xref: /openbmc/linux/drivers/gpu/drm/drm_fb_helper.c (revision 3def3387)
1 /*
2  * Copyright (c) 2006-2009 Red Hat Inc.
3  * Copyright (c) 2006-2008 Intel Corporation
4  * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
5  *
6  * DRM framebuffer helper functions
7  *
8  * Permission to use, copy, modify, distribute, and sell this software and its
9  * documentation for any purpose is hereby granted without fee, provided that
10  * the above copyright notice appear in all copies and that both that copyright
11  * notice and this permission notice appear in supporting documentation, and
12  * that the name of the copyright holders not be used in advertising or
13  * publicity pertaining to distribution of the software without specific,
14  * written prior permission.  The copyright holders make no representations
15  * about the suitability of this software for any purpose.  It is provided "as
16  * is" without express or implied warranty.
17  *
18  * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
19  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
20  * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
21  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
22  * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
23  * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
24  * OF THIS SOFTWARE.
25  *
26  * Authors:
27  *      Dave Airlie <airlied@linux.ie>
28  *      Jesse Barnes <jesse.barnes@intel.com>
29  */
30 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
31 
32 #include <linux/console.h>
33 #include <linux/pci.h>
34 #include <linux/sysrq.h>
35 #include <linux/vga_switcheroo.h>
36 
37 #include <drm/drm_atomic.h>
38 #include <drm/drm_drv.h>
39 #include <drm/drm_fb_helper.h>
40 #include <drm/drm_fourcc.h>
41 #include <drm/drm_framebuffer.h>
42 #include <drm/drm_modeset_helper_vtables.h>
43 #include <drm/drm_print.h>
44 #include <drm/drm_vblank.h>
45 
46 #include "drm_internal.h"
47 
48 static bool drm_fbdev_emulation = true;
49 module_param_named(fbdev_emulation, drm_fbdev_emulation, bool, 0600);
50 MODULE_PARM_DESC(fbdev_emulation,
51 		 "Enable legacy fbdev emulation [default=true]");
52 
53 static int drm_fbdev_overalloc = CONFIG_DRM_FBDEV_OVERALLOC;
54 module_param(drm_fbdev_overalloc, int, 0444);
55 MODULE_PARM_DESC(drm_fbdev_overalloc,
56 		 "Overallocation of the fbdev buffer (%) [default="
57 		 __MODULE_STRING(CONFIG_DRM_FBDEV_OVERALLOC) "]");
58 
59 /*
60  * In order to keep user-space compatibility, we want in certain use-cases
61  * to keep leaking the fbdev physical address to the user-space program
62  * handling the fbdev buffer.
63  *
64  * This is a bad habit, essentially kept to support closed-source OpenGL
65  * drivers that should really be moved into open-source upstream projects
66  * instead of using legacy physical addresses in user space to communicate
67  * with other out-of-tree kernel modules.
68  *
69  * This module_param *should* be removed as soon as possible and be
70  * considered as a broken and legacy behaviour from a modern fbdev device.
71  */
72 static bool drm_leak_fbdev_smem;
73 #if IS_ENABLED(CONFIG_DRM_FBDEV_LEAK_PHYS_SMEM)
74 module_param_unsafe(drm_leak_fbdev_smem, bool, 0600);
75 MODULE_PARM_DESC(drm_leak_fbdev_smem,
76 		 "Allow unsafe leaking fbdev physical smem address [default=false]");
77 #endif
78 
79 static LIST_HEAD(kernel_fb_helper_list);
80 static DEFINE_MUTEX(kernel_fb_helper_lock);
81 
82 /**
83  * DOC: fbdev helpers
84  *
85  * The fb helper functions are useful to provide an fbdev on top of a drm kernel
86  * mode setting driver. They can be used mostly independently from the crtc
87  * helper functions used by many drivers to implement the kernel mode setting
88  * interfaces.
89  *
90  * Drivers that support a dumb buffer with a virtual address and mmap support,
91  * should try out the generic fbdev emulation using drm_fbdev_generic_setup().
92  * It will automatically set up deferred I/O if the driver requires a shadow
93  * buffer.
94  *
95  * Existing fbdev implementations should restore the fbdev console by using
96  * drm_fb_helper_lastclose() as their &drm_driver.lastclose callback.
97  * They should also notify the fb helper code from updates to the output
98  * configuration by using drm_fb_helper_output_poll_changed() as their
99  * &drm_mode_config_funcs.output_poll_changed callback. New implementations
100  * of fbdev should be build on top of struct &drm_client_funcs, which handles
101  * this automatically. Setting the old callbacks should be avoided.
102  *
103  * For suspend/resume consider using drm_mode_config_helper_suspend() and
104  * drm_mode_config_helper_resume() which takes care of fbdev as well.
105  *
106  * All other functions exported by the fb helper library can be used to
107  * implement the fbdev driver interface by the driver.
108  *
109  * It is possible, though perhaps somewhat tricky, to implement race-free
110  * hotplug detection using the fbdev helpers. The drm_fb_helper_prepare()
111  * helper must be called first to initialize the minimum required to make
112  * hotplug detection work. Drivers also need to make sure to properly set up
113  * the &drm_mode_config.funcs member. After calling drm_kms_helper_poll_init()
114  * it is safe to enable interrupts and start processing hotplug events. At the
115  * same time, drivers should initialize all modeset objects such as CRTCs,
116  * encoders and connectors. To finish up the fbdev helper initialization, the
117  * drm_fb_helper_init() function is called. To probe for all attached displays
118  * and set up an initial configuration using the detected hardware, drivers
119  * should call drm_fb_helper_initial_config().
120  *
121  * If &drm_framebuffer_funcs.dirty is set, the
122  * drm_fb_helper_{cfb,sys}_{write,fillrect,copyarea,imageblit} functions will
123  * accumulate changes and schedule &drm_fb_helper.dirty_work to run right
124  * away. This worker then calls the dirty() function ensuring that it will
125  * always run in process context since the fb_*() function could be running in
126  * atomic context. If drm_fb_helper_deferred_io() is used as the deferred_io
127  * callback it will also schedule dirty_work with the damage collected from the
128  * mmap page writes.
129  *
130  * Deferred I/O is not compatible with SHMEM. Such drivers should request an
131  * fbdev shadow buffer and call drm_fbdev_generic_setup() instead.
132  */
133 
134 static void drm_fb_helper_restore_lut_atomic(struct drm_crtc *crtc)
135 {
136 	uint16_t *r_base, *g_base, *b_base;
137 
138 	if (crtc->funcs->gamma_set == NULL)
139 		return;
140 
141 	r_base = crtc->gamma_store;
142 	g_base = r_base + crtc->gamma_size;
143 	b_base = g_base + crtc->gamma_size;
144 
145 	crtc->funcs->gamma_set(crtc, r_base, g_base, b_base,
146 			       crtc->gamma_size, NULL);
147 }
148 
149 /**
150  * drm_fb_helper_debug_enter - implementation for &fb_ops.fb_debug_enter
151  * @info: fbdev registered by the helper
152  */
153 int drm_fb_helper_debug_enter(struct fb_info *info)
154 {
155 	struct drm_fb_helper *helper = info->par;
156 	const struct drm_crtc_helper_funcs *funcs;
157 	struct drm_mode_set *mode_set;
158 
159 	list_for_each_entry(helper, &kernel_fb_helper_list, kernel_fb_list) {
160 		mutex_lock(&helper->client.modeset_mutex);
161 		drm_client_for_each_modeset(mode_set, &helper->client) {
162 			if (!mode_set->crtc->enabled)
163 				continue;
164 
165 			funcs =	mode_set->crtc->helper_private;
166 			if (funcs->mode_set_base_atomic == NULL)
167 				continue;
168 
169 			if (drm_drv_uses_atomic_modeset(mode_set->crtc->dev))
170 				continue;
171 
172 			funcs->mode_set_base_atomic(mode_set->crtc,
173 						    mode_set->fb,
174 						    mode_set->x,
175 						    mode_set->y,
176 						    ENTER_ATOMIC_MODE_SET);
177 		}
178 		mutex_unlock(&helper->client.modeset_mutex);
179 	}
180 
181 	return 0;
182 }
183 EXPORT_SYMBOL(drm_fb_helper_debug_enter);
184 
185 /**
186  * drm_fb_helper_debug_leave - implementation for &fb_ops.fb_debug_leave
187  * @info: fbdev registered by the helper
188  */
189 int drm_fb_helper_debug_leave(struct fb_info *info)
190 {
191 	struct drm_fb_helper *helper = info->par;
192 	struct drm_client_dev *client = &helper->client;
193 	struct drm_device *dev = helper->dev;
194 	struct drm_crtc *crtc;
195 	const struct drm_crtc_helper_funcs *funcs;
196 	struct drm_mode_set *mode_set;
197 	struct drm_framebuffer *fb;
198 
199 	mutex_lock(&client->modeset_mutex);
200 	drm_client_for_each_modeset(mode_set, client) {
201 		crtc = mode_set->crtc;
202 		if (drm_drv_uses_atomic_modeset(crtc->dev))
203 			continue;
204 
205 		funcs = crtc->helper_private;
206 		fb = crtc->primary->fb;
207 
208 		if (!crtc->enabled)
209 			continue;
210 
211 		if (!fb) {
212 			drm_err(dev, "no fb to restore?\n");
213 			continue;
214 		}
215 
216 		if (funcs->mode_set_base_atomic == NULL)
217 			continue;
218 
219 		drm_fb_helper_restore_lut_atomic(mode_set->crtc);
220 		funcs->mode_set_base_atomic(mode_set->crtc, fb, crtc->x,
221 					    crtc->y, LEAVE_ATOMIC_MODE_SET);
222 	}
223 	mutex_unlock(&client->modeset_mutex);
224 
225 	return 0;
226 }
227 EXPORT_SYMBOL(drm_fb_helper_debug_leave);
228 
229 static int
230 __drm_fb_helper_restore_fbdev_mode_unlocked(struct drm_fb_helper *fb_helper,
231 					    bool force)
232 {
233 	bool do_delayed;
234 	int ret;
235 
236 	if (!drm_fbdev_emulation || !fb_helper)
237 		return -ENODEV;
238 
239 	if (READ_ONCE(fb_helper->deferred_setup))
240 		return 0;
241 
242 	mutex_lock(&fb_helper->lock);
243 	if (force) {
244 		/*
245 		 * Yes this is the _locked version which expects the master lock
246 		 * to be held. But for forced restores we're intentionally
247 		 * racing here, see drm_fb_helper_set_par().
248 		 */
249 		ret = drm_client_modeset_commit_locked(&fb_helper->client);
250 	} else {
251 		ret = drm_client_modeset_commit(&fb_helper->client);
252 	}
253 
254 	do_delayed = fb_helper->delayed_hotplug;
255 	if (do_delayed)
256 		fb_helper->delayed_hotplug = false;
257 	mutex_unlock(&fb_helper->lock);
258 
259 	if (do_delayed)
260 		drm_fb_helper_hotplug_event(fb_helper);
261 
262 	return ret;
263 }
264 
265 /**
266  * drm_fb_helper_restore_fbdev_mode_unlocked - restore fbdev configuration
267  * @fb_helper: driver-allocated fbdev helper, can be NULL
268  *
269  * This should be called from driver's drm &drm_driver.lastclose callback
270  * when implementing an fbcon on top of kms using this helper. This ensures that
271  * the user isn't greeted with a black screen when e.g. X dies.
272  *
273  * RETURNS:
274  * Zero if everything went ok, negative error code otherwise.
275  */
276 int drm_fb_helper_restore_fbdev_mode_unlocked(struct drm_fb_helper *fb_helper)
277 {
278 	return __drm_fb_helper_restore_fbdev_mode_unlocked(fb_helper, false);
279 }
280 EXPORT_SYMBOL(drm_fb_helper_restore_fbdev_mode_unlocked);
281 
282 #ifdef CONFIG_MAGIC_SYSRQ
283 /* emergency restore, don't bother with error reporting */
284 static void drm_fb_helper_restore_work_fn(struct work_struct *ignored)
285 {
286 	struct drm_fb_helper *helper;
287 
288 	mutex_lock(&kernel_fb_helper_lock);
289 	list_for_each_entry(helper, &kernel_fb_helper_list, kernel_fb_list) {
290 		struct drm_device *dev = helper->dev;
291 
292 		if (dev->switch_power_state == DRM_SWITCH_POWER_OFF)
293 			continue;
294 
295 		mutex_lock(&helper->lock);
296 		drm_client_modeset_commit_locked(&helper->client);
297 		mutex_unlock(&helper->lock);
298 	}
299 	mutex_unlock(&kernel_fb_helper_lock);
300 }
301 
302 static DECLARE_WORK(drm_fb_helper_restore_work, drm_fb_helper_restore_work_fn);
303 
304 static void drm_fb_helper_sysrq(int dummy1)
305 {
306 	schedule_work(&drm_fb_helper_restore_work);
307 }
308 
309 static const struct sysrq_key_op sysrq_drm_fb_helper_restore_op = {
310 	.handler = drm_fb_helper_sysrq,
311 	.help_msg = "force-fb(v)",
312 	.action_msg = "Restore framebuffer console",
313 };
314 #else
315 static const struct sysrq_key_op sysrq_drm_fb_helper_restore_op = { };
316 #endif
317 
318 static void drm_fb_helper_dpms(struct fb_info *info, int dpms_mode)
319 {
320 	struct drm_fb_helper *fb_helper = info->par;
321 
322 	mutex_lock(&fb_helper->lock);
323 	drm_client_modeset_dpms(&fb_helper->client, dpms_mode);
324 	mutex_unlock(&fb_helper->lock);
325 }
326 
327 /**
328  * drm_fb_helper_blank - implementation for &fb_ops.fb_blank
329  * @blank: desired blanking state
330  * @info: fbdev registered by the helper
331  */
332 int drm_fb_helper_blank(int blank, struct fb_info *info)
333 {
334 	if (oops_in_progress)
335 		return -EBUSY;
336 
337 	switch (blank) {
338 	/* Display: On; HSync: On, VSync: On */
339 	case FB_BLANK_UNBLANK:
340 		drm_fb_helper_dpms(info, DRM_MODE_DPMS_ON);
341 		break;
342 	/* Display: Off; HSync: On, VSync: On */
343 	case FB_BLANK_NORMAL:
344 		drm_fb_helper_dpms(info, DRM_MODE_DPMS_STANDBY);
345 		break;
346 	/* Display: Off; HSync: Off, VSync: On */
347 	case FB_BLANK_HSYNC_SUSPEND:
348 		drm_fb_helper_dpms(info, DRM_MODE_DPMS_STANDBY);
349 		break;
350 	/* Display: Off; HSync: On, VSync: Off */
351 	case FB_BLANK_VSYNC_SUSPEND:
352 		drm_fb_helper_dpms(info, DRM_MODE_DPMS_SUSPEND);
353 		break;
354 	/* Display: Off; HSync: Off, VSync: Off */
355 	case FB_BLANK_POWERDOWN:
356 		drm_fb_helper_dpms(info, DRM_MODE_DPMS_OFF);
357 		break;
358 	}
359 	return 0;
360 }
361 EXPORT_SYMBOL(drm_fb_helper_blank);
362 
363 static void drm_fb_helper_resume_worker(struct work_struct *work)
364 {
365 	struct drm_fb_helper *helper = container_of(work, struct drm_fb_helper,
366 						    resume_work);
367 
368 	console_lock();
369 	fb_set_suspend(helper->info, 0);
370 	console_unlock();
371 }
372 
373 static void drm_fb_helper_fb_dirty(struct drm_fb_helper *helper)
374 {
375 	struct drm_device *dev = helper->dev;
376 	struct drm_clip_rect *clip = &helper->damage_clip;
377 	struct drm_clip_rect clip_copy;
378 	unsigned long flags;
379 	int ret;
380 
381 	if (drm_WARN_ON_ONCE(dev, !helper->funcs->fb_dirty))
382 		return;
383 
384 	spin_lock_irqsave(&helper->damage_lock, flags);
385 	clip_copy = *clip;
386 	clip->x1 = clip->y1 = ~0;
387 	clip->x2 = clip->y2 = 0;
388 	spin_unlock_irqrestore(&helper->damage_lock, flags);
389 
390 	ret = helper->funcs->fb_dirty(helper, &clip_copy);
391 	if (ret)
392 		goto err;
393 
394 	return;
395 
396 err:
397 	/*
398 	 * Restore damage clip rectangle on errors. The next run
399 	 * of the damage worker will perform the update.
400 	 */
401 	spin_lock_irqsave(&helper->damage_lock, flags);
402 	clip->x1 = min_t(u32, clip->x1, clip_copy.x1);
403 	clip->y1 = min_t(u32, clip->y1, clip_copy.y1);
404 	clip->x2 = max_t(u32, clip->x2, clip_copy.x2);
405 	clip->y2 = max_t(u32, clip->y2, clip_copy.y2);
406 	spin_unlock_irqrestore(&helper->damage_lock, flags);
407 }
408 
409 static void drm_fb_helper_damage_work(struct work_struct *work)
410 {
411 	struct drm_fb_helper *helper = container_of(work, struct drm_fb_helper, damage_work);
412 
413 	drm_fb_helper_fb_dirty(helper);
414 }
415 
416 /**
417  * drm_fb_helper_prepare - setup a drm_fb_helper structure
418  * @dev: DRM device
419  * @helper: driver-allocated fbdev helper structure to set up
420  * @preferred_bpp: Preferred bits per pixel for the device.
421  * @funcs: pointer to structure of functions associate with this helper
422  *
423  * Sets up the bare minimum to make the framebuffer helper usable. This is
424  * useful to implement race-free initialization of the polling helpers.
425  */
426 void drm_fb_helper_prepare(struct drm_device *dev, struct drm_fb_helper *helper,
427 			   unsigned int preferred_bpp,
428 			   const struct drm_fb_helper_funcs *funcs)
429 {
430 	/*
431 	 * Pick a preferred bpp of 32 if no value has been given. This
432 	 * will select XRGB8888 for the framebuffer formats. All drivers
433 	 * have to support XRGB8888 for backwards compatibility with legacy
434 	 * userspace, so it's the safe choice here.
435 	 *
436 	 * TODO: Replace struct drm_mode_config.preferred_depth and this
437 	 *       bpp value with a preferred format that is given as struct
438 	 *       drm_format_info. Then derive all other values from the
439 	 *       format.
440 	 */
441 	if (!preferred_bpp)
442 		preferred_bpp = 32;
443 
444 	INIT_LIST_HEAD(&helper->kernel_fb_list);
445 	spin_lock_init(&helper->damage_lock);
446 	INIT_WORK(&helper->resume_work, drm_fb_helper_resume_worker);
447 	INIT_WORK(&helper->damage_work, drm_fb_helper_damage_work);
448 	helper->damage_clip.x1 = helper->damage_clip.y1 = ~0;
449 	mutex_init(&helper->lock);
450 	helper->funcs = funcs;
451 	helper->dev = dev;
452 	helper->preferred_bpp = preferred_bpp;
453 }
454 EXPORT_SYMBOL(drm_fb_helper_prepare);
455 
456 /**
457  * drm_fb_helper_unprepare - clean up a drm_fb_helper structure
458  * @fb_helper: driver-allocated fbdev helper structure to set up
459  *
460  * Cleans up the framebuffer helper. Inverse of drm_fb_helper_prepare().
461  */
462 void drm_fb_helper_unprepare(struct drm_fb_helper *fb_helper)
463 {
464 	mutex_destroy(&fb_helper->lock);
465 }
466 EXPORT_SYMBOL(drm_fb_helper_unprepare);
467 
468 /**
469  * drm_fb_helper_init - initialize a &struct drm_fb_helper
470  * @dev: drm device
471  * @fb_helper: driver-allocated fbdev helper structure to initialize
472  *
473  * This allocates the structures for the fbdev helper with the given limits.
474  * Note that this won't yet touch the hardware (through the driver interfaces)
475  * nor register the fbdev. This is only done in drm_fb_helper_initial_config()
476  * to allow driver writes more control over the exact init sequence.
477  *
478  * Drivers must call drm_fb_helper_prepare() before calling this function.
479  *
480  * RETURNS:
481  * Zero if everything went ok, nonzero otherwise.
482  */
483 int drm_fb_helper_init(struct drm_device *dev,
484 		       struct drm_fb_helper *fb_helper)
485 {
486 	int ret;
487 
488 	/*
489 	 * If this is not the generic fbdev client, initialize a drm_client
490 	 * without callbacks so we can use the modesets.
491 	 */
492 	if (!fb_helper->client.funcs) {
493 		ret = drm_client_init(dev, &fb_helper->client, "drm_fb_helper", NULL);
494 		if (ret)
495 			return ret;
496 	}
497 
498 	dev->fb_helper = fb_helper;
499 
500 	return 0;
501 }
502 EXPORT_SYMBOL(drm_fb_helper_init);
503 
504 /**
505  * drm_fb_helper_alloc_info - allocate fb_info and some of its members
506  * @fb_helper: driver-allocated fbdev helper
507  *
508  * A helper to alloc fb_info and the member cmap. Called by the driver
509  * within the fb_probe fb_helper callback function. Drivers do not
510  * need to release the allocated fb_info structure themselves, this is
511  * automatically done when calling drm_fb_helper_fini().
512  *
513  * RETURNS:
514  * fb_info pointer if things went okay, pointer containing error code
515  * otherwise
516  */
517 struct fb_info *drm_fb_helper_alloc_info(struct drm_fb_helper *fb_helper)
518 {
519 	struct device *dev = fb_helper->dev->dev;
520 	struct fb_info *info;
521 	int ret;
522 
523 	info = framebuffer_alloc(0, dev);
524 	if (!info)
525 		return ERR_PTR(-ENOMEM);
526 
527 	ret = fb_alloc_cmap(&info->cmap, 256, 0);
528 	if (ret)
529 		goto err_release;
530 
531 	fb_helper->info = info;
532 	info->skip_vt_switch = true;
533 
534 	return info;
535 
536 err_release:
537 	framebuffer_release(info);
538 	return ERR_PTR(ret);
539 }
540 EXPORT_SYMBOL(drm_fb_helper_alloc_info);
541 
542 /**
543  * drm_fb_helper_release_info - release fb_info and its members
544  * @fb_helper: driver-allocated fbdev helper
545  *
546  * A helper to release fb_info and the member cmap.  Drivers do not
547  * need to release the allocated fb_info structure themselves, this is
548  * automatically done when calling drm_fb_helper_fini().
549  */
550 void drm_fb_helper_release_info(struct drm_fb_helper *fb_helper)
551 {
552 	struct fb_info *info = fb_helper->info;
553 
554 	if (!info)
555 		return;
556 
557 	fb_helper->info = NULL;
558 
559 	if (info->cmap.len)
560 		fb_dealloc_cmap(&info->cmap);
561 	framebuffer_release(info);
562 }
563 EXPORT_SYMBOL(drm_fb_helper_release_info);
564 
565 /**
566  * drm_fb_helper_unregister_info - unregister fb_info framebuffer device
567  * @fb_helper: driver-allocated fbdev helper, can be NULL
568  *
569  * A wrapper around unregister_framebuffer, to release the fb_info
570  * framebuffer device. This must be called before releasing all resources for
571  * @fb_helper by calling drm_fb_helper_fini().
572  */
573 void drm_fb_helper_unregister_info(struct drm_fb_helper *fb_helper)
574 {
575 	if (fb_helper && fb_helper->info)
576 		unregister_framebuffer(fb_helper->info);
577 }
578 EXPORT_SYMBOL(drm_fb_helper_unregister_info);
579 
580 /**
581  * drm_fb_helper_fini - finialize a &struct drm_fb_helper
582  * @fb_helper: driver-allocated fbdev helper, can be NULL
583  *
584  * This cleans up all remaining resources associated with @fb_helper.
585  */
586 void drm_fb_helper_fini(struct drm_fb_helper *fb_helper)
587 {
588 	if (!fb_helper)
589 		return;
590 
591 	fb_helper->dev->fb_helper = NULL;
592 
593 	if (!drm_fbdev_emulation)
594 		return;
595 
596 	cancel_work_sync(&fb_helper->resume_work);
597 	cancel_work_sync(&fb_helper->damage_work);
598 
599 	drm_fb_helper_release_info(fb_helper);
600 
601 	mutex_lock(&kernel_fb_helper_lock);
602 	if (!list_empty(&fb_helper->kernel_fb_list)) {
603 		list_del(&fb_helper->kernel_fb_list);
604 		if (list_empty(&kernel_fb_helper_list))
605 			unregister_sysrq_key('v', &sysrq_drm_fb_helper_restore_op);
606 	}
607 	mutex_unlock(&kernel_fb_helper_lock);
608 
609 	if (!fb_helper->client.funcs)
610 		drm_client_release(&fb_helper->client);
611 }
612 EXPORT_SYMBOL(drm_fb_helper_fini);
613 
614 static void drm_fb_helper_add_damage_clip(struct drm_fb_helper *helper, u32 x, u32 y,
615 					  u32 width, u32 height)
616 {
617 	struct drm_clip_rect *clip = &helper->damage_clip;
618 	unsigned long flags;
619 
620 	spin_lock_irqsave(&helper->damage_lock, flags);
621 	clip->x1 = min_t(u32, clip->x1, x);
622 	clip->y1 = min_t(u32, clip->y1, y);
623 	clip->x2 = max_t(u32, clip->x2, x + width);
624 	clip->y2 = max_t(u32, clip->y2, y + height);
625 	spin_unlock_irqrestore(&helper->damage_lock, flags);
626 }
627 
628 static void drm_fb_helper_damage(struct drm_fb_helper *helper, u32 x, u32 y,
629 				 u32 width, u32 height)
630 {
631 	drm_fb_helper_add_damage_clip(helper, x, y, width, height);
632 
633 	schedule_work(&helper->damage_work);
634 }
635 
636 /*
637  * Convert memory region into area of scanlines and pixels per
638  * scanline. The parameters off and len must not reach beyond
639  * the end of the framebuffer.
640  */
641 static void drm_fb_helper_memory_range_to_clip(struct fb_info *info, off_t off, size_t len,
642 					       struct drm_rect *clip)
643 {
644 	u32 line_length = info->fix.line_length;
645 	u32 fb_height = info->var.yres;
646 	off_t end = off + len;
647 	u32 x1 = 0;
648 	u32 y1 = off / line_length;
649 	u32 x2 = info->var.xres;
650 	u32 y2 = DIV_ROUND_UP(end, line_length);
651 
652 	/* Don't allow any of them beyond the bottom bound of display area */
653 	if (y1 > fb_height)
654 		y1 = fb_height;
655 	if (y2 > fb_height)
656 		y2 = fb_height;
657 
658 	if ((y2 - y1) == 1) {
659 		/*
660 		 * We've only written to a single scanline. Try to reduce
661 		 * the number of horizontal pixels that need an update.
662 		 */
663 		off_t bit_off = (off % line_length) * 8;
664 		off_t bit_end = (end % line_length) * 8;
665 
666 		x1 = bit_off / info->var.bits_per_pixel;
667 		x2 = DIV_ROUND_UP(bit_end, info->var.bits_per_pixel);
668 	}
669 
670 	drm_rect_init(clip, x1, y1, x2 - x1, y2 - y1);
671 }
672 
673 /**
674  * drm_fb_helper_deferred_io() - fbdev deferred_io callback function
675  * @info: fb_info struct pointer
676  * @pagereflist: list of mmap framebuffer pages that have to be flushed
677  *
678  * This function is used as the &fb_deferred_io.deferred_io
679  * callback function for flushing the fbdev mmap writes.
680  */
681 void drm_fb_helper_deferred_io(struct fb_info *info, struct list_head *pagereflist)
682 {
683 	struct drm_fb_helper *helper = info->par;
684 	unsigned long start, end, min_off, max_off, total_size;
685 	struct fb_deferred_io_pageref *pageref;
686 	struct drm_rect damage_area;
687 
688 	min_off = ULONG_MAX;
689 	max_off = 0;
690 	list_for_each_entry(pageref, pagereflist, list) {
691 		start = pageref->offset;
692 		end = start + PAGE_SIZE;
693 		min_off = min(min_off, start);
694 		max_off = max(max_off, end);
695 	}
696 
697 	/*
698 	 * As we can only track pages, we might reach beyond the end
699 	 * of the screen and account for non-existing scanlines. Hence,
700 	 * keep the covered memory area within the screen buffer.
701 	 */
702 	if (info->screen_size)
703 		total_size = info->screen_size;
704 	else
705 		total_size = info->fix.smem_len;
706 	max_off = min(max_off, total_size);
707 
708 	if (min_off < max_off) {
709 		drm_fb_helper_memory_range_to_clip(info, min_off, max_off - min_off, &damage_area);
710 		drm_fb_helper_damage(helper, damage_area.x1, damage_area.y1,
711 				     drm_rect_width(&damage_area),
712 				     drm_rect_height(&damage_area));
713 	}
714 }
715 EXPORT_SYMBOL(drm_fb_helper_deferred_io);
716 
717 typedef ssize_t (*drm_fb_helper_read_screen)(struct fb_info *info, char __user *buf,
718 					     size_t count, loff_t pos);
719 
720 static ssize_t __drm_fb_helper_read(struct fb_info *info, char __user *buf, size_t count,
721 				    loff_t *ppos, drm_fb_helper_read_screen read_screen)
722 {
723 	loff_t pos = *ppos;
724 	size_t total_size;
725 	ssize_t ret;
726 
727 	if (info->screen_size)
728 		total_size = info->screen_size;
729 	else
730 		total_size = info->fix.smem_len;
731 
732 	if (pos >= total_size)
733 		return 0;
734 	if (count >= total_size)
735 		count = total_size;
736 	if (total_size - count < pos)
737 		count = total_size - pos;
738 
739 	if (info->fbops->fb_sync)
740 		info->fbops->fb_sync(info);
741 
742 	ret = read_screen(info, buf, count, pos);
743 	if (ret > 0)
744 		*ppos += ret;
745 
746 	return ret;
747 }
748 
749 typedef ssize_t (*drm_fb_helper_write_screen)(struct fb_info *info, const char __user *buf,
750 					      size_t count, loff_t pos);
751 
752 static ssize_t __drm_fb_helper_write(struct fb_info *info, const char __user *buf, size_t count,
753 				     loff_t *ppos, drm_fb_helper_write_screen write_screen)
754 {
755 	loff_t pos = *ppos;
756 	size_t total_size;
757 	ssize_t ret;
758 	int err = 0;
759 
760 	if (info->screen_size)
761 		total_size = info->screen_size;
762 	else
763 		total_size = info->fix.smem_len;
764 
765 	if (pos > total_size)
766 		return -EFBIG;
767 	if (count > total_size) {
768 		err = -EFBIG;
769 		count = total_size;
770 	}
771 	if (total_size - count < pos) {
772 		if (!err)
773 			err = -ENOSPC;
774 		count = total_size - pos;
775 	}
776 
777 	if (info->fbops->fb_sync)
778 		info->fbops->fb_sync(info);
779 
780 	/*
781 	 * Copy to framebuffer even if we already logged an error. Emulates
782 	 * the behavior of the original fbdev implementation.
783 	 */
784 	ret = write_screen(info, buf, count, pos);
785 	if (ret < 0)
786 		return ret; /* return last error, if any */
787 	else if (!ret)
788 		return err; /* return previous error, if any */
789 
790 	*ppos += ret;
791 
792 	return ret;
793 }
794 
795 static ssize_t drm_fb_helper_read_screen_buffer(struct fb_info *info, char __user *buf,
796 						size_t count, loff_t pos)
797 {
798 	const char *src = info->screen_buffer + pos;
799 
800 	if (copy_to_user(buf, src, count))
801 		return -EFAULT;
802 
803 	return count;
804 }
805 
806 /**
807  * drm_fb_helper_sys_read - Implements struct &fb_ops.fb_read for system memory
808  * @info: fb_info struct pointer
809  * @buf: userspace buffer to read from framebuffer memory
810  * @count: number of bytes to read from framebuffer memory
811  * @ppos: read offset within framebuffer memory
812  *
813  * Returns:
814  * The number of bytes read on success, or an error code otherwise.
815  */
816 ssize_t drm_fb_helper_sys_read(struct fb_info *info, char __user *buf,
817 			       size_t count, loff_t *ppos)
818 {
819 	return __drm_fb_helper_read(info, buf, count, ppos, drm_fb_helper_read_screen_buffer);
820 }
821 EXPORT_SYMBOL(drm_fb_helper_sys_read);
822 
823 static ssize_t drm_fb_helper_write_screen_buffer(struct fb_info *info, const char __user *buf,
824 						 size_t count, loff_t pos)
825 {
826 	char *dst = info->screen_buffer + pos;
827 
828 	if (copy_from_user(dst, buf, count))
829 		return -EFAULT;
830 
831 	return count;
832 }
833 
834 /**
835  * drm_fb_helper_sys_write - Implements struct &fb_ops.fb_write for system memory
836  * @info: fb_info struct pointer
837  * @buf: userspace buffer to write to framebuffer memory
838  * @count: number of bytes to write to framebuffer memory
839  * @ppos: write offset within framebuffer memory
840  *
841  * Returns:
842  * The number of bytes written on success, or an error code otherwise.
843  */
844 ssize_t drm_fb_helper_sys_write(struct fb_info *info, const char __user *buf,
845 				size_t count, loff_t *ppos)
846 {
847 	struct drm_fb_helper *helper = info->par;
848 	loff_t pos = *ppos;
849 	ssize_t ret;
850 	struct drm_rect damage_area;
851 
852 	ret = __drm_fb_helper_write(info, buf, count, ppos, drm_fb_helper_write_screen_buffer);
853 	if (ret <= 0)
854 		return ret;
855 
856 	if (helper->funcs->fb_dirty) {
857 		drm_fb_helper_memory_range_to_clip(info, pos, ret, &damage_area);
858 		drm_fb_helper_damage(helper, damage_area.x1, damage_area.y1,
859 				     drm_rect_width(&damage_area),
860 				     drm_rect_height(&damage_area));
861 	}
862 
863 	return ret;
864 }
865 EXPORT_SYMBOL(drm_fb_helper_sys_write);
866 
867 /**
868  * drm_fb_helper_sys_fillrect - wrapper around sys_fillrect
869  * @info: fbdev registered by the helper
870  * @rect: info about rectangle to fill
871  *
872  * A wrapper around sys_fillrect implemented by fbdev core
873  */
874 void drm_fb_helper_sys_fillrect(struct fb_info *info,
875 				const struct fb_fillrect *rect)
876 {
877 	struct drm_fb_helper *helper = info->par;
878 
879 	sys_fillrect(info, rect);
880 
881 	if (helper->funcs->fb_dirty)
882 		drm_fb_helper_damage(helper, rect->dx, rect->dy, rect->width, rect->height);
883 }
884 EXPORT_SYMBOL(drm_fb_helper_sys_fillrect);
885 
886 /**
887  * drm_fb_helper_sys_copyarea - wrapper around sys_copyarea
888  * @info: fbdev registered by the helper
889  * @area: info about area to copy
890  *
891  * A wrapper around sys_copyarea implemented by fbdev core
892  */
893 void drm_fb_helper_sys_copyarea(struct fb_info *info,
894 				const struct fb_copyarea *area)
895 {
896 	struct drm_fb_helper *helper = info->par;
897 
898 	sys_copyarea(info, area);
899 
900 	if (helper->funcs->fb_dirty)
901 		drm_fb_helper_damage(helper, area->dx, area->dy, area->width, area->height);
902 }
903 EXPORT_SYMBOL(drm_fb_helper_sys_copyarea);
904 
905 /**
906  * drm_fb_helper_sys_imageblit - wrapper around sys_imageblit
907  * @info: fbdev registered by the helper
908  * @image: info about image to blit
909  *
910  * A wrapper around sys_imageblit implemented by fbdev core
911  */
912 void drm_fb_helper_sys_imageblit(struct fb_info *info,
913 				 const struct fb_image *image)
914 {
915 	struct drm_fb_helper *helper = info->par;
916 
917 	sys_imageblit(info, image);
918 
919 	if (helper->funcs->fb_dirty)
920 		drm_fb_helper_damage(helper, image->dx, image->dy, image->width, image->height);
921 }
922 EXPORT_SYMBOL(drm_fb_helper_sys_imageblit);
923 
924 static ssize_t fb_read_screen_base(struct fb_info *info, char __user *buf, size_t count,
925 				   loff_t pos)
926 {
927 	const char __iomem *src = info->screen_base + pos;
928 	size_t alloc_size = min_t(size_t, count, PAGE_SIZE);
929 	ssize_t ret = 0;
930 	int err = 0;
931 	char *tmp;
932 
933 	tmp = kmalloc(alloc_size, GFP_KERNEL);
934 	if (!tmp)
935 		return -ENOMEM;
936 
937 	while (count) {
938 		size_t c = min_t(size_t, count, alloc_size);
939 
940 		memcpy_fromio(tmp, src, c);
941 		if (copy_to_user(buf, tmp, c)) {
942 			err = -EFAULT;
943 			break;
944 		}
945 
946 		src += c;
947 		buf += c;
948 		ret += c;
949 		count -= c;
950 	}
951 
952 	kfree(tmp);
953 
954 	return ret ? ret : err;
955 }
956 
957 /**
958  * drm_fb_helper_cfb_read - Implements struct &fb_ops.fb_read for I/O memory
959  * @info: fb_info struct pointer
960  * @buf: userspace buffer to read from framebuffer memory
961  * @count: number of bytes to read from framebuffer memory
962  * @ppos: read offset within framebuffer memory
963  *
964  * Returns:
965  * The number of bytes read on success, or an error code otherwise.
966  */
967 ssize_t drm_fb_helper_cfb_read(struct fb_info *info, char __user *buf,
968 			       size_t count, loff_t *ppos)
969 {
970 	return __drm_fb_helper_read(info, buf, count, ppos, fb_read_screen_base);
971 }
972 EXPORT_SYMBOL(drm_fb_helper_cfb_read);
973 
974 static ssize_t fb_write_screen_base(struct fb_info *info, const char __user *buf, size_t count,
975 				    loff_t pos)
976 {
977 	char __iomem *dst = info->screen_base + pos;
978 	size_t alloc_size = min_t(size_t, count, PAGE_SIZE);
979 	ssize_t ret = 0;
980 	int err = 0;
981 	u8 *tmp;
982 
983 	tmp = kmalloc(alloc_size, GFP_KERNEL);
984 	if (!tmp)
985 		return -ENOMEM;
986 
987 	while (count) {
988 		size_t c = min_t(size_t, count, alloc_size);
989 
990 		if (copy_from_user(tmp, buf, c)) {
991 			err = -EFAULT;
992 			break;
993 		}
994 		memcpy_toio(dst, tmp, c);
995 
996 		dst += c;
997 		buf += c;
998 		ret += c;
999 		count -= c;
1000 	}
1001 
1002 	kfree(tmp);
1003 
1004 	return ret ? ret : err;
1005 }
1006 
1007 /**
1008  * drm_fb_helper_cfb_write - Implements struct &fb_ops.fb_write for I/O memory
1009  * @info: fb_info struct pointer
1010  * @buf: userspace buffer to write to framebuffer memory
1011  * @count: number of bytes to write to framebuffer memory
1012  * @ppos: write offset within framebuffer memory
1013  *
1014  * Returns:
1015  * The number of bytes written on success, or an error code otherwise.
1016  */
1017 ssize_t drm_fb_helper_cfb_write(struct fb_info *info, const char __user *buf,
1018 				size_t count, loff_t *ppos)
1019 {
1020 	struct drm_fb_helper *helper = info->par;
1021 	loff_t pos = *ppos;
1022 	ssize_t ret;
1023 	struct drm_rect damage_area;
1024 
1025 	ret = __drm_fb_helper_write(info, buf, count, ppos, fb_write_screen_base);
1026 	if (ret <= 0)
1027 		return ret;
1028 
1029 	if (helper->funcs->fb_dirty) {
1030 		drm_fb_helper_memory_range_to_clip(info, pos, ret, &damage_area);
1031 		drm_fb_helper_damage(helper, damage_area.x1, damage_area.y1,
1032 				     drm_rect_width(&damage_area),
1033 				     drm_rect_height(&damage_area));
1034 	}
1035 
1036 	return ret;
1037 }
1038 EXPORT_SYMBOL(drm_fb_helper_cfb_write);
1039 
1040 /**
1041  * drm_fb_helper_cfb_fillrect - wrapper around cfb_fillrect
1042  * @info: fbdev registered by the helper
1043  * @rect: info about rectangle to fill
1044  *
1045  * A wrapper around cfb_fillrect implemented by fbdev core
1046  */
1047 void drm_fb_helper_cfb_fillrect(struct fb_info *info,
1048 				const struct fb_fillrect *rect)
1049 {
1050 	struct drm_fb_helper *helper = info->par;
1051 
1052 	cfb_fillrect(info, rect);
1053 
1054 	if (helper->funcs->fb_dirty)
1055 		drm_fb_helper_damage(helper, rect->dx, rect->dy, rect->width, rect->height);
1056 }
1057 EXPORT_SYMBOL(drm_fb_helper_cfb_fillrect);
1058 
1059 /**
1060  * drm_fb_helper_cfb_copyarea - wrapper around cfb_copyarea
1061  * @info: fbdev registered by the helper
1062  * @area: info about area to copy
1063  *
1064  * A wrapper around cfb_copyarea implemented by fbdev core
1065  */
1066 void drm_fb_helper_cfb_copyarea(struct fb_info *info,
1067 				const struct fb_copyarea *area)
1068 {
1069 	struct drm_fb_helper *helper = info->par;
1070 
1071 	cfb_copyarea(info, area);
1072 
1073 	if (helper->funcs->fb_dirty)
1074 		drm_fb_helper_damage(helper, area->dx, area->dy, area->width, area->height);
1075 }
1076 EXPORT_SYMBOL(drm_fb_helper_cfb_copyarea);
1077 
1078 /**
1079  * drm_fb_helper_cfb_imageblit - wrapper around cfb_imageblit
1080  * @info: fbdev registered by the helper
1081  * @image: info about image to blit
1082  *
1083  * A wrapper around cfb_imageblit implemented by fbdev core
1084  */
1085 void drm_fb_helper_cfb_imageblit(struct fb_info *info,
1086 				 const struct fb_image *image)
1087 {
1088 	struct drm_fb_helper *helper = info->par;
1089 
1090 	cfb_imageblit(info, image);
1091 
1092 	if (helper->funcs->fb_dirty)
1093 		drm_fb_helper_damage(helper, image->dx, image->dy, image->width, image->height);
1094 }
1095 EXPORT_SYMBOL(drm_fb_helper_cfb_imageblit);
1096 
1097 /**
1098  * drm_fb_helper_set_suspend - wrapper around fb_set_suspend
1099  * @fb_helper: driver-allocated fbdev helper, can be NULL
1100  * @suspend: whether to suspend or resume
1101  *
1102  * A wrapper around fb_set_suspend implemented by fbdev core.
1103  * Use drm_fb_helper_set_suspend_unlocked() if you don't need to take
1104  * the lock yourself
1105  */
1106 void drm_fb_helper_set_suspend(struct drm_fb_helper *fb_helper, bool suspend)
1107 {
1108 	if (fb_helper && fb_helper->info)
1109 		fb_set_suspend(fb_helper->info, suspend);
1110 }
1111 EXPORT_SYMBOL(drm_fb_helper_set_suspend);
1112 
1113 /**
1114  * drm_fb_helper_set_suspend_unlocked - wrapper around fb_set_suspend that also
1115  *                                      takes the console lock
1116  * @fb_helper: driver-allocated fbdev helper, can be NULL
1117  * @suspend: whether to suspend or resume
1118  *
1119  * A wrapper around fb_set_suspend() that takes the console lock. If the lock
1120  * isn't available on resume, a worker is tasked with waiting for the lock
1121  * to become available. The console lock can be pretty contented on resume
1122  * due to all the printk activity.
1123  *
1124  * This function can be called multiple times with the same state since
1125  * &fb_info.state is checked to see if fbdev is running or not before locking.
1126  *
1127  * Use drm_fb_helper_set_suspend() if you need to take the lock yourself.
1128  */
1129 void drm_fb_helper_set_suspend_unlocked(struct drm_fb_helper *fb_helper,
1130 					bool suspend)
1131 {
1132 	if (!fb_helper || !fb_helper->info)
1133 		return;
1134 
1135 	/* make sure there's no pending/ongoing resume */
1136 	flush_work(&fb_helper->resume_work);
1137 
1138 	if (suspend) {
1139 		if (fb_helper->info->state != FBINFO_STATE_RUNNING)
1140 			return;
1141 
1142 		console_lock();
1143 
1144 	} else {
1145 		if (fb_helper->info->state == FBINFO_STATE_RUNNING)
1146 			return;
1147 
1148 		if (!console_trylock()) {
1149 			schedule_work(&fb_helper->resume_work);
1150 			return;
1151 		}
1152 	}
1153 
1154 	fb_set_suspend(fb_helper->info, suspend);
1155 	console_unlock();
1156 }
1157 EXPORT_SYMBOL(drm_fb_helper_set_suspend_unlocked);
1158 
1159 static int setcmap_pseudo_palette(struct fb_cmap *cmap, struct fb_info *info)
1160 {
1161 	u32 *palette = (u32 *)info->pseudo_palette;
1162 	int i;
1163 
1164 	if (cmap->start + cmap->len > 16)
1165 		return -EINVAL;
1166 
1167 	for (i = 0; i < cmap->len; ++i) {
1168 		u16 red = cmap->red[i];
1169 		u16 green = cmap->green[i];
1170 		u16 blue = cmap->blue[i];
1171 		u32 value;
1172 
1173 		red >>= 16 - info->var.red.length;
1174 		green >>= 16 - info->var.green.length;
1175 		blue >>= 16 - info->var.blue.length;
1176 		value = (red << info->var.red.offset) |
1177 			(green << info->var.green.offset) |
1178 			(blue << info->var.blue.offset);
1179 		if (info->var.transp.length > 0) {
1180 			u32 mask = (1 << info->var.transp.length) - 1;
1181 
1182 			mask <<= info->var.transp.offset;
1183 			value |= mask;
1184 		}
1185 		palette[cmap->start + i] = value;
1186 	}
1187 
1188 	return 0;
1189 }
1190 
1191 static int setcmap_legacy(struct fb_cmap *cmap, struct fb_info *info)
1192 {
1193 	struct drm_fb_helper *fb_helper = info->par;
1194 	struct drm_mode_set *modeset;
1195 	struct drm_crtc *crtc;
1196 	u16 *r, *g, *b;
1197 	int ret = 0;
1198 
1199 	drm_modeset_lock_all(fb_helper->dev);
1200 	drm_client_for_each_modeset(modeset, &fb_helper->client) {
1201 		crtc = modeset->crtc;
1202 		if (!crtc->funcs->gamma_set || !crtc->gamma_size) {
1203 			ret = -EINVAL;
1204 			goto out;
1205 		}
1206 
1207 		if (cmap->start + cmap->len > crtc->gamma_size) {
1208 			ret = -EINVAL;
1209 			goto out;
1210 		}
1211 
1212 		r = crtc->gamma_store;
1213 		g = r + crtc->gamma_size;
1214 		b = g + crtc->gamma_size;
1215 
1216 		memcpy(r + cmap->start, cmap->red, cmap->len * sizeof(*r));
1217 		memcpy(g + cmap->start, cmap->green, cmap->len * sizeof(*g));
1218 		memcpy(b + cmap->start, cmap->blue, cmap->len * sizeof(*b));
1219 
1220 		ret = crtc->funcs->gamma_set(crtc, r, g, b,
1221 					     crtc->gamma_size, NULL);
1222 		if (ret)
1223 			goto out;
1224 	}
1225 out:
1226 	drm_modeset_unlock_all(fb_helper->dev);
1227 
1228 	return ret;
1229 }
1230 
1231 static struct drm_property_blob *setcmap_new_gamma_lut(struct drm_crtc *crtc,
1232 						       struct fb_cmap *cmap)
1233 {
1234 	struct drm_device *dev = crtc->dev;
1235 	struct drm_property_blob *gamma_lut;
1236 	struct drm_color_lut *lut;
1237 	int size = crtc->gamma_size;
1238 	int i;
1239 
1240 	if (!size || cmap->start + cmap->len > size)
1241 		return ERR_PTR(-EINVAL);
1242 
1243 	gamma_lut = drm_property_create_blob(dev, sizeof(*lut) * size, NULL);
1244 	if (IS_ERR(gamma_lut))
1245 		return gamma_lut;
1246 
1247 	lut = gamma_lut->data;
1248 	if (cmap->start || cmap->len != size) {
1249 		u16 *r = crtc->gamma_store;
1250 		u16 *g = r + crtc->gamma_size;
1251 		u16 *b = g + crtc->gamma_size;
1252 
1253 		for (i = 0; i < cmap->start; i++) {
1254 			lut[i].red = r[i];
1255 			lut[i].green = g[i];
1256 			lut[i].blue = b[i];
1257 		}
1258 		for (i = cmap->start + cmap->len; i < size; i++) {
1259 			lut[i].red = r[i];
1260 			lut[i].green = g[i];
1261 			lut[i].blue = b[i];
1262 		}
1263 	}
1264 
1265 	for (i = 0; i < cmap->len; i++) {
1266 		lut[cmap->start + i].red = cmap->red[i];
1267 		lut[cmap->start + i].green = cmap->green[i];
1268 		lut[cmap->start + i].blue = cmap->blue[i];
1269 	}
1270 
1271 	return gamma_lut;
1272 }
1273 
1274 static int setcmap_atomic(struct fb_cmap *cmap, struct fb_info *info)
1275 {
1276 	struct drm_fb_helper *fb_helper = info->par;
1277 	struct drm_device *dev = fb_helper->dev;
1278 	struct drm_property_blob *gamma_lut = NULL;
1279 	struct drm_modeset_acquire_ctx ctx;
1280 	struct drm_crtc_state *crtc_state;
1281 	struct drm_atomic_state *state;
1282 	struct drm_mode_set *modeset;
1283 	struct drm_crtc *crtc;
1284 	u16 *r, *g, *b;
1285 	bool replaced;
1286 	int ret = 0;
1287 
1288 	drm_modeset_acquire_init(&ctx, 0);
1289 
1290 	state = drm_atomic_state_alloc(dev);
1291 	if (!state) {
1292 		ret = -ENOMEM;
1293 		goto out_ctx;
1294 	}
1295 
1296 	state->acquire_ctx = &ctx;
1297 retry:
1298 	drm_client_for_each_modeset(modeset, &fb_helper->client) {
1299 		crtc = modeset->crtc;
1300 
1301 		if (!gamma_lut)
1302 			gamma_lut = setcmap_new_gamma_lut(crtc, cmap);
1303 		if (IS_ERR(gamma_lut)) {
1304 			ret = PTR_ERR(gamma_lut);
1305 			gamma_lut = NULL;
1306 			goto out_state;
1307 		}
1308 
1309 		crtc_state = drm_atomic_get_crtc_state(state, crtc);
1310 		if (IS_ERR(crtc_state)) {
1311 			ret = PTR_ERR(crtc_state);
1312 			goto out_state;
1313 		}
1314 
1315 		/*
1316 		 * FIXME: This always uses gamma_lut. Some HW have only
1317 		 * degamma_lut, in which case we should reset gamma_lut and set
1318 		 * degamma_lut. See drm_crtc_legacy_gamma_set().
1319 		 */
1320 		replaced  = drm_property_replace_blob(&crtc_state->degamma_lut,
1321 						      NULL);
1322 		replaced |= drm_property_replace_blob(&crtc_state->ctm, NULL);
1323 		replaced |= drm_property_replace_blob(&crtc_state->gamma_lut,
1324 						      gamma_lut);
1325 		crtc_state->color_mgmt_changed |= replaced;
1326 	}
1327 
1328 	ret = drm_atomic_commit(state);
1329 	if (ret)
1330 		goto out_state;
1331 
1332 	drm_client_for_each_modeset(modeset, &fb_helper->client) {
1333 		crtc = modeset->crtc;
1334 
1335 		r = crtc->gamma_store;
1336 		g = r + crtc->gamma_size;
1337 		b = g + crtc->gamma_size;
1338 
1339 		memcpy(r + cmap->start, cmap->red, cmap->len * sizeof(*r));
1340 		memcpy(g + cmap->start, cmap->green, cmap->len * sizeof(*g));
1341 		memcpy(b + cmap->start, cmap->blue, cmap->len * sizeof(*b));
1342 	}
1343 
1344 out_state:
1345 	if (ret == -EDEADLK)
1346 		goto backoff;
1347 
1348 	drm_property_blob_put(gamma_lut);
1349 	drm_atomic_state_put(state);
1350 out_ctx:
1351 	drm_modeset_drop_locks(&ctx);
1352 	drm_modeset_acquire_fini(&ctx);
1353 
1354 	return ret;
1355 
1356 backoff:
1357 	drm_atomic_state_clear(state);
1358 	drm_modeset_backoff(&ctx);
1359 	goto retry;
1360 }
1361 
1362 /**
1363  * drm_fb_helper_setcmap - implementation for &fb_ops.fb_setcmap
1364  * @cmap: cmap to set
1365  * @info: fbdev registered by the helper
1366  */
1367 int drm_fb_helper_setcmap(struct fb_cmap *cmap, struct fb_info *info)
1368 {
1369 	struct drm_fb_helper *fb_helper = info->par;
1370 	struct drm_device *dev = fb_helper->dev;
1371 	int ret;
1372 
1373 	if (oops_in_progress)
1374 		return -EBUSY;
1375 
1376 	mutex_lock(&fb_helper->lock);
1377 
1378 	if (!drm_master_internal_acquire(dev)) {
1379 		ret = -EBUSY;
1380 		goto unlock;
1381 	}
1382 
1383 	mutex_lock(&fb_helper->client.modeset_mutex);
1384 	if (info->fix.visual == FB_VISUAL_TRUECOLOR)
1385 		ret = setcmap_pseudo_palette(cmap, info);
1386 	else if (drm_drv_uses_atomic_modeset(fb_helper->dev))
1387 		ret = setcmap_atomic(cmap, info);
1388 	else
1389 		ret = setcmap_legacy(cmap, info);
1390 	mutex_unlock(&fb_helper->client.modeset_mutex);
1391 
1392 	drm_master_internal_release(dev);
1393 unlock:
1394 	mutex_unlock(&fb_helper->lock);
1395 
1396 	return ret;
1397 }
1398 EXPORT_SYMBOL(drm_fb_helper_setcmap);
1399 
1400 /**
1401  * drm_fb_helper_ioctl - legacy ioctl implementation
1402  * @info: fbdev registered by the helper
1403  * @cmd: ioctl command
1404  * @arg: ioctl argument
1405  *
1406  * A helper to implement the standard fbdev ioctl. Only
1407  * FBIO_WAITFORVSYNC is implemented for now.
1408  */
1409 int drm_fb_helper_ioctl(struct fb_info *info, unsigned int cmd,
1410 			unsigned long arg)
1411 {
1412 	struct drm_fb_helper *fb_helper = info->par;
1413 	struct drm_device *dev = fb_helper->dev;
1414 	struct drm_crtc *crtc;
1415 	int ret = 0;
1416 
1417 	mutex_lock(&fb_helper->lock);
1418 	if (!drm_master_internal_acquire(dev)) {
1419 		ret = -EBUSY;
1420 		goto unlock;
1421 	}
1422 
1423 	switch (cmd) {
1424 	case FBIO_WAITFORVSYNC:
1425 		/*
1426 		 * Only consider the first CRTC.
1427 		 *
1428 		 * This ioctl is supposed to take the CRTC number as
1429 		 * an argument, but in fbdev times, what that number
1430 		 * was supposed to be was quite unclear, different
1431 		 * drivers were passing that argument differently
1432 		 * (some by reference, some by value), and most of the
1433 		 * userspace applications were just hardcoding 0 as an
1434 		 * argument.
1435 		 *
1436 		 * The first CRTC should be the integrated panel on
1437 		 * most drivers, so this is the best choice we can
1438 		 * make. If we're not smart enough here, one should
1439 		 * just consider switch the userspace to KMS.
1440 		 */
1441 		crtc = fb_helper->client.modesets[0].crtc;
1442 
1443 		/*
1444 		 * Only wait for a vblank event if the CRTC is
1445 		 * enabled, otherwise just don't do anythintg,
1446 		 * not even report an error.
1447 		 */
1448 		ret = drm_crtc_vblank_get(crtc);
1449 		if (!ret) {
1450 			drm_crtc_wait_one_vblank(crtc);
1451 			drm_crtc_vblank_put(crtc);
1452 		}
1453 
1454 		ret = 0;
1455 		break;
1456 	default:
1457 		ret = -ENOTTY;
1458 	}
1459 
1460 	drm_master_internal_release(dev);
1461 unlock:
1462 	mutex_unlock(&fb_helper->lock);
1463 	return ret;
1464 }
1465 EXPORT_SYMBOL(drm_fb_helper_ioctl);
1466 
1467 static bool drm_fb_pixel_format_equal(const struct fb_var_screeninfo *var_1,
1468 				      const struct fb_var_screeninfo *var_2)
1469 {
1470 	return var_1->bits_per_pixel == var_2->bits_per_pixel &&
1471 	       var_1->grayscale == var_2->grayscale &&
1472 	       var_1->red.offset == var_2->red.offset &&
1473 	       var_1->red.length == var_2->red.length &&
1474 	       var_1->red.msb_right == var_2->red.msb_right &&
1475 	       var_1->green.offset == var_2->green.offset &&
1476 	       var_1->green.length == var_2->green.length &&
1477 	       var_1->green.msb_right == var_2->green.msb_right &&
1478 	       var_1->blue.offset == var_2->blue.offset &&
1479 	       var_1->blue.length == var_2->blue.length &&
1480 	       var_1->blue.msb_right == var_2->blue.msb_right &&
1481 	       var_1->transp.offset == var_2->transp.offset &&
1482 	       var_1->transp.length == var_2->transp.length &&
1483 	       var_1->transp.msb_right == var_2->transp.msb_right;
1484 }
1485 
1486 static void drm_fb_helper_fill_pixel_fmt(struct fb_var_screeninfo *var,
1487 					 const struct drm_format_info *format)
1488 {
1489 	u8 depth = format->depth;
1490 
1491 	if (format->is_color_indexed) {
1492 		var->red.offset = 0;
1493 		var->green.offset = 0;
1494 		var->blue.offset = 0;
1495 		var->red.length = depth;
1496 		var->green.length = depth;
1497 		var->blue.length = depth;
1498 		var->transp.offset = 0;
1499 		var->transp.length = 0;
1500 		return;
1501 	}
1502 
1503 	switch (depth) {
1504 	case 15:
1505 		var->red.offset = 10;
1506 		var->green.offset = 5;
1507 		var->blue.offset = 0;
1508 		var->red.length = 5;
1509 		var->green.length = 5;
1510 		var->blue.length = 5;
1511 		var->transp.offset = 15;
1512 		var->transp.length = 1;
1513 		break;
1514 	case 16:
1515 		var->red.offset = 11;
1516 		var->green.offset = 5;
1517 		var->blue.offset = 0;
1518 		var->red.length = 5;
1519 		var->green.length = 6;
1520 		var->blue.length = 5;
1521 		var->transp.offset = 0;
1522 		break;
1523 	case 24:
1524 		var->red.offset = 16;
1525 		var->green.offset = 8;
1526 		var->blue.offset = 0;
1527 		var->red.length = 8;
1528 		var->green.length = 8;
1529 		var->blue.length = 8;
1530 		var->transp.offset = 0;
1531 		var->transp.length = 0;
1532 		break;
1533 	case 32:
1534 		var->red.offset = 16;
1535 		var->green.offset = 8;
1536 		var->blue.offset = 0;
1537 		var->red.length = 8;
1538 		var->green.length = 8;
1539 		var->blue.length = 8;
1540 		var->transp.offset = 24;
1541 		var->transp.length = 8;
1542 		break;
1543 	default:
1544 		break;
1545 	}
1546 }
1547 
1548 static void __fill_var(struct fb_var_screeninfo *var,
1549 		       struct drm_framebuffer *fb)
1550 {
1551 	int i;
1552 
1553 	var->xres_virtual = fb->width;
1554 	var->yres_virtual = fb->height;
1555 	var->accel_flags = FB_ACCELF_TEXT;
1556 	var->bits_per_pixel = drm_format_info_bpp(fb->format, 0);
1557 
1558 	var->height = var->width = 0;
1559 	var->left_margin = var->right_margin = 0;
1560 	var->upper_margin = var->lower_margin = 0;
1561 	var->hsync_len = var->vsync_len = 0;
1562 	var->sync = var->vmode = 0;
1563 	var->rotate = 0;
1564 	var->colorspace = 0;
1565 	for (i = 0; i < 4; i++)
1566 		var->reserved[i] = 0;
1567 }
1568 
1569 /**
1570  * drm_fb_helper_check_var - implementation for &fb_ops.fb_check_var
1571  * @var: screeninfo to check
1572  * @info: fbdev registered by the helper
1573  */
1574 int drm_fb_helper_check_var(struct fb_var_screeninfo *var,
1575 			    struct fb_info *info)
1576 {
1577 	struct drm_fb_helper *fb_helper = info->par;
1578 	struct drm_framebuffer *fb = fb_helper->fb;
1579 	const struct drm_format_info *format = fb->format;
1580 	struct drm_device *dev = fb_helper->dev;
1581 	unsigned int bpp;
1582 
1583 	if (in_dbg_master())
1584 		return -EINVAL;
1585 
1586 	if (var->pixclock != 0) {
1587 		drm_dbg_kms(dev, "fbdev emulation doesn't support changing the pixel clock, value of pixclock is ignored\n");
1588 		var->pixclock = 0;
1589 	}
1590 
1591 	switch (format->format) {
1592 	case DRM_FORMAT_C1:
1593 	case DRM_FORMAT_C2:
1594 	case DRM_FORMAT_C4:
1595 		/* supported format with sub-byte pixels */
1596 		break;
1597 
1598 	default:
1599 		if ((drm_format_info_block_width(format, 0) > 1) ||
1600 		    (drm_format_info_block_height(format, 0) > 1))
1601 			return -EINVAL;
1602 		break;
1603 	}
1604 
1605 	/*
1606 	 * Changes struct fb_var_screeninfo are currently not pushed back
1607 	 * to KMS, hence fail if different settings are requested.
1608 	 */
1609 	bpp = drm_format_info_bpp(format, 0);
1610 	if (var->bits_per_pixel > bpp ||
1611 	    var->xres > fb->width || var->yres > fb->height ||
1612 	    var->xres_virtual > fb->width || var->yres_virtual > fb->height) {
1613 		drm_dbg_kms(dev, "fb requested width/height/bpp can't fit in current fb "
1614 			  "request %dx%d-%d (virtual %dx%d) > %dx%d-%d\n",
1615 			  var->xres, var->yres, var->bits_per_pixel,
1616 			  var->xres_virtual, var->yres_virtual,
1617 			  fb->width, fb->height, bpp);
1618 		return -EINVAL;
1619 	}
1620 
1621 	__fill_var(var, fb);
1622 
1623 	/*
1624 	 * fb_pan_display() validates this, but fb_set_par() doesn't and just
1625 	 * falls over. Note that __fill_var above adjusts y/res_virtual.
1626 	 */
1627 	if (var->yoffset > var->yres_virtual - var->yres ||
1628 	    var->xoffset > var->xres_virtual - var->xres)
1629 		return -EINVAL;
1630 
1631 	/* We neither support grayscale nor FOURCC (also stored in here). */
1632 	if (var->grayscale > 0)
1633 		return -EINVAL;
1634 
1635 	if (var->nonstd)
1636 		return -EINVAL;
1637 
1638 	/*
1639 	 * Workaround for SDL 1.2, which is known to be setting all pixel format
1640 	 * fields values to zero in some cases. We treat this situation as a
1641 	 * kind of "use some reasonable autodetected values".
1642 	 */
1643 	if (!var->red.offset     && !var->green.offset    &&
1644 	    !var->blue.offset    && !var->transp.offset   &&
1645 	    !var->red.length     && !var->green.length    &&
1646 	    !var->blue.length    && !var->transp.length   &&
1647 	    !var->red.msb_right  && !var->green.msb_right &&
1648 	    !var->blue.msb_right && !var->transp.msb_right) {
1649 		drm_fb_helper_fill_pixel_fmt(var, format);
1650 	}
1651 
1652 	/*
1653 	 * drm fbdev emulation doesn't support changing the pixel format at all,
1654 	 * so reject all pixel format changing requests.
1655 	 */
1656 	if (!drm_fb_pixel_format_equal(var, &info->var)) {
1657 		drm_dbg_kms(dev, "fbdev emulation doesn't support changing the pixel format\n");
1658 		return -EINVAL;
1659 	}
1660 
1661 	return 0;
1662 }
1663 EXPORT_SYMBOL(drm_fb_helper_check_var);
1664 
1665 /**
1666  * drm_fb_helper_set_par - implementation for &fb_ops.fb_set_par
1667  * @info: fbdev registered by the helper
1668  *
1669  * This will let fbcon do the mode init and is called at initialization time by
1670  * the fbdev core when registering the driver, and later on through the hotplug
1671  * callback.
1672  */
1673 int drm_fb_helper_set_par(struct fb_info *info)
1674 {
1675 	struct drm_fb_helper *fb_helper = info->par;
1676 	struct fb_var_screeninfo *var = &info->var;
1677 	bool force;
1678 
1679 	if (oops_in_progress)
1680 		return -EBUSY;
1681 
1682 	/*
1683 	 * Normally we want to make sure that a kms master takes precedence over
1684 	 * fbdev, to avoid fbdev flickering and occasionally stealing the
1685 	 * display status. But Xorg first sets the vt back to text mode using
1686 	 * the KDSET IOCTL with KD_TEXT, and only after that drops the master
1687 	 * status when exiting.
1688 	 *
1689 	 * In the past this was caught by drm_fb_helper_lastclose(), but on
1690 	 * modern systems where logind always keeps a drm fd open to orchestrate
1691 	 * the vt switching, this doesn't work.
1692 	 *
1693 	 * To not break the userspace ABI we have this special case here, which
1694 	 * is only used for the above case. Everything else uses the normal
1695 	 * commit function, which ensures that we never steal the display from
1696 	 * an active drm master.
1697 	 */
1698 	force = var->activate & FB_ACTIVATE_KD_TEXT;
1699 
1700 	__drm_fb_helper_restore_fbdev_mode_unlocked(fb_helper, force);
1701 
1702 	return 0;
1703 }
1704 EXPORT_SYMBOL(drm_fb_helper_set_par);
1705 
1706 static void pan_set(struct drm_fb_helper *fb_helper, int x, int y)
1707 {
1708 	struct drm_mode_set *mode_set;
1709 
1710 	mutex_lock(&fb_helper->client.modeset_mutex);
1711 	drm_client_for_each_modeset(mode_set, &fb_helper->client) {
1712 		mode_set->x = x;
1713 		mode_set->y = y;
1714 	}
1715 	mutex_unlock(&fb_helper->client.modeset_mutex);
1716 }
1717 
1718 static int pan_display_atomic(struct fb_var_screeninfo *var,
1719 			      struct fb_info *info)
1720 {
1721 	struct drm_fb_helper *fb_helper = info->par;
1722 	int ret;
1723 
1724 	pan_set(fb_helper, var->xoffset, var->yoffset);
1725 
1726 	ret = drm_client_modeset_commit_locked(&fb_helper->client);
1727 	if (!ret) {
1728 		info->var.xoffset = var->xoffset;
1729 		info->var.yoffset = var->yoffset;
1730 	} else
1731 		pan_set(fb_helper, info->var.xoffset, info->var.yoffset);
1732 
1733 	return ret;
1734 }
1735 
1736 static int pan_display_legacy(struct fb_var_screeninfo *var,
1737 			      struct fb_info *info)
1738 {
1739 	struct drm_fb_helper *fb_helper = info->par;
1740 	struct drm_client_dev *client = &fb_helper->client;
1741 	struct drm_mode_set *modeset;
1742 	int ret = 0;
1743 
1744 	mutex_lock(&client->modeset_mutex);
1745 	drm_modeset_lock_all(fb_helper->dev);
1746 	drm_client_for_each_modeset(modeset, client) {
1747 		modeset->x = var->xoffset;
1748 		modeset->y = var->yoffset;
1749 
1750 		if (modeset->num_connectors) {
1751 			ret = drm_mode_set_config_internal(modeset);
1752 			if (!ret) {
1753 				info->var.xoffset = var->xoffset;
1754 				info->var.yoffset = var->yoffset;
1755 			}
1756 		}
1757 	}
1758 	drm_modeset_unlock_all(fb_helper->dev);
1759 	mutex_unlock(&client->modeset_mutex);
1760 
1761 	return ret;
1762 }
1763 
1764 /**
1765  * drm_fb_helper_pan_display - implementation for &fb_ops.fb_pan_display
1766  * @var: updated screen information
1767  * @info: fbdev registered by the helper
1768  */
1769 int drm_fb_helper_pan_display(struct fb_var_screeninfo *var,
1770 			      struct fb_info *info)
1771 {
1772 	struct drm_fb_helper *fb_helper = info->par;
1773 	struct drm_device *dev = fb_helper->dev;
1774 	int ret;
1775 
1776 	if (oops_in_progress)
1777 		return -EBUSY;
1778 
1779 	mutex_lock(&fb_helper->lock);
1780 	if (!drm_master_internal_acquire(dev)) {
1781 		ret = -EBUSY;
1782 		goto unlock;
1783 	}
1784 
1785 	if (drm_drv_uses_atomic_modeset(dev))
1786 		ret = pan_display_atomic(var, info);
1787 	else
1788 		ret = pan_display_legacy(var, info);
1789 
1790 	drm_master_internal_release(dev);
1791 unlock:
1792 	mutex_unlock(&fb_helper->lock);
1793 
1794 	return ret;
1795 }
1796 EXPORT_SYMBOL(drm_fb_helper_pan_display);
1797 
1798 static uint32_t drm_fb_helper_find_format(struct drm_fb_helper *fb_helper, const uint32_t *formats,
1799 					  size_t format_count, uint32_t bpp, uint32_t depth)
1800 {
1801 	struct drm_device *dev = fb_helper->dev;
1802 	uint32_t format;
1803 	size_t i;
1804 
1805 	/*
1806 	 * Do not consider YUV or other complicated formats
1807 	 * for framebuffers. This means only legacy formats
1808 	 * are supported (fmt->depth is a legacy field), but
1809 	 * the framebuffer emulation can only deal with such
1810 	 * formats, specifically RGB/BGA formats.
1811 	 */
1812 	format = drm_mode_legacy_fb_format(bpp, depth);
1813 	if (!format)
1814 		goto err;
1815 
1816 	for (i = 0; i < format_count; ++i) {
1817 		if (formats[i] == format)
1818 			return format;
1819 	}
1820 
1821 err:
1822 	/* We found nothing. */
1823 	drm_warn(dev, "bpp/depth value of %u/%u not supported\n", bpp, depth);
1824 
1825 	return DRM_FORMAT_INVALID;
1826 }
1827 
1828 static uint32_t drm_fb_helper_find_color_mode_format(struct drm_fb_helper *fb_helper,
1829 						     const uint32_t *formats, size_t format_count,
1830 						     unsigned int color_mode)
1831 {
1832 	struct drm_device *dev = fb_helper->dev;
1833 	uint32_t bpp, depth;
1834 
1835 	switch (color_mode) {
1836 	case 1:
1837 	case 2:
1838 	case 4:
1839 	case 8:
1840 	case 16:
1841 	case 24:
1842 		bpp = depth = color_mode;
1843 		break;
1844 	case 15:
1845 		bpp = 16;
1846 		depth = 15;
1847 		break;
1848 	case 32:
1849 		bpp = 32;
1850 		depth = 24;
1851 		break;
1852 	default:
1853 		drm_info(dev, "unsupported color mode of %d\n", color_mode);
1854 		return DRM_FORMAT_INVALID;
1855 	}
1856 
1857 	return drm_fb_helper_find_format(fb_helper, formats, format_count, bpp, depth);
1858 }
1859 
1860 static int __drm_fb_helper_find_sizes(struct drm_fb_helper *fb_helper,
1861 				      struct drm_fb_helper_surface_size *sizes)
1862 {
1863 	struct drm_client_dev *client = &fb_helper->client;
1864 	struct drm_device *dev = fb_helper->dev;
1865 	int crtc_count = 0;
1866 	struct drm_connector_list_iter conn_iter;
1867 	struct drm_connector *connector;
1868 	struct drm_mode_set *mode_set;
1869 	uint32_t surface_format = DRM_FORMAT_INVALID;
1870 	const struct drm_format_info *info;
1871 
1872 	memset(sizes, 0, sizeof(*sizes));
1873 	sizes->fb_width = (u32)-1;
1874 	sizes->fb_height = (u32)-1;
1875 
1876 	drm_client_for_each_modeset(mode_set, client) {
1877 		struct drm_crtc *crtc = mode_set->crtc;
1878 		struct drm_plane *plane = crtc->primary;
1879 
1880 		drm_dbg_kms(dev, "test CRTC %u primary plane\n", drm_crtc_index(crtc));
1881 
1882 		drm_connector_list_iter_begin(fb_helper->dev, &conn_iter);
1883 		drm_client_for_each_connector_iter(connector, &conn_iter) {
1884 			struct drm_cmdline_mode *cmdline_mode = &connector->cmdline_mode;
1885 
1886 			if (!cmdline_mode->bpp_specified)
1887 				continue;
1888 
1889 			surface_format = drm_fb_helper_find_color_mode_format(fb_helper,
1890 									      plane->format_types,
1891 									      plane->format_count,
1892 									      cmdline_mode->bpp);
1893 			if (surface_format != DRM_FORMAT_INVALID)
1894 				break; /* found supported format */
1895 		}
1896 		drm_connector_list_iter_end(&conn_iter);
1897 
1898 		if (surface_format != DRM_FORMAT_INVALID)
1899 			break; /* found supported format */
1900 
1901 		/* try preferred color mode */
1902 		surface_format = drm_fb_helper_find_color_mode_format(fb_helper,
1903 								      plane->format_types,
1904 								      plane->format_count,
1905 								      fb_helper->preferred_bpp);
1906 		if (surface_format != DRM_FORMAT_INVALID)
1907 			break; /* found supported format */
1908 	}
1909 
1910 	if (surface_format == DRM_FORMAT_INVALID) {
1911 		/*
1912 		 * If none of the given color modes works, fall back
1913 		 * to XRGB8888. Drivers are expected to provide this
1914 		 * format for compatibility with legacy applications.
1915 		 */
1916 		drm_warn(dev, "No compatible format found\n");
1917 		surface_format = drm_driver_legacy_fb_format(dev, 32, 24);
1918 	}
1919 
1920 	info = drm_format_info(surface_format);
1921 	sizes->surface_bpp = drm_format_info_bpp(info, 0);
1922 	sizes->surface_depth = info->depth;
1923 
1924 	/* first up get a count of crtcs now in use and new min/maxes width/heights */
1925 	crtc_count = 0;
1926 	drm_client_for_each_modeset(mode_set, client) {
1927 		struct drm_display_mode *desired_mode;
1928 		int x, y, j;
1929 		/* in case of tile group, are we the last tile vert or horiz?
1930 		 * If no tile group you are always the last one both vertically
1931 		 * and horizontally
1932 		 */
1933 		bool lastv = true, lasth = true;
1934 
1935 		desired_mode = mode_set->mode;
1936 
1937 		if (!desired_mode)
1938 			continue;
1939 
1940 		crtc_count++;
1941 
1942 		x = mode_set->x;
1943 		y = mode_set->y;
1944 
1945 		sizes->surface_width  =
1946 			max_t(u32, desired_mode->hdisplay + x, sizes->surface_width);
1947 		sizes->surface_height =
1948 			max_t(u32, desired_mode->vdisplay + y, sizes->surface_height);
1949 
1950 		for (j = 0; j < mode_set->num_connectors; j++) {
1951 			struct drm_connector *connector = mode_set->connectors[j];
1952 
1953 			if (connector->has_tile &&
1954 			    desired_mode->hdisplay == connector->tile_h_size &&
1955 			    desired_mode->vdisplay == connector->tile_v_size) {
1956 				lasth = (connector->tile_h_loc == (connector->num_h_tile - 1));
1957 				lastv = (connector->tile_v_loc == (connector->num_v_tile - 1));
1958 				/* cloning to multiple tiles is just crazy-talk, so: */
1959 				break;
1960 			}
1961 		}
1962 
1963 		if (lasth)
1964 			sizes->fb_width  = min_t(u32, desired_mode->hdisplay + x, sizes->fb_width);
1965 		if (lastv)
1966 			sizes->fb_height = min_t(u32, desired_mode->vdisplay + y, sizes->fb_height);
1967 	}
1968 
1969 	if (crtc_count == 0 || sizes->fb_width == -1 || sizes->fb_height == -1) {
1970 		drm_info(dev, "Cannot find any crtc or sizes\n");
1971 		return -EAGAIN;
1972 	}
1973 
1974 	return 0;
1975 }
1976 
1977 static int drm_fb_helper_find_sizes(struct drm_fb_helper *fb_helper,
1978 				    struct drm_fb_helper_surface_size *sizes)
1979 {
1980 	struct drm_client_dev *client = &fb_helper->client;
1981 	struct drm_device *dev = fb_helper->dev;
1982 	struct drm_mode_config *config = &dev->mode_config;
1983 	int ret;
1984 
1985 	mutex_lock(&client->modeset_mutex);
1986 	ret = __drm_fb_helper_find_sizes(fb_helper, sizes);
1987 	mutex_unlock(&client->modeset_mutex);
1988 
1989 	if (ret)
1990 		return ret;
1991 
1992 	/* Handle our overallocation */
1993 	sizes->surface_height *= drm_fbdev_overalloc;
1994 	sizes->surface_height /= 100;
1995 	if (sizes->surface_height > config->max_height) {
1996 		drm_dbg_kms(dev, "Fbdev over-allocation too large; clamping height to %d\n",
1997 			    config->max_height);
1998 		sizes->surface_height = config->max_height;
1999 	}
2000 
2001 	return 0;
2002 }
2003 
2004 /*
2005  * Allocates the backing storage and sets up the fbdev info structure through
2006  * the ->fb_probe callback.
2007  */
2008 static int drm_fb_helper_single_fb_probe(struct drm_fb_helper *fb_helper)
2009 {
2010 	struct drm_client_dev *client = &fb_helper->client;
2011 	struct drm_device *dev = fb_helper->dev;
2012 	struct drm_fb_helper_surface_size sizes;
2013 	int ret;
2014 
2015 	ret = drm_fb_helper_find_sizes(fb_helper, &sizes);
2016 	if (ret) {
2017 		/* First time: disable all crtc's.. */
2018 		if (!fb_helper->deferred_setup)
2019 			drm_client_modeset_commit(client);
2020 		return ret;
2021 	}
2022 
2023 	/* push down into drivers */
2024 	ret = (*fb_helper->funcs->fb_probe)(fb_helper, &sizes);
2025 	if (ret < 0)
2026 		return ret;
2027 
2028 	strcpy(fb_helper->fb->comm, "[fbcon]");
2029 
2030 	/* Set the fb info for vgaswitcheroo clients. Does nothing otherwise. */
2031 	if (dev_is_pci(dev->dev))
2032 		vga_switcheroo_client_fb_set(to_pci_dev(dev->dev), fb_helper->info);
2033 
2034 	return 0;
2035 }
2036 
2037 static void drm_fb_helper_fill_fix(struct fb_info *info, uint32_t pitch,
2038 				   bool is_color_indexed)
2039 {
2040 	info->fix.type = FB_TYPE_PACKED_PIXELS;
2041 	info->fix.visual = is_color_indexed ? FB_VISUAL_PSEUDOCOLOR
2042 					    : FB_VISUAL_TRUECOLOR;
2043 	info->fix.mmio_start = 0;
2044 	info->fix.mmio_len = 0;
2045 	info->fix.type_aux = 0;
2046 	info->fix.xpanstep = 1; /* doing it in hw */
2047 	info->fix.ypanstep = 1; /* doing it in hw */
2048 	info->fix.ywrapstep = 0;
2049 	info->fix.accel = FB_ACCEL_NONE;
2050 
2051 	info->fix.line_length = pitch;
2052 }
2053 
2054 static void drm_fb_helper_fill_var(struct fb_info *info,
2055 				   struct drm_fb_helper *fb_helper,
2056 				   uint32_t fb_width, uint32_t fb_height)
2057 {
2058 	struct drm_framebuffer *fb = fb_helper->fb;
2059 	const struct drm_format_info *format = fb->format;
2060 
2061 	switch (format->format) {
2062 	case DRM_FORMAT_C1:
2063 	case DRM_FORMAT_C2:
2064 	case DRM_FORMAT_C4:
2065 		/* supported format with sub-byte pixels */
2066 		break;
2067 
2068 	default:
2069 		WARN_ON((drm_format_info_block_width(format, 0) > 1) ||
2070 			(drm_format_info_block_height(format, 0) > 1));
2071 		break;
2072 	}
2073 
2074 	info->pseudo_palette = fb_helper->pseudo_palette;
2075 	info->var.xoffset = 0;
2076 	info->var.yoffset = 0;
2077 	__fill_var(&info->var, fb);
2078 	info->var.activate = FB_ACTIVATE_NOW;
2079 
2080 	drm_fb_helper_fill_pixel_fmt(&info->var, format);
2081 
2082 	info->var.xres = fb_width;
2083 	info->var.yres = fb_height;
2084 }
2085 
2086 /**
2087  * drm_fb_helper_fill_info - initializes fbdev information
2088  * @info: fbdev instance to set up
2089  * @fb_helper: fb helper instance to use as template
2090  * @sizes: describes fbdev size and scanout surface size
2091  *
2092  * Sets up the variable and fixed fbdev metainformation from the given fb helper
2093  * instance and the drm framebuffer allocated in &drm_fb_helper.fb.
2094  *
2095  * Drivers should call this (or their equivalent setup code) from their
2096  * &drm_fb_helper_funcs.fb_probe callback after having allocated the fbdev
2097  * backing storage framebuffer.
2098  */
2099 void drm_fb_helper_fill_info(struct fb_info *info,
2100 			     struct drm_fb_helper *fb_helper,
2101 			     struct drm_fb_helper_surface_size *sizes)
2102 {
2103 	struct drm_framebuffer *fb = fb_helper->fb;
2104 
2105 	drm_fb_helper_fill_fix(info, fb->pitches[0],
2106 			       fb->format->is_color_indexed);
2107 	drm_fb_helper_fill_var(info, fb_helper,
2108 			       sizes->fb_width, sizes->fb_height);
2109 
2110 	info->par = fb_helper;
2111 	/*
2112 	 * The DRM drivers fbdev emulation device name can be confusing if the
2113 	 * driver name also has a "drm" suffix on it. Leading to names such as
2114 	 * "simpledrmdrmfb" in /proc/fb. Unfortunately, it's an uAPI and can't
2115 	 * be changed due user-space tools (e.g: pm-utils) matching against it.
2116 	 */
2117 	snprintf(info->fix.id, sizeof(info->fix.id), "%sdrmfb",
2118 		 fb_helper->dev->driver->name);
2119 
2120 }
2121 EXPORT_SYMBOL(drm_fb_helper_fill_info);
2122 
2123 /*
2124  * This is a continuation of drm_setup_crtcs() that sets up anything related
2125  * to the framebuffer. During initialization, drm_setup_crtcs() is called before
2126  * the framebuffer has been allocated (fb_helper->fb and fb_helper->info).
2127  * So, any setup that touches those fields needs to be done here instead of in
2128  * drm_setup_crtcs().
2129  */
2130 static void drm_setup_crtcs_fb(struct drm_fb_helper *fb_helper)
2131 {
2132 	struct drm_client_dev *client = &fb_helper->client;
2133 	struct drm_connector_list_iter conn_iter;
2134 	struct fb_info *info = fb_helper->info;
2135 	unsigned int rotation, sw_rotations = 0;
2136 	struct drm_connector *connector;
2137 	struct drm_mode_set *modeset;
2138 
2139 	mutex_lock(&client->modeset_mutex);
2140 	drm_client_for_each_modeset(modeset, client) {
2141 		if (!modeset->num_connectors)
2142 			continue;
2143 
2144 		modeset->fb = fb_helper->fb;
2145 
2146 		if (drm_client_rotation(modeset, &rotation))
2147 			/* Rotating in hardware, fbcon should not rotate */
2148 			sw_rotations |= DRM_MODE_ROTATE_0;
2149 		else
2150 			sw_rotations |= rotation;
2151 	}
2152 	mutex_unlock(&client->modeset_mutex);
2153 
2154 	drm_connector_list_iter_begin(fb_helper->dev, &conn_iter);
2155 	drm_client_for_each_connector_iter(connector, &conn_iter) {
2156 
2157 		/* use first connected connector for the physical dimensions */
2158 		if (connector->status == connector_status_connected) {
2159 			info->var.width = connector->display_info.width_mm;
2160 			info->var.height = connector->display_info.height_mm;
2161 			break;
2162 		}
2163 	}
2164 	drm_connector_list_iter_end(&conn_iter);
2165 
2166 	switch (sw_rotations) {
2167 	case DRM_MODE_ROTATE_0:
2168 		info->fbcon_rotate_hint = FB_ROTATE_UR;
2169 		break;
2170 	case DRM_MODE_ROTATE_90:
2171 		info->fbcon_rotate_hint = FB_ROTATE_CCW;
2172 		break;
2173 	case DRM_MODE_ROTATE_180:
2174 		info->fbcon_rotate_hint = FB_ROTATE_UD;
2175 		break;
2176 	case DRM_MODE_ROTATE_270:
2177 		info->fbcon_rotate_hint = FB_ROTATE_CW;
2178 		break;
2179 	default:
2180 		/*
2181 		 * Multiple bits are set / multiple rotations requested
2182 		 * fbcon cannot handle separate rotation settings per
2183 		 * output, so fallback to unrotated.
2184 		 */
2185 		info->fbcon_rotate_hint = FB_ROTATE_UR;
2186 	}
2187 }
2188 
2189 /* Note: Drops fb_helper->lock before returning. */
2190 static int
2191 __drm_fb_helper_initial_config_and_unlock(struct drm_fb_helper *fb_helper)
2192 {
2193 	struct drm_device *dev = fb_helper->dev;
2194 	struct fb_info *info;
2195 	unsigned int width, height;
2196 	int ret;
2197 
2198 	width = dev->mode_config.max_width;
2199 	height = dev->mode_config.max_height;
2200 
2201 	drm_client_modeset_probe(&fb_helper->client, width, height);
2202 	ret = drm_fb_helper_single_fb_probe(fb_helper);
2203 	if (ret < 0) {
2204 		if (ret == -EAGAIN) {
2205 			fb_helper->deferred_setup = true;
2206 			ret = 0;
2207 		}
2208 		mutex_unlock(&fb_helper->lock);
2209 
2210 		return ret;
2211 	}
2212 	drm_setup_crtcs_fb(fb_helper);
2213 
2214 	fb_helper->deferred_setup = false;
2215 
2216 	info = fb_helper->info;
2217 	info->var.pixclock = 0;
2218 
2219 	if (!drm_leak_fbdev_smem)
2220 		info->flags |= FBINFO_HIDE_SMEM_START;
2221 
2222 	/* Need to drop locks to avoid recursive deadlock in
2223 	 * register_framebuffer. This is ok because the only thing left to do is
2224 	 * register the fbdev emulation instance in kernel_fb_helper_list. */
2225 	mutex_unlock(&fb_helper->lock);
2226 
2227 	ret = register_framebuffer(info);
2228 	if (ret < 0)
2229 		return ret;
2230 
2231 	drm_info(dev, "fb%d: %s frame buffer device\n",
2232 		 info->node, info->fix.id);
2233 
2234 	mutex_lock(&kernel_fb_helper_lock);
2235 	if (list_empty(&kernel_fb_helper_list))
2236 		register_sysrq_key('v', &sysrq_drm_fb_helper_restore_op);
2237 
2238 	list_add(&fb_helper->kernel_fb_list, &kernel_fb_helper_list);
2239 	mutex_unlock(&kernel_fb_helper_lock);
2240 
2241 	return 0;
2242 }
2243 
2244 /**
2245  * drm_fb_helper_initial_config - setup a sane initial connector configuration
2246  * @fb_helper: fb_helper device struct
2247  *
2248  * Scans the CRTCs and connectors and tries to put together an initial setup.
2249  * At the moment, this is a cloned configuration across all heads with
2250  * a new framebuffer object as the backing store.
2251  *
2252  * Note that this also registers the fbdev and so allows userspace to call into
2253  * the driver through the fbdev interfaces.
2254  *
2255  * This function will call down into the &drm_fb_helper_funcs.fb_probe callback
2256  * to let the driver allocate and initialize the fbdev info structure and the
2257  * drm framebuffer used to back the fbdev. drm_fb_helper_fill_info() is provided
2258  * as a helper to setup simple default values for the fbdev info structure.
2259  *
2260  * HANG DEBUGGING:
2261  *
2262  * When you have fbcon support built-in or already loaded, this function will do
2263  * a full modeset to setup the fbdev console. Due to locking misdesign in the
2264  * VT/fbdev subsystem that entire modeset sequence has to be done while holding
2265  * console_lock. Until console_unlock is called no dmesg lines will be sent out
2266  * to consoles, not even serial console. This means when your driver crashes,
2267  * you will see absolutely nothing else but a system stuck in this function,
2268  * with no further output. Any kind of printk() you place within your own driver
2269  * or in the drm core modeset code will also never show up.
2270  *
2271  * Standard debug practice is to run the fbcon setup without taking the
2272  * console_lock as a hack, to be able to see backtraces and crashes on the
2273  * serial line. This can be done by setting the fb.lockless_register_fb=1 kernel
2274  * cmdline option.
2275  *
2276  * The other option is to just disable fbdev emulation since very likely the
2277  * first modeset from userspace will crash in the same way, and is even easier
2278  * to debug. This can be done by setting the drm_kms_helper.fbdev_emulation=0
2279  * kernel cmdline option.
2280  *
2281  * RETURNS:
2282  * Zero if everything went ok, nonzero otherwise.
2283  */
2284 int drm_fb_helper_initial_config(struct drm_fb_helper *fb_helper)
2285 {
2286 	int ret;
2287 
2288 	if (!drm_fbdev_emulation)
2289 		return 0;
2290 
2291 	mutex_lock(&fb_helper->lock);
2292 	ret = __drm_fb_helper_initial_config_and_unlock(fb_helper);
2293 
2294 	return ret;
2295 }
2296 EXPORT_SYMBOL(drm_fb_helper_initial_config);
2297 
2298 /**
2299  * drm_fb_helper_hotplug_event - respond to a hotplug notification by
2300  *                               probing all the outputs attached to the fb
2301  * @fb_helper: driver-allocated fbdev helper, can be NULL
2302  *
2303  * Scan the connectors attached to the fb_helper and try to put together a
2304  * setup after notification of a change in output configuration.
2305  *
2306  * Called at runtime, takes the mode config locks to be able to check/change the
2307  * modeset configuration. Must be run from process context (which usually means
2308  * either the output polling work or a work item launched from the driver's
2309  * hotplug interrupt).
2310  *
2311  * Note that drivers may call this even before calling
2312  * drm_fb_helper_initial_config but only after drm_fb_helper_init. This allows
2313  * for a race-free fbcon setup and will make sure that the fbdev emulation will
2314  * not miss any hotplug events.
2315  *
2316  * RETURNS:
2317  * 0 on success and a non-zero error code otherwise.
2318  */
2319 int drm_fb_helper_hotplug_event(struct drm_fb_helper *fb_helper)
2320 {
2321 	int err = 0;
2322 
2323 	if (!drm_fbdev_emulation || !fb_helper)
2324 		return 0;
2325 
2326 	mutex_lock(&fb_helper->lock);
2327 	if (fb_helper->deferred_setup) {
2328 		err = __drm_fb_helper_initial_config_and_unlock(fb_helper);
2329 		return err;
2330 	}
2331 
2332 	if (!fb_helper->fb || !drm_master_internal_acquire(fb_helper->dev)) {
2333 		fb_helper->delayed_hotplug = true;
2334 		mutex_unlock(&fb_helper->lock);
2335 		return err;
2336 	}
2337 
2338 	drm_master_internal_release(fb_helper->dev);
2339 
2340 	drm_dbg_kms(fb_helper->dev, "\n");
2341 
2342 	drm_client_modeset_probe(&fb_helper->client, fb_helper->fb->width, fb_helper->fb->height);
2343 	drm_setup_crtcs_fb(fb_helper);
2344 	mutex_unlock(&fb_helper->lock);
2345 
2346 	drm_fb_helper_set_par(fb_helper->info);
2347 
2348 	return 0;
2349 }
2350 EXPORT_SYMBOL(drm_fb_helper_hotplug_event);
2351 
2352 /**
2353  * drm_fb_helper_lastclose - DRM driver lastclose helper for fbdev emulation
2354  * @dev: DRM device
2355  *
2356  * This function can be used as the &drm_driver->lastclose callback for drivers
2357  * that only need to call drm_fb_helper_restore_fbdev_mode_unlocked().
2358  */
2359 void drm_fb_helper_lastclose(struct drm_device *dev)
2360 {
2361 	drm_fb_helper_restore_fbdev_mode_unlocked(dev->fb_helper);
2362 }
2363 EXPORT_SYMBOL(drm_fb_helper_lastclose);
2364 
2365 /**
2366  * drm_fb_helper_output_poll_changed - DRM mode config \.output_poll_changed
2367  *                                     helper for fbdev emulation
2368  * @dev: DRM device
2369  *
2370  * This function can be used as the
2371  * &drm_mode_config_funcs.output_poll_changed callback for drivers that only
2372  * need to call drm_fbdev.hotplug_event().
2373  */
2374 void drm_fb_helper_output_poll_changed(struct drm_device *dev)
2375 {
2376 	drm_fb_helper_hotplug_event(dev->fb_helper);
2377 }
2378 EXPORT_SYMBOL(drm_fb_helper_output_poll_changed);
2379