pipe.c 19.3 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
/*
 *  linux/fs/pipe.c
 *
 *  Copyright (C) 1991, 1992, 1999  Linus Torvalds
 */

#include <linux/mm.h>
#include <linux/file.h>
#include <linux/poll.h>
#include <linux/slab.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/fs.h>
#include <linux/mount.h>
#include <linux/pipe_fs_i.h>
#include <linux/uio.h>
#include <linux/highmem.h>
18
#include <linux/pagemap.h>
L
Linus Torvalds 已提交
19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38

#include <asm/uaccess.h>
#include <asm/ioctls.h>

/*
 * We use a start+len construction, which provides full use of the 
 * allocated memory.
 * -- Florian Coosmann (FGC)
 * 
 * Reads with count = 0 should always return 0.
 * -- Julian Bradfield 1999-06-07.
 *
 * FIFOs and Pipes now generate SIGIO for both readers and writers.
 * -- Jeremy Elson <jelson@circlemud.org> 2001-08-16
 *
 * pipe_read & write cleanup
 * -- Manfred Spraul <manfred@colorfullife.com> 2002-05-09
 */

/* Drop the inode semaphore and wait for a pipe event, atomically */
39
void pipe_wait(struct pipe_inode_info *pipe)
L
Linus Torvalds 已提交
40 41 42
{
	DEFINE_WAIT(wait);

I
Ingo Molnar 已提交
43 44 45 46
	/*
	 * Pipes are system-local resources, so sleeping on them
	 * is considered a noninteractive wait:
	 */
47 48
	prepare_to_wait(&pipe->wait, &wait,
			TASK_INTERRUPTIBLE | TASK_NONINTERACTIVE);
49 50
	if (pipe->inode)
		mutex_unlock(&pipe->inode->i_mutex);
L
Linus Torvalds 已提交
51
	schedule();
52 53 54
	finish_wait(&pipe->wait, &wait);
	if (pipe->inode)
		mutex_lock(&pipe->inode->i_mutex);
L
Linus Torvalds 已提交
55 56
}

57
static int
L
Linus Torvalds 已提交
58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76
pipe_iov_copy_from_user(void *to, struct iovec *iov, unsigned long len)
{
	unsigned long copy;

	while (len > 0) {
		while (!iov->iov_len)
			iov++;
		copy = min_t(unsigned long, len, iov->iov_len);

		if (copy_from_user(to, iov->iov_base, copy))
			return -EFAULT;
		to += copy;
		len -= copy;
		iov->iov_base += copy;
		iov->iov_len -= copy;
	}
	return 0;
}

77
static int
L
Linus Torvalds 已提交
78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96
pipe_iov_copy_to_user(struct iovec *iov, const void *from, unsigned long len)
{
	unsigned long copy;

	while (len > 0) {
		while (!iov->iov_len)
			iov++;
		copy = min_t(unsigned long, len, iov->iov_len);

		if (copy_to_user(iov->iov_base, from, copy))
			return -EFAULT;
		from += copy;
		len -= copy;
		iov->iov_base += copy;
		iov->iov_len -= copy;
	}
	return 0;
}

97 98
static void anon_pipe_buf_release(struct pipe_inode_info *pipe,
				  struct pipe_buffer *buf)
L
Linus Torvalds 已提交
99 100 101
{
	struct page *page = buf->page;

102 103
	buf->flags &= ~PIPE_BUF_FLAG_STOLEN;

104 105 106
	/*
	 * If nobody else uses this page, and we don't already have a
	 * temporary page, let's keep track of it as a one-deep
107
	 * allocation cache. (Otherwise just release our reference to it)
108
	 */
109
	if (page_count(page) == 1 && !pipe->tmp_page)
110
		pipe->tmp_page = page;
111 112
	else
		page_cache_release(page);
L
Linus Torvalds 已提交
113 114
}

115 116
static void * anon_pipe_buf_map(struct file *file, struct pipe_inode_info *pipe,
				struct pipe_buffer *buf)
L
Linus Torvalds 已提交
117 118 119 120
{
	return kmap(buf->page);
}

121 122
static void anon_pipe_buf_unmap(struct pipe_inode_info *pipe,
				struct pipe_buffer *buf)
L
Linus Torvalds 已提交
123 124 125 126
{
	kunmap(buf->page);
}

127
static int anon_pipe_buf_steal(struct pipe_inode_info *pipe,
128 129
			       struct pipe_buffer *buf)
{
130
	buf->flags |= PIPE_BUF_FLAG_STOLEN;
131 132 133
	return 0;
}

134 135 136 137 138 139
static void anon_pipe_buf_get(struct pipe_inode_info *info,
			      struct pipe_buffer *buf)
{
	page_cache_get(buf->page);
}

L
Linus Torvalds 已提交
140 141 142 143 144
static struct pipe_buf_operations anon_pipe_buf_ops = {
	.can_merge = 1,
	.map = anon_pipe_buf_map,
	.unmap = anon_pipe_buf_unmap,
	.release = anon_pipe_buf_release,
145
	.steal = anon_pipe_buf_steal,
146
	.get = anon_pipe_buf_get,
L
Linus Torvalds 已提交
147 148 149 150 151 152 153
};

static ssize_t
pipe_readv(struct file *filp, const struct iovec *_iov,
	   unsigned long nr_segs, loff_t *ppos)
{
	struct inode *inode = filp->f_dentry->d_inode;
154
	struct pipe_inode_info *pipe;
L
Linus Torvalds 已提交
155 156 157 158 159 160 161 162 163 164 165 166
	int do_wakeup;
	ssize_t ret;
	struct iovec *iov = (struct iovec *)_iov;
	size_t total_len;

	total_len = iov_length(iov, nr_segs);
	/* Null read succeeds. */
	if (unlikely(total_len == 0))
		return 0;

	do_wakeup = 0;
	ret = 0;
167
	mutex_lock(&inode->i_mutex);
168
	pipe = inode->i_pipe;
L
Linus Torvalds 已提交
169
	for (;;) {
170
		int bufs = pipe->nrbufs;
L
Linus Torvalds 已提交
171
		if (bufs) {
172 173
			int curbuf = pipe->curbuf;
			struct pipe_buffer *buf = pipe->bufs + curbuf;
L
Linus Torvalds 已提交
174 175 176 177 178 179 180 181
			struct pipe_buf_operations *ops = buf->ops;
			void *addr;
			size_t chars = buf->len;
			int error;

			if (chars > total_len)
				chars = total_len;

182
			addr = ops->map(filp, pipe, buf);
183 184 185 186 187
			if (IS_ERR(addr)) {
				if (!ret)
					ret = PTR_ERR(addr);
				break;
			}
L
Linus Torvalds 已提交
188
			error = pipe_iov_copy_to_user(iov, addr + buf->offset, chars);
189
			ops->unmap(pipe, buf);
L
Linus Torvalds 已提交
190
			if (unlikely(error)) {
191 192
				if (!ret)
					ret = -EFAULT;
L
Linus Torvalds 已提交
193 194 195 196 197 198 199
				break;
			}
			ret += chars;
			buf->offset += chars;
			buf->len -= chars;
			if (!buf->len) {
				buf->ops = NULL;
200
				ops->release(pipe, buf);
L
Linus Torvalds 已提交
201
				curbuf = (curbuf + 1) & (PIPE_BUFFERS-1);
202 203
				pipe->curbuf = curbuf;
				pipe->nrbufs = --bufs;
L
Linus Torvalds 已提交
204 205 206 207 208 209 210 211
				do_wakeup = 1;
			}
			total_len -= chars;
			if (!total_len)
				break;	/* common path: read succeeded */
		}
		if (bufs)	/* More to do? */
			continue;
212
		if (!pipe->writers)
L
Linus Torvalds 已提交
213
			break;
214
		if (!pipe->waiting_writers) {
L
Linus Torvalds 已提交
215 216 217 218 219 220 221 222 223 224 225 226 227
			/* syscall merging: Usually we must not sleep
			 * if O_NONBLOCK is set, or if we got some data.
			 * But if a writer sleeps in kernel space, then
			 * we can wait for that data without violating POSIX.
			 */
			if (ret)
				break;
			if (filp->f_flags & O_NONBLOCK) {
				ret = -EAGAIN;
				break;
			}
		}
		if (signal_pending(current)) {
228 229
			if (!ret)
				ret = -ERESTARTSYS;
L
Linus Torvalds 已提交
230 231 232
			break;
		}
		if (do_wakeup) {
233 234
			wake_up_interruptible_sync(&pipe->wait);
 			kill_fasync(&pipe->fasync_writers, SIGIO, POLL_OUT);
L
Linus Torvalds 已提交
235
		}
236
		pipe_wait(pipe);
L
Linus Torvalds 已提交
237
	}
238
	mutex_unlock(&inode->i_mutex);
239 240

	/* Signal writers asynchronously that there is more room. */
L
Linus Torvalds 已提交
241
	if (do_wakeup) {
242 243
		wake_up_interruptible(&pipe->wait);
		kill_fasync(&pipe->fasync_writers, SIGIO, POLL_OUT);
L
Linus Torvalds 已提交
244 245 246 247 248 249 250 251 252 253
	}
	if (ret > 0)
		file_accessed(filp);
	return ret;
}

static ssize_t
pipe_read(struct file *filp, char __user *buf, size_t count, loff_t *ppos)
{
	struct iovec iov = { .iov_base = buf, .iov_len = count };
254

L
Linus Torvalds 已提交
255 256 257 258 259 260 261 262
	return pipe_readv(filp, &iov, 1, ppos);
}

static ssize_t
pipe_writev(struct file *filp, const struct iovec *_iov,
	    unsigned long nr_segs, loff_t *ppos)
{
	struct inode *inode = filp->f_dentry->d_inode;
263
	struct pipe_inode_info *pipe;
L
Linus Torvalds 已提交
264 265 266 267 268 269 270 271 272 273 274 275 276
	ssize_t ret;
	int do_wakeup;
	struct iovec *iov = (struct iovec *)_iov;
	size_t total_len;
	ssize_t chars;

	total_len = iov_length(iov, nr_segs);
	/* Null write succeeds. */
	if (unlikely(total_len == 0))
		return 0;

	do_wakeup = 0;
	ret = 0;
277
	mutex_lock(&inode->i_mutex);
278
	pipe = inode->i_pipe;
L
Linus Torvalds 已提交
279

280
	if (!pipe->readers) {
L
Linus Torvalds 已提交
281 282 283 284 285 286 287
		send_sig(SIGPIPE, current, 0);
		ret = -EPIPE;
		goto out;
	}

	/* We try to merge small writes */
	chars = total_len & (PAGE_SIZE-1); /* size of the last buffer */
288
	if (pipe->nrbufs && chars != 0) {
289 290
		int lastbuf = (pipe->curbuf + pipe->nrbufs - 1) &
							(PIPE_BUFFERS-1);
291
		struct pipe_buffer *buf = pipe->bufs + lastbuf;
L
Linus Torvalds 已提交
292 293
		struct pipe_buf_operations *ops = buf->ops;
		int offset = buf->offset + buf->len;
294

L
Linus Torvalds 已提交
295
		if (ops->can_merge && offset + chars <= PAGE_SIZE) {
296 297 298
			void *addr;
			int error;

299
			addr = ops->map(filp, pipe, buf);
300 301 302 303 304 305
			if (IS_ERR(addr)) {
				error = PTR_ERR(addr);
				goto out;
			}
			error = pipe_iov_copy_from_user(offset + addr, iov,
							chars);
306
			ops->unmap(pipe, buf);
L
Linus Torvalds 已提交
307 308 309 310 311 312 313 314 315 316 317 318 319 320
			ret = error;
			do_wakeup = 1;
			if (error)
				goto out;
			buf->len += chars;
			total_len -= chars;
			ret = chars;
			if (!total_len)
				goto out;
		}
	}

	for (;;) {
		int bufs;
321

322
		if (!pipe->readers) {
L
Linus Torvalds 已提交
323
			send_sig(SIGPIPE, current, 0);
324 325
			if (!ret)
				ret = -EPIPE;
L
Linus Torvalds 已提交
326 327
			break;
		}
328
		bufs = pipe->nrbufs;
L
Linus Torvalds 已提交
329
		if (bufs < PIPE_BUFFERS) {
330 331 332
			int newbuf = (pipe->curbuf + bufs) & (PIPE_BUFFERS-1);
			struct pipe_buffer *buf = pipe->bufs + newbuf;
			struct page *page = pipe->tmp_page;
L
Linus Torvalds 已提交
333 334 335 336 337 338 339 340
			int error;

			if (!page) {
				page = alloc_page(GFP_HIGHUSER);
				if (unlikely(!page)) {
					ret = ret ? : -ENOMEM;
					break;
				}
341
				pipe->tmp_page = page;
L
Linus Torvalds 已提交
342
			}
343
			/* Always wake up, even if the copy fails. Otherwise
L
Linus Torvalds 已提交
344 345 346 347 348 349 350 351 352 353 354 355
			 * we lock up (O_NONBLOCK-)readers that sleep due to
			 * syscall merging.
			 * FIXME! Is this really true?
			 */
			do_wakeup = 1;
			chars = PAGE_SIZE;
			if (chars > total_len)
				chars = total_len;

			error = pipe_iov_copy_from_user(kmap(page), iov, chars);
			kunmap(page);
			if (unlikely(error)) {
356 357
				if (!ret)
					ret = -EFAULT;
L
Linus Torvalds 已提交
358 359 360 361 362 363 364 365 366
				break;
			}
			ret += chars;

			/* Insert it into the buffer array */
			buf->page = page;
			buf->ops = &anon_pipe_buf_ops;
			buf->offset = 0;
			buf->len = chars;
367 368
			pipe->nrbufs = ++bufs;
			pipe->tmp_page = NULL;
L
Linus Torvalds 已提交
369 370 371 372 373 374 375 376

			total_len -= chars;
			if (!total_len)
				break;
		}
		if (bufs < PIPE_BUFFERS)
			continue;
		if (filp->f_flags & O_NONBLOCK) {
377 378
			if (!ret)
				ret = -EAGAIN;
L
Linus Torvalds 已提交
379 380 381
			break;
		}
		if (signal_pending(current)) {
382 383
			if (!ret)
				ret = -ERESTARTSYS;
L
Linus Torvalds 已提交
384 385 386
			break;
		}
		if (do_wakeup) {
387 388
			wake_up_interruptible_sync(&pipe->wait);
			kill_fasync(&pipe->fasync_readers, SIGIO, POLL_IN);
L
Linus Torvalds 已提交
389 390
			do_wakeup = 0;
		}
391 392 393
		pipe->waiting_writers++;
		pipe_wait(pipe);
		pipe->waiting_writers--;
L
Linus Torvalds 已提交
394 395
	}
out:
396
	mutex_unlock(&inode->i_mutex);
L
Linus Torvalds 已提交
397
	if (do_wakeup) {
398 399
		wake_up_interruptible(&pipe->wait);
		kill_fasync(&pipe->fasync_readers, SIGIO, POLL_IN);
L
Linus Torvalds 已提交
400 401
	}
	if (ret > 0)
402
		file_update_time(filp);
L
Linus Torvalds 已提交
403 404 405 406 407 408 409 410
	return ret;
}

static ssize_t
pipe_write(struct file *filp, const char __user *buf,
	   size_t count, loff_t *ppos)
{
	struct iovec iov = { .iov_base = (void __user *)buf, .iov_len = count };
411

L
Linus Torvalds 已提交
412 413 414 415 416 417 418 419 420 421
	return pipe_writev(filp, &iov, 1, ppos);
}

static ssize_t
bad_pipe_r(struct file *filp, char __user *buf, size_t count, loff_t *ppos)
{
	return -EBADF;
}

static ssize_t
422 423
bad_pipe_w(struct file *filp, const char __user *buf, size_t count,
	   loff_t *ppos)
L
Linus Torvalds 已提交
424 425 426 427 428 429 430 431 432
{
	return -EBADF;
}

static int
pipe_ioctl(struct inode *pino, struct file *filp,
	   unsigned int cmd, unsigned long arg)
{
	struct inode *inode = filp->f_dentry->d_inode;
433
	struct pipe_inode_info *pipe;
L
Linus Torvalds 已提交
434 435 436 437
	int count, buf, nrbufs;

	switch (cmd) {
		case FIONREAD:
438
			mutex_lock(&inode->i_mutex);
439
			pipe = inode->i_pipe;
L
Linus Torvalds 已提交
440
			count = 0;
441 442
			buf = pipe->curbuf;
			nrbufs = pipe->nrbufs;
L
Linus Torvalds 已提交
443
			while (--nrbufs >= 0) {
444
				count += pipe->bufs[buf].len;
L
Linus Torvalds 已提交
445 446
				buf = (buf+1) & (PIPE_BUFFERS-1);
			}
447
			mutex_unlock(&inode->i_mutex);
448

L
Linus Torvalds 已提交
449 450 451 452 453 454 455 456 457 458 459 460
			return put_user(count, (int __user *)arg);
		default:
			return -EINVAL;
	}
}

/* No kernel lock held - fine */
static unsigned int
pipe_poll(struct file *filp, poll_table *wait)
{
	unsigned int mask;
	struct inode *inode = filp->f_dentry->d_inode;
461
	struct pipe_inode_info *pipe = inode->i_pipe;
L
Linus Torvalds 已提交
462 463
	int nrbufs;

464
	poll_wait(filp, &pipe->wait, wait);
L
Linus Torvalds 已提交
465 466

	/* Reading only -- no need for acquiring the semaphore.  */
467
	nrbufs = pipe->nrbufs;
L
Linus Torvalds 已提交
468 469 470
	mask = 0;
	if (filp->f_mode & FMODE_READ) {
		mask = (nrbufs > 0) ? POLLIN | POLLRDNORM : 0;
471
		if (!pipe->writers && filp->f_version != pipe->w_counter)
L
Linus Torvalds 已提交
472 473 474 475 476
			mask |= POLLHUP;
	}

	if (filp->f_mode & FMODE_WRITE) {
		mask |= (nrbufs < PIPE_BUFFERS) ? POLLOUT | POLLWRNORM : 0;
477 478 479 480
		/*
		 * Most Unices do not set POLLERR for FIFOs but on Linux they
		 * behave exactly like pipes for poll().
		 */
481
		if (!pipe->readers)
L
Linus Torvalds 已提交
482 483 484 485 486 487 488 489 490
			mask |= POLLERR;
	}

	return mask;
}

static int
pipe_release(struct inode *inode, int decr, int decw)
{
491 492
	struct pipe_inode_info *pipe;

493
	mutex_lock(&inode->i_mutex);
494 495 496
	pipe = inode->i_pipe;
	pipe->readers -= decr;
	pipe->writers -= decw;
497

498
	if (!pipe->readers && !pipe->writers) {
L
Linus Torvalds 已提交
499 500
		free_pipe_info(inode);
	} else {
501 502 503
		wake_up_interruptible(&pipe->wait);
		kill_fasync(&pipe->fasync_readers, SIGIO, POLL_IN);
		kill_fasync(&pipe->fasync_writers, SIGIO, POLL_OUT);
L
Linus Torvalds 已提交
504
	}
505
	mutex_unlock(&inode->i_mutex);
L
Linus Torvalds 已提交
506 507 508 509 510 511 512 513 514 515

	return 0;
}

static int
pipe_read_fasync(int fd, struct file *filp, int on)
{
	struct inode *inode = filp->f_dentry->d_inode;
	int retval;

516 517 518
	mutex_lock(&inode->i_mutex);
	retval = fasync_helper(fd, filp, on, &inode->i_pipe->fasync_readers);
	mutex_unlock(&inode->i_mutex);
L
Linus Torvalds 已提交
519 520 521 522 523 524 525 526 527 528 529 530 531 532

	if (retval < 0)
		return retval;

	return 0;
}


static int
pipe_write_fasync(int fd, struct file *filp, int on)
{
	struct inode *inode = filp->f_dentry->d_inode;
	int retval;

533 534 535
	mutex_lock(&inode->i_mutex);
	retval = fasync_helper(fd, filp, on, &inode->i_pipe->fasync_writers);
	mutex_unlock(&inode->i_mutex);
L
Linus Torvalds 已提交
536 537 538 539 540 541 542 543 544 545 546 547

	if (retval < 0)
		return retval;

	return 0;
}


static int
pipe_rdwr_fasync(int fd, struct file *filp, int on)
{
	struct inode *inode = filp->f_dentry->d_inode;
548
	struct pipe_inode_info *pipe = inode->i_pipe;
L
Linus Torvalds 已提交
549 550
	int retval;

551
	mutex_lock(&inode->i_mutex);
L
Linus Torvalds 已提交
552

553
	retval = fasync_helper(fd, filp, on, &pipe->fasync_readers);
L
Linus Torvalds 已提交
554 555

	if (retval >= 0)
556
		retval = fasync_helper(fd, filp, on, &pipe->fasync_writers);
L
Linus Torvalds 已提交
557

558
	mutex_unlock(&inode->i_mutex);
L
Linus Torvalds 已提交
559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596

	if (retval < 0)
		return retval;

	return 0;
}


static int
pipe_read_release(struct inode *inode, struct file *filp)
{
	pipe_read_fasync(-1, filp, 0);
	return pipe_release(inode, 1, 0);
}

static int
pipe_write_release(struct inode *inode, struct file *filp)
{
	pipe_write_fasync(-1, filp, 0);
	return pipe_release(inode, 0, 1);
}

static int
pipe_rdwr_release(struct inode *inode, struct file *filp)
{
	int decr, decw;

	pipe_rdwr_fasync(-1, filp, 0);
	decr = (filp->f_mode & FMODE_READ) != 0;
	decw = (filp->f_mode & FMODE_WRITE) != 0;
	return pipe_release(inode, decr, decw);
}

static int
pipe_read_open(struct inode *inode, struct file *filp)
{
	/* We could have perhaps used atomic_t, but this and friends
	   below are the only places.  So it doesn't seem worthwhile.  */
597 598 599
	mutex_lock(&inode->i_mutex);
	inode->i_pipe->readers++;
	mutex_unlock(&inode->i_mutex);
L
Linus Torvalds 已提交
600 601 602 603 604 605 606

	return 0;
}

static int
pipe_write_open(struct inode *inode, struct file *filp)
{
607 608 609
	mutex_lock(&inode->i_mutex);
	inode->i_pipe->writers++;
	mutex_unlock(&inode->i_mutex);
L
Linus Torvalds 已提交
610 611 612 613 614 615 616

	return 0;
}

static int
pipe_rdwr_open(struct inode *inode, struct file *filp)
{
617
	mutex_lock(&inode->i_mutex);
L
Linus Torvalds 已提交
618
	if (filp->f_mode & FMODE_READ)
619
		inode->i_pipe->readers++;
L
Linus Torvalds 已提交
620
	if (filp->f_mode & FMODE_WRITE)
621 622
		inode->i_pipe->writers++;
	mutex_unlock(&inode->i_mutex);
L
Linus Torvalds 已提交
623 624 625 626 627 628 629 630

	return 0;
}

/*
 * The file_operations structs are not static because they
 * are also used in linux/fs/fifo.c to do operations on FIFOs.
 */
631
const struct file_operations read_fifo_fops = {
L
Linus Torvalds 已提交
632 633 634 635
	.llseek		= no_llseek,
	.read		= pipe_read,
	.readv		= pipe_readv,
	.write		= bad_pipe_w,
636
	.poll		= pipe_poll,
L
Linus Torvalds 已提交
637 638 639 640 641 642
	.ioctl		= pipe_ioctl,
	.open		= pipe_read_open,
	.release	= pipe_read_release,
	.fasync		= pipe_read_fasync,
};

643
const struct file_operations write_fifo_fops = {
L
Linus Torvalds 已提交
644 645 646 647
	.llseek		= no_llseek,
	.read		= bad_pipe_r,
	.write		= pipe_write,
	.writev		= pipe_writev,
648
	.poll		= pipe_poll,
L
Linus Torvalds 已提交
649 650 651 652 653 654
	.ioctl		= pipe_ioctl,
	.open		= pipe_write_open,
	.release	= pipe_write_release,
	.fasync		= pipe_write_fasync,
};

655
const struct file_operations rdwr_fifo_fops = {
L
Linus Torvalds 已提交
656 657 658 659 660
	.llseek		= no_llseek,
	.read		= pipe_read,
	.readv		= pipe_readv,
	.write		= pipe_write,
	.writev		= pipe_writev,
661
	.poll		= pipe_poll,
L
Linus Torvalds 已提交
662 663 664 665 666 667
	.ioctl		= pipe_ioctl,
	.open		= pipe_rdwr_open,
	.release	= pipe_rdwr_release,
	.fasync		= pipe_rdwr_fasync,
};

668
static struct file_operations read_pipe_fops = {
L
Linus Torvalds 已提交
669 670 671 672 673 674 675 676 677 678 679
	.llseek		= no_llseek,
	.read		= pipe_read,
	.readv		= pipe_readv,
	.write		= bad_pipe_w,
	.poll		= pipe_poll,
	.ioctl		= pipe_ioctl,
	.open		= pipe_read_open,
	.release	= pipe_read_release,
	.fasync		= pipe_read_fasync,
};

680
static struct file_operations write_pipe_fops = {
L
Linus Torvalds 已提交
681 682 683 684 685 686 687 688 689 690 691
	.llseek		= no_llseek,
	.read		= bad_pipe_r,
	.write		= pipe_write,
	.writev		= pipe_writev,
	.poll		= pipe_poll,
	.ioctl		= pipe_ioctl,
	.open		= pipe_write_open,
	.release	= pipe_write_release,
	.fasync		= pipe_write_fasync,
};

692
static struct file_operations rdwr_pipe_fops = {
L
Linus Torvalds 已提交
693 694 695 696 697 698 699 700 701 702 703 704
	.llseek		= no_llseek,
	.read		= pipe_read,
	.readv		= pipe_readv,
	.write		= pipe_write,
	.writev		= pipe_writev,
	.poll		= pipe_poll,
	.ioctl		= pipe_ioctl,
	.open		= pipe_rdwr_open,
	.release	= pipe_rdwr_release,
	.fasync		= pipe_rdwr_fasync,
};

705 706
struct pipe_inode_info * alloc_pipe_info(struct inode *inode)
{
707
	struct pipe_inode_info *pipe;
708

709 710 711 712 713
	pipe = kzalloc(sizeof(struct pipe_inode_info), GFP_KERNEL);
	if (pipe) {
		init_waitqueue_head(&pipe->wait);
		pipe->r_counter = pipe->w_counter = 1;
		pipe->inode = inode;
714 715
	}

716
	return pipe;
717 718
}

719
void __free_pipe_info(struct pipe_inode_info *pipe)
L
Linus Torvalds 已提交
720 721 722 723
{
	int i;

	for (i = 0; i < PIPE_BUFFERS; i++) {
724
		struct pipe_buffer *buf = pipe->bufs + i;
L
Linus Torvalds 已提交
725
		if (buf->ops)
726
			buf->ops->release(pipe, buf);
L
Linus Torvalds 已提交
727
	}
728 729 730
	if (pipe->tmp_page)
		__free_page(pipe->tmp_page);
	kfree(pipe);
L
Linus Torvalds 已提交
731 732
}

733 734 735 736 737 738
void free_pipe_info(struct inode *inode)
{
	__free_pipe_info(inode->i_pipe);
	inode->i_pipe = NULL;
}

739
static struct vfsmount *pipe_mnt __read_mostly;
L
Linus Torvalds 已提交
740 741 742 743
static int pipefs_delete_dentry(struct dentry *dentry)
{
	return 1;
}
744

L
Linus Torvalds 已提交
745 746 747 748 749 750 751
static struct dentry_operations pipefs_dentry_operations = {
	.d_delete	= pipefs_delete_dentry,
};

static struct inode * get_pipe_inode(void)
{
	struct inode *inode = new_inode(pipe_mnt->mnt_sb);
752
	struct pipe_inode_info *pipe;
L
Linus Torvalds 已提交
753 754 755 756

	if (!inode)
		goto fail_inode;

757 758
	pipe = alloc_pipe_info(inode);
	if (!pipe)
L
Linus Torvalds 已提交
759
		goto fail_iput;
760
	inode->i_pipe = pipe;
761

762
	pipe->readers = pipe->writers = 1;
L
Linus Torvalds 已提交
763 764 765 766 767 768 769 770 771 772 773 774 775 776
	inode->i_fop = &rdwr_pipe_fops;

	/*
	 * Mark the inode dirty from the very beginning,
	 * that way it will never be moved to the dirty
	 * list because "mark_inode_dirty()" will think
	 * that it already _is_ on the dirty list.
	 */
	inode->i_state = I_DIRTY;
	inode->i_mode = S_IFIFO | S_IRUSR | S_IWUSR;
	inode->i_uid = current->fsuid;
	inode->i_gid = current->fsgid;
	inode->i_atime = inode->i_mtime = inode->i_ctime = CURRENT_TIME;
	inode->i_blksize = PAGE_SIZE;
777

L
Linus Torvalds 已提交
778 779 780 781
	return inode;

fail_iput:
	iput(inode);
782

L
Linus Torvalds 已提交
783 784 785 786 787 788 789 790 791 792 793 794
fail_inode:
	return NULL;
}

int do_pipe(int *fd)
{
	struct qstr this;
	char name[32];
	struct dentry *dentry;
	struct inode * inode;
	struct file *f1, *f2;
	int error;
795
	int i, j;
L
Linus Torvalds 已提交
796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827

	error = -ENFILE;
	f1 = get_empty_filp();
	if (!f1)
		goto no_files;

	f2 = get_empty_filp();
	if (!f2)
		goto close_f1;

	inode = get_pipe_inode();
	if (!inode)
		goto close_f12;

	error = get_unused_fd();
	if (error < 0)
		goto close_f12_inode;
	i = error;

	error = get_unused_fd();
	if (error < 0)
		goto close_f12_inode_i;
	j = error;

	error = -ENOMEM;
	sprintf(name, "[%lu]", inode->i_ino);
	this.name = name;
	this.len = strlen(name);
	this.hash = inode->i_ino; /* will go */
	dentry = d_alloc(pipe_mnt->mnt_sb->s_root, &this);
	if (!dentry)
		goto close_f12_inode_i_j;
828

L
Linus Torvalds 已提交
829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851
	dentry->d_op = &pipefs_dentry_operations;
	d_add(dentry, inode);
	f1->f_vfsmnt = f2->f_vfsmnt = mntget(mntget(pipe_mnt));
	f1->f_dentry = f2->f_dentry = dget(dentry);
	f1->f_mapping = f2->f_mapping = inode->i_mapping;

	/* read file */
	f1->f_pos = f2->f_pos = 0;
	f1->f_flags = O_RDONLY;
	f1->f_op = &read_pipe_fops;
	f1->f_mode = FMODE_READ;
	f1->f_version = 0;

	/* write file */
	f2->f_flags = O_WRONLY;
	f2->f_op = &write_pipe_fops;
	f2->f_mode = FMODE_WRITE;
	f2->f_version = 0;

	fd_install(i, f1);
	fd_install(j, f2);
	fd[0] = i;
	fd[1] = j;
852

L
Linus Torvalds 已提交
853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876
	return 0;

close_f12_inode_i_j:
	put_unused_fd(j);
close_f12_inode_i:
	put_unused_fd(i);
close_f12_inode:
	free_pipe_info(inode);
	iput(inode);
close_f12:
	put_filp(f2);
close_f1:
	put_filp(f1);
no_files:
	return error;	
}

/*
 * pipefs should _never_ be mounted by userland - too much of security hassle,
 * no real gain from having the whole whorehouse mounted. So we don't need
 * any operations on the root directory. However, we need a non-trivial
 * d_name - pipe: will go nicely and kill the special-casing in procfs.
 */

877 878 879
static struct super_block *
pipefs_get_sb(struct file_system_type *fs_type, int flags,
	      const char *dev_name, void *data)
L
Linus Torvalds 已提交
880 881 882 883 884 885 886 887 888 889 890 891 892
{
	return get_sb_pseudo(fs_type, "pipe:", NULL, PIPEFS_MAGIC);
}

static struct file_system_type pipe_fs_type = {
	.name		= "pipefs",
	.get_sb		= pipefs_get_sb,
	.kill_sb	= kill_anon_super,
};

static int __init init_pipe_fs(void)
{
	int err = register_filesystem(&pipe_fs_type);
893

L
Linus Torvalds 已提交
894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911
	if (!err) {
		pipe_mnt = kern_mount(&pipe_fs_type);
		if (IS_ERR(pipe_mnt)) {
			err = PTR_ERR(pipe_mnt);
			unregister_filesystem(&pipe_fs_type);
		}
	}
	return err;
}

static void __exit exit_pipe_fs(void)
{
	unregister_filesystem(&pipe_fs_type);
	mntput(pipe_mnt);
}

fs_initcall(init_pipe_fs);
module_exit(exit_pipe_fs);