mtdchar.c 16.3 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5
/*
 * Character-device access to raw MTD devices.
 *
 */

6 7
#include <linux/device.h>
#include <linux/fs.h>
A
Andrew Morton 已提交
8
#include <linux/mm.h>
9
#include <linux/err.h>
10
#include <linux/init.h>
L
Linus Torvalds 已提交
11 12
#include <linux/kernel.h>
#include <linux/module.h>
13 14 15
#include <linux/slab.h>
#include <linux/sched.h>

L
Linus Torvalds 已提交
16 17 18
#include <linux/mtd/mtd.h>
#include <linux/mtd/compatmac.h>

19
#include <asm/uaccess.h>
20 21

static struct class *mtd_class;
L
Linus Torvalds 已提交
22 23 24 25 26 27

static void mtd_notify_add(struct mtd_info* mtd)
{
	if (!mtd)
		return;

28
	device_create(mtd_class, NULL, MKDEV(MTD_CHAR_MAJOR, mtd->index*2), "mtd%d", mtd->index);
29

30 31
	device_create(mtd_class, NULL,
		      MKDEV(MTD_CHAR_MAJOR, mtd->index*2+1), "mtd%dro", mtd->index);
L
Linus Torvalds 已提交
32 33 34 35 36 37
}

static void mtd_notify_remove(struct mtd_info* mtd)
{
	if (!mtd)
		return;
38

39 40
	device_destroy(mtd_class, MKDEV(MTD_CHAR_MAJOR, mtd->index*2));
	device_destroy(mtd_class, MKDEV(MTD_CHAR_MAJOR, mtd->index*2+1));
L
Linus Torvalds 已提交
41 42 43 44 45 46 47
}

static struct mtd_notifier notifier = {
	.add	= mtd_notify_add,
	.remove	= mtd_notify_remove,
};

48
/*
49 50
 * Data structure to hold the pointer to the mtd device as well
 * as mode information ofr various use cases.
51
 */
52 53 54 55
struct mtd_file_info {
	struct mtd_info *mtd;
	enum mtd_file_modes mode;
};
56

L
Linus Torvalds 已提交
57 58
static loff_t mtd_lseek (struct file *file, loff_t offset, int orig)
{
59 60
	struct mtd_file_info *mfi = file->private_data;
	struct mtd_info *mtd = mfi->mtd;
L
Linus Torvalds 已提交
61 62

	switch (orig) {
63
	case SEEK_SET:
L
Linus Torvalds 已提交
64
		break;
65
	case SEEK_CUR:
66
		offset += file->f_pos;
L
Linus Torvalds 已提交
67
		break;
68
	case SEEK_END:
69
		offset += mtd->size;
L
Linus Torvalds 已提交
70 71 72 73 74
		break;
	default:
		return -EINVAL;
	}

75
	if (offset >= 0 && offset <= mtd->size)
76
		return file->f_pos = offset;
L
Linus Torvalds 已提交
77

78
	return -EINVAL;
L
Linus Torvalds 已提交
79 80 81 82 83 84 85 86 87
}



static int mtd_open(struct inode *inode, struct file *file)
{
	int minor = iminor(inode);
	int devnum = minor >> 1;
	struct mtd_info *mtd;
88
	struct mtd_file_info *mfi;
L
Linus Torvalds 已提交
89 90 91 92 93 94 95 96 97 98 99

	DEBUG(MTD_DEBUG_LEVEL0, "MTD_open\n");

	if (devnum >= MAX_MTD_DEVICES)
		return -ENODEV;

	/* You can't open the RO devices RW */
	if ((file->f_mode & 2) && (minor & 1))
		return -EACCES;

	mtd = get_mtd_device(NULL, devnum);
100

101 102
	if (IS_ERR(mtd))
		return PTR_ERR(mtd);
103

L
Linus Torvalds 已提交
104 105 106 107 108 109 110 111 112 113
	if (MTD_ABSENT == mtd->type) {
		put_mtd_device(mtd);
		return -ENODEV;
	}

	/* You can't open it RW if it's not a writeable device */
	if ((file->f_mode & 2) && !(mtd->flags & MTD_WRITEABLE)) {
		put_mtd_device(mtd);
		return -EACCES;
	}
114

115 116 117 118 119 120 121 122
	mfi = kzalloc(sizeof(*mfi), GFP_KERNEL);
	if (!mfi) {
		put_mtd_device(mtd);
		return -ENOMEM;
	}
	mfi->mtd = mtd;
	file->private_data = mfi;

L
Linus Torvalds 已提交
123 124 125 126 127 128 129
	return 0;
} /* mtd_open */

/*====================================================================*/

static int mtd_close(struct inode *inode, struct file *file)
{
130 131
	struct mtd_file_info *mfi = file->private_data;
	struct mtd_info *mtd = mfi->mtd;
L
Linus Torvalds 已提交
132 133 134

	DEBUG(MTD_DEBUG_LEVEL0, "MTD_close\n");

135 136
	/* Only sync if opened RW */
	if ((file->f_mode & 2) && mtd->sync)
L
Linus Torvalds 已提交
137
		mtd->sync(mtd);
138

L
Linus Torvalds 已提交
139
	put_mtd_device(mtd);
140 141
	file->private_data = NULL;
	kfree(mfi);
L
Linus Torvalds 已提交
142 143 144 145 146 147 148 149 150 151 152

	return 0;
} /* mtd_close */

/* FIXME: This _really_ needs to die. In 2.5, we should lock the
   userspace buffer down and use it directly with readv/writev.
*/
#define MAX_KMALLOC_SIZE 0x20000

static ssize_t mtd_read(struct file *file, char __user *buf, size_t count,loff_t *ppos)
{
153 154
	struct mtd_file_info *mfi = file->private_data;
	struct mtd_info *mtd = mfi->mtd;
L
Linus Torvalds 已提交
155 156 157 158 159
	size_t retlen=0;
	size_t total_retlen=0;
	int ret=0;
	int len;
	char *kbuf;
160

L
Linus Torvalds 已提交
161 162 163 164 165 166 167
	DEBUG(MTD_DEBUG_LEVEL0,"MTD_read\n");

	if (*ppos + count > mtd->size)
		count = mtd->size - *ppos;

	if (!count)
		return 0;
168

L
Linus Torvalds 已提交
169 170
	/* FIXME: Use kiovec in 2.5 to lock down the user's buffers
	   and pass them directly to the MTD functions */
171 172 173 174 175 176 177 178 179

	if (count > MAX_KMALLOC_SIZE)
		kbuf=kmalloc(MAX_KMALLOC_SIZE, GFP_KERNEL);
	else
		kbuf=kmalloc(count, GFP_KERNEL);

	if (!kbuf)
		return -ENOMEM;

L
Linus Torvalds 已提交
180
	while (count) {
181

182
		if (count > MAX_KMALLOC_SIZE)
L
Linus Torvalds 已提交
183 184 185 186
			len = MAX_KMALLOC_SIZE;
		else
			len = count;

187 188
		switch (mfi->mode) {
		case MTD_MODE_OTP_FACTORY:
189 190 191 192 193
			ret = mtd->read_fact_prot_reg(mtd, *ppos, len, &retlen, kbuf);
			break;
		case MTD_MODE_OTP_USER:
			ret = mtd->read_user_prot_reg(mtd, *ppos, len, &retlen, kbuf);
			break;
194 195 196 197 198 199 200 201 202 203 204 205 206
		case MTD_MODE_RAW:
		{
			struct mtd_oob_ops ops;

			ops.mode = MTD_OOB_RAW;
			ops.datbuf = kbuf;
			ops.oobbuf = NULL;
			ops.len = len;

			ret = mtd->read_oob(mtd, *ppos, &ops);
			retlen = ops.retlen;
			break;
		}
207
		default:
208
			ret = mtd->read(mtd, *ppos, len, &retlen, kbuf);
209
		}
L
Linus Torvalds 已提交
210 211
		/* Nand returns -EBADMSG on ecc errors, but it returns
		 * the data. For our userspace tools it is important
212
		 * to dump areas with ecc errors !
213 214 215
		 * For kernel internal usage it also might return -EUCLEAN
		 * to signal the caller that a bitflip has occured and has
		 * been corrected by the ECC algorithm.
L
Linus Torvalds 已提交
216 217 218
		 * Userspace software which accesses NAND this way
		 * must be aware of the fact that it deals with NAND
		 */
219
		if (!ret || (ret == -EUCLEAN) || (ret == -EBADMSG)) {
L
Linus Torvalds 已提交
220 221
			*ppos += retlen;
			if (copy_to_user(buf, kbuf, retlen)) {
222
				kfree(kbuf);
L
Linus Torvalds 已提交
223 224 225 226 227 228 229
				return -EFAULT;
			}
			else
				total_retlen += retlen;

			count -= retlen;
			buf += retlen;
230 231
			if (retlen == 0)
				count = 0;
L
Linus Torvalds 已提交
232 233 234 235 236
		}
		else {
			kfree(kbuf);
			return ret;
		}
237

L
Linus Torvalds 已提交
238 239
	}

240
	kfree(kbuf);
L
Linus Torvalds 已提交
241 242 243 244 245
	return total_retlen;
} /* mtd_read */

static ssize_t mtd_write(struct file *file, const char __user *buf, size_t count,loff_t *ppos)
{
246 247
	struct mtd_file_info *mfi = file->private_data;
	struct mtd_info *mtd = mfi->mtd;
L
Linus Torvalds 已提交
248 249 250 251 252 253 254
	char *kbuf;
	size_t retlen;
	size_t total_retlen=0;
	int ret=0;
	int len;

	DEBUG(MTD_DEBUG_LEVEL0,"MTD_write\n");
255

L
Linus Torvalds 已提交
256 257
	if (*ppos == mtd->size)
		return -ENOSPC;
258

L
Linus Torvalds 已提交
259 260 261 262 263 264
	if (*ppos + count > mtd->size)
		count = mtd->size - *ppos;

	if (!count)
		return 0;

265 266 267 268 269 270 271 272
	if (count > MAX_KMALLOC_SIZE)
		kbuf=kmalloc(MAX_KMALLOC_SIZE, GFP_KERNEL);
	else
		kbuf=kmalloc(count, GFP_KERNEL);

	if (!kbuf)
		return -ENOMEM;

L
Linus Torvalds 已提交
273
	while (count) {
274

275
		if (count > MAX_KMALLOC_SIZE)
L
Linus Torvalds 已提交
276 277 278 279 280 281 282 283
			len = MAX_KMALLOC_SIZE;
		else
			len = count;

		if (copy_from_user(kbuf, buf, len)) {
			kfree(kbuf);
			return -EFAULT;
		}
284

285 286
		switch (mfi->mode) {
		case MTD_MODE_OTP_FACTORY:
287 288 289 290 291 292 293 294 295
			ret = -EROFS;
			break;
		case MTD_MODE_OTP_USER:
			if (!mtd->write_user_prot_reg) {
				ret = -EOPNOTSUPP;
				break;
			}
			ret = mtd->write_user_prot_reg(mtd, *ppos, len, &retlen, kbuf);
			break;
296 297 298 299 300 301 302 303 304 305 306 307 308 309 310

		case MTD_MODE_RAW:
		{
			struct mtd_oob_ops ops;

			ops.mode = MTD_OOB_RAW;
			ops.datbuf = kbuf;
			ops.oobbuf = NULL;
			ops.len = len;

			ret = mtd->write_oob(mtd, *ppos, &ops);
			retlen = ops.retlen;
			break;
		}

311 312 313
		default:
			ret = (*(mtd->write))(mtd, *ppos, len, &retlen, kbuf);
		}
L
Linus Torvalds 已提交
314 315 316 317 318 319 320 321 322 323 324 325
		if (!ret) {
			*ppos += retlen;
			total_retlen += retlen;
			count -= retlen;
			buf += retlen;
		}
		else {
			kfree(kbuf);
			return ret;
		}
	}

326
	kfree(kbuf);
L
Linus Torvalds 已提交
327 328 329 330 331 332 333 334 335 336 337 338 339
	return total_retlen;
} /* mtd_write */

/*======================================================================

    IOCTL calls for getting device parameters.

======================================================================*/
static void mtdchar_erase_callback (struct erase_info *instr)
{
	wake_up((wait_queue_head_t *)instr->priv);
}

340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369
#if defined(CONFIG_MTD_OTP) || defined(CONFIG_MTD_ONENAND_OTP)
static int otp_select_filemode(struct mtd_file_info *mfi, int mode)
{
	struct mtd_info *mtd = mfi->mtd;
	int ret = 0;

	switch (mode) {
	case MTD_OTP_FACTORY:
		if (!mtd->read_fact_prot_reg)
			ret = -EOPNOTSUPP;
		else
			mfi->mode = MTD_MODE_OTP_FACTORY;
		break;
	case MTD_OTP_USER:
		if (!mtd->read_fact_prot_reg)
			ret = -EOPNOTSUPP;
		else
			mfi->mode = MTD_MODE_OTP_USER;
		break;
	default:
		ret = -EINVAL;
	case MTD_OTP_OFF:
		break;
	}
	return ret;
}
#else
# define otp_select_filemode(f,m)	-EOPNOTSUPP
#endif

L
Linus Torvalds 已提交
370 371 372
static int mtd_ioctl(struct inode *inode, struct file *file,
		     u_int cmd, u_long arg)
{
373 374
	struct mtd_file_info *mfi = file->private_data;
	struct mtd_info *mtd = mfi->mtd;
L
Linus Torvalds 已提交
375 376 377
	void __user *argp = (void __user *)arg;
	int ret = 0;
	u_long size;
378
	struct mtd_info_user info;
379

L
Linus Torvalds 已提交
380 381 382 383 384 385 386 387 388 389 390
	DEBUG(MTD_DEBUG_LEVEL0, "MTD_ioctl\n");

	size = (cmd & IOCSIZE_MASK) >> IOCSIZE_SHIFT;
	if (cmd & IOC_IN) {
		if (!access_ok(VERIFY_READ, argp, size))
			return -EFAULT;
	}
	if (cmd & IOC_OUT) {
		if (!access_ok(VERIFY_WRITE, argp, size))
			return -EFAULT;
	}
391

L
Linus Torvalds 已提交
392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413
	switch (cmd) {
	case MEMGETREGIONCOUNT:
		if (copy_to_user(argp, &(mtd->numeraseregions), sizeof(int)))
			return -EFAULT;
		break;

	case MEMGETREGIONINFO:
	{
		struct region_info_user ur;

		if (copy_from_user(&ur, argp, sizeof(struct region_info_user)))
			return -EFAULT;

		if (ur.regionindex >= mtd->numeraseregions)
			return -EINVAL;
		if (copy_to_user(argp, &(mtd->eraseregions[ur.regionindex]),
				sizeof(struct mtd_erase_region_info)))
			return -EFAULT;
		break;
	}

	case MEMGETINFO:
414 415 416 417 418 419
		info.type	= mtd->type;
		info.flags	= mtd->flags;
		info.size	= mtd->size;
		info.erasesize	= mtd->erasesize;
		info.writesize	= mtd->writesize;
		info.oobsize	= mtd->oobsize;
420 421 422
		/* The below fields are obsolete */
		info.ecctype	= -1;
		info.eccsize	= 0;
423
		if (copy_to_user(argp, &info, sizeof(struct mtd_info_user)))
L
Linus Torvalds 已提交
424 425 426 427 428 429 430 431 432 433
			return -EFAULT;
		break;

	case MEMERASE:
	{
		struct erase_info *erase;

		if(!(file->f_mode & 2))
			return -EPERM;

434
		erase=kzalloc(sizeof(struct erase_info),GFP_KERNEL);
L
Linus Torvalds 已提交
435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450
		if (!erase)
			ret = -ENOMEM;
		else {
			wait_queue_head_t waitq;
			DECLARE_WAITQUEUE(wait, current);

			init_waitqueue_head(&waitq);

			if (copy_from_user(&erase->addr, argp,
				    sizeof(struct erase_info_user))) {
				kfree(erase);
				return -EFAULT;
			}
			erase->mtd = mtd;
			erase->callback = mtdchar_erase_callback;
			erase->priv = (unsigned long)&waitq;
451

L
Linus Torvalds 已提交
452 453 454
			/*
			  FIXME: Allow INTERRUPTIBLE. Which means
			  not having the wait_queue head on the stack.
455

L
Linus Torvalds 已提交
456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480
			  If the wq_head is on the stack, and we
			  leave because we got interrupted, then the
			  wq_head is no longer there when the
			  callback routine tries to wake us up.
			*/
			ret = mtd->erase(mtd, erase);
			if (!ret) {
				set_current_state(TASK_UNINTERRUPTIBLE);
				add_wait_queue(&waitq, &wait);
				if (erase->state != MTD_ERASE_DONE &&
				    erase->state != MTD_ERASE_FAILED)
					schedule();
				remove_wait_queue(&waitq, &wait);
				set_current_state(TASK_RUNNING);

				ret = (erase->state == MTD_ERASE_FAILED)?-EIO:0;
			}
			kfree(erase);
		}
		break;
	}

	case MEMWRITEOOB:
	{
		struct mtd_oob_buf buf;
481
		struct mtd_oob_ops ops;
482
		struct mtd_oob_buf __user *user_buf = argp;
483
	        uint32_t retlen;
484

L
Linus Torvalds 已提交
485 486 487 488 489
		if(!(file->f_mode & 2))
			return -EPERM;

		if (copy_from_user(&buf, argp, sizeof(struct mtd_oob_buf)))
			return -EFAULT;
490

491
		if (buf.length > 4096)
L
Linus Torvalds 已提交
492 493 494 495 496 497 498 499 500 501 502
			return -EINVAL;

		if (!mtd->write_oob)
			ret = -EOPNOTSUPP;
		else
			ret = access_ok(VERIFY_READ, buf.ptr,
					buf.length) ? 0 : EFAULT;

		if (ret)
			return ret;

503
		ops.ooblen = buf.length;
504 505 506 507
		ops.ooboffs = buf.start & (mtd->oobsize - 1);
		ops.datbuf = NULL;
		ops.mode = MTD_OOB_PLACE;

508
		if (ops.ooboffs && ops.ooblen > (mtd->oobsize - ops.ooboffs))
509 510 511 512
			return -EINVAL;

		ops.oobbuf = kmalloc(buf.length, GFP_KERNEL);
		if (!ops.oobbuf)
L
Linus Torvalds 已提交
513
			return -ENOMEM;
514

515 516
		if (copy_from_user(ops.oobbuf, buf.ptr, buf.length)) {
			kfree(ops.oobbuf);
L
Linus Torvalds 已提交
517 518 519
			return -EFAULT;
		}

520 521
		buf.start &= ~(mtd->oobsize - 1);
		ret = mtd->write_oob(mtd, buf.start, &ops);
L
Linus Torvalds 已提交
522

523 524 525
		if (ops.oobretlen > 0xFFFFFFFFU)
			ret = -EOVERFLOW;
		retlen = ops.oobretlen;
526
		if (copy_to_user(&user_buf->length, &retlen, sizeof(buf.length)))
L
Linus Torvalds 已提交
527 528
			ret = -EFAULT;

529
		kfree(ops.oobbuf);
L
Linus Torvalds 已提交
530 531 532 533 534 535 536
		break;

	}

	case MEMREADOOB:
	{
		struct mtd_oob_buf buf;
537
		struct mtd_oob_ops ops;
L
Linus Torvalds 已提交
538 539 540

		if (copy_from_user(&buf, argp, sizeof(struct mtd_oob_buf)))
			return -EFAULT;
541

542
		if (buf.length > 4096)
L
Linus Torvalds 已提交
543 544 545 546 547 548 549 550 551 552
			return -EINVAL;

		if (!mtd->read_oob)
			ret = -EOPNOTSUPP;
		else
			ret = access_ok(VERIFY_WRITE, buf.ptr,
					buf.length) ? 0 : -EFAULT;
		if (ret)
			return ret;

553
		ops.ooblen = buf.length;
554 555 556 557
		ops.ooboffs = buf.start & (mtd->oobsize - 1);
		ops.datbuf = NULL;
		ops.mode = MTD_OOB_PLACE;

558
		if (ops.ooboffs && ops.ooblen > (mtd->oobsize - ops.ooboffs))
559 560 561 562
			return -EINVAL;

		ops.oobbuf = kmalloc(buf.length, GFP_KERNEL);
		if (!ops.oobbuf)
L
Linus Torvalds 已提交
563
			return -ENOMEM;
564

565 566
		buf.start &= ~(mtd->oobsize - 1);
		ret = mtd->read_oob(mtd, buf.start, &ops);
L
Linus Torvalds 已提交
567

568
		if (put_user(ops.oobretlen, (uint32_t __user *)argp))
L
Linus Torvalds 已提交
569
			ret = -EFAULT;
570 571
		else if (ops.oobretlen && copy_to_user(buf.ptr, ops.oobbuf,
						    ops.oobretlen))
L
Linus Torvalds 已提交
572
			ret = -EFAULT;
573

574
		kfree(ops.oobbuf);
L
Linus Torvalds 已提交
575 576 577 578 579
		break;
	}

	case MEMLOCK:
	{
580
		struct erase_info_user einfo;
L
Linus Torvalds 已提交
581

582
		if (copy_from_user(&einfo, argp, sizeof(einfo)))
L
Linus Torvalds 已提交
583 584 585 586 587
			return -EFAULT;

		if (!mtd->lock)
			ret = -EOPNOTSUPP;
		else
588
			ret = mtd->lock(mtd, einfo.start, einfo.length);
L
Linus Torvalds 已提交
589 590 591 592 593
		break;
	}

	case MEMUNLOCK:
	{
594
		struct erase_info_user einfo;
L
Linus Torvalds 已提交
595

596
		if (copy_from_user(&einfo, argp, sizeof(einfo)))
L
Linus Torvalds 已提交
597 598 599 600 601
			return -EFAULT;

		if (!mtd->unlock)
			ret = -EOPNOTSUPP;
		else
602
			ret = mtd->unlock(mtd, einfo.start, einfo.length);
L
Linus Torvalds 已提交
603 604 605
		break;
	}

606
	/* Legacy interface */
L
Linus Torvalds 已提交
607 608
	case MEMGETOOBSEL:
	{
609 610 611 612 613 614 615 616 617 618 619
		struct nand_oobinfo oi;

		if (!mtd->ecclayout)
			return -EOPNOTSUPP;
		if (mtd->ecclayout->eccbytes > ARRAY_SIZE(oi.eccpos))
			return -EINVAL;

		oi.useecc = MTD_NANDECC_AUTOPLACE;
		memcpy(&oi.eccpos, mtd->ecclayout->eccpos, sizeof(oi.eccpos));
		memcpy(&oi.oobfree, mtd->ecclayout->oobfree,
		       sizeof(oi.oobfree));
620
		oi.eccbytes = mtd->ecclayout->eccbytes;
621 622

		if (copy_to_user(argp, &oi, sizeof(struct nand_oobinfo)))
L
Linus Torvalds 已提交
623 624 625 626 627 628 629
			return -EFAULT;
		break;
	}

	case MEMGETBADBLOCK:
	{
		loff_t offs;
630

L
Linus Torvalds 已提交
631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652
		if (copy_from_user(&offs, argp, sizeof(loff_t)))
			return -EFAULT;
		if (!mtd->block_isbad)
			ret = -EOPNOTSUPP;
		else
			return mtd->block_isbad(mtd, offs);
		break;
	}

	case MEMSETBADBLOCK:
	{
		loff_t offs;

		if (copy_from_user(&offs, argp, sizeof(loff_t)))
			return -EFAULT;
		if (!mtd->block_markbad)
			ret = -EOPNOTSUPP;
		else
			return mtd->block_markbad(mtd, offs);
		break;
	}

653
#if defined(CONFIG_MTD_OTP) || defined(CONFIG_MTD_ONENAND_OTP)
654 655 656 657 658
	case OTPSELECT:
	{
		int mode;
		if (copy_from_user(&mode, argp, sizeof(int)))
			return -EFAULT;
659 660 661 662 663

		mfi->mode = MTD_MODE_NORMAL;

		ret = otp_select_filemode(mfi, mode);

664
		file->f_pos = 0;
665 666 667 668 669 670 671 672 673 674
		break;
	}

	case OTPGETREGIONCOUNT:
	case OTPGETREGIONINFO:
	{
		struct otp_info *buf = kmalloc(4096, GFP_KERNEL);
		if (!buf)
			return -ENOMEM;
		ret = -EOPNOTSUPP;
675 676
		switch (mfi->mode) {
		case MTD_MODE_OTP_FACTORY:
677 678 679 680 681 682 683
			if (mtd->get_fact_prot_info)
				ret = mtd->get_fact_prot_info(mtd, buf, 4096);
			break;
		case MTD_MODE_OTP_USER:
			if (mtd->get_user_prot_info)
				ret = mtd->get_user_prot_info(mtd, buf, 4096);
			break;
684 685
		default:
			break;
686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701
		}
		if (ret >= 0) {
			if (cmd == OTPGETREGIONCOUNT) {
				int nbr = ret / sizeof(struct otp_info);
				ret = copy_to_user(argp, &nbr, sizeof(int));
			} else
				ret = copy_to_user(argp, buf, ret);
			if (ret)
				ret = -EFAULT;
		}
		kfree(buf);
		break;
	}

	case OTPLOCK:
	{
702
		struct otp_info oinfo;
703

704
		if (mfi->mode != MTD_MODE_OTP_USER)
705
			return -EINVAL;
706
		if (copy_from_user(&oinfo, argp, sizeof(oinfo)))
707 708 709
			return -EFAULT;
		if (!mtd->lock_user_prot_reg)
			return -EOPNOTSUPP;
710
		ret = mtd->lock_user_prot_reg(mtd, oinfo.start, oinfo.length);
711 712 713 714
		break;
	}
#endif

715 716 717 718 719
	case ECCGETLAYOUT:
	{
		if (!mtd->ecclayout)
			return -EOPNOTSUPP;

720
		if (copy_to_user(argp, mtd->ecclayout,
721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757
				 sizeof(struct nand_ecclayout)))
			return -EFAULT;
		break;
	}

	case ECCGETSTATS:
	{
		if (copy_to_user(argp, &mtd->ecc_stats,
				 sizeof(struct mtd_ecc_stats)))
			return -EFAULT;
		break;
	}

	case MTDFILEMODE:
	{
		mfi->mode = 0;

		switch(arg) {
		case MTD_MODE_OTP_FACTORY:
		case MTD_MODE_OTP_USER:
			ret = otp_select_filemode(mfi, arg);
			break;

		case MTD_MODE_RAW:
			if (!mtd->read_oob || !mtd->write_oob)
				return -EOPNOTSUPP;
			mfi->mode = arg;

		case MTD_MODE_NORMAL:
			break;
		default:
			ret = -EINVAL;
		}
		file->f_pos = 0;
		break;
	}

L
Linus Torvalds 已提交
758 759 760 761 762 763 764
	default:
		ret = -ENOTTY;
	}

	return ret;
} /* memory_ioctl */

765
static const struct file_operations mtd_fops = {
L
Linus Torvalds 已提交
766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782
	.owner		= THIS_MODULE,
	.llseek		= mtd_lseek,
	.read		= mtd_read,
	.write		= mtd_write,
	.ioctl		= mtd_ioctl,
	.open		= mtd_open,
	.release	= mtd_close,
};

static int __init init_mtdchar(void)
{
	if (register_chrdev(MTD_CHAR_MAJOR, "mtd", &mtd_fops)) {
		printk(KERN_NOTICE "Can't allocate major number %d for Memory Technology Devices.\n",
		       MTD_CHAR_MAJOR);
		return -EAGAIN;
	}

783 784 785 786 787
	mtd_class = class_create(THIS_MODULE, "mtd");

	if (IS_ERR(mtd_class)) {
		printk(KERN_ERR "Error creating mtd class.\n");
		unregister_chrdev(MTD_CHAR_MAJOR, "mtd");
788
		return PTR_ERR(mtd_class);
789 790 791
	}

	register_mtd_user(&notifier);
L
Linus Torvalds 已提交
792 793 794 795 796
	return 0;
}

static void __exit cleanup_mtdchar(void)
{
797 798
	unregister_mtd_user(&notifier);
	class_destroy(mtd_class);
L
Linus Torvalds 已提交
799 800 801 802 803 804 805 806 807 808
	unregister_chrdev(MTD_CHAR_MAJOR, "mtd");
}

module_init(init_mtdchar);
module_exit(cleanup_mtdchar);


MODULE_LICENSE("GPL");
MODULE_AUTHOR("David Woodhouse <dwmw2@infradead.org>");
MODULE_DESCRIPTION("Direct character-device access to MTD devices");