bridge: fix a possible use after free
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / drivers / media / video / v4l2-int-device.c
bloba935bae538ef26f4455cea5f58e0bf1da2b7c159
1 /*
2 * drivers/media/video/v4l2-int-device.c
4 * V4L2 internal ioctl interface.
6 * Copyright (C) 2007 Nokia Corporation.
8 * Contact: Sakari Ailus <sakari.ailus@nokia.com>
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * version 2 as published by the Free Software Foundation.
14 * This program is distributed in the hope that it will be useful, but
15 * WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 * General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
22 * 02110-1301 USA
25 #include <linux/kernel.h>
26 #include <linux/list.h>
27 #include <linux/sort.h>
28 #include <linux/string.h>
30 #include <media/v4l2-int-device.h>
32 static DEFINE_MUTEX(mutex);
33 static LIST_HEAD(int_list);
35 void v4l2_int_device_try_attach_all(void)
37 struct v4l2_int_device *m, *s;
39 list_for_each_entry(m, &int_list, head) {
40 if (m->type != v4l2_int_type_master)
41 continue;
43 list_for_each_entry(s, &int_list, head) {
44 if (s->type != v4l2_int_type_slave)
45 continue;
47 /* Slave is connected? */
48 if (s->u.slave->master)
49 continue;
51 /* Slave wants to attach to master? */
52 if (s->u.slave->attach_to[0] != 0
53 && strncmp(m->name, s->u.slave->attach_to,
54 V4L2NAMESIZE))
55 continue;
57 if (!try_module_get(m->module))
58 continue;
60 s->u.slave->master = m;
61 if (m->u.master->attach(s)) {
62 s->u.slave->master = NULL;
63 module_put(m->module);
64 continue;
69 EXPORT_SYMBOL_GPL(v4l2_int_device_try_attach_all);
71 static int ioctl_sort_cmp(const void *a, const void *b)
73 const struct v4l2_int_ioctl_desc *d1 = a, *d2 = b;
75 if (d1->num > d2->num)
76 return 1;
78 if (d1->num < d2->num)
79 return -1;
81 return 0;
84 int v4l2_int_device_register(struct v4l2_int_device *d)
86 if (d->type == v4l2_int_type_slave)
87 sort(d->u.slave->ioctls, d->u.slave->num_ioctls,
88 sizeof(struct v4l2_int_ioctl_desc),
89 &ioctl_sort_cmp, NULL);
90 mutex_lock(&mutex);
91 list_add(&d->head, &int_list);
92 v4l2_int_device_try_attach_all();
93 mutex_unlock(&mutex);
95 return 0;
97 EXPORT_SYMBOL_GPL(v4l2_int_device_register);
99 void v4l2_int_device_unregister(struct v4l2_int_device *d)
101 mutex_lock(&mutex);
102 list_del(&d->head);
103 if (d->type == v4l2_int_type_slave
104 && d->u.slave->master != NULL) {
105 d->u.slave->master->u.master->detach(d);
106 module_put(d->u.slave->master->module);
107 d->u.slave->master = NULL;
109 mutex_unlock(&mutex);
111 EXPORT_SYMBOL_GPL(v4l2_int_device_unregister);
113 /* Adapted from search_extable in extable.c. */
114 static v4l2_int_ioctl_func *find_ioctl(struct v4l2_int_slave *slave, int cmd,
115 v4l2_int_ioctl_func *no_such_ioctl)
117 const struct v4l2_int_ioctl_desc *first = slave->ioctls;
118 const struct v4l2_int_ioctl_desc *last =
119 first + slave->num_ioctls - 1;
121 while (first <= last) {
122 const struct v4l2_int_ioctl_desc *mid;
124 mid = (last - first) / 2 + first;
126 if (mid->num < cmd)
127 first = mid + 1;
128 else if (mid->num > cmd)
129 last = mid - 1;
130 else
131 return mid->func;
134 return no_such_ioctl;
137 static int no_such_ioctl_0(struct v4l2_int_device *d)
139 return -ENOIOCTLCMD;
142 int v4l2_int_ioctl_0(struct v4l2_int_device *d, int cmd)
144 return ((v4l2_int_ioctl_func_0 *)
145 find_ioctl(d->u.slave, cmd,
146 (v4l2_int_ioctl_func *)no_such_ioctl_0))(d);
148 EXPORT_SYMBOL_GPL(v4l2_int_ioctl_0);
150 static int no_such_ioctl_1(struct v4l2_int_device *d, void *arg)
152 return -ENOIOCTLCMD;
155 int v4l2_int_ioctl_1(struct v4l2_int_device *d, int cmd, void *arg)
157 return ((v4l2_int_ioctl_func_1 *)
158 find_ioctl(d->u.slave, cmd,
159 (v4l2_int_ioctl_func *)no_such_ioctl_1))(d, arg);
161 EXPORT_SYMBOL_GPL(v4l2_int_ioctl_1);
163 MODULE_LICENSE("GPL");