drivers/gpu/drm/nouveau/nouveau_gem.c

   1 /*
   2  * Copyright (C) 2008 Ben Skeggs.
   3  * All Rights Reserved.
   4  *
   5  * Permission is hereby granted, free of charge, to any person obtaining
   6  * a copy of this software and associated documentation files (the
   7  * "Software"), to deal in the Software without restriction, including
   8  * without limitation the rights to use, copy, modify, merge, publish,
   9  * distribute, sublicense, and/or sell copies of the Software, and to
  10  * permit persons to whom the Software is furnished to do so, subject to
  11  * the following conditions:
  12  *
  13  * The above copyright notice and this permission notice (including the
  14  * next paragraph) shall be included in all copies or substantial
  15  * portions of the Software.
  16  *
  17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  18  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  19  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
  20  * IN NO EVENT SHALL THE COPYRIGHT OWNER(S) AND/OR ITS SUPPLIERS BE
  21  * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
  22  * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
  23  * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  24  *
  25  */
  26
  27 #include "nouveau_drm.h"
  28 #include "nouveau_dma.h"
  29 #include "nouveau_fence.h"
  30 #include "nouveau_abi16.h"
  31
  32 #include "nouveau_ttm.h"
  33 #include "nouveau_gem.h"
  34
  35 void
  36 nouveau_gem_object_del(struct drm_gem_object *gem)
  37 {
  38         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
  39         struct nouveau_drm *drm = nouveau_bdev(nvbo->bo.bdev);
  40         struct ttm_buffer_object *bo = &nvbo->bo;
  41         struct device *dev = drm->dev->dev;
  42         int ret;
  43
  44         ret = pm_runtime_get_sync(dev);
  45         if (WARN_ON(ret < 0 && ret != -EACCES))
  46                 return;
  47
  48         if (gem->import_attach)
  49                 drm_prime_gem_destroy(gem, nvbo->bo.sg);
  50
  51         drm_gem_object_release(gem);
  52
  53         /* reset filp so nouveau_bo_del_ttm() can test for it */
  54         gem->filp = NULL;
  55         ttm_bo_unref(&bo);
  56
  57         pm_runtime_mark_last_busy(dev);
  58         pm_runtime_put_autosuspend(dev);
  59 }
  60
  61 int
  62 nouveau_gem_object_open(struct drm_gem_object *gem, struct drm_file *file_priv)
  63 {
  64         struct nouveau_cli *cli = nouveau_cli(file_priv);
  65         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
  66         struct nouveau_drm *drm = nouveau_bdev(nvbo->bo.bdev);
  67         struct nouveau_vma *vma;
  68         struct device *dev = drm->dev->dev;
  69         int ret;
  70
  71         if (!cli->vm)
  72                 return 0;
  73
  74         ret = ttm_bo_reserve(&nvbo->bo, false, false, false, NULL);
  75         if (ret)
  76                 return ret;
  77
  78         vma = nouveau_bo_vma_find(nvbo, cli->vm);
  79         if (!vma) {
  80                 vma = kzalloc(sizeof(*vma), GFP_KERNEL);
  81                 if (!vma) {
  82                         ret = -ENOMEM;
  83                         goto out;
  84                 }
  85
  86                 ret = pm_runtime_get_sync(dev);
  87                 if (ret < 0 && ret != -EACCES)
  88                         goto out;
  89
  90                 ret = nouveau_bo_vma_add(nvbo, cli->vm, vma);
  91                 if (ret)
  92                         kfree(vma);
  93
  94                 pm_runtime_mark_last_busy(dev);
  95                 pm_runtime_put_autosuspend(dev);
  96         } else {
  97                 vma->refcount++;
  98         }
  99
 100 out:
 101         ttm_bo_unreserve(&nvbo->bo);
 102         return ret;
 103 }
 104
 105 static void
 106 nouveau_gem_object_delete(void *data)
 107 {
 108         struct nouveau_vma *vma = data;
 109         nouveau_vm_unmap(vma);
 110         nouveau_vm_put(vma);
 111         kfree(vma);
 112 }
 113
 114 static void
 115 nouveau_gem_object_unmap(struct nouveau_bo *nvbo, struct nouveau_vma *vma)
 116 {
 117         const bool mapped = nvbo->bo.mem.mem_type != TTM_PL_SYSTEM;
 118         struct reservation_object *resv = nvbo->bo.resv;
 119         struct reservation_object_list *fobj;
 120         struct fence *fence = NULL;
 121
 122         fobj = reservation_object_get_list(resv);
 123
 124         list_del(&vma->head);
 125
 126         if (fobj && fobj->shared_count > 1)
 127                 ttm_bo_wait(&nvbo->bo, true, false, false);
 128         else if (fobj && fobj->shared_count == 1)
 129                 fence = rcu_dereference_protected(fobj->shared[0],
 130                                                 reservation_object_held(resv));
 131         else
 132                 fence = reservation_object_get_excl(nvbo->bo.resv);
 133
 134         if (fence && mapped) {
 135                 nouveau_fence_work(fence, nouveau_gem_object_delete, vma);
 136         } else {
 137                 if (mapped)
 138                         nouveau_vm_unmap(vma);
 139                 nouveau_vm_put(vma);
 140                 kfree(vma);
 141         }
 142 }
 143
 144 void
 145 nouveau_gem_object_close(struct drm_gem_object *gem, struct drm_file *file_priv)
 146 {
 147         struct nouveau_cli *cli = nouveau_cli(file_priv);
 148         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
 149         struct nouveau_drm *drm = nouveau_bdev(nvbo->bo.bdev);
 150         struct device *dev = drm->dev->dev;
 151         struct nouveau_vma *vma;
 152         int ret;
 153
 154         if (!cli->vm)
 155                 return;
 156
 157         ret = ttm_bo_reserve(&nvbo->bo, false, false, false, NULL);
 158         if (ret)
 159                 return;
 160
 161         vma = nouveau_bo_vma_find(nvbo, cli->vm);
 162         if (vma) {
 163                 if (--vma->refcount == 0) {
 164                         ret = pm_runtime_get_sync(dev);
 165                         if (!WARN_ON(ret < 0 && ret != -EACCES)) {
 166                                 nouveau_gem_object_unmap(nvbo, vma);
 167                                 pm_runtime_mark_last_busy(dev);
 168                                 pm_runtime_put_autosuspend(dev);
 169                         }
 170                 }
 171         }
 172         ttm_bo_unreserve(&nvbo->bo);
 173 }
 174
 175 int
 176 nouveau_gem_new(struct drm_device *dev, int size, int align, uint32_t domain,
 177                 uint32_t tile_mode, uint32_t tile_flags,
 178                 struct nouveau_bo **pnvbo)
 179 {
 180         struct nouveau_drm *drm = nouveau_drm(dev);
 181         struct nouveau_bo *nvbo;
 182         u32 flags = 0;
 183         int ret;
 184
 185         if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
 186                 flags |= TTM_PL_FLAG_VRAM;
 187         if (domain & NOUVEAU_GEM_DOMAIN_GART)
 188                 flags |= TTM_PL_FLAG_TT;
 189         if (!flags || domain & NOUVEAU_GEM_DOMAIN_CPU)
 190                 flags |= TTM_PL_FLAG_SYSTEM;
 191
 192         ret = nouveau_bo_new(dev, size, align, flags, tile_mode,
 193                              tile_flags, NULL, NULL, pnvbo);
 194         if (ret)
 195                 return ret;
 196         nvbo = *pnvbo;
 197
 198         /* we restrict allowed domains on nv50+ to only the types
 199          * that were requested at creation time.  not possibly on
 200          * earlier chips without busting the ABI.
 201          */
 202         nvbo->valid_domains = NOUVEAU_GEM_DOMAIN_VRAM |
 203                               NOUVEAU_GEM_DOMAIN_GART;
 204         if (drm->device.info.family >= NV_DEVICE_INFO_V0_TESLA)
 205                 nvbo->valid_domains &= domain;
 206
 207         /* Initialize the embedded gem-object. We return a single gem-reference
 208          * to the caller, instead of a normal nouveau_bo ttm reference. */
 209         ret = drm_gem_object_init(dev, &nvbo->gem, nvbo->bo.mem.size);
 210         if (ret) {
 211                 nouveau_bo_ref(NULL, pnvbo);
 212                 return -ENOMEM;
 213         }
 214
 215         nvbo->bo.persistent_swap_storage = nvbo->gem.filp;
 216         return 0;
 217 }
 218
 219 static int
 220 nouveau_gem_info(struct drm_file *file_priv, struct drm_gem_object *gem,
 221                  struct drm_nouveau_gem_info *rep)
 222 {
 223         struct nouveau_cli *cli = nouveau_cli(file_priv);
 224         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
 225         struct nouveau_vma *vma;
 226
 227         if (nvbo->bo.mem.mem_type == TTM_PL_TT)
 228                 rep->domain = NOUVEAU_GEM_DOMAIN_GART;
 229         else
 230                 rep->domain = NOUVEAU_GEM_DOMAIN_VRAM;
 231
 232         rep->offset = nvbo->bo.offset;
 233         if (cli->vm) {
 234                 vma = nouveau_bo_vma_find(nvbo, cli->vm);
 235                 if (!vma)
 236                         return -EINVAL;
 237
 238                 rep->offset = vma->offset;
 239         }
 240
 241         rep->size = nvbo->bo.mem.num_pages << PAGE_SHIFT;
 242         rep->map_handle = drm_vma_node_offset_addr(&nvbo->bo.vma_node);
 243         rep->tile_mode = nvbo->tile_mode;
 244         rep->tile_flags = nvbo->tile_flags;
 245         return 0;
 246 }
 247
 248 int
 249 nouveau_gem_ioctl_new(struct drm_device *dev, void *data,
 250                       struct drm_file *file_priv)
 251 {
 252         struct nouveau_drm *drm = nouveau_drm(dev);
 253         struct nouveau_cli *cli = nouveau_cli(file_priv);
 254         struct nouveau_fb *pfb = nvkm_fb(&drm->device);
 255         struct drm_nouveau_gem_new *req = data;
 256         struct nouveau_bo *nvbo = NULL;
 257         int ret = 0;
 258
 259         if (!pfb->memtype_valid(pfb, req->info.tile_flags)) {
 260                 NV_PRINTK(error, cli, "bad page flags: 0x%08x\n", req->info.tile_flags);
 261                 return -EINVAL;
 262         }
 263
 264         ret = nouveau_gem_new(dev, req->info.size, req->align,
 265                               req->info.domain, req->info.tile_mode,
 266                               req->info.tile_flags, &nvbo);
 267         if (ret)
 268                 return ret;
 269
 270         ret = drm_gem_handle_create(file_priv, &nvbo->gem, &req->info.handle);
 271         if (ret == 0) {
 272                 ret = nouveau_gem_info(file_priv, &nvbo->gem, &req->info);
 273                 if (ret)
 274                         drm_gem_handle_delete(file_priv, req->info.handle);
 275         }
 276
 277         /* drop reference from allocate - handle holds it now */
 278         drm_gem_object_unreference_unlocked(&nvbo->gem);
 279         return ret;
 280 }
 281
 282 static int
 283 nouveau_gem_set_domain(struct drm_gem_object *gem, uint32_t read_domains,
 284                        uint32_t write_domains, uint32_t valid_domains)
 285 {
 286         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
 287         struct ttm_buffer_object *bo = &nvbo->bo;
 288         uint32_t domains = valid_domains & nvbo->valid_domains &
 289                 (write_domains ? write_domains : read_domains);
 290         uint32_t pref_flags = 0, valid_flags = 0;
 291
 292         if (!domains)
 293                 return -EINVAL;
 294
 295         if (valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
 296                 valid_flags |= TTM_PL_FLAG_VRAM;
 297
 298         if (valid_domains & NOUVEAU_GEM_DOMAIN_GART)
 299                 valid_flags |= TTM_PL_FLAG_TT;
 300
 301         if ((domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
 302             bo->mem.mem_type == TTM_PL_VRAM)
 303                 pref_flags |= TTM_PL_FLAG_VRAM;
 304
 305         else if ((domains & NOUVEAU_GEM_DOMAIN_GART) &&
 306                  bo->mem.mem_type == TTM_PL_TT)
 307                 pref_flags |= TTM_PL_FLAG_TT;
 308
 309         else if (domains & NOUVEAU_GEM_DOMAIN_VRAM)
 310                 pref_flags |= TTM_PL_FLAG_VRAM;
 311
 312         else
 313                 pref_flags |= TTM_PL_FLAG_TT;
 314
 315         nouveau_bo_placement_set(nvbo, pref_flags, valid_flags);
 316
 317         return 0;
 318 }
 319
 320 struct validate_op {
 321         struct list_head list;
 322         struct ww_acquire_ctx ticket;
 323 };
 324
 325 static void
 326 validate_fini_no_ticket(struct validate_op *op, struct nouveau_fence *fence,
 327                         struct drm_nouveau_gem_pushbuf_bo *pbbo)
 328 {
 329         struct nouveau_bo *nvbo;
 330         struct drm_nouveau_gem_pushbuf_bo *b;
 331
 332         while (!list_empty(&op->list)) {
 333                 nvbo = list_entry(op->list.next, struct nouveau_bo, entry);
 334                 b = &pbbo[nvbo->pbbo_index];
 335
 336                 if (likely(fence))
 337                         nouveau_bo_fence(nvbo, fence, !!b->write_domains);
 338
 339                 if (unlikely(nvbo->validate_mapped)) {
 340                         ttm_bo_kunmap(&nvbo->kmap);
 341                         nvbo->validate_mapped = false;
 342                 }
 343
 344                 list_del(&nvbo->entry);
 345                 nvbo->reserved_by = NULL;
 346                 ttm_bo_unreserve_ticket(&nvbo->bo, &op->ticket);
 347                 drm_gem_object_unreference_unlocked(&nvbo->gem);
 348         }
 349 }
 350
 351 static void
 352 validate_fini(struct validate_op *op, struct nouveau_fence *fence,
 353               struct drm_nouveau_gem_pushbuf_bo *pbbo)
 354 {
 355         validate_fini_no_ticket(op, fence, pbbo);
 356         ww_acquire_fini(&op->ticket);
 357 }
 358
 359 static int
 360 validate_init(struct nouveau_channel *chan, struct drm_file *file_priv,
 361               struct drm_nouveau_gem_pushbuf_bo *pbbo,
 362               int nr_buffers, struct validate_op *op)
 363 {
 364         struct nouveau_cli *cli = nouveau_cli(file_priv);
 365         struct drm_device *dev = chan->drm->dev;
 366         int trycnt = 0;
 367         int ret, i;
 368         struct nouveau_bo *res_bo = NULL;
 369         LIST_HEAD(gart_list);
 370         LIST_HEAD(vram_list);
 371         LIST_HEAD(both_list);
 372
 373         ww_acquire_init(&op->ticket, &reservation_ww_class);
 374 retry:
 375         if (++trycnt > 100000) {
 376                 NV_PRINTK(error, cli, "%s failed and gave up.\n", __func__);
 377                 return -EINVAL;
 378         }
 379
 380         for (i = 0; i < nr_buffers; i++) {
 381                 struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[i];
 382                 struct drm_gem_object *gem;
 383                 struct nouveau_bo *nvbo;
 384
 385                 gem = drm_gem_object_lookup(dev, file_priv, b->handle);
 386                 if (!gem) {
 387                         NV_PRINTK(error, cli, "Unknown handle 0x%08x\n", b->handle);
 388                         ret = -ENOENT;
 389                         break;
 390                 }
 391                 nvbo = nouveau_gem_object(gem);
 392                 if (nvbo == res_bo) {
 393                         res_bo = NULL;
 394                         drm_gem_object_unreference_unlocked(gem);
 395                         continue;
 396                 }
 397
 398                 if (nvbo->reserved_by && nvbo->reserved_by == file_priv) {
 399                         NV_PRINTK(error, cli, "multiple instances of buffer %d on "
 400                                       "validation list\n", b->handle);
 401                         drm_gem_object_unreference_unlocked(gem);
 402                         ret = -EINVAL;
 403                         break;
 404                 }
 405
 406                 ret = ttm_bo_reserve(&nvbo->bo, true, false, true, &op->ticket);
 407                 if (ret) {
 408                         list_splice_tail_init(&vram_list, &op->list);
 409                         list_splice_tail_init(&gart_list, &op->list);
 410                         list_splice_tail_init(&both_list, &op->list);
 411                         validate_fini_no_ticket(op, NULL, NULL);
 412                         if (unlikely(ret == -EDEADLK)) {
 413                                 ret = ttm_bo_reserve_slowpath(&nvbo->bo, true,
 414                                                               &op->ticket);
 415                                 if (!ret)
 416                                         res_bo = nvbo;
 417                         }
 418                         if (unlikely(ret)) {
 419                                 if (ret != -ERESTARTSYS)
 420                                         NV_PRINTK(error, cli, "fail reserve\n");
 421                                 break;
 422                         }
 423                 }
 424
 425                 b->user_priv = (uint64_t)(unsigned long)nvbo;
 426                 nvbo->reserved_by = file_priv;
 427                 nvbo->pbbo_index = i;
 428                 if ((b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
 429                     (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART))
 430                         list_add_tail(&nvbo->entry, &both_list);
 431                 else
 432                 if (b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
 433                         list_add_tail(&nvbo->entry, &vram_list);
 434                 else
 435                 if (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART)
 436                         list_add_tail(&nvbo->entry, &gart_list);
 437                 else {
 438                         NV_PRINTK(error, cli, "invalid valid domains: 0x%08x\n",
 439                                  b->valid_domains);
 440                         list_add_tail(&nvbo->entry, &both_list);
 441                         ret = -EINVAL;
 442                         break;
 443                 }
 444                 if (nvbo == res_bo)
 445                         goto retry;
 446         }
 447
 448         ww_acquire_done(&op->ticket);
 449         list_splice_tail(&vram_list, &op->list);
 450         list_splice_tail(&gart_list, &op->list);
 451         list_splice_tail(&both_list, &op->list);
 452         if (ret)
 453                 validate_fini(op, NULL, NULL);
 454         return ret;
 455
 456 }
 457
 458 static int
 459 validate_list(struct nouveau_channel *chan, struct nouveau_cli *cli,
 460               struct list_head *list, struct drm_nouveau_gem_pushbuf_bo *pbbo,
 461               uint64_t user_pbbo_ptr)
 462 {
 463         struct nouveau_drm *drm = chan->drm;
 464         struct drm_nouveau_gem_pushbuf_bo __user *upbbo =
 465                                 (void __force __user *)(uintptr_t)user_pbbo_ptr;
 466         struct nouveau_bo *nvbo;
 467         int ret, relocs = 0;
 468
 469         list_for_each_entry(nvbo, list, entry) {
 470                 struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[nvbo->pbbo_index];
 471
 472                 ret = nouveau_gem_set_domain(&nvbo->gem, b->read_domains,
 473                                              b->write_domains,
 474                                              b->valid_domains);
 475                 if (unlikely(ret)) {
 476                         NV_PRINTK(error, cli, "fail set_domain\n");
 477                         return ret;
 478                 }
 479
 480                 ret = nouveau_bo_validate(nvbo, true, false);
 481                 if (unlikely(ret)) {
 482                         if (ret != -ERESTARTSYS)
 483                                 NV_PRINTK(error, cli, "fail ttm_validate\n");
 484                         return ret;
 485                 }
 486
 487                 ret = nouveau_fence_sync(nvbo, chan, !!b->write_domains, true);
 488                 if (unlikely(ret)) {
 489                         if (ret != -ERESTARTSYS)
 490                                 NV_PRINTK(error, cli, "fail post-validate sync\n");
 491                         return ret;
 492                 }
 493
 494                 if (drm->device.info.family < NV_DEVICE_INFO_V0_TESLA) {
 495                         if (nvbo->bo.offset == b->presumed.offset &&
 496                             ((nvbo->bo.mem.mem_type == TTM_PL_VRAM &&
 497                               b->presumed.domain & NOUVEAU_GEM_DOMAIN_VRAM) ||
 498                              (nvbo->bo.mem.mem_type == TTM_PL_TT &&
 499                               b->presumed.domain & NOUVEAU_GEM_DOMAIN_GART)))
 500                                 continue;
 501
 502                         if (nvbo->bo.mem.mem_type == TTM_PL_TT)
 503                                 b->presumed.domain = NOUVEAU_GEM_DOMAIN_GART;
 504                         else
 505                                 b->presumed.domain = NOUVEAU_GEM_DOMAIN_VRAM;
 506                         b->presumed.offset = nvbo->bo.offset;
 507                         b->presumed.valid = 0;
 508                         relocs++;
 509
 510                         if (copy_to_user(&upbbo[nvbo->pbbo_index].presumed,
 511                                              &b->presumed, sizeof(b->presumed)))
 512                                 return -EFAULT;
 513                 }
 514         }
 515
 516         return relocs;
 517 }
 518
 519 static int
 520 nouveau_gem_pushbuf_validate(struct nouveau_channel *chan,
 521                              struct drm_file *file_priv,
 522                              struct drm_nouveau_gem_pushbuf_bo *pbbo,
 523                              uint64_t user_buffers, int nr_buffers,
 524                              struct validate_op *op, int *apply_relocs)
 525 {
 526         struct nouveau_cli *cli = nouveau_cli(file_priv);
 527         int ret;
 528
 529         INIT_LIST_HEAD(&op->list);
 530
 531         if (nr_buffers == 0)
 532                 return 0;
 533
 534         ret = validate_init(chan, file_priv, pbbo, nr_buffers, op);
 535         if (unlikely(ret)) {
 536                 if (ret != -ERESTARTSYS)
 537                         NV_PRINTK(error, cli, "validate_init\n");
 538                 return ret;
 539         }
 540
 541         ret = validate_list(chan, cli, &op->list, pbbo, user_buffers);
 542         if (unlikely(ret < 0)) {
 543                 if (ret != -ERESTARTSYS)
 544                         NV_PRINTK(error, cli, "validating bo list\n");
 545                 validate_fini(op, NULL, NULL);
 546                 return ret;
 547         }
 548         *apply_relocs = ret;
 549         return 0;
 550 }
 551
 552 static inline void
 553 u_free(void *addr)
 554 {
 555         if (!is_vmalloc_addr(addr))
 556                 kfree(addr);
 557         else
 558                 vfree(addr);
 559 }
 560
 561 static inline void *
 562 u_memcpya(uint64_t user, unsigned nmemb, unsigned size)
 563 {
 564         void *mem;
 565         void __user *userptr = (void __force __user *)(uintptr_t)user;
 566
 567         size *= nmemb;
 568
 569         mem = kmalloc(size, GFP_KERNEL | __GFP_NOWARN);
 570         if (!mem)
 571                 mem = vmalloc(size);
 572         if (!mem)
 573                 return ERR_PTR(-ENOMEM);
 574
 575         if (copy_from_user(mem, userptr, size)) {
 576                 u_free(mem);
 577                 return ERR_PTR(-EFAULT);
 578         }
 579
 580         return mem;
 581 }
 582
 583 static int
 584 nouveau_gem_pushbuf_reloc_apply(struct nouveau_cli *cli,
 585                                 struct drm_nouveau_gem_pushbuf *req,
 586                                 struct drm_nouveau_gem_pushbuf_bo *bo)
 587 {
 588         struct drm_nouveau_gem_pushbuf_reloc *reloc = NULL;
 589         int ret = 0;
 590         unsigned i;
 591
 592         reloc = u_memcpya(req->relocs, req->nr_relocs, sizeof(*reloc));
 593         if (IS_ERR(reloc))
 594                 return PTR_ERR(reloc);
 595
 596         for (i = 0; i < req->nr_relocs; i++) {
 597                 struct drm_nouveau_gem_pushbuf_reloc *r = &reloc[i];
 598                 struct drm_nouveau_gem_pushbuf_bo *b;
 599                 struct nouveau_bo *nvbo;
 600                 uint32_t data;
 601
 602                 if (unlikely(r->bo_index > req->nr_buffers)) {
 603                         NV_PRINTK(error, cli, "reloc bo index invalid\n");
 604                         ret = -EINVAL;
 605                         break;
 606                 }
 607
 608                 b = &bo[r->bo_index];
 609                 if (b->presumed.valid)
 610                         continue;
 611
 612                 if (unlikely(r->reloc_bo_index > req->nr_buffers)) {
 613                         NV_PRINTK(error, cli, "reloc container bo index invalid\n");
 614                         ret = -EINVAL;
 615                         break;
 616                 }
 617                 nvbo = (void *)(unsigned long)bo[r->reloc_bo_index].user_priv;
 618
 619                 if (unlikely(r->reloc_bo_offset + 4 >
 620                              nvbo->bo.mem.num_pages << PAGE_SHIFT)) {
 621                         NV_PRINTK(error, cli, "reloc outside of bo\n");
 622                         ret = -EINVAL;
 623                         break;
 624                 }
 625
 626                 if (!nvbo->kmap.virtual) {
 627                         ret = ttm_bo_kmap(&nvbo->bo, 0, nvbo->bo.mem.num_pages,
 628                                           &nvbo->kmap);
 629                         if (ret) {
 630                                 NV_PRINTK(error, cli, "failed kmap for reloc\n");
 631                                 break;
 632                         }
 633                         nvbo->validate_mapped = true;
 634                 }
 635
 636                 if (r->flags & NOUVEAU_GEM_RELOC_LOW)
 637                         data = b->presumed.offset + r->data;
 638                 else
 639                 if (r->flags & NOUVEAU_GEM_RELOC_HIGH)
 640                         data = (b->presumed.offset + r->data) >> 32;
 641                 else
 642                         data = r->data;
 643
 644                 if (r->flags & NOUVEAU_GEM_RELOC_OR) {
 645                         if (b->presumed.domain == NOUVEAU_GEM_DOMAIN_GART)
 646                                 data |= r->tor;
 647                         else
 648                                 data |= r->vor;
 649                 }
 650
 651                 ret = ttm_bo_wait(&nvbo->bo, true, false, false);
 652                 if (ret) {
 653                         NV_PRINTK(error, cli, "reloc wait_idle failed: %d\n", ret);
 654                         break;
 655                 }
 656
 657                 nouveau_bo_wr32(nvbo, r->reloc_bo_offset >> 2, data);
 658         }
 659
 660         u_free(reloc);
 661         return ret;
 662 }
 663
 664 int
 665 nouveau_gem_ioctl_pushbuf(struct drm_device *dev, void *data,
 666                           struct drm_file *file_priv)
 667 {
 668         struct nouveau_abi16 *abi16 = nouveau_abi16_get(file_priv, dev);
 669         struct nouveau_cli *cli = nouveau_cli(file_priv);
 670         struct nouveau_abi16_chan *temp;
 671         struct nouveau_drm *drm = nouveau_drm(dev);
 672         struct drm_nouveau_gem_pushbuf *req = data;
 673         struct drm_nouveau_gem_pushbuf_push *push;
 674         struct drm_nouveau_gem_pushbuf_bo *bo;
 675         struct nouveau_channel *chan = NULL;
 676         struct validate_op op;
 677         struct nouveau_fence *fence = NULL;
 678         int i, j, ret = 0, do_reloc = 0;
 679
 680         if (unlikely(!abi16))
 681                 return -ENOMEM;
 682
 683         list_for_each_entry(temp, &abi16->channels, head) {
 684                 if (temp->chan->object->handle == (NVDRM_CHAN | req->channel)) {
 685                         chan = temp->chan;
 686                         break;
 687                 }
 688         }
 689
 690         if (!chan)
 691                 return nouveau_abi16_put(abi16, -ENOENT);
 692
 693         req->vram_available = drm->gem.vram_available;
 694         req->gart_available = drm->gem.gart_available;
 695         if (unlikely(req->nr_push == 0))
 696                 goto out_next;
 697
 698         if (unlikely(req->nr_push > NOUVEAU_GEM_MAX_PUSH)) {
 699                 NV_PRINTK(error, cli, "pushbuf push count exceeds limit: %d max %d\n",
 700                          req->nr_push, NOUVEAU_GEM_MAX_PUSH);
 701                 return nouveau_abi16_put(abi16, -EINVAL);
 702         }
 703
 704         if (unlikely(req->nr_buffers > NOUVEAU_GEM_MAX_BUFFERS)) {
 705                 NV_PRINTK(error, cli, "pushbuf bo count exceeds limit: %d max %d\n",
 706                          req->nr_buffers, NOUVEAU_GEM_MAX_BUFFERS);
 707                 return nouveau_abi16_put(abi16, -EINVAL);
 708         }
 709
 710         if (unlikely(req->nr_relocs > NOUVEAU_GEM_MAX_RELOCS)) {
 711                 NV_PRINTK(error, cli, "pushbuf reloc count exceeds limit: %d max %d\n",
 712                          req->nr_relocs, NOUVEAU_GEM_MAX_RELOCS);
 713                 return nouveau_abi16_put(abi16, -EINVAL);
 714         }
 715
 716         push = u_memcpya(req->push, req->nr_push, sizeof(*push));
 717         if (IS_ERR(push))
 718                 return nouveau_abi16_put(abi16, PTR_ERR(push));
 719
 720         bo = u_memcpya(req->buffers, req->nr_buffers, sizeof(*bo));
 721         if (IS_ERR(bo)) {
 722                 u_free(push);
 723                 return nouveau_abi16_put(abi16, PTR_ERR(bo));
 724         }
 725
 726         /* Ensure all push buffers are on validate list */
 727         for (i = 0; i < req->nr_push; i++) {
 728                 if (push[i].bo_index >= req->nr_buffers) {
 729                         NV_PRINTK(error, cli, "push %d buffer not in list\n", i);
 730                         ret = -EINVAL;
 731                         goto out_prevalid;
 732                 }
 733         }
 734
 735         /* Validate buffer list */
 736         ret = nouveau_gem_pushbuf_validate(chan, file_priv, bo, req->buffers,
 737                                            req->nr_buffers, &op, &do_reloc);
 738         if (ret) {
 739                 if (ret != -ERESTARTSYS)
 740                         NV_PRINTK(error, cli, "validate: %d\n", ret);
 741                 goto out_prevalid;
 742         }
 743
 744         /* Apply any relocations that are required */
 745         if (do_reloc) {
 746                 ret = nouveau_gem_pushbuf_reloc_apply(cli, req, bo);
 747                 if (ret) {
 748                         NV_PRINTK(error, cli, "reloc apply: %d\n", ret);
 749                         goto out;
 750                 }
 751         }
 752
 753         if (chan->dma.ib_max) {
 754                 ret = nouveau_dma_wait(chan, req->nr_push + 1, 16);
 755                 if (ret) {
 756                         NV_PRINTK(error, cli, "nv50cal_space: %d\n", ret);
 757                         goto out;
 758                 }
 759
 760                 for (i = 0; i < req->nr_push; i++) {
 761                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 762                                 bo[push[i].bo_index].user_priv;
 763
 764                         nv50_dma_push(chan, nvbo, push[i].offset,
 765                                       push[i].length);
 766                 }
 767         } else
 768         if (drm->device.info.chipset >= 0x25) {
 769                 ret = RING_SPACE(chan, req->nr_push * 2);
 770                 if (ret) {
 771                         NV_PRINTK(error, cli, "cal_space: %d\n", ret);
 772                         goto out;
 773                 }
 774
 775                 for (i = 0; i < req->nr_push; i++) {
 776                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 777                                 bo[push[i].bo_index].user_priv;
 778
 779                         OUT_RING(chan, (nvbo->bo.offset + push[i].offset) | 2);
 780                         OUT_RING(chan, 0);
 781                 }
 782         } else {
 783                 ret = RING_SPACE(chan, req->nr_push * (2 + NOUVEAU_DMA_SKIPS));
 784                 if (ret) {
 785                         NV_PRINTK(error, cli, "jmp_space: %d\n", ret);
 786                         goto out;
 787                 }
 788
 789                 for (i = 0; i < req->nr_push; i++) {
 790                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 791                                 bo[push[i].bo_index].user_priv;
 792                         uint32_t cmd;
 793
 794                         cmd = chan->push.vma.offset + ((chan->dma.cur + 2) << 2);
 795                         cmd |= 0x20000000;
 796                         if (unlikely(cmd != req->suffix0)) {
 797                                 if (!nvbo->kmap.virtual) {
 798                                         ret = ttm_bo_kmap(&nvbo->bo, 0,
 799                                                           nvbo->bo.mem.
 800                                                           num_pages,
 801                                                           &nvbo->kmap);
 802                                         if (ret) {
 803                                                 WIND_RING(chan);
 804                                                 goto out;
 805                                         }
 806                                         nvbo->validate_mapped = true;
 807                                 }
 808
 809                                 nouveau_bo_wr32(nvbo, (push[i].offset +
 810                                                 push[i].length - 8) / 4, cmd);
 811                         }
 812
 813                         OUT_RING(chan, 0x20000000 |
 814                                       (nvbo->bo.offset + push[i].offset));
 815                         OUT_RING(chan, 0);
 816                         for (j = 0; j < NOUVEAU_DMA_SKIPS; j++)
 817                                 OUT_RING(chan, 0);
 818                 }
 819         }
 820
 821         ret = nouveau_fence_new(chan, false, &fence);
 822         if (ret) {
 823                 NV_PRINTK(error, cli, "error fencing pushbuf: %d\n", ret);
 824                 WIND_RING(chan);
 825                 goto out;
 826         }
 827
 828 out:
 829         validate_fini(&op, fence, bo);
 830         nouveau_fence_unref(&fence);
 831
 832 out_prevalid:
 833         u_free(bo);
 834         u_free(push);
 835
 836 out_next:
 837         if (chan->dma.ib_max) {
 838                 req->suffix0 = 0x00000000;
 839                 req->suffix1 = 0x00000000;
 840         } else
 841         if (drm->device.info.chipset >= 0x25) {
 842                 req->suffix0 = 0x00020000;
 843                 req->suffix1 = 0x00000000;
 844         } else {
 845                 req->suffix0 = 0x20000000 |
 846                               (chan->push.vma.offset + ((chan->dma.cur + 2) << 2));
 847                 req->suffix1 = 0x00000000;
 848         }
 849
 850         return nouveau_abi16_put(abi16, ret);
 851 }
 852
 853 static inline uint32_t
 854 domain_to_ttm(struct nouveau_bo *nvbo, uint32_t domain)
 855 {
 856         uint32_t flags = 0;
 857
 858         if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
 859                 flags |= TTM_PL_FLAG_VRAM;
 860         if (domain & NOUVEAU_GEM_DOMAIN_GART)
 861                 flags |= TTM_PL_FLAG_TT;
 862
 863         return flags;
 864 }
 865
 866 int
 867 nouveau_gem_ioctl_cpu_prep(struct drm_device *dev, void *data,
 868                            struct drm_file *file_priv)
 869 {
 870         struct drm_nouveau_gem_cpu_prep *req = data;
 871         struct drm_gem_object *gem;
 872         struct nouveau_bo *nvbo;
 873         bool no_wait = !!(req->flags & NOUVEAU_GEM_CPU_PREP_NOWAIT);
 874         bool write = !!(req->flags & NOUVEAU_GEM_CPU_PREP_WRITE);
 875         int ret;
 876
 877         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
 878         if (!gem)
 879                 return -ENOENT;
 880         nvbo = nouveau_gem_object(gem);
 881
 882         if (no_wait)
 883                 ret = reservation_object_test_signaled_rcu(nvbo->bo.resv, write) ? 0 : -EBUSY;
 884         else {
 885                 long lret;
 886
 887                 lret = reservation_object_wait_timeout_rcu(nvbo->bo.resv, write, true, 30 * HZ);
 888                 if (!lret)
 889                         ret = -EBUSY;
 890                 else if (lret > 0)
 891                         ret = 0;
 892                 else
 893                         ret = lret;
 894         }
 895         nouveau_bo_sync_for_cpu(nvbo);
 896         drm_gem_object_unreference_unlocked(gem);
 897
 898         return ret;
 899 }
 900
 901 int
 902 nouveau_gem_ioctl_cpu_fini(struct drm_device *dev, void *data,
 903                            struct drm_file *file_priv)
 904 {
 905         struct drm_nouveau_gem_cpu_fini *req = data;
 906         struct drm_gem_object *gem;
 907         struct nouveau_bo *nvbo;
 908
 909         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
 910         if (!gem)
 911                 return -ENOENT;
 912         nvbo = nouveau_gem_object(gem);
 913
 914         nouveau_bo_sync_for_device(nvbo);
 915         drm_gem_object_unreference_unlocked(gem);
 916         return 0;
 917 }
 918
 919 int
 920 nouveau_gem_ioctl_info(struct drm_device *dev, void *data,
 921                        struct drm_file *file_priv)
 922 {
 923         struct drm_nouveau_gem_info *req = data;
 924         struct drm_gem_object *gem;
 925         int ret;
 926
 927         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
 928         if (!gem)
 929                 return -ENOENT;
 930
 931         ret = nouveau_gem_info(file_priv, gem, req);
 932         drm_gem_object_unreference_unlocked(gem);
 933         return ret;
 934 }
 935