b15d720eda4ca5ab94c656ed3faa6858bd38a408
[cascardo/linux.git] / drivers / gpu / drm / drm_crtc.c
1 /*
2  * Copyright (c) 2006-2008 Intel Corporation
3  * Copyright (c) 2007 Dave Airlie <airlied@linux.ie>
4  * Copyright (c) 2008 Red Hat Inc.
5  *
6  * DRM core CRTC related functions
7  *
8  * Permission to use, copy, modify, distribute, and sell this software and its
9  * documentation for any purpose is hereby granted without fee, provided that
10  * the above copyright notice appear in all copies and that both that copyright
11  * notice and this permission notice appear in supporting documentation, and
12  * that the name of the copyright holders not be used in advertising or
13  * publicity pertaining to distribution of the software without specific,
14  * written prior permission.  The copyright holders make no representations
15  * about the suitability of this software for any purpose.  It is provided "as
16  * is" without express or implied warranty.
17  *
18  * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
19  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
20  * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
21  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
22  * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
23  * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
24  * OF THIS SOFTWARE.
25  *
26  * Authors:
27  *      Keith Packard
28  *      Eric Anholt <eric@anholt.net>
29  *      Dave Airlie <airlied@linux.ie>
30  *      Jesse Barnes <jesse.barnes@intel.com>
31  */
32 #include <linux/ctype.h>
33 #include <linux/list.h>
34 #include <linux/slab.h>
35 #include <linux/export.h>
36 #include <drm/drmP.h>
37 #include <drm/drm_crtc.h>
38 #include <drm/drm_edid.h>
39 #include <drm/drm_fourcc.h>
40 #include <drm/drm_modeset_lock.h>
41 #include <drm/drm_atomic.h>
42
43 #include "drm_crtc_internal.h"
44 #include "drm_internal.h"
45
46 static struct drm_framebuffer *add_framebuffer_internal(struct drm_device *dev,
47                                                         struct drm_mode_fb_cmd2 *r,
48                                                         struct drm_file *file_priv);
49
50 /* Avoid boilerplate.  I'm tired of typing. */
51 #define DRM_ENUM_NAME_FN(fnname, list)                          \
52         const char *fnname(int val)                             \
53         {                                                       \
54                 int i;                                          \
55                 for (i = 0; i < ARRAY_SIZE(list); i++) {        \
56                         if (list[i].type == val)                \
57                                 return list[i].name;            \
58                 }                                               \
59                 return "(unknown)";                             \
60         }
61
62 /*
63  * Global properties
64  */
65 static const struct drm_prop_enum_list drm_dpms_enum_list[] = {
66         { DRM_MODE_DPMS_ON, "On" },
67         { DRM_MODE_DPMS_STANDBY, "Standby" },
68         { DRM_MODE_DPMS_SUSPEND, "Suspend" },
69         { DRM_MODE_DPMS_OFF, "Off" }
70 };
71
72 DRM_ENUM_NAME_FN(drm_get_dpms_name, drm_dpms_enum_list)
73
74 static const struct drm_prop_enum_list drm_plane_type_enum_list[] = {
75         { DRM_PLANE_TYPE_OVERLAY, "Overlay" },
76         { DRM_PLANE_TYPE_PRIMARY, "Primary" },
77         { DRM_PLANE_TYPE_CURSOR, "Cursor" },
78 };
79
80 /*
81  * Optional properties
82  */
83 static const struct drm_prop_enum_list drm_scaling_mode_enum_list[] = {
84         { DRM_MODE_SCALE_NONE, "None" },
85         { DRM_MODE_SCALE_FULLSCREEN, "Full" },
86         { DRM_MODE_SCALE_CENTER, "Center" },
87         { DRM_MODE_SCALE_ASPECT, "Full aspect" },
88 };
89
90 static const struct drm_prop_enum_list drm_aspect_ratio_enum_list[] = {
91         { DRM_MODE_PICTURE_ASPECT_NONE, "Automatic" },
92         { DRM_MODE_PICTURE_ASPECT_4_3, "4:3" },
93         { DRM_MODE_PICTURE_ASPECT_16_9, "16:9" },
94 };
95
96 /*
97  * Non-global properties, but "required" for certain connectors.
98  */
99 static const struct drm_prop_enum_list drm_dvi_i_select_enum_list[] = {
100         { DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
101         { DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
102         { DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
103 };
104
105 DRM_ENUM_NAME_FN(drm_get_dvi_i_select_name, drm_dvi_i_select_enum_list)
106
107 static const struct drm_prop_enum_list drm_dvi_i_subconnector_enum_list[] = {
108         { DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
109         { DRM_MODE_SUBCONNECTOR_DVID,      "DVI-D"     }, /* DVI-I  */
110         { DRM_MODE_SUBCONNECTOR_DVIA,      "DVI-A"     }, /* DVI-I  */
111 };
112
113 DRM_ENUM_NAME_FN(drm_get_dvi_i_subconnector_name,
114                  drm_dvi_i_subconnector_enum_list)
115
116 static const struct drm_prop_enum_list drm_tv_select_enum_list[] = {
117         { DRM_MODE_SUBCONNECTOR_Automatic, "Automatic" }, /* DVI-I and TV-out */
118         { DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
119         { DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
120         { DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
121         { DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
122 };
123
124 DRM_ENUM_NAME_FN(drm_get_tv_select_name, drm_tv_select_enum_list)
125
126 static const struct drm_prop_enum_list drm_tv_subconnector_enum_list[] = {
127         { DRM_MODE_SUBCONNECTOR_Unknown,   "Unknown"   }, /* DVI-I and TV-out */
128         { DRM_MODE_SUBCONNECTOR_Composite, "Composite" }, /* TV-out */
129         { DRM_MODE_SUBCONNECTOR_SVIDEO,    "SVIDEO"    }, /* TV-out */
130         { DRM_MODE_SUBCONNECTOR_Component, "Component" }, /* TV-out */
131         { DRM_MODE_SUBCONNECTOR_SCART,     "SCART"     }, /* TV-out */
132 };
133
134 DRM_ENUM_NAME_FN(drm_get_tv_subconnector_name,
135                  drm_tv_subconnector_enum_list)
136
137 static const struct drm_prop_enum_list drm_dirty_info_enum_list[] = {
138         { DRM_MODE_DIRTY_OFF,      "Off"      },
139         { DRM_MODE_DIRTY_ON,       "On"       },
140         { DRM_MODE_DIRTY_ANNOTATE, "Annotate" },
141 };
142
143 struct drm_conn_prop_enum_list {
144         int type;
145         const char *name;
146         struct ida ida;
147 };
148
149 /*
150  * Connector and encoder types.
151  */
152 static struct drm_conn_prop_enum_list drm_connector_enum_list[] = {
153         { DRM_MODE_CONNECTOR_Unknown, "Unknown" },
154         { DRM_MODE_CONNECTOR_VGA, "VGA" },
155         { DRM_MODE_CONNECTOR_DVII, "DVI-I" },
156         { DRM_MODE_CONNECTOR_DVID, "DVI-D" },
157         { DRM_MODE_CONNECTOR_DVIA, "DVI-A" },
158         { DRM_MODE_CONNECTOR_Composite, "Composite" },
159         { DRM_MODE_CONNECTOR_SVIDEO, "SVIDEO" },
160         { DRM_MODE_CONNECTOR_LVDS, "LVDS" },
161         { DRM_MODE_CONNECTOR_Component, "Component" },
162         { DRM_MODE_CONNECTOR_9PinDIN, "DIN" },
163         { DRM_MODE_CONNECTOR_DisplayPort, "DP" },
164         { DRM_MODE_CONNECTOR_HDMIA, "HDMI-A" },
165         { DRM_MODE_CONNECTOR_HDMIB, "HDMI-B" },
166         { DRM_MODE_CONNECTOR_TV, "TV" },
167         { DRM_MODE_CONNECTOR_eDP, "eDP" },
168         { DRM_MODE_CONNECTOR_VIRTUAL, "Virtual" },
169         { DRM_MODE_CONNECTOR_DSI, "DSI" },
170 };
171
172 static const struct drm_prop_enum_list drm_encoder_enum_list[] = {
173         { DRM_MODE_ENCODER_NONE, "None" },
174         { DRM_MODE_ENCODER_DAC, "DAC" },
175         { DRM_MODE_ENCODER_TMDS, "TMDS" },
176         { DRM_MODE_ENCODER_LVDS, "LVDS" },
177         { DRM_MODE_ENCODER_TVDAC, "TV" },
178         { DRM_MODE_ENCODER_VIRTUAL, "Virtual" },
179         { DRM_MODE_ENCODER_DSI, "DSI" },
180         { DRM_MODE_ENCODER_DPMST, "DP MST" },
181 };
182
183 static const struct drm_prop_enum_list drm_subpixel_enum_list[] = {
184         { SubPixelUnknown, "Unknown" },
185         { SubPixelHorizontalRGB, "Horizontal RGB" },
186         { SubPixelHorizontalBGR, "Horizontal BGR" },
187         { SubPixelVerticalRGB, "Vertical RGB" },
188         { SubPixelVerticalBGR, "Vertical BGR" },
189         { SubPixelNone, "None" },
190 };
191
192 void drm_connector_ida_init(void)
193 {
194         int i;
195
196         for (i = 0; i < ARRAY_SIZE(drm_connector_enum_list); i++)
197                 ida_init(&drm_connector_enum_list[i].ida);
198 }
199
200 void drm_connector_ida_destroy(void)
201 {
202         int i;
203
204         for (i = 0; i < ARRAY_SIZE(drm_connector_enum_list); i++)
205                 ida_destroy(&drm_connector_enum_list[i].ida);
206 }
207
208 /**
209  * drm_get_connector_status_name - return a string for connector status
210  * @status: connector status to compute name of
211  *
212  * In contrast to the other drm_get_*_name functions this one here returns a
213  * const pointer and hence is threadsafe.
214  */
215 const char *drm_get_connector_status_name(enum drm_connector_status status)
216 {
217         if (status == connector_status_connected)
218                 return "connected";
219         else if (status == connector_status_disconnected)
220                 return "disconnected";
221         else
222                 return "unknown";
223 }
224 EXPORT_SYMBOL(drm_get_connector_status_name);
225
226 /**
227  * drm_get_subpixel_order_name - return a string for a given subpixel enum
228  * @order: enum of subpixel_order
229  *
230  * Note you could abuse this and return something out of bounds, but that
231  * would be a caller error.  No unscrubbed user data should make it here.
232  */
233 const char *drm_get_subpixel_order_name(enum subpixel_order order)
234 {
235         return drm_subpixel_enum_list[order].name;
236 }
237 EXPORT_SYMBOL(drm_get_subpixel_order_name);
238
239 static char printable_char(int c)
240 {
241         return isascii(c) && isprint(c) ? c : '?';
242 }
243
244 /**
245  * drm_get_format_name - return a string for drm fourcc format
246  * @format: format to compute name of
247  *
248  * Note that the buffer used by this function is globally shared and owned by
249  * the function itself.
250  *
251  * FIXME: This isn't really multithreading safe.
252  */
253 const char *drm_get_format_name(uint32_t format)
254 {
255         static char buf[32];
256
257         snprintf(buf, sizeof(buf),
258                  "%c%c%c%c %s-endian (0x%08x)",
259                  printable_char(format & 0xff),
260                  printable_char((format >> 8) & 0xff),
261                  printable_char((format >> 16) & 0xff),
262                  printable_char((format >> 24) & 0x7f),
263                  format & DRM_FORMAT_BIG_ENDIAN ? "big" : "little",
264                  format);
265
266         return buf;
267 }
268 EXPORT_SYMBOL(drm_get_format_name);
269
270 /*
271  * Internal function to assign a slot in the object idr and optionally
272  * register the object into the idr.
273  */
274 static int drm_mode_object_get_reg(struct drm_device *dev,
275                                    struct drm_mode_object *obj,
276                                    uint32_t obj_type,
277                                    bool register_obj)
278 {
279         int ret;
280
281         mutex_lock(&dev->mode_config.idr_mutex);
282         ret = idr_alloc(&dev->mode_config.crtc_idr, register_obj ? obj : NULL, 1, 0, GFP_KERNEL);
283         if (ret >= 0) {
284                 /*
285                  * Set up the object linking under the protection of the idr
286                  * lock so that other users can't see inconsistent state.
287                  */
288                 obj->id = ret;
289                 obj->type = obj_type;
290         }
291         mutex_unlock(&dev->mode_config.idr_mutex);
292
293         return ret < 0 ? ret : 0;
294 }
295
296 /**
297  * drm_mode_object_get - allocate a new modeset identifier
298  * @dev: DRM device
299  * @obj: object pointer, used to generate unique ID
300  * @obj_type: object type
301  *
302  * Create a unique identifier based on @ptr in @dev's identifier space.  Used
303  * for tracking modes, CRTCs and connectors. Note that despite the _get postfix
304  * modeset identifiers are _not_ reference counted. Hence don't use this for
305  * reference counted modeset objects like framebuffers.
306  *
307  * Returns:
308  * New unique (relative to other objects in @dev) integer identifier for the
309  * object.
310  */
311 int drm_mode_object_get(struct drm_device *dev,
312                         struct drm_mode_object *obj, uint32_t obj_type)
313 {
314         return drm_mode_object_get_reg(dev, obj, obj_type, true);
315 }
316
317 static void drm_mode_object_register(struct drm_device *dev,
318                                      struct drm_mode_object *obj)
319 {
320         mutex_lock(&dev->mode_config.idr_mutex);
321         idr_replace(&dev->mode_config.crtc_idr, obj, obj->id);
322         mutex_unlock(&dev->mode_config.idr_mutex);
323 }
324
325 /**
326  * drm_mode_object_put - free a modeset identifer
327  * @dev: DRM device
328  * @object: object to free
329  *
330  * Free @id from @dev's unique identifier pool. Note that despite the _get
331  * postfix modeset identifiers are _not_ reference counted. Hence don't use this
332  * for reference counted modeset objects like framebuffers.
333  */
334 void drm_mode_object_put(struct drm_device *dev,
335                          struct drm_mode_object *object)
336 {
337         mutex_lock(&dev->mode_config.idr_mutex);
338         idr_remove(&dev->mode_config.crtc_idr, object->id);
339         mutex_unlock(&dev->mode_config.idr_mutex);
340 }
341
342 static struct drm_mode_object *_object_find(struct drm_device *dev,
343                 uint32_t id, uint32_t type)
344 {
345         struct drm_mode_object *obj = NULL;
346
347         mutex_lock(&dev->mode_config.idr_mutex);
348         obj = idr_find(&dev->mode_config.crtc_idr, id);
349         if (obj && type != DRM_MODE_OBJECT_ANY && obj->type != type)
350                 obj = NULL;
351         if (obj && obj->id != id)
352                 obj = NULL;
353         /* don't leak out unref'd fb's */
354         if (obj && (obj->type == DRM_MODE_OBJECT_FB))
355                 obj = NULL;
356         mutex_unlock(&dev->mode_config.idr_mutex);
357
358         return obj;
359 }
360
361 /**
362  * drm_mode_object_find - look up a drm object with static lifetime
363  * @dev: drm device
364  * @id: id of the mode object
365  * @type: type of the mode object
366  *
367  * Note that framebuffers cannot be looked up with this functions - since those
368  * are reference counted, they need special treatment.  Even with
369  * DRM_MODE_OBJECT_ANY (although that will simply return NULL
370  * rather than WARN_ON()).
371  */
372 struct drm_mode_object *drm_mode_object_find(struct drm_device *dev,
373                 uint32_t id, uint32_t type)
374 {
375         struct drm_mode_object *obj = NULL;
376
377         /* Framebuffers are reference counted and need their own lookup
378          * function.*/
379         WARN_ON(type == DRM_MODE_OBJECT_FB);
380         obj = _object_find(dev, id, type);
381         return obj;
382 }
383 EXPORT_SYMBOL(drm_mode_object_find);
384
385 /**
386  * drm_framebuffer_init - initialize a framebuffer
387  * @dev: DRM device
388  * @fb: framebuffer to be initialized
389  * @funcs: ... with these functions
390  *
391  * Allocates an ID for the framebuffer's parent mode object, sets its mode
392  * functions & device file and adds it to the master fd list.
393  *
394  * IMPORTANT:
395  * This functions publishes the fb and makes it available for concurrent access
396  * by other users. Which means by this point the fb _must_ be fully set up -
397  * since all the fb attributes are invariant over its lifetime, no further
398  * locking but only correct reference counting is required.
399  *
400  * Returns:
401  * Zero on success, error code on failure.
402  */
403 int drm_framebuffer_init(struct drm_device *dev, struct drm_framebuffer *fb,
404                          const struct drm_framebuffer_funcs *funcs)
405 {
406         int ret;
407
408         mutex_lock(&dev->mode_config.fb_lock);
409         kref_init(&fb->refcount);
410         INIT_LIST_HEAD(&fb->filp_head);
411         fb->dev = dev;
412         fb->funcs = funcs;
413
414         ret = drm_mode_object_get(dev, &fb->base, DRM_MODE_OBJECT_FB);
415         if (ret)
416                 goto out;
417
418         dev->mode_config.num_fb++;
419         list_add(&fb->head, &dev->mode_config.fb_list);
420 out:
421         mutex_unlock(&dev->mode_config.fb_lock);
422
423         return 0;
424 }
425 EXPORT_SYMBOL(drm_framebuffer_init);
426
427 /* dev->mode_config.fb_lock must be held! */
428 static void __drm_framebuffer_unregister(struct drm_device *dev,
429                                          struct drm_framebuffer *fb)
430 {
431         mutex_lock(&dev->mode_config.idr_mutex);
432         idr_remove(&dev->mode_config.crtc_idr, fb->base.id);
433         mutex_unlock(&dev->mode_config.idr_mutex);
434
435         fb->base.id = 0;
436 }
437
438 static void drm_framebuffer_free(struct kref *kref)
439 {
440         struct drm_framebuffer *fb =
441                         container_of(kref, struct drm_framebuffer, refcount);
442         struct drm_device *dev = fb->dev;
443
444         /*
445          * The lookup idr holds a weak reference, which has not necessarily been
446          * removed at this point. Check for that.
447          */
448         mutex_lock(&dev->mode_config.fb_lock);
449         if (fb->base.id) {
450                 /* Mark fb as reaped and drop idr ref. */
451                 __drm_framebuffer_unregister(dev, fb);
452         }
453         mutex_unlock(&dev->mode_config.fb_lock);
454
455         fb->funcs->destroy(fb);
456 }
457
458 static struct drm_framebuffer *__drm_framebuffer_lookup(struct drm_device *dev,
459                                                         uint32_t id)
460 {
461         struct drm_mode_object *obj = NULL;
462         struct drm_framebuffer *fb;
463
464         mutex_lock(&dev->mode_config.idr_mutex);
465         obj = idr_find(&dev->mode_config.crtc_idr, id);
466         if (!obj || (obj->type != DRM_MODE_OBJECT_FB) || (obj->id != id))
467                 fb = NULL;
468         else
469                 fb = obj_to_fb(obj);
470         mutex_unlock(&dev->mode_config.idr_mutex);
471
472         return fb;
473 }
474
475 /**
476  * drm_framebuffer_lookup - look up a drm framebuffer and grab a reference
477  * @dev: drm device
478  * @id: id of the fb object
479  *
480  * If successful, this grabs an additional reference to the framebuffer -
481  * callers need to make sure to eventually unreference the returned framebuffer
482  * again, using @drm_framebuffer_unreference.
483  */
484 struct drm_framebuffer *drm_framebuffer_lookup(struct drm_device *dev,
485                                                uint32_t id)
486 {
487         struct drm_framebuffer *fb;
488
489         mutex_lock(&dev->mode_config.fb_lock);
490         fb = __drm_framebuffer_lookup(dev, id);
491         if (fb) {
492                 if (!kref_get_unless_zero(&fb->refcount))
493                         fb = NULL;
494         }
495         mutex_unlock(&dev->mode_config.fb_lock);
496
497         return fb;
498 }
499 EXPORT_SYMBOL(drm_framebuffer_lookup);
500
501 /**
502  * drm_framebuffer_unreference - unref a framebuffer
503  * @fb: framebuffer to unref
504  *
505  * This functions decrements the fb's refcount and frees it if it drops to zero.
506  */
507 void drm_framebuffer_unreference(struct drm_framebuffer *fb)
508 {
509         DRM_DEBUG("%p: FB ID: %d (%d)\n", fb, fb->base.id, atomic_read(&fb->refcount.refcount));
510         kref_put(&fb->refcount, drm_framebuffer_free);
511 }
512 EXPORT_SYMBOL(drm_framebuffer_unreference);
513
514 /**
515  * drm_framebuffer_reference - incr the fb refcnt
516  * @fb: framebuffer
517  *
518  * This functions increments the fb's refcount.
519  */
520 void drm_framebuffer_reference(struct drm_framebuffer *fb)
521 {
522         DRM_DEBUG("%p: FB ID: %d (%d)\n", fb, fb->base.id, atomic_read(&fb->refcount.refcount));
523         kref_get(&fb->refcount);
524 }
525 EXPORT_SYMBOL(drm_framebuffer_reference);
526
527 static void drm_framebuffer_free_bug(struct kref *kref)
528 {
529         BUG();
530 }
531
532 static void __drm_framebuffer_unreference(struct drm_framebuffer *fb)
533 {
534         DRM_DEBUG("%p: FB ID: %d (%d)\n", fb, fb->base.id, atomic_read(&fb->refcount.refcount));
535         kref_put(&fb->refcount, drm_framebuffer_free_bug);
536 }
537
538 /**
539  * drm_framebuffer_unregister_private - unregister a private fb from the lookup idr
540  * @fb: fb to unregister
541  *
542  * Drivers need to call this when cleaning up driver-private framebuffers, e.g.
543  * those used for fbdev. Note that the caller must hold a reference of it's own,
544  * i.e. the object may not be destroyed through this call (since it'll lead to a
545  * locking inversion).
546  */
547 void drm_framebuffer_unregister_private(struct drm_framebuffer *fb)
548 {
549         struct drm_device *dev = fb->dev;
550
551         mutex_lock(&dev->mode_config.fb_lock);
552         /* Mark fb as reaped and drop idr ref. */
553         __drm_framebuffer_unregister(dev, fb);
554         mutex_unlock(&dev->mode_config.fb_lock);
555 }
556 EXPORT_SYMBOL(drm_framebuffer_unregister_private);
557
558 /**
559  * drm_framebuffer_cleanup - remove a framebuffer object
560  * @fb: framebuffer to remove
561  *
562  * Cleanup framebuffer. This function is intended to be used from the drivers
563  * ->destroy callback. It can also be used to clean up driver private
564  *  framebuffers embedded into a larger structure.
565  *
566  * Note that this function does not remove the fb from active usuage - if it is
567  * still used anywhere, hilarity can ensue since userspace could call getfb on
568  * the id and get back -EINVAL. Obviously no concern at driver unload time.
569  *
570  * Also, the framebuffer will not be removed from the lookup idr - for
571  * user-created framebuffers this will happen in in the rmfb ioctl. For
572  * driver-private objects (e.g. for fbdev) drivers need to explicitly call
573  * drm_framebuffer_unregister_private.
574  */
575 void drm_framebuffer_cleanup(struct drm_framebuffer *fb)
576 {
577         struct drm_device *dev = fb->dev;
578
579         mutex_lock(&dev->mode_config.fb_lock);
580         list_del(&fb->head);
581         dev->mode_config.num_fb--;
582         mutex_unlock(&dev->mode_config.fb_lock);
583 }
584 EXPORT_SYMBOL(drm_framebuffer_cleanup);
585
586 /**
587  * drm_framebuffer_remove - remove and unreference a framebuffer object
588  * @fb: framebuffer to remove
589  *
590  * Scans all the CRTCs and planes in @dev's mode_config.  If they're
591  * using @fb, removes it, setting it to NULL. Then drops the reference to the
592  * passed-in framebuffer. Might take the modeset locks.
593  *
594  * Note that this function optimizes the cleanup away if the caller holds the
595  * last reference to the framebuffer. It is also guaranteed to not take the
596  * modeset locks in this case.
597  */
598 void drm_framebuffer_remove(struct drm_framebuffer *fb)
599 {
600         struct drm_device *dev = fb->dev;
601         struct drm_crtc *crtc;
602         struct drm_plane *plane;
603         struct drm_mode_set set;
604         int ret;
605
606         WARN_ON(!list_empty(&fb->filp_head));
607
608         /*
609          * drm ABI mandates that we remove any deleted framebuffers from active
610          * useage. But since most sane clients only remove framebuffers they no
611          * longer need, try to optimize this away.
612          *
613          * Since we're holding a reference ourselves, observing a refcount of 1
614          * means that we're the last holder and can skip it. Also, the refcount
615          * can never increase from 1 again, so we don't need any barriers or
616          * locks.
617          *
618          * Note that userspace could try to race with use and instate a new
619          * usage _after_ we've cleared all current ones. End result will be an
620          * in-use fb with fb-id == 0. Userspace is allowed to shoot its own foot
621          * in this manner.
622          */
623         if (atomic_read(&fb->refcount.refcount) > 1) {
624                 drm_modeset_lock_all(dev);
625                 /* remove from any CRTC */
626                 list_for_each_entry(crtc, &dev->mode_config.crtc_list, head) {
627                         if (crtc->primary->fb == fb) {
628                                 /* should turn off the crtc */
629                                 memset(&set, 0, sizeof(struct drm_mode_set));
630                                 set.crtc = crtc;
631                                 set.fb = NULL;
632                                 ret = drm_mode_set_config_internal(&set);
633                                 if (ret)
634                                         DRM_ERROR("failed to reset crtc %p when fb was deleted\n", crtc);
635                         }
636                 }
637
638                 list_for_each_entry(plane, &dev->mode_config.plane_list, head) {
639                         if (plane->fb == fb)
640                                 drm_plane_force_disable(plane);
641                 }
642                 drm_modeset_unlock_all(dev);
643         }
644
645         drm_framebuffer_unreference(fb);
646 }
647 EXPORT_SYMBOL(drm_framebuffer_remove);
648
649 DEFINE_WW_CLASS(crtc_ww_class);
650
651 /**
652  * drm_crtc_init_with_planes - Initialise a new CRTC object with
653  *    specified primary and cursor planes.
654  * @dev: DRM device
655  * @crtc: CRTC object to init
656  * @primary: Primary plane for CRTC
657  * @cursor: Cursor plane for CRTC
658  * @funcs: callbacks for the new CRTC
659  *
660  * Inits a new object created as base part of a driver crtc object.
661  *
662  * Returns:
663  * Zero on success, error code on failure.
664  */
665 int drm_crtc_init_with_planes(struct drm_device *dev, struct drm_crtc *crtc,
666                               struct drm_plane *primary,
667                               struct drm_plane *cursor,
668                               const struct drm_crtc_funcs *funcs)
669 {
670         struct drm_mode_config *config = &dev->mode_config;
671         int ret;
672
673         crtc->dev = dev;
674         crtc->funcs = funcs;
675         crtc->invert_dimensions = false;
676
677         drm_modeset_lock_init(&crtc->mutex);
678         ret = drm_mode_object_get(dev, &crtc->base, DRM_MODE_OBJECT_CRTC);
679         if (ret)
680                 return ret;
681
682         crtc->base.properties = &crtc->properties;
683
684         list_add_tail(&crtc->head, &config->crtc_list);
685         config->num_crtc++;
686
687         crtc->primary = primary;
688         crtc->cursor = cursor;
689         if (primary)
690                 primary->possible_crtcs = 1 << drm_crtc_index(crtc);
691         if (cursor)
692                 cursor->possible_crtcs = 1 << drm_crtc_index(crtc);
693
694         return 0;
695 }
696 EXPORT_SYMBOL(drm_crtc_init_with_planes);
697
698 /**
699  * drm_crtc_cleanup - Clean up the core crtc usage
700  * @crtc: CRTC to cleanup
701  *
702  * This function cleans up @crtc and removes it from the DRM mode setting
703  * core. Note that the function does *not* free the crtc structure itself,
704  * this is the responsibility of the caller.
705  */
706 void drm_crtc_cleanup(struct drm_crtc *crtc)
707 {
708         struct drm_device *dev = crtc->dev;
709
710         kfree(crtc->gamma_store);
711         crtc->gamma_store = NULL;
712
713         drm_modeset_lock_fini(&crtc->mutex);
714
715         drm_mode_object_put(dev, &crtc->base);
716         list_del(&crtc->head);
717         dev->mode_config.num_crtc--;
718
719         WARN_ON(crtc->state && !crtc->funcs->atomic_destroy_state);
720         if (crtc->state && crtc->funcs->atomic_destroy_state)
721                 crtc->funcs->atomic_destroy_state(crtc, crtc->state);
722
723         memset(crtc, 0, sizeof(*crtc));
724 }
725 EXPORT_SYMBOL(drm_crtc_cleanup);
726
727 /**
728  * drm_crtc_index - find the index of a registered CRTC
729  * @crtc: CRTC to find index for
730  *
731  * Given a registered CRTC, return the index of that CRTC within a DRM
732  * device's list of CRTCs.
733  */
734 unsigned int drm_crtc_index(struct drm_crtc *crtc)
735 {
736         unsigned int index = 0;
737         struct drm_crtc *tmp;
738
739         list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head) {
740                 if (tmp == crtc)
741                         return index;
742
743                 index++;
744         }
745
746         BUG();
747 }
748 EXPORT_SYMBOL(drm_crtc_index);
749
750 /*
751  * drm_mode_remove - remove and free a mode
752  * @connector: connector list to modify
753  * @mode: mode to remove
754  *
755  * Remove @mode from @connector's mode list, then free it.
756  */
757 static void drm_mode_remove(struct drm_connector *connector,
758                             struct drm_display_mode *mode)
759 {
760         list_del(&mode->head);
761         drm_mode_destroy(connector->dev, mode);
762 }
763
764 /**
765  * drm_display_info_set_bus_formats - set the supported bus formats
766  * @info: display info to store bus formats in
767  * @formats: array containing the supported bus formats
768  * @num_formats: the number of entries in the fmts array
769  *
770  * Store the supported bus formats in display info structure.
771  * See MEDIA_BUS_FMT_* definitions in include/uapi/linux/media-bus-format.h for
772  * a full list of available formats.
773  */
774 int drm_display_info_set_bus_formats(struct drm_display_info *info,
775                                      const u32 *formats,
776                                      unsigned int num_formats)
777 {
778         u32 *fmts = NULL;
779
780         if (!formats && num_formats)
781                 return -EINVAL;
782
783         if (formats && num_formats) {
784                 fmts = kmemdup(formats, sizeof(*formats) * num_formats,
785                                GFP_KERNEL);
786                 if (!formats)
787                         return -ENOMEM;
788         }
789
790         kfree(info->bus_formats);
791         info->bus_formats = fmts;
792         info->num_bus_formats = num_formats;
793
794         return 0;
795 }
796 EXPORT_SYMBOL(drm_display_info_set_bus_formats);
797
798 /**
799  * drm_connector_get_cmdline_mode - reads the user's cmdline mode
800  * @connector: connector to quwery
801  *
802  * The kernel supports per-connector configration of its consoles through
803  * use of the video= parameter. This function parses that option and
804  * extracts the user's specified mode (or enable/disable status) for a
805  * particular connector. This is typically only used during the early fbdev
806  * setup.
807  */
808 static void drm_connector_get_cmdline_mode(struct drm_connector *connector)
809 {
810         struct drm_cmdline_mode *mode = &connector->cmdline_mode;
811         char *option = NULL;
812
813         if (fb_get_options(connector->name, &option))
814                 return;
815
816         if (!drm_mode_parse_command_line_for_connector(option,
817                                                        connector,
818                                                        mode))
819                 return;
820
821         if (mode->force) {
822                 const char *s;
823
824                 switch (mode->force) {
825                 case DRM_FORCE_OFF:
826                         s = "OFF";
827                         break;
828                 case DRM_FORCE_ON_DIGITAL:
829                         s = "ON - dig";
830                         break;
831                 default:
832                 case DRM_FORCE_ON:
833                         s = "ON";
834                         break;
835                 }
836
837                 DRM_INFO("forcing %s connector %s\n", connector->name, s);
838                 connector->force = mode->force;
839         }
840
841         DRM_DEBUG_KMS("cmdline mode for connector %s %dx%d@%dHz%s%s%s\n",
842                       connector->name,
843                       mode->xres, mode->yres,
844                       mode->refresh_specified ? mode->refresh : 60,
845                       mode->rb ? " reduced blanking" : "",
846                       mode->margins ? " with margins" : "",
847                       mode->interlace ?  " interlaced" : "");
848 }
849
850 /**
851  * drm_connector_init - Init a preallocated connector
852  * @dev: DRM device
853  * @connector: the connector to init
854  * @funcs: callbacks for this connector
855  * @connector_type: user visible type of the connector
856  *
857  * Initialises a preallocated connector. Connectors should be
858  * subclassed as part of driver connector objects.
859  *
860  * Returns:
861  * Zero on success, error code on failure.
862  */
863 int drm_connector_init(struct drm_device *dev,
864                        struct drm_connector *connector,
865                        const struct drm_connector_funcs *funcs,
866                        int connector_type)
867 {
868         struct drm_mode_config *config = &dev->mode_config;
869         int ret;
870         struct ida *connector_ida =
871                 &drm_connector_enum_list[connector_type].ida;
872
873         drm_modeset_lock_all(dev);
874
875         ret = drm_mode_object_get_reg(dev, &connector->base, DRM_MODE_OBJECT_CONNECTOR, false);
876         if (ret)
877                 goto out_unlock;
878
879         connector->base.properties = &connector->properties;
880         connector->dev = dev;
881         connector->funcs = funcs;
882         connector->connector_type = connector_type;
883         connector->connector_type_id =
884                 ida_simple_get(connector_ida, 1, 0, GFP_KERNEL);
885         if (connector->connector_type_id < 0) {
886                 ret = connector->connector_type_id;
887                 goto out_put;
888         }
889         connector->name =
890                 kasprintf(GFP_KERNEL, "%s-%d",
891                           drm_connector_enum_list[connector_type].name,
892                           connector->connector_type_id);
893         if (!connector->name) {
894                 ret = -ENOMEM;
895                 goto out_put;
896         }
897
898         INIT_LIST_HEAD(&connector->probed_modes);
899         INIT_LIST_HEAD(&connector->modes);
900         connector->edid_blob_ptr = NULL;
901         connector->status = connector_status_unknown;
902
903         drm_connector_get_cmdline_mode(connector);
904
905         /* We should add connectors at the end to avoid upsetting the connector
906          * index too much. */
907         list_add_tail(&connector->head, &config->connector_list);
908         config->num_connector++;
909
910         if (connector_type != DRM_MODE_CONNECTOR_VIRTUAL)
911                 drm_object_attach_property(&connector->base,
912                                               config->edid_property,
913                                               0);
914
915         drm_object_attach_property(&connector->base,
916                                       config->dpms_property, 0);
917
918         if (drm_core_check_feature(dev, DRIVER_ATOMIC)) {
919                 drm_object_attach_property(&connector->base, config->prop_crtc_id, 0);
920         }
921
922         connector->debugfs_entry = NULL;
923
924 out_put:
925         if (ret)
926                 drm_mode_object_put(dev, &connector->base);
927
928 out_unlock:
929         drm_modeset_unlock_all(dev);
930
931         return ret;
932 }
933 EXPORT_SYMBOL(drm_connector_init);
934
935 /**
936  * drm_connector_cleanup - cleans up an initialised connector
937  * @connector: connector to cleanup
938  *
939  * Cleans up the connector but doesn't free the object.
940  */
941 void drm_connector_cleanup(struct drm_connector *connector)
942 {
943         struct drm_device *dev = connector->dev;
944         struct drm_display_mode *mode, *t;
945
946         if (connector->tile_group) {
947                 drm_mode_put_tile_group(dev, connector->tile_group);
948                 connector->tile_group = NULL;
949         }
950
951         list_for_each_entry_safe(mode, t, &connector->probed_modes, head)
952                 drm_mode_remove(connector, mode);
953
954         list_for_each_entry_safe(mode, t, &connector->modes, head)
955                 drm_mode_remove(connector, mode);
956
957         ida_remove(&drm_connector_enum_list[connector->connector_type].ida,
958                    connector->connector_type_id);
959
960         kfree(connector->display_info.bus_formats);
961         drm_mode_object_put(dev, &connector->base);
962         kfree(connector->name);
963         connector->name = NULL;
964         list_del(&connector->head);
965         dev->mode_config.num_connector--;
966
967         WARN_ON(connector->state && !connector->funcs->atomic_destroy_state);
968         if (connector->state && connector->funcs->atomic_destroy_state)
969                 connector->funcs->atomic_destroy_state(connector,
970                                                        connector->state);
971
972         memset(connector, 0, sizeof(*connector));
973 }
974 EXPORT_SYMBOL(drm_connector_cleanup);
975
976 /**
977  * drm_connector_index - find the index of a registered connector
978  * @connector: connector to find index for
979  *
980  * Given a registered connector, return the index of that connector within a DRM
981  * device's list of connectors.
982  */
983 unsigned int drm_connector_index(struct drm_connector *connector)
984 {
985         unsigned int index = 0;
986         struct drm_connector *tmp;
987         struct drm_mode_config *config = &connector->dev->mode_config;
988
989         WARN_ON(!drm_modeset_is_locked(&config->connection_mutex));
990
991         list_for_each_entry(tmp, &connector->dev->mode_config.connector_list, head) {
992                 if (tmp == connector)
993                         return index;
994
995                 index++;
996         }
997
998         BUG();
999 }
1000 EXPORT_SYMBOL(drm_connector_index);
1001
1002 /**
1003  * drm_connector_register - register a connector
1004  * @connector: the connector to register
1005  *
1006  * Register userspace interfaces for a connector
1007  *
1008  * Returns:
1009  * Zero on success, error code on failure.
1010  */
1011 int drm_connector_register(struct drm_connector *connector)
1012 {
1013         int ret;
1014
1015         drm_mode_object_register(connector->dev, &connector->base);
1016
1017         ret = drm_sysfs_connector_add(connector);
1018         if (ret)
1019                 return ret;
1020
1021         ret = drm_debugfs_connector_add(connector);
1022         if (ret) {
1023                 drm_sysfs_connector_remove(connector);
1024                 return ret;
1025         }
1026
1027         return 0;
1028 }
1029 EXPORT_SYMBOL(drm_connector_register);
1030
1031 /**
1032  * drm_connector_unregister - unregister a connector
1033  * @connector: the connector to unregister
1034  *
1035  * Unregister userspace interfaces for a connector
1036  */
1037 void drm_connector_unregister(struct drm_connector *connector)
1038 {
1039         drm_sysfs_connector_remove(connector);
1040         drm_debugfs_connector_remove(connector);
1041 }
1042 EXPORT_SYMBOL(drm_connector_unregister);
1043
1044
1045 /**
1046  * drm_connector_unplug_all - unregister connector userspace interfaces
1047  * @dev: drm device
1048  *
1049  * This function unregisters all connector userspace interfaces in sysfs. Should
1050  * be call when the device is disconnected, e.g. from an usb driver's
1051  * ->disconnect callback.
1052  */
1053 void drm_connector_unplug_all(struct drm_device *dev)
1054 {
1055         struct drm_connector *connector;
1056
1057         /* taking the mode config mutex ends up in a clash with sysfs */
1058         list_for_each_entry(connector, &dev->mode_config.connector_list, head)
1059                 drm_connector_unregister(connector);
1060
1061 }
1062 EXPORT_SYMBOL(drm_connector_unplug_all);
1063
1064 /**
1065  * drm_bridge_init - initialize a drm transcoder/bridge
1066  * @dev: drm device
1067  * @bridge: transcoder/bridge to set up
1068  * @funcs: bridge function table
1069  *
1070  * Initialises a preallocated bridge. Bridges should be
1071  * subclassed as part of driver connector objects.
1072  *
1073  * Returns:
1074  * Zero on success, error code on failure.
1075  */
1076 int drm_bridge_init(struct drm_device *dev, struct drm_bridge *bridge,
1077                 const struct drm_bridge_funcs *funcs)
1078 {
1079         int ret;
1080
1081         drm_modeset_lock_all(dev);
1082
1083         ret = drm_mode_object_get(dev, &bridge->base, DRM_MODE_OBJECT_BRIDGE);
1084         if (ret)
1085                 goto out;
1086
1087         bridge->dev = dev;
1088         bridge->funcs = funcs;
1089
1090         list_add_tail(&bridge->head, &dev->mode_config.bridge_list);
1091         dev->mode_config.num_bridge++;
1092
1093  out:
1094         drm_modeset_unlock_all(dev);
1095         return ret;
1096 }
1097 EXPORT_SYMBOL(drm_bridge_init);
1098
1099 /**
1100  * drm_bridge_cleanup - cleans up an initialised bridge
1101  * @bridge: bridge to cleanup
1102  *
1103  * Cleans up the bridge but doesn't free the object.
1104  */
1105 void drm_bridge_cleanup(struct drm_bridge *bridge)
1106 {
1107         struct drm_device *dev = bridge->dev;
1108
1109         drm_modeset_lock_all(dev);
1110         drm_mode_object_put(dev, &bridge->base);
1111         list_del(&bridge->head);
1112         dev->mode_config.num_bridge--;
1113         drm_modeset_unlock_all(dev);
1114
1115         memset(bridge, 0, sizeof(*bridge));
1116 }
1117 EXPORT_SYMBOL(drm_bridge_cleanup);
1118
1119 /**
1120  * drm_encoder_init - Init a preallocated encoder
1121  * @dev: drm device
1122  * @encoder: the encoder to init
1123  * @funcs: callbacks for this encoder
1124  * @encoder_type: user visible type of the encoder
1125  *
1126  * Initialises a preallocated encoder. Encoder should be
1127  * subclassed as part of driver encoder objects.
1128  *
1129  * Returns:
1130  * Zero on success, error code on failure.
1131  */
1132 int drm_encoder_init(struct drm_device *dev,
1133                       struct drm_encoder *encoder,
1134                       const struct drm_encoder_funcs *funcs,
1135                       int encoder_type)
1136 {
1137         int ret;
1138
1139         drm_modeset_lock_all(dev);
1140
1141         ret = drm_mode_object_get(dev, &encoder->base, DRM_MODE_OBJECT_ENCODER);
1142         if (ret)
1143                 goto out_unlock;
1144
1145         encoder->dev = dev;
1146         encoder->encoder_type = encoder_type;
1147         encoder->funcs = funcs;
1148         encoder->name = kasprintf(GFP_KERNEL, "%s-%d",
1149                                   drm_encoder_enum_list[encoder_type].name,
1150                                   encoder->base.id);
1151         if (!encoder->name) {
1152                 ret = -ENOMEM;
1153                 goto out_put;
1154         }
1155
1156         list_add_tail(&encoder->head, &dev->mode_config.encoder_list);
1157         dev->mode_config.num_encoder++;
1158
1159 out_put:
1160         if (ret)
1161                 drm_mode_object_put(dev, &encoder->base);
1162
1163 out_unlock:
1164         drm_modeset_unlock_all(dev);
1165
1166         return ret;
1167 }
1168 EXPORT_SYMBOL(drm_encoder_init);
1169
1170 /**
1171  * drm_encoder_cleanup - cleans up an initialised encoder
1172  * @encoder: encoder to cleanup
1173  *
1174  * Cleans up the encoder but doesn't free the object.
1175  */
1176 void drm_encoder_cleanup(struct drm_encoder *encoder)
1177 {
1178         struct drm_device *dev = encoder->dev;
1179
1180         drm_modeset_lock_all(dev);
1181         drm_mode_object_put(dev, &encoder->base);
1182         kfree(encoder->name);
1183         list_del(&encoder->head);
1184         dev->mode_config.num_encoder--;
1185         drm_modeset_unlock_all(dev);
1186
1187         memset(encoder, 0, sizeof(*encoder));
1188 }
1189 EXPORT_SYMBOL(drm_encoder_cleanup);
1190
1191 /**
1192  * drm_universal_plane_init - Initialize a new universal plane object
1193  * @dev: DRM device
1194  * @plane: plane object to init
1195  * @possible_crtcs: bitmask of possible CRTCs
1196  * @funcs: callbacks for the new plane
1197  * @formats: array of supported formats (%DRM_FORMAT_*)
1198  * @format_count: number of elements in @formats
1199  * @type: type of plane (overlay, primary, cursor)
1200  *
1201  * Initializes a plane object of type @type.
1202  *
1203  * Returns:
1204  * Zero on success, error code on failure.
1205  */
1206 int drm_universal_plane_init(struct drm_device *dev, struct drm_plane *plane,
1207                              unsigned long possible_crtcs,
1208                              const struct drm_plane_funcs *funcs,
1209                              const uint32_t *formats, uint32_t format_count,
1210                              enum drm_plane_type type)
1211 {
1212         struct drm_mode_config *config = &dev->mode_config;
1213         int ret;
1214
1215         ret = drm_mode_object_get(dev, &plane->base, DRM_MODE_OBJECT_PLANE);
1216         if (ret)
1217                 return ret;
1218
1219         drm_modeset_lock_init(&plane->mutex);
1220
1221         plane->base.properties = &plane->properties;
1222         plane->dev = dev;
1223         plane->funcs = funcs;
1224         plane->format_types = kmalloc_array(format_count, sizeof(uint32_t),
1225                                             GFP_KERNEL);
1226         if (!plane->format_types) {
1227                 DRM_DEBUG_KMS("out of memory when allocating plane\n");
1228                 drm_mode_object_put(dev, &plane->base);
1229                 return -ENOMEM;
1230         }
1231
1232         memcpy(plane->format_types, formats, format_count * sizeof(uint32_t));
1233         plane->format_count = format_count;
1234         plane->possible_crtcs = possible_crtcs;
1235         plane->type = type;
1236
1237         list_add_tail(&plane->head, &config->plane_list);
1238         config->num_total_plane++;
1239         if (plane->type == DRM_PLANE_TYPE_OVERLAY)
1240                 config->num_overlay_plane++;
1241
1242         drm_object_attach_property(&plane->base,
1243                                    config->plane_type_property,
1244                                    plane->type);
1245
1246         if (drm_core_check_feature(dev, DRIVER_ATOMIC)) {
1247                 drm_object_attach_property(&plane->base, config->prop_fb_id, 0);
1248                 drm_object_attach_property(&plane->base, config->prop_crtc_id, 0);
1249                 drm_object_attach_property(&plane->base, config->prop_crtc_x, 0);
1250                 drm_object_attach_property(&plane->base, config->prop_crtc_y, 0);
1251                 drm_object_attach_property(&plane->base, config->prop_crtc_w, 0);
1252                 drm_object_attach_property(&plane->base, config->prop_crtc_h, 0);
1253                 drm_object_attach_property(&plane->base, config->prop_src_x, 0);
1254                 drm_object_attach_property(&plane->base, config->prop_src_y, 0);
1255                 drm_object_attach_property(&plane->base, config->prop_src_w, 0);
1256                 drm_object_attach_property(&plane->base, config->prop_src_h, 0);
1257         }
1258
1259         return 0;
1260 }
1261 EXPORT_SYMBOL(drm_universal_plane_init);
1262
1263 /**
1264  * drm_plane_init - Initialize a legacy plane
1265  * @dev: DRM device
1266  * @plane: plane object to init
1267  * @possible_crtcs: bitmask of possible CRTCs
1268  * @funcs: callbacks for the new plane
1269  * @formats: array of supported formats (%DRM_FORMAT_*)
1270  * @format_count: number of elements in @formats
1271  * @is_primary: plane type (primary vs overlay)
1272  *
1273  * Legacy API to initialize a DRM plane.
1274  *
1275  * New drivers should call drm_universal_plane_init() instead.
1276  *
1277  * Returns:
1278  * Zero on success, error code on failure.
1279  */
1280 int drm_plane_init(struct drm_device *dev, struct drm_plane *plane,
1281                    unsigned long possible_crtcs,
1282                    const struct drm_plane_funcs *funcs,
1283                    const uint32_t *formats, uint32_t format_count,
1284                    bool is_primary)
1285 {
1286         enum drm_plane_type type;
1287
1288         type = is_primary ? DRM_PLANE_TYPE_PRIMARY : DRM_PLANE_TYPE_OVERLAY;
1289         return drm_universal_plane_init(dev, plane, possible_crtcs, funcs,
1290                                         formats, format_count, type);
1291 }
1292 EXPORT_SYMBOL(drm_plane_init);
1293
1294 /**
1295  * drm_plane_cleanup - Clean up the core plane usage
1296  * @plane: plane to cleanup
1297  *
1298  * This function cleans up @plane and removes it from the DRM mode setting
1299  * core. Note that the function does *not* free the plane structure itself,
1300  * this is the responsibility of the caller.
1301  */
1302 void drm_plane_cleanup(struct drm_plane *plane)
1303 {
1304         struct drm_device *dev = plane->dev;
1305
1306         drm_modeset_lock_all(dev);
1307         kfree(plane->format_types);
1308         drm_mode_object_put(dev, &plane->base);
1309
1310         BUG_ON(list_empty(&plane->head));
1311
1312         list_del(&plane->head);
1313         dev->mode_config.num_total_plane--;
1314         if (plane->type == DRM_PLANE_TYPE_OVERLAY)
1315                 dev->mode_config.num_overlay_plane--;
1316         drm_modeset_unlock_all(dev);
1317
1318         WARN_ON(plane->state && !plane->funcs->atomic_destroy_state);
1319         if (plane->state && plane->funcs->atomic_destroy_state)
1320                 plane->funcs->atomic_destroy_state(plane, plane->state);
1321
1322         memset(plane, 0, sizeof(*plane));
1323 }
1324 EXPORT_SYMBOL(drm_plane_cleanup);
1325
1326 /**
1327  * drm_plane_index - find the index of a registered plane
1328  * @plane: plane to find index for
1329  *
1330  * Given a registered plane, return the index of that CRTC within a DRM
1331  * device's list of planes.
1332  */
1333 unsigned int drm_plane_index(struct drm_plane *plane)
1334 {
1335         unsigned int index = 0;
1336         struct drm_plane *tmp;
1337
1338         list_for_each_entry(tmp, &plane->dev->mode_config.plane_list, head) {
1339                 if (tmp == plane)
1340                         return index;
1341
1342                 index++;
1343         }
1344
1345         BUG();
1346 }
1347 EXPORT_SYMBOL(drm_plane_index);
1348
1349 /**
1350  * drm_plane_force_disable - Forcibly disable a plane
1351  * @plane: plane to disable
1352  *
1353  * Forces the plane to be disabled.
1354  *
1355  * Used when the plane's current framebuffer is destroyed,
1356  * and when restoring fbdev mode.
1357  */
1358 void drm_plane_force_disable(struct drm_plane *plane)
1359 {
1360         int ret;
1361
1362         if (!plane->fb)
1363                 return;
1364
1365         plane->old_fb = plane->fb;
1366         ret = plane->funcs->disable_plane(plane);
1367         if (ret) {
1368                 DRM_ERROR("failed to disable plane with busy fb\n");
1369                 plane->old_fb = NULL;
1370                 return;
1371         }
1372         /* disconnect the plane from the fb and crtc: */
1373         __drm_framebuffer_unreference(plane->old_fb);
1374         plane->old_fb = NULL;
1375         plane->fb = NULL;
1376         plane->crtc = NULL;
1377 }
1378 EXPORT_SYMBOL(drm_plane_force_disable);
1379
1380 static int drm_mode_create_standard_properties(struct drm_device *dev)
1381 {
1382         struct drm_property *prop;
1383
1384         /*
1385          * Standard properties (apply to all connectors)
1386          */
1387         prop = drm_property_create(dev, DRM_MODE_PROP_BLOB |
1388                                    DRM_MODE_PROP_IMMUTABLE,
1389                                    "EDID", 0);
1390         if (!prop)
1391                 return -ENOMEM;
1392         dev->mode_config.edid_property = prop;
1393
1394         prop = drm_property_create_enum(dev, 0,
1395                                    "DPMS", drm_dpms_enum_list,
1396                                    ARRAY_SIZE(drm_dpms_enum_list));
1397         if (!prop)
1398                 return -ENOMEM;
1399         dev->mode_config.dpms_property = prop;
1400
1401         prop = drm_property_create(dev,
1402                                    DRM_MODE_PROP_BLOB |
1403                                    DRM_MODE_PROP_IMMUTABLE,
1404                                    "PATH", 0);
1405         if (!prop)
1406                 return -ENOMEM;
1407         dev->mode_config.path_property = prop;
1408
1409         prop = drm_property_create(dev,
1410                                    DRM_MODE_PROP_BLOB |
1411                                    DRM_MODE_PROP_IMMUTABLE,
1412                                    "TILE", 0);
1413         if (!prop)
1414                 return -ENOMEM;
1415         dev->mode_config.tile_property = prop;
1416
1417         prop = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1418                                         "type", drm_plane_type_enum_list,
1419                                         ARRAY_SIZE(drm_plane_type_enum_list));
1420         if (!prop)
1421                 return -ENOMEM;
1422         dev->mode_config.plane_type_property = prop;
1423
1424         prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1425                         "SRC_X", 0, UINT_MAX);
1426         if (!prop)
1427                 return -ENOMEM;
1428         dev->mode_config.prop_src_x = prop;
1429
1430         prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1431                         "SRC_Y", 0, UINT_MAX);
1432         if (!prop)
1433                 return -ENOMEM;
1434         dev->mode_config.prop_src_y = prop;
1435
1436         prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1437                         "SRC_W", 0, UINT_MAX);
1438         if (!prop)
1439                 return -ENOMEM;
1440         dev->mode_config.prop_src_w = prop;
1441
1442         prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1443                         "SRC_H", 0, UINT_MAX);
1444         if (!prop)
1445                 return -ENOMEM;
1446         dev->mode_config.prop_src_h = prop;
1447
1448         prop = drm_property_create_signed_range(dev, DRM_MODE_PROP_ATOMIC,
1449                         "CRTC_X", INT_MIN, INT_MAX);
1450         if (!prop)
1451                 return -ENOMEM;
1452         dev->mode_config.prop_crtc_x = prop;
1453
1454         prop = drm_property_create_signed_range(dev, DRM_MODE_PROP_ATOMIC,
1455                         "CRTC_Y", INT_MIN, INT_MAX);
1456         if (!prop)
1457                 return -ENOMEM;
1458         dev->mode_config.prop_crtc_y = prop;
1459
1460         prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1461                         "CRTC_W", 0, INT_MAX);
1462         if (!prop)
1463                 return -ENOMEM;
1464         dev->mode_config.prop_crtc_w = prop;
1465
1466         prop = drm_property_create_range(dev, DRM_MODE_PROP_ATOMIC,
1467                         "CRTC_H", 0, INT_MAX);
1468         if (!prop)
1469                 return -ENOMEM;
1470         dev->mode_config.prop_crtc_h = prop;
1471
1472         prop = drm_property_create_object(dev, DRM_MODE_PROP_ATOMIC,
1473                         "FB_ID", DRM_MODE_OBJECT_FB);
1474         if (!prop)
1475                 return -ENOMEM;
1476         dev->mode_config.prop_fb_id = prop;
1477
1478         prop = drm_property_create_object(dev, DRM_MODE_PROP_ATOMIC,
1479                         "CRTC_ID", DRM_MODE_OBJECT_CRTC);
1480         if (!prop)
1481                 return -ENOMEM;
1482         dev->mode_config.prop_crtc_id = prop;
1483
1484         return 0;
1485 }
1486
1487 /**
1488  * drm_mode_create_dvi_i_properties - create DVI-I specific connector properties
1489  * @dev: DRM device
1490  *
1491  * Called by a driver the first time a DVI-I connector is made.
1492  */
1493 int drm_mode_create_dvi_i_properties(struct drm_device *dev)
1494 {
1495         struct drm_property *dvi_i_selector;
1496         struct drm_property *dvi_i_subconnector;
1497
1498         if (dev->mode_config.dvi_i_select_subconnector_property)
1499                 return 0;
1500
1501         dvi_i_selector =
1502                 drm_property_create_enum(dev, 0,
1503                                     "select subconnector",
1504                                     drm_dvi_i_select_enum_list,
1505                                     ARRAY_SIZE(drm_dvi_i_select_enum_list));
1506         dev->mode_config.dvi_i_select_subconnector_property = dvi_i_selector;
1507
1508         dvi_i_subconnector = drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1509                                     "subconnector",
1510                                     drm_dvi_i_subconnector_enum_list,
1511                                     ARRAY_SIZE(drm_dvi_i_subconnector_enum_list));
1512         dev->mode_config.dvi_i_subconnector_property = dvi_i_subconnector;
1513
1514         return 0;
1515 }
1516 EXPORT_SYMBOL(drm_mode_create_dvi_i_properties);
1517
1518 /**
1519  * drm_create_tv_properties - create TV specific connector properties
1520  * @dev: DRM device
1521  * @num_modes: number of different TV formats (modes) supported
1522  * @modes: array of pointers to strings containing name of each format
1523  *
1524  * Called by a driver's TV initialization routine, this function creates
1525  * the TV specific connector properties for a given device.  Caller is
1526  * responsible for allocating a list of format names and passing them to
1527  * this routine.
1528  */
1529 int drm_mode_create_tv_properties(struct drm_device *dev,
1530                                   unsigned int num_modes,
1531                                   char *modes[])
1532 {
1533         struct drm_property *tv_selector;
1534         struct drm_property *tv_subconnector;
1535         unsigned int i;
1536
1537         if (dev->mode_config.tv_select_subconnector_property)
1538                 return 0;
1539
1540         /*
1541          * Basic connector properties
1542          */
1543         tv_selector = drm_property_create_enum(dev, 0,
1544                                           "select subconnector",
1545                                           drm_tv_select_enum_list,
1546                                           ARRAY_SIZE(drm_tv_select_enum_list));
1547         dev->mode_config.tv_select_subconnector_property = tv_selector;
1548
1549         tv_subconnector =
1550                 drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1551                                     "subconnector",
1552                                     drm_tv_subconnector_enum_list,
1553                                     ARRAY_SIZE(drm_tv_subconnector_enum_list));
1554         dev->mode_config.tv_subconnector_property = tv_subconnector;
1555
1556         /*
1557          * Other, TV specific properties: margins & TV modes.
1558          */
1559         dev->mode_config.tv_left_margin_property =
1560                 drm_property_create_range(dev, 0, "left margin", 0, 100);
1561
1562         dev->mode_config.tv_right_margin_property =
1563                 drm_property_create_range(dev, 0, "right margin", 0, 100);
1564
1565         dev->mode_config.tv_top_margin_property =
1566                 drm_property_create_range(dev, 0, "top margin", 0, 100);
1567
1568         dev->mode_config.tv_bottom_margin_property =
1569                 drm_property_create_range(dev, 0, "bottom margin", 0, 100);
1570
1571         dev->mode_config.tv_mode_property =
1572                 drm_property_create(dev, DRM_MODE_PROP_ENUM,
1573                                     "mode", num_modes);
1574         for (i = 0; i < num_modes; i++)
1575                 drm_property_add_enum(dev->mode_config.tv_mode_property, i,
1576                                       i, modes[i]);
1577
1578         dev->mode_config.tv_brightness_property =
1579                 drm_property_create_range(dev, 0, "brightness", 0, 100);
1580
1581         dev->mode_config.tv_contrast_property =
1582                 drm_property_create_range(dev, 0, "contrast", 0, 100);
1583
1584         dev->mode_config.tv_flicker_reduction_property =
1585                 drm_property_create_range(dev, 0, "flicker reduction", 0, 100);
1586
1587         dev->mode_config.tv_overscan_property =
1588                 drm_property_create_range(dev, 0, "overscan", 0, 100);
1589
1590         dev->mode_config.tv_saturation_property =
1591                 drm_property_create_range(dev, 0, "saturation", 0, 100);
1592
1593         dev->mode_config.tv_hue_property =
1594                 drm_property_create_range(dev, 0, "hue", 0, 100);
1595
1596         return 0;
1597 }
1598 EXPORT_SYMBOL(drm_mode_create_tv_properties);
1599
1600 /**
1601  * drm_mode_create_scaling_mode_property - create scaling mode property
1602  * @dev: DRM device
1603  *
1604  * Called by a driver the first time it's needed, must be attached to desired
1605  * connectors.
1606  */
1607 int drm_mode_create_scaling_mode_property(struct drm_device *dev)
1608 {
1609         struct drm_property *scaling_mode;
1610
1611         if (dev->mode_config.scaling_mode_property)
1612                 return 0;
1613
1614         scaling_mode =
1615                 drm_property_create_enum(dev, 0, "scaling mode",
1616                                 drm_scaling_mode_enum_list,
1617                                     ARRAY_SIZE(drm_scaling_mode_enum_list));
1618
1619         dev->mode_config.scaling_mode_property = scaling_mode;
1620
1621         return 0;
1622 }
1623 EXPORT_SYMBOL(drm_mode_create_scaling_mode_property);
1624
1625 /**
1626  * drm_mode_create_aspect_ratio_property - create aspect ratio property
1627  * @dev: DRM device
1628  *
1629  * Called by a driver the first time it's needed, must be attached to desired
1630  * connectors.
1631  *
1632  * Returns:
1633  * Zero on success, negative errno on failure.
1634  */
1635 int drm_mode_create_aspect_ratio_property(struct drm_device *dev)
1636 {
1637         if (dev->mode_config.aspect_ratio_property)
1638                 return 0;
1639
1640         dev->mode_config.aspect_ratio_property =
1641                 drm_property_create_enum(dev, 0, "aspect ratio",
1642                                 drm_aspect_ratio_enum_list,
1643                                 ARRAY_SIZE(drm_aspect_ratio_enum_list));
1644
1645         if (dev->mode_config.aspect_ratio_property == NULL)
1646                 return -ENOMEM;
1647
1648         return 0;
1649 }
1650 EXPORT_SYMBOL(drm_mode_create_aspect_ratio_property);
1651
1652 /**
1653  * drm_mode_create_dirty_property - create dirty property
1654  * @dev: DRM device
1655  *
1656  * Called by a driver the first time it's needed, must be attached to desired
1657  * connectors.
1658  */
1659 int drm_mode_create_dirty_info_property(struct drm_device *dev)
1660 {
1661         struct drm_property *dirty_info;
1662
1663         if (dev->mode_config.dirty_info_property)
1664                 return 0;
1665
1666         dirty_info =
1667                 drm_property_create_enum(dev, DRM_MODE_PROP_IMMUTABLE,
1668                                     "dirty",
1669                                     drm_dirty_info_enum_list,
1670                                     ARRAY_SIZE(drm_dirty_info_enum_list));
1671         dev->mode_config.dirty_info_property = dirty_info;
1672
1673         return 0;
1674 }
1675 EXPORT_SYMBOL(drm_mode_create_dirty_info_property);
1676
1677 /**
1678  * drm_mode_create_suggested_offset_properties - create suggests offset properties
1679  * @dev: DRM device
1680  *
1681  * Create the the suggested x/y offset property for connectors.
1682  */
1683 int drm_mode_create_suggested_offset_properties(struct drm_device *dev)
1684 {
1685         if (dev->mode_config.suggested_x_property && dev->mode_config.suggested_y_property)
1686                 return 0;
1687
1688         dev->mode_config.suggested_x_property =
1689                 drm_property_create_range(dev, DRM_MODE_PROP_IMMUTABLE, "suggested X", 0, 0xffffffff);
1690
1691         dev->mode_config.suggested_y_property =
1692                 drm_property_create_range(dev, DRM_MODE_PROP_IMMUTABLE, "suggested Y", 0, 0xffffffff);
1693
1694         if (dev->mode_config.suggested_x_property == NULL ||
1695             dev->mode_config.suggested_y_property == NULL)
1696                 return -ENOMEM;
1697         return 0;
1698 }
1699 EXPORT_SYMBOL(drm_mode_create_suggested_offset_properties);
1700
1701 static int drm_mode_group_init(struct drm_device *dev, struct drm_mode_group *group)
1702 {
1703         uint32_t total_objects = 0;
1704
1705         total_objects += dev->mode_config.num_crtc;
1706         total_objects += dev->mode_config.num_connector;
1707         total_objects += dev->mode_config.num_encoder;
1708         total_objects += dev->mode_config.num_bridge;
1709
1710         group->id_list = kcalloc(total_objects, sizeof(uint32_t), GFP_KERNEL);
1711         if (!group->id_list)
1712                 return -ENOMEM;
1713
1714         group->num_crtcs = 0;
1715         group->num_connectors = 0;
1716         group->num_encoders = 0;
1717         group->num_bridges = 0;
1718         return 0;
1719 }
1720
1721 void drm_mode_group_destroy(struct drm_mode_group *group)
1722 {
1723         kfree(group->id_list);
1724         group->id_list = NULL;
1725 }
1726
1727 /*
1728  * NOTE: Driver's shouldn't ever call drm_mode_group_init_legacy_group - it is
1729  * the drm core's responsibility to set up mode control groups.
1730  */
1731 int drm_mode_group_init_legacy_group(struct drm_device *dev,
1732                                      struct drm_mode_group *group)
1733 {
1734         struct drm_crtc *crtc;
1735         struct drm_encoder *encoder;
1736         struct drm_connector *connector;
1737         struct drm_bridge *bridge;
1738         int ret;
1739
1740         ret = drm_mode_group_init(dev, group);
1741         if (ret)
1742                 return ret;
1743
1744         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
1745                 group->id_list[group->num_crtcs++] = crtc->base.id;
1746
1747         list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
1748                 group->id_list[group->num_crtcs + group->num_encoders++] =
1749                 encoder->base.id;
1750
1751         list_for_each_entry(connector, &dev->mode_config.connector_list, head)
1752                 group->id_list[group->num_crtcs + group->num_encoders +
1753                                group->num_connectors++] = connector->base.id;
1754
1755         list_for_each_entry(bridge, &dev->mode_config.bridge_list, head)
1756                 group->id_list[group->num_crtcs + group->num_encoders +
1757                                group->num_connectors + group->num_bridges++] =
1758                                         bridge->base.id;
1759
1760         return 0;
1761 }
1762 EXPORT_SYMBOL(drm_mode_group_init_legacy_group);
1763
1764 void drm_reinit_primary_mode_group(struct drm_device *dev)
1765 {
1766         drm_modeset_lock_all(dev);
1767         drm_mode_group_destroy(&dev->primary->mode_group);
1768         drm_mode_group_init_legacy_group(dev, &dev->primary->mode_group);
1769         drm_modeset_unlock_all(dev);
1770 }
1771 EXPORT_SYMBOL(drm_reinit_primary_mode_group);
1772
1773 /**
1774  * drm_crtc_convert_to_umode - convert a drm_display_mode into a modeinfo
1775  * @out: drm_mode_modeinfo struct to return to the user
1776  * @in: drm_display_mode to use
1777  *
1778  * Convert a drm_display_mode into a drm_mode_modeinfo structure to return to
1779  * the user.
1780  */
1781 static void drm_crtc_convert_to_umode(struct drm_mode_modeinfo *out,
1782                                       const struct drm_display_mode *in)
1783 {
1784         WARN(in->hdisplay > USHRT_MAX || in->hsync_start > USHRT_MAX ||
1785              in->hsync_end > USHRT_MAX || in->htotal > USHRT_MAX ||
1786              in->hskew > USHRT_MAX || in->vdisplay > USHRT_MAX ||
1787              in->vsync_start > USHRT_MAX || in->vsync_end > USHRT_MAX ||
1788              in->vtotal > USHRT_MAX || in->vscan > USHRT_MAX,
1789              "timing values too large for mode info\n");
1790
1791         out->clock = in->clock;
1792         out->hdisplay = in->hdisplay;
1793         out->hsync_start = in->hsync_start;
1794         out->hsync_end = in->hsync_end;
1795         out->htotal = in->htotal;
1796         out->hskew = in->hskew;
1797         out->vdisplay = in->vdisplay;
1798         out->vsync_start = in->vsync_start;
1799         out->vsync_end = in->vsync_end;
1800         out->vtotal = in->vtotal;
1801         out->vscan = in->vscan;
1802         out->vrefresh = in->vrefresh;
1803         out->flags = in->flags;
1804         out->type = in->type;
1805         strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1806         out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1807 }
1808
1809 /**
1810  * drm_crtc_convert_umode - convert a modeinfo into a drm_display_mode
1811  * @out: drm_display_mode to return to the user
1812  * @in: drm_mode_modeinfo to use
1813  *
1814  * Convert a drm_mode_modeinfo into a drm_display_mode structure to return to
1815  * the caller.
1816  *
1817  * Returns:
1818  * Zero on success, negative errno on failure.
1819  */
1820 static int drm_crtc_convert_umode(struct drm_display_mode *out,
1821                                   const struct drm_mode_modeinfo *in)
1822 {
1823         if (in->clock > INT_MAX || in->vrefresh > INT_MAX)
1824                 return -ERANGE;
1825
1826         if ((in->flags & DRM_MODE_FLAG_3D_MASK) > DRM_MODE_FLAG_3D_MAX)
1827                 return -EINVAL;
1828
1829         out->clock = in->clock;
1830         out->hdisplay = in->hdisplay;
1831         out->hsync_start = in->hsync_start;
1832         out->hsync_end = in->hsync_end;
1833         out->htotal = in->htotal;
1834         out->hskew = in->hskew;
1835         out->vdisplay = in->vdisplay;
1836         out->vsync_start = in->vsync_start;
1837         out->vsync_end = in->vsync_end;
1838         out->vtotal = in->vtotal;
1839         out->vscan = in->vscan;
1840         out->vrefresh = in->vrefresh;
1841         out->flags = in->flags;
1842         out->type = in->type;
1843         strncpy(out->name, in->name, DRM_DISPLAY_MODE_LEN);
1844         out->name[DRM_DISPLAY_MODE_LEN-1] = 0;
1845
1846         return 0;
1847 }
1848
1849 /**
1850  * drm_mode_getresources - get graphics configuration
1851  * @dev: drm device for the ioctl
1852  * @data: data pointer for the ioctl
1853  * @file_priv: drm file for the ioctl call
1854  *
1855  * Construct a set of configuration description structures and return
1856  * them to the user, including CRTC, connector and framebuffer configuration.
1857  *
1858  * Called by the user via ioctl.
1859  *
1860  * Returns:
1861  * Zero on success, negative errno on failure.
1862  */
1863 int drm_mode_getresources(struct drm_device *dev, void *data,
1864                           struct drm_file *file_priv)
1865 {
1866         struct drm_mode_card_res *card_res = data;
1867         struct list_head *lh;
1868         struct drm_framebuffer *fb;
1869         struct drm_connector *connector;
1870         struct drm_crtc *crtc;
1871         struct drm_encoder *encoder;
1872         int ret = 0;
1873         int connector_count = 0;
1874         int crtc_count = 0;
1875         int fb_count = 0;
1876         int encoder_count = 0;
1877         int copied = 0, i;
1878         uint32_t __user *fb_id;
1879         uint32_t __user *crtc_id;
1880         uint32_t __user *connector_id;
1881         uint32_t __user *encoder_id;
1882         struct drm_mode_group *mode_group;
1883
1884         if (!drm_core_check_feature(dev, DRIVER_MODESET))
1885                 return -EINVAL;
1886
1887
1888         mutex_lock(&file_priv->fbs_lock);
1889         /*
1890          * For the non-control nodes we need to limit the list of resources
1891          * by IDs in the group list for this node
1892          */
1893         list_for_each(lh, &file_priv->fbs)
1894                 fb_count++;
1895
1896         /* handle this in 4 parts */
1897         /* FBs */
1898         if (card_res->count_fbs >= fb_count) {
1899                 copied = 0;
1900                 fb_id = (uint32_t __user *)(unsigned long)card_res->fb_id_ptr;
1901                 list_for_each_entry(fb, &file_priv->fbs, filp_head) {
1902                         if (put_user(fb->base.id, fb_id + copied)) {
1903                                 mutex_unlock(&file_priv->fbs_lock);
1904                                 return -EFAULT;
1905                         }
1906                         copied++;
1907                 }
1908         }
1909         card_res->count_fbs = fb_count;
1910         mutex_unlock(&file_priv->fbs_lock);
1911
1912         /* mode_config.mutex protects the connector list against e.g. DP MST
1913          * connector hot-adding. CRTC/Plane lists are invariant. */
1914         mutex_lock(&dev->mode_config.mutex);
1915         if (!drm_is_primary_client(file_priv)) {
1916
1917                 mode_group = NULL;
1918                 list_for_each(lh, &dev->mode_config.crtc_list)
1919                         crtc_count++;
1920
1921                 list_for_each(lh, &dev->mode_config.connector_list)
1922                         connector_count++;
1923
1924                 list_for_each(lh, &dev->mode_config.encoder_list)
1925                         encoder_count++;
1926         } else {
1927
1928                 mode_group = &file_priv->master->minor->mode_group;
1929                 crtc_count = mode_group->num_crtcs;
1930                 connector_count = mode_group->num_connectors;
1931                 encoder_count = mode_group->num_encoders;
1932         }
1933
1934         card_res->max_height = dev->mode_config.max_height;
1935         card_res->min_height = dev->mode_config.min_height;
1936         card_res->max_width = dev->mode_config.max_width;
1937         card_res->min_width = dev->mode_config.min_width;
1938
1939         /* CRTCs */
1940         if (card_res->count_crtcs >= crtc_count) {
1941                 copied = 0;
1942                 crtc_id = (uint32_t __user *)(unsigned long)card_res->crtc_id_ptr;
1943                 if (!mode_group) {
1944                         list_for_each_entry(crtc, &dev->mode_config.crtc_list,
1945                                             head) {
1946                                 DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
1947                                 if (put_user(crtc->base.id, crtc_id + copied)) {
1948                                         ret = -EFAULT;
1949                                         goto out;
1950                                 }
1951                                 copied++;
1952                         }
1953                 } else {
1954                         for (i = 0; i < mode_group->num_crtcs; i++) {
1955                                 if (put_user(mode_group->id_list[i],
1956                                              crtc_id + copied)) {
1957                                         ret = -EFAULT;
1958                                         goto out;
1959                                 }
1960                                 copied++;
1961                         }
1962                 }
1963         }
1964         card_res->count_crtcs = crtc_count;
1965
1966         /* Encoders */
1967         if (card_res->count_encoders >= encoder_count) {
1968                 copied = 0;
1969                 encoder_id = (uint32_t __user *)(unsigned long)card_res->encoder_id_ptr;
1970                 if (!mode_group) {
1971                         list_for_each_entry(encoder,
1972                                             &dev->mode_config.encoder_list,
1973                                             head) {
1974                                 DRM_DEBUG_KMS("[ENCODER:%d:%s]\n", encoder->base.id,
1975                                                 encoder->name);
1976                                 if (put_user(encoder->base.id, encoder_id +
1977                                              copied)) {
1978                                         ret = -EFAULT;
1979                                         goto out;
1980                                 }
1981                                 copied++;
1982                         }
1983                 } else {
1984                         for (i = mode_group->num_crtcs; i < mode_group->num_crtcs + mode_group->num_encoders; i++) {
1985                                 if (put_user(mode_group->id_list[i],
1986                                              encoder_id + copied)) {
1987                                         ret = -EFAULT;
1988                                         goto out;
1989                                 }
1990                                 copied++;
1991                         }
1992
1993                 }
1994         }
1995         card_res->count_encoders = encoder_count;
1996
1997         /* Connectors */
1998         if (card_res->count_connectors >= connector_count) {
1999                 copied = 0;
2000                 connector_id = (uint32_t __user *)(unsigned long)card_res->connector_id_ptr;
2001                 if (!mode_group) {
2002                         list_for_each_entry(connector,
2003                                             &dev->mode_config.connector_list,
2004                                             head) {
2005                                 DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
2006                                         connector->base.id,
2007                                         connector->name);
2008                                 if (put_user(connector->base.id,
2009                                              connector_id + copied)) {
2010                                         ret = -EFAULT;
2011                                         goto out;
2012                                 }
2013                                 copied++;
2014                         }
2015                 } else {
2016                         int start = mode_group->num_crtcs +
2017                                 mode_group->num_encoders;
2018                         for (i = start; i < start + mode_group->num_connectors; i++) {
2019                                 if (put_user(mode_group->id_list[i],
2020                                              connector_id + copied)) {
2021                                         ret = -EFAULT;
2022                                         goto out;
2023                                 }
2024                                 copied++;
2025                         }
2026                 }
2027         }
2028         card_res->count_connectors = connector_count;
2029
2030         DRM_DEBUG_KMS("CRTC[%d] CONNECTORS[%d] ENCODERS[%d]\n", card_res->count_crtcs,
2031                   card_res->count_connectors, card_res->count_encoders);
2032
2033 out:
2034         mutex_unlock(&dev->mode_config.mutex);
2035         return ret;
2036 }
2037
2038 /**
2039  * drm_mode_getcrtc - get CRTC configuration
2040  * @dev: drm device for the ioctl
2041  * @data: data pointer for the ioctl
2042  * @file_priv: drm file for the ioctl call
2043  *
2044  * Construct a CRTC configuration structure to return to the user.
2045  *
2046  * Called by the user via ioctl.
2047  *
2048  * Returns:
2049  * Zero on success, negative errno on failure.
2050  */
2051 int drm_mode_getcrtc(struct drm_device *dev,
2052                      void *data, struct drm_file *file_priv)
2053 {
2054         struct drm_mode_crtc *crtc_resp = data;
2055         struct drm_crtc *crtc;
2056
2057         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2058                 return -EINVAL;
2059
2060         crtc = drm_crtc_find(dev, crtc_resp->crtc_id);
2061         if (!crtc)
2062                 return -ENOENT;
2063
2064         drm_modeset_lock_crtc(crtc, crtc->primary);
2065         crtc_resp->x = crtc->x;
2066         crtc_resp->y = crtc->y;
2067         crtc_resp->gamma_size = crtc->gamma_size;
2068         if (crtc->primary->fb)
2069                 crtc_resp->fb_id = crtc->primary->fb->base.id;
2070         else
2071                 crtc_resp->fb_id = 0;
2072
2073         if (crtc->enabled) {
2074
2075                 drm_crtc_convert_to_umode(&crtc_resp->mode, &crtc->mode);
2076                 crtc_resp->mode_valid = 1;
2077
2078         } else {
2079                 crtc_resp->mode_valid = 0;
2080         }
2081         drm_modeset_unlock_crtc(crtc);
2082
2083         return 0;
2084 }
2085
2086 static bool drm_mode_expose_to_userspace(const struct drm_display_mode *mode,
2087                                          const struct drm_file *file_priv)
2088 {
2089         /*
2090          * If user-space hasn't configured the driver to expose the stereo 3D
2091          * modes, don't expose them.
2092          */
2093         if (!file_priv->stereo_allowed && drm_mode_is_stereo(mode))
2094                 return false;
2095
2096         return true;
2097 }
2098
2099 static struct drm_encoder *drm_connector_get_encoder(struct drm_connector *connector)
2100 {
2101         /* For atomic drivers only state objects are synchronously updated and
2102          * protected by modeset locks, so check those first. */
2103         if (connector->state)
2104                 return connector->state->best_encoder;
2105         return connector->encoder;
2106 }
2107
2108 /* helper for getconnector and getproperties ioctls */
2109 static int get_properties(struct drm_mode_object *obj, bool atomic,
2110                 uint32_t __user *prop_ptr, uint64_t __user *prop_values,
2111                 uint32_t *arg_count_props)
2112 {
2113         int props_count;
2114         int i, ret, copied;
2115
2116         props_count = obj->properties->count;
2117         if (!atomic)
2118                 props_count -= obj->properties->atomic_count;
2119
2120         if ((*arg_count_props >= props_count) && props_count) {
2121                 for (i = 0, copied = 0; copied < props_count; i++) {
2122                         struct drm_property *prop = obj->properties->properties[i];
2123                         uint64_t val;
2124
2125                         if ((prop->flags & DRM_MODE_PROP_ATOMIC) && !atomic)
2126                                 continue;
2127
2128                         ret = drm_object_property_get_value(obj, prop, &val);
2129                         if (ret)
2130                                 return ret;
2131
2132                         if (put_user(prop->base.id, prop_ptr + copied))
2133                                 return -EFAULT;
2134
2135                         if (put_user(val, prop_values + copied))
2136                                 return -EFAULT;
2137
2138                         copied++;
2139                 }
2140         }
2141         *arg_count_props = props_count;
2142
2143         return 0;
2144 }
2145
2146 /**
2147  * drm_mode_getconnector - get connector configuration
2148  * @dev: drm device for the ioctl
2149  * @data: data pointer for the ioctl
2150  * @file_priv: drm file for the ioctl call
2151  *
2152  * Construct a connector configuration structure to return to the user.
2153  *
2154  * Called by the user via ioctl.
2155  *
2156  * Returns:
2157  * Zero on success, negative errno on failure.
2158  */
2159 int drm_mode_getconnector(struct drm_device *dev, void *data,
2160                           struct drm_file *file_priv)
2161 {
2162         struct drm_mode_get_connector *out_resp = data;
2163         struct drm_connector *connector;
2164         struct drm_encoder *encoder;
2165         struct drm_display_mode *mode;
2166         int mode_count = 0;
2167         int encoders_count = 0;
2168         int ret = 0;
2169         int copied = 0;
2170         int i;
2171         struct drm_mode_modeinfo u_mode;
2172         struct drm_mode_modeinfo __user *mode_ptr;
2173         uint32_t __user *encoder_ptr;
2174
2175         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2176                 return -EINVAL;
2177
2178         memset(&u_mode, 0, sizeof(struct drm_mode_modeinfo));
2179
2180         DRM_DEBUG_KMS("[CONNECTOR:%d:?]\n", out_resp->connector_id);
2181
2182         mutex_lock(&dev->mode_config.mutex);
2183         drm_modeset_lock(&dev->mode_config.connection_mutex, NULL);
2184
2185         connector = drm_connector_find(dev, out_resp->connector_id);
2186         if (!connector) {
2187                 ret = -ENOENT;
2188                 goto out;
2189         }
2190
2191         for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++)
2192                 if (connector->encoder_ids[i] != 0)
2193                         encoders_count++;
2194
2195         if (out_resp->count_modes == 0) {
2196                 connector->funcs->fill_modes(connector,
2197                                              dev->mode_config.max_width,
2198                                              dev->mode_config.max_height);
2199         }
2200
2201         /* delayed so we get modes regardless of pre-fill_modes state */
2202         list_for_each_entry(mode, &connector->modes, head)
2203                 if (drm_mode_expose_to_userspace(mode, file_priv))
2204                         mode_count++;
2205
2206         out_resp->connector_id = connector->base.id;
2207         out_resp->connector_type = connector->connector_type;
2208         out_resp->connector_type_id = connector->connector_type_id;
2209         out_resp->mm_width = connector->display_info.width_mm;
2210         out_resp->mm_height = connector->display_info.height_mm;
2211         out_resp->subpixel = connector->display_info.subpixel_order;
2212         out_resp->connection = connector->status;
2213         encoder = drm_connector_get_encoder(connector);
2214         if (encoder)
2215                 out_resp->encoder_id = encoder->base.id;
2216         else
2217                 out_resp->encoder_id = 0;
2218
2219         /*
2220          * This ioctl is called twice, once to determine how much space is
2221          * needed, and the 2nd time to fill it.
2222          */
2223         if ((out_resp->count_modes >= mode_count) && mode_count) {
2224                 copied = 0;
2225                 mode_ptr = (struct drm_mode_modeinfo __user *)(unsigned long)out_resp->modes_ptr;
2226                 list_for_each_entry(mode, &connector->modes, head) {
2227                         if (!drm_mode_expose_to_userspace(mode, file_priv))
2228                                 continue;
2229
2230                         drm_crtc_convert_to_umode(&u_mode, mode);
2231                         if (copy_to_user(mode_ptr + copied,
2232                                          &u_mode, sizeof(u_mode))) {
2233                                 ret = -EFAULT;
2234                                 goto out;
2235                         }
2236                         copied++;
2237                 }
2238         }
2239         out_resp->count_modes = mode_count;
2240
2241         ret = get_properties(&connector->base, file_priv->atomic,
2242                         (uint32_t __user *)(unsigned long)(out_resp->props_ptr),
2243                         (uint64_t __user *)(unsigned long)(out_resp->prop_values_ptr),
2244                         &out_resp->count_props);
2245         if (ret)
2246                 goto out;
2247
2248         if ((out_resp->count_encoders >= encoders_count) && encoders_count) {
2249                 copied = 0;
2250                 encoder_ptr = (uint32_t __user *)(unsigned long)(out_resp->encoders_ptr);
2251                 for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
2252                         if (connector->encoder_ids[i] != 0) {
2253                                 if (put_user(connector->encoder_ids[i],
2254                                              encoder_ptr + copied)) {
2255                                         ret = -EFAULT;
2256                                         goto out;
2257                                 }
2258                                 copied++;
2259                         }
2260                 }
2261         }
2262         out_resp->count_encoders = encoders_count;
2263
2264 out:
2265         drm_modeset_unlock(&dev->mode_config.connection_mutex);
2266         mutex_unlock(&dev->mode_config.mutex);
2267
2268         return ret;
2269 }
2270
2271 static struct drm_crtc *drm_encoder_get_crtc(struct drm_encoder *encoder)
2272 {
2273         struct drm_connector *connector;
2274         struct drm_device *dev = encoder->dev;
2275         bool uses_atomic = false;
2276
2277         /* For atomic drivers only state objects are synchronously updated and
2278          * protected by modeset locks, so check those first. */
2279         list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
2280                 if (!connector->state)
2281                         continue;
2282
2283                 uses_atomic = true;
2284
2285                 if (connector->state->best_encoder != encoder)
2286                         continue;
2287
2288                 return connector->state->crtc;
2289         }
2290
2291         /* Don't return stale data (e.g. pending async disable). */
2292         if (uses_atomic)
2293                 return NULL;
2294
2295         return encoder->crtc;
2296 }
2297
2298 /**
2299  * drm_mode_getencoder - get encoder configuration
2300  * @dev: drm device for the ioctl
2301  * @data: data pointer for the ioctl
2302  * @file_priv: drm file for the ioctl call
2303  *
2304  * Construct a encoder configuration structure to return to the user.
2305  *
2306  * Called by the user via ioctl.
2307  *
2308  * Returns:
2309  * Zero on success, negative errno on failure.
2310  */
2311 int drm_mode_getencoder(struct drm_device *dev, void *data,
2312                         struct drm_file *file_priv)
2313 {
2314         struct drm_mode_get_encoder *enc_resp = data;
2315         struct drm_encoder *encoder;
2316         struct drm_crtc *crtc;
2317
2318         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2319                 return -EINVAL;
2320
2321         encoder = drm_encoder_find(dev, enc_resp->encoder_id);
2322         if (!encoder)
2323                 return -ENOENT;
2324
2325         drm_modeset_lock(&dev->mode_config.connection_mutex, NULL);
2326         crtc = drm_encoder_get_crtc(encoder);
2327         if (crtc)
2328                 enc_resp->crtc_id = crtc->base.id;
2329         else if (encoder->crtc)
2330                 enc_resp->crtc_id = encoder->crtc->base.id;
2331         else
2332                 enc_resp->crtc_id = 0;
2333         drm_modeset_unlock(&dev->mode_config.connection_mutex);
2334
2335         enc_resp->encoder_type = encoder->encoder_type;
2336         enc_resp->encoder_id = encoder->base.id;
2337         enc_resp->possible_crtcs = encoder->possible_crtcs;
2338         enc_resp->possible_clones = encoder->possible_clones;
2339
2340         return 0;
2341 }
2342
2343 /**
2344  * drm_mode_getplane_res - enumerate all plane resources
2345  * @dev: DRM device
2346  * @data: ioctl data
2347  * @file_priv: DRM file info
2348  *
2349  * Construct a list of plane ids to return to the user.
2350  *
2351  * Called by the user via ioctl.
2352  *
2353  * Returns:
2354  * Zero on success, negative errno on failure.
2355  */
2356 int drm_mode_getplane_res(struct drm_device *dev, void *data,
2357                           struct drm_file *file_priv)
2358 {
2359         struct drm_mode_get_plane_res *plane_resp = data;
2360         struct drm_mode_config *config;
2361         struct drm_plane *plane;
2362         uint32_t __user *plane_ptr;
2363         int copied = 0;
2364         unsigned num_planes;
2365
2366         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2367                 return -EINVAL;
2368
2369         config = &dev->mode_config;
2370
2371         if (file_priv->universal_planes)
2372                 num_planes = config->num_total_plane;
2373         else
2374                 num_planes = config->num_overlay_plane;
2375
2376         /*
2377          * This ioctl is called twice, once to determine how much space is
2378          * needed, and the 2nd time to fill it.
2379          */
2380         if (num_planes &&
2381             (plane_resp->count_planes >= num_planes)) {
2382                 plane_ptr = (uint32_t __user *)(unsigned long)plane_resp->plane_id_ptr;
2383
2384                 /* Plane lists are invariant, no locking needed. */
2385                 list_for_each_entry(plane, &config->plane_list, head) {
2386                         /*
2387                          * Unless userspace set the 'universal planes'
2388                          * capability bit, only advertise overlays.
2389                          */
2390                         if (plane->type != DRM_PLANE_TYPE_OVERLAY &&
2391                             !file_priv->universal_planes)
2392                                 continue;
2393
2394                         if (put_user(plane->base.id, plane_ptr + copied))
2395                                 return -EFAULT;
2396                         copied++;
2397                 }
2398         }
2399         plane_resp->count_planes = num_planes;
2400
2401         return 0;
2402 }
2403
2404 /**
2405  * drm_mode_getplane - get plane configuration
2406  * @dev: DRM device
2407  * @data: ioctl data
2408  * @file_priv: DRM file info
2409  *
2410  * Construct a plane configuration structure to return to the user.
2411  *
2412  * Called by the user via ioctl.
2413  *
2414  * Returns:
2415  * Zero on success, negative errno on failure.
2416  */
2417 int drm_mode_getplane(struct drm_device *dev, void *data,
2418                       struct drm_file *file_priv)
2419 {
2420         struct drm_mode_get_plane *plane_resp = data;
2421         struct drm_plane *plane;
2422         uint32_t __user *format_ptr;
2423
2424         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2425                 return -EINVAL;
2426
2427         plane = drm_plane_find(dev, plane_resp->plane_id);
2428         if (!plane)
2429                 return -ENOENT;
2430
2431         drm_modeset_lock(&plane->mutex, NULL);
2432         if (plane->crtc)
2433                 plane_resp->crtc_id = plane->crtc->base.id;
2434         else
2435                 plane_resp->crtc_id = 0;
2436
2437         if (plane->fb)
2438                 plane_resp->fb_id = plane->fb->base.id;
2439         else
2440                 plane_resp->fb_id = 0;
2441         drm_modeset_unlock(&plane->mutex);
2442
2443         plane_resp->plane_id = plane->base.id;
2444         plane_resp->possible_crtcs = plane->possible_crtcs;
2445         plane_resp->gamma_size = 0;
2446
2447         /*
2448          * This ioctl is called twice, once to determine how much space is
2449          * needed, and the 2nd time to fill it.
2450          */
2451         if (plane->format_count &&
2452             (plane_resp->count_format_types >= plane->format_count)) {
2453                 format_ptr = (uint32_t __user *)(unsigned long)plane_resp->format_type_ptr;
2454                 if (copy_to_user(format_ptr,
2455                                  plane->format_types,
2456                                  sizeof(uint32_t) * plane->format_count)) {
2457                         return -EFAULT;
2458                 }
2459         }
2460         plane_resp->count_format_types = plane->format_count;
2461
2462         return 0;
2463 }
2464
2465 /*
2466  * setplane_internal - setplane handler for internal callers
2467  *
2468  * Note that we assume an extra reference has already been taken on fb.  If the
2469  * update fails, this reference will be dropped before return; if it succeeds,
2470  * the previous framebuffer (if any) will be unreferenced instead.
2471  *
2472  * src_{x,y,w,h} are provided in 16.16 fixed point format
2473  */
2474 static int __setplane_internal(struct drm_plane *plane,
2475                                struct drm_crtc *crtc,
2476                                struct drm_framebuffer *fb,
2477                                int32_t crtc_x, int32_t crtc_y,
2478                                uint32_t crtc_w, uint32_t crtc_h,
2479                                /* src_{x,y,w,h} values are 16.16 fixed point */
2480                                uint32_t src_x, uint32_t src_y,
2481                                uint32_t src_w, uint32_t src_h)
2482 {
2483         int ret = 0;
2484         unsigned int fb_width, fb_height;
2485         unsigned int i;
2486
2487         /* No fb means shut it down */
2488         if (!fb) {
2489                 plane->old_fb = plane->fb;
2490                 ret = plane->funcs->disable_plane(plane);
2491                 if (!ret) {
2492                         plane->crtc = NULL;
2493                         plane->fb = NULL;
2494                 } else {
2495                         plane->old_fb = NULL;
2496                 }
2497                 goto out;
2498         }
2499
2500         /* Check whether this plane is usable on this CRTC */
2501         if (!(plane->possible_crtcs & drm_crtc_mask(crtc))) {
2502                 DRM_DEBUG_KMS("Invalid crtc for plane\n");
2503                 ret = -EINVAL;
2504                 goto out;
2505         }
2506
2507         /* Check whether this plane supports the fb pixel format. */
2508         for (i = 0; i < plane->format_count; i++)
2509                 if (fb->pixel_format == plane->format_types[i])
2510                         break;
2511         if (i == plane->format_count) {
2512                 DRM_DEBUG_KMS("Invalid pixel format %s\n",
2513                               drm_get_format_name(fb->pixel_format));
2514                 ret = -EINVAL;
2515                 goto out;
2516         }
2517
2518         fb_width = fb->width << 16;
2519         fb_height = fb->height << 16;
2520
2521         /* Make sure source coordinates are inside the fb. */
2522         if (src_w > fb_width ||
2523             src_x > fb_width - src_w ||
2524             src_h > fb_height ||
2525             src_y > fb_height - src_h) {
2526                 DRM_DEBUG_KMS("Invalid source coordinates "
2527                               "%u.%06ux%u.%06u+%u.%06u+%u.%06u\n",
2528                               src_w >> 16, ((src_w & 0xffff) * 15625) >> 10,
2529                               src_h >> 16, ((src_h & 0xffff) * 15625) >> 10,
2530                               src_x >> 16, ((src_x & 0xffff) * 15625) >> 10,
2531                               src_y >> 16, ((src_y & 0xffff) * 15625) >> 10);
2532                 ret = -ENOSPC;
2533                 goto out;
2534         }
2535
2536         plane->old_fb = plane->fb;
2537         ret = plane->funcs->update_plane(plane, crtc, fb,
2538                                          crtc_x, crtc_y, crtc_w, crtc_h,
2539                                          src_x, src_y, src_w, src_h);
2540         if (!ret) {
2541                 plane->crtc = crtc;
2542                 plane->fb = fb;
2543                 fb = NULL;
2544         } else {
2545                 plane->old_fb = NULL;
2546         }
2547
2548 out:
2549         if (fb)
2550                 drm_framebuffer_unreference(fb);
2551         if (plane->old_fb)
2552                 drm_framebuffer_unreference(plane->old_fb);
2553         plane->old_fb = NULL;
2554
2555         return ret;
2556 }
2557
2558 static int setplane_internal(struct drm_plane *plane,
2559                              struct drm_crtc *crtc,
2560                              struct drm_framebuffer *fb,
2561                              int32_t crtc_x, int32_t crtc_y,
2562                              uint32_t crtc_w, uint32_t crtc_h,
2563                              /* src_{x,y,w,h} values are 16.16 fixed point */
2564                              uint32_t src_x, uint32_t src_y,
2565                              uint32_t src_w, uint32_t src_h)
2566 {
2567         int ret;
2568
2569         drm_modeset_lock_all(plane->dev);
2570         ret = __setplane_internal(plane, crtc, fb,
2571                                   crtc_x, crtc_y, crtc_w, crtc_h,
2572                                   src_x, src_y, src_w, src_h);
2573         drm_modeset_unlock_all(plane->dev);
2574
2575         return ret;
2576 }
2577
2578 /**
2579  * drm_mode_setplane - configure a plane's configuration
2580  * @dev: DRM device
2581  * @data: ioctl data*
2582  * @file_priv: DRM file info
2583  *
2584  * Set plane configuration, including placement, fb, scaling, and other factors.
2585  * Or pass a NULL fb to disable (planes may be disabled without providing a
2586  * valid crtc).
2587  *
2588  * Returns:
2589  * Zero on success, negative errno on failure.
2590  */
2591 int drm_mode_setplane(struct drm_device *dev, void *data,
2592                       struct drm_file *file_priv)
2593 {
2594         struct drm_mode_set_plane *plane_req = data;
2595         struct drm_plane *plane;
2596         struct drm_crtc *crtc = NULL;
2597         struct drm_framebuffer *fb = NULL;
2598
2599         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2600                 return -EINVAL;
2601
2602         /* Give drivers some help against integer overflows */
2603         if (plane_req->crtc_w > INT_MAX ||
2604             plane_req->crtc_x > INT_MAX - (int32_t) plane_req->crtc_w ||
2605             plane_req->crtc_h > INT_MAX ||
2606             plane_req->crtc_y > INT_MAX - (int32_t) plane_req->crtc_h) {
2607                 DRM_DEBUG_KMS("Invalid CRTC coordinates %ux%u+%d+%d\n",
2608                               plane_req->crtc_w, plane_req->crtc_h,
2609                               plane_req->crtc_x, plane_req->crtc_y);
2610                 return -ERANGE;
2611         }
2612
2613         /*
2614          * First, find the plane, crtc, and fb objects.  If not available,
2615          * we don't bother to call the driver.
2616          */
2617         plane = drm_plane_find(dev, plane_req->plane_id);
2618         if (!plane) {
2619                 DRM_DEBUG_KMS("Unknown plane ID %d\n",
2620                               plane_req->plane_id);
2621                 return -ENOENT;
2622         }
2623
2624         if (plane_req->fb_id) {
2625                 fb = drm_framebuffer_lookup(dev, plane_req->fb_id);
2626                 if (!fb) {
2627                         DRM_DEBUG_KMS("Unknown framebuffer ID %d\n",
2628                                       plane_req->fb_id);
2629                         return -ENOENT;
2630                 }
2631
2632                 crtc = drm_crtc_find(dev, plane_req->crtc_id);
2633                 if (!crtc) {
2634                         DRM_DEBUG_KMS("Unknown crtc ID %d\n",
2635                                       plane_req->crtc_id);
2636                         return -ENOENT;
2637                 }
2638         }
2639
2640         /*
2641          * setplane_internal will take care of deref'ing either the old or new
2642          * framebuffer depending on success.
2643          */
2644         return setplane_internal(plane, crtc, fb,
2645                                  plane_req->crtc_x, plane_req->crtc_y,
2646                                  plane_req->crtc_w, plane_req->crtc_h,
2647                                  plane_req->src_x, plane_req->src_y,
2648                                  plane_req->src_w, plane_req->src_h);
2649 }
2650
2651 /**
2652  * drm_mode_set_config_internal - helper to call ->set_config
2653  * @set: modeset config to set
2654  *
2655  * This is a little helper to wrap internal calls to the ->set_config driver
2656  * interface. The only thing it adds is correct refcounting dance.
2657  *
2658  * Returns:
2659  * Zero on success, negative errno on failure.
2660  */
2661 int drm_mode_set_config_internal(struct drm_mode_set *set)
2662 {
2663         struct drm_crtc *crtc = set->crtc;
2664         struct drm_framebuffer *fb;
2665         struct drm_crtc *tmp;
2666         int ret;
2667
2668         /*
2669          * NOTE: ->set_config can also disable other crtcs (if we steal all
2670          * connectors from it), hence we need to refcount the fbs across all
2671          * crtcs. Atomic modeset will have saner semantics ...
2672          */
2673         list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head)
2674                 tmp->primary->old_fb = tmp->primary->fb;
2675
2676         fb = set->fb;
2677
2678         ret = crtc->funcs->set_config(set);
2679         if (ret == 0) {
2680                 crtc->primary->crtc = crtc;
2681                 crtc->primary->fb = fb;
2682         }
2683
2684         list_for_each_entry(tmp, &crtc->dev->mode_config.crtc_list, head) {
2685                 if (tmp->primary->fb)
2686                         drm_framebuffer_reference(tmp->primary->fb);
2687                 if (tmp->primary->old_fb)
2688                         drm_framebuffer_unreference(tmp->primary->old_fb);
2689                 tmp->primary->old_fb = NULL;
2690         }
2691
2692         return ret;
2693 }
2694 EXPORT_SYMBOL(drm_mode_set_config_internal);
2695
2696 /**
2697  * drm_crtc_get_hv_timing - Fetches hdisplay/vdisplay for given mode
2698  * @mode: mode to query
2699  * @hdisplay: hdisplay value to fill in
2700  * @vdisplay: vdisplay value to fill in
2701  *
2702  * The vdisplay value will be doubled if the specified mode is a stereo mode of
2703  * the appropriate layout.
2704  */
2705 void drm_crtc_get_hv_timing(const struct drm_display_mode *mode,
2706                             int *hdisplay, int *vdisplay)
2707 {
2708         struct drm_display_mode adjusted;
2709
2710         drm_mode_copy(&adjusted, mode);
2711         drm_mode_set_crtcinfo(&adjusted, CRTC_STEREO_DOUBLE_ONLY);
2712         *hdisplay = adjusted.crtc_hdisplay;
2713         *vdisplay = adjusted.crtc_vdisplay;
2714 }
2715 EXPORT_SYMBOL(drm_crtc_get_hv_timing);
2716
2717 /**
2718  * drm_crtc_check_viewport - Checks that a framebuffer is big enough for the
2719  *     CRTC viewport
2720  * @crtc: CRTC that framebuffer will be displayed on
2721  * @x: x panning
2722  * @y: y panning
2723  * @mode: mode that framebuffer will be displayed under
2724  * @fb: framebuffer to check size of
2725  */
2726 int drm_crtc_check_viewport(const struct drm_crtc *crtc,
2727                             int x, int y,
2728                             const struct drm_display_mode *mode,
2729                             const struct drm_framebuffer *fb)
2730
2731 {
2732         int hdisplay, vdisplay;
2733
2734         drm_crtc_get_hv_timing(mode, &hdisplay, &vdisplay);
2735
2736         if (crtc->invert_dimensions)
2737                 swap(hdisplay, vdisplay);
2738
2739         if (hdisplay > fb->width ||
2740             vdisplay > fb->height ||
2741             x > fb->width - hdisplay ||
2742             y > fb->height - vdisplay) {
2743                 DRM_DEBUG_KMS("Invalid fb size %ux%u for CRTC viewport %ux%u+%d+%d%s.\n",
2744                               fb->width, fb->height, hdisplay, vdisplay, x, y,
2745                               crtc->invert_dimensions ? " (inverted)" : "");
2746                 return -ENOSPC;
2747         }
2748
2749         return 0;
2750 }
2751 EXPORT_SYMBOL(drm_crtc_check_viewport);
2752
2753 /**
2754  * drm_mode_setcrtc - set CRTC configuration
2755  * @dev: drm device for the ioctl
2756  * @data: data pointer for the ioctl
2757  * @file_priv: drm file for the ioctl call
2758  *
2759  * Build a new CRTC configuration based on user request.
2760  *
2761  * Called by the user via ioctl.
2762  *
2763  * Returns:
2764  * Zero on success, negative errno on failure.
2765  */
2766 int drm_mode_setcrtc(struct drm_device *dev, void *data,
2767                      struct drm_file *file_priv)
2768 {
2769         struct drm_mode_config *config = &dev->mode_config;
2770         struct drm_mode_crtc *crtc_req = data;
2771         struct drm_crtc *crtc;
2772         struct drm_connector **connector_set = NULL, *connector;
2773         struct drm_framebuffer *fb = NULL;
2774         struct drm_display_mode *mode = NULL;
2775         struct drm_mode_set set;
2776         uint32_t __user *set_connectors_ptr;
2777         int ret;
2778         int i;
2779
2780         if (!drm_core_check_feature(dev, DRIVER_MODESET))
2781                 return -EINVAL;
2782
2783         /* For some reason crtc x/y offsets are signed internally. */
2784         if (crtc_req->x > INT_MAX || crtc_req->y > INT_MAX)
2785                 return -ERANGE;
2786
2787         drm_modeset_lock_all(dev);
2788         crtc = drm_crtc_find(dev, crtc_req->crtc_id);
2789         if (!crtc) {
2790                 DRM_DEBUG_KMS("Unknown CRTC ID %d\n", crtc_req->crtc_id);
2791                 ret = -ENOENT;
2792                 goto out;
2793         }
2794         DRM_DEBUG_KMS("[CRTC:%d]\n", crtc->base.id);
2795
2796         if (crtc_req->mode_valid) {
2797                 /* If we have a mode we need a framebuffer. */
2798                 /* If we pass -1, set the mode with the currently bound fb */
2799                 if (crtc_req->fb_id == -1) {
2800                         if (!crtc->primary->fb) {
2801                                 DRM_DEBUG_KMS("CRTC doesn't have current FB\n");
2802                                 ret = -EINVAL;
2803                                 goto out;
2804                         }
2805                         fb = crtc->primary->fb;
2806                         /* Make refcounting symmetric with the lookup path. */
2807                         drm_framebuffer_reference(fb);
2808                 } else {
2809                         fb = drm_framebuffer_lookup(dev, crtc_req->fb_id);
2810                         if (!fb) {
2811                                 DRM_DEBUG_KMS("Unknown FB ID%d\n",
2812                                                 crtc_req->fb_id);
2813                                 ret = -ENOENT;
2814                                 goto out;
2815                         }
2816                 }
2817
2818                 mode = drm_mode_create(dev);
2819                 if (!mode) {
2820                         ret = -ENOMEM;
2821                         goto out;
2822                 }
2823
2824                 ret = drm_crtc_convert_umode(mode, &crtc_req->mode);
2825                 if (ret) {
2826                         DRM_DEBUG_KMS("Invalid mode\n");
2827                         goto out;
2828                 }
2829
2830                 mode->status = drm_mode_validate_basic(mode);
2831                 if (mode->status != MODE_OK) {
2832                         ret = -EINVAL;
2833                         goto out;
2834                 }
2835
2836                 drm_mode_set_crtcinfo(mode, CRTC_INTERLACE_HALVE_V);
2837
2838                 ret = drm_crtc_check_viewport(crtc, crtc_req->x, crtc_req->y,
2839                                               mode, fb);
2840                 if (ret)
2841                         goto out;
2842
2843         }
2844
2845         if (crtc_req->count_connectors == 0 && mode) {
2846                 DRM_DEBUG_KMS("Count connectors is 0 but mode set\n");
2847                 ret = -EINVAL;
2848                 goto out;
2849         }
2850
2851         if (crtc_req->count_connectors > 0 && (!mode || !fb)) {
2852                 DRM_DEBUG_KMS("Count connectors is %d but no mode or fb set\n",
2853                           crtc_req->count_connectors);
2854                 ret = -EINVAL;
2855                 goto out;
2856         }
2857
2858         if (crtc_req->count_connectors > 0) {
2859                 u32 out_id;
2860
2861                 /* Avoid unbounded kernel memory allocation */
2862                 if (crtc_req->count_connectors > config->num_connector) {
2863                         ret = -EINVAL;
2864                         goto out;
2865                 }
2866
2867                 connector_set = kmalloc_array(crtc_req->count_connectors,
2868                                               sizeof(struct drm_connector *),
2869                                               GFP_KERNEL);
2870                 if (!connector_set) {
2871                         ret = -ENOMEM;
2872                         goto out;
2873                 }
2874
2875                 for (i = 0; i < crtc_req->count_connectors; i++) {
2876                         set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;
2877                         if (get_user(out_id, &set_connectors_ptr[i])) {
2878                                 ret = -EFAULT;
2879                                 goto out;
2880                         }
2881
2882                         connector = drm_connector_find(dev, out_id);
2883                         if (!connector) {
2884                                 DRM_DEBUG_KMS("Connector id %d unknown\n",
2885                                                 out_id);
2886                                 ret = -ENOENT;
2887                                 goto out;
2888                         }
2889                         DRM_DEBUG_KMS("[CONNECTOR:%d:%s]\n",
2890                                         connector->base.id,
2891                                         connector->name);
2892
2893                         connector_set[i] = connector;
2894                 }
2895         }
2896
2897         set.crtc = crtc;
2898         set.x = crtc_req->x;
2899         set.y = crtc_req->y;
2900         set.mode = mode;
2901         set.connectors = connector_set;
2902         set.num_connectors = crtc_req->count_connectors;
2903         set.fb = fb;
2904         ret = drm_mode_set_config_internal(&set);
2905
2906 out:
2907         if (fb)
2908                 drm_framebuffer_unreference(fb);
2909
2910         kfree(connector_set);
2911         drm_mode_destroy(dev, mode);
2912         drm_modeset_unlock_all(dev);
2913         return ret;
2914 }
2915
2916 /**
2917  * drm_mode_cursor_universal - translate legacy cursor ioctl call into a
2918  *     universal plane handler call
2919  * @crtc: crtc to update cursor for
2920  * @req: data pointer for the ioctl
2921  * @file_priv: drm file for the ioctl call
2922  *
2923  * Legacy cursor ioctl's work directly with driver buffer handles.  To
2924  * translate legacy ioctl calls into universal plane handler calls, we need to
2925  * wrap the native buffer handle in a drm_framebuffer.
2926  *
2927  * Note that we assume any handle passed to the legacy ioctls was a 32-bit ARGB
2928  * buffer with a pitch of 4*width; the universal plane interface should be used
2929  * directly in cases where the hardware can support other buffer settings and
2930  * userspace wants to make use of these capabilities.
2931  *
2932  * Returns:
2933  * Zero on success, negative errno on failure.
2934  */
2935 static int drm_mode_cursor_universal(struct drm_crtc *crtc,
2936                                      struct drm_mode_cursor2 *req,
2937                                      struct drm_file *file_priv)
2938 {
2939         struct drm_device *dev = crtc->dev;
2940         struct drm_framebuffer *fb = NULL;
2941         struct drm_mode_fb_cmd2 fbreq = {
2942                 .width = req->width,
2943                 .height = req->height,
2944                 .pixel_format = DRM_FORMAT_ARGB8888,
2945                 .pitches = { req->width * 4 },
2946                 .handles = { req->handle },
2947         };
2948         int32_t crtc_x, crtc_y;
2949         uint32_t crtc_w = 0, crtc_h = 0;
2950         uint32_t src_w = 0, src_h = 0;
2951         int ret = 0;
2952
2953         BUG_ON(!crtc->cursor);
2954         WARN_ON(crtc->cursor->crtc != crtc && crtc->cursor->crtc != NULL);
2955
2956         /*
2957          * Obtain fb we'll be using (either new or existing) and take an extra
2958          * reference to it if fb != null.  setplane will take care of dropping
2959          * the reference if the plane update fails.
2960          */
2961         if (req->flags & DRM_MODE_CURSOR_BO) {
2962                 if (req->handle) {
2963                         fb = add_framebuffer_internal(dev, &fbreq, file_priv);
2964                         if (IS_ERR(fb)) {
2965                                 DRM_DEBUG_KMS("failed to wrap cursor buffer in drm framebuffer\n");
2966                                 return PTR_ERR(fb);
2967                         }
2968
2969                         drm_framebuffer_reference(fb);
2970                 } else {
2971                         fb = NULL;
2972                 }
2973         } else {
2974                 fb = crtc->cursor->fb;
2975                 if (fb)
2976                         drm_framebuffer_reference(fb);
2977         }
2978
2979         if (req->flags & DRM_MODE_CURSOR_MOVE) {
2980                 crtc_x = req->x;
2981                 crtc_y = req->y;
2982         } else {
2983                 crtc_x = crtc->cursor_x;
2984                 crtc_y = crtc->cursor_y;
2985         }
2986
2987         if (fb) {
2988                 crtc_w = fb->width;
2989                 crtc_h = fb->height;
2990                 src_w = fb->width << 16;
2991                 src_h = fb->height << 16;
2992         }
2993
2994         /*
2995          * setplane_internal will take care of deref'ing either the old or new
2996          * framebuffer depending on success.
2997          */
2998         ret = __setplane_internal(crtc->cursor, crtc, fb,
2999                                 crtc_x, crtc_y, crtc_w, crtc_h,
3000                                 0, 0, src_w, src_h);
3001
3002         /* Update successful; save new cursor position, if necessary */
3003         if (ret == 0 && req->flags & DRM_MODE_CURSOR_MOVE) {
3004                 crtc->cursor_x = req->x;
3005                 crtc->cursor_y = req->y;
3006         }
3007
3008         return ret;
3009 }
3010
3011 static int drm_mode_cursor_common(struct drm_device *dev,
3012                                   struct drm_mode_cursor2 *req,
3013                                   struct drm_file *file_priv)
3014 {
3015         struct drm_crtc *crtc;
3016         int ret = 0;
3017
3018         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3019                 return -EINVAL;
3020
3021         if (!req->flags || (~DRM_MODE_CURSOR_FLAGS & req->flags))
3022                 return -EINVAL;
3023
3024         crtc = drm_crtc_find(dev, req->crtc_id);
3025         if (!crtc) {
3026                 DRM_DEBUG_KMS("Unknown CRTC ID %d\n", req->crtc_id);
3027                 return -ENOENT;
3028         }
3029
3030         /*
3031          * If this crtc has a universal cursor plane, call that plane's update
3032          * handler rather than using legacy cursor handlers.
3033          */
3034         drm_modeset_lock_crtc(crtc, crtc->cursor);
3035         if (crtc->cursor) {
3036                 ret = drm_mode_cursor_universal(crtc, req, file_priv);
3037                 goto out;
3038         }
3039
3040         if (req->flags & DRM_MODE_CURSOR_BO) {
3041                 if (!crtc->funcs->cursor_set && !crtc->funcs->cursor_set2) {
3042                         ret = -ENXIO;
3043                         goto out;
3044                 }
3045                 /* Turns off the cursor if handle is 0 */
3046                 if (crtc->funcs->cursor_set2)
3047                         ret = crtc->funcs->cursor_set2(crtc, file_priv, req->handle,
3048                                                       req->width, req->height, req->hot_x, req->hot_y);
3049                 else
3050                         ret = crtc->funcs->cursor_set(crtc, file_priv, req->handle,
3051                                                       req->width, req->height);
3052         }
3053
3054         if (req->flags & DRM_MODE_CURSOR_MOVE) {
3055                 if (crtc->funcs->cursor_move) {
3056                         ret = crtc->funcs->cursor_move(crtc, req->x, req->y);
3057                 } else {
3058                         ret = -EFAULT;
3059                         goto out;
3060                 }
3061         }
3062 out:
3063         drm_modeset_unlock_crtc(crtc);
3064
3065         return ret;
3066
3067 }
3068
3069
3070 /**
3071  * drm_mode_cursor_ioctl - set CRTC's cursor configuration
3072  * @dev: drm device for the ioctl
3073  * @data: data pointer for the ioctl
3074  * @file_priv: drm file for the ioctl call
3075  *
3076  * Set the cursor configuration based on user request.
3077  *
3078  * Called by the user via ioctl.
3079  *
3080  * Returns:
3081  * Zero on success, negative errno on failure.
3082  */
3083 int drm_mode_cursor_ioctl(struct drm_device *dev,
3084                           void *data, struct drm_file *file_priv)
3085 {
3086         struct drm_mode_cursor *req = data;
3087         struct drm_mode_cursor2 new_req;
3088
3089         memcpy(&new_req, req, sizeof(struct drm_mode_cursor));
3090         new_req.hot_x = new_req.hot_y = 0;
3091
3092         return drm_mode_cursor_common(dev, &new_req, file_priv);
3093 }
3094
3095 /**
3096  * drm_mode_cursor2_ioctl - set CRTC's cursor configuration
3097  * @dev: drm device for the ioctl
3098  * @data: data pointer for the ioctl
3099  * @file_priv: drm file for the ioctl call
3100  *
3101  * Set the cursor configuration based on user request. This implements the 2nd
3102  * version of the cursor ioctl, which allows userspace to additionally specify
3103  * the hotspot of the pointer.
3104  *
3105  * Called by the user via ioctl.
3106  *
3107  * Returns:
3108  * Zero on success, negative errno on failure.
3109  */
3110 int drm_mode_cursor2_ioctl(struct drm_device *dev,
3111                            void *data, struct drm_file *file_priv)
3112 {
3113         struct drm_mode_cursor2 *req = data;
3114
3115         return drm_mode_cursor_common(dev, req, file_priv);
3116 }
3117
3118 /**
3119  * drm_mode_legacy_fb_format - compute drm fourcc code from legacy description
3120  * @bpp: bits per pixels
3121  * @depth: bit depth per pixel
3122  *
3123  * Computes a drm fourcc pixel format code for the given @bpp/@depth values.
3124  * Useful in fbdev emulation code, since that deals in those values.
3125  */
3126 uint32_t drm_mode_legacy_fb_format(uint32_t bpp, uint32_t depth)
3127 {
3128         uint32_t fmt;
3129
3130         switch (bpp) {
3131         case 8:
3132                 fmt = DRM_FORMAT_C8;
3133                 break;
3134         case 16:
3135                 if (depth == 15)
3136                         fmt = DRM_FORMAT_XRGB1555;
3137                 else
3138                         fmt = DRM_FORMAT_RGB565;
3139                 break;
3140         case 24:
3141                 fmt = DRM_FORMAT_RGB888;
3142                 break;
3143         case 32:
3144                 if (depth == 24)
3145                         fmt = DRM_FORMAT_XRGB8888;
3146                 else if (depth == 30)
3147                         fmt = DRM_FORMAT_XRGB2101010;
3148                 else
3149                         fmt = DRM_FORMAT_ARGB8888;
3150                 break;
3151         default:
3152                 DRM_ERROR("bad bpp, assuming x8r8g8b8 pixel format\n");
3153                 fmt = DRM_FORMAT_XRGB8888;
3154                 break;
3155         }
3156
3157         return fmt;
3158 }
3159 EXPORT_SYMBOL(drm_mode_legacy_fb_format);
3160
3161 /**
3162  * drm_mode_addfb - add an FB to the graphics configuration
3163  * @dev: drm device for the ioctl
3164  * @data: data pointer for the ioctl
3165  * @file_priv: drm file for the ioctl call
3166  *
3167  * Add a new FB to the specified CRTC, given a user request. This is the
3168  * original addfb ioctl which only supported RGB formats.
3169  *
3170  * Called by the user via ioctl.
3171  *
3172  * Returns:
3173  * Zero on success, negative errno on failure.
3174  */
3175 int drm_mode_addfb(struct drm_device *dev,
3176                    void *data, struct drm_file *file_priv)
3177 {
3178         struct drm_mode_fb_cmd *or = data;
3179         struct drm_mode_fb_cmd2 r = {};
3180         int ret;
3181
3182         /* convert to new format and call new ioctl */
3183         r.fb_id = or->fb_id;
3184         r.width = or->width;
3185         r.height = or->height;
3186         r.pitches[0] = or->pitch;
3187         r.pixel_format = drm_mode_legacy_fb_format(or->bpp, or->depth);
3188         r.handles[0] = or->handle;
3189
3190         ret = drm_mode_addfb2(dev, &r, file_priv);
3191         if (ret)
3192                 return ret;
3193
3194         or->fb_id = r.fb_id;
3195
3196         return 0;
3197 }
3198
3199 static int format_check(const struct drm_mode_fb_cmd2 *r)
3200 {
3201         uint32_t format = r->pixel_format & ~DRM_FORMAT_BIG_ENDIAN;
3202
3203         switch (format) {
3204         case DRM_FORMAT_C8:
3205         case DRM_FORMAT_RGB332:
3206         case DRM_FORMAT_BGR233:
3207         case DRM_FORMAT_XRGB4444:
3208         case DRM_FORMAT_XBGR4444:
3209         case DRM_FORMAT_RGBX4444:
3210         case DRM_FORMAT_BGRX4444:
3211         case DRM_FORMAT_ARGB4444:
3212         case DRM_FORMAT_ABGR4444:
3213         case DRM_FORMAT_RGBA4444:
3214         case DRM_FORMAT_BGRA4444:
3215         case DRM_FORMAT_XRGB1555:
3216         case DRM_FORMAT_XBGR1555:
3217         case DRM_FORMAT_RGBX5551:
3218         case DRM_FORMAT_BGRX5551:
3219         case DRM_FORMAT_ARGB1555:
3220         case DRM_FORMAT_ABGR1555:
3221         case DRM_FORMAT_RGBA5551:
3222         case DRM_FORMAT_BGRA5551:
3223         case DRM_FORMAT_RGB565:
3224         case DRM_FORMAT_BGR565:
3225         case DRM_FORMAT_RGB888:
3226         case DRM_FORMAT_BGR888:
3227         case DRM_FORMAT_XRGB8888:
3228         case DRM_FORMAT_XBGR8888:
3229         case DRM_FORMAT_RGBX8888:
3230         case DRM_FORMAT_BGRX8888:
3231         case DRM_FORMAT_ARGB8888:
3232         case DRM_FORMAT_ABGR8888:
3233         case DRM_FORMAT_RGBA8888:
3234         case DRM_FORMAT_BGRA8888:
3235         case DRM_FORMAT_XRGB2101010:
3236         case DRM_FORMAT_XBGR2101010:
3237         case DRM_FORMAT_RGBX1010102:
3238         case DRM_FORMAT_BGRX1010102:
3239         case DRM_FORMAT_ARGB2101010:
3240         case DRM_FORMAT_ABGR2101010:
3241         case DRM_FORMAT_RGBA1010102:
3242         case DRM_FORMAT_BGRA1010102:
3243         case DRM_FORMAT_YUYV:
3244         case DRM_FORMAT_YVYU:
3245         case DRM_FORMAT_UYVY:
3246         case DRM_FORMAT_VYUY:
3247         case DRM_FORMAT_AYUV:
3248         case DRM_FORMAT_NV12:
3249         case DRM_FORMAT_NV21:
3250         case DRM_FORMAT_NV16:
3251         case DRM_FORMAT_NV61:
3252         case DRM_FORMAT_NV24:
3253         case DRM_FORMAT_NV42:
3254         case DRM_FORMAT_YUV410:
3255         case DRM_FORMAT_YVU410:
3256         case DRM_FORMAT_YUV411:
3257         case DRM_FORMAT_YVU411:
3258         case DRM_FORMAT_YUV420:
3259         case DRM_FORMAT_YVU420:
3260         case DRM_FORMAT_YUV422:
3261         case DRM_FORMAT_YVU422:
3262         case DRM_FORMAT_YUV444:
3263         case DRM_FORMAT_YVU444:
3264                 return 0;
3265         default:
3266                 DRM_DEBUG_KMS("invalid pixel format %s\n",
3267                               drm_get_format_name(r->pixel_format));
3268                 return -EINVAL;
3269         }
3270 }
3271
3272 static int framebuffer_check(const struct drm_mode_fb_cmd2 *r)
3273 {
3274         int ret, hsub, vsub, num_planes, i;
3275
3276         ret = format_check(r);
3277         if (ret) {
3278                 DRM_DEBUG_KMS("bad framebuffer format %s\n",
3279                               drm_get_format_name(r->pixel_format));
3280                 return ret;
3281         }
3282
3283         hsub = drm_format_horz_chroma_subsampling(r->pixel_format);
3284         vsub = drm_format_vert_chroma_subsampling(r->pixel_format);
3285         num_planes = drm_format_num_planes(r->pixel_format);
3286
3287         if (r->width == 0 || r->width % hsub) {
3288                 DRM_DEBUG_KMS("bad framebuffer width %u\n", r->width);
3289                 return -EINVAL;
3290         }
3291
3292         if (r->height == 0 || r->height % vsub) {
3293                 DRM_DEBUG_KMS("bad framebuffer height %u\n", r->height);
3294                 return -EINVAL;
3295         }
3296
3297         for (i = 0; i < num_planes; i++) {
3298                 unsigned int width = r->width / (i != 0 ? hsub : 1);
3299                 unsigned int height = r->height / (i != 0 ? vsub : 1);
3300                 unsigned int cpp = drm_format_plane_cpp(r->pixel_format, i);
3301
3302                 if (!r->handles[i]) {
3303                         DRM_DEBUG_KMS("no buffer object handle for plane %d\n", i);
3304                         return -EINVAL;
3305                 }
3306
3307                 if ((uint64_t) width * cpp > UINT_MAX)
3308                         return -ERANGE;
3309
3310                 if ((uint64_t) height * r->pitches[i] + r->offsets[i] > UINT_MAX)
3311                         return -ERANGE;
3312
3313                 if (r->pitches[i] < width * cpp) {
3314                         DRM_DEBUG_KMS("bad pitch %u for plane %d\n", r->pitches[i], i);
3315                         return -EINVAL;
3316                 }
3317
3318                 if (r->modifier[i] && !(r->flags & DRM_MODE_FB_MODIFIERS)) {
3319                         DRM_DEBUG_KMS("bad fb modifier %llu for plane %d\n",
3320                                       r->modifier[i], i);
3321                         return -EINVAL;
3322                 }
3323         }
3324
3325         return 0;
3326 }
3327
3328 static struct drm_framebuffer *add_framebuffer_internal(struct drm_device *dev,
3329                                                         struct drm_mode_fb_cmd2 *r,
3330                                                         struct drm_file *file_priv)
3331 {
3332         struct drm_mode_config *config = &dev->mode_config;
3333         struct drm_framebuffer *fb;
3334         int ret;
3335
3336         if (r->flags & ~(DRM_MODE_FB_INTERLACED | DRM_MODE_FB_MODIFIERS)) {
3337                 DRM_DEBUG_KMS("bad framebuffer flags 0x%08x\n", r->flags);
3338                 return ERR_PTR(-EINVAL);
3339         }
3340
3341         if ((config->min_width > r->width) || (r->width > config->max_width)) {
3342                 DRM_DEBUG_KMS("bad framebuffer width %d, should be >= %d && <= %d\n",
3343                           r->width, config->min_width, config->max_width);
3344                 return ERR_PTR(-EINVAL);
3345         }
3346         if ((config->min_height > r->height) || (r->height > config->max_height)) {
3347                 DRM_DEBUG_KMS("bad framebuffer height %d, should be >= %d && <= %d\n",
3348                           r->height, config->min_height, config->max_height);
3349                 return ERR_PTR(-EINVAL);
3350         }
3351
3352         if (r->flags & DRM_MODE_FB_MODIFIERS &&
3353             !dev->mode_config.allow_fb_modifiers) {
3354                 DRM_DEBUG_KMS("driver does not support fb modifiers\n");
3355                 return ERR_PTR(-EINVAL);
3356         }
3357
3358         ret = framebuffer_check(r);
3359         if (ret)
3360                 return ERR_PTR(ret);
3361
3362         fb = dev->mode_config.funcs->fb_create(dev, file_priv, r);
3363         if (IS_ERR(fb)) {
3364                 DRM_DEBUG_KMS("could not create framebuffer\n");
3365                 return fb;
3366         }
3367
3368         mutex_lock(&file_priv->fbs_lock);
3369         r->fb_id = fb->base.id;
3370         list_add(&fb->filp_head, &file_priv->fbs);
3371         DRM_DEBUG_KMS("[FB:%d]\n", fb->base.id);
3372         mutex_unlock(&file_priv->fbs_lock);
3373
3374         return fb;
3375 }
3376
3377 /**
3378  * drm_mode_addfb2 - add an FB to the graphics configuration
3379  * @dev: drm device for the ioctl
3380  * @data: data pointer for the ioctl
3381  * @file_priv: drm file for the ioctl call
3382  *
3383  * Add a new FB to the specified CRTC, given a user request with format. This is
3384  * the 2nd version of the addfb ioctl, which supports multi-planar framebuffers
3385  * and uses fourcc codes as pixel format specifiers.
3386  *
3387  * Called by the user via ioctl.
3388  *
3389  * Returns:
3390  * Zero on success, negative errno on failure.
3391  */
3392 int drm_mode_addfb2(struct drm_device *dev,
3393                     void *data, struct drm_file *file_priv)
3394 {
3395         struct drm_framebuffer *fb;
3396
3397         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3398                 return -EINVAL;
3399
3400         fb = add_framebuffer_internal(dev, data, file_priv);
3401         if (IS_ERR(fb))
3402                 return PTR_ERR(fb);
3403
3404         return 0;
3405 }
3406
3407 /**
3408  * drm_mode_rmfb - remove an FB from the configuration
3409  * @dev: drm device for the ioctl
3410  * @data: data pointer for the ioctl
3411  * @file_priv: drm file for the ioctl call
3412  *
3413  * Remove the FB specified by the user.
3414  *
3415  * Called by the user via ioctl.
3416  *
3417  * Returns:
3418  * Zero on success, negative errno on failure.
3419  */
3420 int drm_mode_rmfb(struct drm_device *dev,
3421                    void *data, struct drm_file *file_priv)
3422 {
3423         struct drm_framebuffer *fb = NULL;
3424         struct drm_framebuffer *fbl = NULL;
3425         uint32_t *id = data;
3426         int found = 0;
3427
3428         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3429                 return -EINVAL;
3430
3431         mutex_lock(&file_priv->fbs_lock);
3432         mutex_lock(&dev->mode_config.fb_lock);
3433         fb = __drm_framebuffer_lookup(dev, *id);
3434         if (!fb)
3435                 goto fail_lookup;
3436
3437         list_for_each_entry(fbl, &file_priv->fbs, filp_head)
3438                 if (fb == fbl)
3439                         found = 1;
3440         if (!found)
3441                 goto fail_lookup;
3442
3443         /* Mark fb as reaped, we still have a ref from fpriv->fbs. */
3444         __drm_framebuffer_unregister(dev, fb);
3445
3446         list_del_init(&fb->filp_head);
3447         mutex_unlock(&dev->mode_config.fb_lock);
3448         mutex_unlock(&file_priv->fbs_lock);
3449
3450         drm_framebuffer_remove(fb);
3451
3452         return 0;
3453
3454 fail_lookup:
3455         mutex_unlock(&dev->mode_config.fb_lock);
3456         mutex_unlock(&file_priv->fbs_lock);
3457
3458         return -ENOENT;
3459 }
3460
3461 /**
3462  * drm_mode_getfb - get FB info
3463  * @dev: drm device for the ioctl
3464  * @data: data pointer for the ioctl
3465  * @file_priv: drm file for the ioctl call
3466  *
3467  * Lookup the FB given its ID and return info about it.
3468  *
3469  * Called by the user via ioctl.
3470  *
3471  * Returns:
3472  * Zero on success, negative errno on failure.
3473  */
3474 int drm_mode_getfb(struct drm_device *dev,
3475                    void *data, struct drm_file *file_priv)
3476 {
3477         struct drm_mode_fb_cmd *r = data;
3478         struct drm_framebuffer *fb;
3479         int ret;
3480
3481         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3482                 return -EINVAL;
3483
3484         fb = drm_framebuffer_lookup(dev, r->fb_id);
3485         if (!fb)
3486                 return -ENOENT;
3487
3488         r->height = fb->height;
3489         r->width = fb->width;
3490         r->depth = fb->depth;
3491         r->bpp = fb->bits_per_pixel;
3492         r->pitch = fb->pitches[0];
3493         if (fb->funcs->create_handle) {
3494                 if (file_priv->is_master || capable(CAP_SYS_ADMIN) ||
3495                     drm_is_control_client(file_priv)) {
3496                         ret = fb->funcs->create_handle(fb, file_priv,
3497                                                        &r->handle);
3498                 } else {
3499                         /* GET_FB() is an unprivileged ioctl so we must not
3500                          * return a buffer-handle to non-master processes! For
3501                          * backwards-compatibility reasons, we cannot make
3502                          * GET_FB() privileged, so just return an invalid handle
3503                          * for non-masters. */
3504                         r->handle = 0;
3505                         ret = 0;
3506                 }
3507         } else {
3508                 ret = -ENODEV;
3509         }
3510
3511         drm_framebuffer_unreference(fb);
3512
3513         return ret;
3514 }
3515
3516 /**
3517  * drm_mode_dirtyfb_ioctl - flush frontbuffer rendering on an FB
3518  * @dev: drm device for the ioctl
3519  * @data: data pointer for the ioctl
3520  * @file_priv: drm file for the ioctl call
3521  *
3522  * Lookup the FB and flush out the damaged area supplied by userspace as a clip
3523  * rectangle list. Generic userspace which does frontbuffer rendering must call
3524  * this ioctl to flush out the changes on manual-update display outputs, e.g.
3525  * usb display-link, mipi manual update panels or edp panel self refresh modes.
3526  *
3527  * Modesetting drivers which always update the frontbuffer do not need to
3528  * implement the corresponding ->dirty framebuffer callback.
3529  *
3530  * Called by the user via ioctl.
3531  *
3532  * Returns:
3533  * Zero on success, negative errno on failure.
3534  */
3535 int drm_mode_dirtyfb_ioctl(struct drm_device *dev,
3536                            void *data, struct drm_file *file_priv)
3537 {
3538         struct drm_clip_rect __user *clips_ptr;
3539         struct drm_clip_rect *clips = NULL;
3540         struct drm_mode_fb_dirty_cmd *r = data;
3541         struct drm_framebuffer *fb;
3542         unsigned flags;
3543         int num_clips;
3544         int ret;
3545
3546         if (!drm_core_check_feature(dev, DRIVER_MODESET))
3547                 return -EINVAL;
3548
3549         fb = drm_framebuffer_lookup(dev, r->fb_id);
3550         if (!fb)
3551                 return -ENOENT;
3552
3553         num_clips = r->num_clips;
3554         clips_ptr = (struct drm_clip_rect __user *)(unsigned long)r->clips_ptr;
3555
3556         if (!num_clips != !clips_ptr) {
3557                 ret = -EINVAL;
3558                 goto out_err1;
3559         }
3560
3561         flags = DRM_MODE_FB_DIRTY_FLAGS & r->flags;
3562
3563         /* If userspace annotates copy, clips must come in pairs */
3564         if (flags & DRM_MODE_FB_DIRTY_ANNOTATE_COPY && (num_clips % 2)) {
3565                 ret = -EINVAL;
3566                 goto out_err1;
3567         }
3568
3569         if (num_clips && clips_ptr) {
3570                 if (num_clips < 0 || num_clips > DRM_MODE_FB_DIRTY_MAX_CLIPS) {
3571                         ret = -EINVAL;
3572                         goto out_err1;
3573                 }
3574                 clips = kcalloc(num_clips, sizeof(*clips), GFP_KERNEL);
3575                 if (!clips) {
3576                         ret = -ENOMEM;
3577                         goto out_err1;
3578                 }
3579
3580                 ret = copy_from_user(clips, clips_ptr,
3581                                      num_clips * sizeof(*clips));
3582                 if (ret) {
3583                         ret = -EFAULT;
3584                         goto out_err2;
3585                 }
3586         }
3587
3588         if (fb->funcs->dirty) {
3589                 ret = fb->funcs->dirty(fb, file_priv, flags, r->color,
3590                                        clips, num_clips);
3591         } else {
3592                 ret = -ENOSYS;
3593         }
3594
3595 out_err2:
3596         kfree(clips);
3597 out_err1:
3598         drm_framebuffer_unreference(fb);
3599
3600         return ret;
3601 }
3602
3603
3604 /**
3605  * drm_fb_release - remove and free the FBs on this file
3606  * @priv: drm file for the ioctl
3607  *
3608  * Destroy all the FBs associated with @filp.
3609  *
3610  * Called by the user via ioctl.
3611  *
3612  * Returns:
3613  * Zero on success, negative errno on failure.
3614  */
3615 void drm_fb_release(struct drm_file *priv)
3616 {
3617         struct drm_device *dev = priv->minor->dev;
3618         struct drm_framebuffer *fb, *tfb;
3619
3620         /*
3621          * When the file gets released that means no one else can access the fb
3622          * list any more, so no need to grab fpriv->fbs_lock. And we need to
3623          * avoid upsetting lockdep since the universal cursor code adds a
3624          * framebuffer while holding mutex locks.
3625          *
3626          * Note that a real deadlock between fpriv->fbs_lock and the modeset
3627          * locks is impossible here since no one else but this function can get
3628          * at it any more.
3629          */
3630         list_for_each_entry_safe(fb, tfb, &priv->fbs, filp_head) {
3631
3632                 mutex_lock(&dev->mode_config.fb_lock);
3633                 /* Mark fb as reaped, we still have a ref from fpriv->fbs. */
3634                 __drm_framebuffer_unregister(dev, fb);
3635                 mutex_unlock(&dev->mode_config.fb_lock);
3636
3637                 list_del_init(&fb->filp_head);
3638
3639                 /* This will also drop the fpriv->fbs reference. */
3640                 drm_framebuffer_remove(fb);
3641         }
3642 }
3643
3644 /**
3645  * drm_property_create - create a new property type
3646  * @dev: drm device
3647  * @flags: flags specifying the property type
3648  * @name: name of the property
3649  * @num_values: number of pre-defined values
3650  *
3651  * This creates a new generic drm property which can then be attached to a drm
3652  * object with drm_object_attach_property. The returned property object must be
3653  * freed with drm_property_destroy.
3654  *
3655  * Note that the DRM core keeps a per-device list of properties and that, if
3656  * drm_mode_config_cleanup() is called, it will destroy all properties created
3657  * by the driver.
3658  *
3659  * Returns:
3660  * A pointer to the newly created property on success, NULL on failure.
3661  */
3662 struct drm_property *drm_property_create(struct drm_device *dev, int flags,
3663                                          const char *name, int num_values)
3664 {
3665         struct drm_property *property = NULL;
3666         int ret;
3667
3668         property = kzalloc(sizeof(struct drm_property), GFP_KERNEL);
3669         if (!property)
3670                 return NULL;
3671
3672         property->dev = dev;
3673
3674         if (num_values) {
3675                 property->values = kcalloc(num_values, sizeof(uint64_t),
3676                                            GFP_KERNEL);
3677                 if (!property->values)
3678                         goto fail;
3679         }
3680
3681         ret = drm_mode_object_get(dev, &property->base, DRM_MODE_OBJECT_PROPERTY);
3682         if (ret)
3683                 goto fail;
3684
3685         property->flags = flags;
3686         property->num_values = num_values;
3687         INIT_LIST_HEAD(&property->enum_list);
3688
3689         if (name) {
3690                 strncpy(property->name, name, DRM_PROP_NAME_LEN);
3691                 property->name[DRM_PROP_NAME_LEN-1] = '\0';
3692         }
3693
3694         list_add_tail(&property->head, &dev->mode_config.property_list);
3695
3696         WARN_ON(!drm_property_type_valid(property));
3697
3698         return property;
3699 fail:
3700         kfree(property->values);
3701         kfree(property);
3702         return NULL;
3703 }
3704 EXPORT_SYMBOL(drm_property_create);
3705
3706 /**
3707  * drm_property_create_enum - create a new enumeration property type
3708  * @dev: drm device
3709  * @flags: flags specifying the property type
3710  * @name: name of the property
3711  * @props: enumeration lists with property values
3712  * @num_values: number of pre-defined values
3713  *
3714  * This creates a new generic drm property which can then be attached to a drm
3715  * object with drm_object_attach_property. The returned property object must be
3716  * freed with drm_property_destroy.
3717  *
3718  * Userspace is only allowed to set one of the predefined values for enumeration
3719  * properties.
3720  *
3721  * Returns:
3722  * A pointer to the newly created property on success, NULL on failure.
3723  */
3724 struct drm_property *drm_property_create_enum(struct drm_device *dev, int flags,
3725                                          const char *name,
3726                                          const struct drm_prop_enum_list *props,
3727                                          int num_values)
3728 {
3729         struct drm_property *property;
3730         int i, ret;
3731
3732         flags |= DRM_MODE_PROP_ENUM;
3733
3734         property = drm_property_create(dev, flags, name, num_values);
3735         if (!property)
3736                 return NULL;
3737
3738         for (i = 0; i < num_values; i++) {
3739                 ret = drm_property_add_enum(property, i,
3740                                       props[i].type,
3741                                       props[i].name);
3742                 if (ret) {
3743                         drm_property_destroy(dev, property);
3744                         return NULL;
3745                 }
3746         }
3747
3748         return property;
3749 }
3750 EXPORT_SYMBOL(drm_property_create_enum);
3751
3752 /**
3753  * drm_property_create_bitmask - create a new bitmask property type
3754  * @dev: drm device
3755  * @flags: flags specifying the property type
3756  * @name: name of the property
3757  * @props: enumeration lists with property bitflags
3758  * @num_props: size of the @props array
3759  * @supported_bits: bitmask of all supported enumeration values
3760  *
3761  * This creates a new bitmask drm property which can then be attached to a drm
3762  * object with drm_object_attach_property. The returned property object must be
3763  * freed with drm_property_destroy.
3764  *
3765  * Compared to plain enumeration properties userspace is allowed to set any
3766  * or'ed together combination of the predefined property bitflag values
3767  *
3768  * Returns:
3769  * A pointer to the newly created property on success, NULL on failure.
3770  */
3771 struct drm_property *drm_property_create_bitmask(struct drm_device *dev,
3772                                          int flags, const char *name,
3773                                          const struct drm_prop_enum_list *props,
3774                                          int num_props,
3775                                          uint64_t supported_bits)
3776 {
3777         struct drm_property *property;
3778         int i, ret, index = 0;
3779         int num_values = hweight64(supported_bits);
3780
3781         flags |= DRM_MODE_PROP_BITMASK;
3782
3783         property = drm_property_create(dev, flags, name, num_values);
3784         if (!property)
3785                 return NULL;
3786         for (i = 0; i < num_props; i++) {
3787                 if (!(supported_bits & (1ULL << props[i].type)))
3788                         continue;
3789
3790                 if (WARN_ON(index >= num_values)) {
3791                         drm_property_destroy(dev, property);
3792                         return NULL;
3793                 }
3794
3795                 ret = drm_property_add_enum(property, index++,
3796                                       props[i].type,
3797                                       props[i].name);
3798                 if (ret) {
3799                         drm_property_destroy(dev, property);
3800                         return NULL;
3801                 }
3802         }
3803
3804         return property;
3805 }
3806 EXPORT_SYMBOL(drm_property_create_bitmask);
3807
3808 static struct drm_property *property_create_range(struct drm_device *dev,
3809                                          int flags, const char *name,
3810                                          uint64_t min, uint64_t max)
3811 {
3812         struct drm_property *property;
3813
3814         property = drm_property_create(dev, flags, name, 2);
3815         if (!property)
3816                 return NULL;
3817
3818         property->values[0] = min;
3819         property->values[1] = max;
3820
3821         return property;
3822 }
3823
3824 /**
3825  * drm_property_create_range - create a new ranged property type
3826  * @dev: drm device
3827  * @flags: flags specifying the property type
3828  * @name: name of the property
3829  * @min: minimum value of the property
3830  * @max: maximum value of the property
3831  *
3832  * This creates a new generic drm property which can then be attached to a drm
3833  * object with drm_object_attach_property. The returned property object must be
3834  * freed with drm_property_destroy.
3835  *
3836  * Userspace is allowed to set any integer value in the (min, max) range
3837  * inclusive.
3838  *
3839  * Returns:
3840  * A pointer to the newly created property on success, NULL on failure.
3841  */
3842 struct drm_property *drm_property_create_range(struct drm_device *dev, int flags,
3843                                          const char *name,
3844                                          uint64_t min, uint64_t max)
3845 {
3846         return property_create_range(dev, DRM_MODE_PROP_RANGE | flags,
3847                         name, min, max);
3848 }
3849 EXPORT_SYMBOL(drm_property_create_range);
3850
3851 struct drm_property *drm_property_create_signed_range(struct drm_device *dev,
3852                                          int flags, const char *name,
3853                                          int64_t min, int64_t max)
3854 {
3855         return property_create_range(dev, DRM_MODE_PROP_SIGNED_RANGE | flags,
3856                         name, I642U64(min), I642U64(max));
3857 }
3858 EXPORT_SYMBOL(drm_property_create_signed_range);
3859
3860 struct drm_property *drm_property_create_object(struct drm_device *dev,
3861                                          int flags, const char *name, uint32_t type)
3862 {
3863         struct drm_property *property;
3864
3865         flags |= DRM_MODE_PROP_OBJECT;
3866
3867         property = drm_property_create(dev, flags, name, 1);
3868         if (!property)
3869                 return NULL;
3870
3871         property->values[0] = type;
3872
3873         return property;
3874 }
3875 EXPORT_SYMBOL(drm_property_create_object);
3876
3877 /**
3878  * drm_property_add_enum - add a possible value to an enumeration property
3879  * @property: enumeration property to change
3880  * @index: index of the new enumeration
3881  * @value: value of the new enumeration
3882  * @name: symbolic name of the new enumeration
3883  *
3884  * This functions adds enumerations to a property.
3885  *
3886  * It's use is deprecated, drivers should use one of the more specific helpers
3887  * to directly create the property with all enumerations already attached.
3888  *
3889  * Returns:
3890  * Zero on success, error code on failure.
3891  */
3892 int drm_property_add_enum(struct drm_property *property, int index,
3893                           uint64_t value, const char *name)
3894 {
3895         struct drm_property_enum *prop_enum;
3896
3897         if (!(drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
3898                         drm_property_type_is(property, DRM_MODE_PROP_BITMASK)))
3899                 return -EINVAL;
3900
3901         /*
3902          * Bitmask enum properties have the additional constraint of values
3903          * from 0 to 63
3904          */
3905         if (drm_property_type_is(property, DRM_MODE_PROP_BITMASK) &&
3906                         (value > 63))
3907                 return -EINVAL;
3908
3909         if (!list_empty(&property->enum_list)) {
3910                 list_for_each_entry(prop_enum, &property->enum_list, head) {
3911                         if (prop_enum->value == value) {
3912                                 strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
3913                                 prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
3914                                 return 0;
3915                         }
3916                 }
3917         }
3918
3919         prop_enum = kzalloc(sizeof(struct drm_property_enum), GFP_KERNEL);
3920         if (!prop_enum)
3921                 return -ENOMEM;
3922
3923         strncpy(prop_enum->name, name, DRM_PROP_NAME_LEN);
3924         prop_enum->name[DRM_PROP_NAME_LEN-1] = '\0';
3925         prop_enum->value = value;
3926
3927         property->values[index] = value;
3928         list_add_tail(&prop_enum->head, &property->enum_list);
3929         return 0;
3930 }
3931 EXPORT_SYMBOL(drm_property_add_enum);
3932
3933 /**
3934  * drm_property_destroy - destroy a drm property
3935  * @dev: drm device
3936  * @property: property to destry
3937  *
3938  * This function frees a property including any attached resources like
3939  * enumeration values.
3940  */
3941 void drm_property_destroy(struct drm_device *dev, struct drm_property *property)
3942 {
3943         struct drm_property_enum *prop_enum, *pt;
3944
3945         list_for_each_entry_safe(prop_enum, pt, &property->enum_list, head) {
3946                 list_del(&prop_enum->head);
3947                 kfree(prop_enum);
3948         }
3949
3950         if (property->num_values)
3951                 kfree(property->values);
3952         drm_mode_object_put(dev, &property->base);
3953         list_del(&property->head);
3954         kfree(property);
3955 }
3956 EXPORT_SYMBOL(drm_property_destroy);
3957
3958 /**
3959  * drm_object_attach_property - attach a property to a modeset object
3960  * @obj: drm modeset object
3961  * @property: property to attach
3962  * @init_val: initial value of the property
3963  *
3964  * This attaches the given property to the modeset object with the given initial
3965  * value. Currently this function cannot fail since the properties are stored in
3966  * a statically sized array.
3967  */
3968 void drm_object_attach_property(struct drm_mode_object *obj,
3969                                 struct drm_property *property,
3970                                 uint64_t init_val)
3971 {
3972         int count = obj->properties->count;
3973
3974         if (count == DRM_OBJECT_MAX_PROPERTY) {
3975                 WARN(1, "Failed to attach object property (type: 0x%x). Please "
3976                         "increase DRM_OBJECT_MAX_PROPERTY by 1 for each time "
3977                         "you see this message on the same object type.\n",
3978                         obj->type);
3979                 return;
3980         }
3981
3982         obj->properties->properties[count] = property;
3983         obj->properties->values[count] = init_val;
3984         obj->properties->count++;
3985         if (property->flags & DRM_MODE_PROP_ATOMIC)
3986                 obj->properties->atomic_count++;
3987 }
3988 EXPORT_SYMBOL(drm_object_attach_property);
3989
3990 /**
3991  * drm_object_property_set_value - set the value of a property
3992  * @obj: drm mode object to set property value for
3993  * @property: property to set
3994  * @val: value the property should be set to
3995  *
3996  * This functions sets a given property on a given object. This function only
3997  * changes the software state of the property, it does not call into the
3998  * driver's ->set_property callback.
3999  *
4000  * Returns:
4001  * Zero on success, error code on failure.
4002  */
4003 int drm_object_property_set_value(struct drm_mode_object *obj,
4004                                   struct drm_property *property, uint64_t val)
4005 {
4006         int i;
4007
4008         for (i = 0; i < obj->properties->count; i++) {
4009                 if (obj->properties->properties[i] == property) {
4010                         obj->properties->values[i] = val;
4011                         return 0;
4012                 }
4013         }
4014
4015         return -EINVAL;
4016 }
4017 EXPORT_SYMBOL(drm_object_property_set_value);
4018
4019 /**
4020  * drm_object_property_get_value - retrieve the value of a property
4021  * @obj: drm mode object to get property value from
4022  * @property: property to retrieve
4023  * @val: storage for the property value
4024  *
4025  * This function retrieves the softare state of the given property for the given
4026  * property. Since there is no driver callback to retrieve the current property
4027  * value this might be out of sync with the hardware, depending upon the driver
4028  * and property.
4029  *
4030  * Returns:
4031  * Zero on success, error code on failure.
4032  */
4033 int drm_object_property_get_value(struct drm_mode_object *obj,
4034                                   struct drm_property *property, uint64_t *val)
4035 {
4036         int i;
4037
4038         /* read-only properties bypass atomic mechanism and still store
4039          * their value in obj->properties->values[].. mostly to avoid
4040          * having to deal w/ EDID and similar props in atomic paths:
4041          */
4042         if (drm_core_check_feature(property->dev, DRIVER_ATOMIC) &&
4043                         !(property->flags & DRM_MODE_PROP_IMMUTABLE))
4044                 return drm_atomic_get_property(obj, property, val);
4045
4046         for (i = 0; i < obj->properties->count; i++) {
4047                 if (obj->properties->properties[i] == property) {
4048                         *val = obj->properties->values[i];
4049                         return 0;
4050                 }
4051         }
4052
4053         return -EINVAL;
4054 }
4055 EXPORT_SYMBOL(drm_object_property_get_value);
4056
4057 /**
4058  * drm_mode_getproperty_ioctl - get the property metadata
4059  * @dev: DRM device
4060  * @data: ioctl data
4061  * @file_priv: DRM file info
4062  *
4063  * This function retrieves the metadata for a given property, like the different
4064  * possible values for an enum property or the limits for a range property.
4065  *
4066  * Blob properties are special
4067  *
4068  * Called by the user via ioctl.
4069  *
4070  * Returns:
4071  * Zero on success, negative errno on failure.
4072  */
4073 int drm_mode_getproperty_ioctl(struct drm_device *dev,
4074                                void *data, struct drm_file *file_priv)
4075 {
4076         struct drm_mode_get_property *out_resp = data;
4077         struct drm_property *property;
4078         int enum_count = 0;
4079         int value_count = 0;
4080         int ret = 0, i;
4081         int copied;
4082         struct drm_property_enum *prop_enum;
4083         struct drm_mode_property_enum __user *enum_ptr;
4084         uint64_t __user *values_ptr;
4085
4086         if (!drm_core_check_feature(dev, DRIVER_MODESET))
4087                 return -EINVAL;
4088
4089         drm_modeset_lock_all(dev);
4090         property = drm_property_find(dev, out_resp->prop_id);
4091         if (!property) {
4092                 ret = -ENOENT;
4093                 goto done;
4094         }
4095
4096         if (drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
4097                         drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
4098                 list_for_each_entry(prop_enum, &property->enum_list, head)
4099                         enum_count++;
4100         }
4101
4102         value_count = property->num_values;
4103
4104         strncpy(out_resp->name, property->name, DRM_PROP_NAME_LEN);
4105         out_resp->name[DRM_PROP_NAME_LEN-1] = 0;
4106         out_resp->flags = property->flags;
4107
4108         if ((out_resp->count_values >= value_count) && value_count) {
4109                 values_ptr = (uint64_t __user *)(unsigned long)out_resp->values_ptr;
4110                 for (i = 0; i < value_count; i++) {
4111                         if (copy_to_user(values_ptr + i, &property->values[i], sizeof(uint64_t))) {
4112                                 ret = -EFAULT;
4113                                 goto done;
4114                         }
4115                 }
4116         }
4117         out_resp->count_values = value_count;
4118
4119         if (drm_property_type_is(property, DRM_MODE_PROP_ENUM) ||
4120                         drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
4121                 if ((out_resp->count_enum_blobs >= enum_count) && enum_count) {
4122                         copied = 0;
4123                         enum_ptr = (struct drm_mode_property_enum __user *)(unsigned long)out_resp->enum_blob_ptr;
4124                         list_for_each_entry(prop_enum, &property->enum_list, head) {
4125
4126                                 if (copy_to_user(&enum_ptr[copied].value, &prop_enum->value, sizeof(uint64_t))) {
4127                                         ret = -EFAULT;
4128                                         goto done;
4129                                 }
4130
4131                                 if (copy_to_user(&enum_ptr[copied].name,
4132                                                  &prop_enum->name, DRM_PROP_NAME_LEN)) {
4133                                         ret = -EFAULT;
4134                                         goto done;
4135                                 }
4136                                 copied++;
4137                         }
4138                 }
4139                 out_resp->count_enum_blobs = enum_count;
4140         }
4141
4142         /*
4143          * NOTE: The idea seems to have been to use this to read all the blob
4144          * property values. But nothing ever added them to the corresponding
4145          * list, userspace always used the special-purpose get_blob ioctl to
4146          * read the value for a blob property. It also doesn't make a lot of
4147          * sense to return values here when everything else is just metadata for
4148          * the property itself.
4149          */
4150         if (drm_property_type_is(property, DRM_MODE_PROP_BLOB))
4151                 out_resp->count_enum_blobs = 0;
4152 done:
4153         drm_modeset_unlock_all(dev);
4154         return ret;
4155 }
4156
4157 static struct drm_property_blob *
4158 drm_property_create_blob(struct drm_device *dev, size_t length,
4159                          const void *data)
4160 {
4161         struct drm_property_blob *blob;
4162         int ret;
4163
4164         if (!length || !data)
4165                 return NULL;
4166
4167         blob = kzalloc(sizeof(struct drm_property_blob)+length, GFP_KERNEL);
4168         if (!blob)
4169                 return NULL;
4170
4171         ret = drm_mode_object_get(dev, &blob->base, DRM_MODE_OBJECT_BLOB);
4172         if (ret) {
4173                 kfree(blob);
4174                 return NULL;
4175         }
4176
4177         blob->length = length;
4178
4179         memcpy(blob->data, data, length);
4180
4181         list_add_tail(&blob->head, &dev->mode_config.property_blob_list);
4182         return blob;
4183 }
4184
4185 static void drm_property_destroy_blob(struct drm_device *dev,
4186                                struct drm_property_blob *blob)
4187 {
4188         drm_mode_object_put(dev, &blob->base);
4189         list_del(&blob->head);
4190         kfree(blob);
4191 }
4192
4193 /**
4194  * drm_mode_getblob_ioctl - get the contents of a blob property value
4195  * @dev: DRM device
4196  * @data: ioctl data
4197  * @file_priv: DRM file info
4198  *
4199  * This function retrieves the contents of a blob property. The value stored in
4200  * an object's blob property is just a normal modeset object id.
4201  *
4202  * Called by the user via ioctl.
4203  *
4204  * Returns:
4205  * Zero on success, negative errno on failure.
4206  */
4207 int drm_mode_getblob_ioctl(struct drm_device *dev,
4208                            void *data, struct drm_file *file_priv)
4209 {
4210         struct drm_mode_get_blob *out_resp = data;
4211         struct drm_property_blob *blob;
4212         int ret = 0;
4213         void __user *blob_ptr;
4214
4215         if (!drm_core_check_feature(dev, DRIVER_MODESET))
4216                 return -EINVAL;
4217
4218         drm_modeset_lock_all(dev);
4219         blob = drm_property_blob_find(dev, out_resp->blob_id);
4220         if (!blob) {
4221                 ret = -ENOENT;
4222                 goto done;
4223         }
4224
4225         if (out_resp->length == blob->length) {
4226                 blob_ptr = (void __user *)(unsigned long)out_resp->data;
4227                 if (copy_to_user(blob_ptr, blob->data, blob->length)) {
4228                         ret = -EFAULT;
4229                         goto done;
4230                 }
4231         }
4232         out_resp->length = blob->length;
4233
4234 done:
4235         drm_modeset_unlock_all(dev);
4236         return ret;
4237 }
4238
4239 /**
4240  * drm_mode_connector_set_path_property - set tile property on connector
4241  * @connector: connector to set property on.
4242  * @path: path to use for property.
4243  *
4244  * This creates a property to expose to userspace to specify a
4245  * connector path. This is mainly used for DisplayPort MST where
4246  * connectors have a topology and we want to allow userspace to give
4247  * them more meaningful names.
4248  *
4249  * Returns:
4250  * Zero on success, negative errno on failure.
4251  */
4252 int drm_mode_connector_set_path_property(struct drm_connector *connector,
4253                                          const char *path)
4254 {
4255         struct drm_device *dev = connector->dev;
4256         size_t size = strlen(path) + 1;
4257         int ret;
4258
4259         connector->path_blob_ptr = drm_property_create_blob(connector->dev,
4260                                                             size, path);
4261         if (!connector->path_blob_ptr)
4262                 return -EINVAL;
4263
4264         ret = drm_object_property_set_value(&connector->base,
4265                                             dev->mode_config.path_property,
4266                                             connector->path_blob_ptr->base.id);
4267         return ret;
4268 }
4269 EXPORT_SYMBOL(drm_mode_connector_set_path_property);
4270
4271 /**
4272  * drm_mode_connector_set_tile_property - set tile property on connector
4273  * @connector: connector to set property on.
4274  *
4275  * This looks up the tile information for a connector, and creates a
4276  * property for userspace to parse if it exists. The property is of
4277  * the form of 8 integers using ':' as a separator.
4278  *
4279  * Returns:
4280  * Zero on success, errno on failure.
4281  */
4282 int drm_mode_connector_set_tile_property(struct drm_connector *connector)
4283 {
4284         struct drm_device *dev = connector->dev;
4285         int ret, size;
4286         char tile[256];
4287
4288         if (connector->tile_blob_ptr)
4289                 drm_property_destroy_blob(dev, connector->tile_blob_ptr);
4290
4291         if (!connector->has_tile) {
4292                 connector->tile_blob_ptr = NULL;
4293                 ret = drm_object_property_set_value(&connector->base,
4294                                                     dev->mode_config.tile_property, 0);
4295                 return ret;
4296         }
4297
4298         snprintf(tile, 256, "%d:%d:%d:%d:%d:%d:%d:%d",
4299                  connector->tile_group->id, connector->tile_is_single_monitor,
4300                  connector->num_h_tile, connector->num_v_tile,
4301                  connector->tile_h_loc, connector->tile_v_loc,
4302                  connector->tile_h_size, connector->tile_v_size);
4303         size = strlen(tile) + 1;
4304
4305         connector->tile_blob_ptr = drm_property_create_blob(connector->dev,
4306                                                             size, tile);
4307         if (!connector->tile_blob_ptr)
4308                 return -EINVAL;
4309
4310         ret = drm_object_property_set_value(&connector->base,
4311                                             dev->mode_config.tile_property,
4312                                             connector->tile_blob_ptr->base.id);
4313         return ret;
4314 }
4315 EXPORT_SYMBOL(drm_mode_connector_set_tile_property);
4316
4317 /**
4318  * drm_mode_connector_update_edid_property - update the edid property of a connector
4319  * @connector: drm connector
4320  * @edid: new value of the edid property
4321  *
4322  * This function creates a new blob modeset object and assigns its id to the
4323  * connector's edid property.
4324  *
4325  * Returns:
4326  * Zero on success, negative errno on failure.
4327  */
4328 int drm_mode_connector_update_edid_property(struct drm_connector *connector,
4329                                             const struct edid *edid)
4330 {
4331         struct drm_device *dev = connector->dev;
4332         size_t size;
4333         int ret;
4334
4335         /* ignore requests to set edid when overridden */
4336         if (connector->override_edid)
4337                 return 0;
4338
4339         if (connector->edid_blob_ptr)
4340                 drm_property_destroy_blob(dev, connector->edid_blob_ptr);
4341
4342         /* Delete edid, when there is none. */
4343         if (!edid) {
4344                 connector->edid_blob_ptr = NULL;
4345                 ret = drm_object_property_set_value(&connector->base, dev->mode_config.edid_property, 0);
4346                 return ret;
4347         }
4348
4349         size = EDID_LENGTH * (1 + edid->extensions);
4350         connector->edid_blob_ptr = drm_property_create_blob(connector->dev,
4351                                                             size, edid);
4352         if (!connector->edid_blob_ptr)
4353                 return -EINVAL;
4354
4355         ret = drm_object_property_set_value(&connector->base,
4356                                                dev->mode_config.edid_property,
4357                                                connector->edid_blob_ptr->base.id);
4358
4359         return ret;
4360 }
4361 EXPORT_SYMBOL(drm_mode_connector_update_edid_property);
4362
4363 /* Some properties could refer to dynamic refcnt'd objects, or things that
4364  * need special locking to handle lifetime issues (ie. to ensure the prop
4365  * value doesn't become invalid part way through the property update due to
4366  * race).  The value returned by reference via 'obj' should be passed back
4367  * to drm_property_change_valid_put() after the property is set (and the
4368  * object to which the property is attached has a chance to take it's own
4369  * reference).
4370  */
4371 bool drm_property_change_valid_get(struct drm_property *property,
4372                                          uint64_t value, struct drm_mode_object **ref)
4373 {
4374         int i;
4375
4376         if (property->flags & DRM_MODE_PROP_IMMUTABLE)
4377                 return false;
4378
4379         *ref = NULL;
4380
4381         if (drm_property_type_is(property, DRM_MODE_PROP_RANGE)) {
4382                 if (value < property->values[0] || value > property->values[1])
4383                         return false;
4384                 return true;
4385         } else if (drm_property_type_is(property, DRM_MODE_PROP_SIGNED_RANGE)) {
4386                 int64_t svalue = U642I64(value);
4387
4388                 if (svalue < U642I64(property->values[0]) ||
4389                                 svalue > U642I64(property->values[1]))
4390                         return false;
4391                 return true;
4392         } else if (drm_property_type_is(property, DRM_MODE_PROP_BITMASK)) {
4393                 uint64_t valid_mask = 0;
4394
4395                 for (i = 0; i < property->num_values; i++)
4396                         valid_mask |= (1ULL << property->values[i]);
4397                 return !(value & ~valid_mask);
4398         } else if (drm_property_type_is(property, DRM_MODE_PROP_BLOB)) {
4399                 /* Only the driver knows */
4400                 return true;
4401         } else if (drm_property_type_is(property, DRM_MODE_PROP_OBJECT)) {
4402                 /* a zero value for an object property translates to null: */
4403                 if (value == 0)
4404                         return true;
4405
4406                 /* handle refcnt'd objects specially: */
4407                 if (property->values[0] == DRM_MODE_OBJECT_FB) {
4408                         struct drm_framebuffer *fb;
4409                         fb = drm_framebuffer_lookup(property->dev, value);
4410                         if (fb) {
4411                                 *ref = &fb->base;
4412                                 return true;
4413                         } else {
4414                                 return false;
4415                         }
4416                 } else {
4417                         return _object_find(property->dev, value, property->values[0]) != NULL;
4418                 }
4419         }
4420
4421         for (i = 0; i < property->num_values; i++)
4422                 if (property->values[i] == value)
4423                         return true;
4424         return false;
4425 }
4426
4427 void drm_property_change_valid_put(struct drm_property *property,
4428                 struct drm_mode_object *ref)
4429 {
4430         if (!ref)
4431                 return;
4432
4433         if (drm_property_type_is(property, DRM_MODE_PROP_OBJECT)) {
4434                 if (property->values[0] == DRM_MODE_OBJECT_FB)
4435                         drm_framebuffer_unreference(obj_to_fb(ref));
4436         }
4437 }
4438
4439 /**
4440  * drm_mode_connector_property_set_ioctl - set the current value of a connector property
4441  * @dev: DRM device
4442  * @data: ioctl data
4443  * @file_priv: DRM file info
4444  *
4445  * This function sets the current value for a connectors's property. It also
4446  * calls into a driver's ->set_property callback to update the hardware state
4447  *
4448  * Called by the user via ioctl.
4449  *
4450  * Returns:
4451  * Zero on success, negative errno on failure.
4452  */
4453 int drm_mode_connector_property_set_ioctl(struct drm_device *dev,
4454                                        void *data, struct drm_file *file_priv)
4455 {
4456         struct drm_mode_connector_set_property *conn_set_prop = data;
4457         struct drm_mode_obj_set_property obj_set_prop = {
4458                 .value = conn_set_prop->value,
4459                 .prop_id = conn_set_prop->prop_id,
4460                 .obj_id = conn_set_prop->connector_id,
4461                 .obj_type = DRM_MODE_OBJECT_CONNECTOR
4462         };
4463
4464         /* It does all the locking and checking we need */
4465         return drm_mode_obj_set_property_ioctl(dev, &obj_set_prop, file_priv);
4466 }
4467
4468 static int drm_mode_connector_set_obj_prop(struct drm_mode_object *obj,
4469                                            struct drm_property *property,
4470                                            uint64_t value)
4471 {
4472         int ret = -EINVAL;
4473         struct drm_connector *connector = obj_to_connector(obj);
4474
4475         /* Do DPMS ourselves */
4476         if (property == connector->dev->mode_config.dpms_property) {
4477                 if (connector->funcs->dpms)
4478                         (*connector->funcs->dpms)(connector, (int)value);
4479                 ret = 0;
4480         } else if (connector->funcs->set_property)
4481                 ret = connector->funcs->set_property(connector, property, value);
4482
4483         /* store the property value if successful */
4484         if (!ret)
4485                 drm_object_property_set_value(&connector->base, property, value);
4486         return ret;
4487 }
4488
4489 static int drm_mode_crtc_set_obj_prop(struct drm_mode_object *obj,
4490                                       struct drm_property *property,
4491                                       uint64_t value)
4492 {
4493         int ret = -EINVAL;
4494         struct drm_crtc *crtc = obj_to_crtc(obj);
4495
4496         if (crtc->funcs->set_property)
4497                 ret = crtc->funcs->set_property(crtc, property, value);
4498         if (!ret)
4499                 drm_object_property_set_value(obj, property, value);
4500
4501         return ret;
4502 }
4503
4504 /**
4505  * drm_mode_plane_set_obj_prop - set the value of a property
4506  * @plane: drm plane object to set property value for
4507  * @property: property to set
4508  * @value: value the property should be set to
4509  *
4510  * This functions sets a given property on a given plane object. This function
4511  * calls the driver's ->set_property callback and changes the software state of
4512  * the property if the callback succeeds.
4513  *
4514  * Returns:
4515  * Zero on success, error code on failure.
4516  */
4517 int drm_mode_plane_set_obj_prop(struct drm_plane *plane,
4518                                 struct drm_property *property,
4519                                 uint64_t value)
4520 {
4521         int ret = -EINVAL;
4522         struct drm_mode_object *obj = &plane->base;
4523
4524         if (plane->funcs->set_property)
4525                 ret = plane->funcs->set_property(plane, property, value);
4526         if (!ret)
4527                 drm_object_property_set_value(obj, property, value);
4528
4529         return ret;
4530 }
4531 EXPORT_SYMBOL(drm_mode_plane_set_obj_prop);
4532
4533 /**
4534  * drm_mode_obj_get_properties_ioctl - get the current value of a object's property
4535  * @dev: DRM device
4536  * @data: ioctl data
4537  * @file_priv: DRM file info
4538  *
4539  * This function retrieves the current value for an object's property. Compared
4540  * to the connector specific ioctl this one is extended to also work on crtc and
4541  * plane objects.
4542  *
4543  * Called by the user via ioctl.
4544  *
4545  * Returns:
4546  * Zero on success, negative errno on failure.
4547  */
4548 int drm_mode_obj_get_properties_ioctl(struct drm_device *dev, void *data,
4549                                       struct drm_file *file_priv)
4550 {
4551         struct drm_mode_obj_get_properties *arg = data;
4552         struct drm_mode_object *obj;
4553         int ret = 0;
4554
4555         if (!drm_core_check_feature(dev, DRIVER_MODESET))
4556                 return -EINVAL;
4557
4558         drm_modeset_lock_all(dev);
4559
4560         obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
4561         if (!obj) {
4562                 ret = -ENOENT;
4563                 goto out;
4564         }
4565         if (!obj->properties) {
4566                 ret = -EINVAL;
4567                 goto out;
4568         }
4569
4570         ret = get_properties(obj, file_priv->atomic,
4571                         (uint32_t __user *)(unsigned long)(arg->props_ptr),
4572                         (uint64_t __user *)(unsigned long)(arg->prop_values_ptr),
4573                         &arg->count_props);
4574
4575 out:
4576         drm_modeset_unlock_all(dev);
4577         return ret;
4578 }
4579
4580 /**
4581  * drm_mode_obj_set_property_ioctl - set the current value of an object's property
4582  * @dev: DRM device
4583  * @data: ioctl data
4584  * @file_priv: DRM file info
4585  *
4586  * This function sets the current value for an object's property. It also calls
4587  * into a driver's ->set_property callback to update the hardware state.
4588  * Compared to the connector specific ioctl this one is extended to also work on
4589  * crtc and plane objects.
4590  *
4591  * Called by the user via ioctl.
4592  *
4593  * Returns:
4594  * Zero on success, negative errno on failure.
4595  */
4596 int drm_mode_obj_set_property_ioctl(struct drm_device *dev, void *data,
4597                                     struct drm_file *file_priv)
4598 {
4599         struct drm_mode_obj_set_property *arg = data;
4600         struct drm_mode_object *arg_obj;
4601         struct drm_mode_object *prop_obj;
4602         struct drm_property *property;
4603         int i, ret = -EINVAL;
4604         struct drm_mode_object *ref;
4605
4606         if (!drm_core_check_feature(dev, DRIVER_MODESET))
4607                 return -EINVAL;
4608
4609         drm_modeset_lock_all(dev);
4610
4611         arg_obj = drm_mode_object_find(dev, arg->obj_id, arg->obj_type);
4612         if (!arg_obj) {
4613                 ret = -ENOENT;
4614                 goto out;
4615         }
4616         if (!arg_obj->properties)
4617                 goto out;
4618
4619         for (i = 0; i < arg_obj->properties->count; i++)
4620                 if (arg_obj->properties->properties[i]->base.id == arg->prop_id)
4621                         break;
4622
4623         if (i == arg_obj->properties->count)
4624                 goto out;
4625
4626         prop_obj = drm_mode_object_find(dev, arg->prop_id,
4627                                         DRM_MODE_OBJECT_PROPERTY);
4628         if (!prop_obj) {
4629                 ret = -ENOENT;
4630                 goto out;
4631         }
4632         property = obj_to_property(prop_obj);
4633
4634         if (!drm_property_change_valid_get(property, arg->value, &ref))
4635                 goto out;
4636
4637         switch (arg_obj->type) {
4638         case DRM_MODE_OBJECT_CONNECTOR:
4639                 ret = drm_mode_connector_set_obj_prop(arg_obj, property,
4640                                                       arg->value);
4641                 break;
4642         case DRM_MODE_OBJECT_CRTC:
4643                 ret = drm_mode_crtc_set_obj_prop(arg_obj, property, arg->value);
4644                 break;
4645         case DRM_MODE_OBJECT_PLANE:
4646                 ret = drm_mode_plane_set_obj_prop(obj_to_plane(arg_obj),
4647                                                   property, arg->value);
4648                 break;
4649         }
4650
4651         drm_property_change_valid_put(property, ref);
4652
4653 out:
4654         drm_modeset_unlock_all(dev);
4655         return ret;
4656 }
4657
4658 /**
4659  * drm_mode_connector_attach_encoder - attach a connector to an encoder
4660  * @connector: connector to attach
4661  * @encoder: encoder to attach @connector to
4662  *
4663  * This function links up a connector to an encoder. Note that the routing
4664  * restrictions between encoders and crtcs are exposed to userspace through the
4665  * possible_clones and possible_crtcs bitmasks.
4666  *
4667  * Returns:
4668  * Zero on success, negative errno on failure.
4669  */
4670 int drm_mode_connector_attach_encoder(struct drm_connector *connector,
4671                                       struct drm_encoder *encoder)
4672 {
4673         int i;
4674
4675         for (i = 0; i < DRM_CONNECTOR_MAX_ENCODER; i++) {
4676                 if (connector->encoder_ids[i] == 0) {
4677                         connector->encoder_ids[i] = encoder->base.id;
4678                         return 0;
4679                 }
4680         }
4681         return -ENOMEM;
4682 }
4683 EXPORT_SYMBOL(drm_mode_connector_attach_encoder);
4684
4685 /**
4686  * drm_mode_crtc_set_gamma_size - set the gamma table size
4687  * @crtc: CRTC to set the gamma table size for
4688  * @gamma_size: size of the gamma table
4689  *
4690  * Drivers which support gamma tables should set this to the supported gamma
4691  * table size when initializing the CRTC. Currently the drm core only supports a
4692  * fixed gamma table size.
4693  *
4694  * Returns:
4695  * Zero on success, negative errno on failure.
4696  */
4697 int drm_mode_crtc_set_gamma_size(struct drm_crtc *crtc,
4698                                  int gamma_size)
4699 {
4700         crtc->gamma_size = gamma_size;
4701
4702         crtc->gamma_store = kcalloc(gamma_size, sizeof(uint16_t) * 3,
4703                                     GFP_KERNEL);
4704         if (!crtc->gamma_store) {
4705                 crtc->gamma_size = 0;
4706                 return -ENOMEM;
4707         }
4708
4709         return 0;
4710 }
4711 EXPORT_SYMBOL(drm_mode_crtc_set_gamma_size);
4712
4713 /**
4714  * drm_mode_gamma_set_ioctl - set the gamma table
4715  * @dev: DRM device
4716  * @data: ioctl data
4717  * @file_priv: DRM file info
4718  *
4719  * Set the gamma table of a CRTC to the one passed in by the user. Userspace can
4720  * inquire the required gamma table size through drm_mode_gamma_get_ioctl.
4721  *
4722  * Called by the user via ioctl.
4723  *
4724  * Returns:
4725  * Zero on success, negative errno on failure.
4726  */
4727 int drm_mode_gamma_set_ioctl(struct drm_device *dev,
4728                              void *data, struct drm_file *file_priv)
4729 {
4730         struct drm_mode_crtc_lut *crtc_lut = data;
4731         struct drm_crtc *crtc;
4732         void *r_base, *g_base, *b_base;
4733         int size;
4734         int ret = 0;
4735
4736         if (!drm_core_check_feature(dev, DRIVER_MODESET))
4737                 return -EINVAL;
4738
4739         drm_modeset_lock_all(dev);
4740         crtc = drm_crtc_find(dev, crtc_lut->crtc_id);
4741         if (!crtc) {
4742                 ret = -ENOENT;
4743                 goto out;
4744         }
4745
4746         if (crtc->funcs->gamma_set == NULL) {
4747                 ret = -ENOSYS;
4748                 goto out;
4749         }
4750
4751         /* memcpy into gamma store */
4752         if (crtc_lut->gamma_size != crtc->gamma_size) {
4753                 ret = -EINVAL;
4754                 goto out;
4755         }
4756
4757         size = crtc_lut->gamma_size * (sizeof(uint16_t));
4758         r_base = crtc->gamma_store;
4759         if (copy_from_user(r_base, (void __user *)(unsigned long)crtc_lut->red, size)) {
4760                 ret = -EFAULT;
4761                 goto out;
4762         }
4763
4764         g_base = r_base + size;
4765         if (copy_from_user(g_base, (void __user *)(unsigned long)crtc_lut->green, size)) {
4766                 ret = -EFAULT;
4767                 goto out;
4768         }
4769
4770         b_base = g_base + size;
4771         if (copy_from_user(b_base, (void __user *)(unsigned long)crtc_lut->blue, size)) {
4772                 ret = -EFAULT;
4773                 goto out;
4774         }
4775
4776         crtc->funcs->gamma_set(crtc, r_base, g_base, b_base, 0, crtc->gamma_size);
4777
4778 out:
4779         drm_modeset_unlock_all(dev);
4780         return ret;
4781
4782 }
4783
4784 /**
4785  * drm_mode_gamma_get_ioctl - get the gamma table
4786  * @dev: DRM device
4787  * @data: ioctl data
4788  * @file_priv: DRM file info
4789  *
4790  * Copy the current gamma table into the storage provided. This also provides
4791  * the gamma table size the driver expects, which can be used to size the
4792  * allocated storage.
4793  *
4794  * Called by the user via ioctl.
4795  *
4796  * Returns:
4797  * Zero on success, negative errno on failure.
4798  */
4799 int drm_mode_gamma_get_ioctl(struct drm_device *dev,
4800                              void *data, struct drm_file *file_priv)
4801 {
4802         struct drm_mode_crtc_lut *crtc_lut = data;
4803         struct drm_crtc *crtc;
4804         void *r_base, *g_base, *b_base;
4805         int size;
4806         int ret = 0;
4807
4808         if (!drm_core_check_feature(dev, DRIVER_MODESET))
4809                 return -EINVAL;
4810
4811         drm_modeset_lock_all(dev);
4812         crtc = drm_crtc_find(dev, crtc_lut->crtc_id);
4813         if (!crtc) {
4814                 ret = -ENOENT;
4815                 goto out;
4816         }
4817
4818         /* memcpy into gamma store */
4819         if (crtc_lut->gamma_size != crtc->gamma_size) {
4820                 ret = -EINVAL;
4821                 goto out;
4822         }
4823
4824         size = crtc_lut->gamma_size * (sizeof(uint16_t));
4825         r_base = crtc->gamma_store;
4826         if (copy_to_user((void __user *)(unsigned long)crtc_lut->red, r_base, size)) {
4827                 ret = -EFAULT;
4828                 goto out;
4829         }
4830
4831         g_base = r_base + size;
4832         if (copy_to_user((void __user *)(unsigned long)crtc_lut->green, g_base, size)) {
4833                 ret = -EFAULT;
4834                 goto out;
4835         }
4836
4837         b_base = g_base + size;
4838         if (copy_to_user((void __user *)(unsigned long)crtc_lut->blue, b_base, size)) {
4839                 ret = -EFAULT;
4840                 goto out;
4841         }
4842 out:
4843         drm_modeset_unlock_all(dev);
4844         return ret;
4845 }
4846
4847 /**
4848  * drm_mode_page_flip_ioctl - schedule an asynchronous fb update
4849  * @dev: DRM device
4850  * @data: ioctl data
4851  * @file_priv: DRM file info
4852  *
4853  * This schedules an asynchronous update on a given CRTC, called page flip.
4854  * Optionally a drm event is generated to signal the completion of the event.
4855  * Generic drivers cannot assume that a pageflip with changed framebuffer
4856  * properties (including driver specific metadata like tiling layout) will work,
4857  * but some drivers support e.g. pixel format changes through the pageflip
4858  * ioctl.
4859  *
4860  * Called by the user via ioctl.
4861  *
4862  * Returns:
4863  * Zero on success, negative errno on failure.
4864  */
4865 int drm_mode_page_flip_ioctl(struct drm_device *dev,
4866                              void *data, struct drm_file *file_priv)
4867 {
4868         struct drm_mode_crtc_page_flip *page_flip = data;
4869         struct drm_crtc *crtc;
4870         struct drm_framebuffer *fb = NULL;
4871         struct drm_pending_vblank_event *e = NULL;
4872         unsigned long flags;
4873         int ret = -EINVAL;
4874
4875         if (page_flip->flags & ~DRM_MODE_PAGE_FLIP_FLAGS ||
4876             page_flip->reserved != 0)
4877                 return -EINVAL;
4878
4879         if ((page_flip->flags & DRM_MODE_PAGE_FLIP_ASYNC) && !dev->mode_config.async_page_flip)
4880                 return -EINVAL;
4881
4882         crtc = drm_crtc_find(dev, page_flip->crtc_id);
4883         if (!crtc)
4884                 return -ENOENT;
4885
4886         drm_modeset_lock_crtc(crtc, crtc->primary);
4887         if (crtc->primary->fb == NULL) {
4888                 /* The framebuffer is currently unbound, presumably
4889                  * due to a hotplug event, that userspace has not
4890                  * yet discovered.
4891                  */
4892                 ret = -EBUSY;
4893                 goto out;
4894         }
4895
4896         if (crtc->funcs->page_flip == NULL)
4897                 goto out;
4898
4899         fb = drm_framebuffer_lookup(dev, page_flip->fb_id);
4900         if (!fb) {
4901                 ret = -ENOENT;
4902                 goto out;
4903         }
4904
4905         ret = drm_crtc_check_viewport(crtc, crtc->x, crtc->y, &crtc->mode, fb);
4906         if (ret)
4907                 goto out;
4908
4909         if (crtc->primary->fb->pixel_format != fb->pixel_format) {
4910                 DRM_DEBUG_KMS("Page flip is not allowed to change frame buffer format.\n");
4911                 ret = -EINVAL;
4912                 goto out;
4913         }
4914
4915         if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
4916                 ret = -ENOMEM;
4917                 spin_lock_irqsave(&dev->event_lock, flags);
4918                 if (file_priv->event_space < sizeof(e->event)) {
4919                         spin_unlock_irqrestore(&dev->event_lock, flags);
4920                         goto out;
4921                 }
4922                 file_priv->event_space -= sizeof(e->event);
4923                 spin_unlock_irqrestore(&dev->event_lock, flags);
4924
4925                 e = kzalloc(sizeof(*e), GFP_KERNEL);
4926                 if (e == NULL) {
4927                         spin_lock_irqsave(&dev->event_lock, flags);
4928                         file_priv->event_space += sizeof(e->event);
4929                         spin_unlock_irqrestore(&dev->event_lock, flags);
4930                         goto out;
4931                 }
4932
4933                 e->event.base.type = DRM_EVENT_FLIP_COMPLETE;
4934                 e->event.base.length = sizeof(e->event);
4935                 e->event.user_data = page_flip->user_data;
4936                 e->base.event = &e->event.base;
4937                 e->base.file_priv = file_priv;
4938                 e->base.destroy =
4939                         (void (*) (struct drm_pending_event *)) kfree;
4940         }
4941
4942         crtc->primary->old_fb = crtc->primary->fb;
4943         ret = crtc->funcs->page_flip(crtc, fb, e, page_flip->flags);
4944         if (ret) {
4945                 if (page_flip->flags & DRM_MODE_PAGE_FLIP_EVENT) {
4946                         spin_lock_irqsave(&dev->event_lock, flags);
4947                         file_priv->event_space += sizeof(e->event);
4948                         spin_unlock_irqrestore(&dev->event_lock, flags);
4949                         kfree(e);
4950                 }
4951                 /* Keep the old fb, don't unref it. */
4952                 crtc->primary->old_fb = NULL;
4953         } else {
4954                 /*
4955                  * Warn if the driver hasn't properly updated the crtc->fb
4956                  * field to reflect that the new framebuffer is now used.
4957                  * Failing to do so will screw with the reference counting
4958                  * on framebuffers.
4959                  */
4960                 WARN_ON(crtc->primary->fb != fb);
4961                 /* Unref only the old framebuffer. */
4962                 fb = NULL;
4963         }
4964
4965 out:
4966         if (fb)
4967                 drm_framebuffer_unreference(fb);
4968         if (crtc->primary->old_fb)
4969                 drm_framebuffer_unreference(crtc->primary->old_fb);
4970         crtc->primary->old_fb = NULL;
4971         drm_modeset_unlock_crtc(crtc);
4972
4973         return ret;
4974 }
4975
4976 /**
4977  * drm_mode_config_reset - call ->reset callbacks
4978  * @dev: drm device
4979  *
4980  * This functions calls all the crtc's, encoder's and connector's ->reset
4981  * callback. Drivers can use this in e.g. their driver load or resume code to
4982  * reset hardware and software state.
4983  */
4984 void drm_mode_config_reset(struct drm_device *dev)
4985 {
4986         struct drm_crtc *crtc;
4987         struct drm_plane *plane;
4988         struct drm_encoder *encoder;
4989         struct drm_connector *connector;
4990
4991         list_for_each_entry(plane, &dev->mode_config.plane_list, head)
4992                 if (plane->funcs->reset)
4993                         plane->funcs->reset(plane);
4994
4995         list_for_each_entry(crtc, &dev->mode_config.crtc_list, head)
4996                 if (crtc->funcs->reset)
4997                         crtc->funcs->reset(crtc);
4998
4999         list_for_each_entry(encoder, &dev->mode_config.encoder_list, head)
5000                 if (encoder->funcs->reset)
5001                         encoder->funcs->reset(encoder);
5002
5003         list_for_each_entry(connector, &dev->mode_config.connector_list, head) {
5004                 connector->status = connector_status_unknown;
5005
5006                 if (connector->funcs->reset)
5007                         connector->funcs->reset(connector);
5008         }
5009 }
5010 EXPORT_SYMBOL(drm_mode_config_reset);
5011
5012 /**
5013  * drm_mode_create_dumb_ioctl - create a dumb backing storage buffer
5014  * @dev: DRM device
5015  * @data: ioctl data
5016  * @file_priv: DRM file info
5017  *
5018  * This creates a new dumb buffer in the driver's backing storage manager (GEM,
5019  * TTM or something else entirely) and returns the resulting buffer handle. This
5020  * handle can then be wrapped up into a framebuffer modeset object.
5021  *
5022  * Note that userspace is not allowed to use such objects for render
5023  * acceleration - drivers must create their own private ioctls for such a use
5024  * case.
5025  *
5026  * Called by the user via ioctl.
5027  *
5028  * Returns:
5029  * Zero on success, negative errno on failure.
5030  */
5031 int drm_mode_create_dumb_ioctl(struct drm_device *dev,
5032                                void *data, struct drm_file *file_priv)
5033 {
5034         struct drm_mode_create_dumb *args = data;
5035         u32 cpp, stride, size;
5036
5037         if (!dev->driver->dumb_create)
5038                 return -ENOSYS;
5039         if (!args->width || !args->height || !args->bpp)
5040                 return -EINVAL;
5041
5042         /* overflow checks for 32bit size calculations */
5043         /* NOTE: DIV_ROUND_UP() can overflow */
5044         cpp = DIV_ROUND_UP(args->bpp, 8);
5045         if (!cpp || cpp > 0xffffffffU / args->width)
5046                 return -EINVAL;
5047         stride = cpp * args->width;
5048         if (args->height > 0xffffffffU / stride)
5049                 return -EINVAL;
5050
5051         /* test for wrap-around */
5052         size = args->height * stride;
5053         if (PAGE_ALIGN(size) == 0)
5054                 return -EINVAL;
5055
5056         /*
5057          * handle, pitch and size are output parameters. Zero them out to
5058          * prevent drivers from accidentally using uninitialized data. Since
5059          * not all existing userspace is clearing these fields properly we
5060          * cannot reject IOCTL with garbage in them.
5061          */
5062         args->handle = 0;
5063         args->pitch = 0;
5064         args->size = 0;
5065
5066         return dev->driver->dumb_create(file_priv, dev, args);
5067 }
5068
5069 /**
5070  * drm_mode_mmap_dumb_ioctl - create an mmap offset for a dumb backing storage buffer
5071  * @dev: DRM device
5072  * @data: ioctl data
5073  * @file_priv: DRM file info
5074  *
5075  * Allocate an offset in the drm device node's address space to be able to
5076  * memory map a dumb buffer.
5077  *
5078  * Called by the user via ioctl.
5079  *
5080  * Returns:
5081  * Zero on success, negative errno on failure.
5082  */
5083 int drm_mode_mmap_dumb_ioctl(struct drm_device *dev,
5084                              void *data, struct drm_file *file_priv)
5085 {
5086         struct drm_mode_map_dumb *args = data;
5087
5088         /* call driver ioctl to get mmap offset */
5089         if (!dev->driver->dumb_map_offset)
5090                 return -ENOSYS;
5091
5092         return dev->driver->dumb_map_offset(file_priv, dev, args->handle, &args->offset);
5093 }
5094
5095 /**
5096  * drm_mode_destroy_dumb_ioctl - destroy a dumb backing strage buffer
5097  * @dev: DRM device
5098  * @data: ioctl data
5099  * @file_priv: DRM file info
5100  *
5101  * This destroys the userspace handle for the given dumb backing storage buffer.
5102  * Since buffer objects must be reference counted in the kernel a buffer object
5103  * won't be immediately freed if a framebuffer modeset object still uses it.
5104  *
5105  * Called by the user via ioctl.
5106  *
5107  * Returns:
5108  * Zero on success, negative errno on failure.
5109  */
5110 int drm_mode_destroy_dumb_ioctl(struct drm_device *dev,
5111                                 void *data, struct drm_file *file_priv)
5112 {
5113         struct drm_mode_destroy_dumb *args = data;
5114
5115         if (!dev->driver->dumb_destroy)
5116                 return -ENOSYS;
5117
5118         return dev->driver->dumb_destroy(file_priv, dev, args->handle);
5119 }
5120
5121 /**
5122  * drm_fb_get_bpp_depth - get the bpp/depth values for format
5123  * @format: pixel format (DRM_FORMAT_*)
5124  * @depth: storage for the depth value
5125  * @bpp: storage for the bpp value
5126  *
5127  * This only supports RGB formats here for compat with code that doesn't use
5128  * pixel formats directly yet.
5129  */
5130 void drm_fb_get_bpp_depth(uint32_t format, unsigned int *depth,
5131                           int *bpp)
5132 {
5133         switch (format) {
5134         case DRM_FORMAT_C8:
5135         case DRM_FORMAT_RGB332:
5136         case DRM_FORMAT_BGR233:
5137                 *depth = 8;
5138                 *bpp = 8;
5139                 break;
5140         case DRM_FORMAT_XRGB1555:
5141         case DRM_FORMAT_XBGR1555:
5142         case DRM_FORMAT_RGBX5551:
5143         case DRM_FORMAT_BGRX5551:
5144         case DRM_FORMAT_ARGB1555:
5145         case DRM_FORMAT_ABGR1555:
5146         case DRM_FORMAT_RGBA5551:
5147         case DRM_FORMAT_BGRA5551:
5148                 *depth = 15;
5149                 *bpp = 16;
5150                 break;
5151         case DRM_FORMAT_RGB565:
5152         case DRM_FORMAT_BGR565:
5153                 *depth = 16;
5154                 *bpp = 16;
5155                 break;
5156         case DRM_FORMAT_RGB888:
5157         case DRM_FORMAT_BGR888:
5158                 *depth = 24;
5159                 *bpp = 24;
5160                 break;
5161         case DRM_FORMAT_XRGB8888:
5162         case DRM_FORMAT_XBGR8888:
5163         case DRM_FORMAT_RGBX8888:
5164         case DRM_FORMAT_BGRX8888:
5165                 *depth = 24;
5166                 *bpp = 32;
5167                 break;
5168         case DRM_FORMAT_XRGB2101010:
5169         case DRM_FORMAT_XBGR2101010:
5170         case DRM_FORMAT_RGBX1010102:
5171         case DRM_FORMAT_BGRX1010102:
5172         case DRM_FORMAT_ARGB2101010:
5173         case DRM_FORMAT_ABGR2101010:
5174         case DRM_FORMAT_RGBA1010102:
5175         case DRM_FORMAT_BGRA1010102:
5176                 *depth = 30;
5177                 *bpp = 32;
5178                 break;
5179         case DRM_FORMAT_ARGB8888:
5180         case DRM_FORMAT_ABGR8888:
5181         case DRM_FORMAT_RGBA8888:
5182         case DRM_FORMAT_BGRA8888:
5183                 *depth = 32;
5184                 *bpp = 32;
5185                 break;
5186         default:
5187                 DRM_DEBUG_KMS("unsupported pixel format %s\n",
5188                               drm_get_format_name(format));
5189                 *depth = 0;
5190                 *bpp = 0;
5191                 break;
5192         }
5193 }
5194 EXPORT_SYMBOL(drm_fb_get_bpp_depth);
5195
5196 /**
5197  * drm_format_num_planes - get the number of planes for format
5198  * @format: pixel format (DRM_FORMAT_*)
5199  *
5200  * Returns:
5201  * The number of planes used by the specified pixel format.
5202  */
5203 int drm_format_num_planes(uint32_t format)
5204 {
5205         switch (format) {
5206         case DRM_FORMAT_YUV410:
5207         case DRM_FORMAT_YVU410:
5208         case DRM_FORMAT_YUV411:
5209         case DRM_FORMAT_YVU411:
5210         case DRM_FORMAT_YUV420:
5211         case DRM_FORMAT_YVU420:
5212         case DRM_FORMAT_YUV422:
5213         case DRM_FORMAT_YVU422:
5214         case DRM_FORMAT_YUV444:
5215         case DRM_FORMAT_YVU444:
5216                 return 3;
5217         case DRM_FORMAT_NV12:
5218         case DRM_FORMAT_NV21:
5219         case DRM_FORMAT_NV16:
5220         case DRM_FORMAT_NV61:
5221         case DRM_FORMAT_NV24:
5222         case DRM_FORMAT_NV42:
5223                 return 2;
5224         default:
5225                 return 1;
5226         }
5227 }
5228 EXPORT_SYMBOL(drm_format_num_planes);
5229
5230 /**
5231  * drm_format_plane_cpp - determine the bytes per pixel value
5232  * @format: pixel format (DRM_FORMAT_*)
5233  * @plane: plane index
5234  *
5235  * Returns:
5236  * The bytes per pixel value for the specified plane.
5237  */
5238 int drm_format_plane_cpp(uint32_t format, int plane)
5239 {
5240         unsigned int depth;
5241         int bpp;
5242
5243         if (plane >= drm_format_num_planes(format))
5244                 return 0;
5245
5246         switch (format) {
5247         case DRM_FORMAT_YUYV:
5248         case DRM_FORMAT_YVYU:
5249         case DRM_FORMAT_UYVY:
5250         case DRM_FORMAT_VYUY:
5251                 return 2;
5252         case DRM_FORMAT_NV12:
5253         case DRM_FORMAT_NV21:
5254         case DRM_FORMAT_NV16:
5255         case DRM_FORMAT_NV61:
5256         case DRM_FORMAT_NV24:
5257         case DRM_FORMAT_NV42:
5258                 return plane ? 2 : 1;
5259         case DRM_FORMAT_YUV410:
5260         case DRM_FORMAT_YVU410:
5261         case DRM_FORMAT_YUV411:
5262         case DRM_FORMAT_YVU411:
5263         case DRM_FORMAT_YUV420:
5264         case DRM_FORMAT_YVU420:
5265         case DRM_FORMAT_YUV422:
5266         case DRM_FORMAT_YVU422:
5267         case DRM_FORMAT_YUV444:
5268         case DRM_FORMAT_YVU444:
5269                 return 1;
5270         default:
5271                 drm_fb_get_bpp_depth(format, &depth, &bpp);
5272                 return bpp >> 3;
5273         }
5274 }
5275 EXPORT_SYMBOL(drm_format_plane_cpp);
5276
5277 /**
5278  * drm_format_horz_chroma_subsampling - get the horizontal chroma subsampling factor
5279  * @format: pixel format (DRM_FORMAT_*)
5280  *
5281  * Returns:
5282  * The horizontal chroma subsampling factor for the
5283  * specified pixel format.
5284  */
5285 int drm_format_horz_chroma_subsampling(uint32_t format)
5286 {
5287         switch (format) {
5288         case DRM_FORMAT_YUV411:
5289         case DRM_FORMAT_YVU411:
5290         case DRM_FORMAT_YUV410:
5291         case DRM_FORMAT_YVU410:
5292                 return 4;
5293         case DRM_FORMAT_YUYV:
5294         case DRM_FORMAT_YVYU:
5295         case DRM_FORMAT_UYVY:
5296         case DRM_FORMAT_VYUY:
5297         case DRM_FORMAT_NV12:
5298         case DRM_FORMAT_NV21:
5299         case DRM_FORMAT_NV16:
5300         case DRM_FORMAT_NV61:
5301         case DRM_FORMAT_YUV422:
5302         case DRM_FORMAT_YVU422:
5303         case DRM_FORMAT_YUV420:
5304         case DRM_FORMAT_YVU420:
5305                 return 2;
5306         default:
5307                 return 1;
5308         }
5309 }
5310 EXPORT_SYMBOL(drm_format_horz_chroma_subsampling);
5311
5312 /**
5313  * drm_format_vert_chroma_subsampling - get the vertical chroma subsampling factor
5314  * @format: pixel format (DRM_FORMAT_*)
5315  *
5316  * Returns:
5317  * The vertical chroma subsampling factor for the
5318  * specified pixel format.
5319  */
5320 int drm_format_vert_chroma_subsampling(uint32_t format)
5321 {
5322         switch (format) {
5323         case DRM_FORMAT_YUV410:
5324         case DRM_FORMAT_YVU410:
5325                 return 4;
5326         case DRM_FORMAT_YUV420:
5327         case DRM_FORMAT_YVU420:
5328         case DRM_FORMAT_NV12:
5329         case DRM_FORMAT_NV21:
5330                 return 2;
5331         default:
5332                 return 1;
5333         }
5334 }
5335 EXPORT_SYMBOL(drm_format_vert_chroma_subsampling);
5336
5337 /**
5338  * drm_rotation_simplify() - Try to simplify the rotation
5339  * @rotation: Rotation to be simplified
5340  * @supported_rotations: Supported rotations
5341  *
5342  * Attempt to simplify the rotation to a form that is supported.
5343  * Eg. if the hardware supports everything except DRM_REFLECT_X
5344  * one could call this function like this:
5345  *
5346  * drm_rotation_simplify(rotation, BIT(DRM_ROTATE_0) |
5347  *                       BIT(DRM_ROTATE_90) | BIT(DRM_ROTATE_180) |
5348  *                       BIT(DRM_ROTATE_270) | BIT(DRM_REFLECT_Y));
5349  *
5350  * to eliminate the DRM_ROTATE_X flag. Depending on what kind of
5351  * transforms the hardware supports, this function may not
5352  * be able to produce a supported transform, so the caller should
5353  * check the result afterwards.
5354  */
5355 unsigned int drm_rotation_simplify(unsigned int rotation,
5356                                    unsigned int supported_rotations)
5357 {
5358         if (rotation & ~supported_rotations) {
5359                 rotation ^= BIT(DRM_REFLECT_X) | BIT(DRM_REFLECT_Y);
5360                 rotation = (rotation & ~0xf) | BIT((ffs(rotation & 0xf) + 1) % 4);
5361         }
5362
5363         return rotation;
5364 }
5365 EXPORT_SYMBOL(drm_rotation_simplify);
5366
5367 /**
5368  * drm_mode_config_init - initialize DRM mode_configuration structure
5369  * @dev: DRM device
5370  *
5371  * Initialize @dev's mode_config structure, used for tracking the graphics
5372  * configuration of @dev.
5373  *
5374  * Since this initializes the modeset locks, no locking is possible. Which is no
5375  * problem, since this should happen single threaded at init time. It is the
5376  * driver's problem to ensure this guarantee.
5377  *
5378  */
5379 void drm_mode_config_init(struct drm_device *dev)
5380 {
5381         mutex_init(&dev->mode_config.mutex);
5382         drm_modeset_lock_init(&dev->mode_config.connection_mutex);
5383         mutex_init(&dev->mode_config.idr_mutex);
5384         mutex_init(&dev->mode_config.fb_lock);
5385         INIT_LIST_HEAD(&dev->mode_config.fb_list);
5386         INIT_LIST_HEAD(&dev->mode_config.crtc_list);
5387         INIT_LIST_HEAD(&dev->mode_config.connector_list);
5388         INIT_LIST_HEAD(&dev->mode_config.bridge_list);
5389         INIT_LIST_HEAD(&dev->mode_config.encoder_list);
5390         INIT_LIST_HEAD(&dev->mode_config.property_list);
5391         INIT_LIST_HEAD(&dev->mode_config.property_blob_list);
5392         INIT_LIST_HEAD(&dev->mode_config.plane_list);
5393         idr_init(&dev->mode_config.crtc_idr);
5394         idr_init(&dev->mode_config.tile_idr);
5395
5396         drm_modeset_lock_all(dev);
5397         drm_mode_create_standard_properties(dev);
5398         drm_modeset_unlock_all(dev);
5399
5400         /* Just to be sure */
5401         dev->mode_config.num_fb = 0;
5402         dev->mode_config.num_connector = 0;
5403         dev->mode_config.num_crtc = 0;
5404         dev->mode_config.num_encoder = 0;
5405         dev->mode_config.num_overlay_plane = 0;
5406         dev->mode_config.num_total_plane = 0;
5407 }
5408 EXPORT_SYMBOL(drm_mode_config_init);
5409
5410 /**
5411  * drm_mode_config_cleanup - free up DRM mode_config info
5412  * @dev: DRM device
5413  *
5414  * Free up all the connectors and CRTCs associated with this DRM device, then
5415  * free up the framebuffers and associated buffer objects.
5416  *
5417  * Note that since this /should/ happen single-threaded at driver/device
5418  * teardown time, no locking is required. It's the driver's job to ensure that
5419  * this guarantee actually holds true.
5420  *
5421  * FIXME: cleanup any dangling user buffer objects too
5422  */
5423 void drm_mode_config_cleanup(struct drm_device *dev)
5424 {
5425         struct drm_connector *connector, *ot;
5426         struct drm_crtc *crtc, *ct;
5427         struct drm_encoder *encoder, *enct;
5428         struct drm_bridge *bridge, *brt;
5429         struct drm_framebuffer *fb, *fbt;
5430         struct drm_property *property, *pt;
5431         struct drm_property_blob *blob, *bt;
5432         struct drm_plane *plane, *plt;
5433
5434         list_for_each_entry_safe(encoder, enct, &dev->mode_config.encoder_list,
5435                                  head) {
5436                 encoder->funcs->destroy(encoder);
5437         }
5438
5439         list_for_each_entry_safe(bridge, brt,
5440                                  &dev->mode_config.bridge_list, head) {
5441                 bridge->funcs->destroy(bridge);
5442         }
5443
5444         list_for_each_entry_safe(connector, ot,
5445                                  &dev->mode_config.connector_list, head) {
5446                 connector->funcs->destroy(connector);
5447         }
5448
5449         list_for_each_entry_safe(property, pt, &dev->mode_config.property_list,
5450                                  head) {
5451                 drm_property_destroy(dev, property);
5452         }
5453
5454         list_for_each_entry_safe(blob, bt, &dev->mode_config.property_blob_list,
5455                                  head) {
5456                 drm_property_destroy_blob(dev, blob);
5457         }
5458
5459         /*
5460          * Single-threaded teardown context, so it's not required to grab the
5461          * fb_lock to protect against concurrent fb_list access. Contrary, it
5462          * would actually deadlock with the drm_framebuffer_cleanup function.
5463          *
5464          * Also, if there are any framebuffers left, that's a driver leak now,
5465          * so politely WARN about this.
5466          */
5467         WARN_ON(!list_empty(&dev->mode_config.fb_list));
5468         list_for_each_entry_safe(fb, fbt, &dev->mode_config.fb_list, head) {
5469                 drm_framebuffer_remove(fb);
5470         }
5471
5472         list_for_each_entry_safe(plane, plt, &dev->mode_config.plane_list,
5473                                  head) {
5474                 plane->funcs->destroy(plane);
5475         }
5476
5477         list_for_each_entry_safe(crtc, ct, &dev->mode_config.crtc_list, head) {
5478                 crtc->funcs->destroy(crtc);
5479         }
5480
5481         idr_destroy(&dev->mode_config.tile_idr);
5482         idr_destroy(&dev->mode_config.crtc_idr);
5483         drm_modeset_lock_fini(&dev->mode_config.connection_mutex);
5484 }
5485 EXPORT_SYMBOL(drm_mode_config_cleanup);
5486
5487 struct drm_property *drm_mode_create_rotation_property(struct drm_device *dev,
5488                                                        unsigned int supported_rotations)
5489 {
5490         static const struct drm_prop_enum_list props[] = {
5491                 { DRM_ROTATE_0,   "rotate-0" },
5492                 { DRM_ROTATE_90,  "rotate-90" },
5493                 { DRM_ROTATE_180, "rotate-180" },
5494                 { DRM_ROTATE_270, "rotate-270" },
5495                 { DRM_REFLECT_X,  "reflect-x" },
5496                 { DRM_REFLECT_Y,  "reflect-y" },
5497         };
5498
5499         return drm_property_create_bitmask(dev, 0, "rotation",
5500                                            props, ARRAY_SIZE(props),
5501                                            supported_rotations);
5502 }
5503 EXPORT_SYMBOL(drm_mode_create_rotation_property);
5504
5505 /**
5506  * DOC: Tile group
5507  *
5508  * Tile groups are used to represent tiled monitors with a unique
5509  * integer identifier. Tiled monitors using DisplayID v1.3 have
5510  * a unique 8-byte handle, we store this in a tile group, so we
5511  * have a common identifier for all tiles in a monitor group.
5512  */
5513 static void drm_tile_group_free(struct kref *kref)
5514 {
5515         struct drm_tile_group *tg = container_of(kref, struct drm_tile_group, refcount);
5516         struct drm_device *dev = tg->dev;
5517         mutex_lock(&dev->mode_config.idr_mutex);
5518         idr_remove(&dev->mode_config.tile_idr, tg->id);
5519         mutex_unlock(&dev->mode_config.idr_mutex);
5520         kfree(tg);
5521 }
5522
5523 /**
5524  * drm_mode_put_tile_group - drop a reference to a tile group.
5525  * @dev: DRM device
5526  * @tg: tile group to drop reference to.
5527  *
5528  * drop reference to tile group and free if 0.
5529  */
5530 void drm_mode_put_tile_group(struct drm_device *dev,
5531                              struct drm_tile_group *tg)
5532 {
5533         kref_put(&tg->refcount, drm_tile_group_free);
5534 }
5535
5536 /**
5537  * drm_mode_get_tile_group - get a reference to an existing tile group
5538  * @dev: DRM device
5539  * @topology: 8-bytes unique per monitor.
5540  *
5541  * Use the unique bytes to get a reference to an existing tile group.
5542  *
5543  * RETURNS:
5544  * tile group or NULL if not found.
5545  */
5546 struct drm_tile_group *drm_mode_get_tile_group(struct drm_device *dev,
5547                                                char topology[8])
5548 {
5549         struct drm_tile_group *tg;
5550         int id;
5551         mutex_lock(&dev->mode_config.idr_mutex);
5552         idr_for_each_entry(&dev->mode_config.tile_idr, tg, id) {
5553                 if (!memcmp(tg->group_data, topology, 8)) {
5554                         if (!kref_get_unless_zero(&tg->refcount))
5555                                 tg = NULL;
5556                         mutex_unlock(&dev->mode_config.idr_mutex);
5557                         return tg;
5558                 }
5559         }
5560         mutex_unlock(&dev->mode_config.idr_mutex);
5561         return NULL;
5562 }
5563
5564 /**
5565  * drm_mode_create_tile_group - create a tile group from a displayid description
5566  * @dev: DRM device
5567  * @topology: 8-bytes unique per monitor.
5568  *
5569  * Create a tile group for the unique monitor, and get a unique
5570  * identifier for the tile group.
5571  *
5572  * RETURNS:
5573  * new tile group or error.
5574  */
5575 struct drm_tile_group *drm_mode_create_tile_group(struct drm_device *dev,
5576                                                   char topology[8])
5577 {
5578         struct drm_tile_group *tg;
5579         int ret;
5580
5581         tg = kzalloc(sizeof(*tg), GFP_KERNEL);
5582         if (!tg)
5583                 return ERR_PTR(-ENOMEM);
5584
5585         kref_init(&tg->refcount);
5586         memcpy(tg->group_data, topology, 8);
5587         tg->dev = dev;
5588
5589         mutex_lock(&dev->mode_config.idr_mutex);
5590         ret = idr_alloc(&dev->mode_config.tile_idr, tg, 1, 0, GFP_KERNEL);
5591         if (ret >= 0) {
5592                 tg->id = ret;
5593         } else {
5594                 kfree(tg);
5595                 tg = ERR_PTR(ret);
5596         }
5597
5598         mutex_unlock(&dev->mode_config.idr_mutex);
5599         return tg;
5600 }