xref: /openbmc/linux/drivers/gpu/drm/drm_atomic.c (revision ba61bb17)
1 /*
2  * Copyright (C) 2014 Red Hat
3  * Copyright (C) 2014 Intel Corp.
4  *
5  * Permission is hereby granted, free of charge, to any person obtaining a
6  * copy of this software and associated documentation files (the "Software"),
7  * to deal in the Software without restriction, including without limitation
8  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
9  * and/or sell copies of the Software, and to permit persons to whom the
10  * Software is furnished to do so, subject to the following conditions:
11  *
12  * The above copyright notice and this permission notice shall be included in
13  * all copies or substantial portions of the Software.
14  *
15  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
18  * THE COPYRIGHT HOLDER(S) OR AUTHOR(S) BE LIABLE FOR ANY CLAIM, DAMAGES OR
19  * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
20  * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
21  * OTHER DEALINGS IN THE SOFTWARE.
22  *
23  * Authors:
24  * Rob Clark <robdclark@gmail.com>
25  * Daniel Vetter <daniel.vetter@ffwll.ch>
26  */
27 
28 
29 #include <drm/drmP.h>
30 #include <drm/drm_atomic.h>
31 #include <drm/drm_mode.h>
32 #include <drm/drm_print.h>
33 #include <drm/drm_writeback.h>
34 #include <linux/sync_file.h>
35 
36 #include "drm_crtc_internal.h"
37 #include "drm_internal.h"
38 
39 void __drm_crtc_commit_free(struct kref *kref)
40 {
41 	struct drm_crtc_commit *commit =
42 		container_of(kref, struct drm_crtc_commit, ref);
43 
44 	kfree(commit);
45 }
46 EXPORT_SYMBOL(__drm_crtc_commit_free);
47 
48 /**
49  * drm_atomic_state_default_release -
50  * release memory initialized by drm_atomic_state_init
51  * @state: atomic state
52  *
53  * Free all the memory allocated by drm_atomic_state_init.
54  * This should only be used by drivers which are still subclassing
55  * &drm_atomic_state and haven't switched to &drm_private_state yet.
56  */
57 void drm_atomic_state_default_release(struct drm_atomic_state *state)
58 {
59 	kfree(state->connectors);
60 	kfree(state->crtcs);
61 	kfree(state->planes);
62 	kfree(state->private_objs);
63 }
64 EXPORT_SYMBOL(drm_atomic_state_default_release);
65 
66 /**
67  * drm_atomic_state_init - init new atomic state
68  * @dev: DRM device
69  * @state: atomic state
70  *
71  * Default implementation for filling in a new atomic state.
72  * This should only be used by drivers which are still subclassing
73  * &drm_atomic_state and haven't switched to &drm_private_state yet.
74  */
75 int
76 drm_atomic_state_init(struct drm_device *dev, struct drm_atomic_state *state)
77 {
78 	kref_init(&state->ref);
79 
80 	/* TODO legacy paths should maybe do a better job about
81 	 * setting this appropriately?
82 	 */
83 	state->allow_modeset = true;
84 
85 	state->crtcs = kcalloc(dev->mode_config.num_crtc,
86 			       sizeof(*state->crtcs), GFP_KERNEL);
87 	if (!state->crtcs)
88 		goto fail;
89 	state->planes = kcalloc(dev->mode_config.num_total_plane,
90 				sizeof(*state->planes), GFP_KERNEL);
91 	if (!state->planes)
92 		goto fail;
93 
94 	state->dev = dev;
95 
96 	DRM_DEBUG_ATOMIC("Allocated atomic state %p\n", state);
97 
98 	return 0;
99 fail:
100 	drm_atomic_state_default_release(state);
101 	return -ENOMEM;
102 }
103 EXPORT_SYMBOL(drm_atomic_state_init);
104 
105 /**
106  * drm_atomic_state_alloc - allocate atomic state
107  * @dev: DRM device
108  *
109  * This allocates an empty atomic state to track updates.
110  */
111 struct drm_atomic_state *
112 drm_atomic_state_alloc(struct drm_device *dev)
113 {
114 	struct drm_mode_config *config = &dev->mode_config;
115 
116 	if (!config->funcs->atomic_state_alloc) {
117 		struct drm_atomic_state *state;
118 
119 		state = kzalloc(sizeof(*state), GFP_KERNEL);
120 		if (!state)
121 			return NULL;
122 		if (drm_atomic_state_init(dev, state) < 0) {
123 			kfree(state);
124 			return NULL;
125 		}
126 		return state;
127 	}
128 
129 	return config->funcs->atomic_state_alloc(dev);
130 }
131 EXPORT_SYMBOL(drm_atomic_state_alloc);
132 
133 /**
134  * drm_atomic_state_default_clear - clear base atomic state
135  * @state: atomic state
136  *
137  * Default implementation for clearing atomic state.
138  * This should only be used by drivers which are still subclassing
139  * &drm_atomic_state and haven't switched to &drm_private_state yet.
140  */
141 void drm_atomic_state_default_clear(struct drm_atomic_state *state)
142 {
143 	struct drm_device *dev = state->dev;
144 	struct drm_mode_config *config = &dev->mode_config;
145 	int i;
146 
147 	DRM_DEBUG_ATOMIC("Clearing atomic state %p\n", state);
148 
149 	for (i = 0; i < state->num_connector; i++) {
150 		struct drm_connector *connector = state->connectors[i].ptr;
151 
152 		if (!connector)
153 			continue;
154 
155 		connector->funcs->atomic_destroy_state(connector,
156 						       state->connectors[i].state);
157 		state->connectors[i].ptr = NULL;
158 		state->connectors[i].state = NULL;
159 		state->connectors[i].old_state = NULL;
160 		state->connectors[i].new_state = NULL;
161 		drm_connector_put(connector);
162 	}
163 
164 	for (i = 0; i < config->num_crtc; i++) {
165 		struct drm_crtc *crtc = state->crtcs[i].ptr;
166 
167 		if (!crtc)
168 			continue;
169 
170 		crtc->funcs->atomic_destroy_state(crtc,
171 						  state->crtcs[i].state);
172 
173 		state->crtcs[i].ptr = NULL;
174 		state->crtcs[i].state = NULL;
175 		state->crtcs[i].old_state = NULL;
176 		state->crtcs[i].new_state = NULL;
177 	}
178 
179 	for (i = 0; i < config->num_total_plane; i++) {
180 		struct drm_plane *plane = state->planes[i].ptr;
181 
182 		if (!plane)
183 			continue;
184 
185 		plane->funcs->atomic_destroy_state(plane,
186 						   state->planes[i].state);
187 		state->planes[i].ptr = NULL;
188 		state->planes[i].state = NULL;
189 		state->planes[i].old_state = NULL;
190 		state->planes[i].new_state = NULL;
191 	}
192 
193 	for (i = 0; i < state->num_private_objs; i++) {
194 		struct drm_private_obj *obj = state->private_objs[i].ptr;
195 
196 		obj->funcs->atomic_destroy_state(obj,
197 						 state->private_objs[i].state);
198 		state->private_objs[i].ptr = NULL;
199 		state->private_objs[i].state = NULL;
200 		state->private_objs[i].old_state = NULL;
201 		state->private_objs[i].new_state = NULL;
202 	}
203 	state->num_private_objs = 0;
204 
205 	if (state->fake_commit) {
206 		drm_crtc_commit_put(state->fake_commit);
207 		state->fake_commit = NULL;
208 	}
209 }
210 EXPORT_SYMBOL(drm_atomic_state_default_clear);
211 
212 /**
213  * drm_atomic_state_clear - clear state object
214  * @state: atomic state
215  *
216  * When the w/w mutex algorithm detects a deadlock we need to back off and drop
217  * all locks. So someone else could sneak in and change the current modeset
218  * configuration. Which means that all the state assembled in @state is no
219  * longer an atomic update to the current state, but to some arbitrary earlier
220  * state. Which could break assumptions the driver's
221  * &drm_mode_config_funcs.atomic_check likely relies on.
222  *
223  * Hence we must clear all cached state and completely start over, using this
224  * function.
225  */
226 void drm_atomic_state_clear(struct drm_atomic_state *state)
227 {
228 	struct drm_device *dev = state->dev;
229 	struct drm_mode_config *config = &dev->mode_config;
230 
231 	if (config->funcs->atomic_state_clear)
232 		config->funcs->atomic_state_clear(state);
233 	else
234 		drm_atomic_state_default_clear(state);
235 }
236 EXPORT_SYMBOL(drm_atomic_state_clear);
237 
238 /**
239  * __drm_atomic_state_free - free all memory for an atomic state
240  * @ref: This atomic state to deallocate
241  *
242  * This frees all memory associated with an atomic state, including all the
243  * per-object state for planes, crtcs and connectors.
244  */
245 void __drm_atomic_state_free(struct kref *ref)
246 {
247 	struct drm_atomic_state *state = container_of(ref, typeof(*state), ref);
248 	struct drm_mode_config *config = &state->dev->mode_config;
249 
250 	drm_atomic_state_clear(state);
251 
252 	DRM_DEBUG_ATOMIC("Freeing atomic state %p\n", state);
253 
254 	if (config->funcs->atomic_state_free) {
255 		config->funcs->atomic_state_free(state);
256 	} else {
257 		drm_atomic_state_default_release(state);
258 		kfree(state);
259 	}
260 }
261 EXPORT_SYMBOL(__drm_atomic_state_free);
262 
263 /**
264  * drm_atomic_get_crtc_state - get crtc state
265  * @state: global atomic state object
266  * @crtc: crtc to get state object for
267  *
268  * This function returns the crtc state for the given crtc, allocating it if
269  * needed. It will also grab the relevant crtc lock to make sure that the state
270  * is consistent.
271  *
272  * Returns:
273  *
274  * Either the allocated state or the error code encoded into the pointer. When
275  * the error is EDEADLK then the w/w mutex code has detected a deadlock and the
276  * entire atomic sequence must be restarted. All other errors are fatal.
277  */
278 struct drm_crtc_state *
279 drm_atomic_get_crtc_state(struct drm_atomic_state *state,
280 			  struct drm_crtc *crtc)
281 {
282 	int ret, index = drm_crtc_index(crtc);
283 	struct drm_crtc_state *crtc_state;
284 
285 	WARN_ON(!state->acquire_ctx);
286 
287 	crtc_state = drm_atomic_get_existing_crtc_state(state, crtc);
288 	if (crtc_state)
289 		return crtc_state;
290 
291 	ret = drm_modeset_lock(&crtc->mutex, state->acquire_ctx);
292 	if (ret)
293 		return ERR_PTR(ret);
294 
295 	crtc_state = crtc->funcs->atomic_duplicate_state(crtc);
296 	if (!crtc_state)
297 		return ERR_PTR(-ENOMEM);
298 
299 	state->crtcs[index].state = crtc_state;
300 	state->crtcs[index].old_state = crtc->state;
301 	state->crtcs[index].new_state = crtc_state;
302 	state->crtcs[index].ptr = crtc;
303 	crtc_state->state = state;
304 
305 	DRM_DEBUG_ATOMIC("Added [CRTC:%d:%s] %p state to %p\n",
306 			 crtc->base.id, crtc->name, crtc_state, state);
307 
308 	return crtc_state;
309 }
310 EXPORT_SYMBOL(drm_atomic_get_crtc_state);
311 
312 static void set_out_fence_for_crtc(struct drm_atomic_state *state,
313 				   struct drm_crtc *crtc, s32 __user *fence_ptr)
314 {
315 	state->crtcs[drm_crtc_index(crtc)].out_fence_ptr = fence_ptr;
316 }
317 
318 static s32 __user *get_out_fence_for_crtc(struct drm_atomic_state *state,
319 					  struct drm_crtc *crtc)
320 {
321 	s32 __user *fence_ptr;
322 
323 	fence_ptr = state->crtcs[drm_crtc_index(crtc)].out_fence_ptr;
324 	state->crtcs[drm_crtc_index(crtc)].out_fence_ptr = NULL;
325 
326 	return fence_ptr;
327 }
328 
329 static int set_out_fence_for_connector(struct drm_atomic_state *state,
330 					struct drm_connector *connector,
331 					s32 __user *fence_ptr)
332 {
333 	unsigned int index = drm_connector_index(connector);
334 
335 	if (!fence_ptr)
336 		return 0;
337 
338 	if (put_user(-1, fence_ptr))
339 		return -EFAULT;
340 
341 	state->connectors[index].out_fence_ptr = fence_ptr;
342 
343 	return 0;
344 }
345 
346 static s32 __user *get_out_fence_for_connector(struct drm_atomic_state *state,
347 					       struct drm_connector *connector)
348 {
349 	unsigned int index = drm_connector_index(connector);
350 	s32 __user *fence_ptr;
351 
352 	fence_ptr = state->connectors[index].out_fence_ptr;
353 	state->connectors[index].out_fence_ptr = NULL;
354 
355 	return fence_ptr;
356 }
357 
358 /**
359  * drm_atomic_set_mode_for_crtc - set mode for CRTC
360  * @state: the CRTC whose incoming state to update
361  * @mode: kernel-internal mode to use for the CRTC, or NULL to disable
362  *
363  * Set a mode (originating from the kernel) on the desired CRTC state and update
364  * the enable property.
365  *
366  * RETURNS:
367  * Zero on success, error code on failure. Cannot return -EDEADLK.
368  */
369 int drm_atomic_set_mode_for_crtc(struct drm_crtc_state *state,
370 				 const struct drm_display_mode *mode)
371 {
372 	struct drm_crtc *crtc = state->crtc;
373 	struct drm_mode_modeinfo umode;
374 
375 	/* Early return for no change. */
376 	if (mode && memcmp(&state->mode, mode, sizeof(*mode)) == 0)
377 		return 0;
378 
379 	drm_property_blob_put(state->mode_blob);
380 	state->mode_blob = NULL;
381 
382 	if (mode) {
383 		drm_mode_convert_to_umode(&umode, mode);
384 		state->mode_blob =
385 			drm_property_create_blob(state->crtc->dev,
386 		                                 sizeof(umode),
387 		                                 &umode);
388 		if (IS_ERR(state->mode_blob))
389 			return PTR_ERR(state->mode_blob);
390 
391 		drm_mode_copy(&state->mode, mode);
392 		state->enable = true;
393 		DRM_DEBUG_ATOMIC("Set [MODE:%s] for [CRTC:%d:%s] state %p\n",
394 				 mode->name, crtc->base.id, crtc->name, state);
395 	} else {
396 		memset(&state->mode, 0, sizeof(state->mode));
397 		state->enable = false;
398 		DRM_DEBUG_ATOMIC("Set [NOMODE] for [CRTC:%d:%s] state %p\n",
399 				 crtc->base.id, crtc->name, state);
400 	}
401 
402 	return 0;
403 }
404 EXPORT_SYMBOL(drm_atomic_set_mode_for_crtc);
405 
406 /**
407  * drm_atomic_set_mode_prop_for_crtc - set mode for CRTC
408  * @state: the CRTC whose incoming state to update
409  * @blob: pointer to blob property to use for mode
410  *
411  * Set a mode (originating from a blob property) on the desired CRTC state.
412  * This function will take a reference on the blob property for the CRTC state,
413  * and release the reference held on the state's existing mode property, if any
414  * was set.
415  *
416  * RETURNS:
417  * Zero on success, error code on failure. Cannot return -EDEADLK.
418  */
419 int drm_atomic_set_mode_prop_for_crtc(struct drm_crtc_state *state,
420                                       struct drm_property_blob *blob)
421 {
422 	struct drm_crtc *crtc = state->crtc;
423 
424 	if (blob == state->mode_blob)
425 		return 0;
426 
427 	drm_property_blob_put(state->mode_blob);
428 	state->mode_blob = NULL;
429 
430 	memset(&state->mode, 0, sizeof(state->mode));
431 
432 	if (blob) {
433 		int ret;
434 
435 		if (blob->length != sizeof(struct drm_mode_modeinfo)) {
436 			DRM_DEBUG_ATOMIC("[CRTC:%d:%s] bad mode blob length: %zu\n",
437 					 crtc->base.id, crtc->name,
438 					 blob->length);
439 			return -EINVAL;
440 		}
441 
442 		ret = drm_mode_convert_umode(crtc->dev,
443 					     &state->mode, blob->data);
444 		if (ret) {
445 			DRM_DEBUG_ATOMIC("[CRTC:%d:%s] invalid mode (ret=%d, status=%s):\n",
446 					 crtc->base.id, crtc->name,
447 					 ret, drm_get_mode_status_name(state->mode.status));
448 			drm_mode_debug_printmodeline(&state->mode);
449 			return -EINVAL;
450 		}
451 
452 		state->mode_blob = drm_property_blob_get(blob);
453 		state->enable = true;
454 		DRM_DEBUG_ATOMIC("Set [MODE:%s] for [CRTC:%d:%s] state %p\n",
455 				 state->mode.name, crtc->base.id, crtc->name,
456 				 state);
457 	} else {
458 		state->enable = false;
459 		DRM_DEBUG_ATOMIC("Set [NOMODE] for [CRTC:%d:%s] state %p\n",
460 				 crtc->base.id, crtc->name, state);
461 	}
462 
463 	return 0;
464 }
465 EXPORT_SYMBOL(drm_atomic_set_mode_prop_for_crtc);
466 
467 /**
468  * drm_atomic_replace_property_blob_from_id - lookup the new blob and replace the old one with it
469  * @dev: DRM device
470  * @blob: a pointer to the member blob to be replaced
471  * @blob_id: ID of the new blob
472  * @expected_size: total expected size of the blob data (in bytes)
473  * @expected_elem_size: expected element size of the blob data (in bytes)
474  * @replaced: did the blob get replaced?
475  *
476  * Replace @blob with another blob with the ID @blob_id. If @blob_id is zero
477  * @blob becomes NULL.
478  *
479  * If @expected_size is positive the new blob length is expected to be equal
480  * to @expected_size bytes. If @expected_elem_size is positive the new blob
481  * length is expected to be a multiple of @expected_elem_size bytes. Otherwise
482  * an error is returned.
483  *
484  * @replaced will indicate to the caller whether the blob was replaced or not.
485  * If the old and new blobs were in fact the same blob @replaced will be false
486  * otherwise it will be true.
487  *
488  * RETURNS:
489  * Zero on success, error code on failure.
490  */
491 static int
492 drm_atomic_replace_property_blob_from_id(struct drm_device *dev,
493 					 struct drm_property_blob **blob,
494 					 uint64_t blob_id,
495 					 ssize_t expected_size,
496 					 ssize_t expected_elem_size,
497 					 bool *replaced)
498 {
499 	struct drm_property_blob *new_blob = NULL;
500 
501 	if (blob_id != 0) {
502 		new_blob = drm_property_lookup_blob(dev, blob_id);
503 		if (new_blob == NULL)
504 			return -EINVAL;
505 
506 		if (expected_size > 0 &&
507 		    new_blob->length != expected_size) {
508 			drm_property_blob_put(new_blob);
509 			return -EINVAL;
510 		}
511 		if (expected_elem_size > 0 &&
512 		    new_blob->length % expected_elem_size != 0) {
513 			drm_property_blob_put(new_blob);
514 			return -EINVAL;
515 		}
516 	}
517 
518 	*replaced |= drm_property_replace_blob(blob, new_blob);
519 	drm_property_blob_put(new_blob);
520 
521 	return 0;
522 }
523 
524 /**
525  * drm_atomic_crtc_set_property - set property on CRTC
526  * @crtc: the drm CRTC to set a property on
527  * @state: the state object to update with the new property value
528  * @property: the property to set
529  * @val: the new property value
530  *
531  * This function handles generic/core properties and calls out to driver's
532  * &drm_crtc_funcs.atomic_set_property for driver properties. To ensure
533  * consistent behavior you must call this function rather than the driver hook
534  * directly.
535  *
536  * RETURNS:
537  * Zero on success, error code on failure
538  */
539 int drm_atomic_crtc_set_property(struct drm_crtc *crtc,
540 		struct drm_crtc_state *state, struct drm_property *property,
541 		uint64_t val)
542 {
543 	struct drm_device *dev = crtc->dev;
544 	struct drm_mode_config *config = &dev->mode_config;
545 	bool replaced = false;
546 	int ret;
547 
548 	if (property == config->prop_active)
549 		state->active = val;
550 	else if (property == config->prop_mode_id) {
551 		struct drm_property_blob *mode =
552 			drm_property_lookup_blob(dev, val);
553 		ret = drm_atomic_set_mode_prop_for_crtc(state, mode);
554 		drm_property_blob_put(mode);
555 		return ret;
556 	} else if (property == config->degamma_lut_property) {
557 		ret = drm_atomic_replace_property_blob_from_id(dev,
558 					&state->degamma_lut,
559 					val,
560 					-1, sizeof(struct drm_color_lut),
561 					&replaced);
562 		state->color_mgmt_changed |= replaced;
563 		return ret;
564 	} else if (property == config->ctm_property) {
565 		ret = drm_atomic_replace_property_blob_from_id(dev,
566 					&state->ctm,
567 					val,
568 					sizeof(struct drm_color_ctm), -1,
569 					&replaced);
570 		state->color_mgmt_changed |= replaced;
571 		return ret;
572 	} else if (property == config->gamma_lut_property) {
573 		ret = drm_atomic_replace_property_blob_from_id(dev,
574 					&state->gamma_lut,
575 					val,
576 					-1, sizeof(struct drm_color_lut),
577 					&replaced);
578 		state->color_mgmt_changed |= replaced;
579 		return ret;
580 	} else if (property == config->prop_out_fence_ptr) {
581 		s32 __user *fence_ptr = u64_to_user_ptr(val);
582 
583 		if (!fence_ptr)
584 			return 0;
585 
586 		if (put_user(-1, fence_ptr))
587 			return -EFAULT;
588 
589 		set_out_fence_for_crtc(state->state, crtc, fence_ptr);
590 	} else if (crtc->funcs->atomic_set_property) {
591 		return crtc->funcs->atomic_set_property(crtc, state, property, val);
592 	} else {
593 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] unknown property [PROP:%d:%s]]\n",
594 				 crtc->base.id, crtc->name,
595 				 property->base.id, property->name);
596 		return -EINVAL;
597 	}
598 
599 	return 0;
600 }
601 EXPORT_SYMBOL(drm_atomic_crtc_set_property);
602 
603 /**
604  * drm_atomic_crtc_get_property - get property value from CRTC state
605  * @crtc: the drm CRTC to set a property on
606  * @state: the state object to get the property value from
607  * @property: the property to set
608  * @val: return location for the property value
609  *
610  * This function handles generic/core properties and calls out to driver's
611  * &drm_crtc_funcs.atomic_get_property for driver properties. To ensure
612  * consistent behavior you must call this function rather than the driver hook
613  * directly.
614  *
615  * RETURNS:
616  * Zero on success, error code on failure
617  */
618 static int
619 drm_atomic_crtc_get_property(struct drm_crtc *crtc,
620 		const struct drm_crtc_state *state,
621 		struct drm_property *property, uint64_t *val)
622 {
623 	struct drm_device *dev = crtc->dev;
624 	struct drm_mode_config *config = &dev->mode_config;
625 
626 	if (property == config->prop_active)
627 		*val = state->active;
628 	else if (property == config->prop_mode_id)
629 		*val = (state->mode_blob) ? state->mode_blob->base.id : 0;
630 	else if (property == config->degamma_lut_property)
631 		*val = (state->degamma_lut) ? state->degamma_lut->base.id : 0;
632 	else if (property == config->ctm_property)
633 		*val = (state->ctm) ? state->ctm->base.id : 0;
634 	else if (property == config->gamma_lut_property)
635 		*val = (state->gamma_lut) ? state->gamma_lut->base.id : 0;
636 	else if (property == config->prop_out_fence_ptr)
637 		*val = 0;
638 	else if (crtc->funcs->atomic_get_property)
639 		return crtc->funcs->atomic_get_property(crtc, state, property, val);
640 	else
641 		return -EINVAL;
642 
643 	return 0;
644 }
645 
646 /**
647  * drm_atomic_crtc_check - check crtc state
648  * @crtc: crtc to check
649  * @state: crtc state to check
650  *
651  * Provides core sanity checks for crtc state.
652  *
653  * RETURNS:
654  * Zero on success, error code on failure
655  */
656 static int drm_atomic_crtc_check(struct drm_crtc *crtc,
657 		struct drm_crtc_state *state)
658 {
659 	/* NOTE: we explicitly don't enforce constraints such as primary
660 	 * layer covering entire screen, since that is something we want
661 	 * to allow (on hw that supports it).  For hw that does not, it
662 	 * should be checked in driver's crtc->atomic_check() vfunc.
663 	 *
664 	 * TODO: Add generic modeset state checks once we support those.
665 	 */
666 
667 	if (state->active && !state->enable) {
668 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] active without enabled\n",
669 				 crtc->base.id, crtc->name);
670 		return -EINVAL;
671 	}
672 
673 	/* The state->enable vs. state->mode_blob checks can be WARN_ON,
674 	 * as this is a kernel-internal detail that userspace should never
675 	 * be able to trigger. */
676 	if (drm_core_check_feature(crtc->dev, DRIVER_ATOMIC) &&
677 	    WARN_ON(state->enable && !state->mode_blob)) {
678 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] enabled without mode blob\n",
679 				 crtc->base.id, crtc->name);
680 		return -EINVAL;
681 	}
682 
683 	if (drm_core_check_feature(crtc->dev, DRIVER_ATOMIC) &&
684 	    WARN_ON(!state->enable && state->mode_blob)) {
685 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] disabled with mode blob\n",
686 				 crtc->base.id, crtc->name);
687 		return -EINVAL;
688 	}
689 
690 	/*
691 	 * Reject event generation for when a CRTC is off and stays off.
692 	 * It wouldn't be hard to implement this, but userspace has a track
693 	 * record of happily burning through 100% cpu (or worse, crash) when the
694 	 * display pipe is suspended. To avoid all that fun just reject updates
695 	 * that ask for events since likely that indicates a bug in the
696 	 * compositor's drawing loop. This is consistent with the vblank IOCTL
697 	 * and legacy page_flip IOCTL which also reject service on a disabled
698 	 * pipe.
699 	 */
700 	if (state->event && !state->active && !crtc->state->active) {
701 		DRM_DEBUG_ATOMIC("[CRTC:%d:%s] requesting event but off\n",
702 				 crtc->base.id, crtc->name);
703 		return -EINVAL;
704 	}
705 
706 	return 0;
707 }
708 
709 static void drm_atomic_crtc_print_state(struct drm_printer *p,
710 		const struct drm_crtc_state *state)
711 {
712 	struct drm_crtc *crtc = state->crtc;
713 
714 	drm_printf(p, "crtc[%u]: %s\n", crtc->base.id, crtc->name);
715 	drm_printf(p, "\tenable=%d\n", state->enable);
716 	drm_printf(p, "\tactive=%d\n", state->active);
717 	drm_printf(p, "\tplanes_changed=%d\n", state->planes_changed);
718 	drm_printf(p, "\tmode_changed=%d\n", state->mode_changed);
719 	drm_printf(p, "\tactive_changed=%d\n", state->active_changed);
720 	drm_printf(p, "\tconnectors_changed=%d\n", state->connectors_changed);
721 	drm_printf(p, "\tcolor_mgmt_changed=%d\n", state->color_mgmt_changed);
722 	drm_printf(p, "\tplane_mask=%x\n", state->plane_mask);
723 	drm_printf(p, "\tconnector_mask=%x\n", state->connector_mask);
724 	drm_printf(p, "\tencoder_mask=%x\n", state->encoder_mask);
725 	drm_printf(p, "\tmode: " DRM_MODE_FMT "\n", DRM_MODE_ARG(&state->mode));
726 
727 	if (crtc->funcs->atomic_print_state)
728 		crtc->funcs->atomic_print_state(p, state);
729 }
730 
731 /**
732  * drm_atomic_connector_check - check connector state
733  * @connector: connector to check
734  * @state: connector state to check
735  *
736  * Provides core sanity checks for connector state.
737  *
738  * RETURNS:
739  * Zero on success, error code on failure
740  */
741 static int drm_atomic_connector_check(struct drm_connector *connector,
742 		struct drm_connector_state *state)
743 {
744 	struct drm_crtc_state *crtc_state;
745 	struct drm_writeback_job *writeback_job = state->writeback_job;
746 
747 	if ((connector->connector_type != DRM_MODE_CONNECTOR_WRITEBACK) || !writeback_job)
748 		return 0;
749 
750 	if (writeback_job->fb && !state->crtc) {
751 		DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] framebuffer without CRTC\n",
752 				 connector->base.id, connector->name);
753 		return -EINVAL;
754 	}
755 
756 	if (state->crtc)
757 		crtc_state = drm_atomic_get_existing_crtc_state(state->state,
758 								state->crtc);
759 
760 	if (writeback_job->fb && !crtc_state->active) {
761 		DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] has framebuffer, but [CRTC:%d] is off\n",
762 				 connector->base.id, connector->name,
763 				 state->crtc->base.id);
764 		return -EINVAL;
765 	}
766 
767 	if (writeback_job->out_fence && !writeback_job->fb) {
768 		DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] requesting out-fence without framebuffer\n",
769 				 connector->base.id, connector->name);
770 		return -EINVAL;
771 	}
772 
773 	return 0;
774 }
775 
776 /**
777  * drm_atomic_get_plane_state - get plane state
778  * @state: global atomic state object
779  * @plane: plane to get state object for
780  *
781  * This function returns the plane state for the given plane, allocating it if
782  * needed. It will also grab the relevant plane lock to make sure that the state
783  * is consistent.
784  *
785  * Returns:
786  *
787  * Either the allocated state or the error code encoded into the pointer. When
788  * the error is EDEADLK then the w/w mutex code has detected a deadlock and the
789  * entire atomic sequence must be restarted. All other errors are fatal.
790  */
791 struct drm_plane_state *
792 drm_atomic_get_plane_state(struct drm_atomic_state *state,
793 			  struct drm_plane *plane)
794 {
795 	int ret, index = drm_plane_index(plane);
796 	struct drm_plane_state *plane_state;
797 
798 	WARN_ON(!state->acquire_ctx);
799 
800 	/* the legacy pointers should never be set */
801 	WARN_ON(plane->fb);
802 	WARN_ON(plane->old_fb);
803 	WARN_ON(plane->crtc);
804 
805 	plane_state = drm_atomic_get_existing_plane_state(state, plane);
806 	if (plane_state)
807 		return plane_state;
808 
809 	ret = drm_modeset_lock(&plane->mutex, state->acquire_ctx);
810 	if (ret)
811 		return ERR_PTR(ret);
812 
813 	plane_state = plane->funcs->atomic_duplicate_state(plane);
814 	if (!plane_state)
815 		return ERR_PTR(-ENOMEM);
816 
817 	state->planes[index].state = plane_state;
818 	state->planes[index].ptr = plane;
819 	state->planes[index].old_state = plane->state;
820 	state->planes[index].new_state = plane_state;
821 	plane_state->state = state;
822 
823 	DRM_DEBUG_ATOMIC("Added [PLANE:%d:%s] %p state to %p\n",
824 			 plane->base.id, plane->name, plane_state, state);
825 
826 	if (plane_state->crtc) {
827 		struct drm_crtc_state *crtc_state;
828 
829 		crtc_state = drm_atomic_get_crtc_state(state,
830 						       plane_state->crtc);
831 		if (IS_ERR(crtc_state))
832 			return ERR_CAST(crtc_state);
833 	}
834 
835 	return plane_state;
836 }
837 EXPORT_SYMBOL(drm_atomic_get_plane_state);
838 
839 /**
840  * drm_atomic_plane_set_property - set property on plane
841  * @plane: the drm plane to set a property on
842  * @state: the state object to update with the new property value
843  * @property: the property to set
844  * @val: the new property value
845  *
846  * This function handles generic/core properties and calls out to driver's
847  * &drm_plane_funcs.atomic_set_property for driver properties.  To ensure
848  * consistent behavior you must call this function rather than the driver hook
849  * directly.
850  *
851  * RETURNS:
852  * Zero on success, error code on failure
853  */
854 static int drm_atomic_plane_set_property(struct drm_plane *plane,
855 		struct drm_plane_state *state, struct drm_property *property,
856 		uint64_t val)
857 {
858 	struct drm_device *dev = plane->dev;
859 	struct drm_mode_config *config = &dev->mode_config;
860 
861 	if (property == config->prop_fb_id) {
862 		struct drm_framebuffer *fb = drm_framebuffer_lookup(dev, NULL, val);
863 		drm_atomic_set_fb_for_plane(state, fb);
864 		if (fb)
865 			drm_framebuffer_put(fb);
866 	} else if (property == config->prop_in_fence_fd) {
867 		if (state->fence)
868 			return -EINVAL;
869 
870 		if (U642I64(val) == -1)
871 			return 0;
872 
873 		state->fence = sync_file_get_fence(val);
874 		if (!state->fence)
875 			return -EINVAL;
876 
877 	} else if (property == config->prop_crtc_id) {
878 		struct drm_crtc *crtc = drm_crtc_find(dev, NULL, val);
879 		return drm_atomic_set_crtc_for_plane(state, crtc);
880 	} else if (property == config->prop_crtc_x) {
881 		state->crtc_x = U642I64(val);
882 	} else if (property == config->prop_crtc_y) {
883 		state->crtc_y = U642I64(val);
884 	} else if (property == config->prop_crtc_w) {
885 		state->crtc_w = val;
886 	} else if (property == config->prop_crtc_h) {
887 		state->crtc_h = val;
888 	} else if (property == config->prop_src_x) {
889 		state->src_x = val;
890 	} else if (property == config->prop_src_y) {
891 		state->src_y = val;
892 	} else if (property == config->prop_src_w) {
893 		state->src_w = val;
894 	} else if (property == config->prop_src_h) {
895 		state->src_h = val;
896 	} else if (property == plane->alpha_property) {
897 		state->alpha = val;
898 	} else if (property == plane->rotation_property) {
899 		if (!is_power_of_2(val & DRM_MODE_ROTATE_MASK)) {
900 			DRM_DEBUG_ATOMIC("[PLANE:%d:%s] bad rotation bitmask: 0x%llx\n",
901 					 plane->base.id, plane->name, val);
902 			return -EINVAL;
903 		}
904 		state->rotation = val;
905 	} else if (property == plane->zpos_property) {
906 		state->zpos = val;
907 	} else if (property == plane->color_encoding_property) {
908 		state->color_encoding = val;
909 	} else if (property == plane->color_range_property) {
910 		state->color_range = val;
911 	} else if (plane->funcs->atomic_set_property) {
912 		return plane->funcs->atomic_set_property(plane, state,
913 				property, val);
914 	} else {
915 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] unknown property [PROP:%d:%s]]\n",
916 				 plane->base.id, plane->name,
917 				 property->base.id, property->name);
918 		return -EINVAL;
919 	}
920 
921 	return 0;
922 }
923 
924 /**
925  * drm_atomic_plane_get_property - get property value from plane state
926  * @plane: the drm plane to set a property on
927  * @state: the state object to get the property value from
928  * @property: the property to set
929  * @val: return location for the property value
930  *
931  * This function handles generic/core properties and calls out to driver's
932  * &drm_plane_funcs.atomic_get_property for driver properties.  To ensure
933  * consistent behavior you must call this function rather than the driver hook
934  * directly.
935  *
936  * RETURNS:
937  * Zero on success, error code on failure
938  */
939 static int
940 drm_atomic_plane_get_property(struct drm_plane *plane,
941 		const struct drm_plane_state *state,
942 		struct drm_property *property, uint64_t *val)
943 {
944 	struct drm_device *dev = plane->dev;
945 	struct drm_mode_config *config = &dev->mode_config;
946 
947 	if (property == config->prop_fb_id) {
948 		*val = (state->fb) ? state->fb->base.id : 0;
949 	} else if (property == config->prop_in_fence_fd) {
950 		*val = -1;
951 	} else if (property == config->prop_crtc_id) {
952 		*val = (state->crtc) ? state->crtc->base.id : 0;
953 	} else if (property == config->prop_crtc_x) {
954 		*val = I642U64(state->crtc_x);
955 	} else if (property == config->prop_crtc_y) {
956 		*val = I642U64(state->crtc_y);
957 	} else if (property == config->prop_crtc_w) {
958 		*val = state->crtc_w;
959 	} else if (property == config->prop_crtc_h) {
960 		*val = state->crtc_h;
961 	} else if (property == config->prop_src_x) {
962 		*val = state->src_x;
963 	} else if (property == config->prop_src_y) {
964 		*val = state->src_y;
965 	} else if (property == config->prop_src_w) {
966 		*val = state->src_w;
967 	} else if (property == config->prop_src_h) {
968 		*val = state->src_h;
969 	} else if (property == plane->alpha_property) {
970 		*val = state->alpha;
971 	} else if (property == plane->rotation_property) {
972 		*val = state->rotation;
973 	} else if (property == plane->zpos_property) {
974 		*val = state->zpos;
975 	} else if (property == plane->color_encoding_property) {
976 		*val = state->color_encoding;
977 	} else if (property == plane->color_range_property) {
978 		*val = state->color_range;
979 	} else if (plane->funcs->atomic_get_property) {
980 		return plane->funcs->atomic_get_property(plane, state, property, val);
981 	} else {
982 		return -EINVAL;
983 	}
984 
985 	return 0;
986 }
987 
988 static bool
989 plane_switching_crtc(struct drm_atomic_state *state,
990 		     struct drm_plane *plane,
991 		     struct drm_plane_state *plane_state)
992 {
993 	if (!plane->state->crtc || !plane_state->crtc)
994 		return false;
995 
996 	if (plane->state->crtc == plane_state->crtc)
997 		return false;
998 
999 	/* This could be refined, but currently there's no helper or driver code
1000 	 * to implement direct switching of active planes nor userspace to take
1001 	 * advantage of more direct plane switching without the intermediate
1002 	 * full OFF state.
1003 	 */
1004 	return true;
1005 }
1006 
1007 /**
1008  * drm_atomic_plane_check - check plane state
1009  * @plane: plane to check
1010  * @state: plane state to check
1011  *
1012  * Provides core sanity checks for plane state.
1013  *
1014  * RETURNS:
1015  * Zero on success, error code on failure
1016  */
1017 static int drm_atomic_plane_check(struct drm_plane *plane,
1018 		struct drm_plane_state *state)
1019 {
1020 	unsigned int fb_width, fb_height;
1021 	int ret;
1022 
1023 	/* either *both* CRTC and FB must be set, or neither */
1024 	if (state->crtc && !state->fb) {
1025 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] CRTC set but no FB\n",
1026 				 plane->base.id, plane->name);
1027 		return -EINVAL;
1028 	} else if (state->fb && !state->crtc) {
1029 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] FB set but no CRTC\n",
1030 				 plane->base.id, plane->name);
1031 		return -EINVAL;
1032 	}
1033 
1034 	/* if disabled, we don't care about the rest of the state: */
1035 	if (!state->crtc)
1036 		return 0;
1037 
1038 	/* Check whether this plane is usable on this CRTC */
1039 	if (!(plane->possible_crtcs & drm_crtc_mask(state->crtc))) {
1040 		DRM_DEBUG_ATOMIC("Invalid [CRTC:%d:%s] for [PLANE:%d:%s]\n",
1041 				 state->crtc->base.id, state->crtc->name,
1042 				 plane->base.id, plane->name);
1043 		return -EINVAL;
1044 	}
1045 
1046 	/* Check whether this plane supports the fb pixel format. */
1047 	ret = drm_plane_check_pixel_format(plane, state->fb->format->format,
1048 					   state->fb->modifier);
1049 	if (ret) {
1050 		struct drm_format_name_buf format_name;
1051 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] invalid pixel format %s, modifier 0x%llx\n",
1052 				 plane->base.id, plane->name,
1053 				 drm_get_format_name(state->fb->format->format,
1054 						     &format_name),
1055 				 state->fb->modifier);
1056 		return ret;
1057 	}
1058 
1059 	/* Give drivers some help against integer overflows */
1060 	if (state->crtc_w > INT_MAX ||
1061 	    state->crtc_x > INT_MAX - (int32_t) state->crtc_w ||
1062 	    state->crtc_h > INT_MAX ||
1063 	    state->crtc_y > INT_MAX - (int32_t) state->crtc_h) {
1064 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] invalid CRTC coordinates %ux%u+%d+%d\n",
1065 				 plane->base.id, plane->name,
1066 				 state->crtc_w, state->crtc_h,
1067 				 state->crtc_x, state->crtc_y);
1068 		return -ERANGE;
1069 	}
1070 
1071 	fb_width = state->fb->width << 16;
1072 	fb_height = state->fb->height << 16;
1073 
1074 	/* Make sure source coordinates are inside the fb. */
1075 	if (state->src_w > fb_width ||
1076 	    state->src_x > fb_width - state->src_w ||
1077 	    state->src_h > fb_height ||
1078 	    state->src_y > fb_height - state->src_h) {
1079 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] invalid source coordinates "
1080 				 "%u.%06ux%u.%06u+%u.%06u+%u.%06u (fb %ux%u)\n",
1081 				 plane->base.id, plane->name,
1082 				 state->src_w >> 16, ((state->src_w & 0xffff) * 15625) >> 10,
1083 				 state->src_h >> 16, ((state->src_h & 0xffff) * 15625) >> 10,
1084 				 state->src_x >> 16, ((state->src_x & 0xffff) * 15625) >> 10,
1085 				 state->src_y >> 16, ((state->src_y & 0xffff) * 15625) >> 10,
1086 				 state->fb->width, state->fb->height);
1087 		return -ENOSPC;
1088 	}
1089 
1090 	if (plane_switching_crtc(state->state, plane, state)) {
1091 		DRM_DEBUG_ATOMIC("[PLANE:%d:%s] switching CRTC directly\n",
1092 				 plane->base.id, plane->name);
1093 		return -EINVAL;
1094 	}
1095 
1096 	return 0;
1097 }
1098 
1099 static void drm_atomic_plane_print_state(struct drm_printer *p,
1100 		const struct drm_plane_state *state)
1101 {
1102 	struct drm_plane *plane = state->plane;
1103 	struct drm_rect src  = drm_plane_state_src(state);
1104 	struct drm_rect dest = drm_plane_state_dest(state);
1105 
1106 	drm_printf(p, "plane[%u]: %s\n", plane->base.id, plane->name);
1107 	drm_printf(p, "\tcrtc=%s\n", state->crtc ? state->crtc->name : "(null)");
1108 	drm_printf(p, "\tfb=%u\n", state->fb ? state->fb->base.id : 0);
1109 	if (state->fb)
1110 		drm_framebuffer_print_info(p, 2, state->fb);
1111 	drm_printf(p, "\tcrtc-pos=" DRM_RECT_FMT "\n", DRM_RECT_ARG(&dest));
1112 	drm_printf(p, "\tsrc-pos=" DRM_RECT_FP_FMT "\n", DRM_RECT_FP_ARG(&src));
1113 	drm_printf(p, "\trotation=%x\n", state->rotation);
1114 	drm_printf(p, "\tcolor-encoding=%s\n",
1115 		   drm_get_color_encoding_name(state->color_encoding));
1116 	drm_printf(p, "\tcolor-range=%s\n",
1117 		   drm_get_color_range_name(state->color_range));
1118 
1119 	if (plane->funcs->atomic_print_state)
1120 		plane->funcs->atomic_print_state(p, state);
1121 }
1122 
1123 /**
1124  * DOC: handling driver private state
1125  *
1126  * Very often the DRM objects exposed to userspace in the atomic modeset api
1127  * (&drm_connector, &drm_crtc and &drm_plane) do not map neatly to the
1128  * underlying hardware. Especially for any kind of shared resources (e.g. shared
1129  * clocks, scaler units, bandwidth and fifo limits shared among a group of
1130  * planes or CRTCs, and so on) it makes sense to model these as independent
1131  * objects. Drivers then need to do similar state tracking and commit ordering for
1132  * such private (since not exposed to userpace) objects as the atomic core and
1133  * helpers already provide for connectors, planes and CRTCs.
1134  *
1135  * To make this easier on drivers the atomic core provides some support to track
1136  * driver private state objects using struct &drm_private_obj, with the
1137  * associated state struct &drm_private_state.
1138  *
1139  * Similar to userspace-exposed objects, private state structures can be
1140  * acquired by calling drm_atomic_get_private_obj_state(). Since this function
1141  * does not take care of locking, drivers should wrap it for each type of
1142  * private state object they have with the required call to drm_modeset_lock()
1143  * for the corresponding &drm_modeset_lock.
1144  *
1145  * All private state structures contained in a &drm_atomic_state update can be
1146  * iterated using for_each_oldnew_private_obj_in_state(),
1147  * for_each_new_private_obj_in_state() and for_each_old_private_obj_in_state().
1148  * Drivers are recommended to wrap these for each type of driver private state
1149  * object they have, filtering on &drm_private_obj.funcs using for_each_if(), at
1150  * least if they want to iterate over all objects of a given type.
1151  *
1152  * An earlier way to handle driver private state was by subclassing struct
1153  * &drm_atomic_state. But since that encourages non-standard ways to implement
1154  * the check/commit split atomic requires (by using e.g. "check and rollback or
1155  * commit instead" of "duplicate state, check, then either commit or release
1156  * duplicated state) it is deprecated in favour of using &drm_private_state.
1157  */
1158 
1159 /**
1160  * drm_atomic_private_obj_init - initialize private object
1161  * @obj: private object
1162  * @state: initial private object state
1163  * @funcs: pointer to the struct of function pointers that identify the object
1164  * type
1165  *
1166  * Initialize the private object, which can be embedded into any
1167  * driver private object that needs its own atomic state.
1168  */
1169 void
1170 drm_atomic_private_obj_init(struct drm_private_obj *obj,
1171 			    struct drm_private_state *state,
1172 			    const struct drm_private_state_funcs *funcs)
1173 {
1174 	memset(obj, 0, sizeof(*obj));
1175 
1176 	obj->state = state;
1177 	obj->funcs = funcs;
1178 }
1179 EXPORT_SYMBOL(drm_atomic_private_obj_init);
1180 
1181 /**
1182  * drm_atomic_private_obj_fini - finalize private object
1183  * @obj: private object
1184  *
1185  * Finalize the private object.
1186  */
1187 void
1188 drm_atomic_private_obj_fini(struct drm_private_obj *obj)
1189 {
1190 	obj->funcs->atomic_destroy_state(obj, obj->state);
1191 }
1192 EXPORT_SYMBOL(drm_atomic_private_obj_fini);
1193 
1194 /**
1195  * drm_atomic_get_private_obj_state - get private object state
1196  * @state: global atomic state
1197  * @obj: private object to get the state for
1198  *
1199  * This function returns the private object state for the given private object,
1200  * allocating the state if needed. It does not grab any locks as the caller is
1201  * expected to care of any required locking.
1202  *
1203  * RETURNS:
1204  *
1205  * Either the allocated state or the error code encoded into a pointer.
1206  */
1207 struct drm_private_state *
1208 drm_atomic_get_private_obj_state(struct drm_atomic_state *state,
1209 				 struct drm_private_obj *obj)
1210 {
1211 	int index, num_objs, i;
1212 	size_t size;
1213 	struct __drm_private_objs_state *arr;
1214 	struct drm_private_state *obj_state;
1215 
1216 	for (i = 0; i < state->num_private_objs; i++)
1217 		if (obj == state->private_objs[i].ptr)
1218 			return state->private_objs[i].state;
1219 
1220 	num_objs = state->num_private_objs + 1;
1221 	size = sizeof(*state->private_objs) * num_objs;
1222 	arr = krealloc(state->private_objs, size, GFP_KERNEL);
1223 	if (!arr)
1224 		return ERR_PTR(-ENOMEM);
1225 
1226 	state->private_objs = arr;
1227 	index = state->num_private_objs;
1228 	memset(&state->private_objs[index], 0, sizeof(*state->private_objs));
1229 
1230 	obj_state = obj->funcs->atomic_duplicate_state(obj);
1231 	if (!obj_state)
1232 		return ERR_PTR(-ENOMEM);
1233 
1234 	state->private_objs[index].state = obj_state;
1235 	state->private_objs[index].old_state = obj->state;
1236 	state->private_objs[index].new_state = obj_state;
1237 	state->private_objs[index].ptr = obj;
1238 	obj_state->state = state;
1239 
1240 	state->num_private_objs = num_objs;
1241 
1242 	DRM_DEBUG_ATOMIC("Added new private object %p state %p to %p\n",
1243 			 obj, obj_state, state);
1244 
1245 	return obj_state;
1246 }
1247 EXPORT_SYMBOL(drm_atomic_get_private_obj_state);
1248 
1249 /**
1250  * drm_atomic_get_connector_state - get connector state
1251  * @state: global atomic state object
1252  * @connector: connector to get state object for
1253  *
1254  * This function returns the connector state for the given connector,
1255  * allocating it if needed. It will also grab the relevant connector lock to
1256  * make sure that the state is consistent.
1257  *
1258  * Returns:
1259  *
1260  * Either the allocated state or the error code encoded into the pointer. When
1261  * the error is EDEADLK then the w/w mutex code has detected a deadlock and the
1262  * entire atomic sequence must be restarted. All other errors are fatal.
1263  */
1264 struct drm_connector_state *
1265 drm_atomic_get_connector_state(struct drm_atomic_state *state,
1266 			  struct drm_connector *connector)
1267 {
1268 	int ret, index;
1269 	struct drm_mode_config *config = &connector->dev->mode_config;
1270 	struct drm_connector_state *connector_state;
1271 
1272 	WARN_ON(!state->acquire_ctx);
1273 
1274 	ret = drm_modeset_lock(&config->connection_mutex, state->acquire_ctx);
1275 	if (ret)
1276 		return ERR_PTR(ret);
1277 
1278 	index = drm_connector_index(connector);
1279 
1280 	if (index >= state->num_connector) {
1281 		struct __drm_connnectors_state *c;
1282 		int alloc = max(index + 1, config->num_connector);
1283 
1284 		c = krealloc(state->connectors, alloc * sizeof(*state->connectors), GFP_KERNEL);
1285 		if (!c)
1286 			return ERR_PTR(-ENOMEM);
1287 
1288 		state->connectors = c;
1289 		memset(&state->connectors[state->num_connector], 0,
1290 		       sizeof(*state->connectors) * (alloc - state->num_connector));
1291 
1292 		state->num_connector = alloc;
1293 	}
1294 
1295 	if (state->connectors[index].state)
1296 		return state->connectors[index].state;
1297 
1298 	connector_state = connector->funcs->atomic_duplicate_state(connector);
1299 	if (!connector_state)
1300 		return ERR_PTR(-ENOMEM);
1301 
1302 	drm_connector_get(connector);
1303 	state->connectors[index].state = connector_state;
1304 	state->connectors[index].old_state = connector->state;
1305 	state->connectors[index].new_state = connector_state;
1306 	state->connectors[index].ptr = connector;
1307 	connector_state->state = state;
1308 
1309 	DRM_DEBUG_ATOMIC("Added [CONNECTOR:%d:%s] %p state to %p\n",
1310 			 connector->base.id, connector->name,
1311 			 connector_state, state);
1312 
1313 	if (connector_state->crtc) {
1314 		struct drm_crtc_state *crtc_state;
1315 
1316 		crtc_state = drm_atomic_get_crtc_state(state,
1317 						       connector_state->crtc);
1318 		if (IS_ERR(crtc_state))
1319 			return ERR_CAST(crtc_state);
1320 	}
1321 
1322 	return connector_state;
1323 }
1324 EXPORT_SYMBOL(drm_atomic_get_connector_state);
1325 
1326 /**
1327  * drm_atomic_connector_set_property - set property on connector.
1328  * @connector: the drm connector to set a property on
1329  * @state: the state object to update with the new property value
1330  * @property: the property to set
1331  * @val: the new property value
1332  *
1333  * This function handles generic/core properties and calls out to driver's
1334  * &drm_connector_funcs.atomic_set_property for driver properties.  To ensure
1335  * consistent behavior you must call this function rather than the driver hook
1336  * directly.
1337  *
1338  * RETURNS:
1339  * Zero on success, error code on failure
1340  */
1341 static int drm_atomic_connector_set_property(struct drm_connector *connector,
1342 		struct drm_connector_state *state, struct drm_property *property,
1343 		uint64_t val)
1344 {
1345 	struct drm_device *dev = connector->dev;
1346 	struct drm_mode_config *config = &dev->mode_config;
1347 
1348 	if (property == config->prop_crtc_id) {
1349 		struct drm_crtc *crtc = drm_crtc_find(dev, NULL, val);
1350 		return drm_atomic_set_crtc_for_connector(state, crtc);
1351 	} else if (property == config->dpms_property) {
1352 		/* setting DPMS property requires special handling, which
1353 		 * is done in legacy setprop path for us.  Disallow (for
1354 		 * now?) atomic writes to DPMS property:
1355 		 */
1356 		return -EINVAL;
1357 	} else if (property == config->tv_select_subconnector_property) {
1358 		state->tv.subconnector = val;
1359 	} else if (property == config->tv_left_margin_property) {
1360 		state->tv.margins.left = val;
1361 	} else if (property == config->tv_right_margin_property) {
1362 		state->tv.margins.right = val;
1363 	} else if (property == config->tv_top_margin_property) {
1364 		state->tv.margins.top = val;
1365 	} else if (property == config->tv_bottom_margin_property) {
1366 		state->tv.margins.bottom = val;
1367 	} else if (property == config->tv_mode_property) {
1368 		state->tv.mode = val;
1369 	} else if (property == config->tv_brightness_property) {
1370 		state->tv.brightness = val;
1371 	} else if (property == config->tv_contrast_property) {
1372 		state->tv.contrast = val;
1373 	} else if (property == config->tv_flicker_reduction_property) {
1374 		state->tv.flicker_reduction = val;
1375 	} else if (property == config->tv_overscan_property) {
1376 		state->tv.overscan = val;
1377 	} else if (property == config->tv_saturation_property) {
1378 		state->tv.saturation = val;
1379 	} else if (property == config->tv_hue_property) {
1380 		state->tv.hue = val;
1381 	} else if (property == config->link_status_property) {
1382 		/* Never downgrade from GOOD to BAD on userspace's request here,
1383 		 * only hw issues can do that.
1384 		 *
1385 		 * For an atomic property the userspace doesn't need to be able
1386 		 * to understand all the properties, but needs to be able to
1387 		 * restore the state it wants on VT switch. So if the userspace
1388 		 * tries to change the link_status from GOOD to BAD, driver
1389 		 * silently rejects it and returns a 0. This prevents userspace
1390 		 * from accidently breaking  the display when it restores the
1391 		 * state.
1392 		 */
1393 		if (state->link_status != DRM_LINK_STATUS_GOOD)
1394 			state->link_status = val;
1395 	} else if (property == config->aspect_ratio_property) {
1396 		state->picture_aspect_ratio = val;
1397 	} else if (property == config->content_type_property) {
1398 		state->content_type = val;
1399 	} else if (property == connector->scaling_mode_property) {
1400 		state->scaling_mode = val;
1401 	} else if (property == connector->content_protection_property) {
1402 		if (val == DRM_MODE_CONTENT_PROTECTION_ENABLED) {
1403 			DRM_DEBUG_KMS("only drivers can set CP Enabled\n");
1404 			return -EINVAL;
1405 		}
1406 		state->content_protection = val;
1407 	} else if (property == config->writeback_fb_id_property) {
1408 		struct drm_framebuffer *fb = drm_framebuffer_lookup(dev, NULL, val);
1409 		int ret = drm_atomic_set_writeback_fb_for_connector(state, fb);
1410 		if (fb)
1411 			drm_framebuffer_put(fb);
1412 		return ret;
1413 	} else if (property == config->writeback_out_fence_ptr_property) {
1414 		s32 __user *fence_ptr = u64_to_user_ptr(val);
1415 
1416 		return set_out_fence_for_connector(state->state, connector,
1417 						   fence_ptr);
1418 	} else if (connector->funcs->atomic_set_property) {
1419 		return connector->funcs->atomic_set_property(connector,
1420 				state, property, val);
1421 	} else {
1422 		DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] unknown property [PROP:%d:%s]]\n",
1423 				 connector->base.id, connector->name,
1424 				 property->base.id, property->name);
1425 		return -EINVAL;
1426 	}
1427 
1428 	return 0;
1429 }
1430 
1431 static void drm_atomic_connector_print_state(struct drm_printer *p,
1432 		const struct drm_connector_state *state)
1433 {
1434 	struct drm_connector *connector = state->connector;
1435 
1436 	drm_printf(p, "connector[%u]: %s\n", connector->base.id, connector->name);
1437 	drm_printf(p, "\tcrtc=%s\n", state->crtc ? state->crtc->name : "(null)");
1438 
1439 	if (connector->connector_type == DRM_MODE_CONNECTOR_WRITEBACK)
1440 		if (state->writeback_job && state->writeback_job->fb)
1441 			drm_printf(p, "\tfb=%d\n", state->writeback_job->fb->base.id);
1442 
1443 	if (connector->funcs->atomic_print_state)
1444 		connector->funcs->atomic_print_state(p, state);
1445 }
1446 
1447 /**
1448  * drm_atomic_connector_get_property - get property value from connector state
1449  * @connector: the drm connector to set a property on
1450  * @state: the state object to get the property value from
1451  * @property: the property to set
1452  * @val: return location for the property value
1453  *
1454  * This function handles generic/core properties and calls out to driver's
1455  * &drm_connector_funcs.atomic_get_property for driver properties.  To ensure
1456  * consistent behavior you must call this function rather than the driver hook
1457  * directly.
1458  *
1459  * RETURNS:
1460  * Zero on success, error code on failure
1461  */
1462 static int
1463 drm_atomic_connector_get_property(struct drm_connector *connector,
1464 		const struct drm_connector_state *state,
1465 		struct drm_property *property, uint64_t *val)
1466 {
1467 	struct drm_device *dev = connector->dev;
1468 	struct drm_mode_config *config = &dev->mode_config;
1469 
1470 	if (property == config->prop_crtc_id) {
1471 		*val = (state->crtc) ? state->crtc->base.id : 0;
1472 	} else if (property == config->dpms_property) {
1473 		*val = connector->dpms;
1474 	} else if (property == config->tv_select_subconnector_property) {
1475 		*val = state->tv.subconnector;
1476 	} else if (property == config->tv_left_margin_property) {
1477 		*val = state->tv.margins.left;
1478 	} else if (property == config->tv_right_margin_property) {
1479 		*val = state->tv.margins.right;
1480 	} else if (property == config->tv_top_margin_property) {
1481 		*val = state->tv.margins.top;
1482 	} else if (property == config->tv_bottom_margin_property) {
1483 		*val = state->tv.margins.bottom;
1484 	} else if (property == config->tv_mode_property) {
1485 		*val = state->tv.mode;
1486 	} else if (property == config->tv_brightness_property) {
1487 		*val = state->tv.brightness;
1488 	} else if (property == config->tv_contrast_property) {
1489 		*val = state->tv.contrast;
1490 	} else if (property == config->tv_flicker_reduction_property) {
1491 		*val = state->tv.flicker_reduction;
1492 	} else if (property == config->tv_overscan_property) {
1493 		*val = state->tv.overscan;
1494 	} else if (property == config->tv_saturation_property) {
1495 		*val = state->tv.saturation;
1496 	} else if (property == config->tv_hue_property) {
1497 		*val = state->tv.hue;
1498 	} else if (property == config->link_status_property) {
1499 		*val = state->link_status;
1500 	} else if (property == config->aspect_ratio_property) {
1501 		*val = state->picture_aspect_ratio;
1502 	} else if (property == config->content_type_property) {
1503 		*val = state->content_type;
1504 	} else if (property == connector->scaling_mode_property) {
1505 		*val = state->scaling_mode;
1506 	} else if (property == connector->content_protection_property) {
1507 		*val = state->content_protection;
1508 	} else if (property == config->writeback_fb_id_property) {
1509 		/* Writeback framebuffer is one-shot, write and forget */
1510 		*val = 0;
1511 	} else if (property == config->writeback_out_fence_ptr_property) {
1512 		*val = 0;
1513 	} else if (connector->funcs->atomic_get_property) {
1514 		return connector->funcs->atomic_get_property(connector,
1515 				state, property, val);
1516 	} else {
1517 		return -EINVAL;
1518 	}
1519 
1520 	return 0;
1521 }
1522 
1523 int drm_atomic_get_property(struct drm_mode_object *obj,
1524 		struct drm_property *property, uint64_t *val)
1525 {
1526 	struct drm_device *dev = property->dev;
1527 	int ret;
1528 
1529 	switch (obj->type) {
1530 	case DRM_MODE_OBJECT_CONNECTOR: {
1531 		struct drm_connector *connector = obj_to_connector(obj);
1532 		WARN_ON(!drm_modeset_is_locked(&dev->mode_config.connection_mutex));
1533 		ret = drm_atomic_connector_get_property(connector,
1534 				connector->state, property, val);
1535 		break;
1536 	}
1537 	case DRM_MODE_OBJECT_CRTC: {
1538 		struct drm_crtc *crtc = obj_to_crtc(obj);
1539 		WARN_ON(!drm_modeset_is_locked(&crtc->mutex));
1540 		ret = drm_atomic_crtc_get_property(crtc,
1541 				crtc->state, property, val);
1542 		break;
1543 	}
1544 	case DRM_MODE_OBJECT_PLANE: {
1545 		struct drm_plane *plane = obj_to_plane(obj);
1546 		WARN_ON(!drm_modeset_is_locked(&plane->mutex));
1547 		ret = drm_atomic_plane_get_property(plane,
1548 				plane->state, property, val);
1549 		break;
1550 	}
1551 	default:
1552 		ret = -EINVAL;
1553 		break;
1554 	}
1555 
1556 	return ret;
1557 }
1558 
1559 /**
1560  * drm_atomic_set_crtc_for_plane - set crtc for plane
1561  * @plane_state: the plane whose incoming state to update
1562  * @crtc: crtc to use for the plane
1563  *
1564  * Changing the assigned crtc for a plane requires us to grab the lock and state
1565  * for the new crtc, as needed. This function takes care of all these details
1566  * besides updating the pointer in the state object itself.
1567  *
1568  * Returns:
1569  * 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
1570  * then the w/w mutex code has detected a deadlock and the entire atomic
1571  * sequence must be restarted. All other errors are fatal.
1572  */
1573 int
1574 drm_atomic_set_crtc_for_plane(struct drm_plane_state *plane_state,
1575 			      struct drm_crtc *crtc)
1576 {
1577 	struct drm_plane *plane = plane_state->plane;
1578 	struct drm_crtc_state *crtc_state;
1579 	/* Nothing to do for same crtc*/
1580 	if (plane_state->crtc == crtc)
1581 		return 0;
1582 	if (plane_state->crtc) {
1583 		crtc_state = drm_atomic_get_crtc_state(plane_state->state,
1584 						       plane_state->crtc);
1585 		if (WARN_ON(IS_ERR(crtc_state)))
1586 			return PTR_ERR(crtc_state);
1587 
1588 		crtc_state->plane_mask &= ~drm_plane_mask(plane);
1589 	}
1590 
1591 	plane_state->crtc = crtc;
1592 
1593 	if (crtc) {
1594 		crtc_state = drm_atomic_get_crtc_state(plane_state->state,
1595 						       crtc);
1596 		if (IS_ERR(crtc_state))
1597 			return PTR_ERR(crtc_state);
1598 		crtc_state->plane_mask |= drm_plane_mask(plane);
1599 	}
1600 
1601 	if (crtc)
1602 		DRM_DEBUG_ATOMIC("Link [PLANE:%d:%s] state %p to [CRTC:%d:%s]\n",
1603 				 plane->base.id, plane->name, plane_state,
1604 				 crtc->base.id, crtc->name);
1605 	else
1606 		DRM_DEBUG_ATOMIC("Link [PLANE:%d:%s] state %p to [NOCRTC]\n",
1607 				 plane->base.id, plane->name, plane_state);
1608 
1609 	return 0;
1610 }
1611 EXPORT_SYMBOL(drm_atomic_set_crtc_for_plane);
1612 
1613 /**
1614  * drm_atomic_set_fb_for_plane - set framebuffer for plane
1615  * @plane_state: atomic state object for the plane
1616  * @fb: fb to use for the plane
1617  *
1618  * Changing the assigned framebuffer for a plane requires us to grab a reference
1619  * to the new fb and drop the reference to the old fb, if there is one. This
1620  * function takes care of all these details besides updating the pointer in the
1621  * state object itself.
1622  */
1623 void
1624 drm_atomic_set_fb_for_plane(struct drm_plane_state *plane_state,
1625 			    struct drm_framebuffer *fb)
1626 {
1627 	struct drm_plane *plane = plane_state->plane;
1628 
1629 	if (fb)
1630 		DRM_DEBUG_ATOMIC("Set [FB:%d] for [PLANE:%d:%s] state %p\n",
1631 				 fb->base.id, plane->base.id, plane->name,
1632 				 plane_state);
1633 	else
1634 		DRM_DEBUG_ATOMIC("Set [NOFB] for [PLANE:%d:%s] state %p\n",
1635 				 plane->base.id, plane->name, plane_state);
1636 
1637 	drm_framebuffer_assign(&plane_state->fb, fb);
1638 }
1639 EXPORT_SYMBOL(drm_atomic_set_fb_for_plane);
1640 
1641 /**
1642  * drm_atomic_set_fence_for_plane - set fence for plane
1643  * @plane_state: atomic state object for the plane
1644  * @fence: dma_fence to use for the plane
1645  *
1646  * Helper to setup the plane_state fence in case it is not set yet.
1647  * By using this drivers doesn't need to worry if the user choose
1648  * implicit or explicit fencing.
1649  *
1650  * This function will not set the fence to the state if it was set
1651  * via explicit fencing interfaces on the atomic ioctl. In that case it will
1652  * drop the reference to the fence as we are not storing it anywhere.
1653  * Otherwise, if &drm_plane_state.fence is not set this function we just set it
1654  * with the received implicit fence. In both cases this function consumes a
1655  * reference for @fence.
1656  *
1657  * This way explicit fencing can be used to overrule implicit fencing, which is
1658  * important to make explicit fencing use-cases work: One example is using one
1659  * buffer for 2 screens with different refresh rates. Implicit fencing will
1660  * clamp rendering to the refresh rate of the slower screen, whereas explicit
1661  * fence allows 2 independent render and display loops on a single buffer. If a
1662  * driver allows obeys both implicit and explicit fences for plane updates, then
1663  * it will break all the benefits of explicit fencing.
1664  */
1665 void
1666 drm_atomic_set_fence_for_plane(struct drm_plane_state *plane_state,
1667 			       struct dma_fence *fence)
1668 {
1669 	if (plane_state->fence) {
1670 		dma_fence_put(fence);
1671 		return;
1672 	}
1673 
1674 	plane_state->fence = fence;
1675 }
1676 EXPORT_SYMBOL(drm_atomic_set_fence_for_plane);
1677 
1678 /**
1679  * drm_atomic_set_crtc_for_connector - set crtc for connector
1680  * @conn_state: atomic state object for the connector
1681  * @crtc: crtc to use for the connector
1682  *
1683  * Changing the assigned crtc for a connector requires us to grab the lock and
1684  * state for the new crtc, as needed. This function takes care of all these
1685  * details besides updating the pointer in the state object itself.
1686  *
1687  * Returns:
1688  * 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
1689  * then the w/w mutex code has detected a deadlock and the entire atomic
1690  * sequence must be restarted. All other errors are fatal.
1691  */
1692 int
1693 drm_atomic_set_crtc_for_connector(struct drm_connector_state *conn_state,
1694 				  struct drm_crtc *crtc)
1695 {
1696 	struct drm_connector *connector = conn_state->connector;
1697 	struct drm_crtc_state *crtc_state;
1698 
1699 	if (conn_state->crtc == crtc)
1700 		return 0;
1701 
1702 	if (conn_state->crtc) {
1703 		crtc_state = drm_atomic_get_new_crtc_state(conn_state->state,
1704 							   conn_state->crtc);
1705 
1706 		crtc_state->connector_mask &=
1707 			~drm_connector_mask(conn_state->connector);
1708 
1709 		drm_connector_put(conn_state->connector);
1710 		conn_state->crtc = NULL;
1711 	}
1712 
1713 	if (crtc) {
1714 		crtc_state = drm_atomic_get_crtc_state(conn_state->state, crtc);
1715 		if (IS_ERR(crtc_state))
1716 			return PTR_ERR(crtc_state);
1717 
1718 		crtc_state->connector_mask |=
1719 			drm_connector_mask(conn_state->connector);
1720 
1721 		drm_connector_get(conn_state->connector);
1722 		conn_state->crtc = crtc;
1723 
1724 		DRM_DEBUG_ATOMIC("Link [CONNECTOR:%d:%s] state %p to [CRTC:%d:%s]\n",
1725 				 connector->base.id, connector->name,
1726 				 conn_state, crtc->base.id, crtc->name);
1727 	} else {
1728 		DRM_DEBUG_ATOMIC("Link [CONNECTOR:%d:%s] state %p to [NOCRTC]\n",
1729 				 connector->base.id, connector->name,
1730 				 conn_state);
1731 	}
1732 
1733 	return 0;
1734 }
1735 EXPORT_SYMBOL(drm_atomic_set_crtc_for_connector);
1736 
1737 /*
1738  * drm_atomic_get_writeback_job - return or allocate a writeback job
1739  * @conn_state: Connector state to get the job for
1740  *
1741  * Writeback jobs have a different lifetime to the atomic state they are
1742  * associated with. This convenience function takes care of allocating a job
1743  * if there isn't yet one associated with the connector state, otherwise
1744  * it just returns the existing job.
1745  *
1746  * Returns: The writeback job for the given connector state
1747  */
1748 static struct drm_writeback_job *
1749 drm_atomic_get_writeback_job(struct drm_connector_state *conn_state)
1750 {
1751 	WARN_ON(conn_state->connector->connector_type != DRM_MODE_CONNECTOR_WRITEBACK);
1752 
1753 	if (!conn_state->writeback_job)
1754 		conn_state->writeback_job =
1755 			kzalloc(sizeof(*conn_state->writeback_job), GFP_KERNEL);
1756 
1757 	return conn_state->writeback_job;
1758 }
1759 
1760 /**
1761  * drm_atomic_set_writeback_fb_for_connector - set writeback framebuffer
1762  * @conn_state: atomic state object for the connector
1763  * @fb: fb to use for the connector
1764  *
1765  * This is used to set the framebuffer for a writeback connector, which outputs
1766  * to a buffer instead of an actual physical connector.
1767  * Changing the assigned framebuffer requires us to grab a reference to the new
1768  * fb and drop the reference to the old fb, if there is one. This function
1769  * takes care of all these details besides updating the pointer in the
1770  * state object itself.
1771  *
1772  * Note: The only way conn_state can already have an fb set is if the commit
1773  * sets the property more than once.
1774  *
1775  * See also: drm_writeback_connector_init()
1776  *
1777  * Returns: 0 on success
1778  */
1779 int drm_atomic_set_writeback_fb_for_connector(
1780 		struct drm_connector_state *conn_state,
1781 		struct drm_framebuffer *fb)
1782 {
1783 	struct drm_writeback_job *job =
1784 		drm_atomic_get_writeback_job(conn_state);
1785 	if (!job)
1786 		return -ENOMEM;
1787 
1788 	drm_framebuffer_assign(&job->fb, fb);
1789 
1790 	if (fb)
1791 		DRM_DEBUG_ATOMIC("Set [FB:%d] for connector state %p\n",
1792 				 fb->base.id, conn_state);
1793 	else
1794 		DRM_DEBUG_ATOMIC("Set [NOFB] for connector state %p\n",
1795 				 conn_state);
1796 
1797 	return 0;
1798 }
1799 EXPORT_SYMBOL(drm_atomic_set_writeback_fb_for_connector);
1800 
1801 /**
1802  * drm_atomic_add_affected_connectors - add connectors for crtc
1803  * @state: atomic state
1804  * @crtc: DRM crtc
1805  *
1806  * This function walks the current configuration and adds all connectors
1807  * currently using @crtc to the atomic configuration @state. Note that this
1808  * function must acquire the connection mutex. This can potentially cause
1809  * unneeded seralization if the update is just for the planes on one crtc. Hence
1810  * drivers and helpers should only call this when really needed (e.g. when a
1811  * full modeset needs to happen due to some change).
1812  *
1813  * Returns:
1814  * 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
1815  * then the w/w mutex code has detected a deadlock and the entire atomic
1816  * sequence must be restarted. All other errors are fatal.
1817  */
1818 int
1819 drm_atomic_add_affected_connectors(struct drm_atomic_state *state,
1820 				   struct drm_crtc *crtc)
1821 {
1822 	struct drm_mode_config *config = &state->dev->mode_config;
1823 	struct drm_connector *connector;
1824 	struct drm_connector_state *conn_state;
1825 	struct drm_connector_list_iter conn_iter;
1826 	struct drm_crtc_state *crtc_state;
1827 	int ret;
1828 
1829 	crtc_state = drm_atomic_get_crtc_state(state, crtc);
1830 	if (IS_ERR(crtc_state))
1831 		return PTR_ERR(crtc_state);
1832 
1833 	ret = drm_modeset_lock(&config->connection_mutex, state->acquire_ctx);
1834 	if (ret)
1835 		return ret;
1836 
1837 	DRM_DEBUG_ATOMIC("Adding all current connectors for [CRTC:%d:%s] to %p\n",
1838 			 crtc->base.id, crtc->name, state);
1839 
1840 	/*
1841 	 * Changed connectors are already in @state, so only need to look
1842 	 * at the connector_mask in crtc_state.
1843 	 */
1844 	drm_connector_list_iter_begin(state->dev, &conn_iter);
1845 	drm_for_each_connector_iter(connector, &conn_iter) {
1846 		if (!(crtc_state->connector_mask & drm_connector_mask(connector)))
1847 			continue;
1848 
1849 		conn_state = drm_atomic_get_connector_state(state, connector);
1850 		if (IS_ERR(conn_state)) {
1851 			drm_connector_list_iter_end(&conn_iter);
1852 			return PTR_ERR(conn_state);
1853 		}
1854 	}
1855 	drm_connector_list_iter_end(&conn_iter);
1856 
1857 	return 0;
1858 }
1859 EXPORT_SYMBOL(drm_atomic_add_affected_connectors);
1860 
1861 /**
1862  * drm_atomic_add_affected_planes - add planes for crtc
1863  * @state: atomic state
1864  * @crtc: DRM crtc
1865  *
1866  * This function walks the current configuration and adds all planes
1867  * currently used by @crtc to the atomic configuration @state. This is useful
1868  * when an atomic commit also needs to check all currently enabled plane on
1869  * @crtc, e.g. when changing the mode. It's also useful when re-enabling a CRTC
1870  * to avoid special code to force-enable all planes.
1871  *
1872  * Since acquiring a plane state will always also acquire the w/w mutex of the
1873  * current CRTC for that plane (if there is any) adding all the plane states for
1874  * a CRTC will not reduce parallism of atomic updates.
1875  *
1876  * Returns:
1877  * 0 on success or can fail with -EDEADLK or -ENOMEM. When the error is EDEADLK
1878  * then the w/w mutex code has detected a deadlock and the entire atomic
1879  * sequence must be restarted. All other errors are fatal.
1880  */
1881 int
1882 drm_atomic_add_affected_planes(struct drm_atomic_state *state,
1883 			       struct drm_crtc *crtc)
1884 {
1885 	struct drm_plane *plane;
1886 
1887 	WARN_ON(!drm_atomic_get_new_crtc_state(state, crtc));
1888 
1889 	DRM_DEBUG_ATOMIC("Adding all current planes for [CRTC:%d:%s] to %p\n",
1890 			 crtc->base.id, crtc->name, state);
1891 
1892 	drm_for_each_plane_mask(plane, state->dev, crtc->state->plane_mask) {
1893 		struct drm_plane_state *plane_state =
1894 			drm_atomic_get_plane_state(state, plane);
1895 
1896 		if (IS_ERR(plane_state))
1897 			return PTR_ERR(plane_state);
1898 	}
1899 	return 0;
1900 }
1901 EXPORT_SYMBOL(drm_atomic_add_affected_planes);
1902 
1903 /**
1904  * drm_atomic_check_only - check whether a given config would work
1905  * @state: atomic configuration to check
1906  *
1907  * Note that this function can return -EDEADLK if the driver needed to acquire
1908  * more locks but encountered a deadlock. The caller must then do the usual w/w
1909  * backoff dance and restart. All other errors are fatal.
1910  *
1911  * Returns:
1912  * 0 on success, negative error code on failure.
1913  */
1914 int drm_atomic_check_only(struct drm_atomic_state *state)
1915 {
1916 	struct drm_device *dev = state->dev;
1917 	struct drm_mode_config *config = &dev->mode_config;
1918 	struct drm_plane *plane;
1919 	struct drm_plane_state *plane_state;
1920 	struct drm_crtc *crtc;
1921 	struct drm_crtc_state *crtc_state;
1922 	struct drm_connector *conn;
1923 	struct drm_connector_state *conn_state;
1924 	int i, ret = 0;
1925 
1926 	DRM_DEBUG_ATOMIC("checking %p\n", state);
1927 
1928 	for_each_new_plane_in_state(state, plane, plane_state, i) {
1929 		ret = drm_atomic_plane_check(plane, plane_state);
1930 		if (ret) {
1931 			DRM_DEBUG_ATOMIC("[PLANE:%d:%s] atomic core check failed\n",
1932 					 plane->base.id, plane->name);
1933 			return ret;
1934 		}
1935 	}
1936 
1937 	for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
1938 		ret = drm_atomic_crtc_check(crtc, crtc_state);
1939 		if (ret) {
1940 			DRM_DEBUG_ATOMIC("[CRTC:%d:%s] atomic core check failed\n",
1941 					 crtc->base.id, crtc->name);
1942 			return ret;
1943 		}
1944 	}
1945 
1946 	for_each_new_connector_in_state(state, conn, conn_state, i) {
1947 		ret = drm_atomic_connector_check(conn, conn_state);
1948 		if (ret) {
1949 			DRM_DEBUG_ATOMIC("[CONNECTOR:%d:%s] atomic core check failed\n",
1950 					 conn->base.id, conn->name);
1951 			return ret;
1952 		}
1953 	}
1954 
1955 	if (config->funcs->atomic_check) {
1956 		ret = config->funcs->atomic_check(state->dev, state);
1957 
1958 		if (ret) {
1959 			DRM_DEBUG_ATOMIC("atomic driver check for %p failed: %d\n",
1960 					 state, ret);
1961 			return ret;
1962 		}
1963 	}
1964 
1965 	if (!state->allow_modeset) {
1966 		for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
1967 			if (drm_atomic_crtc_needs_modeset(crtc_state)) {
1968 				DRM_DEBUG_ATOMIC("[CRTC:%d:%s] requires full modeset\n",
1969 						 crtc->base.id, crtc->name);
1970 				return -EINVAL;
1971 			}
1972 		}
1973 	}
1974 
1975 	return 0;
1976 }
1977 EXPORT_SYMBOL(drm_atomic_check_only);
1978 
1979 /**
1980  * drm_atomic_commit - commit configuration atomically
1981  * @state: atomic configuration to check
1982  *
1983  * Note that this function can return -EDEADLK if the driver needed to acquire
1984  * more locks but encountered a deadlock. The caller must then do the usual w/w
1985  * backoff dance and restart. All other errors are fatal.
1986  *
1987  * This function will take its own reference on @state.
1988  * Callers should always release their reference with drm_atomic_state_put().
1989  *
1990  * Returns:
1991  * 0 on success, negative error code on failure.
1992  */
1993 int drm_atomic_commit(struct drm_atomic_state *state)
1994 {
1995 	struct drm_mode_config *config = &state->dev->mode_config;
1996 	int ret;
1997 
1998 	ret = drm_atomic_check_only(state);
1999 	if (ret)
2000 		return ret;
2001 
2002 	DRM_DEBUG_ATOMIC("committing %p\n", state);
2003 
2004 	return config->funcs->atomic_commit(state->dev, state, false);
2005 }
2006 EXPORT_SYMBOL(drm_atomic_commit);
2007 
2008 /**
2009  * drm_atomic_nonblocking_commit - atomic nonblocking commit
2010  * @state: atomic configuration to check
2011  *
2012  * Note that this function can return -EDEADLK if the driver needed to acquire
2013  * more locks but encountered a deadlock. The caller must then do the usual w/w
2014  * backoff dance and restart. All other errors are fatal.
2015  *
2016  * This function will take its own reference on @state.
2017  * Callers should always release their reference with drm_atomic_state_put().
2018  *
2019  * Returns:
2020  * 0 on success, negative error code on failure.
2021  */
2022 int drm_atomic_nonblocking_commit(struct drm_atomic_state *state)
2023 {
2024 	struct drm_mode_config *config = &state->dev->mode_config;
2025 	int ret;
2026 
2027 	ret = drm_atomic_check_only(state);
2028 	if (ret)
2029 		return ret;
2030 
2031 	DRM_DEBUG_ATOMIC("committing %p nonblocking\n", state);
2032 
2033 	return config->funcs->atomic_commit(state->dev, state, true);
2034 }
2035 EXPORT_SYMBOL(drm_atomic_nonblocking_commit);
2036 
2037 static void drm_atomic_print_state(const struct drm_atomic_state *state)
2038 {
2039 	struct drm_printer p = drm_info_printer(state->dev->dev);
2040 	struct drm_plane *plane;
2041 	struct drm_plane_state *plane_state;
2042 	struct drm_crtc *crtc;
2043 	struct drm_crtc_state *crtc_state;
2044 	struct drm_connector *connector;
2045 	struct drm_connector_state *connector_state;
2046 	int i;
2047 
2048 	DRM_DEBUG_ATOMIC("checking %p\n", state);
2049 
2050 	for_each_new_plane_in_state(state, plane, plane_state, i)
2051 		drm_atomic_plane_print_state(&p, plane_state);
2052 
2053 	for_each_new_crtc_in_state(state, crtc, crtc_state, i)
2054 		drm_atomic_crtc_print_state(&p, crtc_state);
2055 
2056 	for_each_new_connector_in_state(state, connector, connector_state, i)
2057 		drm_atomic_connector_print_state(&p, connector_state);
2058 }
2059 
2060 static void __drm_state_dump(struct drm_device *dev, struct drm_printer *p,
2061 			     bool take_locks)
2062 {
2063 	struct drm_mode_config *config = &dev->mode_config;
2064 	struct drm_plane *plane;
2065 	struct drm_crtc *crtc;
2066 	struct drm_connector *connector;
2067 	struct drm_connector_list_iter conn_iter;
2068 
2069 	if (!drm_core_check_feature(dev, DRIVER_ATOMIC))
2070 		return;
2071 
2072 	list_for_each_entry(plane, &config->plane_list, head) {
2073 		if (take_locks)
2074 			drm_modeset_lock(&plane->mutex, NULL);
2075 		drm_atomic_plane_print_state(p, plane->state);
2076 		if (take_locks)
2077 			drm_modeset_unlock(&plane->mutex);
2078 	}
2079 
2080 	list_for_each_entry(crtc, &config->crtc_list, head) {
2081 		if (take_locks)
2082 			drm_modeset_lock(&crtc->mutex, NULL);
2083 		drm_atomic_crtc_print_state(p, crtc->state);
2084 		if (take_locks)
2085 			drm_modeset_unlock(&crtc->mutex);
2086 	}
2087 
2088 	drm_connector_list_iter_begin(dev, &conn_iter);
2089 	if (take_locks)
2090 		drm_modeset_lock(&dev->mode_config.connection_mutex, NULL);
2091 	drm_for_each_connector_iter(connector, &conn_iter)
2092 		drm_atomic_connector_print_state(p, connector->state);
2093 	if (take_locks)
2094 		drm_modeset_unlock(&dev->mode_config.connection_mutex);
2095 	drm_connector_list_iter_end(&conn_iter);
2096 }
2097 
2098 /**
2099  * drm_state_dump - dump entire device atomic state
2100  * @dev: the drm device
2101  * @p: where to print the state to
2102  *
2103  * Just for debugging.  Drivers might want an option to dump state
2104  * to dmesg in case of error irq's.  (Hint, you probably want to
2105  * ratelimit this!)
2106  *
2107  * The caller must drm_modeset_lock_all(), or if this is called
2108  * from error irq handler, it should not be enabled by default.
2109  * (Ie. if you are debugging errors you might not care that this
2110  * is racey.  But calling this without all modeset locks held is
2111  * not inherently safe.)
2112  */
2113 void drm_state_dump(struct drm_device *dev, struct drm_printer *p)
2114 {
2115 	__drm_state_dump(dev, p, false);
2116 }
2117 EXPORT_SYMBOL(drm_state_dump);
2118 
2119 #ifdef CONFIG_DEBUG_FS
2120 static int drm_state_info(struct seq_file *m, void *data)
2121 {
2122 	struct drm_info_node *node = (struct drm_info_node *) m->private;
2123 	struct drm_device *dev = node->minor->dev;
2124 	struct drm_printer p = drm_seq_file_printer(m);
2125 
2126 	__drm_state_dump(dev, &p, true);
2127 
2128 	return 0;
2129 }
2130 
2131 /* any use in debugfs files to dump individual planes/crtc/etc? */
2132 static const struct drm_info_list drm_atomic_debugfs_list[] = {
2133 	{"state", drm_state_info, 0},
2134 };
2135 
2136 int drm_atomic_debugfs_init(struct drm_minor *minor)
2137 {
2138 	return drm_debugfs_create_files(drm_atomic_debugfs_list,
2139 			ARRAY_SIZE(drm_atomic_debugfs_list),
2140 			minor->debugfs_root, minor);
2141 }
2142 #endif
2143 
2144 /*
2145  * The big monster ioctl
2146  */
2147 
2148 static struct drm_pending_vblank_event *create_vblank_event(
2149 		struct drm_crtc *crtc, uint64_t user_data)
2150 {
2151 	struct drm_pending_vblank_event *e = NULL;
2152 
2153 	e = kzalloc(sizeof *e, GFP_KERNEL);
2154 	if (!e)
2155 		return NULL;
2156 
2157 	e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
2158 	e->event.base.length = sizeof(e->event);
2159 	e->event.vbl.crtc_id = crtc->base.id;
2160 	e->event.vbl.user_data = user_data;
2161 
2162 	return e;
2163 }
2164 
2165 int drm_atomic_connector_commit_dpms(struct drm_atomic_state *state,
2166 				     struct drm_connector *connector,
2167 				     int mode)
2168 {
2169 	struct drm_connector *tmp_connector;
2170 	struct drm_connector_state *new_conn_state;
2171 	struct drm_crtc *crtc;
2172 	struct drm_crtc_state *crtc_state;
2173 	int i, ret, old_mode = connector->dpms;
2174 	bool active = false;
2175 
2176 	ret = drm_modeset_lock(&state->dev->mode_config.connection_mutex,
2177 			       state->acquire_ctx);
2178 	if (ret)
2179 		return ret;
2180 
2181 	if (mode != DRM_MODE_DPMS_ON)
2182 		mode = DRM_MODE_DPMS_OFF;
2183 	connector->dpms = mode;
2184 
2185 	crtc = connector->state->crtc;
2186 	if (!crtc)
2187 		goto out;
2188 	ret = drm_atomic_add_affected_connectors(state, crtc);
2189 	if (ret)
2190 		goto out;
2191 
2192 	crtc_state = drm_atomic_get_crtc_state(state, crtc);
2193 	if (IS_ERR(crtc_state)) {
2194 		ret = PTR_ERR(crtc_state);
2195 		goto out;
2196 	}
2197 
2198 	for_each_new_connector_in_state(state, tmp_connector, new_conn_state, i) {
2199 		if (new_conn_state->crtc != crtc)
2200 			continue;
2201 		if (tmp_connector->dpms == DRM_MODE_DPMS_ON) {
2202 			active = true;
2203 			break;
2204 		}
2205 	}
2206 
2207 	crtc_state->active = active;
2208 	ret = drm_atomic_commit(state);
2209 out:
2210 	if (ret != 0)
2211 		connector->dpms = old_mode;
2212 	return ret;
2213 }
2214 
2215 int drm_atomic_set_property(struct drm_atomic_state *state,
2216 			    struct drm_mode_object *obj,
2217 			    struct drm_property *prop,
2218 			    uint64_t prop_value)
2219 {
2220 	struct drm_mode_object *ref;
2221 	int ret;
2222 
2223 	if (!drm_property_change_valid_get(prop, prop_value, &ref))
2224 		return -EINVAL;
2225 
2226 	switch (obj->type) {
2227 	case DRM_MODE_OBJECT_CONNECTOR: {
2228 		struct drm_connector *connector = obj_to_connector(obj);
2229 		struct drm_connector_state *connector_state;
2230 
2231 		connector_state = drm_atomic_get_connector_state(state, connector);
2232 		if (IS_ERR(connector_state)) {
2233 			ret = PTR_ERR(connector_state);
2234 			break;
2235 		}
2236 
2237 		ret = drm_atomic_connector_set_property(connector,
2238 				connector_state, prop, prop_value);
2239 		break;
2240 	}
2241 	case DRM_MODE_OBJECT_CRTC: {
2242 		struct drm_crtc *crtc = obj_to_crtc(obj);
2243 		struct drm_crtc_state *crtc_state;
2244 
2245 		crtc_state = drm_atomic_get_crtc_state(state, crtc);
2246 		if (IS_ERR(crtc_state)) {
2247 			ret = PTR_ERR(crtc_state);
2248 			break;
2249 		}
2250 
2251 		ret = drm_atomic_crtc_set_property(crtc,
2252 				crtc_state, prop, prop_value);
2253 		break;
2254 	}
2255 	case DRM_MODE_OBJECT_PLANE: {
2256 		struct drm_plane *plane = obj_to_plane(obj);
2257 		struct drm_plane_state *plane_state;
2258 
2259 		plane_state = drm_atomic_get_plane_state(state, plane);
2260 		if (IS_ERR(plane_state)) {
2261 			ret = PTR_ERR(plane_state);
2262 			break;
2263 		}
2264 
2265 		ret = drm_atomic_plane_set_property(plane,
2266 				plane_state, prop, prop_value);
2267 		break;
2268 	}
2269 	default:
2270 		ret = -EINVAL;
2271 		break;
2272 	}
2273 
2274 	drm_property_change_valid_put(prop, ref);
2275 	return ret;
2276 }
2277 
2278 /**
2279  * DOC: explicit fencing properties
2280  *
2281  * Explicit fencing allows userspace to control the buffer synchronization
2282  * between devices. A Fence or a group of fences are transfered to/from
2283  * userspace using Sync File fds and there are two DRM properties for that.
2284  * IN_FENCE_FD on each DRM Plane to send fences to the kernel and
2285  * OUT_FENCE_PTR on each DRM CRTC to receive fences from the kernel.
2286  *
2287  * As a contrast, with implicit fencing the kernel keeps track of any
2288  * ongoing rendering, and automatically ensures that the atomic update waits
2289  * for any pending rendering to complete. For shared buffers represented with
2290  * a &struct dma_buf this is tracked in &struct reservation_object.
2291  * Implicit syncing is how Linux traditionally worked (e.g. DRI2/3 on X.org),
2292  * whereas explicit fencing is what Android wants.
2293  *
2294  * "IN_FENCE_FD”:
2295  *	Use this property to pass a fence that DRM should wait on before
2296  *	proceeding with the Atomic Commit request and show the framebuffer for
2297  *	the plane on the screen. The fence can be either a normal fence or a
2298  *	merged one, the sync_file framework will handle both cases and use a
2299  *	fence_array if a merged fence is received. Passing -1 here means no
2300  *	fences to wait on.
2301  *
2302  *	If the Atomic Commit request has the DRM_MODE_ATOMIC_TEST_ONLY flag
2303  *	it will only check if the Sync File is a valid one.
2304  *
2305  *	On the driver side the fence is stored on the @fence parameter of
2306  *	&struct drm_plane_state. Drivers which also support implicit fencing
2307  *	should set the implicit fence using drm_atomic_set_fence_for_plane(),
2308  *	to make sure there's consistent behaviour between drivers in precedence
2309  *	of implicit vs. explicit fencing.
2310  *
2311  * "OUT_FENCE_PTR”:
2312  *	Use this property to pass a file descriptor pointer to DRM. Once the
2313  *	Atomic Commit request call returns OUT_FENCE_PTR will be filled with
2314  *	the file descriptor number of a Sync File. This Sync File contains the
2315  *	CRTC fence that will be signaled when all framebuffers present on the
2316  *	Atomic Commit * request for that given CRTC are scanned out on the
2317  *	screen.
2318  *
2319  *	The Atomic Commit request fails if a invalid pointer is passed. If the
2320  *	Atomic Commit request fails for any other reason the out fence fd
2321  *	returned will be -1. On a Atomic Commit with the
2322  *	DRM_MODE_ATOMIC_TEST_ONLY flag the out fence will also be set to -1.
2323  *
2324  *	Note that out-fences don't have a special interface to drivers and are
2325  *	internally represented by a &struct drm_pending_vblank_event in struct
2326  *	&drm_crtc_state, which is also used by the nonblocking atomic commit
2327  *	helpers and for the DRM event handling for existing userspace.
2328  */
2329 
2330 struct drm_out_fence_state {
2331 	s32 __user *out_fence_ptr;
2332 	struct sync_file *sync_file;
2333 	int fd;
2334 };
2335 
2336 static int setup_out_fence(struct drm_out_fence_state *fence_state,
2337 			   struct dma_fence *fence)
2338 {
2339 	fence_state->fd = get_unused_fd_flags(O_CLOEXEC);
2340 	if (fence_state->fd < 0)
2341 		return fence_state->fd;
2342 
2343 	if (put_user(fence_state->fd, fence_state->out_fence_ptr))
2344 		return -EFAULT;
2345 
2346 	fence_state->sync_file = sync_file_create(fence);
2347 	if (!fence_state->sync_file)
2348 		return -ENOMEM;
2349 
2350 	return 0;
2351 }
2352 
2353 static int prepare_signaling(struct drm_device *dev,
2354 				  struct drm_atomic_state *state,
2355 				  struct drm_mode_atomic *arg,
2356 				  struct drm_file *file_priv,
2357 				  struct drm_out_fence_state **fence_state,
2358 				  unsigned int *num_fences)
2359 {
2360 	struct drm_crtc *crtc;
2361 	struct drm_crtc_state *crtc_state;
2362 	struct drm_connector *conn;
2363 	struct drm_connector_state *conn_state;
2364 	int i, c = 0, ret;
2365 
2366 	if (arg->flags & DRM_MODE_ATOMIC_TEST_ONLY)
2367 		return 0;
2368 
2369 	for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
2370 		s32 __user *fence_ptr;
2371 
2372 		fence_ptr = get_out_fence_for_crtc(crtc_state->state, crtc);
2373 
2374 		if (arg->flags & DRM_MODE_PAGE_FLIP_EVENT || fence_ptr) {
2375 			struct drm_pending_vblank_event *e;
2376 
2377 			e = create_vblank_event(crtc, arg->user_data);
2378 			if (!e)
2379 				return -ENOMEM;
2380 
2381 			crtc_state->event = e;
2382 		}
2383 
2384 		if (arg->flags & DRM_MODE_PAGE_FLIP_EVENT) {
2385 			struct drm_pending_vblank_event *e = crtc_state->event;
2386 
2387 			if (!file_priv)
2388 				continue;
2389 
2390 			ret = drm_event_reserve_init(dev, file_priv, &e->base,
2391 						     &e->event.base);
2392 			if (ret) {
2393 				kfree(e);
2394 				crtc_state->event = NULL;
2395 				return ret;
2396 			}
2397 		}
2398 
2399 		if (fence_ptr) {
2400 			struct dma_fence *fence;
2401 			struct drm_out_fence_state *f;
2402 
2403 			f = krealloc(*fence_state, sizeof(**fence_state) *
2404 				     (*num_fences + 1), GFP_KERNEL);
2405 			if (!f)
2406 				return -ENOMEM;
2407 
2408 			memset(&f[*num_fences], 0, sizeof(*f));
2409 
2410 			f[*num_fences].out_fence_ptr = fence_ptr;
2411 			*fence_state = f;
2412 
2413 			fence = drm_crtc_create_fence(crtc);
2414 			if (!fence)
2415 				return -ENOMEM;
2416 
2417 			ret = setup_out_fence(&f[(*num_fences)++], fence);
2418 			if (ret) {
2419 				dma_fence_put(fence);
2420 				return ret;
2421 			}
2422 
2423 			crtc_state->event->base.fence = fence;
2424 		}
2425 
2426 		c++;
2427 	}
2428 
2429 	for_each_new_connector_in_state(state, conn, conn_state, i) {
2430 		struct drm_writeback_job *job;
2431 		struct drm_out_fence_state *f;
2432 		struct dma_fence *fence;
2433 		s32 __user *fence_ptr;
2434 
2435 		fence_ptr = get_out_fence_for_connector(state, conn);
2436 		if (!fence_ptr)
2437 			continue;
2438 
2439 		job = drm_atomic_get_writeback_job(conn_state);
2440 		if (!job)
2441 			return -ENOMEM;
2442 
2443 		f = krealloc(*fence_state, sizeof(**fence_state) *
2444 			     (*num_fences + 1), GFP_KERNEL);
2445 		if (!f)
2446 			return -ENOMEM;
2447 
2448 		memset(&f[*num_fences], 0, sizeof(*f));
2449 
2450 		f[*num_fences].out_fence_ptr = fence_ptr;
2451 		*fence_state = f;
2452 
2453 		fence = drm_writeback_get_out_fence((struct drm_writeback_connector *)conn);
2454 		if (!fence)
2455 			return -ENOMEM;
2456 
2457 		ret = setup_out_fence(&f[(*num_fences)++], fence);
2458 		if (ret) {
2459 			dma_fence_put(fence);
2460 			return ret;
2461 		}
2462 
2463 		job->out_fence = fence;
2464 	}
2465 
2466 	/*
2467 	 * Having this flag means user mode pends on event which will never
2468 	 * reach due to lack of at least one CRTC for signaling
2469 	 */
2470 	if (c == 0 && (arg->flags & DRM_MODE_PAGE_FLIP_EVENT))
2471 		return -EINVAL;
2472 
2473 	return 0;
2474 }
2475 
2476 static void complete_signaling(struct drm_device *dev,
2477 			       struct drm_atomic_state *state,
2478 			       struct drm_out_fence_state *fence_state,
2479 			       unsigned int num_fences,
2480 			       bool install_fds)
2481 {
2482 	struct drm_crtc *crtc;
2483 	struct drm_crtc_state *crtc_state;
2484 	int i;
2485 
2486 	if (install_fds) {
2487 		for (i = 0; i < num_fences; i++)
2488 			fd_install(fence_state[i].fd,
2489 				   fence_state[i].sync_file->file);
2490 
2491 		kfree(fence_state);
2492 		return;
2493 	}
2494 
2495 	for_each_new_crtc_in_state(state, crtc, crtc_state, i) {
2496 		struct drm_pending_vblank_event *event = crtc_state->event;
2497 		/*
2498 		 * Free the allocated event. drm_atomic_helper_setup_commit
2499 		 * can allocate an event too, so only free it if it's ours
2500 		 * to prevent a double free in drm_atomic_state_clear.
2501 		 */
2502 		if (event && (event->base.fence || event->base.file_priv)) {
2503 			drm_event_cancel_free(dev, &event->base);
2504 			crtc_state->event = NULL;
2505 		}
2506 	}
2507 
2508 	if (!fence_state)
2509 		return;
2510 
2511 	for (i = 0; i < num_fences; i++) {
2512 		if (fence_state[i].sync_file)
2513 			fput(fence_state[i].sync_file->file);
2514 		if (fence_state[i].fd >= 0)
2515 			put_unused_fd(fence_state[i].fd);
2516 
2517 		/* If this fails log error to the user */
2518 		if (fence_state[i].out_fence_ptr &&
2519 		    put_user(-1, fence_state[i].out_fence_ptr))
2520 			DRM_DEBUG_ATOMIC("Couldn't clear out_fence_ptr\n");
2521 	}
2522 
2523 	kfree(fence_state);
2524 }
2525 
2526 int drm_mode_atomic_ioctl(struct drm_device *dev,
2527 			  void *data, struct drm_file *file_priv)
2528 {
2529 	struct drm_mode_atomic *arg = data;
2530 	uint32_t __user *objs_ptr = (uint32_t __user *)(unsigned long)(arg->objs_ptr);
2531 	uint32_t __user *count_props_ptr = (uint32_t __user *)(unsigned long)(arg->count_props_ptr);
2532 	uint32_t __user *props_ptr = (uint32_t __user *)(unsigned long)(arg->props_ptr);
2533 	uint64_t __user *prop_values_ptr = (uint64_t __user *)(unsigned long)(arg->prop_values_ptr);
2534 	unsigned int copied_objs, copied_props;
2535 	struct drm_atomic_state *state;
2536 	struct drm_modeset_acquire_ctx ctx;
2537 	struct drm_out_fence_state *fence_state;
2538 	int ret = 0;
2539 	unsigned int i, j, num_fences;
2540 
2541 	/* disallow for drivers not supporting atomic: */
2542 	if (!drm_core_check_feature(dev, DRIVER_ATOMIC))
2543 		return -EINVAL;
2544 
2545 	/* disallow for userspace that has not enabled atomic cap (even
2546 	 * though this may be a bit overkill, since legacy userspace
2547 	 * wouldn't know how to call this ioctl)
2548 	 */
2549 	if (!file_priv->atomic)
2550 		return -EINVAL;
2551 
2552 	if (arg->flags & ~DRM_MODE_ATOMIC_FLAGS)
2553 		return -EINVAL;
2554 
2555 	if (arg->reserved)
2556 		return -EINVAL;
2557 
2558 	if ((arg->flags & DRM_MODE_PAGE_FLIP_ASYNC) &&
2559 			!dev->mode_config.async_page_flip)
2560 		return -EINVAL;
2561 
2562 	/* can't test and expect an event at the same time. */
2563 	if ((arg->flags & DRM_MODE_ATOMIC_TEST_ONLY) &&
2564 			(arg->flags & DRM_MODE_PAGE_FLIP_EVENT))
2565 		return -EINVAL;
2566 
2567 	drm_modeset_acquire_init(&ctx, DRM_MODESET_ACQUIRE_INTERRUPTIBLE);
2568 
2569 	state = drm_atomic_state_alloc(dev);
2570 	if (!state)
2571 		return -ENOMEM;
2572 
2573 	state->acquire_ctx = &ctx;
2574 	state->allow_modeset = !!(arg->flags & DRM_MODE_ATOMIC_ALLOW_MODESET);
2575 
2576 retry:
2577 	copied_objs = 0;
2578 	copied_props = 0;
2579 	fence_state = NULL;
2580 	num_fences = 0;
2581 
2582 	for (i = 0; i < arg->count_objs; i++) {
2583 		uint32_t obj_id, count_props;
2584 		struct drm_mode_object *obj;
2585 
2586 		if (get_user(obj_id, objs_ptr + copied_objs)) {
2587 			ret = -EFAULT;
2588 			goto out;
2589 		}
2590 
2591 		obj = drm_mode_object_find(dev, file_priv, obj_id, DRM_MODE_OBJECT_ANY);
2592 		if (!obj) {
2593 			ret = -ENOENT;
2594 			goto out;
2595 		}
2596 
2597 		if (!obj->properties) {
2598 			drm_mode_object_put(obj);
2599 			ret = -ENOENT;
2600 			goto out;
2601 		}
2602 
2603 		if (get_user(count_props, count_props_ptr + copied_objs)) {
2604 			drm_mode_object_put(obj);
2605 			ret = -EFAULT;
2606 			goto out;
2607 		}
2608 
2609 		copied_objs++;
2610 
2611 		for (j = 0; j < count_props; j++) {
2612 			uint32_t prop_id;
2613 			uint64_t prop_value;
2614 			struct drm_property *prop;
2615 
2616 			if (get_user(prop_id, props_ptr + copied_props)) {
2617 				drm_mode_object_put(obj);
2618 				ret = -EFAULT;
2619 				goto out;
2620 			}
2621 
2622 			prop = drm_mode_obj_find_prop_id(obj, prop_id);
2623 			if (!prop) {
2624 				drm_mode_object_put(obj);
2625 				ret = -ENOENT;
2626 				goto out;
2627 			}
2628 
2629 			if (copy_from_user(&prop_value,
2630 					   prop_values_ptr + copied_props,
2631 					   sizeof(prop_value))) {
2632 				drm_mode_object_put(obj);
2633 				ret = -EFAULT;
2634 				goto out;
2635 			}
2636 
2637 			ret = drm_atomic_set_property(state, obj, prop,
2638 						      prop_value);
2639 			if (ret) {
2640 				drm_mode_object_put(obj);
2641 				goto out;
2642 			}
2643 
2644 			copied_props++;
2645 		}
2646 
2647 		drm_mode_object_put(obj);
2648 	}
2649 
2650 	ret = prepare_signaling(dev, state, arg, file_priv, &fence_state,
2651 				&num_fences);
2652 	if (ret)
2653 		goto out;
2654 
2655 	if (arg->flags & DRM_MODE_ATOMIC_TEST_ONLY) {
2656 		ret = drm_atomic_check_only(state);
2657 	} else if (arg->flags & DRM_MODE_ATOMIC_NONBLOCK) {
2658 		ret = drm_atomic_nonblocking_commit(state);
2659 	} else {
2660 		if (unlikely(drm_debug & DRM_UT_STATE))
2661 			drm_atomic_print_state(state);
2662 
2663 		ret = drm_atomic_commit(state);
2664 	}
2665 
2666 out:
2667 	complete_signaling(dev, state, fence_state, num_fences, !ret);
2668 
2669 	if (ret == -EDEADLK) {
2670 		drm_atomic_state_clear(state);
2671 		ret = drm_modeset_backoff(&ctx);
2672 		if (!ret)
2673 			goto retry;
2674 	}
2675 
2676 	drm_atomic_state_put(state);
2677 
2678 	drm_modeset_drop_locks(&ctx);
2679 	drm_modeset_acquire_fini(&ctx);
2680 
2681 	return ret;
2682 }
2683