GNU Linux-libre 5.10.215-gnu1
[releases.git] / drivers / media / usb / uvc / uvc_v4l2.c
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *      uvc_v4l2.c  --  USB Video Class driver - V4L2 API
4  *
5  *      Copyright (C) 2005-2010
6  *          Laurent Pinchart (laurent.pinchart@ideasonboard.com)
7  */
8
9 #include <linux/compat.h>
10 #include <linux/kernel.h>
11 #include <linux/list.h>
12 #include <linux/module.h>
13 #include <linux/slab.h>
14 #include <linux/usb.h>
15 #include <linux/videodev2.h>
16 #include <linux/vmalloc.h>
17 #include <linux/mm.h>
18 #include <linux/wait.h>
19 #include <linux/atomic.h>
20
21 #include <media/v4l2-common.h>
22 #include <media/v4l2-ctrls.h>
23 #include <media/v4l2-event.h>
24 #include <media/v4l2-ioctl.h>
25
26 #include "uvcvideo.h"
27
28 /* ------------------------------------------------------------------------
29  * UVC ioctls
30  */
31 static int uvc_ioctl_ctrl_map(struct uvc_video_chain *chain,
32         struct uvc_xu_control_mapping *xmap)
33 {
34         struct uvc_control_mapping *map;
35         unsigned int size;
36         int ret;
37
38         map = kzalloc(sizeof(*map), GFP_KERNEL);
39         if (map == NULL)
40                 return -ENOMEM;
41
42         map->id = xmap->id;
43         memcpy(map->name, xmap->name, sizeof(map->name));
44         memcpy(map->entity, xmap->entity, sizeof(map->entity));
45         map->selector = xmap->selector;
46         map->size = xmap->size;
47         map->offset = xmap->offset;
48         map->v4l2_type = xmap->v4l2_type;
49         map->data_type = xmap->data_type;
50
51         switch (xmap->v4l2_type) {
52         case V4L2_CTRL_TYPE_INTEGER:
53         case V4L2_CTRL_TYPE_BOOLEAN:
54         case V4L2_CTRL_TYPE_BUTTON:
55                 break;
56
57         case V4L2_CTRL_TYPE_MENU:
58                 /* Prevent excessive memory consumption, as well as integer
59                  * overflows.
60                  */
61                 if (xmap->menu_count == 0 ||
62                     xmap->menu_count > UVC_MAX_CONTROL_MENU_ENTRIES) {
63                         ret = -EINVAL;
64                         goto free_map;
65                 }
66
67                 size = xmap->menu_count * sizeof(*map->menu_info);
68                 map->menu_info = memdup_user(xmap->menu_info, size);
69                 if (IS_ERR(map->menu_info)) {
70                         ret = PTR_ERR(map->menu_info);
71                         goto free_map;
72                 }
73
74                 map->menu_count = xmap->menu_count;
75                 break;
76
77         default:
78                 uvc_trace(UVC_TRACE_CONTROL, "Unsupported V4L2 control type "
79                           "%u.\n", xmap->v4l2_type);
80                 ret = -ENOTTY;
81                 goto free_map;
82         }
83
84         ret = uvc_ctrl_add_mapping(chain, map);
85
86         kfree(map->menu_info);
87 free_map:
88         kfree(map);
89
90         return ret;
91 }
92
93 /* ------------------------------------------------------------------------
94  * V4L2 interface
95  */
96
97 /*
98  * Find the frame interval closest to the requested frame interval for the
99  * given frame format and size. This should be done by the device as part of
100  * the Video Probe and Commit negotiation, but some hardware don't implement
101  * that feature.
102  */
103 static u32 uvc_try_frame_interval(struct uvc_frame *frame, u32 interval)
104 {
105         unsigned int i;
106
107         if (frame->bFrameIntervalType) {
108                 u32 best = -1, dist;
109
110                 for (i = 0; i < frame->bFrameIntervalType; ++i) {
111                         dist = interval > frame->dwFrameInterval[i]
112                              ? interval - frame->dwFrameInterval[i]
113                              : frame->dwFrameInterval[i] - interval;
114
115                         if (dist > best)
116                                 break;
117
118                         best = dist;
119                 }
120
121                 interval = frame->dwFrameInterval[i-1];
122         } else {
123                 const u32 min = frame->dwFrameInterval[0];
124                 const u32 max = frame->dwFrameInterval[1];
125                 const u32 step = frame->dwFrameInterval[2];
126
127                 interval = min + (interval - min + step/2) / step * step;
128                 if (interval > max)
129                         interval = max;
130         }
131
132         return interval;
133 }
134
135 static u32 uvc_v4l2_get_bytesperline(const struct uvc_format *format,
136         const struct uvc_frame *frame)
137 {
138         switch (format->fcc) {
139         case V4L2_PIX_FMT_NV12:
140         case V4L2_PIX_FMT_YVU420:
141         case V4L2_PIX_FMT_YUV420:
142         case V4L2_PIX_FMT_M420:
143                 return frame->wWidth;
144
145         default:
146                 return format->bpp * frame->wWidth / 8;
147         }
148 }
149
150 static int uvc_v4l2_try_format(struct uvc_streaming *stream,
151         struct v4l2_format *fmt, struct uvc_streaming_control *probe,
152         struct uvc_format **uvc_format, struct uvc_frame **uvc_frame)
153 {
154         struct uvc_format *format = NULL;
155         struct uvc_frame *frame = NULL;
156         u16 rw, rh;
157         unsigned int d, maxd;
158         unsigned int i;
159         u32 interval;
160         int ret = 0;
161         u8 *fcc;
162
163         if (fmt->type != stream->type)
164                 return -EINVAL;
165
166         fcc = (u8 *)&fmt->fmt.pix.pixelformat;
167         uvc_trace(UVC_TRACE_FORMAT, "Trying format 0x%08x (%c%c%c%c): %ux%u.\n",
168                         fmt->fmt.pix.pixelformat,
169                         fcc[0], fcc[1], fcc[2], fcc[3],
170                         fmt->fmt.pix.width, fmt->fmt.pix.height);
171
172         /* Check if the hardware supports the requested format, use the default
173          * format otherwise.
174          */
175         for (i = 0; i < stream->nformats; ++i) {
176                 format = &stream->format[i];
177                 if (format->fcc == fmt->fmt.pix.pixelformat)
178                         break;
179         }
180
181         if (i == stream->nformats) {
182                 format = stream->def_format;
183                 fmt->fmt.pix.pixelformat = format->fcc;
184         }
185
186         /* Find the closest image size. The distance between image sizes is
187          * the size in pixels of the non-overlapping regions between the
188          * requested size and the frame-specified size.
189          */
190         rw = fmt->fmt.pix.width;
191         rh = fmt->fmt.pix.height;
192         maxd = (unsigned int)-1;
193
194         for (i = 0; i < format->nframes; ++i) {
195                 u16 w = format->frame[i].wWidth;
196                 u16 h = format->frame[i].wHeight;
197
198                 d = min(w, rw) * min(h, rh);
199                 d = w*h + rw*rh - 2*d;
200                 if (d < maxd) {
201                         maxd = d;
202                         frame = &format->frame[i];
203                 }
204
205                 if (maxd == 0)
206                         break;
207         }
208
209         if (frame == NULL) {
210                 uvc_trace(UVC_TRACE_FORMAT, "Unsupported size %ux%u.\n",
211                                 fmt->fmt.pix.width, fmt->fmt.pix.height);
212                 return -EINVAL;
213         }
214
215         /* Use the default frame interval. */
216         interval = frame->dwDefaultFrameInterval;
217         uvc_trace(UVC_TRACE_FORMAT, "Using default frame interval %u.%u us "
218                 "(%u.%u fps).\n", interval/10, interval%10, 10000000/interval,
219                 (100000000/interval)%10);
220
221         /* Set the format index, frame index and frame interval. */
222         memset(probe, 0, sizeof(*probe));
223         probe->bmHint = 1;      /* dwFrameInterval */
224         probe->bFormatIndex = format->index;
225         probe->bFrameIndex = frame->bFrameIndex;
226         probe->dwFrameInterval = uvc_try_frame_interval(frame, interval);
227         /* Some webcams stall the probe control set request when the
228          * dwMaxVideoFrameSize field is set to zero. The UVC specification
229          * clearly states that the field is read-only from the host, so this
230          * is a webcam bug. Set dwMaxVideoFrameSize to the value reported by
231          * the webcam to work around the problem.
232          *
233          * The workaround could probably be enabled for all webcams, so the
234          * quirk can be removed if needed. It's currently useful to detect
235          * webcam bugs and fix them before they hit the market (providing
236          * developers test their webcams with the Linux driver as well as with
237          * the Windows driver).
238          */
239         mutex_lock(&stream->mutex);
240         if (stream->dev->quirks & UVC_QUIRK_PROBE_EXTRAFIELDS)
241                 probe->dwMaxVideoFrameSize =
242                         stream->ctrl.dwMaxVideoFrameSize;
243
244         /* Probe the device. */
245         ret = uvc_probe_video(stream, probe);
246         mutex_unlock(&stream->mutex);
247         if (ret < 0)
248                 goto done;
249
250         /* After the probe, update fmt with the values returned from
251          * negotiation with the device. Some devices return invalid bFormatIndex
252          * and bFrameIndex values, in which case we can only assume they have
253          * accepted the requested format as-is.
254          */
255         for (i = 0; i < stream->nformats; ++i) {
256                 if (probe->bFormatIndex == stream->format[i].index) {
257                         format = &stream->format[i];
258                         break;
259                 }
260         }
261
262         if (i == stream->nformats)
263                 uvc_trace(UVC_TRACE_FORMAT,
264                           "Unknown bFormatIndex %u, using default\n",
265                           probe->bFormatIndex);
266
267         for (i = 0; i < format->nframes; ++i) {
268                 if (probe->bFrameIndex == format->frame[i].bFrameIndex) {
269                         frame = &format->frame[i];
270                         break;
271                 }
272         }
273
274         if (i == format->nframes)
275                 uvc_trace(UVC_TRACE_FORMAT,
276                           "Unknown bFrameIndex %u, using default\n",
277                           probe->bFrameIndex);
278
279         fmt->fmt.pix.width = frame->wWidth;
280         fmt->fmt.pix.height = frame->wHeight;
281         fmt->fmt.pix.field = V4L2_FIELD_NONE;
282         fmt->fmt.pix.bytesperline = uvc_v4l2_get_bytesperline(format, frame);
283         fmt->fmt.pix.sizeimage = probe->dwMaxVideoFrameSize;
284         fmt->fmt.pix.pixelformat = format->fcc;
285         fmt->fmt.pix.colorspace = format->colorspace;
286         fmt->fmt.pix.xfer_func = format->xfer_func;
287         fmt->fmt.pix.ycbcr_enc = format->ycbcr_enc;
288
289         if (uvc_format != NULL)
290                 *uvc_format = format;
291         if (uvc_frame != NULL)
292                 *uvc_frame = frame;
293
294 done:
295         return ret;
296 }
297
298 static int uvc_v4l2_get_format(struct uvc_streaming *stream,
299         struct v4l2_format *fmt)
300 {
301         struct uvc_format *format;
302         struct uvc_frame *frame;
303         int ret = 0;
304
305         if (fmt->type != stream->type)
306                 return -EINVAL;
307
308         mutex_lock(&stream->mutex);
309         format = stream->cur_format;
310         frame = stream->cur_frame;
311
312         if (format == NULL || frame == NULL) {
313                 ret = -EINVAL;
314                 goto done;
315         }
316
317         fmt->fmt.pix.pixelformat = format->fcc;
318         fmt->fmt.pix.width = frame->wWidth;
319         fmt->fmt.pix.height = frame->wHeight;
320         fmt->fmt.pix.field = V4L2_FIELD_NONE;
321         fmt->fmt.pix.bytesperline = uvc_v4l2_get_bytesperline(format, frame);
322         fmt->fmt.pix.sizeimage = stream->ctrl.dwMaxVideoFrameSize;
323         fmt->fmt.pix.colorspace = format->colorspace;
324         fmt->fmt.pix.xfer_func = format->xfer_func;
325         fmt->fmt.pix.ycbcr_enc = format->ycbcr_enc;
326
327 done:
328         mutex_unlock(&stream->mutex);
329         return ret;
330 }
331
332 static int uvc_v4l2_set_format(struct uvc_streaming *stream,
333         struct v4l2_format *fmt)
334 {
335         struct uvc_streaming_control probe;
336         struct uvc_format *format;
337         struct uvc_frame *frame;
338         int ret;
339
340         if (fmt->type != stream->type)
341                 return -EINVAL;
342
343         ret = uvc_v4l2_try_format(stream, fmt, &probe, &format, &frame);
344         if (ret < 0)
345                 return ret;
346
347         mutex_lock(&stream->mutex);
348
349         if (uvc_queue_allocated(&stream->queue)) {
350                 ret = -EBUSY;
351                 goto done;
352         }
353
354         stream->ctrl = probe;
355         stream->cur_format = format;
356         stream->cur_frame = frame;
357
358 done:
359         mutex_unlock(&stream->mutex);
360         return ret;
361 }
362
363 static int uvc_v4l2_get_streamparm(struct uvc_streaming *stream,
364                 struct v4l2_streamparm *parm)
365 {
366         u32 numerator, denominator;
367
368         if (parm->type != stream->type)
369                 return -EINVAL;
370
371         mutex_lock(&stream->mutex);
372         numerator = stream->ctrl.dwFrameInterval;
373         mutex_unlock(&stream->mutex);
374
375         denominator = 10000000;
376         uvc_simplify_fraction(&numerator, &denominator, 8, 333);
377
378         memset(parm, 0, sizeof(*parm));
379         parm->type = stream->type;
380
381         if (stream->type == V4L2_BUF_TYPE_VIDEO_CAPTURE) {
382                 parm->parm.capture.capability = V4L2_CAP_TIMEPERFRAME;
383                 parm->parm.capture.capturemode = 0;
384                 parm->parm.capture.timeperframe.numerator = numerator;
385                 parm->parm.capture.timeperframe.denominator = denominator;
386                 parm->parm.capture.extendedmode = 0;
387                 parm->parm.capture.readbuffers = 0;
388         } else {
389                 parm->parm.output.capability = V4L2_CAP_TIMEPERFRAME;
390                 parm->parm.output.outputmode = 0;
391                 parm->parm.output.timeperframe.numerator = numerator;
392                 parm->parm.output.timeperframe.denominator = denominator;
393         }
394
395         return 0;
396 }
397
398 static int uvc_v4l2_set_streamparm(struct uvc_streaming *stream,
399                 struct v4l2_streamparm *parm)
400 {
401         struct uvc_streaming_control probe;
402         struct v4l2_fract timeperframe;
403         struct uvc_format *format;
404         struct uvc_frame *frame;
405         u32 interval, maxd;
406         unsigned int i;
407         int ret;
408
409         if (parm->type != stream->type)
410                 return -EINVAL;
411
412         if (parm->type == V4L2_BUF_TYPE_VIDEO_CAPTURE)
413                 timeperframe = parm->parm.capture.timeperframe;
414         else
415                 timeperframe = parm->parm.output.timeperframe;
416
417         interval = uvc_fraction_to_interval(timeperframe.numerator,
418                 timeperframe.denominator);
419         uvc_trace(UVC_TRACE_FORMAT, "Setting frame interval to %u/%u (%u).\n",
420                 timeperframe.numerator, timeperframe.denominator, interval);
421
422         mutex_lock(&stream->mutex);
423
424         if (uvc_queue_streaming(&stream->queue)) {
425                 mutex_unlock(&stream->mutex);
426                 return -EBUSY;
427         }
428
429         format = stream->cur_format;
430         frame = stream->cur_frame;
431         probe = stream->ctrl;
432         probe.dwFrameInterval = uvc_try_frame_interval(frame, interval);
433         maxd = abs((s32)probe.dwFrameInterval - interval);
434
435         /* Try frames with matching size to find the best frame interval. */
436         for (i = 0; i < format->nframes && maxd != 0; i++) {
437                 u32 d, ival;
438
439                 if (&format->frame[i] == stream->cur_frame)
440                         continue;
441
442                 if (format->frame[i].wWidth != stream->cur_frame->wWidth ||
443                     format->frame[i].wHeight != stream->cur_frame->wHeight)
444                         continue;
445
446                 ival = uvc_try_frame_interval(&format->frame[i], interval);
447                 d = abs((s32)ival - interval);
448                 if (d >= maxd)
449                         continue;
450
451                 frame = &format->frame[i];
452                 probe.bFrameIndex = frame->bFrameIndex;
453                 probe.dwFrameInterval = ival;
454                 maxd = d;
455         }
456
457         /* Probe the device with the new settings. */
458         ret = uvc_probe_video(stream, &probe);
459         if (ret < 0) {
460                 mutex_unlock(&stream->mutex);
461                 return ret;
462         }
463
464         stream->ctrl = probe;
465         stream->cur_frame = frame;
466         mutex_unlock(&stream->mutex);
467
468         /* Return the actual frame period. */
469         timeperframe.numerator = probe.dwFrameInterval;
470         timeperframe.denominator = 10000000;
471         uvc_simplify_fraction(&timeperframe.numerator,
472                 &timeperframe.denominator, 8, 333);
473
474         if (parm->type == V4L2_BUF_TYPE_VIDEO_CAPTURE) {
475                 parm->parm.capture.timeperframe = timeperframe;
476                 parm->parm.capture.capability = V4L2_CAP_TIMEPERFRAME;
477         } else {
478                 parm->parm.output.timeperframe = timeperframe;
479                 parm->parm.output.capability = V4L2_CAP_TIMEPERFRAME;
480         }
481
482         return 0;
483 }
484
485 /* ------------------------------------------------------------------------
486  * Privilege management
487  */
488
489 /*
490  * Privilege management is the multiple-open implementation basis. The current
491  * implementation is completely transparent for the end-user and doesn't
492  * require explicit use of the VIDIOC_G_PRIORITY and VIDIOC_S_PRIORITY ioctls.
493  * Those ioctls enable finer control on the device (by making possible for a
494  * user to request exclusive access to a device), but are not mature yet.
495  * Switching to the V4L2 priority mechanism might be considered in the future
496  * if this situation changes.
497  *
498  * Each open instance of a UVC device can either be in a privileged or
499  * unprivileged state. Only a single instance can be in a privileged state at
500  * a given time. Trying to perform an operation that requires privileges will
501  * automatically acquire the required privileges if possible, or return -EBUSY
502  * otherwise. Privileges are dismissed when closing the instance or when
503  * freeing the video buffers using VIDIOC_REQBUFS.
504  *
505  * Operations that require privileges are:
506  *
507  * - VIDIOC_S_INPUT
508  * - VIDIOC_S_PARM
509  * - VIDIOC_S_FMT
510  * - VIDIOC_REQBUFS
511  */
512 static int uvc_acquire_privileges(struct uvc_fh *handle)
513 {
514         /* Always succeed if the handle is already privileged. */
515         if (handle->state == UVC_HANDLE_ACTIVE)
516                 return 0;
517
518         /* Check if the device already has a privileged handle. */
519         if (atomic_inc_return(&handle->stream->active) != 1) {
520                 atomic_dec(&handle->stream->active);
521                 return -EBUSY;
522         }
523
524         handle->state = UVC_HANDLE_ACTIVE;
525         return 0;
526 }
527
528 static void uvc_dismiss_privileges(struct uvc_fh *handle)
529 {
530         if (handle->state == UVC_HANDLE_ACTIVE)
531                 atomic_dec(&handle->stream->active);
532
533         handle->state = UVC_HANDLE_PASSIVE;
534 }
535
536 static int uvc_has_privileges(struct uvc_fh *handle)
537 {
538         return handle->state == UVC_HANDLE_ACTIVE;
539 }
540
541 /* ------------------------------------------------------------------------
542  * V4L2 file operations
543  */
544
545 static int uvc_v4l2_open(struct file *file)
546 {
547         struct uvc_streaming *stream;
548         struct uvc_fh *handle;
549         int ret = 0;
550
551         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_open\n");
552         stream = video_drvdata(file);
553
554         ret = usb_autopm_get_interface(stream->dev->intf);
555         if (ret < 0)
556                 return ret;
557
558         /* Create the device handle. */
559         handle = kzalloc(sizeof(*handle), GFP_KERNEL);
560         if (handle == NULL) {
561                 usb_autopm_put_interface(stream->dev->intf);
562                 return -ENOMEM;
563         }
564
565         mutex_lock(&stream->dev->lock);
566         if (stream->dev->users == 0) {
567                 ret = uvc_status_start(stream->dev, GFP_KERNEL);
568                 if (ret < 0) {
569                         mutex_unlock(&stream->dev->lock);
570                         usb_autopm_put_interface(stream->dev->intf);
571                         kfree(handle);
572                         return ret;
573                 }
574         }
575
576         stream->dev->users++;
577         mutex_unlock(&stream->dev->lock);
578
579         v4l2_fh_init(&handle->vfh, &stream->vdev);
580         v4l2_fh_add(&handle->vfh);
581         handle->chain = stream->chain;
582         handle->stream = stream;
583         handle->state = UVC_HANDLE_PASSIVE;
584         file->private_data = handle;
585
586         return 0;
587 }
588
589 static int uvc_v4l2_release(struct file *file)
590 {
591         struct uvc_fh *handle = file->private_data;
592         struct uvc_streaming *stream = handle->stream;
593
594         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_release\n");
595
596         /* Only free resources if this is a privileged handle. */
597         if (uvc_has_privileges(handle))
598                 uvc_queue_release(&stream->queue);
599
600         /* Release the file handle. */
601         uvc_dismiss_privileges(handle);
602         v4l2_fh_del(&handle->vfh);
603         v4l2_fh_exit(&handle->vfh);
604         kfree(handle);
605         file->private_data = NULL;
606
607         mutex_lock(&stream->dev->lock);
608         if (--stream->dev->users == 0)
609                 uvc_status_stop(stream->dev);
610         mutex_unlock(&stream->dev->lock);
611
612         usb_autopm_put_interface(stream->dev->intf);
613         return 0;
614 }
615
616 static int uvc_ioctl_querycap(struct file *file, void *fh,
617                               struct v4l2_capability *cap)
618 {
619         struct video_device *vdev = video_devdata(file);
620         struct uvc_fh *handle = file->private_data;
621         struct uvc_video_chain *chain = handle->chain;
622         struct uvc_streaming *stream = handle->stream;
623
624         strscpy(cap->driver, "uvcvideo", sizeof(cap->driver));
625         strscpy(cap->card, vdev->name, sizeof(cap->card));
626         usb_make_path(stream->dev->udev, cap->bus_info, sizeof(cap->bus_info));
627         cap->capabilities = V4L2_CAP_DEVICE_CAPS | V4L2_CAP_STREAMING
628                           | chain->caps;
629
630         return 0;
631 }
632
633 static int uvc_ioctl_enum_fmt(struct uvc_streaming *stream,
634                               struct v4l2_fmtdesc *fmt)
635 {
636         struct uvc_format *format;
637         enum v4l2_buf_type type = fmt->type;
638         u32 index = fmt->index;
639
640         if (fmt->type != stream->type || fmt->index >= stream->nformats)
641                 return -EINVAL;
642
643         memset(fmt, 0, sizeof(*fmt));
644         fmt->index = index;
645         fmt->type = type;
646
647         format = &stream->format[fmt->index];
648         fmt->flags = 0;
649         if (format->flags & UVC_FMT_FLAG_COMPRESSED)
650                 fmt->flags |= V4L2_FMT_FLAG_COMPRESSED;
651         strscpy(fmt->description, format->name, sizeof(fmt->description));
652         fmt->description[sizeof(fmt->description) - 1] = 0;
653         fmt->pixelformat = format->fcc;
654         return 0;
655 }
656
657 static int uvc_ioctl_enum_fmt_vid_cap(struct file *file, void *fh,
658                                       struct v4l2_fmtdesc *fmt)
659 {
660         struct uvc_fh *handle = fh;
661         struct uvc_streaming *stream = handle->stream;
662
663         return uvc_ioctl_enum_fmt(stream, fmt);
664 }
665
666 static int uvc_ioctl_enum_fmt_vid_out(struct file *file, void *fh,
667                                       struct v4l2_fmtdesc *fmt)
668 {
669         struct uvc_fh *handle = fh;
670         struct uvc_streaming *stream = handle->stream;
671
672         return uvc_ioctl_enum_fmt(stream, fmt);
673 }
674
675 static int uvc_ioctl_g_fmt_vid_cap(struct file *file, void *fh,
676                                    struct v4l2_format *fmt)
677 {
678         struct uvc_fh *handle = fh;
679         struct uvc_streaming *stream = handle->stream;
680
681         return uvc_v4l2_get_format(stream, fmt);
682 }
683
684 static int uvc_ioctl_g_fmt_vid_out(struct file *file, void *fh,
685                                    struct v4l2_format *fmt)
686 {
687         struct uvc_fh *handle = fh;
688         struct uvc_streaming *stream = handle->stream;
689
690         return uvc_v4l2_get_format(stream, fmt);
691 }
692
693 static int uvc_ioctl_s_fmt_vid_cap(struct file *file, void *fh,
694                                    struct v4l2_format *fmt)
695 {
696         struct uvc_fh *handle = fh;
697         struct uvc_streaming *stream = handle->stream;
698         int ret;
699
700         ret = uvc_acquire_privileges(handle);
701         if (ret < 0)
702                 return ret;
703
704         return uvc_v4l2_set_format(stream, fmt);
705 }
706
707 static int uvc_ioctl_s_fmt_vid_out(struct file *file, void *fh,
708                                    struct v4l2_format *fmt)
709 {
710         struct uvc_fh *handle = fh;
711         struct uvc_streaming *stream = handle->stream;
712         int ret;
713
714         ret = uvc_acquire_privileges(handle);
715         if (ret < 0)
716                 return ret;
717
718         return uvc_v4l2_set_format(stream, fmt);
719 }
720
721 static int uvc_ioctl_try_fmt_vid_cap(struct file *file, void *fh,
722                                      struct v4l2_format *fmt)
723 {
724         struct uvc_fh *handle = fh;
725         struct uvc_streaming *stream = handle->stream;
726         struct uvc_streaming_control probe;
727
728         return uvc_v4l2_try_format(stream, fmt, &probe, NULL, NULL);
729 }
730
731 static int uvc_ioctl_try_fmt_vid_out(struct file *file, void *fh,
732                                      struct v4l2_format *fmt)
733 {
734         struct uvc_fh *handle = fh;
735         struct uvc_streaming *stream = handle->stream;
736         struct uvc_streaming_control probe;
737
738         return uvc_v4l2_try_format(stream, fmt, &probe, NULL, NULL);
739 }
740
741 static int uvc_ioctl_reqbufs(struct file *file, void *fh,
742                              struct v4l2_requestbuffers *rb)
743 {
744         struct uvc_fh *handle = fh;
745         struct uvc_streaming *stream = handle->stream;
746         int ret;
747
748         ret = uvc_acquire_privileges(handle);
749         if (ret < 0)
750                 return ret;
751
752         mutex_lock(&stream->mutex);
753         ret = uvc_request_buffers(&stream->queue, rb);
754         mutex_unlock(&stream->mutex);
755         if (ret < 0)
756                 return ret;
757
758         if (ret == 0)
759                 uvc_dismiss_privileges(handle);
760
761         return 0;
762 }
763
764 static int uvc_ioctl_querybuf(struct file *file, void *fh,
765                               struct v4l2_buffer *buf)
766 {
767         struct uvc_fh *handle = fh;
768         struct uvc_streaming *stream = handle->stream;
769
770         if (!uvc_has_privileges(handle))
771                 return -EBUSY;
772
773         return uvc_query_buffer(&stream->queue, buf);
774 }
775
776 static int uvc_ioctl_qbuf(struct file *file, void *fh, struct v4l2_buffer *buf)
777 {
778         struct uvc_fh *handle = fh;
779         struct uvc_streaming *stream = handle->stream;
780
781         if (!uvc_has_privileges(handle))
782                 return -EBUSY;
783
784         return uvc_queue_buffer(&stream->queue,
785                                 stream->vdev.v4l2_dev->mdev, buf);
786 }
787
788 static int uvc_ioctl_expbuf(struct file *file, void *fh,
789                             struct v4l2_exportbuffer *exp)
790 {
791         struct uvc_fh *handle = fh;
792         struct uvc_streaming *stream = handle->stream;
793
794         if (!uvc_has_privileges(handle))
795                 return -EBUSY;
796
797         return uvc_export_buffer(&stream->queue, exp);
798 }
799
800 static int uvc_ioctl_dqbuf(struct file *file, void *fh, struct v4l2_buffer *buf)
801 {
802         struct uvc_fh *handle = fh;
803         struct uvc_streaming *stream = handle->stream;
804
805         if (!uvc_has_privileges(handle))
806                 return -EBUSY;
807
808         return uvc_dequeue_buffer(&stream->queue, buf,
809                                   file->f_flags & O_NONBLOCK);
810 }
811
812 static int uvc_ioctl_create_bufs(struct file *file, void *fh,
813                                   struct v4l2_create_buffers *cb)
814 {
815         struct uvc_fh *handle = fh;
816         struct uvc_streaming *stream = handle->stream;
817         int ret;
818
819         ret = uvc_acquire_privileges(handle);
820         if (ret < 0)
821                 return ret;
822
823         return uvc_create_buffers(&stream->queue, cb);
824 }
825
826 static int uvc_ioctl_streamon(struct file *file, void *fh,
827                               enum v4l2_buf_type type)
828 {
829         struct uvc_fh *handle = fh;
830         struct uvc_streaming *stream = handle->stream;
831         int ret;
832
833         if (!uvc_has_privileges(handle))
834                 return -EBUSY;
835
836         mutex_lock(&stream->mutex);
837         ret = uvc_queue_streamon(&stream->queue, type);
838         mutex_unlock(&stream->mutex);
839
840         return ret;
841 }
842
843 static int uvc_ioctl_streamoff(struct file *file, void *fh,
844                                enum v4l2_buf_type type)
845 {
846         struct uvc_fh *handle = fh;
847         struct uvc_streaming *stream = handle->stream;
848
849         if (!uvc_has_privileges(handle))
850                 return -EBUSY;
851
852         mutex_lock(&stream->mutex);
853         uvc_queue_streamoff(&stream->queue, type);
854         mutex_unlock(&stream->mutex);
855
856         return 0;
857 }
858
859 static int uvc_ioctl_enum_input(struct file *file, void *fh,
860                                 struct v4l2_input *input)
861 {
862         struct uvc_fh *handle = fh;
863         struct uvc_video_chain *chain = handle->chain;
864         const struct uvc_entity *selector = chain->selector;
865         struct uvc_entity *iterm = NULL;
866         struct uvc_entity *it;
867         u32 index = input->index;
868
869         if (selector == NULL ||
870             (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
871                 if (index != 0)
872                         return -EINVAL;
873                 list_for_each_entry(it, &chain->entities, chain) {
874                         if (UVC_ENTITY_IS_ITERM(it)) {
875                                 iterm = it;
876                                 break;
877                         }
878                 }
879         } else if (index < selector->bNrInPins) {
880                 list_for_each_entry(it, &chain->entities, chain) {
881                         if (!UVC_ENTITY_IS_ITERM(it))
882                                 continue;
883                         if (it->id == selector->baSourceID[index]) {
884                                 iterm = it;
885                                 break;
886                         }
887                 }
888         }
889
890         if (iterm == NULL)
891                 return -EINVAL;
892
893         memset(input, 0, sizeof(*input));
894         input->index = index;
895         strscpy(input->name, iterm->name, sizeof(input->name));
896         if (UVC_ENTITY_TYPE(iterm) == UVC_ITT_CAMERA)
897                 input->type = V4L2_INPUT_TYPE_CAMERA;
898
899         return 0;
900 }
901
902 static int uvc_ioctl_g_input(struct file *file, void *fh, unsigned int *input)
903 {
904         struct uvc_fh *handle = fh;
905         struct uvc_video_chain *chain = handle->chain;
906         u8 *buf;
907         int ret;
908
909         if (chain->selector == NULL ||
910             (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
911                 *input = 0;
912                 return 0;
913         }
914
915         buf = kmalloc(1, GFP_KERNEL);
916         if (!buf)
917                 return -ENOMEM;
918
919         ret = uvc_query_ctrl(chain->dev, UVC_GET_CUR, chain->selector->id,
920                              chain->dev->intfnum,  UVC_SU_INPUT_SELECT_CONTROL,
921                              buf, 1);
922         if (!ret)
923                 *input = *buf - 1;
924
925         kfree(buf);
926
927         return ret;
928 }
929
930 static int uvc_ioctl_s_input(struct file *file, void *fh, unsigned int input)
931 {
932         struct uvc_fh *handle = fh;
933         struct uvc_video_chain *chain = handle->chain;
934         u8 *buf;
935         int ret;
936
937         ret = uvc_acquire_privileges(handle);
938         if (ret < 0)
939                 return ret;
940
941         if (chain->selector == NULL ||
942             (chain->dev->quirks & UVC_QUIRK_IGNORE_SELECTOR_UNIT)) {
943                 if (input)
944                         return -EINVAL;
945                 return 0;
946         }
947
948         if (input >= chain->selector->bNrInPins)
949                 return -EINVAL;
950
951         buf = kmalloc(1, GFP_KERNEL);
952         if (!buf)
953                 return -ENOMEM;
954
955         *buf = input + 1;
956         ret = uvc_query_ctrl(chain->dev, UVC_SET_CUR, chain->selector->id,
957                              chain->dev->intfnum, UVC_SU_INPUT_SELECT_CONTROL,
958                              buf, 1);
959         kfree(buf);
960
961         return ret;
962 }
963
964 static int uvc_ioctl_queryctrl(struct file *file, void *fh,
965                                struct v4l2_queryctrl *qc)
966 {
967         struct uvc_fh *handle = fh;
968         struct uvc_video_chain *chain = handle->chain;
969
970         return uvc_query_v4l2_ctrl(chain, qc);
971 }
972
973 static int uvc_ioctl_query_ext_ctrl(struct file *file, void *fh,
974                                     struct v4l2_query_ext_ctrl *qec)
975 {
976         struct uvc_fh *handle = fh;
977         struct uvc_video_chain *chain = handle->chain;
978         struct v4l2_queryctrl qc = { qec->id };
979         int ret;
980
981         ret = uvc_query_v4l2_ctrl(chain, &qc);
982         if (ret)
983                 return ret;
984
985         qec->id = qc.id;
986         qec->type = qc.type;
987         strscpy(qec->name, qc.name, sizeof(qec->name));
988         qec->minimum = qc.minimum;
989         qec->maximum = qc.maximum;
990         qec->step = qc.step;
991         qec->default_value = qc.default_value;
992         qec->flags = qc.flags;
993         qec->elem_size = 4;
994         qec->elems = 1;
995         qec->nr_of_dims = 0;
996         memset(qec->dims, 0, sizeof(qec->dims));
997         memset(qec->reserved, 0, sizeof(qec->reserved));
998
999         return 0;
1000 }
1001
1002 static int uvc_ioctl_g_ctrl(struct file *file, void *fh,
1003                             struct v4l2_control *ctrl)
1004 {
1005         struct uvc_fh *handle = fh;
1006         struct uvc_video_chain *chain = handle->chain;
1007         struct v4l2_ext_control xctrl;
1008         int ret;
1009
1010         memset(&xctrl, 0, sizeof(xctrl));
1011         xctrl.id = ctrl->id;
1012
1013         ret = uvc_ctrl_begin(chain);
1014         if (ret < 0)
1015                 return ret;
1016
1017         ret = uvc_ctrl_get(chain, &xctrl);
1018         uvc_ctrl_rollback(handle);
1019         if (ret < 0)
1020                 return ret;
1021
1022         ctrl->value = xctrl.value;
1023         return 0;
1024 }
1025
1026 static int uvc_ioctl_s_ctrl(struct file *file, void *fh,
1027                             struct v4l2_control *ctrl)
1028 {
1029         struct uvc_fh *handle = fh;
1030         struct uvc_video_chain *chain = handle->chain;
1031         struct v4l2_ext_control xctrl;
1032         int ret;
1033
1034         memset(&xctrl, 0, sizeof(xctrl));
1035         xctrl.id = ctrl->id;
1036         xctrl.value = ctrl->value;
1037
1038         ret = uvc_ctrl_begin(chain);
1039         if (ret < 0)
1040                 return ret;
1041
1042         ret = uvc_ctrl_set(handle, &xctrl);
1043         if (ret < 0) {
1044                 uvc_ctrl_rollback(handle);
1045                 return ret;
1046         }
1047
1048         ret = uvc_ctrl_commit(handle, &xctrl, 1);
1049         if (ret < 0)
1050                 return ret;
1051
1052         ctrl->value = xctrl.value;
1053         return 0;
1054 }
1055
1056 static int uvc_ioctl_g_ext_ctrls(struct file *file, void *fh,
1057                                  struct v4l2_ext_controls *ctrls)
1058 {
1059         struct uvc_fh *handle = fh;
1060         struct uvc_video_chain *chain = handle->chain;
1061         struct v4l2_ext_control *ctrl = ctrls->controls;
1062         unsigned int i;
1063         int ret;
1064
1065         if (ctrls->which == V4L2_CTRL_WHICH_DEF_VAL) {
1066                 for (i = 0; i < ctrls->count; ++ctrl, ++i) {
1067                         struct v4l2_queryctrl qc = { .id = ctrl->id };
1068
1069                         ret = uvc_query_v4l2_ctrl(chain, &qc);
1070                         if (ret < 0) {
1071                                 ctrls->error_idx = i;
1072                                 return ret;
1073                         }
1074
1075                         ctrl->value = qc.default_value;
1076                 }
1077
1078                 return 0;
1079         }
1080
1081         ret = uvc_ctrl_begin(chain);
1082         if (ret < 0)
1083                 return ret;
1084
1085         for (i = 0; i < ctrls->count; ++ctrl, ++i) {
1086                 ret = uvc_ctrl_get(chain, ctrl);
1087                 if (ret < 0) {
1088                         uvc_ctrl_rollback(handle);
1089                         ctrls->error_idx = i;
1090                         return ret;
1091                 }
1092         }
1093
1094         ctrls->error_idx = 0;
1095
1096         return uvc_ctrl_rollback(handle);
1097 }
1098
1099 static int uvc_ioctl_s_try_ext_ctrls(struct uvc_fh *handle,
1100                                      struct v4l2_ext_controls *ctrls,
1101                                      bool commit)
1102 {
1103         struct v4l2_ext_control *ctrl = ctrls->controls;
1104         struct uvc_video_chain *chain = handle->chain;
1105         unsigned int i;
1106         int ret;
1107
1108         /* Default value cannot be changed */
1109         if (ctrls->which == V4L2_CTRL_WHICH_DEF_VAL)
1110                 return -EINVAL;
1111
1112         ret = uvc_ctrl_begin(chain);
1113         if (ret < 0)
1114                 return ret;
1115
1116         for (i = 0; i < ctrls->count; ++ctrl, ++i) {
1117                 ret = uvc_ctrl_set(handle, ctrl);
1118                 if (ret < 0) {
1119                         uvc_ctrl_rollback(handle);
1120                         ctrls->error_idx = commit ? ctrls->count : i;
1121                         return ret;
1122                 }
1123         }
1124
1125         ctrls->error_idx = 0;
1126
1127         if (commit)
1128                 return uvc_ctrl_commit(handle, ctrls->controls, ctrls->count);
1129         else
1130                 return uvc_ctrl_rollback(handle);
1131 }
1132
1133 static int uvc_ioctl_s_ext_ctrls(struct file *file, void *fh,
1134                                  struct v4l2_ext_controls *ctrls)
1135 {
1136         struct uvc_fh *handle = fh;
1137
1138         return uvc_ioctl_s_try_ext_ctrls(handle, ctrls, true);
1139 }
1140
1141 static int uvc_ioctl_try_ext_ctrls(struct file *file, void *fh,
1142                                    struct v4l2_ext_controls *ctrls)
1143 {
1144         struct uvc_fh *handle = fh;
1145
1146         return uvc_ioctl_s_try_ext_ctrls(handle, ctrls, false);
1147 }
1148
1149 static int uvc_ioctl_querymenu(struct file *file, void *fh,
1150                                struct v4l2_querymenu *qm)
1151 {
1152         struct uvc_fh *handle = fh;
1153         struct uvc_video_chain *chain = handle->chain;
1154
1155         return uvc_query_v4l2_menu(chain, qm);
1156 }
1157
1158 static int uvc_ioctl_g_selection(struct file *file, void *fh,
1159                                  struct v4l2_selection *sel)
1160 {
1161         struct uvc_fh *handle = fh;
1162         struct uvc_streaming *stream = handle->stream;
1163
1164         if (sel->type != stream->type)
1165                 return -EINVAL;
1166
1167         switch (sel->target) {
1168         case V4L2_SEL_TGT_CROP_DEFAULT:
1169         case V4L2_SEL_TGT_CROP_BOUNDS:
1170                 if (stream->type != V4L2_BUF_TYPE_VIDEO_CAPTURE)
1171                         return -EINVAL;
1172                 break;
1173         case V4L2_SEL_TGT_COMPOSE_DEFAULT:
1174         case V4L2_SEL_TGT_COMPOSE_BOUNDS:
1175                 if (stream->type != V4L2_BUF_TYPE_VIDEO_OUTPUT)
1176                         return -EINVAL;
1177                 break;
1178         default:
1179                 return -EINVAL;
1180         }
1181
1182         sel->r.left = 0;
1183         sel->r.top = 0;
1184         mutex_lock(&stream->mutex);
1185         sel->r.width = stream->cur_frame->wWidth;
1186         sel->r.height = stream->cur_frame->wHeight;
1187         mutex_unlock(&stream->mutex);
1188
1189         return 0;
1190 }
1191
1192 static int uvc_ioctl_g_parm(struct file *file, void *fh,
1193                             struct v4l2_streamparm *parm)
1194 {
1195         struct uvc_fh *handle = fh;
1196         struct uvc_streaming *stream = handle->stream;
1197
1198         return uvc_v4l2_get_streamparm(stream, parm);
1199 }
1200
1201 static int uvc_ioctl_s_parm(struct file *file, void *fh,
1202                             struct v4l2_streamparm *parm)
1203 {
1204         struct uvc_fh *handle = fh;
1205         struct uvc_streaming *stream = handle->stream;
1206         int ret;
1207
1208         ret = uvc_acquire_privileges(handle);
1209         if (ret < 0)
1210                 return ret;
1211
1212         return uvc_v4l2_set_streamparm(stream, parm);
1213 }
1214
1215 static int uvc_ioctl_enum_framesizes(struct file *file, void *fh,
1216                                      struct v4l2_frmsizeenum *fsize)
1217 {
1218         struct uvc_fh *handle = fh;
1219         struct uvc_streaming *stream = handle->stream;
1220         struct uvc_format *format = NULL;
1221         struct uvc_frame *frame = NULL;
1222         unsigned int index;
1223         unsigned int i;
1224
1225         /* Look for the given pixel format */
1226         for (i = 0; i < stream->nformats; i++) {
1227                 if (stream->format[i].fcc == fsize->pixel_format) {
1228                         format = &stream->format[i];
1229                         break;
1230                 }
1231         }
1232         if (format == NULL)
1233                 return -EINVAL;
1234
1235         /* Skip duplicate frame sizes */
1236         for (i = 0, index = 0; i < format->nframes; i++) {
1237                 if (frame && frame->wWidth == format->frame[i].wWidth &&
1238                     frame->wHeight == format->frame[i].wHeight)
1239                         continue;
1240                 frame = &format->frame[i];
1241                 if (index == fsize->index)
1242                         break;
1243                 index++;
1244         }
1245
1246         if (i == format->nframes)
1247                 return -EINVAL;
1248
1249         fsize->type = V4L2_FRMSIZE_TYPE_DISCRETE;
1250         fsize->discrete.width = frame->wWidth;
1251         fsize->discrete.height = frame->wHeight;
1252         return 0;
1253 }
1254
1255 static int uvc_ioctl_enum_frameintervals(struct file *file, void *fh,
1256                                          struct v4l2_frmivalenum *fival)
1257 {
1258         struct uvc_fh *handle = fh;
1259         struct uvc_streaming *stream = handle->stream;
1260         struct uvc_format *format = NULL;
1261         struct uvc_frame *frame = NULL;
1262         unsigned int nintervals;
1263         unsigned int index;
1264         unsigned int i;
1265
1266         /* Look for the given pixel format and frame size */
1267         for (i = 0; i < stream->nformats; i++) {
1268                 if (stream->format[i].fcc == fival->pixel_format) {
1269                         format = &stream->format[i];
1270                         break;
1271                 }
1272         }
1273         if (format == NULL)
1274                 return -EINVAL;
1275
1276         index = fival->index;
1277         for (i = 0; i < format->nframes; i++) {
1278                 if (format->frame[i].wWidth == fival->width &&
1279                     format->frame[i].wHeight == fival->height) {
1280                         frame = &format->frame[i];
1281                         nintervals = frame->bFrameIntervalType ?: 1;
1282                         if (index < nintervals)
1283                                 break;
1284                         index -= nintervals;
1285                 }
1286         }
1287         if (i == format->nframes)
1288                 return -EINVAL;
1289
1290         if (frame->bFrameIntervalType) {
1291                 fival->type = V4L2_FRMIVAL_TYPE_DISCRETE;
1292                 fival->discrete.numerator =
1293                         frame->dwFrameInterval[index];
1294                 fival->discrete.denominator = 10000000;
1295                 uvc_simplify_fraction(&fival->discrete.numerator,
1296                         &fival->discrete.denominator, 8, 333);
1297         } else {
1298                 fival->type = V4L2_FRMIVAL_TYPE_STEPWISE;
1299                 fival->stepwise.min.numerator = frame->dwFrameInterval[0];
1300                 fival->stepwise.min.denominator = 10000000;
1301                 fival->stepwise.max.numerator = frame->dwFrameInterval[1];
1302                 fival->stepwise.max.denominator = 10000000;
1303                 fival->stepwise.step.numerator = frame->dwFrameInterval[2];
1304                 fival->stepwise.step.denominator = 10000000;
1305                 uvc_simplify_fraction(&fival->stepwise.min.numerator,
1306                         &fival->stepwise.min.denominator, 8, 333);
1307                 uvc_simplify_fraction(&fival->stepwise.max.numerator,
1308                         &fival->stepwise.max.denominator, 8, 333);
1309                 uvc_simplify_fraction(&fival->stepwise.step.numerator,
1310                         &fival->stepwise.step.denominator, 8, 333);
1311         }
1312
1313         return 0;
1314 }
1315
1316 static int uvc_ioctl_subscribe_event(struct v4l2_fh *fh,
1317                                      const struct v4l2_event_subscription *sub)
1318 {
1319         switch (sub->type) {
1320         case V4L2_EVENT_CTRL:
1321                 return v4l2_event_subscribe(fh, sub, 0, &uvc_ctrl_sub_ev_ops);
1322         default:
1323                 return -EINVAL;
1324         }
1325 }
1326
1327 static long uvc_ioctl_default(struct file *file, void *fh, bool valid_prio,
1328                               unsigned int cmd, void *arg)
1329 {
1330         struct uvc_fh *handle = fh;
1331         struct uvc_video_chain *chain = handle->chain;
1332
1333         switch (cmd) {
1334         /* Dynamic controls. */
1335         case UVCIOC_CTRL_MAP:
1336                 return uvc_ioctl_ctrl_map(chain, arg);
1337
1338         case UVCIOC_CTRL_QUERY:
1339                 return uvc_xu_ctrl_query(chain, arg);
1340
1341         default:
1342                 return -ENOTTY;
1343         }
1344 }
1345
1346 #ifdef CONFIG_COMPAT
1347 struct uvc_xu_control_mapping32 {
1348         u32 id;
1349         u8 name[32];
1350         u8 entity[16];
1351         u8 selector;
1352
1353         u8 size;
1354         u8 offset;
1355         u32 v4l2_type;
1356         u32 data_type;
1357
1358         compat_caddr_t menu_info;
1359         u32 menu_count;
1360
1361         u32 reserved[4];
1362 };
1363
1364 static int uvc_v4l2_get_xu_mapping(struct uvc_xu_control_mapping *kp,
1365                         const struct uvc_xu_control_mapping32 __user *up)
1366 {
1367         struct uvc_xu_control_mapping32 *p = (void *)kp;
1368         compat_caddr_t info;
1369         u32 count;
1370
1371         if (copy_from_user(p, up, sizeof(*p)))
1372                 return -EFAULT;
1373
1374         count = p->menu_count;
1375         info = p->menu_info;
1376
1377         memset(kp->reserved, 0, sizeof(kp->reserved));
1378         kp->menu_info = count ? compat_ptr(info) : NULL;
1379         kp->menu_count = count;
1380         return 0;
1381 }
1382
1383 static int uvc_v4l2_put_xu_mapping(const struct uvc_xu_control_mapping *kp,
1384                         struct uvc_xu_control_mapping32 __user *up)
1385 {
1386         if (copy_to_user(up, kp, offsetof(typeof(*up), menu_info)) ||
1387             put_user(kp->menu_count, &up->menu_count))
1388                 return -EFAULT;
1389
1390         if (clear_user(up->reserved, sizeof(up->reserved)))
1391                 return -EFAULT;
1392
1393         return 0;
1394 }
1395
1396 struct uvc_xu_control_query32 {
1397         u8 unit;
1398         u8 selector;
1399         u8 query;
1400         u16 size;
1401         compat_caddr_t data;
1402 };
1403
1404 static int uvc_v4l2_get_xu_query(struct uvc_xu_control_query *kp,
1405                         const struct uvc_xu_control_query32 __user *up)
1406 {
1407         struct uvc_xu_control_query32 v;
1408
1409         if (copy_from_user(&v, up, sizeof(v)))
1410                 return -EFAULT;
1411
1412         *kp = (struct uvc_xu_control_query){
1413                 .unit = v.unit,
1414                 .selector = v.selector,
1415                 .query = v.query,
1416                 .size = v.size,
1417                 .data = v.size ? compat_ptr(v.data) : NULL
1418         };
1419         return 0;
1420 }
1421
1422 static int uvc_v4l2_put_xu_query(const struct uvc_xu_control_query *kp,
1423                         struct uvc_xu_control_query32 __user *up)
1424 {
1425         if (copy_to_user(up, kp, offsetof(typeof(*up), data)))
1426                 return -EFAULT;
1427         return 0;
1428 }
1429
1430 #define UVCIOC_CTRL_MAP32       _IOWR('u', 0x20, struct uvc_xu_control_mapping32)
1431 #define UVCIOC_CTRL_QUERY32     _IOWR('u', 0x21, struct uvc_xu_control_query32)
1432
1433 static long uvc_v4l2_compat_ioctl32(struct file *file,
1434                      unsigned int cmd, unsigned long arg)
1435 {
1436         struct uvc_fh *handle = file->private_data;
1437         union {
1438                 struct uvc_xu_control_mapping xmap;
1439                 struct uvc_xu_control_query xqry;
1440         } karg;
1441         void __user *up = compat_ptr(arg);
1442         long ret;
1443
1444         switch (cmd) {
1445         case UVCIOC_CTRL_MAP32:
1446                 ret = uvc_v4l2_get_xu_mapping(&karg.xmap, up);
1447                 if (ret)
1448                         return ret;
1449                 ret = uvc_ioctl_ctrl_map(handle->chain, &karg.xmap);
1450                 if (ret)
1451                         return ret;
1452                 ret = uvc_v4l2_put_xu_mapping(&karg.xmap, up);
1453                 if (ret)
1454                         return ret;
1455
1456                 break;
1457
1458         case UVCIOC_CTRL_QUERY32:
1459                 ret = uvc_v4l2_get_xu_query(&karg.xqry, up);
1460                 if (ret)
1461                         return ret;
1462                 ret = uvc_xu_ctrl_query(handle->chain, &karg.xqry);
1463                 if (ret)
1464                         return ret;
1465                 ret = uvc_v4l2_put_xu_query(&karg.xqry, up);
1466                 if (ret)
1467                         return ret;
1468                 break;
1469
1470         default:
1471                 return -ENOIOCTLCMD;
1472         }
1473
1474         return ret;
1475 }
1476 #endif
1477
1478 static ssize_t uvc_v4l2_read(struct file *file, char __user *data,
1479                     size_t count, loff_t *ppos)
1480 {
1481         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_read: not implemented.\n");
1482         return -EINVAL;
1483 }
1484
1485 static int uvc_v4l2_mmap(struct file *file, struct vm_area_struct *vma)
1486 {
1487         struct uvc_fh *handle = file->private_data;
1488         struct uvc_streaming *stream = handle->stream;
1489
1490         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_mmap\n");
1491
1492         return uvc_queue_mmap(&stream->queue, vma);
1493 }
1494
1495 static __poll_t uvc_v4l2_poll(struct file *file, poll_table *wait)
1496 {
1497         struct uvc_fh *handle = file->private_data;
1498         struct uvc_streaming *stream = handle->stream;
1499
1500         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_poll\n");
1501
1502         return uvc_queue_poll(&stream->queue, file, wait);
1503 }
1504
1505 #ifndef CONFIG_MMU
1506 static unsigned long uvc_v4l2_get_unmapped_area(struct file *file,
1507                 unsigned long addr, unsigned long len, unsigned long pgoff,
1508                 unsigned long flags)
1509 {
1510         struct uvc_fh *handle = file->private_data;
1511         struct uvc_streaming *stream = handle->stream;
1512
1513         uvc_trace(UVC_TRACE_CALLS, "uvc_v4l2_get_unmapped_area\n");
1514
1515         return uvc_queue_get_unmapped_area(&stream->queue, pgoff);
1516 }
1517 #endif
1518
1519 const struct v4l2_ioctl_ops uvc_ioctl_ops = {
1520         .vidioc_querycap = uvc_ioctl_querycap,
1521         .vidioc_enum_fmt_vid_cap = uvc_ioctl_enum_fmt_vid_cap,
1522         .vidioc_enum_fmt_vid_out = uvc_ioctl_enum_fmt_vid_out,
1523         .vidioc_g_fmt_vid_cap = uvc_ioctl_g_fmt_vid_cap,
1524         .vidioc_g_fmt_vid_out = uvc_ioctl_g_fmt_vid_out,
1525         .vidioc_s_fmt_vid_cap = uvc_ioctl_s_fmt_vid_cap,
1526         .vidioc_s_fmt_vid_out = uvc_ioctl_s_fmt_vid_out,
1527         .vidioc_try_fmt_vid_cap = uvc_ioctl_try_fmt_vid_cap,
1528         .vidioc_try_fmt_vid_out = uvc_ioctl_try_fmt_vid_out,
1529         .vidioc_reqbufs = uvc_ioctl_reqbufs,
1530         .vidioc_querybuf = uvc_ioctl_querybuf,
1531         .vidioc_qbuf = uvc_ioctl_qbuf,
1532         .vidioc_expbuf = uvc_ioctl_expbuf,
1533         .vidioc_dqbuf = uvc_ioctl_dqbuf,
1534         .vidioc_create_bufs = uvc_ioctl_create_bufs,
1535         .vidioc_streamon = uvc_ioctl_streamon,
1536         .vidioc_streamoff = uvc_ioctl_streamoff,
1537         .vidioc_enum_input = uvc_ioctl_enum_input,
1538         .vidioc_g_input = uvc_ioctl_g_input,
1539         .vidioc_s_input = uvc_ioctl_s_input,
1540         .vidioc_queryctrl = uvc_ioctl_queryctrl,
1541         .vidioc_query_ext_ctrl = uvc_ioctl_query_ext_ctrl,
1542         .vidioc_g_ctrl = uvc_ioctl_g_ctrl,
1543         .vidioc_s_ctrl = uvc_ioctl_s_ctrl,
1544         .vidioc_g_ext_ctrls = uvc_ioctl_g_ext_ctrls,
1545         .vidioc_s_ext_ctrls = uvc_ioctl_s_ext_ctrls,
1546         .vidioc_try_ext_ctrls = uvc_ioctl_try_ext_ctrls,
1547         .vidioc_querymenu = uvc_ioctl_querymenu,
1548         .vidioc_g_selection = uvc_ioctl_g_selection,
1549         .vidioc_g_parm = uvc_ioctl_g_parm,
1550         .vidioc_s_parm = uvc_ioctl_s_parm,
1551         .vidioc_enum_framesizes = uvc_ioctl_enum_framesizes,
1552         .vidioc_enum_frameintervals = uvc_ioctl_enum_frameintervals,
1553         .vidioc_subscribe_event = uvc_ioctl_subscribe_event,
1554         .vidioc_unsubscribe_event = v4l2_event_unsubscribe,
1555         .vidioc_default = uvc_ioctl_default,
1556 };
1557
1558 const struct v4l2_file_operations uvc_fops = {
1559         .owner          = THIS_MODULE,
1560         .open           = uvc_v4l2_open,
1561         .release        = uvc_v4l2_release,
1562         .unlocked_ioctl = video_ioctl2,
1563 #ifdef CONFIG_COMPAT
1564         .compat_ioctl32 = uvc_v4l2_compat_ioctl32,
1565 #endif
1566         .read           = uvc_v4l2_read,
1567         .mmap           = uvc_v4l2_mmap,
1568         .poll           = uvc_v4l2_poll,
1569 #ifndef CONFIG_MMU
1570         .get_unmapped_area = uvc_v4l2_get_unmapped_area,
1571 #endif
1572 };
1573