drm_crtc.c 143.2 KB
Newer Older
D
Dave Airlie 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
/*
 * Copyright (c) 2006-2008 Intel Corporation
 * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
 * Copyright (c) 2008 Red Hat Inc.
 *
 * DRM core CRTC related functions
 *
 * Permission to use, copy, modify, distribute, and sell this software and its
 * documentation for any purpose is hereby granted without fee, provided that
 * the above copyright notice appear in all copies and that both that copyright
 * notice and this permission notice appear in supporting documentation, and
 * that the name of the copyright holders not be used in advertising or
 * publicity pertaining to distribution of the software without specific,
 * written prior permission.  The copyright holders make no representations
 * about the suitability of this software for any purpose.  It is provided "as
 * is" without express or implied warranty.
 *
 * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
 * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
 * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
 * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
 * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
 * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
 * OF THIS SOFTWARE.
 *
 * Authors:
 *      Keith Packard
 *	Eric Anholt <eric@anholt.net>
 *      Dave Airlie <airlied@linux.ie>
 *      Jesse Barnes <jesse.barnes@intel.com>
 */
32
#include <linux/ctype.h>
D
Dave Airlie 已提交
33
#include <linux/list.h>
34
#include <linux/slab.h>
35
#include <linux/export.h>
36 37 38 39
#include <drm/drmP.h>
#include <drm/drm_crtc.h>
#include <drm/drm_edid.h>
#include <drm/drm_fourcc.h>
40
#include <drm/drm_modeset_lock.h>
D
Dave Airlie 已提交
41

42
#include "drm_crtc_internal.h"
43
#include "drm_internal.h"
44

45 46 47 48
static struct drm_framebuffer *add_framebuffer_internal(struct drm_device *dev,
							struct drm_mode_fb_cmd2 *r,
							struct drm_file *file_priv);

D
Dave Airlie 已提交
49 50
/* Avoid boilerplate.  I'm tired of typing. */
#define DRM_ENUM_NAME_FN(fnname, list)				\
51
	const char *fnname(int val)				\
D
Dave Airlie 已提交
52 53 54 55 56 57 58 59 60 61 62 63
	{							\
		int i;						\
		for (i = 0; i < ARRAY_SIZE(list); i++) {	\
			if (list[i].type == val)		\
				return list[i].name;		\
		}						\
		return "(unknown)";				\
	}

/*
 * Global properties
 */
64
static const struct drm_prop_enum_list drm_dpms_enum_list[] =
D
Dave Airlie 已提交
65 66 67 68 69 70 71 72
{	{ DRM_MODE_DPMS_ON, "On" },
	{ DRM_MODE_DPMS_STANDBY, "Standby" },
	{ DRM_MODE_DPMS_SUSPEND, "Suspend" },
	{ DRM_MODE_DPMS_OFF, "Off" }
};

DRM_ENUM_NAME_FN(drm_get_dpms_name, drm_dpms_enum_list)

R
Rob Clark 已提交
73 74 75 76 77 78 79
static const struct drm_prop_enum_list drm_plane_type_enum_list[] =
{
	{ DRM_PLANE_TYPE_OVERLAY, "Overlay" },
	{ DRM_PLANE_TYPE_PRIMARY, "Primary" },
	{ DRM_PLANE_TYPE_CURSOR, "Cursor" },
};

D
Dave Airlie 已提交
80 81 82
/*
 * Optional properties
 */
83
static const struct drm_prop_enum_list drm_scaling_mode_enum_list[] =
D
Dave Airlie 已提交
84
{
85 86 87 88
	{ DRM_MODE_SCALE_NONE, "None" },
	{ DRM_MODE_SCALE_FULLSCREEN, "Full" },
	{ DRM_MODE_SCALE_CENTER, "Center" },
	{ DRM_MODE_SCALE_ASPECT, "Full aspect" },
D
Dave Airlie 已提交
89 90
};

91 92 93 94 95 96
static const struct drm_prop_enum_list drm_aspect_ratio_enum_list[] = {
	{ DRM_MODE_PICTURE_ASPECT_NONE, "Automatic" },
	{ DRM_MODE_PICTURE_ASPECT_4_3, "4:3" },
	{ DRM_MODE_PICTURE_ASPECT_16_9, "16:9" },
};

D
Dave Airlie 已提交
97 98 99
/*
 * Non-global properties, but "required" for certain connectors.
 */
100
static const struct drm_prop_enum_list drm_dvi_i_select_enum_list[] =
D
Dave Airlie 已提交
101 102 103 104 105 106 107 108
{
	{ DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
	{ DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
	{ DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
};

DRM_ENUM_NAME_FN(drm_get_dvi_i_select_name, drm_dvi_i_select_enum_list)

109
static const struct drm_prop_enum_list drm_dvi_i_subconnector_enum_list[] =
D
Dave Airlie 已提交
110 111 112 113 114 115 116 117 118
{
	{ DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
	{ DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
	{ DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
};

DRM_ENUM_NAME_FN(drm_get_dvi_i_subconnector_name,
		 drm_dvi_i_subconnector_enum_list)

119
static const struct drm_prop_enum_list drm_tv_select_enum_list[] =
D
Dave Airlie 已提交
120 121 122 123 124
{
	{ DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
	{ DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
	{ DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
	{ DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
125
	{ DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
D
Dave Airlie 已提交
126 127 128 129
};

DRM_ENUM_NAME_FN(drm_get_tv_select_name, drm_tv_select_enum_list)

130
static const struct drm_prop_enum_list drm_tv_subconnector_enum_list[] =
D
Dave Airlie 已提交
131 132 133 134 135
{
	{ DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
	{ DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
	{ DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
	{ DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
136
	{ DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
D
Dave Airlie 已提交
137 138 139 140 141
};

DRM_ENUM_NAME_FN(drm_get_tv_subconnector_name,
		 drm_tv_subconnector_enum_list)

142
static const struct drm_prop_enum_list drm_dirty_info_enum_list[] = {
143 144 145 146 147
	{ DRM_MODE_DIRTY_OFF,      "Off"      },
	{ DRM_MODE_DIRTY_ON,       "On"       },
	{ DRM_MODE_DIRTY_ANNOTATE, "Annotate" },
};

D
Dave Airlie 已提交
148 149
struct drm_conn_prop_enum_list {
	int type;
150
	const char *name;
151
	struct ida ida;
D
Dave Airlie 已提交
152 153 154 155 156 157
};

/*
 * Connector and encoder types.
 */
static struct drm_conn_prop_enum_list drm_connector_enum_list[] =
158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173
{	{ DRM_MODE_CONNECTOR_Unknown, "Unknown" },
	{ DRM_MODE_CONNECTOR_VGA, "VGA" },
	{ DRM_MODE_CONNECTOR_DVII, "DVI-I" },
	{ DRM_MODE_CONNECTOR_DVID, "DVI-D" },
	{ DRM_MODE_CONNECTOR_DVIA, "DVI-A" },
	{ DRM_MODE_CONNECTOR_Composite, "Composite" },
	{ DRM_MODE_CONNECTOR_SVIDEO, "SVIDEO" },
	{ DRM_MODE_CONNECTOR_LVDS, "LVDS" },
	{ DRM_MODE_CONNECTOR_Component, "Component" },
	{ DRM_MODE_CONNECTOR_9PinDIN, "DIN" },
	{ DRM_MODE_CONNECTOR_DisplayPort, "DP" },
	{ DRM_MODE_CONNECTOR_HDMIA, "HDMI-A" },
	{ DRM_MODE_CONNECTOR_HDMIB, "HDMI-B" },
	{ DRM_MODE_CONNECTOR_TV, "TV" },
	{ DRM_MODE_CONNECTOR_eDP, "eDP" },
	{ DRM_MODE_CONNECTOR_VIRTUAL, "Virtual" },
174
	{ DRM_MODE_CONNECTOR_DSI, "DSI" },
D
Dave Airlie 已提交
175 176
};

177
static const struct drm_prop_enum_list drm_encoder_enum_list[] =
D
Dave Airlie 已提交
178 179 180 181 182
{	{ DRM_MODE_ENCODER_NONE, "None" },
	{ DRM_MODE_ENCODER_DAC, "DAC" },
	{ DRM_MODE_ENCODER_TMDS, "TMDS" },
	{ DRM_MODE_ENCODER_LVDS, "LVDS" },
	{ DRM_MODE_ENCODER_TVDAC, "TV" },
183
	{ DRM_MODE_ENCODER_VIRTUAL, "Virtual" },
184
	{ DRM_MODE_ENCODER_DSI, "DSI" },
D
Dave Airlie 已提交
185
	{ DRM_MODE_ENCODER_DPMST, "DP MST" },
D
Dave Airlie 已提交
186 187
};

188 189 190 191 192 193 194 195 196 197
static const struct drm_prop_enum_list drm_subpixel_enum_list[] =
{
	{ SubPixelUnknown, "Unknown" },
	{ SubPixelHorizontalRGB, "Horizontal RGB" },
	{ SubPixelHorizontalBGR, "Horizontal BGR" },
	{ SubPixelVerticalRGB, "Vertical RGB" },
	{ SubPixelVerticalBGR, "Vertical BGR" },
	{ SubPixelNone, "None" },
};

198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213
void drm_connector_ida_init(void)
{
	int i;

	for (i = 0; i < ARRAY_SIZE(drm_connector_enum_list); i++)
		ida_init(&drm_connector_enum_list[i].ida);
}

void drm_connector_ida_destroy(void)
{
	int i;

	for (i = 0; i < ARRAY_SIZE(drm_connector_enum_list); i++)
		ida_destroy(&drm_connector_enum_list[i].ida);
}

214 215 216 217 218 219 220
/**
 * drm_get_connector_status_name - return a string for connector status
 * @status: connector status to compute name of
 *
 * In contrast to the other drm_get_*_name functions this one here returns a
 * const pointer and hence is threadsafe.
 */
221
const char *drm_get_connector_status_name(enum drm_connector_status status)
D
Dave Airlie 已提交
222 223 224 225 226 227 228 229
{
	if (status == connector_status_connected)
		return "connected";
	else if (status == connector_status_disconnected)
		return "disconnected";
	else
		return "unknown";
}
230
EXPORT_SYMBOL(drm_get_connector_status_name);
D
Dave Airlie 已提交
231

232 233 234 235 236 237 238 239 240 241 242 243 244
/**
 * drm_get_subpixel_order_name - return a string for a given subpixel enum
 * @order: enum of subpixel_order
 *
 * Note you could abuse this and return something out of bounds, but that
 * would be a caller error.  No unscrubbed user data should make it here.
 */
const char *drm_get_subpixel_order_name(enum subpixel_order order)
{
	return drm_subpixel_enum_list[order].name;
}
EXPORT_SYMBOL(drm_get_subpixel_order_name);

245 246 247 248 249
static char printable_char(int c)
{
	return isascii(c) && isprint(c) ? c : '?';
}

250 251 252 253 254 255 256 257 258
/**
 * drm_get_format_name - return a string for drm fourcc format
 * @format: format to compute name of
 *
 * Note that the buffer used by this function is globally shared and owned by
 * the function itself.
 *
 * FIXME: This isn't really multithreading safe.
 */
259
const char *drm_get_format_name(uint32_t format)
260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275
{
	static char buf[32];

	snprintf(buf, sizeof(buf),
		 "%c%c%c%c %s-endian (0x%08x)",
		 printable_char(format & 0xff),
		 printable_char((format >> 8) & 0xff),
		 printable_char((format >> 16) & 0xff),
		 printable_char((format >> 24) & 0x7f),
		 format & DRM_FORMAT_BIG_ENDIAN ? "big" : "little",
		 format);

	return buf;
}
EXPORT_SYMBOL(drm_get_format_name);

276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301
/*
 * Internal function to assign a slot in the object idr and optionally
 * register the object into the idr.
 */
static int drm_mode_object_get_reg(struct drm_device *dev,
				   struct drm_mode_object *obj,
				   uint32_t obj_type,
				   bool register_obj)
{
	int ret;

	mutex_lock(&dev->mode_config.idr_mutex);
	ret = idr_alloc(&dev->mode_config.crtc_idr, register_obj ? obj : NULL, 1, 0, GFP_KERNEL);
	if (ret >= 0) {
		/*
		 * Set up the object linking under the protection of the idr
		 * lock so that other users can't see inconsistent state.
		 */
		obj->id = ret;
		obj->type = obj_type;
	}
	mutex_unlock(&dev->mode_config.idr_mutex);

	return ret < 0 ? ret : 0;
}

D
Dave Airlie 已提交
302
/**
303
 * drm_mode_object_get - allocate a new modeset identifier
D
Dave Airlie 已提交
304
 * @dev: DRM device
305 306
 * @obj: object pointer, used to generate unique ID
 * @obj_type: object type
D
Dave Airlie 已提交
307 308
 *
 * Create a unique identifier based on @ptr in @dev's identifier space.  Used
309 310 311
 * for tracking modes, CRTCs and connectors. Note that despite the _get postfix
 * modeset identifiers are _not_ reference counted. Hence don't use this for
 * reference counted modeset objects like framebuffers.
D
Dave Airlie 已提交
312
 *
313
 * Returns:
D
Dave Airlie 已提交
314 315 316
 * New unique (relative to other objects in @dev) integer identifier for the
 * object.
 */
317 318
int drm_mode_object_get(struct drm_device *dev,
			struct drm_mode_object *obj, uint32_t obj_type)
D
Dave Airlie 已提交
319
{
320 321
	return drm_mode_object_get_reg(dev, obj, obj_type, true);
}
D
Dave Airlie 已提交
322

323 324 325
static void drm_mode_object_register(struct drm_device *dev,
				     struct drm_mode_object *obj)
{
J
Jesse Barnes 已提交
326
	mutex_lock(&dev->mode_config.idr_mutex);
327
	idr_replace(&dev->mode_config.crtc_idr, obj, obj->id);
J
Jesse Barnes 已提交
328
	mutex_unlock(&dev->mode_config.idr_mutex);
D
Dave Airlie 已提交
329 330 331
}

/**
332
 * drm_mode_object_put - free a modeset identifer
D
Dave Airlie 已提交
333
 * @dev: DRM device
334
 * @object: object to free
D
Dave Airlie 已提交
335
 *
336 337 338
 * Free @id from @dev's unique identifier pool. Note that despite the _get
 * postfix modeset identifiers are _not_ reference counted. Hence don't use this
 * for reference counted modeset objects like framebuffers.
D
Dave Airlie 已提交
339
 */
340 341
void drm_mode_object_put(struct drm_device *dev,
			 struct drm_mode_object *object)
D
Dave Airlie 已提交
342
{
J
Jesse Barnes 已提交
343
	mutex_lock(&dev->mode_config.idr_mutex);
D
Dave Airlie 已提交
344
	idr_remove(&dev->mode_config.crtc_idr, object->id);
J
Jesse Barnes 已提交
345
	mutex_unlock(&dev->mode_config.idr_mutex);
D
Dave Airlie 已提交
346 347
}

R
Rob Clark 已提交
348 349 350 351 352 353 354
static struct drm_mode_object *_object_find(struct drm_device *dev,
		uint32_t id, uint32_t type)
{
	struct drm_mode_object *obj = NULL;

	mutex_lock(&dev->mode_config.idr_mutex);
	obj = idr_find(&dev->mode_config.crtc_idr, id);
355 356 357 358 359 360
	if (obj && type != DRM_MODE_OBJECT_ANY && obj->type != type)
		obj = NULL;
	if (obj && obj->id != id)
		obj = NULL;
	/* don't leak out unref'd fb's */
	if (obj && (obj->type == DRM_MODE_OBJECT_FB))
R
Rob Clark 已提交
361 362 363 364 365 366
		obj = NULL;
	mutex_unlock(&dev->mode_config.idr_mutex);

	return obj;
}

367 368 369 370 371 372 373
/**
 * drm_mode_object_find - look up a drm object with static lifetime
 * @dev: drm device
 * @id: id of the mode object
 * @type: type of the mode object
 *
 * Note that framebuffers cannot be looked up with this functions - since those
R
Rob Clark 已提交
374 375 376
 * are reference counted, they need special treatment.  Even with
 * DRM_MODE_OBJECT_ANY (although that will simply return NULL
 * rather than WARN_ON()).
377
 */
378 379
struct drm_mode_object *drm_mode_object_find(struct drm_device *dev,
		uint32_t id, uint32_t type)
D
Dave Airlie 已提交
380
{
J
Jesse Barnes 已提交
381
	struct drm_mode_object *obj = NULL;
D
Dave Airlie 已提交
382

383 384 385
	/* Framebuffers are reference counted and need their own lookup
	 * function.*/
	WARN_ON(type == DRM_MODE_OBJECT_FB);
R
Rob Clark 已提交
386
	obj = _object_find(dev, id, type);
D
Dave Airlie 已提交
387 388 389 390 391 392 393
	return obj;
}
EXPORT_SYMBOL(drm_mode_object_find);

/**
 * drm_framebuffer_init - initialize a framebuffer
 * @dev: DRM device
394 395
 * @fb: framebuffer to be initialized
 * @funcs: ... with these functions
D
Dave Airlie 已提交
396 397 398 399
 *
 * Allocates an ID for the framebuffer's parent mode object, sets its mode
 * functions & device file and adds it to the master fd list.
 *
400 401 402 403 404 405
 * IMPORTANT:
 * This functions publishes the fb and makes it available for concurrent access
 * by other users. Which means by this point the fb _must_ be fully set up -
 * since all the fb attributes are invariant over its lifetime, no further
 * locking but only correct reference counting is required.
 *
406
 * Returns:
407
 * Zero on success, error code on failure.
D
Dave Airlie 已提交
408 409 410 411 412 413
 */
int drm_framebuffer_init(struct drm_device *dev, struct drm_framebuffer *fb,
			 const struct drm_framebuffer_funcs *funcs)
{
	int ret;

414
	mutex_lock(&dev->mode_config.fb_lock);
R
Rob Clark 已提交
415
	kref_init(&fb->refcount);
416 417 418
	INIT_LIST_HEAD(&fb->filp_head);
	fb->dev = dev;
	fb->funcs = funcs;
R
Rob Clark 已提交
419

D
Dave Airlie 已提交
420
	ret = drm_mode_object_get(dev, &fb->base, DRM_MODE_OBJECT_FB);
421
	if (ret)
422
		goto out;
D
Dave Airlie 已提交
423 424 425

	dev->mode_config.num_fb++;
	list_add(&fb->head, &dev->mode_config.fb_list);
426 427
out:
	mutex_unlock(&dev->mode_config.fb_lock);
D
Dave Airlie 已提交
428 429 430 431 432

	return 0;
}
EXPORT_SYMBOL(drm_framebuffer_init);

433 434 435 436 437 438 439 440 441 442 443
/* dev->mode_config.fb_lock must be held! */
static void __drm_framebuffer_unregister(struct drm_device *dev,
					 struct drm_framebuffer *fb)
{
	mutex_lock(&dev->mode_config.idr_mutex);
	idr_remove(&dev->mode_config.crtc_idr, fb->base.id);
	mutex_unlock(&dev->mode_config.idr_mutex);

	fb->base.id = 0;
}

R
Rob Clark 已提交
444 445 446 447
static void drm_framebuffer_free(struct kref *kref)
{
	struct drm_framebuffer *fb =
			container_of(kref, struct drm_framebuffer, refcount);
448 449 450 451 452 453 454 455 456 457 458 459 460
	struct drm_device *dev = fb->dev;

	/*
	 * The lookup idr holds a weak reference, which has not necessarily been
	 * removed at this point. Check for that.
	 */
	mutex_lock(&dev->mode_config.fb_lock);
	if (fb->base.id) {
		/* Mark fb as reaped and drop idr ref. */
		__drm_framebuffer_unregister(dev, fb);
	}
	mutex_unlock(&dev->mode_config.fb_lock);

R
Rob Clark 已提交
461 462 463
	fb->funcs->destroy(fb);
}

464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480
static struct drm_framebuffer *__drm_framebuffer_lookup(struct drm_device *dev,
							uint32_t id)
{
	struct drm_mode_object *obj = NULL;
	struct drm_framebuffer *fb;

	mutex_lock(&dev->mode_config.idr_mutex);
	obj = idr_find(&dev->mode_config.crtc_idr, id);
	if (!obj || (obj->type != DRM_MODE_OBJECT_FB) || (obj->id != id))
		fb = NULL;
	else
		fb = obj_to_fb(obj);
	mutex_unlock(&dev->mode_config.idr_mutex);

	return fb;
}

481 482 483 484 485 486 487
/**
 * drm_framebuffer_lookup - look up a drm framebuffer and grab a reference
 * @dev: drm device
 * @id: id of the fb object
 *
 * If successful, this grabs an additional reference to the framebuffer -
 * callers need to make sure to eventually unreference the returned framebuffer
488
 * again, using @drm_framebuffer_unreference.
489 490 491 492 493 494 495
 */
struct drm_framebuffer *drm_framebuffer_lookup(struct drm_device *dev,
					       uint32_t id)
{
	struct drm_framebuffer *fb;

	mutex_lock(&dev->mode_config.fb_lock);
496
	fb = __drm_framebuffer_lookup(dev, id);
497 498 499 500
	if (fb) {
		if (!kref_get_unless_zero(&fb->refcount))
			fb = NULL;
	}
501 502 503 504 505 506
	mutex_unlock(&dev->mode_config.fb_lock);

	return fb;
}
EXPORT_SYMBOL(drm_framebuffer_lookup);

R
Rob Clark 已提交
507 508
/**
 * drm_framebuffer_unreference - unref a framebuffer
509 510 511
 * @fb: framebuffer to unref
 *
 * This functions decrements the fb's refcount and frees it if it drops to zero.
R
Rob Clark 已提交
512 513 514
 */
void drm_framebuffer_unreference(struct drm_framebuffer *fb)
{
R
Rob Clark 已提交
515
	DRM_DEBUG("%p: FB ID: %d (%d)\n", fb, fb->base.id, atomic_read(&fb->refcount.refcount));
R
Rob Clark 已提交
516 517 518 519 520 521
	kref_put(&fb->refcount, drm_framebuffer_free);
}
EXPORT_SYMBOL(drm_framebuffer_unreference);

/**
 * drm_framebuffer_reference - incr the fb refcnt
522
 * @fb: framebuffer
523 524
 *
 * This functions increments the fb's refcount.
R
Rob Clark 已提交
525 526 527
 */
void drm_framebuffer_reference(struct drm_framebuffer *fb)
{
R
Rob Clark 已提交
528
	DRM_DEBUG("%p: FB ID: %d (%d)\n", fb, fb->base.id, atomic_read(&fb->refcount.refcount));
R
Rob Clark 已提交
529 530 531 532
	kref_get(&fb->refcount);
}
EXPORT_SYMBOL(drm_framebuffer_reference);

533 534 535 536 537
static void drm_framebuffer_free_bug(struct kref *kref)
{
	BUG();
}

538 539
static void __drm_framebuffer_unreference(struct drm_framebuffer *fb)
{
R
Rob Clark 已提交
540
	DRM_DEBUG("%p: FB ID: %d (%d)\n", fb, fb->base.id, atomic_read(&fb->refcount.refcount));
541 542 543
	kref_put(&fb->refcount, drm_framebuffer_free_bug);
}

544 545 546 547 548 549 550 551 552 553 554
/**
 * drm_framebuffer_unregister_private - unregister a private fb from the lookup idr
 * @fb: fb to unregister
 *
 * Drivers need to call this when cleaning up driver-private framebuffers, e.g.
 * those used for fbdev. Note that the caller must hold a reference of it's own,
 * i.e. the object may not be destroyed through this call (since it'll lead to a
 * locking inversion).
 */
void drm_framebuffer_unregister_private(struct drm_framebuffer *fb)
{
555 556 557 558 559 560
	struct drm_device *dev = fb->dev;

	mutex_lock(&dev->mode_config.fb_lock);
	/* Mark fb as reaped and drop idr ref. */
	__drm_framebuffer_unregister(dev, fb);
	mutex_unlock(&dev->mode_config.fb_lock);
561 562 563
}
EXPORT_SYMBOL(drm_framebuffer_unregister_private);

D
Dave Airlie 已提交
564 565 566 567
/**
 * drm_framebuffer_cleanup - remove a framebuffer object
 * @fb: framebuffer to remove
 *
568 569 570
 * Cleanup framebuffer. This function is intended to be used from the drivers
 * ->destroy callback. It can also be used to clean up driver private
 *  framebuffers embedded into a larger structure.
571 572 573 574 575 576 577 578 579
 *
 * Note that this function does not remove the fb from active usuage - if it is
 * still used anywhere, hilarity can ensue since userspace could call getfb on
 * the id and get back -EINVAL. Obviously no concern at driver unload time.
 *
 * Also, the framebuffer will not be removed from the lookup idr - for
 * user-created framebuffers this will happen in in the rmfb ioctl. For
 * driver-private objects (e.g. for fbdev) drivers need to explicitly call
 * drm_framebuffer_unregister_private.
D
Dave Airlie 已提交
580 581
 */
void drm_framebuffer_cleanup(struct drm_framebuffer *fb)
R
Rob Clark 已提交
582 583
{
	struct drm_device *dev = fb->dev;
584

585
	mutex_lock(&dev->mode_config.fb_lock);
R
Rob Clark 已提交
586 587
	list_del(&fb->head);
	dev->mode_config.num_fb--;
588
	mutex_unlock(&dev->mode_config.fb_lock);
R
Rob Clark 已提交
589 590 591 592 593 594 595 596
}
EXPORT_SYMBOL(drm_framebuffer_cleanup);

/**
 * drm_framebuffer_remove - remove and unreference a framebuffer object
 * @fb: framebuffer to remove
 *
 * Scans all the CRTCs and planes in @dev's mode_config.  If they're
597
 * using @fb, removes it, setting it to NULL. Then drops the reference to the
598 599 600 601 602
 * passed-in framebuffer. Might take the modeset locks.
 *
 * Note that this function optimizes the cleanup away if the caller holds the
 * last reference to the framebuffer. It is also guaranteed to not take the
 * modeset locks in this case.
R
Rob Clark 已提交
603 604
 */
void drm_framebuffer_remove(struct drm_framebuffer *fb)
D
Dave Airlie 已提交
605 606 607
{
	struct drm_device *dev = fb->dev;
	struct drm_crtc *crtc;
J
Jesse Barnes 已提交
608
	struct drm_plane *plane;
609 610
	struct drm_mode_set set;
	int ret;
D
Dave Airlie 已提交
611

612
	WARN_ON(!list_empty(&fb->filp_head));
613

614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632
	/*
	 * drm ABI mandates that we remove any deleted framebuffers from active
	 * useage. But since most sane clients only remove framebuffers they no
	 * longer need, try to optimize this away.
	 *
	 * Since we're holding a reference ourselves, observing a refcount of 1
	 * means that we're the last holder and can skip it. Also, the refcount
	 * can never increase from 1 again, so we don't need any barriers or
	 * locks.
	 *
	 * Note that userspace could try to race with use and instate a new
	 * usage _after_ we've cleared all current ones. End result will be an
	 * in-use fb with fb-id == 0. Userspace is allowed to shoot its own foot
	 * in this manner.
	 */
	if (atomic_read(&fb->refcount.refcount) > 1) {
		drm_modeset_lock_all(dev);
		/* remove from any CRTC */
		list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
633
			if (crtc->primary->fb == fb) {
634 635 636 637 638 639 640 641
				/* should turn off the crtc */
				memset(&set, 0, sizeof(struct drm_mode_set));
				set.crtc = crtc;
				set.fb = NULL;
				ret = drm_mode_set_config_internal(&set);
				if (ret)
					DRM_ERROR("failed to reset crtc %p when fb was deleted\n", crtc);
			}
642
		}
D
Dave Airlie 已提交
643

644
		list_for_each_entry(plane, &dev->mode_config.plane_list, head) {
645 646
			if (plane->fb == fb)
				drm_plane_force_disable(plane);
J
Jesse Barnes 已提交
647
		}
648
		drm_modeset_unlock_all(dev);
J
Jesse Barnes 已提交
649 650
	}

R
Rob Clark 已提交
651
	drm_framebuffer_unreference(fb);
D
Dave Airlie 已提交
652
}
R
Rob Clark 已提交
653
EXPORT_SYMBOL(drm_framebuffer_remove);
D
Dave Airlie 已提交
654

655 656
DEFINE_WW_CLASS(crtc_ww_class);

D
Dave Airlie 已提交
657
/**
658 659
 * drm_crtc_init_with_planes - Initialise a new CRTC object with
 *    specified primary and cursor planes.
D
Dave Airlie 已提交
660 661
 * @dev: DRM device
 * @crtc: CRTC object to init
662 663
 * @primary: Primary plane for CRTC
 * @cursor: Cursor plane for CRTC
D
Dave Airlie 已提交
664 665
 * @funcs: callbacks for the new CRTC
 *
666
 * Inits a new object created as base part of a driver crtc object.
667
 *
668
 * Returns:
669
 * Zero on success, error code on failure.
D
Dave Airlie 已提交
670
 */
671 672
int drm_crtc_init_with_planes(struct drm_device *dev, struct drm_crtc *crtc,
			      struct drm_plane *primary,
673
			      struct drm_plane *cursor,
674
			      const struct drm_crtc_funcs *funcs)
D
Dave Airlie 已提交
675
{
676
	struct drm_mode_config *config = &dev->mode_config;
677 678
	int ret;

D
Dave Airlie 已提交
679 680
	crtc->dev = dev;
	crtc->funcs = funcs;
R
Rob Clark 已提交
681
	crtc->invert_dimensions = false;
D
Dave Airlie 已提交
682

683
	drm_modeset_lock_init(&crtc->mutex);
684 685
	ret = drm_mode_object_get(dev, &crtc->base, DRM_MODE_OBJECT_CRTC);
	if (ret)
686
		return ret;
D
Dave Airlie 已提交
687

P
Paulo Zanoni 已提交
688 689
	crtc->base.properties = &crtc->properties;

690 691
	list_add_tail(&crtc->head, &config->crtc_list);
	config->num_crtc++;
692

693
	crtc->primary = primary;
694
	crtc->cursor = cursor;
695 696
	if (primary)
		primary->possible_crtcs = 1 << drm_crtc_index(crtc);
697 698
	if (cursor)
		cursor->possible_crtcs = 1 << drm_crtc_index(crtc);
699

700
	return 0;
D
Dave Airlie 已提交
701
}
702
EXPORT_SYMBOL(drm_crtc_init_with_planes);
D
Dave Airlie 已提交
703 704

/**
705
 * drm_crtc_cleanup - Clean up the core crtc usage
D
Dave Airlie 已提交
706 707
 * @crtc: CRTC to cleanup
 *
708 709 710
 * This function cleans up @crtc and removes it from the DRM mode setting
 * core. Note that the function does *not* free the crtc structure itself,
 * this is the responsibility of the caller.
D
Dave Airlie 已提交
711 712 713 714 715
 */
void drm_crtc_cleanup(struct drm_crtc *crtc)
{
	struct drm_device *dev = crtc->dev;

716 717
	kfree(crtc->gamma_store);
	crtc->gamma_store = NULL;
D
Dave Airlie 已提交
718

719 720
	drm_modeset_lock_fini(&crtc->mutex);

D
Dave Airlie 已提交
721 722 723
	drm_mode_object_put(dev, &crtc->base);
	list_del(&crtc->head);
	dev->mode_config.num_crtc--;
724 725 726 727

	WARN_ON(crtc->state && !crtc->funcs->atomic_destroy_state);
	if (crtc->state && crtc->funcs->atomic_destroy_state)
		crtc->funcs->atomic_destroy_state(crtc, crtc->state);
D
Dave Airlie 已提交
728 729 730
}
EXPORT_SYMBOL(drm_crtc_cleanup);

731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753
/**
 * drm_crtc_index - find the index of a registered CRTC
 * @crtc: CRTC to find index for
 *
 * Given a registered CRTC, return the index of that CRTC within a DRM
 * device's list of CRTCs.
 */
unsigned int drm_crtc_index(struct drm_crtc *crtc)
{
	unsigned int index = 0;
	struct drm_crtc *tmp;

	list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head) {
		if (tmp == crtc)
			return index;

		index++;
	}

	BUG();
}
EXPORT_SYMBOL(drm_crtc_index);

754
/*
D
Dave Airlie 已提交
755 756 757 758 759 760
 * drm_mode_remove - remove and free a mode
 * @connector: connector list to modify
 * @mode: mode to remove
 *
 * Remove @mode from @connector's mode list, then free it.
 */
761 762
static void drm_mode_remove(struct drm_connector *connector,
			    struct drm_display_mode *mode)
D
Dave Airlie 已提交
763 764
{
	list_del(&mode->head);
765
	drm_mode_destroy(connector->dev, mode);
D
Dave Airlie 已提交
766 767
}

768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819
/**
 * drm_connector_get_cmdline_mode - reads the user's cmdline mode
 * @connector: connector to quwery
 *
 * The kernel supports per-connector configration of its consoles through
 * use of the video= parameter. This function parses that option and
 * extracts the user's specified mode (or enable/disable status) for a
 * particular connector. This is typically only used during the early fbdev
 * setup.
 */
static void drm_connector_get_cmdline_mode(struct drm_connector *connector)
{
	struct drm_cmdline_mode *mode = &connector->cmdline_mode;
	char *option = NULL;

	if (fb_get_options(connector->name, &option))
		return;

	if (!drm_mode_parse_command_line_for_connector(option,
						       connector,
						       mode))
		return;

	if (mode->force) {
		const char *s;

		switch (mode->force) {
		case DRM_FORCE_OFF:
			s = "OFF";
			break;
		case DRM_FORCE_ON_DIGITAL:
			s = "ON - dig";
			break;
		default:
		case DRM_FORCE_ON:
			s = "ON";
			break;
		}

		DRM_INFO("forcing %s connector %s\n", connector->name, s);
		connector->force = mode->force;
	}

	DRM_DEBUG_KMS("cmdline mode for connector %s %dx%d@%dHz%s%s%s\n",
		      connector->name,
		      mode->xres, mode->yres,
		      mode->refresh_specified ? mode->refresh : 60,
		      mode->rb ? " reduced blanking" : "",
		      mode->margins ? " with margins" : "",
		      mode->interlace ?  " interlaced" : "");
}

D
Dave Airlie 已提交
820 821 822 823 824
/**
 * drm_connector_init - Init a preallocated connector
 * @dev: DRM device
 * @connector: the connector to init
 * @funcs: callbacks for this connector
825
 * @connector_type: user visible type of the connector
D
Dave Airlie 已提交
826 827 828
 *
 * Initialises a preallocated connector. Connectors should be
 * subclassed as part of driver connector objects.
829
 *
830
 * Returns:
831
 * Zero on success, error code on failure.
D
Dave Airlie 已提交
832
 */
833 834 835 836
int drm_connector_init(struct drm_device *dev,
		       struct drm_connector *connector,
		       const struct drm_connector_funcs *funcs,
		       int connector_type)
D
Dave Airlie 已提交
837
{
838
	int ret;
839 840
	struct ida *connector_ida =
		&drm_connector_enum_list[connector_type].ida;
841

842
	drm_modeset_lock_all(dev);
D
Dave Airlie 已提交
843

844
	ret = drm_mode_object_get_reg(dev, &connector->base, DRM_MODE_OBJECT_CONNECTOR, false);
845
	if (ret)
846
		goto out_unlock;
847

848
	connector->base.properties = &connector->properties;
D
Dave Airlie 已提交
849 850 851 852
	connector->dev = dev;
	connector->funcs = funcs;
	connector->connector_type = connector_type;
	connector->connector_type_id =
853 854 855
		ida_simple_get(connector_ida, 1, 0, GFP_KERNEL);
	if (connector->connector_type_id < 0) {
		ret = connector->connector_type_id;
856
		goto out_put;
857
	}
858 859 860 861 862 863 864 865 866
	connector->name =
		kasprintf(GFP_KERNEL, "%s-%d",
			  drm_connector_enum_list[connector_type].name,
			  connector->connector_type_id);
	if (!connector->name) {
		ret = -ENOMEM;
		goto out_put;
	}

D
Dave Airlie 已提交
867 868 869
	INIT_LIST_HEAD(&connector->probed_modes);
	INIT_LIST_HEAD(&connector->modes);
	connector->edid_blob_ptr = NULL;
870
	connector->status = connector_status_unknown;
D
Dave Airlie 已提交
871

872 873
	drm_connector_get_cmdline_mode(connector);

874 875
	/* We should add connectors at the end to avoid upsetting the connector
	 * index too much. */
D
Dave Airlie 已提交
876 877 878
	list_add_tail(&connector->head, &dev->mode_config.connector_list);
	dev->mode_config.num_connector++;

879
	if (connector_type != DRM_MODE_CONNECTOR_VIRTUAL)
880
		drm_object_attach_property(&connector->base,
881 882
					      dev->mode_config.edid_property,
					      0);
D
Dave Airlie 已提交
883

884
	drm_object_attach_property(&connector->base,
D
Dave Airlie 已提交
885 886
				      dev->mode_config.dpms_property, 0);

887 888
	connector->debugfs_entry = NULL;

889 890 891 892 893
out_put:
	if (ret)
		drm_mode_object_put(dev, &connector->base);

out_unlock:
894
	drm_modeset_unlock_all(dev);
895 896

	return ret;
D
Dave Airlie 已提交
897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916
}
EXPORT_SYMBOL(drm_connector_init);

/**
 * drm_connector_cleanup - cleans up an initialised connector
 * @connector: connector to cleanup
 *
 * Cleans up the connector but doesn't free the object.
 */
void drm_connector_cleanup(struct drm_connector *connector)
{
	struct drm_device *dev = connector->dev;
	struct drm_display_mode *mode, *t;

	list_for_each_entry_safe(mode, t, &connector->probed_modes, head)
		drm_mode_remove(connector, mode);

	list_for_each_entry_safe(mode, t, &connector->modes, head)
		drm_mode_remove(connector, mode);

917 918 919
	ida_remove(&drm_connector_enum_list[connector->connector_type].ida,
		   connector->connector_type_id);

D
Dave Airlie 已提交
920
	drm_mode_object_put(dev, &connector->base);
921 922
	kfree(connector->name);
	connector->name = NULL;
D
Dave Airlie 已提交
923
	list_del(&connector->head);
924
	dev->mode_config.num_connector--;
925 926 927 928 929

	WARN_ON(connector->state && !connector->funcs->atomic_destroy_state);
	if (connector->state && connector->funcs->atomic_destroy_state)
		connector->funcs->atomic_destroy_state(connector,
						       connector->state);
D
Dave Airlie 已提交
930 931 932
}
EXPORT_SYMBOL(drm_connector_cleanup);

933 934 935 936 937 938 939 940 941 942 943
/**
 * drm_connector_index - find the index of a registered connector
 * @connector: connector to find index for
 *
 * Given a registered connector, return the index of that connector within a DRM
 * device's list of connectors.
 */
unsigned int drm_connector_index(struct drm_connector *connector)
{
	unsigned int index = 0;
	struct drm_connector *tmp;
944 945 946
	struct drm_mode_config *config = &connector->dev->mode_config;

	WARN_ON(!drm_modeset_is_locked(&config->connection_mutex));
947 948 949 950 951 952 953 954 955 956 957 958

	list_for_each_entry(tmp, &connector->dev->mode_config.connector_list, head) {
		if (tmp == connector)
			return index;

		index++;
	}

	BUG();
}
EXPORT_SYMBOL(drm_connector_index);

959 960 961 962 963 964 965 966 967 968 969
/**
 * drm_connector_register - register a connector
 * @connector: the connector to register
 *
 * Register userspace interfaces for a connector
 *
 * Returns:
 * Zero on success, error code on failure.
 */
int drm_connector_register(struct drm_connector *connector)
{
970 971
	int ret;

972 973
	drm_mode_object_register(connector->dev, &connector->base);

974 975 976 977 978 979 980 981 982 983 984
	ret = drm_sysfs_connector_add(connector);
	if (ret)
		return ret;

	ret = drm_debugfs_connector_add(connector);
	if (ret) {
		drm_sysfs_connector_remove(connector);
		return ret;
	}

	return 0;
985 986 987 988 989 990 991 992 993 994 995 996
}
EXPORT_SYMBOL(drm_connector_register);

/**
 * drm_connector_unregister - unregister a connector
 * @connector: the connector to unregister
 *
 * Unregister userspace interfaces for a connector
 */
void drm_connector_unregister(struct drm_connector *connector)
{
	drm_sysfs_connector_remove(connector);
997
	drm_debugfs_connector_remove(connector);
998 999 1000 1001
}
EXPORT_SYMBOL(drm_connector_unregister);


1002 1003 1004 1005 1006 1007 1008 1009
/**
 * drm_connector_unplug_all - unregister connector userspace interfaces
 * @dev: drm device
 *
 * This function unregisters all connector userspace interfaces in sysfs. Should
 * be call when the device is disconnected, e.g. from an usb driver's
 * ->disconnect callback.
 */
1010 1011 1012 1013 1014 1015
void drm_connector_unplug_all(struct drm_device *dev)
{
	struct drm_connector *connector;

	/* taking the mode config mutex ends up in a clash with sysfs */
	list_for_each_entry(connector, &dev->mode_config.connector_list, head)
1016
		drm_connector_unregister(connector);
1017 1018 1019 1020

}
EXPORT_SYMBOL(drm_connector_unplug_all);

1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032
/**
 * drm_bridge_init - initialize a drm transcoder/bridge
 * @dev: drm device
 * @bridge: transcoder/bridge to set up
 * @funcs: bridge function table
 *
 * Initialises a preallocated bridge. Bridges should be
 * subclassed as part of driver connector objects.
 *
 * Returns:
 * Zero on success, error code on failure.
 */
S
Sean Paul 已提交
1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055
int drm_bridge_init(struct drm_device *dev, struct drm_bridge *bridge,
		const struct drm_bridge_funcs *funcs)
{
	int ret;

	drm_modeset_lock_all(dev);

	ret = drm_mode_object_get(dev, &bridge->base, DRM_MODE_OBJECT_BRIDGE);
	if (ret)
		goto out;

	bridge->dev = dev;
	bridge->funcs = funcs;

	list_add_tail(&bridge->head, &dev->mode_config.bridge_list);
	dev->mode_config.num_bridge++;

 out:
	drm_modeset_unlock_all(dev);
	return ret;
}
EXPORT_SYMBOL(drm_bridge_init);

1056 1057 1058 1059 1060 1061
/**
 * drm_bridge_cleanup - cleans up an initialised bridge
 * @bridge: bridge to cleanup
 *
 * Cleans up the bridge but doesn't free the object.
 */
S
Sean Paul 已提交
1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073
void drm_bridge_cleanup(struct drm_bridge *bridge)
{
	struct drm_device *dev = bridge->dev;

	drm_modeset_lock_all(dev);
	drm_mode_object_put(dev, &bridge->base);
	list_del(&bridge->head);
	dev->mode_config.num_bridge--;
	drm_modeset_unlock_all(dev);
}
EXPORT_SYMBOL(drm_bridge_cleanup);

1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086
/**
 * drm_encoder_init - Init a preallocated encoder
 * @dev: drm device
 * @encoder: the encoder to init
 * @funcs: callbacks for this encoder
 * @encoder_type: user visible type of the encoder
 *
 * Initialises a preallocated encoder. Encoder should be
 * subclassed as part of driver encoder objects.
 *
 * Returns:
 * Zero on success, error code on failure.
 */
1087
int drm_encoder_init(struct drm_device *dev,
1088 1089 1090
		      struct drm_encoder *encoder,
		      const struct drm_encoder_funcs *funcs,
		      int encoder_type)
D
Dave Airlie 已提交
1091
{
1092 1093
	int ret;

1094
	drm_modeset_lock_all(dev);
D
Dave Airlie 已提交
1095

1096 1097
	ret = drm_mode_object_get(dev, &encoder->base, DRM_MODE_OBJECT_ENCODER);
	if (ret)
1098
		goto out_unlock;
D
Dave Airlie 已提交
1099

1100
	encoder->dev = dev;
D
Dave Airlie 已提交
1101 1102
	encoder->encoder_type = encoder_type;
	encoder->funcs = funcs;
1103 1104 1105 1106 1107 1108 1109
	encoder->name = kasprintf(GFP_KERNEL, "%s-%d",
				  drm_encoder_enum_list[encoder_type].name,
				  encoder->base.id);
	if (!encoder->name) {
		ret = -ENOMEM;
		goto out_put;
	}
D
Dave Airlie 已提交
1110 1111 1112 1113

	list_add_tail(&encoder->head, &dev->mode_config.encoder_list);
	dev->mode_config.num_encoder++;

1114 1115 1116 1117 1118
out_put:
	if (ret)
		drm_mode_object_put(dev, &encoder->base);

out_unlock:
1119
	drm_modeset_unlock_all(dev);
1120 1121

	return ret;
D
Dave Airlie 已提交
1122 1123 1124
}
EXPORT_SYMBOL(drm_encoder_init);

1125 1126 1127 1128 1129 1130
/**
 * drm_encoder_cleanup - cleans up an initialised encoder
 * @encoder: encoder to cleanup
 *
 * Cleans up the encoder but doesn't free the object.
 */
D
Dave Airlie 已提交
1131 1132 1133
void drm_encoder_cleanup(struct drm_encoder *encoder)
{
	struct drm_device *dev = encoder->dev;
1134
	drm_modeset_lock_all(dev);
D
Dave Airlie 已提交
1135
	drm_mode_object_put(dev, &encoder->base);
1136 1137
	kfree(encoder->name);
	encoder->name = NULL;
D
Dave Airlie 已提交
1138
	list_del(&encoder->head);
1139
	dev->mode_config.num_encoder--;
1140
	drm_modeset_unlock_all(dev);
D
Dave Airlie 已提交
1141 1142 1143
}
EXPORT_SYMBOL(drm_encoder_cleanup);

1144
/**
M
Matt Roper 已提交
1145
 * drm_universal_plane_init - Initialize a new universal plane object
1146 1147 1148 1149 1150 1151
 * @dev: DRM device
 * @plane: plane object to init
 * @possible_crtcs: bitmask of possible CRTCs
 * @funcs: callbacks for the new plane
 * @formats: array of supported formats (%DRM_FORMAT_*)
 * @format_count: number of elements in @formats
M
Matt Roper 已提交
1152
 * @type: type of plane (overlay, primary, cursor)
1153
 *
M
Matt Roper 已提交
1154
 * Initializes a plane object of type @type.
1155
 *
1156
 * Returns:
1157 1158
 * Zero on success, error code on failure.
 */
M
Matt Roper 已提交
1159 1160 1161 1162 1163
int drm_universal_plane_init(struct drm_device *dev, struct drm_plane *plane,
			     unsigned long possible_crtcs,
			     const struct drm_plane_funcs *funcs,
			     const uint32_t *formats, uint32_t format_count,
			     enum drm_plane_type type)
J
Jesse Barnes 已提交
1164
{
1165 1166 1167 1168
	int ret;

	ret = drm_mode_object_get(dev, &plane->base, DRM_MODE_OBJECT_PLANE);
	if (ret)
1169
		return ret;
1170

D
Daniel Vetter 已提交
1171 1172
	drm_modeset_lock_init(&plane->mutex);

R
Rob Clark 已提交
1173
	plane->base.properties = &plane->properties;
J
Jesse Barnes 已提交
1174 1175 1176 1177 1178 1179 1180
	plane->dev = dev;
	plane->funcs = funcs;
	plane->format_types = kmalloc(sizeof(uint32_t) * format_count,
				      GFP_KERNEL);
	if (!plane->format_types) {
		DRM_DEBUG_KMS("out of memory when allocating plane\n");
		drm_mode_object_put(dev, &plane->base);
1181
		return -ENOMEM;
J
Jesse Barnes 已提交
1182 1183
	}

1184
	memcpy(plane->format_types, formats, format_count * sizeof(uint32_t));
J
Jesse Barnes 已提交
1185 1186
	plane->format_count = format_count;
	plane->possible_crtcs = possible_crtcs;
M
Matt Roper 已提交
1187
	plane->type = type;
J
Jesse Barnes 已提交
1188

M
Matt Roper 已提交
1189 1190 1191 1192
	list_add_tail(&plane->head, &dev->mode_config.plane_list);
	dev->mode_config.num_total_plane++;
	if (plane->type == DRM_PLANE_TYPE_OVERLAY)
		dev->mode_config.num_overlay_plane++;
J
Jesse Barnes 已提交
1193

R
Rob Clark 已提交
1194 1195 1196 1197
	drm_object_attach_property(&plane->base,
				   dev->mode_config.plane_type_property,
				   plane->type);

1198
	return 0;
J
Jesse Barnes 已提交
1199
}
M
Matt Roper 已提交
1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230
EXPORT_SYMBOL(drm_universal_plane_init);

/**
 * drm_plane_init - Initialize a legacy plane
 * @dev: DRM device
 * @plane: plane object to init
 * @possible_crtcs: bitmask of possible CRTCs
 * @funcs: callbacks for the new plane
 * @formats: array of supported formats (%DRM_FORMAT_*)
 * @format_count: number of elements in @formats
 * @is_primary: plane type (primary vs overlay)
 *
 * Legacy API to initialize a DRM plane.
 *
 * New drivers should call drm_universal_plane_init() instead.
 *
 * Returns:
 * Zero on success, error code on failure.
 */
int drm_plane_init(struct drm_device *dev, struct drm_plane *plane,
		   unsigned long possible_crtcs,
		   const struct drm_plane_funcs *funcs,
		   const uint32_t *formats, uint32_t format_count,
		   bool is_primary)
{
	enum drm_plane_type type;

	type = is_primary ? DRM_PLANE_TYPE_PRIMARY : DRM_PLANE_TYPE_OVERLAY;
	return drm_universal_plane_init(dev, plane, possible_crtcs, funcs,
					formats, format_count, type);
}
J
Jesse Barnes 已提交
1231 1232
EXPORT_SYMBOL(drm_plane_init);

1233 1234 1235 1236 1237 1238 1239 1240
/**
 * drm_plane_cleanup - Clean up the core plane usage
 * @plane: plane to cleanup
 *
 * This function cleans up @plane and removes it from the DRM mode setting
 * core. Note that the function does *not* free the plane structure itself,
 * this is the responsibility of the caller.
 */
J
Jesse Barnes 已提交
1241 1242 1243 1244
void drm_plane_cleanup(struct drm_plane *plane)
{
	struct drm_device *dev = plane->dev;

1245
	drm_modeset_lock_all(dev);
J
Jesse Barnes 已提交
1246 1247
	kfree(plane->format_types);
	drm_mode_object_put(dev, &plane->base);
M
Matt Roper 已提交
1248 1249 1250 1251 1252 1253 1254

	BUG_ON(list_empty(&plane->head));

	list_del(&plane->head);
	dev->mode_config.num_total_plane--;
	if (plane->type == DRM_PLANE_TYPE_OVERLAY)
		dev->mode_config.num_overlay_plane--;
1255
	drm_modeset_unlock_all(dev);
1256 1257 1258 1259

	WARN_ON(plane->state && !plane->funcs->atomic_destroy_state);
	if (plane->state && plane->funcs->atomic_destroy_state)
		plane->funcs->atomic_destroy_state(plane, plane->state);
J
Jesse Barnes 已提交
1260 1261 1262
}
EXPORT_SYMBOL(drm_plane_cleanup);

1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285
/**
 * drm_plane_index - find the index of a registered plane
 * @plane: plane to find index for
 *
 * Given a registered plane, return the index of that CRTC within a DRM
 * device's list of planes.
 */
unsigned int drm_plane_index(struct drm_plane *plane)
{
	unsigned int index = 0;
	struct drm_plane *tmp;

	list_for_each_entry(tmp, &plane->dev->mode_config.plane_list, head) {
		if (tmp == plane)
			return index;

		index++;
	}

	BUG();
}
EXPORT_SYMBOL(drm_plane_index);

1286 1287 1288 1289 1290 1291 1292 1293 1294
/**
 * drm_plane_force_disable - Forcibly disable a plane
 * @plane: plane to disable
 *
 * Forces the plane to be disabled.
 *
 * Used when the plane's current framebuffer is destroyed,
 * and when restoring fbdev mode.
 */
1295 1296 1297 1298
void drm_plane_force_disable(struct drm_plane *plane)
{
	int ret;

1299
	if (!plane->fb)
1300 1301
		return;

1302
	plane->old_fb = plane->fb;
1303
	ret = plane->funcs->disable_plane(plane);
1304
	if (ret) {
1305
		DRM_ERROR("failed to disable plane with busy fb\n");
1306
		plane->old_fb = NULL;
1307 1308
		return;
	}
1309
	/* disconnect the plane from the fb and crtc: */
1310 1311
	__drm_framebuffer_unreference(plane->old_fb);
	plane->old_fb = NULL;
1312 1313 1314 1315 1316
	plane->fb = NULL;
	plane->crtc = NULL;
}
EXPORT_SYMBOL(drm_plane_force_disable);

D
Dave Airlie 已提交
1317 1318 1319 1320
static int drm_mode_create_standard_connector_properties(struct drm_device *dev)
{
	struct drm_property *edid;
	struct drm_property *dpms;
D
Dave Airlie 已提交
1321
	struct drm_property *dev_path;
D
Dave Airlie 已提交
1322 1323 1324 1325 1326 1327 1328 1329 1330

	/*
	 * Standard properties (apply to all connectors)
	 */
	edid = drm_property_create(dev, DRM_MODE_PROP_BLOB |
				   DRM_MODE_PROP_IMMUTABLE,
				   "EDID", 0);
	dev->mode_config.edid_property = edid;

1331 1332 1333
	dpms = drm_property_create_enum(dev, 0,
				   "DPMS", drm_dpms_enum_list,
				   ARRAY_SIZE(drm_dpms_enum_list));
D
Dave Airlie 已提交
1334 1335
	dev->mode_config.dpms_property = dpms;

D
Dave Airlie 已提交
1336 1337 1338 1339 1340 1341
	dev_path = drm_property_create(dev,
				       DRM_MODE_PROP_BLOB |
				       DRM_MODE_PROP_IMMUTABLE,
				       "PATH", 0);
	dev->mode_config.path_property = dev_path;

D
Dave Airlie 已提交
1342 1343 1344
	return 0;
}

R
Rob Clark 已提交
1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359
static int drm_mode_create_standard_plane_properties(struct drm_device *dev)
{
	struct drm_property *type;

	/*
	 * Standard properties (apply to all planes)
	 */
	type = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
					"type", drm_plane_type_enum_list,
					ARRAY_SIZE(drm_plane_type_enum_list));
	dev->mode_config.plane_type_property = type;

	return 0;
}

D
Dave Airlie 已提交
1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374
/**
 * drm_mode_create_dvi_i_properties - create DVI-I specific connector properties
 * @dev: DRM device
 *
 * Called by a driver the first time a DVI-I connector is made.
 */
int drm_mode_create_dvi_i_properties(struct drm_device *dev)
{
	struct drm_property *dvi_i_selector;
	struct drm_property *dvi_i_subconnector;

	if (dev->mode_config.dvi_i_select_subconnector_property)
		return 0;

	dvi_i_selector =
1375
		drm_property_create_enum(dev, 0,
D
Dave Airlie 已提交
1376
				    "select subconnector",
1377
				    drm_dvi_i_select_enum_list,
D
Dave Airlie 已提交
1378 1379 1380
				    ARRAY_SIZE(drm_dvi_i_select_enum_list));
	dev->mode_config.dvi_i_select_subconnector_property = dvi_i_selector;

1381
	dvi_i_subconnector = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
D
Dave Airlie 已提交
1382
				    "subconnector",
1383
				    drm_dvi_i_subconnector_enum_list,
D
Dave Airlie 已提交
1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401
				    ARRAY_SIZE(drm_dvi_i_subconnector_enum_list));
	dev->mode_config.dvi_i_subconnector_property = dvi_i_subconnector;

	return 0;
}
EXPORT_SYMBOL(drm_mode_create_dvi_i_properties);

/**
 * drm_create_tv_properties - create TV specific connector properties
 * @dev: DRM device
 * @num_modes: number of different TV formats (modes) supported
 * @modes: array of pointers to strings containing name of each format
 *
 * Called by a driver's TV initialization routine, this function creates
 * the TV specific connector properties for a given device.  Caller is
 * responsible for allocating a list of format names and passing them to
 * this routine.
 */
1402 1403
int drm_mode_create_tv_properties(struct drm_device *dev,
				  unsigned int num_modes,
D
Dave Airlie 已提交
1404 1405 1406 1407
				  char *modes[])
{
	struct drm_property *tv_selector;
	struct drm_property *tv_subconnector;
1408
	unsigned int i;
D
Dave Airlie 已提交
1409 1410 1411 1412 1413 1414 1415

	if (dev->mode_config.tv_select_subconnector_property)
		return 0;

	/*
	 * Basic connector properties
	 */
1416
	tv_selector = drm_property_create_enum(dev, 0,
D
Dave Airlie 已提交
1417
					  "select subconnector",
1418
					  drm_tv_select_enum_list,
D
Dave Airlie 已提交
1419 1420 1421 1422
					  ARRAY_SIZE(drm_tv_select_enum_list));
	dev->mode_config.tv_select_subconnector_property = tv_selector;

	tv_subconnector =
1423 1424 1425
		drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
				    "subconnector",
				    drm_tv_subconnector_enum_list,
D
Dave Airlie 已提交
1426 1427 1428 1429 1430 1431 1432
				    ARRAY_SIZE(drm_tv_subconnector_enum_list));
	dev->mode_config.tv_subconnector_property = tv_subconnector;

	/*
	 * Other, TV specific properties: margins & TV modes.
	 */
	dev->mode_config.tv_left_margin_property =
1433
		drm_property_create_range(dev, 0, "left margin", 0, 100);
D
Dave Airlie 已提交
1434 1435

	dev->mode_config.tv_right_margin_property =
1436
		drm_property_create_range(dev, 0, "right margin", 0, 100);
D
Dave Airlie 已提交
1437 1438

	dev->mode_config.tv_top_margin_property =
1439
		drm_property_create_range(dev, 0, "top margin", 0, 100);
D
Dave Airlie 已提交
1440 1441

	dev->mode_config.tv_bottom_margin_property =
1442
		drm_property_create_range(dev, 0, "bottom margin", 0, 100);
D
Dave Airlie 已提交
1443 1444 1445 1446 1447 1448 1449 1450

	dev->mode_config.tv_mode_property =
		drm_property_create(dev, DRM_MODE_PROP_ENUM,
				    "mode", num_modes);
	for (i = 0; i < num_modes; i++)
		drm_property_add_enum(dev->mode_config.tv_mode_property, i,
				      i, modes[i]);

1451
	dev->mode_config.tv_brightness_property =
1452
		drm_property_create_range(dev, 0, "brightness", 0, 100);
1453 1454

	dev->mode_config.tv_contrast_property =
1455
		drm_property_create_range(dev, 0, "contrast", 0, 100);
1456 1457

	dev->mode_config.tv_flicker_reduction_property =
1458
		drm_property_create_range(dev, 0, "flicker reduction", 0, 100);
1459

1460
	dev->mode_config.tv_overscan_property =
1461
		drm_property_create_range(dev, 0, "overscan", 0, 100);
1462 1463

	dev->mode_config.tv_saturation_property =
1464
		drm_property_create_range(dev, 0, "saturation", 0, 100);
1465 1466

	dev->mode_config.tv_hue_property =
1467
		drm_property_create_range(dev, 0, "hue", 0, 100);
1468

D
Dave Airlie 已提交
1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487
	return 0;
}
EXPORT_SYMBOL(drm_mode_create_tv_properties);

/**
 * drm_mode_create_scaling_mode_property - create scaling mode property
 * @dev: DRM device
 *
 * Called by a driver the first time it's needed, must be attached to desired
 * connectors.
 */
int drm_mode_create_scaling_mode_property(struct drm_device *dev)
{
	struct drm_property *scaling_mode;

	if (dev->mode_config.scaling_mode_property)
		return 0;

	scaling_mode =
1488 1489
		drm_property_create_enum(dev, 0, "scaling mode",
				drm_scaling_mode_enum_list,
D
Dave Airlie 已提交
1490 1491 1492 1493 1494 1495 1496 1497
				    ARRAY_SIZE(drm_scaling_mode_enum_list));

	dev->mode_config.scaling_mode_property = scaling_mode;

	return 0;
}
EXPORT_SYMBOL(drm_mode_create_scaling_mode_property);

1498 1499 1500 1501 1502 1503 1504 1505
/**
 * drm_mode_create_aspect_ratio_property - create aspect ratio property
 * @dev: DRM device
 *
 * Called by a driver the first time it's needed, must be attached to desired
 * connectors.
 *
 * Returns:
D
Daniel Vetter 已提交
1506
 * Zero on success, negative errno on failure.
1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524
 */
int drm_mode_create_aspect_ratio_property(struct drm_device *dev)
{
	if (dev->mode_config.aspect_ratio_property)
		return 0;

	dev->mode_config.aspect_ratio_property =
		drm_property_create_enum(dev, 0, "aspect ratio",
				drm_aspect_ratio_enum_list,
				ARRAY_SIZE(drm_aspect_ratio_enum_list));

	if (dev->mode_config.aspect_ratio_property == NULL)
		return -ENOMEM;

	return 0;
}
EXPORT_SYMBOL(drm_mode_create_aspect_ratio_property);

1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539
/**
 * drm_mode_create_dirty_property - create dirty property
 * @dev: DRM device
 *
 * Called by a driver the first time it's needed, must be attached to desired
 * connectors.
 */
int drm_mode_create_dirty_info_property(struct drm_device *dev)
{
	struct drm_property *dirty_info;

	if (dev->mode_config.dirty_info_property)
		return 0;

	dirty_info =
1540
		drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1541
				    "dirty",
1542
				    drm_dirty_info_enum_list,
1543 1544 1545 1546 1547 1548 1549
				    ARRAY_SIZE(drm_dirty_info_enum_list));
	dev->mode_config.dirty_info_property = dirty_info;

	return 0;
}
EXPORT_SYMBOL(drm_mode_create_dirty_info_property);

1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573
/**
 * drm_mode_create_suggested_offset_properties - create suggests offset properties
 * @dev: DRM device
 *
 * Create the the suggested x/y offset property for connectors.
 */
int drm_mode_create_suggested_offset_properties(struct drm_device *dev)
{
	if (dev->mode_config.suggested_x_property && dev->mode_config.suggested_y_property)
		return 0;

	dev->mode_config.suggested_x_property =
		drm_property_create_range(dev, DRM_MODE_PROP_IMMUTABLE, "suggested X", 0, 0xffffffff);

	dev->mode_config.suggested_y_property =
		drm_property_create_range(dev, DRM_MODE_PROP_IMMUTABLE, "suggested Y", 0, 0xffffffff);

	if (dev->mode_config.suggested_x_property == NULL ||
	    dev->mode_config.suggested_y_property == NULL)
		return -ENOMEM;
	return 0;
}
EXPORT_SYMBOL(drm_mode_create_suggested_offset_properties);

1574
static int drm_mode_group_init(struct drm_device *dev, struct drm_mode_group *group)
D
Dave Airlie 已提交
1575 1576 1577 1578 1579 1580
{
	uint32_t total_objects = 0;

	total_objects += dev->mode_config.num_crtc;
	total_objects += dev->mode_config.num_connector;
	total_objects += dev->mode_config.num_encoder;
S
Sean Paul 已提交
1581
	total_objects += dev->mode_config.num_bridge;
D
Dave Airlie 已提交
1582 1583 1584 1585 1586 1587 1588 1589

	group->id_list = kzalloc(total_objects * sizeof(uint32_t), GFP_KERNEL);
	if (!group->id_list)
		return -ENOMEM;

	group->num_crtcs = 0;
	group->num_connectors = 0;
	group->num_encoders = 0;
S
Sean Paul 已提交
1590
	group->num_bridges = 0;
D
Dave Airlie 已提交
1591 1592 1593
	return 0;
}

1594 1595 1596 1597 1598 1599
void drm_mode_group_destroy(struct drm_mode_group *group)
{
	kfree(group->id_list);
	group->id_list = NULL;
}

1600 1601 1602 1603
/*
 * NOTE: Driver's shouldn't ever call drm_mode_group_init_legacy_group - it is
 * the drm core's responsibility to set up mode control groups.
 */
D
Dave Airlie 已提交
1604 1605 1606 1607 1608 1609
int drm_mode_group_init_legacy_group(struct drm_device *dev,
				     struct drm_mode_group *group)
{
	struct drm_crtc *crtc;
	struct drm_encoder *encoder;
	struct drm_connector *connector;
S
Sean Paul 已提交
1610
	struct drm_bridge *bridge;
D
Dave Airlie 已提交
1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626
	int ret;

	if ((ret = drm_mode_group_init(dev, group)))
		return ret;

	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
		group->id_list[group->num_crtcs++] = crtc->base.id;

	list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
		group->id_list[group->num_crtcs + group->num_encoders++] =
		encoder->base.id;

	list_for_each_entry(connector, &dev->mode_config.connector_list, head)
		group->id_list[group->num_crtcs + group->num_encoders +
			       group->num_connectors++] = connector->base.id;

S
Sean Paul 已提交
1627 1628 1629 1630 1631
	list_for_each_entry(bridge, &dev->mode_config.bridge_list, head)
		group->id_list[group->num_crtcs + group->num_encoders +
			       group->num_connectors + group->num_bridges++] =
					bridge->base.id;

D
Dave Airlie 已提交
1632 1633
	return 0;
}
1634
EXPORT_SYMBOL(drm_mode_group_init_legacy_group);
D
Dave Airlie 已提交
1635

1636 1637 1638 1639 1640 1641 1642 1643 1644
void drm_reinit_primary_mode_group(struct drm_device *dev)
{
	drm_modeset_lock_all(dev);
	drm_mode_group_destroy(&dev->primary->mode_group);
	drm_mode_group_init_legacy_group(dev, &dev->primary->mode_group);
	drm_modeset_unlock_all(dev);
}
EXPORT_SYMBOL(drm_reinit_primary_mode_group);

D
Dave Airlie 已提交
1645 1646 1647 1648 1649 1650 1651 1652
/**
 * drm_crtc_convert_to_umode - convert a drm_display_mode into a modeinfo
 * @out: drm_mode_modeinfo struct to return to the user
 * @in: drm_display_mode to use
 *
 * Convert a drm_display_mode into a drm_mode_modeinfo structure to return to
 * the user.
 */
1653 1654
static void drm_crtc_convert_to_umode(struct drm_mode_modeinfo *out,
				      const struct drm_display_mode *in)
D
Dave Airlie 已提交
1655
{
1656 1657 1658 1659 1660 1661 1662
	WARN(in->hdisplay > USHRT_MAX || in->hsync_start > USHRT_MAX ||
	     in->hsync_end > USHRT_MAX || in->htotal > USHRT_MAX ||
	     in->hskew > USHRT_MAX || in->vdisplay > USHRT_MAX ||
	     in->vsync_start > USHRT_MAX || in->vsync_end > USHRT_MAX ||
	     in->vtotal > USHRT_MAX || in->vscan > USHRT_MAX,
	     "timing values too large for mode info\n");

D
Dave Airlie 已提交
1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681
	out->clock = in->clock;
	out->hdisplay = in->hdisplay;
	out->hsync_start = in->hsync_start;
	out->hsync_end = in->hsync_end;
	out->htotal = in->htotal;
	out->hskew = in->hskew;
	out->vdisplay = in->vdisplay;
	out->vsync_start = in->vsync_start;
	out->vsync_end = in->vsync_end;
	out->vtotal = in->vtotal;
	out->vscan = in->vscan;
	out->vrefresh = in->vrefresh;
	out->flags = in->flags;
	out->type = in->type;
	strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
	out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
}

/**
M
Marc-André Lureau 已提交
1682
 * drm_crtc_convert_umode - convert a modeinfo into a drm_display_mode
D
Dave Airlie 已提交
1683 1684 1685 1686 1687
 * @out: drm_display_mode to return to the user
 * @in: drm_mode_modeinfo to use
 *
 * Convert a drm_mode_modeinfo into a drm_display_mode structure to return to
 * the caller.
1688
 *
1689
 * Returns:
D
Daniel Vetter 已提交
1690
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
1691
 */
1692 1693
static int drm_crtc_convert_umode(struct drm_display_mode *out,
				  const struct drm_mode_modeinfo *in)
D
Dave Airlie 已提交
1694
{
1695 1696 1697
	if (in->clock > INT_MAX || in->vrefresh > INT_MAX)
		return -ERANGE;

1698 1699 1700
	if ((in->flags & DRM_MODE_FLAG_3D_MASK) > DRM_MODE_FLAG_3D_MAX)
		return -EINVAL;

D
Dave Airlie 已提交
1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716
	out->clock = in->clock;
	out->hdisplay = in->hdisplay;
	out->hsync_start = in->hsync_start;
	out->hsync_end = in->hsync_end;
	out->htotal = in->htotal;
	out->hskew = in->hskew;
	out->vdisplay = in->vdisplay;
	out->vsync_start = in->vsync_start;
	out->vsync_end = in->vsync_end;
	out->vtotal = in->vtotal;
	out->vscan = in->vscan;
	out->vrefresh = in->vrefresh;
	out->flags = in->flags;
	out->type = in->type;
	strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
	out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1717 1718

	return 0;
D
Dave Airlie 已提交
1719 1720 1721 1722
}

/**
 * drm_mode_getresources - get graphics configuration
1723 1724 1725
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
D
Dave Airlie 已提交
1726 1727 1728 1729 1730 1731
 *
 * Construct a set of configuration description structures and return
 * them to the user, including CRTC, connector and framebuffer configuration.
 *
 * Called by the user via ioctl.
 *
1732
 * Returns:
D
Daniel Vetter 已提交
1733
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755
 */
int drm_mode_getresources(struct drm_device *dev, void *data,
			  struct drm_file *file_priv)
{
	struct drm_mode_card_res *card_res = data;
	struct list_head *lh;
	struct drm_framebuffer *fb;
	struct drm_connector *connector;
	struct drm_crtc *crtc;
	struct drm_encoder *encoder;
	int ret = 0;
	int connector_count = 0;
	int crtc_count = 0;
	int fb_count = 0;
	int encoder_count = 0;
	int copied = 0, i;
	uint32_t __user *fb_id;
	uint32_t __user *crtc_id;
	uint32_t __user *connector_id;
	uint32_t __user *encoder_id;
	struct drm_mode_group *mode_group;

1756 1757 1758
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

D
Dave Airlie 已提交
1759

1760
	mutex_lock(&file_priv->fbs_lock);
D
Dave Airlie 已提交
1761 1762 1763 1764 1765 1766 1767
	/*
	 * For the non-control nodes we need to limit the list of resources
	 * by IDs in the group list for this node
	 */
	list_for_each(lh, &file_priv->fbs)
		fb_count++;

1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783
	/* handle this in 4 parts */
	/* FBs */
	if (card_res->count_fbs >= fb_count) {
		copied = 0;
		fb_id = (uint32_t __user *)(unsigned long)card_res->fb_id_ptr;
		list_for_each_entry(fb, &file_priv->fbs, filp_head) {
			if (put_user(fb->base.id, fb_id + copied)) {
				mutex_unlock(&file_priv->fbs_lock);
				return -EFAULT;
			}
			copied++;
		}
	}
	card_res->count_fbs = fb_count;
	mutex_unlock(&file_priv->fbs_lock);

1784 1785 1786
	/* mode_config.mutex protects the connector list against e.g. DP MST
	 * connector hot-adding. CRTC/Plane lists are invariant. */
	mutex_lock(&dev->mode_config.mutex);
1787
	if (!drm_is_primary_client(file_priv)) {
D
Dave Airlie 已提交
1788

1789
		mode_group = NULL;
D
Dave Airlie 已提交
1790 1791 1792 1793 1794 1795 1796 1797 1798 1799
		list_for_each(lh, &dev->mode_config.crtc_list)
			crtc_count++;

		list_for_each(lh, &dev->mode_config.connector_list)
			connector_count++;

		list_for_each(lh, &dev->mode_config.encoder_list)
			encoder_count++;
	} else {

1800
		mode_group = &file_priv->master->minor->mode_group;
D
Dave Airlie 已提交
1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811 1812 1813 1814
		crtc_count = mode_group->num_crtcs;
		connector_count = mode_group->num_connectors;
		encoder_count = mode_group->num_encoders;
	}

	card_res->max_height = dev->mode_config.max_height;
	card_res->min_height = dev->mode_config.min_height;
	card_res->max_width = dev->mode_config.max_width;
	card_res->min_width = dev->mode_config.min_width;

	/* CRTCs */
	if (card_res->count_crtcs >= crtc_count) {
		copied = 0;
		crtc_id = (uint32_t __user *)(unsigned long)card_res->crtc_id_ptr;
1815
		if (!mode_group) {
D
Dave Airlie 已提交
1816 1817
			list_for_each_entry(crtc, &dev->mode_config.crtc_list,
					    head) {
1818
				DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
D
Dave Airlie 已提交
1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841
				if (put_user(crtc->base.id, crtc_id + copied)) {
					ret = -EFAULT;
					goto out;
				}
				copied++;
			}
		} else {
			for (i = 0; i < mode_group->num_crtcs; i++) {
				if (put_user(mode_group->id_list[i],
					     crtc_id + copied)) {
					ret = -EFAULT;
					goto out;
				}
				copied++;
			}
		}
	}
	card_res->count_crtcs = crtc_count;

	/* Encoders */
	if (card_res->count_encoders >= encoder_count) {
		copied = 0;
		encoder_id = (uint32_t __user *)(unsigned long)card_res->encoder_id_ptr;
1842
		if (!mode_group) {
D
Dave Airlie 已提交
1843 1844 1845
			list_for_each_entry(encoder,
					    &dev->mode_config.encoder_list,
					    head) {
1846
				DRM_DEBUG_KMS("[ENCODER:%d:%s]\n", encoder->base.id,
1847
						encoder->name);
D
Dave Airlie 已提交
1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872
				if (put_user(encoder->base.id, encoder_id +
					     copied)) {
					ret = -EFAULT;
					goto out;
				}
				copied++;
			}
		} else {
			for (i = mode_group->num_crtcs; i < mode_group->num_crtcs + mode_group->num_encoders; i++) {
				if (put_user(mode_group->id_list[i],
					     encoder_id + copied)) {
					ret = -EFAULT;
					goto out;
				}
				copied++;
			}

		}
	}
	card_res->count_encoders = encoder_count;

	/* Connectors */
	if (card_res->count_connectors >= connector_count) {
		copied = 0;
		connector_id = (uint32_t __user *)(unsigned long)card_res->connector_id_ptr;
1873
		if (!mode_group) {
D
Dave Airlie 已提交
1874 1875 1876
			list_for_each_entry(connector,
					    &dev->mode_config.connector_list,
					    head) {
1877 1878
				DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
					connector->base.id,
1879
					connector->name);
D
Dave Airlie 已提交
1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901
				if (put_user(connector->base.id,
					     connector_id + copied)) {
					ret = -EFAULT;
					goto out;
				}
				copied++;
			}
		} else {
			int start = mode_group->num_crtcs +
				mode_group->num_encoders;
			for (i = start; i < start + mode_group->num_connectors; i++) {
				if (put_user(mode_group->id_list[i],
					     connector_id + copied)) {
					ret = -EFAULT;
					goto out;
				}
				copied++;
			}
		}
	}
	card_res->count_connectors = connector_count;

1902
	DRM_DEBUG_KMS("CRTC[%d] CONNECTORS[%d] ENCODERS[%d]\n", card_res->count_crtcs,
D
Dave Airlie 已提交
1903 1904 1905
		  card_res->count_connectors, card_res->count_encoders);

out:
1906
	mutex_unlock(&dev->mode_config.mutex);
D
Dave Airlie 已提交
1907 1908 1909 1910 1911
	return ret;
}

/**
 * drm_mode_getcrtc - get CRTC configuration
1912 1913 1914
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
D
Dave Airlie 已提交
1915 1916 1917 1918 1919
 *
 * Construct a CRTC configuration structure to return to the user.
 *
 * Called by the user via ioctl.
 *
1920
 * Returns:
D
Daniel Vetter 已提交
1921
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
1922 1923 1924 1925 1926 1927 1928
 */
int drm_mode_getcrtc(struct drm_device *dev,
		     void *data, struct drm_file *file_priv)
{
	struct drm_mode_crtc *crtc_resp = data;
	struct drm_crtc *crtc;

1929 1930 1931
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

R
Rob Clark 已提交
1932
	crtc = drm_crtc_find(dev, crtc_resp->crtc_id);
1933 1934
	if (!crtc)
		return -ENOENT;
D
Dave Airlie 已提交
1935

1936
	drm_modeset_lock_crtc(crtc, crtc->primary);
D
Dave Airlie 已提交
1937 1938 1939
	crtc_resp->x = crtc->x;
	crtc_resp->y = crtc->y;
	crtc_resp->gamma_size = crtc->gamma_size;
1940 1941
	if (crtc->primary->fb)
		crtc_resp->fb_id = crtc->primary->fb->base.id;
D
Dave Airlie 已提交
1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952
	else
		crtc_resp->fb_id = 0;

	if (crtc->enabled) {

		drm_crtc_convert_to_umode(&crtc_resp->mode, &crtc->mode);
		crtc_resp->mode_valid = 1;

	} else {
		crtc_resp->mode_valid = 0;
	}
1953
	drm_modeset_unlock_crtc(crtc);
D
Dave Airlie 已提交
1954

1955
	return 0;
D
Dave Airlie 已提交
1956 1957
}

1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970
static bool drm_mode_expose_to_userspace(const struct drm_display_mode *mode,
					 const struct drm_file *file_priv)
{
	/*
	 * If user-space hasn't configured the driver to expose the stereo 3D
	 * modes, don't expose them.
	 */
	if (!file_priv->stereo_allowed && drm_mode_is_stereo(mode))
		return false;

	return true;
}

1971 1972 1973 1974 1975 1976 1977 1978 1979
static struct drm_encoder *drm_connector_get_encoder(struct drm_connector *connector)
{
	/* For atomic drivers only state objects are synchronously updated and
	 * protected by modeset locks, so check those first. */
	if (connector->state)
		return connector->state->best_encoder;
	return connector->encoder;
}

D
Dave Airlie 已提交
1980 1981
/**
 * drm_mode_getconnector - get connector configuration
1982 1983 1984
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
D
Dave Airlie 已提交
1985 1986 1987 1988 1989
 *
 * Construct a connector configuration structure to return to the user.
 *
 * Called by the user via ioctl.
 *
1990
 * Returns:
D
Daniel Vetter 已提交
1991
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
1992 1993 1994 1995 1996 1997
 */
int drm_mode_getconnector(struct drm_device *dev, void *data,
			  struct drm_file *file_priv)
{
	struct drm_mode_get_connector *out_resp = data;
	struct drm_connector *connector;
1998
	struct drm_encoder *encoder;
D
Dave Airlie 已提交
1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011
	struct drm_display_mode *mode;
	int mode_count = 0;
	int props_count = 0;
	int encoders_count = 0;
	int ret = 0;
	int copied = 0;
	int i;
	struct drm_mode_modeinfo u_mode;
	struct drm_mode_modeinfo __user *mode_ptr;
	uint32_t __user *prop_ptr;
	uint64_t __user *prop_values;
	uint32_t __user *encoder_ptr;

2012 2013 2014
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

D
Dave Airlie 已提交
2015 2016
	memset(&u_mode, 0, sizeof(struct drm_mode_modeinfo));

2017
	DRM_DEBUG_KMS("[CONNECTOR:%d:?]\n", out_resp->connector_id);
D
Dave Airlie 已提交
2018

2019
	mutex_lock(&dev->mode_config.mutex);
D
Dave Airlie 已提交
2020

R
Rob Clark 已提交
2021 2022
	connector = drm_connector_find(dev, out_resp->connector_id);
	if (!connector) {
2023
		ret = -ENOENT;
D
Dave Airlie 已提交
2024 2025 2026
		goto out;
	}

2027
	props_count = connector->properties.count;
D
Dave Airlie 已提交
2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042

	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
		if (connector->encoder_ids[i] != 0) {
			encoders_count++;
		}
	}

	if (out_resp->count_modes == 0) {
		connector->funcs->fill_modes(connector,
					     dev->mode_config.max_width,
					     dev->mode_config.max_height);
	}

	/* delayed so we get modes regardless of pre-fill_modes state */
	list_for_each_entry(mode, &connector->modes, head)
2043 2044
		if (drm_mode_expose_to_userspace(mode, file_priv))
			mode_count++;
D
Dave Airlie 已提交
2045 2046 2047 2048 2049 2050 2051 2052

	out_resp->connector_id = connector->base.id;
	out_resp->connector_type = connector->connector_type;
	out_resp->connector_type_id = connector->connector_type_id;
	out_resp->mm_width = connector->display_info.width_mm;
	out_resp->mm_height = connector->display_info.height_mm;
	out_resp->subpixel = connector->display_info.subpixel_order;
	out_resp->connection = connector->status;
2053
	drm_modeset_lock(&dev->mode_config.connection_mutex, NULL);
2054 2055 2056 2057

	encoder = drm_connector_get_encoder(connector);
	if (encoder)
		out_resp->encoder_id = encoder->base.id;
D
Dave Airlie 已提交
2058 2059
	else
		out_resp->encoder_id = 0;
2060
	drm_modeset_unlock(&dev->mode_config.connection_mutex);
D
Dave Airlie 已提交
2061 2062 2063 2064 2065 2066 2067

	/*
	 * This ioctl is called twice, once to determine how much space is
	 * needed, and the 2nd time to fill it.
	 */
	if ((out_resp->count_modes >= mode_count) && mode_count) {
		copied = 0;
V
Ville Syrjälä 已提交
2068
		mode_ptr = (struct drm_mode_modeinfo __user *)(unsigned long)out_resp->modes_ptr;
D
Dave Airlie 已提交
2069
		list_for_each_entry(mode, &connector->modes, head) {
2070 2071 2072
			if (!drm_mode_expose_to_userspace(mode, file_priv))
				continue;

D
Dave Airlie 已提交
2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085
			drm_crtc_convert_to_umode(&u_mode, mode);
			if (copy_to_user(mode_ptr + copied,
					 &u_mode, sizeof(u_mode))) {
				ret = -EFAULT;
				goto out;
			}
			copied++;
		}
	}
	out_resp->count_modes = mode_count;

	if ((out_resp->count_props >= props_count) && props_count) {
		copied = 0;
V
Ville Syrjälä 已提交
2086 2087
		prop_ptr = (uint32_t __user *)(unsigned long)(out_resp->props_ptr);
		prop_values = (uint64_t __user *)(unsigned long)(out_resp->prop_values_ptr);
2088 2089 2090 2091 2092 2093
		for (i = 0; i < connector->properties.count; i++) {
			if (put_user(connector->properties.ids[i],
				     prop_ptr + copied)) {
				ret = -EFAULT;
				goto out;
			}
D
Dave Airlie 已提交
2094

2095 2096 2097 2098
			if (put_user(connector->properties.values[i],
				     prop_values + copied)) {
				ret = -EFAULT;
				goto out;
D
Dave Airlie 已提交
2099
			}
2100
			copied++;
D
Dave Airlie 已提交
2101 2102 2103 2104 2105 2106
		}
	}
	out_resp->count_props = props_count;

	if ((out_resp->count_encoders >= encoders_count) && encoders_count) {
		copied = 0;
V
Ville Syrjälä 已提交
2107
		encoder_ptr = (uint32_t __user *)(unsigned long)(out_resp->encoders_ptr);
D
Dave Airlie 已提交
2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121
		for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
			if (connector->encoder_ids[i] != 0) {
				if (put_user(connector->encoder_ids[i],
					     encoder_ptr + copied)) {
					ret = -EFAULT;
					goto out;
				}
				copied++;
			}
		}
	}
	out_resp->count_encoders = encoders_count;

out:
2122 2123
	mutex_unlock(&dev->mode_config.mutex);

D
Dave Airlie 已提交
2124 2125 2126
	return ret;
}

2127 2128 2129 2130 2131 2132 2133 2134 2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153
static struct drm_crtc *drm_encoder_get_crtc(struct drm_encoder *encoder)
{
	struct drm_connector *connector;
	struct drm_device *dev = encoder->dev;
	bool uses_atomic = false;

	/* For atomic drivers only state objects are synchronously updated and
	 * protected by modeset locks, so check those first. */
	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
		if (!connector->state)
			continue;

		uses_atomic = true;

		if (connector->state->best_encoder != encoder)
			continue;

		return connector->state->crtc;
	}

	/* Don't return stale data (e.g. pending async disable). */
	if (uses_atomic)
		return NULL;

	return encoder->crtc;
}

2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164
/**
 * drm_mode_getencoder - get encoder configuration
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
 *
 * Construct a encoder configuration structure to return to the user.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
2165
 * Zero on success, negative errno on failure.
2166
 */
D
Dave Airlie 已提交
2167 2168 2169 2170 2171
int drm_mode_getencoder(struct drm_device *dev, void *data,
			struct drm_file *file_priv)
{
	struct drm_mode_get_encoder *enc_resp = data;
	struct drm_encoder *encoder;
2172
	struct drm_crtc *crtc;
D
Dave Airlie 已提交
2173

2174 2175 2176
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

R
Rob Clark 已提交
2177
	encoder = drm_encoder_find(dev, enc_resp->encoder_id);
2178 2179
	if (!encoder)
		return -ENOENT;
D
Dave Airlie 已提交
2180

2181
	drm_modeset_lock(&dev->mode_config.connection_mutex, NULL);
2182 2183 2184 2185
	crtc = drm_encoder_get_crtc(encoder);
	if (crtc)
		enc_resp->crtc_id = crtc->base.id;
	else if (encoder->crtc)
D
Dave Airlie 已提交
2186 2187 2188
		enc_resp->crtc_id = encoder->crtc->base.id;
	else
		enc_resp->crtc_id = 0;
2189 2190
	drm_modeset_unlock(&dev->mode_config.connection_mutex);

D
Dave Airlie 已提交
2191 2192 2193 2194 2195
	enc_resp->encoder_type = encoder->encoder_type;
	enc_resp->encoder_id = encoder->base.id;
	enc_resp->possible_crtcs = encoder->possible_crtcs;
	enc_resp->possible_clones = encoder->possible_clones;

2196
	return 0;
D
Dave Airlie 已提交
2197 2198
}

J
Jesse Barnes 已提交
2199
/**
2200
 * drm_mode_getplane_res - enumerate all plane resources
J
Jesse Barnes 已提交
2201 2202 2203 2204
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
2205 2206 2207 2208 2209
 * Construct a list of plane ids to return to the user.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
2210
 * Zero on success, negative errno on failure.
J
Jesse Barnes 已提交
2211 2212
 */
int drm_mode_getplane_res(struct drm_device *dev, void *data,
2213
			  struct drm_file *file_priv)
J
Jesse Barnes 已提交
2214 2215 2216 2217 2218
{
	struct drm_mode_get_plane_res *plane_resp = data;
	struct drm_mode_config *config;
	struct drm_plane *plane;
	uint32_t __user *plane_ptr;
2219
	int copied = 0;
2220
	unsigned num_planes;
J
Jesse Barnes 已提交
2221 2222 2223 2224 2225 2226

	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

	config = &dev->mode_config;

2227 2228 2229 2230 2231
	if (file_priv->universal_planes)
		num_planes = config->num_total_plane;
	else
		num_planes = config->num_overlay_plane;

J
Jesse Barnes 已提交
2232 2233 2234 2235
	/*
	 * This ioctl is called twice, once to determine how much space is
	 * needed, and the 2nd time to fill it.
	 */
2236 2237
	if (num_planes &&
	    (plane_resp->count_planes >= num_planes)) {
V
Ville Syrjälä 已提交
2238
		plane_ptr = (uint32_t __user *)(unsigned long)plane_resp->plane_id_ptr;
J
Jesse Barnes 已提交
2239

2240
		/* Plane lists are invariant, no locking needed. */
J
Jesse Barnes 已提交
2241
		list_for_each_entry(plane, &config->plane_list, head) {
2242 2243 2244 2245 2246 2247
			/*
			 * Unless userspace set the 'universal planes'
			 * capability bit, only advertise overlays.
			 */
			if (plane->type != DRM_PLANE_TYPE_OVERLAY &&
			    !file_priv->universal_planes)
2248 2249
				continue;

2250 2251
			if (put_user(plane->base.id, plane_ptr + copied))
				return -EFAULT;
J
Jesse Barnes 已提交
2252 2253 2254
			copied++;
		}
	}
2255
	plane_resp->count_planes = num_planes;
J
Jesse Barnes 已提交
2256

2257
	return 0;
J
Jesse Barnes 已提交
2258 2259 2260
}

/**
2261
 * drm_mode_getplane - get plane configuration
J
Jesse Barnes 已提交
2262 2263 2264 2265
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
2266 2267 2268 2269 2270
 * Construct a plane configuration structure to return to the user.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
2271
 * Zero on success, negative errno on failure.
J
Jesse Barnes 已提交
2272 2273
 */
int drm_mode_getplane(struct drm_device *dev, void *data,
2274
		      struct drm_file *file_priv)
J
Jesse Barnes 已提交
2275 2276 2277 2278 2279 2280 2281 2282
{
	struct drm_mode_get_plane *plane_resp = data;
	struct drm_plane *plane;
	uint32_t __user *format_ptr;

	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

R
Rob Clark 已提交
2283
	plane = drm_plane_find(dev, plane_resp->plane_id);
2284 2285
	if (!plane)
		return -ENOENT;
J
Jesse Barnes 已提交
2286

2287
	drm_modeset_lock(&plane->mutex, NULL);
J
Jesse Barnes 已提交
2288 2289 2290 2291 2292 2293 2294 2295 2296
	if (plane->crtc)
		plane_resp->crtc_id = plane->crtc->base.id;
	else
		plane_resp->crtc_id = 0;

	if (plane->fb)
		plane_resp->fb_id = plane->fb->base.id;
	else
		plane_resp->fb_id = 0;
2297
	drm_modeset_unlock(&plane->mutex);
J
Jesse Barnes 已提交
2298 2299 2300

	plane_resp->plane_id = plane->base.id;
	plane_resp->possible_crtcs = plane->possible_crtcs;
2301
	plane_resp->gamma_size = 0;
J
Jesse Barnes 已提交
2302 2303 2304 2305 2306 2307 2308

	/*
	 * This ioctl is called twice, once to determine how much space is
	 * needed, and the 2nd time to fill it.
	 */
	if (plane->format_count &&
	    (plane_resp->count_format_types >= plane->format_count)) {
V
Ville Syrjälä 已提交
2309
		format_ptr = (uint32_t __user *)(unsigned long)plane_resp->format_type_ptr;
J
Jesse Barnes 已提交
2310 2311 2312
		if (copy_to_user(format_ptr,
				 plane->format_types,
				 sizeof(uint32_t) * plane->format_count)) {
2313
			return -EFAULT;
J
Jesse Barnes 已提交
2314 2315 2316 2317
		}
	}
	plane_resp->count_format_types = plane->format_count;

2318
	return 0;
J
Jesse Barnes 已提交
2319 2320
}

2321 2322
/*
 * setplane_internal - setplane handler for internal callers
J
Jesse Barnes 已提交
2323
 *
2324 2325 2326
 * Note that we assume an extra reference has already been taken on fb.  If the
 * update fails, this reference will be dropped before return; if it succeeds,
 * the previous framebuffer (if any) will be unreferenced instead.
2327
 *
2328
 * src_{x,y,w,h} are provided in 16.16 fixed point format
J
Jesse Barnes 已提交
2329
 */
2330 2331 2332 2333 2334 2335 2336 2337
static int __setplane_internal(struct drm_plane *plane,
			       struct drm_crtc *crtc,
			       struct drm_framebuffer *fb,
			       int32_t crtc_x, int32_t crtc_y,
			       uint32_t crtc_w, uint32_t crtc_h,
			       /* src_{x,y,w,h} values are 16.16 fixed point */
			       uint32_t src_x, uint32_t src_y,
			       uint32_t src_w, uint32_t src_h)
J
Jesse Barnes 已提交
2338 2339
{
	int ret = 0;
2340
	unsigned int fb_width, fb_height;
2341
	unsigned int i;
J
Jesse Barnes 已提交
2342 2343

	/* No fb means shut it down */
2344
	if (!fb) {
2345
		plane->old_fb = plane->fb;
2346 2347 2348 2349 2350
		ret = plane->funcs->disable_plane(plane);
		if (!ret) {
			plane->crtc = NULL;
			plane->fb = NULL;
		} else {
2351
			plane->old_fb = NULL;
2352
		}
J
Jesse Barnes 已提交
2353 2354 2355
		goto out;
	}

2356 2357 2358 2359 2360 2361 2362
	/* Check whether this plane is usable on this CRTC */
	if (!(plane->possible_crtcs & drm_crtc_mask(crtc))) {
		DRM_DEBUG_KMS("Invalid crtc for plane\n");
		ret = -EINVAL;
		goto out;
	}

2363 2364 2365 2366 2367
	/* Check whether this plane supports the fb pixel format. */
	for (i = 0; i < plane->format_count; i++)
		if (fb->pixel_format == plane->format_types[i])
			break;
	if (i == plane->format_count) {
2368 2369
		DRM_DEBUG_KMS("Invalid pixel format %s\n",
			      drm_get_format_name(fb->pixel_format));
2370 2371 2372 2373
		ret = -EINVAL;
		goto out;
	}

2374 2375 2376 2377
	fb_width = fb->width << 16;
	fb_height = fb->height << 16;

	/* Make sure source coordinates are inside the fb. */
2378 2379 2380 2381
	if (src_w > fb_width ||
	    src_x > fb_width - src_w ||
	    src_h > fb_height ||
	    src_y > fb_height - src_h) {
2382 2383
		DRM_DEBUG_KMS("Invalid source coordinates "
			      "%u.%06ux%u.%06u+%u.%06u+%u.%06u\n",
2384 2385 2386 2387
			      src_w >> 16, ((src_w & 0xffff) * 15625) >> 10,
			      src_h >> 16, ((src_h & 0xffff) * 15625) >> 10,
			      src_x >> 16, ((src_x & 0xffff) * 15625) >> 10,
			      src_y >> 16, ((src_y & 0xffff) * 15625) >> 10);
2388 2389 2390 2391
		ret = -ENOSPC;
		goto out;
	}

2392
	plane->old_fb = plane->fb;
J
Jesse Barnes 已提交
2393
	ret = plane->funcs->update_plane(plane, crtc, fb,
2394 2395
					 crtc_x, crtc_y, crtc_w, crtc_h,
					 src_x, src_y, src_w, src_h);
J
Jesse Barnes 已提交
2396 2397 2398
	if (!ret) {
		plane->crtc = crtc;
		plane->fb = fb;
2399
		fb = NULL;
2400
	} else {
2401
		plane->old_fb = NULL;
J
Jesse Barnes 已提交
2402 2403 2404
	}

out:
2405 2406
	if (fb)
		drm_framebuffer_unreference(fb);
2407 2408 2409
	if (plane->old_fb)
		drm_framebuffer_unreference(plane->old_fb);
	plane->old_fb = NULL;
J
Jesse Barnes 已提交
2410 2411

	return ret;
2412
}
2413

2414 2415 2416 2417 2418 2419 2420 2421 2422 2423 2424 2425 2426 2427 2428 2429 2430 2431
static int setplane_internal(struct drm_plane *plane,
			     struct drm_crtc *crtc,
			     struct drm_framebuffer *fb,
			     int32_t crtc_x, int32_t crtc_y,
			     uint32_t crtc_w, uint32_t crtc_h,
			     /* src_{x,y,w,h} values are 16.16 fixed point */
			     uint32_t src_x, uint32_t src_y,
			     uint32_t src_w, uint32_t src_h)
{
	int ret;

	drm_modeset_lock_all(plane->dev);
	ret = __setplane_internal(plane, crtc, fb,
				  crtc_x, crtc_y, crtc_w, crtc_h,
				  src_x, src_y, src_w, src_h);
	drm_modeset_unlock_all(plane->dev);

	return ret;
2432 2433 2434 2435 2436 2437 2438 2439 2440 2441 2442 2443 2444
}

/**
 * drm_mode_setplane - configure a plane's configuration
 * @dev: DRM device
 * @data: ioctl data*
 * @file_priv: DRM file info
 *
 * Set plane configuration, including placement, fb, scaling, and other factors.
 * Or pass a NULL fb to disable (planes may be disabled without providing a
 * valid crtc).
 *
 * Returns:
D
Daniel Vetter 已提交
2445
 * Zero on success, negative errno on failure.
2446 2447 2448 2449 2450 2451 2452 2453 2454 2455 2456 2457 2458 2459 2460 2461 2462 2463 2464 2465 2466 2467 2468 2469 2470 2471 2472
 */
int drm_mode_setplane(struct drm_device *dev, void *data,
		      struct drm_file *file_priv)
{
	struct drm_mode_set_plane *plane_req = data;
	struct drm_plane *plane;
	struct drm_crtc *crtc = NULL;
	struct drm_framebuffer *fb = NULL;

	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

	/* Give drivers some help against integer overflows */
	if (plane_req->crtc_w > INT_MAX ||
	    plane_req->crtc_x > INT_MAX - (int32_t) plane_req->crtc_w ||
	    plane_req->crtc_h > INT_MAX ||
	    plane_req->crtc_y > INT_MAX - (int32_t) plane_req->crtc_h) {
		DRM_DEBUG_KMS("Invalid CRTC coordinates %ux%u+%d+%d\n",
			      plane_req->crtc_w, plane_req->crtc_h,
			      plane_req->crtc_x, plane_req->crtc_y);
		return -ERANGE;
	}

	/*
	 * First, find the plane, crtc, and fb objects.  If not available,
	 * we don't bother to call the driver.
	 */
R
Rob Clark 已提交
2473 2474
	plane = drm_plane_find(dev, plane_req->plane_id);
	if (!plane) {
2475 2476 2477 2478 2479 2480 2481 2482 2483 2484 2485 2486 2487
		DRM_DEBUG_KMS("Unknown plane ID %d\n",
			      plane_req->plane_id);
		return -ENOENT;
	}

	if (plane_req->fb_id) {
		fb = drm_framebuffer_lookup(dev, plane_req->fb_id);
		if (!fb) {
			DRM_DEBUG_KMS("Unknown framebuffer ID %d\n",
				      plane_req->fb_id);
			return -ENOENT;
		}

R
Rob Clark 已提交
2488 2489
		crtc = drm_crtc_find(dev, plane_req->crtc_id);
		if (!crtc) {
2490 2491 2492 2493 2494 2495
			DRM_DEBUG_KMS("Unknown crtc ID %d\n",
				      plane_req->crtc_id);
			return -ENOENT;
		}
	}

2496 2497 2498 2499
	/*
	 * setplane_internal will take care of deref'ing either the old or new
	 * framebuffer depending on success.
	 */
2500
	return setplane_internal(plane, crtc, fb,
2501 2502 2503 2504
				 plane_req->crtc_x, plane_req->crtc_y,
				 plane_req->crtc_w, plane_req->crtc_h,
				 plane_req->src_x, plane_req->src_y,
				 plane_req->src_w, plane_req->src_h);
J
Jesse Barnes 已提交
2505 2506
}

2507 2508 2509 2510 2511 2512
/**
 * drm_mode_set_config_internal - helper to call ->set_config
 * @set: modeset config to set
 *
 * This is a little helper to wrap internal calls to the ->set_config driver
 * interface. The only thing it adds is correct refcounting dance.
2513 2514
 * 
 * Returns:
D
Daniel Vetter 已提交
2515
 * Zero on success, negative errno on failure.
2516 2517 2518 2519
 */
int drm_mode_set_config_internal(struct drm_mode_set *set)
{
	struct drm_crtc *crtc = set->crtc;
D
Daniel Vetter 已提交
2520 2521
	struct drm_framebuffer *fb;
	struct drm_crtc *tmp;
2522 2523
	int ret;

D
Daniel Vetter 已提交
2524 2525 2526 2527 2528 2529
	/*
	 * NOTE: ->set_config can also disable other crtcs (if we steal all
	 * connectors from it), hence we need to refcount the fbs across all
	 * crtcs. Atomic modeset will have saner semantics ...
	 */
	list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head)
2530
		tmp->primary->old_fb = tmp->primary->fb;
D
Daniel Vetter 已提交
2531

2532
	fb = set->fb;
2533

2534 2535
	ret = crtc->funcs->set_config(set);
	if (ret == 0) {
2536
		crtc->primary->crtc = crtc;
2537
		crtc->primary->fb = fb;
D
Daniel Vetter 已提交
2538
	}
2539

D
Daniel Vetter 已提交
2540
	list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head) {
2541 2542
		if (tmp->primary->fb)
			drm_framebuffer_reference(tmp->primary->fb);
2543 2544 2545
		if (tmp->primary->old_fb)
			drm_framebuffer_unreference(tmp->primary->old_fb);
		tmp->primary->old_fb = NULL;
2546 2547 2548
	}

	return ret;
2549 2550 2551
}
EXPORT_SYMBOL(drm_mode_set_config_internal);

2552 2553 2554 2555 2556 2557 2558 2559
/**
 * drm_crtc_check_viewport - Checks that a framebuffer is big enough for the
 *     CRTC viewport
 * @crtc: CRTC that framebuffer will be displayed on
 * @x: x panning
 * @y: y panning
 * @mode: mode that framebuffer will be displayed under
 * @fb: framebuffer to check size of
2560
 */
2561 2562 2563 2564
int drm_crtc_check_viewport(const struct drm_crtc *crtc,
			    int x, int y,
			    const struct drm_display_mode *mode,
			    const struct drm_framebuffer *fb)
2565 2566 2567 2568 2569 2570 2571

{
	int hdisplay, vdisplay;

	hdisplay = mode->hdisplay;
	vdisplay = mode->vdisplay;

2572 2573 2574 2575 2576 2577 2578 2579
	if (drm_mode_is_stereo(mode)) {
		struct drm_display_mode adjusted = *mode;

		drm_mode_set_crtcinfo(&adjusted, CRTC_STEREO_DOUBLE);
		hdisplay = adjusted.crtc_hdisplay;
		vdisplay = adjusted.crtc_vdisplay;
	}

2580 2581 2582 2583 2584 2585 2586 2587 2588 2589 2590 2591 2592 2593 2594
	if (crtc->invert_dimensions)
		swap(hdisplay, vdisplay);

	if (hdisplay > fb->width ||
	    vdisplay > fb->height ||
	    x > fb->width - hdisplay ||
	    y > fb->height - vdisplay) {
		DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
			      fb->width, fb->height, hdisplay, vdisplay, x, y,
			      crtc->invert_dimensions ? " (inverted)" : "");
		return -ENOSPC;
	}

	return 0;
}
2595
EXPORT_SYMBOL(drm_crtc_check_viewport);
2596

D
Dave Airlie 已提交
2597 2598
/**
 * drm_mode_setcrtc - set CRTC configuration
2599 2600 2601
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
D
Dave Airlie 已提交
2602 2603 2604 2605 2606
 *
 * Build a new CRTC configuration based on user request.
 *
 * Called by the user via ioctl.
 *
2607
 * Returns:
D
Daniel Vetter 已提交
2608
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
2609 2610 2611 2612 2613 2614
 */
int drm_mode_setcrtc(struct drm_device *dev, void *data,
		     struct drm_file *file_priv)
{
	struct drm_mode_config *config = &dev->mode_config;
	struct drm_mode_crtc *crtc_req = data;
2615
	struct drm_crtc *crtc;
D
Dave Airlie 已提交
2616 2617 2618 2619 2620
	struct drm_connector **connector_set = NULL, *connector;
	struct drm_framebuffer *fb = NULL;
	struct drm_display_mode *mode = NULL;
	struct drm_mode_set set;
	uint32_t __user *set_connectors_ptr;
2621
	int ret;
D
Dave Airlie 已提交
2622 2623
	int i;

2624 2625 2626
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

2627 2628 2629 2630
	/* For some reason crtc x/y offsets are signed internally. */
	if (crtc_req->x > INT_MAX || crtc_req->y > INT_MAX)
		return -ERANGE;

2631
	drm_modeset_lock_all(dev);
R
Rob Clark 已提交
2632 2633
	crtc = drm_crtc_find(dev, crtc_req->crtc_id);
	if (!crtc) {
2634
		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id);
2635
		ret = -ENOENT;
D
Dave Airlie 已提交
2636 2637
		goto out;
	}
2638
	DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
D
Dave Airlie 已提交
2639 2640 2641 2642 2643

	if (crtc_req->mode_valid) {
		/* If we have a mode we need a framebuffer. */
		/* If we pass -1, set the mode with the currently bound fb */
		if (crtc_req->fb_id == -1) {
2644
			if (!crtc->primary->fb) {
2645 2646 2647
				DRM_DEBUG_KMS("CRTC doesn't have current FB\n");
				ret = -EINVAL;
				goto out;
D
Dave Airlie 已提交
2648
			}
2649
			fb = crtc->primary->fb;
2650 2651
			/* Make refcounting symmetric with the lookup path. */
			drm_framebuffer_reference(fb);
D
Dave Airlie 已提交
2652
		} else {
2653 2654
			fb = drm_framebuffer_lookup(dev, crtc_req->fb_id);
			if (!fb) {
2655 2656
				DRM_DEBUG_KMS("Unknown FB ID%d\n",
						crtc_req->fb_id);
2657
				ret = -ENOENT;
D
Dave Airlie 已提交
2658 2659 2660 2661 2662
				goto out;
			}
		}

		mode = drm_mode_create(dev);
2663 2664 2665 2666 2667
		if (!mode) {
			ret = -ENOMEM;
			goto out;
		}

2668 2669 2670 2671 2672 2673
		ret = drm_crtc_convert_umode(mode, &crtc_req->mode);
		if (ret) {
			DRM_DEBUG_KMS("Invalid mode\n");
			goto out;
		}

D
Dave Airlie 已提交
2674
		drm_mode_set_crtcinfo(mode, CRTC_INTERLACE_HALVE_V);
2675

2676 2677 2678
		ret = drm_crtc_check_viewport(crtc, crtc_req->x, crtc_req->y,
					      mode, fb);
		if (ret)
2679
			goto out;
2680

D
Dave Airlie 已提交
2681 2682 2683
	}

	if (crtc_req->count_connectors == 0 && mode) {
2684
		DRM_DEBUG_KMS("Count connectors is 0 but mode set\n");
D
Dave Airlie 已提交
2685 2686 2687 2688
		ret = -EINVAL;
		goto out;
	}

2689
	if (crtc_req->count_connectors > 0 && (!mode || !fb)) {
2690
		DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",
D
Dave Airlie 已提交
2691 2692 2693 2694 2695 2696 2697 2698 2699 2700 2701 2702 2703 2704 2705 2706 2707 2708 2709 2710 2711 2712 2713
			  crtc_req->count_connectors);
		ret = -EINVAL;
		goto out;
	}

	if (crtc_req->count_connectors > 0) {
		u32 out_id;

		/* Avoid unbounded kernel memory allocation */
		if (crtc_req->count_connectors > config->num_connector) {
			ret = -EINVAL;
			goto out;
		}

		connector_set = kmalloc(crtc_req->count_connectors *
					sizeof(struct drm_connector *),
					GFP_KERNEL);
		if (!connector_set) {
			ret = -ENOMEM;
			goto out;
		}

		for (i = 0; i < crtc_req->count_connectors; i++) {
V
Ville Syrjälä 已提交
2714
			set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
D
Dave Airlie 已提交
2715 2716 2717 2718 2719
			if (get_user(out_id, &set_connectors_ptr[i])) {
				ret = -EFAULT;
				goto out;
			}

R
Rob Clark 已提交
2720 2721
			connector = drm_connector_find(dev, out_id);
			if (!connector) {
2722 2723
				DRM_DEBUG_KMS("Connector id %d unknown\n",
						out_id);
2724
				ret = -ENOENT;
D
Dave Airlie 已提交
2725 2726
				goto out;
			}
2727 2728
			DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
					connector->base.id,
2729
					connector->name);
D
Dave Airlie 已提交
2730 2731 2732 2733 2734 2735 2736 2737 2738 2739 2740

			connector_set[i] = connector;
		}
	}

	set.crtc = crtc;
	set.x = crtc_req->x;
	set.y = crtc_req->y;
	set.mode = mode;
	set.connectors = connector_set;
	set.num_connectors = crtc_req->count_connectors;
2741
	set.fb = fb;
2742
	ret = drm_mode_set_config_internal(&set);
D
Dave Airlie 已提交
2743 2744

out:
2745 2746 2747
	if (fb)
		drm_framebuffer_unreference(fb);

D
Dave Airlie 已提交
2748
	kfree(connector_set);
2749
	drm_mode_destroy(dev, mode);
2750
	drm_modeset_unlock_all(dev);
D
Dave Airlie 已提交
2751 2752 2753
	return ret;
}

2754 2755 2756 2757 2758 2759 2760 2761 2762 2763 2764 2765 2766 2767 2768 2769 2770
/**
 * drm_mode_cursor_universal - translate legacy cursor ioctl call into a
 *     universal plane handler call
 * @crtc: crtc to update cursor for
 * @req: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
 *
 * Legacy cursor ioctl's work directly with driver buffer handles.  To
 * translate legacy ioctl calls into universal plane handler calls, we need to
 * wrap the native buffer handle in a drm_framebuffer.
 *
 * Note that we assume any handle passed to the legacy ioctls was a 32-bit ARGB
 * buffer with a pitch of 4*width; the universal plane interface should be used
 * directly in cases where the hardware can support other buffer settings and
 * userspace wants to make use of these capabilities.
 *
 * Returns:
D
Daniel Vetter 已提交
2771
 * Zero on success, negative errno on failure.
2772 2773 2774 2775 2776 2777 2778 2779 2780 2781 2782 2783 2784 2785 2786 2787 2788 2789 2790 2791
 */
static int drm_mode_cursor_universal(struct drm_crtc *crtc,
				     struct drm_mode_cursor2 *req,
				     struct drm_file *file_priv)
{
	struct drm_device *dev = crtc->dev;
	struct drm_framebuffer *fb = NULL;
	struct drm_mode_fb_cmd2 fbreq = {
		.width = req->width,
		.height = req->height,
		.pixel_format = DRM_FORMAT_ARGB8888,
		.pitches = { req->width * 4 },
		.handles = { req->handle },
	};
	int32_t crtc_x, crtc_y;
	uint32_t crtc_w = 0, crtc_h = 0;
	uint32_t src_w = 0, src_h = 0;
	int ret = 0;

	BUG_ON(!crtc->cursor);
2792
	WARN_ON(crtc->cursor->crtc != crtc && crtc->cursor->crtc != NULL);
2793 2794 2795 2796 2797 2798 2799 2800 2801 2802 2803 2804 2805 2806 2807 2808 2809 2810 2811 2812 2813 2814 2815 2816 2817 2818 2819 2820 2821 2822 2823 2824 2825 2826 2827 2828 2829 2830 2831 2832 2833 2834 2835

	/*
	 * Obtain fb we'll be using (either new or existing) and take an extra
	 * reference to it if fb != null.  setplane will take care of dropping
	 * the reference if the plane update fails.
	 */
	if (req->flags & DRM_MODE_CURSOR_BO) {
		if (req->handle) {
			fb = add_framebuffer_internal(dev, &fbreq, file_priv);
			if (IS_ERR(fb)) {
				DRM_DEBUG_KMS("failed to wrap cursor buffer in drm framebuffer\n");
				return PTR_ERR(fb);
			}

			drm_framebuffer_reference(fb);
		} else {
			fb = NULL;
		}
	} else {
		fb = crtc->cursor->fb;
		if (fb)
			drm_framebuffer_reference(fb);
	}

	if (req->flags & DRM_MODE_CURSOR_MOVE) {
		crtc_x = req->x;
		crtc_y = req->y;
	} else {
		crtc_x = crtc->cursor_x;
		crtc_y = crtc->cursor_y;
	}

	if (fb) {
		crtc_w = fb->width;
		crtc_h = fb->height;
		src_w = fb->width << 16;
		src_h = fb->height << 16;
	}

	/*
	 * setplane_internal will take care of deref'ing either the old or new
	 * framebuffer depending on success.
	 */
2836
	ret = __setplane_internal(crtc->cursor, crtc, fb,
2837 2838 2839 2840 2841 2842 2843 2844 2845 2846 2847 2848
				crtc_x, crtc_y, crtc_w, crtc_h,
				0, 0, src_w, src_h);

	/* Update successful; save new cursor position, if necessary */
	if (ret == 0 && req->flags & DRM_MODE_CURSOR_MOVE) {
		crtc->cursor_x = req->x;
		crtc->cursor_y = req->y;
	}

	return ret;
}

2849 2850 2851
static int drm_mode_cursor_common(struct drm_device *dev,
				  struct drm_mode_cursor2 *req,
				  struct drm_file *file_priv)
D
Dave Airlie 已提交
2852 2853 2854 2855
{
	struct drm_crtc *crtc;
	int ret = 0;

2856 2857 2858
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

2859
	if (!req->flags || (~DRM_MODE_CURSOR_FLAGS & req->flags))
D
Dave Airlie 已提交
2860 2861
		return -EINVAL;

R
Rob Clark 已提交
2862 2863
	crtc = drm_crtc_find(dev, req->crtc_id);
	if (!crtc) {
2864
		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", req->crtc_id);
2865
		return -ENOENT;
D
Dave Airlie 已提交
2866 2867
	}

2868 2869 2870 2871
	/*
	 * If this crtc has a universal cursor plane, call that plane's update
	 * handler rather than using legacy cursor handlers.
	 */
D
Daniel Vetter 已提交
2872
	drm_modeset_lock_crtc(crtc, crtc->cursor);
2873 2874 2875 2876 2877
	if (crtc->cursor) {
		ret = drm_mode_cursor_universal(crtc, req, file_priv);
		goto out;
	}

D
Dave Airlie 已提交
2878
	if (req->flags & DRM_MODE_CURSOR_BO) {
2879
		if (!crtc->funcs->cursor_set && !crtc->funcs->cursor_set2) {
D
Dave Airlie 已提交
2880 2881 2882 2883
			ret = -ENXIO;
			goto out;
		}
		/* Turns off the cursor if handle is 0 */
2884 2885 2886 2887 2888 2889
		if (crtc->funcs->cursor_set2)
			ret = crtc->funcs->cursor_set2(crtc, file_priv, req->handle,
						      req->width, req->height, req->hot_x, req->hot_y);
		else
			ret = crtc->funcs->cursor_set(crtc, file_priv, req->handle,
						      req->width, req->height);
D
Dave Airlie 已提交
2890 2891 2892 2893 2894 2895 2896 2897 2898 2899 2900
	}

	if (req->flags & DRM_MODE_CURSOR_MOVE) {
		if (crtc->funcs->cursor_move) {
			ret = crtc->funcs->cursor_move(crtc, req->x, req->y);
		} else {
			ret = -EFAULT;
			goto out;
		}
	}
out:
2901
	drm_modeset_unlock_crtc(crtc);
2902

D
Dave Airlie 已提交
2903
	return ret;
2904 2905

}
2906 2907 2908 2909 2910 2911 2912 2913 2914 2915 2916 2917 2918


/**
 * drm_mode_cursor_ioctl - set CRTC's cursor configuration
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
 *
 * Set the cursor configuration based on user request.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
2919
 * Zero on success, negative errno on failure.
2920
 */
2921
int drm_mode_cursor_ioctl(struct drm_device *dev,
2922
			  void *data, struct drm_file *file_priv)
2923 2924 2925 2926 2927 2928 2929 2930 2931 2932
{
	struct drm_mode_cursor *req = data;
	struct drm_mode_cursor2 new_req;

	memcpy(&new_req, req, sizeof(struct drm_mode_cursor));
	new_req.hot_x = new_req.hot_y = 0;

	return drm_mode_cursor_common(dev, &new_req, file_priv);
}

2933 2934 2935 2936 2937 2938 2939 2940 2941 2942 2943 2944 2945
/**
 * drm_mode_cursor2_ioctl - set CRTC's cursor configuration
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
 *
 * Set the cursor configuration based on user request. This implements the 2nd
 * version of the cursor ioctl, which allows userspace to additionally specify
 * the hotspot of the pointer.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
2946
 * Zero on success, negative errno on failure.
2947
 */
2948 2949 2950 2951 2952
int drm_mode_cursor2_ioctl(struct drm_device *dev,
			   void *data, struct drm_file *file_priv)
{
	struct drm_mode_cursor2 *req = data;
	return drm_mode_cursor_common(dev, req, file_priv);
D
Dave Airlie 已提交
2953 2954
}

2955 2956 2957 2958 2959 2960 2961 2962
/**
 * drm_mode_legacy_fb_format - compute drm fourcc code from legacy description
 * @bpp: bits per pixels
 * @depth: bit depth per pixel
 *
 * Computes a drm fourcc pixel format code for the given @bpp/@depth values.
 * Useful in fbdev emulation code, since that deals in those values.
 */
2963 2964 2965 2966 2967 2968
uint32_t drm_mode_legacy_fb_format(uint32_t bpp, uint32_t depth)
{
	uint32_t fmt;

	switch (bpp) {
	case 8:
2969
		fmt = DRM_FORMAT_C8;
2970 2971 2972
		break;
	case 16:
		if (depth == 15)
V
Ville Syrjälä 已提交
2973
			fmt = DRM_FORMAT_XRGB1555;
2974
		else
V
Ville Syrjälä 已提交
2975
			fmt = DRM_FORMAT_RGB565;
2976 2977
		break;
	case 24:
V
Ville Syrjälä 已提交
2978
		fmt = DRM_FORMAT_RGB888;
2979 2980 2981
		break;
	case 32:
		if (depth == 24)
V
Ville Syrjälä 已提交
2982
			fmt = DRM_FORMAT_XRGB8888;
2983
		else if (depth == 30)
V
Ville Syrjälä 已提交
2984
			fmt = DRM_FORMAT_XRGB2101010;
2985
		else
V
Ville Syrjälä 已提交
2986
			fmt = DRM_FORMAT_ARGB8888;
2987 2988
		break;
	default:
V
Ville Syrjälä 已提交
2989 2990
		DRM_ERROR("bad bpp, assuming x8r8g8b8 pixel format\n");
		fmt = DRM_FORMAT_XRGB8888;
2991 2992 2993 2994 2995 2996 2997
		break;
	}

	return fmt;
}
EXPORT_SYMBOL(drm_mode_legacy_fb_format);

D
Dave Airlie 已提交
2998 2999
/**
 * drm_mode_addfb - add an FB to the graphics configuration
3000 3001 3002
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
D
Dave Airlie 已提交
3003
 *
3004
 * Add a new FB to the specified CRTC, given a user request. This is the
C
Chuck Ebbert 已提交
3005
 * original addfb ioctl which only supported RGB formats.
D
Dave Airlie 已提交
3006 3007 3008
 *
 * Called by the user via ioctl.
 *
3009
 * Returns:
D
Daniel Vetter 已提交
3010
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
3011 3012 3013 3014
 */
int drm_mode_addfb(struct drm_device *dev,
		   void *data, struct drm_file *file_priv)
{
3015 3016
	struct drm_mode_fb_cmd *or = data;
	struct drm_mode_fb_cmd2 r = {};
3017
	int ret;
3018

3019
	/* convert to new format and call new ioctl */
3020 3021 3022 3023 3024 3025 3026
	r.fb_id = or->fb_id;
	r.width = or->width;
	r.height = or->height;
	r.pitches[0] = or->pitch;
	r.pixel_format = drm_mode_legacy_fb_format(or->bpp, or->depth);
	r.handles[0] = or->handle;

3027 3028 3029
	ret = drm_mode_addfb2(dev, &r, file_priv);
	if (ret)
		return ret;
3030

3031
	or->fb_id = r.fb_id;
3032

3033
	return 0;
3034 3035
}

3036
static int format_check(const struct drm_mode_fb_cmd2 *r)
3037 3038 3039 3040 3041 3042 3043 3044 3045 3046 3047 3048 3049 3050 3051 3052 3053 3054 3055 3056 3057 3058 3059 3060 3061 3062 3063 3064 3065 3066 3067 3068 3069 3070 3071 3072 3073 3074 3075 3076 3077 3078 3079 3080 3081 3082 3083 3084 3085 3086 3087 3088
{
	uint32_t format = r->pixel_format & ~DRM_FORMAT_BIG_ENDIAN;

	switch (format) {
	case DRM_FORMAT_C8:
	case DRM_FORMAT_RGB332:
	case DRM_FORMAT_BGR233:
	case DRM_FORMAT_XRGB4444:
	case DRM_FORMAT_XBGR4444:
	case DRM_FORMAT_RGBX4444:
	case DRM_FORMAT_BGRX4444:
	case DRM_FORMAT_ARGB4444:
	case DRM_FORMAT_ABGR4444:
	case DRM_FORMAT_RGBA4444:
	case DRM_FORMAT_BGRA4444:
	case DRM_FORMAT_XRGB1555:
	case DRM_FORMAT_XBGR1555:
	case DRM_FORMAT_RGBX5551:
	case DRM_FORMAT_BGRX5551:
	case DRM_FORMAT_ARGB1555:
	case DRM_FORMAT_ABGR1555:
	case DRM_FORMAT_RGBA5551:
	case DRM_FORMAT_BGRA5551:
	case DRM_FORMAT_RGB565:
	case DRM_FORMAT_BGR565:
	case DRM_FORMAT_RGB888:
	case DRM_FORMAT_BGR888:
	case DRM_FORMAT_XRGB8888:
	case DRM_FORMAT_XBGR8888:
	case DRM_FORMAT_RGBX8888:
	case DRM_FORMAT_BGRX8888:
	case DRM_FORMAT_ARGB8888:
	case DRM_FORMAT_ABGR8888:
	case DRM_FORMAT_RGBA8888:
	case DRM_FORMAT_BGRA8888:
	case DRM_FORMAT_XRGB2101010:
	case DRM_FORMAT_XBGR2101010:
	case DRM_FORMAT_RGBX1010102:
	case DRM_FORMAT_BGRX1010102:
	case DRM_FORMAT_ARGB2101010:
	case DRM_FORMAT_ABGR2101010:
	case DRM_FORMAT_RGBA1010102:
	case DRM_FORMAT_BGRA1010102:
	case DRM_FORMAT_YUYV:
	case DRM_FORMAT_YVYU:
	case DRM_FORMAT_UYVY:
	case DRM_FORMAT_VYUY:
	case DRM_FORMAT_AYUV:
	case DRM_FORMAT_NV12:
	case DRM_FORMAT_NV21:
	case DRM_FORMAT_NV16:
	case DRM_FORMAT_NV61:
3089 3090
	case DRM_FORMAT_NV24:
	case DRM_FORMAT_NV42:
3091 3092 3093 3094 3095 3096 3097 3098 3099 3100 3101 3102
	case DRM_FORMAT_YUV410:
	case DRM_FORMAT_YVU410:
	case DRM_FORMAT_YUV411:
	case DRM_FORMAT_YVU411:
	case DRM_FORMAT_YUV420:
	case DRM_FORMAT_YVU420:
	case DRM_FORMAT_YUV422:
	case DRM_FORMAT_YVU422:
	case DRM_FORMAT_YUV444:
	case DRM_FORMAT_YVU444:
		return 0;
	default:
3103 3104
		DRM_DEBUG_KMS("invalid pixel format %s\n",
			      drm_get_format_name(r->pixel_format));
3105 3106 3107 3108
		return -EINVAL;
	}
}

3109
static int framebuffer_check(const struct drm_mode_fb_cmd2 *r)
3110 3111 3112 3113 3114
{
	int ret, hsub, vsub, num_planes, i;

	ret = format_check(r);
	if (ret) {
3115 3116
		DRM_DEBUG_KMS("bad framebuffer format %s\n",
			      drm_get_format_name(r->pixel_format));
3117 3118 3119 3120 3121 3122 3123 3124
		return ret;
	}

	hsub = drm_format_horz_chroma_subsampling(r->pixel_format);
	vsub = drm_format_vert_chroma_subsampling(r->pixel_format);
	num_planes = drm_format_num_planes(r->pixel_format);

	if (r->width == 0 || r->width % hsub) {
C
Chuck Ebbert 已提交
3125
		DRM_DEBUG_KMS("bad framebuffer width %u\n", r->width);
3126 3127 3128 3129
		return -EINVAL;
	}

	if (r->height == 0 || r->height % vsub) {
3130
		DRM_DEBUG_KMS("bad framebuffer height %u\n", r->height);
3131 3132 3133 3134 3135
		return -EINVAL;
	}

	for (i = 0; i < num_planes; i++) {
		unsigned int width = r->width / (i != 0 ? hsub : 1);
3136 3137
		unsigned int height = r->height / (i != 0 ? vsub : 1);
		unsigned int cpp = drm_format_plane_cpp(r->pixel_format, i);
3138 3139

		if (!r->handles[i]) {
3140
			DRM_DEBUG_KMS("no buffer object handle for plane %d\n", i);
3141 3142 3143
			return -EINVAL;
		}

3144 3145 3146 3147 3148 3149 3150
		if ((uint64_t) width * cpp > UINT_MAX)
			return -ERANGE;

		if ((uint64_t) height * r->pitches[i] + r->offsets[i] > UINT_MAX)
			return -ERANGE;

		if (r->pitches[i] < width * cpp) {
3151
			DRM_DEBUG_KMS("bad pitch %u for plane %d\n", r->pitches[i], i);
3152 3153 3154 3155 3156 3157 3158
			return -EINVAL;
		}
	}

	return 0;
}

3159 3160 3161
static struct drm_framebuffer *add_framebuffer_internal(struct drm_device *dev,
							struct drm_mode_fb_cmd2 *r,
							struct drm_file *file_priv)
3162
{
D
Dave Airlie 已提交
3163 3164
	struct drm_mode_config *config = &dev->mode_config;
	struct drm_framebuffer *fb;
3165
	int ret;
D
Dave Airlie 已提交
3166

3167 3168
	if (r->flags & ~DRM_MODE_FB_INTERLACED) {
		DRM_DEBUG_KMS("bad framebuffer flags 0x%08x\n", r->flags);
3169
		return ERR_PTR(-EINVAL);
3170 3171
	}

D
Dave Airlie 已提交
3172
	if ((config->min_width > r->width) || (r->width > config->max_width)) {
3173
		DRM_DEBUG_KMS("bad framebuffer width %d, should be >= %d && <= %d\n",
J
Jesse Barnes 已提交
3174
			  r->width, config->min_width, config->max_width);
3175
		return ERR_PTR(-EINVAL);
D
Dave Airlie 已提交
3176 3177
	}
	if ((config->min_height > r->height) || (r->height > config->max_height)) {
3178
		DRM_DEBUG_KMS("bad framebuffer height %d, should be >= %d && <= %d\n",
J
Jesse Barnes 已提交
3179
			  r->height, config->min_height, config->max_height);
3180
		return ERR_PTR(-EINVAL);
D
Dave Airlie 已提交
3181 3182
	}

3183 3184
	ret = framebuffer_check(r);
	if (ret)
3185
		return ERR_PTR(ret);
3186

D
Dave Airlie 已提交
3187
	fb = dev->mode_config.funcs->fb_create(dev, file_priv, r);
3188
	if (IS_ERR(fb)) {
3189
		DRM_DEBUG_KMS("could not create framebuffer\n");
3190
		return fb;
D
Dave Airlie 已提交
3191 3192
	}

3193
	mutex_lock(&file_priv->fbs_lock);
3194
	r->fb_id = fb->base.id;
D
Dave Airlie 已提交
3195
	list_add(&fb->filp_head, &file_priv->fbs);
3196
	DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
3197
	mutex_unlock(&file_priv->fbs_lock);
D
Dave Airlie 已提交
3198

3199 3200
	return fb;
}
3201

3202 3203 3204 3205 3206 3207 3208 3209 3210 3211 3212 3213 3214
/**
 * drm_mode_addfb2 - add an FB to the graphics configuration
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
 *
 * Add a new FB to the specified CRTC, given a user request with format. This is
 * the 2nd version of the addfb ioctl, which supports multi-planar framebuffers
 * and uses fourcc codes as pixel format specifiers.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
3215
 * Zero on success, negative errno on failure.
3216 3217 3218 3219 3220 3221 3222 3223 3224 3225 3226 3227 3228 3229
 */
int drm_mode_addfb2(struct drm_device *dev,
		    void *data, struct drm_file *file_priv)
{
	struct drm_framebuffer *fb;

	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

	fb = add_framebuffer_internal(dev, data, file_priv);
	if (IS_ERR(fb))
		return PTR_ERR(fb);

	return 0;
D
Dave Airlie 已提交
3230 3231 3232 3233
}

/**
 * drm_mode_rmfb - remove an FB from the configuration
3234 3235 3236
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
D
Dave Airlie 已提交
3237 3238 3239 3240 3241
 *
 * Remove the FB specified by the user.
 *
 * Called by the user via ioctl.
 *
3242
 * Returns:
D
Daniel Vetter 已提交
3243
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
3244 3245 3246 3247 3248 3249 3250 3251 3252
 */
int drm_mode_rmfb(struct drm_device *dev,
		   void *data, struct drm_file *file_priv)
{
	struct drm_framebuffer *fb = NULL;
	struct drm_framebuffer *fbl = NULL;
	uint32_t *id = data;
	int found = 0;

3253 3254 3255
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

3256
	mutex_lock(&file_priv->fbs_lock);
3257 3258 3259 3260 3261
	mutex_lock(&dev->mode_config.fb_lock);
	fb = __drm_framebuffer_lookup(dev, *id);
	if (!fb)
		goto fail_lookup;

D
Dave Airlie 已提交
3262 3263 3264
	list_for_each_entry(fbl, &file_priv->fbs, filp_head)
		if (fb == fbl)
			found = 1;
3265 3266 3267 3268 3269
	if (!found)
		goto fail_lookup;

	/* Mark fb as reaped, we still have a ref from fpriv->fbs. */
	__drm_framebuffer_unregister(dev, fb);
D
Dave Airlie 已提交
3270

3271
	list_del_init(&fb->filp_head);
3272
	mutex_unlock(&dev->mode_config.fb_lock);
3273
	mutex_unlock(&file_priv->fbs_lock);
D
Dave Airlie 已提交
3274

3275 3276
	drm_framebuffer_remove(fb);

3277 3278 3279 3280 3281 3282
	return 0;

fail_lookup:
	mutex_unlock(&dev->mode_config.fb_lock);
	mutex_unlock(&file_priv->fbs_lock);

3283
	return -ENOENT;
D
Dave Airlie 已提交
3284 3285 3286 3287
}

/**
 * drm_mode_getfb - get FB info
3288 3289 3290
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
D
Dave Airlie 已提交
3291 3292 3293 3294 3295
 *
 * Lookup the FB given its ID and return info about it.
 *
 * Called by the user via ioctl.
 *
3296
 * Returns:
D
Daniel Vetter 已提交
3297
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
3298 3299 3300 3301 3302 3303
 */
int drm_mode_getfb(struct drm_device *dev,
		   void *data, struct drm_file *file_priv)
{
	struct drm_mode_fb_cmd *r = data;
	struct drm_framebuffer *fb;
3304
	int ret;
D
Dave Airlie 已提交
3305

3306 3307 3308
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

3309
	fb = drm_framebuffer_lookup(dev, r->fb_id);
3310
	if (!fb)
3311
		return -ENOENT;
D
Dave Airlie 已提交
3312 3313 3314 3315 3316

	r->height = fb->height;
	r->width = fb->width;
	r->depth = fb->depth;
	r->bpp = fb->bits_per_pixel;
3317
	r->pitch = fb->pitches[0];
3318
	if (fb->funcs->create_handle) {
3319
		if (file_priv->is_master || capable(CAP_SYS_ADMIN) ||
3320
		    drm_is_control_client(file_priv)) {
3321 3322 3323 3324 3325 3326 3327 3328 3329 3330 3331 3332
			ret = fb->funcs->create_handle(fb, file_priv,
						       &r->handle);
		} else {
			/* GET_FB() is an unprivileged ioctl so we must not
			 * return a buffer-handle to non-master processes! For
			 * backwards-compatibility reasons, we cannot make
			 * GET_FB() privileged, so just return an invalid handle
			 * for non-masters. */
			r->handle = 0;
			ret = 0;
		}
	} else {
3333
		ret = -ENODEV;
3334
	}
D
Dave Airlie 已提交
3335

3336 3337
	drm_framebuffer_unreference(fb);

D
Dave Airlie 已提交
3338 3339 3340
	return ret;
}

3341 3342 3343 3344 3345 3346 3347 3348 3349 3350 3351 3352 3353 3354 3355 3356 3357
/**
 * drm_mode_dirtyfb_ioctl - flush frontbuffer rendering on an FB
 * @dev: drm device for the ioctl
 * @data: data pointer for the ioctl
 * @file_priv: drm file for the ioctl call
 *
 * Lookup the FB and flush out the damaged area supplied by userspace as a clip
 * rectangle list. Generic userspace which does frontbuffer rendering must call
 * this ioctl to flush out the changes on manual-update display outputs, e.g.
 * usb display-link, mipi manual update panels or edp panel self refresh modes.
 *
 * Modesetting drivers which always update the frontbuffer do not need to
 * implement the corresponding ->dirty framebuffer callback.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
3358
 * Zero on success, negative errno on failure.
3359
 */
3360 3361 3362 3363 3364 3365 3366 3367 3368
int drm_mode_dirtyfb_ioctl(struct drm_device *dev,
			   void *data, struct drm_file *file_priv)
{
	struct drm_clip_rect __user *clips_ptr;
	struct drm_clip_rect *clips = NULL;
	struct drm_mode_fb_dirty_cmd *r = data;
	struct drm_framebuffer *fb;
	unsigned flags;
	int num_clips;
3369
	int ret;
3370

3371 3372 3373
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

3374
	fb = drm_framebuffer_lookup(dev, r->fb_id);
3375
	if (!fb)
3376
		return -ENOENT;
3377 3378

	num_clips = r->num_clips;
V
Ville Syrjälä 已提交
3379
	clips_ptr = (struct drm_clip_rect __user *)(unsigned long)r->clips_ptr;
3380 3381 3382 3383 3384 3385 3386 3387 3388 3389 3390 3391 3392 3393 3394

	if (!num_clips != !clips_ptr) {
		ret = -EINVAL;
		goto out_err1;
	}

	flags = DRM_MODE_FB_DIRTY_FLAGS & r->flags;

	/* If userspace annotates copy, clips must come in pairs */
	if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY && (num_clips % 2)) {
		ret = -EINVAL;
		goto out_err1;
	}

	if (num_clips && clips_ptr) {
3395 3396 3397 3398
		if (num_clips < 0 || num_clips > DRM_MODE_FB_DIRTY_MAX_CLIPS) {
			ret = -EINVAL;
			goto out_err1;
		}
3399 3400 3401 3402 3403 3404 3405 3406
		clips = kzalloc(num_clips * sizeof(*clips), GFP_KERNEL);
		if (!clips) {
			ret = -ENOMEM;
			goto out_err1;
		}

		ret = copy_from_user(clips, clips_ptr,
				     num_clips * sizeof(*clips));
3407 3408
		if (ret) {
			ret = -EFAULT;
3409
			goto out_err2;
3410
		}
3411 3412 3413
	}

	if (fb->funcs->dirty) {
3414 3415
		ret = fb->funcs->dirty(fb, file_priv, flags, r->color,
				       clips, num_clips);
3416 3417 3418 3419 3420 3421 3422
	} else {
		ret = -ENOSYS;
	}

out_err2:
	kfree(clips);
out_err1:
3423 3424
	drm_framebuffer_unreference(fb);

3425 3426 3427 3428
	return ret;
}


D
Dave Airlie 已提交
3429 3430
/**
 * drm_fb_release - remove and free the FBs on this file
3431
 * @priv: drm file for the ioctl
D
Dave Airlie 已提交
3432 3433 3434 3435 3436
 *
 * Destroy all the FBs associated with @filp.
 *
 * Called by the user via ioctl.
 *
3437
 * Returns:
D
Daniel Vetter 已提交
3438
 * Zero on success, negative errno on failure.
D
Dave Airlie 已提交
3439
 */
3440
void drm_fb_release(struct drm_file *priv)
D
Dave Airlie 已提交
3441 3442 3443 3444
{
	struct drm_device *dev = priv->minor->dev;
	struct drm_framebuffer *fb, *tfb;

3445 3446 3447 3448 3449 3450 3451 3452 3453 3454
	/*
	 * When the file gets released that means no one else can access the fb
	 * list any more, so no need to grab fpriv->fbs_lock. And we need to to
	 * avoid upsetting lockdep since the universal cursor code adds a
	 * framebuffer while holding mutex locks.
	 *
	 * Note that a real deadlock between fpriv->fbs_lock and the modeset
	 * locks is impossible here since no one else but this function can get
	 * at it any more.
	 */
D
Dave Airlie 已提交
3455
	list_for_each_entry_safe(fb, tfb, &priv->fbs, filp_head) {
3456 3457 3458 3459 3460 3461

		mutex_lock(&dev->mode_config.fb_lock);
		/* Mark fb as reaped, we still have a ref from fpriv->fbs. */
		__drm_framebuffer_unregister(dev, fb);
		mutex_unlock(&dev->mode_config.fb_lock);

3462
		list_del_init(&fb->filp_head);
3463 3464

		/* This will also drop the fpriv->fbs reference. */
R
Rob Clark 已提交
3465
		drm_framebuffer_remove(fb);
D
Dave Airlie 已提交
3466 3467 3468
	}
}

3469 3470 3471 3472 3473 3474 3475 3476 3477 3478 3479
/**
 * drm_property_create - create a new property type
 * @dev: drm device
 * @flags: flags specifying the property type
 * @name: name of the property
 * @num_values: number of pre-defined values
 *
 * This creates a new generic drm property which can then be attached to a drm
 * object with drm_object_attach_property. The returned property object must be
 * freed with drm_property_destroy.
 *
3480 3481 3482 3483
 * Note that the DRM core keeps a per-device list of properties and that, if
 * drm_mode_config_cleanup() is called, it will destroy all properties created
 * by the driver.
 *
3484 3485 3486
 * Returns:
 * A pointer to the newly created property on success, NULL on failure.
 */
D
Dave Airlie 已提交
3487 3488 3489 3490
struct drm_property *drm_property_create(struct drm_device *dev, int flags,
					 const char *name, int num_values)
{
	struct drm_property *property = NULL;
3491
	int ret;
D
Dave Airlie 已提交
3492 3493 3494 3495 3496

	property = kzalloc(sizeof(struct drm_property), GFP_KERNEL);
	if (!property)
		return NULL;

R
Rob Clark 已提交
3497 3498
	property->dev = dev;

D
Dave Airlie 已提交
3499 3500 3501 3502 3503 3504
	if (num_values) {
		property->values = kzalloc(sizeof(uint64_t)*num_values, GFP_KERNEL);
		if (!property->values)
			goto fail;
	}

3505 3506 3507 3508
	ret = drm_mode_object_get(dev, &property->base, DRM_MODE_OBJECT_PROPERTY);
	if (ret)
		goto fail;

D
Dave Airlie 已提交
3509 3510
	property->flags = flags;
	property->num_values = num_values;
3511
	INIT_LIST_HEAD(&property->enum_list);
D
Dave Airlie 已提交
3512

3513
	if (name) {
D
Dave Airlie 已提交
3514
		strncpy(property->name, name, DRM_PROP_NAME_LEN);
3515 3516
		property->name[DRM_PROP_NAME_LEN-1] = '\0';
	}
D
Dave Airlie 已提交
3517 3518

	list_add_tail(&property->head, &dev->mode_config.property_list);
R
Rob Clark 已提交
3519 3520 3521

	WARN_ON(!drm_property_type_valid(property));

D
Dave Airlie 已提交
3522 3523
	return property;
fail:
3524
	kfree(property->values);
D
Dave Airlie 已提交
3525 3526 3527 3528 3529
	kfree(property);
	return NULL;
}
EXPORT_SYMBOL(drm_property_create);

3530
/**
3531
 * drm_property_create_enum - create a new enumeration property type
3532 3533 3534 3535 3536 3537 3538 3539 3540 3541 3542 3543 3544 3545 3546 3547
 * @dev: drm device
 * @flags: flags specifying the property type
 * @name: name of the property
 * @props: enumeration lists with property values
 * @num_values: number of pre-defined values
 *
 * This creates a new generic drm property which can then be attached to a drm
 * object with drm_object_attach_property. The returned property object must be
 * freed with drm_property_destroy.
 *
 * Userspace is only allowed to set one of the predefined values for enumeration
 * properties.
 *
 * Returns:
 * A pointer to the newly created property on success, NULL on failure.
 */
3548 3549 3550 3551 3552 3553 3554 3555 3556 3557 3558 3559 3560 3561 3562 3563 3564 3565 3566 3567 3568 3569 3570 3571 3572 3573 3574 3575
struct drm_property *drm_property_create_enum(struct drm_device *dev, int flags,
					 const char *name,
					 const struct drm_prop_enum_list *props,
					 int num_values)
{
	struct drm_property *property;
	int i, ret;

	flags |= DRM_MODE_PROP_ENUM;

	property = drm_property_create(dev, flags, name, num_values);
	if (!property)
		return NULL;

	for (i = 0; i < num_values; i++) {
		ret = drm_property_add_enum(property, i,
				      props[i].type,
				      props[i].name);
		if (ret) {
			drm_property_destroy(dev, property);
			return NULL;
		}
	}

	return property;
}
EXPORT_SYMBOL(drm_property_create_enum);

3576
/**
3577
 * drm_property_create_bitmask - create a new bitmask property type
3578 3579 3580 3581
 * @dev: drm device
 * @flags: flags specifying the property type
 * @name: name of the property
 * @props: enumeration lists with property bitflags
D
Daniel Vetter 已提交
3582 3583
 * @num_props: size of the @props array
 * @supported_bits: bitmask of all supported enumeration values
3584
 *
D
Daniel Vetter 已提交
3585
 * This creates a new bitmask drm property which can then be attached to a drm
3586 3587 3588 3589 3590 3591 3592 3593 3594
 * object with drm_object_attach_property. The returned property object must be
 * freed with drm_property_destroy.
 *
 * Compared to plain enumeration properties userspace is allowed to set any
 * or'ed together combination of the predefined property bitflag values
 *
 * Returns:
 * A pointer to the newly created property on success, NULL on failure.
 */
R
Rob Clark 已提交
3595 3596 3597
struct drm_property *drm_property_create_bitmask(struct drm_device *dev,
					 int flags, const char *name,
					 const struct drm_prop_enum_list *props,
3598 3599
					 int num_props,
					 uint64_t supported_bits)
R
Rob Clark 已提交
3600 3601
{
	struct drm_property *property;
3602 3603
	int i, ret, index = 0;
	int num_values = hweight64(supported_bits);
R
Rob Clark 已提交
3604 3605 3606 3607 3608 3609

	flags |= DRM_MODE_PROP_BITMASK;

	property = drm_property_create(dev, flags, name, num_values);
	if (!property)
		return NULL;
3610 3611 3612
	for (i = 0; i < num_props; i++) {
		if (!(supported_bits & (1ULL << props[i].type)))
			continue;
R
Rob Clark 已提交
3613

3614 3615 3616 3617 3618 3619
		if (WARN_ON(index >= num_values)) {
			drm_property_destroy(dev, property);
			return NULL;
		}

		ret = drm_property_add_enum(property, index++,
R
Rob Clark 已提交
3620 3621 3622 3623 3624 3625 3626 3627 3628 3629 3630 3631
				      props[i].type,
				      props[i].name);
		if (ret) {
			drm_property_destroy(dev, property);
			return NULL;
		}
	}

	return property;
}
EXPORT_SYMBOL(drm_property_create_bitmask);

R
Rob Clark 已提交
3632 3633 3634 3635 3636 3637 3638 3639 3640 3641 3642 3643 3644 3645 3646 3647
static struct drm_property *property_create_range(struct drm_device *dev,
					 int flags, const char *name,
					 uint64_t min, uint64_t max)
{
	struct drm_property *property;

	property = drm_property_create(dev, flags, name, 2);
	if (!property)
		return NULL;

	property->values[0] = min;
	property->values[1] = max;

	return property;
}

3648
/**
3649
 * drm_property_create_range - create a new ranged property type
3650 3651 3652 3653 3654 3655 3656 3657 3658 3659
 * @dev: drm device
 * @flags: flags specifying the property type
 * @name: name of the property
 * @min: minimum value of the property
 * @max: maximum value of the property
 *
 * This creates a new generic drm property which can then be attached to a drm
 * object with drm_object_attach_property. The returned property object must be
 * freed with drm_property_destroy.
 *
3660
 * Userspace is allowed to set any integer value in the (min, max) range
3661 3662 3663 3664 3665
 * inclusive.
 *
 * Returns:
 * A pointer to the newly created property on success, NULL on failure.
 */
3666 3667 3668 3669
struct drm_property *drm_property_create_range(struct drm_device *dev, int flags,
					 const char *name,
					 uint64_t min, uint64_t max)
{
R
Rob Clark 已提交
3670 3671
	return property_create_range(dev, DRM_MODE_PROP_RANGE | flags,
			name, min, max);
3672 3673 3674
}
EXPORT_SYMBOL(drm_property_create_range);

R
Rob Clark 已提交
3675 3676 3677 3678 3679 3680 3681 3682 3683
struct drm_property *drm_property_create_signed_range(struct drm_device *dev,
					 int flags, const char *name,
					 int64_t min, int64_t max)
{
	return property_create_range(dev, DRM_MODE_PROP_SIGNED_RANGE | flags,
			name, I642U64(min), I642U64(max));
}
EXPORT_SYMBOL(drm_property_create_signed_range);

R
Rob Clark 已提交
3684 3685 3686 3687 3688 3689 3690 3691 3692 3693 3694 3695 3696 3697 3698 3699 3700
struct drm_property *drm_property_create_object(struct drm_device *dev,
					 int flags, const char *name, uint32_t type)
{
	struct drm_property *property;

	flags |= DRM_MODE_PROP_OBJECT;

	property = drm_property_create(dev, flags, name, 1);
	if (!property)
		return NULL;

	property->values[0] = type;

	return property;
}
EXPORT_SYMBOL(drm_property_create_object);

3701 3702 3703 3704 3705 3706 3707 3708 3709 3710 3711 3712 3713 3714 3715
/**
 * drm_property_add_enum - add a possible value to an enumeration property
 * @property: enumeration property to change
 * @index: index of the new enumeration
 * @value: value of the new enumeration
 * @name: symbolic name of the new enumeration
 *
 * This functions adds enumerations to a property.
 *
 * It's use is deprecated, drivers should use one of the more specific helpers
 * to directly create the property with all enumerations already attached.
 *
 * Returns:
 * Zero on success, error code on failure.
 */
D
Dave Airlie 已提交
3716 3717 3718 3719 3720
int drm_property_add_enum(struct drm_property *property, int index,
			  uint64_t value, const char *name)
{
	struct drm_property_enum *prop_enum;

R
Rob Clark 已提交
3721 3722
	if (!(drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
			drm_property_type_is(property, DRM_MODE_PROP_BITMASK)))
R
Rob Clark 已提交
3723 3724 3725 3726 3727 3728
		return -EINVAL;

	/*
	 * Bitmask enum properties have the additional constraint of values
	 * from 0 to 63
	 */
R
Rob Clark 已提交
3729 3730
	if (drm_property_type_is(property, DRM_MODE_PROP_BITMASK) &&
			(value > 63))
D
Dave Airlie 已提交
3731 3732
		return -EINVAL;

3733 3734
	if (!list_empty(&property->enum_list)) {
		list_for_each_entry(prop_enum, &property->enum_list, head) {
D
Dave Airlie 已提交
3735 3736 3737 3738 3739 3740 3741 3742 3743 3744 3745 3746 3747 3748 3749 3750 3751
			if (prop_enum->value == value) {
				strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
				prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
				return 0;
			}
		}
	}

	prop_enum = kzalloc(sizeof(struct drm_property_enum), GFP_KERNEL);
	if (!prop_enum)
		return -ENOMEM;

	strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
	prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
	prop_enum->value = value;

	property->values[index] = value;
3752
	list_add_tail(&prop_enum->head, &property->enum_list);
D
Dave Airlie 已提交
3753 3754 3755 3756
	return 0;
}
EXPORT_SYMBOL(drm_property_add_enum);

3757 3758 3759 3760 3761 3762 3763 3764
/**
 * drm_property_destroy - destroy a drm property
 * @dev: drm device
 * @property: property to destry
 *
 * This function frees a property including any attached resources like
 * enumeration values.
 */
D
Dave Airlie 已提交
3765 3766 3767 3768
void drm_property_destroy(struct drm_device *dev, struct drm_property *property)
{
	struct drm_property_enum *prop_enum, *pt;

3769
	list_for_each_entry_safe(prop_enum, pt, &property->enum_list, head) {
D
Dave Airlie 已提交
3770 3771 3772 3773 3774 3775 3776 3777 3778 3779 3780 3781
		list_del(&prop_enum->head);
		kfree(prop_enum);
	}

	if (property->num_values)
		kfree(property->values);
	drm_mode_object_put(dev, &property->base);
	list_del(&property->head);
	kfree(property);
}
EXPORT_SYMBOL(drm_property_destroy);

3782 3783 3784 3785 3786 3787 3788 3789 3790 3791
/**
 * drm_object_attach_property - attach a property to a modeset object
 * @obj: drm modeset object
 * @property: property to attach
 * @init_val: initial value of the property
 *
 * This attaches the given property to the modeset object with the given initial
 * value. Currently this function cannot fail since the properties are stored in
 * a statically sized array.
 */
3792 3793 3794 3795
void drm_object_attach_property(struct drm_mode_object *obj,
				struct drm_property *property,
				uint64_t init_val)
{
3796
	int count = obj->properties->count;
3797

3798 3799 3800 3801 3802 3803
	if (count == DRM_OBJECT_MAX_PROPERTY) {
		WARN(1, "Failed to attach object property (type: 0x%x). Please "
			"increase DRM_OBJECT_MAX_PROPERTY by 1 for each time "
			"you see this message on the same object type.\n",
			obj->type);
		return;
3804 3805
	}

3806 3807 3808
	obj->properties->ids[count] = property->base.id;
	obj->properties->values[count] = init_val;
	obj->properties->count++;
3809 3810 3811
}
EXPORT_SYMBOL(drm_object_attach_property);

3812 3813 3814 3815 3816 3817 3818 3819 3820 3821 3822 3823 3824
/**
 * drm_object_property_set_value - set the value of a property
 * @obj: drm mode object to set property value for
 * @property: property to set
 * @val: value the property should be set to
 *
 * This functions sets a given property on a given object. This function only
 * changes the software state of the property, it does not call into the
 * driver's ->set_property callback.
 *
 * Returns:
 * Zero on success, error code on failure.
 */
3825 3826 3827 3828 3829
int drm_object_property_set_value(struct drm_mode_object *obj,
				  struct drm_property *property, uint64_t val)
{
	int i;

3830
	for (i = 0; i < obj->properties->count; i++) {
3831 3832 3833 3834 3835 3836 3837 3838 3839 3840
		if (obj->properties->ids[i] == property->base.id) {
			obj->properties->values[i] = val;
			return 0;
		}
	}

	return -EINVAL;
}
EXPORT_SYMBOL(drm_object_property_set_value);

3841 3842 3843 3844 3845 3846 3847 3848 3849 3850 3851 3852 3853 3854
/**
 * drm_object_property_get_value - retrieve the value of a property
 * @obj: drm mode object to get property value from
 * @property: property to retrieve
 * @val: storage for the property value
 *
 * This function retrieves the softare state of the given property for the given
 * property. Since there is no driver callback to retrieve the current property
 * value this might be out of sync with the hardware, depending upon the driver
 * and property.
 *
 * Returns:
 * Zero on success, error code on failure.
 */
3855 3856 3857 3858 3859
int drm_object_property_get_value(struct drm_mode_object *obj,
				  struct drm_property *property, uint64_t *val)
{
	int i;

3860
	for (i = 0; i < obj->properties->count; i++) {
3861 3862 3863 3864 3865 3866 3867 3868 3869 3870
		if (obj->properties->ids[i] == property->base.id) {
			*val = obj->properties->values[i];
			return 0;
		}
	}

	return -EINVAL;
}
EXPORT_SYMBOL(drm_object_property_get_value);

3871
/**
D
Daniel Vetter 已提交
3872
 * drm_mode_getproperty_ioctl - get the property metadata
3873 3874 3875 3876
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
D
Daniel Vetter 已提交
3877 3878 3879 3880
 * This function retrieves the metadata for a given property, like the different
 * possible values for an enum property or the limits for a range property.
 *
 * Blob properties are special
3881 3882 3883 3884
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
3885
 * Zero on success, negative errno on failure.
3886
 */
D
Dave Airlie 已提交
3887 3888 3889 3890 3891 3892 3893 3894 3895 3896 3897 3898 3899
int drm_mode_getproperty_ioctl(struct drm_device *dev,
			       void *data, struct drm_file *file_priv)
{
	struct drm_mode_get_property *out_resp = data;
	struct drm_property *property;
	int enum_count = 0;
	int value_count = 0;
	int ret = 0, i;
	int copied;
	struct drm_property_enum *prop_enum;
	struct drm_mode_property_enum __user *enum_ptr;
	uint64_t __user *values_ptr;

3900 3901 3902
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

3903
	drm_modeset_lock_all(dev);
R
Rob Clark 已提交
3904 3905
	property = drm_property_find(dev, out_resp->prop_id);
	if (!property) {
3906
		ret = -ENOENT;
D
Dave Airlie 已提交
3907 3908 3909
		goto done;
	}

R
Rob Clark 已提交
3910 3911
	if (drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
			drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
3912
		list_for_each_entry(prop_enum, &property->enum_list, head)
D
Dave Airlie 已提交
3913 3914 3915 3916 3917 3918 3919 3920 3921 3922
			enum_count++;
	}

	value_count = property->num_values;

	strncpy(out_resp->name, property->name, DRM_PROP_NAME_LEN);
	out_resp->name[DRM_PROP_NAME_LEN-1] = 0;
	out_resp->flags = property->flags;

	if ((out_resp->count_values >= value_count) && value_count) {
V
Ville Syrjälä 已提交
3923
		values_ptr = (uint64_t __user *)(unsigned long)out_resp->values_ptr;
D
Dave Airlie 已提交
3924 3925 3926 3927 3928 3929 3930 3931 3932
		for (i = 0; i < value_count; i++) {
			if (copy_to_user(values_ptr + i, &property->values[i], sizeof(uint64_t))) {
				ret = -EFAULT;
				goto done;
			}
		}
	}
	out_resp->count_values = value_count;

R
Rob Clark 已提交
3933 3934
	if (drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
			drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
D
Dave Airlie 已提交
3935 3936
		if ((out_resp->count_enum_blobs >= enum_count) && enum_count) {
			copied = 0;
V
Ville Syrjälä 已提交
3937
			enum_ptr = (struct drm_mode_property_enum __user *)(unsigned long)out_resp->enum_blob_ptr;
3938
			list_for_each_entry(prop_enum, &property->enum_list, head) {
D
Dave Airlie 已提交
3939 3940 3941 3942 3943 3944 3945 3946 3947 3948 3949 3950 3951 3952 3953 3954 3955

				if (copy_to_user(&enum_ptr[copied].value, &prop_enum->value, sizeof(uint64_t))) {
					ret = -EFAULT;
					goto done;
				}

				if (copy_to_user(&enum_ptr[copied].name,
						 &prop_enum->name, DRM_PROP_NAME_LEN)) {
					ret = -EFAULT;
					goto done;
				}
				copied++;
			}
		}
		out_resp->count_enum_blobs = enum_count;
	}

3956 3957 3958 3959 3960 3961 3962 3963 3964 3965
	/*
	 * NOTE: The idea seems to have been to use this to read all the blob
	 * property values. But nothing ever added them to the corresponding
	 * list, userspace always used the special-purpose get_blob ioctl to
	 * read the value for a blob property. It also doesn't make a lot of
	 * sense to return values here when everything else is just metadata for
	 * the property itself.
	 */
	if (drm_property_type_is(property, DRM_MODE_PROP_BLOB))
		out_resp->count_enum_blobs = 0;
D
Dave Airlie 已提交
3966
done:
3967
	drm_modeset_unlock_all(dev);
D
Dave Airlie 已提交
3968 3969 3970
	return ret;
}

3971 3972
static struct drm_property_blob *
drm_property_create_blob(struct drm_device *dev, size_t length,
3973
			 const void *data)
D
Dave Airlie 已提交
3974 3975
{
	struct drm_property_blob *blob;
3976
	int ret;
D
Dave Airlie 已提交
3977 3978 3979 3980 3981 3982 3983 3984

	if (!length || !data)
		return NULL;

	blob = kzalloc(sizeof(struct drm_property_blob)+length, GFP_KERNEL);
	if (!blob)
		return NULL;

3985 3986 3987 3988 3989 3990
	ret = drm_mode_object_get(dev, &blob->base, DRM_MODE_OBJECT_BLOB);
	if (ret) {
		kfree(blob);
		return NULL;
	}

D
Dave Airlie 已提交
3991 3992 3993 3994 3995 3996 3997 3998 3999 4000 4001 4002 4003 4004 4005 4006
	blob->length = length;

	memcpy(blob->data, data, length);

	list_add_tail(&blob->head, &dev->mode_config.property_blob_list);
	return blob;
}

static void drm_property_destroy_blob(struct drm_device *dev,
			       struct drm_property_blob *blob)
{
	drm_mode_object_put(dev, &blob->base);
	list_del(&blob->head);
	kfree(blob);
}

4007 4008 4009 4010 4011 4012 4013 4014 4015 4016 4017 4018
/**
 * drm_mode_getblob_ioctl - get the contents of a blob property value
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * This function retrieves the contents of a blob property. The value stored in
 * an object's blob property is just a normal modeset object id.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4019
 * Zero on success, negative errno on failure.
4020
 */
D
Dave Airlie 已提交
4021 4022 4023 4024 4025 4026
int drm_mode_getblob_ioctl(struct drm_device *dev,
			   void *data, struct drm_file *file_priv)
{
	struct drm_mode_get_blob *out_resp = data;
	struct drm_property_blob *blob;
	int ret = 0;
V
Ville Syrjälä 已提交
4027
	void __user *blob_ptr;
D
Dave Airlie 已提交
4028

4029 4030 4031
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

4032
	drm_modeset_lock_all(dev);
R
Rob Clark 已提交
4033 4034
	blob = drm_property_blob_find(dev, out_resp->blob_id);
	if (!blob) {
4035
		ret = -ENOENT;
D
Dave Airlie 已提交
4036 4037 4038 4039
		goto done;
	}

	if (out_resp->length == blob->length) {
V
Ville Syrjälä 已提交
4040
		blob_ptr = (void __user *)(unsigned long)out_resp->data;
D
Dave Airlie 已提交
4041 4042 4043 4044 4045 4046 4047 4048
		if (copy_to_user(blob_ptr, blob->data, blob->length)){
			ret = -EFAULT;
			goto done;
		}
	}
	out_resp->length = blob->length;

done:
4049
	drm_modeset_unlock_all(dev);
D
Dave Airlie 已提交
4050 4051 4052
	return ret;
}

4053 4054 4055 4056 4057 4058 4059 4060 4061 4062 4063
/**
 * drm_mode_connector_set_path_property - set tile property on connector
 * @connector: connector to set property on.
 * @path: path to use for property.
 *
 * This creates a property to expose to userspace to specify a
 * connector path. This is mainly used for DisplayPort MST where
 * connectors have a topology and we want to allow userspace to give
 * them more meaningful names.
 *
 * Returns:
D
Daniel Vetter 已提交
4064
 * Zero on success, negative errno on failure.
4065
 */
D
Dave Airlie 已提交
4066
int drm_mode_connector_set_path_property(struct drm_connector *connector,
4067
					 const char *path)
D
Dave Airlie 已提交
4068 4069
{
	struct drm_device *dev = connector->dev;
4070 4071
	size_t size = strlen(path) + 1;
	int ret;
D
Dave Airlie 已提交
4072 4073 4074 4075 4076 4077 4078 4079 4080 4081 4082 4083 4084

	connector->path_blob_ptr = drm_property_create_blob(connector->dev,
							    size, path);
	if (!connector->path_blob_ptr)
		return -EINVAL;

	ret = drm_object_property_set_value(&connector->base,
					    dev->mode_config.path_property,
					    connector->path_blob_ptr->base.id);
	return ret;
}
EXPORT_SYMBOL(drm_mode_connector_set_path_property);

4085 4086 4087 4088 4089 4090 4091 4092 4093
/**
 * drm_mode_connector_update_edid_property - update the edid property of a connector
 * @connector: drm connector
 * @edid: new value of the edid property
 *
 * This function creates a new blob modeset object and assigns its id to the
 * connector's edid property.
 *
 * Returns:
D
Daniel Vetter 已提交
4094
 * Zero on success, negative errno on failure.
4095
 */
D
Dave Airlie 已提交
4096
int drm_mode_connector_update_edid_property(struct drm_connector *connector,
4097
					    const struct edid *edid)
D
Dave Airlie 已提交
4098 4099
{
	struct drm_device *dev = connector->dev;
4100 4101
	size_t size;
	int ret;
D
Dave Airlie 已提交
4102

4103 4104 4105 4106
	/* ignore requests to set edid when overridden */
	if (connector->override_edid)
		return 0;

D
Dave Airlie 已提交
4107 4108 4109 4110 4111 4112
	if (connector->edid_blob_ptr)
		drm_property_destroy_blob(dev, connector->edid_blob_ptr);

	/* Delete edid, when there is none. */
	if (!edid) {
		connector->edid_blob_ptr = NULL;
4113
		ret = drm_object_property_set_value(&connector->base, dev->mode_config.edid_property, 0);
D
Dave Airlie 已提交
4114 4115 4116
		return ret;
	}

4117 4118 4119
	size = EDID_LENGTH * (1 + edid->extensions);
	connector->edid_blob_ptr = drm_property_create_blob(connector->dev,
							    size, edid);
4120 4121
	if (!connector->edid_blob_ptr)
		return -EINVAL;
D
Dave Airlie 已提交
4122

4123
	ret = drm_object_property_set_value(&connector->base,
D
Dave Airlie 已提交
4124 4125 4126 4127 4128 4129 4130
					       dev->mode_config.edid_property,
					       connector->edid_blob_ptr->base.id);

	return ret;
}
EXPORT_SYMBOL(drm_mode_connector_update_edid_property);

4131
static bool drm_property_change_is_valid(struct drm_property *property,
4132
					 uint64_t value)
4133 4134 4135
{
	if (property->flags & DRM_MODE_PROP_IMMUTABLE)
		return false;
R
Rob Clark 已提交
4136 4137

	if (drm_property_type_is(property, DRM_MODE_PROP_RANGE)) {
4138 4139 4140
		if (value < property->values[0] || value > property->values[1])
			return false;
		return true;
R
Rob Clark 已提交
4141 4142 4143 4144 4145 4146
	} else if (drm_property_type_is(property, DRM_MODE_PROP_SIGNED_RANGE)) {
		int64_t svalue = U642I64(value);
		if (svalue < U642I64(property->values[0]) ||
				svalue > U642I64(property->values[1]))
			return false;
		return true;
R
Rob Clark 已提交
4147
	} else if (drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
R
Rob Clark 已提交
4148
		int i;
4149
		uint64_t valid_mask = 0;
R
Rob Clark 已提交
4150 4151 4152
		for (i = 0; i < property->num_values; i++)
			valid_mask |= (1ULL << property->values[i]);
		return !(value & ~valid_mask);
R
Rob Clark 已提交
4153
	} else if (drm_property_type_is(property, DRM_MODE_PROP_BLOB)) {
4154 4155
		/* Only the driver knows */
		return true;
R
Rob Clark 已提交
4156 4157 4158 4159 4160 4161 4162 4163 4164 4165 4166 4167 4168 4169
	} else if (drm_property_type_is(property, DRM_MODE_PROP_OBJECT)) {
		struct drm_mode_object *obj;
		/* a zero value for an object property translates to null: */
		if (value == 0)
			return true;
		/*
		 * NOTE: use _object_find() directly to bypass restriction on
		 * looking up refcnt'd objects (ie. fb's).  For a refcnt'd
		 * object this could race against object finalization, so it
		 * simply tells us that the object *was* valid.  Which is good
		 * enough.
		 */
		obj = _object_find(property->dev, value, property->values[0]);
		return obj != NULL;
4170 4171 4172 4173 4174 4175 4176 4177 4178
	} else {
		int i;
		for (i = 0; i < property->num_values; i++)
			if (property->values[i] == value)
				return true;
		return false;
	}
}

4179 4180 4181 4182 4183 4184 4185 4186 4187 4188 4189 4190
/**
 * drm_mode_connector_property_set_ioctl - set the current value of a connector property
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * This function sets the current value for a connectors's property. It also
 * calls into a driver's ->set_property callback to update the hardware state
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4191
 * Zero on success, negative errno on failure.
4192
 */
D
Dave Airlie 已提交
4193 4194 4195
int drm_mode_connector_property_set_ioctl(struct drm_device *dev,
				       void *data, struct drm_file *file_priv)
{
4196 4197 4198 4199 4200 4201 4202
	struct drm_mode_connector_set_property *conn_set_prop = data;
	struct drm_mode_obj_set_property obj_set_prop = {
		.value = conn_set_prop->value,
		.prop_id = conn_set_prop->prop_id,
		.obj_id = conn_set_prop->connector_id,
		.obj_type = DRM_MODE_OBJECT_CONNECTOR
	};
4203

4204 4205
	/* It does all the locking and checking we need */
	return drm_mode_obj_set_property_ioctl(dev, &obj_set_prop, file_priv);
D
Dave Airlie 已提交
4206 4207
}

4208 4209 4210 4211 4212 4213 4214 4215 4216 4217 4218 4219 4220 4221 4222 4223 4224
static int drm_mode_connector_set_obj_prop(struct drm_mode_object *obj,
					   struct drm_property *property,
					   uint64_t value)
{
	int ret = -EINVAL;
	struct drm_connector *connector = obj_to_connector(obj);

	/* Do DPMS ourselves */
	if (property == connector->dev->mode_config.dpms_property) {
		if (connector->funcs->dpms)
			(*connector->funcs->dpms)(connector, (int)value);
		ret = 0;
	} else if (connector->funcs->set_property)
		ret = connector->funcs->set_property(connector, property, value);

	/* store the property value if successful */
	if (!ret)
4225
		drm_object_property_set_value(&connector->base, property, value);
4226 4227 4228
	return ret;
}

P
Paulo Zanoni 已提交
4229 4230 4231 4232 4233 4234 4235 4236 4237 4238 4239 4240 4241 4242 4243
static int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
				      struct drm_property *property,
				      uint64_t value)
{
	int ret = -EINVAL;
	struct drm_crtc *crtc = obj_to_crtc(obj);

	if (crtc->funcs->set_property)
		ret = crtc->funcs->set_property(crtc, property, value);
	if (!ret)
		drm_object_property_set_value(obj, property, value);

	return ret;
}

4244 4245 4246 4247 4248 4249 4250 4251 4252 4253 4254 4255 4256 4257 4258 4259
/**
 * drm_mode_plane_set_obj_prop - set the value of a property
 * @plane: drm plane object to set property value for
 * @property: property to set
 * @value: value the property should be set to
 *
 * This functions sets a given property on a given plane object. This function
 * calls the driver's ->set_property callback and changes the software state of
 * the property if the callback succeeds.
 *
 * Returns:
 * Zero on success, error code on failure.
 */
int drm_mode_plane_set_obj_prop(struct drm_plane *plane,
				struct drm_property *property,
				uint64_t value)
R
Rob Clark 已提交
4260 4261
{
	int ret = -EINVAL;
4262
	struct drm_mode_object *obj = &plane->base;
R
Rob Clark 已提交
4263 4264 4265 4266 4267 4268 4269 4270

	if (plane->funcs->set_property)
		ret = plane->funcs->set_property(plane, property, value);
	if (!ret)
		drm_object_property_set_value(obj, property, value);

	return ret;
}
4271
EXPORT_SYMBOL(drm_mode_plane_set_obj_prop);
R
Rob Clark 已提交
4272

4273
/**
D
Daniel Vetter 已提交
4274
 * drm_mode_obj_get_properties_ioctl - get the current value of a object's property
4275 4276 4277 4278 4279 4280 4281 4282 4283 4284 4285
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * This function retrieves the current value for an object's property. Compared
 * to the connector specific ioctl this one is extended to also work on crtc and
 * plane objects.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4286
 * Zero on success, negative errno on failure.
4287
 */
4288 4289 4290 4291 4292 4293 4294 4295 4296 4297 4298 4299 4300 4301 4302
int drm_mode_obj_get_properties_ioctl(struct drm_device *dev, void *data,
				      struct drm_file *file_priv)
{
	struct drm_mode_obj_get_properties *arg = data;
	struct drm_mode_object *obj;
	int ret = 0;
	int i;
	int copied = 0;
	int props_count = 0;
	uint32_t __user *props_ptr;
	uint64_t __user *prop_values_ptr;

	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

4303
	drm_modeset_lock_all(dev);
4304 4305 4306

	obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
	if (!obj) {
4307
		ret = -ENOENT;
4308 4309 4310 4311 4312 4313 4314
		goto out;
	}
	if (!obj->properties) {
		ret = -EINVAL;
		goto out;
	}

4315
	props_count = obj->properties->count;
4316 4317 4318 4319 4320 4321 4322 4323 4324 4325 4326 4327 4328 4329 4330 4331 4332 4333 4334 4335 4336 4337 4338 4339

	/* This ioctl is called twice, once to determine how much space is
	 * needed, and the 2nd time to fill it. */
	if ((arg->count_props >= props_count) && props_count) {
		copied = 0;
		props_ptr = (uint32_t __user *)(unsigned long)(arg->props_ptr);
		prop_values_ptr = (uint64_t __user *)(unsigned long)
				  (arg->prop_values_ptr);
		for (i = 0; i < props_count; i++) {
			if (put_user(obj->properties->ids[i],
				     props_ptr + copied)) {
				ret = -EFAULT;
				goto out;
			}
			if (put_user(obj->properties->values[i],
				     prop_values_ptr + copied)) {
				ret = -EFAULT;
				goto out;
			}
			copied++;
		}
	}
	arg->count_props = props_count;
out:
4340
	drm_modeset_unlock_all(dev);
4341 4342 4343
	return ret;
}

4344 4345 4346 4347 4348 4349 4350 4351 4352 4353 4354 4355 4356 4357
/**
 * drm_mode_obj_set_property_ioctl - set the current value of an object's property
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * This function sets the current value for an object's property. It also calls
 * into a driver's ->set_property callback to update the hardware state.
 * Compared to the connector specific ioctl this one is extended to also work on
 * crtc and plane objects.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4358
 * Zero on success, negative errno on failure.
4359
 */
4360 4361 4362 4363 4364 4365 4366 4367 4368 4369 4370 4371 4372
int drm_mode_obj_set_property_ioctl(struct drm_device *dev, void *data,
				    struct drm_file *file_priv)
{
	struct drm_mode_obj_set_property *arg = data;
	struct drm_mode_object *arg_obj;
	struct drm_mode_object *prop_obj;
	struct drm_property *property;
	int ret = -EINVAL;
	int i;

	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

4373
	drm_modeset_lock_all(dev);
4374 4375

	arg_obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
4376 4377
	if (!arg_obj) {
		ret = -ENOENT;
4378
		goto out;
4379
	}
4380 4381 4382
	if (!arg_obj->properties)
		goto out;

4383
	for (i = 0; i < arg_obj->properties->count; i++)
4384 4385 4386
		if (arg_obj->properties->ids[i] == arg->prop_id)
			break;

4387
	if (i == arg_obj->properties->count)
4388 4389 4390 4391
		goto out;

	prop_obj = drm_mode_object_find(dev, arg->prop_id,
					DRM_MODE_OBJECT_PROPERTY);
4392 4393
	if (!prop_obj) {
		ret = -ENOENT;
4394
		goto out;
4395
	}
4396 4397 4398 4399 4400 4401 4402 4403 4404 4405
	property = obj_to_property(prop_obj);

	if (!drm_property_change_is_valid(property, arg->value))
		goto out;

	switch (arg_obj->type) {
	case DRM_MODE_OBJECT_CONNECTOR:
		ret = drm_mode_connector_set_obj_prop(arg_obj, property,
						      arg->value);
		break;
P
Paulo Zanoni 已提交
4406 4407 4408
	case DRM_MODE_OBJECT_CRTC:
		ret = drm_mode_crtc_set_obj_prop(arg_obj, property, arg->value);
		break;
R
Rob Clark 已提交
4409
	case DRM_MODE_OBJECT_PLANE:
4410 4411
		ret = drm_mode_plane_set_obj_prop(obj_to_plane(arg_obj),
						  property, arg->value);
R
Rob Clark 已提交
4412
		break;
4413 4414 4415
	}

out:
4416
	drm_modeset_unlock_all(dev);
4417 4418 4419
	return ret;
}

4420 4421 4422 4423 4424 4425 4426 4427 4428 4429
/**
 * drm_mode_connector_attach_encoder - attach a connector to an encoder
 * @connector: connector to attach
 * @encoder: encoder to attach @connector to
 *
 * This function links up a connector to an encoder. Note that the routing
 * restrictions between encoders and crtcs are exposed to userspace through the
 * possible_clones and possible_crtcs bitmasks.
 *
 * Returns:
D
Daniel Vetter 已提交
4430
 * Zero on success, negative errno on failure.
4431
 */
D
Dave Airlie 已提交
4432 4433 4434 4435 4436 4437 4438 4439 4440 4441 4442 4443 4444 4445 4446
int drm_mode_connector_attach_encoder(struct drm_connector *connector,
				      struct drm_encoder *encoder)
{
	int i;

	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
		if (connector->encoder_ids[i] == 0) {
			connector->encoder_ids[i] = encoder->base.id;
			return 0;
		}
	}
	return -ENOMEM;
}
EXPORT_SYMBOL(drm_mode_connector_attach_encoder);

4447 4448 4449 4450 4451 4452 4453 4454 4455 4456
/**
 * drm_mode_crtc_set_gamma_size - set the gamma table size
 * @crtc: CRTC to set the gamma table size for
 * @gamma_size: size of the gamma table
 *
 * Drivers which support gamma tables should set this to the supported gamma
 * table size when initializing the CRTC. Currently the drm core only supports a
 * fixed gamma table size.
 *
 * Returns:
D
Daniel Vetter 已提交
4457
 * Zero on success, negative errno on failure.
4458
 */
4459
int drm_mode_crtc_set_gamma_size(struct drm_crtc *crtc,
4460
				 int gamma_size)
D
Dave Airlie 已提交
4461 4462 4463 4464 4465 4466
{
	crtc->gamma_size = gamma_size;

	crtc->gamma_store = kzalloc(gamma_size * sizeof(uint16_t) * 3, GFP_KERNEL);
	if (!crtc->gamma_store) {
		crtc->gamma_size = 0;
4467
		return -ENOMEM;
D
Dave Airlie 已提交
4468 4469
	}

4470
	return 0;
D
Dave Airlie 已提交
4471 4472 4473
}
EXPORT_SYMBOL(drm_mode_crtc_set_gamma_size);

4474 4475 4476 4477 4478 4479 4480 4481 4482 4483 4484 4485
/**
 * drm_mode_gamma_set_ioctl - set the gamma table
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * Set the gamma table of a CRTC to the one passed in by the user. Userspace can
 * inquire the required gamma table size through drm_mode_gamma_get_ioctl.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4486
 * Zero on success, negative errno on failure.
4487
 */
D
Dave Airlie 已提交
4488 4489 4490 4491 4492 4493 4494 4495 4496
int drm_mode_gamma_set_ioctl(struct drm_device *dev,
			     void *data, struct drm_file *file_priv)
{
	struct drm_mode_crtc_lut *crtc_lut = data;
	struct drm_crtc *crtc;
	void *r_base, *g_base, *b_base;
	int size;
	int ret = 0;

4497 4498 4499
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

4500
	drm_modeset_lock_all(dev);
R
Rob Clark 已提交
4501 4502
	crtc = drm_crtc_find(dev, crtc_lut->crtc_id);
	if (!crtc) {
4503
		ret = -ENOENT;
D
Dave Airlie 已提交
4504 4505 4506
		goto out;
	}

4507 4508 4509 4510 4511
	if (crtc->funcs->gamma_set == NULL) {
		ret = -ENOSYS;
		goto out;
	}

D
Dave Airlie 已提交
4512 4513 4514 4515 4516 4517 4518 4519 4520 4521 4522 4523 4524 4525 4526 4527 4528 4529 4530 4531 4532 4533 4534 4535 4536
	/* memcpy into gamma store */
	if (crtc_lut->gamma_size != crtc->gamma_size) {
		ret = -EINVAL;
		goto out;
	}

	size = crtc_lut->gamma_size * (sizeof(uint16_t));
	r_base = crtc->gamma_store;
	if (copy_from_user(r_base, (void __user *)(unsigned long)crtc_lut->red, size)) {
		ret = -EFAULT;
		goto out;
	}

	g_base = r_base + size;
	if (copy_from_user(g_base, (void __user *)(unsigned long)crtc_lut->green, size)) {
		ret = -EFAULT;
		goto out;
	}

	b_base = g_base + size;
	if (copy_from_user(b_base, (void __user *)(unsigned long)crtc_lut->blue, size)) {
		ret = -EFAULT;
		goto out;
	}

J
James Simmons 已提交
4537
	crtc->funcs->gamma_set(crtc, r_base, g_base, b_base, 0, crtc->gamma_size);
D
Dave Airlie 已提交
4538 4539

out:
4540
	drm_modeset_unlock_all(dev);
D
Dave Airlie 已提交
4541 4542 4543 4544
	return ret;

}

4545 4546 4547 4548 4549 4550 4551 4552 4553 4554 4555 4556 4557
/**
 * drm_mode_gamma_get_ioctl - get the gamma table
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * Copy the current gamma table into the storage provided. This also provides
 * the gamma table size the driver expects, which can be used to size the
 * allocated storage.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4558
 * Zero on success, negative errno on failure.
4559
 */
D
Dave Airlie 已提交
4560 4561 4562 4563 4564 4565 4566 4567 4568
int drm_mode_gamma_get_ioctl(struct drm_device *dev,
			     void *data, struct drm_file *file_priv)
{
	struct drm_mode_crtc_lut *crtc_lut = data;
	struct drm_crtc *crtc;
	void *r_base, *g_base, *b_base;
	int size;
	int ret = 0;

4569 4570 4571
	if (!drm_core_check_feature(dev, DRIVER_MODESET))
		return -EINVAL;

4572
	drm_modeset_lock_all(dev);
R
Rob Clark 已提交
4573 4574
	crtc = drm_crtc_find(dev, crtc_lut->crtc_id);
	if (!crtc) {
4575
		ret = -ENOENT;
D
Dave Airlie 已提交
4576 4577 4578 4579 4580 4581 4582 4583 4584 4585 4586 4587 4588 4589 4590 4591 4592 4593 4594 4595 4596 4597 4598 4599 4600 4601 4602 4603
		goto out;
	}

	/* memcpy into gamma store */
	if (crtc_lut->gamma_size != crtc->gamma_size) {
		ret = -EINVAL;
		goto out;
	}

	size = crtc_lut->gamma_size * (sizeof(uint16_t));
	r_base = crtc->gamma_store;
	if (copy_to_user((void __user *)(unsigned long)crtc_lut->red, r_base, size)) {
		ret = -EFAULT;
		goto out;
	}

	g_base = r_base + size;
	if (copy_to_user((void __user *)(unsigned long)crtc_lut->green, g_base, size)) {
		ret = -EFAULT;
		goto out;
	}

	b_base = g_base + size;
	if (copy_to_user((void __user *)(unsigned long)crtc_lut->blue, b_base, size)) {
		ret = -EFAULT;
		goto out;
	}
out:
4604
	drm_modeset_unlock_all(dev);
D
Dave Airlie 已提交
4605 4606
	return ret;
}
4607

4608 4609 4610 4611 4612 4613 4614 4615 4616 4617 4618 4619 4620 4621 4622 4623
/**
 * drm_mode_page_flip_ioctl - schedule an asynchronous fb update
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * This schedules an asynchronous update on a given CRTC, called page flip.
 * Optionally a drm event is generated to signal the completion of the event.
 * Generic drivers cannot assume that a pageflip with changed framebuffer
 * properties (including driver specific metadata like tiling layout) will work,
 * but some drivers support e.g. pixel format changes through the pageflip
 * ioctl.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4624
 * Zero on success, negative errno on failure.
4625
 */
4626 4627 4628 4629 4630
int drm_mode_page_flip_ioctl(struct drm_device *dev,
			     void *data, struct drm_file *file_priv)
{
	struct drm_mode_crtc_page_flip *page_flip = data;
	struct drm_crtc *crtc;
4631
	struct drm_framebuffer *fb = NULL;
4632 4633 4634 4635 4636 4637 4638 4639
	struct drm_pending_vblank_event *e = NULL;
	unsigned long flags;
	int ret = -EINVAL;

	if (page_flip->flags & ~DRM_MODE_PAGE_FLIP_FLAGS ||
	    page_flip->reserved != 0)
		return -EINVAL;

4640 4641 4642
	if ((page_flip->flags & DRM_MODE_PAGE_FLIP_ASYNC) && !dev->mode_config.async_page_flip)
		return -EINVAL;

R
Rob Clark 已提交
4643 4644
	crtc = drm_crtc_find(dev, page_flip->crtc_id);
	if (!crtc)
4645
		return -ENOENT;
4646

D
Daniel Vetter 已提交
4647
	drm_modeset_lock_crtc(crtc, crtc->primary);
4648
	if (crtc->primary->fb == NULL) {
4649 4650 4651 4652 4653 4654 4655 4656
		/* The framebuffer is currently unbound, presumably
		 * due to a hotplug event, that userspace has not
		 * yet discovered.
		 */
		ret = -EBUSY;
		goto out;
	}

4657 4658 4659
	if (crtc->funcs->page_flip == NULL)
		goto out;

4660
	fb = drm_framebuffer_lookup(dev, page_flip->fb_id);
4661 4662
	if (!fb) {
		ret = -ENOENT;
4663
		goto out;
4664
	}
4665

4666 4667
	ret = drm_crtc_check_viewport(crtc, crtc->x, crtc->y, &crtc->mode, fb);
	if (ret)
4668 4669
		goto out;

4670
	if (crtc->primary->fb->pixel_format != fb->pixel_format) {
4671 4672 4673 4674 4675
		DRM_DEBUG_KMS("Page flip is not allowed to change frame buffer format.\n");
		ret = -EINVAL;
		goto out;
	}

4676 4677 4678 4679 4680 4681 4682 4683 4684 4685 4686 4687 4688 4689 4690 4691 4692 4693
	if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
		ret = -ENOMEM;
		spin_lock_irqsave(&dev->event_lock, flags);
		if (file_priv->event_space < sizeof e->event) {
			spin_unlock_irqrestore(&dev->event_lock, flags);
			goto out;
		}
		file_priv->event_space -= sizeof e->event;
		spin_unlock_irqrestore(&dev->event_lock, flags);

		e = kzalloc(sizeof *e, GFP_KERNEL);
		if (e == NULL) {
			spin_lock_irqsave(&dev->event_lock, flags);
			file_priv->event_space += sizeof e->event;
			spin_unlock_irqrestore(&dev->event_lock, flags);
			goto out;
		}

4694
		e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
4695 4696 4697 4698 4699 4700 4701 4702
		e->event.base.length = sizeof e->event;
		e->event.user_data = page_flip->user_data;
		e->base.event = &e->event.base;
		e->base.file_priv = file_priv;
		e->base.destroy =
			(void (*) (struct drm_pending_event *)) kfree;
	}

4703
	crtc->primary->old_fb = crtc->primary->fb;
4704
	ret = crtc->funcs->page_flip(crtc, fb, e, page_flip->flags);
4705
	if (ret) {
4706 4707 4708 4709 4710 4711
		if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
			spin_lock_irqsave(&dev->event_lock, flags);
			file_priv->event_space += sizeof e->event;
			spin_unlock_irqrestore(&dev->event_lock, flags);
			kfree(e);
		}
4712
		/* Keep the old fb, don't unref it. */
4713
		crtc->primary->old_fb = NULL;
4714
	} else {
4715 4716 4717 4718 4719 4720
		/*
		 * Warn if the driver hasn't properly updated the crtc->fb
		 * field to reflect that the new framebuffer is now used.
		 * Failing to do so will screw with the reference counting
		 * on framebuffers.
		 */
4721
		WARN_ON(crtc->primary->fb != fb);
4722 4723
		/* Unref only the old framebuffer. */
		fb = NULL;
4724 4725 4726
	}

out:
4727 4728
	if (fb)
		drm_framebuffer_unreference(fb);
4729 4730 4731
	if (crtc->primary->old_fb)
		drm_framebuffer_unreference(crtc->primary->old_fb);
	crtc->primary->old_fb = NULL;
4732
	drm_modeset_unlock_crtc(crtc);
4733

4734 4735
	return ret;
}
4736

4737 4738 4739 4740 4741 4742 4743 4744
/**
 * drm_mode_config_reset - call ->reset callbacks
 * @dev: drm device
 *
 * This functions calls all the crtc's, encoder's and connector's ->reset
 * callback. Drivers can use this in e.g. their driver load or resume code to
 * reset hardware and software state.
 */
4745 4746 4747
void drm_mode_config_reset(struct drm_device *dev)
{
	struct drm_crtc *crtc;
D
Daniel Vetter 已提交
4748
	struct drm_plane *plane;
4749 4750 4751
	struct drm_encoder *encoder;
	struct drm_connector *connector;

D
Daniel Vetter 已提交
4752 4753 4754 4755
	list_for_each_entry(plane, &dev->mode_config.plane_list, head)
		if (plane->funcs->reset)
			plane->funcs->reset(plane);

4756 4757 4758 4759 4760 4761 4762 4763
	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
		if (crtc->funcs->reset)
			crtc->funcs->reset(crtc);

	list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
		if (encoder->funcs->reset)
			encoder->funcs->reset(encoder);

4764 4765 4766
	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
		connector->status = connector_status_unknown;

4767 4768
		if (connector->funcs->reset)
			connector->funcs->reset(connector);
4769
	}
4770 4771
}
EXPORT_SYMBOL(drm_mode_config_reset);
4772

4773 4774 4775 4776 4777 4778 4779 4780 4781 4782 4783 4784 4785 4786 4787 4788 4789
/**
 * drm_mode_create_dumb_ioctl - create a dumb backing storage buffer
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * This creates a new dumb buffer in the driver's backing storage manager (GEM,
 * TTM or something else entirely) and returns the resulting buffer handle. This
 * handle can then be wrapped up into a framebuffer modeset object.
 *
 * Note that userspace is not allowed to use such objects for render
 * acceleration - drivers must create their own private ioctls for such a use
 * case.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4790
 * Zero on success, negative errno on failure.
4791
 */
4792 4793 4794 4795
int drm_mode_create_dumb_ioctl(struct drm_device *dev,
			       void *data, struct drm_file *file_priv)
{
	struct drm_mode_create_dumb *args = data;
4796
	u32 cpp, stride, size;
4797 4798 4799

	if (!dev->driver->dumb_create)
		return -ENOSYS;
4800 4801 4802 4803
	if (!args->width || !args->height || !args->bpp)
		return -EINVAL;

	/* overflow checks for 32bit size calculations */
4804
	/* NOTE: DIV_ROUND_UP() can overflow */
4805
	cpp = DIV_ROUND_UP(args->bpp, 8);
4806
	if (!cpp || cpp > 0xffffffffU / args->width)
4807 4808 4809 4810 4811 4812 4813 4814 4815 4816
		return -EINVAL;
	stride = cpp * args->width;
	if (args->height > 0xffffffffU / stride)
		return -EINVAL;

	/* test for wrap-around */
	size = args->height * stride;
	if (PAGE_ALIGN(size) == 0)
		return -EINVAL;

4817 4818 4819 4820 4821 4822 4823 4824 4825 4826
	/*
	 * handle, pitch and size are output parameters. Zero them out to
	 * prevent drivers from accidentally using uninitialized data. Since
	 * not all existing userspace is clearing these fields properly we
	 * cannot reject IOCTL with garbage in them.
	 */
	args->handle = 0;
	args->pitch = 0;
	args->size = 0;

4827 4828 4829
	return dev->driver->dumb_create(file_priv, dev, args);
}

4830 4831 4832 4833 4834 4835 4836 4837 4838 4839 4840 4841
/**
 * drm_mode_mmap_dumb_ioctl - create an mmap offset for a dumb backing storage buffer
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * Allocate an offset in the drm device node's address space to be able to
 * memory map a dumb buffer.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4842
 * Zero on success, negative errno on failure.
4843
 */
4844 4845 4846 4847 4848 4849 4850 4851 4852 4853 4854 4855
int drm_mode_mmap_dumb_ioctl(struct drm_device *dev,
			     void *data, struct drm_file *file_priv)
{
	struct drm_mode_map_dumb *args = data;

	/* call driver ioctl to get mmap offset */
	if (!dev->driver->dumb_map_offset)
		return -ENOSYS;

	return dev->driver->dumb_map_offset(file_priv, dev, args->handle, &args->offset);
}

4856 4857 4858 4859 4860 4861 4862 4863 4864 4865 4866 4867 4868
/**
 * drm_mode_destroy_dumb_ioctl - destroy a dumb backing strage buffer
 * @dev: DRM device
 * @data: ioctl data
 * @file_priv: DRM file info
 *
 * This destroys the userspace handle for the given dumb backing storage buffer.
 * Since buffer objects must be reference counted in the kernel a buffer object
 * won't be immediately freed if a framebuffer modeset object still uses it.
 *
 * Called by the user via ioctl.
 *
 * Returns:
D
Daniel Vetter 已提交
4869
 * Zero on success, negative errno on failure.
4870
 */
4871 4872 4873 4874 4875 4876 4877 4878 4879 4880
int drm_mode_destroy_dumb_ioctl(struct drm_device *dev,
				void *data, struct drm_file *file_priv)
{
	struct drm_mode_destroy_dumb *args = data;

	if (!dev->driver->dumb_destroy)
		return -ENOSYS;

	return dev->driver->dumb_destroy(file_priv, dev, args->handle);
}
4881

4882 4883 4884 4885 4886 4887 4888 4889
/**
 * drm_fb_get_bpp_depth - get the bpp/depth values for format
 * @format: pixel format (DRM_FORMAT_*)
 * @depth: storage for the depth value
 * @bpp: storage for the bpp value
 *
 * This only supports RGB formats here for compat with code that doesn't use
 * pixel formats directly yet.
4890 4891 4892 4893 4894
 */
void drm_fb_get_bpp_depth(uint32_t format, unsigned int *depth,
			  int *bpp)
{
	switch (format) {
4895
	case DRM_FORMAT_C8:
V
Ville Syrjälä 已提交
4896 4897
	case DRM_FORMAT_RGB332:
	case DRM_FORMAT_BGR233:
4898 4899 4900
		*depth = 8;
		*bpp = 8;
		break;
V
Ville Syrjälä 已提交
4901 4902 4903 4904 4905 4906 4907 4908
	case DRM_FORMAT_XRGB1555:
	case DRM_FORMAT_XBGR1555:
	case DRM_FORMAT_RGBX5551:
	case DRM_FORMAT_BGRX5551:
	case DRM_FORMAT_ARGB1555:
	case DRM_FORMAT_ABGR1555:
	case DRM_FORMAT_RGBA5551:
	case DRM_FORMAT_BGRA5551:
4909 4910 4911
		*depth = 15;
		*bpp = 16;
		break;
V
Ville Syrjälä 已提交
4912 4913
	case DRM_FORMAT_RGB565:
	case DRM_FORMAT_BGR565:
4914 4915 4916
		*depth = 16;
		*bpp = 16;
		break;
V
Ville Syrjälä 已提交
4917 4918 4919 4920 4921 4922 4923 4924 4925
	case DRM_FORMAT_RGB888:
	case DRM_FORMAT_BGR888:
		*depth = 24;
		*bpp = 24;
		break;
	case DRM_FORMAT_XRGB8888:
	case DRM_FORMAT_XBGR8888:
	case DRM_FORMAT_RGBX8888:
	case DRM_FORMAT_BGRX8888:
4926 4927 4928
		*depth = 24;
		*bpp = 32;
		break;
V
Ville Syrjälä 已提交
4929 4930 4931 4932 4933 4934 4935 4936
	case DRM_FORMAT_XRGB2101010:
	case DRM_FORMAT_XBGR2101010:
	case DRM_FORMAT_RGBX1010102:
	case DRM_FORMAT_BGRX1010102:
	case DRM_FORMAT_ARGB2101010:
	case DRM_FORMAT_ABGR2101010:
	case DRM_FORMAT_RGBA1010102:
	case DRM_FORMAT_BGRA1010102:
4937 4938 4939
		*depth = 30;
		*bpp = 32;
		break;
V
Ville Syrjälä 已提交
4940 4941 4942 4943
	case DRM_FORMAT_ARGB8888:
	case DRM_FORMAT_ABGR8888:
	case DRM_FORMAT_RGBA8888:
	case DRM_FORMAT_BGRA8888:
4944 4945 4946 4947
		*depth = 32;
		*bpp = 32;
		break;
	default:
4948 4949
		DRM_DEBUG_KMS("unsupported pixel format %s\n",
			      drm_get_format_name(format));
4950 4951 4952 4953 4954 4955
		*depth = 0;
		*bpp = 0;
		break;
	}
}
EXPORT_SYMBOL(drm_fb_get_bpp_depth);
4956 4957 4958 4959 4960

/**
 * drm_format_num_planes - get the number of planes for format
 * @format: pixel format (DRM_FORMAT_*)
 *
4961
 * Returns:
4962 4963 4964 4965 4966 4967 4968 4969 4970 4971 4972 4973 4974 4975 4976 4977 4978 4979 4980 4981
 * The number of planes used by the specified pixel format.
 */
int drm_format_num_planes(uint32_t format)
{
	switch (format) {
	case DRM_FORMAT_YUV410:
	case DRM_FORMAT_YVU410:
	case DRM_FORMAT_YUV411:
	case DRM_FORMAT_YVU411:
	case DRM_FORMAT_YUV420:
	case DRM_FORMAT_YVU420:
	case DRM_FORMAT_YUV422:
	case DRM_FORMAT_YVU422:
	case DRM_FORMAT_YUV444:
	case DRM_FORMAT_YVU444:
		return 3;
	case DRM_FORMAT_NV12:
	case DRM_FORMAT_NV21:
	case DRM_FORMAT_NV16:
	case DRM_FORMAT_NV61:
4982 4983
	case DRM_FORMAT_NV24:
	case DRM_FORMAT_NV42:
4984 4985 4986 4987 4988 4989
		return 2;
	default:
		return 1;
	}
}
EXPORT_SYMBOL(drm_format_num_planes);
4990 4991 4992 4993 4994 4995

/**
 * drm_format_plane_cpp - determine the bytes per pixel value
 * @format: pixel format (DRM_FORMAT_*)
 * @plane: plane index
 *
4996
 * Returns:
4997 4998 4999 5000 5001 5002 5003 5004 5005 5006 5007 5008 5009 5010 5011 5012 5013 5014 5015 5016
 * The bytes per pixel value for the specified plane.
 */
int drm_format_plane_cpp(uint32_t format, int plane)
{
	unsigned int depth;
	int bpp;

	if (plane >= drm_format_num_planes(format))
		return 0;

	switch (format) {
	case DRM_FORMAT_YUYV:
	case DRM_FORMAT_YVYU:
	case DRM_FORMAT_UYVY:
	case DRM_FORMAT_VYUY:
		return 2;
	case DRM_FORMAT_NV12:
	case DRM_FORMAT_NV21:
	case DRM_FORMAT_NV16:
	case DRM_FORMAT_NV61:
5017 5018
	case DRM_FORMAT_NV24:
	case DRM_FORMAT_NV42:
5019 5020 5021 5022 5023 5024 5025 5026 5027 5028 5029 5030 5031 5032 5033 5034 5035 5036
		return plane ? 2 : 1;
	case DRM_FORMAT_YUV410:
	case DRM_FORMAT_YVU410:
	case DRM_FORMAT_YUV411:
	case DRM_FORMAT_YVU411:
	case DRM_FORMAT_YUV420:
	case DRM_FORMAT_YVU420:
	case DRM_FORMAT_YUV422:
	case DRM_FORMAT_YVU422:
	case DRM_FORMAT_YUV444:
	case DRM_FORMAT_YVU444:
		return 1;
	default:
		drm_fb_get_bpp_depth(format, &depth, &bpp);
		return bpp >> 3;
	}
}
EXPORT_SYMBOL(drm_format_plane_cpp);
5037 5038 5039 5040 5041

/**
 * drm_format_horz_chroma_subsampling - get the horizontal chroma subsampling factor
 * @format: pixel format (DRM_FORMAT_*)
 *
5042
 * Returns:
5043 5044 5045 5046 5047 5048 5049 5050 5051 5052 5053 5054 5055 5056 5057 5058 5059 5060 5061 5062 5063 5064 5065 5066 5067 5068 5069 5070 5071 5072 5073 5074 5075 5076
 * The horizontal chroma subsampling factor for the
 * specified pixel format.
 */
int drm_format_horz_chroma_subsampling(uint32_t format)
{
	switch (format) {
	case DRM_FORMAT_YUV411:
	case DRM_FORMAT_YVU411:
	case DRM_FORMAT_YUV410:
	case DRM_FORMAT_YVU410:
		return 4;
	case DRM_FORMAT_YUYV:
	case DRM_FORMAT_YVYU:
	case DRM_FORMAT_UYVY:
	case DRM_FORMAT_VYUY:
	case DRM_FORMAT_NV12:
	case DRM_FORMAT_NV21:
	case DRM_FORMAT_NV16:
	case DRM_FORMAT_NV61:
	case DRM_FORMAT_YUV422:
	case DRM_FORMAT_YVU422:
	case DRM_FORMAT_YUV420:
	case DRM_FORMAT_YVU420:
		return 2;
	default:
		return 1;
	}
}
EXPORT_SYMBOL(drm_format_horz_chroma_subsampling);

/**
 * drm_format_vert_chroma_subsampling - get the vertical chroma subsampling factor
 * @format: pixel format (DRM_FORMAT_*)
 *
5077
 * Returns:
5078 5079 5080 5081 5082 5083 5084 5085 5086 5087 5088 5089 5090 5091 5092 5093 5094 5095 5096
 * The vertical chroma subsampling factor for the
 * specified pixel format.
 */
int drm_format_vert_chroma_subsampling(uint32_t format)
{
	switch (format) {
	case DRM_FORMAT_YUV410:
	case DRM_FORMAT_YVU410:
		return 4;
	case DRM_FORMAT_YUV420:
	case DRM_FORMAT_YVU420:
	case DRM_FORMAT_NV12:
	case DRM_FORMAT_NV21:
		return 2;
	default:
		return 1;
	}
}
EXPORT_SYMBOL(drm_format_vert_chroma_subsampling);
5097

5098 5099 5100 5101 5102 5103 5104 5105 5106 5107 5108 5109 5110 5111 5112 5113 5114 5115 5116 5117 5118 5119 5120 5121 5122 5123 5124 5125 5126 5127
/**
 * drm_rotation_simplify() - Try to simplify the rotation
 * @rotation: Rotation to be simplified
 * @supported_rotations: Supported rotations
 *
 * Attempt to simplify the rotation to a form that is supported.
 * Eg. if the hardware supports everything except DRM_REFLECT_X
 * one could call this function like this:
 *
 * drm_rotation_simplify(rotation, BIT(DRM_ROTATE_0) |
 *                       BIT(DRM_ROTATE_90) | BIT(DRM_ROTATE_180) |
 *                       BIT(DRM_ROTATE_270) | BIT(DRM_REFLECT_Y));
 *
 * to eliminate the DRM_ROTATE_X flag. Depending on what kind of
 * transforms the hardware supports, this function may not
 * be able to produce a supported transform, so the caller should
 * check the result afterwards.
 */
unsigned int drm_rotation_simplify(unsigned int rotation,
				   unsigned int supported_rotations)
{
	if (rotation & ~supported_rotations) {
		rotation ^= BIT(DRM_REFLECT_X) | BIT(DRM_REFLECT_Y);
		rotation = (rotation & ~0xf) | BIT((ffs(rotation & 0xf) + 1) % 4);
	}

	return rotation;
}
EXPORT_SYMBOL(drm_rotation_simplify);

5128 5129 5130 5131 5132 5133 5134 5135 5136 5137 5138 5139 5140 5141 5142
/**
 * drm_mode_config_init - initialize DRM mode_configuration structure
 * @dev: DRM device
 *
 * Initialize @dev's mode_config structure, used for tracking the graphics
 * configuration of @dev.
 *
 * Since this initializes the modeset locks, no locking is possible. Which is no
 * problem, since this should happen single threaded at init time. It is the
 * driver's problem to ensure this guarantee.
 *
 */
void drm_mode_config_init(struct drm_device *dev)
{
	mutex_init(&dev->mode_config.mutex);
5143
	drm_modeset_lock_init(&dev->mode_config.connection_mutex);
5144 5145 5146 5147 5148
	mutex_init(&dev->mode_config.idr_mutex);
	mutex_init(&dev->mode_config.fb_lock);
	INIT_LIST_HEAD(&dev->mode_config.fb_list);
	INIT_LIST_HEAD(&dev->mode_config.crtc_list);
	INIT_LIST_HEAD(&dev->mode_config.connector_list);
S
Sean Paul 已提交
5149
	INIT_LIST_HEAD(&dev->mode_config.bridge_list);
5150 5151 5152 5153 5154
	INIT_LIST_HEAD(&dev->mode_config.encoder_list);
	INIT_LIST_HEAD(&dev->mode_config.property_list);
	INIT_LIST_HEAD(&dev->mode_config.property_blob_list);
	INIT_LIST_HEAD(&dev->mode_config.plane_list);
	idr_init(&dev->mode_config.crtc_idr);
D
Dave Airlie 已提交
5155
	idr_init(&dev->mode_config.tile_idr);
5156 5157 5158

	drm_modeset_lock_all(dev);
	drm_mode_create_standard_connector_properties(dev);
R
Rob Clark 已提交
5159
	drm_mode_create_standard_plane_properties(dev);
5160 5161 5162 5163 5164 5165 5166
	drm_modeset_unlock_all(dev);

	/* Just to be sure */
	dev->mode_config.num_fb = 0;
	dev->mode_config.num_connector = 0;
	dev->mode_config.num_crtc = 0;
	dev->mode_config.num_encoder = 0;
5167 5168
	dev->mode_config.num_overlay_plane = 0;
	dev->mode_config.num_total_plane = 0;
5169 5170 5171 5172 5173 5174 5175 5176 5177 5178 5179 5180 5181 5182 5183 5184 5185 5186 5187 5188 5189
}
EXPORT_SYMBOL(drm_mode_config_init);

/**
 * drm_mode_config_cleanup - free up DRM mode_config info
 * @dev: DRM device
 *
 * Free up all the connectors and CRTCs associated with this DRM device, then
 * free up the framebuffers and associated buffer objects.
 *
 * Note that since this /should/ happen single-threaded at driver/device
 * teardown time, no locking is required. It's the driver's job to ensure that
 * this guarantee actually holds true.
 *
 * FIXME: cleanup any dangling user buffer objects too
 */
void drm_mode_config_cleanup(struct drm_device *dev)
{
	struct drm_connector *connector, *ot;
	struct drm_crtc *crtc, *ct;
	struct drm_encoder *encoder, *enct;
S
Sean Paul 已提交
5190
	struct drm_bridge *bridge, *brt;
5191 5192 5193 5194 5195 5196 5197 5198 5199 5200
	struct drm_framebuffer *fb, *fbt;
	struct drm_property *property, *pt;
	struct drm_property_blob *blob, *bt;
	struct drm_plane *plane, *plt;

	list_for_each_entry_safe(encoder, enct, &dev->mode_config.encoder_list,
				 head) {
		encoder->funcs->destroy(encoder);
	}

S
Sean Paul 已提交
5201 5202 5203 5204 5205
	list_for_each_entry_safe(bridge, brt,
				 &dev->mode_config.bridge_list, head) {
		bridge->funcs->destroy(bridge);
	}

5206 5207 5208 5209 5210 5211 5212 5213 5214 5215 5216 5217 5218 5219 5220 5221 5222 5223 5224 5225 5226 5227 5228 5229 5230 5231 5232 5233 5234 5235 5236 5237 5238 5239 5240 5241 5242
	list_for_each_entry_safe(connector, ot,
				 &dev->mode_config.connector_list, head) {
		connector->funcs->destroy(connector);
	}

	list_for_each_entry_safe(property, pt, &dev->mode_config.property_list,
				 head) {
		drm_property_destroy(dev, property);
	}

	list_for_each_entry_safe(blob, bt, &dev->mode_config.property_blob_list,
				 head) {
		drm_property_destroy_blob(dev, blob);
	}

	/*
	 * Single-threaded teardown context, so it's not required to grab the
	 * fb_lock to protect against concurrent fb_list access. Contrary, it
	 * would actually deadlock with the drm_framebuffer_cleanup function.
	 *
	 * Also, if there are any framebuffers left, that's a driver leak now,
	 * so politely WARN about this.
	 */
	WARN_ON(!list_empty(&dev->mode_config.fb_list));
	list_for_each_entry_safe(fb, fbt, &dev->mode_config.fb_list, head) {
		drm_framebuffer_remove(fb);
	}

	list_for_each_entry_safe(plane, plt, &dev->mode_config.plane_list,
				 head) {
		plane->funcs->destroy(plane);
	}

	list_for_each_entry_safe(crtc, ct, &dev->mode_config.crtc_list, head) {
		crtc->funcs->destroy(crtc);
	}

D
Dave Airlie 已提交
5243
	idr_destroy(&dev->mode_config.tile_idr);
5244
	idr_destroy(&dev->mode_config.crtc_idr);
5245
	drm_modeset_lock_fini(&dev->mode_config.connection_mutex);
5246 5247
}
EXPORT_SYMBOL(drm_mode_config_cleanup);
5248 5249 5250 5251 5252 5253 5254 5255 5256 5257 5258 5259 5260 5261 5262 5263 5264 5265

struct drm_property *drm_mode_create_rotation_property(struct drm_device *dev,
						       unsigned int supported_rotations)
{
	static const struct drm_prop_enum_list props[] = {
		{ DRM_ROTATE_0,   "rotate-0" },
		{ DRM_ROTATE_90,  "rotate-90" },
		{ DRM_ROTATE_180, "rotate-180" },
		{ DRM_ROTATE_270, "rotate-270" },
		{ DRM_REFLECT_X,  "reflect-x" },
		{ DRM_REFLECT_Y,  "reflect-y" },
	};

	return drm_property_create_bitmask(dev, 0, "rotation",
					   props, ARRAY_SIZE(props),
					   supported_rotations);
}
EXPORT_SYMBOL(drm_mode_create_rotation_property);
D
Dave Airlie 已提交
5266 5267 5268 5269 5270 5271 5272 5273 5274 5275 5276 5277 5278 5279 5280 5281 5282 5283 5284 5285 5286 5287 5288 5289 5290 5291 5292 5293 5294 5295 5296 5297 5298 5299 5300 5301 5302 5303 5304 5305 5306 5307 5308 5309 5310 5311 5312 5313 5314 5315 5316 5317 5318 5319 5320 5321 5322 5323 5324 5325 5326 5327 5328 5329 5330 5331 5332 5333 5334 5335 5336 5337 5338 5339 5340 5341 5342 5343 5344 5345 5346 5347 5348 5349 5350 5351 5352 5353 5354 5355 5356 5357 5358 5359 5360 5361 5362

/**
 * DOC: Tile group
 *
 * Tile groups are used to represent tiled monitors with a unique
 * integer identifier. Tiled monitors using DisplayID v1.3 have
 * a unique 8-byte handle, we store this in a tile group, so we
 * have a common identifier for all tiles in a monitor group.
 */
static void drm_tile_group_free(struct kref *kref)
{
	struct drm_tile_group *tg = container_of(kref, struct drm_tile_group, refcount);
	struct drm_device *dev = tg->dev;
	mutex_lock(&dev->mode_config.idr_mutex);
	idr_remove(&dev->mode_config.tile_idr, tg->id);
	mutex_unlock(&dev->mode_config.idr_mutex);
	kfree(tg);
}

/**
 * drm_mode_put_tile_group - drop a reference to a tile group.
 * @dev: DRM device
 * @tg: tile group to drop reference to.
 *
 * drop reference to tile group and free if 0.
 */
void drm_mode_put_tile_group(struct drm_device *dev,
			     struct drm_tile_group *tg)
{
	kref_put(&tg->refcount, drm_tile_group_free);
}

/**
 * drm_mode_get_tile_group - get a reference to an existing tile group
 * @dev: DRM device
 * @topology: 8-bytes unique per monitor.
 *
 * Use the unique bytes to get a reference to an existing tile group.
 *
 * RETURNS:
 * tile group or NULL if not found.
 */
struct drm_tile_group *drm_mode_get_tile_group(struct drm_device *dev,
					       char topology[8])
{
	struct drm_tile_group *tg;
	int id;
	mutex_lock(&dev->mode_config.idr_mutex);
	idr_for_each_entry(&dev->mode_config.tile_idr, tg, id) {
		if (!memcmp(tg->group_data, topology, 8)) {
			if (!kref_get_unless_zero(&tg->refcount))
				tg = NULL;
			mutex_unlock(&dev->mode_config.idr_mutex);
			return tg;
		}
	}
	mutex_unlock(&dev->mode_config.idr_mutex);
	return NULL;
}

/**
 * drm_mode_create_tile_group - create a tile group from a displayid description
 * @dev: DRM device
 * @topology: 8-bytes unique per monitor.
 *
 * Create a tile group for the unique monitor, and get a unique
 * identifier for the tile group.
 *
 * RETURNS:
 * new tile group or error.
 */
struct drm_tile_group *drm_mode_create_tile_group(struct drm_device *dev,
						  char topology[8])
{
	struct drm_tile_group *tg;
	int ret;

	tg = kzalloc(sizeof(*tg), GFP_KERNEL);
	if (!tg)
		return ERR_PTR(-ENOMEM);

	kref_init(&tg->refcount);
	memcpy(tg->group_data, topology, 8);
	tg->dev = dev;

	mutex_lock(&dev->mode_config.idr_mutex);
	ret = idr_alloc(&dev->mode_config.tile_idr, tg, 1, 0, GFP_KERNEL);
	if (ret >= 0) {
		tg->id = ret;
	} else {
		kfree(tg);
		tg = ERR_PTR(ret);
	}

	mutex_unlock(&dev->mode_config.idr_mutex);
	return tg;
}