xref: /freebsd/sys/compat/linux/linux_ioctl.c (revision 3a1bf59d195ced99c0f69774969d7090d21f6097)
1 /*-
2  * SPDX-License-Identifier: BSD-2-Clause
3  *
4  * Copyright (c) 1994-1995 Søren Schmidt
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26  * SUCH DAMAGE.
27  */
28 
29 #include <sys/param.h>
30 #include <sys/capsicum.h>
31 #include <sys/cdio.h>
32 #include <sys/consio.h>
33 #include <sys/disk.h>
34 #include <sys/dvdio.h>
35 #include <sys/fcntl.h>
36 #include <sys/filio.h>
37 #include <sys/jail.h>
38 #include <sys/kbio.h>
39 #include <sys/kcov.h>
40 #include <sys/kernel.h>
41 #include <sys/linker_set.h>
42 #include <sys/lock.h>
43 #include <sys/malloc.h>
44 #include <sys/mman.h>
45 #include <sys/proc.h>
46 #include <sys/vnode.h>
47 #include <sys/sbuf.h>
48 #include <sys/sockio.h>
49 #include <sys/soundcard.h>
50 #include <sys/syscallsubr.h>
51 #include <sys/sysctl.h>
52 #include <sys/sysproto.h>
53 #include <sys/sx.h>
54 #include <sys/tty.h>
55 
56 #include <net/if.h>
57 #include <net/if_var.h>
58 #include <net/if_dl.h>
59 #include <net/if_types.h>
60 
61 #include <dev/evdev/input.h>
62 #include <dev/hid/hidraw.h>
63 #include <dev/iicbus/iic.h>
64 #include <dev/usb/usb_ioctl.h>
65 
66 #ifdef COMPAT_LINUX32
67 #include <machine/../linux32/linux.h>
68 #include <machine/../linux32/linux32_proto.h>
69 #else
70 #include <machine/../linux/linux.h>
71 #include <machine/../linux/linux_proto.h>
72 #endif
73 
74 #include <compat/linux/linux_common.h>
75 #include <compat/linux/linux_ioctl.h>
76 #include <compat/linux/linux_mib.h>
77 #include <compat/linux/linux_socket.h>
78 #include <compat/linux/linux_time.h>
79 #include <compat/linux/linux_util.h>
80 
81 #include <contrib/v4l/videodev.h>
82 #include <compat/linux/linux_videodev_compat.h>
83 
84 #include <contrib/v4l/videodev2.h>
85 #include <compat/linux/linux_videodev2_compat.h>
86 
87 #include <cam/scsi/scsi_sg.h>
88 
89 #include <dev/nvme/nvme_linux.h>
90 
91 #define	DEFINE_LINUX_IOCTL_SET(shortname, SHORTNAME)		\
92 static linux_ioctl_function_t linux_ioctl_ ## shortname;	\
93 static struct linux_ioctl_handler shortname ## _handler = {	\
94 	.func = linux_ioctl_ ## shortname,			\
95 	.low = LINUX_IOCTL_ ## SHORTNAME ## _MIN,		\
96 	.high = LINUX_IOCTL_ ## SHORTNAME ## _MAX,		\
97 };								\
98 DATA_SET(linux_ioctl_handler_set, shortname ## _handler)
99 
100 DEFINE_LINUX_IOCTL_SET(cdrom, CDROM);
101 DEFINE_LINUX_IOCTL_SET(vfat, VFAT);
102 DEFINE_LINUX_IOCTL_SET(console, CONSOLE);
103 DEFINE_LINUX_IOCTL_SET(hdio, HDIO);
104 DEFINE_LINUX_IOCTL_SET(disk, DISK);
105 DEFINE_LINUX_IOCTL_SET(i2c, I2C);
106 DEFINE_LINUX_IOCTL_SET(socket, SOCKET);
107 DEFINE_LINUX_IOCTL_SET(sound, SOUND);
108 DEFINE_LINUX_IOCTL_SET(termio, TERMIO);
109 DEFINE_LINUX_IOCTL_SET(private, PRIVATE);
110 DEFINE_LINUX_IOCTL_SET(drm, DRM);
111 DEFINE_LINUX_IOCTL_SET(dmabuf, DMABUF);
112 DEFINE_LINUX_IOCTL_SET(syncfile, SYNCFILE);
113 DEFINE_LINUX_IOCTL_SET(sg, SG);
114 DEFINE_LINUX_IOCTL_SET(v4l, VIDEO);
115 DEFINE_LINUX_IOCTL_SET(v4l2, VIDEO2);
116 DEFINE_LINUX_IOCTL_SET(fbsd_usb, FBSD_LUSB);
117 DEFINE_LINUX_IOCTL_SET(evdev, EVDEV);
118 DEFINE_LINUX_IOCTL_SET(kcov, KCOV);
119 #ifndef COMPAT_LINUX32
120 DEFINE_LINUX_IOCTL_SET(nvme, NVME);
121 #endif
122 DEFINE_LINUX_IOCTL_SET(hidraw, HIDRAW);
123 
124 #undef DEFINE_LINUX_IOCTL_SET
125 
126 static int linux_ioctl_special(struct thread *, struct linux_ioctl_args *);
127 
128 /*
129  * Keep sorted by low.
130  */
131 static struct linux_ioctl_handler linux_ioctls[] = {
132 	{ .func = linux_ioctl_termio, .low = LINUX_IOCTL_TERMIO_MIN,
133 	    .high = LINUX_IOCTL_TERMIO_MAX },
134 };
135 
136 #ifdef __i386__
137 static TAILQ_HEAD(, linux_ioctl_handler_element) linux_ioctl_handlers =
138     TAILQ_HEAD_INITIALIZER(linux_ioctl_handlers);
139 static struct sx linux_ioctl_sx;
140 SX_SYSINIT(linux_ioctl, &linux_ioctl_sx, "Linux ioctl handlers");
141 #else
142 extern TAILQ_HEAD(, linux_ioctl_handler_element) linux_ioctl_handlers;
143 extern struct sx linux_ioctl_sx;
144 #endif
145 #ifdef COMPAT_LINUX32
146 static TAILQ_HEAD(, linux_ioctl_handler_element) linux32_ioctl_handlers =
147     TAILQ_HEAD_INITIALIZER(linux32_ioctl_handlers);
148 #endif
149 
150 /*
151  * hdio related ioctls for VMWare support
152  */
153 
154 struct linux_hd_geometry {
155 	uint8_t		heads;
156 	uint8_t		sectors;
157 	uint16_t	cylinders;
158 	uint32_t	start;
159 };
160 
161 struct linux_hd_big_geometry {
162 	uint8_t		heads;
163 	uint8_t		sectors;
164 	uint32_t	cylinders;
165 	uint32_t	start;
166 };
167 
168 struct linux_i2c_msg {
169 	uint16_t	addr;
170 	uint16_t	flags;
171 	uint16_t	len;
172 	l_uintptr_t	buf;
173 };
174 
175 struct linux_i2c_rdwr_data {
176 	l_uintptr_t	msgs;
177 	l_uint		nmsgs;
178 };
179 
180 static int
181 linux_ioctl_hdio(struct thread *td, struct linux_ioctl_args *args)
182 {
183 	struct file *fp;
184 	int error;
185 	u_int sectorsize, fwcylinders, fwheads, fwsectors;
186 	off_t mediasize, bytespercyl;
187 
188 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
189 	if (error != 0)
190 		return (error);
191 	switch (args->cmd & 0xffff) {
192 	case LINUX_HDIO_GET_GEO:
193 	case LINUX_HDIO_GET_GEO_BIG:
194 		error = fo_ioctl(fp, DIOCGMEDIASIZE,
195 			(caddr_t)&mediasize, td->td_ucred, td);
196 		if (!error)
197 			error = fo_ioctl(fp, DIOCGSECTORSIZE,
198 				(caddr_t)&sectorsize, td->td_ucred, td);
199 		if (!error)
200 			error = fo_ioctl(fp, DIOCGFWHEADS,
201 				(caddr_t)&fwheads, td->td_ucred, td);
202 		if (!error)
203 			error = fo_ioctl(fp, DIOCGFWSECTORS,
204 				(caddr_t)&fwsectors, td->td_ucred, td);
205 		/*
206 		 * XXX: DIOCGFIRSTOFFSET is not yet implemented, so
207 		 * so pretend that GEOM always says 0. This is NOT VALID
208 		 * for slices or partitions, only the per-disk raw devices.
209 		 */
210 
211 		fdrop(fp, td);
212 		if (error)
213 			return (error);
214 		/*
215 		 * 1. Calculate the number of bytes in a cylinder,
216 		 *    given the firmware's notion of heads and sectors
217 		 *    per cylinder.
218 		 * 2. Calculate the number of cylinders, given the total
219 		 *    size of the media.
220 		 * All internal calculations should have 64-bit precision.
221 		 */
222 		bytespercyl = (off_t) sectorsize * fwheads * fwsectors;
223 		fwcylinders = mediasize / bytespercyl;
224 
225 		if ((args->cmd & 0xffff) == LINUX_HDIO_GET_GEO) {
226 			struct linux_hd_geometry hdg;
227 
228 			hdg.cylinders = fwcylinders;
229 			hdg.heads = fwheads;
230 			hdg.sectors = fwsectors;
231 			hdg.start = 0;
232 			error = copyout(&hdg, (void *)args->arg, sizeof(hdg));
233 		} else if ((args->cmd & 0xffff) == LINUX_HDIO_GET_GEO_BIG) {
234 			struct linux_hd_big_geometry hdbg;
235 
236 			memset(&hdbg, 0, sizeof(hdbg));
237 			hdbg.cylinders = fwcylinders;
238 			hdbg.heads = fwheads;
239 			hdbg.sectors = fwsectors;
240 			hdbg.start = 0;
241 			error = copyout(&hdbg, (void *)args->arg, sizeof(hdbg));
242 		}
243 		return (error);
244 		break;
245 	default:
246 		/* XXX */
247 		linux_msg(td,
248 			"%s fd=%d, cmd=0x%x ('%c',%d) is not implemented",
249 			__func__, args->fd, args->cmd,
250 			(int)(args->cmd & 0xff00) >> 8,
251 			(int)(args->cmd & 0xff));
252 		break;
253 	}
254 	fdrop(fp, td);
255 	return (ENOIOCTL);
256 }
257 
258 static int
259 linux_ioctl_disk(struct thread *td, struct linux_ioctl_args *args)
260 {
261 	struct file *fp;
262 	int error;
263 	u_int sectorsize, psectorsize;
264 	uint64_t blksize64;
265 	off_t mediasize, stripesize;
266 
267 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
268 	if (error != 0)
269 		return (error);
270 	switch (args->cmd & 0xffff) {
271 	case LINUX_BLKGETSIZE:
272 		error = fo_ioctl(fp, DIOCGSECTORSIZE,
273 		    (caddr_t)&sectorsize, td->td_ucred, td);
274 		if (!error)
275 			error = fo_ioctl(fp, DIOCGMEDIASIZE,
276 			    (caddr_t)&mediasize, td->td_ucred, td);
277 		fdrop(fp, td);
278 		if (error)
279 			return (error);
280 		sectorsize = mediasize / sectorsize;
281 		/*
282 		 * XXX: How do we know we return the right size of integer ?
283 		 */
284 		return (copyout(&sectorsize, (void *)args->arg,
285 		    sizeof(sectorsize)));
286 		break;
287 	case LINUX_BLKGETSIZE64:
288 		error = fo_ioctl(fp, DIOCGMEDIASIZE,
289 		    (caddr_t)&mediasize, td->td_ucred, td);
290 		fdrop(fp, td);
291 		if (error)
292 			return (error);
293 		blksize64 = mediasize;
294 		return (copyout(&blksize64, (void *)args->arg,
295 		    sizeof(blksize64)));
296 	case LINUX_BLKSSZGET:
297 		error = fo_ioctl(fp, DIOCGSECTORSIZE,
298 		    (caddr_t)&sectorsize, td->td_ucred, td);
299 		fdrop(fp, td);
300 		if (error)
301 			return (error);
302 		return (copyout(&sectorsize, (void *)args->arg,
303 		    sizeof(sectorsize)));
304 		break;
305 	case LINUX_BLKPBSZGET:
306 		error = fo_ioctl(fp, DIOCGSTRIPESIZE,
307 		    (caddr_t)&stripesize, td->td_ucred, td);
308 		if (error != 0) {
309 			fdrop(fp, td);
310 			return (error);
311 		}
312 		if (stripesize > 0 && stripesize <= 4096) {
313 			psectorsize = stripesize;
314 		} else  {
315 			error = fo_ioctl(fp, DIOCGSECTORSIZE,
316 			    (caddr_t)&sectorsize, td->td_ucred, td);
317 			if (error != 0) {
318 				fdrop(fp, td);
319 				return (error);
320 			}
321 			psectorsize = sectorsize;
322 		}
323 		fdrop(fp, td);
324 		return (copyout(&psectorsize, (void *)args->arg,
325 		    sizeof(psectorsize)));
326 	}
327 	fdrop(fp, td);
328 	return (ENOIOCTL);
329 }
330 
331 /*
332  * termio related ioctls
333  */
334 
335 struct linux_termio {
336 	unsigned short c_iflag;
337 	unsigned short c_oflag;
338 	unsigned short c_cflag;
339 	unsigned short c_lflag;
340 	unsigned char c_line;
341 	unsigned char c_cc[LINUX_NCC];
342 };
343 
344 struct linux_termios {
345 	unsigned int c_iflag;
346 	unsigned int c_oflag;
347 	unsigned int c_cflag;
348 	unsigned int c_lflag;
349 	unsigned char c_line;
350 	unsigned char c_cc[LINUX_NCCS];
351 };
352 
353 struct linux_termios2 {
354 	unsigned int c_iflag;
355 	unsigned int c_oflag;
356 	unsigned int c_cflag;
357 	unsigned int c_lflag;
358 	unsigned char c_line;
359 	unsigned char c_cc[LINUX_NCCS];
360 	unsigned int c_ispeed;
361 	unsigned int c_ospeed;
362 };
363 
364 struct linux_winsize {
365 	unsigned short ws_row, ws_col;
366 	unsigned short ws_xpixel, ws_ypixel;
367 };
368 
369 struct speedtab {
370 	int sp_speed;			/* Speed. */
371 	int sp_code;			/* Code. */
372 };
373 
374 static struct speedtab sptab[] = {
375 	{ B0, LINUX_B0 }, { B50, LINUX_B50 },
376 	{ B75, LINUX_B75 }, { B110, LINUX_B110 },
377 	{ B134, LINUX_B134 }, { B150, LINUX_B150 },
378 	{ B200, LINUX_B200 }, { B300, LINUX_B300 },
379 	{ B600, LINUX_B600 }, { B1200, LINUX_B1200 },
380 	{ B1800, LINUX_B1800 }, { B2400, LINUX_B2400 },
381 	{ B4800, LINUX_B4800 }, { B9600, LINUX_B9600 },
382 	{ B19200, LINUX_B19200 }, { B38400, LINUX_B38400 },
383 	{ B57600, LINUX_B57600 }, { B115200, LINUX_B115200 },
384 	{-1, -1 }
385 };
386 
387 struct linux_serial_struct {
388 	int	type;
389 	int	line;
390 	int	port;
391 	int	irq;
392 	int	flags;
393 	int	xmit_fifo_size;
394 	int	custom_divisor;
395 	int	baud_base;
396 	unsigned short close_delay;
397 	char	reserved_char[2];
398 	int	hub6;
399 	unsigned short closing_wait;
400 	unsigned short closing_wait2;
401 	int	reserved[4];
402 };
403 
404 static int
405 linux_to_bsd_speed(int code, struct speedtab *table)
406 {
407 	for ( ; table->sp_code != -1; table++)
408 		if (table->sp_code == code)
409 			return (table->sp_speed);
410 	return (-1);
411 }
412 
413 static int
414 bsd_to_linux_speed(int speed, struct speedtab *table)
415 {
416 	for ( ; table->sp_speed != -1; table++)
417 		if (table->sp_speed == speed)
418 			return (table->sp_code);
419 	return (LINUX_BOTHER);
420 }
421 
422 static void
423 bsd_to_linux_termios(struct termios *bios, struct linux_termios *lios)
424 {
425 	int i;
426 
427 	lios->c_iflag = 0;
428 	if (bios->c_iflag & IGNBRK)
429 		lios->c_iflag |= LINUX_IGNBRK;
430 	if (bios->c_iflag & BRKINT)
431 		lios->c_iflag |= LINUX_BRKINT;
432 	if (bios->c_iflag & IGNPAR)
433 		lios->c_iflag |= LINUX_IGNPAR;
434 	if (bios->c_iflag & PARMRK)
435 		lios->c_iflag |= LINUX_PARMRK;
436 	if (bios->c_iflag & INPCK)
437 		lios->c_iflag |= LINUX_INPCK;
438 	if (bios->c_iflag & ISTRIP)
439 		lios->c_iflag |= LINUX_ISTRIP;
440 	if (bios->c_iflag & INLCR)
441 		lios->c_iflag |= LINUX_INLCR;
442 	if (bios->c_iflag & IGNCR)
443 		lios->c_iflag |= LINUX_IGNCR;
444 	if (bios->c_iflag & ICRNL)
445 		lios->c_iflag |= LINUX_ICRNL;
446 	if (bios->c_iflag & IXON)
447 		lios->c_iflag |= LINUX_IXON;
448 	if (bios->c_iflag & IXANY)
449 		lios->c_iflag |= LINUX_IXANY;
450 	if (bios->c_iflag & IXOFF)
451 		lios->c_iflag |= LINUX_IXOFF;
452 	if (bios->c_iflag & IMAXBEL)
453 		lios->c_iflag |= LINUX_IMAXBEL;
454 	if (bios->c_iflag & IUTF8)
455 		lios->c_iflag |= LINUX_IUTF8;
456 
457 	lios->c_oflag = 0;
458 	if (bios->c_oflag & OPOST)
459 		lios->c_oflag |= LINUX_OPOST;
460 	if (bios->c_oflag & ONLCR)
461 		lios->c_oflag |= LINUX_ONLCR;
462 	if (bios->c_oflag & TAB3)
463 		lios->c_oflag |= LINUX_XTABS;
464 
465 	lios->c_cflag = bsd_to_linux_speed(bios->c_ispeed, sptab);
466 	lios->c_cflag |= (bios->c_cflag & CSIZE) >> 4;
467 	if (bios->c_cflag & CSTOPB)
468 		lios->c_cflag |= LINUX_CSTOPB;
469 	if (bios->c_cflag & CREAD)
470 		lios->c_cflag |= LINUX_CREAD;
471 	if (bios->c_cflag & PARENB)
472 		lios->c_cflag |= LINUX_PARENB;
473 	if (bios->c_cflag & PARODD)
474 		lios->c_cflag |= LINUX_PARODD;
475 	if (bios->c_cflag & HUPCL)
476 		lios->c_cflag |= LINUX_HUPCL;
477 	if (bios->c_cflag & CLOCAL)
478 		lios->c_cflag |= LINUX_CLOCAL;
479 	if (bios->c_cflag & CRTSCTS)
480 		lios->c_cflag |= LINUX_CRTSCTS;
481 
482 	lios->c_lflag = 0;
483 	if (bios->c_lflag & ISIG)
484 		lios->c_lflag |= LINUX_ISIG;
485 	if (bios->c_lflag & ICANON)
486 		lios->c_lflag |= LINUX_ICANON;
487 	if (bios->c_lflag & ECHO)
488 		lios->c_lflag |= LINUX_ECHO;
489 	if (bios->c_lflag & ECHOE)
490 		lios->c_lflag |= LINUX_ECHOE;
491 	if (bios->c_lflag & ECHOK)
492 		lios->c_lflag |= LINUX_ECHOK;
493 	if (bios->c_lflag & ECHONL)
494 		lios->c_lflag |= LINUX_ECHONL;
495 	if (bios->c_lflag & NOFLSH)
496 		lios->c_lflag |= LINUX_NOFLSH;
497 	if (bios->c_lflag & TOSTOP)
498 		lios->c_lflag |= LINUX_TOSTOP;
499 	if (bios->c_lflag & ECHOCTL)
500 		lios->c_lflag |= LINUX_ECHOCTL;
501 	if (bios->c_lflag & ECHOPRT)
502 		lios->c_lflag |= LINUX_ECHOPRT;
503 	if (bios->c_lflag & ECHOKE)
504 		lios->c_lflag |= LINUX_ECHOKE;
505 	if (bios->c_lflag & FLUSHO)
506 		lios->c_lflag |= LINUX_FLUSHO;
507 	if (bios->c_lflag & PENDIN)
508 		lios->c_lflag |= LINUX_PENDIN;
509 	if (bios->c_lflag & IEXTEN)
510 		lios->c_lflag |= LINUX_IEXTEN;
511 
512 	for (i=0; i<LINUX_NCCS; i++)
513 		lios->c_cc[i] = LINUX_POSIX_VDISABLE;
514 	lios->c_cc[LINUX_VINTR] = bios->c_cc[VINTR];
515 	lios->c_cc[LINUX_VQUIT] = bios->c_cc[VQUIT];
516 	lios->c_cc[LINUX_VERASE] = bios->c_cc[VERASE];
517 	lios->c_cc[LINUX_VKILL] = bios->c_cc[VKILL];
518 	lios->c_cc[LINUX_VEOF] = bios->c_cc[VEOF];
519 	lios->c_cc[LINUX_VEOL] = bios->c_cc[VEOL];
520 	lios->c_cc[LINUX_VMIN] = bios->c_cc[VMIN];
521 	lios->c_cc[LINUX_VTIME] = bios->c_cc[VTIME];
522 	lios->c_cc[LINUX_VEOL2] = bios->c_cc[VEOL2];
523 	lios->c_cc[LINUX_VSUSP] = bios->c_cc[VSUSP];
524 	lios->c_cc[LINUX_VSTART] = bios->c_cc[VSTART];
525 	lios->c_cc[LINUX_VSTOP] = bios->c_cc[VSTOP];
526 	lios->c_cc[LINUX_VREPRINT] = bios->c_cc[VREPRINT];
527 	lios->c_cc[LINUX_VDISCARD] = bios->c_cc[VDISCARD];
528 	lios->c_cc[LINUX_VWERASE] = bios->c_cc[VWERASE];
529 	lios->c_cc[LINUX_VLNEXT] = bios->c_cc[VLNEXT];
530 	if (linux_preserve_vstatus)
531 		lios->c_cc[LINUX_VSTATUS] = bios->c_cc[VSTATUS];
532 
533 	for (i=0; i<LINUX_NCCS; i++) {
534 		if (i != LINUX_VMIN && i != LINUX_VTIME &&
535 		    lios->c_cc[i] == _POSIX_VDISABLE)
536 			lios->c_cc[i] = LINUX_POSIX_VDISABLE;
537 	}
538 	lios->c_line = 0;
539 }
540 
541 static void
542 bsd_to_linux_termios2(struct termios *bios, struct linux_termios2 *lios2)
543 {
544 	bsd_to_linux_termios(bios, (struct linux_termios *)lios2);
545 	lios2->c_ospeed = bios->c_ospeed;
546 	lios2->c_ispeed = bios->c_ispeed;
547 }
548 
549 static void
550 linux_to_bsd_termios(struct linux_termios *lios, struct termios *bios)
551 {
552 	int i;
553 
554 	bios->c_iflag = 0;
555 	if (lios->c_iflag & LINUX_IGNBRK)
556 		bios->c_iflag |= IGNBRK;
557 	if (lios->c_iflag & LINUX_BRKINT)
558 		bios->c_iflag |= BRKINT;
559 	if (lios->c_iflag & LINUX_IGNPAR)
560 		bios->c_iflag |= IGNPAR;
561 	if (lios->c_iflag & LINUX_PARMRK)
562 		bios->c_iflag |= PARMRK;
563 	if (lios->c_iflag & LINUX_INPCK)
564 		bios->c_iflag |= INPCK;
565 	if (lios->c_iflag & LINUX_ISTRIP)
566 		bios->c_iflag |= ISTRIP;
567 	if (lios->c_iflag & LINUX_INLCR)
568 		bios->c_iflag |= INLCR;
569 	if (lios->c_iflag & LINUX_IGNCR)
570 		bios->c_iflag |= IGNCR;
571 	if (lios->c_iflag & LINUX_ICRNL)
572 		bios->c_iflag |= ICRNL;
573 	if (lios->c_iflag & LINUX_IXON)
574 		bios->c_iflag |= IXON;
575 	if (lios->c_iflag & LINUX_IXANY)
576 		bios->c_iflag |= IXANY;
577 	if (lios->c_iflag & LINUX_IXOFF)
578 		bios->c_iflag |= IXOFF;
579 	if (lios->c_iflag & LINUX_IMAXBEL)
580 		bios->c_iflag |= IMAXBEL;
581 	if (lios->c_iflag & LINUX_IUTF8)
582 		bios->c_iflag |= IUTF8;
583 
584 	bios->c_oflag = 0;
585 	if (lios->c_oflag & LINUX_OPOST)
586 		bios->c_oflag |= OPOST;
587 	if (lios->c_oflag & LINUX_ONLCR)
588 		bios->c_oflag |= ONLCR;
589 	if (lios->c_oflag & LINUX_XTABS)
590 		bios->c_oflag |= TAB3;
591 
592 	bios->c_cflag = (lios->c_cflag & LINUX_CSIZE) << 4;
593 	if (lios->c_cflag & LINUX_CSTOPB)
594 		bios->c_cflag |= CSTOPB;
595 	if (lios->c_cflag & LINUX_CREAD)
596 		bios->c_cflag |= CREAD;
597 	if (lios->c_cflag & LINUX_PARENB)
598 		bios->c_cflag |= PARENB;
599 	if (lios->c_cflag & LINUX_PARODD)
600 		bios->c_cflag |= PARODD;
601 	if (lios->c_cflag & LINUX_HUPCL)
602 		bios->c_cflag |= HUPCL;
603 	if (lios->c_cflag & LINUX_CLOCAL)
604 		bios->c_cflag |= CLOCAL;
605 	if (lios->c_cflag & LINUX_CRTSCTS)
606 		bios->c_cflag |= CRTSCTS;
607 
608 	bios->c_lflag = 0;
609 	if (lios->c_lflag & LINUX_ISIG)
610 		bios->c_lflag |= ISIG;
611 	if (lios->c_lflag & LINUX_ICANON)
612 		bios->c_lflag |= ICANON;
613 	if (lios->c_lflag & LINUX_ECHO)
614 		bios->c_lflag |= ECHO;
615 	if (lios->c_lflag & LINUX_ECHOE)
616 		bios->c_lflag |= ECHOE;
617 	if (lios->c_lflag & LINUX_ECHOK)
618 		bios->c_lflag |= ECHOK;
619 	if (lios->c_lflag & LINUX_ECHONL)
620 		bios->c_lflag |= ECHONL;
621 	if (lios->c_lflag & LINUX_NOFLSH)
622 		bios->c_lflag |= NOFLSH;
623 	if (lios->c_lflag & LINUX_TOSTOP)
624 		bios->c_lflag |= TOSTOP;
625 	if (lios->c_lflag & LINUX_ECHOCTL)
626 		bios->c_lflag |= ECHOCTL;
627 	if (lios->c_lflag & LINUX_ECHOPRT)
628 		bios->c_lflag |= ECHOPRT;
629 	if (lios->c_lflag & LINUX_ECHOKE)
630 		bios->c_lflag |= ECHOKE;
631 	if (lios->c_lflag & LINUX_FLUSHO)
632 		bios->c_lflag |= FLUSHO;
633 	if (lios->c_lflag & LINUX_PENDIN)
634 		bios->c_lflag |= PENDIN;
635 	if (lios->c_lflag & LINUX_IEXTEN)
636 		bios->c_lflag |= IEXTEN;
637 
638 	for (i=0; i<NCCS; i++)
639 		bios->c_cc[i] = _POSIX_VDISABLE;
640 	bios->c_cc[VINTR] = lios->c_cc[LINUX_VINTR];
641 	bios->c_cc[VQUIT] = lios->c_cc[LINUX_VQUIT];
642 	bios->c_cc[VERASE] = lios->c_cc[LINUX_VERASE];
643 	bios->c_cc[VKILL] = lios->c_cc[LINUX_VKILL];
644 	bios->c_cc[VEOF] = lios->c_cc[LINUX_VEOF];
645 	bios->c_cc[VEOL] = lios->c_cc[LINUX_VEOL];
646 	bios->c_cc[VMIN] = lios->c_cc[LINUX_VMIN];
647 	bios->c_cc[VTIME] = lios->c_cc[LINUX_VTIME];
648 	bios->c_cc[VEOL2] = lios->c_cc[LINUX_VEOL2];
649 	bios->c_cc[VSUSP] = lios->c_cc[LINUX_VSUSP];
650 	bios->c_cc[VSTART] = lios->c_cc[LINUX_VSTART];
651 	bios->c_cc[VSTOP] = lios->c_cc[LINUX_VSTOP];
652 	bios->c_cc[VREPRINT] = lios->c_cc[LINUX_VREPRINT];
653 	bios->c_cc[VDISCARD] = lios->c_cc[LINUX_VDISCARD];
654 	bios->c_cc[VWERASE] = lios->c_cc[LINUX_VWERASE];
655 	bios->c_cc[VLNEXT] = lios->c_cc[LINUX_VLNEXT];
656 	if (linux_preserve_vstatus)
657 		bios->c_cc[VSTATUS] = lios->c_cc[LINUX_VSTATUS];
658 
659 	for (i=0; i<NCCS; i++) {
660 		if (i != VMIN && i != VTIME &&
661 		    bios->c_cc[i] == LINUX_POSIX_VDISABLE)
662 			bios->c_cc[i] = _POSIX_VDISABLE;
663 	}
664 
665 	bios->c_ispeed = bios->c_ospeed =
666 	    linux_to_bsd_speed(lios->c_cflag & LINUX_CBAUD, sptab);
667 }
668 
669 static void
670 linux_to_bsd_termios2(struct linux_termios2 *lios2, struct termios *bios)
671 {
672 	linux_to_bsd_termios((struct linux_termios *)lios2, bios);
673 	if ((lios2->c_cflag & LINUX_CBAUD) == LINUX_BOTHER)
674 		bios->c_ospeed = lios2->c_ospeed;
675 	if ((lios2->c_cflag & LINUX_CIBAUD) == LINUX_BOTHER << LINUX_IBSHIFT)
676 		bios->c_ispeed = lios2->c_ispeed;
677 }
678 
679 static void
680 bsd_to_linux_termio(struct termios *bios, struct linux_termio *lio)
681 {
682 	struct linux_termios lios;
683 
684 	memset(lio, 0, sizeof(*lio));
685 	bsd_to_linux_termios(bios, &lios);
686 	lio->c_iflag = lios.c_iflag;
687 	lio->c_oflag = lios.c_oflag;
688 	lio->c_cflag = lios.c_cflag;
689 	lio->c_lflag = lios.c_lflag;
690 	lio->c_line  = lios.c_line;
691 	memcpy(lio->c_cc, lios.c_cc, LINUX_NCC);
692 }
693 
694 static void
695 linux_to_bsd_termio(struct linux_termio *lio, struct termios *bios)
696 {
697 	struct linux_termios lios;
698 	int i;
699 
700 	lios.c_iflag = lio->c_iflag;
701 	lios.c_oflag = lio->c_oflag;
702 	lios.c_cflag = lio->c_cflag;
703 	lios.c_lflag = lio->c_lflag;
704 	for (i=LINUX_NCC; i<LINUX_NCCS; i++)
705 		lios.c_cc[i] = LINUX_POSIX_VDISABLE;
706 	memcpy(lios.c_cc, lio->c_cc, LINUX_NCC);
707 	linux_to_bsd_termios(&lios, bios);
708 }
709 
710 static int
711 linux_ioctl_termio(struct thread *td, struct linux_ioctl_args *args)
712 {
713 	struct termios bios;
714 	struct linux_termios lios;
715 	struct linux_termios2 lios2;
716 	struct linux_termio lio;
717 	struct file *fp;
718 	int error;
719 
720 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
721 	if (error != 0)
722 		return (error);
723 
724 	switch (args->cmd & 0xffff) {
725 	case LINUX_TCGETS:
726 		error = fo_ioctl(fp, TIOCGETA, (caddr_t)&bios, td->td_ucred,
727 		    td);
728 		if (error)
729 			break;
730 		bsd_to_linux_termios(&bios, &lios);
731 		error = copyout(&lios, (void *)args->arg, sizeof(lios));
732 		break;
733 
734 	case LINUX_TCSETS:
735 		error = copyin((void *)args->arg, &lios, sizeof(lios));
736 		if (error)
737 			break;
738 		linux_to_bsd_termios(&lios, &bios);
739 		error = (fo_ioctl(fp, TIOCSETA, (caddr_t)&bios, td->td_ucred,
740 		    td));
741 		break;
742 
743 	case LINUX_TCSETSW:
744 		error = copyin((void *)args->arg, &lios, sizeof(lios));
745 		if (error)
746 			break;
747 		linux_to_bsd_termios(&lios, &bios);
748 		error = (fo_ioctl(fp, TIOCSETAW, (caddr_t)&bios, td->td_ucred,
749 		    td));
750 		break;
751 
752 	case LINUX_TCSETSF:
753 		error = copyin((void *)args->arg, &lios, sizeof(lios));
754 		if (error)
755 			break;
756 		linux_to_bsd_termios(&lios, &bios);
757 		error = (fo_ioctl(fp, TIOCSETAF, (caddr_t)&bios, td->td_ucred,
758 		    td));
759 		break;
760 
761 	case LINUX_TCGETA:
762 		error = fo_ioctl(fp, TIOCGETA, (caddr_t)&bios, td->td_ucred,
763 		    td);
764 		if (error)
765 			break;
766 		bsd_to_linux_termio(&bios, &lio);
767 		error = (copyout(&lio, (void *)args->arg, sizeof(lio)));
768 		break;
769 
770 	case LINUX_TCSETA:
771 		error = copyin((void *)args->arg, &lio, sizeof(lio));
772 		if (error)
773 			break;
774 		linux_to_bsd_termio(&lio, &bios);
775 		error = (fo_ioctl(fp, TIOCSETA, (caddr_t)&bios, td->td_ucred,
776 		    td));
777 		break;
778 
779 	case LINUX_TCSETAW:
780 		error = copyin((void *)args->arg, &lio, sizeof(lio));
781 		if (error)
782 			break;
783 		linux_to_bsd_termio(&lio, &bios);
784 		error = (fo_ioctl(fp, TIOCSETAW, (caddr_t)&bios, td->td_ucred,
785 		    td));
786 		break;
787 
788 	case LINUX_TCSETAF:
789 		error = copyin((void *)args->arg, &lio, sizeof(lio));
790 		if (error)
791 			break;
792 		linux_to_bsd_termio(&lio, &bios);
793 		error = (fo_ioctl(fp, TIOCSETAF, (caddr_t)&bios, td->td_ucred,
794 		    td));
795 		break;
796 
797 	case LINUX_TCSBRK:
798 		if (args->arg != 0) {
799 			error = (fo_ioctl(fp, TIOCDRAIN, (caddr_t)&bios, td->td_ucred,
800 			    td));
801 		} else {
802 			linux_msg(td, "ioctl TCSBRK arg 0 not implemented");
803 			error = ENOIOCTL;
804 		}
805 		break;
806 
807 	case LINUX_TCXONC: {
808 		switch (args->arg) {
809 		case LINUX_TCOOFF:
810 			args->cmd = TIOCSTOP;
811 			break;
812 		case LINUX_TCOON:
813 			args->cmd = TIOCSTART;
814 			break;
815 		case LINUX_TCIOFF:
816 		case LINUX_TCION: {
817 			int c;
818 			struct write_args wr;
819 			error = fo_ioctl(fp, TIOCGETA, (caddr_t)&bios,
820 			    td->td_ucred, td);
821 			if (error)
822 				break;
823 			fdrop(fp, td);
824 			c = (args->arg == LINUX_TCIOFF) ? VSTOP : VSTART;
825 			c = bios.c_cc[c];
826 			if (c != _POSIX_VDISABLE) {
827 				wr.fd = args->fd;
828 				wr.buf = &c;
829 				wr.nbyte = sizeof(c);
830 				return (sys_write(td, &wr));
831 			} else
832 				return (0);
833 		}
834 		default:
835 			fdrop(fp, td);
836 			return (EINVAL);
837 		}
838 		args->arg = 0;
839 		error = (sys_ioctl(td, (struct ioctl_args *)args));
840 		break;
841 	}
842 
843 	case LINUX_TCFLSH: {
844 		int val;
845 		switch (args->arg) {
846 		case LINUX_TCIFLUSH:
847 			val = FREAD;
848 			break;
849 		case LINUX_TCOFLUSH:
850 			val = FWRITE;
851 			break;
852 		case LINUX_TCIOFLUSH:
853 			val = FREAD | FWRITE;
854 			break;
855 		default:
856 			fdrop(fp, td);
857 			return (EINVAL);
858 		}
859 		error = (fo_ioctl(fp,TIOCFLUSH,(caddr_t)&val,td->td_ucred,td));
860 		break;
861 	}
862 
863 	case LINUX_TIOCEXCL:
864 		args->cmd = TIOCEXCL;
865 		error = (sys_ioctl(td, (struct ioctl_args *)args));
866 		break;
867 
868 	case LINUX_TIOCNXCL:
869 		args->cmd = TIOCNXCL;
870 		error = (sys_ioctl(td, (struct ioctl_args *)args));
871 		break;
872 
873 	case LINUX_TIOCSCTTY:
874 		args->cmd = TIOCSCTTY;
875 		error = (sys_ioctl(td, (struct ioctl_args *)args));
876 		break;
877 
878 	case LINUX_TIOCGPGRP:
879 		args->cmd = TIOCGPGRP;
880 		error = (sys_ioctl(td, (struct ioctl_args *)args));
881 		break;
882 
883 	case LINUX_TIOCSPGRP:
884 		args->cmd = TIOCSPGRP;
885 		error = (sys_ioctl(td, (struct ioctl_args *)args));
886 		break;
887 
888 	/* LINUX_TIOCOUTQ */
889 	/* LINUX_TIOCSTI */
890 
891 	case LINUX_TIOCGWINSZ:
892 		args->cmd = TIOCGWINSZ;
893 		error = (sys_ioctl(td, (struct ioctl_args *)args));
894 		break;
895 
896 	case LINUX_TIOCSWINSZ:
897 		args->cmd = TIOCSWINSZ;
898 		error = (sys_ioctl(td, (struct ioctl_args *)args));
899 		break;
900 
901 	case LINUX_TIOCMGET:
902 		args->cmd = TIOCMGET;
903 		error = (sys_ioctl(td, (struct ioctl_args *)args));
904 		break;
905 
906 	case LINUX_TIOCMBIS:
907 		args->cmd = TIOCMBIS;
908 		error = (sys_ioctl(td, (struct ioctl_args *)args));
909 		break;
910 
911 	case LINUX_TIOCMBIC:
912 		args->cmd = TIOCMBIC;
913 		error = (sys_ioctl(td, (struct ioctl_args *)args));
914 		break;
915 
916 	case LINUX_TIOCMSET:
917 		args->cmd = TIOCMSET;
918 		error = (sys_ioctl(td, (struct ioctl_args *)args));
919 		break;
920 
921 	/* TIOCGSOFTCAR */
922 	/* TIOCSSOFTCAR */
923 
924 	case LINUX_FIONREAD: /* LINUX_TIOCINQ */
925 		args->cmd = FIONREAD;
926 		error = (sys_ioctl(td, (struct ioctl_args *)args));
927 		break;
928 
929 	/* LINUX_TIOCLINUX */
930 
931 	case LINUX_TIOCCONS:
932 		args->cmd = TIOCCONS;
933 		error = (sys_ioctl(td, (struct ioctl_args *)args));
934 		break;
935 
936 	case LINUX_TIOCGSERIAL: {
937 		struct linux_serial_struct lss;
938 
939 		bzero(&lss, sizeof(lss));
940 		lss.type = LINUX_PORT_16550A;
941 		lss.flags = 0;
942 		lss.close_delay = 0;
943 		error = copyout(&lss, (void *)args->arg, sizeof(lss));
944 		break;
945 	}
946 
947 	case LINUX_TIOCSSERIAL: {
948 		struct linux_serial_struct lss;
949 		error = copyin((void *)args->arg, &lss, sizeof(lss));
950 		if (error)
951 			break;
952 		/* XXX - It really helps to have an implementation that
953 		 * does nothing. NOT!
954 		 */
955 		error = 0;
956 		break;
957 	}
958 
959 	case LINUX_TIOCPKT:
960 		args->cmd = TIOCPKT;
961 		error = (sys_ioctl(td, (struct ioctl_args *)args));
962 		break;
963 
964 	case LINUX_FIONBIO:
965 		args->cmd = FIONBIO;
966 		error = (sys_ioctl(td, (struct ioctl_args *)args));
967 		break;
968 
969 	case LINUX_TIOCNOTTY:
970 		args->cmd = TIOCNOTTY;
971 		error = (sys_ioctl(td, (struct ioctl_args *)args));
972 		break;
973 
974 	case LINUX_TIOCSETD: {
975 		int line;
976 		switch (args->arg) {
977 		case LINUX_N_TTY:
978 			line = TTYDISC;
979 			break;
980 		case LINUX_N_SLIP:
981 			line = SLIPDISC;
982 			break;
983 		case LINUX_N_PPP:
984 			line = PPPDISC;
985 			break;
986 		default:
987 			fdrop(fp, td);
988 			return (EINVAL);
989 		}
990 		error = (fo_ioctl(fp, TIOCSETD, (caddr_t)&line, td->td_ucred,
991 		    td));
992 		break;
993 	}
994 
995 	case LINUX_TIOCGETD: {
996 		int linux_line;
997 		int bsd_line = TTYDISC;
998 		error = fo_ioctl(fp, TIOCGETD, (caddr_t)&bsd_line,
999 		    td->td_ucred, td);
1000 		if (error)
1001 			break;
1002 		switch (bsd_line) {
1003 		case TTYDISC:
1004 			linux_line = LINUX_N_TTY;
1005 			break;
1006 		case SLIPDISC:
1007 			linux_line = LINUX_N_SLIP;
1008 			break;
1009 		case PPPDISC:
1010 			linux_line = LINUX_N_PPP;
1011 			break;
1012 		default:
1013 			fdrop(fp, td);
1014 			return (EINVAL);
1015 		}
1016 		error = (copyout(&linux_line, (void *)args->arg, sizeof(int)));
1017 		break;
1018 	}
1019 
1020 	/* LINUX_TCSBRKP */
1021 	/* LINUX_TIOCTTYGSTRUCT */
1022 
1023 	case LINUX_FIONCLEX:
1024 		args->cmd = FIONCLEX;
1025 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1026 		break;
1027 
1028 	case LINUX_FIOCLEX:
1029 		args->cmd = FIOCLEX;
1030 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1031 		break;
1032 
1033 	case LINUX_FIOASYNC:
1034 		args->cmd = FIOASYNC;
1035 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1036 		break;
1037 
1038 	/* LINUX_TIOCSERCONFIG */
1039 	/* LINUX_TIOCSERGWILD */
1040 	/* LINUX_TIOCSERSWILD */
1041 	/* LINUX_TIOCGLCKTRMIOS */
1042 	/* LINUX_TIOCSLCKTRMIOS */
1043 
1044 	case LINUX_TIOCSBRK:
1045 		args->cmd = TIOCSBRK;
1046 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1047 		break;
1048 
1049 	case LINUX_TIOCCBRK:
1050 		args->cmd = TIOCCBRK;
1051 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1052 		break;
1053 
1054 	case LINUX_TCGETS2:
1055 		error = fo_ioctl(fp, TIOCGETA, (caddr_t)&bios, td->td_ucred,
1056 		    td);
1057 		if (error)
1058 			break;
1059 		bsd_to_linux_termios2(&bios, &lios2);
1060 		error = copyout(&lios2, (void *)args->arg, sizeof(lios2));
1061 		break;
1062 
1063 	case LINUX_TCSETS2:
1064 		error = copyin((void *)args->arg, &lios2, sizeof(lios2));
1065 		if (error)
1066 			break;
1067 		linux_to_bsd_termios2(&lios2, &bios);
1068 		error = (fo_ioctl(fp, TIOCSETA, (caddr_t)&bios, td->td_ucred,
1069 		    td));
1070 		break;
1071 
1072 	case LINUX_TCSETSW2:
1073 		error = copyin((void *)args->arg, &lios2, sizeof(lios2));
1074 		if (error)
1075 			break;
1076 		linux_to_bsd_termios2(&lios2, &bios);
1077 		error = (fo_ioctl(fp, TIOCSETAW, (caddr_t)&bios, td->td_ucred,
1078 		    td));
1079 		break;
1080 
1081 	case LINUX_TCSETSF2:
1082 		error = copyin((void *)args->arg, &lios2, sizeof(lios2));
1083 		if (error)
1084 			break;
1085 		linux_to_bsd_termios2(&lios2, &bios);
1086 		error = (fo_ioctl(fp, TIOCSETAF, (caddr_t)&bios, td->td_ucred,
1087 		    td));
1088 		break;
1089 
1090 	case LINUX_TIOCGPTN: {
1091 		int nb;
1092 
1093 		error = fo_ioctl(fp, TIOCGPTN, (caddr_t)&nb, td->td_ucred, td);
1094 		if (!error)
1095 			error = copyout(&nb, (void *)args->arg,
1096 			    sizeof(int));
1097 		break;
1098 	}
1099 	case LINUX_TIOCGPTPEER:
1100 		linux_msg(td, "unsupported ioctl TIOCGPTPEER");
1101 		error = ENOIOCTL;
1102 		break;
1103 	case LINUX_TIOCSPTLCK:
1104 		/*
1105 		 * Our unlockpt() does nothing. Check that fd refers
1106 		 * to a pseudo-terminal master device.
1107 		 */
1108 		args->cmd = TIOCPTMASTER;
1109 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1110 		break;
1111 	default:
1112 		error = ENOIOCTL;
1113 		break;
1114 	}
1115 
1116 	fdrop(fp, td);
1117 	return (error);
1118 }
1119 
1120 /*
1121  * CDROM related ioctls
1122  */
1123 
1124 struct linux_cdrom_msf
1125 {
1126 	u_char	cdmsf_min0;
1127 	u_char	cdmsf_sec0;
1128 	u_char	cdmsf_frame0;
1129 	u_char	cdmsf_min1;
1130 	u_char	cdmsf_sec1;
1131 	u_char	cdmsf_frame1;
1132 };
1133 
1134 struct linux_cdrom_tochdr
1135 {
1136 	u_char	cdth_trk0;
1137 	u_char	cdth_trk1;
1138 };
1139 
1140 union linux_cdrom_addr
1141 {
1142 	struct {
1143 		u_char	minute;
1144 		u_char	second;
1145 		u_char	frame;
1146 	} msf;
1147 	int	lba;
1148 };
1149 
1150 struct linux_cdrom_tocentry
1151 {
1152 	u_char	cdte_track;
1153 	u_char	cdte_adr:4;
1154 	u_char	cdte_ctrl:4;
1155 	u_char	cdte_format;
1156 	union linux_cdrom_addr cdte_addr;
1157 	u_char	cdte_datamode;
1158 };
1159 
1160 struct linux_cdrom_subchnl
1161 {
1162 	u_char	cdsc_format;
1163 	u_char	cdsc_audiostatus;
1164 	u_char	cdsc_adr:4;
1165 	u_char	cdsc_ctrl:4;
1166 	u_char	cdsc_trk;
1167 	u_char	cdsc_ind;
1168 	union linux_cdrom_addr cdsc_absaddr;
1169 	union linux_cdrom_addr cdsc_reladdr;
1170 };
1171 
1172 struct l_cdrom_read_audio {
1173 	union linux_cdrom_addr addr;
1174 	u_char		addr_format;
1175 	l_int		nframes;
1176 	u_char		*buf;
1177 };
1178 
1179 struct l_dvd_layer {
1180 	u_char		book_version:4;
1181 	u_char		book_type:4;
1182 	u_char		min_rate:4;
1183 	u_char		disc_size:4;
1184 	u_char		layer_type:4;
1185 	u_char		track_path:1;
1186 	u_char		nlayers:2;
1187 	u_char		track_density:4;
1188 	u_char		linear_density:4;
1189 	u_char		bca:1;
1190 	uint32_t	start_sector;
1191 	uint32_t	end_sector;
1192 	uint32_t	end_sector_l0;
1193 };
1194 
1195 struct l_dvd_physical {
1196 	u_char		type;
1197 	u_char		layer_num;
1198 	struct l_dvd_layer layer[4];
1199 };
1200 
1201 struct l_dvd_copyright {
1202 	u_char		type;
1203 	u_char		layer_num;
1204 	u_char		cpst;
1205 	u_char		rmi;
1206 };
1207 
1208 struct l_dvd_disckey {
1209 	u_char		type;
1210 	l_uint		agid:2;
1211 	u_char		value[2048];
1212 };
1213 
1214 struct l_dvd_bca {
1215 	u_char		type;
1216 	l_int		len;
1217 	u_char		value[188];
1218 };
1219 
1220 struct l_dvd_manufact {
1221 	u_char		type;
1222 	u_char		layer_num;
1223 	l_int		len;
1224 	u_char		value[2048];
1225 };
1226 
1227 typedef union {
1228 	u_char			type;
1229 	struct l_dvd_physical	physical;
1230 	struct l_dvd_copyright	copyright;
1231 	struct l_dvd_disckey	disckey;
1232 	struct l_dvd_bca	bca;
1233 	struct l_dvd_manufact	manufact;
1234 } l_dvd_struct;
1235 
1236 typedef u_char l_dvd_key[5];
1237 typedef u_char l_dvd_challenge[10];
1238 
1239 struct l_dvd_lu_send_agid {
1240 	u_char		type;
1241 	l_uint		agid:2;
1242 };
1243 
1244 struct l_dvd_host_send_challenge {
1245 	u_char		type;
1246 	l_uint		agid:2;
1247 	l_dvd_challenge	chal;
1248 };
1249 
1250 struct l_dvd_send_key {
1251 	u_char		type;
1252 	l_uint		agid:2;
1253 	l_dvd_key	key;
1254 };
1255 
1256 struct l_dvd_lu_send_challenge {
1257 	u_char		type;
1258 	l_uint		agid:2;
1259 	l_dvd_challenge	chal;
1260 };
1261 
1262 struct l_dvd_lu_send_title_key {
1263 	u_char		type;
1264 	l_uint		agid:2;
1265 	l_dvd_key	title_key;
1266 	l_int		lba;
1267 	l_uint		cpm:1;
1268 	l_uint		cp_sec:1;
1269 	l_uint		cgms:2;
1270 };
1271 
1272 struct l_dvd_lu_send_asf {
1273 	u_char		type;
1274 	l_uint		agid:2;
1275 	l_uint		asf:1;
1276 };
1277 
1278 struct l_dvd_host_send_rpcstate {
1279 	u_char		type;
1280 	u_char		pdrc;
1281 };
1282 
1283 struct l_dvd_lu_send_rpcstate {
1284 	u_char		type:2;
1285 	u_char		vra:3;
1286 	u_char		ucca:3;
1287 	u_char		region_mask;
1288 	u_char		rpc_scheme;
1289 };
1290 
1291 typedef union {
1292 	u_char				type;
1293 	struct l_dvd_lu_send_agid	lsa;
1294 	struct l_dvd_host_send_challenge hsc;
1295 	struct l_dvd_send_key		lsk;
1296 	struct l_dvd_lu_send_challenge	lsc;
1297 	struct l_dvd_send_key		hsk;
1298 	struct l_dvd_lu_send_title_key	lstk;
1299 	struct l_dvd_lu_send_asf	lsasf;
1300 	struct l_dvd_host_send_rpcstate	hrpcs;
1301 	struct l_dvd_lu_send_rpcstate	lrpcs;
1302 } l_dvd_authinfo;
1303 
1304 static void
1305 bsd_to_linux_msf_lba(u_char af, union msf_lba *bp, union linux_cdrom_addr *lp)
1306 {
1307 	if (af == CD_LBA_FORMAT)
1308 		lp->lba = bp->lba;
1309 	else {
1310 		lp->msf.minute = bp->msf.minute;
1311 		lp->msf.second = bp->msf.second;
1312 		lp->msf.frame = bp->msf.frame;
1313 	}
1314 }
1315 
1316 static void
1317 set_linux_cdrom_addr(union linux_cdrom_addr *addr, int format, int lba)
1318 {
1319 	if (format == LINUX_CDROM_MSF) {
1320 		addr->msf.frame = lba % 75;
1321 		lba /= 75;
1322 		lba += 2;
1323 		addr->msf.second = lba % 60;
1324 		addr->msf.minute = lba / 60;
1325 	} else
1326 		addr->lba = lba;
1327 }
1328 
1329 static int
1330 linux_to_bsd_dvd_struct(l_dvd_struct *lp, struct dvd_struct *bp)
1331 {
1332 	bp->format = lp->type;
1333 	switch (bp->format) {
1334 	case DVD_STRUCT_PHYSICAL:
1335 		if (bp->layer_num >= 4)
1336 			return (EINVAL);
1337 		bp->layer_num = lp->physical.layer_num;
1338 		break;
1339 	case DVD_STRUCT_COPYRIGHT:
1340 		bp->layer_num = lp->copyright.layer_num;
1341 		break;
1342 	case DVD_STRUCT_DISCKEY:
1343 		bp->agid = lp->disckey.agid;
1344 		break;
1345 	case DVD_STRUCT_BCA:
1346 	case DVD_STRUCT_MANUFACT:
1347 		break;
1348 	default:
1349 		return (EINVAL);
1350 	}
1351 	return (0);
1352 }
1353 
1354 static int
1355 bsd_to_linux_dvd_struct(struct dvd_struct *bp, l_dvd_struct *lp)
1356 {
1357 	switch (bp->format) {
1358 	case DVD_STRUCT_PHYSICAL: {
1359 		struct dvd_layer *blp = (struct dvd_layer *)bp->data;
1360 		struct l_dvd_layer *llp = &lp->physical.layer[bp->layer_num];
1361 		memset(llp, 0, sizeof(*llp));
1362 		llp->book_version = blp->book_version;
1363 		llp->book_type = blp->book_type;
1364 		llp->min_rate = blp->max_rate;
1365 		llp->disc_size = blp->disc_size;
1366 		llp->layer_type = blp->layer_type;
1367 		llp->track_path = blp->track_path;
1368 		llp->nlayers = blp->nlayers;
1369 		llp->track_density = blp->track_density;
1370 		llp->linear_density = blp->linear_density;
1371 		llp->bca = blp->bca;
1372 		llp->start_sector = blp->start_sector;
1373 		llp->end_sector = blp->end_sector;
1374 		llp->end_sector_l0 = blp->end_sector_l0;
1375 		break;
1376 	}
1377 	case DVD_STRUCT_COPYRIGHT:
1378 		lp->copyright.cpst = bp->cpst;
1379 		lp->copyright.rmi = bp->rmi;
1380 		break;
1381 	case DVD_STRUCT_DISCKEY:
1382 		memcpy(lp->disckey.value, bp->data, sizeof(lp->disckey.value));
1383 		break;
1384 	case DVD_STRUCT_BCA:
1385 		lp->bca.len = bp->length;
1386 		memcpy(lp->bca.value, bp->data, sizeof(lp->bca.value));
1387 		break;
1388 	case DVD_STRUCT_MANUFACT:
1389 		lp->manufact.len = bp->length;
1390 		memcpy(lp->manufact.value, bp->data,
1391 		    sizeof(lp->manufact.value));
1392 		/* lp->manufact.layer_num is unused in Linux (redhat 7.0). */
1393 		break;
1394 	default:
1395 		return (EINVAL);
1396 	}
1397 	return (0);
1398 }
1399 
1400 static int
1401 linux_to_bsd_dvd_authinfo(l_dvd_authinfo *lp, int *bcode,
1402     struct dvd_authinfo *bp)
1403 {
1404 	switch (lp->type) {
1405 	case LINUX_DVD_LU_SEND_AGID:
1406 		*bcode = DVDIOCREPORTKEY;
1407 		bp->format = DVD_REPORT_AGID;
1408 		bp->agid = lp->lsa.agid;
1409 		break;
1410 	case LINUX_DVD_HOST_SEND_CHALLENGE:
1411 		*bcode = DVDIOCSENDKEY;
1412 		bp->format = DVD_SEND_CHALLENGE;
1413 		bp->agid = lp->hsc.agid;
1414 		memcpy(bp->keychal, lp->hsc.chal, 10);
1415 		break;
1416 	case LINUX_DVD_LU_SEND_KEY1:
1417 		*bcode = DVDIOCREPORTKEY;
1418 		bp->format = DVD_REPORT_KEY1;
1419 		bp->agid = lp->lsk.agid;
1420 		break;
1421 	case LINUX_DVD_LU_SEND_CHALLENGE:
1422 		*bcode = DVDIOCREPORTKEY;
1423 		bp->format = DVD_REPORT_CHALLENGE;
1424 		bp->agid = lp->lsc.agid;
1425 		break;
1426 	case LINUX_DVD_HOST_SEND_KEY2:
1427 		*bcode = DVDIOCSENDKEY;
1428 		bp->format = DVD_SEND_KEY2;
1429 		bp->agid = lp->hsk.agid;
1430 		memcpy(bp->keychal, lp->hsk.key, 5);
1431 		break;
1432 	case LINUX_DVD_LU_SEND_TITLE_KEY:
1433 		*bcode = DVDIOCREPORTKEY;
1434 		bp->format = DVD_REPORT_TITLE_KEY;
1435 		bp->agid = lp->lstk.agid;
1436 		bp->lba = lp->lstk.lba;
1437 		break;
1438 	case LINUX_DVD_LU_SEND_ASF:
1439 		*bcode = DVDIOCREPORTKEY;
1440 		bp->format = DVD_REPORT_ASF;
1441 		bp->agid = lp->lsasf.agid;
1442 		break;
1443 	case LINUX_DVD_INVALIDATE_AGID:
1444 		*bcode = DVDIOCREPORTKEY;
1445 		bp->format = DVD_INVALIDATE_AGID;
1446 		bp->agid = lp->lsa.agid;
1447 		break;
1448 	case LINUX_DVD_LU_SEND_RPC_STATE:
1449 		*bcode = DVDIOCREPORTKEY;
1450 		bp->format = DVD_REPORT_RPC;
1451 		break;
1452 	case LINUX_DVD_HOST_SEND_RPC_STATE:
1453 		*bcode = DVDIOCSENDKEY;
1454 		bp->format = DVD_SEND_RPC;
1455 		bp->region = lp->hrpcs.pdrc;
1456 		break;
1457 	default:
1458 		return (EINVAL);
1459 	}
1460 	return (0);
1461 }
1462 
1463 static int
1464 bsd_to_linux_dvd_authinfo(struct dvd_authinfo *bp, l_dvd_authinfo *lp)
1465 {
1466 	switch (lp->type) {
1467 	case LINUX_DVD_LU_SEND_AGID:
1468 		lp->lsa.agid = bp->agid;
1469 		break;
1470 	case LINUX_DVD_HOST_SEND_CHALLENGE:
1471 		lp->type = LINUX_DVD_LU_SEND_KEY1;
1472 		break;
1473 	case LINUX_DVD_LU_SEND_KEY1:
1474 		memcpy(lp->lsk.key, bp->keychal, sizeof(lp->lsk.key));
1475 		break;
1476 	case LINUX_DVD_LU_SEND_CHALLENGE:
1477 		memcpy(lp->lsc.chal, bp->keychal, sizeof(lp->lsc.chal));
1478 		break;
1479 	case LINUX_DVD_HOST_SEND_KEY2:
1480 		lp->type = LINUX_DVD_AUTH_ESTABLISHED;
1481 		break;
1482 	case LINUX_DVD_LU_SEND_TITLE_KEY:
1483 		memcpy(lp->lstk.title_key, bp->keychal,
1484 		    sizeof(lp->lstk.title_key));
1485 		lp->lstk.cpm = bp->cpm;
1486 		lp->lstk.cp_sec = bp->cp_sec;
1487 		lp->lstk.cgms = bp->cgms;
1488 		break;
1489 	case LINUX_DVD_LU_SEND_ASF:
1490 		lp->lsasf.asf = bp->asf;
1491 		break;
1492 	case LINUX_DVD_INVALIDATE_AGID:
1493 		break;
1494 	case LINUX_DVD_LU_SEND_RPC_STATE:
1495 		lp->lrpcs.type = bp->reg_type;
1496 		lp->lrpcs.vra = bp->vend_rsts;
1497 		lp->lrpcs.ucca = bp->user_rsts;
1498 		lp->lrpcs.region_mask = bp->region;
1499 		lp->lrpcs.rpc_scheme = bp->rpc_scheme;
1500 		break;
1501 	case LINUX_DVD_HOST_SEND_RPC_STATE:
1502 		break;
1503 	default:
1504 		return (EINVAL);
1505 	}
1506 	return (0);
1507 }
1508 
1509 static int
1510 linux_ioctl_cdrom(struct thread *td, struct linux_ioctl_args *args)
1511 {
1512 	struct file *fp;
1513 	int error;
1514 
1515 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
1516 	if (error != 0)
1517 		return (error);
1518 	switch (args->cmd & 0xffff) {
1519 	case LINUX_CDROMPAUSE:
1520 		args->cmd = CDIOCPAUSE;
1521 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1522 		break;
1523 
1524 	case LINUX_CDROMRESUME:
1525 		args->cmd = CDIOCRESUME;
1526 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1527 		break;
1528 
1529 	case LINUX_CDROMPLAYMSF:
1530 		args->cmd = CDIOCPLAYMSF;
1531 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1532 		break;
1533 
1534 	case LINUX_CDROMPLAYTRKIND:
1535 		args->cmd = CDIOCPLAYTRACKS;
1536 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1537 		break;
1538 
1539 	case LINUX_CDROMREADTOCHDR: {
1540 		struct ioc_toc_header th;
1541 		struct linux_cdrom_tochdr lth;
1542 		error = fo_ioctl(fp, CDIOREADTOCHEADER, (caddr_t)&th,
1543 		    td->td_ucred, td);
1544 		if (!error) {
1545 			lth.cdth_trk0 = th.starting_track;
1546 			lth.cdth_trk1 = th.ending_track;
1547 			error = copyout(&lth, (void *)args->arg, sizeof(lth));
1548 		}
1549 		break;
1550 	}
1551 
1552 	case LINUX_CDROMREADTOCENTRY: {
1553 		struct linux_cdrom_tocentry lte;
1554 		struct ioc_read_toc_single_entry irtse;
1555 
1556 		error = copyin((void *)args->arg, &lte, sizeof(lte));
1557 		if (error)
1558 			break;
1559 		irtse.address_format = lte.cdte_format;
1560 		irtse.track = lte.cdte_track;
1561 		error = fo_ioctl(fp, CDIOREADTOCENTRY, (caddr_t)&irtse,
1562 		    td->td_ucred, td);
1563 		if (!error) {
1564 			lte.cdte_ctrl = irtse.entry.control;
1565 			lte.cdte_adr = irtse.entry.addr_type;
1566 			bsd_to_linux_msf_lba(irtse.address_format,
1567 			    &irtse.entry.addr, &lte.cdte_addr);
1568 			error = copyout(&lte, (void *)args->arg, sizeof(lte));
1569 		}
1570 		break;
1571 	}
1572 
1573 	case LINUX_CDROMSTOP:
1574 		args->cmd = CDIOCSTOP;
1575 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1576 		break;
1577 
1578 	case LINUX_CDROMSTART:
1579 		args->cmd = CDIOCSTART;
1580 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1581 		break;
1582 
1583 	case LINUX_CDROMEJECT:
1584 		args->cmd = CDIOCEJECT;
1585 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1586 		break;
1587 
1588 	/* LINUX_CDROMVOLCTRL */
1589 
1590 	case LINUX_CDROMSUBCHNL: {
1591 		struct linux_cdrom_subchnl sc;
1592 		struct ioc_read_subchannel bsdsc;
1593 		struct cd_sub_channel_info bsdinfo;
1594 
1595 		error = copyin((void *)args->arg, &sc, sizeof(sc));
1596 		if (error)
1597 			break;
1598 
1599 		/*
1600 		 * Invoke the native ioctl and bounce the returned data through
1601 		 * the userspace buffer.  This works because the Linux structure
1602 		 * is the same size as our structures for the subchannel header
1603 		 * and position data.
1604 		 */
1605 		bsdsc.address_format = CD_LBA_FORMAT;
1606 		bsdsc.data_format = CD_CURRENT_POSITION;
1607 		bsdsc.track = 0;
1608 		bsdsc.data_len = sizeof(sc);
1609 		bsdsc.data = (void *)args->arg;
1610 		error = fo_ioctl(fp, CDIOCREADSUBCHANNEL, (caddr_t)&bsdsc,
1611 		    td->td_ucred, td);
1612 		if (error)
1613 			break;
1614 		error = copyin((void *)args->arg, &bsdinfo, sizeof(bsdinfo));
1615 		if (error)
1616 			break;
1617 		sc.cdsc_audiostatus = bsdinfo.header.audio_status;
1618 		sc.cdsc_adr = bsdinfo.what.position.addr_type;
1619 		sc.cdsc_ctrl = bsdinfo.what.position.control;
1620 		sc.cdsc_trk = bsdinfo.what.position.track_number;
1621 		sc.cdsc_ind = bsdinfo.what.position.index_number;
1622 		set_linux_cdrom_addr(&sc.cdsc_absaddr, sc.cdsc_format,
1623 		    bsdinfo.what.position.absaddr.lba);
1624 		set_linux_cdrom_addr(&sc.cdsc_reladdr, sc.cdsc_format,
1625 		    bsdinfo.what.position.reladdr.lba);
1626 		error = copyout(&sc, (void *)args->arg, sizeof(sc));
1627 		break;
1628 	}
1629 
1630 	/* LINUX_CDROMREADMODE2 */
1631 	/* LINUX_CDROMREADMODE1 */
1632 	/* LINUX_CDROMREADAUDIO */
1633 	/* LINUX_CDROMEJECT_SW */
1634 	/* LINUX_CDROMMULTISESSION */
1635 	/* LINUX_CDROM_GET_UPC */
1636 
1637 	case LINUX_CDROMRESET:
1638 		args->cmd = CDIOCRESET;
1639 		error = (sys_ioctl(td, (struct ioctl_args *)args));
1640 		break;
1641 
1642 	/* LINUX_CDROMVOLREAD */
1643 	/* LINUX_CDROMREADRAW */
1644 	/* LINUX_CDROMREADCOOKED */
1645 	/* LINUX_CDROMSEEK */
1646 	/* LINUX_CDROMPLAYBLK */
1647 	/* LINUX_CDROMREADALL */
1648 	/* LINUX_CDROMCLOSETRAY */
1649 	/* LINUX_CDROMLOADFROMSLOT */
1650 	/* LINUX_CDROMGETSPINDOWN */
1651 	/* LINUX_CDROMSETSPINDOWN */
1652 	/* LINUX_CDROM_SET_OPTIONS */
1653 	/* LINUX_CDROM_CLEAR_OPTIONS */
1654 	/* LINUX_CDROM_SELECT_SPEED */
1655 	/* LINUX_CDROM_SELECT_DISC */
1656 	/* LINUX_CDROM_MEDIA_CHANGED */
1657 	/* LINUX_CDROM_DRIVE_STATUS */
1658 	/* LINUX_CDROM_DISC_STATUS */
1659 	/* LINUX_CDROM_CHANGER_NSLOTS */
1660 	/* LINUX_CDROM_LOCKDOOR */
1661 	/* LINUX_CDROM_DEBUG */
1662 	/* LINUX_CDROM_GET_CAPABILITY */
1663 	/* LINUX_CDROMAUDIOBUFSIZ */
1664 
1665 	case LINUX_DVD_READ_STRUCT: {
1666 		l_dvd_struct *lds;
1667 		struct dvd_struct *bds;
1668 
1669 		lds = malloc(sizeof(*lds), M_LINUX, M_WAITOK);
1670 		bds = malloc(sizeof(*bds), M_LINUX, M_WAITOK);
1671 		error = copyin((void *)args->arg, lds, sizeof(*lds));
1672 		if (error)
1673 			goto out;
1674 		error = linux_to_bsd_dvd_struct(lds, bds);
1675 		if (error)
1676 			goto out;
1677 		error = fo_ioctl(fp, DVDIOCREADSTRUCTURE, (caddr_t)bds,
1678 		    td->td_ucred, td);
1679 		if (error)
1680 			goto out;
1681 		error = bsd_to_linux_dvd_struct(bds, lds);
1682 		if (error)
1683 			goto out;
1684 		error = copyout(lds, (void *)args->arg, sizeof(*lds));
1685 	out:
1686 		free(bds, M_LINUX);
1687 		free(lds, M_LINUX);
1688 		break;
1689 	}
1690 
1691 	/* LINUX_DVD_WRITE_STRUCT */
1692 
1693 	case LINUX_DVD_AUTH: {
1694 		l_dvd_authinfo lda;
1695 		struct dvd_authinfo bda;
1696 		int bcode;
1697 
1698 		error = copyin((void *)args->arg, &lda, sizeof(lda));
1699 		if (error)
1700 			break;
1701 		error = linux_to_bsd_dvd_authinfo(&lda, &bcode, &bda);
1702 		if (error)
1703 			break;
1704 		error = fo_ioctl(fp, bcode, (caddr_t)&bda, td->td_ucred,
1705 		    td);
1706 		if (error) {
1707 			if (lda.type == LINUX_DVD_HOST_SEND_KEY2) {
1708 				lda.type = LINUX_DVD_AUTH_FAILURE;
1709 				(void)copyout(&lda, (void *)args->arg,
1710 				    sizeof(lda));
1711 			}
1712 			break;
1713 		}
1714 		error = bsd_to_linux_dvd_authinfo(&bda, &lda);
1715 		if (error)
1716 			break;
1717 		error = copyout(&lda, (void *)args->arg, sizeof(lda));
1718 		break;
1719 	}
1720 
1721 	case LINUX_SCSI_GET_BUS_NUMBER:
1722 	{
1723 		struct sg_scsi_id id;
1724 
1725 		error = fo_ioctl(fp, SG_GET_SCSI_ID, (caddr_t)&id,
1726 		    td->td_ucred, td);
1727 		if (error)
1728 			break;
1729 		error = copyout(&id.channel, (void *)args->arg, sizeof(int));
1730 		break;
1731 	}
1732 
1733 	case LINUX_SCSI_GET_IDLUN:
1734 	{
1735 		struct sg_scsi_id id;
1736 		struct scsi_idlun idl;
1737 
1738 		error = fo_ioctl(fp, SG_GET_SCSI_ID, (caddr_t)&id,
1739 		    td->td_ucred, td);
1740 		if (error)
1741 			break;
1742 		idl.dev_id = (id.scsi_id & 0xff) + ((id.lun & 0xff) << 8) +
1743 		    ((id.channel & 0xff) << 16) + ((id.host_no & 0xff) << 24);
1744 		idl.host_unique_id = id.host_no;
1745 		error = copyout(&idl, (void *)args->arg, sizeof(idl));
1746 		break;
1747 	}
1748 
1749 	/* LINUX_CDROM_SEND_PACKET */
1750 	/* LINUX_CDROM_NEXT_WRITABLE */
1751 	/* LINUX_CDROM_LAST_WRITTEN */
1752 
1753 	default:
1754 		error = ENOIOCTL;
1755 		break;
1756 	}
1757 
1758 	fdrop(fp, td);
1759 	return (error);
1760 }
1761 
1762 static int
1763 linux_ioctl_vfat(struct thread *td, struct linux_ioctl_args *args)
1764 {
1765 
1766 	return (ENOTTY);
1767 }
1768 
1769 /*
1770  * Sound related ioctls
1771  */
1772 
1773 struct linux_old_mixer_info {
1774 	char	id[16];
1775 	char	name[32];
1776 };
1777 
1778 static uint32_t dirbits[4] = { IOC_VOID, IOC_IN, IOC_OUT, IOC_INOUT };
1779 
1780 #define	SETDIR(c)	(((c) & ~IOC_DIRMASK) | dirbits[args->cmd >> 30])
1781 
1782 static int
1783 linux_ioctl_sound(struct thread *td, struct linux_ioctl_args *args)
1784 {
1785 
1786 	switch (args->cmd & 0xffff) {
1787 	case LINUX_SOUND_MIXER_WRITE_VOLUME:
1788 		args->cmd = SETDIR(SOUND_MIXER_WRITE_VOLUME);
1789 		return (sys_ioctl(td, (struct ioctl_args *)args));
1790 
1791 	case LINUX_SOUND_MIXER_WRITE_BASS:
1792 		args->cmd = SETDIR(SOUND_MIXER_WRITE_BASS);
1793 		return (sys_ioctl(td, (struct ioctl_args *)args));
1794 
1795 	case LINUX_SOUND_MIXER_WRITE_TREBLE:
1796 		args->cmd = SETDIR(SOUND_MIXER_WRITE_TREBLE);
1797 		return (sys_ioctl(td, (struct ioctl_args *)args));
1798 
1799 	case LINUX_SOUND_MIXER_WRITE_SYNTH:
1800 		args->cmd = SETDIR(SOUND_MIXER_WRITE_SYNTH);
1801 		return (sys_ioctl(td, (struct ioctl_args *)args));
1802 
1803 	case LINUX_SOUND_MIXER_WRITE_PCM:
1804 		args->cmd = SETDIR(SOUND_MIXER_WRITE_PCM);
1805 		return (sys_ioctl(td, (struct ioctl_args *)args));
1806 
1807 	case LINUX_SOUND_MIXER_WRITE_SPEAKER:
1808 		args->cmd = SETDIR(SOUND_MIXER_WRITE_SPEAKER);
1809 		return (sys_ioctl(td, (struct ioctl_args *)args));
1810 
1811 	case LINUX_SOUND_MIXER_WRITE_LINE:
1812 		args->cmd = SETDIR(SOUND_MIXER_WRITE_LINE);
1813 		return (sys_ioctl(td, (struct ioctl_args *)args));
1814 
1815 	case LINUX_SOUND_MIXER_WRITE_MIC:
1816 		args->cmd = SETDIR(SOUND_MIXER_WRITE_MIC);
1817 		return (sys_ioctl(td, (struct ioctl_args *)args));
1818 
1819 	case LINUX_SOUND_MIXER_WRITE_CD:
1820 		args->cmd = SETDIR(SOUND_MIXER_WRITE_CD);
1821 		return (sys_ioctl(td, (struct ioctl_args *)args));
1822 
1823 	case LINUX_SOUND_MIXER_WRITE_IMIX:
1824 		args->cmd = SETDIR(SOUND_MIXER_WRITE_IMIX);
1825 		return (sys_ioctl(td, (struct ioctl_args *)args));
1826 
1827 	case LINUX_SOUND_MIXER_WRITE_ALTPCM:
1828 		args->cmd = SETDIR(SOUND_MIXER_WRITE_ALTPCM);
1829 		return (sys_ioctl(td, (struct ioctl_args *)args));
1830 
1831 	case LINUX_SOUND_MIXER_WRITE_RECLEV:
1832 		args->cmd = SETDIR(SOUND_MIXER_WRITE_RECLEV);
1833 		return (sys_ioctl(td, (struct ioctl_args *)args));
1834 
1835 	case LINUX_SOUND_MIXER_WRITE_IGAIN:
1836 		args->cmd = SETDIR(SOUND_MIXER_WRITE_IGAIN);
1837 		return (sys_ioctl(td, (struct ioctl_args *)args));
1838 
1839 	case LINUX_SOUND_MIXER_WRITE_OGAIN:
1840 		args->cmd = SETDIR(SOUND_MIXER_WRITE_OGAIN);
1841 		return (sys_ioctl(td, (struct ioctl_args *)args));
1842 
1843 	case LINUX_SOUND_MIXER_WRITE_LINE1:
1844 		args->cmd = SETDIR(SOUND_MIXER_WRITE_LINE1);
1845 		return (sys_ioctl(td, (struct ioctl_args *)args));
1846 
1847 	case LINUX_SOUND_MIXER_WRITE_LINE2:
1848 		args->cmd = SETDIR(SOUND_MIXER_WRITE_LINE2);
1849 		return (sys_ioctl(td, (struct ioctl_args *)args));
1850 
1851 	case LINUX_SOUND_MIXER_WRITE_LINE3:
1852 		args->cmd = SETDIR(SOUND_MIXER_WRITE_LINE3);
1853 		return (sys_ioctl(td, (struct ioctl_args *)args));
1854 
1855 	case LINUX_SOUND_MIXER_WRITE_MONITOR:
1856 		args->cmd = SETDIR(SOUND_MIXER_WRITE_MONITOR);
1857 		return (sys_ioctl(td, (struct ioctl_args *)args));
1858 
1859 	case LINUX_SOUND_MIXER_INFO: {
1860 		/* Key on encoded length */
1861 		switch ((args->cmd >> 16) & 0x1fff) {
1862 		case 0x005c: {	/* SOUND_MIXER_INFO */
1863 			args->cmd = SOUND_MIXER_INFO;
1864 			return (sys_ioctl(td, (struct ioctl_args *)args));
1865 		}
1866 		case 0x0030: {	/* SOUND_OLD_MIXER_INFO */
1867 			struct linux_old_mixer_info info;
1868 			bzero(&info, sizeof(info));
1869 			strncpy(info.id, "OSS", sizeof(info.id) - 1);
1870 			strncpy(info.name, "FreeBSD OSS Mixer",
1871 			    sizeof(info.name) - 1);
1872 			return (copyout(&info, (void *)args->arg,
1873 			    sizeof(info)));
1874 		}
1875 		default:
1876 			return (ENOIOCTL);
1877 		}
1878 		break;
1879 	}
1880 
1881 	case LINUX_OSS_GETVERSION: {
1882 		int version = linux_get_oss_version(td);
1883 		return (copyout(&version, (void *)args->arg, sizeof(int)));
1884 	}
1885 
1886 	case LINUX_SOUND_MIXER_READ_STEREODEVS:
1887 		args->cmd = SOUND_MIXER_READ_STEREODEVS;
1888 		return (sys_ioctl(td, (struct ioctl_args *)args));
1889 
1890 	case LINUX_SOUND_MIXER_READ_CAPS:
1891 		args->cmd = SOUND_MIXER_READ_CAPS;
1892 		return (sys_ioctl(td, (struct ioctl_args *)args));
1893 
1894 	case LINUX_SOUND_MIXER_READ_RECMASK:
1895 		args->cmd = SOUND_MIXER_READ_RECMASK;
1896 		return (sys_ioctl(td, (struct ioctl_args *)args));
1897 
1898 	case LINUX_SOUND_MIXER_READ_DEVMASK:
1899 		args->cmd = SOUND_MIXER_READ_DEVMASK;
1900 		return (sys_ioctl(td, (struct ioctl_args *)args));
1901 
1902 	case LINUX_SOUND_MIXER_WRITE_RECSRC:
1903 		args->cmd = SETDIR(SOUND_MIXER_WRITE_RECSRC);
1904 		return (sys_ioctl(td, (struct ioctl_args *)args));
1905 
1906 	case LINUX_SNDCTL_DSP_RESET:
1907 		args->cmd = SNDCTL_DSP_RESET;
1908 		return (sys_ioctl(td, (struct ioctl_args *)args));
1909 
1910 	case LINUX_SNDCTL_DSP_SYNC:
1911 		args->cmd = SNDCTL_DSP_SYNC;
1912 		return (sys_ioctl(td, (struct ioctl_args *)args));
1913 
1914 	case LINUX_SNDCTL_DSP_SPEED:
1915 		args->cmd = SNDCTL_DSP_SPEED;
1916 		return (sys_ioctl(td, (struct ioctl_args *)args));
1917 
1918 	case LINUX_SNDCTL_DSP_STEREO:
1919 		args->cmd = SNDCTL_DSP_STEREO;
1920 		return (sys_ioctl(td, (struct ioctl_args *)args));
1921 
1922 	case LINUX_SNDCTL_DSP_GETBLKSIZE: /* LINUX_SNDCTL_DSP_SETBLKSIZE */
1923 		args->cmd = SNDCTL_DSP_GETBLKSIZE;
1924 		return (sys_ioctl(td, (struct ioctl_args *)args));
1925 
1926 	case LINUX_SNDCTL_DSP_SETFMT:
1927 		args->cmd = SNDCTL_DSP_SETFMT;
1928 		return (sys_ioctl(td, (struct ioctl_args *)args));
1929 
1930 	case LINUX_SOUND_PCM_WRITE_CHANNELS:
1931 		args->cmd = SOUND_PCM_WRITE_CHANNELS;
1932 		return (sys_ioctl(td, (struct ioctl_args *)args));
1933 
1934 	case LINUX_SOUND_PCM_WRITE_FILTER:
1935 		args->cmd = SOUND_PCM_WRITE_FILTER;
1936 		return (sys_ioctl(td, (struct ioctl_args *)args));
1937 
1938 	case LINUX_SNDCTL_DSP_POST:
1939 		args->cmd = SNDCTL_DSP_POST;
1940 		return (sys_ioctl(td, (struct ioctl_args *)args));
1941 
1942 	case LINUX_SNDCTL_DSP_SUBDIVIDE:
1943 		args->cmd = SNDCTL_DSP_SUBDIVIDE;
1944 		return (sys_ioctl(td, (struct ioctl_args *)args));
1945 
1946 	case LINUX_SNDCTL_DSP_SETFRAGMENT:
1947 		args->cmd = SNDCTL_DSP_SETFRAGMENT;
1948 		return (sys_ioctl(td, (struct ioctl_args *)args));
1949 
1950 	case LINUX_SNDCTL_DSP_GETFMTS:
1951 		args->cmd = SNDCTL_DSP_GETFMTS;
1952 		return (sys_ioctl(td, (struct ioctl_args *)args));
1953 
1954 	case LINUX_SNDCTL_DSP_GETOSPACE:
1955 		args->cmd = SNDCTL_DSP_GETOSPACE;
1956 		return (sys_ioctl(td, (struct ioctl_args *)args));
1957 
1958 	case LINUX_SNDCTL_DSP_GETISPACE:
1959 		args->cmd = SNDCTL_DSP_GETISPACE;
1960 		return (sys_ioctl(td, (struct ioctl_args *)args));
1961 
1962 	case LINUX_SNDCTL_DSP_NONBLOCK:
1963 		args->cmd = SNDCTL_DSP_NONBLOCK;
1964 		return (sys_ioctl(td, (struct ioctl_args *)args));
1965 
1966 	case LINUX_SNDCTL_DSP_GETCAPS:
1967 		args->cmd = SNDCTL_DSP_GETCAPS;
1968 		return (sys_ioctl(td, (struct ioctl_args *)args));
1969 
1970 	case LINUX_SNDCTL_DSP_SETTRIGGER: /* LINUX_SNDCTL_GETTRIGGER */
1971 		args->cmd = SNDCTL_DSP_SETTRIGGER;
1972 		return (sys_ioctl(td, (struct ioctl_args *)args));
1973 
1974 	case LINUX_SNDCTL_DSP_GETIPTR:
1975 		args->cmd = SNDCTL_DSP_GETIPTR;
1976 		return (sys_ioctl(td, (struct ioctl_args *)args));
1977 
1978 	case LINUX_SNDCTL_DSP_GETOPTR:
1979 		args->cmd = SNDCTL_DSP_GETOPTR;
1980 		return (sys_ioctl(td, (struct ioctl_args *)args));
1981 
1982 	case LINUX_SNDCTL_DSP_SETDUPLEX:
1983 		args->cmd = SNDCTL_DSP_SETDUPLEX;
1984 		return (sys_ioctl(td, (struct ioctl_args *)args));
1985 
1986 	case LINUX_SNDCTL_DSP_GETODELAY:
1987 		args->cmd = SNDCTL_DSP_GETODELAY;
1988 		return (sys_ioctl(td, (struct ioctl_args *)args));
1989 
1990 	case LINUX_SNDCTL_SEQ_RESET:
1991 		args->cmd = SNDCTL_SEQ_RESET;
1992 		return (sys_ioctl(td, (struct ioctl_args *)args));
1993 
1994 	case LINUX_SNDCTL_SEQ_SYNC:
1995 		args->cmd = SNDCTL_SEQ_SYNC;
1996 		return (sys_ioctl(td, (struct ioctl_args *)args));
1997 
1998 	case LINUX_SNDCTL_SYNTH_INFO:
1999 		args->cmd = SNDCTL_SYNTH_INFO;
2000 		return (sys_ioctl(td, (struct ioctl_args *)args));
2001 
2002 	case LINUX_SNDCTL_SEQ_CTRLRATE:
2003 		args->cmd = SNDCTL_SEQ_CTRLRATE;
2004 		return (sys_ioctl(td, (struct ioctl_args *)args));
2005 
2006 	case LINUX_SNDCTL_SEQ_GETOUTCOUNT:
2007 		args->cmd = SNDCTL_SEQ_GETOUTCOUNT;
2008 		return (sys_ioctl(td, (struct ioctl_args *)args));
2009 
2010 	case LINUX_SNDCTL_SEQ_GETINCOUNT:
2011 		args->cmd = SNDCTL_SEQ_GETINCOUNT;
2012 		return (sys_ioctl(td, (struct ioctl_args *)args));
2013 
2014 	case LINUX_SNDCTL_SEQ_PERCMODE:
2015 		args->cmd = SNDCTL_SEQ_PERCMODE;
2016 		return (sys_ioctl(td, (struct ioctl_args *)args));
2017 
2018 	case LINUX_SNDCTL_FM_LOAD_INSTR:
2019 		args->cmd = SNDCTL_FM_LOAD_INSTR;
2020 		return (sys_ioctl(td, (struct ioctl_args *)args));
2021 
2022 	case LINUX_SNDCTL_SEQ_TESTMIDI:
2023 		args->cmd = SNDCTL_SEQ_TESTMIDI;
2024 		return (sys_ioctl(td, (struct ioctl_args *)args));
2025 
2026 	case LINUX_SNDCTL_SEQ_RESETSAMPLES:
2027 		args->cmd = SNDCTL_SEQ_RESETSAMPLES;
2028 		return (sys_ioctl(td, (struct ioctl_args *)args));
2029 
2030 	case LINUX_SNDCTL_SEQ_NRSYNTHS:
2031 		args->cmd = SNDCTL_SEQ_NRSYNTHS;
2032 		return (sys_ioctl(td, (struct ioctl_args *)args));
2033 
2034 	case LINUX_SNDCTL_SEQ_NRMIDIS:
2035 		args->cmd = SNDCTL_SEQ_NRMIDIS;
2036 		return (sys_ioctl(td, (struct ioctl_args *)args));
2037 
2038 	case LINUX_SNDCTL_MIDI_INFO:
2039 		args->cmd = SNDCTL_MIDI_INFO;
2040 		return (sys_ioctl(td, (struct ioctl_args *)args));
2041 
2042 	case LINUX_SNDCTL_SEQ_TRESHOLD:
2043 		args->cmd = SNDCTL_SEQ_TRESHOLD;
2044 		return (sys_ioctl(td, (struct ioctl_args *)args));
2045 
2046 	case LINUX_SNDCTL_SYNTH_MEMAVL:
2047 		args->cmd = SNDCTL_SYNTH_MEMAVL;
2048 		return (sys_ioctl(td, (struct ioctl_args *)args));
2049 	}
2050 
2051 	return (ENOIOCTL);
2052 }
2053 
2054 /*
2055  * Console related ioctls
2056  */
2057 
2058 static int
2059 linux_ioctl_console(struct thread *td, struct linux_ioctl_args *args)
2060 {
2061 	struct file *fp;
2062 	int error;
2063 
2064 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
2065 	if (error != 0)
2066 		return (error);
2067 	switch (args->cmd & 0xffff) {
2068 	case LINUX_KIOCSOUND:
2069 		args->cmd = KIOCSOUND;
2070 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2071 		break;
2072 
2073 	case LINUX_KDMKTONE:
2074 		args->cmd = KDMKTONE;
2075 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2076 		break;
2077 
2078 	case LINUX_KDGETLED:
2079 		args->cmd = KDGETLED;
2080 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2081 		break;
2082 
2083 	case LINUX_KDSETLED:
2084 		args->cmd = KDSETLED;
2085 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2086 		break;
2087 
2088 	case LINUX_KDSETMODE:
2089 		args->cmd = KDSETMODE;
2090 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2091 		break;
2092 
2093 	case LINUX_KDGETMODE:
2094 		args->cmd = KDGETMODE;
2095 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2096 		break;
2097 
2098 	case LINUX_KDGKBMODE:
2099 		args->cmd = KDGKBMODE;
2100 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2101 		break;
2102 
2103 	case LINUX_KDSKBMODE: {
2104 		int kbdmode;
2105 		switch (args->arg) {
2106 		case LINUX_KBD_RAW:
2107 			kbdmode = K_RAW;
2108 			break;
2109 		case LINUX_KBD_XLATE:
2110 			kbdmode = K_XLATE;
2111 			break;
2112 		case LINUX_KBD_MEDIUMRAW:
2113 			kbdmode = K_RAW;
2114 			break;
2115 		default:
2116 			fdrop(fp, td);
2117 			return (EINVAL);
2118 		}
2119 		error = (fo_ioctl(fp, KDSKBMODE, (caddr_t)&kbdmode,
2120 		    td->td_ucred, td));
2121 		break;
2122 	}
2123 
2124 	case LINUX_VT_OPENQRY:
2125 		args->cmd = VT_OPENQRY;
2126 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2127 		break;
2128 
2129 	case LINUX_VT_GETMODE:
2130 		args->cmd = VT_GETMODE;
2131 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2132 		break;
2133 
2134 	case LINUX_VT_SETMODE: {
2135 		struct vt_mode mode;
2136 		if ((error = copyin((void *)args->arg, &mode, sizeof(mode))))
2137 			break;
2138 		if (LINUX_SIG_VALID(mode.relsig))
2139 			mode.relsig = linux_to_bsd_signal(mode.relsig);
2140 		else
2141 			mode.relsig = 0;
2142 		if (LINUX_SIG_VALID(mode.acqsig))
2143 			mode.acqsig = linux_to_bsd_signal(mode.acqsig);
2144 		else
2145 			mode.acqsig = 0;
2146 		/* XXX. Linux ignores frsig and set it to 0. */
2147 		mode.frsig = 0;
2148 		if ((error = copyout(&mode, (void *)args->arg, sizeof(mode))))
2149 			break;
2150 		args->cmd = VT_SETMODE;
2151 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2152 		break;
2153 	}
2154 
2155 	case LINUX_VT_GETSTATE:
2156 		args->cmd = VT_GETACTIVE;
2157 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2158 		break;
2159 
2160 	case LINUX_VT_RELDISP:
2161 		args->cmd = VT_RELDISP;
2162 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2163 		break;
2164 
2165 	case LINUX_VT_ACTIVATE:
2166 		args->cmd = VT_ACTIVATE;
2167 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2168 		break;
2169 
2170 	case LINUX_VT_WAITACTIVE:
2171 		args->cmd = VT_WAITACTIVE;
2172 		error = (sys_ioctl(td, (struct ioctl_args *)args));
2173 		break;
2174 
2175 	default:
2176 		error = ENOIOCTL;
2177 		break;
2178 	}
2179 
2180 	fdrop(fp, td);
2181 	return (error);
2182 }
2183 
2184 /*
2185  * Implement the SIOCGIFNAME ioctl
2186  */
2187 
2188 static int
2189 linux_ioctl_ifname(struct thread *td, struct l_ifreq *uifr)
2190 {
2191 	struct l_ifreq ifr;
2192 	int error, ret;
2193 
2194 	error = copyin(uifr, &ifr, sizeof(ifr));
2195 	if (error != 0)
2196 		return (error);
2197 	ret = ifname_bsd_to_linux_idx(ifr.ifr_index, ifr.ifr_name,
2198 	    LINUX_IFNAMSIZ);
2199 	if (ret > 0)
2200 		return (copyout(&ifr, uifr, sizeof(ifr)));
2201 	else
2202 		return (ENODEV);
2203 }
2204 
2205 /*
2206  * Implement the SIOCGIFCONF ioctl
2207  */
2208 static u_int
2209 linux_ifconf_ifaddr_cb(void *arg, struct ifaddr *ifa, u_int count)
2210 {
2211 #ifdef COMPAT_LINUX32
2212 	struct l_ifconf *ifc;
2213 #else
2214 	struct ifconf *ifc;
2215 #endif
2216 
2217 	ifc = arg;
2218 	ifc->ifc_len += sizeof(struct l_ifreq);
2219 	return (1);
2220 }
2221 
2222 static int
2223 linux_ifconf_ifnet_cb(if_t ifp, void *arg)
2224 {
2225 
2226 	if_foreach_addr_type(ifp, AF_INET, linux_ifconf_ifaddr_cb, arg);
2227 	return (0);
2228 }
2229 
2230 struct linux_ifconfig_ifaddr_cb2_s {
2231 	struct l_ifreq ifr;
2232 	struct sbuf *sb;
2233 	size_t max_len;
2234 	size_t valid_len;
2235 };
2236 
2237 static u_int
2238 linux_ifconf_ifaddr_cb2(void *arg, struct ifaddr *ifa, u_int len)
2239 {
2240 	struct linux_ifconfig_ifaddr_cb2_s *cbs = arg;
2241 	struct sockaddr *sa = ifa->ifa_addr;
2242 
2243 	cbs->ifr.ifr_addr.sa_family = LINUX_AF_INET;
2244 	memcpy(cbs->ifr.ifr_addr.sa_data, sa->sa_data,
2245 	    sizeof(cbs->ifr.ifr_addr.sa_data));
2246 	sbuf_bcat(cbs->sb, &cbs->ifr, sizeof(cbs->ifr));
2247 	cbs->max_len += sizeof(cbs->ifr);
2248 
2249 	if (sbuf_error(cbs->sb) == 0)
2250 		cbs->valid_len = sbuf_len(cbs->sb);
2251 	return (1);
2252 }
2253 
2254 static int
2255 linux_ifconf_ifnet_cb2(if_t ifp, void *arg)
2256 {
2257 	struct linux_ifconfig_ifaddr_cb2_s *cbs = arg;
2258 
2259 	bzero(&cbs->ifr, sizeof(cbs->ifr));
2260 	ifname_bsd_to_linux_ifp(ifp, cbs->ifr.ifr_name,
2261 	    sizeof(cbs->ifr.ifr_name));
2262 
2263 	/* Walk the address list */
2264 	if_foreach_addr_type(ifp, AF_INET, linux_ifconf_ifaddr_cb2, cbs);
2265 	return (0);
2266 }
2267 
2268 static int
2269 linux_ifconf(struct thread *td, struct ifconf *uifc)
2270 {
2271 	struct linux_ifconfig_ifaddr_cb2_s cbs;
2272 	struct epoch_tracker et;
2273 #ifdef COMPAT_LINUX32
2274 	struct l_ifconf ifc;
2275 #else
2276 	struct ifconf ifc;
2277 #endif
2278 	struct sbuf *sb;
2279 	int error, full;
2280 
2281 	error = copyin(uifc, &ifc, sizeof(ifc));
2282 	if (error != 0)
2283 		return (error);
2284 
2285 	/* handle the 'request buffer size' case */
2286 	if (PTRIN(ifc.ifc_buf) == NULL) {
2287 		ifc.ifc_len = 0;
2288 		NET_EPOCH_ENTER(et);
2289 		if_foreach(linux_ifconf_ifnet_cb, &ifc);
2290 		NET_EPOCH_EXIT(et);
2291 		return (copyout(&ifc, uifc, sizeof(ifc)));
2292 	}
2293 	if (ifc.ifc_len <= 0)
2294 		return (EINVAL);
2295 
2296 	full = 0;
2297 	cbs.max_len = maxphys - 1;
2298 
2299 again:
2300 	if (ifc.ifc_len <= cbs.max_len) {
2301 		cbs.max_len = ifc.ifc_len;
2302 		full = 1;
2303 	}
2304 	cbs.sb = sb = sbuf_new(NULL, NULL, cbs.max_len + 1, SBUF_FIXEDLEN);
2305 	cbs.max_len = 0;
2306 	cbs.valid_len = 0;
2307 
2308 	/* Return all AF_INET addresses of all interfaces */
2309 	NET_EPOCH_ENTER(et);
2310 	if_foreach(linux_ifconf_ifnet_cb2, &cbs);
2311 	NET_EPOCH_EXIT(et);
2312 
2313 	if (cbs.valid_len != cbs.max_len && !full) {
2314 		sbuf_delete(sb);
2315 		goto again;
2316 	}
2317 
2318 	ifc.ifc_len = cbs.valid_len;
2319 	sbuf_finish(sb);
2320 	error = copyout(sbuf_data(sb), PTRIN(ifc.ifc_buf), ifc.ifc_len);
2321 	if (error == 0)
2322 		error = copyout(&ifc, uifc, sizeof(ifc));
2323 	sbuf_delete(sb);
2324 
2325 	return (error);
2326 }
2327 
2328 static int
2329 linux_ioctl_socket_ifreq(struct thread *td, int fd, u_int cmd,
2330     struct l_ifreq *uifr)
2331 {
2332 	struct l_ifreq lifr;
2333 	struct ifreq bifr;
2334 	size_t ifrusiz;
2335 	int error, temp_flags;
2336 
2337 	switch (cmd) {
2338 	case LINUX_SIOCGIFINDEX:
2339 		cmd = SIOCGIFINDEX;
2340 		break;
2341 	case LINUX_SIOCGIFFLAGS:
2342 		cmd = SIOCGIFFLAGS;
2343 		break;
2344 	case LINUX_SIOCGIFADDR:
2345 		cmd = SIOCGIFADDR;
2346 		break;
2347 	case LINUX_SIOCSIFADDR:
2348 		cmd = SIOCSIFADDR;
2349 		break;
2350 	case LINUX_SIOCGIFDSTADDR:
2351 		cmd = SIOCGIFDSTADDR;
2352 		break;
2353 	case LINUX_SIOCGIFBRDADDR:
2354 		cmd = SIOCGIFBRDADDR;
2355 		break;
2356 	case LINUX_SIOCGIFNETMASK:
2357 		cmd = SIOCGIFNETMASK;
2358 		break;
2359 	case LINUX_SIOCSIFNETMASK:
2360 		cmd = SIOCSIFNETMASK;
2361 		break;
2362 	case LINUX_SIOCGIFMTU:
2363 		cmd = SIOCGIFMTU;
2364 		break;
2365 	case LINUX_SIOCSIFMTU:
2366 		cmd = SIOCSIFMTU;
2367 		break;
2368 	case LINUX_SIOCGIFHWADDR:
2369 		cmd = SIOCGHWADDR;
2370 		break;
2371 	case LINUX_SIOCGIFMETRIC:
2372 		cmd = SIOCGIFMETRIC;
2373 		break;
2374 	case LINUX_SIOCSIFMETRIC:
2375 		cmd = SIOCSIFMETRIC;
2376 		break;
2377 	/*
2378 	 * XXX This is slightly bogus, but these ioctls are currently
2379 	 * XXX only used by the aironet (if_an) network driver.
2380 	 */
2381 	case LINUX_SIOCDEVPRIVATE:
2382 		cmd = SIOCGPRIVATE_0;
2383 		break;
2384 	case LINUX_SIOCDEVPRIVATE+1:
2385 		cmd = SIOCGPRIVATE_1;
2386 		break;
2387 	default:
2388 		LINUX_RATELIMIT_MSG_OPT2(
2389 		    "ioctl_socket_ifreq fd=%d, cmd=0x%x is not implemented",
2390 		    fd, cmd);
2391 		return (ENOIOCTL);
2392 	}
2393 
2394 	error = copyin(uifr, &lifr, sizeof(lifr));
2395 	if (error != 0)
2396 		return (error);
2397 	bzero(&bifr, sizeof(bifr));
2398 
2399 	/*
2400 	 * The size of Linux enum ifr_ifru is bigger than
2401 	 * the FreeBSD size due to the struct ifmap.
2402 	 */
2403 	ifrusiz = (sizeof(lifr) > sizeof(bifr) ? sizeof(bifr) :
2404 	    sizeof(lifr)) - offsetof(struct l_ifreq, ifr_ifru);
2405 	bcopy(&lifr.ifr_ifru, &bifr.ifr_ifru, ifrusiz);
2406 
2407 	error = ifname_linux_to_bsd(td, lifr.ifr_name, bifr.ifr_name);
2408 	if (error != 0)
2409 		return (error);
2410 
2411 	/* Translate in values. */
2412 	switch (cmd) {
2413 	case SIOCGIFINDEX:
2414 		bifr.ifr_index = lifr.ifr_index;
2415 		break;
2416 	case SIOCSIFADDR:
2417 	case SIOCSIFNETMASK:
2418 		bifr.ifr_addr.sa_len = sizeof(struct sockaddr);
2419 		bifr.ifr_addr.sa_family =
2420 		    linux_to_bsd_domain(lifr.ifr_addr.sa_family);
2421 		break;
2422 	default:
2423 		break;
2424 	}
2425 
2426 	error = kern_ioctl(td, fd, cmd, (caddr_t)&bifr);
2427 	if (error != 0)
2428 		return (error);
2429 	bzero(&lifr.ifr_ifru, sizeof(lifr.ifr_ifru));
2430 
2431 	/* Translate out values. */
2432  	switch (cmd) {
2433 	case SIOCGIFINDEX:
2434 		lifr.ifr_index = bifr.ifr_index;
2435 		break;
2436 	case SIOCGIFFLAGS:
2437 		temp_flags = bifr.ifr_flags | (bifr.ifr_flagshigh << 16);
2438 		lifr.ifr_flags = bsd_to_linux_ifflags(temp_flags);
2439 		break;
2440 	case SIOCGIFADDR:
2441 	case SIOCSIFADDR:
2442 	case SIOCGIFDSTADDR:
2443 	case SIOCGIFBRDADDR:
2444 	case SIOCGIFNETMASK:
2445 		bcopy(&bifr.ifr_addr, &lifr.ifr_addr, sizeof(bifr.ifr_addr));
2446 		lifr.ifr_addr.sa_family =
2447 		    bsd_to_linux_domain(bifr.ifr_addr.sa_family);
2448 		break;
2449 	case SIOCGHWADDR:
2450 		bcopy(&bifr.ifr_addr, &lifr.ifr_hwaddr, sizeof(bifr.ifr_addr));
2451 		lifr.ifr_hwaddr.sa_family = LINUX_ARPHRD_ETHER;
2452 		break;
2453 	default:
2454 		bcopy(&bifr.ifr_ifru, &lifr.ifr_ifru, ifrusiz);
2455 		break;
2456 	}
2457 
2458 	return (copyout(&lifr, uifr, sizeof(lifr)));
2459 }
2460 
2461 /*
2462  * Socket related ioctls
2463  */
2464 
2465 static int
2466 linux_ioctl_socket(struct thread *td, struct linux_ioctl_args *args)
2467 {
2468 	struct file *fp;
2469 	int error, type;
2470 
2471 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
2472 	if (error != 0)
2473 		return (error);
2474 	type = fp->f_type;
2475 	fdrop(fp, td);
2476 
2477 	CURVNET_SET(TD_TO_VNET(td));
2478 
2479 	if (type != DTYPE_SOCKET) {
2480 		/* not a socket - probably a tap / vmnet device */
2481 		switch (args->cmd) {
2482 		case LINUX_SIOCGIFADDR:
2483 		case LINUX_SIOCSIFADDR:
2484 		case LINUX_SIOCGIFFLAGS:
2485 			error = linux_ioctl_special(td, args);
2486 			break;
2487 		default:
2488 			error = ENOIOCTL;
2489 			break;
2490 		}
2491 		CURVNET_RESTORE();
2492 		return (error);
2493 	}
2494 
2495 	switch (args->cmd) {
2496 	case LINUX_FIOSETOWN:
2497 		args->cmd = FIOSETOWN;
2498 		error = sys_ioctl(td, (struct ioctl_args *)args);
2499 		break;
2500 
2501 	case LINUX_SIOCSPGRP:
2502 		args->cmd = SIOCSPGRP;
2503 		error = sys_ioctl(td, (struct ioctl_args *)args);
2504 		break;
2505 
2506 	case LINUX_FIOGETOWN:
2507 		args->cmd = FIOGETOWN;
2508 		error = sys_ioctl(td, (struct ioctl_args *)args);
2509 		break;
2510 
2511 	case LINUX_SIOCGPGRP:
2512 		args->cmd = SIOCGPGRP;
2513 		error = sys_ioctl(td, (struct ioctl_args *)args);
2514 		break;
2515 
2516 	case LINUX_SIOCATMARK:
2517 		args->cmd = SIOCATMARK;
2518 		error = sys_ioctl(td, (struct ioctl_args *)args);
2519 		break;
2520 
2521 	/* LINUX_SIOCGSTAMP */
2522 
2523 	case LINUX_SIOCGIFNAME:
2524 		error = linux_ioctl_ifname(td, (struct l_ifreq *)args->arg);
2525 		break;
2526 
2527 	case LINUX_SIOCGIFCONF:
2528 		error = linux_ifconf(td, (struct ifconf *)args->arg);
2529 		break;
2530 
2531 	case LINUX_SIOCADDMULTI:
2532 		args->cmd = SIOCADDMULTI;
2533 		error = sys_ioctl(td, (struct ioctl_args *)args);
2534 		break;
2535 
2536 	case LINUX_SIOCDELMULTI:
2537 		args->cmd = SIOCDELMULTI;
2538 		error = sys_ioctl(td, (struct ioctl_args *)args);
2539 		break;
2540 
2541 	case LINUX_SIOCGIFCOUNT:
2542 		error = 0;
2543 		break;
2544 
2545 	default:
2546 		error = linux_ioctl_socket_ifreq(td, args->fd, args->cmd,
2547 		    PTRIN(args->arg));
2548 		break;
2549 	}
2550 
2551 	CURVNET_RESTORE();
2552 	return (error);
2553 }
2554 
2555 /*
2556  * Device private ioctl handler
2557  */
2558 static int
2559 linux_ioctl_private(struct thread *td, struct linux_ioctl_args *args)
2560 {
2561 	struct file *fp;
2562 	int error, type;
2563 
2564 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
2565 	if (error != 0)
2566 		return (error);
2567 	type = fp->f_type;
2568 	fdrop(fp, td);
2569 	if (type == DTYPE_SOCKET)
2570 		return (linux_ioctl_socket(td, args));
2571 	return (ENOIOCTL);
2572 }
2573 
2574 /*
2575  * DRM ioctl handler (sys/dev/drm)
2576  */
2577 static int
2578 linux_ioctl_drm(struct thread *td, struct linux_ioctl_args *args)
2579 {
2580 	args->cmd = SETDIR(args->cmd);
2581 	return (sys_ioctl(td, (struct ioctl_args *)args));
2582 }
2583 
2584 /*
2585  * dma-buf ioctl handler (drm-kmod)
2586  */
2587 static int
2588 linux_ioctl_dmabuf(struct thread *td, struct linux_ioctl_args *args)
2589 {
2590 
2591 	switch (args->cmd & 0xffff) {
2592 	case LINUX_DMA_BUF_IOCTL_SYNC:
2593 	case LINUX_DMA_BUF_IOCTL_EXPORT_SYNC_FILE:
2594 	case LINUX_DMA_BUF_IOCTL_IMPORT_SYNC_FILE:
2595 		args->cmd = SETDIR(args->cmd);
2596 		return (sys_ioctl(td, (struct ioctl_args *)args));
2597 	}
2598 
2599 	return (ENOIOCTL);
2600 }
2601 
2602 /*
2603  * sync_file ioctl handler (drm-kmod)
2604  */
2605 static int
2606 linux_ioctl_syncfile(struct thread *td, struct linux_ioctl_args *args)
2607 {
2608 
2609 	switch (args->cmd & 0xffff) {
2610 	case LINUX_SYNC_IOC_MERGE:
2611 	case LINUX_SYNC_IOC_FILE_INFO:
2612 	case LINUX_SYNC_IOC_SET_DEADLINE:
2613 		args->cmd = SETDIR(args->cmd);
2614 		return (sys_ioctl(td, (struct ioctl_args *)args));
2615 	}
2616 
2617 	return (ENOIOCTL);
2618 }
2619 
2620 #ifdef COMPAT_LINUX32
2621 static int
2622 linux_ioctl_sg_io(struct thread *td, struct linux_ioctl_args *args)
2623 {
2624 	struct sg_io_hdr io;
2625 	struct sg_io_hdr32 io32;
2626 	struct file *fp;
2627 	int error;
2628 
2629 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
2630 	if (error != 0) {
2631 		printf("sg_linux_ioctl: fget returned %d\n", error);
2632 		return (error);
2633 	}
2634 
2635 	if ((error = copyin((void *)args->arg, &io32, sizeof(io32))) != 0)
2636 		goto out;
2637 
2638 	CP(io32, io, interface_id);
2639 	CP(io32, io, dxfer_direction);
2640 	CP(io32, io, cmd_len);
2641 	CP(io32, io, mx_sb_len);
2642 	CP(io32, io, iovec_count);
2643 	CP(io32, io, dxfer_len);
2644 	PTRIN_CP(io32, io, dxferp);
2645 	PTRIN_CP(io32, io, cmdp);
2646 	PTRIN_CP(io32, io, sbp);
2647 	CP(io32, io, timeout);
2648 	CP(io32, io, flags);
2649 	CP(io32, io, pack_id);
2650 	PTRIN_CP(io32, io, usr_ptr);
2651 	CP(io32, io, status);
2652 	CP(io32, io, masked_status);
2653 	CP(io32, io, msg_status);
2654 	CP(io32, io, sb_len_wr);
2655 	CP(io32, io, host_status);
2656 	CP(io32, io, driver_status);
2657 	CP(io32, io, resid);
2658 	CP(io32, io, duration);
2659 	CP(io32, io, info);
2660 
2661 	if ((error = fo_ioctl(fp, SG_IO, (caddr_t)&io, td->td_ucred, td)) != 0)
2662 		goto out;
2663 
2664 	CP(io, io32, interface_id);
2665 	CP(io, io32, dxfer_direction);
2666 	CP(io, io32, cmd_len);
2667 	CP(io, io32, mx_sb_len);
2668 	CP(io, io32, iovec_count);
2669 	CP(io, io32, dxfer_len);
2670 	PTROUT_CP(io, io32, dxferp);
2671 	PTROUT_CP(io, io32, cmdp);
2672 	PTROUT_CP(io, io32, sbp);
2673 	CP(io, io32, timeout);
2674 	CP(io, io32, flags);
2675 	CP(io, io32, pack_id);
2676 	PTROUT_CP(io, io32, usr_ptr);
2677 	CP(io, io32, status);
2678 	CP(io, io32, masked_status);
2679 	CP(io, io32, msg_status);
2680 	CP(io, io32, sb_len_wr);
2681 	CP(io, io32, host_status);
2682 	CP(io, io32, driver_status);
2683 	CP(io, io32, resid);
2684 	CP(io, io32, duration);
2685 	CP(io, io32, info);
2686 
2687 	error = copyout(&io32, (void *)args->arg, sizeof(io32));
2688 
2689 out:
2690 	fdrop(fp, td);
2691 	return (error);
2692 }
2693 #endif
2694 
2695 static int
2696 linux_ioctl_sg(struct thread *td, struct linux_ioctl_args *args)
2697 {
2698 
2699 	switch (args->cmd) {
2700 	case LINUX_SG_GET_VERSION_NUM:
2701 		args->cmd = SG_GET_VERSION_NUM;
2702 		break;
2703 	case LINUX_SG_SET_TIMEOUT:
2704 		args->cmd = SG_SET_TIMEOUT;
2705 		break;
2706 	case LINUX_SG_GET_TIMEOUT:
2707 		args->cmd = SG_GET_TIMEOUT;
2708 		break;
2709 	case LINUX_SG_IO:
2710 		args->cmd = SG_IO;
2711 #ifdef COMPAT_LINUX32
2712 		return (linux_ioctl_sg_io(td, args));
2713 #endif
2714 		break;
2715 	case LINUX_SG_GET_RESERVED_SIZE:
2716 		args->cmd = SG_GET_RESERVED_SIZE;
2717 		break;
2718 	case LINUX_SG_GET_SCSI_ID:
2719 		args->cmd = SG_GET_SCSI_ID;
2720 		break;
2721 	case LINUX_SG_GET_SG_TABLESIZE:
2722 		args->cmd = SG_GET_SG_TABLESIZE;
2723 		break;
2724 	default:
2725 		return (ENODEV);
2726 	}
2727 	return (sys_ioctl(td, (struct ioctl_args *)args));
2728 }
2729 
2730 /*
2731  * Video4Linux (V4L) ioctl handler
2732  */
2733 static int
2734 linux_to_bsd_v4l_tuner(struct l_video_tuner *lvt, struct video_tuner *vt)
2735 {
2736 	vt->tuner = lvt->tuner;
2737 	strlcpy(vt->name, lvt->name, LINUX_VIDEO_TUNER_NAME_SIZE);
2738 	vt->rangelow = lvt->rangelow;	/* possible long size conversion */
2739 	vt->rangehigh = lvt->rangehigh;	/* possible long size conversion */
2740 	vt->flags = lvt->flags;
2741 	vt->mode = lvt->mode;
2742 	vt->signal = lvt->signal;
2743 	return (0);
2744 }
2745 
2746 static int
2747 bsd_to_linux_v4l_tuner(struct video_tuner *vt, struct l_video_tuner *lvt)
2748 {
2749 	lvt->tuner = vt->tuner;
2750 	strlcpy(lvt->name, vt->name, LINUX_VIDEO_TUNER_NAME_SIZE);
2751 	lvt->rangelow = vt->rangelow;	/* possible long size conversion */
2752 	lvt->rangehigh = vt->rangehigh;	/* possible long size conversion */
2753 	lvt->flags = vt->flags;
2754 	lvt->mode = vt->mode;
2755 	lvt->signal = vt->signal;
2756 	return (0);
2757 }
2758 
2759 #ifdef COMPAT_LINUX_V4L_CLIPLIST
2760 static int
2761 linux_to_bsd_v4l_clip(struct l_video_clip *lvc, struct video_clip *vc)
2762 {
2763 	vc->x = lvc->x;
2764 	vc->y = lvc->y;
2765 	vc->width = lvc->width;
2766 	vc->height = lvc->height;
2767 	vc->next = PTRIN(lvc->next);	/* possible pointer size conversion */
2768 	return (0);
2769 }
2770 #endif
2771 
2772 static int
2773 linux_to_bsd_v4l_window(struct l_video_window *lvw, struct video_window *vw)
2774 {
2775 	vw->x = lvw->x;
2776 	vw->y = lvw->y;
2777 	vw->width = lvw->width;
2778 	vw->height = lvw->height;
2779 	vw->chromakey = lvw->chromakey;
2780 	vw->flags = lvw->flags;
2781 	vw->clips = PTRIN(lvw->clips);	/* possible pointer size conversion */
2782 	vw->clipcount = lvw->clipcount;
2783 	return (0);
2784 }
2785 
2786 static int
2787 bsd_to_linux_v4l_window(struct video_window *vw, struct l_video_window *lvw)
2788 {
2789 	memset(lvw, 0, sizeof(*lvw));
2790 
2791 	lvw->x = vw->x;
2792 	lvw->y = vw->y;
2793 	lvw->width = vw->width;
2794 	lvw->height = vw->height;
2795 	lvw->chromakey = vw->chromakey;
2796 	lvw->flags = vw->flags;
2797 	lvw->clips = PTROUT(vw->clips);	/* possible pointer size conversion */
2798 	lvw->clipcount = vw->clipcount;
2799 	return (0);
2800 }
2801 
2802 static int
2803 linux_to_bsd_v4l_buffer(struct l_video_buffer *lvb, struct video_buffer *vb)
2804 {
2805 	vb->base = PTRIN(lvb->base);	/* possible pointer size conversion */
2806 	vb->height = lvb->height;
2807 	vb->width = lvb->width;
2808 	vb->depth = lvb->depth;
2809 	vb->bytesperline = lvb->bytesperline;
2810 	return (0);
2811 }
2812 
2813 static int
2814 bsd_to_linux_v4l_buffer(struct video_buffer *vb, struct l_video_buffer *lvb)
2815 {
2816 	lvb->base = PTROUT(vb->base);	/* possible pointer size conversion */
2817 	lvb->height = vb->height;
2818 	lvb->width = vb->width;
2819 	lvb->depth = vb->depth;
2820 	lvb->bytesperline = vb->bytesperline;
2821 	return (0);
2822 }
2823 
2824 static int
2825 linux_to_bsd_v4l_code(struct l_video_code *lvc, struct video_code *vc)
2826 {
2827 	strlcpy(vc->loadwhat, lvc->loadwhat, LINUX_VIDEO_CODE_LOADWHAT_SIZE);
2828 	vc->datasize = lvc->datasize;
2829 	vc->data = PTRIN(lvc->data);	/* possible pointer size conversion */
2830 	return (0);
2831 }
2832 
2833 #ifdef COMPAT_LINUX_V4L_CLIPLIST
2834 static int
2835 linux_v4l_clip_copy(void *lvc, struct video_clip **ppvc)
2836 {
2837 	int error;
2838 	struct video_clip vclip;
2839 	struct l_video_clip l_vclip;
2840 
2841 	error = copyin(lvc, &l_vclip, sizeof(l_vclip));
2842 	if (error) return (error);
2843 	linux_to_bsd_v4l_clip(&l_vclip, &vclip);
2844 	/* XXX: If there can be no concurrency: s/M_NOWAIT/M_WAITOK/ */
2845 	if ((*ppvc = malloc(sizeof(**ppvc), M_LINUX, M_NOWAIT)) == NULL)
2846 		return (ENOMEM);    /* XXX: Linux has no ENOMEM here. */
2847 	memcpy(*ppvc, &vclip, sizeof(vclip));
2848 	(*ppvc)->next = NULL;
2849 	return (0);
2850 }
2851 
2852 static int
2853 linux_v4l_cliplist_free(struct video_window *vw)
2854 {
2855 	struct video_clip **ppvc;
2856 	struct video_clip **ppvc_next;
2857 
2858 	for (ppvc = &(vw->clips); *ppvc != NULL; ppvc = ppvc_next) {
2859 		ppvc_next = &((*ppvc)->next);
2860 		free(*ppvc, M_LINUX);
2861 	}
2862 	vw->clips = NULL;
2863 
2864 	return (0);
2865 }
2866 
2867 static int
2868 linux_v4l_cliplist_copy(struct l_video_window *lvw, struct video_window *vw)
2869 {
2870 	int error;
2871 	int clipcount;
2872 	void *plvc;
2873 	struct video_clip **ppvc;
2874 
2875 	/*
2876 	 * XXX: The cliplist is used to pass in a list of clipping
2877 	 *	rectangles or, if clipcount == VIDEO_CLIP_BITMAP, a
2878 	 *	clipping bitmap.  Some Linux apps, however, appear to
2879 	 *	leave cliplist and clips uninitialized.  In any case,
2880 	 *	the cliplist is not used by pwc(4), at the time of
2881 	 *	writing, FreeBSD's only V4L driver.  When a driver
2882 	 *	that uses the cliplist is developed, this code may
2883 	 *	need re-examiniation.
2884 	 */
2885 	error = 0;
2886 	clipcount = vw->clipcount;
2887 	if (clipcount == VIDEO_CLIP_BITMAP) {
2888 		/*
2889 		 * In this case, the pointer (clips) is overloaded
2890 		 * to be a "void *" to a bitmap, therefore there
2891 		 * is no struct video_clip to copy now.
2892 		 */
2893 	} else if (clipcount > 0 && clipcount <= 16384) {
2894 		/*
2895 		 * Clips points to list of clip rectangles, so
2896 		 * copy the list.
2897 		 *
2898 		 * XXX: Upper limit of 16384 was used here to try to
2899 		 *	avoid cases when clipcount and clips pointer
2900 		 *	are uninitialized and therefore have high random
2901 		 *	values, as is the case in the Linux Skype
2902 		 *	application.  The value 16384 was chosen as that
2903 		 *	is what is used in the Linux stradis(4) MPEG
2904 		 *	decoder driver, the only place we found an
2905 		 *	example of cliplist use.
2906 		 */
2907 		plvc = PTRIN(lvw->clips);
2908 		vw->clips = NULL;
2909 		ppvc = &(vw->clips);
2910 		while (clipcount-- > 0) {
2911 			if (plvc == NULL) {
2912 				error = EFAULT;
2913 				break;
2914 			} else {
2915 				error = linux_v4l_clip_copy(plvc, ppvc);
2916 				if (error) {
2917 					linux_v4l_cliplist_free(vw);
2918 					break;
2919 				}
2920 			}
2921 			ppvc = &((*ppvc)->next);
2922 			plvc = PTRIN(((struct l_video_clip *) plvc)->next);
2923 		}
2924 	} else {
2925 		/*
2926 		 * clipcount == 0 or negative (but not VIDEO_CLIP_BITMAP)
2927 		 * Force cliplist to null.
2928 		 */
2929 		vw->clipcount = 0;
2930 		vw->clips = NULL;
2931 	}
2932 	return (error);
2933 }
2934 #endif
2935 
2936 static int
2937 linux_ioctl_v4l(struct thread *td, struct linux_ioctl_args *args)
2938 {
2939 	struct file *fp;
2940 	int error;
2941 	struct video_tuner vtun;
2942 	struct video_window vwin;
2943 	struct video_buffer vbuf;
2944 	struct video_code vcode;
2945 	struct l_video_tuner l_vtun;
2946 	struct l_video_window l_vwin;
2947 	struct l_video_buffer l_vbuf;
2948 	struct l_video_code l_vcode;
2949 
2950 	switch (args->cmd & 0xffff) {
2951 	case LINUX_VIDIOCGCAP:		args->cmd = VIDIOCGCAP; break;
2952 	case LINUX_VIDIOCGCHAN:		args->cmd = VIDIOCGCHAN; break;
2953 	case LINUX_VIDIOCSCHAN:		args->cmd = VIDIOCSCHAN; break;
2954 
2955 	case LINUX_VIDIOCGTUNER:
2956 		error = fget(td, args->fd,
2957 		    &cap_ioctl_rights, &fp);
2958 		if (error != 0)
2959 			return (error);
2960 		error = copyin((void *) args->arg, &l_vtun, sizeof(l_vtun));
2961 		if (error) {
2962 			fdrop(fp, td);
2963 			return (error);
2964 		}
2965 		linux_to_bsd_v4l_tuner(&l_vtun, &vtun);
2966 		error = fo_ioctl(fp, VIDIOCGTUNER, &vtun, td->td_ucred, td);
2967 		if (!error) {
2968 			bsd_to_linux_v4l_tuner(&vtun, &l_vtun);
2969 			error = copyout(&l_vtun, (void *) args->arg,
2970 			    sizeof(l_vtun));
2971 		}
2972 		fdrop(fp, td);
2973 		return (error);
2974 
2975 	case LINUX_VIDIOCSTUNER:
2976 		error = fget(td, args->fd,
2977 		    &cap_ioctl_rights, &fp);
2978 		if (error != 0)
2979 			return (error);
2980 		error = copyin((void *) args->arg, &l_vtun, sizeof(l_vtun));
2981 		if (error) {
2982 			fdrop(fp, td);
2983 			return (error);
2984 		}
2985 		linux_to_bsd_v4l_tuner(&l_vtun, &vtun);
2986 		error = fo_ioctl(fp, VIDIOCSTUNER, &vtun, td->td_ucred, td);
2987 		fdrop(fp, td);
2988 		return (error);
2989 
2990 	case LINUX_VIDIOCGPICT:		args->cmd = VIDIOCGPICT; break;
2991 	case LINUX_VIDIOCSPICT:		args->cmd = VIDIOCSPICT; break;
2992 	case LINUX_VIDIOCCAPTURE:	args->cmd = VIDIOCCAPTURE; break;
2993 
2994 	case LINUX_VIDIOCGWIN:
2995 		error = fget(td, args->fd,
2996 		    &cap_ioctl_rights, &fp);
2997 		if (error != 0)
2998 			return (error);
2999 		error = fo_ioctl(fp, VIDIOCGWIN, &vwin, td->td_ucred, td);
3000 		if (!error) {
3001 			bsd_to_linux_v4l_window(&vwin, &l_vwin);
3002 			error = copyout(&l_vwin, (void *) args->arg,
3003 			    sizeof(l_vwin));
3004 		}
3005 		fdrop(fp, td);
3006 		return (error);
3007 
3008 	case LINUX_VIDIOCSWIN:
3009 		error = fget(td, args->fd,
3010 		    &cap_ioctl_rights, &fp);
3011 		if (error != 0)
3012 			return (error);
3013 		error = copyin((void *) args->arg, &l_vwin, sizeof(l_vwin));
3014 		if (error) {
3015 			fdrop(fp, td);
3016 			return (error);
3017 		}
3018 		linux_to_bsd_v4l_window(&l_vwin, &vwin);
3019 #ifdef COMPAT_LINUX_V4L_CLIPLIST
3020 		error = linux_v4l_cliplist_copy(&l_vwin, &vwin);
3021 		if (error) {
3022 			fdrop(fp, td);
3023 			return (error);
3024 		}
3025 #endif
3026 		error = fo_ioctl(fp, VIDIOCSWIN, &vwin, td->td_ucred, td);
3027 		fdrop(fp, td);
3028 #ifdef COMPAT_LINUX_V4L_CLIPLIST
3029 		linux_v4l_cliplist_free(&vwin);
3030 #endif
3031 		return (error);
3032 
3033 	case LINUX_VIDIOCGFBUF:
3034 		error = fget(td, args->fd,
3035 		    &cap_ioctl_rights, &fp);
3036 		if (error != 0)
3037 			return (error);
3038 		error = fo_ioctl(fp, VIDIOCGFBUF, &vbuf, td->td_ucred, td);
3039 		if (!error) {
3040 			bsd_to_linux_v4l_buffer(&vbuf, &l_vbuf);
3041 			error = copyout(&l_vbuf, (void *) args->arg,
3042 			    sizeof(l_vbuf));
3043 		}
3044 		fdrop(fp, td);
3045 		return (error);
3046 
3047 	case LINUX_VIDIOCSFBUF:
3048 		error = fget(td, args->fd,
3049 		    &cap_ioctl_rights, &fp);
3050 		if (error != 0)
3051 			return (error);
3052 		error = copyin((void *) args->arg, &l_vbuf, sizeof(l_vbuf));
3053 		if (error) {
3054 			fdrop(fp, td);
3055 			return (error);
3056 		}
3057 		linux_to_bsd_v4l_buffer(&l_vbuf, &vbuf);
3058 		error = fo_ioctl(fp, VIDIOCSFBUF, &vbuf, td->td_ucred, td);
3059 		fdrop(fp, td);
3060 		return (error);
3061 
3062 	case LINUX_VIDIOCKEY:		args->cmd = VIDIOCKEY; break;
3063 	case LINUX_VIDIOCGFREQ:		args->cmd = VIDIOCGFREQ; break;
3064 	case LINUX_VIDIOCSFREQ:		args->cmd = VIDIOCSFREQ; break;
3065 	case LINUX_VIDIOCGAUDIO:	args->cmd = VIDIOCGAUDIO; break;
3066 	case LINUX_VIDIOCSAUDIO:	args->cmd = VIDIOCSAUDIO; break;
3067 	case LINUX_VIDIOCSYNC:		args->cmd = VIDIOCSYNC; break;
3068 	case LINUX_VIDIOCMCAPTURE:	args->cmd = VIDIOCMCAPTURE; break;
3069 	case LINUX_VIDIOCGMBUF:		args->cmd = VIDIOCGMBUF; break;
3070 	case LINUX_VIDIOCGUNIT:		args->cmd = VIDIOCGUNIT; break;
3071 	case LINUX_VIDIOCGCAPTURE:	args->cmd = VIDIOCGCAPTURE; break;
3072 	case LINUX_VIDIOCSCAPTURE:	args->cmd = VIDIOCSCAPTURE; break;
3073 	case LINUX_VIDIOCSPLAYMODE:	args->cmd = VIDIOCSPLAYMODE; break;
3074 	case LINUX_VIDIOCSWRITEMODE:	args->cmd = VIDIOCSWRITEMODE; break;
3075 	case LINUX_VIDIOCGPLAYINFO:	args->cmd = VIDIOCGPLAYINFO; break;
3076 
3077 	case LINUX_VIDIOCSMICROCODE:
3078 		error = fget(td, args->fd,
3079 		    &cap_ioctl_rights, &fp);
3080 		if (error != 0)
3081 			return (error);
3082 		error = copyin((void *) args->arg, &l_vcode, sizeof(l_vcode));
3083 		if (error) {
3084 			fdrop(fp, td);
3085 			return (error);
3086 		}
3087 		linux_to_bsd_v4l_code(&l_vcode, &vcode);
3088 		error = fo_ioctl(fp, VIDIOCSMICROCODE, &vcode, td->td_ucred, td);
3089 		fdrop(fp, td);
3090 		return (error);
3091 
3092 	case LINUX_VIDIOCGVBIFMT:	args->cmd = VIDIOCGVBIFMT; break;
3093 	case LINUX_VIDIOCSVBIFMT:	args->cmd = VIDIOCSVBIFMT; break;
3094 	default:			return (ENOIOCTL);
3095 	}
3096 
3097 	error = sys_ioctl(td, (struct ioctl_args *)args);
3098 	return (error);
3099 }
3100 
3101 /*
3102  * Special ioctl handler
3103  */
3104 static int
3105 linux_ioctl_special(struct thread *td, struct linux_ioctl_args *args)
3106 {
3107 	int error;
3108 
3109 	switch (args->cmd) {
3110 	case LINUX_SIOCGIFADDR:
3111 		args->cmd = SIOCGIFADDR;
3112 		error = sys_ioctl(td, (struct ioctl_args *)args);
3113 		break;
3114 	case LINUX_SIOCSIFADDR:
3115 		args->cmd = SIOCSIFADDR;
3116 		error = sys_ioctl(td, (struct ioctl_args *)args);
3117 		break;
3118 	case LINUX_SIOCGIFFLAGS:
3119 		args->cmd = SIOCGIFFLAGS;
3120 		error = sys_ioctl(td, (struct ioctl_args *)args);
3121 		break;
3122 	default:
3123 		error = ENOIOCTL;
3124 	}
3125 
3126 	return (error);
3127 }
3128 
3129 static int
3130 linux_to_bsd_v4l2_standard(struct l_v4l2_standard *lvstd, struct v4l2_standard *vstd)
3131 {
3132 	vstd->index = lvstd->index;
3133 	vstd->id = lvstd->id;
3134 	CTASSERT(sizeof(vstd->name) == sizeof(lvstd->name));
3135 	memcpy(vstd->name, lvstd->name, sizeof(vstd->name));
3136 	vstd->frameperiod = lvstd->frameperiod;
3137 	vstd->framelines = lvstd->framelines;
3138 	CTASSERT(sizeof(vstd->reserved) == sizeof(lvstd->reserved));
3139 	memcpy(vstd->reserved, lvstd->reserved, sizeof(vstd->reserved));
3140 	return (0);
3141 }
3142 
3143 static int
3144 bsd_to_linux_v4l2_standard(struct v4l2_standard *vstd, struct l_v4l2_standard *lvstd)
3145 {
3146 	lvstd->index = vstd->index;
3147 	lvstd->id = vstd->id;
3148 	CTASSERT(sizeof(vstd->name) == sizeof(lvstd->name));
3149 	memcpy(lvstd->name, vstd->name, sizeof(lvstd->name));
3150 	lvstd->frameperiod = vstd->frameperiod;
3151 	lvstd->framelines = vstd->framelines;
3152 	CTASSERT(sizeof(vstd->reserved) == sizeof(lvstd->reserved));
3153 	memcpy(lvstd->reserved, vstd->reserved, sizeof(lvstd->reserved));
3154 	return (0);
3155 }
3156 
3157 static int
3158 linux_to_bsd_v4l2_buffer(struct l_v4l2_buffer *lvb, struct v4l2_buffer *vb)
3159 {
3160 	vb->index = lvb->index;
3161 	vb->type = lvb->type;
3162 	vb->bytesused = lvb->bytesused;
3163 	vb->flags = lvb->flags;
3164 	vb->field = lvb->field;
3165 	vb->timestamp.tv_sec = lvb->timestamp.tv_sec;
3166 	vb->timestamp.tv_usec = lvb->timestamp.tv_usec;
3167 	memcpy(&vb->timecode, &lvb->timecode, sizeof (lvb->timecode));
3168 	vb->sequence = lvb->sequence;
3169 	vb->memory = lvb->memory;
3170 	if (lvb->memory == V4L2_MEMORY_USERPTR)
3171 		/* possible pointer size conversion */
3172 		vb->m.userptr = (unsigned long)PTRIN(lvb->m.userptr);
3173 	else
3174 		vb->m.offset = lvb->m.offset;
3175 	vb->length = lvb->length;
3176 	vb->input = lvb->input;
3177 	vb->reserved = lvb->reserved;
3178 	return (0);
3179 }
3180 
3181 static int
3182 bsd_to_linux_v4l2_buffer(struct v4l2_buffer *vb, struct l_v4l2_buffer *lvb)
3183 {
3184 	lvb->index = vb->index;
3185 	lvb->type = vb->type;
3186 	lvb->bytesused = vb->bytesused;
3187 	lvb->flags = vb->flags;
3188 	lvb->field = vb->field;
3189 	lvb->timestamp.tv_sec = vb->timestamp.tv_sec;
3190 	lvb->timestamp.tv_usec = vb->timestamp.tv_usec;
3191 	memcpy(&lvb->timecode, &vb->timecode, sizeof (vb->timecode));
3192 	lvb->sequence = vb->sequence;
3193 	lvb->memory = vb->memory;
3194 	if (vb->memory == V4L2_MEMORY_USERPTR)
3195 		/* possible pointer size conversion */
3196 		lvb->m.userptr = PTROUT(vb->m.userptr);
3197 	else
3198 		lvb->m.offset = vb->m.offset;
3199 	lvb->length = vb->length;
3200 	lvb->input = vb->input;
3201 	lvb->reserved = vb->reserved;
3202 	return (0);
3203 }
3204 
3205 static int
3206 linux_to_bsd_v4l2_format(struct l_v4l2_format *lvf, struct v4l2_format *vf)
3207 {
3208 	vf->type = lvf->type;
3209 	if (lvf->type == V4L2_BUF_TYPE_VIDEO_OVERLAY
3210 #ifdef V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY
3211 	    || lvf->type == V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY
3212 #endif
3213 	    )
3214 		/*
3215 		 * XXX TODO - needs 32 -> 64 bit conversion:
3216 		 * (unused by webcams?)
3217 		 */
3218 		return (EINVAL);
3219 	memcpy(&vf->fmt, &lvf->fmt, sizeof(vf->fmt));
3220 	return (0);
3221 }
3222 
3223 static int
3224 bsd_to_linux_v4l2_format(struct v4l2_format *vf, struct l_v4l2_format *lvf)
3225 {
3226 	lvf->type = vf->type;
3227 	if (vf->type == V4L2_BUF_TYPE_VIDEO_OVERLAY
3228 #ifdef V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY
3229 	    || vf->type == V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY
3230 #endif
3231 	    )
3232 		/*
3233 		 * XXX TODO - needs 32 -> 64 bit conversion:
3234 		 * (unused by webcams?)
3235 		 */
3236 		return (EINVAL);
3237 	memcpy(&lvf->fmt, &vf->fmt, sizeof(vf->fmt));
3238 	return (0);
3239 }
3240 static int
3241 linux_ioctl_v4l2(struct thread *td, struct linux_ioctl_args *args)
3242 {
3243 	struct file *fp;
3244 	int error;
3245 	struct v4l2_format vformat;
3246 	struct l_v4l2_format l_vformat;
3247 	struct v4l2_standard vstd;
3248 	struct l_v4l2_standard l_vstd;
3249 	struct l_v4l2_buffer l_vbuf;
3250 	struct v4l2_buffer vbuf;
3251 	struct v4l2_input vinp;
3252 
3253 	switch (args->cmd & 0xffff) {
3254 	case LINUX_VIDIOC_RESERVED:
3255 	case LINUX_VIDIOC_LOG_STATUS:
3256 		if ((args->cmd & IOC_DIRMASK) != LINUX_IOC_VOID)
3257 			return (ENOIOCTL);
3258 		args->cmd = (args->cmd & 0xffff) | IOC_VOID;
3259 		break;
3260 
3261 	case LINUX_VIDIOC_OVERLAY:
3262 	case LINUX_VIDIOC_STREAMON:
3263 	case LINUX_VIDIOC_STREAMOFF:
3264 	case LINUX_VIDIOC_S_STD:
3265 	case LINUX_VIDIOC_S_TUNER:
3266 	case LINUX_VIDIOC_S_AUDIO:
3267 	case LINUX_VIDIOC_S_AUDOUT:
3268 	case LINUX_VIDIOC_S_MODULATOR:
3269 	case LINUX_VIDIOC_S_FREQUENCY:
3270 	case LINUX_VIDIOC_S_CROP:
3271 	case LINUX_VIDIOC_S_JPEGCOMP:
3272 	case LINUX_VIDIOC_S_PRIORITY:
3273 	case LINUX_VIDIOC_DBG_S_REGISTER:
3274 	case LINUX_VIDIOC_S_HW_FREQ_SEEK:
3275 	case LINUX_VIDIOC_SUBSCRIBE_EVENT:
3276 	case LINUX_VIDIOC_UNSUBSCRIBE_EVENT:
3277 		args->cmd = (args->cmd & ~IOC_DIRMASK) | IOC_IN;
3278 		break;
3279 
3280 	case LINUX_VIDIOC_QUERYCAP:
3281 	case LINUX_VIDIOC_G_STD:
3282 	case LINUX_VIDIOC_G_AUDIO:
3283 	case LINUX_VIDIOC_G_INPUT:
3284 	case LINUX_VIDIOC_G_OUTPUT:
3285 	case LINUX_VIDIOC_G_AUDOUT:
3286 	case LINUX_VIDIOC_G_JPEGCOMP:
3287 	case LINUX_VIDIOC_QUERYSTD:
3288 	case LINUX_VIDIOC_G_PRIORITY:
3289 	case LINUX_VIDIOC_QUERY_DV_PRESET:
3290 		args->cmd = (args->cmd & ~IOC_DIRMASK) | IOC_OUT;
3291 		break;
3292 
3293 	case LINUX_VIDIOC_ENUM_FMT:
3294 	case LINUX_VIDIOC_REQBUFS:
3295 	case LINUX_VIDIOC_G_PARM:
3296 	case LINUX_VIDIOC_S_PARM:
3297 	case LINUX_VIDIOC_G_CTRL:
3298 	case LINUX_VIDIOC_S_CTRL:
3299 	case LINUX_VIDIOC_G_TUNER:
3300 	case LINUX_VIDIOC_QUERYCTRL:
3301 	case LINUX_VIDIOC_QUERYMENU:
3302 	case LINUX_VIDIOC_S_INPUT:
3303 	case LINUX_VIDIOC_S_OUTPUT:
3304 	case LINUX_VIDIOC_ENUMOUTPUT:
3305 	case LINUX_VIDIOC_G_MODULATOR:
3306 	case LINUX_VIDIOC_G_FREQUENCY:
3307 	case LINUX_VIDIOC_CROPCAP:
3308 	case LINUX_VIDIOC_G_CROP:
3309 	case LINUX_VIDIOC_ENUMAUDIO:
3310 	case LINUX_VIDIOC_ENUMAUDOUT:
3311 	case LINUX_VIDIOC_G_SLICED_VBI_CAP:
3312 #ifdef VIDIOC_ENUM_FRAMESIZES
3313 	case LINUX_VIDIOC_ENUM_FRAMESIZES:
3314 	case LINUX_VIDIOC_ENUM_FRAMEINTERVALS:
3315 	case LINUX_VIDIOC_ENCODER_CMD:
3316 	case LINUX_VIDIOC_TRY_ENCODER_CMD:
3317 #endif
3318 	case LINUX_VIDIOC_DBG_G_REGISTER:
3319 	case LINUX_VIDIOC_DBG_G_CHIP_IDENT:
3320 	case LINUX_VIDIOC_ENUM_DV_PRESETS:
3321 	case LINUX_VIDIOC_S_DV_PRESET:
3322 	case LINUX_VIDIOC_G_DV_PRESET:
3323 	case LINUX_VIDIOC_S_DV_TIMINGS:
3324 	case LINUX_VIDIOC_G_DV_TIMINGS:
3325 		args->cmd = (args->cmd & ~IOC_DIRMASK) | IOC_INOUT;
3326 		break;
3327 
3328 	case LINUX_VIDIOC_G_FMT:
3329 	case LINUX_VIDIOC_S_FMT:
3330 	case LINUX_VIDIOC_TRY_FMT:
3331 		error = copyin((void *)args->arg, &l_vformat, sizeof(l_vformat));
3332 		if (error)
3333 			return (error);
3334 		error = fget(td, args->fd,
3335 		    &cap_ioctl_rights, &fp);
3336 		if (error)
3337 			return (error);
3338 		if (linux_to_bsd_v4l2_format(&l_vformat, &vformat) != 0)
3339 			error = EINVAL;
3340 		else if ((args->cmd & 0xffff) == LINUX_VIDIOC_G_FMT)
3341 			error = fo_ioctl(fp, VIDIOC_G_FMT, &vformat,
3342 			    td->td_ucred, td);
3343 		else if ((args->cmd & 0xffff) == LINUX_VIDIOC_S_FMT)
3344 			error = fo_ioctl(fp, VIDIOC_S_FMT, &vformat,
3345 			    td->td_ucred, td);
3346 		else
3347 			error = fo_ioctl(fp, VIDIOC_TRY_FMT, &vformat,
3348 			    td->td_ucred, td);
3349 		bsd_to_linux_v4l2_format(&vformat, &l_vformat);
3350 		if (error == 0)
3351 			error = copyout(&l_vformat, (void *)args->arg,
3352 			    sizeof(l_vformat));
3353 		fdrop(fp, td);
3354 		return (error);
3355 
3356 	case LINUX_VIDIOC_ENUMSTD:
3357 		error = copyin((void *)args->arg, &l_vstd, sizeof(l_vstd));
3358 		if (error)
3359 			return (error);
3360 		linux_to_bsd_v4l2_standard(&l_vstd, &vstd);
3361 		error = fget(td, args->fd,
3362 		    &cap_ioctl_rights, &fp);
3363 		if (error)
3364 			return (error);
3365 		error = fo_ioctl(fp, VIDIOC_ENUMSTD, (caddr_t)&vstd,
3366 		    td->td_ucred, td);
3367 		if (error) {
3368 			fdrop(fp, td);
3369 			return (error);
3370 		}
3371 		bsd_to_linux_v4l2_standard(&vstd, &l_vstd);
3372 		error = copyout(&l_vstd, (void *)args->arg, sizeof(l_vstd));
3373 		fdrop(fp, td);
3374 		return (error);
3375 
3376 	case LINUX_VIDIOC_ENUMINPUT:
3377 		/*
3378 		 * The Linux struct l_v4l2_input differs only in size,
3379 		 * it has no padding at the end.
3380 		 */
3381 		error = copyin((void *)args->arg, &vinp,
3382 				sizeof(struct l_v4l2_input));
3383 		if (error != 0)
3384 			return (error);
3385 		error = fget(td, args->fd,
3386 		    &cap_ioctl_rights, &fp);
3387 		if (error != 0)
3388 			return (error);
3389 		error = fo_ioctl(fp, VIDIOC_ENUMINPUT, (caddr_t)&vinp,
3390 		    td->td_ucred, td);
3391 		if (error) {
3392 			fdrop(fp, td);
3393 			return (error);
3394 		}
3395 		error = copyout(&vinp, (void *)args->arg,
3396 				sizeof(struct l_v4l2_input));
3397 		fdrop(fp, td);
3398 		return (error);
3399 
3400 	case LINUX_VIDIOC_QUERYBUF:
3401 	case LINUX_VIDIOC_QBUF:
3402 	case LINUX_VIDIOC_DQBUF:
3403 		error = copyin((void *)args->arg, &l_vbuf, sizeof(l_vbuf));
3404 		if (error)
3405 			return (error);
3406 		error = fget(td, args->fd,
3407 		    &cap_ioctl_rights, &fp);
3408 		if (error)
3409 			return (error);
3410 		linux_to_bsd_v4l2_buffer(&l_vbuf, &vbuf);
3411 		if ((args->cmd & 0xffff) == LINUX_VIDIOC_QUERYBUF)
3412 			error = fo_ioctl(fp, VIDIOC_QUERYBUF, &vbuf,
3413 			    td->td_ucred, td);
3414 		else if ((args->cmd & 0xffff) == LINUX_VIDIOC_QBUF)
3415 			error = fo_ioctl(fp, VIDIOC_QBUF, &vbuf,
3416 			    td->td_ucred, td);
3417 		else
3418 			error = fo_ioctl(fp, VIDIOC_DQBUF, &vbuf,
3419 			    td->td_ucred, td);
3420 		bsd_to_linux_v4l2_buffer(&vbuf, &l_vbuf);
3421 		if (error == 0)
3422 			error = copyout(&l_vbuf, (void *)args->arg,
3423 			    sizeof(l_vbuf));
3424 		fdrop(fp, td);
3425 		return (error);
3426 
3427 	/*
3428 	 * XXX TODO - these need 32 -> 64 bit conversion:
3429 	 * (are any of them needed for webcams?)
3430 	 */
3431 	case LINUX_VIDIOC_G_FBUF:
3432 	case LINUX_VIDIOC_S_FBUF:
3433 
3434 	case LINUX_VIDIOC_G_EXT_CTRLS:
3435 	case LINUX_VIDIOC_S_EXT_CTRLS:
3436 	case LINUX_VIDIOC_TRY_EXT_CTRLS:
3437 
3438 	case LINUX_VIDIOC_DQEVENT:
3439 
3440 	default:			return (ENOIOCTL);
3441 	}
3442 
3443 	error = sys_ioctl(td, (struct ioctl_args *)args);
3444 	return (error);
3445 }
3446 
3447 /*
3448  * Support for emulators/linux-libusb. This port uses FBSD_LUSB* macros
3449  * instead of USB* ones. This lets us to provide correct values for cmd.
3450  * 0xffffffe0 -- 0xffffffff range seemed to be the least collision-prone.
3451  */
3452 static int
3453 linux_ioctl_fbsd_usb(struct thread *td, struct linux_ioctl_args *args)
3454 {
3455 	int error;
3456 
3457 	error = 0;
3458 	switch (args->cmd) {
3459 	case FBSD_LUSB_DEVICEENUMERATE:
3460 		args->cmd = USB_DEVICEENUMERATE;
3461 		break;
3462 	case FBSD_LUSB_DEV_QUIRK_ADD:
3463 		args->cmd = USB_DEV_QUIRK_ADD;
3464 		break;
3465 	case FBSD_LUSB_DEV_QUIRK_GET:
3466 		args->cmd = USB_DEV_QUIRK_GET;
3467 		break;
3468 	case FBSD_LUSB_DEV_QUIRK_REMOVE:
3469 		args->cmd = USB_DEV_QUIRK_REMOVE;
3470 		break;
3471 	case FBSD_LUSB_DO_REQUEST:
3472 		args->cmd = USB_DO_REQUEST;
3473 		break;
3474 	case FBSD_LUSB_FS_CLEAR_STALL_SYNC:
3475 		args->cmd = USB_FS_CLEAR_STALL_SYNC;
3476 		break;
3477 	case FBSD_LUSB_FS_CLOSE:
3478 		args->cmd = USB_FS_CLOSE;
3479 		break;
3480 	case FBSD_LUSB_FS_COMPLETE:
3481 		args->cmd = USB_FS_COMPLETE;
3482 		break;
3483 	case FBSD_LUSB_FS_INIT:
3484 		args->cmd = USB_FS_INIT;
3485 		break;
3486 	case FBSD_LUSB_FS_OPEN:
3487 		args->cmd = USB_FS_OPEN;
3488 		break;
3489 	case FBSD_LUSB_FS_START:
3490 		args->cmd = USB_FS_START;
3491 		break;
3492 	case FBSD_LUSB_FS_STOP:
3493 		args->cmd = USB_FS_STOP;
3494 		break;
3495 	case FBSD_LUSB_FS_UNINIT:
3496 		args->cmd = USB_FS_UNINIT;
3497 		break;
3498 	case FBSD_LUSB_GET_CONFIG:
3499 		args->cmd = USB_GET_CONFIG;
3500 		break;
3501 	case FBSD_LUSB_GET_DEVICEINFO:
3502 		args->cmd = USB_GET_DEVICEINFO;
3503 		break;
3504 	case FBSD_LUSB_GET_DEVICE_DESC:
3505 		args->cmd = USB_GET_DEVICE_DESC;
3506 		break;
3507 	case FBSD_LUSB_GET_FULL_DESC:
3508 		args->cmd = USB_GET_FULL_DESC;
3509 		break;
3510 	case FBSD_LUSB_GET_IFACE_DRIVER:
3511 		args->cmd = USB_GET_IFACE_DRIVER;
3512 		break;
3513 	case FBSD_LUSB_GET_PLUGTIME:
3514 		args->cmd = USB_GET_PLUGTIME;
3515 		break;
3516 	case FBSD_LUSB_GET_POWER_MODE:
3517 		args->cmd = USB_GET_POWER_MODE;
3518 		break;
3519 	case FBSD_LUSB_GET_REPORT_DESC:
3520 		args->cmd = USB_GET_REPORT_DESC;
3521 		break;
3522 	case FBSD_LUSB_GET_REPORT_ID:
3523 		args->cmd = USB_GET_REPORT_ID;
3524 		break;
3525 	case FBSD_LUSB_GET_TEMPLATE:
3526 		args->cmd = USB_GET_TEMPLATE;
3527 		break;
3528 	case FBSD_LUSB_IFACE_DRIVER_ACTIVE:
3529 		args->cmd = USB_IFACE_DRIVER_ACTIVE;
3530 		break;
3531 	case FBSD_LUSB_IFACE_DRIVER_DETACH:
3532 		args->cmd = USB_IFACE_DRIVER_DETACH;
3533 		break;
3534 	case FBSD_LUSB_QUIRK_NAME_GET:
3535 		args->cmd = USB_QUIRK_NAME_GET;
3536 		break;
3537 	case FBSD_LUSB_READ_DIR:
3538 		args->cmd = USB_READ_DIR;
3539 		break;
3540 	case FBSD_LUSB_SET_ALTINTERFACE:
3541 		args->cmd = USB_SET_ALTINTERFACE;
3542 		break;
3543 	case FBSD_LUSB_SET_CONFIG:
3544 		args->cmd = USB_SET_CONFIG;
3545 		break;
3546 	case FBSD_LUSB_SET_IMMED:
3547 		args->cmd = USB_SET_IMMED;
3548 		break;
3549 	case FBSD_LUSB_SET_POWER_MODE:
3550 		args->cmd = USB_SET_POWER_MODE;
3551 		break;
3552 	case FBSD_LUSB_SET_TEMPLATE:
3553 		args->cmd = USB_SET_TEMPLATE;
3554 		break;
3555 	case FBSD_LUSB_FS_OPEN_STREAM:
3556 		args->cmd = USB_FS_OPEN_STREAM;
3557 		break;
3558 	case FBSD_LUSB_GET_DEV_PORT_PATH:
3559 		args->cmd = USB_GET_DEV_PORT_PATH;
3560 		break;
3561 	case FBSD_LUSB_GET_POWER_USAGE:
3562 		args->cmd = USB_GET_POWER_USAGE;
3563 		break;
3564 	case FBSD_LUSB_DEVICESTATS:
3565 		args->cmd = USB_DEVICESTATS;
3566 		break;
3567 	default:
3568 		error = ENOIOCTL;
3569 	}
3570 	if (error != ENOIOCTL)
3571 		error = sys_ioctl(td, (struct ioctl_args *)args);
3572 	return (error);
3573 }
3574 
3575 /*
3576  * Some evdev ioctls must be translated.
3577  *  - EVIOCGMTSLOTS is a IOC_READ ioctl on Linux although it has input data
3578  *    (must be IOC_INOUT on FreeBSD).
3579  *  - On Linux, EVIOCGRAB, EVIOCREVOKE and EVIOCRMFF are defined as _IOW with
3580  *    an int argument. You don't pass an int pointer to the ioctl(), however,
3581  *    but just the int directly. On FreeBSD, they are defined as _IOWINT for
3582  *    this to work.
3583  */
3584 static int
3585 linux_ioctl_evdev(struct thread *td, struct linux_ioctl_args *args)
3586 {
3587 	struct file *fp;
3588 	clockid_t clock;
3589 	int error;
3590 
3591 	args->cmd = SETDIR(args->cmd);
3592 
3593 	switch (args->cmd) {
3594 	case (EVIOCGRAB & ~IOC_DIRMASK) | IOC_IN:
3595 		args->cmd = EVIOCGRAB;
3596 		break;
3597 	case (EVIOCREVOKE & ~IOC_DIRMASK) | IOC_IN:
3598 		args->cmd = EVIOCREVOKE;
3599 		break;
3600 	case (EVIOCRMFF & ~IOC_DIRMASK) | IOC_IN:
3601 		args->cmd = EVIOCRMFF;
3602 		break;
3603 	case EVIOCSCLOCKID: {
3604 		error = copyin(PTRIN(args->arg), &clock, sizeof(clock));
3605 		if (error != 0)
3606 			return (error);
3607 		if (clock & ~(LINUX_IOCTL_EVDEV_CLK))
3608 			return (EINVAL);
3609 		error = linux_to_native_clockid(&clock, clock);
3610 		if (error != 0)
3611 			return (error);
3612 
3613 		error = fget(td, args->fd,
3614 		    &cap_ioctl_rights, &fp);
3615 		if (error != 0)
3616 			return (error);
3617 
3618 		error = fo_ioctl(fp, EVIOCSCLOCKID, &clock, td->td_ucred, td);
3619 		fdrop(fp, td);
3620 		return (error);
3621 	}
3622 	default:
3623 		break;
3624 	}
3625 
3626 	if (IOCBASECMD(args->cmd) ==
3627 	    ((EVIOCGMTSLOTS(0) & ~IOC_DIRMASK) | IOC_OUT))
3628 		args->cmd = (args->cmd & ~IOC_DIRMASK) | IOC_INOUT;
3629 
3630 	return (sys_ioctl(td, (struct ioctl_args *)args));
3631 }
3632 
3633 static int
3634 linux_ioctl_kcov(struct thread *td, struct linux_ioctl_args *args)
3635 {
3636 	int error;
3637 
3638 	error = 0;
3639 	switch (args->cmd & 0xffff) {
3640 	case LINUX_KCOV_INIT_TRACE:
3641 		args->cmd = KIOSETBUFSIZE;
3642 		break;
3643 	case LINUX_KCOV_ENABLE:
3644 		args->cmd = KIOENABLE;
3645 		if (args->arg == 0)
3646 			args->arg = KCOV_MODE_TRACE_PC;
3647 		else if (args->arg == 1)
3648 			args->arg = KCOV_MODE_TRACE_CMP;
3649 		else
3650 			error = EINVAL;
3651 		break;
3652 	case LINUX_KCOV_DISABLE:
3653 		args->cmd = KIODISABLE;
3654 		break;
3655 	default:
3656 		error = ENOTTY;
3657 		break;
3658 	}
3659 
3660 	if (error == 0)
3661 		error = sys_ioctl(td, (struct ioctl_args *)args);
3662 	return (error);
3663 }
3664 
3665 #ifndef COMPAT_LINUX32
3666 static int
3667 linux_ioctl_nvme(struct thread *td, struct linux_ioctl_args *args)
3668 {
3669 
3670 	/*
3671 	 * The NVMe drivers for namespace and controller implement these
3672 	 * commands using their native format. All the others are not
3673 	 * implemented yet.
3674 	 */
3675 	switch (args->cmd & 0xffff) {
3676 	case LINUX_NVME_IOCTL_ID:
3677 		args->cmd = NVME_IOCTL_ID;
3678 		break;
3679 	case LINUX_NVME_IOCTL_RESET:
3680 		args->cmd = NVME_IOCTL_RESET;
3681 		break;
3682 	case LINUX_NVME_IOCTL_ADMIN_CMD:
3683 		args->cmd = NVME_IOCTL_ADMIN_CMD;
3684 		break;
3685 	case LINUX_NVME_IOCTL_IO_CMD:
3686 		args->cmd = NVME_IOCTL_IO_CMD;
3687 		break;
3688 	default:
3689 		return (ENODEV);
3690 	}
3691 	return (sys_ioctl(td, (struct ioctl_args *)args));
3692 }
3693 #endif
3694 
3695 static int
3696 linux_ioctl_i2c(struct thread *td, struct linux_ioctl_args *args)
3697 {
3698 	struct linux_i2c_rdwr_data lrdwr;
3699 	struct linux_i2c_msg *lmsgs = NULL;
3700 	struct iic_rdwr_data rdwr;
3701 	struct iic_msg *msgs = NULL;
3702 	struct file *fp;
3703 	iic_linux_rdwr_t *linux_rdwr;
3704 	l_ulong funcs;
3705 	uint16_t lflags;
3706 	uint8_t addr;
3707 	int error;
3708 	l_uint i;
3709 
3710 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
3711 	if (error != 0)
3712 		return (error);
3713 
3714 	linux_rdwr = NULL;
3715 	if (fp->f_type == DTYPE_VNODE && fp->f_vnode != NULL &&
3716 	    fp->f_vnode->v_rdev != NULL)
3717 		linux_rdwr = (iic_linux_rdwr_t *)fp->f_vnode->v_rdev->si_drv2;
3718 
3719 	switch (args->cmd & 0xffff) {
3720 	case LINUX_I2C_RETRIES:
3721 	case LINUX_I2C_TIMEOUT:
3722 	case LINUX_I2C_PEC:
3723 		error = 0;
3724 		break;
3725 	case LINUX_I2C_TENBIT:
3726 		error = (args->arg == 0) ? 0 : ENOTSUP;
3727 		break;
3728 	case LINUX_I2C_FUNCS:
3729 		funcs = LINUX_I2C_FUNC_I2C | LINUX_I2C_FUNC_NOSTART;
3730 		error = copyout(&funcs, (void *)args->arg, sizeof(funcs));
3731 		break;
3732 	case LINUX_I2C_SLAVE:
3733 	case LINUX_I2C_SLAVE_FORCE:
3734 		if (args->arg > 0x7f) {
3735 			error = EINVAL;
3736 			break;
3737 		}
3738 		addr = (uint8_t)(args->arg << 1);
3739 		error = fo_ioctl(fp, I2CSADDR, (caddr_t)&addr, td->td_ucred, td);
3740 		break;
3741 	case LINUX_I2C_RDWR:
3742 		error = copyin((void *)args->arg, &lrdwr, sizeof(lrdwr));
3743 		if (error != 0)
3744 			break;
3745 		if (lrdwr.nmsgs > IIC_RDRW_MAX_MSGS) {
3746 			error = EINVAL;
3747 			break;
3748 		}
3749 		lmsgs = malloc(sizeof(*lmsgs) * lrdwr.nmsgs, M_TEMP, M_WAITOK);
3750 		msgs = malloc(sizeof(*msgs) * lrdwr.nmsgs, M_TEMP, M_WAITOK);
3751 		error = copyin((void *)(uintptr_t)lrdwr.msgs, lmsgs,
3752 		    sizeof(*lmsgs) * lrdwr.nmsgs);
3753 		if (error != 0)
3754 			break;
3755 		for (i = 0; i < lrdwr.nmsgs; i++) {
3756 			lflags = lmsgs[i].flags;
3757 			if (lmsgs[i].addr > 0x7f || (lflags & LINUX_I2C_M_TEN) != 0) {
3758 				error = ENOTSUP;
3759 				break;
3760 			}
3761 			if ((lflags & ~(LINUX_I2C_M_RD | LINUX_I2C_M_NOSTART)) != 0) {
3762 				error = ENOTSUP;
3763 				break;
3764 			}
3765 			msgs[i].slave = lmsgs[i].addr << 1;
3766 			msgs[i].flags = (lflags & LINUX_I2C_M_RD) ? IIC_M_RD : IIC_M_WR;
3767 			if ((lflags & LINUX_I2C_M_NOSTART) != 0)
3768 				msgs[i].flags |= IIC_M_NOSTART;
3769 			msgs[i].len = lmsgs[i].len;
3770 			msgs[i].buf = (uint8_t *)(uintptr_t)lmsgs[i].buf;
3771 		}
3772 		if (error == 0) {
3773 			if (linux_rdwr == NULL) {
3774 				error = ENOTTY;
3775 			} else {
3776 				rdwr.msgs = msgs;
3777 				rdwr.nmsgs = lrdwr.nmsgs;
3778 				error = linux_rdwr(fp, &rdwr, fp->f_flag, td);
3779 				if (error == 0)
3780 					td->td_retval[0] = lrdwr.nmsgs;
3781 			}
3782 		}
3783 		break;
3784 	case LINUX_I2C_SMBUS:
3785 	default:
3786 		error = ENOTSUP;
3787 		break;
3788 	}
3789 	free(msgs, M_TEMP);
3790 	free(lmsgs, M_TEMP);
3791 	fdrop(fp, td);
3792 	return (error);
3793 }
3794 
3795 static int
3796 linux_ioctl_hidraw(struct thread *td, struct linux_ioctl_args *args)
3797 {
3798 	int len = (args->cmd & 0x3fff0000) >> 16;
3799 	if (len > 8192)
3800 		return (EINVAL);
3801 
3802 	switch (args->cmd & 0xffff) {
3803 	case LINUX_HIDIOCGRDESCSIZE:
3804 		args->cmd = HIDIOCGRDESCSIZE;
3805 		break;
3806 	case LINUX_HIDIOCGRDESC:
3807 		args->cmd = HIDIOCGRDESC;
3808 		break;
3809 	case LINUX_HIDIOCGRAWINFO:
3810 		args->cmd = HIDIOCGRAWINFO;
3811 		break;
3812 	case LINUX_HIDIOCGRAWNAME:
3813 		args->cmd = HIDIOCGRAWNAME(len);
3814 		break;
3815 	case LINUX_HIDIOCGRAWPHYS:
3816 		args->cmd = HIDIOCGRAWPHYS(len);
3817 		break;
3818 	case LINUX_HIDIOCSFEATURE:
3819 		args->cmd = HIDIOCSFEATURE(len);
3820 		break;
3821 	case LINUX_HIDIOCGFEATURE:
3822 		args->cmd = HIDIOCGFEATURE(len);
3823 		break;
3824 	case LINUX_HIDIOCGRAWUNIQ:
3825 		args->cmd = HIDIOCGRAWUNIQ(len);
3826 		break;
3827 	case LINUX_HIDIOCSINPUT:
3828 		args->cmd = HIDIOCSINPUT(len);
3829 		break;
3830 	case LINUX_HIDIOCGINPUT:
3831 		args->cmd = HIDIOCGINPUT(len);
3832 		break;
3833 	case LINUX_HIDIOCSOUTPUT:
3834 		args->cmd = HIDIOCSOUTPUT(len);
3835 		break;
3836 	case LINUX_HIDIOCGOUTPUT:
3837 		args->cmd = HIDIOCGOUTPUT(len);
3838 		break;
3839 	}
3840 
3841 	return (sys_ioctl(td, (struct ioctl_args *)args));
3842 }
3843 
3844 /*
3845  * main ioctl syscall function
3846  */
3847 
3848 static int
3849 linux_ioctl_fallback(struct thread *td, struct linux_ioctl_args *args)
3850 {
3851 	struct file *fp;
3852 	struct linux_ioctl_handler_element *he;
3853 	int error, cmd;
3854 
3855 	error = fget(td, args->fd, &cap_ioctl_rights, &fp);
3856 	if (error != 0)
3857 		return (error);
3858 	if ((fp->f_flag & (FREAD|FWRITE)) == 0) {
3859 		fdrop(fp, td);
3860 		return (EBADF);
3861 	}
3862 
3863 	/* Iterate over the ioctl handlers */
3864 	cmd = args->cmd & 0xffff;
3865 	sx_slock(&linux_ioctl_sx);
3866 	mtx_lock(&Giant);
3867 #ifdef COMPAT_LINUX32
3868 	TAILQ_FOREACH(he, &linux32_ioctl_handlers, list) {
3869 		if (cmd >= he->low && cmd <= he->high) {
3870 			error = (*he->func)(td, args);
3871 			if (error != ENOIOCTL) {
3872 				mtx_unlock(&Giant);
3873 				sx_sunlock(&linux_ioctl_sx);
3874 				fdrop(fp, td);
3875 				return (error);
3876 			}
3877 		}
3878 	}
3879 #endif
3880 	TAILQ_FOREACH(he, &linux_ioctl_handlers, list) {
3881 		if (cmd >= he->low && cmd <= he->high) {
3882 			error = (*he->func)(td, args);
3883 			if (error != ENOIOCTL) {
3884 				mtx_unlock(&Giant);
3885 				sx_sunlock(&linux_ioctl_sx);
3886 				fdrop(fp, td);
3887 				return (error);
3888 			}
3889 		}
3890 	}
3891 	mtx_unlock(&Giant);
3892 	sx_sunlock(&linux_ioctl_sx);
3893 	fdrop(fp, td);
3894 
3895 	switch (args->cmd & 0xffff) {
3896 	case LINUX_BTRFS_IOC_CLONE:
3897 	case LINUX_F2FS_IOC_GET_FEATURES:
3898 	case LINUX_FS_IOC_FIEMAP:
3899 		return (ENOTSUP);
3900 
3901 	default:
3902 		linux_msg(td, "%s fd=%d, cmd=0x%x ('%c',%d) is not implemented",
3903 		    __func__, args->fd, args->cmd,
3904 		    (int)(args->cmd & 0xff00) >> 8, (int)(args->cmd & 0xff));
3905 		break;
3906 	}
3907 
3908 	return (EINVAL);
3909 }
3910 
3911 int
3912 linux_ioctl(struct thread *td, struct linux_ioctl_args *args)
3913 {
3914 	struct linux_ioctl_handler *handler;
3915 	int error, cmd, i;
3916 
3917 	cmd = args->cmd & 0xffff;
3918 
3919 	/*
3920 	 * array of ioctls known at compilation time. Elides a lot of work on
3921 	 * each call compared to the list variant. Everything frequently used
3922 	 * should be moved here.
3923 	 *
3924 	 * Arguably the magic creating the list should create an array instead.
3925 	 *
3926 	 * For now just a linear scan.
3927 	 */
3928 	for (i = 0; i < nitems(linux_ioctls); i++) {
3929 		handler = &linux_ioctls[i];
3930 		if (cmd >= handler->low && cmd <= handler->high) {
3931 			error = (*handler->func)(td, args);
3932 			if (error != ENOIOCTL) {
3933 				return (error);
3934 			}
3935 		}
3936 	}
3937 	return (linux_ioctl_fallback(td, args));
3938 }
3939 
3940 int
3941 linux_ioctl_register_handler(struct linux_ioctl_handler *h)
3942 {
3943 	struct linux_ioctl_handler_element *he, *cur;
3944 
3945 	if (h == NULL || h->func == NULL)
3946 		return (EINVAL);
3947 
3948 	/*
3949 	 * Reuse the element if the handler is already on the list, otherwise
3950 	 * create a new element.
3951 	 */
3952 	sx_xlock(&linux_ioctl_sx);
3953 	TAILQ_FOREACH(he, &linux_ioctl_handlers, list) {
3954 		if (he->func == h->func)
3955 			break;
3956 	}
3957 	if (he == NULL) {
3958 		he = malloc(sizeof(*he),
3959 		    M_LINUX, M_WAITOK);
3960 		he->func = h->func;
3961 	} else
3962 		TAILQ_REMOVE(&linux_ioctl_handlers, he, list);
3963 
3964 	/* Initialize range information. */
3965 	he->low = h->low;
3966 	he->high = h->high;
3967 	he->span = h->high - h->low + 1;
3968 
3969 	/* Add the element to the list, sorted on span. */
3970 	TAILQ_FOREACH(cur, &linux_ioctl_handlers, list) {
3971 		if (cur->span > he->span) {
3972 			TAILQ_INSERT_BEFORE(cur, he, list);
3973 			sx_xunlock(&linux_ioctl_sx);
3974 			return (0);
3975 		}
3976 	}
3977 	TAILQ_INSERT_TAIL(&linux_ioctl_handlers, he, list);
3978 	sx_xunlock(&linux_ioctl_sx);
3979 
3980 	return (0);
3981 }
3982 
3983 int
3984 linux_ioctl_unregister_handler(struct linux_ioctl_handler *h)
3985 {
3986 	struct linux_ioctl_handler_element *he;
3987 
3988 	if (h == NULL || h->func == NULL)
3989 		return (EINVAL);
3990 
3991 	sx_xlock(&linux_ioctl_sx);
3992 	TAILQ_FOREACH(he, &linux_ioctl_handlers, list) {
3993 		if (he->func == h->func) {
3994 			TAILQ_REMOVE(&linux_ioctl_handlers, he, list);
3995 			sx_xunlock(&linux_ioctl_sx);
3996 			free(he, M_LINUX);
3997 			return (0);
3998 		}
3999 	}
4000 	sx_xunlock(&linux_ioctl_sx);
4001 
4002 	return (EINVAL);
4003 }
4004 
4005 #ifdef COMPAT_LINUX32
4006 int
4007 linux32_ioctl_register_handler(struct linux_ioctl_handler *h)
4008 {
4009 	struct linux_ioctl_handler_element *he, *cur;
4010 
4011 	if (h == NULL || h->func == NULL)
4012 		return (EINVAL);
4013 
4014 	/*
4015 	 * Reuse the element if the handler is already on the list, otherwise
4016 	 * create a new element.
4017 	 */
4018 	sx_xlock(&linux_ioctl_sx);
4019 	TAILQ_FOREACH(he, &linux32_ioctl_handlers, list) {
4020 		if (he->func == h->func)
4021 			break;
4022 	}
4023 	if (he == NULL) {
4024 		he = malloc(sizeof(*he), M_LINUX, M_WAITOK);
4025 		he->func = h->func;
4026 	} else
4027 		TAILQ_REMOVE(&linux32_ioctl_handlers, he, list);
4028 
4029 	/* Initialize range information. */
4030 	he->low = h->low;
4031 	he->high = h->high;
4032 	he->span = h->high - h->low + 1;
4033 
4034 	/* Add the element to the list, sorted on span. */
4035 	TAILQ_FOREACH(cur, &linux32_ioctl_handlers, list) {
4036 		if (cur->span > he->span) {
4037 			TAILQ_INSERT_BEFORE(cur, he, list);
4038 			sx_xunlock(&linux_ioctl_sx);
4039 			return (0);
4040 		}
4041 	}
4042 	TAILQ_INSERT_TAIL(&linux32_ioctl_handlers, he, list);
4043 	sx_xunlock(&linux_ioctl_sx);
4044 
4045 	return (0);
4046 }
4047 
4048 int
4049 linux32_ioctl_unregister_handler(struct linux_ioctl_handler *h)
4050 {
4051 	struct linux_ioctl_handler_element *he;
4052 
4053 	if (h == NULL || h->func == NULL)
4054 		return (EINVAL);
4055 
4056 	sx_xlock(&linux_ioctl_sx);
4057 	TAILQ_FOREACH(he, &linux32_ioctl_handlers, list) {
4058 		if (he->func == h->func) {
4059 			TAILQ_REMOVE(&linux32_ioctl_handlers, he, list);
4060 			sx_xunlock(&linux_ioctl_sx);
4061 			free(he, M_LINUX);
4062 			return (0);
4063 		}
4064 	}
4065 	sx_xunlock(&linux_ioctl_sx);
4066 
4067 	return (EINVAL);
4068 }
4069 #endif
4070