1 /* SPDX-License-Identifier: ((GPL-2.0 WITH Lin 1 /* SPDX-License-Identifier: ((GPL-2.0 WITH Linux-syscall-note) OR MIT) */
2 /********************************************* 2 /******************************************************************************
3 * gntdev.h 3 * gntdev.h
4 * 4 *
5 * Interface to /dev/xen/gntdev. 5 * Interface to /dev/xen/gntdev.
6 * 6 *
7 * Copyright (c) 2007, D G Murray 7 * Copyright (c) 2007, D G Murray
8 * Copyright (c) 2018, Oleksandr Andrushchenko 8 * Copyright (c) 2018, Oleksandr Andrushchenko, EPAM Systems Inc.
9 * 9 *
10 * This program is free software; you can redi 10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU Genera 11 * modify it under the terms of the GNU General Public License version 2
12 * as published by the Free Software Foundatio 12 * as published by the Free Software Foundation; or, when distributed
13 * separately from the Linux kernel or incorpo 13 * separately from the Linux kernel or incorporated into other
14 * software packages, subject to the following 14 * software packages, subject to the following license:
15 * 15 *
16 * Permission is hereby granted, free of charg 16 * Permission is hereby granted, free of charge, to any person obtaining a copy
17 * of this source file (the "Software"), to de 17 * of this source file (the "Software"), to deal in the Software without
18 * restriction, including without limitation t 18 * restriction, including without limitation the rights to use, copy, modify,
19 * merge, publish, distribute, sublicense, and 19 * merge, publish, distribute, sublicense, and/or sell copies of the Software,
20 * and to permit persons to whom the Software 20 * and to permit persons to whom the Software is furnished to do so, subject to
21 * the following conditions: 21 * the following conditions:
22 * 22 *
23 * The above copyright notice and this permiss 23 * The above copyright notice and this permission notice shall be included in
24 * all copies or substantial portions of the S 24 * all copies or substantial portions of the Software.
25 * 25 *
26 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT W 26 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
27 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE W 27 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
28 * FITNESS FOR A PARTICULAR PURPOSE AND NONINF 28 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
29 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR 29 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
30 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT 30 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
31 * FROM, OUT OF OR IN CONNECTION WITH THE SOFT 31 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
32 * IN THE SOFTWARE. 32 * IN THE SOFTWARE.
33 */ 33 */
34 34
35 #ifndef __LINUX_PUBLIC_GNTDEV_H__ 35 #ifndef __LINUX_PUBLIC_GNTDEV_H__
36 #define __LINUX_PUBLIC_GNTDEV_H__ 36 #define __LINUX_PUBLIC_GNTDEV_H__
37 37
38 #include <linux/types.h> 38 #include <linux/types.h>
39 39
40 struct ioctl_gntdev_grant_ref { 40 struct ioctl_gntdev_grant_ref {
41 /* The domain ID of the grant to be ma 41 /* The domain ID of the grant to be mapped. */
42 __u32 domid; 42 __u32 domid;
43 /* The grant reference of the grant to 43 /* The grant reference of the grant to be mapped. */
44 __u32 ref; 44 __u32 ref;
45 }; 45 };
46 46
47 /* 47 /*
48 * Inserts the grant references into the mappi 48 * Inserts the grant references into the mapping table of an instance
49 * of gntdev. N.B. This does not perform the m 49 * of gntdev. N.B. This does not perform the mapping, which is deferred
50 * until mmap() is called with @index as the o !! 50 * until mmap() is called with @index as the offset.
51 * considered opaque to userspace, with one ex <<
52 * references have ever been inserted into the <<
53 * instance, @index will be set to 0. This is <<
54 * with userspace APIs that expect a file desc <<
55 * mmap()'d at offset 0, such as Wayland. If @ <<
56 * ioctl will fail. <<
57 */ 51 */
58 #define IOCTL_GNTDEV_MAP_GRANT_REF \ 52 #define IOCTL_GNTDEV_MAP_GRANT_REF \
59 _IOC(_IOC_NONE, 'G', 0, sizeof(struct ioctl_gn 53 _IOC(_IOC_NONE, 'G', 0, sizeof(struct ioctl_gntdev_map_grant_ref))
60 struct ioctl_gntdev_map_grant_ref { 54 struct ioctl_gntdev_map_grant_ref {
61 /* IN parameters */ 55 /* IN parameters */
62 /* The number of grants to be mapped. 56 /* The number of grants to be mapped. */
63 __u32 count; 57 __u32 count;
64 __u32 pad; 58 __u32 pad;
65 /* OUT parameters */ 59 /* OUT parameters */
66 /* The offset to be used on a subseque 60 /* The offset to be used on a subsequent call to mmap(). */
67 __u64 index; 61 __u64 index;
68 /* Variable IN parameter. */ 62 /* Variable IN parameter. */
69 /* Array of grant references, of size 63 /* Array of grant references, of size @count. */
70 struct ioctl_gntdev_grant_ref refs[1]; 64 struct ioctl_gntdev_grant_ref refs[1];
71 }; 65 };
72 66
73 /* 67 /*
74 * Removes the grant references from the mappi 68 * Removes the grant references from the mapping table of an instance of
75 * gntdev. N.B. munmap() must be called on the 69 * gntdev. N.B. munmap() must be called on the relevant virtual address(es)
76 * before this ioctl is called, or an error wi 70 * before this ioctl is called, or an error will result.
77 */ 71 */
78 #define IOCTL_GNTDEV_UNMAP_GRANT_REF \ 72 #define IOCTL_GNTDEV_UNMAP_GRANT_REF \
79 _IOC(_IOC_NONE, 'G', 1, sizeof(struct ioctl_gn 73 _IOC(_IOC_NONE, 'G', 1, sizeof(struct ioctl_gntdev_unmap_grant_ref))
80 struct ioctl_gntdev_unmap_grant_ref { 74 struct ioctl_gntdev_unmap_grant_ref {
81 /* IN parameters */ 75 /* IN parameters */
82 /* The offset was returned by the corr 76 /* The offset was returned by the corresponding map operation. */
83 __u64 index; 77 __u64 index;
84 /* The number of pages to be unmapped. 78 /* The number of pages to be unmapped. */
85 __u32 count; 79 __u32 count;
86 __u32 pad; 80 __u32 pad;
87 }; 81 };
88 82
89 /* 83 /*
90 * Returns the offset in the driver's address 84 * Returns the offset in the driver's address space that corresponds
91 * to @vaddr. This can be used to perform a mu 85 * to @vaddr. This can be used to perform a munmap(), followed by an
92 * UNMAP_GRANT_REF ioctl, where no state about 86 * UNMAP_GRANT_REF ioctl, where no state about the offset is retained by
93 * the caller. The number of pages that were a 87 * the caller. The number of pages that were allocated at the same time as
94 * @vaddr is returned in @count. 88 * @vaddr is returned in @count.
95 * 89 *
96 * N.B. Where more than one page has been mapp 90 * N.B. Where more than one page has been mapped into a contiguous range, the
97 * supplied @vaddr must correspond to the 91 * supplied @vaddr must correspond to the start of the range; otherwise
98 * an error will result. It is only possi 92 * an error will result. It is only possible to munmap() the entire
99 * contiguously-allocated range at once, 93 * contiguously-allocated range at once, and not any subrange thereof.
100 */ 94 */
101 #define IOCTL_GNTDEV_GET_OFFSET_FOR_VADDR \ 95 #define IOCTL_GNTDEV_GET_OFFSET_FOR_VADDR \
102 _IOC(_IOC_NONE, 'G', 2, sizeof(struct ioctl_gn 96 _IOC(_IOC_NONE, 'G', 2, sizeof(struct ioctl_gntdev_get_offset_for_vaddr))
103 struct ioctl_gntdev_get_offset_for_vaddr { 97 struct ioctl_gntdev_get_offset_for_vaddr {
104 /* IN parameters */ 98 /* IN parameters */
105 /* The virtual address of the first ma 99 /* The virtual address of the first mapped page in a range. */
106 __u64 vaddr; 100 __u64 vaddr;
107 /* OUT parameters */ 101 /* OUT parameters */
108 /* The offset that was used in the ini 102 /* The offset that was used in the initial mmap() operation. */
109 __u64 offset; 103 __u64 offset;
110 /* The number of pages mapped in the V 104 /* The number of pages mapped in the VM area that begins at @vaddr. */
111 __u32 count; 105 __u32 count;
112 __u32 pad; 106 __u32 pad;
113 }; 107 };
114 108
115 /* 109 /*
116 * Sets the maximum number of grants that may 110 * Sets the maximum number of grants that may mapped at once by this gntdev
117 * instance. 111 * instance.
118 * 112 *
119 * N.B. This must be called before any other i 113 * N.B. This must be called before any other ioctl is performed on the device.
120 */ 114 */
121 #define IOCTL_GNTDEV_SET_MAX_GRANTS \ 115 #define IOCTL_GNTDEV_SET_MAX_GRANTS \
122 _IOC(_IOC_NONE, 'G', 3, sizeof(struct ioctl_gn 116 _IOC(_IOC_NONE, 'G', 3, sizeof(struct ioctl_gntdev_set_max_grants))
123 struct ioctl_gntdev_set_max_grants { 117 struct ioctl_gntdev_set_max_grants {
124 /* IN parameter */ 118 /* IN parameter */
125 /* The maximum number of grants that m 119 /* The maximum number of grants that may be mapped at once. */
126 __u32 count; 120 __u32 count;
127 }; 121 };
128 122
129 /* 123 /*
130 * Sets up an unmap notification within the pa 124 * Sets up an unmap notification within the page, so that the other side can do
131 * cleanup if this side crashes. Required to i 125 * cleanup if this side crashes. Required to implement cross-domain robust
132 * mutexes or close notification on communicat 126 * mutexes or close notification on communication channels.
133 * 127 *
134 * Each mapped page only supports one notifica 128 * Each mapped page only supports one notification; multiple calls referring to
135 * the same page overwrite the previous notifi 129 * the same page overwrite the previous notification. You must clear the
136 * notification prior to the IOCTL_GNTALLOC_DE 130 * notification prior to the IOCTL_GNTALLOC_DEALLOC_GREF if you do not want it
137 * to occur. 131 * to occur.
138 */ 132 */
139 #define IOCTL_GNTDEV_SET_UNMAP_NOTIFY \ 133 #define IOCTL_GNTDEV_SET_UNMAP_NOTIFY \
140 _IOC(_IOC_NONE, 'G', 7, sizeof(struct ioctl_gn 134 _IOC(_IOC_NONE, 'G', 7, sizeof(struct ioctl_gntdev_unmap_notify))
141 struct ioctl_gntdev_unmap_notify { 135 struct ioctl_gntdev_unmap_notify {
142 /* IN parameters */ 136 /* IN parameters */
143 /* Offset in the file descriptor for a 137 /* Offset in the file descriptor for a byte within the page (same as
144 * used in mmap). If using UNMAP_NOTIF 138 * used in mmap). If using UNMAP_NOTIFY_CLEAR_BYTE, this is the byte to
145 * be cleared. Otherwise, it can be an 139 * be cleared. Otherwise, it can be any byte in the page whose
146 * notification we are adjusting. 140 * notification we are adjusting.
147 */ 141 */
148 __u64 index; 142 __u64 index;
149 /* Action(s) to take on unmap */ 143 /* Action(s) to take on unmap */
150 __u32 action; 144 __u32 action;
151 /* Event channel to notify */ 145 /* Event channel to notify */
152 __u32 event_channel_port; 146 __u32 event_channel_port;
153 }; 147 };
154 148
155 struct gntdev_grant_copy_segment { 149 struct gntdev_grant_copy_segment {
156 union { 150 union {
157 void __user *virt; 151 void __user *virt;
158 struct { 152 struct {
159 grant_ref_t ref; 153 grant_ref_t ref;
160 __u16 offset; 154 __u16 offset;
161 domid_t domid; 155 domid_t domid;
162 } foreign; 156 } foreign;
163 } source, dest; 157 } source, dest;
164 __u16 len; 158 __u16 len;
165 159
166 __u16 flags; /* GNTCOPY_* */ 160 __u16 flags; /* GNTCOPY_* */
167 __s16 status; /* GNTST_* */ 161 __s16 status; /* GNTST_* */
168 }; 162 };
169 163
170 /* 164 /*
171 * Copy between grant references and local buf 165 * Copy between grant references and local buffers.
172 * 166 *
173 * The copy is split into @count @segments, ea 167 * The copy is split into @count @segments, each of which can copy
174 * to/from one grant reference. 168 * to/from one grant reference.
175 * 169 *
176 * Each segment is similar to struct gnttab_co 170 * Each segment is similar to struct gnttab_copy in the hypervisor ABI
177 * except the local buffer is specified using 171 * except the local buffer is specified using a virtual address
178 * (instead of a GFN and offset). 172 * (instead of a GFN and offset).
179 * 173 *
180 * The local buffer may cross a Xen page bound 174 * The local buffer may cross a Xen page boundary -- the driver will
181 * split segments into multiple ops if require 175 * split segments into multiple ops if required.
182 * 176 *
183 * Returns 0 if all segments have been process 177 * Returns 0 if all segments have been processed and @status in each
184 * segment is valid. Note that one or more se 178 * segment is valid. Note that one or more segments may have failed
185 * (status != GNTST_okay). 179 * (status != GNTST_okay).
186 * 180 *
187 * If the driver had to split a segment into t 181 * If the driver had to split a segment into two or more ops, @status
188 * includes the status of the first failed op 182 * includes the status of the first failed op for that segment (or
189 * GNTST_okay if all ops were successful). 183 * GNTST_okay if all ops were successful).
190 * 184 *
191 * If -1 is returned, the status of all segmen 185 * If -1 is returned, the status of all segments is undefined.
192 * 186 *
193 * EINVAL: A segment has local buffers for bot 187 * EINVAL: A segment has local buffers for both source and
194 * destination. 188 * destination.
195 * EINVAL: A segment crosses the boundary of a 189 * EINVAL: A segment crosses the boundary of a foreign page.
196 * EFAULT: A segment's local buffer is not acc 190 * EFAULT: A segment's local buffer is not accessible.
197 */ 191 */
198 #define IOCTL_GNTDEV_GRANT_COPY \ 192 #define IOCTL_GNTDEV_GRANT_COPY \
199 _IOC(_IOC_NONE, 'G', 8, sizeof(struct 193 _IOC(_IOC_NONE, 'G', 8, sizeof(struct ioctl_gntdev_grant_copy))
200 struct ioctl_gntdev_grant_copy { 194 struct ioctl_gntdev_grant_copy {
201 unsigned int count; 195 unsigned int count;
202 struct gntdev_grant_copy_segment __use 196 struct gntdev_grant_copy_segment __user *segments;
203 }; 197 };
204 198
205 /* Clear (set to zero) the byte specified by i 199 /* Clear (set to zero) the byte specified by index */
206 #define UNMAP_NOTIFY_CLEAR_BYTE 0x1 200 #define UNMAP_NOTIFY_CLEAR_BYTE 0x1
207 /* Send an interrupt on the indicated event ch 201 /* Send an interrupt on the indicated event channel */
208 #define UNMAP_NOTIFY_SEND_EVENT 0x2 202 #define UNMAP_NOTIFY_SEND_EVENT 0x2
209 203
210 /* 204 /*
211 * Flags to be used while requesting memory ma 205 * Flags to be used while requesting memory mapping's backing storage
212 * to be allocated with DMA API. 206 * to be allocated with DMA API.
213 */ 207 */
214 208
215 /* 209 /*
216 * The buffer is backed with memory allocated 210 * The buffer is backed with memory allocated with dma_alloc_wc.
217 */ 211 */
218 #define GNTDEV_DMA_FLAG_WC (1 << 212 #define GNTDEV_DMA_FLAG_WC (1 << 0)
219 213
220 /* 214 /*
221 * The buffer is backed with memory allocated 215 * The buffer is backed with memory allocated with dma_alloc_coherent.
222 */ 216 */
223 #define GNTDEV_DMA_FLAG_COHERENT (1 << 217 #define GNTDEV_DMA_FLAG_COHERENT (1 << 1)
224 218
225 /* 219 /*
226 * Create a dma-buf [1] from grant references 220 * Create a dma-buf [1] from grant references @refs of count @count provided
227 * by the foreign domain @domid with flags @fl 221 * by the foreign domain @domid with flags @flags.
228 * 222 *
229 * By default dma-buf is backed by system memo 223 * By default dma-buf is backed by system memory pages, but by providing
230 * one of the GNTDEV_DMA_FLAG_XXX flags it can 224 * one of the GNTDEV_DMA_FLAG_XXX flags it can also be created as
231 * a DMA write-combine or coherent buffer, e.g 225 * a DMA write-combine or coherent buffer, e.g. allocated with dma_alloc_wc/
232 * dma_alloc_coherent. 226 * dma_alloc_coherent.
233 * 227 *
234 * Returns 0 if dma-buf was successfully creat 228 * Returns 0 if dma-buf was successfully created and the corresponding
235 * dma-buf's file descriptor is returned in @f 229 * dma-buf's file descriptor is returned in @fd.
236 * 230 *
237 * [1] Documentation/driver-api/dma-buf.rst 231 * [1] Documentation/driver-api/dma-buf.rst
238 */ 232 */
239 233
240 #define IOCTL_GNTDEV_DMABUF_EXP_FROM_REFS \ 234 #define IOCTL_GNTDEV_DMABUF_EXP_FROM_REFS \
241 _IOC(_IOC_NONE, 'G', 9, \ 235 _IOC(_IOC_NONE, 'G', 9, \
242 sizeof(struct ioctl_gntdev_dmabuf 236 sizeof(struct ioctl_gntdev_dmabuf_exp_from_refs))
243 struct ioctl_gntdev_dmabuf_exp_from_refs { 237 struct ioctl_gntdev_dmabuf_exp_from_refs {
244 /* IN parameters. */ 238 /* IN parameters. */
245 /* Specific options for this dma-buf: 239 /* Specific options for this dma-buf: see GNTDEV_DMA_FLAG_XXX. */
246 __u32 flags; 240 __u32 flags;
247 /* Number of grant references in @refs 241 /* Number of grant references in @refs array. */
248 __u32 count; 242 __u32 count;
249 /* OUT parameters. */ 243 /* OUT parameters. */
250 /* File descriptor of the dma-buf. */ 244 /* File descriptor of the dma-buf. */
251 __u32 fd; 245 __u32 fd;
252 /* The domain ID of the grant referenc 246 /* The domain ID of the grant references to be mapped. */
253 __u32 domid; 247 __u32 domid;
254 /* Variable IN parameter. */ 248 /* Variable IN parameter. */
255 /* Array of grant references of size @ 249 /* Array of grant references of size @count. */
256 __u32 refs[1]; 250 __u32 refs[1];
257 }; 251 };
258 252
259 /* 253 /*
260 * This will block until the dma-buf with the 254 * This will block until the dma-buf with the file descriptor @fd is
261 * released. This is only valid for buffers cr 255 * released. This is only valid for buffers created with
262 * IOCTL_GNTDEV_DMABUF_EXP_FROM_REFS. 256 * IOCTL_GNTDEV_DMABUF_EXP_FROM_REFS.
263 * 257 *
264 * If within @wait_to_ms milliseconds the buff 258 * If within @wait_to_ms milliseconds the buffer is not released
265 * then -ETIMEDOUT error is returned. 259 * then -ETIMEDOUT error is returned.
266 * If the buffer with the file descriptor @fd 260 * If the buffer with the file descriptor @fd does not exist or has already
267 * been released, then -ENOENT is returned. Fo 261 * been released, then -ENOENT is returned. For valid file descriptors
268 * this must not be treated as error. 262 * this must not be treated as error.
269 */ 263 */
270 #define IOCTL_GNTDEV_DMABUF_EXP_WAIT_RELEASED 264 #define IOCTL_GNTDEV_DMABUF_EXP_WAIT_RELEASED \
271 _IOC(_IOC_NONE, 'G', 10, \ 265 _IOC(_IOC_NONE, 'G', 10, \
272 sizeof(struct ioctl_gntdev_dmabuf 266 sizeof(struct ioctl_gntdev_dmabuf_exp_wait_released))
273 struct ioctl_gntdev_dmabuf_exp_wait_released { 267 struct ioctl_gntdev_dmabuf_exp_wait_released {
274 /* IN parameters */ 268 /* IN parameters */
275 __u32 fd; 269 __u32 fd;
276 __u32 wait_to_ms; 270 __u32 wait_to_ms;
277 }; 271 };
278 272
279 /* 273 /*
280 * Import a dma-buf with file descriptor @fd a 274 * Import a dma-buf with file descriptor @fd and export granted references
281 * to the pages of that dma-buf into array @re 275 * to the pages of that dma-buf into array @refs of size @count.
282 */ 276 */
283 #define IOCTL_GNTDEV_DMABUF_IMP_TO_REFS \ 277 #define IOCTL_GNTDEV_DMABUF_IMP_TO_REFS \
284 _IOC(_IOC_NONE, 'G', 11, \ 278 _IOC(_IOC_NONE, 'G', 11, \
285 sizeof(struct ioctl_gntdev_dmabuf 279 sizeof(struct ioctl_gntdev_dmabuf_imp_to_refs))
286 struct ioctl_gntdev_dmabuf_imp_to_refs { 280 struct ioctl_gntdev_dmabuf_imp_to_refs {
287 /* IN parameters. */ 281 /* IN parameters. */
288 /* File descriptor of the dma-buf. */ 282 /* File descriptor of the dma-buf. */
289 __u32 fd; 283 __u32 fd;
290 /* Number of grant references in @refs 284 /* Number of grant references in @refs array. */
291 __u32 count; 285 __u32 count;
292 /* The domain ID for which references 286 /* The domain ID for which references to be granted. */
293 __u32 domid; 287 __u32 domid;
294 /* Reserved - must be zero. */ 288 /* Reserved - must be zero. */
295 __u32 reserved; 289 __u32 reserved;
296 /* OUT parameters. */ 290 /* OUT parameters. */
297 /* Array of grant references of size @ 291 /* Array of grant references of size @count. */
298 __u32 refs[1]; 292 __u32 refs[1];
299 }; 293 };
300 294
301 /* 295 /*
302 * This will close all references to the impor 296 * This will close all references to the imported buffer with file descriptor
303 * @fd, so it can be released by the owner. Th 297 * @fd, so it can be released by the owner. This is only valid for buffers
304 * created with IOCTL_GNTDEV_DMABUF_IMP_TO_REF 298 * created with IOCTL_GNTDEV_DMABUF_IMP_TO_REFS.
305 */ 299 */
306 #define IOCTL_GNTDEV_DMABUF_IMP_RELEASE \ 300 #define IOCTL_GNTDEV_DMABUF_IMP_RELEASE \
307 _IOC(_IOC_NONE, 'G', 12, \ 301 _IOC(_IOC_NONE, 'G', 12, \
308 sizeof(struct ioctl_gntdev_dmabuf 302 sizeof(struct ioctl_gntdev_dmabuf_imp_release))
309 struct ioctl_gntdev_dmabuf_imp_release { 303 struct ioctl_gntdev_dmabuf_imp_release {
310 /* IN parameters */ 304 /* IN parameters */
311 __u32 fd; 305 __u32 fd;
312 __u32 reserved; 306 __u32 reserved;
313 }; 307 };
314 308
315 #endif /* __LINUX_PUBLIC_GNTDEV_H__ */ 309 #endif /* __LINUX_PUBLIC_GNTDEV_H__ */
316 310
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.