xref: /linux/drivers/spi/spidev.c (revision 954ea91fb68b771dba6d87cfa61b68e09cc2497f)
1  // SPDX-License-Identifier: GPL-2.0-or-later
2  /*
3   * Simple synchronous userspace interface to SPI devices
4   *
5   * Copyright (C) 2006 SWAPP
6   *	Andrea Paterniani <a.paterniani@swapp-eng.it>
7   * Copyright (C) 2007 David Brownell (simplification, cleanup)
8   */
9  
10  #include <linux/init.h>
11  #include <linux/ioctl.h>
12  #include <linux/fs.h>
13  #include <linux/device.h>
14  #include <linux/err.h>
15  #include <linux/list.h>
16  #include <linux/errno.h>
17  #include <linux/mod_devicetable.h>
18  #include <linux/module.h>
19  #include <linux/mutex.h>
20  #include <linux/property.h>
21  #include <linux/slab.h>
22  #include <linux/compat.h>
23  
24  #include <linux/spi/spi.h>
25  #include <linux/spi/spidev.h>
26  
27  #include <linux/uaccess.h>
28  
29  
30  /*
31   * This supports access to SPI devices using normal userspace I/O calls.
32   * Note that while traditional UNIX/POSIX I/O semantics are half duplex,
33   * and often mask message boundaries, full SPI support requires full duplex
34   * transfers.  There are several kinds of internal message boundaries to
35   * handle chipselect management and other protocol options.
36   *
37   * SPI has a character major number assigned.  We allocate minor numbers
38   * dynamically using a bitmask.  You must use hotplug tools, such as udev
39   * (or mdev with busybox) to create and destroy the /dev/spidevB.C device
40   * nodes, since there is no fixed association of minor numbers with any
41   * particular SPI bus or device.
42   */
43  #define SPIDEV_MAJOR			153	/* assigned */
44  #define N_SPI_MINORS			32	/* ... up to 256 */
45  
46  static DECLARE_BITMAP(minors, N_SPI_MINORS);
47  
48  static_assert(N_SPI_MINORS > 0 && N_SPI_MINORS <= 256);
49  
50  /* Bit masks for spi_device.mode management.  Note that incorrect
51   * settings for some settings can cause *lots* of trouble for other
52   * devices on a shared bus:
53   *
54   *  - CS_HIGH ... this device will be active when it shouldn't be
55   *  - 3WIRE ... when active, it won't behave as it should
56   *  - NO_CS ... there will be no explicit message boundaries; this
57   *	is completely incompatible with the shared bus model
58   *  - READY ... transfers may proceed when they shouldn't.
59   *
60   * REVISIT should changing those flags be privileged?
61   */
62  #define SPI_MODE_MASK		(SPI_MODE_X_MASK | SPI_CS_HIGH \
63  				| SPI_LSB_FIRST | SPI_3WIRE | SPI_LOOP \
64  				| SPI_NO_CS | SPI_READY | SPI_TX_DUAL \
65  				| SPI_TX_QUAD | SPI_TX_OCTAL | SPI_RX_DUAL \
66  				| SPI_RX_QUAD | SPI_RX_OCTAL \
67  				| SPI_RX_CPHA_FLIP)
68  
69  struct spidev_data {
70  	dev_t			devt;
71  	struct mutex		spi_lock;
72  	struct spi_device	*spi;
73  	struct list_head	device_entry;
74  
75  	/* TX/RX buffers are NULL unless this device is open (users > 0) */
76  	struct mutex		buf_lock;
77  	unsigned		users;
78  	u8			*tx_buffer;
79  	u8			*rx_buffer;
80  	u32			speed_hz;
81  };
82  
83  static LIST_HEAD(device_list);
84  static DEFINE_MUTEX(device_list_lock);
85  
86  static unsigned bufsiz = 4096;
87  module_param(bufsiz, uint, S_IRUGO);
88  MODULE_PARM_DESC(bufsiz, "data bytes in biggest supported SPI message");
89  
90  /*-------------------------------------------------------------------------*/
91  
92  static ssize_t
93  spidev_sync_unlocked(struct spi_device *spi, struct spi_message *message)
94  {
95  	ssize_t status;
96  
97  	status = spi_sync(spi, message);
98  	if (status == 0)
99  		status = message->actual_length;
100  
101  	return status;
102  }
103  
104  static ssize_t
105  spidev_sync(struct spidev_data *spidev, struct spi_message *message)
106  {
107  	ssize_t status;
108  	struct spi_device *spi;
109  
110  	mutex_lock(&spidev->spi_lock);
111  	spi = spidev->spi;
112  
113  	if (spi == NULL)
114  		status = -ESHUTDOWN;
115  	else
116  		status = spidev_sync_unlocked(spi, message);
117  
118  	mutex_unlock(&spidev->spi_lock);
119  	return status;
120  }
121  
122  static inline ssize_t
123  spidev_sync_write(struct spidev_data *spidev, size_t len)
124  {
125  	struct spi_transfer	t = {
126  			.tx_buf		= spidev->tx_buffer,
127  			.len		= len,
128  			.speed_hz	= spidev->speed_hz,
129  		};
130  	struct spi_message	m;
131  
132  	spi_message_init(&m);
133  	spi_message_add_tail(&t, &m);
134  	return spidev_sync(spidev, &m);
135  }
136  
137  static inline ssize_t
138  spidev_sync_read(struct spidev_data *spidev, size_t len)
139  {
140  	struct spi_transfer	t = {
141  			.rx_buf		= spidev->rx_buffer,
142  			.len		= len,
143  			.speed_hz	= spidev->speed_hz,
144  		};
145  	struct spi_message	m;
146  
147  	spi_message_init(&m);
148  	spi_message_add_tail(&t, &m);
149  	return spidev_sync(spidev, &m);
150  }
151  
152  /*-------------------------------------------------------------------------*/
153  
154  /* Read-only message with current device setup */
155  static ssize_t
156  spidev_read(struct file *filp, char __user *buf, size_t count, loff_t *f_pos)
157  {
158  	struct spidev_data	*spidev;
159  	ssize_t			status;
160  
161  	/* chipselect only toggles at start or end of operation */
162  	if (count > bufsiz)
163  		return -EMSGSIZE;
164  
165  	spidev = filp->private_data;
166  
167  	mutex_lock(&spidev->buf_lock);
168  	status = spidev_sync_read(spidev, count);
169  	if (status > 0) {
170  		unsigned long	missing;
171  
172  		missing = copy_to_user(buf, spidev->rx_buffer, status);
173  		if (missing == status)
174  			status = -EFAULT;
175  		else
176  			status = status - missing;
177  	}
178  	mutex_unlock(&spidev->buf_lock);
179  
180  	return status;
181  }
182  
183  /* Write-only message with current device setup */
184  static ssize_t
185  spidev_write(struct file *filp, const char __user *buf,
186  		size_t count, loff_t *f_pos)
187  {
188  	struct spidev_data	*spidev;
189  	ssize_t			status;
190  	unsigned long		missing;
191  
192  	/* chipselect only toggles at start or end of operation */
193  	if (count > bufsiz)
194  		return -EMSGSIZE;
195  
196  	spidev = filp->private_data;
197  
198  	mutex_lock(&spidev->buf_lock);
199  	missing = copy_from_user(spidev->tx_buffer, buf, count);
200  	if (missing == 0)
201  		status = spidev_sync_write(spidev, count);
202  	else
203  		status = -EFAULT;
204  	mutex_unlock(&spidev->buf_lock);
205  
206  	return status;
207  }
208  
209  static int spidev_message(struct spidev_data *spidev,
210  		struct spi_ioc_transfer *u_xfers, unsigned n_xfers)
211  {
212  	struct spi_message	msg;
213  	struct spi_transfer	*k_xfers;
214  	struct spi_transfer	*k_tmp;
215  	struct spi_ioc_transfer *u_tmp;
216  	unsigned		n, total, tx_total, rx_total;
217  	u8			*tx_buf, *rx_buf;
218  	int			status = -EFAULT;
219  
220  	spi_message_init(&msg);
221  	k_xfers = kcalloc(n_xfers, sizeof(*k_tmp), GFP_KERNEL);
222  	if (k_xfers == NULL)
223  		return -ENOMEM;
224  
225  	/* Construct spi_message, copying any tx data to bounce buffer.
226  	 * We walk the array of user-provided transfers, using each one
227  	 * to initialize a kernel version of the same transfer.
228  	 */
229  	tx_buf = spidev->tx_buffer;
230  	rx_buf = spidev->rx_buffer;
231  	total = 0;
232  	tx_total = 0;
233  	rx_total = 0;
234  	for (n = n_xfers, k_tmp = k_xfers, u_tmp = u_xfers;
235  			n;
236  			n--, k_tmp++, u_tmp++) {
237  		/* Ensure that also following allocations from rx_buf/tx_buf will meet
238  		 * DMA alignment requirements.
239  		 */
240  		unsigned int len_aligned = ALIGN(u_tmp->len, ARCH_KMALLOC_MINALIGN);
241  
242  		k_tmp->len = u_tmp->len;
243  
244  		total += k_tmp->len;
245  		/* Since the function returns the total length of transfers
246  		 * on success, restrict the total to positive int values to
247  		 * avoid the return value looking like an error.  Also check
248  		 * each transfer length to avoid arithmetic overflow.
249  		 */
250  		if (total > INT_MAX || k_tmp->len > INT_MAX) {
251  			status = -EMSGSIZE;
252  			goto done;
253  		}
254  
255  		if (u_tmp->rx_buf) {
256  			/* this transfer needs space in RX bounce buffer */
257  			rx_total += len_aligned;
258  			if (rx_total > bufsiz) {
259  				status = -EMSGSIZE;
260  				goto done;
261  			}
262  			k_tmp->rx_buf = rx_buf;
263  			rx_buf += len_aligned;
264  		}
265  		if (u_tmp->tx_buf) {
266  			/* this transfer needs space in TX bounce buffer */
267  			tx_total += len_aligned;
268  			if (tx_total > bufsiz) {
269  				status = -EMSGSIZE;
270  				goto done;
271  			}
272  			k_tmp->tx_buf = tx_buf;
273  			if (copy_from_user(tx_buf, (const u8 __user *)
274  						(uintptr_t) u_tmp->tx_buf,
275  					u_tmp->len))
276  				goto done;
277  			tx_buf += len_aligned;
278  		}
279  
280  		k_tmp->cs_change = !!u_tmp->cs_change;
281  		k_tmp->tx_nbits = u_tmp->tx_nbits;
282  		k_tmp->rx_nbits = u_tmp->rx_nbits;
283  		k_tmp->bits_per_word = u_tmp->bits_per_word;
284  		k_tmp->delay.value = u_tmp->delay_usecs;
285  		k_tmp->delay.unit = SPI_DELAY_UNIT_USECS;
286  		k_tmp->speed_hz = u_tmp->speed_hz;
287  		k_tmp->word_delay.value = u_tmp->word_delay_usecs;
288  		k_tmp->word_delay.unit = SPI_DELAY_UNIT_USECS;
289  		if (!k_tmp->speed_hz)
290  			k_tmp->speed_hz = spidev->speed_hz;
291  #ifdef VERBOSE
292  		dev_dbg(&spidev->spi->dev,
293  			"  xfer len %u %s%s%s%dbits %u usec %u usec %uHz\n",
294  			k_tmp->len,
295  			k_tmp->rx_buf ? "rx " : "",
296  			k_tmp->tx_buf ? "tx " : "",
297  			k_tmp->cs_change ? "cs " : "",
298  			k_tmp->bits_per_word ? : spidev->spi->bits_per_word,
299  			k_tmp->delay.value,
300  			k_tmp->word_delay.value,
301  			k_tmp->speed_hz ? : spidev->spi->max_speed_hz);
302  #endif
303  		spi_message_add_tail(k_tmp, &msg);
304  	}
305  
306  	status = spidev_sync_unlocked(spidev->spi, &msg);
307  	if (status < 0)
308  		goto done;
309  
310  	/* copy any rx data out of bounce buffer */
311  	for (n = n_xfers, k_tmp = k_xfers, u_tmp = u_xfers;
312  			n;
313  			n--, k_tmp++, u_tmp++) {
314  		if (u_tmp->rx_buf) {
315  			if (copy_to_user((u8 __user *)
316  					(uintptr_t) u_tmp->rx_buf, k_tmp->rx_buf,
317  					u_tmp->len)) {
318  				status = -EFAULT;
319  				goto done;
320  			}
321  		}
322  	}
323  	status = total;
324  
325  done:
326  	kfree(k_xfers);
327  	return status;
328  }
329  
330  static struct spi_ioc_transfer *
331  spidev_get_ioc_message(unsigned int cmd, struct spi_ioc_transfer __user *u_ioc,
332  		unsigned *n_ioc)
333  {
334  	u32	tmp;
335  
336  	/* Check type, command number and direction */
337  	if (_IOC_TYPE(cmd) != SPI_IOC_MAGIC
338  			|| _IOC_NR(cmd) != _IOC_NR(SPI_IOC_MESSAGE(0))
339  			|| _IOC_DIR(cmd) != _IOC_WRITE)
340  		return ERR_PTR(-ENOTTY);
341  
342  	tmp = _IOC_SIZE(cmd);
343  	if ((tmp % sizeof(struct spi_ioc_transfer)) != 0)
344  		return ERR_PTR(-EINVAL);
345  	*n_ioc = tmp / sizeof(struct spi_ioc_transfer);
346  	if (*n_ioc == 0)
347  		return NULL;
348  
349  	/* copy into scratch area */
350  	return memdup_user(u_ioc, tmp);
351  }
352  
353  static long
354  spidev_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
355  {
356  	int			retval = 0;
357  	struct spidev_data	*spidev;
358  	struct spi_device	*spi;
359  	u32			tmp;
360  	unsigned		n_ioc;
361  	struct spi_ioc_transfer	*ioc;
362  
363  	/* Check type and command number */
364  	if (_IOC_TYPE(cmd) != SPI_IOC_MAGIC)
365  		return -ENOTTY;
366  
367  	/* guard against device removal before, or while,
368  	 * we issue this ioctl.
369  	 */
370  	spidev = filp->private_data;
371  	mutex_lock(&spidev->spi_lock);
372  	spi = spi_dev_get(spidev->spi);
373  	if (spi == NULL) {
374  		mutex_unlock(&spidev->spi_lock);
375  		return -ESHUTDOWN;
376  	}
377  
378  	/* use the buffer lock here for triple duty:
379  	 *  - prevent I/O (from us) so calling spi_setup() is safe;
380  	 *  - prevent concurrent SPI_IOC_WR_* from morphing
381  	 *    data fields while SPI_IOC_RD_* reads them;
382  	 *  - SPI_IOC_MESSAGE needs the buffer locked "normally".
383  	 */
384  	mutex_lock(&spidev->buf_lock);
385  
386  	switch (cmd) {
387  	/* read requests */
388  	case SPI_IOC_RD_MODE:
389  	case SPI_IOC_RD_MODE32:
390  		tmp = spi->mode;
391  
392  		{
393  			struct spi_controller *ctlr = spi->controller;
394  
395  			if (ctlr->use_gpio_descriptors && ctlr->cs_gpiods &&
396  			    ctlr->cs_gpiods[spi->chip_select])
397  				tmp &= ~SPI_CS_HIGH;
398  		}
399  
400  		if (cmd == SPI_IOC_RD_MODE)
401  			retval = put_user(tmp & SPI_MODE_MASK,
402  					  (__u8 __user *)arg);
403  		else
404  			retval = put_user(tmp & SPI_MODE_MASK,
405  					  (__u32 __user *)arg);
406  		break;
407  	case SPI_IOC_RD_LSB_FIRST:
408  		retval = put_user((spi->mode & SPI_LSB_FIRST) ?  1 : 0,
409  					(__u8 __user *)arg);
410  		break;
411  	case SPI_IOC_RD_BITS_PER_WORD:
412  		retval = put_user(spi->bits_per_word, (__u8 __user *)arg);
413  		break;
414  	case SPI_IOC_RD_MAX_SPEED_HZ:
415  		retval = put_user(spidev->speed_hz, (__u32 __user *)arg);
416  		break;
417  
418  	/* write requests */
419  	case SPI_IOC_WR_MODE:
420  	case SPI_IOC_WR_MODE32:
421  		if (cmd == SPI_IOC_WR_MODE)
422  			retval = get_user(tmp, (u8 __user *)arg);
423  		else
424  			retval = get_user(tmp, (u32 __user *)arg);
425  		if (retval == 0) {
426  			struct spi_controller *ctlr = spi->controller;
427  			u32	save = spi->mode;
428  
429  			if (tmp & ~SPI_MODE_MASK) {
430  				retval = -EINVAL;
431  				break;
432  			}
433  
434  			if (ctlr->use_gpio_descriptors && ctlr->cs_gpiods &&
435  			    ctlr->cs_gpiods[spi->chip_select])
436  				tmp |= SPI_CS_HIGH;
437  
438  			tmp |= spi->mode & ~SPI_MODE_MASK;
439  			spi->mode = tmp & SPI_MODE_USER_MASK;
440  			retval = spi_setup(spi);
441  			if (retval < 0)
442  				spi->mode = save;
443  			else
444  				dev_dbg(&spi->dev, "spi mode %x\n", tmp);
445  		}
446  		break;
447  	case SPI_IOC_WR_LSB_FIRST:
448  		retval = get_user(tmp, (__u8 __user *)arg);
449  		if (retval == 0) {
450  			u32	save = spi->mode;
451  
452  			if (tmp)
453  				spi->mode |= SPI_LSB_FIRST;
454  			else
455  				spi->mode &= ~SPI_LSB_FIRST;
456  			retval = spi_setup(spi);
457  			if (retval < 0)
458  				spi->mode = save;
459  			else
460  				dev_dbg(&spi->dev, "%csb first\n",
461  						tmp ? 'l' : 'm');
462  		}
463  		break;
464  	case SPI_IOC_WR_BITS_PER_WORD:
465  		retval = get_user(tmp, (__u8 __user *)arg);
466  		if (retval == 0) {
467  			u8	save = spi->bits_per_word;
468  
469  			spi->bits_per_word = tmp;
470  			retval = spi_setup(spi);
471  			if (retval < 0)
472  				spi->bits_per_word = save;
473  			else
474  				dev_dbg(&spi->dev, "%d bits per word\n", tmp);
475  		}
476  		break;
477  	case SPI_IOC_WR_MAX_SPEED_HZ: {
478  		u32 save;
479  
480  		retval = get_user(tmp, (__u32 __user *)arg);
481  		if (retval)
482  			break;
483  		if (tmp == 0) {
484  			retval = -EINVAL;
485  			break;
486  		}
487  
488  		save = spi->max_speed_hz;
489  
490  		spi->max_speed_hz = tmp;
491  		retval = spi_setup(spi);
492  		if (retval == 0) {
493  			spidev->speed_hz = tmp;
494  			dev_dbg(&spi->dev, "%d Hz (max)\n", spidev->speed_hz);
495  		}
496  
497  		spi->max_speed_hz = save;
498  		break;
499  	}
500  	default:
501  		/* segmented and/or full-duplex I/O request */
502  		/* Check message and copy into scratch area */
503  		ioc = spidev_get_ioc_message(cmd,
504  				(struct spi_ioc_transfer __user *)arg, &n_ioc);
505  		if (IS_ERR(ioc)) {
506  			retval = PTR_ERR(ioc);
507  			break;
508  		}
509  		if (!ioc)
510  			break;	/* n_ioc is also 0 */
511  
512  		/* translate to spi_message, execute */
513  		retval = spidev_message(spidev, ioc, n_ioc);
514  		kfree(ioc);
515  		break;
516  	}
517  
518  	mutex_unlock(&spidev->buf_lock);
519  	spi_dev_put(spi);
520  	mutex_unlock(&spidev->spi_lock);
521  	return retval;
522  }
523  
524  #ifdef CONFIG_COMPAT
525  static long
526  spidev_compat_ioc_message(struct file *filp, unsigned int cmd,
527  		unsigned long arg)
528  {
529  	struct spi_ioc_transfer __user	*u_ioc;
530  	int				retval = 0;
531  	struct spidev_data		*spidev;
532  	struct spi_device		*spi;
533  	unsigned			n_ioc, n;
534  	struct spi_ioc_transfer		*ioc;
535  
536  	u_ioc = (struct spi_ioc_transfer __user *) compat_ptr(arg);
537  
538  	/* guard against device removal before, or while,
539  	 * we issue this ioctl.
540  	 */
541  	spidev = filp->private_data;
542  	mutex_lock(&spidev->spi_lock);
543  	spi = spi_dev_get(spidev->spi);
544  	if (spi == NULL) {
545  		mutex_unlock(&spidev->spi_lock);
546  		return -ESHUTDOWN;
547  	}
548  
549  	/* SPI_IOC_MESSAGE needs the buffer locked "normally" */
550  	mutex_lock(&spidev->buf_lock);
551  
552  	/* Check message and copy into scratch area */
553  	ioc = spidev_get_ioc_message(cmd, u_ioc, &n_ioc);
554  	if (IS_ERR(ioc)) {
555  		retval = PTR_ERR(ioc);
556  		goto done;
557  	}
558  	if (!ioc)
559  		goto done;	/* n_ioc is also 0 */
560  
561  	/* Convert buffer pointers */
562  	for (n = 0; n < n_ioc; n++) {
563  		ioc[n].rx_buf = (uintptr_t) compat_ptr(ioc[n].rx_buf);
564  		ioc[n].tx_buf = (uintptr_t) compat_ptr(ioc[n].tx_buf);
565  	}
566  
567  	/* translate to spi_message, execute */
568  	retval = spidev_message(spidev, ioc, n_ioc);
569  	kfree(ioc);
570  
571  done:
572  	mutex_unlock(&spidev->buf_lock);
573  	spi_dev_put(spi);
574  	mutex_unlock(&spidev->spi_lock);
575  	return retval;
576  }
577  
578  static long
579  spidev_compat_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
580  {
581  	if (_IOC_TYPE(cmd) == SPI_IOC_MAGIC
582  			&& _IOC_NR(cmd) == _IOC_NR(SPI_IOC_MESSAGE(0))
583  			&& _IOC_DIR(cmd) == _IOC_WRITE)
584  		return spidev_compat_ioc_message(filp, cmd, arg);
585  
586  	return spidev_ioctl(filp, cmd, (unsigned long)compat_ptr(arg));
587  }
588  #else
589  #define spidev_compat_ioctl NULL
590  #endif /* CONFIG_COMPAT */
591  
592  static int spidev_open(struct inode *inode, struct file *filp)
593  {
594  	struct spidev_data	*spidev = NULL, *iter;
595  	int			status = -ENXIO;
596  
597  	mutex_lock(&device_list_lock);
598  
599  	list_for_each_entry(iter, &device_list, device_entry) {
600  		if (iter->devt == inode->i_rdev) {
601  			status = 0;
602  			spidev = iter;
603  			break;
604  		}
605  	}
606  
607  	if (!spidev) {
608  		pr_debug("spidev: nothing for minor %d\n", iminor(inode));
609  		goto err_find_dev;
610  	}
611  
612  	if (!spidev->tx_buffer) {
613  		spidev->tx_buffer = kmalloc(bufsiz, GFP_KERNEL);
614  		if (!spidev->tx_buffer) {
615  			status = -ENOMEM;
616  			goto err_find_dev;
617  		}
618  	}
619  
620  	if (!spidev->rx_buffer) {
621  		spidev->rx_buffer = kmalloc(bufsiz, GFP_KERNEL);
622  		if (!spidev->rx_buffer) {
623  			status = -ENOMEM;
624  			goto err_alloc_rx_buf;
625  		}
626  	}
627  
628  	spidev->users++;
629  	filp->private_data = spidev;
630  	stream_open(inode, filp);
631  
632  	mutex_unlock(&device_list_lock);
633  	return 0;
634  
635  err_alloc_rx_buf:
636  	kfree(spidev->tx_buffer);
637  	spidev->tx_buffer = NULL;
638  err_find_dev:
639  	mutex_unlock(&device_list_lock);
640  	return status;
641  }
642  
643  static int spidev_release(struct inode *inode, struct file *filp)
644  {
645  	struct spidev_data	*spidev;
646  	int			dofree;
647  
648  	mutex_lock(&device_list_lock);
649  	spidev = filp->private_data;
650  	filp->private_data = NULL;
651  
652  	mutex_lock(&spidev->spi_lock);
653  	/* ... after we unbound from the underlying device? */
654  	dofree = (spidev->spi == NULL);
655  	mutex_unlock(&spidev->spi_lock);
656  
657  	/* last close? */
658  	spidev->users--;
659  	if (!spidev->users) {
660  
661  		kfree(spidev->tx_buffer);
662  		spidev->tx_buffer = NULL;
663  
664  		kfree(spidev->rx_buffer);
665  		spidev->rx_buffer = NULL;
666  
667  		if (dofree)
668  			kfree(spidev);
669  		else
670  			spidev->speed_hz = spidev->spi->max_speed_hz;
671  	}
672  #ifdef CONFIG_SPI_SLAVE
673  	if (!dofree)
674  		spi_slave_abort(spidev->spi);
675  #endif
676  	mutex_unlock(&device_list_lock);
677  
678  	return 0;
679  }
680  
681  static const struct file_operations spidev_fops = {
682  	.owner =	THIS_MODULE,
683  	/* REVISIT switch to aio primitives, so that userspace
684  	 * gets more complete API coverage.  It'll simplify things
685  	 * too, except for the locking.
686  	 */
687  	.write =	spidev_write,
688  	.read =		spidev_read,
689  	.unlocked_ioctl = spidev_ioctl,
690  	.compat_ioctl = spidev_compat_ioctl,
691  	.open =		spidev_open,
692  	.release =	spidev_release,
693  	.llseek =	no_llseek,
694  };
695  
696  /*-------------------------------------------------------------------------*/
697  
698  /* The main reason to have this class is to make mdev/udev create the
699   * /dev/spidevB.C character device nodes exposing our userspace API.
700   * It also simplifies memory management.
701   */
702  
703  static struct class *spidev_class;
704  
705  static const struct spi_device_id spidev_spi_ids[] = {
706  	{ .name = "dh2228fv" },
707  	{ .name = "ltc2488" },
708  	{ .name = "sx1301" },
709  	{ .name = "bk4" },
710  	{ .name = "dhcom-board" },
711  	{ .name = "m53cpld" },
712  	{ .name = "spi-petra" },
713  	{ .name = "spi-authenta" },
714  	{ .name = "em3581" },
715  	{ .name = "si3210" },
716  	{},
717  };
718  MODULE_DEVICE_TABLE(spi, spidev_spi_ids);
719  
720  /*
721   * spidev should never be referenced in DT without a specific compatible string,
722   * it is a Linux implementation thing rather than a description of the hardware.
723   */
724  static int spidev_of_check(struct device *dev)
725  {
726  	if (device_property_match_string(dev, "compatible", "spidev") < 0)
727  		return 0;
728  
729  	dev_err(dev, "spidev listed directly in DT is not supported\n");
730  	return -EINVAL;
731  }
732  
733  static const struct of_device_id spidev_dt_ids[] = {
734  	{ .compatible = "cisco,spi-petra", .data = &spidev_of_check },
735  	{ .compatible = "dh,dhcom-board", .data = &spidev_of_check },
736  	{ .compatible = "lineartechnology,ltc2488", .data = &spidev_of_check },
737  	{ .compatible = "lwn,bk4", .data = &spidev_of_check },
738  	{ .compatible = "menlo,m53cpld", .data = &spidev_of_check },
739  	{ .compatible = "micron,spi-authenta", .data = &spidev_of_check },
740  	{ .compatible = "rohm,dh2228fv", .data = &spidev_of_check },
741  	{ .compatible = "semtech,sx1301", .data = &spidev_of_check },
742  	{ .compatible = "silabs,em3581", .data = &spidev_of_check },
743  	{ .compatible = "silabs,si3210", .data = &spidev_of_check },
744  	{},
745  };
746  MODULE_DEVICE_TABLE(of, spidev_dt_ids);
747  
748  /* Dummy SPI devices not to be used in production systems */
749  static int spidev_acpi_check(struct device *dev)
750  {
751  	dev_warn(dev, "do not use this driver in production systems!\n");
752  	return 0;
753  }
754  
755  static const struct acpi_device_id spidev_acpi_ids[] = {
756  	/*
757  	 * The ACPI SPT000* devices are only meant for development and
758  	 * testing. Systems used in production should have a proper ACPI
759  	 * description of the connected peripheral and they should also use
760  	 * a proper driver instead of poking directly to the SPI bus.
761  	 */
762  	{ "SPT0001", (kernel_ulong_t)&spidev_acpi_check },
763  	{ "SPT0002", (kernel_ulong_t)&spidev_acpi_check },
764  	{ "SPT0003", (kernel_ulong_t)&spidev_acpi_check },
765  	{},
766  };
767  MODULE_DEVICE_TABLE(acpi, spidev_acpi_ids);
768  
769  /*-------------------------------------------------------------------------*/
770  
771  static int spidev_probe(struct spi_device *spi)
772  {
773  	int (*match)(struct device *dev);
774  	struct spidev_data	*spidev;
775  	int			status;
776  	unsigned long		minor;
777  
778  	match = device_get_match_data(&spi->dev);
779  	if (match) {
780  		status = match(&spi->dev);
781  		if (status)
782  			return status;
783  	}
784  
785  	/* Allocate driver data */
786  	spidev = kzalloc(sizeof(*spidev), GFP_KERNEL);
787  	if (!spidev)
788  		return -ENOMEM;
789  
790  	/* Initialize the driver data */
791  	spidev->spi = spi;
792  	mutex_init(&spidev->spi_lock);
793  	mutex_init(&spidev->buf_lock);
794  
795  	INIT_LIST_HEAD(&spidev->device_entry);
796  
797  	/* If we can allocate a minor number, hook up this device.
798  	 * Reusing minors is fine so long as udev or mdev is working.
799  	 */
800  	mutex_lock(&device_list_lock);
801  	minor = find_first_zero_bit(minors, N_SPI_MINORS);
802  	if (minor < N_SPI_MINORS) {
803  		struct device *dev;
804  
805  		spidev->devt = MKDEV(SPIDEV_MAJOR, minor);
806  		dev = device_create(spidev_class, &spi->dev, spidev->devt,
807  				    spidev, "spidev%d.%d",
808  				    spi->master->bus_num, spi->chip_select);
809  		status = PTR_ERR_OR_ZERO(dev);
810  	} else {
811  		dev_dbg(&spi->dev, "no minor number available!\n");
812  		status = -ENODEV;
813  	}
814  	if (status == 0) {
815  		set_bit(minor, minors);
816  		list_add(&spidev->device_entry, &device_list);
817  	}
818  	mutex_unlock(&device_list_lock);
819  
820  	spidev->speed_hz = spi->max_speed_hz;
821  
822  	if (status == 0)
823  		spi_set_drvdata(spi, spidev);
824  	else
825  		kfree(spidev);
826  
827  	return status;
828  }
829  
830  static void spidev_remove(struct spi_device *spi)
831  {
832  	struct spidev_data	*spidev = spi_get_drvdata(spi);
833  
834  	/* prevent new opens */
835  	mutex_lock(&device_list_lock);
836  	/* make sure ops on existing fds can abort cleanly */
837  	mutex_lock(&spidev->spi_lock);
838  	spidev->spi = NULL;
839  	mutex_unlock(&spidev->spi_lock);
840  
841  	list_del(&spidev->device_entry);
842  	device_destroy(spidev_class, spidev->devt);
843  	clear_bit(MINOR(spidev->devt), minors);
844  	if (spidev->users == 0)
845  		kfree(spidev);
846  	mutex_unlock(&device_list_lock);
847  }
848  
849  static struct spi_driver spidev_spi_driver = {
850  	.driver = {
851  		.name =		"spidev",
852  		.of_match_table = spidev_dt_ids,
853  		.acpi_match_table = spidev_acpi_ids,
854  	},
855  	.probe =	spidev_probe,
856  	.remove =	spidev_remove,
857  	.id_table =	spidev_spi_ids,
858  
859  	/* NOTE:  suspend/resume methods are not necessary here.
860  	 * We don't do anything except pass the requests to/from
861  	 * the underlying controller.  The refrigerator handles
862  	 * most issues; the controller driver handles the rest.
863  	 */
864  };
865  
866  /*-------------------------------------------------------------------------*/
867  
868  static int __init spidev_init(void)
869  {
870  	int status;
871  
872  	/* Claim our 256 reserved device numbers.  Then register a class
873  	 * that will key udev/mdev to add/remove /dev nodes.  Last, register
874  	 * the driver which manages those device numbers.
875  	 */
876  	status = register_chrdev(SPIDEV_MAJOR, "spi", &spidev_fops);
877  	if (status < 0)
878  		return status;
879  
880  	spidev_class = class_create(THIS_MODULE, "spidev");
881  	if (IS_ERR(spidev_class)) {
882  		unregister_chrdev(SPIDEV_MAJOR, spidev_spi_driver.driver.name);
883  		return PTR_ERR(spidev_class);
884  	}
885  
886  	status = spi_register_driver(&spidev_spi_driver);
887  	if (status < 0) {
888  		class_destroy(spidev_class);
889  		unregister_chrdev(SPIDEV_MAJOR, spidev_spi_driver.driver.name);
890  	}
891  	return status;
892  }
893  module_init(spidev_init);
894  
895  static void __exit spidev_exit(void)
896  {
897  	spi_unregister_driver(&spidev_spi_driver);
898  	class_destroy(spidev_class);
899  	unregister_chrdev(SPIDEV_MAJOR, spidev_spi_driver.driver.name);
900  }
901  module_exit(spidev_exit);
902  
903  MODULE_AUTHOR("Andrea Paterniani, <a.paterniani@swapp-eng.it>");
904  MODULE_DESCRIPTION("User mode SPI device interface");
905  MODULE_LICENSE("GPL");
906  MODULE_ALIAS("spi:spidev");
907