[linux-2.6-block.git] / drivers / dma-buf / sw_sync.c

/*
 * Sync File validation framework
 *
 * Copyright (C) 2012 Google, Inc.
 *
 * This software is licensed under the terms of the GNU General Public
 * License version 2, as published by the Free Software Foundation, and
 * may be copied, distributed, and modified under those terms.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 */

#include <linux/file.h>
#include <linux/fs.h>
#include <linux/uaccess.h>
#include <linux/slab.h>
#include <linux/sync_file.h>

#include "sync_debug.h"

#define CREATE_TRACE_POINTS
#include "sync_trace.h"

/*
 * SW SYNC validation framework
 *
 * A sync object driver that uses a 32bit counter to coordinate
 * synchronization.  Useful when there is no hardware primitive backing
 * the synchronization.
 *
 * To start the framework just open:
 *
 * <debugfs>/sync/sw_sync
 *
 * That will create a sync timeline, all fences created under this timeline
 * file descriptor will belong to the this timeline.
 *
 * The 'sw_sync' file can be opened many times as to create different
 * timelines.
 *
 * Fences can be created with SW_SYNC_IOC_CREATE_FENCE ioctl with struct
 * sw_sync_create_fence_data as parameter.
 *
 * To increment the timeline counter, SW_SYNC_IOC_INC ioctl should be used
 * with the increment as u32. This will update the last signaled value
 * from the timeline and signal any fence that has a seqno smaller or equal
 * to it.
 *
 * struct sw_sync_create_fence_data
 * @value:	the seqno to initialise the fence with
 * @name:	the name of the new sync point
 * @fence:	return the fd of the new sync_file with the created fence
 */
struct sw_sync_create_fence_data {
	__u32	value;
	char	name[32];
	__s32	fence; /* fd of new fence */
};

#define SW_SYNC_IOC_MAGIC	'W'

#define SW_SYNC_IOC_CREATE_FENCE	_IOWR(SW_SYNC_IOC_MAGIC, 0,\
		struct sw_sync_create_fence_data)

#define SW_SYNC_IOC_INC			_IOW(SW_SYNC_IOC_MAGIC, 1, __u32)

static const struct dma_fence_ops timeline_fence_ops;

static inline struct sync_pt *dma_fence_to_sync_pt(struct dma_fence *fence)
{
	if (fence->ops != &timeline_fence_ops)
		return NULL;
	return container_of(fence, struct sync_pt, base);
}

/**
 * sync_timeline_create() - creates a sync object
 * @name:	sync_timeline name
 *
 * Creates a new sync_timeline. Returns the sync_timeline object or NULL in
 * case of error.
 */
static struct sync_timeline *sync_timeline_create(const char *name)
{
	struct sync_timeline *obj;

	obj = kzalloc(sizeof(*obj), GFP_KERNEL);
	if (!obj)
		return NULL;

	kref_init(&obj->kref);
	obj->context = dma_fence_context_alloc(1);
	strlcpy(obj->name, name, sizeof(obj->name));

	obj->pt_tree = RB_ROOT;
	INIT_LIST_HEAD(&obj->pt_list);
	spin_lock_init(&obj->lock);

	sync_timeline_debug_add(obj);

	return obj;
}

static void sync_timeline_free(struct kref *kref)
{
	struct sync_timeline *obj =
		container_of(kref, struct sync_timeline, kref);

	sync_timeline_debug_remove(obj);

	kfree(obj);
}

static void sync_timeline_get(struct sync_timeline *obj)
{
	kref_get(&obj->kref);
}

static void sync_timeline_put(struct sync_timeline *obj)
{
	kref_put(&obj->kref, sync_timeline_free);
}

static const char *timeline_fence_get_driver_name(struct dma_fence *fence)
{
	return "sw_sync";
}

static const char *timeline_fence_get_timeline_name(struct dma_fence *fence)
{
	struct sync_timeline *parent = dma_fence_parent(fence);

	return parent->name;
}

static void timeline_fence_release(struct dma_fence *fence)
{
	struct sync_pt *pt = dma_fence_to_sync_pt(fence);
	struct sync_timeline *parent = dma_fence_parent(fence);

	if (!list_empty(&pt->link)) {
		unsigned long flags;

		spin_lock_irqsave(fence->lock, flags);
		if (!list_empty(&pt->link)) {
			list_del(&pt->link);
			rb_erase(&pt->node, &parent->pt_tree);
		}
		spin_unlock_irqrestore(fence->lock, flags);
	}

	sync_timeline_put(parent);
	dma_fence_free(fence);
}

static bool timeline_fence_signaled(struct dma_fence *fence)
{
	struct sync_timeline *parent = dma_fence_parent(fence);

	return !__dma_fence_is_later(fence->seqno, parent->value);
}

static bool timeline_fence_enable_signaling(struct dma_fence *fence)
{
	return true;
}

static void timeline_fence_value_str(struct dma_fence *fence,
				    char *str, int size)
{
	snprintf(str, size, "%d", fence->seqno);
}

static void timeline_fence_timeline_value_str(struct dma_fence *fence,
					     char *str, int size)
{
	struct sync_timeline *parent = dma_fence_parent(fence);

	snprintf(str, size, "%d", parent->value);
}

static const struct dma_fence_ops timeline_fence_ops = {
	.get_driver_name = timeline_fence_get_driver_name,
	.get_timeline_name = timeline_fence_get_timeline_name,
	.enable_signaling = timeline_fence_enable_signaling,
	.signaled = timeline_fence_signaled,
	.release = timeline_fence_release,
	.fence_value_str = timeline_fence_value_str,
	.timeline_value_str = timeline_fence_timeline_value_str,
};

/**
 * sync_timeline_signal() - signal a status change on a sync_timeline
 * @obj:	sync_timeline to signal
 * @inc:	num to increment on timeline->value
 *
 * A sync implementation should call this any time one of it's fences
 * has signaled or has an error condition.
 */
static void sync_timeline_signal(struct sync_timeline *obj, unsigned int inc)
{
	struct sync_pt *pt, *next;

	trace_sync_timeline(obj);

	spin_lock_irq(&obj->lock);

	obj->value += inc;

	list_for_each_entry_safe(pt, next, &obj->pt_list, link) {
		if (!timeline_fence_signaled(&pt->base))
			break;

		list_del_init(&pt->link);
		rb_erase(&pt->node, &obj->pt_tree);

		/*
		 * A signal callback may release the last reference to this
		 * fence, causing it to be freed. That operation has to be
		 * last to avoid a use after free inside this loop, and must
		 * be after we remove the fence from the timeline in order to
		 * prevent deadlocking on timeline->lock inside
		 * timeline_fence_release().
		 */
		dma_fence_signal_locked(&pt->base);
	}

	spin_unlock_irq(&obj->lock);
}

/**
 * sync_pt_create() - creates a sync pt
 * @obj:	parent sync_timeline
 * @value:	value of the fence
 *
 * Creates a new sync_pt (fence) as a child of @parent.  @size bytes will be
 * allocated allowing for implementation specific data to be kept after
 * the generic sync_timeline struct. Returns the sync_pt object or
 * NULL in case of error.
 */
static struct sync_pt *sync_pt_create(struct sync_timeline *obj,
				      unsigned int value)
{
	struct sync_pt *pt;

	pt = kzalloc(sizeof(*pt), GFP_KERNEL);
	if (!pt)
		return NULL;

	sync_timeline_get(obj);
	dma_fence_init(&pt->base, &timeline_fence_ops, &obj->lock,
		       obj->context, value);
	INIT_LIST_HEAD(&pt->link);

	spin_lock_irq(&obj->lock);
	if (!dma_fence_is_signaled_locked(&pt->base)) {
		struct rb_node **p = &obj->pt_tree.rb_node;
		struct rb_node *parent = NULL;

		while (*p) {
			struct sync_pt *other;
			int cmp;

			parent = *p;
			other = rb_entry(parent, typeof(*pt), node);
			cmp = value - other->base.seqno;
			if (cmp > 0) {
				p = &parent->rb_right;
			} else if (cmp < 0) {
				p = &parent->rb_left;
			} else {
				if (dma_fence_get_rcu(&other->base)) {
					dma_fence_put(&pt->base);
					pt = other;
					goto unlock;
				}
				p = &parent->rb_left;
			}
		}
		rb_link_node(&pt->node, parent, p);
		rb_insert_color(&pt->node, &obj->pt_tree);

		parent = rb_next(&pt->node);
		list_add_tail(&pt->link,
			      parent ? &rb_entry(parent, typeof(*pt), node)->link : &obj->pt_list);
	}
unlock:
	spin_unlock_irq(&obj->lock);

	return pt;
}

/*
 * *WARNING*
 *
 * improper use of this can result in deadlocking kernel drivers from userspace.
 */

/* opening sw_sync create a new sync obj */
static int sw_sync_debugfs_open(struct inode *inode, struct file *file)
{
	struct sync_timeline *obj;
	char task_comm[TASK_COMM_LEN];

	get_task_comm(task_comm, current);

	obj = sync_timeline_create(task_comm);
	if (!obj)
		return -ENOMEM;

	file->private_data = obj;

	return 0;
}

static int sw_sync_debugfs_release(struct inode *inode, struct file *file)
{
	struct sync_timeline *obj = file->private_data;
	struct sync_pt *pt, *next;

	spin_lock_irq(&obj->lock);

	list_for_each_entry_safe(pt, next, &obj->pt_list, link) {
		dma_fence_set_error(&pt->base, -ENOENT);
		dma_fence_signal_locked(&pt->base);
	}

	spin_unlock_irq(&obj->lock);

	sync_timeline_put(obj);
	return 0;
}

static long sw_sync_ioctl_create_fence(struct sync_timeline *obj,
				       unsigned long arg)
{
	int fd = get_unused_fd_flags(O_CLOEXEC);
	int err;
	struct sync_pt *pt;
	struct sync_file *sync_file;
	struct sw_sync_create_fence_data data;

	if (fd < 0)
		return fd;

	if (copy_from_user(&data, (void __user *)arg, sizeof(data))) {
		err = -EFAULT;
		goto err;
	}

	pt = sync_pt_create(obj, data.value);
	if (!pt) {
		err = -ENOMEM;
		goto err;
	}

	sync_file = sync_file_create(&pt->base);
	dma_fence_put(&pt->base);
	if (!sync_file) {
		err = -ENOMEM;
		goto err;
	}

	data.fence = fd;
	if (copy_to_user((void __user *)arg, &data, sizeof(data))) {
		fput(sync_file->file);
		err = -EFAULT;
		goto err;
	}

	fd_install(fd, sync_file->file);

	return 0;

err:
	put_unused_fd(fd);
	return err;
}

static long sw_sync_ioctl_inc(struct sync_timeline *obj, unsigned long arg)
{
	u32 value;

	if (copy_from_user(&value, (void __user *)arg, sizeof(value)))
		return -EFAULT;

	while (value > INT_MAX)  {
		sync_timeline_signal(obj, INT_MAX);
		value -= INT_MAX;
	}

	sync_timeline_signal(obj, value);

	return 0;
}

static long sw_sync_ioctl(struct file *file, unsigned int cmd,
			  unsigned long arg)
{
	struct sync_timeline *obj = file->private_data;

	switch (cmd) {
	case SW_SYNC_IOC_CREATE_FENCE:
		return sw_sync_ioctl_create_fence(obj, arg);

	case SW_SYNC_IOC_INC:
		return sw_sync_ioctl_inc(obj, arg);

	default:
		return -ENOTTY;
	}
}

const struct file_operations sw_sync_debugfs_fops = {
	.open           = sw_sync_debugfs_open,
	.release        = sw_sync_debugfs_release,
	.unlocked_ioctl = sw_sync_ioctl,
	.compat_ioctl	= sw_sync_ioctl,
};
Commit	Line	Data
1867a23b	1	/*
e912c881	2	* Sync File validation framework
1867a23b GP	3	*
	4	* Copyright (C) 2012 Google, Inc.
	5	*
	6	* This software is licensed under the terms of the GNU General Public
	7	* License version 2, as published by the Free Software Foundation, and
	8	* may be copied, distributed, and modified under those terms.
	9	*
	10	* This program is distributed in the hope that it will be useful,
	11	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	12	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	13	* GNU General Public License for more details.
	14	*
	15	*/
	16
	17	#include <linux/file.h>
	18	#include <linux/fs.h>
	19	#include <linux/uaccess.h>
aff9da10	20	#include <linux/slab.h>
1867a23b GP	21	#include <linux/sync_file.h>
1867a23b GP	22
1fe82e2e	23	#include "sync_debug.h"
1867a23b	24
aff9da10	25	#define CREATE_TRACE_POINTS
a04f915e	26	#include "sync_trace.h"
aff9da10	27
fc0c9a03 GP	28	/*
	29	* SW SYNC validation framework
	30	*
	31	* A sync object driver that uses a 32bit counter to coordinate
	32	* synchronization. Useful when there is no hardware primitive backing
	33	* the synchronization.
	34	*
	35	* To start the framework just open:
	36	*
	37	* <debugfs>/sync/sw_sync
	38	*
	39	* That will create a sync timeline, all fences created under this timeline
	40	* file descriptor will belong to the this timeline.
	41	*
	42	* The 'sw_sync' file can be opened many times as to create different
	43	* timelines.
	44	*
	45	* Fences can be created with SW_SYNC_IOC_CREATE_FENCE ioctl with struct
e56a0fbd	46	* sw_sync_create_fence_data as parameter.
fc0c9a03 GP	47	*
	48	* To increment the timeline counter, SW_SYNC_IOC_INC ioctl should be used
	49	* with the increment as u32. This will update the last signaled value
	50	* from the timeline and signal any fence that has a seqno smaller or equal
	51	* to it.
	52	*
e56a0fbd	53	* struct sw_sync_create_fence_data
fc0c9a03 GP	54	* @value: the seqno to initialise the fence with
	55	* @name: the name of the new sync point
	56	* @fence: return the fd of the new sync_file with the created fence
	57	*/
6f65aa89 GP	58	struct sw_sync_create_fence_data {
	59	__u32 value;
	60	char name[32];
	61	__s32 fence; /* fd of new fence */
	62	};
	63
	64	#define SW_SYNC_IOC_MAGIC 'W'
	65
	66	#define SW_SYNC_IOC_CREATE_FENCE _IOWR(SW_SYNC_IOC_MAGIC, 0,\
	67	struct sw_sync_create_fence_data)
fc0c9a03	68
6f65aa89 GP	69	#define SW_SYNC_IOC_INC _IOW(SW_SYNC_IOC_MAGIC, 1, __u32)
6f65aa89 GP	70
f54d1867	71	static const struct dma_fence_ops timeline_fence_ops;
aff9da10	72
f54d1867	73	static inline struct sync_pt dma_fence_to_sync_pt(struct dma_fence fence)
aff9da10 GP	74	{
	75	if (fence->ops != &timeline_fence_ops)
	76	return NULL;
	77	return container_of(fence, struct sync_pt, base);
	78	}
	79
	80	/**
	81	* sync_timeline_create() - creates a sync object
aff9da10 GP	82	* @name: sync_timeline name
	83	*
	84	* Creates a new sync_timeline. Returns the sync_timeline object or NULL in
	85	* case of error.
	86	*/
74881588	87	static struct sync_timeline sync_timeline_create(const char name)
aff9da10 GP	88	{
	89	struct sync_timeline *obj;
	90
	91	obj = kzalloc(sizeof(*obj), GFP_KERNEL);
	92	if (!obj)
	93	return NULL;
	94
	95	kref_init(&obj->kref);
f54d1867	96	obj->context = dma_fence_context_alloc(1);
aff9da10	97	strlcpy(obj->name, name, sizeof(obj->name));
aff9da10	98
f1e8c671	99	obj->pt_tree = RB_ROOT;
d3862e44 CW	100	INIT_LIST_HEAD(&obj->pt_list);
d3862e44 CW	101	spin_lock_init(&obj->lock);
aff9da10 GP	102
	103	sync_timeline_debug_add(obj);
	104
	105	return obj;
	106	}
	107
	108	static void sync_timeline_free(struct kref *kref)
	109	{
	110	struct sync_timeline *obj =
	111	container_of(kref, struct sync_timeline, kref);
	112
	113	sync_timeline_debug_remove(obj);
	114
	115	kfree(obj);
	116	}
	117
	118	static void sync_timeline_get(struct sync_timeline *obj)
	119	{
	120	kref_get(&obj->kref);
	121	}
	122
	123	static void sync_timeline_put(struct sync_timeline *obj)
	124	{
	125	kref_put(&obj->kref, sync_timeline_free);
	126	}
	127
150b6a9d GP	128	static const char timeline_fence_get_driver_name(struct dma_fence fence)
	129	{
	130	return "sw_sync";
	131	}
	132
	133	static const char timeline_fence_get_timeline_name(struct dma_fence fence)
	134	{
	135	struct sync_timeline *parent = dma_fence_parent(fence);
	136
	137	return parent->name;
	138	}
	139
	140	static void timeline_fence_release(struct dma_fence *fence)
	141	{
	142	struct sync_pt *pt = dma_fence_to_sync_pt(fence);
	143	struct sync_timeline *parent = dma_fence_parent(fence);
	144
	145	if (!list_empty(&pt->link)) {
	146	unsigned long flags;
	147
	148	spin_lock_irqsave(fence->lock, flags);
	149	if (!list_empty(&pt->link)) {
	150	list_del(&pt->link);
	151	rb_erase(&pt->node, &parent->pt_tree);
	152	}
	153	spin_unlock_irqrestore(fence->lock, flags);
	154	}
	155
	156	sync_timeline_put(parent);
	157	dma_fence_free(fence);
	158	}
	159
	160	static bool timeline_fence_signaled(struct dma_fence *fence)
	161	{
	162	struct sync_timeline *parent = dma_fence_parent(fence);
	163
	164	return !__dma_fence_is_later(fence->seqno, parent->value);
	165	}
	166
	167	static bool timeline_fence_enable_signaling(struct dma_fence *fence)
	168	{
	169	return true;
	170	}
	171
	172	static void timeline_fence_value_str(struct dma_fence *fence,
	173	char *str, int size)
	174	{
	175	snprintf(str, size, "%d", fence->seqno);
	176	}
	177
	178	static void timeline_fence_timeline_value_str(struct dma_fence *fence,
	179	char *str, int size)
	180	{
	181	struct sync_timeline *parent = dma_fence_parent(fence);
	182
	183	snprintf(str, size, "%d", parent->value);
	184	}
	185
	186	static const struct dma_fence_ops timeline_fence_ops = {
	187	.get_driver_name = timeline_fence_get_driver_name,
	188	.get_timeline_name = timeline_fence_get_timeline_name,
	189	.enable_signaling = timeline_fence_enable_signaling,
	190	.signaled = timeline_fence_signaled,
150b6a9d GP	191	.release = timeline_fence_release,
	192	.fence_value_str = timeline_fence_value_str,
	193	.timeline_value_str = timeline_fence_timeline_value_str,
	194	};
	195
aff9da10 GP	196	/**
	197	* sync_timeline_signal() - signal a status change on a sync_timeline
	198	* @obj: sync_timeline to signal
	199	* @inc: num to increment on timeline->value
	200	*
	201	* A sync implementation should call this any time one of it's fences
	202	* has signaled or has an error condition.
	203	*/
	204	static void sync_timeline_signal(struct sync_timeline *obj, unsigned int inc)
	205	{
aff9da10 GP	206	struct sync_pt pt, next;
	207
	208	trace_sync_timeline(obj);
	209
d3862e44	210	spin_lock_irq(&obj->lock);
aff9da10 GP	211
	212	obj->value += inc;
	213
f1e8c671	214	list_for_each_entry_safe(pt, next, &obj->pt_list, link) {
3792b7c1	215	if (!timeline_fence_signaled(&pt->base))
f1e8c671 CW	216	break;
	217
	218	list_del_init(&pt->link);
	219	rb_erase(&pt->node, &obj->pt_tree);
3792b7c1 GP	220
	221	/*
	222	* A signal callback may release the last reference to this
	223	* fence, causing it to be freed. That operation has to be
	224	* last to avoid a use after free inside this loop, and must
	225	* be after we remove the fence from the timeline in order to
	226	* prevent deadlocking on timeline->lock inside
	227	* timeline_fence_release().
	228	*/
	229	dma_fence_signal_locked(&pt->base);
f1e8c671	230	}
aff9da10	231
d3862e44	232	spin_unlock_irq(&obj->lock);
aff9da10 GP	233	}
	234
	235	/**
	236	* sync_pt_create() - creates a sync pt
b88132b4 CW	237	* @obj: parent sync_timeline
b88132b4 CW	238	* @value: value of the fence
aff9da10	239	*
b88132b4	240	* Creates a new sync_pt (fence) as a child of @parent. @size bytes will be
aff9da10 GP	241	* allocated allowing for implementation specific data to be kept after
	242	* the generic sync_timeline struct. Returns the sync_pt object or
	243	* NULL in case of error.
	244	*/
3b52ce44 CW	245	static struct sync_pt sync_pt_create(struct sync_timeline obj,
3b52ce44 CW	246	unsigned int value)
aff9da10	247	{
aff9da10 GP	248	struct sync_pt *pt;
aff9da10 GP	249
3b52ce44	250	pt = kzalloc(sizeof(*pt), GFP_KERNEL);
aff9da10 GP	251	if (!pt)
	252	return NULL;
	253
aff9da10	254	sync_timeline_get(obj);
d3862e44	255	dma_fence_init(&pt->base, &timeline_fence_ops, &obj->lock,
f54d1867	256	obj->context, value);
d3862e44	257	INIT_LIST_HEAD(&pt->link);
a6aa8fca	258
d3862e44	259	spin_lock_irq(&obj->lock);
f1e8c671 CW	260	if (!dma_fence_is_signaled_locked(&pt->base)) {
	261	struct rb_node **p = &obj->pt_tree.rb_node;
	262	struct rb_node *parent = NULL;
	263
	264	while (*p) {
	265	struct sync_pt *other;
	266	int cmp;
	267
	268	parent = *p;
	269	other = rb_entry(parent, typeof(*pt), node);
	270	cmp = value - other->base.seqno;
	271	if (cmp > 0) {
	272	p = &parent->rb_right;
	273	} else if (cmp < 0) {
	274	p = &parent->rb_left;
	275	} else {
	276	if (dma_fence_get_rcu(&other->base)) {
	277	dma_fence_put(&pt->base);
	278	pt = other;
	279	goto unlock;
	280	}
	281	p = &parent->rb_left;
	282	}
	283	}
	284	rb_link_node(&pt->node, parent, p);
	285	rb_insert_color(&pt->node, &obj->pt_tree);
	286
	287	parent = rb_next(&pt->node);
	288	list_add_tail(&pt->link,
	289	parent ? &rb_entry(parent, typeof(*pt), node)->link : &obj->pt_list);
	290	}
	291	unlock:
d3862e44	292	spin_unlock_irq(&obj->lock);
a6aa8fca	293
aff9da10 GP	294	return pt;
	295	}
	296
1867a23b GP	297	/*
	298	* WARNING
	299	*
	300	* improper use of this can result in deadlocking kernel drivers from userspace.
	301	*/
	302
	303	/* opening sw_sync create a new sync obj */
	304	static int sw_sync_debugfs_open(struct inode inode, struct file file)
	305	{
	306	struct sync_timeline *obj;
	307	char task_comm[TASK_COMM_LEN];
	308
	309	get_task_comm(task_comm, current);
	310
b9bc2b7b	311	obj = sync_timeline_create(task_comm);
1867a23b GP	312	if (!obj)
	313	return -ENOMEM;
	314
	315	file->private_data = obj;
	316
	317	return 0;
	318	}
	319
	320	static int sw_sync_debugfs_release(struct inode inode, struct file file)
	321	{
	322	struct sync_timeline *obj = file->private_data;
ea4d5a27 DB	323	struct sync_pt pt, next;
	324
	325	spin_lock_irq(&obj->lock);
	326
	327	list_for_each_entry_safe(pt, next, &obj->pt_list, link) {
	328	dma_fence_set_error(&pt->base, -ENOENT);
	329	dma_fence_signal_locked(&pt->base);
	330	}
1867a23b	331
ea4d5a27	332	spin_unlock_irq(&obj->lock);
71110232 GP	333
71110232 GP	334	sync_timeline_put(obj);
1867a23b GP	335	return 0;
	336	}
	337
	338	static long sw_sync_ioctl_create_fence(struct sync_timeline *obj,
	339	unsigned long arg)
	340	{
	341	int fd = get_unused_fd_flags(O_CLOEXEC);
	342	int err;
	343	struct sync_pt *pt;
	344	struct sync_file *sync_file;
	345	struct sw_sync_create_fence_data data;
	346
	347	if (fd < 0)
	348	return fd;
	349
	350	if (copy_from_user(&data, (void __user *)arg, sizeof(data))) {
	351	err = -EFAULT;
	352	goto err;
	353	}
	354
3b52ce44	355	pt = sync_pt_create(obj, data.value);
1867a23b GP	356	if (!pt) {
	357	err = -ENOMEM;
	358	goto err;
	359	}
	360
	361	sync_file = sync_file_create(&pt->base);
4592bfcd	362	dma_fence_put(&pt->base);
1867a23b	363	if (!sync_file) {
1867a23b GP	364	err = -ENOMEM;
	365	goto err;
	366	}
	367
	368	data.fence = fd;
	369	if (copy_to_user((void __user *)arg, &data, sizeof(data))) {
	370	fput(sync_file->file);
	371	err = -EFAULT;
	372	goto err;
	373	}
	374
	375	fd_install(fd, sync_file->file);
	376
	377	return 0;
	378
	379	err:
	380	put_unused_fd(fd);
	381	return err;
	382	}
	383
	384	static long sw_sync_ioctl_inc(struct sync_timeline *obj, unsigned long arg)
	385	{
	386	u32 value;
	387
	388	if (copy_from_user(&value, (void __user *)arg, sizeof(value)))
	389	return -EFAULT;
	390
8f66d3aa CW	391	while (value > INT_MAX) {
	392	sync_timeline_signal(obj, INT_MAX);
	393	value -= INT_MAX;
	394	}
	395
1867a23b GP	396	sync_timeline_signal(obj, value);
	397
	398	return 0;
	399	}
	400
	401	static long sw_sync_ioctl(struct file *file, unsigned int cmd,
	402	unsigned long arg)
	403	{
	404	struct sync_timeline *obj = file->private_data;
	405
	406	switch (cmd) {
	407	case SW_SYNC_IOC_CREATE_FENCE:
	408	return sw_sync_ioctl_create_fence(obj, arg);
	409
	410	case SW_SYNC_IOC_INC:
	411	return sw_sync_ioctl_inc(obj, arg);
	412
	413	default:
	414	return -ENOTTY;
	415	}
	416	}
	417
	418	const struct file_operations sw_sync_debugfs_fops = {
	419	.open = sw_sync_debugfs_open,
	420	.release = sw_sync_debugfs_release,
	421	.unlocked_ioctl = sw_sync_ioctl,
	422	.compat_ioctl = sw_sync_ioctl,
	423	};