|  | /* | 
|  | * An implementation of file copy service. | 
|  | * | 
|  | * Copyright (C) 2014, Microsoft, Inc. | 
|  | * | 
|  | * Author : K. Y. Srinivasan <ksrinivasan@novell.com> | 
|  | * | 
|  | * This program is free software; you can redistribute it and/or modify it | 
|  | * under the terms of the GNU General Public License version 2 as published | 
|  | * by the Free Software Foundation. | 
|  | * | 
|  | * This program is distributed in the hope that it will be useful, but | 
|  | * WITHOUT ANY WARRANTY; without even the implied warranty of | 
|  | * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, GOOD TITLE or | 
|  | * NON INFRINGEMENT.  See the GNU General Public License for more | 
|  | * details. | 
|  | * | 
|  | */ | 
|  |  | 
|  | #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt | 
|  |  | 
|  | #include <linux/nls.h> | 
|  | #include <linux/workqueue.h> | 
|  | #include <linux/hyperv.h> | 
|  | #include <linux/sched.h> | 
|  |  | 
|  | #include "hyperv_vmbus.h" | 
|  | #include "hv_utils_transport.h" | 
|  |  | 
|  | #define WIN8_SRV_MAJOR		1 | 
|  | #define WIN8_SRV_MINOR		1 | 
|  | #define WIN8_SRV_VERSION	(WIN8_SRV_MAJOR << 16 | WIN8_SRV_MINOR) | 
|  |  | 
|  | #define FCOPY_VER_COUNT 1 | 
|  | static const int fcopy_versions[] = { | 
|  | WIN8_SRV_VERSION | 
|  | }; | 
|  |  | 
|  | #define FW_VER_COUNT 1 | 
|  | static const int fw_versions[] = { | 
|  | UTIL_FW_VERSION | 
|  | }; | 
|  |  | 
|  | /* | 
|  | * Global state maintained for transaction that is being processed. | 
|  | * For a class of integration services, including the "file copy service", | 
|  | * the specified protocol is a "request/response" protocol which means that | 
|  | * there can only be single outstanding transaction from the host at any | 
|  | * given point in time. We use this to simplify memory management in this | 
|  | * driver - we cache and process only one message at a time. | 
|  | * | 
|  | * While the request/response protocol is guaranteed by the host, we further | 
|  | * ensure this by serializing packet processing in this driver - we do not | 
|  | * read additional packets from the VMBUs until the current packet is fully | 
|  | * handled. | 
|  | */ | 
|  |  | 
|  | static struct { | 
|  | int state;   /* hvutil_device_state */ | 
|  | int recv_len; /* number of bytes received. */ | 
|  | struct hv_fcopy_hdr  *fcopy_msg; /* current message */ | 
|  | struct vmbus_channel *recv_channel; /* chn we got the request */ | 
|  | u64 recv_req_id; /* request ID. */ | 
|  | } fcopy_transaction; | 
|  |  | 
|  | static void fcopy_respond_to_host(int error); | 
|  | static void fcopy_send_data(struct work_struct *dummy); | 
|  | static void fcopy_timeout_func(struct work_struct *dummy); | 
|  | static DECLARE_DELAYED_WORK(fcopy_timeout_work, fcopy_timeout_func); | 
|  | static DECLARE_WORK(fcopy_send_work, fcopy_send_data); | 
|  | static const char fcopy_devname[] = "vmbus/hv_fcopy"; | 
|  | static u8 *recv_buffer; | 
|  | static struct hvutil_transport *hvt; | 
|  | /* | 
|  | * This state maintains the version number registered by the daemon. | 
|  | */ | 
|  | static int dm_reg_value; | 
|  |  | 
|  | static void fcopy_poll_wrapper(void *channel) | 
|  | { | 
|  | /* Transaction is finished, reset the state here to avoid races. */ | 
|  | fcopy_transaction.state = HVUTIL_READY; | 
|  | hv_fcopy_onchannelcallback(channel); | 
|  | } | 
|  |  | 
|  | static void fcopy_timeout_func(struct work_struct *dummy) | 
|  | { | 
|  | /* | 
|  | * If the timer fires, the user-mode component has not responded; | 
|  | * process the pending transaction. | 
|  | */ | 
|  | fcopy_respond_to_host(HV_E_FAIL); | 
|  | hv_poll_channel(fcopy_transaction.recv_channel, fcopy_poll_wrapper); | 
|  | } | 
|  |  | 
|  | static void fcopy_register_done(void) | 
|  | { | 
|  | pr_debug("FCP: userspace daemon registered\n"); | 
|  | hv_poll_channel(fcopy_transaction.recv_channel, fcopy_poll_wrapper); | 
|  | } | 
|  |  | 
|  | static int fcopy_handle_handshake(u32 version) | 
|  | { | 
|  | u32 our_ver = FCOPY_CURRENT_VERSION; | 
|  |  | 
|  | switch (version) { | 
|  | case FCOPY_VERSION_0: | 
|  | /* Daemon doesn't expect us to reply */ | 
|  | dm_reg_value = version; | 
|  | break; | 
|  | case FCOPY_VERSION_1: | 
|  | /* Daemon expects us to reply with our own version */ | 
|  | if (hvutil_transport_send(hvt, &our_ver, sizeof(our_ver), | 
|  | fcopy_register_done)) | 
|  | return -EFAULT; | 
|  | dm_reg_value = version; | 
|  | break; | 
|  | default: | 
|  | /* | 
|  | * For now we will fail the registration. | 
|  | * If and when we have multiple versions to | 
|  | * deal with, we will be backward compatible. | 
|  | * We will add this code when needed. | 
|  | */ | 
|  | return -EINVAL; | 
|  | } | 
|  | pr_debug("FCP: userspace daemon ver. %d connected\n", version); | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | static void fcopy_send_data(struct work_struct *dummy) | 
|  | { | 
|  | struct hv_start_fcopy *smsg_out = NULL; | 
|  | int operation = fcopy_transaction.fcopy_msg->operation; | 
|  | struct hv_start_fcopy *smsg_in; | 
|  | void *out_src; | 
|  | int rc, out_len; | 
|  |  | 
|  | /* | 
|  | * The  strings sent from the host are encoded in | 
|  | * in utf16; convert it to utf8 strings. | 
|  | * The host assures us that the utf16 strings will not exceed | 
|  | * the max lengths specified. We will however, reserve room | 
|  | * for the string terminating character - in the utf16s_utf8s() | 
|  | * function we limit the size of the buffer where the converted | 
|  | * string is placed to W_MAX_PATH -1 to guarantee | 
|  | * that the strings can be properly terminated! | 
|  | */ | 
|  |  | 
|  | switch (operation) { | 
|  | case START_FILE_COPY: | 
|  | out_len = sizeof(struct hv_start_fcopy); | 
|  | smsg_out = kzalloc(sizeof(*smsg_out), GFP_KERNEL); | 
|  | if (!smsg_out) | 
|  | return; | 
|  |  | 
|  | smsg_out->hdr.operation = operation; | 
|  | smsg_in = (struct hv_start_fcopy *)fcopy_transaction.fcopy_msg; | 
|  |  | 
|  | utf16s_to_utf8s((wchar_t *)smsg_in->file_name, W_MAX_PATH, | 
|  | UTF16_LITTLE_ENDIAN, | 
|  | (__u8 *)&smsg_out->file_name, W_MAX_PATH - 1); | 
|  |  | 
|  | utf16s_to_utf8s((wchar_t *)smsg_in->path_name, W_MAX_PATH, | 
|  | UTF16_LITTLE_ENDIAN, | 
|  | (__u8 *)&smsg_out->path_name, W_MAX_PATH - 1); | 
|  |  | 
|  | smsg_out->copy_flags = smsg_in->copy_flags; | 
|  | smsg_out->file_size = smsg_in->file_size; | 
|  | out_src = smsg_out; | 
|  | break; | 
|  |  | 
|  | case WRITE_TO_FILE: | 
|  | out_src = fcopy_transaction.fcopy_msg; | 
|  | out_len = sizeof(struct hv_do_fcopy); | 
|  | break; | 
|  | default: | 
|  | out_src = fcopy_transaction.fcopy_msg; | 
|  | out_len = fcopy_transaction.recv_len; | 
|  | break; | 
|  | } | 
|  |  | 
|  | fcopy_transaction.state = HVUTIL_USERSPACE_REQ; | 
|  | rc = hvutil_transport_send(hvt, out_src, out_len, NULL); | 
|  | if (rc) { | 
|  | pr_debug("FCP: failed to communicate to the daemon: %d\n", rc); | 
|  | if (cancel_delayed_work_sync(&fcopy_timeout_work)) { | 
|  | fcopy_respond_to_host(HV_E_FAIL); | 
|  | fcopy_transaction.state = HVUTIL_READY; | 
|  | } | 
|  | } | 
|  | kfree(smsg_out); | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Send a response back to the host. | 
|  | */ | 
|  |  | 
|  | static void | 
|  | fcopy_respond_to_host(int error) | 
|  | { | 
|  | struct icmsg_hdr *icmsghdr; | 
|  | u32 buf_len; | 
|  | struct vmbus_channel *channel; | 
|  | u64 req_id; | 
|  |  | 
|  | /* | 
|  | * Copy the global state for completing the transaction. Note that | 
|  | * only one transaction can be active at a time. This is guaranteed | 
|  | * by the file copy protocol implemented by the host. Furthermore, | 
|  | * the "transaction active" state we maintain ensures that there can | 
|  | * only be one active transaction at a time. | 
|  | */ | 
|  |  | 
|  | buf_len = fcopy_transaction.recv_len; | 
|  | channel = fcopy_transaction.recv_channel; | 
|  | req_id = fcopy_transaction.recv_req_id; | 
|  |  | 
|  | icmsghdr = (struct icmsg_hdr *) | 
|  | &recv_buffer[sizeof(struct vmbuspipe_hdr)]; | 
|  |  | 
|  | if (channel->onchannel_callback == NULL) | 
|  | /* | 
|  | * We have raced with util driver being unloaded; | 
|  | * silently return. | 
|  | */ | 
|  | return; | 
|  |  | 
|  | icmsghdr->status = error; | 
|  | icmsghdr->icflags = ICMSGHDRFLAG_TRANSACTION | ICMSGHDRFLAG_RESPONSE; | 
|  | vmbus_sendpacket(channel, recv_buffer, buf_len, req_id, | 
|  | VM_PKT_DATA_INBAND, 0); | 
|  | } | 
|  |  | 
|  | void hv_fcopy_onchannelcallback(void *context) | 
|  | { | 
|  | struct vmbus_channel *channel = context; | 
|  | u32 recvlen; | 
|  | u64 requestid; | 
|  | struct hv_fcopy_hdr *fcopy_msg; | 
|  | struct icmsg_hdr *icmsghdr; | 
|  | int fcopy_srv_version; | 
|  |  | 
|  | if (fcopy_transaction.state > HVUTIL_READY) | 
|  | return; | 
|  |  | 
|  | vmbus_recvpacket(channel, recv_buffer, PAGE_SIZE * 2, &recvlen, | 
|  | &requestid); | 
|  | if (recvlen <= 0) | 
|  | return; | 
|  |  | 
|  | icmsghdr = (struct icmsg_hdr *)&recv_buffer[ | 
|  | sizeof(struct vmbuspipe_hdr)]; | 
|  | if (icmsghdr->icmsgtype == ICMSGTYPE_NEGOTIATE) { | 
|  | if (vmbus_prep_negotiate_resp(icmsghdr, recv_buffer, | 
|  | fw_versions, FW_VER_COUNT, | 
|  | fcopy_versions, FCOPY_VER_COUNT, | 
|  | NULL, &fcopy_srv_version)) { | 
|  |  | 
|  | pr_info("FCopy IC version %d.%d\n", | 
|  | fcopy_srv_version >> 16, | 
|  | fcopy_srv_version & 0xFFFF); | 
|  | } | 
|  | } else { | 
|  | fcopy_msg = (struct hv_fcopy_hdr *)&recv_buffer[ | 
|  | sizeof(struct vmbuspipe_hdr) + | 
|  | sizeof(struct icmsg_hdr)]; | 
|  |  | 
|  | /* | 
|  | * Stash away this global state for completing the | 
|  | * transaction; note transactions are serialized. | 
|  | */ | 
|  |  | 
|  | fcopy_transaction.recv_len = recvlen; | 
|  | fcopy_transaction.recv_req_id = requestid; | 
|  | fcopy_transaction.fcopy_msg = fcopy_msg; | 
|  |  | 
|  | if (fcopy_transaction.state < HVUTIL_READY) { | 
|  | /* Userspace is not registered yet */ | 
|  | fcopy_respond_to_host(HV_E_FAIL); | 
|  | return; | 
|  | } | 
|  | fcopy_transaction.state = HVUTIL_HOSTMSG_RECEIVED; | 
|  |  | 
|  | /* | 
|  | * Send the information to the user-level daemon. | 
|  | */ | 
|  | schedule_work(&fcopy_send_work); | 
|  | schedule_delayed_work(&fcopy_timeout_work, | 
|  | HV_UTIL_TIMEOUT * HZ); | 
|  | return; | 
|  | } | 
|  | icmsghdr->icflags = ICMSGHDRFLAG_TRANSACTION | ICMSGHDRFLAG_RESPONSE; | 
|  | vmbus_sendpacket(channel, recv_buffer, recvlen, requestid, | 
|  | VM_PKT_DATA_INBAND, 0); | 
|  | } | 
|  |  | 
|  | /* Callback when data is received from userspace */ | 
|  | static int fcopy_on_msg(void *msg, int len) | 
|  | { | 
|  | int *val = (int *)msg; | 
|  |  | 
|  | if (len != sizeof(int)) | 
|  | return -EINVAL; | 
|  |  | 
|  | if (fcopy_transaction.state == HVUTIL_DEVICE_INIT) | 
|  | return fcopy_handle_handshake(*val); | 
|  |  | 
|  | if (fcopy_transaction.state != HVUTIL_USERSPACE_REQ) | 
|  | return -EINVAL; | 
|  |  | 
|  | /* | 
|  | * Complete the transaction by forwarding the result | 
|  | * to the host. But first, cancel the timeout. | 
|  | */ | 
|  | if (cancel_delayed_work_sync(&fcopy_timeout_work)) { | 
|  | fcopy_transaction.state = HVUTIL_USERSPACE_RECV; | 
|  | fcopy_respond_to_host(*val); | 
|  | hv_poll_channel(fcopy_transaction.recv_channel, | 
|  | fcopy_poll_wrapper); | 
|  | } | 
|  |  | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | static void fcopy_on_reset(void) | 
|  | { | 
|  | /* | 
|  | * The daemon has exited; reset the state. | 
|  | */ | 
|  | fcopy_transaction.state = HVUTIL_DEVICE_INIT; | 
|  |  | 
|  | if (cancel_delayed_work_sync(&fcopy_timeout_work)) | 
|  | fcopy_respond_to_host(HV_E_FAIL); | 
|  | } | 
|  |  | 
|  | int hv_fcopy_init(struct hv_util_service *srv) | 
|  | { | 
|  | recv_buffer = srv->recv_buffer; | 
|  | fcopy_transaction.recv_channel = srv->channel; | 
|  |  | 
|  | /* | 
|  | * When this driver loads, the user level daemon that | 
|  | * processes the host requests may not yet be running. | 
|  | * Defer processing channel callbacks until the daemon | 
|  | * has registered. | 
|  | */ | 
|  | fcopy_transaction.state = HVUTIL_DEVICE_INIT; | 
|  |  | 
|  | hvt = hvutil_transport_init(fcopy_devname, 0, 0, | 
|  | fcopy_on_msg, fcopy_on_reset); | 
|  | if (!hvt) | 
|  | return -EFAULT; | 
|  |  | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | void hv_fcopy_deinit(void) | 
|  | { | 
|  | fcopy_transaction.state = HVUTIL_DEVICE_DYING; | 
|  | cancel_delayed_work_sync(&fcopy_timeout_work); | 
|  | hvutil_transport_destroy(hvt); | 
|  | } |