kernel/drivers/media/usb/uvc/uvc_v4l2.c

   1 /*
   2  *      uvc_v4l2.c  --  USB Video Class driver - V4L2 API
   3  *
   4  *      Copyright (C) 2005-2010
   5  *          Laurent Pinchart (laurent.pinchart@ideasonboard.com)
   6  *
   7  *      This program is free software; you can redistribute it and/or modify
   8  *      it under the terms of the GNU General Public License as published by
   9  *      the Free Software Foundation; either version 2 of the License, or
  10  *      (at your option) any later version.
  11  *
  12  */
  13
  14 #include <linux/compat.h>
  15 #include <linux/kernel.h>
  16 #include <linux/list.h>
  17 #include <linux/module.h>
  18 #include <linux/slab.h>
  19 #include <linux/usb.h>
  20 #include <linux/videodev2.h>
  21 #include <linux/vmalloc.h>
  22 #include <linux/mm.h>
  23 #include <linux/wait.h>
  24 #include <linux/atomic.h>
  25
  26 #include <media/v4l2-common.h>
  27 #include <media/v4l2-ctrls.h>
  28 #include <media/v4l2-event.h>
  29 #include <media/v4l2-ioctl.h>
  30
  31 #include "uvcvideo.h"
  32
  33 /* ------------------------------------------------------------------------
  34  * UVC ioctls
  35  */
  36 static int uvc_ioctl_ctrl_map(struct uvc_video_chain *chain,
  37         struct uvc_xu_control_mapping *xmap)
  38 {
  39         struct uvc_control_mapping *map;
  40         unsigned int size;
  41         int ret;
  42
  43         map = kzalloc(sizeof *map, GFP_KERNEL);
  44         if (map == NULL)
  45                 return -ENOMEM;
  46
  47         map->id = xmap->id;
  48         memcpy(map->name, xmap->name, sizeof map->name);
  49         memcpy(map->entity, xmap->entity, sizeof map->entity);
  50         map->selector = xmap->selector;
  51         map->size = xmap->size;
  52         map->offset = xmap->offset;
  53         map->v4l2_type = xmap->v4l2_type;
  54         map->data_type = xmap->data_type;
  55
  56         switch (xmap->v4l2_type) {
  57         case V4L2_CTRL_TYPE_INTEGER:
  58         case V4L2_CTRL_TYPE_BOOLEAN:
  59         case V4L2_CTRL_TYPE_BUTTON:
  60                 break;
  61
  62         case V4L2_CTRL_TYPE_MENU:
  63                 /* Prevent excessive memory consumption, as well as integer
  64                  * overflows.
  65                  */
  66                 if (xmap->menu_count == 0 ||
  67                     xmap->menu_count > UVC_MAX_CONTROL_MENU_ENTRIES) {
  68                         ret = -EINVAL;
  69                         goto done;
  70                 }
  71
  72                 size = xmap->menu_count * sizeof(*map->menu_info);
  73                 map->menu_info = kmalloc(size, GFP_KERNEL);
  74                 if (map->menu_info == NULL) {
  75                         ret = -ENOMEM;
  76                         goto done;
  77                 }
  78
  79                 if (copy_from_user(map->menu_info, xmap->menu_info, size)) {
  80                         ret = -EFAULT;
  81                         goto done;
  82                 }
  83
  84                 map->menu_count = xmap->menu_count;
  85                 break;
  86
  87         default:
  88                 uvc_trace(UVC_TRACE_CONTROL, "Unsupported V4L2 control type "
  89                           "%u.\n", xmap->v4l2_type);
  90                 ret = -ENOTTY;
  91                 goto done;
  92         }
  93
  94         ret = uvc_ctrl_add_mapping(chain, map);
  95
  96 done:
  97         kfree(map->menu_info);
  98         kfree(map);
  99
 100         return ret;
 101 }
 102
 103 /* ------------------------------------------------------------------------
 104  * V4L2 interface
 105  */
 106
 107 /*
 108  * Find the frame interval closest to the requested frame interval for the
 109  * given frame format and size. This should be done by the device as part of
 110  * the Video Probe and Commit negotiation, but some hardware don't implement
 111  * that feature.
 112  */
 113 static __u32 uvc_try_frame_interval(struct uvc_frame *frame, __u32 interval)
 114 {
 115         unsigned int i;
 116
 117         if (frame->bFrameIntervalType) {
 118                 __u32 best = -1, dist;
 119
 120                 for (i = 0; i < frame->bFrameIntervalType; ++i) {
 121                         dist = interval > frame->dwFrameInterval[i]
 122                              ? interval - frame->dwFrameInterval[i]
 123                              : frame->dwFrameInterval[i] - interval;
 124
 125                         if (dist > best)
 126                                 break;
 127
 128                         best = dist;
 129                 }
 130
 131                 interval = frame->dwFrameInterval[i-1];
 132         } else {
 133                 const __u32 min = frame->dwFrameInterval[0];
 134                 const __u32 max = frame->dwFrameInterval[1];
 135                 const __u32 step = frame->dwFrameInterval[2];
 136
 137                 interval = min + (interval - min + step/2) / step * step;
 138                 if (interval > max)
 139                         interval = max;
 140         }
 141
 142         return interval;
 143 }
 144
 145 static int uvc_v4l2_try_format(struct uvc_streaming *stream,
 146         struct v4l2_format *fmt, struct uvc_streaming_control *probe,
 147         struct uvc_format **uvc_format, struct uvc_frame **uvc_frame)
 148 {
 149         struct uvc_format *format = NULL;
 150         struct uvc_frame *frame = NULL;
 151         __u16 rw, rh;
 152         unsigned int d, maxd;
 153         unsigned int i;
 154         __u32 interval;
 155         int ret = 0;
 156         __u8 *fcc;
 157
 158         if (fmt->type != stream->type)
 159                 return -EINVAL;
 160
 161         fcc = (__u8 *)&fmt->fmt.pix.pixelformat;
 162         uvc_trace(UVC_TRACE_FORMAT, "Trying format 0x%08x (%c%c%c%c): %ux%u.\n",
 163                         fmt->fmt.pix.pixelformat,
 164                         fcc[0], fcc[1], fcc[2], fcc[3],
 165                         fmt->fmt.pix.width, fmt->fmt.pix.height);
 166
 167         /* Check if the hardware supports the requested format, use the default
 168          * format otherwise.
 169          */
 170         for (i = 0; i < stream->nformats; ++i) {
 171                 format = &stream->format[i];
 172                 if (format->fcc == fmt->fmt.pix.pixelformat)
 173                         break;
 174         }
 175
 176         if (i == stream->nformats) {
 177                 format = stream->def_format;
 178                 fmt->fmt.pix.pixelformat = format->fcc;
 179         }
 180
 181         /* Find the closest image size. The distance between image sizes is
 182          * the size in pixels of the non-overlapping regions between the
 183          * requested size and the frame-specified size.
 184          */
 185         rw = fmt->fmt.pix.width;
 186         rh = fmt->fmt.pix.height;
 187         maxd = (unsigned int)-1;
 188
 189         for (i = 0; i < format->nframes; ++i) {
 190                 __u16 w = format->frame[i].wWidth;
 191                 __u16 h = format->frame[i].wHeight;
 192
 193                 d = min(w, rw) * min(h, rh);
 194                 d = w*h + rw*rh - 2*d;
 195                 if (d < maxd) {
 196                         maxd = d;
 197                         frame = &format->frame[i];
 198                 }
 199
 200                 if (maxd == 0)
 201                         break;
 202         }
 203
 204         if (frame == NULL) {
 205                 uvc_trace(UVC_TRACE_FORMAT, "Unsupported size %ux%u.\n",
 206                                 fmt->fmt.pix.width, fmt->fmt.pix.height);
 207                 return -EINVAL;
 208         }
 209
 210         /* Use the default frame interval. */
 211         interval = frame->dwDefaultFrameInterval;
 212         uvc_trace(UVC_TRACE_FORMAT, "Using default frame interval %u.%u us "
 213                 "(%u.%u fps).\n", interval/10, interval%10, 10000000/interval,
 214                 (100000000/interval)%10);
 215
 216         /* Set the format index, frame index and frame interval. */
 217         memset(probe, 0, sizeof *probe);
 218         probe->bmHint = 1;      /* dwFrameInterval */
 219         probe->bFormatIndex = format->index;
 220         probe->bFrameIndex = frame->bFrameIndex;
 221         probe->dwFrameInterval = uvc_try_frame_interval(frame, interval);
 222         /* Some webcams stall the probe control set request when the
 223          * dwMaxVideoFrameSize field is set to zero. The UVC specification
 224          * clearly states that the field is read-only from the host, so this
 225          * is a webcam bug. Set dwMaxVideoFrameSize to the value reported by
 226          * the webcam to work around the problem.
 227          *
 228          * The workaround could probably be enabled for all webcams, so the
 229          * quirk can be removed if needed. It's currently useful to detect
 230          * webcam bugs and fix them before they hit the market (providing
 231          * developers test their webcams with the Linux driver as well as with
 232          * the Windows driver).
 233          */
 234         mutex_lock(&stream->mutex);
 235         if (stream->dev->quirks & UVC_QUIRK_PROBE_EXTRAFIELDS)
 236                 probe->dwMaxVideoFrameSize =
 237                         stream->ctrl.dwMaxVideoFrameSize;
 238
 239         /* Probe the device. */
 240         ret = uvc_probe_video(stream, probe);
 241         mutex_unlock(&stream->mutex);
 242         if (ret < 0)
 243                 goto done;
 244
 245         fmt->fmt.pix.width = frame->wWidth;
 246         fmt->fmt.pix.height = frame->wHeight;
 247         fmt->fmt.pix.field = V4L2_FIELD_NONE;
 248         fmt->fmt.pix.bytesperline = format->bpp * frame->wWidth / 8;
 249         fmt->fmt.pix.sizeimage = probe->dwMaxVideoFrameSize;
 250         fmt->fmt.pix.colorspace = format->colorspace;
 251         fmt->fmt.pix.priv = 0;
 252
 253         if (uvc_format != NULL)
 254                 *uvc_format = format;
 255         if (uvc_frame != NULL)
 256                 *uvc_frame = frame;
 257
 258 done:
 259         return ret;
 260 }
 261
 262 static int uvc_v4l2_get_format(struct uvc_streaming *stream,
 263         struct v4l2_format *fmt)
 264 {
 265         struct uvc_format *format;
 266         struct uvc_frame *frame;
 267         int ret = 0;
 268
 269         if (fmt->type != stream->type)
 270                 return -EINVAL;
 271
 272         mutex_lock(&stream->mutex);
 273         format = stream->cur_format;
 274         frame = stream->cur_frame;
 275
 276         if (format == NULL || frame == NULL) {
 277                 ret = -EINVAL;
 278                 goto done;
 279         }
 280
 281         fmt->fmt.pix.pixelformat = format->fcc;
 282         fmt->fmt.pix.width = frame->wWidth;
 283         fmt->fmt.pix.height = frame->wHeight;
 284         fmt->fmt.pix.field = V4L2_FIELD_NONE;
 285         fmt->fmt.pix.bytesperline = format->bpp * frame->wWidth / 8;
 286         fmt->fmt.pix.sizeimage = stream->ctrl.dwMaxVideoFrameSize;
 287         fmt->fmt.pix.colorspace = format->colorspace;
 288         fmt->fmt.pix.priv = 0;
 289
 290 done:
 291         mutex_unlock(&stream->mutex);
 292         return ret;
 293 }
 294
 295 static int uvc_v4l2_set_format(struct uvc_streaming *stream,
 296         struct v4l2_format *fmt)
 297 {
 298         struct uvc_streaming_control probe;
 299         struct uvc_format *format;
 300         struct uvc_frame *frame;
 301         int ret;
 302
 303         if (fmt->type != stream->type)
 304                 return -EINVAL;
 305
 306         ret = uvc_v4l2_try_format(stream, fmt, &probe, &format, &frame);
 307         if (ret < 0)
 308                 return ret;
 309
 310         mutex_lock(&stream->mutex);
 311
 312         if (uvc_queue_allocated(&stream->queue)) {
 313                 ret = -EBUSY;
 314                 goto done;
 315         }
 316
 317         stream->ctrl = probe;
 318         stream->cur_format = format;
 319         stream->cur_frame = frame;
 320
 321 done:
 322         mutex_unlock(&stream->mutex);
 323         return ret;
 324 }
 325
 326 static int uvc_v4l2_get_streamparm(struct uvc_streaming *stream,
 327                 struct v4l2_streamparm *parm)
 328 {
 329         uint32_t numerator, denominator;
 330
 331         if (parm->type != stream->type)
 332                 return -EINVAL;
 333
 334         mutex_lock(&stream->mutex);
 335         numerator = stream->ctrl.dwFrameInterval;
 336         mutex_unlock(&stream->mutex);
 337
 338         denominator = 10000000;
 339         uvc_simplify_fraction(&numerator, &denominator, 8, 333);
 340
 341         memset(parm, 0, sizeof *parm);
 342         parm->type = stream->type;
 343
 344         if (stream->type == V4L2_BUF_TYPE_VIDEO_CAPTURE) {
 345                 parm->parm.capture.capability = V4L2_CAP_TIMEPERFRAME;
 346                 parm->parm.capture.capturemode = 0;
 347                 parm->parm.capture.timeperframe.numerator = numerator;
 348                 parm->parm.capture.timeperframe.denominator = denominator;
 349                 parm->parm.capture.extendedmode = 0;
 350                 parm->parm.capture.readbuffers = 0;
 351         } else {
 352                 parm->parm.output.capability = V4L2_CAP_TIMEPERFRAME;
 353                 parm->parm.output.outputmode = 0;
 354                 parm->parm.output.timeperframe.numerator = numerator;
 355                 parm->parm.output.timeperframe.denominator = denominator;
 356         }
 357
 358         return 0;
 359 }
 360
 361 static int uvc_v4l2_set_streamparm(struct uvc_streaming *stream,
 362                 struct v4l2_streamparm *parm)
 363 {
 364         struct uvc_streaming_control probe;
 365         struct v4l2_fract timeperframe;
 366         uint32_t interval;
 367         int ret;
 368
 369         if (parm->type != stream->type)
 370                 return -EINVAL;
 371
 372         if (parm->type == V4L2_BUF_TYPE_VIDEO_CAPTURE)
 373                 timeperframe = parm->parm.capture.timeperframe;
 374         else
 375                 timeperframe = parm->parm.output.timeperframe;
 376
 377         interval = uvc_fraction_to_interval(timeperframe.numerator,
 378                 timeperframe.denominator);
 379         uvc_trace(UVC_TRACE_FORMAT, "Setting frame interval to %u/%u (%u).\n",
 380                 timeperframe.numerator, timeperframe.denominator, interval);
 381
 382         mutex_lock(&stream->mutex);
 383
 384         if (uvc_queue_streaming(&stream->queue)) {
 385                 mutex_unlock(&stream->mutex);
 386                 return -EBUSY;
 387         }
 388
 389         probe = stream->ctrl;
 390         probe.dwFrameInterval =
 391                 uvc_try_frame_interval(stream->cur_frame, interval);
 392
 393         /* Probe the device with the new settings. */
 394         ret = uvc_probe_video(stream, &probe);
 395         if (ret < 0) {
 396                 mutex_unlock(&stream->mutex);
 397                 return ret;
 398         }
 399
 400         stream->ctrl = probe;
 401         mutex_unlock(&stream->mutex);
 402
 403         /* Return the actual frame period. */
 404         timeperframe.numerator = probe.dwFrameInterval;
 405         timeperframe.denominator = 10000000;
 406         uvc_simplify_fraction(&timeperframe.numerator,
 407                 &timeperframe.denominator, 8, 333);
 408
 409         if (parm->type == V4L2_BUF_TYPE_VIDEO_CAPTURE)
 410                 parm->parm.capture.timeperframe = timeperframe;
 411         else
 412                 parm->parm.output.timeperframe = timeperframe;
 413
 414         return 0;
 415 }
 416
 417 /* ------------------------------------------------------------------------
 418  * Privilege management
 419  */
 420
 421 /*
 422  * Privilege management is the multiple-open implementation basis. The current
 423  * implementation is completely transparent for the end-user and doesn't
 424  * require explicit use of the VIDIOC_G_PRIORITY and VIDIOC_S_PRIORITY ioctls.
 425  * Those ioctls enable finer control on the device (by making possible for a
 426  * user to request exclusive access to a device), but are not mature yet.
 427  * Switching to the V4L2 priority mechanism might be considered in the future
 428  * if this situation changes.
 429  *
 430  * Each open instance of a UVC device can either be in a privileged or
 431  * unprivileged state. Only a single instance can be in a privileged state at
 432  * a given time. Trying to perform an operation that requires privileges will
 433  * automatically acquire the required privileges if possible, or return -EBUSY
 434  * otherwise. Privileges are dismissed when closing the instance or when
 435  * freeing the video buffers using VIDIOC_REQBUFS.
 436  *
 437  * Operations that require privileges are:
 438  *
 439  * - VIDIOC_S_INPUT
 440  * - VIDIOC_S_PARM
 441  * - VIDIOC_S_FMT
 442  * - VIDIOC_REQBUFS
 443  */
 444 static int uvc_acquire_privileges(struct uvc_fh *handle)
 445 {
 446         /* Always succeed if the handle is already privileged. */
 447         if (handle->state == UVC_HANDLE_ACTIVE)
 448                 return 0;
 449
 450         /* Check if the device already has a privileged handle. */
 451         if (atomic_inc_return(&handle->stream->active) != 1) {
 452                 atomic_dec(&handle->stream->active);
 453                 return -EBUSY;
 454         }
 455
 456         handle->state = UVC_HANDLE_ACTIVE;
 457         return 0;
 458 }
 459
 460 static void uvc_dismiss_privileges(struct uvc_fh *handle)
 461 {
 462         if (handle->state == UVC_HANDLE_ACTIVE)
 463                 atomic_dec(&handle->stream->active);
 464
 465         handle->state = UVC_HANDLE_PASSIVE;
 466 }
 467
 468 static int uvc_has_privileges(struct uvc_fh *handle)
 469 {
 470         return handle->state == UVC_HANDLE_ACTIVE;
 471 }
 472
 473 /* ------------------------------------------------------------------------
 474  * V4L2 file operations
 475  */
 476
 477 static int uvc_v4l2_open(struct file *file)
 478 {
 479         struct uvc_streaming *stream;
 480         struct uvc_fh *handle;
 481         int ret = 0;
 482
 483         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_open\n");
 484         stream = video_drvdata(file);
 485
 486         if (stream->dev->state & UVC_DEV_DISCONNECTED)
 487                 return -ENODEV;
 488
 489         ret = usb_autopm_get_interface(stream->dev->intf);
 490         if (ret < 0)
 491                 return ret;
 492
 493         /* Create the device handle. */
 494         handle = kzalloc(sizeof *handle, GFP_KERNEL);
 495         if (handle == NULL) {
 496                 usb_autopm_put_interface(stream->dev->intf);
 497                 return -ENOMEM;
 498         }
 499
 500         mutex_lock(&stream->dev->lock);
 501         if (stream->dev->users == 0) {
 502                 ret = uvc_status_start(stream->dev, GFP_KERNEL);
 503                 if (ret < 0) {
 504                         mutex_unlock(&stream->dev->lock);
 505                         usb_autopm_put_interface(stream->dev->intf);
 506                         kfree(handle);
 507                         return ret;
 508                 }
 509         }
 510
 511         stream->dev->users++;
 512         mutex_unlock(&stream->dev->lock);
 513
 514         v4l2_fh_init(&handle->vfh, &stream->vdev);
 515         v4l2_fh_add(&handle->vfh);
 516         handle->chain = stream->chain;
 517         handle->stream = stream;
 518         handle->state = UVC_HANDLE_PASSIVE;
 519         file->private_data = handle;
 520
 521         return 0;
 522 }
 523
 524 static int uvc_v4l2_release(struct file *file)
 525 {
 526         struct uvc_fh *handle = file->private_data;
 527         struct uvc_streaming *stream = handle->stream;
 528
 529         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_release\n");
 530
 531         /* Only free resources if this is a privileged handle. */
 532         if (uvc_has_privileges(handle))
 533                 uvc_queue_release(&stream->queue);
 534
 535         /* Release the file handle. */
 536         uvc_dismiss_privileges(handle);
 537         v4l2_fh_del(&handle->vfh);
 538         v4l2_fh_exit(&handle->vfh);
 539         kfree(handle);
 540         file->private_data = NULL;
 541
 542         mutex_lock(&stream->dev->lock);
 543         if (--stream->dev->users == 0)
 544                 uvc_status_stop(stream->dev);
 545         mutex_unlock(&stream->dev->lock);
 546
 547         usb_autopm_put_interface(stream->dev->intf);
 548         return 0;
 549 }
 550
 551 static int uvc_ioctl_querycap(struct file *file, void *fh,
 552                               struct v4l2_capability *cap)
 553 {
 554         struct video_device *vdev = video_devdata(file);
 555         struct uvc_fh *handle = file->private_data;
 556         struct uvc_video_chain *chain = handle->chain;
 557         struct uvc_streaming *stream = handle->stream;
 558
 559         strlcpy(cap->driver, "uvcvideo", sizeof(cap->driver));
 560         strlcpy(cap->card, vdev->name, sizeof(cap->card));
 561         usb_make_path(stream->dev->udev, cap->bus_info, sizeof(cap->bus_info));
 562         cap->capabilities = V4L2_CAP_DEVICE_CAPS | V4L2_CAP_STREAMING
 563                           | chain->caps;
 564         if (stream->type == V4L2_BUF_TYPE_VIDEO_CAPTURE)
 565                 cap->device_caps = V4L2_CAP_VIDEO_CAPTURE | V4L2_CAP_STREAMING;
 566         else
 567                 cap->device_caps = V4L2_CAP_VIDEO_OUTPUT | V4L2_CAP_STREAMING;
 568
 569         return 0;
 570 }
 571
 572 static int uvc_ioctl_enum_fmt(struct uvc_streaming *stream,
 573                               struct v4l2_fmtdesc *fmt)
 574 {
 575         struct uvc_format *format;
 576         enum v4l2_buf_type type = fmt->type;
 577         __u32 index = fmt->index;
 578
 579         if (fmt->type != stream->type || fmt->index >= stream->nformats)
 580                 return -EINVAL;
 581
 582         memset(fmt, 0, sizeof(*fmt));
 583         fmt->index = index;
 584         fmt->type = type;
 585
 586         format = &stream->format[fmt->index];
 587         fmt->flags = 0;
 588         if (format->flags & UVC_FMT_FLAG_COMPRESSED)
 589                 fmt->flags |= V4L2_FMT_FLAG_COMPRESSED;
 590         strlcpy(fmt->description, format->name, sizeof(fmt->description));
 591         fmt->description[sizeof(fmt->description) - 1] = 0;
 592         fmt->pixelformat = format->fcc;
 593         return 0;
 594 }
 595
 596 static int uvc_ioctl_enum_fmt_vid_cap(struct file *file, void *fh,
 597                                       struct v4l2_fmtdesc *fmt)
 598 {
 599         struct uvc_fh *handle = fh;
 600         struct uvc_streaming *stream = handle->stream;
 601
 602         return uvc_ioctl_enum_fmt(stream, fmt);
 603 }
 604
 605 static int uvc_ioctl_enum_fmt_vid_out(struct file *file, void *fh,
 606                                       struct v4l2_fmtdesc *fmt)
 607 {
 608         struct uvc_fh *handle = fh;
 609         struct uvc_streaming *stream = handle->stream;
 610
 611         return uvc_ioctl_enum_fmt(stream, fmt);
 612 }
 613
 614 static int uvc_ioctl_g_fmt_vid_cap(struct file *file, void *fh,
 615                                    struct v4l2_format *fmt)
 616 {
 617         struct uvc_fh *handle = fh;
 618         struct uvc_streaming *stream = handle->stream;
 619
 620         return uvc_v4l2_get_format(stream, fmt);
 621 }
 622
 623 static int uvc_ioctl_g_fmt_vid_out(struct file *file, void *fh,
 624                                    struct v4l2_format *fmt)
 625 {
 626         struct uvc_fh *handle = fh;
 627         struct uvc_streaming *stream = handle->stream;
 628
 629         return uvc_v4l2_get_format(stream, fmt);
 630 }
 631
 632 static int uvc_ioctl_s_fmt_vid_cap(struct file *file, void *fh,
 633                                    struct v4l2_format *fmt)
 634 {
 635         struct uvc_fh *handle = fh;
 636         struct uvc_streaming *stream = handle->stream;
 637         int ret;
 638
 639         ret = uvc_acquire_privileges(handle);
 640         if (ret < 0)
 641                 return ret;
 642
 643         return uvc_v4l2_set_format(stream, fmt);
 644 }
 645
 646 static int uvc_ioctl_s_fmt_vid_out(struct file *file, void *fh,
 647                                    struct v4l2_format *fmt)
 648 {
 649         struct uvc_fh *handle = fh;
 650         struct uvc_streaming *stream = handle->stream;
 651         int ret;
 652
 653         ret = uvc_acquire_privileges(handle);
 654         if (ret < 0)
 655                 return ret;
 656
 657         return uvc_v4l2_set_format(stream, fmt);
 658 }
 659
 660 static int uvc_ioctl_try_fmt_vid_cap(struct file *file, void *fh,
 661                                      struct v4l2_format *fmt)
 662 {
 663         struct uvc_fh *handle = fh;
 664         struct uvc_streaming *stream = handle->stream;
 665         struct uvc_streaming_control probe;
 666
 667         return uvc_v4l2_try_format(stream, fmt, &probe, NULL, NULL);
 668 }
 669
 670 static int uvc_ioctl_try_fmt_vid_out(struct file *file, void *fh,
 671                                      struct v4l2_format *fmt)
 672 {
 673         struct uvc_fh *handle = fh;
 674         struct uvc_streaming *stream = handle->stream;
 675         struct uvc_streaming_control probe;
 676
 677         return uvc_v4l2_try_format(stream, fmt, &probe, NULL, NULL);
 678 }
 679
 680 static int uvc_ioctl_reqbufs(struct file *file, void *fh,
 681                              struct v4l2_requestbuffers *rb)
 682 {
 683         struct uvc_fh *handle = fh;
 684         struct uvc_streaming *stream = handle->stream;
 685         int ret;
 686
 687         ret = uvc_acquire_privileges(handle);
 688         if (ret < 0)
 689                 return ret;
 690
 691         mutex_lock(&stream->mutex);
 692         ret = uvc_request_buffers(&stream->queue, rb);
 693         mutex_unlock(&stream->mutex);
 694         if (ret < 0)
 695                 return ret;
 696
 697         if (ret == 0)
 698                 uvc_dismiss_privileges(handle);
 699
 700         return 0;
 701 }
 702
 703 static int uvc_ioctl_querybuf(struct file *file, void *fh,
 704                               struct v4l2_buffer *buf)
 705 {
 706         struct uvc_fh *handle = fh;
 707         struct uvc_streaming *stream = handle->stream;
 708
 709         if (!uvc_has_privileges(handle))
 710                 return -EBUSY;
 711
 712         return uvc_query_buffer(&stream->queue, buf);
 713 }
 714
 715 static int uvc_ioctl_qbuf(struct file *file, void *fh, struct v4l2_buffer *buf)
 716 {
 717         struct uvc_fh *handle = fh;
 718         struct uvc_streaming *stream = handle->stream;
 719
 720         if (!uvc_has_privileges(handle))
 721                 return -EBUSY;
 722
 723         return uvc_queue_buffer(&stream->queue, buf);
 724 }
 725
 726 static int uvc_ioctl_dqbuf(struct file *file, void *fh, struct v4l2_buffer *buf)
 727 {
 728         struct uvc_fh *handle = fh;
 729         struct uvc_streaming *stream = handle->stream;
 730
 731         if (!uvc_has_privileges(handle))
 732                 return -EBUSY;
 733
 734         return uvc_dequeue_buffer(&stream->queue, buf,
 735                                   file->f_flags & O_NONBLOCK);
 736 }
 737
 738 static int uvc_ioctl_create_bufs(struct file *file, void *fh,
 739                                   struct v4l2_create_buffers *cb)
 740 {
 741         struct uvc_fh *handle = fh;
 742         struct uvc_streaming *stream = handle->stream;
 743         int ret;
 744
 745         ret = uvc_acquire_privileges(handle);
 746         if (ret < 0)
 747                 return ret;
 748
 749         return uvc_create_buffers(&stream->queue, cb);
 750 }
 751
 752 static int uvc_ioctl_streamon(struct file *file, void *fh,
 753                               enum v4l2_buf_type type)
 754 {
 755         struct uvc_fh *handle = fh;
 756         struct uvc_streaming *stream = handle->stream;
 757         int ret;
 758
 759         if (!uvc_has_privileges(handle))
 760                 return -EBUSY;
 761
 762         mutex_lock(&stream->mutex);
 763         ret = uvc_queue_streamon(&stream->queue, type);
 764         mutex_unlock(&stream->mutex);
 765
 766         return ret;
 767 }
 768
 769 static int uvc_ioctl_streamoff(struct file *file, void *fh,
 770                                enum v4l2_buf_type type)
 771 {
 772         struct uvc_fh *handle = fh;
 773         struct uvc_streaming *stream = handle->stream;
 774
 775         if (!uvc_has_privileges(handle))
 776                 return -EBUSY;
 777
 778         mutex_lock(&stream->mutex);
 779         uvc_queue_streamoff(&stream->queue, type);
 780         mutex_unlock(&stream->mutex);
 781
 782         return 0;
 783 }
 784
 785 static int uvc_ioctl_enum_input(struct file *file, void *fh,
 786                                 struct v4l2_input *input)
 787 {
 788         struct uvc_fh *handle = fh;
 789         struct uvc_video_chain *chain = handle->chain;
 790         const struct uvc_entity *selector = chain->selector;
 791         struct uvc_entity *iterm = NULL;
 792         u32 index = input->index;
 793         int pin = 0;
 794
 795         if (selector == NULL ||
 796             (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
 797                 if (index != 0)
 798                         return -EINVAL;
 799                 list_for_each_entry(iterm, &chain->entities, chain) {
 800                         if (UVC_ENTITY_IS_ITERM(iterm))
 801                                 break;
 802                 }
 803                 pin = iterm->id;
 804         } else if (index < selector->bNrInPins) {
 805                 pin = selector->baSourceID[index];
 806                 list_for_each_entry(iterm, &chain->entities, chain) {
 807                         if (!UVC_ENTITY_IS_ITERM(iterm))
 808                                 continue;
 809                         if (iterm->id == pin)
 810                                 break;
 811                 }
 812         }
 813
 814         if (iterm == NULL || iterm->id != pin)
 815                 return -EINVAL;
 816
 817         memset(input, 0, sizeof(*input));
 818         input->index = index;
 819         strlcpy(input->name, iterm->name, sizeof(input->name));
 820         if (UVC_ENTITY_TYPE(iterm) == UVC_ITT_CAMERA)
 821                 input->type = V4L2_INPUT_TYPE_CAMERA;
 822
 823         return 0;
 824 }
 825
 826 static int uvc_ioctl_g_input(struct file *file, void *fh, unsigned int *input)
 827 {
 828         struct uvc_fh *handle = fh;
 829         struct uvc_video_chain *chain = handle->chain;
 830         int ret;
 831         u8 i;
 832
 833         if (chain->selector == NULL ||
 834             (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
 835                 *input = 0;
 836                 return 0;
 837         }
 838
 839         ret = uvc_query_ctrl(chain->dev, UVC_GET_CUR, chain->selector->id,
 840                              chain->dev->intfnum,  UVC_SU_INPUT_SELECT_CONTROL,
 841                              &i, 1);
 842         if (ret < 0)
 843                 return ret;
 844
 845         *input = i - 1;
 846         return 0;
 847 }
 848
 849 static int uvc_ioctl_s_input(struct file *file, void *fh, unsigned int input)
 850 {
 851         struct uvc_fh *handle = fh;
 852         struct uvc_video_chain *chain = handle->chain;
 853         int ret;
 854         u32 i;
 855
 856         ret = uvc_acquire_privileges(handle);
 857         if (ret < 0)
 858                 return ret;
 859
 860         if (chain->selector == NULL ||
 861             (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
 862                 if (input)
 863                         return -EINVAL;
 864                 return 0;
 865         }
 866
 867         if (input >= chain->selector->bNrInPins)
 868                 return -EINVAL;
 869
 870         i = input + 1;
 871         return uvc_query_ctrl(chain->dev, UVC_SET_CUR, chain->selector->id,
 872                               chain->dev->intfnum, UVC_SU_INPUT_SELECT_CONTROL,
 873                               &i, 1);
 874 }
 875
 876 static int uvc_ioctl_queryctrl(struct file *file, void *fh,
 877                                struct v4l2_queryctrl *qc)
 878 {
 879         struct uvc_fh *handle = fh;
 880         struct uvc_video_chain *chain = handle->chain;
 881
 882         return uvc_query_v4l2_ctrl(chain, qc);
 883 }
 884
 885 static int uvc_ioctl_query_ext_ctrl(struct file *file, void *fh,
 886                                     struct v4l2_query_ext_ctrl *qec)
 887 {
 888         struct uvc_fh *handle = fh;
 889         struct uvc_video_chain *chain = handle->chain;
 890         struct v4l2_queryctrl qc = { qec->id };
 891         int ret;
 892
 893         ret = uvc_query_v4l2_ctrl(chain, &qc);
 894         if (ret)
 895                 return ret;
 896
 897         qec->id = qc.id;
 898         qec->type = qc.type;
 899         strlcpy(qec->name, qc.name, sizeof(qec->name));
 900         qec->minimum = qc.minimum;
 901         qec->maximum = qc.maximum;
 902         qec->step = qc.step;
 903         qec->default_value = qc.default_value;
 904         qec->flags = qc.flags;
 905         qec->elem_size = 4;
 906         qec->elems = 1;
 907         qec->nr_of_dims = 0;
 908         memset(qec->dims, 0, sizeof(qec->dims));
 909         memset(qec->reserved, 0, sizeof(qec->reserved));
 910
 911         return 0;
 912 }
 913
 914 static int uvc_ioctl_g_ctrl(struct file *file, void *fh,
 915                             struct v4l2_control *ctrl)
 916 {
 917         struct uvc_fh *handle = fh;
 918         struct uvc_video_chain *chain = handle->chain;
 919         struct v4l2_ext_control xctrl;
 920         int ret;
 921
 922         memset(&xctrl, 0, sizeof(xctrl));
 923         xctrl.id = ctrl->id;
 924
 925         ret = uvc_ctrl_begin(chain);
 926         if (ret < 0)
 927                 return ret;
 928
 929         ret = uvc_ctrl_get(chain, &xctrl);
 930         uvc_ctrl_rollback(handle);
 931         if (ret < 0)
 932                 return ret;
 933
 934         ctrl->value = xctrl.value;
 935         return 0;
 936 }
 937
 938 static int uvc_ioctl_s_ctrl(struct file *file, void *fh,
 939                             struct v4l2_control *ctrl)
 940 {
 941         struct uvc_fh *handle = fh;
 942         struct uvc_video_chain *chain = handle->chain;
 943         struct v4l2_ext_control xctrl;
 944         int ret;
 945
 946         memset(&xctrl, 0, sizeof(xctrl));
 947         xctrl.id = ctrl->id;
 948         xctrl.value = ctrl->value;
 949
 950         ret = uvc_ctrl_begin(chain);
 951         if (ret < 0)
 952                 return ret;
 953
 954         ret = uvc_ctrl_set(chain, &xctrl);
 955         if (ret < 0) {
 956                 uvc_ctrl_rollback(handle);
 957                 return ret;
 958         }
 959
 960         ret = uvc_ctrl_commit(handle, &xctrl, 1);
 961         if (ret < 0)
 962                 return ret;
 963
 964         ctrl->value = xctrl.value;
 965         return 0;
 966 }
 967
 968 static int uvc_ioctl_g_ext_ctrls(struct file *file, void *fh,
 969                                  struct v4l2_ext_controls *ctrls)
 970 {
 971         struct uvc_fh *handle = fh;
 972         struct uvc_video_chain *chain = handle->chain;
 973         struct v4l2_ext_control *ctrl = ctrls->controls;
 974         unsigned int i;
 975         int ret;
 976
 977         ret = uvc_ctrl_begin(chain);
 978         if (ret < 0)
 979                 return ret;
 980
 981         for (i = 0; i < ctrls->count; ++ctrl, ++i) {
 982                 ret = uvc_ctrl_get(chain, ctrl);
 983                 if (ret < 0) {
 984                         uvc_ctrl_rollback(handle);
 985                         ctrls->error_idx = i;
 986                         return ret;
 987                 }
 988         }
 989
 990         ctrls->error_idx = 0;
 991
 992         return uvc_ctrl_rollback(handle);
 993 }
 994
 995 static int uvc_ioctl_s_try_ext_ctrls(struct uvc_fh *handle,
 996                                      struct v4l2_ext_controls *ctrls,
 997                                      bool commit)
 998 {
 999         struct v4l2_ext_control *ctrl = ctrls->controls;
1000         struct uvc_video_chain *chain = handle->chain;
1001         unsigned int i;
1002         int ret;
1003
1004         ret = uvc_ctrl_begin(chain);
1005         if (ret < 0)
1006                 return ret;
1007
1008         for (i = 0; i < ctrls->count; ++ctrl, ++i) {
1009                 ret = uvc_ctrl_set(chain, ctrl);
1010                 if (ret < 0) {
1011                         uvc_ctrl_rollback(handle);
1012                         ctrls->error_idx = commit ? ctrls->count : i;
1013                         return ret;
1014                 }
1015         }
1016
1017         ctrls->error_idx = 0;
1018
1019         if (commit)
1020                 return uvc_ctrl_commit(handle, ctrls->controls, ctrls->count);
1021         else
1022                 return uvc_ctrl_rollback(handle);
1023 }
1024
1025 static int uvc_ioctl_s_ext_ctrls(struct file *file, void *fh,
1026                                  struct v4l2_ext_controls *ctrls)
1027 {
1028         struct uvc_fh *handle = fh;
1029
1030         return uvc_ioctl_s_try_ext_ctrls(handle, ctrls, true);
1031 }
1032
1033 static int uvc_ioctl_try_ext_ctrls(struct file *file, void *fh,
1034                                    struct v4l2_ext_controls *ctrls)
1035 {
1036         struct uvc_fh *handle = fh;
1037
1038         return uvc_ioctl_s_try_ext_ctrls(handle, ctrls, false);
1039 }
1040
1041 static int uvc_ioctl_querymenu(struct file *file, void *fh,
1042                                struct v4l2_querymenu *qm)
1043 {
1044         struct uvc_fh *handle = fh;
1045         struct uvc_video_chain *chain = handle->chain;
1046
1047         return uvc_query_v4l2_menu(chain, qm);
1048 }
1049
1050 static int uvc_ioctl_g_selection(struct file *file, void *fh,
1051                                  struct v4l2_selection *sel)
1052 {
1053         struct uvc_fh *handle = fh;
1054         struct uvc_streaming *stream = handle->stream;
1055
1056         if (sel->type != stream->type)
1057                 return -EINVAL;
1058
1059         switch (sel->target) {
1060         case V4L2_SEL_TGT_CROP_DEFAULT:
1061         case V4L2_SEL_TGT_CROP_BOUNDS:
1062                 if (stream->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
1063                         return -EINVAL;
1064                 break;
1065         case V4L2_SEL_TGT_COMPOSE_DEFAULT:
1066         case V4L2_SEL_TGT_COMPOSE_BOUNDS:
1067                 if (stream->type != V4L2_BUF_TYPE_VIDEO_OUTPUT)
1068                         return -EINVAL;
1069                 break;
1070         default:
1071                 return -EINVAL;
1072         }
1073
1074         sel->r.left = 0;
1075         sel->r.top = 0;
1076         mutex_lock(&stream->mutex);
1077         sel->r.width = stream->cur_frame->wWidth;
1078         sel->r.height = stream->cur_frame->wHeight;
1079         mutex_unlock(&stream->mutex);
1080
1081         return 0;
1082 }
1083
1084 static int uvc_ioctl_g_parm(struct file *file, void *fh,
1085                             struct v4l2_streamparm *parm)
1086 {
1087         struct uvc_fh *handle = fh;
1088         struct uvc_streaming *stream = handle->stream;
1089
1090         return uvc_v4l2_get_streamparm(stream, parm);
1091 }
1092
1093 static int uvc_ioctl_s_parm(struct file *file, void *fh,
1094                             struct v4l2_streamparm *parm)
1095 {
1096         struct uvc_fh *handle = fh;
1097         struct uvc_streaming *stream = handle->stream;
1098         int ret;
1099
1100         ret = uvc_acquire_privileges(handle);
1101         if (ret < 0)
1102                 return ret;
1103
1104         return uvc_v4l2_set_streamparm(stream, parm);
1105 }
1106
1107 static int uvc_ioctl_enum_framesizes(struct file *file, void *fh,
1108                                      struct v4l2_frmsizeenum *fsize)
1109 {
1110         struct uvc_fh *handle = fh;
1111         struct uvc_streaming *stream = handle->stream;
1112         struct uvc_format *format = NULL;
1113         struct uvc_frame *frame;
1114         int i;
1115
1116         /* Look for the given pixel format */
1117         for (i = 0; i < stream->nformats; i++) {
1118                 if (stream->format[i].fcc == fsize->pixel_format) {
1119                         format = &stream->format[i];
1120                         break;
1121                 }
1122         }
1123         if (format == NULL)
1124                 return -EINVAL;
1125
1126         if (fsize->index >= format->nframes)
1127                 return -EINVAL;
1128
1129         frame = &format->frame[fsize->index];
1130         fsize->type = V4L2_FRMSIZE_TYPE_DISCRETE;
1131         fsize->discrete.width = frame->wWidth;
1132         fsize->discrete.height = frame->wHeight;
1133         return 0;
1134 }
1135
1136 static int uvc_ioctl_enum_frameintervals(struct file *file, void *fh,
1137                                          struct v4l2_frmivalenum *fival)
1138 {
1139         struct uvc_fh *handle = fh;
1140         struct uvc_streaming *stream = handle->stream;
1141         struct uvc_format *format = NULL;
1142         struct uvc_frame *frame = NULL;
1143         int i;
1144
1145         /* Look for the given pixel format and frame size */
1146         for (i = 0; i < stream->nformats; i++) {
1147                 if (stream->format[i].fcc == fival->pixel_format) {
1148                         format = &stream->format[i];
1149                         break;
1150                 }
1151         }
1152         if (format == NULL)
1153                 return -EINVAL;
1154
1155         for (i = 0; i < format->nframes; i++) {
1156                 if (format->frame[i].wWidth == fival->width &&
1157                     format->frame[i].wHeight == fival->height) {
1158                         frame = &format->frame[i];
1159                         break;
1160                 }
1161         }
1162         if (frame == NULL)
1163                 return -EINVAL;
1164
1165         if (frame->bFrameIntervalType) {
1166                 if (fival->index >= frame->bFrameIntervalType)
1167                         return -EINVAL;
1168
1169                 fival->type = V4L2_FRMIVAL_TYPE_DISCRETE;
1170                 fival->discrete.numerator =
1171                         frame->dwFrameInterval[fival->index];
1172                 fival->discrete.denominator = 10000000;
1173                 uvc_simplify_fraction(&fival->discrete.numerator,
1174                         &fival->discrete.denominator, 8, 333);
1175         } else {
1176                 if (fival->index)
1177                         return -EINVAL;
1178
1179                 fival->type = V4L2_FRMIVAL_TYPE_STEPWISE;
1180                 fival->stepwise.min.numerator = frame->dwFrameInterval[0];
1181                 fival->stepwise.min.denominator = 10000000;
1182                 fival->stepwise.max.numerator = frame->dwFrameInterval[1];
1183                 fival->stepwise.max.denominator = 10000000;
1184                 fival->stepwise.step.numerator = frame->dwFrameInterval[2];
1185                 fival->stepwise.step.denominator = 10000000;
1186                 uvc_simplify_fraction(&fival->stepwise.min.numerator,
1187                         &fival->stepwise.min.denominator, 8, 333);
1188                 uvc_simplify_fraction(&fival->stepwise.max.numerator,
1189                         &fival->stepwise.max.denominator, 8, 333);
1190                 uvc_simplify_fraction(&fival->stepwise.step.numerator,
1191                         &fival->stepwise.step.denominator, 8, 333);
1192         }
1193
1194         return 0;
1195 }
1196
1197 static int uvc_ioctl_subscribe_event(struct v4l2_fh *fh,
1198                                      const struct v4l2_event_subscription *sub)
1199 {
1200         switch (sub->type) {
1201         case V4L2_EVENT_CTRL:
1202                 return v4l2_event_subscribe(fh, sub, 0, &uvc_ctrl_sub_ev_ops);
1203         default:
1204                 return -EINVAL;
1205         }
1206 }
1207
1208 static long uvc_ioctl_default(struct file *file, void *fh, bool valid_prio,
1209                               unsigned int cmd, void *arg)
1210 {
1211         struct uvc_fh *handle = fh;
1212         struct uvc_video_chain *chain = handle->chain;
1213
1214         switch (cmd) {
1215         /* Dynamic controls. */
1216         case UVCIOC_CTRL_MAP:
1217                 return uvc_ioctl_ctrl_map(chain, arg);
1218
1219         case UVCIOC_CTRL_QUERY:
1220                 return uvc_xu_ctrl_query(chain, arg);
1221
1222         default:
1223                 return -ENOTTY;
1224         }
1225 }
1226
1227 #ifdef CONFIG_COMPAT
1228 struct uvc_xu_control_mapping32 {
1229         __u32 id;
1230         __u8 name[32];
1231         __u8 entity[16];
1232         __u8 selector;
1233
1234         __u8 size;
1235         __u8 offset;
1236         __u32 v4l2_type;
1237         __u32 data_type;
1238
1239         compat_caddr_t menu_info;
1240         __u32 menu_count;
1241
1242         __u32 reserved[4];
1243 };
1244
1245 static int uvc_v4l2_get_xu_mapping(struct uvc_xu_control_mapping *kp,
1246                         const struct uvc_xu_control_mapping32 __user *up)
1247 {
1248         struct uvc_menu_info __user *umenus;
1249         struct uvc_menu_info __user *kmenus;
1250         compat_caddr_t p;
1251
1252         if (!access_ok(VERIFY_READ, up, sizeof(*up)) ||
1253             __copy_from_user(kp, up, offsetof(typeof(*up), menu_info)) ||
1254             __get_user(kp->menu_count, &up->menu_count))
1255                 return -EFAULT;
1256
1257         memset(kp->reserved, 0, sizeof(kp->reserved));
1258
1259         if (kp->menu_count == 0) {
1260                 kp->menu_info = NULL;
1261                 return 0;
1262         }
1263
1264         if (__get_user(p, &up->menu_info))
1265                 return -EFAULT;
1266         umenus = compat_ptr(p);
1267         if (!access_ok(VERIFY_READ, umenus, kp->menu_count * sizeof(*umenus)))
1268                 return -EFAULT;
1269
1270         kmenus = compat_alloc_user_space(kp->menu_count * sizeof(*kmenus));
1271         if (kmenus == NULL)
1272                 return -EFAULT;
1273         kp->menu_info = kmenus;
1274
1275         if (copy_in_user(kmenus, umenus, kp->menu_count * sizeof(*umenus)))
1276                 return -EFAULT;
1277
1278         return 0;
1279 }
1280
1281 static int uvc_v4l2_put_xu_mapping(const struct uvc_xu_control_mapping *kp,
1282                         struct uvc_xu_control_mapping32 __user *up)
1283 {
1284         struct uvc_menu_info __user *umenus;
1285         struct uvc_menu_info __user *kmenus = kp->menu_info;
1286         compat_caddr_t p;
1287
1288         if (!access_ok(VERIFY_WRITE, up, sizeof(*up)) ||
1289             __copy_to_user(up, kp, offsetof(typeof(*up), menu_info)) ||
1290             __put_user(kp->menu_count, &up->menu_count))
1291                 return -EFAULT;
1292
1293         if (__clear_user(up->reserved, sizeof(up->reserved)))
1294                 return -EFAULT;
1295
1296         if (kp->menu_count == 0)
1297                 return 0;
1298
1299         if (get_user(p, &up->menu_info))
1300                 return -EFAULT;
1301         umenus = compat_ptr(p);
1302
1303         if (copy_in_user(umenus, kmenus, kp->menu_count * sizeof(*umenus)))
1304                 return -EFAULT;
1305
1306         return 0;
1307 }
1308
1309 struct uvc_xu_control_query32 {
1310         __u8 unit;
1311         __u8 selector;
1312         __u8 query;
1313         __u16 size;
1314         compat_caddr_t data;
1315 };
1316
1317 static int uvc_v4l2_get_xu_query(struct uvc_xu_control_query *kp,
1318                         const struct uvc_xu_control_query32 __user *up)
1319 {
1320         u8 __user *udata;
1321         u8 __user *kdata;
1322         compat_caddr_t p;
1323
1324         if (!access_ok(VERIFY_READ, up, sizeof(*up)) ||
1325             __copy_from_user(kp, up, offsetof(typeof(*up), data)))
1326                 return -EFAULT;
1327
1328         if (kp->size == 0) {
1329                 kp->data = NULL;
1330                 return 0;
1331         }
1332
1333         if (__get_user(p, &up->data))
1334                 return -EFAULT;
1335         udata = compat_ptr(p);
1336         if (!access_ok(VERIFY_READ, udata, kp->size))
1337                 return -EFAULT;
1338
1339         kdata = compat_alloc_user_space(kp->size);
1340         if (kdata == NULL)
1341                 return -EFAULT;
1342         kp->data = kdata;
1343
1344         if (copy_in_user(kdata, udata, kp->size))
1345                 return -EFAULT;
1346
1347         return 0;
1348 }
1349
1350 static int uvc_v4l2_put_xu_query(const struct uvc_xu_control_query *kp,
1351                         struct uvc_xu_control_query32 __user *up)
1352 {
1353         u8 __user *udata;
1354         u8 __user *kdata = kp->data;
1355         compat_caddr_t p;
1356
1357         if (!access_ok(VERIFY_WRITE, up, sizeof(*up)) ||
1358             __copy_to_user(up, kp, offsetof(typeof(*up), data)))
1359                 return -EFAULT;
1360
1361         if (kp->size == 0)
1362                 return 0;
1363
1364         if (get_user(p, &up->data))
1365                 return -EFAULT;
1366         udata = compat_ptr(p);
1367         if (!access_ok(VERIFY_READ, udata, kp->size))
1368                 return -EFAULT;
1369
1370         if (copy_in_user(udata, kdata, kp->size))
1371                 return -EFAULT;
1372
1373         return 0;
1374 }
1375
1376 #define UVCIOC_CTRL_MAP32       _IOWR('u', 0x20, struct uvc_xu_control_mapping32)
1377 #define UVCIOC_CTRL_QUERY32     _IOWR('u', 0x21, struct uvc_xu_control_query32)
1378
1379 static long uvc_v4l2_compat_ioctl32(struct file *file,
1380                      unsigned int cmd, unsigned long arg)
1381 {
1382         union {
1383                 struct uvc_xu_control_mapping xmap;
1384                 struct uvc_xu_control_query xqry;
1385         } karg;
1386         void __user *up = compat_ptr(arg);
1387         mm_segment_t old_fs;
1388         long ret;
1389
1390         switch (cmd) {
1391         case UVCIOC_CTRL_MAP32:
1392                 cmd = UVCIOC_CTRL_MAP;
1393                 ret = uvc_v4l2_get_xu_mapping(&karg.xmap, up);
1394                 break;
1395
1396         case UVCIOC_CTRL_QUERY32:
1397                 cmd = UVCIOC_CTRL_QUERY;
1398                 ret = uvc_v4l2_get_xu_query(&karg.xqry, up);
1399                 break;
1400
1401         default:
1402                 return -ENOIOCTLCMD;
1403         }
1404
1405         old_fs = get_fs();
1406         set_fs(KERNEL_DS);
1407         ret = video_ioctl2(file, cmd, (unsigned long)&karg);
1408         set_fs(old_fs);
1409
1410         if (ret < 0)
1411                 return ret;
1412
1413         switch (cmd) {
1414         case UVCIOC_CTRL_MAP:
1415                 ret = uvc_v4l2_put_xu_mapping(&karg.xmap, up);
1416                 break;
1417
1418         case UVCIOC_CTRL_QUERY:
1419                 ret = uvc_v4l2_put_xu_query(&karg.xqry, up);
1420                 break;
1421         }
1422
1423         return ret;
1424 }
1425 #endif
1426
1427 static ssize_t uvc_v4l2_read(struct file *file, char __user *data,
1428                     size_t count, loff_t *ppos)
1429 {
1430         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_read: not implemented.\n");
1431         return -EINVAL;
1432 }
1433
1434 static int uvc_v4l2_mmap(struct file *file, struct vm_area_struct *vma)
1435 {
1436         struct uvc_fh *handle = file->private_data;
1437         struct uvc_streaming *stream = handle->stream;
1438
1439         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_mmap\n");
1440
1441         return uvc_queue_mmap(&stream->queue, vma);
1442 }
1443
1444 static unsigned int uvc_v4l2_poll(struct file *file, poll_table *wait)
1445 {
1446         struct uvc_fh *handle = file->private_data;
1447         struct uvc_streaming *stream = handle->stream;
1448
1449         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_poll\n");
1450
1451         return uvc_queue_poll(&stream->queue, file, wait);
1452 }
1453
1454 #ifndef CONFIG_MMU
1455 static unsigned long uvc_v4l2_get_unmapped_area(struct file *file,
1456                 unsigned long addr, unsigned long len, unsigned long pgoff,
1457                 unsigned long flags)
1458 {
1459         struct uvc_fh *handle = file->private_data;
1460         struct uvc_streaming *stream = handle->stream;
1461
1462         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_get_unmapped_area\n");
1463
1464         return uvc_queue_get_unmapped_area(&stream->queue, pgoff);
1465 }
1466 #endif
1467
1468 const struct v4l2_ioctl_ops uvc_ioctl_ops = {
1469         .vidioc_querycap = uvc_ioctl_querycap,
1470         .vidioc_enum_fmt_vid_cap = uvc_ioctl_enum_fmt_vid_cap,
1471         .vidioc_enum_fmt_vid_out = uvc_ioctl_enum_fmt_vid_out,
1472         .vidioc_g_fmt_vid_cap = uvc_ioctl_g_fmt_vid_cap,
1473         .vidioc_g_fmt_vid_out = uvc_ioctl_g_fmt_vid_out,
1474         .vidioc_s_fmt_vid_cap = uvc_ioctl_s_fmt_vid_cap,
1475         .vidioc_s_fmt_vid_out = uvc_ioctl_s_fmt_vid_out,
1476         .vidioc_try_fmt_vid_cap = uvc_ioctl_try_fmt_vid_cap,
1477         .vidioc_try_fmt_vid_out = uvc_ioctl_try_fmt_vid_out,
1478         .vidioc_reqbufs = uvc_ioctl_reqbufs,
1479         .vidioc_querybuf = uvc_ioctl_querybuf,
1480         .vidioc_qbuf = uvc_ioctl_qbuf,
1481         .vidioc_dqbuf = uvc_ioctl_dqbuf,
1482         .vidioc_create_bufs = uvc_ioctl_create_bufs,
1483         .vidioc_streamon = uvc_ioctl_streamon,
1484         .vidioc_streamoff = uvc_ioctl_streamoff,
1485         .vidioc_enum_input = uvc_ioctl_enum_input,
1486         .vidioc_g_input = uvc_ioctl_g_input,
1487         .vidioc_s_input = uvc_ioctl_s_input,
1488         .vidioc_queryctrl = uvc_ioctl_queryctrl,
1489         .vidioc_query_ext_ctrl = uvc_ioctl_query_ext_ctrl,
1490         .vidioc_g_ctrl = uvc_ioctl_g_ctrl,
1491         .vidioc_s_ctrl = uvc_ioctl_s_ctrl,
1492         .vidioc_g_ext_ctrls = uvc_ioctl_g_ext_ctrls,
1493         .vidioc_s_ext_ctrls = uvc_ioctl_s_ext_ctrls,
1494         .vidioc_try_ext_ctrls = uvc_ioctl_try_ext_ctrls,
1495         .vidioc_querymenu = uvc_ioctl_querymenu,
1496         .vidioc_g_selection = uvc_ioctl_g_selection,
1497         .vidioc_g_parm = uvc_ioctl_g_parm,
1498         .vidioc_s_parm = uvc_ioctl_s_parm,
1499         .vidioc_enum_framesizes = uvc_ioctl_enum_framesizes,
1500         .vidioc_enum_frameintervals = uvc_ioctl_enum_frameintervals,
1501         .vidioc_subscribe_event = uvc_ioctl_subscribe_event,
1502         .vidioc_unsubscribe_event = v4l2_event_unsubscribe,
1503         .vidioc_default = uvc_ioctl_default,
1504 };
1505
1506 const struct v4l2_file_operations uvc_fops = {
1507         .owner          = THIS_MODULE,
1508         .open           = uvc_v4l2_open,
1509         .release        = uvc_v4l2_release,
1510         .unlocked_ioctl = video_ioctl2,
1511 #ifdef CONFIG_COMPAT
1512         .compat_ioctl32 = uvc_v4l2_compat_ioctl32,
1513 #endif
1514         .read           = uvc_v4l2_read,
1515         .mmap           = uvc_v4l2_mmap,
1516         .poll           = uvc_v4l2_poll,
1517 #ifndef CONFIG_MMU
1518         .get_unmapped_area = uvc_v4l2_get_unmapped_area,
1519 #endif
1520 };
1521