1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3 * Copyright (C) 2003-2008 Takahiro Hirofuchi
4 */
5
6 #include <linux/string.h>
7 #include <linux/module.h>
8 #include <linux/device.h>
9
10 #include "usbip_common.h"
11 #include "stub.h"
12
13 #define DRIVER_AUTHOR "Takahiro Hirofuchi"
14 #define DRIVER_DESC "USB/IP Host Driver"
15
16 struct kmem_cache *stub_priv_cache;
17
18 /*
19 * busid_tables defines matching busids that usbip can grab. A user can change
20 * dynamically what device is locally used and what device is exported to a
21 * remote host.
22 */
23 #define MAX_BUSID 16
24 static struct bus_id_priv busid_table[MAX_BUSID];
25 static spinlock_t busid_table_lock;
26
init_busid_table(void)27 static void init_busid_table(void)
28 {
29 int i;
30
31 /*
32 * This also sets the bus_table[i].status to
33 * STUB_BUSID_OTHER, which is 0.
34 */
35 memset(busid_table, 0, sizeof(busid_table));
36
37 spin_lock_init(&busid_table_lock);
38
39 for (i = 0; i < MAX_BUSID; i++)
40 spin_lock_init(&busid_table[i].busid_lock);
41 }
42
43 /*
44 * Find the index of the busid by name.
45 * Must be called with busid_table_lock held.
46 */
get_busid_idx(const char * busid)47 static int get_busid_idx(const char *busid)
48 {
49 int i;
50 int idx = -1;
51
52 for (i = 0; i < MAX_BUSID; i++) {
53 spin_lock(&busid_table[i].busid_lock);
54 if (busid_table[i].name[0])
55 if (!strncmp(busid_table[i].name, busid, BUSID_SIZE)) {
56 idx = i;
57 spin_unlock(&busid_table[i].busid_lock);
58 break;
59 }
60 spin_unlock(&busid_table[i].busid_lock);
61 }
62 return idx;
63 }
64
65 /* Returns holding busid_lock. Should call put_busid_priv() to unlock */
get_busid_priv(const char * busid)66 struct bus_id_priv *get_busid_priv(const char *busid)
67 {
68 int idx;
69 struct bus_id_priv *bid = NULL;
70
71 spin_lock(&busid_table_lock);
72 idx = get_busid_idx(busid);
73 if (idx >= 0) {
74 bid = &(busid_table[idx]);
75 /* get busid_lock before returning */
76 spin_lock(&bid->busid_lock);
77 }
78 spin_unlock(&busid_table_lock);
79
80 return bid;
81 }
82
put_busid_priv(struct bus_id_priv * bid)83 void put_busid_priv(struct bus_id_priv *bid)
84 {
85 if (bid)
86 spin_unlock(&bid->busid_lock);
87 }
88
add_match_busid(char * busid)89 static int add_match_busid(char *busid)
90 {
91 int i;
92 int ret = -1;
93
94 spin_lock(&busid_table_lock);
95 /* already registered? */
96 if (get_busid_idx(busid) >= 0) {
97 ret = 0;
98 goto out;
99 }
100
101 for (i = 0; i < MAX_BUSID; i++) {
102 spin_lock(&busid_table[i].busid_lock);
103 if (!busid_table[i].name[0]) {
104 strlcpy(busid_table[i].name, busid, BUSID_SIZE);
105 if ((busid_table[i].status != STUB_BUSID_ALLOC) &&
106 (busid_table[i].status != STUB_BUSID_REMOV))
107 busid_table[i].status = STUB_BUSID_ADDED;
108 ret = 0;
109 spin_unlock(&busid_table[i].busid_lock);
110 break;
111 }
112 spin_unlock(&busid_table[i].busid_lock);
113 }
114
115 out:
116 spin_unlock(&busid_table_lock);
117
118 return ret;
119 }
120
del_match_busid(char * busid)121 int del_match_busid(char *busid)
122 {
123 int idx;
124 int ret = -1;
125
126 spin_lock(&busid_table_lock);
127 idx = get_busid_idx(busid);
128 if (idx < 0)
129 goto out;
130
131 /* found */
132 ret = 0;
133
134 spin_lock(&busid_table[idx].busid_lock);
135
136 if (busid_table[idx].status == STUB_BUSID_OTHER)
137 memset(busid_table[idx].name, 0, BUSID_SIZE);
138
139 if ((busid_table[idx].status != STUB_BUSID_OTHER) &&
140 (busid_table[idx].status != STUB_BUSID_ADDED))
141 busid_table[idx].status = STUB_BUSID_REMOV;
142
143 spin_unlock(&busid_table[idx].busid_lock);
144 out:
145 spin_unlock(&busid_table_lock);
146
147 return ret;
148 }
149
match_busid_show(struct device_driver * drv,char * buf)150 static ssize_t match_busid_show(struct device_driver *drv, char *buf)
151 {
152 int i;
153 char *out = buf;
154
155 spin_lock(&busid_table_lock);
156 for (i = 0; i < MAX_BUSID; i++) {
157 spin_lock(&busid_table[i].busid_lock);
158 if (busid_table[i].name[0])
159 out += sprintf(out, "%s ", busid_table[i].name);
160 spin_unlock(&busid_table[i].busid_lock);
161 }
162 spin_unlock(&busid_table_lock);
163 out += sprintf(out, "\n");
164
165 return out - buf;
166 }
167
match_busid_store(struct device_driver * dev,const char * buf,size_t count)168 static ssize_t match_busid_store(struct device_driver *dev, const char *buf,
169 size_t count)
170 {
171 int len;
172 char busid[BUSID_SIZE];
173
174 if (count < 5)
175 return -EINVAL;
176
177 /* busid needs to include \0 termination */
178 len = strlcpy(busid, buf + 4, BUSID_SIZE);
179 if (sizeof(busid) <= len)
180 return -EINVAL;
181
182 if (!strncmp(buf, "add ", 4)) {
183 if (add_match_busid(busid) < 0)
184 return -ENOMEM;
185
186 pr_debug("add busid %s\n", busid);
187 return count;
188 }
189
190 if (!strncmp(buf, "del ", 4)) {
191 if (del_match_busid(busid) < 0)
192 return -ENODEV;
193
194 pr_debug("del busid %s\n", busid);
195 return count;
196 }
197
198 return -EINVAL;
199 }
200 static DRIVER_ATTR_RW(match_busid);
201
do_rebind(char * busid,struct bus_id_priv * busid_priv)202 static int do_rebind(char *busid, struct bus_id_priv *busid_priv)
203 {
204 int ret;
205
206 /* device_attach() callers should hold parent lock for USB */
207 if (busid_priv->udev->dev.parent)
208 device_lock(busid_priv->udev->dev.parent);
209 ret = device_attach(&busid_priv->udev->dev);
210 if (busid_priv->udev->dev.parent)
211 device_unlock(busid_priv->udev->dev.parent);
212 if (ret < 0) {
213 dev_err(&busid_priv->udev->dev, "rebind failed\n");
214 return ret;
215 }
216 return 0;
217 }
218
stub_device_rebind(void)219 static void stub_device_rebind(void)
220 {
221 #if IS_MODULE(CONFIG_USBIP_HOST)
222 struct bus_id_priv *busid_priv;
223 int i;
224
225 /* update status to STUB_BUSID_OTHER so probe ignores the device */
226 spin_lock(&busid_table_lock);
227 for (i = 0; i < MAX_BUSID; i++) {
228 if (busid_table[i].name[0] &&
229 busid_table[i].shutdown_busid) {
230 busid_priv = &(busid_table[i]);
231 busid_priv->status = STUB_BUSID_OTHER;
232 }
233 }
234 spin_unlock(&busid_table_lock);
235
236 /* now run rebind - no need to hold locks. driver files are removed */
237 for (i = 0; i < MAX_BUSID; i++) {
238 if (busid_table[i].name[0] &&
239 busid_table[i].shutdown_busid) {
240 busid_priv = &(busid_table[i]);
241 do_rebind(busid_table[i].name, busid_priv);
242 }
243 }
244 #endif
245 }
246
rebind_store(struct device_driver * dev,const char * buf,size_t count)247 static ssize_t rebind_store(struct device_driver *dev, const char *buf,
248 size_t count)
249 {
250 int ret;
251 int len;
252 struct bus_id_priv *bid;
253
254 /* buf length should be less that BUSID_SIZE */
255 len = strnlen(buf, BUSID_SIZE);
256
257 if (!(len < BUSID_SIZE))
258 return -EINVAL;
259
260 bid = get_busid_priv(buf);
261 if (!bid)
262 return -ENODEV;
263
264 /* mark the device for deletion so probe ignores it during rescan */
265 bid->status = STUB_BUSID_OTHER;
266 /* release the busid lock */
267 put_busid_priv(bid);
268
269 ret = do_rebind((char *) buf, bid);
270 if (ret < 0)
271 return ret;
272
273 /* delete device from busid_table */
274 del_match_busid((char *) buf);
275
276 return count;
277 }
278
279 static DRIVER_ATTR_WO(rebind);
280
stub_priv_pop_from_listhead(struct list_head * listhead)281 static struct stub_priv *stub_priv_pop_from_listhead(struct list_head *listhead)
282 {
283 struct stub_priv *priv, *tmp;
284
285 list_for_each_entry_safe(priv, tmp, listhead, list) {
286 list_del(&priv->list);
287 return priv;
288 }
289
290 return NULL;
291 }
292
stub_priv_pop(struct stub_device * sdev)293 static struct stub_priv *stub_priv_pop(struct stub_device *sdev)
294 {
295 unsigned long flags;
296 struct stub_priv *priv;
297
298 spin_lock_irqsave(&sdev->priv_lock, flags);
299
300 priv = stub_priv_pop_from_listhead(&sdev->priv_init);
301 if (priv)
302 goto done;
303
304 priv = stub_priv_pop_from_listhead(&sdev->priv_tx);
305 if (priv)
306 goto done;
307
308 priv = stub_priv_pop_from_listhead(&sdev->priv_free);
309
310 done:
311 spin_unlock_irqrestore(&sdev->priv_lock, flags);
312
313 return priv;
314 }
315
stub_device_cleanup_urbs(struct stub_device * sdev)316 void stub_device_cleanup_urbs(struct stub_device *sdev)
317 {
318 struct stub_priv *priv;
319 struct urb *urb;
320
321 dev_dbg(&sdev->udev->dev, "Stub device cleaning up urbs\n");
322
323 while ((priv = stub_priv_pop(sdev))) {
324 urb = priv->urb;
325 dev_dbg(&sdev->udev->dev, "free urb seqnum %lu\n",
326 priv->seqnum);
327 usb_kill_urb(urb);
328
329 kmem_cache_free(stub_priv_cache, priv);
330
331 kfree(urb->transfer_buffer);
332 urb->transfer_buffer = NULL;
333
334 kfree(urb->setup_packet);
335 urb->setup_packet = NULL;
336
337 usb_free_urb(urb);
338 }
339 }
340
usbip_host_init(void)341 static int __init usbip_host_init(void)
342 {
343 int ret;
344
345 init_busid_table();
346
347 stub_priv_cache = KMEM_CACHE(stub_priv, SLAB_HWCACHE_ALIGN);
348 if (!stub_priv_cache) {
349 pr_err("kmem_cache_create failed\n");
350 return -ENOMEM;
351 }
352
353 ret = usb_register_device_driver(&stub_driver, THIS_MODULE);
354 if (ret) {
355 pr_err("usb_register failed %d\n", ret);
356 goto err_usb_register;
357 }
358
359 ret = driver_create_file(&stub_driver.drvwrap.driver,
360 &driver_attr_match_busid);
361 if (ret) {
362 pr_err("driver_create_file failed\n");
363 goto err_create_file;
364 }
365
366 ret = driver_create_file(&stub_driver.drvwrap.driver,
367 &driver_attr_rebind);
368 if (ret) {
369 pr_err("driver_create_file failed\n");
370 goto err_create_file;
371 }
372
373 return ret;
374
375 err_create_file:
376 usb_deregister_device_driver(&stub_driver);
377 err_usb_register:
378 kmem_cache_destroy(stub_priv_cache);
379 return ret;
380 }
381
usbip_host_exit(void)382 static void __exit usbip_host_exit(void)
383 {
384 driver_remove_file(&stub_driver.drvwrap.driver,
385 &driver_attr_match_busid);
386
387 driver_remove_file(&stub_driver.drvwrap.driver,
388 &driver_attr_rebind);
389
390 /*
391 * deregister() calls stub_disconnect() for all devices. Device
392 * specific data is cleared in stub_disconnect().
393 */
394 usb_deregister_device_driver(&stub_driver);
395
396 /* initiate scan to attach devices */
397 stub_device_rebind();
398
399 kmem_cache_destroy(stub_priv_cache);
400 }
401
402 module_init(usbip_host_init);
403 module_exit(usbip_host_exit);
404
405 MODULE_AUTHOR(DRIVER_AUTHOR);
406 MODULE_DESCRIPTION(DRIVER_DESC);
407 MODULE_LICENSE("GPL");
408