xref: /openbmc/linux/drivers/video/fbdev/core/fbmem.c (revision f1575595)
1 /*
2  *  linux/drivers/video/fbmem.c
3  *
4  *  Copyright (C) 1994 Martin Schaller
5  *
6  *	2001 - Documented with DocBook
7  *	- Brad Douglas <brad@neruo.com>
8  *
9  * This file is subject to the terms and conditions of the GNU General Public
10  * License.  See the file COPYING in the main directory of this archive
11  * for more details.
12  */
13 
14 #include <linux/module.h>
15 
16 #include <linux/compat.h>
17 #include <linux/types.h>
18 #include <linux/errno.h>
19 #include <linux/kernel.h>
20 #include <linux/major.h>
21 #include <linux/slab.h>
22 #include <linux/mm.h>
23 #include <linux/mman.h>
24 #include <linux/vt.h>
25 #include <linux/init.h>
26 #include <linux/linux_logo.h>
27 #include <linux/proc_fs.h>
28 #include <linux/seq_file.h>
29 #include <linux/console.h>
30 #include <linux/kmod.h>
31 #include <linux/err.h>
32 #include <linux/device.h>
33 #include <linux/efi.h>
34 #include <linux/fb.h>
35 #include <linux/fbcon.h>
36 #include <linux/mem_encrypt.h>
37 
38 #include <asm/fb.h>
39 
40 
41     /*
42      *  Frame buffer device initialization and setup routines
43      */
44 
45 #define FBPIXMAPSIZE	(1024 * 8)
46 
47 static DEFINE_MUTEX(registration_lock);
48 
49 struct fb_info *registered_fb[FB_MAX] __read_mostly;
50 EXPORT_SYMBOL(registered_fb);
51 
52 int num_registered_fb __read_mostly;
53 EXPORT_SYMBOL(num_registered_fb);
54 
55 static struct fb_info *get_fb_info(unsigned int idx)
56 {
57 	struct fb_info *fb_info;
58 
59 	if (idx >= FB_MAX)
60 		return ERR_PTR(-ENODEV);
61 
62 	mutex_lock(&registration_lock);
63 	fb_info = registered_fb[idx];
64 	if (fb_info)
65 		atomic_inc(&fb_info->count);
66 	mutex_unlock(&registration_lock);
67 
68 	return fb_info;
69 }
70 
71 static void put_fb_info(struct fb_info *fb_info)
72 {
73 	if (!atomic_dec_and_test(&fb_info->count))
74 		return;
75 	if (fb_info->fbops->fb_destroy)
76 		fb_info->fbops->fb_destroy(fb_info);
77 }
78 
79 int lock_fb_info(struct fb_info *info)
80 {
81 	mutex_lock(&info->lock);
82 	if (!info->fbops) {
83 		mutex_unlock(&info->lock);
84 		return 0;
85 	}
86 	return 1;
87 }
88 EXPORT_SYMBOL(lock_fb_info);
89 
90 /*
91  * Helpers
92  */
93 
94 int fb_get_color_depth(struct fb_var_screeninfo *var,
95 		       struct fb_fix_screeninfo *fix)
96 {
97 	int depth = 0;
98 
99 	if (fix->visual == FB_VISUAL_MONO01 ||
100 	    fix->visual == FB_VISUAL_MONO10)
101 		depth = 1;
102 	else {
103 		if (var->green.length == var->blue.length &&
104 		    var->green.length == var->red.length &&
105 		    var->green.offset == var->blue.offset &&
106 		    var->green.offset == var->red.offset)
107 			depth = var->green.length;
108 		else
109 			depth = var->green.length + var->red.length +
110 				var->blue.length;
111 	}
112 
113 	return depth;
114 }
115 EXPORT_SYMBOL(fb_get_color_depth);
116 
117 /*
118  * Data padding functions.
119  */
120 void fb_pad_aligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 s_pitch, u32 height)
121 {
122 	__fb_pad_aligned_buffer(dst, d_pitch, src, s_pitch, height);
123 }
124 EXPORT_SYMBOL(fb_pad_aligned_buffer);
125 
126 void fb_pad_unaligned_buffer(u8 *dst, u32 d_pitch, u8 *src, u32 idx, u32 height,
127 				u32 shift_high, u32 shift_low, u32 mod)
128 {
129 	u8 mask = (u8) (0xfff << shift_high), tmp;
130 	int i, j;
131 
132 	for (i = height; i--; ) {
133 		for (j = 0; j < idx; j++) {
134 			tmp = dst[j];
135 			tmp &= mask;
136 			tmp |= *src >> shift_low;
137 			dst[j] = tmp;
138 			tmp = *src << shift_high;
139 			dst[j+1] = tmp;
140 			src++;
141 		}
142 		tmp = dst[idx];
143 		tmp &= mask;
144 		tmp |= *src >> shift_low;
145 		dst[idx] = tmp;
146 		if (shift_high < mod) {
147 			tmp = *src << shift_high;
148 			dst[idx+1] = tmp;
149 		}
150 		src++;
151 		dst += d_pitch;
152 	}
153 }
154 EXPORT_SYMBOL(fb_pad_unaligned_buffer);
155 
156 /*
157  * we need to lock this section since fb_cursor
158  * may use fb_imageblit()
159  */
160 char* fb_get_buffer_offset(struct fb_info *info, struct fb_pixmap *buf, u32 size)
161 {
162 	u32 align = buf->buf_align - 1, offset;
163 	char *addr = buf->addr;
164 
165 	/* If IO mapped, we need to sync before access, no sharing of
166 	 * the pixmap is done
167 	 */
168 	if (buf->flags & FB_PIXMAP_IO) {
169 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
170 			info->fbops->fb_sync(info);
171 		return addr;
172 	}
173 
174 	/* See if we fit in the remaining pixmap space */
175 	offset = buf->offset + align;
176 	offset &= ~align;
177 	if (offset + size > buf->size) {
178 		/* We do not fit. In order to be able to re-use the buffer,
179 		 * we must ensure no asynchronous DMA'ing or whatever operation
180 		 * is in progress, we sync for that.
181 		 */
182 		if (info->fbops->fb_sync && (buf->flags & FB_PIXMAP_SYNC))
183 			info->fbops->fb_sync(info);
184 		offset = 0;
185 	}
186 	buf->offset = offset + size;
187 	addr += offset;
188 
189 	return addr;
190 }
191 EXPORT_SYMBOL(fb_get_buffer_offset);
192 
193 #ifdef CONFIG_LOGO
194 
195 static inline unsigned safe_shift(unsigned d, int n)
196 {
197 	return n < 0 ? d >> -n : d << n;
198 }
199 
200 static void fb_set_logocmap(struct fb_info *info,
201 				   const struct linux_logo *logo)
202 {
203 	struct fb_cmap palette_cmap;
204 	u16 palette_green[16];
205 	u16 palette_blue[16];
206 	u16 palette_red[16];
207 	int i, j, n;
208 	const unsigned char *clut = logo->clut;
209 
210 	palette_cmap.start = 0;
211 	palette_cmap.len = 16;
212 	palette_cmap.red = palette_red;
213 	palette_cmap.green = palette_green;
214 	palette_cmap.blue = palette_blue;
215 	palette_cmap.transp = NULL;
216 
217 	for (i = 0; i < logo->clutsize; i += n) {
218 		n = logo->clutsize - i;
219 		/* palette_cmap provides space for only 16 colors at once */
220 		if (n > 16)
221 			n = 16;
222 		palette_cmap.start = 32 + i;
223 		palette_cmap.len = n;
224 		for (j = 0; j < n; ++j) {
225 			palette_cmap.red[j] = clut[0] << 8 | clut[0];
226 			palette_cmap.green[j] = clut[1] << 8 | clut[1];
227 			palette_cmap.blue[j] = clut[2] << 8 | clut[2];
228 			clut += 3;
229 		}
230 		fb_set_cmap(&palette_cmap, info);
231 	}
232 }
233 
234 static void  fb_set_logo_truepalette(struct fb_info *info,
235 					    const struct linux_logo *logo,
236 					    u32 *palette)
237 {
238 	static const unsigned char mask[] = { 0,0x80,0xc0,0xe0,0xf0,0xf8,0xfc,0xfe,0xff };
239 	unsigned char redmask, greenmask, bluemask;
240 	int redshift, greenshift, blueshift;
241 	int i;
242 	const unsigned char *clut = logo->clut;
243 
244 	/*
245 	 * We have to create a temporary palette since console palette is only
246 	 * 16 colors long.
247 	 */
248 	/* Bug: Doesn't obey msb_right ... (who needs that?) */
249 	redmask   = mask[info->var.red.length   < 8 ? info->var.red.length   : 8];
250 	greenmask = mask[info->var.green.length < 8 ? info->var.green.length : 8];
251 	bluemask  = mask[info->var.blue.length  < 8 ? info->var.blue.length  : 8];
252 	redshift   = info->var.red.offset   - (8 - info->var.red.length);
253 	greenshift = info->var.green.offset - (8 - info->var.green.length);
254 	blueshift  = info->var.blue.offset  - (8 - info->var.blue.length);
255 
256 	for ( i = 0; i < logo->clutsize; i++) {
257 		palette[i+32] = (safe_shift((clut[0] & redmask), redshift) |
258 				 safe_shift((clut[1] & greenmask), greenshift) |
259 				 safe_shift((clut[2] & bluemask), blueshift));
260 		clut += 3;
261 	}
262 }
263 
264 static void fb_set_logo_directpalette(struct fb_info *info,
265 					     const struct linux_logo *logo,
266 					     u32 *palette)
267 {
268 	int redshift, greenshift, blueshift;
269 	int i;
270 
271 	redshift = info->var.red.offset;
272 	greenshift = info->var.green.offset;
273 	blueshift = info->var.blue.offset;
274 
275 	for (i = 32; i < 32 + logo->clutsize; i++)
276 		palette[i] = i << redshift | i << greenshift | i << blueshift;
277 }
278 
279 static void fb_set_logo(struct fb_info *info,
280 			       const struct linux_logo *logo, u8 *dst,
281 			       int depth)
282 {
283 	int i, j, k;
284 	const u8 *src = logo->data;
285 	u8 xor = (info->fix.visual == FB_VISUAL_MONO01) ? 0xff : 0;
286 	u8 fg = 1, d;
287 
288 	switch (fb_get_color_depth(&info->var, &info->fix)) {
289 	case 1:
290 		fg = 1;
291 		break;
292 	case 2:
293 		fg = 3;
294 		break;
295 	default:
296 		fg = 7;
297 		break;
298 	}
299 
300 	if (info->fix.visual == FB_VISUAL_MONO01 ||
301 	    info->fix.visual == FB_VISUAL_MONO10)
302 		fg = ~((u8) (0xfff << info->var.green.length));
303 
304 	switch (depth) {
305 	case 4:
306 		for (i = 0; i < logo->height; i++)
307 			for (j = 0; j < logo->width; src++) {
308 				*dst++ = *src >> 4;
309 				j++;
310 				if (j < logo->width) {
311 					*dst++ = *src & 0x0f;
312 					j++;
313 				}
314 			}
315 		break;
316 	case 1:
317 		for (i = 0; i < logo->height; i++) {
318 			for (j = 0; j < logo->width; src++) {
319 				d = *src ^ xor;
320 				for (k = 7; k >= 0 && j < logo->width; k--) {
321 					*dst++ = ((d >> k) & 1) ? fg : 0;
322 					j++;
323 				}
324 			}
325 		}
326 		break;
327 	}
328 }
329 
330 /*
331  * Three (3) kinds of logo maps exist.  linux_logo_clut224 (>16 colors),
332  * linux_logo_vga16 (16 colors) and linux_logo_mono (2 colors).  Depending on
333  * the visual format and color depth of the framebuffer, the DAC, the
334  * pseudo_palette, and the logo data will be adjusted accordingly.
335  *
336  * Case 1 - linux_logo_clut224:
337  * Color exceeds the number of console colors (16), thus we set the hardware DAC
338  * using fb_set_cmap() appropriately.  The "needs_cmapreset"  flag will be set.
339  *
340  * For visuals that require color info from the pseudo_palette, we also construct
341  * one for temporary use. The "needs_directpalette" or "needs_truepalette" flags
342  * will be set.
343  *
344  * Case 2 - linux_logo_vga16:
345  * The number of colors just matches the console colors, thus there is no need
346  * to set the DAC or the pseudo_palette.  However, the bitmap is packed, ie,
347  * each byte contains color information for two pixels (upper and lower nibble).
348  * To be consistent with fb_imageblit() usage, we therefore separate the two
349  * nibbles into separate bytes. The "depth" flag will be set to 4.
350  *
351  * Case 3 - linux_logo_mono:
352  * This is similar with Case 2.  Each byte contains information for 8 pixels.
353  * We isolate each bit and expand each into a byte. The "depth" flag will
354  * be set to 1.
355  */
356 static struct logo_data {
357 	int depth;
358 	int needs_directpalette;
359 	int needs_truepalette;
360 	int needs_cmapreset;
361 	const struct linux_logo *logo;
362 } fb_logo __read_mostly;
363 
364 static void fb_rotate_logo_ud(const u8 *in, u8 *out, u32 width, u32 height)
365 {
366 	u32 size = width * height, i;
367 
368 	out += size - 1;
369 
370 	for (i = size; i--; )
371 		*out-- = *in++;
372 }
373 
374 static void fb_rotate_logo_cw(const u8 *in, u8 *out, u32 width, u32 height)
375 {
376 	int i, j, h = height - 1;
377 
378 	for (i = 0; i < height; i++)
379 		for (j = 0; j < width; j++)
380 				out[height * j + h - i] = *in++;
381 }
382 
383 static void fb_rotate_logo_ccw(const u8 *in, u8 *out, u32 width, u32 height)
384 {
385 	int i, j, w = width - 1;
386 
387 	for (i = 0; i < height; i++)
388 		for (j = 0; j < width; j++)
389 			out[height * (w - j) + i] = *in++;
390 }
391 
392 static void fb_rotate_logo(struct fb_info *info, u8 *dst,
393 			   struct fb_image *image, int rotate)
394 {
395 	u32 tmp;
396 
397 	if (rotate == FB_ROTATE_UD) {
398 		fb_rotate_logo_ud(image->data, dst, image->width,
399 				  image->height);
400 		image->dx = info->var.xres - image->width - image->dx;
401 		image->dy = info->var.yres - image->height - image->dy;
402 	} else if (rotate == FB_ROTATE_CW) {
403 		fb_rotate_logo_cw(image->data, dst, image->width,
404 				  image->height);
405 		tmp = image->width;
406 		image->width = image->height;
407 		image->height = tmp;
408 		tmp = image->dy;
409 		image->dy = image->dx;
410 		image->dx = info->var.xres - image->width - tmp;
411 	} else if (rotate == FB_ROTATE_CCW) {
412 		fb_rotate_logo_ccw(image->data, dst, image->width,
413 				   image->height);
414 		tmp = image->width;
415 		image->width = image->height;
416 		image->height = tmp;
417 		tmp = image->dx;
418 		image->dx = image->dy;
419 		image->dy = info->var.yres - image->height - tmp;
420 	}
421 
422 	image->data = dst;
423 }
424 
425 static void fb_do_show_logo(struct fb_info *info, struct fb_image *image,
426 			    int rotate, unsigned int num)
427 {
428 	unsigned int x;
429 
430 	if (rotate == FB_ROTATE_UR) {
431 		for (x = 0;
432 		     x < num && image->dx + image->width <= info->var.xres;
433 		     x++) {
434 			info->fbops->fb_imageblit(info, image);
435 			image->dx += image->width + 8;
436 		}
437 	} else if (rotate == FB_ROTATE_UD) {
438 		for (x = 0; x < num; x++) {
439 			info->fbops->fb_imageblit(info, image);
440 			image->dx -= image->width + 8;
441 		}
442 	} else if (rotate == FB_ROTATE_CW) {
443 		for (x = 0;
444 		     x < num && image->dy + image->height <= info->var.yres;
445 		     x++) {
446 			info->fbops->fb_imageblit(info, image);
447 			image->dy += image->height + 8;
448 		}
449 	} else if (rotate == FB_ROTATE_CCW) {
450 		for (x = 0; x < num; x++) {
451 			info->fbops->fb_imageblit(info, image);
452 			image->dy -= image->height + 8;
453 		}
454 	}
455 }
456 
457 static int fb_show_logo_line(struct fb_info *info, int rotate,
458 			     const struct linux_logo *logo, int y,
459 			     unsigned int n)
460 {
461 	u32 *palette = NULL, *saved_pseudo_palette = NULL;
462 	unsigned char *logo_new = NULL, *logo_rotate = NULL;
463 	struct fb_image image;
464 
465 	/* Return if the frame buffer is not mapped or suspended */
466 	if (logo == NULL || info->state != FBINFO_STATE_RUNNING ||
467 	    info->fbops->owner)
468 		return 0;
469 
470 	image.depth = 8;
471 	image.data = logo->data;
472 
473 	if (fb_logo.needs_cmapreset)
474 		fb_set_logocmap(info, logo);
475 
476 	if (fb_logo.needs_truepalette ||
477 	    fb_logo.needs_directpalette) {
478 		palette = kmalloc(256 * 4, GFP_KERNEL);
479 		if (palette == NULL)
480 			return 0;
481 
482 		if (fb_logo.needs_truepalette)
483 			fb_set_logo_truepalette(info, logo, palette);
484 		else
485 			fb_set_logo_directpalette(info, logo, palette);
486 
487 		saved_pseudo_palette = info->pseudo_palette;
488 		info->pseudo_palette = palette;
489 	}
490 
491 	if (fb_logo.depth <= 4) {
492 		logo_new = kmalloc_array(logo->width, logo->height,
493 					 GFP_KERNEL);
494 		if (logo_new == NULL) {
495 			kfree(palette);
496 			if (saved_pseudo_palette)
497 				info->pseudo_palette = saved_pseudo_palette;
498 			return 0;
499 		}
500 		image.data = logo_new;
501 		fb_set_logo(info, logo, logo_new, fb_logo.depth);
502 	}
503 
504 	image.dx = 0;
505 	image.dy = y;
506 	image.width = logo->width;
507 	image.height = logo->height;
508 
509 	if (rotate) {
510 		logo_rotate = kmalloc_array(logo->width, logo->height,
511 					    GFP_KERNEL);
512 		if (logo_rotate)
513 			fb_rotate_logo(info, logo_rotate, &image, rotate);
514 	}
515 
516 	fb_do_show_logo(info, &image, rotate, n);
517 
518 	kfree(palette);
519 	if (saved_pseudo_palette != NULL)
520 		info->pseudo_palette = saved_pseudo_palette;
521 	kfree(logo_new);
522 	kfree(logo_rotate);
523 	return logo->height;
524 }
525 
526 
527 #ifdef CONFIG_FB_LOGO_EXTRA
528 
529 #define FB_LOGO_EX_NUM_MAX 10
530 static struct logo_data_extra {
531 	const struct linux_logo *logo;
532 	unsigned int n;
533 } fb_logo_ex[FB_LOGO_EX_NUM_MAX];
534 static unsigned int fb_logo_ex_num;
535 
536 void fb_append_extra_logo(const struct linux_logo *logo, unsigned int n)
537 {
538 	if (!n || fb_logo_ex_num == FB_LOGO_EX_NUM_MAX)
539 		return;
540 
541 	fb_logo_ex[fb_logo_ex_num].logo = logo;
542 	fb_logo_ex[fb_logo_ex_num].n = n;
543 	fb_logo_ex_num++;
544 }
545 
546 static int fb_prepare_extra_logos(struct fb_info *info, unsigned int height,
547 				  unsigned int yres)
548 {
549 	unsigned int i;
550 
551 	/* FIXME: logo_ex supports only truecolor fb. */
552 	if (info->fix.visual != FB_VISUAL_TRUECOLOR)
553 		fb_logo_ex_num = 0;
554 
555 	for (i = 0; i < fb_logo_ex_num; i++) {
556 		if (fb_logo_ex[i].logo->type != fb_logo.logo->type) {
557 			fb_logo_ex[i].logo = NULL;
558 			continue;
559 		}
560 		height += fb_logo_ex[i].logo->height;
561 		if (height > yres) {
562 			height -= fb_logo_ex[i].logo->height;
563 			fb_logo_ex_num = i;
564 			break;
565 		}
566 	}
567 	return height;
568 }
569 
570 static int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
571 {
572 	unsigned int i;
573 
574 	for (i = 0; i < fb_logo_ex_num; i++)
575 		y += fb_show_logo_line(info, rotate,
576 				       fb_logo_ex[i].logo, y, fb_logo_ex[i].n);
577 
578 	return y;
579 }
580 
581 #else /* !CONFIG_FB_LOGO_EXTRA */
582 
583 static inline int fb_prepare_extra_logos(struct fb_info *info,
584 					 unsigned int height,
585 					 unsigned int yres)
586 {
587 	return height;
588 }
589 
590 static inline int fb_show_extra_logos(struct fb_info *info, int y, int rotate)
591 {
592 	return y;
593 }
594 
595 #endif /* CONFIG_FB_LOGO_EXTRA */
596 
597 
598 int fb_prepare_logo(struct fb_info *info, int rotate)
599 {
600 	int depth = fb_get_color_depth(&info->var, &info->fix);
601 	unsigned int yres;
602 
603 	memset(&fb_logo, 0, sizeof(struct logo_data));
604 
605 	if (info->flags & FBINFO_MISC_TILEBLITTING ||
606 	    info->fbops->owner)
607 		return 0;
608 
609 	if (info->fix.visual == FB_VISUAL_DIRECTCOLOR) {
610 		depth = info->var.blue.length;
611 		if (info->var.red.length < depth)
612 			depth = info->var.red.length;
613 		if (info->var.green.length < depth)
614 			depth = info->var.green.length;
615 	}
616 
617 	if (info->fix.visual == FB_VISUAL_STATIC_PSEUDOCOLOR && depth > 4) {
618 		/* assume console colormap */
619 		depth = 4;
620 	}
621 
622 	/* Return if no suitable logo was found */
623 	fb_logo.logo = fb_find_logo(depth);
624 
625 	if (!fb_logo.logo) {
626 		return 0;
627 	}
628 
629 	if (rotate == FB_ROTATE_UR || rotate == FB_ROTATE_UD)
630 		yres = info->var.yres;
631 	else
632 		yres = info->var.xres;
633 
634 	if (fb_logo.logo->height > yres) {
635 		fb_logo.logo = NULL;
636 		return 0;
637 	}
638 
639 	/* What depth we asked for might be different from what we get */
640 	if (fb_logo.logo->type == LINUX_LOGO_CLUT224)
641 		fb_logo.depth = 8;
642 	else if (fb_logo.logo->type == LINUX_LOGO_VGA16)
643 		fb_logo.depth = 4;
644 	else
645 		fb_logo.depth = 1;
646 
647 
648  	if (fb_logo.depth > 4 && depth > 4) {
649  		switch (info->fix.visual) {
650  		case FB_VISUAL_TRUECOLOR:
651  			fb_logo.needs_truepalette = 1;
652  			break;
653  		case FB_VISUAL_DIRECTCOLOR:
654  			fb_logo.needs_directpalette = 1;
655  			fb_logo.needs_cmapreset = 1;
656  			break;
657  		case FB_VISUAL_PSEUDOCOLOR:
658  			fb_logo.needs_cmapreset = 1;
659  			break;
660  		}
661  	}
662 
663 	return fb_prepare_extra_logos(info, fb_logo.logo->height, yres);
664 }
665 
666 int fb_show_logo(struct fb_info *info, int rotate)
667 {
668 	int y;
669 
670 	y = fb_show_logo_line(info, rotate, fb_logo.logo, 0,
671 			      num_online_cpus());
672 	y = fb_show_extra_logos(info, y, rotate);
673 
674 	return y;
675 }
676 #else
677 int fb_prepare_logo(struct fb_info *info, int rotate) { return 0; }
678 int fb_show_logo(struct fb_info *info, int rotate) { return 0; }
679 #endif /* CONFIG_LOGO */
680 EXPORT_SYMBOL(fb_prepare_logo);
681 EXPORT_SYMBOL(fb_show_logo);
682 
683 static void *fb_seq_start(struct seq_file *m, loff_t *pos)
684 {
685 	mutex_lock(&registration_lock);
686 	return (*pos < FB_MAX) ? pos : NULL;
687 }
688 
689 static void *fb_seq_next(struct seq_file *m, void *v, loff_t *pos)
690 {
691 	(*pos)++;
692 	return (*pos < FB_MAX) ? pos : NULL;
693 }
694 
695 static void fb_seq_stop(struct seq_file *m, void *v)
696 {
697 	mutex_unlock(&registration_lock);
698 }
699 
700 static int fb_seq_show(struct seq_file *m, void *v)
701 {
702 	int i = *(loff_t *)v;
703 	struct fb_info *fi = registered_fb[i];
704 
705 	if (fi)
706 		seq_printf(m, "%d %s\n", fi->node, fi->fix.id);
707 	return 0;
708 }
709 
710 static const struct seq_operations proc_fb_seq_ops = {
711 	.start	= fb_seq_start,
712 	.next	= fb_seq_next,
713 	.stop	= fb_seq_stop,
714 	.show	= fb_seq_show,
715 };
716 
717 /*
718  * We hold a reference to the fb_info in file->private_data,
719  * but if the current registered fb has changed, we don't
720  * actually want to use it.
721  *
722  * So look up the fb_info using the inode minor number,
723  * and just verify it against the reference we have.
724  */
725 static struct fb_info *file_fb_info(struct file *file)
726 {
727 	struct inode *inode = file_inode(file);
728 	int fbidx = iminor(inode);
729 	struct fb_info *info = registered_fb[fbidx];
730 
731 	if (info != file->private_data)
732 		info = NULL;
733 	return info;
734 }
735 
736 static ssize_t
737 fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
738 {
739 	unsigned long p = *ppos;
740 	struct fb_info *info = file_fb_info(file);
741 	u8 *buffer, *dst;
742 	u8 __iomem *src;
743 	int c, cnt = 0, err = 0;
744 	unsigned long total_size;
745 
746 	if (!info || ! info->screen_base)
747 		return -ENODEV;
748 
749 	if (info->state != FBINFO_STATE_RUNNING)
750 		return -EPERM;
751 
752 	if (info->fbops->fb_read)
753 		return info->fbops->fb_read(info, buf, count, ppos);
754 
755 	total_size = info->screen_size;
756 
757 	if (total_size == 0)
758 		total_size = info->fix.smem_len;
759 
760 	if (p >= total_size)
761 		return 0;
762 
763 	if (count >= total_size)
764 		count = total_size;
765 
766 	if (count + p > total_size)
767 		count = total_size - p;
768 
769 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
770 			 GFP_KERNEL);
771 	if (!buffer)
772 		return -ENOMEM;
773 
774 	src = (u8 __iomem *) (info->screen_base + p);
775 
776 	if (info->fbops->fb_sync)
777 		info->fbops->fb_sync(info);
778 
779 	while (count) {
780 		c  = (count > PAGE_SIZE) ? PAGE_SIZE : count;
781 		dst = buffer;
782 		fb_memcpy_fromfb(dst, src, c);
783 		dst += c;
784 		src += c;
785 
786 		if (copy_to_user(buf, buffer, c)) {
787 			err = -EFAULT;
788 			break;
789 		}
790 		*ppos += c;
791 		buf += c;
792 		cnt += c;
793 		count -= c;
794 	}
795 
796 	kfree(buffer);
797 
798 	return (err) ? err : cnt;
799 }
800 
801 static ssize_t
802 fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
803 {
804 	unsigned long p = *ppos;
805 	struct fb_info *info = file_fb_info(file);
806 	u8 *buffer, *src;
807 	u8 __iomem *dst;
808 	int c, cnt = 0, err = 0;
809 	unsigned long total_size;
810 
811 	if (!info || !info->screen_base)
812 		return -ENODEV;
813 
814 	if (info->state != FBINFO_STATE_RUNNING)
815 		return -EPERM;
816 
817 	if (info->fbops->fb_write)
818 		return info->fbops->fb_write(info, buf, count, ppos);
819 
820 	total_size = info->screen_size;
821 
822 	if (total_size == 0)
823 		total_size = info->fix.smem_len;
824 
825 	if (p > total_size)
826 		return -EFBIG;
827 
828 	if (count > total_size) {
829 		err = -EFBIG;
830 		count = total_size;
831 	}
832 
833 	if (count + p > total_size) {
834 		if (!err)
835 			err = -ENOSPC;
836 
837 		count = total_size - p;
838 	}
839 
840 	buffer = kmalloc((count > PAGE_SIZE) ? PAGE_SIZE : count,
841 			 GFP_KERNEL);
842 	if (!buffer)
843 		return -ENOMEM;
844 
845 	dst = (u8 __iomem *) (info->screen_base + p);
846 
847 	if (info->fbops->fb_sync)
848 		info->fbops->fb_sync(info);
849 
850 	while (count) {
851 		c = (count > PAGE_SIZE) ? PAGE_SIZE : count;
852 		src = buffer;
853 
854 		if (copy_from_user(src, buf, c)) {
855 			err = -EFAULT;
856 			break;
857 		}
858 
859 		fb_memcpy_tofb(dst, src, c);
860 		dst += c;
861 		src += c;
862 		*ppos += c;
863 		buf += c;
864 		cnt += c;
865 		count -= c;
866 	}
867 
868 	kfree(buffer);
869 
870 	return (cnt) ? cnt : err;
871 }
872 
873 int
874 fb_pan_display(struct fb_info *info, struct fb_var_screeninfo *var)
875 {
876 	struct fb_fix_screeninfo *fix = &info->fix;
877 	unsigned int yres = info->var.yres;
878 	int err = 0;
879 
880 	if (var->yoffset > 0) {
881 		if (var->vmode & FB_VMODE_YWRAP) {
882 			if (!fix->ywrapstep || (var->yoffset % fix->ywrapstep))
883 				err = -EINVAL;
884 			else
885 				yres = 0;
886 		} else if (!fix->ypanstep || (var->yoffset % fix->ypanstep))
887 			err = -EINVAL;
888 	}
889 
890 	if (var->xoffset > 0 && (!fix->xpanstep ||
891 				 (var->xoffset % fix->xpanstep)))
892 		err = -EINVAL;
893 
894 	if (err || !info->fbops->fb_pan_display ||
895 	    var->yoffset > info->var.yres_virtual - yres ||
896 	    var->xoffset > info->var.xres_virtual - info->var.xres)
897 		return -EINVAL;
898 
899 	if ((err = info->fbops->fb_pan_display(var, info)))
900 		return err;
901 	info->var.xoffset = var->xoffset;
902 	info->var.yoffset = var->yoffset;
903 	if (var->vmode & FB_VMODE_YWRAP)
904 		info->var.vmode |= FB_VMODE_YWRAP;
905 	else
906 		info->var.vmode &= ~FB_VMODE_YWRAP;
907 	return 0;
908 }
909 EXPORT_SYMBOL(fb_pan_display);
910 
911 static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
912 			 u32 activate)
913 {
914 	struct fb_event event;
915 	struct fb_blit_caps caps, fbcaps;
916 	int err = 0;
917 
918 	memset(&caps, 0, sizeof(caps));
919 	memset(&fbcaps, 0, sizeof(fbcaps));
920 	caps.flags = (activate & FB_ACTIVATE_ALL) ? 1 : 0;
921 	event.info = info;
922 	event.data = &caps;
923 	fb_notifier_call_chain(FB_EVENT_GET_REQ, &event);
924 	info->fbops->fb_get_caps(info, &fbcaps, var);
925 
926 	if (((fbcaps.x ^ caps.x) & caps.x) ||
927 	    ((fbcaps.y ^ caps.y) & caps.y) ||
928 	    (fbcaps.len < caps.len))
929 		err = -EINVAL;
930 
931 	return err;
932 }
933 
934 int
935 fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
936 {
937 	int flags = info->flags;
938 	int ret = 0;
939 
940 	if (var->activate & FB_ACTIVATE_INV_MODE) {
941 		struct fb_videomode mode1, mode2;
942 
943 		fb_var_to_videomode(&mode1, var);
944 		fb_var_to_videomode(&mode2, &info->var);
945 		/* make sure we don't delete the videomode of current var */
946 		ret = fb_mode_is_equal(&mode1, &mode2);
947 
948 		if (!ret) {
949 		    struct fb_event event;
950 
951 		    event.info = info;
952 		    event.data = &mode1;
953 		    ret = fb_notifier_call_chain(FB_EVENT_MODE_DELETE, &event);
954 		}
955 
956 		if (!ret)
957 		    fb_delete_videomode(&mode1, &info->modelist);
958 
959 
960 		ret = (ret) ? -EINVAL : 0;
961 		goto done;
962 	}
963 
964 	if ((var->activate & FB_ACTIVATE_FORCE) ||
965 	    memcmp(&info->var, var, sizeof(struct fb_var_screeninfo))) {
966 		u32 activate = var->activate;
967 
968 		/* When using FOURCC mode, make sure the red, green, blue and
969 		 * transp fields are set to 0.
970 		 */
971 		if ((info->fix.capabilities & FB_CAP_FOURCC) &&
972 		    var->grayscale > 1) {
973 			if (var->red.offset     || var->green.offset    ||
974 			    var->blue.offset    || var->transp.offset   ||
975 			    var->red.length     || var->green.length    ||
976 			    var->blue.length    || var->transp.length   ||
977 			    var->red.msb_right  || var->green.msb_right ||
978 			    var->blue.msb_right || var->transp.msb_right)
979 				return -EINVAL;
980 		}
981 
982 		if (!info->fbops->fb_check_var) {
983 			*var = info->var;
984 			goto done;
985 		}
986 
987 		ret = info->fbops->fb_check_var(var, info);
988 
989 		if (ret)
990 			goto done;
991 
992 		if ((var->activate & FB_ACTIVATE_MASK) == FB_ACTIVATE_NOW) {
993 			struct fb_var_screeninfo old_var;
994 			struct fb_videomode mode;
995 
996 			if (info->fbops->fb_get_caps) {
997 				ret = fb_check_caps(info, var, activate);
998 
999 				if (ret)
1000 					goto done;
1001 			}
1002 
1003 			old_var = info->var;
1004 			info->var = *var;
1005 
1006 			if (info->fbops->fb_set_par) {
1007 				ret = info->fbops->fb_set_par(info);
1008 
1009 				if (ret) {
1010 					info->var = old_var;
1011 					printk(KERN_WARNING "detected "
1012 						"fb_set_par error, "
1013 						"error code: %d\n", ret);
1014 					goto done;
1015 				}
1016 			}
1017 
1018 			fb_pan_display(info, &info->var);
1019 			fb_set_cmap(&info->cmap, info);
1020 			fb_var_to_videomode(&mode, &info->var);
1021 
1022 			if (info->modelist.prev && info->modelist.next &&
1023 			    !list_empty(&info->modelist))
1024 				ret = fb_add_videomode(&mode, &info->modelist);
1025 
1026 			if (!ret && (flags & FBINFO_MISC_USEREVENT)) {
1027 				struct fb_event event;
1028 				int evnt = (activate & FB_ACTIVATE_ALL) ?
1029 					FB_EVENT_MODE_CHANGE_ALL :
1030 					FB_EVENT_MODE_CHANGE;
1031 
1032 				info->flags &= ~FBINFO_MISC_USEREVENT;
1033 				event.info = info;
1034 				event.data = &mode;
1035 				fb_notifier_call_chain(evnt, &event);
1036 			}
1037 		}
1038 	}
1039 
1040  done:
1041 	return ret;
1042 }
1043 EXPORT_SYMBOL(fb_set_var);
1044 
1045 int
1046 fb_blank(struct fb_info *info, int blank)
1047 {
1048 	struct fb_event event;
1049 	int ret = -EINVAL, early_ret;
1050 
1051  	if (blank > FB_BLANK_POWERDOWN)
1052  		blank = FB_BLANK_POWERDOWN;
1053 
1054 	event.info = info;
1055 	event.data = &blank;
1056 
1057 	early_ret = fb_notifier_call_chain(FB_EARLY_EVENT_BLANK, &event);
1058 
1059 	if (info->fbops->fb_blank)
1060  		ret = info->fbops->fb_blank(blank, info);
1061 
1062 	if (!ret)
1063 		fb_notifier_call_chain(FB_EVENT_BLANK, &event);
1064 	else {
1065 		/*
1066 		 * if fb_blank is failed then revert effects of
1067 		 * the early blank event.
1068 		 */
1069 		if (!early_ret)
1070 			fb_notifier_call_chain(FB_R_EARLY_EVENT_BLANK, &event);
1071 	}
1072 
1073  	return ret;
1074 }
1075 EXPORT_SYMBOL(fb_blank);
1076 
1077 static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
1078 			unsigned long arg)
1079 {
1080 	struct fb_ops *fb;
1081 	struct fb_var_screeninfo var;
1082 	struct fb_fix_screeninfo fix;
1083 	struct fb_con2fbmap con2fb;
1084 	struct fb_cmap cmap_from;
1085 	struct fb_cmap_user cmap;
1086 	struct fb_event event;
1087 	void __user *argp = (void __user *)arg;
1088 	long ret = 0;
1089 
1090 	switch (cmd) {
1091 	case FBIOGET_VSCREENINFO:
1092 		if (!lock_fb_info(info))
1093 			return -ENODEV;
1094 		var = info->var;
1095 		unlock_fb_info(info);
1096 
1097 		ret = copy_to_user(argp, &var, sizeof(var)) ? -EFAULT : 0;
1098 		break;
1099 	case FBIOPUT_VSCREENINFO:
1100 		if (copy_from_user(&var, argp, sizeof(var)))
1101 			return -EFAULT;
1102 		console_lock();
1103 		if (!lock_fb_info(info)) {
1104 			console_unlock();
1105 			return -ENODEV;
1106 		}
1107 		info->flags |= FBINFO_MISC_USEREVENT;
1108 		ret = fb_set_var(info, &var);
1109 		info->flags &= ~FBINFO_MISC_USEREVENT;
1110 		unlock_fb_info(info);
1111 		console_unlock();
1112 		if (!ret && copy_to_user(argp, &var, sizeof(var)))
1113 			ret = -EFAULT;
1114 		break;
1115 	case FBIOGET_FSCREENINFO:
1116 		if (!lock_fb_info(info))
1117 			return -ENODEV;
1118 		fix = info->fix;
1119 		unlock_fb_info(info);
1120 
1121 		ret = copy_to_user(argp, &fix, sizeof(fix)) ? -EFAULT : 0;
1122 		break;
1123 	case FBIOPUTCMAP:
1124 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1125 			return -EFAULT;
1126 		ret = fb_set_user_cmap(&cmap, info);
1127 		break;
1128 	case FBIOGETCMAP:
1129 		if (copy_from_user(&cmap, argp, sizeof(cmap)))
1130 			return -EFAULT;
1131 		if (!lock_fb_info(info))
1132 			return -ENODEV;
1133 		cmap_from = info->cmap;
1134 		unlock_fb_info(info);
1135 		ret = fb_cmap_to_user(&cmap_from, &cmap);
1136 		break;
1137 	case FBIOPAN_DISPLAY:
1138 		if (copy_from_user(&var, argp, sizeof(var)))
1139 			return -EFAULT;
1140 		console_lock();
1141 		if (!lock_fb_info(info)) {
1142 			console_unlock();
1143 			return -ENODEV;
1144 		}
1145 		ret = fb_pan_display(info, &var);
1146 		unlock_fb_info(info);
1147 		console_unlock();
1148 		if (ret == 0 && copy_to_user(argp, &var, sizeof(var)))
1149 			return -EFAULT;
1150 		break;
1151 	case FBIO_CURSOR:
1152 		ret = -EINVAL;
1153 		break;
1154 	case FBIOGET_CON2FBMAP:
1155 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1156 			return -EFAULT;
1157 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1158 			return -EINVAL;
1159 		con2fb.framebuffer = -1;
1160 		event.data = &con2fb;
1161 		if (!lock_fb_info(info))
1162 			return -ENODEV;
1163 		event.info = info;
1164 		fb_notifier_call_chain(FB_EVENT_GET_CONSOLE_MAP, &event);
1165 		unlock_fb_info(info);
1166 		ret = copy_to_user(argp, &con2fb, sizeof(con2fb)) ? -EFAULT : 0;
1167 		break;
1168 	case FBIOPUT_CON2FBMAP:
1169 		if (copy_from_user(&con2fb, argp, sizeof(con2fb)))
1170 			return -EFAULT;
1171 		if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES)
1172 			return -EINVAL;
1173 		if (con2fb.framebuffer >= FB_MAX)
1174 			return -EINVAL;
1175 		if (!registered_fb[con2fb.framebuffer])
1176 			request_module("fb%d", con2fb.framebuffer);
1177 		if (!registered_fb[con2fb.framebuffer]) {
1178 			ret = -EINVAL;
1179 			break;
1180 		}
1181 		event.data = &con2fb;
1182 		console_lock();
1183 		if (!lock_fb_info(info)) {
1184 			console_unlock();
1185 			return -ENODEV;
1186 		}
1187 		event.info = info;
1188 		ret = fb_notifier_call_chain(FB_EVENT_SET_CONSOLE_MAP, &event);
1189 		unlock_fb_info(info);
1190 		console_unlock();
1191 		break;
1192 	case FBIOBLANK:
1193 		console_lock();
1194 		if (!lock_fb_info(info)) {
1195 			console_unlock();
1196 			return -ENODEV;
1197 		}
1198 		info->flags |= FBINFO_MISC_USEREVENT;
1199 		ret = fb_blank(info, arg);
1200 		info->flags &= ~FBINFO_MISC_USEREVENT;
1201 		unlock_fb_info(info);
1202 		console_unlock();
1203 		break;
1204 	default:
1205 		if (!lock_fb_info(info))
1206 			return -ENODEV;
1207 		fb = info->fbops;
1208 		if (fb->fb_ioctl)
1209 			ret = fb->fb_ioctl(info, cmd, arg);
1210 		else
1211 			ret = -ENOTTY;
1212 		unlock_fb_info(info);
1213 	}
1214 	return ret;
1215 }
1216 
1217 static long fb_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
1218 {
1219 	struct fb_info *info = file_fb_info(file);
1220 
1221 	if (!info)
1222 		return -ENODEV;
1223 	return do_fb_ioctl(info, cmd, arg);
1224 }
1225 
1226 #ifdef CONFIG_COMPAT
1227 struct fb_fix_screeninfo32 {
1228 	char			id[16];
1229 	compat_caddr_t		smem_start;
1230 	u32			smem_len;
1231 	u32			type;
1232 	u32			type_aux;
1233 	u32			visual;
1234 	u16			xpanstep;
1235 	u16			ypanstep;
1236 	u16			ywrapstep;
1237 	u32			line_length;
1238 	compat_caddr_t		mmio_start;
1239 	u32			mmio_len;
1240 	u32			accel;
1241 	u16			reserved[3];
1242 };
1243 
1244 struct fb_cmap32 {
1245 	u32			start;
1246 	u32			len;
1247 	compat_caddr_t	red;
1248 	compat_caddr_t	green;
1249 	compat_caddr_t	blue;
1250 	compat_caddr_t	transp;
1251 };
1252 
1253 static int fb_getput_cmap(struct fb_info *info, unsigned int cmd,
1254 			  unsigned long arg)
1255 {
1256 	struct fb_cmap_user __user *cmap;
1257 	struct fb_cmap32 __user *cmap32;
1258 	__u32 data;
1259 	int err;
1260 
1261 	cmap = compat_alloc_user_space(sizeof(*cmap));
1262 	cmap32 = compat_ptr(arg);
1263 
1264 	if (copy_in_user(&cmap->start, &cmap32->start, 2 * sizeof(__u32)))
1265 		return -EFAULT;
1266 
1267 	if (get_user(data, &cmap32->red) ||
1268 	    put_user(compat_ptr(data), &cmap->red) ||
1269 	    get_user(data, &cmap32->green) ||
1270 	    put_user(compat_ptr(data), &cmap->green) ||
1271 	    get_user(data, &cmap32->blue) ||
1272 	    put_user(compat_ptr(data), &cmap->blue) ||
1273 	    get_user(data, &cmap32->transp) ||
1274 	    put_user(compat_ptr(data), &cmap->transp))
1275 		return -EFAULT;
1276 
1277 	err = do_fb_ioctl(info, cmd, (unsigned long) cmap);
1278 
1279 	if (!err) {
1280 		if (copy_in_user(&cmap32->start,
1281 				 &cmap->start,
1282 				 2 * sizeof(__u32)))
1283 			err = -EFAULT;
1284 	}
1285 	return err;
1286 }
1287 
1288 static int do_fscreeninfo_to_user(struct fb_fix_screeninfo *fix,
1289 				  struct fb_fix_screeninfo32 __user *fix32)
1290 {
1291 	__u32 data;
1292 	int err;
1293 
1294 	err = copy_to_user(&fix32->id, &fix->id, sizeof(fix32->id));
1295 
1296 	data = (__u32) (unsigned long) fix->smem_start;
1297 	err |= put_user(data, &fix32->smem_start);
1298 
1299 	err |= put_user(fix->smem_len, &fix32->smem_len);
1300 	err |= put_user(fix->type, &fix32->type);
1301 	err |= put_user(fix->type_aux, &fix32->type_aux);
1302 	err |= put_user(fix->visual, &fix32->visual);
1303 	err |= put_user(fix->xpanstep, &fix32->xpanstep);
1304 	err |= put_user(fix->ypanstep, &fix32->ypanstep);
1305 	err |= put_user(fix->ywrapstep, &fix32->ywrapstep);
1306 	err |= put_user(fix->line_length, &fix32->line_length);
1307 
1308 	data = (__u32) (unsigned long) fix->mmio_start;
1309 	err |= put_user(data, &fix32->mmio_start);
1310 
1311 	err |= put_user(fix->mmio_len, &fix32->mmio_len);
1312 	err |= put_user(fix->accel, &fix32->accel);
1313 	err |= copy_to_user(fix32->reserved, fix->reserved,
1314 			    sizeof(fix->reserved));
1315 
1316 	if (err)
1317 		return -EFAULT;
1318 	return 0;
1319 }
1320 
1321 static int fb_get_fscreeninfo(struct fb_info *info, unsigned int cmd,
1322 			      unsigned long arg)
1323 {
1324 	struct fb_fix_screeninfo fix;
1325 
1326 	if (!lock_fb_info(info))
1327 		return -ENODEV;
1328 	fix = info->fix;
1329 	unlock_fb_info(info);
1330 	return do_fscreeninfo_to_user(&fix, compat_ptr(arg));
1331 }
1332 
1333 static long fb_compat_ioctl(struct file *file, unsigned int cmd,
1334 			    unsigned long arg)
1335 {
1336 	struct fb_info *info = file_fb_info(file);
1337 	struct fb_ops *fb;
1338 	long ret = -ENOIOCTLCMD;
1339 
1340 	if (!info)
1341 		return -ENODEV;
1342 	fb = info->fbops;
1343 	switch(cmd) {
1344 	case FBIOGET_VSCREENINFO:
1345 	case FBIOPUT_VSCREENINFO:
1346 	case FBIOPAN_DISPLAY:
1347 	case FBIOGET_CON2FBMAP:
1348 	case FBIOPUT_CON2FBMAP:
1349 		arg = (unsigned long) compat_ptr(arg);
1350 	case FBIOBLANK:
1351 		ret = do_fb_ioctl(info, cmd, arg);
1352 		break;
1353 
1354 	case FBIOGET_FSCREENINFO:
1355 		ret = fb_get_fscreeninfo(info, cmd, arg);
1356 		break;
1357 
1358 	case FBIOGETCMAP:
1359 	case FBIOPUTCMAP:
1360 		ret = fb_getput_cmap(info, cmd, arg);
1361 		break;
1362 
1363 	default:
1364 		if (fb->fb_compat_ioctl)
1365 			ret = fb->fb_compat_ioctl(info, cmd, arg);
1366 		break;
1367 	}
1368 	return ret;
1369 }
1370 #endif
1371 
1372 static int
1373 fb_mmap(struct file *file, struct vm_area_struct * vma)
1374 {
1375 	struct fb_info *info = file_fb_info(file);
1376 	struct fb_ops *fb;
1377 	unsigned long mmio_pgoff;
1378 	unsigned long start;
1379 	u32 len;
1380 
1381 	if (!info)
1382 		return -ENODEV;
1383 	fb = info->fbops;
1384 	if (!fb)
1385 		return -ENODEV;
1386 	mutex_lock(&info->mm_lock);
1387 	if (fb->fb_mmap) {
1388 		int res;
1389 
1390 		/*
1391 		 * The framebuffer needs to be accessed decrypted, be sure
1392 		 * SME protection is removed ahead of the call
1393 		 */
1394 		vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1395 		res = fb->fb_mmap(info, vma);
1396 		mutex_unlock(&info->mm_lock);
1397 		return res;
1398 	}
1399 
1400 	/*
1401 	 * Ugh. This can be either the frame buffer mapping, or
1402 	 * if pgoff points past it, the mmio mapping.
1403 	 */
1404 	start = info->fix.smem_start;
1405 	len = info->fix.smem_len;
1406 	mmio_pgoff = PAGE_ALIGN((start & ~PAGE_MASK) + len) >> PAGE_SHIFT;
1407 	if (vma->vm_pgoff >= mmio_pgoff) {
1408 		if (info->var.accel_flags) {
1409 			mutex_unlock(&info->mm_lock);
1410 			return -EINVAL;
1411 		}
1412 
1413 		vma->vm_pgoff -= mmio_pgoff;
1414 		start = info->fix.mmio_start;
1415 		len = info->fix.mmio_len;
1416 	}
1417 	mutex_unlock(&info->mm_lock);
1418 
1419 	vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
1420 	/*
1421 	 * The framebuffer needs to be accessed decrypted, be sure
1422 	 * SME protection is removed
1423 	 */
1424 	vma->vm_page_prot = pgprot_decrypted(vma->vm_page_prot);
1425 	fb_pgprotect(file, vma, start);
1426 
1427 	return vm_iomap_memory(vma, start, len);
1428 }
1429 
1430 static int
1431 fb_open(struct inode *inode, struct file *file)
1432 __acquires(&info->lock)
1433 __releases(&info->lock)
1434 {
1435 	int fbidx = iminor(inode);
1436 	struct fb_info *info;
1437 	int res = 0;
1438 
1439 	info = get_fb_info(fbidx);
1440 	if (!info) {
1441 		request_module("fb%d", fbidx);
1442 		info = get_fb_info(fbidx);
1443 		if (!info)
1444 			return -ENODEV;
1445 	}
1446 	if (IS_ERR(info))
1447 		return PTR_ERR(info);
1448 
1449 	mutex_lock(&info->lock);
1450 	if (!try_module_get(info->fbops->owner)) {
1451 		res = -ENODEV;
1452 		goto out;
1453 	}
1454 	file->private_data = info;
1455 	if (info->fbops->fb_open) {
1456 		res = info->fbops->fb_open(info,1);
1457 		if (res)
1458 			module_put(info->fbops->owner);
1459 	}
1460 #ifdef CONFIG_FB_DEFERRED_IO
1461 	if (info->fbdefio)
1462 		fb_deferred_io_open(info, inode, file);
1463 #endif
1464 out:
1465 	mutex_unlock(&info->lock);
1466 	if (res)
1467 		put_fb_info(info);
1468 	return res;
1469 }
1470 
1471 static int
1472 fb_release(struct inode *inode, struct file *file)
1473 __acquires(&info->lock)
1474 __releases(&info->lock)
1475 {
1476 	struct fb_info * const info = file->private_data;
1477 
1478 	mutex_lock(&info->lock);
1479 	if (info->fbops->fb_release)
1480 		info->fbops->fb_release(info,1);
1481 	module_put(info->fbops->owner);
1482 	mutex_unlock(&info->lock);
1483 	put_fb_info(info);
1484 	return 0;
1485 }
1486 
1487 #if defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && !defined(CONFIG_MMU)
1488 unsigned long get_fb_unmapped_area(struct file *filp,
1489 				   unsigned long addr, unsigned long len,
1490 				   unsigned long pgoff, unsigned long flags)
1491 {
1492 	struct fb_info * const info = filp->private_data;
1493 	unsigned long fb_size = PAGE_ALIGN(info->fix.smem_len);
1494 
1495 	if (pgoff > fb_size || len > fb_size - pgoff)
1496 		return -EINVAL;
1497 
1498 	return (unsigned long)info->screen_base + pgoff;
1499 }
1500 #endif
1501 
1502 static const struct file_operations fb_fops = {
1503 	.owner =	THIS_MODULE,
1504 	.read =		fb_read,
1505 	.write =	fb_write,
1506 	.unlocked_ioctl = fb_ioctl,
1507 #ifdef CONFIG_COMPAT
1508 	.compat_ioctl = fb_compat_ioctl,
1509 #endif
1510 	.mmap =		fb_mmap,
1511 	.open =		fb_open,
1512 	.release =	fb_release,
1513 #if defined(HAVE_ARCH_FB_UNMAPPED_AREA) || \
1514 	(defined(CONFIG_FB_PROVIDE_GET_FB_UNMAPPED_AREA) && \
1515 	 !defined(CONFIG_MMU))
1516 	.get_unmapped_area = get_fb_unmapped_area,
1517 #endif
1518 #ifdef CONFIG_FB_DEFERRED_IO
1519 	.fsync =	fb_deferred_io_fsync,
1520 #endif
1521 	.llseek =	default_llseek,
1522 };
1523 
1524 struct class *fb_class;
1525 EXPORT_SYMBOL(fb_class);
1526 
1527 static int fb_check_foreignness(struct fb_info *fi)
1528 {
1529 	const bool foreign_endian = fi->flags & FBINFO_FOREIGN_ENDIAN;
1530 
1531 	fi->flags &= ~FBINFO_FOREIGN_ENDIAN;
1532 
1533 #ifdef __BIG_ENDIAN
1534 	fi->flags |= foreign_endian ? 0 : FBINFO_BE_MATH;
1535 #else
1536 	fi->flags |= foreign_endian ? FBINFO_BE_MATH : 0;
1537 #endif /* __BIG_ENDIAN */
1538 
1539 	if (fi->flags & FBINFO_BE_MATH && !fb_be_math(fi)) {
1540 		pr_err("%s: enable CONFIG_FB_BIG_ENDIAN to "
1541 		       "support this framebuffer\n", fi->fix.id);
1542 		return -ENOSYS;
1543 	} else if (!(fi->flags & FBINFO_BE_MATH) && fb_be_math(fi)) {
1544 		pr_err("%s: enable CONFIG_FB_LITTLE_ENDIAN to "
1545 		       "support this framebuffer\n", fi->fix.id);
1546 		return -ENOSYS;
1547 	}
1548 
1549 	return 0;
1550 }
1551 
1552 static bool apertures_overlap(struct aperture *gen, struct aperture *hw)
1553 {
1554 	/* is the generic aperture base the same as the HW one */
1555 	if (gen->base == hw->base)
1556 		return true;
1557 	/* is the generic aperture base inside the hw base->hw base+size */
1558 	if (gen->base > hw->base && gen->base < hw->base + hw->size)
1559 		return true;
1560 	return false;
1561 }
1562 
1563 static bool fb_do_apertures_overlap(struct apertures_struct *gena,
1564 				    struct apertures_struct *hwa)
1565 {
1566 	int i, j;
1567 	if (!hwa || !gena)
1568 		return false;
1569 
1570 	for (i = 0; i < hwa->count; ++i) {
1571 		struct aperture *h = &hwa->ranges[i];
1572 		for (j = 0; j < gena->count; ++j) {
1573 			struct aperture *g = &gena->ranges[j];
1574 			printk(KERN_DEBUG "checking generic (%llx %llx) vs hw (%llx %llx)\n",
1575 				(unsigned long long)g->base,
1576 				(unsigned long long)g->size,
1577 				(unsigned long long)h->base,
1578 				(unsigned long long)h->size);
1579 			if (apertures_overlap(g, h))
1580 				return true;
1581 		}
1582 	}
1583 
1584 	return false;
1585 }
1586 
1587 static int do_unregister_framebuffer(struct fb_info *fb_info);
1588 
1589 #define VGA_FB_PHYS 0xA0000
1590 static int do_remove_conflicting_framebuffers(struct apertures_struct *a,
1591 					      const char *name, bool primary)
1592 {
1593 	int i, ret;
1594 
1595 	/* check all firmware fbs and kick off if the base addr overlaps */
1596 	for (i = 0 ; i < FB_MAX; i++) {
1597 		struct apertures_struct *gen_aper;
1598 		if (!registered_fb[i])
1599 			continue;
1600 
1601 		if (!(registered_fb[i]->flags & FBINFO_MISC_FIRMWARE))
1602 			continue;
1603 
1604 		gen_aper = registered_fb[i]->apertures;
1605 		if (fb_do_apertures_overlap(gen_aper, a) ||
1606 			(primary && gen_aper && gen_aper->count &&
1607 			 gen_aper->ranges[0].base == VGA_FB_PHYS)) {
1608 
1609 			printk(KERN_INFO "fb: switching to %s from %s\n",
1610 			       name, registered_fb[i]->fix.id);
1611 			ret = do_unregister_framebuffer(registered_fb[i]);
1612 			if (ret)
1613 				return ret;
1614 		}
1615 	}
1616 
1617 	return 0;
1618 }
1619 
1620 static bool lockless_register_fb;
1621 module_param_named_unsafe(lockless_register_fb, lockless_register_fb, bool, 0400);
1622 MODULE_PARM_DESC(lockless_register_fb,
1623 	"Lockless framebuffer registration for debugging [default=off]");
1624 
1625 static int do_register_framebuffer(struct fb_info *fb_info)
1626 {
1627 	int i, ret;
1628 	struct fb_event event;
1629 	struct fb_videomode mode;
1630 
1631 	if (fb_check_foreignness(fb_info))
1632 		return -ENOSYS;
1633 
1634 	ret = do_remove_conflicting_framebuffers(fb_info->apertures,
1635 						 fb_info->fix.id,
1636 						 fb_is_primary_device(fb_info));
1637 	if (ret)
1638 		return ret;
1639 
1640 	if (num_registered_fb == FB_MAX)
1641 		return -ENXIO;
1642 
1643 	num_registered_fb++;
1644 	for (i = 0 ; i < FB_MAX; i++)
1645 		if (!registered_fb[i])
1646 			break;
1647 	fb_info->node = i;
1648 	atomic_set(&fb_info->count, 1);
1649 	mutex_init(&fb_info->lock);
1650 	mutex_init(&fb_info->mm_lock);
1651 
1652 	fb_info->dev = device_create(fb_class, fb_info->device,
1653 				     MKDEV(FB_MAJOR, i), NULL, "fb%d", i);
1654 	if (IS_ERR(fb_info->dev)) {
1655 		/* Not fatal */
1656 		printk(KERN_WARNING "Unable to create device for framebuffer %d; errno = %ld\n", i, PTR_ERR(fb_info->dev));
1657 		fb_info->dev = NULL;
1658 	} else
1659 		fb_init_device(fb_info);
1660 
1661 	if (fb_info->pixmap.addr == NULL) {
1662 		fb_info->pixmap.addr = kmalloc(FBPIXMAPSIZE, GFP_KERNEL);
1663 		if (fb_info->pixmap.addr) {
1664 			fb_info->pixmap.size = FBPIXMAPSIZE;
1665 			fb_info->pixmap.buf_align = 1;
1666 			fb_info->pixmap.scan_align = 1;
1667 			fb_info->pixmap.access_align = 32;
1668 			fb_info->pixmap.flags = FB_PIXMAP_DEFAULT;
1669 		}
1670 	}
1671 	fb_info->pixmap.offset = 0;
1672 
1673 	if (!fb_info->pixmap.blit_x)
1674 		fb_info->pixmap.blit_x = ~(u32)0;
1675 
1676 	if (!fb_info->pixmap.blit_y)
1677 		fb_info->pixmap.blit_y = ~(u32)0;
1678 
1679 	if (!fb_info->modelist.prev || !fb_info->modelist.next)
1680 		INIT_LIST_HEAD(&fb_info->modelist);
1681 
1682 	if (fb_info->skip_vt_switch)
1683 		pm_vt_switch_required(fb_info->dev, false);
1684 	else
1685 		pm_vt_switch_required(fb_info->dev, true);
1686 
1687 	fb_var_to_videomode(&mode, &fb_info->var);
1688 	fb_add_videomode(&mode, &fb_info->modelist);
1689 	registered_fb[i] = fb_info;
1690 
1691 	event.info = fb_info;
1692 	if (!lockless_register_fb)
1693 		console_lock();
1694 	if (!lock_fb_info(fb_info)) {
1695 		if (!lockless_register_fb)
1696 			console_unlock();
1697 		return -ENODEV;
1698 	}
1699 
1700 	fb_notifier_call_chain(FB_EVENT_FB_REGISTERED, &event);
1701 	unlock_fb_info(fb_info);
1702 	if (!lockless_register_fb)
1703 		console_unlock();
1704 	return 0;
1705 }
1706 
1707 static int do_unregister_framebuffer(struct fb_info *fb_info)
1708 {
1709 	struct fb_event event;
1710 	int i, ret = 0;
1711 
1712 	i = fb_info->node;
1713 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1714 		return -EINVAL;
1715 
1716 	console_lock();
1717 	if (!lock_fb_info(fb_info)) {
1718 		console_unlock();
1719 		return -ENODEV;
1720 	}
1721 
1722 	event.info = fb_info;
1723 	ret = fb_notifier_call_chain(FB_EVENT_FB_UNBIND, &event);
1724 	unlock_fb_info(fb_info);
1725 	console_unlock();
1726 
1727 	if (ret)
1728 		return -EINVAL;
1729 
1730 	pm_vt_switch_unregister(fb_info->dev);
1731 
1732 	unlink_framebuffer(fb_info);
1733 	if (fb_info->pixmap.addr &&
1734 	    (fb_info->pixmap.flags & FB_PIXMAP_DEFAULT))
1735 		kfree(fb_info->pixmap.addr);
1736 	fb_destroy_modelist(&fb_info->modelist);
1737 	registered_fb[i] = NULL;
1738 	num_registered_fb--;
1739 	fb_cleanup_device(fb_info);
1740 	event.info = fb_info;
1741 	console_lock();
1742 	fb_notifier_call_chain(FB_EVENT_FB_UNREGISTERED, &event);
1743 	console_unlock();
1744 
1745 	/* this may free fb info */
1746 	put_fb_info(fb_info);
1747 	return 0;
1748 }
1749 
1750 int unlink_framebuffer(struct fb_info *fb_info)
1751 {
1752 	int i;
1753 
1754 	i = fb_info->node;
1755 	if (i < 0 || i >= FB_MAX || registered_fb[i] != fb_info)
1756 		return -EINVAL;
1757 
1758 	if (fb_info->dev) {
1759 		device_destroy(fb_class, MKDEV(FB_MAJOR, i));
1760 		fb_info->dev = NULL;
1761 	}
1762 	return 0;
1763 }
1764 EXPORT_SYMBOL(unlink_framebuffer);
1765 
1766 int remove_conflicting_framebuffers(struct apertures_struct *a,
1767 				    const char *name, bool primary)
1768 {
1769 	int ret;
1770 
1771 	mutex_lock(&registration_lock);
1772 	ret = do_remove_conflicting_framebuffers(a, name, primary);
1773 	mutex_unlock(&registration_lock);
1774 
1775 	return ret;
1776 }
1777 EXPORT_SYMBOL(remove_conflicting_framebuffers);
1778 
1779 /**
1780  *	register_framebuffer - registers a frame buffer device
1781  *	@fb_info: frame buffer info structure
1782  *
1783  *	Registers a frame buffer device @fb_info.
1784  *
1785  *	Returns negative errno on error, or zero for success.
1786  *
1787  */
1788 int
1789 register_framebuffer(struct fb_info *fb_info)
1790 {
1791 	int ret;
1792 
1793 	mutex_lock(&registration_lock);
1794 	ret = do_register_framebuffer(fb_info);
1795 	mutex_unlock(&registration_lock);
1796 
1797 	return ret;
1798 }
1799 EXPORT_SYMBOL(register_framebuffer);
1800 
1801 /**
1802  *	unregister_framebuffer - releases a frame buffer device
1803  *	@fb_info: frame buffer info structure
1804  *
1805  *	Unregisters a frame buffer device @fb_info.
1806  *
1807  *	Returns negative errno on error, or zero for success.
1808  *
1809  *      This function will also notify the framebuffer console
1810  *      to release the driver.
1811  *
1812  *      This is meant to be called within a driver's module_exit()
1813  *      function. If this is called outside module_exit(), ensure
1814  *      that the driver implements fb_open() and fb_release() to
1815  *      check that no processes are using the device.
1816  */
1817 int
1818 unregister_framebuffer(struct fb_info *fb_info)
1819 {
1820 	int ret;
1821 
1822 	mutex_lock(&registration_lock);
1823 	ret = do_unregister_framebuffer(fb_info);
1824 	mutex_unlock(&registration_lock);
1825 
1826 	return ret;
1827 }
1828 EXPORT_SYMBOL(unregister_framebuffer);
1829 
1830 /**
1831  *	fb_set_suspend - low level driver signals suspend
1832  *	@info: framebuffer affected
1833  *	@state: 0 = resuming, !=0 = suspending
1834  *
1835  *	This is meant to be used by low level drivers to
1836  * 	signal suspend/resume to the core & clients.
1837  *	It must be called with the console semaphore held
1838  */
1839 void fb_set_suspend(struct fb_info *info, int state)
1840 {
1841 	struct fb_event event;
1842 
1843 	event.info = info;
1844 	if (state) {
1845 		fb_notifier_call_chain(FB_EVENT_SUSPEND, &event);
1846 		info->state = FBINFO_STATE_SUSPENDED;
1847 	} else {
1848 		info->state = FBINFO_STATE_RUNNING;
1849 		fb_notifier_call_chain(FB_EVENT_RESUME, &event);
1850 	}
1851 }
1852 EXPORT_SYMBOL(fb_set_suspend);
1853 
1854 /**
1855  *	fbmem_init - init frame buffer subsystem
1856  *
1857  *	Initialize the frame buffer subsystem.
1858  *
1859  *	NOTE: This function is _only_ to be called by drivers/char/mem.c.
1860  *
1861  */
1862 
1863 static int __init
1864 fbmem_init(void)
1865 {
1866 	int ret;
1867 
1868 	if (!proc_create_seq("fb", 0, NULL, &proc_fb_seq_ops))
1869 		return -ENOMEM;
1870 
1871 	ret = register_chrdev(FB_MAJOR, "fb", &fb_fops);
1872 	if (ret) {
1873 		printk("unable to get major %d for fb devs\n", FB_MAJOR);
1874 		goto err_chrdev;
1875 	}
1876 
1877 	fb_class = class_create(THIS_MODULE, "graphics");
1878 	if (IS_ERR(fb_class)) {
1879 		ret = PTR_ERR(fb_class);
1880 		pr_warn("Unable to create fb class; errno = %d\n", ret);
1881 		fb_class = NULL;
1882 		goto err_class;
1883 	}
1884 
1885 	fb_console_init();
1886 
1887 	return 0;
1888 
1889 err_class:
1890 	unregister_chrdev(FB_MAJOR, "fb");
1891 err_chrdev:
1892 	remove_proc_entry("fb", NULL);
1893 	return ret;
1894 }
1895 
1896 #ifdef MODULE
1897 module_init(fbmem_init);
1898 static void __exit
1899 fbmem_exit(void)
1900 {
1901 	fb_console_exit();
1902 
1903 	remove_proc_entry("fb", NULL);
1904 	class_destroy(fb_class);
1905 	unregister_chrdev(FB_MAJOR, "fb");
1906 }
1907 
1908 module_exit(fbmem_exit);
1909 MODULE_LICENSE("GPL");
1910 MODULE_DESCRIPTION("Framebuffer base");
1911 #else
1912 subsys_initcall(fbmem_init);
1913 #endif
1914 
1915 int fb_new_modelist(struct fb_info *info)
1916 {
1917 	struct fb_event event;
1918 	struct fb_var_screeninfo var = info->var;
1919 	struct list_head *pos, *n;
1920 	struct fb_modelist *modelist;
1921 	struct fb_videomode *m, mode;
1922 	int err = 1;
1923 
1924 	list_for_each_safe(pos, n, &info->modelist) {
1925 		modelist = list_entry(pos, struct fb_modelist, list);
1926 		m = &modelist->mode;
1927 		fb_videomode_to_var(&var, m);
1928 		var.activate = FB_ACTIVATE_TEST;
1929 		err = fb_set_var(info, &var);
1930 		fb_var_to_videomode(&mode, &var);
1931 		if (err || !fb_mode_is_equal(m, &mode)) {
1932 			list_del(pos);
1933 			kfree(pos);
1934 		}
1935 	}
1936 
1937 	err = 1;
1938 
1939 	if (!list_empty(&info->modelist)) {
1940 		event.info = info;
1941 		err = fb_notifier_call_chain(FB_EVENT_NEW_MODELIST, &event);
1942 	}
1943 
1944 	return err;
1945 }
1946 
1947 MODULE_LICENSE("GPL");
1948