1 /* SPDX-License-Identifier: ((GPL-2.0 WITH Lin <<
2 /********************************************* 1 /******************************************************************************
3 * gntdev.h 2 * gntdev.h
4 * 3 *
5 * Interface to /dev/xen/gntdev. 4 * Interface to /dev/xen/gntdev.
6 * 5 *
7 * Copyright (c) 2007, D G Murray 6 * Copyright (c) 2007, D G Murray
8 * Copyright (c) 2018, Oleksandr Andrushchenko <<
9 * 7 *
10 * This program is free software; you can redi 8 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU Genera 9 * modify it under the terms of the GNU General Public License version 2
12 * as published by the Free Software Foundatio 10 * as published by the Free Software Foundation; or, when distributed
13 * separately from the Linux kernel or incorpo 11 * separately from the Linux kernel or incorporated into other
14 * software packages, subject to the following 12 * software packages, subject to the following license:
15 * 13 *
16 * Permission is hereby granted, free of charg 14 * Permission is hereby granted, free of charge, to any person obtaining a copy
17 * of this source file (the "Software"), to de 15 * of this source file (the "Software"), to deal in the Software without
18 * restriction, including without limitation t 16 * restriction, including without limitation the rights to use, copy, modify,
19 * merge, publish, distribute, sublicense, and 17 * merge, publish, distribute, sublicense, and/or sell copies of the Software,
20 * and to permit persons to whom the Software 18 * and to permit persons to whom the Software is furnished to do so, subject to
21 * the following conditions: 19 * the following conditions:
22 * 20 *
23 * The above copyright notice and this permiss 21 * The above copyright notice and this permission notice shall be included in
24 * all copies or substantial portions of the S 22 * all copies or substantial portions of the Software.
25 * 23 *
26 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT W 24 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
27 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE W 25 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
28 * FITNESS FOR A PARTICULAR PURPOSE AND NONINF 26 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
29 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR 27 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
30 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT 28 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
31 * FROM, OUT OF OR IN CONNECTION WITH THE SOFT 29 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
32 * IN THE SOFTWARE. 30 * IN THE SOFTWARE.
33 */ 31 */
34 32
35 #ifndef __LINUX_PUBLIC_GNTDEV_H__ 33 #ifndef __LINUX_PUBLIC_GNTDEV_H__
36 #define __LINUX_PUBLIC_GNTDEV_H__ 34 #define __LINUX_PUBLIC_GNTDEV_H__
37 35
38 #include <linux/types.h> 36 #include <linux/types.h>
39 37
40 struct ioctl_gntdev_grant_ref { 38 struct ioctl_gntdev_grant_ref {
41 /* The domain ID of the grant to be ma 39 /* The domain ID of the grant to be mapped. */
42 __u32 domid; 40 __u32 domid;
43 /* The grant reference of the grant to 41 /* The grant reference of the grant to be mapped. */
44 __u32 ref; 42 __u32 ref;
45 }; 43 };
46 44
47 /* 45 /*
48 * Inserts the grant references into the mappi 46 * Inserts the grant references into the mapping table of an instance
49 * of gntdev. N.B. This does not perform the m 47 * of gntdev. N.B. This does not perform the mapping, which is deferred
50 * until mmap() is called with @index as the o !! 48 * until mmap() is called with @index as the offset.
51 * considered opaque to userspace, with one ex <<
52 * references have ever been inserted into the <<
53 * instance, @index will be set to 0. This is <<
54 * with userspace APIs that expect a file desc <<
55 * mmap()'d at offset 0, such as Wayland. If @ <<
56 * ioctl will fail. <<
57 */ 49 */
58 #define IOCTL_GNTDEV_MAP_GRANT_REF \ 50 #define IOCTL_GNTDEV_MAP_GRANT_REF \
59 _IOC(_IOC_NONE, 'G', 0, sizeof(struct ioctl_gn 51 _IOC(_IOC_NONE, 'G', 0, sizeof(struct ioctl_gntdev_map_grant_ref))
60 struct ioctl_gntdev_map_grant_ref { 52 struct ioctl_gntdev_map_grant_ref {
61 /* IN parameters */ 53 /* IN parameters */
62 /* The number of grants to be mapped. 54 /* The number of grants to be mapped. */
63 __u32 count; 55 __u32 count;
64 __u32 pad; 56 __u32 pad;
65 /* OUT parameters */ 57 /* OUT parameters */
66 /* The offset to be used on a subseque 58 /* The offset to be used on a subsequent call to mmap(). */
67 __u64 index; 59 __u64 index;
68 /* Variable IN parameter. */ 60 /* Variable IN parameter. */
69 /* Array of grant references, of size 61 /* Array of grant references, of size @count. */
70 struct ioctl_gntdev_grant_ref refs[1]; 62 struct ioctl_gntdev_grant_ref refs[1];
71 }; 63 };
72 64
73 /* 65 /*
74 * Removes the grant references from the mappi 66 * Removes the grant references from the mapping table of an instance of
75 * gntdev. N.B. munmap() must be called on the !! 67 * of gntdev. N.B. munmap() must be called on the relevant virtual address(es)
76 * before this ioctl is called, or an error wi 68 * before this ioctl is called, or an error will result.
77 */ 69 */
78 #define IOCTL_GNTDEV_UNMAP_GRANT_REF \ 70 #define IOCTL_GNTDEV_UNMAP_GRANT_REF \
79 _IOC(_IOC_NONE, 'G', 1, sizeof(struct ioctl_gn 71 _IOC(_IOC_NONE, 'G', 1, sizeof(struct ioctl_gntdev_unmap_grant_ref))
80 struct ioctl_gntdev_unmap_grant_ref { 72 struct ioctl_gntdev_unmap_grant_ref {
81 /* IN parameters */ 73 /* IN parameters */
82 /* The offset was returned by the corr 74 /* The offset was returned by the corresponding map operation. */
83 __u64 index; 75 __u64 index;
84 /* The number of pages to be unmapped. 76 /* The number of pages to be unmapped. */
85 __u32 count; 77 __u32 count;
86 __u32 pad; 78 __u32 pad;
87 }; 79 };
88 80
89 /* 81 /*
90 * Returns the offset in the driver's address 82 * Returns the offset in the driver's address space that corresponds
91 * to @vaddr. This can be used to perform a mu 83 * to @vaddr. This can be used to perform a munmap(), followed by an
92 * UNMAP_GRANT_REF ioctl, where no state about 84 * UNMAP_GRANT_REF ioctl, where no state about the offset is retained by
93 * the caller. The number of pages that were a 85 * the caller. The number of pages that were allocated at the same time as
94 * @vaddr is returned in @count. 86 * @vaddr is returned in @count.
95 * 87 *
96 * N.B. Where more than one page has been mapp 88 * N.B. Where more than one page has been mapped into a contiguous range, the
97 * supplied @vaddr must correspond to the 89 * supplied @vaddr must correspond to the start of the range; otherwise
98 * an error will result. It is only possi 90 * an error will result. It is only possible to munmap() the entire
99 * contiguously-allocated range at once, 91 * contiguously-allocated range at once, and not any subrange thereof.
100 */ 92 */
101 #define IOCTL_GNTDEV_GET_OFFSET_FOR_VADDR \ 93 #define IOCTL_GNTDEV_GET_OFFSET_FOR_VADDR \
102 _IOC(_IOC_NONE, 'G', 2, sizeof(struct ioctl_gn 94 _IOC(_IOC_NONE, 'G', 2, sizeof(struct ioctl_gntdev_get_offset_for_vaddr))
103 struct ioctl_gntdev_get_offset_for_vaddr { 95 struct ioctl_gntdev_get_offset_for_vaddr {
104 /* IN parameters */ 96 /* IN parameters */
105 /* The virtual address of the first ma 97 /* The virtual address of the first mapped page in a range. */
106 __u64 vaddr; 98 __u64 vaddr;
107 /* OUT parameters */ 99 /* OUT parameters */
108 /* The offset that was used in the ini 100 /* The offset that was used in the initial mmap() operation. */
109 __u64 offset; 101 __u64 offset;
110 /* The number of pages mapped in the V 102 /* The number of pages mapped in the VM area that begins at @vaddr. */
111 __u32 count; 103 __u32 count;
112 __u32 pad; 104 __u32 pad;
113 }; 105 };
114 106
115 /* 107 /*
116 * Sets the maximum number of grants that may 108 * Sets the maximum number of grants that may mapped at once by this gntdev
117 * instance. 109 * instance.
118 * 110 *
119 * N.B. This must be called before any other i 111 * N.B. This must be called before any other ioctl is performed on the device.
120 */ 112 */
121 #define IOCTL_GNTDEV_SET_MAX_GRANTS \ 113 #define IOCTL_GNTDEV_SET_MAX_GRANTS \
122 _IOC(_IOC_NONE, 'G', 3, sizeof(struct ioctl_gn 114 _IOC(_IOC_NONE, 'G', 3, sizeof(struct ioctl_gntdev_set_max_grants))
123 struct ioctl_gntdev_set_max_grants { 115 struct ioctl_gntdev_set_max_grants {
124 /* IN parameter */ 116 /* IN parameter */
125 /* The maximum number of grants that m 117 /* The maximum number of grants that may be mapped at once. */
126 __u32 count; 118 __u32 count;
127 }; 119 };
128 120
129 /* 121 /*
130 * Sets up an unmap notification within the pa 122 * Sets up an unmap notification within the page, so that the other side can do
131 * cleanup if this side crashes. Required to i 123 * cleanup if this side crashes. Required to implement cross-domain robust
132 * mutexes or close notification on communicat 124 * mutexes or close notification on communication channels.
133 * 125 *
134 * Each mapped page only supports one notifica 126 * Each mapped page only supports one notification; multiple calls referring to
135 * the same page overwrite the previous notifi 127 * the same page overwrite the previous notification. You must clear the
136 * notification prior to the IOCTL_GNTALLOC_DE 128 * notification prior to the IOCTL_GNTALLOC_DEALLOC_GREF if you do not want it
137 * to occur. 129 * to occur.
138 */ 130 */
139 #define IOCTL_GNTDEV_SET_UNMAP_NOTIFY \ 131 #define IOCTL_GNTDEV_SET_UNMAP_NOTIFY \
140 _IOC(_IOC_NONE, 'G', 7, sizeof(struct ioctl_gn 132 _IOC(_IOC_NONE, 'G', 7, sizeof(struct ioctl_gntdev_unmap_notify))
141 struct ioctl_gntdev_unmap_notify { 133 struct ioctl_gntdev_unmap_notify {
142 /* IN parameters */ 134 /* IN parameters */
143 /* Offset in the file descriptor for a 135 /* Offset in the file descriptor for a byte within the page (same as
144 * used in mmap). If using UNMAP_NOTIF 136 * used in mmap). If using UNMAP_NOTIFY_CLEAR_BYTE, this is the byte to
145 * be cleared. Otherwise, it can be an 137 * be cleared. Otherwise, it can be any byte in the page whose
146 * notification we are adjusting. 138 * notification we are adjusting.
147 */ 139 */
148 __u64 index; 140 __u64 index;
149 /* Action(s) to take on unmap */ 141 /* Action(s) to take on unmap */
150 __u32 action; 142 __u32 action;
151 /* Event channel to notify */ 143 /* Event channel to notify */
152 __u32 event_channel_port; 144 __u32 event_channel_port;
153 }; 145 };
154 146
155 struct gntdev_grant_copy_segment { 147 struct gntdev_grant_copy_segment {
156 union { 148 union {
157 void __user *virt; 149 void __user *virt;
158 struct { 150 struct {
159 grant_ref_t ref; 151 grant_ref_t ref;
160 __u16 offset; 152 __u16 offset;
161 domid_t domid; 153 domid_t domid;
162 } foreign; 154 } foreign;
163 } source, dest; 155 } source, dest;
164 __u16 len; 156 __u16 len;
165 157
166 __u16 flags; /* GNTCOPY_* */ 158 __u16 flags; /* GNTCOPY_* */
167 __s16 status; /* GNTST_* */ 159 __s16 status; /* GNTST_* */
168 }; 160 };
169 161
170 /* 162 /*
171 * Copy between grant references and local buf 163 * Copy between grant references and local buffers.
172 * 164 *
173 * The copy is split into @count @segments, ea 165 * The copy is split into @count @segments, each of which can copy
174 * to/from one grant reference. 166 * to/from one grant reference.
175 * 167 *
176 * Each segment is similar to struct gnttab_co 168 * Each segment is similar to struct gnttab_copy in the hypervisor ABI
177 * except the local buffer is specified using 169 * except the local buffer is specified using a virtual address
178 * (instead of a GFN and offset). 170 * (instead of a GFN and offset).
179 * 171 *
180 * The local buffer may cross a Xen page bound 172 * The local buffer may cross a Xen page boundary -- the driver will
181 * split segments into multiple ops if require 173 * split segments into multiple ops if required.
182 * 174 *
183 * Returns 0 if all segments have been process 175 * Returns 0 if all segments have been processed and @status in each
184 * segment is valid. Note that one or more se 176 * segment is valid. Note that one or more segments may have failed
185 * (status != GNTST_okay). 177 * (status != GNTST_okay).
186 * 178 *
187 * If the driver had to split a segment into t 179 * If the driver had to split a segment into two or more ops, @status
188 * includes the status of the first failed op 180 * includes the status of the first failed op for that segment (or
189 * GNTST_okay if all ops were successful). 181 * GNTST_okay if all ops were successful).
190 * 182 *
191 * If -1 is returned, the status of all segmen 183 * If -1 is returned, the status of all segments is undefined.
192 * 184 *
193 * EINVAL: A segment has local buffers for bot 185 * EINVAL: A segment has local buffers for both source and
194 * destination. 186 * destination.
195 * EINVAL: A segment crosses the boundary of a 187 * EINVAL: A segment crosses the boundary of a foreign page.
196 * EFAULT: A segment's local buffer is not acc 188 * EFAULT: A segment's local buffer is not accessible.
197 */ 189 */
198 #define IOCTL_GNTDEV_GRANT_COPY \ 190 #define IOCTL_GNTDEV_GRANT_COPY \
199 _IOC(_IOC_NONE, 'G', 8, sizeof(struct 191 _IOC(_IOC_NONE, 'G', 8, sizeof(struct ioctl_gntdev_grant_copy))
200 struct ioctl_gntdev_grant_copy { 192 struct ioctl_gntdev_grant_copy {
201 unsigned int count; 193 unsigned int count;
202 struct gntdev_grant_copy_segment __use 194 struct gntdev_grant_copy_segment __user *segments;
203 }; 195 };
204 196
205 /* Clear (set to zero) the byte specified by i 197 /* Clear (set to zero) the byte specified by index */
206 #define UNMAP_NOTIFY_CLEAR_BYTE 0x1 198 #define UNMAP_NOTIFY_CLEAR_BYTE 0x1
207 /* Send an interrupt on the indicated event ch 199 /* Send an interrupt on the indicated event channel */
208 #define UNMAP_NOTIFY_SEND_EVENT 0x2 200 #define UNMAP_NOTIFY_SEND_EVENT 0x2
209 <<
210 /* <<
211 * Flags to be used while requesting memory ma <<
212 * to be allocated with DMA API. <<
213 */ <<
214 <<
215 /* <<
216 * The buffer is backed with memory allocated <<
217 */ <<
218 #define GNTDEV_DMA_FLAG_WC (1 << <<
219 <<
220 /* <<
221 * The buffer is backed with memory allocated <<
222 */ <<
223 #define GNTDEV_DMA_FLAG_COHERENT (1 << <<
224 <<
225 /* <<
226 * Create a dma-buf [1] from grant references <<
227 * by the foreign domain @domid with flags @fl <<
228 * <<
229 * By default dma-buf is backed by system memo <<
230 * one of the GNTDEV_DMA_FLAG_XXX flags it can <<
231 * a DMA write-combine or coherent buffer, e.g <<
232 * dma_alloc_coherent. <<
233 * <<
234 * Returns 0 if dma-buf was successfully creat <<
235 * dma-buf's file descriptor is returned in @f <<
236 * <<
237 * [1] Documentation/driver-api/dma-buf.rst <<
238 */ <<
239 <<
240 #define IOCTL_GNTDEV_DMABUF_EXP_FROM_REFS \ <<
241 _IOC(_IOC_NONE, 'G', 9, \ <<
242 sizeof(struct ioctl_gntdev_dmabuf <<
243 struct ioctl_gntdev_dmabuf_exp_from_refs { <<
244 /* IN parameters. */ <<
245 /* Specific options for this dma-buf: <<
246 __u32 flags; <<
247 /* Number of grant references in @refs <<
248 __u32 count; <<
249 /* OUT parameters. */ <<
250 /* File descriptor of the dma-buf. */ <<
251 __u32 fd; <<
252 /* The domain ID of the grant referenc <<
253 __u32 domid; <<
254 /* Variable IN parameter. */ <<
255 /* Array of grant references of size @ <<
256 __u32 refs[1]; <<
257 }; <<
258 <<
259 /* <<
260 * This will block until the dma-buf with the <<
261 * released. This is only valid for buffers cr <<
262 * IOCTL_GNTDEV_DMABUF_EXP_FROM_REFS. <<
263 * <<
264 * If within @wait_to_ms milliseconds the buff <<
265 * then -ETIMEDOUT error is returned. <<
266 * If the buffer with the file descriptor @fd <<
267 * been released, then -ENOENT is returned. Fo <<
268 * this must not be treated as error. <<
269 */ <<
270 #define IOCTL_GNTDEV_DMABUF_EXP_WAIT_RELEASED <<
271 _IOC(_IOC_NONE, 'G', 10, \ <<
272 sizeof(struct ioctl_gntdev_dmabuf <<
273 struct ioctl_gntdev_dmabuf_exp_wait_released { <<
274 /* IN parameters */ <<
275 __u32 fd; <<
276 __u32 wait_to_ms; <<
277 }; <<
278 <<
279 /* <<
280 * Import a dma-buf with file descriptor @fd a <<
281 * to the pages of that dma-buf into array @re <<
282 */ <<
283 #define IOCTL_GNTDEV_DMABUF_IMP_TO_REFS \ <<
284 _IOC(_IOC_NONE, 'G', 11, \ <<
285 sizeof(struct ioctl_gntdev_dmabuf <<
286 struct ioctl_gntdev_dmabuf_imp_to_refs { <<
287 /* IN parameters. */ <<
288 /* File descriptor of the dma-buf. */ <<
289 __u32 fd; <<
290 /* Number of grant references in @refs <<
291 __u32 count; <<
292 /* The domain ID for which references <<
293 __u32 domid; <<
294 /* Reserved - must be zero. */ <<
295 __u32 reserved; <<
296 /* OUT parameters. */ <<
297 /* Array of grant references of size @ <<
298 __u32 refs[1]; <<
299 }; <<
300 <<
301 /* <<
302 * This will close all references to the impor <<
303 * @fd, so it can be released by the owner. Th <<
304 * created with IOCTL_GNTDEV_DMABUF_IMP_TO_REF <<
305 */ <<
306 #define IOCTL_GNTDEV_DMABUF_IMP_RELEASE \ <<
307 _IOC(_IOC_NONE, 'G', 12, \ <<
308 sizeof(struct ioctl_gntdev_dmabuf <<
309 struct ioctl_gntdev_dmabuf_imp_release { <<
310 /* IN parameters */ <<
311 __u32 fd; <<
312 __u32 reserved; <<
313 }; <<
314 201
315 #endif /* __LINUX_PUBLIC_GNTDEV_H__ */ 202 #endif /* __LINUX_PUBLIC_GNTDEV_H__ */
316 203
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.