xref: /openbmc/linux/drivers/gpu/drm/drm_crtc.c (revision e6c81cce)
1 /*
2  * Copyright (c) 2006-2008 Intel Corporation
3  * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
4  * Copyright (c) 2008 Red Hat Inc.
5  *
6  * DRM core CRTC related functions
7  *
8  * Permission to use, copy, modify, distribute, and sell this software and its
9  * documentation for any purpose is hereby granted without fee, provided that
10  * the above copyright notice appear in all copies and that both that copyright
11  * notice and this permission notice appear in supporting documentation, and
12  * that the name of the copyright holders not be used in advertising or
13  * publicity pertaining to distribution of the software without specific,
14  * written prior permission.  The copyright holders make no representations
15  * about the suitability of this software for any purpose.  It is provided "as
16  * is" without express or implied warranty.
17  *
18  * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
19  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
20  * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
21  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
22  * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
23  * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
24  * OF THIS SOFTWARE.
25  *
26  * Authors:
27  *      Keith Packard
28  *	Eric Anholt <eric@anholt.net>
29  *      Dave Airlie <airlied@linux.ie>
30  *      Jesse Barnes <jesse.barnes@intel.com>
31  */
32 #include <linux/ctype.h>
33 #include <linux/list.h>
34 #include <linux/slab.h>
35 #include <linux/export.h>
36 #include <drm/drmP.h>
37 #include <drm/drm_crtc.h>
38 #include <drm/drm_edid.h>
39 #include <drm/drm_fourcc.h>
40 #include <drm/drm_modeset_lock.h>
41 #include <drm/drm_atomic.h>
42 
43 #include "drm_crtc_internal.h"
44 #include "drm_internal.h"
45 
46 static struct drm_framebuffer *
47 internal_framebuffer_create(struct drm_device *dev,
48 			    struct drm_mode_fb_cmd2 *r,
49 			    struct drm_file *file_priv);
50 
51 /* Avoid boilerplate.  I'm tired of typing. */
52 #define DRM_ENUM_NAME_FN(fnname, list)				\
53 	const char *fnname(int val)				\
54 	{							\
55 		int i;						\
56 		for (i = 0; i < ARRAY_SIZE(list); i++) {	\
57 			if (list[i].type == val)		\
58 				return list[i].name;		\
59 		}						\
60 		return "(unknown)";				\
61 	}
62 
63 /*
64  * Global properties
65  */
66 static const struct drm_prop_enum_list drm_dpms_enum_list[] = {
67 	{ DRM_MODE_DPMS_ON, "On" },
68 	{ DRM_MODE_DPMS_STANDBY, "Standby" },
69 	{ DRM_MODE_DPMS_SUSPEND, "Suspend" },
70 	{ DRM_MODE_DPMS_OFF, "Off" }
71 };
72 
73 DRM_ENUM_NAME_FN(drm_get_dpms_name, drm_dpms_enum_list)
74 
75 static const struct drm_prop_enum_list drm_plane_type_enum_list[] = {
76 	{ DRM_PLANE_TYPE_OVERLAY, "Overlay" },
77 	{ DRM_PLANE_TYPE_PRIMARY, "Primary" },
78 	{ DRM_PLANE_TYPE_CURSOR, "Cursor" },
79 };
80 
81 /*
82  * Optional properties
83  */
84 static const struct drm_prop_enum_list drm_scaling_mode_enum_list[] = {
85 	{ DRM_MODE_SCALE_NONE, "None" },
86 	{ DRM_MODE_SCALE_FULLSCREEN, "Full" },
87 	{ DRM_MODE_SCALE_CENTER, "Center" },
88 	{ DRM_MODE_SCALE_ASPECT, "Full aspect" },
89 };
90 
91 static const struct drm_prop_enum_list drm_aspect_ratio_enum_list[] = {
92 	{ DRM_MODE_PICTURE_ASPECT_NONE, "Automatic" },
93 	{ DRM_MODE_PICTURE_ASPECT_4_3, "4:3" },
94 	{ DRM_MODE_PICTURE_ASPECT_16_9, "16:9" },
95 };
96 
97 /*
98  * Non-global properties, but "required" for certain connectors.
99  */
100 static const struct drm_prop_enum_list drm_dvi_i_select_enum_list[] = {
101 	{ DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
102 	{ DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
103 	{ DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
104 };
105 
106 DRM_ENUM_NAME_FN(drm_get_dvi_i_select_name, drm_dvi_i_select_enum_list)
107 
108 static const struct drm_prop_enum_list drm_dvi_i_subconnector_enum_list[] = {
109 	{ DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
110 	{ DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
111 	{ DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
112 };
113 
114 DRM_ENUM_NAME_FN(drm_get_dvi_i_subconnector_name,
115 		 drm_dvi_i_subconnector_enum_list)
116 
117 static const struct drm_prop_enum_list drm_tv_select_enum_list[] = {
118 	{ DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
119 	{ DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
120 	{ DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
121 	{ DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
122 	{ DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
123 };
124 
125 DRM_ENUM_NAME_FN(drm_get_tv_select_name, drm_tv_select_enum_list)
126 
127 static const struct drm_prop_enum_list drm_tv_subconnector_enum_list[] = {
128 	{ DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
129 	{ DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
130 	{ DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
131 	{ DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
132 	{ DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
133 };
134 
135 DRM_ENUM_NAME_FN(drm_get_tv_subconnector_name,
136 		 drm_tv_subconnector_enum_list)
137 
138 static const struct drm_prop_enum_list drm_dirty_info_enum_list[] = {
139 	{ DRM_MODE_DIRTY_OFF,      "Off"      },
140 	{ DRM_MODE_DIRTY_ON,       "On"       },
141 	{ DRM_MODE_DIRTY_ANNOTATE, "Annotate" },
142 };
143 
144 struct drm_conn_prop_enum_list {
145 	int type;
146 	const char *name;
147 	struct ida ida;
148 };
149 
150 /*
151  * Connector and encoder types.
152  */
153 static struct drm_conn_prop_enum_list drm_connector_enum_list[] = {
154 	{ DRM_MODE_CONNECTOR_Unknown, "Unknown" },
155 	{ DRM_MODE_CONNECTOR_VGA, "VGA" },
156 	{ DRM_MODE_CONNECTOR_DVII, "DVI-I" },
157 	{ DRM_MODE_CONNECTOR_DVID, "DVI-D" },
158 	{ DRM_MODE_CONNECTOR_DVIA, "DVI-A" },
159 	{ DRM_MODE_CONNECTOR_Composite, "Composite" },
160 	{ DRM_MODE_CONNECTOR_SVIDEO, "SVIDEO" },
161 	{ DRM_MODE_CONNECTOR_LVDS, "LVDS" },
162 	{ DRM_MODE_CONNECTOR_Component, "Component" },
163 	{ DRM_MODE_CONNECTOR_9PinDIN, "DIN" },
164 	{ DRM_MODE_CONNECTOR_DisplayPort, "DP" },
165 	{ DRM_MODE_CONNECTOR_HDMIA, "HDMI-A" },
166 	{ DRM_MODE_CONNECTOR_HDMIB, "HDMI-B" },
167 	{ DRM_MODE_CONNECTOR_TV, "TV" },
168 	{ DRM_MODE_CONNECTOR_eDP, "eDP" },
169 	{ DRM_MODE_CONNECTOR_VIRTUAL, "Virtual" },
170 	{ DRM_MODE_CONNECTOR_DSI, "DSI" },
171 };
172 
173 static const struct drm_prop_enum_list drm_encoder_enum_list[] = {
174 	{ DRM_MODE_ENCODER_NONE, "None" },
175 	{ DRM_MODE_ENCODER_DAC, "DAC" },
176 	{ DRM_MODE_ENCODER_TMDS, "TMDS" },
177 	{ DRM_MODE_ENCODER_LVDS, "LVDS" },
178 	{ DRM_MODE_ENCODER_TVDAC, "TV" },
179 	{ DRM_MODE_ENCODER_VIRTUAL, "Virtual" },
180 	{ DRM_MODE_ENCODER_DSI, "DSI" },
181 	{ DRM_MODE_ENCODER_DPMST, "DP MST" },
182 };
183 
184 static const struct drm_prop_enum_list drm_subpixel_enum_list[] = {
185 	{ SubPixelUnknown, "Unknown" },
186 	{ SubPixelHorizontalRGB, "Horizontal RGB" },
187 	{ SubPixelHorizontalBGR, "Horizontal BGR" },
188 	{ SubPixelVerticalRGB, "Vertical RGB" },
189 	{ SubPixelVerticalBGR, "Vertical BGR" },
190 	{ SubPixelNone, "None" },
191 };
192 
193 void drm_connector_ida_init(void)
194 {
195 	int i;
196 
197 	for (i = 0; i < ARRAY_SIZE(drm_connector_enum_list); i++)
198 		ida_init(&drm_connector_enum_list[i].ida);
199 }
200 
201 void drm_connector_ida_destroy(void)
202 {
203 	int i;
204 
205 	for (i = 0; i < ARRAY_SIZE(drm_connector_enum_list); i++)
206 		ida_destroy(&drm_connector_enum_list[i].ida);
207 }
208 
209 /**
210  * drm_get_connector_status_name - return a string for connector status
211  * @status: connector status to compute name of
212  *
213  * In contrast to the other drm_get_*_name functions this one here returns a
214  * const pointer and hence is threadsafe.
215  */
216 const char *drm_get_connector_status_name(enum drm_connector_status status)
217 {
218 	if (status == connector_status_connected)
219 		return "connected";
220 	else if (status == connector_status_disconnected)
221 		return "disconnected";
222 	else
223 		return "unknown";
224 }
225 EXPORT_SYMBOL(drm_get_connector_status_name);
226 
227 /**
228  * drm_get_subpixel_order_name - return a string for a given subpixel enum
229  * @order: enum of subpixel_order
230  *
231  * Note you could abuse this and return something out of bounds, but that
232  * would be a caller error.  No unscrubbed user data should make it here.
233  */
234 const char *drm_get_subpixel_order_name(enum subpixel_order order)
235 {
236 	return drm_subpixel_enum_list[order].name;
237 }
238 EXPORT_SYMBOL(drm_get_subpixel_order_name);
239 
240 static char printable_char(int c)
241 {
242 	return isascii(c) && isprint(c) ? c : '?';
243 }
244 
245 /**
246  * drm_get_format_name - return a string for drm fourcc format
247  * @format: format to compute name of
248  *
249  * Note that the buffer used by this function is globally shared and owned by
250  * the function itself.
251  *
252  * FIXME: This isn't really multithreading safe.
253  */
254 const char *drm_get_format_name(uint32_t format)
255 {
256 	static char buf[32];
257 
258 	snprintf(buf, sizeof(buf),
259 		 "%c%c%c%c %s-endian (0x%08x)",
260 		 printable_char(format & 0xff),
261 		 printable_char((format >> 8) & 0xff),
262 		 printable_char((format >> 16) & 0xff),
263 		 printable_char((format >> 24) & 0x7f),
264 		 format & DRM_FORMAT_BIG_ENDIAN ? "big" : "little",
265 		 format);
266 
267 	return buf;
268 }
269 EXPORT_SYMBOL(drm_get_format_name);
270 
271 /*
272  * Internal function to assign a slot in the object idr and optionally
273  * register the object into the idr.
274  */
275 static int drm_mode_object_get_reg(struct drm_device *dev,
276 				   struct drm_mode_object *obj,
277 				   uint32_t obj_type,
278 				   bool register_obj)
279 {
280 	int ret;
281 
282 	mutex_lock(&dev->mode_config.idr_mutex);
283 	ret = idr_alloc(&dev->mode_config.crtc_idr, register_obj ? obj : NULL, 1, 0, GFP_KERNEL);
284 	if (ret >= 0) {
285 		/*
286 		 * Set up the object linking under the protection of the idr
287 		 * lock so that other users can't see inconsistent state.
288 		 */
289 		obj->id = ret;
290 		obj->type = obj_type;
291 	}
292 	mutex_unlock(&dev->mode_config.idr_mutex);
293 
294 	return ret < 0 ? ret : 0;
295 }
296 
297 /**
298  * drm_mode_object_get - allocate a new modeset identifier
299  * @dev: DRM device
300  * @obj: object pointer, used to generate unique ID
301  * @obj_type: object type
302  *
303  * Create a unique identifier based on @ptr in @dev's identifier space.  Used
304  * for tracking modes, CRTCs and connectors. Note that despite the _get postfix
305  * modeset identifiers are _not_ reference counted. Hence don't use this for
306  * reference counted modeset objects like framebuffers.
307  *
308  * Returns:
309  * New unique (relative to other objects in @dev) integer identifier for the
310  * object.
311  */
312 int drm_mode_object_get(struct drm_device *dev,
313 			struct drm_mode_object *obj, uint32_t obj_type)
314 {
315 	return drm_mode_object_get_reg(dev, obj, obj_type, true);
316 }
317 
318 static void drm_mode_object_register(struct drm_device *dev,
319 				     struct drm_mode_object *obj)
320 {
321 	mutex_lock(&dev->mode_config.idr_mutex);
322 	idr_replace(&dev->mode_config.crtc_idr, obj, obj->id);
323 	mutex_unlock(&dev->mode_config.idr_mutex);
324 }
325 
326 /**
327  * drm_mode_object_put - free a modeset identifer
328  * @dev: DRM device
329  * @object: object to free
330  *
331  * Free @id from @dev's unique identifier pool. Note that despite the _get
332  * postfix modeset identifiers are _not_ reference counted. Hence don't use this
333  * for reference counted modeset objects like framebuffers.
334  */
335 void drm_mode_object_put(struct drm_device *dev,
336 			 struct drm_mode_object *object)
337 {
338 	mutex_lock(&dev->mode_config.idr_mutex);
339 	idr_remove(&dev->mode_config.crtc_idr, object->id);
340 	mutex_unlock(&dev->mode_config.idr_mutex);
341 }
342 
343 static struct drm_mode_object *_object_find(struct drm_device *dev,
344 		uint32_t id, uint32_t type)
345 {
346 	struct drm_mode_object *obj = NULL;
347 
348 	mutex_lock(&dev->mode_config.idr_mutex);
349 	obj = idr_find(&dev->mode_config.crtc_idr, id);
350 	if (obj && type != DRM_MODE_OBJECT_ANY && obj->type != type)
351 		obj = NULL;
352 	if (obj && obj->id != id)
353 		obj = NULL;
354 	/* don't leak out unref'd fb's */
355 	if (obj && (obj->type == DRM_MODE_OBJECT_FB))
356 		obj = NULL;
357 	mutex_unlock(&dev->mode_config.idr_mutex);
358 
359 	return obj;
360 }
361 
362 /**
363  * drm_mode_object_find - look up a drm object with static lifetime
364  * @dev: drm device
365  * @id: id of the mode object
366  * @type: type of the mode object
367  *
368  * Note that framebuffers cannot be looked up with this functions - since those
369  * are reference counted, they need special treatment.  Even with
370  * DRM_MODE_OBJECT_ANY (although that will simply return NULL
371  * rather than WARN_ON()).
372  */
373 struct drm_mode_object *drm_mode_object_find(struct drm_device *dev,
374 		uint32_t id, uint32_t type)
375 {
376 	struct drm_mode_object *obj = NULL;
377 
378 	/* Framebuffers are reference counted and need their own lookup
379 	 * function.*/
380 	WARN_ON(type == DRM_MODE_OBJECT_FB);
381 	obj = _object_find(dev, id, type);
382 	return obj;
383 }
384 EXPORT_SYMBOL(drm_mode_object_find);
385 
386 /**
387  * drm_framebuffer_init - initialize a framebuffer
388  * @dev: DRM device
389  * @fb: framebuffer to be initialized
390  * @funcs: ... with these functions
391  *
392  * Allocates an ID for the framebuffer's parent mode object, sets its mode
393  * functions & device file and adds it to the master fd list.
394  *
395  * IMPORTANT:
396  * This functions publishes the fb and makes it available for concurrent access
397  * by other users. Which means by this point the fb _must_ be fully set up -
398  * since all the fb attributes are invariant over its lifetime, no further
399  * locking but only correct reference counting is required.
400  *
401  * Returns:
402  * Zero on success, error code on failure.
403  */
404 int drm_framebuffer_init(struct drm_device *dev, struct drm_framebuffer *fb,
405 			 const struct drm_framebuffer_funcs *funcs)
406 {
407 	int ret;
408 
409 	mutex_lock(&dev->mode_config.fb_lock);
410 	kref_init(&fb->refcount);
411 	INIT_LIST_HEAD(&fb->filp_head);
412 	fb->dev = dev;
413 	fb->funcs = funcs;
414 
415 	ret = drm_mode_object_get(dev, &fb->base, DRM_MODE_OBJECT_FB);
416 	if (ret)
417 		goto out;
418 
419 	dev->mode_config.num_fb++;
420 	list_add(&fb->head, &dev->mode_config.fb_list);
421 out:
422 	mutex_unlock(&dev->mode_config.fb_lock);
423 
424 	return 0;
425 }
426 EXPORT_SYMBOL(drm_framebuffer_init);
427 
428 /* dev->mode_config.fb_lock must be held! */
429 static void __drm_framebuffer_unregister(struct drm_device *dev,
430 					 struct drm_framebuffer *fb)
431 {
432 	mutex_lock(&dev->mode_config.idr_mutex);
433 	idr_remove(&dev->mode_config.crtc_idr, fb->base.id);
434 	mutex_unlock(&dev->mode_config.idr_mutex);
435 
436 	fb->base.id = 0;
437 }
438 
439 static void drm_framebuffer_free(struct kref *kref)
440 {
441 	struct drm_framebuffer *fb =
442 			container_of(kref, struct drm_framebuffer, refcount);
443 	struct drm_device *dev = fb->dev;
444 
445 	/*
446 	 * The lookup idr holds a weak reference, which has not necessarily been
447 	 * removed at this point. Check for that.
448 	 */
449 	mutex_lock(&dev->mode_config.fb_lock);
450 	if (fb->base.id) {
451 		/* Mark fb as reaped and drop idr ref. */
452 		__drm_framebuffer_unregister(dev, fb);
453 	}
454 	mutex_unlock(&dev->mode_config.fb_lock);
455 
456 	fb->funcs->destroy(fb);
457 }
458 
459 static struct drm_framebuffer *__drm_framebuffer_lookup(struct drm_device *dev,
460 							uint32_t id)
461 {
462 	struct drm_mode_object *obj = NULL;
463 	struct drm_framebuffer *fb;
464 
465 	mutex_lock(&dev->mode_config.idr_mutex);
466 	obj = idr_find(&dev->mode_config.crtc_idr, id);
467 	if (!obj || (obj->type != DRM_MODE_OBJECT_FB) || (obj->id != id))
468 		fb = NULL;
469 	else
470 		fb = obj_to_fb(obj);
471 	mutex_unlock(&dev->mode_config.idr_mutex);
472 
473 	return fb;
474 }
475 
476 /**
477  * drm_framebuffer_lookup - look up a drm framebuffer and grab a reference
478  * @dev: drm device
479  * @id: id of the fb object
480  *
481  * If successful, this grabs an additional reference to the framebuffer -
482  * callers need to make sure to eventually unreference the returned framebuffer
483  * again, using @drm_framebuffer_unreference.
484  */
485 struct drm_framebuffer *drm_framebuffer_lookup(struct drm_device *dev,
486 					       uint32_t id)
487 {
488 	struct drm_framebuffer *fb;
489 
490 	mutex_lock(&dev->mode_config.fb_lock);
491 	fb = __drm_framebuffer_lookup(dev, id);
492 	if (fb) {
493 		if (!kref_get_unless_zero(&fb->refcount))
494 			fb = NULL;
495 	}
496 	mutex_unlock(&dev->mode_config.fb_lock);
497 
498 	return fb;
499 }
500 EXPORT_SYMBOL(drm_framebuffer_lookup);
501 
502 /**
503  * drm_framebuffer_unreference - unref a framebuffer
504  * @fb: framebuffer to unref
505  *
506  * This functions decrements the fb's refcount and frees it if it drops to zero.
507  */
508 void drm_framebuffer_unreference(struct drm_framebuffer *fb)
509 {
510 	DRM_DEBUG("%p: FB ID: %d (%d)\n", fb, fb->base.id, atomic_read(&fb->refcount.refcount));
511 	kref_put(&fb->refcount, drm_framebuffer_free);
512 }
513 EXPORT_SYMBOL(drm_framebuffer_unreference);
514 
515 /**
516  * drm_framebuffer_reference - incr the fb refcnt
517  * @fb: framebuffer
518  *
519  * This functions increments the fb's refcount.
520  */
521 void drm_framebuffer_reference(struct drm_framebuffer *fb)
522 {
523 	DRM_DEBUG("%p: FB ID: %d (%d)\n", fb, fb->base.id, atomic_read(&fb->refcount.refcount));
524 	kref_get(&fb->refcount);
525 }
526 EXPORT_SYMBOL(drm_framebuffer_reference);
527 
528 /**
529  * drm_framebuffer_unregister_private - unregister a private fb from the lookup idr
530  * @fb: fb to unregister
531  *
532  * Drivers need to call this when cleaning up driver-private framebuffers, e.g.
533  * those used for fbdev. Note that the caller must hold a reference of it's own,
534  * i.e. the object may not be destroyed through this call (since it'll lead to a
535  * locking inversion).
536  */
537 void drm_framebuffer_unregister_private(struct drm_framebuffer *fb)
538 {
539 	struct drm_device *dev = fb->dev;
540 
541 	mutex_lock(&dev->mode_config.fb_lock);
542 	/* Mark fb as reaped and drop idr ref. */
543 	__drm_framebuffer_unregister(dev, fb);
544 	mutex_unlock(&dev->mode_config.fb_lock);
545 }
546 EXPORT_SYMBOL(drm_framebuffer_unregister_private);
547 
548 /**
549  * drm_framebuffer_cleanup - remove a framebuffer object
550  * @fb: framebuffer to remove
551  *
552  * Cleanup framebuffer. This function is intended to be used from the drivers
553  * ->destroy callback. It can also be used to clean up driver private
554  *  framebuffers embedded into a larger structure.
555  *
556  * Note that this function does not remove the fb from active usuage - if it is
557  * still used anywhere, hilarity can ensue since userspace could call getfb on
558  * the id and get back -EINVAL. Obviously no concern at driver unload time.
559  *
560  * Also, the framebuffer will not be removed from the lookup idr - for
561  * user-created framebuffers this will happen in in the rmfb ioctl. For
562  * driver-private objects (e.g. for fbdev) drivers need to explicitly call
563  * drm_framebuffer_unregister_private.
564  */
565 void drm_framebuffer_cleanup(struct drm_framebuffer *fb)
566 {
567 	struct drm_device *dev = fb->dev;
568 
569 	mutex_lock(&dev->mode_config.fb_lock);
570 	list_del(&fb->head);
571 	dev->mode_config.num_fb--;
572 	mutex_unlock(&dev->mode_config.fb_lock);
573 }
574 EXPORT_SYMBOL(drm_framebuffer_cleanup);
575 
576 /**
577  * drm_framebuffer_remove - remove and unreference a framebuffer object
578  * @fb: framebuffer to remove
579  *
580  * Scans all the CRTCs and planes in @dev's mode_config.  If they're
581  * using @fb, removes it, setting it to NULL. Then drops the reference to the
582  * passed-in framebuffer. Might take the modeset locks.
583  *
584  * Note that this function optimizes the cleanup away if the caller holds the
585  * last reference to the framebuffer. It is also guaranteed to not take the
586  * modeset locks in this case.
587  */
588 void drm_framebuffer_remove(struct drm_framebuffer *fb)
589 {
590 	struct drm_device *dev = fb->dev;
591 	struct drm_crtc *crtc;
592 	struct drm_plane *plane;
593 	struct drm_mode_set set;
594 	int ret;
595 
596 	WARN_ON(!list_empty(&fb->filp_head));
597 
598 	/*
599 	 * drm ABI mandates that we remove any deleted framebuffers from active
600 	 * useage. But since most sane clients only remove framebuffers they no
601 	 * longer need, try to optimize this away.
602 	 *
603 	 * Since we're holding a reference ourselves, observing a refcount of 1
604 	 * means that we're the last holder and can skip it. Also, the refcount
605 	 * can never increase from 1 again, so we don't need any barriers or
606 	 * locks.
607 	 *
608 	 * Note that userspace could try to race with use and instate a new
609 	 * usage _after_ we've cleared all current ones. End result will be an
610 	 * in-use fb with fb-id == 0. Userspace is allowed to shoot its own foot
611 	 * in this manner.
612 	 */
613 	if (atomic_read(&fb->refcount.refcount) > 1) {
614 		drm_modeset_lock_all(dev);
615 		/* remove from any CRTC */
616 		list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
617 			if (crtc->primary->fb == fb) {
618 				/* should turn off the crtc */
619 				memset(&set, 0, sizeof(struct drm_mode_set));
620 				set.crtc = crtc;
621 				set.fb = NULL;
622 				ret = drm_mode_set_config_internal(&set);
623 				if (ret)
624 					DRM_ERROR("failed to reset crtc %p when fb was deleted\n", crtc);
625 			}
626 		}
627 
628 		list_for_each_entry(plane, &dev->mode_config.plane_list, head) {
629 			if (plane->fb == fb)
630 				drm_plane_force_disable(plane);
631 		}
632 		drm_modeset_unlock_all(dev);
633 	}
634 
635 	drm_framebuffer_unreference(fb);
636 }
637 EXPORT_SYMBOL(drm_framebuffer_remove);
638 
639 DEFINE_WW_CLASS(crtc_ww_class);
640 
641 /**
642  * drm_crtc_init_with_planes - Initialise a new CRTC object with
643  *    specified primary and cursor planes.
644  * @dev: DRM device
645  * @crtc: CRTC object to init
646  * @primary: Primary plane for CRTC
647  * @cursor: Cursor plane for CRTC
648  * @funcs: callbacks for the new CRTC
649  *
650  * Inits a new object created as base part of a driver crtc object.
651  *
652  * Returns:
653  * Zero on success, error code on failure.
654  */
655 int drm_crtc_init_with_planes(struct drm_device *dev, struct drm_crtc *crtc,
656 			      struct drm_plane *primary,
657 			      struct drm_plane *cursor,
658 			      const struct drm_crtc_funcs *funcs)
659 {
660 	struct drm_mode_config *config = &dev->mode_config;
661 	int ret;
662 
663 	WARN_ON(primary && primary->type != DRM_PLANE_TYPE_PRIMARY);
664 	WARN_ON(cursor && cursor->type != DRM_PLANE_TYPE_CURSOR);
665 
666 	crtc->dev = dev;
667 	crtc->funcs = funcs;
668 	crtc->invert_dimensions = false;
669 
670 	drm_modeset_lock_init(&crtc->mutex);
671 	ret = drm_mode_object_get(dev, &crtc->base, DRM_MODE_OBJECT_CRTC);
672 	if (ret)
673 		return ret;
674 
675 	crtc->base.properties = &crtc->properties;
676 
677 	list_add_tail(&crtc->head, &config->crtc_list);
678 	config->num_crtc++;
679 
680 	crtc->primary = primary;
681 	crtc->cursor = cursor;
682 	if (primary)
683 		primary->possible_crtcs = 1 << drm_crtc_index(crtc);
684 	if (cursor)
685 		cursor->possible_crtcs = 1 << drm_crtc_index(crtc);
686 
687 	if (drm_core_check_feature(dev, DRIVER_ATOMIC)) {
688 		drm_object_attach_property(&crtc->base, config->prop_active, 0);
689 	}
690 
691 	return 0;
692 }
693 EXPORT_SYMBOL(drm_crtc_init_with_planes);
694 
695 /**
696  * drm_crtc_cleanup - Clean up the core crtc usage
697  * @crtc: CRTC to cleanup
698  *
699  * This function cleans up @crtc and removes it from the DRM mode setting
700  * core. Note that the function does *not* free the crtc structure itself,
701  * this is the responsibility of the caller.
702  */
703 void drm_crtc_cleanup(struct drm_crtc *crtc)
704 {
705 	struct drm_device *dev = crtc->dev;
706 
707 	kfree(crtc->gamma_store);
708 	crtc->gamma_store = NULL;
709 
710 	drm_modeset_lock_fini(&crtc->mutex);
711 
712 	drm_mode_object_put(dev, &crtc->base);
713 	list_del(&crtc->head);
714 	dev->mode_config.num_crtc--;
715 
716 	WARN_ON(crtc->state && !crtc->funcs->atomic_destroy_state);
717 	if (crtc->state && crtc->funcs->atomic_destroy_state)
718 		crtc->funcs->atomic_destroy_state(crtc, crtc->state);
719 
720 	memset(crtc, 0, sizeof(*crtc));
721 }
722 EXPORT_SYMBOL(drm_crtc_cleanup);
723 
724 /**
725  * drm_crtc_index - find the index of a registered CRTC
726  * @crtc: CRTC to find index for
727  *
728  * Given a registered CRTC, return the index of that CRTC within a DRM
729  * device's list of CRTCs.
730  */
731 unsigned int drm_crtc_index(struct drm_crtc *crtc)
732 {
733 	unsigned int index = 0;
734 	struct drm_crtc *tmp;
735 
736 	list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head) {
737 		if (tmp == crtc)
738 			return index;
739 
740 		index++;
741 	}
742 
743 	BUG();
744 }
745 EXPORT_SYMBOL(drm_crtc_index);
746 
747 /*
748  * drm_mode_remove - remove and free a mode
749  * @connector: connector list to modify
750  * @mode: mode to remove
751  *
752  * Remove @mode from @connector's mode list, then free it.
753  */
754 static void drm_mode_remove(struct drm_connector *connector,
755 			    struct drm_display_mode *mode)
756 {
757 	list_del(&mode->head);
758 	drm_mode_destroy(connector->dev, mode);
759 }
760 
761 /**
762  * drm_display_info_set_bus_formats - set the supported bus formats
763  * @info: display info to store bus formats in
764  * @formats: array containing the supported bus formats
765  * @num_formats: the number of entries in the fmts array
766  *
767  * Store the supported bus formats in display info structure.
768  * See MEDIA_BUS_FMT_* definitions in include/uapi/linux/media-bus-format.h for
769  * a full list of available formats.
770  */
771 int drm_display_info_set_bus_formats(struct drm_display_info *info,
772 				     const u32 *formats,
773 				     unsigned int num_formats)
774 {
775 	u32 *fmts = NULL;
776 
777 	if (!formats && num_formats)
778 		return -EINVAL;
779 
780 	if (formats && num_formats) {
781 		fmts = kmemdup(formats, sizeof(*formats) * num_formats,
782 			       GFP_KERNEL);
783 		if (!fmts)
784 			return -ENOMEM;
785 	}
786 
787 	kfree(info->bus_formats);
788 	info->bus_formats = fmts;
789 	info->num_bus_formats = num_formats;
790 
791 	return 0;
792 }
793 EXPORT_SYMBOL(drm_display_info_set_bus_formats);
794 
795 /**
796  * drm_connector_get_cmdline_mode - reads the user's cmdline mode
797  * @connector: connector to quwery
798  *
799  * The kernel supports per-connector configration of its consoles through
800  * use of the video= parameter. This function parses that option and
801  * extracts the user's specified mode (or enable/disable status) for a
802  * particular connector. This is typically only used during the early fbdev
803  * setup.
804  */
805 static void drm_connector_get_cmdline_mode(struct drm_connector *connector)
806 {
807 	struct drm_cmdline_mode *mode = &connector->cmdline_mode;
808 	char *option = NULL;
809 
810 	if (fb_get_options(connector->name, &option))
811 		return;
812 
813 	if (!drm_mode_parse_command_line_for_connector(option,
814 						       connector,
815 						       mode))
816 		return;
817 
818 	if (mode->force) {
819 		const char *s;
820 
821 		switch (mode->force) {
822 		case DRM_FORCE_OFF:
823 			s = "OFF";
824 			break;
825 		case DRM_FORCE_ON_DIGITAL:
826 			s = "ON - dig";
827 			break;
828 		default:
829 		case DRM_FORCE_ON:
830 			s = "ON";
831 			break;
832 		}
833 
834 		DRM_INFO("forcing %s connector %s\n", connector->name, s);
835 		connector->force = mode->force;
836 	}
837 
838 	DRM_DEBUG_KMS("cmdline mode for connector %s %dx%d@%dHz%s%s%s\n",
839 		      connector->name,
840 		      mode->xres, mode->yres,
841 		      mode->refresh_specified ? mode->refresh : 60,
842 		      mode->rb ? " reduced blanking" : "",
843 		      mode->margins ? " with margins" : "",
844 		      mode->interlace ?  " interlaced" : "");
845 }
846 
847 /**
848  * drm_connector_init - Init a preallocated connector
849  * @dev: DRM device
850  * @connector: the connector to init
851  * @funcs: callbacks for this connector
852  * @connector_type: user visible type of the connector
853  *
854  * Initialises a preallocated connector. Connectors should be
855  * subclassed as part of driver connector objects.
856  *
857  * Returns:
858  * Zero on success, error code on failure.
859  */
860 int drm_connector_init(struct drm_device *dev,
861 		       struct drm_connector *connector,
862 		       const struct drm_connector_funcs *funcs,
863 		       int connector_type)
864 {
865 	struct drm_mode_config *config = &dev->mode_config;
866 	int ret;
867 	struct ida *connector_ida =
868 		&drm_connector_enum_list[connector_type].ida;
869 
870 	drm_modeset_lock_all(dev);
871 
872 	ret = drm_mode_object_get_reg(dev, &connector->base, DRM_MODE_OBJECT_CONNECTOR, false);
873 	if (ret)
874 		goto out_unlock;
875 
876 	connector->base.properties = &connector->properties;
877 	connector->dev = dev;
878 	connector->funcs = funcs;
879 	connector->connector_type = connector_type;
880 	connector->connector_type_id =
881 		ida_simple_get(connector_ida, 1, 0, GFP_KERNEL);
882 	if (connector->connector_type_id < 0) {
883 		ret = connector->connector_type_id;
884 		goto out_put;
885 	}
886 	connector->name =
887 		kasprintf(GFP_KERNEL, "%s-%d",
888 			  drm_connector_enum_list[connector_type].name,
889 			  connector->connector_type_id);
890 	if (!connector->name) {
891 		ret = -ENOMEM;
892 		goto out_put;
893 	}
894 
895 	INIT_LIST_HEAD(&connector->probed_modes);
896 	INIT_LIST_HEAD(&connector->modes);
897 	connector->edid_blob_ptr = NULL;
898 	connector->status = connector_status_unknown;
899 
900 	drm_connector_get_cmdline_mode(connector);
901 
902 	/* We should add connectors at the end to avoid upsetting the connector
903 	 * index too much. */
904 	list_add_tail(&connector->head, &config->connector_list);
905 	config->num_connector++;
906 
907 	if (connector_type != DRM_MODE_CONNECTOR_VIRTUAL)
908 		drm_object_attach_property(&connector->base,
909 					      config->edid_property,
910 					      0);
911 
912 	drm_object_attach_property(&connector->base,
913 				      config->dpms_property, 0);
914 
915 	if (drm_core_check_feature(dev, DRIVER_ATOMIC)) {
916 		drm_object_attach_property(&connector->base, config->prop_crtc_id, 0);
917 	}
918 
919 	connector->debugfs_entry = NULL;
920 
921 out_put:
922 	if (ret)
923 		drm_mode_object_put(dev, &connector->base);
924 
925 out_unlock:
926 	drm_modeset_unlock_all(dev);
927 
928 	return ret;
929 }
930 EXPORT_SYMBOL(drm_connector_init);
931 
932 /**
933  * drm_connector_cleanup - cleans up an initialised connector
934  * @connector: connector to cleanup
935  *
936  * Cleans up the connector but doesn't free the object.
937  */
938 void drm_connector_cleanup(struct drm_connector *connector)
939 {
940 	struct drm_device *dev = connector->dev;
941 	struct drm_display_mode *mode, *t;
942 
943 	if (connector->tile_group) {
944 		drm_mode_put_tile_group(dev, connector->tile_group);
945 		connector->tile_group = NULL;
946 	}
947 
948 	list_for_each_entry_safe(mode, t, &connector->probed_modes, head)
949 		drm_mode_remove(connector, mode);
950 
951 	list_for_each_entry_safe(mode, t, &connector->modes, head)
952 		drm_mode_remove(connector, mode);
953 
954 	ida_remove(&drm_connector_enum_list[connector->connector_type].ida,
955 		   connector->connector_type_id);
956 
957 	kfree(connector->display_info.bus_formats);
958 	drm_mode_object_put(dev, &connector->base);
959 	kfree(connector->name);
960 	connector->name = NULL;
961 	list_del(&connector->head);
962 	dev->mode_config.num_connector--;
963 
964 	WARN_ON(connector->state && !connector->funcs->atomic_destroy_state);
965 	if (connector->state && connector->funcs->atomic_destroy_state)
966 		connector->funcs->atomic_destroy_state(connector,
967 						       connector->state);
968 
969 	memset(connector, 0, sizeof(*connector));
970 }
971 EXPORT_SYMBOL(drm_connector_cleanup);
972 
973 /**
974  * drm_connector_index - find the index of a registered connector
975  * @connector: connector to find index for
976  *
977  * Given a registered connector, return the index of that connector within a DRM
978  * device's list of connectors.
979  */
980 unsigned int drm_connector_index(struct drm_connector *connector)
981 {
982 	unsigned int index = 0;
983 	struct drm_connector *tmp;
984 	struct drm_mode_config *config = &connector->dev->mode_config;
985 
986 	WARN_ON(!drm_modeset_is_locked(&config->connection_mutex));
987 
988 	list_for_each_entry(tmp, &connector->dev->mode_config.connector_list, head) {
989 		if (tmp == connector)
990 			return index;
991 
992 		index++;
993 	}
994 
995 	BUG();
996 }
997 EXPORT_SYMBOL(drm_connector_index);
998 
999 /**
1000  * drm_connector_register - register a connector
1001  * @connector: the connector to register
1002  *
1003  * Register userspace interfaces for a connector
1004  *
1005  * Returns:
1006  * Zero on success, error code on failure.
1007  */
1008 int drm_connector_register(struct drm_connector *connector)
1009 {
1010 	int ret;
1011 
1012 	drm_mode_object_register(connector->dev, &connector->base);
1013 
1014 	ret = drm_sysfs_connector_add(connector);
1015 	if (ret)
1016 		return ret;
1017 
1018 	ret = drm_debugfs_connector_add(connector);
1019 	if (ret) {
1020 		drm_sysfs_connector_remove(connector);
1021 		return ret;
1022 	}
1023 
1024 	return 0;
1025 }
1026 EXPORT_SYMBOL(drm_connector_register);
1027 
1028 /**
1029  * drm_connector_unregister - unregister a connector
1030  * @connector: the connector to unregister
1031  *
1032  * Unregister userspace interfaces for a connector
1033  */
1034 void drm_connector_unregister(struct drm_connector *connector)
1035 {
1036 	drm_sysfs_connector_remove(connector);
1037 	drm_debugfs_connector_remove(connector);
1038 }
1039 EXPORT_SYMBOL(drm_connector_unregister);
1040 
1041 
1042 /**
1043  * drm_connector_unplug_all - unregister connector userspace interfaces
1044  * @dev: drm device
1045  *
1046  * This function unregisters all connector userspace interfaces in sysfs. Should
1047  * be call when the device is disconnected, e.g. from an usb driver's
1048  * ->disconnect callback.
1049  */
1050 void drm_connector_unplug_all(struct drm_device *dev)
1051 {
1052 	struct drm_connector *connector;
1053 
1054 	/* taking the mode config mutex ends up in a clash with sysfs */
1055 	list_for_each_entry(connector, &dev->mode_config.connector_list, head)
1056 		drm_connector_unregister(connector);
1057 
1058 }
1059 EXPORT_SYMBOL(drm_connector_unplug_all);
1060 
1061 /**
1062  * drm_encoder_init - Init a preallocated encoder
1063  * @dev: drm device
1064  * @encoder: the encoder to init
1065  * @funcs: callbacks for this encoder
1066  * @encoder_type: user visible type of the encoder
1067  *
1068  * Initialises a preallocated encoder. Encoder should be
1069  * subclassed as part of driver encoder objects.
1070  *
1071  * Returns:
1072  * Zero on success, error code on failure.
1073  */
1074 int drm_encoder_init(struct drm_device *dev,
1075 		      struct drm_encoder *encoder,
1076 		      const struct drm_encoder_funcs *funcs,
1077 		      int encoder_type)
1078 {
1079 	int ret;
1080 
1081 	drm_modeset_lock_all(dev);
1082 
1083 	ret = drm_mode_object_get(dev, &encoder->base, DRM_MODE_OBJECT_ENCODER);
1084 	if (ret)
1085 		goto out_unlock;
1086 
1087 	encoder->dev = dev;
1088 	encoder->encoder_type = encoder_type;
1089 	encoder->funcs = funcs;
1090 	encoder->name = kasprintf(GFP_KERNEL, "%s-%d",
1091 				  drm_encoder_enum_list[encoder_type].name,
1092 				  encoder->base.id);
1093 	if (!encoder->name) {
1094 		ret = -ENOMEM;
1095 		goto out_put;
1096 	}
1097 
1098 	list_add_tail(&encoder->head, &dev->mode_config.encoder_list);
1099 	dev->mode_config.num_encoder++;
1100 
1101 out_put:
1102 	if (ret)
1103 		drm_mode_object_put(dev, &encoder->base);
1104 
1105 out_unlock:
1106 	drm_modeset_unlock_all(dev);
1107 
1108 	return ret;
1109 }
1110 EXPORT_SYMBOL(drm_encoder_init);
1111 
1112 /**
1113  * drm_encoder_cleanup - cleans up an initialised encoder
1114  * @encoder: encoder to cleanup
1115  *
1116  * Cleans up the encoder but doesn't free the object.
1117  */
1118 void drm_encoder_cleanup(struct drm_encoder *encoder)
1119 {
1120 	struct drm_device *dev = encoder->dev;
1121 
1122 	drm_modeset_lock_all(dev);
1123 	drm_mode_object_put(dev, &encoder->base);
1124 	kfree(encoder->name);
1125 	list_del(&encoder->head);
1126 	dev->mode_config.num_encoder--;
1127 	drm_modeset_unlock_all(dev);
1128 
1129 	memset(encoder, 0, sizeof(*encoder));
1130 }
1131 EXPORT_SYMBOL(drm_encoder_cleanup);
1132 
1133 /**
1134  * drm_universal_plane_init - Initialize a new universal plane object
1135  * @dev: DRM device
1136  * @plane: plane object to init
1137  * @possible_crtcs: bitmask of possible CRTCs
1138  * @funcs: callbacks for the new plane
1139  * @formats: array of supported formats (%DRM_FORMAT_*)
1140  * @format_count: number of elements in @formats
1141  * @type: type of plane (overlay, primary, cursor)
1142  *
1143  * Initializes a plane object of type @type.
1144  *
1145  * Returns:
1146  * Zero on success, error code on failure.
1147  */
1148 int drm_universal_plane_init(struct drm_device *dev, struct drm_plane *plane,
1149 			     unsigned long possible_crtcs,
1150 			     const struct drm_plane_funcs *funcs,
1151 			     const uint32_t *formats, uint32_t format_count,
1152 			     enum drm_plane_type type)
1153 {
1154 	struct drm_mode_config *config = &dev->mode_config;
1155 	int ret;
1156 
1157 	ret = drm_mode_object_get(dev, &plane->base, DRM_MODE_OBJECT_PLANE);
1158 	if (ret)
1159 		return ret;
1160 
1161 	drm_modeset_lock_init(&plane->mutex);
1162 
1163 	plane->base.properties = &plane->properties;
1164 	plane->dev = dev;
1165 	plane->funcs = funcs;
1166 	plane->format_types = kmalloc_array(format_count, sizeof(uint32_t),
1167 					    GFP_KERNEL);
1168 	if (!plane->format_types) {
1169 		DRM_DEBUG_KMS("out of memory when allocating plane\n");
1170 		drm_mode_object_put(dev, &plane->base);
1171 		return -ENOMEM;
1172 	}
1173 
1174 	memcpy(plane->format_types, formats, format_count * sizeof(uint32_t));
1175 	plane->format_count = format_count;
1176 	plane->possible_crtcs = possible_crtcs;
1177 	plane->type = type;
1178 
1179 	list_add_tail(&plane->head, &config->plane_list);
1180 	config->num_total_plane++;
1181 	if (plane->type == DRM_PLANE_TYPE_OVERLAY)
1182 		config->num_overlay_plane++;
1183 
1184 	drm_object_attach_property(&plane->base,
1185 				   config->plane_type_property,
1186 				   plane->type);
1187 
1188 	if (drm_core_check_feature(dev, DRIVER_ATOMIC)) {
1189 		drm_object_attach_property(&plane->base, config->prop_fb_id, 0);
1190 		drm_object_attach_property(&plane->base, config->prop_crtc_id, 0);
1191 		drm_object_attach_property(&plane->base, config->prop_crtc_x, 0);
1192 		drm_object_attach_property(&plane->base, config->prop_crtc_y, 0);
1193 		drm_object_attach_property(&plane->base, config->prop_crtc_w, 0);
1194 		drm_object_attach_property(&plane->base, config->prop_crtc_h, 0);
1195 		drm_object_attach_property(&plane->base, config->prop_src_x, 0);
1196 		drm_object_attach_property(&plane->base, config->prop_src_y, 0);
1197 		drm_object_attach_property(&plane->base, config->prop_src_w, 0);
1198 		drm_object_attach_property(&plane->base, config->prop_src_h, 0);
1199 	}
1200 
1201 	return 0;
1202 }
1203 EXPORT_SYMBOL(drm_universal_plane_init);
1204 
1205 /**
1206  * drm_plane_init - Initialize a legacy plane
1207  * @dev: DRM device
1208  * @plane: plane object to init
1209  * @possible_crtcs: bitmask of possible CRTCs
1210  * @funcs: callbacks for the new plane
1211  * @formats: array of supported formats (%DRM_FORMAT_*)
1212  * @format_count: number of elements in @formats
1213  * @is_primary: plane type (primary vs overlay)
1214  *
1215  * Legacy API to initialize a DRM plane.
1216  *
1217  * New drivers should call drm_universal_plane_init() instead.
1218  *
1219  * Returns:
1220  * Zero on success, error code on failure.
1221  */
1222 int drm_plane_init(struct drm_device *dev, struct drm_plane *plane,
1223 		   unsigned long possible_crtcs,
1224 		   const struct drm_plane_funcs *funcs,
1225 		   const uint32_t *formats, uint32_t format_count,
1226 		   bool is_primary)
1227 {
1228 	enum drm_plane_type type;
1229 
1230 	type = is_primary ? DRM_PLANE_TYPE_PRIMARY : DRM_PLANE_TYPE_OVERLAY;
1231 	return drm_universal_plane_init(dev, plane, possible_crtcs, funcs,
1232 					formats, format_count, type);
1233 }
1234 EXPORT_SYMBOL(drm_plane_init);
1235 
1236 /**
1237  * drm_plane_cleanup - Clean up the core plane usage
1238  * @plane: plane to cleanup
1239  *
1240  * This function cleans up @plane and removes it from the DRM mode setting
1241  * core. Note that the function does *not* free the plane structure itself,
1242  * this is the responsibility of the caller.
1243  */
1244 void drm_plane_cleanup(struct drm_plane *plane)
1245 {
1246 	struct drm_device *dev = plane->dev;
1247 
1248 	drm_modeset_lock_all(dev);
1249 	kfree(plane->format_types);
1250 	drm_mode_object_put(dev, &plane->base);
1251 
1252 	BUG_ON(list_empty(&plane->head));
1253 
1254 	list_del(&plane->head);
1255 	dev->mode_config.num_total_plane--;
1256 	if (plane->type == DRM_PLANE_TYPE_OVERLAY)
1257 		dev->mode_config.num_overlay_plane--;
1258 	drm_modeset_unlock_all(dev);
1259 
1260 	WARN_ON(plane->state && !plane->funcs->atomic_destroy_state);
1261 	if (plane->state && plane->funcs->atomic_destroy_state)
1262 		plane->funcs->atomic_destroy_state(plane, plane->state);
1263 
1264 	memset(plane, 0, sizeof(*plane));
1265 }
1266 EXPORT_SYMBOL(drm_plane_cleanup);
1267 
1268 /**
1269  * drm_plane_index - find the index of a registered plane
1270  * @plane: plane to find index for
1271  *
1272  * Given a registered plane, return the index of that CRTC within a DRM
1273  * device's list of planes.
1274  */
1275 unsigned int drm_plane_index(struct drm_plane *plane)
1276 {
1277 	unsigned int index = 0;
1278 	struct drm_plane *tmp;
1279 
1280 	list_for_each_entry(tmp, &plane->dev->mode_config.plane_list, head) {
1281 		if (tmp == plane)
1282 			return index;
1283 
1284 		index++;
1285 	}
1286 
1287 	BUG();
1288 }
1289 EXPORT_SYMBOL(drm_plane_index);
1290 
1291 /**
1292  * drm_plane_force_disable - Forcibly disable a plane
1293  * @plane: plane to disable
1294  *
1295  * Forces the plane to be disabled.
1296  *
1297  * Used when the plane's current framebuffer is destroyed,
1298  * and when restoring fbdev mode.
1299  */
1300 void drm_plane_force_disable(struct drm_plane *plane)
1301 {
1302 	int ret;
1303 
1304 	if (!plane->fb)
1305 		return;
1306 
1307 	plane->old_fb = plane->fb;
1308 	ret = plane->funcs->disable_plane(plane);
1309 	if (ret) {
1310 		DRM_ERROR("failed to disable plane with busy fb\n");
1311 		plane->old_fb = NULL;
1312 		return;
1313 	}
1314 	/* disconnect the plane from the fb and crtc: */
1315 	drm_framebuffer_unreference(plane->old_fb);
1316 	plane->old_fb = NULL;
1317 	plane->fb = NULL;
1318 	plane->crtc = NULL;
1319 }
1320 EXPORT_SYMBOL(drm_plane_force_disable);
1321 
1322 static int drm_mode_create_standard_properties(struct drm_device *dev)
1323 {
1324 	struct drm_property *prop;
1325 
1326 	/*
1327 	 * Standard properties (apply to all connectors)
1328 	 */
1329 	prop = drm_property_create(dev, DRM_MODE_PROP_BLOB |
1330 				   DRM_MODE_PROP_IMMUTABLE,
1331 				   "EDID", 0);
1332 	if (!prop)
1333 		return -ENOMEM;
1334 	dev->mode_config.edid_property = prop;
1335 
1336 	prop = drm_property_create_enum(dev, 0,
1337 				   "DPMS", drm_dpms_enum_list,
1338 				   ARRAY_SIZE(drm_dpms_enum_list));
1339 	if (!prop)
1340 		return -ENOMEM;
1341 	dev->mode_config.dpms_property = prop;
1342 
1343 	prop = drm_property_create(dev,
1344 				   DRM_MODE_PROP_BLOB |
1345 				   DRM_MODE_PROP_IMMUTABLE,
1346 				   "PATH", 0);
1347 	if (!prop)
1348 		return -ENOMEM;
1349 	dev->mode_config.path_property = prop;
1350 
1351 	prop = drm_property_create(dev,
1352 				   DRM_MODE_PROP_BLOB |
1353 				   DRM_MODE_PROP_IMMUTABLE,
1354 				   "TILE", 0);
1355 	if (!prop)
1356 		return -ENOMEM;
1357 	dev->mode_config.tile_property = prop;
1358 
1359 	prop = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1360 					"type", drm_plane_type_enum_list,
1361 					ARRAY_SIZE(drm_plane_type_enum_list));
1362 	if (!prop)
1363 		return -ENOMEM;
1364 	dev->mode_config.plane_type_property = prop;
1365 
1366 	prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1367 			"SRC_X", 0, UINT_MAX);
1368 	if (!prop)
1369 		return -ENOMEM;
1370 	dev->mode_config.prop_src_x = prop;
1371 
1372 	prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1373 			"SRC_Y", 0, UINT_MAX);
1374 	if (!prop)
1375 		return -ENOMEM;
1376 	dev->mode_config.prop_src_y = prop;
1377 
1378 	prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1379 			"SRC_W", 0, UINT_MAX);
1380 	if (!prop)
1381 		return -ENOMEM;
1382 	dev->mode_config.prop_src_w = prop;
1383 
1384 	prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1385 			"SRC_H", 0, UINT_MAX);
1386 	if (!prop)
1387 		return -ENOMEM;
1388 	dev->mode_config.prop_src_h = prop;
1389 
1390 	prop = drm_property_create_signed_range(dev, DRM_MODE_PROP_ATOMIC,
1391 			"CRTC_X", INT_MIN, INT_MAX);
1392 	if (!prop)
1393 		return -ENOMEM;
1394 	dev->mode_config.prop_crtc_x = prop;
1395 
1396 	prop = drm_property_create_signed_range(dev, DRM_MODE_PROP_ATOMIC,
1397 			"CRTC_Y", INT_MIN, INT_MAX);
1398 	if (!prop)
1399 		return -ENOMEM;
1400 	dev->mode_config.prop_crtc_y = prop;
1401 
1402 	prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1403 			"CRTC_W", 0, INT_MAX);
1404 	if (!prop)
1405 		return -ENOMEM;
1406 	dev->mode_config.prop_crtc_w = prop;
1407 
1408 	prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1409 			"CRTC_H", 0, INT_MAX);
1410 	if (!prop)
1411 		return -ENOMEM;
1412 	dev->mode_config.prop_crtc_h = prop;
1413 
1414 	prop = drm_property_create_object(dev, DRM_MODE_PROP_ATOMIC,
1415 			"FB_ID", DRM_MODE_OBJECT_FB);
1416 	if (!prop)
1417 		return -ENOMEM;
1418 	dev->mode_config.prop_fb_id = prop;
1419 
1420 	prop = drm_property_create_object(dev, DRM_MODE_PROP_ATOMIC,
1421 			"CRTC_ID", DRM_MODE_OBJECT_CRTC);
1422 	if (!prop)
1423 		return -ENOMEM;
1424 	dev->mode_config.prop_crtc_id = prop;
1425 
1426 	prop = drm_property_create_bool(dev, DRM_MODE_PROP_ATOMIC,
1427 			"ACTIVE");
1428 	if (!prop)
1429 		return -ENOMEM;
1430 	dev->mode_config.prop_active = prop;
1431 
1432 	return 0;
1433 }
1434 
1435 /**
1436  * drm_mode_create_dvi_i_properties - create DVI-I specific connector properties
1437  * @dev: DRM device
1438  *
1439  * Called by a driver the first time a DVI-I connector is made.
1440  */
1441 int drm_mode_create_dvi_i_properties(struct drm_device *dev)
1442 {
1443 	struct drm_property *dvi_i_selector;
1444 	struct drm_property *dvi_i_subconnector;
1445 
1446 	if (dev->mode_config.dvi_i_select_subconnector_property)
1447 		return 0;
1448 
1449 	dvi_i_selector =
1450 		drm_property_create_enum(dev, 0,
1451 				    "select subconnector",
1452 				    drm_dvi_i_select_enum_list,
1453 				    ARRAY_SIZE(drm_dvi_i_select_enum_list));
1454 	dev->mode_config.dvi_i_select_subconnector_property = dvi_i_selector;
1455 
1456 	dvi_i_subconnector = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1457 				    "subconnector",
1458 				    drm_dvi_i_subconnector_enum_list,
1459 				    ARRAY_SIZE(drm_dvi_i_subconnector_enum_list));
1460 	dev->mode_config.dvi_i_subconnector_property = dvi_i_subconnector;
1461 
1462 	return 0;
1463 }
1464 EXPORT_SYMBOL(drm_mode_create_dvi_i_properties);
1465 
1466 /**
1467  * drm_create_tv_properties - create TV specific connector properties
1468  * @dev: DRM device
1469  * @num_modes: number of different TV formats (modes) supported
1470  * @modes: array of pointers to strings containing name of each format
1471  *
1472  * Called by a driver's TV initialization routine, this function creates
1473  * the TV specific connector properties for a given device.  Caller is
1474  * responsible for allocating a list of format names and passing them to
1475  * this routine.
1476  */
1477 int drm_mode_create_tv_properties(struct drm_device *dev,
1478 				  unsigned int num_modes,
1479 				  char *modes[])
1480 {
1481 	struct drm_property *tv_selector;
1482 	struct drm_property *tv_subconnector;
1483 	unsigned int i;
1484 
1485 	if (dev->mode_config.tv_select_subconnector_property)
1486 		return 0;
1487 
1488 	/*
1489 	 * Basic connector properties
1490 	 */
1491 	tv_selector = drm_property_create_enum(dev, 0,
1492 					  "select subconnector",
1493 					  drm_tv_select_enum_list,
1494 					  ARRAY_SIZE(drm_tv_select_enum_list));
1495 	dev->mode_config.tv_select_subconnector_property = tv_selector;
1496 
1497 	tv_subconnector =
1498 		drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1499 				    "subconnector",
1500 				    drm_tv_subconnector_enum_list,
1501 				    ARRAY_SIZE(drm_tv_subconnector_enum_list));
1502 	dev->mode_config.tv_subconnector_property = tv_subconnector;
1503 
1504 	/*
1505 	 * Other, TV specific properties: margins & TV modes.
1506 	 */
1507 	dev->mode_config.tv_left_margin_property =
1508 		drm_property_create_range(dev, 0, "left margin", 0, 100);
1509 
1510 	dev->mode_config.tv_right_margin_property =
1511 		drm_property_create_range(dev, 0, "right margin", 0, 100);
1512 
1513 	dev->mode_config.tv_top_margin_property =
1514 		drm_property_create_range(dev, 0, "top margin", 0, 100);
1515 
1516 	dev->mode_config.tv_bottom_margin_property =
1517 		drm_property_create_range(dev, 0, "bottom margin", 0, 100);
1518 
1519 	dev->mode_config.tv_mode_property =
1520 		drm_property_create(dev, DRM_MODE_PROP_ENUM,
1521 				    "mode", num_modes);
1522 	for (i = 0; i < num_modes; i++)
1523 		drm_property_add_enum(dev->mode_config.tv_mode_property, i,
1524 				      i, modes[i]);
1525 
1526 	dev->mode_config.tv_brightness_property =
1527 		drm_property_create_range(dev, 0, "brightness", 0, 100);
1528 
1529 	dev->mode_config.tv_contrast_property =
1530 		drm_property_create_range(dev, 0, "contrast", 0, 100);
1531 
1532 	dev->mode_config.tv_flicker_reduction_property =
1533 		drm_property_create_range(dev, 0, "flicker reduction", 0, 100);
1534 
1535 	dev->mode_config.tv_overscan_property =
1536 		drm_property_create_range(dev, 0, "overscan", 0, 100);
1537 
1538 	dev->mode_config.tv_saturation_property =
1539 		drm_property_create_range(dev, 0, "saturation", 0, 100);
1540 
1541 	dev->mode_config.tv_hue_property =
1542 		drm_property_create_range(dev, 0, "hue", 0, 100);
1543 
1544 	return 0;
1545 }
1546 EXPORT_SYMBOL(drm_mode_create_tv_properties);
1547 
1548 /**
1549  * drm_mode_create_scaling_mode_property - create scaling mode property
1550  * @dev: DRM device
1551  *
1552  * Called by a driver the first time it's needed, must be attached to desired
1553  * connectors.
1554  */
1555 int drm_mode_create_scaling_mode_property(struct drm_device *dev)
1556 {
1557 	struct drm_property *scaling_mode;
1558 
1559 	if (dev->mode_config.scaling_mode_property)
1560 		return 0;
1561 
1562 	scaling_mode =
1563 		drm_property_create_enum(dev, 0, "scaling mode",
1564 				drm_scaling_mode_enum_list,
1565 				    ARRAY_SIZE(drm_scaling_mode_enum_list));
1566 
1567 	dev->mode_config.scaling_mode_property = scaling_mode;
1568 
1569 	return 0;
1570 }
1571 EXPORT_SYMBOL(drm_mode_create_scaling_mode_property);
1572 
1573 /**
1574  * drm_mode_create_aspect_ratio_property - create aspect ratio property
1575  * @dev: DRM device
1576  *
1577  * Called by a driver the first time it's needed, must be attached to desired
1578  * connectors.
1579  *
1580  * Returns:
1581  * Zero on success, negative errno on failure.
1582  */
1583 int drm_mode_create_aspect_ratio_property(struct drm_device *dev)
1584 {
1585 	if (dev->mode_config.aspect_ratio_property)
1586 		return 0;
1587 
1588 	dev->mode_config.aspect_ratio_property =
1589 		drm_property_create_enum(dev, 0, "aspect ratio",
1590 				drm_aspect_ratio_enum_list,
1591 				ARRAY_SIZE(drm_aspect_ratio_enum_list));
1592 
1593 	if (dev->mode_config.aspect_ratio_property == NULL)
1594 		return -ENOMEM;
1595 
1596 	return 0;
1597 }
1598 EXPORT_SYMBOL(drm_mode_create_aspect_ratio_property);
1599 
1600 /**
1601  * drm_mode_create_dirty_property - create dirty property
1602  * @dev: DRM device
1603  *
1604  * Called by a driver the first time it's needed, must be attached to desired
1605  * connectors.
1606  */
1607 int drm_mode_create_dirty_info_property(struct drm_device *dev)
1608 {
1609 	struct drm_property *dirty_info;
1610 
1611 	if (dev->mode_config.dirty_info_property)
1612 		return 0;
1613 
1614 	dirty_info =
1615 		drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1616 				    "dirty",
1617 				    drm_dirty_info_enum_list,
1618 				    ARRAY_SIZE(drm_dirty_info_enum_list));
1619 	dev->mode_config.dirty_info_property = dirty_info;
1620 
1621 	return 0;
1622 }
1623 EXPORT_SYMBOL(drm_mode_create_dirty_info_property);
1624 
1625 /**
1626  * drm_mode_create_suggested_offset_properties - create suggests offset properties
1627  * @dev: DRM device
1628  *
1629  * Create the the suggested x/y offset property for connectors.
1630  */
1631 int drm_mode_create_suggested_offset_properties(struct drm_device *dev)
1632 {
1633 	if (dev->mode_config.suggested_x_property && dev->mode_config.suggested_y_property)
1634 		return 0;
1635 
1636 	dev->mode_config.suggested_x_property =
1637 		drm_property_create_range(dev, DRM_MODE_PROP_IMMUTABLE, "suggested X", 0, 0xffffffff);
1638 
1639 	dev->mode_config.suggested_y_property =
1640 		drm_property_create_range(dev, DRM_MODE_PROP_IMMUTABLE, "suggested Y", 0, 0xffffffff);
1641 
1642 	if (dev->mode_config.suggested_x_property == NULL ||
1643 	    dev->mode_config.suggested_y_property == NULL)
1644 		return -ENOMEM;
1645 	return 0;
1646 }
1647 EXPORT_SYMBOL(drm_mode_create_suggested_offset_properties);
1648 
1649 static int drm_mode_group_init(struct drm_device *dev, struct drm_mode_group *group)
1650 {
1651 	uint32_t total_objects = 0;
1652 
1653 	total_objects += dev->mode_config.num_crtc;
1654 	total_objects += dev->mode_config.num_connector;
1655 	total_objects += dev->mode_config.num_encoder;
1656 
1657 	group->id_list = kcalloc(total_objects, sizeof(uint32_t), GFP_KERNEL);
1658 	if (!group->id_list)
1659 		return -ENOMEM;
1660 
1661 	group->num_crtcs = 0;
1662 	group->num_connectors = 0;
1663 	group->num_encoders = 0;
1664 	return 0;
1665 }
1666 
1667 void drm_mode_group_destroy(struct drm_mode_group *group)
1668 {
1669 	kfree(group->id_list);
1670 	group->id_list = NULL;
1671 }
1672 
1673 /*
1674  * NOTE: Driver's shouldn't ever call drm_mode_group_init_legacy_group - it is
1675  * the drm core's responsibility to set up mode control groups.
1676  */
1677 int drm_mode_group_init_legacy_group(struct drm_device *dev,
1678 				     struct drm_mode_group *group)
1679 {
1680 	struct drm_crtc *crtc;
1681 	struct drm_encoder *encoder;
1682 	struct drm_connector *connector;
1683 	int ret;
1684 
1685 	ret = drm_mode_group_init(dev, group);
1686 	if (ret)
1687 		return ret;
1688 
1689 	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
1690 		group->id_list[group->num_crtcs++] = crtc->base.id;
1691 
1692 	list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
1693 		group->id_list[group->num_crtcs + group->num_encoders++] =
1694 		encoder->base.id;
1695 
1696 	list_for_each_entry(connector, &dev->mode_config.connector_list, head)
1697 		group->id_list[group->num_crtcs + group->num_encoders +
1698 			       group->num_connectors++] = connector->base.id;
1699 
1700 	return 0;
1701 }
1702 EXPORT_SYMBOL(drm_mode_group_init_legacy_group);
1703 
1704 void drm_reinit_primary_mode_group(struct drm_device *dev)
1705 {
1706 	drm_modeset_lock_all(dev);
1707 	drm_mode_group_destroy(&dev->primary->mode_group);
1708 	drm_mode_group_init_legacy_group(dev, &dev->primary->mode_group);
1709 	drm_modeset_unlock_all(dev);
1710 }
1711 EXPORT_SYMBOL(drm_reinit_primary_mode_group);
1712 
1713 /**
1714  * drm_crtc_convert_to_umode - convert a drm_display_mode into a modeinfo
1715  * @out: drm_mode_modeinfo struct to return to the user
1716  * @in: drm_display_mode to use
1717  *
1718  * Convert a drm_display_mode into a drm_mode_modeinfo structure to return to
1719  * the user.
1720  */
1721 static void drm_crtc_convert_to_umode(struct drm_mode_modeinfo *out,
1722 				      const struct drm_display_mode *in)
1723 {
1724 	WARN(in->hdisplay > USHRT_MAX || in->hsync_start > USHRT_MAX ||
1725 	     in->hsync_end > USHRT_MAX || in->htotal > USHRT_MAX ||
1726 	     in->hskew > USHRT_MAX || in->vdisplay > USHRT_MAX ||
1727 	     in->vsync_start > USHRT_MAX || in->vsync_end > USHRT_MAX ||
1728 	     in->vtotal > USHRT_MAX || in->vscan > USHRT_MAX,
1729 	     "timing values too large for mode info\n");
1730 
1731 	out->clock = in->clock;
1732 	out->hdisplay = in->hdisplay;
1733 	out->hsync_start = in->hsync_start;
1734 	out->hsync_end = in->hsync_end;
1735 	out->htotal = in->htotal;
1736 	out->hskew = in->hskew;
1737 	out->vdisplay = in->vdisplay;
1738 	out->vsync_start = in->vsync_start;
1739 	out->vsync_end = in->vsync_end;
1740 	out->vtotal = in->vtotal;
1741 	out->vscan = in->vscan;
1742 	out->vrefresh = in->vrefresh;
1743 	out->flags = in->flags;
1744 	out->type = in->type;
1745 	strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1746 	out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1747 }
1748 
1749 /**
1750  * drm_crtc_convert_umode - convert a modeinfo into a drm_display_mode
1751  * @out: drm_display_mode to return to the user
1752  * @in: drm_mode_modeinfo to use
1753  *
1754  * Convert a drm_mode_modeinfo into a drm_display_mode structure to return to
1755  * the caller.
1756  *
1757  * Returns:
1758  * Zero on success, negative errno on failure.
1759  */
1760 static int drm_crtc_convert_umode(struct drm_display_mode *out,
1761 				  const struct drm_mode_modeinfo *in)
1762 {
1763 	if (in->clock > INT_MAX || in->vrefresh > INT_MAX)
1764 		return -ERANGE;
1765 
1766 	if ((in->flags & DRM_MODE_FLAG_3D_MASK) > DRM_MODE_FLAG_3D_MAX)
1767 		return -EINVAL;
1768 
1769 	out->clock = in->clock;
1770 	out->hdisplay = in->hdisplay;
1771 	out->hsync_start = in->hsync_start;
1772 	out->hsync_end = in->hsync_end;
1773 	out->htotal = in->htotal;
1774 	out->hskew = in->hskew;
1775 	out->vdisplay = in->vdisplay;
1776 	out->vsync_start = in->vsync_start;
1777 	out->vsync_end = in->vsync_end;
1778 	out->vtotal = in->vtotal;
1779 	out->vscan = in->vscan;
1780 	out->vrefresh = in->vrefresh;
1781 	out->flags = in->flags;
1782 	out->type = in->type;
1783 	strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1784 	out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1785 
1786 	return 0;
1787 }
1788 
1789 /**
1790  * drm_mode_getresources - get graphics configuration
1791  * @dev: drm device for the ioctl
1792  * @data: data pointer for the ioctl
1793  * @file_priv: drm file for the ioctl call
1794  *
1795  * Construct a set of configuration description structures and return
1796  * them to the user, including CRTC, connector and framebuffer configuration.
1797  *
1798  * Called by the user via ioctl.
1799  *
1800  * Returns:
1801  * Zero on success, negative errno on failure.
1802  */
1803 int drm_mode_getresources(struct drm_device *dev, void *data,
1804 			  struct drm_file *file_priv)
1805 {
1806 	struct drm_mode_card_res *card_res = data;
1807 	struct list_head *lh;
1808 	struct drm_framebuffer *fb;
1809 	struct drm_connector *connector;
1810 	struct drm_crtc *crtc;
1811 	struct drm_encoder *encoder;
1812 	int ret = 0;
1813 	int connector_count = 0;
1814 	int crtc_count = 0;
1815 	int fb_count = 0;
1816 	int encoder_count = 0;
1817 	int copied = 0, i;
1818 	uint32_t __user *fb_id;
1819 	uint32_t __user *crtc_id;
1820 	uint32_t __user *connector_id;
1821 	uint32_t __user *encoder_id;
1822 	struct drm_mode_group *mode_group;
1823 
1824 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1825 		return -EINVAL;
1826 
1827 
1828 	mutex_lock(&file_priv->fbs_lock);
1829 	/*
1830 	 * For the non-control nodes we need to limit the list of resources
1831 	 * by IDs in the group list for this node
1832 	 */
1833 	list_for_each(lh, &file_priv->fbs)
1834 		fb_count++;
1835 
1836 	/* handle this in 4 parts */
1837 	/* FBs */
1838 	if (card_res->count_fbs >= fb_count) {
1839 		copied = 0;
1840 		fb_id = (uint32_t __user *)(unsigned long)card_res->fb_id_ptr;
1841 		list_for_each_entry(fb, &file_priv->fbs, filp_head) {
1842 			if (put_user(fb->base.id, fb_id + copied)) {
1843 				mutex_unlock(&file_priv->fbs_lock);
1844 				return -EFAULT;
1845 			}
1846 			copied++;
1847 		}
1848 	}
1849 	card_res->count_fbs = fb_count;
1850 	mutex_unlock(&file_priv->fbs_lock);
1851 
1852 	/* mode_config.mutex protects the connector list against e.g. DP MST
1853 	 * connector hot-adding. CRTC/Plane lists are invariant. */
1854 	mutex_lock(&dev->mode_config.mutex);
1855 	if (!drm_is_primary_client(file_priv)) {
1856 
1857 		mode_group = NULL;
1858 		list_for_each(lh, &dev->mode_config.crtc_list)
1859 			crtc_count++;
1860 
1861 		list_for_each(lh, &dev->mode_config.connector_list)
1862 			connector_count++;
1863 
1864 		list_for_each(lh, &dev->mode_config.encoder_list)
1865 			encoder_count++;
1866 	} else {
1867 
1868 		mode_group = &file_priv->master->minor->mode_group;
1869 		crtc_count = mode_group->num_crtcs;
1870 		connector_count = mode_group->num_connectors;
1871 		encoder_count = mode_group->num_encoders;
1872 	}
1873 
1874 	card_res->max_height = dev->mode_config.max_height;
1875 	card_res->min_height = dev->mode_config.min_height;
1876 	card_res->max_width = dev->mode_config.max_width;
1877 	card_res->min_width = dev->mode_config.min_width;
1878 
1879 	/* CRTCs */
1880 	if (card_res->count_crtcs >= crtc_count) {
1881 		copied = 0;
1882 		crtc_id = (uint32_t __user *)(unsigned long)card_res->crtc_id_ptr;
1883 		if (!mode_group) {
1884 			list_for_each_entry(crtc, &dev->mode_config.crtc_list,
1885 					    head) {
1886 				DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
1887 				if (put_user(crtc->base.id, crtc_id + copied)) {
1888 					ret = -EFAULT;
1889 					goto out;
1890 				}
1891 				copied++;
1892 			}
1893 		} else {
1894 			for (i = 0; i < mode_group->num_crtcs; i++) {
1895 				if (put_user(mode_group->id_list[i],
1896 					     crtc_id + copied)) {
1897 					ret = -EFAULT;
1898 					goto out;
1899 				}
1900 				copied++;
1901 			}
1902 		}
1903 	}
1904 	card_res->count_crtcs = crtc_count;
1905 
1906 	/* Encoders */
1907 	if (card_res->count_encoders >= encoder_count) {
1908 		copied = 0;
1909 		encoder_id = (uint32_t __user *)(unsigned long)card_res->encoder_id_ptr;
1910 		if (!mode_group) {
1911 			list_for_each_entry(encoder,
1912 					    &dev->mode_config.encoder_list,
1913 					    head) {
1914 				DRM_DEBUG_KMS("[ENCODER:%d:%s]\n", encoder->base.id,
1915 						encoder->name);
1916 				if (put_user(encoder->base.id, encoder_id +
1917 					     copied)) {
1918 					ret = -EFAULT;
1919 					goto out;
1920 				}
1921 				copied++;
1922 			}
1923 		} else {
1924 			for (i = mode_group->num_crtcs; i < mode_group->num_crtcs + mode_group->num_encoders; i++) {
1925 				if (put_user(mode_group->id_list[i],
1926 					     encoder_id + copied)) {
1927 					ret = -EFAULT;
1928 					goto out;
1929 				}
1930 				copied++;
1931 			}
1932 
1933 		}
1934 	}
1935 	card_res->count_encoders = encoder_count;
1936 
1937 	/* Connectors */
1938 	if (card_res->count_connectors >= connector_count) {
1939 		copied = 0;
1940 		connector_id = (uint32_t __user *)(unsigned long)card_res->connector_id_ptr;
1941 		if (!mode_group) {
1942 			list_for_each_entry(connector,
1943 					    &dev->mode_config.connector_list,
1944 					    head) {
1945 				DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
1946 					connector->base.id,
1947 					connector->name);
1948 				if (put_user(connector->base.id,
1949 					     connector_id + copied)) {
1950 					ret = -EFAULT;
1951 					goto out;
1952 				}
1953 				copied++;
1954 			}
1955 		} else {
1956 			int start = mode_group->num_crtcs +
1957 				mode_group->num_encoders;
1958 			for (i = start; i < start + mode_group->num_connectors; i++) {
1959 				if (put_user(mode_group->id_list[i],
1960 					     connector_id + copied)) {
1961 					ret = -EFAULT;
1962 					goto out;
1963 				}
1964 				copied++;
1965 			}
1966 		}
1967 	}
1968 	card_res->count_connectors = connector_count;
1969 
1970 	DRM_DEBUG_KMS("CRTC[%d] CONNECTORS[%d] ENCODERS[%d]\n", card_res->count_crtcs,
1971 		  card_res->count_connectors, card_res->count_encoders);
1972 
1973 out:
1974 	mutex_unlock(&dev->mode_config.mutex);
1975 	return ret;
1976 }
1977 
1978 /**
1979  * drm_mode_getcrtc - get CRTC configuration
1980  * @dev: drm device for the ioctl
1981  * @data: data pointer for the ioctl
1982  * @file_priv: drm file for the ioctl call
1983  *
1984  * Construct a CRTC configuration structure to return to the user.
1985  *
1986  * Called by the user via ioctl.
1987  *
1988  * Returns:
1989  * Zero on success, negative errno on failure.
1990  */
1991 int drm_mode_getcrtc(struct drm_device *dev,
1992 		     void *data, struct drm_file *file_priv)
1993 {
1994 	struct drm_mode_crtc *crtc_resp = data;
1995 	struct drm_crtc *crtc;
1996 
1997 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
1998 		return -EINVAL;
1999 
2000 	crtc = drm_crtc_find(dev, crtc_resp->crtc_id);
2001 	if (!crtc)
2002 		return -ENOENT;
2003 
2004 	drm_modeset_lock_crtc(crtc, crtc->primary);
2005 	crtc_resp->gamma_size = crtc->gamma_size;
2006 	if (crtc->primary->fb)
2007 		crtc_resp->fb_id = crtc->primary->fb->base.id;
2008 	else
2009 		crtc_resp->fb_id = 0;
2010 
2011 	if (crtc->state) {
2012 		crtc_resp->x = crtc->primary->state->src_x >> 16;
2013 		crtc_resp->y = crtc->primary->state->src_y >> 16;
2014 		if (crtc->state->enable) {
2015 			drm_crtc_convert_to_umode(&crtc_resp->mode, &crtc->state->mode);
2016 			crtc_resp->mode_valid = 1;
2017 
2018 		} else {
2019 			crtc_resp->mode_valid = 0;
2020 		}
2021 	} else {
2022 		crtc_resp->x = crtc->x;
2023 		crtc_resp->y = crtc->y;
2024 		if (crtc->enabled) {
2025 			drm_crtc_convert_to_umode(&crtc_resp->mode, &crtc->mode);
2026 			crtc_resp->mode_valid = 1;
2027 
2028 		} else {
2029 			crtc_resp->mode_valid = 0;
2030 		}
2031 	}
2032 	drm_modeset_unlock_crtc(crtc);
2033 
2034 	return 0;
2035 }
2036 
2037 static bool drm_mode_expose_to_userspace(const struct drm_display_mode *mode,
2038 					 const struct drm_file *file_priv)
2039 {
2040 	/*
2041 	 * If user-space hasn't configured the driver to expose the stereo 3D
2042 	 * modes, don't expose them.
2043 	 */
2044 	if (!file_priv->stereo_allowed && drm_mode_is_stereo(mode))
2045 		return false;
2046 
2047 	return true;
2048 }
2049 
2050 static struct drm_encoder *drm_connector_get_encoder(struct drm_connector *connector)
2051 {
2052 	/* For atomic drivers only state objects are synchronously updated and
2053 	 * protected by modeset locks, so check those first. */
2054 	if (connector->state)
2055 		return connector->state->best_encoder;
2056 	return connector->encoder;
2057 }
2058 
2059 /* helper for getconnector and getproperties ioctls */
2060 static int get_properties(struct drm_mode_object *obj, bool atomic,
2061 		uint32_t __user *prop_ptr, uint64_t __user *prop_values,
2062 		uint32_t *arg_count_props)
2063 {
2064 	int props_count;
2065 	int i, ret, copied;
2066 
2067 	props_count = obj->properties->count;
2068 	if (!atomic)
2069 		props_count -= obj->properties->atomic_count;
2070 
2071 	if ((*arg_count_props >= props_count) && props_count) {
2072 		for (i = 0, copied = 0; copied < props_count; i++) {
2073 			struct drm_property *prop = obj->properties->properties[i];
2074 			uint64_t val;
2075 
2076 			if ((prop->flags & DRM_MODE_PROP_ATOMIC) && !atomic)
2077 				continue;
2078 
2079 			ret = drm_object_property_get_value(obj, prop, &val);
2080 			if (ret)
2081 				return ret;
2082 
2083 			if (put_user(prop->base.id, prop_ptr + copied))
2084 				return -EFAULT;
2085 
2086 			if (put_user(val, prop_values + copied))
2087 				return -EFAULT;
2088 
2089 			copied++;
2090 		}
2091 	}
2092 	*arg_count_props = props_count;
2093 
2094 	return 0;
2095 }
2096 
2097 /**
2098  * drm_mode_getconnector - get connector configuration
2099  * @dev: drm device for the ioctl
2100  * @data: data pointer for the ioctl
2101  * @file_priv: drm file for the ioctl call
2102  *
2103  * Construct a connector configuration structure to return to the user.
2104  *
2105  * Called by the user via ioctl.
2106  *
2107  * Returns:
2108  * Zero on success, negative errno on failure.
2109  */
2110 int drm_mode_getconnector(struct drm_device *dev, void *data,
2111 			  struct drm_file *file_priv)
2112 {
2113 	struct drm_mode_get_connector *out_resp = data;
2114 	struct drm_connector *connector;
2115 	struct drm_encoder *encoder;
2116 	struct drm_display_mode *mode;
2117 	int mode_count = 0;
2118 	int encoders_count = 0;
2119 	int ret = 0;
2120 	int copied = 0;
2121 	int i;
2122 	struct drm_mode_modeinfo u_mode;
2123 	struct drm_mode_modeinfo __user *mode_ptr;
2124 	uint32_t __user *encoder_ptr;
2125 
2126 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2127 		return -EINVAL;
2128 
2129 	memset(&u_mode, 0, sizeof(struct drm_mode_modeinfo));
2130 
2131 	DRM_DEBUG_KMS("[CONNECTOR:%d:?]\n", out_resp->connector_id);
2132 
2133 	mutex_lock(&dev->mode_config.mutex);
2134 
2135 	connector = drm_connector_find(dev, out_resp->connector_id);
2136 	if (!connector) {
2137 		ret = -ENOENT;
2138 		goto out_unlock;
2139 	}
2140 
2141 	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++)
2142 		if (connector->encoder_ids[i] != 0)
2143 			encoders_count++;
2144 
2145 	if (out_resp->count_modes == 0) {
2146 		connector->funcs->fill_modes(connector,
2147 					     dev->mode_config.max_width,
2148 					     dev->mode_config.max_height);
2149 	}
2150 
2151 	/* delayed so we get modes regardless of pre-fill_modes state */
2152 	list_for_each_entry(mode, &connector->modes, head)
2153 		if (drm_mode_expose_to_userspace(mode, file_priv))
2154 			mode_count++;
2155 
2156 	out_resp->connector_id = connector->base.id;
2157 	out_resp->connector_type = connector->connector_type;
2158 	out_resp->connector_type_id = connector->connector_type_id;
2159 	out_resp->mm_width = connector->display_info.width_mm;
2160 	out_resp->mm_height = connector->display_info.height_mm;
2161 	out_resp->subpixel = connector->display_info.subpixel_order;
2162 	out_resp->connection = connector->status;
2163 
2164 	drm_modeset_lock(&dev->mode_config.connection_mutex, NULL);
2165 	encoder = drm_connector_get_encoder(connector);
2166 	if (encoder)
2167 		out_resp->encoder_id = encoder->base.id;
2168 	else
2169 		out_resp->encoder_id = 0;
2170 
2171 	/*
2172 	 * This ioctl is called twice, once to determine how much space is
2173 	 * needed, and the 2nd time to fill it.
2174 	 */
2175 	if ((out_resp->count_modes >= mode_count) && mode_count) {
2176 		copied = 0;
2177 		mode_ptr = (struct drm_mode_modeinfo __user *)(unsigned long)out_resp->modes_ptr;
2178 		list_for_each_entry(mode, &connector->modes, head) {
2179 			if (!drm_mode_expose_to_userspace(mode, file_priv))
2180 				continue;
2181 
2182 			drm_crtc_convert_to_umode(&u_mode, mode);
2183 			if (copy_to_user(mode_ptr + copied,
2184 					 &u_mode, sizeof(u_mode))) {
2185 				ret = -EFAULT;
2186 				goto out;
2187 			}
2188 			copied++;
2189 		}
2190 	}
2191 	out_resp->count_modes = mode_count;
2192 
2193 	ret = get_properties(&connector->base, file_priv->atomic,
2194 			(uint32_t __user *)(unsigned long)(out_resp->props_ptr),
2195 			(uint64_t __user *)(unsigned long)(out_resp->prop_values_ptr),
2196 			&out_resp->count_props);
2197 	if (ret)
2198 		goto out;
2199 
2200 	if ((out_resp->count_encoders >= encoders_count) && encoders_count) {
2201 		copied = 0;
2202 		encoder_ptr = (uint32_t __user *)(unsigned long)(out_resp->encoders_ptr);
2203 		for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
2204 			if (connector->encoder_ids[i] != 0) {
2205 				if (put_user(connector->encoder_ids[i],
2206 					     encoder_ptr + copied)) {
2207 					ret = -EFAULT;
2208 					goto out;
2209 				}
2210 				copied++;
2211 			}
2212 		}
2213 	}
2214 	out_resp->count_encoders = encoders_count;
2215 
2216 out:
2217 	drm_modeset_unlock(&dev->mode_config.connection_mutex);
2218 
2219 out_unlock:
2220 	mutex_unlock(&dev->mode_config.mutex);
2221 
2222 	return ret;
2223 }
2224 
2225 static struct drm_crtc *drm_encoder_get_crtc(struct drm_encoder *encoder)
2226 {
2227 	struct drm_connector *connector;
2228 	struct drm_device *dev = encoder->dev;
2229 	bool uses_atomic = false;
2230 
2231 	/* For atomic drivers only state objects are synchronously updated and
2232 	 * protected by modeset locks, so check those first. */
2233 	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
2234 		if (!connector->state)
2235 			continue;
2236 
2237 		uses_atomic = true;
2238 
2239 		if (connector->state->best_encoder != encoder)
2240 			continue;
2241 
2242 		return connector->state->crtc;
2243 	}
2244 
2245 	/* Don't return stale data (e.g. pending async disable). */
2246 	if (uses_atomic)
2247 		return NULL;
2248 
2249 	return encoder->crtc;
2250 }
2251 
2252 /**
2253  * drm_mode_getencoder - get encoder configuration
2254  * @dev: drm device for the ioctl
2255  * @data: data pointer for the ioctl
2256  * @file_priv: drm file for the ioctl call
2257  *
2258  * Construct a encoder configuration structure to return to the user.
2259  *
2260  * Called by the user via ioctl.
2261  *
2262  * Returns:
2263  * Zero on success, negative errno on failure.
2264  */
2265 int drm_mode_getencoder(struct drm_device *dev, void *data,
2266 			struct drm_file *file_priv)
2267 {
2268 	struct drm_mode_get_encoder *enc_resp = data;
2269 	struct drm_encoder *encoder;
2270 	struct drm_crtc *crtc;
2271 
2272 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2273 		return -EINVAL;
2274 
2275 	encoder = drm_encoder_find(dev, enc_resp->encoder_id);
2276 	if (!encoder)
2277 		return -ENOENT;
2278 
2279 	drm_modeset_lock(&dev->mode_config.connection_mutex, NULL);
2280 	crtc = drm_encoder_get_crtc(encoder);
2281 	if (crtc)
2282 		enc_resp->crtc_id = crtc->base.id;
2283 	else
2284 		enc_resp->crtc_id = 0;
2285 	drm_modeset_unlock(&dev->mode_config.connection_mutex);
2286 
2287 	enc_resp->encoder_type = encoder->encoder_type;
2288 	enc_resp->encoder_id = encoder->base.id;
2289 	enc_resp->possible_crtcs = encoder->possible_crtcs;
2290 	enc_resp->possible_clones = encoder->possible_clones;
2291 
2292 	return 0;
2293 }
2294 
2295 /**
2296  * drm_mode_getplane_res - enumerate all plane resources
2297  * @dev: DRM device
2298  * @data: ioctl data
2299  * @file_priv: DRM file info
2300  *
2301  * Construct a list of plane ids to return to the user.
2302  *
2303  * Called by the user via ioctl.
2304  *
2305  * Returns:
2306  * Zero on success, negative errno on failure.
2307  */
2308 int drm_mode_getplane_res(struct drm_device *dev, void *data,
2309 			  struct drm_file *file_priv)
2310 {
2311 	struct drm_mode_get_plane_res *plane_resp = data;
2312 	struct drm_mode_config *config;
2313 	struct drm_plane *plane;
2314 	uint32_t __user *plane_ptr;
2315 	int copied = 0;
2316 	unsigned num_planes;
2317 
2318 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2319 		return -EINVAL;
2320 
2321 	config = &dev->mode_config;
2322 
2323 	if (file_priv->universal_planes)
2324 		num_planes = config->num_total_plane;
2325 	else
2326 		num_planes = config->num_overlay_plane;
2327 
2328 	/*
2329 	 * This ioctl is called twice, once to determine how much space is
2330 	 * needed, and the 2nd time to fill it.
2331 	 */
2332 	if (num_planes &&
2333 	    (plane_resp->count_planes >= num_planes)) {
2334 		plane_ptr = (uint32_t __user *)(unsigned long)plane_resp->plane_id_ptr;
2335 
2336 		/* Plane lists are invariant, no locking needed. */
2337 		list_for_each_entry(plane, &config->plane_list, head) {
2338 			/*
2339 			 * Unless userspace set the 'universal planes'
2340 			 * capability bit, only advertise overlays.
2341 			 */
2342 			if (plane->type != DRM_PLANE_TYPE_OVERLAY &&
2343 			    !file_priv->universal_planes)
2344 				continue;
2345 
2346 			if (put_user(plane->base.id, plane_ptr + copied))
2347 				return -EFAULT;
2348 			copied++;
2349 		}
2350 	}
2351 	plane_resp->count_planes = num_planes;
2352 
2353 	return 0;
2354 }
2355 
2356 /**
2357  * drm_mode_getplane - get plane configuration
2358  * @dev: DRM device
2359  * @data: ioctl data
2360  * @file_priv: DRM file info
2361  *
2362  * Construct a plane configuration structure to return to the user.
2363  *
2364  * Called by the user via ioctl.
2365  *
2366  * Returns:
2367  * Zero on success, negative errno on failure.
2368  */
2369 int drm_mode_getplane(struct drm_device *dev, void *data,
2370 		      struct drm_file *file_priv)
2371 {
2372 	struct drm_mode_get_plane *plane_resp = data;
2373 	struct drm_plane *plane;
2374 	uint32_t __user *format_ptr;
2375 
2376 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2377 		return -EINVAL;
2378 
2379 	plane = drm_plane_find(dev, plane_resp->plane_id);
2380 	if (!plane)
2381 		return -ENOENT;
2382 
2383 	drm_modeset_lock(&plane->mutex, NULL);
2384 	if (plane->crtc)
2385 		plane_resp->crtc_id = plane->crtc->base.id;
2386 	else
2387 		plane_resp->crtc_id = 0;
2388 
2389 	if (plane->fb)
2390 		plane_resp->fb_id = plane->fb->base.id;
2391 	else
2392 		plane_resp->fb_id = 0;
2393 	drm_modeset_unlock(&plane->mutex);
2394 
2395 	plane_resp->plane_id = plane->base.id;
2396 	plane_resp->possible_crtcs = plane->possible_crtcs;
2397 	plane_resp->gamma_size = 0;
2398 
2399 	/*
2400 	 * This ioctl is called twice, once to determine how much space is
2401 	 * needed, and the 2nd time to fill it.
2402 	 */
2403 	if (plane->format_count &&
2404 	    (plane_resp->count_format_types >= plane->format_count)) {
2405 		format_ptr = (uint32_t __user *)(unsigned long)plane_resp->format_type_ptr;
2406 		if (copy_to_user(format_ptr,
2407 				 plane->format_types,
2408 				 sizeof(uint32_t) * plane->format_count)) {
2409 			return -EFAULT;
2410 		}
2411 	}
2412 	plane_resp->count_format_types = plane->format_count;
2413 
2414 	return 0;
2415 }
2416 
2417 /**
2418  * drm_plane_check_pixel_format - Check if the plane supports the pixel format
2419  * @plane: plane to check for format support
2420  * @format: the pixel format
2421  *
2422  * Returns:
2423  * Zero of @plane has @format in its list of supported pixel formats, -EINVAL
2424  * otherwise.
2425  */
2426 int drm_plane_check_pixel_format(const struct drm_plane *plane, u32 format)
2427 {
2428 	unsigned int i;
2429 
2430 	for (i = 0; i < plane->format_count; i++) {
2431 		if (format == plane->format_types[i])
2432 			return 0;
2433 	}
2434 
2435 	return -EINVAL;
2436 }
2437 
2438 /*
2439  * setplane_internal - setplane handler for internal callers
2440  *
2441  * Note that we assume an extra reference has already been taken on fb.  If the
2442  * update fails, this reference will be dropped before return; if it succeeds,
2443  * the previous framebuffer (if any) will be unreferenced instead.
2444  *
2445  * src_{x,y,w,h} are provided in 16.16 fixed point format
2446  */
2447 static int __setplane_internal(struct drm_plane *plane,
2448 			       struct drm_crtc *crtc,
2449 			       struct drm_framebuffer *fb,
2450 			       int32_t crtc_x, int32_t crtc_y,
2451 			       uint32_t crtc_w, uint32_t crtc_h,
2452 			       /* src_{x,y,w,h} values are 16.16 fixed point */
2453 			       uint32_t src_x, uint32_t src_y,
2454 			       uint32_t src_w, uint32_t src_h)
2455 {
2456 	int ret = 0;
2457 	unsigned int fb_width, fb_height;
2458 
2459 	/* No fb means shut it down */
2460 	if (!fb) {
2461 		plane->old_fb = plane->fb;
2462 		ret = plane->funcs->disable_plane(plane);
2463 		if (!ret) {
2464 			plane->crtc = NULL;
2465 			plane->fb = NULL;
2466 		} else {
2467 			plane->old_fb = NULL;
2468 		}
2469 		goto out;
2470 	}
2471 
2472 	/* Check whether this plane is usable on this CRTC */
2473 	if (!(plane->possible_crtcs & drm_crtc_mask(crtc))) {
2474 		DRM_DEBUG_KMS("Invalid crtc for plane\n");
2475 		ret = -EINVAL;
2476 		goto out;
2477 	}
2478 
2479 	/* Check whether this plane supports the fb pixel format. */
2480 	ret = drm_plane_check_pixel_format(plane, fb->pixel_format);
2481 	if (ret) {
2482 		DRM_DEBUG_KMS("Invalid pixel format %s\n",
2483 			      drm_get_format_name(fb->pixel_format));
2484 		goto out;
2485 	}
2486 
2487 	/* Give drivers some help against integer overflows */
2488 	if (crtc_w > INT_MAX ||
2489 	    crtc_x > INT_MAX - (int32_t) crtc_w ||
2490 	    crtc_h > INT_MAX ||
2491 	    crtc_y > INT_MAX - (int32_t) crtc_h) {
2492 		DRM_DEBUG_KMS("Invalid CRTC coordinates %ux%u+%d+%d\n",
2493 			      crtc_w, crtc_h, crtc_x, crtc_y);
2494 		return -ERANGE;
2495 	}
2496 
2497 
2498 	fb_width = fb->width << 16;
2499 	fb_height = fb->height << 16;
2500 
2501 	/* Make sure source coordinates are inside the fb. */
2502 	if (src_w > fb_width ||
2503 	    src_x > fb_width - src_w ||
2504 	    src_h > fb_height ||
2505 	    src_y > fb_height - src_h) {
2506 		DRM_DEBUG_KMS("Invalid source coordinates "
2507 			      "%u.%06ux%u.%06u+%u.%06u+%u.%06u\n",
2508 			      src_w >> 16, ((src_w & 0xffff) * 15625) >> 10,
2509 			      src_h >> 16, ((src_h & 0xffff) * 15625) >> 10,
2510 			      src_x >> 16, ((src_x & 0xffff) * 15625) >> 10,
2511 			      src_y >> 16, ((src_y & 0xffff) * 15625) >> 10);
2512 		ret = -ENOSPC;
2513 		goto out;
2514 	}
2515 
2516 	plane->old_fb = plane->fb;
2517 	ret = plane->funcs->update_plane(plane, crtc, fb,
2518 					 crtc_x, crtc_y, crtc_w, crtc_h,
2519 					 src_x, src_y, src_w, src_h);
2520 	if (!ret) {
2521 		plane->crtc = crtc;
2522 		plane->fb = fb;
2523 		fb = NULL;
2524 	} else {
2525 		plane->old_fb = NULL;
2526 	}
2527 
2528 out:
2529 	if (fb)
2530 		drm_framebuffer_unreference(fb);
2531 	if (plane->old_fb)
2532 		drm_framebuffer_unreference(plane->old_fb);
2533 	plane->old_fb = NULL;
2534 
2535 	return ret;
2536 }
2537 
2538 static int setplane_internal(struct drm_plane *plane,
2539 			     struct drm_crtc *crtc,
2540 			     struct drm_framebuffer *fb,
2541 			     int32_t crtc_x, int32_t crtc_y,
2542 			     uint32_t crtc_w, uint32_t crtc_h,
2543 			     /* src_{x,y,w,h} values are 16.16 fixed point */
2544 			     uint32_t src_x, uint32_t src_y,
2545 			     uint32_t src_w, uint32_t src_h)
2546 {
2547 	int ret;
2548 
2549 	drm_modeset_lock_all(plane->dev);
2550 	ret = __setplane_internal(plane, crtc, fb,
2551 				  crtc_x, crtc_y, crtc_w, crtc_h,
2552 				  src_x, src_y, src_w, src_h);
2553 	drm_modeset_unlock_all(plane->dev);
2554 
2555 	return ret;
2556 }
2557 
2558 /**
2559  * drm_mode_setplane - configure a plane's configuration
2560  * @dev: DRM device
2561  * @data: ioctl data*
2562  * @file_priv: DRM file info
2563  *
2564  * Set plane configuration, including placement, fb, scaling, and other factors.
2565  * Or pass a NULL fb to disable (planes may be disabled without providing a
2566  * valid crtc).
2567  *
2568  * Returns:
2569  * Zero on success, negative errno on failure.
2570  */
2571 int drm_mode_setplane(struct drm_device *dev, void *data,
2572 		      struct drm_file *file_priv)
2573 {
2574 	struct drm_mode_set_plane *plane_req = data;
2575 	struct drm_plane *plane;
2576 	struct drm_crtc *crtc = NULL;
2577 	struct drm_framebuffer *fb = NULL;
2578 
2579 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2580 		return -EINVAL;
2581 
2582 	/*
2583 	 * First, find the plane, crtc, and fb objects.  If not available,
2584 	 * we don't bother to call the driver.
2585 	 */
2586 	plane = drm_plane_find(dev, plane_req->plane_id);
2587 	if (!plane) {
2588 		DRM_DEBUG_KMS("Unknown plane ID %d\n",
2589 			      plane_req->plane_id);
2590 		return -ENOENT;
2591 	}
2592 
2593 	if (plane_req->fb_id) {
2594 		fb = drm_framebuffer_lookup(dev, plane_req->fb_id);
2595 		if (!fb) {
2596 			DRM_DEBUG_KMS("Unknown framebuffer ID %d\n",
2597 				      plane_req->fb_id);
2598 			return -ENOENT;
2599 		}
2600 
2601 		crtc = drm_crtc_find(dev, plane_req->crtc_id);
2602 		if (!crtc) {
2603 			DRM_DEBUG_KMS("Unknown crtc ID %d\n",
2604 				      plane_req->crtc_id);
2605 			return -ENOENT;
2606 		}
2607 	}
2608 
2609 	/*
2610 	 * setplane_internal will take care of deref'ing either the old or new
2611 	 * framebuffer depending on success.
2612 	 */
2613 	return setplane_internal(plane, crtc, fb,
2614 				 plane_req->crtc_x, plane_req->crtc_y,
2615 				 plane_req->crtc_w, plane_req->crtc_h,
2616 				 plane_req->src_x, plane_req->src_y,
2617 				 plane_req->src_w, plane_req->src_h);
2618 }
2619 
2620 /**
2621  * drm_mode_set_config_internal - helper to call ->set_config
2622  * @set: modeset config to set
2623  *
2624  * This is a little helper to wrap internal calls to the ->set_config driver
2625  * interface. The only thing it adds is correct refcounting dance.
2626  *
2627  * Returns:
2628  * Zero on success, negative errno on failure.
2629  */
2630 int drm_mode_set_config_internal(struct drm_mode_set *set)
2631 {
2632 	struct drm_crtc *crtc = set->crtc;
2633 	struct drm_framebuffer *fb;
2634 	struct drm_crtc *tmp;
2635 	int ret;
2636 
2637 	/*
2638 	 * NOTE: ->set_config can also disable other crtcs (if we steal all
2639 	 * connectors from it), hence we need to refcount the fbs across all
2640 	 * crtcs. Atomic modeset will have saner semantics ...
2641 	 */
2642 	list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head)
2643 		tmp->primary->old_fb = tmp->primary->fb;
2644 
2645 	fb = set->fb;
2646 
2647 	ret = crtc->funcs->set_config(set);
2648 	if (ret == 0) {
2649 		crtc->primary->crtc = crtc;
2650 		crtc->primary->fb = fb;
2651 	}
2652 
2653 	list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head) {
2654 		if (tmp->primary->fb)
2655 			drm_framebuffer_reference(tmp->primary->fb);
2656 		if (tmp->primary->old_fb)
2657 			drm_framebuffer_unreference(tmp->primary->old_fb);
2658 		tmp->primary->old_fb = NULL;
2659 	}
2660 
2661 	return ret;
2662 }
2663 EXPORT_SYMBOL(drm_mode_set_config_internal);
2664 
2665 /**
2666  * drm_crtc_get_hv_timing - Fetches hdisplay/vdisplay for given mode
2667  * @mode: mode to query
2668  * @hdisplay: hdisplay value to fill in
2669  * @vdisplay: vdisplay value to fill in
2670  *
2671  * The vdisplay value will be doubled if the specified mode is a stereo mode of
2672  * the appropriate layout.
2673  */
2674 void drm_crtc_get_hv_timing(const struct drm_display_mode *mode,
2675 			    int *hdisplay, int *vdisplay)
2676 {
2677 	struct drm_display_mode adjusted;
2678 
2679 	drm_mode_copy(&adjusted, mode);
2680 	drm_mode_set_crtcinfo(&adjusted, CRTC_STEREO_DOUBLE_ONLY);
2681 	*hdisplay = adjusted.crtc_hdisplay;
2682 	*vdisplay = adjusted.crtc_vdisplay;
2683 }
2684 EXPORT_SYMBOL(drm_crtc_get_hv_timing);
2685 
2686 /**
2687  * drm_crtc_check_viewport - Checks that a framebuffer is big enough for the
2688  *     CRTC viewport
2689  * @crtc: CRTC that framebuffer will be displayed on
2690  * @x: x panning
2691  * @y: y panning
2692  * @mode: mode that framebuffer will be displayed under
2693  * @fb: framebuffer to check size of
2694  */
2695 int drm_crtc_check_viewport(const struct drm_crtc *crtc,
2696 			    int x, int y,
2697 			    const struct drm_display_mode *mode,
2698 			    const struct drm_framebuffer *fb)
2699 
2700 {
2701 	int hdisplay, vdisplay;
2702 
2703 	drm_crtc_get_hv_timing(mode, &hdisplay, &vdisplay);
2704 
2705 	if (crtc->invert_dimensions)
2706 		swap(hdisplay, vdisplay);
2707 
2708 	if (hdisplay > fb->width ||
2709 	    vdisplay > fb->height ||
2710 	    x > fb->width - hdisplay ||
2711 	    y > fb->height - vdisplay) {
2712 		DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
2713 			      fb->width, fb->height, hdisplay, vdisplay, x, y,
2714 			      crtc->invert_dimensions ? " (inverted)" : "");
2715 		return -ENOSPC;
2716 	}
2717 
2718 	return 0;
2719 }
2720 EXPORT_SYMBOL(drm_crtc_check_viewport);
2721 
2722 /**
2723  * drm_mode_setcrtc - set CRTC configuration
2724  * @dev: drm device for the ioctl
2725  * @data: data pointer for the ioctl
2726  * @file_priv: drm file for the ioctl call
2727  *
2728  * Build a new CRTC configuration based on user request.
2729  *
2730  * Called by the user via ioctl.
2731  *
2732  * Returns:
2733  * Zero on success, negative errno on failure.
2734  */
2735 int drm_mode_setcrtc(struct drm_device *dev, void *data,
2736 		     struct drm_file *file_priv)
2737 {
2738 	struct drm_mode_config *config = &dev->mode_config;
2739 	struct drm_mode_crtc *crtc_req = data;
2740 	struct drm_crtc *crtc;
2741 	struct drm_connector **connector_set = NULL, *connector;
2742 	struct drm_framebuffer *fb = NULL;
2743 	struct drm_display_mode *mode = NULL;
2744 	struct drm_mode_set set;
2745 	uint32_t __user *set_connectors_ptr;
2746 	int ret;
2747 	int i;
2748 
2749 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
2750 		return -EINVAL;
2751 
2752 	/* For some reason crtc x/y offsets are signed internally. */
2753 	if (crtc_req->x > INT_MAX || crtc_req->y > INT_MAX)
2754 		return -ERANGE;
2755 
2756 	drm_modeset_lock_all(dev);
2757 	crtc = drm_crtc_find(dev, crtc_req->crtc_id);
2758 	if (!crtc) {
2759 		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id);
2760 		ret = -ENOENT;
2761 		goto out;
2762 	}
2763 	DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
2764 
2765 	if (crtc_req->mode_valid) {
2766 		/* If we have a mode we need a framebuffer. */
2767 		/* If we pass -1, set the mode with the currently bound fb */
2768 		if (crtc_req->fb_id == -1) {
2769 			if (!crtc->primary->fb) {
2770 				DRM_DEBUG_KMS("CRTC doesn't have current FB\n");
2771 				ret = -EINVAL;
2772 				goto out;
2773 			}
2774 			fb = crtc->primary->fb;
2775 			/* Make refcounting symmetric with the lookup path. */
2776 			drm_framebuffer_reference(fb);
2777 		} else {
2778 			fb = drm_framebuffer_lookup(dev, crtc_req->fb_id);
2779 			if (!fb) {
2780 				DRM_DEBUG_KMS("Unknown FB ID%d\n",
2781 						crtc_req->fb_id);
2782 				ret = -ENOENT;
2783 				goto out;
2784 			}
2785 		}
2786 
2787 		mode = drm_mode_create(dev);
2788 		if (!mode) {
2789 			ret = -ENOMEM;
2790 			goto out;
2791 		}
2792 
2793 		ret = drm_crtc_convert_umode(mode, &crtc_req->mode);
2794 		if (ret) {
2795 			DRM_DEBUG_KMS("Invalid mode\n");
2796 			goto out;
2797 		}
2798 
2799 		mode->status = drm_mode_validate_basic(mode);
2800 		if (mode->status != MODE_OK) {
2801 			ret = -EINVAL;
2802 			goto out;
2803 		}
2804 
2805 		drm_mode_set_crtcinfo(mode, CRTC_INTERLACE_HALVE_V);
2806 
2807 		/*
2808 		 * Check whether the primary plane supports the fb pixel format.
2809 		 * Drivers not implementing the universal planes API use a
2810 		 * default formats list provided by the DRM core which doesn't
2811 		 * match real hardware capabilities. Skip the check in that
2812 		 * case.
2813 		 */
2814 		if (!crtc->primary->format_default) {
2815 			ret = drm_plane_check_pixel_format(crtc->primary,
2816 							   fb->pixel_format);
2817 			if (ret) {
2818 				DRM_DEBUG_KMS("Invalid pixel format %s\n",
2819 					drm_get_format_name(fb->pixel_format));
2820 				goto out;
2821 			}
2822 		}
2823 
2824 		ret = drm_crtc_check_viewport(crtc, crtc_req->x, crtc_req->y,
2825 					      mode, fb);
2826 		if (ret)
2827 			goto out;
2828 
2829 	}
2830 
2831 	if (crtc_req->count_connectors == 0 && mode) {
2832 		DRM_DEBUG_KMS("Count connectors is 0 but mode set\n");
2833 		ret = -EINVAL;
2834 		goto out;
2835 	}
2836 
2837 	if (crtc_req->count_connectors > 0 && (!mode || !fb)) {
2838 		DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",
2839 			  crtc_req->count_connectors);
2840 		ret = -EINVAL;
2841 		goto out;
2842 	}
2843 
2844 	if (crtc_req->count_connectors > 0) {
2845 		u32 out_id;
2846 
2847 		/* Avoid unbounded kernel memory allocation */
2848 		if (crtc_req->count_connectors > config->num_connector) {
2849 			ret = -EINVAL;
2850 			goto out;
2851 		}
2852 
2853 		connector_set = kmalloc_array(crtc_req->count_connectors,
2854 					      sizeof(struct drm_connector *),
2855 					      GFP_KERNEL);
2856 		if (!connector_set) {
2857 			ret = -ENOMEM;
2858 			goto out;
2859 		}
2860 
2861 		for (i = 0; i < crtc_req->count_connectors; i++) {
2862 			set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
2863 			if (get_user(out_id, &set_connectors_ptr[i])) {
2864 				ret = -EFAULT;
2865 				goto out;
2866 			}
2867 
2868 			connector = drm_connector_find(dev, out_id);
2869 			if (!connector) {
2870 				DRM_DEBUG_KMS("Connector id %d unknown\n",
2871 						out_id);
2872 				ret = -ENOENT;
2873 				goto out;
2874 			}
2875 			DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
2876 					connector->base.id,
2877 					connector->name);
2878 
2879 			connector_set[i] = connector;
2880 		}
2881 	}
2882 
2883 	set.crtc = crtc;
2884 	set.x = crtc_req->x;
2885 	set.y = crtc_req->y;
2886 	set.mode = mode;
2887 	set.connectors = connector_set;
2888 	set.num_connectors = crtc_req->count_connectors;
2889 	set.fb = fb;
2890 	ret = drm_mode_set_config_internal(&set);
2891 
2892 out:
2893 	if (fb)
2894 		drm_framebuffer_unreference(fb);
2895 
2896 	kfree(connector_set);
2897 	drm_mode_destroy(dev, mode);
2898 	drm_modeset_unlock_all(dev);
2899 	return ret;
2900 }
2901 
2902 /**
2903  * drm_mode_cursor_universal - translate legacy cursor ioctl call into a
2904  *     universal plane handler call
2905  * @crtc: crtc to update cursor for
2906  * @req: data pointer for the ioctl
2907  * @file_priv: drm file for the ioctl call
2908  *
2909  * Legacy cursor ioctl's work directly with driver buffer handles.  To
2910  * translate legacy ioctl calls into universal plane handler calls, we need to
2911  * wrap the native buffer handle in a drm_framebuffer.
2912  *
2913  * Note that we assume any handle passed to the legacy ioctls was a 32-bit ARGB
2914  * buffer with a pitch of 4*width; the universal plane interface should be used
2915  * directly in cases where the hardware can support other buffer settings and
2916  * userspace wants to make use of these capabilities.
2917  *
2918  * Returns:
2919  * Zero on success, negative errno on failure.
2920  */
2921 static int drm_mode_cursor_universal(struct drm_crtc *crtc,
2922 				     struct drm_mode_cursor2 *req,
2923 				     struct drm_file *file_priv)
2924 {
2925 	struct drm_device *dev = crtc->dev;
2926 	struct drm_framebuffer *fb = NULL;
2927 	struct drm_mode_fb_cmd2 fbreq = {
2928 		.width = req->width,
2929 		.height = req->height,
2930 		.pixel_format = DRM_FORMAT_ARGB8888,
2931 		.pitches = { req->width * 4 },
2932 		.handles = { req->handle },
2933 	};
2934 	int32_t crtc_x, crtc_y;
2935 	uint32_t crtc_w = 0, crtc_h = 0;
2936 	uint32_t src_w = 0, src_h = 0;
2937 	int ret = 0;
2938 
2939 	BUG_ON(!crtc->cursor);
2940 	WARN_ON(crtc->cursor->crtc != crtc && crtc->cursor->crtc != NULL);
2941 
2942 	/*
2943 	 * Obtain fb we'll be using (either new or existing) and take an extra
2944 	 * reference to it if fb != null.  setplane will take care of dropping
2945 	 * the reference if the plane update fails.
2946 	 */
2947 	if (req->flags & DRM_MODE_CURSOR_BO) {
2948 		if (req->handle) {
2949 			fb = internal_framebuffer_create(dev, &fbreq, file_priv);
2950 			if (IS_ERR(fb)) {
2951 				DRM_DEBUG_KMS("failed to wrap cursor buffer in drm framebuffer\n");
2952 				return PTR_ERR(fb);
2953 			}
2954 		} else {
2955 			fb = NULL;
2956 		}
2957 	} else {
2958 		fb = crtc->cursor->fb;
2959 		if (fb)
2960 			drm_framebuffer_reference(fb);
2961 	}
2962 
2963 	if (req->flags & DRM_MODE_CURSOR_MOVE) {
2964 		crtc_x = req->x;
2965 		crtc_y = req->y;
2966 	} else {
2967 		crtc_x = crtc->cursor_x;
2968 		crtc_y = crtc->cursor_y;
2969 	}
2970 
2971 	if (fb) {
2972 		crtc_w = fb->width;
2973 		crtc_h = fb->height;
2974 		src_w = fb->width << 16;
2975 		src_h = fb->height << 16;
2976 	}
2977 
2978 	/*
2979 	 * setplane_internal will take care of deref'ing either the old or new
2980 	 * framebuffer depending on success.
2981 	 */
2982 	ret = __setplane_internal(crtc->cursor, crtc, fb,
2983 				crtc_x, crtc_y, crtc_w, crtc_h,
2984 				0, 0, src_w, src_h);
2985 
2986 	/* Update successful; save new cursor position, if necessary */
2987 	if (ret == 0 && req->flags & DRM_MODE_CURSOR_MOVE) {
2988 		crtc->cursor_x = req->x;
2989 		crtc->cursor_y = req->y;
2990 	}
2991 
2992 	return ret;
2993 }
2994 
2995 static int drm_mode_cursor_common(struct drm_device *dev,
2996 				  struct drm_mode_cursor2 *req,
2997 				  struct drm_file *file_priv)
2998 {
2999 	struct drm_crtc *crtc;
3000 	int ret = 0;
3001 
3002 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3003 		return -EINVAL;
3004 
3005 	if (!req->flags || (~DRM_MODE_CURSOR_FLAGS & req->flags))
3006 		return -EINVAL;
3007 
3008 	crtc = drm_crtc_find(dev, req->crtc_id);
3009 	if (!crtc) {
3010 		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", req->crtc_id);
3011 		return -ENOENT;
3012 	}
3013 
3014 	/*
3015 	 * If this crtc has a universal cursor plane, call that plane's update
3016 	 * handler rather than using legacy cursor handlers.
3017 	 */
3018 	drm_modeset_lock_crtc(crtc, crtc->cursor);
3019 	if (crtc->cursor) {
3020 		ret = drm_mode_cursor_universal(crtc, req, file_priv);
3021 		goto out;
3022 	}
3023 
3024 	if (req->flags & DRM_MODE_CURSOR_BO) {
3025 		if (!crtc->funcs->cursor_set && !crtc->funcs->cursor_set2) {
3026 			ret = -ENXIO;
3027 			goto out;
3028 		}
3029 		/* Turns off the cursor if handle is 0 */
3030 		if (crtc->funcs->cursor_set2)
3031 			ret = crtc->funcs->cursor_set2(crtc, file_priv, req->handle,
3032 						      req->width, req->height, req->hot_x, req->hot_y);
3033 		else
3034 			ret = crtc->funcs->cursor_set(crtc, file_priv, req->handle,
3035 						      req->width, req->height);
3036 	}
3037 
3038 	if (req->flags & DRM_MODE_CURSOR_MOVE) {
3039 		if (crtc->funcs->cursor_move) {
3040 			ret = crtc->funcs->cursor_move(crtc, req->x, req->y);
3041 		} else {
3042 			ret = -EFAULT;
3043 			goto out;
3044 		}
3045 	}
3046 out:
3047 	drm_modeset_unlock_crtc(crtc);
3048 
3049 	return ret;
3050 
3051 }
3052 
3053 
3054 /**
3055  * drm_mode_cursor_ioctl - set CRTC's cursor configuration
3056  * @dev: drm device for the ioctl
3057  * @data: data pointer for the ioctl
3058  * @file_priv: drm file for the ioctl call
3059  *
3060  * Set the cursor configuration based on user request.
3061  *
3062  * Called by the user via ioctl.
3063  *
3064  * Returns:
3065  * Zero on success, negative errno on failure.
3066  */
3067 int drm_mode_cursor_ioctl(struct drm_device *dev,
3068 			  void *data, struct drm_file *file_priv)
3069 {
3070 	struct drm_mode_cursor *req = data;
3071 	struct drm_mode_cursor2 new_req;
3072 
3073 	memcpy(&new_req, req, sizeof(struct drm_mode_cursor));
3074 	new_req.hot_x = new_req.hot_y = 0;
3075 
3076 	return drm_mode_cursor_common(dev, &new_req, file_priv);
3077 }
3078 
3079 /**
3080  * drm_mode_cursor2_ioctl - set CRTC's cursor configuration
3081  * @dev: drm device for the ioctl
3082  * @data: data pointer for the ioctl
3083  * @file_priv: drm file for the ioctl call
3084  *
3085  * Set the cursor configuration based on user request. This implements the 2nd
3086  * version of the cursor ioctl, which allows userspace to additionally specify
3087  * the hotspot of the pointer.
3088  *
3089  * Called by the user via ioctl.
3090  *
3091  * Returns:
3092  * Zero on success, negative errno on failure.
3093  */
3094 int drm_mode_cursor2_ioctl(struct drm_device *dev,
3095 			   void *data, struct drm_file *file_priv)
3096 {
3097 	struct drm_mode_cursor2 *req = data;
3098 
3099 	return drm_mode_cursor_common(dev, req, file_priv);
3100 }
3101 
3102 /**
3103  * drm_mode_legacy_fb_format - compute drm fourcc code from legacy description
3104  * @bpp: bits per pixels
3105  * @depth: bit depth per pixel
3106  *
3107  * Computes a drm fourcc pixel format code for the given @bpp/@depth values.
3108  * Useful in fbdev emulation code, since that deals in those values.
3109  */
3110 uint32_t drm_mode_legacy_fb_format(uint32_t bpp, uint32_t depth)
3111 {
3112 	uint32_t fmt;
3113 
3114 	switch (bpp) {
3115 	case 8:
3116 		fmt = DRM_FORMAT_C8;
3117 		break;
3118 	case 16:
3119 		if (depth == 15)
3120 			fmt = DRM_FORMAT_XRGB1555;
3121 		else
3122 			fmt = DRM_FORMAT_RGB565;
3123 		break;
3124 	case 24:
3125 		fmt = DRM_FORMAT_RGB888;
3126 		break;
3127 	case 32:
3128 		if (depth == 24)
3129 			fmt = DRM_FORMAT_XRGB8888;
3130 		else if (depth == 30)
3131 			fmt = DRM_FORMAT_XRGB2101010;
3132 		else
3133 			fmt = DRM_FORMAT_ARGB8888;
3134 		break;
3135 	default:
3136 		DRM_ERROR("bad bpp, assuming x8r8g8b8 pixel format\n");
3137 		fmt = DRM_FORMAT_XRGB8888;
3138 		break;
3139 	}
3140 
3141 	return fmt;
3142 }
3143 EXPORT_SYMBOL(drm_mode_legacy_fb_format);
3144 
3145 /**
3146  * drm_mode_addfb - add an FB to the graphics configuration
3147  * @dev: drm device for the ioctl
3148  * @data: data pointer for the ioctl
3149  * @file_priv: drm file for the ioctl call
3150  *
3151  * Add a new FB to the specified CRTC, given a user request. This is the
3152  * original addfb ioctl which only supported RGB formats.
3153  *
3154  * Called by the user via ioctl.
3155  *
3156  * Returns:
3157  * Zero on success, negative errno on failure.
3158  */
3159 int drm_mode_addfb(struct drm_device *dev,
3160 		   void *data, struct drm_file *file_priv)
3161 {
3162 	struct drm_mode_fb_cmd *or = data;
3163 	struct drm_mode_fb_cmd2 r = {};
3164 	int ret;
3165 
3166 	/* convert to new format and call new ioctl */
3167 	r.fb_id = or->fb_id;
3168 	r.width = or->width;
3169 	r.height = or->height;
3170 	r.pitches[0] = or->pitch;
3171 	r.pixel_format = drm_mode_legacy_fb_format(or->bpp, or->depth);
3172 	r.handles[0] = or->handle;
3173 
3174 	ret = drm_mode_addfb2(dev, &r, file_priv);
3175 	if (ret)
3176 		return ret;
3177 
3178 	or->fb_id = r.fb_id;
3179 
3180 	return 0;
3181 }
3182 
3183 static int format_check(const struct drm_mode_fb_cmd2 *r)
3184 {
3185 	uint32_t format = r->pixel_format & ~DRM_FORMAT_BIG_ENDIAN;
3186 
3187 	switch (format) {
3188 	case DRM_FORMAT_C8:
3189 	case DRM_FORMAT_RGB332:
3190 	case DRM_FORMAT_BGR233:
3191 	case DRM_FORMAT_XRGB4444:
3192 	case DRM_FORMAT_XBGR4444:
3193 	case DRM_FORMAT_RGBX4444:
3194 	case DRM_FORMAT_BGRX4444:
3195 	case DRM_FORMAT_ARGB4444:
3196 	case DRM_FORMAT_ABGR4444:
3197 	case DRM_FORMAT_RGBA4444:
3198 	case DRM_FORMAT_BGRA4444:
3199 	case DRM_FORMAT_XRGB1555:
3200 	case DRM_FORMAT_XBGR1555:
3201 	case DRM_FORMAT_RGBX5551:
3202 	case DRM_FORMAT_BGRX5551:
3203 	case DRM_FORMAT_ARGB1555:
3204 	case DRM_FORMAT_ABGR1555:
3205 	case DRM_FORMAT_RGBA5551:
3206 	case DRM_FORMAT_BGRA5551:
3207 	case DRM_FORMAT_RGB565:
3208 	case DRM_FORMAT_BGR565:
3209 	case DRM_FORMAT_RGB888:
3210 	case DRM_FORMAT_BGR888:
3211 	case DRM_FORMAT_XRGB8888:
3212 	case DRM_FORMAT_XBGR8888:
3213 	case DRM_FORMAT_RGBX8888:
3214 	case DRM_FORMAT_BGRX8888:
3215 	case DRM_FORMAT_ARGB8888:
3216 	case DRM_FORMAT_ABGR8888:
3217 	case DRM_FORMAT_RGBA8888:
3218 	case DRM_FORMAT_BGRA8888:
3219 	case DRM_FORMAT_XRGB2101010:
3220 	case DRM_FORMAT_XBGR2101010:
3221 	case DRM_FORMAT_RGBX1010102:
3222 	case DRM_FORMAT_BGRX1010102:
3223 	case DRM_FORMAT_ARGB2101010:
3224 	case DRM_FORMAT_ABGR2101010:
3225 	case DRM_FORMAT_RGBA1010102:
3226 	case DRM_FORMAT_BGRA1010102:
3227 	case DRM_FORMAT_YUYV:
3228 	case DRM_FORMAT_YVYU:
3229 	case DRM_FORMAT_UYVY:
3230 	case DRM_FORMAT_VYUY:
3231 	case DRM_FORMAT_AYUV:
3232 	case DRM_FORMAT_NV12:
3233 	case DRM_FORMAT_NV21:
3234 	case DRM_FORMAT_NV16:
3235 	case DRM_FORMAT_NV61:
3236 	case DRM_FORMAT_NV24:
3237 	case DRM_FORMAT_NV42:
3238 	case DRM_FORMAT_YUV410:
3239 	case DRM_FORMAT_YVU410:
3240 	case DRM_FORMAT_YUV411:
3241 	case DRM_FORMAT_YVU411:
3242 	case DRM_FORMAT_YUV420:
3243 	case DRM_FORMAT_YVU420:
3244 	case DRM_FORMAT_YUV422:
3245 	case DRM_FORMAT_YVU422:
3246 	case DRM_FORMAT_YUV444:
3247 	case DRM_FORMAT_YVU444:
3248 		return 0;
3249 	default:
3250 		DRM_DEBUG_KMS("invalid pixel format %s\n",
3251 			      drm_get_format_name(r->pixel_format));
3252 		return -EINVAL;
3253 	}
3254 }
3255 
3256 static int framebuffer_check(const struct drm_mode_fb_cmd2 *r)
3257 {
3258 	int ret, hsub, vsub, num_planes, i;
3259 
3260 	ret = format_check(r);
3261 	if (ret) {
3262 		DRM_DEBUG_KMS("bad framebuffer format %s\n",
3263 			      drm_get_format_name(r->pixel_format));
3264 		return ret;
3265 	}
3266 
3267 	hsub = drm_format_horz_chroma_subsampling(r->pixel_format);
3268 	vsub = drm_format_vert_chroma_subsampling(r->pixel_format);
3269 	num_planes = drm_format_num_planes(r->pixel_format);
3270 
3271 	if (r->width == 0 || r->width % hsub) {
3272 		DRM_DEBUG_KMS("bad framebuffer width %u\n", r->width);
3273 		return -EINVAL;
3274 	}
3275 
3276 	if (r->height == 0 || r->height % vsub) {
3277 		DRM_DEBUG_KMS("bad framebuffer height %u\n", r->height);
3278 		return -EINVAL;
3279 	}
3280 
3281 	for (i = 0; i < num_planes; i++) {
3282 		unsigned int width = r->width / (i != 0 ? hsub : 1);
3283 		unsigned int height = r->height / (i != 0 ? vsub : 1);
3284 		unsigned int cpp = drm_format_plane_cpp(r->pixel_format, i);
3285 
3286 		if (!r->handles[i]) {
3287 			DRM_DEBUG_KMS("no buffer object handle for plane %d\n", i);
3288 			return -EINVAL;
3289 		}
3290 
3291 		if ((uint64_t) width * cpp > UINT_MAX)
3292 			return -ERANGE;
3293 
3294 		if ((uint64_t) height * r->pitches[i] + r->offsets[i] > UINT_MAX)
3295 			return -ERANGE;
3296 
3297 		if (r->pitches[i] < width * cpp) {
3298 			DRM_DEBUG_KMS("bad pitch %u for plane %d\n", r->pitches[i], i);
3299 			return -EINVAL;
3300 		}
3301 
3302 		if (r->modifier[i] && !(r->flags & DRM_MODE_FB_MODIFIERS)) {
3303 			DRM_DEBUG_KMS("bad fb modifier %llu for plane %d\n",
3304 				      r->modifier[i], i);
3305 			return -EINVAL;
3306 		}
3307 	}
3308 
3309 	return 0;
3310 }
3311 
3312 static struct drm_framebuffer *
3313 internal_framebuffer_create(struct drm_device *dev,
3314 			    struct drm_mode_fb_cmd2 *r,
3315 			    struct drm_file *file_priv)
3316 {
3317 	struct drm_mode_config *config = &dev->mode_config;
3318 	struct drm_framebuffer *fb;
3319 	int ret;
3320 
3321 	if (r->flags & ~(DRM_MODE_FB_INTERLACED | DRM_MODE_FB_MODIFIERS)) {
3322 		DRM_DEBUG_KMS("bad framebuffer flags 0x%08x\n", r->flags);
3323 		return ERR_PTR(-EINVAL);
3324 	}
3325 
3326 	if ((config->min_width > r->width) || (r->width > config->max_width)) {
3327 		DRM_DEBUG_KMS("bad framebuffer width %d, should be >= %d && <= %d\n",
3328 			  r->width, config->min_width, config->max_width);
3329 		return ERR_PTR(-EINVAL);
3330 	}
3331 	if ((config->min_height > r->height) || (r->height > config->max_height)) {
3332 		DRM_DEBUG_KMS("bad framebuffer height %d, should be >= %d && <= %d\n",
3333 			  r->height, config->min_height, config->max_height);
3334 		return ERR_PTR(-EINVAL);
3335 	}
3336 
3337 	if (r->flags & DRM_MODE_FB_MODIFIERS &&
3338 	    !dev->mode_config.allow_fb_modifiers) {
3339 		DRM_DEBUG_KMS("driver does not support fb modifiers\n");
3340 		return ERR_PTR(-EINVAL);
3341 	}
3342 
3343 	ret = framebuffer_check(r);
3344 	if (ret)
3345 		return ERR_PTR(ret);
3346 
3347 	fb = dev->mode_config.funcs->fb_create(dev, file_priv, r);
3348 	if (IS_ERR(fb)) {
3349 		DRM_DEBUG_KMS("could not create framebuffer\n");
3350 		return fb;
3351 	}
3352 
3353 	return fb;
3354 }
3355 
3356 /**
3357  * drm_mode_addfb2 - add an FB to the graphics configuration
3358  * @dev: drm device for the ioctl
3359  * @data: data pointer for the ioctl
3360  * @file_priv: drm file for the ioctl call
3361  *
3362  * Add a new FB to the specified CRTC, given a user request with format. This is
3363  * the 2nd version of the addfb ioctl, which supports multi-planar framebuffers
3364  * and uses fourcc codes as pixel format specifiers.
3365  *
3366  * Called by the user via ioctl.
3367  *
3368  * Returns:
3369  * Zero on success, negative errno on failure.
3370  */
3371 int drm_mode_addfb2(struct drm_device *dev,
3372 		    void *data, struct drm_file *file_priv)
3373 {
3374 	struct drm_mode_fb_cmd2 *r = data;
3375 	struct drm_framebuffer *fb;
3376 
3377 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3378 		return -EINVAL;
3379 
3380 	fb = internal_framebuffer_create(dev, r, file_priv);
3381 	if (IS_ERR(fb))
3382 		return PTR_ERR(fb);
3383 
3384 	/* Transfer ownership to the filp for reaping on close */
3385 
3386 	DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
3387 	mutex_lock(&file_priv->fbs_lock);
3388 	r->fb_id = fb->base.id;
3389 	list_add(&fb->filp_head, &file_priv->fbs);
3390 	mutex_unlock(&file_priv->fbs_lock);
3391 
3392 	return 0;
3393 }
3394 
3395 /**
3396  * drm_mode_rmfb - remove an FB from the configuration
3397  * @dev: drm device for the ioctl
3398  * @data: data pointer for the ioctl
3399  * @file_priv: drm file for the ioctl call
3400  *
3401  * Remove the FB specified by the user.
3402  *
3403  * Called by the user via ioctl.
3404  *
3405  * Returns:
3406  * Zero on success, negative errno on failure.
3407  */
3408 int drm_mode_rmfb(struct drm_device *dev,
3409 		   void *data, struct drm_file *file_priv)
3410 {
3411 	struct drm_framebuffer *fb = NULL;
3412 	struct drm_framebuffer *fbl = NULL;
3413 	uint32_t *id = data;
3414 	int found = 0;
3415 
3416 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3417 		return -EINVAL;
3418 
3419 	mutex_lock(&file_priv->fbs_lock);
3420 	mutex_lock(&dev->mode_config.fb_lock);
3421 	fb = __drm_framebuffer_lookup(dev, *id);
3422 	if (!fb)
3423 		goto fail_lookup;
3424 
3425 	list_for_each_entry(fbl, &file_priv->fbs, filp_head)
3426 		if (fb == fbl)
3427 			found = 1;
3428 	if (!found)
3429 		goto fail_lookup;
3430 
3431 	/* Mark fb as reaped, we still have a ref from fpriv->fbs. */
3432 	__drm_framebuffer_unregister(dev, fb);
3433 
3434 	list_del_init(&fb->filp_head);
3435 	mutex_unlock(&dev->mode_config.fb_lock);
3436 	mutex_unlock(&file_priv->fbs_lock);
3437 
3438 	drm_framebuffer_remove(fb);
3439 
3440 	return 0;
3441 
3442 fail_lookup:
3443 	mutex_unlock(&dev->mode_config.fb_lock);
3444 	mutex_unlock(&file_priv->fbs_lock);
3445 
3446 	return -ENOENT;
3447 }
3448 
3449 /**
3450  * drm_mode_getfb - get FB info
3451  * @dev: drm device for the ioctl
3452  * @data: data pointer for the ioctl
3453  * @file_priv: drm file for the ioctl call
3454  *
3455  * Lookup the FB given its ID and return info about it.
3456  *
3457  * Called by the user via ioctl.
3458  *
3459  * Returns:
3460  * Zero on success, negative errno on failure.
3461  */
3462 int drm_mode_getfb(struct drm_device *dev,
3463 		   void *data, struct drm_file *file_priv)
3464 {
3465 	struct drm_mode_fb_cmd *r = data;
3466 	struct drm_framebuffer *fb;
3467 	int ret;
3468 
3469 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3470 		return -EINVAL;
3471 
3472 	fb = drm_framebuffer_lookup(dev, r->fb_id);
3473 	if (!fb)
3474 		return -ENOENT;
3475 
3476 	r->height = fb->height;
3477 	r->width = fb->width;
3478 	r->depth = fb->depth;
3479 	r->bpp = fb->bits_per_pixel;
3480 	r->pitch = fb->pitches[0];
3481 	if (fb->funcs->create_handle) {
3482 		if (file_priv->is_master || capable(CAP_SYS_ADMIN) ||
3483 		    drm_is_control_client(file_priv)) {
3484 			ret = fb->funcs->create_handle(fb, file_priv,
3485 						       &r->handle);
3486 		} else {
3487 			/* GET_FB() is an unprivileged ioctl so we must not
3488 			 * return a buffer-handle to non-master processes! For
3489 			 * backwards-compatibility reasons, we cannot make
3490 			 * GET_FB() privileged, so just return an invalid handle
3491 			 * for non-masters. */
3492 			r->handle = 0;
3493 			ret = 0;
3494 		}
3495 	} else {
3496 		ret = -ENODEV;
3497 	}
3498 
3499 	drm_framebuffer_unreference(fb);
3500 
3501 	return ret;
3502 }
3503 
3504 /**
3505  * drm_mode_dirtyfb_ioctl - flush frontbuffer rendering on an FB
3506  * @dev: drm device for the ioctl
3507  * @data: data pointer for the ioctl
3508  * @file_priv: drm file for the ioctl call
3509  *
3510  * Lookup the FB and flush out the damaged area supplied by userspace as a clip
3511  * rectangle list. Generic userspace which does frontbuffer rendering must call
3512  * this ioctl to flush out the changes on manual-update display outputs, e.g.
3513  * usb display-link, mipi manual update panels or edp panel self refresh modes.
3514  *
3515  * Modesetting drivers which always update the frontbuffer do not need to
3516  * implement the corresponding ->dirty framebuffer callback.
3517  *
3518  * Called by the user via ioctl.
3519  *
3520  * Returns:
3521  * Zero on success, negative errno on failure.
3522  */
3523 int drm_mode_dirtyfb_ioctl(struct drm_device *dev,
3524 			   void *data, struct drm_file *file_priv)
3525 {
3526 	struct drm_clip_rect __user *clips_ptr;
3527 	struct drm_clip_rect *clips = NULL;
3528 	struct drm_mode_fb_dirty_cmd *r = data;
3529 	struct drm_framebuffer *fb;
3530 	unsigned flags;
3531 	int num_clips;
3532 	int ret;
3533 
3534 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3535 		return -EINVAL;
3536 
3537 	fb = drm_framebuffer_lookup(dev, r->fb_id);
3538 	if (!fb)
3539 		return -ENOENT;
3540 
3541 	num_clips = r->num_clips;
3542 	clips_ptr = (struct drm_clip_rect __user *)(unsigned long)r->clips_ptr;
3543 
3544 	if (!num_clips != !clips_ptr) {
3545 		ret = -EINVAL;
3546 		goto out_err1;
3547 	}
3548 
3549 	flags = DRM_MODE_FB_DIRTY_FLAGS & r->flags;
3550 
3551 	/* If userspace annotates copy, clips must come in pairs */
3552 	if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY && (num_clips % 2)) {
3553 		ret = -EINVAL;
3554 		goto out_err1;
3555 	}
3556 
3557 	if (num_clips && clips_ptr) {
3558 		if (num_clips < 0 || num_clips > DRM_MODE_FB_DIRTY_MAX_CLIPS) {
3559 			ret = -EINVAL;
3560 			goto out_err1;
3561 		}
3562 		clips = kcalloc(num_clips, sizeof(*clips), GFP_KERNEL);
3563 		if (!clips) {
3564 			ret = -ENOMEM;
3565 			goto out_err1;
3566 		}
3567 
3568 		ret = copy_from_user(clips, clips_ptr,
3569 				     num_clips * sizeof(*clips));
3570 		if (ret) {
3571 			ret = -EFAULT;
3572 			goto out_err2;
3573 		}
3574 	}
3575 
3576 	if (fb->funcs->dirty) {
3577 		ret = fb->funcs->dirty(fb, file_priv, flags, r->color,
3578 				       clips, num_clips);
3579 	} else {
3580 		ret = -ENOSYS;
3581 	}
3582 
3583 out_err2:
3584 	kfree(clips);
3585 out_err1:
3586 	drm_framebuffer_unreference(fb);
3587 
3588 	return ret;
3589 }
3590 
3591 
3592 /**
3593  * drm_fb_release - remove and free the FBs on this file
3594  * @priv: drm file for the ioctl
3595  *
3596  * Destroy all the FBs associated with @filp.
3597  *
3598  * Called by the user via ioctl.
3599  *
3600  * Returns:
3601  * Zero on success, negative errno on failure.
3602  */
3603 void drm_fb_release(struct drm_file *priv)
3604 {
3605 	struct drm_device *dev = priv->minor->dev;
3606 	struct drm_framebuffer *fb, *tfb;
3607 
3608 	/*
3609 	 * When the file gets released that means no one else can access the fb
3610 	 * list any more, so no need to grab fpriv->fbs_lock. And we need to
3611 	 * avoid upsetting lockdep since the universal cursor code adds a
3612 	 * framebuffer while holding mutex locks.
3613 	 *
3614 	 * Note that a real deadlock between fpriv->fbs_lock and the modeset
3615 	 * locks is impossible here since no one else but this function can get
3616 	 * at it any more.
3617 	 */
3618 	list_for_each_entry_safe(fb, tfb, &priv->fbs, filp_head) {
3619 
3620 		mutex_lock(&dev->mode_config.fb_lock);
3621 		/* Mark fb as reaped, we still have a ref from fpriv->fbs. */
3622 		__drm_framebuffer_unregister(dev, fb);
3623 		mutex_unlock(&dev->mode_config.fb_lock);
3624 
3625 		list_del_init(&fb->filp_head);
3626 
3627 		/* This will also drop the fpriv->fbs reference. */
3628 		drm_framebuffer_remove(fb);
3629 	}
3630 }
3631 
3632 /**
3633  * drm_property_create - create a new property type
3634  * @dev: drm device
3635  * @flags: flags specifying the property type
3636  * @name: name of the property
3637  * @num_values: number of pre-defined values
3638  *
3639  * This creates a new generic drm property which can then be attached to a drm
3640  * object with drm_object_attach_property. The returned property object must be
3641  * freed with drm_property_destroy.
3642  *
3643  * Note that the DRM core keeps a per-device list of properties and that, if
3644  * drm_mode_config_cleanup() is called, it will destroy all properties created
3645  * by the driver.
3646  *
3647  * Returns:
3648  * A pointer to the newly created property on success, NULL on failure.
3649  */
3650 struct drm_property *drm_property_create(struct drm_device *dev, int flags,
3651 					 const char *name, int num_values)
3652 {
3653 	struct drm_property *property = NULL;
3654 	int ret;
3655 
3656 	property = kzalloc(sizeof(struct drm_property), GFP_KERNEL);
3657 	if (!property)
3658 		return NULL;
3659 
3660 	property->dev = dev;
3661 
3662 	if (num_values) {
3663 		property->values = kcalloc(num_values, sizeof(uint64_t),
3664 					   GFP_KERNEL);
3665 		if (!property->values)
3666 			goto fail;
3667 	}
3668 
3669 	ret = drm_mode_object_get(dev, &property->base, DRM_MODE_OBJECT_PROPERTY);
3670 	if (ret)
3671 		goto fail;
3672 
3673 	property->flags = flags;
3674 	property->num_values = num_values;
3675 	INIT_LIST_HEAD(&property->enum_list);
3676 
3677 	if (name) {
3678 		strncpy(property->name, name, DRM_PROP_NAME_LEN);
3679 		property->name[DRM_PROP_NAME_LEN-1] = '\0';
3680 	}
3681 
3682 	list_add_tail(&property->head, &dev->mode_config.property_list);
3683 
3684 	WARN_ON(!drm_property_type_valid(property));
3685 
3686 	return property;
3687 fail:
3688 	kfree(property->values);
3689 	kfree(property);
3690 	return NULL;
3691 }
3692 EXPORT_SYMBOL(drm_property_create);
3693 
3694 /**
3695  * drm_property_create_enum - create a new enumeration property type
3696  * @dev: drm device
3697  * @flags: flags specifying the property type
3698  * @name: name of the property
3699  * @props: enumeration lists with property values
3700  * @num_values: number of pre-defined values
3701  *
3702  * This creates a new generic drm property which can then be attached to a drm
3703  * object with drm_object_attach_property. The returned property object must be
3704  * freed with drm_property_destroy.
3705  *
3706  * Userspace is only allowed to set one of the predefined values for enumeration
3707  * properties.
3708  *
3709  * Returns:
3710  * A pointer to the newly created property on success, NULL on failure.
3711  */
3712 struct drm_property *drm_property_create_enum(struct drm_device *dev, int flags,
3713 					 const char *name,
3714 					 const struct drm_prop_enum_list *props,
3715 					 int num_values)
3716 {
3717 	struct drm_property *property;
3718 	int i, ret;
3719 
3720 	flags |= DRM_MODE_PROP_ENUM;
3721 
3722 	property = drm_property_create(dev, flags, name, num_values);
3723 	if (!property)
3724 		return NULL;
3725 
3726 	for (i = 0; i < num_values; i++) {
3727 		ret = drm_property_add_enum(property, i,
3728 				      props[i].type,
3729 				      props[i].name);
3730 		if (ret) {
3731 			drm_property_destroy(dev, property);
3732 			return NULL;
3733 		}
3734 	}
3735 
3736 	return property;
3737 }
3738 EXPORT_SYMBOL(drm_property_create_enum);
3739 
3740 /**
3741  * drm_property_create_bitmask - create a new bitmask property type
3742  * @dev: drm device
3743  * @flags: flags specifying the property type
3744  * @name: name of the property
3745  * @props: enumeration lists with property bitflags
3746  * @num_props: size of the @props array
3747  * @supported_bits: bitmask of all supported enumeration values
3748  *
3749  * This creates a new bitmask drm property which can then be attached to a drm
3750  * object with drm_object_attach_property. The returned property object must be
3751  * freed with drm_property_destroy.
3752  *
3753  * Compared to plain enumeration properties userspace is allowed to set any
3754  * or'ed together combination of the predefined property bitflag values
3755  *
3756  * Returns:
3757  * A pointer to the newly created property on success, NULL on failure.
3758  */
3759 struct drm_property *drm_property_create_bitmask(struct drm_device *dev,
3760 					 int flags, const char *name,
3761 					 const struct drm_prop_enum_list *props,
3762 					 int num_props,
3763 					 uint64_t supported_bits)
3764 {
3765 	struct drm_property *property;
3766 	int i, ret, index = 0;
3767 	int num_values = hweight64(supported_bits);
3768 
3769 	flags |= DRM_MODE_PROP_BITMASK;
3770 
3771 	property = drm_property_create(dev, flags, name, num_values);
3772 	if (!property)
3773 		return NULL;
3774 	for (i = 0; i < num_props; i++) {
3775 		if (!(supported_bits & (1ULL << props[i].type)))
3776 			continue;
3777 
3778 		if (WARN_ON(index >= num_values)) {
3779 			drm_property_destroy(dev, property);
3780 			return NULL;
3781 		}
3782 
3783 		ret = drm_property_add_enum(property, index++,
3784 				      props[i].type,
3785 				      props[i].name);
3786 		if (ret) {
3787 			drm_property_destroy(dev, property);
3788 			return NULL;
3789 		}
3790 	}
3791 
3792 	return property;
3793 }
3794 EXPORT_SYMBOL(drm_property_create_bitmask);
3795 
3796 static struct drm_property *property_create_range(struct drm_device *dev,
3797 					 int flags, const char *name,
3798 					 uint64_t min, uint64_t max)
3799 {
3800 	struct drm_property *property;
3801 
3802 	property = drm_property_create(dev, flags, name, 2);
3803 	if (!property)
3804 		return NULL;
3805 
3806 	property->values[0] = min;
3807 	property->values[1] = max;
3808 
3809 	return property;
3810 }
3811 
3812 /**
3813  * drm_property_create_range - create a new unsigned ranged property type
3814  * @dev: drm device
3815  * @flags: flags specifying the property type
3816  * @name: name of the property
3817  * @min: minimum value of the property
3818  * @max: maximum value of the property
3819  *
3820  * This creates a new generic drm property which can then be attached to a drm
3821  * object with drm_object_attach_property. The returned property object must be
3822  * freed with drm_property_destroy.
3823  *
3824  * Userspace is allowed to set any unsigned integer value in the (min, max)
3825  * range inclusive.
3826  *
3827  * Returns:
3828  * A pointer to the newly created property on success, NULL on failure.
3829  */
3830 struct drm_property *drm_property_create_range(struct drm_device *dev, int flags,
3831 					 const char *name,
3832 					 uint64_t min, uint64_t max)
3833 {
3834 	return property_create_range(dev, DRM_MODE_PROP_RANGE | flags,
3835 			name, min, max);
3836 }
3837 EXPORT_SYMBOL(drm_property_create_range);
3838 
3839 /**
3840  * drm_property_create_signed_range - create a new signed ranged property type
3841  * @dev: drm device
3842  * @flags: flags specifying the property type
3843  * @name: name of the property
3844  * @min: minimum value of the property
3845  * @max: maximum value of the property
3846  *
3847  * This creates a new generic drm property which can then be attached to a drm
3848  * object with drm_object_attach_property. The returned property object must be
3849  * freed with drm_property_destroy.
3850  *
3851  * Userspace is allowed to set any signed integer value in the (min, max)
3852  * range inclusive.
3853  *
3854  * Returns:
3855  * A pointer to the newly created property on success, NULL on failure.
3856  */
3857 struct drm_property *drm_property_create_signed_range(struct drm_device *dev,
3858 					 int flags, const char *name,
3859 					 int64_t min, int64_t max)
3860 {
3861 	return property_create_range(dev, DRM_MODE_PROP_SIGNED_RANGE | flags,
3862 			name, I642U64(min), I642U64(max));
3863 }
3864 EXPORT_SYMBOL(drm_property_create_signed_range);
3865 
3866 /**
3867  * drm_property_create_object - create a new object property type
3868  * @dev: drm device
3869  * @flags: flags specifying the property type
3870  * @name: name of the property
3871  * @type: object type from DRM_MODE_OBJECT_* defines
3872  *
3873  * This creates a new generic drm property which can then be attached to a drm
3874  * object with drm_object_attach_property. The returned property object must be
3875  * freed with drm_property_destroy.
3876  *
3877  * Userspace is only allowed to set this to any property value of the given
3878  * @type. Only useful for atomic properties, which is enforced.
3879  *
3880  * Returns:
3881  * A pointer to the newly created property on success, NULL on failure.
3882  */
3883 struct drm_property *drm_property_create_object(struct drm_device *dev,
3884 					 int flags, const char *name, uint32_t type)
3885 {
3886 	struct drm_property *property;
3887 
3888 	flags |= DRM_MODE_PROP_OBJECT;
3889 
3890 	if (WARN_ON(!(flags & DRM_MODE_PROP_ATOMIC)))
3891 		return NULL;
3892 
3893 	property = drm_property_create(dev, flags, name, 1);
3894 	if (!property)
3895 		return NULL;
3896 
3897 	property->values[0] = type;
3898 
3899 	return property;
3900 }
3901 EXPORT_SYMBOL(drm_property_create_object);
3902 
3903 /**
3904  * drm_property_create_bool - create a new boolean property type
3905  * @dev: drm device
3906  * @flags: flags specifying the property type
3907  * @name: name of the property
3908  *
3909  * This creates a new generic drm property which can then be attached to a drm
3910  * object with drm_object_attach_property. The returned property object must be
3911  * freed with drm_property_destroy.
3912  *
3913  * This is implemented as a ranged property with only {0, 1} as valid values.
3914  *
3915  * Returns:
3916  * A pointer to the newly created property on success, NULL on failure.
3917  */
3918 struct drm_property *drm_property_create_bool(struct drm_device *dev, int flags,
3919 					 const char *name)
3920 {
3921 	return drm_property_create_range(dev, flags, name, 0, 1);
3922 }
3923 EXPORT_SYMBOL(drm_property_create_bool);
3924 
3925 /**
3926  * drm_property_add_enum - add a possible value to an enumeration property
3927  * @property: enumeration property to change
3928  * @index: index of the new enumeration
3929  * @value: value of the new enumeration
3930  * @name: symbolic name of the new enumeration
3931  *
3932  * This functions adds enumerations to a property.
3933  *
3934  * It's use is deprecated, drivers should use one of the more specific helpers
3935  * to directly create the property with all enumerations already attached.
3936  *
3937  * Returns:
3938  * Zero on success, error code on failure.
3939  */
3940 int drm_property_add_enum(struct drm_property *property, int index,
3941 			  uint64_t value, const char *name)
3942 {
3943 	struct drm_property_enum *prop_enum;
3944 
3945 	if (!(drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
3946 			drm_property_type_is(property, DRM_MODE_PROP_BITMASK)))
3947 		return -EINVAL;
3948 
3949 	/*
3950 	 * Bitmask enum properties have the additional constraint of values
3951 	 * from 0 to 63
3952 	 */
3953 	if (drm_property_type_is(property, DRM_MODE_PROP_BITMASK) &&
3954 			(value > 63))
3955 		return -EINVAL;
3956 
3957 	if (!list_empty(&property->enum_list)) {
3958 		list_for_each_entry(prop_enum, &property->enum_list, head) {
3959 			if (prop_enum->value == value) {
3960 				strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
3961 				prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
3962 				return 0;
3963 			}
3964 		}
3965 	}
3966 
3967 	prop_enum = kzalloc(sizeof(struct drm_property_enum), GFP_KERNEL);
3968 	if (!prop_enum)
3969 		return -ENOMEM;
3970 
3971 	strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
3972 	prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
3973 	prop_enum->value = value;
3974 
3975 	property->values[index] = value;
3976 	list_add_tail(&prop_enum->head, &property->enum_list);
3977 	return 0;
3978 }
3979 EXPORT_SYMBOL(drm_property_add_enum);
3980 
3981 /**
3982  * drm_property_destroy - destroy a drm property
3983  * @dev: drm device
3984  * @property: property to destry
3985  *
3986  * This function frees a property including any attached resources like
3987  * enumeration values.
3988  */
3989 void drm_property_destroy(struct drm_device *dev, struct drm_property *property)
3990 {
3991 	struct drm_property_enum *prop_enum, *pt;
3992 
3993 	list_for_each_entry_safe(prop_enum, pt, &property->enum_list, head) {
3994 		list_del(&prop_enum->head);
3995 		kfree(prop_enum);
3996 	}
3997 
3998 	if (property->num_values)
3999 		kfree(property->values);
4000 	drm_mode_object_put(dev, &property->base);
4001 	list_del(&property->head);
4002 	kfree(property);
4003 }
4004 EXPORT_SYMBOL(drm_property_destroy);
4005 
4006 /**
4007  * drm_object_attach_property - attach a property to a modeset object
4008  * @obj: drm modeset object
4009  * @property: property to attach
4010  * @init_val: initial value of the property
4011  *
4012  * This attaches the given property to the modeset object with the given initial
4013  * value. Currently this function cannot fail since the properties are stored in
4014  * a statically sized array.
4015  */
4016 void drm_object_attach_property(struct drm_mode_object *obj,
4017 				struct drm_property *property,
4018 				uint64_t init_val)
4019 {
4020 	int count = obj->properties->count;
4021 
4022 	if (count == DRM_OBJECT_MAX_PROPERTY) {
4023 		WARN(1, "Failed to attach object property (type: 0x%x). Please "
4024 			"increase DRM_OBJECT_MAX_PROPERTY by 1 for each time "
4025 			"you see this message on the same object type.\n",
4026 			obj->type);
4027 		return;
4028 	}
4029 
4030 	obj->properties->properties[count] = property;
4031 	obj->properties->values[count] = init_val;
4032 	obj->properties->count++;
4033 	if (property->flags & DRM_MODE_PROP_ATOMIC)
4034 		obj->properties->atomic_count++;
4035 }
4036 EXPORT_SYMBOL(drm_object_attach_property);
4037 
4038 /**
4039  * drm_object_property_set_value - set the value of a property
4040  * @obj: drm mode object to set property value for
4041  * @property: property to set
4042  * @val: value the property should be set to
4043  *
4044  * This functions sets a given property on a given object. This function only
4045  * changes the software state of the property, it does not call into the
4046  * driver's ->set_property callback.
4047  *
4048  * Returns:
4049  * Zero on success, error code on failure.
4050  */
4051 int drm_object_property_set_value(struct drm_mode_object *obj,
4052 				  struct drm_property *property, uint64_t val)
4053 {
4054 	int i;
4055 
4056 	for (i = 0; i < obj->properties->count; i++) {
4057 		if (obj->properties->properties[i] == property) {
4058 			obj->properties->values[i] = val;
4059 			return 0;
4060 		}
4061 	}
4062 
4063 	return -EINVAL;
4064 }
4065 EXPORT_SYMBOL(drm_object_property_set_value);
4066 
4067 /**
4068  * drm_object_property_get_value - retrieve the value of a property
4069  * @obj: drm mode object to get property value from
4070  * @property: property to retrieve
4071  * @val: storage for the property value
4072  *
4073  * This function retrieves the softare state of the given property for the given
4074  * property. Since there is no driver callback to retrieve the current property
4075  * value this might be out of sync with the hardware, depending upon the driver
4076  * and property.
4077  *
4078  * Returns:
4079  * Zero on success, error code on failure.
4080  */
4081 int drm_object_property_get_value(struct drm_mode_object *obj,
4082 				  struct drm_property *property, uint64_t *val)
4083 {
4084 	int i;
4085 
4086 	/* read-only properties bypass atomic mechanism and still store
4087 	 * their value in obj->properties->values[].. mostly to avoid
4088 	 * having to deal w/ EDID and similar props in atomic paths:
4089 	 */
4090 	if (drm_core_check_feature(property->dev, DRIVER_ATOMIC) &&
4091 			!(property->flags & DRM_MODE_PROP_IMMUTABLE))
4092 		return drm_atomic_get_property(obj, property, val);
4093 
4094 	for (i = 0; i < obj->properties->count; i++) {
4095 		if (obj->properties->properties[i] == property) {
4096 			*val = obj->properties->values[i];
4097 			return 0;
4098 		}
4099 	}
4100 
4101 	return -EINVAL;
4102 }
4103 EXPORT_SYMBOL(drm_object_property_get_value);
4104 
4105 /**
4106  * drm_mode_getproperty_ioctl - get the property metadata
4107  * @dev: DRM device
4108  * @data: ioctl data
4109  * @file_priv: DRM file info
4110  *
4111  * This function retrieves the metadata for a given property, like the different
4112  * possible values for an enum property or the limits for a range property.
4113  *
4114  * Blob properties are special
4115  *
4116  * Called by the user via ioctl.
4117  *
4118  * Returns:
4119  * Zero on success, negative errno on failure.
4120  */
4121 int drm_mode_getproperty_ioctl(struct drm_device *dev,
4122 			       void *data, struct drm_file *file_priv)
4123 {
4124 	struct drm_mode_get_property *out_resp = data;
4125 	struct drm_property *property;
4126 	int enum_count = 0;
4127 	int value_count = 0;
4128 	int ret = 0, i;
4129 	int copied;
4130 	struct drm_property_enum *prop_enum;
4131 	struct drm_mode_property_enum __user *enum_ptr;
4132 	uint64_t __user *values_ptr;
4133 
4134 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
4135 		return -EINVAL;
4136 
4137 	drm_modeset_lock_all(dev);
4138 	property = drm_property_find(dev, out_resp->prop_id);
4139 	if (!property) {
4140 		ret = -ENOENT;
4141 		goto done;
4142 	}
4143 
4144 	if (drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
4145 			drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
4146 		list_for_each_entry(prop_enum, &property->enum_list, head)
4147 			enum_count++;
4148 	}
4149 
4150 	value_count = property->num_values;
4151 
4152 	strncpy(out_resp->name, property->name, DRM_PROP_NAME_LEN);
4153 	out_resp->name[DRM_PROP_NAME_LEN-1] = 0;
4154 	out_resp->flags = property->flags;
4155 
4156 	if ((out_resp->count_values >= value_count) && value_count) {
4157 		values_ptr = (uint64_t __user *)(unsigned long)out_resp->values_ptr;
4158 		for (i = 0; i < value_count; i++) {
4159 			if (copy_to_user(values_ptr + i, &property->values[i], sizeof(uint64_t))) {
4160 				ret = -EFAULT;
4161 				goto done;
4162 			}
4163 		}
4164 	}
4165 	out_resp->count_values = value_count;
4166 
4167 	if (drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
4168 			drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
4169 		if ((out_resp->count_enum_blobs >= enum_count) && enum_count) {
4170 			copied = 0;
4171 			enum_ptr = (struct drm_mode_property_enum __user *)(unsigned long)out_resp->enum_blob_ptr;
4172 			list_for_each_entry(prop_enum, &property->enum_list, head) {
4173 
4174 				if (copy_to_user(&enum_ptr[copied].value, &prop_enum->value, sizeof(uint64_t))) {
4175 					ret = -EFAULT;
4176 					goto done;
4177 				}
4178 
4179 				if (copy_to_user(&enum_ptr[copied].name,
4180 						 &prop_enum->name, DRM_PROP_NAME_LEN)) {
4181 					ret = -EFAULT;
4182 					goto done;
4183 				}
4184 				copied++;
4185 			}
4186 		}
4187 		out_resp->count_enum_blobs = enum_count;
4188 	}
4189 
4190 	/*
4191 	 * NOTE: The idea seems to have been to use this to read all the blob
4192 	 * property values. But nothing ever added them to the corresponding
4193 	 * list, userspace always used the special-purpose get_blob ioctl to
4194 	 * read the value for a blob property. It also doesn't make a lot of
4195 	 * sense to return values here when everything else is just metadata for
4196 	 * the property itself.
4197 	 */
4198 	if (drm_property_type_is(property, DRM_MODE_PROP_BLOB))
4199 		out_resp->count_enum_blobs = 0;
4200 done:
4201 	drm_modeset_unlock_all(dev);
4202 	return ret;
4203 }
4204 
4205 static struct drm_property_blob *
4206 drm_property_create_blob(struct drm_device *dev, size_t length,
4207 			 const void *data)
4208 {
4209 	struct drm_property_blob *blob;
4210 	int ret;
4211 
4212 	if (!length || !data)
4213 		return NULL;
4214 
4215 	blob = kzalloc(sizeof(struct drm_property_blob)+length, GFP_KERNEL);
4216 	if (!blob)
4217 		return NULL;
4218 
4219 	ret = drm_mode_object_get(dev, &blob->base, DRM_MODE_OBJECT_BLOB);
4220 	if (ret) {
4221 		kfree(blob);
4222 		return NULL;
4223 	}
4224 
4225 	blob->length = length;
4226 
4227 	memcpy(blob->data, data, length);
4228 
4229 	list_add_tail(&blob->head, &dev->mode_config.property_blob_list);
4230 	return blob;
4231 }
4232 
4233 static void drm_property_destroy_blob(struct drm_device *dev,
4234 			       struct drm_property_blob *blob)
4235 {
4236 	drm_mode_object_put(dev, &blob->base);
4237 	list_del(&blob->head);
4238 	kfree(blob);
4239 }
4240 
4241 /**
4242  * drm_mode_getblob_ioctl - get the contents of a blob property value
4243  * @dev: DRM device
4244  * @data: ioctl data
4245  * @file_priv: DRM file info
4246  *
4247  * This function retrieves the contents of a blob property. The value stored in
4248  * an object's blob property is just a normal modeset object id.
4249  *
4250  * Called by the user via ioctl.
4251  *
4252  * Returns:
4253  * Zero on success, negative errno on failure.
4254  */
4255 int drm_mode_getblob_ioctl(struct drm_device *dev,
4256 			   void *data, struct drm_file *file_priv)
4257 {
4258 	struct drm_mode_get_blob *out_resp = data;
4259 	struct drm_property_blob *blob;
4260 	int ret = 0;
4261 	void __user *blob_ptr;
4262 
4263 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
4264 		return -EINVAL;
4265 
4266 	drm_modeset_lock_all(dev);
4267 	blob = drm_property_blob_find(dev, out_resp->blob_id);
4268 	if (!blob) {
4269 		ret = -ENOENT;
4270 		goto done;
4271 	}
4272 
4273 	if (out_resp->length == blob->length) {
4274 		blob_ptr = (void __user *)(unsigned long)out_resp->data;
4275 		if (copy_to_user(blob_ptr, blob->data, blob->length)) {
4276 			ret = -EFAULT;
4277 			goto done;
4278 		}
4279 	}
4280 	out_resp->length = blob->length;
4281 
4282 done:
4283 	drm_modeset_unlock_all(dev);
4284 	return ret;
4285 }
4286 
4287 /**
4288  * drm_mode_connector_set_path_property - set tile property on connector
4289  * @connector: connector to set property on.
4290  * @path: path to use for property.
4291  *
4292  * This creates a property to expose to userspace to specify a
4293  * connector path. This is mainly used for DisplayPort MST where
4294  * connectors have a topology and we want to allow userspace to give
4295  * them more meaningful names.
4296  *
4297  * Returns:
4298  * Zero on success, negative errno on failure.
4299  */
4300 int drm_mode_connector_set_path_property(struct drm_connector *connector,
4301 					 const char *path)
4302 {
4303 	struct drm_device *dev = connector->dev;
4304 	size_t size = strlen(path) + 1;
4305 	int ret;
4306 
4307 	connector->path_blob_ptr = drm_property_create_blob(connector->dev,
4308 							    size, path);
4309 	if (!connector->path_blob_ptr)
4310 		return -EINVAL;
4311 
4312 	ret = drm_object_property_set_value(&connector->base,
4313 					    dev->mode_config.path_property,
4314 					    connector->path_blob_ptr->base.id);
4315 	return ret;
4316 }
4317 EXPORT_SYMBOL(drm_mode_connector_set_path_property);
4318 
4319 /**
4320  * drm_mode_connector_set_tile_property - set tile property on connector
4321  * @connector: connector to set property on.
4322  *
4323  * This looks up the tile information for a connector, and creates a
4324  * property for userspace to parse if it exists. The property is of
4325  * the form of 8 integers using ':' as a separator.
4326  *
4327  * Returns:
4328  * Zero on success, errno on failure.
4329  */
4330 int drm_mode_connector_set_tile_property(struct drm_connector *connector)
4331 {
4332 	struct drm_device *dev = connector->dev;
4333 	int ret, size;
4334 	char tile[256];
4335 
4336 	if (connector->tile_blob_ptr)
4337 		drm_property_destroy_blob(dev, connector->tile_blob_ptr);
4338 
4339 	if (!connector->has_tile) {
4340 		connector->tile_blob_ptr = NULL;
4341 		ret = drm_object_property_set_value(&connector->base,
4342 						    dev->mode_config.tile_property, 0);
4343 		return ret;
4344 	}
4345 
4346 	snprintf(tile, 256, "%d:%d:%d:%d:%d:%d:%d:%d",
4347 		 connector->tile_group->id, connector->tile_is_single_monitor,
4348 		 connector->num_h_tile, connector->num_v_tile,
4349 		 connector->tile_h_loc, connector->tile_v_loc,
4350 		 connector->tile_h_size, connector->tile_v_size);
4351 	size = strlen(tile) + 1;
4352 
4353 	connector->tile_blob_ptr = drm_property_create_blob(connector->dev,
4354 							    size, tile);
4355 	if (!connector->tile_blob_ptr)
4356 		return -EINVAL;
4357 
4358 	ret = drm_object_property_set_value(&connector->base,
4359 					    dev->mode_config.tile_property,
4360 					    connector->tile_blob_ptr->base.id);
4361 	return ret;
4362 }
4363 EXPORT_SYMBOL(drm_mode_connector_set_tile_property);
4364 
4365 /**
4366  * drm_mode_connector_update_edid_property - update the edid property of a connector
4367  * @connector: drm connector
4368  * @edid: new value of the edid property
4369  *
4370  * This function creates a new blob modeset object and assigns its id to the
4371  * connector's edid property.
4372  *
4373  * Returns:
4374  * Zero on success, negative errno on failure.
4375  */
4376 int drm_mode_connector_update_edid_property(struct drm_connector *connector,
4377 					    const struct edid *edid)
4378 {
4379 	struct drm_device *dev = connector->dev;
4380 	size_t size;
4381 	int ret;
4382 
4383 	/* ignore requests to set edid when overridden */
4384 	if (connector->override_edid)
4385 		return 0;
4386 
4387 	if (connector->edid_blob_ptr)
4388 		drm_property_destroy_blob(dev, connector->edid_blob_ptr);
4389 
4390 	/* Delete edid, when there is none. */
4391 	if (!edid) {
4392 		connector->edid_blob_ptr = NULL;
4393 		ret = drm_object_property_set_value(&connector->base, dev->mode_config.edid_property, 0);
4394 		return ret;
4395 	}
4396 
4397 	size = EDID_LENGTH * (1 + edid->extensions);
4398 	connector->edid_blob_ptr = drm_property_create_blob(connector->dev,
4399 							    size, edid);
4400 	if (!connector->edid_blob_ptr)
4401 		return -EINVAL;
4402 
4403 	ret = drm_object_property_set_value(&connector->base,
4404 					       dev->mode_config.edid_property,
4405 					       connector->edid_blob_ptr->base.id);
4406 
4407 	return ret;
4408 }
4409 EXPORT_SYMBOL(drm_mode_connector_update_edid_property);
4410 
4411 /* Some properties could refer to dynamic refcnt'd objects, or things that
4412  * need special locking to handle lifetime issues (ie. to ensure the prop
4413  * value doesn't become invalid part way through the property update due to
4414  * race).  The value returned by reference via 'obj' should be passed back
4415  * to drm_property_change_valid_put() after the property is set (and the
4416  * object to which the property is attached has a chance to take it's own
4417  * reference).
4418  */
4419 bool drm_property_change_valid_get(struct drm_property *property,
4420 					 uint64_t value, struct drm_mode_object **ref)
4421 {
4422 	int i;
4423 
4424 	if (property->flags & DRM_MODE_PROP_IMMUTABLE)
4425 		return false;
4426 
4427 	*ref = NULL;
4428 
4429 	if (drm_property_type_is(property, DRM_MODE_PROP_RANGE)) {
4430 		if (value < property->values[0] || value > property->values[1])
4431 			return false;
4432 		return true;
4433 	} else if (drm_property_type_is(property, DRM_MODE_PROP_SIGNED_RANGE)) {
4434 		int64_t svalue = U642I64(value);
4435 
4436 		if (svalue < U642I64(property->values[0]) ||
4437 				svalue > U642I64(property->values[1]))
4438 			return false;
4439 		return true;
4440 	} else if (drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
4441 		uint64_t valid_mask = 0;
4442 
4443 		for (i = 0; i < property->num_values; i++)
4444 			valid_mask |= (1ULL << property->values[i]);
4445 		return !(value & ~valid_mask);
4446 	} else if (drm_property_type_is(property, DRM_MODE_PROP_BLOB)) {
4447 		/* Only the driver knows */
4448 		return true;
4449 	} else if (drm_property_type_is(property, DRM_MODE_PROP_OBJECT)) {
4450 		/* a zero value for an object property translates to null: */
4451 		if (value == 0)
4452 			return true;
4453 
4454 		/* handle refcnt'd objects specially: */
4455 		if (property->values[0] == DRM_MODE_OBJECT_FB) {
4456 			struct drm_framebuffer *fb;
4457 			fb = drm_framebuffer_lookup(property->dev, value);
4458 			if (fb) {
4459 				*ref = &fb->base;
4460 				return true;
4461 			} else {
4462 				return false;
4463 			}
4464 		} else {
4465 			return _object_find(property->dev, value, property->values[0]) != NULL;
4466 		}
4467 	}
4468 
4469 	for (i = 0; i < property->num_values; i++)
4470 		if (property->values[i] == value)
4471 			return true;
4472 	return false;
4473 }
4474 
4475 void drm_property_change_valid_put(struct drm_property *property,
4476 		struct drm_mode_object *ref)
4477 {
4478 	if (!ref)
4479 		return;
4480 
4481 	if (drm_property_type_is(property, DRM_MODE_PROP_OBJECT)) {
4482 		if (property->values[0] == DRM_MODE_OBJECT_FB)
4483 			drm_framebuffer_unreference(obj_to_fb(ref));
4484 	}
4485 }
4486 
4487 /**
4488  * drm_mode_connector_property_set_ioctl - set the current value of a connector property
4489  * @dev: DRM device
4490  * @data: ioctl data
4491  * @file_priv: DRM file info
4492  *
4493  * This function sets the current value for a connectors's property. It also
4494  * calls into a driver's ->set_property callback to update the hardware state
4495  *
4496  * Called by the user via ioctl.
4497  *
4498  * Returns:
4499  * Zero on success, negative errno on failure.
4500  */
4501 int drm_mode_connector_property_set_ioctl(struct drm_device *dev,
4502 				       void *data, struct drm_file *file_priv)
4503 {
4504 	struct drm_mode_connector_set_property *conn_set_prop = data;
4505 	struct drm_mode_obj_set_property obj_set_prop = {
4506 		.value = conn_set_prop->value,
4507 		.prop_id = conn_set_prop->prop_id,
4508 		.obj_id = conn_set_prop->connector_id,
4509 		.obj_type = DRM_MODE_OBJECT_CONNECTOR
4510 	};
4511 
4512 	/* It does all the locking and checking we need */
4513 	return drm_mode_obj_set_property_ioctl(dev, &obj_set_prop, file_priv);
4514 }
4515 
4516 static int drm_mode_connector_set_obj_prop(struct drm_mode_object *obj,
4517 					   struct drm_property *property,
4518 					   uint64_t value)
4519 {
4520 	int ret = -EINVAL;
4521 	struct drm_connector *connector = obj_to_connector(obj);
4522 
4523 	/* Do DPMS ourselves */
4524 	if (property == connector->dev->mode_config.dpms_property) {
4525 		if (connector->funcs->dpms)
4526 			(*connector->funcs->dpms)(connector, (int)value);
4527 		ret = 0;
4528 	} else if (connector->funcs->set_property)
4529 		ret = connector->funcs->set_property(connector, property, value);
4530 
4531 	/* store the property value if successful */
4532 	if (!ret)
4533 		drm_object_property_set_value(&connector->base, property, value);
4534 	return ret;
4535 }
4536 
4537 static int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
4538 				      struct drm_property *property,
4539 				      uint64_t value)
4540 {
4541 	int ret = -EINVAL;
4542 	struct drm_crtc *crtc = obj_to_crtc(obj);
4543 
4544 	if (crtc->funcs->set_property)
4545 		ret = crtc->funcs->set_property(crtc, property, value);
4546 	if (!ret)
4547 		drm_object_property_set_value(obj, property, value);
4548 
4549 	return ret;
4550 }
4551 
4552 /**
4553  * drm_mode_plane_set_obj_prop - set the value of a property
4554  * @plane: drm plane object to set property value for
4555  * @property: property to set
4556  * @value: value the property should be set to
4557  *
4558  * This functions sets a given property on a given plane object. This function
4559  * calls the driver's ->set_property callback and changes the software state of
4560  * the property if the callback succeeds.
4561  *
4562  * Returns:
4563  * Zero on success, error code on failure.
4564  */
4565 int drm_mode_plane_set_obj_prop(struct drm_plane *plane,
4566 				struct drm_property *property,
4567 				uint64_t value)
4568 {
4569 	int ret = -EINVAL;
4570 	struct drm_mode_object *obj = &plane->base;
4571 
4572 	if (plane->funcs->set_property)
4573 		ret = plane->funcs->set_property(plane, property, value);
4574 	if (!ret)
4575 		drm_object_property_set_value(obj, property, value);
4576 
4577 	return ret;
4578 }
4579 EXPORT_SYMBOL(drm_mode_plane_set_obj_prop);
4580 
4581 /**
4582  * drm_mode_obj_get_properties_ioctl - get the current value of a object's property
4583  * @dev: DRM device
4584  * @data: ioctl data
4585  * @file_priv: DRM file info
4586  *
4587  * This function retrieves the current value for an object's property. Compared
4588  * to the connector specific ioctl this one is extended to also work on crtc and
4589  * plane objects.
4590  *
4591  * Called by the user via ioctl.
4592  *
4593  * Returns:
4594  * Zero on success, negative errno on failure.
4595  */
4596 int drm_mode_obj_get_properties_ioctl(struct drm_device *dev, void *data,
4597 				      struct drm_file *file_priv)
4598 {
4599 	struct drm_mode_obj_get_properties *arg = data;
4600 	struct drm_mode_object *obj;
4601 	int ret = 0;
4602 
4603 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
4604 		return -EINVAL;
4605 
4606 	drm_modeset_lock_all(dev);
4607 
4608 	obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
4609 	if (!obj) {
4610 		ret = -ENOENT;
4611 		goto out;
4612 	}
4613 	if (!obj->properties) {
4614 		ret = -EINVAL;
4615 		goto out;
4616 	}
4617 
4618 	ret = get_properties(obj, file_priv->atomic,
4619 			(uint32_t __user *)(unsigned long)(arg->props_ptr),
4620 			(uint64_t __user *)(unsigned long)(arg->prop_values_ptr),
4621 			&arg->count_props);
4622 
4623 out:
4624 	drm_modeset_unlock_all(dev);
4625 	return ret;
4626 }
4627 
4628 /**
4629  * drm_mode_obj_set_property_ioctl - set the current value of an object's property
4630  * @dev: DRM device
4631  * @data: ioctl data
4632  * @file_priv: DRM file info
4633  *
4634  * This function sets the current value for an object's property. It also calls
4635  * into a driver's ->set_property callback to update the hardware state.
4636  * Compared to the connector specific ioctl this one is extended to also work on
4637  * crtc and plane objects.
4638  *
4639  * Called by the user via ioctl.
4640  *
4641  * Returns:
4642  * Zero on success, negative errno on failure.
4643  */
4644 int drm_mode_obj_set_property_ioctl(struct drm_device *dev, void *data,
4645 				    struct drm_file *file_priv)
4646 {
4647 	struct drm_mode_obj_set_property *arg = data;
4648 	struct drm_mode_object *arg_obj;
4649 	struct drm_mode_object *prop_obj;
4650 	struct drm_property *property;
4651 	int i, ret = -EINVAL;
4652 	struct drm_mode_object *ref;
4653 
4654 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
4655 		return -EINVAL;
4656 
4657 	drm_modeset_lock_all(dev);
4658 
4659 	arg_obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
4660 	if (!arg_obj) {
4661 		ret = -ENOENT;
4662 		goto out;
4663 	}
4664 	if (!arg_obj->properties)
4665 		goto out;
4666 
4667 	for (i = 0; i < arg_obj->properties->count; i++)
4668 		if (arg_obj->properties->properties[i]->base.id == arg->prop_id)
4669 			break;
4670 
4671 	if (i == arg_obj->properties->count)
4672 		goto out;
4673 
4674 	prop_obj = drm_mode_object_find(dev, arg->prop_id,
4675 					DRM_MODE_OBJECT_PROPERTY);
4676 	if (!prop_obj) {
4677 		ret = -ENOENT;
4678 		goto out;
4679 	}
4680 	property = obj_to_property(prop_obj);
4681 
4682 	if (!drm_property_change_valid_get(property, arg->value, &ref))
4683 		goto out;
4684 
4685 	switch (arg_obj->type) {
4686 	case DRM_MODE_OBJECT_CONNECTOR:
4687 		ret = drm_mode_connector_set_obj_prop(arg_obj, property,
4688 						      arg->value);
4689 		break;
4690 	case DRM_MODE_OBJECT_CRTC:
4691 		ret = drm_mode_crtc_set_obj_prop(arg_obj, property, arg->value);
4692 		break;
4693 	case DRM_MODE_OBJECT_PLANE:
4694 		ret = drm_mode_plane_set_obj_prop(obj_to_plane(arg_obj),
4695 						  property, arg->value);
4696 		break;
4697 	}
4698 
4699 	drm_property_change_valid_put(property, ref);
4700 
4701 out:
4702 	drm_modeset_unlock_all(dev);
4703 	return ret;
4704 }
4705 
4706 /**
4707  * drm_mode_connector_attach_encoder - attach a connector to an encoder
4708  * @connector: connector to attach
4709  * @encoder: encoder to attach @connector to
4710  *
4711  * This function links up a connector to an encoder. Note that the routing
4712  * restrictions between encoders and crtcs are exposed to userspace through the
4713  * possible_clones and possible_crtcs bitmasks.
4714  *
4715  * Returns:
4716  * Zero on success, negative errno on failure.
4717  */
4718 int drm_mode_connector_attach_encoder(struct drm_connector *connector,
4719 				      struct drm_encoder *encoder)
4720 {
4721 	int i;
4722 
4723 	for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
4724 		if (connector->encoder_ids[i] == 0) {
4725 			connector->encoder_ids[i] = encoder->base.id;
4726 			return 0;
4727 		}
4728 	}
4729 	return -ENOMEM;
4730 }
4731 EXPORT_SYMBOL(drm_mode_connector_attach_encoder);
4732 
4733 /**
4734  * drm_mode_crtc_set_gamma_size - set the gamma table size
4735  * @crtc: CRTC to set the gamma table size for
4736  * @gamma_size: size of the gamma table
4737  *
4738  * Drivers which support gamma tables should set this to the supported gamma
4739  * table size when initializing the CRTC. Currently the drm core only supports a
4740  * fixed gamma table size.
4741  *
4742  * Returns:
4743  * Zero on success, negative errno on failure.
4744  */
4745 int drm_mode_crtc_set_gamma_size(struct drm_crtc *crtc,
4746 				 int gamma_size)
4747 {
4748 	crtc->gamma_size = gamma_size;
4749 
4750 	crtc->gamma_store = kcalloc(gamma_size, sizeof(uint16_t) * 3,
4751 				    GFP_KERNEL);
4752 	if (!crtc->gamma_store) {
4753 		crtc->gamma_size = 0;
4754 		return -ENOMEM;
4755 	}
4756 
4757 	return 0;
4758 }
4759 EXPORT_SYMBOL(drm_mode_crtc_set_gamma_size);
4760 
4761 /**
4762  * drm_mode_gamma_set_ioctl - set the gamma table
4763  * @dev: DRM device
4764  * @data: ioctl data
4765  * @file_priv: DRM file info
4766  *
4767  * Set the gamma table of a CRTC to the one passed in by the user. Userspace can
4768  * inquire the required gamma table size through drm_mode_gamma_get_ioctl.
4769  *
4770  * Called by the user via ioctl.
4771  *
4772  * Returns:
4773  * Zero on success, negative errno on failure.
4774  */
4775 int drm_mode_gamma_set_ioctl(struct drm_device *dev,
4776 			     void *data, struct drm_file *file_priv)
4777 {
4778 	struct drm_mode_crtc_lut *crtc_lut = data;
4779 	struct drm_crtc *crtc;
4780 	void *r_base, *g_base, *b_base;
4781 	int size;
4782 	int ret = 0;
4783 
4784 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
4785 		return -EINVAL;
4786 
4787 	drm_modeset_lock_all(dev);
4788 	crtc = drm_crtc_find(dev, crtc_lut->crtc_id);
4789 	if (!crtc) {
4790 		ret = -ENOENT;
4791 		goto out;
4792 	}
4793 
4794 	if (crtc->funcs->gamma_set == NULL) {
4795 		ret = -ENOSYS;
4796 		goto out;
4797 	}
4798 
4799 	/* memcpy into gamma store */
4800 	if (crtc_lut->gamma_size != crtc->gamma_size) {
4801 		ret = -EINVAL;
4802 		goto out;
4803 	}
4804 
4805 	size = crtc_lut->gamma_size * (sizeof(uint16_t));
4806 	r_base = crtc->gamma_store;
4807 	if (copy_from_user(r_base, (void __user *)(unsigned long)crtc_lut->red, size)) {
4808 		ret = -EFAULT;
4809 		goto out;
4810 	}
4811 
4812 	g_base = r_base + size;
4813 	if (copy_from_user(g_base, (void __user *)(unsigned long)crtc_lut->green, size)) {
4814 		ret = -EFAULT;
4815 		goto out;
4816 	}
4817 
4818 	b_base = g_base + size;
4819 	if (copy_from_user(b_base, (void __user *)(unsigned long)crtc_lut->blue, size)) {
4820 		ret = -EFAULT;
4821 		goto out;
4822 	}
4823 
4824 	crtc->funcs->gamma_set(crtc, r_base, g_base, b_base, 0, crtc->gamma_size);
4825 
4826 out:
4827 	drm_modeset_unlock_all(dev);
4828 	return ret;
4829 
4830 }
4831 
4832 /**
4833  * drm_mode_gamma_get_ioctl - get the gamma table
4834  * @dev: DRM device
4835  * @data: ioctl data
4836  * @file_priv: DRM file info
4837  *
4838  * Copy the current gamma table into the storage provided. This also provides
4839  * the gamma table size the driver expects, which can be used to size the
4840  * allocated storage.
4841  *
4842  * Called by the user via ioctl.
4843  *
4844  * Returns:
4845  * Zero on success, negative errno on failure.
4846  */
4847 int drm_mode_gamma_get_ioctl(struct drm_device *dev,
4848 			     void *data, struct drm_file *file_priv)
4849 {
4850 	struct drm_mode_crtc_lut *crtc_lut = data;
4851 	struct drm_crtc *crtc;
4852 	void *r_base, *g_base, *b_base;
4853 	int size;
4854 	int ret = 0;
4855 
4856 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
4857 		return -EINVAL;
4858 
4859 	drm_modeset_lock_all(dev);
4860 	crtc = drm_crtc_find(dev, crtc_lut->crtc_id);
4861 	if (!crtc) {
4862 		ret = -ENOENT;
4863 		goto out;
4864 	}
4865 
4866 	/* memcpy into gamma store */
4867 	if (crtc_lut->gamma_size != crtc->gamma_size) {
4868 		ret = -EINVAL;
4869 		goto out;
4870 	}
4871 
4872 	size = crtc_lut->gamma_size * (sizeof(uint16_t));
4873 	r_base = crtc->gamma_store;
4874 	if (copy_to_user((void __user *)(unsigned long)crtc_lut->red, r_base, size)) {
4875 		ret = -EFAULT;
4876 		goto out;
4877 	}
4878 
4879 	g_base = r_base + size;
4880 	if (copy_to_user((void __user *)(unsigned long)crtc_lut->green, g_base, size)) {
4881 		ret = -EFAULT;
4882 		goto out;
4883 	}
4884 
4885 	b_base = g_base + size;
4886 	if (copy_to_user((void __user *)(unsigned long)crtc_lut->blue, b_base, size)) {
4887 		ret = -EFAULT;
4888 		goto out;
4889 	}
4890 out:
4891 	drm_modeset_unlock_all(dev);
4892 	return ret;
4893 }
4894 
4895 /**
4896  * drm_mode_page_flip_ioctl - schedule an asynchronous fb update
4897  * @dev: DRM device
4898  * @data: ioctl data
4899  * @file_priv: DRM file info
4900  *
4901  * This schedules an asynchronous update on a given CRTC, called page flip.
4902  * Optionally a drm event is generated to signal the completion of the event.
4903  * Generic drivers cannot assume that a pageflip with changed framebuffer
4904  * properties (including driver specific metadata like tiling layout) will work,
4905  * but some drivers support e.g. pixel format changes through the pageflip
4906  * ioctl.
4907  *
4908  * Called by the user via ioctl.
4909  *
4910  * Returns:
4911  * Zero on success, negative errno on failure.
4912  */
4913 int drm_mode_page_flip_ioctl(struct drm_device *dev,
4914 			     void *data, struct drm_file *file_priv)
4915 {
4916 	struct drm_mode_crtc_page_flip *page_flip = data;
4917 	struct drm_crtc *crtc;
4918 	struct drm_framebuffer *fb = NULL;
4919 	struct drm_pending_vblank_event *e = NULL;
4920 	unsigned long flags;
4921 	int ret = -EINVAL;
4922 
4923 	if (page_flip->flags & ~DRM_MODE_PAGE_FLIP_FLAGS ||
4924 	    page_flip->reserved != 0)
4925 		return -EINVAL;
4926 
4927 	if ((page_flip->flags & DRM_MODE_PAGE_FLIP_ASYNC) && !dev->mode_config.async_page_flip)
4928 		return -EINVAL;
4929 
4930 	crtc = drm_crtc_find(dev, page_flip->crtc_id);
4931 	if (!crtc)
4932 		return -ENOENT;
4933 
4934 	drm_modeset_lock_crtc(crtc, crtc->primary);
4935 	if (crtc->primary->fb == NULL) {
4936 		/* The framebuffer is currently unbound, presumably
4937 		 * due to a hotplug event, that userspace has not
4938 		 * yet discovered.
4939 		 */
4940 		ret = -EBUSY;
4941 		goto out;
4942 	}
4943 
4944 	if (crtc->funcs->page_flip == NULL)
4945 		goto out;
4946 
4947 	fb = drm_framebuffer_lookup(dev, page_flip->fb_id);
4948 	if (!fb) {
4949 		ret = -ENOENT;
4950 		goto out;
4951 	}
4952 
4953 	ret = drm_crtc_check_viewport(crtc, crtc->x, crtc->y, &crtc->mode, fb);
4954 	if (ret)
4955 		goto out;
4956 
4957 	if (crtc->primary->fb->pixel_format != fb->pixel_format) {
4958 		DRM_DEBUG_KMS("Page flip is not allowed to change frame buffer format.\n");
4959 		ret = -EINVAL;
4960 		goto out;
4961 	}
4962 
4963 	if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
4964 		ret = -ENOMEM;
4965 		spin_lock_irqsave(&dev->event_lock, flags);
4966 		if (file_priv->event_space < sizeof(e->event)) {
4967 			spin_unlock_irqrestore(&dev->event_lock, flags);
4968 			goto out;
4969 		}
4970 		file_priv->event_space -= sizeof(e->event);
4971 		spin_unlock_irqrestore(&dev->event_lock, flags);
4972 
4973 		e = kzalloc(sizeof(*e), GFP_KERNEL);
4974 		if (e == NULL) {
4975 			spin_lock_irqsave(&dev->event_lock, flags);
4976 			file_priv->event_space += sizeof(e->event);
4977 			spin_unlock_irqrestore(&dev->event_lock, flags);
4978 			goto out;
4979 		}
4980 
4981 		e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
4982 		e->event.base.length = sizeof(e->event);
4983 		e->event.user_data = page_flip->user_data;
4984 		e->base.event = &e->event.base;
4985 		e->base.file_priv = file_priv;
4986 		e->base.destroy =
4987 			(void (*) (struct drm_pending_event *)) kfree;
4988 	}
4989 
4990 	crtc->primary->old_fb = crtc->primary->fb;
4991 	ret = crtc->funcs->page_flip(crtc, fb, e, page_flip->flags);
4992 	if (ret) {
4993 		if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
4994 			spin_lock_irqsave(&dev->event_lock, flags);
4995 			file_priv->event_space += sizeof(e->event);
4996 			spin_unlock_irqrestore(&dev->event_lock, flags);
4997 			kfree(e);
4998 		}
4999 		/* Keep the old fb, don't unref it. */
5000 		crtc->primary->old_fb = NULL;
5001 	} else {
5002 		/*
5003 		 * Warn if the driver hasn't properly updated the crtc->fb
5004 		 * field to reflect that the new framebuffer is now used.
5005 		 * Failing to do so will screw with the reference counting
5006 		 * on framebuffers.
5007 		 */
5008 		WARN_ON(crtc->primary->fb != fb);
5009 		/* Unref only the old framebuffer. */
5010 		fb = NULL;
5011 	}
5012 
5013 out:
5014 	if (fb)
5015 		drm_framebuffer_unreference(fb);
5016 	if (crtc->primary->old_fb)
5017 		drm_framebuffer_unreference(crtc->primary->old_fb);
5018 	crtc->primary->old_fb = NULL;
5019 	drm_modeset_unlock_crtc(crtc);
5020 
5021 	return ret;
5022 }
5023 
5024 /**
5025  * drm_mode_config_reset - call ->reset callbacks
5026  * @dev: drm device
5027  *
5028  * This functions calls all the crtc's, encoder's and connector's ->reset
5029  * callback. Drivers can use this in e.g. their driver load or resume code to
5030  * reset hardware and software state.
5031  */
5032 void drm_mode_config_reset(struct drm_device *dev)
5033 {
5034 	struct drm_crtc *crtc;
5035 	struct drm_plane *plane;
5036 	struct drm_encoder *encoder;
5037 	struct drm_connector *connector;
5038 
5039 	list_for_each_entry(plane, &dev->mode_config.plane_list, head)
5040 		if (plane->funcs->reset)
5041 			plane->funcs->reset(plane);
5042 
5043 	list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
5044 		if (crtc->funcs->reset)
5045 			crtc->funcs->reset(crtc);
5046 
5047 	list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
5048 		if (encoder->funcs->reset)
5049 			encoder->funcs->reset(encoder);
5050 
5051 	list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
5052 		connector->status = connector_status_unknown;
5053 
5054 		if (connector->funcs->reset)
5055 			connector->funcs->reset(connector);
5056 	}
5057 }
5058 EXPORT_SYMBOL(drm_mode_config_reset);
5059 
5060 /**
5061  * drm_mode_create_dumb_ioctl - create a dumb backing storage buffer
5062  * @dev: DRM device
5063  * @data: ioctl data
5064  * @file_priv: DRM file info
5065  *
5066  * This creates a new dumb buffer in the driver's backing storage manager (GEM,
5067  * TTM or something else entirely) and returns the resulting buffer handle. This
5068  * handle can then be wrapped up into a framebuffer modeset object.
5069  *
5070  * Note that userspace is not allowed to use such objects for render
5071  * acceleration - drivers must create their own private ioctls for such a use
5072  * case.
5073  *
5074  * Called by the user via ioctl.
5075  *
5076  * Returns:
5077  * Zero on success, negative errno on failure.
5078  */
5079 int drm_mode_create_dumb_ioctl(struct drm_device *dev,
5080 			       void *data, struct drm_file *file_priv)
5081 {
5082 	struct drm_mode_create_dumb *args = data;
5083 	u32 cpp, stride, size;
5084 
5085 	if (!dev->driver->dumb_create)
5086 		return -ENOSYS;
5087 	if (!args->width || !args->height || !args->bpp)
5088 		return -EINVAL;
5089 
5090 	/* overflow checks for 32bit size calculations */
5091 	/* NOTE: DIV_ROUND_UP() can overflow */
5092 	cpp = DIV_ROUND_UP(args->bpp, 8);
5093 	if (!cpp || cpp > 0xffffffffU / args->width)
5094 		return -EINVAL;
5095 	stride = cpp * args->width;
5096 	if (args->height > 0xffffffffU / stride)
5097 		return -EINVAL;
5098 
5099 	/* test for wrap-around */
5100 	size = args->height * stride;
5101 	if (PAGE_ALIGN(size) == 0)
5102 		return -EINVAL;
5103 
5104 	/*
5105 	 * handle, pitch and size are output parameters. Zero them out to
5106 	 * prevent drivers from accidentally using uninitialized data. Since
5107 	 * not all existing userspace is clearing these fields properly we
5108 	 * cannot reject IOCTL with garbage in them.
5109 	 */
5110 	args->handle = 0;
5111 	args->pitch = 0;
5112 	args->size = 0;
5113 
5114 	return dev->driver->dumb_create(file_priv, dev, args);
5115 }
5116 
5117 /**
5118  * drm_mode_mmap_dumb_ioctl - create an mmap offset for a dumb backing storage buffer
5119  * @dev: DRM device
5120  * @data: ioctl data
5121  * @file_priv: DRM file info
5122  *
5123  * Allocate an offset in the drm device node's address space to be able to
5124  * memory map a dumb buffer.
5125  *
5126  * Called by the user via ioctl.
5127  *
5128  * Returns:
5129  * Zero on success, negative errno on failure.
5130  */
5131 int drm_mode_mmap_dumb_ioctl(struct drm_device *dev,
5132 			     void *data, struct drm_file *file_priv)
5133 {
5134 	struct drm_mode_map_dumb *args = data;
5135 
5136 	/* call driver ioctl to get mmap offset */
5137 	if (!dev->driver->dumb_map_offset)
5138 		return -ENOSYS;
5139 
5140 	return dev->driver->dumb_map_offset(file_priv, dev, args->handle, &args->offset);
5141 }
5142 
5143 /**
5144  * drm_mode_destroy_dumb_ioctl - destroy a dumb backing strage buffer
5145  * @dev: DRM device
5146  * @data: ioctl data
5147  * @file_priv: DRM file info
5148  *
5149  * This destroys the userspace handle for the given dumb backing storage buffer.
5150  * Since buffer objects must be reference counted in the kernel a buffer object
5151  * won't be immediately freed if a framebuffer modeset object still uses it.
5152  *
5153  * Called by the user via ioctl.
5154  *
5155  * Returns:
5156  * Zero on success, negative errno on failure.
5157  */
5158 int drm_mode_destroy_dumb_ioctl(struct drm_device *dev,
5159 				void *data, struct drm_file *file_priv)
5160 {
5161 	struct drm_mode_destroy_dumb *args = data;
5162 
5163 	if (!dev->driver->dumb_destroy)
5164 		return -ENOSYS;
5165 
5166 	return dev->driver->dumb_destroy(file_priv, dev, args->handle);
5167 }
5168 
5169 /**
5170  * drm_fb_get_bpp_depth - get the bpp/depth values for format
5171  * @format: pixel format (DRM_FORMAT_*)
5172  * @depth: storage for the depth value
5173  * @bpp: storage for the bpp value
5174  *
5175  * This only supports RGB formats here for compat with code that doesn't use
5176  * pixel formats directly yet.
5177  */
5178 void drm_fb_get_bpp_depth(uint32_t format, unsigned int *depth,
5179 			  int *bpp)
5180 {
5181 	switch (format) {
5182 	case DRM_FORMAT_C8:
5183 	case DRM_FORMAT_RGB332:
5184 	case DRM_FORMAT_BGR233:
5185 		*depth = 8;
5186 		*bpp = 8;
5187 		break;
5188 	case DRM_FORMAT_XRGB1555:
5189 	case DRM_FORMAT_XBGR1555:
5190 	case DRM_FORMAT_RGBX5551:
5191 	case DRM_FORMAT_BGRX5551:
5192 	case DRM_FORMAT_ARGB1555:
5193 	case DRM_FORMAT_ABGR1555:
5194 	case DRM_FORMAT_RGBA5551:
5195 	case DRM_FORMAT_BGRA5551:
5196 		*depth = 15;
5197 		*bpp = 16;
5198 		break;
5199 	case DRM_FORMAT_RGB565:
5200 	case DRM_FORMAT_BGR565:
5201 		*depth = 16;
5202 		*bpp = 16;
5203 		break;
5204 	case DRM_FORMAT_RGB888:
5205 	case DRM_FORMAT_BGR888:
5206 		*depth = 24;
5207 		*bpp = 24;
5208 		break;
5209 	case DRM_FORMAT_XRGB8888:
5210 	case DRM_FORMAT_XBGR8888:
5211 	case DRM_FORMAT_RGBX8888:
5212 	case DRM_FORMAT_BGRX8888:
5213 		*depth = 24;
5214 		*bpp = 32;
5215 		break;
5216 	case DRM_FORMAT_XRGB2101010:
5217 	case DRM_FORMAT_XBGR2101010:
5218 	case DRM_FORMAT_RGBX1010102:
5219 	case DRM_FORMAT_BGRX1010102:
5220 	case DRM_FORMAT_ARGB2101010:
5221 	case DRM_FORMAT_ABGR2101010:
5222 	case DRM_FORMAT_RGBA1010102:
5223 	case DRM_FORMAT_BGRA1010102:
5224 		*depth = 30;
5225 		*bpp = 32;
5226 		break;
5227 	case DRM_FORMAT_ARGB8888:
5228 	case DRM_FORMAT_ABGR8888:
5229 	case DRM_FORMAT_RGBA8888:
5230 	case DRM_FORMAT_BGRA8888:
5231 		*depth = 32;
5232 		*bpp = 32;
5233 		break;
5234 	default:
5235 		DRM_DEBUG_KMS("unsupported pixel format %s\n",
5236 			      drm_get_format_name(format));
5237 		*depth = 0;
5238 		*bpp = 0;
5239 		break;
5240 	}
5241 }
5242 EXPORT_SYMBOL(drm_fb_get_bpp_depth);
5243 
5244 /**
5245  * drm_format_num_planes - get the number of planes for format
5246  * @format: pixel format (DRM_FORMAT_*)
5247  *
5248  * Returns:
5249  * The number of planes used by the specified pixel format.
5250  */
5251 int drm_format_num_planes(uint32_t format)
5252 {
5253 	switch (format) {
5254 	case DRM_FORMAT_YUV410:
5255 	case DRM_FORMAT_YVU410:
5256 	case DRM_FORMAT_YUV411:
5257 	case DRM_FORMAT_YVU411:
5258 	case DRM_FORMAT_YUV420:
5259 	case DRM_FORMAT_YVU420:
5260 	case DRM_FORMAT_YUV422:
5261 	case DRM_FORMAT_YVU422:
5262 	case DRM_FORMAT_YUV444:
5263 	case DRM_FORMAT_YVU444:
5264 		return 3;
5265 	case DRM_FORMAT_NV12:
5266 	case DRM_FORMAT_NV21:
5267 	case DRM_FORMAT_NV16:
5268 	case DRM_FORMAT_NV61:
5269 	case DRM_FORMAT_NV24:
5270 	case DRM_FORMAT_NV42:
5271 		return 2;
5272 	default:
5273 		return 1;
5274 	}
5275 }
5276 EXPORT_SYMBOL(drm_format_num_planes);
5277 
5278 /**
5279  * drm_format_plane_cpp - determine the bytes per pixel value
5280  * @format: pixel format (DRM_FORMAT_*)
5281  * @plane: plane index
5282  *
5283  * Returns:
5284  * The bytes per pixel value for the specified plane.
5285  */
5286 int drm_format_plane_cpp(uint32_t format, int plane)
5287 {
5288 	unsigned int depth;
5289 	int bpp;
5290 
5291 	if (plane >= drm_format_num_planes(format))
5292 		return 0;
5293 
5294 	switch (format) {
5295 	case DRM_FORMAT_YUYV:
5296 	case DRM_FORMAT_YVYU:
5297 	case DRM_FORMAT_UYVY:
5298 	case DRM_FORMAT_VYUY:
5299 		return 2;
5300 	case DRM_FORMAT_NV12:
5301 	case DRM_FORMAT_NV21:
5302 	case DRM_FORMAT_NV16:
5303 	case DRM_FORMAT_NV61:
5304 	case DRM_FORMAT_NV24:
5305 	case DRM_FORMAT_NV42:
5306 		return plane ? 2 : 1;
5307 	case DRM_FORMAT_YUV410:
5308 	case DRM_FORMAT_YVU410:
5309 	case DRM_FORMAT_YUV411:
5310 	case DRM_FORMAT_YVU411:
5311 	case DRM_FORMAT_YUV420:
5312 	case DRM_FORMAT_YVU420:
5313 	case DRM_FORMAT_YUV422:
5314 	case DRM_FORMAT_YVU422:
5315 	case DRM_FORMAT_YUV444:
5316 	case DRM_FORMAT_YVU444:
5317 		return 1;
5318 	default:
5319 		drm_fb_get_bpp_depth(format, &depth, &bpp);
5320 		return bpp >> 3;
5321 	}
5322 }
5323 EXPORT_SYMBOL(drm_format_plane_cpp);
5324 
5325 /**
5326  * drm_format_horz_chroma_subsampling - get the horizontal chroma subsampling factor
5327  * @format: pixel format (DRM_FORMAT_*)
5328  *
5329  * Returns:
5330  * The horizontal chroma subsampling factor for the
5331  * specified pixel format.
5332  */
5333 int drm_format_horz_chroma_subsampling(uint32_t format)
5334 {
5335 	switch (format) {
5336 	case DRM_FORMAT_YUV411:
5337 	case DRM_FORMAT_YVU411:
5338 	case DRM_FORMAT_YUV410:
5339 	case DRM_FORMAT_YVU410:
5340 		return 4;
5341 	case DRM_FORMAT_YUYV:
5342 	case DRM_FORMAT_YVYU:
5343 	case DRM_FORMAT_UYVY:
5344 	case DRM_FORMAT_VYUY:
5345 	case DRM_FORMAT_NV12:
5346 	case DRM_FORMAT_NV21:
5347 	case DRM_FORMAT_NV16:
5348 	case DRM_FORMAT_NV61:
5349 	case DRM_FORMAT_YUV422:
5350 	case DRM_FORMAT_YVU422:
5351 	case DRM_FORMAT_YUV420:
5352 	case DRM_FORMAT_YVU420:
5353 		return 2;
5354 	default:
5355 		return 1;
5356 	}
5357 }
5358 EXPORT_SYMBOL(drm_format_horz_chroma_subsampling);
5359 
5360 /**
5361  * drm_format_vert_chroma_subsampling - get the vertical chroma subsampling factor
5362  * @format: pixel format (DRM_FORMAT_*)
5363  *
5364  * Returns:
5365  * The vertical chroma subsampling factor for the
5366  * specified pixel format.
5367  */
5368 int drm_format_vert_chroma_subsampling(uint32_t format)
5369 {
5370 	switch (format) {
5371 	case DRM_FORMAT_YUV410:
5372 	case DRM_FORMAT_YVU410:
5373 		return 4;
5374 	case DRM_FORMAT_YUV420:
5375 	case DRM_FORMAT_YVU420:
5376 	case DRM_FORMAT_NV12:
5377 	case DRM_FORMAT_NV21:
5378 		return 2;
5379 	default:
5380 		return 1;
5381 	}
5382 }
5383 EXPORT_SYMBOL(drm_format_vert_chroma_subsampling);
5384 
5385 /**
5386  * drm_rotation_simplify() - Try to simplify the rotation
5387  * @rotation: Rotation to be simplified
5388  * @supported_rotations: Supported rotations
5389  *
5390  * Attempt to simplify the rotation to a form that is supported.
5391  * Eg. if the hardware supports everything except DRM_REFLECT_X
5392  * one could call this function like this:
5393  *
5394  * drm_rotation_simplify(rotation, BIT(DRM_ROTATE_0) |
5395  *                       BIT(DRM_ROTATE_90) | BIT(DRM_ROTATE_180) |
5396  *                       BIT(DRM_ROTATE_270) | BIT(DRM_REFLECT_Y));
5397  *
5398  * to eliminate the DRM_ROTATE_X flag. Depending on what kind of
5399  * transforms the hardware supports, this function may not
5400  * be able to produce a supported transform, so the caller should
5401  * check the result afterwards.
5402  */
5403 unsigned int drm_rotation_simplify(unsigned int rotation,
5404 				   unsigned int supported_rotations)
5405 {
5406 	if (rotation & ~supported_rotations) {
5407 		rotation ^= BIT(DRM_REFLECT_X) | BIT(DRM_REFLECT_Y);
5408 		rotation = (rotation & ~0xf) | BIT((ffs(rotation & 0xf) + 1) % 4);
5409 	}
5410 
5411 	return rotation;
5412 }
5413 EXPORT_SYMBOL(drm_rotation_simplify);
5414 
5415 /**
5416  * drm_mode_config_init - initialize DRM mode_configuration structure
5417  * @dev: DRM device
5418  *
5419  * Initialize @dev's mode_config structure, used for tracking the graphics
5420  * configuration of @dev.
5421  *
5422  * Since this initializes the modeset locks, no locking is possible. Which is no
5423  * problem, since this should happen single threaded at init time. It is the
5424  * driver's problem to ensure this guarantee.
5425  *
5426  */
5427 void drm_mode_config_init(struct drm_device *dev)
5428 {
5429 	mutex_init(&dev->mode_config.mutex);
5430 	drm_modeset_lock_init(&dev->mode_config.connection_mutex);
5431 	mutex_init(&dev->mode_config.idr_mutex);
5432 	mutex_init(&dev->mode_config.fb_lock);
5433 	INIT_LIST_HEAD(&dev->mode_config.fb_list);
5434 	INIT_LIST_HEAD(&dev->mode_config.crtc_list);
5435 	INIT_LIST_HEAD(&dev->mode_config.connector_list);
5436 	INIT_LIST_HEAD(&dev->mode_config.encoder_list);
5437 	INIT_LIST_HEAD(&dev->mode_config.property_list);
5438 	INIT_LIST_HEAD(&dev->mode_config.property_blob_list);
5439 	INIT_LIST_HEAD(&dev->mode_config.plane_list);
5440 	idr_init(&dev->mode_config.crtc_idr);
5441 	idr_init(&dev->mode_config.tile_idr);
5442 
5443 	drm_modeset_lock_all(dev);
5444 	drm_mode_create_standard_properties(dev);
5445 	drm_modeset_unlock_all(dev);
5446 
5447 	/* Just to be sure */
5448 	dev->mode_config.num_fb = 0;
5449 	dev->mode_config.num_connector = 0;
5450 	dev->mode_config.num_crtc = 0;
5451 	dev->mode_config.num_encoder = 0;
5452 	dev->mode_config.num_overlay_plane = 0;
5453 	dev->mode_config.num_total_plane = 0;
5454 }
5455 EXPORT_SYMBOL(drm_mode_config_init);
5456 
5457 /**
5458  * drm_mode_config_cleanup - free up DRM mode_config info
5459  * @dev: DRM device
5460  *
5461  * Free up all the connectors and CRTCs associated with this DRM device, then
5462  * free up the framebuffers and associated buffer objects.
5463  *
5464  * Note that since this /should/ happen single-threaded at driver/device
5465  * teardown time, no locking is required. It's the driver's job to ensure that
5466  * this guarantee actually holds true.
5467  *
5468  * FIXME: cleanup any dangling user buffer objects too
5469  */
5470 void drm_mode_config_cleanup(struct drm_device *dev)
5471 {
5472 	struct drm_connector *connector, *ot;
5473 	struct drm_crtc *crtc, *ct;
5474 	struct drm_encoder *encoder, *enct;
5475 	struct drm_framebuffer *fb, *fbt;
5476 	struct drm_property *property, *pt;
5477 	struct drm_property_blob *blob, *bt;
5478 	struct drm_plane *plane, *plt;
5479 
5480 	list_for_each_entry_safe(encoder, enct, &dev->mode_config.encoder_list,
5481 				 head) {
5482 		encoder->funcs->destroy(encoder);
5483 	}
5484 
5485 	list_for_each_entry_safe(connector, ot,
5486 				 &dev->mode_config.connector_list, head) {
5487 		connector->funcs->destroy(connector);
5488 	}
5489 
5490 	list_for_each_entry_safe(property, pt, &dev->mode_config.property_list,
5491 				 head) {
5492 		drm_property_destroy(dev, property);
5493 	}
5494 
5495 	list_for_each_entry_safe(blob, bt, &dev->mode_config.property_blob_list,
5496 				 head) {
5497 		drm_property_destroy_blob(dev, blob);
5498 	}
5499 
5500 	/*
5501 	 * Single-threaded teardown context, so it's not required to grab the
5502 	 * fb_lock to protect against concurrent fb_list access. Contrary, it
5503 	 * would actually deadlock with the drm_framebuffer_cleanup function.
5504 	 *
5505 	 * Also, if there are any framebuffers left, that's a driver leak now,
5506 	 * so politely WARN about this.
5507 	 */
5508 	WARN_ON(!list_empty(&dev->mode_config.fb_list));
5509 	list_for_each_entry_safe(fb, fbt, &dev->mode_config.fb_list, head) {
5510 		drm_framebuffer_remove(fb);
5511 	}
5512 
5513 	list_for_each_entry_safe(plane, plt, &dev->mode_config.plane_list,
5514 				 head) {
5515 		plane->funcs->destroy(plane);
5516 	}
5517 
5518 	list_for_each_entry_safe(crtc, ct, &dev->mode_config.crtc_list, head) {
5519 		crtc->funcs->destroy(crtc);
5520 	}
5521 
5522 	idr_destroy(&dev->mode_config.tile_idr);
5523 	idr_destroy(&dev->mode_config.crtc_idr);
5524 	drm_modeset_lock_fini(&dev->mode_config.connection_mutex);
5525 }
5526 EXPORT_SYMBOL(drm_mode_config_cleanup);
5527 
5528 struct drm_property *drm_mode_create_rotation_property(struct drm_device *dev,
5529 						       unsigned int supported_rotations)
5530 {
5531 	static const struct drm_prop_enum_list props[] = {
5532 		{ DRM_ROTATE_0,   "rotate-0" },
5533 		{ DRM_ROTATE_90,  "rotate-90" },
5534 		{ DRM_ROTATE_180, "rotate-180" },
5535 		{ DRM_ROTATE_270, "rotate-270" },
5536 		{ DRM_REFLECT_X,  "reflect-x" },
5537 		{ DRM_REFLECT_Y,  "reflect-y" },
5538 	};
5539 
5540 	return drm_property_create_bitmask(dev, 0, "rotation",
5541 					   props, ARRAY_SIZE(props),
5542 					   supported_rotations);
5543 }
5544 EXPORT_SYMBOL(drm_mode_create_rotation_property);
5545 
5546 /**
5547  * DOC: Tile group
5548  *
5549  * Tile groups are used to represent tiled monitors with a unique
5550  * integer identifier. Tiled monitors using DisplayID v1.3 have
5551  * a unique 8-byte handle, we store this in a tile group, so we
5552  * have a common identifier for all tiles in a monitor group.
5553  */
5554 static void drm_tile_group_free(struct kref *kref)
5555 {
5556 	struct drm_tile_group *tg = container_of(kref, struct drm_tile_group, refcount);
5557 	struct drm_device *dev = tg->dev;
5558 	mutex_lock(&dev->mode_config.idr_mutex);
5559 	idr_remove(&dev->mode_config.tile_idr, tg->id);
5560 	mutex_unlock(&dev->mode_config.idr_mutex);
5561 	kfree(tg);
5562 }
5563 
5564 /**
5565  * drm_mode_put_tile_group - drop a reference to a tile group.
5566  * @dev: DRM device
5567  * @tg: tile group to drop reference to.
5568  *
5569  * drop reference to tile group and free if 0.
5570  */
5571 void drm_mode_put_tile_group(struct drm_device *dev,
5572 			     struct drm_tile_group *tg)
5573 {
5574 	kref_put(&tg->refcount, drm_tile_group_free);
5575 }
5576 
5577 /**
5578  * drm_mode_get_tile_group - get a reference to an existing tile group
5579  * @dev: DRM device
5580  * @topology: 8-bytes unique per monitor.
5581  *
5582  * Use the unique bytes to get a reference to an existing tile group.
5583  *
5584  * RETURNS:
5585  * tile group or NULL if not found.
5586  */
5587 struct drm_tile_group *drm_mode_get_tile_group(struct drm_device *dev,
5588 					       char topology[8])
5589 {
5590 	struct drm_tile_group *tg;
5591 	int id;
5592 	mutex_lock(&dev->mode_config.idr_mutex);
5593 	idr_for_each_entry(&dev->mode_config.tile_idr, tg, id) {
5594 		if (!memcmp(tg->group_data, topology, 8)) {
5595 			if (!kref_get_unless_zero(&tg->refcount))
5596 				tg = NULL;
5597 			mutex_unlock(&dev->mode_config.idr_mutex);
5598 			return tg;
5599 		}
5600 	}
5601 	mutex_unlock(&dev->mode_config.idr_mutex);
5602 	return NULL;
5603 }
5604 EXPORT_SYMBOL(drm_mode_get_tile_group);
5605 
5606 /**
5607  * drm_mode_create_tile_group - create a tile group from a displayid description
5608  * @dev: DRM device
5609  * @topology: 8-bytes unique per monitor.
5610  *
5611  * Create a tile group for the unique monitor, and get a unique
5612  * identifier for the tile group.
5613  *
5614  * RETURNS:
5615  * new tile group or error.
5616  */
5617 struct drm_tile_group *drm_mode_create_tile_group(struct drm_device *dev,
5618 						  char topology[8])
5619 {
5620 	struct drm_tile_group *tg;
5621 	int ret;
5622 
5623 	tg = kzalloc(sizeof(*tg), GFP_KERNEL);
5624 	if (!tg)
5625 		return ERR_PTR(-ENOMEM);
5626 
5627 	kref_init(&tg->refcount);
5628 	memcpy(tg->group_data, topology, 8);
5629 	tg->dev = dev;
5630 
5631 	mutex_lock(&dev->mode_config.idr_mutex);
5632 	ret = idr_alloc(&dev->mode_config.tile_idr, tg, 1, 0, GFP_KERNEL);
5633 	if (ret >= 0) {
5634 		tg->id = ret;
5635 	} else {
5636 		kfree(tg);
5637 		tg = ERR_PTR(ret);
5638 	}
5639 
5640 	mutex_unlock(&dev->mode_config.idr_mutex);
5641 	return tg;
5642 }
5643 EXPORT_SYMBOL(drm_mode_create_tile_group);
5644