE;
	uverbs_dev->cdev.ops = device->mmap ? &uverbs_mmap_fops : &uverbs_fops;
1182
	uverbs_dev->cdev.kobj.parent = &uverbs_dev->kobj;
1183
	kobject_set_name(&uverbs_dev->cdev.kobj, "uverbs%d", uverbs_dev->devnum);
1184
	if (cdev_add(&uverbs_dev->cdev, base, 1))
1185
		goto err_cdev;
1186

1187
	uverbs_dev->dev = device_create(uverbs_class, device->dev.parent,
1188
					uverbs_dev->cdev.dev, uverbs_dev,
1189
					"uverbs%d", uverbs_dev->devnum);
1190
	if (IS_ERR(uverbs_dev->dev))
1191 1192
		goto err_cdev;

1193
	if (device_create_file(uverbs_dev->dev, &dev_attr_ibdev))
1194
		goto err_class;
1195
	if (device_create_file(uverbs_dev->dev, &dev_attr_abi_version))
1196
		goto err_class;
1197 1198 1199 1200 1201 1202

	ib_set_client_data(device, &uverbs_client, uverbs_dev);

	return;

err_class:
1203
	device_destroy(uverbs_class, uverbs_dev->cdev.dev);
1204 1205

err_cdev:
1206
	cdev_del(&uverbs_dev->cdev);
1207 1208 1209 1210
	if (uverbs_dev->devnum < IB_UVERBS_MAX_DEVICES)
		clear_bit(devnum, dev_map);
	else
		clear_bit(devnum, overflow_map);
1211 1212

err:
1213 1214
	if (atomic_dec_and_test(&uverbs_dev->refcount))
		ib_uverbs_comp_dev(uverbs_dev);
1215
	wait_for_completion(&uverbs_dev->comp);
1216
	kobject_put(&uverbs_dev->kobj);
1217 1218 1219
	return;
}

1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241
static void ib_uverbs_free_hw_resources(struct ib_uverbs_device *uverbs_dev,
					struct ib_device *ib_dev)
{
	struct ib_uverbs_file *file;
	struct ib_uverbs_event_file *event_file;
	struct ib_event event;

	/* Pending running commands to terminate */
	synchronize_srcu(&uverbs_dev->disassociate_srcu);
	event.event = IB_EVENT_DEVICE_FATAL;
	event.element.port_num = 0;
	event.device = ib_dev;

	mutex_lock(&uverbs_dev->lists_mutex);
	while (!list_empty(&uverbs_dev->uverbs_file_list)) {
		struct ib_ucontext *ucontext;
		file = list_first_entry(&uverbs_dev->uverbs_file_list,
					struct ib_uverbs_file, list);
		file->is_closed = 1;
		list_del(&file->list);
		kref_get(&file->ref);
		mutex_unlock(&uverbs_dev->lists_mutex);
1242

1243
		ib_uverbs_event_handler(&file->event_handler, &event);
1244 1245 1246 1247 1248 1249 1250 1251 1252

		mutex_lock(&file->cleanup_mutex);
		ucontext = file->ucontext;
		file->ucontext = NULL;
		mutex_unlock(&file->cleanup_mutex);

		/* At this point ib_uverbs_close cannot be running
		 * ib_uverbs_cleanup_ucontext
		 */
1253
		if (ucontext) {
1254 1255 1256 1257 1258 1259
			/* We must release the mutex before going ahead and
			 * calling disassociate_ucontext. disassociate_ucontext
			 * might end up indirectly calling uverbs_close,
			 * for example due to freeing the resources
			 * (e.g mmput).
			 */
1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289
			ib_dev->disassociate_ucontext(ucontext);
			ib_uverbs_cleanup_ucontext(file, ucontext);
		}

		mutex_lock(&uverbs_dev->lists_mutex);
		kref_put(&file->ref, ib_uverbs_release_file);
	}

	while (!list_empty(&uverbs_dev->uverbs_events_file_list)) {
		event_file = list_first_entry(&uverbs_dev->
					      uverbs_events_file_list,
					      struct ib_uverbs_event_file,
					      list);
		spin_lock_irq(&event_file->lock);
		event_file->is_closed = 1;
		spin_unlock_irq(&event_file->lock);

		list_del(&event_file->list);
		if (event_file->is_async) {
			ib_unregister_event_handler(&event_file->uverbs_file->
						    event_handler);
			event_file->uverbs_file->event_handler.device = NULL;
		}

		wake_up_interruptible(&event_file->poll_wait);
		kill_fasync(&event_file->async_queue, SIGIO, POLL_IN);
	}
	mutex_unlock(&uverbs_dev->lists_mutex);
}

1290
static void ib_uverbs_remove_one(struct ib_device *device, void *client_data)
1291
{
1292
	struct ib_uverbs_device *uverbs_dev = client_data;
1293
	int wait_clients = 1;
1294 1295 1296 1297

	if (!uverbs_dev)
		return;

1298
	dev_set_drvdata(uverbs_dev->dev, NULL);
1299 1300
	device_destroy(uverbs_class, uverbs_dev->cdev.dev);
	cdev_del(&uverbs_dev->cdev);
1301

1302 1303 1304 1305
	if (uverbs_dev->devnum < IB_UVERBS_MAX_DEVICES)
		clear_bit(uverbs_dev->devnum, dev_map);
	else
		clear_bit(uverbs_dev->devnum - IB_UVERBS_MAX_DEVICES, overflow_map);
1306

1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323
	if (device->disassociate_ucontext) {
		/* We disassociate HW resources and immediately return.
		 * Userspace will see a EIO errno for all future access.
		 * Upon returning, ib_device may be freed internally and is not
		 * valid any more.
		 * uverbs_device is still available until all clients close
		 * their files, then the uverbs device ref count will be zero
		 * and its resources will be freed.
		 * Note: At this point no more files can be opened since the
		 * cdev was deleted, however active clients can still issue
		 * commands and close their open files.
		 */
		rcu_assign_pointer(uverbs_dev->ib_dev, NULL);
		ib_uverbs_free_hw_resources(uverbs_dev, device);
		wait_clients = 0;
	}

1324 1325
	if (atomic_dec_and_test(&uverbs_dev->refcount))
		ib_uverbs_comp_dev(uverbs_dev);
1326 1327
	if (wait_clients)
		wait_for_completion(&uverbs_dev->comp);
1328
	kobject_put(&uverbs_dev->kobj);
1329 1330
}

1331
static char *uverbs_devnode(struct device *dev, umode_t *mode)
1332
{
1333 1334
	if (mode)
		*mode = 0666;
1335 1336 1337
	return kasprintf(GFP_KERNEL, "infiniband/%s", dev_name(dev));
}

1338 1339 1340 1341 1342 1343 1344
static int __init ib_uverbs_init(void)
{
	int ret;

	ret = register_chrdev_region(IB_UVERBS_BASE_DEV, IB_UVERBS_MAX_DEVICES,
				     "infiniband_verbs");
	if (ret) {
P
Parav Pandit 已提交
1345
		pr_err("user_verbs: couldn't register device number\n");
1346 1347 1348
		goto out;
	}

1349 1350 1351
	uverbs_class = class_create(THIS_MODULE, "infiniband_verbs");
	if (IS_ERR(uverbs_class)) {
		ret = PTR_ERR(uverbs_class);
P
Parav Pandit 已提交
1352
		pr_err("user_verbs: couldn't create class infiniband_verbs\n");
1353 1354 1355
		goto out_chrdev;
	}

1356 1357
	uverbs_class->devnode = uverbs_devnode;

1358
	ret = class_create_file(uverbs_class, &class_attr_abi_version.attr);
1359
	if (ret) {
P
Parav Pandit 已提交
1360
		pr_err("user_verbs: couldn't create abi_version attribute\n");
1361 1362 1363 1364 1365
		goto out_class;
	}

	ret = ib_register_client(&uverbs_client);
	if (ret) {
P
Parav Pandit 已提交
1366
		pr_err("user_verbs: couldn't register client\n");
1367
		goto out_class;
1368 1369 1370 1371 1372
	}

	return 0;

out_class:
1373
	class_destroy(uverbs_class);
1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384

out_chrdev:
	unregister_chrdev_region(IB_UVERBS_BASE_DEV, IB_UVERBS_MAX_DEVICES);

out:
	return ret;
}

static void __exit ib_uverbs_cleanup(void)
{
	ib_unregister_client(&uverbs_client);
1385
	class_destroy(uverbs_class);
1386
	unregister_chrdev_region(IB_UVERBS_BASE_DEV, IB_UVERBS_MAX_DEVICES);
1387 1388
	if (overflow_maj)
		unregister_chrdev_region(overflow_maj, IB_UVERBS_MAX_DEVICES);
1389 1390 1391 1392
}

module_init(ib_uverbs_init);
module_exit(ib_uverbs_cleanup);