1 // SPDX-License-Identifier: MIT
2 /*
3  * Copyright (C) 2013-2017 Oracle Corporation
4  * This file is based on ast_mode.c
5  * Copyright 2012 Red Hat Inc.
6  * Parts based on xf86-video-ast
7  * Copyright (c) 2005 ASPEED Technology Inc.
8  * Authors: Dave Airlie <airlied@redhat.com>
9  *          Michael Thayer <michael.thayer@oracle.com,
10  *          Hans de Goede <hdegoede@redhat.com>
11  */
12 #include <linux/export.h>
13 
14 #include <drm/drm_atomic.h>
15 #include <drm/drm_atomic_helper.h>
16 #include <drm/drm_fourcc.h>
17 #include <drm/drm_plane_helper.h>
18 #include <drm/drm_probe_helper.h>
19 #include <drm/drm_vblank.h>
20 
21 #include "hgsmi_channels.h"
22 #include "vbox_drv.h"
23 #include "vboxvideo.h"
24 
25 /*
26  * Set a graphics mode.  Poke any required values into registers, do an HGSMI
27  * mode set and tell the host we support advanced graphics functions.
28  */
29 static void vbox_do_modeset(struct drm_crtc *crtc)
30 {
31 	struct drm_framebuffer *fb = crtc->primary->state->fb;
32 	struct vbox_crtc *vbox_crtc = to_vbox_crtc(crtc);
33 	struct vbox_private *vbox;
34 	int width, height, bpp, pitch;
35 	u16 flags;
36 	s32 x_offset, y_offset;
37 
38 	vbox = crtc->dev->dev_private;
39 	width = vbox_crtc->width ? vbox_crtc->width : 640;
40 	height = vbox_crtc->height ? vbox_crtc->height : 480;
41 	bpp = fb ? fb->format->cpp[0] * 8 : 32;
42 	pitch = fb ? fb->pitches[0] : width * bpp / 8;
43 	x_offset = vbox->single_framebuffer ? vbox_crtc->x : vbox_crtc->x_hint;
44 	y_offset = vbox->single_framebuffer ? vbox_crtc->y : vbox_crtc->y_hint;
45 
46 	/*
47 	 * This is the old way of setting graphics modes.  It assumed one screen
48 	 * and a frame-buffer at the start of video RAM.  On older versions of
49 	 * VirtualBox, certain parts of the code still assume that the first
50 	 * screen is programmed this way, so try to fake it.
51 	 */
52 	if (vbox_crtc->crtc_id == 0 && fb &&
53 	    vbox_crtc->fb_offset / pitch < 0xffff - crtc->y &&
54 	    vbox_crtc->fb_offset % (bpp / 8) == 0) {
55 		vbox_write_ioport(VBE_DISPI_INDEX_XRES, width);
56 		vbox_write_ioport(VBE_DISPI_INDEX_YRES, height);
57 		vbox_write_ioport(VBE_DISPI_INDEX_VIRT_WIDTH, pitch * 8 / bpp);
58 		vbox_write_ioport(VBE_DISPI_INDEX_BPP, bpp);
59 		vbox_write_ioport(VBE_DISPI_INDEX_ENABLE, VBE_DISPI_ENABLED);
60 		vbox_write_ioport(
61 			VBE_DISPI_INDEX_X_OFFSET,
62 			vbox_crtc->fb_offset % pitch / bpp * 8 + vbox_crtc->x);
63 		vbox_write_ioport(VBE_DISPI_INDEX_Y_OFFSET,
64 				  vbox_crtc->fb_offset / pitch + vbox_crtc->y);
65 	}
66 
67 	flags = VBVA_SCREEN_F_ACTIVE;
68 	flags |= (fb && crtc->state->enable) ? 0 : VBVA_SCREEN_F_BLANK;
69 	flags |= vbox_crtc->disconnected ? VBVA_SCREEN_F_DISABLED : 0;
70 	hgsmi_process_display_info(vbox->guest_pool, vbox_crtc->crtc_id,
71 				   x_offset, y_offset,
72 				   vbox_crtc->x * bpp / 8 +
73 							vbox_crtc->y * pitch,
74 				   pitch, width, height, bpp, flags);
75 }
76 
77 static int vbox_set_view(struct drm_crtc *crtc)
78 {
79 	struct vbox_crtc *vbox_crtc = to_vbox_crtc(crtc);
80 	struct vbox_private *vbox = crtc->dev->dev_private;
81 	struct vbva_infoview *p;
82 
83 	/*
84 	 * Tell the host about the view.  This design originally targeted the
85 	 * Windows XP driver architecture and assumed that each screen would
86 	 * have a dedicated frame buffer with the command buffer following it,
87 	 * the whole being a "view".  The host works out which screen a command
88 	 * buffer belongs to by checking whether it is in the first view, then
89 	 * whether it is in the second and so on.  The first match wins.  We
90 	 * cheat around this by making the first view be the managed memory
91 	 * plus the first command buffer, the second the same plus the second
92 	 * buffer and so on.
93 	 */
94 	p = hgsmi_buffer_alloc(vbox->guest_pool, sizeof(*p),
95 			       HGSMI_CH_VBVA, VBVA_INFO_VIEW);
96 	if (!p)
97 		return -ENOMEM;
98 
99 	p->view_index = vbox_crtc->crtc_id;
100 	p->view_offset = vbox_crtc->fb_offset;
101 	p->view_size = vbox->available_vram_size - vbox_crtc->fb_offset +
102 		       vbox_crtc->crtc_id * VBVA_MIN_BUFFER_SIZE;
103 	p->max_screen_size = vbox->available_vram_size - vbox_crtc->fb_offset;
104 
105 	hgsmi_buffer_submit(vbox->guest_pool, p);
106 	hgsmi_buffer_free(vbox->guest_pool, p);
107 
108 	return 0;
109 }
110 
111 /*
112  * Try to map the layout of virtual screens to the range of the input device.
113  * Return true if we need to re-set the crtc modes due to screen offset
114  * changes.
115  */
116 static bool vbox_set_up_input_mapping(struct vbox_private *vbox)
117 {
118 	struct drm_crtc *crtci;
119 	struct drm_connector *connectori;
120 	struct drm_framebuffer *fb, *fb1 = NULL;
121 	bool single_framebuffer = true;
122 	bool old_single_framebuffer = vbox->single_framebuffer;
123 	u16 width = 0, height = 0;
124 
125 	/*
126 	 * Are we using an X.Org-style single large frame-buffer for all crtcs?
127 	 * If so then screen layout can be deduced from the crtc offsets.
128 	 * Same fall-back if this is the fbdev frame-buffer.
129 	 */
130 	list_for_each_entry(crtci, &vbox->ddev.mode_config.crtc_list, head) {
131 		fb = crtci->primary->state->fb;
132 		if (!fb)
133 			continue;
134 
135 		if (!fb1) {
136 			fb1 = fb;
137 			if (to_vbox_framebuffer(fb1) == &vbox->afb)
138 				break;
139 		} else if (fb != fb1) {
140 			single_framebuffer = false;
141 		}
142 	}
143 	if (!fb1)
144 		return false;
145 
146 	if (single_framebuffer) {
147 		vbox->single_framebuffer = true;
148 		vbox->input_mapping_width = fb1->width;
149 		vbox->input_mapping_height = fb1->height;
150 		return old_single_framebuffer != vbox->single_framebuffer;
151 	}
152 	/* Otherwise calculate the total span of all screens. */
153 	list_for_each_entry(connectori, &vbox->ddev.mode_config.connector_list,
154 			    head) {
155 		struct vbox_connector *vbox_connector =
156 		    to_vbox_connector(connectori);
157 		struct vbox_crtc *vbox_crtc = vbox_connector->vbox_crtc;
158 
159 		width = max_t(u16, width, vbox_crtc->x_hint +
160 					  vbox_connector->mode_hint.width);
161 		height = max_t(u16, height, vbox_crtc->y_hint +
162 					    vbox_connector->mode_hint.height);
163 	}
164 
165 	vbox->single_framebuffer = false;
166 	vbox->input_mapping_width = width;
167 	vbox->input_mapping_height = height;
168 
169 	return old_single_framebuffer != vbox->single_framebuffer;
170 }
171 
172 static void vbox_crtc_set_base_and_mode(struct drm_crtc *crtc,
173 					struct drm_framebuffer *fb,
174 					int x, int y)
175 {
176 	struct vbox_bo *bo = gem_to_vbox_bo(to_vbox_framebuffer(fb)->obj);
177 	struct vbox_private *vbox = crtc->dev->dev_private;
178 	struct vbox_crtc *vbox_crtc = to_vbox_crtc(crtc);
179 	bool needs_modeset = drm_atomic_crtc_needs_modeset(crtc->state);
180 
181 	mutex_lock(&vbox->hw_mutex);
182 
183 	if (crtc->state->enable) {
184 		vbox_crtc->width = crtc->state->mode.hdisplay;
185 		vbox_crtc->height = crtc->state->mode.vdisplay;
186 	}
187 
188 	vbox_crtc->x = x;
189 	vbox_crtc->y = y;
190 	vbox_crtc->fb_offset = vbox_bo_gpu_offset(bo);
191 
192 	/* vbox_do_modeset() checks vbox->single_framebuffer so update it now */
193 	if (needs_modeset && vbox_set_up_input_mapping(vbox)) {
194 		struct drm_crtc *crtci;
195 
196 		list_for_each_entry(crtci, &vbox->ddev.mode_config.crtc_list,
197 				    head) {
198 			if (crtci == crtc)
199 				continue;
200 			vbox_do_modeset(crtci);
201 		}
202 	}
203 
204 	vbox_set_view(crtc);
205 	vbox_do_modeset(crtc);
206 
207 	if (needs_modeset)
208 		hgsmi_update_input_mapping(vbox->guest_pool, 0, 0,
209 					   vbox->input_mapping_width,
210 					   vbox->input_mapping_height);
211 
212 	mutex_unlock(&vbox->hw_mutex);
213 }
214 
215 static void vbox_crtc_atomic_enable(struct drm_crtc *crtc,
216 				    struct drm_crtc_state *old_crtc_state)
217 {
218 }
219 
220 static void vbox_crtc_atomic_disable(struct drm_crtc *crtc,
221 				     struct drm_crtc_state *old_crtc_state)
222 {
223 }
224 
225 static void vbox_crtc_atomic_flush(struct drm_crtc *crtc,
226 				   struct drm_crtc_state *old_crtc_state)
227 {
228 	struct drm_pending_vblank_event *event;
229 	unsigned long flags;
230 
231 	if (crtc->state && crtc->state->event) {
232 		event = crtc->state->event;
233 		crtc->state->event = NULL;
234 
235 		spin_lock_irqsave(&crtc->dev->event_lock, flags);
236 		drm_crtc_send_vblank_event(crtc, event);
237 		spin_unlock_irqrestore(&crtc->dev->event_lock, flags);
238 	}
239 }
240 
241 static const struct drm_crtc_helper_funcs vbox_crtc_helper_funcs = {
242 	.atomic_enable = vbox_crtc_atomic_enable,
243 	.atomic_disable = vbox_crtc_atomic_disable,
244 	.atomic_flush = vbox_crtc_atomic_flush,
245 };
246 
247 static void vbox_crtc_destroy(struct drm_crtc *crtc)
248 {
249 	drm_crtc_cleanup(crtc);
250 	kfree(crtc);
251 }
252 
253 static const struct drm_crtc_funcs vbox_crtc_funcs = {
254 	.set_config = drm_atomic_helper_set_config,
255 	.page_flip = drm_atomic_helper_page_flip,
256 	/* .gamma_set = vbox_crtc_gamma_set, */
257 	.destroy = vbox_crtc_destroy,
258 	.reset = drm_atomic_helper_crtc_reset,
259 	.atomic_duplicate_state = drm_atomic_helper_crtc_duplicate_state,
260 	.atomic_destroy_state = drm_atomic_helper_crtc_destroy_state,
261 };
262 
263 static int vbox_primary_atomic_check(struct drm_plane *plane,
264 				     struct drm_plane_state *new_state)
265 {
266 	struct drm_crtc_state *crtc_state = NULL;
267 
268 	if (new_state->crtc) {
269 		crtc_state = drm_atomic_get_existing_crtc_state(
270 					    new_state->state, new_state->crtc);
271 		if (WARN_ON(!crtc_state))
272 			return -EINVAL;
273 	}
274 
275 	return drm_atomic_helper_check_plane_state(new_state, crtc_state,
276 						   DRM_PLANE_HELPER_NO_SCALING,
277 						   DRM_PLANE_HELPER_NO_SCALING,
278 						   false, true);
279 }
280 
281 static void vbox_primary_atomic_update(struct drm_plane *plane,
282 				       struct drm_plane_state *old_state)
283 {
284 	struct drm_crtc *crtc = plane->state->crtc;
285 	struct drm_framebuffer *fb = plane->state->fb;
286 
287 	vbox_crtc_set_base_and_mode(crtc, fb,
288 				    plane->state->src_x >> 16,
289 				    plane->state->src_y >> 16);
290 }
291 
292 static void vbox_primary_atomic_disable(struct drm_plane *plane,
293 					struct drm_plane_state *old_state)
294 {
295 	struct drm_crtc *crtc = old_state->crtc;
296 
297 	/* vbox_do_modeset checks plane->state->fb and will disable if NULL */
298 	vbox_crtc_set_base_and_mode(crtc, old_state->fb,
299 				    old_state->src_x >> 16,
300 				    old_state->src_y >> 16);
301 }
302 
303 static int vbox_primary_prepare_fb(struct drm_plane *plane,
304 				   struct drm_plane_state *new_state)
305 {
306 	struct vbox_bo *bo;
307 	int ret;
308 
309 	if (!new_state->fb)
310 		return 0;
311 
312 	bo = gem_to_vbox_bo(to_vbox_framebuffer(new_state->fb)->obj);
313 	ret = vbox_bo_pin(bo, TTM_PL_FLAG_VRAM);
314 	if (ret)
315 		DRM_WARN("Error %d pinning new fb, out of video mem?\n", ret);
316 
317 	return ret;
318 }
319 
320 static void vbox_primary_cleanup_fb(struct drm_plane *plane,
321 				    struct drm_plane_state *old_state)
322 {
323 	struct vbox_bo *bo;
324 
325 	if (!old_state->fb)
326 		return;
327 
328 	bo = gem_to_vbox_bo(to_vbox_framebuffer(old_state->fb)->obj);
329 	vbox_bo_unpin(bo);
330 }
331 
332 static int vbox_cursor_atomic_check(struct drm_plane *plane,
333 				    struct drm_plane_state *new_state)
334 {
335 	struct drm_crtc_state *crtc_state = NULL;
336 	u32 width = new_state->crtc_w;
337 	u32 height = new_state->crtc_h;
338 	int ret;
339 
340 	if (new_state->crtc) {
341 		crtc_state = drm_atomic_get_existing_crtc_state(
342 					    new_state->state, new_state->crtc);
343 		if (WARN_ON(!crtc_state))
344 			return -EINVAL;
345 	}
346 
347 	ret = drm_atomic_helper_check_plane_state(new_state, crtc_state,
348 						  DRM_PLANE_HELPER_NO_SCALING,
349 						  DRM_PLANE_HELPER_NO_SCALING,
350 						  true, true);
351 	if (ret)
352 		return ret;
353 
354 	if (!new_state->fb)
355 		return 0;
356 
357 	if (width > VBOX_MAX_CURSOR_WIDTH || height > VBOX_MAX_CURSOR_HEIGHT ||
358 	    width == 0 || height == 0)
359 		return -EINVAL;
360 
361 	return 0;
362 }
363 
364 /*
365  * Copy the ARGB image and generate the mask, which is needed in case the host
366  * does not support ARGB cursors.  The mask is a 1BPP bitmap with the bit set
367  * if the corresponding alpha value in the ARGB image is greater than 0xF0.
368  */
369 static void copy_cursor_image(u8 *src, u8 *dst, u32 width, u32 height,
370 			      size_t mask_size)
371 {
372 	size_t line_size = (width + 7) / 8;
373 	u32 i, j;
374 
375 	memcpy(dst + mask_size, src, width * height * 4);
376 	for (i = 0; i < height; ++i)
377 		for (j = 0; j < width; ++j)
378 			if (((u32 *)src)[i * width + j] > 0xf0000000)
379 				dst[i * line_size + j / 8] |= (0x80 >> (j % 8));
380 }
381 
382 static void vbox_cursor_atomic_update(struct drm_plane *plane,
383 				      struct drm_plane_state *old_state)
384 {
385 	struct vbox_private *vbox =
386 		container_of(plane->dev, struct vbox_private, ddev);
387 	struct vbox_crtc *vbox_crtc = to_vbox_crtc(plane->state->crtc);
388 	struct drm_framebuffer *fb = plane->state->fb;
389 	struct vbox_bo *bo = gem_to_vbox_bo(to_vbox_framebuffer(fb)->obj);
390 	u32 width = plane->state->crtc_w;
391 	u32 height = plane->state->crtc_h;
392 	size_t data_size, mask_size;
393 	u32 flags;
394 	u8 *src;
395 
396 	/*
397 	 * VirtualBox uses the host windowing system to draw the cursor so
398 	 * moves are a no-op, we only need to upload new cursor sprites.
399 	 */
400 	if (fb == old_state->fb)
401 		return;
402 
403 	mutex_lock(&vbox->hw_mutex);
404 
405 	vbox_crtc->cursor_enabled = true;
406 
407 	/* pinning is done in prepare/cleanup framebuffer */
408 	src = vbox_bo_kmap(bo);
409 	if (IS_ERR(src)) {
410 		mutex_unlock(&vbox->hw_mutex);
411 		DRM_WARN("Could not kmap cursor bo, skipping update\n");
412 		return;
413 	}
414 
415 	/*
416 	 * The mask must be calculated based on the alpha
417 	 * channel, one bit per ARGB word, and must be 32-bit
418 	 * padded.
419 	 */
420 	mask_size = ((width + 7) / 8 * height + 3) & ~3;
421 	data_size = width * height * 4 + mask_size;
422 
423 	copy_cursor_image(src, vbox->cursor_data, width, height, mask_size);
424 	vbox_bo_kunmap(bo);
425 
426 	flags = VBOX_MOUSE_POINTER_VISIBLE | VBOX_MOUSE_POINTER_SHAPE |
427 		VBOX_MOUSE_POINTER_ALPHA;
428 	hgsmi_update_pointer_shape(vbox->guest_pool, flags,
429 				   min_t(u32, max(fb->hot_x, 0), width),
430 				   min_t(u32, max(fb->hot_y, 0), height),
431 				   width, height, vbox->cursor_data, data_size);
432 
433 	mutex_unlock(&vbox->hw_mutex);
434 }
435 
436 static void vbox_cursor_atomic_disable(struct drm_plane *plane,
437 				       struct drm_plane_state *old_state)
438 {
439 	struct vbox_private *vbox =
440 		container_of(plane->dev, struct vbox_private, ddev);
441 	struct vbox_crtc *vbox_crtc = to_vbox_crtc(old_state->crtc);
442 	bool cursor_enabled = false;
443 	struct drm_crtc *crtci;
444 
445 	mutex_lock(&vbox->hw_mutex);
446 
447 	vbox_crtc->cursor_enabled = false;
448 
449 	list_for_each_entry(crtci, &vbox->ddev.mode_config.crtc_list, head) {
450 		if (to_vbox_crtc(crtci)->cursor_enabled)
451 			cursor_enabled = true;
452 	}
453 
454 	if (!cursor_enabled)
455 		hgsmi_update_pointer_shape(vbox->guest_pool, 0, 0, 0,
456 					   0, 0, NULL, 0);
457 
458 	mutex_unlock(&vbox->hw_mutex);
459 }
460 
461 static int vbox_cursor_prepare_fb(struct drm_plane *plane,
462 				  struct drm_plane_state *new_state)
463 {
464 	struct vbox_bo *bo;
465 
466 	if (!new_state->fb)
467 		return 0;
468 
469 	bo = gem_to_vbox_bo(to_vbox_framebuffer(new_state->fb)->obj);
470 	return vbox_bo_pin(bo, TTM_PL_FLAG_SYSTEM);
471 }
472 
473 static void vbox_cursor_cleanup_fb(struct drm_plane *plane,
474 				   struct drm_plane_state *old_state)
475 {
476 	struct vbox_bo *bo;
477 
478 	if (!plane->state->fb)
479 		return;
480 
481 	bo = gem_to_vbox_bo(to_vbox_framebuffer(plane->state->fb)->obj);
482 	vbox_bo_unpin(bo);
483 }
484 
485 static const u32 vbox_cursor_plane_formats[] = {
486 	DRM_FORMAT_ARGB8888,
487 };
488 
489 static const struct drm_plane_helper_funcs vbox_cursor_helper_funcs = {
490 	.atomic_check	= vbox_cursor_atomic_check,
491 	.atomic_update	= vbox_cursor_atomic_update,
492 	.atomic_disable	= vbox_cursor_atomic_disable,
493 	.prepare_fb	= vbox_cursor_prepare_fb,
494 	.cleanup_fb	= vbox_cursor_cleanup_fb,
495 };
496 
497 static const struct drm_plane_funcs vbox_cursor_plane_funcs = {
498 	.update_plane	= drm_atomic_helper_update_plane,
499 	.disable_plane	= drm_atomic_helper_disable_plane,
500 	.destroy	= drm_primary_helper_destroy,
501 	.reset		= drm_atomic_helper_plane_reset,
502 	.atomic_duplicate_state = drm_atomic_helper_plane_duplicate_state,
503 	.atomic_destroy_state = drm_atomic_helper_plane_destroy_state,
504 };
505 
506 static const u32 vbox_primary_plane_formats[] = {
507 	DRM_FORMAT_XRGB8888,
508 	DRM_FORMAT_ARGB8888,
509 };
510 
511 static const struct drm_plane_helper_funcs vbox_primary_helper_funcs = {
512 	.atomic_check = vbox_primary_atomic_check,
513 	.atomic_update = vbox_primary_atomic_update,
514 	.atomic_disable = vbox_primary_atomic_disable,
515 	.prepare_fb = vbox_primary_prepare_fb,
516 	.cleanup_fb = vbox_primary_cleanup_fb,
517 };
518 
519 static const struct drm_plane_funcs vbox_primary_plane_funcs = {
520 	.update_plane	= drm_atomic_helper_update_plane,
521 	.disable_plane	= drm_atomic_helper_disable_plane,
522 	.destroy	= drm_primary_helper_destroy,
523 	.reset		= drm_atomic_helper_plane_reset,
524 	.atomic_duplicate_state = drm_atomic_helper_plane_duplicate_state,
525 	.atomic_destroy_state = drm_atomic_helper_plane_destroy_state,
526 };
527 
528 static struct drm_plane *vbox_create_plane(struct vbox_private *vbox,
529 					   unsigned int possible_crtcs,
530 					   enum drm_plane_type type)
531 {
532 	const struct drm_plane_helper_funcs *helper_funcs = NULL;
533 	const struct drm_plane_funcs *funcs;
534 	struct drm_plane *plane;
535 	const u32 *formats;
536 	int num_formats;
537 	int err;
538 
539 	if (type == DRM_PLANE_TYPE_PRIMARY) {
540 		funcs = &vbox_primary_plane_funcs;
541 		formats = vbox_primary_plane_formats;
542 		helper_funcs = &vbox_primary_helper_funcs;
543 		num_formats = ARRAY_SIZE(vbox_primary_plane_formats);
544 	} else if (type == DRM_PLANE_TYPE_CURSOR) {
545 		funcs = &vbox_cursor_plane_funcs;
546 		formats = vbox_cursor_plane_formats;
547 		helper_funcs = &vbox_cursor_helper_funcs;
548 		num_formats = ARRAY_SIZE(vbox_cursor_plane_formats);
549 	} else {
550 		return ERR_PTR(-EINVAL);
551 	}
552 
553 	plane = kzalloc(sizeof(*plane), GFP_KERNEL);
554 	if (!plane)
555 		return ERR_PTR(-ENOMEM);
556 
557 	err = drm_universal_plane_init(&vbox->ddev, plane, possible_crtcs,
558 				       funcs, formats, num_formats,
559 				       NULL, type, NULL);
560 	if (err)
561 		goto free_plane;
562 
563 	drm_plane_helper_add(plane, helper_funcs);
564 
565 	return plane;
566 
567 free_plane:
568 	kfree(plane);
569 	return ERR_PTR(-EINVAL);
570 }
571 
572 static struct vbox_crtc *vbox_crtc_init(struct drm_device *dev, unsigned int i)
573 {
574 	struct vbox_private *vbox =
575 		container_of(dev, struct vbox_private, ddev);
576 	struct drm_plane *cursor = NULL;
577 	struct vbox_crtc *vbox_crtc;
578 	struct drm_plane *primary;
579 	u32 caps = 0;
580 	int ret;
581 
582 	ret = hgsmi_query_conf(vbox->guest_pool,
583 			       VBOX_VBVA_CONF32_CURSOR_CAPABILITIES, &caps);
584 	if (ret)
585 		return ERR_PTR(ret);
586 
587 	vbox_crtc = kzalloc(sizeof(*vbox_crtc), GFP_KERNEL);
588 	if (!vbox_crtc)
589 		return ERR_PTR(-ENOMEM);
590 
591 	primary = vbox_create_plane(vbox, 1 << i, DRM_PLANE_TYPE_PRIMARY);
592 	if (IS_ERR(primary)) {
593 		ret = PTR_ERR(primary);
594 		goto free_mem;
595 	}
596 
597 	if ((caps & VBOX_VBVA_CURSOR_CAPABILITY_HARDWARE)) {
598 		cursor = vbox_create_plane(vbox, 1 << i, DRM_PLANE_TYPE_CURSOR);
599 		if (IS_ERR(cursor)) {
600 			ret = PTR_ERR(cursor);
601 			goto clean_primary;
602 		}
603 	} else {
604 		DRM_WARN("VirtualBox host is too old, no cursor support\n");
605 	}
606 
607 	vbox_crtc->crtc_id = i;
608 
609 	ret = drm_crtc_init_with_planes(dev, &vbox_crtc->base, primary, cursor,
610 					&vbox_crtc_funcs, NULL);
611 	if (ret)
612 		goto clean_cursor;
613 
614 	drm_mode_crtc_set_gamma_size(&vbox_crtc->base, 256);
615 	drm_crtc_helper_add(&vbox_crtc->base, &vbox_crtc_helper_funcs);
616 
617 	return vbox_crtc;
618 
619 clean_cursor:
620 	if (cursor) {
621 		drm_plane_cleanup(cursor);
622 		kfree(cursor);
623 	}
624 clean_primary:
625 	drm_plane_cleanup(primary);
626 	kfree(primary);
627 free_mem:
628 	kfree(vbox_crtc);
629 	return ERR_PTR(ret);
630 }
631 
632 static void vbox_encoder_destroy(struct drm_encoder *encoder)
633 {
634 	drm_encoder_cleanup(encoder);
635 	kfree(encoder);
636 }
637 
638 static const struct drm_encoder_funcs vbox_enc_funcs = {
639 	.destroy = vbox_encoder_destroy,
640 };
641 
642 static struct drm_encoder *vbox_encoder_init(struct drm_device *dev,
643 					     unsigned int i)
644 {
645 	struct vbox_encoder *vbox_encoder;
646 
647 	vbox_encoder = kzalloc(sizeof(*vbox_encoder), GFP_KERNEL);
648 	if (!vbox_encoder)
649 		return NULL;
650 
651 	drm_encoder_init(dev, &vbox_encoder->base, &vbox_enc_funcs,
652 			 DRM_MODE_ENCODER_DAC, NULL);
653 
654 	vbox_encoder->base.possible_crtcs = 1 << i;
655 	return &vbox_encoder->base;
656 }
657 
658 /*
659  * Generate EDID data with a mode-unique serial number for the virtual
660  * monitor to try to persuade Unity that different modes correspond to
661  * different monitors and it should not try to force the same resolution on
662  * them.
663  */
664 static void vbox_set_edid(struct drm_connector *connector, int width,
665 			  int height)
666 {
667 	enum { EDID_SIZE = 128 };
668 	unsigned char edid[EDID_SIZE] = {
669 		0x00, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x00,	/* header */
670 		0x58, 0x58,	/* manufacturer (VBX) */
671 		0x00, 0x00,	/* product code */
672 		0x00, 0x00, 0x00, 0x00,	/* serial number goes here */
673 		0x01,		/* week of manufacture */
674 		0x00,		/* year of manufacture */
675 		0x01, 0x03,	/* EDID version */
676 		0x80,		/* capabilities - digital */
677 		0x00,		/* horiz. res in cm, zero for projectors */
678 		0x00,		/* vert. res in cm */
679 		0x78,		/* display gamma (120 == 2.2). */
680 		0xEE,		/* features (standby, suspend, off, RGB, std */
681 				/* colour space, preferred timing mode) */
682 		0xEE, 0x91, 0xA3, 0x54, 0x4C, 0x99, 0x26, 0x0F, 0x50, 0x54,
683 		/* chromaticity for standard colour space. */
684 		0x00, 0x00, 0x00,	/* no default timings */
685 		0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01, 0x01,
686 		    0x01, 0x01,
687 		0x01, 0x01, 0x01, 0x01,	/* no standard timings */
688 		0x00, 0x00, 0x00, 0x06, 0x00, 0x00, 0x06, 0x00, 0x02, 0x02,
689 		    0x02, 0x02,
690 		/* descriptor block 1 goes below */
691 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
692 		/* descriptor block 2, monitor ranges */
693 		0x00, 0x00, 0x00, 0xFD, 0x00,
694 		0x00, 0xC8, 0x00, 0xC8, 0x64, 0x00, 0x0A, 0x20, 0x20, 0x20,
695 		    0x20, 0x20,
696 		/* 0-200Hz vertical, 0-200KHz horizontal, 1000MHz pixel clock */
697 		0x20,
698 		/* descriptor block 3, monitor name */
699 		0x00, 0x00, 0x00, 0xFC, 0x00,
700 		'V', 'B', 'O', 'X', ' ', 'm', 'o', 'n', 'i', 't', 'o', 'r',
701 		'\n',
702 		/* descriptor block 4: dummy data */
703 		0x00, 0x00, 0x00, 0x10, 0x00,
704 		0x0A, 0x20, 0x20, 0x20, 0x20, 0x20,
705 		0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
706 		0x20,
707 		0x00,		/* number of extensions */
708 		0x00		/* checksum goes here */
709 	};
710 	int clock = (width + 6) * (height + 6) * 60 / 10000;
711 	unsigned int i, sum = 0;
712 
713 	edid[12] = width & 0xff;
714 	edid[13] = width >> 8;
715 	edid[14] = height & 0xff;
716 	edid[15] = height >> 8;
717 	edid[54] = clock & 0xff;
718 	edid[55] = clock >> 8;
719 	edid[56] = width & 0xff;
720 	edid[58] = (width >> 4) & 0xf0;
721 	edid[59] = height & 0xff;
722 	edid[61] = (height >> 4) & 0xf0;
723 	for (i = 0; i < EDID_SIZE - 1; ++i)
724 		sum += edid[i];
725 	edid[EDID_SIZE - 1] = (0x100 - (sum & 0xFF)) & 0xFF;
726 	drm_connector_update_edid_property(connector, (struct edid *)edid);
727 }
728 
729 static int vbox_get_modes(struct drm_connector *connector)
730 {
731 	struct vbox_connector *vbox_connector = NULL;
732 	struct drm_display_mode *mode = NULL;
733 	struct vbox_private *vbox = NULL;
734 	unsigned int num_modes = 0;
735 	int preferred_width, preferred_height;
736 
737 	vbox_connector = to_vbox_connector(connector);
738 	vbox = connector->dev->dev_private;
739 
740 	hgsmi_report_flags_location(vbox->guest_pool, GUEST_HEAP_OFFSET(vbox) +
741 				    HOST_FLAGS_OFFSET);
742 	if (vbox_connector->vbox_crtc->crtc_id == 0)
743 		vbox_report_caps(vbox);
744 
745 	num_modes = drm_add_modes_noedid(connector, 2560, 1600);
746 	preferred_width = vbox_connector->mode_hint.width ?
747 			  vbox_connector->mode_hint.width : 1024;
748 	preferred_height = vbox_connector->mode_hint.height ?
749 			   vbox_connector->mode_hint.height : 768;
750 	mode = drm_cvt_mode(connector->dev, preferred_width, preferred_height,
751 			    60, false, false, false);
752 	if (mode) {
753 		mode->type |= DRM_MODE_TYPE_PREFERRED;
754 		drm_mode_probed_add(connector, mode);
755 		++num_modes;
756 	}
757 	vbox_set_edid(connector, preferred_width, preferred_height);
758 
759 	if (vbox_connector->vbox_crtc->x_hint != -1)
760 		drm_object_property_set_value(&connector->base,
761 			vbox->ddev.mode_config.suggested_x_property,
762 			vbox_connector->vbox_crtc->x_hint);
763 	else
764 		drm_object_property_set_value(&connector->base,
765 			vbox->ddev.mode_config.suggested_x_property, 0);
766 
767 	if (vbox_connector->vbox_crtc->y_hint != -1)
768 		drm_object_property_set_value(&connector->base,
769 			vbox->ddev.mode_config.suggested_y_property,
770 			vbox_connector->vbox_crtc->y_hint);
771 	else
772 		drm_object_property_set_value(&connector->base,
773 			vbox->ddev.mode_config.suggested_y_property, 0);
774 
775 	return num_modes;
776 }
777 
778 static void vbox_connector_destroy(struct drm_connector *connector)
779 {
780 	drm_connector_unregister(connector);
781 	drm_connector_cleanup(connector);
782 	kfree(connector);
783 }
784 
785 static enum drm_connector_status
786 vbox_connector_detect(struct drm_connector *connector, bool force)
787 {
788 	struct vbox_connector *vbox_connector;
789 
790 	vbox_connector = to_vbox_connector(connector);
791 
792 	return vbox_connector->mode_hint.disconnected ?
793 	    connector_status_disconnected : connector_status_connected;
794 }
795 
796 static int vbox_fill_modes(struct drm_connector *connector, u32 max_x,
797 			   u32 max_y)
798 {
799 	struct vbox_connector *vbox_connector;
800 	struct drm_device *dev;
801 	struct drm_display_mode *mode, *iterator;
802 
803 	vbox_connector = to_vbox_connector(connector);
804 	dev = vbox_connector->base.dev;
805 	list_for_each_entry_safe(mode, iterator, &connector->modes, head) {
806 		list_del(&mode->head);
807 		drm_mode_destroy(dev, mode);
808 	}
809 
810 	return drm_helper_probe_single_connector_modes(connector, max_x, max_y);
811 }
812 
813 static const struct drm_connector_helper_funcs vbox_connector_helper_funcs = {
814 	.get_modes = vbox_get_modes,
815 };
816 
817 static const struct drm_connector_funcs vbox_connector_funcs = {
818 	.detect = vbox_connector_detect,
819 	.fill_modes = vbox_fill_modes,
820 	.destroy = vbox_connector_destroy,
821 	.reset = drm_atomic_helper_connector_reset,
822 	.atomic_duplicate_state = drm_atomic_helper_connector_duplicate_state,
823 	.atomic_destroy_state = drm_atomic_helper_connector_destroy_state,
824 };
825 
826 static int vbox_connector_init(struct drm_device *dev,
827 			       struct vbox_crtc *vbox_crtc,
828 			       struct drm_encoder *encoder)
829 {
830 	struct vbox_connector *vbox_connector;
831 	struct drm_connector *connector;
832 
833 	vbox_connector = kzalloc(sizeof(*vbox_connector), GFP_KERNEL);
834 	if (!vbox_connector)
835 		return -ENOMEM;
836 
837 	connector = &vbox_connector->base;
838 	vbox_connector->vbox_crtc = vbox_crtc;
839 
840 	drm_connector_init(dev, connector, &vbox_connector_funcs,
841 			   DRM_MODE_CONNECTOR_VGA);
842 	drm_connector_helper_add(connector, &vbox_connector_helper_funcs);
843 
844 	connector->interlace_allowed = 0;
845 	connector->doublescan_allowed = 0;
846 
847 	drm_mode_create_suggested_offset_properties(dev);
848 	drm_object_attach_property(&connector->base,
849 				   dev->mode_config.suggested_x_property, 0);
850 	drm_object_attach_property(&connector->base,
851 				   dev->mode_config.suggested_y_property, 0);
852 
853 	drm_connector_attach_encoder(connector, encoder);
854 
855 	return 0;
856 }
857 
858 static struct drm_framebuffer *vbox_user_framebuffer_create(
859 		struct drm_device *dev,
860 		struct drm_file *filp,
861 		const struct drm_mode_fb_cmd2 *mode_cmd)
862 {
863 	struct vbox_private *vbox =
864 		container_of(dev, struct vbox_private, ddev);
865 	struct drm_gem_object *obj;
866 	struct vbox_framebuffer *vbox_fb;
867 	int ret = -ENOMEM;
868 
869 	obj = drm_gem_object_lookup(filp, mode_cmd->handles[0]);
870 	if (!obj)
871 		return ERR_PTR(-ENOENT);
872 
873 	vbox_fb = kzalloc(sizeof(*vbox_fb), GFP_KERNEL);
874 	if (!vbox_fb)
875 		goto err_unref_obj;
876 
877 	ret = vbox_framebuffer_init(vbox, vbox_fb, mode_cmd, obj);
878 	if (ret)
879 		goto err_free_vbox_fb;
880 
881 	return &vbox_fb->base;
882 
883 err_free_vbox_fb:
884 	kfree(vbox_fb);
885 err_unref_obj:
886 	drm_gem_object_put_unlocked(obj);
887 	return ERR_PTR(ret);
888 }
889 
890 static const struct drm_mode_config_funcs vbox_mode_funcs = {
891 	.fb_create = vbox_user_framebuffer_create,
892 	.atomic_check = drm_atomic_helper_check,
893 	.atomic_commit = drm_atomic_helper_commit,
894 };
895 
896 int vbox_mode_init(struct vbox_private *vbox)
897 {
898 	struct drm_device *dev = &vbox->ddev;
899 	struct drm_encoder *encoder;
900 	struct vbox_crtc *vbox_crtc;
901 	unsigned int i;
902 	int ret;
903 
904 	drm_mode_config_init(dev);
905 
906 	dev->mode_config.funcs = (void *)&vbox_mode_funcs;
907 	dev->mode_config.min_width = 0;
908 	dev->mode_config.min_height = 0;
909 	dev->mode_config.preferred_depth = 24;
910 	dev->mode_config.max_width = VBE_DISPI_MAX_XRES;
911 	dev->mode_config.max_height = VBE_DISPI_MAX_YRES;
912 
913 	for (i = 0; i < vbox->num_crtcs; ++i) {
914 		vbox_crtc = vbox_crtc_init(dev, i);
915 		if (IS_ERR(vbox_crtc)) {
916 			ret = PTR_ERR(vbox_crtc);
917 			goto err_drm_mode_cleanup;
918 		}
919 		encoder = vbox_encoder_init(dev, i);
920 		if (!encoder) {
921 			ret = -ENOMEM;
922 			goto err_drm_mode_cleanup;
923 		}
924 		ret = vbox_connector_init(dev, vbox_crtc, encoder);
925 		if (ret)
926 			goto err_drm_mode_cleanup;
927 	}
928 
929 	drm_mode_config_reset(dev);
930 	return 0;
931 
932 err_drm_mode_cleanup:
933 	drm_mode_config_cleanup(dev);
934 	return ret;
935 }
936 
937 void vbox_mode_fini(struct vbox_private *vbox)
938 {
939 	drm_mode_config_cleanup(&vbox->ddev);
940 }
941