// SPDX-License-Identifier: GPL-2.0-only OR MIT /* Copyright (c) 2023 Imagination Technologies Ltd. */ #include "pvr_context.h" #include "pvr_debugfs.h" #include "pvr_device.h" #include "pvr_drv.h" #include "pvr_free_list.h" #include "pvr_gem.h" #include "pvr_hwrt.h" #include "pvr_job.h" #include "pvr_mmu.h" #include "pvr_power.h" #include "pvr_rogue_defs.h" #include "pvr_rogue_fwif_client.h" #include "pvr_rogue_fwif_shared.h" #include "pvr_vm.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include /** * DOC: PowerVR (Series 6 and later) and IMG Graphics Driver * * This driver supports the following PowerVR/IMG graphics cores from Imagination Technologies: * * * AXE-1-16M (found in Texas Instruments AM62) */ /** * pvr_ioctl_create_bo() - IOCTL to create a GEM buffer object. * @drm_dev: [IN] Target DRM device. * @raw_args: [IN/OUT] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_create_bo_args. * @file: [IN] DRM file-private data. * * Called from userspace with %DRM_IOCTL_PVR_CREATE_BO. * * Return: * * 0 on success, * * -%EINVAL if the value of &drm_pvr_ioctl_create_bo_args.size is zero * or wider than &typedef size_t, * * -%EINVAL if any bits in &drm_pvr_ioctl_create_bo_args.flags that are * reserved or undefined are set, * * -%EINVAL if any padding fields in &drm_pvr_ioctl_create_bo_args are not * zero, * * Any error encountered while creating the object (see * pvr_gem_object_create()), or * * Any error encountered while transferring ownership of the object into a * userspace-accessible handle (see pvr_gem_object_into_handle()). */ static int pvr_ioctl_create_bo(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_create_bo_args *args = raw_args; struct pvr_device *pvr_dev = to_pvr_device(drm_dev); struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_gem_object *pvr_obj; size_t sanitized_size; int idx; int err; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; /* All padding fields must be zeroed. */ if (args->_padding_c != 0) { err = -EINVAL; goto err_drm_dev_exit; } /* * On 64-bit platforms (our primary target), size_t is a u64. However, * on other architectures we have to check for overflow when casting * down to size_t from u64. * * We also disallow zero-sized allocations, and reserved (kernel-only) * flags. */ if (args->size > SIZE_MAX || args->size == 0 || args->flags & ~DRM_PVR_BO_FLAGS_MASK || args->size & (PVR_DEVICE_PAGE_SIZE - 1)) { err = -EINVAL; goto err_drm_dev_exit; } sanitized_size = (size_t)args->size; /* * Create a buffer object and transfer ownership to a userspace- * accessible handle. */ pvr_obj = pvr_gem_object_create(pvr_dev, sanitized_size, args->flags); if (IS_ERR(pvr_obj)) { err = PTR_ERR(pvr_obj); goto err_drm_dev_exit; } /* This function will not modify &args->handle unless it succeeds. */ err = pvr_gem_object_into_handle(pvr_obj, pvr_file, &args->handle); if (err) goto err_destroy_obj; drm_dev_exit(idx); return 0; err_destroy_obj: /* * GEM objects are refcounted, so there is no explicit destructor * function. Instead, we release the singular reference we currently * hold on the object and let GEM take care of the rest. */ pvr_gem_object_put(pvr_obj); err_drm_dev_exit: drm_dev_exit(idx); return err; } /** * pvr_ioctl_get_bo_mmap_offset() - IOCTL to generate a "fake" offset to be * used when calling mmap() from userspace to map the given GEM buffer object * @drm_dev: [IN] DRM device (unused). * @raw_args: [IN/OUT] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_get_bo_mmap_offset_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_GET_BO_MMAP_OFFSET. * * This IOCTL does *not* perform an mmap. See the docs on * &struct drm_pvr_ioctl_get_bo_mmap_offset_args for details. * * Return: * * 0 on success, * * -%ENOENT if the handle does not reference a valid GEM buffer object, * * -%EINVAL if any padding fields in &struct * drm_pvr_ioctl_get_bo_mmap_offset_args are not zero, or * * Any error returned by drm_gem_create_mmap_offset(). */ static int pvr_ioctl_get_bo_mmap_offset(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_get_bo_mmap_offset_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_gem_object *pvr_obj; struct drm_gem_object *gem_obj; int idx; int ret; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; /* All padding fields must be zeroed. */ if (args->_padding_4 != 0) { ret = -EINVAL; goto err_drm_dev_exit; } /* * Obtain a kernel reference to the buffer object. This reference is * counted and must be manually dropped before returning. If a buffer * object cannot be found for the specified handle, return -%ENOENT (No * such file or directory). */ pvr_obj = pvr_gem_object_from_handle(pvr_file, args->handle); if (!pvr_obj) { ret = -ENOENT; goto err_drm_dev_exit; } gem_obj = gem_from_pvr_gem(pvr_obj); /* * Allocate a fake offset which can be used in userspace calls to mmap * on the DRM device file. If this fails, return the error code. This * operation is idempotent. */ ret = drm_gem_create_mmap_offset(gem_obj); if (ret != 0) { /* Drop our reference to the buffer object. */ drm_gem_object_put(gem_obj); goto err_drm_dev_exit; } /* * Read out the fake offset allocated by the earlier call to * drm_gem_create_mmap_offset. */ args->offset = drm_vma_node_offset_addr(&gem_obj->vma_node); /* Drop our reference to the buffer object. */ pvr_gem_object_put(pvr_obj); err_drm_dev_exit: drm_dev_exit(idx); return ret; } static __always_inline __maybe_unused u64 pvr_fw_version_packed(u32 major, u32 minor) { return ((u64)major << 32) | minor; } static u32 rogue_get_common_store_partition_space_size(struct pvr_device *pvr_dev) { u32 max_partitions = 0; u32 tile_size_x = 0; u32 tile_size_y = 0; PVR_FEATURE_VALUE(pvr_dev, tile_size_x, &tile_size_x); PVR_FEATURE_VALUE(pvr_dev, tile_size_y, &tile_size_y); PVR_FEATURE_VALUE(pvr_dev, max_partitions, &max_partitions); if (tile_size_x == 16 && tile_size_y == 16) { u32 usc_min_output_registers_per_pix = 0; PVR_FEATURE_VALUE(pvr_dev, usc_min_output_registers_per_pix, &usc_min_output_registers_per_pix); return tile_size_x * tile_size_y * max_partitions * usc_min_output_registers_per_pix; } return max_partitions * 1024; } static u32 rogue_get_common_store_alloc_region_size(struct pvr_device *pvr_dev) { u32 common_store_size_in_dwords = 512 * 4 * 4; u32 alloc_region_size; PVR_FEATURE_VALUE(pvr_dev, common_store_size_in_dwords, &common_store_size_in_dwords); alloc_region_size = common_store_size_in_dwords - (256U * 4U) - rogue_get_common_store_partition_space_size(pvr_dev); if (PVR_HAS_QUIRK(pvr_dev, 44079)) { u32 common_store_split_point = (768U * 4U * 4U); return min(common_store_split_point - (256U * 4U), alloc_region_size); } return alloc_region_size; } static inline u32 rogue_get_num_phantoms(struct pvr_device *pvr_dev) { u32 num_clusters = 1; PVR_FEATURE_VALUE(pvr_dev, num_clusters, &num_clusters); return ROGUE_REQ_NUM_PHANTOMS(num_clusters); } static inline u32 rogue_get_max_coeffs(struct pvr_device *pvr_dev) { u32 max_coeff_additional_portion = ROGUE_MAX_VERTEX_SHARED_REGISTERS; u32 pending_allocation_shared_regs = 2U * 1024U; u32 pending_allocation_coeff_regs = 0U; u32 num_phantoms = rogue_get_num_phantoms(pvr_dev); u32 tiles_in_flight = 0; u32 max_coeff_pixel_portion; PVR_FEATURE_VALUE(pvr_dev, isp_max_tiles_in_flight, &tiles_in_flight); max_coeff_pixel_portion = DIV_ROUND_UP(tiles_in_flight, num_phantoms); max_coeff_pixel_portion *= ROGUE_MAX_PIXEL_SHARED_REGISTERS; /* * Compute tasks on cores with BRN48492 and without compute overlap may lock * up without two additional lines of coeffs. */ if (PVR_HAS_QUIRK(pvr_dev, 48492) && !PVR_HAS_FEATURE(pvr_dev, compute_overlap)) pending_allocation_coeff_regs = 2U * 1024U; if (PVR_HAS_ENHANCEMENT(pvr_dev, 38748)) pending_allocation_shared_regs = 0; if (PVR_HAS_ENHANCEMENT(pvr_dev, 38020)) max_coeff_additional_portion += ROGUE_MAX_COMPUTE_SHARED_REGISTERS; return rogue_get_common_store_alloc_region_size(pvr_dev) + pending_allocation_coeff_regs - (max_coeff_pixel_portion + max_coeff_additional_portion + pending_allocation_shared_regs); } static inline u32 rogue_get_cdm_max_local_mem_size_regs(struct pvr_device *pvr_dev) { u32 available_coeffs_in_dwords = rogue_get_max_coeffs(pvr_dev); if (PVR_HAS_QUIRK(pvr_dev, 48492) && PVR_HAS_FEATURE(pvr_dev, roguexe) && !PVR_HAS_FEATURE(pvr_dev, compute_overlap)) { /* Driver must not use the 2 reserved lines. */ available_coeffs_in_dwords -= ROGUE_CSRM_LINE_SIZE_IN_DWORDS * 2; } /* * The maximum amount of local memory available to a kernel is the minimum * of the total number of coefficient registers available and the max common * store allocation size which can be made by the CDM. * * If any coeff lines are reserved for tessellation or pixel then we need to * subtract those too. */ return min(available_coeffs_in_dwords, (u32)ROGUE_MAX_PER_KERNEL_LOCAL_MEM_SIZE_REGS); } /** * pvr_dev_query_gpu_info_get() * @pvr_dev: Device pointer. * @args: [IN] Device query arguments containing a pointer to a userspace * struct drm_pvr_dev_query_gpu_info. * * If the query object pointer is NULL, the size field is updated with the * expected size of the query object. * * Returns: * * 0 on success, or if size is requested using a NULL pointer, or * * -%E2BIG if the indicated length of the allocation is less than is * required to contain the copied data, or * * -%EFAULT if local memory could not be copied to userspace. */ static int pvr_dev_query_gpu_info_get(struct pvr_device *pvr_dev, struct drm_pvr_ioctl_dev_query_args *args) { struct drm_pvr_dev_query_gpu_info gpu_info = {0}; int err; if (!args->pointer) { args->size = sizeof(struct drm_pvr_dev_query_gpu_info); return 0; } gpu_info.gpu_id = pvr_gpu_id_to_packed_bvnc(&pvr_dev->gpu_id); gpu_info.num_phantoms = rogue_get_num_phantoms(pvr_dev); err = PVR_UOBJ_SET(args->pointer, args->size, gpu_info); if (err < 0) return err; if (args->size > sizeof(gpu_info)) args->size = sizeof(gpu_info); return 0; } /** * pvr_dev_query_runtime_info_get() * @pvr_dev: Device pointer. * @args: [IN] Device query arguments containing a pointer to a userspace * struct drm_pvr_dev_query_runtime_info. * * If the query object pointer is NULL, the size field is updated with the * expected size of the query object. * * Returns: * * 0 on success, or if size is requested using a NULL pointer, or * * -%E2BIG if the indicated length of the allocation is less than is * required to contain the copied data, or * * -%EFAULT if local memory could not be copied to userspace. */ static int pvr_dev_query_runtime_info_get(struct pvr_device *pvr_dev, struct drm_pvr_ioctl_dev_query_args *args) { struct drm_pvr_dev_query_runtime_info runtime_info = {0}; int err; if (!args->pointer) { args->size = sizeof(struct drm_pvr_dev_query_runtime_info); return 0; } runtime_info.free_list_min_pages = pvr_get_free_list_min_pages(pvr_dev); runtime_info.free_list_max_pages = ROGUE_PM_MAX_FREELIST_SIZE / ROGUE_PM_PAGE_SIZE; runtime_info.common_store_alloc_region_size = rogue_get_common_store_alloc_region_size(pvr_dev); runtime_info.common_store_partition_space_size = rogue_get_common_store_partition_space_size(pvr_dev); runtime_info.max_coeffs = rogue_get_max_coeffs(pvr_dev); runtime_info.cdm_max_local_mem_size_regs = rogue_get_cdm_max_local_mem_size_regs(pvr_dev); err = PVR_UOBJ_SET(args->pointer, args->size, runtime_info); if (err < 0) return err; if (args->size > sizeof(runtime_info)) args->size = sizeof(runtime_info); return 0; } /** * pvr_dev_query_quirks_get() - Unpack array of quirks at the address given * in a struct drm_pvr_dev_query_quirks, or gets the amount of space required * for it. * @pvr_dev: Device pointer. * @args: [IN] Device query arguments containing a pointer to a userspace * struct drm_pvr_dev_query_query_quirks. * * If the query object pointer is NULL, the size field is updated with the * expected size of the query object. * If the userspace pointer in the query object is NULL, or the count is * short, no data is copied. * The count field will be updated to that copied, or if either pointer is * NULL, that which would have been copied. * The size field in the query object will be updated to the size copied. * * Returns: * * 0 on success, or if size/count is requested using a NULL pointer, or * * -%EINVAL if args contained non-zero reserved fields, or * * -%E2BIG if the indicated length of the allocation is less than is * required to contain the copied data, or * * -%EFAULT if local memory could not be copied to userspace. */ static int pvr_dev_query_quirks_get(struct pvr_device *pvr_dev, struct drm_pvr_ioctl_dev_query_args *args) { /* * @FIXME - hardcoding of numbers here is intended as an * intermediate step so the UAPI can be fixed, but requires a * a refactor in the future to store them in a more appropriate * location */ static const u32 umd_quirks_musthave[] = { 47217, 49927, 62269, }; static const u32 umd_quirks[] = { 48545, 51764, }; struct drm_pvr_dev_query_quirks query; u32 out[ARRAY_SIZE(umd_quirks_musthave) + ARRAY_SIZE(umd_quirks)]; size_t out_musthave_count = 0; size_t out_count = 0; int err; if (!args->pointer) { args->size = sizeof(struct drm_pvr_dev_query_quirks); return 0; } err = PVR_UOBJ_GET(query, args->size, args->pointer); if (err < 0) return err; if (query._padding_c) return -EINVAL; for (int i = 0; i < ARRAY_SIZE(umd_quirks_musthave); i++) { if (pvr_device_has_uapi_quirk(pvr_dev, umd_quirks_musthave[i])) { out[out_count++] = umd_quirks_musthave[i]; out_musthave_count++; } } for (int i = 0; i < ARRAY_SIZE(umd_quirks); i++) { if (pvr_device_has_uapi_quirk(pvr_dev, umd_quirks[i])) out[out_count++] = umd_quirks[i]; } if (!query.quirks) goto copy_out; if (query.count < out_count) return -E2BIG; if (copy_to_user(u64_to_user_ptr(query.quirks), out, out_count * sizeof(u32))) { return -EFAULT; } query.musthave_count = out_musthave_count; copy_out: query.count = out_count; err = PVR_UOBJ_SET(args->pointer, args->size, query); if (err < 0) return err; args->size = sizeof(query); return 0; } /** * pvr_dev_query_enhancements_get() - Unpack array of enhancements at the * address given in a struct drm_pvr_dev_query_enhancements, or gets the amount * of space required for it. * @pvr_dev: Device pointer. * @args: [IN] Device query arguments containing a pointer to a userspace * struct drm_pvr_dev_query_enhancements. * * If the query object pointer is NULL, the size field is updated with the * expected size of the query object. * If the userspace pointer in the query object is NULL, or the count is * short, no data is copied. * The count field will be updated to that copied, or if either pointer is * NULL, that which would have been copied. * The size field in the query object will be updated to the size copied. * * Returns: * * 0 on success, or if size/count is requested using a NULL pointer, or * * -%EINVAL if args contained non-zero reserved fields, or * * -%E2BIG if the indicated length of the allocation is less than is * required to contain the copied data, or * * -%EFAULT if local memory could not be copied to userspace. */ static int pvr_dev_query_enhancements_get(struct pvr_device *pvr_dev, struct drm_pvr_ioctl_dev_query_args *args) { /* * @FIXME - hardcoding of numbers here is intended as an * intermediate step so the UAPI can be fixed, but requires a * a refactor in the future to store them in a more appropriate * location */ const u32 umd_enhancements[] = { 35421, 42064, }; struct drm_pvr_dev_query_enhancements query; u32 out[ARRAY_SIZE(umd_enhancements)]; size_t out_idx = 0; int err; if (!args->pointer) { args->size = sizeof(struct drm_pvr_dev_query_enhancements); return 0; } err = PVR_UOBJ_GET(query, args->size, args->pointer); if (err < 0) return err; if (query._padding_a) return -EINVAL; if (query._padding_c) return -EINVAL; for (int i = 0; i < ARRAY_SIZE(umd_enhancements); i++) { if (pvr_device_has_uapi_enhancement(pvr_dev, umd_enhancements[i])) out[out_idx++] = umd_enhancements[i]; } if (!query.enhancements) goto copy_out; if (query.count < out_idx) return -E2BIG; if (copy_to_user(u64_to_user_ptr(query.enhancements), out, out_idx * sizeof(u32))) { return -EFAULT; } copy_out: query.count = out_idx; err = PVR_UOBJ_SET(args->pointer, args->size, query); if (err < 0) return err; args->size = sizeof(query); return 0; } /** * pvr_ioctl_dev_query() - IOCTL to copy information about a device * @drm_dev: [IN] DRM device. * @raw_args: [IN/OUT] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_dev_query_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_DEV_QUERY. * If the given receiving struct pointer is NULL, or the indicated size is too * small, the expected size of the struct type will be returned in the size * argument field. * * Return: * * 0 on success or when fetching the size with args->pointer == NULL, or * * -%E2BIG if the indicated size of the receiving struct is less than is * required to contain the copied data, or * * -%EINVAL if the indicated struct type is unknown, or * * -%ENOMEM if local memory could not be allocated, or * * -%EFAULT if local memory could not be copied to userspace. */ static int pvr_ioctl_dev_query(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct pvr_device *pvr_dev = to_pvr_device(drm_dev); struct drm_pvr_ioctl_dev_query_args *args = raw_args; int idx; int ret = -EINVAL; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; switch ((enum drm_pvr_dev_query)args->type) { case DRM_PVR_DEV_QUERY_GPU_INFO_GET: ret = pvr_dev_query_gpu_info_get(pvr_dev, args); break; case DRM_PVR_DEV_QUERY_RUNTIME_INFO_GET: ret = pvr_dev_query_runtime_info_get(pvr_dev, args); break; case DRM_PVR_DEV_QUERY_QUIRKS_GET: ret = pvr_dev_query_quirks_get(pvr_dev, args); break; case DRM_PVR_DEV_QUERY_ENHANCEMENTS_GET: ret = pvr_dev_query_enhancements_get(pvr_dev, args); break; case DRM_PVR_DEV_QUERY_HEAP_INFO_GET: ret = pvr_heap_info_get(pvr_dev, args); break; case DRM_PVR_DEV_QUERY_STATIC_DATA_AREAS_GET: ret = pvr_static_data_areas_get(pvr_dev, args); break; } drm_dev_exit(idx); return ret; } /** * pvr_ioctl_create_context() - IOCTL to create a context * @drm_dev: [IN] DRM device. * @raw_args: [IN/OUT] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_create_context_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_CREATE_CONTEXT. * * Return: * * 0 on success, or * * -%EINVAL if provided arguments are invalid, or * * -%EFAULT if arguments can't be copied from userspace, or * * Any error returned by pvr_create_render_context(). */ static int pvr_ioctl_create_context(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_create_context_args *args = raw_args; struct pvr_file *pvr_file = file->driver_priv; int idx; int ret; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; ret = pvr_context_create(pvr_file, args); drm_dev_exit(idx); return ret; } /** * pvr_ioctl_destroy_context() - IOCTL to destroy a context * @drm_dev: [IN] DRM device. * @raw_args: [IN/OUT] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_destroy_context_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_DESTROY_CONTEXT. * * Return: * * 0 on success, or * * -%EINVAL if context not in context list. */ static int pvr_ioctl_destroy_context(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_destroy_context_args *args = raw_args; struct pvr_file *pvr_file = file->driver_priv; if (args->_padding_4) return -EINVAL; return pvr_context_destroy(pvr_file, args->handle); } /** * pvr_ioctl_create_free_list() - IOCTL to create a free list * @drm_dev: [IN] DRM device. * @raw_args: [IN/OUT] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_create_free_list_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_CREATE_FREE_LIST. * * Return: * * 0 on success, or * * Any error returned by pvr_free_list_create(). */ static int pvr_ioctl_create_free_list(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_create_free_list_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_free_list *free_list; int idx; int err; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; free_list = pvr_free_list_create(pvr_file, args); if (IS_ERR(free_list)) { err = PTR_ERR(free_list); goto err_drm_dev_exit; } /* Allocate object handle for userspace. */ err = xa_alloc(&pvr_file->free_list_handles, &args->handle, free_list, xa_limit_32b, GFP_KERNEL); if (err < 0) goto err_cleanup; drm_dev_exit(idx); return 0; err_cleanup: pvr_free_list_put(free_list); err_drm_dev_exit: drm_dev_exit(idx); return err; } /** * pvr_ioctl_destroy_free_list() - IOCTL to destroy a free list * @drm_dev: [IN] DRM device. * @raw_args: [IN] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_destroy_free_list_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_DESTROY_FREE_LIST. * * Return: * * 0 on success, or * * -%EINVAL if free list not in object list. */ static int pvr_ioctl_destroy_free_list(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_destroy_free_list_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_free_list *free_list; if (args->_padding_4) return -EINVAL; free_list = xa_erase(&pvr_file->free_list_handles, args->handle); if (!free_list) return -EINVAL; pvr_free_list_put(free_list); return 0; } /** * pvr_ioctl_create_hwrt_dataset() - IOCTL to create a HWRT dataset * @drm_dev: [IN] DRM device. * @raw_args: [IN/OUT] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_create_hwrt_dataset_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_CREATE_HWRT_DATASET. * * Return: * * 0 on success, or * * Any error returned by pvr_hwrt_dataset_create(). */ static int pvr_ioctl_create_hwrt_dataset(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_create_hwrt_dataset_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_hwrt_dataset *hwrt; int idx; int err; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; hwrt = pvr_hwrt_dataset_create(pvr_file, args); if (IS_ERR(hwrt)) { err = PTR_ERR(hwrt); goto err_drm_dev_exit; } /* Allocate object handle for userspace. */ err = xa_alloc(&pvr_file->hwrt_handles, &args->handle, hwrt, xa_limit_32b, GFP_KERNEL); if (err < 0) goto err_cleanup; drm_dev_exit(idx); return 0; err_cleanup: pvr_hwrt_dataset_put(hwrt); err_drm_dev_exit: drm_dev_exit(idx); return err; } /** * pvr_ioctl_destroy_hwrt_dataset() - IOCTL to destroy a HWRT dataset * @drm_dev: [IN] DRM device. * @raw_args: [IN] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_destroy_hwrt_dataset_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_DESTROY_HWRT_DATASET. * * Return: * * 0 on success, or * * -%EINVAL if HWRT dataset not in object list. */ static int pvr_ioctl_destroy_hwrt_dataset(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_destroy_hwrt_dataset_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_hwrt_dataset *hwrt; if (args->_padding_4) return -EINVAL; hwrt = xa_erase(&pvr_file->hwrt_handles, args->handle); if (!hwrt) return -EINVAL; pvr_hwrt_dataset_put(hwrt); return 0; } /** * pvr_ioctl_create_vm_context() - IOCTL to create a VM context * @drm_dev: [IN] DRM device. * @raw_args: [IN/OUT] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_create_vm_context_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_CREATE_VM_CONTEXT. * * Return: * * 0 on success, or * * Any error returned by pvr_vm_create_context(). */ static int pvr_ioctl_create_vm_context(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_create_vm_context_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_vm_context *vm_ctx; int idx; int err; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; if (args->_padding_4) { err = -EINVAL; goto err_drm_dev_exit; } vm_ctx = pvr_vm_create_context(pvr_file->pvr_dev, true); if (IS_ERR(vm_ctx)) { err = PTR_ERR(vm_ctx); goto err_drm_dev_exit; } /* Allocate object handle for userspace. */ err = xa_alloc(&pvr_file->vm_ctx_handles, &args->handle, vm_ctx, xa_limit_32b, GFP_KERNEL); if (err < 0) goto err_cleanup; drm_dev_exit(idx); return 0; err_cleanup: pvr_vm_context_put(vm_ctx); err_drm_dev_exit: drm_dev_exit(idx); return err; } /** * pvr_ioctl_destroy_vm_context() - IOCTL to destroy a VM context * @drm_dev: [IN] DRM device. * @raw_args: [IN] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_destroy_vm_context_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_DESTROY_VM_CONTEXT. * * Return: * * 0 on success, or * * -%EINVAL if object not in object list. */ static int pvr_ioctl_destroy_vm_context(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_destroy_vm_context_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_vm_context *vm_ctx; if (args->_padding_4) return -EINVAL; vm_ctx = xa_erase(&pvr_file->vm_ctx_handles, args->handle); if (!vm_ctx) return -EINVAL; pvr_vm_context_put(vm_ctx); return 0; } /** * pvr_ioctl_vm_map() - IOCTL to map buffer to GPU address space. * @drm_dev: [IN] DRM device. * @raw_args: [IN] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_vm_map_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_VM_MAP. * * Return: * * 0 on success, * * -%EINVAL if &drm_pvr_ioctl_vm_op_map_args.flags is not zero, * * -%EINVAL if the bounds specified by &drm_pvr_ioctl_vm_op_map_args.offset * and &drm_pvr_ioctl_vm_op_map_args.size are not valid or do not fall * within the buffer object specified by * &drm_pvr_ioctl_vm_op_map_args.handle, * * -%EINVAL if the bounds specified by * &drm_pvr_ioctl_vm_op_map_args.device_addr and * &drm_pvr_ioctl_vm_op_map_args.size do not form a valid device-virtual * address range which falls entirely within a single heap, or * * -%ENOENT if &drm_pvr_ioctl_vm_op_map_args.handle does not refer to a * valid PowerVR buffer object. */ static int pvr_ioctl_vm_map(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct pvr_device *pvr_dev = to_pvr_device(drm_dev); struct drm_pvr_ioctl_vm_map_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_vm_context *vm_ctx; struct pvr_gem_object *pvr_obj; size_t pvr_obj_size; u64 offset_plus_size; int idx; int err; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; /* Initial validation of args. */ if (args->_padding_14) { err = -EINVAL; goto err_drm_dev_exit; } if (args->flags != 0 || check_add_overflow(args->offset, args->size, &offset_plus_size) || !pvr_find_heap_containing(pvr_dev, args->device_addr, args->size)) { err = -EINVAL; goto err_drm_dev_exit; } vm_ctx = pvr_vm_context_lookup(pvr_file, args->vm_context_handle); if (!vm_ctx) { err = -EINVAL; goto err_drm_dev_exit; } pvr_obj = pvr_gem_object_from_handle(pvr_file, args->handle); if (!pvr_obj) { err = -ENOENT; goto err_put_vm_context; } pvr_obj_size = pvr_gem_object_size(pvr_obj); /* * Validate offset and size args. The alignment of these will be * checked when mapping; for now just check that they're within valid * bounds */ if (args->offset >= pvr_obj_size || offset_plus_size > pvr_obj_size) { err = -EINVAL; goto err_put_pvr_object; } err = pvr_vm_map(vm_ctx, pvr_obj, args->offset, args->device_addr, args->size); if (err) goto err_put_pvr_object; /* * In order to set up the mapping, we needed a reference to &pvr_obj. * However, pvr_vm_map() obtains and stores its own reference, so we * must release ours before returning. */ err_put_pvr_object: pvr_gem_object_put(pvr_obj); err_put_vm_context: pvr_vm_context_put(vm_ctx); err_drm_dev_exit: drm_dev_exit(idx); return err; } /** * pvr_ioctl_vm_unmap() - IOCTL to unmap buffer from GPU address space. * @drm_dev: [IN] DRM device. * @raw_args: [IN] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_vm_unmap_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_VM_UNMAP. * * Return: * * 0 on success, * * -%EINVAL if &drm_pvr_ioctl_vm_op_unmap_args.device_addr is not a valid * device page-aligned device-virtual address, or * * -%ENOENT if there is currently no PowerVR buffer object mapped at * &drm_pvr_ioctl_vm_op_unmap_args.device_addr. */ static int pvr_ioctl_vm_unmap(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_vm_unmap_args *args = raw_args; struct pvr_file *pvr_file = to_pvr_file(file); struct pvr_vm_context *vm_ctx; int err; /* Initial validation of args. */ if (args->_padding_4) return -EINVAL; vm_ctx = pvr_vm_context_lookup(pvr_file, args->vm_context_handle); if (!vm_ctx) return -EINVAL; err = pvr_vm_unmap(vm_ctx, args->device_addr, args->size); pvr_vm_context_put(vm_ctx); return err; } /* * pvr_ioctl_submit_job() - IOCTL to submit a job to the GPU * @drm_dev: [IN] DRM device. * @raw_args: [IN] Arguments passed to this IOCTL. This must be of type * &struct drm_pvr_ioctl_submit_job_args. * @file: [IN] DRM file private data. * * Called from userspace with %DRM_IOCTL_PVR_SUBMIT_JOB. * * Return: * * 0 on success, or * * -%EINVAL if arguments are invalid. */ static int pvr_ioctl_submit_jobs(struct drm_device *drm_dev, void *raw_args, struct drm_file *file) { struct drm_pvr_ioctl_submit_jobs_args *args = raw_args; struct pvr_device *pvr_dev = to_pvr_device(drm_dev); struct pvr_file *pvr_file = to_pvr_file(file); int idx; int err; if (!drm_dev_enter(drm_dev, &idx)) return -EIO; err = pvr_submit_jobs(pvr_dev, pvr_file, args); drm_dev_exit(idx); return err; } int pvr_get_uobj(u64 usr_ptr, u32 usr_stride, u32 min_stride, u32 obj_size, void *out) { if (usr_stride < min_stride) return -EINVAL; return copy_struct_from_user(out, obj_size, u64_to_user_ptr(usr_ptr), usr_stride); } int pvr_set_uobj(u64 usr_ptr, u32 usr_stride, u32 min_stride, u32 obj_size, const void *in) { if (usr_stride < min_stride) return -EINVAL; if (copy_to_user(u64_to_user_ptr(usr_ptr), in, min_t(u32, usr_stride, obj_size))) return -EFAULT; if (usr_stride > obj_size && clear_user(u64_to_user_ptr(usr_ptr + obj_size), usr_stride - obj_size)) { return -EFAULT; } return 0; } int pvr_get_uobj_array(const struct drm_pvr_obj_array *in, u32 min_stride, u32 obj_size, void **out) { int ret = 0; void *out_alloc; if (in->stride < min_stride) return -EINVAL; if (!in->count) return 0; out_alloc = kvmalloc_array(in->count, obj_size, GFP_KERNEL); if (!out_alloc) return -ENOMEM; if (obj_size == in->stride) { if (copy_from_user(out_alloc, u64_to_user_ptr(in->array), (unsigned long)obj_size * in->count)) ret = -EFAULT; } else { void __user *in_ptr = u64_to_user_ptr(in->array); void *out_ptr = out_alloc; for (u32 i = 0; i < in->count; i++) { ret = copy_struct_from_user(out_ptr, obj_size, in_ptr, in->stride); if (ret) break; out_ptr += obj_size; in_ptr += in->stride; } } if (ret) { kvfree(out_alloc); return ret; } *out = out_alloc; return 0; } int pvr_set_uobj_array(const struct drm_pvr_obj_array *out, u32 min_stride, u32 obj_size, const void *in) { if (out->stride < min_stride) return -EINVAL; if (!out->count) return 0; if (obj_size == out->stride) { if (copy_to_user(u64_to_user_ptr(out->array), in, (unsigned long)obj_size * out->count)) return -EFAULT; } else { u32 cpy_elem_size = min_t(u32, out->stride, obj_size); void __user *out_ptr = u64_to_user_ptr(out->array); const void *in_ptr = in; for (u32 i = 0; i < out->count; i++) { if (copy_to_user(out_ptr, in_ptr, cpy_elem_size)) return -EFAULT; out_ptr += obj_size; in_ptr += out->stride; } if (out->stride > obj_size && clear_user(u64_to_user_ptr(out->array + obj_size), out->stride - obj_size)) { return -EFAULT; } } return 0; } #define DRM_PVR_IOCTL(_name, _func, _flags) \ DRM_IOCTL_DEF_DRV(PVR_##_name, pvr_ioctl_##_func, _flags) /* clang-format off */ static const struct drm_ioctl_desc pvr_drm_driver_ioctls[] = { DRM_PVR_IOCTL(DEV_QUERY, dev_query, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(CREATE_BO, create_bo, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(GET_BO_MMAP_OFFSET, get_bo_mmap_offset, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(CREATE_VM_CONTEXT, create_vm_context, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(DESTROY_VM_CONTEXT, destroy_vm_context, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(VM_MAP, vm_map, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(VM_UNMAP, vm_unmap, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(CREATE_CONTEXT, create_context, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(DESTROY_CONTEXT, destroy_context, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(CREATE_FREE_LIST, create_free_list, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(DESTROY_FREE_LIST, destroy_free_list, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(CREATE_HWRT_DATASET, create_hwrt_dataset, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(DESTROY_HWRT_DATASET, destroy_hwrt_dataset, DRM_RENDER_ALLOW), DRM_PVR_IOCTL(SUBMIT_JOBS, submit_jobs, DRM_RENDER_ALLOW), }; /* clang-format on */ #undef DRM_PVR_IOCTL /** * pvr_drm_driver_open() - Driver callback when a new &struct drm_file is opened * @drm_dev: [IN] DRM device. * @file: [IN] DRM file private data. * * Allocates powervr-specific file private data (&struct pvr_file). * * Registered in &pvr_drm_driver. * * Return: * * 0 on success, * * -%ENOMEM if the allocation of a &struct ipvr_file fails, or * * Any error returned by pvr_memory_context_init(). */ static int pvr_drm_driver_open(struct drm_device *drm_dev, struct drm_file *file) { struct pvr_device *pvr_dev = to_pvr_device(drm_dev); struct pvr_file *pvr_file; pvr_file = kzalloc(sizeof(*pvr_file), GFP_KERNEL); if (!pvr_file) return -ENOMEM; /* * Store reference to base DRM file private data for use by * from_pvr_file. */ pvr_file->file = file; /* * Store reference to powervr-specific outer device struct in file * private data for convenient access. */ pvr_file->pvr_dev = pvr_dev; INIT_LIST_HEAD(&pvr_file->contexts); xa_init_flags(&pvr_file->ctx_handles, XA_FLAGS_ALLOC1); xa_init_flags(&pvr_file->free_list_handles, XA_FLAGS_ALLOC1); xa_init_flags(&pvr_file->hwrt_handles, XA_FLAGS_ALLOC1); xa_init_flags(&pvr_file->vm_ctx_handles, XA_FLAGS_ALLOC1); /* * Store reference to powervr-specific file private data in DRM file * private data. */ file->driver_priv = pvr_file; return 0; } /** * pvr_drm_driver_postclose() - One of the driver callbacks when a &struct * drm_file is closed. * @drm_dev: [IN] DRM device (unused). * @file: [IN] DRM file private data. * * Frees powervr-specific file private data (&struct pvr_file). * * Registered in &pvr_drm_driver. */ static void pvr_drm_driver_postclose(__always_unused struct drm_device *drm_dev, struct drm_file *file) { struct pvr_file *pvr_file = to_pvr_file(file); /* Kill remaining contexts. */ pvr_destroy_contexts_for_file(pvr_file); /* Drop references on any remaining objects. */ pvr_destroy_free_lists_for_file(pvr_file); pvr_destroy_hwrt_datasets_for_file(pvr_file); pvr_destroy_vm_contexts_for_file(pvr_file); kfree(pvr_file); file->driver_priv = NULL; } DEFINE_DRM_GEM_FOPS(pvr_drm_driver_fops); static struct drm_driver pvr_drm_driver = { .driver_features = DRIVER_GEM | DRIVER_GEM_GPUVA | DRIVER_RENDER | DRIVER_SYNCOBJ | DRIVER_SYNCOBJ_TIMELINE, .open = pvr_drm_driver_open, .postclose = pvr_drm_driver_postclose, .ioctls = pvr_drm_driver_ioctls, .num_ioctls = ARRAY_SIZE(pvr_drm_driver_ioctls), .fops = &pvr_drm_driver_fops, #if defined(CONFIG_DEBUG_FS) .debugfs_init = pvr_debugfs_init, #endif .name = PVR_DRIVER_NAME, .desc = PVR_DRIVER_DESC, .date = PVR_DRIVER_DATE, .major = PVR_DRIVER_MAJOR, .minor = PVR_DRIVER_MINOR, .patchlevel = PVR_DRIVER_PATCHLEVEL, .gem_prime_import_sg_table = drm_gem_shmem_prime_import_sg_table, .gem_create_object = pvr_gem_create_object, }; static int pvr_probe(struct platform_device *plat_dev) { struct pvr_device *pvr_dev; struct drm_device *drm_dev; int err; pvr_dev = devm_drm_dev_alloc(&plat_dev->dev, &pvr_drm_driver, struct pvr_device, base); if (IS_ERR(pvr_dev)) return PTR_ERR(pvr_dev); drm_dev = &pvr_dev->base; platform_set_drvdata(plat_dev, drm_dev); init_rwsem(&pvr_dev->reset_sem); pvr_context_device_init(pvr_dev); err = pvr_queue_device_init(pvr_dev); if (err) goto err_context_fini; devm_pm_runtime_enable(&plat_dev->dev); pm_runtime_mark_last_busy(&plat_dev->dev); pm_runtime_set_autosuspend_delay(&plat_dev->dev, 50); pm_runtime_use_autosuspend(&plat_dev->dev); pvr_watchdog_init(pvr_dev); err = pvr_device_init(pvr_dev); if (err) goto err_watchdog_fini; err = drm_dev_register(drm_dev, 0); if (err) goto err_device_fini; xa_init_flags(&pvr_dev->free_list_ids, XA_FLAGS_ALLOC1); xa_init_flags(&pvr_dev->job_ids, XA_FLAGS_ALLOC1); return 0; err_device_fini: pvr_device_fini(pvr_dev); err_watchdog_fini: pvr_watchdog_fini(pvr_dev); pvr_queue_device_fini(pvr_dev); err_context_fini: pvr_context_device_fini(pvr_dev); return err; } static void pvr_remove(struct platform_device *plat_dev) { struct drm_device *drm_dev = platform_get_drvdata(plat_dev); struct pvr_device *pvr_dev = to_pvr_device(drm_dev); WARN_ON(!xa_empty(&pvr_dev->job_ids)); WARN_ON(!xa_empty(&pvr_dev->free_list_ids)); xa_destroy(&pvr_dev->job_ids); xa_destroy(&pvr_dev->free_list_ids); pm_runtime_suspend(drm_dev->dev); pvr_device_fini(pvr_dev); drm_dev_unplug(drm_dev); pvr_watchdog_fini(pvr_dev); pvr_queue_device_fini(pvr_dev); pvr_context_device_fini(pvr_dev); } static const struct of_device_id dt_match[] = { { .compatible = "img,img-axe", .data = NULL }, {} }; MODULE_DEVICE_TABLE(of, dt_match); static const struct dev_pm_ops pvr_pm_ops = { RUNTIME_PM_OPS(pvr_power_device_suspend, pvr_power_device_resume, pvr_power_device_idle) }; static struct platform_driver pvr_driver = { .probe = pvr_probe, .remove = pvr_remove, .driver = { .name = PVR_DRIVER_NAME, .pm = &pvr_pm_ops, .of_match_table = dt_match, }, }; module_platform_driver(pvr_driver); MODULE_AUTHOR("Imagination Technologies Ltd."); MODULE_DESCRIPTION(PVR_DRIVER_DESC); MODULE_LICENSE("Dual MIT/GPL"); MODULE_IMPORT_NS("DMA_BUF"); MODULE_FIRMWARE("powervr/rogue_33.15.11.3_v1.fw");