xref: /openbmc/linux/drivers/gpu/drm/drm_crtc.c (revision df687341)
1 /*
2  * Copyright (c) 2006-2008 Intel Corporation
3  * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
4  * Copyright (c) 2008 Red Hat Inc.
5  *
6  * DRM core CRTC related functions
7  *
8  * Permission to use, copy, modify, distribute, and sell this software and its
9  * documentation for any purpose is hereby granted without fee, provided that
10  * the above copyright notice appear in all copies and that both that copyright
11  * notice and this permission notice appear in supporting documentation, and
12  * that the name of the copyright holders not be used in advertising or
13  * publicity pertaining to distribution of the software without specific,
14  * written prior permission.  The copyright holders make no representations
15  * about the suitability of this software for any purpose.  It is provided "as
16  * is" without express or implied warranty.
17  *
18  * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
19  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
20  * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
21  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
22  * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
23  * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
24  * OF THIS SOFTWARE.
25  *
26  * Authors:
27  *      Keith Packard
28  *	Eric Anholt <eric@anholt.net>
29  *      Dave Airlie <airlied@linux.ie>
30  *      Jesse Barnes <jesse.barnes@intel.com>
31  */
32 #include <linux/ctype.h>
33 #include <linux/list.h>
34 #include <linux/slab.h>
35 #include <linux/export.h>
36 #include <linux/dma-fence.h>
37 #include <linux/uaccess.h>
38 #include <drm/drm_crtc.h>
39 #include <drm/drm_edid.h>
40 #include <drm/drm_fourcc.h>
41 #include <drm/drm_modeset_lock.h>
42 #include <drm/drm_atomic.h>
43 #include <drm/drm_auth.h>
44 #include <drm/drm_debugfs_crc.h>
45 #include <drm/drm_drv.h>
46 #include <drm/drm_print.h>
47 #include <drm/drm_file.h>
48 
49 #include "drm_crtc_internal.h"
50 #include "drm_internal.h"
51 
52 /**
53  * DOC: overview
54  *
55  * A CRTC represents the overall display pipeline. It receives pixel data from
56  * &drm_plane and blends them together. The &drm_display_mode is also attached
57  * to the CRTC, specifying display timings. On the output side the data is fed
58  * to one or more &drm_encoder, which are then each connected to one
59  * &drm_connector.
60  *
61  * To create a CRTC, a KMS drivers allocates and zeroes an instances of
62  * &struct drm_crtc (possibly as part of a larger structure) and registers it
63  * with a call to drm_crtc_init_with_planes().
64  *
65  * The CRTC is also the entry point for legacy modeset operations, see
66  * &drm_crtc_funcs.set_config, legacy plane operations, see
67  * &drm_crtc_funcs.page_flip and &drm_crtc_funcs.cursor_set2, and other legacy
68  * operations like &drm_crtc_funcs.gamma_set. For atomic drivers all these
69  * features are controlled through &drm_property and
70  * &drm_mode_config_funcs.atomic_check and &drm_mode_config_funcs.atomic_check.
71  */
72 
73 /**
74  * drm_crtc_from_index - find the registered CRTC at an index
75  * @dev: DRM device
76  * @idx: index of registered CRTC to find for
77  *
78  * Given a CRTC index, return the registered CRTC from DRM device's
79  * list of CRTCs with matching index. This is the inverse of drm_crtc_index().
80  * It's useful in the vblank callbacks (like &drm_driver.enable_vblank or
81  * &drm_driver.disable_vblank), since that still deals with indices instead
82  * of pointers to &struct drm_crtc."
83  */
84 struct drm_crtc *drm_crtc_from_index(struct drm_device *dev, int idx)
85 {
86 	struct drm_crtc *crtc;
87 
88 	drm_for_each_crtc(crtc, dev)
89 		if (idx == crtc->index)
90 			return crtc;
91 
92 	return NULL;
93 }
94 EXPORT_SYMBOL(drm_crtc_from_index);
95 
96 /**
97  * drm_crtc_force_disable - Forcibly turn off a CRTC
98  * @crtc: CRTC to turn off
99  *
100  * Note: This should only be used by non-atomic legacy drivers.
101  *
102  * Returns:
103  * Zero on success, error code on failure.
104  */
105 int drm_crtc_force_disable(struct drm_crtc *crtc)
106 {
107 	struct drm_mode_set set = {
108 		.crtc = crtc,
109 	};
110 
111 	WARN_ON(drm_drv_uses_atomic_modeset(crtc->dev));
112 
113 	return drm_mode_set_config_internal(&set);
114 }
115 EXPORT_SYMBOL(drm_crtc_force_disable);
116 
117 /**
118  * drm_crtc_force_disable_all - Forcibly turn off all enabled CRTCs
119  * @dev: DRM device whose CRTCs to turn off
120  *
121  * Drivers may want to call this on unload to ensure that all displays are
122  * unlit and the GPU is in a consistent, low power state. Takes modeset locks.
123  *
124  * Note: This should only be used by non-atomic legacy drivers. For an atomic
125  * version look at drm_atomic_helper_shutdown().
126  *
127  * Returns:
128  * Zero on success, error code on failure.
129  */
130 int drm_crtc_force_disable_all(struct drm_device *dev)
131 {
132 	struct drm_crtc *crtc;
133 	int ret = 0;
134 
135 	drm_modeset_lock_all(dev);
136 	drm_for_each_crtc(crtc, dev)
137 		if (crtc->enabled) {
138 			ret = drm_crtc_force_disable(crtc);
139 			if (ret)
140 				goto out;
141 		}
142 out:
143 	drm_modeset_unlock_all(dev);
144 	return ret;
145 }
146 EXPORT_SYMBOL(drm_crtc_force_disable_all);
147 
148 static unsigned int drm_num_crtcs(struct drm_device *dev)
149 {
150 	unsigned int num = 0;
151 	struct drm_crtc *tmp;
152 
153 	drm_for_each_crtc(tmp, dev) {
154 		num++;
155 	}
156 
157 	return num;
158 }
159 
160 int drm_crtc_register_all(struct drm_device *dev)
161 {
162 	struct drm_crtc *crtc;
163 	int ret = 0;
164 
165 	drm_for_each_crtc(crtc, dev) {
166 		if (drm_debugfs_crtc_add(crtc))
167 			DRM_ERROR("Failed to initialize debugfs entry for CRTC '%s'.\n",
168 				  crtc->name);
169 
170 		if (crtc->funcs->late_register)
171 			ret = crtc->funcs->late_register(crtc);
172 		if (ret)
173 			return ret;
174 	}
175 
176 	return 0;
177 }
178 
179 void drm_crtc_unregister_all(struct drm_device *dev)
180 {
181 	struct drm_crtc *crtc;
182 
183 	drm_for_each_crtc(crtc, dev) {
184 		if (crtc->funcs->early_unregister)
185 			crtc->funcs->early_unregister(crtc);
186 		drm_debugfs_crtc_remove(crtc);
187 	}
188 }
189 
190 static int drm_crtc_crc_init(struct drm_crtc *crtc)
191 {
192 #ifdef CONFIG_DEBUG_FS
193 	spin_lock_init(&crtc->crc.lock);
194 	init_waitqueue_head(&crtc->crc.wq);
195 	crtc->crc.source = kstrdup("auto", GFP_KERNEL);
196 	if (!crtc->crc.source)
197 		return -ENOMEM;
198 #endif
199 	return 0;
200 }
201 
202 static void drm_crtc_crc_fini(struct drm_crtc *crtc)
203 {
204 #ifdef CONFIG_DEBUG_FS
205 	kfree(crtc->crc.source);
206 #endif
207 }
208 
209 static const struct dma_fence_ops drm_crtc_fence_ops;
210 
211 static struct drm_crtc *fence_to_crtc(struct dma_fence *fence)
212 {
213 	BUG_ON(fence->ops != &drm_crtc_fence_ops);
214 	return container_of(fence->lock, struct drm_crtc, fence_lock);
215 }
216 
217 static const char *drm_crtc_fence_get_driver_name(struct dma_fence *fence)
218 {
219 	struct drm_crtc *crtc = fence_to_crtc(fence);
220 
221 	return crtc->dev->driver->name;
222 }
223 
224 static const char *drm_crtc_fence_get_timeline_name(struct dma_fence *fence)
225 {
226 	struct drm_crtc *crtc = fence_to_crtc(fence);
227 
228 	return crtc->timeline_name;
229 }
230 
231 static const struct dma_fence_ops drm_crtc_fence_ops = {
232 	.get_driver_name = drm_crtc_fence_get_driver_name,
233 	.get_timeline_name = drm_crtc_fence_get_timeline_name,
234 };
235 
236 struct dma_fence *drm_crtc_create_fence(struct drm_crtc *crtc)
237 {
238 	struct dma_fence *fence;
239 
240 	fence = kzalloc(sizeof(*fence), GFP_KERNEL);
241 	if (!fence)
242 		return NULL;
243 
244 	dma_fence_init(fence, &drm_crtc_fence_ops, &crtc->fence_lock,
245 		       crtc->fence_context, ++crtc->fence_seqno);
246 
247 	return fence;
248 }
249 
250 /**
251  * drm_crtc_init_with_planes - Initialise a new CRTC object with
252  *    specified primary and cursor planes.
253  * @dev: DRM device
254  * @crtc: CRTC object to init
255  * @primary: Primary plane for CRTC
256  * @cursor: Cursor plane for CRTC
257  * @funcs: callbacks for the new CRTC
258  * @name: printf style format string for the CRTC name, or NULL for default name
259  *
260  * Inits a new object created as base part of a driver crtc object. Drivers
261  * should use this function instead of drm_crtc_init(), which is only provided
262  * for backwards compatibility with drivers which do not yet support universal
263  * planes). For really simple hardware which has only 1 plane look at
264  * drm_simple_display_pipe_init() instead.
265  *
266  * Returns:
267  * Zero on success, error code on failure.
268  */
269 int drm_crtc_init_with_planes(struct drm_device *dev, struct drm_crtc *crtc,
270 			      struct drm_plane *primary,
271 			      struct drm_plane *cursor,
272 			      const struct drm_crtc_funcs *funcs,
273 			      const char *name, ...)
274 {
275 	struct drm_mode_config *config = &dev->mode_config;
276 	int ret;
277 
278 	WARN_ON(primary && primary->type != DRM_PLANE_TYPE_PRIMARY);
279 	WARN_ON(cursor && cursor->type != DRM_PLANE_TYPE_CURSOR);
280 
281 	/* crtc index is used with 32bit bitmasks */
282 	if (WARN_ON(config->num_crtc >= 32))
283 		return -EINVAL;
284 
285 	WARN_ON(drm_drv_uses_atomic_modeset(dev) &&
286 		(!funcs->atomic_destroy_state ||
287 		 !funcs->atomic_duplicate_state));
288 
289 	crtc->dev = dev;
290 	crtc->funcs = funcs;
291 
292 	INIT_LIST_HEAD(&crtc->commit_list);
293 	spin_lock_init(&crtc->commit_lock);
294 
295 	drm_modeset_lock_init(&crtc->mutex);
296 	ret = drm_mode_object_add(dev, &crtc->base, DRM_MODE_OBJECT_CRTC);
297 	if (ret)
298 		return ret;
299 
300 	if (name) {
301 		va_list ap;
302 
303 		va_start(ap, name);
304 		crtc->name = kvasprintf(GFP_KERNEL, name, ap);
305 		va_end(ap);
306 	} else {
307 		crtc->name = kasprintf(GFP_KERNEL, "crtc-%d",
308 				       drm_num_crtcs(dev));
309 	}
310 	if (!crtc->name) {
311 		drm_mode_object_unregister(dev, &crtc->base);
312 		return -ENOMEM;
313 	}
314 
315 	crtc->fence_context = dma_fence_context_alloc(1);
316 	spin_lock_init(&crtc->fence_lock);
317 	snprintf(crtc->timeline_name, sizeof(crtc->timeline_name),
318 		 "CRTC:%d-%s", crtc->base.id, crtc->name);
319 
320 	crtc->base.properties = &crtc->properties;
321 
322 	list_add_tail(&crtc->head, &config->crtc_list);
323 	crtc->index = config->num_crtc++;
324 
325 	crtc->primary = primary;
326 	crtc->cursor = cursor;
327 	if (primary && !primary->possible_crtcs)
328 		primary->possible_crtcs = drm_crtc_mask(crtc);
329 	if (cursor && !cursor->possible_crtcs)
330 		cursor->possible_crtcs = drm_crtc_mask(crtc);
331 
332 	ret = drm_crtc_crc_init(crtc);
333 	if (ret) {
334 		drm_mode_object_unregister(dev, &crtc->base);
335 		return ret;
336 	}
337 
338 	if (drm_core_check_feature(dev, DRIVER_ATOMIC)) {
339 		drm_object_attach_property(&crtc->base, config->prop_active, 0);
340 		drm_object_attach_property(&crtc->base, config->prop_mode_id, 0);
341 		drm_object_attach_property(&crtc->base,
342 					   config->prop_out_fence_ptr, 0);
343 		drm_object_attach_property(&crtc->base,
344 					   config->prop_vrr_enabled, 0);
345 	}
346 
347 	return 0;
348 }
349 EXPORT_SYMBOL(drm_crtc_init_with_planes);
350 
351 /**
352  * drm_crtc_cleanup - Clean up the core crtc usage
353  * @crtc: CRTC to cleanup
354  *
355  * This function cleans up @crtc and removes it from the DRM mode setting
356  * core. Note that the function does *not* free the crtc structure itself,
357  * this is the responsibility of the caller.
358  */
359 void drm_crtc_cleanup(struct drm_crtc *crtc)
360 {
361 	struct drm_device *dev = crtc->dev;
362 
363 	/* Note that the crtc_list is considered to be static; should we
364 	 * remove the drm_crtc at runtime we would have to decrement all
365 	 * the indices on the drm_crtc after us in the crtc_list.
366 	 */
367 
368 	drm_crtc_crc_fini(crtc);
369 
370 	kfree(crtc->gamma_store);
371 	crtc->gamma_store = NULL;
372 
373 	drm_modeset_lock_fini(&crtc->mutex);
374 
375 	drm_mode_object_unregister(dev, &crtc->base);
376 	list_del(&crtc->head);
377 	dev->mode_config.num_crtc--;
378 
379 	WARN_ON(crtc->state && !crtc->funcs->atomic_destroy_state);
380 	if (crtc->state && crtc->funcs->atomic_destroy_state)
381 		crtc->funcs->atomic_destroy_state(crtc, crtc->state);
382 
383 	kfree(crtc->name);
384 
385 	memset(crtc, 0, sizeof(*crtc));
386 }
387 EXPORT_SYMBOL(drm_crtc_cleanup);
388 
389 /**
390  * drm_mode_getcrtc - get CRTC configuration
391  * @dev: drm device for the ioctl
392  * @data: data pointer for the ioctl
393  * @file_priv: drm file for the ioctl call
394  *
395  * Construct a CRTC configuration structure to return to the user.
396  *
397  * Called by the user via ioctl.
398  *
399  * Returns:
400  * Zero on success, negative errno on failure.
401  */
402 int drm_mode_getcrtc(struct drm_device *dev,
403 		     void *data, struct drm_file *file_priv)
404 {
405 	struct drm_mode_crtc *crtc_resp = data;
406 	struct drm_crtc *crtc;
407 	struct drm_plane *plane;
408 
409 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
410 		return -EOPNOTSUPP;
411 
412 	crtc = drm_crtc_find(dev, file_priv, crtc_resp->crtc_id);
413 	if (!crtc)
414 		return -ENOENT;
415 
416 	plane = crtc->primary;
417 
418 	crtc_resp->gamma_size = crtc->gamma_size;
419 
420 	drm_modeset_lock(&plane->mutex, NULL);
421 	if (plane->state && plane->state->fb)
422 		crtc_resp->fb_id = plane->state->fb->base.id;
423 	else if (!plane->state && plane->fb)
424 		crtc_resp->fb_id = plane->fb->base.id;
425 	else
426 		crtc_resp->fb_id = 0;
427 
428 	if (plane->state) {
429 		crtc_resp->x = plane->state->src_x >> 16;
430 		crtc_resp->y = plane->state->src_y >> 16;
431 	}
432 	drm_modeset_unlock(&plane->mutex);
433 
434 	drm_modeset_lock(&crtc->mutex, NULL);
435 	if (crtc->state) {
436 		if (crtc->state->enable) {
437 			drm_mode_convert_to_umode(&crtc_resp->mode, &crtc->state->mode);
438 			crtc_resp->mode_valid = 1;
439 		} else {
440 			crtc_resp->mode_valid = 0;
441 		}
442 	} else {
443 		crtc_resp->x = crtc->x;
444 		crtc_resp->y = crtc->y;
445 
446 		if (crtc->enabled) {
447 			drm_mode_convert_to_umode(&crtc_resp->mode, &crtc->mode);
448 			crtc_resp->mode_valid = 1;
449 
450 		} else {
451 			crtc_resp->mode_valid = 0;
452 		}
453 	}
454 	if (!file_priv->aspect_ratio_allowed)
455 		crtc_resp->mode.flags &= ~DRM_MODE_FLAG_PIC_AR_MASK;
456 	drm_modeset_unlock(&crtc->mutex);
457 
458 	return 0;
459 }
460 
461 static int __drm_mode_set_config_internal(struct drm_mode_set *set,
462 					  struct drm_modeset_acquire_ctx *ctx)
463 {
464 	struct drm_crtc *crtc = set->crtc;
465 	struct drm_framebuffer *fb;
466 	struct drm_crtc *tmp;
467 	int ret;
468 
469 	WARN_ON(drm_drv_uses_atomic_modeset(crtc->dev));
470 
471 	/*
472 	 * NOTE: ->set_config can also disable other crtcs (if we steal all
473 	 * connectors from it), hence we need to refcount the fbs across all
474 	 * crtcs. Atomic modeset will have saner semantics ...
475 	 */
476 	drm_for_each_crtc(tmp, crtc->dev) {
477 		struct drm_plane *plane = tmp->primary;
478 
479 		plane->old_fb = plane->fb;
480 	}
481 
482 	fb = set->fb;
483 
484 	ret = crtc->funcs->set_config(set, ctx);
485 	if (ret == 0) {
486 		struct drm_plane *plane = crtc->primary;
487 
488 		plane->crtc = fb ? crtc : NULL;
489 		plane->fb = fb;
490 	}
491 
492 	drm_for_each_crtc(tmp, crtc->dev) {
493 		struct drm_plane *plane = tmp->primary;
494 
495 		if (plane->fb)
496 			drm_framebuffer_get(plane->fb);
497 		if (plane->old_fb)
498 			drm_framebuffer_put(plane->old_fb);
499 		plane->old_fb = NULL;
500 	}
501 
502 	return ret;
503 }
504 
505 /**
506  * drm_mode_set_config_internal - helper to call &drm_mode_config_funcs.set_config
507  * @set: modeset config to set
508  *
509  * This is a little helper to wrap internal calls to the
510  * &drm_mode_config_funcs.set_config driver interface. The only thing it adds is
511  * correct refcounting dance.
512  *
513  * This should only be used by non-atomic legacy drivers.
514  *
515  * Returns:
516  * Zero on success, negative errno on failure.
517  */
518 int drm_mode_set_config_internal(struct drm_mode_set *set)
519 {
520 	WARN_ON(drm_drv_uses_atomic_modeset(set->crtc->dev));
521 
522 	return __drm_mode_set_config_internal(set, NULL);
523 }
524 EXPORT_SYMBOL(drm_mode_set_config_internal);
525 
526 /**
527  * drm_crtc_check_viewport - Checks that a framebuffer is big enough for the
528  *     CRTC viewport
529  * @crtc: CRTC that framebuffer will be displayed on
530  * @x: x panning
531  * @y: y panning
532  * @mode: mode that framebuffer will be displayed under
533  * @fb: framebuffer to check size of
534  */
535 int drm_crtc_check_viewport(const struct drm_crtc *crtc,
536 			    int x, int y,
537 			    const struct drm_display_mode *mode,
538 			    const struct drm_framebuffer *fb)
539 
540 {
541 	int hdisplay, vdisplay;
542 
543 	drm_mode_get_hv_timing(mode, &hdisplay, &vdisplay);
544 
545 	if (crtc->state &&
546 	    drm_rotation_90_or_270(crtc->primary->state->rotation))
547 		swap(hdisplay, vdisplay);
548 
549 	return drm_framebuffer_check_src_coords(x << 16, y << 16,
550 						hdisplay << 16, vdisplay << 16,
551 						fb);
552 }
553 EXPORT_SYMBOL(drm_crtc_check_viewport);
554 
555 /**
556  * drm_mode_setcrtc - set CRTC configuration
557  * @dev: drm device for the ioctl
558  * @data: data pointer for the ioctl
559  * @file_priv: drm file for the ioctl call
560  *
561  * Build a new CRTC configuration based on user request.
562  *
563  * Called by the user via ioctl.
564  *
565  * Returns:
566  * Zero on success, negative errno on failure.
567  */
568 int drm_mode_setcrtc(struct drm_device *dev, void *data,
569 		     struct drm_file *file_priv)
570 {
571 	struct drm_mode_config *config = &dev->mode_config;
572 	struct drm_mode_crtc *crtc_req = data;
573 	struct drm_crtc *crtc;
574 	struct drm_plane *plane;
575 	struct drm_connector **connector_set = NULL, *connector;
576 	struct drm_framebuffer *fb = NULL;
577 	struct drm_display_mode *mode = NULL;
578 	struct drm_mode_set set;
579 	uint32_t __user *set_connectors_ptr;
580 	struct drm_modeset_acquire_ctx ctx;
581 	int ret;
582 	int i;
583 
584 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
585 		return -EOPNOTSUPP;
586 
587 	/*
588 	 * Universal plane src offsets are only 16.16, prevent havoc for
589 	 * drivers using universal plane code internally.
590 	 */
591 	if (crtc_req->x & 0xffff0000 || crtc_req->y & 0xffff0000)
592 		return -ERANGE;
593 
594 	crtc = drm_crtc_find(dev, file_priv, crtc_req->crtc_id);
595 	if (!crtc) {
596 		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id);
597 		return -ENOENT;
598 	}
599 	DRM_DEBUG_KMS("[CRTC:%d:%s]\n", crtc->base.id, crtc->name);
600 
601 	plane = crtc->primary;
602 
603 	mutex_lock(&crtc->dev->mode_config.mutex);
604 	DRM_MODESET_LOCK_ALL_BEGIN(dev, ctx,
605 				   DRM_MODESET_ACQUIRE_INTERRUPTIBLE, ret);
606 
607 	if (crtc_req->mode_valid) {
608 		/* If we have a mode we need a framebuffer. */
609 		/* If we pass -1, set the mode with the currently bound fb */
610 		if (crtc_req->fb_id == -1) {
611 			struct drm_framebuffer *old_fb;
612 
613 			if (plane->state)
614 				old_fb = plane->state->fb;
615 			else
616 				old_fb = plane->fb;
617 
618 			if (!old_fb) {
619 				DRM_DEBUG_KMS("CRTC doesn't have current FB\n");
620 				ret = -EINVAL;
621 				goto out;
622 			}
623 
624 			fb = old_fb;
625 			/* Make refcounting symmetric with the lookup path. */
626 			drm_framebuffer_get(fb);
627 		} else {
628 			fb = drm_framebuffer_lookup(dev, file_priv, crtc_req->fb_id);
629 			if (!fb) {
630 				DRM_DEBUG_KMS("Unknown FB ID%d\n",
631 						crtc_req->fb_id);
632 				ret = -ENOENT;
633 				goto out;
634 			}
635 		}
636 
637 		mode = drm_mode_create(dev);
638 		if (!mode) {
639 			ret = -ENOMEM;
640 			goto out;
641 		}
642 		if (!file_priv->aspect_ratio_allowed &&
643 		    (crtc_req->mode.flags & DRM_MODE_FLAG_PIC_AR_MASK) != DRM_MODE_FLAG_PIC_AR_NONE) {
644 			DRM_DEBUG_KMS("Unexpected aspect-ratio flag bits\n");
645 			ret = -EINVAL;
646 			goto out;
647 		}
648 
649 
650 		ret = drm_mode_convert_umode(dev, mode, &crtc_req->mode);
651 		if (ret) {
652 			DRM_DEBUG_KMS("Invalid mode (ret=%d, status=%s)\n",
653 				      ret, drm_get_mode_status_name(mode->status));
654 			drm_mode_debug_printmodeline(mode);
655 			goto out;
656 		}
657 
658 		/*
659 		 * Check whether the primary plane supports the fb pixel format.
660 		 * Drivers not implementing the universal planes API use a
661 		 * default formats list provided by the DRM core which doesn't
662 		 * match real hardware capabilities. Skip the check in that
663 		 * case.
664 		 */
665 		if (!plane->format_default) {
666 			ret = drm_plane_check_pixel_format(plane,
667 							   fb->format->format,
668 							   fb->modifier);
669 			if (ret) {
670 				struct drm_format_name_buf format_name;
671 				DRM_DEBUG_KMS("Invalid pixel format %s, modifier 0x%llx\n",
672 					      drm_get_format_name(fb->format->format,
673 								  &format_name),
674 					      fb->modifier);
675 				goto out;
676 			}
677 		}
678 
679 		ret = drm_crtc_check_viewport(crtc, crtc_req->x, crtc_req->y,
680 					      mode, fb);
681 		if (ret)
682 			goto out;
683 
684 	}
685 
686 	if (crtc_req->count_connectors == 0 && mode) {
687 		DRM_DEBUG_KMS("Count connectors is 0 but mode set\n");
688 		ret = -EINVAL;
689 		goto out;
690 	}
691 
692 	if (crtc_req->count_connectors > 0 && (!mode || !fb)) {
693 		DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",
694 			  crtc_req->count_connectors);
695 		ret = -EINVAL;
696 		goto out;
697 	}
698 
699 	if (crtc_req->count_connectors > 0) {
700 		u32 out_id;
701 
702 		/* Avoid unbounded kernel memory allocation */
703 		if (crtc_req->count_connectors > config->num_connector) {
704 			ret = -EINVAL;
705 			goto out;
706 		}
707 
708 		connector_set = kmalloc_array(crtc_req->count_connectors,
709 					      sizeof(struct drm_connector *),
710 					      GFP_KERNEL);
711 		if (!connector_set) {
712 			ret = -ENOMEM;
713 			goto out;
714 		}
715 
716 		for (i = 0; i < crtc_req->count_connectors; i++) {
717 			connector_set[i] = NULL;
718 			set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
719 			if (get_user(out_id, &set_connectors_ptr[i])) {
720 				ret = -EFAULT;
721 				goto out;
722 			}
723 
724 			connector = drm_connector_lookup(dev, file_priv, out_id);
725 			if (!connector) {
726 				DRM_DEBUG_KMS("Connector id %d unknown\n",
727 						out_id);
728 				ret = -ENOENT;
729 				goto out;
730 			}
731 			DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
732 					connector->base.id,
733 					connector->name);
734 
735 			connector_set[i] = connector;
736 		}
737 	}
738 
739 	set.crtc = crtc;
740 	set.x = crtc_req->x;
741 	set.y = crtc_req->y;
742 	set.mode = mode;
743 	set.connectors = connector_set;
744 	set.num_connectors = crtc_req->count_connectors;
745 	set.fb = fb;
746 
747 	if (drm_drv_uses_atomic_modeset(dev))
748 		ret = crtc->funcs->set_config(&set, &ctx);
749 	else
750 		ret = __drm_mode_set_config_internal(&set, &ctx);
751 
752 out:
753 	if (fb)
754 		drm_framebuffer_put(fb);
755 
756 	if (connector_set) {
757 		for (i = 0; i < crtc_req->count_connectors; i++) {
758 			if (connector_set[i])
759 				drm_connector_put(connector_set[i]);
760 		}
761 	}
762 	kfree(connector_set);
763 	drm_mode_destroy(dev, mode);
764 
765 	/* In case we need to retry... */
766 	connector_set = NULL;
767 	fb = NULL;
768 	mode = NULL;
769 
770 	DRM_MODESET_LOCK_ALL_END(ctx, ret);
771 	mutex_unlock(&crtc->dev->mode_config.mutex);
772 
773 	return ret;
774 }
775 
776 int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
777 			       struct drm_property *property,
778 			       uint64_t value)
779 {
780 	int ret = -EINVAL;
781 	struct drm_crtc *crtc = obj_to_crtc(obj);
782 
783 	if (crtc->funcs->set_property)
784 		ret = crtc->funcs->set_property(crtc, property, value);
785 	if (!ret)
786 		drm_object_property_set_value(obj, property, value);
787 
788 	return ret;
789 }
790