dma-debug.c 30 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247
  1. /*
  2. * Copyright (C) 2008 Advanced Micro Devices, Inc.
  3. *
  4. * Author: Joerg Roedel <joerg.roedel@amd.com>
  5. *
  6. * This program is free software; you can redistribute it and/or modify it
  7. * under the terms of the GNU General Public License version 2 as published
  8. * by the Free Software Foundation.
  9. *
  10. * This program is distributed in the hope that it will be useful,
  11. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13. * GNU General Public License for more details.
  14. *
  15. * You should have received a copy of the GNU General Public License
  16. * along with this program; if not, write to the Free Software
  17. * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  18. */
  19. #include <linux/scatterlist.h>
  20. #include <linux/dma-mapping.h>
  21. #include <linux/stacktrace.h>
  22. #include <linux/dma-debug.h>
  23. #include <linux/spinlock.h>
  24. #include <linux/debugfs.h>
  25. #include <linux/uaccess.h>
  26. #include <linux/device.h>
  27. #include <linux/types.h>
  28. #include <linux/sched.h>
  29. #include <linux/ctype.h>
  30. #include <linux/list.h>
  31. #include <linux/slab.h>
  32. #include <asm/sections.h>
  33. #define HASH_SIZE 1024ULL
  34. #define HASH_FN_SHIFT 13
  35. #define HASH_FN_MASK (HASH_SIZE - 1)
  36. enum {
  37. dma_debug_single,
  38. dma_debug_page,
  39. dma_debug_sg,
  40. dma_debug_coherent,
  41. };
  42. #define DMA_DEBUG_STACKTRACE_ENTRIES 5
  43. struct dma_debug_entry {
  44. struct list_head list;
  45. struct device *dev;
  46. int type;
  47. phys_addr_t paddr;
  48. u64 dev_addr;
  49. u64 size;
  50. int direction;
  51. int sg_call_ents;
  52. int sg_mapped_ents;
  53. #ifdef CONFIG_STACKTRACE
  54. struct stack_trace stacktrace;
  55. unsigned long st_entries[DMA_DEBUG_STACKTRACE_ENTRIES];
  56. #endif
  57. };
  58. struct hash_bucket {
  59. struct list_head list;
  60. spinlock_t lock;
  61. } ____cacheline_aligned_in_smp;
  62. /* Hash list to save the allocated dma addresses */
  63. static struct hash_bucket dma_entry_hash[HASH_SIZE];
  64. /* List of pre-allocated dma_debug_entry's */
  65. static LIST_HEAD(free_entries);
  66. /* Lock for the list above */
  67. static DEFINE_SPINLOCK(free_entries_lock);
  68. /* Global disable flag - will be set in case of an error */
  69. static bool global_disable __read_mostly;
  70. /* Global error count */
  71. static u32 error_count;
  72. /* Global error show enable*/
  73. static u32 show_all_errors __read_mostly;
  74. /* Number of errors to show */
  75. static u32 show_num_errors = 1;
  76. static u32 num_free_entries;
  77. static u32 min_free_entries;
  78. static u32 nr_total_entries;
  79. /* number of preallocated entries requested by kernel cmdline */
  80. static u32 req_entries;
  81. /* debugfs dentry's for the stuff above */
  82. static struct dentry *dma_debug_dent __read_mostly;
  83. static struct dentry *global_disable_dent __read_mostly;
  84. static struct dentry *error_count_dent __read_mostly;
  85. static struct dentry *show_all_errors_dent __read_mostly;
  86. static struct dentry *show_num_errors_dent __read_mostly;
  87. static struct dentry *num_free_entries_dent __read_mostly;
  88. static struct dentry *min_free_entries_dent __read_mostly;
  89. static struct dentry *filter_dent __read_mostly;
  90. /* per-driver filter related state */
  91. #define NAME_MAX_LEN 64
  92. static char current_driver_name[NAME_MAX_LEN] __read_mostly;
  93. static struct device_driver *current_driver __read_mostly;
  94. static DEFINE_RWLOCK(driver_name_lock);
  95. static const char *type2name[4] = { "single", "page",
  96. "scather-gather", "coherent" };
  97. static const char *dir2name[4] = { "DMA_BIDIRECTIONAL", "DMA_TO_DEVICE",
  98. "DMA_FROM_DEVICE", "DMA_NONE" };
  99. /* little merge helper - remove it after the merge window */
  100. #ifndef BUS_NOTIFY_UNBOUND_DRIVER
  101. #define BUS_NOTIFY_UNBOUND_DRIVER 0x0005
  102. #endif
  103. /*
  104. * The access to some variables in this macro is racy. We can't use atomic_t
  105. * here because all these variables are exported to debugfs. Some of them even
  106. * writeable. This is also the reason why a lock won't help much. But anyway,
  107. * the races are no big deal. Here is why:
  108. *
  109. * error_count: the addition is racy, but the worst thing that can happen is
  110. * that we don't count some errors
  111. * show_num_errors: the subtraction is racy. Also no big deal because in
  112. * worst case this will result in one warning more in the
  113. * system log than the user configured. This variable is
  114. * writeable via debugfs.
  115. */
  116. static inline void dump_entry_trace(struct dma_debug_entry *entry)
  117. {
  118. #ifdef CONFIG_STACKTRACE
  119. if (entry) {
  120. printk(KERN_WARNING "Mapped at:\n");
  121. print_stack_trace(&entry->stacktrace, 0);
  122. }
  123. #endif
  124. }
  125. static bool driver_filter(struct device *dev)
  126. {
  127. /* driver filter off */
  128. if (likely(!current_driver_name[0]))
  129. return true;
  130. /* driver filter on and initialized */
  131. if (current_driver && dev->driver == current_driver)
  132. return true;
  133. /* driver filter on but not yet initialized */
  134. if (!current_driver && current_driver_name[0]) {
  135. struct device_driver *drv = get_driver(dev->driver);
  136. unsigned long flags;
  137. bool ret = false;
  138. if (!drv)
  139. return false;
  140. /* lock to protect against change of current_driver_name */
  141. read_lock_irqsave(&driver_name_lock, flags);
  142. if (drv->name &&
  143. strncmp(current_driver_name, drv->name,
  144. NAME_MAX_LEN-1) == 0) {
  145. current_driver = drv;
  146. ret = true;
  147. }
  148. read_unlock_irqrestore(&driver_name_lock, flags);
  149. put_driver(drv);
  150. return ret;
  151. }
  152. return false;
  153. }
  154. #define err_printk(dev, entry, format, arg...) do { \
  155. error_count += 1; \
  156. if (driver_filter(dev) && \
  157. (show_all_errors || show_num_errors > 0)) { \
  158. WARN(1, "%s %s: " format, \
  159. dev_driver_string(dev), \
  160. dev_name(dev) , ## arg); \
  161. dump_entry_trace(entry); \
  162. } \
  163. if (!show_all_errors && show_num_errors > 0) \
  164. show_num_errors -= 1; \
  165. } while (0);
  166. /*
  167. * Hash related functions
  168. *
  169. * Every DMA-API request is saved into a struct dma_debug_entry. To
  170. * have quick access to these structs they are stored into a hash.
  171. */
  172. static int hash_fn(struct dma_debug_entry *entry)
  173. {
  174. /*
  175. * Hash function is based on the dma address.
  176. * We use bits 20-27 here as the index into the hash
  177. */
  178. return (entry->dev_addr >> HASH_FN_SHIFT) & HASH_FN_MASK;
  179. }
  180. /*
  181. * Request exclusive access to a hash bucket for a given dma_debug_entry.
  182. */
  183. static struct hash_bucket *get_hash_bucket(struct dma_debug_entry *entry,
  184. unsigned long *flags)
  185. {
  186. int idx = hash_fn(entry);
  187. unsigned long __flags;
  188. spin_lock_irqsave(&dma_entry_hash[idx].lock, __flags);
  189. *flags = __flags;
  190. return &dma_entry_hash[idx];
  191. }
  192. /*
  193. * Give up exclusive access to the hash bucket
  194. */
  195. static void put_hash_bucket(struct hash_bucket *bucket,
  196. unsigned long *flags)
  197. {
  198. unsigned long __flags = *flags;
  199. spin_unlock_irqrestore(&bucket->lock, __flags);
  200. }
  201. /*
  202. * Search a given entry in the hash bucket list
  203. */
  204. static struct dma_debug_entry *hash_bucket_find(struct hash_bucket *bucket,
  205. struct dma_debug_entry *ref)
  206. {
  207. struct dma_debug_entry *entry, *ret = NULL;
  208. int matches = 0, match_lvl, last_lvl = 0;
  209. list_for_each_entry(entry, &bucket->list, list) {
  210. if ((entry->dev_addr != ref->dev_addr) ||
  211. (entry->dev != ref->dev))
  212. continue;
  213. /*
  214. * Some drivers map the same physical address multiple
  215. * times. Without a hardware IOMMU this results in the
  216. * same device addresses being put into the dma-debug
  217. * hash multiple times too. This can result in false
  218. * positives being reported. Therfore we implement a
  219. * best-fit algorithm here which returns the entry from
  220. * the hash which fits best to the reference value
  221. * instead of the first-fit.
  222. */
  223. matches += 1;
  224. match_lvl = 0;
  225. entry->size == ref->size ? ++match_lvl : match_lvl;
  226. entry->type == ref->type ? ++match_lvl : match_lvl;
  227. entry->direction == ref->direction ? ++match_lvl : match_lvl;
  228. if (match_lvl == 3) {
  229. /* perfect-fit - return the result */
  230. return entry;
  231. } else if (match_lvl > last_lvl) {
  232. /*
  233. * We found an entry that fits better then the
  234. * previous one
  235. */
  236. last_lvl = match_lvl;
  237. ret = entry;
  238. }
  239. }
  240. /*
  241. * If we have multiple matches but no perfect-fit, just return
  242. * NULL.
  243. */
  244. ret = (matches == 1) ? ret : NULL;
  245. return ret;
  246. }
  247. /*
  248. * Add an entry to a hash bucket
  249. */
  250. static void hash_bucket_add(struct hash_bucket *bucket,
  251. struct dma_debug_entry *entry)
  252. {
  253. list_add_tail(&entry->list, &bucket->list);
  254. }
  255. /*
  256. * Remove entry from a hash bucket list
  257. */
  258. static void hash_bucket_del(struct dma_debug_entry *entry)
  259. {
  260. list_del(&entry->list);
  261. }
  262. /*
  263. * Dump mapping entries for debugging purposes
  264. */
  265. void debug_dma_dump_mappings(struct device *dev)
  266. {
  267. int idx;
  268. for (idx = 0; idx < HASH_SIZE; idx++) {
  269. struct hash_bucket *bucket = &dma_entry_hash[idx];
  270. struct dma_debug_entry *entry;
  271. unsigned long flags;
  272. spin_lock_irqsave(&bucket->lock, flags);
  273. list_for_each_entry(entry, &bucket->list, list) {
  274. if (!dev || dev == entry->dev) {
  275. dev_info(entry->dev,
  276. "%s idx %d P=%Lx D=%Lx L=%Lx %s\n",
  277. type2name[entry->type], idx,
  278. (unsigned long long)entry->paddr,
  279. entry->dev_addr, entry->size,
  280. dir2name[entry->direction]);
  281. }
  282. }
  283. spin_unlock_irqrestore(&bucket->lock, flags);
  284. }
  285. }
  286. EXPORT_SYMBOL(debug_dma_dump_mappings);
  287. /*
  288. * Wrapper function for adding an entry to the hash.
  289. * This function takes care of locking itself.
  290. */
  291. static void add_dma_entry(struct dma_debug_entry *entry)
  292. {
  293. struct hash_bucket *bucket;
  294. unsigned long flags;
  295. bucket = get_hash_bucket(entry, &flags);
  296. hash_bucket_add(bucket, entry);
  297. put_hash_bucket(bucket, &flags);
  298. }
  299. static struct dma_debug_entry *__dma_entry_alloc(void)
  300. {
  301. struct dma_debug_entry *entry;
  302. entry = list_entry(free_entries.next, struct dma_debug_entry, list);
  303. list_del(&entry->list);
  304. memset(entry, 0, sizeof(*entry));
  305. num_free_entries -= 1;
  306. if (num_free_entries < min_free_entries)
  307. min_free_entries = num_free_entries;
  308. return entry;
  309. }
  310. /* struct dma_entry allocator
  311. *
  312. * The next two functions implement the allocator for
  313. * struct dma_debug_entries.
  314. */
  315. static struct dma_debug_entry *dma_entry_alloc(void)
  316. {
  317. struct dma_debug_entry *entry = NULL;
  318. unsigned long flags;
  319. spin_lock_irqsave(&free_entries_lock, flags);
  320. if (list_empty(&free_entries)) {
  321. printk(KERN_ERR "DMA-API: debugging out of memory "
  322. "- disabling\n");
  323. global_disable = true;
  324. goto out;
  325. }
  326. entry = __dma_entry_alloc();
  327. #ifdef CONFIG_STACKTRACE
  328. entry->stacktrace.max_entries = DMA_DEBUG_STACKTRACE_ENTRIES;
  329. entry->stacktrace.entries = entry->st_entries;
  330. entry->stacktrace.skip = 2;
  331. save_stack_trace(&entry->stacktrace);
  332. #endif
  333. out:
  334. spin_unlock_irqrestore(&free_entries_lock, flags);
  335. return entry;
  336. }
  337. static void dma_entry_free(struct dma_debug_entry *entry)
  338. {
  339. unsigned long flags;
  340. /*
  341. * add to beginning of the list - this way the entries are
  342. * more likely cache hot when they are reallocated.
  343. */
  344. spin_lock_irqsave(&free_entries_lock, flags);
  345. list_add(&entry->list, &free_entries);
  346. num_free_entries += 1;
  347. spin_unlock_irqrestore(&free_entries_lock, flags);
  348. }
  349. int dma_debug_resize_entries(u32 num_entries)
  350. {
  351. int i, delta, ret = 0;
  352. unsigned long flags;
  353. struct dma_debug_entry *entry;
  354. LIST_HEAD(tmp);
  355. spin_lock_irqsave(&free_entries_lock, flags);
  356. if (nr_total_entries < num_entries) {
  357. delta = num_entries - nr_total_entries;
  358. spin_unlock_irqrestore(&free_entries_lock, flags);
  359. for (i = 0; i < delta; i++) {
  360. entry = kzalloc(sizeof(*entry), GFP_KERNEL);
  361. if (!entry)
  362. break;
  363. list_add_tail(&entry->list, &tmp);
  364. }
  365. spin_lock_irqsave(&free_entries_lock, flags);
  366. list_splice(&tmp, &free_entries);
  367. nr_total_entries += i;
  368. num_free_entries += i;
  369. } else {
  370. delta = nr_total_entries - num_entries;
  371. for (i = 0; i < delta && !list_empty(&free_entries); i++) {
  372. entry = __dma_entry_alloc();
  373. kfree(entry);
  374. }
  375. nr_total_entries -= i;
  376. }
  377. if (nr_total_entries != num_entries)
  378. ret = 1;
  379. spin_unlock_irqrestore(&free_entries_lock, flags);
  380. return ret;
  381. }
  382. EXPORT_SYMBOL(dma_debug_resize_entries);
  383. /*
  384. * DMA-API debugging init code
  385. *
  386. * The init code does two things:
  387. * 1. Initialize core data structures
  388. * 2. Preallocate a given number of dma_debug_entry structs
  389. */
  390. static int prealloc_memory(u32 num_entries)
  391. {
  392. struct dma_debug_entry *entry, *next_entry;
  393. int i;
  394. for (i = 0; i < num_entries; ++i) {
  395. entry = kzalloc(sizeof(*entry), GFP_KERNEL);
  396. if (!entry)
  397. goto out_err;
  398. list_add_tail(&entry->list, &free_entries);
  399. }
  400. num_free_entries = num_entries;
  401. min_free_entries = num_entries;
  402. printk(KERN_INFO "DMA-API: preallocated %d debug entries\n",
  403. num_entries);
  404. return 0;
  405. out_err:
  406. list_for_each_entry_safe(entry, next_entry, &free_entries, list) {
  407. list_del(&entry->list);
  408. kfree(entry);
  409. }
  410. return -ENOMEM;
  411. }
  412. static ssize_t filter_read(struct file *file, char __user *user_buf,
  413. size_t count, loff_t *ppos)
  414. {
  415. unsigned long flags;
  416. char buf[NAME_MAX_LEN + 1];
  417. int len;
  418. if (!current_driver_name[0])
  419. return 0;
  420. /*
  421. * We can't copy to userspace directly because current_driver_name can
  422. * only be read under the driver_name_lock with irqs disabled. So
  423. * create a temporary copy first.
  424. */
  425. read_lock_irqsave(&driver_name_lock, flags);
  426. len = scnprintf(buf, NAME_MAX_LEN + 1, "%s\n", current_driver_name);
  427. read_unlock_irqrestore(&driver_name_lock, flags);
  428. return simple_read_from_buffer(user_buf, count, ppos, buf, len);
  429. }
  430. static ssize_t filter_write(struct file *file, const char __user *userbuf,
  431. size_t count, loff_t *ppos)
  432. {
  433. unsigned long flags;
  434. char buf[NAME_MAX_LEN];
  435. size_t len = NAME_MAX_LEN - 1;
  436. int i;
  437. /*
  438. * We can't copy from userspace directly. Access to
  439. * current_driver_name is protected with a write_lock with irqs
  440. * disabled. Since copy_from_user can fault and may sleep we
  441. * need to copy to temporary buffer first
  442. */
  443. len = min(count, len);
  444. if (copy_from_user(buf, userbuf, len))
  445. return -EFAULT;
  446. buf[len] = 0;
  447. write_lock_irqsave(&driver_name_lock, flags);
  448. /*
  449. * Now handle the string we got from userspace very carefully.
  450. * The rules are:
  451. * - only use the first token we got
  452. * - token delimiter is everything looking like a space
  453. * character (' ', '\n', '\t' ...)
  454. *
  455. */
  456. if (!isalnum(buf[0])) {
  457. /*
  458. * If the first character userspace gave us is not
  459. * alphanumerical then assume the filter should be
  460. * switched off.
  461. */
  462. if (current_driver_name[0])
  463. printk(KERN_INFO "DMA-API: switching off dma-debug "
  464. "driver filter\n");
  465. current_driver_name[0] = 0;
  466. current_driver = NULL;
  467. goto out_unlock;
  468. }
  469. /*
  470. * Now parse out the first token and use it as the name for the
  471. * driver to filter for.
  472. */
  473. for (i = 0; i < NAME_MAX_LEN; ++i) {
  474. current_driver_name[i] = buf[i];
  475. if (isspace(buf[i]) || buf[i] == ' ' || buf[i] == 0)
  476. break;
  477. }
  478. current_driver_name[i] = 0;
  479. current_driver = NULL;
  480. printk(KERN_INFO "DMA-API: enable driver filter for driver [%s]\n",
  481. current_driver_name);
  482. out_unlock:
  483. write_unlock_irqrestore(&driver_name_lock, flags);
  484. return count;
  485. }
  486. const struct file_operations filter_fops = {
  487. .read = filter_read,
  488. .write = filter_write,
  489. };
  490. static int dma_debug_fs_init(void)
  491. {
  492. dma_debug_dent = debugfs_create_dir("dma-api", NULL);
  493. if (!dma_debug_dent) {
  494. printk(KERN_ERR "DMA-API: can not create debugfs directory\n");
  495. return -ENOMEM;
  496. }
  497. global_disable_dent = debugfs_create_bool("disabled", 0444,
  498. dma_debug_dent,
  499. (u32 *)&global_disable);
  500. if (!global_disable_dent)
  501. goto out_err;
  502. error_count_dent = debugfs_create_u32("error_count", 0444,
  503. dma_debug_dent, &error_count);
  504. if (!error_count_dent)
  505. goto out_err;
  506. show_all_errors_dent = debugfs_create_u32("all_errors", 0644,
  507. dma_debug_dent,
  508. &show_all_errors);
  509. if (!show_all_errors_dent)
  510. goto out_err;
  511. show_num_errors_dent = debugfs_create_u32("num_errors", 0644,
  512. dma_debug_dent,
  513. &show_num_errors);
  514. if (!show_num_errors_dent)
  515. goto out_err;
  516. num_free_entries_dent = debugfs_create_u32("num_free_entries", 0444,
  517. dma_debug_dent,
  518. &num_free_entries);
  519. if (!num_free_entries_dent)
  520. goto out_err;
  521. min_free_entries_dent = debugfs_create_u32("min_free_entries", 0444,
  522. dma_debug_dent,
  523. &min_free_entries);
  524. if (!min_free_entries_dent)
  525. goto out_err;
  526. filter_dent = debugfs_create_file("driver_filter", 0644,
  527. dma_debug_dent, NULL, &filter_fops);
  528. if (!filter_dent)
  529. goto out_err;
  530. return 0;
  531. out_err:
  532. debugfs_remove_recursive(dma_debug_dent);
  533. return -ENOMEM;
  534. }
  535. static int device_dma_allocations(struct device *dev)
  536. {
  537. struct dma_debug_entry *entry;
  538. unsigned long flags;
  539. int count = 0, i;
  540. for (i = 0; i < HASH_SIZE; ++i) {
  541. spin_lock_irqsave(&dma_entry_hash[i].lock, flags);
  542. list_for_each_entry(entry, &dma_entry_hash[i].list, list) {
  543. if (entry->dev == dev)
  544. count += 1;
  545. }
  546. spin_unlock_irqrestore(&dma_entry_hash[i].lock, flags);
  547. }
  548. return count;
  549. }
  550. static int dma_debug_device_change(struct notifier_block *nb,
  551. unsigned long action, void *data)
  552. {
  553. struct device *dev = data;
  554. int count;
  555. switch (action) {
  556. case BUS_NOTIFY_UNBOUND_DRIVER:
  557. count = device_dma_allocations(dev);
  558. if (count == 0)
  559. break;
  560. err_printk(dev, NULL, "DMA-API: device driver has pending "
  561. "DMA allocations while released from device "
  562. "[count=%d]\n", count);
  563. break;
  564. default:
  565. break;
  566. }
  567. return 0;
  568. }
  569. void dma_debug_add_bus(struct bus_type *bus)
  570. {
  571. struct notifier_block *nb;
  572. nb = kzalloc(sizeof(struct notifier_block), GFP_KERNEL);
  573. if (nb == NULL) {
  574. printk(KERN_ERR "dma_debug_add_bus: out of memory\n");
  575. return;
  576. }
  577. nb->notifier_call = dma_debug_device_change;
  578. bus_register_notifier(bus, nb);
  579. }
  580. /*
  581. * Let the architectures decide how many entries should be preallocated.
  582. */
  583. void dma_debug_init(u32 num_entries)
  584. {
  585. int i;
  586. if (global_disable)
  587. return;
  588. for (i = 0; i < HASH_SIZE; ++i) {
  589. INIT_LIST_HEAD(&dma_entry_hash[i].list);
  590. dma_entry_hash[i].lock = SPIN_LOCK_UNLOCKED;
  591. }
  592. if (dma_debug_fs_init() != 0) {
  593. printk(KERN_ERR "DMA-API: error creating debugfs entries "
  594. "- disabling\n");
  595. global_disable = true;
  596. return;
  597. }
  598. if (req_entries)
  599. num_entries = req_entries;
  600. if (prealloc_memory(num_entries) != 0) {
  601. printk(KERN_ERR "DMA-API: debugging out of memory error "
  602. "- disabled\n");
  603. global_disable = true;
  604. return;
  605. }
  606. nr_total_entries = num_free_entries;
  607. printk(KERN_INFO "DMA-API: debugging enabled by kernel config\n");
  608. }
  609. static __init int dma_debug_cmdline(char *str)
  610. {
  611. if (!str)
  612. return -EINVAL;
  613. if (strncmp(str, "off", 3) == 0) {
  614. printk(KERN_INFO "DMA-API: debugging disabled on kernel "
  615. "command line\n");
  616. global_disable = true;
  617. }
  618. return 0;
  619. }
  620. static __init int dma_debug_entries_cmdline(char *str)
  621. {
  622. int res;
  623. if (!str)
  624. return -EINVAL;
  625. res = get_option(&str, &req_entries);
  626. if (!res)
  627. req_entries = 0;
  628. return 0;
  629. }
  630. __setup("dma_debug=", dma_debug_cmdline);
  631. __setup("dma_debug_entries=", dma_debug_entries_cmdline);
  632. static void check_unmap(struct dma_debug_entry *ref)
  633. {
  634. struct dma_debug_entry *entry;
  635. struct hash_bucket *bucket;
  636. unsigned long flags;
  637. if (dma_mapping_error(ref->dev, ref->dev_addr)) {
  638. err_printk(ref->dev, NULL, "DMA-API: device driver tries "
  639. "to free an invalid DMA memory address\n");
  640. return;
  641. }
  642. bucket = get_hash_bucket(ref, &flags);
  643. entry = hash_bucket_find(bucket, ref);
  644. if (!entry) {
  645. err_printk(ref->dev, NULL, "DMA-API: device driver tries "
  646. "to free DMA memory it has not allocated "
  647. "[device address=0x%016llx] [size=%llu bytes]\n",
  648. ref->dev_addr, ref->size);
  649. goto out;
  650. }
  651. if (ref->size != entry->size) {
  652. err_printk(ref->dev, entry, "DMA-API: device driver frees "
  653. "DMA memory with different size "
  654. "[device address=0x%016llx] [map size=%llu bytes] "
  655. "[unmap size=%llu bytes]\n",
  656. ref->dev_addr, entry->size, ref->size);
  657. }
  658. if (ref->type != entry->type) {
  659. err_printk(ref->dev, entry, "DMA-API: device driver frees "
  660. "DMA memory with wrong function "
  661. "[device address=0x%016llx] [size=%llu bytes] "
  662. "[mapped as %s] [unmapped as %s]\n",
  663. ref->dev_addr, ref->size,
  664. type2name[entry->type], type2name[ref->type]);
  665. } else if ((entry->type == dma_debug_coherent) &&
  666. (ref->paddr != entry->paddr)) {
  667. err_printk(ref->dev, entry, "DMA-API: device driver frees "
  668. "DMA memory with different CPU address "
  669. "[device address=0x%016llx] [size=%llu bytes] "
  670. "[cpu alloc address=%p] [cpu free address=%p]",
  671. ref->dev_addr, ref->size,
  672. (void *)entry->paddr, (void *)ref->paddr);
  673. }
  674. if (ref->sg_call_ents && ref->type == dma_debug_sg &&
  675. ref->sg_call_ents != entry->sg_call_ents) {
  676. err_printk(ref->dev, entry, "DMA-API: device driver frees "
  677. "DMA sg list with different entry count "
  678. "[map count=%d] [unmap count=%d]\n",
  679. entry->sg_call_ents, ref->sg_call_ents);
  680. }
  681. /*
  682. * This may be no bug in reality - but most implementations of the
  683. * DMA API don't handle this properly, so check for it here
  684. */
  685. if (ref->direction != entry->direction) {
  686. err_printk(ref->dev, entry, "DMA-API: device driver frees "
  687. "DMA memory with different direction "
  688. "[device address=0x%016llx] [size=%llu bytes] "
  689. "[mapped with %s] [unmapped with %s]\n",
  690. ref->dev_addr, ref->size,
  691. dir2name[entry->direction],
  692. dir2name[ref->direction]);
  693. }
  694. hash_bucket_del(entry);
  695. dma_entry_free(entry);
  696. out:
  697. put_hash_bucket(bucket, &flags);
  698. }
  699. static void check_for_stack(struct device *dev, void *addr)
  700. {
  701. if (object_is_on_stack(addr))
  702. err_printk(dev, NULL, "DMA-API: device driver maps memory from"
  703. "stack [addr=%p]\n", addr);
  704. }
  705. static inline bool overlap(void *addr, u64 size, void *start, void *end)
  706. {
  707. void *addr2 = (char *)addr + size;
  708. return ((addr >= start && addr < end) ||
  709. (addr2 >= start && addr2 < end) ||
  710. ((addr < start) && (addr2 >= end)));
  711. }
  712. static void check_for_illegal_area(struct device *dev, void *addr, u64 size)
  713. {
  714. if (overlap(addr, size, _text, _etext) ||
  715. overlap(addr, size, __start_rodata, __end_rodata))
  716. err_printk(dev, NULL, "DMA-API: device driver maps "
  717. "memory from kernel text or rodata "
  718. "[addr=%p] [size=%llu]\n", addr, size);
  719. }
  720. static void check_sync(struct device *dev, dma_addr_t addr,
  721. u64 size, u64 offset, int direction, bool to_cpu)
  722. {
  723. struct dma_debug_entry ref = {
  724. .dev = dev,
  725. .dev_addr = addr,
  726. .size = size,
  727. .direction = direction,
  728. };
  729. struct dma_debug_entry *entry;
  730. struct hash_bucket *bucket;
  731. unsigned long flags;
  732. bucket = get_hash_bucket(&ref, &flags);
  733. entry = hash_bucket_find(bucket, &ref);
  734. if (!entry) {
  735. err_printk(dev, NULL, "DMA-API: device driver tries "
  736. "to sync DMA memory it has not allocated "
  737. "[device address=0x%016llx] [size=%llu bytes]\n",
  738. (unsigned long long)addr, size);
  739. goto out;
  740. }
  741. if ((offset + size) > entry->size) {
  742. err_printk(dev, entry, "DMA-API: device driver syncs"
  743. " DMA memory outside allocated range "
  744. "[device address=0x%016llx] "
  745. "[allocation size=%llu bytes] [sync offset=%llu] "
  746. "[sync size=%llu]\n", entry->dev_addr, entry->size,
  747. offset, size);
  748. }
  749. if (direction != entry->direction) {
  750. err_printk(dev, entry, "DMA-API: device driver syncs "
  751. "DMA memory with different direction "
  752. "[device address=0x%016llx] [size=%llu bytes] "
  753. "[mapped with %s] [synced with %s]\n",
  754. (unsigned long long)addr, entry->size,
  755. dir2name[entry->direction],
  756. dir2name[direction]);
  757. }
  758. if (entry->direction == DMA_BIDIRECTIONAL)
  759. goto out;
  760. if (to_cpu && !(entry->direction == DMA_FROM_DEVICE) &&
  761. !(direction == DMA_TO_DEVICE))
  762. err_printk(dev, entry, "DMA-API: device driver syncs "
  763. "device read-only DMA memory for cpu "
  764. "[device address=0x%016llx] [size=%llu bytes] "
  765. "[mapped with %s] [synced with %s]\n",
  766. (unsigned long long)addr, entry->size,
  767. dir2name[entry->direction],
  768. dir2name[direction]);
  769. if (!to_cpu && !(entry->direction == DMA_TO_DEVICE) &&
  770. !(direction == DMA_FROM_DEVICE))
  771. err_printk(dev, entry, "DMA-API: device driver syncs "
  772. "device write-only DMA memory to device "
  773. "[device address=0x%016llx] [size=%llu bytes] "
  774. "[mapped with %s] [synced with %s]\n",
  775. (unsigned long long)addr, entry->size,
  776. dir2name[entry->direction],
  777. dir2name[direction]);
  778. out:
  779. put_hash_bucket(bucket, &flags);
  780. }
  781. void debug_dma_map_page(struct device *dev, struct page *page, size_t offset,
  782. size_t size, int direction, dma_addr_t dma_addr,
  783. bool map_single)
  784. {
  785. struct dma_debug_entry *entry;
  786. if (unlikely(global_disable))
  787. return;
  788. if (unlikely(dma_mapping_error(dev, dma_addr)))
  789. return;
  790. entry = dma_entry_alloc();
  791. if (!entry)
  792. return;
  793. entry->dev = dev;
  794. entry->type = dma_debug_page;
  795. entry->paddr = page_to_phys(page) + offset;
  796. entry->dev_addr = dma_addr;
  797. entry->size = size;
  798. entry->direction = direction;
  799. if (map_single)
  800. entry->type = dma_debug_single;
  801. if (!PageHighMem(page)) {
  802. void *addr = ((char *)page_address(page)) + offset;
  803. check_for_stack(dev, addr);
  804. check_for_illegal_area(dev, addr, size);
  805. }
  806. add_dma_entry(entry);
  807. }
  808. EXPORT_SYMBOL(debug_dma_map_page);
  809. void debug_dma_unmap_page(struct device *dev, dma_addr_t addr,
  810. size_t size, int direction, bool map_single)
  811. {
  812. struct dma_debug_entry ref = {
  813. .type = dma_debug_page,
  814. .dev = dev,
  815. .dev_addr = addr,
  816. .size = size,
  817. .direction = direction,
  818. };
  819. if (unlikely(global_disable))
  820. return;
  821. if (map_single)
  822. ref.type = dma_debug_single;
  823. check_unmap(&ref);
  824. }
  825. EXPORT_SYMBOL(debug_dma_unmap_page);
  826. void debug_dma_map_sg(struct device *dev, struct scatterlist *sg,
  827. int nents, int mapped_ents, int direction)
  828. {
  829. struct dma_debug_entry *entry;
  830. struct scatterlist *s;
  831. int i;
  832. if (unlikely(global_disable))
  833. return;
  834. for_each_sg(sg, s, mapped_ents, i) {
  835. entry = dma_entry_alloc();
  836. if (!entry)
  837. return;
  838. entry->type = dma_debug_sg;
  839. entry->dev = dev;
  840. entry->paddr = sg_phys(s);
  841. entry->size = sg_dma_len(s);
  842. entry->dev_addr = sg_dma_address(s);
  843. entry->direction = direction;
  844. entry->sg_call_ents = nents;
  845. entry->sg_mapped_ents = mapped_ents;
  846. if (!PageHighMem(sg_page(s))) {
  847. check_for_stack(dev, sg_virt(s));
  848. check_for_illegal_area(dev, sg_virt(s), sg_dma_len(s));
  849. }
  850. add_dma_entry(entry);
  851. }
  852. }
  853. EXPORT_SYMBOL(debug_dma_map_sg);
  854. static int get_nr_mapped_entries(struct device *dev, struct scatterlist *s)
  855. {
  856. struct dma_debug_entry *entry;
  857. struct hash_bucket *bucket;
  858. unsigned long flags;
  859. int mapped_ents = 0;
  860. struct dma_debug_entry ref;
  861. ref.dev = dev;
  862. ref.dev_addr = sg_dma_address(s);
  863. ref.size = sg_dma_len(s),
  864. bucket = get_hash_bucket(&ref, &flags);
  865. entry = hash_bucket_find(bucket, &ref);
  866. if (entry)
  867. mapped_ents = entry->sg_mapped_ents;
  868. put_hash_bucket(bucket, &flags);
  869. return mapped_ents;
  870. }
  871. void debug_dma_unmap_sg(struct device *dev, struct scatterlist *sglist,
  872. int nelems, int dir)
  873. {
  874. struct scatterlist *s;
  875. int mapped_ents = 0, i;
  876. if (unlikely(global_disable))
  877. return;
  878. for_each_sg(sglist, s, nelems, i) {
  879. struct dma_debug_entry ref = {
  880. .type = dma_debug_sg,
  881. .dev = dev,
  882. .paddr = sg_phys(s),
  883. .dev_addr = sg_dma_address(s),
  884. .size = sg_dma_len(s),
  885. .direction = dir,
  886. .sg_call_ents = 0,
  887. };
  888. if (mapped_ents && i >= mapped_ents)
  889. break;
  890. if (!i) {
  891. ref.sg_call_ents = nelems;
  892. mapped_ents = get_nr_mapped_entries(dev, s);
  893. }
  894. check_unmap(&ref);
  895. }
  896. }
  897. EXPORT_SYMBOL(debug_dma_unmap_sg);
  898. void debug_dma_alloc_coherent(struct device *dev, size_t size,
  899. dma_addr_t dma_addr, void *virt)
  900. {
  901. struct dma_debug_entry *entry;
  902. if (unlikely(global_disable))
  903. return;
  904. if (unlikely(virt == NULL))
  905. return;
  906. entry = dma_entry_alloc();
  907. if (!entry)
  908. return;
  909. entry->type = dma_debug_coherent;
  910. entry->dev = dev;
  911. entry->paddr = virt_to_phys(virt);
  912. entry->size = size;
  913. entry->dev_addr = dma_addr;
  914. entry->direction = DMA_BIDIRECTIONAL;
  915. add_dma_entry(entry);
  916. }
  917. EXPORT_SYMBOL(debug_dma_alloc_coherent);
  918. void debug_dma_free_coherent(struct device *dev, size_t size,
  919. void *virt, dma_addr_t addr)
  920. {
  921. struct dma_debug_entry ref = {
  922. .type = dma_debug_coherent,
  923. .dev = dev,
  924. .paddr = virt_to_phys(virt),
  925. .dev_addr = addr,
  926. .size = size,
  927. .direction = DMA_BIDIRECTIONAL,
  928. };
  929. if (unlikely(global_disable))
  930. return;
  931. check_unmap(&ref);
  932. }
  933. EXPORT_SYMBOL(debug_dma_free_coherent);
  934. void debug_dma_sync_single_for_cpu(struct device *dev, dma_addr_t dma_handle,
  935. size_t size, int direction)
  936. {
  937. if (unlikely(global_disable))
  938. return;
  939. check_sync(dev, dma_handle, size, 0, direction, true);
  940. }
  941. EXPORT_SYMBOL(debug_dma_sync_single_for_cpu);
  942. void debug_dma_sync_single_for_device(struct device *dev,
  943. dma_addr_t dma_handle, size_t size,
  944. int direction)
  945. {
  946. if (unlikely(global_disable))
  947. return;
  948. check_sync(dev, dma_handle, size, 0, direction, false);
  949. }
  950. EXPORT_SYMBOL(debug_dma_sync_single_for_device);
  951. void debug_dma_sync_single_range_for_cpu(struct device *dev,
  952. dma_addr_t dma_handle,
  953. unsigned long offset, size_t size,
  954. int direction)
  955. {
  956. if (unlikely(global_disable))
  957. return;
  958. check_sync(dev, dma_handle, size, offset, direction, true);
  959. }
  960. EXPORT_SYMBOL(debug_dma_sync_single_range_for_cpu);
  961. void debug_dma_sync_single_range_for_device(struct device *dev,
  962. dma_addr_t dma_handle,
  963. unsigned long offset,
  964. size_t size, int direction)
  965. {
  966. if (unlikely(global_disable))
  967. return;
  968. check_sync(dev, dma_handle, size, offset, direction, false);
  969. }
  970. EXPORT_SYMBOL(debug_dma_sync_single_range_for_device);
  971. void debug_dma_sync_sg_for_cpu(struct device *dev, struct scatterlist *sg,
  972. int nelems, int direction)
  973. {
  974. struct scatterlist *s;
  975. int mapped_ents = 0, i;
  976. if (unlikely(global_disable))
  977. return;
  978. for_each_sg(sg, s, nelems, i) {
  979. if (!i)
  980. mapped_ents = get_nr_mapped_entries(dev, s);
  981. if (i >= mapped_ents)
  982. break;
  983. check_sync(dev, sg_dma_address(s), sg_dma_len(s), 0,
  984. direction, true);
  985. }
  986. }
  987. EXPORT_SYMBOL(debug_dma_sync_sg_for_cpu);
  988. void debug_dma_sync_sg_for_device(struct device *dev, struct scatterlist *sg,
  989. int nelems, int direction)
  990. {
  991. struct scatterlist *s;
  992. int mapped_ents = 0, i;
  993. if (unlikely(global_disable))
  994. return;
  995. for_each_sg(sg, s, nelems, i) {
  996. if (!i)
  997. mapped_ents = get_nr_mapped_entries(dev, s);
  998. if (i >= mapped_ents)
  999. break;
  1000. check_sync(dev, sg_dma_address(s), sg_dma_len(s), 0,
  1001. direction, false);
  1002. }
  1003. }
  1004. EXPORT_SYMBOL(debug_dma_sync_sg_for_device);
  1005. static int __init dma_debug_driver_setup(char *str)
  1006. {
  1007. int i;
  1008. for (i = 0; i < NAME_MAX_LEN - 1; ++i, ++str) {
  1009. current_driver_name[i] = *str;
  1010. if (*str == 0)
  1011. break;
  1012. }
  1013. if (current_driver_name[0])
  1014. printk(KERN_INFO "DMA-API: enable driver filter for "
  1015. "driver [%s]\n", current_driver_name);
  1016. return 1;
  1017. }
  1018. __setup("dma_debug_driver=", dma_debug_driver_setup);