| /* | 
 |  * \author Rickard E. (Rik) Faith <faith@valinux.com> | 
 |  * \author Daryll Strauss <daryll@valinux.com> | 
 |  * \author Gareth Hughes <gareth@valinux.com> | 
 |  */ | 
 |  | 
 | /* | 
 |  * Created: Mon Jan  4 08:58:31 1999 by faith@valinux.com | 
 |  * | 
 |  * Copyright 1999 Precision Insight, Inc., Cedar Park, Texas. | 
 |  * Copyright 2000 VA Linux Systems, Inc., Sunnyvale, California. | 
 |  * All Rights Reserved. | 
 |  * | 
 |  * Permission is hereby granted, free of charge, to any person obtaining a | 
 |  * copy of this software and associated documentation files (the "Software"), | 
 |  * to deal in the Software without restriction, including without limitation | 
 |  * the rights to use, copy, modify, merge, publish, distribute, sublicense, | 
 |  * and/or sell copies of the Software, and to permit persons to whom the | 
 |  * Software is furnished to do so, subject to the following conditions: | 
 |  * | 
 |  * The above copyright notice and this permission notice (including the next | 
 |  * paragraph) shall be included in all copies or substantial portions of the | 
 |  * Software. | 
 |  * | 
 |  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | 
 |  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | 
 |  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL | 
 |  * VA LINUX SYSTEMS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR | 
 |  * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, | 
 |  * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR | 
 |  * OTHER DEALINGS IN THE SOFTWARE. | 
 |  */ | 
 |  | 
 | #include <linux/anon_inodes.h> | 
 | #include <linux/dma-fence.h> | 
 | #include <linux/file.h> | 
 | #include <linux/module.h> | 
 | #include <linux/pci.h> | 
 | #include <linux/poll.h> | 
 | #include <linux/slab.h> | 
 |  | 
 | #include <drm/drm_client.h> | 
 | #include <drm/drm_drv.h> | 
 | #include <drm/drm_file.h> | 
 | #include <drm/drm_print.h> | 
 |  | 
 | #include "drm_crtc_internal.h" | 
 | #include "drm_internal.h" | 
 | #include "drm_legacy.h" | 
 |  | 
 | #if defined(CONFIG_MMU) && defined(CONFIG_TRANSPARENT_HUGEPAGE) | 
 | #include <uapi/asm/mman.h> | 
 | #include <drm/drm_vma_manager.h> | 
 | #endif | 
 |  | 
 | /* from BKL pushdown */ | 
 | DEFINE_MUTEX(drm_global_mutex); | 
 |  | 
 | bool drm_dev_needs_global_mutex(struct drm_device *dev) | 
 | { | 
 | 	/* | 
 | 	 * Legacy drivers rely on all kinds of BKL locking semantics, don't | 
 | 	 * bother. They also still need BKL locking for their ioctls, so better | 
 | 	 * safe than sorry. | 
 | 	 */ | 
 | 	if (drm_core_check_feature(dev, DRIVER_LEGACY)) | 
 | 		return true; | 
 |  | 
 | 	/* | 
 | 	 * The deprecated ->load callback must be called after the driver is | 
 | 	 * already registered. This means such drivers rely on the BKL to make | 
 | 	 * sure an open can't proceed until the driver is actually fully set up. | 
 | 	 * Similar hilarity holds for the unload callback. | 
 | 	 */ | 
 | 	if (dev->driver->load || dev->driver->unload) | 
 | 		return true; | 
 |  | 
 | 	/* | 
 | 	 * Drivers with the lastclose callback assume that it's synchronized | 
 | 	 * against concurrent opens, which again needs the BKL. The proper fix | 
 | 	 * is to use the drm_client infrastructure with proper locking for each | 
 | 	 * client. | 
 | 	 */ | 
 | 	if (dev->driver->lastclose) | 
 | 		return true; | 
 |  | 
 | 	return false; | 
 | } | 
 |  | 
 | /** | 
 |  * DOC: file operations | 
 |  * | 
 |  * Drivers must define the file operations structure that forms the DRM | 
 |  * userspace API entry point, even though most of those operations are | 
 |  * implemented in the DRM core. The resulting &struct file_operations must be | 
 |  * stored in the &drm_driver.fops field. The mandatory functions are drm_open(), | 
 |  * drm_read(), drm_ioctl() and drm_compat_ioctl() if CONFIG_COMPAT is enabled | 
 |  * Note that drm_compat_ioctl will be NULL if CONFIG_COMPAT=n, so there's no | 
 |  * need to sprinkle #ifdef into the code. Drivers which implement private ioctls | 
 |  * that require 32/64 bit compatibility support must provide their own | 
 |  * &file_operations.compat_ioctl handler that processes private ioctls and calls | 
 |  * drm_compat_ioctl() for core ioctls. | 
 |  * | 
 |  * In addition drm_read() and drm_poll() provide support for DRM events. DRM | 
 |  * events are a generic and extensible means to send asynchronous events to | 
 |  * userspace through the file descriptor. They are used to send vblank event and | 
 |  * page flip completions by the KMS API. But drivers can also use it for their | 
 |  * own needs, e.g. to signal completion of rendering. | 
 |  * | 
 |  * For the driver-side event interface see drm_event_reserve_init() and | 
 |  * drm_send_event() as the main starting points. | 
 |  * | 
 |  * The memory mapping implementation will vary depending on how the driver | 
 |  * manages memory. Legacy drivers will use the deprecated drm_legacy_mmap() | 
 |  * function, modern drivers should use one of the provided memory-manager | 
 |  * specific implementations. For GEM-based drivers this is drm_gem_mmap(). | 
 |  * | 
 |  * No other file operations are supported by the DRM userspace API. Overall the | 
 |  * following is an example &file_operations structure:: | 
 |  * | 
 |  *     static const example_drm_fops = { | 
 |  *             .owner = THIS_MODULE, | 
 |  *             .open = drm_open, | 
 |  *             .release = drm_release, | 
 |  *             .unlocked_ioctl = drm_ioctl, | 
 |  *             .compat_ioctl = drm_compat_ioctl, // NULL if CONFIG_COMPAT=n | 
 |  *             .poll = drm_poll, | 
 |  *             .read = drm_read, | 
 |  *             .llseek = no_llseek, | 
 |  *             .mmap = drm_gem_mmap, | 
 |  *     }; | 
 |  * | 
 |  * For plain GEM based drivers there is the DEFINE_DRM_GEM_FOPS() macro, and for | 
 |  * CMA based drivers there is the DEFINE_DRM_GEM_CMA_FOPS() macro to make this | 
 |  * simpler. | 
 |  * | 
 |  * The driver's &file_operations must be stored in &drm_driver.fops. | 
 |  * | 
 |  * For driver-private IOCTL handling see the more detailed discussion in | 
 |  * :ref:`IOCTL support in the userland interfaces chapter<drm_driver_ioctl>`. | 
 |  */ | 
 |  | 
 | /** | 
 |  * drm_file_alloc - allocate file context | 
 |  * @minor: minor to allocate on | 
 |  * | 
 |  * This allocates a new DRM file context. It is not linked into any context and | 
 |  * can be used by the caller freely. Note that the context keeps a pointer to | 
 |  * @minor, so it must be freed before @minor is. | 
 |  * | 
 |  * RETURNS: | 
 |  * Pointer to newly allocated context, ERR_PTR on failure. | 
 |  */ | 
 | struct drm_file *drm_file_alloc(struct drm_minor *minor) | 
 | { | 
 | 	struct drm_device *dev = minor->dev; | 
 | 	struct drm_file *file; | 
 | 	int ret; | 
 |  | 
 | 	file = kzalloc(sizeof(*file), GFP_KERNEL); | 
 | 	if (!file) | 
 | 		return ERR_PTR(-ENOMEM); | 
 |  | 
 | 	file->pid = get_pid(task_pid(current)); | 
 | 	file->minor = minor; | 
 |  | 
 | 	/* for compatibility root is always authenticated */ | 
 | 	file->authenticated = capable(CAP_SYS_ADMIN); | 
 |  | 
 | 	INIT_LIST_HEAD(&file->lhead); | 
 | 	INIT_LIST_HEAD(&file->fbs); | 
 | 	mutex_init(&file->fbs_lock); | 
 | 	INIT_LIST_HEAD(&file->blobs); | 
 | 	INIT_LIST_HEAD(&file->pending_event_list); | 
 | 	INIT_LIST_HEAD(&file->event_list); | 
 | 	init_waitqueue_head(&file->event_wait); | 
 | 	file->event_space = 4096; /* set aside 4k for event buffer */ | 
 |  | 
 | 	spin_lock_init(&file->master_lookup_lock); | 
 | 	mutex_init(&file->event_read_lock); | 
 |  | 
 | 	if (drm_core_check_feature(dev, DRIVER_GEM)) | 
 | 		drm_gem_open(dev, file); | 
 |  | 
 | 	if (drm_core_check_feature(dev, DRIVER_SYNCOBJ)) | 
 | 		drm_syncobj_open(file); | 
 |  | 
 | 	drm_prime_init_file_private(&file->prime); | 
 |  | 
 | 	if (dev->driver->open) { | 
 | 		ret = dev->driver->open(dev, file); | 
 | 		if (ret < 0) | 
 | 			goto out_prime_destroy; | 
 | 	} | 
 |  | 
 | 	return file; | 
 |  | 
 | out_prime_destroy: | 
 | 	drm_prime_destroy_file_private(&file->prime); | 
 | 	if (drm_core_check_feature(dev, DRIVER_SYNCOBJ)) | 
 | 		drm_syncobj_release(file); | 
 | 	if (drm_core_check_feature(dev, DRIVER_GEM)) | 
 | 		drm_gem_release(dev, file); | 
 | 	put_pid(file->pid); | 
 | 	kfree(file); | 
 |  | 
 | 	return ERR_PTR(ret); | 
 | } | 
 |  | 
 | static void drm_events_release(struct drm_file *file_priv) | 
 | { | 
 | 	struct drm_device *dev = file_priv->minor->dev; | 
 | 	struct drm_pending_event *e, *et; | 
 | 	unsigned long flags; | 
 |  | 
 | 	spin_lock_irqsave(&dev->event_lock, flags); | 
 |  | 
 | 	/* Unlink pending events */ | 
 | 	list_for_each_entry_safe(e, et, &file_priv->pending_event_list, | 
 | 				 pending_link) { | 
 | 		list_del(&e->pending_link); | 
 | 		e->file_priv = NULL; | 
 | 	} | 
 |  | 
 | 	/* Remove unconsumed events */ | 
 | 	list_for_each_entry_safe(e, et, &file_priv->event_list, link) { | 
 | 		list_del(&e->link); | 
 | 		kfree(e); | 
 | 	} | 
 |  | 
 | 	spin_unlock_irqrestore(&dev->event_lock, flags); | 
 | } | 
 |  | 
 | /** | 
 |  * drm_file_free - free file context | 
 |  * @file: context to free, or NULL | 
 |  * | 
 |  * This destroys and deallocates a DRM file context previously allocated via | 
 |  * drm_file_alloc(). The caller must make sure to unlink it from any contexts | 
 |  * before calling this. | 
 |  * | 
 |  * If NULL is passed, this is a no-op. | 
 |  */ | 
 | void drm_file_free(struct drm_file *file) | 
 | { | 
 | 	struct drm_device *dev; | 
 |  | 
 | 	if (!file) | 
 | 		return; | 
 |  | 
 | 	dev = file->minor->dev; | 
 |  | 
 | 	DRM_DEBUG("comm=\"%s\", pid=%d, dev=0x%lx, open_count=%d\n", | 
 | 		  current->comm, task_pid_nr(current), | 
 | 		  (long)old_encode_dev(file->minor->kdev->devt), | 
 | 		  atomic_read(&dev->open_count)); | 
 |  | 
 | #ifdef CONFIG_DRM_LEGACY | 
 | 	if (drm_core_check_feature(dev, DRIVER_LEGACY) && | 
 | 	    dev->driver->preclose) | 
 | 		dev->driver->preclose(dev, file); | 
 | #endif | 
 |  | 
 | 	if (drm_core_check_feature(dev, DRIVER_LEGACY)) | 
 | 		drm_legacy_lock_release(dev, file->filp); | 
 |  | 
 | 	if (drm_core_check_feature(dev, DRIVER_HAVE_DMA)) | 
 | 		drm_legacy_reclaim_buffers(dev, file); | 
 |  | 
 | 	drm_events_release(file); | 
 |  | 
 | 	if (drm_core_check_feature(dev, DRIVER_MODESET)) { | 
 | 		drm_fb_release(file); | 
 | 		drm_property_destroy_user_blobs(dev, file); | 
 | 	} | 
 |  | 
 | 	if (drm_core_check_feature(dev, DRIVER_SYNCOBJ)) | 
 | 		drm_syncobj_release(file); | 
 |  | 
 | 	if (drm_core_check_feature(dev, DRIVER_GEM)) | 
 | 		drm_gem_release(dev, file); | 
 |  | 
 | 	drm_legacy_ctxbitmap_flush(dev, file); | 
 |  | 
 | 	if (drm_is_primary_client(file)) | 
 | 		drm_master_release(file); | 
 |  | 
 | 	if (dev->driver->postclose) | 
 | 		dev->driver->postclose(dev, file); | 
 |  | 
 | 	drm_prime_destroy_file_private(&file->prime); | 
 |  | 
 | 	WARN_ON(!list_empty(&file->event_list)); | 
 |  | 
 | 	put_pid(file->pid); | 
 | 	kfree(file); | 
 | } | 
 |  | 
 | static void drm_close_helper(struct file *filp) | 
 | { | 
 | 	struct drm_file *file_priv = filp->private_data; | 
 | 	struct drm_device *dev = file_priv->minor->dev; | 
 |  | 
 | 	mutex_lock(&dev->filelist_mutex); | 
 | 	list_del(&file_priv->lhead); | 
 | 	mutex_unlock(&dev->filelist_mutex); | 
 |  | 
 | 	drm_file_free(file_priv); | 
 | } | 
 |  | 
 | /* | 
 |  * Check whether DRI will run on this CPU. | 
 |  * | 
 |  * \return non-zero if the DRI will run on this CPU, or zero otherwise. | 
 |  */ | 
 | static int drm_cpu_valid(void) | 
 | { | 
 | #if defined(__sparc__) && !defined(__sparc_v9__) | 
 | 	return 0;		/* No cmpxchg before v9 sparc. */ | 
 | #endif | 
 | 	return 1; | 
 | } | 
 |  | 
 | /* | 
 |  * Called whenever a process opens a drm node | 
 |  * | 
 |  * \param filp file pointer. | 
 |  * \param minor acquired minor-object. | 
 |  * \return zero on success or a negative number on failure. | 
 |  * | 
 |  * Creates and initializes a drm_file structure for the file private data in \p | 
 |  * filp and add it into the double linked list in \p dev. | 
 |  */ | 
 | static int drm_open_helper(struct file *filp, struct drm_minor *minor) | 
 | { | 
 | 	struct drm_device *dev = minor->dev; | 
 | 	struct drm_file *priv; | 
 | 	int ret; | 
 |  | 
 | 	if (filp->f_flags & O_EXCL) | 
 | 		return -EBUSY;	/* No exclusive opens */ | 
 | 	if (!drm_cpu_valid()) | 
 | 		return -EINVAL; | 
 | 	if (dev->switch_power_state != DRM_SWITCH_POWER_ON && | 
 | 	    dev->switch_power_state != DRM_SWITCH_POWER_DYNAMIC_OFF) | 
 | 		return -EINVAL; | 
 |  | 
 | 	DRM_DEBUG("comm=\"%s\", pid=%d, minor=%d\n", current->comm, | 
 | 		  task_pid_nr(current), minor->index); | 
 |  | 
 | 	priv = drm_file_alloc(minor); | 
 | 	if (IS_ERR(priv)) | 
 | 		return PTR_ERR(priv); | 
 |  | 
 | 	if (drm_is_primary_client(priv)) { | 
 | 		ret = drm_master_open(priv); | 
 | 		if (ret) { | 
 | 			drm_file_free(priv); | 
 | 			return ret; | 
 | 		} | 
 | 	} | 
 |  | 
 | 	filp->private_data = priv; | 
 | 	filp->f_mode |= FMODE_UNSIGNED_OFFSET; | 
 | 	priv->filp = filp; | 
 |  | 
 | 	mutex_lock(&dev->filelist_mutex); | 
 | 	list_add(&priv->lhead, &dev->filelist); | 
 | 	mutex_unlock(&dev->filelist_mutex); | 
 |  | 
 | #ifdef CONFIG_DRM_LEGACY | 
 | #ifdef __alpha__ | 
 | 	/* | 
 | 	 * Default the hose | 
 | 	 */ | 
 | 	if (!dev->hose) { | 
 | 		struct pci_dev *pci_dev; | 
 |  | 
 | 		pci_dev = pci_get_class(PCI_CLASS_DISPLAY_VGA << 8, NULL); | 
 | 		if (pci_dev) { | 
 | 			dev->hose = pci_dev->sysdata; | 
 | 			pci_dev_put(pci_dev); | 
 | 		} | 
 | 		if (!dev->hose) { | 
 | 			struct pci_bus *b = list_entry(pci_root_buses.next, | 
 | 				struct pci_bus, node); | 
 | 			if (b) | 
 | 				dev->hose = b->sysdata; | 
 | 		} | 
 | 	} | 
 | #endif | 
 | #endif | 
 |  | 
 | 	return 0; | 
 | } | 
 |  | 
 | /** | 
 |  * drm_open - open method for DRM file | 
 |  * @inode: device inode | 
 |  * @filp: file pointer. | 
 |  * | 
 |  * This function must be used by drivers as their &file_operations.open method. | 
 |  * It looks up the correct DRM device and instantiates all the per-file | 
 |  * resources for it. It also calls the &drm_driver.open driver callback. | 
 |  * | 
 |  * RETURNS: | 
 |  * | 
 |  * 0 on success or negative errno value on failure. | 
 |  */ | 
 | int drm_open(struct inode *inode, struct file *filp) | 
 | { | 
 | 	struct drm_device *dev; | 
 | 	struct drm_minor *minor; | 
 | 	int retcode; | 
 | 	int need_setup = 0; | 
 |  | 
 | 	minor = drm_minor_acquire(iminor(inode)); | 
 | 	if (IS_ERR(minor)) | 
 | 		return PTR_ERR(minor); | 
 |  | 
 | 	dev = minor->dev; | 
 | 	if (drm_dev_needs_global_mutex(dev)) | 
 | 		mutex_lock(&drm_global_mutex); | 
 |  | 
 | 	if (!atomic_fetch_inc(&dev->open_count)) | 
 | 		need_setup = 1; | 
 |  | 
 | 	/* share address_space across all char-devs of a single device */ | 
 | 	filp->f_mapping = dev->anon_inode->i_mapping; | 
 |  | 
 | 	retcode = drm_open_helper(filp, minor); | 
 | 	if (retcode) | 
 | 		goto err_undo; | 
 | 	if (need_setup) { | 
 | 		retcode = drm_legacy_setup(dev); | 
 | 		if (retcode) { | 
 | 			drm_close_helper(filp); | 
 | 			goto err_undo; | 
 | 		} | 
 | 	} | 
 |  | 
 | 	if (drm_dev_needs_global_mutex(dev)) | 
 | 		mutex_unlock(&drm_global_mutex); | 
 |  | 
 | 	return 0; | 
 |  | 
 | err_undo: | 
 | 	atomic_dec(&dev->open_count); | 
 | 	if (drm_dev_needs_global_mutex(dev)) | 
 | 		mutex_unlock(&drm_global_mutex); | 
 | 	drm_minor_release(minor); | 
 | 	return retcode; | 
 | } | 
 | EXPORT_SYMBOL(drm_open); | 
 |  | 
 | void drm_lastclose(struct drm_device * dev) | 
 | { | 
 | 	DRM_DEBUG("\n"); | 
 |  | 
 | 	if (dev->driver->lastclose) | 
 | 		dev->driver->lastclose(dev); | 
 | 	DRM_DEBUG("driver lastclose completed\n"); | 
 |  | 
 | 	if (drm_core_check_feature(dev, DRIVER_LEGACY)) | 
 | 		drm_legacy_dev_reinit(dev); | 
 |  | 
 | 	drm_client_dev_restore(dev); | 
 | } | 
 |  | 
 | /** | 
 |  * drm_release - release method for DRM file | 
 |  * @inode: device inode | 
 |  * @filp: file pointer. | 
 |  * | 
 |  * This function must be used by drivers as their &file_operations.release | 
 |  * method. It frees any resources associated with the open file, and calls the | 
 |  * &drm_driver.postclose driver callback. If this is the last open file for the | 
 |  * DRM device also proceeds to call the &drm_driver.lastclose driver callback. | 
 |  * | 
 |  * RETURNS: | 
 |  * | 
 |  * Always succeeds and returns 0. | 
 |  */ | 
 | int drm_release(struct inode *inode, struct file *filp) | 
 | { | 
 | 	struct drm_file *file_priv = filp->private_data; | 
 | 	struct drm_minor *minor = file_priv->minor; | 
 | 	struct drm_device *dev = minor->dev; | 
 |  | 
 | 	if (drm_dev_needs_global_mutex(dev)) | 
 | 		mutex_lock(&drm_global_mutex); | 
 |  | 
 | 	DRM_DEBUG("open_count = %d\n", atomic_read(&dev->open_count)); | 
 |  | 
 | 	drm_close_helper(filp); | 
 |  | 
 | 	if (atomic_dec_and_test(&dev->open_count)) | 
 | 		drm_lastclose(dev); | 
 |  | 
 | 	if (drm_dev_needs_global_mutex(dev)) | 
 | 		mutex_unlock(&drm_global_mutex); | 
 |  | 
 | 	drm_minor_release(minor); | 
 |  | 
 | 	return 0; | 
 | } | 
 | EXPORT_SYMBOL(drm_release); | 
 |  | 
 | /** | 
 |  * drm_release_noglobal - release method for DRM file | 
 |  * @inode: device inode | 
 |  * @filp: file pointer. | 
 |  * | 
 |  * This function may be used by drivers as their &file_operations.release | 
 |  * method. It frees any resources associated with the open file prior to taking | 
 |  * the drm_global_mutex, which then calls the &drm_driver.postclose driver | 
 |  * callback. If this is the last open file for the DRM device also proceeds to | 
 |  * call the &drm_driver.lastclose driver callback. | 
 |  * | 
 |  * RETURNS: | 
 |  * | 
 |  * Always succeeds and returns 0. | 
 |  */ | 
 | int drm_release_noglobal(struct inode *inode, struct file *filp) | 
 | { | 
 | 	struct drm_file *file_priv = filp->private_data; | 
 | 	struct drm_minor *minor = file_priv->minor; | 
 | 	struct drm_device *dev = minor->dev; | 
 |  | 
 | 	drm_close_helper(filp); | 
 |  | 
 | 	if (atomic_dec_and_mutex_lock(&dev->open_count, &drm_global_mutex)) { | 
 | 		drm_lastclose(dev); | 
 | 		mutex_unlock(&drm_global_mutex); | 
 | 	} | 
 |  | 
 | 	drm_minor_release(minor); | 
 |  | 
 | 	return 0; | 
 | } | 
 | EXPORT_SYMBOL(drm_release_noglobal); | 
 |  | 
 | /** | 
 |  * drm_read - read method for DRM file | 
 |  * @filp: file pointer | 
 |  * @buffer: userspace destination pointer for the read | 
 |  * @count: count in bytes to read | 
 |  * @offset: offset to read | 
 |  * | 
 |  * This function must be used by drivers as their &file_operations.read | 
 |  * method if they use DRM events for asynchronous signalling to userspace. | 
 |  * Since events are used by the KMS API for vblank and page flip completion this | 
 |  * means all modern display drivers must use it. | 
 |  * | 
 |  * @offset is ignored, DRM events are read like a pipe. Polling support is | 
 |  * provided by drm_poll(). | 
 |  * | 
 |  * This function will only ever read a full event. Therefore userspace must | 
 |  * supply a big enough buffer to fit any event to ensure forward progress. Since | 
 |  * the maximum event space is currently 4K it's recommended to just use that for | 
 |  * safety. | 
 |  * | 
 |  * RETURNS: | 
 |  * | 
 |  * Number of bytes read (always aligned to full events, and can be 0) or a | 
 |  * negative error code on failure. | 
 |  */ | 
 | ssize_t drm_read(struct file *filp, char __user *buffer, | 
 | 		 size_t count, loff_t *offset) | 
 | { | 
 | 	struct drm_file *file_priv = filp->private_data; | 
 | 	struct drm_device *dev = file_priv->minor->dev; | 
 | 	ssize_t ret; | 
 |  | 
 | 	ret = mutex_lock_interruptible(&file_priv->event_read_lock); | 
 | 	if (ret) | 
 | 		return ret; | 
 |  | 
 | 	for (;;) { | 
 | 		struct drm_pending_event *e = NULL; | 
 |  | 
 | 		spin_lock_irq(&dev->event_lock); | 
 | 		if (!list_empty(&file_priv->event_list)) { | 
 | 			e = list_first_entry(&file_priv->event_list, | 
 | 					struct drm_pending_event, link); | 
 | 			file_priv->event_space += e->event->length; | 
 | 			list_del(&e->link); | 
 | 		} | 
 | 		spin_unlock_irq(&dev->event_lock); | 
 |  | 
 | 		if (e == NULL) { | 
 | 			if (ret) | 
 | 				break; | 
 |  | 
 | 			if (filp->f_flags & O_NONBLOCK) { | 
 | 				ret = -EAGAIN; | 
 | 				break; | 
 | 			} | 
 |  | 
 | 			mutex_unlock(&file_priv->event_read_lock); | 
 | 			ret = wait_event_interruptible(file_priv->event_wait, | 
 | 						       !list_empty(&file_priv->event_list)); | 
 | 			if (ret >= 0) | 
 | 				ret = mutex_lock_interruptible(&file_priv->event_read_lock); | 
 | 			if (ret) | 
 | 				return ret; | 
 | 		} else { | 
 | 			unsigned length = e->event->length; | 
 |  | 
 | 			if (length > count - ret) { | 
 | put_back_event: | 
 | 				spin_lock_irq(&dev->event_lock); | 
 | 				file_priv->event_space -= length; | 
 | 				list_add(&e->link, &file_priv->event_list); | 
 | 				spin_unlock_irq(&dev->event_lock); | 
 | 				wake_up_interruptible_poll(&file_priv->event_wait, | 
 | 					EPOLLIN | EPOLLRDNORM); | 
 | 				break; | 
 | 			} | 
 |  | 
 | 			if (copy_to_user(buffer + ret, e->event, length)) { | 
 | 				if (ret == 0) | 
 | 					ret = -EFAULT; | 
 | 				goto put_back_event; | 
 | 			} | 
 |  | 
 | 			ret += length; | 
 | 			kfree(e); | 
 | 		} | 
 | 	} | 
 | 	mutex_unlock(&file_priv->event_read_lock); | 
 |  | 
 | 	return ret; | 
 | } | 
 | EXPORT_SYMBOL(drm_read); | 
 |  | 
 | /** | 
 |  * drm_poll - poll method for DRM file | 
 |  * @filp: file pointer | 
 |  * @wait: poll waiter table | 
 |  * | 
 |  * This function must be used by drivers as their &file_operations.read method | 
 |  * if they use DRM events for asynchronous signalling to userspace.  Since | 
 |  * events are used by the KMS API for vblank and page flip completion this means | 
 |  * all modern display drivers must use it. | 
 |  * | 
 |  * See also drm_read(). | 
 |  * | 
 |  * RETURNS: | 
 |  * | 
 |  * Mask of POLL flags indicating the current status of the file. | 
 |  */ | 
 | __poll_t drm_poll(struct file *filp, struct poll_table_struct *wait) | 
 | { | 
 | 	struct drm_file *file_priv = filp->private_data; | 
 | 	__poll_t mask = 0; | 
 |  | 
 | 	poll_wait(filp, &file_priv->event_wait, wait); | 
 |  | 
 | 	if (!list_empty(&file_priv->event_list)) | 
 | 		mask |= EPOLLIN | EPOLLRDNORM; | 
 |  | 
 | 	return mask; | 
 | } | 
 | EXPORT_SYMBOL(drm_poll); | 
 |  | 
 | /** | 
 |  * drm_event_reserve_init_locked - init a DRM event and reserve space for it | 
 |  * @dev: DRM device | 
 |  * @file_priv: DRM file private data | 
 |  * @p: tracking structure for the pending event | 
 |  * @e: actual event data to deliver to userspace | 
 |  * | 
 |  * This function prepares the passed in event for eventual delivery. If the event | 
 |  * doesn't get delivered (because the IOCTL fails later on, before queuing up | 
 |  * anything) then the even must be cancelled and freed using | 
 |  * drm_event_cancel_free(). Successfully initialized events should be sent out | 
 |  * using drm_send_event() or drm_send_event_locked() to signal completion of the | 
 |  * asynchronous event to userspace. | 
 |  * | 
 |  * If callers embedded @p into a larger structure it must be allocated with | 
 |  * kmalloc and @p must be the first member element. | 
 |  * | 
 |  * This is the locked version of drm_event_reserve_init() for callers which | 
 |  * already hold &drm_device.event_lock. | 
 |  * | 
 |  * RETURNS: | 
 |  * | 
 |  * 0 on success or a negative error code on failure. | 
 |  */ | 
 | int drm_event_reserve_init_locked(struct drm_device *dev, | 
 | 				  struct drm_file *file_priv, | 
 | 				  struct drm_pending_event *p, | 
 | 				  struct drm_event *e) | 
 | { | 
 | 	if (file_priv->event_space < e->length) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	file_priv->event_space -= e->length; | 
 |  | 
 | 	p->event = e; | 
 | 	list_add(&p->pending_link, &file_priv->pending_event_list); | 
 | 	p->file_priv = file_priv; | 
 |  | 
 | 	return 0; | 
 | } | 
 | EXPORT_SYMBOL(drm_event_reserve_init_locked); | 
 |  | 
 | /** | 
 |  * drm_event_reserve_init - init a DRM event and reserve space for it | 
 |  * @dev: DRM device | 
 |  * @file_priv: DRM file private data | 
 |  * @p: tracking structure for the pending event | 
 |  * @e: actual event data to deliver to userspace | 
 |  * | 
 |  * This function prepares the passed in event for eventual delivery. If the event | 
 |  * doesn't get delivered (because the IOCTL fails later on, before queuing up | 
 |  * anything) then the even must be cancelled and freed using | 
 |  * drm_event_cancel_free(). Successfully initialized events should be sent out | 
 |  * using drm_send_event() or drm_send_event_locked() to signal completion of the | 
 |  * asynchronous event to userspace. | 
 |  * | 
 |  * If callers embedded @p into a larger structure it must be allocated with | 
 |  * kmalloc and @p must be the first member element. | 
 |  * | 
 |  * Callers which already hold &drm_device.event_lock should use | 
 |  * drm_event_reserve_init_locked() instead. | 
 |  * | 
 |  * RETURNS: | 
 |  * | 
 |  * 0 on success or a negative error code on failure. | 
 |  */ | 
 | int drm_event_reserve_init(struct drm_device *dev, | 
 | 			   struct drm_file *file_priv, | 
 | 			   struct drm_pending_event *p, | 
 | 			   struct drm_event *e) | 
 | { | 
 | 	unsigned long flags; | 
 | 	int ret; | 
 |  | 
 | 	spin_lock_irqsave(&dev->event_lock, flags); | 
 | 	ret = drm_event_reserve_init_locked(dev, file_priv, p, e); | 
 | 	spin_unlock_irqrestore(&dev->event_lock, flags); | 
 |  | 
 | 	return ret; | 
 | } | 
 | EXPORT_SYMBOL(drm_event_reserve_init); | 
 |  | 
 | /** | 
 |  * drm_event_cancel_free - free a DRM event and release its space | 
 |  * @dev: DRM device | 
 |  * @p: tracking structure for the pending event | 
 |  * | 
 |  * This function frees the event @p initialized with drm_event_reserve_init() | 
 |  * and releases any allocated space. It is used to cancel an event when the | 
 |  * nonblocking operation could not be submitted and needed to be aborted. | 
 |  */ | 
 | void drm_event_cancel_free(struct drm_device *dev, | 
 | 			   struct drm_pending_event *p) | 
 | { | 
 | 	unsigned long flags; | 
 |  | 
 | 	spin_lock_irqsave(&dev->event_lock, flags); | 
 | 	if (p->file_priv) { | 
 | 		p->file_priv->event_space += p->event->length; | 
 | 		list_del(&p->pending_link); | 
 | 	} | 
 | 	spin_unlock_irqrestore(&dev->event_lock, flags); | 
 |  | 
 | 	if (p->fence) | 
 | 		dma_fence_put(p->fence); | 
 |  | 
 | 	kfree(p); | 
 | } | 
 | EXPORT_SYMBOL(drm_event_cancel_free); | 
 |  | 
 | static void drm_send_event_helper(struct drm_device *dev, | 
 | 			   struct drm_pending_event *e, ktime_t timestamp) | 
 | { | 
 | 	assert_spin_locked(&dev->event_lock); | 
 |  | 
 | 	if (e->completion) { | 
 | 		complete_all(e->completion); | 
 | 		e->completion_release(e->completion); | 
 | 		e->completion = NULL; | 
 | 	} | 
 |  | 
 | 	if (e->fence) { | 
 | 		if (timestamp) | 
 | 			dma_fence_signal_timestamp(e->fence, timestamp); | 
 | 		else | 
 | 			dma_fence_signal(e->fence); | 
 | 		dma_fence_put(e->fence); | 
 | 	} | 
 |  | 
 | 	if (!e->file_priv) { | 
 | 		kfree(e); | 
 | 		return; | 
 | 	} | 
 |  | 
 | 	list_del(&e->pending_link); | 
 | 	list_add_tail(&e->link, | 
 | 		      &e->file_priv->event_list); | 
 | 	wake_up_interruptible_poll(&e->file_priv->event_wait, | 
 | 		EPOLLIN | EPOLLRDNORM); | 
 | } | 
 |  | 
 | /** | 
 |  * drm_send_event_timestamp_locked - send DRM event to file descriptor | 
 |  * @dev: DRM device | 
 |  * @e: DRM event to deliver | 
 |  * @timestamp: timestamp to set for the fence event in kernel's CLOCK_MONOTONIC | 
 |  * time domain | 
 |  * | 
 |  * This function sends the event @e, initialized with drm_event_reserve_init(), | 
 |  * to its associated userspace DRM file. Callers must already hold | 
 |  * &drm_device.event_lock. | 
 |  * | 
 |  * Note that the core will take care of unlinking and disarming events when the | 
 |  * corresponding DRM file is closed. Drivers need not worry about whether the | 
 |  * DRM file for this event still exists and can call this function upon | 
 |  * completion of the asynchronous work unconditionally. | 
 |  */ | 
 | void drm_send_event_timestamp_locked(struct drm_device *dev, | 
 | 				     struct drm_pending_event *e, ktime_t timestamp) | 
 | { | 
 | 	drm_send_event_helper(dev, e, timestamp); | 
 | } | 
 | EXPORT_SYMBOL(drm_send_event_timestamp_locked); | 
 |  | 
 | /** | 
 |  * drm_send_event_locked - send DRM event to file descriptor | 
 |  * @dev: DRM device | 
 |  * @e: DRM event to deliver | 
 |  * | 
 |  * This function sends the event @e, initialized with drm_event_reserve_init(), | 
 |  * to its associated userspace DRM file. Callers must already hold | 
 |  * &drm_device.event_lock, see drm_send_event() for the unlocked version. | 
 |  * | 
 |  * Note that the core will take care of unlinking and disarming events when the | 
 |  * corresponding DRM file is closed. Drivers need not worry about whether the | 
 |  * DRM file for this event still exists and can call this function upon | 
 |  * completion of the asynchronous work unconditionally. | 
 |  */ | 
 | void drm_send_event_locked(struct drm_device *dev, struct drm_pending_event *e) | 
 | { | 
 | 	drm_send_event_helper(dev, e, 0); | 
 | } | 
 | EXPORT_SYMBOL(drm_send_event_locked); | 
 |  | 
 | /** | 
 |  * drm_send_event - send DRM event to file descriptor | 
 |  * @dev: DRM device | 
 |  * @e: DRM event to deliver | 
 |  * | 
 |  * This function sends the event @e, initialized with drm_event_reserve_init(), | 
 |  * to its associated userspace DRM file. This function acquires | 
 |  * &drm_device.event_lock, see drm_send_event_locked() for callers which already | 
 |  * hold this lock. | 
 |  * | 
 |  * Note that the core will take care of unlinking and disarming events when the | 
 |  * corresponding DRM file is closed. Drivers need not worry about whether the | 
 |  * DRM file for this event still exists and can call this function upon | 
 |  * completion of the asynchronous work unconditionally. | 
 |  */ | 
 | void drm_send_event(struct drm_device *dev, struct drm_pending_event *e) | 
 | { | 
 | 	unsigned long irqflags; | 
 |  | 
 | 	spin_lock_irqsave(&dev->event_lock, irqflags); | 
 | 	drm_send_event_helper(dev, e, 0); | 
 | 	spin_unlock_irqrestore(&dev->event_lock, irqflags); | 
 | } | 
 | EXPORT_SYMBOL(drm_send_event); | 
 |  | 
 | /** | 
 |  * mock_drm_getfile - Create a new struct file for the drm device | 
 |  * @minor: drm minor to wrap (e.g. #drm_device.primary) | 
 |  * @flags: file creation mode (O_RDWR etc) | 
 |  * | 
 |  * This create a new struct file that wraps a DRM file context around a | 
 |  * DRM minor. This mimicks userspace opening e.g. /dev/dri/card0, but without | 
 |  * invoking userspace. The struct file may be operated on using its f_op | 
 |  * (the drm_device.driver.fops) to mimick userspace operations, or be supplied | 
 |  * to userspace facing functions as an internal/anonymous client. | 
 |  * | 
 |  * RETURNS: | 
 |  * Pointer to newly created struct file, ERR_PTR on failure. | 
 |  */ | 
 | struct file *mock_drm_getfile(struct drm_minor *minor, unsigned int flags) | 
 | { | 
 | 	struct drm_device *dev = minor->dev; | 
 | 	struct drm_file *priv; | 
 | 	struct file *file; | 
 |  | 
 | 	priv = drm_file_alloc(minor); | 
 | 	if (IS_ERR(priv)) | 
 | 		return ERR_CAST(priv); | 
 |  | 
 | 	file = anon_inode_getfile("drm", dev->driver->fops, priv, flags); | 
 | 	if (IS_ERR(file)) { | 
 | 		drm_file_free(priv); | 
 | 		return file; | 
 | 	} | 
 |  | 
 | 	/* Everyone shares a single global address space */ | 
 | 	file->f_mapping = dev->anon_inode->i_mapping; | 
 |  | 
 | 	drm_dev_get(dev); | 
 | 	priv->filp = file; | 
 |  | 
 | 	return file; | 
 | } | 
 | EXPORT_SYMBOL_FOR_TESTS_ONLY(mock_drm_getfile); | 
 |  | 
 | #ifdef CONFIG_MMU | 
 | #ifdef CONFIG_TRANSPARENT_HUGEPAGE | 
 | /* | 
 |  * drm_addr_inflate() attempts to construct an aligned area by inflating | 
 |  * the area size and skipping the unaligned start of the area. | 
 |  * adapted from shmem_get_unmapped_area() | 
 |  */ | 
 | static unsigned long drm_addr_inflate(unsigned long addr, | 
 | 				      unsigned long len, | 
 | 				      unsigned long pgoff, | 
 | 				      unsigned long flags, | 
 | 				      unsigned long huge_size) | 
 | { | 
 | 	unsigned long offset, inflated_len; | 
 | 	unsigned long inflated_addr; | 
 | 	unsigned long inflated_offset; | 
 |  | 
 | 	offset = (pgoff << PAGE_SHIFT) & (huge_size - 1); | 
 | 	if (offset && offset + len < 2 * huge_size) | 
 | 		return addr; | 
 | 	if ((addr & (huge_size - 1)) == offset) | 
 | 		return addr; | 
 |  | 
 | 	inflated_len = len + huge_size - PAGE_SIZE; | 
 | 	if (inflated_len > TASK_SIZE) | 
 | 		return addr; | 
 | 	if (inflated_len < len) | 
 | 		return addr; | 
 |  | 
 | 	inflated_addr = current->mm->get_unmapped_area(NULL, 0, inflated_len, | 
 | 						       0, flags); | 
 | 	if (IS_ERR_VALUE(inflated_addr)) | 
 | 		return addr; | 
 | 	if (inflated_addr & ~PAGE_MASK) | 
 | 		return addr; | 
 |  | 
 | 	inflated_offset = inflated_addr & (huge_size - 1); | 
 | 	inflated_addr += offset - inflated_offset; | 
 | 	if (inflated_offset > offset) | 
 | 		inflated_addr += huge_size; | 
 |  | 
 | 	if (inflated_addr > TASK_SIZE - len) | 
 | 		return addr; | 
 |  | 
 | 	return inflated_addr; | 
 | } | 
 |  | 
 | /** | 
 |  * drm_get_unmapped_area() - Get an unused user-space virtual memory area | 
 |  * suitable for huge page table entries. | 
 |  * @file: The struct file representing the address space being mmap()'d. | 
 |  * @uaddr: Start address suggested by user-space. | 
 |  * @len: Length of the area. | 
 |  * @pgoff: The page offset into the address space. | 
 |  * @flags: mmap flags | 
 |  * @mgr: The address space manager used by the drm driver. This argument can | 
 |  * probably be removed at some point when all drivers use the same | 
 |  * address space manager. | 
 |  * | 
 |  * This function attempts to find an unused user-space virtual memory area | 
 |  * that can accommodate the size we want to map, and that is properly | 
 |  * aligned to facilitate huge page table entries matching actual | 
 |  * huge pages or huge page aligned memory in buffer objects. Buffer objects | 
 |  * are assumed to start at huge page boundary pfns (io memory) or be | 
 |  * populated by huge pages aligned to the start of the buffer object | 
 |  * (system- or coherent memory). Adapted from shmem_get_unmapped_area. | 
 |  * | 
 |  * Return: aligned user-space address. | 
 |  */ | 
 | unsigned long drm_get_unmapped_area(struct file *file, | 
 | 				    unsigned long uaddr, unsigned long len, | 
 | 				    unsigned long pgoff, unsigned long flags, | 
 | 				    struct drm_vma_offset_manager *mgr) | 
 | { | 
 | 	unsigned long addr; | 
 | 	unsigned long inflated_addr; | 
 | 	struct drm_vma_offset_node *node; | 
 |  | 
 | 	if (len > TASK_SIZE) | 
 | 		return -ENOMEM; | 
 |  | 
 | 	/* | 
 | 	 * @pgoff is the file page-offset the huge page boundaries of | 
 | 	 * which typically aligns to physical address huge page boundaries. | 
 | 	 * That's not true for DRM, however, where physical address huge | 
 | 	 * page boundaries instead are aligned with the offset from | 
 | 	 * buffer object start. So adjust @pgoff to be the offset from | 
 | 	 * buffer object start. | 
 | 	 */ | 
 | 	drm_vma_offset_lock_lookup(mgr); | 
 | 	node = drm_vma_offset_lookup_locked(mgr, pgoff, 1); | 
 | 	if (node) | 
 | 		pgoff -= node->vm_node.start; | 
 | 	drm_vma_offset_unlock_lookup(mgr); | 
 |  | 
 | 	addr = current->mm->get_unmapped_area(file, uaddr, len, pgoff, flags); | 
 | 	if (IS_ERR_VALUE(addr)) | 
 | 		return addr; | 
 | 	if (addr & ~PAGE_MASK) | 
 | 		return addr; | 
 | 	if (addr > TASK_SIZE - len) | 
 | 		return addr; | 
 |  | 
 | 	if (len < HPAGE_PMD_SIZE) | 
 | 		return addr; | 
 | 	if (flags & MAP_FIXED) | 
 | 		return addr; | 
 | 	/* | 
 | 	 * Our priority is to support MAP_SHARED mapped hugely; | 
 | 	 * and support MAP_PRIVATE mapped hugely too, until it is COWed. | 
 | 	 * But if caller specified an address hint, respect that as before. | 
 | 	 */ | 
 | 	if (uaddr) | 
 | 		return addr; | 
 |  | 
 | 	inflated_addr = drm_addr_inflate(addr, len, pgoff, flags, | 
 | 					 HPAGE_PMD_SIZE); | 
 |  | 
 | 	if (IS_ENABLED(CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD) && | 
 | 	    len >= HPAGE_PUD_SIZE) | 
 | 		inflated_addr = drm_addr_inflate(inflated_addr, len, pgoff, | 
 | 						 flags, HPAGE_PUD_SIZE); | 
 | 	return inflated_addr; | 
 | } | 
 | #else /* CONFIG_TRANSPARENT_HUGEPAGE */ | 
 | unsigned long drm_get_unmapped_area(struct file *file, | 
 | 				    unsigned long uaddr, unsigned long len, | 
 | 				    unsigned long pgoff, unsigned long flags, | 
 | 				    struct drm_vma_offset_manager *mgr) | 
 | { | 
 | 	return current->mm->get_unmapped_area(file, uaddr, len, pgoff, flags); | 
 | } | 
 | #endif /* CONFIG_TRANSPARENT_HUGEPAGE */ | 
 | EXPORT_SYMBOL_GPL(drm_get_unmapped_area); | 
 | #endif /* CONFIG_MMU */ |