xref: /openbmc/linux/drivers/video/fbdev/core/fbmem.c (revision 6aa7de05)
1 /*
2  *  linux/drivers/video/fbmem.c
3  *
4  *  Copyright (C) 1994 Martin Schaller
5  *
6  *	2001 - Documented with DocBook
7  *	- Brad Douglas <brad@neruo.com>
8  *
9  * This file is subject to the terms and conditions of the GNU General Public
10  * License.  See the file COPYING in the main directory of this archive
11  * for more details.
12  */
13 
14 #include <linux/module.h>
15 
16 #include <linux/compat.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/major.h>
21 #include <linux/slab.h>
22 #include <linux/mm.h>
23 #include <linux/mman.h>
24 #include <linux/vt.h>
25 #include <linux/init.h>
26 #include <linux/linux_logo.h>
27 #include <linux/proc_fs.h>
28 #include <linux/seq_file.h>
29 #include <linux/console.h>
30 #include <linux/kmod.h>
31 #include <linux/err.h>
32 #include <linux/device.h>
33 #include <linux/efi.h>
34 #include <linux/fb.h>
35 #include <linux/fbcon.h>
36 #include <linux/mem_encrypt.h>
37 
38 #include <asm/fb.h>
39 
40 
41     /*
42      *  Frame buffer device initialization and setup routines
43      */
44 
45 #define FBPIXMAPSIZE	(1024 * 8)
46 
47 static DEFINE_MUTEX(registration_lock);
48 
49 struct fb_info *registered_fb[FB_MAX] __read_mostly;
50 EXPORT_SYMBOL(registered_fb);
51 
52 int num_registered_fb __read_mostly;
53 EXPORT_SYMBOL(num_registered_fb);
54 
55 static struct fb_info *get_fb_info(unsigned int idx)
56 {
57 	struct fb_info *fb_info;
58 
59 	if (idx >= FB_MAX)
60 		return ERR_PTR(-ENODEV);
61 
62 	mutex_lock(&registration_lock);
63 	fb_info = registered_fb[idx];
64 	if (fb_info)
65 		atomic_inc(&fb_info->count);
66 	mutex_unlock(&registration_lock);
67 
68 	return fb_info;
69 }
70 
71 static void put_fb_info(struct fb_info *fb_info)
72 {
73 	if (!atomic_dec_and_test(&fb_info->count))
74 		return;
75 	if (fb_info->fbops->fb_destroy)
76 		fb_info->fbops->fb_destroy(fb_info);
77 }
78 
79 int lock_fb_info(struct fb_info *info)
80 {
81 	mutex_lock(&info->lock);
82 	if (!info->fbops) {
83 		mutex_unlock(&info->lock);
84 		return 0;
85 	}
86 	return 1;
87 }
88 EXPORT_SYMBOL(lock_fb_info);
89 
90 /*
91  * Helpers
92  */
93 
94 int fb_get_color_depth(struct fb_var_screeninfo *var,
95 		       struct fb_fix_screeninfo *fix)
96 {
97 	int depth = 0;
98 
99 	if (fix->visual == FB_VISUAL_MONO01 ||
100 	    fix->visual == FB_VISUAL_MONO10)
101 		depth = 1;
102 	else {
103 		if (var->green.length == var->blue.length &&
104 		    var->green.length == var->red.length &&
105 		    var->green.offset == var->blue.offset &&
106 		    var->green.offset == var->red.offset)
107 			depth = var->green.length;
108 		else
109 			depth = var->green.length + var->red.length +
110 				var->blue.length;
111 	}
112 
113 	return depth;
114 }
115 EXPORT_SYMBOL(fb_get_color_depth);
116 
117 /*
118  * Data padding functions.
119  */
120 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
121 {
122 	__fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
123 }
124 EXPORT_SYMBOL(fb_pad_aligned_buffer);
125 
126 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
127 				u32 shift_high, u32 shift_low, u32 mod)
128 {
129 	u8 mask = (u8) (0xfff << shift_high), tmp;
130 	int i, j;
131 
132 	for (i = height; i--; ) {
133 		for (j = 0; j < idx; j++) {
134 			tmp = dst[j];
135 			tmp &= mask;
136 			tmp |= *src >> shift_low;
137 			dst[j] = tmp;
138 			tmp = *src << shift_high;
139 			dst[j+1] = tmp;
140 			src++;
141 		}
142 		tmp = dst[idx];
143 		tmp &= mask;
144 		tmp |= *src >> shift_low;
145 		dst[idx] = tmp;
146 		if (shift_high < mod) {
147 			tmp = *src << shift_high;
148 			dst[idx+1] = tmp;
149 		}
150 		src++;
151 		dst += d_pitch;
152 	}
153 }
154 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
155 
156 /*
157  * we need to lock this section since fb_cursor
158  * may use fb_imageblit()
159  */
160 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
161 {
162 	u32 align = buf->buf_align - 1, offset;
163 	char *addr = buf->addr;
164 
165 	/* If IO mapped, we need to sync before access, no sharing of
166 	 * the pixmap is done
167 	 */
168 	if (buf->flags & FB_PIXMAP_IO) {
169 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
170 			info->fbops->fb_sync(info);
171 		return addr;
172 	}
173 
174 	/* See if we fit in the remaining pixmap space */
175 	offset = buf->offset + align;
176 	offset &= ~align;
177 	if (offset + size > buf->size) {
178 		/* We do not fit. In order to be able to re-use the buffer,
179 		 * we must ensure no asynchronous DMA'ing or whatever operation
180 		 * is in progress, we sync for that.
181 		 */
182 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
183 			info->fbops->fb_sync(info);
184 		offset = 0;
185 	}
186 	buf->offset = offset + size;
187 	addr += offset;
188 
189 	return addr;
190 }
191 EXPORT_SYMBOL(fb_get_buffer_offset);
192 
193 #ifdef CONFIG_LOGO
194 
195 static inline unsigned safe_shift(unsigned d, int n)
196 {
197 	return n < 0 ? d >> -n : d << n;
198 }
199 
200 static void fb_set_logocmap(struct fb_info *info,
201 				   const struct linux_logo *logo)
202 {
203 	struct fb_cmap palette_cmap;
204 	u16 palette_green[16];
205 	u16 palette_blue[16];
206 	u16 palette_red[16];
207 	int i, j, n;
208 	const unsigned char *clut = logo->clut;
209 
210 	palette_cmap.start = 0;
211 	palette_cmap.len = 16;
212 	palette_cmap.red = palette_red;
213 	palette_cmap.green = palette_green;
214 	palette_cmap.blue = palette_blue;
215 	palette_cmap.transp = NULL;
216 
217 	for (i = 0; i < logo->clutsize; i += n) {
218 		n = logo->clutsize - i;
219 		/* palette_cmap provides space for only 16 colors at once */
220 		if (n > 16)
221 			n = 16;
222 		palette_cmap.start = 32 + i;
223 		palette_cmap.len = n;
224 		for (j = 0; j < n; ++j) {
225 			palette_cmap.red[j] = clut[0] << 8 | clut[0];
226 			palette_cmap.green[j] = clut[1] << 8 | clut[1];
227 			palette_cmap.blue[j] = clut[2] << 8 | clut[2];
228 			clut += 3;
229 		}
230 		fb_set_cmap(&palette_cmap, info);
231 	}
232 }
233 
234 static void  fb_set_logo_truepalette(struct fb_info *info,
235 					    const struct linux_logo *logo,
236 					    u32 *palette)
237 {
238 	static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
239 	unsigned char redmask, greenmask, bluemask;
240 	int redshift, greenshift, blueshift;
241 	int i;
242 	const unsigned char *clut = logo->clut;
243 
244 	/*
245 	 * We have to create a temporary palette since console palette is only
246 	 * 16 colors long.
247 	 */
248 	/* Bug: Doesn't obey msb_right ... (who needs that?) */
249 	redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
250 	greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
251 	bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
252 	redshift   = info->var.red.offset   - (8 - info->var.red.length);
253 	greenshift = info->var.green.offset - (8 - info->var.green.length);
254 	blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
255 
256 	for ( i = 0; i < logo->clutsize; i++) {
257 		palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
258 				 safe_shift((clut[1] & greenmask), greenshift) |
259 				 safe_shift((clut[2] & bluemask), blueshift));
260 		clut += 3;
261 	}
262 }
263 
264 static void fb_set_logo_directpalette(struct fb_info *info,
265 					     const struct linux_logo *logo,
266 					     u32 *palette)
267 {
268 	int redshift, greenshift, blueshift;
269 	int i;
270 
271 	redshift = info->var.red.offset;
272 	greenshift = info->var.green.offset;
273 	blueshift = info->var.blue.offset;
274 
275 	for (i = 32; i < 32 + logo->clutsize; i++)
276 		palette[i] = i << redshift | i << greenshift | i << blueshift;
277 }
278 
279 static void fb_set_logo(struct fb_info *info,
280 			       const struct linux_logo *logo, u8 *dst,
281 			       int depth)
282 {
283 	int i, j, k;
284 	const u8 *src = logo->data;
285 	u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
286 	u8 fg = 1, d;
287 
288 	switch (fb_get_color_depth(&info->var, &info->fix)) {
289 	case 1:
290 		fg = 1;
291 		break;
292 	case 2:
293 		fg = 3;
294 		break;
295 	default:
296 		fg = 7;
297 		break;
298 	}
299 
300 	if (info->fix.visual == FB_VISUAL_MONO01 ||
301 	    info->fix.visual == FB_VISUAL_MONO10)
302 		fg = ~((u8) (0xfff << info->var.green.length));
303 
304 	switch (depth) {
305 	case 4:
306 		for (i = 0; i < logo->height; i++)
307 			for (j = 0; j < logo->width; src++) {
308 				*dst++ = *src >> 4;
309 				j++;
310 				if (j < logo->width) {
311 					*dst++ = *src & 0x0f;
312 					j++;
313 				}
314 			}
315 		break;
316 	case 1:
317 		for (i = 0; i < logo->height; i++) {
318 			for (j = 0; j < logo->width; src++) {
319 				d = *src ^ xor;
320 				for (k = 7; k >= 0 && j < logo->width; k--) {
321 					*dst++ = ((d >> k) & 1) ? fg : 0;
322 					j++;
323 				}
324 			}
325 		}
326 		break;
327 	}
328 }
329 
330 /*
331  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
332  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
333  * the visual format and color depth of the framebuffer, the DAC, the
334  * pseudo_palette, and the logo data will be adjusted accordingly.
335  *
336  * Case 1 - linux_logo_clut224:
337  * Color exceeds the number of console colors (16), thus we set the hardware DAC
338  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
339  *
340  * For visuals that require color info from the pseudo_palette, we also construct
341  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
342  * will be set.
343  *
344  * Case 2 - linux_logo_vga16:
345  * The number of colors just matches the console colors, thus there is no need
346  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
347  * each byte contains color information for two pixels (upper and lower nibble).
348  * To be consistent with fb_imageblit() usage, we therefore separate the two
349  * nibbles into separate bytes. The "depth" flag will be set to 4.
350  *
351  * Case 3 - linux_logo_mono:
352  * This is similar with Case 2.  Each byte contains information for 8 pixels.
353  * We isolate each bit and expand each into a byte. The "depth" flag will
354  * be set to 1.
355  */
356 static struct logo_data {
357 	int depth;
358 	int needs_directpalette;
359 	int needs_truepalette;
360 	int needs_cmapreset;
361 	const struct linux_logo *logo;
362 } fb_logo __read_mostly;
363 
364 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
365 {
366 	u32 size = width * height, i;
367 
368 	out += size - 1;
369 
370 	for (i = size; i--; )
371 		*out-- = *in++;
372 }
373 
374 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
375 {
376 	int i, j, h = height - 1;
377 
378 	for (i = 0; i < height; i++)
379 		for (j = 0; j < width; j++)
380 				out[height * j + h - i] = *in++;
381 }
382 
383 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
384 {
385 	int i, j, w = width - 1;
386 
387 	for (i = 0; i < height; i++)
388 		for (j = 0; j < width; j++)
389 			out[height * (w - j) + i] = *in++;
390 }
391 
392 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
393 			   struct fb_image *image, int rotate)
394 {
395 	u32 tmp;
396 
397 	if (rotate == FB_ROTATE_UD) {
398 		fb_rotate_logo_ud(image->data, dst, image->width,
399 				  image->height);
400 		image->dx = info->var.xres - image->width - image->dx;
401 		image->dy = info->var.yres - image->height - image->dy;
402 	} else if (rotate == FB_ROTATE_CW) {
403 		fb_rotate_logo_cw(image->data, dst, image->width,
404 				  image->height);
405 		tmp = image->width;
406 		image->width = image->height;
407 		image->height = tmp;
408 		tmp = image->dy;
409 		image->dy = image->dx;
410 		image->dx = info->var.xres - image->width - tmp;
411 	} else if (rotate == FB_ROTATE_CCW) {
412 		fb_rotate_logo_ccw(image->data, dst, image->width,
413 				   image->height);
414 		tmp = image->width;
415 		image->width = image->height;
416 		image->height = tmp;
417 		tmp = image->dx;
418 		image->dx = image->dy;
419 		image->dy = info->var.yres - image->height - tmp;
420 	}
421 
422 	image->data = dst;
423 }
424 
425 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
426 			    int rotate, unsigned int num)
427 {
428 	unsigned int x;
429 
430 	if (rotate == FB_ROTATE_UR) {
431 		for (x = 0;
432 		     x < num && image->dx + image->width <= info->var.xres;
433 		     x++) {
434 			info->fbops->fb_imageblit(info, image);
435 			image->dx += image->width + 8;
436 		}
437 	} else if (rotate == FB_ROTATE_UD) {
438 		for (x = 0; x < num; x++) {
439 			info->fbops->fb_imageblit(info, image);
440 			image->dx -= image->width + 8;
441 		}
442 	} else if (rotate == FB_ROTATE_CW) {
443 		for (x = 0;
444 		     x < num && image->dy + image->height <= info->var.yres;
445 		     x++) {
446 			info->fbops->fb_imageblit(info, image);
447 			image->dy += image->height + 8;
448 		}
449 	} else if (rotate == FB_ROTATE_CCW) {
450 		for (x = 0; x < num; x++) {
451 			info->fbops->fb_imageblit(info, image);
452 			image->dy -= image->height + 8;
453 		}
454 	}
455 }
456 
457 static int fb_show_logo_line(struct fb_info *info, int rotate,
458 			     const struct linux_logo *logo, int y,
459 			     unsigned int n)
460 {
461 	u32 *palette = NULL, *saved_pseudo_palette = NULL;
462 	unsigned char *logo_new = NULL, *logo_rotate = NULL;
463 	struct fb_image image;
464 
465 	/* Return if the frame buffer is not mapped or suspended */
466 	if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
467 	    info->fbops->owner)
468 		return 0;
469 
470 	image.depth = 8;
471 	image.data = logo->data;
472 
473 	if (fb_logo.needs_cmapreset)
474 		fb_set_logocmap(info, logo);
475 
476 	if (fb_logo.needs_truepalette ||
477 	    fb_logo.needs_directpalette) {
478 		palette = kmalloc(256 * 4, GFP_KERNEL);
479 		if (palette == NULL)
480 			return 0;
481 
482 		if (fb_logo.needs_truepalette)
483 			fb_set_logo_truepalette(info, logo, palette);
484 		else
485 			fb_set_logo_directpalette(info, logo, palette);
486 
487 		saved_pseudo_palette = info->pseudo_palette;
488 		info->pseudo_palette = palette;
489 	}
490 
491 	if (fb_logo.depth <= 4) {
492 		logo_new = kmalloc(logo->width * logo->height, GFP_KERNEL);
493 		if (logo_new == NULL) {
494 			kfree(palette);
495 			if (saved_pseudo_palette)
496 				info->pseudo_palette = saved_pseudo_palette;
497 			return 0;
498 		}
499 		image.data = logo_new;
500 		fb_set_logo(info, logo, logo_new, fb_logo.depth);
501 	}
502 
503 	image.dx = 0;
504 	image.dy = y;
505 	image.width = logo->width;
506 	image.height = logo->height;
507 
508 	if (rotate) {
509 		logo_rotate = kmalloc(logo->width *
510 				      logo->height, GFP_KERNEL);
511 		if (logo_rotate)
512 			fb_rotate_logo(info, logo_rotate, &image, rotate);
513 	}
514 
515 	fb_do_show_logo(info, &image, rotate, n);
516 
517 	kfree(palette);
518 	if (saved_pseudo_palette != NULL)
519 		info->pseudo_palette = saved_pseudo_palette;
520 	kfree(logo_new);
521 	kfree(logo_rotate);
522 	return logo->height;
523 }
524 
525 
526 #ifdef CONFIG_FB_LOGO_EXTRA
527 
528 #define FB_LOGO_EX_NUM_MAX 10
529 static struct logo_data_extra {
530 	const struct linux_logo *logo;
531 	unsigned int n;
532 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
533 static unsigned int fb_logo_ex_num;
534 
535 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
536 {
537 	if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
538 		return;
539 
540 	fb_logo_ex[fb_logo_ex_num].logo = logo;
541 	fb_logo_ex[fb_logo_ex_num].n = n;
542 	fb_logo_ex_num++;
543 }
544 
545 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
546 				  unsigned int yres)
547 {
548 	unsigned int i;
549 
550 	/* FIXME: logo_ex supports only truecolor fb. */
551 	if (info->fix.visual != FB_VISUAL_TRUECOLOR)
552 		fb_logo_ex_num = 0;
553 
554 	for (i = 0; i < fb_logo_ex_num; i++) {
555 		if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
556 			fb_logo_ex[i].logo = NULL;
557 			continue;
558 		}
559 		height += fb_logo_ex[i].logo->height;
560 		if (height > yres) {
561 			height -= fb_logo_ex[i].logo->height;
562 			fb_logo_ex_num = i;
563 			break;
564 		}
565 	}
566 	return height;
567 }
568 
569 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
570 {
571 	unsigned int i;
572 
573 	for (i = 0; i < fb_logo_ex_num; i++)
574 		y += fb_show_logo_line(info, rotate,
575 				       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
576 
577 	return y;
578 }
579 
580 #else /* !CONFIG_FB_LOGO_EXTRA */
581 
582 static inline int fb_prepare_extra_logos(struct fb_info *info,
583 					 unsigned int height,
584 					 unsigned int yres)
585 {
586 	return height;
587 }
588 
589 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
590 {
591 	return y;
592 }
593 
594 #endif /* CONFIG_FB_LOGO_EXTRA */
595 
596 
597 int fb_prepare_logo(struct fb_info *info, int rotate)
598 {
599 	int depth = fb_get_color_depth(&info->var, &info->fix);
600 	unsigned int yres;
601 
602 	memset(&fb_logo, 0, sizeof(struct logo_data));
603 
604 	if (info->flags & FBINFO_MISC_TILEBLITTING ||
605 	    info->fbops->owner)
606 		return 0;
607 
608 	if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
609 		depth = info->var.blue.length;
610 		if (info->var.red.length < depth)
611 			depth = info->var.red.length;
612 		if (info->var.green.length < depth)
613 			depth = info->var.green.length;
614 	}
615 
616 	if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
617 		/* assume console colormap */
618 		depth = 4;
619 	}
620 
621 	/* Return if no suitable logo was found */
622 	fb_logo.logo = fb_find_logo(depth);
623 
624 	if (!fb_logo.logo) {
625 		return 0;
626 	}
627 
628 	if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
629 		yres = info->var.yres;
630 	else
631 		yres = info->var.xres;
632 
633 	if (fb_logo.logo->height > yres) {
634 		fb_logo.logo = NULL;
635 		return 0;
636 	}
637 
638 	/* What depth we asked for might be different from what we get */
639 	if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
640 		fb_logo.depth = 8;
641 	else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
642 		fb_logo.depth = 4;
643 	else
644 		fb_logo.depth = 1;
645 
646 
647  	if (fb_logo.depth > 4 && depth > 4) {
648  		switch (info->fix.visual) {
649  		case FB_VISUAL_TRUECOLOR:
650  			fb_logo.needs_truepalette = 1;
651  			break;
652  		case FB_VISUAL_DIRECTCOLOR:
653  			fb_logo.needs_directpalette = 1;
654  			fb_logo.needs_cmapreset = 1;
655  			break;
656  		case FB_VISUAL_PSEUDOCOLOR:
657  			fb_logo.needs_cmapreset = 1;
658  			break;
659  		}
660  	}
661 
662 	return fb_prepare_extra_logos(info, fb_logo.logo->height, yres);
663 }
664 
665 int fb_show_logo(struct fb_info *info, int rotate)
666 {
667 	int y;
668 
669 	y = fb_show_logo_line(info, rotate, fb_logo.logo, 0,
670 			      num_online_cpus());
671 	y = fb_show_extra_logos(info, y, rotate);
672 
673 	return y;
674 }
675 #else
676 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
677 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
678 #endif /* CONFIG_LOGO */
679 EXPORT_SYMBOL(fb_prepare_logo);
680 EXPORT_SYMBOL(fb_show_logo);
681 
682 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
683 {
684 	mutex_lock(&registration_lock);
685 	return (*pos < FB_MAX) ? pos : NULL;
686 }
687 
688 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
689 {
690 	(*pos)++;
691 	return (*pos < FB_MAX) ? pos : NULL;
692 }
693 
694 static void fb_seq_stop(struct seq_file *m, void *v)
695 {
696 	mutex_unlock(&registration_lock);
697 }
698 
699 static int fb_seq_show(struct seq_file *m, void *v)
700 {
701 	int i = *(loff_t *)v;
702 	struct fb_info *fi = registered_fb[i];
703 
704 	if (fi)
705 		seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
706 	return 0;
707 }
708 
709 static const struct seq_operations proc_fb_seq_ops = {
710 	.start	= fb_seq_start,
711 	.next	= fb_seq_next,
712 	.stop	= fb_seq_stop,
713 	.show	= fb_seq_show,
714 };
715 
716 static int proc_fb_open(struct inode *inode, struct file *file)
717 {
718 	return seq_open(file, &proc_fb_seq_ops);
719 }
720 
721 static const struct file_operations fb_proc_fops = {
722 	.owner		= THIS_MODULE,
723 	.open		= proc_fb_open,
724 	.read		= seq_read,
725 	.llseek		= seq_lseek,
726 	.release	= seq_release,
727 };
728 
729 /*
730  * We hold a reference to the fb_info in file->private_data,
731  * but if the current registered fb has changed, we don't
732  * actually want to use it.
733  *
734  * So look up the fb_info using the inode minor number,
735  * and just verify it against the reference we have.
736  */
737 static struct fb_info *file_fb_info(struct file *file)
738 {
739 	struct inode *inode = file_inode(file);
740 	int fbidx = iminor(inode);
741 	struct fb_info *info = registered_fb[fbidx];
742 
743 	if (info != file->private_data)
744 		info = NULL;
745 	return info;
746 }
747 
748 static ssize_t
749 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
750 {
751 	unsigned long p = *ppos;
752 	struct fb_info *info = file_fb_info(file);
753 	u8 *buffer, *dst;
754 	u8 __iomem *src;
755 	int c, cnt = 0, err = 0;
756 	unsigned long total_size;
757 
758 	if (!info || ! info->screen_base)
759 		return -ENODEV;
760 
761 	if (info->state != FBINFO_STATE_RUNNING)
762 		return -EPERM;
763 
764 	if (info->fbops->fb_read)
765 		return info->fbops->fb_read(info, buf, count, ppos);
766 
767 	total_size = info->screen_size;
768 
769 	if (total_size == 0)
770 		total_size = info->fix.smem_len;
771 
772 	if (p >= total_size)
773 		return 0;
774 
775 	if (count >= total_size)
776 		count = total_size;
777 
778 	if (count + p > total_size)
779 		count = total_size - p;
780 
781 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
782 			 GFP_KERNEL);
783 	if (!buffer)
784 		return -ENOMEM;
785 
786 	src = (u8 __iomem *) (info->screen_base + p);
787 
788 	if (info->fbops->fb_sync)
789 		info->fbops->fb_sync(info);
790 
791 	while (count) {
792 		c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
793 		dst = buffer;
794 		fb_memcpy_fromfb(dst, src, c);
795 		dst += c;
796 		src += c;
797 
798 		if (copy_to_user(buf, buffer, c)) {
799 			err = -EFAULT;
800 			break;
801 		}
802 		*ppos += c;
803 		buf += c;
804 		cnt += c;
805 		count -= c;
806 	}
807 
808 	kfree(buffer);
809 
810 	return (err) ? err : cnt;
811 }
812 
813 static ssize_t
814 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
815 {
816 	unsigned long p = *ppos;
817 	struct fb_info *info = file_fb_info(file);
818 	u8 *buffer, *src;
819 	u8 __iomem *dst;
820 	int c, cnt = 0, err = 0;
821 	unsigned long total_size;
822 
823 	if (!info || !info->screen_base)
824 		return -ENODEV;
825 
826 	if (info->state != FBINFO_STATE_RUNNING)
827 		return -EPERM;
828 
829 	if (info->fbops->fb_write)
830 		return info->fbops->fb_write(info, buf, count, ppos);
831 
832 	total_size = info->screen_size;
833 
834 	if (total_size == 0)
835 		total_size = info->fix.smem_len;
836 
837 	if (p > total_size)
838 		return -EFBIG;
839 
840 	if (count > total_size) {
841 		err = -EFBIG;
842 		count = total_size;
843 	}
844 
845 	if (count + p > total_size) {
846 		if (!err)
847 			err = -ENOSPC;
848 
849 		count = total_size - p;
850 	}
851 
852 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
853 			 GFP_KERNEL);
854 	if (!buffer)
855 		return -ENOMEM;
856 
857 	dst = (u8 __iomem *) (info->screen_base + p);
858 
859 	if (info->fbops->fb_sync)
860 		info->fbops->fb_sync(info);
861 
862 	while (count) {
863 		c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
864 		src = buffer;
865 
866 		if (copy_from_user(src, buf, c)) {
867 			err = -EFAULT;
868 			break;
869 		}
870 
871 		fb_memcpy_tofb(dst, src, c);
872 		dst += c;
873 		src += c;
874 		*ppos += c;
875 		buf += c;
876 		cnt += c;
877 		count -= c;
878 	}
879 
880 	kfree(buffer);
881 
882 	return (cnt) ? cnt : err;
883 }
884 
885 int
886 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
887 {
888 	struct fb_fix_screeninfo *fix = &info->fix;
889 	unsigned int yres = info->var.yres;
890 	int err = 0;
891 
892 	if (var->yoffset > 0) {
893 		if (var->vmode & FB_VMODE_YWRAP) {
894 			if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
895 				err = -EINVAL;
896 			else
897 				yres = 0;
898 		} else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
899 			err = -EINVAL;
900 	}
901 
902 	if (var->xoffset > 0 && (!fix->xpanstep ||
903 				 (var->xoffset % fix->xpanstep)))
904 		err = -EINVAL;
905 
906 	if (err || !info->fbops->fb_pan_display ||
907 	    var->yoffset > info->var.yres_virtual - yres ||
908 	    var->xoffset > info->var.xres_virtual - info->var.xres)
909 		return -EINVAL;
910 
911 	if ((err = info->fbops->fb_pan_display(var, info)))
912 		return err;
913 	info->var.xoffset = var->xoffset;
914 	info->var.yoffset = var->yoffset;
915 	if (var->vmode & FB_VMODE_YWRAP)
916 		info->var.vmode |= FB_VMODE_YWRAP;
917 	else
918 		info->var.vmode &= ~FB_VMODE_YWRAP;
919 	return 0;
920 }
921 EXPORT_SYMBOL(fb_pan_display);
922 
923 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
924 			 u32 activate)
925 {
926 	struct fb_event event;
927 	struct fb_blit_caps caps, fbcaps;
928 	int err = 0;
929 
930 	memset(&caps, 0, sizeof(caps));
931 	memset(&fbcaps, 0, sizeof(fbcaps));
932 	caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
933 	event.info = info;
934 	event.data = &caps;
935 	fb_notifier_call_chain(FB_EVENT_GET_REQ, &event);
936 	info->fbops->fb_get_caps(info, &fbcaps, var);
937 
938 	if (((fbcaps.x ^ caps.x) & caps.x) ||
939 	    ((fbcaps.y ^ caps.y) & caps.y) ||
940 	    (fbcaps.len < caps.len))
941 		err = -EINVAL;
942 
943 	return err;
944 }
945 
946 int
947 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
948 {
949 	int flags = info->flags;
950 	int ret = 0;
951 
952 	if (var->activate & FB_ACTIVATE_INV_MODE) {
953 		struct fb_videomode mode1, mode2;
954 
955 		fb_var_to_videomode(&mode1, var);
956 		fb_var_to_videomode(&mode2, &info->var);
957 		/* make sure we don't delete the videomode of current var */
958 		ret = fb_mode_is_equal(&mode1, &mode2);
959 
960 		if (!ret) {
961 		    struct fb_event event;
962 
963 		    event.info = info;
964 		    event.data = &mode1;
965 		    ret = fb_notifier_call_chain(FB_EVENT_MODE_DELETE, &event);
966 		}
967 
968 		if (!ret)
969 		    fb_delete_videomode(&mode1, &info->modelist);
970 
971 
972 		ret = (ret) ? -EINVAL : 0;
973 		goto done;
974 	}
975 
976 	if ((var->activate & FB_ACTIVATE_FORCE) ||
977 	    memcmp(&info->var, var, sizeof(struct fb_var_screeninfo))) {
978 		u32 activate = var->activate;
979 
980 		/* When using FOURCC mode, make sure the red, green, blue and
981 		 * transp fields are set to 0.
982 		 */
983 		if ((info->fix.capabilities & FB_CAP_FOURCC) &&
984 		    var->grayscale > 1) {
985 			if (var->red.offset     || var->green.offset    ||
986 			    var->blue.offset    || var->transp.offset   ||
987 			    var->red.length     || var->green.length    ||
988 			    var->blue.length    || var->transp.length   ||
989 			    var->red.msb_right  || var->green.msb_right ||
990 			    var->blue.msb_right || var->transp.msb_right)
991 				return -EINVAL;
992 		}
993 
994 		if (!info->fbops->fb_check_var) {
995 			*var = info->var;
996 			goto done;
997 		}
998 
999 		ret = info->fbops->fb_check_var(var, info);
1000 
1001 		if (ret)
1002 			goto done;
1003 
1004 		if ((var->activate & FB_ACTIVATE_MASK) == FB_ACTIVATE_NOW) {
1005 			struct fb_var_screeninfo old_var;
1006 			struct fb_videomode mode;
1007 
1008 			if (info->fbops->fb_get_caps) {
1009 				ret = fb_check_caps(info, var, activate);
1010 
1011 				if (ret)
1012 					goto done;
1013 			}
1014 
1015 			old_var = info->var;
1016 			info->var = *var;
1017 
1018 			if (info->fbops->fb_set_par) {
1019 				ret = info->fbops->fb_set_par(info);
1020 
1021 				if (ret) {
1022 					info->var = old_var;
1023 					printk(KERN_WARNING "detected "
1024 						"fb_set_par error, "
1025 						"error code: %d\n", ret);
1026 					goto done;
1027 				}
1028 			}
1029 
1030 			fb_pan_display(info, &info->var);
1031 			fb_set_cmap(&info->cmap, info);
1032 			fb_var_to_videomode(&mode, &info->var);
1033 
1034 			if (info->modelist.prev && info->modelist.next &&
1035 			    !list_empty(&info->modelist))
1036 				ret = fb_add_videomode(&mode, &info->modelist);
1037 
1038 			if (!ret && (flags & FBINFO_MISC_USEREVENT)) {
1039 				struct fb_event event;
1040 				int evnt = (activate & FB_ACTIVATE_ALL) ?
1041 					FB_EVENT_MODE_CHANGE_ALL :
1042 					FB_EVENT_MODE_CHANGE;
1043 
1044 				info->flags &= ~FBINFO_MISC_USEREVENT;
1045 				event.info = info;
1046 				event.data = &mode;
1047 				fb_notifier_call_chain(evnt, &event);
1048 			}
1049 		}
1050 	}
1051 
1052  done:
1053 	return ret;
1054 }
1055 EXPORT_SYMBOL(fb_set_var);
1056 
1057 int
1058 fb_blank(struct fb_info *info, int blank)
1059 {
1060 	struct fb_event event;
1061 	int ret = -EINVAL, early_ret;
1062 
1063  	if (blank > FB_BLANK_POWERDOWN)
1064  		blank = FB_BLANK_POWERDOWN;
1065 
1066 	event.info = info;
1067 	event.data = &blank;
1068 
1069 	early_ret = fb_notifier_call_chain(FB_EARLY_EVENT_BLANK, &event);
1070 
1071 	if (info->fbops->fb_blank)
1072  		ret = info->fbops->fb_blank(blank, info);
1073 
1074 	if (!ret)
1075 		fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1076 	else {
1077 		/*
1078 		 * if fb_blank is failed then revert effects of
1079 		 * the early blank event.
1080 		 */
1081 		if (!early_ret)
1082 			fb_notifier_call_chain(FB_R_EARLY_EVENT_BLANK, &event);
1083 	}
1084 
1085  	return ret;
1086 }
1087 EXPORT_SYMBOL(fb_blank);
1088 
1089 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1090 			unsigned long arg)
1091 {
1092 	struct fb_ops *fb;
1093 	struct fb_var_screeninfo var;
1094 	struct fb_fix_screeninfo fix;
1095 	struct fb_con2fbmap con2fb;
1096 	struct fb_cmap cmap_from;
1097 	struct fb_cmap_user cmap;
1098 	struct fb_event event;
1099 	void __user *argp = (void __user *)arg;
1100 	long ret = 0;
1101 
1102 	switch (cmd) {
1103 	case FBIOGET_VSCREENINFO:
1104 		if (!lock_fb_info(info))
1105 			return -ENODEV;
1106 		var = info->var;
1107 		unlock_fb_info(info);
1108 
1109 		ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1110 		break;
1111 	case FBIOPUT_VSCREENINFO:
1112 		if (copy_from_user(&var, argp, sizeof(var)))
1113 			return -EFAULT;
1114 		console_lock();
1115 		if (!lock_fb_info(info)) {
1116 			console_unlock();
1117 			return -ENODEV;
1118 		}
1119 		info->flags |= FBINFO_MISC_USEREVENT;
1120 		ret = fb_set_var(info, &var);
1121 		info->flags &= ~FBINFO_MISC_USEREVENT;
1122 		unlock_fb_info(info);
1123 		console_unlock();
1124 		if (!ret && copy_to_user(argp, &var, sizeof(var)))
1125 			ret = -EFAULT;
1126 		break;
1127 	case FBIOGET_FSCREENINFO:
1128 		if (!lock_fb_info(info))
1129 			return -ENODEV;
1130 		fix = info->fix;
1131 		unlock_fb_info(info);
1132 
1133 		ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1134 		break;
1135 	case FBIOPUTCMAP:
1136 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1137 			return -EFAULT;
1138 		ret = fb_set_user_cmap(&cmap, info);
1139 		break;
1140 	case FBIOGETCMAP:
1141 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1142 			return -EFAULT;
1143 		if (!lock_fb_info(info))
1144 			return -ENODEV;
1145 		cmap_from = info->cmap;
1146 		unlock_fb_info(info);
1147 		ret = fb_cmap_to_user(&cmap_from, &cmap);
1148 		break;
1149 	case FBIOPAN_DISPLAY:
1150 		if (copy_from_user(&var, argp, sizeof(var)))
1151 			return -EFAULT;
1152 		console_lock();
1153 		if (!lock_fb_info(info)) {
1154 			console_unlock();
1155 			return -ENODEV;
1156 		}
1157 		ret = fb_pan_display(info, &var);
1158 		unlock_fb_info(info);
1159 		console_unlock();
1160 		if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1161 			return -EFAULT;
1162 		break;
1163 	case FBIO_CURSOR:
1164 		ret = -EINVAL;
1165 		break;
1166 	case FBIOGET_CON2FBMAP:
1167 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1168 			return -EFAULT;
1169 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1170 			return -EINVAL;
1171 		con2fb.framebuffer = -1;
1172 		event.data = &con2fb;
1173 		if (!lock_fb_info(info))
1174 			return -ENODEV;
1175 		event.info = info;
1176 		fb_notifier_call_chain(FB_EVENT_GET_CONSOLE_MAP, &event);
1177 		unlock_fb_info(info);
1178 		ret = copy_to_user(argp, &con2fb, sizeof(con2fb)) ? -EFAULT : 0;
1179 		break;
1180 	case FBIOPUT_CON2FBMAP:
1181 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1182 			return -EFAULT;
1183 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1184 			return -EINVAL;
1185 		if (con2fb.framebuffer >= FB_MAX)
1186 			return -EINVAL;
1187 		if (!registered_fb[con2fb.framebuffer])
1188 			request_module("fb%d", con2fb.framebuffer);
1189 		if (!registered_fb[con2fb.framebuffer]) {
1190 			ret = -EINVAL;
1191 			break;
1192 		}
1193 		event.data = &con2fb;
1194 		console_lock();
1195 		if (!lock_fb_info(info)) {
1196 			console_unlock();
1197 			return -ENODEV;
1198 		}
1199 		event.info = info;
1200 		ret = fb_notifier_call_chain(FB_EVENT_SET_CONSOLE_MAP, &event);
1201 		unlock_fb_info(info);
1202 		console_unlock();
1203 		break;
1204 	case FBIOBLANK:
1205 		console_lock();
1206 		if (!lock_fb_info(info)) {
1207 			console_unlock();
1208 			return -ENODEV;
1209 		}
1210 		info->flags |= FBINFO_MISC_USEREVENT;
1211 		ret = fb_blank(info, arg);
1212 		info->flags &= ~FBINFO_MISC_USEREVENT;
1213 		unlock_fb_info(info);
1214 		console_unlock();
1215 		break;
1216 	default:
1217 		if (!lock_fb_info(info))
1218 			return -ENODEV;
1219 		fb = info->fbops;
1220 		if (fb->fb_ioctl)
1221 			ret = fb->fb_ioctl(info, cmd, arg);
1222 		else
1223 			ret = -ENOTTY;
1224 		unlock_fb_info(info);
1225 	}
1226 	return ret;
1227 }
1228 
1229 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1230 {
1231 	struct fb_info *info = file_fb_info(file);
1232 
1233 	if (!info)
1234 		return -ENODEV;
1235 	return do_fb_ioctl(info, cmd, arg);
1236 }
1237 
1238 #ifdef CONFIG_COMPAT
1239 struct fb_fix_screeninfo32 {
1240 	char			id[16];
1241 	compat_caddr_t		smem_start;
1242 	u32			smem_len;
1243 	u32			type;
1244 	u32			type_aux;
1245 	u32			visual;
1246 	u16			xpanstep;
1247 	u16			ypanstep;
1248 	u16			ywrapstep;
1249 	u32			line_length;
1250 	compat_caddr_t		mmio_start;
1251 	u32			mmio_len;
1252 	u32			accel;
1253 	u16			reserved[3];
1254 };
1255 
1256 struct fb_cmap32 {
1257 	u32			start;
1258 	u32			len;
1259 	compat_caddr_t	red;
1260 	compat_caddr_t	green;
1261 	compat_caddr_t	blue;
1262 	compat_caddr_t	transp;
1263 };
1264 
1265 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1266 			  unsigned long arg)
1267 {
1268 	struct fb_cmap_user __user *cmap;
1269 	struct fb_cmap32 __user *cmap32;
1270 	__u32 data;
1271 	int err;
1272 
1273 	cmap = compat_alloc_user_space(sizeof(*cmap));
1274 	cmap32 = compat_ptr(arg);
1275 
1276 	if (copy_in_user(&cmap->start, &cmap32->start, 2 * sizeof(__u32)))
1277 		return -EFAULT;
1278 
1279 	if (get_user(data, &cmap32->red) ||
1280 	    put_user(compat_ptr(data), &cmap->red) ||
1281 	    get_user(data, &cmap32->green) ||
1282 	    put_user(compat_ptr(data), &cmap->green) ||
1283 	    get_user(data, &cmap32->blue) ||
1284 	    put_user(compat_ptr(data), &cmap->blue) ||
1285 	    get_user(data, &cmap32->transp) ||
1286 	    put_user(compat_ptr(data), &cmap->transp))
1287 		return -EFAULT;
1288 
1289 	err = do_fb_ioctl(info, cmd, (unsigned long) cmap);
1290 
1291 	if (!err) {
1292 		if (copy_in_user(&cmap32->start,
1293 				 &cmap->start,
1294 				 2 * sizeof(__u32)))
1295 			err = -EFAULT;
1296 	}
1297 	return err;
1298 }
1299 
1300 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1301 				  struct fb_fix_screeninfo32 __user *fix32)
1302 {
1303 	__u32 data;
1304 	int err;
1305 
1306 	err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1307 
1308 	data = (__u32) (unsigned long) fix->smem_start;
1309 	err |= put_user(data, &fix32->smem_start);
1310 
1311 	err |= put_user(fix->smem_len, &fix32->smem_len);
1312 	err |= put_user(fix->type, &fix32->type);
1313 	err |= put_user(fix->type_aux, &fix32->type_aux);
1314 	err |= put_user(fix->visual, &fix32->visual);
1315 	err |= put_user(fix->xpanstep, &fix32->xpanstep);
1316 	err |= put_user(fix->ypanstep, &fix32->ypanstep);
1317 	err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1318 	err |= put_user(fix->line_length, &fix32->line_length);
1319 
1320 	data = (__u32) (unsigned long) fix->mmio_start;
1321 	err |= put_user(data, &fix32->mmio_start);
1322 
1323 	err |= put_user(fix->mmio_len, &fix32->mmio_len);
1324 	err |= put_user(fix->accel, &fix32->accel);
1325 	err |= copy_to_user(fix32->reserved, fix->reserved,
1326 			    sizeof(fix->reserved));
1327 
1328 	if (err)
1329 		return -EFAULT;
1330 	return 0;
1331 }
1332 
1333 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1334 			      unsigned long arg)
1335 {
1336 	struct fb_fix_screeninfo fix;
1337 
1338 	if (!lock_fb_info(info))
1339 		return -ENODEV;
1340 	fix = info->fix;
1341 	unlock_fb_info(info);
1342 	return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1343 }
1344 
1345 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1346 			    unsigned long arg)
1347 {
1348 	struct fb_info *info = file_fb_info(file);
1349 	struct fb_ops *fb;
1350 	long ret = -ENOIOCTLCMD;
1351 
1352 	if (!info)
1353 		return -ENODEV;
1354 	fb = info->fbops;
1355 	switch(cmd) {
1356 	case FBIOGET_VSCREENINFO:
1357 	case FBIOPUT_VSCREENINFO:
1358 	case FBIOPAN_DISPLAY:
1359 	case FBIOGET_CON2FBMAP:
1360 	case FBIOPUT_CON2FBMAP:
1361 		arg = (unsigned long) compat_ptr(arg);
1362 	case FBIOBLANK:
1363 		ret = do_fb_ioctl(info, cmd, arg);
1364 		break;
1365 
1366 	case FBIOGET_FSCREENINFO:
1367 		ret = fb_get_fscreeninfo(info, cmd, arg);
1368 		break;
1369 
1370 	case FBIOGETCMAP:
1371 	case FBIOPUTCMAP:
1372 		ret = fb_getput_cmap(info, cmd, arg);
1373 		break;
1374 
1375 	default:
1376 		if (fb->fb_compat_ioctl)
1377 			ret = fb->fb_compat_ioctl(info, cmd, arg);
1378 		break;
1379 	}
1380 	return ret;
1381 }
1382 #endif
1383 
1384 static int
1385 fb_mmap(struct file *file, struct vm_area_struct * vma)
1386 {
1387 	struct fb_info *info = file_fb_info(file);
1388 	struct fb_ops *fb;
1389 	unsigned long mmio_pgoff;
1390 	unsigned long start;
1391 	u32 len;
1392 
1393 	if (!info)
1394 		return -ENODEV;
1395 	fb = info->fbops;
1396 	if (!fb)
1397 		return -ENODEV;
1398 	mutex_lock(&info->mm_lock);
1399 	if (fb->fb_mmap) {
1400 		int res;
1401 
1402 		/*
1403 		 * The framebuffer needs to be accessed decrypted, be sure
1404 		 * SME protection is removed ahead of the call
1405 		 */
1406 		vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1407 		res = fb->fb_mmap(info, vma);
1408 		mutex_unlock(&info->mm_lock);
1409 		return res;
1410 	}
1411 
1412 	/*
1413 	 * Ugh. This can be either the frame buffer mapping, or
1414 	 * if pgoff points past it, the mmio mapping.
1415 	 */
1416 	start = info->fix.smem_start;
1417 	len = info->fix.smem_len;
1418 	mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1419 	if (vma->vm_pgoff >= mmio_pgoff) {
1420 		if (info->var.accel_flags) {
1421 			mutex_unlock(&info->mm_lock);
1422 			return -EINVAL;
1423 		}
1424 
1425 		vma->vm_pgoff -= mmio_pgoff;
1426 		start = info->fix.mmio_start;
1427 		len = info->fix.mmio_len;
1428 	}
1429 	mutex_unlock(&info->mm_lock);
1430 
1431 	vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1432 	/*
1433 	 * The framebuffer needs to be accessed decrypted, be sure
1434 	 * SME protection is removed
1435 	 */
1436 	vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1437 	fb_pgprotect(file, vma, start);
1438 
1439 	return vm_iomap_memory(vma, start, len);
1440 }
1441 
1442 static int
1443 fb_open(struct inode *inode, struct file *file)
1444 __acquires(&info->lock)
1445 __releases(&info->lock)
1446 {
1447 	int fbidx = iminor(inode);
1448 	struct fb_info *info;
1449 	int res = 0;
1450 
1451 	info = get_fb_info(fbidx);
1452 	if (!info) {
1453 		request_module("fb%d", fbidx);
1454 		info = get_fb_info(fbidx);
1455 		if (!info)
1456 			return -ENODEV;
1457 	}
1458 	if (IS_ERR(info))
1459 		return PTR_ERR(info);
1460 
1461 	mutex_lock(&info->lock);
1462 	if (!try_module_get(info->fbops->owner)) {
1463 		res = -ENODEV;
1464 		goto out;
1465 	}
1466 	file->private_data = info;
1467 	if (info->fbops->fb_open) {
1468 		res = info->fbops->fb_open(info,1);
1469 		if (res)
1470 			module_put(info->fbops->owner);
1471 	}
1472 #ifdef CONFIG_FB_DEFERRED_IO
1473 	if (info->fbdefio)
1474 		fb_deferred_io_open(info, inode, file);
1475 #endif
1476 out:
1477 	mutex_unlock(&info->lock);
1478 	if (res)
1479 		put_fb_info(info);
1480 	return res;
1481 }
1482 
1483 static int
1484 fb_release(struct inode *inode, struct file *file)
1485 __acquires(&info->lock)
1486 __releases(&info->lock)
1487 {
1488 	struct fb_info * const info = file->private_data;
1489 
1490 	mutex_lock(&info->lock);
1491 	if (info->fbops->fb_release)
1492 		info->fbops->fb_release(info,1);
1493 	module_put(info->fbops->owner);
1494 	mutex_unlock(&info->lock);
1495 	put_fb_info(info);
1496 	return 0;
1497 }
1498 
1499 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1500 unsigned long get_fb_unmapped_area(struct file *filp,
1501 				   unsigned long addr, unsigned long len,
1502 				   unsigned long pgoff, unsigned long flags)
1503 {
1504 	struct fb_info * const info = filp->private_data;
1505 	unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1506 
1507 	if (pgoff > fb_size || len > fb_size - pgoff)
1508 		return -EINVAL;
1509 
1510 	return (unsigned long)info->screen_base + pgoff;
1511 }
1512 #endif
1513 
1514 static const struct file_operations fb_fops = {
1515 	.owner =	THIS_MODULE,
1516 	.read =		fb_read,
1517 	.write =	fb_write,
1518 	.unlocked_ioctl = fb_ioctl,
1519 #ifdef CONFIG_COMPAT
1520 	.compat_ioctl = fb_compat_ioctl,
1521 #endif
1522 	.mmap =		fb_mmap,
1523 	.open =		fb_open,
1524 	.release =	fb_release,
1525 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1526 	(defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1527 	 !defined(CONFIG_MMU))
1528 	.get_unmapped_area = get_fb_unmapped_area,
1529 #endif
1530 #ifdef CONFIG_FB_DEFERRED_IO
1531 	.fsync =	fb_deferred_io_fsync,
1532 #endif
1533 	.llseek =	default_llseek,
1534 };
1535 
1536 struct class *fb_class;
1537 EXPORT_SYMBOL(fb_class);
1538 
1539 static int fb_check_foreignness(struct fb_info *fi)
1540 {
1541 	const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1542 
1543 	fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1544 
1545 #ifdef __BIG_ENDIAN
1546 	fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1547 #else
1548 	fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1549 #endif /* __BIG_ENDIAN */
1550 
1551 	if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1552 		pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1553 		       "support this framebuffer\n", fi->fix.id);
1554 		return -ENOSYS;
1555 	} else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1556 		pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1557 		       "support this framebuffer\n", fi->fix.id);
1558 		return -ENOSYS;
1559 	}
1560 
1561 	return 0;
1562 }
1563 
1564 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1565 {
1566 	/* is the generic aperture base the same as the HW one */
1567 	if (gen->base == hw->base)
1568 		return true;
1569 	/* is the generic aperture base inside the hw base->hw base+size */
1570 	if (gen->base > hw->base && gen->base < hw->base + hw->size)
1571 		return true;
1572 	return false;
1573 }
1574 
1575 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1576 				    struct apertures_struct *hwa)
1577 {
1578 	int i, j;
1579 	if (!hwa || !gena)
1580 		return false;
1581 
1582 	for (i = 0; i < hwa->count; ++i) {
1583 		struct aperture *h = &hwa->ranges[i];
1584 		for (j = 0; j < gena->count; ++j) {
1585 			struct aperture *g = &gena->ranges[j];
1586 			printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1587 				(unsigned long long)g->base,
1588 				(unsigned long long)g->size,
1589 				(unsigned long long)h->base,
1590 				(unsigned long long)h->size);
1591 			if (apertures_overlap(g, h))
1592 				return true;
1593 		}
1594 	}
1595 
1596 	return false;
1597 }
1598 
1599 static int do_unregister_framebuffer(struct fb_info *fb_info);
1600 
1601 #define VGA_FB_PHYS 0xA0000
1602 static int do_remove_conflicting_framebuffers(struct apertures_struct *a,
1603 					      const char *name, bool primary)
1604 {
1605 	int i, ret;
1606 
1607 	/* check all firmware fbs and kick off if the base addr overlaps */
1608 	for (i = 0 ; i < FB_MAX; i++) {
1609 		struct apertures_struct *gen_aper;
1610 		if (!registered_fb[i])
1611 			continue;
1612 
1613 		if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1614 			continue;
1615 
1616 		gen_aper = registered_fb[i]->apertures;
1617 		if (fb_do_apertures_overlap(gen_aper, a) ||
1618 			(primary && gen_aper && gen_aper->count &&
1619 			 gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1620 
1621 			printk(KERN_INFO "fb: switching to %s from %s\n",
1622 			       name, registered_fb[i]->fix.id);
1623 			ret = do_unregister_framebuffer(registered_fb[i]);
1624 			if (ret)
1625 				return ret;
1626 		}
1627 	}
1628 
1629 	return 0;
1630 }
1631 
1632 static bool lockless_register_fb;
1633 module_param_named_unsafe(lockless_register_fb, lockless_register_fb, bool, 0400);
1634 MODULE_PARM_DESC(lockless_register_fb,
1635 	"Lockless framebuffer registration for debugging [default=off]");
1636 
1637 static int do_register_framebuffer(struct fb_info *fb_info)
1638 {
1639 	int i, ret;
1640 	struct fb_event event;
1641 	struct fb_videomode mode;
1642 
1643 	if (fb_check_foreignness(fb_info))
1644 		return -ENOSYS;
1645 
1646 	ret = do_remove_conflicting_framebuffers(fb_info->apertures,
1647 						 fb_info->fix.id,
1648 						 fb_is_primary_device(fb_info));
1649 	if (ret)
1650 		return ret;
1651 
1652 	if (num_registered_fb == FB_MAX)
1653 		return -ENXIO;
1654 
1655 	num_registered_fb++;
1656 	for (i = 0 ; i < FB_MAX; i++)
1657 		if (!registered_fb[i])
1658 			break;
1659 	fb_info->node = i;
1660 	atomic_set(&fb_info->count, 1);
1661 	mutex_init(&fb_info->lock);
1662 	mutex_init(&fb_info->mm_lock);
1663 
1664 	fb_info->dev = device_create(fb_class, fb_info->device,
1665 				     MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1666 	if (IS_ERR(fb_info->dev)) {
1667 		/* Not fatal */
1668 		printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1669 		fb_info->dev = NULL;
1670 	} else
1671 		fb_init_device(fb_info);
1672 
1673 	if (fb_info->pixmap.addr == NULL) {
1674 		fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1675 		if (fb_info->pixmap.addr) {
1676 			fb_info->pixmap.size = FBPIXMAPSIZE;
1677 			fb_info->pixmap.buf_align = 1;
1678 			fb_info->pixmap.scan_align = 1;
1679 			fb_info->pixmap.access_align = 32;
1680 			fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1681 		}
1682 	}
1683 	fb_info->pixmap.offset = 0;
1684 
1685 	if (!fb_info->pixmap.blit_x)
1686 		fb_info->pixmap.blit_x = ~(u32)0;
1687 
1688 	if (!fb_info->pixmap.blit_y)
1689 		fb_info->pixmap.blit_y = ~(u32)0;
1690 
1691 	if (!fb_info->modelist.prev || !fb_info->modelist.next)
1692 		INIT_LIST_HEAD(&fb_info->modelist);
1693 
1694 	if (fb_info->skip_vt_switch)
1695 		pm_vt_switch_required(fb_info->dev, false);
1696 	else
1697 		pm_vt_switch_required(fb_info->dev, true);
1698 
1699 	fb_var_to_videomode(&mode, &fb_info->var);
1700 	fb_add_videomode(&mode, &fb_info->modelist);
1701 	registered_fb[i] = fb_info;
1702 
1703 	event.info = fb_info;
1704 	if (!lockless_register_fb)
1705 		console_lock();
1706 	if (!lock_fb_info(fb_info)) {
1707 		if (!lockless_register_fb)
1708 			console_unlock();
1709 		return -ENODEV;
1710 	}
1711 
1712 	fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1713 	unlock_fb_info(fb_info);
1714 	if (!lockless_register_fb)
1715 		console_unlock();
1716 	return 0;
1717 }
1718 
1719 static int do_unregister_framebuffer(struct fb_info *fb_info)
1720 {
1721 	struct fb_event event;
1722 	int i, ret = 0;
1723 
1724 	i = fb_info->node;
1725 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1726 		return -EINVAL;
1727 
1728 	console_lock();
1729 	if (!lock_fb_info(fb_info)) {
1730 		console_unlock();
1731 		return -ENODEV;
1732 	}
1733 
1734 	event.info = fb_info;
1735 	ret = fb_notifier_call_chain(FB_EVENT_FB_UNBIND, &event);
1736 	unlock_fb_info(fb_info);
1737 	console_unlock();
1738 
1739 	if (ret)
1740 		return -EINVAL;
1741 
1742 	pm_vt_switch_unregister(fb_info->dev);
1743 
1744 	unlink_framebuffer(fb_info);
1745 	if (fb_info->pixmap.addr &&
1746 	    (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT))
1747 		kfree(fb_info->pixmap.addr);
1748 	fb_destroy_modelist(&fb_info->modelist);
1749 	registered_fb[i] = NULL;
1750 	num_registered_fb--;
1751 	fb_cleanup_device(fb_info);
1752 	event.info = fb_info;
1753 	console_lock();
1754 	fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1755 	console_unlock();
1756 
1757 	/* this may free fb info */
1758 	put_fb_info(fb_info);
1759 	return 0;
1760 }
1761 
1762 int unlink_framebuffer(struct fb_info *fb_info)
1763 {
1764 	int i;
1765 
1766 	i = fb_info->node;
1767 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1768 		return -EINVAL;
1769 
1770 	if (fb_info->dev) {
1771 		device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1772 		fb_info->dev = NULL;
1773 	}
1774 	return 0;
1775 }
1776 EXPORT_SYMBOL(unlink_framebuffer);
1777 
1778 int remove_conflicting_framebuffers(struct apertures_struct *a,
1779 				    const char *name, bool primary)
1780 {
1781 	int ret;
1782 
1783 	mutex_lock(&registration_lock);
1784 	ret = do_remove_conflicting_framebuffers(a, name, primary);
1785 	mutex_unlock(&registration_lock);
1786 
1787 	return ret;
1788 }
1789 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1790 
1791 /**
1792  *	register_framebuffer - registers a frame buffer device
1793  *	@fb_info: frame buffer info structure
1794  *
1795  *	Registers a frame buffer device @fb_info.
1796  *
1797  *	Returns negative errno on error, or zero for success.
1798  *
1799  */
1800 int
1801 register_framebuffer(struct fb_info *fb_info)
1802 {
1803 	int ret;
1804 
1805 	mutex_lock(&registration_lock);
1806 	ret = do_register_framebuffer(fb_info);
1807 	mutex_unlock(&registration_lock);
1808 
1809 	return ret;
1810 }
1811 EXPORT_SYMBOL(register_framebuffer);
1812 
1813 /**
1814  *	unregister_framebuffer - releases a frame buffer device
1815  *	@fb_info: frame buffer info structure
1816  *
1817  *	Unregisters a frame buffer device @fb_info.
1818  *
1819  *	Returns negative errno on error, or zero for success.
1820  *
1821  *      This function will also notify the framebuffer console
1822  *      to release the driver.
1823  *
1824  *      This is meant to be called within a driver's module_exit()
1825  *      function. If this is called outside module_exit(), ensure
1826  *      that the driver implements fb_open() and fb_release() to
1827  *      check that no processes are using the device.
1828  */
1829 int
1830 unregister_framebuffer(struct fb_info *fb_info)
1831 {
1832 	int ret;
1833 
1834 	mutex_lock(&registration_lock);
1835 	ret = do_unregister_framebuffer(fb_info);
1836 	mutex_unlock(&registration_lock);
1837 
1838 	return ret;
1839 }
1840 EXPORT_SYMBOL(unregister_framebuffer);
1841 
1842 /**
1843  *	fb_set_suspend - low level driver signals suspend
1844  *	@info: framebuffer affected
1845  *	@state: 0 = resuming, !=0 = suspending
1846  *
1847  *	This is meant to be used by low level drivers to
1848  * 	signal suspend/resume to the core & clients.
1849  *	It must be called with the console semaphore held
1850  */
1851 void fb_set_suspend(struct fb_info *info, int state)
1852 {
1853 	struct fb_event event;
1854 
1855 	event.info = info;
1856 	if (state) {
1857 		fb_notifier_call_chain(FB_EVENT_SUSPEND, &event);
1858 		info->state = FBINFO_STATE_SUSPENDED;
1859 	} else {
1860 		info->state = FBINFO_STATE_RUNNING;
1861 		fb_notifier_call_chain(FB_EVENT_RESUME, &event);
1862 	}
1863 }
1864 EXPORT_SYMBOL(fb_set_suspend);
1865 
1866 /**
1867  *	fbmem_init - init frame buffer subsystem
1868  *
1869  *	Initialize the frame buffer subsystem.
1870  *
1871  *	NOTE: This function is _only_ to be called by drivers/char/mem.c.
1872  *
1873  */
1874 
1875 static int __init
1876 fbmem_init(void)
1877 {
1878 	int ret;
1879 
1880 	if (!proc_create("fb", 0, NULL, &fb_proc_fops))
1881 		return -ENOMEM;
1882 
1883 	ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1884 	if (ret) {
1885 		printk("unable to get major %d for fb devs\n", FB_MAJOR);
1886 		goto err_chrdev;
1887 	}
1888 
1889 	fb_class = class_create(THIS_MODULE, "graphics");
1890 	if (IS_ERR(fb_class)) {
1891 		ret = PTR_ERR(fb_class);
1892 		pr_warn("Unable to create fb class; errno = %d\n", ret);
1893 		fb_class = NULL;
1894 		goto err_class;
1895 	}
1896 
1897 	fb_console_init();
1898 
1899 	return 0;
1900 
1901 err_class:
1902 	unregister_chrdev(FB_MAJOR, "fb");
1903 err_chrdev:
1904 	remove_proc_entry("fb", NULL);
1905 	return ret;
1906 }
1907 
1908 #ifdef MODULE
1909 module_init(fbmem_init);
1910 static void __exit
1911 fbmem_exit(void)
1912 {
1913 	fb_console_exit();
1914 
1915 	remove_proc_entry("fb", NULL);
1916 	class_destroy(fb_class);
1917 	unregister_chrdev(FB_MAJOR, "fb");
1918 }
1919 
1920 module_exit(fbmem_exit);
1921 MODULE_LICENSE("GPL");
1922 MODULE_DESCRIPTION("Framebuffer base");
1923 #else
1924 subsys_initcall(fbmem_init);
1925 #endif
1926 
1927 int fb_new_modelist(struct fb_info *info)
1928 {
1929 	struct fb_event event;
1930 	struct fb_var_screeninfo var = info->var;
1931 	struct list_head *pos, *n;
1932 	struct fb_modelist *modelist;
1933 	struct fb_videomode *m, mode;
1934 	int err = 1;
1935 
1936 	list_for_each_safe(pos, n, &info->modelist) {
1937 		modelist = list_entry(pos, struct fb_modelist, list);
1938 		m = &modelist->mode;
1939 		fb_videomode_to_var(&var, m);
1940 		var.activate = FB_ACTIVATE_TEST;
1941 		err = fb_set_var(info, &var);
1942 		fb_var_to_videomode(&mode, &var);
1943 		if (err || !fb_mode_is_equal(m, &mode)) {
1944 			list_del(pos);
1945 			kfree(pos);
1946 		}
1947 	}
1948 
1949 	err = 1;
1950 
1951 	if (!list_empty(&info->modelist)) {
1952 		event.info = info;
1953 		err = fb_notifier_call_chain(FB_EVENT_NEW_MODELIST, &event);
1954 	}
1955 
1956 	return err;
1957 }
1958 
1959 MODULE_LICENSE("GPL");
1960