ssb: Fix range check in sprom write
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / drivers / ssb / sprom.c
blobeb708431cb964d36e57ab80b9a9d18b1e5f7f7cb
1 /*
2 * Sonics Silicon Backplane
3 * Common SPROM support routines
5 * Copyright (C) 2005-2008 Michael Buesch <mb@bu3sch.de>
6 * Copyright (C) 2005 Martin Langer <martin-langer@gmx.de>
7 * Copyright (C) 2005 Stefano Brivio <st3@riseup.net>
8 * Copyright (C) 2005 Danny van Dyk <kugelfang@gentoo.org>
9 * Copyright (C) 2005 Andreas Jaggi <andreas.jaggi@waterwave.ch>
11 * Licensed under the GNU/GPL. See COPYING for details.
14 #include "ssb_private.h"
16 #include <linux/ctype.h>
19 static const struct ssb_sprom *fallback_sprom;
22 static int sprom2hex(const u16 *sprom, char *buf, size_t buf_len,
23 size_t sprom_size_words)
25 int i, pos = 0;
27 for (i = 0; i < sprom_size_words; i++)
28 pos += snprintf(buf + pos, buf_len - pos - 1,
29 "%04X", swab16(sprom[i]) & 0xFFFF);
30 pos += snprintf(buf + pos, buf_len - pos - 1, "\n");
32 return pos + 1;
35 static int hex2sprom(u16 *sprom, const char *dump, size_t len,
36 size_t sprom_size_words)
38 char c, tmp[5] = { 0 };
39 int err, cnt = 0;
40 unsigned long parsed;
42 /* Strip whitespace at the end. */
43 while (len) {
44 c = dump[len - 1];
45 if (!isspace(c) && c != '\0')
46 break;
47 len--;
49 /* Length must match exactly. */
50 if (len != sprom_size_words * 4)
51 return -EINVAL;
53 while (cnt < sprom_size_words) {
54 memcpy(tmp, dump, 4);
55 dump += 4;
56 err = strict_strtoul(tmp, 16, &parsed);
57 if (err)
58 return err;
59 sprom[cnt++] = swab16((u16)parsed);
62 return 0;
65 /* Common sprom device-attribute show-handler */
66 ssize_t ssb_attr_sprom_show(struct ssb_bus *bus, char *buf,
67 int (*sprom_read)(struct ssb_bus *bus, u16 *sprom))
69 u16 *sprom;
70 int err = -ENOMEM;
71 ssize_t count = 0;
72 size_t sprom_size_words = bus->sprom_size;
74 sprom = kcalloc(sprom_size_words, sizeof(u16), GFP_KERNEL);
75 if (!sprom)
76 goto out;
78 /* Use interruptible locking, as the SPROM write might
79 * be holding the lock for several seconds. So allow userspace
80 * to cancel operation. */
81 err = -ERESTARTSYS;
82 if (mutex_lock_interruptible(&bus->sprom_mutex))
83 goto out_kfree;
84 err = sprom_read(bus, sprom);
85 mutex_unlock(&bus->sprom_mutex);
87 if (!err)
88 count = sprom2hex(sprom, buf, PAGE_SIZE, sprom_size_words);
90 out_kfree:
91 kfree(sprom);
92 out:
93 return err ? err : count;
96 /* Common sprom device-attribute store-handler */
97 ssize_t ssb_attr_sprom_store(struct ssb_bus *bus,
98 const char *buf, size_t count,
99 int (*sprom_check_crc)(const u16 *sprom, size_t size),
100 int (*sprom_write)(struct ssb_bus *bus, const u16 *sprom))
102 u16 *sprom;
103 int res = 0, err = -ENOMEM;
104 size_t sprom_size_words = bus->sprom_size;
106 sprom = kcalloc(bus->sprom_size, sizeof(u16), GFP_KERNEL);
107 if (!sprom)
108 goto out;
109 err = hex2sprom(sprom, buf, count, sprom_size_words);
110 if (err) {
111 err = -EINVAL;
112 goto out_kfree;
114 err = sprom_check_crc(sprom, sprom_size_words);
115 if (err) {
116 err = -EINVAL;
117 goto out_kfree;
120 /* Use interruptible locking, as the SPROM write might
121 * be holding the lock for several seconds. So allow userspace
122 * to cancel operation. */
123 err = -ERESTARTSYS;
124 if (mutex_lock_interruptible(&bus->sprom_mutex))
125 goto out_kfree;
126 err = ssb_devices_freeze(bus);
127 if (err == -EOPNOTSUPP) {
128 ssb_printk(KERN_ERR PFX "SPROM write: Could not freeze devices. "
129 "No suspend support. Is CONFIG_PM enabled?\n");
130 goto out_unlock;
132 if (err) {
133 ssb_printk(KERN_ERR PFX "SPROM write: Could not freeze all devices\n");
134 goto out_unlock;
136 res = sprom_write(bus, sprom);
137 err = ssb_devices_thaw(bus);
138 if (err)
139 ssb_printk(KERN_ERR PFX "SPROM write: Could not thaw all devices\n");
140 out_unlock:
141 mutex_unlock(&bus->sprom_mutex);
142 out_kfree:
143 kfree(sprom);
144 out:
145 if (res)
146 return res;
147 return err ? err : count;
151 * ssb_arch_set_fallback_sprom - Set a fallback SPROM for use if no SPROM is found.
153 * @sprom: The SPROM data structure to register.
155 * With this function the architecture implementation may register a fallback
156 * SPROM data structure. The fallback is only used for PCI based SSB devices,
157 * where no valid SPROM can be found in the shadow registers.
159 * This function is useful for weird architectures that have a half-assed SSB device
160 * hardwired to their PCI bus.
162 * Note that it does only work with PCI attached SSB devices. PCMCIA devices currently
163 * don't use this fallback.
164 * Architectures must provide the SPROM for native SSB devices anyway,
165 * so the fallback also isn't used for native devices.
167 * This function is available for architecture code, only. So it is not exported.
169 int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom)
171 if (fallback_sprom)
172 return -EEXIST;
173 fallback_sprom = sprom;
175 return 0;
178 const struct ssb_sprom *ssb_get_fallback_sprom(void)
180 return fallback_sprom;