drivers/infiniband/core/uverbs_std_types.c - arm/linux - Git at Google

 /*
  * Copyright (c) 2017, Mellanox Technologies inc.  All rights reserved.
  *
  * This software is available to you under a choice of one of two
  * licenses.  You may choose to be licensed under the terms of the GNU
  * General Public License (GPL) Version 2, available from the file
  * COPYING in the main directory of this source tree, or the
  * OpenIB.org BSD license below:
  *
  *     Redistribution and use in source and binary forms, with or
  *     without modification, are permitted provided that the following
  *     conditions are met:
  *
  *      - Redistributions of source code must retain the above
  *        copyright notice, this list of conditions and the following
  *        disclaimer.
  *
  *      - Redistributions in binary form must reproduce the above
  *        copyright notice, this list of conditions and the following
  *        disclaimer in the documentation and/or other materials
  *        provided with the distribution.
  *
  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  * SOFTWARE.
  */

 #include <rdma/uverbs_std_types.h>
 #include <rdma/ib_user_verbs.h>
 #include <rdma/ib_verbs.h>
 #include <linux/bug.h>
 #include <linux/file.h>
 #include "rdma_core.h"
 #include "uverbs.h"

 static int uverbs_free_ah(struct ib_uobject *uobject,
 			  enum rdma_remove_reason why)
 {
 	return rdma_destroy_ah((struct ib_ah *)uobject->object);
 }

 static int uverbs_free_flow(struct ib_uobject *uobject,
 			    enum rdma_remove_reason why)
 {
 	return ib_destroy_flow((struct ib_flow *)uobject->object);
 }

 static int uverbs_free_mw(struct ib_uobject *uobject,
 			  enum rdma_remove_reason why)
 {
 	return uverbs_dealloc_mw((struct ib_mw *)uobject->object);
 }

 static int uverbs_free_qp(struct ib_uobject *uobject,
 			  enum rdma_remove_reason why)
 {
 	struct ib_qp *qp = uobject->object;
 	struct ib_uqp_object *uqp =
 		container_of(uobject, struct ib_uqp_object, uevent.uobject);
 	int ret;

 	if (why == RDMA_REMOVE_DESTROY) {
 		if (!list_empty(&uqp->mcast_list))
 			return -EBUSY;
 	} else if (qp == qp->real_qp) {
 		ib_uverbs_detach_umcast(qp, uqp);
 	}

 	ret = ib_destroy_qp(qp);
 	if (ret && why == RDMA_REMOVE_DESTROY)
 		return ret;

 	if (uqp->uxrcd)
 		atomic_dec(&uqp->uxrcd->refcnt);

 	ib_uverbs_release_uevent(uobject->context->ufile, &uqp->uevent);
 	return ret;
 }

 static int uverbs_free_rwq_ind_tbl(struct ib_uobject *uobject,
 				   enum rdma_remove_reason why)
 {
 	struct ib_rwq_ind_table *rwq_ind_tbl = uobject->object;
 	struct ib_wq **ind_tbl = rwq_ind_tbl->ind_tbl;
 	int ret;

 	ret = ib_destroy_rwq_ind_table(rwq_ind_tbl);
 	if (!ret || why != RDMA_REMOVE_DESTROY)
 		kfree(ind_tbl);
 	return ret;
 }

 static int uverbs_free_wq(struct ib_uobject *uobject,
 			  enum rdma_remove_reason why)
 {
 	struct ib_wq *wq = uobject->object;
 	struct ib_uwq_object *uwq =
 		container_of(uobject, struct ib_uwq_object, uevent.uobject);
 	int ret;

 	ret = ib_destroy_wq(wq);
 	if (!ret || why != RDMA_REMOVE_DESTROY)
 		ib_uverbs_release_uevent(uobject->context->ufile, &uwq->uevent);
 	return ret;
 }

 static int uverbs_free_srq(struct ib_uobject *uobject,
 			   enum rdma_remove_reason why)
 {
 	struct ib_srq *srq = uobject->object;
 	struct ib_uevent_object *uevent =
 		container_of(uobject, struct ib_uevent_object, uobject);
 	enum ib_srq_type  srq_type = srq->srq_type;
 	int ret;

 	ret = ib_destroy_srq(srq);

 	if (ret && why == RDMA_REMOVE_DESTROY)
 		return ret;

 	if (srq_type == IB_SRQT_XRC) {
 		struct ib_usrq_object *us =
 			container_of(uevent, struct ib_usrq_object, uevent);

 		atomic_dec(&us->uxrcd->refcnt);
 	}

 	ib_uverbs_release_uevent(uobject->context->ufile, uevent);
 	return ret;
 }

 static int uverbs_free_cq(struct ib_uobject *uobject,
 			  enum rdma_remove_reason why)
 {
 	struct ib_cq *cq = uobject->object;
 	struct ib_uverbs_event_queue *ev_queue = cq->cq_context;
 	struct ib_ucq_object *ucq =
 		container_of(uobject, struct ib_ucq_object, uobject);
 	int ret;

 	ret = ib_destroy_cq(cq);
 	if (!ret || why != RDMA_REMOVE_DESTROY)
 		ib_uverbs_release_ucq(uobject->context->ufile, ev_queue ?
 				      container_of(ev_queue,
 						   struct ib_uverbs_completion_event_file,
 						   ev_queue) : NULL,
 				      ucq);
 	return ret;
 }

 static int uverbs_free_mr(struct ib_uobject *uobject,
 			  enum rdma_remove_reason why)
 {
 	return ib_dereg_mr((struct ib_mr *)uobject->object);
 }

 static int uverbs_free_xrcd(struct ib_uobject *uobject,
 			    enum rdma_remove_reason why)
 {
 	struct ib_xrcd *xrcd = uobject->object;
 	struct ib_uxrcd_object *uxrcd =
 		container_of(uobject, struct ib_uxrcd_object, uobject);
 	int ret;

 	mutex_lock(&uobject->context->ufile->device->xrcd_tree_mutex);
 	if (why == RDMA_REMOVE_DESTROY && atomic_read(&uxrcd->refcnt))
 		ret = -EBUSY;
 	else
 		ret = ib_uverbs_dealloc_xrcd(uobject->context->ufile->device,
 					     xrcd, why);
 	mutex_unlock(&uobject->context->ufile->device->xrcd_tree_mutex);

 	return ret;
 }

 static int uverbs_free_pd(struct ib_uobject *uobject,
 			  enum rdma_remove_reason why)
 {
 	struct ib_pd *pd = uobject->object;

 	if (why == RDMA_REMOVE_DESTROY && atomic_read(&pd->usecnt))
 		return -EBUSY;

 	ib_dealloc_pd((struct ib_pd *)uobject->object);
 	return 0;
 }

 static int uverbs_hot_unplug_completion_event_file(struct ib_uobject_file *uobj_file,
 						   enum rdma_remove_reason why)
 {
 	struct ib_uverbs_completion_event_file *comp_event_file =
 		container_of(uobj_file, struct ib_uverbs_completion_event_file,
 			     uobj_file);
 	struct ib_uverbs_event_queue *event_queue = &comp_event_file->ev_queue;

 	spin_lock_irq(&event_queue->lock);
 	event_queue->is_closed = 1;
 	spin_unlock_irq(&event_queue->lock);

 	if (why == RDMA_REMOVE_DRIVER_REMOVE) {
 		wake_up_interruptible(&event_queue->poll_wait);
 		kill_fasync(&event_queue->async_queue, SIGIO, POLL_IN);
 	}
 	return 0;
 };

 /*
  * This spec is used in order to pass information to the hardware driver in a
  * legacy way. Every verb that could get driver specific data should get this
  * spec.
  */
 static const struct uverbs_attr_def uverbs_uhw_compat_in =
 	UVERBS_ATTR_PTR_IN_SZ(UVERBS_UHW_IN, 0, UA_FLAGS(UVERBS_ATTR_SPEC_F_MIN_SZ));
 static const struct uverbs_attr_def uverbs_uhw_compat_out =
 	UVERBS_ATTR_PTR_OUT_SZ(UVERBS_UHW_OUT, 0, UA_FLAGS(UVERBS_ATTR_SPEC_F_MIN_SZ));

 static void create_udata(struct uverbs_attr_bundle *ctx,
 			 struct ib_udata *udata)
 {
 	/*
 	 * This is for ease of conversion. The purpose is to convert all drivers
 	 * to use uverbs_attr_bundle instead of ib_udata.
 	 * Assume attr == 0 is input and attr == 1 is output.
 	 */
 	void __user *inbuf;
 	size_t inbuf_len = 0;
 	void __user *outbuf;
 	size_t outbuf_len = 0;
 	const struct uverbs_attr *uhw_in =
 		uverbs_attr_get(ctx, UVERBS_UHW_IN);
 	const struct uverbs_attr *uhw_out =
 		uverbs_attr_get(ctx, UVERBS_UHW_OUT);

 	if (!IS_ERR(uhw_in)) {
 		inbuf = uhw_in->ptr_attr.ptr;
 		inbuf_len = uhw_in->ptr_attr.len;
 	}

 	if (!IS_ERR(uhw_out)) {
 		outbuf = uhw_out->ptr_attr.ptr;
 		outbuf_len = uhw_out->ptr_attr.len;
 	}

 	INIT_UDATA_BUF_OR_NULL(udata, inbuf, outbuf, inbuf_len, outbuf_len);
 }

 static int uverbs_create_cq_handler(struct ib_device *ib_dev,
 				    struct ib_uverbs_file *file,
 				    struct uverbs_attr_bundle *attrs)
 {
 	struct ib_ucontext *ucontext = file->ucontext;
 	struct ib_ucq_object           *obj;
 	struct ib_udata uhw;
 	int ret;
 	u64 user_handle;
 	struct ib_cq_init_attr attr = {};
 	struct ib_cq                   *cq;
 	struct ib_uverbs_completion_event_file    *ev_file = NULL;
 	const struct uverbs_attr *ev_file_attr;
 	struct ib_uobject *ev_file_uobj;

 	if (!(ib_dev->uverbs_cmd_mask & 1ULL << IB_USER_VERBS_CMD_CREATE_CQ))
 		return -EOPNOTSUPP;

 	ret = uverbs_copy_from(&attr.comp_vector, attrs, CREATE_CQ_COMP_VECTOR);
 	if (!ret)
 		ret = uverbs_copy_from(&attr.cqe, attrs, CREATE_CQ_CQE);
 	if (!ret)
 		ret = uverbs_copy_from(&user_handle, attrs, CREATE_CQ_USER_HANDLE);
 	if (ret)
 		return ret;

 	/* Optional param, if it doesn't exist, we get -ENOENT and skip it */
 	if (uverbs_copy_from(&attr.flags, attrs, CREATE_CQ_FLAGS) == -EFAULT)
 		return -EFAULT;

 	ev_file_attr = uverbs_attr_get(attrs, CREATE_CQ_COMP_CHANNEL);
 	if (!IS_ERR(ev_file_attr)) {
 		ev_file_uobj = ev_file_attr->obj_attr.uobject;

 		ev_file = container_of(ev_file_uobj,
 				       struct ib_uverbs_completion_event_file,
 				       uobj_file.uobj);
 		uverbs_uobject_get(ev_file_uobj);
 	}

 	if (attr.comp_vector >= ucontext->ufile->device->num_comp_vectors) {
 		ret = -EINVAL;
 		goto err_event_file;
 	}

 	obj = container_of(uverbs_attr_get(attrs, CREATE_CQ_HANDLE)->obj_attr.uobject,
 			   typeof(*obj), uobject);
 	obj->uverbs_file	   = ucontext->ufile;
 	obj->comp_events_reported  = 0;
 	obj->async_events_reported = 0;
 	INIT_LIST_HEAD(&obj->comp_list);
 	INIT_LIST_HEAD(&obj->async_list);

 	/* Temporary, only until drivers get the new uverbs_attr_bundle */
 	create_udata(attrs, &uhw);

 	cq = ib_dev->create_cq(ib_dev, &attr, ucontext, &uhw);
 	if (IS_ERR(cq)) {
 		ret = PTR_ERR(cq);
 		goto err_event_file;
 	}

 	cq->device        = ib_dev;
 	cq->uobject       = &obj->uobject;
 	cq->comp_handler  = ib_uverbs_comp_handler;
 	cq->event_handler = ib_uverbs_cq_event_handler;
 	cq->cq_context    = &ev_file->ev_queue;
 	obj->uobject.object = cq;
 	obj->uobject.user_handle = user_handle;
 	atomic_set(&cq->usecnt, 0);

 	ret = uverbs_copy_to(attrs, CREATE_CQ_RESP_CQE, &cq->cqe);
 	if (ret)
 		goto err_cq;

 	return 0;
 err_cq:
 	ib_destroy_cq(cq);

 err_event_file:
 	if (ev_file)
 		uverbs_uobject_put(ev_file_uobj);
 	return ret;
 };

 static DECLARE_UVERBS_METHOD(
 	uverbs_method_cq_create, UVERBS_CQ_CREATE, uverbs_create_cq_handler,
 	&UVERBS_ATTR_IDR(CREATE_CQ_HANDLE, UVERBS_OBJECT_CQ, UVERBS_ACCESS_NEW,
 			 UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
 	&UVERBS_ATTR_PTR_IN(CREATE_CQ_CQE, u32,
 			    UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
 	&UVERBS_ATTR_PTR_IN(CREATE_CQ_USER_HANDLE, u64,
 			    UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
 	&UVERBS_ATTR_FD(CREATE_CQ_COMP_CHANNEL, UVERBS_OBJECT_COMP_CHANNEL,
 			UVERBS_ACCESS_READ),
 	&UVERBS_ATTR_PTR_IN(CREATE_CQ_COMP_VECTOR, u32,
 			    UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
 	&UVERBS_ATTR_PTR_IN(CREATE_CQ_FLAGS, u32),
 	&UVERBS_ATTR_PTR_OUT(CREATE_CQ_RESP_CQE, u32,
 			     UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
 	&uverbs_uhw_compat_in, &uverbs_uhw_compat_out);

 static int uverbs_destroy_cq_handler(struct ib_device *ib_dev,
 				     struct ib_uverbs_file *file,
 				     struct uverbs_attr_bundle *attrs)
 {
 	struct ib_uverbs_destroy_cq_resp resp;
 	struct ib_uobject *uobj =
 		uverbs_attr_get(attrs, DESTROY_CQ_HANDLE)->obj_attr.uobject;
 	struct ib_ucq_object *obj = container_of(uobj, struct ib_ucq_object,
 						 uobject);
 	int ret;

 	if (!(ib_dev->uverbs_cmd_mask & 1ULL << IB_USER_VERBS_CMD_DESTROY_CQ))
 		return -EOPNOTSUPP;

 	ret = rdma_explicit_destroy(uobj);
 	if (ret)
 		return ret;

 	resp.comp_events_reported  = obj->comp_events_reported;
 	resp.async_events_reported = obj->async_events_reported;

 	return uverbs_copy_to(attrs, DESTROY_CQ_RESP, &resp);
 }

 static DECLARE_UVERBS_METHOD(
 	uverbs_method_cq_destroy, UVERBS_CQ_DESTROY, uverbs_destroy_cq_handler,
 	&UVERBS_ATTR_IDR(DESTROY_CQ_HANDLE, UVERBS_OBJECT_CQ,
 			 UVERBS_ACCESS_DESTROY,
 			 UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
 	&UVERBS_ATTR_PTR_OUT(DESTROY_CQ_RESP, struct ib_uverbs_destroy_cq_resp,
 			     UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)));

 DECLARE_UVERBS_OBJECT(uverbs_object_comp_channel,
 		      UVERBS_OBJECT_COMP_CHANNEL,
 		      &UVERBS_TYPE_ALLOC_FD(0,
 					      sizeof(struct ib_uverbs_completion_event_file),
 					      uverbs_hot_unplug_completion_event_file,
 					      &uverbs_event_fops,
 					      "[infinibandevent]", O_RDONLY));

 DECLARE_UVERBS_OBJECT(uverbs_object_cq, UVERBS_OBJECT_CQ,
 		      &UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_ucq_object), 0,
 						  uverbs_free_cq),
 		      &uverbs_method_cq_create,
 		      &uverbs_method_cq_destroy);

 DECLARE_UVERBS_OBJECT(uverbs_object_qp, UVERBS_OBJECT_QP,
 		      &UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_uqp_object), 0,
 						  uverbs_free_qp));

 DECLARE_UVERBS_OBJECT(uverbs_object_mw, UVERBS_OBJECT_MW,
 		      &UVERBS_TYPE_ALLOC_IDR(0, uverbs_free_mw));

 DECLARE_UVERBS_OBJECT(uverbs_object_mr, UVERBS_OBJECT_MR,
 		      /* 1 is used in order to free the MR after all the MWs */
 		      &UVERBS_TYPE_ALLOC_IDR(1, uverbs_free_mr));

 DECLARE_UVERBS_OBJECT(uverbs_object_srq, UVERBS_OBJECT_SRQ,
 		      &UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_usrq_object), 0,
 						  uverbs_free_srq));

 DECLARE_UVERBS_OBJECT(uverbs_object_ah, UVERBS_OBJECT_AH,
 		      &UVERBS_TYPE_ALLOC_IDR(0, uverbs_free_ah));

 DECLARE_UVERBS_OBJECT(uverbs_object_flow, UVERBS_OBJECT_FLOW,
 		      &UVERBS_TYPE_ALLOC_IDR(0, uverbs_free_flow));

 DECLARE_UVERBS_OBJECT(uverbs_object_wq, UVERBS_OBJECT_WQ,
 		      &UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_uwq_object), 0,
 						  uverbs_free_wq));

 DECLARE_UVERBS_OBJECT(uverbs_object_rwq_ind_table,
 		      UVERBS_OBJECT_RWQ_IND_TBL,
 		      &UVERBS_TYPE_ALLOC_IDR(0, uverbs_free_rwq_ind_tbl));

 DECLARE_UVERBS_OBJECT(uverbs_object_xrcd, UVERBS_OBJECT_XRCD,
 		      &UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_uxrcd_object), 0,
 						  uverbs_free_xrcd));

 DECLARE_UVERBS_OBJECT(uverbs_object_pd, UVERBS_OBJECT_PD,
 		      /* 2 is used in order to free the PD after MRs */
 		      &UVERBS_TYPE_ALLOC_IDR(2, uverbs_free_pd));

 DECLARE_UVERBS_OBJECT(uverbs_object_device, UVERBS_OBJECT_DEVICE, NULL);

 DECLARE_UVERBS_OBJECT_TREE(uverbs_default_objects,
 			   &uverbs_object_device,
 			   &uverbs_object_pd,
 			   &uverbs_object_mr,
 			   &uverbs_object_comp_channel,
 			   &uverbs_object_cq,
 			   &uverbs_object_qp,
 			   &uverbs_object_ah,
 			   &uverbs_object_mw,
 			   &uverbs_object_srq,
 			   &uverbs_object_flow,
 			   &uverbs_object_wq,
 			   &uverbs_object_rwq_ind_table,
 			   &uverbs_object_xrcd);
	/*
	* Copyright (c) 2017, Mellanox Technologies inc. All rights reserved.
	*
	* This software is available to you under a choice of one of two
	* licenses. You may choose to be licensed under the terms of the GNU
	* General Public License (GPL) Version 2, available from the file
	* COPYING in the main directory of this source tree, or the
	* OpenIB.org BSD license below:
	*
	* Redistribution and use in source and binary forms, with or
	* without modification, are permitted provided that the following
	* conditions are met:
	*
	* - Redistributions of source code must retain the above
	* copyright notice, this list of conditions and the following
	* disclaimer.
	*
	* - Redistributions in binary form must reproduce the above
	* copyright notice, this list of conditions and the following
	* disclaimer in the documentation and/or other materials
	* provided with the distribution.
	*
	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
	* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
	* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
	* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
	* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
	* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
	* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
	* SOFTWARE.
	*/

	#include <rdma/uverbs_std_types.h>
	#include <rdma/ib_user_verbs.h>
	#include <rdma/ib_verbs.h>
	#include <linux/bug.h>
	#include <linux/file.h>
	#include "rdma_core.h"
	#include "uverbs.h"

	static int uverbs_free_ah(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	return rdma_destroy_ah((struct ib_ah *)uobject->object);
	}

	static int uverbs_free_flow(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	return ib_destroy_flow((struct ib_flow *)uobject->object);
	}

	static int uverbs_free_mw(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	return uverbs_dealloc_mw((struct ib_mw *)uobject->object);
	}

	static int uverbs_free_qp(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	struct ib_qp *qp = uobject->object;
	struct ib_uqp_object *uqp =
	container_of(uobject, struct ib_uqp_object, uevent.uobject);
	int ret;

	if (why == RDMA_REMOVE_DESTROY) {
	if (!list_empty(&uqp->mcast_list))
	return -EBUSY;
	} else if (qp == qp->real_qp) {
	ib_uverbs_detach_umcast(qp, uqp);
	}

	ret = ib_destroy_qp(qp);
	if (ret && why == RDMA_REMOVE_DESTROY)
	return ret;

	if (uqp->uxrcd)
	atomic_dec(&uqp->uxrcd->refcnt);

	ib_uverbs_release_uevent(uobject->context->ufile, &uqp->uevent);
	return ret;
	}

	static int uverbs_free_rwq_ind_tbl(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	struct ib_rwq_ind_table *rwq_ind_tbl = uobject->object;
	struct ib_wq **ind_tbl = rwq_ind_tbl->ind_tbl;
	int ret;

	ret = ib_destroy_rwq_ind_table(rwq_ind_tbl);
	if (!ret \|\| why != RDMA_REMOVE_DESTROY)
	kfree(ind_tbl);
	return ret;
	}

	static int uverbs_free_wq(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	struct ib_wq *wq = uobject->object;
	struct ib_uwq_object *uwq =
	container_of(uobject, struct ib_uwq_object, uevent.uobject);
	int ret;

	ret = ib_destroy_wq(wq);
	if (!ret \|\| why != RDMA_REMOVE_DESTROY)
	ib_uverbs_release_uevent(uobject->context->ufile, &uwq->uevent);
	return ret;
	}

	static int uverbs_free_srq(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	struct ib_srq *srq = uobject->object;
	struct ib_uevent_object *uevent =
	container_of(uobject, struct ib_uevent_object, uobject);
	enum ib_srq_type srq_type = srq->srq_type;
	int ret;

	ret = ib_destroy_srq(srq);

	if (ret && why == RDMA_REMOVE_DESTROY)
	return ret;

	if (srq_type == IB_SRQT_XRC) {
	struct ib_usrq_object *us =
	container_of(uevent, struct ib_usrq_object, uevent);

	atomic_dec(&us->uxrcd->refcnt);
	}

	ib_uverbs_release_uevent(uobject->context->ufile, uevent);
	return ret;
	}

	static int uverbs_free_cq(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	struct ib_cq *cq = uobject->object;
	struct ib_uverbs_event_queue *ev_queue = cq->cq_context;
	struct ib_ucq_object *ucq =
	container_of(uobject, struct ib_ucq_object, uobject);
	int ret;

	ret = ib_destroy_cq(cq);
	if (!ret \|\| why != RDMA_REMOVE_DESTROY)
	ib_uverbs_release_ucq(uobject->context->ufile, ev_queue ?
	container_of(ev_queue,
	struct ib_uverbs_completion_event_file,
	ev_queue) : NULL,
	ucq);
	return ret;
	}

	static int uverbs_free_mr(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	return ib_dereg_mr((struct ib_mr *)uobject->object);
	}

	static int uverbs_free_xrcd(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	struct ib_xrcd *xrcd = uobject->object;
	struct ib_uxrcd_object *uxrcd =
	container_of(uobject, struct ib_uxrcd_object, uobject);
	int ret;

	mutex_lock(&uobject->context->ufile->device->xrcd_tree_mutex);
	if (why == RDMA_REMOVE_DESTROY && atomic_read(&uxrcd->refcnt))
	ret = -EBUSY;
	else
	ret = ib_uverbs_dealloc_xrcd(uobject->context->ufile->device,
	xrcd, why);
	mutex_unlock(&uobject->context->ufile->device->xrcd_tree_mutex);

	return ret;
	}

	static int uverbs_free_pd(struct ib_uobject *uobject,
	enum rdma_remove_reason why)
	{
	struct ib_pd *pd = uobject->object;

	if (why == RDMA_REMOVE_DESTROY && atomic_read(&pd->usecnt))
	return -EBUSY;

	ib_dealloc_pd((struct ib_pd *)uobject->object);
	return 0;
	}

	static int uverbs_hot_unplug_completion_event_file(struct ib_uobject_file *uobj_file,
	enum rdma_remove_reason why)
	{
	struct ib_uverbs_completion_event_file *comp_event_file =
	container_of(uobj_file, struct ib_uverbs_completion_event_file,
	uobj_file);
	struct ib_uverbs_event_queue *event_queue = &comp_event_file->ev_queue;

	spin_lock_irq(&event_queue->lock);
	event_queue->is_closed = 1;
	spin_unlock_irq(&event_queue->lock);

	if (why == RDMA_REMOVE_DRIVER_REMOVE) {
	wake_up_interruptible(&event_queue->poll_wait);
	kill_fasync(&event_queue->async_queue, SIGIO, POLL_IN);
	}
	return 0;
	};

	/*
	* This spec is used in order to pass information to the hardware driver in a
	* legacy way. Every verb that could get driver specific data should get this
	* spec.
	*/
	static const struct uverbs_attr_def uverbs_uhw_compat_in =
	UVERBS_ATTR_PTR_IN_SZ(UVERBS_UHW_IN, 0, UA_FLAGS(UVERBS_ATTR_SPEC_F_MIN_SZ));
	static const struct uverbs_attr_def uverbs_uhw_compat_out =
	UVERBS_ATTR_PTR_OUT_SZ(UVERBS_UHW_OUT, 0, UA_FLAGS(UVERBS_ATTR_SPEC_F_MIN_SZ));

	static void create_udata(struct uverbs_attr_bundle *ctx,
	struct ib_udata *udata)
	{
	/*
	* This is for ease of conversion. The purpose is to convert all drivers
	* to use uverbs_attr_bundle instead of ib_udata.
	* Assume attr == 0 is input and attr == 1 is output.
	*/
	void __user *inbuf;
	size_t inbuf_len = 0;
	void __user *outbuf;
	size_t outbuf_len = 0;
	const struct uverbs_attr *uhw_in =
	uverbs_attr_get(ctx, UVERBS_UHW_IN);
	const struct uverbs_attr *uhw_out =
	uverbs_attr_get(ctx, UVERBS_UHW_OUT);

	if (!IS_ERR(uhw_in)) {
	inbuf = uhw_in->ptr_attr.ptr;
	inbuf_len = uhw_in->ptr_attr.len;
	}

	if (!IS_ERR(uhw_out)) {
	outbuf = uhw_out->ptr_attr.ptr;
	outbuf_len = uhw_out->ptr_attr.len;
	}

	INIT_UDATA_BUF_OR_NULL(udata, inbuf, outbuf, inbuf_len, outbuf_len);
	}

	static int uverbs_create_cq_handler(struct ib_device *ib_dev,
	struct ib_uverbs_file *file,
	struct uverbs_attr_bundle *attrs)
	{
	struct ib_ucontext *ucontext = file->ucontext;
	struct ib_ucq_object *obj;
	struct ib_udata uhw;
	int ret;
	u64 user_handle;
	struct ib_cq_init_attr attr = {};
	struct ib_cq *cq;
	struct ib_uverbs_completion_event_file *ev_file = NULL;
	const struct uverbs_attr *ev_file_attr;
	struct ib_uobject *ev_file_uobj;

	if (!(ib_dev->uverbs_cmd_mask & 1ULL << IB_USER_VERBS_CMD_CREATE_CQ))
	return -EOPNOTSUPP;

	ret = uverbs_copy_from(&attr.comp_vector, attrs, CREATE_CQ_COMP_VECTOR);
	if (!ret)
	ret = uverbs_copy_from(&attr.cqe, attrs, CREATE_CQ_CQE);
	if (!ret)
	ret = uverbs_copy_from(&user_handle, attrs, CREATE_CQ_USER_HANDLE);
	if (ret)
	return ret;

	/* Optional param, if it doesn't exist, we get -ENOENT and skip it */
	if (uverbs_copy_from(&attr.flags, attrs, CREATE_CQ_FLAGS) == -EFAULT)
	return -EFAULT;

	ev_file_attr = uverbs_attr_get(attrs, CREATE_CQ_COMP_CHANNEL);
	if (!IS_ERR(ev_file_attr)) {
	ev_file_uobj = ev_file_attr->obj_attr.uobject;

	ev_file = container_of(ev_file_uobj,
	struct ib_uverbs_completion_event_file,
	uobj_file.uobj);
	uverbs_uobject_get(ev_file_uobj);
	}

	if (attr.comp_vector >= ucontext->ufile->device->num_comp_vectors) {
	ret = -EINVAL;
	goto err_event_file;
	}

	obj = container_of(uverbs_attr_get(attrs, CREATE_CQ_HANDLE)->obj_attr.uobject,
	typeof(*obj), uobject);
	obj->uverbs_file = ucontext->ufile;
	obj->comp_events_reported = 0;
	obj->async_events_reported = 0;
	INIT_LIST_HEAD(&obj->comp_list);
	INIT_LIST_HEAD(&obj->async_list);

	/* Temporary, only until drivers get the new uverbs_attr_bundle */
	create_udata(attrs, &uhw);

	cq = ib_dev->create_cq(ib_dev, &attr, ucontext, &uhw);
	if (IS_ERR(cq)) {
	ret = PTR_ERR(cq);
	goto err_event_file;
	}

	cq->device = ib_dev;
	cq->uobject = &obj->uobject;
	cq->comp_handler = ib_uverbs_comp_handler;
	cq->event_handler = ib_uverbs_cq_event_handler;
	cq->cq_context = &ev_file->ev_queue;
	obj->uobject.object = cq;
	obj->uobject.user_handle = user_handle;
	atomic_set(&cq->usecnt, 0);

	ret = uverbs_copy_to(attrs, CREATE_CQ_RESP_CQE, &cq->cqe);
	if (ret)
	goto err_cq;

	return 0;
	err_cq:
	ib_destroy_cq(cq);

	err_event_file:
	if (ev_file)
	uverbs_uobject_put(ev_file_uobj);
	return ret;
	};

	static DECLARE_UVERBS_METHOD(
	uverbs_method_cq_create, UVERBS_CQ_CREATE, uverbs_create_cq_handler,
	&UVERBS_ATTR_IDR(CREATE_CQ_HANDLE, UVERBS_OBJECT_CQ, UVERBS_ACCESS_NEW,
	UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
	&UVERBS_ATTR_PTR_IN(CREATE_CQ_CQE, u32,
	UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
	&UVERBS_ATTR_PTR_IN(CREATE_CQ_USER_HANDLE, u64,
	UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
	&UVERBS_ATTR_FD(CREATE_CQ_COMP_CHANNEL, UVERBS_OBJECT_COMP_CHANNEL,
	UVERBS_ACCESS_READ),
	&UVERBS_ATTR_PTR_IN(CREATE_CQ_COMP_VECTOR, u32,
	UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
	&UVERBS_ATTR_PTR_IN(CREATE_CQ_FLAGS, u32),
	&UVERBS_ATTR_PTR_OUT(CREATE_CQ_RESP_CQE, u32,
	UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
	&uverbs_uhw_compat_in, &uverbs_uhw_compat_out);

	static int uverbs_destroy_cq_handler(struct ib_device *ib_dev,
	struct ib_uverbs_file *file,
	struct uverbs_attr_bundle *attrs)
	{
	struct ib_uverbs_destroy_cq_resp resp;
	struct ib_uobject *uobj =
	uverbs_attr_get(attrs, DESTROY_CQ_HANDLE)->obj_attr.uobject;
	struct ib_ucq_object *obj = container_of(uobj, struct ib_ucq_object,
	uobject);
	int ret;

	if (!(ib_dev->uverbs_cmd_mask & 1ULL << IB_USER_VERBS_CMD_DESTROY_CQ))
	return -EOPNOTSUPP;

	ret = rdma_explicit_destroy(uobj);
	if (ret)
	return ret;

	resp.comp_events_reported = obj->comp_events_reported;
	resp.async_events_reported = obj->async_events_reported;

	return uverbs_copy_to(attrs, DESTROY_CQ_RESP, &resp);
	}

	static DECLARE_UVERBS_METHOD(
	uverbs_method_cq_destroy, UVERBS_CQ_DESTROY, uverbs_destroy_cq_handler,
	&UVERBS_ATTR_IDR(DESTROY_CQ_HANDLE, UVERBS_OBJECT_CQ,
	UVERBS_ACCESS_DESTROY,
	UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)),
	&UVERBS_ATTR_PTR_OUT(DESTROY_CQ_RESP, struct ib_uverbs_destroy_cq_resp,
	UA_FLAGS(UVERBS_ATTR_SPEC_F_MANDATORY)));

	DECLARE_UVERBS_OBJECT(uverbs_object_comp_channel,
	UVERBS_OBJECT_COMP_CHANNEL,
	&UVERBS_TYPE_ALLOC_FD(0,
	sizeof(struct ib_uverbs_completion_event_file),
	uverbs_hot_unplug_completion_event_file,
	&uverbs_event_fops,
	"[infinibandevent]", O_RDONLY));

	DECLARE_UVERBS_OBJECT(uverbs_object_cq, UVERBS_OBJECT_CQ,
	&UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_ucq_object), 0,
	uverbs_free_cq),
	&uverbs_method_cq_create,
	&uverbs_method_cq_destroy);

	DECLARE_UVERBS_OBJECT(uverbs_object_qp, UVERBS_OBJECT_QP,
	&UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_uqp_object), 0,
	uverbs_free_qp));

	DECLARE_UVERBS_OBJECT(uverbs_object_mw, UVERBS_OBJECT_MW,
	&UVERBS_TYPE_ALLOC_IDR(0, uverbs_free_mw));

	DECLARE_UVERBS_OBJECT(uverbs_object_mr, UVERBS_OBJECT_MR,
	/* 1 is used in order to free the MR after all the MWs */
	&UVERBS_TYPE_ALLOC_IDR(1, uverbs_free_mr));

	DECLARE_UVERBS_OBJECT(uverbs_object_srq, UVERBS_OBJECT_SRQ,
	&UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_usrq_object), 0,
	uverbs_free_srq));

	DECLARE_UVERBS_OBJECT(uverbs_object_ah, UVERBS_OBJECT_AH,
	&UVERBS_TYPE_ALLOC_IDR(0, uverbs_free_ah));

	DECLARE_UVERBS_OBJECT(uverbs_object_flow, UVERBS_OBJECT_FLOW,
	&UVERBS_TYPE_ALLOC_IDR(0, uverbs_free_flow));

	DECLARE_UVERBS_OBJECT(uverbs_object_wq, UVERBS_OBJECT_WQ,
	&UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_uwq_object), 0,
	uverbs_free_wq));

	DECLARE_UVERBS_OBJECT(uverbs_object_rwq_ind_table,
	UVERBS_OBJECT_RWQ_IND_TBL,
	&UVERBS_TYPE_ALLOC_IDR(0, uverbs_free_rwq_ind_tbl));

	DECLARE_UVERBS_OBJECT(uverbs_object_xrcd, UVERBS_OBJECT_XRCD,
	&UVERBS_TYPE_ALLOC_IDR_SZ(sizeof(struct ib_uxrcd_object), 0,
	uverbs_free_xrcd));

	DECLARE_UVERBS_OBJECT(uverbs_object_pd, UVERBS_OBJECT_PD,
	/* 2 is used in order to free the PD after MRs */
	&UVERBS_TYPE_ALLOC_IDR(2, uverbs_free_pd));

	DECLARE_UVERBS_OBJECT(uverbs_object_device, UVERBS_OBJECT_DEVICE, NULL);

	DECLARE_UVERBS_OBJECT_TREE(uverbs_default_objects,
	&uverbs_object_device,
	&uverbs_object_pd,
	&uverbs_object_mr,
	&uverbs_object_comp_channel,
	&uverbs_object_cq,
	&uverbs_object_qp,
	&uverbs_object_ah,
	&uverbs_object_mw,
	&uverbs_object_srq,
	&uverbs_object_flow,
	&uverbs_object_wq,
	&uverbs_object_rwq_ind_table,
	&uverbs_object_xrcd);