1/*
2 * Copyright (c) 2005 Topspin Communications.  All rights reserved.
3 * Copyright (c) 2005 Intel Corporation.  All rights reserved.
4 *
5 * This software is available to you under a choice of one of two
6 * licenses.  You may choose to be licensed under the terms of the GNU
7 * General Public License (GPL) Version 2, available from the file
8 * COPYING in the main directory of this source tree, or the
9 * OpenIB.org BSD license below:
10 *
11 *     Redistribution and use in source and binary forms, with or
12 *     without modification, are permitted provided that the following
13 *     conditions are met:
14 *
15 *      - Redistributions of source code must retain the above
16 *	copyright notice, this list of conditions and the following
17 *	disclaimer.
18 *
19 *      - Redistributions in binary form must reproduce the above
20 *	copyright notice, this list of conditions and the following
21 *	disclaimer in the documentation and/or other materials
22 *	provided with the distribution.
23 *
24 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
25 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
26 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
27 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
28 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
29 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
30 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
31 * SOFTWARE.
32 */
33
34#include <linux/completion.h>
35#include <linux/init.h>
36#include <linux/fs.h>
37#include <linux/module.h>
38#include <linux/device.h>
39#include <linux/err.h>
40#include <linux/poll.h>
41#include <linux/sched.h>
42#include <linux/file.h>
43#include <linux/mount.h>
44#include <linux/cdev.h>
45#include <linux/idr.h>
46#include <linux/mutex.h>
47#include <linux/slab.h>
48
49#include <asm/uaccess.h>
50
51#include <rdma/ib.h>
52#include <rdma/ib_cm.h>
53#include <rdma/ib_user_cm.h>
54#include <rdma/ib_marshall.h>
55
56MODULE_AUTHOR("Libor Michalek");
57MODULE_DESCRIPTION("InfiniBand userspace Connection Manager access");
58MODULE_LICENSE("Dual BSD/GPL");
59
60struct ib_ucm_device {
61	int			devnum;
62	struct cdev		cdev;
63	struct device		dev;
64	struct ib_device	*ib_dev;
65};
66
67struct ib_ucm_file {
68	struct mutex file_mutex;
69	struct file *filp;
70	struct ib_ucm_device *device;
71
72	struct list_head  ctxs;
73	struct list_head  events;
74	wait_queue_head_t poll_wait;
75};
76
77struct ib_ucm_context {
78	int                 id;
79	struct completion   comp;
80	atomic_t            ref;
81	int		    events_reported;
82
83	struct ib_ucm_file *file;
84	struct ib_cm_id    *cm_id;
85	__u64		   uid;
86
87	struct list_head    events;    /* list of pending events. */
88	struct list_head    file_list; /* member in file ctx list */
89};
90
91struct ib_ucm_event {
92	struct ib_ucm_context *ctx;
93	struct list_head file_list; /* member in file event list */
94	struct list_head ctx_list;  /* member in ctx event list */
95
96	struct ib_cm_id *cm_id;
97	struct ib_ucm_event_resp resp;
98	void *data;
99	void *info;
100	int data_len;
101	int info_len;
102};
103
104enum {
105	IB_UCM_MAJOR = 231,
106	IB_UCM_BASE_MINOR = 224,
107	IB_UCM_MAX_DEVICES = 32
108};
109
110#define IB_UCM_BASE_DEV MKDEV(IB_UCM_MAJOR, IB_UCM_BASE_MINOR)
111
112static void ib_ucm_add_one(struct ib_device *device);
113static void ib_ucm_remove_one(struct ib_device *device);
114
115static struct ib_client ucm_client = {
116	.name   = "ucm",
117	.add    = ib_ucm_add_one,
118	.remove = ib_ucm_remove_one
119};
120
121static DEFINE_MUTEX(ctx_id_mutex);
122static DEFINE_IDR(ctx_id_table);
123static DECLARE_BITMAP(dev_map, IB_UCM_MAX_DEVICES);
124
125static struct ib_ucm_context *ib_ucm_ctx_get(struct ib_ucm_file *file, int id)
126{
127	struct ib_ucm_context *ctx;
128
129	mutex_lock(&ctx_id_mutex);
130	ctx = idr_find(&ctx_id_table, id);
131	if (!ctx)
132		ctx = ERR_PTR(-ENOENT);
133	else if (ctx->file != file)
134		ctx = ERR_PTR(-EINVAL);
135	else
136		atomic_inc(&ctx->ref);
137	mutex_unlock(&ctx_id_mutex);
138
139	return ctx;
140}
141
142static void ib_ucm_ctx_put(struct ib_ucm_context *ctx)
143{
144	if (atomic_dec_and_test(&ctx->ref))
145		complete(&ctx->comp);
146}
147
148static inline int ib_ucm_new_cm_id(int event)
149{
150	return event == IB_CM_REQ_RECEIVED || event == IB_CM_SIDR_REQ_RECEIVED;
151}
152
153static void ib_ucm_cleanup_events(struct ib_ucm_context *ctx)
154{
155	struct ib_ucm_event *uevent;
156
157	mutex_lock(&ctx->file->file_mutex);
158	list_del(&ctx->file_list);
159	while (!list_empty(&ctx->events)) {
160
161		uevent = list_entry(ctx->events.next,
162				    struct ib_ucm_event, ctx_list);
163		list_del(&uevent->file_list);
164		list_del(&uevent->ctx_list);
165		mutex_unlock(&ctx->file->file_mutex);
166
167		/* clear incoming connections. */
168		if (ib_ucm_new_cm_id(uevent->resp.event))
169			ib_destroy_cm_id(uevent->cm_id);
170
171		kfree(uevent);
172		mutex_lock(&ctx->file->file_mutex);
173	}
174	mutex_unlock(&ctx->file->file_mutex);
175}
176
177static struct ib_ucm_context *ib_ucm_ctx_alloc(struct ib_ucm_file *file)
178{
179	struct ib_ucm_context *ctx;
180
181	ctx = kzalloc(sizeof *ctx, GFP_KERNEL);
182	if (!ctx)
183		return NULL;
184
185	atomic_set(&ctx->ref, 1);
186	init_completion(&ctx->comp);
187	ctx->file = file;
188	INIT_LIST_HEAD(&ctx->events);
189
190	mutex_lock(&ctx_id_mutex);
191	ctx->id = idr_alloc(&ctx_id_table, ctx, 0, 0, GFP_KERNEL);
192	mutex_unlock(&ctx_id_mutex);
193	if (ctx->id < 0)
194		goto error;
195
196	list_add_tail(&ctx->file_list, &file->ctxs);
197	return ctx;
198
199error:
200	kfree(ctx);
201	return NULL;
202}
203
204static void ib_ucm_event_req_get(struct ib_ucm_req_event_resp *ureq,
205				 struct ib_cm_req_event_param *kreq)
206{
207	ureq->remote_ca_guid             = kreq->remote_ca_guid;
208	ureq->remote_qkey                = kreq->remote_qkey;
209	ureq->remote_qpn                 = kreq->remote_qpn;
210	ureq->qp_type                    = kreq->qp_type;
211	ureq->starting_psn               = kreq->starting_psn;
212	ureq->responder_resources        = kreq->responder_resources;
213	ureq->initiator_depth            = kreq->initiator_depth;
214	ureq->local_cm_response_timeout  = kreq->local_cm_response_timeout;
215	ureq->flow_control               = kreq->flow_control;
216	ureq->remote_cm_response_timeout = kreq->remote_cm_response_timeout;
217	ureq->retry_count                = kreq->retry_count;
218	ureq->rnr_retry_count            = kreq->rnr_retry_count;
219	ureq->srq                        = kreq->srq;
220	ureq->port			 = kreq->port;
221
222	ib_copy_path_rec_to_user(&ureq->primary_path, kreq->primary_path);
223	if (kreq->alternate_path)
224		ib_copy_path_rec_to_user(&ureq->alternate_path,
225					 kreq->alternate_path);
226}
227
228static void ib_ucm_event_rep_get(struct ib_ucm_rep_event_resp *urep,
229				 struct ib_cm_rep_event_param *krep)
230{
231	urep->remote_ca_guid      = krep->remote_ca_guid;
232	urep->remote_qkey         = krep->remote_qkey;
233	urep->remote_qpn          = krep->remote_qpn;
234	urep->starting_psn        = krep->starting_psn;
235	urep->responder_resources = krep->responder_resources;
236	urep->initiator_depth     = krep->initiator_depth;
237	urep->target_ack_delay    = krep->target_ack_delay;
238	urep->failover_accepted   = krep->failover_accepted;
239	urep->flow_control        = krep->flow_control;
240	urep->rnr_retry_count     = krep->rnr_retry_count;
241	urep->srq                 = krep->srq;
242}
243
244static void ib_ucm_event_sidr_rep_get(struct ib_ucm_sidr_rep_event_resp *urep,
245				      struct ib_cm_sidr_rep_event_param *krep)
246{
247	urep->status = krep->status;
248	urep->qkey   = krep->qkey;
249	urep->qpn    = krep->qpn;
250};
251
252static int ib_ucm_event_process(struct ib_cm_event *evt,
253				struct ib_ucm_event *uvt)
254{
255	void *info = NULL;
256
257	switch (evt->event) {
258	case IB_CM_REQ_RECEIVED:
259		ib_ucm_event_req_get(&uvt->resp.u.req_resp,
260				     &evt->param.req_rcvd);
261		uvt->data_len      = IB_CM_REQ_PRIVATE_DATA_SIZE;
262		uvt->resp.present  = IB_UCM_PRES_PRIMARY;
263		uvt->resp.present |= (evt->param.req_rcvd.alternate_path ?
264				      IB_UCM_PRES_ALTERNATE : 0);
265		break;
266	case IB_CM_REP_RECEIVED:
267		ib_ucm_event_rep_get(&uvt->resp.u.rep_resp,
268				     &evt->param.rep_rcvd);
269		uvt->data_len = IB_CM_REP_PRIVATE_DATA_SIZE;
270		break;
271	case IB_CM_RTU_RECEIVED:
272		uvt->data_len = IB_CM_RTU_PRIVATE_DATA_SIZE;
273		uvt->resp.u.send_status = evt->param.send_status;
274		break;
275	case IB_CM_DREQ_RECEIVED:
276		uvt->data_len = IB_CM_DREQ_PRIVATE_DATA_SIZE;
277		uvt->resp.u.send_status = evt->param.send_status;
278		break;
279	case IB_CM_DREP_RECEIVED:
280		uvt->data_len = IB_CM_DREP_PRIVATE_DATA_SIZE;
281		uvt->resp.u.send_status = evt->param.send_status;
282		break;
283	case IB_CM_MRA_RECEIVED:
284		uvt->resp.u.mra_resp.timeout =
285					evt->param.mra_rcvd.service_timeout;
286		uvt->data_len = IB_CM_MRA_PRIVATE_DATA_SIZE;
287		break;
288	case IB_CM_REJ_RECEIVED:
289		uvt->resp.u.rej_resp.reason = evt->param.rej_rcvd.reason;
290		uvt->data_len = IB_CM_REJ_PRIVATE_DATA_SIZE;
291		uvt->info_len = evt->param.rej_rcvd.ari_length;
292		info	      = evt->param.rej_rcvd.ari;
293		break;
294	case IB_CM_LAP_RECEIVED:
295		ib_copy_path_rec_to_user(&uvt->resp.u.lap_resp.path,
296					 evt->param.lap_rcvd.alternate_path);
297		uvt->data_len = IB_CM_LAP_PRIVATE_DATA_SIZE;
298		uvt->resp.present = IB_UCM_PRES_ALTERNATE;
299		break;
300	case IB_CM_APR_RECEIVED:
301		uvt->resp.u.apr_resp.status = evt->param.apr_rcvd.ap_status;
302		uvt->data_len = IB_CM_APR_PRIVATE_DATA_SIZE;
303		uvt->info_len = evt->param.apr_rcvd.info_len;
304		info	      = evt->param.apr_rcvd.apr_info;
305		break;
306	case IB_CM_SIDR_REQ_RECEIVED:
307		uvt->resp.u.sidr_req_resp.pkey =
308					evt->param.sidr_req_rcvd.pkey;
309		uvt->resp.u.sidr_req_resp.port =
310					evt->param.sidr_req_rcvd.port;
311		uvt->data_len = IB_CM_SIDR_REQ_PRIVATE_DATA_SIZE;
312		break;
313	case IB_CM_SIDR_REP_RECEIVED:
314		ib_ucm_event_sidr_rep_get(&uvt->resp.u.sidr_rep_resp,
315					  &evt->param.sidr_rep_rcvd);
316		uvt->data_len = IB_CM_SIDR_REP_PRIVATE_DATA_SIZE;
317		uvt->info_len = evt->param.sidr_rep_rcvd.info_len;
318		info	      = evt->param.sidr_rep_rcvd.info;
319		break;
320	default:
321		uvt->resp.u.send_status = evt->param.send_status;
322		break;
323	}
324
325	if (uvt->data_len) {
326		uvt->data = kmemdup(evt->private_data, uvt->data_len, GFP_KERNEL);
327		if (!uvt->data)
328			goto err1;
329
330		uvt->resp.present |= IB_UCM_PRES_DATA;
331	}
332
333	if (uvt->info_len) {
334		uvt->info = kmemdup(info, uvt->info_len, GFP_KERNEL);
335		if (!uvt->info)
336			goto err2;
337
338		uvt->resp.present |= IB_UCM_PRES_INFO;
339	}
340	return 0;
341
342err2:
343	kfree(uvt->data);
344err1:
345	return -ENOMEM;
346}
347
348static int ib_ucm_event_handler(struct ib_cm_id *cm_id,
349				struct ib_cm_event *event)
350{
351	struct ib_ucm_event *uevent;
352	struct ib_ucm_context *ctx;
353	int result = 0;
354
355	ctx = cm_id->context;
356
357	uevent = kzalloc(sizeof *uevent, GFP_KERNEL);
358	if (!uevent)
359		goto err1;
360
361	uevent->ctx = ctx;
362	uevent->cm_id = cm_id;
363	uevent->resp.uid = ctx->uid;
364	uevent->resp.id = ctx->id;
365	uevent->resp.event = event->event;
366
367	result = ib_ucm_event_process(event, uevent);
368	if (result)
369		goto err2;
370
371	mutex_lock(&ctx->file->file_mutex);
372	list_add_tail(&uevent->file_list, &ctx->file->events);
373	list_add_tail(&uevent->ctx_list, &ctx->events);
374	wake_up_interruptible(&ctx->file->poll_wait);
375	mutex_unlock(&ctx->file->file_mutex);
376	return 0;
377
378err2:
379	kfree(uevent);
380err1:
381	/* Destroy new cm_id's */
382	return ib_ucm_new_cm_id(event->event);
383}
384
385static ssize_t ib_ucm_event(struct ib_ucm_file *file,
386			    const char __user *inbuf,
387			    int in_len, int out_len)
388{
389	struct ib_ucm_context *ctx;
390	struct ib_ucm_event_get cmd;
391	struct ib_ucm_event *uevent;
392	int result = 0;
393
394	if (out_len < sizeof(struct ib_ucm_event_resp))
395		return -ENOSPC;
396
397	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
398		return -EFAULT;
399
400	mutex_lock(&file->file_mutex);
401	while (list_empty(&file->events)) {
402		mutex_unlock(&file->file_mutex);
403
404		if (file->filp->f_flags & O_NONBLOCK)
405			return -EAGAIN;
406
407		if (wait_event_interruptible(file->poll_wait,
408					     !list_empty(&file->events)))
409			return -ERESTARTSYS;
410
411		mutex_lock(&file->file_mutex);
412	}
413
414	uevent = list_entry(file->events.next, struct ib_ucm_event, file_list);
415
416	if (ib_ucm_new_cm_id(uevent->resp.event)) {
417		ctx = ib_ucm_ctx_alloc(file);
418		if (!ctx) {
419			result = -ENOMEM;
420			goto done;
421		}
422
423		ctx->cm_id = uevent->cm_id;
424		ctx->cm_id->context = ctx;
425		uevent->resp.id = ctx->id;
426	}
427
428	if (copy_to_user((void __user *)(unsigned long)cmd.response,
429			 &uevent->resp, sizeof(uevent->resp))) {
430		result = -EFAULT;
431		goto done;
432	}
433
434	if (uevent->data) {
435		if (cmd.data_len < uevent->data_len) {
436			result = -ENOMEM;
437			goto done;
438		}
439		if (copy_to_user((void __user *)(unsigned long)cmd.data,
440				 uevent->data, uevent->data_len)) {
441			result = -EFAULT;
442			goto done;
443		}
444	}
445
446	if (uevent->info) {
447		if (cmd.info_len < uevent->info_len) {
448			result = -ENOMEM;
449			goto done;
450		}
451		if (copy_to_user((void __user *)(unsigned long)cmd.info,
452				 uevent->info, uevent->info_len)) {
453			result = -EFAULT;
454			goto done;
455		}
456	}
457
458	list_del(&uevent->file_list);
459	list_del(&uevent->ctx_list);
460	uevent->ctx->events_reported++;
461
462	kfree(uevent->data);
463	kfree(uevent->info);
464	kfree(uevent);
465done:
466	mutex_unlock(&file->file_mutex);
467	return result;
468}
469
470static ssize_t ib_ucm_create_id(struct ib_ucm_file *file,
471				const char __user *inbuf,
472				int in_len, int out_len)
473{
474	struct ib_ucm_create_id cmd;
475	struct ib_ucm_create_id_resp resp;
476	struct ib_ucm_context *ctx;
477	int result;
478
479	if (out_len < sizeof(resp))
480		return -ENOSPC;
481
482	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
483		return -EFAULT;
484
485	mutex_lock(&file->file_mutex);
486	ctx = ib_ucm_ctx_alloc(file);
487	mutex_unlock(&file->file_mutex);
488	if (!ctx)
489		return -ENOMEM;
490
491	ctx->uid = cmd.uid;
492	ctx->cm_id = ib_create_cm_id(file->device->ib_dev,
493				     ib_ucm_event_handler, ctx);
494	if (IS_ERR(ctx->cm_id)) {
495		result = PTR_ERR(ctx->cm_id);
496		goto err1;
497	}
498
499	resp.id = ctx->id;
500	if (copy_to_user((void __user *)(unsigned long)cmd.response,
501			 &resp, sizeof(resp))) {
502		result = -EFAULT;
503		goto err2;
504	}
505	return 0;
506
507err2:
508	ib_destroy_cm_id(ctx->cm_id);
509err1:
510	mutex_lock(&ctx_id_mutex);
511	idr_remove(&ctx_id_table, ctx->id);
512	mutex_unlock(&ctx_id_mutex);
513	kfree(ctx);
514	return result;
515}
516
517static ssize_t ib_ucm_destroy_id(struct ib_ucm_file *file,
518				 const char __user *inbuf,
519				 int in_len, int out_len)
520{
521	struct ib_ucm_destroy_id cmd;
522	struct ib_ucm_destroy_id_resp resp;
523	struct ib_ucm_context *ctx;
524	int result = 0;
525
526	if (out_len < sizeof(resp))
527		return -ENOSPC;
528
529	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
530		return -EFAULT;
531
532	mutex_lock(&ctx_id_mutex);
533	ctx = idr_find(&ctx_id_table, cmd.id);
534	if (!ctx)
535		ctx = ERR_PTR(-ENOENT);
536	else if (ctx->file != file)
537		ctx = ERR_PTR(-EINVAL);
538	else
539		idr_remove(&ctx_id_table, ctx->id);
540	mutex_unlock(&ctx_id_mutex);
541
542	if (IS_ERR(ctx))
543		return PTR_ERR(ctx);
544
545	ib_ucm_ctx_put(ctx);
546	wait_for_completion(&ctx->comp);
547
548	/* No new events will be generated after destroying the cm_id. */
549	ib_destroy_cm_id(ctx->cm_id);
550	/* Cleanup events not yet reported to the user. */
551	ib_ucm_cleanup_events(ctx);
552
553	resp.events_reported = ctx->events_reported;
554	if (copy_to_user((void __user *)(unsigned long)cmd.response,
555			 &resp, sizeof(resp)))
556		result = -EFAULT;
557
558	kfree(ctx);
559	return result;
560}
561
562static ssize_t ib_ucm_attr_id(struct ib_ucm_file *file,
563			      const char __user *inbuf,
564			      int in_len, int out_len)
565{
566	struct ib_ucm_attr_id_resp resp;
567	struct ib_ucm_attr_id cmd;
568	struct ib_ucm_context *ctx;
569	int result = 0;
570
571	if (out_len < sizeof(resp))
572		return -ENOSPC;
573
574	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
575		return -EFAULT;
576
577	ctx = ib_ucm_ctx_get(file, cmd.id);
578	if (IS_ERR(ctx))
579		return PTR_ERR(ctx);
580
581	resp.service_id   = ctx->cm_id->service_id;
582	resp.service_mask = ctx->cm_id->service_mask;
583	resp.local_id     = ctx->cm_id->local_id;
584	resp.remote_id    = ctx->cm_id->remote_id;
585
586	if (copy_to_user((void __user *)(unsigned long)cmd.response,
587			 &resp, sizeof(resp)))
588		result = -EFAULT;
589
590	ib_ucm_ctx_put(ctx);
591	return result;
592}
593
594static ssize_t ib_ucm_init_qp_attr(struct ib_ucm_file *file,
595				   const char __user *inbuf,
596				   int in_len, int out_len)
597{
598	struct ib_uverbs_qp_attr resp;
599	struct ib_ucm_init_qp_attr cmd;
600	struct ib_ucm_context *ctx;
601	struct ib_qp_attr qp_attr;
602	int result = 0;
603
604	if (out_len < sizeof(resp))
605		return -ENOSPC;
606
607	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
608		return -EFAULT;
609
610	ctx = ib_ucm_ctx_get(file, cmd.id);
611	if (IS_ERR(ctx))
612		return PTR_ERR(ctx);
613
614	resp.qp_attr_mask = 0;
615	memset(&qp_attr, 0, sizeof qp_attr);
616	qp_attr.qp_state = cmd.qp_state;
617	result = ib_cm_init_qp_attr(ctx->cm_id, &qp_attr, &resp.qp_attr_mask);
618	if (result)
619		goto out;
620
621	ib_copy_qp_attr_to_user(&resp, &qp_attr);
622
623	if (copy_to_user((void __user *)(unsigned long)cmd.response,
624			 &resp, sizeof(resp)))
625		result = -EFAULT;
626
627out:
628	ib_ucm_ctx_put(ctx);
629	return result;
630}
631
632static int ucm_validate_listen(__be64 service_id, __be64 service_mask)
633{
634	service_id &= service_mask;
635
636	if (((service_id & IB_CMA_SERVICE_ID_MASK) == IB_CMA_SERVICE_ID) ||
637	    ((service_id & IB_SDP_SERVICE_ID_MASK) == IB_SDP_SERVICE_ID))
638		return -EINVAL;
639
640	return 0;
641}
642
643static ssize_t ib_ucm_listen(struct ib_ucm_file *file,
644			     const char __user *inbuf,
645			     int in_len, int out_len)
646{
647	struct ib_ucm_listen cmd;
648	struct ib_ucm_context *ctx;
649	int result;
650
651	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
652		return -EFAULT;
653
654	ctx = ib_ucm_ctx_get(file, cmd.id);
655	if (IS_ERR(ctx))
656		return PTR_ERR(ctx);
657
658	result = ucm_validate_listen(cmd.service_id, cmd.service_mask);
659	if (result)
660		goto out;
661
662	result = ib_cm_listen(ctx->cm_id, cmd.service_id, cmd.service_mask,
663			      NULL);
664out:
665	ib_ucm_ctx_put(ctx);
666	return result;
667}
668
669static ssize_t ib_ucm_notify(struct ib_ucm_file *file,
670			     const char __user *inbuf,
671			     int in_len, int out_len)
672{
673	struct ib_ucm_notify cmd;
674	struct ib_ucm_context *ctx;
675	int result;
676
677	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
678		return -EFAULT;
679
680	ctx = ib_ucm_ctx_get(file, cmd.id);
681	if (IS_ERR(ctx))
682		return PTR_ERR(ctx);
683
684	result = ib_cm_notify(ctx->cm_id, (enum ib_event_type) cmd.event);
685	ib_ucm_ctx_put(ctx);
686	return result;
687}
688
689static int ib_ucm_alloc_data(const void **dest, u64 src, u32 len)
690{
691	void *data;
692
693	*dest = NULL;
694
695	if (!len)
696		return 0;
697
698	data = memdup_user((void __user *)(unsigned long)src, len);
699	if (IS_ERR(data))
700		return PTR_ERR(data);
701
702	*dest = data;
703	return 0;
704}
705
706static int ib_ucm_path_get(struct ib_sa_path_rec **path, u64 src)
707{
708	struct ib_user_path_rec upath;
709	struct ib_sa_path_rec  *sa_path;
710
711	*path = NULL;
712
713	if (!src)
714		return 0;
715
716	sa_path = kmalloc(sizeof(*sa_path), GFP_KERNEL);
717	if (!sa_path)
718		return -ENOMEM;
719
720	if (copy_from_user(&upath, (void __user *)(unsigned long)src,
721			   sizeof(upath))) {
722
723		kfree(sa_path);
724		return -EFAULT;
725	}
726
727	ib_copy_path_rec_from_user(sa_path, &upath);
728	*path = sa_path;
729	return 0;
730}
731
732static ssize_t ib_ucm_send_req(struct ib_ucm_file *file,
733			       const char __user *inbuf,
734			       int in_len, int out_len)
735{
736	struct ib_cm_req_param param;
737	struct ib_ucm_context *ctx;
738	struct ib_ucm_req cmd;
739	int result;
740
741	param.private_data   = NULL;
742	param.primary_path   = NULL;
743	param.alternate_path = NULL;
744
745	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
746		return -EFAULT;
747
748	result = ib_ucm_alloc_data(&param.private_data, cmd.data, cmd.len);
749	if (result)
750		goto done;
751
752	result = ib_ucm_path_get(&param.primary_path, cmd.primary_path);
753	if (result)
754		goto done;
755
756	result = ib_ucm_path_get(&param.alternate_path, cmd.alternate_path);
757	if (result)
758		goto done;
759
760	param.private_data_len           = cmd.len;
761	param.service_id                 = cmd.sid;
762	param.qp_num                     = cmd.qpn;
763	param.qp_type                    = cmd.qp_type;
764	param.starting_psn               = cmd.psn;
765	param.peer_to_peer               = cmd.peer_to_peer;
766	param.responder_resources        = cmd.responder_resources;
767	param.initiator_depth            = cmd.initiator_depth;
768	param.remote_cm_response_timeout = cmd.remote_cm_response_timeout;
769	param.flow_control               = cmd.flow_control;
770	param.local_cm_response_timeout  = cmd.local_cm_response_timeout;
771	param.retry_count                = cmd.retry_count;
772	param.rnr_retry_count            = cmd.rnr_retry_count;
773	param.max_cm_retries             = cmd.max_cm_retries;
774	param.srq                        = cmd.srq;
775
776	ctx = ib_ucm_ctx_get(file, cmd.id);
777	if (!IS_ERR(ctx)) {
778		result = ib_send_cm_req(ctx->cm_id, &param);
779		ib_ucm_ctx_put(ctx);
780	} else
781		result = PTR_ERR(ctx);
782
783done:
784	kfree(param.private_data);
785	kfree(param.primary_path);
786	kfree(param.alternate_path);
787	return result;
788}
789
790static ssize_t ib_ucm_send_rep(struct ib_ucm_file *file,
791			       const char __user *inbuf,
792			       int in_len, int out_len)
793{
794	struct ib_cm_rep_param param;
795	struct ib_ucm_context *ctx;
796	struct ib_ucm_rep cmd;
797	int result;
798
799	param.private_data = NULL;
800
801	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
802		return -EFAULT;
803
804	result = ib_ucm_alloc_data(&param.private_data, cmd.data, cmd.len);
805	if (result)
806		return result;
807
808	param.qp_num              = cmd.qpn;
809	param.starting_psn        = cmd.psn;
810	param.private_data_len    = cmd.len;
811	param.responder_resources = cmd.responder_resources;
812	param.initiator_depth     = cmd.initiator_depth;
813	param.failover_accepted   = cmd.failover_accepted;
814	param.flow_control        = cmd.flow_control;
815	param.rnr_retry_count     = cmd.rnr_retry_count;
816	param.srq                 = cmd.srq;
817
818	ctx = ib_ucm_ctx_get(file, cmd.id);
819	if (!IS_ERR(ctx)) {
820		ctx->uid = cmd.uid;
821		result = ib_send_cm_rep(ctx->cm_id, &param);
822		ib_ucm_ctx_put(ctx);
823	} else
824		result = PTR_ERR(ctx);
825
826	kfree(param.private_data);
827	return result;
828}
829
830static ssize_t ib_ucm_send_private_data(struct ib_ucm_file *file,
831					const char __user *inbuf, int in_len,
832					int (*func)(struct ib_cm_id *cm_id,
833						    const void *private_data,
834						    u8 private_data_len))
835{
836	struct ib_ucm_private_data cmd;
837	struct ib_ucm_context *ctx;
838	const void *private_data = NULL;
839	int result;
840
841	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
842		return -EFAULT;
843
844	result = ib_ucm_alloc_data(&private_data, cmd.data, cmd.len);
845	if (result)
846		return result;
847
848	ctx = ib_ucm_ctx_get(file, cmd.id);
849	if (!IS_ERR(ctx)) {
850		result = func(ctx->cm_id, private_data, cmd.len);
851		ib_ucm_ctx_put(ctx);
852	} else
853		result = PTR_ERR(ctx);
854
855	kfree(private_data);
856	return result;
857}
858
859static ssize_t ib_ucm_send_rtu(struct ib_ucm_file *file,
860			       const char __user *inbuf,
861			       int in_len, int out_len)
862{
863	return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_rtu);
864}
865
866static ssize_t ib_ucm_send_dreq(struct ib_ucm_file *file,
867				const char __user *inbuf,
868				int in_len, int out_len)
869{
870	return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_dreq);
871}
872
873static ssize_t ib_ucm_send_drep(struct ib_ucm_file *file,
874				const char __user *inbuf,
875				int in_len, int out_len)
876{
877	return ib_ucm_send_private_data(file, inbuf, in_len, ib_send_cm_drep);
878}
879
880static ssize_t ib_ucm_send_info(struct ib_ucm_file *file,
881				const char __user *inbuf, int in_len,
882				int (*func)(struct ib_cm_id *cm_id,
883					    int status,
884					    const void *info,
885					    u8 info_len,
886					    const void *data,
887					    u8 data_len))
888{
889	struct ib_ucm_context *ctx;
890	struct ib_ucm_info cmd;
891	const void *data = NULL;
892	const void *info = NULL;
893	int result;
894
895	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
896		return -EFAULT;
897
898	result = ib_ucm_alloc_data(&data, cmd.data, cmd.data_len);
899	if (result)
900		goto done;
901
902	result = ib_ucm_alloc_data(&info, cmd.info, cmd.info_len);
903	if (result)
904		goto done;
905
906	ctx = ib_ucm_ctx_get(file, cmd.id);
907	if (!IS_ERR(ctx)) {
908		result = func(ctx->cm_id, cmd.status, info, cmd.info_len,
909			      data, cmd.data_len);
910		ib_ucm_ctx_put(ctx);
911	} else
912		result = PTR_ERR(ctx);
913
914done:
915	kfree(data);
916	kfree(info);
917	return result;
918}
919
920static ssize_t ib_ucm_send_rej(struct ib_ucm_file *file,
921			       const char __user *inbuf,
922			       int in_len, int out_len)
923{
924	return ib_ucm_send_info(file, inbuf, in_len, (void *)ib_send_cm_rej);
925}
926
927static ssize_t ib_ucm_send_apr(struct ib_ucm_file *file,
928			       const char __user *inbuf,
929			       int in_len, int out_len)
930{
931	return ib_ucm_send_info(file, inbuf, in_len, (void *)ib_send_cm_apr);
932}
933
934static ssize_t ib_ucm_send_mra(struct ib_ucm_file *file,
935			       const char __user *inbuf,
936			       int in_len, int out_len)
937{
938	struct ib_ucm_context *ctx;
939	struct ib_ucm_mra cmd;
940	const void *data = NULL;
941	int result;
942
943	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
944		return -EFAULT;
945
946	result = ib_ucm_alloc_data(&data, cmd.data, cmd.len);
947	if (result)
948		return result;
949
950	ctx = ib_ucm_ctx_get(file, cmd.id);
951	if (!IS_ERR(ctx)) {
952		result = ib_send_cm_mra(ctx->cm_id, cmd.timeout, data, cmd.len);
953		ib_ucm_ctx_put(ctx);
954	} else
955		result = PTR_ERR(ctx);
956
957	kfree(data);
958	return result;
959}
960
961static ssize_t ib_ucm_send_lap(struct ib_ucm_file *file,
962			       const char __user *inbuf,
963			       int in_len, int out_len)
964{
965	struct ib_ucm_context *ctx;
966	struct ib_sa_path_rec *path = NULL;
967	struct ib_ucm_lap cmd;
968	const void *data = NULL;
969	int result;
970
971	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
972		return -EFAULT;
973
974	result = ib_ucm_alloc_data(&data, cmd.data, cmd.len);
975	if (result)
976		goto done;
977
978	result = ib_ucm_path_get(&path, cmd.path);
979	if (result)
980		goto done;
981
982	ctx = ib_ucm_ctx_get(file, cmd.id);
983	if (!IS_ERR(ctx)) {
984		result = ib_send_cm_lap(ctx->cm_id, path, data, cmd.len);
985		ib_ucm_ctx_put(ctx);
986	} else
987		result = PTR_ERR(ctx);
988
989done:
990	kfree(data);
991	kfree(path);
992	return result;
993}
994
995static ssize_t ib_ucm_send_sidr_req(struct ib_ucm_file *file,
996				    const char __user *inbuf,
997				    int in_len, int out_len)
998{
999	struct ib_cm_sidr_req_param param;
1000	struct ib_ucm_context *ctx;
1001	struct ib_ucm_sidr_req cmd;
1002	int result;
1003
1004	param.private_data = NULL;
1005	param.path = NULL;
1006
1007	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
1008		return -EFAULT;
1009
1010	result = ib_ucm_alloc_data(&param.private_data, cmd.data, cmd.len);
1011	if (result)
1012		goto done;
1013
1014	result = ib_ucm_path_get(&param.path, cmd.path);
1015	if (result)
1016		goto done;
1017
1018	param.private_data_len = cmd.len;
1019	param.service_id       = cmd.sid;
1020	param.timeout_ms       = cmd.timeout;
1021	param.max_cm_retries   = cmd.max_cm_retries;
1022
1023	ctx = ib_ucm_ctx_get(file, cmd.id);
1024	if (!IS_ERR(ctx)) {
1025		result = ib_send_cm_sidr_req(ctx->cm_id, &param);
1026		ib_ucm_ctx_put(ctx);
1027	} else
1028		result = PTR_ERR(ctx);
1029
1030done:
1031	kfree(param.private_data);
1032	kfree(param.path);
1033	return result;
1034}
1035
1036static ssize_t ib_ucm_send_sidr_rep(struct ib_ucm_file *file,
1037				    const char __user *inbuf,
1038				    int in_len, int out_len)
1039{
1040	struct ib_cm_sidr_rep_param param;
1041	struct ib_ucm_sidr_rep cmd;
1042	struct ib_ucm_context *ctx;
1043	int result;
1044
1045	param.info = NULL;
1046
1047	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
1048		return -EFAULT;
1049
1050	result = ib_ucm_alloc_data(&param.private_data,
1051				   cmd.data, cmd.data_len);
1052	if (result)
1053		goto done;
1054
1055	result = ib_ucm_alloc_data(&param.info, cmd.info, cmd.info_len);
1056	if (result)
1057		goto done;
1058
1059	param.qp_num		= cmd.qpn;
1060	param.qkey		= cmd.qkey;
1061	param.status		= cmd.status;
1062	param.info_length	= cmd.info_len;
1063	param.private_data_len	= cmd.data_len;
1064
1065	ctx = ib_ucm_ctx_get(file, cmd.id);
1066	if (!IS_ERR(ctx)) {
1067		result = ib_send_cm_sidr_rep(ctx->cm_id, &param);
1068		ib_ucm_ctx_put(ctx);
1069	} else
1070		result = PTR_ERR(ctx);
1071
1072done:
1073	kfree(param.private_data);
1074	kfree(param.info);
1075	return result;
1076}
1077
1078static ssize_t (*ucm_cmd_table[])(struct ib_ucm_file *file,
1079				  const char __user *inbuf,
1080				  int in_len, int out_len) = {
1081	[IB_USER_CM_CMD_CREATE_ID]     = ib_ucm_create_id,
1082	[IB_USER_CM_CMD_DESTROY_ID]    = ib_ucm_destroy_id,
1083	[IB_USER_CM_CMD_ATTR_ID]       = ib_ucm_attr_id,
1084	[IB_USER_CM_CMD_LISTEN]        = ib_ucm_listen,
1085	[IB_USER_CM_CMD_NOTIFY]        = ib_ucm_notify,
1086	[IB_USER_CM_CMD_SEND_REQ]      = ib_ucm_send_req,
1087	[IB_USER_CM_CMD_SEND_REP]      = ib_ucm_send_rep,
1088	[IB_USER_CM_CMD_SEND_RTU]      = ib_ucm_send_rtu,
1089	[IB_USER_CM_CMD_SEND_DREQ]     = ib_ucm_send_dreq,
1090	[IB_USER_CM_CMD_SEND_DREP]     = ib_ucm_send_drep,
1091	[IB_USER_CM_CMD_SEND_REJ]      = ib_ucm_send_rej,
1092	[IB_USER_CM_CMD_SEND_MRA]      = ib_ucm_send_mra,
1093	[IB_USER_CM_CMD_SEND_LAP]      = ib_ucm_send_lap,
1094	[IB_USER_CM_CMD_SEND_APR]      = ib_ucm_send_apr,
1095	[IB_USER_CM_CMD_SEND_SIDR_REQ] = ib_ucm_send_sidr_req,
1096	[IB_USER_CM_CMD_SEND_SIDR_REP] = ib_ucm_send_sidr_rep,
1097	[IB_USER_CM_CMD_EVENT]	       = ib_ucm_event,
1098	[IB_USER_CM_CMD_INIT_QP_ATTR]  = ib_ucm_init_qp_attr,
1099};
1100
1101static ssize_t ib_ucm_write(struct file *filp, const char __user *buf,
1102			    size_t len, loff_t *pos)
1103{
1104	struct ib_ucm_file *file = filp->private_data;
1105	struct ib_ucm_cmd_hdr hdr;
1106	ssize_t result;
1107
1108	if (WARN_ON_ONCE(!ib_safe_file_access(filp)))
1109		return -EACCES;
1110
1111	if (len < sizeof(hdr))
1112		return -EINVAL;
1113
1114	if (copy_from_user(&hdr, buf, sizeof(hdr)))
1115		return -EFAULT;
1116
1117	if (hdr.cmd >= ARRAY_SIZE(ucm_cmd_table))
1118		return -EINVAL;
1119
1120	if (hdr.in + sizeof(hdr) > len)
1121		return -EINVAL;
1122
1123	result = ucm_cmd_table[hdr.cmd](file, buf + sizeof(hdr),
1124					hdr.in, hdr.out);
1125	if (!result)
1126		result = len;
1127
1128	return result;
1129}
1130
1131static unsigned int ib_ucm_poll(struct file *filp,
1132				struct poll_table_struct *wait)
1133{
1134	struct ib_ucm_file *file = filp->private_data;
1135	unsigned int mask = 0;
1136
1137	poll_wait(filp, &file->poll_wait, wait);
1138
1139	if (!list_empty(&file->events))
1140		mask = POLLIN | POLLRDNORM;
1141
1142	return mask;
1143}
1144
1145/*
1146 * ib_ucm_open() does not need the BKL:
1147 *
1148 *  - no global state is referred to;
1149 *  - there is no ioctl method to race against;
1150 *  - no further module initialization is required for open to work
1151 *    after the device is registered.
1152 */
1153static int ib_ucm_open(struct inode *inode, struct file *filp)
1154{
1155	struct ib_ucm_file *file;
1156
1157	file = kmalloc(sizeof(*file), GFP_KERNEL);
1158	if (!file)
1159		return -ENOMEM;
1160
1161	INIT_LIST_HEAD(&file->events);
1162	INIT_LIST_HEAD(&file->ctxs);
1163	init_waitqueue_head(&file->poll_wait);
1164
1165	mutex_init(&file->file_mutex);
1166
1167	filp->private_data = file;
1168	file->filp = filp;
1169	file->device = container_of(inode->i_cdev, struct ib_ucm_device, cdev);
1170
1171	return nonseekable_open(inode, filp);
1172}
1173
1174static int ib_ucm_close(struct inode *inode, struct file *filp)
1175{
1176	struct ib_ucm_file *file = filp->private_data;
1177	struct ib_ucm_context *ctx;
1178
1179	mutex_lock(&file->file_mutex);
1180	while (!list_empty(&file->ctxs)) {
1181		ctx = list_entry(file->ctxs.next,
1182				 struct ib_ucm_context, file_list);
1183		mutex_unlock(&file->file_mutex);
1184
1185		mutex_lock(&ctx_id_mutex);
1186		idr_remove(&ctx_id_table, ctx->id);
1187		mutex_unlock(&ctx_id_mutex);
1188
1189		ib_destroy_cm_id(ctx->cm_id);
1190		ib_ucm_cleanup_events(ctx);
1191		kfree(ctx);
1192
1193		mutex_lock(&file->file_mutex);
1194	}
1195	mutex_unlock(&file->file_mutex);
1196	kfree(file);
1197	return 0;
1198}
1199
1200static void ib_ucm_release_dev(struct device *dev)
1201{
1202	struct ib_ucm_device *ucm_dev;
1203
1204	ucm_dev = container_of(dev, struct ib_ucm_device, dev);
1205	cdev_del(&ucm_dev->cdev);
1206	if (ucm_dev->devnum < IB_UCM_MAX_DEVICES)
1207		clear_bit(ucm_dev->devnum, dev_map);
1208	else
1209		clear_bit(ucm_dev->devnum - IB_UCM_MAX_DEVICES, dev_map);
1210	kfree(ucm_dev);
1211}
1212
1213static const struct file_operations ucm_fops = {
1214	.owner	 = THIS_MODULE,
1215	.open	 = ib_ucm_open,
1216	.release = ib_ucm_close,
1217	.write	 = ib_ucm_write,
1218	.poll    = ib_ucm_poll,
1219	.llseek	 = no_llseek,
1220};
1221
1222static ssize_t show_ibdev(struct device *dev, struct device_attribute *attr,
1223			  char *buf)
1224{
1225	struct ib_ucm_device *ucm_dev;
1226
1227	ucm_dev = container_of(dev, struct ib_ucm_device, dev);
1228	return sprintf(buf, "%s\n", ucm_dev->ib_dev->name);
1229}
1230static DEVICE_ATTR(ibdev, S_IRUGO, show_ibdev, NULL);
1231
1232static dev_t overflow_maj;
1233static DECLARE_BITMAP(overflow_map, IB_UCM_MAX_DEVICES);
1234static int find_overflow_devnum(void)
1235{
1236	int ret;
1237
1238	if (!overflow_maj) {
1239		ret = alloc_chrdev_region(&overflow_maj, 0, IB_UCM_MAX_DEVICES,
1240					  "infiniband_cm");
1241		if (ret) {
1242			printk(KERN_ERR "ucm: couldn't register dynamic device number\n");
1243			return ret;
1244		}
1245	}
1246
1247	ret = find_first_zero_bit(overflow_map, IB_UCM_MAX_DEVICES);
1248	if (ret >= IB_UCM_MAX_DEVICES)
1249		return -1;
1250
1251	return ret;
1252}
1253
1254static void ib_ucm_add_one(struct ib_device *device)
1255{
1256	int devnum;
1257	dev_t base;
1258	struct ib_ucm_device *ucm_dev;
1259
1260	if (!device->alloc_ucontext ||
1261	    rdma_node_get_transport(device->node_type) != RDMA_TRANSPORT_IB)
1262		return;
1263
1264	ucm_dev = kzalloc(sizeof *ucm_dev, GFP_KERNEL);
1265	if (!ucm_dev)
1266		return;
1267
1268	ucm_dev->ib_dev = device;
1269
1270	devnum = find_first_zero_bit(dev_map, IB_UCM_MAX_DEVICES);
1271	if (devnum >= IB_UCM_MAX_DEVICES) {
1272		devnum = find_overflow_devnum();
1273		if (devnum < 0)
1274			goto err;
1275
1276		ucm_dev->devnum = devnum + IB_UCM_MAX_DEVICES;
1277		base = devnum + overflow_maj;
1278		set_bit(devnum, overflow_map);
1279	} else {
1280		ucm_dev->devnum = devnum;
1281		base = devnum + IB_UCM_BASE_DEV;
1282		set_bit(devnum, dev_map);
1283	}
1284
1285	cdev_init(&ucm_dev->cdev, &ucm_fops);
1286	ucm_dev->cdev.owner = THIS_MODULE;
1287	kobject_set_name(&ucm_dev->cdev.kobj, "ucm%d", ucm_dev->devnum);
1288	if (cdev_add(&ucm_dev->cdev, base, 1))
1289		goto err;
1290
1291	ucm_dev->dev.class = &cm_class;
1292	ucm_dev->dev.parent = device->dma_device;
1293	ucm_dev->dev.devt = ucm_dev->cdev.dev;
1294	ucm_dev->dev.release = ib_ucm_release_dev;
1295	dev_set_name(&ucm_dev->dev, "ucm%d", ucm_dev->devnum);
1296	if (device_register(&ucm_dev->dev))
1297		goto err_cdev;
1298
1299	if (device_create_file(&ucm_dev->dev, &dev_attr_ibdev))
1300		goto err_dev;
1301
1302	ib_set_client_data(device, &ucm_client, ucm_dev);
1303	return;
1304
1305err_dev:
1306	device_unregister(&ucm_dev->dev);
1307err_cdev:
1308	cdev_del(&ucm_dev->cdev);
1309	if (ucm_dev->devnum < IB_UCM_MAX_DEVICES)
1310		clear_bit(devnum, dev_map);
1311	else
1312		clear_bit(devnum, overflow_map);
1313err:
1314	kfree(ucm_dev);
1315	return;
1316}
1317
1318static void ib_ucm_remove_one(struct ib_device *device)
1319{
1320	struct ib_ucm_device *ucm_dev = ib_get_client_data(device, &ucm_client);
1321
1322	if (!ucm_dev)
1323		return;
1324
1325	device_unregister(&ucm_dev->dev);
1326}
1327
1328static CLASS_ATTR_STRING(abi_version, S_IRUGO,
1329			 __stringify(IB_USER_CM_ABI_VERSION));
1330
1331static int __init ib_ucm_init(void)
1332{
1333	int ret;
1334
1335	ret = register_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES,
1336				     "infiniband_cm");
1337	if (ret) {
1338		printk(KERN_ERR "ucm: couldn't register device number\n");
1339		goto error1;
1340	}
1341
1342	ret = class_create_file(&cm_class, &class_attr_abi_version.attr);
1343	if (ret) {
1344		printk(KERN_ERR "ucm: couldn't create abi_version attribute\n");
1345		goto error2;
1346	}
1347
1348	ret = ib_register_client(&ucm_client);
1349	if (ret) {
1350		printk(KERN_ERR "ucm: couldn't register client\n");
1351		goto error3;
1352	}
1353	return 0;
1354
1355error3:
1356	class_remove_file(&cm_class, &class_attr_abi_version.attr);
1357error2:
1358	unregister_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES);
1359error1:
1360	return ret;
1361}
1362
1363static void __exit ib_ucm_cleanup(void)
1364{
1365	ib_unregister_client(&ucm_client);
1366	class_remove_file(&cm_class, &class_attr_abi_version.attr);
1367	unregister_chrdev_region(IB_UCM_BASE_DEV, IB_UCM_MAX_DEVICES);
1368	if (overflow_maj)
1369		unregister_chrdev_region(overflow_maj, IB_UCM_MAX_DEVICES);
1370	idr_destroy(&ctx_id_table);
1371}
1372
1373module_init(ib_ucm_init);
1374module_exit(ib_ucm_cleanup);
1375