1 /*
2  * Copyright (C) 2008 Ben Skeggs.
3  * All Rights Reserved.
4  *
5  * Permission is hereby granted, free of charge, to any person obtaining
6  * a copy of this software and associated documentation files (the
7  * "Software"), to deal in the Software without restriction, including
8  * without limitation the rights to use, copy, modify, merge, publish,
9  * distribute, sublicense, and/or sell copies of the Software, and to
10  * permit persons to whom the Software is furnished to do so, subject to
11  * the following conditions:
12  *
13  * The above copyright notice and this permission notice (including the
14  * next paragraph) shall be included in all copies or substantial
15  * portions of the Software.
16  *
17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
18  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
19  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
20  * IN NO EVENT SHALL THE COPYRIGHT OWNER(S) AND/OR ITS SUPPLIERS BE
21  * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
22  * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
23  * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
24  *
25  */
26 #include "drmP.h"
27 #include "drm.h"
28 
29 #include "nouveau_drv.h"
30 #include "nouveau_drm.h"
31 #include "nouveau_dma.h"
32 
33 #define nouveau_gem_pushbuf_sync(chan) 0
34 
35 int
36 nouveau_gem_object_new(struct drm_gem_object *gem)
37 {
38 	return 0;
39 }
40 
41 void
42 nouveau_gem_object_del(struct drm_gem_object *gem)
43 {
44 	struct nouveau_bo *nvbo = gem->driver_private;
45 	struct ttm_buffer_object *bo = &nvbo->bo;
46 
47 	if (!nvbo)
48 		return;
49 	nvbo->gem = NULL;
50 
51 	if (unlikely(nvbo->pin_refcnt)) {
52 		nvbo->pin_refcnt = 1;
53 		nouveau_bo_unpin(nvbo);
54 	}
55 
56 	ttm_bo_unref(&bo);
57 
58 	drm_gem_object_release(gem);
59 	kfree(gem);
60 }
61 
62 int
63 nouveau_gem_object_open(struct drm_gem_object *gem, struct drm_file *file_priv)
64 {
65 	struct nouveau_fpriv *fpriv = nouveau_fpriv(file_priv);
66 	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
67 	struct nouveau_vma *vma;
68 	int ret;
69 
70 	if (!fpriv->vm)
71 		return 0;
72 
73 	ret = ttm_bo_reserve(&nvbo->bo, false, false, false, 0);
74 	if (ret)
75 		return ret;
76 
77 	vma = nouveau_bo_vma_find(nvbo, fpriv->vm);
78 	if (!vma) {
79 		vma = kzalloc(sizeof(*vma), GFP_KERNEL);
80 		if (!vma) {
81 			ret = -ENOMEM;
82 			goto out;
83 		}
84 
85 		ret = nouveau_bo_vma_add(nvbo, fpriv->vm, vma);
86 		if (ret) {
87 			kfree(vma);
88 			goto out;
89 		}
90 	} else {
91 		vma->refcount++;
92 	}
93 
94 out:
95 	ttm_bo_unreserve(&nvbo->bo);
96 	return ret;
97 }
98 
99 void
100 nouveau_gem_object_close(struct drm_gem_object *gem, struct drm_file *file_priv)
101 {
102 	struct nouveau_fpriv *fpriv = nouveau_fpriv(file_priv);
103 	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
104 	struct nouveau_vma *vma;
105 	int ret;
106 
107 	if (!fpriv->vm)
108 		return;
109 
110 	ret = ttm_bo_reserve(&nvbo->bo, false, false, false, 0);
111 	if (ret)
112 		return;
113 
114 	vma = nouveau_bo_vma_find(nvbo, fpriv->vm);
115 	if (vma) {
116 		if (--vma->refcount == 0) {
117 			nouveau_bo_vma_del(nvbo, vma);
118 			kfree(vma);
119 		}
120 	}
121 	ttm_bo_unreserve(&nvbo->bo);
122 }
123 
124 int
125 nouveau_gem_new(struct drm_device *dev, int size, int align, uint32_t domain,
126 		uint32_t tile_mode, uint32_t tile_flags,
127 		struct nouveau_bo **pnvbo)
128 {
129 	struct drm_nouveau_private *dev_priv = dev->dev_private;
130 	struct nouveau_bo *nvbo;
131 	u32 flags = 0;
132 	int ret;
133 
134 	if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
135 		flags |= TTM_PL_FLAG_VRAM;
136 	if (domain & NOUVEAU_GEM_DOMAIN_GART)
137 		flags |= TTM_PL_FLAG_TT;
138 	if (!flags || domain & NOUVEAU_GEM_DOMAIN_CPU)
139 		flags |= TTM_PL_FLAG_SYSTEM;
140 
141 	ret = nouveau_bo_new(dev, size, align, flags, tile_mode,
142 			     tile_flags, pnvbo);
143 	if (ret)
144 		return ret;
145 	nvbo = *pnvbo;
146 
147 	/* we restrict allowed domains on nv50+ to only the types
148 	 * that were requested at creation time.  not possibly on
149 	 * earlier chips without busting the ABI.
150 	 */
151 	nvbo->valid_domains = NOUVEAU_GEM_DOMAIN_VRAM |
152 			      NOUVEAU_GEM_DOMAIN_GART;
153 	if (dev_priv->card_type >= NV_50)
154 		nvbo->valid_domains &= domain;
155 
156 	nvbo->gem = drm_gem_object_alloc(dev, nvbo->bo.mem.size);
157 	if (!nvbo->gem) {
158 		nouveau_bo_ref(NULL, pnvbo);
159 		return -ENOMEM;
160 	}
161 
162 	nvbo->bo.persistent_swap_storage = nvbo->gem->filp;
163 	nvbo->gem->driver_private = nvbo;
164 	return 0;
165 }
166 
167 static int
168 nouveau_gem_info(struct drm_file *file_priv, struct drm_gem_object *gem,
169 		 struct drm_nouveau_gem_info *rep)
170 {
171 	struct nouveau_fpriv *fpriv = nouveau_fpriv(file_priv);
172 	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
173 	struct nouveau_vma *vma;
174 
175 	if (nvbo->bo.mem.mem_type == TTM_PL_TT)
176 		rep->domain = NOUVEAU_GEM_DOMAIN_GART;
177 	else
178 		rep->domain = NOUVEAU_GEM_DOMAIN_VRAM;
179 
180 	rep->offset = nvbo->bo.offset;
181 	if (fpriv->vm) {
182 		vma = nouveau_bo_vma_find(nvbo, fpriv->vm);
183 		if (!vma)
184 			return -EINVAL;
185 
186 		rep->offset = vma->offset;
187 	}
188 
189 	rep->size = nvbo->bo.mem.num_pages << PAGE_SHIFT;
190 	rep->map_handle = nvbo->bo.addr_space_offset;
191 	rep->tile_mode = nvbo->tile_mode;
192 	rep->tile_flags = nvbo->tile_flags;
193 	return 0;
194 }
195 
196 int
197 nouveau_gem_ioctl_new(struct drm_device *dev, void *data,
198 		      struct drm_file *file_priv)
199 {
200 	struct drm_nouveau_private *dev_priv = dev->dev_private;
201 	struct drm_nouveau_gem_new *req = data;
202 	struct nouveau_bo *nvbo = NULL;
203 	int ret = 0;
204 
205 	if (unlikely(dev_priv->ttm.bdev.dev_mapping == NULL))
206 		dev_priv->ttm.bdev.dev_mapping = dev_priv->dev->dev_mapping;
207 
208 	if (!dev_priv->engine.vram.flags_valid(dev, req->info.tile_flags)) {
209 		NV_ERROR(dev, "bad page flags: 0x%08x\n", req->info.tile_flags);
210 		return -EINVAL;
211 	}
212 
213 	ret = nouveau_gem_new(dev, req->info.size, req->align,
214 			      req->info.domain, req->info.tile_mode,
215 			      req->info.tile_flags, &nvbo);
216 	if (ret)
217 		return ret;
218 
219 	ret = drm_gem_handle_create(file_priv, nvbo->gem, &req->info.handle);
220 	if (ret == 0) {
221 		ret = nouveau_gem_info(file_priv, nvbo->gem, &req->info);
222 		if (ret)
223 			drm_gem_handle_delete(file_priv, req->info.handle);
224 	}
225 
226 	/* drop reference from allocate - handle holds it now */
227 	drm_gem_object_unreference_unlocked(nvbo->gem);
228 	return ret;
229 }
230 
231 static int
232 nouveau_gem_set_domain(struct drm_gem_object *gem, uint32_t read_domains,
233 		       uint32_t write_domains, uint32_t valid_domains)
234 {
235 	struct nouveau_bo *nvbo = gem->driver_private;
236 	struct ttm_buffer_object *bo = &nvbo->bo;
237 	uint32_t domains = valid_domains & nvbo->valid_domains &
238 		(write_domains ? write_domains : read_domains);
239 	uint32_t pref_flags = 0, valid_flags = 0;
240 
241 	if (!domains)
242 		return -EINVAL;
243 
244 	if (valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
245 		valid_flags |= TTM_PL_FLAG_VRAM;
246 
247 	if (valid_domains & NOUVEAU_GEM_DOMAIN_GART)
248 		valid_flags |= TTM_PL_FLAG_TT;
249 
250 	if ((domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
251 	    bo->mem.mem_type == TTM_PL_VRAM)
252 		pref_flags |= TTM_PL_FLAG_VRAM;
253 
254 	else if ((domains & NOUVEAU_GEM_DOMAIN_GART) &&
255 		 bo->mem.mem_type == TTM_PL_TT)
256 		pref_flags |= TTM_PL_FLAG_TT;
257 
258 	else if (domains & NOUVEAU_GEM_DOMAIN_VRAM)
259 		pref_flags |= TTM_PL_FLAG_VRAM;
260 
261 	else
262 		pref_flags |= TTM_PL_FLAG_TT;
263 
264 	nouveau_bo_placement_set(nvbo, pref_flags, valid_flags);
265 
266 	return 0;
267 }
268 
269 struct validate_op {
270 	struct list_head vram_list;
271 	struct list_head gart_list;
272 	struct list_head both_list;
273 };
274 
275 static void
276 validate_fini_list(struct list_head *list, struct nouveau_fence *fence)
277 {
278 	struct list_head *entry, *tmp;
279 	struct nouveau_bo *nvbo;
280 
281 	list_for_each_safe(entry, tmp, list) {
282 		nvbo = list_entry(entry, struct nouveau_bo, entry);
283 
284 		nouveau_bo_fence(nvbo, fence);
285 
286 		if (unlikely(nvbo->validate_mapped)) {
287 			ttm_bo_kunmap(&nvbo->kmap);
288 			nvbo->validate_mapped = false;
289 		}
290 
291 		list_del(&nvbo->entry);
292 		nvbo->reserved_by = NULL;
293 		ttm_bo_unreserve(&nvbo->bo);
294 		drm_gem_object_unreference_unlocked(nvbo->gem);
295 	}
296 }
297 
298 static void
299 validate_fini(struct validate_op *op, struct nouveau_fence* fence)
300 {
301 	validate_fini_list(&op->vram_list, fence);
302 	validate_fini_list(&op->gart_list, fence);
303 	validate_fini_list(&op->both_list, fence);
304 }
305 
306 static int
307 validate_init(struct nouveau_channel *chan, struct drm_file *file_priv,
308 	      struct drm_nouveau_gem_pushbuf_bo *pbbo,
309 	      int nr_buffers, struct validate_op *op)
310 {
311 	struct drm_device *dev = chan->dev;
312 	struct drm_nouveau_private *dev_priv = dev->dev_private;
313 	uint32_t sequence;
314 	int trycnt = 0;
315 	int ret, i;
316 
317 	sequence = atomic_add_return(1, &dev_priv->ttm.validate_sequence);
318 retry:
319 	if (++trycnt > 100000) {
320 		NV_ERROR(dev, "%s failed and gave up.\n", __func__);
321 		return -EINVAL;
322 	}
323 
324 	for (i = 0; i < nr_buffers; i++) {
325 		struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[i];
326 		struct drm_gem_object *gem;
327 		struct nouveau_bo *nvbo;
328 
329 		gem = drm_gem_object_lookup(dev, file_priv, b->handle);
330 		if (!gem) {
331 			NV_ERROR(dev, "Unknown handle 0x%08x\n", b->handle);
332 			validate_fini(op, NULL);
333 			return -ENOENT;
334 		}
335 		nvbo = gem->driver_private;
336 
337 		if (nvbo->reserved_by && nvbo->reserved_by == file_priv) {
338 			NV_ERROR(dev, "multiple instances of buffer %d on "
339 				      "validation list\n", b->handle);
340 			validate_fini(op, NULL);
341 			return -EINVAL;
342 		}
343 
344 		ret = ttm_bo_reserve(&nvbo->bo, true, false, true, sequence);
345 		if (ret) {
346 			validate_fini(op, NULL);
347 			if (unlikely(ret == -EAGAIN))
348 				ret = ttm_bo_wait_unreserved(&nvbo->bo, true);
349 			drm_gem_object_unreference_unlocked(gem);
350 			if (unlikely(ret)) {
351 				if (ret != -ERESTARTSYS)
352 					NV_ERROR(dev, "fail reserve\n");
353 				return ret;
354 			}
355 			goto retry;
356 		}
357 
358 		b->user_priv = (uint64_t)(unsigned long)nvbo;
359 		nvbo->reserved_by = file_priv;
360 		nvbo->pbbo_index = i;
361 		if ((b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
362 		    (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART))
363 			list_add_tail(&nvbo->entry, &op->both_list);
364 		else
365 		if (b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
366 			list_add_tail(&nvbo->entry, &op->vram_list);
367 		else
368 		if (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART)
369 			list_add_tail(&nvbo->entry, &op->gart_list);
370 		else {
371 			NV_ERROR(dev, "invalid valid domains: 0x%08x\n",
372 				 b->valid_domains);
373 			list_add_tail(&nvbo->entry, &op->both_list);
374 			validate_fini(op, NULL);
375 			return -EINVAL;
376 		}
377 	}
378 
379 	return 0;
380 }
381 
382 static int
383 validate_sync(struct nouveau_channel *chan, struct nouveau_bo *nvbo)
384 {
385 	struct nouveau_fence *fence = NULL;
386 	int ret = 0;
387 
388 	spin_lock(&nvbo->bo.bdev->fence_lock);
389 	if (nvbo->bo.sync_obj)
390 		fence = nouveau_fence_ref(nvbo->bo.sync_obj);
391 	spin_unlock(&nvbo->bo.bdev->fence_lock);
392 
393 	if (fence) {
394 		ret = nouveau_fence_sync(fence, chan);
395 		nouveau_fence_unref(&fence);
396 	}
397 
398 	return ret;
399 }
400 
401 static int
402 validate_list(struct nouveau_channel *chan, struct list_head *list,
403 	      struct drm_nouveau_gem_pushbuf_bo *pbbo, uint64_t user_pbbo_ptr)
404 {
405 	struct drm_nouveau_private *dev_priv = chan->dev->dev_private;
406 	struct drm_nouveau_gem_pushbuf_bo __user *upbbo =
407 				(void __force __user *)(uintptr_t)user_pbbo_ptr;
408 	struct drm_device *dev = chan->dev;
409 	struct nouveau_bo *nvbo;
410 	int ret, relocs = 0;
411 
412 	list_for_each_entry(nvbo, list, entry) {
413 		struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[nvbo->pbbo_index];
414 
415 		ret = validate_sync(chan, nvbo);
416 		if (unlikely(ret)) {
417 			NV_ERROR(dev, "fail pre-validate sync\n");
418 			return ret;
419 		}
420 
421 		ret = nouveau_gem_set_domain(nvbo->gem, b->read_domains,
422 					     b->write_domains,
423 					     b->valid_domains);
424 		if (unlikely(ret)) {
425 			NV_ERROR(dev, "fail set_domain\n");
426 			return ret;
427 		}
428 
429 		ret = nouveau_bo_validate(nvbo, true, false, false);
430 		if (unlikely(ret)) {
431 			if (ret != -ERESTARTSYS)
432 				NV_ERROR(dev, "fail ttm_validate\n");
433 			return ret;
434 		}
435 
436 		ret = validate_sync(chan, nvbo);
437 		if (unlikely(ret)) {
438 			NV_ERROR(dev, "fail post-validate sync\n");
439 			return ret;
440 		}
441 
442 		if (dev_priv->card_type < NV_50) {
443 			if (nvbo->bo.offset == b->presumed.offset &&
444 			    ((nvbo->bo.mem.mem_type == TTM_PL_VRAM &&
445 			      b->presumed.domain & NOUVEAU_GEM_DOMAIN_VRAM) ||
446 			     (nvbo->bo.mem.mem_type == TTM_PL_TT &&
447 			      b->presumed.domain & NOUVEAU_GEM_DOMAIN_GART)))
448 				continue;
449 
450 			if (nvbo->bo.mem.mem_type == TTM_PL_TT)
451 				b->presumed.domain = NOUVEAU_GEM_DOMAIN_GART;
452 			else
453 				b->presumed.domain = NOUVEAU_GEM_DOMAIN_VRAM;
454 			b->presumed.offset = nvbo->bo.offset;
455 			b->presumed.valid = 0;
456 			relocs++;
457 
458 			if (DRM_COPY_TO_USER(&upbbo[nvbo->pbbo_index].presumed,
459 					     &b->presumed, sizeof(b->presumed)))
460 				return -EFAULT;
461 		}
462 	}
463 
464 	return relocs;
465 }
466 
467 static int
468 nouveau_gem_pushbuf_validate(struct nouveau_channel *chan,
469 			     struct drm_file *file_priv,
470 			     struct drm_nouveau_gem_pushbuf_bo *pbbo,
471 			     uint64_t user_buffers, int nr_buffers,
472 			     struct validate_op *op, int *apply_relocs)
473 {
474 	struct drm_device *dev = chan->dev;
475 	int ret, relocs = 0;
476 
477 	INIT_LIST_HEAD(&op->vram_list);
478 	INIT_LIST_HEAD(&op->gart_list);
479 	INIT_LIST_HEAD(&op->both_list);
480 
481 	if (nr_buffers == 0)
482 		return 0;
483 
484 	ret = validate_init(chan, file_priv, pbbo, nr_buffers, op);
485 	if (unlikely(ret)) {
486 		if (ret != -ERESTARTSYS)
487 			NV_ERROR(dev, "validate_init\n");
488 		return ret;
489 	}
490 
491 	ret = validate_list(chan, &op->vram_list, pbbo, user_buffers);
492 	if (unlikely(ret < 0)) {
493 		if (ret != -ERESTARTSYS)
494 			NV_ERROR(dev, "validate vram_list\n");
495 		validate_fini(op, NULL);
496 		return ret;
497 	}
498 	relocs += ret;
499 
500 	ret = validate_list(chan, &op->gart_list, pbbo, user_buffers);
501 	if (unlikely(ret < 0)) {
502 		if (ret != -ERESTARTSYS)
503 			NV_ERROR(dev, "validate gart_list\n");
504 		validate_fini(op, NULL);
505 		return ret;
506 	}
507 	relocs += ret;
508 
509 	ret = validate_list(chan, &op->both_list, pbbo, user_buffers);
510 	if (unlikely(ret < 0)) {
511 		if (ret != -ERESTARTSYS)
512 			NV_ERROR(dev, "validate both_list\n");
513 		validate_fini(op, NULL);
514 		return ret;
515 	}
516 	relocs += ret;
517 
518 	*apply_relocs = relocs;
519 	return 0;
520 }
521 
522 static inline void *
523 u_memcpya(uint64_t user, unsigned nmemb, unsigned size)
524 {
525 	void *mem;
526 	void __user *userptr = (void __force __user *)(uintptr_t)user;
527 
528 	mem = kmalloc(nmemb * size, GFP_KERNEL);
529 	if (!mem)
530 		return ERR_PTR(-ENOMEM);
531 
532 	if (DRM_COPY_FROM_USER(mem, userptr, nmemb * size)) {
533 		kfree(mem);
534 		return ERR_PTR(-EFAULT);
535 	}
536 
537 	return mem;
538 }
539 
540 static int
541 nouveau_gem_pushbuf_reloc_apply(struct drm_device *dev,
542 				struct drm_nouveau_gem_pushbuf *req,
543 				struct drm_nouveau_gem_pushbuf_bo *bo)
544 {
545 	struct drm_nouveau_gem_pushbuf_reloc *reloc = NULL;
546 	int ret = 0;
547 	unsigned i;
548 
549 	reloc = u_memcpya(req->relocs, req->nr_relocs, sizeof(*reloc));
550 	if (IS_ERR(reloc))
551 		return PTR_ERR(reloc);
552 
553 	for (i = 0; i < req->nr_relocs; i++) {
554 		struct drm_nouveau_gem_pushbuf_reloc *r = &reloc[i];
555 		struct drm_nouveau_gem_pushbuf_bo *b;
556 		struct nouveau_bo *nvbo;
557 		uint32_t data;
558 
559 		if (unlikely(r->bo_index > req->nr_buffers)) {
560 			NV_ERROR(dev, "reloc bo index invalid\n");
561 			ret = -EINVAL;
562 			break;
563 		}
564 
565 		b = &bo[r->bo_index];
566 		if (b->presumed.valid)
567 			continue;
568 
569 		if (unlikely(r->reloc_bo_index > req->nr_buffers)) {
570 			NV_ERROR(dev, "reloc container bo index invalid\n");
571 			ret = -EINVAL;
572 			break;
573 		}
574 		nvbo = (void *)(unsigned long)bo[r->reloc_bo_index].user_priv;
575 
576 		if (unlikely(r->reloc_bo_offset + 4 >
577 			     nvbo->bo.mem.num_pages << PAGE_SHIFT)) {
578 			NV_ERROR(dev, "reloc outside of bo\n");
579 			ret = -EINVAL;
580 			break;
581 		}
582 
583 		if (!nvbo->kmap.virtual) {
584 			ret = ttm_bo_kmap(&nvbo->bo, 0, nvbo->bo.mem.num_pages,
585 					  &nvbo->kmap);
586 			if (ret) {
587 				NV_ERROR(dev, "failed kmap for reloc\n");
588 				break;
589 			}
590 			nvbo->validate_mapped = true;
591 		}
592 
593 		if (r->flags & NOUVEAU_GEM_RELOC_LOW)
594 			data = b->presumed.offset + r->data;
595 		else
596 		if (r->flags & NOUVEAU_GEM_RELOC_HIGH)
597 			data = (b->presumed.offset + r->data) >> 32;
598 		else
599 			data = r->data;
600 
601 		if (r->flags & NOUVEAU_GEM_RELOC_OR) {
602 			if (b->presumed.domain == NOUVEAU_GEM_DOMAIN_GART)
603 				data |= r->tor;
604 			else
605 				data |= r->vor;
606 		}
607 
608 		spin_lock(&nvbo->bo.bdev->fence_lock);
609 		ret = ttm_bo_wait(&nvbo->bo, false, false, false);
610 		spin_unlock(&nvbo->bo.bdev->fence_lock);
611 		if (ret) {
612 			NV_ERROR(dev, "reloc wait_idle failed: %d\n", ret);
613 			break;
614 		}
615 
616 		nouveau_bo_wr32(nvbo, r->reloc_bo_offset >> 2, data);
617 	}
618 
619 	kfree(reloc);
620 	return ret;
621 }
622 
623 int
624 nouveau_gem_ioctl_pushbuf(struct drm_device *dev, void *data,
625 			  struct drm_file *file_priv)
626 {
627 	struct drm_nouveau_private *dev_priv = dev->dev_private;
628 	struct drm_nouveau_gem_pushbuf *req = data;
629 	struct drm_nouveau_gem_pushbuf_push *push;
630 	struct drm_nouveau_gem_pushbuf_bo *bo;
631 	struct nouveau_channel *chan;
632 	struct validate_op op;
633 	struct nouveau_fence *fence = NULL;
634 	int i, j, ret = 0, do_reloc = 0;
635 
636 	chan = nouveau_channel_get(file_priv, req->channel);
637 	if (IS_ERR(chan))
638 		return PTR_ERR(chan);
639 
640 	req->vram_available = dev_priv->fb_aper_free;
641 	req->gart_available = dev_priv->gart_info.aper_free;
642 	if (unlikely(req->nr_push == 0))
643 		goto out_next;
644 
645 	if (unlikely(req->nr_push > NOUVEAU_GEM_MAX_PUSH)) {
646 		NV_ERROR(dev, "pushbuf push count exceeds limit: %d max %d\n",
647 			 req->nr_push, NOUVEAU_GEM_MAX_PUSH);
648 		nouveau_channel_put(&chan);
649 		return -EINVAL;
650 	}
651 
652 	if (unlikely(req->nr_buffers > NOUVEAU_GEM_MAX_BUFFERS)) {
653 		NV_ERROR(dev, "pushbuf bo count exceeds limit: %d max %d\n",
654 			 req->nr_buffers, NOUVEAU_GEM_MAX_BUFFERS);
655 		nouveau_channel_put(&chan);
656 		return -EINVAL;
657 	}
658 
659 	if (unlikely(req->nr_relocs > NOUVEAU_GEM_MAX_RELOCS)) {
660 		NV_ERROR(dev, "pushbuf reloc count exceeds limit: %d max %d\n",
661 			 req->nr_relocs, NOUVEAU_GEM_MAX_RELOCS);
662 		nouveau_channel_put(&chan);
663 		return -EINVAL;
664 	}
665 
666 	push = u_memcpya(req->push, req->nr_push, sizeof(*push));
667 	if (IS_ERR(push)) {
668 		nouveau_channel_put(&chan);
669 		return PTR_ERR(push);
670 	}
671 
672 	bo = u_memcpya(req->buffers, req->nr_buffers, sizeof(*bo));
673 	if (IS_ERR(bo)) {
674 		kfree(push);
675 		nouveau_channel_put(&chan);
676 		return PTR_ERR(bo);
677 	}
678 
679 	/* Ensure all push buffers are on validate list */
680 	for (i = 0; i < req->nr_push; i++) {
681 		if (push[i].bo_index >= req->nr_buffers) {
682 			NV_ERROR(dev, "push %d buffer not in list\n", i);
683 			ret = -EINVAL;
684 			goto out_prevalid;
685 		}
686 	}
687 
688 	/* Validate buffer list */
689 	ret = nouveau_gem_pushbuf_validate(chan, file_priv, bo, req->buffers,
690 					   req->nr_buffers, &op, &do_reloc);
691 	if (ret) {
692 		if (ret != -ERESTARTSYS)
693 			NV_ERROR(dev, "validate: %d\n", ret);
694 		goto out_prevalid;
695 	}
696 
697 	/* Apply any relocations that are required */
698 	if (do_reloc) {
699 		ret = nouveau_gem_pushbuf_reloc_apply(dev, req, bo);
700 		if (ret) {
701 			NV_ERROR(dev, "reloc apply: %d\n", ret);
702 			goto out;
703 		}
704 	}
705 
706 	if (chan->dma.ib_max) {
707 		ret = nouveau_dma_wait(chan, req->nr_push + 1, 6);
708 		if (ret) {
709 			NV_INFO(dev, "nv50cal_space: %d\n", ret);
710 			goto out;
711 		}
712 
713 		for (i = 0; i < req->nr_push; i++) {
714 			struct nouveau_bo *nvbo = (void *)(unsigned long)
715 				bo[push[i].bo_index].user_priv;
716 
717 			nv50_dma_push(chan, nvbo, push[i].offset,
718 				      push[i].length);
719 		}
720 	} else
721 	if (dev_priv->chipset >= 0x25) {
722 		ret = RING_SPACE(chan, req->nr_push * 2);
723 		if (ret) {
724 			NV_ERROR(dev, "cal_space: %d\n", ret);
725 			goto out;
726 		}
727 
728 		for (i = 0; i < req->nr_push; i++) {
729 			struct nouveau_bo *nvbo = (void *)(unsigned long)
730 				bo[push[i].bo_index].user_priv;
731 			struct drm_mm_node *mem = nvbo->bo.mem.mm_node;
732 
733 			OUT_RING(chan, ((mem->start << PAGE_SHIFT) +
734 					push[i].offset) | 2);
735 			OUT_RING(chan, 0);
736 		}
737 	} else {
738 		ret = RING_SPACE(chan, req->nr_push * (2 + NOUVEAU_DMA_SKIPS));
739 		if (ret) {
740 			NV_ERROR(dev, "jmp_space: %d\n", ret);
741 			goto out;
742 		}
743 
744 		for (i = 0; i < req->nr_push; i++) {
745 			struct nouveau_bo *nvbo = (void *)(unsigned long)
746 				bo[push[i].bo_index].user_priv;
747 			struct drm_mm_node *mem = nvbo->bo.mem.mm_node;
748 			uint32_t cmd;
749 
750 			cmd = chan->pushbuf_base + ((chan->dma.cur + 2) << 2);
751 			cmd |= 0x20000000;
752 			if (unlikely(cmd != req->suffix0)) {
753 				if (!nvbo->kmap.virtual) {
754 					ret = ttm_bo_kmap(&nvbo->bo, 0,
755 							  nvbo->bo.mem.
756 							  num_pages,
757 							  &nvbo->kmap);
758 					if (ret) {
759 						WIND_RING(chan);
760 						goto out;
761 					}
762 					nvbo->validate_mapped = true;
763 				}
764 
765 				nouveau_bo_wr32(nvbo, (push[i].offset +
766 						push[i].length - 8) / 4, cmd);
767 			}
768 
769 			OUT_RING(chan, ((mem->start << PAGE_SHIFT) +
770 					push[i].offset) | 0x20000000);
771 			OUT_RING(chan, 0);
772 			for (j = 0; j < NOUVEAU_DMA_SKIPS; j++)
773 				OUT_RING(chan, 0);
774 		}
775 	}
776 
777 	ret = nouveau_fence_new(chan, &fence, true);
778 	if (ret) {
779 		NV_ERROR(dev, "error fencing pushbuf: %d\n", ret);
780 		WIND_RING(chan);
781 		goto out;
782 	}
783 
784 out:
785 	validate_fini(&op, fence);
786 	nouveau_fence_unref(&fence);
787 
788 out_prevalid:
789 	kfree(bo);
790 	kfree(push);
791 
792 out_next:
793 	if (chan->dma.ib_max) {
794 		req->suffix0 = 0x00000000;
795 		req->suffix1 = 0x00000000;
796 	} else
797 	if (dev_priv->chipset >= 0x25) {
798 		req->suffix0 = 0x00020000;
799 		req->suffix1 = 0x00000000;
800 	} else {
801 		req->suffix0 = 0x20000000 |
802 			      (chan->pushbuf_base + ((chan->dma.cur + 2) << 2));
803 		req->suffix1 = 0x00000000;
804 	}
805 
806 	nouveau_channel_put(&chan);
807 	return ret;
808 }
809 
810 static inline uint32_t
811 domain_to_ttm(struct nouveau_bo *nvbo, uint32_t domain)
812 {
813 	uint32_t flags = 0;
814 
815 	if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
816 		flags |= TTM_PL_FLAG_VRAM;
817 	if (domain & NOUVEAU_GEM_DOMAIN_GART)
818 		flags |= TTM_PL_FLAG_TT;
819 
820 	return flags;
821 }
822 
823 int
824 nouveau_gem_ioctl_cpu_prep(struct drm_device *dev, void *data,
825 			   struct drm_file *file_priv)
826 {
827 	struct drm_nouveau_gem_cpu_prep *req = data;
828 	struct drm_gem_object *gem;
829 	struct nouveau_bo *nvbo;
830 	bool no_wait = !!(req->flags & NOUVEAU_GEM_CPU_PREP_NOWAIT);
831 	int ret = -EINVAL;
832 
833 	gem = drm_gem_object_lookup(dev, file_priv, req->handle);
834 	if (!gem)
835 		return -ENOENT;
836 	nvbo = nouveau_gem_object(gem);
837 
838 	spin_lock(&nvbo->bo.bdev->fence_lock);
839 	ret = ttm_bo_wait(&nvbo->bo, true, true, no_wait);
840 	spin_unlock(&nvbo->bo.bdev->fence_lock);
841 	drm_gem_object_unreference_unlocked(gem);
842 	return ret;
843 }
844 
845 int
846 nouveau_gem_ioctl_cpu_fini(struct drm_device *dev, void *data,
847 			   struct drm_file *file_priv)
848 {
849 	return 0;
850 }
851 
852 int
853 nouveau_gem_ioctl_info(struct drm_device *dev, void *data,
854 		       struct drm_file *file_priv)
855 {
856 	struct drm_nouveau_gem_info *req = data;
857 	struct drm_gem_object *gem;
858 	int ret;
859 
860 	gem = drm_gem_object_lookup(dev, file_priv, req->handle);
861 	if (!gem)
862 		return -ENOENT;
863 
864 	ret = nouveau_gem_info(file_priv, gem, req);
865 	drm_gem_object_unreference_unlocked(gem);
866 	return ret;
867 }
868 
869