Commit | Line | Data |
---|---|---|
1da177e4 | 1 | /* |
9fc5cde7 | 2 | * Legacy: Generic DRM Buffer Management |
1da177e4 LT |
3 | * |
4 | * Copyright 1999, 2000 Precision Insight, Inc., Cedar Park, Texas. | |
5 | * Copyright 2000 VA Linux Systems, Inc., Sunnyvale, California. | |
6 | * All Rights Reserved. | |
7 | * | |
9fc5cde7 DH |
8 | * Author: Rickard E. (Rik) Faith <faith@valinux.com> |
9 | * Author: Gareth Hughes <gareth@valinux.com> | |
10 | * | |
1da177e4 LT |
11 | * Permission is hereby granted, free of charge, to any person obtaining a |
12 | * copy of this software and associated documentation files (the "Software"), | |
13 | * to deal in the Software without restriction, including without limitation | |
14 | * the rights to use, copy, modify, merge, publish, distribute, sublicense, | |
15 | * and/or sell copies of the Software, and to permit persons to whom the | |
16 | * Software is furnished to do so, subject to the following conditions: | |
17 | * | |
18 | * The above copyright notice and this permission notice (including the next | |
19 | * paragraph) shall be included in all copies or substantial portions of the | |
20 | * Software. | |
21 | * | |
22 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | |
23 | * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | |
24 | * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | |
25 | * VA LINUX SYSTEMS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR | |
26 | * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, | |
27 | * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR | |
28 | * OTHER DEALINGS IN THE SOFTWARE. | |
29 | */ | |
30 | ||
31 | #include <linux/vmalloc.h> | |
5a0e3ad6 | 32 | #include <linux/slab.h> |
f1a2a9b6 | 33 | #include <linux/log2.h> |
2d1a8a48 | 34 | #include <linux/export.h> |
f1a2a9b6 | 35 | #include <asm/shmparam.h> |
760285e7 | 36 | #include <drm/drmP.h> |
9fc5cde7 | 37 | #include "drm_legacy.h" |
1da177e4 | 38 | |
55910517 | 39 | static struct drm_map_list *drm_find_matching_map(struct drm_device *dev, |
f77d390c | 40 | struct drm_local_map *map) |
836cf046 | 41 | { |
55910517 | 42 | struct drm_map_list *entry; |
bd1b331f | 43 | list_for_each_entry(entry, &dev->maplist, head) { |
41c2e75e BH |
44 | /* |
45 | * Because the kernel-userspace ABI is fixed at a 32-bit offset | |
66aa6962 TV |
46 | * while PCI resources may live above that, we only compare the |
47 | * lower 32 bits of the map offset for maps of type | |
48 | * _DRM_FRAMEBUFFER or _DRM_REGISTERS. | |
49 | * It is assumed that if a driver have more than one resource | |
50 | * of each type, the lower 32 bits are different. | |
41c2e75e BH |
51 | */ |
52 | if (!entry->map || | |
53 | map->type != entry->map->type || | |
95c081c1 | 54 | entry->master != dev->master) |
41c2e75e BH |
55 | continue; |
56 | switch (map->type) { | |
57 | case _DRM_SHM: | |
58 | if (map->flags != _DRM_CONTAINS_LOCK) | |
59 | break; | |
66aa6962 | 60 | return entry; |
41c2e75e BH |
61 | case _DRM_REGISTERS: |
62 | case _DRM_FRAME_BUFFER: | |
66aa6962 TV |
63 | if ((entry->map->offset & 0xffffffff) == |
64 | (map->offset & 0xffffffff)) | |
65 | return entry; | |
41c2e75e BH |
66 | default: /* Make gcc happy */ |
67 | ; | |
836cf046 | 68 | } |
41c2e75e BH |
69 | if (entry->map->offset == map->offset) |
70 | return entry; | |
836cf046 DA |
71 | } |
72 | ||
73 | return NULL; | |
1da177e4 | 74 | } |
1da177e4 | 75 | |
e0be428e | 76 | static int drm_map_handle(struct drm_device *dev, struct drm_hash_item *hash, |
f1a2a9b6 | 77 | unsigned long user_token, int hashed_handle, int shm) |
d1f2b55a | 78 | { |
f1a2a9b6 DM |
79 | int use_hashed_handle, shift; |
80 | unsigned long add; | |
81 | ||
c2604ce0 | 82 | #if (BITS_PER_LONG == 64) |
8d153f71 TH |
83 | use_hashed_handle = ((user_token & 0xFFFFFFFF00000000UL) || hashed_handle); |
84 | #elif (BITS_PER_LONG == 32) | |
85 | use_hashed_handle = hashed_handle; | |
86 | #else | |
87 | #error Unsupported long size. Neither 64 nor 32 bits. | |
88 | #endif | |
d1f2b55a | 89 | |
e08870c8 TH |
90 | if (!use_hashed_handle) { |
91 | int ret; | |
1545085a | 92 | hash->key = user_token >> PAGE_SHIFT; |
e08870c8 TH |
93 | ret = drm_ht_insert_item(&dev->map_hash, hash); |
94 | if (ret != -EINVAL) | |
95 | return ret; | |
d1f2b55a | 96 | } |
f1a2a9b6 DM |
97 | |
98 | shift = 0; | |
99 | add = DRM_MAP_HASH_OFFSET >> PAGE_SHIFT; | |
100 | if (shm && (SHMLBA > PAGE_SIZE)) { | |
101 | int bits = ilog2(SHMLBA >> PAGE_SHIFT) + 1; | |
102 | ||
103 | /* For shared memory, we have to preserve the SHMLBA | |
104 | * bits of the eventual vma->vm_pgoff value during | |
105 | * mmap(). Otherwise we run into cache aliasing problems | |
106 | * on some platforms. On these platforms, the pgoff of | |
107 | * a mmap() request is used to pick a suitable virtual | |
108 | * address for the mmap() region such that it will not | |
109 | * cause cache aliasing problems. | |
110 | * | |
111 | * Therefore, make sure the SHMLBA relevant bits of the | |
112 | * hash value we use are equal to those in the original | |
113 | * kernel virtual address. | |
114 | */ | |
115 | shift = bits; | |
116 | add |= ((user_token >> PAGE_SHIFT) & ((1UL << bits) - 1UL)); | |
117 | } | |
118 | ||
e08870c8 TH |
119 | return drm_ht_just_insert_please(&dev->map_hash, hash, |
120 | user_token, 32 - PAGE_SHIFT - 3, | |
f1a2a9b6 | 121 | shift, add); |
d1f2b55a | 122 | } |
9a186645 | 123 | |
1da177e4 | 124 | /** |
f77d390c BH |
125 | * Core function to create a range of memory available for mapping by a |
126 | * non-root process. | |
1da177e4 LT |
127 | * |
128 | * Adjusts the memory offset to its absolute value according to the mapping | |
129 | * type. Adds the map to the map list drm_device::maplist. Adds MTRR's where | |
130 | * applicable and if supported by the kernel. | |
131 | */ | |
2bcfcbfc | 132 | static int drm_addmap_core(struct drm_device *dev, resource_size_t offset, |
c60ce623 | 133 | unsigned int size, enum drm_map_type type, |
55910517 | 134 | enum drm_map_flags flags, |
2bcfcbfc | 135 | struct drm_map_list **maplist) |
1da177e4 | 136 | { |
f77d390c | 137 | struct drm_local_map *map; |
55910517 | 138 | struct drm_map_list *list; |
9c8da5eb | 139 | drm_dma_handle_t *dmah; |
8d153f71 TH |
140 | unsigned long user_token; |
141 | int ret; | |
1da177e4 | 142 | |
9a298b2a | 143 | map = kmalloc(sizeof(*map), GFP_KERNEL); |
b5e89ed5 | 144 | if (!map) |
1da177e4 LT |
145 | return -ENOMEM; |
146 | ||
7ab98401 DA |
147 | map->offset = offset; |
148 | map->size = size; | |
149 | map->flags = flags; | |
150 | map->type = type; | |
1da177e4 LT |
151 | |
152 | /* Only allow shared memory to be removable since we only keep enough | |
153 | * book keeping information about shared memory to allow for removal | |
154 | * when processes fork. | |
155 | */ | |
b5e89ed5 | 156 | if ((map->flags & _DRM_REMOVABLE) && map->type != _DRM_SHM) { |
9a298b2a | 157 | kfree(map); |
1da177e4 LT |
158 | return -EINVAL; |
159 | } | |
41c2e75e BH |
160 | DRM_DEBUG("offset = 0x%08llx, size = 0x%08lx, type = %d\n", |
161 | (unsigned long long)map->offset, map->size, map->type); | |
b6741377 BH |
162 | |
163 | /* page-align _DRM_SHM maps. They are allocated here so there is no security | |
164 | * hole created by that and it works around various broken drivers that use | |
165 | * a non-aligned quantity to map the SAREA. --BenH | |
166 | */ | |
167 | if (map->type == _DRM_SHM) | |
168 | map->size = PAGE_ALIGN(map->size); | |
169 | ||
41c2e75e | 170 | if ((map->offset & (~(resource_size_t)PAGE_MASK)) || (map->size & (~PAGE_MASK))) { |
9a298b2a | 171 | kfree(map); |
1da177e4 LT |
172 | return -EINVAL; |
173 | } | |
b5e89ed5 | 174 | map->mtrr = -1; |
1da177e4 LT |
175 | map->handle = NULL; |
176 | ||
b5e89ed5 | 177 | switch (map->type) { |
1da177e4 LT |
178 | case _DRM_REGISTERS: |
179 | case _DRM_FRAME_BUFFER: | |
4b7fb9b5 | 180 | #if !defined(__sparc__) && !defined(__alpha__) && !defined(__ia64__) && !defined(__powerpc64__) && !defined(__x86_64__) && !defined(__arm__) |
8d2ea625 | 181 | if (map->offset + (map->size-1) < map->offset || |
b5e89ed5 | 182 | map->offset < virt_to_phys(high_memory)) { |
9a298b2a | 183 | kfree(map); |
1da177e4 LT |
184 | return -EINVAL; |
185 | } | |
1da177e4 | 186 | #endif |
836cf046 DA |
187 | /* Some drivers preinitialize some maps, without the X Server |
188 | * needing to be aware of it. Therefore, we just return success | |
189 | * when the server tries to create a duplicate map. | |
190 | */ | |
89625eb1 DA |
191 | list = drm_find_matching_map(dev, map); |
192 | if (list != NULL) { | |
193 | if (list->map->size != map->size) { | |
836cf046 | 194 | DRM_DEBUG("Matching maps of type %d with " |
b5e89ed5 DA |
195 | "mismatched sizes, (%ld vs %ld)\n", |
196 | map->type, map->size, | |
197 | list->map->size); | |
89625eb1 | 198 | list->map->size = map->size; |
836cf046 DA |
199 | } |
200 | ||
9a298b2a | 201 | kfree(map); |
89625eb1 | 202 | *maplist = list; |
836cf046 DA |
203 | return 0; |
204 | } | |
205 | ||
28185647 DV |
206 | if (map->type == _DRM_FRAME_BUFFER || |
207 | (map->flags & _DRM_WRITE_COMBINING)) { | |
208 | map->mtrr = | |
209 | arch_phys_wc_add(map->offset, map->size); | |
1da177e4 | 210 | } |
0769d39c | 211 | if (map->type == _DRM_REGISTERS) { |
ff47eaf2 AL |
212 | if (map->flags & _DRM_WRITE_COMBINING) |
213 | map->handle = ioremap_wc(map->offset, | |
214 | map->size); | |
215 | else | |
216 | map->handle = ioremap(map->offset, map->size); | |
0769d39c | 217 | if (!map->handle) { |
9a298b2a | 218 | kfree(map); |
0769d39c ST |
219 | return -ENOMEM; |
220 | } | |
221 | } | |
bc5f4523 | 222 | |
1da177e4 | 223 | break; |
1da177e4 | 224 | case _DRM_SHM: |
54ba2f76 DA |
225 | list = drm_find_matching_map(dev, map); |
226 | if (list != NULL) { | |
2bcfcbfc | 227 | if (list->map->size != map->size) { |
54ba2f76 DA |
228 | DRM_DEBUG("Matching maps of type %d with " |
229 | "mismatched sizes, (%ld vs %ld)\n", | |
230 | map->type, map->size, list->map->size); | |
231 | list->map->size = map->size; | |
232 | } | |
233 | ||
9a298b2a | 234 | kfree(map); |
54ba2f76 DA |
235 | *maplist = list; |
236 | return 0; | |
237 | } | |
f239b7b0 | 238 | map->handle = vmalloc_user(map->size); |
b5e89ed5 | 239 | DRM_DEBUG("%lu %d %p\n", |
04420c9c | 240 | map->size, order_base_2(map->size), map->handle); |
b5e89ed5 | 241 | if (!map->handle) { |
9a298b2a | 242 | kfree(map); |
1da177e4 LT |
243 | return -ENOMEM; |
244 | } | |
245 | map->offset = (unsigned long)map->handle; | |
b5e89ed5 | 246 | if (map->flags & _DRM_CONTAINS_LOCK) { |
1da177e4 | 247 | /* Prevent a 2nd X Server from creating a 2nd lock */ |
95c081c1 | 248 | if (dev->master->lock.hw_lock != NULL) { |
b5e89ed5 | 249 | vfree(map->handle); |
9a298b2a | 250 | kfree(map); |
1da177e4 LT |
251 | return -EBUSY; |
252 | } | |
95c081c1 | 253 | dev->sigdata.lock = dev->master->lock.hw_lock = map->handle; /* Pointer to lock */ |
1da177e4 LT |
254 | } |
255 | break; | |
54ba2f76 | 256 | case _DRM_AGP: { |
55910517 | 257 | struct drm_agp_mem *entry; |
54ba2f76 DA |
258 | int valid = 0; |
259 | ||
d9906753 | 260 | if (!dev->agp) { |
9a298b2a | 261 | kfree(map); |
54ba2f76 DA |
262 | return -EINVAL; |
263 | } | |
1da177e4 | 264 | #ifdef __alpha__ |
54ba2f76 | 265 | map->offset += dev->hose->mem_space->start; |
1da177e4 | 266 | #endif |
47a184a8 EA |
267 | /* In some cases (i810 driver), user space may have already |
268 | * added the AGP base itself, because dev->agp->base previously | |
269 | * only got set during AGP enable. So, only add the base | |
270 | * address if the map's offset isn't already within the | |
271 | * aperture. | |
54ba2f76 | 272 | */ |
47a184a8 EA |
273 | if (map->offset < dev->agp->base || |
274 | map->offset > dev->agp->base + | |
275 | dev->agp->agp_info.aper_size * 1024 * 1024 - 1) { | |
276 | map->offset += dev->agp->base; | |
277 | } | |
54ba2f76 DA |
278 | map->mtrr = dev->agp->agp_mtrr; /* for getmap */ |
279 | ||
280 | /* This assumes the DRM is in total control of AGP space. | |
281 | * It's not always the case as AGP can be in the control | |
282 | * of user space (i.e. i810 driver). So this loop will get | |
283 | * skipped and we double check that dev->agp->memory is | |
284 | * actually set as well as being invalid before EPERM'ing | |
285 | */ | |
bd1b331f | 286 | list_for_each_entry(entry, &dev->agp->memory, head) { |
54ba2f76 DA |
287 | if ((map->offset >= entry->bound) && |
288 | (map->offset + map->size <= entry->bound + entry->pages * PAGE_SIZE)) { | |
289 | valid = 1; | |
290 | break; | |
291 | } | |
1da177e4 | 292 | } |
bd1b331f | 293 | if (!list_empty(&dev->agp->memory) && !valid) { |
9a298b2a | 294 | kfree(map); |
54ba2f76 DA |
295 | return -EPERM; |
296 | } | |
41c2e75e BH |
297 | DRM_DEBUG("AGP offset = 0x%08llx, size = 0x%08lx\n", |
298 | (unsigned long long)map->offset, map->size); | |
54ba2f76 | 299 | |
a2c0a97b | 300 | break; |
812c369d | 301 | } |
1da177e4 LT |
302 | case _DRM_SCATTER_GATHER: |
303 | if (!dev->sg) { | |
9a298b2a | 304 | kfree(map); |
1da177e4 LT |
305 | return -EINVAL; |
306 | } | |
d1f2b55a | 307 | map->offset += (unsigned long)dev->sg->virtual; |
1da177e4 | 308 | break; |
b5e89ed5 | 309 | case _DRM_CONSISTENT: |
2d0f9eaf | 310 | /* dma_addr_t is 64bit on i386 with CONFIG_HIGHMEM64G, |
9c8da5eb | 311 | * As we're limiting the address to 2^32-1 (or less), |
2d0f9eaf DA |
312 | * casting it down to 32 bits is no problem, but we |
313 | * need to point to a 64bit variable first. */ | |
e6be8d9d | 314 | dmah = drm_pci_alloc(dev, map->size, map->size); |
9c8da5eb | 315 | if (!dmah) { |
9a298b2a | 316 | kfree(map); |
2d0f9eaf DA |
317 | return -ENOMEM; |
318 | } | |
9c8da5eb DA |
319 | map->handle = dmah->vaddr; |
320 | map->offset = (unsigned long)dmah->busaddr; | |
321 | kfree(dmah); | |
2d0f9eaf | 322 | break; |
1da177e4 | 323 | default: |
9a298b2a | 324 | kfree(map); |
1da177e4 LT |
325 | return -EINVAL; |
326 | } | |
327 | ||
94e3370e | 328 | list = kzalloc(sizeof(*list), GFP_KERNEL); |
b5e89ed5 | 329 | if (!list) { |
85abb3f9 | 330 | if (map->type == _DRM_REGISTERS) |
004a7727 | 331 | iounmap(map->handle); |
9a298b2a | 332 | kfree(map); |
1da177e4 LT |
333 | return -EINVAL; |
334 | } | |
1da177e4 LT |
335 | list->map = map; |
336 | ||
30e2fb18 | 337 | mutex_lock(&dev->struct_mutex); |
bd1b331f | 338 | list_add(&list->head, &dev->maplist); |
8d153f71 | 339 | |
d1f2b55a | 340 | /* Assign a 32-bit handle */ |
30e2fb18 | 341 | /* We do it here so that dev->struct_mutex protects the increment */ |
8d153f71 TH |
342 | user_token = (map->type == _DRM_SHM) ? (unsigned long)map->handle : |
343 | map->offset; | |
f1a2a9b6 DM |
344 | ret = drm_map_handle(dev, &list->hash, user_token, 0, |
345 | (map->type == _DRM_SHM)); | |
8d153f71 | 346 | if (ret) { |
85abb3f9 | 347 | if (map->type == _DRM_REGISTERS) |
004a7727 | 348 | iounmap(map->handle); |
9a298b2a EA |
349 | kfree(map); |
350 | kfree(list); | |
8d153f71 TH |
351 | mutex_unlock(&dev->struct_mutex); |
352 | return ret; | |
353 | } | |
354 | ||
1545085a | 355 | list->user_token = list->hash.key << PAGE_SHIFT; |
30e2fb18 | 356 | mutex_unlock(&dev->struct_mutex); |
1da177e4 | 357 | |
2ff2e8a3 | 358 | if (!(map->flags & _DRM_DRIVER)) |
95c081c1 | 359 | list->master = dev->master; |
89625eb1 | 360 | *maplist = list; |
7ab98401 | 361 | return 0; |
afe0f696 | 362 | } |
89625eb1 | 363 | |
2bcfcbfc | 364 | int drm_legacy_addmap(struct drm_device *dev, resource_size_t offset, |
9fc5cde7 DH |
365 | unsigned int size, enum drm_map_type type, |
366 | enum drm_map_flags flags, struct drm_local_map **map_ptr) | |
89625eb1 | 367 | { |
55910517 | 368 | struct drm_map_list *list; |
89625eb1 DA |
369 | int rc; |
370 | ||
371 | rc = drm_addmap_core(dev, offset, size, type, flags, &list); | |
372 | if (!rc) | |
373 | *map_ptr = list->map; | |
374 | return rc; | |
375 | } | |
9fc5cde7 | 376 | EXPORT_SYMBOL(drm_legacy_addmap); |
7ab98401 | 377 | |
f77d390c BH |
378 | /** |
379 | * Ioctl to specify a range of memory that is available for mapping by a | |
380 | * non-root process. | |
381 | * | |
382 | * \param inode device inode. | |
383 | * \param file_priv DRM file private. | |
384 | * \param cmd command. | |
385 | * \param arg pointer to a drm_map structure. | |
386 | * \return zero on success or a negative value on error. | |
387 | * | |
388 | */ | |
9fc5cde7 DH |
389 | int drm_legacy_addmap_ioctl(struct drm_device *dev, void *data, |
390 | struct drm_file *file_priv) | |
7ab98401 | 391 | { |
c153f45f | 392 | struct drm_map *map = data; |
55910517 | 393 | struct drm_map_list *maplist; |
7ab98401 DA |
394 | int err; |
395 | ||
7c1c2871 | 396 | if (!(capable(CAP_SYS_ADMIN) || map->type == _DRM_AGP || map->type == _DRM_SHM)) |
d985c108 DA |
397 | return -EPERM; |
398 | ||
e975eef0 | 399 | if (!drm_core_check_feature(dev, DRIVER_KMS_LEGACY_CONTEXT) && |
fa538645 | 400 | !drm_core_check_feature(dev, DRIVER_LEGACY)) |
e975eef0 DV |
401 | return -EINVAL; |
402 | ||
c153f45f EA |
403 | err = drm_addmap_core(dev, map->offset, map->size, map->type, |
404 | map->flags, &maplist); | |
7ab98401 | 405 | |
b5e89ed5 | 406 | if (err) |
7ab98401 | 407 | return err; |
d1f2b55a | 408 | |
67e1a014 | 409 | /* avoid a warning on 64-bit, this casting isn't very nice, but the API is set so too late */ |
c153f45f | 410 | map->handle = (void *)(unsigned long)maplist->user_token; |
0dd99f1b AL |
411 | |
412 | /* | |
413 | * It appears that there are no users of this value whatsoever -- | |
414 | * drmAddMap just discards it. Let's not encourage its use. | |
415 | * (Keeping drm_addmap_core's returned mtrr value would be wrong -- | |
416 | * it's not a real mtrr index anymore.) | |
417 | */ | |
418 | map->mtrr = -1; | |
419 | ||
1da177e4 | 420 | return 0; |
88f399cd | 421 | } |
1da177e4 | 422 | |
ec1f52ef DV |
423 | /* |
424 | * Get a mapping information. | |
425 | * | |
426 | * \param inode device inode. | |
427 | * \param file_priv DRM file private. | |
428 | * \param cmd command. | |
429 | * \param arg user argument, pointing to a drm_map structure. | |
430 | * | |
431 | * \return zero on success or a negative number on failure. | |
432 | * | |
433 | * Searches for the mapping with the specified offset and copies its information | |
434 | * into userspace | |
435 | */ | |
436 | int drm_legacy_getmap_ioctl(struct drm_device *dev, void *data, | |
437 | struct drm_file *file_priv) | |
438 | { | |
439 | struct drm_map *map = data; | |
440 | struct drm_map_list *r_list = NULL; | |
441 | struct list_head *list; | |
442 | int idx; | |
443 | int i; | |
444 | ||
e975eef0 | 445 | if (!drm_core_check_feature(dev, DRIVER_KMS_LEGACY_CONTEXT) && |
fa538645 | 446 | !drm_core_check_feature(dev, DRIVER_LEGACY)) |
e975eef0 DV |
447 | return -EINVAL; |
448 | ||
ec1f52ef DV |
449 | idx = map->offset; |
450 | if (idx < 0) | |
451 | return -EINVAL; | |
452 | ||
453 | i = 0; | |
454 | mutex_lock(&dev->struct_mutex); | |
455 | list_for_each(list, &dev->maplist) { | |
456 | if (i == idx) { | |
457 | r_list = list_entry(list, struct drm_map_list, head); | |
458 | break; | |
459 | } | |
460 | i++; | |
461 | } | |
462 | if (!r_list || !r_list->map) { | |
463 | mutex_unlock(&dev->struct_mutex); | |
464 | return -EINVAL; | |
465 | } | |
466 | ||
467 | map->offset = r_list->map->offset; | |
468 | map->size = r_list->map->size; | |
469 | map->type = r_list->map->type; | |
470 | map->flags = r_list->map->flags; | |
471 | map->handle = (void *)(unsigned long) r_list->user_token; | |
472 | map->mtrr = arch_phys_wc_index(r_list->map->mtrr); | |
473 | ||
474 | mutex_unlock(&dev->struct_mutex); | |
475 | ||
476 | return 0; | |
477 | } | |
478 | ||
1da177e4 LT |
479 | /** |
480 | * Remove a map private from list and deallocate resources if the mapping | |
481 | * isn't in use. | |
482 | * | |
1da177e4 LT |
483 | * Searches the map on drm_device::maplist, removes it from the list, see if |
484 | * its being used, and free any associate resource (such as MTRR's) if it's not | |
485 | * being on use. | |
486 | * | |
9fc5cde7 | 487 | * \sa drm_legacy_addmap |
1da177e4 | 488 | */ |
9fc5cde7 | 489 | int drm_legacy_rmmap_locked(struct drm_device *dev, struct drm_local_map *map) |
1da177e4 | 490 | { |
55910517 | 491 | struct drm_map_list *r_list = NULL, *list_t; |
836cf046 | 492 | drm_dma_handle_t dmah; |
bd1b331f | 493 | int found = 0; |
7c1c2871 | 494 | struct drm_master *master; |
1da177e4 | 495 | |
836cf046 | 496 | /* Find the list entry for the map and remove it */ |
bd1b331f | 497 | list_for_each_entry_safe(r_list, list_t, &dev->maplist, head) { |
836cf046 | 498 | if (r_list->map == map) { |
7c1c2871 | 499 | master = r_list->master; |
bd1b331f | 500 | list_del(&r_list->head); |
1545085a TH |
501 | drm_ht_remove_key(&dev->map_hash, |
502 | r_list->user_token >> PAGE_SHIFT); | |
9a298b2a | 503 | kfree(r_list); |
bd1b331f | 504 | found = 1; |
836cf046 DA |
505 | break; |
506 | } | |
1da177e4 LT |
507 | } |
508 | ||
bd1b331f | 509 | if (!found) |
1da177e4 | 510 | return -EINVAL; |
1da177e4 | 511 | |
836cf046 DA |
512 | switch (map->type) { |
513 | case _DRM_REGISTERS: | |
004a7727 | 514 | iounmap(map->handle); |
836cf046 DA |
515 | /* FALLTHROUGH */ |
516 | case _DRM_FRAME_BUFFER: | |
28185647 | 517 | arch_phys_wc_del(map->mtrr); |
836cf046 DA |
518 | break; |
519 | case _DRM_SHM: | |
520 | vfree(map->handle); | |
7c1c2871 DA |
521 | if (master) { |
522 | if (dev->sigdata.lock == master->lock.hw_lock) | |
523 | dev->sigdata.lock = NULL; | |
524 | master->lock.hw_lock = NULL; /* SHM removed */ | |
525 | master->lock.file_priv = NULL; | |
171901d1 | 526 | wake_up_interruptible_all(&master->lock.lock_queue); |
7c1c2871 | 527 | } |
836cf046 DA |
528 | break; |
529 | case _DRM_AGP: | |
530 | case _DRM_SCATTER_GATHER: | |
531 | break; | |
532 | case _DRM_CONSISTENT: | |
533 | dmah.vaddr = map->handle; | |
534 | dmah.busaddr = map->offset; | |
535 | dmah.size = map->size; | |
1c96e84e | 536 | __drm_legacy_pci_free(dev, &dmah); |
836cf046 | 537 | break; |
1da177e4 | 538 | } |
9a298b2a | 539 | kfree(map); |
836cf046 | 540 | |
1da177e4 LT |
541 | return 0; |
542 | } | |
9fc5cde7 | 543 | EXPORT_SYMBOL(drm_legacy_rmmap_locked); |
836cf046 | 544 | |
40647e45 | 545 | void drm_legacy_rmmap(struct drm_device *dev, struct drm_local_map *map) |
836cf046 | 546 | { |
40647e45 | 547 | if (!drm_core_check_feature(dev, DRIVER_KMS_LEGACY_CONTEXT) && |
fa538645 | 548 | !drm_core_check_feature(dev, DRIVER_LEGACY)) |
40647e45 | 549 | return; |
836cf046 | 550 | |
30e2fb18 | 551 | mutex_lock(&dev->struct_mutex); |
40647e45 | 552 | drm_legacy_rmmap_locked(dev, map); |
30e2fb18 | 553 | mutex_unlock(&dev->struct_mutex); |
836cf046 | 554 | } |
9fc5cde7 | 555 | EXPORT_SYMBOL(drm_legacy_rmmap); |
7ab98401 | 556 | |
40647e45 DV |
557 | void drm_legacy_master_rmmaps(struct drm_device *dev, struct drm_master *master) |
558 | { | |
559 | struct drm_map_list *r_list, *list_temp; | |
560 | ||
fa538645 | 561 | if (!drm_core_check_feature(dev, DRIVER_LEGACY)) |
40647e45 DV |
562 | return; |
563 | ||
564 | mutex_lock(&dev->struct_mutex); | |
565 | list_for_each_entry_safe(r_list, list_temp, &dev->maplist, head) { | |
566 | if (r_list->master == master) { | |
567 | drm_legacy_rmmap_locked(dev, r_list->map); | |
568 | r_list = NULL; | |
569 | } | |
570 | } | |
571 | mutex_unlock(&dev->struct_mutex); | |
572 | } | |
573 | ||
836cf046 DA |
574 | /* The rmmap ioctl appears to be unnecessary. All mappings are torn down on |
575 | * the last close of the device, and this is necessary for cleanup when things | |
576 | * exit uncleanly. Therefore, having userland manually remove mappings seems | |
577 | * like a pointless exercise since they're going away anyway. | |
578 | * | |
579 | * One use case might be after addmap is allowed for normal users for SHM and | |
580 | * gets used by drivers that the server doesn't need to care about. This seems | |
581 | * unlikely. | |
f77d390c BH |
582 | * |
583 | * \param inode device inode. | |
584 | * \param file_priv DRM file private. | |
585 | * \param cmd command. | |
586 | * \param arg pointer to a struct drm_map structure. | |
587 | * \return zero on success or a negative value on error. | |
836cf046 | 588 | */ |
9fc5cde7 DH |
589 | int drm_legacy_rmmap_ioctl(struct drm_device *dev, void *data, |
590 | struct drm_file *file_priv) | |
7ab98401 | 591 | { |
c153f45f | 592 | struct drm_map *request = data; |
f77d390c | 593 | struct drm_local_map *map = NULL; |
55910517 | 594 | struct drm_map_list *r_list; |
836cf046 | 595 | int ret; |
7ab98401 | 596 | |
e975eef0 | 597 | if (!drm_core_check_feature(dev, DRIVER_KMS_LEGACY_CONTEXT) && |
fa538645 | 598 | !drm_core_check_feature(dev, DRIVER_LEGACY)) |
e975eef0 DV |
599 | return -EINVAL; |
600 | ||
30e2fb18 | 601 | mutex_lock(&dev->struct_mutex); |
bd1b331f | 602 | list_for_each_entry(r_list, &dev->maplist, head) { |
836cf046 | 603 | if (r_list->map && |
c153f45f | 604 | r_list->user_token == (unsigned long)request->handle && |
836cf046 DA |
605 | r_list->map->flags & _DRM_REMOVABLE) { |
606 | map = r_list->map; | |
607 | break; | |
608 | } | |
609 | } | |
610 | ||
611 | /* List has wrapped around to the head pointer, or its empty we didn't | |
612 | * find anything. | |
613 | */ | |
bd1b331f | 614 | if (list_empty(&dev->maplist) || !map) { |
30e2fb18 | 615 | mutex_unlock(&dev->struct_mutex); |
836cf046 DA |
616 | return -EINVAL; |
617 | } | |
618 | ||
836cf046 DA |
619 | /* Register and framebuffer maps are permanent */ |
620 | if ((map->type == _DRM_REGISTERS) || (map->type == _DRM_FRAME_BUFFER)) { | |
30e2fb18 | 621 | mutex_unlock(&dev->struct_mutex); |
836cf046 DA |
622 | return 0; |
623 | } | |
624 | ||
9fc5cde7 | 625 | ret = drm_legacy_rmmap_locked(dev, map); |
836cf046 | 626 | |
30e2fb18 | 627 | mutex_unlock(&dev->struct_mutex); |
836cf046 DA |
628 | |
629 | return ret; | |
7ab98401 | 630 | } |
1da177e4 LT |
631 | |
632 | /** | |
633 | * Cleanup after an error on one of the addbufs() functions. | |
634 | * | |
836cf046 | 635 | * \param dev DRM device. |
1da177e4 LT |
636 | * \param entry buffer entry where the error occurred. |
637 | * | |
638 | * Frees any pages and buffers associated with the given entry. | |
639 | */ | |
2bcfcbfc PM |
640 | static void drm_cleanup_buf_error(struct drm_device *dev, |
641 | struct drm_buf_entry *entry) | |
1da177e4 LT |
642 | { |
643 | int i; | |
644 | ||
645 | if (entry->seg_count) { | |
646 | for (i = 0; i < entry->seg_count; i++) { | |
647 | if (entry->seglist[i]) { | |
ddf19b97 | 648 | drm_pci_free(dev, entry->seglist[i]); |
1da177e4 LT |
649 | } |
650 | } | |
9a298b2a | 651 | kfree(entry->seglist); |
1da177e4 LT |
652 | |
653 | entry->seg_count = 0; | |
654 | } | |
655 | ||
b5e89ed5 DA |
656 | if (entry->buf_count) { |
657 | for (i = 0; i < entry->buf_count; i++) { | |
9a298b2a | 658 | kfree(entry->buflist[i].dev_private); |
1da177e4 | 659 | } |
9a298b2a | 660 | kfree(entry->buflist); |
1da177e4 LT |
661 | |
662 | entry->buf_count = 0; | |
663 | } | |
664 | } | |
665 | ||
a7fb8a23 | 666 | #if IS_ENABLED(CONFIG_AGP) |
1da177e4 | 667 | /** |
d59431bf | 668 | * Add AGP buffers for DMA transfers. |
1da177e4 | 669 | * |
84b1fd10 | 670 | * \param dev struct drm_device to which the buffers are to be added. |
c60ce623 | 671 | * \param request pointer to a struct drm_buf_desc describing the request. |
1da177e4 | 672 | * \return zero on success or a negative number on failure. |
b5e89ed5 | 673 | * |
1da177e4 LT |
674 | * After some sanity checks creates a drm_buf structure for each buffer and |
675 | * reallocates the buffer list of the same size order to accommodate the new | |
676 | * buffers. | |
677 | */ | |
9fc5cde7 DH |
678 | int drm_legacy_addbufs_agp(struct drm_device *dev, |
679 | struct drm_buf_desc *request) | |
1da177e4 | 680 | { |
cdd55a29 DA |
681 | struct drm_device_dma *dma = dev->dma; |
682 | struct drm_buf_entry *entry; | |
55910517 | 683 | struct drm_agp_mem *agp_entry; |
056219e2 | 684 | struct drm_buf *buf; |
1da177e4 LT |
685 | unsigned long offset; |
686 | unsigned long agp_offset; | |
687 | int count; | |
688 | int order; | |
689 | int size; | |
690 | int alignment; | |
691 | int page_order; | |
692 | int total; | |
693 | int byte_count; | |
54ba2f76 | 694 | int i, valid; |
056219e2 | 695 | struct drm_buf **temp_buflist; |
1da177e4 | 696 | |
b5e89ed5 DA |
697 | if (!dma) |
698 | return -EINVAL; | |
1da177e4 | 699 | |
d59431bf | 700 | count = request->count; |
04420c9c | 701 | order = order_base_2(request->size); |
1da177e4 LT |
702 | size = 1 << order; |
703 | ||
b5e89ed5 DA |
704 | alignment = (request->flags & _DRM_PAGE_ALIGN) |
705 | ? PAGE_ALIGN(size) : size; | |
1da177e4 LT |
706 | page_order = order - PAGE_SHIFT > 0 ? order - PAGE_SHIFT : 0; |
707 | total = PAGE_SIZE << page_order; | |
708 | ||
709 | byte_count = 0; | |
d59431bf | 710 | agp_offset = dev->agp->base + request->agp_start; |
1da177e4 | 711 | |
b5e89ed5 DA |
712 | DRM_DEBUG("count: %d\n", count); |
713 | DRM_DEBUG("order: %d\n", order); | |
714 | DRM_DEBUG("size: %d\n", size); | |
d985c108 | 715 | DRM_DEBUG("agp_offset: %lx\n", agp_offset); |
b5e89ed5 DA |
716 | DRM_DEBUG("alignment: %d\n", alignment); |
717 | DRM_DEBUG("page_order: %d\n", page_order); | |
718 | DRM_DEBUG("total: %d\n", total); | |
1da177e4 | 719 | |
b5e89ed5 DA |
720 | if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER) |
721 | return -EINVAL; | |
1da177e4 | 722 | |
54ba2f76 DA |
723 | /* Make sure buffers are located in AGP memory that we own */ |
724 | valid = 0; | |
bd1b331f | 725 | list_for_each_entry(agp_entry, &dev->agp->memory, head) { |
54ba2f76 DA |
726 | if ((agp_offset >= agp_entry->bound) && |
727 | (agp_offset + total * count <= agp_entry->bound + agp_entry->pages * PAGE_SIZE)) { | |
728 | valid = 1; | |
729 | break; | |
730 | } | |
731 | } | |
bd1b331f | 732 | if (!list_empty(&dev->agp->memory) && !valid) { |
54ba2f76 DA |
733 | DRM_DEBUG("zone invalid\n"); |
734 | return -EINVAL; | |
735 | } | |
2177a218 | 736 | spin_lock(&dev->buf_lock); |
b5e89ed5 | 737 | if (dev->buf_use) { |
2177a218 | 738 | spin_unlock(&dev->buf_lock); |
1da177e4 LT |
739 | return -EBUSY; |
740 | } | |
b5e89ed5 | 741 | atomic_inc(&dev->buf_alloc); |
2177a218 | 742 | spin_unlock(&dev->buf_lock); |
1da177e4 | 743 | |
30e2fb18 | 744 | mutex_lock(&dev->struct_mutex); |
1da177e4 | 745 | entry = &dma->bufs[order]; |
b5e89ed5 | 746 | if (entry->buf_count) { |
30e2fb18 | 747 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 DA |
748 | atomic_dec(&dev->buf_alloc); |
749 | return -ENOMEM; /* May only call once for each order */ | |
1da177e4 LT |
750 | } |
751 | ||
752 | if (count < 0 || count > 4096) { | |
30e2fb18 | 753 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 754 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
755 | return -EINVAL; |
756 | } | |
757 | ||
81a44137 | 758 | entry->buflist = kcalloc(count, sizeof(*entry->buflist), GFP_KERNEL); |
b5e89ed5 | 759 | if (!entry->buflist) { |
30e2fb18 | 760 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 761 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
762 | return -ENOMEM; |
763 | } | |
1da177e4 LT |
764 | |
765 | entry->buf_size = size; | |
766 | entry->page_order = page_order; | |
767 | ||
768 | offset = 0; | |
769 | ||
b5e89ed5 DA |
770 | while (entry->buf_count < count) { |
771 | buf = &entry->buflist[entry->buf_count]; | |
772 | buf->idx = dma->buf_count + entry->buf_count; | |
773 | buf->total = alignment; | |
774 | buf->order = order; | |
775 | buf->used = 0; | |
1da177e4 | 776 | |
b5e89ed5 | 777 | buf->offset = (dma->byte_count + offset); |
1da177e4 LT |
778 | buf->bus_address = agp_offset + offset; |
779 | buf->address = (void *)(agp_offset + offset); | |
b5e89ed5 | 780 | buf->next = NULL; |
1da177e4 LT |
781 | buf->waiting = 0; |
782 | buf->pending = 0; | |
6c340eac | 783 | buf->file_priv = NULL; |
1da177e4 LT |
784 | |
785 | buf->dev_priv_size = dev->driver->dev_priv_size; | |
94e3370e | 786 | buf->dev_private = kzalloc(buf->dev_priv_size, GFP_KERNEL); |
b5e89ed5 | 787 | if (!buf->dev_private) { |
1da177e4 LT |
788 | /* Set count correctly so we free the proper amount. */ |
789 | entry->buf_count = count; | |
b5e89ed5 | 790 | drm_cleanup_buf_error(dev, entry); |
30e2fb18 | 791 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 792 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
793 | return -ENOMEM; |
794 | } | |
1da177e4 | 795 | |
b5e89ed5 | 796 | DRM_DEBUG("buffer %d @ %p\n", entry->buf_count, buf->address); |
1da177e4 LT |
797 | |
798 | offset += alignment; | |
799 | entry->buf_count++; | |
800 | byte_count += PAGE_SIZE << page_order; | |
801 | } | |
802 | ||
b5e89ed5 | 803 | DRM_DEBUG("byte_count: %d\n", byte_count); |
1da177e4 | 804 | |
9a298b2a EA |
805 | temp_buflist = krealloc(dma->buflist, |
806 | (dma->buf_count + entry->buf_count) * | |
807 | sizeof(*dma->buflist), GFP_KERNEL); | |
b5e89ed5 | 808 | if (!temp_buflist) { |
1da177e4 | 809 | /* Free the entry because it isn't valid */ |
b5e89ed5 | 810 | drm_cleanup_buf_error(dev, entry); |
30e2fb18 | 811 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 812 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
813 | return -ENOMEM; |
814 | } | |
815 | dma->buflist = temp_buflist; | |
816 | ||
b5e89ed5 | 817 | for (i = 0; i < entry->buf_count; i++) { |
1da177e4 LT |
818 | dma->buflist[i + dma->buf_count] = &entry->buflist[i]; |
819 | } | |
820 | ||
821 | dma->buf_count += entry->buf_count; | |
d985c108 DA |
822 | dma->seg_count += entry->seg_count; |
823 | dma->page_count += byte_count >> PAGE_SHIFT; | |
1da177e4 LT |
824 | dma->byte_count += byte_count; |
825 | ||
b5e89ed5 DA |
826 | DRM_DEBUG("dma->buf_count : %d\n", dma->buf_count); |
827 | DRM_DEBUG("entry->buf_count : %d\n", entry->buf_count); | |
1da177e4 | 828 | |
30e2fb18 | 829 | mutex_unlock(&dev->struct_mutex); |
1da177e4 | 830 | |
d59431bf DA |
831 | request->count = entry->buf_count; |
832 | request->size = size; | |
1da177e4 LT |
833 | |
834 | dma->flags = _DRM_DMA_USE_AGP; | |
835 | ||
b5e89ed5 | 836 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
837 | return 0; |
838 | } | |
9fc5cde7 | 839 | EXPORT_SYMBOL(drm_legacy_addbufs_agp); |
a7fb8a23 | 840 | #endif /* CONFIG_AGP */ |
1da177e4 | 841 | |
9fc5cde7 DH |
842 | int drm_legacy_addbufs_pci(struct drm_device *dev, |
843 | struct drm_buf_desc *request) | |
1da177e4 | 844 | { |
cdd55a29 | 845 | struct drm_device_dma *dma = dev->dma; |
1da177e4 LT |
846 | int count; |
847 | int order; | |
848 | int size; | |
849 | int total; | |
850 | int page_order; | |
cdd55a29 | 851 | struct drm_buf_entry *entry; |
ddf19b97 | 852 | drm_dma_handle_t *dmah; |
056219e2 | 853 | struct drm_buf *buf; |
1da177e4 LT |
854 | int alignment; |
855 | unsigned long offset; | |
856 | int i; | |
857 | int byte_count; | |
858 | int page_count; | |
859 | unsigned long *temp_pagelist; | |
056219e2 | 860 | struct drm_buf **temp_buflist; |
1da177e4 | 861 | |
b5e89ed5 DA |
862 | if (!drm_core_check_feature(dev, DRIVER_PCI_DMA)) |
863 | return -EINVAL; | |
d985c108 | 864 | |
b5e89ed5 DA |
865 | if (!dma) |
866 | return -EINVAL; | |
1da177e4 | 867 | |
d985c108 DA |
868 | if (!capable(CAP_SYS_ADMIN)) |
869 | return -EPERM; | |
870 | ||
d59431bf | 871 | count = request->count; |
04420c9c | 872 | order = order_base_2(request->size); |
1da177e4 LT |
873 | size = 1 << order; |
874 | ||
a344a7e7 DV |
875 | DRM_DEBUG("count=%d, size=%d (%d), order=%d\n", |
876 | request->count, request->size, size, order); | |
1da177e4 | 877 | |
b5e89ed5 DA |
878 | if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER) |
879 | return -EINVAL; | |
1da177e4 | 880 | |
d59431bf | 881 | alignment = (request->flags & _DRM_PAGE_ALIGN) |
b5e89ed5 | 882 | ? PAGE_ALIGN(size) : size; |
1da177e4 LT |
883 | page_order = order - PAGE_SHIFT > 0 ? order - PAGE_SHIFT : 0; |
884 | total = PAGE_SIZE << page_order; | |
885 | ||
2177a218 | 886 | spin_lock(&dev->buf_lock); |
b5e89ed5 | 887 | if (dev->buf_use) { |
2177a218 | 888 | spin_unlock(&dev->buf_lock); |
1da177e4 LT |
889 | return -EBUSY; |
890 | } | |
b5e89ed5 | 891 | atomic_inc(&dev->buf_alloc); |
2177a218 | 892 | spin_unlock(&dev->buf_lock); |
1da177e4 | 893 | |
30e2fb18 | 894 | mutex_lock(&dev->struct_mutex); |
1da177e4 | 895 | entry = &dma->bufs[order]; |
b5e89ed5 | 896 | if (entry->buf_count) { |
30e2fb18 | 897 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 898 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
899 | return -ENOMEM; /* May only call once for each order */ |
900 | } | |
901 | ||
902 | if (count < 0 || count > 4096) { | |
30e2fb18 | 903 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 904 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
905 | return -EINVAL; |
906 | } | |
907 | ||
ed6dee41 | 908 | entry->buflist = kcalloc(count, sizeof(*entry->buflist), GFP_KERNEL); |
b5e89ed5 | 909 | if (!entry->buflist) { |
30e2fb18 | 910 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 911 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
912 | return -ENOMEM; |
913 | } | |
b5e89ed5 | 914 | |
ed6dee41 | 915 | entry->seglist = kcalloc(count, sizeof(*entry->seglist), GFP_KERNEL); |
b5e89ed5 | 916 | if (!entry->seglist) { |
9a298b2a | 917 | kfree(entry->buflist); |
30e2fb18 | 918 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 919 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
920 | return -ENOMEM; |
921 | } | |
1da177e4 LT |
922 | |
923 | /* Keep the original pagelist until we know all the allocations | |
924 | * have succeeded | |
925 | */ | |
20274008 ME |
926 | temp_pagelist = kmalloc_array(dma->page_count + (count << page_order), |
927 | sizeof(*dma->pagelist), | |
928 | GFP_KERNEL); | |
1da177e4 | 929 | if (!temp_pagelist) { |
9a298b2a EA |
930 | kfree(entry->buflist); |
931 | kfree(entry->seglist); | |
30e2fb18 | 932 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 933 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
934 | return -ENOMEM; |
935 | } | |
936 | memcpy(temp_pagelist, | |
b5e89ed5 DA |
937 | dma->pagelist, dma->page_count * sizeof(*dma->pagelist)); |
938 | DRM_DEBUG("pagelist: %d entries\n", | |
939 | dma->page_count + (count << page_order)); | |
1da177e4 | 940 | |
b5e89ed5 | 941 | entry->buf_size = size; |
1da177e4 LT |
942 | entry->page_order = page_order; |
943 | byte_count = 0; | |
944 | page_count = 0; | |
945 | ||
b5e89ed5 | 946 | while (entry->buf_count < count) { |
bc5f4523 | 947 | |
e6be8d9d | 948 | dmah = drm_pci_alloc(dev, PAGE_SIZE << page_order, 0x1000); |
bc5f4523 | 949 | |
ddf19b97 | 950 | if (!dmah) { |
1da177e4 LT |
951 | /* Set count correctly so we free the proper amount. */ |
952 | entry->buf_count = count; | |
953 | entry->seg_count = count; | |
954 | drm_cleanup_buf_error(dev, entry); | |
9a298b2a | 955 | kfree(temp_pagelist); |
30e2fb18 | 956 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 957 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
958 | return -ENOMEM; |
959 | } | |
ddf19b97 | 960 | entry->seglist[entry->seg_count++] = dmah; |
b5e89ed5 DA |
961 | for (i = 0; i < (1 << page_order); i++) { |
962 | DRM_DEBUG("page %d @ 0x%08lx\n", | |
963 | dma->page_count + page_count, | |
ddf19b97 | 964 | (unsigned long)dmah->vaddr + PAGE_SIZE * i); |
1da177e4 | 965 | temp_pagelist[dma->page_count + page_count++] |
ddf19b97 | 966 | = (unsigned long)dmah->vaddr + PAGE_SIZE * i; |
1da177e4 | 967 | } |
b5e89ed5 DA |
968 | for (offset = 0; |
969 | offset + size <= total && entry->buf_count < count; | |
970 | offset += alignment, ++entry->buf_count) { | |
971 | buf = &entry->buflist[entry->buf_count]; | |
972 | buf->idx = dma->buf_count + entry->buf_count; | |
973 | buf->total = alignment; | |
974 | buf->order = order; | |
975 | buf->used = 0; | |
976 | buf->offset = (dma->byte_count + byte_count + offset); | |
ddf19b97 DA |
977 | buf->address = (void *)(dmah->vaddr + offset); |
978 | buf->bus_address = dmah->busaddr + offset; | |
b5e89ed5 | 979 | buf->next = NULL; |
1da177e4 LT |
980 | buf->waiting = 0; |
981 | buf->pending = 0; | |
6c340eac | 982 | buf->file_priv = NULL; |
1da177e4 LT |
983 | |
984 | buf->dev_priv_size = dev->driver->dev_priv_size; | |
94e3370e DB |
985 | buf->dev_private = kzalloc(buf->dev_priv_size, |
986 | GFP_KERNEL); | |
b5e89ed5 | 987 | if (!buf->dev_private) { |
1da177e4 LT |
988 | /* Set count correctly so we free the proper amount. */ |
989 | entry->buf_count = count; | |
990 | entry->seg_count = count; | |
b5e89ed5 | 991 | drm_cleanup_buf_error(dev, entry); |
9a298b2a | 992 | kfree(temp_pagelist); |
30e2fb18 | 993 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 994 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
995 | return -ENOMEM; |
996 | } | |
1da177e4 | 997 | |
b5e89ed5 DA |
998 | DRM_DEBUG("buffer %d @ %p\n", |
999 | entry->buf_count, buf->address); | |
1da177e4 LT |
1000 | } |
1001 | byte_count += PAGE_SIZE << page_order; | |
1002 | } | |
1003 | ||
9a298b2a EA |
1004 | temp_buflist = krealloc(dma->buflist, |
1005 | (dma->buf_count + entry->buf_count) * | |
1006 | sizeof(*dma->buflist), GFP_KERNEL); | |
1da177e4 LT |
1007 | if (!temp_buflist) { |
1008 | /* Free the entry because it isn't valid */ | |
b5e89ed5 | 1009 | drm_cleanup_buf_error(dev, entry); |
9a298b2a | 1010 | kfree(temp_pagelist); |
30e2fb18 | 1011 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 1012 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
1013 | return -ENOMEM; |
1014 | } | |
1015 | dma->buflist = temp_buflist; | |
1016 | ||
b5e89ed5 | 1017 | for (i = 0; i < entry->buf_count; i++) { |
1da177e4 LT |
1018 | dma->buflist[i + dma->buf_count] = &entry->buflist[i]; |
1019 | } | |
1020 | ||
88393161 | 1021 | /* No allocations failed, so now we can replace the original pagelist |
1da177e4 LT |
1022 | * with the new one. |
1023 | */ | |
1024 | if (dma->page_count) { | |
9a298b2a | 1025 | kfree(dma->pagelist); |
1da177e4 LT |
1026 | } |
1027 | dma->pagelist = temp_pagelist; | |
1028 | ||
1029 | dma->buf_count += entry->buf_count; | |
1030 | dma->seg_count += entry->seg_count; | |
1031 | dma->page_count += entry->seg_count << page_order; | |
1032 | dma->byte_count += PAGE_SIZE * (entry->seg_count << page_order); | |
1033 | ||
30e2fb18 | 1034 | mutex_unlock(&dev->struct_mutex); |
1da177e4 | 1035 | |
d59431bf DA |
1036 | request->count = entry->buf_count; |
1037 | request->size = size; | |
1da177e4 | 1038 | |
3417f33e GS |
1039 | if (request->flags & _DRM_PCI_BUFFER_RO) |
1040 | dma->flags = _DRM_DMA_USE_PCI_RO; | |
1041 | ||
b5e89ed5 | 1042 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
1043 | return 0; |
1044 | ||
1045 | } | |
9fc5cde7 | 1046 | EXPORT_SYMBOL(drm_legacy_addbufs_pci); |
1da177e4 | 1047 | |
9fc5cde7 DH |
1048 | static int drm_legacy_addbufs_sg(struct drm_device *dev, |
1049 | struct drm_buf_desc *request) | |
1da177e4 | 1050 | { |
cdd55a29 DA |
1051 | struct drm_device_dma *dma = dev->dma; |
1052 | struct drm_buf_entry *entry; | |
056219e2 | 1053 | struct drm_buf *buf; |
1da177e4 LT |
1054 | unsigned long offset; |
1055 | unsigned long agp_offset; | |
1056 | int count; | |
1057 | int order; | |
1058 | int size; | |
1059 | int alignment; | |
1060 | int page_order; | |
1061 | int total; | |
1062 | int byte_count; | |
1063 | int i; | |
056219e2 | 1064 | struct drm_buf **temp_buflist; |
1da177e4 | 1065 | |
b5e89ed5 DA |
1066 | if (!drm_core_check_feature(dev, DRIVER_SG)) |
1067 | return -EINVAL; | |
1068 | ||
1069 | if (!dma) | |
1070 | return -EINVAL; | |
1da177e4 | 1071 | |
d985c108 DA |
1072 | if (!capable(CAP_SYS_ADMIN)) |
1073 | return -EPERM; | |
1074 | ||
d59431bf | 1075 | count = request->count; |
04420c9c | 1076 | order = order_base_2(request->size); |
1da177e4 LT |
1077 | size = 1 << order; |
1078 | ||
b5e89ed5 DA |
1079 | alignment = (request->flags & _DRM_PAGE_ALIGN) |
1080 | ? PAGE_ALIGN(size) : size; | |
1da177e4 LT |
1081 | page_order = order - PAGE_SHIFT > 0 ? order - PAGE_SHIFT : 0; |
1082 | total = PAGE_SIZE << page_order; | |
1083 | ||
1084 | byte_count = 0; | |
d59431bf | 1085 | agp_offset = request->agp_start; |
1da177e4 | 1086 | |
b5e89ed5 DA |
1087 | DRM_DEBUG("count: %d\n", count); |
1088 | DRM_DEBUG("order: %d\n", order); | |
1089 | DRM_DEBUG("size: %d\n", size); | |
1090 | DRM_DEBUG("agp_offset: %lu\n", agp_offset); | |
1091 | DRM_DEBUG("alignment: %d\n", alignment); | |
1092 | DRM_DEBUG("page_order: %d\n", page_order); | |
1093 | DRM_DEBUG("total: %d\n", total); | |
1da177e4 | 1094 | |
b5e89ed5 DA |
1095 | if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER) |
1096 | return -EINVAL; | |
1da177e4 | 1097 | |
2177a218 | 1098 | spin_lock(&dev->buf_lock); |
b5e89ed5 | 1099 | if (dev->buf_use) { |
2177a218 | 1100 | spin_unlock(&dev->buf_lock); |
1da177e4 LT |
1101 | return -EBUSY; |
1102 | } | |
b5e89ed5 | 1103 | atomic_inc(&dev->buf_alloc); |
2177a218 | 1104 | spin_unlock(&dev->buf_lock); |
1da177e4 | 1105 | |
30e2fb18 | 1106 | mutex_lock(&dev->struct_mutex); |
1da177e4 | 1107 | entry = &dma->bufs[order]; |
b5e89ed5 | 1108 | if (entry->buf_count) { |
30e2fb18 | 1109 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 DA |
1110 | atomic_dec(&dev->buf_alloc); |
1111 | return -ENOMEM; /* May only call once for each order */ | |
1da177e4 LT |
1112 | } |
1113 | ||
1114 | if (count < 0 || count > 4096) { | |
30e2fb18 | 1115 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 1116 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
1117 | return -EINVAL; |
1118 | } | |
1119 | ||
b5a2ecd8 | 1120 | entry->buflist = kcalloc(count, sizeof(*entry->buflist), GFP_KERNEL); |
b5e89ed5 | 1121 | if (!entry->buflist) { |
30e2fb18 | 1122 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 1123 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
1124 | return -ENOMEM; |
1125 | } | |
1da177e4 LT |
1126 | |
1127 | entry->buf_size = size; | |
1128 | entry->page_order = page_order; | |
1129 | ||
1130 | offset = 0; | |
1131 | ||
b5e89ed5 DA |
1132 | while (entry->buf_count < count) { |
1133 | buf = &entry->buflist[entry->buf_count]; | |
1134 | buf->idx = dma->buf_count + entry->buf_count; | |
1135 | buf->total = alignment; | |
1136 | buf->order = order; | |
1137 | buf->used = 0; | |
1da177e4 | 1138 | |
b5e89ed5 | 1139 | buf->offset = (dma->byte_count + offset); |
1da177e4 | 1140 | buf->bus_address = agp_offset + offset; |
b5e89ed5 | 1141 | buf->address = (void *)(agp_offset + offset |
d1f2b55a | 1142 | + (unsigned long)dev->sg->virtual); |
b5e89ed5 | 1143 | buf->next = NULL; |
1da177e4 LT |
1144 | buf->waiting = 0; |
1145 | buf->pending = 0; | |
6c340eac | 1146 | buf->file_priv = NULL; |
1da177e4 LT |
1147 | |
1148 | buf->dev_priv_size = dev->driver->dev_priv_size; | |
94e3370e | 1149 | buf->dev_private = kzalloc(buf->dev_priv_size, GFP_KERNEL); |
b5e89ed5 | 1150 | if (!buf->dev_private) { |
1da177e4 LT |
1151 | /* Set count correctly so we free the proper amount. */ |
1152 | entry->buf_count = count; | |
b5e89ed5 | 1153 | drm_cleanup_buf_error(dev, entry); |
30e2fb18 | 1154 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 1155 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
1156 | return -ENOMEM; |
1157 | } | |
1158 | ||
b5e89ed5 | 1159 | DRM_DEBUG("buffer %d @ %p\n", entry->buf_count, buf->address); |
1da177e4 LT |
1160 | |
1161 | offset += alignment; | |
1162 | entry->buf_count++; | |
1163 | byte_count += PAGE_SIZE << page_order; | |
1164 | } | |
1165 | ||
b5e89ed5 | 1166 | DRM_DEBUG("byte_count: %d\n", byte_count); |
1da177e4 | 1167 | |
9a298b2a EA |
1168 | temp_buflist = krealloc(dma->buflist, |
1169 | (dma->buf_count + entry->buf_count) * | |
1170 | sizeof(*dma->buflist), GFP_KERNEL); | |
b5e89ed5 | 1171 | if (!temp_buflist) { |
1da177e4 | 1172 | /* Free the entry because it isn't valid */ |
b5e89ed5 | 1173 | drm_cleanup_buf_error(dev, entry); |
30e2fb18 | 1174 | mutex_unlock(&dev->struct_mutex); |
b5e89ed5 | 1175 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
1176 | return -ENOMEM; |
1177 | } | |
1178 | dma->buflist = temp_buflist; | |
1179 | ||
b5e89ed5 | 1180 | for (i = 0; i < entry->buf_count; i++) { |
1da177e4 LT |
1181 | dma->buflist[i + dma->buf_count] = &entry->buflist[i]; |
1182 | } | |
1183 | ||
1184 | dma->buf_count += entry->buf_count; | |
d985c108 DA |
1185 | dma->seg_count += entry->seg_count; |
1186 | dma->page_count += byte_count >> PAGE_SHIFT; | |
1da177e4 LT |
1187 | dma->byte_count += byte_count; |
1188 | ||
b5e89ed5 DA |
1189 | DRM_DEBUG("dma->buf_count : %d\n", dma->buf_count); |
1190 | DRM_DEBUG("entry->buf_count : %d\n", entry->buf_count); | |
1da177e4 | 1191 | |
30e2fb18 | 1192 | mutex_unlock(&dev->struct_mutex); |
1da177e4 | 1193 | |
d59431bf DA |
1194 | request->count = entry->buf_count; |
1195 | request->size = size; | |
1da177e4 LT |
1196 | |
1197 | dma->flags = _DRM_DMA_USE_SG; | |
1198 | ||
b5e89ed5 | 1199 | atomic_dec(&dev->buf_alloc); |
1da177e4 LT |
1200 | return 0; |
1201 | } | |
1202 | ||
1203 | /** | |
1204 | * Add buffers for DMA transfers (ioctl). | |
1205 | * | |
1206 | * \param inode device inode. | |
6c340eac | 1207 | * \param file_priv DRM file private. |
1da177e4 | 1208 | * \param cmd command. |
c60ce623 | 1209 | * \param arg pointer to a struct drm_buf_desc request. |
1da177e4 LT |
1210 | * \return zero on success or a negative number on failure. |
1211 | * | |
1212 | * According with the memory type specified in drm_buf_desc::flags and the | |
1213 | * build options, it dispatches the call either to addbufs_agp(), | |
1214 | * addbufs_sg() or addbufs_pci() for AGP, scatter-gather or consistent | |
1215 | * PCI memory respectively. | |
1216 | */ | |
9fc5cde7 DH |
1217 | int drm_legacy_addbufs(struct drm_device *dev, void *data, |
1218 | struct drm_file *file_priv) | |
1da177e4 | 1219 | { |
c153f45f | 1220 | struct drm_buf_desc *request = data; |
d59431bf | 1221 | int ret; |
b5e89ed5 | 1222 | |
fa538645 | 1223 | if (!drm_core_check_feature(dev, DRIVER_LEGACY)) |
8d38c4b4 DV |
1224 | return -EINVAL; |
1225 | ||
1da177e4 LT |
1226 | if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA)) |
1227 | return -EINVAL; | |
1228 | ||
a7fb8a23 | 1229 | #if IS_ENABLED(CONFIG_AGP) |
c153f45f | 1230 | if (request->flags & _DRM_AGP_BUFFER) |
9fc5cde7 | 1231 | ret = drm_legacy_addbufs_agp(dev, request); |
1da177e4 LT |
1232 | else |
1233 | #endif | |
c153f45f | 1234 | if (request->flags & _DRM_SG_BUFFER) |
9fc5cde7 | 1235 | ret = drm_legacy_addbufs_sg(dev, request); |
c153f45f | 1236 | else if (request->flags & _DRM_FB_BUFFER) |
687fbb2e | 1237 | ret = -EINVAL; |
1da177e4 | 1238 | else |
9fc5cde7 | 1239 | ret = drm_legacy_addbufs_pci(dev, request); |
d59431bf | 1240 | |
d59431bf | 1241 | return ret; |
1da177e4 LT |
1242 | } |
1243 | ||
1da177e4 LT |
1244 | /** |
1245 | * Get information about the buffer mappings. | |
1246 | * | |
1247 | * This was originally mean for debugging purposes, or by a sophisticated | |
1248 | * client library to determine how best to use the available buffers (e.g., | |
1249 | * large buffers can be used for image transfer). | |
1250 | * | |
1251 | * \param inode device inode. | |
6c340eac | 1252 | * \param file_priv DRM file private. |
1da177e4 LT |
1253 | * \param cmd command. |
1254 | * \param arg pointer to a drm_buf_info structure. | |
1255 | * \return zero on success or a negative number on failure. | |
1256 | * | |
2177a218 | 1257 | * Increments drm_device::buf_use while holding the drm_device::buf_lock |
1da177e4 LT |
1258 | * lock, preventing of allocating more buffers after this call. Information |
1259 | * about each requested buffer is then copied into user space. | |
1260 | */ | |
5c7640ab AV |
1261 | int __drm_legacy_infobufs(struct drm_device *dev, |
1262 | void *data, int *p, | |
1263 | int (*f)(void *, int, struct drm_buf_entry *)) | |
1da177e4 | 1264 | { |
cdd55a29 | 1265 | struct drm_device_dma *dma = dev->dma; |
1da177e4 LT |
1266 | int i; |
1267 | int count; | |
1268 | ||
fa538645 | 1269 | if (!drm_core_check_feature(dev, DRIVER_LEGACY)) |
8d38c4b4 DV |
1270 | return -EINVAL; |
1271 | ||
1da177e4 LT |
1272 | if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA)) |
1273 | return -EINVAL; | |
1274 | ||
b5e89ed5 DA |
1275 | if (!dma) |
1276 | return -EINVAL; | |
1da177e4 | 1277 | |
2177a218 | 1278 | spin_lock(&dev->buf_lock); |
b5e89ed5 | 1279 | if (atomic_read(&dev->buf_alloc)) { |
2177a218 | 1280 | spin_unlock(&dev->buf_lock); |
1da177e4 LT |
1281 | return -EBUSY; |
1282 | } | |
1283 | ++dev->buf_use; /* Can't allocate more after this call */ | |
2177a218 | 1284 | spin_unlock(&dev->buf_lock); |
1da177e4 | 1285 | |
b5e89ed5 DA |
1286 | for (i = 0, count = 0; i < DRM_MAX_ORDER + 1; i++) { |
1287 | if (dma->bufs[i].buf_count) | |
1288 | ++count; | |
1da177e4 LT |
1289 | } |
1290 | ||
b5e89ed5 | 1291 | DRM_DEBUG("count = %d\n", count); |
1da177e4 | 1292 | |
5c7640ab | 1293 | if (*p >= count) { |
b5e89ed5 | 1294 | for (i = 0, count = 0; i < DRM_MAX_ORDER + 1; i++) { |
5c7640ab AV |
1295 | struct drm_buf_entry *from = &dma->bufs[i]; |
1296 | if (from->buf_count) { | |
1297 | if (f(data, count, from) < 0) | |
1da177e4 | 1298 | return -EFAULT; |
b5e89ed5 DA |
1299 | DRM_DEBUG("%d %d %d %d %d\n", |
1300 | i, | |
1301 | dma->bufs[i].buf_count, | |
1302 | dma->bufs[i].buf_size, | |
b008c0fc DH |
1303 | dma->bufs[i].low_mark, |
1304 | dma->bufs[i].high_mark); | |
1da177e4 LT |
1305 | ++count; |
1306 | } | |
1307 | } | |
1308 | } | |
5c7640ab | 1309 | *p = count; |
1da177e4 LT |
1310 | |
1311 | return 0; | |
1312 | } | |
1313 | ||
5c7640ab AV |
1314 | static int copy_one_buf(void *data, int count, struct drm_buf_entry *from) |
1315 | { | |
1316 | struct drm_buf_info *request = data; | |
1317 | struct drm_buf_desc __user *to = &request->list[count]; | |
1318 | struct drm_buf_desc v = {.count = from->buf_count, | |
1319 | .size = from->buf_size, | |
1320 | .low_mark = from->low_mark, | |
1321 | .high_mark = from->high_mark}; | |
1322 | return copy_to_user(to, &v, offsetof(struct drm_buf_desc, flags)); | |
1323 | } | |
1324 | ||
1325 | int drm_legacy_infobufs(struct drm_device *dev, void *data, | |
1326 | struct drm_file *file_priv) | |
1327 | { | |
1328 | struct drm_buf_info *request = data; | |
1329 | return __drm_legacy_infobufs(dev, data, &request->count, copy_one_buf); | |
1330 | } | |
1331 | ||
1da177e4 LT |
1332 | /** |
1333 | * Specifies a low and high water mark for buffer allocation | |
1334 | * | |
1335 | * \param inode device inode. | |
6c340eac | 1336 | * \param file_priv DRM file private. |
1da177e4 LT |
1337 | * \param cmd command. |
1338 | * \param arg a pointer to a drm_buf_desc structure. | |
1339 | * \return zero on success or a negative number on failure. | |
1340 | * | |
1341 | * Verifies that the size order is bounded between the admissible orders and | |
1342 | * updates the respective drm_device_dma::bufs entry low and high water mark. | |
1343 | * | |
1344 | * \note This ioctl is deprecated and mostly never used. | |
1345 | */ | |
9fc5cde7 DH |
1346 | int drm_legacy_markbufs(struct drm_device *dev, void *data, |
1347 | struct drm_file *file_priv) | |
1da177e4 | 1348 | { |
cdd55a29 | 1349 | struct drm_device_dma *dma = dev->dma; |
c153f45f | 1350 | struct drm_buf_desc *request = data; |
1da177e4 | 1351 | int order; |
cdd55a29 | 1352 | struct drm_buf_entry *entry; |
1da177e4 | 1353 | |
fa538645 | 1354 | if (!drm_core_check_feature(dev, DRIVER_LEGACY)) |
8d38c4b4 DV |
1355 | return -EINVAL; |
1356 | ||
1da177e4 LT |
1357 | if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA)) |
1358 | return -EINVAL; | |
1359 | ||
b5e89ed5 DA |
1360 | if (!dma) |
1361 | return -EINVAL; | |
1da177e4 | 1362 | |
b5e89ed5 | 1363 | DRM_DEBUG("%d, %d, %d\n", |
c153f45f | 1364 | request->size, request->low_mark, request->high_mark); |
04420c9c | 1365 | order = order_base_2(request->size); |
b5e89ed5 DA |
1366 | if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER) |
1367 | return -EINVAL; | |
1da177e4 LT |
1368 | entry = &dma->bufs[order]; |
1369 | ||
c153f45f | 1370 | if (request->low_mark < 0 || request->low_mark > entry->buf_count) |
1da177e4 | 1371 | return -EINVAL; |
c153f45f | 1372 | if (request->high_mark < 0 || request->high_mark > entry->buf_count) |
1da177e4 LT |
1373 | return -EINVAL; |
1374 | ||
b008c0fc DH |
1375 | entry->low_mark = request->low_mark; |
1376 | entry->high_mark = request->high_mark; | |
1da177e4 LT |
1377 | |
1378 | return 0; | |
1379 | } | |
1380 | ||
1381 | /** | |
b5e89ed5 | 1382 | * Unreserve the buffers in list, previously reserved using drmDMA. |
1da177e4 LT |
1383 | * |
1384 | * \param inode device inode. | |
6c340eac | 1385 | * \param file_priv DRM file private. |
1da177e4 LT |
1386 | * \param cmd command. |
1387 | * \param arg pointer to a drm_buf_free structure. | |
1388 | * \return zero on success or a negative number on failure. | |
b5e89ed5 | 1389 | * |
1da177e4 LT |
1390 | * Calls free_buffer() for each used buffer. |
1391 | * This function is primarily used for debugging. | |
1392 | */ | |
9fc5cde7 DH |
1393 | int drm_legacy_freebufs(struct drm_device *dev, void *data, |
1394 | struct drm_file *file_priv) | |
1da177e4 | 1395 | { |
cdd55a29 | 1396 | struct drm_device_dma *dma = dev->dma; |
c153f45f | 1397 | struct drm_buf_free *request = data; |
1da177e4 LT |
1398 | int i; |
1399 | int idx; | |
056219e2 | 1400 | struct drm_buf *buf; |
1da177e4 | 1401 | |
fa538645 | 1402 | if (!drm_core_check_feature(dev, DRIVER_LEGACY)) |
8d38c4b4 DV |
1403 | return -EINVAL; |
1404 | ||
1da177e4 LT |
1405 | if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA)) |
1406 | return -EINVAL; | |
1407 | ||
b5e89ed5 DA |
1408 | if (!dma) |
1409 | return -EINVAL; | |
1da177e4 | 1410 | |
c153f45f EA |
1411 | DRM_DEBUG("%d\n", request->count); |
1412 | for (i = 0; i < request->count; i++) { | |
1413 | if (copy_from_user(&idx, &request->list[i], sizeof(idx))) | |
1da177e4 | 1414 | return -EFAULT; |
b5e89ed5 DA |
1415 | if (idx < 0 || idx >= dma->buf_count) { |
1416 | DRM_ERROR("Index %d (of %d max)\n", | |
1417 | idx, dma->buf_count - 1); | |
1da177e4 LT |
1418 | return -EINVAL; |
1419 | } | |
1420 | buf = dma->buflist[idx]; | |
6c340eac | 1421 | if (buf->file_priv != file_priv) { |
b5e89ed5 | 1422 | DRM_ERROR("Process %d freeing buffer not owned\n", |
ba25f9dc | 1423 | task_pid_nr(current)); |
1da177e4 LT |
1424 | return -EINVAL; |
1425 | } | |
a266162a | 1426 | drm_legacy_free_buffer(dev, buf); |
1da177e4 LT |
1427 | } |
1428 | ||
1429 | return 0; | |
1430 | } | |
1431 | ||
1432 | /** | |
1433 | * Maps all of the DMA buffers into client-virtual space (ioctl). | |
1434 | * | |
1435 | * \param inode device inode. | |
6c340eac | 1436 | * \param file_priv DRM file private. |
1da177e4 LT |
1437 | * \param cmd command. |
1438 | * \param arg pointer to a drm_buf_map structure. | |
1439 | * \return zero on success or a negative number on failure. | |
1440 | * | |
6be5ceb0 LT |
1441 | * Maps the AGP, SG or PCI buffer region with vm_mmap(), and copies information |
1442 | * about each buffer into user space. For PCI buffers, it calls vm_mmap() with | |
3417f33e GS |
1443 | * offset equal to 0, which drm_mmap() interpretes as PCI buffers and calls |
1444 | * drm_mmap_dma(). | |
1da177e4 | 1445 | */ |
87d3ce11 AV |
1446 | int __drm_legacy_mapbufs(struct drm_device *dev, void *data, int *p, |
1447 | void __user **v, | |
1448 | int (*f)(void *, int, unsigned long, | |
2bcfcbfc PM |
1449 | struct drm_buf *), |
1450 | struct drm_file *file_priv) | |
1da177e4 | 1451 | { |
cdd55a29 | 1452 | struct drm_device_dma *dma = dev->dma; |
1da177e4 | 1453 | int retcode = 0; |
1da177e4 | 1454 | unsigned long virtual; |
1da177e4 LT |
1455 | int i; |
1456 | ||
fa538645 | 1457 | if (!drm_core_check_feature(dev, DRIVER_LEGACY)) |
8d38c4b4 DV |
1458 | return -EINVAL; |
1459 | ||
1da177e4 LT |
1460 | if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA)) |
1461 | return -EINVAL; | |
1462 | ||
b5e89ed5 DA |
1463 | if (!dma) |
1464 | return -EINVAL; | |
1da177e4 | 1465 | |
2177a218 | 1466 | spin_lock(&dev->buf_lock); |
b5e89ed5 | 1467 | if (atomic_read(&dev->buf_alloc)) { |
2177a218 | 1468 | spin_unlock(&dev->buf_lock); |
1da177e4 LT |
1469 | return -EBUSY; |
1470 | } | |
1471 | dev->buf_use++; /* Can't allocate more after this call */ | |
2177a218 | 1472 | spin_unlock(&dev->buf_lock); |
1da177e4 | 1473 | |
87d3ce11 | 1474 | if (*p >= dma->buf_count) { |
d9906753 | 1475 | if ((dev->agp && (dma->flags & _DRM_DMA_USE_AGP)) |
b5e89ed5 | 1476 | || (drm_core_check_feature(dev, DRIVER_SG) |
687fbb2e | 1477 | && (dma->flags & _DRM_DMA_USE_SG))) { |
f77d390c | 1478 | struct drm_local_map *map = dev->agp_buffer_map; |
d1f2b55a | 1479 | unsigned long token = dev->agp_buffer_token; |
1da177e4 | 1480 | |
b5e89ed5 | 1481 | if (!map) { |
1da177e4 LT |
1482 | retcode = -EINVAL; |
1483 | goto done; | |
1484 | } | |
6be5ceb0 | 1485 | virtual = vm_mmap(file_priv->filp, 0, map->size, |
b5e89ed5 | 1486 | PROT_READ | PROT_WRITE, |
c153f45f EA |
1487 | MAP_SHARED, |
1488 | token); | |
1da177e4 | 1489 | } else { |
6be5ceb0 | 1490 | virtual = vm_mmap(file_priv->filp, 0, dma->byte_count, |
b5e89ed5 DA |
1491 | PROT_READ | PROT_WRITE, |
1492 | MAP_SHARED, 0); | |
1da177e4 | 1493 | } |
b5e89ed5 | 1494 | if (virtual > -1024UL) { |
1da177e4 LT |
1495 | /* Real error */ |
1496 | retcode = (signed long)virtual; | |
1497 | goto done; | |
1498 | } | |
87d3ce11 | 1499 | *v = (void __user *)virtual; |
1da177e4 | 1500 | |
b5e89ed5 | 1501 | for (i = 0; i < dma->buf_count; i++) { |
87d3ce11 | 1502 | if (f(data, i, virtual, dma->buflist[i]) < 0) { |
1da177e4 LT |
1503 | retcode = -EFAULT; |
1504 | goto done; | |
1505 | } | |
1506 | } | |
1507 | } | |
b5e89ed5 | 1508 | done: |
87d3ce11 AV |
1509 | *p = dma->buf_count; |
1510 | DRM_DEBUG("%d buffers, retcode = %d\n", *p, retcode); | |
1da177e4 LT |
1511 | |
1512 | return retcode; | |
1513 | } | |
1514 | ||
87d3ce11 AV |
1515 | static int map_one_buf(void *data, int idx, unsigned long virtual, |
1516 | struct drm_buf *buf) | |
1517 | { | |
1518 | struct drm_buf_map *request = data; | |
1519 | unsigned long address = virtual + buf->offset; /* *** */ | |
1520 | ||
1521 | if (copy_to_user(&request->list[idx].idx, &buf->idx, | |
1522 | sizeof(request->list[0].idx))) | |
1523 | return -EFAULT; | |
1524 | if (copy_to_user(&request->list[idx].total, &buf->total, | |
1525 | sizeof(request->list[0].total))) | |
1526 | return -EFAULT; | |
1527 | if (clear_user(&request->list[idx].used, sizeof(int))) | |
1528 | return -EFAULT; | |
1529 | if (copy_to_user(&request->list[idx].address, &address, | |
1530 | sizeof(address))) | |
1531 | return -EFAULT; | |
1532 | return 0; | |
1533 | } | |
1534 | ||
1535 | int drm_legacy_mapbufs(struct drm_device *dev, void *data, | |
1536 | struct drm_file *file_priv) | |
1537 | { | |
1538 | struct drm_buf_map *request = data; | |
1539 | return __drm_legacy_mapbufs(dev, data, &request->count, | |
1540 | &request->virtual, map_one_buf, | |
1541 | file_priv); | |
1542 | } | |
1543 | ||
9fc5cde7 | 1544 | int drm_legacy_dma_ioctl(struct drm_device *dev, void *data, |
6eb9278a DV |
1545 | struct drm_file *file_priv) |
1546 | { | |
fa538645 | 1547 | if (!drm_core_check_feature(dev, DRIVER_LEGACY)) |
6eb9278a DV |
1548 | return -EINVAL; |
1549 | ||
1550 | if (dev->driver->dma_ioctl) | |
1551 | return dev->driver->dma_ioctl(dev, data, file_priv); | |
1552 | else | |
1553 | return -EINVAL; | |
1554 | } | |
1555 | ||
9fc5cde7 | 1556 | struct drm_local_map *drm_legacy_getsarea(struct drm_device *dev) |
bd0c0cee DV |
1557 | { |
1558 | struct drm_map_list *entry; | |
1559 | ||
1560 | list_for_each_entry(entry, &dev->maplist, head) { | |
1561 | if (entry->map && entry->map->type == _DRM_SHM && | |
1562 | (entry->map->flags & _DRM_CONTAINS_LOCK)) { | |
1563 | return entry->map; | |
1564 | } | |
1565 | } | |
1566 | return NULL; | |
1567 | } | |
9fc5cde7 | 1568 | EXPORT_SYMBOL(drm_legacy_getsarea); |