xref: /openbmc/linux/drivers/gpu/drm/drm_crtc.c (revision fca3aa16)
1 /*
2  * Copyright (c) 2006-2008 Intel Corporation
3  * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
4  * Copyright (c) 2008 Red Hat Inc.
5  *
6  * DRM core CRTC related functions
7  *
8  * Permission to use, copy, modify, distribute, and sell this software and its
9  * documentation for any purpose is hereby granted without fee, provided that
10  * the above copyright notice appear in all copies and that both that copyright
11  * notice and this permission notice appear in supporting documentation, and
12  * that the name of the copyright holders not be used in advertising or
13  * publicity pertaining to distribution of the software without specific,
14  * written prior permission.  The copyright holders make no representations
15  * about the suitability of this software for any purpose.  It is provided "as
16  * is" without express or implied warranty.
17  *
18  * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
19  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
20  * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
21  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
22  * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
23  * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
24  * OF THIS SOFTWARE.
25  *
26  * Authors:
27  *      Keith Packard
28  *	Eric Anholt <eric@anholt.net>
29  *      Dave Airlie <airlied@linux.ie>
30  *      Jesse Barnes <jesse.barnes@intel.com>
31  */
32 #include <linux/ctype.h>
33 #include <linux/list.h>
34 #include <linux/slab.h>
35 #include <linux/export.h>
36 #include <linux/dma-fence.h>
37 #include <drm/drmP.h>
38 #include <drm/drm_crtc.h>
39 #include <drm/drm_edid.h>
40 #include <drm/drm_fourcc.h>
41 #include <drm/drm_modeset_lock.h>
42 #include <drm/drm_atomic.h>
43 #include <drm/drm_auth.h>
44 #include <drm/drm_debugfs_crc.h>
45 
46 #include "drm_crtc_internal.h"
47 #include "drm_internal.h"
48 
49 /**
50  * DOC: overview
51  *
52  * A CRTC represents the overall display pipeline. It receives pixel data from
53  * &drm_plane and blends them together. The &drm_display_mode is also attached
54  * to the CRTC, specifying display timings. On the output side the data is fed
55  * to one or more &drm_encoder, which are then each connected to one
56  * &drm_connector.
57  *
58  * To create a CRTC, a KMS drivers allocates and zeroes an instances of
59  * &struct drm_crtc (possibly as part of a larger structure) and registers it
60  * with a call to drm_crtc_init_with_planes().
61  *
62  * The CRTC is also the entry point for legacy modeset operations, see
63  * &drm_crtc_funcs.set_config, legacy plane operations, see
64  * &drm_crtc_funcs.page_flip and &drm_crtc_funcs.cursor_set2, and other legacy
65  * operations like &drm_crtc_funcs.gamma_set. For atomic drivers all these
66  * features are controlled through &drm_property and
67  * &drm_mode_config_funcs.atomic_check and &drm_mode_config_funcs.atomic_check.
68  */
69 
70 /**
71  * drm_crtc_from_index - find the registered CRTC at an index
72  * @dev: DRM device
73  * @idx: index of registered CRTC to find for
74  *
75  * Given a CRTC index, return the registered CRTC from DRM device's
76  * list of CRTCs with matching index. This is the inverse of drm_crtc_index().
77  * It's useful in the vblank callbacks (like &drm_driver.enable_vblank or
78  * &drm_driver.disable_vblank), since that still deals with indices instead
79  * of pointers to &struct drm_crtc."
80  */
81 struct drm_crtc *drm_crtc_from_index(struct drm_device *dev, int idx)
82 {
83 	struct drm_crtc *crtc;
84 
85 	drm_for_each_crtc(crtc, dev)
86 		if (idx == crtc->index)
87 			return crtc;
88 
89 	return NULL;
90 }
91 EXPORT_SYMBOL(drm_crtc_from_index);
92 
93 /**
94  * drm_crtc_force_disable - Forcibly turn off a CRTC
95  * @crtc: CRTC to turn off
96  *
97  * Note: This should only be used by non-atomic legacy drivers.
98  *
99  * Returns:
100  * Zero on success, error code on failure.
101  */
102 int drm_crtc_force_disable(struct drm_crtc *crtc)
103 {
104 	struct drm_mode_set set = {
105 		.crtc = crtc,
106 	};
107 
108 	WARN_ON(drm_drv_uses_atomic_modeset(crtc->dev));
109 
110 	return drm_mode_set_config_internal(&set);
111 }
112 EXPORT_SYMBOL(drm_crtc_force_disable);
113 
114 /**
115  * drm_crtc_force_disable_all - Forcibly turn off all enabled CRTCs
116  * @dev: DRM device whose CRTCs to turn off
117  *
118  * Drivers may want to call this on unload to ensure that all displays are
119  * unlit and the GPU is in a consistent, low power state. Takes modeset locks.
120  *
121  * Note: This should only be used by non-atomic legacy drivers. For an atomic
122  * version look at drm_atomic_helper_shutdown().
123  *
124  * Returns:
125  * Zero on success, error code on failure.
126  */
127 int drm_crtc_force_disable_all(struct drm_device *dev)
128 {
129 	struct drm_crtc *crtc;
130 	int ret = 0;
131 
132 	drm_modeset_lock_all(dev);
133 	drm_for_each_crtc(crtc, dev)
134 		if (crtc->enabled) {
135 			ret = drm_crtc_force_disable(crtc);
136 			if (ret)
137 				goto out;
138 		}
139 out:
140 	drm_modeset_unlock_all(dev);
141 	return ret;
142 }
143 EXPORT_SYMBOL(drm_crtc_force_disable_all);
144 
145 static unsigned int drm_num_crtcs(struct drm_device *dev)
146 {
147 	unsigned int num = 0;
148 	struct drm_crtc *tmp;
149 
150 	drm_for_each_crtc(tmp, dev) {
151 		num++;
152 	}
153 
154 	return num;
155 }
156 
157 int drm_crtc_register_all(struct drm_device *dev)
158 {
159 	struct drm_crtc *crtc;
160 	int ret = 0;
161 
162 	drm_for_each_crtc(crtc, dev) {
163 		if (drm_debugfs_crtc_add(crtc))
164 			DRM_ERROR("Failed to initialize debugfs entry for CRTC '%s'.\n",
165 				  crtc->name);
166 
167 		if (crtc->funcs->late_register)
168 			ret = crtc->funcs->late_register(crtc);
169 		if (ret)
170 			return ret;
171 	}
172 
173 	return 0;
174 }
175 
176 void drm_crtc_unregister_all(struct drm_device *dev)
177 {
178 	struct drm_crtc *crtc;
179 
180 	drm_for_each_crtc(crtc, dev) {
181 		if (crtc->funcs->early_unregister)
182 			crtc->funcs->early_unregister(crtc);
183 		drm_debugfs_crtc_remove(crtc);
184 	}
185 }
186 
187 static int drm_crtc_crc_init(struct drm_crtc *crtc)
188 {
189 #ifdef CONFIG_DEBUG_FS
190 	spin_lock_init(&crtc->crc.lock);
191 	init_waitqueue_head(&crtc->crc.wq);
192 	crtc->crc.source = kstrdup("auto", GFP_KERNEL);
193 	if (!crtc->crc.source)
194 		return -ENOMEM;
195 #endif
196 	return 0;
197 }
198 
199 static void drm_crtc_crc_fini(struct drm_crtc *crtc)
200 {
201 #ifdef CONFIG_DEBUG_FS
202 	kfree(crtc->crc.source);
203 #endif
204 }
205 
206 static const struct dma_fence_ops drm_crtc_fence_ops;
207 
208 static struct drm_crtc *fence_to_crtc(struct dma_fence *fence)
209 {
210 	BUG_ON(fence->ops != &drm_crtc_fence_ops);
211 	return container_of(fence->lock, struct drm_crtc, fence_lock);
212 }
213 
214 static const char *drm_crtc_fence_get_driver_name(struct dma_fence *fence)
215 {
216 	struct drm_crtc *crtc = fence_to_crtc(fence);
217 
218 	return crtc->dev->driver->name;
219 }
220 
221 static const char *drm_crtc_fence_get_timeline_name(struct dma_fence *fence)
222 {
223 	struct drm_crtc *crtc = fence_to_crtc(fence);
224 
225 	return crtc->timeline_name;
226 }
227 
228 static bool drm_crtc_fence_enable_signaling(struct dma_fence *fence)
229 {
230 	return true;
231 }
232 
233 static const struct dma_fence_ops drm_crtc_fence_ops = {
234 	.get_driver_name = drm_crtc_fence_get_driver_name,
235 	.get_timeline_name = drm_crtc_fence_get_timeline_name,
236 	.enable_signaling = drm_crtc_fence_enable_signaling,
237 	.wait = dma_fence_default_wait,
238 };
239 
240 struct dma_fence *drm_crtc_create_fence(struct drm_crtc *crtc)
241 {
242 	struct dma_fence *fence;
243 
244 	fence = kzalloc(sizeof(*fence), GFP_KERNEL);
245 	if (!fence)
246 		return NULL;
247 
248 	dma_fence_init(fence, &drm_crtc_fence_ops, &crtc->fence_lock,
249 		       crtc->fence_context, ++crtc->fence_seqno);
250 
251 	return fence;
252 }
253 
254 /**
255  * drm_crtc_init_with_planes - Initialise a new CRTC object with
256  *    specified primary and cursor planes.
257  * @dev: DRM device
258  * @crtc: CRTC object to init
259  * @primary: Primary plane for CRTC
260  * @cursor: Cursor plane for CRTC
261  * @funcs: callbacks for the new CRTC
262  * @name: printf style format string for the CRTC name, or NULL for default name
263  *
264  * Inits a new object created as base part of a driver crtc object. Drivers
265  * should use this function instead of drm_crtc_init(), which is only provided
266  * for backwards compatibility with drivers which do not yet support universal
267  * planes). For really simple hardware which has only 1 plane look at
268  * drm_simple_display_pipe_init() instead.
269  *
270  * Returns:
271  * Zero on success, error code on failure.
272  */
273 int drm_crtc_init_with_planes(struct drm_device *dev, struct drm_crtc *crtc,
274 			      struct drm_plane *primary,
275 			      struct drm_plane *cursor,
276 			      const struct drm_crtc_funcs *funcs,
277 			      const char *name, ...)
278 {
279 	struct drm_mode_config *config = &dev->mode_config;
280 	int ret;
281 
282 	WARN_ON(primary && primary->type != DRM_PLANE_TYPE_PRIMARY);
283 	WARN_ON(cursor && cursor->type != DRM_PLANE_TYPE_CURSOR);
284 
285 	/* crtc index is used with 32bit bitmasks */
286 	if (WARN_ON(config->num_crtc >= 32))
287 		return -EINVAL;
288 
289 	crtc->dev = dev;
290 	crtc->funcs = funcs;
291 
292 	INIT_LIST_HEAD(&crtc->commit_list);
293 	spin_lock_init(&crtc->commit_lock);
294 
295 	drm_modeset_lock_init(&crtc->mutex);
296 	ret = drm_mode_object_add(dev, &crtc->base, DRM_MODE_OBJECT_CRTC);
297 	if (ret)
298 		return ret;
299 
300 	if (name) {
301 		va_list ap;
302 
303 		va_start(ap, name);
304 		crtc->name = kvasprintf(GFP_KERNEL, name, ap);
305 		va_end(ap);
306 	} else {
307 		crtc->name = kasprintf(GFP_KERNEL, "crtc-%d",
308 				       drm_num_crtcs(dev));
309 	}
310 	if (!crtc->name) {
311 		drm_mode_object_unregister(dev, &crtc->base);
312 		return -ENOMEM;
313 	}
314 
315 	crtc->fence_context = dma_fence_context_alloc(1);
316 	spin_lock_init(&crtc->fence_lock);
317 	snprintf(crtc->timeline_name, sizeof(crtc->timeline_name),
318 		 "CRTC:%d-%s", crtc->base.id, crtc->name);
319 
320 	crtc->base.properties = &crtc->properties;
321 
322 	list_add_tail(&crtc->head, &config->crtc_list);
323 	crtc->index = config->num_crtc++;
324 
325 	crtc->primary = primary;
326 	crtc->cursor = cursor;
327 	if (primary && !primary->possible_crtcs)
328 		primary->possible_crtcs = 1 << drm_crtc_index(crtc);
329 	if (cursor && !cursor->possible_crtcs)
330 		cursor->possible_crtcs = 1 << drm_crtc_index(crtc);
331 
332 	ret = drm_crtc_crc_init(crtc);
333 	if (ret) {
334 		drm_mode_object_unregister(dev, &crtc->base);
335 		return ret;
336 	}
337 
338 	if (drm_core_check_feature(dev, DRIVER_ATOMIC)) {
339 		drm_object_attach_property(&crtc->base, config->prop_active, 0);
340 		drm_object_attach_property(&crtc->base, config->prop_mode_id, 0);
341 		drm_object_attach_property(&crtc->base,
342 					   config->prop_out_fence_ptr, 0);
343 	}
344 
345 	return 0;
346 }
347 EXPORT_SYMBOL(drm_crtc_init_with_planes);
348 
349 /**
350  * drm_crtc_cleanup - Clean up the core crtc usage
351  * @crtc: CRTC to cleanup
352  *
353  * This function cleans up @crtc and removes it from the DRM mode setting
354  * core. Note that the function does *not* free the crtc structure itself,
355  * this is the responsibility of the caller.
356  */
357 void drm_crtc_cleanup(struct drm_crtc *crtc)
358 {
359 	struct drm_device *dev = crtc->dev;
360 
361 	/* Note that the crtc_list is considered to be static; should we
362 	 * remove the drm_crtc at runtime we would have to decrement all
363 	 * the indices on the drm_crtc after us in the crtc_list.
364 	 */
365 
366 	drm_crtc_crc_fini(crtc);
367 
368 	kfree(crtc->gamma_store);
369 	crtc->gamma_store = NULL;
370 
371 	drm_modeset_lock_fini(&crtc->mutex);
372 
373 	drm_mode_object_unregister(dev, &crtc->base);
374 	list_del(&crtc->head);
375 	dev->mode_config.num_crtc--;
376 
377 	WARN_ON(crtc->state && !crtc->funcs->atomic_destroy_state);
378 	if (crtc->state && crtc->funcs->atomic_destroy_state)
379 		crtc->funcs->atomic_destroy_state(crtc, crtc->state);
380 
381 	kfree(crtc->name);
382 
383 	memset(crtc, 0, sizeof(*crtc));
384 }
385 EXPORT_SYMBOL(drm_crtc_cleanup);
386 
387 /**
388  * drm_mode_getcrtc - get CRTC configuration
389  * @dev: drm device for the ioctl
390  * @data: data pointer for the ioctl
391  * @file_priv: drm file for the ioctl call
392  *
393  * Construct a CRTC configuration structure to return to the user.
394  *
395  * Called by the user via ioctl.
396  *
397  * Returns:
398  * Zero on success, negative errno on failure.
399  */
400 int drm_mode_getcrtc(struct drm_device *dev,
401 		     void *data, struct drm_file *file_priv)
402 {
403 	struct drm_mode_crtc *crtc_resp = data;
404 	struct drm_crtc *crtc;
405 
406 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
407 		return -EINVAL;
408 
409 	crtc = drm_crtc_find(dev, file_priv, crtc_resp->crtc_id);
410 	if (!crtc)
411 		return -ENOENT;
412 
413 	crtc_resp->gamma_size = crtc->gamma_size;
414 
415 	drm_modeset_lock(&crtc->primary->mutex, NULL);
416 	if (crtc->primary->state && crtc->primary->state->fb)
417 		crtc_resp->fb_id = crtc->primary->state->fb->base.id;
418 	else if (!crtc->primary->state && crtc->primary->fb)
419 		crtc_resp->fb_id = crtc->primary->fb->base.id;
420 	else
421 		crtc_resp->fb_id = 0;
422 
423 	if (crtc->primary->state) {
424 		crtc_resp->x = crtc->primary->state->src_x >> 16;
425 		crtc_resp->y = crtc->primary->state->src_y >> 16;
426 	}
427 	drm_modeset_unlock(&crtc->primary->mutex);
428 
429 	drm_modeset_lock(&crtc->mutex, NULL);
430 	if (crtc->state) {
431 		if (crtc->state->enable) {
432 			drm_mode_convert_to_umode(&crtc_resp->mode, &crtc->state->mode);
433 			crtc_resp->mode_valid = 1;
434 
435 		} else {
436 			crtc_resp->mode_valid = 0;
437 		}
438 	} else {
439 		crtc_resp->x = crtc->x;
440 		crtc_resp->y = crtc->y;
441 		if (crtc->enabled) {
442 			drm_mode_convert_to_umode(&crtc_resp->mode, &crtc->mode);
443 			crtc_resp->mode_valid = 1;
444 
445 		} else {
446 			crtc_resp->mode_valid = 0;
447 		}
448 	}
449 	drm_modeset_unlock(&crtc->mutex);
450 
451 	return 0;
452 }
453 
454 static int __drm_mode_set_config_internal(struct drm_mode_set *set,
455 					  struct drm_modeset_acquire_ctx *ctx)
456 {
457 	struct drm_crtc *crtc = set->crtc;
458 	struct drm_framebuffer *fb;
459 	struct drm_crtc *tmp;
460 	int ret;
461 
462 	/*
463 	 * NOTE: ->set_config can also disable other crtcs (if we steal all
464 	 * connectors from it), hence we need to refcount the fbs across all
465 	 * crtcs. Atomic modeset will have saner semantics ...
466 	 */
467 	drm_for_each_crtc(tmp, crtc->dev)
468 		tmp->primary->old_fb = tmp->primary->fb;
469 
470 	fb = set->fb;
471 
472 	ret = crtc->funcs->set_config(set, ctx);
473 	if (ret == 0) {
474 		crtc->primary->crtc = crtc;
475 		crtc->primary->fb = fb;
476 	}
477 
478 	drm_for_each_crtc(tmp, crtc->dev) {
479 		if (tmp->primary->fb)
480 			drm_framebuffer_get(tmp->primary->fb);
481 		if (tmp->primary->old_fb)
482 			drm_framebuffer_put(tmp->primary->old_fb);
483 		tmp->primary->old_fb = NULL;
484 	}
485 
486 	return ret;
487 }
488 /**
489  * drm_mode_set_config_internal - helper to call &drm_mode_config_funcs.set_config
490  * @set: modeset config to set
491  *
492  * This is a little helper to wrap internal calls to the
493  * &drm_mode_config_funcs.set_config driver interface. The only thing it adds is
494  * correct refcounting dance.
495  *
496  * This should only be used by non-atomic legacy drivers.
497  *
498  * Returns:
499  * Zero on success, negative errno on failure.
500  */
501 int drm_mode_set_config_internal(struct drm_mode_set *set)
502 {
503 	WARN_ON(drm_drv_uses_atomic_modeset(set->crtc->dev));
504 
505 	return __drm_mode_set_config_internal(set, NULL);
506 }
507 EXPORT_SYMBOL(drm_mode_set_config_internal);
508 
509 /**
510  * drm_crtc_check_viewport - Checks that a framebuffer is big enough for the
511  *     CRTC viewport
512  * @crtc: CRTC that framebuffer will be displayed on
513  * @x: x panning
514  * @y: y panning
515  * @mode: mode that framebuffer will be displayed under
516  * @fb: framebuffer to check size of
517  */
518 int drm_crtc_check_viewport(const struct drm_crtc *crtc,
519 			    int x, int y,
520 			    const struct drm_display_mode *mode,
521 			    const struct drm_framebuffer *fb)
522 
523 {
524 	int hdisplay, vdisplay;
525 
526 	drm_mode_get_hv_timing(mode, &hdisplay, &vdisplay);
527 
528 	if (crtc->state &&
529 	    drm_rotation_90_or_270(crtc->primary->state->rotation))
530 		swap(hdisplay, vdisplay);
531 
532 	return drm_framebuffer_check_src_coords(x << 16, y << 16,
533 						hdisplay << 16, vdisplay << 16,
534 						fb);
535 }
536 EXPORT_SYMBOL(drm_crtc_check_viewport);
537 
538 /**
539  * drm_mode_setcrtc - set CRTC configuration
540  * @dev: drm device for the ioctl
541  * @data: data pointer for the ioctl
542  * @file_priv: drm file for the ioctl call
543  *
544  * Build a new CRTC configuration based on user request.
545  *
546  * Called by the user via ioctl.
547  *
548  * Returns:
549  * Zero on success, negative errno on failure.
550  */
551 int drm_mode_setcrtc(struct drm_device *dev, void *data,
552 		     struct drm_file *file_priv)
553 {
554 	struct drm_mode_config *config = &dev->mode_config;
555 	struct drm_mode_crtc *crtc_req = data;
556 	struct drm_crtc *crtc;
557 	struct drm_connector **connector_set = NULL, *connector;
558 	struct drm_framebuffer *fb = NULL;
559 	struct drm_display_mode *mode = NULL;
560 	struct drm_mode_set set;
561 	uint32_t __user *set_connectors_ptr;
562 	struct drm_modeset_acquire_ctx ctx;
563 	int ret;
564 	int i;
565 
566 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
567 		return -EINVAL;
568 
569 	/*
570 	 * Universal plane src offsets are only 16.16, prevent havoc for
571 	 * drivers using universal plane code internally.
572 	 */
573 	if (crtc_req->x & 0xffff0000 || crtc_req->y & 0xffff0000)
574 		return -ERANGE;
575 
576 	crtc = drm_crtc_find(dev, file_priv, crtc_req->crtc_id);
577 	if (!crtc) {
578 		DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id);
579 		return -ENOENT;
580 	}
581 	DRM_DEBUG_KMS("[CRTC:%d:%s]\n", crtc->base.id, crtc->name);
582 
583 	mutex_lock(&crtc->dev->mode_config.mutex);
584 	drm_modeset_acquire_init(&ctx, DRM_MODESET_ACQUIRE_INTERRUPTIBLE);
585 retry:
586 	ret = drm_modeset_lock_all_ctx(crtc->dev, &ctx);
587 	if (ret)
588 		goto out;
589 	if (crtc_req->mode_valid) {
590 		/* If we have a mode we need a framebuffer. */
591 		/* If we pass -1, set the mode with the currently bound fb */
592 		if (crtc_req->fb_id == -1) {
593 			if (!crtc->primary->fb) {
594 				DRM_DEBUG_KMS("CRTC doesn't have current FB\n");
595 				ret = -EINVAL;
596 				goto out;
597 			}
598 			fb = crtc->primary->fb;
599 			/* Make refcounting symmetric with the lookup path. */
600 			drm_framebuffer_get(fb);
601 		} else {
602 			fb = drm_framebuffer_lookup(dev, file_priv, crtc_req->fb_id);
603 			if (!fb) {
604 				DRM_DEBUG_KMS("Unknown FB ID%d\n",
605 						crtc_req->fb_id);
606 				ret = -ENOENT;
607 				goto out;
608 			}
609 		}
610 
611 		mode = drm_mode_create(dev);
612 		if (!mode) {
613 			ret = -ENOMEM;
614 			goto out;
615 		}
616 
617 		ret = drm_mode_convert_umode(dev, mode, &crtc_req->mode);
618 		if (ret) {
619 			DRM_DEBUG_KMS("Invalid mode\n");
620 			goto out;
621 		}
622 
623 		/*
624 		 * Check whether the primary plane supports the fb pixel format.
625 		 * Drivers not implementing the universal planes API use a
626 		 * default formats list provided by the DRM core which doesn't
627 		 * match real hardware capabilities. Skip the check in that
628 		 * case.
629 		 */
630 		if (!crtc->primary->format_default) {
631 			ret = drm_plane_check_pixel_format(crtc->primary,
632 							   fb->format->format,
633 							   fb->modifier);
634 			if (ret) {
635 				struct drm_format_name_buf format_name;
636 				DRM_DEBUG_KMS("Invalid pixel format %s, modifier 0x%llx\n",
637 					      drm_get_format_name(fb->format->format,
638 								  &format_name),
639 					      fb->modifier);
640 				goto out;
641 			}
642 		}
643 
644 		ret = drm_crtc_check_viewport(crtc, crtc_req->x, crtc_req->y,
645 					      mode, fb);
646 		if (ret)
647 			goto out;
648 
649 	}
650 
651 	if (crtc_req->count_connectors == 0 && mode) {
652 		DRM_DEBUG_KMS("Count connectors is 0 but mode set\n");
653 		ret = -EINVAL;
654 		goto out;
655 	}
656 
657 	if (crtc_req->count_connectors > 0 && (!mode || !fb)) {
658 		DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",
659 			  crtc_req->count_connectors);
660 		ret = -EINVAL;
661 		goto out;
662 	}
663 
664 	if (crtc_req->count_connectors > 0) {
665 		u32 out_id;
666 
667 		/* Avoid unbounded kernel memory allocation */
668 		if (crtc_req->count_connectors > config->num_connector) {
669 			ret = -EINVAL;
670 			goto out;
671 		}
672 
673 		connector_set = kmalloc_array(crtc_req->count_connectors,
674 					      sizeof(struct drm_connector *),
675 					      GFP_KERNEL);
676 		if (!connector_set) {
677 			ret = -ENOMEM;
678 			goto out;
679 		}
680 
681 		for (i = 0; i < crtc_req->count_connectors; i++) {
682 			connector_set[i] = NULL;
683 			set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
684 			if (get_user(out_id, &set_connectors_ptr[i])) {
685 				ret = -EFAULT;
686 				goto out;
687 			}
688 
689 			connector = drm_connector_lookup(dev, file_priv, out_id);
690 			if (!connector) {
691 				DRM_DEBUG_KMS("Connector id %d unknown\n",
692 						out_id);
693 				ret = -ENOENT;
694 				goto out;
695 			}
696 			DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
697 					connector->base.id,
698 					connector->name);
699 
700 			connector_set[i] = connector;
701 		}
702 	}
703 
704 	set.crtc = crtc;
705 	set.x = crtc_req->x;
706 	set.y = crtc_req->y;
707 	set.mode = mode;
708 	set.connectors = connector_set;
709 	set.num_connectors = crtc_req->count_connectors;
710 	set.fb = fb;
711 	ret = __drm_mode_set_config_internal(&set, &ctx);
712 
713 out:
714 	if (fb)
715 		drm_framebuffer_put(fb);
716 
717 	if (connector_set) {
718 		for (i = 0; i < crtc_req->count_connectors; i++) {
719 			if (connector_set[i])
720 				drm_connector_put(connector_set[i]);
721 		}
722 	}
723 	kfree(connector_set);
724 	drm_mode_destroy(dev, mode);
725 	if (ret == -EDEADLK) {
726 		ret = drm_modeset_backoff(&ctx);
727 		if (!ret)
728 			goto retry;
729 	}
730 	drm_modeset_drop_locks(&ctx);
731 	drm_modeset_acquire_fini(&ctx);
732 	mutex_unlock(&crtc->dev->mode_config.mutex);
733 
734 	return ret;
735 }
736 
737 int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
738 			       struct drm_property *property,
739 			       uint64_t value)
740 {
741 	int ret = -EINVAL;
742 	struct drm_crtc *crtc = obj_to_crtc(obj);
743 
744 	if (crtc->funcs->set_property)
745 		ret = crtc->funcs->set_property(crtc, property, value);
746 	if (!ret)
747 		drm_object_property_set_value(obj, property, value);
748 
749 	return ret;
750 }
751