Checksum-related utility functions
[qemu/kevin.git] / hw / xenfb.c
blob7c46a2fa1e25c60fdd30a9c62c1a03600583cc3d
1 /*
2 * xen paravirt framebuffer backend
4 * Copyright IBM, Corp. 2005-2006
5 * Copyright Red Hat, Inc. 2006-2008
7 * Authors:
8 * Anthony Liguori <aliguori@us.ibm.com>,
9 * Markus Armbruster <armbru@redhat.com>,
10 * Daniel P. Berrange <berrange@redhat.com>,
11 * Pat Campbell <plc@novell.com>,
12 * Gerd Hoffmann <kraxel@redhat.com>
14 * This program is free software; you can redistribute it and/or modify
15 * it under the terms of the GNU General Public License as published by
16 * the Free Software Foundation; under version 2 of the License.
18 * This program is distributed in the hope that it will be useful,
19 * but WITHOUT ANY WARRANTY; without even the implied warranty of
20 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21 * GNU General Public License for more details.
23 * You should have received a copy of the GNU General Public License along
24 * with this program; if not, see <http://www.gnu.org/licenses/>.
27 #include <stdarg.h>
28 #include <stdlib.h>
29 #include <sys/types.h>
30 #include <fcntl.h>
31 #include <unistd.h>
32 #include <sys/mman.h>
33 #include <errno.h>
34 #include <stdio.h>
35 #include <string.h>
36 #include <time.h>
38 #include "hw/hw.h"
39 #include "ui/console.h"
40 #include "char/char.h"
41 #include "hw/xen_backend.h"
43 #include <xen/event_channel.h>
44 #include <xen/io/fbif.h>
45 #include <xen/io/kbdif.h>
46 #include <xen/io/protocols.h>
48 #ifndef BTN_LEFT
49 #define BTN_LEFT 0x110 /* from <linux/input.h> */
50 #endif
52 /* -------------------------------------------------------------------- */
54 struct common {
55 struct XenDevice xendev; /* must be first */
56 void *page;
57 QemuConsole *con;
60 struct XenInput {
61 struct common c;
62 int abs_pointer_wanted; /* Whether guest supports absolute pointer */
63 int button_state; /* Last seen pointer button state */
64 int extended;
65 QEMUPutMouseEntry *qmouse;
68 #define UP_QUEUE 8
70 struct XenFB {
71 struct common c;
72 size_t fb_len;
73 int row_stride;
74 int depth;
75 int width;
76 int height;
77 int offset;
78 void *pixels;
79 int fbpages;
80 int feature_update;
81 int refresh_period;
82 int bug_trigger;
83 int have_console;
84 int do_resize;
86 struct {
87 int x,y,w,h;
88 } up_rects[UP_QUEUE];
89 int up_count;
90 int up_fullscreen;
93 /* -------------------------------------------------------------------- */
95 static int common_bind(struct common *c)
97 int mfn;
99 if (xenstore_read_fe_int(&c->xendev, "page-ref", &mfn) == -1)
100 return -1;
101 if (xenstore_read_fe_int(&c->xendev, "event-channel", &c->xendev.remote_port) == -1)
102 return -1;
104 c->page = xc_map_foreign_range(xen_xc, c->xendev.dom,
105 XC_PAGE_SIZE,
106 PROT_READ | PROT_WRITE, mfn);
107 if (c->page == NULL)
108 return -1;
110 xen_be_bind_evtchn(&c->xendev);
111 xen_be_printf(&c->xendev, 1, "ring mfn %d, remote-port %d, local-port %d\n",
112 mfn, c->xendev.remote_port, c->xendev.local_port);
114 return 0;
117 static void common_unbind(struct common *c)
119 xen_be_unbind_evtchn(&c->xendev);
120 if (c->page) {
121 munmap(c->page, XC_PAGE_SIZE);
122 c->page = NULL;
126 /* -------------------------------------------------------------------- */
128 #if 0
130 * These two tables are not needed any more, but left in here
131 * intentionally as documentation, to show how scancode2linux[]
132 * was generated.
134 * Tables to map from scancode to Linux input layer keycode.
135 * Scancodes are hardware-specific. These maps assumes a
136 * standard AT or PS/2 keyboard which is what QEMU feeds us.
138 const unsigned char atkbd_set2_keycode[512] = {
140 0, 67, 65, 63, 61, 59, 60, 88, 0, 68, 66, 64, 62, 15, 41,117,
141 0, 56, 42, 93, 29, 16, 2, 0, 0, 0, 44, 31, 30, 17, 3, 0,
142 0, 46, 45, 32, 18, 5, 4, 95, 0, 57, 47, 33, 20, 19, 6,183,
143 0, 49, 48, 35, 34, 21, 7,184, 0, 0, 50, 36, 22, 8, 9,185,
144 0, 51, 37, 23, 24, 11, 10, 0, 0, 52, 53, 38, 39, 25, 12, 0,
145 0, 89, 40, 0, 26, 13, 0, 0, 58, 54, 28, 27, 0, 43, 0, 85,
146 0, 86, 91, 90, 92, 0, 14, 94, 0, 79,124, 75, 71,121, 0, 0,
147 82, 83, 80, 76, 77, 72, 1, 69, 87, 78, 81, 74, 55, 73, 70, 99,
149 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
150 217,100,255, 0, 97,165, 0, 0,156, 0, 0, 0, 0, 0, 0,125,
151 173,114, 0,113, 0, 0, 0,126,128, 0, 0,140, 0, 0, 0,127,
152 159, 0,115, 0,164, 0, 0,116,158, 0,150,166, 0, 0, 0,142,
153 157, 0, 0, 0, 0, 0, 0, 0,155, 0, 98, 0, 0,163, 0, 0,
154 226, 0, 0, 0, 0, 0, 0, 0, 0,255, 96, 0, 0, 0,143, 0,
155 0, 0, 0, 0, 0, 0, 0, 0, 0,107, 0,105,102, 0, 0,112,
156 110,111,108,112,106,103, 0,119, 0,118,109, 0, 99,104,119, 0,
160 const unsigned char atkbd_unxlate_table[128] = {
162 0,118, 22, 30, 38, 37, 46, 54, 61, 62, 70, 69, 78, 85,102, 13,
163 21, 29, 36, 45, 44, 53, 60, 67, 68, 77, 84, 91, 90, 20, 28, 27,
164 35, 43, 52, 51, 59, 66, 75, 76, 82, 14, 18, 93, 26, 34, 33, 42,
165 50, 49, 58, 65, 73, 74, 89,124, 17, 41, 88, 5, 6, 4, 12, 3,
166 11, 2, 10, 1, 9,119,126,108,117,125,123,107,115,116,121,105,
167 114,122,112,113,127, 96, 97,120, 7, 15, 23, 31, 39, 47, 55, 63,
168 71, 79, 86, 94, 8, 16, 24, 32, 40, 48, 56, 64, 72, 80, 87,111,
169 19, 25, 57, 81, 83, 92, 95, 98, 99,100,101,103,104,106,109,110
172 #endif
175 * for (i = 0; i < 128; i++) {
176 * scancode2linux[i] = atkbd_set2_keycode[atkbd_unxlate_table[i]];
177 * scancode2linux[i | 0x80] = atkbd_set2_keycode[atkbd_unxlate_table[i] | 0x80];
180 static const unsigned char scancode2linux[512] = {
181 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
182 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31,
183 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47,
184 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63,
185 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79,
186 80, 81, 82, 83, 99, 0, 86, 87, 88,117, 0, 0, 95,183,184,185,
187 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
188 93, 0, 0, 89, 0, 0, 85, 91, 90, 92, 0, 94, 0,124,121, 0,
190 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
191 165, 0, 0, 0, 0, 0, 0, 0, 0,163, 0, 0, 96, 97, 0, 0,
192 113,140,164, 0,166, 0, 0, 0, 0, 0,255, 0, 0, 0,114, 0,
193 115, 0,150, 0, 0, 98,255, 99,100, 0, 0, 0, 0, 0, 0, 0,
194 0, 0, 0, 0, 0,119,119,102,103,104, 0,105,112,106,118,107,
195 108,109,110,111, 0, 0, 0, 0, 0, 0, 0,125,126,127,116,142,
196 0, 0, 0,143, 0,217,156,173,128,159,158,157,155,226, 0,112,
197 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
200 /* Send an event to the keyboard frontend driver */
201 static int xenfb_kbd_event(struct XenInput *xenfb,
202 union xenkbd_in_event *event)
204 struct xenkbd_page *page = xenfb->c.page;
205 uint32_t prod;
207 if (xenfb->c.xendev.be_state != XenbusStateConnected)
208 return 0;
209 if (!page)
210 return 0;
212 prod = page->in_prod;
213 if (prod - page->in_cons == XENKBD_IN_RING_LEN) {
214 errno = EAGAIN;
215 return -1;
218 xen_mb(); /* ensure ring space available */
219 XENKBD_IN_RING_REF(page, prod) = *event;
220 xen_wmb(); /* ensure ring contents visible */
221 page->in_prod = prod + 1;
222 return xen_be_send_notify(&xenfb->c.xendev);
225 /* Send a keyboard (or mouse button) event */
226 static int xenfb_send_key(struct XenInput *xenfb, bool down, int keycode)
228 union xenkbd_in_event event;
230 memset(&event, 0, XENKBD_IN_EVENT_SIZE);
231 event.type = XENKBD_TYPE_KEY;
232 event.key.pressed = down ? 1 : 0;
233 event.key.keycode = keycode;
235 return xenfb_kbd_event(xenfb, &event);
238 /* Send a relative mouse movement event */
239 static int xenfb_send_motion(struct XenInput *xenfb,
240 int rel_x, int rel_y, int rel_z)
242 union xenkbd_in_event event;
244 memset(&event, 0, XENKBD_IN_EVENT_SIZE);
245 event.type = XENKBD_TYPE_MOTION;
246 event.motion.rel_x = rel_x;
247 event.motion.rel_y = rel_y;
248 #if __XEN_LATEST_INTERFACE_VERSION__ >= 0x00030207
249 event.motion.rel_z = rel_z;
250 #endif
252 return xenfb_kbd_event(xenfb, &event);
255 /* Send an absolute mouse movement event */
256 static int xenfb_send_position(struct XenInput *xenfb,
257 int abs_x, int abs_y, int z)
259 union xenkbd_in_event event;
261 memset(&event, 0, XENKBD_IN_EVENT_SIZE);
262 event.type = XENKBD_TYPE_POS;
263 event.pos.abs_x = abs_x;
264 event.pos.abs_y = abs_y;
265 #if __XEN_LATEST_INTERFACE_VERSION__ == 0x00030207
266 event.pos.abs_z = z;
267 #endif
268 #if __XEN_LATEST_INTERFACE_VERSION__ >= 0x00030208
269 event.pos.rel_z = z;
270 #endif
272 return xenfb_kbd_event(xenfb, &event);
276 * Send a key event from the client to the guest OS
277 * QEMU gives us a raw scancode from an AT / PS/2 style keyboard.
278 * We have to turn this into a Linux Input layer keycode.
280 * Extra complexity from the fact that with extended scancodes
281 * (like those produced by arrow keys) this method gets called
282 * twice, but we only want to send a single event. So we have to
283 * track the '0xe0' scancode state & collapse the extended keys
284 * as needed.
286 * Wish we could just send scancodes straight to the guest which
287 * already has code for dealing with this...
289 static void xenfb_key_event(void *opaque, int scancode)
291 struct XenInput *xenfb = opaque;
292 int down = 1;
294 if (scancode == 0xe0) {
295 xenfb->extended = 1;
296 return;
297 } else if (scancode & 0x80) {
298 scancode &= 0x7f;
299 down = 0;
301 if (xenfb->extended) {
302 scancode |= 0x80;
303 xenfb->extended = 0;
305 xenfb_send_key(xenfb, down, scancode2linux[scancode]);
309 * Send a mouse event from the client to the guest OS
311 * The QEMU mouse can be in either relative, or absolute mode.
312 * Movement is sent separately from button state, which has to
313 * be encoded as virtual key events. We also don't actually get
314 * given any button up/down events, so have to track changes in
315 * the button state.
317 static void xenfb_mouse_event(void *opaque,
318 int dx, int dy, int dz, int button_state)
320 struct XenInput *xenfb = opaque;
321 DisplaySurface *surface = qemu_console_surface(xenfb->c.con);
322 int dw = surface_width(surface);
323 int dh = surface_height(surface);
324 int i;
326 if (xenfb->abs_pointer_wanted)
327 xenfb_send_position(xenfb,
328 dx * (dw - 1) / 0x7fff,
329 dy * (dh - 1) / 0x7fff,
330 dz);
331 else
332 xenfb_send_motion(xenfb, dx, dy, dz);
334 for (i = 0 ; i < 8 ; i++) {
335 int lastDown = xenfb->button_state & (1 << i);
336 int down = button_state & (1 << i);
337 if (down == lastDown)
338 continue;
340 if (xenfb_send_key(xenfb, down, BTN_LEFT+i) < 0)
341 return;
343 xenfb->button_state = button_state;
346 static int input_init(struct XenDevice *xendev)
348 xenstore_write_be_int(xendev, "feature-abs-pointer", 1);
349 return 0;
352 static int input_initialise(struct XenDevice *xendev)
354 struct XenInput *in = container_of(xendev, struct XenInput, c.xendev);
355 int rc;
357 if (!in->c.con) {
358 xen_be_printf(xendev, 1, "ds not set (yet)\n");
359 return -1;
362 rc = common_bind(&in->c);
363 if (rc != 0)
364 return rc;
366 qemu_add_kbd_event_handler(xenfb_key_event, in);
367 return 0;
370 static void input_connected(struct XenDevice *xendev)
372 struct XenInput *in = container_of(xendev, struct XenInput, c.xendev);
374 if (xenstore_read_fe_int(xendev, "request-abs-pointer",
375 &in->abs_pointer_wanted) == -1) {
376 in->abs_pointer_wanted = 0;
379 if (in->qmouse) {
380 qemu_remove_mouse_event_handler(in->qmouse);
382 in->qmouse = qemu_add_mouse_event_handler(xenfb_mouse_event, in,
383 in->abs_pointer_wanted,
384 "Xen PVFB Mouse");
387 static void input_disconnect(struct XenDevice *xendev)
389 struct XenInput *in = container_of(xendev, struct XenInput, c.xendev);
391 if (in->qmouse) {
392 qemu_remove_mouse_event_handler(in->qmouse);
393 in->qmouse = NULL;
395 qemu_add_kbd_event_handler(NULL, NULL);
396 common_unbind(&in->c);
399 static void input_event(struct XenDevice *xendev)
401 struct XenInput *xenfb = container_of(xendev, struct XenInput, c.xendev);
402 struct xenkbd_page *page = xenfb->c.page;
404 /* We don't understand any keyboard events, so just ignore them. */
405 if (page->out_prod == page->out_cons)
406 return;
407 page->out_cons = page->out_prod;
408 xen_be_send_notify(&xenfb->c.xendev);
411 /* -------------------------------------------------------------------- */
413 static void xenfb_copy_mfns(int mode, int count, unsigned long *dst, void *src)
415 uint32_t *src32 = src;
416 uint64_t *src64 = src;
417 int i;
419 for (i = 0; i < count; i++)
420 dst[i] = (mode == 32) ? src32[i] : src64[i];
423 static int xenfb_map_fb(struct XenFB *xenfb)
425 struct xenfb_page *page = xenfb->c.page;
426 char *protocol = xenfb->c.xendev.protocol;
427 int n_fbdirs;
428 unsigned long *pgmfns = NULL;
429 unsigned long *fbmfns = NULL;
430 void *map, *pd;
431 int mode, ret = -1;
433 /* default to native */
434 pd = page->pd;
435 mode = sizeof(unsigned long) * 8;
437 if (!protocol) {
439 * Undefined protocol, some guesswork needed.
441 * Old frontends which don't set the protocol use
442 * one page directory only, thus pd[1] must be zero.
443 * pd[1] of the 32bit struct layout and the lower
444 * 32 bits of pd[0] of the 64bit struct layout have
445 * the same location, so we can check that ...
447 uint32_t *ptr32 = NULL;
448 uint32_t *ptr64 = NULL;
449 #if defined(__i386__)
450 ptr32 = (void*)page->pd;
451 ptr64 = ((void*)page->pd) + 4;
452 #elif defined(__x86_64__)
453 ptr32 = ((void*)page->pd) - 4;
454 ptr64 = (void*)page->pd;
455 #endif
456 if (ptr32) {
457 if (ptr32[1] == 0) {
458 mode = 32;
459 pd = ptr32;
460 } else {
461 mode = 64;
462 pd = ptr64;
465 #if defined(__x86_64__)
466 } else if (strcmp(protocol, XEN_IO_PROTO_ABI_X86_32) == 0) {
467 /* 64bit dom0, 32bit domU */
468 mode = 32;
469 pd = ((void*)page->pd) - 4;
470 #elif defined(__i386__)
471 } else if (strcmp(protocol, XEN_IO_PROTO_ABI_X86_64) == 0) {
472 /* 32bit dom0, 64bit domU */
473 mode = 64;
474 pd = ((void*)page->pd) + 4;
475 #endif
478 if (xenfb->pixels) {
479 munmap(xenfb->pixels, xenfb->fbpages * XC_PAGE_SIZE);
480 xenfb->pixels = NULL;
483 xenfb->fbpages = (xenfb->fb_len + (XC_PAGE_SIZE - 1)) / XC_PAGE_SIZE;
484 n_fbdirs = xenfb->fbpages * mode / 8;
485 n_fbdirs = (n_fbdirs + (XC_PAGE_SIZE - 1)) / XC_PAGE_SIZE;
487 pgmfns = g_malloc0(sizeof(unsigned long) * n_fbdirs);
488 fbmfns = g_malloc0(sizeof(unsigned long) * xenfb->fbpages);
490 xenfb_copy_mfns(mode, n_fbdirs, pgmfns, pd);
491 map = xc_map_foreign_pages(xen_xc, xenfb->c.xendev.dom,
492 PROT_READ, pgmfns, n_fbdirs);
493 if (map == NULL)
494 goto out;
495 xenfb_copy_mfns(mode, xenfb->fbpages, fbmfns, map);
496 munmap(map, n_fbdirs * XC_PAGE_SIZE);
498 xenfb->pixels = xc_map_foreign_pages(xen_xc, xenfb->c.xendev.dom,
499 PROT_READ | PROT_WRITE, fbmfns, xenfb->fbpages);
500 if (xenfb->pixels == NULL)
501 goto out;
503 ret = 0; /* all is fine */
505 out:
506 g_free(pgmfns);
507 g_free(fbmfns);
508 return ret;
511 static int xenfb_configure_fb(struct XenFB *xenfb, size_t fb_len_lim,
512 int width, int height, int depth,
513 size_t fb_len, int offset, int row_stride)
515 size_t mfn_sz = sizeof(*((struct xenfb_page *)0)->pd);
516 size_t pd_len = sizeof(((struct xenfb_page *)0)->pd) / mfn_sz;
517 size_t fb_pages = pd_len * XC_PAGE_SIZE / mfn_sz;
518 size_t fb_len_max = fb_pages * XC_PAGE_SIZE;
519 int max_width, max_height;
521 if (fb_len_lim > fb_len_max) {
522 xen_be_printf(&xenfb->c.xendev, 0, "fb size limit %zu exceeds %zu, corrected\n",
523 fb_len_lim, fb_len_max);
524 fb_len_lim = fb_len_max;
526 if (fb_len_lim && fb_len > fb_len_lim) {
527 xen_be_printf(&xenfb->c.xendev, 0, "frontend fb size %zu limited to %zu\n",
528 fb_len, fb_len_lim);
529 fb_len = fb_len_lim;
531 if (depth != 8 && depth != 16 && depth != 24 && depth != 32) {
532 xen_be_printf(&xenfb->c.xendev, 0, "can't handle frontend fb depth %d\n",
533 depth);
534 return -1;
536 if (row_stride <= 0 || row_stride > fb_len) {
537 xen_be_printf(&xenfb->c.xendev, 0, "invalid frontend stride %d\n", row_stride);
538 return -1;
540 max_width = row_stride / (depth / 8);
541 if (width < 0 || width > max_width) {
542 xen_be_printf(&xenfb->c.xendev, 0, "invalid frontend width %d limited to %d\n",
543 width, max_width);
544 width = max_width;
546 if (offset < 0 || offset >= fb_len) {
547 xen_be_printf(&xenfb->c.xendev, 0, "invalid frontend offset %d (max %zu)\n",
548 offset, fb_len - 1);
549 return -1;
551 max_height = (fb_len - offset) / row_stride;
552 if (height < 0 || height > max_height) {
553 xen_be_printf(&xenfb->c.xendev, 0, "invalid frontend height %d limited to %d\n",
554 height, max_height);
555 height = max_height;
557 xenfb->fb_len = fb_len;
558 xenfb->row_stride = row_stride;
559 xenfb->depth = depth;
560 xenfb->width = width;
561 xenfb->height = height;
562 xenfb->offset = offset;
563 xenfb->up_fullscreen = 1;
564 xenfb->do_resize = 1;
565 xen_be_printf(&xenfb->c.xendev, 1, "framebuffer %dx%dx%d offset %d stride %d\n",
566 width, height, depth, offset, row_stride);
567 return 0;
570 /* A convenient function for munging pixels between different depths */
571 #define BLT(SRC_T,DST_T,RSB,GSB,BSB,RDB,GDB,BDB) \
572 for (line = y ; line < (y+h) ; line++) { \
573 SRC_T *src = (SRC_T *)(xenfb->pixels \
574 + xenfb->offset \
575 + (line * xenfb->row_stride) \
576 + (x * xenfb->depth / 8)); \
577 DST_T *dst = (DST_T *)(data \
578 + (line * linesize) \
579 + (x * bpp / 8)); \
580 int col; \
581 const int RSS = 32 - (RSB + GSB + BSB); \
582 const int GSS = 32 - (GSB + BSB); \
583 const int BSS = 32 - (BSB); \
584 const uint32_t RSM = (~0U) << (32 - RSB); \
585 const uint32_t GSM = (~0U) << (32 - GSB); \
586 const uint32_t BSM = (~0U) << (32 - BSB); \
587 const int RDS = 32 - (RDB + GDB + BDB); \
588 const int GDS = 32 - (GDB + BDB); \
589 const int BDS = 32 - (BDB); \
590 const uint32_t RDM = (~0U) << (32 - RDB); \
591 const uint32_t GDM = (~0U) << (32 - GDB); \
592 const uint32_t BDM = (~0U) << (32 - BDB); \
593 for (col = x ; col < (x+w) ; col++) { \
594 uint32_t spix = *src; \
595 *dst = (((spix << RSS) & RSM & RDM) >> RDS) | \
596 (((spix << GSS) & GSM & GDM) >> GDS) | \
597 (((spix << BSS) & BSM & BDM) >> BDS); \
598 src = (SRC_T *) ((unsigned long) src + xenfb->depth / 8); \
599 dst = (DST_T *) ((unsigned long) dst + bpp / 8); \
605 * This copies data from the guest framebuffer region, into QEMU's
606 * displaysurface. qemu uses 16 or 32 bpp. In case the pv framebuffer
607 * uses something else we must convert and copy, otherwise we can
608 * supply the buffer directly and no thing here.
610 static void xenfb_guest_copy(struct XenFB *xenfb, int x, int y, int w, int h)
612 DisplaySurface *surface = qemu_console_surface(xenfb->c.con);
613 int line, oops = 0;
614 int bpp = surface_bits_per_pixel(surface);
615 int linesize = surface_stride(surface);
616 uint8_t *data = surface_data(surface);
618 if (!is_buffer_shared(surface)) {
619 switch (xenfb->depth) {
620 case 8:
621 if (bpp == 16) {
622 BLT(uint8_t, uint16_t, 3, 3, 2, 5, 6, 5);
623 } else if (bpp == 32) {
624 BLT(uint8_t, uint32_t, 3, 3, 2, 8, 8, 8);
625 } else {
626 oops = 1;
628 break;
629 case 24:
630 if (bpp == 16) {
631 BLT(uint32_t, uint16_t, 8, 8, 8, 5, 6, 5);
632 } else if (bpp == 32) {
633 BLT(uint32_t, uint32_t, 8, 8, 8, 8, 8, 8);
634 } else {
635 oops = 1;
637 break;
638 default:
639 oops = 1;
642 if (oops) /* should not happen */
643 xen_be_printf(&xenfb->c.xendev, 0, "%s: oops: convert %d -> %d bpp?\n",
644 __FUNCTION__, xenfb->depth, bpp);
646 dpy_gfx_update(xenfb->c.con, x, y, w, h);
649 #if 0 /* def XENFB_TYPE_REFRESH_PERIOD */
650 static int xenfb_queue_full(struct XenFB *xenfb)
652 struct xenfb_page *page = xenfb->c.page;
653 uint32_t cons, prod;
655 if (!page)
656 return 1;
658 prod = page->in_prod;
659 cons = page->in_cons;
660 return prod - cons == XENFB_IN_RING_LEN;
663 static void xenfb_send_event(struct XenFB *xenfb, union xenfb_in_event *event)
665 uint32_t prod;
666 struct xenfb_page *page = xenfb->c.page;
668 prod = page->in_prod;
669 /* caller ensures !xenfb_queue_full() */
670 xen_mb(); /* ensure ring space available */
671 XENFB_IN_RING_REF(page, prod) = *event;
672 xen_wmb(); /* ensure ring contents visible */
673 page->in_prod = prod + 1;
675 xen_be_send_notify(&xenfb->c.xendev);
678 static void xenfb_send_refresh_period(struct XenFB *xenfb, int period)
680 union xenfb_in_event event;
682 memset(&event, 0, sizeof(event));
683 event.type = XENFB_TYPE_REFRESH_PERIOD;
684 event.refresh_period.period = period;
685 xenfb_send_event(xenfb, &event);
687 #endif
690 * Periodic update of display.
691 * Also transmit the refresh interval to the frontend.
693 * Never ever do any qemu display operations
694 * (resize, screen update) outside this function.
695 * Our screen might be inactive. When asked for
696 * an update we know it is active.
698 static void xenfb_update(void *opaque)
700 struct XenFB *xenfb = opaque;
701 DisplaySurface *surface;
702 int i;
704 if (xenfb->c.xendev.be_state != XenbusStateConnected)
705 return;
707 if (xenfb->feature_update) {
708 #if 0 /* XENFB_TYPE_REFRESH_PERIOD */
709 struct DisplayChangeListener *l;
710 int period = 99999999;
711 int idle = 1;
713 if (xenfb_queue_full(xenfb))
714 return;
716 QLIST_FOREACH(l, &xenfb->c.ds->listeners, next) {
717 if (l->idle)
718 continue;
719 idle = 0;
720 if (!l->gui_timer_interval) {
721 if (period > GUI_REFRESH_INTERVAL)
722 period = GUI_REFRESH_INTERVAL;
723 } else {
724 if (period > l->gui_timer_interval)
725 period = l->gui_timer_interval;
728 if (idle)
729 period = XENFB_NO_REFRESH;
731 if (xenfb->refresh_period != period) {
732 xenfb_send_refresh_period(xenfb, period);
733 xenfb->refresh_period = period;
734 xen_be_printf(&xenfb->c.xendev, 1, "refresh period: %d\n", period);
736 #else
737 ; /* nothing */
738 #endif
739 } else {
740 /* we don't get update notifications, thus use the
741 * sledge hammer approach ... */
742 xenfb->up_fullscreen = 1;
745 /* resize if needed */
746 if (xenfb->do_resize) {
747 xenfb->do_resize = 0;
748 switch (xenfb->depth) {
749 case 16:
750 case 32:
751 /* console.c supported depth -> buffer can be used directly */
752 surface = qemu_create_displaysurface_from
753 (xenfb->width, xenfb->height, xenfb->depth,
754 xenfb->row_stride, xenfb->pixels + xenfb->offset,
755 false);
756 break;
757 default:
758 /* we must convert stuff */
759 surface = qemu_create_displaysurface(xenfb->width, xenfb->height);
760 break;
762 dpy_gfx_replace_surface(xenfb->c.con, surface);
763 xen_be_printf(&xenfb->c.xendev, 1, "update: resizing: %dx%d @ %d bpp%s\n",
764 xenfb->width, xenfb->height, xenfb->depth,
765 is_buffer_shared(surface) ? " (shared)" : "");
766 xenfb->up_fullscreen = 1;
769 /* run queued updates */
770 if (xenfb->up_fullscreen) {
771 xen_be_printf(&xenfb->c.xendev, 3, "update: fullscreen\n");
772 xenfb_guest_copy(xenfb, 0, 0, xenfb->width, xenfb->height);
773 } else if (xenfb->up_count) {
774 xen_be_printf(&xenfb->c.xendev, 3, "update: %d rects\n", xenfb->up_count);
775 for (i = 0; i < xenfb->up_count; i++)
776 xenfb_guest_copy(xenfb,
777 xenfb->up_rects[i].x,
778 xenfb->up_rects[i].y,
779 xenfb->up_rects[i].w,
780 xenfb->up_rects[i].h);
781 } else {
782 xen_be_printf(&xenfb->c.xendev, 3, "update: nothing\n");
784 xenfb->up_count = 0;
785 xenfb->up_fullscreen = 0;
788 /* QEMU display state changed, so refresh the framebuffer copy */
789 static void xenfb_invalidate(void *opaque)
791 struct XenFB *xenfb = opaque;
792 xenfb->up_fullscreen = 1;
795 static void xenfb_handle_events(struct XenFB *xenfb)
797 uint32_t prod, cons;
798 struct xenfb_page *page = xenfb->c.page;
800 prod = page->out_prod;
801 if (prod == page->out_cons)
802 return;
803 xen_rmb(); /* ensure we see ring contents up to prod */
804 for (cons = page->out_cons; cons != prod; cons++) {
805 union xenfb_out_event *event = &XENFB_OUT_RING_REF(page, cons);
806 int x, y, w, h;
808 switch (event->type) {
809 case XENFB_TYPE_UPDATE:
810 if (xenfb->up_count == UP_QUEUE)
811 xenfb->up_fullscreen = 1;
812 if (xenfb->up_fullscreen)
813 break;
814 x = MAX(event->update.x, 0);
815 y = MAX(event->update.y, 0);
816 w = MIN(event->update.width, xenfb->width - x);
817 h = MIN(event->update.height, xenfb->height - y);
818 if (w < 0 || h < 0) {
819 xen_be_printf(&xenfb->c.xendev, 1, "bogus update ignored\n");
820 break;
822 if (x != event->update.x ||
823 y != event->update.y ||
824 w != event->update.width ||
825 h != event->update.height) {
826 xen_be_printf(&xenfb->c.xendev, 1, "bogus update clipped\n");
828 if (w == xenfb->width && h > xenfb->height / 2) {
829 /* scroll detector: updated more than 50% of the lines,
830 * don't bother keeping track of the rectangles then */
831 xenfb->up_fullscreen = 1;
832 } else {
833 xenfb->up_rects[xenfb->up_count].x = x;
834 xenfb->up_rects[xenfb->up_count].y = y;
835 xenfb->up_rects[xenfb->up_count].w = w;
836 xenfb->up_rects[xenfb->up_count].h = h;
837 xenfb->up_count++;
839 break;
840 #ifdef XENFB_TYPE_RESIZE
841 case XENFB_TYPE_RESIZE:
842 if (xenfb_configure_fb(xenfb, xenfb->fb_len,
843 event->resize.width,
844 event->resize.height,
845 event->resize.depth,
846 xenfb->fb_len,
847 event->resize.offset,
848 event->resize.stride) < 0)
849 break;
850 xenfb_invalidate(xenfb);
851 break;
852 #endif
855 xen_mb(); /* ensure we're done with ring contents */
856 page->out_cons = cons;
859 static int fb_init(struct XenDevice *xendev)
861 struct XenFB *fb = container_of(xendev, struct XenFB, c.xendev);
863 fb->refresh_period = -1;
865 #ifdef XENFB_TYPE_RESIZE
866 xenstore_write_be_int(xendev, "feature-resize", 1);
867 #endif
868 return 0;
871 static int fb_initialise(struct XenDevice *xendev)
873 struct XenFB *fb = container_of(xendev, struct XenFB, c.xendev);
874 struct xenfb_page *fb_page;
875 int videoram;
876 int rc;
878 if (xenstore_read_fe_int(xendev, "videoram", &videoram) == -1)
879 videoram = 0;
881 rc = common_bind(&fb->c);
882 if (rc != 0)
883 return rc;
885 fb_page = fb->c.page;
886 rc = xenfb_configure_fb(fb, videoram * 1024 * 1024U,
887 fb_page->width, fb_page->height, fb_page->depth,
888 fb_page->mem_length, 0, fb_page->line_length);
889 if (rc != 0)
890 return rc;
892 rc = xenfb_map_fb(fb);
893 if (rc != 0)
894 return rc;
896 #if 0 /* handled in xen_init_display() for now */
897 if (!fb->have_console) {
898 fb->c.ds = graphic_console_init(xenfb_update,
899 xenfb_invalidate,
900 NULL,
901 NULL,
902 fb);
903 fb->have_console = 1;
905 #endif
907 if (xenstore_read_fe_int(xendev, "feature-update", &fb->feature_update) == -1)
908 fb->feature_update = 0;
909 if (fb->feature_update)
910 xenstore_write_be_int(xendev, "request-update", 1);
912 xen_be_printf(xendev, 1, "feature-update=%d, videoram=%d\n",
913 fb->feature_update, videoram);
914 return 0;
917 static void fb_disconnect(struct XenDevice *xendev)
919 struct XenFB *fb = container_of(xendev, struct XenFB, c.xendev);
922 * FIXME: qemu can't un-init gfx display (yet?).
923 * Replacing the framebuffer with anonymous shared memory
924 * instead. This releases the guest pages and keeps qemu happy.
926 fb->pixels = mmap(fb->pixels, fb->fbpages * XC_PAGE_SIZE,
927 PROT_READ | PROT_WRITE, MAP_SHARED | MAP_ANON,
928 -1, 0);
929 common_unbind(&fb->c);
930 fb->feature_update = 0;
931 fb->bug_trigger = 0;
934 static void fb_frontend_changed(struct XenDevice *xendev, const char *node)
936 struct XenFB *fb = container_of(xendev, struct XenFB, c.xendev);
939 * Set state to Connected *again* once the frontend switched
940 * to connected. We must trigger the watch a second time to
941 * workaround a frontend bug.
943 if (fb->bug_trigger == 0 && strcmp(node, "state") == 0 &&
944 xendev->fe_state == XenbusStateConnected &&
945 xendev->be_state == XenbusStateConnected) {
946 xen_be_printf(xendev, 2, "re-trigger connected (frontend bug)\n");
947 xen_be_set_state(xendev, XenbusStateConnected);
948 fb->bug_trigger = 1; /* only once */
952 static void fb_event(struct XenDevice *xendev)
954 struct XenFB *xenfb = container_of(xendev, struct XenFB, c.xendev);
956 xenfb_handle_events(xenfb);
957 xen_be_send_notify(&xenfb->c.xendev);
960 /* -------------------------------------------------------------------- */
962 struct XenDevOps xen_kbdmouse_ops = {
963 .size = sizeof(struct XenInput),
964 .init = input_init,
965 .initialise = input_initialise,
966 .connected = input_connected,
967 .disconnect = input_disconnect,
968 .event = input_event,
971 struct XenDevOps xen_framebuffer_ops = {
972 .size = sizeof(struct XenFB),
973 .init = fb_init,
974 .initialise = fb_initialise,
975 .disconnect = fb_disconnect,
976 .event = fb_event,
977 .frontend_changed = fb_frontend_changed,
981 * FIXME/TODO: Kill this.
982 * Temporary needed while DisplayState reorganization is in flight.
984 void xen_init_display(int domid)
986 struct XenDevice *xfb, *xin;
987 struct XenFB *fb;
988 struct XenInput *in;
989 int i = 0;
991 wait_more:
992 i++;
993 main_loop_wait(true);
994 xfb = xen_be_find_xendev("vfb", domid, 0);
995 xin = xen_be_find_xendev("vkbd", domid, 0);
996 if (!xfb || !xin) {
997 if (i < 256) {
998 usleep(10000);
999 goto wait_more;
1001 xen_be_printf(NULL, 1, "displaystate setup failed\n");
1002 return;
1005 /* vfb */
1006 fb = container_of(xfb, struct XenFB, c.xendev);
1007 fb->c.con = graphic_console_init(xenfb_update,
1008 xenfb_invalidate,
1009 NULL,
1010 NULL,
1011 fb);
1012 fb->have_console = 1;
1014 /* vkbd */
1015 in = container_of(xin, struct XenInput, c.xendev);
1016 in->c.con = fb->c.con;
1018 /* retry ->init() */
1019 xen_be_check_state(xin);
1020 xen_be_check_state(xfb);