1 /* 2 * Copyright (C) 2015 Etnaviv Project 3 * 4 * This program is free software; you can redistribute it and/or modify it 5 * under the terms of the GNU General Public License version 2 as published by 6 * the Free Software Foundation. 7 * 8 * This program is distributed in the hope that it will be useful, but WITHOUT 9 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 10 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for 11 * more details. 12 * 13 * You should have received a copy of the GNU General Public License along with 14 * this program. If not, see <http://www.gnu.org/licenses/>. 15 */ 16 17 #include <linux/kernel.h> 18 19 #include "etnaviv_gem.h" 20 #include "etnaviv_gpu.h" 21 22 #include "cmdstream.xml.h" 23 24 #define EXTRACT(val, field) (((val) & field##__MASK) >> field##__SHIFT) 25 26 struct etna_validation_state { 27 struct etnaviv_gpu *gpu; 28 const struct drm_etnaviv_gem_submit_reloc *relocs; 29 unsigned int num_relocs; 30 u32 *start; 31 }; 32 33 static const struct { 34 u16 offset; 35 u16 size; 36 } etnaviv_sensitive_states[] __initconst = { 37 #define ST(start, num) { (start) >> 2, (num) } 38 /* 2D */ 39 ST(0x1200, 1), 40 ST(0x1228, 1), 41 ST(0x1238, 1), 42 ST(0x1284, 1), 43 ST(0x128c, 1), 44 ST(0x1304, 1), 45 ST(0x1310, 1), 46 ST(0x1318, 1), 47 ST(0x12800, 4), 48 ST(0x128a0, 4), 49 ST(0x128c0, 4), 50 ST(0x12970, 4), 51 ST(0x12a00, 8), 52 ST(0x12b40, 8), 53 ST(0x12b80, 8), 54 ST(0x12ce0, 8), 55 /* 3D */ 56 ST(0x0644, 1), 57 ST(0x064c, 1), 58 ST(0x0680, 8), 59 ST(0x086c, 1), 60 ST(0x1028, 1), 61 ST(0x1410, 1), 62 ST(0x1430, 1), 63 ST(0x1458, 1), 64 ST(0x1460, 8), 65 ST(0x1480, 8), 66 ST(0x1500, 8), 67 ST(0x1520, 8), 68 ST(0x1608, 1), 69 ST(0x1610, 1), 70 ST(0x1658, 1), 71 ST(0x165c, 1), 72 ST(0x1664, 1), 73 ST(0x1668, 1), 74 ST(0x16a4, 1), 75 ST(0x16c0, 8), 76 ST(0x16e0, 8), 77 ST(0x1740, 8), 78 ST(0x17c0, 8), 79 ST(0x17e0, 8), 80 ST(0x2400, 14 * 16), 81 ST(0x10800, 32 * 16), 82 ST(0x14600, 16), 83 ST(0x14800, 8 * 8), 84 #undef ST 85 }; 86 87 #define ETNAVIV_STATES_SIZE (VIV_FE_LOAD_STATE_HEADER_OFFSET__MASK + 1u) 88 static DECLARE_BITMAP(etnaviv_states, ETNAVIV_STATES_SIZE); 89 90 void __init etnaviv_validate_init(void) 91 { 92 unsigned int i; 93 94 for (i = 0; i < ARRAY_SIZE(etnaviv_sensitive_states); i++) 95 bitmap_set(etnaviv_states, etnaviv_sensitive_states[i].offset, 96 etnaviv_sensitive_states[i].size); 97 } 98 99 static void etnaviv_warn_if_non_sensitive(struct etna_validation_state *state, 100 unsigned int buf_offset, unsigned int state_addr) 101 { 102 if (state->num_relocs && state->relocs->submit_offset < buf_offset) { 103 dev_warn_once(state->gpu->dev, 104 "%s: relocation for non-sensitive state 0x%x at offset %u\n", 105 __func__, state_addr, 106 state->relocs->submit_offset); 107 while (state->num_relocs && 108 state->relocs->submit_offset < buf_offset) { 109 state->relocs++; 110 state->num_relocs--; 111 } 112 } 113 } 114 115 static bool etnaviv_validate_load_state(struct etna_validation_state *state, 116 u32 *ptr, unsigned int state_offset, unsigned int num) 117 { 118 unsigned int size = min(ETNAVIV_STATES_SIZE, state_offset + num); 119 unsigned int st_offset = state_offset, buf_offset; 120 121 for_each_set_bit_from(st_offset, etnaviv_states, size) { 122 buf_offset = (ptr - state->start + 123 st_offset - state_offset) * 4; 124 125 etnaviv_warn_if_non_sensitive(state, buf_offset, st_offset * 4); 126 if (state->num_relocs && 127 state->relocs->submit_offset == buf_offset) { 128 state->relocs++; 129 state->num_relocs--; 130 continue; 131 } 132 133 dev_warn_ratelimited(state->gpu->dev, 134 "%s: load state touches restricted state 0x%x at offset %u\n", 135 __func__, st_offset * 4, buf_offset); 136 return false; 137 } 138 139 if (state->num_relocs) { 140 buf_offset = (ptr - state->start + num) * 4; 141 etnaviv_warn_if_non_sensitive(state, buf_offset, st_offset * 4 + 142 state->relocs->submit_offset - 143 buf_offset); 144 } 145 146 return true; 147 } 148 149 static uint8_t cmd_length[32] = { 150 [FE_OPCODE_DRAW_PRIMITIVES] = 4, 151 [FE_OPCODE_DRAW_INDEXED_PRIMITIVES] = 6, 152 [FE_OPCODE_DRAW_INSTANCED] = 4, 153 [FE_OPCODE_NOP] = 2, 154 [FE_OPCODE_STALL] = 2, 155 }; 156 157 bool etnaviv_cmd_validate_one(struct etnaviv_gpu *gpu, u32 *stream, 158 unsigned int size, 159 struct drm_etnaviv_gem_submit_reloc *relocs, 160 unsigned int reloc_size) 161 { 162 struct etna_validation_state state; 163 u32 *buf = stream; 164 u32 *end = buf + size; 165 166 state.gpu = gpu; 167 state.relocs = relocs; 168 state.num_relocs = reloc_size; 169 state.start = stream; 170 171 while (buf < end) { 172 u32 cmd = *buf; 173 unsigned int len, n, off; 174 unsigned int op = cmd >> 27; 175 176 switch (op) { 177 case FE_OPCODE_LOAD_STATE: 178 n = EXTRACT(cmd, VIV_FE_LOAD_STATE_HEADER_COUNT); 179 len = ALIGN(1 + n, 2); 180 if (buf + len > end) 181 break; 182 183 off = EXTRACT(cmd, VIV_FE_LOAD_STATE_HEADER_OFFSET); 184 if (!etnaviv_validate_load_state(&state, buf + 1, 185 off, n)) 186 return false; 187 break; 188 189 case FE_OPCODE_DRAW_2D: 190 n = EXTRACT(cmd, VIV_FE_DRAW_2D_HEADER_COUNT); 191 if (n == 0) 192 n = 256; 193 len = 2 + n * 2; 194 break; 195 196 default: 197 len = cmd_length[op]; 198 if (len == 0) { 199 dev_err(gpu->dev, "%s: op %u not permitted at offset %tu\n", 200 __func__, op, buf - state.start); 201 return false; 202 } 203 break; 204 } 205 206 buf += len; 207 } 208 209 if (buf > end) { 210 dev_err(gpu->dev, "%s: commands overflow end of buffer: %tu > %u\n", 211 __func__, buf - state.start, size); 212 return false; 213 } 214 215 return true; 216 } 217