1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Copyright (C) 2013 Red Hat 4 * Author: Rob Clark <robdclark@gmail.com> 5 */ 6 7 #include <linux/dma-map-ops.h> 8 #include <linux/spinlock.h> 9 #include <linux/shmem_fs.h> 10 #include <linux/dma-buf.h> 11 #include <linux/pfn_t.h> 12 13 #include <drm/drm_prime.h> 14 15 #include "msm_drv.h" 16 #include "msm_fence.h" 17 #include "msm_gem.h" 18 #include "msm_gpu.h" 19 #include "msm_mmu.h" 20 21 22 static dma_addr_t physaddr(struct drm_gem_object *obj) 23 { 24 struct msm_gem_object *msm_obj = to_msm_bo(obj); 25 struct msm_drm_private *priv = obj->dev->dev_private; 26 return (((dma_addr_t)msm_obj->vram_node->start) << PAGE_SHIFT) + 27 priv->vram.paddr; 28 } 29 30 static bool use_pages(struct drm_gem_object *obj) 31 { 32 struct msm_gem_object *msm_obj = to_msm_bo(obj); 33 return !msm_obj->vram_node; 34 } 35 36 /* 37 * Cache sync.. this is a bit over-complicated, to fit dma-mapping 38 * API. Really GPU cache is out of scope here (handled on cmdstream) 39 * and all we need to do is invalidate newly allocated pages before 40 * mapping to CPU as uncached/writecombine. 41 * 42 * On top of this, we have the added headache, that depending on 43 * display generation, the display's iommu may be wired up to either 44 * the toplevel drm device (mdss), or to the mdp sub-node, meaning 45 * that here we either have dma-direct or iommu ops. 46 * 47 * Let this be a cautionary tail of abstraction gone wrong. 48 */ 49 50 static void sync_for_device(struct msm_gem_object *msm_obj) 51 { 52 struct device *dev = msm_obj->base.dev->dev; 53 54 dma_map_sgtable(dev, msm_obj->sgt, DMA_BIDIRECTIONAL, 0); 55 } 56 57 static void sync_for_cpu(struct msm_gem_object *msm_obj) 58 { 59 struct device *dev = msm_obj->base.dev->dev; 60 61 dma_unmap_sgtable(dev, msm_obj->sgt, DMA_BIDIRECTIONAL, 0); 62 } 63 64 /* allocate pages from VRAM carveout, used when no IOMMU: */ 65 static struct page **get_pages_vram(struct drm_gem_object *obj, int npages) 66 { 67 struct msm_gem_object *msm_obj = to_msm_bo(obj); 68 struct msm_drm_private *priv = obj->dev->dev_private; 69 dma_addr_t paddr; 70 struct page **p; 71 int ret, i; 72 73 p = kvmalloc_array(npages, sizeof(struct page *), GFP_KERNEL); 74 if (!p) 75 return ERR_PTR(-ENOMEM); 76 77 spin_lock(&priv->vram.lock); 78 ret = drm_mm_insert_node(&priv->vram.mm, msm_obj->vram_node, npages); 79 spin_unlock(&priv->vram.lock); 80 if (ret) { 81 kvfree(p); 82 return ERR_PTR(ret); 83 } 84 85 paddr = physaddr(obj); 86 for (i = 0; i < npages; i++) { 87 p[i] = phys_to_page(paddr); 88 paddr += PAGE_SIZE; 89 } 90 91 return p; 92 } 93 94 static struct page **get_pages(struct drm_gem_object *obj) 95 { 96 struct msm_gem_object *msm_obj = to_msm_bo(obj); 97 98 if (!msm_obj->pages) { 99 struct drm_device *dev = obj->dev; 100 struct page **p; 101 int npages = obj->size >> PAGE_SHIFT; 102 103 if (use_pages(obj)) 104 p = drm_gem_get_pages(obj); 105 else 106 p = get_pages_vram(obj, npages); 107 108 if (IS_ERR(p)) { 109 DRM_DEV_ERROR(dev->dev, "could not get pages: %ld\n", 110 PTR_ERR(p)); 111 return p; 112 } 113 114 msm_obj->pages = p; 115 116 msm_obj->sgt = drm_prime_pages_to_sg(obj->dev, p, npages); 117 if (IS_ERR(msm_obj->sgt)) { 118 void *ptr = ERR_CAST(msm_obj->sgt); 119 120 DRM_DEV_ERROR(dev->dev, "failed to allocate sgt\n"); 121 msm_obj->sgt = NULL; 122 return ptr; 123 } 124 125 /* For non-cached buffers, ensure the new pages are clean 126 * because display controller, GPU, etc. are not coherent: 127 */ 128 if (msm_obj->flags & (MSM_BO_WC|MSM_BO_UNCACHED)) 129 sync_for_device(msm_obj); 130 } 131 132 return msm_obj->pages; 133 } 134 135 static void put_pages_vram(struct drm_gem_object *obj) 136 { 137 struct msm_gem_object *msm_obj = to_msm_bo(obj); 138 struct msm_drm_private *priv = obj->dev->dev_private; 139 140 spin_lock(&priv->vram.lock); 141 drm_mm_remove_node(msm_obj->vram_node); 142 spin_unlock(&priv->vram.lock); 143 144 kvfree(msm_obj->pages); 145 } 146 147 static void put_pages(struct drm_gem_object *obj) 148 { 149 struct msm_gem_object *msm_obj = to_msm_bo(obj); 150 151 if (msm_obj->pages) { 152 if (msm_obj->sgt) { 153 /* For non-cached buffers, ensure the new 154 * pages are clean because display controller, 155 * GPU, etc. are not coherent: 156 */ 157 if (msm_obj->flags & (MSM_BO_WC|MSM_BO_UNCACHED)) 158 sync_for_cpu(msm_obj); 159 160 sg_free_table(msm_obj->sgt); 161 kfree(msm_obj->sgt); 162 } 163 164 if (use_pages(obj)) 165 drm_gem_put_pages(obj, msm_obj->pages, true, false); 166 else 167 put_pages_vram(obj); 168 169 msm_obj->pages = NULL; 170 } 171 } 172 173 struct page **msm_gem_get_pages(struct drm_gem_object *obj) 174 { 175 struct msm_gem_object *msm_obj = to_msm_bo(obj); 176 struct page **p; 177 178 msm_gem_lock(obj); 179 180 if (WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) { 181 msm_gem_unlock(obj); 182 return ERR_PTR(-EBUSY); 183 } 184 185 p = get_pages(obj); 186 msm_gem_unlock(obj); 187 return p; 188 } 189 190 void msm_gem_put_pages(struct drm_gem_object *obj) 191 { 192 /* when we start tracking the pin count, then do something here */ 193 } 194 195 int msm_gem_mmap_obj(struct drm_gem_object *obj, 196 struct vm_area_struct *vma) 197 { 198 struct msm_gem_object *msm_obj = to_msm_bo(obj); 199 200 vma->vm_flags &= ~VM_PFNMAP; 201 vma->vm_flags |= VM_MIXEDMAP; 202 203 if (msm_obj->flags & MSM_BO_WC) { 204 vma->vm_page_prot = pgprot_writecombine(vm_get_page_prot(vma->vm_flags)); 205 } else if (msm_obj->flags & MSM_BO_UNCACHED) { 206 vma->vm_page_prot = pgprot_noncached(vm_get_page_prot(vma->vm_flags)); 207 } else { 208 /* 209 * Shunt off cached objs to shmem file so they have their own 210 * address_space (so unmap_mapping_range does what we want, 211 * in particular in the case of mmap'd dmabufs) 212 */ 213 fput(vma->vm_file); 214 get_file(obj->filp); 215 vma->vm_pgoff = 0; 216 vma->vm_file = obj->filp; 217 218 vma->vm_page_prot = vm_get_page_prot(vma->vm_flags); 219 } 220 221 return 0; 222 } 223 224 int msm_gem_mmap(struct file *filp, struct vm_area_struct *vma) 225 { 226 int ret; 227 228 ret = drm_gem_mmap(filp, vma); 229 if (ret) { 230 DBG("mmap failed: %d", ret); 231 return ret; 232 } 233 234 return msm_gem_mmap_obj(vma->vm_private_data, vma); 235 } 236 237 vm_fault_t msm_gem_fault(struct vm_fault *vmf) 238 { 239 struct vm_area_struct *vma = vmf->vma; 240 struct drm_gem_object *obj = vma->vm_private_data; 241 struct msm_gem_object *msm_obj = to_msm_bo(obj); 242 struct page **pages; 243 unsigned long pfn; 244 pgoff_t pgoff; 245 int err; 246 vm_fault_t ret; 247 248 /* 249 * vm_ops.open/drm_gem_mmap_obj and close get and put 250 * a reference on obj. So, we dont need to hold one here. 251 */ 252 err = msm_gem_lock_interruptible(obj); 253 if (err) { 254 ret = VM_FAULT_NOPAGE; 255 goto out; 256 } 257 258 if (WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) { 259 msm_gem_unlock(obj); 260 return VM_FAULT_SIGBUS; 261 } 262 263 /* make sure we have pages attached now */ 264 pages = get_pages(obj); 265 if (IS_ERR(pages)) { 266 ret = vmf_error(PTR_ERR(pages)); 267 goto out_unlock; 268 } 269 270 /* We don't use vmf->pgoff since that has the fake offset: */ 271 pgoff = (vmf->address - vma->vm_start) >> PAGE_SHIFT; 272 273 pfn = page_to_pfn(pages[pgoff]); 274 275 VERB("Inserting %p pfn %lx, pa %lx", (void *)vmf->address, 276 pfn, pfn << PAGE_SHIFT); 277 278 ret = vmf_insert_mixed(vma, vmf->address, __pfn_to_pfn_t(pfn, PFN_DEV)); 279 out_unlock: 280 msm_gem_unlock(obj); 281 out: 282 return ret; 283 } 284 285 /** get mmap offset */ 286 static uint64_t mmap_offset(struct drm_gem_object *obj) 287 { 288 struct drm_device *dev = obj->dev; 289 int ret; 290 291 WARN_ON(!msm_gem_is_locked(obj)); 292 293 /* Make it mmapable */ 294 ret = drm_gem_create_mmap_offset(obj); 295 296 if (ret) { 297 DRM_DEV_ERROR(dev->dev, "could not allocate mmap offset\n"); 298 return 0; 299 } 300 301 return drm_vma_node_offset_addr(&obj->vma_node); 302 } 303 304 uint64_t msm_gem_mmap_offset(struct drm_gem_object *obj) 305 { 306 uint64_t offset; 307 308 msm_gem_lock(obj); 309 offset = mmap_offset(obj); 310 msm_gem_unlock(obj); 311 return offset; 312 } 313 314 static struct msm_gem_vma *add_vma(struct drm_gem_object *obj, 315 struct msm_gem_address_space *aspace) 316 { 317 struct msm_gem_object *msm_obj = to_msm_bo(obj); 318 struct msm_gem_vma *vma; 319 320 WARN_ON(!msm_gem_is_locked(obj)); 321 322 vma = kzalloc(sizeof(*vma), GFP_KERNEL); 323 if (!vma) 324 return ERR_PTR(-ENOMEM); 325 326 vma->aspace = aspace; 327 328 list_add_tail(&vma->list, &msm_obj->vmas); 329 330 return vma; 331 } 332 333 static struct msm_gem_vma *lookup_vma(struct drm_gem_object *obj, 334 struct msm_gem_address_space *aspace) 335 { 336 struct msm_gem_object *msm_obj = to_msm_bo(obj); 337 struct msm_gem_vma *vma; 338 339 WARN_ON(!msm_gem_is_locked(obj)); 340 341 list_for_each_entry(vma, &msm_obj->vmas, list) { 342 if (vma->aspace == aspace) 343 return vma; 344 } 345 346 return NULL; 347 } 348 349 static void del_vma(struct msm_gem_vma *vma) 350 { 351 if (!vma) 352 return; 353 354 list_del(&vma->list); 355 kfree(vma); 356 } 357 358 /* Called with msm_obj locked */ 359 static void 360 put_iova(struct drm_gem_object *obj) 361 { 362 struct msm_gem_object *msm_obj = to_msm_bo(obj); 363 struct msm_gem_vma *vma, *tmp; 364 365 WARN_ON(!msm_gem_is_locked(obj)); 366 367 list_for_each_entry_safe(vma, tmp, &msm_obj->vmas, list) { 368 if (vma->aspace) { 369 msm_gem_purge_vma(vma->aspace, vma); 370 msm_gem_close_vma(vma->aspace, vma); 371 } 372 del_vma(vma); 373 } 374 } 375 376 static int get_iova_locked(struct drm_gem_object *obj, 377 struct msm_gem_address_space *aspace, uint64_t *iova, 378 u64 range_start, u64 range_end) 379 { 380 struct msm_gem_vma *vma; 381 int ret = 0; 382 383 WARN_ON(!msm_gem_is_locked(obj)); 384 385 vma = lookup_vma(obj, aspace); 386 387 if (!vma) { 388 vma = add_vma(obj, aspace); 389 if (IS_ERR(vma)) 390 return PTR_ERR(vma); 391 392 ret = msm_gem_init_vma(aspace, vma, obj->size >> PAGE_SHIFT, 393 range_start, range_end); 394 if (ret) { 395 del_vma(vma); 396 return ret; 397 } 398 } 399 400 *iova = vma->iova; 401 return 0; 402 } 403 404 static int msm_gem_pin_iova(struct drm_gem_object *obj, 405 struct msm_gem_address_space *aspace) 406 { 407 struct msm_gem_object *msm_obj = to_msm_bo(obj); 408 struct msm_gem_vma *vma; 409 struct page **pages; 410 int prot = IOMMU_READ; 411 412 if (!(msm_obj->flags & MSM_BO_GPU_READONLY)) 413 prot |= IOMMU_WRITE; 414 415 if (msm_obj->flags & MSM_BO_MAP_PRIV) 416 prot |= IOMMU_PRIV; 417 418 WARN_ON(!msm_gem_is_locked(obj)); 419 420 if (WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) 421 return -EBUSY; 422 423 vma = lookup_vma(obj, aspace); 424 if (WARN_ON(!vma)) 425 return -EINVAL; 426 427 pages = get_pages(obj); 428 if (IS_ERR(pages)) 429 return PTR_ERR(pages); 430 431 return msm_gem_map_vma(aspace, vma, prot, 432 msm_obj->sgt, obj->size >> PAGE_SHIFT); 433 } 434 435 static int get_and_pin_iova_range_locked(struct drm_gem_object *obj, 436 struct msm_gem_address_space *aspace, uint64_t *iova, 437 u64 range_start, u64 range_end) 438 { 439 u64 local; 440 int ret; 441 442 WARN_ON(!msm_gem_is_locked(obj)); 443 444 ret = get_iova_locked(obj, aspace, &local, 445 range_start, range_end); 446 447 if (!ret) 448 ret = msm_gem_pin_iova(obj, aspace); 449 450 if (!ret) 451 *iova = local; 452 453 return ret; 454 } 455 456 /* 457 * get iova and pin it. Should have a matching put 458 * limits iova to specified range (in pages) 459 */ 460 int msm_gem_get_and_pin_iova_range(struct drm_gem_object *obj, 461 struct msm_gem_address_space *aspace, uint64_t *iova, 462 u64 range_start, u64 range_end) 463 { 464 int ret; 465 466 msm_gem_lock(obj); 467 ret = get_and_pin_iova_range_locked(obj, aspace, iova, range_start, range_end); 468 msm_gem_unlock(obj); 469 470 return ret; 471 } 472 473 int msm_gem_get_and_pin_iova_locked(struct drm_gem_object *obj, 474 struct msm_gem_address_space *aspace, uint64_t *iova) 475 { 476 return get_and_pin_iova_range_locked(obj, aspace, iova, 0, U64_MAX); 477 } 478 479 /* get iova and pin it. Should have a matching put */ 480 int msm_gem_get_and_pin_iova(struct drm_gem_object *obj, 481 struct msm_gem_address_space *aspace, uint64_t *iova) 482 { 483 return msm_gem_get_and_pin_iova_range(obj, aspace, iova, 0, U64_MAX); 484 } 485 486 /* 487 * Get an iova but don't pin it. Doesn't need a put because iovas are currently 488 * valid for the life of the object 489 */ 490 int msm_gem_get_iova(struct drm_gem_object *obj, 491 struct msm_gem_address_space *aspace, uint64_t *iova) 492 { 493 int ret; 494 495 msm_gem_lock(obj); 496 ret = get_iova_locked(obj, aspace, iova, 0, U64_MAX); 497 msm_gem_unlock(obj); 498 499 return ret; 500 } 501 502 /* get iova without taking a reference, used in places where you have 503 * already done a 'msm_gem_get_and_pin_iova' or 'msm_gem_get_iova' 504 */ 505 uint64_t msm_gem_iova(struct drm_gem_object *obj, 506 struct msm_gem_address_space *aspace) 507 { 508 struct msm_gem_vma *vma; 509 510 msm_gem_lock(obj); 511 vma = lookup_vma(obj, aspace); 512 msm_gem_unlock(obj); 513 WARN_ON(!vma); 514 515 return vma ? vma->iova : 0; 516 } 517 518 /* 519 * Locked variant of msm_gem_unpin_iova() 520 */ 521 void msm_gem_unpin_iova_locked(struct drm_gem_object *obj, 522 struct msm_gem_address_space *aspace) 523 { 524 struct msm_gem_vma *vma; 525 526 WARN_ON(!msm_gem_is_locked(obj)); 527 528 vma = lookup_vma(obj, aspace); 529 530 if (!WARN_ON(!vma)) 531 msm_gem_unmap_vma(aspace, vma); 532 } 533 534 /* 535 * Unpin a iova by updating the reference counts. The memory isn't actually 536 * purged until something else (shrinker, mm_notifier, destroy, etc) decides 537 * to get rid of it 538 */ 539 void msm_gem_unpin_iova(struct drm_gem_object *obj, 540 struct msm_gem_address_space *aspace) 541 { 542 msm_gem_lock(obj); 543 msm_gem_unpin_iova_locked(obj, aspace); 544 msm_gem_unlock(obj); 545 } 546 547 int msm_gem_dumb_create(struct drm_file *file, struct drm_device *dev, 548 struct drm_mode_create_dumb *args) 549 { 550 args->pitch = align_pitch(args->width, args->bpp); 551 args->size = PAGE_ALIGN(args->pitch * args->height); 552 return msm_gem_new_handle(dev, file, args->size, 553 MSM_BO_SCANOUT | MSM_BO_WC, &args->handle, "dumb"); 554 } 555 556 int msm_gem_dumb_map_offset(struct drm_file *file, struct drm_device *dev, 557 uint32_t handle, uint64_t *offset) 558 { 559 struct drm_gem_object *obj; 560 int ret = 0; 561 562 /* GEM does all our handle to object mapping */ 563 obj = drm_gem_object_lookup(file, handle); 564 if (obj == NULL) { 565 ret = -ENOENT; 566 goto fail; 567 } 568 569 *offset = msm_gem_mmap_offset(obj); 570 571 drm_gem_object_put(obj); 572 573 fail: 574 return ret; 575 } 576 577 static void *get_vaddr(struct drm_gem_object *obj, unsigned madv) 578 { 579 struct msm_gem_object *msm_obj = to_msm_bo(obj); 580 int ret = 0; 581 582 WARN_ON(!msm_gem_is_locked(obj)); 583 584 if (obj->import_attach) 585 return ERR_PTR(-ENODEV); 586 587 if (WARN_ON(msm_obj->madv > madv)) { 588 DRM_DEV_ERROR(obj->dev->dev, "Invalid madv state: %u vs %u\n", 589 msm_obj->madv, madv); 590 return ERR_PTR(-EBUSY); 591 } 592 593 /* increment vmap_count *before* vmap() call, so shrinker can 594 * check vmap_count (is_vunmapable()) outside of msm_obj lock. 595 * This guarantees that we won't try to msm_gem_vunmap() this 596 * same object from within the vmap() call (while we already 597 * hold msm_obj lock) 598 */ 599 msm_obj->vmap_count++; 600 601 if (!msm_obj->vaddr) { 602 struct page **pages = get_pages(obj); 603 if (IS_ERR(pages)) { 604 ret = PTR_ERR(pages); 605 goto fail; 606 } 607 msm_obj->vaddr = vmap(pages, obj->size >> PAGE_SHIFT, 608 VM_MAP, pgprot_writecombine(PAGE_KERNEL)); 609 if (msm_obj->vaddr == NULL) { 610 ret = -ENOMEM; 611 goto fail; 612 } 613 } 614 615 return msm_obj->vaddr; 616 617 fail: 618 msm_obj->vmap_count--; 619 return ERR_PTR(ret); 620 } 621 622 void *msm_gem_get_vaddr_locked(struct drm_gem_object *obj) 623 { 624 return get_vaddr(obj, MSM_MADV_WILLNEED); 625 } 626 627 void *msm_gem_get_vaddr(struct drm_gem_object *obj) 628 { 629 void *ret; 630 631 msm_gem_lock(obj); 632 ret = msm_gem_get_vaddr_locked(obj); 633 msm_gem_unlock(obj); 634 635 return ret; 636 } 637 638 /* 639 * Don't use this! It is for the very special case of dumping 640 * submits from GPU hangs or faults, were the bo may already 641 * be MSM_MADV_DONTNEED, but we know the buffer is still on the 642 * active list. 643 */ 644 void *msm_gem_get_vaddr_active(struct drm_gem_object *obj) 645 { 646 return get_vaddr(obj, __MSM_MADV_PURGED); 647 } 648 649 void msm_gem_put_vaddr_locked(struct drm_gem_object *obj) 650 { 651 struct msm_gem_object *msm_obj = to_msm_bo(obj); 652 653 WARN_ON(!msm_gem_is_locked(obj)); 654 WARN_ON(msm_obj->vmap_count < 1); 655 656 msm_obj->vmap_count--; 657 } 658 659 void msm_gem_put_vaddr(struct drm_gem_object *obj) 660 { 661 msm_gem_lock(obj); 662 msm_gem_put_vaddr_locked(obj); 663 msm_gem_unlock(obj); 664 } 665 666 /* Update madvise status, returns true if not purged, else 667 * false or -errno. 668 */ 669 int msm_gem_madvise(struct drm_gem_object *obj, unsigned madv) 670 { 671 struct msm_gem_object *msm_obj = to_msm_bo(obj); 672 673 msm_gem_lock(obj); 674 675 WARN_ON(!mutex_is_locked(&obj->dev->struct_mutex)); 676 677 if (msm_obj->madv != __MSM_MADV_PURGED) 678 msm_obj->madv = madv; 679 680 madv = msm_obj->madv; 681 682 msm_gem_unlock(obj); 683 684 return (madv != __MSM_MADV_PURGED); 685 } 686 687 void msm_gem_purge(struct drm_gem_object *obj) 688 { 689 struct drm_device *dev = obj->dev; 690 struct msm_gem_object *msm_obj = to_msm_bo(obj); 691 692 WARN_ON(!mutex_is_locked(&dev->struct_mutex)); 693 WARN_ON(!msm_gem_is_locked(obj)); 694 WARN_ON(!is_purgeable(msm_obj)); 695 WARN_ON(obj->import_attach); 696 697 put_iova(obj); 698 699 msm_gem_vunmap(obj); 700 701 put_pages(obj); 702 703 msm_obj->madv = __MSM_MADV_PURGED; 704 705 drm_vma_node_unmap(&obj->vma_node, dev->anon_inode->i_mapping); 706 drm_gem_free_mmap_offset(obj); 707 708 /* Our goal here is to return as much of the memory as 709 * is possible back to the system as we are called from OOM. 710 * To do this we must instruct the shmfs to drop all of its 711 * backing pages, *now*. 712 */ 713 shmem_truncate_range(file_inode(obj->filp), 0, (loff_t)-1); 714 715 invalidate_mapping_pages(file_inode(obj->filp)->i_mapping, 716 0, (loff_t)-1); 717 } 718 719 void msm_gem_vunmap(struct drm_gem_object *obj) 720 { 721 struct msm_gem_object *msm_obj = to_msm_bo(obj); 722 723 WARN_ON(!msm_gem_is_locked(obj)); 724 725 if (!msm_obj->vaddr || WARN_ON(!is_vunmapable(msm_obj))) 726 return; 727 728 vunmap(msm_obj->vaddr); 729 msm_obj->vaddr = NULL; 730 } 731 732 /* must be called before _move_to_active().. */ 733 int msm_gem_sync_object(struct drm_gem_object *obj, 734 struct msm_fence_context *fctx, bool exclusive) 735 { 736 struct dma_resv_list *fobj; 737 struct dma_fence *fence; 738 int i, ret; 739 740 fobj = dma_resv_get_list(obj->resv); 741 if (!fobj || (fobj->shared_count == 0)) { 742 fence = dma_resv_get_excl(obj->resv); 743 /* don't need to wait on our own fences, since ring is fifo */ 744 if (fence && (fence->context != fctx->context)) { 745 ret = dma_fence_wait(fence, true); 746 if (ret) 747 return ret; 748 } 749 } 750 751 if (!exclusive || !fobj) 752 return 0; 753 754 for (i = 0; i < fobj->shared_count; i++) { 755 fence = rcu_dereference_protected(fobj->shared[i], 756 dma_resv_held(obj->resv)); 757 if (fence->context != fctx->context) { 758 ret = dma_fence_wait(fence, true); 759 if (ret) 760 return ret; 761 } 762 } 763 764 return 0; 765 } 766 767 void msm_gem_active_get(struct drm_gem_object *obj, struct msm_gpu *gpu) 768 { 769 struct msm_gem_object *msm_obj = to_msm_bo(obj); 770 struct msm_drm_private *priv = obj->dev->dev_private; 771 772 might_sleep(); 773 WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED); 774 775 if (!atomic_fetch_inc(&msm_obj->active_count)) { 776 mutex_lock(&priv->mm_lock); 777 msm_obj->gpu = gpu; 778 list_del_init(&msm_obj->mm_list); 779 list_add_tail(&msm_obj->mm_list, &gpu->active_list); 780 mutex_unlock(&priv->mm_lock); 781 } 782 } 783 784 void msm_gem_active_put(struct drm_gem_object *obj) 785 { 786 struct msm_gem_object *msm_obj = to_msm_bo(obj); 787 struct msm_drm_private *priv = obj->dev->dev_private; 788 789 might_sleep(); 790 791 if (!atomic_dec_return(&msm_obj->active_count)) { 792 mutex_lock(&priv->mm_lock); 793 msm_obj->gpu = NULL; 794 list_del_init(&msm_obj->mm_list); 795 list_add_tail(&msm_obj->mm_list, &priv->inactive_list); 796 mutex_unlock(&priv->mm_lock); 797 } 798 } 799 800 int msm_gem_cpu_prep(struct drm_gem_object *obj, uint32_t op, ktime_t *timeout) 801 { 802 bool write = !!(op & MSM_PREP_WRITE); 803 unsigned long remain = 804 op & MSM_PREP_NOSYNC ? 0 : timeout_to_jiffies(timeout); 805 long ret; 806 807 ret = dma_resv_wait_timeout_rcu(obj->resv, write, 808 true, remain); 809 if (ret == 0) 810 return remain == 0 ? -EBUSY : -ETIMEDOUT; 811 else if (ret < 0) 812 return ret; 813 814 /* TODO cache maintenance */ 815 816 return 0; 817 } 818 819 int msm_gem_cpu_fini(struct drm_gem_object *obj) 820 { 821 /* TODO cache maintenance */ 822 return 0; 823 } 824 825 #ifdef CONFIG_DEBUG_FS 826 static void describe_fence(struct dma_fence *fence, const char *type, 827 struct seq_file *m) 828 { 829 if (!dma_fence_is_signaled(fence)) 830 seq_printf(m, "\t%9s: %s %s seq %llu\n", type, 831 fence->ops->get_driver_name(fence), 832 fence->ops->get_timeline_name(fence), 833 fence->seqno); 834 } 835 836 void msm_gem_describe(struct drm_gem_object *obj, struct seq_file *m) 837 { 838 struct msm_gem_object *msm_obj = to_msm_bo(obj); 839 struct dma_resv *robj = obj->resv; 840 struct dma_resv_list *fobj; 841 struct dma_fence *fence; 842 struct msm_gem_vma *vma; 843 uint64_t off = drm_vma_node_start(&obj->vma_node); 844 const char *madv; 845 846 msm_gem_lock(obj); 847 848 switch (msm_obj->madv) { 849 case __MSM_MADV_PURGED: 850 madv = " purged"; 851 break; 852 case MSM_MADV_DONTNEED: 853 madv = " purgeable"; 854 break; 855 case MSM_MADV_WILLNEED: 856 default: 857 madv = ""; 858 break; 859 } 860 861 seq_printf(m, "%08x: %c %2d (%2d) %08llx %p", 862 msm_obj->flags, is_active(msm_obj) ? 'A' : 'I', 863 obj->name, kref_read(&obj->refcount), 864 off, msm_obj->vaddr); 865 866 seq_printf(m, " %08zu %9s %-32s\n", obj->size, madv, msm_obj->name); 867 868 if (!list_empty(&msm_obj->vmas)) { 869 870 seq_puts(m, " vmas:"); 871 872 list_for_each_entry(vma, &msm_obj->vmas, list) { 873 const char *name, *comm; 874 if (vma->aspace) { 875 struct msm_gem_address_space *aspace = vma->aspace; 876 struct task_struct *task = 877 get_pid_task(aspace->pid, PIDTYPE_PID); 878 if (task) { 879 comm = kstrdup(task->comm, GFP_KERNEL); 880 } else { 881 comm = NULL; 882 } 883 name = aspace->name; 884 } else { 885 name = comm = NULL; 886 } 887 seq_printf(m, " [%s%s%s: aspace=%p, %08llx,%s,inuse=%d]", 888 name, comm ? ":" : "", comm ? comm : "", 889 vma->aspace, vma->iova, 890 vma->mapped ? "mapped" : "unmapped", 891 vma->inuse); 892 kfree(comm); 893 } 894 895 seq_puts(m, "\n"); 896 } 897 898 rcu_read_lock(); 899 fobj = rcu_dereference(robj->fence); 900 if (fobj) { 901 unsigned int i, shared_count = fobj->shared_count; 902 903 for (i = 0; i < shared_count; i++) { 904 fence = rcu_dereference(fobj->shared[i]); 905 describe_fence(fence, "Shared", m); 906 } 907 } 908 909 fence = rcu_dereference(robj->fence_excl); 910 if (fence) 911 describe_fence(fence, "Exclusive", m); 912 rcu_read_unlock(); 913 914 msm_gem_unlock(obj); 915 } 916 917 void msm_gem_describe_objects(struct list_head *list, struct seq_file *m) 918 { 919 struct msm_gem_object *msm_obj; 920 int count = 0; 921 size_t size = 0; 922 923 seq_puts(m, " flags id ref offset kaddr size madv name\n"); 924 list_for_each_entry(msm_obj, list, mm_list) { 925 struct drm_gem_object *obj = &msm_obj->base; 926 seq_puts(m, " "); 927 msm_gem_describe(obj, m); 928 count++; 929 size += obj->size; 930 } 931 932 seq_printf(m, "Total %d objects, %zu bytes\n", count, size); 933 } 934 #endif 935 936 /* don't call directly! Use drm_gem_object_put_locked() and friends */ 937 void msm_gem_free_object(struct drm_gem_object *obj) 938 { 939 struct msm_gem_object *msm_obj = to_msm_bo(obj); 940 struct drm_device *dev = obj->dev; 941 struct msm_drm_private *priv = dev->dev_private; 942 943 if (llist_add(&msm_obj->freed, &priv->free_list)) 944 queue_work(priv->wq, &priv->free_work); 945 } 946 947 static void free_object(struct msm_gem_object *msm_obj) 948 { 949 struct drm_gem_object *obj = &msm_obj->base; 950 struct drm_device *dev = obj->dev; 951 struct msm_drm_private *priv = dev->dev_private; 952 953 WARN_ON(!mutex_is_locked(&dev->struct_mutex)); 954 955 /* object should not be on active list: */ 956 WARN_ON(is_active(msm_obj)); 957 958 mutex_lock(&priv->mm_lock); 959 list_del(&msm_obj->mm_list); 960 mutex_unlock(&priv->mm_lock); 961 962 msm_gem_lock(obj); 963 964 put_iova(obj); 965 966 if (obj->import_attach) { 967 WARN_ON(msm_obj->vaddr); 968 969 /* Don't drop the pages for imported dmabuf, as they are not 970 * ours, just free the array we allocated: 971 */ 972 if (msm_obj->pages) 973 kvfree(msm_obj->pages); 974 975 /* dma_buf_detach() grabs resv lock, so we need to unlock 976 * prior to drm_prime_gem_destroy 977 */ 978 msm_gem_unlock(obj); 979 980 drm_prime_gem_destroy(obj, msm_obj->sgt); 981 } else { 982 msm_gem_vunmap(obj); 983 put_pages(obj); 984 msm_gem_unlock(obj); 985 } 986 987 drm_gem_object_release(obj); 988 989 kfree(msm_obj); 990 } 991 992 void msm_gem_free_work(struct work_struct *work) 993 { 994 struct msm_drm_private *priv = 995 container_of(work, struct msm_drm_private, free_work); 996 struct drm_device *dev = priv->dev; 997 struct llist_node *freed; 998 struct msm_gem_object *msm_obj, *next; 999 1000 while ((freed = llist_del_all(&priv->free_list))) { 1001 1002 mutex_lock(&dev->struct_mutex); 1003 1004 llist_for_each_entry_safe(msm_obj, next, 1005 freed, freed) 1006 free_object(msm_obj); 1007 1008 mutex_unlock(&dev->struct_mutex); 1009 1010 if (need_resched()) 1011 break; 1012 } 1013 } 1014 1015 /* convenience method to construct a GEM buffer object, and userspace handle */ 1016 int msm_gem_new_handle(struct drm_device *dev, struct drm_file *file, 1017 uint32_t size, uint32_t flags, uint32_t *handle, 1018 char *name) 1019 { 1020 struct drm_gem_object *obj; 1021 int ret; 1022 1023 obj = msm_gem_new(dev, size, flags); 1024 1025 if (IS_ERR(obj)) 1026 return PTR_ERR(obj); 1027 1028 if (name) 1029 msm_gem_object_set_name(obj, "%s", name); 1030 1031 ret = drm_gem_handle_create(file, obj, handle); 1032 1033 /* drop reference from allocate - handle holds it now */ 1034 drm_gem_object_put(obj); 1035 1036 return ret; 1037 } 1038 1039 static int msm_gem_new_impl(struct drm_device *dev, 1040 uint32_t size, uint32_t flags, 1041 struct drm_gem_object **obj) 1042 { 1043 struct msm_gem_object *msm_obj; 1044 1045 switch (flags & MSM_BO_CACHE_MASK) { 1046 case MSM_BO_UNCACHED: 1047 case MSM_BO_CACHED: 1048 case MSM_BO_WC: 1049 break; 1050 default: 1051 DRM_DEV_ERROR(dev->dev, "invalid cache flag: %x\n", 1052 (flags & MSM_BO_CACHE_MASK)); 1053 return -EINVAL; 1054 } 1055 1056 msm_obj = kzalloc(sizeof(*msm_obj), GFP_KERNEL); 1057 if (!msm_obj) 1058 return -ENOMEM; 1059 1060 msm_obj->flags = flags; 1061 msm_obj->madv = MSM_MADV_WILLNEED; 1062 1063 INIT_LIST_HEAD(&msm_obj->submit_entry); 1064 INIT_LIST_HEAD(&msm_obj->vmas); 1065 1066 *obj = &msm_obj->base; 1067 1068 return 0; 1069 } 1070 1071 static struct drm_gem_object *_msm_gem_new(struct drm_device *dev, 1072 uint32_t size, uint32_t flags, bool struct_mutex_locked) 1073 { 1074 struct msm_drm_private *priv = dev->dev_private; 1075 struct msm_gem_object *msm_obj; 1076 struct drm_gem_object *obj = NULL; 1077 bool use_vram = false; 1078 int ret; 1079 1080 size = PAGE_ALIGN(size); 1081 1082 if (!msm_use_mmu(dev)) 1083 use_vram = true; 1084 else if ((flags & (MSM_BO_STOLEN | MSM_BO_SCANOUT)) && priv->vram.size) 1085 use_vram = true; 1086 1087 if (WARN_ON(use_vram && !priv->vram.size)) 1088 return ERR_PTR(-EINVAL); 1089 1090 /* Disallow zero sized objects as they make the underlying 1091 * infrastructure grumpy 1092 */ 1093 if (size == 0) 1094 return ERR_PTR(-EINVAL); 1095 1096 ret = msm_gem_new_impl(dev, size, flags, &obj); 1097 if (ret) 1098 goto fail; 1099 1100 msm_obj = to_msm_bo(obj); 1101 1102 if (use_vram) { 1103 struct msm_gem_vma *vma; 1104 struct page **pages; 1105 1106 msm_gem_lock(obj); 1107 1108 vma = add_vma(obj, NULL); 1109 msm_gem_unlock(obj); 1110 if (IS_ERR(vma)) { 1111 ret = PTR_ERR(vma); 1112 goto fail; 1113 } 1114 1115 to_msm_bo(obj)->vram_node = &vma->node; 1116 1117 drm_gem_private_object_init(dev, obj, size); 1118 1119 pages = get_pages(obj); 1120 if (IS_ERR(pages)) { 1121 ret = PTR_ERR(pages); 1122 goto fail; 1123 } 1124 1125 vma->iova = physaddr(obj); 1126 } else { 1127 ret = drm_gem_object_init(dev, obj, size); 1128 if (ret) 1129 goto fail; 1130 /* 1131 * Our buffers are kept pinned, so allocating them from the 1132 * MOVABLE zone is a really bad idea, and conflicts with CMA. 1133 * See comments above new_inode() why this is required _and_ 1134 * expected if you're going to pin these pages. 1135 */ 1136 mapping_set_gfp_mask(obj->filp->f_mapping, GFP_HIGHUSER); 1137 } 1138 1139 mutex_lock(&priv->mm_lock); 1140 list_add_tail(&msm_obj->mm_list, &priv->inactive_list); 1141 mutex_unlock(&priv->mm_lock); 1142 1143 return obj; 1144 1145 fail: 1146 if (struct_mutex_locked) { 1147 drm_gem_object_put_locked(obj); 1148 } else { 1149 drm_gem_object_put(obj); 1150 } 1151 return ERR_PTR(ret); 1152 } 1153 1154 struct drm_gem_object *msm_gem_new_locked(struct drm_device *dev, 1155 uint32_t size, uint32_t flags) 1156 { 1157 return _msm_gem_new(dev, size, flags, true); 1158 } 1159 1160 struct drm_gem_object *msm_gem_new(struct drm_device *dev, 1161 uint32_t size, uint32_t flags) 1162 { 1163 return _msm_gem_new(dev, size, flags, false); 1164 } 1165 1166 struct drm_gem_object *msm_gem_import(struct drm_device *dev, 1167 struct dma_buf *dmabuf, struct sg_table *sgt) 1168 { 1169 struct msm_drm_private *priv = dev->dev_private; 1170 struct msm_gem_object *msm_obj; 1171 struct drm_gem_object *obj; 1172 uint32_t size; 1173 int ret, npages; 1174 1175 /* if we don't have IOMMU, don't bother pretending we can import: */ 1176 if (!msm_use_mmu(dev)) { 1177 DRM_DEV_ERROR(dev->dev, "cannot import without IOMMU\n"); 1178 return ERR_PTR(-EINVAL); 1179 } 1180 1181 size = PAGE_ALIGN(dmabuf->size); 1182 1183 ret = msm_gem_new_impl(dev, size, MSM_BO_WC, &obj); 1184 if (ret) 1185 goto fail; 1186 1187 drm_gem_private_object_init(dev, obj, size); 1188 1189 npages = size / PAGE_SIZE; 1190 1191 msm_obj = to_msm_bo(obj); 1192 msm_gem_lock(obj); 1193 msm_obj->sgt = sgt; 1194 msm_obj->pages = kvmalloc_array(npages, sizeof(struct page *), GFP_KERNEL); 1195 if (!msm_obj->pages) { 1196 msm_gem_unlock(obj); 1197 ret = -ENOMEM; 1198 goto fail; 1199 } 1200 1201 ret = drm_prime_sg_to_page_addr_arrays(sgt, msm_obj->pages, NULL, npages); 1202 if (ret) { 1203 msm_gem_unlock(obj); 1204 goto fail; 1205 } 1206 1207 msm_gem_unlock(obj); 1208 1209 mutex_lock(&priv->mm_lock); 1210 list_add_tail(&msm_obj->mm_list, &priv->inactive_list); 1211 mutex_unlock(&priv->mm_lock); 1212 1213 return obj; 1214 1215 fail: 1216 drm_gem_object_put(obj); 1217 return ERR_PTR(ret); 1218 } 1219 1220 static void *_msm_gem_kernel_new(struct drm_device *dev, uint32_t size, 1221 uint32_t flags, struct msm_gem_address_space *aspace, 1222 struct drm_gem_object **bo, uint64_t *iova, bool locked) 1223 { 1224 void *vaddr; 1225 struct drm_gem_object *obj = _msm_gem_new(dev, size, flags, locked); 1226 int ret; 1227 1228 if (IS_ERR(obj)) 1229 return ERR_CAST(obj); 1230 1231 if (iova) { 1232 ret = msm_gem_get_and_pin_iova(obj, aspace, iova); 1233 if (ret) 1234 goto err; 1235 } 1236 1237 vaddr = msm_gem_get_vaddr(obj); 1238 if (IS_ERR(vaddr)) { 1239 msm_gem_unpin_iova(obj, aspace); 1240 ret = PTR_ERR(vaddr); 1241 goto err; 1242 } 1243 1244 if (bo) 1245 *bo = obj; 1246 1247 return vaddr; 1248 err: 1249 if (locked) 1250 drm_gem_object_put_locked(obj); 1251 else 1252 drm_gem_object_put(obj); 1253 1254 return ERR_PTR(ret); 1255 1256 } 1257 1258 void *msm_gem_kernel_new(struct drm_device *dev, uint32_t size, 1259 uint32_t flags, struct msm_gem_address_space *aspace, 1260 struct drm_gem_object **bo, uint64_t *iova) 1261 { 1262 return _msm_gem_kernel_new(dev, size, flags, aspace, bo, iova, false); 1263 } 1264 1265 void *msm_gem_kernel_new_locked(struct drm_device *dev, uint32_t size, 1266 uint32_t flags, struct msm_gem_address_space *aspace, 1267 struct drm_gem_object **bo, uint64_t *iova) 1268 { 1269 return _msm_gem_kernel_new(dev, size, flags, aspace, bo, iova, true); 1270 } 1271 1272 void msm_gem_kernel_put(struct drm_gem_object *bo, 1273 struct msm_gem_address_space *aspace, bool locked) 1274 { 1275 if (IS_ERR_OR_NULL(bo)) 1276 return; 1277 1278 msm_gem_put_vaddr(bo); 1279 msm_gem_unpin_iova(bo, aspace); 1280 1281 if (locked) 1282 drm_gem_object_put_locked(bo); 1283 else 1284 drm_gem_object_put(bo); 1285 } 1286 1287 void msm_gem_object_set_name(struct drm_gem_object *bo, const char *fmt, ...) 1288 { 1289 struct msm_gem_object *msm_obj = to_msm_bo(bo); 1290 va_list ap; 1291 1292 if (!fmt) 1293 return; 1294 1295 va_start(ap, fmt); 1296 vsnprintf(msm_obj->name, sizeof(msm_obj->name), fmt, ap); 1297 va_end(ap); 1298 } 1299