?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
pcnet32: Read buffer overflow
[linux-2.6/mini2440.git] / drivers / video / console / fbcon_cw.c
bloba6819b9d1770cccd2690e9ee4c95f52736c27d42
1 /*
2 * linux/drivers/video/console/fbcon_ud.c -- Software Rotation - 90 degrees
3 *
4 * Copyright (C) 2005 Antonino Daplas <adaplas @pol.net>
5 *
6 * This file is subject to the terms and conditions of the GNU General Public
7 * License. See the file COPYING in the main directory of this archive for
8 * more details.
9 */
10
11 #include <linux/module.h>
12 #include <linux/string.h>
13 #include <linux/fb.h>
14 #include <linux/vt_kern.h>
15 #include <linux/console.h>
16 #include <asm/types.h>
17 #include "fbcon.h"
18 #include "fbcon_rotate.h"
19
20 /*
21 * Rotation 90 degrees
22 */
23
24 static inline void cw_update_attr(u8 *dst, u8 *src, int attribute,
25 struct vc_data *vc)
26 {
27 int i, j, offset = (vc->vc_font.height < 10) ? 1 : 2;
28 int width = (vc->vc_font.height + 7) >> 3;
29 u8 c, t = 0, msk = ~(0xff >> offset);
30
31 for (i = 0; i < vc->vc_font.width; i++) {
32 for (j = 0; j < width; j++) {
33 c = *src;
34 if (attribute & FBCON_ATTRIBUTE_UNDERLINE && !j)
35 c |= msk;
36 if (attribute & FBCON_ATTRIBUTE_BOLD && i)
37 c |= *(src-width);
38 if (attribute & FBCON_ATTRIBUTE_REVERSE)
39 c = ~c;
40 src++;
41 *dst++ = c;
42 t = c;
43 }
44 }
45 }
46
47
48 static void cw_bmove(struct vc_data *vc, struct fb_info *info, int sy,
49 int sx, int dy, int dx, int height, int width)
50 {
51 struct fbcon_ops *ops = info->fbcon_par;
52 struct fb_copyarea area;
53 u32 vxres = GETVXRES(ops->p->scrollmode, info);
54
55 area.sx = vxres - ((sy + height) * vc->vc_font.height);
56 area.sy = sx * vc->vc_font.width;
57 area.dx = vxres - ((dy + height) * vc->vc_font.height);
58 area.dy = dx * vc->vc_font.width;
59 area.width = height * vc->vc_font.height;
60 area.height = width * vc->vc_font.width;
61
62 info->fbops->fb_copyarea(info, &area);
63 }
64
65 static void cw_clear(struct vc_data *vc, struct fb_info *info, int sy,
66 int sx, int height, int width)
67 {
68 struct fbcon_ops *ops = info->fbcon_par;
69 struct fb_fillrect region;
70 int bgshift = (vc->vc_hi_font_mask) ? 13 : 12;
71 u32 vxres = GETVXRES(ops->p->scrollmode, info);
72
73 region.color = attr_bgcol_ec(bgshift,vc,info);
74 region.dx = vxres - ((sy + height) * vc->vc_font.height);
75 region.dy = sx * vc->vc_font.width;
76 region.height = width * vc->vc_font.width;
77 region.width = height * vc->vc_font.height;
78 region.rop = ROP_COPY;
79
80 info->fbops->fb_fillrect(info, &region);
81 }
82
83 static inline void cw_putcs_aligned(struct vc_data *vc, struct fb_info *info,
84 const u16 *s, u32 attr, u32 cnt,
85 u32 d_pitch, u32 s_pitch, u32 cellsize,
86 struct fb_image *image, u8 *buf, u8 *dst)
87 {
88 struct fbcon_ops *ops = info->fbcon_par;
89 u16 charmask = vc->vc_hi_font_mask ? 0x1ff : 0xff;
90 u32 idx = (vc->vc_font.height + 7) >> 3;
91 u8 *src;
92
93 while (cnt--) {
94 src = ops->fontbuffer + (scr_readw(s++) & charmask)*cellsize;
95
96 if (attr) {
97 cw_update_attr(buf, src, attr, vc);
98 src = buf;
99 }
100
101 if (likely(idx == 1))
102 __fb_pad_aligned_buffer(dst, d_pitch, src, idx,
103 vc->vc_font.width);
104 else
105 fb_pad_aligned_buffer(dst, d_pitch, src, idx,
106 vc->vc_font.width);
107
108 dst += d_pitch * vc->vc_font.width;
109 }
110
111 info->fbops->fb_imageblit(info, image);
112 }
113
114 static void cw_putcs(struct vc_data *vc, struct fb_info *info,
115 const unsigned short *s, int count, int yy, int xx,
116 int fg, int bg)
117 {
118 struct fb_image image;
119 struct fbcon_ops *ops = info->fbcon_par;
120 u32 width = (vc->vc_font.height + 7)/8;
121 u32 cellsize = width * vc->vc_font.width;
122 u32 maxcnt = info->pixmap.size/cellsize;
123 u32 scan_align = info->pixmap.scan_align - 1;
124 u32 buf_align = info->pixmap.buf_align - 1;
125 u32 cnt, pitch, size;
126 u32 attribute = get_attribute(info, scr_readw(s));
127 u8 *dst, *buf = NULL;
128 u32 vxres = GETVXRES(ops->p->scrollmode, info);
129
130 if (!ops->fontbuffer)
131 return;
132
133 image.fg_color = fg;
134 image.bg_color = bg;
135 image.dx = vxres - ((yy + 1) * vc->vc_font.height);
136 image.dy = xx * vc->vc_font.width;
137 image.width = vc->vc_font.height;
138 image.depth = 1;
139
140 if (attribute) {
141 buf = kmalloc(cellsize, GFP_KERNEL);
142 if (!buf)
143 return;
144 }
145
146 while (count) {
147 if (count > maxcnt)
148 cnt = maxcnt;
149 else
150 cnt = count;
151
152 image.height = vc->vc_font.width * cnt;
153 pitch = ((image.width + 7) >> 3) + scan_align;
154 pitch &= ~scan_align;
155 size = pitch * image.height + buf_align;
156 size &= ~buf_align;
157 dst = fb_get_buffer_offset(info, &info->pixmap, size);
158 image.data = dst;
159 cw_putcs_aligned(vc, info, s, attribute, cnt, pitch,
160 width, cellsize, &image, buf, dst);
161 image.dy += image.height;
162 count -= cnt;
163 s += cnt;
164 }
165
166 /* buf is always NULL except when in monochrome mode, so in this case
167 it's a gain to check buf against NULL even though kfree() handles
168 NULL pointers just fine */
169 if (unlikely(buf))
170 kfree(buf);
171
172 }
173
174 static void cw_clear_margins(struct vc_data *vc, struct fb_info *info,
175 int bottom_only)
176 {
177 unsigned int cw = vc->vc_font.width;
178 unsigned int ch = vc->vc_font.height;
179 unsigned int rw = info->var.yres - (vc->vc_cols*cw);
180 unsigned int bh = info->var.xres - (vc->vc_rows*ch);
181 unsigned int rs = info->var.yres - rw;
182 struct fb_fillrect region;
183 int bgshift = (vc->vc_hi_font_mask) ? 13 : 12;
184
185 region.color = attr_bgcol_ec(bgshift,vc,info);
186 region.rop = ROP_COPY;
187
188 if (rw && !bottom_only) {
189 region.dx = 0;
190 region.dy = info->var.yoffset + rs;
191 region.height = rw;
192 region.width = info->var.xres_virtual;
193 info->fbops->fb_fillrect(info, &region);
194 }
195
196 if (bh) {
197 region.dx = info->var.xoffset;
198 region.dy = info->var.yoffset;
199 region.height = info->var.yres;
200 region.width = bh;
201 info->fbops->fb_fillrect(info, &region);
202 }
203 }
204
205 static void cw_cursor(struct vc_data *vc, struct fb_info *info, int mode,
206 int softback_lines, int fg, int bg)
207 {
208 struct fb_cursor cursor;
209 struct fbcon_ops *ops = info->fbcon_par;
210 unsigned short charmask = vc->vc_hi_font_mask ? 0x1ff : 0xff;
211 int w = (vc->vc_font.height + 7) >> 3, c;
212 int y = real_y(ops->p, vc->vc_y);
213 int attribute, use_sw = (vc->vc_cursor_type & 0x10);
214 int err = 1, dx, dy;
215 char *src;
216 u32 vxres = GETVXRES(ops->p->scrollmode, info);
217
218 if (!ops->fontbuffer)
219 return;
220
221 cursor.set = 0;
222
223 if (softback_lines) {
224 if (y + softback_lines >= vc->vc_rows) {
225 mode = CM_ERASE;
226 ops->cursor_flash = 0;
227 return;
228 } else
229 y += softback_lines;
230 }
231
232 c = scr_readw((u16 *) vc->vc_pos);
233 attribute = get_attribute(info, c);
234 src = ops->fontbuffer + ((c & charmask) * (w * vc->vc_font.width));
235
236 if (ops->cursor_state.image.data != src ||
237 ops->cursor_reset) {
238 ops->cursor_state.image.data = src;
239 cursor.set |= FB_CUR_SETIMAGE;
240 }
241
242 if (attribute) {
243 u8 *dst;
244
245 dst = kmalloc(w * vc->vc_font.width, GFP_ATOMIC);
246 if (!dst)
247 return;
248 kfree(ops->cursor_data);
249 ops->cursor_data = dst;
250 cw_update_attr(dst, src, attribute, vc);
251 src = dst;
252 }
253
254 if (ops->cursor_state.image.fg_color != fg ||
255 ops->cursor_state.image.bg_color != bg ||
256 ops->cursor_reset) {
257 ops->cursor_state.image.fg_color = fg;
258 ops->cursor_state.image.bg_color = bg;
259 cursor.set |= FB_CUR_SETCMAP;
260 }
261
262 if (ops->cursor_state.image.height != vc->vc_font.width ||
263 ops->cursor_state.image.width != vc->vc_font.height ||
264 ops->cursor_reset) {
265 ops->cursor_state.image.height = vc->vc_font.width;
266 ops->cursor_state.image.width = vc->vc_font.height;
267 cursor.set |= FB_CUR_SETSIZE;
268 }
269
270 dx = vxres - ((y * vc->vc_font.height) + vc->vc_font.height);
271 dy = vc->vc_x * vc->vc_font.width;
272
273 if (ops->cursor_state.image.dx != dx ||
274 ops->cursor_state.image.dy != dy ||
275 ops->cursor_reset) {
276 ops->cursor_state.image.dx = dx;
277 ops->cursor_state.image.dy = dy;
278 cursor.set |= FB_CUR_SETPOS;
279 }
280
281 if (ops->cursor_state.hot.x || ops->cursor_state.hot.y ||
282 ops->cursor_reset) {
283 ops->cursor_state.hot.x = cursor.hot.y = 0;
284 cursor.set |= FB_CUR_SETHOT;
285 }
286
287 if (cursor.set & FB_CUR_SETSIZE ||
288 vc->vc_cursor_type != ops->p->cursor_shape ||
289 ops->cursor_state.mask == NULL ||
290 ops->cursor_reset) {
291 char *tmp, *mask = kmalloc(w*vc->vc_font.width, GFP_ATOMIC);
292 int cur_height, size, i = 0;
293 int width = (vc->vc_font.width + 7)/8;
294
295 if (!mask)
296 return;
297
298 tmp = kmalloc(width * vc->vc_font.height, GFP_ATOMIC);
299
300 if (!tmp) {
301 kfree(mask);
302 return;
303 }
304
305 kfree(ops->cursor_state.mask);
306 ops->cursor_state.mask = mask;
307
308 ops->p->cursor_shape = vc->vc_cursor_type;
309 cursor.set |= FB_CUR_SETSHAPE;
310
311 switch (ops->p->cursor_shape & CUR_HWMASK) {
312 case CUR_NONE:
313 cur_height = 0;
314 break;
315 case CUR_UNDERLINE:
316 cur_height = (vc->vc_font.height < 10) ? 1 : 2;
317 break;
318 case CUR_LOWER_THIRD:
319 cur_height = vc->vc_font.height/3;
320 break;
321 case CUR_LOWER_HALF:
322 cur_height = vc->vc_font.height >> 1;
323 break;
324 case CUR_TWO_THIRDS:
325 cur_height = (vc->vc_font.height << 1)/3;
326 break;
327 case CUR_BLOCK:
328 default:
329 cur_height = vc->vc_font.height;
330 break;
331 }
332
333 size = (vc->vc_font.height - cur_height) * width;
334 while (size--)
335 tmp[i++] = 0;
336 size = cur_height * width;
337 while (size--)
338 tmp[i++] = 0xff;
339 memset(mask, 0, w * vc->vc_font.width);
340 rotate_cw(tmp, mask, vc->vc_font.width, vc->vc_font.height);
341 kfree(tmp);
342 }
343
344 switch (mode) {
345 case CM_ERASE:
346 ops->cursor_state.enable = 0;
347 break;
348 case CM_DRAW:
349 case CM_MOVE:
350 default:
351 ops->cursor_state.enable = (use_sw) ? 0 : 1;
352 break;
353 }
354
355 cursor.image.data = src;
356 cursor.image.fg_color = ops->cursor_state.image.fg_color;
357 cursor.image.bg_color = ops->cursor_state.image.bg_color;
358 cursor.image.dx = ops->cursor_state.image.dx;
359 cursor.image.dy = ops->cursor_state.image.dy;
360 cursor.image.height = ops->cursor_state.image.height;
361 cursor.image.width = ops->cursor_state.image.width;
362 cursor.hot.x = ops->cursor_state.hot.x;
363 cursor.hot.y = ops->cursor_state.hot.y;
364 cursor.mask = ops->cursor_state.mask;
365 cursor.enable = ops->cursor_state.enable;
366 cursor.image.depth = 1;
367 cursor.rop = ROP_XOR;
368
369 if (info->fbops->fb_cursor)
370 err = info->fbops->fb_cursor(info, &cursor);
371
372 if (err)
373 soft_cursor(info, &cursor);
374
375 ops->cursor_reset = 0;
376 }
377
378 static int cw_update_start(struct fb_info *info)
379 {
380 struct fbcon_ops *ops = info->fbcon_par;
381 u32 vxres = GETVXRES(ops->p->scrollmode, info);
382 u32 xoffset;
383 int err;
384
385 xoffset = vxres - (info->var.xres + ops->var.yoffset);
386 ops->var.yoffset = ops->var.xoffset;
387 ops->var.xoffset = xoffset;
388 err = fb_pan_display(info, &ops->var);
389 ops->var.xoffset = info->var.xoffset;
390 ops->var.yoffset = info->var.yoffset;
391 ops->var.vmode = info->var.vmode;
392 return err;
393 }
394
395 void fbcon_rotate_cw(struct fbcon_ops *ops)
396 {
397 ops->bmove = cw_bmove;
398 ops->clear = cw_clear;
399 ops->putcs = cw_putcs;
400 ops->clear_margins = cw_clear_margins;
401 ops->cursor = cw_cursor;
402 ops->update_start = cw_update_start;
403 }
404 EXPORT_SYMBOL(fbcon_rotate_cw);
405
406 MODULE_AUTHOR("Antonino Daplas <adaplas@pol.net>");
407 MODULE_DESCRIPTION("Console Rotation (90 degrees) Support");
408 MODULE_LICENSE("GPL");
Support for the Chinese Samsung S3C2440 based development boards