1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * Video capture interface for Linux version 2
4  *
5  * A generic framework to process V4L2 ioctl commands.
6  *
7  * Authors:	Alan Cox, <alan@lxorguk.ukuu.org.uk> (version 1)
8  *              Mauro Carvalho Chehab <mchehab@kernel.org> (version 2)
9  */
10 
11 #include <linux/compat.h>
12 #include <linux/mm.h>
13 #include <linux/module.h>
14 #include <linux/slab.h>
15 #include <linux/types.h>
16 #include <linux/kernel.h>
17 #include <linux/version.h>
18 
19 #include <linux/videodev2.h>
20 
21 #include <media/v4l2-common.h>
22 #include <media/v4l2-ioctl.h>
23 #include <media/v4l2-ctrls.h>
24 #include <media/v4l2-fh.h>
25 #include <media/v4l2-event.h>
26 #include <media/v4l2-device.h>
27 #include <media/videobuf2-v4l2.h>
28 #include <media/v4l2-mc.h>
29 #include <media/v4l2-mem2mem.h>
30 
31 #include <trace/events/v4l2.h>
32 
33 /* Zero out the end of the struct pointed to by p.  Everything after, but
34  * not including, the specified field is cleared. */
35 #define CLEAR_AFTER_FIELD(p, field) \
36 	memset((u8 *)(p) + offsetof(typeof(*(p)), field) + sizeof((p)->field), \
37 	0, sizeof(*(p)) - offsetof(typeof(*(p)), field) - sizeof((p)->field))
38 
39 #define is_valid_ioctl(vfd, cmd) test_bit(_IOC_NR(cmd), (vfd)->valid_ioctls)
40 
41 struct std_descr {
42 	v4l2_std_id std;
43 	const char *descr;
44 };
45 
46 static const struct std_descr standards[] = {
47 	{ V4L2_STD_NTSC,	"NTSC"      },
48 	{ V4L2_STD_NTSC_M,	"NTSC-M"    },
49 	{ V4L2_STD_NTSC_M_JP,	"NTSC-M-JP" },
50 	{ V4L2_STD_NTSC_M_KR,	"NTSC-M-KR" },
51 	{ V4L2_STD_NTSC_443,	"NTSC-443"  },
52 	{ V4L2_STD_PAL,		"PAL"       },
53 	{ V4L2_STD_PAL_BG,	"PAL-BG"    },
54 	{ V4L2_STD_PAL_B,	"PAL-B"     },
55 	{ V4L2_STD_PAL_B1,	"PAL-B1"    },
56 	{ V4L2_STD_PAL_G,	"PAL-G"     },
57 	{ V4L2_STD_PAL_H,	"PAL-H"     },
58 	{ V4L2_STD_PAL_I,	"PAL-I"     },
59 	{ V4L2_STD_PAL_DK,	"PAL-DK"    },
60 	{ V4L2_STD_PAL_D,	"PAL-D"     },
61 	{ V4L2_STD_PAL_D1,	"PAL-D1"    },
62 	{ V4L2_STD_PAL_K,	"PAL-K"     },
63 	{ V4L2_STD_PAL_M,	"PAL-M"     },
64 	{ V4L2_STD_PAL_N,	"PAL-N"     },
65 	{ V4L2_STD_PAL_Nc,	"PAL-Nc"    },
66 	{ V4L2_STD_PAL_60,	"PAL-60"    },
67 	{ V4L2_STD_SECAM,	"SECAM"     },
68 	{ V4L2_STD_SECAM_B,	"SECAM-B"   },
69 	{ V4L2_STD_SECAM_G,	"SECAM-G"   },
70 	{ V4L2_STD_SECAM_H,	"SECAM-H"   },
71 	{ V4L2_STD_SECAM_DK,	"SECAM-DK"  },
72 	{ V4L2_STD_SECAM_D,	"SECAM-D"   },
73 	{ V4L2_STD_SECAM_K,	"SECAM-K"   },
74 	{ V4L2_STD_SECAM_K1,	"SECAM-K1"  },
75 	{ V4L2_STD_SECAM_L,	"SECAM-L"   },
76 	{ V4L2_STD_SECAM_LC,	"SECAM-Lc"  },
77 	{ 0,			"Unknown"   }
78 };
79 
80 /* video4linux standard ID conversion to standard name
81  */
v4l2_norm_to_name(v4l2_std_id id)82 const char *v4l2_norm_to_name(v4l2_std_id id)
83 {
84 	u32 myid = id;
85 	int i;
86 
87 	/* HACK: ppc32 architecture doesn't have __ucmpdi2 function to handle
88 	   64 bit comparisons. So, on that architecture, with some gcc
89 	   variants, compilation fails. Currently, the max value is 30bit wide.
90 	 */
91 	BUG_ON(myid != id);
92 
93 	for (i = 0; standards[i].std; i++)
94 		if (myid == standards[i].std)
95 			break;
96 	return standards[i].descr;
97 }
98 EXPORT_SYMBOL(v4l2_norm_to_name);
99 
100 /* Returns frame period for the given standard */
v4l2_video_std_frame_period(int id,struct v4l2_fract * frameperiod)101 void v4l2_video_std_frame_period(int id, struct v4l2_fract *frameperiod)
102 {
103 	if (id & V4L2_STD_525_60) {
104 		frameperiod->numerator = 1001;
105 		frameperiod->denominator = 30000;
106 	} else {
107 		frameperiod->numerator = 1;
108 		frameperiod->denominator = 25;
109 	}
110 }
111 EXPORT_SYMBOL(v4l2_video_std_frame_period);
112 
113 /* Fill in the fields of a v4l2_standard structure according to the
114    'id' and 'transmission' parameters.  Returns negative on error.  */
v4l2_video_std_construct(struct v4l2_standard * vs,int id,const char * name)115 int v4l2_video_std_construct(struct v4l2_standard *vs,
116 			     int id, const char *name)
117 {
118 	vs->id = id;
119 	v4l2_video_std_frame_period(id, &vs->frameperiod);
120 	vs->framelines = (id & V4L2_STD_525_60) ? 525 : 625;
121 	strscpy(vs->name, name, sizeof(vs->name));
122 	return 0;
123 }
124 EXPORT_SYMBOL(v4l2_video_std_construct);
125 
126 /* Fill in the fields of a v4l2_standard structure according to the
127  * 'id' and 'vs->index' parameters. Returns negative on error. */
v4l_video_std_enumstd(struct v4l2_standard * vs,v4l2_std_id id)128 int v4l_video_std_enumstd(struct v4l2_standard *vs, v4l2_std_id id)
129 {
130 	v4l2_std_id curr_id = 0;
131 	unsigned int index = vs->index, i, j = 0;
132 	const char *descr = "";
133 
134 	/* Return -ENODATA if the id for the current input
135 	   or output is 0, meaning that it doesn't support this API. */
136 	if (id == 0)
137 		return -ENODATA;
138 
139 	/* Return norm array in a canonical way */
140 	for (i = 0; i <= index && id; i++) {
141 		/* last std value in the standards array is 0, so this
142 		   while always ends there since (id & 0) == 0. */
143 		while ((id & standards[j].std) != standards[j].std)
144 			j++;
145 		curr_id = standards[j].std;
146 		descr = standards[j].descr;
147 		j++;
148 		if (curr_id == 0)
149 			break;
150 		if (curr_id != V4L2_STD_PAL &&
151 				curr_id != V4L2_STD_SECAM &&
152 				curr_id != V4L2_STD_NTSC)
153 			id &= ~curr_id;
154 	}
155 	if (i <= index)
156 		return -EINVAL;
157 
158 	v4l2_video_std_construct(vs, curr_id, descr);
159 	return 0;
160 }
161 
162 /* ----------------------------------------------------------------- */
163 /* some arrays for pretty-printing debug messages of enum types      */
164 
165 const char *v4l2_field_names[] = {
166 	[V4L2_FIELD_ANY]        = "any",
167 	[V4L2_FIELD_NONE]       = "none",
168 	[V4L2_FIELD_TOP]        = "top",
169 	[V4L2_FIELD_BOTTOM]     = "bottom",
170 	[V4L2_FIELD_INTERLACED] = "interlaced",
171 	[V4L2_FIELD_SEQ_TB]     = "seq-tb",
172 	[V4L2_FIELD_SEQ_BT]     = "seq-bt",
173 	[V4L2_FIELD_ALTERNATE]  = "alternate",
174 	[V4L2_FIELD_INTERLACED_TB] = "interlaced-tb",
175 	[V4L2_FIELD_INTERLACED_BT] = "interlaced-bt",
176 };
177 EXPORT_SYMBOL(v4l2_field_names);
178 
179 const char *v4l2_type_names[] = {
180 	[0]				   = "0",
181 	[V4L2_BUF_TYPE_VIDEO_CAPTURE]      = "vid-cap",
182 	[V4L2_BUF_TYPE_VIDEO_OVERLAY]      = "vid-overlay",
183 	[V4L2_BUF_TYPE_VIDEO_OUTPUT]       = "vid-out",
184 	[V4L2_BUF_TYPE_VBI_CAPTURE]        = "vbi-cap",
185 	[V4L2_BUF_TYPE_VBI_OUTPUT]         = "vbi-out",
186 	[V4L2_BUF_TYPE_SLICED_VBI_CAPTURE] = "sliced-vbi-cap",
187 	[V4L2_BUF_TYPE_SLICED_VBI_OUTPUT]  = "sliced-vbi-out",
188 	[V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY] = "vid-out-overlay",
189 	[V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE] = "vid-cap-mplane",
190 	[V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE] = "vid-out-mplane",
191 	[V4L2_BUF_TYPE_SDR_CAPTURE]        = "sdr-cap",
192 	[V4L2_BUF_TYPE_SDR_OUTPUT]         = "sdr-out",
193 	[V4L2_BUF_TYPE_META_CAPTURE]       = "meta-cap",
194 	[V4L2_BUF_TYPE_META_OUTPUT]	   = "meta-out",
195 };
196 EXPORT_SYMBOL(v4l2_type_names);
197 
198 static const char *v4l2_memory_names[] = {
199 	[V4L2_MEMORY_MMAP]    = "mmap",
200 	[V4L2_MEMORY_USERPTR] = "userptr",
201 	[V4L2_MEMORY_OVERLAY] = "overlay",
202 	[V4L2_MEMORY_DMABUF] = "dmabuf",
203 };
204 
205 #define prt_names(a, arr) (((unsigned)(a)) < ARRAY_SIZE(arr) ? arr[a] : "unknown")
206 
207 /* ------------------------------------------------------------------ */
208 /* debug help functions                                               */
209 
v4l_print_querycap(const void * arg,bool write_only)210 static void v4l_print_querycap(const void *arg, bool write_only)
211 {
212 	const struct v4l2_capability *p = arg;
213 
214 	pr_cont("driver=%.*s, card=%.*s, bus=%.*s, version=0x%08x, capabilities=0x%08x, device_caps=0x%08x\n",
215 		(int)sizeof(p->driver), p->driver,
216 		(int)sizeof(p->card), p->card,
217 		(int)sizeof(p->bus_info), p->bus_info,
218 		p->version, p->capabilities, p->device_caps);
219 }
220 
v4l_print_enuminput(const void * arg,bool write_only)221 static void v4l_print_enuminput(const void *arg, bool write_only)
222 {
223 	const struct v4l2_input *p = arg;
224 
225 	pr_cont("index=%u, name=%.*s, type=%u, audioset=0x%x, tuner=%u, std=0x%08Lx, status=0x%x, capabilities=0x%x\n",
226 		p->index, (int)sizeof(p->name), p->name, p->type, p->audioset,
227 		p->tuner, (unsigned long long)p->std, p->status,
228 		p->capabilities);
229 }
230 
v4l_print_enumoutput(const void * arg,bool write_only)231 static void v4l_print_enumoutput(const void *arg, bool write_only)
232 {
233 	const struct v4l2_output *p = arg;
234 
235 	pr_cont("index=%u, name=%.*s, type=%u, audioset=0x%x, modulator=%u, std=0x%08Lx, capabilities=0x%x\n",
236 		p->index, (int)sizeof(p->name), p->name, p->type, p->audioset,
237 		p->modulator, (unsigned long long)p->std, p->capabilities);
238 }
239 
v4l_print_audio(const void * arg,bool write_only)240 static void v4l_print_audio(const void *arg, bool write_only)
241 {
242 	const struct v4l2_audio *p = arg;
243 
244 	if (write_only)
245 		pr_cont("index=%u, mode=0x%x\n", p->index, p->mode);
246 	else
247 		pr_cont("index=%u, name=%.*s, capability=0x%x, mode=0x%x\n",
248 			p->index, (int)sizeof(p->name), p->name,
249 			p->capability, p->mode);
250 }
251 
v4l_print_audioout(const void * arg,bool write_only)252 static void v4l_print_audioout(const void *arg, bool write_only)
253 {
254 	const struct v4l2_audioout *p = arg;
255 
256 	if (write_only)
257 		pr_cont("index=%u\n", p->index);
258 	else
259 		pr_cont("index=%u, name=%.*s, capability=0x%x, mode=0x%x\n",
260 			p->index, (int)sizeof(p->name), p->name,
261 			p->capability, p->mode);
262 }
263 
v4l_print_fmtdesc(const void * arg,bool write_only)264 static void v4l_print_fmtdesc(const void *arg, bool write_only)
265 {
266 	const struct v4l2_fmtdesc *p = arg;
267 
268 	pr_cont("index=%u, type=%s, flags=0x%x, pixelformat=%p4cc, mbus_code=0x%04x, description='%.*s'\n",
269 		p->index, prt_names(p->type, v4l2_type_names),
270 		p->flags, &p->pixelformat, p->mbus_code,
271 		(int)sizeof(p->description), p->description);
272 }
273 
v4l_print_format(const void * arg,bool write_only)274 static void v4l_print_format(const void *arg, bool write_only)
275 {
276 	const struct v4l2_format *p = arg;
277 	const struct v4l2_pix_format *pix;
278 	const struct v4l2_pix_format_mplane *mp;
279 	const struct v4l2_vbi_format *vbi;
280 	const struct v4l2_sliced_vbi_format *sliced;
281 	const struct v4l2_window *win;
282 	const struct v4l2_sdr_format *sdr;
283 	const struct v4l2_meta_format *meta;
284 	u32 planes;
285 	unsigned i;
286 
287 	pr_cont("type=%s", prt_names(p->type, v4l2_type_names));
288 	switch (p->type) {
289 	case V4L2_BUF_TYPE_VIDEO_CAPTURE:
290 	case V4L2_BUF_TYPE_VIDEO_OUTPUT:
291 		pix = &p->fmt.pix;
292 		pr_cont(", width=%u, height=%u, pixelformat=%p4cc, field=%s, bytesperline=%u, sizeimage=%u, colorspace=%d, flags=0x%x, ycbcr_enc=%u, quantization=%u, xfer_func=%u\n",
293 			pix->width, pix->height, &pix->pixelformat,
294 			prt_names(pix->field, v4l2_field_names),
295 			pix->bytesperline, pix->sizeimage,
296 			pix->colorspace, pix->flags, pix->ycbcr_enc,
297 			pix->quantization, pix->xfer_func);
298 		break;
299 	case V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE:
300 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE:
301 		mp = &p->fmt.pix_mp;
302 		pr_cont(", width=%u, height=%u, format=%p4cc, field=%s, colorspace=%d, num_planes=%u, flags=0x%x, ycbcr_enc=%u, quantization=%u, xfer_func=%u\n",
303 			mp->width, mp->height, &mp->pixelformat,
304 			prt_names(mp->field, v4l2_field_names),
305 			mp->colorspace, mp->num_planes, mp->flags,
306 			mp->ycbcr_enc, mp->quantization, mp->xfer_func);
307 		planes = min_t(u32, mp->num_planes, VIDEO_MAX_PLANES);
308 		for (i = 0; i < planes; i++)
309 			printk(KERN_DEBUG "plane %u: bytesperline=%u sizeimage=%u\n", i,
310 					mp->plane_fmt[i].bytesperline,
311 					mp->plane_fmt[i].sizeimage);
312 		break;
313 	case V4L2_BUF_TYPE_VIDEO_OVERLAY:
314 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY:
315 		win = &p->fmt.win;
316 		/* Note: we can't print the clip list here since the clips
317 		 * pointer is a userspace pointer, not a kernelspace
318 		 * pointer. */
319 		pr_cont(", wxh=%dx%d, x,y=%d,%d, field=%s, chromakey=0x%08x, clipcount=%u, clips=%p, bitmap=%p, global_alpha=0x%02x\n",
320 			win->w.width, win->w.height, win->w.left, win->w.top,
321 			prt_names(win->field, v4l2_field_names),
322 			win->chromakey, win->clipcount, win->clips,
323 			win->bitmap, win->global_alpha);
324 		break;
325 	case V4L2_BUF_TYPE_VBI_CAPTURE:
326 	case V4L2_BUF_TYPE_VBI_OUTPUT:
327 		vbi = &p->fmt.vbi;
328 		pr_cont(", sampling_rate=%u, offset=%u, samples_per_line=%u, sample_format=%p4cc, start=%u,%u, count=%u,%u\n",
329 			vbi->sampling_rate, vbi->offset,
330 			vbi->samples_per_line, &vbi->sample_format,
331 			vbi->start[0], vbi->start[1],
332 			vbi->count[0], vbi->count[1]);
333 		break;
334 	case V4L2_BUF_TYPE_SLICED_VBI_CAPTURE:
335 	case V4L2_BUF_TYPE_SLICED_VBI_OUTPUT:
336 		sliced = &p->fmt.sliced;
337 		pr_cont(", service_set=0x%08x, io_size=%d\n",
338 				sliced->service_set, sliced->io_size);
339 		for (i = 0; i < 24; i++)
340 			printk(KERN_DEBUG "line[%02u]=0x%04x, 0x%04x\n", i,
341 				sliced->service_lines[0][i],
342 				sliced->service_lines[1][i]);
343 		break;
344 	case V4L2_BUF_TYPE_SDR_CAPTURE:
345 	case V4L2_BUF_TYPE_SDR_OUTPUT:
346 		sdr = &p->fmt.sdr;
347 		pr_cont(", pixelformat=%p4cc\n", &sdr->pixelformat);
348 		break;
349 	case V4L2_BUF_TYPE_META_CAPTURE:
350 	case V4L2_BUF_TYPE_META_OUTPUT:
351 		meta = &p->fmt.meta;
352 		pr_cont(", dataformat=%p4cc, buffersize=%u\n",
353 			&meta->dataformat, meta->buffersize);
354 		break;
355 	}
356 }
357 
v4l_print_framebuffer(const void * arg,bool write_only)358 static void v4l_print_framebuffer(const void *arg, bool write_only)
359 {
360 	const struct v4l2_framebuffer *p = arg;
361 
362 	pr_cont("capability=0x%x, flags=0x%x, base=0x%p, width=%u, height=%u, pixelformat=%p4cc, bytesperline=%u, sizeimage=%u, colorspace=%d\n",
363 		p->capability, p->flags, p->base, p->fmt.width, p->fmt.height,
364 		&p->fmt.pixelformat, p->fmt.bytesperline, p->fmt.sizeimage,
365 		p->fmt.colorspace);
366 }
367 
v4l_print_buftype(const void * arg,bool write_only)368 static void v4l_print_buftype(const void *arg, bool write_only)
369 {
370 	pr_cont("type=%s\n", prt_names(*(u32 *)arg, v4l2_type_names));
371 }
372 
v4l_print_modulator(const void * arg,bool write_only)373 static void v4l_print_modulator(const void *arg, bool write_only)
374 {
375 	const struct v4l2_modulator *p = arg;
376 
377 	if (write_only)
378 		pr_cont("index=%u, txsubchans=0x%x\n", p->index, p->txsubchans);
379 	else
380 		pr_cont("index=%u, name=%.*s, capability=0x%x, rangelow=%u, rangehigh=%u, txsubchans=0x%x\n",
381 			p->index, (int)sizeof(p->name), p->name, p->capability,
382 			p->rangelow, p->rangehigh, p->txsubchans);
383 }
384 
v4l_print_tuner(const void * arg,bool write_only)385 static void v4l_print_tuner(const void *arg, bool write_only)
386 {
387 	const struct v4l2_tuner *p = arg;
388 
389 	if (write_only)
390 		pr_cont("index=%u, audmode=%u\n", p->index, p->audmode);
391 	else
392 		pr_cont("index=%u, name=%.*s, type=%u, capability=0x%x, rangelow=%u, rangehigh=%u, signal=%u, afc=%d, rxsubchans=0x%x, audmode=%u\n",
393 			p->index, (int)sizeof(p->name), p->name, p->type,
394 			p->capability, p->rangelow,
395 			p->rangehigh, p->signal, p->afc,
396 			p->rxsubchans, p->audmode);
397 }
398 
v4l_print_frequency(const void * arg,bool write_only)399 static void v4l_print_frequency(const void *arg, bool write_only)
400 {
401 	const struct v4l2_frequency *p = arg;
402 
403 	pr_cont("tuner=%u, type=%u, frequency=%u\n",
404 				p->tuner, p->type, p->frequency);
405 }
406 
v4l_print_standard(const void * arg,bool write_only)407 static void v4l_print_standard(const void *arg, bool write_only)
408 {
409 	const struct v4l2_standard *p = arg;
410 
411 	pr_cont("index=%u, id=0x%Lx, name=%.*s, fps=%u/%u, framelines=%u\n",
412 		p->index,
413 		(unsigned long long)p->id, (int)sizeof(p->name), p->name,
414 		p->frameperiod.numerator,
415 		p->frameperiod.denominator,
416 		p->framelines);
417 }
418 
v4l_print_std(const void * arg,bool write_only)419 static void v4l_print_std(const void *arg, bool write_only)
420 {
421 	pr_cont("std=0x%08Lx\n", *(const long long unsigned *)arg);
422 }
423 
v4l_print_hw_freq_seek(const void * arg,bool write_only)424 static void v4l_print_hw_freq_seek(const void *arg, bool write_only)
425 {
426 	const struct v4l2_hw_freq_seek *p = arg;
427 
428 	pr_cont("tuner=%u, type=%u, seek_upward=%u, wrap_around=%u, spacing=%u, rangelow=%u, rangehigh=%u\n",
429 		p->tuner, p->type, p->seek_upward, p->wrap_around, p->spacing,
430 		p->rangelow, p->rangehigh);
431 }
432 
v4l_print_requestbuffers(const void * arg,bool write_only)433 static void v4l_print_requestbuffers(const void *arg, bool write_only)
434 {
435 	const struct v4l2_requestbuffers *p = arg;
436 
437 	pr_cont("count=%d, type=%s, memory=%s\n",
438 		p->count,
439 		prt_names(p->type, v4l2_type_names),
440 		prt_names(p->memory, v4l2_memory_names));
441 }
442 
v4l_print_buffer(const void * arg,bool write_only)443 static void v4l_print_buffer(const void *arg, bool write_only)
444 {
445 	const struct v4l2_buffer *p = arg;
446 	const struct v4l2_timecode *tc = &p->timecode;
447 	const struct v4l2_plane *plane;
448 	int i;
449 
450 	pr_cont("%02d:%02d:%02d.%06ld index=%d, type=%s, request_fd=%d, flags=0x%08x, field=%s, sequence=%d, memory=%s",
451 			(int)p->timestamp.tv_sec / 3600,
452 			((int)p->timestamp.tv_sec / 60) % 60,
453 			((int)p->timestamp.tv_sec % 60),
454 			(long)p->timestamp.tv_usec,
455 			p->index,
456 			prt_names(p->type, v4l2_type_names), p->request_fd,
457 			p->flags, prt_names(p->field, v4l2_field_names),
458 			p->sequence, prt_names(p->memory, v4l2_memory_names));
459 
460 	if (V4L2_TYPE_IS_MULTIPLANAR(p->type) && p->m.planes) {
461 		pr_cont("\n");
462 		for (i = 0; i < p->length; ++i) {
463 			plane = &p->m.planes[i];
464 			printk(KERN_DEBUG
465 				"plane %d: bytesused=%d, data_offset=0x%08x, offset/userptr=0x%lx, length=%d\n",
466 				i, plane->bytesused, plane->data_offset,
467 				plane->m.userptr, plane->length);
468 		}
469 	} else {
470 		pr_cont(", bytesused=%d, offset/userptr=0x%lx, length=%d\n",
471 			p->bytesused, p->m.userptr, p->length);
472 	}
473 
474 	printk(KERN_DEBUG "timecode=%02d:%02d:%02d type=%d, flags=0x%08x, frames=%d, userbits=0x%08x\n",
475 			tc->hours, tc->minutes, tc->seconds,
476 			tc->type, tc->flags, tc->frames, *(__u32 *)tc->userbits);
477 }
478 
v4l_print_exportbuffer(const void * arg,bool write_only)479 static void v4l_print_exportbuffer(const void *arg, bool write_only)
480 {
481 	const struct v4l2_exportbuffer *p = arg;
482 
483 	pr_cont("fd=%d, type=%s, index=%u, plane=%u, flags=0x%08x\n",
484 		p->fd, prt_names(p->type, v4l2_type_names),
485 		p->index, p->plane, p->flags);
486 }
487 
v4l_print_create_buffers(const void * arg,bool write_only)488 static void v4l_print_create_buffers(const void *arg, bool write_only)
489 {
490 	const struct v4l2_create_buffers *p = arg;
491 
492 	pr_cont("index=%d, count=%d, memory=%s, capabilities=0x%08x, ",
493 		p->index, p->count, prt_names(p->memory, v4l2_memory_names),
494 		p->capabilities);
495 	v4l_print_format(&p->format, write_only);
496 }
497 
v4l_print_streamparm(const void * arg,bool write_only)498 static void v4l_print_streamparm(const void *arg, bool write_only)
499 {
500 	const struct v4l2_streamparm *p = arg;
501 
502 	pr_cont("type=%s", prt_names(p->type, v4l2_type_names));
503 
504 	if (p->type == V4L2_BUF_TYPE_VIDEO_CAPTURE ||
505 	    p->type == V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE) {
506 		const struct v4l2_captureparm *c = &p->parm.capture;
507 
508 		pr_cont(", capability=0x%x, capturemode=0x%x, timeperframe=%d/%d, extendedmode=%d, readbuffers=%d\n",
509 			c->capability, c->capturemode,
510 			c->timeperframe.numerator, c->timeperframe.denominator,
511 			c->extendedmode, c->readbuffers);
512 	} else if (p->type == V4L2_BUF_TYPE_VIDEO_OUTPUT ||
513 		   p->type == V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE) {
514 		const struct v4l2_outputparm *c = &p->parm.output;
515 
516 		pr_cont(", capability=0x%x, outputmode=0x%x, timeperframe=%d/%d, extendedmode=%d, writebuffers=%d\n",
517 			c->capability, c->outputmode,
518 			c->timeperframe.numerator, c->timeperframe.denominator,
519 			c->extendedmode, c->writebuffers);
520 	} else {
521 		pr_cont("\n");
522 	}
523 }
524 
v4l_print_queryctrl(const void * arg,bool write_only)525 static void v4l_print_queryctrl(const void *arg, bool write_only)
526 {
527 	const struct v4l2_queryctrl *p = arg;
528 
529 	pr_cont("id=0x%x, type=%d, name=%.*s, min/max=%d/%d, step=%d, default=%d, flags=0x%08x\n",
530 			p->id, p->type, (int)sizeof(p->name), p->name,
531 			p->minimum, p->maximum,
532 			p->step, p->default_value, p->flags);
533 }
534 
v4l_print_query_ext_ctrl(const void * arg,bool write_only)535 static void v4l_print_query_ext_ctrl(const void *arg, bool write_only)
536 {
537 	const struct v4l2_query_ext_ctrl *p = arg;
538 
539 	pr_cont("id=0x%x, type=%d, name=%.*s, min/max=%lld/%lld, step=%lld, default=%lld, flags=0x%08x, elem_size=%u, elems=%u, nr_of_dims=%u, dims=%u,%u,%u,%u\n",
540 			p->id, p->type, (int)sizeof(p->name), p->name,
541 			p->minimum, p->maximum,
542 			p->step, p->default_value, p->flags,
543 			p->elem_size, p->elems, p->nr_of_dims,
544 			p->dims[0], p->dims[1], p->dims[2], p->dims[3]);
545 }
546 
v4l_print_querymenu(const void * arg,bool write_only)547 static void v4l_print_querymenu(const void *arg, bool write_only)
548 {
549 	const struct v4l2_querymenu *p = arg;
550 
551 	pr_cont("id=0x%x, index=%d\n", p->id, p->index);
552 }
553 
v4l_print_control(const void * arg,bool write_only)554 static void v4l_print_control(const void *arg, bool write_only)
555 {
556 	const struct v4l2_control *p = arg;
557 	const char *name = v4l2_ctrl_get_name(p->id);
558 
559 	if (name)
560 		pr_cont("name=%s, ", name);
561 	pr_cont("id=0x%x, value=%d\n", p->id, p->value);
562 }
563 
v4l_print_ext_controls(const void * arg,bool write_only)564 static void v4l_print_ext_controls(const void *arg, bool write_only)
565 {
566 	const struct v4l2_ext_controls *p = arg;
567 	int i;
568 
569 	pr_cont("which=0x%x, count=%d, error_idx=%d, request_fd=%d",
570 			p->which, p->count, p->error_idx, p->request_fd);
571 	for (i = 0; i < p->count; i++) {
572 		unsigned int id = p->controls[i].id;
573 		const char *name = v4l2_ctrl_get_name(id);
574 
575 		if (name)
576 			pr_cont(", name=%s", name);
577 		if (!p->controls[i].size)
578 			pr_cont(", id/val=0x%x/0x%x", id, p->controls[i].value);
579 		else
580 			pr_cont(", id/size=0x%x/%u", id, p->controls[i].size);
581 	}
582 	pr_cont("\n");
583 }
584 
v4l_print_cropcap(const void * arg,bool write_only)585 static void v4l_print_cropcap(const void *arg, bool write_only)
586 {
587 	const struct v4l2_cropcap *p = arg;
588 
589 	pr_cont("type=%s, bounds wxh=%dx%d, x,y=%d,%d, defrect wxh=%dx%d, x,y=%d,%d, pixelaspect %d/%d\n",
590 		prt_names(p->type, v4l2_type_names),
591 		p->bounds.width, p->bounds.height,
592 		p->bounds.left, p->bounds.top,
593 		p->defrect.width, p->defrect.height,
594 		p->defrect.left, p->defrect.top,
595 		p->pixelaspect.numerator, p->pixelaspect.denominator);
596 }
597 
v4l_print_crop(const void * arg,bool write_only)598 static void v4l_print_crop(const void *arg, bool write_only)
599 {
600 	const struct v4l2_crop *p = arg;
601 
602 	pr_cont("type=%s, wxh=%dx%d, x,y=%d,%d\n",
603 		prt_names(p->type, v4l2_type_names),
604 		p->c.width, p->c.height,
605 		p->c.left, p->c.top);
606 }
607 
v4l_print_selection(const void * arg,bool write_only)608 static void v4l_print_selection(const void *arg, bool write_only)
609 {
610 	const struct v4l2_selection *p = arg;
611 
612 	pr_cont("type=%s, target=%d, flags=0x%x, wxh=%dx%d, x,y=%d,%d\n",
613 		prt_names(p->type, v4l2_type_names),
614 		p->target, p->flags,
615 		p->r.width, p->r.height, p->r.left, p->r.top);
616 }
617 
v4l_print_jpegcompression(const void * arg,bool write_only)618 static void v4l_print_jpegcompression(const void *arg, bool write_only)
619 {
620 	const struct v4l2_jpegcompression *p = arg;
621 
622 	pr_cont("quality=%d, APPn=%d, APP_len=%d, COM_len=%d, jpeg_markers=0x%x\n",
623 		p->quality, p->APPn, p->APP_len,
624 		p->COM_len, p->jpeg_markers);
625 }
626 
v4l_print_enc_idx(const void * arg,bool write_only)627 static void v4l_print_enc_idx(const void *arg, bool write_only)
628 {
629 	const struct v4l2_enc_idx *p = arg;
630 
631 	pr_cont("entries=%d, entries_cap=%d\n",
632 			p->entries, p->entries_cap);
633 }
634 
v4l_print_encoder_cmd(const void * arg,bool write_only)635 static void v4l_print_encoder_cmd(const void *arg, bool write_only)
636 {
637 	const struct v4l2_encoder_cmd *p = arg;
638 
639 	pr_cont("cmd=%d, flags=0x%x\n",
640 			p->cmd, p->flags);
641 }
642 
v4l_print_decoder_cmd(const void * arg,bool write_only)643 static void v4l_print_decoder_cmd(const void *arg, bool write_only)
644 {
645 	const struct v4l2_decoder_cmd *p = arg;
646 
647 	pr_cont("cmd=%d, flags=0x%x\n", p->cmd, p->flags);
648 
649 	if (p->cmd == V4L2_DEC_CMD_START)
650 		pr_info("speed=%d, format=%u\n",
651 				p->start.speed, p->start.format);
652 	else if (p->cmd == V4L2_DEC_CMD_STOP)
653 		pr_info("pts=%llu\n", p->stop.pts);
654 }
655 
v4l_print_dbg_chip_info(const void * arg,bool write_only)656 static void v4l_print_dbg_chip_info(const void *arg, bool write_only)
657 {
658 	const struct v4l2_dbg_chip_info *p = arg;
659 
660 	pr_cont("type=%u, ", p->match.type);
661 	if (p->match.type == V4L2_CHIP_MATCH_I2C_DRIVER)
662 		pr_cont("name=%.*s, ",
663 				(int)sizeof(p->match.name), p->match.name);
664 	else
665 		pr_cont("addr=%u, ", p->match.addr);
666 	pr_cont("name=%.*s\n", (int)sizeof(p->name), p->name);
667 }
668 
v4l_print_dbg_register(const void * arg,bool write_only)669 static void v4l_print_dbg_register(const void *arg, bool write_only)
670 {
671 	const struct v4l2_dbg_register *p = arg;
672 
673 	pr_cont("type=%u, ", p->match.type);
674 	if (p->match.type == V4L2_CHIP_MATCH_I2C_DRIVER)
675 		pr_cont("name=%.*s, ",
676 				(int)sizeof(p->match.name), p->match.name);
677 	else
678 		pr_cont("addr=%u, ", p->match.addr);
679 	pr_cont("reg=0x%llx, val=0x%llx\n",
680 			p->reg, p->val);
681 }
682 
v4l_print_dv_timings(const void * arg,bool write_only)683 static void v4l_print_dv_timings(const void *arg, bool write_only)
684 {
685 	const struct v4l2_dv_timings *p = arg;
686 
687 	switch (p->type) {
688 	case V4L2_DV_BT_656_1120:
689 		pr_cont("type=bt-656/1120, interlaced=%u, pixelclock=%llu, width=%u, height=%u, polarities=0x%x, hfrontporch=%u, hsync=%u, hbackporch=%u, vfrontporch=%u, vsync=%u, vbackporch=%u, il_vfrontporch=%u, il_vsync=%u, il_vbackporch=%u, standards=0x%x, flags=0x%x\n",
690 				p->bt.interlaced, p->bt.pixelclock,
691 				p->bt.width, p->bt.height,
692 				p->bt.polarities, p->bt.hfrontporch,
693 				p->bt.hsync, p->bt.hbackporch,
694 				p->bt.vfrontporch, p->bt.vsync,
695 				p->bt.vbackporch, p->bt.il_vfrontporch,
696 				p->bt.il_vsync, p->bt.il_vbackporch,
697 				p->bt.standards, p->bt.flags);
698 		break;
699 	default:
700 		pr_cont("type=%d\n", p->type);
701 		break;
702 	}
703 }
704 
v4l_print_enum_dv_timings(const void * arg,bool write_only)705 static void v4l_print_enum_dv_timings(const void *arg, bool write_only)
706 {
707 	const struct v4l2_enum_dv_timings *p = arg;
708 
709 	pr_cont("index=%u, ", p->index);
710 	v4l_print_dv_timings(&p->timings, write_only);
711 }
712 
v4l_print_dv_timings_cap(const void * arg,bool write_only)713 static void v4l_print_dv_timings_cap(const void *arg, bool write_only)
714 {
715 	const struct v4l2_dv_timings_cap *p = arg;
716 
717 	switch (p->type) {
718 	case V4L2_DV_BT_656_1120:
719 		pr_cont("type=bt-656/1120, width=%u-%u, height=%u-%u, pixelclock=%llu-%llu, standards=0x%x, capabilities=0x%x\n",
720 			p->bt.min_width, p->bt.max_width,
721 			p->bt.min_height, p->bt.max_height,
722 			p->bt.min_pixelclock, p->bt.max_pixelclock,
723 			p->bt.standards, p->bt.capabilities);
724 		break;
725 	default:
726 		pr_cont("type=%u\n", p->type);
727 		break;
728 	}
729 }
730 
v4l_print_frmsizeenum(const void * arg,bool write_only)731 static void v4l_print_frmsizeenum(const void *arg, bool write_only)
732 {
733 	const struct v4l2_frmsizeenum *p = arg;
734 
735 	pr_cont("index=%u, pixelformat=%p4cc, type=%u",
736 		p->index, &p->pixel_format, p->type);
737 	switch (p->type) {
738 	case V4L2_FRMSIZE_TYPE_DISCRETE:
739 		pr_cont(", wxh=%ux%u\n",
740 			p->discrete.width, p->discrete.height);
741 		break;
742 	case V4L2_FRMSIZE_TYPE_STEPWISE:
743 		pr_cont(", min=%ux%u, max=%ux%u, step=%ux%u\n",
744 				p->stepwise.min_width,
745 				p->stepwise.min_height,
746 				p->stepwise.max_width,
747 				p->stepwise.max_height,
748 				p->stepwise.step_width,
749 				p->stepwise.step_height);
750 		break;
751 	case V4L2_FRMSIZE_TYPE_CONTINUOUS:
752 	default:
753 		pr_cont("\n");
754 		break;
755 	}
756 }
757 
v4l_print_frmivalenum(const void * arg,bool write_only)758 static void v4l_print_frmivalenum(const void *arg, bool write_only)
759 {
760 	const struct v4l2_frmivalenum *p = arg;
761 
762 	pr_cont("index=%u, pixelformat=%p4cc, wxh=%ux%u, type=%u",
763 		p->index, &p->pixel_format, p->width, p->height, p->type);
764 	switch (p->type) {
765 	case V4L2_FRMIVAL_TYPE_DISCRETE:
766 		pr_cont(", fps=%d/%d\n",
767 				p->discrete.numerator,
768 				p->discrete.denominator);
769 		break;
770 	case V4L2_FRMIVAL_TYPE_STEPWISE:
771 		pr_cont(", min=%d/%d, max=%d/%d, step=%d/%d\n",
772 				p->stepwise.min.numerator,
773 				p->stepwise.min.denominator,
774 				p->stepwise.max.numerator,
775 				p->stepwise.max.denominator,
776 				p->stepwise.step.numerator,
777 				p->stepwise.step.denominator);
778 		break;
779 	case V4L2_FRMIVAL_TYPE_CONTINUOUS:
780 	default:
781 		pr_cont("\n");
782 		break;
783 	}
784 }
785 
v4l_print_event(const void * arg,bool write_only)786 static void v4l_print_event(const void *arg, bool write_only)
787 {
788 	const struct v4l2_event *p = arg;
789 	const struct v4l2_event_ctrl *c;
790 
791 	pr_cont("type=0x%x, pending=%u, sequence=%u, id=%u, timestamp=%llu.%9.9llu\n",
792 			p->type, p->pending, p->sequence, p->id,
793 			p->timestamp.tv_sec, p->timestamp.tv_nsec);
794 	switch (p->type) {
795 	case V4L2_EVENT_VSYNC:
796 		printk(KERN_DEBUG "field=%s\n",
797 			prt_names(p->u.vsync.field, v4l2_field_names));
798 		break;
799 	case V4L2_EVENT_CTRL:
800 		c = &p->u.ctrl;
801 		printk(KERN_DEBUG "changes=0x%x, type=%u, ",
802 			c->changes, c->type);
803 		if (c->type == V4L2_CTRL_TYPE_INTEGER64)
804 			pr_cont("value64=%lld, ", c->value64);
805 		else
806 			pr_cont("value=%d, ", c->value);
807 		pr_cont("flags=0x%x, minimum=%d, maximum=%d, step=%d, default_value=%d\n",
808 			c->flags, c->minimum, c->maximum,
809 			c->step, c->default_value);
810 		break;
811 	case V4L2_EVENT_FRAME_SYNC:
812 		pr_cont("frame_sequence=%u\n",
813 			p->u.frame_sync.frame_sequence);
814 		break;
815 	}
816 }
817 
v4l_print_event_subscription(const void * arg,bool write_only)818 static void v4l_print_event_subscription(const void *arg, bool write_only)
819 {
820 	const struct v4l2_event_subscription *p = arg;
821 
822 	pr_cont("type=0x%x, id=0x%x, flags=0x%x\n",
823 			p->type, p->id, p->flags);
824 }
825 
v4l_print_sliced_vbi_cap(const void * arg,bool write_only)826 static void v4l_print_sliced_vbi_cap(const void *arg, bool write_only)
827 {
828 	const struct v4l2_sliced_vbi_cap *p = arg;
829 	int i;
830 
831 	pr_cont("type=%s, service_set=0x%08x\n",
832 			prt_names(p->type, v4l2_type_names), p->service_set);
833 	for (i = 0; i < 24; i++)
834 		printk(KERN_DEBUG "line[%02u]=0x%04x, 0x%04x\n", i,
835 				p->service_lines[0][i],
836 				p->service_lines[1][i]);
837 }
838 
v4l_print_freq_band(const void * arg,bool write_only)839 static void v4l_print_freq_band(const void *arg, bool write_only)
840 {
841 	const struct v4l2_frequency_band *p = arg;
842 
843 	pr_cont("tuner=%u, type=%u, index=%u, capability=0x%x, rangelow=%u, rangehigh=%u, modulation=0x%x\n",
844 			p->tuner, p->type, p->index,
845 			p->capability, p->rangelow,
846 			p->rangehigh, p->modulation);
847 }
848 
v4l_print_edid(const void * arg,bool write_only)849 static void v4l_print_edid(const void *arg, bool write_only)
850 {
851 	const struct v4l2_edid *p = arg;
852 
853 	pr_cont("pad=%u, start_block=%u, blocks=%u\n",
854 		p->pad, p->start_block, p->blocks);
855 }
856 
v4l_print_u32(const void * arg,bool write_only)857 static void v4l_print_u32(const void *arg, bool write_only)
858 {
859 	pr_cont("value=%u\n", *(const u32 *)arg);
860 }
861 
v4l_print_newline(const void * arg,bool write_only)862 static void v4l_print_newline(const void *arg, bool write_only)
863 {
864 	pr_cont("\n");
865 }
866 
v4l_print_default(const void * arg,bool write_only)867 static void v4l_print_default(const void *arg, bool write_only)
868 {
869 	pr_cont("driver-specific ioctl\n");
870 }
871 
check_ext_ctrls(struct v4l2_ext_controls * c,int allow_priv)872 static int check_ext_ctrls(struct v4l2_ext_controls *c, int allow_priv)
873 {
874 	__u32 i;
875 
876 	/* zero the reserved fields */
877 	c->reserved[0] = 0;
878 	for (i = 0; i < c->count; i++)
879 		c->controls[i].reserved2[0] = 0;
880 
881 	/* V4L2_CID_PRIVATE_BASE cannot be used as control class
882 	   when using extended controls.
883 	   Only when passed in through VIDIOC_G_CTRL and VIDIOC_S_CTRL
884 	   is it allowed for backwards compatibility.
885 	 */
886 	if (!allow_priv && c->which == V4L2_CID_PRIVATE_BASE)
887 		return 0;
888 	if (!c->which)
889 		return 1;
890 	/* Check that all controls are from the same control class. */
891 	for (i = 0; i < c->count; i++) {
892 		if (V4L2_CTRL_ID2WHICH(c->controls[i].id) != c->which) {
893 			c->error_idx = i;
894 			return 0;
895 		}
896 	}
897 	return 1;
898 }
899 
check_fmt(struct file * file,enum v4l2_buf_type type)900 static int check_fmt(struct file *file, enum v4l2_buf_type type)
901 {
902 	const u32 vid_caps = V4L2_CAP_VIDEO_CAPTURE |
903 			     V4L2_CAP_VIDEO_CAPTURE_MPLANE |
904 			     V4L2_CAP_VIDEO_OUTPUT |
905 			     V4L2_CAP_VIDEO_OUTPUT_MPLANE |
906 			     V4L2_CAP_VIDEO_M2M | V4L2_CAP_VIDEO_M2M_MPLANE;
907 	const u32 meta_caps = V4L2_CAP_META_CAPTURE |
908 			      V4L2_CAP_META_OUTPUT;
909 	struct video_device *vfd = video_devdata(file);
910 	const struct v4l2_ioctl_ops *ops = vfd->ioctl_ops;
911 	bool is_vid = vfd->vfl_type == VFL_TYPE_VIDEO &&
912 		      (vfd->device_caps & vid_caps);
913 	bool is_vbi = vfd->vfl_type == VFL_TYPE_VBI;
914 	bool is_sdr = vfd->vfl_type == VFL_TYPE_SDR;
915 	bool is_tch = vfd->vfl_type == VFL_TYPE_TOUCH;
916 	bool is_meta = vfd->vfl_type == VFL_TYPE_VIDEO &&
917 		       (vfd->device_caps & meta_caps);
918 	bool is_rx = vfd->vfl_dir != VFL_DIR_TX;
919 	bool is_tx = vfd->vfl_dir != VFL_DIR_RX;
920 
921 	if (ops == NULL)
922 		return -EINVAL;
923 
924 	switch (type) {
925 	case V4L2_BUF_TYPE_VIDEO_CAPTURE:
926 		if ((is_vid || is_tch) && is_rx &&
927 		    (ops->vidioc_g_fmt_vid_cap || ops->vidioc_g_fmt_vid_cap_mplane))
928 			return 0;
929 		break;
930 	case V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE:
931 		if ((is_vid || is_tch) && is_rx && ops->vidioc_g_fmt_vid_cap_mplane)
932 			return 0;
933 		break;
934 	case V4L2_BUF_TYPE_VIDEO_OVERLAY:
935 		if (is_vid && is_rx && ops->vidioc_g_fmt_vid_overlay)
936 			return 0;
937 		break;
938 	case V4L2_BUF_TYPE_VIDEO_OUTPUT:
939 		if (is_vid && is_tx &&
940 		    (ops->vidioc_g_fmt_vid_out || ops->vidioc_g_fmt_vid_out_mplane))
941 			return 0;
942 		break;
943 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE:
944 		if (is_vid && is_tx && ops->vidioc_g_fmt_vid_out_mplane)
945 			return 0;
946 		break;
947 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY:
948 		if (is_vid && is_tx && ops->vidioc_g_fmt_vid_out_overlay)
949 			return 0;
950 		break;
951 	case V4L2_BUF_TYPE_VBI_CAPTURE:
952 		if (is_vbi && is_rx && ops->vidioc_g_fmt_vbi_cap)
953 			return 0;
954 		break;
955 	case V4L2_BUF_TYPE_VBI_OUTPUT:
956 		if (is_vbi && is_tx && ops->vidioc_g_fmt_vbi_out)
957 			return 0;
958 		break;
959 	case V4L2_BUF_TYPE_SLICED_VBI_CAPTURE:
960 		if (is_vbi && is_rx && ops->vidioc_g_fmt_sliced_vbi_cap)
961 			return 0;
962 		break;
963 	case V4L2_BUF_TYPE_SLICED_VBI_OUTPUT:
964 		if (is_vbi && is_tx && ops->vidioc_g_fmt_sliced_vbi_out)
965 			return 0;
966 		break;
967 	case V4L2_BUF_TYPE_SDR_CAPTURE:
968 		if (is_sdr && is_rx && ops->vidioc_g_fmt_sdr_cap)
969 			return 0;
970 		break;
971 	case V4L2_BUF_TYPE_SDR_OUTPUT:
972 		if (is_sdr && is_tx && ops->vidioc_g_fmt_sdr_out)
973 			return 0;
974 		break;
975 	case V4L2_BUF_TYPE_META_CAPTURE:
976 		if (is_meta && is_rx && ops->vidioc_g_fmt_meta_cap)
977 			return 0;
978 		break;
979 	case V4L2_BUF_TYPE_META_OUTPUT:
980 		if (is_meta && is_tx && ops->vidioc_g_fmt_meta_out)
981 			return 0;
982 		break;
983 	default:
984 		break;
985 	}
986 	return -EINVAL;
987 }
988 
v4l_sanitize_format(struct v4l2_format * fmt)989 static void v4l_sanitize_format(struct v4l2_format *fmt)
990 {
991 	unsigned int offset;
992 
993 	/* Make sure num_planes is not bogus */
994 	if (fmt->type == V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE ||
995 	    fmt->type == V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE)
996 		fmt->fmt.pix_mp.num_planes = min_t(u32, fmt->fmt.pix_mp.num_planes,
997 					       VIDEO_MAX_PLANES);
998 
999 	/*
1000 	 * The v4l2_pix_format structure has been extended with fields that were
1001 	 * not previously required to be set to zero by applications. The priv
1002 	 * field, when set to a magic value, indicates the the extended fields
1003 	 * are valid. Otherwise they will contain undefined values. To simplify
1004 	 * the API towards drivers zero the extended fields and set the priv
1005 	 * field to the magic value when the extended pixel format structure
1006 	 * isn't used by applications.
1007 	 */
1008 
1009 	if (fmt->type != V4L2_BUF_TYPE_VIDEO_CAPTURE &&
1010 	    fmt->type != V4L2_BUF_TYPE_VIDEO_OUTPUT)
1011 		return;
1012 
1013 	if (fmt->fmt.pix.priv == V4L2_PIX_FMT_PRIV_MAGIC)
1014 		return;
1015 
1016 	fmt->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1017 
1018 	offset = offsetof(struct v4l2_pix_format, priv)
1019 	       + sizeof(fmt->fmt.pix.priv);
1020 	memset(((void *)&fmt->fmt.pix) + offset, 0,
1021 	       sizeof(fmt->fmt.pix) - offset);
1022 }
1023 
v4l_querycap(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1024 static int v4l_querycap(const struct v4l2_ioctl_ops *ops,
1025 				struct file *file, void *fh, void *arg)
1026 {
1027 	struct v4l2_capability *cap = (struct v4l2_capability *)arg;
1028 	struct video_device *vfd = video_devdata(file);
1029 	int ret;
1030 
1031 	cap->version = LINUX_VERSION_CODE;
1032 	cap->device_caps = vfd->device_caps;
1033 	cap->capabilities = vfd->device_caps | V4L2_CAP_DEVICE_CAPS;
1034 
1035 	ret = ops->vidioc_querycap(file, fh, cap);
1036 
1037 	/*
1038 	 * Drivers must not change device_caps, so check for this and
1039 	 * warn if this happened.
1040 	 */
1041 	WARN_ON(cap->device_caps != vfd->device_caps);
1042 	/*
1043 	 * Check that capabilities is a superset of
1044 	 * vfd->device_caps | V4L2_CAP_DEVICE_CAPS
1045 	 */
1046 	WARN_ON((cap->capabilities &
1047 		 (vfd->device_caps | V4L2_CAP_DEVICE_CAPS)) !=
1048 		(vfd->device_caps | V4L2_CAP_DEVICE_CAPS));
1049 	cap->capabilities |= V4L2_CAP_EXT_PIX_FORMAT;
1050 	cap->device_caps |= V4L2_CAP_EXT_PIX_FORMAT;
1051 
1052 	return ret;
1053 }
1054 
v4l_g_input(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1055 static int v4l_g_input(const struct v4l2_ioctl_ops *ops,
1056 		       struct file *file, void *fh, void *arg)
1057 {
1058 	struct video_device *vfd = video_devdata(file);
1059 
1060 	if (vfd->device_caps & V4L2_CAP_IO_MC) {
1061 		*(int *)arg = 0;
1062 		return 0;
1063 	}
1064 
1065 	return ops->vidioc_g_input(file, fh, arg);
1066 }
1067 
v4l_g_output(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1068 static int v4l_g_output(const struct v4l2_ioctl_ops *ops,
1069 			struct file *file, void *fh, void *arg)
1070 {
1071 	struct video_device *vfd = video_devdata(file);
1072 
1073 	if (vfd->device_caps & V4L2_CAP_IO_MC) {
1074 		*(int *)arg = 0;
1075 		return 0;
1076 	}
1077 
1078 	return ops->vidioc_g_output(file, fh, arg);
1079 }
1080 
v4l_s_input(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1081 static int v4l_s_input(const struct v4l2_ioctl_ops *ops,
1082 				struct file *file, void *fh, void *arg)
1083 {
1084 	struct video_device *vfd = video_devdata(file);
1085 	int ret;
1086 
1087 	ret = v4l_enable_media_source(vfd);
1088 	if (ret)
1089 		return ret;
1090 
1091 	if (vfd->device_caps & V4L2_CAP_IO_MC)
1092 		return  *(int *)arg ? -EINVAL : 0;
1093 
1094 	return ops->vidioc_s_input(file, fh, *(unsigned int *)arg);
1095 }
1096 
v4l_s_output(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1097 static int v4l_s_output(const struct v4l2_ioctl_ops *ops,
1098 				struct file *file, void *fh, void *arg)
1099 {
1100 	struct video_device *vfd = video_devdata(file);
1101 
1102 	if (vfd->device_caps & V4L2_CAP_IO_MC)
1103 		return  *(int *)arg ? -EINVAL : 0;
1104 
1105 	return ops->vidioc_s_output(file, fh, *(unsigned int *)arg);
1106 }
1107 
v4l_g_priority(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1108 static int v4l_g_priority(const struct v4l2_ioctl_ops *ops,
1109 				struct file *file, void *fh, void *arg)
1110 {
1111 	struct video_device *vfd;
1112 	u32 *p = arg;
1113 
1114 	vfd = video_devdata(file);
1115 	*p = v4l2_prio_max(vfd->prio);
1116 	return 0;
1117 }
1118 
v4l_s_priority(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1119 static int v4l_s_priority(const struct v4l2_ioctl_ops *ops,
1120 				struct file *file, void *fh, void *arg)
1121 {
1122 	struct video_device *vfd;
1123 	struct v4l2_fh *vfh;
1124 	u32 *p = arg;
1125 
1126 	vfd = video_devdata(file);
1127 	if (!test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags))
1128 		return -ENOTTY;
1129 	vfh = file->private_data;
1130 	return v4l2_prio_change(vfd->prio, &vfh->prio, *p);
1131 }
1132 
v4l_enuminput(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1133 static int v4l_enuminput(const struct v4l2_ioctl_ops *ops,
1134 				struct file *file, void *fh, void *arg)
1135 {
1136 	struct video_device *vfd = video_devdata(file);
1137 	struct v4l2_input *p = arg;
1138 
1139 	/*
1140 	 * We set the flags for CAP_DV_TIMINGS &
1141 	 * CAP_STD here based on ioctl handler provided by the
1142 	 * driver. If the driver doesn't support these
1143 	 * for a specific input, it must override these flags.
1144 	 */
1145 	if (is_valid_ioctl(vfd, VIDIOC_S_STD))
1146 		p->capabilities |= V4L2_IN_CAP_STD;
1147 
1148 	if (vfd->device_caps & V4L2_CAP_IO_MC) {
1149 		if (p->index)
1150 			return -EINVAL;
1151 		strscpy(p->name, vfd->name, sizeof(p->name));
1152 		p->type = V4L2_INPUT_TYPE_CAMERA;
1153 		return 0;
1154 	}
1155 
1156 	return ops->vidioc_enum_input(file, fh, p);
1157 }
1158 
v4l_enumoutput(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1159 static int v4l_enumoutput(const struct v4l2_ioctl_ops *ops,
1160 				struct file *file, void *fh, void *arg)
1161 {
1162 	struct video_device *vfd = video_devdata(file);
1163 	struct v4l2_output *p = arg;
1164 
1165 	/*
1166 	 * We set the flags for CAP_DV_TIMINGS &
1167 	 * CAP_STD here based on ioctl handler provided by the
1168 	 * driver. If the driver doesn't support these
1169 	 * for a specific output, it must override these flags.
1170 	 */
1171 	if (is_valid_ioctl(vfd, VIDIOC_S_STD))
1172 		p->capabilities |= V4L2_OUT_CAP_STD;
1173 
1174 	if (vfd->device_caps & V4L2_CAP_IO_MC) {
1175 		if (p->index)
1176 			return -EINVAL;
1177 		strscpy(p->name, vfd->name, sizeof(p->name));
1178 		p->type = V4L2_OUTPUT_TYPE_ANALOG;
1179 		return 0;
1180 	}
1181 
1182 	return ops->vidioc_enum_output(file, fh, p);
1183 }
1184 
v4l_fill_fmtdesc(struct v4l2_fmtdesc * fmt)1185 static void v4l_fill_fmtdesc(struct v4l2_fmtdesc *fmt)
1186 {
1187 	const unsigned sz = sizeof(fmt->description);
1188 	const char *descr = NULL;
1189 	u32 flags = 0;
1190 
1191 	/*
1192 	 * We depart from the normal coding style here since the descriptions
1193 	 * should be aligned so it is easy to see which descriptions will be
1194 	 * longer than 31 characters (the max length for a description).
1195 	 * And frankly, this is easier to read anyway.
1196 	 *
1197 	 * Note that gcc will use O(log N) comparisons to find the right case.
1198 	 */
1199 	switch (fmt->pixelformat) {
1200 	/* Max description length mask:	descr = "0123456789012345678901234567890" */
1201 	case V4L2_PIX_FMT_RGB332:	descr = "8-bit RGB 3-3-2"; break;
1202 	case V4L2_PIX_FMT_RGB444:	descr = "16-bit A/XRGB 4-4-4-4"; break;
1203 	case V4L2_PIX_FMT_ARGB444:	descr = "16-bit ARGB 4-4-4-4"; break;
1204 	case V4L2_PIX_FMT_XRGB444:	descr = "16-bit XRGB 4-4-4-4"; break;
1205 	case V4L2_PIX_FMT_RGBA444:	descr = "16-bit RGBA 4-4-4-4"; break;
1206 	case V4L2_PIX_FMT_RGBX444:	descr = "16-bit RGBX 4-4-4-4"; break;
1207 	case V4L2_PIX_FMT_ABGR444:	descr = "16-bit ABGR 4-4-4-4"; break;
1208 	case V4L2_PIX_FMT_XBGR444:	descr = "16-bit XBGR 4-4-4-4"; break;
1209 	case V4L2_PIX_FMT_BGRA444:	descr = "16-bit BGRA 4-4-4-4"; break;
1210 	case V4L2_PIX_FMT_BGRX444:	descr = "16-bit BGRX 4-4-4-4"; break;
1211 	case V4L2_PIX_FMT_RGB555:	descr = "16-bit A/XRGB 1-5-5-5"; break;
1212 	case V4L2_PIX_FMT_ARGB555:	descr = "16-bit ARGB 1-5-5-5"; break;
1213 	case V4L2_PIX_FMT_XRGB555:	descr = "16-bit XRGB 1-5-5-5"; break;
1214 	case V4L2_PIX_FMT_ABGR555:	descr = "16-bit ABGR 1-5-5-5"; break;
1215 	case V4L2_PIX_FMT_XBGR555:	descr = "16-bit XBGR 1-5-5-5"; break;
1216 	case V4L2_PIX_FMT_RGBA555:	descr = "16-bit RGBA 5-5-5-1"; break;
1217 	case V4L2_PIX_FMT_RGBX555:	descr = "16-bit RGBX 5-5-5-1"; break;
1218 	case V4L2_PIX_FMT_BGRA555:	descr = "16-bit BGRA 5-5-5-1"; break;
1219 	case V4L2_PIX_FMT_BGRX555:	descr = "16-bit BGRX 5-5-5-1"; break;
1220 	case V4L2_PIX_FMT_RGB565:	descr = "16-bit RGB 5-6-5"; break;
1221 	case V4L2_PIX_FMT_RGB555X:	descr = "16-bit A/XRGB 1-5-5-5 BE"; break;
1222 	case V4L2_PIX_FMT_ARGB555X:	descr = "16-bit ARGB 1-5-5-5 BE"; break;
1223 	case V4L2_PIX_FMT_XRGB555X:	descr = "16-bit XRGB 1-5-5-5 BE"; break;
1224 	case V4L2_PIX_FMT_RGB565X:	descr = "16-bit RGB 5-6-5 BE"; break;
1225 	case V4L2_PIX_FMT_BGR666:	descr = "18-bit BGRX 6-6-6-14"; break;
1226 	case V4L2_PIX_FMT_BGR24:	descr = "24-bit BGR 8-8-8"; break;
1227 	case V4L2_PIX_FMT_RGB24:	descr = "24-bit RGB 8-8-8"; break;
1228 	case V4L2_PIX_FMT_BGR32:	descr = "32-bit BGRA/X 8-8-8-8"; break;
1229 	case V4L2_PIX_FMT_ABGR32:	descr = "32-bit BGRA 8-8-8-8"; break;
1230 	case V4L2_PIX_FMT_XBGR32:	descr = "32-bit BGRX 8-8-8-8"; break;
1231 	case V4L2_PIX_FMT_RGB32:	descr = "32-bit A/XRGB 8-8-8-8"; break;
1232 	case V4L2_PIX_FMT_ARGB32:	descr = "32-bit ARGB 8-8-8-8"; break;
1233 	case V4L2_PIX_FMT_XRGB32:	descr = "32-bit XRGB 8-8-8-8"; break;
1234 	case V4L2_PIX_FMT_BGRA32:	descr = "32-bit ABGR 8-8-8-8"; break;
1235 	case V4L2_PIX_FMT_BGRX32:	descr = "32-bit XBGR 8-8-8-8"; break;
1236 	case V4L2_PIX_FMT_RGBA32:	descr = "32-bit RGBA 8-8-8-8"; break;
1237 	case V4L2_PIX_FMT_RGBX32:	descr = "32-bit RGBX 8-8-8-8"; break;
1238 	case V4L2_PIX_FMT_GREY:		descr = "8-bit Greyscale"; break;
1239 	case V4L2_PIX_FMT_Y4:		descr = "4-bit Greyscale"; break;
1240 	case V4L2_PIX_FMT_Y6:		descr = "6-bit Greyscale"; break;
1241 	case V4L2_PIX_FMT_Y10:		descr = "10-bit Greyscale"; break;
1242 	case V4L2_PIX_FMT_Y12:		descr = "12-bit Greyscale"; break;
1243 	case V4L2_PIX_FMT_Y14:		descr = "14-bit Greyscale"; break;
1244 	case V4L2_PIX_FMT_Y16:		descr = "16-bit Greyscale"; break;
1245 	case V4L2_PIX_FMT_Y16_BE:	descr = "16-bit Greyscale BE"; break;
1246 	case V4L2_PIX_FMT_Y10BPACK:	descr = "10-bit Greyscale (Packed)"; break;
1247 	case V4L2_PIX_FMT_Y10P:		descr = "10-bit Greyscale (MIPI Packed)"; break;
1248 	case V4L2_PIX_FMT_Y8I:		descr = "Interleaved 8-bit Greyscale"; break;
1249 	case V4L2_PIX_FMT_Y12I:		descr = "Interleaved 12-bit Greyscale"; break;
1250 	case V4L2_PIX_FMT_Z16:		descr = "16-bit Depth"; break;
1251 	case V4L2_PIX_FMT_INZI:		descr = "Planar 10:16 Greyscale Depth"; break;
1252 	case V4L2_PIX_FMT_CNF4:		descr = "4-bit Depth Confidence (Packed)"; break;
1253 	case V4L2_PIX_FMT_PAL8:		descr = "8-bit Palette"; break;
1254 	case V4L2_PIX_FMT_UV8:		descr = "8-bit Chrominance UV 4-4"; break;
1255 	case V4L2_PIX_FMT_YVU410:	descr = "Planar YVU 4:1:0"; break;
1256 	case V4L2_PIX_FMT_YVU420:	descr = "Planar YVU 4:2:0"; break;
1257 	case V4L2_PIX_FMT_YUYV:		descr = "YUYV 4:2:2"; break;
1258 	case V4L2_PIX_FMT_YYUV:		descr = "YYUV 4:2:2"; break;
1259 	case V4L2_PIX_FMT_YVYU:		descr = "YVYU 4:2:2"; break;
1260 	case V4L2_PIX_FMT_UYVY:		descr = "UYVY 4:2:2"; break;
1261 	case V4L2_PIX_FMT_VYUY:		descr = "VYUY 4:2:2"; break;
1262 	case V4L2_PIX_FMT_YUV422P:	descr = "Planar YUV 4:2:2"; break;
1263 	case V4L2_PIX_FMT_YUV411P:	descr = "Planar YUV 4:1:1"; break;
1264 	case V4L2_PIX_FMT_Y41P:		descr = "YUV 4:1:1 (Packed)"; break;
1265 	case V4L2_PIX_FMT_YUV444:	descr = "16-bit A/XYUV 4-4-4-4"; break;
1266 	case V4L2_PIX_FMT_YUV555:	descr = "16-bit A/XYUV 1-5-5-5"; break;
1267 	case V4L2_PIX_FMT_YUV565:	descr = "16-bit YUV 5-6-5"; break;
1268 	case V4L2_PIX_FMT_YUV24:	descr = "24-bit YUV 4:4:4 8-8-8"; break;
1269 	case V4L2_PIX_FMT_YUV32:	descr = "32-bit A/XYUV 8-8-8-8"; break;
1270 	case V4L2_PIX_FMT_AYUV32:	descr = "32-bit AYUV 8-8-8-8"; break;
1271 	case V4L2_PIX_FMT_XYUV32:	descr = "32-bit XYUV 8-8-8-8"; break;
1272 	case V4L2_PIX_FMT_VUYA32:	descr = "32-bit VUYA 8-8-8-8"; break;
1273 	case V4L2_PIX_FMT_VUYX32:	descr = "32-bit VUYX 8-8-8-8"; break;
1274 	case V4L2_PIX_FMT_YUV410:	descr = "Planar YUV 4:1:0"; break;
1275 	case V4L2_PIX_FMT_YUV420:	descr = "Planar YUV 4:2:0"; break;
1276 	case V4L2_PIX_FMT_HI240:	descr = "8-bit Dithered RGB (BTTV)"; break;
1277 	case V4L2_PIX_FMT_HM12:		descr = "YUV 4:2:0 (16x16 Macroblocks)"; break;
1278 	case V4L2_PIX_FMT_M420:		descr = "YUV 4:2:0 (M420)"; break;
1279 	case V4L2_PIX_FMT_NV12:		descr = "Y/CbCr 4:2:0"; break;
1280 	case V4L2_PIX_FMT_NV21:		descr = "Y/CrCb 4:2:0"; break;
1281 	case V4L2_PIX_FMT_NV16:		descr = "Y/CbCr 4:2:2"; break;
1282 	case V4L2_PIX_FMT_NV61:		descr = "Y/CrCb 4:2:2"; break;
1283 	case V4L2_PIX_FMT_NV24:		descr = "Y/CbCr 4:4:4"; break;
1284 	case V4L2_PIX_FMT_NV42:		descr = "Y/CrCb 4:4:4"; break;
1285 	case V4L2_PIX_FMT_NV12M:	descr = "Y/CbCr 4:2:0 (N-C)"; break;
1286 	case V4L2_PIX_FMT_NV21M:	descr = "Y/CrCb 4:2:0 (N-C)"; break;
1287 	case V4L2_PIX_FMT_NV16M:	descr = "Y/CbCr 4:2:2 (N-C)"; break;
1288 	case V4L2_PIX_FMT_NV61M:	descr = "Y/CrCb 4:2:2 (N-C)"; break;
1289 	case V4L2_PIX_FMT_NV12MT:	descr = "Y/CbCr 4:2:0 (64x32 MB, N-C)"; break;
1290 	case V4L2_PIX_FMT_NV12MT_16X16:	descr = "Y/CbCr 4:2:0 (16x16 MB, N-C)"; break;
1291 	case V4L2_PIX_FMT_YUV420M:	descr = "Planar YUV 4:2:0 (N-C)"; break;
1292 	case V4L2_PIX_FMT_YVU420M:	descr = "Planar YVU 4:2:0 (N-C)"; break;
1293 	case V4L2_PIX_FMT_YUV422M:	descr = "Planar YUV 4:2:2 (N-C)"; break;
1294 	case V4L2_PIX_FMT_YVU422M:	descr = "Planar YVU 4:2:2 (N-C)"; break;
1295 	case V4L2_PIX_FMT_YUV444M:	descr = "Planar YUV 4:4:4 (N-C)"; break;
1296 	case V4L2_PIX_FMT_YVU444M:	descr = "Planar YVU 4:4:4 (N-C)"; break;
1297 	case V4L2_PIX_FMT_SBGGR8:	descr = "8-bit Bayer BGBG/GRGR"; break;
1298 	case V4L2_PIX_FMT_SGBRG8:	descr = "8-bit Bayer GBGB/RGRG"; break;
1299 	case V4L2_PIX_FMT_SGRBG8:	descr = "8-bit Bayer GRGR/BGBG"; break;
1300 	case V4L2_PIX_FMT_SRGGB8:	descr = "8-bit Bayer RGRG/GBGB"; break;
1301 	case V4L2_PIX_FMT_SBGGR10:	descr = "10-bit Bayer BGBG/GRGR"; break;
1302 	case V4L2_PIX_FMT_SGBRG10:	descr = "10-bit Bayer GBGB/RGRG"; break;
1303 	case V4L2_PIX_FMT_SGRBG10:	descr = "10-bit Bayer GRGR/BGBG"; break;
1304 	case V4L2_PIX_FMT_SRGGB10:	descr = "10-bit Bayer RGRG/GBGB"; break;
1305 	case V4L2_PIX_FMT_SBGGR10P:	descr = "10-bit Bayer BGBG/GRGR Packed"; break;
1306 	case V4L2_PIX_FMT_SGBRG10P:	descr = "10-bit Bayer GBGB/RGRG Packed"; break;
1307 	case V4L2_PIX_FMT_SGRBG10P:	descr = "10-bit Bayer GRGR/BGBG Packed"; break;
1308 	case V4L2_PIX_FMT_SRGGB10P:	descr = "10-bit Bayer RGRG/GBGB Packed"; break;
1309 	case V4L2_PIX_FMT_IPU3_SBGGR10: descr = "10-bit bayer BGGR IPU3 Packed"; break;
1310 	case V4L2_PIX_FMT_IPU3_SGBRG10: descr = "10-bit bayer GBRG IPU3 Packed"; break;
1311 	case V4L2_PIX_FMT_IPU3_SGRBG10: descr = "10-bit bayer GRBG IPU3 Packed"; break;
1312 	case V4L2_PIX_FMT_IPU3_SRGGB10: descr = "10-bit bayer RGGB IPU3 Packed"; break;
1313 	case V4L2_PIX_FMT_SBGGR10ALAW8:	descr = "8-bit Bayer BGBG/GRGR (A-law)"; break;
1314 	case V4L2_PIX_FMT_SGBRG10ALAW8:	descr = "8-bit Bayer GBGB/RGRG (A-law)"; break;
1315 	case V4L2_PIX_FMT_SGRBG10ALAW8:	descr = "8-bit Bayer GRGR/BGBG (A-law)"; break;
1316 	case V4L2_PIX_FMT_SRGGB10ALAW8:	descr = "8-bit Bayer RGRG/GBGB (A-law)"; break;
1317 	case V4L2_PIX_FMT_SBGGR10DPCM8:	descr = "8-bit Bayer BGBG/GRGR (DPCM)"; break;
1318 	case V4L2_PIX_FMT_SGBRG10DPCM8:	descr = "8-bit Bayer GBGB/RGRG (DPCM)"; break;
1319 	case V4L2_PIX_FMT_SGRBG10DPCM8:	descr = "8-bit Bayer GRGR/BGBG (DPCM)"; break;
1320 	case V4L2_PIX_FMT_SRGGB10DPCM8:	descr = "8-bit Bayer RGRG/GBGB (DPCM)"; break;
1321 	case V4L2_PIX_FMT_SBGGR12:	descr = "12-bit Bayer BGBG/GRGR"; break;
1322 	case V4L2_PIX_FMT_SGBRG12:	descr = "12-bit Bayer GBGB/RGRG"; break;
1323 	case V4L2_PIX_FMT_SGRBG12:	descr = "12-bit Bayer GRGR/BGBG"; break;
1324 	case V4L2_PIX_FMT_SRGGB12:	descr = "12-bit Bayer RGRG/GBGB"; break;
1325 	case V4L2_PIX_FMT_SBGGR12P:	descr = "12-bit Bayer BGBG/GRGR Packed"; break;
1326 	case V4L2_PIX_FMT_SGBRG12P:	descr = "12-bit Bayer GBGB/RGRG Packed"; break;
1327 	case V4L2_PIX_FMT_SGRBG12P:	descr = "12-bit Bayer GRGR/BGBG Packed"; break;
1328 	case V4L2_PIX_FMT_SRGGB12P:	descr = "12-bit Bayer RGRG/GBGB Packed"; break;
1329 	case V4L2_PIX_FMT_SBGGR14:	descr = "14-bit Bayer BGBG/GRGR"; break;
1330 	case V4L2_PIX_FMT_SGBRG14:	descr = "14-bit Bayer GBGB/RGRG"; break;
1331 	case V4L2_PIX_FMT_SGRBG14:	descr = "14-bit Bayer GRGR/BGBG"; break;
1332 	case V4L2_PIX_FMT_SRGGB14:	descr = "14-bit Bayer RGRG/GBGB"; break;
1333 	case V4L2_PIX_FMT_SBGGR14P:	descr = "14-bit Bayer BGBG/GRGR Packed"; break;
1334 	case V4L2_PIX_FMT_SGBRG14P:	descr = "14-bit Bayer GBGB/RGRG Packed"; break;
1335 	case V4L2_PIX_FMT_SGRBG14P:	descr = "14-bit Bayer GRGR/BGBG Packed"; break;
1336 	case V4L2_PIX_FMT_SRGGB14P:	descr = "14-bit Bayer RGRG/GBGB Packed"; break;
1337 	case V4L2_PIX_FMT_SBGGR16:	descr = "16-bit Bayer BGBG/GRGR"; break;
1338 	case V4L2_PIX_FMT_SGBRG16:	descr = "16-bit Bayer GBGB/RGRG"; break;
1339 	case V4L2_PIX_FMT_SGRBG16:	descr = "16-bit Bayer GRGR/BGBG"; break;
1340 	case V4L2_PIX_FMT_SRGGB16:	descr = "16-bit Bayer RGRG/GBGB"; break;
1341 	case V4L2_PIX_FMT_SN9C20X_I420:	descr = "GSPCA SN9C20X I420"; break;
1342 	case V4L2_PIX_FMT_SPCA501:	descr = "GSPCA SPCA501"; break;
1343 	case V4L2_PIX_FMT_SPCA505:	descr = "GSPCA SPCA505"; break;
1344 	case V4L2_PIX_FMT_SPCA508:	descr = "GSPCA SPCA508"; break;
1345 	case V4L2_PIX_FMT_STV0680:	descr = "GSPCA STV0680"; break;
1346 	case V4L2_PIX_FMT_TM6000:	descr = "A/V + VBI Mux Packet"; break;
1347 	case V4L2_PIX_FMT_CIT_YYVYUY:	descr = "GSPCA CIT YYVYUY"; break;
1348 	case V4L2_PIX_FMT_KONICA420:	descr = "GSPCA KONICA420"; break;
1349 	case V4L2_PIX_FMT_HSV24:	descr = "24-bit HSV 8-8-8"; break;
1350 	case V4L2_PIX_FMT_HSV32:	descr = "32-bit XHSV 8-8-8-8"; break;
1351 	case V4L2_SDR_FMT_CU8:		descr = "Complex U8"; break;
1352 	case V4L2_SDR_FMT_CU16LE:	descr = "Complex U16LE"; break;
1353 	case V4L2_SDR_FMT_CS8:		descr = "Complex S8"; break;
1354 	case V4L2_SDR_FMT_CS14LE:	descr = "Complex S14LE"; break;
1355 	case V4L2_SDR_FMT_RU12LE:	descr = "Real U12LE"; break;
1356 	case V4L2_SDR_FMT_PCU16BE:	descr = "Planar Complex U16BE"; break;
1357 	case V4L2_SDR_FMT_PCU18BE:	descr = "Planar Complex U18BE"; break;
1358 	case V4L2_SDR_FMT_PCU20BE:	descr = "Planar Complex U20BE"; break;
1359 	case V4L2_TCH_FMT_DELTA_TD16:	descr = "16-bit Signed Deltas"; break;
1360 	case V4L2_TCH_FMT_DELTA_TD08:	descr = "8-bit Signed Deltas"; break;
1361 	case V4L2_TCH_FMT_TU16:		descr = "16-bit Unsigned Touch Data"; break;
1362 	case V4L2_TCH_FMT_TU08:		descr = "8-bit Unsigned Touch Data"; break;
1363 	case V4L2_META_FMT_VSP1_HGO:	descr = "R-Car VSP1 1-D Histogram"; break;
1364 	case V4L2_META_FMT_VSP1_HGT:	descr = "R-Car VSP1 2-D Histogram"; break;
1365 	case V4L2_META_FMT_UVC:		descr = "UVC Payload Header Metadata"; break;
1366 	case V4L2_META_FMT_D4XX:	descr = "Intel D4xx UVC Metadata"; break;
1367 	case V4L2_META_FMT_VIVID:       descr = "Vivid Metadata"; break;
1368 	case V4L2_META_FMT_RK_ISP1_PARAMS:	descr = "Rockchip ISP1 3A Parameters"; break;
1369 	case V4L2_META_FMT_RK_ISP1_STAT_3A:	descr = "Rockchip ISP1 3A Statistics"; break;
1370 
1371 	default:
1372 		/* Compressed formats */
1373 		flags = V4L2_FMT_FLAG_COMPRESSED;
1374 		switch (fmt->pixelformat) {
1375 		/* Max description length mask:	descr = "0123456789012345678901234567890" */
1376 		case V4L2_PIX_FMT_MJPEG:	descr = "Motion-JPEG"; break;
1377 		case V4L2_PIX_FMT_JPEG:		descr = "JFIF JPEG"; break;
1378 		case V4L2_PIX_FMT_DV:		descr = "1394"; break;
1379 		case V4L2_PIX_FMT_MPEG:		descr = "MPEG-1/2/4"; break;
1380 		case V4L2_PIX_FMT_H264:		descr = "H.264"; break;
1381 		case V4L2_PIX_FMT_H264_NO_SC:	descr = "H.264 (No Start Codes)"; break;
1382 		case V4L2_PIX_FMT_H264_MVC:	descr = "H.264 MVC"; break;
1383 		case V4L2_PIX_FMT_H264_SLICE:	descr = "H.264 Parsed Slice Data"; break;
1384 		case V4L2_PIX_FMT_H263:		descr = "H.263"; break;
1385 		case V4L2_PIX_FMT_MPEG1:	descr = "MPEG-1 ES"; break;
1386 		case V4L2_PIX_FMT_MPEG2:	descr = "MPEG-2 ES"; break;
1387 		case V4L2_PIX_FMT_MPEG2_SLICE:	descr = "MPEG-2 Parsed Slice Data"; break;
1388 		case V4L2_PIX_FMT_MPEG4:	descr = "MPEG-4 Part 2 ES"; break;
1389 		case V4L2_PIX_FMT_XVID:		descr = "Xvid"; break;
1390 		case V4L2_PIX_FMT_VC1_ANNEX_G:	descr = "VC-1 (SMPTE 412M Annex G)"; break;
1391 		case V4L2_PIX_FMT_VC1_ANNEX_L:	descr = "VC-1 (SMPTE 412M Annex L)"; break;
1392 		case V4L2_PIX_FMT_VP8:		descr = "VP8"; break;
1393 		case V4L2_PIX_FMT_VP8_FRAME:    descr = "VP8 Frame"; break;
1394 		case V4L2_PIX_FMT_VP9:		descr = "VP9"; break;
1395 		case V4L2_PIX_FMT_HEVC:		descr = "HEVC"; break; /* aka H.265 */
1396 		case V4L2_PIX_FMT_HEVC_SLICE:	descr = "HEVC Parsed Slice Data"; break;
1397 		case V4L2_PIX_FMT_FWHT:		descr = "FWHT"; break; /* used in vicodec */
1398 		case V4L2_PIX_FMT_FWHT_STATELESS:	descr = "FWHT Stateless"; break; /* used in vicodec */
1399 		case V4L2_PIX_FMT_CPIA1:	descr = "GSPCA CPiA YUV"; break;
1400 		case V4L2_PIX_FMT_WNVA:		descr = "WNVA"; break;
1401 		case V4L2_PIX_FMT_SN9C10X:	descr = "GSPCA SN9C10X"; break;
1402 		case V4L2_PIX_FMT_PWC1:		descr = "Raw Philips Webcam Type (Old)"; break;
1403 		case V4L2_PIX_FMT_PWC2:		descr = "Raw Philips Webcam Type (New)"; break;
1404 		case V4L2_PIX_FMT_ET61X251:	descr = "GSPCA ET61X251"; break;
1405 		case V4L2_PIX_FMT_SPCA561:	descr = "GSPCA SPCA561"; break;
1406 		case V4L2_PIX_FMT_PAC207:	descr = "GSPCA PAC207"; break;
1407 		case V4L2_PIX_FMT_MR97310A:	descr = "GSPCA MR97310A"; break;
1408 		case V4L2_PIX_FMT_JL2005BCD:	descr = "GSPCA JL2005BCD"; break;
1409 		case V4L2_PIX_FMT_SN9C2028:	descr = "GSPCA SN9C2028"; break;
1410 		case V4L2_PIX_FMT_SQ905C:	descr = "GSPCA SQ905C"; break;
1411 		case V4L2_PIX_FMT_PJPG:		descr = "GSPCA PJPG"; break;
1412 		case V4L2_PIX_FMT_OV511:	descr = "GSPCA OV511"; break;
1413 		case V4L2_PIX_FMT_OV518:	descr = "GSPCA OV518"; break;
1414 		case V4L2_PIX_FMT_JPGL:		descr = "JPEG Lite"; break;
1415 		case V4L2_PIX_FMT_SE401:	descr = "GSPCA SE401"; break;
1416 		case V4L2_PIX_FMT_S5C_UYVY_JPG:	descr = "S5C73MX interleaved UYVY/JPEG"; break;
1417 		case V4L2_PIX_FMT_MT21C:	descr = "Mediatek Compressed Format"; break;
1418 		case V4L2_PIX_FMT_SUNXI_TILED_NV12: descr = "Sunxi Tiled NV12 Format"; break;
1419 		default:
1420 			if (fmt->description[0])
1421 				return;
1422 			WARN(1, "Unknown pixelformat 0x%08x\n", fmt->pixelformat);
1423 			flags = 0;
1424 			snprintf(fmt->description, sz, "%p4cc",
1425 				 &fmt->pixelformat);
1426 			break;
1427 		}
1428 	}
1429 
1430 	if (descr)
1431 		WARN_ON(strscpy(fmt->description, descr, sz) < 0);
1432 	fmt->flags |= flags;
1433 }
1434 
v4l_enum_fmt(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1435 static int v4l_enum_fmt(const struct v4l2_ioctl_ops *ops,
1436 				struct file *file, void *fh, void *arg)
1437 {
1438 	struct video_device *vdev = video_devdata(file);
1439 	struct v4l2_fmtdesc *p = arg;
1440 	int ret = check_fmt(file, p->type);
1441 	u32 mbus_code;
1442 	u32 cap_mask;
1443 
1444 	if (ret)
1445 		return ret;
1446 	ret = -EINVAL;
1447 
1448 	if (!(vdev->device_caps & V4L2_CAP_IO_MC))
1449 		p->mbus_code = 0;
1450 
1451 	mbus_code = p->mbus_code;
1452 	CLEAR_AFTER_FIELD(p, type);
1453 	p->mbus_code = mbus_code;
1454 
1455 	switch (p->type) {
1456 	case V4L2_BUF_TYPE_VIDEO_CAPTURE:
1457 	case V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE:
1458 		cap_mask = V4L2_CAP_VIDEO_CAPTURE_MPLANE |
1459 			   V4L2_CAP_VIDEO_M2M_MPLANE;
1460 		if (!!(vdev->device_caps & cap_mask) !=
1461 		    (p->type == V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE))
1462 			break;
1463 
1464 		if (unlikely(!ops->vidioc_enum_fmt_vid_cap))
1465 			break;
1466 		ret = ops->vidioc_enum_fmt_vid_cap(file, fh, arg);
1467 		break;
1468 	case V4L2_BUF_TYPE_VIDEO_OVERLAY:
1469 		if (unlikely(!ops->vidioc_enum_fmt_vid_overlay))
1470 			break;
1471 		ret = ops->vidioc_enum_fmt_vid_overlay(file, fh, arg);
1472 		break;
1473 	case V4L2_BUF_TYPE_VIDEO_OUTPUT:
1474 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE:
1475 		cap_mask = V4L2_CAP_VIDEO_OUTPUT_MPLANE |
1476 			   V4L2_CAP_VIDEO_M2M_MPLANE;
1477 		if (!!(vdev->device_caps & cap_mask) !=
1478 		    (p->type == V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE))
1479 			break;
1480 
1481 		if (unlikely(!ops->vidioc_enum_fmt_vid_out))
1482 			break;
1483 		ret = ops->vidioc_enum_fmt_vid_out(file, fh, arg);
1484 		break;
1485 	case V4L2_BUF_TYPE_SDR_CAPTURE:
1486 		if (unlikely(!ops->vidioc_enum_fmt_sdr_cap))
1487 			break;
1488 		ret = ops->vidioc_enum_fmt_sdr_cap(file, fh, arg);
1489 		break;
1490 	case V4L2_BUF_TYPE_SDR_OUTPUT:
1491 		if (unlikely(!ops->vidioc_enum_fmt_sdr_out))
1492 			break;
1493 		ret = ops->vidioc_enum_fmt_sdr_out(file, fh, arg);
1494 		break;
1495 	case V4L2_BUF_TYPE_META_CAPTURE:
1496 		if (unlikely(!ops->vidioc_enum_fmt_meta_cap))
1497 			break;
1498 		ret = ops->vidioc_enum_fmt_meta_cap(file, fh, arg);
1499 		break;
1500 	case V4L2_BUF_TYPE_META_OUTPUT:
1501 		if (unlikely(!ops->vidioc_enum_fmt_meta_out))
1502 			break;
1503 		ret = ops->vidioc_enum_fmt_meta_out(file, fh, arg);
1504 		break;
1505 	}
1506 	if (ret == 0)
1507 		v4l_fill_fmtdesc(p);
1508 	return ret;
1509 }
1510 
v4l_pix_format_touch(struct v4l2_pix_format * p)1511 static void v4l_pix_format_touch(struct v4l2_pix_format *p)
1512 {
1513 	/*
1514 	 * The v4l2_pix_format structure contains fields that make no sense for
1515 	 * touch. Set them to default values in this case.
1516 	 */
1517 
1518 	p->field = V4L2_FIELD_NONE;
1519 	p->colorspace = V4L2_COLORSPACE_RAW;
1520 	p->flags = 0;
1521 	p->ycbcr_enc = 0;
1522 	p->quantization = 0;
1523 	p->xfer_func = 0;
1524 }
1525 
v4l_g_fmt(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1526 static int v4l_g_fmt(const struct v4l2_ioctl_ops *ops,
1527 				struct file *file, void *fh, void *arg)
1528 {
1529 	struct v4l2_format *p = arg;
1530 	struct video_device *vfd = video_devdata(file);
1531 	int ret = check_fmt(file, p->type);
1532 
1533 	if (ret)
1534 		return ret;
1535 
1536 	/*
1537 	 * fmt can't be cleared for these overlay types due to the 'clips'
1538 	 * 'clipcount' and 'bitmap' pointers in struct v4l2_window.
1539 	 * Those are provided by the user. So handle these two overlay types
1540 	 * first, and then just do a simple memset for the other types.
1541 	 */
1542 	switch (p->type) {
1543 	case V4L2_BUF_TYPE_VIDEO_OVERLAY:
1544 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY: {
1545 		struct v4l2_clip *clips = p->fmt.win.clips;
1546 		u32 clipcount = p->fmt.win.clipcount;
1547 		void __user *bitmap = p->fmt.win.bitmap;
1548 
1549 		memset(&p->fmt, 0, sizeof(p->fmt));
1550 		p->fmt.win.clips = clips;
1551 		p->fmt.win.clipcount = clipcount;
1552 		p->fmt.win.bitmap = bitmap;
1553 		break;
1554 	}
1555 	default:
1556 		memset(&p->fmt, 0, sizeof(p->fmt));
1557 		break;
1558 	}
1559 
1560 	switch (p->type) {
1561 	case V4L2_BUF_TYPE_VIDEO_CAPTURE:
1562 		if (unlikely(!ops->vidioc_g_fmt_vid_cap))
1563 			break;
1564 		p->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1565 		ret = ops->vidioc_g_fmt_vid_cap(file, fh, arg);
1566 		/* just in case the driver zeroed it again */
1567 		p->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1568 		if (vfd->vfl_type == VFL_TYPE_TOUCH)
1569 			v4l_pix_format_touch(&p->fmt.pix);
1570 		return ret;
1571 	case V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE:
1572 		return ops->vidioc_g_fmt_vid_cap_mplane(file, fh, arg);
1573 	case V4L2_BUF_TYPE_VIDEO_OVERLAY:
1574 		return ops->vidioc_g_fmt_vid_overlay(file, fh, arg);
1575 	case V4L2_BUF_TYPE_VBI_CAPTURE:
1576 		return ops->vidioc_g_fmt_vbi_cap(file, fh, arg);
1577 	case V4L2_BUF_TYPE_SLICED_VBI_CAPTURE:
1578 		return ops->vidioc_g_fmt_sliced_vbi_cap(file, fh, arg);
1579 	case V4L2_BUF_TYPE_VIDEO_OUTPUT:
1580 		if (unlikely(!ops->vidioc_g_fmt_vid_out))
1581 			break;
1582 		p->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1583 		ret = ops->vidioc_g_fmt_vid_out(file, fh, arg);
1584 		/* just in case the driver zeroed it again */
1585 		p->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1586 		return ret;
1587 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE:
1588 		return ops->vidioc_g_fmt_vid_out_mplane(file, fh, arg);
1589 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY:
1590 		return ops->vidioc_g_fmt_vid_out_overlay(file, fh, arg);
1591 	case V4L2_BUF_TYPE_VBI_OUTPUT:
1592 		return ops->vidioc_g_fmt_vbi_out(file, fh, arg);
1593 	case V4L2_BUF_TYPE_SLICED_VBI_OUTPUT:
1594 		return ops->vidioc_g_fmt_sliced_vbi_out(file, fh, arg);
1595 	case V4L2_BUF_TYPE_SDR_CAPTURE:
1596 		return ops->vidioc_g_fmt_sdr_cap(file, fh, arg);
1597 	case V4L2_BUF_TYPE_SDR_OUTPUT:
1598 		return ops->vidioc_g_fmt_sdr_out(file, fh, arg);
1599 	case V4L2_BUF_TYPE_META_CAPTURE:
1600 		return ops->vidioc_g_fmt_meta_cap(file, fh, arg);
1601 	case V4L2_BUF_TYPE_META_OUTPUT:
1602 		return ops->vidioc_g_fmt_meta_out(file, fh, arg);
1603 	}
1604 	return -EINVAL;
1605 }
1606 
v4l_s_fmt(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1607 static int v4l_s_fmt(const struct v4l2_ioctl_ops *ops,
1608 				struct file *file, void *fh, void *arg)
1609 {
1610 	struct v4l2_format *p = arg;
1611 	struct video_device *vfd = video_devdata(file);
1612 	int ret = check_fmt(file, p->type);
1613 	unsigned int i;
1614 
1615 	if (ret)
1616 		return ret;
1617 
1618 	ret = v4l_enable_media_source(vfd);
1619 	if (ret)
1620 		return ret;
1621 	v4l_sanitize_format(p);
1622 
1623 	switch (p->type) {
1624 	case V4L2_BUF_TYPE_VIDEO_CAPTURE:
1625 		if (unlikely(!ops->vidioc_s_fmt_vid_cap))
1626 			break;
1627 		CLEAR_AFTER_FIELD(p, fmt.pix);
1628 		ret = ops->vidioc_s_fmt_vid_cap(file, fh, arg);
1629 		/* just in case the driver zeroed it again */
1630 		p->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1631 		if (vfd->vfl_type == VFL_TYPE_TOUCH)
1632 			v4l_pix_format_touch(&p->fmt.pix);
1633 		return ret;
1634 	case V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE:
1635 		if (unlikely(!ops->vidioc_s_fmt_vid_cap_mplane))
1636 			break;
1637 		CLEAR_AFTER_FIELD(p, fmt.pix_mp.xfer_func);
1638 		for (i = 0; i < p->fmt.pix_mp.num_planes; i++)
1639 			CLEAR_AFTER_FIELD(&p->fmt.pix_mp.plane_fmt[i],
1640 					  bytesperline);
1641 		return ops->vidioc_s_fmt_vid_cap_mplane(file, fh, arg);
1642 	case V4L2_BUF_TYPE_VIDEO_OVERLAY:
1643 		if (unlikely(!ops->vidioc_s_fmt_vid_overlay))
1644 			break;
1645 		CLEAR_AFTER_FIELD(p, fmt.win);
1646 		return ops->vidioc_s_fmt_vid_overlay(file, fh, arg);
1647 	case V4L2_BUF_TYPE_VBI_CAPTURE:
1648 		if (unlikely(!ops->vidioc_s_fmt_vbi_cap))
1649 			break;
1650 		CLEAR_AFTER_FIELD(p, fmt.vbi.flags);
1651 		return ops->vidioc_s_fmt_vbi_cap(file, fh, arg);
1652 	case V4L2_BUF_TYPE_SLICED_VBI_CAPTURE:
1653 		if (unlikely(!ops->vidioc_s_fmt_sliced_vbi_cap))
1654 			break;
1655 		CLEAR_AFTER_FIELD(p, fmt.sliced.io_size);
1656 		return ops->vidioc_s_fmt_sliced_vbi_cap(file, fh, arg);
1657 	case V4L2_BUF_TYPE_VIDEO_OUTPUT:
1658 		if (unlikely(!ops->vidioc_s_fmt_vid_out))
1659 			break;
1660 		CLEAR_AFTER_FIELD(p, fmt.pix);
1661 		ret = ops->vidioc_s_fmt_vid_out(file, fh, arg);
1662 		/* just in case the driver zeroed it again */
1663 		p->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1664 		return ret;
1665 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE:
1666 		if (unlikely(!ops->vidioc_s_fmt_vid_out_mplane))
1667 			break;
1668 		CLEAR_AFTER_FIELD(p, fmt.pix_mp.xfer_func);
1669 		for (i = 0; i < p->fmt.pix_mp.num_planes; i++)
1670 			CLEAR_AFTER_FIELD(&p->fmt.pix_mp.plane_fmt[i],
1671 					  bytesperline);
1672 		return ops->vidioc_s_fmt_vid_out_mplane(file, fh, arg);
1673 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY:
1674 		if (unlikely(!ops->vidioc_s_fmt_vid_out_overlay))
1675 			break;
1676 		CLEAR_AFTER_FIELD(p, fmt.win);
1677 		return ops->vidioc_s_fmt_vid_out_overlay(file, fh, arg);
1678 	case V4L2_BUF_TYPE_VBI_OUTPUT:
1679 		if (unlikely(!ops->vidioc_s_fmt_vbi_out))
1680 			break;
1681 		CLEAR_AFTER_FIELD(p, fmt.vbi.flags);
1682 		return ops->vidioc_s_fmt_vbi_out(file, fh, arg);
1683 	case V4L2_BUF_TYPE_SLICED_VBI_OUTPUT:
1684 		if (unlikely(!ops->vidioc_s_fmt_sliced_vbi_out))
1685 			break;
1686 		CLEAR_AFTER_FIELD(p, fmt.sliced.io_size);
1687 		return ops->vidioc_s_fmt_sliced_vbi_out(file, fh, arg);
1688 	case V4L2_BUF_TYPE_SDR_CAPTURE:
1689 		if (unlikely(!ops->vidioc_s_fmt_sdr_cap))
1690 			break;
1691 		CLEAR_AFTER_FIELD(p, fmt.sdr.buffersize);
1692 		return ops->vidioc_s_fmt_sdr_cap(file, fh, arg);
1693 	case V4L2_BUF_TYPE_SDR_OUTPUT:
1694 		if (unlikely(!ops->vidioc_s_fmt_sdr_out))
1695 			break;
1696 		CLEAR_AFTER_FIELD(p, fmt.sdr.buffersize);
1697 		return ops->vidioc_s_fmt_sdr_out(file, fh, arg);
1698 	case V4L2_BUF_TYPE_META_CAPTURE:
1699 		if (unlikely(!ops->vidioc_s_fmt_meta_cap))
1700 			break;
1701 		CLEAR_AFTER_FIELD(p, fmt.meta);
1702 		return ops->vidioc_s_fmt_meta_cap(file, fh, arg);
1703 	case V4L2_BUF_TYPE_META_OUTPUT:
1704 		if (unlikely(!ops->vidioc_s_fmt_meta_out))
1705 			break;
1706 		CLEAR_AFTER_FIELD(p, fmt.meta);
1707 		return ops->vidioc_s_fmt_meta_out(file, fh, arg);
1708 	}
1709 	return -EINVAL;
1710 }
1711 
v4l_try_fmt(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1712 static int v4l_try_fmt(const struct v4l2_ioctl_ops *ops,
1713 				struct file *file, void *fh, void *arg)
1714 {
1715 	struct v4l2_format *p = arg;
1716 	struct video_device *vfd = video_devdata(file);
1717 	int ret = check_fmt(file, p->type);
1718 	unsigned int i;
1719 
1720 	if (ret)
1721 		return ret;
1722 
1723 	v4l_sanitize_format(p);
1724 
1725 	switch (p->type) {
1726 	case V4L2_BUF_TYPE_VIDEO_CAPTURE:
1727 		if (unlikely(!ops->vidioc_try_fmt_vid_cap))
1728 			break;
1729 		CLEAR_AFTER_FIELD(p, fmt.pix);
1730 		ret = ops->vidioc_try_fmt_vid_cap(file, fh, arg);
1731 		/* just in case the driver zeroed it again */
1732 		p->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1733 		if (vfd->vfl_type == VFL_TYPE_TOUCH)
1734 			v4l_pix_format_touch(&p->fmt.pix);
1735 		return ret;
1736 	case V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE:
1737 		if (unlikely(!ops->vidioc_try_fmt_vid_cap_mplane))
1738 			break;
1739 		CLEAR_AFTER_FIELD(p, fmt.pix_mp.xfer_func);
1740 		for (i = 0; i < p->fmt.pix_mp.num_planes; i++)
1741 			CLEAR_AFTER_FIELD(&p->fmt.pix_mp.plane_fmt[i],
1742 					  bytesperline);
1743 		return ops->vidioc_try_fmt_vid_cap_mplane(file, fh, arg);
1744 	case V4L2_BUF_TYPE_VIDEO_OVERLAY:
1745 		if (unlikely(!ops->vidioc_try_fmt_vid_overlay))
1746 			break;
1747 		CLEAR_AFTER_FIELD(p, fmt.win);
1748 		return ops->vidioc_try_fmt_vid_overlay(file, fh, arg);
1749 	case V4L2_BUF_TYPE_VBI_CAPTURE:
1750 		if (unlikely(!ops->vidioc_try_fmt_vbi_cap))
1751 			break;
1752 		CLEAR_AFTER_FIELD(p, fmt.vbi.flags);
1753 		return ops->vidioc_try_fmt_vbi_cap(file, fh, arg);
1754 	case V4L2_BUF_TYPE_SLICED_VBI_CAPTURE:
1755 		if (unlikely(!ops->vidioc_try_fmt_sliced_vbi_cap))
1756 			break;
1757 		CLEAR_AFTER_FIELD(p, fmt.sliced.io_size);
1758 		return ops->vidioc_try_fmt_sliced_vbi_cap(file, fh, arg);
1759 	case V4L2_BUF_TYPE_VIDEO_OUTPUT:
1760 		if (unlikely(!ops->vidioc_try_fmt_vid_out))
1761 			break;
1762 		CLEAR_AFTER_FIELD(p, fmt.pix);
1763 		ret = ops->vidioc_try_fmt_vid_out(file, fh, arg);
1764 		/* just in case the driver zeroed it again */
1765 		p->fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
1766 		return ret;
1767 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE:
1768 		if (unlikely(!ops->vidioc_try_fmt_vid_out_mplane))
1769 			break;
1770 		CLEAR_AFTER_FIELD(p, fmt.pix_mp.xfer_func);
1771 		for (i = 0; i < p->fmt.pix_mp.num_planes; i++)
1772 			CLEAR_AFTER_FIELD(&p->fmt.pix_mp.plane_fmt[i],
1773 					  bytesperline);
1774 		return ops->vidioc_try_fmt_vid_out_mplane(file, fh, arg);
1775 	case V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY:
1776 		if (unlikely(!ops->vidioc_try_fmt_vid_out_overlay))
1777 			break;
1778 		CLEAR_AFTER_FIELD(p, fmt.win);
1779 		return ops->vidioc_try_fmt_vid_out_overlay(file, fh, arg);
1780 	case V4L2_BUF_TYPE_VBI_OUTPUT:
1781 		if (unlikely(!ops->vidioc_try_fmt_vbi_out))
1782 			break;
1783 		CLEAR_AFTER_FIELD(p, fmt.vbi.flags);
1784 		return ops->vidioc_try_fmt_vbi_out(file, fh, arg);
1785 	case V4L2_BUF_TYPE_SLICED_VBI_OUTPUT:
1786 		if (unlikely(!ops->vidioc_try_fmt_sliced_vbi_out))
1787 			break;
1788 		CLEAR_AFTER_FIELD(p, fmt.sliced.io_size);
1789 		return ops->vidioc_try_fmt_sliced_vbi_out(file, fh, arg);
1790 	case V4L2_BUF_TYPE_SDR_CAPTURE:
1791 		if (unlikely(!ops->vidioc_try_fmt_sdr_cap))
1792 			break;
1793 		CLEAR_AFTER_FIELD(p, fmt.sdr.buffersize);
1794 		return ops->vidioc_try_fmt_sdr_cap(file, fh, arg);
1795 	case V4L2_BUF_TYPE_SDR_OUTPUT:
1796 		if (unlikely(!ops->vidioc_try_fmt_sdr_out))
1797 			break;
1798 		CLEAR_AFTER_FIELD(p, fmt.sdr.buffersize);
1799 		return ops->vidioc_try_fmt_sdr_out(file, fh, arg);
1800 	case V4L2_BUF_TYPE_META_CAPTURE:
1801 		if (unlikely(!ops->vidioc_try_fmt_meta_cap))
1802 			break;
1803 		CLEAR_AFTER_FIELD(p, fmt.meta);
1804 		return ops->vidioc_try_fmt_meta_cap(file, fh, arg);
1805 	case V4L2_BUF_TYPE_META_OUTPUT:
1806 		if (unlikely(!ops->vidioc_try_fmt_meta_out))
1807 			break;
1808 		CLEAR_AFTER_FIELD(p, fmt.meta);
1809 		return ops->vidioc_try_fmt_meta_out(file, fh, arg);
1810 	}
1811 	return -EINVAL;
1812 }
1813 
v4l_streamon(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1814 static int v4l_streamon(const struct v4l2_ioctl_ops *ops,
1815 				struct file *file, void *fh, void *arg)
1816 {
1817 	return ops->vidioc_streamon(file, fh, *(unsigned int *)arg);
1818 }
1819 
v4l_streamoff(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1820 static int v4l_streamoff(const struct v4l2_ioctl_ops *ops,
1821 				struct file *file, void *fh, void *arg)
1822 {
1823 	return ops->vidioc_streamoff(file, fh, *(unsigned int *)arg);
1824 }
1825 
v4l_g_tuner(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1826 static int v4l_g_tuner(const struct v4l2_ioctl_ops *ops,
1827 				struct file *file, void *fh, void *arg)
1828 {
1829 	struct video_device *vfd = video_devdata(file);
1830 	struct v4l2_tuner *p = arg;
1831 	int err;
1832 
1833 	p->type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
1834 			V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
1835 	err = ops->vidioc_g_tuner(file, fh, p);
1836 	if (!err)
1837 		p->capability |= V4L2_TUNER_CAP_FREQ_BANDS;
1838 	return err;
1839 }
1840 
v4l_s_tuner(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1841 static int v4l_s_tuner(const struct v4l2_ioctl_ops *ops,
1842 				struct file *file, void *fh, void *arg)
1843 {
1844 	struct video_device *vfd = video_devdata(file);
1845 	struct v4l2_tuner *p = arg;
1846 	int ret;
1847 
1848 	ret = v4l_enable_media_source(vfd);
1849 	if (ret)
1850 		return ret;
1851 	p->type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
1852 			V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
1853 	return ops->vidioc_s_tuner(file, fh, p);
1854 }
1855 
v4l_g_modulator(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1856 static int v4l_g_modulator(const struct v4l2_ioctl_ops *ops,
1857 				struct file *file, void *fh, void *arg)
1858 {
1859 	struct video_device *vfd = video_devdata(file);
1860 	struct v4l2_modulator *p = arg;
1861 	int err;
1862 
1863 	if (vfd->vfl_type == VFL_TYPE_RADIO)
1864 		p->type = V4L2_TUNER_RADIO;
1865 
1866 	err = ops->vidioc_g_modulator(file, fh, p);
1867 	if (!err)
1868 		p->capability |= V4L2_TUNER_CAP_FREQ_BANDS;
1869 	return err;
1870 }
1871 
v4l_s_modulator(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1872 static int v4l_s_modulator(const struct v4l2_ioctl_ops *ops,
1873 				struct file *file, void *fh, void *arg)
1874 {
1875 	struct video_device *vfd = video_devdata(file);
1876 	struct v4l2_modulator *p = arg;
1877 
1878 	if (vfd->vfl_type == VFL_TYPE_RADIO)
1879 		p->type = V4L2_TUNER_RADIO;
1880 
1881 	return ops->vidioc_s_modulator(file, fh, p);
1882 }
1883 
v4l_g_frequency(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1884 static int v4l_g_frequency(const struct v4l2_ioctl_ops *ops,
1885 				struct file *file, void *fh, void *arg)
1886 {
1887 	struct video_device *vfd = video_devdata(file);
1888 	struct v4l2_frequency *p = arg;
1889 
1890 	if (vfd->vfl_type == VFL_TYPE_SDR)
1891 		p->type = V4L2_TUNER_SDR;
1892 	else
1893 		p->type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
1894 				V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
1895 	return ops->vidioc_g_frequency(file, fh, p);
1896 }
1897 
v4l_s_frequency(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1898 static int v4l_s_frequency(const struct v4l2_ioctl_ops *ops,
1899 				struct file *file, void *fh, void *arg)
1900 {
1901 	struct video_device *vfd = video_devdata(file);
1902 	const struct v4l2_frequency *p = arg;
1903 	enum v4l2_tuner_type type;
1904 	int ret;
1905 
1906 	ret = v4l_enable_media_source(vfd);
1907 	if (ret)
1908 		return ret;
1909 	if (vfd->vfl_type == VFL_TYPE_SDR) {
1910 		if (p->type != V4L2_TUNER_SDR && p->type != V4L2_TUNER_RF)
1911 			return -EINVAL;
1912 	} else {
1913 		type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
1914 				V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
1915 		if (type != p->type)
1916 			return -EINVAL;
1917 	}
1918 	return ops->vidioc_s_frequency(file, fh, p);
1919 }
1920 
v4l_enumstd(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1921 static int v4l_enumstd(const struct v4l2_ioctl_ops *ops,
1922 				struct file *file, void *fh, void *arg)
1923 {
1924 	struct video_device *vfd = video_devdata(file);
1925 	struct v4l2_standard *p = arg;
1926 
1927 	return v4l_video_std_enumstd(p, vfd->tvnorms);
1928 }
1929 
v4l_s_std(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1930 static int v4l_s_std(const struct v4l2_ioctl_ops *ops,
1931 				struct file *file, void *fh, void *arg)
1932 {
1933 	struct video_device *vfd = video_devdata(file);
1934 	v4l2_std_id id = *(v4l2_std_id *)arg, norm;
1935 	int ret;
1936 
1937 	ret = v4l_enable_media_source(vfd);
1938 	if (ret)
1939 		return ret;
1940 	norm = id & vfd->tvnorms;
1941 	if (vfd->tvnorms && !norm)	/* Check if std is supported */
1942 		return -EINVAL;
1943 
1944 	/* Calls the specific handler */
1945 	return ops->vidioc_s_std(file, fh, norm);
1946 }
1947 
v4l_querystd(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1948 static int v4l_querystd(const struct v4l2_ioctl_ops *ops,
1949 				struct file *file, void *fh, void *arg)
1950 {
1951 	struct video_device *vfd = video_devdata(file);
1952 	v4l2_std_id *p = arg;
1953 	int ret;
1954 
1955 	ret = v4l_enable_media_source(vfd);
1956 	if (ret)
1957 		return ret;
1958 	/*
1959 	 * If no signal is detected, then the driver should return
1960 	 * V4L2_STD_UNKNOWN. Otherwise it should return tvnorms with
1961 	 * any standards that do not apply removed.
1962 	 *
1963 	 * This means that tuners, audio and video decoders can join
1964 	 * their efforts to improve the standards detection.
1965 	 */
1966 	*p = vfd->tvnorms;
1967 	return ops->vidioc_querystd(file, fh, arg);
1968 }
1969 
v4l_s_hw_freq_seek(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1970 static int v4l_s_hw_freq_seek(const struct v4l2_ioctl_ops *ops,
1971 				struct file *file, void *fh, void *arg)
1972 {
1973 	struct video_device *vfd = video_devdata(file);
1974 	struct v4l2_hw_freq_seek *p = arg;
1975 	enum v4l2_tuner_type type;
1976 	int ret;
1977 
1978 	ret = v4l_enable_media_source(vfd);
1979 	if (ret)
1980 		return ret;
1981 	/* s_hw_freq_seek is not supported for SDR for now */
1982 	if (vfd->vfl_type == VFL_TYPE_SDR)
1983 		return -EINVAL;
1984 
1985 	type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
1986 		V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
1987 	if (p->type != type)
1988 		return -EINVAL;
1989 	return ops->vidioc_s_hw_freq_seek(file, fh, p);
1990 }
1991 
v4l_overlay(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1992 static int v4l_overlay(const struct v4l2_ioctl_ops *ops,
1993 				struct file *file, void *fh, void *arg)
1994 {
1995 	return ops->vidioc_overlay(file, fh, *(unsigned int *)arg);
1996 }
1997 
v4l_reqbufs(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)1998 static int v4l_reqbufs(const struct v4l2_ioctl_ops *ops,
1999 				struct file *file, void *fh, void *arg)
2000 {
2001 	struct v4l2_requestbuffers *p = arg;
2002 	int ret = check_fmt(file, p->type);
2003 
2004 	if (ret)
2005 		return ret;
2006 
2007 	CLEAR_AFTER_FIELD(p, capabilities);
2008 
2009 	return ops->vidioc_reqbufs(file, fh, p);
2010 }
2011 
v4l_querybuf(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2012 static int v4l_querybuf(const struct v4l2_ioctl_ops *ops,
2013 				struct file *file, void *fh, void *arg)
2014 {
2015 	struct v4l2_buffer *p = arg;
2016 	int ret = check_fmt(file, p->type);
2017 
2018 	return ret ? ret : ops->vidioc_querybuf(file, fh, p);
2019 }
2020 
v4l_qbuf(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2021 static int v4l_qbuf(const struct v4l2_ioctl_ops *ops,
2022 				struct file *file, void *fh, void *arg)
2023 {
2024 	struct v4l2_buffer *p = arg;
2025 	int ret = check_fmt(file, p->type);
2026 
2027 	return ret ? ret : ops->vidioc_qbuf(file, fh, p);
2028 }
2029 
v4l_dqbuf(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2030 static int v4l_dqbuf(const struct v4l2_ioctl_ops *ops,
2031 				struct file *file, void *fh, void *arg)
2032 {
2033 	struct v4l2_buffer *p = arg;
2034 	int ret = check_fmt(file, p->type);
2035 
2036 	return ret ? ret : ops->vidioc_dqbuf(file, fh, p);
2037 }
2038 
v4l_create_bufs(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2039 static int v4l_create_bufs(const struct v4l2_ioctl_ops *ops,
2040 				struct file *file, void *fh, void *arg)
2041 {
2042 	struct v4l2_create_buffers *create = arg;
2043 	int ret = check_fmt(file, create->format.type);
2044 
2045 	if (ret)
2046 		return ret;
2047 
2048 	CLEAR_AFTER_FIELD(create, capabilities);
2049 
2050 	v4l_sanitize_format(&create->format);
2051 
2052 	ret = ops->vidioc_create_bufs(file, fh, create);
2053 
2054 	if (create->format.type == V4L2_BUF_TYPE_VIDEO_CAPTURE ||
2055 	    create->format.type == V4L2_BUF_TYPE_VIDEO_OUTPUT)
2056 		create->format.fmt.pix.priv = V4L2_PIX_FMT_PRIV_MAGIC;
2057 
2058 	return ret;
2059 }
2060 
v4l_prepare_buf(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2061 static int v4l_prepare_buf(const struct v4l2_ioctl_ops *ops,
2062 				struct file *file, void *fh, void *arg)
2063 {
2064 	struct v4l2_buffer *b = arg;
2065 	int ret = check_fmt(file, b->type);
2066 
2067 	return ret ? ret : ops->vidioc_prepare_buf(file, fh, b);
2068 }
2069 
v4l_g_parm(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2070 static int v4l_g_parm(const struct v4l2_ioctl_ops *ops,
2071 				struct file *file, void *fh, void *arg)
2072 {
2073 	struct v4l2_streamparm *p = arg;
2074 	v4l2_std_id std;
2075 	int ret = check_fmt(file, p->type);
2076 
2077 	if (ret)
2078 		return ret;
2079 	if (ops->vidioc_g_parm)
2080 		return ops->vidioc_g_parm(file, fh, p);
2081 	if (p->type != V4L2_BUF_TYPE_VIDEO_CAPTURE &&
2082 	    p->type != V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE)
2083 		return -EINVAL;
2084 	p->parm.capture.readbuffers = 2;
2085 	ret = ops->vidioc_g_std(file, fh, &std);
2086 	if (ret == 0)
2087 		v4l2_video_std_frame_period(std, &p->parm.capture.timeperframe);
2088 	return ret;
2089 }
2090 
v4l_s_parm(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2091 static int v4l_s_parm(const struct v4l2_ioctl_ops *ops,
2092 				struct file *file, void *fh, void *arg)
2093 {
2094 	struct v4l2_streamparm *p = arg;
2095 	int ret = check_fmt(file, p->type);
2096 
2097 	if (ret)
2098 		return ret;
2099 
2100 	/* Note: extendedmode is never used in drivers */
2101 	if (V4L2_TYPE_IS_OUTPUT(p->type)) {
2102 		memset(p->parm.output.reserved, 0,
2103 		       sizeof(p->parm.output.reserved));
2104 		p->parm.output.extendedmode = 0;
2105 		p->parm.output.outputmode &= V4L2_MODE_HIGHQUALITY;
2106 	} else {
2107 		memset(p->parm.capture.reserved, 0,
2108 		       sizeof(p->parm.capture.reserved));
2109 		p->parm.capture.extendedmode = 0;
2110 		p->parm.capture.capturemode &= V4L2_MODE_HIGHQUALITY;
2111 	}
2112 	return ops->vidioc_s_parm(file, fh, p);
2113 }
2114 
v4l_queryctrl(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2115 static int v4l_queryctrl(const struct v4l2_ioctl_ops *ops,
2116 				struct file *file, void *fh, void *arg)
2117 {
2118 	struct video_device *vfd = video_devdata(file);
2119 	struct v4l2_queryctrl *p = arg;
2120 	struct v4l2_fh *vfh =
2121 		test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags) ? fh : NULL;
2122 
2123 	if (vfh && vfh->ctrl_handler)
2124 		return v4l2_queryctrl(vfh->ctrl_handler, p);
2125 	if (vfd->ctrl_handler)
2126 		return v4l2_queryctrl(vfd->ctrl_handler, p);
2127 	if (ops->vidioc_queryctrl)
2128 		return ops->vidioc_queryctrl(file, fh, p);
2129 	return -ENOTTY;
2130 }
2131 
v4l_query_ext_ctrl(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2132 static int v4l_query_ext_ctrl(const struct v4l2_ioctl_ops *ops,
2133 				struct file *file, void *fh, void *arg)
2134 {
2135 	struct video_device *vfd = video_devdata(file);
2136 	struct v4l2_query_ext_ctrl *p = arg;
2137 	struct v4l2_fh *vfh =
2138 		test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags) ? fh : NULL;
2139 
2140 	if (vfh && vfh->ctrl_handler)
2141 		return v4l2_query_ext_ctrl(vfh->ctrl_handler, p);
2142 	if (vfd->ctrl_handler)
2143 		return v4l2_query_ext_ctrl(vfd->ctrl_handler, p);
2144 	if (ops->vidioc_query_ext_ctrl)
2145 		return ops->vidioc_query_ext_ctrl(file, fh, p);
2146 	return -ENOTTY;
2147 }
2148 
v4l_querymenu(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2149 static int v4l_querymenu(const struct v4l2_ioctl_ops *ops,
2150 				struct file *file, void *fh, void *arg)
2151 {
2152 	struct video_device *vfd = video_devdata(file);
2153 	struct v4l2_querymenu *p = arg;
2154 	struct v4l2_fh *vfh =
2155 		test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags) ? fh : NULL;
2156 
2157 	if (vfh && vfh->ctrl_handler)
2158 		return v4l2_querymenu(vfh->ctrl_handler, p);
2159 	if (vfd->ctrl_handler)
2160 		return v4l2_querymenu(vfd->ctrl_handler, p);
2161 	if (ops->vidioc_querymenu)
2162 		return ops->vidioc_querymenu(file, fh, p);
2163 	return -ENOTTY;
2164 }
2165 
v4l_g_ctrl(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2166 static int v4l_g_ctrl(const struct v4l2_ioctl_ops *ops,
2167 				struct file *file, void *fh, void *arg)
2168 {
2169 	struct video_device *vfd = video_devdata(file);
2170 	struct v4l2_control *p = arg;
2171 	struct v4l2_fh *vfh =
2172 		test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags) ? fh : NULL;
2173 	struct v4l2_ext_controls ctrls;
2174 	struct v4l2_ext_control ctrl;
2175 
2176 	if (vfh && vfh->ctrl_handler)
2177 		return v4l2_g_ctrl(vfh->ctrl_handler, p);
2178 	if (vfd->ctrl_handler)
2179 		return v4l2_g_ctrl(vfd->ctrl_handler, p);
2180 	if (ops->vidioc_g_ctrl)
2181 		return ops->vidioc_g_ctrl(file, fh, p);
2182 	if (ops->vidioc_g_ext_ctrls == NULL)
2183 		return -ENOTTY;
2184 
2185 	ctrls.which = V4L2_CTRL_ID2WHICH(p->id);
2186 	ctrls.count = 1;
2187 	ctrls.controls = &ctrl;
2188 	ctrl.id = p->id;
2189 	ctrl.value = p->value;
2190 	if (check_ext_ctrls(&ctrls, 1)) {
2191 		int ret = ops->vidioc_g_ext_ctrls(file, fh, &ctrls);
2192 
2193 		if (ret == 0)
2194 			p->value = ctrl.value;
2195 		return ret;
2196 	}
2197 	return -EINVAL;
2198 }
2199 
v4l_s_ctrl(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2200 static int v4l_s_ctrl(const struct v4l2_ioctl_ops *ops,
2201 				struct file *file, void *fh, void *arg)
2202 {
2203 	struct video_device *vfd = video_devdata(file);
2204 	struct v4l2_control *p = arg;
2205 	struct v4l2_fh *vfh =
2206 		test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags) ? fh : NULL;
2207 	struct v4l2_ext_controls ctrls;
2208 	struct v4l2_ext_control ctrl;
2209 
2210 	if (vfh && vfh->ctrl_handler)
2211 		return v4l2_s_ctrl(vfh, vfh->ctrl_handler, p);
2212 	if (vfd->ctrl_handler)
2213 		return v4l2_s_ctrl(NULL, vfd->ctrl_handler, p);
2214 	if (ops->vidioc_s_ctrl)
2215 		return ops->vidioc_s_ctrl(file, fh, p);
2216 	if (ops->vidioc_s_ext_ctrls == NULL)
2217 		return -ENOTTY;
2218 
2219 	ctrls.which = V4L2_CTRL_ID2WHICH(p->id);
2220 	ctrls.count = 1;
2221 	ctrls.controls = &ctrl;
2222 	ctrl.id = p->id;
2223 	ctrl.value = p->value;
2224 	if (check_ext_ctrls(&ctrls, 1))
2225 		return ops->vidioc_s_ext_ctrls(file, fh, &ctrls);
2226 	return -EINVAL;
2227 }
2228 
v4l_g_ext_ctrls(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2229 static int v4l_g_ext_ctrls(const struct v4l2_ioctl_ops *ops,
2230 				struct file *file, void *fh, void *arg)
2231 {
2232 	struct video_device *vfd = video_devdata(file);
2233 	struct v4l2_ext_controls *p = arg;
2234 	struct v4l2_fh *vfh =
2235 		test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags) ? fh : NULL;
2236 
2237 	p->error_idx = p->count;
2238 	if (vfh && vfh->ctrl_handler)
2239 		return v4l2_g_ext_ctrls(vfh->ctrl_handler,
2240 					vfd, vfd->v4l2_dev->mdev, p);
2241 	if (vfd->ctrl_handler)
2242 		return v4l2_g_ext_ctrls(vfd->ctrl_handler,
2243 					vfd, vfd->v4l2_dev->mdev, p);
2244 	if (ops->vidioc_g_ext_ctrls == NULL)
2245 		return -ENOTTY;
2246 	return check_ext_ctrls(p, 0) ? ops->vidioc_g_ext_ctrls(file, fh, p) :
2247 					-EINVAL;
2248 }
2249 
v4l_s_ext_ctrls(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2250 static int v4l_s_ext_ctrls(const struct v4l2_ioctl_ops *ops,
2251 				struct file *file, void *fh, void *arg)
2252 {
2253 	struct video_device *vfd = video_devdata(file);
2254 	struct v4l2_ext_controls *p = arg;
2255 	struct v4l2_fh *vfh =
2256 		test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags) ? fh : NULL;
2257 
2258 	p->error_idx = p->count;
2259 	if (vfh && vfh->ctrl_handler)
2260 		return v4l2_s_ext_ctrls(vfh, vfh->ctrl_handler,
2261 					vfd, vfd->v4l2_dev->mdev, p);
2262 	if (vfd->ctrl_handler)
2263 		return v4l2_s_ext_ctrls(NULL, vfd->ctrl_handler,
2264 					vfd, vfd->v4l2_dev->mdev, p);
2265 	if (ops->vidioc_s_ext_ctrls == NULL)
2266 		return -ENOTTY;
2267 	return check_ext_ctrls(p, 0) ? ops->vidioc_s_ext_ctrls(file, fh, p) :
2268 					-EINVAL;
2269 }
2270 
v4l_try_ext_ctrls(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2271 static int v4l_try_ext_ctrls(const struct v4l2_ioctl_ops *ops,
2272 				struct file *file, void *fh, void *arg)
2273 {
2274 	struct video_device *vfd = video_devdata(file);
2275 	struct v4l2_ext_controls *p = arg;
2276 	struct v4l2_fh *vfh =
2277 		test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags) ? fh : NULL;
2278 
2279 	p->error_idx = p->count;
2280 	if (vfh && vfh->ctrl_handler)
2281 		return v4l2_try_ext_ctrls(vfh->ctrl_handler,
2282 					  vfd, vfd->v4l2_dev->mdev, p);
2283 	if (vfd->ctrl_handler)
2284 		return v4l2_try_ext_ctrls(vfd->ctrl_handler,
2285 					  vfd, vfd->v4l2_dev->mdev, p);
2286 	if (ops->vidioc_try_ext_ctrls == NULL)
2287 		return -ENOTTY;
2288 	return check_ext_ctrls(p, 0) ? ops->vidioc_try_ext_ctrls(file, fh, p) :
2289 					-EINVAL;
2290 }
2291 
2292 /*
2293  * The selection API specified originally that the _MPLANE buffer types
2294  * shouldn't be used. The reasons for this are lost in the mists of time
2295  * (or just really crappy memories). Regardless, this is really annoying
2296  * for userspace. So to keep things simple we map _MPLANE buffer types
2297  * to their 'regular' counterparts before calling the driver. And we
2298  * restore it afterwards. This way applications can use either buffer
2299  * type and drivers don't need to check for both.
2300  */
v4l_g_selection(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2301 static int v4l_g_selection(const struct v4l2_ioctl_ops *ops,
2302 			   struct file *file, void *fh, void *arg)
2303 {
2304 	struct v4l2_selection *p = arg;
2305 	u32 old_type = p->type;
2306 	int ret;
2307 
2308 	if (p->type == V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE)
2309 		p->type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
2310 	else if (p->type == V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE)
2311 		p->type = V4L2_BUF_TYPE_VIDEO_OUTPUT;
2312 	ret = ops->vidioc_g_selection(file, fh, p);
2313 	p->type = old_type;
2314 	return ret;
2315 }
2316 
v4l_s_selection(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2317 static int v4l_s_selection(const struct v4l2_ioctl_ops *ops,
2318 			   struct file *file, void *fh, void *arg)
2319 {
2320 	struct v4l2_selection *p = arg;
2321 	u32 old_type = p->type;
2322 	int ret;
2323 
2324 	if (p->type == V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE)
2325 		p->type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
2326 	else if (p->type == V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE)
2327 		p->type = V4L2_BUF_TYPE_VIDEO_OUTPUT;
2328 	ret = ops->vidioc_s_selection(file, fh, p);
2329 	p->type = old_type;
2330 	return ret;
2331 }
2332 
v4l_g_crop(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2333 static int v4l_g_crop(const struct v4l2_ioctl_ops *ops,
2334 				struct file *file, void *fh, void *arg)
2335 {
2336 	struct video_device *vfd = video_devdata(file);
2337 	struct v4l2_crop *p = arg;
2338 	struct v4l2_selection s = {
2339 		.type = p->type,
2340 	};
2341 	int ret;
2342 
2343 	/* simulate capture crop using selection api */
2344 
2345 	/* crop means compose for output devices */
2346 	if (V4L2_TYPE_IS_OUTPUT(p->type))
2347 		s.target = V4L2_SEL_TGT_COMPOSE;
2348 	else
2349 		s.target = V4L2_SEL_TGT_CROP;
2350 
2351 	if (test_bit(V4L2_FL_QUIRK_INVERTED_CROP, &vfd->flags))
2352 		s.target = s.target == V4L2_SEL_TGT_COMPOSE ?
2353 			V4L2_SEL_TGT_CROP : V4L2_SEL_TGT_COMPOSE;
2354 
2355 	ret = v4l_g_selection(ops, file, fh, &s);
2356 
2357 	/* copying results to old structure on success */
2358 	if (!ret)
2359 		p->c = s.r;
2360 	return ret;
2361 }
2362 
v4l_s_crop(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2363 static int v4l_s_crop(const struct v4l2_ioctl_ops *ops,
2364 				struct file *file, void *fh, void *arg)
2365 {
2366 	struct video_device *vfd = video_devdata(file);
2367 	struct v4l2_crop *p = arg;
2368 	struct v4l2_selection s = {
2369 		.type = p->type,
2370 		.r = p->c,
2371 	};
2372 
2373 	/* simulate capture crop using selection api */
2374 
2375 	/* crop means compose for output devices */
2376 	if (V4L2_TYPE_IS_OUTPUT(p->type))
2377 		s.target = V4L2_SEL_TGT_COMPOSE;
2378 	else
2379 		s.target = V4L2_SEL_TGT_CROP;
2380 
2381 	if (test_bit(V4L2_FL_QUIRK_INVERTED_CROP, &vfd->flags))
2382 		s.target = s.target == V4L2_SEL_TGT_COMPOSE ?
2383 			V4L2_SEL_TGT_CROP : V4L2_SEL_TGT_COMPOSE;
2384 
2385 	return v4l_s_selection(ops, file, fh, &s);
2386 }
2387 
v4l_cropcap(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2388 static int v4l_cropcap(const struct v4l2_ioctl_ops *ops,
2389 				struct file *file, void *fh, void *arg)
2390 {
2391 	struct video_device *vfd = video_devdata(file);
2392 	struct v4l2_cropcap *p = arg;
2393 	struct v4l2_selection s = { .type = p->type };
2394 	int ret = 0;
2395 
2396 	/* setting trivial pixelaspect */
2397 	p->pixelaspect.numerator = 1;
2398 	p->pixelaspect.denominator = 1;
2399 
2400 	if (s.type == V4L2_BUF_TYPE_VIDEO_CAPTURE_MPLANE)
2401 		s.type = V4L2_BUF_TYPE_VIDEO_CAPTURE;
2402 	else if (s.type == V4L2_BUF_TYPE_VIDEO_OUTPUT_MPLANE)
2403 		s.type = V4L2_BUF_TYPE_VIDEO_OUTPUT;
2404 
2405 	/*
2406 	 * The determine_valid_ioctls() call already should ensure
2407 	 * that this can never happen, but just in case...
2408 	 */
2409 	if (WARN_ON(!ops->vidioc_g_selection))
2410 		return -ENOTTY;
2411 
2412 	if (ops->vidioc_g_pixelaspect)
2413 		ret = ops->vidioc_g_pixelaspect(file, fh, s.type,
2414 						&p->pixelaspect);
2415 
2416 	/*
2417 	 * Ignore ENOTTY or ENOIOCTLCMD error returns, just use the
2418 	 * square pixel aspect ratio in that case.
2419 	 */
2420 	if (ret && ret != -ENOTTY && ret != -ENOIOCTLCMD)
2421 		return ret;
2422 
2423 	/* Use g_selection() to fill in the bounds and defrect rectangles */
2424 
2425 	/* obtaining bounds */
2426 	if (V4L2_TYPE_IS_OUTPUT(p->type))
2427 		s.target = V4L2_SEL_TGT_COMPOSE_BOUNDS;
2428 	else
2429 		s.target = V4L2_SEL_TGT_CROP_BOUNDS;
2430 
2431 	if (test_bit(V4L2_FL_QUIRK_INVERTED_CROP, &vfd->flags))
2432 		s.target = s.target == V4L2_SEL_TGT_COMPOSE_BOUNDS ?
2433 			V4L2_SEL_TGT_CROP_BOUNDS : V4L2_SEL_TGT_COMPOSE_BOUNDS;
2434 
2435 	ret = v4l_g_selection(ops, file, fh, &s);
2436 	if (ret)
2437 		return ret;
2438 	p->bounds = s.r;
2439 
2440 	/* obtaining defrect */
2441 	if (s.target == V4L2_SEL_TGT_COMPOSE_BOUNDS)
2442 		s.target = V4L2_SEL_TGT_COMPOSE_DEFAULT;
2443 	else
2444 		s.target = V4L2_SEL_TGT_CROP_DEFAULT;
2445 
2446 	ret = v4l_g_selection(ops, file, fh, &s);
2447 	if (ret)
2448 		return ret;
2449 	p->defrect = s.r;
2450 
2451 	return 0;
2452 }
2453 
v4l_log_status(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2454 static int v4l_log_status(const struct v4l2_ioctl_ops *ops,
2455 				struct file *file, void *fh, void *arg)
2456 {
2457 	struct video_device *vfd = video_devdata(file);
2458 	int ret;
2459 
2460 	if (vfd->v4l2_dev)
2461 		pr_info("%s: =================  START STATUS  =================\n",
2462 			vfd->v4l2_dev->name);
2463 	ret = ops->vidioc_log_status(file, fh);
2464 	if (vfd->v4l2_dev)
2465 		pr_info("%s: ==================  END STATUS  ==================\n",
2466 			vfd->v4l2_dev->name);
2467 	return ret;
2468 }
2469 
v4l_dbg_g_register(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2470 static int v4l_dbg_g_register(const struct v4l2_ioctl_ops *ops,
2471 				struct file *file, void *fh, void *arg)
2472 {
2473 #ifdef CONFIG_VIDEO_ADV_DEBUG
2474 	struct v4l2_dbg_register *p = arg;
2475 	struct video_device *vfd = video_devdata(file);
2476 	struct v4l2_subdev *sd;
2477 	int idx = 0;
2478 
2479 	if (!capable(CAP_SYS_ADMIN))
2480 		return -EPERM;
2481 	if (p->match.type == V4L2_CHIP_MATCH_SUBDEV) {
2482 		if (vfd->v4l2_dev == NULL)
2483 			return -EINVAL;
2484 		v4l2_device_for_each_subdev(sd, vfd->v4l2_dev)
2485 			if (p->match.addr == idx++)
2486 				return v4l2_subdev_call(sd, core, g_register, p);
2487 		return -EINVAL;
2488 	}
2489 	if (ops->vidioc_g_register && p->match.type == V4L2_CHIP_MATCH_BRIDGE &&
2490 	    (ops->vidioc_g_chip_info || p->match.addr == 0))
2491 		return ops->vidioc_g_register(file, fh, p);
2492 	return -EINVAL;
2493 #else
2494 	return -ENOTTY;
2495 #endif
2496 }
2497 
v4l_dbg_s_register(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2498 static int v4l_dbg_s_register(const struct v4l2_ioctl_ops *ops,
2499 				struct file *file, void *fh, void *arg)
2500 {
2501 #ifdef CONFIG_VIDEO_ADV_DEBUG
2502 	const struct v4l2_dbg_register *p = arg;
2503 	struct video_device *vfd = video_devdata(file);
2504 	struct v4l2_subdev *sd;
2505 	int idx = 0;
2506 
2507 	if (!capable(CAP_SYS_ADMIN))
2508 		return -EPERM;
2509 	if (p->match.type == V4L2_CHIP_MATCH_SUBDEV) {
2510 		if (vfd->v4l2_dev == NULL)
2511 			return -EINVAL;
2512 		v4l2_device_for_each_subdev(sd, vfd->v4l2_dev)
2513 			if (p->match.addr == idx++)
2514 				return v4l2_subdev_call(sd, core, s_register, p);
2515 		return -EINVAL;
2516 	}
2517 	if (ops->vidioc_s_register && p->match.type == V4L2_CHIP_MATCH_BRIDGE &&
2518 	    (ops->vidioc_g_chip_info || p->match.addr == 0))
2519 		return ops->vidioc_s_register(file, fh, p);
2520 	return -EINVAL;
2521 #else
2522 	return -ENOTTY;
2523 #endif
2524 }
2525 
v4l_dbg_g_chip_info(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2526 static int v4l_dbg_g_chip_info(const struct v4l2_ioctl_ops *ops,
2527 				struct file *file, void *fh, void *arg)
2528 {
2529 #ifdef CONFIG_VIDEO_ADV_DEBUG
2530 	struct video_device *vfd = video_devdata(file);
2531 	struct v4l2_dbg_chip_info *p = arg;
2532 	struct v4l2_subdev *sd;
2533 	int idx = 0;
2534 
2535 	switch (p->match.type) {
2536 	case V4L2_CHIP_MATCH_BRIDGE:
2537 		if (ops->vidioc_s_register)
2538 			p->flags |= V4L2_CHIP_FL_WRITABLE;
2539 		if (ops->vidioc_g_register)
2540 			p->flags |= V4L2_CHIP_FL_READABLE;
2541 		strscpy(p->name, vfd->v4l2_dev->name, sizeof(p->name));
2542 		if (ops->vidioc_g_chip_info)
2543 			return ops->vidioc_g_chip_info(file, fh, arg);
2544 		if (p->match.addr)
2545 			return -EINVAL;
2546 		return 0;
2547 
2548 	case V4L2_CHIP_MATCH_SUBDEV:
2549 		if (vfd->v4l2_dev == NULL)
2550 			break;
2551 		v4l2_device_for_each_subdev(sd, vfd->v4l2_dev) {
2552 			if (p->match.addr != idx++)
2553 				continue;
2554 			if (sd->ops->core && sd->ops->core->s_register)
2555 				p->flags |= V4L2_CHIP_FL_WRITABLE;
2556 			if (sd->ops->core && sd->ops->core->g_register)
2557 				p->flags |= V4L2_CHIP_FL_READABLE;
2558 			strscpy(p->name, sd->name, sizeof(p->name));
2559 			return 0;
2560 		}
2561 		break;
2562 	}
2563 	return -EINVAL;
2564 #else
2565 	return -ENOTTY;
2566 #endif
2567 }
2568 
v4l_dqevent(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2569 static int v4l_dqevent(const struct v4l2_ioctl_ops *ops,
2570 				struct file *file, void *fh, void *arg)
2571 {
2572 	return v4l2_event_dequeue(fh, arg, file->f_flags & O_NONBLOCK);
2573 }
2574 
v4l_subscribe_event(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2575 static int v4l_subscribe_event(const struct v4l2_ioctl_ops *ops,
2576 				struct file *file, void *fh, void *arg)
2577 {
2578 	return ops->vidioc_subscribe_event(fh, arg);
2579 }
2580 
v4l_unsubscribe_event(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2581 static int v4l_unsubscribe_event(const struct v4l2_ioctl_ops *ops,
2582 				struct file *file, void *fh, void *arg)
2583 {
2584 	return ops->vidioc_unsubscribe_event(fh, arg);
2585 }
2586 
v4l_g_sliced_vbi_cap(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2587 static int v4l_g_sliced_vbi_cap(const struct v4l2_ioctl_ops *ops,
2588 				struct file *file, void *fh, void *arg)
2589 {
2590 	struct v4l2_sliced_vbi_cap *p = arg;
2591 	int ret = check_fmt(file, p->type);
2592 
2593 	if (ret)
2594 		return ret;
2595 
2596 	/* Clear up to type, everything after type is zeroed already */
2597 	memset(p, 0, offsetof(struct v4l2_sliced_vbi_cap, type));
2598 
2599 	return ops->vidioc_g_sliced_vbi_cap(file, fh, p);
2600 }
2601 
v4l_enum_freq_bands(const struct v4l2_ioctl_ops * ops,struct file * file,void * fh,void * arg)2602 static int v4l_enum_freq_bands(const struct v4l2_ioctl_ops *ops,
2603 				struct file *file, void *fh, void *arg)
2604 {
2605 	struct video_device *vfd = video_devdata(file);
2606 	struct v4l2_frequency_band *p = arg;
2607 	enum v4l2_tuner_type type;
2608 	int err;
2609 
2610 	if (vfd->vfl_type == VFL_TYPE_SDR) {
2611 		if (p->type != V4L2_TUNER_SDR && p->type != V4L2_TUNER_RF)
2612 			return -EINVAL;
2613 		type = p->type;
2614 	} else {
2615 		type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
2616 				V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
2617 		if (type != p->type)
2618 			return -EINVAL;
2619 	}
2620 	if (ops->vidioc_enum_freq_bands) {
2621 		err = ops->vidioc_enum_freq_bands(file, fh, p);
2622 		if (err != -ENOTTY)
2623 			return err;
2624 	}
2625 	if (is_valid_ioctl(vfd, VIDIOC_G_TUNER)) {
2626 		struct v4l2_tuner t = {
2627 			.index = p->tuner,
2628 			.type = type,
2629 		};
2630 
2631 		if (p->index)
2632 			return -EINVAL;
2633 		err = ops->vidioc_g_tuner(file, fh, &t);
2634 		if (err)
2635 			return err;
2636 		p->capability = t.capability | V4L2_TUNER_CAP_FREQ_BANDS;
2637 		p->rangelow = t.rangelow;
2638 		p->rangehigh = t.rangehigh;
2639 		p->modulation = (type == V4L2_TUNER_RADIO) ?
2640 			V4L2_BAND_MODULATION_FM : V4L2_BAND_MODULATION_VSB;
2641 		return 0;
2642 	}
2643 	if (is_valid_ioctl(vfd, VIDIOC_G_MODULATOR)) {
2644 		struct v4l2_modulator m = {
2645 			.index = p->tuner,
2646 		};
2647 
2648 		if (type != V4L2_TUNER_RADIO)
2649 			return -EINVAL;
2650 		if (p->index)
2651 			return -EINVAL;
2652 		err = ops->vidioc_g_modulator(file, fh, &m);
2653 		if (err)
2654 			return err;
2655 		p->capability = m.capability | V4L2_TUNER_CAP_FREQ_BANDS;
2656 		p->rangelow = m.rangelow;
2657 		p->rangehigh = m.rangehigh;
2658 		p->modulation = (type == V4L2_TUNER_RADIO) ?
2659 			V4L2_BAND_MODULATION_FM : V4L2_BAND_MODULATION_VSB;
2660 		return 0;
2661 	}
2662 	return -ENOTTY;
2663 }
2664 
2665 struct v4l2_ioctl_info {
2666 	unsigned int ioctl;
2667 	u32 flags;
2668 	const char * const name;
2669 	int (*func)(const struct v4l2_ioctl_ops *ops, struct file *file,
2670 		    void *fh, void *p);
2671 	void (*debug)(const void *arg, bool write_only);
2672 };
2673 
2674 /* This control needs a priority check */
2675 #define INFO_FL_PRIO		(1 << 0)
2676 /* This control can be valid if the filehandle passes a control handler. */
2677 #define INFO_FL_CTRL		(1 << 1)
2678 /* Queuing ioctl */
2679 #define INFO_FL_QUEUE		(1 << 2)
2680 /* Always copy back result, even on error */
2681 #define INFO_FL_ALWAYS_COPY	(1 << 3)
2682 /* Zero struct from after the field to the end */
2683 #define INFO_FL_CLEAR(v4l2_struct, field)			\
2684 	((offsetof(struct v4l2_struct, field) +			\
2685 	  sizeof_field(struct v4l2_struct, field)) << 16)
2686 #define INFO_FL_CLEAR_MASK	(_IOC_SIZEMASK << 16)
2687 
2688 #define DEFINE_V4L_STUB_FUNC(_vidioc)				\
2689 	static int v4l_stub_ ## _vidioc(			\
2690 			const struct v4l2_ioctl_ops *ops,	\
2691 			struct file *file, void *fh, void *p)	\
2692 	{							\
2693 		return ops->vidioc_ ## _vidioc(file, fh, p);	\
2694 	}
2695 
2696 #define IOCTL_INFO(_ioctl, _func, _debug, _flags)		\
2697 	[_IOC_NR(_ioctl)] = {					\
2698 		.ioctl = _ioctl,				\
2699 		.flags = _flags,				\
2700 		.name = #_ioctl,				\
2701 		.func = _func,					\
2702 		.debug = _debug,				\
2703 	}
2704 
2705 DEFINE_V4L_STUB_FUNC(g_fbuf)
2706 DEFINE_V4L_STUB_FUNC(s_fbuf)
2707 DEFINE_V4L_STUB_FUNC(expbuf)
2708 DEFINE_V4L_STUB_FUNC(g_std)
2709 DEFINE_V4L_STUB_FUNC(g_audio)
2710 DEFINE_V4L_STUB_FUNC(s_audio)
2711 DEFINE_V4L_STUB_FUNC(g_edid)
2712 DEFINE_V4L_STUB_FUNC(s_edid)
2713 DEFINE_V4L_STUB_FUNC(g_audout)
2714 DEFINE_V4L_STUB_FUNC(s_audout)
2715 DEFINE_V4L_STUB_FUNC(g_jpegcomp)
2716 DEFINE_V4L_STUB_FUNC(s_jpegcomp)
2717 DEFINE_V4L_STUB_FUNC(enumaudio)
2718 DEFINE_V4L_STUB_FUNC(enumaudout)
2719 DEFINE_V4L_STUB_FUNC(enum_framesizes)
2720 DEFINE_V4L_STUB_FUNC(enum_frameintervals)
2721 DEFINE_V4L_STUB_FUNC(g_enc_index)
2722 DEFINE_V4L_STUB_FUNC(encoder_cmd)
2723 DEFINE_V4L_STUB_FUNC(try_encoder_cmd)
2724 DEFINE_V4L_STUB_FUNC(decoder_cmd)
2725 DEFINE_V4L_STUB_FUNC(try_decoder_cmd)
2726 DEFINE_V4L_STUB_FUNC(s_dv_timings)
2727 DEFINE_V4L_STUB_FUNC(g_dv_timings)
2728 DEFINE_V4L_STUB_FUNC(enum_dv_timings)
2729 DEFINE_V4L_STUB_FUNC(query_dv_timings)
2730 DEFINE_V4L_STUB_FUNC(dv_timings_cap)
2731 
2732 static const struct v4l2_ioctl_info v4l2_ioctls[] = {
2733 	IOCTL_INFO(VIDIOC_QUERYCAP, v4l_querycap, v4l_print_querycap, 0),
2734 	IOCTL_INFO(VIDIOC_ENUM_FMT, v4l_enum_fmt, v4l_print_fmtdesc, 0),
2735 	IOCTL_INFO(VIDIOC_G_FMT, v4l_g_fmt, v4l_print_format, 0),
2736 	IOCTL_INFO(VIDIOC_S_FMT, v4l_s_fmt, v4l_print_format, INFO_FL_PRIO),
2737 	IOCTL_INFO(VIDIOC_REQBUFS, v4l_reqbufs, v4l_print_requestbuffers, INFO_FL_PRIO | INFO_FL_QUEUE),
2738 	IOCTL_INFO(VIDIOC_QUERYBUF, v4l_querybuf, v4l_print_buffer, INFO_FL_QUEUE | INFO_FL_CLEAR(v4l2_buffer, length)),
2739 	IOCTL_INFO(VIDIOC_G_FBUF, v4l_stub_g_fbuf, v4l_print_framebuffer, 0),
2740 	IOCTL_INFO(VIDIOC_S_FBUF, v4l_stub_s_fbuf, v4l_print_framebuffer, INFO_FL_PRIO),
2741 	IOCTL_INFO(VIDIOC_OVERLAY, v4l_overlay, v4l_print_u32, INFO_FL_PRIO),
2742 	IOCTL_INFO(VIDIOC_QBUF, v4l_qbuf, v4l_print_buffer, INFO_FL_QUEUE),
2743 	IOCTL_INFO(VIDIOC_EXPBUF, v4l_stub_expbuf, v4l_print_exportbuffer, INFO_FL_QUEUE | INFO_FL_CLEAR(v4l2_exportbuffer, flags)),
2744 	IOCTL_INFO(VIDIOC_DQBUF, v4l_dqbuf, v4l_print_buffer, INFO_FL_QUEUE),
2745 	IOCTL_INFO(VIDIOC_STREAMON, v4l_streamon, v4l_print_buftype, INFO_FL_PRIO | INFO_FL_QUEUE),
2746 	IOCTL_INFO(VIDIOC_STREAMOFF, v4l_streamoff, v4l_print_buftype, INFO_FL_PRIO | INFO_FL_QUEUE),
2747 	IOCTL_INFO(VIDIOC_G_PARM, v4l_g_parm, v4l_print_streamparm, INFO_FL_CLEAR(v4l2_streamparm, type)),
2748 	IOCTL_INFO(VIDIOC_S_PARM, v4l_s_parm, v4l_print_streamparm, INFO_FL_PRIO),
2749 	IOCTL_INFO(VIDIOC_G_STD, v4l_stub_g_std, v4l_print_std, 0),
2750 	IOCTL_INFO(VIDIOC_S_STD, v4l_s_std, v4l_print_std, INFO_FL_PRIO),
2751 	IOCTL_INFO(VIDIOC_ENUMSTD, v4l_enumstd, v4l_print_standard, INFO_FL_CLEAR(v4l2_standard, index)),
2752 	IOCTL_INFO(VIDIOC_ENUMINPUT, v4l_enuminput, v4l_print_enuminput, INFO_FL_CLEAR(v4l2_input, index)),
2753 	IOCTL_INFO(VIDIOC_G_CTRL, v4l_g_ctrl, v4l_print_control, INFO_FL_CTRL | INFO_FL_CLEAR(v4l2_control, id)),
2754 	IOCTL_INFO(VIDIOC_S_CTRL, v4l_s_ctrl, v4l_print_control, INFO_FL_PRIO | INFO_FL_CTRL),
2755 	IOCTL_INFO(VIDIOC_G_TUNER, v4l_g_tuner, v4l_print_tuner, INFO_FL_CLEAR(v4l2_tuner, index)),
2756 	IOCTL_INFO(VIDIOC_S_TUNER, v4l_s_tuner, v4l_print_tuner, INFO_FL_PRIO),
2757 	IOCTL_INFO(VIDIOC_G_AUDIO, v4l_stub_g_audio, v4l_print_audio, 0),
2758 	IOCTL_INFO(VIDIOC_S_AUDIO, v4l_stub_s_audio, v4l_print_audio, INFO_FL_PRIO),
2759 	IOCTL_INFO(VIDIOC_QUERYCTRL, v4l_queryctrl, v4l_print_queryctrl, INFO_FL_CTRL | INFO_FL_CLEAR(v4l2_queryctrl, id)),
2760 	IOCTL_INFO(VIDIOC_QUERYMENU, v4l_querymenu, v4l_print_querymenu, INFO_FL_CTRL | INFO_FL_CLEAR(v4l2_querymenu, index)),
2761 	IOCTL_INFO(VIDIOC_G_INPUT, v4l_g_input, v4l_print_u32, 0),
2762 	IOCTL_INFO(VIDIOC_S_INPUT, v4l_s_input, v4l_print_u32, INFO_FL_PRIO),
2763 	IOCTL_INFO(VIDIOC_G_EDID, v4l_stub_g_edid, v4l_print_edid, INFO_FL_ALWAYS_COPY),
2764 	IOCTL_INFO(VIDIOC_S_EDID, v4l_stub_s_edid, v4l_print_edid, INFO_FL_PRIO | INFO_FL_ALWAYS_COPY),
2765 	IOCTL_INFO(VIDIOC_G_OUTPUT, v4l_g_output, v4l_print_u32, 0),
2766 	IOCTL_INFO(VIDIOC_S_OUTPUT, v4l_s_output, v4l_print_u32, INFO_FL_PRIO),
2767 	IOCTL_INFO(VIDIOC_ENUMOUTPUT, v4l_enumoutput, v4l_print_enumoutput, INFO_FL_CLEAR(v4l2_output, index)),
2768 	IOCTL_INFO(VIDIOC_G_AUDOUT, v4l_stub_g_audout, v4l_print_audioout, 0),
2769 	IOCTL_INFO(VIDIOC_S_AUDOUT, v4l_stub_s_audout, v4l_print_audioout, INFO_FL_PRIO),
2770 	IOCTL_INFO(VIDIOC_G_MODULATOR, v4l_g_modulator, v4l_print_modulator, INFO_FL_CLEAR(v4l2_modulator, index)),
2771 	IOCTL_INFO(VIDIOC_S_MODULATOR, v4l_s_modulator, v4l_print_modulator, INFO_FL_PRIO),
2772 	IOCTL_INFO(VIDIOC_G_FREQUENCY, v4l_g_frequency, v4l_print_frequency, INFO_FL_CLEAR(v4l2_frequency, tuner)),
2773 	IOCTL_INFO(VIDIOC_S_FREQUENCY, v4l_s_frequency, v4l_print_frequency, INFO_FL_PRIO),
2774 	IOCTL_INFO(VIDIOC_CROPCAP, v4l_cropcap, v4l_print_cropcap, INFO_FL_CLEAR(v4l2_cropcap, type)),
2775 	IOCTL_INFO(VIDIOC_G_CROP, v4l_g_crop, v4l_print_crop, INFO_FL_CLEAR(v4l2_crop, type)),
2776 	IOCTL_INFO(VIDIOC_S_CROP, v4l_s_crop, v4l_print_crop, INFO_FL_PRIO),
2777 	IOCTL_INFO(VIDIOC_G_SELECTION, v4l_g_selection, v4l_print_selection, INFO_FL_CLEAR(v4l2_selection, r)),
2778 	IOCTL_INFO(VIDIOC_S_SELECTION, v4l_s_selection, v4l_print_selection, INFO_FL_PRIO | INFO_FL_CLEAR(v4l2_selection, r)),
2779 	IOCTL_INFO(VIDIOC_G_JPEGCOMP, v4l_stub_g_jpegcomp, v4l_print_jpegcompression, 0),
2780 	IOCTL_INFO(VIDIOC_S_JPEGCOMP, v4l_stub_s_jpegcomp, v4l_print_jpegcompression, INFO_FL_PRIO),
2781 	IOCTL_INFO(VIDIOC_QUERYSTD, v4l_querystd, v4l_print_std, 0),
2782 	IOCTL_INFO(VIDIOC_TRY_FMT, v4l_try_fmt, v4l_print_format, 0),
2783 	IOCTL_INFO(VIDIOC_ENUMAUDIO, v4l_stub_enumaudio, v4l_print_audio, INFO_FL_CLEAR(v4l2_audio, index)),
2784 	IOCTL_INFO(VIDIOC_ENUMAUDOUT, v4l_stub_enumaudout, v4l_print_audioout, INFO_FL_CLEAR(v4l2_audioout, index)),
2785 	IOCTL_INFO(VIDIOC_G_PRIORITY, v4l_g_priority, v4l_print_u32, 0),
2786 	IOCTL_INFO(VIDIOC_S_PRIORITY, v4l_s_priority, v4l_print_u32, INFO_FL_PRIO),
2787 	IOCTL_INFO(VIDIOC_G_SLICED_VBI_CAP, v4l_g_sliced_vbi_cap, v4l_print_sliced_vbi_cap, INFO_FL_CLEAR(v4l2_sliced_vbi_cap, type)),
2788 	IOCTL_INFO(VIDIOC_LOG_STATUS, v4l_log_status, v4l_print_newline, 0),
2789 	IOCTL_INFO(VIDIOC_G_EXT_CTRLS, v4l_g_ext_ctrls, v4l_print_ext_controls, INFO_FL_CTRL),
2790 	IOCTL_INFO(VIDIOC_S_EXT_CTRLS, v4l_s_ext_ctrls, v4l_print_ext_controls, INFO_FL_PRIO | INFO_FL_CTRL),
2791 	IOCTL_INFO(VIDIOC_TRY_EXT_CTRLS, v4l_try_ext_ctrls, v4l_print_ext_controls, INFO_FL_CTRL),
2792 	IOCTL_INFO(VIDIOC_ENUM_FRAMESIZES, v4l_stub_enum_framesizes, v4l_print_frmsizeenum, INFO_FL_CLEAR(v4l2_frmsizeenum, pixel_format)),
2793 	IOCTL_INFO(VIDIOC_ENUM_FRAMEINTERVALS, v4l_stub_enum_frameintervals, v4l_print_frmivalenum, INFO_FL_CLEAR(v4l2_frmivalenum, height)),
2794 	IOCTL_INFO(VIDIOC_G_ENC_INDEX, v4l_stub_g_enc_index, v4l_print_enc_idx, 0),
2795 	IOCTL_INFO(VIDIOC_ENCODER_CMD, v4l_stub_encoder_cmd, v4l_print_encoder_cmd, INFO_FL_PRIO | INFO_FL_CLEAR(v4l2_encoder_cmd, flags)),
2796 	IOCTL_INFO(VIDIOC_TRY_ENCODER_CMD, v4l_stub_try_encoder_cmd, v4l_print_encoder_cmd, INFO_FL_CLEAR(v4l2_encoder_cmd, flags)),
2797 	IOCTL_INFO(VIDIOC_DECODER_CMD, v4l_stub_decoder_cmd, v4l_print_decoder_cmd, INFO_FL_PRIO),
2798 	IOCTL_INFO(VIDIOC_TRY_DECODER_CMD, v4l_stub_try_decoder_cmd, v4l_print_decoder_cmd, 0),
2799 	IOCTL_INFO(VIDIOC_DBG_S_REGISTER, v4l_dbg_s_register, v4l_print_dbg_register, 0),
2800 	IOCTL_INFO(VIDIOC_DBG_G_REGISTER, v4l_dbg_g_register, v4l_print_dbg_register, 0),
2801 	IOCTL_INFO(VIDIOC_S_HW_FREQ_SEEK, v4l_s_hw_freq_seek, v4l_print_hw_freq_seek, INFO_FL_PRIO),
2802 	IOCTL_INFO(VIDIOC_S_DV_TIMINGS, v4l_stub_s_dv_timings, v4l_print_dv_timings, INFO_FL_PRIO | INFO_FL_CLEAR(v4l2_dv_timings, bt.flags)),
2803 	IOCTL_INFO(VIDIOC_G_DV_TIMINGS, v4l_stub_g_dv_timings, v4l_print_dv_timings, 0),
2804 	IOCTL_INFO(VIDIOC_DQEVENT, v4l_dqevent, v4l_print_event, 0),
2805 	IOCTL_INFO(VIDIOC_SUBSCRIBE_EVENT, v4l_subscribe_event, v4l_print_event_subscription, 0),
2806 	IOCTL_INFO(VIDIOC_UNSUBSCRIBE_EVENT, v4l_unsubscribe_event, v4l_print_event_subscription, 0),
2807 	IOCTL_INFO(VIDIOC_CREATE_BUFS, v4l_create_bufs, v4l_print_create_buffers, INFO_FL_PRIO | INFO_FL_QUEUE),
2808 	IOCTL_INFO(VIDIOC_PREPARE_BUF, v4l_prepare_buf, v4l_print_buffer, INFO_FL_QUEUE),
2809 	IOCTL_INFO(VIDIOC_ENUM_DV_TIMINGS, v4l_stub_enum_dv_timings, v4l_print_enum_dv_timings, INFO_FL_CLEAR(v4l2_enum_dv_timings, pad)),
2810 	IOCTL_INFO(VIDIOC_QUERY_DV_TIMINGS, v4l_stub_query_dv_timings, v4l_print_dv_timings, INFO_FL_ALWAYS_COPY),
2811 	IOCTL_INFO(VIDIOC_DV_TIMINGS_CAP, v4l_stub_dv_timings_cap, v4l_print_dv_timings_cap, INFO_FL_CLEAR(v4l2_dv_timings_cap, pad)),
2812 	IOCTL_INFO(VIDIOC_ENUM_FREQ_BANDS, v4l_enum_freq_bands, v4l_print_freq_band, 0),
2813 	IOCTL_INFO(VIDIOC_DBG_G_CHIP_INFO, v4l_dbg_g_chip_info, v4l_print_dbg_chip_info, INFO_FL_CLEAR(v4l2_dbg_chip_info, match)),
2814 	IOCTL_INFO(VIDIOC_QUERY_EXT_CTRL, v4l_query_ext_ctrl, v4l_print_query_ext_ctrl, INFO_FL_CTRL | INFO_FL_CLEAR(v4l2_query_ext_ctrl, id)),
2815 };
2816 #define V4L2_IOCTLS ARRAY_SIZE(v4l2_ioctls)
2817 
v4l2_is_known_ioctl(unsigned int cmd)2818 static bool v4l2_is_known_ioctl(unsigned int cmd)
2819 {
2820 	if (_IOC_NR(cmd) >= V4L2_IOCTLS)
2821 		return false;
2822 	return v4l2_ioctls[_IOC_NR(cmd)].ioctl == cmd;
2823 }
2824 
v4l2_ioctl_get_lock(struct video_device * vdev,struct v4l2_fh * vfh,unsigned int cmd,void * arg)2825 static struct mutex *v4l2_ioctl_get_lock(struct video_device *vdev,
2826 					 struct v4l2_fh *vfh, unsigned int cmd,
2827 					 void *arg)
2828 {
2829 	if (_IOC_NR(cmd) >= V4L2_IOCTLS)
2830 		return vdev->lock;
2831 	if (vfh && vfh->m2m_ctx &&
2832 	    (v4l2_ioctls[_IOC_NR(cmd)].flags & INFO_FL_QUEUE)) {
2833 		if (vfh->m2m_ctx->q_lock)
2834 			return vfh->m2m_ctx->q_lock;
2835 	}
2836 	if (vdev->queue && vdev->queue->lock &&
2837 			(v4l2_ioctls[_IOC_NR(cmd)].flags & INFO_FL_QUEUE))
2838 		return vdev->queue->lock;
2839 	return vdev->lock;
2840 }
2841 
2842 /* Common ioctl debug function. This function can be used by
2843    external ioctl messages as well as internal V4L ioctl */
v4l_printk_ioctl(const char * prefix,unsigned int cmd)2844 void v4l_printk_ioctl(const char *prefix, unsigned int cmd)
2845 {
2846 	const char *dir, *type;
2847 
2848 	if (prefix)
2849 		printk(KERN_DEBUG "%s: ", prefix);
2850 
2851 	switch (_IOC_TYPE(cmd)) {
2852 	case 'd':
2853 		type = "v4l2_int";
2854 		break;
2855 	case 'V':
2856 		if (_IOC_NR(cmd) >= V4L2_IOCTLS) {
2857 			type = "v4l2";
2858 			break;
2859 		}
2860 		pr_cont("%s", v4l2_ioctls[_IOC_NR(cmd)].name);
2861 		return;
2862 	default:
2863 		type = "unknown";
2864 		break;
2865 	}
2866 
2867 	switch (_IOC_DIR(cmd)) {
2868 	case _IOC_NONE:              dir = "--"; break;
2869 	case _IOC_READ:              dir = "r-"; break;
2870 	case _IOC_WRITE:             dir = "-w"; break;
2871 	case _IOC_READ | _IOC_WRITE: dir = "rw"; break;
2872 	default:                     dir = "*ERR*"; break;
2873 	}
2874 	pr_cont("%s ioctl '%c', dir=%s, #%d (0x%08x)",
2875 		type, _IOC_TYPE(cmd), dir, _IOC_NR(cmd), cmd);
2876 }
2877 EXPORT_SYMBOL(v4l_printk_ioctl);
2878 
__video_do_ioctl(struct file * file,unsigned int cmd,void * arg)2879 static long __video_do_ioctl(struct file *file,
2880 		unsigned int cmd, void *arg)
2881 {
2882 	struct video_device *vfd = video_devdata(file);
2883 	struct mutex *req_queue_lock = NULL;
2884 	struct mutex *lock; /* ioctl serialization mutex */
2885 	const struct v4l2_ioctl_ops *ops = vfd->ioctl_ops;
2886 	bool write_only = false;
2887 	struct v4l2_ioctl_info default_info;
2888 	const struct v4l2_ioctl_info *info;
2889 	void *fh = file->private_data;
2890 	struct v4l2_fh *vfh = NULL;
2891 	int dev_debug = vfd->dev_debug;
2892 	long ret = -ENOTTY;
2893 
2894 	if (ops == NULL) {
2895 		pr_warn("%s: has no ioctl_ops.\n",
2896 				video_device_node_name(vfd));
2897 		return ret;
2898 	}
2899 
2900 	if (test_bit(V4L2_FL_USES_V4L2_FH, &vfd->flags))
2901 		vfh = file->private_data;
2902 
2903 	/*
2904 	 * We need to serialize streamon/off with queueing new requests.
2905 	 * These ioctls may trigger the cancellation of a streaming
2906 	 * operation, and that should not be mixed with queueing a new
2907 	 * request at the same time.
2908 	 */
2909 #if IS_ENABLED(MEDIA_CONTROLLER)
2910 	if (v4l2_device_supports_requests(vfd->v4l2_dev) &&
2911 	    (cmd == VIDIOC_STREAMON || cmd == VIDIOC_STREAMOFF)) {
2912 		req_queue_lock = &vfd->v4l2_dev->mdev->req_queue_mutex;
2913 
2914 		if (mutex_lock_interruptible(req_queue_lock))
2915 			return -ERESTARTSYS;
2916 	}
2917 #endif
2918 
2919 	lock = v4l2_ioctl_get_lock(vfd, vfh, cmd, arg);
2920 
2921 	if (lock && mutex_lock_interruptible(lock)) {
2922 		if (req_queue_lock)
2923 			mutex_unlock(req_queue_lock);
2924 		return -ERESTARTSYS;
2925 	}
2926 
2927 	if (!video_is_registered(vfd)) {
2928 		ret = -ENODEV;
2929 		goto unlock;
2930 	}
2931 
2932 	if (v4l2_is_known_ioctl(cmd)) {
2933 		info = &v4l2_ioctls[_IOC_NR(cmd)];
2934 
2935 		if (!test_bit(_IOC_NR(cmd), vfd->valid_ioctls) &&
2936 		    !((info->flags & INFO_FL_CTRL) && vfh && vfh->ctrl_handler))
2937 			goto done;
2938 
2939 		if (vfh && (info->flags & INFO_FL_PRIO)) {
2940 			ret = v4l2_prio_check(vfd->prio, vfh->prio);
2941 			if (ret)
2942 				goto done;
2943 		}
2944 	} else {
2945 		default_info.ioctl = cmd;
2946 		default_info.flags = 0;
2947 		default_info.debug = v4l_print_default;
2948 		info = &default_info;
2949 	}
2950 
2951 	write_only = _IOC_DIR(cmd) == _IOC_WRITE;
2952 	if (info != &default_info) {
2953 		ret = info->func(ops, file, fh, arg);
2954 	} else if (!ops->vidioc_default) {
2955 		ret = -ENOTTY;
2956 	} else {
2957 		ret = ops->vidioc_default(file, fh,
2958 			vfh ? v4l2_prio_check(vfd->prio, vfh->prio) >= 0 : 0,
2959 			cmd, arg);
2960 	}
2961 
2962 done:
2963 	if (dev_debug & (V4L2_DEV_DEBUG_IOCTL | V4L2_DEV_DEBUG_IOCTL_ARG)) {
2964 		if (!(dev_debug & V4L2_DEV_DEBUG_STREAMING) &&
2965 		    (cmd == VIDIOC_QBUF || cmd == VIDIOC_DQBUF))
2966 			goto unlock;
2967 
2968 		v4l_printk_ioctl(video_device_node_name(vfd), cmd);
2969 		if (ret < 0)
2970 			pr_cont(": error %ld", ret);
2971 		if (!(dev_debug & V4L2_DEV_DEBUG_IOCTL_ARG))
2972 			pr_cont("\n");
2973 		else if (_IOC_DIR(cmd) == _IOC_NONE)
2974 			info->debug(arg, write_only);
2975 		else {
2976 			pr_cont(": ");
2977 			info->debug(arg, write_only);
2978 		}
2979 	}
2980 
2981 unlock:
2982 	if (lock)
2983 		mutex_unlock(lock);
2984 	if (req_queue_lock)
2985 		mutex_unlock(req_queue_lock);
2986 	return ret;
2987 }
2988 
check_array_args(unsigned int cmd,void * parg,size_t * array_size,void __user ** user_ptr,void *** kernel_ptr)2989 static int check_array_args(unsigned int cmd, void *parg, size_t *array_size,
2990 			    void __user **user_ptr, void ***kernel_ptr)
2991 {
2992 	int ret = 0;
2993 
2994 	switch (cmd) {
2995 	case VIDIOC_PREPARE_BUF:
2996 	case VIDIOC_QUERYBUF:
2997 	case VIDIOC_QBUF:
2998 	case VIDIOC_DQBUF: {
2999 		struct v4l2_buffer *buf = parg;
3000 
3001 		if (V4L2_TYPE_IS_MULTIPLANAR(buf->type) && buf->length > 0) {
3002 			if (buf->length > VIDEO_MAX_PLANES) {
3003 				ret = -EINVAL;
3004 				break;
3005 			}
3006 			*user_ptr = (void __user *)buf->m.planes;
3007 			*kernel_ptr = (void **)&buf->m.planes;
3008 			*array_size = sizeof(struct v4l2_plane) * buf->length;
3009 			ret = 1;
3010 		}
3011 		break;
3012 	}
3013 
3014 	case VIDIOC_G_EDID:
3015 	case VIDIOC_S_EDID: {
3016 		struct v4l2_edid *edid = parg;
3017 
3018 		if (edid->blocks) {
3019 			if (edid->blocks > 256) {
3020 				ret = -EINVAL;
3021 				break;
3022 			}
3023 			*user_ptr = (void __user *)edid->edid;
3024 			*kernel_ptr = (void **)&edid->edid;
3025 			*array_size = edid->blocks * 128;
3026 			ret = 1;
3027 		}
3028 		break;
3029 	}
3030 
3031 	case VIDIOC_S_EXT_CTRLS:
3032 	case VIDIOC_G_EXT_CTRLS:
3033 	case VIDIOC_TRY_EXT_CTRLS: {
3034 		struct v4l2_ext_controls *ctrls = parg;
3035 
3036 		if (ctrls->count != 0) {
3037 			if (ctrls->count > V4L2_CID_MAX_CTRLS) {
3038 				ret = -EINVAL;
3039 				break;
3040 			}
3041 			*user_ptr = (void __user *)ctrls->controls;
3042 			*kernel_ptr = (void **)&ctrls->controls;
3043 			*array_size = sizeof(struct v4l2_ext_control)
3044 				    * ctrls->count;
3045 			ret = 1;
3046 		}
3047 		break;
3048 	}
3049 	case VIDIOC_G_FMT:
3050 	case VIDIOC_S_FMT:
3051 	case VIDIOC_TRY_FMT: {
3052 		struct v4l2_format *fmt = parg;
3053 
3054 		if (fmt->type != V4L2_BUF_TYPE_VIDEO_OVERLAY &&
3055 		    fmt->type != V4L2_BUF_TYPE_VIDEO_OUTPUT_OVERLAY)
3056 			break;
3057 		if (fmt->fmt.win.clipcount > 2048)
3058 			return -EINVAL;
3059 		if (!fmt->fmt.win.clipcount)
3060 			break;
3061 
3062 		*user_ptr = (void __user *)fmt->fmt.win.clips;
3063 		*kernel_ptr = (void **)&fmt->fmt.win.clips;
3064 		*array_size = sizeof(struct v4l2_clip)
3065 				* fmt->fmt.win.clipcount;
3066 
3067 		ret = 1;
3068 		break;
3069 	}
3070 	}
3071 
3072 	return ret;
3073 }
3074 
video_translate_cmd(unsigned int cmd)3075 static unsigned int video_translate_cmd(unsigned int cmd)
3076 {
3077 	switch (cmd) {
3078 #ifdef CONFIG_COMPAT_32BIT_TIME
3079 	case VIDIOC_DQEVENT_TIME32:
3080 		return VIDIOC_DQEVENT;
3081 	case VIDIOC_QUERYBUF_TIME32:
3082 		return VIDIOC_QUERYBUF;
3083 	case VIDIOC_QBUF_TIME32:
3084 		return VIDIOC_QBUF;
3085 	case VIDIOC_DQBUF_TIME32:
3086 		return VIDIOC_DQBUF;
3087 	case VIDIOC_PREPARE_BUF_TIME32:
3088 		return VIDIOC_PREPARE_BUF;
3089 #endif
3090 	}
3091 	if (in_compat_syscall())
3092 		return v4l2_compat_translate_cmd(cmd);
3093 
3094 	return cmd;
3095 }
3096 
video_get_user(void __user * arg,void * parg,unsigned int real_cmd,unsigned int cmd,bool * always_copy)3097 static int video_get_user(void __user *arg, void *parg,
3098 			  unsigned int real_cmd, unsigned int cmd,
3099 			  bool *always_copy)
3100 {
3101 	unsigned int n = _IOC_SIZE(real_cmd);
3102 	int err = 0;
3103 
3104 	if (!(_IOC_DIR(cmd) & _IOC_WRITE)) {
3105 		/* read-only ioctl */
3106 		memset(parg, 0, n);
3107 		return 0;
3108 	}
3109 
3110 	/*
3111 	 * In some cases, only a few fields are used as input,
3112 	 * i.e. when the app sets "index" and then the driver
3113 	 * fills in the rest of the structure for the thing
3114 	 * with that index.  We only need to copy up the first
3115 	 * non-input field.
3116 	 */
3117 	if (v4l2_is_known_ioctl(real_cmd)) {
3118 		u32 flags = v4l2_ioctls[_IOC_NR(real_cmd)].flags;
3119 
3120 		if (flags & INFO_FL_CLEAR_MASK)
3121 			n = (flags & INFO_FL_CLEAR_MASK) >> 16;
3122 		*always_copy = flags & INFO_FL_ALWAYS_COPY;
3123 	}
3124 
3125 	if (cmd == real_cmd) {
3126 		if (copy_from_user(parg, (void __user *)arg, n))
3127 			err = -EFAULT;
3128 	} else if (in_compat_syscall()) {
3129 		err = v4l2_compat_get_user(arg, parg, cmd);
3130 	} else {
3131 		switch (cmd) {
3132 #ifdef CONFIG_COMPAT_32BIT_TIME
3133 		case VIDIOC_QUERYBUF_TIME32:
3134 		case VIDIOC_QBUF_TIME32:
3135 		case VIDIOC_DQBUF_TIME32:
3136 		case VIDIOC_PREPARE_BUF_TIME32: {
3137 			struct v4l2_buffer_time32 vb32;
3138 			struct v4l2_buffer *vb = parg;
3139 
3140 			if (copy_from_user(&vb32, arg, sizeof(vb32)))
3141 				return -EFAULT;
3142 
3143 			*vb = (struct v4l2_buffer) {
3144 				.index		= vb32.index,
3145 					.type		= vb32.type,
3146 					.bytesused	= vb32.bytesused,
3147 					.flags		= vb32.flags,
3148 					.field		= vb32.field,
3149 					.timestamp.tv_sec	= vb32.timestamp.tv_sec,
3150 					.timestamp.tv_usec	= vb32.timestamp.tv_usec,
3151 					.timecode	= vb32.timecode,
3152 					.sequence	= vb32.sequence,
3153 					.memory		= vb32.memory,
3154 					.m.userptr	= vb32.m.userptr,
3155 					.length		= vb32.length,
3156 					.request_fd	= vb32.request_fd,
3157 			};
3158 			break;
3159 		}
3160 #endif
3161 		}
3162 	}
3163 
3164 	/* zero out anything we don't copy from userspace */
3165 	if (!err && n < _IOC_SIZE(real_cmd))
3166 		memset((u8 *)parg + n, 0, _IOC_SIZE(real_cmd) - n);
3167 	return err;
3168 }
3169 
video_put_user(void __user * arg,void * parg,unsigned int real_cmd,unsigned int cmd)3170 static int video_put_user(void __user *arg, void *parg,
3171 			  unsigned int real_cmd, unsigned int cmd)
3172 {
3173 	if (!(_IOC_DIR(cmd) & _IOC_READ))
3174 		return 0;
3175 
3176 	if (cmd == real_cmd) {
3177 		/*  Copy results into user buffer  */
3178 		if (copy_to_user(arg, parg, _IOC_SIZE(cmd)))
3179 			return -EFAULT;
3180 		return 0;
3181 	}
3182 
3183 	if (in_compat_syscall())
3184 		return v4l2_compat_put_user(arg, parg, cmd);
3185 
3186 	switch (cmd) {
3187 #ifdef CONFIG_COMPAT_32BIT_TIME
3188 	case VIDIOC_DQEVENT_TIME32: {
3189 		struct v4l2_event *ev = parg;
3190 		struct v4l2_event_time32 ev32;
3191 
3192 		memset(&ev32, 0, sizeof(ev32));
3193 
3194 		ev32.type	= ev->type;
3195 		ev32.pending	= ev->pending;
3196 		ev32.sequence	= ev->sequence;
3197 		ev32.timestamp.tv_sec	= ev->timestamp.tv_sec;
3198 		ev32.timestamp.tv_nsec	= ev->timestamp.tv_nsec;
3199 		ev32.id		= ev->id;
3200 
3201 		memcpy(&ev32.u, &ev->u, sizeof(ev->u));
3202 		memcpy(&ev32.reserved, &ev->reserved, sizeof(ev->reserved));
3203 
3204 		if (copy_to_user(arg, &ev32, sizeof(ev32)))
3205 			return -EFAULT;
3206 		break;
3207 	}
3208 	case VIDIOC_QUERYBUF_TIME32:
3209 	case VIDIOC_QBUF_TIME32:
3210 	case VIDIOC_DQBUF_TIME32:
3211 	case VIDIOC_PREPARE_BUF_TIME32: {
3212 		struct v4l2_buffer *vb = parg;
3213 		struct v4l2_buffer_time32 vb32;
3214 
3215 		memset(&vb32, 0, sizeof(vb32));
3216 
3217 		vb32.index	= vb->index;
3218 		vb32.type	= vb->type;
3219 		vb32.bytesused	= vb->bytesused;
3220 		vb32.flags	= vb->flags;
3221 		vb32.field	= vb->field;
3222 		vb32.timestamp.tv_sec	= vb->timestamp.tv_sec;
3223 		vb32.timestamp.tv_usec	= vb->timestamp.tv_usec;
3224 		vb32.timecode	= vb->timecode;
3225 		vb32.sequence	= vb->sequence;
3226 		vb32.memory	= vb->memory;
3227 		vb32.m.userptr	= vb->m.userptr;
3228 		vb32.length	= vb->length;
3229 		vb32.request_fd	= vb->request_fd;
3230 
3231 		if (copy_to_user(arg, &vb32, sizeof(vb32)))
3232 			return -EFAULT;
3233 		break;
3234 	}
3235 #endif
3236 	}
3237 
3238 	return 0;
3239 }
3240 
3241 long
video_usercopy(struct file * file,unsigned int orig_cmd,unsigned long arg,v4l2_kioctl func)3242 video_usercopy(struct file *file, unsigned int orig_cmd, unsigned long arg,
3243 	       v4l2_kioctl func)
3244 {
3245 	char	sbuf[128];
3246 	void    *mbuf = NULL, *array_buf = NULL;
3247 	void	*parg = (void *)arg;
3248 	long	err  = -EINVAL;
3249 	bool	has_array_args;
3250 	bool	always_copy = false;
3251 	size_t  array_size = 0;
3252 	void __user *user_ptr = NULL;
3253 	void	**kernel_ptr = NULL;
3254 	unsigned int cmd = video_translate_cmd(orig_cmd);
3255 	const size_t ioc_size = _IOC_SIZE(cmd);
3256 
3257 	/*  Copy arguments into temp kernel buffer  */
3258 	if (_IOC_DIR(cmd) != _IOC_NONE) {
3259 		if (ioc_size <= sizeof(sbuf)) {
3260 			parg = sbuf;
3261 		} else {
3262 			/* too big to allocate from stack */
3263 			mbuf = kmalloc(ioc_size, GFP_KERNEL);
3264 			if (NULL == mbuf)
3265 				return -ENOMEM;
3266 			parg = mbuf;
3267 		}
3268 
3269 		err = video_get_user((void __user *)arg, parg, cmd,
3270 				     orig_cmd, &always_copy);
3271 		if (err)
3272 			goto out;
3273 	}
3274 
3275 	err = check_array_args(cmd, parg, &array_size, &user_ptr, &kernel_ptr);
3276 	if (err < 0)
3277 		goto out;
3278 	has_array_args = err;
3279 
3280 	if (has_array_args) {
3281 		array_buf = kvmalloc(array_size, GFP_KERNEL);
3282 		err = -ENOMEM;
3283 		if (array_buf == NULL)
3284 			goto out_array_args;
3285 		err = -EFAULT;
3286 		if (in_compat_syscall())
3287 			err = v4l2_compat_get_array_args(file, array_buf,
3288 							 user_ptr, array_size,
3289 							 orig_cmd, parg);
3290 		else
3291 			err = copy_from_user(array_buf, user_ptr, array_size) ?
3292 								-EFAULT : 0;
3293 		if (err)
3294 			goto out_array_args;
3295 		*kernel_ptr = array_buf;
3296 	}
3297 
3298 	/* Handles IOCTL */
3299 	err = func(file, cmd, parg);
3300 	if (err == -ENOTTY || err == -ENOIOCTLCMD) {
3301 		err = -ENOTTY;
3302 		goto out;
3303 	}
3304 
3305 	if (err == 0) {
3306 		if (cmd == VIDIOC_DQBUF)
3307 			trace_v4l2_dqbuf(video_devdata(file)->minor, parg);
3308 		else if (cmd == VIDIOC_QBUF)
3309 			trace_v4l2_qbuf(video_devdata(file)->minor, parg);
3310 	}
3311 
3312 	if (has_array_args) {
3313 		*kernel_ptr = (void __force *)user_ptr;
3314 		if (in_compat_syscall()) {
3315 			int put_err;
3316 
3317 			put_err = v4l2_compat_put_array_args(file, user_ptr,
3318 							     array_buf,
3319 							     array_size,
3320 							     orig_cmd, parg);
3321 			if (put_err)
3322 				err = put_err;
3323 		} else if (copy_to_user(user_ptr, array_buf, array_size)) {
3324 			err = -EFAULT;
3325 		}
3326 		goto out_array_args;
3327 	}
3328 	/*
3329 	 * Some ioctls can return an error, but still have valid
3330 	 * results that must be returned.
3331 	 */
3332 	if (err < 0 && !always_copy)
3333 		goto out;
3334 
3335 out_array_args:
3336 	if (video_put_user((void __user *)arg, parg, cmd, orig_cmd))
3337 		err = -EFAULT;
3338 out:
3339 	kvfree(array_buf);
3340 	kfree(mbuf);
3341 	return err;
3342 }
3343 
video_ioctl2(struct file * file,unsigned int cmd,unsigned long arg)3344 long video_ioctl2(struct file *file,
3345 	       unsigned int cmd, unsigned long arg)
3346 {
3347 	return video_usercopy(file, cmd, arg, __video_do_ioctl);
3348 }
3349 EXPORT_SYMBOL(video_ioctl2);
3350