?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
drm: use vmalloc_user instead of vmalloc_32 for DRM_SHM
[linux-2.6/mini2440.git] / drivers / char / drm / drm_bufs.c
blob1f74fb49fa78167d5c856f927444bf685468b40d
1 /**
2 * \file drm_bufs.c
3 * Generic buffer template
4 *
5 * \author Rickard E. (Rik) Faith <faith@valinux.com>
6 * \author Gareth Hughes <gareth@valinux.com>
7 */
8
9 /*
10 * Created: Thu Nov 23 03:10:50 2000 by gareth@valinux.com
11 *
12 * Copyright 1999, 2000 Precision Insight, Inc., Cedar Park, Texas.
13 * Copyright 2000 VA Linux Systems, Inc., Sunnyvale, California.
14 * All Rights Reserved.
15 *
16 * Permission is hereby granted, free of charge, to any person obtaining a
17 * copy of this software and associated documentation files (the "Software"),
18 * to deal in the Software without restriction, including without limitation
19 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
20 * and/or sell copies of the Software, and to permit persons to whom the
21 * Software is furnished to do so, subject to the following conditions:
22 *
23 * The above copyright notice and this permission notice (including the next
24 * paragraph) shall be included in all copies or substantial portions of the
25 * Software.
26 *
27 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
28 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
29 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
30 * VA LINUX SYSTEMS AND/OR ITS SUPPLIERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
31 * OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
32 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
33 * OTHER DEALINGS IN THE SOFTWARE.
34 */
35
36 #include <linux/vmalloc.h>
37 #include "drmP.h"
38
39 unsigned long drm_get_resource_start(drm_device_t *dev, unsigned int resource)
40 {
41 return pci_resource_start(dev->pdev, resource);
42 }
43 EXPORT_SYMBOL(drm_get_resource_start);
44
45 unsigned long drm_get_resource_len(drm_device_t *dev, unsigned int resource)
46 {
47 return pci_resource_len(dev->pdev, resource);
48 }
49
50 EXPORT_SYMBOL(drm_get_resource_len);
51
52 static drm_map_list_t *drm_find_matching_map(drm_device_t *dev,
53 drm_local_map_t *map)
54 {
55 struct list_head *list;
56
57 list_for_each(list, &dev->maplist->head) {
58 drm_map_list_t *entry = list_entry(list, drm_map_list_t, head);
59 if (entry->map && map->type == entry->map->type &&
60 entry->map->offset == map->offset) {
61 return entry;
62 }
63 }
64
65 return NULL;
66 }
67
68 static int drm_map_handle(drm_device_t *dev, drm_hash_item_t *hash,
69 unsigned long user_token, int hashed_handle)
70 {
71 int use_hashed_handle;
72 #if (BITS_PER_LONG == 64)
73 use_hashed_handle = ((user_token & 0xFFFFFFFF00000000UL) || hashed_handle);
74 #elif (BITS_PER_LONG == 32)
75 use_hashed_handle = hashed_handle;
76 #else
77 #error Unsupported long size. Neither 64 nor 32 bits.
78 #endif
79
80 if (!use_hashed_handle) {
81 int ret;
82 hash->key = user_token;
83 ret = drm_ht_insert_item(&dev->map_hash, hash);
84 if (ret != -EINVAL)
85 return ret;
86 }
87 return drm_ht_just_insert_please(&dev->map_hash, hash,
88 user_token, 32 - PAGE_SHIFT - 3,
89 PAGE_SHIFT, DRM_MAP_HASH_OFFSET);
90 }
91
92 /**
93 * Ioctl to specify a range of memory that is available for mapping by a non-root process.
94 *
95 * \param inode device inode.
96 * \param filp file pointer.
97 * \param cmd command.
98 * \param arg pointer to a drm_map structure.
99 * \return zero on success or a negative value on error.
100 *
101 * Adjusts the memory offset to its absolute value according to the mapping
102 * type. Adds the map to the map list drm_device::maplist. Adds MTRR's where
103 * applicable and if supported by the kernel.
104 */
105 static int drm_addmap_core(drm_device_t * dev, unsigned int offset,
106 unsigned int size, drm_map_type_t type,
107 drm_map_flags_t flags, drm_map_list_t ** maplist)
108 {
109 drm_map_t *map;
110 drm_map_list_t *list;
111 drm_dma_handle_t *dmah;
112 unsigned long user_token;
113 int ret;
114
115 map = drm_alloc(sizeof(*map), DRM_MEM_MAPS);
116 if (!map)
117 return -ENOMEM;
118
119 map->offset = offset;
120 map->size = size;
121 map->flags = flags;
122 map->type = type;
123
124 /* Only allow shared memory to be removable since we only keep enough
125 * book keeping information about shared memory to allow for removal
126 * when processes fork.
127 */
128 if ((map->flags & _DRM_REMOVABLE) && map->type != _DRM_SHM) {
129 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
130 return -EINVAL;
131 }
132 DRM_DEBUG("offset = 0x%08lx, size = 0x%08lx, type = %d\n",
133 map->offset, map->size, map->type);
134 if ((map->offset & (~PAGE_MASK)) || (map->size & (~PAGE_MASK))) {
135 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
136 return -EINVAL;
137 }
138 map->mtrr = -1;
139 map->handle = NULL;
140
141 switch (map->type) {
142 case _DRM_REGISTERS:
143 case _DRM_FRAME_BUFFER:
144 #if !defined(__sparc__) && !defined(__alpha__) && !defined(__ia64__) && !defined(__powerpc64__) && !defined(__x86_64__)
145 if (map->offset + (map->size-1) < map->offset ||
146 map->offset < virt_to_phys(high_memory)) {
147 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
148 return -EINVAL;
149 }
150 #endif
151 #ifdef __alpha__
152 map->offset += dev->hose->mem_space->start;
153 #endif
154 /* Some drivers preinitialize some maps, without the X Server
155 * needing to be aware of it. Therefore, we just return success
156 * when the server tries to create a duplicate map.
157 */
158 list = drm_find_matching_map(dev, map);
159 if (list != NULL) {
160 if (list->map->size != map->size) {
161 DRM_DEBUG("Matching maps of type %d with "
162 "mismatched sizes, (%ld vs %ld)\n",
163 map->type, map->size,
164 list->map->size);
165 list->map->size = map->size;
166 }
167
168 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
169 *maplist = list;
170 return 0;
171 }
172
173 if (drm_core_has_MTRR(dev)) {
174 if (map->type == _DRM_FRAME_BUFFER ||
175 (map->flags & _DRM_WRITE_COMBINING)) {
176 map->mtrr = mtrr_add(map->offset, map->size,
177 MTRR_TYPE_WRCOMB, 1);
178 }
179 }
180 if (map->type == _DRM_REGISTERS)
181 map->handle = drm_ioremap(map->offset, map->size, dev);
182 break;
183
184 case _DRM_SHM:
185 map->handle = vmalloc_user(map->size);
186 DRM_DEBUG("%lu %d %p\n",
187 map->size, drm_order(map->size), map->handle);
188 if (!map->handle) {
189 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
190 return -ENOMEM;
191 }
192 map->offset = (unsigned long)map->handle;
193 if (map->flags & _DRM_CONTAINS_LOCK) {
194 /* Prevent a 2nd X Server from creating a 2nd lock */
195 if (dev->lock.hw_lock != NULL) {
196 vfree(map->handle);
197 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
198 return -EBUSY;
199 }
200 dev->sigdata.lock = dev->lock.hw_lock = map->handle; /* Pointer to lock */
201 }
202 break;
203 case _DRM_AGP:
204 if (drm_core_has_AGP(dev)) {
205 #ifdef __alpha__
206 map->offset += dev->hose->mem_space->start;
207 #endif
208 map->offset += dev->agp->base;
209 map->mtrr = dev->agp->agp_mtrr; /* for getmap */
210 }
211 break;
212 case _DRM_SCATTER_GATHER:
213 if (!dev->sg) {
214 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
215 return -EINVAL;
216 }
217 map->offset += (unsigned long)dev->sg->virtual;
218 break;
219 case _DRM_CONSISTENT:
220 /* dma_addr_t is 64bit on i386 with CONFIG_HIGHMEM64G,
221 * As we're limiting the address to 2^32-1 (or less),
222 * casting it down to 32 bits is no problem, but we
223 * need to point to a 64bit variable first. */
224 dmah = drm_pci_alloc(dev, map->size, map->size, 0xffffffffUL);
225 if (!dmah) {
226 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
227 return -ENOMEM;
228 }
229 map->handle = dmah->vaddr;
230 map->offset = (unsigned long)dmah->busaddr;
231 kfree(dmah);
232 break;
233 default:
234 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
235 return -EINVAL;
236 }
237
238 list = drm_alloc(sizeof(*list), DRM_MEM_MAPS);
239 if (!list) {
240 if (map->type == _DRM_REGISTERS)
241 drm_ioremapfree(map->handle, map->size, dev);
242 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
243 return -EINVAL;
244 }
245 memset(list, 0, sizeof(*list));
246 list->map = map;
247
248 mutex_lock(&dev->struct_mutex);
249 list_add(&list->head, &dev->maplist->head);
250
251 /* Assign a 32-bit handle */
252 /* We do it here so that dev->struct_mutex protects the increment */
253 user_token = (map->type == _DRM_SHM) ? (unsigned long)map->handle :
254 map->offset;
255 ret = drm_map_handle(dev, &list->hash, user_token, 0);
256 if (ret) {
257 if (map->type == _DRM_REGISTERS)
258 drm_ioremapfree(map->handle, map->size, dev);
259 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
260 drm_free(list, sizeof(*list), DRM_MEM_MAPS);
261 mutex_unlock(&dev->struct_mutex);
262 return ret;
263 }
264
265 list->user_token = list->hash.key;
266 mutex_unlock(&dev->struct_mutex);
267
268 *maplist = list;
269 return 0;
270 }
271
272 int drm_addmap(drm_device_t * dev, unsigned int offset,
273 unsigned int size, drm_map_type_t type,
274 drm_map_flags_t flags, drm_local_map_t ** map_ptr)
275 {
276 drm_map_list_t *list;
277 int rc;
278
279 rc = drm_addmap_core(dev, offset, size, type, flags, &list);
280 if (!rc)
281 *map_ptr = list->map;
282 return rc;
283 }
284
285 EXPORT_SYMBOL(drm_addmap);
286
287 int drm_addmap_ioctl(struct inode *inode, struct file *filp,
288 unsigned int cmd, unsigned long arg)
289 {
290 drm_file_t *priv = filp->private_data;
291 drm_device_t *dev = priv->head->dev;
292 drm_map_t map;
293 drm_map_list_t *maplist;
294 drm_map_t __user *argp = (void __user *)arg;
295 int err;
296
297 if (!(filp->f_mode & 3))
298 return -EACCES; /* Require read/write */
299
300 if (copy_from_user(&map, argp, sizeof(map))) {
301 return -EFAULT;
302 }
303
304 if (!(capable(CAP_SYS_ADMIN) || map.type == _DRM_AGP))
305 return -EPERM;
306
307 err = drm_addmap_core(dev, map.offset, map.size, map.type, map.flags,
308 &maplist);
309
310 if (err)
311 return err;
312
313 if (copy_to_user(argp, maplist->map, sizeof(drm_map_t)))
314 return -EFAULT;
315
316 /* avoid a warning on 64-bit, this casting isn't very nice, but the API is set so too late */
317 if (put_user((void *)(unsigned long)maplist->user_token, &argp->handle))
318 return -EFAULT;
319 return 0;
320 }
321
322 /**
323 * Remove a map private from list and deallocate resources if the mapping
324 * isn't in use.
325 *
326 * \param inode device inode.
327 * \param filp file pointer.
328 * \param cmd command.
329 * \param arg pointer to a drm_map_t structure.
330 * \return zero on success or a negative value on error.
331 *
332 * Searches the map on drm_device::maplist, removes it from the list, see if
333 * its being used, and free any associate resource (such as MTRR's) if it's not
334 * being on use.
335 *
336 * \sa drm_addmap
337 */
338 int drm_rmmap_locked(drm_device_t *dev, drm_local_map_t *map)
339 {
340 struct list_head *list;
341 drm_map_list_t *r_list = NULL;
342 drm_dma_handle_t dmah;
343
344 /* Find the list entry for the map and remove it */
345 list_for_each(list, &dev->maplist->head) {
346 r_list = list_entry(list, drm_map_list_t, head);
347
348 if (r_list->map == map) {
349 list_del(list);
350 drm_ht_remove_key(&dev->map_hash, r_list->user_token);
351 drm_free(list, sizeof(*list), DRM_MEM_MAPS);
352 break;
353 }
354 }
355
356 /* List has wrapped around to the head pointer, or it's empty and we
357 * didn't find anything.
358 */
359 if (list == (&dev->maplist->head)) {
360 return -EINVAL;
361 }
362
363 switch (map->type) {
364 case _DRM_REGISTERS:
365 drm_ioremapfree(map->handle, map->size, dev);
366 /* FALLTHROUGH */
367 case _DRM_FRAME_BUFFER:
368 if (drm_core_has_MTRR(dev) && map->mtrr >= 0) {
369 int retcode;
370 retcode = mtrr_del(map->mtrr, map->offset, map->size);
371 DRM_DEBUG("mtrr_del=%d\n", retcode);
372 }
373 break;
374 case _DRM_SHM:
375 vfree(map->handle);
376 break;
377 case _DRM_AGP:
378 case _DRM_SCATTER_GATHER:
379 break;
380 case _DRM_CONSISTENT:
381 dmah.vaddr = map->handle;
382 dmah.busaddr = map->offset;
383 dmah.size = map->size;
384 __drm_pci_free(dev, &dmah);
385 break;
386 }
387 drm_free(map, sizeof(*map), DRM_MEM_MAPS);
388
389 return 0;
390 }
391
392 int drm_rmmap(drm_device_t *dev, drm_local_map_t *map)
393 {
394 int ret;
395
396 mutex_lock(&dev->struct_mutex);
397 ret = drm_rmmap_locked(dev, map);
398 mutex_unlock(&dev->struct_mutex);
399
400 return ret;
401 }
402
403 /* The rmmap ioctl appears to be unnecessary. All mappings are torn down on
404 * the last close of the device, and this is necessary for cleanup when things
405 * exit uncleanly. Therefore, having userland manually remove mappings seems
406 * like a pointless exercise since they're going away anyway.
407 *
408 * One use case might be after addmap is allowed for normal users for SHM and
409 * gets used by drivers that the server doesn't need to care about. This seems
410 * unlikely.
411 */
412 int drm_rmmap_ioctl(struct inode *inode, struct file *filp,
413 unsigned int cmd, unsigned long arg)
414 {
415 drm_file_t *priv = filp->private_data;
416 drm_device_t *dev = priv->head->dev;
417 drm_map_t request;
418 drm_local_map_t *map = NULL;
419 struct list_head *list;
420 int ret;
421
422 if (copy_from_user(&request, (drm_map_t __user *) arg, sizeof(request))) {
423 return -EFAULT;
424 }
425
426 mutex_lock(&dev->struct_mutex);
427 list_for_each(list, &dev->maplist->head) {
428 drm_map_list_t *r_list = list_entry(list, drm_map_list_t, head);
429
430 if (r_list->map &&
431 r_list->user_token == (unsigned long)request.handle &&
432 r_list->map->flags & _DRM_REMOVABLE) {
433 map = r_list->map;
434 break;
435 }
436 }
437
438 /* List has wrapped around to the head pointer, or its empty we didn't
439 * find anything.
440 */
441 if (list == (&dev->maplist->head)) {
442 mutex_unlock(&dev->struct_mutex);
443 return -EINVAL;
444 }
445
446 if (!map) {
447 mutex_unlock(&dev->struct_mutex);
448 return -EINVAL;
449 }
450
451 /* Register and framebuffer maps are permanent */
452 if ((map->type == _DRM_REGISTERS) || (map->type == _DRM_FRAME_BUFFER)) {
453 mutex_unlock(&dev->struct_mutex);
454 return 0;
455 }
456
457 ret = drm_rmmap_locked(dev, map);
458
459 mutex_unlock(&dev->struct_mutex);
460
461 return ret;
462 }
463
464 /**
465 * Cleanup after an error on one of the addbufs() functions.
466 *
467 * \param dev DRM device.
468 * \param entry buffer entry where the error occurred.
469 *
470 * Frees any pages and buffers associated with the given entry.
471 */
472 static void drm_cleanup_buf_error(drm_device_t * dev, drm_buf_entry_t * entry)
473 {
474 int i;
475
476 if (entry->seg_count) {
477 for (i = 0; i < entry->seg_count; i++) {
478 if (entry->seglist[i]) {
479 drm_pci_free(dev, entry->seglist[i]);
480 }
481 }
482 drm_free(entry->seglist,
483 entry->seg_count *
484 sizeof(*entry->seglist), DRM_MEM_SEGS);
485
486 entry->seg_count = 0;
487 }
488
489 if (entry->buf_count) {
490 for (i = 0; i < entry->buf_count; i++) {
491 if (entry->buflist[i].dev_private) {
492 drm_free(entry->buflist[i].dev_private,
493 entry->buflist[i].dev_priv_size,
494 DRM_MEM_BUFS);
495 }
496 }
497 drm_free(entry->buflist,
498 entry->buf_count *
499 sizeof(*entry->buflist), DRM_MEM_BUFS);
500
501 entry->buf_count = 0;
502 }
503 }
504
505 #if __OS_HAS_AGP
506 /**
507 * Add AGP buffers for DMA transfers.
508 *
509 * \param dev drm_device_t to which the buffers are to be added.
510 * \param request pointer to a drm_buf_desc_t describing the request.
511 * \return zero on success or a negative number on failure.
512 *
513 * After some sanity checks creates a drm_buf structure for each buffer and
514 * reallocates the buffer list of the same size order to accommodate the new
515 * buffers.
516 */
517 int drm_addbufs_agp(drm_device_t * dev, drm_buf_desc_t * request)
518 {
519 drm_device_dma_t *dma = dev->dma;
520 drm_buf_entry_t *entry;
521 drm_buf_t *buf;
522 unsigned long offset;
523 unsigned long agp_offset;
524 int count;
525 int order;
526 int size;
527 int alignment;
528 int page_order;
529 int total;
530 int byte_count;
531 int i;
532 drm_buf_t **temp_buflist;
533
534 if (!dma)
535 return -EINVAL;
536
537 count = request->count;
538 order = drm_order(request->size);
539 size = 1 << order;
540
541 alignment = (request->flags & _DRM_PAGE_ALIGN)
542 ? PAGE_ALIGN(size) : size;
543 page_order = order - PAGE_SHIFT > 0 ? order - PAGE_SHIFT : 0;
544 total = PAGE_SIZE << page_order;
545
546 byte_count = 0;
547 agp_offset = dev->agp->base + request->agp_start;
548
549 DRM_DEBUG("count: %d\n", count);
550 DRM_DEBUG("order: %d\n", order);
551 DRM_DEBUG("size: %d\n", size);
552 DRM_DEBUG("agp_offset: %lx\n", agp_offset);
553 DRM_DEBUG("alignment: %d\n", alignment);
554 DRM_DEBUG("page_order: %d\n", page_order);
555 DRM_DEBUG("total: %d\n", total);
556
557 if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER)
558 return -EINVAL;
559 if (dev->queue_count)
560 return -EBUSY; /* Not while in use */
561
562 spin_lock(&dev->count_lock);
563 if (dev->buf_use) {
564 spin_unlock(&dev->count_lock);
565 return -EBUSY;
566 }
567 atomic_inc(&dev->buf_alloc);
568 spin_unlock(&dev->count_lock);
569
570 mutex_lock(&dev->struct_mutex);
571 entry = &dma->bufs[order];
572 if (entry->buf_count) {
573 mutex_unlock(&dev->struct_mutex);
574 atomic_dec(&dev->buf_alloc);
575 return -ENOMEM; /* May only call once for each order */
576 }
577
578 if (count < 0 || count > 4096) {
579 mutex_unlock(&dev->struct_mutex);
580 atomic_dec(&dev->buf_alloc);
581 return -EINVAL;
582 }
583
584 entry->buflist = drm_alloc(count * sizeof(*entry->buflist),
585 DRM_MEM_BUFS);
586 if (!entry->buflist) {
587 mutex_unlock(&dev->struct_mutex);
588 atomic_dec(&dev->buf_alloc);
589 return -ENOMEM;
590 }
591 memset(entry->buflist, 0, count * sizeof(*entry->buflist));
592
593 entry->buf_size = size;
594 entry->page_order = page_order;
595
596 offset = 0;
597
598 while (entry->buf_count < count) {
599 buf = &entry->buflist[entry->buf_count];
600 buf->idx = dma->buf_count + entry->buf_count;
601 buf->total = alignment;
602 buf->order = order;
603 buf->used = 0;
604
605 buf->offset = (dma->byte_count + offset);
606 buf->bus_address = agp_offset + offset;
607 buf->address = (void *)(agp_offset + offset);
608 buf->next = NULL;
609 buf->waiting = 0;
610 buf->pending = 0;
611 init_waitqueue_head(&buf->dma_wait);
612 buf->filp = NULL;
613
614 buf->dev_priv_size = dev->driver->dev_priv_size;
615 buf->dev_private = drm_alloc(buf->dev_priv_size, DRM_MEM_BUFS);
616 if (!buf->dev_private) {
617 /* Set count correctly so we free the proper amount. */
618 entry->buf_count = count;
619 drm_cleanup_buf_error(dev, entry);
620 mutex_unlock(&dev->struct_mutex);
621 atomic_dec(&dev->buf_alloc);
622 return -ENOMEM;
623 }
624 memset(buf->dev_private, 0, buf->dev_priv_size);
625
626 DRM_DEBUG("buffer %d @ %p\n", entry->buf_count, buf->address);
627
628 offset += alignment;
629 entry->buf_count++;
630 byte_count += PAGE_SIZE << page_order;
631 }
632
633 DRM_DEBUG("byte_count: %d\n", byte_count);
634
635 temp_buflist = drm_realloc(dma->buflist,
636 dma->buf_count * sizeof(*dma->buflist),
637 (dma->buf_count + entry->buf_count)
638 * sizeof(*dma->buflist), DRM_MEM_BUFS);
639 if (!temp_buflist) {
640 /* Free the entry because it isn't valid */
641 drm_cleanup_buf_error(dev, entry);
642 mutex_unlock(&dev->struct_mutex);
643 atomic_dec(&dev->buf_alloc);
644 return -ENOMEM;
645 }
646 dma->buflist = temp_buflist;
647
648 for (i = 0; i < entry->buf_count; i++) {
649 dma->buflist[i + dma->buf_count] = &entry->buflist[i];
650 }
651
652 dma->buf_count += entry->buf_count;
653 dma->seg_count += entry->seg_count;
654 dma->page_count += byte_count >> PAGE_SHIFT;
655 dma->byte_count += byte_count;
656
657 DRM_DEBUG("dma->buf_count : %d\n", dma->buf_count);
658 DRM_DEBUG("entry->buf_count : %d\n", entry->buf_count);
659
660 mutex_unlock(&dev->struct_mutex);
661
662 request->count = entry->buf_count;
663 request->size = size;
664
665 dma->flags = _DRM_DMA_USE_AGP;
666
667 atomic_dec(&dev->buf_alloc);
668 return 0;
669 }
670 EXPORT_SYMBOL(drm_addbufs_agp);
671 #endif /* __OS_HAS_AGP */
672
673 int drm_addbufs_pci(drm_device_t * dev, drm_buf_desc_t * request)
674 {
675 drm_device_dma_t *dma = dev->dma;
676 int count;
677 int order;
678 int size;
679 int total;
680 int page_order;
681 drm_buf_entry_t *entry;
682 drm_dma_handle_t *dmah;
683 drm_buf_t *buf;
684 int alignment;
685 unsigned long offset;
686 int i;
687 int byte_count;
688 int page_count;
689 unsigned long *temp_pagelist;
690 drm_buf_t **temp_buflist;
691
692 if (!drm_core_check_feature(dev, DRIVER_PCI_DMA))
693 return -EINVAL;
694
695 if (!dma)
696 return -EINVAL;
697
698 if (!capable(CAP_SYS_ADMIN))
699 return -EPERM;
700
701 count = request->count;
702 order = drm_order(request->size);
703 size = 1 << order;
704
705 DRM_DEBUG("count=%d, size=%d (%d), order=%d, queue_count=%d\n",
706 request->count, request->size, size, order, dev->queue_count);
707
708 if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER)
709 return -EINVAL;
710 if (dev->queue_count)
711 return -EBUSY; /* Not while in use */
712
713 alignment = (request->flags & _DRM_PAGE_ALIGN)
714 ? PAGE_ALIGN(size) : size;
715 page_order = order - PAGE_SHIFT > 0 ? order - PAGE_SHIFT : 0;
716 total = PAGE_SIZE << page_order;
717
718 spin_lock(&dev->count_lock);
719 if (dev->buf_use) {
720 spin_unlock(&dev->count_lock);
721 return -EBUSY;
722 }
723 atomic_inc(&dev->buf_alloc);
724 spin_unlock(&dev->count_lock);
725
726 mutex_lock(&dev->struct_mutex);
727 entry = &dma->bufs[order];
728 if (entry->buf_count) {
729 mutex_unlock(&dev->struct_mutex);
730 atomic_dec(&dev->buf_alloc);
731 return -ENOMEM; /* May only call once for each order */
732 }
733
734 if (count < 0 || count > 4096) {
735 mutex_unlock(&dev->struct_mutex);
736 atomic_dec(&dev->buf_alloc);
737 return -EINVAL;
738 }
739
740 entry->buflist = drm_alloc(count * sizeof(*entry->buflist),
741 DRM_MEM_BUFS);
742 if (!entry->buflist) {
743 mutex_unlock(&dev->struct_mutex);
744 atomic_dec(&dev->buf_alloc);
745 return -ENOMEM;
746 }
747 memset(entry->buflist, 0, count * sizeof(*entry->buflist));
748
749 entry->seglist = drm_alloc(count * sizeof(*entry->seglist),
750 DRM_MEM_SEGS);
751 if (!entry->seglist) {
752 drm_free(entry->buflist,
753 count * sizeof(*entry->buflist), DRM_MEM_BUFS);
754 mutex_unlock(&dev->struct_mutex);
755 atomic_dec(&dev->buf_alloc);
756 return -ENOMEM;
757 }
758 memset(entry->seglist, 0, count * sizeof(*entry->seglist));
759
760 /* Keep the original pagelist until we know all the allocations
761 * have succeeded
762 */
763 temp_pagelist = drm_alloc((dma->page_count + (count << page_order))
764 * sizeof(*dma->pagelist), DRM_MEM_PAGES);
765 if (!temp_pagelist) {
766 drm_free(entry->buflist,
767 count * sizeof(*entry->buflist), DRM_MEM_BUFS);
768 drm_free(entry->seglist,
769 count * sizeof(*entry->seglist), DRM_MEM_SEGS);
770 mutex_unlock(&dev->struct_mutex);
771 atomic_dec(&dev->buf_alloc);
772 return -ENOMEM;
773 }
774 memcpy(temp_pagelist,
775 dma->pagelist, dma->page_count * sizeof(*dma->pagelist));
776 DRM_DEBUG("pagelist: %d entries\n",
777 dma->page_count + (count << page_order));
778
779 entry->buf_size = size;
780 entry->page_order = page_order;
781 byte_count = 0;
782 page_count = 0;
783
784 while (entry->buf_count < count) {
785
786 dmah = drm_pci_alloc(dev, PAGE_SIZE << page_order, 0x1000, 0xfffffffful);
787
788 if (!dmah) {
789 /* Set count correctly so we free the proper amount. */
790 entry->buf_count = count;
791 entry->seg_count = count;
792 drm_cleanup_buf_error(dev, entry);
793 drm_free(temp_pagelist,
794 (dma->page_count + (count << page_order))
795 * sizeof(*dma->pagelist), DRM_MEM_PAGES);
796 mutex_unlock(&dev->struct_mutex);
797 atomic_dec(&dev->buf_alloc);
798 return -ENOMEM;
799 }
800 entry->seglist[entry->seg_count++] = dmah;
801 for (i = 0; i < (1 << page_order); i++) {
802 DRM_DEBUG("page %d @ 0x%08lx\n",
803 dma->page_count + page_count,
804 (unsigned long)dmah->vaddr + PAGE_SIZE * i);
805 temp_pagelist[dma->page_count + page_count++]
806 = (unsigned long)dmah->vaddr + PAGE_SIZE * i;
807 }
808 for (offset = 0;
809 offset + size <= total && entry->buf_count < count;
810 offset += alignment, ++entry->buf_count) {
811 buf = &entry->buflist[entry->buf_count];
812 buf->idx = dma->buf_count + entry->buf_count;
813 buf->total = alignment;
814 buf->order = order;
815 buf->used = 0;
816 buf->offset = (dma->byte_count + byte_count + offset);
817 buf->address = (void *)(dmah->vaddr + offset);
818 buf->bus_address = dmah->busaddr + offset;
819 buf->next = NULL;
820 buf->waiting = 0;
821 buf->pending = 0;
822 init_waitqueue_head(&buf->dma_wait);
823 buf->filp = NULL;
824
825 buf->dev_priv_size = dev->driver->dev_priv_size;
826 buf->dev_private = drm_alloc(buf->dev_priv_size,
827 DRM_MEM_BUFS);
828 if (!buf->dev_private) {
829 /* Set count correctly so we free the proper amount. */
830 entry->buf_count = count;
831 entry->seg_count = count;
832 drm_cleanup_buf_error(dev, entry);
833 drm_free(temp_pagelist,
834 (dma->page_count +
835 (count << page_order))
836 * sizeof(*dma->pagelist),
837 DRM_MEM_PAGES);
838 mutex_unlock(&dev->struct_mutex);
839 atomic_dec(&dev->buf_alloc);
840 return -ENOMEM;
841 }
842 memset(buf->dev_private, 0, buf->dev_priv_size);
843
844 DRM_DEBUG("buffer %d @ %p\n",
845 entry->buf_count, buf->address);
846 }
847 byte_count += PAGE_SIZE << page_order;
848 }
849
850 temp_buflist = drm_realloc(dma->buflist,
851 dma->buf_count * sizeof(*dma->buflist),
852 (dma->buf_count + entry->buf_count)
853 * sizeof(*dma->buflist), DRM_MEM_BUFS);
854 if (!temp_buflist) {
855 /* Free the entry because it isn't valid */
856 drm_cleanup_buf_error(dev, entry);
857 drm_free(temp_pagelist,
858 (dma->page_count + (count << page_order))
859 * sizeof(*dma->pagelist), DRM_MEM_PAGES);
860 mutex_unlock(&dev->struct_mutex);
861 atomic_dec(&dev->buf_alloc);
862 return -ENOMEM;
863 }
864 dma->buflist = temp_buflist;
865
866 for (i = 0; i < entry->buf_count; i++) {
867 dma->buflist[i + dma->buf_count] = &entry->buflist[i];
868 }
869
870 /* No allocations failed, so now we can replace the orginal pagelist
871 * with the new one.
872 */
873 if (dma->page_count) {
874 drm_free(dma->pagelist,
875 dma->page_count * sizeof(*dma->pagelist),
876 DRM_MEM_PAGES);
877 }
878 dma->pagelist = temp_pagelist;
879
880 dma->buf_count += entry->buf_count;
881 dma->seg_count += entry->seg_count;
882 dma->page_count += entry->seg_count << page_order;
883 dma->byte_count += PAGE_SIZE * (entry->seg_count << page_order);
884
885 mutex_unlock(&dev->struct_mutex);
886
887 request->count = entry->buf_count;
888 request->size = size;
889
890 if (request->flags & _DRM_PCI_BUFFER_RO)
891 dma->flags = _DRM_DMA_USE_PCI_RO;
892
893 atomic_dec(&dev->buf_alloc);
894 return 0;
895
896 }
897 EXPORT_SYMBOL(drm_addbufs_pci);
898
899 static int drm_addbufs_sg(drm_device_t * dev, drm_buf_desc_t * request)
900 {
901 drm_device_dma_t *dma = dev->dma;
902 drm_buf_entry_t *entry;
903 drm_buf_t *buf;
904 unsigned long offset;
905 unsigned long agp_offset;
906 int count;
907 int order;
908 int size;
909 int alignment;
910 int page_order;
911 int total;
912 int byte_count;
913 int i;
914 drm_buf_t **temp_buflist;
915
916 if (!drm_core_check_feature(dev, DRIVER_SG))
917 return -EINVAL;
918
919 if (!dma)
920 return -EINVAL;
921
922 if (!capable(CAP_SYS_ADMIN))
923 return -EPERM;
924
925 count = request->count;
926 order = drm_order(request->size);
927 size = 1 << order;
928
929 alignment = (request->flags & _DRM_PAGE_ALIGN)
930 ? PAGE_ALIGN(size) : size;
931 page_order = order - PAGE_SHIFT > 0 ? order - PAGE_SHIFT : 0;
932 total = PAGE_SIZE << page_order;
933
934 byte_count = 0;
935 agp_offset = request->agp_start;
936
937 DRM_DEBUG("count: %d\n", count);
938 DRM_DEBUG("order: %d\n", order);
939 DRM_DEBUG("size: %d\n", size);
940 DRM_DEBUG("agp_offset: %lu\n", agp_offset);
941 DRM_DEBUG("alignment: %d\n", alignment);
942 DRM_DEBUG("page_order: %d\n", page_order);
943 DRM_DEBUG("total: %d\n", total);
944
945 if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER)
946 return -EINVAL;
947 if (dev->queue_count)
948 return -EBUSY; /* Not while in use */
949
950 spin_lock(&dev->count_lock);
951 if (dev->buf_use) {
952 spin_unlock(&dev->count_lock);
953 return -EBUSY;
954 }
955 atomic_inc(&dev->buf_alloc);
956 spin_unlock(&dev->count_lock);
957
958 mutex_lock(&dev->struct_mutex);
959 entry = &dma->bufs[order];
960 if (entry->buf_count) {
961 mutex_unlock(&dev->struct_mutex);
962 atomic_dec(&dev->buf_alloc);
963 return -ENOMEM; /* May only call once for each order */
964 }
965
966 if (count < 0 || count > 4096) {
967 mutex_unlock(&dev->struct_mutex);
968 atomic_dec(&dev->buf_alloc);
969 return -EINVAL;
970 }
971
972 entry->buflist = drm_alloc(count * sizeof(*entry->buflist),
973 DRM_MEM_BUFS);
974 if (!entry->buflist) {
975 mutex_unlock(&dev->struct_mutex);
976 atomic_dec(&dev->buf_alloc);
977 return -ENOMEM;
978 }
979 memset(entry->buflist, 0, count * sizeof(*entry->buflist));
980
981 entry->buf_size = size;
982 entry->page_order = page_order;
983
984 offset = 0;
985
986 while (entry->buf_count < count) {
987 buf = &entry->buflist[entry->buf_count];
988 buf->idx = dma->buf_count + entry->buf_count;
989 buf->total = alignment;
990 buf->order = order;
991 buf->used = 0;
992
993 buf->offset = (dma->byte_count + offset);
994 buf->bus_address = agp_offset + offset;
995 buf->address = (void *)(agp_offset + offset
996 + (unsigned long)dev->sg->virtual);
997 buf->next = NULL;
998 buf->waiting = 0;
999 buf->pending = 0;
1000 init_waitqueue_head(&buf->dma_wait);
1001 buf->filp = NULL;
1002
1003 buf->dev_priv_size = dev->driver->dev_priv_size;
1004 buf->dev_private = drm_alloc(buf->dev_priv_size, DRM_MEM_BUFS);
1005 if (!buf->dev_private) {
1006 /* Set count correctly so we free the proper amount. */
1007 entry->buf_count = count;
1008 drm_cleanup_buf_error(dev, entry);
1009 mutex_unlock(&dev->struct_mutex);
1010 atomic_dec(&dev->buf_alloc);
1011 return -ENOMEM;
1012 }
1013
1014 memset(buf->dev_private, 0, buf->dev_priv_size);
1015
1016 DRM_DEBUG("buffer %d @ %p\n", entry->buf_count, buf->address);
1017
1018 offset += alignment;
1019 entry->buf_count++;
1020 byte_count += PAGE_SIZE << page_order;
1021 }
1022
1023 DRM_DEBUG("byte_count: %d\n", byte_count);
1024
1025 temp_buflist = drm_realloc(dma->buflist,
1026 dma->buf_count * sizeof(*dma->buflist),
1027 (dma->buf_count + entry->buf_count)
1028 * sizeof(*dma->buflist), DRM_MEM_BUFS);
1029 if (!temp_buflist) {
1030 /* Free the entry because it isn't valid */
1031 drm_cleanup_buf_error(dev, entry);
1032 mutex_unlock(&dev->struct_mutex);
1033 atomic_dec(&dev->buf_alloc);
1034 return -ENOMEM;
1035 }
1036 dma->buflist = temp_buflist;
1037
1038 for (i = 0; i < entry->buf_count; i++) {
1039 dma->buflist[i + dma->buf_count] = &entry->buflist[i];
1040 }
1041
1042 dma->buf_count += entry->buf_count;
1043 dma->seg_count += entry->seg_count;
1044 dma->page_count += byte_count >> PAGE_SHIFT;
1045 dma->byte_count += byte_count;
1046
1047 DRM_DEBUG("dma->buf_count : %d\n", dma->buf_count);
1048 DRM_DEBUG("entry->buf_count : %d\n", entry->buf_count);
1049
1050 mutex_unlock(&dev->struct_mutex);
1051
1052 request->count = entry->buf_count;
1053 request->size = size;
1054
1055 dma->flags = _DRM_DMA_USE_SG;
1056
1057 atomic_dec(&dev->buf_alloc);
1058 return 0;
1059 }
1060
1061 static int drm_addbufs_fb(drm_device_t * dev, drm_buf_desc_t * request)
1062 {
1063 drm_device_dma_t *dma = dev->dma;
1064 drm_buf_entry_t *entry;
1065 drm_buf_t *buf;
1066 unsigned long offset;
1067 unsigned long agp_offset;
1068 int count;
1069 int order;
1070 int size;
1071 int alignment;
1072 int page_order;
1073 int total;
1074 int byte_count;
1075 int i;
1076 drm_buf_t **temp_buflist;
1077
1078 if (!drm_core_check_feature(dev, DRIVER_FB_DMA))
1079 return -EINVAL;
1080
1081 if (!dma)
1082 return -EINVAL;
1083
1084 if (!capable(CAP_SYS_ADMIN))
1085 return -EPERM;
1086
1087 count = request->count;
1088 order = drm_order(request->size);
1089 size = 1 << order;
1090
1091 alignment = (request->flags & _DRM_PAGE_ALIGN)
1092 ? PAGE_ALIGN(size) : size;
1093 page_order = order - PAGE_SHIFT > 0 ? order - PAGE_SHIFT : 0;
1094 total = PAGE_SIZE << page_order;
1095
1096 byte_count = 0;
1097 agp_offset = request->agp_start;
1098
1099 DRM_DEBUG("count: %d\n", count);
1100 DRM_DEBUG("order: %d\n", order);
1101 DRM_DEBUG("size: %d\n", size);
1102 DRM_DEBUG("agp_offset: %lu\n", agp_offset);
1103 DRM_DEBUG("alignment: %d\n", alignment);
1104 DRM_DEBUG("page_order: %d\n", page_order);
1105 DRM_DEBUG("total: %d\n", total);
1106
1107 if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER)
1108 return -EINVAL;
1109 if (dev->queue_count)
1110 return -EBUSY; /* Not while in use */
1111
1112 spin_lock(&dev->count_lock);
1113 if (dev->buf_use) {
1114 spin_unlock(&dev->count_lock);
1115 return -EBUSY;
1116 }
1117 atomic_inc(&dev->buf_alloc);
1118 spin_unlock(&dev->count_lock);
1119
1120 mutex_lock(&dev->struct_mutex);
1121 entry = &dma->bufs[order];
1122 if (entry->buf_count) {
1123 mutex_unlock(&dev->struct_mutex);
1124 atomic_dec(&dev->buf_alloc);
1125 return -ENOMEM; /* May only call once for each order */
1126 }
1127
1128 if (count < 0 || count > 4096) {
1129 mutex_unlock(&dev->struct_mutex);
1130 atomic_dec(&dev->buf_alloc);
1131 return -EINVAL;
1132 }
1133
1134 entry->buflist = drm_alloc(count * sizeof(*entry->buflist),
1135 DRM_MEM_BUFS);
1136 if (!entry->buflist) {
1137 mutex_unlock(&dev->struct_mutex);
1138 atomic_dec(&dev->buf_alloc);
1139 return -ENOMEM;
1140 }
1141 memset(entry->buflist, 0, count * sizeof(*entry->buflist));
1142
1143 entry->buf_size = size;
1144 entry->page_order = page_order;
1145
1146 offset = 0;
1147
1148 while (entry->buf_count < count) {
1149 buf = &entry->buflist[entry->buf_count];
1150 buf->idx = dma->buf_count + entry->buf_count;
1151 buf->total = alignment;
1152 buf->order = order;
1153 buf->used = 0;
1154
1155 buf->offset = (dma->byte_count + offset);
1156 buf->bus_address = agp_offset + offset;
1157 buf->address = (void *)(agp_offset + offset);
1158 buf->next = NULL;
1159 buf->waiting = 0;
1160 buf->pending = 0;
1161 init_waitqueue_head(&buf->dma_wait);
1162 buf->filp = NULL;
1163
1164 buf->dev_priv_size = dev->driver->dev_priv_size;
1165 buf->dev_private = drm_alloc(buf->dev_priv_size, DRM_MEM_BUFS);
1166 if (!buf->dev_private) {
1167 /* Set count correctly so we free the proper amount. */
1168 entry->buf_count = count;
1169 drm_cleanup_buf_error(dev, entry);
1170 mutex_unlock(&dev->struct_mutex);
1171 atomic_dec(&dev->buf_alloc);
1172 return -ENOMEM;
1173 }
1174 memset(buf->dev_private, 0, buf->dev_priv_size);
1175
1176 DRM_DEBUG("buffer %d @ %p\n", entry->buf_count, buf->address);
1177
1178 offset += alignment;
1179 entry->buf_count++;
1180 byte_count += PAGE_SIZE << page_order;
1181 }
1182
1183 DRM_DEBUG("byte_count: %d\n", byte_count);
1184
1185 temp_buflist = drm_realloc(dma->buflist,
1186 dma->buf_count * sizeof(*dma->buflist),
1187 (dma->buf_count + entry->buf_count)
1188 * sizeof(*dma->buflist), DRM_MEM_BUFS);
1189 if (!temp_buflist) {
1190 /* Free the entry because it isn't valid */
1191 drm_cleanup_buf_error(dev, entry);
1192 mutex_unlock(&dev->struct_mutex);
1193 atomic_dec(&dev->buf_alloc);
1194 return -ENOMEM;
1195 }
1196 dma->buflist = temp_buflist;
1197
1198 for (i = 0; i < entry->buf_count; i++) {
1199 dma->buflist[i + dma->buf_count] = &entry->buflist[i];
1200 }
1201
1202 dma->buf_count += entry->buf_count;
1203 dma->seg_count += entry->seg_count;
1204 dma->page_count += byte_count >> PAGE_SHIFT;
1205 dma->byte_count += byte_count;
1206
1207 DRM_DEBUG("dma->buf_count : %d\n", dma->buf_count);
1208 DRM_DEBUG("entry->buf_count : %d\n", entry->buf_count);
1209
1210 mutex_unlock(&dev->struct_mutex);
1211
1212 request->count = entry->buf_count;
1213 request->size = size;
1214
1215 dma->flags = _DRM_DMA_USE_FB;
1216
1217 atomic_dec(&dev->buf_alloc);
1218 return 0;
1219 }
1220
1221
1222 /**
1223 * Add buffers for DMA transfers (ioctl).
1224 *
1225 * \param inode device inode.
1226 * \param filp file pointer.
1227 * \param cmd command.
1228 * \param arg pointer to a drm_buf_desc_t request.
1229 * \return zero on success or a negative number on failure.
1230 *
1231 * According with the memory type specified in drm_buf_desc::flags and the
1232 * build options, it dispatches the call either to addbufs_agp(),
1233 * addbufs_sg() or addbufs_pci() for AGP, scatter-gather or consistent
1234 * PCI memory respectively.
1235 */
1236 int drm_addbufs(struct inode *inode, struct file *filp,
1237 unsigned int cmd, unsigned long arg)
1238 {
1239 drm_buf_desc_t request;
1240 drm_file_t *priv = filp->private_data;
1241 drm_device_t *dev = priv->head->dev;
1242 int ret;
1243
1244 if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA))
1245 return -EINVAL;
1246
1247 if (copy_from_user(&request, (drm_buf_desc_t __user *) arg,
1248 sizeof(request)))
1249 return -EFAULT;
1250
1251 #if __OS_HAS_AGP
1252 if (request.flags & _DRM_AGP_BUFFER)
1253 ret = drm_addbufs_agp(dev, &request);
1254 else
1255 #endif
1256 if (request.flags & _DRM_SG_BUFFER)
1257 ret = drm_addbufs_sg(dev, &request);
1258 else if (request.flags & _DRM_FB_BUFFER)
1259 ret = drm_addbufs_fb(dev, &request);
1260 else
1261 ret = drm_addbufs_pci(dev, &request);
1262
1263 if (ret == 0) {
1264 if (copy_to_user((void __user *)arg, &request, sizeof(request))) {
1265 ret = -EFAULT;
1266 }
1267 }
1268 return ret;
1269 }
1270
1271 /**
1272 * Get information about the buffer mappings.
1273 *
1274 * This was originally mean for debugging purposes, or by a sophisticated
1275 * client library to determine how best to use the available buffers (e.g.,
1276 * large buffers can be used for image transfer).
1277 *
1278 * \param inode device inode.
1279 * \param filp file pointer.
1280 * \param cmd command.
1281 * \param arg pointer to a drm_buf_info structure.
1282 * \return zero on success or a negative number on failure.
1283 *
1284 * Increments drm_device::buf_use while holding the drm_device::count_lock
1285 * lock, preventing of allocating more buffers after this call. Information
1286 * about each requested buffer is then copied into user space.
1287 */
1288 int drm_infobufs(struct inode *inode, struct file *filp,
1289 unsigned int cmd, unsigned long arg)
1290 {
1291 drm_file_t *priv = filp->private_data;
1292 drm_device_t *dev = priv->head->dev;
1293 drm_device_dma_t *dma = dev->dma;
1294 drm_buf_info_t request;
1295 drm_buf_info_t __user *argp = (void __user *)arg;
1296 int i;
1297 int count;
1298
1299 if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA))
1300 return -EINVAL;
1301
1302 if (!dma)
1303 return -EINVAL;
1304
1305 spin_lock(&dev->count_lock);
1306 if (atomic_read(&dev->buf_alloc)) {
1307 spin_unlock(&dev->count_lock);
1308 return -EBUSY;
1309 }
1310 ++dev->buf_use; /* Can't allocate more after this call */
1311 spin_unlock(&dev->count_lock);
1312
1313 if (copy_from_user(&request, argp, sizeof(request)))
1314 return -EFAULT;
1315
1316 for (i = 0, count = 0; i < DRM_MAX_ORDER + 1; i++) {
1317 if (dma->bufs[i].buf_count)
1318 ++count;
1319 }
1320
1321 DRM_DEBUG("count = %d\n", count);
1322
1323 if (request.count >= count) {
1324 for (i = 0, count = 0; i < DRM_MAX_ORDER + 1; i++) {
1325 if (dma->bufs[i].buf_count) {
1326 drm_buf_desc_t __user *to =
1327 &request.list[count];
1328 drm_buf_entry_t *from = &dma->bufs[i];
1329 drm_freelist_t *list = &dma->bufs[i].freelist;
1330 if (copy_to_user(&to->count,
1331 &from->buf_count,
1332 sizeof(from->buf_count)) ||
1333 copy_to_user(&to->size,
1334 &from->buf_size,
1335 sizeof(from->buf_size)) ||
1336 copy_to_user(&to->low_mark,
1337 &list->low_mark,
1338 sizeof(list->low_mark)) ||
1339 copy_to_user(&to->high_mark,
1340 &list->high_mark,
1341 sizeof(list->high_mark)))
1342 return -EFAULT;
1343
1344 DRM_DEBUG("%d %d %d %d %d\n",
1345 i,
1346 dma->bufs[i].buf_count,
1347 dma->bufs[i].buf_size,
1348 dma->bufs[i].freelist.low_mark,
1349 dma->bufs[i].freelist.high_mark);
1350 ++count;
1351 }
1352 }
1353 }
1354 request.count = count;
1355
1356 if (copy_to_user(argp, &request, sizeof(request)))
1357 return -EFAULT;
1358
1359 return 0;
1360 }
1361
1362 /**
1363 * Specifies a low and high water mark for buffer allocation
1364 *
1365 * \param inode device inode.
1366 * \param filp file pointer.
1367 * \param cmd command.
1368 * \param arg a pointer to a drm_buf_desc structure.
1369 * \return zero on success or a negative number on failure.
1370 *
1371 * Verifies that the size order is bounded between the admissible orders and
1372 * updates the respective drm_device_dma::bufs entry low and high water mark.
1373 *
1374 * \note This ioctl is deprecated and mostly never used.
1375 */
1376 int drm_markbufs(struct inode *inode, struct file *filp,
1377 unsigned int cmd, unsigned long arg)
1378 {
1379 drm_file_t *priv = filp->private_data;
1380 drm_device_t *dev = priv->head->dev;
1381 drm_device_dma_t *dma = dev->dma;
1382 drm_buf_desc_t request;
1383 int order;
1384 drm_buf_entry_t *entry;
1385
1386 if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA))
1387 return -EINVAL;
1388
1389 if (!dma)
1390 return -EINVAL;
1391
1392 if (copy_from_user(&request,
1393 (drm_buf_desc_t __user *) arg, sizeof(request)))
1394 return -EFAULT;
1395
1396 DRM_DEBUG("%d, %d, %d\n",
1397 request.size, request.low_mark, request.high_mark);
1398 order = drm_order(request.size);
1399 if (order < DRM_MIN_ORDER || order > DRM_MAX_ORDER)
1400 return -EINVAL;
1401 entry = &dma->bufs[order];
1402
1403 if (request.low_mark < 0 || request.low_mark > entry->buf_count)
1404 return -EINVAL;
1405 if (request.high_mark < 0 || request.high_mark > entry->buf_count)
1406 return -EINVAL;
1407
1408 entry->freelist.low_mark = request.low_mark;
1409 entry->freelist.high_mark = request.high_mark;
1410
1411 return 0;
1412 }
1413
1414 /**
1415 * Unreserve the buffers in list, previously reserved using drmDMA.
1416 *
1417 * \param inode device inode.
1418 * \param filp file pointer.
1419 * \param cmd command.
1420 * \param arg pointer to a drm_buf_free structure.
1421 * \return zero on success or a negative number on failure.
1422 *
1423 * Calls free_buffer() for each used buffer.
1424 * This function is primarily used for debugging.
1425 */
1426 int drm_freebufs(struct inode *inode, struct file *filp,
1427 unsigned int cmd, unsigned long arg)
1428 {
1429 drm_file_t *priv = filp->private_data;
1430 drm_device_t *dev = priv->head->dev;
1431 drm_device_dma_t *dma = dev->dma;
1432 drm_buf_free_t request;
1433 int i;
1434 int idx;
1435 drm_buf_t *buf;
1436
1437 if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA))
1438 return -EINVAL;
1439
1440 if (!dma)
1441 return -EINVAL;
1442
1443 if (copy_from_user(&request,
1444 (drm_buf_free_t __user *) arg, sizeof(request)))
1445 return -EFAULT;
1446
1447 DRM_DEBUG("%d\n", request.count);
1448 for (i = 0; i < request.count; i++) {
1449 if (copy_from_user(&idx, &request.list[i], sizeof(idx)))
1450 return -EFAULT;
1451 if (idx < 0 || idx >= dma->buf_count) {
1452 DRM_ERROR("Index %d (of %d max)\n",
1453 idx, dma->buf_count - 1);
1454 return -EINVAL;
1455 }
1456 buf = dma->buflist[idx];
1457 if (buf->filp != filp) {
1458 DRM_ERROR("Process %d freeing buffer not owned\n",
1459 current->pid);
1460 return -EINVAL;
1461 }
1462 drm_free_buffer(dev, buf);
1463 }
1464
1465 return 0;
1466 }
1467
1468 /**
1469 * Maps all of the DMA buffers into client-virtual space (ioctl).
1470 *
1471 * \param inode device inode.
1472 * \param filp file pointer.
1473 * \param cmd command.
1474 * \param arg pointer to a drm_buf_map structure.
1475 * \return zero on success or a negative number on failure.
1476 *
1477 * Maps the AGP, SG or PCI buffer region with do_mmap(), and copies information
1478 * about each buffer into user space. For PCI buffers, it calls do_mmap() with
1479 * offset equal to 0, which drm_mmap() interpretes as PCI buffers and calls
1480 * drm_mmap_dma().
1481 */
1482 int drm_mapbufs(struct inode *inode, struct file *filp,
1483 unsigned int cmd, unsigned long arg)
1484 {
1485 drm_file_t *priv = filp->private_data;
1486 drm_device_t *dev = priv->head->dev;
1487 drm_device_dma_t *dma = dev->dma;
1488 drm_buf_map_t __user *argp = (void __user *)arg;
1489 int retcode = 0;
1490 const int zero = 0;
1491 unsigned long virtual;
1492 unsigned long address;
1493 drm_buf_map_t request;
1494 int i;
1495
1496 if (!drm_core_check_feature(dev, DRIVER_HAVE_DMA))
1497 return -EINVAL;
1498
1499 if (!dma)
1500 return -EINVAL;
1501
1502 spin_lock(&dev->count_lock);
1503 if (atomic_read(&dev->buf_alloc)) {
1504 spin_unlock(&dev->count_lock);
1505 return -EBUSY;
1506 }
1507 dev->buf_use++; /* Can't allocate more after this call */
1508 spin_unlock(&dev->count_lock);
1509
1510 if (copy_from_user(&request, argp, sizeof(request)))
1511 return -EFAULT;
1512
1513 if (request.count >= dma->buf_count) {
1514 if ((drm_core_has_AGP(dev) && (dma->flags & _DRM_DMA_USE_AGP))
1515 || (drm_core_check_feature(dev, DRIVER_SG)
1516 && (dma->flags & _DRM_DMA_USE_SG))
1517 || (drm_core_check_feature(dev, DRIVER_FB_DMA)
1518 && (dma->flags & _DRM_DMA_USE_FB))) {
1519 drm_map_t *map = dev->agp_buffer_map;
1520 unsigned long token = dev->agp_buffer_token;
1521
1522 if (!map) {
1523 retcode = -EINVAL;
1524 goto done;
1525 }
1526
1527 down_write(&current->mm->mmap_sem);
1528 virtual = do_mmap(filp, 0, map->size,
1529 PROT_READ | PROT_WRITE,
1530 MAP_SHARED, token);
1531 up_write(&current->mm->mmap_sem);
1532 } else {
1533 down_write(&current->mm->mmap_sem);
1534 virtual = do_mmap(filp, 0, dma->byte_count,
1535 PROT_READ | PROT_WRITE,
1536 MAP_SHARED, 0);
1537 up_write(&current->mm->mmap_sem);
1538 }
1539 if (virtual > -1024UL) {
1540 /* Real error */
1541 retcode = (signed long)virtual;
1542 goto done;
1543 }
1544 request.virtual = (void __user *)virtual;
1545
1546 for (i = 0; i < dma->buf_count; i++) {
1547 if (copy_to_user(&request.list[i].idx,
1548 &dma->buflist[i]->idx,
1549 sizeof(request.list[0].idx))) {
1550 retcode = -EFAULT;
1551 goto done;
1552 }
1553 if (copy_to_user(&request.list[i].total,
1554 &dma->buflist[i]->total,
1555 sizeof(request.list[0].total))) {
1556 retcode = -EFAULT;
1557 goto done;
1558 }
1559 if (copy_to_user(&request.list[i].used,
1560 &zero, sizeof(zero))) {
1561 retcode = -EFAULT;
1562 goto done;
1563 }
1564 address = virtual + dma->buflist[i]->offset; /* *** */
1565 if (copy_to_user(&request.list[i].address,
1566 &address, sizeof(address))) {
1567 retcode = -EFAULT;
1568 goto done;
1569 }
1570 }
1571 }
1572 done:
1573 request.count = dma->buf_count;
1574 DRM_DEBUG("%d buffers, retcode = %d\n", request.count, retcode);
1575
1576 if (copy_to_user(argp, &request, sizeof(request)))
1577 return -EFAULT;
1578
1579 return retcode;
1580 }
1581
1582 /**
1583 * Compute size order. Returns the exponent of the smaller power of two which
1584 * is greater or equal to given number.
1585 *
1586 * \param size size.
1587 * \return order.
1588 *
1589 * \todo Can be made faster.
1590 */
1591 int drm_order(unsigned long size)
1592 {
1593 int order;
1594 unsigned long tmp;
1595
1596 for (order = 0, tmp = size >> 1; tmp; tmp >>= 1, order++) ;
1597
1598 if (size & (size - 1))
1599 ++order;
1600
1601 return order;
1602 }
1603 EXPORT_SYMBOL(drm_order);
1604
1605
Support for the Chinese Samsung S3C2440 based development boards