Back to home page

OSCL-LXR

 
 

    


0001 // SPDX-License-Identifier: GPL-2.0
0002 /*
0003  * Functions for working with device tree overlays
0004  *
0005  * Copyright (C) 2012 Pantelis Antoniou <panto@antoniou-consulting.com>
0006  * Copyright (C) 2012 Texas Instruments Inc.
0007  */
0008 
0009 #define pr_fmt(fmt) "OF: overlay: " fmt
0010 
0011 #include <linux/kernel.h>
0012 #include <linux/module.h>
0013 #include <linux/of.h>
0014 #include <linux/of_device.h>
0015 #include <linux/of_fdt.h>
0016 #include <linux/string.h>
0017 #include <linux/ctype.h>
0018 #include <linux/errno.h>
0019 #include <linux/slab.h>
0020 #include <linux/libfdt.h>
0021 #include <linux/err.h>
0022 #include <linux/idr.h>
0023 
0024 #include "of_private.h"
0025 
0026 /**
0027  * struct target - info about current target node as recursing through overlay
0028  * @np:         node where current level of overlay will be applied
0029  * @in_livetree:    @np is a node in the live devicetree
0030  *
0031  * Used in the algorithm to create the portion of a changeset that describes
0032  * an overlay fragment, which is a devicetree subtree.  Initially @np is a node
0033  * in the live devicetree where the overlay subtree is targeted to be grafted
0034  * into.  When recursing to the next level of the overlay subtree, the target
0035  * also recurses to the next level of the live devicetree, as long as overlay
0036  * subtree node also exists in the live devicetree.  When a node in the overlay
0037  * subtree does not exist at the same level in the live devicetree, target->np
0038  * points to a newly allocated node, and all subsequent targets in the subtree
0039  * will be newly allocated nodes.
0040  */
0041 struct target {
0042     struct device_node *np;
0043     bool in_livetree;
0044 };
0045 
0046 /**
0047  * struct fragment - info about fragment nodes in overlay expanded device tree
0048  * @target: target of the overlay operation
0049  * @overlay:    pointer to the __overlay__ node
0050  */
0051 struct fragment {
0052     struct device_node *overlay;
0053     struct device_node *target;
0054 };
0055 
0056 /**
0057  * struct overlay_changeset
0058  * @id:         changeset identifier
0059  * @ovcs_list:      list on which we are located
0060  * @new_fdt:        Memory allocated to hold unflattened aligned FDT
0061  * @overlay_mem:    the memory chunk that contains @overlay_root
0062  * @overlay_root:   expanded device tree that contains the fragment nodes
0063  * @notify_state:   most recent notify action used on overlay
0064  * @count:      count of fragment structures
0065  * @fragments:      fragment nodes in the overlay expanded device tree
0066  * @symbols_fragment:   last element of @fragments[] is the  __symbols__ node
0067  * @cset:       changeset to apply fragments to live device tree
0068  */
0069 struct overlay_changeset {
0070     int id;
0071     struct list_head ovcs_list;
0072     const void *new_fdt;
0073     const void *overlay_mem;
0074     struct device_node *overlay_root;
0075     enum of_overlay_notify_action notify_state;
0076     int count;
0077     struct fragment *fragments;
0078     bool symbols_fragment;
0079     struct of_changeset cset;
0080 };
0081 
0082 /* flags are sticky - once set, do not reset */
0083 static int devicetree_state_flags;
0084 #define DTSF_APPLY_FAIL     0x01
0085 #define DTSF_REVERT_FAIL    0x02
0086 
0087 /*
0088  * If a changeset apply or revert encounters an error, an attempt will
0089  * be made to undo partial changes, but may fail.  If the undo fails
0090  * we do not know the state of the devicetree.
0091  */
0092 static int devicetree_corrupt(void)
0093 {
0094     return devicetree_state_flags &
0095         (DTSF_APPLY_FAIL | DTSF_REVERT_FAIL);
0096 }
0097 
0098 static int build_changeset_next_level(struct overlay_changeset *ovcs,
0099         struct target *target, const struct device_node *overlay_node);
0100 
0101 /*
0102  * of_resolve_phandles() finds the largest phandle in the live tree.
0103  * of_overlay_apply() may add a larger phandle to the live tree.
0104  * Do not allow race between two overlays being applied simultaneously:
0105  *    mutex_lock(&of_overlay_phandle_mutex)
0106  *    of_resolve_phandles()
0107  *    of_overlay_apply()
0108  *    mutex_unlock(&of_overlay_phandle_mutex)
0109  */
0110 static DEFINE_MUTEX(of_overlay_phandle_mutex);
0111 
0112 void of_overlay_mutex_lock(void)
0113 {
0114     mutex_lock(&of_overlay_phandle_mutex);
0115 }
0116 
0117 void of_overlay_mutex_unlock(void)
0118 {
0119     mutex_unlock(&of_overlay_phandle_mutex);
0120 }
0121 
0122 static LIST_HEAD(ovcs_list);
0123 static DEFINE_IDR(ovcs_idr);
0124 
0125 static BLOCKING_NOTIFIER_HEAD(overlay_notify_chain);
0126 
0127 /**
0128  * of_overlay_notifier_register() - Register notifier for overlay operations
0129  * @nb:     Notifier block to register
0130  *
0131  * Register for notification on overlay operations on device tree nodes. The
0132  * reported actions definied by @of_reconfig_change. The notifier callback
0133  * furthermore receives a pointer to the affected device tree node.
0134  *
0135  * Note that a notifier callback is not supposed to store pointers to a device
0136  * tree node or its content beyond @OF_OVERLAY_POST_REMOVE corresponding to the
0137  * respective node it received.
0138  */
0139 int of_overlay_notifier_register(struct notifier_block *nb)
0140 {
0141     return blocking_notifier_chain_register(&overlay_notify_chain, nb);
0142 }
0143 EXPORT_SYMBOL_GPL(of_overlay_notifier_register);
0144 
0145 /**
0146  * of_overlay_notifier_unregister() - Unregister notifier for overlay operations
0147  * @nb:     Notifier block to unregister
0148  */
0149 int of_overlay_notifier_unregister(struct notifier_block *nb)
0150 {
0151     return blocking_notifier_chain_unregister(&overlay_notify_chain, nb);
0152 }
0153 EXPORT_SYMBOL_GPL(of_overlay_notifier_unregister);
0154 
0155 static int overlay_notify(struct overlay_changeset *ovcs,
0156         enum of_overlay_notify_action action)
0157 {
0158     struct of_overlay_notify_data nd;
0159     int i, ret;
0160 
0161     ovcs->notify_state = action;
0162 
0163     for (i = 0; i < ovcs->count; i++) {
0164         struct fragment *fragment = &ovcs->fragments[i];
0165 
0166         nd.target = fragment->target;
0167         nd.overlay = fragment->overlay;
0168 
0169         ret = blocking_notifier_call_chain(&overlay_notify_chain,
0170                            action, &nd);
0171         if (notifier_to_errno(ret)) {
0172             ret = notifier_to_errno(ret);
0173             pr_err("overlay changeset %s notifier error %d, target: %pOF\n",
0174                    of_overlay_action_name(action), ret, nd.target);
0175             return ret;
0176         }
0177     }
0178 
0179     return 0;
0180 }
0181 
0182 /*
0183  * The values of properties in the "/__symbols__" node are paths in
0184  * the ovcs->overlay_root.  When duplicating the properties, the paths
0185  * need to be adjusted to be the correct path for the live device tree.
0186  *
0187  * The paths refer to a node in the subtree of a fragment node's "__overlay__"
0188  * node, for example "/fragment@0/__overlay__/symbol_path_tail",
0189  * where symbol_path_tail can be a single node or it may be a multi-node path.
0190  *
0191  * The duplicated property value will be modified by replacing the
0192  * "/fragment_name/__overlay/" portion of the value  with the target
0193  * path from the fragment node.
0194  */
0195 static struct property *dup_and_fixup_symbol_prop(
0196         struct overlay_changeset *ovcs, const struct property *prop)
0197 {
0198     struct fragment *fragment;
0199     struct property *new_prop;
0200     struct device_node *fragment_node;
0201     struct device_node *overlay_node;
0202     const char *path;
0203     const char *path_tail;
0204     const char *target_path;
0205     int k;
0206     int overlay_name_len;
0207     int path_len;
0208     int path_tail_len;
0209     int target_path_len;
0210 
0211     if (!prop->value)
0212         return NULL;
0213     if (strnlen(prop->value, prop->length) >= prop->length)
0214         return NULL;
0215     path = prop->value;
0216     path_len = strlen(path);
0217 
0218     if (path_len < 1)
0219         return NULL;
0220     fragment_node = __of_find_node_by_path(ovcs->overlay_root, path + 1);
0221     overlay_node = __of_find_node_by_path(fragment_node, "__overlay__/");
0222     of_node_put(fragment_node);
0223     of_node_put(overlay_node);
0224 
0225     for (k = 0; k < ovcs->count; k++) {
0226         fragment = &ovcs->fragments[k];
0227         if (fragment->overlay == overlay_node)
0228             break;
0229     }
0230     if (k >= ovcs->count)
0231         return NULL;
0232 
0233     overlay_name_len = snprintf(NULL, 0, "%pOF", fragment->overlay);
0234 
0235     if (overlay_name_len > path_len)
0236         return NULL;
0237     path_tail = path + overlay_name_len;
0238     path_tail_len = strlen(path_tail);
0239 
0240     target_path = kasprintf(GFP_KERNEL, "%pOF", fragment->target);
0241     if (!target_path)
0242         return NULL;
0243     target_path_len = strlen(target_path);
0244 
0245     new_prop = kzalloc(sizeof(*new_prop), GFP_KERNEL);
0246     if (!new_prop)
0247         goto err_free_target_path;
0248 
0249     new_prop->name = kstrdup(prop->name, GFP_KERNEL);
0250     new_prop->length = target_path_len + path_tail_len + 1;
0251     new_prop->value = kzalloc(new_prop->length, GFP_KERNEL);
0252     if (!new_prop->name || !new_prop->value)
0253         goto err_free_new_prop;
0254 
0255     strcpy(new_prop->value, target_path);
0256     strcpy(new_prop->value + target_path_len, path_tail);
0257 
0258     of_property_set_flag(new_prop, OF_DYNAMIC);
0259 
0260     kfree(target_path);
0261 
0262     return new_prop;
0263 
0264 err_free_new_prop:
0265     kfree(new_prop->name);
0266     kfree(new_prop->value);
0267     kfree(new_prop);
0268 err_free_target_path:
0269     kfree(target_path);
0270 
0271     return NULL;
0272 }
0273 
0274 /**
0275  * add_changeset_property() - add @overlay_prop to overlay changeset
0276  * @ovcs:       overlay changeset
0277  * @target:     where @overlay_prop will be placed
0278  * @overlay_prop:   property to add or update, from overlay tree
0279  * @is_symbols_prop:    1 if @overlay_prop is from node "/__symbols__"
0280  *
0281  * If @overlay_prop does not already exist in live devicetree, add changeset
0282  * entry to add @overlay_prop in @target, else add changeset entry to update
0283  * value of @overlay_prop.
0284  *
0285  * @target may be either in the live devicetree or in a new subtree that
0286  * is contained in the changeset.
0287  *
0288  * Some special properties are not added or updated (no error returned):
0289  * "name", "phandle", "linux,phandle".
0290  *
0291  * Properties "#address-cells" and "#size-cells" are not updated if they
0292  * are already in the live tree, but if present in the live tree, the values
0293  * in the overlay must match the values in the live tree.
0294  *
0295  * Update of property in symbols node is not allowed.
0296  *
0297  * Return: 0 on success, -ENOMEM if memory allocation failure, or -EINVAL if
0298  * invalid @overlay.
0299  */
0300 static int add_changeset_property(struct overlay_changeset *ovcs,
0301         struct target *target, struct property *overlay_prop,
0302         bool is_symbols_prop)
0303 {
0304     struct property *new_prop = NULL, *prop;
0305     int ret = 0;
0306 
0307     if (target->in_livetree)
0308         if (!of_prop_cmp(overlay_prop->name, "name") ||
0309             !of_prop_cmp(overlay_prop->name, "phandle") ||
0310             !of_prop_cmp(overlay_prop->name, "linux,phandle"))
0311             return 0;
0312 
0313     if (target->in_livetree)
0314         prop = of_find_property(target->np, overlay_prop->name, NULL);
0315     else
0316         prop = NULL;
0317 
0318     if (prop) {
0319         if (!of_prop_cmp(prop->name, "#address-cells")) {
0320             if (!of_prop_val_eq(prop, overlay_prop)) {
0321                 pr_err("ERROR: changing value of #address-cells is not allowed in %pOF\n",
0322                        target->np);
0323                 ret = -EINVAL;
0324             }
0325             return ret;
0326 
0327         } else if (!of_prop_cmp(prop->name, "#size-cells")) {
0328             if (!of_prop_val_eq(prop, overlay_prop)) {
0329                 pr_err("ERROR: changing value of #size-cells is not allowed in %pOF\n",
0330                        target->np);
0331                 ret = -EINVAL;
0332             }
0333             return ret;
0334         }
0335     }
0336 
0337     if (is_symbols_prop) {
0338         if (prop)
0339             return -EINVAL;
0340         new_prop = dup_and_fixup_symbol_prop(ovcs, overlay_prop);
0341     } else {
0342         new_prop = __of_prop_dup(overlay_prop, GFP_KERNEL);
0343     }
0344 
0345     if (!new_prop)
0346         return -ENOMEM;
0347 
0348     if (!prop) {
0349         if (!target->in_livetree) {
0350             new_prop->next = target->np->deadprops;
0351             target->np->deadprops = new_prop;
0352         }
0353         ret = of_changeset_add_property(&ovcs->cset, target->np,
0354                         new_prop);
0355     } else {
0356         ret = of_changeset_update_property(&ovcs->cset, target->np,
0357                            new_prop);
0358     }
0359 
0360     if (!of_node_check_flag(target->np, OF_OVERLAY))
0361         pr_err("WARNING: memory leak will occur if overlay removed, property: %pOF/%s\n",
0362                target->np, new_prop->name);
0363 
0364     if (ret) {
0365         kfree(new_prop->name);
0366         kfree(new_prop->value);
0367         kfree(new_prop);
0368     }
0369     return ret;
0370 }
0371 
0372 /**
0373  * add_changeset_node() - add @node (and children) to overlay changeset
0374  * @ovcs:   overlay changeset
0375  * @target: where @node will be placed in live tree or changeset
0376  * @node:   node from within overlay device tree fragment
0377  *
0378  * If @node does not already exist in @target, add changeset entry
0379  * to add @node in @target.
0380  *
0381  * If @node already exists in @target, and the existing node has
0382  * a phandle, the overlay node is not allowed to have a phandle.
0383  *
0384  * If @node has child nodes, add the children recursively via
0385  * build_changeset_next_level().
0386  *
0387  * NOTE_1: A live devicetree created from a flattened device tree (FDT) will
0388  *       not contain the full path in node->full_name.  Thus an overlay
0389  *       created from an FDT also will not contain the full path in
0390  *       node->full_name.  However, a live devicetree created from Open
0391  *       Firmware may have the full path in node->full_name.
0392  *
0393  *       add_changeset_node() follows the FDT convention and does not include
0394  *       the full path in node->full_name.  Even though it expects the overlay
0395  *       to not contain the full path, it uses kbasename() to remove the
0396  *       full path should it exist.  It also uses kbasename() in comparisons
0397  *       to nodes in the live devicetree so that it can apply an overlay to
0398  *       a live devicetree created from Open Firmware.
0399  *
0400  * NOTE_2: Multiple mods of created nodes not supported.
0401  *
0402  * Return: 0 on success, -ENOMEM if memory allocation failure, or -EINVAL if
0403  * invalid @overlay.
0404  */
0405 static int add_changeset_node(struct overlay_changeset *ovcs,
0406         struct target *target, struct device_node *node)
0407 {
0408     const char *node_kbasename;
0409     const __be32 *phandle;
0410     struct device_node *tchild;
0411     struct target target_child;
0412     int ret = 0, size;
0413 
0414     node_kbasename = kbasename(node->full_name);
0415 
0416     for_each_child_of_node(target->np, tchild)
0417         if (!of_node_cmp(node_kbasename, kbasename(tchild->full_name)))
0418             break;
0419 
0420     if (!tchild) {
0421         tchild = __of_node_dup(NULL, node_kbasename);
0422         if (!tchild)
0423             return -ENOMEM;
0424 
0425         tchild->parent = target->np;
0426         tchild->name = __of_get_property(node, "name", NULL);
0427 
0428         if (!tchild->name)
0429             tchild->name = "<NULL>";
0430 
0431         /* ignore obsolete "linux,phandle" */
0432         phandle = __of_get_property(node, "phandle", &size);
0433         if (phandle && (size == 4))
0434             tchild->phandle = be32_to_cpup(phandle);
0435 
0436         of_node_set_flag(tchild, OF_OVERLAY);
0437 
0438         ret = of_changeset_attach_node(&ovcs->cset, tchild);
0439         if (ret)
0440             return ret;
0441 
0442         target_child.np = tchild;
0443         target_child.in_livetree = false;
0444 
0445         ret = build_changeset_next_level(ovcs, &target_child, node);
0446         of_node_put(tchild);
0447         return ret;
0448     }
0449 
0450     if (node->phandle && tchild->phandle) {
0451         ret = -EINVAL;
0452     } else {
0453         target_child.np = tchild;
0454         target_child.in_livetree = target->in_livetree;
0455         ret = build_changeset_next_level(ovcs, &target_child, node);
0456     }
0457     of_node_put(tchild);
0458 
0459     return ret;
0460 }
0461 
0462 /**
0463  * build_changeset_next_level() - add level of overlay changeset
0464  * @ovcs:       overlay changeset
0465  * @target:     where to place @overlay_node in live tree
0466  * @overlay_node:   node from within an overlay device tree fragment
0467  *
0468  * Add the properties (if any) and nodes (if any) from @overlay_node to the
0469  * @ovcs->cset changeset.  If an added node has child nodes, they will
0470  * be added recursively.
0471  *
0472  * Do not allow symbols node to have any children.
0473  *
0474  * Return: 0 on success, -ENOMEM if memory allocation failure, or -EINVAL if
0475  * invalid @overlay_node.
0476  */
0477 static int build_changeset_next_level(struct overlay_changeset *ovcs,
0478         struct target *target, const struct device_node *overlay_node)
0479 {
0480     struct device_node *child;
0481     struct property *prop;
0482     int ret;
0483 
0484     for_each_property_of_node(overlay_node, prop) {
0485         ret = add_changeset_property(ovcs, target, prop, 0);
0486         if (ret) {
0487             pr_debug("Failed to apply prop @%pOF/%s, err=%d\n",
0488                  target->np, prop->name, ret);
0489             return ret;
0490         }
0491     }
0492 
0493     for_each_child_of_node(overlay_node, child) {
0494         ret = add_changeset_node(ovcs, target, child);
0495         if (ret) {
0496             pr_debug("Failed to apply node @%pOF/%pOFn, err=%d\n",
0497                  target->np, child, ret);
0498             of_node_put(child);
0499             return ret;
0500         }
0501     }
0502 
0503     return 0;
0504 }
0505 
0506 /*
0507  * Add the properties from __overlay__ node to the @ovcs->cset changeset.
0508  */
0509 static int build_changeset_symbols_node(struct overlay_changeset *ovcs,
0510         struct target *target,
0511         const struct device_node *overlay_symbols_node)
0512 {
0513     struct property *prop;
0514     int ret;
0515 
0516     for_each_property_of_node(overlay_symbols_node, prop) {
0517         ret = add_changeset_property(ovcs, target, prop, 1);
0518         if (ret) {
0519             pr_debug("Failed to apply symbols prop @%pOF/%s, err=%d\n",
0520                  target->np, prop->name, ret);
0521             return ret;
0522         }
0523     }
0524 
0525     return 0;
0526 }
0527 
0528 static int find_dup_cset_node_entry(struct overlay_changeset *ovcs,
0529         struct of_changeset_entry *ce_1)
0530 {
0531     struct of_changeset_entry *ce_2;
0532     char *fn_1, *fn_2;
0533     int node_path_match;
0534 
0535     if (ce_1->action != OF_RECONFIG_ATTACH_NODE &&
0536         ce_1->action != OF_RECONFIG_DETACH_NODE)
0537         return 0;
0538 
0539     ce_2 = ce_1;
0540     list_for_each_entry_continue(ce_2, &ovcs->cset.entries, node) {
0541         if ((ce_2->action != OF_RECONFIG_ATTACH_NODE &&
0542              ce_2->action != OF_RECONFIG_DETACH_NODE) ||
0543             of_node_cmp(ce_1->np->full_name, ce_2->np->full_name))
0544             continue;
0545 
0546         fn_1 = kasprintf(GFP_KERNEL, "%pOF", ce_1->np);
0547         fn_2 = kasprintf(GFP_KERNEL, "%pOF", ce_2->np);
0548         node_path_match = !strcmp(fn_1, fn_2);
0549         kfree(fn_1);
0550         kfree(fn_2);
0551         if (node_path_match) {
0552             pr_err("ERROR: multiple fragments add and/or delete node %pOF\n",
0553                    ce_1->np);
0554             return -EINVAL;
0555         }
0556     }
0557 
0558     return 0;
0559 }
0560 
0561 static int find_dup_cset_prop(struct overlay_changeset *ovcs,
0562         struct of_changeset_entry *ce_1)
0563 {
0564     struct of_changeset_entry *ce_2;
0565     char *fn_1, *fn_2;
0566     int node_path_match;
0567 
0568     if (ce_1->action != OF_RECONFIG_ADD_PROPERTY &&
0569         ce_1->action != OF_RECONFIG_REMOVE_PROPERTY &&
0570         ce_1->action != OF_RECONFIG_UPDATE_PROPERTY)
0571         return 0;
0572 
0573     ce_2 = ce_1;
0574     list_for_each_entry_continue(ce_2, &ovcs->cset.entries, node) {
0575         if ((ce_2->action != OF_RECONFIG_ADD_PROPERTY &&
0576              ce_2->action != OF_RECONFIG_REMOVE_PROPERTY &&
0577              ce_2->action != OF_RECONFIG_UPDATE_PROPERTY) ||
0578             of_node_cmp(ce_1->np->full_name, ce_2->np->full_name))
0579             continue;
0580 
0581         fn_1 = kasprintf(GFP_KERNEL, "%pOF", ce_1->np);
0582         fn_2 = kasprintf(GFP_KERNEL, "%pOF", ce_2->np);
0583         node_path_match = !strcmp(fn_1, fn_2);
0584         kfree(fn_1);
0585         kfree(fn_2);
0586         if (node_path_match &&
0587             !of_prop_cmp(ce_1->prop->name, ce_2->prop->name)) {
0588             pr_err("ERROR: multiple fragments add, update, and/or delete property %pOF/%s\n",
0589                    ce_1->np, ce_1->prop->name);
0590             return -EINVAL;
0591         }
0592     }
0593 
0594     return 0;
0595 }
0596 
0597 /**
0598  * changeset_dup_entry_check() - check for duplicate entries
0599  * @ovcs:   Overlay changeset
0600  *
0601  * Check changeset @ovcs->cset for multiple {add or delete} node entries for
0602  * the same node or duplicate {add, delete, or update} properties entries
0603  * for the same property.
0604  *
0605  * Return: 0 on success, or -EINVAL if duplicate changeset entry found.
0606  */
0607 static int changeset_dup_entry_check(struct overlay_changeset *ovcs)
0608 {
0609     struct of_changeset_entry *ce_1;
0610     int dup_entry = 0;
0611 
0612     list_for_each_entry(ce_1, &ovcs->cset.entries, node) {
0613         dup_entry |= find_dup_cset_node_entry(ovcs, ce_1);
0614         dup_entry |= find_dup_cset_prop(ovcs, ce_1);
0615     }
0616 
0617     return dup_entry ? -EINVAL : 0;
0618 }
0619 
0620 /**
0621  * build_changeset() - populate overlay changeset in @ovcs from @ovcs->fragments
0622  * @ovcs:   Overlay changeset
0623  *
0624  * Create changeset @ovcs->cset to contain the nodes and properties of the
0625  * overlay device tree fragments in @ovcs->fragments[].  If an error occurs,
0626  * any portions of the changeset that were successfully created will remain
0627  * in @ovcs->cset.
0628  *
0629  * Return: 0 on success, -ENOMEM if memory allocation failure, or -EINVAL if
0630  * invalid overlay in @ovcs->fragments[].
0631  */
0632 static int build_changeset(struct overlay_changeset *ovcs)
0633 {
0634     struct fragment *fragment;
0635     struct target target;
0636     int fragments_count, i, ret;
0637 
0638     /*
0639      * if there is a symbols fragment in ovcs->fragments[i] it is
0640      * the final element in the array
0641      */
0642     if (ovcs->symbols_fragment)
0643         fragments_count = ovcs->count - 1;
0644     else
0645         fragments_count = ovcs->count;
0646 
0647     for (i = 0; i < fragments_count; i++) {
0648         fragment = &ovcs->fragments[i];
0649 
0650         target.np = fragment->target;
0651         target.in_livetree = true;
0652         ret = build_changeset_next_level(ovcs, &target,
0653                          fragment->overlay);
0654         if (ret) {
0655             pr_debug("fragment apply failed '%pOF'\n",
0656                  fragment->target);
0657             return ret;
0658         }
0659     }
0660 
0661     if (ovcs->symbols_fragment) {
0662         fragment = &ovcs->fragments[ovcs->count - 1];
0663 
0664         target.np = fragment->target;
0665         target.in_livetree = true;
0666         ret = build_changeset_symbols_node(ovcs, &target,
0667                            fragment->overlay);
0668         if (ret) {
0669             pr_debug("symbols fragment apply failed '%pOF'\n",
0670                  fragment->target);
0671             return ret;
0672         }
0673     }
0674 
0675     return changeset_dup_entry_check(ovcs);
0676 }
0677 
0678 /*
0679  * Find the target node using a number of different strategies
0680  * in order of preference:
0681  *
0682  * 1) "target" property containing the phandle of the target
0683  * 2) "target-path" property containing the path of the target
0684  */
0685 static struct device_node *find_target(struct device_node *info_node)
0686 {
0687     struct device_node *node;
0688     const char *path;
0689     u32 val;
0690     int ret;
0691 
0692     ret = of_property_read_u32(info_node, "target", &val);
0693     if (!ret) {
0694         node = of_find_node_by_phandle(val);
0695         if (!node)
0696             pr_err("find target, node: %pOF, phandle 0x%x not found\n",
0697                    info_node, val);
0698         return node;
0699     }
0700 
0701     ret = of_property_read_string(info_node, "target-path", &path);
0702     if (!ret) {
0703         node =  of_find_node_by_path(path);
0704         if (!node)
0705             pr_err("find target, node: %pOF, path '%s' not found\n",
0706                    info_node, path);
0707         return node;
0708     }
0709 
0710     pr_err("find target, node: %pOF, no target property\n", info_node);
0711 
0712     return NULL;
0713 }
0714 
0715 /**
0716  * init_overlay_changeset() - initialize overlay changeset from overlay tree
0717  * @ovcs:       Overlay changeset to build
0718  *
0719  * Initialize @ovcs.  Populate @ovcs->fragments with node information from
0720  * the top level of @overlay_root.  The relevant top level nodes are the
0721  * fragment nodes and the __symbols__ node.  Any other top level node will
0722  * be ignored.  Populate other @ovcs fields.
0723  *
0724  * Return: 0 on success, -ENOMEM if memory allocation failure, -EINVAL if error
0725  * detected in @overlay_root.  On error return, the caller of
0726  * init_overlay_changeset() must call free_overlay_changeset().
0727  */
0728 static int init_overlay_changeset(struct overlay_changeset *ovcs)
0729 {
0730     struct device_node *node, *overlay_node;
0731     struct fragment *fragment;
0732     struct fragment *fragments;
0733     int cnt, ret;
0734 
0735     /*
0736      * None of the resources allocated by this function will be freed in
0737      * the error paths.  Instead the caller of this function is required
0738      * to call free_overlay_changeset() (which will free the resources)
0739      * if error return.
0740      */
0741 
0742     /*
0743      * Warn for some issues.  Can not return -EINVAL for these until
0744      * of_unittest_apply_overlay() is fixed to pass these checks.
0745      */
0746     if (!of_node_check_flag(ovcs->overlay_root, OF_DYNAMIC))
0747         pr_debug("%s() ovcs->overlay_root is not dynamic\n", __func__);
0748 
0749     if (!of_node_check_flag(ovcs->overlay_root, OF_DETACHED))
0750         pr_debug("%s() ovcs->overlay_root is not detached\n", __func__);
0751 
0752     if (!of_node_is_root(ovcs->overlay_root))
0753         pr_debug("%s() ovcs->overlay_root is not root\n", __func__);
0754 
0755     of_changeset_init(&ovcs->cset);
0756 
0757     cnt = 0;
0758 
0759     /* fragment nodes */
0760     for_each_child_of_node(ovcs->overlay_root, node) {
0761         overlay_node = of_get_child_by_name(node, "__overlay__");
0762         if (overlay_node) {
0763             cnt++;
0764             of_node_put(overlay_node);
0765         }
0766     }
0767 
0768     node = of_get_child_by_name(ovcs->overlay_root, "__symbols__");
0769     if (node) {
0770         cnt++;
0771         of_node_put(node);
0772     }
0773 
0774     fragments = kcalloc(cnt, sizeof(*fragments), GFP_KERNEL);
0775     if (!fragments) {
0776         ret = -ENOMEM;
0777         goto err_out;
0778     }
0779     ovcs->fragments = fragments;
0780 
0781     cnt = 0;
0782     for_each_child_of_node(ovcs->overlay_root, node) {
0783         overlay_node = of_get_child_by_name(node, "__overlay__");
0784         if (!overlay_node)
0785             continue;
0786 
0787         fragment = &fragments[cnt];
0788         fragment->overlay = overlay_node;
0789         fragment->target = find_target(node);
0790         if (!fragment->target) {
0791             of_node_put(fragment->overlay);
0792             ret = -EINVAL;
0793             of_node_put(node);
0794             goto err_out;
0795         }
0796 
0797         cnt++;
0798     }
0799 
0800     /*
0801      * if there is a symbols fragment in ovcs->fragments[i] it is
0802      * the final element in the array
0803      */
0804     node = of_get_child_by_name(ovcs->overlay_root, "__symbols__");
0805     if (node) {
0806         ovcs->symbols_fragment = 1;
0807         fragment = &fragments[cnt];
0808         fragment->overlay = node;
0809         fragment->target = of_find_node_by_path("/__symbols__");
0810 
0811         if (!fragment->target) {
0812             pr_err("symbols in overlay, but not in live tree\n");
0813             ret = -EINVAL;
0814             goto err_out;
0815         }
0816 
0817         cnt++;
0818     }
0819 
0820     if (!cnt) {
0821         pr_err("no fragments or symbols in overlay\n");
0822         ret = -EINVAL;
0823         goto err_out;
0824     }
0825 
0826     ovcs->count = cnt;
0827 
0828     return 0;
0829 
0830 err_out:
0831     pr_err("%s() failed, ret = %d\n", __func__, ret);
0832 
0833     return ret;
0834 }
0835 
0836 static void free_overlay_changeset(struct overlay_changeset *ovcs)
0837 {
0838     int i;
0839 
0840     if (ovcs->cset.entries.next)
0841         of_changeset_destroy(&ovcs->cset);
0842 
0843     if (ovcs->id) {
0844         idr_remove(&ovcs_idr, ovcs->id);
0845         list_del(&ovcs->ovcs_list);
0846         ovcs->id = 0;
0847     }
0848 
0849 
0850     for (i = 0; i < ovcs->count; i++) {
0851         of_node_put(ovcs->fragments[i].target);
0852         of_node_put(ovcs->fragments[i].overlay);
0853     }
0854     kfree(ovcs->fragments);
0855 
0856     /*
0857      * There should be no live pointers into ovcs->overlay_mem and
0858      * ovcs->new_fdt due to the policy that overlay notifiers are not
0859      * allowed to retain pointers into the overlay devicetree other
0860      * than during the window from OF_OVERLAY_PRE_APPLY overlay
0861      * notifiers until the OF_OVERLAY_POST_REMOVE overlay notifiers.
0862      *
0863      * A memory leak will occur here if within the window.
0864      */
0865 
0866     if (ovcs->notify_state == OF_OVERLAY_INIT ||
0867         ovcs->notify_state == OF_OVERLAY_POST_REMOVE) {
0868         kfree(ovcs->overlay_mem);
0869         kfree(ovcs->new_fdt);
0870     }
0871     kfree(ovcs);
0872 }
0873 
0874 /*
0875  * internal documentation
0876  *
0877  * of_overlay_apply() - Create and apply an overlay changeset
0878  * @ovcs:   overlay changeset
0879  *
0880  * Creates and applies an overlay changeset.
0881  *
0882  * If an error is returned by an overlay changeset pre-apply notifier
0883  * then no further overlay changeset pre-apply notifier will be called.
0884  *
0885  * If an error is returned by an overlay changeset post-apply notifier
0886  * then no further overlay changeset post-apply notifier will be called.
0887  *
0888  * If more than one notifier returns an error, then the last notifier
0889  * error to occur is returned.
0890  *
0891  * If an error occurred while applying the overlay changeset, then an
0892  * attempt is made to revert any changes that were made to the
0893  * device tree.  If there were any errors during the revert attempt
0894  * then the state of the device tree can not be determined, and any
0895  * following attempt to apply or remove an overlay changeset will be
0896  * refused.
0897  *
0898  * Returns 0 on success, or a negative error number.  On error return,
0899  * the caller of of_overlay_apply() must call free_overlay_changeset().
0900  */
0901 
0902 static int of_overlay_apply(struct overlay_changeset *ovcs)
0903 {
0904     int ret = 0, ret_revert, ret_tmp;
0905 
0906     ret = of_resolve_phandles(ovcs->overlay_root);
0907     if (ret)
0908         goto out;
0909 
0910     ret = init_overlay_changeset(ovcs);
0911     if (ret)
0912         goto out;
0913 
0914     ret = overlay_notify(ovcs, OF_OVERLAY_PRE_APPLY);
0915     if (ret)
0916         goto out;
0917 
0918     ret = build_changeset(ovcs);
0919     if (ret)
0920         goto out;
0921 
0922     ret_revert = 0;
0923     ret = __of_changeset_apply_entries(&ovcs->cset, &ret_revert);
0924     if (ret) {
0925         if (ret_revert) {
0926             pr_debug("overlay changeset revert error %d\n",
0927                  ret_revert);
0928             devicetree_state_flags |= DTSF_APPLY_FAIL;
0929         }
0930         goto out;
0931     }
0932 
0933     ret = __of_changeset_apply_notify(&ovcs->cset);
0934     if (ret)
0935         pr_err("overlay apply changeset entry notify error %d\n", ret);
0936     /* notify failure is not fatal, continue */
0937 
0938     ret_tmp = overlay_notify(ovcs, OF_OVERLAY_POST_APPLY);
0939     if (ret_tmp)
0940         if (!ret)
0941             ret = ret_tmp;
0942 
0943 out:
0944     pr_debug("%s() err=%d\n", __func__, ret);
0945 
0946     return ret;
0947 }
0948 
0949 /*
0950  * of_overlay_fdt_apply() - Create and apply an overlay changeset
0951  * @overlay_fdt:    pointer to overlay FDT
0952  * @overlay_fdt_size:   number of bytes in @overlay_fdt
0953  * @ret_ovcs_id:    pointer for returning created changeset id
0954  *
0955  * Creates and applies an overlay changeset.
0956  *
0957  * See of_overlay_apply() for important behavior information.
0958  *
0959  * Return: 0 on success, or a negative error number.  *@ret_ovcs_id is set to
0960  * the value of overlay changeset id, which can be passed to of_overlay_remove()
0961  * to remove the overlay.
0962  *
0963  * On error return, the changeset may be partially applied.  This is especially
0964  * likely if an OF_OVERLAY_POST_APPLY notifier returns an error.  In this case
0965  * the caller should call of_overlay_remove() with the value in *@ret_ovcs_id.
0966  */
0967 
0968 int of_overlay_fdt_apply(const void *overlay_fdt, u32 overlay_fdt_size,
0969              int *ret_ovcs_id)
0970 {
0971     void *new_fdt;
0972     void *new_fdt_align;
0973     void *overlay_mem;
0974     int ret;
0975     u32 size;
0976     struct overlay_changeset *ovcs;
0977 
0978     *ret_ovcs_id = 0;
0979 
0980     if (devicetree_corrupt()) {
0981         pr_err("devicetree state suspect, refuse to apply overlay\n");
0982         return -EBUSY;
0983     }
0984 
0985     if (overlay_fdt_size < sizeof(struct fdt_header) ||
0986         fdt_check_header(overlay_fdt)) {
0987         pr_err("Invalid overlay_fdt header\n");
0988         return -EINVAL;
0989     }
0990 
0991     size = fdt_totalsize(overlay_fdt);
0992     if (overlay_fdt_size < size)
0993         return -EINVAL;
0994 
0995     ovcs = kzalloc(sizeof(*ovcs), GFP_KERNEL);
0996     if (!ovcs)
0997         return -ENOMEM;
0998 
0999     of_overlay_mutex_lock();
1000     mutex_lock(&of_mutex);
1001 
1002     /*
1003      * ovcs->notify_state must be set to OF_OVERLAY_INIT before allocating
1004      * ovcs resources, implicitly set by kzalloc() of ovcs
1005      */
1006 
1007     ovcs->id = idr_alloc(&ovcs_idr, ovcs, 1, 0, GFP_KERNEL);
1008     if (ovcs->id <= 0) {
1009         ret = ovcs->id;
1010         goto err_free_ovcs;
1011     }
1012 
1013     INIT_LIST_HEAD(&ovcs->ovcs_list);
1014     list_add_tail(&ovcs->ovcs_list, &ovcs_list);
1015 
1016     /*
1017      * Must create permanent copy of FDT because of_fdt_unflatten_tree()
1018      * will create pointers to the passed in FDT in the unflattened tree.
1019      */
1020     new_fdt = kmalloc(size + FDT_ALIGN_SIZE, GFP_KERNEL);
1021     if (!new_fdt) {
1022         ret = -ENOMEM;
1023         goto err_free_ovcs;
1024     }
1025     ovcs->new_fdt = new_fdt;
1026 
1027     new_fdt_align = PTR_ALIGN(new_fdt, FDT_ALIGN_SIZE);
1028     memcpy(new_fdt_align, overlay_fdt, size);
1029 
1030     overlay_mem = of_fdt_unflatten_tree(new_fdt_align, NULL,
1031                         &ovcs->overlay_root);
1032     if (!overlay_mem) {
1033         pr_err("unable to unflatten overlay_fdt\n");
1034         ret = -EINVAL;
1035         goto err_free_ovcs;
1036     }
1037     ovcs->overlay_mem = overlay_mem;
1038 
1039     ret = of_overlay_apply(ovcs);
1040     /*
1041      * If of_overlay_apply() error, calling free_overlay_changeset() may
1042      * result in a memory leak if the apply partly succeeded, so do NOT
1043      * goto err_free_ovcs.  Instead, the caller of of_overlay_fdt_apply()
1044      * can call of_overlay_remove();
1045      */
1046     *ret_ovcs_id = ovcs->id;
1047     goto out_unlock;
1048 
1049 err_free_ovcs:
1050     free_overlay_changeset(ovcs);
1051 
1052 out_unlock:
1053     mutex_unlock(&of_mutex);
1054     of_overlay_mutex_unlock();
1055     return ret;
1056 }
1057 EXPORT_SYMBOL_GPL(of_overlay_fdt_apply);
1058 
1059 /*
1060  * Find @np in @tree.
1061  *
1062  * Returns 1 if @np is @tree or is contained in @tree, else 0
1063  */
1064 static int find_node(struct device_node *tree, struct device_node *np)
1065 {
1066     struct device_node *child;
1067 
1068     if (tree == np)
1069         return 1;
1070 
1071     for_each_child_of_node(tree, child) {
1072         if (find_node(child, np)) {
1073             of_node_put(child);
1074             return 1;
1075         }
1076     }
1077 
1078     return 0;
1079 }
1080 
1081 /*
1082  * Is @remove_ce_node a child of, a parent of, or the same as any
1083  * node in an overlay changeset more topmost than @remove_ovcs?
1084  *
1085  * Returns 1 if found, else 0
1086  */
1087 static int node_overlaps_later_cs(struct overlay_changeset *remove_ovcs,
1088         struct device_node *remove_ce_node)
1089 {
1090     struct overlay_changeset *ovcs;
1091     struct of_changeset_entry *ce;
1092 
1093     list_for_each_entry_reverse(ovcs, &ovcs_list, ovcs_list) {
1094         if (ovcs == remove_ovcs)
1095             break;
1096 
1097         list_for_each_entry(ce, &ovcs->cset.entries, node) {
1098             if (find_node(ce->np, remove_ce_node)) {
1099                 pr_err("%s: #%d overlaps with #%d @%pOF\n",
1100                     __func__, remove_ovcs->id, ovcs->id,
1101                     remove_ce_node);
1102                 return 1;
1103             }
1104             if (find_node(remove_ce_node, ce->np)) {
1105                 pr_err("%s: #%d overlaps with #%d @%pOF\n",
1106                     __func__, remove_ovcs->id, ovcs->id,
1107                     remove_ce_node);
1108                 return 1;
1109             }
1110         }
1111     }
1112 
1113     return 0;
1114 }
1115 
1116 /*
1117  * We can safely remove the overlay only if it's the top-most one.
1118  * Newly applied overlays are inserted at the tail of the overlay list,
1119  * so a top most overlay is the one that is closest to the tail.
1120  *
1121  * The topmost check is done by exploiting this property. For each
1122  * affected device node in the log list we check if this overlay is
1123  * the one closest to the tail. If another overlay has affected this
1124  * device node and is closest to the tail, then removal is not permited.
1125  */
1126 static int overlay_removal_is_ok(struct overlay_changeset *remove_ovcs)
1127 {
1128     struct of_changeset_entry *remove_ce;
1129 
1130     list_for_each_entry(remove_ce, &remove_ovcs->cset.entries, node) {
1131         if (node_overlaps_later_cs(remove_ovcs, remove_ce->np)) {
1132             pr_err("overlay #%d is not topmost\n", remove_ovcs->id);
1133             return 0;
1134         }
1135     }
1136 
1137     return 1;
1138 }
1139 
1140 /**
1141  * of_overlay_remove() - Revert and free an overlay changeset
1142  * @ovcs_id:    Pointer to overlay changeset id
1143  *
1144  * Removes an overlay if it is permissible.  @ovcs_id was previously returned
1145  * by of_overlay_fdt_apply().
1146  *
1147  * If an error occurred while attempting to revert the overlay changeset,
1148  * then an attempt is made to re-apply any changeset entry that was
1149  * reverted.  If an error occurs on re-apply then the state of the device
1150  * tree can not be determined, and any following attempt to apply or remove
1151  * an overlay changeset will be refused.
1152  *
1153  * A non-zero return value will not revert the changeset if error is from:
1154  *   - parameter checks
1155  *   - overlay changeset pre-remove notifier
1156  *   - overlay changeset entry revert
1157  *
1158  * If an error is returned by an overlay changeset pre-remove notifier
1159  * then no further overlay changeset pre-remove notifier will be called.
1160  *
1161  * If more than one notifier returns an error, then the last notifier
1162  * error to occur is returned.
1163  *
1164  * A non-zero return value will revert the changeset if error is from:
1165  *   - overlay changeset entry notifier
1166  *   - overlay changeset post-remove notifier
1167  *
1168  * If an error is returned by an overlay changeset post-remove notifier
1169  * then no further overlay changeset post-remove notifier will be called.
1170  *
1171  * Return: 0 on success, or a negative error number.  *@ovcs_id is set to
1172  * zero after reverting the changeset, even if a subsequent error occurs.
1173  */
1174 int of_overlay_remove(int *ovcs_id)
1175 {
1176     struct overlay_changeset *ovcs;
1177     int ret, ret_apply, ret_tmp;
1178 
1179     if (devicetree_corrupt()) {
1180         pr_err("suspect devicetree state, refuse to remove overlay\n");
1181         ret = -EBUSY;
1182         goto out;
1183     }
1184 
1185     mutex_lock(&of_mutex);
1186 
1187     ovcs = idr_find(&ovcs_idr, *ovcs_id);
1188     if (!ovcs) {
1189         ret = -ENODEV;
1190         pr_err("remove: Could not find overlay #%d\n", *ovcs_id);
1191         goto err_unlock;
1192     }
1193 
1194     if (!overlay_removal_is_ok(ovcs)) {
1195         ret = -EBUSY;
1196         goto err_unlock;
1197     }
1198 
1199     ret = overlay_notify(ovcs, OF_OVERLAY_PRE_REMOVE);
1200     if (ret)
1201         goto err_unlock;
1202 
1203     ret_apply = 0;
1204     ret = __of_changeset_revert_entries(&ovcs->cset, &ret_apply);
1205     if (ret) {
1206         if (ret_apply)
1207             devicetree_state_flags |= DTSF_REVERT_FAIL;
1208         goto err_unlock;
1209     }
1210 
1211     ret = __of_changeset_revert_notify(&ovcs->cset);
1212     if (ret)
1213         pr_err("overlay remove changeset entry notify error %d\n", ret);
1214     /* notify failure is not fatal, continue */
1215 
1216     *ovcs_id = 0;
1217 
1218     /*
1219      * Note that the overlay memory will be kfree()ed by
1220      * free_overlay_changeset() even if the notifier for
1221      * OF_OVERLAY_POST_REMOVE returns an error.
1222      */
1223     ret_tmp = overlay_notify(ovcs, OF_OVERLAY_POST_REMOVE);
1224     if (ret_tmp)
1225         if (!ret)
1226             ret = ret_tmp;
1227 
1228     free_overlay_changeset(ovcs);
1229 
1230 err_unlock:
1231     /*
1232      * If jumped over free_overlay_changeset(), then did not kfree()
1233      * overlay related memory.  This is a memory leak unless a subsequent
1234      * of_overlay_remove() of this overlay is successful.
1235      */
1236     mutex_unlock(&of_mutex);
1237 
1238 out:
1239     pr_debug("%s() err=%d\n", __func__, ret);
1240 
1241     return ret;
1242 }
1243 EXPORT_SYMBOL_GPL(of_overlay_remove);
1244 
1245 /**
1246  * of_overlay_remove_all() - Reverts and frees all overlay changesets
1247  *
1248  * Removes all overlays from the system in the correct order.
1249  *
1250  * Return: 0 on success, or a negative error number
1251  */
1252 int of_overlay_remove_all(void)
1253 {
1254     struct overlay_changeset *ovcs, *ovcs_n;
1255     int ret;
1256 
1257     /* the tail of list is guaranteed to be safe to remove */
1258     list_for_each_entry_safe_reverse(ovcs, ovcs_n, &ovcs_list, ovcs_list) {
1259         ret = of_overlay_remove(&ovcs->id);
1260         if (ret)
1261             return ret;
1262     }
1263 
1264     return 0;
1265 }
1266 EXPORT_SYMBOL_GPL(of_overlay_remove_all);