3 * Copyright (c) 2011 Samsung Electronics Co., Ltd.
4 * Author: Inki Dae <inki.dae@samsung.com>
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the
8 * Free Software Foundation; either version 2 of the License, or (at your
9 * option) any later version.
14 #include <linux/shmem_fs.h>
15 #include <drm/exynos_drm.h>
17 #include "exynos_drm_drv.h"
18 #include "exynos_drm_gem.h"
19 #include "exynos_drm_buf.h"
21 static unsigned int convert_to_vm_err_msg(int msg)
29 out_msg = VM_FAULT_NOPAGE;
33 out_msg = VM_FAULT_OOM;
37 out_msg = VM_FAULT_SIGBUS;
44 static int check_gem_flags(unsigned int flags)
46 if (flags & ~(EXYNOS_BO_MASK)) {
47 DRM_ERROR("invalid flags.\n");
54 static void update_vm_cache_attr(struct exynos_drm_gem_obj *obj,
55 struct vm_area_struct *vma)
57 DRM_DEBUG_KMS("flags = 0x%x\n", obj->flags);
59 /* non-cachable as default. */
60 if (obj->flags & EXYNOS_BO_CACHABLE)
61 vma->vm_page_prot = vm_get_page_prot(vma->vm_flags);
62 else if (obj->flags & EXYNOS_BO_WC)
64 pgprot_writecombine(vm_get_page_prot(vma->vm_flags));
67 pgprot_noncached(vm_get_page_prot(vma->vm_flags));
70 static unsigned long roundup_gem_size(unsigned long size, unsigned int flags)
74 return roundup(size, PAGE_SIZE);
77 static int exynos_drm_gem_map_buf(struct drm_gem_object *obj,
78 struct vm_area_struct *vma,
79 unsigned long f_vaddr,
82 struct exynos_drm_gem_obj *exynos_gem_obj = to_exynos_gem_obj(obj);
83 struct exynos_drm_gem_buf *buf = exynos_gem_obj->buffer;
84 struct scatterlist *sgl;
91 if (page_offset >= (buf->size >> PAGE_SHIFT)) {
92 DRM_ERROR("invalid page offset\n");
97 for_each_sg(buf->sgt->sgl, sgl, buf->sgt->nents, i) {
98 if (page_offset < (sgl->length >> PAGE_SHIFT))
100 page_offset -= (sgl->length >> PAGE_SHIFT);
103 pfn = __phys_to_pfn(sg_phys(sgl)) + page_offset;
105 return vm_insert_mixed(vma, f_vaddr, pfn);
108 static int exynos_drm_gem_handle_create(struct drm_gem_object *obj,
109 struct drm_file *file_priv,
110 unsigned int *handle)
115 * allocate a id of idr table where the obj is registered
116 * and handle has the id what user can see.
118 ret = drm_gem_handle_create(file_priv, obj, handle);
122 DRM_DEBUG_KMS("gem handle = 0x%x\n", *handle);
124 /* drop reference from allocate - handle holds it now. */
125 drm_gem_object_unreference_unlocked(obj);
130 void exynos_drm_gem_destroy(struct exynos_drm_gem_obj *exynos_gem_obj)
132 struct drm_gem_object *obj;
133 struct exynos_drm_gem_buf *buf;
135 DRM_DEBUG_KMS("%s\n", __FILE__);
137 obj = &exynos_gem_obj->base;
138 buf = exynos_gem_obj->buffer;
140 DRM_DEBUG_KMS("handle count = %d\n", atomic_read(&obj->handle_count));
143 * do not release memory region from exporter.
145 * the region will be released by exporter
146 * once dmabuf's refcount becomes 0.
148 if (obj->import_attach)
151 exynos_drm_free_buf(obj->dev, exynos_gem_obj->flags, buf);
154 exynos_drm_fini_buf(obj->dev, buf);
155 exynos_gem_obj->buffer = NULL;
157 if (obj->map_list.map)
158 drm_gem_free_mmap_offset(obj);
160 /* release file pointer to gem object. */
161 drm_gem_object_release(obj);
163 kfree(exynos_gem_obj);
164 exynos_gem_obj = NULL;
167 struct exynos_drm_gem_obj *exynos_drm_gem_init(struct drm_device *dev,
170 struct exynos_drm_gem_obj *exynos_gem_obj;
171 struct drm_gem_object *obj;
174 exynos_gem_obj = kzalloc(sizeof(*exynos_gem_obj), GFP_KERNEL);
175 if (!exynos_gem_obj) {
176 DRM_ERROR("failed to allocate exynos gem object\n");
180 exynos_gem_obj->size = size;
181 obj = &exynos_gem_obj->base;
183 ret = drm_gem_object_init(dev, obj, size);
185 DRM_ERROR("failed to initialize gem object\n");
186 kfree(exynos_gem_obj);
190 DRM_DEBUG_KMS("created file object = 0x%x\n", (unsigned int)obj->filp);
192 return exynos_gem_obj;
195 struct exynos_drm_gem_obj *exynos_drm_gem_create(struct drm_device *dev,
199 struct exynos_drm_gem_obj *exynos_gem_obj;
200 struct exynos_drm_gem_buf *buf;
204 DRM_ERROR("invalid size.\n");
205 return ERR_PTR(-EINVAL);
208 size = roundup_gem_size(size, flags);
209 DRM_DEBUG_KMS("%s\n", __FILE__);
211 ret = check_gem_flags(flags);
215 buf = exynos_drm_init_buf(dev, size);
217 return ERR_PTR(-ENOMEM);
219 exynos_gem_obj = exynos_drm_gem_init(dev, size);
220 if (!exynos_gem_obj) {
225 exynos_gem_obj->buffer = buf;
227 /* set memory type and cache attribute from user side. */
228 exynos_gem_obj->flags = flags;
230 ret = exynos_drm_alloc_buf(dev, buf, flags);
232 drm_gem_object_release(&exynos_gem_obj->base);
236 return exynos_gem_obj;
239 exynos_drm_fini_buf(dev, buf);
243 int exynos_drm_gem_create_ioctl(struct drm_device *dev, void *data,
244 struct drm_file *file_priv)
246 struct drm_exynos_gem_create *args = data;
247 struct exynos_drm_gem_obj *exynos_gem_obj;
250 DRM_DEBUG_KMS("%s\n", __FILE__);
252 exynos_gem_obj = exynos_drm_gem_create(dev, args->flags, args->size);
253 if (IS_ERR(exynos_gem_obj))
254 return PTR_ERR(exynos_gem_obj);
256 ret = exynos_drm_gem_handle_create(&exynos_gem_obj->base, file_priv,
259 exynos_drm_gem_destroy(exynos_gem_obj);
266 dma_addr_t *exynos_drm_gem_get_dma_addr(struct drm_device *dev,
267 unsigned int gem_handle,
268 struct drm_file *filp)
270 struct exynos_drm_gem_obj *exynos_gem_obj;
271 struct drm_gem_object *obj;
273 obj = drm_gem_object_lookup(dev, filp, gem_handle);
275 DRM_ERROR("failed to lookup gem object.\n");
276 return ERR_PTR(-EINVAL);
279 exynos_gem_obj = to_exynos_gem_obj(obj);
281 return &exynos_gem_obj->buffer->dma_addr;
284 void exynos_drm_gem_put_dma_addr(struct drm_device *dev,
285 unsigned int gem_handle,
286 struct drm_file *filp)
288 struct exynos_drm_gem_obj *exynos_gem_obj;
289 struct drm_gem_object *obj;
291 obj = drm_gem_object_lookup(dev, filp, gem_handle);
293 DRM_ERROR("failed to lookup gem object.\n");
297 exynos_gem_obj = to_exynos_gem_obj(obj);
299 drm_gem_object_unreference_unlocked(obj);
302 * decrease obj->refcount one more time because we has already
303 * increased it at exynos_drm_gem_get_dma_addr().
305 drm_gem_object_unreference_unlocked(obj);
308 int exynos_drm_gem_map_offset_ioctl(struct drm_device *dev, void *data,
309 struct drm_file *file_priv)
311 struct drm_exynos_gem_map_off *args = data;
313 DRM_DEBUG_KMS("%s\n", __FILE__);
315 DRM_DEBUG_KMS("handle = 0x%x, offset = 0x%lx\n",
316 args->handle, (unsigned long)args->offset);
318 if (!(dev->driver->driver_features & DRIVER_GEM)) {
319 DRM_ERROR("does not support GEM.\n");
323 return exynos_drm_gem_dumb_map_offset(file_priv, dev, args->handle,
327 static struct drm_file *exynos_drm_find_drm_file(struct drm_device *drm_dev,
330 struct drm_file *file_priv;
332 /* find current process's drm_file from filelist. */
333 list_for_each_entry(file_priv, &drm_dev->filelist, lhead)
334 if (file_priv->filp == filp)
339 return ERR_PTR(-EFAULT);
342 static int exynos_drm_gem_mmap_buffer(struct file *filp,
343 struct vm_area_struct *vma)
345 struct drm_gem_object *obj = filp->private_data;
346 struct exynos_drm_gem_obj *exynos_gem_obj = to_exynos_gem_obj(obj);
347 struct drm_device *drm_dev = obj->dev;
348 struct exynos_drm_gem_buf *buffer;
349 struct drm_file *file_priv;
350 unsigned long vm_size;
353 DRM_DEBUG_KMS("%s\n", __FILE__);
355 vma->vm_flags |= VM_IO | VM_DONTEXPAND | VM_DONTDUMP;
356 vma->vm_private_data = obj;
357 vma->vm_ops = drm_dev->driver->gem_vm_ops;
359 /* restore it to driver's fops. */
360 filp->f_op = fops_get(drm_dev->driver->fops);
362 file_priv = exynos_drm_find_drm_file(drm_dev, filp);
363 if (IS_ERR(file_priv))
364 return PTR_ERR(file_priv);
366 /* restore it to drm_file. */
367 filp->private_data = file_priv;
369 update_vm_cache_attr(exynos_gem_obj, vma);
371 vm_size = vma->vm_end - vma->vm_start;
374 * a buffer contains information to physically continuous memory
375 * allocated by user request or at framebuffer creation.
377 buffer = exynos_gem_obj->buffer;
379 /* check if user-requested size is valid. */
380 if (vm_size > buffer->size)
383 ret = dma_mmap_attrs(drm_dev->dev, vma, buffer->pages,
384 buffer->dma_addr, buffer->size,
387 DRM_ERROR("failed to mmap.\n");
392 * take a reference to this mapping of the object. And this reference
393 * is unreferenced by the corresponding vm_close call.
395 drm_gem_object_reference(obj);
397 drm_vm_open_locked(drm_dev, vma);
402 static const struct file_operations exynos_drm_gem_fops = {
403 .mmap = exynos_drm_gem_mmap_buffer,
406 int exynos_drm_gem_mmap_ioctl(struct drm_device *dev, void *data,
407 struct drm_file *file_priv)
409 struct drm_exynos_gem_mmap *args = data;
410 struct drm_gem_object *obj;
413 DRM_DEBUG_KMS("%s\n", __FILE__);
415 if (!(dev->driver->driver_features & DRIVER_GEM)) {
416 DRM_ERROR("does not support GEM.\n");
420 obj = drm_gem_object_lookup(dev, file_priv, args->handle);
422 DRM_ERROR("failed to lookup gem object.\n");
427 * We have to use gem object and its fops for specific mmaper,
428 * but vm_mmap() can deliver only filp. So we have to change
429 * filp->f_op and filp->private_data temporarily, then restore
430 * again. So it is important to keep lock until restoration the
431 * settings to prevent others from misuse of filp->f_op or
432 * filp->private_data.
434 mutex_lock(&dev->struct_mutex);
437 * Set specific mmper's fops. And it will be restored by
438 * exynos_drm_gem_mmap_buffer to dev->driver->fops.
439 * This is used to call specific mapper temporarily.
441 file_priv->filp->f_op = &exynos_drm_gem_fops;
444 * Set gem object to private_data so that specific mmaper
445 * can get the gem object. And it will be restored by
446 * exynos_drm_gem_mmap_buffer to drm_file.
448 file_priv->filp->private_data = obj;
450 addr = vm_mmap(file_priv->filp, 0, args->size,
451 PROT_READ | PROT_WRITE, MAP_SHARED, 0);
453 drm_gem_object_unreference(obj);
455 if (IS_ERR((void *)addr)) {
456 /* check filp->f_op, filp->private_data are restored */
457 if (file_priv->filp->f_op == &exynos_drm_gem_fops) {
458 file_priv->filp->f_op = fops_get(dev->driver->fops);
459 file_priv->filp->private_data = file_priv;
461 mutex_unlock(&dev->struct_mutex);
462 return PTR_ERR((void *)addr);
465 mutex_unlock(&dev->struct_mutex);
469 DRM_DEBUG_KMS("mapped = 0x%lx\n", (unsigned long)args->mapped);
474 int exynos_drm_gem_get_ioctl(struct drm_device *dev, void *data,
475 struct drm_file *file_priv)
476 { struct exynos_drm_gem_obj *exynos_gem_obj;
477 struct drm_exynos_gem_info *args = data;
478 struct drm_gem_object *obj;
480 mutex_lock(&dev->struct_mutex);
482 obj = drm_gem_object_lookup(dev, file_priv, args->handle);
484 DRM_ERROR("failed to lookup gem object.\n");
485 mutex_unlock(&dev->struct_mutex);
489 exynos_gem_obj = to_exynos_gem_obj(obj);
491 args->flags = exynos_gem_obj->flags;
492 args->size = exynos_gem_obj->size;
494 drm_gem_object_unreference(obj);
495 mutex_unlock(&dev->struct_mutex);
500 struct vm_area_struct *exynos_gem_get_vma(struct vm_area_struct *vma)
502 struct vm_area_struct *vma_copy;
504 vma_copy = kmalloc(sizeof(*vma_copy), GFP_KERNEL);
508 if (vma->vm_ops && vma->vm_ops->open)
509 vma->vm_ops->open(vma);
512 get_file(vma->vm_file);
514 memcpy(vma_copy, vma, sizeof(*vma));
516 vma_copy->vm_mm = NULL;
517 vma_copy->vm_next = NULL;
518 vma_copy->vm_prev = NULL;
523 void exynos_gem_put_vma(struct vm_area_struct *vma)
528 if (vma->vm_ops && vma->vm_ops->close)
529 vma->vm_ops->close(vma);
537 int exynos_gem_get_pages_from_userptr(unsigned long start,
540 struct vm_area_struct *vma)
544 /* the memory region mmaped with VM_PFNMAP. */
545 if (vma_is_io(vma)) {
548 for (i = 0; i < npages; ++i, start += PAGE_SIZE) {
550 int ret = follow_pfn(vma, start, &pfn);
554 pages[i] = pfn_to_page(pfn);
558 DRM_ERROR("failed to get user_pages.\n");
565 get_npages = get_user_pages(current, current->mm, start,
566 npages, 1, 1, pages, NULL);
567 get_npages = max(get_npages, 0);
568 if (get_npages != npages) {
569 DRM_ERROR("failed to get user_pages.\n");
571 put_page(pages[--get_npages]);
578 void exynos_gem_put_pages_to_userptr(struct page **pages,
580 struct vm_area_struct *vma)
582 if (!vma_is_io(vma)) {
585 for (i = 0; i < npages; i++) {
586 set_page_dirty_lock(pages[i]);
589 * undo the reference we took when populating
597 int exynos_gem_map_sgt_with_dma(struct drm_device *drm_dev,
598 struct sg_table *sgt,
599 enum dma_data_direction dir)
603 mutex_lock(&drm_dev->struct_mutex);
605 nents = dma_map_sg(drm_dev->dev, sgt->sgl, sgt->nents, dir);
607 DRM_ERROR("failed to map sgl with dma.\n");
608 mutex_unlock(&drm_dev->struct_mutex);
612 mutex_unlock(&drm_dev->struct_mutex);
616 void exynos_gem_unmap_sgt_from_dma(struct drm_device *drm_dev,
617 struct sg_table *sgt,
618 enum dma_data_direction dir)
620 dma_unmap_sg(drm_dev->dev, sgt->sgl, sgt->nents, dir);
623 int exynos_drm_gem_init_object(struct drm_gem_object *obj)
625 DRM_DEBUG_KMS("%s\n", __FILE__);
630 void exynos_drm_gem_free_object(struct drm_gem_object *obj)
632 struct exynos_drm_gem_obj *exynos_gem_obj;
633 struct exynos_drm_gem_buf *buf;
635 DRM_DEBUG_KMS("%s\n", __FILE__);
637 exynos_gem_obj = to_exynos_gem_obj(obj);
638 buf = exynos_gem_obj->buffer;
640 if (obj->import_attach)
641 drm_prime_gem_destroy(obj, buf->sgt);
643 exynos_drm_gem_destroy(to_exynos_gem_obj(obj));
646 int exynos_drm_gem_dumb_create(struct drm_file *file_priv,
647 struct drm_device *dev,
648 struct drm_mode_create_dumb *args)
650 struct exynos_drm_gem_obj *exynos_gem_obj;
653 DRM_DEBUG_KMS("%s\n", __FILE__);
656 * alocate memory to be used for framebuffer.
657 * - this callback would be called by user application
658 * with DRM_IOCTL_MODE_CREATE_DUMB command.
661 args->pitch = args->width * ((args->bpp + 7) / 8);
662 args->size = args->pitch * args->height;
664 exynos_gem_obj = exynos_drm_gem_create(dev, args->flags, args->size);
665 if (IS_ERR(exynos_gem_obj))
666 return PTR_ERR(exynos_gem_obj);
668 ret = exynos_drm_gem_handle_create(&exynos_gem_obj->base, file_priv,
671 exynos_drm_gem_destroy(exynos_gem_obj);
678 int exynos_drm_gem_dumb_map_offset(struct drm_file *file_priv,
679 struct drm_device *dev, uint32_t handle,
682 struct drm_gem_object *obj;
685 DRM_DEBUG_KMS("%s\n", __FILE__);
687 mutex_lock(&dev->struct_mutex);
690 * get offset of memory allocated for drm framebuffer.
691 * - this callback would be called by user application
692 * with DRM_IOCTL_MODE_MAP_DUMB command.
695 obj = drm_gem_object_lookup(dev, file_priv, handle);
697 DRM_ERROR("failed to lookup gem object.\n");
702 if (!obj->map_list.map) {
703 ret = drm_gem_create_mmap_offset(obj);
708 *offset = (u64)obj->map_list.hash.key << PAGE_SHIFT;
709 DRM_DEBUG_KMS("offset = 0x%lx\n", (unsigned long)*offset);
712 drm_gem_object_unreference(obj);
714 mutex_unlock(&dev->struct_mutex);
718 int exynos_drm_gem_dumb_destroy(struct drm_file *file_priv,
719 struct drm_device *dev,
724 DRM_DEBUG_KMS("%s\n", __FILE__);
727 * obj->refcount and obj->handle_count are decreased and
728 * if both them are 0 then exynos_drm_gem_free_object()
729 * would be called by callback to release resources.
731 ret = drm_gem_handle_delete(file_priv, handle);
733 DRM_ERROR("failed to delete drm_gem_handle.\n");
740 int exynos_drm_gem_fault(struct vm_area_struct *vma, struct vm_fault *vmf)
742 struct drm_gem_object *obj = vma->vm_private_data;
743 struct drm_device *dev = obj->dev;
744 unsigned long f_vaddr;
748 page_offset = ((unsigned long)vmf->virtual_address -
749 vma->vm_start) >> PAGE_SHIFT;
750 f_vaddr = (unsigned long)vmf->virtual_address;
752 mutex_lock(&dev->struct_mutex);
754 ret = exynos_drm_gem_map_buf(obj, vma, f_vaddr, page_offset);
756 DRM_ERROR("failed to map a buffer with user.\n");
758 mutex_unlock(&dev->struct_mutex);
760 return convert_to_vm_err_msg(ret);
763 int exynos_drm_gem_mmap(struct file *filp, struct vm_area_struct *vma)
765 struct exynos_drm_gem_obj *exynos_gem_obj;
766 struct drm_gem_object *obj;
769 DRM_DEBUG_KMS("%s\n", __FILE__);
771 /* set vm_area_struct. */
772 ret = drm_gem_mmap(filp, vma);
774 DRM_ERROR("failed to mmap.\n");
778 obj = vma->vm_private_data;
779 exynos_gem_obj = to_exynos_gem_obj(obj);
781 ret = check_gem_flags(exynos_gem_obj->flags);
783 drm_gem_vm_close(vma);
784 drm_gem_free_mmap_offset(obj);
788 vma->vm_flags &= ~VM_PFNMAP;
789 vma->vm_flags |= VM_MIXEDMAP;
791 update_vm_cache_attr(exynos_gem_obj, vma);