2 * Authors: Bjorn Wesen (bjornw@axis.com)
3 * Hans-Peter Nilsson (hp@axis.com)
6 * Revision 1.8 2001/10/29 13:01:48 bjornw
7 * Removed unused variable tmp2 in strnlen_user
9 * Revision 1.7 2001/10/02 12:44:52 hp
10 * Add support for 64-bit put_user/get_user
12 * Revision 1.6 2001/10/01 14:51:17 bjornw
13 * Added register prefixes and removed underscores
15 * Revision 1.5 2000/10/25 03:33:21 hp
16 * - Provide implementation for everything else but get_user and put_user;
17 * copying inline to/from user for constant length 0..16, 20, 24, and
18 * clearing for 0..4, 8, 12, 16, 20, 24, strncpy_from_user and strnlen_user
20 * - Constraints for destination addr in get_user cannot be memory, only reg.
21 * - Correct labels for PC at expected fault points.
22 * - Nits with assembly code.
23 * - Don't use statement expressions without value; use "do {} while (0)".
24 * - Return correct values from __generic_... functions.
26 * Revision 1.4 2000/09/12 16:28:25 bjornw
27 * * Removed comments from the get/put user asm code
28 * * Constrains for destination addr in put_user cannot be memory, only reg
30 * Revision 1.3 2000/09/12 14:30:20 bjornw
31 * MAX_ADDR_USER does not exist anymore
33 * Revision 1.2 2000/07/13 15:52:48 bjornw
34 * New user-access functions
36 * Revision 1.1.1.1 2000/07/10 16:32:31 bjornw
37 * CRIS architecture, working draft
43 /* Asm:s have been tweaked (within the domain of correctness) to give
44 satisfactory results for "gcc version 2.96 20000427 (experimental)".
48 Register $r9 is chosen for temporaries, being a call-clobbered register
49 first in line to be used (notably for local blocks), not colliding with
50 parameter registers. */
52 #ifndef _CRIS_UACCESS_H
53 #define _CRIS_UACCESS_H
56 #include <linux/sched.h>
57 #include <linux/errno.h>
58 #include <asm/processor.h>
62 #define VERIFY_WRITE 1
65 * The fs value determines whether argument validity checking should be
66 * performed or not. If get_fs() == USER_DS, checking is performed, with
67 * get_fs() == KERNEL_DS, checking is bypassed.
69 * For historical reasons, these macros are grossly misnamed.
72 #define MAKE_MM_SEG(s) ((mm_segment_t) { (s) })
74 /* addr_limit is the maximum accessible address for the task. we misuse
75 * the KERNEL_DS and USER_DS values to both assign and compare the
76 * addr_limit values through the equally misnamed get/set_fs macros.
80 #define KERNEL_DS MAKE_MM_SEG(0xFFFFFFFF)
81 #define USER_DS MAKE_MM_SEG(TASK_SIZE)
83 #define get_ds() (KERNEL_DS)
84 #define get_fs() (current_thread_info()->addr_limit)
85 #define set_fs(x) (current_thread_info()->addr_limit = (x))
87 #define segment_eq(a,b) ((a).seg == (b).seg)
89 #define __kernel_ok (segment_eq(get_fs(), KERNEL_DS))
90 #define __user_ok(addr,size) (((size) <= TASK_SIZE)&&((addr) <= TASK_SIZE-(size)))
91 #define __access_ok(addr,size) (__kernel_ok || __user_ok((addr),(size)))
92 #define access_ok(type,addr,size) __access_ok((unsigned long)(addr),(size))
94 #include <asm/arch/uaccess.h>
97 * The exception table consists of pairs of addresses: the first is the
98 * address of an instruction that is allowed to fault, and the second is
99 * the address at which the program should continue. No registers are
100 * modified, so it is entirely up to the continuation code to figure out
103 * All the routines below use bits of fixup code that are out of line
104 * with the main instruction path. This means when everything is well,
105 * we don't even have to jump over them. Further, they do not intrude
106 * on our cache or tlb entries.
109 struct exception_table_entry
111 unsigned long insn
, fixup
;
115 * These are the main single-value transfer routines. They automatically
116 * use the right size if we just have the right pointer type.
118 * This gets kind of ugly. We want to return _two_ values in "get_user()"
119 * and yet we don't want to do any pointers, because that is too much
120 * of a performance impact. Thus we have a few rather ugly macros here,
121 * and hide all the ugliness from the user.
123 * The "__xxx" versions of the user access functions are versions that
124 * do not verify the address space, that must have been done previously
125 * with a separate "access_ok()" call (this is used when we do multiple
126 * accesses to the same area of user memory).
128 * As we use the same address space for kernel and user data on
129 * CRIS, we can just do these as direct assignments. (Of course, the
130 * exception handling means that it's no longer "just"...)
132 #define get_user(x,ptr) \
133 __get_user_check((x),(ptr),sizeof(*(ptr)))
134 #define put_user(x,ptr) \
135 __put_user_check((__typeof__(*(ptr)))(x),(ptr),sizeof(*(ptr)))
137 #define __get_user(x,ptr) \
138 __get_user_nocheck((x),(ptr),sizeof(*(ptr)))
139 #define __put_user(x,ptr) \
140 __put_user_nocheck((__typeof__(*(ptr)))(x),(ptr),sizeof(*(ptr)))
142 extern long __put_user_bad(void);
144 #define __put_user_size(x,ptr,size,retval) \
148 case 1: __put_user_asm(x,ptr,retval,"move.b"); break; \
149 case 2: __put_user_asm(x,ptr,retval,"move.w"); break; \
150 case 4: __put_user_asm(x,ptr,retval,"move.d"); break; \
151 case 8: __put_user_asm_64(x,ptr,retval); break; \
152 default: __put_user_bad(); \
156 #define __get_user_size(x,ptr,size,retval) \
160 case 1: __get_user_asm(x,ptr,retval,"move.b"); break; \
161 case 2: __get_user_asm(x,ptr,retval,"move.w"); break; \
162 case 4: __get_user_asm(x,ptr,retval,"move.d"); break; \
163 case 8: __get_user_asm_64(x,ptr,retval); break; \
164 default: (x) = __get_user_bad(); \
168 #define __put_user_nocheck(x,ptr,size) \
171 __put_user_size((x),(ptr),(size),__pu_err); \
175 #define __put_user_check(x,ptr,size) \
177 long __pu_err = -EFAULT; \
178 __typeof__(*(ptr)) *__pu_addr = (ptr); \
179 if (access_ok(VERIFY_WRITE,__pu_addr,size)) \
180 __put_user_size((x),__pu_addr,(size),__pu_err); \
184 struct __large_struct
{ unsigned long buf
[100]; };
185 #define __m(x) (*(struct __large_struct *)(x))
189 #define __get_user_nocheck(x,ptr,size) \
191 long __gu_err, __gu_val; \
192 __get_user_size(__gu_val,(ptr),(size),__gu_err); \
193 (x) = (__typeof__(*(ptr)))__gu_val; \
197 #define __get_user_check(x,ptr,size) \
199 long __gu_err = -EFAULT, __gu_val = 0; \
200 const __typeof__(*(ptr)) *__gu_addr = (ptr); \
201 if (access_ok(VERIFY_READ,__gu_addr,size)) \
202 __get_user_size(__gu_val,__gu_addr,(size),__gu_err); \
203 (x) = (__typeof__(*(ptr)))__gu_val; \
207 extern long __get_user_bad(void);
209 /* More complex functions. Most are inline, but some call functions that
210 live in lib/usercopy.c */
212 extern unsigned long __copy_user(void *to
, const void *from
, unsigned long n
);
213 extern unsigned long __copy_user_zeroing(void *to
, const void *from
, unsigned long n
);
214 extern unsigned long __do_clear_user(void *to
, unsigned long n
);
216 static inline unsigned long
217 __generic_copy_to_user(void __user
*to
, const void *from
, unsigned long n
)
219 if (access_ok(VERIFY_WRITE
, to
, n
))
220 return __copy_user(to
,from
,n
);
224 static inline unsigned long
225 __generic_copy_from_user(void *to
, const void __user
*from
, unsigned long n
)
227 if (access_ok(VERIFY_READ
, from
, n
))
228 return __copy_user_zeroing(to
,from
,n
);
232 static inline unsigned long
233 __generic_clear_user(void __user
*to
, unsigned long n
)
235 if (access_ok(VERIFY_WRITE
, to
, n
))
236 return __do_clear_user(to
,n
);
241 __strncpy_from_user(char *dst
, const char __user
*src
, long count
)
243 return __do_strncpy_from_user(dst
, src
, count
);
247 strncpy_from_user(char *dst
, const char __user
*src
, long count
)
250 if (access_ok(VERIFY_READ
, src
, 1))
251 res
= __do_strncpy_from_user(dst
, src
, count
);
256 /* Note that if these expand awfully if made into switch constructs, so
259 static inline unsigned long
260 __constant_copy_from_user(void *to
, const void __user
*from
, unsigned long n
)
262 unsigned long ret
= 0;
266 __asm_copy_from_user_1(to
, from
, ret
);
268 __asm_copy_from_user_2(to
, from
, ret
);
270 __asm_copy_from_user_3(to
, from
, ret
);
272 __asm_copy_from_user_4(to
, from
, ret
);
274 __asm_copy_from_user_5(to
, from
, ret
);
276 __asm_copy_from_user_6(to
, from
, ret
);
278 __asm_copy_from_user_7(to
, from
, ret
);
280 __asm_copy_from_user_8(to
, from
, ret
);
282 __asm_copy_from_user_9(to
, from
, ret
);
284 __asm_copy_from_user_10(to
, from
, ret
);
286 __asm_copy_from_user_11(to
, from
, ret
);
288 __asm_copy_from_user_12(to
, from
, ret
);
290 __asm_copy_from_user_13(to
, from
, ret
);
292 __asm_copy_from_user_14(to
, from
, ret
);
294 __asm_copy_from_user_15(to
, from
, ret
);
296 __asm_copy_from_user_16(to
, from
, ret
);
298 __asm_copy_from_user_20(to
, from
, ret
);
300 __asm_copy_from_user_24(to
, from
, ret
);
302 ret
= __generic_copy_from_user(to
, from
, n
);
307 /* Ditto, don't make a switch out of this. */
309 static inline unsigned long
310 __constant_copy_to_user(void __user
*to
, const void *from
, unsigned long n
)
312 unsigned long ret
= 0;
316 __asm_copy_to_user_1(to
, from
, ret
);
318 __asm_copy_to_user_2(to
, from
, ret
);
320 __asm_copy_to_user_3(to
, from
, ret
);
322 __asm_copy_to_user_4(to
, from
, ret
);
324 __asm_copy_to_user_5(to
, from
, ret
);
326 __asm_copy_to_user_6(to
, from
, ret
);
328 __asm_copy_to_user_7(to
, from
, ret
);
330 __asm_copy_to_user_8(to
, from
, ret
);
332 __asm_copy_to_user_9(to
, from
, ret
);
334 __asm_copy_to_user_10(to
, from
, ret
);
336 __asm_copy_to_user_11(to
, from
, ret
);
338 __asm_copy_to_user_12(to
, from
, ret
);
340 __asm_copy_to_user_13(to
, from
, ret
);
342 __asm_copy_to_user_14(to
, from
, ret
);
344 __asm_copy_to_user_15(to
, from
, ret
);
346 __asm_copy_to_user_16(to
, from
, ret
);
348 __asm_copy_to_user_20(to
, from
, ret
);
350 __asm_copy_to_user_24(to
, from
, ret
);
352 ret
= __generic_copy_to_user(to
, from
, n
);
357 /* No switch, please. */
359 static inline unsigned long
360 __constant_clear_user(void __user
*to
, unsigned long n
)
362 unsigned long ret
= 0;
366 __asm_clear_1(to
, ret
);
368 __asm_clear_2(to
, ret
);
370 __asm_clear_3(to
, ret
);
372 __asm_clear_4(to
, ret
);
374 __asm_clear_8(to
, ret
);
376 __asm_clear_12(to
, ret
);
378 __asm_clear_16(to
, ret
);
380 __asm_clear_20(to
, ret
);
382 __asm_clear_24(to
, ret
);
384 ret
= __generic_clear_user(to
, n
);
390 #define clear_user(to, n) \
391 (__builtin_constant_p(n) ? \
392 __constant_clear_user(to, n) : \
393 __generic_clear_user(to, n))
395 #define copy_from_user(to, from, n) \
396 (__builtin_constant_p(n) ? \
397 __constant_copy_from_user(to, from, n) : \
398 __generic_copy_from_user(to, from, n))
400 #define copy_to_user(to, from, n) \
401 (__builtin_constant_p(n) ? \
402 __constant_copy_to_user(to, from, n) : \
403 __generic_copy_to_user(to, from, n))
405 /* We let the __ versions of copy_from/to_user inline, because they're often
406 * used in fast paths and have only a small space overhead.
409 static inline unsigned long
410 __generic_copy_from_user_nocheck(void *to
, const void *from
, unsigned long n
)
412 return __copy_user_zeroing(to
,from
,n
);
415 static inline unsigned long
416 __generic_copy_to_user_nocheck(void *to
, const void *from
, unsigned long n
)
418 return __copy_user(to
,from
,n
);
421 static inline unsigned long
422 __generic_clear_user_nocheck(void *to
, unsigned long n
)
424 return __do_clear_user(to
,n
);
427 /* without checking */
429 #define __copy_to_user(to,from,n) __generic_copy_to_user_nocheck((to),(from),(n))
430 #define __copy_from_user(to,from,n) __generic_copy_from_user_nocheck((to),(from),(n))
431 #define __copy_to_user_inatomic __copy_to_user
432 #define __copy_from_user_inatomic __copy_from_user
433 #define __clear_user(to,n) __generic_clear_user_nocheck((to),(n))
435 #define strlen_user(str) strnlen_user((str), 0x7ffffffe)
437 #endif /* __ASSEMBLY__ */
439 #endif /* _CRIS_UACCESS_H */