forked from Minki/linux
0c8c1ae155
In the case where v4l2_event_dequeue fails the structure ev is not
being filled and this garbage data from the stack is being copied
to the ev32 structure and being copied back to userspace on the
VIDIOC_DQEVENT_TIME32 ioctl. Fix this by ensuring the ev structure
is zero'd to ensure uninitialized data is not leaked back.
Addresses-Coverity: ("Uninitialized scalar variable")
Fixes: 1a6c0b36dd
("media: v4l2-core: fix VIDIOC_DQEVENT for time64 ABI")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Acked-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
827 lines
20 KiB
C
827 lines
20 KiB
C
// SPDX-License-Identifier: GPL-2.0-only
|
|
/*
|
|
* V4L2 sub-device
|
|
*
|
|
* Copyright (C) 2010 Nokia Corporation
|
|
*
|
|
* Contact: Laurent Pinchart <laurent.pinchart@ideasonboard.com>
|
|
* Sakari Ailus <sakari.ailus@iki.fi>
|
|
*/
|
|
|
|
#include <linux/ioctl.h>
|
|
#include <linux/mm.h>
|
|
#include <linux/module.h>
|
|
#include <linux/slab.h>
|
|
#include <linux/types.h>
|
|
#include <linux/videodev2.h>
|
|
#include <linux/export.h>
|
|
|
|
#include <media/v4l2-ctrls.h>
|
|
#include <media/v4l2-device.h>
|
|
#include <media/v4l2-ioctl.h>
|
|
#include <media/v4l2-fh.h>
|
|
#include <media/v4l2-event.h>
|
|
|
|
static int subdev_fh_init(struct v4l2_subdev_fh *fh, struct v4l2_subdev *sd)
|
|
{
|
|
#if defined(CONFIG_VIDEO_V4L2_SUBDEV_API)
|
|
if (sd->entity.num_pads) {
|
|
fh->pad = v4l2_subdev_alloc_pad_config(sd);
|
|
if (fh->pad == NULL)
|
|
return -ENOMEM;
|
|
}
|
|
#endif
|
|
return 0;
|
|
}
|
|
|
|
static void subdev_fh_free(struct v4l2_subdev_fh *fh)
|
|
{
|
|
#if defined(CONFIG_VIDEO_V4L2_SUBDEV_API)
|
|
v4l2_subdev_free_pad_config(fh->pad);
|
|
fh->pad = NULL;
|
|
#endif
|
|
}
|
|
|
|
static int subdev_open(struct file *file)
|
|
{
|
|
struct video_device *vdev = video_devdata(file);
|
|
struct v4l2_subdev *sd = vdev_to_v4l2_subdev(vdev);
|
|
struct v4l2_subdev_fh *subdev_fh;
|
|
int ret;
|
|
|
|
subdev_fh = kzalloc(sizeof(*subdev_fh), GFP_KERNEL);
|
|
if (subdev_fh == NULL)
|
|
return -ENOMEM;
|
|
|
|
ret = subdev_fh_init(subdev_fh, sd);
|
|
if (ret) {
|
|
kfree(subdev_fh);
|
|
return ret;
|
|
}
|
|
|
|
v4l2_fh_init(&subdev_fh->vfh, vdev);
|
|
v4l2_fh_add(&subdev_fh->vfh);
|
|
file->private_data = &subdev_fh->vfh;
|
|
#if defined(CONFIG_MEDIA_CONTROLLER)
|
|
if (sd->v4l2_dev->mdev && sd->entity.graph_obj.mdev->dev) {
|
|
struct module *owner;
|
|
|
|
owner = sd->entity.graph_obj.mdev->dev->driver->owner;
|
|
if (!try_module_get(owner)) {
|
|
ret = -EBUSY;
|
|
goto err;
|
|
}
|
|
subdev_fh->owner = owner;
|
|
}
|
|
#endif
|
|
|
|
if (sd->internal_ops && sd->internal_ops->open) {
|
|
ret = sd->internal_ops->open(sd, subdev_fh);
|
|
if (ret < 0)
|
|
goto err;
|
|
}
|
|
|
|
return 0;
|
|
|
|
err:
|
|
module_put(subdev_fh->owner);
|
|
v4l2_fh_del(&subdev_fh->vfh);
|
|
v4l2_fh_exit(&subdev_fh->vfh);
|
|
subdev_fh_free(subdev_fh);
|
|
kfree(subdev_fh);
|
|
|
|
return ret;
|
|
}
|
|
|
|
static int subdev_close(struct file *file)
|
|
{
|
|
struct video_device *vdev = video_devdata(file);
|
|
struct v4l2_subdev *sd = vdev_to_v4l2_subdev(vdev);
|
|
struct v4l2_fh *vfh = file->private_data;
|
|
struct v4l2_subdev_fh *subdev_fh = to_v4l2_subdev_fh(vfh);
|
|
|
|
if (sd->internal_ops && sd->internal_ops->close)
|
|
sd->internal_ops->close(sd, subdev_fh);
|
|
module_put(subdev_fh->owner);
|
|
v4l2_fh_del(vfh);
|
|
v4l2_fh_exit(vfh);
|
|
subdev_fh_free(subdev_fh);
|
|
kfree(subdev_fh);
|
|
file->private_data = NULL;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static inline int check_which(u32 which)
|
|
{
|
|
if (which != V4L2_SUBDEV_FORMAT_TRY &&
|
|
which != V4L2_SUBDEV_FORMAT_ACTIVE)
|
|
return -EINVAL;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static inline int check_pad(struct v4l2_subdev *sd, u32 pad)
|
|
{
|
|
#if defined(CONFIG_MEDIA_CONTROLLER)
|
|
if (sd->entity.num_pads) {
|
|
if (pad >= sd->entity.num_pads)
|
|
return -EINVAL;
|
|
return 0;
|
|
}
|
|
#endif
|
|
/* allow pad 0 on subdevices not registered as media entities */
|
|
if (pad > 0)
|
|
return -EINVAL;
|
|
return 0;
|
|
}
|
|
|
|
static int check_cfg(u32 which, struct v4l2_subdev_pad_config *cfg)
|
|
{
|
|
if (which == V4L2_SUBDEV_FORMAT_TRY && !cfg)
|
|
return -EINVAL;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static inline int check_format(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_format *format)
|
|
{
|
|
if (!format)
|
|
return -EINVAL;
|
|
|
|
return check_which(format->which) ? : check_pad(sd, format->pad) ? :
|
|
check_cfg(format->which, cfg);
|
|
}
|
|
|
|
static int call_get_fmt(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_format *format)
|
|
{
|
|
return check_format(sd, cfg, format) ? :
|
|
sd->ops->pad->get_fmt(sd, cfg, format);
|
|
}
|
|
|
|
static int call_set_fmt(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_format *format)
|
|
{
|
|
return check_format(sd, cfg, format) ? :
|
|
sd->ops->pad->set_fmt(sd, cfg, format);
|
|
}
|
|
|
|
static int call_enum_mbus_code(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_mbus_code_enum *code)
|
|
{
|
|
if (!code)
|
|
return -EINVAL;
|
|
|
|
return check_which(code->which) ? : check_pad(sd, code->pad) ? :
|
|
check_cfg(code->which, cfg) ? :
|
|
sd->ops->pad->enum_mbus_code(sd, cfg, code);
|
|
}
|
|
|
|
static int call_enum_frame_size(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_frame_size_enum *fse)
|
|
{
|
|
if (!fse)
|
|
return -EINVAL;
|
|
|
|
return check_which(fse->which) ? : check_pad(sd, fse->pad) ? :
|
|
check_cfg(fse->which, cfg) ? :
|
|
sd->ops->pad->enum_frame_size(sd, cfg, fse);
|
|
}
|
|
|
|
static inline int check_frame_interval(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_frame_interval *fi)
|
|
{
|
|
if (!fi)
|
|
return -EINVAL;
|
|
|
|
return check_pad(sd, fi->pad);
|
|
}
|
|
|
|
static int call_g_frame_interval(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_frame_interval *fi)
|
|
{
|
|
return check_frame_interval(sd, fi) ? :
|
|
sd->ops->video->g_frame_interval(sd, fi);
|
|
}
|
|
|
|
static int call_s_frame_interval(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_frame_interval *fi)
|
|
{
|
|
return check_frame_interval(sd, fi) ? :
|
|
sd->ops->video->s_frame_interval(sd, fi);
|
|
}
|
|
|
|
static int call_enum_frame_interval(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_frame_interval_enum *fie)
|
|
{
|
|
if (!fie)
|
|
return -EINVAL;
|
|
|
|
return check_which(fie->which) ? : check_pad(sd, fie->pad) ? :
|
|
check_cfg(fie->which, cfg) ? :
|
|
sd->ops->pad->enum_frame_interval(sd, cfg, fie);
|
|
}
|
|
|
|
static inline int check_selection(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_selection *sel)
|
|
{
|
|
if (!sel)
|
|
return -EINVAL;
|
|
|
|
return check_which(sel->which) ? : check_pad(sd, sel->pad) ? :
|
|
check_cfg(sel->which, cfg);
|
|
}
|
|
|
|
static int call_get_selection(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_selection *sel)
|
|
{
|
|
return check_selection(sd, cfg, sel) ? :
|
|
sd->ops->pad->get_selection(sd, cfg, sel);
|
|
}
|
|
|
|
static int call_set_selection(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_pad_config *cfg,
|
|
struct v4l2_subdev_selection *sel)
|
|
{
|
|
return check_selection(sd, cfg, sel) ? :
|
|
sd->ops->pad->set_selection(sd, cfg, sel);
|
|
}
|
|
|
|
static inline int check_edid(struct v4l2_subdev *sd,
|
|
struct v4l2_subdev_edid *edid)
|
|
{
|
|
if (!edid)
|
|
return -EINVAL;
|
|
|
|
if (edid->blocks && edid->edid == NULL)
|
|
return -EINVAL;
|
|
|
|
return check_pad(sd, edid->pad);
|
|
}
|
|
|
|
static int call_get_edid(struct v4l2_subdev *sd, struct v4l2_subdev_edid *edid)
|
|
{
|
|
return check_edid(sd, edid) ? : sd->ops->pad->get_edid(sd, edid);
|
|
}
|
|
|
|
static int call_set_edid(struct v4l2_subdev *sd, struct v4l2_subdev_edid *edid)
|
|
{
|
|
return check_edid(sd, edid) ? : sd->ops->pad->set_edid(sd, edid);
|
|
}
|
|
|
|
static int call_dv_timings_cap(struct v4l2_subdev *sd,
|
|
struct v4l2_dv_timings_cap *cap)
|
|
{
|
|
if (!cap)
|
|
return -EINVAL;
|
|
|
|
return check_pad(sd, cap->pad) ? :
|
|
sd->ops->pad->dv_timings_cap(sd, cap);
|
|
}
|
|
|
|
static int call_enum_dv_timings(struct v4l2_subdev *sd,
|
|
struct v4l2_enum_dv_timings *dvt)
|
|
{
|
|
if (!dvt)
|
|
return -EINVAL;
|
|
|
|
return check_pad(sd, dvt->pad) ? :
|
|
sd->ops->pad->enum_dv_timings(sd, dvt);
|
|
}
|
|
|
|
static const struct v4l2_subdev_pad_ops v4l2_subdev_call_pad_wrappers = {
|
|
.get_fmt = call_get_fmt,
|
|
.set_fmt = call_set_fmt,
|
|
.enum_mbus_code = call_enum_mbus_code,
|
|
.enum_frame_size = call_enum_frame_size,
|
|
.enum_frame_interval = call_enum_frame_interval,
|
|
.get_selection = call_get_selection,
|
|
.set_selection = call_set_selection,
|
|
.get_edid = call_get_edid,
|
|
.set_edid = call_set_edid,
|
|
.dv_timings_cap = call_dv_timings_cap,
|
|
.enum_dv_timings = call_enum_dv_timings,
|
|
};
|
|
|
|
static const struct v4l2_subdev_video_ops v4l2_subdev_call_video_wrappers = {
|
|
.g_frame_interval = call_g_frame_interval,
|
|
.s_frame_interval = call_s_frame_interval,
|
|
};
|
|
|
|
const struct v4l2_subdev_ops v4l2_subdev_call_wrappers = {
|
|
.pad = &v4l2_subdev_call_pad_wrappers,
|
|
.video = &v4l2_subdev_call_video_wrappers,
|
|
};
|
|
EXPORT_SYMBOL(v4l2_subdev_call_wrappers);
|
|
|
|
static long subdev_do_ioctl(struct file *file, unsigned int cmd, void *arg)
|
|
{
|
|
struct video_device *vdev = video_devdata(file);
|
|
struct v4l2_subdev *sd = vdev_to_v4l2_subdev(vdev);
|
|
struct v4l2_fh *vfh = file->private_data;
|
|
#if defined(CONFIG_VIDEO_V4L2_SUBDEV_API)
|
|
struct v4l2_subdev_fh *subdev_fh = to_v4l2_subdev_fh(vfh);
|
|
#endif
|
|
int rval;
|
|
|
|
switch (cmd) {
|
|
case VIDIOC_QUERYCTRL:
|
|
/*
|
|
* TODO: this really should be folded into v4l2_queryctrl (this
|
|
* currently returns -EINVAL for NULL control handlers).
|
|
* However, v4l2_queryctrl() is still called directly by
|
|
* drivers as well and until that has been addressed I believe
|
|
* it is safer to do the check here. The same is true for the
|
|
* other control ioctls below.
|
|
*/
|
|
if (!vfh->ctrl_handler)
|
|
return -ENOTTY;
|
|
return v4l2_queryctrl(vfh->ctrl_handler, arg);
|
|
|
|
case VIDIOC_QUERY_EXT_CTRL:
|
|
if (!vfh->ctrl_handler)
|
|
return -ENOTTY;
|
|
return v4l2_query_ext_ctrl(vfh->ctrl_handler, arg);
|
|
|
|
case VIDIOC_QUERYMENU:
|
|
if (!vfh->ctrl_handler)
|
|
return -ENOTTY;
|
|
return v4l2_querymenu(vfh->ctrl_handler, arg);
|
|
|
|
case VIDIOC_G_CTRL:
|
|
if (!vfh->ctrl_handler)
|
|
return -ENOTTY;
|
|
return v4l2_g_ctrl(vfh->ctrl_handler, arg);
|
|
|
|
case VIDIOC_S_CTRL:
|
|
if (!vfh->ctrl_handler)
|
|
return -ENOTTY;
|
|
return v4l2_s_ctrl(vfh, vfh->ctrl_handler, arg);
|
|
|
|
case VIDIOC_G_EXT_CTRLS:
|
|
if (!vfh->ctrl_handler)
|
|
return -ENOTTY;
|
|
return v4l2_g_ext_ctrls(vfh->ctrl_handler,
|
|
vdev, sd->v4l2_dev->mdev, arg);
|
|
|
|
case VIDIOC_S_EXT_CTRLS:
|
|
if (!vfh->ctrl_handler)
|
|
return -ENOTTY;
|
|
return v4l2_s_ext_ctrls(vfh, vfh->ctrl_handler,
|
|
vdev, sd->v4l2_dev->mdev, arg);
|
|
|
|
case VIDIOC_TRY_EXT_CTRLS:
|
|
if (!vfh->ctrl_handler)
|
|
return -ENOTTY;
|
|
return v4l2_try_ext_ctrls(vfh->ctrl_handler,
|
|
vdev, sd->v4l2_dev->mdev, arg);
|
|
|
|
case VIDIOC_DQEVENT:
|
|
if (!(sd->flags & V4L2_SUBDEV_FL_HAS_EVENTS))
|
|
return -ENOIOCTLCMD;
|
|
|
|
return v4l2_event_dequeue(vfh, arg, file->f_flags & O_NONBLOCK);
|
|
|
|
case VIDIOC_DQEVENT_TIME32: {
|
|
struct v4l2_event_time32 *ev32 = arg;
|
|
struct v4l2_event ev = { };
|
|
|
|
if (!(sd->flags & V4L2_SUBDEV_FL_HAS_EVENTS))
|
|
return -ENOIOCTLCMD;
|
|
|
|
rval = v4l2_event_dequeue(vfh, &ev, file->f_flags & O_NONBLOCK);
|
|
|
|
*ev32 = (struct v4l2_event_time32) {
|
|
.type = ev.type,
|
|
.pending = ev.pending,
|
|
.sequence = ev.sequence,
|
|
.timestamp.tv_sec = ev.timestamp.tv_sec,
|
|
.timestamp.tv_nsec = ev.timestamp.tv_nsec,
|
|
.id = ev.id,
|
|
};
|
|
|
|
memcpy(&ev32->u, &ev.u, sizeof(ev.u));
|
|
memcpy(&ev32->reserved, &ev.reserved, sizeof(ev.reserved));
|
|
|
|
return rval;
|
|
}
|
|
|
|
case VIDIOC_SUBSCRIBE_EVENT:
|
|
return v4l2_subdev_call(sd, core, subscribe_event, vfh, arg);
|
|
|
|
case VIDIOC_UNSUBSCRIBE_EVENT:
|
|
return v4l2_subdev_call(sd, core, unsubscribe_event, vfh, arg);
|
|
|
|
#ifdef CONFIG_VIDEO_ADV_DEBUG
|
|
case VIDIOC_DBG_G_REGISTER:
|
|
{
|
|
struct v4l2_dbg_register *p = arg;
|
|
|
|
if (!capable(CAP_SYS_ADMIN))
|
|
return -EPERM;
|
|
return v4l2_subdev_call(sd, core, g_register, p);
|
|
}
|
|
case VIDIOC_DBG_S_REGISTER:
|
|
{
|
|
struct v4l2_dbg_register *p = arg;
|
|
|
|
if (!capable(CAP_SYS_ADMIN))
|
|
return -EPERM;
|
|
return v4l2_subdev_call(sd, core, s_register, p);
|
|
}
|
|
case VIDIOC_DBG_G_CHIP_INFO:
|
|
{
|
|
struct v4l2_dbg_chip_info *p = arg;
|
|
|
|
if (p->match.type != V4L2_CHIP_MATCH_SUBDEV || p->match.addr)
|
|
return -EINVAL;
|
|
if (sd->ops->core && sd->ops->core->s_register)
|
|
p->flags |= V4L2_CHIP_FL_WRITABLE;
|
|
if (sd->ops->core && sd->ops->core->g_register)
|
|
p->flags |= V4L2_CHIP_FL_READABLE;
|
|
strscpy(p->name, sd->name, sizeof(p->name));
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
case VIDIOC_LOG_STATUS: {
|
|
int ret;
|
|
|
|
pr_info("%s: ================= START STATUS =================\n",
|
|
sd->name);
|
|
ret = v4l2_subdev_call(sd, core, log_status);
|
|
pr_info("%s: ================== END STATUS ==================\n",
|
|
sd->name);
|
|
return ret;
|
|
}
|
|
|
|
#if defined(CONFIG_VIDEO_V4L2_SUBDEV_API)
|
|
case VIDIOC_SUBDEV_G_FMT: {
|
|
struct v4l2_subdev_format *format = arg;
|
|
|
|
memset(format->reserved, 0, sizeof(format->reserved));
|
|
memset(format->format.reserved, 0, sizeof(format->format.reserved));
|
|
return v4l2_subdev_call(sd, pad, get_fmt, subdev_fh->pad, format);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_S_FMT: {
|
|
struct v4l2_subdev_format *format = arg;
|
|
|
|
memset(format->reserved, 0, sizeof(format->reserved));
|
|
memset(format->format.reserved, 0, sizeof(format->format.reserved));
|
|
return v4l2_subdev_call(sd, pad, set_fmt, subdev_fh->pad, format);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_G_CROP: {
|
|
struct v4l2_subdev_crop *crop = arg;
|
|
struct v4l2_subdev_selection sel;
|
|
|
|
memset(crop->reserved, 0, sizeof(crop->reserved));
|
|
memset(&sel, 0, sizeof(sel));
|
|
sel.which = crop->which;
|
|
sel.pad = crop->pad;
|
|
sel.target = V4L2_SEL_TGT_CROP;
|
|
|
|
rval = v4l2_subdev_call(
|
|
sd, pad, get_selection, subdev_fh->pad, &sel);
|
|
|
|
crop->rect = sel.r;
|
|
|
|
return rval;
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_S_CROP: {
|
|
struct v4l2_subdev_crop *crop = arg;
|
|
struct v4l2_subdev_selection sel;
|
|
|
|
memset(crop->reserved, 0, sizeof(crop->reserved));
|
|
memset(&sel, 0, sizeof(sel));
|
|
sel.which = crop->which;
|
|
sel.pad = crop->pad;
|
|
sel.target = V4L2_SEL_TGT_CROP;
|
|
sel.r = crop->rect;
|
|
|
|
rval = v4l2_subdev_call(
|
|
sd, pad, set_selection, subdev_fh->pad, &sel);
|
|
|
|
crop->rect = sel.r;
|
|
|
|
return rval;
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_ENUM_MBUS_CODE: {
|
|
struct v4l2_subdev_mbus_code_enum *code = arg;
|
|
|
|
memset(code->reserved, 0, sizeof(code->reserved));
|
|
return v4l2_subdev_call(sd, pad, enum_mbus_code, subdev_fh->pad,
|
|
code);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_ENUM_FRAME_SIZE: {
|
|
struct v4l2_subdev_frame_size_enum *fse = arg;
|
|
|
|
memset(fse->reserved, 0, sizeof(fse->reserved));
|
|
return v4l2_subdev_call(sd, pad, enum_frame_size, subdev_fh->pad,
|
|
fse);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_G_FRAME_INTERVAL: {
|
|
struct v4l2_subdev_frame_interval *fi = arg;
|
|
|
|
memset(fi->reserved, 0, sizeof(fi->reserved));
|
|
return v4l2_subdev_call(sd, video, g_frame_interval, arg);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_S_FRAME_INTERVAL: {
|
|
struct v4l2_subdev_frame_interval *fi = arg;
|
|
|
|
memset(fi->reserved, 0, sizeof(fi->reserved));
|
|
return v4l2_subdev_call(sd, video, s_frame_interval, arg);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL: {
|
|
struct v4l2_subdev_frame_interval_enum *fie = arg;
|
|
|
|
memset(fie->reserved, 0, sizeof(fie->reserved));
|
|
return v4l2_subdev_call(sd, pad, enum_frame_interval, subdev_fh->pad,
|
|
fie);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_G_SELECTION: {
|
|
struct v4l2_subdev_selection *sel = arg;
|
|
|
|
memset(sel->reserved, 0, sizeof(sel->reserved));
|
|
return v4l2_subdev_call(
|
|
sd, pad, get_selection, subdev_fh->pad, sel);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_S_SELECTION: {
|
|
struct v4l2_subdev_selection *sel = arg;
|
|
|
|
memset(sel->reserved, 0, sizeof(sel->reserved));
|
|
return v4l2_subdev_call(
|
|
sd, pad, set_selection, subdev_fh->pad, sel);
|
|
}
|
|
|
|
case VIDIOC_G_EDID: {
|
|
struct v4l2_subdev_edid *edid = arg;
|
|
|
|
return v4l2_subdev_call(sd, pad, get_edid, edid);
|
|
}
|
|
|
|
case VIDIOC_S_EDID: {
|
|
struct v4l2_subdev_edid *edid = arg;
|
|
|
|
return v4l2_subdev_call(sd, pad, set_edid, edid);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_DV_TIMINGS_CAP: {
|
|
struct v4l2_dv_timings_cap *cap = arg;
|
|
|
|
return v4l2_subdev_call(sd, pad, dv_timings_cap, cap);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_ENUM_DV_TIMINGS: {
|
|
struct v4l2_enum_dv_timings *dvt = arg;
|
|
|
|
return v4l2_subdev_call(sd, pad, enum_dv_timings, dvt);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_QUERY_DV_TIMINGS:
|
|
return v4l2_subdev_call(sd, video, query_dv_timings, arg);
|
|
|
|
case VIDIOC_SUBDEV_G_DV_TIMINGS:
|
|
return v4l2_subdev_call(sd, video, g_dv_timings, arg);
|
|
|
|
case VIDIOC_SUBDEV_S_DV_TIMINGS:
|
|
return v4l2_subdev_call(sd, video, s_dv_timings, arg);
|
|
|
|
case VIDIOC_SUBDEV_G_STD:
|
|
return v4l2_subdev_call(sd, video, g_std, arg);
|
|
|
|
case VIDIOC_SUBDEV_S_STD: {
|
|
v4l2_std_id *std = arg;
|
|
|
|
return v4l2_subdev_call(sd, video, s_std, *std);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_ENUMSTD: {
|
|
struct v4l2_standard *p = arg;
|
|
v4l2_std_id id;
|
|
|
|
if (v4l2_subdev_call(sd, video, g_tvnorms, &id))
|
|
return -EINVAL;
|
|
|
|
return v4l_video_std_enumstd(p, id);
|
|
}
|
|
|
|
case VIDIOC_SUBDEV_QUERYSTD:
|
|
return v4l2_subdev_call(sd, video, querystd, arg);
|
|
#endif
|
|
default:
|
|
return v4l2_subdev_call(sd, core, ioctl, cmd, arg);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static long subdev_do_ioctl_lock(struct file *file, unsigned int cmd, void *arg)
|
|
{
|
|
struct video_device *vdev = video_devdata(file);
|
|
struct mutex *lock = vdev->lock;
|
|
long ret = -ENODEV;
|
|
|
|
if (lock && mutex_lock_interruptible(lock))
|
|
return -ERESTARTSYS;
|
|
if (video_is_registered(vdev))
|
|
ret = subdev_do_ioctl(file, cmd, arg);
|
|
if (lock)
|
|
mutex_unlock(lock);
|
|
return ret;
|
|
}
|
|
|
|
static long subdev_ioctl(struct file *file, unsigned int cmd,
|
|
unsigned long arg)
|
|
{
|
|
return video_usercopy(file, cmd, arg, subdev_do_ioctl_lock);
|
|
}
|
|
|
|
#ifdef CONFIG_COMPAT
|
|
static long subdev_compat_ioctl32(struct file *file, unsigned int cmd,
|
|
unsigned long arg)
|
|
{
|
|
struct video_device *vdev = video_devdata(file);
|
|
struct v4l2_subdev *sd = vdev_to_v4l2_subdev(vdev);
|
|
|
|
return v4l2_subdev_call(sd, core, compat_ioctl32, cmd, arg);
|
|
}
|
|
#endif
|
|
|
|
static __poll_t subdev_poll(struct file *file, poll_table *wait)
|
|
{
|
|
struct video_device *vdev = video_devdata(file);
|
|
struct v4l2_subdev *sd = vdev_to_v4l2_subdev(vdev);
|
|
struct v4l2_fh *fh = file->private_data;
|
|
|
|
if (!(sd->flags & V4L2_SUBDEV_FL_HAS_EVENTS))
|
|
return EPOLLERR;
|
|
|
|
poll_wait(file, &fh->wait, wait);
|
|
|
|
if (v4l2_event_pending(fh))
|
|
return EPOLLPRI;
|
|
|
|
return 0;
|
|
}
|
|
|
|
const struct v4l2_file_operations v4l2_subdev_fops = {
|
|
.owner = THIS_MODULE,
|
|
.open = subdev_open,
|
|
.unlocked_ioctl = subdev_ioctl,
|
|
#ifdef CONFIG_COMPAT
|
|
.compat_ioctl32 = subdev_compat_ioctl32,
|
|
#endif
|
|
.release = subdev_close,
|
|
.poll = subdev_poll,
|
|
};
|
|
|
|
#ifdef CONFIG_MEDIA_CONTROLLER
|
|
int v4l2_subdev_link_validate_default(struct v4l2_subdev *sd,
|
|
struct media_link *link,
|
|
struct v4l2_subdev_format *source_fmt,
|
|
struct v4l2_subdev_format *sink_fmt)
|
|
{
|
|
/* The width, height and code must match. */
|
|
if (source_fmt->format.width != sink_fmt->format.width
|
|
|| source_fmt->format.height != sink_fmt->format.height
|
|
|| source_fmt->format.code != sink_fmt->format.code)
|
|
return -EPIPE;
|
|
|
|
/* The field order must match, or the sink field order must be NONE
|
|
* to support interlaced hardware connected to bridges that support
|
|
* progressive formats only.
|
|
*/
|
|
if (source_fmt->format.field != sink_fmt->format.field &&
|
|
sink_fmt->format.field != V4L2_FIELD_NONE)
|
|
return -EPIPE;
|
|
|
|
return 0;
|
|
}
|
|
EXPORT_SYMBOL_GPL(v4l2_subdev_link_validate_default);
|
|
|
|
static int
|
|
v4l2_subdev_link_validate_get_format(struct media_pad *pad,
|
|
struct v4l2_subdev_format *fmt)
|
|
{
|
|
if (is_media_entity_v4l2_subdev(pad->entity)) {
|
|
struct v4l2_subdev *sd =
|
|
media_entity_to_v4l2_subdev(pad->entity);
|
|
|
|
fmt->which = V4L2_SUBDEV_FORMAT_ACTIVE;
|
|
fmt->pad = pad->index;
|
|
return v4l2_subdev_call(sd, pad, get_fmt, NULL, fmt);
|
|
}
|
|
|
|
WARN(pad->entity->function != MEDIA_ENT_F_IO_V4L,
|
|
"Driver bug! Wrong media entity type 0x%08x, entity %s\n",
|
|
pad->entity->function, pad->entity->name);
|
|
|
|
return -EINVAL;
|
|
}
|
|
|
|
int v4l2_subdev_link_validate(struct media_link *link)
|
|
{
|
|
struct v4l2_subdev *sink;
|
|
struct v4l2_subdev_format sink_fmt, source_fmt;
|
|
int rval;
|
|
|
|
rval = v4l2_subdev_link_validate_get_format(
|
|
link->source, &source_fmt);
|
|
if (rval < 0)
|
|
return 0;
|
|
|
|
rval = v4l2_subdev_link_validate_get_format(
|
|
link->sink, &sink_fmt);
|
|
if (rval < 0)
|
|
return 0;
|
|
|
|
sink = media_entity_to_v4l2_subdev(link->sink->entity);
|
|
|
|
rval = v4l2_subdev_call(sink, pad, link_validate, link,
|
|
&source_fmt, &sink_fmt);
|
|
if (rval != -ENOIOCTLCMD)
|
|
return rval;
|
|
|
|
return v4l2_subdev_link_validate_default(
|
|
sink, link, &source_fmt, &sink_fmt);
|
|
}
|
|
EXPORT_SYMBOL_GPL(v4l2_subdev_link_validate);
|
|
|
|
struct v4l2_subdev_pad_config *
|
|
v4l2_subdev_alloc_pad_config(struct v4l2_subdev *sd)
|
|
{
|
|
struct v4l2_subdev_pad_config *cfg;
|
|
int ret;
|
|
|
|
if (!sd->entity.num_pads)
|
|
return NULL;
|
|
|
|
cfg = kvmalloc_array(sd->entity.num_pads, sizeof(*cfg),
|
|
GFP_KERNEL | __GFP_ZERO);
|
|
if (!cfg)
|
|
return NULL;
|
|
|
|
ret = v4l2_subdev_call(sd, pad, init_cfg, cfg);
|
|
if (ret < 0 && ret != -ENOIOCTLCMD) {
|
|
kvfree(cfg);
|
|
return NULL;
|
|
}
|
|
|
|
return cfg;
|
|
}
|
|
EXPORT_SYMBOL_GPL(v4l2_subdev_alloc_pad_config);
|
|
|
|
void v4l2_subdev_free_pad_config(struct v4l2_subdev_pad_config *cfg)
|
|
{
|
|
kvfree(cfg);
|
|
}
|
|
EXPORT_SYMBOL_GPL(v4l2_subdev_free_pad_config);
|
|
#endif /* CONFIG_MEDIA_CONTROLLER */
|
|
|
|
void v4l2_subdev_init(struct v4l2_subdev *sd, const struct v4l2_subdev_ops *ops)
|
|
{
|
|
INIT_LIST_HEAD(&sd->list);
|
|
BUG_ON(!ops);
|
|
sd->ops = ops;
|
|
sd->v4l2_dev = NULL;
|
|
sd->flags = 0;
|
|
sd->name[0] = '\0';
|
|
sd->grp_id = 0;
|
|
sd->dev_priv = NULL;
|
|
sd->host_priv = NULL;
|
|
#if defined(CONFIG_MEDIA_CONTROLLER)
|
|
sd->entity.name = sd->name;
|
|
sd->entity.obj_type = MEDIA_ENTITY_TYPE_V4L2_SUBDEV;
|
|
sd->entity.function = MEDIA_ENT_F_V4L2_SUBDEV_UNKNOWN;
|
|
#endif
|
|
}
|
|
EXPORT_SYMBOL(v4l2_subdev_init);
|
|
|
|
void v4l2_subdev_notify_event(struct v4l2_subdev *sd,
|
|
const struct v4l2_event *ev)
|
|
{
|
|
v4l2_event_queue(sd->devnode, ev);
|
|
v4l2_subdev_notify(sd, V4L2_DEVICE_NOTIFY_EVENT, (void *)ev);
|
|
}
|
|
EXPORT_SYMBOL_GPL(v4l2_subdev_notify_event);
|