You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
82 lines
2.6 KiB
82 lines
2.6 KiB
/* |
|
* Copyright (c) 2022 Intel Corporation |
|
* |
|
* SPDX-License-Identifier: Apache-2.0 |
|
*/ |
|
|
|
#include <zephyr/drivers/i3c.h> |
|
#include <string.h> |
|
#include <zephyr/internal/syscall_handler.h> |
|
|
|
static inline int z_vrfy_i3c_do_ccc(const struct device *dev, |
|
struct i3c_ccc_payload *payload) |
|
{ |
|
K_OOPS(K_SYSCALL_DRIVER_I3C(dev, do_ccc)); |
|
K_OOPS(K_SYSCALL_MEMORY_READ(payload, sizeof(*payload))); |
|
K_OOPS(K_SYSCALL_MEMORY_WRITE(payload, sizeof(*payload))); |
|
|
|
if (payload->ccc.data != NULL) { |
|
K_OOPS(K_SYSCALL_MEMORY_ARRAY_READ(payload->ccc.data, |
|
payload->ccc.data_len, |
|
sizeof(*payload->ccc.data))); |
|
K_OOPS(K_SYSCALL_MEMORY_ARRAY_WRITE(payload->ccc.data, |
|
payload->ccc.data_len, |
|
sizeof(*payload->ccc.data))); |
|
} |
|
|
|
if (payload->targets.payloads != NULL) { |
|
K_OOPS(K_SYSCALL_MEMORY_ARRAY_READ(payload->targets.payloads, |
|
payload->targets.num_targets, |
|
sizeof(*payload->targets.payloads))); |
|
K_OOPS(K_SYSCALL_MEMORY_ARRAY_WRITE(payload->targets.payloads, |
|
payload->targets.num_targets, |
|
sizeof(*payload->targets.payloads))); |
|
} |
|
|
|
return z_impl_i3c_do_ccc(dev, payload); |
|
} |
|
#include <zephyr/syscalls/i3c_do_ccc_mrsh.c> |
|
|
|
static uint32_t copy_i3c_msgs_and_transfer(struct i3c_device_desc *target, |
|
const struct i3c_msg *msgs, |
|
uint8_t num_msgs) |
|
{ |
|
struct i3c_msg copy[num_msgs]; |
|
uint8_t i; |
|
|
|
/* Use a local copy to avoid switcheroo attacks. */ |
|
memcpy(copy, msgs, num_msgs * sizeof(*msgs)); |
|
|
|
/* Validate the buffers in each message struct. Read options require |
|
* that the target buffer be writable |
|
*/ |
|
for (i = 0U; i < num_msgs; i++) { |
|
K_OOPS(K_SYSCALL_MEMORY(copy[i].buf, copy[i].len, |
|
copy[i].flags & I3C_MSG_READ)); |
|
} |
|
|
|
return z_impl_i3c_transfer(target, copy, num_msgs); |
|
} |
|
|
|
static inline int z_vrfy_i3c_transfer(struct i3c_device_desc *target, |
|
struct i3c_msg *msgs, uint8_t num_msgs) |
|
{ |
|
K_OOPS(K_SYSCALL_MEMORY_READ(target, sizeof(*target))); |
|
K_OOPS(K_SYSCALL_OBJ(target->bus, K_OBJ_DRIVER_I3C)); |
|
|
|
/* copy_msgs_and_transfer() will allocate a copy on the stack using |
|
* VLA, so ensure this won't blow the stack. Most functions defined |
|
* in i2c.h use only a handful of messages, so up to 32 messages |
|
* should be more than sufficient. |
|
*/ |
|
K_OOPS(K_SYSCALL_VERIFY(num_msgs >= 1 && num_msgs < 32)); |
|
|
|
/* We need to be able to read the overall array of messages */ |
|
K_OOPS(K_SYSCALL_MEMORY_ARRAY_READ(msgs, num_msgs, |
|
sizeof(struct i3c_msg))); |
|
|
|
return copy_i3c_msgs_and_transfer((struct i3c_device_desc *)target, |
|
(struct i3c_msg *)msgs, |
|
(uint8_t)num_msgs); |
|
} |
|
#include <zephyr/syscalls/i3c_transfer_mrsh.c>
|
|
|