From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f74.google.com (mail-wm1-f74.google.com [209.85.128.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3FF5C21255D for ; Fri, 22 Aug 2025 11:44:12 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.74 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1755863054; cv=none; b=GEOSTqtasyZUaMtDgK78byCf62p77Dg+uB/cPS3L5oTtMO+zXL0znA8d4t1f4c0GKfsnrSYdQwPN0zSk9kE2onvkPCp+fZJj2gXAI890t136cuLC3ByQycrXEmN1k6tQMXNLc9sITNYYSKx8yvB57cafcIwdB+Ymu1lthtkjSwA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1755863054; c=relaxed/simple; bh=jUJrZ6TIkDu1iOuqghKvcL8KBtPBBPx6oBLqBsBK+rU=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=SeOeArkDR/0B4n1QLYu+Ta1KtQrkxCzHV64UMkP8jDsHg2zdrb/WUtxcDT9v4j1GV4wskLXAFdphiTSyyU8RPoTCk1SrRhD4wfN08rBxYa36Bse72N7hIJ4x6onAuD3Imu3+aqd7iAYp7O+NhvgQ31wUzKAOgsL91H4fP8zN7Ts= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--aliceryhl.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=xyYfMZgV; arc=none smtp.client-ip=209.85.128.74 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--aliceryhl.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="xyYfMZgV" Received: by mail-wm1-f74.google.com with SMTP id 5b1f17b1804b1-45a1ad21752so9344235e9.1 for ; Fri, 22 Aug 2025 04:44:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1755863050; x=1756467850; darn=vger.kernel.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=geHWF/G3LsVEUikt403jE6Kj+cHLLjFGXWo9YYhremM=; b=xyYfMZgV/QHBDBT2qi8H5pJNNmHU+MqKlhwbnbnsF0aTIEOkf0vZJG0s4wcI9lgj0m e4L1O6v44keXSgpRRupv8LhZuBV6ineHtkQZvAAWg32RMmYMwMDloYy5hb3XlFUlwjtV NH8kwUjONCRLOuWmp4GqeDKUDodH1dWGpTP4n9H4aLWQv0BhBl8obmM+VH0AFo2gEI+h 93c+ldj84oumLJaL3dS1eddCfWxgEa3Lrxl11f8ugdsGDNfXeI0mE8iGEfe3gbWbJeX1 MRnxwI3OgRBX2u2EyesTRRlbkjKOxpWfCpbYjwZsTC+qvwNI8GRixh4aBzDzHg98uHAC T6oA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1755863050; x=1756467850; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=geHWF/G3LsVEUikt403jE6Kj+cHLLjFGXWo9YYhremM=; b=iTahPhUttwN15/HlcNfml2VyRwoxLg1aJCvuq1GoHuD3OHMBvxJOlkSY/Y73nPlkdN ThoEZGoCDY7+8dbS0No9VxJ7dRA0+btkOEu65RCStsGHOpLExIRTDkV7mesBgH0bguFq Cj1YntSNqLGOGXAbdSSZdNKCVCTndvJPrKPAirhZP4e2zsOu4IK4ExhJh45R3EH48lqZ o1RYr7CamKdzem6O43OvVkuoDTuT6eFOpvLiEpOHKFTDFaiQbc10F2I36kNXFCY2ZT0l kLwZpVyltubwLrrZLODaigwswB1/a6vaf8tmmbGWjKshrN/E6mISqvYjE1sLETSvf3ql kRVw== X-Forwarded-Encrypted: i=1; AJvYcCVfVEB8y03zVHN5WOMK9ogMir3zQJY7AO7j9hiVrn/uTl/1hVVetfvuZmDBCTJwr+yIsn9kCVdeoayAmRk5Yg==@vger.kernel.org X-Gm-Message-State: AOJu0YwErE88PkIngV1wITYiIXbQ/jFv3sI4LUI4xa0dgdr/3Cjk302a Zn529d7um9Mg41+u8uCcp23dB4kuy6RQSX4pFKNGwb+h+wdmGd0bX/1Oc3BLx+USIL5Hp3GfeIR 95l15CMVynox4+P7nWA== X-Google-Smtp-Source: AGHT+IHDt1GQ6cwT6lssXZ2H6fOxOB5hLx9jcs4Q6IdaoLmPK52AMBRod2y4a/1vrfiXt07V4fminUhiCHXLeIk= X-Received: from wmbhe13.prod.google.com ([2002:a05:600c:540d:b0:458:b49d:28e0]) (user=aliceryhl job=prod-delivery.src-stubby-dispatcher) by 2002:a05:600c:1d0f:b0:459:dfa8:b85e with SMTP id 5b1f17b1804b1-45b515ec8famr20254985e9.0.1755863050554; Fri, 22 Aug 2025 04:44:10 -0700 (PDT) Date: Fri, 22 Aug 2025 11:44:09 +0000 In-Reply-To: <20250820165431.170195-4-dakr@kernel.org> Precedence: bulk X-Mailing-List: rust-for-linux@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20250820165431.170195-1-dakr@kernel.org> <20250820165431.170195-4-dakr@kernel.org> Message-ID: Subject: Re: [PATCH v2 3/5] rust: scatterlist: Add type-state abstraction for sg_table From: Alice Ryhl To: Danilo Krummrich Cc: akpm@linux-foundation.org, ojeda@kernel.org, alex.gaynor@gmail.com, boqun.feng@gmail.com, gary@garyguo.net, bjorn3_gh@protonmail.com, lossin@kernel.org, a.hindborg@kernel.org, tmgross@umich.edu, abdiel.janulgue@gmail.com, acourbot@nvidia.com, jgg@ziepe.ca, lyude@redhat.com, robin.murphy@arm.com, daniel.almeida@collabora.com, rust-for-linux@vger.kernel.org, linux-kernel@vger.kernel.org Content-Type: text/plain; charset="utf-8" On Wed, Aug 20, 2025 at 06:52:57PM +0200, Danilo Krummrich wrote: > Add a safe Rust abstraction for the kernel's scatter-gather list > facilities (`struct scatterlist` and `struct sg_table`). > > This commit introduces `SGTable`, a wrapper that uses a type-state > pattern to provide compile-time guarantees about ownership and lifetime. > > The abstraction provides two primary states: > - `SGTable>`: Represents a table whose resources are fully > managed by Rust. It takes ownership of a page provider `P`, allocates > the underlying `struct sg_table`, maps it for DMA, and handles all > cleanup automatically upon drop. The DMA mapping's lifetime is tied to > the associated device using `Devres`, ensuring it is correctly unmapped > before the device is unbound. > - `SGTable` (or just `SGTable`): A zero-cost representation of > an externally managed `struct sg_table`. It is created from a raw > pointer using `SGTable::as_ref()` and provides a lifetime-bound > reference (`&'a SGTable`) for operations like iteration. > > The API exposes a safe iterator that yields `&SGEntry` references, > allowing drivers to easily access the DMA address and length of each > segment in the list. > > Co-developed-by: Abdiel Janulgue > Signed-off-by: Abdiel Janulgue > Signed-off-by: Danilo Krummrich > --- > rust/helpers/helpers.c | 1 + > rust/helpers/scatterlist.c | 24 ++ > rust/kernel/lib.rs | 1 + > rust/kernel/scatterlist.rs | 475 +++++++++++++++++++++++++++++++++++++ > 4 files changed, 501 insertions(+) > create mode 100644 rust/helpers/scatterlist.c > create mode 100644 rust/kernel/scatterlist.rs > > diff --git a/rust/helpers/helpers.c b/rust/helpers/helpers.c > index 7cf7fe95e41d..e94542bf6ea7 100644 > --- a/rust/helpers/helpers.c > +++ b/rust/helpers/helpers.c > @@ -39,6 +39,7 @@ > #include "rcu.c" > #include "refcount.c" > #include "regulator.c" > +#include "scatterlist.c" > #include "security.c" > #include "signal.c" > #include "slab.c" > diff --git a/rust/helpers/scatterlist.c b/rust/helpers/scatterlist.c > new file mode 100644 > index 000000000000..80c956ee09ab > --- /dev/null > +++ b/rust/helpers/scatterlist.c > @@ -0,0 +1,24 @@ > +// SPDX-License-Identifier: GPL-2.0 > + > +#include > + > +dma_addr_t rust_helper_sg_dma_address(struct scatterlist *sg) > +{ > + return sg_dma_address(sg); > +} > + > +unsigned int rust_helper_sg_dma_len(struct scatterlist *sg) > +{ > + return sg_dma_len(sg); > +} > + > +struct scatterlist *rust_helper_sg_next(struct scatterlist *sg) > +{ > + return sg_next(sg); > +} > + > +void rust_helper_dma_unmap_sgtable(struct device *dev, struct sg_table *sgt, > + enum dma_data_direction dir, unsigned long attrs) > +{ > + return dma_unmap_sgtable(dev, sgt, dir, attrs); > +} > diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs > index ed53169e795c..55acbc893736 100644 > --- a/rust/kernel/lib.rs > +++ b/rust/kernel/lib.rs > @@ -113,6 +113,7 @@ > pub mod rbtree; > pub mod regulator; > pub mod revocable; > +pub mod scatterlist; > pub mod security; > pub mod seq_file; > pub mod sizes; > diff --git a/rust/kernel/scatterlist.rs b/rust/kernel/scatterlist.rs > new file mode 100644 > index 000000000000..371c51222c5c > --- /dev/null > +++ b/rust/kernel/scatterlist.rs > @@ -0,0 +1,475 @@ > +// SPDX-License-Identifier: GPL-2.0 > + > +//! Abstractions for scatter-gather lists. > +//! > +//! C header: [`include/linux/scatterlist.h`](srctree/include/linux/scatterlist.h) > +//! > +//! Scatter-gather (SG) I/O is a memory access technique that allows devices to perform DMA > +//! operations on data buffers that are not physically contiguous in memory. It works by creating a > +//! "scatter-gather list", an array where each entry specifies the address and length of a > +//! physically contiguous memory segment. > +//! > +//! The device's DMA controller can then read this list and process the segments sequentially as > +//! part of one logical I/O request. This avoids the need for a single, large, physically contiguous > +//! memory buffer, which can be difficult or impossible to allocate. > +//! > +//! This module provides safe Rust abstractions over the kernel's `struct scatterlist` and > +//! `struct sg_table` types. > +//! > +//! The main entry point is the [`SGTable`] type, which represents a complete scatter-gather table. > +//! It can be either: > +//! > +//! - An owned table ([`SGTable>`]), created from a Rust memory buffer (e.g., [`VVec`]). > +//! This type manages the allocation of the `struct sg_table`, the DMA mapping of the buffer, and > +//! the automatic cleanup of all resources. > +//! - A borrowed reference (&[`SGTable`]), which provides safe, read-only access to a table that was > +//! allocated by other (e.g., C) code. > +//! > +//! Individual entries in the table are represented by [`SGEntry`], which can be accessed by > +//! iterating over an [`SGTable`]. > + > +use crate::{ > + alloc, > + alloc::allocator::VmallocPageIter, > + bindings, > + device::{Bound, Device}, > + devres::Devres, > + dma, error, > + io::resource::ResourceSize, > + page, > + prelude::*, > + types::{ARef, Opaque}, > +}; > +use core::{ops::Deref, ptr::NonNull}; > + > +/// A single entry in a scatter-gather list. > +/// > +/// An `SGEntry` represents a single, physically contiguous segment of memory that has been mapped > +/// for DMA. > +/// > +/// Instances of this struct are obtained by iterating over an [`SGTable`]. Drivers do not create > +/// or own [`SGEntry`] objects directly. > +#[repr(transparent)] > +pub struct SGEntry(Opaque); > + > +// SAFETY: `SGEntry` can be send to any task. > +unsafe impl Send for SGEntry {} > + > +// SAFETY: `SGEntry` can be accessed concurrently. > +unsafe impl Sync for SGEntry {} > + > +impl SGEntry { > + /// Convert a raw `struct scatterlist *` to a `&'a SGEntry`. > + /// > + /// # Safety > + /// > + /// Callers must ensure that the `struct scatterlist` pointed to by `ptr` is valid for the > + /// lifetime `'a`. > + #[inline] > + unsafe fn from_raw<'a>(ptr: *mut bindings::scatterlist) -> &'a Self { > + // SAFETY: The safety requirements of this function guarantee that `ptr` is a valid pointer > + // to a `struct scatterlist` for the duration of `'a`. > + unsafe { &*ptr.cast() } > + } > + > + /// Obtain the raw `struct scatterlist *`. > + #[inline] > + fn as_raw(&self) -> *mut bindings::scatterlist { > + self.0.get() > + } > + > + /// Returns the DMA address of this SG entry. > + /// > + /// This is the address that the device should use to access the memory segment. > + #[inline] > + pub fn dma_address(&self) -> dma::DmaAddress { > + // SAFETY: `self.as_raw()` is a valid pointer to a `struct scatterlist`. > + unsafe { bindings::sg_dma_address(self.as_raw()) } > + } > + > + /// Returns the length of this SG entry in bytes. > + #[inline] > + pub fn dma_len(&self) -> ResourceSize { > + #[allow(clippy::useless_conversion)] > + // SAFETY: `self.as_raw()` is a valid pointer to a `struct scatterlist`. > + unsafe { bindings::sg_dma_len(self.as_raw()) }.into() > + } > +} > + > +/// The borrowed type state of an [`SGTable`], representing a borrowed or externally managed table. > +#[repr(transparent)] > +pub struct Borrowed(Opaque); > + > +// SAFETY: `Borrowed` can be send to any task. > +unsafe impl Send for Borrowed {} > + > +// SAFETY: `Borrowed` can be accessed concurrently. > +unsafe impl Sync for Borrowed {} > + > +/// A scatter-gather table. > +/// > +/// This struct is a wrapper around the kernel's `struct sg_table`. It manages a list of DMA-mapped > +/// memory segments that can be passed to a device for I/O operations. > +/// > +/// The generic parameter `T` is used as a type state to distinguish between owned and borrowed > +/// tables. > +/// > +/// - [`SGTable`]: An owned table created and managed entirely by Rust code. It handles > +/// allocation, DMA mapping, and cleanup of all associated resources. See [`SGTable::new`]. > +/// - [`SGTable`} (or simply [`SGTable`]): Represents a table whose lifetime is managed > +/// externally. It can be used safely via a borrowed reference `&'a SGTable`, where `'a` is the > +/// external lifetime. > +/// > +/// All [`SGTable`] variants can be iterated over the individual [`SGEntry`]s. > +#[repr(transparent)] > +#[pin_data] > +pub struct SGTable { > + #[pin] > + inner: T, > +} > + > +impl SGTable { > + /// Creates a borrowed `&'a SGTable` from a raw `struct sg_table` pointer. > + /// > + /// This allows safe access to an `sg_table` that is managed elsewhere (for example, in C code). > + /// > + /// # Safety > + /// > + /// Callers must ensure that: > + /// > + /// - the `struct sg_table` pointed to by `ptr` is valid for the entire lifetime of `'a`, > + /// - the data behind `ptr` is not modified concurrently for the duration of `'a`. > + #[inline] > + pub unsafe fn from_raw<'a>(ptr: *mut bindings::sg_table) -> &'a Self { > + // SAFETY: The safety requirements of this function guarantee that `ptr` is a valid pointer > + // to a `struct sg_table` for the duration of `'a`. > + unsafe { &*ptr.cast() } > + } > + > + #[inline] > + fn as_raw(&self) -> *mut bindings::sg_table { > + self.inner.0.get() > + } > + > + fn as_iter(&self) -> SGTableIter<'_> { > + // SAFETY: `self.as_raw()` is a valid pointer to a `struct sg_table`. > + let ptr = unsafe { (*self.as_raw()).sgl }; > + > + // SAFETY: `ptr` is guaranteed to be a valid pointer to a `struct scatterlist`. > + let pos = Some(unsafe { SGEntry::from_raw(ptr) }); > + > + SGTableIter { pos } > + } > +} > + > +/// # Invariants > +/// > +/// - `sgt` is a valid pointer to a `struct sg_table` for the entire lifetime of an [`DmaMapSgt`]. > +/// - `sgt` is always DMA mapped. > +struct DmaMapSgt { > + sgt: NonNull, > + dev: ARef, > + dir: dma::DataDirection, > +} > + > +// SAFETY: `DmaMapSgt` can be send to any task. > +unsafe impl Send for DmaMapSgt {} > + > +// SAFETY: `DmaMapSgt` can be accessed concurrently. > +unsafe impl Sync for DmaMapSgt {} > + > +impl DmaMapSgt { > + /// # Safety > + /// > + /// - `sgt` must be a valid pointer to a `struct sg_table` for the entire lifetime of the > + /// returned [`DmaMapSgt`]. > + /// - The caller must guarantee that `sgt` remains DMA mapped for the entire lifetime of > + /// [`DmaMapSgt`]. > + unsafe fn new( > + sgt: NonNull, > + dev: &Device, > + dir: dma::DataDirection, > + ) -> Result { > + // SAFETY: > + // - `dev.as_raw()` is a valid pointer to a `struct device`, which is guaranteed to be > + // bound to a driver for the duration of this call. > + // - `sgt` is a valid pointer to a `struct sg_table`. > + error::to_result(unsafe { > + bindings::dma_map_sgtable(dev.as_raw(), sgt.as_ptr(), dir.into(), 0) > + })?; > + > + // INVARIANT: By the safety requirements of this function it is guaranteed that `sgt` is > + // valid for the entire lifetime of this object instance. > + Ok(Self { > + sgt, > + dev: dev.into(), > + dir, > + }) > + } > +} > + > +impl Drop for DmaMapSgt { > + #[inline] > + fn drop(&mut self) { > + // SAFETY: > + // - `self.dev.as_raw()` is a pointer to a valid `struct device`. > + // - `self.dev` is the same device the mapping has been created for in `Self::new()`. > + // - `self.sgt.as_ptr()` is a valid pointer to a `struct sg_table` by the type invariants > + // of `Self`. > + // - `self.dir` is the same `dma::DataDirection` the mapping has been created with in > + // `Self::new()`. > + unsafe { > + bindings::dma_unmap_sgtable(self.dev.as_raw(), self.sgt.as_ptr(), self.dir.into(), 0) > + }; > + } > +} > + > +#[repr(transparent)] > +#[pin_data(PinnedDrop)] > +struct RawSGTable { > + #[pin] > + sgt: Opaque, > +} > + > +// SAFETY: `RawSGTable` can be send to any task. > +unsafe impl Send for RawSGTable {} > + > +// SAFETY: `RawSGTable` can be accessed concurrently. > +unsafe impl Sync for RawSGTable {} > + > +impl RawSGTable { > + fn new( > + pages: &mut [*mut bindings::page], This mutable reference is suspicious, IMO. Does it modify the list? You don't read the values after calling `sg_alloc_table_from_pages_segment()`. > + size: usize, > + max_segment: u32, > + flags: alloc::Flags, > + ) -> impl PinInit + '_ { > + try_pin_init!(Self { > + sgt <- Opaque::try_ffi_init(|slot: *mut bindings::sg_table| { > + // `sg_alloc_table_from_pages_segment()` expects at least one page, otherwise it > + // produces a NPE. > + if pages.is_empty() { > + return Err(EINVAL); > + } > + > + // SAFETY: > + // - `slot` is a valid pointer to uninitialized memory. > + // - As by the check above, `pages` is not empty. > + error::to_result(unsafe { > + bindings::sg_alloc_table_from_pages_segment( > + slot, > + pages.as_mut_ptr(), > + pages.len().try_into()?, > + 0, > + size, > + max_segment, > + flags.as_raw(), > + ) > + }) > + }), > + }) > + } > + > + #[inline] > + fn as_raw(&self) -> *mut bindings::sg_table { > + self.sgt.get() > + } > +} > + > +#[pinned_drop] > +impl PinnedDrop for RawSGTable { > + #[inline] > + fn drop(self: Pin<&mut Self>) { > + // SAFETY: `sgt` is a valid and initialized `struct sg_table`. > + unsafe { bindings::sg_free_table(self.sgt.get()) }; It's weird that this is called free when the sg_table isn't freed by this call. > + } > +} > + > +/// The [`Owned`] type state of an [`SGTable`]. > +/// > +/// A [`SGTable`] signifies that the [`SGTable`] owns all associated resources: > +/// > +/// - The backing memory pages. > +/// - The `struct sg_table` allocation (`sgt`). > +/// - The DMA mapping, managed through a [`Devres`]-managed `DmaMapSgt`. > +/// > +/// Users interact with this type through the [`SGTable`] handle and do not need to manage > +/// [`Owned`] directly. > +#[pin_data] > +pub struct Owned

{ > + // Note: The drop order is relevant; we first have to unmap the `struct sg_table`, then free the > + // `struct sg_table` and finally free the backing pages. > + #[pin] > + dma: Devres, > + #[pin] > + sgt: RawSGTable, > + _pages: P, > +} > + > +// SAFETY: `Owned` can be send to any task if `P` can be send to any task. > +unsafe impl Send for Owned

{} > + > +// SAFETY: `Owned` can be accessed concurrently if `P` can be accessed concurrently. > +unsafe impl Sync for Owned

{} > + > +impl

Owned

> +where > + for<'a> P: page::AsPageIter = VmallocPageIter<'a>> + 'static, > +{ > + fn new( > + dev: &Device, > + mut pages: P, > + dir: dma::DataDirection, > + flags: alloc::Flags, > + ) -> Result + '_> { > + let page_iter = pages.page_iter(); > + let size = page_iter.size(); Variable naming here is confusing. There's another variable called size in an inner scope, and then afterwards in RawSGTable you use *this* size variable again. > + let mut page_vec: KVec<*mut bindings::page> = > + KVec::with_capacity(page_iter.page_count(), flags)?; > + > + for page in page_iter { > + page_vec.push(page.as_ptr(), flags)?; > + } > + > + // `dma_max_mapping_size` returns `size_t`, but `sg_alloc_table_from_pages_segment()` takes > + // an `unsigned int`. > + let max_segment = { > + // SAFETY: `dev.as_raw()` is a valid pointer to a `struct device`. > + let size = unsafe { bindings::dma_max_mapping_size(dev.as_raw()) }; > + if size == 0 { > + u32::MAX > + } else { > + u32::try_from(size).unwrap_or(u32::MAX) > + } > + }; > + > + Ok(try_pin_init!(&this in Self { > + sgt <- RawSGTable::new(&mut page_vec, size, max_segment, flags), > + dma <- { > + // SAFETY: `this` is a valid pointer to uninitialized memory. > + let sgt = unsafe { &raw mut (*this.as_ptr()).sgt }.cast(); > + > + // SAFETY: `sgt` is guaranteed to be non-null. > + let sgt = unsafe { NonNull::new_unchecked(sgt) }; > + > + // SAFETY: > + // - It is guaranteed that the object returned by `DmaMapSgt::new` won't out-live > + // `sgt`. > + // - `sgt` is never DMA unmapped manually. > + Devres::new(dev, unsafe { DmaMapSgt::new(sgt, dev, dir) }) > + }, > + _pages: pages, > + })) > + } > +} > + > +impl

SGTable> > +where > + for<'a> P: page::AsPageIter = VmallocPageIter<'a>> + 'static, > +{ > + /// Allocates a new scatter-gather table from the given pages and maps it for DMA. > + /// > + /// This constructor creates a new [`SGTable`] that takes ownership of `P`. > + /// It allocates a `struct sg_table`, populates it with entries corresponding to the physical > + /// pages of `P`, and maps the table for DMA with the specified [`Device`] and > + /// [`dma::DataDirection`]. > + /// > + /// The DMA mapping is managed through [`Devres`], ensuring that the DMA mapping is unmapped > + /// once the associated [`Device`] is unbound, or when the [`SGTable`] is dropped. > + /// > + /// # Parameters > + /// > + /// * `dev`: The [`Device`] that will be performing the DMA. > + /// * `pages`: The entity providing the backing pages. It must implement [`page::AsPageIter`]. > + /// The ownership of this entity is moved into the new [`SGTable`]. > + /// * `dir`: The [`dma::DataDirection`] of the DMA transfer. > + /// * `flags`: Allocation flags for internal allocations (e.g., [`GFP_KERNEL`]). > + /// > + /// # Examples > + /// > + /// ``` > + /// use kernel::{ > + /// device::{Bound, Device}, > + /// dma, page, > + /// prelude::*, > + /// scatterlist::*, > + /// }; > + /// > + /// fn test(dev: &Device) -> Result { > + /// let size = 4 * page::PAGE_SIZE; > + /// let pages = VVec::::with_capacity(size, GFP_KERNEL)?; > + /// > + /// let sgt = KBox::pin_init(SGTable::new( > + /// dev, > + /// pages, > + /// dma::DataDirection::ToDevice, > + /// GFP_KERNEL, > + /// ), GFP_KERNEL)?; > + /// > + /// Ok(()) > + /// } > + /// ``` > + pub fn new( > + dev: &Device, > + pages: P, > + dir: dma::DataDirection, > + flags: alloc::Flags, > + ) -> impl PinInit + '_ { > + try_pin_init!(Self { > + inner <- Owned::new(dev, pages, dir, flags)? > + }) > + } > +} > + > +impl

Deref for SGTable> { > + type Target = SGTable; > + > + #[inline] > + fn deref(&self) -> &Self::Target { > + // SAFETY: `self.inner.sgt.as_raw()` is a valid pointer to a `struct sg_table` for the > + // entire lifetime of `self`. > + unsafe { SGTable::from_raw(self.inner.sgt.as_raw()) } > + } > +} > + > +mod private { > + pub trait Sealed {} > + > + impl Sealed for super::Borrowed {} > + impl

Sealed for super::Owned

{} > +} > + > +impl<'a> IntoIterator for &'a SGTable { > + type Item = &'a SGEntry; > + type IntoIter = SGTableIter<'a>; > + > + #[inline] > + fn into_iter(self) -> Self::IntoIter { > + self.as_iter() > + } > +} > + > +/// An [`Iterator`] over the [`SGEntry`] items of an [`SGTable`]. > +pub struct SGTableIter<'a> { > + pos: Option<&'a SGEntry>, > +} > + > +impl<'a> Iterator for SGTableIter<'a> { > + type Item = &'a SGEntry; > + > + fn next(&mut self) -> Option { > + let entry = self.pos?; > + > + // SAFETY: `entry.as_raw()` is a valid pointer to a `struct scatterlist`. > + let next = unsafe { bindings::sg_next(entry.as_raw()) }; > + > + self.pos = (!next.is_null()).then(|| { > + // SAFETY: If `next` is not NULL, `sg_next()` guarantees to return a valid pointer to > + // the next `struct scatterlist`. > + unsafe { SGEntry::from_raw(next) } > + }); > + > + Some(entry) > + } > +} > -- > 2.50.1 >