firmware_class.c 41.8 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3
/*
 * firmware_class.c - Multi purpose firmware loading support
 *
4
 * Copyright (c) 2003 Manuel Estrada Sainz
L
Linus Torvalds 已提交
5 6 7 8 9
 *
 * Please see Documentation/firmware_class/ for more information.
 *
 */

10
#include <linux/capability.h>
L
Linus Torvalds 已提交
11 12 13 14 15 16 17
#include <linux/device.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/timer.h>
#include <linux/vmalloc.h>
#include <linux/interrupt.h>
#include <linux/bitops.h>
18
#include <linux/mutex.h>
19
#include <linux/workqueue.h>
20
#include <linux/highmem.h>
L
Linus Torvalds 已提交
21
#include <linux/firmware.h>
22
#include <linux/slab.h>
23
#include <linux/sched.h>
24
#include <linux/file.h>
25
#include <linux/list.h>
26
#include <linux/fs.h>
27 28
#include <linux/async.h>
#include <linux/pm.h>
29
#include <linux/suspend.h>
30
#include <linux/syscore_ops.h>
31
#include <linux/reboot.h>
32
#include <linux/security.h>
33

34 35
#include <generated/utsrelease.h>

36
#include "base.h"
L
Linus Torvalds 已提交
37

38
MODULE_AUTHOR("Manuel Estrada Sainz");
L
Linus Torvalds 已提交
39 40 41
MODULE_DESCRIPTION("Multi purpose firmware loading support");
MODULE_LICENSE("GPL");

42 43 44 45 46 47 48
/* Builtin firmware support */

#ifdef CONFIG_FW_LOADER

extern struct builtin_fw __start_builtin_fw[];
extern struct builtin_fw __end_builtin_fw[];

49 50
static bool fw_get_builtin_firmware(struct firmware *fw, const char *name,
				    void *buf, size_t size)
51 52 53 54 55 56 57
{
	struct builtin_fw *b_fw;

	for (b_fw = __start_builtin_fw; b_fw != __end_builtin_fw; b_fw++) {
		if (strcmp(name, b_fw->name) == 0) {
			fw->size = b_fw->size;
			fw->data = b_fw->data;
58 59 60

			if (buf && fw->size <= size)
				memcpy(buf, fw->data, fw->size);
61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80
			return true;
		}
	}

	return false;
}

static bool fw_is_builtin_firmware(const struct firmware *fw)
{
	struct builtin_fw *b_fw;

	for (b_fw = __start_builtin_fw; b_fw != __end_builtin_fw; b_fw++)
		if (fw->data == b_fw->data)
			return true;

	return false;
}

#else /* Module case - no builtin firmware support */

81 82 83
static inline bool fw_get_builtin_firmware(struct firmware *fw,
					   const char *name, void *buf,
					   size_t size)
84 85 86 87 88 89 90 91 92 93
{
	return false;
}

static inline bool fw_is_builtin_firmware(const struct firmware *fw)
{
	return false;
}
#endif

L
Linus Torvalds 已提交
94 95 96 97 98 99
enum {
	FW_STATUS_LOADING,
	FW_STATUS_DONE,
	FW_STATUS_ABORT,
};

100
static int loading_timeout = 60;	/* In seconds */
L
Linus Torvalds 已提交
101

102 103
static inline long firmware_loading_timeout(void)
{
104
	return loading_timeout > 0 ? loading_timeout * HZ : MAX_JIFFY_OFFSET;
105 106
}

107 108 109
/* firmware behavior options */
#define FW_OPT_UEVENT	(1U << 0)
#define FW_OPT_NOWAIT	(1U << 1)
110
#ifdef CONFIG_FW_LOADER_USER_HELPER
111
#define FW_OPT_USERHELPER	(1U << 2)
112
#else
113 114 115 116 117 118
#define FW_OPT_USERHELPER	0
#endif
#ifdef CONFIG_FW_LOADER_USER_HELPER_FALLBACK
#define FW_OPT_FALLBACK		FW_OPT_USERHELPER
#else
#define FW_OPT_FALLBACK		0
119
#endif
120
#define FW_OPT_NO_WARN	(1U << 3)
121
#define FW_OPT_NOCACHE	(1U << 4)
122

123 124 125 126
struct firmware_cache {
	/* firmware_buf instance will be added into the below list */
	spinlock_t lock;
	struct list_head head;
127
	int state;
128

129
#ifdef CONFIG_PM_SLEEP
130 131 132 133 134 135 136 137 138 139
	/*
	 * Names of firmware images which have been cached successfully
	 * will be added into the below list so that device uncache
	 * helper can trace which firmware images have been cached
	 * before.
	 */
	spinlock_t name_lock;
	struct list_head fw_names;

	struct delayed_work work;
140 141

	struct notifier_block   pm_notify;
142
#endif
143
};
L
Linus Torvalds 已提交
144

145
struct firmware_buf {
146 147
	struct kref ref;
	struct list_head list;
L
Linus Torvalds 已提交
148
	struct completion completion;
149
	struct firmware_cache *fwc;
L
Linus Torvalds 已提交
150
	unsigned long status;
151 152
	void *data;
	size_t size;
153
	size_t allocated_size;
154
#ifdef CONFIG_FW_LOADER_USER_HELPER
155
	bool is_paged_buf;
156
	bool need_uevent;
157 158 159
	struct page **pages;
	int nr_pages;
	int page_array_size;
160
	struct list_head pending_list;
161
#endif
162
	const char *fw_id;
163 164
};

165 166
struct fw_cache_entry {
	struct list_head list;
167
	const char *name;
168 169
};

170 171
struct fw_name_devm {
	unsigned long magic;
172
	const char *name;
173 174
};

175 176
#define to_fwbuf(d) container_of(d, struct firmware_buf, ref)

177 178 179 180 181
#define	FW_LOADER_NO_CACHE	0
#define	FW_LOADER_START_CACHE	1

static int fw_cache_piggyback_on_request(const char *name);

182 183 184 185 186 187 188
/* fw_lock could be moved to 'struct firmware_priv' but since it is just
 * guarding for corner cases a global lock should be OK */
static DEFINE_MUTEX(fw_lock);

static struct firmware_cache fw_cache;

static struct firmware_buf *__allocate_fw_buf(const char *fw_name,
189 190
					      struct firmware_cache *fwc,
					      void *dbuf, size_t size)
191 192 193
{
	struct firmware_buf *buf;

194
	buf = kzalloc(sizeof(*buf), GFP_ATOMIC);
195
	if (!buf)
196 197 198 199 200 201 202
		return NULL;

	buf->fw_id = kstrdup_const(fw_name, GFP_ATOMIC);
	if (!buf->fw_id) {
		kfree(buf);
		return NULL;
	}
203 204 205

	kref_init(&buf->ref);
	buf->fwc = fwc;
206 207
	buf->data = dbuf;
	buf->allocated_size = size;
208
	init_completion(&buf->completion);
209 210 211
#ifdef CONFIG_FW_LOADER_USER_HELPER
	INIT_LIST_HEAD(&buf->pending_list);
#endif
212 213 214 215 216 217

	pr_debug("%s: fw-%s buf=%p\n", __func__, fw_name, buf);

	return buf;
}

218 219 220 221 222 223 224 225 226 227 228
static struct firmware_buf *__fw_lookup_buf(const char *fw_name)
{
	struct firmware_buf *tmp;
	struct firmware_cache *fwc = &fw_cache;

	list_for_each_entry(tmp, &fwc->head, list)
		if (!strcmp(tmp->fw_id, fw_name))
			return tmp;
	return NULL;
}

229 230
static int fw_lookup_and_allocate_buf(const char *fw_name,
				      struct firmware_cache *fwc,
231 232
				      struct firmware_buf **buf, void *dbuf,
				      size_t size)
233 234 235 236
{
	struct firmware_buf *tmp;

	spin_lock(&fwc->lock);
237 238 239 240 241 242 243
	tmp = __fw_lookup_buf(fw_name);
	if (tmp) {
		kref_get(&tmp->ref);
		spin_unlock(&fwc->lock);
		*buf = tmp;
		return 1;
	}
244
	tmp = __allocate_fw_buf(fw_name, fwc, dbuf, size);
245 246 247 248 249 250 251 252 253 254
	if (tmp)
		list_add(&tmp->list, &fwc->head);
	spin_unlock(&fwc->lock);

	*buf = tmp;

	return tmp ? 0 : -ENOMEM;
}

static void __fw_free_buf(struct kref *ref)
255
	__releases(&fwc->lock)
256 257 258 259 260 261 262 263 264 265 266
{
	struct firmware_buf *buf = to_fwbuf(ref);
	struct firmware_cache *fwc = buf->fwc;

	pr_debug("%s: fw-%s buf=%p data=%p size=%u\n",
		 __func__, buf->fw_id, buf, buf->data,
		 (unsigned int)buf->size);

	list_del(&buf->list);
	spin_unlock(&fwc->lock);

267
#ifdef CONFIG_FW_LOADER_USER_HELPER
268
	if (buf->is_paged_buf) {
269
		int i;
270 271 272
		vunmap(buf->data);
		for (i = 0; i < buf->nr_pages; i++)
			__free_page(buf->pages[i]);
273
		vfree(buf->pages);
274
	} else
275
#endif
276
	if (!buf->allocated_size)
277
		vfree(buf->data);
278
	kfree_const(buf->fw_id);
279 280 281 282 283
	kfree(buf);
}

static void fw_free_buf(struct firmware_buf *buf)
{
284 285 286 287
	struct firmware_cache *fwc = buf->fwc;
	spin_lock(&fwc->lock);
	if (!kref_put(&buf->ref, __fw_free_buf))
		spin_unlock(&fwc->lock);
288 289
}

290
/* direct firmware loading support */
291 292 293
static char fw_path_para[256];
static const char * const fw_path[] = {
	fw_path_para,
294 295 296 297 298 299
	"/lib/firmware/updates/" UTS_RELEASE,
	"/lib/firmware/updates",
	"/lib/firmware/" UTS_RELEASE,
	"/lib/firmware"
};

300 301 302 303 304 305 306 307
/*
 * Typical usage is that passing 'firmware_class.path=$CUSTOMIZED_PATH'
 * from kernel command line because firmware_class is generally built in
 * kernel instead of module.
 */
module_param_string(path, fw_path_para, sizeof(fw_path_para), 0644);
MODULE_PARM_DESC(path, "customized firmware image search path with a higher priority than default path");

308 309 310 311 312 313 314 315 316
static void fw_finish_direct_load(struct device *device,
				  struct firmware_buf *buf)
{
	mutex_lock(&fw_lock);
	set_bit(FW_STATUS_DONE, &buf->status);
	complete_all(&buf->completion);
	mutex_unlock(&fw_lock);
}

317 318
static int
fw_get_filesystem_firmware(struct device *device, struct firmware_buf *buf)
319
{
320
	loff_t size;
321
	int i, len;
322
	int rc = -ENOENT;
323
	char *path;
324 325 326 327 328 329 330 331
	enum kernel_read_file_id id = READING_FIRMWARE;
	size_t msize = INT_MAX;

	/* Already populated data member means we're loading into a buffer */
	if (buf->data) {
		id = READING_FIRMWARE_PREALLOC_BUFFER;
		msize = buf->allocated_size;
	}
332 333 334 335

	path = __getname();
	if (!path)
		return -ENOMEM;
336 337

	for (i = 0; i < ARRAY_SIZE(fw_path); i++) {
338 339 340 341
		/* skip the unset customized path */
		if (!fw_path[i][0])
			continue;

342 343 344 345 346 347
		len = snprintf(path, PATH_MAX, "%s/%s",
			       fw_path[i], buf->fw_id);
		if (len >= PATH_MAX) {
			rc = -ENAMETOOLONG;
			break;
		}
348

349
		buf->size = 0;
350 351
		rc = kernel_read_file_from_path(path, &buf->data, &size, msize,
						id);
352
		if (rc) {
353 354 355 356 357 358
			if (rc == -ENOENT)
				dev_dbg(device, "loading %s failed with error %d\n",
					 path, rc);
			else
				dev_warn(device, "loading %s failed with error %d\n",
					 path, rc);
359 360
			continue;
		}
361 362
		dev_dbg(device, "direct-loading %s\n", buf->fw_id);
		buf->size = size;
363
		fw_finish_direct_load(device, buf);
364
		break;
365
	}
366
	__putname(path);
367

368
	return rc;
369 370
}

371 372 373 374 375 376 377 378 379 380 381
/* firmware holds the ownership of pages */
static void firmware_free_data(const struct firmware *fw)
{
	/* Loaded directly? */
	if (!fw->priv) {
		vfree(fw->data);
		return;
	}
	fw_free_buf(fw->priv);
}

382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404
/* store the pages buffer info firmware from buf */
static void fw_set_page_data(struct firmware_buf *buf, struct firmware *fw)
{
	fw->priv = buf;
#ifdef CONFIG_FW_LOADER_USER_HELPER
	fw->pages = buf->pages;
#endif
	fw->size = buf->size;
	fw->data = buf->data;

	pr_debug("%s: fw-%s buf=%p data=%p size=%u\n",
		 __func__, buf->fw_id, buf, buf->data,
		 (unsigned int)buf->size);
}

#ifdef CONFIG_PM_SLEEP
static void fw_name_devm_release(struct device *dev, void *res)
{
	struct fw_name_devm *fwn = res;

	if (fwn->magic == (unsigned long)&fw_cache)
		pr_debug("%s: fw_name-%s devm-%p released\n",
				__func__, fwn->name, res);
405
	kfree_const(fwn->name);
406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435
}

static int fw_devm_match(struct device *dev, void *res,
		void *match_data)
{
	struct fw_name_devm *fwn = res;

	return (fwn->magic == (unsigned long)&fw_cache) &&
		!strcmp(fwn->name, match_data);
}

static struct fw_name_devm *fw_find_devm_name(struct device *dev,
		const char *name)
{
	struct fw_name_devm *fwn;

	fwn = devres_find(dev, fw_name_devm_release,
			  fw_devm_match, (void *)name);
	return fwn;
}

/* add firmware name into devres list */
static int fw_add_devm_name(struct device *dev, const char *name)
{
	struct fw_name_devm *fwn;

	fwn = fw_find_devm_name(dev, name);
	if (fwn)
		return 1;

436 437
	fwn = devres_alloc(fw_name_devm_release, sizeof(struct fw_name_devm),
			   GFP_KERNEL);
438 439
	if (!fwn)
		return -ENOMEM;
440 441
	fwn->name = kstrdup_const(name, GFP_KERNEL);
	if (!fwn->name) {
442
		devres_free(fwn);
443 444
		return -ENOMEM;
	}
445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461

	fwn->magic = (unsigned long)&fw_cache;
	devres_add(dev, fwn);

	return 0;
}
#else
static int fw_add_devm_name(struct device *dev, const char *name)
{
	return 0;
}
#endif


/*
 * user-mode helper code
 */
462
#ifdef CONFIG_FW_LOADER_USER_HELPER
463 464 465 466 467 468
struct firmware_priv {
	bool nowait;
	struct device dev;
	struct firmware_buf *buf;
	struct firmware *fw;
};
469

470 471 472 473 474
static struct firmware_priv *to_firmware_priv(struct device *dev)
{
	return container_of(dev, struct firmware_priv, dev);
}

475
static void __fw_load_abort(struct firmware_buf *buf)
L
Linus Torvalds 已提交
476
{
477 478 479 480 481 482 483
	/*
	 * There is a small window in which user can write to 'loading'
	 * between loading done and disappearance of 'loading'
	 */
	if (test_bit(FW_STATUS_DONE, &buf->status))
		return;

484
	list_del_init(&buf->pending_list);
485
	set_bit(FW_STATUS_ABORT, &buf->status);
486
	complete_all(&buf->completion);
L
Linus Torvalds 已提交
487 488
}

489 490 491 492 493
static void fw_load_abort(struct firmware_priv *fw_priv)
{
	struct firmware_buf *buf = fw_priv->buf;

	__fw_load_abort(buf);
494 495 496

	/* avoid user action after loading abort */
	fw_priv->buf = NULL;
L
Linus Torvalds 已提交
497 498
}

499 500 501
#define is_fw_load_aborted(buf)	\
	test_bit(FW_STATUS_ABORT, &(buf)->status)

502 503 504 505 506 507 508 509
static LIST_HEAD(pending_fw_head);

/* reboot notifier for avoid deadlock with usermode_lock */
static int fw_shutdown_notify(struct notifier_block *unused1,
			      unsigned long unused2, void *unused3)
{
	mutex_lock(&fw_lock);
	while (!list_empty(&pending_fw_head))
510
		__fw_load_abort(list_first_entry(&pending_fw_head,
511 512 513 514 515 516 517 518 519 520
					       struct firmware_buf,
					       pending_list));
	mutex_unlock(&fw_lock);
	return NOTIFY_DONE;
}

static struct notifier_block fw_shutdown_nb = {
	.notifier_call = fw_shutdown_notify,
};

521 522
static ssize_t timeout_show(struct class *class, struct class_attribute *attr,
			    char *buf)
L
Linus Torvalds 已提交
523 524 525 526 527
{
	return sprintf(buf, "%d\n", loading_timeout);
}

/**
528 529
 * firmware_timeout_store - set number of seconds to wait for firmware
 * @class: device class pointer
530
 * @attr: device attribute pointer
531 532 533
 * @buf: buffer to scan for timeout value
 * @count: number of bytes in @buf
 *
L
Linus Torvalds 已提交
534
 *	Sets the number of seconds to wait for the firmware.  Once
535
 *	this expires an error will be returned to the driver and no
L
Linus Torvalds 已提交
536 537
 *	firmware will be provided.
 *
538
 *	Note: zero means 'wait forever'.
L
Linus Torvalds 已提交
539
 **/
540 541
static ssize_t timeout_store(struct class *class, struct class_attribute *attr,
			     const char *buf, size_t count)
L
Linus Torvalds 已提交
542 543
{
	loading_timeout = simple_strtol(buf, NULL, 10);
544 545
	if (loading_timeout < 0)
		loading_timeout = 0;
546

L
Linus Torvalds 已提交
547 548
	return count;
}
549
static CLASS_ATTR_RW(timeout);
L
Linus Torvalds 已提交
550

551 552 553
static struct attribute *firmware_class_attrs[] = {
	&class_attr_timeout.attr,
	NULL,
554
};
555
ATTRIBUTE_GROUPS(firmware_class);
L
Linus Torvalds 已提交
556

557 558 559
static void fw_dev_release(struct device *dev)
{
	struct firmware_priv *fw_priv = to_firmware_priv(dev);
560

561 562
	kfree(fw_priv);
}
L
Linus Torvalds 已提交
563

564
static int do_firmware_uevent(struct firmware_priv *fw_priv, struct kobj_uevent_env *env)
L
Linus Torvalds 已提交
565
{
566
	if (add_uevent_var(env, "FIRMWARE=%s", fw_priv->buf->fw_id))
L
Linus Torvalds 已提交
567
		return -ENOMEM;
568
	if (add_uevent_var(env, "TIMEOUT=%i", loading_timeout))
569
		return -ENOMEM;
570 571
	if (add_uevent_var(env, "ASYNC=%d", fw_priv->nowait))
		return -ENOMEM;
L
Linus Torvalds 已提交
572 573 574 575

	return 0;
}

576 577 578 579 580 581 582 583 584 585 586 587
static int firmware_uevent(struct device *dev, struct kobj_uevent_env *env)
{
	struct firmware_priv *fw_priv = to_firmware_priv(dev);
	int err = 0;

	mutex_lock(&fw_lock);
	if (fw_priv->buf)
		err = do_firmware_uevent(fw_priv, env);
	mutex_unlock(&fw_lock);
	return err;
}

588 589
static struct class firmware_class = {
	.name		= "firmware",
590
	.class_groups	= firmware_class_groups,
591 592
	.dev_uevent	= firmware_uevent,
	.dev_release	= fw_dev_release,
593 594
};

595 596
static ssize_t firmware_loading_show(struct device *dev,
				     struct device_attribute *attr, char *buf)
L
Linus Torvalds 已提交
597
{
598
	struct firmware_priv *fw_priv = to_firmware_priv(dev);
599 600 601 602 603 604
	int loading = 0;

	mutex_lock(&fw_lock);
	if (fw_priv->buf)
		loading = test_bit(FW_STATUS_LOADING, &fw_priv->buf->status);
	mutex_unlock(&fw_lock);
605

L
Linus Torvalds 已提交
606 607 608
	return sprintf(buf, "%d\n", loading);
}

609 610 611 612
/* Some architectures don't have PAGE_KERNEL_RO */
#ifndef PAGE_KERNEL_RO
#define PAGE_KERNEL_RO PAGE_KERNEL
#endif
613 614 615 616

/* one pages buffer should be mapped/unmapped only once */
static int fw_map_pages_buf(struct firmware_buf *buf)
{
617
	if (!buf->is_paged_buf)
618 619
		return 0;

620
	vunmap(buf->data);
621 622 623 624 625 626
	buf->data = vmap(buf->pages, buf->nr_pages, 0, PAGE_KERNEL_RO);
	if (!buf->data)
		return -ENOMEM;
	return 0;
}

L
Linus Torvalds 已提交
627
/**
628
 * firmware_loading_store - set value in the 'loading' control file
629
 * @dev: device pointer
630
 * @attr: device attribute pointer
631 632 633
 * @buf: buffer to scan for loading control value
 * @count: number of bytes in @buf
 *
L
Linus Torvalds 已提交
634 635 636
 *	The relevant values are:
 *
 *	 1: Start a load, discarding any previous partial load.
637
 *	 0: Conclude the load and hand the data to the driver code.
L
Linus Torvalds 已提交
638 639
 *	-1: Conclude the load with an error and discard any written data.
 **/
640 641 642
static ssize_t firmware_loading_store(struct device *dev,
				      struct device_attribute *attr,
				      const char *buf, size_t count)
L
Linus Torvalds 已提交
643
{
644
	struct firmware_priv *fw_priv = to_firmware_priv(dev);
645
	struct firmware_buf *fw_buf;
646
	ssize_t written = count;
L
Linus Torvalds 已提交
647
	int loading = simple_strtol(buf, NULL, 10);
648
	int i;
L
Linus Torvalds 已提交
649

650
	mutex_lock(&fw_lock);
651
	fw_buf = fw_priv->buf;
652
	if (!fw_buf)
653 654
		goto out;

L
Linus Torvalds 已提交
655 656
	switch (loading) {
	case 1:
657
		/* discarding any previous partial load */
658 659 660
		if (!test_bit(FW_STATUS_DONE, &fw_buf->status)) {
			for (i = 0; i < fw_buf->nr_pages; i++)
				__free_page(fw_buf->pages[i]);
661
			vfree(fw_buf->pages);
662 663 664 665
			fw_buf->pages = NULL;
			fw_buf->page_array_size = 0;
			fw_buf->nr_pages = 0;
			set_bit(FW_STATUS_LOADING, &fw_buf->status);
666
		}
L
Linus Torvalds 已提交
667 668
		break;
	case 0:
669
		if (test_bit(FW_STATUS_LOADING, &fw_buf->status)) {
670 671
			int rc;

672 673
			set_bit(FW_STATUS_DONE, &fw_buf->status);
			clear_bit(FW_STATUS_LOADING, &fw_buf->status);
674 675 676 677 678 679 680

			/*
			 * Several loading requests may be pending on
			 * one same firmware buf, so let all requests
			 * see the mapped 'buf->data' once the loading
			 * is completed.
			 * */
681 682
			rc = fw_map_pages_buf(fw_buf);
			if (rc)
683 684
				dev_err(dev, "%s: map pages failed\n",
					__func__);
685
			else
686 687 688
				rc = security_kernel_post_read_file(NULL,
						fw_buf->data, fw_buf->size,
						READING_FIRMWARE);
689 690 691 692 693

			/*
			 * Same logic as fw_load_abort, only the DONE bit
			 * is ignored and we set ABORT only on failure.
			 */
694
			list_del_init(&fw_buf->pending_list);
695 696 697 698
			if (rc) {
				set_bit(FW_STATUS_ABORT, &fw_buf->status);
				written = rc;
			}
699
			complete_all(&fw_buf->completion);
L
Linus Torvalds 已提交
700 701 702 703
			break;
		}
		/* fallthrough */
	default:
704
		dev_err(dev, "%s: unexpected value (%d)\n", __func__, loading);
L
Linus Torvalds 已提交
705 706 707 708 709
		/* fallthrough */
	case -1:
		fw_load_abort(fw_priv);
		break;
	}
710 711
out:
	mutex_unlock(&fw_lock);
712
	return written;
L
Linus Torvalds 已提交
713 714
}

715
static DEVICE_ATTR(loading, 0644, firmware_loading_show, firmware_loading_store);
L
Linus Torvalds 已提交
716

717 718 719 720 721 722 723 724 725
static void firmware_rw_buf(struct firmware_buf *buf, char *buffer,
			   loff_t offset, size_t count, bool read)
{
	if (read)
		memcpy(buffer, buf->data + offset, count);
	else
		memcpy(buf->data + offset, buffer, count);
}

726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748
static void firmware_rw(struct firmware_buf *buf, char *buffer,
			loff_t offset, size_t count, bool read)
{
	while (count) {
		void *page_data;
		int page_nr = offset >> PAGE_SHIFT;
		int page_ofs = offset & (PAGE_SIZE-1);
		int page_cnt = min_t(size_t, PAGE_SIZE - page_ofs, count);

		page_data = kmap(buf->pages[page_nr]);

		if (read)
			memcpy(buffer, page_data + page_ofs, page_cnt);
		else
			memcpy(page_data + page_ofs, buffer, page_cnt);

		kunmap(buf->pages[page_nr]);
		buffer += page_cnt;
		offset += page_cnt;
		count -= page_cnt;
	}
}

749 750 751
static ssize_t firmware_data_read(struct file *filp, struct kobject *kobj,
				  struct bin_attribute *bin_attr,
				  char *buffer, loff_t offset, size_t count)
L
Linus Torvalds 已提交
752
{
753
	struct device *dev = kobj_to_dev(kobj);
754
	struct firmware_priv *fw_priv = to_firmware_priv(dev);
755
	struct firmware_buf *buf;
756
	ssize_t ret_count;
L
Linus Torvalds 已提交
757

758
	mutex_lock(&fw_lock);
759 760
	buf = fw_priv->buf;
	if (!buf || test_bit(FW_STATUS_DONE, &buf->status)) {
L
Linus Torvalds 已提交
761 762 763
		ret_count = -ENODEV;
		goto out;
	}
764
	if (offset > buf->size) {
765 766 767
		ret_count = 0;
		goto out;
	}
768 769
	if (count > buf->size - offset)
		count = buf->size - offset;
770 771 772

	ret_count = count;

773 774 775 776
	if (buf->data)
		firmware_rw_buf(buf, buffer, offset, count, true);
	else
		firmware_rw(buf, buffer, offset, count, true);
777

L
Linus Torvalds 已提交
778
out:
779
	mutex_unlock(&fw_lock);
L
Linus Torvalds 已提交
780 781
	return ret_count;
}
782

783
static int fw_realloc_buffer(struct firmware_priv *fw_priv, int min_size)
L
Linus Torvalds 已提交
784
{
785
	struct firmware_buf *buf = fw_priv->buf;
786
	int pages_needed = PAGE_ALIGN(min_size) >> PAGE_SHIFT;
787 788

	/* If the array of pages is too small, grow it... */
789
	if (buf->page_array_size < pages_needed) {
790
		int new_array_size = max(pages_needed,
791
					 buf->page_array_size * 2);
792 793
		struct page **new_pages;

794
		new_pages = vmalloc(new_array_size * sizeof(void *));
795 796 797 798
		if (!new_pages) {
			fw_load_abort(fw_priv);
			return -ENOMEM;
		}
799 800 801 802
		memcpy(new_pages, buf->pages,
		       buf->page_array_size * sizeof(void *));
		memset(&new_pages[buf->page_array_size], 0, sizeof(void *) *
		       (new_array_size - buf->page_array_size));
803
		vfree(buf->pages);
804 805
		buf->pages = new_pages;
		buf->page_array_size = new_array_size;
806
	}
L
Linus Torvalds 已提交
807

808 809
	while (buf->nr_pages < pages_needed) {
		buf->pages[buf->nr_pages] =
810
			alloc_page(GFP_KERNEL | __GFP_HIGHMEM);
L
Linus Torvalds 已提交
811

812
		if (!buf->pages[buf->nr_pages]) {
813 814 815
			fw_load_abort(fw_priv);
			return -ENOMEM;
		}
816
		buf->nr_pages++;
L
Linus Torvalds 已提交
817 818 819 820 821
	}
	return 0;
}

/**
822
 * firmware_data_write - write method for firmware
823
 * @filp: open sysfs file
824
 * @kobj: kobject for the device
825
 * @bin_attr: bin_attr structure
826 827 828
 * @buffer: buffer being written
 * @offset: buffer offset for write in total data store area
 * @count: buffer size
L
Linus Torvalds 已提交
829
 *
830
 *	Data written to the 'data' attribute will be later handed to
L
Linus Torvalds 已提交
831 832
 *	the driver as a firmware image.
 **/
833 834 835
static ssize_t firmware_data_write(struct file *filp, struct kobject *kobj,
				   struct bin_attribute *bin_attr,
				   char *buffer, loff_t offset, size_t count)
L
Linus Torvalds 已提交
836
{
837
	struct device *dev = kobj_to_dev(kobj);
838
	struct firmware_priv *fw_priv = to_firmware_priv(dev);
839
	struct firmware_buf *buf;
L
Linus Torvalds 已提交
840 841 842 843
	ssize_t retval;

	if (!capable(CAP_SYS_RAWIO))
		return -EPERM;
844

845
	mutex_lock(&fw_lock);
846 847
	buf = fw_priv->buf;
	if (!buf || test_bit(FW_STATUS_DONE, &buf->status)) {
L
Linus Torvalds 已提交
848 849 850
		retval = -ENODEV;
		goto out;
	}
851

852 853 854 855 856 857 858 859 860 861 862
	if (buf->data) {
		if (offset + count > buf->allocated_size) {
			retval = -ENOMEM;
			goto out;
		}
		firmware_rw_buf(buf, buffer, offset, count, false);
		retval = count;
	} else {
		retval = fw_realloc_buffer(fw_priv, offset + count);
		if (retval)
			goto out;
L
Linus Torvalds 已提交
863

864 865 866
		retval = count;
		firmware_rw(buf, buffer, offset, count, false);
	}
867

868
	buf->size = max_t(size_t, offset + count, buf->size);
L
Linus Torvalds 已提交
869
out:
870
	mutex_unlock(&fw_lock);
L
Linus Torvalds 已提交
871 872
	return retval;
}
873

874 875
static struct bin_attribute firmware_attr_data = {
	.attr = { .name = "data", .mode = 0644 },
L
Linus Torvalds 已提交
876 877 878 879 880
	.size = 0,
	.read = firmware_data_read,
	.write = firmware_data_write,
};

881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900
static struct attribute *fw_dev_attrs[] = {
	&dev_attr_loading.attr,
	NULL
};

static struct bin_attribute *fw_dev_bin_attrs[] = {
	&firmware_attr_data,
	NULL
};

static const struct attribute_group fw_dev_attr_group = {
	.attrs = fw_dev_attrs,
	.bin_attrs = fw_dev_bin_attrs,
};

static const struct attribute_group *fw_dev_attr_groups[] = {
	&fw_dev_attr_group,
	NULL
};

901
static struct firmware_priv *
902
fw_create_instance(struct firmware *firmware, const char *fw_name,
903
		   struct device *device, unsigned int opt_flags)
L
Linus Torvalds 已提交
904
{
905 906
	struct firmware_priv *fw_priv;
	struct device *f_dev;
L
Linus Torvalds 已提交
907

908
	fw_priv = kzalloc(sizeof(*fw_priv), GFP_KERNEL);
909
	if (!fw_priv) {
910 911 912 913
		fw_priv = ERR_PTR(-ENOMEM);
		goto exit;
	}

914
	fw_priv->nowait = !!(opt_flags & FW_OPT_NOWAIT);
915
	fw_priv->fw = firmware;
916 917 918
	f_dev = &fw_priv->dev;

	device_initialize(f_dev);
919
	dev_set_name(f_dev, "%s", fw_name);
920 921
	f_dev->parent = device;
	f_dev->class = &firmware_class;
922
	f_dev->groups = fw_dev_attr_groups;
923
exit:
924
	return fw_priv;
L
Linus Torvalds 已提交
925 926
}

927
/* load a firmware via user helper */
928 929
static int _request_firmware_load(struct firmware_priv *fw_priv,
				  unsigned int opt_flags, long timeout)
930
{
931 932 933
	int retval = 0;
	struct device *f_dev = &fw_priv->dev;
	struct firmware_buf *buf = fw_priv->buf;
934

935
	/* fall back on userspace loading */
936 937
	if (!buf->data)
		buf->is_paged_buf = true;
938

939
	dev_set_uevent_suppress(f_dev, true);
940

941 942 943 944 945
	retval = device_add(f_dev);
	if (retval) {
		dev_err(f_dev, "%s: device_register failed\n", __func__);
		goto err_put_dev;
	}
946

947 948 949 950
	mutex_lock(&fw_lock);
	list_add(&buf->pending_list, &pending_fw_head);
	mutex_unlock(&fw_lock);

951
	if (opt_flags & FW_OPT_UEVENT) {
952
		buf->need_uevent = true;
953 954 955
		dev_set_uevent_suppress(f_dev, false);
		dev_dbg(f_dev, "firmware: requesting %s\n", buf->fw_id);
		kobject_uevent(&fw_priv->dev.kobj, KOBJ_ADD);
956 957
	} else {
		timeout = MAX_JIFFY_OFFSET;
958
	}
959

960
	timeout = wait_for_completion_interruptible_timeout(&buf->completion,
961
			timeout);
962 963
	if (timeout == -ERESTARTSYS || !timeout) {
		retval = timeout;
964 965 966
		mutex_lock(&fw_lock);
		fw_load_abort(fw_priv);
		mutex_unlock(&fw_lock);
967
	} else if (timeout > 0) {
968
		retval = 0;
969
	}
970

971 972
	if (is_fw_load_aborted(buf))
		retval = -EAGAIN;
973
	else if (buf->is_paged_buf && !buf->data)
974
		retval = -ENOMEM;
975

976 977 978 979
	device_del(f_dev);
err_put_dev:
	put_device(f_dev);
	return retval;
980
}
981 982 983

static int fw_load_from_user_helper(struct firmware *firmware,
				    const char *name, struct device *device,
984
				    unsigned int opt_flags, long timeout)
985
{
986 987
	struct firmware_priv *fw_priv;

988
	fw_priv = fw_create_instance(firmware, name, device, opt_flags);
989 990 991 992
	if (IS_ERR(fw_priv))
		return PTR_ERR(fw_priv);

	fw_priv->buf = firmware->priv;
993
	return _request_firmware_load(fw_priv, opt_flags, timeout);
994
}
995

M
Ming Lei 已提交
996
#ifdef CONFIG_PM_SLEEP
997 998 999 1000 1001 1002 1003 1004 1005
/* kill pending requests without uevent to avoid blocking suspend */
static void kill_requests_without_uevent(void)
{
	struct firmware_buf *buf;
	struct firmware_buf *next;

	mutex_lock(&fw_lock);
	list_for_each_entry_safe(buf, next, &pending_fw_head, pending_list) {
		if (!buf->need_uevent)
1006
			 __fw_load_abort(buf);
1007 1008 1009
	}
	mutex_unlock(&fw_lock);
}
M
Ming Lei 已提交
1010
#endif
1011

1012 1013 1014
#else /* CONFIG_FW_LOADER_USER_HELPER */
static inline int
fw_load_from_user_helper(struct firmware *firmware, const char *name,
1015
			 struct device *device, unsigned int opt_flags,
1016 1017 1018 1019
			 long timeout)
{
	return -ENOENT;
}
1020 1021 1022 1023

/* No abort during direct loading */
#define is_fw_load_aborted(buf) false

M
Ming Lei 已提交
1024
#ifdef CONFIG_PM_SLEEP
1025
static inline void kill_requests_without_uevent(void) { }
M
Ming Lei 已提交
1026
#endif
1027

1028 1029
#endif /* CONFIG_FW_LOADER_USER_HELPER */

1030

1031 1032
/* wait until the shared firmware_buf becomes ready (or error) */
static int sync_cached_firmware_buf(struct firmware_buf *buf)
1033
{
1034 1035 1036 1037
	int ret = 0;

	mutex_lock(&fw_lock);
	while (!test_bit(FW_STATUS_DONE, &buf->status)) {
1038
		if (is_fw_load_aborted(buf)) {
1039 1040 1041 1042
			ret = -ENOENT;
			break;
		}
		mutex_unlock(&fw_lock);
1043
		ret = wait_for_completion_interruptible(&buf->completion);
1044 1045 1046 1047
		mutex_lock(&fw_lock);
	}
	mutex_unlock(&fw_lock);
	return ret;
1048 1049
}

1050 1051 1052 1053 1054 1055
/* prepare firmware and firmware_buf structs;
 * return 0 if a firmware is already assigned, 1 if need to load one,
 * or a negative error code
 */
static int
_request_firmware_prepare(struct firmware **firmware_p, const char *name,
1056
			  struct device *device, void *dbuf, size_t size)
L
Linus Torvalds 已提交
1057 1058
{
	struct firmware *firmware;
1059 1060
	struct firmware_buf *buf;
	int ret;
L
Linus Torvalds 已提交
1061

1062
	*firmware_p = firmware = kzalloc(sizeof(*firmware), GFP_KERNEL);
L
Linus Torvalds 已提交
1063
	if (!firmware) {
1064 1065
		dev_err(device, "%s: kmalloc(struct firmware) failed\n",
			__func__);
1066
		return -ENOMEM;
L
Linus Torvalds 已提交
1067 1068
	}

1069
	if (fw_get_builtin_firmware(firmware, name, dbuf, size)) {
1070
		dev_dbg(device, "using built-in %s\n", name);
1071
		return 0; /* assigned */
1072 1073
	}

1074
	ret = fw_lookup_and_allocate_buf(name, &fw_cache, &buf, dbuf, size);
1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087

	/*
	 * bind with 'buf' now to avoid warning in failure path
	 * of requesting firmware.
	 */
	firmware->priv = buf;

	if (ret > 0) {
		ret = sync_cached_firmware_buf(buf);
		if (!ret) {
			fw_set_page_data(buf, firmware);
			return 0; /* assigned */
		}
1088
	}
1089

1090 1091 1092 1093 1094
	if (ret < 0)
		return ret;
	return 1; /* need to load */
}

1095
static int assign_firmware_buf(struct firmware *fw, struct device *device,
1096
			       unsigned int opt_flags)
1097 1098 1099
{
	struct firmware_buf *buf = fw->priv;

1100
	mutex_lock(&fw_lock);
1101
	if (!buf->size || is_fw_load_aborted(buf)) {
1102 1103
		mutex_unlock(&fw_lock);
		return -ENOENT;
1104
	}
1105

1106 1107 1108 1109 1110 1111 1112
	/*
	 * add firmware name into devres list so that we can auto cache
	 * and uncache firmware for device.
	 *
	 * device may has been deleted already, but the problem
	 * should be fixed in devres or driver core.
	 */
1113
	/* don't cache firmware handled without uevent */
1114 1115
	if (device && (opt_flags & FW_OPT_UEVENT) &&
	    !(opt_flags & FW_OPT_NOCACHE))
1116 1117 1118 1119 1120 1121
		fw_add_devm_name(device, buf->fw_id);

	/*
	 * After caching firmware image is started, let it piggyback
	 * on request firmware.
	 */
1122 1123
	if (!(opt_flags & FW_OPT_NOCACHE) &&
	    buf->fwc->state == FW_LOADER_START_CACHE) {
1124 1125 1126 1127 1128 1129
		if (fw_cache_piggyback_on_request(buf->fw_id))
			kref_get(&buf->ref);
	}

	/* pass the pages buffer to driver at the last minute */
	fw_set_page_data(buf, fw);
1130
	mutex_unlock(&fw_lock);
1131
	return 0;
1132 1133
}

1134 1135 1136
/* called from request_firmware() and request_firmware_work_func() */
static int
_request_firmware(const struct firmware **firmware_p, const char *name,
1137 1138
		  struct device *device, void *buf, size_t size,
		  unsigned int opt_flags)
1139
{
1140
	struct firmware *fw = NULL;
1141 1142 1143 1144 1145 1146
	long timeout;
	int ret;

	if (!firmware_p)
		return -EINVAL;

1147 1148 1149 1150
	if (!name || name[0] == '\0') {
		ret = -EINVAL;
		goto out;
	}
1151

1152
	ret = _request_firmware_prepare(&fw, name, device, buf, size);
1153 1154 1155 1156 1157
	if (ret <= 0) /* error or already assigned */
		goto out;

	ret = 0;
	timeout = firmware_loading_timeout();
1158
	if (opt_flags & FW_OPT_NOWAIT) {
1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174
		timeout = usermodehelper_read_lock_wait(timeout);
		if (!timeout) {
			dev_dbg(device, "firmware: %s loading timed out\n",
				name);
			ret = -EBUSY;
			goto out;
		}
	} else {
		ret = usermodehelper_read_trylock();
		if (WARN_ON(ret)) {
			dev_err(device, "firmware: %s will not be loaded\n",
				name);
			goto out;
		}
	}

1175 1176
	ret = fw_get_filesystem_firmware(device, fw->priv);
	if (ret) {
1177
		if (!(opt_flags & FW_OPT_NO_WARN))
1178
			dev_warn(device,
1179 1180 1181
				 "Direct firmware load for %s failed with error %d\n",
				 name, ret);
		if (opt_flags & FW_OPT_USERHELPER) {
1182 1183
			dev_warn(device, "Falling back to user helper\n");
			ret = fw_load_from_user_helper(fw, name, device,
1184
						       opt_flags, timeout);
1185
		}
1186
	}
1187

1188
	if (!ret)
1189
		ret = assign_firmware_buf(fw, device, opt_flags);
1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202

	usermodehelper_read_unlock();

 out:
	if (ret < 0) {
		release_firmware(fw);
		fw = NULL;
	}

	*firmware_p = fw;
	return ret;
}

1203
/**
1204
 * request_firmware: - send firmware request and wait for it
1205 1206 1207 1208 1209
 * @firmware_p: pointer to firmware image
 * @name: name of firmware file
 * @device: device for which firmware is being loaded
 *
 *      @firmware_p will be used to return a firmware image by the name
1210 1211 1212 1213
 *      of @name for device @device.
 *
 *      Should be called from user context where sleeping is allowed.
 *
1214
 *      @name will be used as $FIRMWARE in the uevent environment and
1215 1216
 *      should be distinctive enough not to be confused with any other
 *      firmware image for this or any other device.
M
Ming Lei 已提交
1217 1218
 *
 *	Caller must hold the reference count of @device.
1219 1220 1221
 *
 *	The function can be called safely inside device's suspend and
 *	resume callback.
1222 1223 1224
 **/
int
request_firmware(const struct firmware **firmware_p, const char *name,
1225
		 struct device *device)
1226
{
1227 1228 1229 1230
	int ret;

	/* Need to pin this module until return */
	__module_get(THIS_MODULE);
1231
	ret = _request_firmware(firmware_p, name, device, NULL, 0,
1232
				FW_OPT_UEVENT | FW_OPT_FALLBACK);
1233 1234
	module_put(THIS_MODULE);
	return ret;
1235
}
1236
EXPORT_SYMBOL(request_firmware);
1237

1238
/**
1239
 * request_firmware_direct: - load firmware directly without usermode helper
1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252
 * @firmware_p: pointer to firmware image
 * @name: name of firmware file
 * @device: device for which firmware is being loaded
 *
 * This function works pretty much like request_firmware(), but this doesn't
 * fall back to usermode helper even if the firmware couldn't be loaded
 * directly from fs.  Hence it's useful for loading optional firmwares, which
 * aren't always present, without extra long timeouts of udev.
 **/
int request_firmware_direct(const struct firmware **firmware_p,
			    const char *name, struct device *device)
{
	int ret;
1253

1254
	__module_get(THIS_MODULE);
1255
	ret = _request_firmware(firmware_p, name, device, NULL, 0,
1256
				FW_OPT_UEVENT | FW_OPT_NO_WARN);
1257 1258 1259 1260 1261
	module_put(THIS_MODULE);
	return ret;
}
EXPORT_SYMBOL_GPL(request_firmware_direct);

1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291
/**
 * request_firmware_into_buf - load firmware into a previously allocated buffer
 * @firmware_p: pointer to firmware image
 * @name: name of firmware file
 * @device: device for which firmware is being loaded and DMA region allocated
 * @buf: address of buffer to load firmware into
 * @size: size of buffer
 *
 * This function works pretty much like request_firmware(), but it doesn't
 * allocate a buffer to hold the firmware data. Instead, the firmware
 * is loaded directly into the buffer pointed to by @buf and the @firmware_p
 * data member is pointed at @buf.
 *
 * This function doesn't cache firmware either.
 */
int
request_firmware_into_buf(const struct firmware **firmware_p, const char *name,
			  struct device *device, void *buf, size_t size)
{
	int ret;

	__module_get(THIS_MODULE);
	ret = _request_firmware(firmware_p, name, device, buf, size,
				FW_OPT_UEVENT | FW_OPT_FALLBACK |
				FW_OPT_NOCACHE);
	module_put(THIS_MODULE);
	return ret;
}
EXPORT_SYMBOL(request_firmware_into_buf);

L
Linus Torvalds 已提交
1292 1293
/**
 * release_firmware: - release the resource associated with a firmware image
1294
 * @fw: firmware resource to release
L
Linus Torvalds 已提交
1295
 **/
1296
void release_firmware(const struct firmware *fw)
L
Linus Torvalds 已提交
1297 1298
{
	if (fw) {
1299 1300
		if (!fw_is_builtin_firmware(fw))
			firmware_free_data(fw);
L
Linus Torvalds 已提交
1301 1302 1303
		kfree(fw);
	}
}
1304
EXPORT_SYMBOL(release_firmware);
L
Linus Torvalds 已提交
1305 1306 1307 1308 1309 1310 1311 1312 1313

/* Async support */
struct firmware_work {
	struct work_struct work;
	struct module *module;
	const char *name;
	struct device *device;
	void *context;
	void (*cont)(const struct firmware *fw, void *context);
1314
	unsigned int opt_flags;
L
Linus Torvalds 已提交
1315 1316
};

1317
static void request_firmware_work_func(struct work_struct *work)
L
Linus Torvalds 已提交
1318
{
1319
	struct firmware_work *fw_work;
L
Linus Torvalds 已提交
1320
	const struct firmware *fw;
1321

1322
	fw_work = container_of(work, struct firmware_work, work);
1323

1324
	_request_firmware(&fw, fw_work->name, fw_work->device, NULL, 0,
1325
			  fw_work->opt_flags);
1326
	fw_work->cont(fw, fw_work->context);
1327
	put_device(fw_work->device); /* taken in request_firmware_nowait() */
1328

L
Linus Torvalds 已提交
1329
	module_put(fw_work->module);
1330
	kfree_const(fw_work->name);
L
Linus Torvalds 已提交
1331 1332 1333 1334
	kfree(fw_work);
}

/**
1335
 * request_firmware_nowait - asynchronous version of request_firmware
1336
 * @module: module requesting the firmware
1337
 * @uevent: sends uevent to copy the firmware image if this flag
1338 1339 1340
 *	is non-zero else the firmware copy must be done manually.
 * @name: name of firmware file
 * @device: device for which firmware is being loaded
1341
 * @gfp: allocation flags
1342 1343 1344 1345
 * @context: will be passed over to @cont, and
 *	@fw may be %NULL if firmware request fails.
 * @cont: function will be called asynchronously when the firmware
 *	request is over.
L
Linus Torvalds 已提交
1346
 *
M
Ming Lei 已提交
1347 1348
 *	Caller must hold the reference count of @device.
 *
1349 1350 1351 1352 1353 1354 1355
 *	Asynchronous variant of request_firmware() for user contexts:
 *		- sleep for as small periods as possible since it may
 *		increase kernel boot time of built-in device drivers
 *		requesting firmware in their ->probe() methods, if
 *		@gfp is GFP_KERNEL.
 *
 *		- can't sleep at all if @gfp is GFP_ATOMIC.
L
Linus Torvalds 已提交
1356 1357 1358
 **/
int
request_firmware_nowait(
1359
	struct module *module, bool uevent,
1360
	const char *name, struct device *device, gfp_t gfp, void *context,
L
Linus Torvalds 已提交
1361 1362
	void (*cont)(const struct firmware *fw, void *context))
{
1363
	struct firmware_work *fw_work;
L
Linus Torvalds 已提交
1364

1365
	fw_work = kzalloc(sizeof(struct firmware_work), gfp);
L
Linus Torvalds 已提交
1366 1367
	if (!fw_work)
		return -ENOMEM;
1368 1369

	fw_work->module = module;
1370
	fw_work->name = kstrdup_const(name, gfp);
1371 1372
	if (!fw_work->name) {
		kfree(fw_work);
1373
		return -ENOMEM;
1374
	}
1375 1376 1377
	fw_work->device = device;
	fw_work->context = context;
	fw_work->cont = cont;
1378
	fw_work->opt_flags = FW_OPT_NOWAIT | FW_OPT_FALLBACK |
1379
		(uevent ? FW_OPT_UEVENT : FW_OPT_USERHELPER);
1380

L
Linus Torvalds 已提交
1381
	if (!try_module_get(module)) {
1382
		kfree_const(fw_work->name);
L
Linus Torvalds 已提交
1383 1384 1385 1386
		kfree(fw_work);
		return -EFAULT;
	}

M
Ming Lei 已提交
1387
	get_device(fw_work->device);
1388 1389
	INIT_WORK(&fw_work->work, request_firmware_work_func);
	schedule_work(&fw_work->work);
L
Linus Torvalds 已提交
1390 1391
	return 0;
}
1392
EXPORT_SYMBOL(request_firmware_nowait);
L
Linus Torvalds 已提交
1393

1394 1395 1396
#ifdef CONFIG_PM_SLEEP
static ASYNC_DOMAIN_EXCLUSIVE(fw_cache_domain);

1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410
/**
 * cache_firmware - cache one firmware image in kernel memory space
 * @fw_name: the firmware image name
 *
 * Cache firmware in kernel memory so that drivers can use it when
 * system isn't ready for them to request firmware image from userspace.
 * Once it returns successfully, driver can use request_firmware or its
 * nowait version to get the cached firmware without any interacting
 * with userspace
 *
 * Return 0 if the firmware image has been cached successfully
 * Return !0 otherwise
 *
 */
1411
static int cache_firmware(const char *fw_name)
1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426
{
	int ret;
	const struct firmware *fw;

	pr_debug("%s: %s\n", __func__, fw_name);

	ret = request_firmware(&fw, fw_name, NULL);
	if (!ret)
		kfree(fw);

	pr_debug("%s: %s ret=%d\n", __func__, fw_name, ret);

	return ret;
}

1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438
static struct firmware_buf *fw_lookup_buf(const char *fw_name)
{
	struct firmware_buf *tmp;
	struct firmware_cache *fwc = &fw_cache;

	spin_lock(&fwc->lock);
	tmp = __fw_lookup_buf(fw_name);
	spin_unlock(&fwc->lock);

	return tmp;
}

1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449
/**
 * uncache_firmware - remove one cached firmware image
 * @fw_name: the firmware image name
 *
 * Uncache one firmware image which has been cached successfully
 * before.
 *
 * Return 0 if the firmware cache has been removed successfully
 * Return !0 otherwise
 *
 */
1450
static int uncache_firmware(const char *fw_name)
1451 1452 1453 1454 1455 1456
{
	struct firmware_buf *buf;
	struct firmware fw;

	pr_debug("%s: %s\n", __func__, fw_name);

1457
	if (fw_get_builtin_firmware(&fw, fw_name, NULL, 0))
1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468
		return 0;

	buf = fw_lookup_buf(fw_name);
	if (buf) {
		fw_free_buf(buf);
		return 0;
	}

	return -EINVAL;
}

1469 1470 1471 1472
static struct fw_cache_entry *alloc_fw_cache_entry(const char *name)
{
	struct fw_cache_entry *fce;

1473
	fce = kzalloc(sizeof(*fce), GFP_ATOMIC);
1474 1475 1476
	if (!fce)
		goto exit;

1477 1478 1479 1480 1481 1482
	fce->name = kstrdup_const(name, GFP_ATOMIC);
	if (!fce->name) {
		kfree(fce);
		fce = NULL;
		goto exit;
	}
1483 1484 1485 1486
exit:
	return fce;
}

1487
static int __fw_entry_found(const char *name)
1488 1489 1490 1491 1492 1493
{
	struct firmware_cache *fwc = &fw_cache;
	struct fw_cache_entry *fce;

	list_for_each_entry(fce, &fwc->fw_names, list) {
		if (!strcmp(fce->name, name))
1494
			return 1;
1495
	}
1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507
	return 0;
}

static int fw_cache_piggyback_on_request(const char *name)
{
	struct firmware_cache *fwc = &fw_cache;
	struct fw_cache_entry *fce;
	int ret = 0;

	spin_lock(&fwc->name_lock);
	if (__fw_entry_found(name))
		goto found;
1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519

	fce = alloc_fw_cache_entry(name);
	if (fce) {
		ret = 1;
		list_add(&fce->list, &fwc->fw_names);
		pr_debug("%s: fw: %s\n", __func__, name);
	}
found:
	spin_unlock(&fwc->name_lock);
	return ret;
}

1520 1521
static void free_fw_cache_entry(struct fw_cache_entry *fce)
{
1522
	kfree_const(fce->name);
1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533
	kfree(fce);
}

static void __async_dev_cache_fw_image(void *fw_entry,
				       async_cookie_t cookie)
{
	struct fw_cache_entry *fce = fw_entry;
	struct firmware_cache *fwc = &fw_cache;
	int ret;

	ret = cache_firmware(fce->name);
1534 1535 1536 1537
	if (ret) {
		spin_lock(&fwc->name_lock);
		list_del(&fce->list);
		spin_unlock(&fwc->name_lock);
1538

1539 1540
		free_fw_cache_entry(fce);
	}
1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563
}

/* called with dev->devres_lock held */
static void dev_create_fw_entry(struct device *dev, void *res,
				void *data)
{
	struct fw_name_devm *fwn = res;
	const char *fw_name = fwn->name;
	struct list_head *head = data;
	struct fw_cache_entry *fce;

	fce = alloc_fw_cache_entry(fw_name);
	if (fce)
		list_add(&fce->list, head);
}

static int devm_name_match(struct device *dev, void *res,
			   void *match_data)
{
	struct fw_name_devm *fwn = res;
	return (fwn->magic == (unsigned long)match_data);
}

1564
static void dev_cache_fw_image(struct device *dev, void *data)
1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578
{
	LIST_HEAD(todo);
	struct fw_cache_entry *fce;
	struct fw_cache_entry *fce_next;
	struct firmware_cache *fwc = &fw_cache;

	devres_for_each_res(dev, fw_name_devm_release,
			    devm_name_match, &fw_cache,
			    dev_create_fw_entry, &todo);

	list_for_each_entry_safe(fce, fce_next, &todo, list) {
		list_del(&fce->list);

		spin_lock(&fwc->name_lock);
1579 1580 1581 1582 1583 1584 1585
		/* only one cache entry for one firmware */
		if (!__fw_entry_found(fce->name)) {
			list_add(&fce->list, &fwc->fw_names);
		} else {
			free_fw_cache_entry(fce);
			fce = NULL;
		}
1586 1587
		spin_unlock(&fwc->name_lock);

1588
		if (fce)
1589 1590 1591
			async_schedule_domain(__async_dev_cache_fw_image,
					      (void *)fce,
					      &fw_cache_domain);
1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627
	}
}

static void __device_uncache_fw_images(void)
{
	struct firmware_cache *fwc = &fw_cache;
	struct fw_cache_entry *fce;

	spin_lock(&fwc->name_lock);
	while (!list_empty(&fwc->fw_names)) {
		fce = list_entry(fwc->fw_names.next,
				struct fw_cache_entry, list);
		list_del(&fce->list);
		spin_unlock(&fwc->name_lock);

		uncache_firmware(fce->name);
		free_fw_cache_entry(fce);

		spin_lock(&fwc->name_lock);
	}
	spin_unlock(&fwc->name_lock);
}

/**
 * device_cache_fw_images - cache devices' firmware
 *
 * If one device called request_firmware or its nowait version
 * successfully before, the firmware names are recored into the
 * device's devres link list, so device_cache_fw_images can call
 * cache_firmware() to cache these firmwares for the device,
 * then the device driver can load its firmwares easily at
 * time when system is not ready to complete loading firmware.
 */
static void device_cache_fw_images(void)
{
	struct firmware_cache *fwc = &fw_cache;
1628
	int old_timeout;
1629 1630 1631 1632
	DEFINE_WAIT(wait);

	pr_debug("%s\n", __func__);

1633 1634 1635
	/* cancel uncache work */
	cancel_delayed_work_sync(&fwc->work);

1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646
	/*
	 * use small loading timeout for caching devices' firmware
	 * because all these firmware images have been loaded
	 * successfully at lease once, also system is ready for
	 * completing firmware loading now. The maximum size of
	 * firmware in current distributions is about 2M bytes,
	 * so 10 secs should be enough.
	 */
	old_timeout = loading_timeout;
	loading_timeout = 10;

1647 1648
	mutex_lock(&fw_lock);
	fwc->state = FW_LOADER_START_CACHE;
1649
	dpm_for_each_dev(NULL, dev_cache_fw_image);
1650
	mutex_unlock(&fw_lock);
1651 1652

	/* wait for completion of caching firmware for all devices */
1653
	async_synchronize_full_domain(&fw_cache_domain);
1654 1655

	loading_timeout = old_timeout;
1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683
}

/**
 * device_uncache_fw_images - uncache devices' firmware
 *
 * uncache all firmwares which have been cached successfully
 * by device_uncache_fw_images earlier
 */
static void device_uncache_fw_images(void)
{
	pr_debug("%s\n", __func__);
	__device_uncache_fw_images();
}

static void device_uncache_fw_images_work(struct work_struct *work)
{
	device_uncache_fw_images();
}

/**
 * device_uncache_fw_images_delay - uncache devices firmwares
 * @delay: number of milliseconds to delay uncache device firmwares
 *
 * uncache all devices's firmwares which has been cached successfully
 * by device_cache_fw_images after @delay milliseconds.
 */
static void device_uncache_fw_images_delay(unsigned long delay)
{
1684 1685
	queue_delayed_work(system_power_efficient_wq, &fw_cache.work,
			   msecs_to_jiffies(delay));
1686 1687
}

1688 1689 1690 1691 1692 1693
static int fw_pm_notify(struct notifier_block *notify_block,
			unsigned long mode, void *unused)
{
	switch (mode) {
	case PM_HIBERNATION_PREPARE:
	case PM_SUSPEND_PREPARE:
1694
	case PM_RESTORE_PREPARE:
1695
		kill_requests_without_uevent();
1696 1697 1698 1699 1700 1701
		device_cache_fw_images();
		break;

	case PM_POST_SUSPEND:
	case PM_POST_HIBERNATION:
	case PM_POST_RESTORE:
1702 1703 1704 1705 1706 1707 1708 1709
		/*
		 * In case that system sleep failed and syscore_suspend is
		 * not called.
		 */
		mutex_lock(&fw_lock);
		fw_cache.state = FW_LOADER_NO_CACHE;
		mutex_unlock(&fw_lock);

1710 1711 1712 1713 1714 1715 1716
		device_uncache_fw_images_delay(10 * MSEC_PER_SEC);
		break;
	}

	return 0;
}

1717 1718 1719 1720 1721 1722 1723 1724 1725 1726
/* stop caching firmware once syscore_suspend is reached */
static int fw_suspend(void)
{
	fw_cache.state = FW_LOADER_NO_CACHE;
	return 0;
}

static struct syscore_ops fw_syscore_ops = {
	.suspend = fw_suspend,
};
1727 1728 1729 1730 1731 1732
#else
static int fw_cache_piggyback_on_request(const char *name)
{
	return 0;
}
#endif
1733

1734 1735 1736 1737
static void __init fw_cache_init(void)
{
	spin_lock_init(&fw_cache.lock);
	INIT_LIST_HEAD(&fw_cache.head);
1738
	fw_cache.state = FW_LOADER_NO_CACHE;
1739

1740
#ifdef CONFIG_PM_SLEEP
1741 1742 1743 1744 1745
	spin_lock_init(&fw_cache.name_lock);
	INIT_LIST_HEAD(&fw_cache.fw_names);

	INIT_DELAYED_WORK(&fw_cache.work,
			  device_uncache_fw_images_work);
1746 1747 1748

	fw_cache.pm_notify.notifier_call = fw_pm_notify;
	register_pm_notifier(&fw_cache.pm_notify);
1749 1750

	register_syscore_ops(&fw_syscore_ops);
1751
#endif
1752 1753
}

1754
static int __init firmware_class_init(void)
L
Linus Torvalds 已提交
1755
{
1756
	fw_cache_init();
1757
#ifdef CONFIG_FW_LOADER_USER_HELPER
1758
	register_reboot_notifier(&fw_shutdown_nb);
1759
	return class_register(&firmware_class);
1760 1761 1762
#else
	return 0;
#endif
L
Linus Torvalds 已提交
1763
}
1764 1765

static void __exit firmware_class_exit(void)
L
Linus Torvalds 已提交
1766
{
1767
#ifdef CONFIG_PM_SLEEP
1768
	unregister_syscore_ops(&fw_syscore_ops);
1769
	unregister_pm_notifier(&fw_cache.pm_notify);
1770
#endif
1771
#ifdef CONFIG_FW_LOADER_USER_HELPER
1772
	unregister_reboot_notifier(&fw_shutdown_nb);
L
Linus Torvalds 已提交
1773
	class_unregister(&firmware_class);
1774
#endif
L
Linus Torvalds 已提交
1775 1776
}

1777
fs_initcall(firmware_class_init);
L
Linus Torvalds 已提交
1778
module_exit(firmware_class_exit);