drivers/gpu/drm/nouveau/nouveau_gem.c

   1 /*
   2  * Copyright (C) 2008 Ben Skeggs.
   3  * All Rights Reserved.
   4  *
   5  * Permission is hereby granted, free of charge, to any person obtaining
   6  * a copy of this software and associated documentation files (the
   7  * "Software"), to deal in the Software without restriction, including
   8  * without limitation the rights to use, copy, modify, merge, publish,
   9  * distribute, sublicense, and/or sell copies of the Software, and to
  10  * permit persons to whom the Software is furnished to do so, subject to
  11  * the following conditions:
  12  *
  13  * The above copyright notice and this permission notice (including the
  14  * next paragraph) shall be included in all copies or substantial
  15  * portions of the Software.
  16  *
  17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  18  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  19  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
  20  * IN NO EVENT SHALL THE COPYRIGHT OWNER(S) AND/OR ITS SUPPLIERS BE
  21  * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
  22  * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
  23  * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  24  *
  25  */
  26 #include "drmP.h"
  27 #include "drm.h"
  28
  29 #include "nouveau_drv.h"
  30 #include "nouveau_drm.h"
  31 #include "nouveau_dma.h"
  32
  33 #define nouveau_gem_pushbuf_sync(chan) 0
  34
  35 int
  36 nouveau_gem_object_new(struct drm_gem_object *gem)
  37 {
  38         return 0;
  39 }
  40
  41 void
  42 nouveau_gem_object_del(struct drm_gem_object *gem)
  43 {
  44         struct nouveau_bo *nvbo = gem->driver_private;
  45         struct ttm_buffer_object *bo = &nvbo->bo;
  46
  47         if (!nvbo)
  48                 return;
  49         nvbo->gem = NULL;
  50
  51         if (unlikely(nvbo->pin_refcnt)) {
  52                 nvbo->pin_refcnt = 1;
  53                 nouveau_bo_unpin(nvbo);
  54         }
  55
  56         ttm_bo_unref(&bo);
  57
  58         drm_gem_object_release(gem);
  59         kfree(gem);
  60 }
  61
  62 int
  63 nouveau_gem_new(struct drm_device *dev, struct nouveau_channel *chan,
  64                 int size, int align, uint32_t flags, uint32_t tile_mode,
  65                 uint32_t tile_flags, bool no_vm, bool mappable,
  66                 struct nouveau_bo **pnvbo)
  67 {
  68         struct nouveau_bo *nvbo;
  69         int ret;
  70
  71         ret = nouveau_bo_new(dev, chan, size, align, flags, tile_mode,
  72                              tile_flags, no_vm, mappable, pnvbo);
  73         if (ret)
  74                 return ret;
  75         nvbo = *pnvbo;
  76
  77         nvbo->gem = drm_gem_object_alloc(dev, nvbo->bo.mem.size);
  78         if (!nvbo->gem) {
  79                 nouveau_bo_ref(NULL, pnvbo);
  80                 return -ENOMEM;
  81         }
  82
  83         nvbo->bo.persistant_swap_storage = nvbo->gem->filp;
  84         nvbo->gem->driver_private = nvbo;
  85         return 0;
  86 }
  87
  88 static int
  89 nouveau_gem_info(struct drm_gem_object *gem, struct drm_nouveau_gem_info *rep)
  90 {
  91         struct nouveau_bo *nvbo = nouveau_gem_object(gem);
  92
  93         if (nvbo->bo.mem.mem_type == TTM_PL_TT)
  94                 rep->domain = NOUVEAU_GEM_DOMAIN_GART;
  95         else
  96                 rep->domain = NOUVEAU_GEM_DOMAIN_VRAM;
  97
  98         rep->size = nvbo->bo.mem.num_pages << PAGE_SHIFT;
  99         rep->offset = nvbo->bo.offset;
 100         rep->map_handle = nvbo->mappable ? nvbo->bo.addr_space_offset : 0;
 101         rep->tile_mode = nvbo->tile_mode;
 102         rep->tile_flags = nvbo->tile_flags;
 103         return 0;
 104 }
 105
 106 static bool
 107 nouveau_gem_tile_flags_valid(struct drm_device *dev, uint32_t tile_flags)
 108 {
 109         struct drm_nouveau_private *dev_priv = dev->dev_private;
 110
 111         if (dev_priv->card_type >= NV_50) {
 112                 switch (tile_flags & NOUVEAU_GEM_TILE_LAYOUT_MASK) {
 113                 case 0x0000:
 114                 case 0x1800:
 115                 case 0x2800:
 116                 case 0x4800:
 117                 case 0x7000:
 118                 case 0x7400:
 119                 case 0x7a00:
 120                 case 0xe000:
 121                         return true;
 122                 }
 123         } else {
 124                 if (!(tile_flags & NOUVEAU_GEM_TILE_LAYOUT_MASK))
 125                         return true;
 126         }
 127
 128         NV_ERROR(dev, "bad page flags: 0x%08x\n", tile_flags);
 129         return false;
 130 }
 131
 132 int
 133 nouveau_gem_ioctl_new(struct drm_device *dev, void *data,
 134                       struct drm_file *file_priv)
 135 {
 136         struct drm_nouveau_private *dev_priv = dev->dev_private;
 137         struct drm_nouveau_gem_new *req = data;
 138         struct nouveau_bo *nvbo = NULL;
 139         struct nouveau_channel *chan = NULL;
 140         uint32_t flags = 0;
 141         int ret = 0;
 142
 143         if (unlikely(dev_priv->ttm.bdev.dev_mapping == NULL))
 144                 dev_priv->ttm.bdev.dev_mapping = dev_priv->dev->dev_mapping;
 145
 146         if (req->info.domain & NOUVEAU_GEM_DOMAIN_VRAM)
 147                 flags |= TTM_PL_FLAG_VRAM;
 148         if (req->info.domain & NOUVEAU_GEM_DOMAIN_GART)
 149                 flags |= TTM_PL_FLAG_TT;
 150         if (!flags || req->info.domain & NOUVEAU_GEM_DOMAIN_CPU)
 151                 flags |= TTM_PL_FLAG_SYSTEM;
 152
 153         if (!nouveau_gem_tile_flags_valid(dev, req->info.tile_flags))
 154                 return -EINVAL;
 155
 156         if (req->channel_hint) {
 157                 chan = nouveau_channel_get(dev, file_priv, req->channel_hint);
 158                 if (IS_ERR(chan))
 159                         return PTR_ERR(chan);
 160         }
 161
 162         ret = nouveau_gem_new(dev, chan, req->info.size, req->align, flags,
 163                               req->info.tile_mode, req->info.tile_flags, false,
 164                               (req->info.domain & NOUVEAU_GEM_DOMAIN_MAPPABLE),
 165                               &nvbo);
 166         if (chan)
 167                 nouveau_channel_put(&chan);
 168         if (ret)
 169                 return ret;
 170
 171         ret = nouveau_gem_info(nvbo->gem, &req->info);
 172         if (ret)
 173                 goto out;
 174
 175         ret = drm_gem_handle_create(file_priv, nvbo->gem, &req->info.handle);
 176         /* drop reference from allocate - handle holds it now */
 177         drm_gem_object_unreference_unlocked(nvbo->gem);
 178 out:
 179         return ret;
 180 }
 181
 182 static int
 183 nouveau_gem_set_domain(struct drm_gem_object *gem, uint32_t read_domains,
 184                        uint32_t write_domains, uint32_t valid_domains)
 185 {
 186         struct nouveau_bo *nvbo = gem->driver_private;
 187         struct ttm_buffer_object *bo = &nvbo->bo;
 188         uint32_t domains = valid_domains &
 189                 (write_domains ? write_domains : read_domains);
 190         uint32_t pref_flags = 0, valid_flags = 0;
 191
 192         if (!domains)
 193                 return -EINVAL;
 194
 195         if (valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
 196                 valid_flags |= TTM_PL_FLAG_VRAM;
 197
 198         if (valid_domains & NOUVEAU_GEM_DOMAIN_GART)
 199                 valid_flags |= TTM_PL_FLAG_TT;
 200
 201         if ((domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
 202             bo->mem.mem_type == TTM_PL_VRAM)
 203                 pref_flags |= TTM_PL_FLAG_VRAM;
 204
 205         else if ((domains & NOUVEAU_GEM_DOMAIN_GART) &&
 206                  bo->mem.mem_type == TTM_PL_TT)
 207                 pref_flags |= TTM_PL_FLAG_TT;
 208
 209         else if (domains & NOUVEAU_GEM_DOMAIN_VRAM)
 210                 pref_flags |= TTM_PL_FLAG_VRAM;
 211
 212         else
 213                 pref_flags |= TTM_PL_FLAG_TT;
 214
 215         nouveau_bo_placement_set(nvbo, pref_flags, valid_flags);
 216
 217         return 0;
 218 }
 219
 220 struct validate_op {
 221         struct list_head vram_list;
 222         struct list_head gart_list;
 223         struct list_head both_list;
 224 };
 225
 226 static void
 227 validate_fini_list(struct list_head *list, struct nouveau_fence *fence)
 228 {
 229         struct list_head *entry, *tmp;
 230         struct nouveau_bo *nvbo;
 231
 232         list_for_each_safe(entry, tmp, list) {
 233                 nvbo = list_entry(entry, struct nouveau_bo, entry);
 234
 235                 nouveau_bo_fence(nvbo, fence);
 236
 237                 if (unlikely(nvbo->validate_mapped)) {
 238                         ttm_bo_kunmap(&nvbo->kmap);
 239                         nvbo->validate_mapped = false;
 240                 }
 241
 242                 list_del(&nvbo->entry);
 243                 nvbo->reserved_by = NULL;
 244                 ttm_bo_unreserve(&nvbo->bo);
 245                 drm_gem_object_unreference_unlocked(nvbo->gem);
 246         }
 247 }
 248
 249 static void
 250 validate_fini(struct validate_op *op, struct nouveau_fence* fence)
 251 {
 252         validate_fini_list(&op->vram_list, fence);
 253         validate_fini_list(&op->gart_list, fence);
 254         validate_fini_list(&op->both_list, fence);
 255 }
 256
 257 static int
 258 validate_init(struct nouveau_channel *chan, struct drm_file *file_priv,
 259               struct drm_nouveau_gem_pushbuf_bo *pbbo,
 260               int nr_buffers, struct validate_op *op)
 261 {
 262         struct drm_device *dev = chan->dev;
 263         struct drm_nouveau_private *dev_priv = dev->dev_private;
 264         uint32_t sequence;
 265         int trycnt = 0;
 266         int ret, i;
 267
 268         sequence = atomic_add_return(1, &dev_priv->ttm.validate_sequence);
 269 retry:
 270         if (++trycnt > 100000) {
 271                 NV_ERROR(dev, "%s failed and gave up.\n", __func__);
 272                 return -EINVAL;
 273         }
 274
 275         for (i = 0; i < nr_buffers; i++) {
 276                 struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[i];
 277                 struct drm_gem_object *gem;
 278                 struct nouveau_bo *nvbo;
 279
 280                 gem = drm_gem_object_lookup(dev, file_priv, b->handle);
 281                 if (!gem) {
 282                         NV_ERROR(dev, "Unknown handle 0x%08x\n", b->handle);
 283                         validate_fini(op, NULL);
 284                         return -ENOENT;
 285                 }
 286                 nvbo = gem->driver_private;
 287
 288                 if (nvbo->reserved_by && nvbo->reserved_by == file_priv) {
 289                         NV_ERROR(dev, "multiple instances of buffer %d on "
 290                                       "validation list\n", b->handle);
 291                         validate_fini(op, NULL);
 292                         return -EINVAL;
 293                 }
 294
 295                 ret = ttm_bo_reserve(&nvbo->bo, true, false, true, sequence);
 296                 if (ret) {
 297                         validate_fini(op, NULL);
 298                         if (unlikely(ret == -EAGAIN))
 299                                 ret = ttm_bo_wait_unreserved(&nvbo->bo, true);
 300                         drm_gem_object_unreference_unlocked(gem);
 301                         if (unlikely(ret)) {
 302                                 if (ret != -ERESTARTSYS)
 303                                         NV_ERROR(dev, "fail reserve\n");
 304                                 return ret;
 305                         }
 306                         goto retry;
 307                 }
 308
 309                 b->user_priv = (uint64_t)(unsigned long)nvbo;
 310                 nvbo->reserved_by = file_priv;
 311                 nvbo->pbbo_index = i;
 312                 if ((b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
 313                     (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART))
 314                         list_add_tail(&nvbo->entry, &op->both_list);
 315                 else
 316                 if (b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
 317                         list_add_tail(&nvbo->entry, &op->vram_list);
 318                 else
 319                 if (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART)
 320                         list_add_tail(&nvbo->entry, &op->gart_list);
 321                 else {
 322                         NV_ERROR(dev, "invalid valid domains: 0x%08x\n",
 323                                  b->valid_domains);
 324                         list_add_tail(&nvbo->entry, &op->both_list);
 325                         validate_fini(op, NULL);
 326                         return -EINVAL;
 327                 }
 328         }
 329
 330         return 0;
 331 }
 332
 333 static int
 334 validate_list(struct nouveau_channel *chan, struct list_head *list,
 335               struct drm_nouveau_gem_pushbuf_bo *pbbo, uint64_t user_pbbo_ptr)
 336 {
 337         struct drm_nouveau_gem_pushbuf_bo __user *upbbo =
 338                                 (void __force __user *)(uintptr_t)user_pbbo_ptr;
 339         struct drm_device *dev = chan->dev;
 340         struct nouveau_bo *nvbo;
 341         int ret, relocs = 0;
 342
 343         list_for_each_entry(nvbo, list, entry) {
 344                 struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[nvbo->pbbo_index];
 345
 346                 ret = nouveau_fence_sync(nvbo->bo.sync_obj, chan);
 347                 if (unlikely(ret)) {
 348                         NV_ERROR(dev, "fail pre-validate sync\n");
 349                         return ret;
 350                 }
 351
 352                 ret = nouveau_gem_set_domain(nvbo->gem, b->read_domains,
 353                                              b->write_domains,
 354                                              b->valid_domains);
 355                 if (unlikely(ret)) {
 356                         NV_ERROR(dev, "fail set_domain\n");
 357                         return ret;
 358                 }
 359
 360                 nvbo->channel = (b->read_domains & (1 << 31)) ? NULL : chan;
 361                 ret = nouveau_bo_validate(nvbo, true, false, false);
 362                 nvbo->channel = NULL;
 363                 if (unlikely(ret)) {
 364                         if (ret != -ERESTARTSYS)
 365                                 NV_ERROR(dev, "fail ttm_validate\n");
 366                         return ret;
 367                 }
 368
 369                 ret = nouveau_fence_sync(nvbo->bo.sync_obj, chan);
 370                 if (unlikely(ret)) {
 371                         NV_ERROR(dev, "fail post-validate sync\n");
 372                         return ret;
 373                 }
 374
 375                 if (nvbo->bo.offset == b->presumed.offset &&
 376                     ((nvbo->bo.mem.mem_type == TTM_PL_VRAM &&
 377                       b->presumed.domain & NOUVEAU_GEM_DOMAIN_VRAM) ||
 378                      (nvbo->bo.mem.mem_type == TTM_PL_TT &&
 379                       b->presumed.domain & NOUVEAU_GEM_DOMAIN_GART)))
 380                         continue;
 381
 382                 if (nvbo->bo.mem.mem_type == TTM_PL_TT)
 383                         b->presumed.domain = NOUVEAU_GEM_DOMAIN_GART;
 384                 else
 385                         b->presumed.domain = NOUVEAU_GEM_DOMAIN_VRAM;
 386                 b->presumed.offset = nvbo->bo.offset;
 387                 b->presumed.valid = 0;
 388                 relocs++;
 389
 390                 if (DRM_COPY_TO_USER(&upbbo[nvbo->pbbo_index].presumed,
 391                                      &b->presumed, sizeof(b->presumed)))
 392                         return -EFAULT;
 393         }
 394
 395         return relocs;
 396 }
 397
 398 static int
 399 nouveau_gem_pushbuf_validate(struct nouveau_channel *chan,
 400                              struct drm_file *file_priv,
 401                              struct drm_nouveau_gem_pushbuf_bo *pbbo,
 402                              uint64_t user_buffers, int nr_buffers,
 403                              struct validate_op *op, int *apply_relocs)
 404 {
 405         struct drm_device *dev = chan->dev;
 406         int ret, relocs = 0;
 407
 408         INIT_LIST_HEAD(&op->vram_list);
 409         INIT_LIST_HEAD(&op->gart_list);
 410         INIT_LIST_HEAD(&op->both_list);
 411
 412         if (nr_buffers == 0)
 413                 return 0;
 414
 415         ret = validate_init(chan, file_priv, pbbo, nr_buffers, op);
 416         if (unlikely(ret)) {
 417                 if (ret != -ERESTARTSYS)
 418                         NV_ERROR(dev, "validate_init\n");
 419                 return ret;
 420         }
 421
 422         ret = validate_list(chan, &op->vram_list, pbbo, user_buffers);
 423         if (unlikely(ret < 0)) {
 424                 if (ret != -ERESTARTSYS)
 425                         NV_ERROR(dev, "validate vram_list\n");
 426                 validate_fini(op, NULL);
 427                 return ret;
 428         }
 429         relocs += ret;
 430
 431         ret = validate_list(chan, &op->gart_list, pbbo, user_buffers);
 432         if (unlikely(ret < 0)) {
 433                 if (ret != -ERESTARTSYS)
 434                         NV_ERROR(dev, "validate gart_list\n");
 435                 validate_fini(op, NULL);
 436                 return ret;
 437         }
 438         relocs += ret;
 439
 440         ret = validate_list(chan, &op->both_list, pbbo, user_buffers);
 441         if (unlikely(ret < 0)) {
 442                 if (ret != -ERESTARTSYS)
 443                         NV_ERROR(dev, "validate both_list\n");
 444                 validate_fini(op, NULL);
 445                 return ret;
 446         }
 447         relocs += ret;
 448
 449         *apply_relocs = relocs;
 450         return 0;
 451 }
 452
 453 static inline void *
 454 u_memcpya(uint64_t user, unsigned nmemb, unsigned size)
 455 {
 456         void *mem;
 457         void __user *userptr = (void __force __user *)(uintptr_t)user;
 458
 459         mem = kmalloc(nmemb * size, GFP_KERNEL);
 460         if (!mem)
 461                 return ERR_PTR(-ENOMEM);
 462
 463         if (DRM_COPY_FROM_USER(mem, userptr, nmemb * size)) {
 464                 kfree(mem);
 465                 return ERR_PTR(-EFAULT);
 466         }
 467
 468         return mem;
 469 }
 470
 471 static int
 472 nouveau_gem_pushbuf_reloc_apply(struct drm_device *dev,
 473                                 struct drm_nouveau_gem_pushbuf *req,
 474                                 struct drm_nouveau_gem_pushbuf_bo *bo)
 475 {
 476         struct drm_nouveau_gem_pushbuf_reloc *reloc = NULL;
 477         int ret = 0;
 478         unsigned i;
 479
 480         reloc = u_memcpya(req->relocs, req->nr_relocs, sizeof(*reloc));
 481         if (IS_ERR(reloc))
 482                 return PTR_ERR(reloc);
 483
 484         for (i = 0; i < req->nr_relocs; i++) {
 485                 struct drm_nouveau_gem_pushbuf_reloc *r = &reloc[i];
 486                 struct drm_nouveau_gem_pushbuf_bo *b;
 487                 struct nouveau_bo *nvbo;
 488                 uint32_t data;
 489
 490                 if (unlikely(r->bo_index > req->nr_buffers)) {
 491                         NV_ERROR(dev, "reloc bo index invalid\n");
 492                         ret = -EINVAL;
 493                         break;
 494                 }
 495
 496                 b = &bo[r->bo_index];
 497                 if (b->presumed.valid)
 498                         continue;
 499
 500                 if (unlikely(r->reloc_bo_index > req->nr_buffers)) {
 501                         NV_ERROR(dev, "reloc container bo index invalid\n");
 502                         ret = -EINVAL;
 503                         break;
 504                 }
 505                 nvbo = (void *)(unsigned long)bo[r->reloc_bo_index].user_priv;
 506
 507                 if (unlikely(r->reloc_bo_offset + 4 >
 508                              nvbo->bo.mem.num_pages << PAGE_SHIFT)) {
 509                         NV_ERROR(dev, "reloc outside of bo\n");
 510                         ret = -EINVAL;
 511                         break;
 512                 }
 513
 514                 if (!nvbo->kmap.virtual) {
 515                         ret = ttm_bo_kmap(&nvbo->bo, 0, nvbo->bo.mem.num_pages,
 516                                           &nvbo->kmap);
 517                         if (ret) {
 518                                 NV_ERROR(dev, "failed kmap for reloc\n");
 519                                 break;
 520                         }
 521                         nvbo->validate_mapped = true;
 522                 }
 523
 524                 if (r->flags & NOUVEAU_GEM_RELOC_LOW)
 525                         data = b->presumed.offset + r->data;
 526                 else
 527                 if (r->flags & NOUVEAU_GEM_RELOC_HIGH)
 528                         data = (b->presumed.offset + r->data) >> 32;
 529                 else
 530                         data = r->data;
 531
 532                 if (r->flags & NOUVEAU_GEM_RELOC_OR) {
 533                         if (b->presumed.domain == NOUVEAU_GEM_DOMAIN_GART)
 534                                 data |= r->tor;
 535                         else
 536                                 data |= r->vor;
 537                 }
 538
 539                 spin_lock(&nvbo->bo.bdev->fence_lock);
 540                 ret = ttm_bo_wait(&nvbo->bo, false, false, false);
 541                 spin_unlock(&nvbo->bo.bdev->fence_lock);
 542                 if (ret) {
 543                         NV_ERROR(dev, "reloc wait_idle failed: %d\n", ret);
 544                         break;
 545                 }
 546
 547                 nouveau_bo_wr32(nvbo, r->reloc_bo_offset >> 2, data);
 548         }
 549
 550         kfree(reloc);
 551         return ret;
 552 }
 553
 554 int
 555 nouveau_gem_ioctl_pushbuf(struct drm_device *dev, void *data,
 556                           struct drm_file *file_priv)
 557 {
 558         struct drm_nouveau_private *dev_priv = dev->dev_private;
 559         struct drm_nouveau_gem_pushbuf *req = data;
 560         struct drm_nouveau_gem_pushbuf_push *push;
 561         struct drm_nouveau_gem_pushbuf_bo *bo;
 562         struct nouveau_channel *chan;
 563         struct validate_op op;
 564         struct nouveau_fence *fence = NULL;
 565         int i, j, ret = 0, do_reloc = 0;
 566
 567         chan = nouveau_channel_get(dev, file_priv, req->channel);
 568         if (IS_ERR(chan))
 569                 return PTR_ERR(chan);
 570
 571         req->vram_available = dev_priv->fb_aper_free;
 572         req->gart_available = dev_priv->gart_info.aper_free;
 573         if (unlikely(req->nr_push == 0))
 574                 goto out_next;
 575
 576         if (unlikely(req->nr_push > NOUVEAU_GEM_MAX_PUSH)) {
 577                 NV_ERROR(dev, "pushbuf push count exceeds limit: %d max %d\n",
 578                          req->nr_push, NOUVEAU_GEM_MAX_PUSH);
 579                 nouveau_channel_put(&chan);
 580                 return -EINVAL;
 581         }
 582
 583         if (unlikely(req->nr_buffers > NOUVEAU_GEM_MAX_BUFFERS)) {
 584                 NV_ERROR(dev, "pushbuf bo count exceeds limit: %d max %d\n",
 585                          req->nr_buffers, NOUVEAU_GEM_MAX_BUFFERS);
 586                 nouveau_channel_put(&chan);
 587                 return -EINVAL;
 588         }
 589
 590         if (unlikely(req->nr_relocs > NOUVEAU_GEM_MAX_RELOCS)) {
 591                 NV_ERROR(dev, "pushbuf reloc count exceeds limit: %d max %d\n",
 592                          req->nr_relocs, NOUVEAU_GEM_MAX_RELOCS);
 593                 nouveau_channel_put(&chan);
 594                 return -EINVAL;
 595         }
 596
 597         push = u_memcpya(req->push, req->nr_push, sizeof(*push));
 598         if (IS_ERR(push)) {
 599                 nouveau_channel_put(&chan);
 600                 return PTR_ERR(push);
 601         }
 602
 603         bo = u_memcpya(req->buffers, req->nr_buffers, sizeof(*bo));
 604         if (IS_ERR(bo)) {
 605                 kfree(push);
 606                 nouveau_channel_put(&chan);
 607                 return PTR_ERR(bo);
 608         }
 609
 610         /* Mark push buffers as being used on PFIFO, the validation code
 611          * will then make sure that if the pushbuf bo moves, that they
 612          * happen on the kernel channel, which will in turn cause a sync
 613          * to happen before we try and submit the push buffer.
 614          */
 615         for (i = 0; i < req->nr_push; i++) {
 616                 if (push[i].bo_index >= req->nr_buffers) {
 617                         NV_ERROR(dev, "push %d buffer not in list\n", i);
 618                         ret = -EINVAL;
 619                         goto out;
 620                 }
 621
 622                 bo[push[i].bo_index].read_domains |= (1 << 31);
 623         }
 624
 625         /* Validate buffer list */
 626         ret = nouveau_gem_pushbuf_validate(chan, file_priv, bo, req->buffers,
 627                                            req->nr_buffers, &op, &do_reloc);
 628         if (ret) {
 629                 if (ret != -ERESTARTSYS)
 630                         NV_ERROR(dev, "validate: %d\n", ret);
 631                 goto out;
 632         }
 633
 634         /* Apply any relocations that are required */
 635         if (do_reloc) {
 636                 ret = nouveau_gem_pushbuf_reloc_apply(dev, req, bo);
 637                 if (ret) {
 638                         NV_ERROR(dev, "reloc apply: %d\n", ret);
 639                         goto out;
 640                 }
 641         }
 642
 643         if (chan->dma.ib_max) {
 644                 ret = nouveau_dma_wait(chan, req->nr_push + 1, 6);
 645                 if (ret) {
 646                         NV_INFO(dev, "nv50cal_space: %d\n", ret);
 647                         goto out;
 648                 }
 649
 650                 for (i = 0; i < req->nr_push; i++) {
 651                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 652                                 bo[push[i].bo_index].user_priv;
 653
 654                         nv50_dma_push(chan, nvbo, push[i].offset,
 655                                       push[i].length);
 656                 }
 657         } else
 658         if (dev_priv->chipset >= 0x25) {
 659                 ret = RING_SPACE(chan, req->nr_push * 2);
 660                 if (ret) {
 661                         NV_ERROR(dev, "cal_space: %d\n", ret);
 662                         goto out;
 663                 }
 664
 665                 for (i = 0; i < req->nr_push; i++) {
 666                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 667                                 bo[push[i].bo_index].user_priv;
 668                         struct drm_mm_node *mem = nvbo->bo.mem.mm_node;
 669
 670                         OUT_RING(chan, ((mem->start << PAGE_SHIFT) +
 671                                         push[i].offset) | 2);
 672                         OUT_RING(chan, 0);
 673                 }
 674         } else {
 675                 ret = RING_SPACE(chan, req->nr_push * (2 + NOUVEAU_DMA_SKIPS));
 676                 if (ret) {
 677                         NV_ERROR(dev, "jmp_space: %d\n", ret);
 678                         goto out;
 679                 }
 680
 681                 for (i = 0; i < req->nr_push; i++) {
 682                         struct nouveau_bo *nvbo = (void *)(unsigned long)
 683                                 bo[push[i].bo_index].user_priv;
 684                         struct drm_mm_node *mem = nvbo->bo.mem.mm_node;
 685                         uint32_t cmd;
 686
 687                         cmd = chan->pushbuf_base + ((chan->dma.cur + 2) << 2);
 688                         cmd |= 0x20000000;
 689                         if (unlikely(cmd != req->suffix0)) {
 690                                 if (!nvbo->kmap.virtual) {
 691                                         ret = ttm_bo_kmap(&nvbo->bo, 0,
 692                                                           nvbo->bo.mem.
 693                                                           num_pages,
 694                                                           &nvbo->kmap);
 695                                         if (ret) {
 696                                                 WIND_RING(chan);
 697                                                 goto out;
 698                                         }
 699                                         nvbo->validate_mapped = true;
 700                                 }
 701
 702                                 nouveau_bo_wr32(nvbo, (push[i].offset +
 703                                                 push[i].length - 8) / 4, cmd);
 704                         }
 705
 706                         OUT_RING(chan, ((mem->start << PAGE_SHIFT) +
 707                                         push[i].offset) | 0x20000000);
 708                         OUT_RING(chan, 0);
 709                         for (j = 0; j < NOUVEAU_DMA_SKIPS; j++)
 710                                 OUT_RING(chan, 0);
 711                 }
 712         }
 713
 714         ret = nouveau_fence_new(chan, &fence, true);
 715         if (ret) {
 716                 NV_ERROR(dev, "error fencing pushbuf: %d\n", ret);
 717                 WIND_RING(chan);
 718                 goto out;
 719         }
 720
 721 out:
 722         validate_fini(&op, fence);
 723         nouveau_fence_unref(&fence);
 724         kfree(bo);
 725         kfree(push);
 726
 727 out_next:
 728         if (chan->dma.ib_max) {
 729                 req->suffix0 = 0x00000000;
 730                 req->suffix1 = 0x00000000;
 731         } else
 732         if (dev_priv->chipset >= 0x25) {
 733                 req->suffix0 = 0x00020000;
 734                 req->suffix1 = 0x00000000;
 735         } else {
 736                 req->suffix0 = 0x20000000 |
 737                               (chan->pushbuf_base + ((chan->dma.cur + 2) << 2));
 738                 req->suffix1 = 0x00000000;
 739         }
 740
 741         nouveau_channel_put(&chan);
 742         return ret;
 743 }
 744
 745 static inline uint32_t
 746 domain_to_ttm(struct nouveau_bo *nvbo, uint32_t domain)
 747 {
 748         uint32_t flags = 0;
 749
 750         if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
 751                 flags |= TTM_PL_FLAG_VRAM;
 752         if (domain & NOUVEAU_GEM_DOMAIN_GART)
 753                 flags |= TTM_PL_FLAG_TT;
 754
 755         return flags;
 756 }
 757
 758 int
 759 nouveau_gem_ioctl_cpu_prep(struct drm_device *dev, void *data,
 760                            struct drm_file *file_priv)
 761 {
 762         struct drm_nouveau_gem_cpu_prep *req = data;
 763         struct drm_gem_object *gem;
 764         struct nouveau_bo *nvbo;
 765         bool no_wait = !!(req->flags & NOUVEAU_GEM_CPU_PREP_NOWAIT);
 766         int ret = -EINVAL;
 767
 768         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
 769         if (!gem)
 770                 return -ENOENT;
 771         nvbo = nouveau_gem_object(gem);
 772
 773         spin_lock(&nvbo->bo.bdev->fence_lock);
 774         ret = ttm_bo_wait(&nvbo->bo, true, true, no_wait);
 775         spin_unlock(&nvbo->bo.bdev->fence_lock);
 776         drm_gem_object_unreference_unlocked(gem);
 777         return ret;
 778 }
 779
 780 int
 781 nouveau_gem_ioctl_cpu_fini(struct drm_device *dev, void *data,
 782                            struct drm_file *file_priv)
 783 {
 784         return 0;
 785 }
 786
 787 int
 788 nouveau_gem_ioctl_info(struct drm_device *dev, void *data,
 789                        struct drm_file *file_priv)
 790 {
 791         struct drm_nouveau_gem_info *req = data;
 792         struct drm_gem_object *gem;
 793         int ret;
 794
 795         gem = drm_gem_object_lookup(dev, file_priv, req->handle);
 796         if (!gem)
 797                 return -ENOENT;
 798
 799         ret = nouveau_gem_info(gem, req);
 800         drm_gem_object_unreference_unlocked(gem);
 801         return ret;
 802 }
 803