xref: /openbmc/linux/drivers/video/fbdev/core/fbmem.c (revision 3a9a6f3d)
1 /*
2  *  linux/drivers/video/fbmem.c
3  *
4  *  Copyright (C) 1994 Martin Schaller
5  *
6  *	2001 - Documented with DocBook
7  *	- Brad Douglas <brad@neruo.com>
8  *
9  * This file is subject to the terms and conditions of the GNU General Public
10  * License.  See the file COPYING in the main directory of this archive
11  * for more details.
12  */
13 
14 #include <linux/module.h>
15 
16 #include <linux/compat.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/major.h>
21 #include <linux/slab.h>
22 #include <linux/mm.h>
23 #include <linux/mman.h>
24 #include <linux/vt.h>
25 #include <linux/init.h>
26 #include <linux/linux_logo.h>
27 #include <linux/proc_fs.h>
28 #include <linux/platform_device.h>
29 #include <linux/seq_file.h>
30 #include <linux/console.h>
31 #include <linux/kmod.h>
32 #include <linux/err.h>
33 #include <linux/device.h>
34 #include <linux/efi.h>
35 #include <linux/fb.h>
36 #include <linux/fbcon.h>
37 #include <linux/mem_encrypt.h>
38 #include <linux/pci.h>
39 
40 #include <asm/fb.h>
41 
42 
43     /*
44      *  Frame buffer device initialization and setup routines
45      */
46 
47 #define FBPIXMAPSIZE	(1024 * 8)
48 
49 static DEFINE_MUTEX(registration_lock);
50 
51 struct fb_info *registered_fb[FB_MAX] __read_mostly;
52 EXPORT_SYMBOL(registered_fb);
53 
54 int num_registered_fb __read_mostly;
55 EXPORT_SYMBOL(num_registered_fb);
56 
57 bool fb_center_logo __read_mostly;
58 
59 int fb_logo_count __read_mostly = -1;
60 
61 static struct fb_info *get_fb_info(unsigned int idx)
62 {
63 	struct fb_info *fb_info;
64 
65 	if (idx >= FB_MAX)
66 		return ERR_PTR(-ENODEV);
67 
68 	mutex_lock(&registration_lock);
69 	fb_info = registered_fb[idx];
70 	if (fb_info)
71 		refcount_inc(&fb_info->count);
72 	mutex_unlock(&registration_lock);
73 
74 	return fb_info;
75 }
76 
77 static void put_fb_info(struct fb_info *fb_info)
78 {
79 	if (!refcount_dec_and_test(&fb_info->count))
80 		return;
81 	if (fb_info->fbops->fb_destroy)
82 		fb_info->fbops->fb_destroy(fb_info);
83 }
84 
85 /*
86  * Helpers
87  */
88 
89 int fb_get_color_depth(struct fb_var_screeninfo *var,
90 		       struct fb_fix_screeninfo *fix)
91 {
92 	int depth = 0;
93 
94 	if (fix->visual == FB_VISUAL_MONO01 ||
95 	    fix->visual == FB_VISUAL_MONO10)
96 		depth = 1;
97 	else {
98 		if (var->green.length == var->blue.length &&
99 		    var->green.length == var->red.length &&
100 		    var->green.offset == var->blue.offset &&
101 		    var->green.offset == var->red.offset)
102 			depth = var->green.length;
103 		else
104 			depth = var->green.length + var->red.length +
105 				var->blue.length;
106 	}
107 
108 	return depth;
109 }
110 EXPORT_SYMBOL(fb_get_color_depth);
111 
112 /*
113  * Data padding functions.
114  */
115 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
116 {
117 	__fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
118 }
119 EXPORT_SYMBOL(fb_pad_aligned_buffer);
120 
121 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
122 				u32 shift_high, u32 shift_low, u32 mod)
123 {
124 	u8 mask = (u8) (0xfff << shift_high), tmp;
125 	int i, j;
126 
127 	for (i = height; i--; ) {
128 		for (j = 0; j < idx; j++) {
129 			tmp = dst[j];
130 			tmp &= mask;
131 			tmp |= *src >> shift_low;
132 			dst[j] = tmp;
133 			tmp = *src << shift_high;
134 			dst[j+1] = tmp;
135 			src++;
136 		}
137 		tmp = dst[idx];
138 		tmp &= mask;
139 		tmp |= *src >> shift_low;
140 		dst[idx] = tmp;
141 		if (shift_high < mod) {
142 			tmp = *src << shift_high;
143 			dst[idx+1] = tmp;
144 		}
145 		src++;
146 		dst += d_pitch;
147 	}
148 }
149 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
150 
151 /*
152  * we need to lock this section since fb_cursor
153  * may use fb_imageblit()
154  */
155 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
156 {
157 	u32 align = buf->buf_align - 1, offset;
158 	char *addr = buf->addr;
159 
160 	/* If IO mapped, we need to sync before access, no sharing of
161 	 * the pixmap is done
162 	 */
163 	if (buf->flags & FB_PIXMAP_IO) {
164 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
165 			info->fbops->fb_sync(info);
166 		return addr;
167 	}
168 
169 	/* See if we fit in the remaining pixmap space */
170 	offset = buf->offset + align;
171 	offset &= ~align;
172 	if (offset + size > buf->size) {
173 		/* We do not fit. In order to be able to re-use the buffer,
174 		 * we must ensure no asynchronous DMA'ing or whatever operation
175 		 * is in progress, we sync for that.
176 		 */
177 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
178 			info->fbops->fb_sync(info);
179 		offset = 0;
180 	}
181 	buf->offset = offset + size;
182 	addr += offset;
183 
184 	return addr;
185 }
186 EXPORT_SYMBOL(fb_get_buffer_offset);
187 
188 #ifdef CONFIG_LOGO
189 
190 static inline unsigned safe_shift(unsigned d, int n)
191 {
192 	return n < 0 ? d >> -n : d << n;
193 }
194 
195 static void fb_set_logocmap(struct fb_info *info,
196 				   const struct linux_logo *logo)
197 {
198 	struct fb_cmap palette_cmap;
199 	u16 palette_green[16];
200 	u16 palette_blue[16];
201 	u16 palette_red[16];
202 	int i, j, n;
203 	const unsigned char *clut = logo->clut;
204 
205 	palette_cmap.start = 0;
206 	palette_cmap.len = 16;
207 	palette_cmap.red = palette_red;
208 	palette_cmap.green = palette_green;
209 	palette_cmap.blue = palette_blue;
210 	palette_cmap.transp = NULL;
211 
212 	for (i = 0; i < logo->clutsize; i += n) {
213 		n = logo->clutsize - i;
214 		/* palette_cmap provides space for only 16 colors at once */
215 		if (n > 16)
216 			n = 16;
217 		palette_cmap.start = 32 + i;
218 		palette_cmap.len = n;
219 		for (j = 0; j < n; ++j) {
220 			palette_cmap.red[j] = clut[0] << 8 | clut[0];
221 			palette_cmap.green[j] = clut[1] << 8 | clut[1];
222 			palette_cmap.blue[j] = clut[2] << 8 | clut[2];
223 			clut += 3;
224 		}
225 		fb_set_cmap(&palette_cmap, info);
226 	}
227 }
228 
229 static void  fb_set_logo_truepalette(struct fb_info *info,
230 					    const struct linux_logo *logo,
231 					    u32 *palette)
232 {
233 	static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
234 	unsigned char redmask, greenmask, bluemask;
235 	int redshift, greenshift, blueshift;
236 	int i;
237 	const unsigned char *clut = logo->clut;
238 
239 	/*
240 	 * We have to create a temporary palette since console palette is only
241 	 * 16 colors long.
242 	 */
243 	/* Bug: Doesn't obey msb_right ... (who needs that?) */
244 	redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
245 	greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
246 	bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
247 	redshift   = info->var.red.offset   - (8 - info->var.red.length);
248 	greenshift = info->var.green.offset - (8 - info->var.green.length);
249 	blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
250 
251 	for ( i = 0; i < logo->clutsize; i++) {
252 		palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
253 				 safe_shift((clut[1] & greenmask), greenshift) |
254 				 safe_shift((clut[2] & bluemask), blueshift));
255 		clut += 3;
256 	}
257 }
258 
259 static void fb_set_logo_directpalette(struct fb_info *info,
260 					     const struct linux_logo *logo,
261 					     u32 *palette)
262 {
263 	int redshift, greenshift, blueshift;
264 	int i;
265 
266 	redshift = info->var.red.offset;
267 	greenshift = info->var.green.offset;
268 	blueshift = info->var.blue.offset;
269 
270 	for (i = 32; i < 32 + logo->clutsize; i++)
271 		palette[i] = i << redshift | i << greenshift | i << blueshift;
272 }
273 
274 static void fb_set_logo(struct fb_info *info,
275 			       const struct linux_logo *logo, u8 *dst,
276 			       int depth)
277 {
278 	int i, j, k;
279 	const u8 *src = logo->data;
280 	u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
281 	u8 fg = 1, d;
282 
283 	switch (fb_get_color_depth(&info->var, &info->fix)) {
284 	case 1:
285 		fg = 1;
286 		break;
287 	case 2:
288 		fg = 3;
289 		break;
290 	default:
291 		fg = 7;
292 		break;
293 	}
294 
295 	if (info->fix.visual == FB_VISUAL_MONO01 ||
296 	    info->fix.visual == FB_VISUAL_MONO10)
297 		fg = ~((u8) (0xfff << info->var.green.length));
298 
299 	switch (depth) {
300 	case 4:
301 		for (i = 0; i < logo->height; i++)
302 			for (j = 0; j < logo->width; src++) {
303 				*dst++ = *src >> 4;
304 				j++;
305 				if (j < logo->width) {
306 					*dst++ = *src & 0x0f;
307 					j++;
308 				}
309 			}
310 		break;
311 	case 1:
312 		for (i = 0; i < logo->height; i++) {
313 			for (j = 0; j < logo->width; src++) {
314 				d = *src ^ xor;
315 				for (k = 7; k >= 0 && j < logo->width; k--) {
316 					*dst++ = ((d >> k) & 1) ? fg : 0;
317 					j++;
318 				}
319 			}
320 		}
321 		break;
322 	}
323 }
324 
325 /*
326  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
327  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
328  * the visual format and color depth of the framebuffer, the DAC, the
329  * pseudo_palette, and the logo data will be adjusted accordingly.
330  *
331  * Case 1 - linux_logo_clut224:
332  * Color exceeds the number of console colors (16), thus we set the hardware DAC
333  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
334  *
335  * For visuals that require color info from the pseudo_palette, we also construct
336  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
337  * will be set.
338  *
339  * Case 2 - linux_logo_vga16:
340  * The number of colors just matches the console colors, thus there is no need
341  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
342  * each byte contains color information for two pixels (upper and lower nibble).
343  * To be consistent with fb_imageblit() usage, we therefore separate the two
344  * nibbles into separate bytes. The "depth" flag will be set to 4.
345  *
346  * Case 3 - linux_logo_mono:
347  * This is similar with Case 2.  Each byte contains information for 8 pixels.
348  * We isolate each bit and expand each into a byte. The "depth" flag will
349  * be set to 1.
350  */
351 static struct logo_data {
352 	int depth;
353 	int needs_directpalette;
354 	int needs_truepalette;
355 	int needs_cmapreset;
356 	const struct linux_logo *logo;
357 } fb_logo __read_mostly;
358 
359 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
360 {
361 	u32 size = width * height, i;
362 
363 	out += size - 1;
364 
365 	for (i = size; i--; )
366 		*out-- = *in++;
367 }
368 
369 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
370 {
371 	int i, j, h = height - 1;
372 
373 	for (i = 0; i < height; i++)
374 		for (j = 0; j < width; j++)
375 				out[height * j + h - i] = *in++;
376 }
377 
378 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
379 {
380 	int i, j, w = width - 1;
381 
382 	for (i = 0; i < height; i++)
383 		for (j = 0; j < width; j++)
384 			out[height * (w - j) + i] = *in++;
385 }
386 
387 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
388 			   struct fb_image *image, int rotate)
389 {
390 	u32 tmp;
391 
392 	if (rotate == FB_ROTATE_UD) {
393 		fb_rotate_logo_ud(image->data, dst, image->width,
394 				  image->height);
395 		image->dx = info->var.xres - image->width - image->dx;
396 		image->dy = info->var.yres - image->height - image->dy;
397 	} else if (rotate == FB_ROTATE_CW) {
398 		fb_rotate_logo_cw(image->data, dst, image->width,
399 				  image->height);
400 		tmp = image->width;
401 		image->width = image->height;
402 		image->height = tmp;
403 		tmp = image->dy;
404 		image->dy = image->dx;
405 		image->dx = info->var.xres - image->width - tmp;
406 	} else if (rotate == FB_ROTATE_CCW) {
407 		fb_rotate_logo_ccw(image->data, dst, image->width,
408 				   image->height);
409 		tmp = image->width;
410 		image->width = image->height;
411 		image->height = tmp;
412 		tmp = image->dx;
413 		image->dx = image->dy;
414 		image->dy = info->var.yres - image->height - tmp;
415 	}
416 
417 	image->data = dst;
418 }
419 
420 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
421 			    int rotate, unsigned int num)
422 {
423 	unsigned int x;
424 
425 	if (image->width > info->var.xres || image->height > info->var.yres)
426 		return;
427 
428 	if (rotate == FB_ROTATE_UR) {
429 		for (x = 0;
430 		     x < num && image->dx + image->width <= info->var.xres;
431 		     x++) {
432 			info->fbops->fb_imageblit(info, image);
433 			image->dx += image->width + 8;
434 		}
435 	} else if (rotate == FB_ROTATE_UD) {
436 		u32 dx = image->dx;
437 
438 		for (x = 0; x < num && image->dx <= dx; x++) {
439 			info->fbops->fb_imageblit(info, image);
440 			image->dx -= image->width + 8;
441 		}
442 	} else if (rotate == FB_ROTATE_CW) {
443 		for (x = 0;
444 		     x < num && image->dy + image->height <= info->var.yres;
445 		     x++) {
446 			info->fbops->fb_imageblit(info, image);
447 			image->dy += image->height + 8;
448 		}
449 	} else if (rotate == FB_ROTATE_CCW) {
450 		u32 dy = image->dy;
451 
452 		for (x = 0; x < num && image->dy <= dy; x++) {
453 			info->fbops->fb_imageblit(info, image);
454 			image->dy -= image->height + 8;
455 		}
456 	}
457 }
458 
459 static int fb_show_logo_line(struct fb_info *info, int rotate,
460 			     const struct linux_logo *logo, int y,
461 			     unsigned int n)
462 {
463 	u32 *palette = NULL, *saved_pseudo_palette = NULL;
464 	unsigned char *logo_new = NULL, *logo_rotate = NULL;
465 	struct fb_image image;
466 
467 	/* Return if the frame buffer is not mapped or suspended */
468 	if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
469 	    info->fbops->owner)
470 		return 0;
471 
472 	image.depth = 8;
473 	image.data = logo->data;
474 
475 	if (fb_logo.needs_cmapreset)
476 		fb_set_logocmap(info, logo);
477 
478 	if (fb_logo.needs_truepalette ||
479 	    fb_logo.needs_directpalette) {
480 		palette = kmalloc(256 * 4, GFP_KERNEL);
481 		if (palette == NULL)
482 			return 0;
483 
484 		if (fb_logo.needs_truepalette)
485 			fb_set_logo_truepalette(info, logo, palette);
486 		else
487 			fb_set_logo_directpalette(info, logo, palette);
488 
489 		saved_pseudo_palette = info->pseudo_palette;
490 		info->pseudo_palette = palette;
491 	}
492 
493 	if (fb_logo.depth <= 4) {
494 		logo_new = kmalloc_array(logo->width, logo->height,
495 					 GFP_KERNEL);
496 		if (logo_new == NULL) {
497 			kfree(palette);
498 			if (saved_pseudo_palette)
499 				info->pseudo_palette = saved_pseudo_palette;
500 			return 0;
501 		}
502 		image.data = logo_new;
503 		fb_set_logo(info, logo, logo_new, fb_logo.depth);
504 	}
505 
506 	if (fb_center_logo) {
507 		int xres = info->var.xres;
508 		int yres = info->var.yres;
509 
510 		if (rotate == FB_ROTATE_CW || rotate == FB_ROTATE_CCW) {
511 			xres = info->var.yres;
512 			yres = info->var.xres;
513 		}
514 
515 		while (n && (n * (logo->width + 8) - 8 > xres))
516 			--n;
517 		image.dx = (xres - n * (logo->width + 8) - 8) / 2;
518 		image.dy = y ?: (yres - logo->height) / 2;
519 	} else {
520 		image.dx = 0;
521 		image.dy = y;
522 	}
523 
524 	image.width = logo->width;
525 	image.height = logo->height;
526 
527 	if (rotate) {
528 		logo_rotate = kmalloc_array(logo->width, logo->height,
529 					    GFP_KERNEL);
530 		if (logo_rotate)
531 			fb_rotate_logo(info, logo_rotate, &image, rotate);
532 	}
533 
534 	fb_do_show_logo(info, &image, rotate, n);
535 
536 	kfree(palette);
537 	if (saved_pseudo_palette != NULL)
538 		info->pseudo_palette = saved_pseudo_palette;
539 	kfree(logo_new);
540 	kfree(logo_rotate);
541 	return image.dy + logo->height;
542 }
543 
544 
545 #ifdef CONFIG_FB_LOGO_EXTRA
546 
547 #define FB_LOGO_EX_NUM_MAX 10
548 static struct logo_data_extra {
549 	const struct linux_logo *logo;
550 	unsigned int n;
551 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
552 static unsigned int fb_logo_ex_num;
553 
554 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
555 {
556 	if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
557 		return;
558 
559 	fb_logo_ex[fb_logo_ex_num].logo = logo;
560 	fb_logo_ex[fb_logo_ex_num].n = n;
561 	fb_logo_ex_num++;
562 }
563 
564 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
565 				  unsigned int yres)
566 {
567 	unsigned int i;
568 
569 	/* FIXME: logo_ex supports only truecolor fb. */
570 	if (info->fix.visual != FB_VISUAL_TRUECOLOR)
571 		fb_logo_ex_num = 0;
572 
573 	for (i = 0; i < fb_logo_ex_num; i++) {
574 		if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
575 			fb_logo_ex[i].logo = NULL;
576 			continue;
577 		}
578 		height += fb_logo_ex[i].logo->height;
579 		if (height > yres) {
580 			height -= fb_logo_ex[i].logo->height;
581 			fb_logo_ex_num = i;
582 			break;
583 		}
584 	}
585 	return height;
586 }
587 
588 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
589 {
590 	unsigned int i;
591 
592 	for (i = 0; i < fb_logo_ex_num; i++)
593 		y = fb_show_logo_line(info, rotate,
594 				      fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
595 
596 	return y;
597 }
598 
599 #else /* !CONFIG_FB_LOGO_EXTRA */
600 
601 static inline int fb_prepare_extra_logos(struct fb_info *info,
602 					 unsigned int height,
603 					 unsigned int yres)
604 {
605 	return height;
606 }
607 
608 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
609 {
610 	return y;
611 }
612 
613 #endif /* CONFIG_FB_LOGO_EXTRA */
614 
615 
616 int fb_prepare_logo(struct fb_info *info, int rotate)
617 {
618 	int depth = fb_get_color_depth(&info->var, &info->fix);
619 	unsigned int yres;
620 	int height;
621 
622 	memset(&fb_logo, 0, sizeof(struct logo_data));
623 
624 	if (info->flags & FBINFO_MISC_TILEBLITTING ||
625 	    info->fbops->owner || !fb_logo_count)
626 		return 0;
627 
628 	if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
629 		depth = info->var.blue.length;
630 		if (info->var.red.length < depth)
631 			depth = info->var.red.length;
632 		if (info->var.green.length < depth)
633 			depth = info->var.green.length;
634 	}
635 
636 	if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
637 		/* assume console colormap */
638 		depth = 4;
639 	}
640 
641 	/* Return if no suitable logo was found */
642 	fb_logo.logo = fb_find_logo(depth);
643 
644 	if (!fb_logo.logo) {
645 		return 0;
646 	}
647 
648 	if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
649 		yres = info->var.yres;
650 	else
651 		yres = info->var.xres;
652 
653 	if (fb_logo.logo->height > yres) {
654 		fb_logo.logo = NULL;
655 		return 0;
656 	}
657 
658 	/* What depth we asked for might be different from what we get */
659 	if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
660 		fb_logo.depth = 8;
661 	else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
662 		fb_logo.depth = 4;
663 	else
664 		fb_logo.depth = 1;
665 
666 
667 	if (fb_logo.depth > 4 && depth > 4) {
668 		switch (info->fix.visual) {
669 		case FB_VISUAL_TRUECOLOR:
670 			fb_logo.needs_truepalette = 1;
671 			break;
672 		case FB_VISUAL_DIRECTCOLOR:
673 			fb_logo.needs_directpalette = 1;
674 			fb_logo.needs_cmapreset = 1;
675 			break;
676 		case FB_VISUAL_PSEUDOCOLOR:
677 			fb_logo.needs_cmapreset = 1;
678 			break;
679 		}
680 	}
681 
682 	height = fb_logo.logo->height;
683 	if (fb_center_logo)
684 		height += (yres - fb_logo.logo->height) / 2;
685 
686 	return fb_prepare_extra_logos(info, height, yres);
687 }
688 
689 int fb_show_logo(struct fb_info *info, int rotate)
690 {
691 	unsigned int count;
692 	int y;
693 
694 	if (!fb_logo_count)
695 		return 0;
696 
697 	count = fb_logo_count < 0 ? num_online_cpus() : fb_logo_count;
698 	y = fb_show_logo_line(info, rotate, fb_logo.logo, 0, count);
699 	y = fb_show_extra_logos(info, y, rotate);
700 
701 	return y;
702 }
703 #else
704 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
705 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
706 #endif /* CONFIG_LOGO */
707 EXPORT_SYMBOL(fb_prepare_logo);
708 EXPORT_SYMBOL(fb_show_logo);
709 
710 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
711 {
712 	mutex_lock(&registration_lock);
713 	return (*pos < FB_MAX) ? pos : NULL;
714 }
715 
716 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
717 {
718 	(*pos)++;
719 	return (*pos < FB_MAX) ? pos : NULL;
720 }
721 
722 static void fb_seq_stop(struct seq_file *m, void *v)
723 {
724 	mutex_unlock(&registration_lock);
725 }
726 
727 static int fb_seq_show(struct seq_file *m, void *v)
728 {
729 	int i = *(loff_t *)v;
730 	struct fb_info *fi = registered_fb[i];
731 
732 	if (fi)
733 		seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
734 	return 0;
735 }
736 
737 static const struct seq_operations __maybe_unused proc_fb_seq_ops = {
738 	.start	= fb_seq_start,
739 	.next	= fb_seq_next,
740 	.stop	= fb_seq_stop,
741 	.show	= fb_seq_show,
742 };
743 
744 /*
745  * We hold a reference to the fb_info in file->private_data,
746  * but if the current registered fb has changed, we don't
747  * actually want to use it.
748  *
749  * So look up the fb_info using the inode minor number,
750  * and just verify it against the reference we have.
751  */
752 static struct fb_info *file_fb_info(struct file *file)
753 {
754 	struct inode *inode = file_inode(file);
755 	int fbidx = iminor(inode);
756 	struct fb_info *info = registered_fb[fbidx];
757 
758 	if (info != file->private_data)
759 		info = NULL;
760 	return info;
761 }
762 
763 static ssize_t
764 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
765 {
766 	unsigned long p = *ppos;
767 	struct fb_info *info = file_fb_info(file);
768 	u8 *buffer, *dst;
769 	u8 __iomem *src;
770 	int c, cnt = 0, err = 0;
771 	unsigned long total_size;
772 
773 	if (!info || ! info->screen_base)
774 		return -ENODEV;
775 
776 	if (info->state != FBINFO_STATE_RUNNING)
777 		return -EPERM;
778 
779 	if (info->fbops->fb_read)
780 		return info->fbops->fb_read(info, buf, count, ppos);
781 
782 	total_size = info->screen_size;
783 
784 	if (total_size == 0)
785 		total_size = info->fix.smem_len;
786 
787 	if (p >= total_size)
788 		return 0;
789 
790 	if (count >= total_size)
791 		count = total_size;
792 
793 	if (count + p > total_size)
794 		count = total_size - p;
795 
796 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
797 			 GFP_KERNEL);
798 	if (!buffer)
799 		return -ENOMEM;
800 
801 	src = (u8 __iomem *) (info->screen_base + p);
802 
803 	if (info->fbops->fb_sync)
804 		info->fbops->fb_sync(info);
805 
806 	while (count) {
807 		c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
808 		dst = buffer;
809 		fb_memcpy_fromfb(dst, src, c);
810 		dst += c;
811 		src += c;
812 
813 		if (copy_to_user(buf, buffer, c)) {
814 			err = -EFAULT;
815 			break;
816 		}
817 		*ppos += c;
818 		buf += c;
819 		cnt += c;
820 		count -= c;
821 	}
822 
823 	kfree(buffer);
824 
825 	return (err) ? err : cnt;
826 }
827 
828 static ssize_t
829 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
830 {
831 	unsigned long p = *ppos;
832 	struct fb_info *info = file_fb_info(file);
833 	u8 *buffer, *src;
834 	u8 __iomem *dst;
835 	int c, cnt = 0, err = 0;
836 	unsigned long total_size;
837 
838 	if (!info || !info->screen_base)
839 		return -ENODEV;
840 
841 	if (info->state != FBINFO_STATE_RUNNING)
842 		return -EPERM;
843 
844 	if (info->fbops->fb_write)
845 		return info->fbops->fb_write(info, buf, count, ppos);
846 
847 	total_size = info->screen_size;
848 
849 	if (total_size == 0)
850 		total_size = info->fix.smem_len;
851 
852 	if (p > total_size)
853 		return -EFBIG;
854 
855 	if (count > total_size) {
856 		err = -EFBIG;
857 		count = total_size;
858 	}
859 
860 	if (count + p > total_size) {
861 		if (!err)
862 			err = -ENOSPC;
863 
864 		count = total_size - p;
865 	}
866 
867 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
868 			 GFP_KERNEL);
869 	if (!buffer)
870 		return -ENOMEM;
871 
872 	dst = (u8 __iomem *) (info->screen_base + p);
873 
874 	if (info->fbops->fb_sync)
875 		info->fbops->fb_sync(info);
876 
877 	while (count) {
878 		c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
879 		src = buffer;
880 
881 		if (copy_from_user(src, buf, c)) {
882 			err = -EFAULT;
883 			break;
884 		}
885 
886 		fb_memcpy_tofb(dst, src, c);
887 		dst += c;
888 		src += c;
889 		*ppos += c;
890 		buf += c;
891 		cnt += c;
892 		count -= c;
893 	}
894 
895 	kfree(buffer);
896 
897 	return (cnt) ? cnt : err;
898 }
899 
900 int
901 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
902 {
903 	struct fb_fix_screeninfo *fix = &info->fix;
904 	unsigned int yres = info->var.yres;
905 	int err = 0;
906 
907 	if (var->yoffset > 0) {
908 		if (var->vmode & FB_VMODE_YWRAP) {
909 			if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
910 				err = -EINVAL;
911 			else
912 				yres = 0;
913 		} else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
914 			err = -EINVAL;
915 	}
916 
917 	if (var->xoffset > 0 && (!fix->xpanstep ||
918 				 (var->xoffset % fix->xpanstep)))
919 		err = -EINVAL;
920 
921 	if (err || !info->fbops->fb_pan_display ||
922 	    var->yoffset > info->var.yres_virtual - yres ||
923 	    var->xoffset > info->var.xres_virtual - info->var.xres)
924 		return -EINVAL;
925 
926 	if ((err = info->fbops->fb_pan_display(var, info)))
927 		return err;
928 	info->var.xoffset = var->xoffset;
929 	info->var.yoffset = var->yoffset;
930 	if (var->vmode & FB_VMODE_YWRAP)
931 		info->var.vmode |= FB_VMODE_YWRAP;
932 	else
933 		info->var.vmode &= ~FB_VMODE_YWRAP;
934 	return 0;
935 }
936 EXPORT_SYMBOL(fb_pan_display);
937 
938 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
939 			 u32 activate)
940 {
941 	struct fb_blit_caps caps, fbcaps;
942 	int err = 0;
943 
944 	memset(&caps, 0, sizeof(caps));
945 	memset(&fbcaps, 0, sizeof(fbcaps));
946 	caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
947 	fbcon_get_requirement(info, &caps);
948 	info->fbops->fb_get_caps(info, &fbcaps, var);
949 
950 	if (((fbcaps.x ^ caps.x) & caps.x) ||
951 	    ((fbcaps.y ^ caps.y) & caps.y) ||
952 	    (fbcaps.len < caps.len))
953 		err = -EINVAL;
954 
955 	return err;
956 }
957 
958 int
959 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
960 {
961 	int ret = 0;
962 	u32 activate;
963 	struct fb_var_screeninfo old_var;
964 	struct fb_videomode mode;
965 	struct fb_event event;
966 	u32 unused;
967 
968 	if (var->activate & FB_ACTIVATE_INV_MODE) {
969 		struct fb_videomode mode1, mode2;
970 
971 		fb_var_to_videomode(&mode1, var);
972 		fb_var_to_videomode(&mode2, &info->var);
973 		/* make sure we don't delete the videomode of current var */
974 		ret = fb_mode_is_equal(&mode1, &mode2);
975 		if (!ret) {
976 			ret = fbcon_mode_deleted(info, &mode1);
977 			if (!ret)
978 				fb_delete_videomode(&mode1, &info->modelist);
979 		}
980 
981 		return ret ? -EINVAL : 0;
982 	}
983 
984 	if (!(var->activate & FB_ACTIVATE_FORCE) &&
985 	    !memcmp(&info->var, var, sizeof(struct fb_var_screeninfo)))
986 		return 0;
987 
988 	activate = var->activate;
989 
990 	/* When using FOURCC mode, make sure the red, green, blue and
991 	 * transp fields are set to 0.
992 	 */
993 	if ((info->fix.capabilities & FB_CAP_FOURCC) &&
994 	    var->grayscale > 1) {
995 		if (var->red.offset     || var->green.offset    ||
996 		    var->blue.offset    || var->transp.offset   ||
997 		    var->red.length     || var->green.length    ||
998 		    var->blue.length    || var->transp.length   ||
999 		    var->red.msb_right  || var->green.msb_right ||
1000 		    var->blue.msb_right || var->transp.msb_right)
1001 			return -EINVAL;
1002 	}
1003 
1004 	if (!info->fbops->fb_check_var) {
1005 		*var = info->var;
1006 		return 0;
1007 	}
1008 
1009 	/* bitfill_aligned() assumes that it's at least 8x8 */
1010 	if (var->xres < 8 || var->yres < 8)
1011 		return -EINVAL;
1012 
1013 	/* Too huge resolution causes multiplication overflow. */
1014 	if (check_mul_overflow(var->xres, var->yres, &unused) ||
1015 	    check_mul_overflow(var->xres_virtual, var->yres_virtual, &unused))
1016 		return -EINVAL;
1017 
1018 	ret = info->fbops->fb_check_var(var, info);
1019 
1020 	if (ret)
1021 		return ret;
1022 
1023 	if ((var->activate & FB_ACTIVATE_MASK) != FB_ACTIVATE_NOW)
1024 		return 0;
1025 
1026 	if (info->fbops->fb_get_caps) {
1027 		ret = fb_check_caps(info, var, activate);
1028 
1029 		if (ret)
1030 			return ret;
1031 	}
1032 
1033 	old_var = info->var;
1034 	info->var = *var;
1035 
1036 	if (info->fbops->fb_set_par) {
1037 		ret = info->fbops->fb_set_par(info);
1038 
1039 		if (ret) {
1040 			info->var = old_var;
1041 			printk(KERN_WARNING "detected "
1042 				"fb_set_par error, "
1043 				"error code: %d\n", ret);
1044 			return ret;
1045 		}
1046 	}
1047 
1048 	fb_pan_display(info, &info->var);
1049 	fb_set_cmap(&info->cmap, info);
1050 	fb_var_to_videomode(&mode, &info->var);
1051 
1052 	if (info->modelist.prev && info->modelist.next &&
1053 	    !list_empty(&info->modelist))
1054 		ret = fb_add_videomode(&mode, &info->modelist);
1055 
1056 	if (ret)
1057 		return ret;
1058 
1059 	event.info = info;
1060 	event.data = &mode;
1061 	fb_notifier_call_chain(FB_EVENT_MODE_CHANGE, &event);
1062 
1063 	return 0;
1064 }
1065 EXPORT_SYMBOL(fb_set_var);
1066 
1067 int
1068 fb_blank(struct fb_info *info, int blank)
1069 {
1070 	struct fb_event event;
1071 	int ret = -EINVAL;
1072 
1073 	if (blank > FB_BLANK_POWERDOWN)
1074 		blank = FB_BLANK_POWERDOWN;
1075 
1076 	event.info = info;
1077 	event.data = &blank;
1078 
1079 	if (info->fbops->fb_blank)
1080 		ret = info->fbops->fb_blank(blank, info);
1081 
1082 	if (!ret)
1083 		fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1084 
1085 	return ret;
1086 }
1087 EXPORT_SYMBOL(fb_blank);
1088 
1089 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1090 			unsigned long arg)
1091 {
1092 	const struct fb_ops *fb;
1093 	struct fb_var_screeninfo var;
1094 	struct fb_fix_screeninfo fix;
1095 	struct fb_cmap cmap_from;
1096 	struct fb_cmap_user cmap;
1097 	void __user *argp = (void __user *)arg;
1098 	long ret = 0;
1099 
1100 	switch (cmd) {
1101 	case FBIOGET_VSCREENINFO:
1102 		lock_fb_info(info);
1103 		var = info->var;
1104 		unlock_fb_info(info);
1105 
1106 		ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1107 		break;
1108 	case FBIOPUT_VSCREENINFO:
1109 		if (copy_from_user(&var, argp, sizeof(var)))
1110 			return -EFAULT;
1111 		console_lock();
1112 		lock_fb_info(info);
1113 		ret = fb_set_var(info, &var);
1114 		if (!ret)
1115 			fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
1116 		unlock_fb_info(info);
1117 		console_unlock();
1118 		if (!ret && copy_to_user(argp, &var, sizeof(var)))
1119 			ret = -EFAULT;
1120 		break;
1121 	case FBIOGET_FSCREENINFO:
1122 		lock_fb_info(info);
1123 		memcpy(&fix, &info->fix, sizeof(fix));
1124 		if (info->flags & FBINFO_HIDE_SMEM_START)
1125 			fix.smem_start = 0;
1126 		unlock_fb_info(info);
1127 
1128 		ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1129 		break;
1130 	case FBIOPUTCMAP:
1131 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1132 			return -EFAULT;
1133 		ret = fb_set_user_cmap(&cmap, info);
1134 		break;
1135 	case FBIOGETCMAP:
1136 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1137 			return -EFAULT;
1138 		lock_fb_info(info);
1139 		cmap_from = info->cmap;
1140 		unlock_fb_info(info);
1141 		ret = fb_cmap_to_user(&cmap_from, &cmap);
1142 		break;
1143 	case FBIOPAN_DISPLAY:
1144 		if (copy_from_user(&var, argp, sizeof(var)))
1145 			return -EFAULT;
1146 		console_lock();
1147 		lock_fb_info(info);
1148 		ret = fb_pan_display(info, &var);
1149 		unlock_fb_info(info);
1150 		console_unlock();
1151 		if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1152 			return -EFAULT;
1153 		break;
1154 	case FBIO_CURSOR:
1155 		ret = -EINVAL;
1156 		break;
1157 	case FBIOGET_CON2FBMAP:
1158 		ret = fbcon_get_con2fb_map_ioctl(argp);
1159 		break;
1160 	case FBIOPUT_CON2FBMAP:
1161 		ret = fbcon_set_con2fb_map_ioctl(argp);
1162 		break;
1163 	case FBIOBLANK:
1164 		if (arg > FB_BLANK_POWERDOWN)
1165 			return -EINVAL;
1166 		console_lock();
1167 		lock_fb_info(info);
1168 		ret = fb_blank(info, arg);
1169 		/* might again call into fb_blank */
1170 		fbcon_fb_blanked(info, arg);
1171 		unlock_fb_info(info);
1172 		console_unlock();
1173 		break;
1174 	default:
1175 		lock_fb_info(info);
1176 		fb = info->fbops;
1177 		if (fb->fb_ioctl)
1178 			ret = fb->fb_ioctl(info, cmd, arg);
1179 		else
1180 			ret = -ENOTTY;
1181 		unlock_fb_info(info);
1182 	}
1183 	return ret;
1184 }
1185 
1186 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1187 {
1188 	struct fb_info *info = file_fb_info(file);
1189 
1190 	if (!info)
1191 		return -ENODEV;
1192 	return do_fb_ioctl(info, cmd, arg);
1193 }
1194 
1195 #ifdef CONFIG_COMPAT
1196 struct fb_fix_screeninfo32 {
1197 	char			id[16];
1198 	compat_caddr_t		smem_start;
1199 	u32			smem_len;
1200 	u32			type;
1201 	u32			type_aux;
1202 	u32			visual;
1203 	u16			xpanstep;
1204 	u16			ypanstep;
1205 	u16			ywrapstep;
1206 	u32			line_length;
1207 	compat_caddr_t		mmio_start;
1208 	u32			mmio_len;
1209 	u32			accel;
1210 	u16			reserved[3];
1211 };
1212 
1213 struct fb_cmap32 {
1214 	u32			start;
1215 	u32			len;
1216 	compat_caddr_t	red;
1217 	compat_caddr_t	green;
1218 	compat_caddr_t	blue;
1219 	compat_caddr_t	transp;
1220 };
1221 
1222 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1223 			  unsigned long arg)
1224 {
1225 	struct fb_cmap32 cmap32;
1226 	struct fb_cmap cmap_from;
1227 	struct fb_cmap_user cmap;
1228 
1229 	if (copy_from_user(&cmap32, compat_ptr(arg), sizeof(cmap32)))
1230 		return -EFAULT;
1231 
1232 	cmap = (struct fb_cmap_user) {
1233 		.start	= cmap32.start,
1234 		.len	= cmap32.len,
1235 		.red	= compat_ptr(cmap32.red),
1236 		.green	= compat_ptr(cmap32.green),
1237 		.blue	= compat_ptr(cmap32.blue),
1238 		.transp	= compat_ptr(cmap32.transp),
1239 	};
1240 
1241 	if (cmd == FBIOPUTCMAP)
1242 		return fb_set_user_cmap(&cmap, info);
1243 
1244 	lock_fb_info(info);
1245 	cmap_from = info->cmap;
1246 	unlock_fb_info(info);
1247 
1248 	return fb_cmap_to_user(&cmap_from, &cmap);
1249 }
1250 
1251 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1252 				  struct fb_fix_screeninfo32 __user *fix32)
1253 {
1254 	__u32 data;
1255 	int err;
1256 
1257 	err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1258 
1259 	data = (__u32) (unsigned long) fix->smem_start;
1260 	err |= put_user(data, &fix32->smem_start);
1261 
1262 	err |= put_user(fix->smem_len, &fix32->smem_len);
1263 	err |= put_user(fix->type, &fix32->type);
1264 	err |= put_user(fix->type_aux, &fix32->type_aux);
1265 	err |= put_user(fix->visual, &fix32->visual);
1266 	err |= put_user(fix->xpanstep, &fix32->xpanstep);
1267 	err |= put_user(fix->ypanstep, &fix32->ypanstep);
1268 	err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1269 	err |= put_user(fix->line_length, &fix32->line_length);
1270 
1271 	data = (__u32) (unsigned long) fix->mmio_start;
1272 	err |= put_user(data, &fix32->mmio_start);
1273 
1274 	err |= put_user(fix->mmio_len, &fix32->mmio_len);
1275 	err |= put_user(fix->accel, &fix32->accel);
1276 	err |= copy_to_user(fix32->reserved, fix->reserved,
1277 			    sizeof(fix->reserved));
1278 
1279 	if (err)
1280 		return -EFAULT;
1281 	return 0;
1282 }
1283 
1284 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1285 			      unsigned long arg)
1286 {
1287 	struct fb_fix_screeninfo fix;
1288 
1289 	lock_fb_info(info);
1290 	fix = info->fix;
1291 	if (info->flags & FBINFO_HIDE_SMEM_START)
1292 		fix.smem_start = 0;
1293 	unlock_fb_info(info);
1294 	return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1295 }
1296 
1297 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1298 			    unsigned long arg)
1299 {
1300 	struct fb_info *info = file_fb_info(file);
1301 	const struct fb_ops *fb;
1302 	long ret = -ENOIOCTLCMD;
1303 
1304 	if (!info)
1305 		return -ENODEV;
1306 	fb = info->fbops;
1307 	switch(cmd) {
1308 	case FBIOGET_VSCREENINFO:
1309 	case FBIOPUT_VSCREENINFO:
1310 	case FBIOPAN_DISPLAY:
1311 	case FBIOGET_CON2FBMAP:
1312 	case FBIOPUT_CON2FBMAP:
1313 		arg = (unsigned long) compat_ptr(arg);
1314 		fallthrough;
1315 	case FBIOBLANK:
1316 		ret = do_fb_ioctl(info, cmd, arg);
1317 		break;
1318 
1319 	case FBIOGET_FSCREENINFO:
1320 		ret = fb_get_fscreeninfo(info, cmd, arg);
1321 		break;
1322 
1323 	case FBIOGETCMAP:
1324 	case FBIOPUTCMAP:
1325 		ret = fb_getput_cmap(info, cmd, arg);
1326 		break;
1327 
1328 	default:
1329 		if (fb->fb_compat_ioctl)
1330 			ret = fb->fb_compat_ioctl(info, cmd, arg);
1331 		break;
1332 	}
1333 	return ret;
1334 }
1335 #endif
1336 
1337 static int
1338 fb_mmap(struct file *file, struct vm_area_struct * vma)
1339 {
1340 	struct fb_info *info = file_fb_info(file);
1341 	int (*fb_mmap_fn)(struct fb_info *info, struct vm_area_struct *vma);
1342 	unsigned long mmio_pgoff;
1343 	unsigned long start;
1344 	u32 len;
1345 
1346 	if (!info)
1347 		return -ENODEV;
1348 	mutex_lock(&info->mm_lock);
1349 
1350 	fb_mmap_fn = info->fbops->fb_mmap;
1351 
1352 #if IS_ENABLED(CONFIG_FB_DEFERRED_IO)
1353 	if (info->fbdefio)
1354 		fb_mmap_fn = fb_deferred_io_mmap;
1355 #endif
1356 
1357 	if (fb_mmap_fn) {
1358 		int res;
1359 
1360 		/*
1361 		 * The framebuffer needs to be accessed decrypted, be sure
1362 		 * SME protection is removed ahead of the call
1363 		 */
1364 		vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1365 		res = fb_mmap_fn(info, vma);
1366 		mutex_unlock(&info->mm_lock);
1367 		return res;
1368 	}
1369 
1370 	/*
1371 	 * Ugh. This can be either the frame buffer mapping, or
1372 	 * if pgoff points past it, the mmio mapping.
1373 	 */
1374 	start = info->fix.smem_start;
1375 	len = info->fix.smem_len;
1376 	mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1377 	if (vma->vm_pgoff >= mmio_pgoff) {
1378 		if (info->var.accel_flags) {
1379 			mutex_unlock(&info->mm_lock);
1380 			return -EINVAL;
1381 		}
1382 
1383 		vma->vm_pgoff -= mmio_pgoff;
1384 		start = info->fix.mmio_start;
1385 		len = info->fix.mmio_len;
1386 	}
1387 	mutex_unlock(&info->mm_lock);
1388 
1389 	vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1390 	fb_pgprotect(file, vma, start);
1391 
1392 	return vm_iomap_memory(vma, start, len);
1393 }
1394 
1395 static int
1396 fb_open(struct inode *inode, struct file *file)
1397 __acquires(&info->lock)
1398 __releases(&info->lock)
1399 {
1400 	int fbidx = iminor(inode);
1401 	struct fb_info *info;
1402 	int res = 0;
1403 
1404 	info = get_fb_info(fbidx);
1405 	if (!info) {
1406 		request_module("fb%d", fbidx);
1407 		info = get_fb_info(fbidx);
1408 		if (!info)
1409 			return -ENODEV;
1410 	}
1411 	if (IS_ERR(info))
1412 		return PTR_ERR(info);
1413 
1414 	lock_fb_info(info);
1415 	if (!try_module_get(info->fbops->owner)) {
1416 		res = -ENODEV;
1417 		goto out;
1418 	}
1419 	file->private_data = info;
1420 	if (info->fbops->fb_open) {
1421 		res = info->fbops->fb_open(info,1);
1422 		if (res)
1423 			module_put(info->fbops->owner);
1424 	}
1425 #ifdef CONFIG_FB_DEFERRED_IO
1426 	if (info->fbdefio)
1427 		fb_deferred_io_open(info, inode, file);
1428 #endif
1429 out:
1430 	unlock_fb_info(info);
1431 	if (res)
1432 		put_fb_info(info);
1433 	return res;
1434 }
1435 
1436 static int
1437 fb_release(struct inode *inode, struct file *file)
1438 __acquires(&info->lock)
1439 __releases(&info->lock)
1440 {
1441 	struct fb_info * const info = file->private_data;
1442 
1443 	lock_fb_info(info);
1444 	if (info->fbops->fb_release)
1445 		info->fbops->fb_release(info,1);
1446 	module_put(info->fbops->owner);
1447 	unlock_fb_info(info);
1448 	put_fb_info(info);
1449 	return 0;
1450 }
1451 
1452 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1453 unsigned long get_fb_unmapped_area(struct file *filp,
1454 				   unsigned long addr, unsigned long len,
1455 				   unsigned long pgoff, unsigned long flags)
1456 {
1457 	struct fb_info * const info = filp->private_data;
1458 	unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1459 
1460 	if (pgoff > fb_size || len > fb_size - pgoff)
1461 		return -EINVAL;
1462 
1463 	return (unsigned long)info->screen_base + pgoff;
1464 }
1465 #endif
1466 
1467 static const struct file_operations fb_fops = {
1468 	.owner =	THIS_MODULE,
1469 	.read =		fb_read,
1470 	.write =	fb_write,
1471 	.unlocked_ioctl = fb_ioctl,
1472 #ifdef CONFIG_COMPAT
1473 	.compat_ioctl = fb_compat_ioctl,
1474 #endif
1475 	.mmap =		fb_mmap,
1476 	.open =		fb_open,
1477 	.release =	fb_release,
1478 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1479 	(defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1480 	 !defined(CONFIG_MMU))
1481 	.get_unmapped_area = get_fb_unmapped_area,
1482 #endif
1483 #ifdef CONFIG_FB_DEFERRED_IO
1484 	.fsync =	fb_deferred_io_fsync,
1485 #endif
1486 	.llseek =	default_llseek,
1487 };
1488 
1489 struct class *fb_class;
1490 EXPORT_SYMBOL(fb_class);
1491 
1492 static int fb_check_foreignness(struct fb_info *fi)
1493 {
1494 	const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1495 
1496 	fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1497 
1498 #ifdef __BIG_ENDIAN
1499 	fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1500 #else
1501 	fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1502 #endif /* __BIG_ENDIAN */
1503 
1504 	if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1505 		pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1506 		       "support this framebuffer\n", fi->fix.id);
1507 		return -ENOSYS;
1508 	} else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1509 		pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1510 		       "support this framebuffer\n", fi->fix.id);
1511 		return -ENOSYS;
1512 	}
1513 
1514 	return 0;
1515 }
1516 
1517 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1518 {
1519 	/* is the generic aperture base the same as the HW one */
1520 	if (gen->base == hw->base)
1521 		return true;
1522 	/* is the generic aperture base inside the hw base->hw base+size */
1523 	if (gen->base > hw->base && gen->base < hw->base + hw->size)
1524 		return true;
1525 	return false;
1526 }
1527 
1528 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1529 				    struct apertures_struct *hwa)
1530 {
1531 	int i, j;
1532 	if (!hwa || !gena)
1533 		return false;
1534 
1535 	for (i = 0; i < hwa->count; ++i) {
1536 		struct aperture *h = &hwa->ranges[i];
1537 		for (j = 0; j < gena->count; ++j) {
1538 			struct aperture *g = &gena->ranges[j];
1539 			printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1540 				(unsigned long long)g->base,
1541 				(unsigned long long)g->size,
1542 				(unsigned long long)h->base,
1543 				(unsigned long long)h->size);
1544 			if (apertures_overlap(g, h))
1545 				return true;
1546 		}
1547 	}
1548 
1549 	return false;
1550 }
1551 
1552 static void do_unregister_framebuffer(struct fb_info *fb_info);
1553 
1554 #define VGA_FB_PHYS 0xA0000
1555 static void do_remove_conflicting_framebuffers(struct apertures_struct *a,
1556 					       const char *name, bool primary)
1557 {
1558 	int i;
1559 
1560 	/* check all firmware fbs and kick off if the base addr overlaps */
1561 	for_each_registered_fb(i) {
1562 		struct apertures_struct *gen_aper;
1563 		struct device *device;
1564 
1565 		if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1566 			continue;
1567 
1568 		gen_aper = registered_fb[i]->apertures;
1569 		device = registered_fb[i]->device;
1570 		if (fb_do_apertures_overlap(gen_aper, a) ||
1571 			(primary && gen_aper && gen_aper->count &&
1572 			 gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1573 
1574 			printk(KERN_INFO "fb%d: switching to %s from %s\n",
1575 			       i, name, registered_fb[i]->fix.id);
1576 
1577 			/*
1578 			 * If we kick-out a firmware driver, we also want to remove
1579 			 * the underlying platform device, such as simple-framebuffer,
1580 			 * VESA, EFI, etc. A native driver will then be able to
1581 			 * allocate the memory range.
1582 			 *
1583 			 * If it's not a platform device, at least print a warning. A
1584 			 * fix would add code to remove the device from the system.
1585 			 */
1586 			if (dev_is_platform(device)) {
1587 				registered_fb[i]->forced_out = true;
1588 				platform_device_unregister(to_platform_device(device));
1589 			} else {
1590 				pr_warn("fb%d: cannot remove device\n", i);
1591 				do_unregister_framebuffer(registered_fb[i]);
1592 			}
1593 		}
1594 	}
1595 }
1596 
1597 static bool lockless_register_fb;
1598 module_param_named_unsafe(lockless_register_fb, lockless_register_fb, bool, 0400);
1599 MODULE_PARM_DESC(lockless_register_fb,
1600 	"Lockless framebuffer registration for debugging [default=off]");
1601 
1602 static int do_register_framebuffer(struct fb_info *fb_info)
1603 {
1604 	int i, ret;
1605 	struct fb_videomode mode;
1606 
1607 	if (fb_check_foreignness(fb_info))
1608 		return -ENOSYS;
1609 
1610 	do_remove_conflicting_framebuffers(fb_info->apertures,
1611 					   fb_info->fix.id,
1612 					   fb_is_primary_device(fb_info));
1613 
1614 	if (num_registered_fb == FB_MAX)
1615 		return -ENXIO;
1616 
1617 	num_registered_fb++;
1618 	for (i = 0 ; i < FB_MAX; i++)
1619 		if (!registered_fb[i])
1620 			break;
1621 	fb_info->node = i;
1622 	refcount_set(&fb_info->count, 1);
1623 	mutex_init(&fb_info->lock);
1624 	mutex_init(&fb_info->mm_lock);
1625 
1626 	fb_info->dev = device_create(fb_class, fb_info->device,
1627 				     MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1628 	if (IS_ERR(fb_info->dev)) {
1629 		/* Not fatal */
1630 		printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1631 		fb_info->dev = NULL;
1632 	} else
1633 		fb_init_device(fb_info);
1634 
1635 	if (fb_info->pixmap.addr == NULL) {
1636 		fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1637 		if (fb_info->pixmap.addr) {
1638 			fb_info->pixmap.size = FBPIXMAPSIZE;
1639 			fb_info->pixmap.buf_align = 1;
1640 			fb_info->pixmap.scan_align = 1;
1641 			fb_info->pixmap.access_align = 32;
1642 			fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1643 		}
1644 	}
1645 	fb_info->pixmap.offset = 0;
1646 
1647 	if (!fb_info->pixmap.blit_x)
1648 		fb_info->pixmap.blit_x = ~(u32)0;
1649 
1650 	if (!fb_info->pixmap.blit_y)
1651 		fb_info->pixmap.blit_y = ~(u32)0;
1652 
1653 	if (!fb_info->modelist.prev || !fb_info->modelist.next)
1654 		INIT_LIST_HEAD(&fb_info->modelist);
1655 
1656 	if (fb_info->skip_vt_switch)
1657 		pm_vt_switch_required(fb_info->dev, false);
1658 	else
1659 		pm_vt_switch_required(fb_info->dev, true);
1660 
1661 	fb_var_to_videomode(&mode, &fb_info->var);
1662 	fb_add_videomode(&mode, &fb_info->modelist);
1663 	registered_fb[i] = fb_info;
1664 
1665 #ifdef CONFIG_GUMSTIX_AM200EPD
1666 	{
1667 		struct fb_event event;
1668 		event.info = fb_info;
1669 		fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1670 	}
1671 #endif
1672 
1673 	if (!lockless_register_fb)
1674 		console_lock();
1675 	else
1676 		atomic_inc(&ignore_console_lock_warning);
1677 	lock_fb_info(fb_info);
1678 	ret = fbcon_fb_registered(fb_info);
1679 	unlock_fb_info(fb_info);
1680 
1681 	if (!lockless_register_fb)
1682 		console_unlock();
1683 	else
1684 		atomic_dec(&ignore_console_lock_warning);
1685 	return ret;
1686 }
1687 
1688 static void unbind_console(struct fb_info *fb_info)
1689 {
1690 	int i = fb_info->node;
1691 
1692 	if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1693 		return;
1694 
1695 	console_lock();
1696 	lock_fb_info(fb_info);
1697 	fbcon_fb_unbind(fb_info);
1698 	unlock_fb_info(fb_info);
1699 	console_unlock();
1700 }
1701 
1702 static void unlink_framebuffer(struct fb_info *fb_info)
1703 {
1704 	int i;
1705 
1706 	i = fb_info->node;
1707 	if (WARN_ON(i < 0 || i >= FB_MAX || registered_fb[i] != fb_info))
1708 		return;
1709 
1710 	if (!fb_info->dev)
1711 		return;
1712 
1713 	device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1714 
1715 	pm_vt_switch_unregister(fb_info->dev);
1716 
1717 	unbind_console(fb_info);
1718 
1719 	fb_info->dev = NULL;
1720 }
1721 
1722 static void do_unregister_framebuffer(struct fb_info *fb_info)
1723 {
1724 	unlink_framebuffer(fb_info);
1725 	if (fb_info->pixmap.addr &&
1726 	    (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT)) {
1727 		kfree(fb_info->pixmap.addr);
1728 		fb_info->pixmap.addr = NULL;
1729 	}
1730 
1731 	fb_destroy_modelist(&fb_info->modelist);
1732 	registered_fb[fb_info->node] = NULL;
1733 	num_registered_fb--;
1734 	fb_cleanup_device(fb_info);
1735 #ifdef CONFIG_GUMSTIX_AM200EPD
1736 	{
1737 		struct fb_event event;
1738 		event.info = fb_info;
1739 		fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1740 	}
1741 #endif
1742 	console_lock();
1743 	fbcon_fb_unregistered(fb_info);
1744 	console_unlock();
1745 
1746 	/* this may free fb info */
1747 	put_fb_info(fb_info);
1748 }
1749 
1750 /**
1751  * remove_conflicting_framebuffers - remove firmware-configured framebuffers
1752  * @a: memory range, users of which are to be removed
1753  * @name: requesting driver name
1754  * @primary: also kick vga16fb if present
1755  *
1756  * This function removes framebuffer devices (initialized by firmware/bootloader)
1757  * which use memory range described by @a. If @a is NULL all such devices are
1758  * removed.
1759  */
1760 int remove_conflicting_framebuffers(struct apertures_struct *a,
1761 				    const char *name, bool primary)
1762 {
1763 	bool do_free = false;
1764 
1765 	if (!a) {
1766 		a = alloc_apertures(1);
1767 		if (!a)
1768 			return -ENOMEM;
1769 
1770 		a->ranges[0].base = 0;
1771 		a->ranges[0].size = ~0;
1772 		do_free = true;
1773 	}
1774 
1775 	mutex_lock(&registration_lock);
1776 	do_remove_conflicting_framebuffers(a, name, primary);
1777 	mutex_unlock(&registration_lock);
1778 
1779 	if (do_free)
1780 		kfree(a);
1781 
1782 	return 0;
1783 }
1784 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1785 
1786 /**
1787  * is_firmware_framebuffer - detect if firmware-configured framebuffer matches
1788  * @a: memory range, users of which are to be checked
1789  *
1790  * This function checks framebuffer devices (initialized by firmware/bootloader)
1791  * which use memory range described by @a. If @a matchesm the function returns
1792  * true, otherwise false.
1793  */
1794 bool is_firmware_framebuffer(struct apertures_struct *a)
1795 {
1796 	bool do_free = false;
1797 	bool found = false;
1798 	int i;
1799 
1800 	if (!a) {
1801 		a = alloc_apertures(1);
1802 		if (!a)
1803 			return false;
1804 
1805 		a->ranges[0].base = 0;
1806 		a->ranges[0].size = ~0;
1807 		do_free = true;
1808 	}
1809 
1810 	mutex_lock(&registration_lock);
1811 	/* check all firmware fbs and kick off if the base addr overlaps */
1812 	for_each_registered_fb(i) {
1813 		struct apertures_struct *gen_aper;
1814 
1815 		if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1816 			continue;
1817 
1818 		gen_aper = registered_fb[i]->apertures;
1819 		if (fb_do_apertures_overlap(gen_aper, a)) {
1820 			found = true;
1821 			break;
1822 		}
1823 	}
1824 	mutex_unlock(&registration_lock);
1825 
1826 	if (do_free)
1827 		kfree(a);
1828 
1829 	return found;
1830 }
1831 EXPORT_SYMBOL(is_firmware_framebuffer);
1832 
1833 /**
1834  * remove_conflicting_pci_framebuffers - remove firmware-configured framebuffers for PCI devices
1835  * @pdev: PCI device
1836  * @name: requesting driver name
1837  *
1838  * This function removes framebuffer devices (eg. initialized by firmware)
1839  * using memory range configured for any of @pdev's memory bars.
1840  *
1841  * The function assumes that PCI device with shadowed ROM drives a primary
1842  * display and so kicks out vga16fb.
1843  */
1844 int remove_conflicting_pci_framebuffers(struct pci_dev *pdev, const char *name)
1845 {
1846 	struct apertures_struct *ap;
1847 	bool primary = false;
1848 	int err, idx, bar;
1849 
1850 	for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1851 		if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1852 			continue;
1853 		idx++;
1854 	}
1855 
1856 	ap = alloc_apertures(idx);
1857 	if (!ap)
1858 		return -ENOMEM;
1859 
1860 	for (idx = 0, bar = 0; bar < PCI_STD_NUM_BARS; bar++) {
1861 		if (!(pci_resource_flags(pdev, bar) & IORESOURCE_MEM))
1862 			continue;
1863 		ap->ranges[idx].base = pci_resource_start(pdev, bar);
1864 		ap->ranges[idx].size = pci_resource_len(pdev, bar);
1865 		pci_dbg(pdev, "%s: bar %d: 0x%lx -> 0x%lx\n", __func__, bar,
1866 			(unsigned long)pci_resource_start(pdev, bar),
1867 			(unsigned long)pci_resource_end(pdev, bar));
1868 		idx++;
1869 	}
1870 
1871 #ifdef CONFIG_X86
1872 	primary = pdev->resource[PCI_ROM_RESOURCE].flags &
1873 					IORESOURCE_ROM_SHADOW;
1874 #endif
1875 	err = remove_conflicting_framebuffers(ap, name, primary);
1876 	kfree(ap);
1877 	return err;
1878 }
1879 EXPORT_SYMBOL(remove_conflicting_pci_framebuffers);
1880 
1881 /**
1882  *	register_framebuffer - registers a frame buffer device
1883  *	@fb_info: frame buffer info structure
1884  *
1885  *	Registers a frame buffer device @fb_info.
1886  *
1887  *	Returns negative errno on error, or zero for success.
1888  *
1889  */
1890 int
1891 register_framebuffer(struct fb_info *fb_info)
1892 {
1893 	int ret;
1894 
1895 	mutex_lock(&registration_lock);
1896 	ret = do_register_framebuffer(fb_info);
1897 	mutex_unlock(&registration_lock);
1898 
1899 	return ret;
1900 }
1901 EXPORT_SYMBOL(register_framebuffer);
1902 
1903 /**
1904  *	unregister_framebuffer - releases a frame buffer device
1905  *	@fb_info: frame buffer info structure
1906  *
1907  *	Unregisters a frame buffer device @fb_info.
1908  *
1909  *	Returns negative errno on error, or zero for success.
1910  *
1911  *      This function will also notify the framebuffer console
1912  *      to release the driver.
1913  *
1914  *      This is meant to be called within a driver's module_exit()
1915  *      function. If this is called outside module_exit(), ensure
1916  *      that the driver implements fb_open() and fb_release() to
1917  *      check that no processes are using the device.
1918  */
1919 void
1920 unregister_framebuffer(struct fb_info *fb_info)
1921 {
1922 	bool forced_out = fb_info->forced_out;
1923 
1924 	if (!forced_out)
1925 		mutex_lock(&registration_lock);
1926 	do_unregister_framebuffer(fb_info);
1927 	if (!forced_out)
1928 		mutex_unlock(&registration_lock);
1929 }
1930 EXPORT_SYMBOL(unregister_framebuffer);
1931 
1932 /**
1933  *	fb_set_suspend - low level driver signals suspend
1934  *	@info: framebuffer affected
1935  *	@state: 0 = resuming, !=0 = suspending
1936  *
1937  *	This is meant to be used by low level drivers to
1938  * 	signal suspend/resume to the core & clients.
1939  *	It must be called with the console semaphore held
1940  */
1941 void fb_set_suspend(struct fb_info *info, int state)
1942 {
1943 	WARN_CONSOLE_UNLOCKED();
1944 
1945 	if (state) {
1946 		fbcon_suspended(info);
1947 		info->state = FBINFO_STATE_SUSPENDED;
1948 	} else {
1949 		info->state = FBINFO_STATE_RUNNING;
1950 		fbcon_resumed(info);
1951 	}
1952 }
1953 EXPORT_SYMBOL(fb_set_suspend);
1954 
1955 /**
1956  *	fbmem_init - init frame buffer subsystem
1957  *
1958  *	Initialize the frame buffer subsystem.
1959  *
1960  *	NOTE: This function is _only_ to be called by drivers/char/mem.c.
1961  *
1962  */
1963 
1964 static int __init
1965 fbmem_init(void)
1966 {
1967 	int ret;
1968 
1969 	if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
1970 		return -ENOMEM;
1971 
1972 	ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1973 	if (ret) {
1974 		printk("unable to get major %d for fb devs\n", FB_MAJOR);
1975 		goto err_chrdev;
1976 	}
1977 
1978 	fb_class = class_create(THIS_MODULE, "graphics");
1979 	if (IS_ERR(fb_class)) {
1980 		ret = PTR_ERR(fb_class);
1981 		pr_warn("Unable to create fb class; errno = %d\n", ret);
1982 		fb_class = NULL;
1983 		goto err_class;
1984 	}
1985 
1986 	fb_console_init();
1987 
1988 	return 0;
1989 
1990 err_class:
1991 	unregister_chrdev(FB_MAJOR, "fb");
1992 err_chrdev:
1993 	remove_proc_entry("fb", NULL);
1994 	return ret;
1995 }
1996 
1997 #ifdef MODULE
1998 module_init(fbmem_init);
1999 static void __exit
2000 fbmem_exit(void)
2001 {
2002 	fb_console_exit();
2003 
2004 	remove_proc_entry("fb", NULL);
2005 	class_destroy(fb_class);
2006 	unregister_chrdev(FB_MAJOR, "fb");
2007 }
2008 
2009 module_exit(fbmem_exit);
2010 MODULE_LICENSE("GPL");
2011 MODULE_DESCRIPTION("Framebuffer base");
2012 #else
2013 subsys_initcall(fbmem_init);
2014 #endif
2015 
2016 int fb_new_modelist(struct fb_info *info)
2017 {
2018 	struct fb_var_screeninfo var = info->var;
2019 	struct list_head *pos, *n;
2020 	struct fb_modelist *modelist;
2021 	struct fb_videomode *m, mode;
2022 	int err;
2023 
2024 	list_for_each_safe(pos, n, &info->modelist) {
2025 		modelist = list_entry(pos, struct fb_modelist, list);
2026 		m = &modelist->mode;
2027 		fb_videomode_to_var(&var, m);
2028 		var.activate = FB_ACTIVATE_TEST;
2029 		err = fb_set_var(info, &var);
2030 		fb_var_to_videomode(&mode, &var);
2031 		if (err || !fb_mode_is_equal(m, &mode)) {
2032 			list_del(pos);
2033 			kfree(pos);
2034 		}
2035 	}
2036 
2037 	if (list_empty(&info->modelist))
2038 		return 1;
2039 
2040 	fbcon_new_modelist(info);
2041 
2042 	return 0;
2043 }
2044 
2045 MODULE_LICENSE("GPL");
2046