1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Copyright (C) Fuzhou Rockchip Electronics Co.Ltd
4  * Author:Mark Yao <mark.yao@rock-chips.com>
5  */
6 
7 #include <linux/dma-buf.h>
8 #include <linux/iommu.h>
9 #include <linux/vmalloc.h>
10 
11 #include <drm/drm.h>
12 #include <drm/drm_fb_helper.h>
13 #include <drm/drm_gem.h>
14 #include <drm/drm_gem_dma_helper.h>
15 #include <drm/drm_prime.h>
16 #include <drm/drm_vma_manager.h>
17 
18 #include "rockchip_drm_drv.h"
19 #include "rockchip_drm_gem.h"
20 
21 static int rockchip_gem_iommu_map(struct rockchip_gem_object *rk_obj)
22 {
23 	struct drm_device *drm = rk_obj->base.dev;
24 	struct rockchip_drm_private *private = drm->dev_private;
25 	int prot = IOMMU_READ | IOMMU_WRITE;
26 	ssize_t ret;
27 
28 	mutex_lock(&private->mm_lock);
29 	ret = drm_mm_insert_node_generic(&private->mm, &rk_obj->mm,
30 					 rk_obj->base.size, PAGE_SIZE,
31 					 0, 0);
32 	mutex_unlock(&private->mm_lock);
33 
34 	if (ret < 0) {
35 		DRM_ERROR("out of I/O virtual memory: %zd\n", ret);
36 		return ret;
37 	}
38 
39 	rk_obj->dma_addr = rk_obj->mm.start;
40 
41 	ret = iommu_map_sgtable(private->domain, rk_obj->dma_addr, rk_obj->sgt,
42 				prot);
43 	if (ret < rk_obj->base.size) {
44 		DRM_ERROR("failed to map buffer: size=%zd request_size=%zd\n",
45 			  ret, rk_obj->base.size);
46 		ret = -ENOMEM;
47 		goto err_remove_node;
48 	}
49 
50 	rk_obj->size = ret;
51 
52 	return 0;
53 
54 err_remove_node:
55 	mutex_lock(&private->mm_lock);
56 	drm_mm_remove_node(&rk_obj->mm);
57 	mutex_unlock(&private->mm_lock);
58 
59 	return ret;
60 }
61 
62 static int rockchip_gem_iommu_unmap(struct rockchip_gem_object *rk_obj)
63 {
64 	struct drm_device *drm = rk_obj->base.dev;
65 	struct rockchip_drm_private *private = drm->dev_private;
66 
67 	iommu_unmap(private->domain, rk_obj->dma_addr, rk_obj->size);
68 
69 	mutex_lock(&private->mm_lock);
70 
71 	drm_mm_remove_node(&rk_obj->mm);
72 
73 	mutex_unlock(&private->mm_lock);
74 
75 	return 0;
76 }
77 
78 static int rockchip_gem_get_pages(struct rockchip_gem_object *rk_obj)
79 {
80 	struct drm_device *drm = rk_obj->base.dev;
81 	int ret, i;
82 	struct scatterlist *s;
83 
84 	rk_obj->pages = drm_gem_get_pages(&rk_obj->base);
85 	if (IS_ERR(rk_obj->pages))
86 		return PTR_ERR(rk_obj->pages);
87 
88 	rk_obj->num_pages = rk_obj->base.size >> PAGE_SHIFT;
89 
90 	rk_obj->sgt = drm_prime_pages_to_sg(rk_obj->base.dev,
91 					    rk_obj->pages, rk_obj->num_pages);
92 	if (IS_ERR(rk_obj->sgt)) {
93 		ret = PTR_ERR(rk_obj->sgt);
94 		goto err_put_pages;
95 	}
96 
97 	/*
98 	 * Fake up the SG table so that dma_sync_sg_for_device() can be used
99 	 * to flush the pages associated with it.
100 	 *
101 	 * TODO: Replace this by drm_clflush_sg() once it can be implemented
102 	 * without relying on symbols that are not exported.
103 	 */
104 	for_each_sgtable_sg(rk_obj->sgt, s, i)
105 		sg_dma_address(s) = sg_phys(s);
106 
107 	dma_sync_sgtable_for_device(drm->dev, rk_obj->sgt, DMA_TO_DEVICE);
108 
109 	return 0;
110 
111 err_put_pages:
112 	drm_gem_put_pages(&rk_obj->base, rk_obj->pages, false, false);
113 	return ret;
114 }
115 
116 static void rockchip_gem_put_pages(struct rockchip_gem_object *rk_obj)
117 {
118 	sg_free_table(rk_obj->sgt);
119 	kfree(rk_obj->sgt);
120 	drm_gem_put_pages(&rk_obj->base, rk_obj->pages, true, true);
121 }
122 
123 static int rockchip_gem_alloc_iommu(struct rockchip_gem_object *rk_obj,
124 				    bool alloc_kmap)
125 {
126 	int ret;
127 
128 	ret = rockchip_gem_get_pages(rk_obj);
129 	if (ret < 0)
130 		return ret;
131 
132 	ret = rockchip_gem_iommu_map(rk_obj);
133 	if (ret < 0)
134 		goto err_free;
135 
136 	if (alloc_kmap) {
137 		rk_obj->kvaddr = vmap(rk_obj->pages, rk_obj->num_pages, VM_MAP,
138 				      pgprot_writecombine(PAGE_KERNEL));
139 		if (!rk_obj->kvaddr) {
140 			DRM_ERROR("failed to vmap() buffer\n");
141 			ret = -ENOMEM;
142 			goto err_unmap;
143 		}
144 	}
145 
146 	return 0;
147 
148 err_unmap:
149 	rockchip_gem_iommu_unmap(rk_obj);
150 err_free:
151 	rockchip_gem_put_pages(rk_obj);
152 
153 	return ret;
154 }
155 
156 static int rockchip_gem_alloc_dma(struct rockchip_gem_object *rk_obj,
157 				  bool alloc_kmap)
158 {
159 	struct drm_gem_object *obj = &rk_obj->base;
160 	struct drm_device *drm = obj->dev;
161 
162 	rk_obj->dma_attrs = DMA_ATTR_WRITE_COMBINE;
163 
164 	if (!alloc_kmap)
165 		rk_obj->dma_attrs |= DMA_ATTR_NO_KERNEL_MAPPING;
166 
167 	rk_obj->kvaddr = dma_alloc_attrs(drm->dev, obj->size,
168 					 &rk_obj->dma_addr, GFP_KERNEL,
169 					 rk_obj->dma_attrs);
170 	if (!rk_obj->kvaddr) {
171 		DRM_ERROR("failed to allocate %zu byte dma buffer", obj->size);
172 		return -ENOMEM;
173 	}
174 
175 	return 0;
176 }
177 
178 static int rockchip_gem_alloc_buf(struct rockchip_gem_object *rk_obj,
179 				  bool alloc_kmap)
180 {
181 	struct drm_gem_object *obj = &rk_obj->base;
182 	struct drm_device *drm = obj->dev;
183 	struct rockchip_drm_private *private = drm->dev_private;
184 
185 	if (private->domain)
186 		return rockchip_gem_alloc_iommu(rk_obj, alloc_kmap);
187 	else
188 		return rockchip_gem_alloc_dma(rk_obj, alloc_kmap);
189 }
190 
191 static void rockchip_gem_free_iommu(struct rockchip_gem_object *rk_obj)
192 {
193 	vunmap(rk_obj->kvaddr);
194 	rockchip_gem_iommu_unmap(rk_obj);
195 	rockchip_gem_put_pages(rk_obj);
196 }
197 
198 static void rockchip_gem_free_dma(struct rockchip_gem_object *rk_obj)
199 {
200 	struct drm_gem_object *obj = &rk_obj->base;
201 	struct drm_device *drm = obj->dev;
202 
203 	dma_free_attrs(drm->dev, obj->size, rk_obj->kvaddr, rk_obj->dma_addr,
204 		       rk_obj->dma_attrs);
205 }
206 
207 static void rockchip_gem_free_buf(struct rockchip_gem_object *rk_obj)
208 {
209 	if (rk_obj->pages)
210 		rockchip_gem_free_iommu(rk_obj);
211 	else
212 		rockchip_gem_free_dma(rk_obj);
213 }
214 
215 static int rockchip_drm_gem_object_mmap_iommu(struct drm_gem_object *obj,
216 					      struct vm_area_struct *vma)
217 {
218 	struct rockchip_gem_object *rk_obj = to_rockchip_obj(obj);
219 	unsigned int count = obj->size >> PAGE_SHIFT;
220 	unsigned long user_count = vma_pages(vma);
221 
222 	if (user_count == 0)
223 		return -ENXIO;
224 
225 	return vm_map_pages(vma, rk_obj->pages, count);
226 }
227 
228 static int rockchip_drm_gem_object_mmap_dma(struct drm_gem_object *obj,
229 					    struct vm_area_struct *vma)
230 {
231 	struct rockchip_gem_object *rk_obj = to_rockchip_obj(obj);
232 	struct drm_device *drm = obj->dev;
233 
234 	return dma_mmap_attrs(drm->dev, vma, rk_obj->kvaddr, rk_obj->dma_addr,
235 			      obj->size, rk_obj->dma_attrs);
236 }
237 
238 static int rockchip_drm_gem_object_mmap(struct drm_gem_object *obj,
239 					struct vm_area_struct *vma)
240 {
241 	int ret;
242 	struct rockchip_gem_object *rk_obj = to_rockchip_obj(obj);
243 
244 	/*
245 	 * Set vm_pgoff (used as a fake buffer offset by DRM) to 0 and map the
246 	 * whole buffer from the start.
247 	 */
248 	vma->vm_pgoff = 0;
249 
250 	/*
251 	 * We allocated a struct page table for rk_obj, so clear
252 	 * VM_PFNMAP flag that was set by drm_gem_mmap_obj()/drm_gem_mmap().
253 	 */
254 	vma->vm_flags |= VM_IO | VM_DONTEXPAND | VM_DONTDUMP;
255 	vma->vm_flags &= ~VM_PFNMAP;
256 
257 	vma->vm_page_prot = pgprot_writecombine(vm_get_page_prot(vma->vm_flags));
258 	vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
259 
260 	if (rk_obj->pages)
261 		ret = rockchip_drm_gem_object_mmap_iommu(obj, vma);
262 	else
263 		ret = rockchip_drm_gem_object_mmap_dma(obj, vma);
264 
265 	if (ret)
266 		drm_gem_vm_close(vma);
267 
268 	return ret;
269 }
270 
271 static void rockchip_gem_release_object(struct rockchip_gem_object *rk_obj)
272 {
273 	drm_gem_object_release(&rk_obj->base);
274 	kfree(rk_obj);
275 }
276 
277 static const struct drm_gem_object_funcs rockchip_gem_object_funcs = {
278 	.free = rockchip_gem_free_object,
279 	.get_sg_table = rockchip_gem_prime_get_sg_table,
280 	.vmap = rockchip_gem_prime_vmap,
281 	.vunmap	= rockchip_gem_prime_vunmap,
282 	.mmap = rockchip_drm_gem_object_mmap,
283 	.vm_ops = &drm_gem_dma_vm_ops,
284 };
285 
286 static struct rockchip_gem_object *
287 	rockchip_gem_alloc_object(struct drm_device *drm, unsigned int size)
288 {
289 	struct rockchip_gem_object *rk_obj;
290 	struct drm_gem_object *obj;
291 
292 	size = round_up(size, PAGE_SIZE);
293 
294 	rk_obj = kzalloc(sizeof(*rk_obj), GFP_KERNEL);
295 	if (!rk_obj)
296 		return ERR_PTR(-ENOMEM);
297 
298 	obj = &rk_obj->base;
299 
300 	obj->funcs = &rockchip_gem_object_funcs;
301 
302 	drm_gem_object_init(drm, obj, size);
303 
304 	return rk_obj;
305 }
306 
307 struct rockchip_gem_object *
308 rockchip_gem_create_object(struct drm_device *drm, unsigned int size,
309 			   bool alloc_kmap)
310 {
311 	struct rockchip_gem_object *rk_obj;
312 	int ret;
313 
314 	rk_obj = rockchip_gem_alloc_object(drm, size);
315 	if (IS_ERR(rk_obj))
316 		return rk_obj;
317 
318 	ret = rockchip_gem_alloc_buf(rk_obj, alloc_kmap);
319 	if (ret)
320 		goto err_free_rk_obj;
321 
322 	return rk_obj;
323 
324 err_free_rk_obj:
325 	rockchip_gem_release_object(rk_obj);
326 	return ERR_PTR(ret);
327 }
328 
329 /*
330  * rockchip_gem_free_object - (struct drm_gem_object_funcs)->free
331  * callback function
332  */
333 void rockchip_gem_free_object(struct drm_gem_object *obj)
334 {
335 	struct drm_device *drm = obj->dev;
336 	struct rockchip_drm_private *private = drm->dev_private;
337 	struct rockchip_gem_object *rk_obj = to_rockchip_obj(obj);
338 
339 	if (obj->import_attach) {
340 		if (private->domain) {
341 			rockchip_gem_iommu_unmap(rk_obj);
342 		} else {
343 			dma_unmap_sgtable(drm->dev, rk_obj->sgt,
344 					  DMA_BIDIRECTIONAL, 0);
345 		}
346 		drm_prime_gem_destroy(obj, rk_obj->sgt);
347 	} else {
348 		rockchip_gem_free_buf(rk_obj);
349 	}
350 
351 	rockchip_gem_release_object(rk_obj);
352 }
353 
354 /*
355  * rockchip_gem_create_with_handle - allocate an object with the given
356  * size and create a gem handle on it
357  *
358  * returns a struct rockchip_gem_object* on success or ERR_PTR values
359  * on failure.
360  */
361 static struct rockchip_gem_object *
362 rockchip_gem_create_with_handle(struct drm_file *file_priv,
363 				struct drm_device *drm, unsigned int size,
364 				unsigned int *handle)
365 {
366 	struct rockchip_gem_object *rk_obj;
367 	struct drm_gem_object *obj;
368 	bool is_framebuffer;
369 	int ret;
370 
371 	is_framebuffer = drm->fb_helper && file_priv == drm->fb_helper->client.file;
372 
373 	rk_obj = rockchip_gem_create_object(drm, size, is_framebuffer);
374 	if (IS_ERR(rk_obj))
375 		return ERR_CAST(rk_obj);
376 
377 	obj = &rk_obj->base;
378 
379 	/*
380 	 * allocate a id of idr table where the obj is registered
381 	 * and handle has the id what user can see.
382 	 */
383 	ret = drm_gem_handle_create(file_priv, obj, handle);
384 	if (ret)
385 		goto err_handle_create;
386 
387 	/* drop reference from allocate - handle holds it now. */
388 	drm_gem_object_put(obj);
389 
390 	return rk_obj;
391 
392 err_handle_create:
393 	rockchip_gem_free_object(obj);
394 
395 	return ERR_PTR(ret);
396 }
397 
398 /*
399  * rockchip_gem_dumb_create - (struct drm_driver)->dumb_create callback
400  * function
401  *
402  * This aligns the pitch and size arguments to the minimum required. wrap
403  * this into your own function if you need bigger alignment.
404  */
405 int rockchip_gem_dumb_create(struct drm_file *file_priv,
406 			     struct drm_device *dev,
407 			     struct drm_mode_create_dumb *args)
408 {
409 	struct rockchip_gem_object *rk_obj;
410 	int min_pitch = DIV_ROUND_UP(args->width * args->bpp, 8);
411 
412 	/*
413 	 * align to 64 bytes since Mali requires it.
414 	 */
415 	args->pitch = ALIGN(min_pitch, 64);
416 	args->size = args->pitch * args->height;
417 
418 	rk_obj = rockchip_gem_create_with_handle(file_priv, dev, args->size,
419 						 &args->handle);
420 
421 	return PTR_ERR_OR_ZERO(rk_obj);
422 }
423 
424 /*
425  * Allocate a sg_table for this GEM object.
426  * Note: Both the table's contents, and the sg_table itself must be freed by
427  *       the caller.
428  * Returns a pointer to the newly allocated sg_table, or an ERR_PTR() error.
429  */
430 struct sg_table *rockchip_gem_prime_get_sg_table(struct drm_gem_object *obj)
431 {
432 	struct rockchip_gem_object *rk_obj = to_rockchip_obj(obj);
433 	struct drm_device *drm = obj->dev;
434 	struct sg_table *sgt;
435 	int ret;
436 
437 	if (rk_obj->pages)
438 		return drm_prime_pages_to_sg(obj->dev, rk_obj->pages, rk_obj->num_pages);
439 
440 	sgt = kzalloc(sizeof(*sgt), GFP_KERNEL);
441 	if (!sgt)
442 		return ERR_PTR(-ENOMEM);
443 
444 	ret = dma_get_sgtable_attrs(drm->dev, sgt, rk_obj->kvaddr,
445 				    rk_obj->dma_addr, obj->size,
446 				    rk_obj->dma_attrs);
447 	if (ret) {
448 		DRM_ERROR("failed to allocate sgt, %d\n", ret);
449 		kfree(sgt);
450 		return ERR_PTR(ret);
451 	}
452 
453 	return sgt;
454 }
455 
456 static int
457 rockchip_gem_iommu_map_sg(struct drm_device *drm,
458 			  struct dma_buf_attachment *attach,
459 			  struct sg_table *sg,
460 			  struct rockchip_gem_object *rk_obj)
461 {
462 	rk_obj->sgt = sg;
463 	return rockchip_gem_iommu_map(rk_obj);
464 }
465 
466 static int
467 rockchip_gem_dma_map_sg(struct drm_device *drm,
468 			struct dma_buf_attachment *attach,
469 			struct sg_table *sg,
470 			struct rockchip_gem_object *rk_obj)
471 {
472 	int err = dma_map_sgtable(drm->dev, sg, DMA_BIDIRECTIONAL, 0);
473 	if (err)
474 		return err;
475 
476 	if (drm_prime_get_contiguous_size(sg) < attach->dmabuf->size) {
477 		DRM_ERROR("failed to map sg_table to contiguous linear address.\n");
478 		dma_unmap_sgtable(drm->dev, sg, DMA_BIDIRECTIONAL, 0);
479 		return -EINVAL;
480 	}
481 
482 	rk_obj->dma_addr = sg_dma_address(sg->sgl);
483 	rk_obj->sgt = sg;
484 	return 0;
485 }
486 
487 struct drm_gem_object *
488 rockchip_gem_prime_import_sg_table(struct drm_device *drm,
489 				   struct dma_buf_attachment *attach,
490 				   struct sg_table *sg)
491 {
492 	struct rockchip_drm_private *private = drm->dev_private;
493 	struct rockchip_gem_object *rk_obj;
494 	int ret;
495 
496 	rk_obj = rockchip_gem_alloc_object(drm, attach->dmabuf->size);
497 	if (IS_ERR(rk_obj))
498 		return ERR_CAST(rk_obj);
499 
500 	if (private->domain)
501 		ret = rockchip_gem_iommu_map_sg(drm, attach, sg, rk_obj);
502 	else
503 		ret = rockchip_gem_dma_map_sg(drm, attach, sg, rk_obj);
504 
505 	if (ret < 0) {
506 		DRM_ERROR("failed to import sg table: %d\n", ret);
507 		goto err_free_rk_obj;
508 	}
509 
510 	return &rk_obj->base;
511 
512 err_free_rk_obj:
513 	rockchip_gem_release_object(rk_obj);
514 	return ERR_PTR(ret);
515 }
516 
517 int rockchip_gem_prime_vmap(struct drm_gem_object *obj, struct iosys_map *map)
518 {
519 	struct rockchip_gem_object *rk_obj = to_rockchip_obj(obj);
520 
521 	if (rk_obj->pages) {
522 		void *vaddr;
523 
524 		if (rk_obj->kvaddr)
525 			vaddr = rk_obj->kvaddr;
526 		else
527 			vaddr = vmap(rk_obj->pages, rk_obj->num_pages, VM_MAP,
528 				     pgprot_writecombine(PAGE_KERNEL));
529 
530 		if (!vaddr)
531 			return -ENOMEM;
532 		iosys_map_set_vaddr(map, vaddr);
533 		return 0;
534 	}
535 
536 	if (rk_obj->dma_attrs & DMA_ATTR_NO_KERNEL_MAPPING)
537 		return -ENOMEM;
538 	iosys_map_set_vaddr(map, rk_obj->kvaddr);
539 
540 	return 0;
541 }
542 
543 void rockchip_gem_prime_vunmap(struct drm_gem_object *obj,
544 			       struct iosys_map *map)
545 {
546 	struct rockchip_gem_object *rk_obj = to_rockchip_obj(obj);
547 
548 	if (rk_obj->pages) {
549 		if (map->vaddr != rk_obj->kvaddr)
550 			vunmap(map->vaddr);
551 		return;
552 	}
553 
554 	/* Nothing to do if allocated by DMA mapping API. */
555 }
556