drivers/video/fbdev/core/fbmem.c

   1 /*
   2  *  linux/drivers/video/fbmem.c
   3  *
   4  *  Copyright (C) 1994 Martin Schaller
   5  *
   6  *      2001 - Documented with DocBook
   7  *      - Brad Douglas <brad@neruo.com>
   8  *
   9  * This file is subject to the terms and conditions of the GNU General Public
  10  * License.  See the file COPYING in the main directory of this archive
  11  * for more details.
  12  */
  13
  14 #include <linux/module.h>
  15
  16 #include <linux/compat.h>
  17 #include <linux/types.h>
  18 #include <linux/errno.h>
  19 #include <linux/kernel.h>
  20 #include <linux/major.h>
  21 #include <linux/slab.h>
  22 #include <linux/mm.h>
  23 #include <linux/mman.h>
  24 #include <linux/vt.h>
  25 #include <linux/init.h>
  26 #include <linux/linux_logo.h>
  27 #include <linux/proc_fs.h>
  28 #include <linux/platform_device.h>
  29 #include <linux/seq_file.h>
  30 #include <linux/console.h>
  31 #include <linux/kmod.h>
  32 #include <linux/err.h>
  33 #include <linux/device.h>
  34 #include <linux/efi.h>
  35 #include <linux/fb.h>
  36 #include <linux/fbcon.h>
  37 #include <linux/mem_encrypt.h>
  38 #include <linux/pci.h>
  39
  40 #include <asm/fb.h>
  41
  42
  43     /*
  44      *  Frame buffer device initialization and setup routines
  45      */
  46
  47 #define FBPIXMAPSIZE    (1024 * 8)
  48
  49 static DEFINE_MUTEX(registration_lock);
  50
  51 struct fb_info *registered_fb[FB_MAX] __read_mostly;
  52 EXPORT_SYMBOL(registered_fb);
  53
  54 int num_registered_fb __read_mostly;
  55 EXPORT_SYMBOL(num_registered_fb);
  56
  57 bool fb_center_logo __read_mostly;
  58
  59 int fb_logo_count __read_mostly = -1;
  60
  61 static struct fb_info *get_fb_info(unsigned int idx)
  62 {
  63         struct fb_info *fb_info;
  64
  65         if (idx >= FB_MAX)
  66                 return ERR_PTR(-ENODEV);
  67
  68         mutex_lock(&registration_lock);
  69         fb_info = registered_fb[idx];
  70         if (fb_info)
  71                 refcount_inc(&fb_info->count);
  72         mutex_unlock(&registration_lock);
  73
  74         return fb_info;
  75 }
  76
  77 static void put_fb_info(struct fb_info *fb_info)
  78 {
  79         if (!refcount_dec_and_test(&fb_info->count))
  80                 return;
  81         if (fb_info->fbops->fb_destroy)
  82                 fb_info->fbops->fb_destroy(fb_info);
  83 }
  84
  85 /*
  86  * Helpers
  87  */
  88
  89 int fb_get_color_depth(struct fb_var_screeninfo *var,
  90                        struct fb_fix_screeninfo *fix)
  91 {
  92         int depth = 0;
  93
  94         if (fix->visual == FB_VISUAL_MONO01 ||
  95             fix->visual == FB_VISUAL_MONO10)
  96                 depth = 1;
  97         else {
  98                 if (var->green.length == var->blue.length &&
  99                     var->green.length == var->red.length &&
 100                     var->green.offset == var->blue.offset &&
 101                     var->green.offset == var->red.offset)
 102                         depth = var->green.length;
 103                 else
 104                         depth = var->green.length + var->red.length +
 105                                 var->blue.length;
 106         }
 107
 108         return depth;
 109 }
 110 EXPORT_SYMBOL(fb_get_color_depth);
 111
 112 /*
 113  * Data padding functions.
 114  */
 115 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
 116 {
 117         __fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
 118 }
 119 EXPORT_SYMBOL(fb_pad_aligned_buffer);
 120
 121 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
 122                                 u32 shift_high, u32 shift_low, u32 mod)
 123 {
 124         u8 mask = (u8) (0xfff << shift_high), tmp;
 125         int i, j;
 126
 127         for (i = height; i--; ) {
 128                 for (j = 0; j < idx; j++) {
 129                         tmp = dst[j];
 130                         tmp &= mask;
 131                         tmp |= *src >> shift_low;
 132                         dst[j] = tmp;
 133                         tmp = *src << shift_high;
 134                         dst[j+1] = tmp;
 135                         src++;
 136                 }
 137                 tmp = dst[idx];
 138                 tmp &= mask;
 139                 tmp |= *src >> shift_low;
 140                 dst[idx] = tmp;
 141                 if (shift_high < mod) {
 142                         tmp = *src << shift_high;
 143                         dst[idx+1] = tmp;
 144                 }
 145                 src++;
 146                 dst += d_pitch;
 147         }
 148 }
 149 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
 150
 151 /*
 152  * we need to lock this section since fb_cursor
 153  * may use fb_imageblit()
 154  */
 155 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
 156 {
 157         u32 align = buf->buf_align - 1, offset;
 158         char *addr = buf->addr;
 159
 160         /* If IO mapped, we need to sync before access, no sharing of
 161          * the pixmap is done
 162          */
 163         if (buf->flags & FB_PIXMAP_IO) {
 164                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
 165                         info->fbops->fb_sync(info);
 166                 return addr;
 167         }
 168
 169         /* See if we fit in the remaining pixmap space */
 170         offset = buf->offset + align;
 171         offset &= ~align;
 172         if (offset + size > buf->size) {
 173                 /* We do not fit. In order to be able to re-use the buffer,
 174                  * we must ensure no asynchronous DMA'ing or whatever operation
 175                  * is in progress, we sync for that.
 176                  */
 177                 if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
 178                         info->fbops->fb_sync(info);
 179                 offset = 0;
 180         }
 181         buf->offset = offset + size;
 182         addr += offset;
 183
 184         return addr;
 185 }
 186 EXPORT_SYMBOL(fb_get_buffer_offset);
 187
 188 #ifdef CONFIG_LOGO
 189
 190 static inline unsigned safe_shift(unsigned d, int n)
 191 {
 192         return n < 0 ? d >> -n : d << n;
 193 }
 194
 195 static void fb_set_logocmap(struct fb_info *info,
 196                                    const struct linux_logo *logo)
 197 {
 198         struct fb_cmap palette_cmap;
 199         u16 palette_green[16];
 200         u16 palette_blue[16];
 201         u16 palette_red[16];
 202         int i, j, n;
 203         const unsigned char *clut = logo->clut;
 204
 205         palette_cmap.start = 0;
 206         palette_cmap.len = 16;
 207         palette_cmap.red = palette_red;
 208         palette_cmap.green = palette_green;
 209         palette_cmap.blue = palette_blue;
 210         palette_cmap.transp = NULL;
 211
 212         for (i = 0; i < logo->clutsize; i += n) {
 213                 n = logo->clutsize - i;
 214                 /* palette_cmap provides space for only 16 colors at once */
 215                 if (n > 16)
 216                         n = 16;
 217                 palette_cmap.start = 32 + i;
 218                 palette_cmap.len = n;
 219                 for (j = 0; j < n; ++j) {
 220                         palette_cmap.red[j] = clut[0] << 8 | clut[0];
 221                         palette_cmap.green[j] = clut[1] << 8 | clut[1];
 222                         palette_cmap.blue[j] = clut[2] << 8 | clut[2];
 223                         clut += 3;
 224                 }
 225                 fb_set_cmap(&palette_cmap, info);
 226         }
 227 }
 228
 229 static void  fb_set_logo_truepalette(struct fb_info *info,
 230                                             const struct linux_logo *logo,
 231                                             u32 *palette)
 232 {
 233         static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
 234         unsigned char redmask, greenmask, bluemask;
 235         int redshift, greenshift, blueshift;
 236         int i;
 237         const unsigned char *clut = logo->clut;
 238
 239         /*
 240          * We have to create a temporary palette since console palette is only
 241          * 16 colors long.
 242          */
 243         /* Bug: Doesn't obey msb_right ... (who needs that?) */
 244         redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
 245         greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
 246         bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
 247         redshift   = info->var.red.offset   - (8 - info->var.red.length);
 248         greenshift = info->var.green.offset - (8 - info->var.green.length);
 249         blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
 250
 251         for ( i = 0; i < logo->clutsize; i++) {
 252                 palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
 253                                  safe_shift((clut[1] & greenmask), greenshift) |
 254                                  safe_shift((clut[2] & bluemask), blueshift));
 255                 clut += 3;
 256         }
 257 }
 258
 259 static void fb_set_logo_directpalette(struct fb_info *info,
 260                                              const struct linux_logo *logo,
 261                                              u32 *palette)
 262 {
 263         int redshift, greenshift, blueshift;
 264         int i;
 265
 266         redshift = info->var.red.offset;
 267         greenshift = info->var.green.offset;
 268         blueshift = info->var.blue.offset;
 269
 270         for (i = 32; i < 32 + logo->clutsize; i++)
 271                 palette[i] = i << redshift | i << greenshift | i << blueshift;
 272 }
 273
 274 static void fb_set_logo(struct fb_info *info,
 275                                const struct linux_logo *logo, u8 *dst,
 276                                int depth)
 277 {
 278         int i, j, k;
 279         const u8 *src = logo->data;
 280         u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
 281         u8 fg = 1, d;
 282
 283         switch (fb_get_color_depth(&info->var, &info->fix)) {
 284         case 1:
 285                 fg = 1;
 286                 break;
 287         case 2:
 288                 fg = 3;
 289                 break;
 290         default:
 291                 fg = 7;
 292                 break;
 293         }
 294
 295         if (info->fix.visual == FB_VISUAL_MONO01 ||
 296             info->fix.visual == FB_VISUAL_MONO10)
 297                 fg = ~((u8) (0xfff << info->var.green.length));
 298
 299         switch (depth) {
 300         case 4:
 301                 for (i = 0; i < logo->height; i++)
 302                         for (j = 0; j < logo->width; src++) {
 303                                 *dst++ = *src >> 4;
 304                                 j++;
 305                                 if (j < logo->width) {
 306                                         *dst++ = *src & 0x0f;
 307                                         j++;
 308                                 }
 309                         }
 310                 break;
 311         case 1:
 312                 for (i = 0; i < logo->height; i++) {
 313                         for (j = 0; j < logo->width; src++) {
 314                                 d = *src ^ xor;
 315                                 for (k = 7; k >= 0 && j < logo->width; k--) {
 316                                         *dst++ = ((d >> k) & 1) ? fg : 0;
 317                                         j++;
 318                                 }
 319                         }
 320                 }
 321                 break;
 322         }
 323 }
 324
 325 /*
 326  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
 327  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
 328  * the visual format and color depth of the framebuffer, the DAC, the
 329  * pseudo_palette, and the logo data will be adjusted accordingly.
 330  *
 331  * Case 1 - linux_logo_clut224:
 332  * Color exceeds the number of console colors (16), thus we set the hardware DAC
 333  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
 334  *
 335  * For visuals that require color info from the pseudo_palette, we also construct
 336  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
 337  * will be set.
 338  *
 339  * Case 2 - linux_logo_vga16:
 340  * The number of colors just matches the console colors, thus there is no need
 341  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
 342  * each byte contains color information for two pixels (upper and lower nibble).
 343  * To be consistent with fb_imageblit() usage, we therefore separate the two
 344  * nibbles into separate bytes. The "depth" flag will be set to 4.
 345  *
 346  * Case 3 - linux_logo_mono:
 347  * This is similar with Case 2.  Each byte contains information for 8 pixels.
 348  * We isolate each bit and expand each into a byte. The "depth" flag will
 349  * be set to 1.
 350  */
 351 static struct logo_data {
 352         int depth;
 353         int needs_directpalette;
 354         int needs_truepalette;
 355         int needs_cmapreset;
 356         const struct linux_logo *logo;
 357 } fb_logo __read_mostly;
 358
 359 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
 360 {
 361         u32 size = width * height, i;
 362
 363         out += size - 1;
 364
 365         for (i = size; i--; )
 366                 *out-- = *in++;
 367 }
 368
 369 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
 370 {
 371         int i, j, h = height - 1;
 372
 373         for (i = 0; i < height; i++)
 374                 for (j = 0; j < width; j++)
 375                                 out[height * j + h - i] = *in++;
 376 }
 377
 378 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
 379 {
 380         int i, j, w = width - 1;
 381
 382         for (i = 0; i < height; i++)
 383                 for (j = 0; j < width; j++)
 384                         out[height * (w - j) + i] = *in++;
 385 }
 386
 387 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
 388                            struct fb_image *image, int rotate)
 389 {
 390         u32 tmp;
 391
 392         if (rotate == FB_ROTATE_UD) {
 393                 fb_rotate_logo_ud(image->data, dst, image->width,
 394                                   image->height);
 395                 image->dx = info->var.xres - image->width - image->dx;
 396                 image->dy = info->var.yres - image->height - image->dy;
 397         } else if (rotate == FB_ROTATE_CW) {
 398                 fb_rotate_logo_cw(image->data, dst, image->width,
 399                                   image->height);
 400                 tmp = image->width;
 401                 image->width = image->height;
 402                 image->height = tmp;
 403                 tmp = image->dy;
 404                 image->dy = image->dx;
 405                 image->dx = info->var.xres - image->width - tmp;
 406         } else if (rotate == FB_ROTATE_CCW) {
 407                 fb_rotate_logo_ccw(image->data, dst, image->width,
 408                                    image->height);
 409                 tmp = image->width;
 410                 image->width = image->height;
 411                 image->height = tmp;
 412                 tmp = image->dx;
 413                 image->dx = image->dy;
 414                 image->dy = info->var.yres - image->height - tmp;
 415         }
 416
 417         image->data = dst;
 418 }
 419
 420 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
 421                             int rotate, unsigned int num)
 422 {
 423         unsigned int x;
 424
 425         if (image->width > info->var.xres || image->height > info->var.yres)
 426                 return;
 427
 428         if (rotate == FB_ROTATE_UR) {
 429                 for (x = 0;
 430                      x < num && image->dx + image->width <= info->var.xres;
 431                      x++) {
 432                         info->fbops->fb_imageblit(info, image);
 433                         image->dx += image->width + 8;
 434                 }
 435         } else if (rotate == FB_ROTATE_UD) {
 436                 u32 dx = image->dx;
 437
 438                 for (x = 0; x < num && image->dx <= dx; x++) {
 439                         info->fbops->fb_imageblit(info, image);
 440                         image->dx -= image->width + 8;
 441                 }
 442         } else if (rotate == FB_ROTATE_CW) {
 443                 for (x = 0;
 444                      x < num && image->dy + image->height <= info->var.yres;
 445                      x++) {
 446                         info->fbops->fb_imageblit(info, image);
 447                         image->dy += image->height + 8;
 448                 }
 449         } else if (rotate == FB_ROTATE_CCW) {
 450                 u32 dy = image->dy;
 451
 452                 for (x = 0; x < num && image->dy <= dy; x++) {
 453                         info->fbops->fb_imageblit(info, image);
 454                         image->dy -= image->height + 8;
 455                 }
 456         }
 457 }
 458
 459 static int fb_show_logo_line(struct fb_info *info, int rotate,
 460                              const struct linux_logo *logo, int y,
 461                              unsigned int n)
 462 {
 463         u32 *palette = NULL, *saved_pseudo_palette = NULL;
 464         unsigned char *logo_new = NULL, *logo_rotate = NULL;
 465         struct fb_image image;
 466
 467         /* Return if the frame buffer is not mapped or suspended */
 468         if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
 469             info->fbops->owner)
 470                 return 0;
 471
 472         image.depth = 8;
 473         image.data = logo->data;
 474
 475         if (fb_logo.needs_cmapreset)
 476                 fb_set_logocmap(info, logo);
 477
 478         if (fb_logo.needs_truepalette ||
 479             fb_logo.needs_directpalette) {
 480                 palette = kmalloc(256 * 4, GFP_KERNEL);
 481                 if (palette == NULL)
 482                         return 0;
 483
 484                 if (fb_logo.needs_truepalette)
 485                         fb_set_logo_truepalette(info, logo, palette);
 486                 else
 487                         fb_set_logo_directpalette(info, logo, palette);
 488
 489                 saved_pseudo_palette = info->pseudo_palette;
 490                 info->pseudo_palette = palette;
 491         }
 492
 493         if (fb_logo.depth <= 4) {
 494                 logo_new = kmalloc_array(logo->width, logo->height,
 495                                          GFP_KERNEL);
 496                 if (logo_new == NULL) {
 497                         kfree(palette);
 498                         if (saved_pseudo_palette)
 499                                 info->pseudo_palette = saved_pseudo_palette;
 500                         return 0;
 501                 }
 502                 image.data = logo_new;
 503                 fb_set_logo(info, logo, logo_new, fb_logo.depth);
 504         }
 505
 506         if (fb_center_logo) {
 507                 int xres = info->var.xres;
 508                 int yres = info->var.yres;
 509
 510                 if (rotate == FB_ROTATE_CW || rotate == FB_ROTATE_CCW) {
 511                         xres = info->var.yres;
 512                         yres = info->var.xres;
 513                 }
 514
 515                 while (n && (n * (logo->width + 8) - 8 > xres))
 516                         --n;
 517                 image.dx = (xres - n * (logo->width + 8) - 8) / 2;
 518                 image.dy = y ?: (yres - logo->height) / 2;
 519         } else {
 520                 image.dx = 0;
 521                 image.dy = y;
 522         }
 523
 524         image.width = logo->width;
 525         image.height = logo->height;
 526
 527         if (rotate) {
 528                 logo_rotate = kmalloc_array(logo->width, logo->height,
 529                                             GFP_KERNEL);
 530                 if (logo_rotate)
 531                         fb_rotate_logo(info, logo_rotate, &image, rotate);
 532         }
 533
 534         fb_do_show_logo(info, &image, rotate, n);
 535
 536         kfree(palette);
 537         if (saved_pseudo_palette != NULL)
 538                 info->pseudo_palette = saved_pseudo_palette;
 539         kfree(logo_new);
 540         kfree(logo_rotate);
 541         return image.dy + logo->height;
 542 }
 543
 544
 545 #ifdef CONFIG_FB_LOGO_EXTRA
 546
 547 #define FB_LOGO_EX_NUM_MAX 10
 548 static struct logo_data_extra {
 549         const struct linux_logo *logo;
 550         unsigned int n;
 551 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
 552 static unsigned int fb_logo_ex_num;
 553
 554 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
 555 {
 556         if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
 557                 return;
 558
 559         fb_logo_ex[fb_logo_ex_num].logo = logo;
 560         fb_logo_ex[fb_logo_ex_num].n = n;
 561         fb_logo_ex_num++;
 562 }
 563
 564 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
 565                                   unsigned int yres)
 566 {
 567         unsigned int i;
 568
 569         /* FIXME: logo_ex supports only truecolor fb. */
 570         if (info->fix.visual != FB_VISUAL_TRUECOLOR)
 571                 fb_logo_ex_num = 0;
 572
 573         for (i = 0; i < fb_logo_ex_num; i++) {
 574                 if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
 575                         fb_logo_ex[i].logo = NULL;
 576                         continue;
 577                 }
 578                 height += fb_logo_ex[i].logo->height;
 579                 if (height > yres) {
 580                         height -= fb_logo_ex[i].logo->height;
 581                         fb_logo_ex_num = i;
 582                         break;
 583                 }
 584         }
 585         return height;
 586 }
 587
 588 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
 589 {
 590         unsigned int i;
 591
 592         for (i = 0; i < fb_logo_ex_num; i++)
 593                 y = fb_show_logo_line(info, rotate,
 594                                       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
 595
 596         return y;
 597 }
 598
 599 #else /* !CONFIG_FB_LOGO_EXTRA */
 600
 601 static inline int fb_prepare_extra_logos(struct fb_info *info,
 602                                          unsigned int height,
 603                                          unsigned int yres)
 604 {
 605         return height;
 606 }
 607
 608 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
 609 {
 610         return y;
 611 }
 612
 613 #endif /* CONFIG_FB_LOGO_EXTRA */
 614
 615
 616 int fb_prepare_logo(struct fb_info *info, int rotate)
 617 {
 618         int depth = fb_get_color_depth(&info->var, &info->fix);
 619         unsigned int yres;
 620         int height;
 621
 622         memset(&fb_logo, 0, sizeof(struct logo_data));
 623
 624         if (info->flags & FBINFO_MISC_TILEBLITTING ||
 625             info->fbops->owner || !fb_logo_count)
 626                 return 0;
 627
 628         if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
 629                 depth = info->var.blue.length;
 630                 if (info->var.red.length < depth)
 631                         depth = info->var.red.length;
 632                 if (info->var.green.length < depth)
 633                         depth = info->var.green.length;
 634         }
 635
 636         if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
 637                 /* assume console colormap */
 638                 depth = 4;
 639         }
 640
 641         /* Return if no suitable logo was found */
 642         fb_logo.logo = fb_find_logo(depth);
 643
 644         if (!fb_logo.logo) {
 645                 return 0;
 646         }
 647
 648         if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
 649                 yres = info->var.yres;
 650         else
 651                 yres = info->var.xres;
 652
 653         if (fb_logo.logo->height > yres) {
 654                 fb_logo.logo = NULL;
 655                 return 0;
 656         }
 657
 658         /* What depth we asked for might be different from what we get */
 659         if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
 660                 fb_logo.depth = 8;
 661         else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
 662                 fb_logo.depth = 4;
 663         else
 664                 fb_logo.depth = 1;
 665
 666
 667         if (fb_logo.depth > 4 && depth > 4) {
 668                 switch (info->fix.visual) {
 669                 case FB_VISUAL_TRUECOLOR:
 670                         fb_logo.needs_truepalette = 1;
 671                         break;
 672                 case FB_VISUAL_DIRECTCOLOR:
 673                         fb_logo.needs_directpalette = 1;
 674                         fb_logo.needs_cmapreset = 1;
 675                         break;
 676                 case FB_VISUAL_PSEUDOCOLOR:
 677                         fb_logo.needs_cmapreset = 1;
 678                         break;
 679                 }
 680         }
 681
 682         height = fb_logo.logo->height;
 683         if (fb_center_logo)
 684                 height += (yres - fb_logo.logo->height) / 2;
 685
 686         return fb_prepare_extra_logos(info, height, yres);
 687 }
 688
 689 int fb_show_logo(struct fb_info *info, int rotate)
 690 {
 691         unsigned int count;
 692         int y;
 693
 694         if (!fb_logo_count)
 695                 return 0;
 696
 697         count = fb_logo_count < 0 ? num_online_cpus() : fb_logo_count;
 698         y = fb_show_logo_line(info, rotate, fb_logo.logo, 0, count);
 699         y = fb_show_extra_logos(info, y, rotate);
 700
 701         return y;
 702 }
 703 #else
 704 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
 705 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
 706 #endif /* CONFIG_LOGO */
 707 EXPORT_SYMBOL(fb_prepare_logo);
 708 EXPORT_SYMBOL(fb_show_logo);
 709
 710 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
 711 {
 712         mutex_lock(&registration_lock);
 713         return (*pos < FB_MAX) ? pos : NULL;
 714 }
 715
 716 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
 717 {
 718         (*pos)++;
 719         return (*pos < FB_MAX) ? pos : NULL;
 720 }
 721
 722 static void fb_seq_stop(struct seq_file *m, void *v)
 723 {
 724         mutex_unlock(&registration_lock);
 725 }
 726
 727 static int fb_seq_show(struct seq_file *m, void *v)
 728 {
 729         int i = *(loff_t *)v;
 730         struct fb_info *fi = registered_fb[i];
 731
 732         if (fi)
 733                 seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
 734         return 0;
 735 }
 736
 737 static const struct seq_operations __maybe_unused proc_fb_seq_ops = {
 738         .start  = fb_seq_start,
 739         .next   = fb_seq_next,
 740         .stop   = fb_seq_stop,
 741         .show   = fb_seq_show,
 742 };
 743
 744 /*
 745  * We hold a reference to the fb_info in file->private_data,
 746  * but if the current registered fb has changed, we don't
 747  * actually want to use it.
 748  *
 749  * So look up the fb_info using the inode minor number,
 750  * and just verify it against the reference we have.
 751  */
 752 static struct fb_info *file_fb_info(struct file *file)
 753 {
 754         struct inode *inode = file_inode(file);
 755         int fbidx = iminor(inode);
 756         struct fb_info *info = registered_fb[fbidx];
 757
 758         if (info != file->private_data)
 759                 info = NULL;
 760         return info;
 761 }
 762
 763 static ssize_t
 764 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
 765 {
 766         unsigned long p = *ppos;
 767         struct fb_info *info = file_fb_info(file);
 768         u8 *buffer, *dst;
 769         u8 __iomem *src;
 770         int c, cnt = 0, err = 0;
 771         unsigned long total_size;
 772
 773         if (!info || ! info->screen_base)
 774                 return -ENODEV;
 775
 776         if (info->state != FBINFO_STATE_RUNNING)
 777                 return -EPERM;
 778
 779         if (info->fbops->fb_read)
 780                 return info->fbops->fb_read(info, buf, count, ppos);
 781
 782         total_size = info->screen_size;
 783
 784         if (total_size == 0)
 785                 total_size = info->fix.smem_len;
 786
 787         if (p >= total_size)
 788                 return 0;
 789
 790         if (count >= total_size)
 791                 count = total_size;
 792
 793         if (count + p > total_size)
 794                 count = total_size - p;
 795
 796         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
 797                          GFP_KERNEL);
 798         if (!buffer)
 799                 return -ENOMEM;
 800
 801         src = (u8 __iomem *) (info->screen_base + p);
 802
 803         if (info->fbops->fb_sync)
 804                 info->fbops->fb_sync(info);
 805
 806         while (count) {
 807                 c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
 808                 dst = buffer;
 809                 fb_memcpy_fromfb(dst, src, c);
 810                 dst += c;
 811                 src += c;
 812
 813                 if (copy_to_user(buf, buffer, c)) {
 814                         err = -EFAULT;
 815                         break;
 816                 }
 817                 *ppos += c;
 818                 buf += c;
 819                 cnt += c;
 820                 count -= c;
 821         }
 822
 823         kfree(buffer);
 824
 825         return (err) ? err : cnt;
 826 }
 827
 828 static ssize_t
 829 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
 830 {
 831         unsigned long p = *ppos;
 832         struct fb_info *info = file_fb_info(file);
 833         u8 *buffer, *src;
 834         u8 __iomem *dst;
 835         int c, cnt = 0, err = 0;
 836         unsigned long total_size;
 837
 838         if (!info || !info->screen_base)
 839                 return -ENODEV;
 840
 841         if (info->state != FBINFO_STATE_RUNNING)
 842                 return -EPERM;
 843
 844         if (info->fbops->fb_write)
 845                 return info->fbops->fb_write(info, buf, count, ppos);
 846
 847         total_size = info->screen_size;
 848
 849         if (total_size == 0)
 850                 total_size = info->fix.smem_len;
 851
 852         if (p > total_size)
 853                 return -EFBIG;
 854
 855         if (count > total_size) {
 856                 err = -EFBIG;
 857                 count = total_size;
 858         }
 859
 860         if (count + p > total_size) {
 861                 if (!err)
 862                         err = -ENOSPC;
 863
 864                 count = total_size - p;
 865         }
 866
 867         buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
 868                          GFP_KERNEL);
 869         if (!buffer)
 870                 return -ENOMEM;
 871
 872         dst = (u8 __iomem *) (info->screen_base + p);
 873
 874         if (info->fbops->fb_sync)
 875                 info->fbops->fb_sync(info);
 876
 877         while (count) {
 878                 c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
 879                 src = buffer;
 880
 881                 if (copy_from_user(src, buf, c)) {
 882                         err = -EFAULT;
 883                         break;
 884                 }
 885
 886                 fb_memcpy_tofb(dst, src, c);
 887                 dst += c;
 888                 src += c;
 889                 *ppos += c;
 890                 buf += c;
 891                 cnt += c;
 892                 count -= c;
 893         }
 894
 895         kfree(buffer);
 896
 897         return (cnt) ? cnt : err;
 898 }
 899
 900 int
 901 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
 902 {
 903         struct fb_fix_screeninfo *fix = &info->fix;
 904         unsigned int yres = info->var.yres;
 905         int err = 0;
 906
 907         if (var->yoffset > 0) {
 908                 if (var->vmode & FB_VMODE_YWRAP) {
 909                         if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
 910                                 err = -EINVAL;
 911                         else
 912                                 yres = 0;
 913                 } else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
 914                         err = -EINVAL;
 915         }
 916
 917         if (var->xoffset > 0 && (!fix->xpanstep ||
 918                                  (var->xoffset % fix->xpanstep)))
 919                 err = -EINVAL;
 920
 921         if (err || !info->fbops->fb_pan_display ||
 922             var->yoffset > info->var.yres_virtual - yres ||
 923             var->xoffset > info->var.xres_virtual - info->var.xres)
 924                 return -EINVAL;
 925
 926         if ((err = info->fbops->fb_pan_display(var, info)))
 927                 return err;
 928         info->var.xoffset = var->xoffset;
 929         info->var.yoffset = var->yoffset;
 930         if (var->vmode & FB_VMODE_YWRAP)
 931                 info->var.vmode |= FB_VMODE_YWRAP;
 932         else
 933                 info->var.vmode &= ~FB_VMODE_YWRAP;
 934         return 0;
 935 }
 936 EXPORT_SYMBOL(fb_pan_display);
 937
 938 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
 939                          u32 activate)
 940 {
 941         struct fb_blit_caps caps, fbcaps;
 942         int err = 0;
 943
 944         memset(&caps, 0, sizeof(caps));
 945         memset(&fbcaps, 0, sizeof(fbcaps));
 946         caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
 947         fbcon_get_requirement(info, &caps);
 948         info->fbops->fb_get_caps(info, &fbcaps, var);
 949
 950         if (((fbcaps.x ^ caps.x) & caps.x) ||
 951             ((fbcaps.y ^ caps.y) & caps.y) ||
 952             (fbcaps.len < caps.len))
 953                 err = -EINVAL;
 954
 955         return err;
 956 }
 957
 958 int
 959 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
 960 {
 961         int ret = 0;
 962         u32 activate;
 963         struct fb_var_screeninfo old_var;
 964         struct fb_videomode mode;
 965         struct fb_event event;
 966         u32 unused;
 967
 968         if (var->activate & FB_ACTIVATE_INV_MODE) {
 969                 struct fb_videomode mode1, mode2;
 970
 971                 fb_var_to_videomode(&mode1, var);
 972                 fb_var_to_videomode(&mode2, &info->var);
 973                 /* make sure we don't delete the videomode of current var */
 974                 ret = fb_mode_is_equal(&mode1, &mode2);
 975                 if (!ret) {
 976                         ret = fbcon_mode_deleted(info, &mode1);
 977                         if (!ret)
 978                                 fb_delete_videomode(&mode1, &info->modelist);
 979                 }
 980
 981                 return ret ? -EINVAL : 0;
 982         }
 983
 984         if (!(var->activate & FB_ACTIVATE_FORCE) &&
 985             !memcmp(&info->var, var, sizeof(struct fb_var_screeninfo)))
 986                 return 0;
 987
 988         activate = var->activate;
 989
 990         /* When using FOURCC mode, make sure the red, green, blue and
 991          * transp fields are set to 0.
 992          */
 993         if ((info->fix.capabilities & FB_CAP_FOURCC) &&
 994             var->grayscale > 1) {
 995                 if (var->red.offset     || var->green.offset    ||
 996                     var->blue.offset    || var->transp.offset   ||
 997                     var->red.length     || var->green.length    ||
 998                     var->blue.length    || var->transp.length   ||
 999                     var->red.msb_right  || var->green.msb_right ||
1000                     var->blue.msb_right || var->transp.msb_right)
1001                         return -EINVAL;
1002         }
1003
1004         if (!info->fbops->fb_check_var) {
1005                 *var = info->var;
1006                 return 0;
1007         }
1008
1009         /* bitfill_aligned() assumes that it's at least 8x8 */
1010         if (var->xres < 8 || var->yres < 8)
1011                 return -EINVAL;
1012
1013         /* Too huge resolution causes multiplication overflow. */
1014         if (check_mul_overflow(var->xres, var->yres, &unused) ||
1015             check_mul_overflow(var->xres_virtual, var->yres_virtual, &unused))
1016                 return -EINVAL;
1017
1018         ret = info->fbops->fb_check_var(var, info);
1019
1020         if (ret)
1021                 return ret;
1022
1023         if ((var->activate & FB_ACTIVATE_MASK) != FB_ACTIVATE_NOW)
1024                 return 0;
1025
1026         if (info->fbops->fb_get_caps) {
1027                 ret = fb_check_caps(info, var, activate);
1028
1029                 if (ret)
1030                         return ret;
1031         }
1032
1033         old_var = info->var;
1034         info->var = *var;
1035
1036         if (info->fbops->fb_set_par) {
1037                 ret = info->fbops->fb_set_par(info);
1038
1039                 if (ret) {
1040                         info->var = old_var;
1041                         printk(KERN_WARNING "detected "
1042                                 "fb_set_par error, "
1043                                 "error code: %d\n", ret);
1044                         return ret;
1045                 }
1046         }
1047
1048         fb_pan_display(info, &info->var);
1049         fb_set_cmap(&info->cmap, info);
1050         fb_var_to_videomode(&mode, &info->var);
1051
1052         if (info->modelist.prev && info->modelist.next &&
1053             !list_empty(&info->modelist))
1054                 ret = fb_add_videomode(&mode, &info->modelist);
1055
1056         if (ret)
1057                 return ret;
1058
1059         event.info = info;
1060         event.data = &mode;
1061         fb_notifier_call_chain(FB_EVENT_MODE_CHANGE, &event);
1062
1063         return 0;
1064 }
1065 EXPORT_SYMBOL(fb_set_var);
1066
1067 int
1068 fb_blank(struct fb_info *info, int blank)
1069 {
1070         struct fb_event event;
1071         int ret = -EINVAL;
1072
1073         if (blank > FB_BLANK_POWERDOWN)
1074                 blank = FB_BLANK_POWERDOWN;
1075
1076         event.info = info;
1077         event.data = &blank;
1078
1079         if (info->fbops->fb_blank)
1080                 ret = info->fbops->fb_blank(blank, info);
1081
1082         if (!ret)
1083                 fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1084
1085         return ret;
1086 }
1087 EXPORT_SYMBOL(fb_blank);
1088
1089 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1090                         unsigned long arg)
1091 {
1092         const struct fb_ops *fb;
1093         struct fb_var_screeninfo var;
1094         struct fb_fix_screeninfo fix;
1095         struct fb_cmap cmap_from;
1096         struct fb_cmap_user cmap;
1097         void __user *argp = (void __user *)arg;
1098         long ret = 0;
1099
1100         switch (cmd) {
1101         case FBIOGET_VSCREENINFO:
1102                 lock_fb_info(info);
1103                 var = info->var;
1104                 unlock_fb_info(info);
1105
1106                 ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1107                 break;
1108         case FBIOPUT_VSCREENINFO:
1109                 if (copy_from_user(&var, argp, sizeof(var)))
1110                         return -EFAULT;
1111                 console_lock();
1112                 lock_fb_info(info);
1113                 ret = fb_set_var(info, &var);
1114                 if (!ret)
1115                         fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
1116                 unlock_fb_info(info);
1117                 console_unlock();
1118                 if (!ret && copy_to_user(argp, &var, sizeof(var)))
1119                         ret = -EFAULT;
1120                 break;
1121         case FBIOGET_FSCREENINFO:
1122                 lock_fb_info(info);
1123                 memcpy(&fix, &info->fix, sizeof(fix));
1124                 if (info->flags & FBINFO_HIDE_SMEM_START)
1125                         fix.smem_start = 0;
1126                 unlock_fb_info(info);
1127
1128                 ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1129                 break;
1130         case FBIOPUTCMAP:
1131                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1132                         return -EFAULT;
1133                 ret = fb_set_user_cmap(&cmap, info);
1134                 break;
1135         case FBIOGETCMAP:
1136                 if (copy_from_user(&cmap, argp, sizeof(cmap)))
1137                         return -EFAULT;
1138                 lock_fb_info(info);
1139                 cmap_from = info->cmap;
1140                 unlock_fb_info(info);
1141                 ret = fb_cmap_to_user(&cmap_from, &cmap);
1142                 break;
1143         case FBIOPAN_DISPLAY:
1144                 if (copy_from_user(&var, argp, sizeof(var)))
1145                         return -EFAULT;
1146                 console_lock();
1147                 lock_fb_info(info);
1148                 ret = fb_pan_display(info, &var);
1149                 unlock_fb_info(info);
1150                 console_unlock();
1151                 if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1152                         return -EFAULT;
1153                 break;
1154         case FBIO_CURSOR:
1155                 ret = -EINVAL;
1156                 break;
1157         case FBIOGET_CON2FBMAP:
1158                 ret = fbcon_get_con2fb_map_ioctl(argp);
1159                 break;
1160         case FBIOPUT_CON2FBMAP:
1161                 ret = fbcon_set_con2fb_map_ioctl(argp);
1162                 break;
1163         case FBIOBLANK:
1164                 console_lock();
1165                 lock_fb_info(info);
1166                 ret = fb_blank(info, arg);
1167                 /* might again call into fb_blank */
1168                 fbcon_fb_blanked(info, arg);
1169                 unlock_fb_info(info);
1170                 console_unlock();
1171                 break;
1172         default:
1173                 lock_fb_info(info);
1174                 fb = info->fbops;
1175                 if (fb->fb_ioctl)
1176                         ret = fb->fb_ioctl(info, cmd, arg);
1177                 else
1178                         ret = -ENOTTY;
1179                 unlock_fb_info(info);
1180         }
1181         return ret;
1182 }
1183
1184 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1185 {
1186         struct fb_info *info = file_fb_info(file);
1187
1188         if (!info)
1189                 return -ENODEV;
1190         return do_fb_ioctl(info, cmd, arg);
1191 }
1192
1193 #ifdef CONFIG_COMPAT
1194 struct fb_fix_screeninfo32 {
1195         char                    id[16];
1196         compat_caddr_t          smem_start;
1197         u32                     smem_len;
1198         u32                     type;
1199         u32                     type_aux;
1200         u32                     visual;
1201         u16                     xpanstep;
1202         u16                     ypanstep;
1203         u16                     ywrapstep;
1204         u32                     line_length;
1205         compat_caddr_t          mmio_start;
1206         u32                     mmio_len;
1207         u32                     accel;
1208         u16                     reserved[3];
1209 };
1210
1211 struct fb_cmap32 {
1212         u32                     start;
1213         u32                     len;
1214         compat_caddr_t  red;
1215         compat_caddr_t  green;
1216         compat_caddr_t  blue;
1217         compat_caddr_t  transp;
1218 };
1219
1220 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1221                           unsigned long arg)
1222 {
1223         struct fb_cmap32 cmap32;
1224         struct fb_cmap cmap_from;
1225         struct fb_cmap_user cmap;
1226
1227         if (copy_from_user(&cmap32, compat_ptr(arg), sizeof(cmap32)))
1228                 return -EFAULT;
1229
1230         cmap = (struct fb_cmap_user) {
1231                 .start  = cmap32.start,
1232                 .len    = cmap32.len,
1233                 .red    = compat_ptr(cmap32.red),
1234                 .green  = compat_ptr(cmap32.green),
1235                 .blue   = compat_ptr(cmap32.blue),
1236                 .transp = compat_ptr(cmap32.transp),
1237         };
1238
1239         if (cmd == FBIOPUTCMAP)
1240                 return fb_set_user_cmap(&cmap, info);
1241
1242         lock_fb_info(info);
1243         cmap_from = info->cmap;
1244         unlock_fb_info(info);
1245
1246         return fb_cmap_to_user(&cmap_from, &cmap);
1247 }
1248
1249 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1250                                   struct fb_fix_screeninfo32 __user *fix32)
1251 {
1252         __u32 data;
1253         int err;
1254
1255         err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1256
1257         data = (__u32) (unsigned long) fix->smem_start;
1258         err |= put_user(data, &fix32->smem_start);
1259
1260         err |= put_user(fix->smem_len, &fix32->smem_len);
1261         err |= put_user(fix->type, &fix32->type);
1262         err |= put_user(fix->type_aux, &fix32->type_aux);
1263         err |= put_user(fix->visual, &fix32->visual);
1264         err |= put_user(fix->xpanstep, &fix32->xpanstep);
1265         err |= put_user(fix->ypanstep, &fix32->ypanstep);
1266         err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1267         err |= put_user(fix->line_length, &fix32->line_length);
1268
1269         data = (__u32) (unsigned long) fix->mmio_start;
1270         err |= put_user(data, &fix32->mmio_start);
1271
1272         err |= put_user(fix->mmio_len, &fix32->mmio_len);
1273         err |= put_user(fix->accel, &fix32->accel);
1274         err |= copy_to_user(fix32->reserved, fix->reserved,
1275                             sizeof(fix->reserved));
1276
1277         if (err)
1278                 return -EFAULT;
1279         return 0;
1280 }
1281
1282 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1283                               unsigned long arg)
1284 {
1285         struct fb_fix_screeninfo fix;
1286
1287         lock_fb_info(info);
1288         fix = info->fix;
1289         if (info->flags & FBINFO_HIDE_SMEM_START)
1290                 fix.smem_start = 0;
1291         unlock_fb_info(info);
1292         return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1293 }
1294
1295 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1296                             unsigned long arg)
1297 {
1298         struct fb_info *info = file_fb_info(file);
1299         const struct fb_ops *fb;
1300         long ret = -ENOIOCTLCMD;
1301
1302         if (!info)
1303                 return -ENODEV;
1304         fb = info->fbops;
1305         switch(cmd) {
1306         case FBIOGET_VSCREENINFO:
1307         case FBIOPUT_VSCREENINFO:
1308         case FBIOPAN_DISPLAY:
1309         case FBIOGET_CON2FBMAP:
1310         case FBIOPUT_CON2FBMAP:
1311                 arg = (unsigned long) compat_ptr(arg);
1312                 fallthrough;
1313         case FBIOBLANK:
1314                 ret = do_fb_ioctl(info, cmd, arg);
1315                 break;
1316
1317         case FBIOGET_FSCREENINFO:
1318                 ret = fb_get_fscreeninfo(info, cmd, arg);
1319                 break;
1320
1321         case FBIOGETCMAP:
1322         case FBIOPUTCMAP:
1323                 ret = fb_getput_cmap(info, cmd, arg);
1324                 break;
1325
1326         default:
1327                 if (fb->fb_compat_ioctl)
1328                         ret = fb->fb_compat_ioctl(info, cmd, arg);
1329                 break;
1330         }
1331         return ret;
1332 }
1333 #endif
1334
1335 static int
1336 fb_mmap(struct file *file, struct vm_area_struct * vma)
1337 {
1338         struct fb_info *info = file_fb_info(file);
1339         int (*fb_mmap_fn)(struct fb_info *info, struct vm_area_struct *vma);
1340         unsigned long mmio_pgoff;
1341         unsigned long start;
1342         u32 len;
1343
1344         if (!info)
1345                 return -ENODEV;
1346         mutex_lock(&info->mm_lock);
1347
1348         fb_mmap_fn = info->fbops->fb_mmap;
1349
1350 #if IS_ENABLED(CONFIG_FB_DEFERRED_IO)
1351         if (info->fbdefio)
1352                 fb_mmap_fn = fb_deferred_io_mmap;
1353 #endif
1354
1355         if (fb_mmap_fn) {
1356                 int res;
1357
1358                 /*
1359                  * The framebuffer needs to be accessed decrypted, be sure
1360                  * SME protection is removed ahead of the call
1361                  */
1362                 vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1363                 res = fb_mmap_fn(info, vma);
1364                 mutex_unlock(&info->mm_lock);
1365                 return res;
1366         }
1367
1368         /*
1369          * Ugh. This can be either the frame buffer mapping, or
1370          * if pgoff points past it, the mmio mapping.
1371          */
1372         start = info->fix.smem_start;
1373         len = info->fix.smem_len;
1374         mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1375         if (vma->vm_pgoff >= mmio_pgoff) {
1376                 if (info->var.accel_flags) {
1377                         mutex_unlock(&info->mm_lock);
1378                         return -EINVAL;
1379                 }
1380
1381                 vma->vm_pgoff -= mmio_pgoff;
1382                 start = info->fix.mmio_start;
1383                 len = info->fix.mmio_len;
1384         }
1385         mutex_unlock(&info->mm_lock);
1386
1387         vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1388         fb_pgprotect(file, vma, start);
1389
1390         return vm_iomap_memory(vma, start, len);
1391 }
1392
1393 static int
1394 fb_open(struct inode *inode, struct file *file)
1395 __acquires(&info->lock)
1396 __releases(&info->lock)
1397 {
1398         int fbidx = iminor(inode);
1399         struct fb_info *info;
1400         int res = 0;
1401
1402         info = get_fb_info(fbidx);
1403         if (!info) {
1404                 request_module("fb%d", fbidx);
1405                 info = get_fb_info(fbidx);
1406                 if (!info)
1407                         return -ENODEV;
1408         }
1409         if (IS_ERR(info))
1410                 return PTR_ERR(info);
1411
1412         lock_fb_info(info);
1413         if (!try_module_get(info->fbops->owner)) {
1414                 res = -ENODEV;
1415                 goto out;
1416         }
1417         file->private_data = info;
1418         if (info->fbops->fb_open) {
1419                 res = info->fbops->fb_open(info,1);
1420                 if (res)
1421                         module_put(info->fbops->owner);
1422         }
1423 #ifdef CONFIG_FB_DEFERRED_IO
1424         if (info->fbdefio)
1425                 fb_deferred_io_open(info, inode, file);
1426 #endif
1427 out:
1428         unlock_fb_info(info);
1429         if (res)
1430                 put_fb_info(info);
1431         return res;
1432 }
1433
1434 static int
1435 fb_release(struct inode *inode, struct file *file)
1436 __acquires(&info->lock)
1437 __releases(&info->lock)
1438 {
1439         struct fb_info * const info = file->private_data;
1440
1441         lock_fb_info(info);
1442         if (info->fbops->fb_release)
1443                 info->fbops->fb_release(info,1);
1444         module_put(info->fbops->owner);
1445         unlock_fb_info(info);
1446         put_fb_info(info);
1447         return 0;
1448 }
1449
1450 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1451 unsigned long get_fb_unmapped_area(struct file *filp,
1452                                    unsigned long addr, unsigned long len,
1453                                    unsigned long pgoff, unsigned long flags)
1454 {
1455         struct fb_info * const info = filp->private_data;
1456         unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1457
1458         if (pgoff > fb_size || len > fb_size - pgoff)
1459                 return -EINVAL;
1460
1461         return (unsigned long)info->screen_base + pgoff;
1462 }
1463 #endif
1464
1465 static const struct file_operations fb_fops = {
1466         .owner =        THIS_MODULE,
1467         .read =         fb_read,
1468         .write =        fb_write,
1469         .unlocked_ioctl = fb_ioctl,
1470 #ifdef CONFIG_COMPAT
1471         .compat_ioctl = fb_compat_ioctl,
1472 #endif
1473         .mmap =         fb_mmap,
1474         .open =         fb_open,
1475         .release =      fb_release,
1476 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1477         (defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1478          !defined(CONFIG_MMU))
1479         .get_unmapped_area = get_fb_unmapped_area,
1480 #endif
1481 #ifdef CONFIG_FB_DEFERRED_IO
1482         .fsync =        fb_deferred_io_fsync,
1483 #endif
1484         .llseek =       default_llseek,
1485 };
1486
1487 struct class *fb_class;
1488 EXPORT_SYMBOL(fb_class);
1489
1490 static int fb_check_foreignness(struct fb_info *fi)
1491 {
1492         const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1493
1494         fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1495
1496 #ifdef __BIG_ENDIAN
1497         fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1498 #else
1499         fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1500 #endif /* __BIG_ENDIAN */
1501
1502         if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1503                 pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1504                        "support this framebuffer\n", fi->fix.id);
1505                 return -ENOSYS;
1506         } else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1507                 pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1508                        "support this framebuffer\n", fi->fix.id);
1509                 return -ENOSYS;
1510         }
1511
1512         return 0;
1513 }
1514
1515 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1516 {
1517         /* is the generic aperture base the same as the HW one */
1518         if (gen->base == hw->base)
1519                 return true;
1520         /* is the generic aperture base inside the hw base->hw base+size */
1521         if (gen->base > hw->base && gen->base < hw->base + hw->size)
1522                 return true;
1523         return false;
1524 }
1525
1526 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1527                                     struct apertures_struct *hwa)
1528 {
1529         int i, j;
1530         if (!hwa || !gena)
1531                 return false;
1532
1533         for (i = 0; i < hwa->count; ++i) {
1534                 struct aperture *h = &hwa->ranges[i];
1535                 for (j = 0; j < gena->count; ++j) {
1536                         struct aperture *g = &gena->ranges[j];
1537                         printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1538                                 (unsigned long long)g->base,
1539                                 (unsigned long long)g->size,
1540                                 (unsigned long long)h->base,
1541                                 (unsigned long long)h->size);
1542                         if (apertures_overlap(g, h))
1543                                 return true;
1544                 }
1545         }
1546
1547         return false;
1548 }
1549
1550 static void do_unregister_framebuffer(struct fb_info *fb_info);
1551
1552 #define VGA_FB_PHYS 0xA0000
1553 static void do_remove_conflicting_framebuffers(struct apertures_struct *a,
1554                                                const char *name, bool primary)
1555 {
1556         int i;
1557
1558         /* check all firmware fbs and kick off if the base addr overlaps */
1559         for_each_registered_fb(i) {
1560                 struct apertures_struct *gen_aper;
1561                 struct device *device;
1562
1563                 if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1564                         continue;
1565
1566                 gen_aper = registered_fb[i]->apertures;
1567                 device = registered_fb[i]->device;
1568                 if (fb_do_apertures_overlap(gen_aper, a) ||
1569                         (primary && gen_aper && gen_aper->count &&
1570                          gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1571
1572                         printk(KERN_INFO "fb%d: switching to %s from %s\n",
1573                                i, name, registered_fb[i]->fix.id);
1574
1575                         /*
1576                          * If we kick-out a firmware driver, we also want to remove
1577                          * the underlying platform device, such as simple-framebuffer,
1578                          * VESA, EFI, etc. A native driver will then be able to
1579                          * allocate the memory range.
1580                          *
1581                          * If it's not a platform device, at least print a warning. A
1582                          * fix would add code to remove the device from the system.
1583                          */
1584                         if (dev_is_platform(device)) {
1585                                 registered_fb[i]->forced_out = true;
1586                                 platform_device_unregister(to_platform_device(device));
1587                         } else {
1588                                 pr_warn("fb%d: cannot remove device\n", i);
1589                                 do_unregister_framebuffer(registered_fb[i]);
1590                         }
1591                 }
1592         }
1593 }
1594
1595 static bool lockless_register_fb;
1596 module_param_named_unsafe(lockless_register_fb, lockless_register_fb, bool, 0400);
1597 MODULE_PARM_DESC(lockless_register_fb,
1598         "Lockless framebuffer registration for debugging [default=off]");
1599
1600 static int do_register_framebuffer(struct fb_info *fb_info)
1601 {
1602         int i, ret;
1603         struct fb_videomode mode;
1604
1605         if (fb_check_foreignness(fb_info))
1606                 return -ENOSYS;
1607
1608         do_remove_conflicting_framebuffers(fb_info->apertures,
1609                                            fb_info->fix.id,
1610                                            fb_is_primary_device(fb_info));
1611
1612         if (num_registered_fb == FB_MAX)
1613                 return -ENXIO;
1614
1615         num_registered_fb++;
1616         for (i = 0 ; i < FB_MAX; i++)
1617                 if (!registered_fb[i])
1618                         break;
1619         fb_info->node = i;
1620         refcount_set(&fb_info->count, 1);
1621         mutex_init(&fb_info->lock);
1622         mutex_init(&fb_info->mm_lock);
1623
1624         fb_info->dev = device_create(fb_class, fb_info->device,
1625                                      MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1626         if (IS_ERR(fb_info->dev)) {
1627                 /* Not fatal */
1628                 printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1629                 fb_info->dev = NULL;
1630         } else
1631                 fb_init_device(fb_info);
1632
1633         if (fb_info->pixmap.addr == NULL) {
1634                 fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1635                 if (fb_info->pixmap.addr) {
1636                         fb_info->pixmap.size = FBPIXMAPSIZE;
1637                         fb_info->pixmap.buf_align = 1;
1638                         fb_info->pixmap.scan_align = 1;
1639                         fb_info->pixmap.access_align = 32;
1640                         fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1641                 }
1642         }
1643         fb_info->pixmap.offset = 0;
1644
1645         if (!fb_info->pixmap.blit_x)
1646                 fb_info->pixmap.blit_x = ~(u32)0;
1647
1648         if (!fb_info->pixmap.blit_y)
1649                 fb_info->pixmap.blit_y = ~(u32)0;
1650
1651         if (!fb_info->modelist.prev || !fb_info->modelist.next)
1652                 INIT_LIST_HEAD(&fb_info->modelist);
1653
1654         if (fb_info->skip_vt_switch)
1655                 pm_vt_switch_required(fb_info->dev, false);
1656         else
1657                 pm_vt_switch_required(fb_info->dev, true);
1658
1659         fb_var_to_videomode(&mode, &fb_info->var);
1660         fb_add_videomode(&mode, &fb_info->modelist);
1661         registered_fb[i] = fb_info;
1662
1663 #ifdef CONFIG_GUMSTIX_AM200EPD
1664         {
1665                 struct fb_event event;
1666                 event.info = fb_info;
1667                 fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1668         }
1669 #endif
1670
1671         if (!lockless_register_fb)
1672                 console_lock();
1673         else
1674                 atomic_inc(&ignore_console_lock_warning);
1675         lock_fb_info(fb_info);
1676         ret = fbcon_fb_registered(fb_info);
1677         unlock_fb_info(fb_info);
1678
1679         if (!lockless_register_fb)
1680                 console_unlock();
1681         else
1682                 atomic_dec(&ignore_console_lock_warning);
1683         return ret;
1684 }
1685
1686 static void unbind_console(struct fb_info *fb_info)
1687 {
1688         int i = fb_info->node;
1689
1690         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1691                 return;
1692
1693         console_lock();
1694         lock_fb_info(fb_info);
1695         fbcon_fb_unbind(fb_info);
1696         unlock_fb_info(fb_info);
1697         console_unlock();
1698 }
1699
1700 static void unlink_framebuffer(struct fb_info *fb_info)
1701 {
1702         int i;
1703
1704         i = fb_info->node;
1705         if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1706                 return;
1707
1708         if (!fb_info->dev)
1709                 return;
1710
1711         device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1712
1713         pm_vt_switch_unregister(fb_info->dev);
1714
1715         unbind_console(fb_info);
1716
1717         fb_info->dev = NULL;
1718 }
1719
1720 static void do_unregister_framebuffer(struct fb_info *fb_info)
1721 {
1722         unlink_framebuffer(fb_info);
1723         if (fb_info->pixmap.addr &&
1724             (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT)) {
1725                 kfree(fb_info->pixmap.addr);
1726                 fb_info->pixmap.addr = NULL;
1727         }
1728
1729         fb_destroy_modelist(&fb_info->modelist);
1730         registered_fb[fb_info->node] = NULL;
1731         num_registered_fb--;
1732         fb_cleanup_device(fb_info);
1733 #ifdef CONFIG_GUMSTIX_AM200EPD
1734         {
1735                 struct fb_event event;
1736                 event.info = fb_info;
1737                 fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1738         }
1739 #endif
1740         console_lock();
1741         fbcon_fb_unregistered(fb_info);
1742         console_unlock();
1743
1744         /* this may free fb info */
1745         put_fb_info(fb_info);
1746 }
1747
1748 /**
1749  * remove_conflicting_framebuffers - remove firmware-configured framebuffers
1750  * @a: memory range, users of which are to be removed
1751  * @name: requesting driver name
1752  * @primary: also kick vga16fb if present
1753  *
1754  * This function removes framebuffer devices (initialized by firmware/bootloader)
1755  * which use memory range described by @a. If @a is NULL all such devices are
1756  * removed.
1757  */
1758 int remove_conflicting_framebuffers(struct apertures_struct *a,
1759                                     const char *name, bool primary)
1760 {
1761         bool do_free = false;
1762
1763         if (!a) {
1764                 a = alloc_apertures(1);
1765                 if (!a)
1766                         return -ENOMEM;
1767
1768                 a->ranges[0].base = 0;
1769                 a->ranges[0].size = ~0;
1770                 do_free = true;
1771         }
1772
1773         mutex_lock(&registration_lock);
1774         do_remove_conflicting_framebuffers(a, name, primary);
1775         mutex_unlock(&registration_lock);
1776
1777         if (do_free)
1778                 kfree(a);
1779
1780         return 0;
1781 }
1782 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1783
1784 /**
1785  * is_firmware_framebuffer - detect if firmware-configured framebuffer matches
1786  * @a: memory range, users of which are to be checked
1787  *
1788  * This function checks framebuffer devices (initialized by firmware/bootloader)
1789  * which use memory range described by @a. If @a matchesm the function returns
1790  * true, otherwise false.
1791  */
1792 bool is_firmware_framebuffer(struct apertures_struct *a)
1793 {
1794         bool do_free = false;
1795         bool found = false;
1796         int i;
1797
1798         if (!a) {
1799                 a = alloc_apertures(1);
1800                 if (!a)
1801                         return false;
1802
1803                 a->ranges[0].base = 0;
1804                 a->ranges[0].size = ~0;
1805                 do_free = true;
1806         }
1807
1808         mutex_lock(&registration_lock);
1809         /* check all firmware fbs and kick off if the base addr overlaps */
1810         for_each_registered_fb(i) {
1811                 struct apertures_struct *gen_aper;
1812
1813                 if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1814                         continue;
1815
1816                 gen_aper = registered_fb[i]->apertures;
1817                 if (fb_do_apertures_overlap(gen_aper, a)) {
1818                         found = true;
1819                         break;
1820                 }
1821         }
1822         mutex_unlock(&registration_lock);
1823
1824         if (do_free)
1825                 kfree(a);
1826
1827         return found;
1828 }
1829 EXPORT_SYMBOL(is_firmware_framebuffer);
1830
1831 /**
1832  * remove_conflicting_pci_framebuffers - remove firmware-configured framebuffers for PCI devices
1833  * @pdev: PCI device
1834  * @name: requesting driver name
1835  *
1836  * This function removes framebuffer devices (eg. initialized by firmware)
1837  * using memory range configured for any of @pdev's memory bars.
1838  *
1839  * The function assumes that PCI device with shadowed ROM drives a primary
1840  * display and so kicks out vga16fb.
1841  */
1842 int remove_conflicting_pci_framebuffers(struct pci_dev *pdev, const char *name)
1843 {
1844         struct apertures_struct *ap;
1845         bool primary = false;
1846         int err, idx, bar;
1847
1848         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1849                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1850                         continue;
1851                 idx++;
1852         }
1853
1854         ap = alloc_apertures(idx);
1855         if (!ap)
1856                 return -ENOMEM;
1857
1858         for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1859                 if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1860                         continue;
1861                 ap->ranges[idx].base = pci_resource_start(pdev, bar);
1862                 ap->ranges[idx].size = pci_resource_len(pdev, bar);
1863                 pci_dbg(pdev, "%s: bar %d: 0x%lx -> 0x%lx\n", __func__, bar,
1864                         (unsigned long)pci_resource_start(pdev, bar),
1865                         (unsigned long)pci_resource_end(pdev, bar));
1866                 idx++;
1867         }
1868
1869 #ifdef CONFIG_X86
1870         primary = pdev->resource[PCI_ROM_RESOURCE].flags &
1871                                         IORESOURCE_ROM_SHADOW;
1872 #endif
1873         err = remove_conflicting_framebuffers(ap, name, primary);
1874         kfree(ap);
1875         return err;
1876 }
1877 EXPORT_SYMBOL(remove_conflicting_pci_framebuffers);
1878
1879 /**
1880  *      register_framebuffer - registers a frame buffer device
1881  *      @fb_info: frame buffer info structure
1882  *
1883  *      Registers a frame buffer device @fb_info.
1884  *
1885  *      Returns negative errno on error, or zero for success.
1886  *
1887  */
1888 int
1889 register_framebuffer(struct fb_info *fb_info)
1890 {
1891         int ret;
1892
1893         mutex_lock(&registration_lock);
1894         ret = do_register_framebuffer(fb_info);
1895         mutex_unlock(&registration_lock);
1896
1897         return ret;
1898 }
1899 EXPORT_SYMBOL(register_framebuffer);
1900
1901 /**
1902  *      unregister_framebuffer - releases a frame buffer device
1903  *      @fb_info: frame buffer info structure
1904  *
1905  *      Unregisters a frame buffer device @fb_info.
1906  *
1907  *      Returns negative errno on error, or zero for success.
1908  *
1909  *      This function will also notify the framebuffer console
1910  *      to release the driver.
1911  *
1912  *      This is meant to be called within a driver's module_exit()
1913  *      function. If this is called outside module_exit(), ensure
1914  *      that the driver implements fb_open() and fb_release() to
1915  *      check that no processes are using the device.
1916  */
1917 void
1918 unregister_framebuffer(struct fb_info *fb_info)
1919 {
1920         bool forced_out = fb_info->forced_out;
1921
1922         if (!forced_out)
1923                 mutex_lock(&registration_lock);
1924         do_unregister_framebuffer(fb_info);
1925         if (!forced_out)
1926                 mutex_unlock(&registration_lock);
1927 }
1928 EXPORT_SYMBOL(unregister_framebuffer);
1929
1930 /**
1931  *      fb_set_suspend - low level driver signals suspend
1932  *      @info: framebuffer affected
1933  *      @state: 0 = resuming, !=0 = suspending
1934  *
1935  *      This is meant to be used by low level drivers to
1936  *      signal suspend/resume to the core & clients.
1937  *      It must be called with the console semaphore held
1938  */
1939 void fb_set_suspend(struct fb_info *info, int state)
1940 {
1941         WARN_CONSOLE_UNLOCKED();
1942
1943         if (state) {
1944                 fbcon_suspended(info);
1945                 info->state = FBINFO_STATE_SUSPENDED;
1946         } else {
1947                 info->state = FBINFO_STATE_RUNNING;
1948                 fbcon_resumed(info);
1949         }
1950 }
1951 EXPORT_SYMBOL(fb_set_suspend);
1952
1953 /**
1954  *      fbmem_init - init frame buffer subsystem
1955  *
1956  *      Initialize the frame buffer subsystem.
1957  *
1958  *      NOTE: This function is _only_ to be called by drivers/char/mem.c.
1959  *
1960  */
1961
1962 static int __init
1963 fbmem_init(void)
1964 {
1965         int ret;
1966
1967         if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
1968                 return -ENOMEM;
1969
1970         ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1971         if (ret) {
1972                 printk("unable to get major %d for fb devs\n", FB_MAJOR);
1973                 goto err_chrdev;
1974         }
1975
1976         fb_class = class_create(THIS_MODULE, "graphics");
1977         if (IS_ERR(fb_class)) {
1978                 ret = PTR_ERR(fb_class);
1979                 pr_warn("Unable to create fb class; errno = %d\n", ret);
1980                 fb_class = NULL;
1981                 goto err_class;
1982         }
1983
1984         fb_console_init();
1985
1986         return 0;
1987
1988 err_class:
1989         unregister_chrdev(FB_MAJOR, "fb");
1990 err_chrdev:
1991         remove_proc_entry("fb", NULL);
1992         return ret;
1993 }
1994
1995 #ifdef MODULE
1996 module_init(fbmem_init);
1997 static void __exit
1998 fbmem_exit(void)
1999 {
2000         fb_console_exit();
2001
2002         remove_proc_entry("fb", NULL);
2003         class_destroy(fb_class);
2004         unregister_chrdev(FB_MAJOR, "fb");
2005 }
2006
2007 module_exit(fbmem_exit);
2008 MODULE_LICENSE("GPL");
2009 MODULE_DESCRIPTION("Framebuffer base");
2010 #else
2011 subsys_initcall(fbmem_init);
2012 #endif
2013
2014 int fb_new_modelist(struct fb_info *info)
2015 {
2016         struct fb_var_screeninfo var = info->var;
2017         struct list_head *pos, *n;
2018         struct fb_modelist *modelist;
2019         struct fb_videomode *m, mode;
2020         int err;
2021
2022         list_for_each_safe(pos, n, &info->modelist) {
2023                 modelist = list_entry(pos, struct fb_modelist, list);
2024                 m = &modelist->mode;
2025                 fb_videomode_to_var(&var, m);
2026                 var.activate = FB_ACTIVATE_TEST;
2027                 err = fb_set_var(info, &var);
2028                 fb_var_to_videomode(&mode, &var);
2029                 if (err || !fb_mode_is_equal(m, &mode)) {
2030                         list_del(pos);
2031                         kfree(pos);
2032                 }
2033         }
2034
2035         if (list_empty(&info->modelist))
2036                 return 1;
2037
2038         fbcon_new_modelist(info);
2039
2040         return 0;
2041 }
2042
2043 MODULE_LICENSE("GPL");